郑重声明，本文纯属技术交流讨论，请勿用于商业用途及传播非法信息！转帖请保留原创地址。
jar文件链接:
链接: https://pan.baidu.com/s/1ctXQaU 密码: cndm
charles-proxy-4.2.dmg 网盘链接：（强烈推荐官网下载！！！）
链接: https://pan.baidu.com/s/1gfF2sSj 密码: i4ai
一、修改
RegisterFrame里跟进注册的aEdk
public RegisterFrame(Frame paramFrame)
{
super(paramFrame, true);
setTitle("Register Charles");
this.tName = new JTextField(20);
this.tSerial = new JTextField(20);
this.bRegister = new JButton("Register");
this.bCancel = new JButton("Cancel");
Container localContainer;
(localContainer = getContentPane()).setLayout(new MigLayout("wrap,fill", "[label][fill,grow]"));
localContainer.add(new JLabel("Registered Name:"));
localContainer.add(this.tName);
localContainer.add(new JLabel("License Key:"));
localContainer.add(this.tSerial);
localContainer.add(this.bCancel, "tag cancel,split 2,span,center");
localContainer.add(this.bRegister, "tag ok");
this.bCancel.addActionListener(new TkzI(this));
this.bRegister.addActionListener(new aEdk(this));
基本的逻辑并未改变，还是从WNzU.OjEP(paramActionEvent, str)) != null判断
final class aEdk
implements ActionListener
{
aEdk(RegisterFrame paramRegisterFrame) {}
public final void actionPerformed(ActionEvent paramActionEvent)
{
paramActionEvent = RegisterFrame.OjEP(this.OjEP).getText().trim();
String str = RegisterFrame.wfpb(this.OjEP).getText().trim();
if ((paramActionEvent.length() > 0) && (str.length() > 0))
{
Object localObject;
if ((localObject = WNzU.OjEP(paramActionEvent, str)) != null)
{
ExtendedJOptionPane.OjEP(this.OjEP, localObject, "Charles Registration", 2);
return;
}
ExtendedJOptionPane.OjEP(this.OjEP, "Thank you for registering. Charles will now close. Please start Charles again to continue.", "Charles Registration", 1);
(localObject = CharlesContext.getInstance()).getConfiguration().getRegistrationConfiguration().setName(paramActionEvent);
((CharlesContext)localObject).getConfiguration().getRegistrationConfiguration().setKey(str);
((CharlesContext)localObject).exit(0, true);
}
}
}
继续跟进WNzU，找到关键函数OjEP。虽然函数return了null，但数据被wfpb更改。
public static String OjEP(String paramString1, String paramString2)
{
try
{
paramString1 = new WNzU(paramString1, paramString2);
}
catch (LicenseException localLicenseException)
{
return (paramString1 = localLicenseException).getMessage();
}
paramString1 = paramString1;
wfpb = paramString1;
return null;
}
跟进wfpb相关函数
private static void OjEP(WNzU paramWNzU)
{
wfpb = paramWNzU;
}
public static void wfpb()
{
WNzU localWNzU;
wfpb = localWNzU = new WNzU();
}
public static boolean OjEP()
{
WNzU localWNzU;
return (localWNzU = wfpb).DZZn;
}
public static String DZZn()
{
WNzU localWNzU = wfpb;
switch (TkzI.OjEP[localWNzU.tVok.ordinal()])
{
case 1:
return localWNzU.TVrM;
case 2:
return localWNzU.TVrM + " - Site License";
case 3:
return localWNzU.TVrM + " - Multi-Site License";
}
return localWNzU.TVrM;
}
很明显有个布尔型和String类型的，把他们改成true和自己的String。还有个String类型的DZZn，一并也修改了。
public static String DZZn()
{
WNzU localWNzU = wfpb;
switch (TkzI.OjEP[localWNzU.tVok.ordinal()])
{
case 1:
return localWNzU.TVrM;
case 2:
return localWNzU.TVrM + " - Site License";
case 3:
return localWNzU.TVrM + " - Multi-Site License";
}
return localWNzU.TVrM;
}
下面的工作就是修复一些问题防止编译出错。
例如：
String str = (str = str = paramString1).replaceAll("[�����������������������]", " ");
例如
LicenseException相关的异常
二、重新编译
然后反编译成class，这里需要指定目录，因为WNzU是在com.xk72.charles包中。直接单独的文件编译时会报错，所以得指定package包的目录。
例如：
$ javac -cp /Users/johnhao/Downloads/charles-1 /Users/johnhao/Downloads/charles/WNzU.java
将class文件更新到jar包中。同样要注意目录问题，因为WNzU class是在目录com/xk72/charles/中，所以得在当前目录下创建一样的结构，防止把新的class更新到根目录下。
jar uf charles.jar com/xk72/charles/WNzU.class
三、替换原jar文件
应用 -> 显示包内容 -> Contents -> Java，或者直接到目录/Applications/Charles.app/Contents/Java/。替换掉即可用。第二次做练习，下次就直接贴jar文件了。
