This guide is based on this guide by Danila Romanov
Decompiling framework.jar
framework.jarInstall JADX
Get a copy of
/system/framework/framework.jarfrom the target deviceUnzip the jar file
Run the JADX CLI on
classes.dex, or open the file in the JADX GUINavigate to
android/content/pm/IPackageManager.javaFind the value of
TRANSACTION_setSystemAppInstallStateIt should look something like this:
static final int TRANSACTION_setSystemAppInstallState = 136;Here the value is
136
Removing the app
Run the ADB command:
adb shell service call package <value> s16 <package> i32 0 i32 0
You should get the result:
Parcel(00000000 00000001 '........')
highghlow