Skip to content

Instantly share code, notes, and snippets.

@Intyre
Last active May 13, 2024 18:55
Show Gist options
  • Save Intyre/e334736cbb69bef7cf7e45c4f75be892 to your computer and use it in GitHub Desktop.
Save Intyre/e334736cbb69bef7cf7e45c4f75be892 to your computer and use it in GitHub Desktop.

Wahoo - BoltApp

Dependecies

Decompile

The latest BoltApp.apk download location can be found at boltapp/version.json.

First use enjarify to translate Dalvik to Java bytecode. The BoltApp-enjarify.jar is the output.

# not windows
./enjarify/enjarify.sh -o BoltApp-enjarify.jar BoltApp.apk

# windows ?
./enjarify/enjarify.bat -o BoltApp-enjarify.jar BoltApp.apk

After that decompile BoltApp-enjarify.jar with procyon. The decompiled code will be in BoltApp-decompiled.

java -jar ./procyon-decompiler-0.6-prerelease.jar -jar BoltApp-enjarify.jar -o BoltApp-decompiled

Code

  • Most of the code is obfuscated, it is harder to read because most names (class, function, variable names) are shortened.
  • The application starts from com/wahoofitness/bolt/BApplication.java.
  • Class names are stored as private static final String with a value like with "BApplication, can be used to identify an obfuscated class name.

Links

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment