frida-node/examples/calling_functions.ts

import frida from "frida";

const [, , processName, processAddress] = process.argv;

const source = `
const fn = new NativeFunction(ptr('@ADDRESS@'), 'void', ['int']);

rpc.exports = {
  callFunction(n) {
    return fn(n);
  }
};
`;

async function main() {
    const session = await frida.attach(processName);

    const script = await session.createScript(source.replace("@ADDRESS@", processAddress));
    script.message.connect(message => {
        console.log("[*] Message:", message);
    });
    await script.load();
    console.log("[*] Script loaded");

    const api = script.exports;
    await api.callFunction(1);
    await api.callFunction(2);
    await api.callFunction(3);
    console.log("[*] Function called three times");

    await script.unload();
    console.log("[*] Script unloaded");
}

main()
    .catch(e => {
        console.error(e);
    });