-
Notifications
You must be signed in to change notification settings - Fork 3
/
fak.txt
29 lines (22 loc) · 1.22 KB
/
fak.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
uintptr_t base = getBaseAddress(process);
task_dyld_info_data_t info = getInfoAddress(process);
struct dyld_all_image_infos* infos;
// infos = xprocess_read(process, info.all_image_info_addr, info.all_image_info_size);
unsigned int _result_size;
vm_read(process,
info.all_image_info_addr,
info.all_image_info_size,
(vm_offset_t*)&infos,
&_result_size);
size_t infoCount = infos->infoArrayCount;
for (size_t i = 0; i < infoCount; ++i) {
struct dyld_image_info *info;
unsigned int _result_size2;
vm_protect(process, (vm_offset_t*)&infos->infoArray[i], sizeof(struct dyld_image_info), 0,VM_PROT_READ);
vm_read(process,
(vm_offset_t*)&infos->infoArray[i],
sizeof(struct dyld_image_info),
(vm_offset_t*)&info,
&_result_size2);
printf("%s %p\n", info->imageFilePath, &infos->infoArray[i]);
}