From 653ce0b613b0c9a020c66bc801c492d431c5b0d9 Mon Sep 17 00:00:00 2001 From: iGio90 Date: Thu, 24 Dec 2020 15:05:59 +0100 Subject: [PATCH] Squash a double change * Make early hook consistent for arm32 and x86 * Remove detachAll(), this was there because of my needed, I think it shouldn't be there --- README.md | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index ce5d89b..5629417 100644 --- a/README.md +++ b/README.md @@ -2246,17 +2246,14 @@ Process.findModuleByName('linker64').enumerateSymbols().forEach(sym => { } }) -Interceptor.attach(do_dlopen, function () { - var what = this.context['x0'].readUtf8String(); - if (what.indexOf(target_lib_name) >= 0) { +Interceptor.attach(do_dlopen, function (args) { + if (args[0].readUtf8String().indexOf(target_lib_name) >= 0) { Interceptor.attach(call_ctor, function () { - Interceptor.detachAll(); - console.log('loading target'); const module = Process.findModuleByName(target_lib_name); - - console.log(module.base); base = module.base; - // DoStuff + console.log('loading', target_lib_name, '- base @', base); + + // DoStuff }) } })