package com.example.fridatest;import android.support.v7.app.ActionBarActivity;
import android.support.v7.app.ActionBar;
import android.support.v4.app.Fragment;
import android.app.Activity;
import android.os.Bundle;
import android.util.Log;
import android.view.LayoutInflater;
import android.view.Menu;
import android.view.MenuItem;
import android.view.View;
import android.view.View.OnClickListener;
import android.view.ViewGroup;
import android.widget.Button;
import android.widget.Toast;
import android.os.Build;public class MainActivity extends Activity {Button myButton1;@Overrideprotected void onCreate(Bundle savedInstanceState) {super.onCreate(savedInstanceState);setContentView(R.layout.fragment_main);myButton1 = (Button) findViewById(R.id.button1);myButton1.setOnClickListener( new ButtonClick());}class ButtonClick implements OnClickListener {public void onClick(View v) {switch (v.getId()) {case R.id.button1:int nRet = test(4);String strRet = nRet + "";Toast.makeText(MainActivity.this, strRet,Toast.LENGTH_LONG).show();break;default:break;}}}public int test(int num){int nRet = num*2;return nRet;}
}

import frida
import sysscr = """
Java.perform(function () {
var be= Java.use("com.example.fridatest.MainActivity");
send(typeof(be));
send(typeof(be.test));
send("start")
be.test.implementation = function(){var type = arguments[0];send("start")send("type="+type);if (type == 4){return this.test(5);}else{return 5;}};
send("end")
});
"""rdev = frida.get_usb_device(20)
session = rdev.attach("com.example.fridatest")
script = session.create_script(scr)fp = open("D:/log.txt","w") def on_message(message, data):type = message["type"]msg = messageif type == "send":msg = message["payload"]elif type == 'error':msg = message['stack']    print(msg)        script.on('message', on_message)
script.load()
sys.stdin.read()

scr = """
Java.perform(function () {
var be= Java.use("com.tencent.mm.sdk.platformtools.be");
send(typeof(be));
send(typeof(be.tx));
send("start")
be.tx.implementation = function(){var type = arguments[0];send("start")send("type="+type);return 5;
};
send("end")
});
"""