Pin — Apk Time Graveyard

So the real validation is in native code ( libgraveyard.so ). Extract lib/armeabi-v7a/libgraveyard.so from the APK.

Thus the for a live instance depends on the server time when the APK was run. apk time graveyard pin

private boolean checkPin(String pin) { if (pin.length() != 6) return false; int sum = 0; for (char c : pin.toCharArray()) sum += (c - '0'); if (sum != 24) return false; int timeInt = Integer.parseInt(new SimpleDateFormat("HHmm", Locale.US).format(new Date())); return verifyPin(pin, timeInt); } So the real validation is in native code ( libgraveyard