Fix Something on HyperOS 3 (#1380)

* fix: CorePatch on Android 16

* fix: DisableMrm on newer versions

Author: nakixii

library/hook/src/main/java/com/sevtinge/hyperceiler/hook/module/app/SystemFramework/Pad/SystemFrameworkB.java

@@ -24,7 +24,7 @@
 import com.sevtinge.hyperceiler.hook.module.base.BaseModule;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.AllowManageAllNotifications;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.AutoEffectSwitchForSystem;
-import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisableLowApiCheckForU;
+import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisableLowApiCheckForB;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisableMiuiWatermark;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisablePersistent;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisableThermal;
@@ -46,7 +46,7 @@ public void handleLoadPackage() {
         initHook(BypassSignCheckForT.INSTANCE, mPrefsMap.getBoolean("system_framework_core_patch_auth_creak") || mPrefsMap.getBoolean("system_framework_core_patch_disable_integrity"));
         initHook(new BypassIsolationViolation(), mPrefsMap.getBoolean("system_framework_core_patch_bypass_isolation_violation"));
         initHook(new AllowUpdateSystemApp(), mPrefsMap.getBoolean("system_framework_core_patch_allow_update_system_app"));
-        initHook(new DisableLowApiCheckForU(), mPrefsMap.getBoolean("system_framework_disable_low_api_check"));
+        initHook(new DisableLowApiCheckForB(), mPrefsMap.getBoolean("system_framework_disable_low_api_check"));
         initHook(new DisablePersistent(), mPrefsMap.getBoolean("system_framework_disable_persistent"));
 
         // 显示

library/hook/src/main/java/com/sevtinge/hyperceiler/hook/module/app/SystemFramework/Phone/SystemFrameworkB.java

@@ -24,7 +24,7 @@
 import com.sevtinge.hyperceiler.hook.module.base.BaseModule;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.AllowManageAllNotifications;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.AutoEffectSwitchForSystem;
-import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisableLowApiCheckForU;
+import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisableLowApiCheckForB;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisableMiuiWatermark;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisablePersistent;
 import com.sevtinge.hyperceiler.hook.module.hook.systemframework.DisableThermal;
@@ -45,7 +45,7 @@ public void handleLoadPackage() {
         initHook(BypassSignCheckForT.INSTANCE, mPrefsMap.getBoolean("system_framework_core_patch_auth_creak") || mPrefsMap.getBoolean("system_framework_core_patch_disable_integrity"));
         initHook(new BypassIsolationViolation(), mPrefsMap.getBoolean("system_framework_core_patch_bypass_isolation_violation"));
         initHook(new AllowUpdateSystemApp(), mPrefsMap.getBoolean("system_framework_core_patch_allow_update_system_app"));
-        initHook(new DisableLowApiCheckForU(), mPrefsMap.getBoolean("system_framework_disable_low_api_check"));
+        initHook(new DisableLowApiCheckForB(), mPrefsMap.getBoolean("system_framework_disable_low_api_check"));
         initHook(new DisablePersistent(), mPrefsMap.getBoolean("system_framework_disable_persistent"));
 
         // 显示

library/hook/src/main/java/com/sevtinge/hyperceiler/hook/module/hook/systemframework/DisableLowApiCheckForB.java

@@ -0,0 +1,37 @@
+/*
+  * This file is part of HyperCeiler.
+
+  * HyperCeiler is free software: you can redistribute it and/or modify
+  * it under the terms of the GNU Affero General Public License as
+  * published by the Free Software Foundation, either version 3 of the
+  * License.
+
+  * This program is distributed in the hope that it will be useful,
+  * but WITHOUT ANY WARRANTY; without even the implied warranty of
+  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  * GNU Affero General Public License for more details.
+
+  * You should have received a copy of the GNU Affero General Public License
+  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+  * Copyright (C) 2023-2025 HyperCeiler Contributions
+*/
+package com.sevtinge.hyperceiler.hook.module.hook.systemframework;
+
+import com.sevtinge.hyperceiler.hook.module.base.BaseHook;
+
+import de.robv.android.xposed.XposedHelpers;
+
+public class DisableLowApiCheckForB extends BaseHook {
+    @Override
+    public void init() throws NoSuchMethodException {
+        findAndHookMethod("com.android.server.pm.InstallPackageHelper", "preparePackage", "com.android.server.pm.InstallRequest", new MethodHook(){
+            @Override
+            protected void before(MethodHookParam param) throws Throwable {
+                Object mInstallArgs = XposedHelpers.getObjectField(param.args[0], "mInstallArgs");
+                if (mInstallArgs == null) return;
+                XposedHelpers.setIntField(mInstallArgs, "mInstallFlags", XposedHelpers.getIntField(mInstallArgs, "mInstallFlags") | 0x01000000);
+            }
+        });
+    }
+}

library/hook/src/main/java/com/sevtinge/hyperceiler/hook/module/hook/systemframework/DisablePersistent.java

@@ -46,7 +46,8 @@ protected void after(MethodHookParam param) throws Throwable {
             logE(TAG, lpparam.packageName, "Not found class: " + packageName);
         }
 
-        findAndHookMethod("com.android.server.pm.InstallPackageHelper", "preparePackageLI", "com.android.server.pm.InstallRequest", new MethodHook() {
+        findAndHookMethod("com.android.server.pm.InstallPackageHelper", isMoreAndroidVersion(36) ?
+            "preparePackage" : "preparePackageLI", "com.android.server.pm.InstallRequest", new MethodHook() {
             @Override
             protected void before(MethodHookParam param) throws Throwable {
                 isInstall = true;

library/hook/src/main/java/com/sevtinge/hyperceiler/hook/module/hook/trustservice/DisableMrm.java

@@ -1,29 +1,40 @@
 /*
-  * This file is part of HyperCeiler.
+ * This file is part of HyperCeiler.
 
-  * HyperCeiler is free software: you can redistribute it and/or modify
-  * it under the terms of the GNU Affero General Public License as
-  * published by the Free Software Foundation, either version 3 of the
-  * License.
+ * HyperCeiler is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License.
 
-  * This program is distributed in the hope that it will be useful,
-  * but WITHOUT ANY WARRANTY; without even the implied warranty of
-  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-  * GNU Affero General Public License for more details.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
 
-  * You should have received a copy of the GNU Affero General Public License
-  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 
-  * Copyright (C) 2023-2025 HyperCeiler Contributions
-*/
+ * Copyright (C) 2023-2025 HyperCeiler Contributions
+ */
 package com.sevtinge.hyperceiler.hook.module.hook.trustservice;
 
 import com.sevtinge.hyperceiler.hook.module.base.BaseHook;
+import com.sevtinge.hyperceiler.hook.module.base.dexkit.DexKit;
+
+import org.luckypray.dexkit.query.FindMethod;
+import org.luckypray.dexkit.query.matchers.MethodMatcher;
+
+import java.lang.reflect.Method;
 
 public class DisableMrm extends BaseHook {
     @Override
-    public void init() throws NoSuchMethodException {
-        findAndHookMethod("com.xiaomi.trustservice.remoteservice.eventhandle.statusEventHandle", "initIMrmService" ,new MethodHook(){
+    public void init() {
+        Method method1 = DexKit.findMember("Method1", bridge -> bridge.findMethod(FindMethod.create()
+            .matcher(MethodMatcher.create()
+                .usingStrings("MiTrustService/statusEventHandle", "try init mrmd Service")
+                .returnType(boolean.class)
+            )).singleOrNull());
+        if (method1 != null) hookMethod(method1, new MethodHook() {
             @Override
             protected void before(MethodHookParam param) throws Throwable {
                 param.setResult(false);