反编译io游戏

1. flutter 反编译

>You are building a fat APK that includes binaries for android-arm, android-arm64.

>If you are deploying the app to the Play Store, it's recommended to use app bundles or split the APK to rece the APK size.

>    To generate an app bundle, run:

>        flutter build appbundle --target-platform android-arm,android-arm64

>        Learn more on: https://developer.android.com/guide/app-bundle

>    To split the APKs per ABI, run:

>        flutter build apk --target-platform android-arm,android-arm64 --split-per-abi

>        Learn more on:  https://developer.android.com/studio/build/configure-apk-splits#configure-abi-split

>Initializing gradle...                                              2.3s

>Resolving dependencies...                                          14.2s

>Running Gradle task 'assembleRelease'...                                                  ע: E:\work_tool\flutter\.pub-cache\hosted\pub.flutter-io.cn\connectivity-0.4.4\android\src\main\java\io\flutter\plugins\connectivity\ConnectivityPlugin.javaʹ�û򸲸����ѹ�ʱ�� API��

>ע: �й���ϸ��Ϣ, ��ʹ�� -Xlint:deprecation ���±��롣

>ע: E:\work_tool\flutter\.pub-cache\hosted\pub.flutter-io.cn\url_launcher-5.1.3\android\src\main\java\io\flutter\plugins\urllauncher\WebViewActivity.javaʹ

>�û򸲸����ѹ�ʱ�� API��

>ע: �й���ϸ��Ϣ, ��ʹ�� -Xlint:deprecation ���±��롣

>Calling mockable JAR artifact transform to create file: C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\android.jar\\android.jar with input E:\work_tool\sdk\android-sdk-windows\platforms\android-28\android.jar

>Calling mockable JAR artifact transform to create file: C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\android.jar\\android.jar with input E:\work_tool\sdk\android-sdk-windows\platforms\android-27\android.jar

>Request to incrementing alive workforce from 0. Current workforce (dead or alive) 0

>thread-pool size=4

>ProGuard, version 6.0.3

>Reading input...

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\flutter.jar\\jetified-flutter.jar] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\app\intermediates\flutter\release\libs.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\localbroadcastmanager-1.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\work-runtime-2.1.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\fragment-1.1.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\room-runtime-2.1.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\room-runtime-2.1.0.aar\\jars\libs\room-common-java8-2.1.0.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\viewpager-1.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\loader-1.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\activity-1.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\customview-1.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\core-1.1.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\versionedparcelable-1.1.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\moles-2\files-2.1\androidx.collection\collection\1.1.0\\collection-1.1.0.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\lifecycle-livedata-2.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\lifecycle-livedata-core-2.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\core-runtime-2.0.1.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\moles-2\files-2.1\androidx.room\room-common\2.1.0\\room-common-2.1.0.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\sqlite-framework-2.0.1.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\sqlite-2.0.1.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\lifecycle-service-2.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\lifecycle-runtime-2.1.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\lifecycle-viewmodel-2.1.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\transforms-1\files-1.1\savedstate-1.0.0.aar\\jars\classes.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\moles-2\files-2.1\androidx.lifecycle\lifecycle-common\2.1.0\\lifecycle-common-2.1.0.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\moles-2\files-2.1\androidx.arch.core\core-common\2.1.0\\core-common-2.1.0.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\moles-2\files-2.1\androidx.annotation\annotation\1.1.0\\annotation-1.1.0.jar] (filtered)

>Reading program jar [C:\Users\Administrator\.gradle\caches\moles-2\files-2.1\com.google.guava\listenablefuture\1.0\\listenablefuture-1.0.jar] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\flutter_downloader\intermediates\intermediate-jars\release\classes.jar] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\shared_preferences\intermediates\intermediate-jars\release\classes.jar] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\url_launcher\intermediates\intermediate-jars\release\classes.jar] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\sqflite\intermediates\intermediate-jars\release\classes.jar] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\connectivity\intermediates\intermediate-jars\release\classes.jar] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\path_provider\intermediates\intermediate-jars\release\classes.jar] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\package_info\intermediates\intermediate-jars\release\classes.jar] (filtered)

>Reading program directory [F:\dartSpace\flutter\jiddspace\nfc\build\app\intermediates\javac\release\compileReleaseJavaWithJavac\classes] (filtered)

>Reading program jar [F:\dartSpace\flutter\jiddspace\nfc\build\app\intermediates\transforms\mergeJavaRes\release\0.jar] (filtered)

>Reading library jar [C:\Users\Administrator\.gradle\caches\moles-2\files-2.1\androidx.annotation\annotation\1.0.0\\annotation-1.0.0.jar] (filtered)

>Reading library jar [E:\work_tool\sdk\android-sdk-windows\platforms\android-28\android.jar]

>Reading library jar [E:\work_tool\sdk\android-sdk-windows\build-tools\28.0.3\core-lambda-stubs.jar]

>Reading library jar [E:\work_tool\sdk\android-sdk-windows\platforms\android-28\optional\org.apache.http.legacy.jar]

>Reading library jar [E:\work_tool\sdk\android-sdk-windows\platforms\android-28\optional\android.test.mock.jar]

>Reading library jar [E:\work_tool\sdk\android-sdk-windows\platforms\android-28\optional\android.test.base.jar]

>Reading library jar [E:\work_tool\sdk\android-sdk-windows\platforms\android-28\optional\android.test.runner.jar]

>Initializing...

>Warning: io.flutter.embedding.android.FlutterView: can't find referenced method 'android.graphics.Insets getSystemGestureInsets()' in library class android.view.WindowInsets

>Warning: io.flutter.embedding.android.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.embedding.android.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.embedding.android.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.embedding.android.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.embedding.android.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.embedding.android.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.view.FlutterView: can't find referenced method 'android.graphics.Insets getSystemGestureInsets()' in library class android.view.WindowInsets

>Warning: io.flutter.view.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.view.FlutterView: can't find referenced class android.graphics.Insets

>Note: io.flutter.view.AccessibilityViewEmbedder$ReflectionAccessors: can't find dynamically referenced class android.util.LongArray

>Warning: io.flutter.view.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.view.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.view.FlutterView: can't find referenced class android.graphics.Insets

>Warning: io.flutter.view.FlutterView: can't find referenced class android.graphics.Insets

>Note: there were 1 unresolved dynamic references to classes or interfaces.

>      You should check if you need to specify additional program jars.

>      (http://proguard.sourceforge.net/manual/troubleshooting.html#dynamicalclass)

>Warning: Exception while processing task java.io.IOException: Please correct the above warnings first.

>Thread(Tasks limiter_1): destruction

>Warning: there were 12 unresolved references to classes or interfaces.

>        You may need to add missing library jars or update their versions.

>        If your code works fine without the missing classes, you can suppress

>        the warnings with '-dontwarn' options.

>        (http://proguard.sourceforge.net/manual/troubleshooting.html#unresolvedclass)

>Warning: there were 2 unresolved references to library class members.

>        You probably need to update the library versions.

>        (http://proguard.sourceforge.net/manual/troubleshooting.html#unresolvedlibraryclassmember)

>

>FAILURE: Build failed with an exception.

>

>* What went wrong:

>Execution failed for task ':app:'.

>> Job failed, see logs for details

>

>* Try:

>Run with --stacktrace option to get the stack trace. Run with --info or --debug option to get more log output. Run with --scan to get full insights.

>

>* Get more help at https://help.gradle.org

>

>BUILD FAILED in 4m 23s

>Running Gradle task 'assembleRelease'...

>Running Gradle task 'assembleRelease'... Done                    264.4s (!)

>*******************************************************************************************

>The Gradle failure may have been because of AndroidX incompatibilities in this Flutter app.

>See https://goo.gl/CP92wY for more information on the problem and how to fix it.

>*******************************************************************************************

>Gradle task assembleRelease failed with exit code 1

2. luac文件怎么进行反编译

lua源文件--obfuscate-->lua源文件(混淆后)--compile-->luac文件(带调试用的变量名和行号)--strip-->luac文件(不带调试信息)

lua/luac--加密/打包-->数据文件

数据文件--解包/解密-->lua/luac-->lua虚拟机

1. 跟踪，脱壳，解包，解密，获得 luac

追 luaL_loadbuffer luaL_loadfile lua_load 应该可以找到 解密函数。

hook 这3个函数，导出解密后的数据，直接就是 luac 文件。如果没编译甚至是 lua源文件。

hook luaV_execute 可以拿到 Proto* ，想办法用 luaU_mp 导出。luaD_precall 应该没必要搞。

2. 非标准 luac 处理

我们有两种方案来处理得到的 luac

1. 得到一个能够执行上述非标 luac 的 lua 版本

搞清楚编译方式，改 lua 源文件，编译出一个，这样做什么都可以，还能编译出对应的 luadec 。

如果能找到 lua51.dll 之类的就直接调用吧。但是，只能用于导出 luac 对比文件格式，或者执行找到的几个关键函数。

2. 将非标 luac 转换成标准格式 luac，正所谓：山不来就我，我便去就山

非标准 luac 是怎么做的：

1. bad header 改文件头

#define LUA_SIGNATURE "33Lua" // lua.h

2. bad header 改数据类型

// luaconf.h

#define LUA_NUMBER_DOUBLE

#define LUA_NUMBER double

LUA_NUMBER to float

LUA_NUMBER_SCAN to "%f"

LUA_NUMBER_FMT to "%.7g"

l_mathop(x) to (x##f)

lua_str2number to use strtof

3. bad code OpCode 重定义

// 改有 "ORDER OP" 的地方

/* grep "ORDER OP" if you change these enums */

enum OpCode; // lopcodes.h

const lu_byte luaP_opmodes[]; // lopcodes.c

const char *const luaP_opnames[]; // lopcodes.c

生成一个被破解程序可以执行的 luac 文件用于对比，分析格式

想办法执行下面的代码，编译 allopcodes.lua 并导出， 与标准 lua 编译相同源文件生成的进行对比。

1. 在 C 内导出

lua_State* L = luaL_newstate();

luaL_loadbuffer or luaL_loadstring or luaL_loadfile

Closure* c=(Closure*)lua_topointer(L, -1);

Proto* f = c->l.p;//Closure如果改了偏移会不同

luaU_mp(L, f, writer, D, 0);//非导出函数

lua_close(L);

2. 用 lua 导出到文件或者string

lua_State* L = luaL_newstate();

luaopen_string(L);

luaopen_io(L);

luaL_dostring or luaL_dofile

char* str = lua_tostring(L, -1);

lua_close(L);

-- luaopen_string 此库必须打开

allopcodes() allopcodes.lua文件内容 end

chunk = string.mp(allopcodes)

if luaopen_io then --如果 io 可用，则可以直接写文件

file:write(chunk)

else

output(chunk,to_any_where) --想办法把 chunk 搞出来

return chunk

end