Info Call to dynamic code loading API

Description

List of all dynamic code loading API calls in the application. Loading code from untrsuted sources could allow the execution of malicious code in the context of the current application.

Recommendation

This entry is informative, no recommendations applicable.

Technical details

Method com.google.android.gms.dynamite.h.<init>() calling method dalvik.system.PathClassLoader.<init>()


    h(String p1, ClassLoader p2)
    {
        super(p1, p2);
        return;
    }

Method com.nostra13.socialsharing.twitter.extpack.oauth.signpost.c.b() calling method java.lang.System.getProperty()


    public static void b(String p3, String p4)
    {
        if (System.getProperty("debug") != null) {
            StringBuilder v1_1 = new StringBuilder();
            v1_1.append("[SIGNPOST] ");
            v1_1.append(p3);
            v1_1.append(": ");
            v1_1.append(p4);
            System.out.println(v1_1.toString());
        }
        return;
    }

Method android.support.multidex.b$c.b() calling method dalvik.system.DexFile.loadDex()


    private static void b(ClassLoader p10, java.util.List p11)
    {
        dalvik.system.DexFile[] v0_0 = p11.size();
        reflect.Field v1_1 = android.support.multidex.b.a(p10, "path");
        StringBuilder v2_1 = new StringBuilder(((String) v1_1.get(p10)));
        String[] v3_0 = new String[v0_0];
        java.io.File[] v4 = new java.io.File[v0_0];
        java.util.zip.ZipFile[] v5 = new java.util.zip.ZipFile[v0_0];
        dalvik.system.DexFile[] v0_1 = new dalvik.system.DexFile[v0_0];
        String v11_1 = p11.listIterator();
        while (v11_1.hasNext()) {
            dalvik.system.DexFile v6_2 = ((java.io.File) v11_1.next());
            String v7 = v6_2.getAbsolutePath();
            v2_1.append(58);
            v2_1.append(v7);
            int v8_1 = v11_1.previousIndex();
            v3_0[v8_1] = v7;
            v4[v8_1] = v6_2;
            v5[v8_1] = new java.util.zip.ZipFile(v6_2);
            dalvik.system.DexFile v6_4 = new StringBuilder();
            v6_4.append(v7);
            v6_4.append(".dex");
            v0_1[v8_1] = dalvik.system.DexFile.loadDex(v7, v6_4.toString(), 0);
        }
        v1_1.set(p10, v2_1.toString());
        android.support.multidex.b.a(p10, "mPaths", v3_0);
        android.support.multidex.b.a(p10, "mFiles", v4);
        android.support.multidex.b.a(p10, "mZips", v5);
        android.support.multidex.b.a(p10, "mDexs", v0_1);
        return;
    }

Method com.google.android.gms.vision.EngineManager.zza() calling method java.lang.System.loadLibrary()


    public final declared_synchronized boolean zza(android.content.Context p1)
    {
        try {
            System.loadLibrary(this.zzaj);
            return 1;
        } catch (Throwable v1_2) {
            throw v1_2;
        }
    }

Method com.vnpay.a.a.a() calling method java.lang.System.loadLibrary()


    public static void a()
    {
        System.loadLibrary(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\uec8e\u9d22\uffc5\ubd6b\u423c\ucff1\ufda6\u6408\u2149\u6818"));
        return;
    }

Method com.vnpay.ncb.ProtectedNCBApplication.GvIDi() calling method java.lang.System.load()


    private void GvIDi()
    {
        java.io.File v2 = this.getDir(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ua74e\u18df\u534c\u46b4\u729e\u39c2"), 0);
        if (v2.exists()) {
            java.io.File v1_0 = new java.io.File(v2, new StringBuilder().append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ua74d\u18c3\u535a\u46b4\u729e\u39c2\ue1ff\u2fc3\u9fce\u1949\u3057\u73ce\u5286\ud24e\ue4fd\ueaec\u7645\u1157\u294c\uec25\u8aa6\uc0e0\u3524\u6674")).append(android.os.Process.myPid()).append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ua70f\u18d9\u5357")).toString());
            try {
                this.hihxAb(v1_0);
            } catch (RuntimeException v3_11) {
                v1_0.delete();
                throw v3_11;
            } catch (Exception v0) {
                throw new RuntimeException(new StringBuilder().append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ua767\u18cb\u5351\u46bc\u729e\u39de\ue1af\u2fc5\u9fce\u191d\u3047\u73c3\u5282\ud240\ue4ec\ueaa9\u7654\u1149\u2946\uec2d\u8abf\uc0b3\u3562\u6623\u7f10\u7534")).append(v1_0).append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ua706")).toString(), v0);
            }
            System.load(v1_0.getAbsolutePath());
            v1_0.delete();
            return;
        } else {
            throw new RuntimeException(new StringBuilder().append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ua767\u18cb\u5351\u46bc\u729e\u39de\ue1af\u2fc5\u9fce\u191d\u3057\u73c3\u5281\ud254\ue4fd\ueaa7\u7654\u1102")).append(v2).append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ua706")).toString());
        }
    }

Method android.support.multidex.b.<clinit>() calling method java.lang.System.getProperty()


    static b()
    {
        android.support.multidex.b.a = "MultiDex";
        android.support.multidex.b.b = "secondary-dexes";
        android.support.multidex.b.c = "code_cache";
        android.support.multidex.b.d = "secondary-dexes";
        android.support.multidex.b.i = "";
        android.support.multidex.b.j = new java.util.HashSet();
        android.support.multidex.b.k = android.support.multidex.b.a(System.getProperty("java.vm.version"));
        return;
    }

Method android.support.multidex.b.a() calling method java.lang.System.getProperty()


    private static void a(android.content.Context p5, java.io.File p6, java.io.File p7, String p8, String p9)
    {
        try {
            if (!ark>android.support.multidex.bark>.j.contains(p6)) {
                ark>android.support.multidex.bark>.j.add(p6);
                if (android.os.Build$VERSION.SDK_INT > 20) {
                    String v3_1 = new StringBuilder();
                    v3_1.append("MultiDex is not guaranteed to work in SDK version ");
                    v3_1.append(android.os.Build$VERSION.SDK_INT);
                    v3_1.append(": SDK version higher than ");
                    v3_1.append(20);
                    v3_1.append(" should be backed by ");
                    v3_1.append("runtime with built-in multidex capabilty but it\'s not the ");
                    v3_1.append("case here: java.vm.version=\"");
                    v3_1.append(System.getProperty("java.vm.version"));
                    v3_1.append("\"");
                    v3_1.toString();
                }
                ClassLoader v1_2 = p5.getClassLoader();
                if (v1_2 != null) {
                    try {
                        ark>android.support.multidex.bark>.c(p5);
                    } catch (Throwable v2) {
                        String v4 = "Something went wrong when trying to clear old MultiDex extraction, continuing without cleaning.";
                    }
                    java.io.File v7_1 = ark>android.support.multidex.bark>.a(p5, p7, p8);
                    ark>android.support.multidex.bark>.a(v1_2, v7_1, android.support.multidex.c.a(p5, p6, v7_1, p9, 0));
                    return;
                } else {
                    p6 = "Context class loader is null. Must be running in test mode. Skip patching.";
                    return;
                }
            } else {
                return;
            }
        } catch (java.util.List v5_2) {
            throw v5_2;
        }
    }

Method bolts.g.d() calling method java.lang.System.getProperty()


    private static boolean d()
    {
        boolean v0_2 = System.getProperty("java.runtime.name");
        if (v0_2) {
            return v0_2.toLowerCase(java.util.Locale.US).contains("android");
        } else {
            return 0;
        }
    }

Method com.google.zxing.ReaderException.<clinit>() calling method java.lang.System.getProperty()


    static ReaderException()
    {
        StackTraceElement[] v0_2;
        if (System.getProperty("surefire.test.class.path") == null) {
            v0_2 = 0;
        } else {
            v0_2 = 1;
        }
        com.google.zxing.ReaderException.a = v0_2;
        StackTraceElement[] v0_3 = new StackTraceElement[0];
        com.google.zxing.ReaderException.b = v0_3;
        return;
    }

Method com.vnpay.bc.fz.d() calling method java.lang.System.getProperty()


    private boolean d()
    {
        int v0_5 = System.getProperty(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\ub405\u1753\uae94\u470e\u4998\u3a98\u880f\uc32b\u1e33\u1bb8\u05c2\u1314\u1418\u2b5c\u7075\u830e\u4b9e\ud9c8\uc4eb\u99d1\u778c\ube6a\u0f2c\u55b7\u218c\ud964\u6e26\u7331\u3a62"));
        if ((v0_5 == 0) || (v0_5.equals(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\ub41e\u1753\uae86\u4745")))) {
            return 1;
        } else {
            return 0;
        }
    }

Method com.vnpay.bc.gl.<init>() calling method java.lang.System.getProperty()


    public gl(java.io.Writer p1)
    {
        int v1_2;
        super(p1);
        int v1_3 = new char[64];
        super.b = v1_3;
        int v1_6 = System.getProperty(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\uda59\u2f07\u9d61\ub984\ua179\u0b64\u37eb\u093d\u00c4\ue00d\uf736\uc2d8\u2a6d\u009d"));
        if (v1_6 == 0) {
            v1_2 = 2;
        } else {
            v1_2 = v1_6.length();
        }
        super.c = v1_2;
        return;
    }

Method com.vnpay.ncb.ProtectedNCBApplication.wFf() calling method java.lang.System.getProperty()


    private void wFf()
    {
        if (!com.vnpay.ncb.ProtectedNCBApplication.D) {
            String v2 = new StringBuilder().append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcc6\u3ac9\u4982\u0500\u17c5\u8b37\ueb3c\u1822\u0c1b\u0395\u9c88\u7066\u8b39\ue45d\u01cd\u7862\udb40\u7d53\u3a09\ud403\u66e7\u8c9d\ue55e\u8e3b\u8593\u3323\u1c77\uc06d\u9f8c\u195c")).append(android.os.SystemProperties.get(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcf2\u3acf\u49c2\u0517\u17d2\u8b2a\ueb28\u1825\u0c11\u038f\u9cd2\u7025\u8b7b\ue418\u01d2\u783b\udb12\u7d02"), com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcad"))).append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcba")).append(android.os.Build.CPU_ABI).append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufca0")).append(android.os.Build$VERSION.SDK_INT).append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcaf")).append(System.getProperty(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcea\u3ac1\u499a\u0506\u178e\u8b33\ueb21\u187e\u0c04\u039e\u9c8e\u7035\u8b62\ue402\u0192"), com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcad"))).append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcaf")).append(android.os.SystemProperties.get(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcf0\u3ac5\u499e\u0514\u17c9\u8b36\ueb38\u187e\u0c01\u0382\u9c8f\u7068\u8b6f\ue40c\u0190\u782c\udb19\u7d00\u3a16\ud446\u66aa\u8ce8\ue51c\u8e7c\u85df"), com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcad"))).append(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufca0")).append(android.os.Build.FINGERPRINT).toString();
            com.vnpay.ncb.ProtectedNCBApplication.n = android.util.Base64.encodeToString(v2.getBytes(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcd5\u3af4\u49aa\u054a\u1798")), 10);
            android.util.Log.i(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcf6\u3ace\u499c\u0506\u17d9"), v2);
            this.GvIDi();
            Class v3 = Class.forName(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcea\u3ac1\u499a\u0506\u178e\u8b29\ueb2d\u183e\u0c15\u03d5\u9cb3\u7024\u8b61\ue408\u019f\u782e"));
            Class v0 = Class.forName(com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufce3\u3acf\u4981\u0549\u17d6\u8b2b\ueb3c\u1831\u0c0b\u03d5\u9c92\u7025\u8b69\ue443\u01ac\u7828\udb1f\u7d1f\u3a5d\ud453\u66b3\u8ca3\ue514\u8e5b\u85fe\u334a\u1c1d\uc036\u9fa1\u1910\u2318\u093b\u1a53\u0538\uceba\uc1f4\u3cb6\u8f90\udf8c\u90b1\u5540\u3eaa\uc782\ud065\ubabf\ubfea\u6af3\ua379\ue436\u2776\u00c0\u15ba\u35a0\u0649\u9532\ue8b6\u98e8\u311c\u7e5c\u8d03\u929d\u80e4\u0807\u53d2"));
            Object[] v6_1 = com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\ufcca\u3ac8\u4985\u050d");
            String v7_1 = new Class[2];
            v7_1[0] = v3;
            v7_1[1] = v3;
            reflect.Method v1 = v0.getDeclaredMethod(v6_1, v7_1);
            v1.setAccessible(1);
            Object[] v6_2 = new Object[2];
            v6_2[0] = this;
            v6_2[1] = com.vnpay.ncb.ProtectedNCBApplication.onMeasure("\u951d\u7188\ue19d\u357a");
            v1.invoke(this, v6_2);
            com.vnpay.ncb.ProtectedNCBApplication.D = 1;
        }
        return;
    }

Method okhttp3.internal.platform.Platform.isConscryptPreferred() calling method java.lang.System.getProperty()


    public static boolean isConscryptPreferred()
    {
        if (!"conscrypt".equals(System.getProperty("okhttp.platform"))) {
            return "Conscrypt".equals(java.security.Security.getProviders()[0].getName());
        } else {
            return 1;
        }
    }

Method com.vnpay.ticketlib.Utils.LogTicket.<clinit>() calling method java.lang.System.getProperty()


    static LogTicket()
    {
        com.vnpay.ticketlib.Utils.LogTicket.newLine = "";
        com.vnpay.ticketlib.Utils.LogTicket.sTrBufferLog = new StringBuffer();
        String v0_5 = new StringBuilder();
        v0_5.append(System.getProperty(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\ud95e\udd31\u6aab\ud15b\u8abe\ub910\u3085\ubef7\uca30\u95f0\uafbf\u50ca\uca0f\u93b0")));
        v0_5.append(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\ud90e\udd3a\u6ab7\ud111\u8aae"));
        com.vnpay.ticketlib.Utils.LogTicket.newLine = v0_5.toString();
        return;
    }

Method com.vnpay.vexemphim.d.c.<clinit>() calling method java.lang.System.getProperty()


    static c()
    {
        com.vnpay.vexemphim.d.c.d = "";
        com.vnpay.vexemphim.d.c.a = new StringBuffer();
        String v0_5 = new StringBuilder();
        v0_5.append(System.getProperty(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\uec27\u9994\ud1f8\u43f1\u5315\u7df5\ua02d\u1cf4\u71d3\uad0c\u30b0\u2abc\ua063\u276f")));
        v0_5.append(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\uec77\u999f\ud1e4\u43bb\u5305"));
        com.vnpay.vexemphim.d.c.d = v0_5.toString();
        return;
    }

Method com.vnpay.vntalk.util.g.<clinit>() calling method java.lang.System.getProperty()


    static g()
    {
        com.vnpay.vntalk.util.g.c = "";
        StringBuffer v0_5 = new StringBuilder();
        v0_5.append(System.getProperty(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\ucd62\u8719\u4d03\u321c\ub309\u5ff4\ufdaa\ud822\uaa68\uc076\ubd24\ue29c\ucb23\u767d")));
        v0_5.append(com.vnpay.ncb.BaseActivity$13$j$n.jiyyjg("\ucd32\u8712\u4d1f\u3256\ub319"));
        com.vnpay.vntalk.util.g.c = v0_5.toString();
        com.vnpay.vntalk.util.g.d = new StringBuffer();
        return;
    }