其使用的是爱加密,在模拟器中,会先运行一段时间才闪退

使用现有的LSPosed-FunDex2方案dump内存中的dex

搜索真正的入口application,下面这个在dex4中,像又不像的,先记录着

s.h.e.l.l.S 壳的入口application,测试发现这个搜索语句“Landroid/app/Application”搜不出来的,得换个语句定位

后续测试通过搜索android.app.Application,寻找有onCreate的地方

找到下面这一处地方:ccc.rrr.hhh.s.a,根据代码构成判断其为入口application

修复androidmainfest.xml文件,更改入口application为“ccc.rrr.hhh.s.a”,不过在安卓中androidmainfest.xml是axml格式,不能直接修改,先使用apktool反编译样本

1
java -jar apktool_2.9.3.jar d 样本.apk -o output

然后使用记事本编辑androidmainfest.xml文件,完成对入口application的修复,同时观察到android:appComponentFactory属性属于S.H.E.L.L类,以为是加固的没用操作,当前直接删掉

使用apktool回编译

1
java -jar apktool_2.9.3.jar b output -o unsigned.apk

使用android killer一键签名

打包和签名都弄好了,运行仍然崩溃,需要调试去看问题

使用jadx调试,在入口application的ccc.rrr.hhh.s.a类下断点

走到下面application初始化报错

1
2
000153c4: invoke-direct {v0}, Landroid/app/Application;-><init>()V  # 调用Application构造函数
000153ca: return-void

jadx给出的报错表明是AppComponentFactory的问题

不过这里的报错并不明显,可以使用frida来看详细点的报错

1
frida -U -f com.bankofbeijing.mobilebanking

看来是android:appComponentFactory属性的问题,我之前看其属性属于壳代码,直接给删了,那么看来这里是被壳代码给替换了,需要找出原本的属性类,因为是被替换了,那么在壳代码中应该要改回去才对,故搜寻壳代码,最终在壳代码下面这个位置找出,同时也发现,其实壳代码里早就给出了原application了

改完后继续调试,发现在下面这一步退出

1
2
3
4
5
6
7
@Override // android.app.AppComponentFactory

public Application instantiateApplication(ClassLoader classLoader, String str) throws InstantiationException, IllegalAccessException, ClassNotFoundException {

return (Application) checkCompatWrapper(super.instantiateApplication(classLoader, str));

}

用frida捕获错误信息,又看到了壳代码的的s/h/e/l/l/C,分析发现是壳代码对原本的代码进行了插桩,需要清除

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
FATAL EXCEPTION: main
Process: com.bankofbeijing.mobilebanking, PID: 23103
java.lang.NoClassDefFoundError: Failed resolution of: Ls/h/e/l/l/C;
at com.huawei.hms.aaid.InitProvider.<clinit>(Unknown Source:3)
at java.lang.Class.newInstance(Native Method)
at android.app.AppComponentFactory.instantiateProvider(AppComponentFactory.java:121)
at android.support.v4.app.CoreComponentFactory.instantiateProvider(CoreComponentFactory.java:1)
at android.app.ActivityThread.installProvider(ActivityThread.java:6536)
at android.app.ActivityThread.installContentProviders(ActivityThread.java:6094)
at android.app.ActivityThread.handleBindApplication(ActivityThread.java:6003)
at android.app.ActivityThread.access$1100(ActivityThread.java:207)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1663)
at android.os.Handler.dispatchMessage(Handler.java:106)
at android.os.Looper.loop(Looper.java:193)
at android.app.ActivityThread.main(ActivityThread.java:6825)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:493)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:860)
Caused by: java.lang.ClassNotFoundException: Didn't find class "s.h.e.l.l.C" on path: DexPathList[[zip file "/system/framework/org.apache.http.legacy.boot.jar", zip file "/data/app/com.bankofbeijing.mobilebanking-J8ssoCwFICdtuh3ZIfPNKA==/base.apk"],nativeLibraryDirectories=[/data/app/com.bankofbeijing.mobilebanking-J8ssoCwFICdtuh3ZIfPNKA==/lib/arm64, /data/app/com.bankofbeijing.mobilebanking-J8ssoCwFICdtuh3ZIfPNKA==/base.apk!/lib/arm64-v8a, /data/user/0/com.bankofbeijing.mobilebanking/.tcache/libs, /system/lib64, /system/vendor/lib64, /system/lib64, /system/vendor/lib64]]
at dalvik.system.BaseDexClassLoader.findClass(BaseDexClassLoader.java:134)
at java.lang.ClassLoader.loadClass(ClassLoader.java:379)
at java.lang.ClassLoader.loadClass(ClassLoader.java:312)
... 15 more
***

搜索插桩的位置和语句

后续观察发现全部是static方法,需要抹除上面类的所有static方法中的s.h.e.l.l.C

1
2
3
4
5
6
7
8
9
10
.method static <clinit>()V

.registers 1
007885ac: 1400 0b00 0000 0000: const v0, 0xb

007885b2: 7110 7efb 0000 0003: invoke-static {v0}, Ls/h/e/l/l/C;->i(I)V # method@fb7e

007885b8: 0e00 0006: return-void

.end method

使用android killer一键将invoke-static {v0}, Ls/h/e/l/l/C;->i(I)V替换为空

继续回编译运行,frida捕获了新的报错信息,表面调用了不存在的本地方法,位于华为的第三方库

华为本身不会出错,推测他是改了那个loadlibrary为上面被我删除的invoke-static {v0}, Ls/h/e/l/l/C;->i(I)V,原本走它的壳代码invoke-static {v0}, Ls/h/e/l/l/C;->i(I)V去loadlibrary,xian导致lib库没有加载进来

先用frida验证其加载了哪些lib库

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
Java.perform(function() {
// 记录所有已加载的库
var loadedLibraries = new Set();

// Hook System.loadLibrary
var System = Java.use('java.lang.System');

System.loadLibrary.implementation = function(libname) {
var stack = Java.use("android.util.Log").getStackTraceString(
Java.use("java.lang.Exception").$new()
);

console.log("\n[loadLibrary] Loading library: " + libname);
console.log("Call stack:\n" + stack.split("\n").slice(2, 8).join("\n"));

// 记录库名
loadedLibraries.add(libname);
if(libname=="htsfx"){
return;
}
try {
// 原始调用
return this.loadLibrary(libname);
} catch (e) {
console.log("[!] Failed to load library: " + libname + ", error: " + e);
throw e;
}
};

// Hook System.load
System.load.implementation = function(filename) {
var stack = Java.use("android.util.Log").getStackTraceString(
Java.use("java.lang.Exception").$new()
);

console.log("\n[load] Loading library: " + filename);
console.log("Call stack:\n" + stack.split("\n").slice(2, 8).join("\n"));

// 提取库名
var libname = filename.split('/').pop().replace(/^lib/, '').replace(/\.so$/, '');
loadedLibraries.add(libname);

try {
// 原始调用
return this.load(filename);
} catch (e) {
console.log("[!] Failed to load: " + filename + ", error: " + e);
throw e;
}
};

// Hook native library loading in Runtime
var Runtime = Java.use('java.lang.Runtime');

Runtime.loadLibrary0.implementation = function(loader, libname) {
console.log("\n[Runtime.loadLibrary0] Loading: " + libname);
loadedLibraries.add(libname);
return this.loadLibrary0(loader, libname);
};

// 打印已加载的库信息
function printLoadedLibraries() {
console.log("\n\n=== Loaded Libraries Summary ===");
console.log("Total loaded libraries: " + loadedLibraries.size);
console.log("List of loaded libraries:");
Array.from(loadedLibraries).sort().forEach(function(lib, i) {
console.log((i + 1) + ". " + lib);
});
}

// 每5秒打印一次已加载的库
setInterval(printLoadedLibraries, 5000);

// 初始打印
console.log("\n[+] Library loading monitor installed");
printLoadedLibraries();
});

需要加载的依赖如下

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
📄 libbankcard_v1.0.0.so
📄 libBLEKey.so
📄 libbspatch.so
📄 libc++_shared.so
📄 libcfcaMLog.so
📄 libDXCaptcha-1.5.5.so
📄 libDXRisk-5.7.1.so
📄 libDXRiskComm-5.7.1.so
📄 libexec.so
📄 libexec_x86.so
📄 libexecmain.so
📄 libexecmain_x86.so
📄 libexecoat.so
📄 libexecoat_x86.so
📄 libface_detect.so
📄 libfh_sm.so
📄 libfhencrypt.so
📄 libgifimage.so
📄 libhci_asr.so
📄 libhci_asr_cloud_recog.so
📄 libhci_asr_jni.so
📄 libhci_curl.so
📄 libhci_sys.so
📄 libhci_sys_jni.so
📄 libhfyuv.so
📄 libhke.so
📄 libhtsfx.so
📄 libijmdetect-drisk.so
📄 libimagepipeline.so
📄 libImSDK.so
📄 libjniPdfium.so
📄 libjpeg.so
📄 libjtopus.so
📄 libjtspeex.so
📄 libliteavsdk.so
📄 liblivenessdetection_v2.4.3.1.so
📄 libmarsxlog.so
📄 libMegviiIDCardQuality_1.3.0.so
📄 libmmkv.so
📄 libmodft2.so
📄 libmodpdfium.so
📄 libmodpng.so
📄 libnbscrash.so
📄 libnbscrash_dumper.so
📄 libnbslog.so
📄 libnllvm1624013121.so
📄 libopenh264.so
📄 libPassGuard.so
📄 libpnc-crypto.so
📄 libProxy.so
📄 libqbar.so
📄 libSipCryptor.so
📄 libsmkernel_111f.so
📄 libsmsdk.so
📄 libsoundtouch.so
📄 libsqlcipher.so
📄 libstlport_shared.so
📄 libtbs.apache_dex.jar.so
📄 libtbs.libBugly-tbscore.so.so
📄 libtbs.libcommon_basemodule_jni.so.so
📄 libtbs.liblinuxtoolsfortbssdk_jni.so.so
📄 libtbs.libLzmaDec.so.so
📄 libtbs.libmemory.so.so
📄 libtbs.libmtticu.so.so
📄 libtbs.libmttwebview.so.so
📄 libtbs.libqb_keystore.so.so
📄 libtbs.libresources.so.so
📄 libtbs.libtbs_c++.so.so
📄 libtbs.libtbs_crash_handler.so.so
📄 libtbs.libtbs_v8.so.so
📄 libtbs.libTbsPatch.so.so
📄 libtbs.libtbsqmp.so.so
📄 libtbs.libturingtbs.so.so
📄 libtbs.libwebp_base.so.so
📄 libtbs.libwebviewchromium.so.so
📄 libtbs.libx5log.so.so
📄 libtbs.libx5patch.so.so
📄 libtbs.libzh_cn.so.so
📄 libtbs.MANIFEST.so
📄 libtbs.miniqb.conf.so
📄 libtbs.miniqb_dex.jar.so
📄 libtbs.miniqbres.apk.so
📄 libtbs.res.apk.so
📄 libtbs.tbs.conf.so
📄 libtbs.tbs_bugly_dex.jar.so
📄 libtbs.tbs_jars_fusion_dex.jar.so
📄 libtbs.tbs_jsapi_plugin.jar.so
📄 libtbs.tbs_plugin_filereader.zip.so
📄 libtbs.tbs_sdk_extension_dex.jar.so
📄 libtbs.tbs_ug_plugin.jar.so
📄 libtbs.video_impl_dex.jar.so
📄 libtbs.videores.apk.so
📄 libTencentSM.so
📄 libtmf-gm.so
📄 libturbojpeg.so
📄 libturingmfa.so
📄 libtxffmpeg.so
📄 libtxsoundtouch.so
📄 libtxy_ai_qbar.so
📄 libtyxlib.so
📄 libupbsdiffpatch.so
📄 libuprnfb.so
📄 libuprnfolly_json.so
📄 libuprnglog.so
📄 libuprnglog_init.so
📄 libuprnjsc.so
📄 libuprnjscexecutor.so
📄 libuprnjsinspector.so
📄 libuprnreactnativejni.so
📄 libuprnyoga.so
📄 libupsdkencrypt.so
📄 libupsdkpayex.so
📄 libupwallet.so
📄 libwcdb.so
📄 libWhitBoxSecurity.so
📄 libxdjacrypto.so
📄 libyt_safe.so
📄 libYTCommonLiveness.so
📄 libYTImageRefiner.so
📄 libYTKeyboard.so
📄 libYTLiveness.so
📄 libyuv_my.so
📄 libyuvutil.so

使用python生成loadlibrary这些lib库的smali代码,如下

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
const-string v0, "bankcard_v1.0.0"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "BLEKey"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "bspatch"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "c++_shared"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "cfcaMLog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "DXCaptcha-1.5.5"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "DXRisk-5.7.1"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "DXRiskComm-5.7.1"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "exec"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "execmain"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "execmain_x86"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "execoat"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "execoat_x86"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "exec_x86"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "face_detect"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "fhencrypt"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "fh_sm"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "gifimage"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_asr"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_asr_cloud_recog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_asr_jni"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_curl"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_sys"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_sys_jni"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hfyuv"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hke"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "htsfx"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "ijmdetect-drisk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "imagepipeline"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "ImSDK"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "jniPdfium"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "jpeg"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "jtopus"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "jtspeex"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "liteavsdk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "livenessdetection_v2.4.3.1"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "marsxlog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "MegviiIDCardQuality_1.3.0"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "mmkv"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "modft2"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "modpdfium"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "modpng"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "nbscrash"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "nbscrash_dumper"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "nbslog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "nllvm1624013121"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "openh264"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "PassGuard"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "pnc-crypto"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "Proxy"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "qbar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "SipCryptor"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "smkernel_111f"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "smsdk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "soundtouch"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "sqlcipher"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "stlport_shared"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.apache_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libBugly-tbscore.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libcommon_basemodule_jni.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.liblinuxtoolsfortbssdk_jni.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libLzmaDec.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libmemory.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libmtticu.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libmttwebview.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libqb_keystore.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libresources.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libTbsPatch.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libtbsqmp.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libtbs_c++.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libtbs_crash_handler.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libtbs_v8.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libturingtbs.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libwebp_base.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libwebviewchromium.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libx5log.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libx5patch.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libzh_cn.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.MANIFEST"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.miniqb.conf"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.miniqbres.apk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.miniqb_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.res.apk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs.conf"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_bugly_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_jars_fusion_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_jsapi_plugin.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_plugin_filereader.zip"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_sdk_extension_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_ug_plugin.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.videores.apk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.video_impl_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "TencentSM"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tmf-gm"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "turbojpeg"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "turingmfa"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "txffmpeg"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "txsoundtouch"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "txy_ai_qbar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tyxlib"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "upbsdiffpatch"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnfb"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnfolly_json"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnglog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnglog_init"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnjsc"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnjscexecutor"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnjsinspector"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnreactnativejni"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnyoga"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "upsdkencrypt"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "upsdkpayex"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "upwallet"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "wcdb"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "WhitBoxSecurity"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "xdjacrypto"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "YTCommonLiveness"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "YTImageRefiner"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "YTKeyboard"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "YTLiveness"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "yt_safe"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "yuvutil"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "yuv_my"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V

继续回编译运行,仍然报错无本地方法,说明loadlibrary时出问题了

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
java.lang.UnsatisfiedLinkError: No implementation found for boolean ccc.rrr.hhh.s.a.ua(android.content.res.AssetManager, java.lang.String, java.lang.String, boolean) (tried Java_ccc_rrr_hhh_s_a_ua and Java_ccc_rrr_hhh_s_a_ua__Landroid_content_res_AssetManager_2Ljava_lang_String_2Ljava_lang_String_2Z)
at ccc.rrr.hhh.s.a.ua(Native Method)
at ccc.rrr.hhh.s.l.iss(l.java:91)
at ccc.rrr.hhh.s.l.r(l.java:401)
at ccc.rrr.hhh.s.a.attachBaseContext(a.java:67)
at android.app.Application.attach(Application.java:212)
at android.app.Instrumentation.newApplication(Instrumentation.java:1121)
at android.app.LoadedApk.makeApplication(LoadedApk.java:1061)
at android.app.ActivityThread.handleBindApplication(ActivityThread.java:5992)
at android.app.ActivityThread.access$1100(ActivityThread.java:207)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1663)
at android.os.Handler.dispatchMessage(Handler.java:106)
at android.os.Looper.loop(Looper.java:193)
at android.app.ActivityThread.main(ActivityThread.java:6825)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:493)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:860)

调试时发现是加载另一个lib库时报错了,execcat_x86加载报错,这里本来应该不用加载x86了

所以决定把原本的那些x86的部分给删掉

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
const-string v0, "bankcard_v1.0.0"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "BLEKey"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "bspatch"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "c++_shared"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "cfcaMLog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "DXCaptcha-1.5.5"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "DXRisk-5.7.1"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "DXRiskComm-5.7.1"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "exec"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "execmain"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "execoat"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "face_detect"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "fhencrypt"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "fh_sm"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "gifimage"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_asr"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_asr_cloud_recog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_asr_jni"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_curl"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_sys"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hci_sys_jni"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hfyuv"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "hke"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "htsfx"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "ijmdetect-drisk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "imagepipeline"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "ImSDK"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "jniPdfium"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "jpeg"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "jtopus"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "jtspeex"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "liteavsdk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "livenessdetection_v2.4.3.1"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "marsxlog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "MegviiIDCardQuality_1.3.0"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "mmkv"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "modft2"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "modpdfium"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "modpng"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "nbscrash"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "nbscrash_dumper"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "nbslog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "nllvm1624013121"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "openh264"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "PassGuard"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "pnc-crypto"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "Proxy"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "qbar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "SipCryptor"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "smkernel_111f"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "smsdk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "soundtouch"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "sqlcipher"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "stlport_shared"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.apache_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libBugly-tbscore.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libcommon_basemodule_jni.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.liblinuxtoolsfortbssdk_jni.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libLzmaDec.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libmemory.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libmtticu.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libmttwebview.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libqb_keystore.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libresources.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libTbsPatch.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libtbsqmp.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libtbs_c++.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libtbs_crash_handler.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libtbs_v8.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libturingtbs.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libwebp_base.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libwebviewchromium.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libx5log.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libx5patch.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.libzh_cn.so"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.MANIFEST"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.miniqb.conf"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.miniqbres.apk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.miniqb_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.res.apk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs.conf"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_bugly_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_jars_fusion_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_jsapi_plugin.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_plugin_filereader.zip"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_sdk_extension_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.tbs_ug_plugin.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.videores.apk"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tbs.video_impl_dex.jar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "TencentSM"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tmf-gm"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "turbojpeg"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "turingmfa"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "txffmpeg"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "txsoundtouch"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "txy_ai_qbar"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "tyxlib"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "upbsdiffpatch"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnfb"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnfolly_json"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnglog"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnglog_init"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnjsc"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnjscexecutor"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnjsinspector"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnreactnativejni"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "uprnyoga"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "upsdkencrypt"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "upsdkpayex"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "upwallet"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "wcdb"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "WhitBoxSecurity"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "xdjacrypto"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "YTCommonLiveness"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "YTImageRefiner"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "YTKeyboard"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "YTLiveness"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "yt_safe"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "yuvutil"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V
const-string v0, "yuv_my"
invoke-static {v0}, Ljava/lang/System;->loadLibrary(Ljava/lang/String;)V

还有一些库加载时报错,继续调试,哪个加载不上就先跳过,最终跳过execoat,tbs.apache_dex.jar,以及爱加密本身的一些库后,便可以运行了。

不过由于样本只有arm64-v8a库,在模拟器上运行有bug,需要在arm真机上运行