handleLoadPackage() not called for app using appComponentFactory

[agnostic-apollo]

Steps to reproduce/复现步骤

1. Create a xposed module for an app that uses AndroidManifestApplication_appComponentFactory, like for androidx.core.app.CoreComponentFactory.
2. Launch app.

Expected behaviour/预期行为

handleLoadPackage() gets called.

Actual behaviour/实际行为

handleLoadPackage() not called before appComponentFactory class of the app is loaded, so methods cannot be hooked. Is hooking methods supported so early on?

• https://cs.android.com/android/platform/superproject/+/android-11.0.0_r1:frameworks/base/core/java/android/app/LoadedApk.java;l=256

Xposed Module List/Xposed 模块列表

Custom xposed module `dev.agnosticapollo.foo` for `com.foo` app.

Root implementation/Root 方案

Magisk 29

System Module List/系统模块列表

Zygisk-LSPosed

LSPosed version/LSPosed 版本

v1.10.2 (7199) 0e457e3

Android version/Android 版本

.

Version requirement/版本要求

• I am using the latest debug build from GitHub Actions./我正在使用 GitHub Actions 中最新的调试版本。

Logs/日志

Stacktrace without xposed module.

at androidx.core.app.CoreComponentFactory.<clinit>
at java.lang.Class.newInstance(Native Method)
at android.app.LoadedApk.createAppFactory(LoadedApk.java:260)
at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:902)
at android.app.LoadedApk.getClassLoader(LoadedApk.java:982)
at android.app.LoadedApk.getResources(LoadedApk.java:1214)
at android.app.ContextImpl.createAppContext(ContextImpl.java:2663)
at android.app.ContextImpl.createAppContext(ContextImpl.java:2655)
at android.app.ActivityThread.handleBindApplication(ActivityThread.java:6602)
at android.app.ActivityThread.access$1300(ActivityThread.java:237)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1913)
at android.os.Handler.dispatchMessage(Handler.java:106)
at android.os.Looper.loop(Looper.java:223)
at android.app.ActivityThread.main(ActivityThread.java:7664)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:592)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:947)

Stacktrace with xposed module.

at androidx.core.app.CoreComponentFactory.<clinit>
at java.lang.Class.newInstance(Native Method)
at android.app.LoadedApk.createAppFactory(LoadedApk.java:260)
at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:902)
at java.lang.reflect.Method.invoke(Native Method)
at q.ChkgI.s.cAxrIL.ZL.p.aVdg.dG.HookBridge.invokeOriginalMethod(Native Method)
at org.lsposed.lspd.impl.LSPosedBridge$NativeHooker.callback(r8-map-id-262c2e0ff89d3cc5bb25cad9c304996a61abc774558320706d02f16a4c7c9177:190)
at LSPHooker_.createOrUpdateClassLoaderLocked(Unknown Source:11)
at android.app.LoadedApk.getClassLoader(LoadedApk.java:982)
at android.app.LoadedApk.getResources(LoadedApk.java:1214)
at android.app.ContextImpl.createAppContext(ContextImpl.java:2663)
at android.app.ContextImpl.createAppContext(ContextImpl.java:2655)
at android.app.ActivityThread.handleBindApplication(ActivityThread.java:6602)
at android.app.ActivityThread.access$1300(ActivityThread.java:237)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1913)
at android.os.Handler.dispatchMessage(Handler.java:106)
at android.os.Looper.loop(Looper.java:223)
at android.app.ActivityThread.main(ActivityThread.java:7664)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:592)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:947)

Logcat logs. Note sure which elf is triggering Compressed data is corrupt error or why.

LSPosed                 I Loading xposed for com.foo/xxxxx
LSPosed-Bridge          I Loading legacy module dev.agnosticapollo.foo from ...
com.foo                 W  Unsupported class loader
com.foo                 W  Could not establish class loader context
LSPosed-Bridge I        Loading class dev.agnosticapollo.foo.xposed.XposedModule
dev.agnosticapollo.foo  I  initZygote
LSPosed                 E  Compressed data is corrupt
<CoreComponentFactory is called here>

[JingMatrix]

There seems to be error is you LSPosed logs, please upload the complete logs of debug build.

[agnostic-apollo]

I was using release build before, I didn't know it didn't have debug info with verbose logs enabled. Following is the log after hooked app is started, I cleared the log before I started it. Hopefully that's enough, if you need logs from earlier in the boot, let me know. Note that initZygote does get called for xposed module app, but not handleLoadPackage().

[ 2025-12-15T00:00:00.000     1000:  1139:  1587 D/LSPosed         ] LoadedApk#<init> starts: pkg=null, prc=null
[ 2025-12-15T00:00:00.000     1000:  1139:  1587 D/LSPosed         ] LoadedApk#<init> ends: /data/app/~~RpsBQnroLEP4B2a4JbtExg==/com.foo-WFrOyV-kC3Sre8lRgX4qDA==/base.apk: pkg=null, prc=null
[ 2025-12-15T00:00:00.000     1000:  1139:  1674 I/LSPosed-Bridge  ] [ INFO] 12-15 22:50:07 (PlatformCompatHook) force mount data: 10323 com.foo
[ 2025-12-15T00:00:00.000        0: 28409: 28409 I/Dobby           ] ================================
[ 2025-12-15T00:00:00.000        0: 28409: 28409 I/Dobby           ] Dobby
[ 2025-12-15T00:00:00.000        0: 28409: 28409 I/Dobby           ] dobby in debug log mode, disable with cmake flag "-DDOBBY_DEBUG=OFF"
[ 2025-12-15T00:00:00.000        0: 28409: 28409 I/Dobby           ] ================================
[ 2025-12-15T00:00:00.000     1000:  1139:  1587 D/LSPosed-Bridge  ] onTransact: action=ACTION_GET_BINDER, callingUid=10323, callingPid=28409
[ 2025-12-15T00:00:00.000        0:  1365: 29068 D/LSPosedService  ] returned service
[ 2025-12-15T00:00:00.000        0:  1365: 29068 D/LSPosedService  ] register ProcessInfo{uid=10323, pid=28409, processName='com.foo', heartBeat=android.os.BinderProxy@7392dc}
[ 2025-12-15T00:00:00.000     1000:  1139:  1587 D/LSPosed-Bridge  ] got binder is android.os.BinderProxy@99be23e
[ 2025-12-15T00:00:00.000        0:  1365: 29068 D/LSPosedService  ] LSPApplicationService.onTransact: code=1310096052
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] service.cpp:359#std::tuple<int, size_t> lspd::Service::RequestLSPDex(JNIEnv *, const ScopedLocalRef<jobject> &): fd=45, size=1155752
[ 2025-12-15T00:00:00.000        0:  1365: 29068 D/LSPosedService  ] LSPApplicationService.onTransact: code=724533732
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] service.cpp:389#std::map<std::string, std::string> lspd::Service::RequestObfuscationMap(JNIEnv *, const ScopedLocalRef<jobject> &): android.app.AndroidApp => D.iX.AXJHXBev.cPUaeAH.
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] service.cpp:389#std::map<std::string, std::string> lspd::Service::RequestObfuscationMap(JNIEnv *, const ScopedLocalRef<jobject> &): android.content.res.XModule => mJ.Zd.E.tsCsxjwJP.kCLfIhjj.
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] service.cpp:389#std::map<std::string, std::string> lspd::Service::RequestObfuscationMap(JNIEnv *, const ScopedLocalRef<jobject> &): android.content.res.XRes => l.hbJmY.A.flisOsBlnPGiG.
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] service.cpp:389#std::map<std::string, std::string> lspd::Service::RequestObfuscationMap(JNIEnv *, const ScopedLocalRef<jobject> &): de.robv.android.xposed. => oOlA.m.ga.mToyr.fH.DKV.
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] service.cpp:389#std::map<std::string, std::string> lspd::Service::RequestObfuscationMap(JNIEnv *, const ScopedLocalRef<jobject> &): org.lsposed.lspd.core. => Qswf.ro.djpLyuzjUsBUh.
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] service.cpp:389#std::map<std::string, std::string> lspd::Service::RequestObfuscationMap(JNIEnv *, const ScopedLocalRef<jobject> &): org.lsposed.lspd.nativebridge. => pk.osSceTEGvpSyh.SIBrzHPpKYeB.
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] service.cpp:389#std::map<std::string, std::string> lspd::Service::RequestObfuscationMap(JNIEnv *, const ScopedLocalRef<jobject> &): org.lsposed.lspd.service. => D.yBSAw.KTMi.QzgcjtgMIGU.
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] context.cpp:40#lspd::Context::PreloadedDex::PreloadedDex(int, std::size_t): Context::PreloadedDex::PreloadedDex: fd=45, size=1155752
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPlant         ] art_method.cxx:232: ArtMethod size: 40
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPlant         ] art_method.cxx:286: ArtMethod::declaring_class offset: 0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPlant         ] art_method.cxx:287: ArtMethod::entrypoint offset: 32
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPlant         ] art_method.cxx:288: ArtMethod::data offset: 24
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPlant         ] art_method.cxx:289: ArtMethod::access_flags offset: 4
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:427#bool SandHook::ElfImg::findModuleBase(): Found 4 filtered map entries for libart.so:
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:429#bool SandHook::ElfImg::findModuleBase():   0x7b033ce000 r--p /apex/com.android.art/lib64/libart.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:429#bool SandHook::ElfImg::findModuleBase():   0x7b034f8000 r-xp /apex/com.android.art/lib64/libart.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:429#bool SandHook::ElfImg::findModuleBase():   0x7b03a64000 r--p /apex/com.android.art/lib64/libart.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:429#bool SandHook::ElfImg::findModuleBase():   0x7b03a75000 rw-p /apex/com.android.art/lib64/libart.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:440#bool SandHook::ElfImg::findModuleBase(): Found `r--p` -> `r-xp` pattern. Choosing base from `r--p` block at 0x7b033ce000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:466#bool SandHook::ElfImg::findModuleBase(): get module base /apex/com.android.art/lib64/libart.so: 0x7b033ce000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:467#bool SandHook::ElfImg::findModuleBase(): update path: /apex/com.android.art/lib64/libart.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:91#void SandHook::ElfImg::parse(Elf64_Ehdr *): dynsym header 0x2a8 size 138576
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:112#void SandHook::ElfImg::parse(Elf64_Ehdr *): strtab header 0x2d3ec size 378924
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:103#void SandHook::ElfImg::parse(Elf64_Ehdr *): symtab header 0x6a8eb0 size 641784 found in orgin elf
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:368#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3artL15GetMethodShortyEP7_JNIEnvP10_jmethodID 0x49d560 in /apex/com.android.art/lib64/libart.so in symtab by linear lookup
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art9ArtMethod12PrettyMethodEPS0_b 0x1aa09c in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art6Thread14CurrentFromGdbEv 0x5b855c in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art6mirror5Class13GetDescriptorEPNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE 0x473250 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art6mirror5Class11GetClassDefEv 0x47a7bc in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art6mirror5Class9SetStatusENS_6HandleIS1_EENS_11ClassStatusEPNS_6ThreadE 0x473f7c in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] native_api.h:62#int lspd::HookInline(void *, void *, void **): Dobby hooking _ZN3art6mirror5Class9SetStatusENS_6HandleIS1_EENS_11ClassStatusEPNS_6ThreadE (0x7b03841f7c) from /apex/com.android.art/lib64/libart.so (0x7b033ce000)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ----- [DobbyHook:0x7b03841f7c] -----
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [trampoline] use [adrp, add, br]
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [memory allocator] allocate exec memory at: 0x7d970f8000, size: 0x1c
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] origin 0x7b03841f7c - 12
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8302d1fd7b04a9fc6f05a9
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] relocated 0x7d970f8000 - 28
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8302d1fd7b04a9fc6f05a95100005820021fd6881f84037b000000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [intercept routing] active
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art7Runtime9instance_E 0x6ab6e0 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPlant         ] runtime.cxx:60: runtime instance = 0xb400007c13aa3680
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art7Runtime17SetJavaDebuggableEb 0x56a678 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art11ClassLinker30ShouldUseInterpreterEntrypointEPNS_9ArtMethodEPKv 0x1d6020 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] native_api.h:62#int lspd::HookInline(void *, void *, void **): Dobby hooking _ZN3art11ClassLinker30ShouldUseInterpreterEntrypointEPNS_9ArtMethodEPKv (0x7b035a4020) from /apex/com.android.art/lib64/libart.so (0x7b033ce000)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ----- [DobbyHook:0x7b035a4020] -----
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [trampoline] use [adrp, add, br]
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [memory allocator] allocate exec memory at: 0x7d970f801c, size: 0x1c
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] origin 0x7b035a4020 - 12
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] fd7bbca9f85f01a9f65702a9
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] relocated 0x7d970f801c - 28
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] fd7bbca9f85f01a9f65702a95100005820021fd62c405a037b000000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [intercept routing] active
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art11ClassLinker22FixupStaticTrampolinesENS_6ObjPtrINS_6mirror5ClassEEE 0x1bfe04 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] native_api.h:62#int lspd::HookInline(void *, void *, void **): Dobby hooking _ZN3art11ClassLinker22FixupStaticTrampolinesENS_6ObjPtrINS_6mirror5ClassEEE (0x7b0358de04) from /apex/com.android.art/lib64/libart.so (0x7b033ce000)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ----- [DobbyHook:0x7b0358de04] -----
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [trampoline] use [adrp, add, br]
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [memory allocator] allocate exec memory at: 0x7d970f8038, size: 0x1c
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] origin 0x7b0358de04 - 12
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8303d1fd7b08a9fc6f09a9
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] relocated 0x7d970f8038 - 28
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8303d1fd7b08a9fc6f09a95100005820021fd610de58037b000000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [intercept routing] active
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art9ArtMethod14RegisterNativeEPKv 0x1a8df0 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] native_api.h:62#int lspd::HookInline(void *, void *, void **): Dobby hooking _ZN3art9ArtMethod14RegisterNativeEPKv (0x7b03576df0) from /apex/com.android.art/lib64/libart.so (0x7b033ce000)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ----- [DobbyHook:0x7b03576df0] -----
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [trampoline] use [adrp, add, br]
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [memory allocator] allocate exec memory at: 0x7d970f8054, size: 0x1c
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] origin 0x7b03576df0 - 12
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8301d1fd7b03a9f65704a9
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] relocated 0x7d970f8054 - 28
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8301d1fd7b03a9f65704a95100005820021fd6fc6d57037b000000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [intercept routing] active
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art9ArtMethod16UnregisterNativeEv 0x1a8f7c in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] native_api.h:62#int lspd::HookInline(void *, void *, void **): Dobby hooking _ZN3art9ArtMethod16UnregisterNativeEv (0x7b03576f7c) from /apex/com.android.art/lib64/libart.so (0x7b033ce000)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ----- [DobbyHook:0x7b03576f7c] -----
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [trampoline] use [adrp, add, br]
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [memory allocator] allocate exec memory at: 0x7d970f8070, size: 0x1c
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] origin 0x7b03576f7c - 12
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8301d1fd7b03a9f52300f9
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] relocated 0x7d970f8070 - 28
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8301d1fd7b03a9f52300f95100005820021fd6886f57037b000000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [intercept routing] active
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:368#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art11ClassLinker26VisiblyInitializedCallback29AdjustThreadVisibilityCounterEPNS_6ThreadEl 0x1ef734 in /apex/com.android.art/lib64/libart.so in symtab by linear lookup
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] native_api.h:62#int lspd::HookInline(void *, void *, void **): Dobby hooking (unknown symbol) (0x7b035bd734) from /apex/com.android.art/lib64/libart.so (0x7b033ce000)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ----- [DobbyHook:0x7b035bd734] -----
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [trampoline] use [adrp, add, br]
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [memory allocator] allocate exec memory at: 0x7d970f808c, size: 0x1c
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] origin 0x7b035bd734 - 12
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff4303d1fd7b07a9fc6f08a9
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] relocated 0x7d970f808c - 28
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff4303d1fd7b07a9fc6f08a95100005820021fd640d75b037b000000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [intercept routing] active
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZNK3art11ClassLinker27SetEntryPointsToInterpreterEPNS_9ArtMethodE 0x1ebc94 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPlant         ] class_linker.cxx:218: art_quick_to_interpreter_bridge = 0x0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art16ScopedSuspendAllC2EPKcb 0x5c8d24 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art16ScopedSuspendAllD2Ev 0x5c8d38 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art2gc23ScopedGCCriticalSectionC2EPNS_6ThreadENS0_7GcCauseENS0_13CollectorTypeE 0x2b3f6c in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art2gc23ScopedGCCriticalSectionD2Ev 0x2b3fa8 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art3jit12JitCodeCache18MoveObsoleteMethodEPNS_9ArtMethodES3_ 0x34ac14 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art3jit12JitCodeCache19GarbageCollectCacheEPNS_6ThreadE 0x34bb00 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] native_api.h:62#int lspd::HookInline(void *, void *, void **): Dobby hooking _ZN3art3jit12JitCodeCache19GarbageCollectCacheEPNS_6ThreadE (0x7b03719b00) from /apex/com.android.art/lib64/libart.so (0x7b033ce000)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ----- [DobbyHook:0x7b03719b00] -----
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [trampoline] use [adrp, add, br]
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [memory allocator] allocate exec memory at: 0x7d970f80a8, size: 0x1c
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] origin 0x7b03719b00 - 12
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8303d1fd7b08a9fc6f09a9
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] relocated 0x7d970f80a8 - 28
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ff8303d1fd7b08a9fc6f09a95100005820021fd60c9b71037b000000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [intercept routing] active
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3art3jit3Jit27EnqueueOptimizedCompilationEPNS_9ArtMethodEPNS_6ThreadE 0x341738 in /apex/com.android.art/lib64/libart.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] native_api.h:62#int lspd::HookInline(void *, void *, void **): Dobby hooking _ZN3art3jit3Jit27EnqueueOptimizedCompilationEPNS_9ArtMethodEPNS_6ThreadE (0x7b0370f738) from /apex/com.android.art/lib64/libart.so (0x7b033ce000)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] ----- [DobbyHook:0x7b0370f738] -----
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [trampoline] use [adrp, add, br]
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [memory allocator] allocate exec memory at: 0x7d970f80c4, size: 0x1c
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] origin 0x7b0370f738 - 12
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] fd7bbda9f65701a9f44f02a9
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [insn relocate] relocated 0x7d970f80c4 - 28
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] fd7bbda9f65701a9f44f02a95100005820021fd644f770037b000000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/Dobby           ] [intercept routing] active
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:368#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN3artL18DexFile_setTrustedEP7_JNIEnvP7_jclassP8_jobject 0x4a5108 in /apex/com.android.art/lib64/libart.so in symtab by linear lookup
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPlant         ] common.cxx:111: java runtime debuggable false
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] resources_hook.cpp:56#std::string lspd::GetXResourcesClassName(): l/hbJmY/A/flisOsBlnPGiG/ources
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] magisk_loader.cpp:187#void lspd::MagiskLoader::OnNativeForkAndSpecializePost(JNIEnv *, jstring, jstring): Done prepare
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] deoptimizing public android.app.Application android.app.Instrumentation.newApplication(java.lang.ClassLoader,java.lang.String,android.content.Context) throws java.lang.InstantiationException,java.lang.IllegalAccessException,java.lang.ClassNotFoundException: pkg=null, prc=null
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] deoptimizing public android.app.Application android.app.LoadedApk.makeApplication(boolean,android.app.Instrumentation): pkg=null, prc=null
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] deoptimizing public java.io.File android.app.ContextImpl.getSharedPreferencesPath(java.lang.String): pkg=null, prc=null
[ 2025-12-15T00:00:00.000        0:  1365: 29068 D/LSPosedService  ] LSPApplicationService.onTransact: code=1
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/LSPosed         ] Loading xposed for com.foo/10323
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] startBootstrapHook starts: isSystem = false
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = void java.lang.Thread.dispatchUncaughtException(java.lang.Throwable)(0x6f73b558), hook = void LSPHooker_.dispatchUncaughtException(java.lang.Object, java.lang.Object)(0x7af97c8128), backup = void LSPHooker_.backup(java.lang.Object, java.lang.Object)(0x7af97c8100)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 0, address = 7d96fd7000, target = 7d96fd7000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd7000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x6f73b558:0x2080011) -> 0x7d96fd7000; backup(0x7af97c8100:0x2080012) -> 0x6f9fd060; hook(0x7af97c8128:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 661us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = java.lang.Object dalvik.system.DexFile.openDexFile(java.lang.String, java.lang.String, int, java.lang.ClassLoader, dalvik.system.DexPathList$Element[])(0x6f805278), hook = java.lang.Object LSPHooker_.openDexFile(java.lang.Object, java.lang.Object, int, java.lang.Object, java.lang.Object)(0x7af9671178), backup = java.lang.Object LSPHooker_.backup(java.lang.Object, java.lang.Object, int, java.lang.Object, java.lang.Object)(0x7af9671150)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 1, address = 7d96fd7000, target = 7d96fd7018
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd7018
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x6f805278:0x208000a) -> 0x7d96fd7018; backup(0x7af9671150:0x208000a) -> 0x6fc9d470; hook(0x7af9671178:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 382us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = java.lang.Object dalvik.system.DexFile.openInMemoryDexFiles(java.nio.ByteBuffer[], java.lang.ClassLoader, dalvik.system.DexPathList$Element[])(0x6f8052c8), hook = java.lang.Object LSPHooker_.openInMemoryDexFiles(java.lang.Object, java.lang.Object, java.lang.Object)(0x7af642b128), backup = java.lang.Object LSPHooker_.backup(java.lang.Object, java.lang.Object, java.lang.Object)(0x7af642b100)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 2, address = 7d96fd7000, target = 7d96fd7030
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd7030
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x6f8052c8:0x208000a) -> 0x7d96fd7030; backup(0x7af642b100:0x4208000a) -> 0x6f9fd060; hook(0x7af642b128:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 322us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] class.cxx:50: Backup deoptimized method 0x7af9671150 because of initialization
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] class_linker.cxx:121: re-deoptimize for 0x7af9671150
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] class.cxx:50: Backup deoptimized method 0x7af642b100 because of initialization
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] class_linker.cxx:121: re-deoptimize for 0x7af642b100
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = void android.app.LoadedApk.<init>(android.app.ActivityThread, android.content.pm.ApplicationInfo, android.content.res.CompatibilityInfo, java.lang.ClassLoader, boolean, boolean, boolean)(0x70482458), hook = void LSPHooker_.constructor(java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object, boolean, boolean, boolean)(0x7af640b178), backup = void LSPHooker_.backup(java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object, boolean, boolean, boolean)(0x7af640b150)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 3, address = 7d96fd7000, target = 7d96fd7048
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd7048
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x70482458:0x2090001) -> 0x7d96fd7048; backup(0x7af640b150:0x2090002) -> 0x7109e2b0; hook(0x7af640b178:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 530us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = void android.app.LoadedApk.createOrUpdateClassLoaderLocked(java.util.List)(0x70482660), hook = void LSPHooker_.createOrUpdateClassLoaderLocked(java.lang.Object, java.lang.Object)(0x7af63eb128), backup = void LSPHooker_.backup(java.lang.Object, java.lang.Object)(0x7af63eb100)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 4, address = 7d96fd7000, target = 7d96fd7060
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd7060
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x70482660:0x2080002) -> 0x7d96fd7060; backup(0x7af63eb100:0x2080002) -> 0x7109ecb0; hook(0x7af63eb128:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 340us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = void android.app.ActivityThread.attach(boolean, long)(0x708296f8), hook = void LSPHooker_.attach(java.lang.Object, boolean, long)(0x7af63cb190), backup = void LSPHooker_.backup(java.lang.Object, boolean, long)(0x7af63cb1b8)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 5, address = 7d96fd7000, target = 7d96fd7078
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd7078
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x708296f8:0x2000002) -> 0x7d96fd7078; backup(0x7af63cb1b8:0x2000002) -> 0x7117ba80; hook(0x7af63cb190:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 353us
[ 2025-12-15T00:00:00.000        0:  1365: 29068 D/LSPosedService  ] LSPApplicationService.onTransact: code=2
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/LSPosed-Bridge  ] Loading legacy module dev.agnosticapollo.foo from /data/app/~~FoHrlyOrOQdSIjKVoC_gSQ==/dev.agnosticapollo.foo-MYxYuKTD6muXZm7OZKbCqQ==/base.apk
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 I/LSPosed-Bridge  ]   Loading class dev.agnosticapollo.foo.xposed.XposedModule
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] resources_hook.cpp:56#std::string lspd::GetXResourcesClassName(): l/hbJmY/A/flisOsBlnPGiG/ources
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:427#bool SandHook::ElfImg::findModuleBase(): Found 4 filtered map entries for libandroidfw.so:
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:429#bool SandHook::ElfImg::findModuleBase():   0x7d946c8000 r--p /system/lib64/libandroidfw.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:429#bool SandHook::ElfImg::findModuleBase():   0x7d946f6000 r-xp /system/lib64/libandroidfw.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:429#bool SandHook::ElfImg::findModuleBase():   0x7d94732000 r--p /system/lib64/libandroidfw.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:429#bool SandHook::ElfImg::findModuleBase():   0x7d94735000 rw-p /system/lib64/libandroidfw.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:440#bool SandHook::ElfImg::findModuleBase(): Found `r--p` -> `r-xp` pattern. Choosing base from `r--p` block at 0x7d946c8000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:466#bool SandHook::ElfImg::findModuleBase(): get module base /system/lib64/libandroidfw.so: 0x7d946c8000
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:467#bool SandHook::ElfImg::findModuleBase(): update path: /system/lib64/libandroidfw.so
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:91#void SandHook::ElfImg::parse(Elf64_Ehdr *): dynsym header 0x2a8 size 25560
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:112#void SandHook::ElfImg::parse(Elf64_Ehdr *): strtab header 0x86e4 size 64446
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:124#void SandHook::ElfImg::parse(Elf64_Ehdr *): gnu_debugdata header 0x6c592 size 7684
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 E/LSPosed         ] Compressed data is corrupt
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN7android12ResXMLParser4nextEv 0x52f58 in /system/lib64/libandroidfw.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZN7android12ResXMLParser7restartEv 0x52f28 in /system/lib64/libandroidfw.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZNK7android12ResXMLParser18getAttributeNameIDEm 0x53408 in /system/lib64/libandroidfw.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] elf_util.cpp:362#Elf64_Addr SandHook::ElfImg::getSymbOffset(std::string_view, uint32_t, uint32_t) const: found _ZNK7android13ResStringPool8stringAtEmPm 0x524a4 in /system/lib64/libandroidfw.so in dynsym by gnuhash
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = android.content.res.Resources android.app.ApplicationPackageManager.getResourcesForApplication(android.content.pm.ApplicationInfo)(0x704ce570), hook = java.lang.Object LSPHooker_.getResourcesForApplication(java.lang.Object, java.lang.Object)(0x7af638b128), backup = java.lang.Object LSPHooker_.backup(java.lang.Object, java.lang.Object)(0x7af638b100)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 6, address = 7d96fd7000, target = 7d96fd7090
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd7090
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x704ce570:0x12080001) -> 0x7d96fd7090; backup(0x7af638b100:0x12080002) -> 0x711a2290; hook(0x7af638b128:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 469us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = android.content.res.Resources android.app.ResourcesManager.createResources(android.os.IBinder, android.content.res.ResourcesKey, java.lang.ClassLoader, android.app.ResourcesManager$ApkAssetsSupplier)(0x70485ea8), hook = java.lang.Object LSPHooker_.createResources(java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object)(0x7af58e6128), backup = java.lang.Object LSPHooker_.backup(java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object)(0x7af58e6100)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 7, address = 7d96fd7000, target = 7d96fd70a8
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd70a8
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x70485ea8:0x2080002) -> 0x7d96fd70a8; backup(0x7af58e6100:0x2080002) -> 0x6f9fd060; hook(0x7af58e6128:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 319us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = android.content.res.TypedArray android.content.res.TypedArray.obtain(android.content.res.Resources, int)(0x704a2760), hook = java.lang.Object LSPHooker_.obtain(java.lang.Object, int)(0x7af58c6178), backup = java.lang.Object LSPHooker_.backup(java.lang.Object, int)(0x7af58c6150)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 8, address = 7d96fd7000, target = 7d96fd70c0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd70c0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x704a2760:0x2080008) -> 0x7d96fd70c0; backup(0x7af58c6150:0x2080008) -> 0x71105da0; hook(0x7af58c6178:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 312us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = android.view.View android.view.LayoutInflater.inflate(org.xmlpull.v1.XmlPullParser, android.view.ViewGroup, boolean)(0x706ca3a0), hook = java.lang.Object LSPHooker_.inflate(java.lang.Object, java.lang.Object, java.lang.Object, boolean)(0x7af033a178), backup = java.lang.Object LSPHooker_.backup(java.lang.Object, java.lang.Object, java.lang.Object, boolean)(0x7af033a150)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 9, address = 7d96fd7000, target = 7d96fd70d8
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd70d8
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x706ca3a0:0x12080001) -> 0x7d96fd70d8; backup(0x7af033a150:0x12080002) -> 0x715a2460; hook(0x7af033a178:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 318us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:533: Hooking: target = void android.view.LayoutInflater.parseInclude(org.xmlpull.v1.XmlPullParser, android.content.Context, android.view.View, android.util.AttributeSet)(0x706ca148), hook = void LSPHooker_.parseInclude(java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object)(0x7aee839128), backup = void LSPHooker_.backup(java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object, java.lang.Object)(0x7aee839100)
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:514: trampoline: count = 10, address = 7d96fd7000, target = 7d96fd70f0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:540: Generated trampoline 0x7d96fd70f0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] lsplant.cc:550: Done hook: target(0x706ca148:0x2080002) -> 0x7d96fd70f0; backup(0x7aee839100:0x2080002) -> 0x7159fd60; hook(0x7aee839128:0x10080009) -> 0x7b0350afa0
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPosed         ] hook_bridge.cpp:86#lspd::Java_org_lsposed_lspd_nativebridge_HookBridge_hookMethod(JNIEnv *, jclass, jboolean, jobject, jclass, jint, jobject)::finally::~finally(): New hook took 292us
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] magisk_loader.cpp:191#void lspd::MagiskLoader::OnNativeForkAndSpecializePost(JNIEnv *, jstring, jstring): injected xposed into com.foo
[ 2025-12-15T00:00:00.000        0:  1365: 29068 D/LSPosedService  ] LSPApplicationService.onTransact: code=3
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] class.cxx:50: Backup deoptimized method 0x7af58c6150 because of initialization
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 V/LSPlant         ] class_linker.cxx:121: re-deoptimize for 0x7af58c6150
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] LoadedApk#<init> starts: pkg=com.foo, prc=com.foo
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 D/LSPosed         ] LoadedApk#<init> ends: /data/app/~~RpsBQnroLEP4B2a4JbtExg==/com.foo-WFrOyV-kC3Sre8lRgX4qDA==/base.apk: pkg=com.foo, prc=com.foo
[ 2025-12-15T00:00:00.000    10323: 28409: 28409 E/AndroidRuntime  ] FATAL EXCEPTION: main
Process: com.foo, PID: 28409
...
	at androidx.core.app.CoreComponentFactory.<clinit>
	at java.lang.Class.newInstance(Native Method)
	at android.app.LoadedApk.createAppFactory(LoadedApk.java:260)
	at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:902)
	at java.lang.reflect.Method.invoke(Native Method)
	at pk.osSceTEGvpSyh.SIBrzHPpKYeB.HookBridge.invokeOriginalMethod(Native Method)
	at org.lsposed.lspd.impl.LSPosedBridge$NativeHooker.callback(LSPosedBridge.java:157)
	at LSPHooker_.createOrUpdateClassLoaderLocked(Unknown Source:11)
	at android.app.LoadedApk.getClassLoader(LoadedApk.java:982)
	at android.app.LoadedApk.getResources(LoadedApk.java:1214)
	at android.app.ContextImpl.createAppContext(ContextImpl.java:2663)
	at android.app.ContextImpl.createAppContext(ContextImpl.java:2655)
	at android.app.ActivityThread.handleBindApplication(ActivityThread.java:6602)
	at android.app.ActivityThread.access$1300(ActivityThread.java:237)
	at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1913)
	at android.os.Handler.dispatchMessage(Handler.java:106)
	at android.os.Looper.loop(Looper.java:223)
	at android.app.ActivityThread.main(ActivityThread.java:7664)
	at java.lang.reflect.Method.invoke(Native Method)
	at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:592)
	at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:947)
[ 2025-12-15T00:00:00.000        0:  1365: 29068 D/LSPosedService  ] ProcessInfo{uid=10323, pid=28409, processName='com.foo', heartBeat=android.os.BinderProxy@7392dc} is dead