MBCPApp Patcher for MB Bank

Lightweight "open source" tool for patching MB Bank Flutter (Android) app for rooted user, mostly written in Bash, made possible by Cuynu (as a loser) with love <3

• Licensed as MIT License : View license.

Introduction

• MBCP (MBBank CorePatch) are closed source before, and many people don't like it cuz worry about security & privacy issues.
• In order to support community and make MBCP open source, We spend days to rewritten whole MBCPApp patches in Bash and open it so you can patch it yourself on (Bare metal, not WSL) Linux environment (where we used to patch MBCP)

Patches list :

📦 MB Bank : com.mbmobile

⚙️ Patch	📜 Description	🏦 Suggested version
Autopatch strings	Modify the strings in-app within libapp.so, and also fixes some translation typo in-app.	v6.4.0 ~ v6.4.54
Change app logo	Change the app logo with set of icons.	v6.4.0 ~ v6.4.54
Force portrait screen	Force the screen always portrait on app, espcially when launching.	v6.4.0 ~ v6.4.54
Remove invoke to mbshield	Make app don't invoke to mbshield when opening (MainActivity) and (MBBHomeWidgetQR) only	v6.4.22 ~ v6.4.54
Remove bulit-in fonts	Remove app font and force to use device font for most app components.	v6.4.0 ~ v6.4.54
Modify app theme	Modify the app theme in app from original one to others. Currently have MBClassic and SemiPriority.	v6.4.30 ~ v6.4.54
Remove garbage permission and activities	Removes tracking permission & activities from app.	v6.4.0 ~ v6.4.54
Remove eMBee	Removes eMBee options in app, alongside with Customer support.	v6.4.0 ~ v6.4.54
Revert old eMBee logo	Revert old eMBee logo, specially on product consultation options.	v6.4.53 ~ v6.4.54
Remove animated QR background	Remove the animated QR background on bottom navigation bar and replace with white background.	v6.4.40 ~ v6.4.54
Remove banner & MiniApp	Removes the banner and MiniApp on homeLanding page when logged in.	v6.4.0 ~ v6.4.54
Bypass accessibility & malicious apps check	Remove the restriction of using the app when an app using accessibility service or "malicious apps" like (HideMyAppList) installed.	v6.4.25 ~ v6.4.54
Hide VTAP root detection activity & dialog	Hide the old root detection screen and dialog showing "Device is rooted".	v6.4.0 ~ v6.4.54
Remove new root detection	Remove the new Zimperium (ZDefend) root detection from app.	v6.4.15 ~ v6.4.54
Add modified resources	Adds the specific strings for MBCP on eKYC phase, and modify the DigiBank logo.	v6.4.0 ~ v6.4.54
Fix DF16211 eKYC error	Fixes error while authenticating face with eKYC on some devices.	v6.4.40 ~ v6.4.54
Bypass signature check	Not implemented	v6.4.0 ~ v6.4.21
Bypass 1200 error	Workaround for 1200 error that happening on original MB app with specific version, now discontinued.	v6.4.45

Requirements

• Actual Linux environment (not on virtualized environment like WSL) and any compatible distro (Arch Linux based recommended)
• Little knowledge about bash commands
• git installed
• java or jdk-openjdk installed

Usage

• Go to home directory, then clone repository first

cd ~
git clone https://gitlab.com/cuynu/mbbpatch.git
cd ~/mbbpatch/MBCPApp

• Since MB Bank are now using split APK (*.apks) since v5.3 (135) so you have to convert it to regular APK first

• Grab MB Bank apks from eMBee APKs and copy it to ~/mbbpatch/MBCPApp/mbapk

• Run bash mbcpapp.sh script

cd ~/mbbpatch/MBCPApp
./mbcpapp.sh

• Download necessary tools first with Download tools function (otherwise other function with unlikely to work!)
• Convert apks to apk first using Convert apks to apk function
• Unpack apk with Unpack apk function
• Check if MBShield present on unpacked APK with Check MBShield function (if MBShield present then you have to extract assets from Android device with Extract assets [ROOT])
• After extracted assets (if MBShield present), use Patch App function and select the patches you want to apply to unpacked app
• When done, use Repack APK function to recompile apk (You must have Android device connected with debugging mode enabled!)
• Output will be MBCP_Flutter.zip on ~/mbbpatch/MBCPApp/mbcpapp_apk/ and mbsig.apk will be copied to Android internal storage
• Use MT Manager, put all files inside MBCP_Flutter.zip to mbsig.apk and untick AUTO SIGN
• Install it to your device (requires MBCP Helper / CorePatch ) due to unsigned APK
• Profit :)

TODO

• bypass EKYC3002-MS6998 error on some specific device with custom ROMs
• fully implement Bypass signature check function

External projects

MBCPApp Patcher project won't be possible without those external projects !!

• apktool
• APKEditor
• MT Manager to handle APK signature scheme v2/v3