使用Pine hook MainActivity中onCreate 使用popupwindow在getWindow().getDecorView()上show一个window会hook失败

hook后log报错
1744740669.125 10835 6171 6171 E PineXposed: android.view.WindowManager$BadTokenException: Unable to add window -- token null is not valid; is your activity running?

完整log
1744740668.522 10835 6171 6171 I libc : SetHeapTaggingLevel: tag level set to 0
1744740668.533 10835 6171 6171 I u.lostx.Zafkiel: Late-enabling -Xcheck:jni
1744740668.744 10835 6171 6171 I MessageMonitor: Load libmiui_runtime
1744740668.869 10835 6171 6171 D CompatibilityChangeReporter: Compat change id reported: 171979766; UID 10835; state: DISABLED
1744740668.898 10835 6171 6171 D ApplicationLoaders: Returning zygote-cached class loader: /system/framework/android.test.base.jar
1744740668.901 10835 6171 6171 W ziparchive: Unable to open '/data/app/~~1p7XumAAtyuFfaAKCkEZjw==/icu.lostx.Zafkiel-0roKZYm_nCsD_ShXs9TROQ==/base.dm': No such file or directory
1744740668.901 10835 6171 6171 W ziparchive: Unable to open '/data/app/~~1p7XumAAtyuFfaAKCkEZjw==/icu.lostx.Zafkiel-0roKZYm_nCsD_ShXs9TROQ==/base.dm': No such file or directory
1744740668.918 10835 6171 6245 D AppScoutStateMachine: 6171-ScoutStateMachinecreated
1744740668.927 10835 6171 6171 V GraphicsEnvironment: ANGLE Developer option for 'icu.lostx.Zafkiel' set to: 'default'
1744740668.928 10835 6171 6171 V GraphicsEnvironment: ANGLE GameManagerService for icu.lostx.Zafkiel: false
1744740668.928 10835 6171 6171 V GraphicsEnvironment: App is not on the allowlist for updatable production driver.
1744740668.934 10835 6171 6171 I ForceDarkHelperStubImpl: initialize for icu.lostx.Zafkiel , ForceDarkOrigin
1744740668.935 10835 6171 6171 D u.lostx.Zafkiel: JNI_OnLoad success
1744740668.935 10835 6171 6171 I MiuiForceDarkConfig: setConfig density:2.750000, mainRule:0, secondaryRule:0, tertiaryRule:0
1744740668.936 10835 6171 6171 D NetworkSecurityConfig: No Network Security Config specified, using platform default
1744740668.937 10835 6171 6171 D NetworkSecurityConfig: No Network Security Config specified, using platform default
1744740668.943 10835 6171 6171 I Pine : Pine native init...
1744740668.973 10835 6171 6171 D Pine : Hooking method protected void icu.lostx.Zafkiel.MainActivity.onCreate(android.os.Bundle) with callback de.robv.android.xposed.XposedBridge$Handler@503d6e5
1744740668.973 10835 6171 6171 D Pine : Mapped new memory 0x75b21be000 (size 4096)
1744740668.974 10835 6171 6171 D Pine : InstallReplacementTrampoline: origin 0x74f9e33b08 origin_entry 0x7518a00090 bridge_jump 0x75b21be000
1744740668.974 10835 6171 6171 D Pine : Hooking method void android.view.ViewRootImpl.checkThread() with callback top.canyie.pine.callback.MethodReplacement$1@83a75ba
1744740668.974 10835 6171 6171 D Pine : InstallReplacementTrampoline: origin 0x70fd20f8 origin_entry 0x7518a00090 bridge_jump 0x75b21be0a0
1744740668.974 10835 6171 6171 D CompatibilityChangeReporter: Compat change id reported: 183155436; UID 10835; state: DISABLED
1744740668.982 10835 6171 6282 D libMEOW : meow new tls: 0x7506ce1500
1744740668.983 10835 6171 6282 D libMEOW : meow reload base cfg path: na
1744740668.983 10835 6171 6282 D libMEOW : meow reload overlay cfg path: na
1744740668.983 10835 6171 6282 W QT : qt_process_init() called
1744740668.983 10835 6171 6282 E QT : [QT]file does not exist
1744740668.983 10835 6171 6282 W QT : Support!!
1744740668.984 10835 6171 6282 E QT : [QT]file does not exist
1744740668.984 10835 6171 6282 D libMEOW : applied 1 plugins for [icu.lostx.Zafkiel]:
1744740668.984 10835 6171 6282 D libMEOW : plugin 1: [libMEOW_gift.so]:
1744740668.984 10835 6171 6282 D libMEOW : meow delete tls: 0x7506ce1500
1744740668.986 10835 6171 6171 D MiuiMultiWindowAdapter: MiuiMultiWindowAdapter::getFreeformVideoWhiteListInSystem::LIST_ABOUT_SUPPORT_LANDSCAPE_VIDEO = [com.hunantv.imgo.activity, com.tencent.qqlive, com.qiyi.video, com.hunantv.imgo.activity.inter, com.tencent.qqlivei18n, com.iqiyi.i18n, tv.danmaku.bili]
1744740669.002 10835 6171 6171 I Pine : handleBridge: artMethod=0x74f9e33b08 originExtras=0x750fc9f320 extras=0x750fc9f4a0 sp=0x7fc04843a0
1744740669.003 10835 6171 6171 D Pine : handleCall for method protected void icu.lostx.Zafkiel.MainActivity.onCreate(android.os.Bundle)
1744740669.024 10835 6171 6171 W libc : Access denied finding property "ro.vendor.df.effect.conflict"
1744740669.032 10835 6171 6171 D IS_CTS_MODE: false
1744740669.032 10835 6171 6171 D MULTI_WINDOW_ENABLED: false
1744740669.035 10835 6171 6171 D DecorView[]: getWindowModeFromSystem windowmode is 1
1744740669.049 10835 6171 6171 I MSYNC3-VariableRefreshRate: Variable refreshrate is disabled
1744740669.090 10835 6171 6171 D CompatibilityChangeReporter: Compat change id reported: 210923482; UID 10835; state: DISABLED
1744740669.090 10835 6171 6171 D CompatibilityChangeReporter: Compat change id reported: 37756858; UID 10835; state: ENABLED
1744740669.101 10835 6171 6171 I SurfaceFactory: [static] sSurfaceFactory = com.mediatek.view.impl.SurfaceFactoryImpl@557f172
1744740669.102 10835 6171 6306 I PowerHalWrapper: PowerHalWrapper.getInstance
1744740669.114 10835 6171 6171 D VRI[PopupWindow:a2f8e7d]: hardware acceleration = true, forceHwAccelerated = false
1744740669.114 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x7506f067a0 sp=0x7fc0483380
1744740669.114 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.123 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x7506f067a0 sp=0x7fc0483000
1744740669.123 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.124 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x7506f067a0 sp=0x7fc0483380
1744740669.124 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.125 10835 6171 6171 E PineXposed: android.view.WindowManager$BadTokenException: Unable to add window -- token null is not valid; is your activity running?
1744740669.125 10835 6171 6171 E PineXposed: at android.view.ViewRootImpl.setView(ViewRootImpl.java:1425)
1744740669.125 10835 6171 6171 E PineXposed: at android.view.WindowManagerGlobal.addView(WindowManagerGlobal.java:408)
1744740669.125 10835 6171 6171 E PineXposed: at android.view.WindowManagerImpl.addView(WindowManagerImpl.java:148)
1744740669.125 10835 6171 6171 E PineXposed: at android.widget.PopupWindow.invokePopup(PopupWindow.java:1581)
1744740669.125 10835 6171 6171 E PineXposed: at android.widget.PopupWindow.showAtLocation(PopupWindow.java:1347)
1744740669.125 10835 6171 6171 E PineXposed: at android.widget.PopupWindow.showAtLocation(PopupWindow.java:1313)
1744740669.125 10835 6171 6171 E PineXposed: at icu.lostx.Zafkiel.ImGUI.Widget.SimpleMessage.show(SimpleMessage.java:66)
1744740669.125 10835 6171 6171 E PineXposed: at icu.lostx.Zafkiel.Zafkiel$100000000.afterHookedMethod(Zafkiel.java:40)
1744740669.125 10835 6171 6171 E PineXposed: at de.robv.android.xposed.XposedBridge$Handler.afterCall(XposedBridge.java:367)
1744740669.125 10835 6171 6171 E PineXposed: at top.canyie.pine.Pine.handleCall(Pine.java:766)
1744740669.125 10835 6171 6171 E PineXposed: at top.canyie.pine.entry.Arm64Entry.handleBridge(Arm64Entry.java:158)
1744740669.125 10835 6171 6171 E PineXposed: at top.canyie.pine.entry.Arm64Entry.voidBridge(Arm64Entry.java:23)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.Activity.performCreate(Activity.java:8522)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.Activity.performCreate(Activity.java:8486)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1417)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:3783)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:3948)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.servertransaction.LaunchActivityItem.execute(LaunchActivityItem.java:101)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.servertransaction.TransactionExecutor.executeCallbacks(TransactionExecutor.java:135)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.servertransaction.TransactionExecutor.execute(TransactionExecutor.java:95)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2402)
1744740669.125 10835 6171 6171 E PineXposed: at android.os.Handler.dispatchMessage(Handler.java:106)
1744740669.125 10835 6171 6171 E PineXposed: at android.os.Looper.loopOnce(Looper.java:210)
1744740669.125 10835 6171 6171 E PineXposed: at android.os.Looper.loop(Looper.java:299)
1744740669.125 10835 6171 6171 E PineXposed: at android.app.ActivityThread.main(ActivityThread.java:8136)
1744740669.125 10835 6171 6171 E PineXposed: at java.lang.reflect.Method.invoke(Native Method)
1744740669.125 10835 6171 6171 E PineXposed: at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:580)
1744740669.125 10835 6171 6171 E PineXposed: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1028)
1744740669.147 10835 6171 6171 D VRI[MainActivity]: hardware acceleration = true, forceHwAccelerated = false
1744740669.147 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x7506f6eb20 sp=0x7fc0484380
1744740669.147 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.153 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x7506f6eb20 sp=0x7fc04840d0
1744740669.153 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.153 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x7506f6eb20 sp=0x7fc0484000
1744740669.153 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.155 10835 6171 6171 D libMEOW : meow new tls: 0x7506f9bbc0
1744740669.156 10835 6171 6171 D libMEOW : applied 1 plugins for [icu.lostx.Zafkiel]:
1744740669.156 10835 6171 6171 D libMEOW : plugin 1: [libMEOW_gift.so]:
1744740669.157 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x7506f6eb20 sp=0x7fc04843d0
1744740669.157 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.158 10835 6171 6171 W Looper : PerfMonitor looperActivity : package=icu.lostx.Zafkiel/.MainActivity time=0ms latency=315ms running=0ms procState=-1 historyMsgCount=4 (msgIndex=3 wall=110ms seq=3 late=28ms h=android.app.ActivityThread$H w=110) (msgIndex=4 wall=179ms seq=4 late=135ms h=android.app.ActivityThread$H w=159)
1744740669.158 10835 6171 6294 D ViewContentFactory: initViewContentFetcherClass
1744740669.158 10835 6171 6294 D ViewContentFactory: getInterceptorPackageInfo
1744740669.159 10835 6171 6294 D ViewContentFactory: getInitialApplication took 0ms
1744740669.159 10835 6171 6294 D ViewContentFactory: packageInfo.packageName: com.miui.catcherpatch
1744740669.181 10835 6171 6171 D BufferQueueConsumer: [](id:181b00000000,api:0,p:-1,c:6171) connect: controlledByApp=false
1744740669.183 10835 6171 6171 E FBI : Can't load library: dlopen failed: library "libmagtsync.so" not found
1744740669.186 10835 6171 6281 D libMEOW : meow new tls: 0x74ffef4f40
1744740669.186 10835 6171 6281 D libMEOW : applied 1 plugins for [icu.lostx.Zafkiel]:
1744740669.186 10835 6171 6281 D libMEOW : plugin 1: [libMEOW_gift.so]:
1744740669.187 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x7506f6ed00 sp=0x7fc0483890
1744740669.187 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.197 10835 6171 6294 D ViewContentFactory: initViewContentFetcherClass took 38ms
1744740669.197 10835 6171 6294 I ContentCatcher: ViewContentFetcher : ViewContentFetcher
1744740669.197 10835 6171 6294 D ViewContentFactory: createInterceptor took 39ms
1744740669.212 10835 6171 6281 W libc : Access denied finding property "vendor.migl.debug"
1744740669.212 10835 6171 6281 E libMiGL : libmigl:This GPU version is note support Variable Shading Rate
1744740669.215 10835 6171 6281 E libEGL : pre_cache appList: ,,
1744740669.277 10835 6171 6281 D u.lostx.Zafkiel: MiuiProcessManagerServiceStub setSchedFifo
1744740669.277 10835 6171 6281 I MiuiProcessManagerImpl: setSchedFifo pid:6171, mode:3
1744740669.315 10835 6171 6281 E libEGL : pre_cache appList: ,,
1744740669.395 10835 6171 6281 D BLASTBufferQueue: [VRI[MainActivity]#0](f:0,a:1) acquireNextBufferLocked size=1080x2460 mFrameNumber=1 applyTransaction=true mTimestamp=3510174273664990(auto) mPendingTransactions.size=0 graphicBufferId=26504243183619 transform=0
1744740669.413 10835 6171 6281 W Parcel : Expecting binder but got null!
1744740669.422 10835 6171 6171 I Pine : handleBridge: artMethod=0x70fd20f8 originExtras=0x750fc9f380 extras=0x75070224e0 sp=0x7fc0484060
1744740669.424 10835 6171 6171 D Pine : handleCall for method void android.view.ViewRootImpl.checkThread()
1744740669.445 10835 6171 6171 D DecorView[]: onWindowFocusChanged hasWindowFocus true
1744740669.445 10835 6171 6171 I HandWritingStubImpl: refreshLastKeyboardType: 1
1744740669.445 10835 6171 6171 I HandWritingStubImpl: getCurrentKeyboardType: 1
1744740669.461 10835 6171 6171 I HandWritingStubImpl: getCurrentKeyboardType: 1
1744740670.701 10835 6171 6171 D DecorView[]: onWindowFocusChanged hasWindowFocus false

机型为Redmi Note11T Pro+ Android版本13