search

jmpews / Dobby

a lightweight, multi-platform, multi-architecture hook framework.
Apache License 2.0
3.93k stars 809 forks source link

hook IOS simulator app is wrong, but sometimes it's right! #90

Closed hulovebin closed 3 years ago

hulovebin commented 4 years ago

origin call Code in case of error -> 0x1171fa020: pushq %rbp 0x1171fa021: movq %rsp, %rbp 0x1171fa024: subq $0xd0, %rsp 0x1171fa02b: testb %al, %al 0x1171fa02d: pcmpeqb (%rdi), %mm4 0x1171fa030: sti
0x1171fa031: divl %edx 0x1171fa033: jmpq *(%rip)

origin call Fun correct code -> 0x1171fa020: pushq %rbp 0x1171fa021: movq %rsp, %rbp 0x1171fa024: subq $0xd0, %rsp 0x1171fa02b: testb %al, %al 0x1171fa02d: pcmpeqb (%rdi), %mm4 0x1171fa030: jmp 0x1171fa033 0x1171fa032: rep
0x1171fa033: jmpq *(%rip) 0x1171fa039: xorb %cl, 0x10a21(%rbx)