Yep that's 32 as for 64 is way different.
How did you get to the above code, via debugger or just disassembler?
If it was via ida/android remote then it didn't work out for me, but via disassembler what string did you trace? is it one with licensing? as i have over 100 of them..
i did reduce or improve the default license compatibility, hide unhide invalid content, no trial expiration anymore and some other non related to the real license.
'couse via debugger i can't debug it, even i made the ig apk debug enable and tried debugging with ida pro hex-rays 7.5 (deleted i don't have it or need it anymore), JEB Decompiler 3.19.1 Pro, some other chinese debugger old. NOTHING worked !
So i quit it for over a week ago since without debugging i have to spend a lot of time in disassembler and i do have other things to attend to beside that.
last time in ghidra i checked those
007e5e38 str x8=>s_licensing_01e09eca,[sp, #local_88] DATA
00812c14 str x8=>s_licensing_01e09eca,[sp, #local_278] DATA
0080f864 str x8=>s_licensing_01e09eca,[sp, #0x8] DATA
for ghidra use this it has Debugger !
[Only registered and activated users can see links. ]
then to save correctly ELF or PE (without importing as raw binary anymore) use this
[Only registered and activated users can see links. ]
Spoiler: pic
happy patching guys !
Bookmarks