虚假maps文件绕过frida检测

function readmaps() {
    const openPtr = Module.getExportByName('libc.so', 'open');
    const open = new NativeFunction(openPtr, 'int', ['pointer', 'int']);

    var readPtr = Module.findExportByName("libc.so", "read");
    var read = new NativeFunction(readPtr, 'int', ['int', 'pointer', "int"]);


    var writePtr = Module.findExportByName("libc.so", "write");
    var write = new NativeFunction(writePtr, 'int', ['int', 'pointer', "int"]);

    var fakePath = Memory.allocUtf8String("/data/data/com.tencent.mm/maps");
    
    // var file = new File(fakePath, "w");
    var fakeFd = open(fakePath,65)
    var buffer = Memory.alloc(512);
    var nativePath = Memory.allocUtf8String("proc/self/maps")
    var open_mode = Memory.allocUtf8String("r"); 
    var realFd = open(nativePath,0);

    while (parseInt(read(realFd, buffer, 512)) !== 0) {
        var oneLine = Memory.readCString(buffer);
        if (oneLine.indexOf("tmp") === -1 && oneLine.indexOf("frida") === -1) {
            file.write(oneLine);
            // write(fakeFd,buffer,512)
        }
        // write(fakeFd,buffer,512)
        // console.log(oneLine)
    }
}
setTimeout(readmaps,5)