TODO

frida 监控

Java.perform(function () {
    var VMRuntime = Java.use('dalvik.system.VMRuntime');
    var runtime = VMRuntime.getRuntime();

    VMRuntime.newNonMovableArray.overload(
        'java.lang.Class',
        'int'
    ).implementation = function (cls, length) {
        var result = this.newNonMovableArray(cls, length);

        // 判断是否为大对象
        var threshold = 1024 * 1024; // 1MB
        var size = length * Java.use(cls).classSize.value;

        if (size >= threshold) {
            console.log(
                'Allocated large object: Class=' +
                    cls.getName() +
                    ', Size=' +
                    size +
                    ' bytes'
            );
        }

        return result;
    };
});