import frida,sys,time

def on_message(message ,data):
    print (message)


scr = """
//mono_image_open_from_data_with_name
Module = Process.findModuleByName("libmono.so");
addr = 0x17D4E2;
natviePointer =  Module.base.add(addr);
send("Module.base:"+ Module.base + " Module.size:"+ Module.size + " native pointers:" + natviePointer);
Interceptor.attach(natviePointer, {
    onEnter:function(args)  {
        filesize = Memory.readUInt(this.context.ebp.add(12));
        if(filesize == 3964556){
            buff = Memory.readPointer(this.context.ebp.add(8));
            buff = buff.add(0x6111E7);
            console.log(hexdump(buff, {length:32}))
            Memory.writeU32(buff,0x8201E)
            console.log(hexdump(buff, {length:32}))
            info = "filesize:"+ filesize;
            send(info)
        }
        
    }
});
"""