Vector (3043) not hooking into "android" package, is it supposed to happen?

[AwaisKing]

hello,

i'm trying to develop this app with modern api (101) and trying to hook useLayoutWithDefault method in com.android.internal.app.ResolverActivity class in android package, but it won't attach/hook.

am i doing something wrong or is it supposed to be doing that with modern API? cause it used to work with legacy (rovo89) Xposed hooks

here's the sample code:

public class Xposer extends XposedModule {
    @Override
    public void onSystemServerStarting(@NonNull final SystemServerStartingParam param) {
        super.onSystemServerStarting(param);

        if (true) Log.i(TAG, "onSystemServerStarting: " + param + " -- " + param.getClassLoader()); // shows info in logs

        try {
            final Class<?> aClass = param.getClassLoader().loadClass("com.android.internal.app.ResolverActivity");
            Log.i(TAG, "----> aClass: " + aClass); // logs the class, it exists
            final Method useLayoutWithDefault = aClass.getDeclaredMethod("useLayoutWithDefault");
            Log.i(TAG, "----> useLayoutWithDefault: " + useLayoutWithDefault); // logs the method, it exists
            
            deoptimize(useLayoutWithDefault); // tried with and without "deoptimize", still doesn't hook
            hook(useLayoutWithDefault).setPriority(PRIORITY_HIGHEST).intercept(chain -> {
                if (true) {
                    final Object thisObject = chain.getThisObject();
                    Log.i(TAG, "thisObject: " + thisObject);
                }

                return chain.proceed();
            });
        } catch (Throwable e) {
            // ignore
        }
    }
}

am i missing something?
any help is appreciated, thank you!

[JingMatrix]

Have you tried setting system as target instead of android ?

[AwaisKing]

yes, either hook or intercept doesn't work
i'm not sure what to do, it worked with legacy code on Vector with API 100, but modern API doesn't

[AwaisKing]

tried with only system selected in scope, changed a little code as well... nothing works...

code:

   @Override
    public void onSystemServerStarting(@NonNull final SystemServerStartingParam param) {
        super.onSystemServerStarting(param);

        if (true) Log.i(TAG, "onSystemServerStarting: " + param + " -- " + param.getClassLoader());



        try {
            final Class<?> aClass = param.getClassLoader().loadClass("com.android.internal.app.ResolverActivity");
            Log.i(TAG, "----> aClass: " + aClass);
            final Method onCreate = aClass.getDeclaredMethod("onCreate", Bundle.class);
            Log.i(TAG, "----> onCreate 1: " + onCreate);
            if (!onCreate.isAccessible()) onCreate.setAccessible(true);
            deoptimize(onCreate);
            final HookHandle hookHandle = hook(onCreate).setPriority(PRIORITY_HIGHEST).intercept(chain -> {
                if (true) {
                    final Object thisObject = chain.getThisObject();

                    Log.i(TAG, "thisObject: " + thisObject);
                }

                return chain.proceed();
            });
            Log.i(TAG, "----> hookHandle: " + hookHandle);
        } catch (Throwable e) {
            Log.e(TAG, "", e);
        }
    } 

logs:

--------- beginning of main
--------- beginning of kernel
--------- beginning of system
3793-3793    MAGIC_TAG    system_server    I  onSystemServerStarting: f@8998ba1 -- dalvik.system.PathClassLoader[DexPathList[[zip file "/system/framework/com.android.location.provider.jar", zip file "/system/framework/services.jar", zip file "/system/framework/org.lineageos.platform.jar", zip file "/apex/com.android.adservices/javalib/service-adservices.jar", zip file "/apex/com.android.adservices/javalib/service-sdksandbox.jar", zip file "/apex/com.android.appsearch/javalib/service-appsearch.jar", zip file "/apex/com.android.art/javalib/service-art.jar", zip file "/apex/com.android.media/javalib/service-media-s.jar", zip file "/apex/com.android.permission/javalib/service-permission.jar"],nativeLibraryDirectories=[/system/lib64, /system/system_ext/lib64, /system/product/lib64, /system/vendor/lib64, /system/lib64, /system/system_ext/lib64, /system/product/lib64, /system/vendor/lib64]]]
3793-3793    MAGIC_TAG    system_server    I  ----> aClass: class com.android.internal.app.ResolverActivity
3793-3793    MAGIC_TAG    system_server    I  ----> onCreate 1: protected void com.android.internal.app.ResolverActivity.onCreate(android.os.Bundle)
3793-3793    MAGIC_TAG    system_server    I  ----> hookHandle: m2@171b1c6

[AwaisKing]

what i've tried so far:
using my module with only android (doesn't work), system (doesn't hook), both system and android (doesn't hook)

hooking some methods in that class:

try {
    final Class<?> aClass = param.getClassLoader().loadClass("com.android.internal.app.ResolverActivity");
    Log.i(TAG, "----> aClass new: " + aClass);

    for (final Method method : aClass.getMethods()) {
        if (method == null) continue;
        if (method.isSynthetic()) continue;
        if (method.getParameterCount() > 0) continue;

        if (!method.toString().contains("com.android.internal.app.")) continue;
        if (method.toString().contains(" native ")) continue;
        if (method.getName().contains("wait")) continue;
        if (method.getName().contains("notifyAll")) continue;

        Log.d(TAG, "----> method: " + method);


        if (!method.isAccessible()) method.setAccessible(true);
        hook(method).setExceptionMode(ExceptionMode.PROTECTIVE).intercept(chain -> {
            final Object thisObject = chain.getThisObject();

            Log.v(TAG, "--------> method::intercept[before] " + method + " -- " + thisObject);

            return chain.proceed();
        });
    }

} catch (Throwable e) {
    Log.e(TAG, "", e);
}

i'm not even sure what to do