|
|
软件如图
通过测试得知是验证设备uuid
找对应的按钮
初步分析
尝试在这里赋值
发现仍然无效 但是不限制uuid了
查找v14的调用链条 发现结果被移动到了Lt4 继续追
发现还有一个调用链条 继续追
在la5.t中
.method public final t(Ljava/lang/Object;)Ljava/lang/Object;
.registers 6
.line 1
iget v0, p0, La5;->h:I
.line 3
const/4 v1, 0x1
.line 4
if-eqz v0, :cond_16
.line 6
if-ne v0, v1, :cond_f
.line 8
invoke-static {p1}, Lkr2;->r(Ljava/lang/Object;)V
.line 11
check-cast p1, Lsl3;
.line 13
iget-object p1, p1, Lsl3;->a:Ljava/lang/Object;
.line 15
goto :goto_30
.line 16
:cond_f
const-string p0, "call to \'resume\' before \'invoke\' with coroutine"
.line 18
invoke-static {p0}, Ln2;->l(Ljava/lang/String;)V
.line 21
const/4 p0, 0x0
.line 22
return-object p0
.line 23
:cond_16
invoke-static {p1}, Lkr2;->r(Ljava/lang/Object;)V
.line 26
iget-object p1, p0, La5;->t:Lxu2;
.line 28
invoke-interface {p1}, Lk74;->getValue()Ljava/lang/Object;
.line 31
move-result-object p1
.line 32
check-cast p1, Ljava/lang/String;
.line 34
iput v1, p0, La5;->h:I
.line 36
iget-object v0, p0, La5;->q:Lq4;
.line 38
iget-object v2, p0, La5;->r:Ljava/lang/String;
.line 40
invoke-virtual {v0, v2, p1, p0}, Lq4;->b(Ljava/lang/String;Ljava/lang/String;Lsk0;)Ljava/lang/Object;
.line 43
move-result-object p1
.line 44
sget-object v0, Lcm0;->a:Lcm0;
.line 46
if-ne p1, v0, :cond_30
.line 48
return-object v0
.line 49
:cond_30
:goto_30
invoke-static {p1}, Lsl3;->a(Ljava/lang/Object;)Ljava/lang/Throwable;
.line 52
move-result-object v0
.line 53
iget-object v2, p0, La5;->A:Lxu2;
.line 55
if-nez v0, :cond_45
.line 57
check-cast p1, Lb5;
.line 59
sget-object p1, Ljava/lang/Boolean;->FALSE:Ljava/lang/Boolean;
.line 61
invoke-interface {v2, p1}, Lxu2;->setValue(Ljava/lang/Object;)V
.line 64
iget-object p0, p0, La5;->z:Lmo1;
.line 66
invoke-interface {p0}, Lmo1;->a()Ljava/lang/Object;
.line 69
goto :goto_9a
.line 70
:cond_45
sget-object p1, Ljava/lang/Boolean;->FALSE:Ljava/lang/Boolean;
.line 72
invoke-interface {v2, p1}, Lxu2;->setValue(Ljava/lang/Object;)V
.line 75
invoke-virtual {v0}, Ljava/lang/Throwable;->getMessage()Ljava/lang/String;
.line 78
move-result-object p1
.line 79
const/4 v2, 0x0
.line 80
if-eqz p1, :cond_5c
.line 82
const-string v3, "not bound"
.line 84
invoke-static {p1, v3, v2}, Lu84;->b0(Ljava/lang/CharSequence;Ljava/lang/String;Z)Z
.line 87
move-result p1
.line 88
if-ne p1, v1, :cond_5c
.line 90
iget-object p1, p0, La5;->B:Ljava/lang/String;
.line 92
goto :goto_95
.line 93
:cond_5c
invoke-virtual {v0}, Ljava/lang/Throwable;->getMessage()Ljava/lang/String;
.line 96
move-result-object p1
.line 97
if-eqz p1, :cond_6d
.line 99
const-string v3, "revoked"
.line 101
invoke-static {p1, v3, v2}, Lu84;->b0(Ljava/lang/CharSequence;Ljava/lang/String;Z)Z
.line 104
move-result p1
.line 105
if-ne p1, v1, :cond_6d
.line 107
iget-object p1, p0, La5;->C:Ljava/lang/String;
.line 109
goto :goto_95
.line 110
:cond_6d
invoke-virtual {v0}, Ljava/lang/Throwable;->getMessage()Ljava/lang/String;
.line 113
move-result-object p1
.line 114
if-eqz p1, :cond_7c
.line 116
const-string v3, "404"
.line 118
invoke-static {p1, v3, v2}, Lu84;->b0(Ljava/lang/CharSequence;Ljava/lang/String;Z)Z
.line 121
move-result p1
.line 122
if-ne p1, v1, :cond_7c
.line 124
goto :goto_8a
.line 125
:cond_7c
invoke-virtual {v0}, Ljava/lang/Throwable;->getMessage()Ljava/lang/String;
.line 128
move-result-object p1
.line 129
if-eqz p1, :cond_8d
.line 131
const-string v3, "invalid"
.line 133
invoke-static {p1, v3, v2}, Lu84;->b0(Ljava/lang/CharSequence;Ljava/lang/String;Z)Z
.line 136
move-result p1
.line 137
if-ne p1, v1, :cond_8d
.line 139
:goto_8a
iget-object p1, p0, La5;->D:Ljava/lang/String;
.line 141
goto :goto_95
.line 142
:cond_8d
invoke-virtual {v0}, Ljava/lang/Throwable;->getMessage()Ljava/lang/String;
.line 145
move-result-object p1
.line 146
if-nez p1, :cond_95
.line 148
iget-object p1, p0, La5;->E:Ljava/lang/String;
.line 150
:cond_95
:goto_95
iget-object p0, p0, La5;->F:Lxu2;
.line 152
invoke-interface {p0, p1}, Lxu2;->setValue(Ljava/lang/Object;)V
.line 155
:goto_9a
sget-object p0, Lso4;->a:Lso4;
.line 157
return-object p0
.end method
替换成
.method public final t(Ljava/lang/Object;)Ljava/lang/Object;
.registers 6
.line 1
# 直接返回成功,跳过所有验证
sget-object v0, Ljava/lang/Boolean;->FALSE:Ljava/lang/Boolean;
iget-object v1, p0, La5;->A:Lxu2;
invoke-interface {v1, v0}, Lxu2;->setValue(Ljava/lang/Object;)V
iget-object p0, p0, La5;->z:Lmo1;
invoke-interface {p0}, Lmo1;->a()Ljava/lang/Object;
sget-object p0, Lso4;->a:Lso4;
return-object p0
.end method
像我一样
可以看到已经把这个验证过了
本内容由溆旧和deepseek共创 |
本帖子中包含更多资源
您需要 登录 才可以下载或查看,没有账号?立即注册
x
|