unicorn icon indicating copy to clipboard operation
unicorn copied to clipboard
verified publisher icon unicorn-engine

support for ARM32 instruction hooking?

Open appleflyerv3 opened this issue 9 months ago • 8 comments

appleflyerv3 avatar May 08 '25 02:05 appleflyerv3

What do you mean by saying ARM32 instruction hooking?

wtdcode avatar May 08 '25 05:05 wtdcode

for example hook_add(unicorn.UC_HOOK_INSN, self._hook_instruction, None, 1, 0, unicorn.arm_const.UC_ARM_INS_MSR)

appleflyerv3 avatar May 08 '25 12:05 appleflyerv3

this is supported, no?

wtdcode avatar May 08 '25 15:05 wtdcode

nope, it doesnt work, as the variable unicorn.arm_const.UC_ARM_INS* doesnt exist. i assume this is because support hasnt been added for arm32 hooks yet.

appleflyerv3 avatar May 08 '25 15:05 appleflyerv3

although, it is supported for ARM64 where the constants unicorn.arm64_const.UC_ARM64_INS* exists

appleflyerv3 avatar May 09 '25 00:05 appleflyerv3

Hello, I confirm that this is not supported and it would interest me as well !

antcpl avatar May 09 '25 08:05 antcpl

Hello ! Any news about this ? Is it planned to be supported ?

antcpl avatar May 15 '25 08:05 antcpl

Yeah, but it might be a bit delayed. It is supposed to be supported.

wtdcode avatar May 16 '25 09:05 wtdcode