百分网下载的绣湖的游戏:
![notion image](https://www.notion.so/image/https%3A%2F%2Fs2.loli.net%2F2022%2F11%2F29%2FXkBjrngR1s2ezpI.png?table=block&id=164d21fb-0527-4c57-a14e-ec0992ada22d&cache=v2)
![notion image](https://www.notion.so/image/https%3A%2F%2Fs3-us-west-2.amazonaws.com%2Fsecure.notion-static.com%2F16f84fb6-eacb-409b-a823-d98c660f4016%2FUntitled.png?table=block&id=f6f18942-464c-4aa7-88e3-11cb65fdb4fd&cache=v2)
刚准备玩的时候,给我弹出来个这:
![notion image](https://www.notion.so/image/https%3A%2F%2Fs3-us-west-2.amazonaws.com%2Fsecure.notion-static.com%2F384a22c4-8d31-46d5-ac43-6c1bc04a933a%2FUntitled.png?table=block&id=2f7fc49c-8d85-4654-b0b6-86cdc1e48055&cache=v2)
![notion image](https://www.notion.so/image/https%3A%2F%2Fs2.loli.net%2F2022%2F11%2F29%2FYUH7y4pemvXLRbG.png?table=block&id=eed38c71-935b-4ce8-bb77-9acddaa6482c&cache=v2)
未成年人?我TM的玩个单机游戏还要TM的给你实名?现在连玩单机游戏还要实名?你TM干脆把网断了得了,现在连这点自由都没有了,你们TM还要不要点逼脸!!!
不惯他,你有张良计,我有过墙梯阿
直接拖进appkiller,看你是何方神圣:
![notion image](https://www.notion.so/image/https%3A%2F%2Fs3-us-west-2.amazonaws.com%2Fsecure.notion-static.com%2Fa01451f9-621c-479c-a960-545de54f58d2%2FUntitled.png?table=block&id=ad058e9f-4e09-4552-b0a8-61231d3048a6&cache=v2)
![notion image](https://www.notion.so/image/https%3A%2F%2Fs2.loli.net%2F2022%2F11%2F29%2FzIZs64QoXNF3aVP.png?table=block&id=dc92327d-87a9-4434-8862-0f459f1b8984&cache=v2)
直接先搜索一下字符串,转码之后,找到位置:
com.byfen.authentication.f
.class public Lcom/byfen/authentication/f/a$b$a; .super Ljava/lang/Object; .source "Authentication.java" # interfaces .implements Ljava/lang/Runnable; # annotations .annotation system Ldalvik/annotation/EnclosingMethod; value = Lcom/byfen/authentication/f/a$b;->b(Lorg/json/JSONObject;)V .end annotation .annotation system Ldalvik/annotation/InnerClass; accessFlags = 0x1 name = null .end annotation # instance fields .field public final synthetic a:Z .field public final synthetic b:Lcom/byfen/authentication/f/a$b; # direct methods .method public constructor <init>(Lcom/byfen/authentication/f/a$b;Z)V .locals 0 .line 1 iput-object p1, p0, Lcom/byfen/authentication/f/a$b$a;->b:Lcom/byfen/authentication/f/a$b; iput-boolean p2, p0, Lcom/byfen/authentication/f/a$b$a;->a:Z invoke-direct {p0}, Ljava/lang/Object;-><init>()V return-void .end method # virtual methods .method public run()V .locals 8 .line 1 iget-boolean v0, p0, Lcom/byfen/authentication/f/a$b$a;->a:Z const/4 v1, 0x1 if-eqz v0, :cond_2 #先把这里改为if-nez .line 2 :try_start_0 iget-object v0, p0, Lcom/byfen/authentication/f/a$b$a;->b:Lcom/byfen/authentication/f/a$b; iget-object v0, v0, Lcom/byfen/authentication/f/a$b;->a:Landroid/app/Activity; const-string v2, "/byfen_authentication.t" invoke-static {v0, v2}, Lcom/byfen/authentication/g/d;->a(Landroid/content/Context;Ljava/lang/String;)Ljava/lang/String; move-result-object v0 :try_end_0 .catch Ljava/io/IOException; {:try_start_0 .. :try_end_0} :catch_0 goto :goto_0 :catch_0 move-exception v0 .line 3 invoke-virtual {v0}, Ljava/io/IOException;->printStackTrace()V const-string v0, "" .line 4 :goto_0 invoke-static {v0}, Landroid/text/TextUtils;->isEmpty(Ljava/lang/CharSequence;)Z move-result v2 const/4 v3, 0x0 if-nez v2, :cond_0 .line 5 invoke-static {v0}, Ljava/lang/Long;->parseLong(Ljava/lang/String;)J move-result-wide v4 const-wide/16 v6, 0x3e8 mul-long v4, v4, v6 invoke-static {v4, v5}, Lcom/byfen/authentication/g/b;->a(J)I move-result v0 goto :goto_1 :cond_0 const/4 v0, 0x0 :goto_1 const/16 v2, 0x12 if-lt v0, v2, :cond_1 #用井号把这里注释掉 .line 6 iget-object v0, p0, Lcom/byfen/authentication/f/a$b$a;->b:Lcom/byfen/authentication/f/a$b; iget-object v0, v0, Lcom/byfen/authentication/f/a$b;->b:Lcom/byfen/authentication/f/a; invoke-static {v0, v1}, Lcom/byfen/authentication/f/a;->b(Lcom/byfen/authentication/f/a;Z)Z .line 7 iget-object v0, p0, Lcom/byfen/authentication/f/a$b$a;->b:Lcom/byfen/authentication/f/a$b; iget-object v0, v0, Lcom/byfen/authentication/f/a$b;->a:Landroid/app/Activity; const-string v1, "\u767e\u5206\u7f51\u5feb\u901f\u5b9e\u540d\u8ba4\u8bc1\u6210\u529f\uff0c\u6b63\u5728\u5f00\u59cb\u6e38\u620f" invoke-static {v0, v1, v3}, Landroid/widget/Toast;->makeText(Landroid/content/Context;Ljava/lang/CharSequence;I)Landroid/widget/Toast; move-result-object v0 invoke-virtual {v0}, Landroid/widget/Toast;->show()V return-void .line 8 :cond_1 iget-object v1, p0, Lcom/byfen/authentication/f/a$b$a;->b:Lcom/byfen/authentication/f/a$b; iget-object v1, v1, Lcom/byfen/authentication/f/a$b;->a:Landroid/app/Activity; if-eqz v1, :cond_3 invoke-virtual {v1}, Landroid/app/Activity;->isFinishing()Z move-result v1 if-nez v1, :cond_3 .line 9 iget-object v1, p0, Lcom/byfen/authentication/f/a$b$a;->b:Lcom/byfen/authentication/f/a$b; iget-object v1, v1, Lcom/byfen/authentication/f/a$b;->a:Landroid/app/Activity; invoke-static {v1, v0}, Lcom/byfen/authentication/g/e;->j(Landroid/app/Activity;I)V goto :goto_2 .line 10 :cond_2 iget-object v0, p0, Lcom/byfen/authentication/f/a$b$a;->b:Lcom/byfen/authentication/f/a$b; iget-object v0, v0, Lcom/byfen/authentication/f/a$b;->b:Lcom/byfen/authentication/f/a; invoke-static {v0, v1}, Lcom/byfen/authentication/f/a;->b(Lcom/byfen/authentication/f/a;Z)Z :cond_3 :goto_2 return-void .end method
修改完成之后重新打包,然后安装运行:
![notion image](https://www.notion.so/image/https%3A%2F%2Fs3-us-west-2.amazonaws.com%2Fsecure.notion-static.com%2F6b07dc99-ddd7-4dea-8960-c7745d37c72a%2FUntitled.png?table=block&id=7724a931-60c6-4560-ad5d-d7bf9ca0b3fa&cache=v2)
![notion image](https://www.notion.so/image/https%3A%2F%2Fs2.loli.net%2F2022%2F11%2F29%2F5mCXHiJ6snjKhDB.png?table=block&id=3d3ada5e-b939-4897-bec0-2419a4e5d3eb&cache=v2)
ok,直接秒杀进入游戏!没想到会这么简单,起先我以为他会再游戏加载之前启动一个activity界面,我直接去掉就可以,但是不是这样的,还好他没有把这个验证写入SO层,否则会更麻烦,我想他们也应该就是再糊弄事,毕竟SO层函数没那么容易添加,看来这就是个障眼法罢了。