The app launched.

She unzipped the JAR. Inside: 47 .class files, some with package names like com.sun.net.ssl.internal.www.protocol.https.Handler —classes that didn’t exist on modern Android.

Using a bytecode editor, she replaced each sun.* reference with a shim—a proxy class she wrote on the fly that delegated to Android’s java.security APIs. It was ugly. It was fragile. But it was possible .

She tapped the payment button.