Frida demo

gistfile1.txt

var bin = Process.enumerateModulesSync()[0]
Module.enumerateSymbolsSync(bin.name)

Interceptor.attach(ptr(0x10368deb0),{
    onEnter(args){
        console.log("The function add is invoke")
        console.log("Arg 0", args[0].toInt32())
        console.log("Arg 1", args[1].toInt32())
    }
})


Interceptor.attach(ptr(0x10c0bceb0),{
    onEnter(args){
        console.log("The function add is invoke")
        console.log("Arg 0", args[0].toInt32())
        console.log("Arg 1", args[1].toInt32())
    },
    onLeave(retval){
        return retval.replace(10)
    }
})



var add = Module.findExportByName(null, 'add');
Interceptor.replace(add, new NativeCallback(function (arg1,arg2) {
    console.log(arg1,arg2)
    return arg1 * arg2;
}, 'int', ['int', 'int']));