├── .gitignore
├── LICENSE
├── README.md
├── Zydia.iml
├── app
├── app.iml
├── build.gradle
├── proguard-rules.pro
└── src
│ └── main
│ ├── AndroidManifest.xml
│ ├── java
│ └── com
│ │ └── android
│ │ └── zydia
│ │ └── MainActivity.java
│ ├── jni
│ ├── Android.mk
│ ├── Application.mk
│ ├── ZzHook.c
│ ├── hook.c
│ ├── hook.h
│ ├── hookzz.h
│ └── libhookzz.a
│ └── res
│ ├── layout
│ └── activity_main.xml
│ ├── mipmap-hdpi
│ ├── ic_launcher.png
│ └── ic_launcher_round.png
│ ├── mipmap-mdpi
│ ├── ic_launcher.png
│ └── ic_launcher_round.png
│ ├── mipmap-xhdpi
│ ├── ic_launcher.png
│ └── ic_launcher_round.png
│ ├── mipmap-xxhdpi
│ ├── ic_launcher.png
│ └── ic_launcher_round.png
│ ├── mipmap-xxxhdpi
│ ├── ic_launcher.png
│ └── ic_launcher_round.png
│ └── values
│ ├── colors.xml
│ ├── strings.xml
│ └── styles.xml
├── build.gradle
├── gradle.properties
├── gradlew
├── gradlew.bat
├── local.properties
└── settings.gradle
/.gitignore:
--------------------------------------------------------------------------------
1 | # Prerequisites
2 | *.d
3 |
4 | # Compiled Object files
5 | *.slo
6 | *.lo
7 | *.o
8 | *.obj
9 |
10 | # Precompiled Headers
11 | *.gch
12 | *.pch
13 |
14 | # Compiled Dynamic libraries
15 | *.so
16 | *.dylib
17 | *.dll
18 |
19 | # Fortran module files
20 | *.mod
21 | *.smod
22 |
23 | # Compiled Static libraries
24 | *.lai
25 | *.la
26 | *.a
27 | *.lib
28 |
29 | # Executables
30 | *.exe
31 | *.out
32 | *.app
33 |
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | MIT License
2 |
3 | Copyright (c) 2018 Jack Han
4 |
5 | Permission is hereby granted, free of charge, to any person obtaining a copy
6 | of this software and associated documentation files (the "Software"), to deal
7 | in the Software without restriction, including without limitation the rights
8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 |
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 |
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # Zydia
2 | An Android zygote injection andorid program written using the android_inject and hookZz frameworks
3 |
4 | If you use this code, please cite the following paper. Thanks!
5 |
--------------------------------------------------------------------------------
/Zydia.iml:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
--------------------------------------------------------------------------------
/app/app.iml:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 | generateDebugSources
16 |
17 |
18 |
19 |
20 |
21 |
22 |
23 |
24 |
25 |
26 |
27 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
55 |
56 |
57 |
58 |
59 |
60 |
61 |
62 |
63 |
64 |
65 |
66 |
67 |
68 |
69 |
70 |
71 |
72 |
73 |
74 |
75 |
76 |
77 |
78 |
79 |
80 |
81 |
82 |
83 |
84 |
85 |
86 |
87 |
88 |
89 |
90 |
91 |
92 |
93 |
94 |
95 |
96 |
97 |
98 |
99 |
100 |
101 |
102 |
103 |
104 |
105 |
106 |
107 |
108 |
109 |
110 |
--------------------------------------------------------------------------------
/app/build.gradle:
--------------------------------------------------------------------------------
1 | apply plugin: 'com.android.application'
2 |
3 | android {
4 | compileSdkVersion 26
5 | buildToolsVersion "27.0.3"
6 | defaultConfig {
7 | applicationId "com.android.zydia"
8 | minSdkVersion 19
9 | targetSdkVersion 26
10 | versionCode 1
11 | versionName "1.0"
12 | testInstrumentationRunner "android.support.test.runner.AndroidJUnitRunner"
13 | externalNativeBuild {
14 | ndkBuild {
15 | abiFilters "armeabi", "armeabi-v7a"
16 | }
17 | }
18 | }
19 | sourceSets.main {
20 | jni.srcDirs 'src/main/jni'
21 | }
22 | buildTypes {
23 | release {
24 | minifyEnabled false
25 | proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
26 | }
27 | }
28 | externalNativeBuild {
29 | ndkBuild {
30 | path 'src/main/jni/Android.mk'
31 | }
32 | }
33 | }
34 |
35 | dependencies {
36 | compile fileTree(include: ['*.jar'], dir: 'libs')
37 | }
38 |
--------------------------------------------------------------------------------
/app/proguard-rules.pro:
--------------------------------------------------------------------------------
1 | # Add project specific ProGuard rules here.
2 | # By default, the flags in this file are appended to flags specified
3 | # in E:\Android-SDK/tools/proguard/proguard-android.txt
4 | # You can edit the include path and order by changing the proguardFiles
5 | # directive in build.gradle.
6 | #
7 | # For more details, see
8 | # http://developer.android.com/guide/developing/tools/proguard.html
9 |
10 | # Add any project specific keep options here:
11 |
12 | # If your project uses WebView with JS, uncomment the following
13 | # and specify the fully qualified class name to the JavaScript interface
14 | # class:
15 | #-keepclassmembers class fqcn.of.javascript.interface.for.webview {
16 | # public *;
17 | #}
18 |
19 | # Uncomment this to preserve the line number information for
20 | # debugging stack traces.
21 | #-keepattributes SourceFile,LineNumberTable
22 |
23 | # If you keep the line number information, uncomment this to
24 | # hide the original source file name.
25 | #-renamesourcefileattribute SourceFile
26 |
--------------------------------------------------------------------------------
/app/src/main/AndroidManifest.xml:
--------------------------------------------------------------------------------
1 |
2 |
4 |
5 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 |
--------------------------------------------------------------------------------
/app/src/main/java/com/android/zydia/MainActivity.java:
--------------------------------------------------------------------------------
1 | package com.android.zydia;
2 |
3 | import android.app.Activity;
4 | import android.os.Bundle;
5 |
6 | public class MainActivity extends Activity {
7 |
8 | @Override
9 | protected void onCreate(Bundle savedInstanceState) {
10 | super.onCreate(savedInstanceState);
11 | setContentView(R.layout.activity_main);
12 | }
13 | }
14 |
--------------------------------------------------------------------------------
/app/src/main/jni/Android.mk:
--------------------------------------------------------------------------------
1 | # Copyright (C) 2009 The Android Open Source Project
2 | #
3 | # Licensed under the Apache License, Version 2.0 (the "License");
4 | # you may not use this file except in compliance with the License.
5 | # You may obtain a copy of the License at
6 | #
7 | # http://www.apache.org/licenses/LICENSE-2.0
8 | #
9 | # Unless required by applicable law or agreed to in writing, software
10 | # distributed under the License is distributed on an "AS IS" BASIS,
11 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 | # See the License for the specific language governing permissions and
13 | # limitations under the License.
14 | #
15 | #
16 | #
17 | LOCAL_PATH := $(call my-dir)
18 |
19 | include $(CLEAR_VARS)
20 | LOCAL_MODULE := libhookzz
21 | LOCAL_SRC_FILES := $(LOCAL_PATH)/libhookzz.a
22 | include $(PREBUILT_STATIC_LIBRARY)
23 |
24 |
25 | include $(CLEAR_VARS)
26 | LOCAL_MODULE := ZzHook
27 | LOCAL_LDLIBS := -llog
28 | LOCAL_SRC_FILES := ZzHook.c hook.c
29 | LOCAL_STATIC_LIBRARIES := libhookzz
30 | LOCAL_CFLAGS = -std=c99
31 | include $(BUILD_SHARED_LIBRARY)
--------------------------------------------------------------------------------
/app/src/main/jni/Application.mk:
--------------------------------------------------------------------------------
1 | APP_ABI := armeabi armeabi-v7a
2 | APP_PIE:= true
3 |
--------------------------------------------------------------------------------
/app/src/main/jni/ZzHook.c:
--------------------------------------------------------------------------------
1 | #include
2 |
3 | #include
4 | #include
5 | #include
6 | #include
7 |
8 | #include "hook.h"
9 | #include "hookzz.h"
10 |
11 | #define LOGI(...) ((void)__android_log_print(ANDROID_LOG_INFO, "zzHook", __VA_ARGS__))
12 | #define LOGE(...) ((void)__android_log_print(ANDROID_LOG_ERROR, "zzHook", __VA_ARGS__))
13 |
14 | #define INVALID_FUNC_ADDR NULL
15 |
16 | void _init(char *args) {
17 | LOGI("hook is start");
18 | }
19 |
20 |
21 | uint32_t (*lua_loadx_ori)(void *, void *, void *, const char *, const char *) = NULL;
22 |
23 | uint32_t lua_loadx_replace(void *L, void *reader, void *dt,
24 | const char *chunkname, const char *mode) {
25 | LOGI("%s:%s", __FUNCTION__, chunkname);
26 |
27 |
28 | return lua_loadx_ori(L, reader, dt, chunkname, mode);
29 | }
30 |
31 | uint32_t (*dvmLoadNativeCode_ori)(const char *, uint32_t, uint32_t) = NULL;
32 |
33 | uint32_t dvmLoadNativeCode_replace(const char *a1, uint32_t a2, uint32_t a3) {
34 | // LOGI("%s:%s", __FUNCTION__, a1);
35 |
36 | static int xx_isDone = 1;
37 | //判断是否是该package
38 | char *target_package = "com.bilibili.azurlane";
39 | if (strstr(a1, target_package) && xx_isDone) {
40 | LOGI("find the target_package:%s", target_package);
41 | char *libpath = "/data/data/com.bilibili.azurlane/lib/libtolua.so";
42 |
43 | void *handler = dlopen(libpath, RTLD_NOW);
44 |
45 | char *err = (char *) dlerror();
46 | if (err != NULL)
47 | LOGI("dlopen error is:%s\n", err);
48 | if (handler) {
49 | LOGI("hook is start");
50 | pid_t pid = getpid();
51 | LOGI("pid is %d", pid);
52 | uint32_t module_base = get_module_base(pid,
53 | "/data/app-lib/com.bilibili.azurlane-1/libtolua.so");
54 | if (module_base) {
55 | LOGI("module_base:%x", module_base);
56 | uint32_t lua_loadx_target = module_base + 0x3BCB4;
57 | ZzHook((void *) lua_loadx_target, (void *) &lua_loadx_replace,
58 | (void **) &lua_loadx_ori, NULL, NULL, false);
59 | }
60 |
61 | xx_isDone = 0;
62 | }
63 | }
64 |
65 | return dvmLoadNativeCode_ori(a1, a2, a3);
66 | }
67 |
68 |
69 | void so_entry(char *p) {
70 | char *module_path = "/system/lib/libdvm.so";
71 |
72 | void *handler1 = dlopen("/system/lib/libsubstrate.so", RTLD_NOW);
73 | char *err = (char *) dlerror();
74 | if (err != NULL)
75 | LOGI("dlopen error is:%s\n", err);
76 |
77 | void (*MSHookFunction)(void *symbol, void *replace, void **result) = INVALID_FUNC_ADDR;
78 | MSHookFunction = dlsym(handler1, "MSHookFunction");
79 | if (MSHookFunction == INVALID_FUNC_ADDR) {
80 | LOGD("can't find MSHookFunction");
81 | }
82 |
83 | pid_t pid = getpid();
84 | LOGI("the target pid is %d", pid);
85 | uint32_t module_base = get_module_base(pid, module_path);
86 |
87 | LOGI("the module_base is %x", module_base);
88 | if (module_base) {
89 | uint32_t dvmLoadNativeCode_target = module_base + 0x4FE30 + 1;//一定要注意是ARM指令还是Thumb指令
90 | // MSHookFunction((void*)dvmLoadNativeCode_target, (void *)&dvmLoadNativeCode_replace, (void **)&dvmLoadNativeCode_ori);
91 |
92 |
93 | ZzHook((void *) dvmLoadNativeCode_target, (void *) &dvmLoadNativeCode_replace,
94 | (void **) &dvmLoadNativeCode_ori, NULL, NULL, false);
95 | LOGI("hook done!");
96 | }
97 |
98 | }
99 |
--------------------------------------------------------------------------------
/app/src/main/jni/hook.c:
--------------------------------------------------------------------------------
1 | #include
2 | #include
3 | #include
4 | #include
5 | #include
6 | #include
7 | #include
8 | #include
9 | #include
10 |
11 | #include "hook.h"
12 |
13 | uint32_t get_module_base(pid_t pid, const char *module_path) {
14 | FILE *fp = NULL;
15 | char *pch = NULL;
16 | char filename[32];
17 | char line[512];
18 | uint32_t addr = 0;
19 |
20 | if (pid < 0)
21 | snprintf(filename, sizeof(filename), "/proc/self/maps");
22 | else
23 | snprintf(filename, sizeof(filename), "/proc/%d/maps", pid);
24 |
25 | if ((fp = fopen(filename, "r")) == NULL) {
26 | LOGE("open %s failed!", filename);
27 | return 0;
28 | }
29 |
30 | while (fgets(line, sizeof(line), fp)) {
31 | if (strstr(line, module_path)) {
32 | pch = strtok(line, "-");
33 | addr = strtoul(pch, NULL, 16);
34 | break;
35 | }
36 | }
37 |
38 | fclose(fp);
39 |
40 | return addr;
41 | }
--------------------------------------------------------------------------------
/app/src/main/jni/hook.h:
--------------------------------------------------------------------------------
1 |
2 | #include
3 | #include
4 | #include
5 |
6 | #define LOGI(...) ((void)__android_log_print(ANDROID_LOG_INFO, "zzHook", __VA_ARGS__))
7 | #define LOGD(...) ((void)__android_log_print(ANDROID_LOG_DEBUG, "zzHook", __VA_ARGS__))
8 | #define LOGE(...) ((void)__android_log_print(ANDROID_LOG_ERROR, "zzHook", __VA_ARGS__))
9 |
10 | uint32_t get_module_base(pid_t pid, const char *module_path);
--------------------------------------------------------------------------------
/app/src/main/jni/hookzz.h:
--------------------------------------------------------------------------------
1 | /**
2 | * Copyright 2017 jmpews
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | #ifndef hookzz_h
18 | #define hookzz_h
19 |
20 | // clang-format off
21 | #ifdef __cplusplus
22 | extern "C" {
23 | #endif //__cplusplus
24 |
25 | #include
26 | #include
27 |
28 | #if defined(__arm64__) || defined(__aarch64__)
29 | typedef union FPReg_ {
30 | __int128_t q;
31 | struct {
32 | double d1;
33 | double d2;
34 | } d;
35 | struct {
36 | float f1;
37 | float f2;
38 | float f3;
39 | float f4;
40 | } f;
41 | } FPReg;
42 |
43 | typedef struct _RegState {
44 | uint64_t sp;
45 |
46 | union {
47 | uint64_t x[29];
48 | struct {
49 | uint64_t x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15, x16, x17, x18, x19, x20, x21,
50 | x22, x23, x24, x25, x26, x27, x28;
51 | } regs;
52 | } general;
53 |
54 | uint64_t fp;
55 | uint64_t lr;
56 |
57 | union {
58 | FPReg q[8];
59 | struct {
60 | FPReg q0, q1, q2, q3, q4, q5, q6, q7;
61 | } regs;
62 | } floating;
63 | } RegState;
64 | #elif defined(__arm__)
65 | typedef struct _RegState {
66 | uint32_t sp;
67 |
68 | union {
69 | uint32_t r[13];
70 | struct {
71 | uint32_t r0, r1, r2, r3, r4, r5, r6, r7, r8, r9, r10, r11, r12;
72 | } regs;
73 | } general;
74 |
75 | uint32_t lr;
76 | } RegState;
77 | #elif defined(__i386__)
78 | typedef struct _RegState {
79 | } RegState;
80 | #elif defined(__x86_64__)
81 | typedef struct _RegState {
82 | } RegState;
83 | #endif
84 |
85 | typedef enum _ZZSTATUS {
86 | ZZ_UNKOWN = -1,
87 | ZZ_DONE = 0,
88 | ZZ_SUCCESS,
89 | ZZ_FAILED,
90 | ZZ_DONE_HOOK,
91 | ZZ_DONE_INIT,
92 | ZZ_DONE_ENABLE,
93 | ZZ_ALREADY_HOOK,
94 | ZZ_ALREADY_INIT,
95 | ZZ_ALREADY_ENABLED,
96 | ZZ_NEED_INIT,
97 | ZZ_NO_BUILD_HOOK
98 | } ZZSTATUS;
99 |
100 | typedef enum _ZZHOOKTYPE {
101 | HOOK_TYPE_ONE_INSTRUCTION = 0,
102 | HOOK_TYPE_FUNCTION_via_PRE_POST,
103 | HOOK_TYPE_FUNCTION_via_REPLACE,
104 | HOOK_TYPE_FUNCTION_via_GOT,
105 | HOOK_TYPE_DBI
106 | } ZZHOOKTYPE;
107 |
108 | typedef struct _CallStack {
109 | unsigned long call_id;
110 | struct _ThreadStack *ts;
111 | } CallStack;
112 |
113 | typedef struct _ThreadStack {
114 | unsigned long thread_id;
115 | unsigned long size;
116 | } ThreadStack;
117 |
118 | typedef struct _HookEntryInfo {
119 | unsigned long hook_id;
120 | void *hook_address;
121 | } HookEntryInfo;
122 |
123 |
124 | /* ------- example -------
125 | void common_pre_call(RegState *rs, ThreadStack *ts, CallStack *cs, const HookEntryInfo *info)
126 | {
127 | puts((char *)rs->general.regs.r0);
128 | STACK_SET(cs, "format", rs->general.regs.r0, char *);
129 | }
130 |
131 | void printf_post_call(RegState *rs, ThreadStack *ts, CallStack *cs, const HookEntryInfo *info)
132 | {
133 | if (STACK_CHECK_KEY(cs, "format"))
134 | {
135 | char *format = STACK_GET(cs, "format", char *);
136 | puts(format);
137 | }
138 | }
139 | ------- example end ------- */
140 |
141 | typedef void (*PRECALL)(RegState *rs, ThreadStack *ts, CallStack *cs, const HookEntryInfo *info);
142 |
143 | typedef void (*POSTCALL)(RegState *rs, ThreadStack *ts, CallStack *cs, const HookEntryInfo *info);
144 |
145 | typedef void (*STUBCALL)(RegState *rs, const HookEntryInfo *info);
146 |
147 | // ------- export API -------
148 |
149 | #define STACK_CHECK_KEY(cs, key) (bool)ZzGetCallStackData(cs, key)
150 | #define STACK_GET(cs, key, type) *(type *)ZzGetCallStackData(cs, key)
151 | #define STACK_SET(cs, key, value, type) ZzSetCallStackData(cs, key, &(value), sizeof(type))
152 |
153 | /* ------- example -------
154 | void common_pre_call(RegState *rs, ThreadStack *ts, CallStack *cs, const HookEntryInfo *info)
155 | {
156 | puts((char *)rs->general.regs.r0);
157 | STACK_SET(cs, "format", rs->general.regs.r0, char *);
158 | }
159 |
160 | void printf_post_call(RegState *rs, ThreadStack *ts, CallStack *cs, const HookEntryInfo *info)
161 | {
162 | if (STACK_CHECK_KEY(cs, "format"))
163 | {
164 | char *format = STACK_GET(cs, "format", char *);
165 | puts(format);
166 | }
167 | }
168 | ------- example end ------- */
169 |
170 | void *ZzGetCallStackData(CallStack *callstack_ptr, char *key_str);
171 |
172 | bool ZzSetCallStackData(CallStack *callstack_ptr, char *key_str, void *value_ptr,
173 | unsigned long value_size);
174 |
175 | ZZSTATUS
176 | ZzBuildHook(void *target_ptr, void *replace_call_ptr, void **origin_ptr, PRECALL pre_call_ptr,
177 | POSTCALL post_call_ptr, bool try_near_jump, ZZHOOKTYPE hook_type);
178 |
179 | ZZSTATUS ZzEnableHook(void *target_ptr);
180 |
181 | ZZSTATUS ZzHook(void *target_ptr, void *replace_ptr, void **origin_ptr, PRECALL pre_call_ptr,
182 | POSTCALL post_call_ptr, bool try_near_jump);
183 |
184 | ZZSTATUS ZzHookPrePost(void *target_ptr, PRECALL pre_call_ptr, POSTCALL post_call_ptr);
185 |
186 | ZZSTATUS ZzHookReplace(void *target_ptr, void *replace_ptr, void **origin_ptr);
187 |
188 | // hook only one instruciton with instruction address
189 | ZZSTATUS ZzHookOneInstruction(void *insn_address, PRECALL pre_call_ptr, POSTCALL post_call_ptr,
190 | bool try_near_jump);
191 |
192 | // got hook (only support macho)
193 | ZZSTATUS ZzHookGOT(const char *name, void *replace_ptr, void **origin_ptr, PRECALL pre_call_ptr,
194 | POSTCALL post_call_ptr);
195 |
196 | // runtime code patch
197 | ZZSTATUS ZzRuntimeCodePatch(void *address, void *code_data, unsigned long code_length);
198 |
199 | ZZSTATUS ZzDynamicBinaryInstrumentation(void *address, STUBCALL stub_call_ptr);
200 |
201 | // enable debug info
202 | void HookZzDebugInfoEnable(void);
203 |
204 | // disable hook
205 | ZZSTATUS ZzDisableHook(void *target_ptr);
206 |
207 | // ------- export API end -------
208 |
209 | #if defined(__arm64__) || defined(__aarch64__)
210 | #if defined(__APPLE__) && defined(__MACH__)
211 | #include
212 | #if TARGET_OS_IPHONE
213 | #define TARGET_IS_IOS 1
214 | #endif
215 | #endif
216 | #endif
217 | #ifdef TARGET_IS_IOS
218 | ZZSTATUS StaticBinaryInstrumentation(void *target_fileoff, void *replace_call_ptr, void **origin_ptr, PRECALL pre_call_ptr,
219 | POSTCALL post_call_ptr);
220 | #endif
221 |
222 | #ifdef __cplusplus
223 | }
224 | #endif //__cplusplus
225 | #endif
226 |
--------------------------------------------------------------------------------
/app/src/main/jni/libhookzz.a:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/jni/libhookzz.a
--------------------------------------------------------------------------------
/app/src/main/res/layout/activity_main.xml:
--------------------------------------------------------------------------------
1 |
2 |
8 |
9 |
14 |
15 |
16 |
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-hdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-hdpi/ic_launcher.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-hdpi/ic_launcher_round.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-hdpi/ic_launcher_round.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-mdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-mdpi/ic_launcher.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-mdpi/ic_launcher_round.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-mdpi/ic_launcher_round.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-xhdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-xhdpi/ic_launcher.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-xxhdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-xxhdpi/ic_launcher.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png
--------------------------------------------------------------------------------
/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/spriteviki/Zydia/fe2227f6eed0805f9acecbdbc1ee9cc8ab6a010e/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png
--------------------------------------------------------------------------------
/app/src/main/res/values/colors.xml:
--------------------------------------------------------------------------------
1 |
2 |
3 | #3F51B5
4 | #303F9F
5 | #FF4081
6 |
7 |
--------------------------------------------------------------------------------
/app/src/main/res/values/strings.xml:
--------------------------------------------------------------------------------
1 |
2 | Zydia
3 |
4 |
--------------------------------------------------------------------------------
/app/src/main/res/values/styles.xml:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
7 |
8 |
9 |
--------------------------------------------------------------------------------
/build.gradle:
--------------------------------------------------------------------------------
1 | // Top-level build file where you can add configuration options common to all sub-projects/modules.
2 |
3 | buildscript {
4 | repositories {
5 | jcenter()
6 | }
7 | dependencies {
8 | classpath 'com.android.tools.build:gradle:2.3.3'
9 |
10 | // NOTE: Do not place your application dependencies here; they belong
11 | // in the individual module build.gradle files
12 | }
13 | }
14 |
15 | allprojects {
16 | repositories {
17 | jcenter()
18 | }
19 | }
20 |
21 | task clean(type: Delete) {
22 | delete rootProject.buildDir
23 | }
24 |
--------------------------------------------------------------------------------
/gradle.properties:
--------------------------------------------------------------------------------
1 | # Project-wide Gradle settings.
2 |
3 | # IDE (e.g. Android Studio) users:
4 | # Gradle settings configured through the IDE *will override*
5 | # any settings specified in this file.
6 |
7 | # For more details on how to configure your build environment visit
8 | # http://www.gradle.org/docs/current/userguide/build_environment.html
9 |
10 | # Specifies the JVM arguments used for the daemon process.
11 | # The setting is particularly useful for tweaking memory settings.
12 | org.gradle.jvmargs=-Xmx1536m
13 |
14 | # When configured, Gradle will run in incubating parallel mode.
15 | # This option should only be used with decoupled projects. More details, visit
16 | # http://www.gradle.org/docs/current/userguide/multi_project_builds.html#sec:decoupled_projects
17 | # org.gradle.parallel=true
18 |
--------------------------------------------------------------------------------
/gradlew:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 |
3 | ##############################################################################
4 | ##
5 | ## Gradle start up script for UN*X
6 | ##
7 | ##############################################################################
8 |
9 | # Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
10 | DEFAULT_JVM_OPTS=""
11 |
12 | APP_NAME="Gradle"
13 | APP_BASE_NAME=`basename "$0"`
14 |
15 | # Use the maximum available, or set MAX_FD != -1 to use that value.
16 | MAX_FD="maximum"
17 |
18 | warn ( ) {
19 | echo "$*"
20 | }
21 |
22 | die ( ) {
23 | echo
24 | echo "$*"
25 | echo
26 | exit 1
27 | }
28 |
29 | # OS specific support (must be 'true' or 'false').
30 | cygwin=false
31 | msys=false
32 | darwin=false
33 | case "`uname`" in
34 | CYGWIN* )
35 | cygwin=true
36 | ;;
37 | Darwin* )
38 | darwin=true
39 | ;;
40 | MINGW* )
41 | msys=true
42 | ;;
43 | esac
44 |
45 | # Attempt to set APP_HOME
46 | # Resolve links: $0 may be a link
47 | PRG="$0"
48 | # Need this for relative symlinks.
49 | while [ -h "$PRG" ] ; do
50 | ls=`ls -ld "$PRG"`
51 | link=`expr "$ls" : '.*-> \(.*\)$'`
52 | if expr "$link" : '/.*' > /dev/null; then
53 | PRG="$link"
54 | else
55 | PRG=`dirname "$PRG"`"/$link"
56 | fi
57 | done
58 | SAVED="`pwd`"
59 | cd "`dirname \"$PRG\"`/" >/dev/null
60 | APP_HOME="`pwd -P`"
61 | cd "$SAVED" >/dev/null
62 |
63 | CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar
64 |
65 | # Determine the Java command to use to start the JVM.
66 | if [ -n "$JAVA_HOME" ] ; then
67 | if [ -x "$JAVA_HOME/jre/sh/java" ] ; then
68 | # IBM's JDK on AIX uses strange locations for the executables
69 | JAVACMD="$JAVA_HOME/jre/sh/java"
70 | else
71 | JAVACMD="$JAVA_HOME/bin/java"
72 | fi
73 | if [ ! -x "$JAVACMD" ] ; then
74 | die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME
75 |
76 | Please set the JAVA_HOME variable in your environment to match the
77 | location of your Java installation."
78 | fi
79 | else
80 | JAVACMD="java"
81 | which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
82 |
83 | Please set the JAVA_HOME variable in your environment to match the
84 | location of your Java installation."
85 | fi
86 |
87 | # Increase the maximum file descriptors if we can.
88 | if [ "$cygwin" = "false" -a "$darwin" = "false" ] ; then
89 | MAX_FD_LIMIT=`ulimit -H -n`
90 | if [ $? -eq 0 ] ; then
91 | if [ "$MAX_FD" = "maximum" -o "$MAX_FD" = "max" ] ; then
92 | MAX_FD="$MAX_FD_LIMIT"
93 | fi
94 | ulimit -n $MAX_FD
95 | if [ $? -ne 0 ] ; then
96 | warn "Could not set maximum file descriptor limit: $MAX_FD"
97 | fi
98 | else
99 | warn "Could not query maximum file descriptor limit: $MAX_FD_LIMIT"
100 | fi
101 | fi
102 |
103 | # For Darwin, add options to specify how the application appears in the dock
104 | if $darwin; then
105 | GRADLE_OPTS="$GRADLE_OPTS \"-Xdock:name=$APP_NAME\" \"-Xdock:icon=$APP_HOME/media/gradle.icns\""
106 | fi
107 |
108 | # For Cygwin, switch paths to Windows format before running java
109 | if $cygwin ; then
110 | APP_HOME=`cygpath --path --mixed "$APP_HOME"`
111 | CLASSPATH=`cygpath --path --mixed "$CLASSPATH"`
112 | JAVACMD=`cygpath --unix "$JAVACMD"`
113 |
114 | # We build the pattern for arguments to be converted via cygpath
115 | ROOTDIRSRAW=`find -L / -maxdepth 1 -mindepth 1 -type d 2>/dev/null`
116 | SEP=""
117 | for dir in $ROOTDIRSRAW ; do
118 | ROOTDIRS="$ROOTDIRS$SEP$dir"
119 | SEP="|"
120 | done
121 | OURCYGPATTERN="(^($ROOTDIRS))"
122 | # Add a user-defined pattern to the cygpath arguments
123 | if [ "$GRADLE_CYGPATTERN" != "" ] ; then
124 | OURCYGPATTERN="$OURCYGPATTERN|($GRADLE_CYGPATTERN)"
125 | fi
126 | # Now convert the arguments - kludge to limit ourselves to /bin/sh
127 | i=0
128 | for arg in "$@" ; do
129 | CHECK=`echo "$arg"|egrep -c "$OURCYGPATTERN" -`
130 | CHECK2=`echo "$arg"|egrep -c "^-"` ### Determine if an option
131 |
132 | if [ $CHECK -ne 0 ] && [ $CHECK2 -eq 0 ] ; then ### Added a condition
133 | eval `echo args$i`=`cygpath --path --ignore --mixed "$arg"`
134 | else
135 | eval `echo args$i`="\"$arg\""
136 | fi
137 | i=$((i+1))
138 | done
139 | case $i in
140 | (0) set -- ;;
141 | (1) set -- "$args0" ;;
142 | (2) set -- "$args0" "$args1" ;;
143 | (3) set -- "$args0" "$args1" "$args2" ;;
144 | (4) set -- "$args0" "$args1" "$args2" "$args3" ;;
145 | (5) set -- "$args0" "$args1" "$args2" "$args3" "$args4" ;;
146 | (6) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" ;;
147 | (7) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" ;;
148 | (8) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" ;;
149 | (9) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" "$args8" ;;
150 | esac
151 | fi
152 |
153 | # Split up the JVM_OPTS And GRADLE_OPTS values into an array, following the shell quoting and substitution rules
154 | function splitJvmOpts() {
155 | JVM_OPTS=("$@")
156 | }
157 | eval splitJvmOpts $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS
158 | JVM_OPTS[${#JVM_OPTS[*]}]="-Dorg.gradle.appname=$APP_BASE_NAME"
159 |
160 | exec "$JAVACMD" "${JVM_OPTS[@]}" -classpath "$CLASSPATH" org.gradle.wrapper.GradleWrapperMain "$@"
161 |
--------------------------------------------------------------------------------
/gradlew.bat:
--------------------------------------------------------------------------------
1 | @if "%DEBUG%" == "" @echo off
2 | @rem ##########################################################################
3 | @rem
4 | @rem Gradle startup script for Windows
5 | @rem
6 | @rem ##########################################################################
7 |
8 | @rem Set local scope for the variables with windows NT shell
9 | if "%OS%"=="Windows_NT" setlocal
10 |
11 | @rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
12 | set DEFAULT_JVM_OPTS=
13 |
14 | set DIRNAME=%~dp0
15 | if "%DIRNAME%" == "" set DIRNAME=.
16 | set APP_BASE_NAME=%~n0
17 | set APP_HOME=%DIRNAME%
18 |
19 | @rem Find java.exe
20 | if defined JAVA_HOME goto findJavaFromJavaHome
21 |
22 | set JAVA_EXE=java.exe
23 | %JAVA_EXE% -version >NUL 2>&1
24 | if "%ERRORLEVEL%" == "0" goto init
25 |
26 | echo.
27 | echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
28 | echo.
29 | echo Please set the JAVA_HOME variable in your environment to match the
30 | echo location of your Java installation.
31 |
32 | goto fail
33 |
34 | :findJavaFromJavaHome
35 | set JAVA_HOME=%JAVA_HOME:"=%
36 | set JAVA_EXE=%JAVA_HOME%/bin/java.exe
37 |
38 | if exist "%JAVA_EXE%" goto init
39 |
40 | echo.
41 | echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME%
42 | echo.
43 | echo Please set the JAVA_HOME variable in your environment to match the
44 | echo location of your Java installation.
45 |
46 | goto fail
47 |
48 | :init
49 | @rem Get command-line arguments, handling Windowz variants
50 |
51 | if not "%OS%" == "Windows_NT" goto win9xME_args
52 | if "%@eval[2+2]" == "4" goto 4NT_args
53 |
54 | :win9xME_args
55 | @rem Slurp the command line arguments.
56 | set CMD_LINE_ARGS=
57 | set _SKIP=2
58 |
59 | :win9xME_args_slurp
60 | if "x%~1" == "x" goto execute
61 |
62 | set CMD_LINE_ARGS=%*
63 | goto execute
64 |
65 | :4NT_args
66 | @rem Get arguments from the 4NT Shell from JP Software
67 | set CMD_LINE_ARGS=%$
68 |
69 | :execute
70 | @rem Setup the command line
71 |
72 | set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar
73 |
74 | @rem Execute Gradle
75 | "%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %CMD_LINE_ARGS%
76 |
77 | :end
78 | @rem End local scope for the variables with windows NT shell
79 | if "%ERRORLEVEL%"=="0" goto mainEnd
80 |
81 | :fail
82 | rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of
83 | rem the _cmd.exe /c_ return code!
84 | if not "" == "%GRADLE_EXIT_CONSOLE%" exit 1
85 | exit /b 1
86 |
87 | :mainEnd
88 | if "%OS%"=="Windows_NT" endlocal
89 |
90 | :omega
91 |
--------------------------------------------------------------------------------
/local.properties:
--------------------------------------------------------------------------------
1 | ## This file is automatically generated by Android Studio.
2 | # Do not modify this file -- YOUR CHANGES WILL BE ERASED!
3 | #
4 | # This file must *NOT* be checked into Version Control Systems,
5 | # as it contains information specific to your local configuration.
6 | #
7 | # Location of the SDK. This is only used by Gradle.
8 | # For customization when using a Version Control System, please read the
9 | # header note.
10 | #Fri Dec 21 11:47:15 CST 2018
11 | ndk.dir=E\:\\Android_NDK\\android-ndk-r14b
12 | sdk.dir=E\:\\Android-SDK
13 |
--------------------------------------------------------------------------------
/settings.gradle:
--------------------------------------------------------------------------------
1 | include ':app'
2 |
--------------------------------------------------------------------------------