frida 追踪 com.unity3d.services.ads.UnityAdsImplementation类

以下是使用 Frida 追踪 Unity Ads SDK 中 `UnityAdsImplementation` 类的示例脚本：

import frida

def on_message(message, data):
    print("[on_message] message:", message)

def main():
    session = frida.attach("your.package.name")
    script = session.create_script("""
        Java.perform(function() {
            var className = "com.unity3d.services.ads.UnityAdsImplementation";
            var classHandle = Java.use(className);

            // Hook UnityAdsImplementation.init()
            classHandle.init.overload("android.app.Activity", "java.lang.String", "boolean", "boolean").implementation = function(activity, gameId, testMode, debugMode) {
                console.log("[info] UnityAdsImplementation.init() called with gameId: " + gameId);
                return this.init(activity, gameId, testMode, debugMode);
            };

            // Hook UnityAdsImplementation.load()
            classHandle.load.overload("java.lang.String").implementation = function(placementId) {
                console.log("[info] UnityAdsImplementation.load() called with placementId: " + placementId);
                return this.load(placementId);
            };

            // Hook UnityAdsImplementation.show()
            classHandle.show.overload("java.lang.String").implementation = function(placementId) {
                console.log("[info] UnityAdsImplementation.show() called with placementId: " + placementId);
                return this.show(placementId);
            };
        });
    """)
    script.on('message', on_message)
    script.load()
    sys.stdin.read()

if __name__ == '__main__':
    main()

该脚本使用了 Frida 的 Java API，通过 `Java.use()` 方法获取了 `com.unity3d.services.ads.UnityAdsImplementation` 类的句柄，并分别 hook 了它的 `init()`、`load()` 和 `show()` 方法，以追踪这些方法的调用及其参数。你可以根据自己的需求修改脚本，以实现更高级的功能。