Android LOG输出

文章介绍了如何从crack.smali文件中提取并操作debug信息,包括使用smali语句插入和转换字节数组,以及处理Debug-Info标签。涉及到了反编译、编译成class.dex和apk的流程,以及签名处理。
摘要由CSDN通过智能技术生成

crack.smali

    .class public Lcrack;
.super Ljava/lang/Object;
.source "crack.java"
 
.method public static log(Ljava/lang/String;)V
    .locals 1
    .prologue
 
    const-string v0, "==Debug-Info=="
    invoke-static {v0, p0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
    return-void
.end method

 .method public static userlog(Ljava/lang/String;)V
    .locals 1
    .prologue
 
    const-string v0, "user==Debug-Info=="
    invoke-static {v0, p0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
    return-void
.end method

 .method public static passlog(Ljava/lang/String;)V
    .locals 1
    .prologue
 
    const-string v0, "pass==Debug-Info=="
    invoke-static {v0, p0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
    return-void
.end method

 .method public static aeslog(Ljava/lang/String;)V
    .locals 1
    .prologue
 
    const-string v0, "aes==Debug-Info=="
    invoke-static {v0, p0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
    return-void
.end method


.method public static convertByteArrayToString([B)Ljava/lang/String;
    .locals 7

    const/4 v1, 0x0

    new-instance v2, Ljava/lang/StringBuffer;

    invoke-direct {v2}, Ljava/lang/StringBuffer;-><init>()V

    array-length v3, p0

    move v0, v1

    :goto_0
    if-lt v0, v3, :cond_0

    invoke-virtual {v2}, Ljava/lang/StringBuffer;->toString()Ljava/lang/String;

    move-result-object v0
    
    const-string v6, "==Debug-Info=="
    
    invoke-static {v6, v0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
    

    return-object v0

    :cond_0
    aget-byte v4, p0, v0

    const-string v5, "0x%02X"

    const/4 v6, 0x1

    new-array v6, v6, [Ljava/lang/Object;

    invoke-static {v4}, Ljava/lang/Byte;->valueOf(B)Ljava/lang/Byte;

    move-result-object v4

    aput-object v4, v6, v1

    invoke-static {v5, v6}, Ljava/lang/String;->format(Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/String;

    move-result-object v4

    invoke-virtual {v2, v4}, Ljava/lang/StringBuffer;->append(Ljava/lang/String;)Ljava/lang/StringBuffer;

    add-int/lit8 v0, v0, 0x1

    goto :goto_0
.end method
  1. 反编译class.dex文件

  2. 将crack.smali放到com同目录

  3. 插入smali语句到相关位置
    输出byte
    invoke-static {vx}, Lcrack;->convertByteArrayToString([B)Ljava/lang/String;

    输出string
    invoke-static {vx}, Lcrack;->log(Ljava/lang/String;)V

    输出tag
    Debug-Info

  4. 修改VX为具体要输出的寄存器

  5. 重新编译为class.dex文件 替换原来的dex编译为apk或者直接zip打开替换(雷电可过签名)

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值