某android游戏逆向小记各各他

apktool解包,jdgui查看jar发现代码非常少。查看代码发现它动态加载了一个he.jar。这个jar实际上是一个dex文件。这个dex文件用dex2jar反编译后发现里面代码仍然非常的少。

重新打包后打manifest.xml里面设置成debug标志为true。

重新打包后发现一直出现签名校验错误。提示到官网下载apk。于是采用ida调试so文件。最重要的so文件是libhegame.so。最重要的东西都是在这个so里面。用ida在里面跟踪,被搞的很惨,因为绕来绕去总是在lua里面。度娘后才知道lua是一个脚本语言。原来在IDA里绕的都是lua的运行平台。在解压缩包里发现assets\src里面发现大量.lua加密过的文件。看来真正的游戏是运行在lua环境里面的。在IDA里调试的时候,一个偶然的机会发现一个重要的函数load_lua。(其实也不是偶然,因为lua内容加载有几个函数,有从文件加载的,有从内存加载的,在从内存加载的地方断点,即可找到load_lua函数),这个函数是破解的关键。它用于加载所有加密的assets\src下面的所有lua加密文件。ida的f5查看C代码,再加上静态分析手段。基本上能看到它循环读取文件,并使用密钥解密lua密文的过程。它采用的是openssl的EVP_aes_128_cbc加密方式。密钥静态分析都能得到。再加上动态调试,可以拿到所有lua文件的明文。

有一点需要特别注意的是解密时使用的,iv初始向量。它位于lua密文的前16个字节。这个不用修改。密文内容从第16个字节偏移才是真正的加密内容。openssl解密后仍然是乱码。跟踪后发现是正确的。不过是压缩过了。解压缩即可。

使用上面的函数遍历一遍lua目录,即可拿到所有lua脚本。改lua脚本就比较快了。对比签名是在SignatureUtil.lua里面,让verifysignature全返回true即可。lua修改后需要先压缩,压缩完了再加密,加密完成后再把解密前密文的前16个字节,是初始向量添加在文件的开头。再重新打包签名,即可。

THE END
1.財資管理服務披露與協議CathayBankWe hereby disclaim all responsibility for any loss, delay, cost or liability to the extent that it arises, directly or indirectly, in whole or 26. Zsuites Services Services offered thru our third party provider include ZEscrow and ZRent. ZEscrow. A digital sub accounting service, whichhttps://www.cathaybank.com/zh-hant/business/treasury-management/treasury-management-agreement
2.832ClubLn,Sumter,SC29154$229,000 3bd 2ba 1,215 sqft (on 0.26 acres) 19 Capri Dr, Sumter, SC 29150 Use arrow keys to navigate NEW - 1 DAY AGO AUCTION 0.45 ACRES Price Unknown 3bd 2ba 1,523 sqft (on 0.45 acres) 34 Henrietta St, Sumter, SC 29150 Use arrow keys to navigate 0.34 ACRES $178,000 3bd https://www.trulia.com/home/832-club-ln-sumter-sc-29154-69183783
3.PressReleasesZelleAcross Generations, More Gen Z'ers (66%) Prefer Money as a Gift Followed by Millennials (61%) Read More Zelle? and EVERFI Partner on Digital Financial Literacy Programs for High School Students Nationwide November 14, 2019 Zelle? and EVERFI Partner on Digital Financial Literacy Programshttp://www.zellepay.com/press-releases
4.ZopiZopi helps you find and import dropshipping products from AliExpress, Temu, and Dsers, set pricing rules, and fulfill orders automatically.https://apps.shopify.com/ali-orders-by-fireapps
5.ScheduleChangeNoticeWe regret to inform you that GSL ALEXANDRA 34E (AM3) been delayed as below. We Sincerely apologize for the inconvenience caused and ask for your kind understanding about this situation. If you have any question, please feel free to ask our local agent office. ORIGINAL ETA PUSAN ETD PUSAN http://zimchina.com/customer-updates/schedule-change-notice-gsl-alexandra-34e-am3-zsa-service
6.重要公告BD站点协议主体变更及回款说明为保障业务平稳持续发展,Daraz BD站点跨境商家已签订协议的主体将进行调整。自2024年12月7日起BD站点跨境商家已签订协议的主体将变更为 AL-BARAKAHINTERNATIONALLIMITED公司,跨境商家的货款也将由AL-BARAKAHINTERNATIONALLIMITED公司通过万里汇完成对跨境商家的支付。https://daraz-crossborder.com/newsinfo/7795071.html
7.水上运动装备及配件全球及中国市场规模研究和预测2025本报告研究全球与中国市场水上运动装备及配件的发展现状及未来发展趋势,分别从生产和消费的角度分析水上运动装备及配件的主要生产地区、主要消费地区以及主要的生产商。重点分析全球与中国市场的主要厂商产品特点、产品规格、不同规格产品的价格、产量、产值及全球和中国市场主要生产商的市场份额。 https://www.shangyexinzhi.com/article/23760152.html
8.zlibirary中文网址入口链接z新的ZLIBIRARY电子图书馆官 方网站入口https://z-lib.is/,ZLIBIRARY网站入口为国外网现在是可以登录访问的,但是不稳定,或许接下来也会打不开。 如果您在访问这个ZLIBIRARY官 方网站入口时,出现打不开的情况,请更换一个浏览器试-下,如果还是不行,说明这个网址也不能用了。您需要重新寻找新的网址入口登录。 https://m.vqs.com/article/12626.html
9.电子书阅读zlibrary+微信zliability官网最近我姐给我推荐了一本书,名字叫《底层逻辑》。想着下载来看看,能尽量读电子版,就还是读电子版的,毕竟方便携带,还能多设备同步,有空闲时间,随时随地都能打开看一看。 通过下载这本书,总结流程如下: 有一本想读的书 下载到电子书的epub版本(我这里用的是z-library,找到了《底层逻辑》这本书) https://blog.csdn.net/u013559309/article/details/122687484
10.zliabary图书馆登录入口zliabary图书馆入口地址zliabary图书馆入口地址 zliabary图书馆是一款蕴含了超多类型的小说平台,只需要登录即可体验zliabary的内容了,但是不少小伙伴还不清楚入口地址是什么,那么下面就让小编为大家带来zliabary图书馆入口地址介绍。 zliabary图书馆登录入口 Zlibrary网址入口:>>点击进入<<https://app.ali213.net/gl/1280717.html
11.M3E66ZPA155.5200MHZ,M3E66ZPA155.5200MHZpdf中文资料,M3E66ZPA官网地址http://www.mtronpti.com下载文档 详细参数 全文预览 M3E66ZPA155.5200MHZ概述 Oscillator,M3E66ZPA155.5200MHZ规格参数参数名称 属性值 是否Rohs认证 不符合 Reach Compliance Code unknown 最长下降时间 2.5 ns 频率调整-机械 NO 频率稳定性 25% 安装特点 THROUGH HOLE MOUNT 标称工作频率 155.52 MHz 最http://datasheet.eeworld.com.cn/part/M3E66ZPA155.5200MHZ,mtronpti,30379824.html
12.gc1.ldj嗯啊哈别停疼视频 ZZ〇〇Z〇ⅩZ0XX日本老女人大乳头 插b网站国产馆 国产精品男女午夜影院免费观看 好爽?要高潮了软件 美丽十次啦宜春院 二级黄色片三级黄色片 欧美肥婆重口味xxxxxx 艳妇接受性按摩AV 别插了影院 20厘米把女友干到走不了路漫画 熟妇淫荡 美女乖乖扒下小内裤打屁股网站 在线观看成人http://gc1.ldj-edujy.com/xxxr53865257.htm
13.InvestopediaInvestopedia is the world's leading source of financial content on the web, ranging from market news to retirement strategies, investing education to insights from advisors.http://investopedia.com/
14.HomeZSince 1987, Z-Lite has been creating a beautiful array of quality interior and exterior residential lighting to enhance your space.https://www.z-lite.com/
15.FDAapprovesZepbound?(tirzepatide)asthefirstandonly/PRNewswire/ -- Eli Lilly and Company (NYSE: LLY) today announced the U.S. Food and Drug Administration (FDA) approved Zepbound? (tirzepatide) as the first andhttps://www.prnewswire.com/news-releases/fda-approves-zepbound-tirzepatide-as-the-first-and-only-prescription-medicine-for-moderate-to-severe-obstructive-sleep-apnea-in-adults-with-obesity-302337722.html
16.ZliabilityZ-liability ip所属地:新疆维吾尔自治区 天池实验室 Senior Developerhttps://tianchi.aliyun.com/home/science/scienceDetail?userId=1095280093275
17.DJIAir2SDJI accepts no liability for damage, injury, or any legal responsibility incurred directly or indirectly from the use of this product. The user ? ; .wì?zù ?;zTì z¤Uì?t F ?^?oM?\q Y`oXi^M{? https://www.360doc.cn/article/46073052_1080698498.html
18.高顿22考研英语:分级核心词汇Part21近义词:liability责任 形近词:oblige强迫,迫使 真题例句:His function is analogous to that of a judge,who must accept the obligation of revealing in as obvious a manner as possible the course of reasoning which led him to his decision.(2006-翻译) https://www.gaodun.com/xuewei/1202261.html
19.CEZ11V东芝半导体&存储产品中国官网CEZ11V 数据表/日文[Dec,2023]PDF: 1881KB 数据表 CEZ11V 数据表/英文[Dec,2023]PDF: 1805KB Environment Information Certificate Regarding EU RoHS(2011/65/EU)Controlled Substances[Nov,2024]PDF: 85KB Environment Information Certificate on Content of SVHC of REACH[Nov,2024]PDF: 84KB https://toshiba.semicon-storage.com/info/lookup.jsp?pid=CEZ11V
20.JDGUI1.6formacbigsur打不开问题# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, # # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE # # SOFTWARE. # # # ### # function 'stub_logger()' # # A logger which logs to the macOS Console.app using the 'https://blog.51cto.com/wang/4237059
21.首页蓝牙语音遥控器,搜片源、查天气、播放视频、打开应用等轻松操控。 智慧家居 让房子拥有"智慧" 智慧AI生活 第5代超级电视 — 现已全面接入智慧物联EUIoT平台 通过跨品类、跨品牌、软硬件结合的方式,让家庭智能设备互联互通,服务家庭生活场景,拉近家庭与万物智慧物联网的距离 http://www.letv.com/
22.liabilitytoyouexceedreason, Recruiterzliability(ifany) shallnotexceedtheprice paid or to be paid by the Client for the Services. recruiterz.co.uk recruiterz.co.uk 在客户无论出于何种原因反对Recruiterz索赔事件,Recruiterz责任(如有)不得超过付出的代价,或由客户支付服务。 http://cn.linguee.com/%E8%8B%B1%E8%AF%AD-%E4%B8%AD%E6%96%87/%E7%BF%BB%E8%AD%AF/liability+to+you+exceed.html
23.Zlibrary的官网地址是什么1.官网:https://singlelogin.re/ 2.镜像站1:https://zlib.app/ 3.影子站点:zh.annas-archive.org 4.镜像站1:https://1lib.tk/(暂时无效) 5、快速入口:https://zlib.yibook.org/ 想了解更多关于Zlibrary的官网地址是什么的内容,请扫微信 https://www.soufuzi.com/ziyuan/1824
24.sqlmap的使用介绍腾讯云开发者社区cable local,state and federal laws.Developers assume no liability and are not responsibleforany misuse or damage caused bythisprogram[*]starting @18:20:41/2020-02-25/[18:20:42][INFO]connection to MySQL server'127.0.0.1:3306'established[18:20:42][INFO]testing MySQL[18:20:42][INFO]resumedhttps://cloud.tencent.com/developer/article/1942422
25.ZWaveDevelopmentKitLicense(INCLUDING NEGLIGENCE), STRICT LIABILITY, PRODUCT LIABILITY OR OTHERWISE, OR LICENSEE’S USE OF OR INABILITY TO USE THE SILICON LABS PROGRAM AND/OR CONFIDENTIAL INFORMATION, EVEN IF SILICON LABS OR ITS REPRESENTATIVES HAVE BEEN ADVISED OF OR OTHERWISE SHOULD KNOW ABOUT THE POSSIBILITY OF SUCH https://www.silabs.com/about-us/legal/z-wave-development-kit-license
26.AZPOAZ22阿塞拜疆BAKUAZERPOST LIMITED LIABILITY COMPANY的SWIFT碼為AZPOAZ22。查看有關此銀行或機構的更多資訊https://www.theswiftcodes.com/zh-hk/azerbaijan/azpoaz22/
27.layuilayui/ 官网下载的layui demos/ 网友上传的使用的样例 src/ 打包前的依赖和源码快速z 与单元格关联的数字格式字符串(如果需要) l 单元格超链接对象(目标链接,.tooltip是提示) s 单元http://git.oschina.net/emaiqi/layui-excel
28.TermsMakesbridge TECHNOLOGY, INC.’S ENTIRE LIABILITY AND CUSTOMER’S SOLE AND EXCLUSIVE REMEDY FOR BREACH OF THE FOREGOING WARRANTY SHALL BE Makesbridge TECHNOLOGY, INC.’S OPTION TO EXTEND SERVICE TIME AT NO ADDITIONAL COST TO COMPENSATE FOR LOST ACTIVITY TIME. IF CUSTOMER IS DISSATISFIED WITH ANY http://www.makesbridge.com/terms/
29.TopLawyers2024Liability|Professional Malpractice Law|Public Finance Law|Real Estate Law|Securities Law|Tax Law|Miriam Z. Wolock Law Offices of Miriam Z. Wolock Food & Beverage Law Thomas J. Azoni https://www.dbusiness.com/top-lawyers/top-lawyers-2024/