frida-rcs-hack/scripts/spoof_phone.js

class Log {
    static TAG = '[Phone]'
    static Debug = true
    static format(...msg) {
        let m = []
        for (let i = 0; i < msg.length; i++) {
            if (typeof msg[i] === 'object') {
                m.push(JSON.stringify(msg[i]))
            } else {
                m.push(msg[i])
            }
        }
        m = m.join(' ')
        return m
    }
    static i(...msg) {
        if (!this.Debug) return
        console.log(`\x1b[30m${this.TAG} ${this.format(...msg)}\x1b[0m`)
    }
    static w(...msg) {
        console.log(`\x1b[33m${this.TAG} ${this.format(...msg)}\x1b[0m`)
    }
    static e(...msg) {
        console.log(`\x1b[31m${this.TAG} ${this.format(...msg)}\x1b[0m`)
    }
    static s(...msg) {
        console.log(`\x1b[32m${this.TAG} ${this.format(...msg)}\x1b[0m`)
    }
}

function trace(tag) {
    Log.e((tag || '') + Java.use('android.util.Log').getStackTraceString(Java.use('java.lang.Throwable').$new()))
}

setImmediate(() => {
    Java.perform(function () {
        const SmsController = Java.use('com.android.internal.telephony.SmsController')
        Log.i('SmsController:', SmsController)
        SmsController.sendTextForSubscriber.overload(
            // int subId, String callingPackage,
            // String callingAttributionTag, String destAddr, String scAddr, String text,
            // PendingIntent sentIntent, PendingIntent deliveryIntent,
            // boolean persistMessageForNonDefaultSmsApp, long messageId
            'int',
            'java.lang.String',
            'java.lang.String',
            'java.lang.String',
            'java.lang.String',
            'java.lang.String',
            'android.app.PendingIntent',
            'android.app.PendingIntent',
            'boolean',
            'long'
        ).implementation = function (
            subId,
            callingPackage,
            callingAttributionTag,
            destAddr,
            scAddr,
            text,
            sentIntent,
            deliveryIntent,
            persistMessageForNonDefaultSmsApp,
            messageId
        ) {
            Log.i('sendTextForSubscriber', subId, callingPackage, callingAttributionTag, destAddr, scAddr, text)
            return this.sendTextForSubscriber(
                subId,
                callingPackage,
                callingAttributionTag,
                destAddr,
                scAddr,
                text,
                sentIntent,
                deliveryIntent,
                persistMessageForNonDefaultSmsApp,
                messageId
            )
        }

        const RcsFeatureConnection = Java.use('com.android.ims.RcsFeatureConnection')
        Log.i('RcsFeatureConnection:', RcsFeatureConnection)
        const RcsFeatureManager = Java.use('com.android.ims.RcsFeatureManager')
        Log.i('RcsFeatureManager:', RcsFeatureManager)

        const PhoneGlobals = Java.use('com.android.phone.PhoneGlobals')
        Log.i('PhoneGlobals:', PhoneGlobals)

        const RcsProvisioningMonitor = Java.use('com.android.phone.RcsProvisioningMonitor')
        Log.i('RcsProvisioningMonitor:', RcsProvisioningMonitor)

        RcsProvisioningMonitor.requestReconfig.overload('int').implementation = function (subId) {
            Log.i('requestReconfig', subId)
            return this.requestReconfig(subId)
        }
    })
})