console.log("Script loaded successfully ");
Java.perform(function x() {
    console.log("Inside java perform function");
    //定位类
    var my_class = Java.use("com.droidlearn.activity_travel.FlagActivity"); 
    console.log("Java.Use.Successfully!");
    //在这里更改类的方法的实现（implementation）
    my_class.access$004.implementation = function (x){
        //打印替换前的参数
        my_class.access$004.call(this,x);
        x.cnt.value = x.cnt.value+11000;
        console.log("Successfully!");
        console.log(x.cnt.value);
        
        console.log("after flag")
        return x.cnt.value;
    }
    var access$000 = my_class.access$000;
    access$000.implementation = function(x){
        console.log(x.cnt.value);
        return access$000.call(this,x);
    }

    var Toast = Java.use("android.widget.Toast");
    var makeText = Toast.makeText;
    var String = Java.use("java.lang.String");
    // 函数重载, 设置参数类型
    makeText.overload("android.content.Context", "java.lang.CharSequence", "int").implementation = function (
      context,
      content,
      time
    ) {
      console.log(content);
      // 设置字符串重复次数
      var content = "wsxk yyds!\n".repeat(10);
      // 实例化字符串
      var hookContent = String.$new(content);
      // 可以hook, 但是不能打断原先的程序, 原来该做什么, 还要继续做下去
      //return this.makeText(context, hookContent, time);
      return makeText.call(this,context,hookContent,time);
    };
});

console.log("Script loaded successfully ");
Java.perform(() => {
    // Function to hook is defined here
    const MainActivity = Java.use('com.tencent.testvuln.MainActivity');
  
    // Whenever button is clicked
    const onClick = MainActivity.onClick;
    onClick.implementation = function (v) {
      // Show a message to know that the function got called
      send('onClick');
  
      // Call the original onClick handler
      onClick.call(this, v);
  
  
      // Log to the console that it's done, and we should have the flag!
      console.log('Done:' + JSON.stringify(this.cnt));
    };
  });