@leejungkiin/awkit 1.7.1 → 1.7.4

package/skills/smali-to-kotlin/smali-reading-guide.md

@@ -0,0 +1,310 @@
+# 🔬 Smali Reading Guide for AI
+
+> Quick reference for interpreting Smali bytecode when reverse engineering Android apps.
+> Used by the `smali-to-kotlin` skill during Steps 1-6.
+
+---
+
+## 📝 Smali Basics
+
+### File Structure
+```smali
+.class public Lcom/example/app/MyClass;
+.super Ljava/lang/Object;
+.source "MyClass.java"
+
+# interfaces
+.implements Ljava/io/Serializable;
+
+# static fields
+.field private static final TAG:Ljava/lang/String; = "MyClass"
+
+# instance fields
+.field private name:Ljava/lang/String;
+.field private age:I
+
+# direct methods (constructors, static, private)
+.method public constructor <init>()V
+    ...
+.end method
+
+# virtual methods (public, protected, package-private)
+.method public getName()Ljava/lang/String;
+    ...
+.end method
+```
+
+### Type Descriptors
+```
+V     → void
+Z     → boolean
+B     → byte
+S     → short
+C     → char
+I     → int
+J     → long (2 registers)
+F     → float
+D     → double (2 registers)
+L___; → object (e.g., Ljava/lang/String;)
+[     → array (e.g., [I = int[], [Ljava/lang/String; = String[])
+```
+
+### Register Naming
+```
+p0, p1, p2...  → parameter registers (p0 = 'this' for instance methods)
+v0, v1, v2...  → local variable registers
+```
+
+---
+
+## 🔑 Common Patterns → Kotlin Translation
+
+### 1. String Constants & Field Access
+```smali
+# Smali
+const-string v0, "https://api.example.com"
+sput-object v0, Lcom/example/Config;->BASE_URL:Ljava/lang/String;
+```
+```kotlin
+// Kotlin
+object Config {
+    const val BASE_URL = "https://api.example.com"
+}
+```
+
+### 2. Method Calls
+```smali
+# Static method call
+invoke-static {v0, v1}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I
+
+# Virtual method call (on instance)
+invoke-virtual {p0, v0}, Lcom/example/MyClass;->setName(Ljava/lang/String;)V
+
+# Interface method call
+invoke-interface {v0}, Ljava/util/List;->size()I
+
+# Direct method call (private/constructor)
+invoke-direct {p0}, Ljava/lang/Object;-><init>()V
+```
+```kotlin
+// Kotlin equivalents
+Log.d(tag, message)
+myObject.setName(name)  // or myObject.name = name
+list.size
+super()
+```
+
+### 3. Conditionals (if-else)
+```smali
+# if (v0 == 0) goto :label
+if-eqz v0, :cond_0
+
+# if (v0 != v1) goto :label
+if-ne v0, v1, :cond_1
+
+# if (v0 >= v1) goto :label
+if-ge v0, v1, :cond_2
+```
+```
+Conditional opcodes:
+if-eqz  → == 0        if-eq   → ==
+if-nez  → != 0        if-ne   → !=
+if-ltz  → < 0         if-lt   → <
+if-gez  → >= 0        if-ge   → >=
+if-gtz  → > 0         if-gt   → >
+if-lez  → <= 0        if-le   → <=
+```
+
+### 4. Try-Catch
+```smali
+.method public doNetwork()V
+    .registers 4
+    
+    :try_start_0
+    # ... risky code ...
+    :try_end_0
+    .catch Ljava/io/IOException; {:try_start_0 .. :try_end_0} :catch_0
+    
+    goto :goto_0
+    
+    :catch_0
+    move-exception v0
+    # ... handle error ...
+    
+    :goto_0
+    return-void
+.end method
+```
+```kotlin
+fun doNetwork() {
+    try {
+        // ... risky code ...
+    } catch (e: IOException) {
+        // ... handle error ...
+    }
+}
+```
+
+### 5. Loops
+```smali
+# for loop pattern
+const/4 v0, 0x0              # i = 0
+
+:goto_0
+array-length v1, v2          # v1 = array.length
+if-ge v0, v1, :cond_0        # if (i >= length) break
+
+# ... loop body using v0 as index ...
+
+add-int/lit8 v0, v0, 0x1     # i++
+goto :goto_0
+
+:cond_0
+# ... after loop ...
+```
+```kotlin
+for (i in array.indices) {
+    // loop body
+}
+```
+
+### 6. Switch/When
+```smali
+packed-switch v0, :pswitch_data_0
+
+# ... default case ...
+goto :goto_0
+
+:pswitch_0    # case 0
+...
+:pswitch_1    # case 1
+...
+
+:pswitch_data_0
+.packed-switch 0x0
+    :pswitch_0
+    :pswitch_1
+.end packed-switch
+```
+```kotlin
+when (value) {
+    0 -> { /* case 0 */ }
+    1 -> { /* case 1 */ }
+    else -> { /* default */ }
+}
+```
+
+### 7. Object Creation
+```smali
+new-instance v0, Ljava/util/ArrayList;
+invoke-direct {v0}, Ljava/util/ArrayList;-><init>()V
+```
+```kotlin
+val list = ArrayList<Any>()
+// or better: val list = mutableListOf<Any>()
+```
+
+### 8. Casting & instanceof
+```smali
+# instanceof
+instance-of v1, v0, Ljava/lang/String;
+
+# cast
+check-cast v0, Ljava/lang/String;
+```
+```kotlin
+if (obj is String) { ... }  // instanceof
+val str = obj as String      // cast
+```
+
+---
+
+## 🎯 High-Value Patterns to Look For
+
+### API Endpoints
+```smali
+# Look for URL string concatenation
+const-string v0, "/api/v1/users"
+invoke-virtual {v1, v0}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
+```
+
+### SharedPreferences Keys
+```smali
+const-string v0, "user_token"
+invoke-interface {v1, v0}, Landroid/content/SharedPreferences;->getString(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
+```
+
+### Intent Actions & Extras
+```smali
+const-string v0, "com.example.ACTION_REFRESH"
+const-string v1, "extra_user_id"
+invoke-virtual {v2, v1, v3}, Landroid/content/Intent;->putExtra(Ljava/lang/String;Ljava/lang/String;)Landroid/content/Intent;
+```
+
+### Database Queries
+```smali
+const-string v0, "SELECT * FROM users WHERE id = ?"
+invoke-virtual {v1, v0, v2}, Landroid/database/sqlite/SQLiteDatabase;->rawQuery(Ljava/lang/String;[Ljava/lang/String;)Landroid/database/Cursor;
+```
+
+### Encryption Patterns
+```smali
+const-string v0, "AES/CBC/PKCS5Padding"
+invoke-static {v0}, Ljavax/crypto/Cipher;->getInstance(Ljava/lang/String;)Ljavax/crypto/Cipher;
+
+const-string v0, "SHA-256"
+invoke-static {v0}, Ljava/security/MessageDigest;->getInstance(Ljava/lang/String;)Ljava/security/MessageDigest;
+```
+
+---
+
+## 🔍 Obfuscation Patterns (ProGuard/R8)
+
+### Renamed Classes
+```
+Original: Lcom/example/UserRepository;
+Obfuscated: La/b/c;
+```
+**Strategy:** Follow method calls and string constants to understand purpose.
+
+### Renamed Methods
+```
+Original: ->getUserProfile
+Obfuscated: ->a(Ljava/lang/String;)V
+```
+**Strategy:** Look at parameters, return types, and what the method does internally.
+
+### String Encryption
+```smali
+# Common pattern: encrypted strings decoded at runtime
+invoke-static {v0}, Lcom/example/StringDecryptor;->decrypt(Ljava/lang/String;)Ljava/lang/String;
+```
+**Strategy:** Find the decryptor class, understand the algorithm, then decrypt all strings.
+
+### Tips for Obfuscated Code
+1. **Start from entry points** (Activities in Manifest) — these are rarely obfuscated
+2. **Follow string constants** — strings reveal purpose
+3. **Check annotation classes** — Retrofit/Room annotations may survive obfuscation
+4. **mapping.txt** — if available in APK, use it to deobfuscate
+5. **Look for SDK packages** — third-party SDKs are usually not obfuscated
+
+---
+
+## 📊 Register Width Rules
+
+```
+Single-width (1 register): boolean, byte, char, short, int, float, Object reference
+Double-width (2 registers): long, double
+
+Example:
+.method public calc(IJLjava/lang/String;)V
+    .registers 6
+    # p0 = this
+    # p1 = int param (I)
+    # p2-p3 = long param (J) — takes 2 registers!
+    # p4 = String param
+```
+
+---
+
+*smali-reading-guide v1.0.0 — AI reference for Smali bytecode interpretation*

package/skills/smali-to-kotlin/templates/app-map.md

@@ -0,0 +1,101 @@
+# 🗺️ App Map: [App Name]
+
+**Generated:** [Date]
+**Source:** [Apktool dir path]
+
+---
+
+## 📱 Identity
+
+| Property | Value |
+|----------|-------|
+| Package | [com.example.app] |
+| App Name | [Display Name] |
+| Min SDK | [value] |
+| Target SDK | [value] |
+| Screens | [count] Activities |
+| Services | [count] |
+| Receivers | [count] |
+| Providers | [count] |
+
+---
+
+## 🧭 Screen Flow
+
+```
+┌──────────┐    ┌──────────┐    ┌──────────────┐
+│  Splash  │───→│  Login   │───→│  Main Tab    │
+└──────────┘    └──────────┘    ├──────────────┤
+                                 │ Tab 1: Home  │
+                                 │ Tab 2: ...   │
+                                 │ Tab 3: ...   │
+                                 └──────────────┘
+                                       │
+                                 ┌─────┴─────┐
+                                 │  Detail   │
+                                 │  ...      │
+                                 └───────────┘
+```
+
+*Or use Mermaid:*
+```mermaid
+graph LR
+    Splash --> Login
+    Login --> MainTab
+    MainTab --> Home
+    MainTab --> Tab2
+    MainTab --> Tab3
+    Home --> Detail
+```
+
+---
+
+## 📦 Library Landscape
+
+### ✅ Reuse (add to build.gradle)
+| Library | Detected Package | Latest Version | Action |
+|---------|-----------------|----------------|--------|
+
+### 🔄 Replace (legacy → modern)
+| Old Library | Detected Package | Modern Replacement |
+|-------------|-----------------|-------------------|
+
+### 🔵 Firebase / Google SDKs
+| SDK | Detected | Action |
+|-----|----------|--------|
+
+### 📱 Native (.so) — Keep
+| File | Architecture | Notes |
+|------|-------------|-------|
+
+### 🏷️ App Code (rebuild in Kotlin)
+| Package | Estimated Module |
+|---------|-----------------|
+
+### ❓ Unknown (needs investigation)
+| Package | Path | Possible Library |
+|---------|------|-----------------|
+
+---
+
+## 📊 Complexity Estimate
+
+| Area | Rating | Notes |
+|------|--------|-------|
+| Data Layer | ●●●○○ | [N] APIs, [N] local DB, [N] DataStores |
+| Core Logic | ●●○○○ | [N] crypto utils, [N] formatters |
+| UI Screens | ●●●●○ | [N] screens, [N] complex layouts |
+| SDK Integration | ●●○○○ | [N] third-party, [N] native libs |
+
+---
+
+## 🔍 Key Observations
+
+- [Notable patterns: obfuscation level, unusual architecture, etc.]
+- [Security observations: certificate pinning, root detection, etc.]
+- [Risks: native libs without source, proprietary SDKs, etc.]
+
+---
+
+> **Next:** Anh review map này, có gì cần điều chỉnh không?
+> → OK → Proceed to Phase 1 (Architecture Design)

package/skills/smali-to-kotlin/templates/architecture.md

@@ -0,0 +1,142 @@
+# 🏗️ Architecture Blueprint: [App Name]
+
+**Generated:** [Date]
+**Based on:** App Map v[date]
+
+---
+
+## 📐 Layer Map
+
+```
+┌─────────────────────────────────────┐
+│ Presentation                        │
+│ ├── screens/ ([N] screens)          │
+│ ├── navigation/ (NavGraph + Routes) │
+│ ├── theme/ (Material 3 Theme)      │
+│ └── components/ (Shared UI)        │
+├─────────────────────────────────────┤
+│ Domain                              │
+│ ├── model/ ([N] business models)    │
+│ ├── repository/ ([N] interfaces)   │
+│ └── usecase/ ([N] use cases)        │
+├─────────────────────────────────────┤
+│ Data                                │
+│ ├── remote/ ([N] API services)     │
+│ ├── local/ (Room DB, DataStore)    │
+│ └── repository/ ([N] impls)        │
+├─────────────────────────────────────┤
+│ DI (Hilt)                           │
+│ └── modules/ (Network, DB, Repo)   │
+└─────────────────────────────────────┘
+```
+
+---
+
+## 🗂️ Feature → File Mapping
+
+| Feature | Domain Model | Repository | UseCase | Screen(s) | ViewModel |
+|---------|-------------|-----------|---------|-----------|-----------|
+| Auth | User, Token | AuthRepo | LoginUC, RegisterUC | Login, Register | AuthVM |
+| Home | [Model] | [Repo] | [UC] | Home | HomeVM |
+| Profile | [Model] | [Repo] | [UC] | Profile, Edit | ProfileVM |
+| Settings | [Model] | [Repo] | [UC] | Settings | SettingsVM |
+| ... | ... | ... | ... | ... | ... |
+
+---
+
+## 🌐 API Endpoints
+
+| # | Method | Endpoint | Auth | Notes |
+|---|--------|----------|------|-------|
+| 1 | POST | /auth/login | No | JWT response |
+| 2 | GET | /users/me | Bearer | User profile |
+| ... | ... | ... | ... | ... |
+
+**Base URL:** `[extracted from Smali]`
+**Auth Type:** [Bearer token / API key / Custom]
+
+---
+
+## 💾 Data Schema
+
+| Model | Key Fields | Source | Storage |
+|-------|-----------|--------|---------|
+| User | id, name, email, avatar | API + Local | Room |
+| Settings | theme, lang, notif | Local only | DataStore |
+| ... | ... | ... | ... |
+
+---
+
+## 📁 Project Structure
+
+```
+app/src/main/java/[package]/
+├── App.kt
+├── di/
+│   ├── AppModule.kt
+│   ├── NetworkModule.kt
+│   └── DatabaseModule.kt
+├── data/
+│   ├── remote/
+│   │   ├── api/
+│   │   ├── dto/
+│   │   └── interceptor/
+│   ├── local/
+│   │   ├── db/
+│   │   ├── dao/
+│   │   ├── entity/
+│   │   └── datastore/
+│   └── repository/
+├── domain/
+│   ├── model/
+│   ├── repository/
+│   └── usecase/
+├── presentation/
+│   ├── navigation/
+│   ├── theme/
+│   ├── components/
+│   └── screens/
+│       ├── splash/
+│       ├── auth/
+│       ├── home/
+│       └── .../
+└── util/
+```
+
+---
+
+## 🔢 Build Order
+
+| # | Phase | Scope | Complexity |
+|---|-------|-------|-----------|
+| 1 | 🟢 Setup | Project + DI skeleton + Theme | Low |
+| 2 | 🟢 Models | Domain data classes | Low |
+| 3 | 🟡 Data | API + Room + DataStore | Medium |
+| 4 | 🟡 Utils | Crypto, formatters (parity test!) | Medium |
+| 5 | 🔴 Feature: [First] | Blueprint → Build | High |
+| 6 | 🔴 Feature: [Second] | Blueprint → Build | High |
+| ... | ... | ... | ... |
+| N | 🔴 Final | Parity check + QA | High |
+
+**Suggested first feature:** [Name] — because [reason]
+
+---
+
+## 🔧 Tech Stack Decisions
+
+| Decision | Choice | Rationale |
+|----------|--------|-----------|
+| UI Framework | Jetpack Compose + Material 3 | Modern, declarative |
+| DI | Hilt | Standard Android DI |
+| Network | Retrofit + OkHttp | [Keep/Replace based on scan] |
+| JSON | Kotlin Serialization | Type-safe, KMP ready |
+| Image Loading | [Coil / Keep Glide] | [reason] |
+| Local DB | Room | [reason] |
+| Preferences | DataStore | Replaces SharedPreferences |
+| Async | Coroutines + Flow | Modern concurrency |
+
+---
+
+> **Next:** Anh muốn bắt đầu từ feature nào?
+> Em suggest: **[Feature]** vì [reason].
+> → Pick feature → Phase 2 (Blueprint)

package/skills/smali-to-kotlin/templates/blueprint.md

@@ -0,0 +1,145 @@
+# 📐 Feature Blueprint: [Feature Name]
+
+**Generated:** [Date]
+**Architecture:** [App Name] v[date]
+**Feature:** [Feature Name]
+
+---
+
+## 🔍 Smali Analysis Summary
+
+| Item | Value |
+|------|-------|
+| Files analyzed | [list of Smali files] |
+| Classes found | [count] |
+| API calls detected | [count] |
+| Local storage | [types: SharedPrefs, SQLite, etc.] |
+
+### Key Observations
+- [Pattern 1: e.g., "Uses MD5 + Base64 for password hashing"]
+- [Pattern 2: e.g., "Token stored in SharedPreferences key 'auth_token'"]
+- [Pattern 3: e.g., "Custom header 'X-App-Key' in all requests"]
+
+---
+
+## 📦 Domain Models
+
+```kotlin
+data class [Model](
+    val field1: Type,
+    val field2: Type,
+    // ...
+)
+```
+
+---
+
+## 📡 API Contract
+
+```kotlin
+interface [Feature]Api {
+    @[METHOD]("[endpoint]")
+    suspend fun [method](@Body request: [Request]): [Response]
+}
+```
+
+**Request/Response DTOs:**
+```kotlin
+@Serializable
+data class [Request](/* fields */)
+
+@Serializable
+data class [Response](/* fields */)
+```
+
+---
+
+## 🗄️ Repository Contract
+
+```kotlin
+interface [Feature]Repository {
+    suspend fun [method1](...): Result<[Type]>
+    fun [method2](): Flow<[Type]>
+}
+```
+
+---
+
+## 🧩 UseCase Signatures
+
+```kotlin
+class [Action]UseCase(private val repo: [Feature]Repository) {
+    suspend operator fun invoke(...): Result<[Type]>
+}
+```
+
+---
+
+## 🎨 UI State Design
+
+```kotlin
+// State
+data class [Screen]UiState(
+    val field1: Type = default,
+    val isLoading: Boolean = false,
+    val error: String? = null
+)
+
+// One-time events
+sealed interface [Screen]Event {
+    data class NavigateTo[Next](/* params */) : [Screen]Event
+    data class ShowSnackbar(val message: String) : [Screen]Event
+}
+
+// User actions
+sealed interface [Screen]Action {
+    data class Update[Field](val value: Type) : [Screen]Action
+    data object Submit : [Screen]Action
+}
+```
+
+---
+
+## 🖼️ Screen Wireframe
+
+```
+┌────────────────────────┐
+│                        │
+│    [Layout sketch]     │
+│                        │
+└────────────────────────┘
+
+Behaviors:
+- [Interaction 1]
+- [Interaction 2]
+- [Error handling]
+- [Navigation on success]
+```
+
+---
+
+## 📁 Files to Create
+
+| File | Layer | Type |
+|------|-------|------|
+| [Model].kt | domain/model | Data class |
+| [Feature]Repository.kt | domain/repository | Interface |
+| [Action]UseCase.kt | domain/usecase | Class |
+| [Feature]Api.kt | data/remote/api | Retrofit interface |
+| [DTOs].kt | data/remote/dto | Serializable |
+| [Feature]RepositoryImpl.kt | data/repository | Implementation |
+| [Screen]Screen.kt | presentation/screens | Composable |
+| [Screen]ViewModel.kt | presentation/screens | ViewModel |
+
+---
+
+## 🔗 Dependencies
+
+- **Depends on:** [other features/modules this needs]
+- **Depended by:** [features that need this]
+
+---
+
+> **Next:** Anh xem contracts ổn không?
+> → OK → Phase 3 (Implementation)
+> → Adjust → Update blueprint