ChatOn v1.35.366360版本的 MD5 值为:cde28447b38d5467efa95e48e7076155

以下内容为反编译后的 KillerApplication.java 源代码,内容仅作参考


package bin.mt.signature;

import android.app.Application;
import android.content.pm.PackageInfo;
import android.content.pm.PackageManager;
import android.content.pm.Signature;
import android.os.Build;
import android.os.Environment;
import android.os.Parcel;
import android.os.Parcelable;
import android.util.Base64;
import java.io.BufferedReader;
import java.io.File;
import java.io.FileOutputStream;
import java.io.FileReader;
import java.io.IOException;
import java.io.InputStream;
import java.io.PrintStream;
import java.lang.reflect.Field;
import java.util.Map;
import java.util.zip.ZipEntry;
import java.util.zip.ZipFile;
import org.lsposed.hiddenapibypass.HiddenApiBypass;
public class KillerApplication extends Application {
    public static final String URL = "https://github.com/L-JINBIN/ApkSignatureKillerEx";

    static {
        killPM("ai.chat.gpt.bot", "MIIDhDCCAmygAwIBAgIEFnJziTANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJJTjEPMA0GA1UE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\n");
        killOpen("ai.chat.gpt.bot");
    }

    private static Field findField(Class<?> cls, String str) throws NoSuchFieldException {
        try {
            Field declaredField = cls.getDeclaredField(str);
            declaredField.setAccessible(true);
            return declaredField;
        } catch (NoSuchFieldException e10) {
            while (true) {
                cls = cls.getSuperclass();
                if (cls == null || cls.equals(Object.class)) {
                    break;
                }
                try {
                    Field declaredField2 = cls.getDeclaredField(str);
                    declaredField2.setAccessible(true);
                    return declaredField2;
                } catch (NoSuchFieldException unused) {
                }
            }
            throw e10;
        }
    }

    private static String getApkPath(String str) {
        String str2;
        try {
            BufferedReader bufferedReader = new BufferedReader(new FileReader("/proc/self/maps"));
            do {
                String readLine = bufferedReader.readLine();
                if (readLine == null) {
                    bufferedReader.close();
                    return null;
                }
                String[] split = readLine.split("\\s+");
                str2 = split[split.length - 1];
            } while (!isApkPath(str, str2));
            bufferedReader.close();
            return str2;
        } catch (Exception e10) {
            throw new RuntimeException(e10);
        }
    }

    private static File getDataFile(String str) {
        String name = Environment.getExternalStorageDirectory().getName();
        if (name.matches("\\d+")) {
            File file = new File("/data/user/" + name + "/" + str);
            if (file.canWrite()) {
                return file;
            }
        }
        return new File("/data/data/" + str);
    }

    private static native void hookApkPath(String str, String str2);

    private static boolean isApkPath(String str, String str2) {
        if (str2.startsWith("/") && str2.endsWith(".apk")) {
            String[] split = str2.substring(1).split("/", 6);
            int length = split.length;
            if (length == 4 || length == 5) {
                if (split[0].equals("data") && split[1].equals("app") && split[length - 1].equals("base.apk")) {
                    return split[length - 2].startsWith(str);
                }
                if (split[0].equals("mnt") && split[1].equals("asec") && split[length - 1].equals("pkg.apk")) {
                    return split[length - 2].startsWith(str);
                }
            } else if (length == 3) {
                if (split[0].equals("data") && split[1].equals("app")) {
                    return split[2].startsWith(str);
                }
            } else if (length == 6 && split[0].equals("mnt") && split[1].equals("expand") && split[3].equals("app") && split[5].equals("base.apk")) {
                return split[4].endsWith(str);
            }
        }
        return false;
    }

    private static void killOpen(String str) {
        try {
            System.loadLibrary("SignatureKiller");
            String apkPath = getApkPath(str);
            if (apkPath == null) {
                System.err.println("Get apk path failed");
                return;
            }
            File file = new File(apkPath);
            File file2 = new File(getDataFile(str), "origin.apk");
            try {
                ZipFile zipFile = new ZipFile(file);
                ZipEntry entry = zipFile.getEntry("assets/SignatureKiller/origin.apk");
                if (entry == null) {
                    PrintStream printStream = System.err;
                    printStream.println("Entry not found: assets/SignatureKiller/origin.apk");
                    zipFile.close();
                    return;
                }
                if (!file2.exists() || file2.length() != entry.getSize()) {
                    InputStream inputStream = zipFile.getInputStream(entry);
                    FileOutputStream fileOutputStream = new FileOutputStream(file2);
                    try {
                        byte[] bArr = new byte[102400];
                        while (true) {
                            int read = inputStream.read(bArr);
                            if (read == -1) {
                                break;
                            }
                            fileOutputStream.write(bArr, 0, read);
                        }
                        fileOutputStream.close();
                        if (inputStream != null) {
                            inputStream.close();
                        }
                    } catch (Throwable th2) {
                        try {
                            fileOutputStream.close();
                        } catch (Throwable th3) {
                            th2.addSuppressed(th3);
                        }
                        throw th2;
                    }
                }
                zipFile.close();
                hookApkPath(file.getAbsolutePath(), file2.getAbsolutePath());
            } catch (IOException e10) {
                throw new RuntimeException(e10);
            }
        } catch (Throwable unused) {
            System.err.println("Load SignatureKiller library failed");
        }
    }

    private static void killPM(final String str, String str2) {
        final Signature signature = new Signature(Base64.decode(str2, 0));
        final Parcelable.Creator creator = PackageInfo.CREATOR;
        try {
            findField(PackageInfo.class, "CREATOR").set(null, new Parcelable.Creator<PackageInfo>() {
                @Override
                public PackageInfo createFromParcel(Parcel parcel) {
                    Signature[] apkContentsSigners;
                    PackageInfo packageInfo = (PackageInfo) creator.createFromParcel(parcel);
                    if (packageInfo.packageName.equals(str)) {
                        if (packageInfo.signatures != null && packageInfo.signatures.length > 0) {
                            packageInfo.signatures[0] = signature;
                        }
                        if (Build.VERSION.SDK_INT >= 28 && packageInfo.signingInfo != null && (apkContentsSigners = packageInfo.signingInfo.getApkContentsSigners()) != null && apkContentsSigners.length > 0) {
                            apkContentsSigners[0] = signature;
                        }
                    }
                    return packageInfo;
                }

                @Override
                public PackageInfo[] newArray(int i10) {
                    return (PackageInfo[]) creator.newArray(i10);
                }
            });
            if (Build.VERSION.SDK_INT >= 28) {
                HiddenApiBypass.addHiddenApiExemptions("Landroid/os/Parcel;", "Landroid/content/pm", "Landroid/app");
            }
            try {
                Object obj = findField(PackageManager.class, "sPackageInfoCache").get(null);
                obj.getClass().getMethod("clear", new Class[0]).invoke(obj, new Object[0]);
            } catch (Throwable unused) {
            }
            try {
                ((Map) findField(Parcel.class, "mCreators").get(null)).clear();
            } catch (Throwable unused2) {
            }
            try {
                ((Map) findField(Parcel.class, "sPairedCreators").get(null)).clear();
            } catch (Throwable unused3) {
            }
        } catch (Exception e10) {
            throw new RuntimeException(e10);
        }
    }
}