Android Reverse Tour---hack " wear boots cat " game fee function

One, game charge analysis

The game charge is very normal, but play the most disgusting game is that you have not played to recharge, very annoyed, in fact, I do not play games, mainly for children, for example, now a lot of kids love to play Fruit Ninja this game. But this game pops up a charging interface when it doesn't start playing:

This is intolerable, although the cost of payment is not very much. But I still don't want to pay. This dialog is mandatory, when you click Cancel to quit the game, so it must be paid to succeed in the ability to continue to play.

second, look for the crack entrance

We have seen this game entrance charge scene, the following we have to remove this function can be. We've got hundreds of ways to get this thing out of the way from our previous experience of cracking. For example: Otherwise this charge decryption display, the change after the cancellation of the logic code does not let it quit the game and so on.

Are all kinds of means. This article is just a simple point to do. Just let the interface not show.

The operation is very easy. This game is not reinforced. First decompile with the Apktool tool. In order to find the interface entry, we can search through the string, and after the anti-compilation in the Values/strings.xml file to find the "friend to pay" the string content:

After finding it. See the ID of this string is: gc_billing_net_contacts, here can not be converted by the ID value in Public.xml to get the corresponding int type value. To search again. The ability to search directly in JADX can:

Here we see a Billingview class, from the name can guess this should be the above the charge page:

This view inherits the LinearLayout layout, detailed implementation here is not, from the view of the code implementation can be determined to be the above charge page. Look at where this class has been called:

It should be two places to see here. One is the Billingactivity class. One is the Gameinterface class, then there are two analysis routes, here with a clever way to directly locate which class, if it is the Billingactivity class, then the current topactivity is him. We use the command to view the current device's topactivity look at:adb shell dumpsys activity top

watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqvamlhbmd3zwkwotewndewmdaz/font/5a6l5l2t/fontsize/400/fill/ I0jbqkfcma==/dissolve/70/gravity/center "/>

This is not the Billingactivity class, so it is possible to conclude that the page handling charges is in the Gameinterface class. So go directly into the Getbillingview method of this class:

Then see where this method is called, assuming that the find Usage menu is not available, and that you can search the method directly globally:

Here there are two places to use this method, is still according to the above topactivity inference, it is impossible to dgcpaymentactivity this class, so directly look at the following class, click to enter can:

third, the shielding fee entrance function

Here is clear, here through a dialog to show, set dialog Contentview can. So I found the entrance to the show and it was easy to kill the entrance. Find the appropriate Smali code and stare directly at the line show code:

And then in the back of the compilation again in the packaging can be, but unfortunately, the execution times are wrong:

watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqvamlhbmd3zwkwotewndewmdaz/font/5a6l5l2t/fontsize/400/fill/ I0jbqkfcma==/dissolve/70/gravity/center "/>

Here, there is no good way to deal with it. Finally, take the whole method code and kill it all directly. Let this method be called an empty method, directly replace the original code with a directive can:return-void, direct method return:

watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqvamlhbmd3zwkwotewndewmdaz/font/5a6l5l2t/fontsize/400/fill/ I0jbqkfcma==/dissolve/70/gravity/center "/>

Then you can compile the package again. This time you will not see the Billing dialog box.

Game APK:HTTP://PAN.BAIDU.COM/S/1BO6RFDX

Serious statement: The purpose of this article is simply to introduce the reverse technology, no matter what commercial purposes, it is assumed that the use of this technology for commercial purposes, no matter what legal liability will be borne by the operator, and the author of this article does not matter what relationship, Also sincerely hope that you can grasp the attitude of technology learning to read this article, thank you very much!

Iv. Summary

This article simply introduces how to remove the charge function in the game, to enter the game play smoothly. Being able to see the length of this article is very short, in fact this hack process is very easy. Suitable for 0 basic reverse enthusiasts to get started exercise function. Read the article, remember to share a lot of proliferation!

Many other things: click here

Follow the public number. Latest technical dry-feed real-time push

Watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqv/font/5a6l5l2t/fontsize/400/fill/i0jbqkfcma==/dissolve/70/gravity /center "style=" border:none; max-width:100%; max-height:100%; "/> Sweep and small series
When adding: "Code Beautiful" or not pass.

Watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqv/font/5a6l5l2t/fontsize/400/fill/i0jbqkfcma==/dissolve/70/gravity /center "style=" border:none; max-width:100%; max-height:100%; "/>

Android Reverse Tour---hack " wear boots cat " game fee function