import frida
import sys

def on_message(message, data):
    try:
        if message:
            print("[log] {0}".format(message["payload"]))
    except Exception as e:
        print(message)
        print(e)

def do_hook():
    hook = """
    if(ObjC.available) {
        send("Ready to frida!");
    } else {
        console.log("Objective-C Runtime is not available!");
    }
    """

    return hook

if __name__ == '__main__' :
    PACKAGE_NAME = "com.xxx.yyy"
    try :
        print ("[log] devices info : {}".format(frida.get_device_manager().enumerate_devices()))
        device = frida.get_device_manager().enumerate_devices()[-1]

        pid = device.spawn([PACKAGE_NAME])
        print ("[log] {} is starting. (pid : {})".format(PACKAGE_NAME, pid))

        session = device.attach(pid)
        device.resume(pid)

        script = session.create_script(do_hook())
        script.on('message', on_message)
        script.load()
        sys.stdin.read()
    except KeyboardInterrupt:
        sys.exit(0)

def do_hook():
    hook = """
    if(ObjC.available) {
        var class_checker = ObjC.classes.ColorChecker;
        var methods_checker = class_checker.$ownMethods;
        methods_checker.forEach(function(m) {
            send(m);
        });
    } else {
        console.log("Objective-C Runtime is not available!");
    }
    """

    return hook

def do_hook():
    hook = """
    if(ObjC.available) {
        var class_checker = ObjC.classes.ColorChecker;
        var methods_checker = class_checker.$ownMethods;
        var isApplication = class_checker['- isApplication'];

        Interceptor.attach(isApplication.implementation, {
            onEnter: function(args) {
                var target = new ObjC.Object(args[0]);
                var sel = ObjC.selectorAsString(args[1]);
                send("Target class : " + target.$className);
                send("Target selector : " + sel);
            },
            onLeave: function(retVal) {
                send("Old return : " + retVal);
                retVal.replace("0");
                send("New return : " + retVal);
            }
        });
    } else {
        console.log("Objective-C Runtime is not available!");
    }
    """

    return hook

def do_hook():
    hook = """
    if(ObjC.available) {
        var mallocPtr = Module.findExportByName('libsystem_c.dylib', 'malloc');
        var malloc = new NativeFunction(mallocPtr, 'pointer', ['int']);
        Interceptor.replace(mallocPtr, new NativeCallback(function (size) {
        var location = malloc(size)
        send("Allocated " + size + " bytes in " + location);
        return location;
    }, 'pointer', ['int']));

    } else {
        console.log("Objective-C Runtime is not available!");
    }
    """

    return hook