四人麻将内购破解（电脑端和手机端对照）

最新推荐文章于 2022-10-27 16:07:59 发布

Rnling

最新推荐文章于 2022-10-27 16:07:59 发布

阅读量2.5k

点赞数

分类专栏：游戏内购文章标签： Andriod 安全

本文链接：https://blog.csdn.net/Rnling/article/details/79591874

版权

本文介绍了如何在电脑和手机端破解《四人麻将》的内购。通过Andriodkiller在电脑上反编译APK，修改关键代码实现支付成功。在手机端使用MT管理器，定位并修改classes.dex，完成内购破解。最后对修改后的APK进行签名安装，并验证破解效果。

摘要由CSDN通过智能技术生成

其实不仅电脑端能够破解内购，从手机上也是可以的。在手机上破解需要MT管理器这个工具。下面分别从电脑端和手机上对《四人麻将》进行破解。

电脑：

先把APK扔进Andriodkiller进行反编译，搜索关键字符如onresult:

出现许多

对其进行查找查看是否存在“支付成功”等关键字

在AppActivity$2.smali中找到

以下是具体代码：

.class Lcom/sihai/sirenmajiang/AppActivity$2;
.super Ljava/lang/Object;
.source "AppActivity.java"

# interfaces
.implements Lcn/cmgame/billing/api/GameInterface$IPayCallback;


# annotations
.annotation system Ldalvik/annotation/EnclosingMethod;
    value = Lcom/sihai/sirenmajiang/AppActivity;->yidongPay()V
.end annotation

.annotation system Ldalvik/annotation/InnerClass;
    accessFlags = 0x0
    name = null
.end annotation


# instance fields
.field final synthetic this$0:Lcom/sihai/sirenmajiang/AppActivity;


# direct methods
.method constructor <init>(Lcom/sihai/sirenmajiang/AppActivity;)V
    .locals 0

    .prologue
    .line 1
    iput-object p1, p0, Lcom/sihai/sirenmajiang/AppActivity$2;->this$0:Lcom/sihai/sirenmajiang/AppActivity;

    .line 184
    invoke-direct {p0}, Ljava/lang/Object;-><init>()V

    return-void
.end method


# virtual methods
.method public onResult(ILjava/lang/String;Ljava/lang/Object;)V
    .locals 5
    .param p1, "resultCode"    # I
    .param p2, "s"    # Ljava/lang/String;
    .param p3, "obj"    # Ljava/lang/Object;

    .prologue
    const/16 v3, 0x37a

    const/4 v4, 0x0

    .line 188
    const-string v0, ""

    .line 189
    .local v0, "result":Ljava/lang/String;
    packed-switch p1, :pswitch_data_0

    .line 215
    new-instance v1, Ljava/lang/StringBuilder;

    const-string v2, "\u8d2d\u4e70\u9053\u5177\uff1a["

    invoke-direct {v1, v2}, Ljava/lang/StringBuilder;-><init>(Ljava/lang/String;)V

    invoke-virtual {v1, p2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;

    move-result-object v1

    const-string v2, "] \u53d6\u6d88\uff01"

    invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;

    move-result-object v1

    invoke-virtual {v1}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;

    move-result-object v0

    .line 216
    iget-object v1, p0, Lcom/sihai/sirenmajiang/AppActivity$2;->this$0:Lcom/sihai/sirenmajiang/AppActivity;

    invoke-static {v1}, Lcom/sihai/sirenmajiang/AppActivity;->access$1(Lcom/sihai/sirenmajiang/AppActivity;)Landroid/content/Context;

    move-result-object v1

    const-string v2, "\u652f\u4ed8\u53d6\u6d88"

    invoke-static {v1, v2, v4}, Landroid/widget/Toast;->makeText(Landr