Probe the original apk for the AppComponentFactory it declares

[JingMatrix]

The check for a declared AppComponentFactory ran against the outer apk's class loader. Unless the patch injected the dex, that apk holds only the metaloader stub, so the class was never found and every app declaring a factory silently lost it -- the framework fell back to the default one. Probe the extracted original apk through a throwaway loader instead. loadClass resolves without running the static initializer, so a factory whose <clinit> is an anti-tamper gate still waits for realizeLoadedApk. A packed app that names a factory it does not ship is still dropped.