[Cracking apk step by step] cracking 1518 divination

Cracking tool: Please download it here

1518 masters of divination: Please download it here

 

Start to crack 1518 divination.

First, copy the downloaded apk to the apk508 directory, for example:

Run crack. bat, enter the character c, press enter, enter the name of the file to be cracked, press enter, enter the character d, and press enter to start decompilation, for example:

You can view the decompilation result in the cracked directory under the apk508 directory.

Enter character a and press enter to recompile, sign, and align. Finally, enter the character "I" and press enter to install it on a virtual machine or mobile phone. For example:

Then run the program and the following prompt is displayed:

What should I do? It doesn't matter. Since it's a cracking attack, let's get it done first. Remember the above character "if you see this prompt", find res \ values \ strings. xml in the decompiled directory, and search for the characters you just saw, such:

Use the file search function of notepad ++ to find verApkSign1, for example:

Public. xml is found, for example:

Double-click public. xml and search 0x7f0700c7 In The Decompilation directory, for example:

The search result is as follows:

If other smali files cannot be found, search for the verApkSign_title value 0x7f0700c6 and find the following result:

We can see that MainActivity. smali is found. Double-click it.

As you can see, when the value in v0 is not equal to 0, it will jump to cond_4 for execution. If the value in v0 is 0, execute the following code segment, and the dialog box appears. What should we do? Regardless of the conditions, you can directly jump to cond_4 for execution. The modification is as follows:

Save the modification. Re-compile, align, and sign, and then install. Run, isn't there any prompt for "unofficial version!

However, when using it, you will find that every time you use it, you will be prompted to consume a few incense, right? Find this string in strings. xml. You can find the following stuff:

<String name = "jifen_spendToast"> % 1 $ d incense count consumed. Your current incense count is: % 2 $ d </string>
<String name = "jifen_addToast"> % 1 $ d incense count has been added. Currently, the incense count is % 2 $ d. </string>

Well, first find the IDs of these strings in public. xml, and then search for their location in the smali file. Will find:

<Public type = "string" name = "jifen_spendToast" id = "0x7f070050"/>
<Public type = "string" name = "jifen_addToast" id = "0x7f070051"/>

Search for 0x7f070050 and find:

Open f. smali and look down. You will see:

Is the subtraction of integers, so you can change it to addition.

After saving it, compile and install it. Is it found that the quantity of incense increases every time it is used !!!

The following is an advertisement. The first method is to change the height and width of the advertisement bar. Search for adview in the xml file and find it not found, so search for ad and find it.

Search uyun_ad_view again and the result is as follows:

I won't say much about the rest.

Another method is to change the smali file. Search for connectivity in the smali file and the results are as follows:

The above files are normally accessed, and the last few are the connections required by the advertisement. Open them one by one. When the advertisement needs to know whether the network is connected, it will be OK if no connection is returned.

B. smali

It is OK to annotate it.

Q. smali

Directly use goto to jump to cond_0. For example:

H. smali

Comment it out.

De. samli

Directly use goto to jump to cond_3.

Save, compile, and install the changes. After weeks of installation, there are still advertisements. It seems that skipping is not enough, so in the above file, it is OK to directly return 0.

Of course, you can use the remove ad option in the menu to remove 100 incense sticks instead of 100 incense sticks.

After use, you will find a daily birthday reminder. What should I do? Search

Landroid/app/icationicationmanager;-> notify (ILandroid/app/Notification;) V

Find the nofiticationmanager related to the advertisement, and change it to Landroid/app/icationicationmanager;-> cancel (I) V.

OK.