新手练习-私密空间版本号999-高级会员

Juntianzi

打开软件我们进入到会员界面查看


可以看到我们目前是免费版本
接下来我们使用mt管理器进行逆向破解

首先进入dex编辑里进行资源查询 输入类型进行查找

点击复制 在去搜索里面搜索 点击进去

1. .method private H()Ljava/lang/String;
   
2.     .registers 4
   
3. 
   
4.     iget-object v0, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->aE:Lcom/netqin/ps/config/Preferences;
   
5. 
   
6.     invoke-virtual {v0}, Lcom/netqin/ps/config/Preferences;->getUserLevelName()Ljava/lang/String;
   
7. 
   
8.     move-result-object v0
   
9. 
   
10.     invoke-static {v0}, Landroid/text/TextUtils;->isEmpty(Ljava/lang/CharSequence;)Z
    
11. 
    
12.     move-result v1
    
13. 
    
14.     const/4 v2, 0x1
    
15. 
    
16.     if-nez v1, :cond_18
    
17. 
    
18.     const-string v1, "null"
    
19. 
    
20.     invoke-virtual {v0, v1}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z
    
21. 
    
22.     move-result v1
    
23. 
    
24.     if-eqz v1, :cond_16
    
25. 
    
26.     goto :goto_18
    
27. 
    
28.     :cond_16
    
29.     const/4 v1, 0x0
    
30. 
    
31.     goto :goto_19
    
32. 
    
33.     :cond_18
    
34.     :goto_18
    
35.     const/4 v1, 0x1
    
36. 
    
37.     :goto_19
    
38.     if-eqz v1, :cond_2d
    
39. 
    
40.     invoke-static {}, Lcom/netqin/ps/b/d;->a()Z
    
41. 
    
42.     move-result v0
    
43. 
    
44.     if-ne v0, v2, :cond_29
    
45. 
    
46.     const v0, 0x7f0c03c3
    
47. 
    
48.     :goto_24
    
49.     invoke-virtual {p0, v0}, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->getString(I)Ljava/lang/String;
    
50. 
    
51.     move-result-object v0
    
52. 
    
53.     goto :goto_2d
    
54. 
    
55.     :cond_29
    
56.     const v0, 0x7f0c0436
    
57. 
    
58.     goto :goto_24
    
59. 
    
60.     :cond_2d
    
61.     :goto_2d
    
62.     invoke-static {v2}, Lcom/netqin/m;->a(I)Z
    
63. 
    
64.     move-result v1
    
65. 
    
66.     if-eqz v1, :cond_4e
    
67. 
    
68.     new-instance v1, Ljava/lang/StringBuilder;
    
69. 
    
70.     invoke-direct {v1}, Ljava/lang/StringBuilder;-><init>()V
    
71. 
    
72.     const v2, 0x
    
73. 
    
74.     invoke-virtual {p0, v2}, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->getString(I)Ljava/lang/String;
    
75. 
    
76.     move-result-object v2
    
77. 
    
78.     invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
    
79. 
    
80.     const-string v2, " "
    
81. 
    
82.     invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
    
83. 
    
84.     invoke-virtual {v1, v0}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
    
85. 
    
86.     invoke-virtual {v1}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;
    
87. 
    
88.     move-result-object v0
    
89. 
    
90.     :cond_4e
    
91.     return-object v0
    
92. .end method

复制代码

这里我们进入a(I)Z方法里面进行修改

1. .method public static a(I)Z
   
2.     .registers 2
   
3. 
   
4.     const/4 v0, 0x2
   
5. 
   
6.     if-ne v0, p0, :cond_5
   
7. 
   
8.     const/4 p0, 0x1
   
9. 
   
10.     return p0
    
11. 
    
12.     :cond_5
    
13.     const/4 p0, 0x0
    
14. 
    
15.     return p0
    
16. .end method

复制代码

直接设置为const/4 v0, 0x1 把前面的注释掉或者删除


然后退出去进入a()Z方法

1. .method public static a()Z
   
2.     .registers 2
   
3. 
   
4.     invoke-static {}, Lcom/netqin/ps/config/Preferences;->getInstance()Lcom/netqin/ps/config/Preferences;
   
5. 
   
6.     move-result-object v0
   
7. 
   
8.     invoke-virtual {v0}, Lcom/netqin/ps/config/Preferences;->getNewUserLevel()I
   
9. 
   
10.     move-result v0
    
11. 
    
12.     const/16 v1, 0x20
    
13. 
    
14.     if-eq v0, v1, :cond_e
    
15. 
    
16.     const/4 v0, 0x1
    
17. 
    
18.     return v0
    
19. 
    
20.     :cond_e
    
21.     const/4 v0, 0x0
    
22. 
    
23.     return v0
    
24. .end method

复制代码

这里也设置为const/4 v0, 0x1 强制为true


随后进入getNewUserLevel方法

1. .method public getNewUserLevel()I
   
2.     .registers 4
   
3. 
   
4.     const/4 v0, 0x2
   
5. 
   
6.     invoke-static {v0}, Lcom/netqin/m;->a(I)Z
   
7. 
   
8.     move-result v0
   
9. 
   
10.     const/16 v1, 0x20
    
11. 
    
12.     if-eqz v0, :cond_15
    
13. 
    
14.     iget-object v0, p0, Lcom/netqin/ps/config/Preferences;->mPref:Lcom/netqin/localInfo/a/b/c;
    
15. 
    
16.     const-string v2, "new_user_level"
    
17. 
    
18.     invoke-virtual {v0, v2, v1}, Lcom/netqin/localInfo/a/b/c;->getInt(Ljava/lang/String;I)I
    
19. 
    
20.     move-result v0
    
21. 
    
22.     const/4 v2, 0x4
    
23. 
    
24.     if-ne v0, v2, :cond_15
    
25. 
    
26.     return v2
    
27. 
    
28.     :cond_15
    
29.     iget-object v0, p0, Lcom/netqin/ps/config/Preferences;->mPref:Lcom/netqin/localInfo/a/b/c;
    
30. 
    
31.     const-string v2, "new_user_level"
    
32. 
    
33.     invoke-virtual {v0, v2, v1}, Lcom/netqin/localInfo/a/b/c;->getInt(Ljava/lang/String;I)I
    
34. 
    
35.     move-result v0
    
36. 
    
37.     return v0
    
38. .end method

复制代码

注释    #move-result v0 添加const/4 v0, 0x4


然后退到H代码的地方 往上滑找到f方法

1. .method private F()V
   
2.     .registers 3
   
3. 
   
4.     iget-object v0, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->aE:Lcom/netqin/ps/config/Preferences;
   
5. 
   
6.     invoke-virtual {v0}, Lcom/netqin/ps/config/Preferences;->getUID()Ljava/lang/String;
   
7. 
   
8.     move-result-object v0
   
9. 
   
10.     iput-object v0, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->aI:Ljava/lang/String;
    
11. 
    
12.     iget-object v0, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->aE:Lcom/netqin/ps/config/Preferences;
    
13. 
    
14.     invoke-virtual {v0}, Lcom/netqin/ps/config/Preferences;->getNewUserLevel()I
    
15. 
    
16.     move-result v0
    
17. 
    
18.     iput v0, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->aJ:I
    
19. 
    
20.     new-instance v0, Ljava/lang/StringBuilder;
    
21. 
    
22.     const-string v1, "fill date userLevel is:"
    
23. 
    
24.     invoke-direct {v0, v1}, Ljava/lang/StringBuilder;-><init>(Ljava/lang/String;)V
    
25. 
    
26.     iget v1, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->aJ:I
    
27. 
    
28.     invoke-virtual {v0, v1}, Ljava/lang/StringBuilder;->append(I)Ljava/lang/StringBuilder;
    
29. 
    
30.     sget-boolean v0, Lcom/netqin/s;->g:Z
    
31. 
    
32.     invoke-direct {p0}, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->G()Ljava/lang/String;
    
33. 
    
34.     move-result-object v0
    
35. 
    
36.     iget-object v1, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->M:Landroid/widget/TextView;
    
37. 
    
38.     invoke-virtual {v1, v0}, Landroid/widget/TextView;->setText(Ljava/lang/CharSequence;)V
    
39. 
    
40.     iget-object v0, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->aE:Lcom/netqin/ps/config/Preferences;
    
41. 
    
42.     invoke-virtual {v0}, Lcom/netqin/ps/config/Preferences;->getServiceExpired()I
    
43. 
    
44.     move-result v0
    
45. 
    
46.     const/4 v1, -0x1
    
47. 
    
48.     if-eq v0, v1, :cond_45
    
49. 
    
50.     iget-object v0, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->aT:Landroid/view/View;
    
51. 
    
52.     invoke-virtual {v0}, Landroid/view/View;->getVisibility()I
    
53. 
    
54.     move-result v0
    
55. 
    
56.     if-nez v0, :cond_45
    
57. 
    
58.     iget-object v0, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->n:Landroid/widget/TextView;
    
59. 
    
60.     const v1, 0x7f0c03c3
    
61. 
    
62.     invoke-virtual {p0, v1}, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->getString(I)Ljava/lang/String;
    
63. 
    
64.     move-result-object v1
    
65. 
    
66.     invoke-virtual {v0, v1}, Landroid/widget/TextView;->setText(Ljava/lang/CharSequence;)V
    
67. 
    
68.     return-void
    
69. 
    
70.     :cond_45
    
71.     invoke-direct {p0}, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->H()Ljava/lang/String;
    
72. 
    
73.     move-result-object v0
    
74. 
    
75.     iget-object v1, p0, Lcom/netqin/ps/ui/memeber/MemberAreaNewActivity;->n:Landroid/widget/TextView;
    
76. 
    
77.     invoke-virtual {v1, v0}, Landroid/widget/TextView;->setText(Ljava/lang/CharSequence;)V
    
78. 
    
79.     return-void
    
80. .end method
    

复制代码

进入getServiceExpired方法 这个是会员过期时间的

1. .method public getServiceExpired()I
   
2.     .registers 4
   
3. 
   
4.     iget-object v0, p0, Lcom/netqin/ps/config/Preferences;->mPref:Lcom/netqin/localInfo/a/b/c;
   
5. 
   
6.     const-string v1, "service_expired"
   
7. 
   
8.     const/4 v2, -0x1
   
9. 
   
10.     invoke-virtual {v0, v1, v2}, Lcom/netqin/localInfo/a/b/c;->getInt(Ljava/lang/String;I)I
    
11. 
    
12.     move-result v0
    
13. 
    
14.     return v0
    
15. .end method

复制代码

我们直接把invoke-virtual {v0, v1, v2}, Lcom/netqin/localInfo/a/b/c;->getInt(Ljava/lang/String;I)I

    #move-result v0注释或者删除 然后把上面const/4 v2修改成const/4 v0


随后重新进入getUserLevelName方法来让会员页面显示高级会员
直接替换即可 就是删了几行代码

1. .method public getUserLevelName()Ljava/lang/String;
   
2.     .registers 4
   
3. 
   
4.     const/4 v0, 0x0
   
5. 
   
6.     return-object v0
   
7. .end method

复制代码

最后一直退出 然后重新打包  加签名 安装 进行测试

可以看到已经显示高级版本包括功能都是可以使用的
刚开始写 写的不好 有问题可以提出来 谢谢

兔子喜欢吃草莓

很详细的教程学习学习

Juntianzi

兔子喜欢吃草莓 发表于 2025-12-23 17:05
很详细的教程学习学习

有的解释没有详细写 刚开始写这种 注释什么的还要完善下哈哈

续缘

感谢分享

ee

感谢分享详细教程

网暴真的太可怕了

66 就得多搞它谷歌的

蜡笔不小新

感谢分享

tuandgame

应该试一下隐藏

Motivar

感谢分享

紫浩

学习

Juntianzi

tuandgame 发表于 2025-12-23 18:19
应该试一下隐藏

不是很清楚哈哈

skkk

学习学习

YanRan233

感谢大佬分享

哎哟你干嘛

感谢分享