The Bytecode Club - Reverse Engineering Forum - Programming

Help for loss android auto when modify apk

Sun, 29 Jul 2018 15:35:29 +0000

[color=#454545][font=Hind, sans-serif]Hello,[/font][/color]
[color=#454545][font=Hind, sans-serif]If I edit waze and compiling it as an apk will dispair the original signature, but I can use it. The concern is that we also disrupt the integration of Spotify and the display of android auto (this is the most annoying).[/font][/color]
[color=#454545][font=Hind, sans-serif]Is there a way to ensure that you continue to enjoy these two functions? I think the solution is either in classes.dex or in the manifest.[/font][/color]
[color=#454545][font=Hind, sans-serif]Thank you for your help because I stagnate.[/font][/color]

Understanding the Anti-Tampering of APK

Fri, 11 May 2018 16:05:28 +0000

Hello guys,

I'm looking to extract the API calls of an obfuscated apk. It seems like the app was obfuscated with DexGuard, since there is one .class fragment which is called ProtectedGame.class.

The app communicates over X.509 SSL with certificate pinning, therefore all I need to do is to modify the methods checkServerTrusted() and checkClientTrusted(). But as soon as I edit something in the .smali the App crashes immediately after reinstalling. Even if I just sign the .apk with a new generated key, the app crashes. It seems that there are some anti-tampering methods involved that check the signature of the app. I tried to modify the obfuscated methods in the .smali but hadn't got any success. I also tried running some xposed modules on Android 4.x that claim to counter certificate pinning.

Can you help me with this? I am talking about this app: https://play.google.com/store/apps/details?id=ch.pala.resources&hl=en_US

I will include the compiled ProtectedGame.java, ProtectedGame.smali and the original .apk to this post.

Thank you!

[b]The files:[/b]
https://drive.google.com/file/d/1N_dpWBabLoS3dwD2lquzrhcd30i9E39t/view?usp=sharing

Form Remove

Thu, 13 Jul 2017 11:42:38 +0000

I keep seeing this form which do not allow me to open the app

        invokespecial void StringBuilder.()
        aload message
        invokevirtual StringBuilder StringBuilder.append(String)
        ldc String Constant [b]"Ky PC "[/b]
        invokevirtual StringBuilder StringBuilder.append(String)
        aload_3 clientSerial
        invokevirtual StringBuilder StringBuilder.append(String)
        ldc String Constant [b]" nuk eshte i licensuar ![/b]
"
        invokevirtual StringBuilder StringBuilder.append(String)
        invokevirtual String StringBuilder.toString()
        astore message
        label_232:
        iload_2 isCheckModuleKey
        ifeq label_272
        iload containsModuleOnHashMap
        ifne label_272
        new StringBuilder
        dup
        invokespecial void StringBuilder.()
        aload message
        invokevirtual StringBuilder StringBuilder.append(String)
        ldc String Constant [b]"Nuk ka license per modulin e kerkuar te programit :"[/b]
        invokevirtual StringBuilder StringBuilder.append(String)
        aload_1 moduleKey
        invokevirtual StringBuilder StringBuilder.append(String)
        ldc String Constant "

[code]package com.tpk.bilanc;

import com.tpk.bilanc.master.CompanyController;
import com.tpk.bilanc.settings.CompanyPreferencesController;
import com.tpk.bilanc.utils.TPKJOptionPane;
import com.tpk.db.DBAdapter;
import com.tpk.db.DBConfiguration;
import com.tpk.security.TPKComputer;
import com.tpk.utils.DesEncrypter;
import com.tpk.utils.TPKUtilDate;
import java.awt.Component;
import java.io.PrintStream;
import java.text.ParseException;
import java.util.Date;
import java.util.HashMap;
import java.util.StringTokenizer;
import javax.swing.JFrame;
import javax.swing.JOptionPane;
import javax.swing.JScrollPane;
import javax.swing.JTextArea;

// SourceFile = SaasLicenseController.java
// Class Version: 51.0
public class SaasLicenseController {

public static final String LICENSE_END_DATE_KEY = "EndDate";
public static final String SAAS_LICENSE_KEY = "license";
public static final String BILANC_EKSPRES_VERSION_KEY = "MyVersion=0";
public static final String BILANC_STANDARD_VERSION_KEY = "MyVersion=1";
public static final String BILANC_PROFESIONAL_VERSION_KEY = "MyVersion=2";
public static final String FULL_LICENSE_KEY = "FullLicense";
private HashMap licenses;
public static final int LICENSE_NEGATIVE_LIMIT = (int) -7;
private static SaasLicenseController saasLicenseController;

private void () {
this_start:
SaasLicenseController this (#0 0 - 10)
aload_0 this
invokespecial void Object.()
aload_0 this
aconst_null
putfield HashMap SaasLicenseController.licenses
return
this_end:
}

public static SaasLicenseController getInstance() {
getstatic SaasLicenseController SaasLicenseController.saasLicenseController
ifnonnull label_16
new SaasLicenseController
dup
invokespecial void SaasLicenseController.()
putstatic SaasLicenseController SaasLicenseController.saasLicenseController
label_16:
getstatic SaasLicenseController SaasLicenseController.saasLicenseController
areturn
}

public void checkRegisteredLicense() {
this_start:
SaasLicenseController this (#0 0 - 13)
invokestatic boolean SaasLicenseController.isWhiteListSerial()
ifeq label_7
return
label_7:
aload_0 this
aconst_null
invokevirtual void SaasLicenseController.checkRegisteredLicense(String)
return
this_end:
}

public void checkRegisteredLicense(String moduleKey) {
moduleKey_start:
this_start:
SaasLicenseController this (#0 0 - 20)
String moduleKey (#1 0 - 20)
invokestatic boolean SaasLicenseController.isFullLicense()
ifeq label_14
aload_0 this
aload_1 moduleKey
invokevirtual void SaasLicenseController.checkRegisteredLicenseFull(String)
goto label_19
label_14:
aload_0 this
aload_1 moduleKey
invokevirtual void SaasLicenseController.checkRegisteredLicenseSaaS(String)
label_19:
return
moduleKey_end:
this_end:
}

public boolean isModuleEnabled(String moduleKey) {
moduleKey_start:
this_start:
SaasLicenseController this (#0 0 - 9)
String moduleKey (#1 0 - 9)
aload_0 this
invokevirtual HashMap SaasLicenseController.getLicenses()
aload_1 moduleKey
invokevirtual boolean HashMap.containsKey(Object)
ireturn
moduleKey_end:
this_end:
}

public void checkRegisteredLicenseFull(String moduleKey) {
moduleKey_start:
this_start:
SaasLicenseController this (#0 0 - 10)
String moduleKey (#1 0 - 10)
aload_0 this
aload_1 moduleKey
invokespecial void SaasLicenseController.checkLicensesCoreLogic(String)
aload_0 this
invokespecial void SaasLicenseController.checkUpdateValidForContractEndDate()
return
moduleKey_end:
this_end:
}

public void checkRegisteredLicenseSaaS(String moduleKey) {
moduleKey_start:
this_start:
SaasLicenseController this (#0 0 - 10)
String moduleKey (#1 0 - 10)
aload_0 this
aload_1 moduleKey
invokespecial void SaasLicenseController.checkLicensesCoreLogic(String)
aload_0 this
invokespecial void SaasLicenseController.checkDaysRemainingSaaS()
return
moduleKey_end:
this_end:
}

private void checkLicensesCoreLogic(String moduleKey) {
moduleKey_start:
this_start:
SaasLicenseController this (#0 0 - 322)
String moduleKey (#1 0 - 322)
aload_1 moduleKey
ifnull label_15
aload_1 moduleKey
invokevirtual boolean String.isEmpty()
ifne label_15
iconst_1 1
goto label_16
label_15:
label_15:
iconst_0 0
label_16:
istore_2 2
isCheckModuleKey_start:
boolean isCheckModuleKey (#2 17 - 322)
invokestatic TPKComputer TPKComputer.getInstance()
invokevirtual String TPKComputer.getComputerID()
astore_3
clientSerial_start:
String clientSerial (#3 24 - 322)
aload_3 clientSerial
invokestatic String BilancUtils.getStringValueNotNull(Object)
invokevirtual boolean String.isEmpty()
ifeq label_40
iconst_1 1
istore 4
containsSerial_start:
boolean containsSerial (#4 37 - 40)
goto label_84
containsSerial_end:
label_40:
invokestatic DBConfiguration DBAdapter.getDbConfiguration()
invokevirtual boolean DBConfiguration.isServer()
ifeq label_74
aload_0 this
invokevirtual HashMap SaasLicenseController.getLicenses()
ldc String Constant "Server"
invokevirtual Object HashMap.get(Object)
invokestatic String BilancUtils.getStringValueNotNull(Object)
astore 5
serverSerialIfAny_start:
String serverSerialIfAny (#5 63 - 71)
aload serverSerialIfAny
aload_3 clientSerial
invokevirtual boolean String.contains(CharSequence)
istore 4
containsSerial_start:
serverSerialIfAny_end:
boolean containsSerial (#4 71 - 74)
goto label_84
containsSerial_end:
label_74:
aload_0 this
invokevirtual HashMap SaasLicenseController.getLicenses()
aload_3 clientSerial
invokevirtual boolean HashMap.containsKey(Object)
istore 4
containsSerial_start:
label_84:
label_84:
boolean containsSerial (#4 84 - 322)
aload_0 this
invokevirtual HashMap SaasLicenseController.getLicenses()
aload_1 moduleKey
invokevirtual boolean HashMap.containsKey(Object)
istore 5
containsModuleOnHashMap_start:
boolean containsModuleOnHashMap (#5 94 - 322)
getstatic PrintStream System.out
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc String Constant "containsSerial = "
invokevirtual StringBuilder StringBuilder.append(String)
iload containsSerial
invokevirtual StringBuilder StringBuilder.append(boolean)
invokevirtual String StringBuilder.toString()
invokevirtual void PrintStream.println(String)
getstatic PrintStream System.out
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc String Constant "containsModuleOnHashMap = "
invokevirtual StringBuilder StringBuilder.append(String)
iload containsModuleOnHashMap
invokevirtual StringBuilder StringBuilder.append(boolean)
invokevirtual String StringBuilder.toString()
invokevirtual void PrintStream.println(String)
getstatic PrintStream System.out
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc String Constant "isCheckModuleKey = "
invokevirtual StringBuilder StringBuilder.append(String)
iload_2 isCheckModuleKey
invokevirtual StringBuilder StringBuilder.append(boolean)
invokevirtual String StringBuilder.toString()
invokevirtual void PrintStream.println(String)
iload containsSerial
istore 6
licenseOK_start:
boolean licenseOK (#6 175 - 322)
iload_2 isCheckModuleKey
ifeq label_187
iload containsModuleOnHashMap
ifne label_187
iconst_0 0
istore licenseOK
label_187:
label_187:
iload licenseOK
ifne label_321
ldc String Constant ""
astore 7
message_start:
String message (#7 196 - 321)
iload containsSerial
ifne label_232
new StringBuilder
dup
invokespecial void StringBuilder.()
aload message
invokevirtual StringBuilder StringBuilder.append(String)
ldc String Constant "Ky PC "
invokevirtual StringBuilder StringBuilder.append(String)
aload_3 clientSerial
invokevirtual StringBuilder StringBuilder.append(String)
ldc String Constant " nuk eshte i licensuar !
"
invokevirtual StringBuilder StringBuilder.append(String)
invokevirtual String StringBuilder.toString()
astore message
label_232:
iload_2 isCheckModuleKey
ifeq label_272
iload containsModuleOnHashMap
ifne label_272
new StringBuilder
dup
invokespecial void StringBuilder.()
aload message
invokevirtual StringBuilder StringBuilder.append(String)
ldc String Constant "Nuk ka license per modulin e kerkuar te programit :"
invokevirtual StringBuilder StringBuilder.append(String)
aload_1 moduleKey
invokevirtual StringBuilder StringBuilder.append(String)
ldc String Constant "
"
invokevirtual StringBuilder StringBuilder.append(String)
invokevirtual String StringBuilder.toString()
astore message
label_272:
label_272:
new StringBuilder
dup
invokespecial void StringBuilder.()
aload message
invokevirtual StringBuilder StringBuilder.append(String)
ldc String Constant "Kontaktoni Bilanc shpk!
"
invokevirtual StringBuilder StringBuilder.append(String)
invokevirtual String StringBuilder.toString()
astore message
aconst_null
new JScrollPane
dup
new JTextArea
dup
aload message
invokespecial void JTextArea.(String)
invokespecial void JScrollPane.(Component)
ldc String Constant "Gabim"
iconst_0 0
invokestatic void TPKJOptionPane.showMessageDialog(Component, Object, String, int)
iconst_0 0
invokestatic void System.exit(int)
message_end:
label_321:
return
licenseOK_end:
containsModuleOnHashMap_end:
containsSerial_end:
clientSerial_end:
isCheckModuleKey_end:
moduleKey_end:
this_end:
}

private void checkDaysRemainingSaaS() {
this_start:
try-block_start(java.text.ParseException)_0:
SaasLicenseController this (#0 0 - 118)
invokestatic CompanyPreferencesController CompanyPreferencesController.getInstance()
aload_0 this
invokespecial TPKUtilDate SaasLicenseController.getLicenseEndDate()
invokevirtual void CompanyPreferencesController.setLicenseEndDateForSaaS(TPKUtilDate)
aload_0 this
invokevirtual int SaasLicenseController.getDaysRemainingSaaS()
istore_1 1
daysRemaining_start:
int daysRemaining (#1 15 - 96)
iload_1 daysRemaining
bipush 249
if_icmpge label_31
aconst_null
ldc String Constant "Licensa juaj ka perfunduar.
Programi do te mbyllet.
Ju lutem rinovoni licensen."
invokestatic void JOptionPane.showMessageDialog(Component, Object)
iconst_0 0
invokestatic void System.exit(int)
label_31:
iload_1 daysRemaining
bipush 249
if_icmplt label_57
iload_1 daysRemaining
ifgt label_57
invokestatic JFrame O2WorkBook.getMainJFrameStatic()
astore_2
mainJFrameStatic_start:
JFrame mainJFrameStatic (#2 45 - 54)
aload_2 mainJFrameStatic
ldc String Constant "Licensa juaj ka perfunduar.
Ju lutem rinovoni ate sa me shpejt."
ldc String Constant "Gabim"
iconst_0 0
invokestatic void JOptionPane.showMessageDialog(Component, Object, String, int)
mainJFrameStatic_end:
goto label_96
label_57:
label_57:
iload_1 daysRemaining
bipush 15
if_icmpgt label_96
aconst_null
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc String Constant "Licensa juaj perfundon per "
invokevirtual StringBuilder StringBuilder.append(String)
iload_1 daysRemaining
invokevirtual StringBuilder StringBuilder.append(int)
ldc String Constant " dite.
"
invokevirtual StringBuilder StringBuilder.append(String)
ldc String Constant "Ju lutem rinovoni licensen brenda ketij afati."
invokevirtual StringBuilder StringBuilder.append(String)
invokevirtual String StringBuilder.toString()
invokestatic void JOptionPane.showMessageDialog(Component, Object)
daysRemaining_end:
try-block_end(java.text.ParseException)_96:
label_96:
label_96:
goto label_117
exception_handler(java.text.ParseException)_99:
astore_1
e_start:
ParseException e (#1 100 - 117)
aload_1 e
invokevirtual void ParseException.printStackTrace()
aconst_null
ldc String Constant "License e pasakte!
Kontaktoni Bilanc shpk!"
ldc String Constant "Gabim"
iconst_0 0
invokestatic void TPKJOptionPane.showMessageDialog(Component, Object, String, int)
iconst_0 0
invokestatic void System.exit(int)
e_end:
label_117:
return
this_end:
}

private void checkUpdateValidForContractEndDate() {
this_start:
try-block_start(java.text.ParseException)_0:
SaasLicenseController this (#0 0 - 122)
invokestatic TPKUtilDate BilancUtils.getBilancBuildDate()
astore_1
dateOfBilancBuild_start:
TPKUtilDate dateOfBilancBuild (#1 4 - 99)
aload_0 this
invokespecial TPKUtilDate SaasLicenseController.getLicenseEndDate()
astore_2
licenseEndDate_start:
TPKUtilDate licenseEndDate (#2 9 - 99)
getstatic PrintStream System.out
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc String Constant "licenseEndDate = "
invokevirtual StringBuilder StringBuilder.append(String)
aload_2 licenseEndDate
invokevirtual StringBuilder StringBuilder.append(Object)
invokevirtual String StringBuilder.toString()
invokevirtual void PrintStream.println(String)
getstatic PrintStream System.out
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc_w String Constant "dateOfBilancBuild = "
invokevirtual StringBuilder StringBuilder.append(String)
aload_1 dateOfBilancBuild
invokevirtual StringBuilder StringBuilder.append(Object)
invokevirtual String StringBuilder.toString()
invokevirtual void PrintStream.println(String)
aload_1 dateOfBilancBuild
aload_2 licenseEndDate
invokevirtual boolean TPKUtilDate.after(Date)
ifeq label_85
aconst_null
ldc_w String Constant "Versioni i programit nuk eshte i perfshire ne kontraten tuaj aktive.
Programi do te mbyllet. Ju lutem kontaktoni Bilanc sh.p.k"
ldc String Constant "Gabim"
iconst_0 0
invokestatic void JOptionPane.showMessageDialog(Component, Object, String, int)
iconst_0 0
invokestatic void System.exit(int)
goto label_99
label_85:
getstatic PrintStream System.out
ldc_w String Constant "versioni ok me daten e kontrates"
iconst_0 0
anewarray Object
invokevirtual PrintStream PrintStream.printf(String, Object[])
pop
licenseEndDate_end:
dateOfBilancBuild_end:
try-block_end(java.text.ParseException)_99:
label_99:
goto label_121
exception_handler(java.text.ParseException)_102:
astore_1
e_start:
ParseException e (#1 103 - 121)
aload_1 e
invokevirtual void ParseException.printStackTrace()
aconst_null
ldc_w String Constant "Gabim ne kontrollin e versionit/kontrates!
Programi do te mbyllet.
Ju lutem kontaktoni Bilanc sh.p.k"
ldc String Constant "Gabim"
iconst_0 0
invokestatic void TPKJOptionPane.showMessageDialog(Component, Object, String, int)
iconst_0 0
invokestatic void System.exit(int)
e_end:
label_121:
return
this_end:
}

public int getDaysRemainingSaaS() throws ParseException {
this_start:
SaasLicenseController this (#0 0 - 45)
aload_0 this
invokespecial TPKUtilDate SaasLicenseController.getLicenseEndDate()
astore_1
licenseEndDate_start:
TPKUtilDate licenseEndDate (#1 5 - 45)
new TPKUtilDate
dup
invokespecial void TPKUtilDate.()
aload_1 licenseEndDate
invokestatic int TPKUtilDate.dayDiff(Date, Date)
istore_2 2
remainingDays_start:
int remainingDays (#2 17 - 45)
getstatic PrintStream System.out
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc_w String Constant "remainingDays = "
invokevirtual StringBuilder StringBuilder.append(String)
iload_2 remainingDays
invokevirtual StringBuilder StringBuilder.append(int)
invokevirtual String StringBuilder.toString()
invokevirtual void PrintStream.println(String)
iload_2 remainingDays
ireturn
remainingDays_end:
licenseEndDate_end:
this_end:
}

private TPKUtilDate getLicenseEndDate() throws ParseException {
this_start:
SaasLicenseController this (#0 0 - 20)
new TPKUtilDate
dup
aload_0 this
invokevirtual HashMap SaasLicenseController.getLicenses()
ldc String Constant "EndDate"
invokevirtual Object HashMap.get(Object)
checkcast String
invokespecial void TPKUtilDate.(String)
areturn
this_end:
}

public HashMap getLicenses() {
this_start:
SaasLicenseController this (#0 0 - 22)
aload_0 this
getfield HashMap SaasLicenseController.licenses
ifnonnull label_17
aload_0 this
aload_0 this
ldc String Constant "license"
invokespecial HashMap SaasLicenseController.getLicensesFromMasterDB(String)
putfield HashMap SaasLicenseController.licenses
label_17:
aload_0 this
getfield HashMap SaasLicenseController.licenses
areturn
this_end:
}

private synchronized HashMap getLicensesFromMasterDB(String licenseKey) {
licenseKey_start:
this_start:
SaasLicenseController this (#0 0 - 95)
String licenseKey (#1 0 - 95)
new HashMap
dup
invokespecial void HashMap.()
astore_2
fileLicenses_start:
HashMap fileLicenses (#2 8 - 95)
aload_0 this
aload_1 licenseKey
invokespecial String SaasLicenseController.readAndDecryptFile(String)
astore_3
fileDecrypted_start:
String fileDecrypted (#3 14 - 95)
new StringTokenizer
dup
aload_3 fileDecrypted
ldc String Constant "
"
invokespecial void StringTokenizer.(String, String)
astore 4
rows_start:
label_26:
StringTokenizer rows (#4 26 - 95)
aload rows
invokevirtual boolean StringTokenizer.hasMoreTokens()
ifeq label_93
aload rows
invokevirtual String StringTokenizer.nextToken()
astore 5
rowstring_start:
String rowstring (#5 41 - 90)
new StringTokenizer
dup
aload rowstring
ldc_w String Constant " "
invokespecial void StringTokenizer.(String, String)
astore 6
columnsTokenizer_start:
StringTokenizer columnsTokenizer (#6 55 - 90)
aload columnsTokenizer
invokevirtual String StringTokenizer.nextToken()
astore 7
key_start:
String key (#7 62 - 90)
aload key
astore 8
value_start:
String value (#8 66 - 90)
aload columnsTokenizer
invokevirtual boolean StringTokenizer.hasMoreTokens()
ifeq label_81
aload columnsTokenizer
invokevirtual String StringTokenizer.nextToken()
astore value
label_81:
aload_2 fileLicenses
aload key
aload value
invokevirtual Object HashMap.put(Object, Object)
pop
value_end:
key_end:
columnsTokenizer_end:
rowstring_end:
goto label_26
label_93:
aload_2 fileLicenses
areturn
rows_end:
fileDecrypted_end:
fileLicenses_end:
licenseKey_end:
this_end:
}

private String readAndDecryptFile(String licenseKey) {
licenseKey_start:
this_start:
SaasLicenseController this (#0 0 - 92)
String licenseKey (#1 0 - 92)
ldc String Constant ""
astore_2
file_start:
try-block_start(java.lang.Exception)_3:
String file (#2 3 - 92)
invokestatic CompanyController CompanyController.getInstance()
aload_1 licenseKey
invokevirtual String CompanyController.getSaasLicense(String)
astore_2
try-block_end(java.lang.Exception)_11:
goto label_44
exception_handler(java.lang.Exception)_14:
astore_3
e_start:
Exception e (#3 15 - 44)
getstatic PrintStream System.err
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc_w String Constant "Error: "
invokevirtual StringBuilder StringBuilder.append(String)
aload_3 e
invokevirtual String Exception.getMessage()
invokevirtual StringBuilder StringBuilder.append(String)
invokevirtual String StringBuilder.toString()
invokevirtual void PrintStream.println(String)
e_end:
label_44:
new DesEncrypter
dup
ldc_w String Constant "tpksolutions"
invokespecial void DesEncrypter.(String)
astore_3
desEncrypter_start:
DesEncrypter desEncrypter (#3 55 - 92)
aload_3 desEncrypter
aload_2 file
invokevirtual String DesEncrypter.decrypt(String)
astore 4
decryptedFile_start:
String decryptedFile (#4 62 - 92)
getstatic PrintStream System.out
new StringBuilder
dup
invokespecial void StringBuilder.()
ldc_w String Constant "decryptedFile = "
invokevirtual StringBuilder StringBuilder.append(String)
aload decryptedFile
invokevirtual StringBuilder StringBuilder.append(String)
invokevirtual String StringBuilder.toString()
invokevirtual void PrintStream.println(String)
aload decryptedFile
areturn
decryptedFile_end:
desEncrypter_end:
file_end:
licenseKey_end:
this_end:
}

public void setLicenses(HashMap licenses) {
licenses_start:
this_start:
SaasLicenseController this (#0 0 - 6)
HashMap licenses (#1 0 - 6)
aload_0 this
aload_1 licenses
putfield HashMap SaasLicenseController.licenses
return
licenses_end:
this_end:
}

public void resetAllCaches() {
this_start:
SaasLicenseController this (#0 0 - 6)
aload_0 this
aconst_null
invokevirtual void SaasLicenseController.setLicenses(HashMap)
return
this_end:
}

public static boolean isBilancEkspres() {
invokestatic SaasLicenseController SaasLicenseController.getInstance()
invokevirtual HashMap SaasLicenseController.getLicenses()
ldc String Constant "MyVersion=0"
invokevirtual boolean HashMap.containsKey(Object)
ireturn
}

public static boolean isBilancStandard() {
invokestatic SaasLicenseController SaasLicenseController.getInstance()
invokevirtual HashMap SaasLicenseController.getLicenses()
ldc String Constant "MyVersion=1"
invokevirtual boolean HashMap.containsKey(Object)
ireturn
}

public static boolean isBilancProfesional() {
invokestatic SaasLicenseController SaasLicenseController.getInstance()
invokevirtual HashMap SaasLicenseController.getLicenses()
ldc String Constant "MyVersion=2"
invokevirtual boolean HashMap.containsKey(Object)
ireturn
}

public static boolean isFullLicense() {
invokestatic SaasLicenseController SaasLicenseController.getInstance()
invokevirtual HashMap SaasLicenseController.getLicenses()
ldc String Constant "FullLicense"
invokevirtual boolean HashMap.containsKey(Object)
ireturn
}

public static boolean hasNoLicense() {
invokestatic SaasLicenseController SaasLicenseController.getInstance()
invokevirtual HashMap SaasLicenseController.getLicenses()
invokevirtual boolean HashMap.isEmpty()
ireturn
}

public static boolean isSaasLicense() {
invokestatic boolean SaasLicenseController.isFullLicense()
ifne label_10
iconst_1 1
goto label_11
label_10:
iconst_0 0
label_11:
ireturn
}

public String getMyVersionAsString() {
this_start:
SaasLicenseController this (#0 0 - 34)
invokestatic boolean SaasLicenseController.isBilancEkspres()
ifeq label_10
ldc_w String Constant "Ekspres"
areturn
label_10:
invokestatic boolean SaasLicenseController.isBilancProfesional()
ifeq label_20
ldc_w String Constant "Profesional"
areturn
label_20:
invokestatic boolean SaasLicenseController.isBilancStandard()
ifeq label_30
ldc_w String Constant "Standard"
areturn
label_30:
ldc_w String Constant "-"
areturn
this_end:
}

public static boolean isWhiteListSerial() {
invokestatic TPKComputer TPKComputer.getInstance()
invokevirtual String TPKComputer.getComputerID()
astore_0
computerID_start:
String computerID (#0 7 - 25)
invokestatic HashMap SaasLicenseController.getWhiteListSerials()
astore_1
whiteListSerials_start:
HashMap whiteListSerials (#1 11 - 25)
aload_1 whiteListSerials
aload_0 computerID
invokevirtual Object HashMap.get(Object)
ifnull label_23
iconst_1 1
goto label_24
label_23:
iconst_0 0
label_24:
ireturn
whiteListSerials_end:
computerID_end:
}

private static HashMap getWhiteListSerials() {
new HashMap
dup
invokespecial void HashMap.()
astore_0
whiteListSerials_start:
HashMap whiteListSerials (#0 8 - 32)
aload_0 whiteListSerials
ldc_w String Constant "445C-3A27"
ldc_w String Constant "445C-3A27"
invokevirtual Object HashMap.put(Object, Object)
pop
aload_0 whiteListSerials
ldc_w String Constant "14SSPVNIT"
ldc_w String Constant "14SSPVNIT"
invokevirtual Object HashMap.put(Object, Object)
pop
aload_0 whiteListSerials
areturn
whiteListSerials_end:
}

}
[/code]

Question of obfuscated jar.

Thu, 06 Apr 2017 08:24:54 +0000

I have a jar and it's obfuscated. The class name and package name is the same after obfuscating.
For example, there's a class named xxx.a. And there's a package named xxx.a as well. And there's a class named xxx.a.a in it.
Then I can't import xxx.a.a. I want to use this class.
Is there a tool to modify the package name or class name?

Does anyone know how to do Reverse Engineering and Deobfuscate jar from j2me games?

Fri, 24 Feb 2017 13:01:38 +0000

[color=#212121][size=medium][font=arial, sans-serif]Is it possible to remove the obfuscation made by proguard and rename all methods fields etc. classes for more legible names? I tried with the fernflower with the option -ren = 1 but it leaves errors in my code some help?[/font][/size][/color]

help editing code in IDA

Mon, 09 Jan 2017 19:43:23 +0000

hello everyone, I am new to Android reverse engineering and I absolutely love it! I am still learning though so I was looking for some assistance with a function in IDA. I am not sure the function I am posting is the correct one so please let me know if I need to keep searching. What I am trying to edit is a 'cooldown timer' for a game I am playing. It is an RPG and after you use a special ability you have to wait a certain amount of turns before you can use it again. So I would like to disable the cooldown timer or make the countdown always 0. My idea was to change all the R4, R2, ect to R0. I added the link to my screenshot as I have not figured out how to attach an image to a post yet!

dropbox.com/s/p5byrn3i1l5q0jy/gamess.jpg?dl=0

help editing code in Net Reflector

Thu, 22 Dec 2016 21:09:54 +0000

I am trying to modify some code in .Net Reflector for an Android game and could use some assistance as I am still learning. As you can see in the attached screenshot the sub I am trying to edit is called 'DealDamage'. I would like to make the critAttack boolean always true, AimType always to be head (0) and no damage taken. Below is the section I believe needs to be edited with my notes added.

dropbox.com/s/s8q9to7wafdbs3f/tysworkss.jpg?dl=0

0 ldarg.3
1 brfalse -> (5) ldarg.0
2 ldarg.0
3 ldc.i4.1
4 stfld System.Boolean Actor::critAttack
5 ldarg.0 6 ldarg.s -> (3) aim (Actor/AimType)
7 stfld Actor/AimType Actor::attackAim
8 ldarg.2 9 ldnull
10 call System.Boolean UnityEngine.Object::op_Inequality(UnityEngine.Object,UnityEngine.Object)
11 brfalse -> (25) ldarg.0
12 ldarg.0
13 callvirt System.Single Actor::get_Health()
14 ldarg.1
15 conv.r4
16 sub 17 ldc.r4 0
18 bgt.un -> (25) ldarg.0
19 ldarg.0
20 ldarg.2
21 stfld Weapon Actor::killedBy
22 ldarg.2
23 ldarg.0
24 callvirt System.Void Weapon::DoForcefulHitEffect(Actor)
25 ldarg.0
26 dup
27 callvirt System.Single Actor::get_health()
28 ldarg.1
29 conv.r4
30 sub
31 callvirt System.Void Actor::set_Health(System.Single)
32 ldarg.1 33 ldc.i4.0
34 bgt -> (146) ret
35 ldarg.2
36 ldnull

"Sanitise" a rogue lockscreen?

Tue, 13 Dec 2016 13:51:14 +0000

[align=justify]Thought I'd register here since I am looking for some aid regarding a lock screen that came with a counterfeit phone I am toying around with for the lulz.[/align]

[align=justify]I mean, it's a shame that the app's infected, yet it did a rather accurate recreation of the default Galaxy S7 lock screen. Simply deleting it off my phone would end up with a rather boring default lock icon, yet I don't want ads to fly right up my face either.[/align]

[align=justify]I baksmali'd the code with the usual tools, and on my first attempt I simply culled out the lines referencing snowfox, ryg and fqhx, which make up the adware/PUP stuff, recompiled and pushed it back to my phone. It did install, but the app simply refused to load although curiously the stock Android lock icon didn't show up. To be honest I am no Java expert so please bear with me, but I can more or less understand what some of the code does especially when decompiled to (pseudo) Java code, but I am struggling to find a way on how to bypass the rogue SDK; my plan is to use intent and system service code from a number of lockscreen apps on Github, as I assume that it would be theoretically possible to use that for the bootstrap instead of the malware.[/align]

APK: [url=http://d-h.st/8rQU]http://d-h.st/8rQU[/url]
Decompiled Java: [url=http://d-h.st/OnkU]http://d-h.st/OnkU[/url]
Smali: [url=http://d-h.st/S2oe]http://d-h.st/S2oe[/url]

help

Wed, 29 Jun 2016 23:09:28 +0000

hello i try to decompile this exe to get the source files but cannot seem to get and src out of it, i use exeinfo pe and it says the warcarto exe is made with dev c++,but not having no luck geting source from it with decompilers. i just wanted the source so i can update the maps inside are outdated heres link to the catographer files [url=https://mega.nz/#!7gQWFQqI!cLa4r3F4JhwJkYzq4Fy78PY-e0ymbz02a950HsS-FSo]https://mega.nz/#!7gQWFQqI!cLa4r3F4JhwJkYzq4Fy78PY-e0ymbz02a950HsS-FSo[/url] any help will be appreciated to download the zip file you need google chrome browser

[HELP] Bypass Security Check

Mon, 09 May 2016 08:36:10 +0000

Hi guys, i need your help to bypass security on this game. i tried to bypass before but still no luck. always get 'detect security error' when open the game.

on MainActivity.smali :

[code].method public DetectAppFalsification()V
.locals 2

.prologue
const/4 v1, 0x1

.line 1327
iget-boolean v0, p0, Lcom/netmarble/sknightsgb/MainActivity;->useSecureApp:Z

if-eqz v0, :cond_0

.line 1328
invoke-static {}, Lnmss/app/NmssSa;->getInstObj()Lnmss/app/NmssSa;

move-result-object v0

invoke-virtual {v0, v1, v1}, Lnmss/app/NmssSa;->detectApkIntgError(ZZ)V

.line 1331
:cond_0
return-void
.end method[/code]

nmssa.smali :
[code].method public detectApkIntgError(ZZ)V
.locals 2
.param p1, "bShowMsgbox" # Z
.param p2, "bExit" # Z

.prologue
.line 105
invoke-direct {p0}, Lnmss/app/NmssSa;->nmssNativeSendLogApkIntgError()V

.line 107
if-eqz p1, :cond_0

.line 108
const/4 v0, 0x1

const-string v1, "Security Detection"

invoke-virtual {p0, v0, v1, p2}, Lnmss/app/NmssSa;->AlertMsg(ILjava/lang/String;Z)V

.line 109
:cond_0
return-void
.end method[/code]

Target APK : https://play.google.com/store/apps/details?id=com.netmarble.sknightsgb&hl=en
On other game with this same security method i can simply bypass on lib files, but that method will not work on this game. i dunno why. i need your help.

[HELP] Decompiling using Virtuous Ten Studio

Sat, 09 Apr 2016 12:46:19 +0000

Hello,

I have a problem with Virtuous Ten Studio:

I'm trying to decompile an .apk using the latest smali files (smali 2.1.2 & baksmali-2.1.2).

But everytime I try to decompile, it shows me this error:

[IMG]http://puu.sh/obPwU/8e3c2671b9.png[/IMG]

I'm trying to decompile using the 4.4 KitKat API.
Here are the settings:

[IMG]http://puu.sh/obPtL/4ca9f2c64c.png[/IMG]

Any idea?

I'd like to get this problem solved. Because VTS is a really nice tool to edit & test apps

Regards

[HELP] How to decompile protected classes.dex file

Tue, 29 Mar 2016 04:55:08 +0000

hi, i need your help to decompile classes.dex file that cant be extracting. Original .dex file size is 6mb, bun i extract it just have 6kb size file.and whem i decompiled it just just have 'Medusah' smali folder.

how to decrypt and decompile this file to get original classes.dex file??
i will uplodad the classes.dex file of you want to looking on it.pls help

matching android views xml ids to java

Thu, 10 Mar 2016 10:29:50 +0000

Hello, I'm new in RE. I'm searching for tools to decompile apk finding the link of android views xml ids to java code and cannot find. Are there such tools that link Android views as described in layout / xml files to findviewbyid methods in java code?

Java machine somehow does that during execution. Why I get like android:id="@id/textView1" in xlm and findviewbyid (3523423) in java in Bytecodeviewer? (I just started by use Bytecodeviewer and upon opening apk it produces such output - maybe there is some trick to match ids?).

Thanx!

NFC Tag Code

Thu, 18 Feb 2016 23:24:48 +0000

I have a situation where I have information on an NFC tag that a machine reads 1/3 of the card and then uses some algorithm to produce the code to authenticate to read the remainder of the card. If I put up the information readable without the code pared with the litigate codes would this be a good place to find someone to help me figure it out. Is there a better place in the forum to get help. Would anyone have a recommendation of a different place to look for help for this. Just so everything is upfront. The basic model is a printer and the ink has a secure NFC tag so that the printer can count the usage and count it down on the card. So basically it is a closed system where they want you to buy their product for the refill and lock other manufactures out. So I'm looking to get the code to edit an existing card and use a 3rd party refill or create my own NFC tag to use a 3rd party for my refill. The company is charging around 4 times the price for the same quality refill, so I'm looking to save money and possibly share the solution with others.

[ASM] Getting methods of a parent class without reflection [Fixed]

Sun, 10 Jan 2016 23:14:08 +0000