buildUserProfileIntent.js

//crack by com.smile.gifmaker 7.5.40.14691
//com.yxcorp.gifshow.profile.ProfilePluginImpl:buildUserProfileIntent
function loadDexfile(dexfile) {
    Java.perform(function() {
          Java.openClassFile(dexfile).load();
          console.log("load " + dexfile);
    });
};

function checkLoadDex(className, dexfile) {
    Java.perform(function() {
        if (!classExists(className)) {
            Java.openClassFile(dexfile).load();
            console.log("load " + dexfile);
        }
    });
};

function classExists(className) {
    var exists = false;
    try {
        var clz = Java.use(className);
        exists = true;
    } catch(err) {
        //console.log(err);
    }
    return exists;
};

function getClassName(obj) {
    if (obj.getClass) {
        return obj.getClass().getName();
    }
    var javaObject = Java.use("java.lang.Object");
    return Java.cast(obj, javaObject).getClass().getName();
}

//str1是否包含str2，str2可用正则表示
function contains(str1, str2) {
    var reg = RegExp(eval("/"+str2+"/"));
    if(str1 && str1.match && str1.match(reg)){
        return true;
    }else{
        return false;
    }
};

//创建ArrayList对象用这个方法就好了
function newArrayList() {
    var ArrayListClz = Java.use('java.util.ArrayList');
    return ArrayListClz.$new();
}

//创建HashSet对象用这个方法就好了
function newHashSet() {
    var HashSetClz = Java.use('java.util.HashSet');
    return HashSetClz.$new();
}

//创建HashMap对象用这个方法就好了
function newHashMap() {
    var HashMapClz = Java.use('java.util.HashMap');
    return HashMapClz.$new();
}

function methodInBeat(invokeId, timestamp, methodName, executor) {
	var startTime = timestamp;
    var androidLogClz = Java.use("android.util.Log");
    var exceptionClz = Java.use("java.lang.Exception");
    var threadClz = Java.use("java.lang.Thread");
    var currentThread = threadClz.currentThread();
    var stackInfo = androidLogClz.getStackTraceString(exceptionClz.$new());
    var str = ("------------startFlag:" + invokeId + ",objectHash:"+executor+",thread(id:" + currentThread.getId() +",name:" + currentThread.getName() + "),timestamp:" + startTime+"---------------\n");
    str += methodName + "\n";
    str += stackInfo.substring(20);
    str += ("------------endFlag:" + invokeId + ",usedtime:" + (new Date().getTime() - startTime) +"---------------\n");
	console.log(str);
};

function log(str) {
    console.log(str);
};

//虽然我们习惯用fastjson一行将对象转成json字符串，但是Android Library里面自带了一个gson可以做到 只是sdk没有暴露出来，很多人不知道。在frida中所有代码都是透明的，你随便调......
function toJson(javaObject) {
    var gsonClz = Java.use("com.google.gson.Gson");
    var toJsonMethod = gsonClz.toJson.overload("java.lang.Object");
    return toJsonMethod.call(gsonClz.$new(),javaObject);
};

function getBaseContext() {
    var currentApplication = Java.use('android.app.ActivityThread').currentApplication();
    var context = currentApplication.getApplicationContext();
    return context; //Java.scheduleOnMainThread(fn):
};

function sleep(time) {
    var startTime = new Date().getTime() + parseInt(time, 10);
    while(new Date().getTime() < startTime) {}
};


function loadXinitDexfile(dexfile) {
    loadDexfile('/data/user/0/com.smile.gifmaker/xinit/'+dexfile);
};

loadDexfile('/data/user/0/com.smile.gifmaker/radar.dex');

//com.yxcorp.gifshow.profile.ProfilePluginImpl:buildUserProfileIntent
Java.perform(function() {
    var JSONClz = Java.use("gz.com.alibaba.fastjson.JSON");
    
    var com_yxcorp_gifshow_profile_ProfilePluginImpl_clz = Java.use('com.yxcorp.gifshow.profile.ProfilePluginImpl');
    var com_yxcorp_gifshow_profile_ProfilePluginImpl_clz_method_buildUserProfileIntent_wxhw = com_yxcorp_gifshow_profile_ProfilePluginImpl_clz.buildUserProfileIntent.overload('com.yxcorp.gifshow.activity.GifshowActivity', 'k.a.a.t5.f0.m0.h');
    com_yxcorp_gifshow_profile_ProfilePluginImpl_clz_method_buildUserProfileIntent_wxhw.implementation = function(v0, v1) {
        log(JSONClz.toJSONString(v1));
        var invokeId = Math.random().toString(36).slice( - 8);
        var startTime = new Date().getTime();
        var executor = this.hashCode();
        var ret = com_yxcorp_gifshow_profile_ProfilePluginImpl_clz_method_buildUserProfileIntent_wxhw.call(this, v0, v1);
        methodInBeat(invokeId, startTime, 'private android.content.Intent com.yxcorp.gifshow.profile.ProfilePluginImpl.buildUserProfileIntent(com.yxcorp.gifshow.activity.GifshowActivity,k.a.a.t5.f0.m0.h)', executor);
        return ret;
    };
});