此教程只支持1.0.13以下通用，最新版没找到网络获取密码的入口
话不多说，开始我们的教程，小板凳坐好，葵花妈妈课堂开课啦！
注意：是WiFi钥匙，不是WiFi万能钥匙哟，教程不通用！
第一步、去除签名验证
用MT加强版去除签名验证，或者用NP管理器去签名验证！
第二步、去除广告
此教程有人分享了无数次，wifi钥匙用的是穿山甲广告，用普通的方法就能去除广告了！
MT管理器用Dex++全选，然后用方法名分别搜索：com.bytedance.pangle.Zeus.hasinit
com.bytedance.sdk.openadsdk.TTAdConfig.getSdkInfo
com.bytedance.sdk.openadsdk.TTAdConfig.getAppId
最后赋值为0（也就是添加const/4 v0, 0x0）
第三步、添加获取的Wifi密码显示
Dex++全选，搜索
类名“com.lantern.core.r0.p”
如图，一般只有一个结果。
然后搜索Wifi钥匙的密码获取入口，也就是搜
.method public static a(Landroid/content/Context;Lcom/lantern/core/model/WkAccessPoint;Ljava/lang/String;)Landroid/net/wifi/WifiConfiguration;
如上图所示在下面添加invoke-static {p0, p2}, Lcom/lantern/core/r0/p;->hookpass(Landroid/content/Context;Ljava/lang/String;)V
调用新加的密码获取弹窗代码
然后，如下图所示；在代码的最后添加弹窗代码
.method public static hookpass(Landroid/content/Context;Ljava/lang/String;)V
.registers 11
.annotation system Ldalvik/annotation/Signature;
value = {
"(",
"Landroid/content/Context;",
"Ljava/lang/String;",
")V"
}
.end annotation
move-object v0, p0
move-object v1, p1
goto :goto_1
:goto_0
return-void
:goto_1
move-object v4, v1
invoke-virtual {v4}, Ljava/lang/String;->isEmpty()Z
move-result v4
if-nez v4, :cond_0
sget-object v4, Lcom/lantern/launcher/ui/MainActivity;->pass:Ljava/lang/String;
move-object v5, v1
if-ne v4, v5, :cond_1
:cond_0
move-object v4, v0
const-string v5, "当前WiFi已连接过，不显示网络密码！"
const/4 v6, 0x1
invoke-static {v4, v5, v6}, Landroid/widget/Toast;->makeText(Landroid/content/Context;Ljava/lang/CharSequence;I)Landroid/widget/Toast;
move-result-object v4
invoke-virtual {v4}, Landroid/widget/Toast;->show()V
goto :goto_0
:cond_1
move-object v4, v0
new-instance v5, Ljava/lang/StringBuffer;
move-object v8, v5
move-object v5, v8
move-object v6, v8
invoke-direct {v6}, Ljava/lang/StringBuffer;-><init>()V
new-instance v6, Ljava/lang/StringBuffer;
move-object v8, v6
move-object v6, v8
move-object v7, v8
invoke-direct {v7}, Ljava/lang/StringBuffer;-><init>()V
const-string v7, "摸鱼已获取到网络密码:"
invoke-virtual {v6, v7}, Ljava/lang/StringBuffer;->append(Ljava/lang/String;)Ljava/lang/StringBuffer;
move-result-object v6
move-object v7, v1
invoke-virtual {v6, v7}, Ljava/lang/StringBuffer;->append(Ljava/lang/String;)Ljava/lang/StringBuffer;
move-result-object v6
invoke-virtual {v6}, Ljava/lang/StringBuffer;->toString()Ljava/lang/String;
move-result-object v6
invoke-virtual {v5, v6}, Ljava/lang/StringBuffer;->append(Ljava/lang/String;)Ljava/lang/StringBuffer;
move-result-object v5
const-string v6, "\n并复制到系统粘贴板!"
invoke-virtual {v5, v6}, Ljava/lang/StringBuffer;->append(Ljava/lang/String;)Ljava/lang/StringBuffer;
move-result-object v5
invoke-virtual {v5}, Ljava/lang/StringBuffer;->toString()Ljava/lang/String;
move-result-object v5
const/4 v6, 0x1
invoke-static {v4, v5, v6}, Landroid/widget/Toast;->makeText(Landroid/content/Context;Ljava/lang/CharSequence;I)Landroid/widget/Toast;
move-result-object v4
invoke-virtual {v4}, Landroid/widget/Toast;->show()V
move-object v4, v0
const-string v5, "clipboard"
invoke-virtual {v4, v5}, Landroid/content/Context;->getSystemService(Ljava/lang/String;)Ljava/lang/Object;
move-result-object v4
check-cast v4, Landroid/content/ClipboardManager;
const-string v5, "Label"
move-object v6, v1
invoke-static {v5, v6}, Landroid/content/ClipData;->newPlainText(Ljava/lang/CharSequence;Ljava/lang/CharSequence;)Landroid/content/ClipData;
move-result-object v5
invoke-virtual {v4, v5}, Landroid/content/ClipboardManager;->setPrimaryClip(Landroid/content/ClipData;)V
goto :goto_0
.end method
第四步、去除服务器验证（修复闪退）
这步如果不进行，也就会在获取密码时软件闪退。
Dex++搜索类名“com.lantern.launcher.ui.MainActivity”，然后如图点击第一个类
然后添加注释代码“# static fields
.field public static pass:Ljava/lang/String;”如图所示，直接在代码的开头添加
最后保存修改，软件也就改好了！
关于布局修改我比较熟悉，暂时不教给新手了，新手想改布局的，就用“开发助手”抓取吧，用多了就会的！
包含最新版Wifi钥匙去广告版无密码显示，新版找不到获取密码的入口，也就添加不了！1.0.13我修改了大量布局，去除了大量广告，并保留了部分广告！（应该是故意不小心的）
显密的原创代码不是我，我只是发布教程！以上内容都只供新手学习参考！
软件的成品在广场的帖子里，需要付费10币，来用币砸死我吧！
