In Android debugging, you will often see this type of function:
The first is a pointer plus a number, such as v3+676. The address is then invoked as a method pointer, and the first parameter is the pointer itself, such as (v3+676) (V3 ...). This is actually the JNIEnv method we often use in JNI. Because IDA does not automatically recognize these methods, when we debug the so file we often see that it is not clear what this function is doing, because the function is too abstract. The workaround is very simple and only requires a type conversion of the jnienv pointer. For example, with the V3 pointer mentioned above, we select and click the "Y" key, then declare the type as "jnienv*".
Ida will then automatically find the corresponding method and display it:
Is the moment clear a lot? Others (seemingly on the Snow Forum) also summed up the numbers, addresses, and method declarations for all jnienv methods:
Ida Restore Jni Function method name