我是逆向工程的新手,我在frida中需要一些帮助。
以下功能使用上下文作为参数。我需要获取返回值。
private final String getActiveMCCMNC(Context context) {
Object systemService = context.getSystemService("phone");
if (systemService != null) {
String simOperator = ((TelephonyManager) systemService).getSimOperator();
String str = "";
if (simOperator != null && (!Intrinsics.areEqual((Object) simOperator, (Object) ""))) {
try {
StringBuilder sb = new StringBuilder();
sb.append("");
String substring = simOperator.substring(0, 3);
Intrinsics.checkExpressionValueIsNotNull(substring, "(this as java.lang.Strin…ing(startIndex, endIndex)");
sb.append(substring);
String sb2 = sb.toString();
StringBuilder sb3 = new StringBuilder();
sb3.append(sb2);
sb3.append(HelpFormatter.DEFAULT_OPT_PREFIX);
String substring2 = simOperator.substring(3);
Intrinsics.checkExpressionValueIsNotNull(substring2, "(this as java.lang.String).substring(startIndex)");
sb3.append(substring2);
str = sb3.toString();
} catch (NumberFormatException e) {
e.printStackTrace();
}
}
return !TextUtils.isEmpty(str) ? str : "";
}
throw new TypeCastException("null cannot be cast to non-null type android.telephony.TelephonyManager");
}
我在一些文章的帮助下尝试过,但是我遇到了一些错误。
Java.perform(function x(){
console.log("Inside java perform function");
var my_class = Java.use("util.PlayerDeviceIdentifier")
var context = Java.use('android.app.ActivityThread').currentApplication().getApplicationContext();
// context.getActiveMCCMNC.implementation = function(){
// console.log(this.val)
// } // tried with context
my_class.getActiveMCCMNC.implementation = function(){
console.log(this.val)
}
})
如何执行它并获得返回值?
我知道您想挂钩一个函数以便检查它返回的值。您无需为此担心Context参数。您需要检索它才能进行自定义呼叫,但我觉得这不是您想要的。
尝试这样的事情:
Java.perform(function() {
var my_class = Java.use("util.PlayerDeviceIdentifier");
my_class.getActiveMCCMNC.implementation = function (context) {
var value = this.getActiveMCCMNC(context);
// then do what you want with the returned value
return value;
};
});