str_mp4.js

function methodInBeat(invokeId, timestamp, methodName, executor) {
    var startTime = timestamp;
    var androidLogClz = Java.use("android.util.Log");
    var exceptionClz = Java.use("java.lang.Exception");
    var threadClz = Java.use("java.lang.Thread");
    var stackInfo = androidLogClz.getStackTraceString(exceptionClz.$new());
    console.log("------------start:" + invokeId + ",objectHash:" + executor + ",thread:" + threadClz.currentThread().getId() + ",timestamp:" + startTime + "---------------");
    console.log(methodName);
    console.log(stackInfo.substring(20));
    console.log("------------end:" + invokeId + ",usedtime:" + (new Date().getTime() - startTime) + "---------------\n");
};

//https://github.com/frida/frida/issues/503 bug补丁
function stringBuilderToStringPatch(stringBuilderObj) {
    var str = '';
    var length = stringBuilderObj.length();
    for (var i = 0; i < length; i++) {
        str += stringBuilderObj.charAt(i);
    }
    return str;
}

function getHead(str, len) {
    if (str.length > len) {
        return str.substring(0, len) + "......   length:" + str.length;
    } else {
        return str;
    }
}

var containRegExps = new Array(RegExp(/mp4/))

var notContainRegExps = new Array(RegExp(/\.jpg$/))

function check(stringJavaObject) {
    var str = stringJavaObject.toString();
    if (! (str && str.match)) {
        return false;
    }
    for (var i = 0; i < containRegExps.length; i++) {
        if (!str.match(containRegExps[i])) {
            return false;
        }
    }
    for (var i = 0; i < notContainRegExps.length; i++) {
        if (str.match(notContainRegExps[i])) {
            return false;
        }
    }
    return true;
}

Java.perform(function() {
    var androidLogClz = Java.use("android.util.Log");
    var exceptionClz = Java.use("java.lang.Exception");
    var java_lang_StringBuilder_clz = Java.use('java.lang.StringBuilder');
    var java_lang_StringBuilder_clz_toString_9ogt = java_lang_StringBuilder_clz.toString.overload();
    var java_lang_StringBuilder_clz_substring = java_lang_StringBuilder_clz.substring.overload('int', 'int');
    java_lang_StringBuilder_clz_toString_9ogt.implementation = function() {
        var thErr = undefined;
        var stringJavaObject = undefined;
        try {
            var startTime = new Date().getTime();
            stringJavaObject = java_lang_StringBuilder_clz_toString_9ogt.call(this);
            if (check(stringJavaObject)) {
                var headTxt = getHead(stringJavaObject, 500);
                var invokeId = Math.random().toString(36).slice( - 8);
                var executor = this.hashCode();
                methodInBeat(invokeId, startTime, "Detecting " + headTxt + " in stacks:", executor);
            }
        } catch(err) {
            thErr = err;
        } finally {
            if (thErr) {
                stringJavaObject = stringBuilderToStringPatch(this);
            }
            return stringJavaObject;
        }
    };

    var java_lang_StringBuffer_clz = Java.use('java.lang.StringBuffer');
    var java_lang_StringBuffer_clz_toString_9ogt = java_lang_StringBuffer_clz.toString.overload();
    java_lang_StringBuffer_clz_toString_9ogt.implementation = function() {
        var thErr = undefined;
        var stringJavaObject = undefined;
        try {
            var startTime = new Date().getTime();
            stringJavaObject = java_lang_StringBuffer_clz_toString_9ogt.call(this);
            if (check(stringJavaObject)) {
                var headTxt = getHead(stringJavaObject, 500);
                var invokeId = Math.random().toString(36).slice( - 8);
                var executor = this.hashCode();
                methodInBeat(invokeId, startTime, "Detecting " + headTxt + " in stacks:", executor);
            }

        } catch(err) {
            thErr = err;
        } finally {
            if (thErr) {
                stringJavaObject = stringBuilderToStringPatch(this);
            }
            return stringJavaObject;
        }
    };

    var java_lang_String_clz = Java.use('java.lang.String');

    var java_lang_String_clz_init_a8vt = java_lang_String_clz.$init.overload('[B', 'int', 'int', 'int');
    java_lang_String_clz_init_a8vt.implementation = function(v0, v1, v2, v3) {
        var stringJavaObject = undefined;
        var thErr = undefined;
        try {
            var startTime = new Date().getTime();
            ret = java_lang_String_clz_init_a8vt.call(this, v0, v1, v2, v3);
            if (check(stringJavaObject)) {
                var headTxt = getHead(stringJavaObject, 500);
                var invokeId = Math.random().toString(36).slice( - 8);
                var executor = this.hashCode();
                methodInBeat(invokeId, startTime, "Detecting " + headTxt + " in stacks:", executor);
            }
        } catch(err) {
            thErr = err;
        } finally {
            if (thErr) {
                throw exceptionClz.$new('' + thErr);
            }
            return stringJavaObject;
        }
    };

    var java_lang_String_clz_init_1fva = java_lang_String_clz.$init.overload('[B', 'int', 'int', 'java.nio.charset.Charset');
    java_lang_String_clz_init_1fva.implementation = function(v0, v1, v2, v3) {
        var stringJavaObject = undefined;
        var thErr = undefined;
        try {
            var startTime = new Date().getTime();
            stringJavaObject = java_lang_String_clz_init_1fva.call(this, v0, v1, v2, v3);
            if (check(stringJavaObject)) {
                var headTxt = getHead(stringJavaObject, 500);
                var invokeId = Math.random().toString(36).slice( - 8);
                var executor = this.hashCode();

                methodInBeat(invokeId, startTime, "Detecting " + headTxt + " in stacks:", executor);
            }
        } catch(err) {
            thErr = err;
        } finally {
            if (thErr) {
                throw exceptionClz.$new('' + thErr);
            }
            return stringJavaObject;
        }
    };
});