Smali Bytecode Hooks

import app.morphe.patcher.extensions.InstructionExtensions.addInstructions
import app.morphe.patcher.extensions.InstructionExtensions.addInstructionsWithLabels
import app.morphe.patcher.extensions.InstructionExtensions.getInstruction

fingerprint.method.apply {
    removeInstructions(0, implementation!!.instructions.count())
    addInstructions(0, """
        const/4 v0, 0x1
        return v0
    """.trimIndent())
}

val method = fingerprint.method
val returnIndices = method.implementation?.instructions?.withIndex()
    ?.filter { it.value.opcode == Opcode.RETURN_OBJECT }
    ?.map { it.index to (it.value as OneRegisterInstruction).registerA }
    ?.toList() ?: emptyList()

// Reverse iteration prevents index shifting
returnIndices.asReversed().forEach { (returnIndex, reg) ->
    method.addInstructions(
        returnIndex,
        """
            invoke-static {v$reg}, Lcom/kveld9/morphe/extension/Payload;->filter(Ljava/lang/Object;)V
        """.trimIndent(),
    )
}

import com.android.tools.smali.dexlib2.iface.instruction.OneRegisterInstruction

val matchIndex = fingerprint.instructionMatches[0].index
val resultReg = fingerprint.method
    .getInstruction<OneRegisterInstruction>(matchIndex + 1).registerA

fingerprint.method.addInstructions(matchIndex + 2, "const/4 v$resultReg, 0x0")

import com.android.tools.smali.dexlib2.iface.instruction.TwoRegisterInstruction

// Example: Neutralizing a boolean field write (iput-boolean vx, vy, Field)
val putIndex = fingerprint.instructionMatches[1].index
val instruction = fingerprint.method.getInstruction<TwoRegisterInstruction>(putIndex)
val putReg = instruction.registerA      // Data value register (vx)
val objReg = instruction.registerB      // Object instance register (vy)

fingerprint.method.addInstructions(putIndex, "const/4 v$putReg, 0x0")

method.addInstructionsWithLabels(0, """
    invoke-static {}, Landroid/app/ActivityThread;->currentApplication()Landroid/app/Application;
    move-result-object v0
    invoke-static {v0}, Landroid/preference/PreferenceManager;->getDefaultSharedPreferences(Landroid/content/Context;)Landroid/content/SharedPreferences;
    move-result-object v0
    const-string v1, "morphe_feature_enabled"
    invoke-interface {v0, v1}, Landroid/content/SharedPreferences;->contains(Ljava/lang/String;)Z
    move-result v0
    if-nez v0, :disabled
    const/4 v0, 0x1
    return v0
    :disabled
    const/4 v0, 0x0
    return v0
""".trimIndent())

invoke-virtual {p0, p1}, Lorg/chromium/chrome/browser/settings/Preferences;->findPreference(Ljava/lang/CharSequence;)Landroidx/preference/Preference;
move-result-object v0
if-eqz v0, :done
move-object v3, p0
const-string v1, "mListener"
const-class v2, Landroidx/preference/Preference;
invoke-virtual {v2, v1}, Ljava/lang/Class;->getDeclaredField(Ljava/lang/String;)Ljava/lang/reflect/Field;
move-result-object v1
const/4 v2, 0x1
invoke-virtual {v1, v2}, Ljava/lang/reflect/Field;->setAccessible(Z)V
invoke-virtual {v1, v0, v3}, Ljava/lang/reflect/Field;->set(Ljava/lang/Object;Ljava/lang/Object;)V
:done
return-void