function hookart(){

    var baseAddr = Module.findBaseAddress("/apex/com.android.runtime/lib/libart.so");

    //var baseAddr = Module.findExportByName(null,"_ZN3art12_GLOBAL__N_18CheckJNI12NewStringUTFEP7_JNIEnvPKc");

    console.log("Art",baseAddr)

    Interceptor.attach(baseAddr.add(0x2C8581),

        {

            onEnter: function (args)

            {

                //console.log("NewString:" + args[1].readCString());

                if((args[1].readCString() == "不对!再探再报" || args[1].readCString() == "祝贺,闯关顺利")){

                    console.log(args[1].readCString(),args[1]);

                    var mainAddr = Module.findBaseAddress("libcrackme.so");

                    console.log("Return Addr:" + (this.context as any).lr.sub(mainAddr));

                    console.log(' called from:\n' +

                            Thread.backtrace(this.context, Backtracer.ACCURATE)

                            .map(DebugSymbol.fromAddress).join('\n') + '\n');

                    for(var i=0;i<64;i++){

                        if((this.context as any).sp.add(i*4).readPointer().sub(mainAddr).toUInt32() < 0x50000){

                            console.warn("[!!]"+(this.context as any).sp.add(i*4).readPointer(),(this.context as any).sp.add(i*4).readPointer().sub(mainAddr));

                        }

                        else{

                            console.log((this.context as any).sp.add(i*4).readPointer(),(this.context as any).sp.add(i*4).readPointer().sub(mainAddr));

                        }

                    }

                    console.log(hexdump(args[1].add(0xe0),{

                        offset:0,

                        length:128,

                        header:true,

                        ansi:true

                    }));

                    console.log(JSON.stringify(this.context));

                    console.log(hexdump(this.context.sp.sub(0),{

                        offset:0,

                        length:128,

                        header:true,

                        ansi:true

                    }));

                    memset_log = false;

                    mylogfile.close();

                    //debugger;

                }

            },

            onLeave: function (ret)

            {

            }

        }

    );

}

function hookGeneral(targetAddr:NativePointer,baseAddr:NativePointer){

    Interceptor.attach(targetAddr,{

        onEnter:function(args){

            var mylog = "";

            console.log("[Hook General]" +JSON.stringify(this.context))

            mylog += "[Hook General]" + JSON.stringify(this.context) +"\n";

            mylogfile.write(mylog);

            mylogfile.flush();

            Thread.sleep(3);

        },onLeave:function(ret){

        }

    });  

}

function hook2DFC9(targetAddr:NativePointer,baseAddr:NativePointer){

    Interceptor.attach(targetAddr,{

        onEnter:function(args){

            var mylog = "";

            console.log("[2DFC9]" +(this.context)['r8'])

            mylog += "[2DFC9]" +(this.context)['r8'] +"\n";

            mylogfile.write(mylog);

            mylogfile.flush();

            //Thread.sleep(1000);

        },onLeave:function(ret){

        }

    });  

}

function hook2E447(targetAddr:NativePointer,baseAddr:NativePointer){

    Interceptor.attach(targetAddr,{

        onEnter:function(args){

            var mylog = "";

            console.log((this.context)['r11'].readDouble() + " " + (this.context)['d9']);

            //Thread.sleep(1000);

        },onLeave:function(ret){

        }

    });  

}

function hook2C9A4(targetAddr:NativePointer,baseAddr:NativePointer){

    Interceptor.attach(targetAddr,{

        onEnter:function(args){

            var mylog = "";

            console.log("" + (this.context)['r4'] +" "+ (this.context)['r3'] +" "+ (this.context)['r1'] +" "+ (this.context)['r0'] +" ");

            mylog += "" + (this.context)['r4'] +" "+ (this.context)['r3'] +" "+ (this.context)['r1'] +" "+ (this.context)['r0'] +"\n";

            mylogfile.write(mylog);

            mylogfile.flush();

            //Thread.sleep(1000);

        },onLeave:function(ret){

        }

    });  

}

function hook(baseAddr:NativePointer){

    console.log("Hooking");

    hook2C9A4(baseAddr.add(0x2c9a4),baseAddr);

    hookGeneral(baseAddr.add(0x2cfb9),baseAddr);

    // hook2E447(baseAddr.add(0x2e447),baseAddr);

    // hook2DFC9(baseAddr.add(0x2dfc9),baseAddr);

}