codinggay / blackdex Goto Github PK

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.

License: Apache License 2.0

Java 14.28% Makefile 0.01% C++ 44.75% C 37.36% Kotlin 1.02% AIDL 0.71% CMake 1.45% Shell 0.18% Objective-C++ 0.04% HTML 0.08% CSS 0.03% Assembly 0.09%

shell dump dumpdex android blackbox blackdex unpack unpacker android-unpack unpacking

blackdex's Introduction

BlackDex

English Version

BlackDex是一个运行在Android手机上的脱壳工具，支持5.0～12，无需依赖任何环境任何手机都可以使用，包括模拟器。只需几秒，即可对已安装包括未安装的APK进行脱壳。

运行原理

博客地址

项目声明

本项目并不针对任何加固，在遇到检测环境等均不处理，仅供安全领域分析用途。项目免费开源仅供学习用途、请勿用于非法用途。否则后果自负！

Black系列交流群：390562046（QQ）

编译说明

运行前请请Make Project一次

脱壳说明

本项目针对一（落地加载）、二（内存加载）、三（指令抽取）代壳，摆脱对以往脱壳环境的困扰，几乎支持5.0以上的任何系统。并且拥有快速、方便、成功率高 的优点。一般只需要几秒钟即可完成对已安装包括未安装应用脱壳。未安装应用脱壳时间主要花费在复制文件IO消耗上，由应用大小决定速度。已安装应用一般在数秒内即可完成脱壳。

脱壳文件说明

hook_xxxx.dex hook系统api脱壳的dex，深度脱壳不修复
cookie_xxxx.dex 利用dexFile cookie脱壳的dex，深度脱壳时会修复此dex

脱壳原理

通过DexFile cookie进行脱壳，理论兼容art开始的所有版本。可能少数因设备而异，绝大部分是支持的。资源有限无法大量测试，遇到问题请提issues.

深度脱壳

深度脱壳模式下会自主修复被抽取的方法指令，将指向其他内存块的指令回填至DEX内，解决nop问题，但是不会确保一定会有用，例如：指令需要主动调用才解密等则无法回填或者说是无效回填。深度脱壳并不包含任何解密、主动调用等操作。本功能仍然在测试阶段，可能会出现以下情况，请悉知，愿世上再无nop。

脱壳时间会大幅度上升，预计几分钟都十几分钟不等
脱壳期间有可能会出现应用闪退（遇到反检测等）
会增加脱壳失败几率
不一定能够100%还原

部分抽取壳脱壳前后对比

环境要求

一台普通手机
~~Xposed~~
~~Frida~~
~~Magisk~~
~~Root~~
~~定制系统~~

架构特别说明

本项目区分32位与64位，目前是2个不同的app，如在Demo已安装列表内无法找到需要开启的app说明不支持，请使用另一个版本。

BlackDex下载：https://github.com/CodingGay/BlackDex/releases

演示

感谢

License

Copyright 2021 Milk

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

blackdex's People

Contributors

Stargazers

Watchers

Forkers

crackercat nnjun tigericon 404nofoundx apsonli tokyonth wukaicheng xzhhbx zrz-2020 topkill idone bzvs1992 guapier praiseqin loulei bindian9710 netstu wangzh7678 forkproj githubxiaowangzi durianlian monarchsolutions omgkaka kingking888 friendan yyoop woozoo86 quincyc379 keyman9848 xiejiangchu lishangwl light-sec chago deathmemory vfishv sudami markyoungs angrykobe tinymagicka mjqaljqn zhuhuibeishadiao softtanck luyu344 liangrk edwardchoijc kaka77 2y2s1mple liufuqin0922 yuexia-martin loy2000 ele7enxxh superdan301246 zhangshu345 arryboom lovely3x mrdoulestar baipengyan sesyi lyong2022 tzf-omkey jimmyjones97 securitycomplicance lzwshi garfield-chen bunnyblueair xsjames jhanay slice1129 bigshark1977 307677814 northstar1226 kernelbk eenie lgdhuanghe sheandhee yunmi323 cyal1 l7518597 zwq194 uglyghost07 shaolongfei xunmengqishi amnesiay frank13810055034 shigophilo stickycookie cwjalsy supr3me zdelta sulab999 mr-lidajun liweiqiangandroid shuixi2013 751811164 igit-cn uzcool sanyahot dorry2015 codecat007 wwon1oung

blackdex's Issues

你还真是个牛逼人物, 支持

在此写下你的问题
罗盒那玩意, 全都是开源项目的思路和代码, 还好意思搞专利打压别人开源学习, 可耻

老哥，blackbox还有机会拜读吗？

在此写下你的问题

don't know what's the problem

Jiagu 360 is unsupported

Description error
Unpack fail

Reproduce
Steps to reproduce the behavior:

Open BlackDex 32
Choose an app to dump

Device Information
-Equipment: Memu emulator
-Android version: 7.1.1

Run log
top.niunaijun.blackdexa32_logcat.txt

other instructions
APK can be downloaded here https://drive.google.com/file/d/1YJ5fXiSdA8wg20s-Y54bWUuq7myD9Rp9/view

DROID UNIT 1

描述错误
简要说明遇到了什么问题

重现
重现该行为的步骤:
1.xxx
2.xxx

设备信息

设备: [小米10]
Android版本: [10]

运行日志
请提供运行时所有Logcat日志以便我们排查问题，如果您不是开发者请重现问题之后，提供手机存储：/Download/top.niunaijun.blackdex32(64)_logcat.txt 文件的内容，此内容重启应用将重置，请勿重启应用后才发送。

其他说明
Read Me

大佬加油，快更新，支持！

在此写下你的问题

华为mate30无法脱壳

描述错误
简要说明遇到了什么问题

重现
重现该行为的步骤:
1.xxx
2.xxx

设备信息

设备: 华为mate30
Android版本: [10]

运行日志
报：找不到libvm.so
其他说明

Can only dump stub dex

Description error
APK is protected by aegis protection, BlackDex can only dump stub dex. I have tried dump with hook enabled
Can you support it?

Reproduce
Steps to reproduce the behavior:

Install the APK
Dump using Blackdex

Device Information
-Equipment: [Google Pixel]
-Android version: [11]

Run log
top.niunaijun.blackdexa32_logcat.txt

APK
https://drive.google.com/file/d/1epSv8c7QlMj26Z8LfYKwqZ3p3XUOvEI-/view

掌上穿越火线app脱壳失败

在此写下你的问题

没有一次成功过

描述错误
简要说明遇到了什么问题

重现
重现该行为的步骤:
1.xxx
2.xxx

设备信息

设备: [华为mate30]
Android版本: [10]

其他说明

樊登读书会不能成功脱壳

下载链接：https://gyxz2.243ty.com/io.dushu.fandengreader.apk

描述错误
樊登读书会是爱加密加固的

设备信息

设备: 一加7Pro
Android版本: 11

其他说明

bug

描述错误
在3.1版本中脱爱加密的壳，开启hook脱不成功，不开会得到nop

设备信息

设备: [小米10]
Android版本: [10]

其他说明

每日优先闪退

apk下载地址 https://www.wandoujia.com/apps/6615707
打开直接闪退，看了应该是梆梆地壳

报错日志如下:

2021-08-11 11:03:01.837 7875-7875/? A/libc: Fatal signal 11 (SIGSEGV), code 1, fault addr 0x782 in tid 7875 (.blackdexa32:p0), pid 7875 (.blackdexa32:p0)
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG: *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG: Build fingerprint: 'Meizu/meizu_M1852_CN/M1852:8.1.0/OPM1.171019.026/1540458566:user/release-keys'
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG: Revision: '0'
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG: ABI: 'arm'
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG: pid: 7875, tid: 7875, name: .blackdexa32:p0  >>> top.niunaijun.blackdexa32:p0 <<<
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG: signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x782
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG: Cause: null pointer dereference
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG:     r0 00000000  r1 e82e821b  r2 b6a29797  r3 00000783
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG:     r4 ffdbfbf4  r5 c7fe62a0  r6 00003521  r7 c7fe62a0
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG:     r8 b6a29797  r9 00000783  sl 000000ae  fp 00000000
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG:     ip e856ad44  sp 00000000  lr 00000000  pc 00000782  cpsr 600d0030
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG: backtrace:
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG:     #00 pc 00000782  <unknown>
2021-08-11 11:03:01.888 7905-7905/? A/DEBUG:     #01 pc 00000000  <unknown>
2021-08-11 11:03:02.310 978-978/? E//system/bin/tombstoned: Tombstone written to: /data/tombstones/tombstone_07

360加固脱不掉，闪退

在此写下你的问题

爱加密的脱不掉

爱加密的app都脱不掉

有些app安装后没有出现在脱壳列表内，是为什么

描述错误
安装blackdex后，进入脱壳列表没有看到安装的应用程序，只有少数的app出现在列表捏

重现
重现该行为的步骤:
1.xxx
2.xxx

设备信息

设备: pixel3
Android版本: [10]

其他说明

when the man tried to shelling an app,there is an error alert.

描述错误
简要说明遇到了什么问题
准备将闽政通App脱壳时，发现不允许。所有的错误都是通用错误，不知道具体原因，是因为加密措施吗？

重现
重现该行为的步骤:
1.通过blackdex32打开闽政通app
2.软件配置，深度脱壳。

设备信息

设备: [华为nova8]
Android版本: [10]，实际是鸿蒙2.0 但是向下兼容所以说是andriod10也对。

其他说明

Not getting full Dex

Description error
Dumping is success but Not getting full Dex means only getting that packed dex and the packer is 腾讯御安全 (Tencent Royal Security). Kindly please help or fix this issue

Device Information
-Equipment: [Honor 7a]
-Android version: [8]

有些应用不显示是什么原因

在此写下你的问题
**联通，**移动什么的全都不显示

空港商城脱壳的时候程序闪退

下载地址：https://jiuapp.gzlex.com/pages/download?appkey=sSzmbzBAfj6DNSEp
描述错误
空港商城脱壳的时候程序闪退

设备信息

设备: 一加7Pro
Android版本: 11

运行日志
top.niunaijun.blackdexa32_logcat.txt

脱壳失败，未知错误

not found dex file

描述错误
提示 not found dex file

重现
重现该行为的步骤:
1.单击任意应用

设备信息

设备: [华硕 zc550kl]
Android版本: [5.0.2]

运行日志
--------- beginning of main
W/System.err(14889): java.io.FileNotFoundException: mario-sdk-plugin.apk
W/System.err(14889): at android.content.res.AssetManager.openAsset(Native Method)
W/System.err(14889): at android.content.res.AssetManager.open(AssetManager.java:322)
W/System.err(14889): at android.content.res.AssetManager.open(AssetManager.java:296)
W/System.err(14889): at android.app.ActivityThread.isWdjApplication(ActivityThread.java:5177)
W/System.err(14889): at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4382)
W/System.err(14889): at android.app.ActivityThread.access$1500(ActivityThread.java:151)
W/System.err(14889): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1346)
W/System.err(14889): at android.os.Handler.dispatchMessage(Handler.java:102)
W/System.err(14889): at android.os.Looper.loop(Looper.java:135)
W/System.err(14889): at android.app.ActivityThread.main(ActivityThread.java:5291)
W/System.err(14889): at java.lang.reflect.Method.invoke(Native Method)
W/System.err(14889): at java.lang.reflect.Method.invoke(Method.java:372)
W/System.err(14889): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:899)
W/System.err(14889): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:694)
--------- beginning of system
I/ActivityThread(14889): wandoujia app ? false
I/art (14889): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (14889): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
V/Monotype(14889): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(14889): Typeface getFontPathFlipFont - systemFont = default#default
W/System.err(14914): java.io.FileNotFoundException: mario-sdk-plugin.apk
W/System.err(14914): at android.content.res.AssetManager.openAsset(Native Method)
W/System.err(14914): at android.content.res.AssetManager.open(AssetManager.java:322)
W/System.err(14914): at android.content.res.AssetManager.open(AssetManager.java:296)
W/System.err(14914): at android.app.ActivityThread.isWdjApplication(ActivityThread.java:5177)
W/System.err(14914): at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4382)
W/System.err(14914): at android.app.ActivityThread.access$1500(ActivityThread.java:151)
W/System.err(14914): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1346)
W/System.err(14914): at android.os.Handler.dispatchMessage(Handler.java:102)
W/System.err(14914): at android.os.Looper.loop(Looper.java:135)
W/System.err(14914): at android.app.ActivityThread.main(ActivityThread.java:5291)
W/System.err(14914): at java.lang.reflect.Method.invoke(Native Method)
W/System.err(14914): at java.lang.reflect.Method.invoke(Method.java:372)
W/System.err(14914): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:899)
W/System.err(14914): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:694)
I/ActivityThread(14914): wandoujia app ? false
I/art (14914): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (14914): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (14914): Background sticky concurrent mark sweep GC freed 1820(96KB) AllocSpace objects, 0(0B) LOS objects, 0% free, 1321KB/1321KB, paused 7.221ms total 34.584ms
V/Monotype(14914): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(14914): Typeface getFontPathFlipFont - systemFont = default#default
I/DaemonService(14914): DaemonInnerService -> onCreate
I/DaemonService(14914): DaemonInnerService -> onStartCommand
I/DaemonService(14914): DaemonInnerService -> onDestroy
W/art (14889): Before Android 4.1, method android.graphics.PorterDuffColorFilter androidx.vectordrawable.graphics.drawable.VectorDrawableCompat.updateTintFilter(android.graphics.PorterDuffColorFilter, android.content.res.ColorStateList, android.graphics.PorterDuff$Mode) would have incorrectly overridden the package-private method in android.graphics.drawable.Drawable
V/Monotype(14889): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(14889): Typeface getFontPathFlipFont - systemFont = default#default
V/Monotype(14889): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(14889): Typeface getFontPathFlipFont - systemFont = default#default
I/art (14889): Background partial concurrent mark sweep GC freed 5576(284KB) AllocSpace objects, 2(52KB) LOS objects, 40% free, 2MB/3MB, paused 5.478ms total 34.530ms
I/MobclickAgent(14889): module init:azio
I/art (14889): Background sticky concurrent mark sweep GC freed 6513(630KB) AllocSpace objects, 10(160KB) LOS objects, 12% free, 3MB/3MB, paused 5.538ms total 65.733ms
E/PhoneWindow(14889): generateLayout features 1 = 8259/2= 8259/ layoutResource =17367253
D/OpenGLRenderer(14889): Render dirty regions requested: true
I/Adreno-EGL(14889): <qeglDrvAPI_eglInitialize:379>: EGL 1.4 QUALCOMM build: AU_LINUX_ANDROID_LA.BR.1.1.3_RB1.05.00.02.032.013_msm8916_64_refs/tags/AU_LINUX_ANDROID_LA.BR.1.1.3_RB1.05.00.02.032.013__release_AU ()
I/Adreno-EGL(14889): OpenGL ES Shader Compiler Version: E031.25.03.02
I/Adreno-EGL(14889): Build Date: 05/21/15 Thu
I/Adreno-EGL(14889): Local Branch:
I/Adreno-EGL(14889): Remote Branch: refs/tags/AU_LINUX_ANDROID_LA.BR.1.1.3_RB1.05.00.02.032.013
I/Adreno-EGL(14889): Local Patches: NONE
I/Adreno-EGL(14889): Reconstruct Branch: NOTHING
I/OpenGLRenderer(14889): Initialized EGL, version 1.4
D/OpenGLRenderer(14889): Enabling debug mode 0
W/art (14889): Suspending all threads took: 16.172ms
I/art (14889): Background sticky concurrent mark sweep GC freed 15723(848KB) AllocSpace objects, 8(128KB) LOS objects, 0% free, 7MB/7MB, paused 20.414ms total 49.534ms
E/PhoneWindow(14889): generateLayout features 1 = 1091/2= 1091/ layoutResource =17367254
D/BPackageInstallerService(14914): installPackageAsUser: CreateUserExecutor exec: 0
D/BPackageInstallerService(14914): installPackageAsUser: CreatePackageExecutor exec: 0
D/BPackageInstallerService(14914): installPackageAsUser: CopyExecutor exec: 0
D/Settings(14914): loaded Package: com.androlua.GGAPI
D/BPackageManagerService(14914): onPackageInstalled: com.androlua.GGAPI, userId: 0
D/TestActivity(14914): startActivityLocked : ComponentInfo{com.androlua.GGAPI/com.androlua.Welcome}
D/BProcessManager(14914): init bUid = 10001, bPid = 0
D/BProcessManager(14914): initProcess: com.androlua.GGAPI
W/System.err(14977): java.io.FileNotFoundException: mario-sdk-plugin.apk
W/System.err(14977): at android.content.res.AssetManager.openAsset(Native Method)
W/System.err(14977): at android.content.res.AssetManager.open(AssetManager.java:322)
W/System.err(14977): at android.content.res.AssetManager.open(AssetManager.java:296)
W/System.err(14977): at android.app.ActivityThread.isWdjApplication(ActivityThread.java:5177)
W/System.err(14977): at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4382)
W/System.err(14977): at android.app.ActivityThread.access$1500(ActivityThread.java:151)
W/System.err(14977): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1346)
W/System.err(14977): at android.os.Handler.dispatchMessage(Handler.java:102)
W/System.err(14977): at android.os.Looper.loop(Looper.java:135)
W/System.err(14977): at android.app.ActivityThread.main(ActivityThread.java:5291)
W/System.err(14977): at java.lang.reflect.Method.invoke(Native Method)
W/System.err(14977): at java.lang.reflect.Method.invoke(Method.java:372)
W/System.err(14977): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:899)
W/System.err(14977): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:694)
I/ActivityThread(14977): wandoujia app ? false
I/art (14977): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (14977): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
W/art (14977): Suspending all threads took: 15.526ms
V/Monotype(14977): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(14977): Typeface getFontPathFlipFont - systemFont = default#default
W/ResourcesManager(14977): Asset path '/data/user/0/top.niunaijun.blackdexa32/virtual/cache/junit.jar' does not exist or contains no resources.
W/asset (14977): Asset path /system/framework/org.apache.http.legacy.boot.jar is neither a directory nor file (type=1).
W/ResourcesManager(14977): Asset path '/system/framework/org.apache.http.legacy.boot.jar' does not exist or contains no resources.
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
D/VmCore (14977): VmCore init.
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/ContextImpl(14977): Failed to ensure directory: /Removable/MicroSD/Android/data/top.niunaijun.blackdexa32/cache
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/ContextImpl(14977): Failed to ensure directory: /Removable/MicroSD/Android/data/com.androlua.GGAPI/cache
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/ContextImpl(14977): Failed to ensure directory: /Removable/MicroSD/Android/data/com.androlua.GGAPI/cache
D/VmCore (14977): findClass fail: java/io/UnixFileSystem canonicalize0
D/VmCore (14977): findClass fail: java/io/UnixFileSystem getLastModifiedTime0
D/VmCore (14977): findClass fail: java/io/UnixFileSystem setPermission0
D/VmCore (14977): findClass fail: java/io/UnixFileSystem createFileExclusively0
D/VmCore (14977): findClass fail: java/io/UnixFileSystem list0
D/VmCore (14977): findClass fail: java/io/UnixFileSystem createDirectory0
D/VmCore (14977): findClass fail: java/io/UnixFileSystem setLastModifiedTime0
D/VmCore (14977): findClass fail: java/io/UnixFileSystem setReadOnly0
D/VmCore (14977): findClass fail: java/io/UnixFileSystem getSpace0
D/VmCore (14977): register class：java/lang/VMClassLoader, method：findLoadedClass success!
I/art (14977): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (14977): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (14977): Rejecting re-init on previously-failed class java.lang.Class<s.h.e.l.l.A>
I/art (14977): Rejecting re-init on previously-failed class java.lang.Class<s.h.e.l.l.A>
I/art (14977): Counter: 1
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(14914): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(14914): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(14914): at android.os.Binder.execTransact(Binder.java:446)
I/Process (14914): Sending signal. PID: 14977 SIG: 9
D/BPackageInstallerService(14914): uninstallPackageAsUser: RemoveAppExecutor exec: 0
D/BPackageInstallerService(14914): uninstallPackageAsUser: RemoveUserExecutor exec: 0
D/BPackageManagerService(14914): onPackageUninstalled: com.androlua.GGAPI, userId: 0
E/PhoneWindow(14889): generateLayout features 1 = 8259/2= 8259/ layoutResource =17367253
D/BProcessManager(14914): App Died: com.androlua.GGAPI
I/Process (14914): Sending signal. PID: 14977 SIG: 9
W/System.err(15712): java.io.FileNotFoundException: mario-sdk-plugin.apk
W/System.err(15712): at android.content.res.AssetManager.openAsset(Native Method)
W/System.err(15712): at android.content.res.AssetManager.open(AssetManager.java:322)
W/System.err(15712): at android.content.res.AssetManager.open(AssetManager.java:296)
W/System.err(15712): at android.app.ActivityThread.isWdjApplication(ActivityThread.java:5177)
W/System.err(15712): at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4382)
W/System.err(15712): at android.app.ActivityThread.access$1500(ActivityThread.java:151)
W/System.err(15712): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1346)
W/System.err(15712): at android.os.Handler.dispatchMessage(Handler.java:102)
W/System.err(15712): at android.os.Looper.loop(Looper.java:135)
W/System.err(15712): at android.app.ActivityThread.main(ActivityThread.java:5291)
W/System.err(15712): at java.lang.reflect.Method.invoke(Native Method)
W/System.err(15712): at java.lang.reflect.Method.invoke(Method.java:372)
W/System.err(15712): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:899)
W/System.err(15712): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:694)
I/ActivityThread(15712): wandoujia app ? false
I/art (15712): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (15712): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
W/art (15712): Suspending all threads took: 11.578ms
I/art (15712): Background sticky concurrent mark sweep GC freed 1783(94KB) AllocSpace objects, 0(0B) LOS objects, 0% free, 1242KB/1242KB, paused 13.821ms total 30.848ms
V/Monotype(15712): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(15712): Typeface getFontPathFlipFont - systemFont = default#default
W/System.err(15737): java.io.FileNotFoundException: mario-sdk-plugin.apk
W/System.err(15737): at android.content.res.AssetManager.openAsset(Native Method)
W/System.err(15737): at android.content.res.AssetManager.open(AssetManager.java:322)
I/ActivityThread(15737): wandoujia app ? false
W/System.err(15737): at android.content.res.AssetManager.open(AssetManager.java:296)
W/System.err(15737): at android.app.ActivityThread.isWdjApplication(ActivityThread.java:5177)
W/System.err(15737): at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4382)
W/System.err(15737): at android.app.ActivityThread.access$1500(ActivityThread.java:151)
W/System.err(15737): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1346)
W/System.err(15737): at android.os.Handler.dispatchMessage(Handler.java:102)
W/System.err(15737): at android.os.Looper.loop(Looper.java:135)
W/System.err(15737): at android.app.ActivityThread.main(ActivityThread.java:5291)
W/System.err(15737): at java.lang.reflect.Method.invoke(Native Method)
W/System.err(15737): at java.lang.reflect.Method.invoke(Method.java:372)
W/System.err(15737): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:899)
W/System.err(15737): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:694)
I/art (15737): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (15737): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (15737): Background sticky concurrent mark sweep GC freed 1814(95KB) AllocSpace objects, 0(0B) LOS objects, 0% free, 1322KB/1322KB, paused 7.997ms total 34.932ms
V/Monotype(15737): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(15737): Typeface getFontPathFlipFont - systemFont = default#default
I/DaemonService(15737): DaemonInnerService -> onCreate
I/DaemonService(15737): DaemonInnerService -> onStartCommand
I/DaemonService(15737): DaemonInnerService -> onDestroy
I/art (15712): Background sticky concurrent mark sweep GC freed 6834(593KB) AllocSpace objects, 17(272KB) LOS objects, 10% free, 2MB/2MB, paused 13.314ms total 125.325ms
I/art (15712): Background sticky concurrent mark sweep GC freed 416(34KB) AllocSpace objects, 2(32KB) LOS objects, 3% free, 2MB/2MB, paused 7.079ms total 31.688ms
W/art (15712): Before Android 4.1, method android.graphics.PorterDuffColorFilter androidx.vectordrawable.graphics.drawable.VectorDrawableCompat.updateTintFilter(android.graphics.PorterDuffColorFilter, android.content.res.ColorStateList, android.graphics.PorterDuff$Mode) would have incorrectly overridden the package-private method in android.graphics.drawable.Drawable
I/MobclickAgent(15712): module init:azio
V/Monotype(15712): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(15712): Typeface getFontPathFlipFont - systemFont = default#default
V/Monotype(15712): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(15712): Typeface getFontPathFlipFont - systemFont = default#default
E/PhoneWindow(15712): generateLayout features 1 = 8259/2= 8259/ layoutResource =17367253
D/OpenGLRenderer(15712): Render dirty regions requested: true
I/Adreno-EGL(15712): <qeglDrvAPI_eglInitialize:379>: EGL 1.4 QUALCOMM build: AU_LINUX_ANDROID_LA.BR.1.1.3_RB1.05.00.02.032.013_msm8916_64_refs/tags/AU_LINUX_ANDROID_LA.BR.1.1.3_RB1.05.00.02.032.013__release_AU ()
I/Adreno-EGL(15712): OpenGL ES Shader Compiler Version: E031.25.03.02
I/Adreno-EGL(15712): Build Date: 05/21/15 Thu
I/Adreno-EGL(15712): Local Branch:
I/Adreno-EGL(15712): Remote Branch: refs/tags/AU_LINUX_ANDROID_LA.BR.1.1.3_RB1.05.00.02.032.013
I/Adreno-EGL(15712): Local Patches: NONE
I/Adreno-EGL(15712): Reconstruct Branch: NOTHING
I/OpenGLRenderer(15712): Initialized EGL, version 1.4
D/OpenGLRenderer(15712): Enabling debug mode 0
E/PhoneWindow(15712): generateLayout features 1 = 1091/2= 1091/ layoutResource =17367254
D/BPackageInstallerService(15737): installPackageAsUser: CreateUserExecutor exec: 0
D/BPackageInstallerService(15737): installPackageAsUser: CreatePackageExecutor exec: 0
D/BPackageInstallerService(15737): installPackageAsUser: CopyExecutor exec: 0
D/Settings(15737): loaded Package: com.androlua.GGAPI
D/BPackageManagerService(15737): onPackageInstalled: com.androlua.GGAPI, userId: 0
D/TestActivity(15737): startActivityLocked : ComponentInfo{com.androlua.GGAPI/com.androlua.Welcome}
D/BProcessManager(15737): init bUid = 10002, bPid = 0
D/BProcessManager(15737): initProcess: com.androlua.GGAPI
W/System.err(15852): java.io.FileNotFoundException: mario-sdk-plugin.apk
W/System.err(15852): at android.content.res.AssetManager.openAsset(Native Method)
W/System.err(15852): at android.content.res.AssetManager.open(AssetManager.java:322)
W/System.err(15852): at android.content.res.AssetManager.open(AssetManager.java:296)
I/ActivityThread(15852): wandoujia app ? false
W/System.err(15852): at android.app.ActivityThread.isWdjApplication(ActivityThread.java:5177)
W/System.err(15852): at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4382)
W/System.err(15852): at android.app.ActivityThread.access$1500(ActivityThread.java:151)
W/System.err(15852): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1346)
W/System.err(15852): at android.os.Handler.dispatchMessage(Handler.java:102)
W/System.err(15852): at android.os.Looper.loop(Looper.java:135)
W/System.err(15852): at android.app.ActivityThread.main(ActivityThread.java:5291)
W/System.err(15852): at java.lang.reflect.Method.invoke(Native Method)
W/System.err(15852): at java.lang.reflect.Method.invoke(Method.java:372)
W/System.err(15852): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:899)
W/System.err(15852): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:694)
I/art (15852): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (15852): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
W/art (15852): Suspending all threads took: 5.875ms
V/Monotype(15852): SetAppTypeFace- try to flip, app = top.niunaijun.blackdexa32
V/Monotype(15852): Typeface getFontPathFlipFont - systemFont = default#default
W/ResourcesManager(15852): Asset path '/data/user/0/top.niunaijun.blackdexa32/virtual/cache/junit.jar' does not exist or contains no resources.
W/asset (15852): Asset path /system/framework/org.apache.http.legacy.boot.jar is neither a directory nor file (type=1).
W/ResourcesManager(15852): Asset path '/system/framework/org.apache.http.legacy.boot.jar' does not exist or contains no resources.
D/VmCore (15852): VmCore init.
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/ContextImpl(15852): Failed to ensure directory: /Removable/MicroSD/Android/data/top.niunaijun.blackdexa32/cache
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/ContextImpl(15852): Failed to ensure directory: /Removable/MicroSD/Android/data/com.androlua.GGAPI/cache
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/ContextImpl(15852): Failed to ensure directory: /Removable/MicroSD/Android/data/com.androlua.GGAPI/cache
D/VmCore (15852): findClass fail: java/io/UnixFileSystem canonicalize0
D/VmCore (15852): findClass fail: java/io/UnixFileSystem getLastModifiedTime0
D/VmCore (15852): findClass fail: java/io/UnixFileSystem setPermission0
D/VmCore (15852): findClass fail: java/io/UnixFileSystem createFileExclusively0
D/VmCore (15852): findClass fail: java/io/UnixFileSystem list0
D/VmCore (15852): findClass fail: java/io/UnixFileSystem createDirectory0
D/VmCore (15852): findClass fail: java/io/UnixFileSystem setLastModifiedTime0
D/VmCore (15852): findClass fail: java/io/UnixFileSystem setReadOnly0
D/VmCore (15852): findClass fail: java/io/UnixFileSystem getSpace0
D/VmCore (15852): register class：java/lang/VMClassLoader, method：findLoadedClass success!
I/art (15852): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (15852): Turn off relocation for /system/framework/boot.art system:/system/framework/arm/boot.art cache:/data/dalvik-cache/arm/system@[email protected]
I/art (15852): Rejecting re-init on previously-failed class java.lang.Class<s.h.e.l.l.A>
I/art (15852): Rejecting re-init on previously-failed class java.lang.Class<s.h.e.l.l.A>
I/art (15852): Counter: 1
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
W/System.err(15737): java.lang.NullPointerException: Attempt to get length of null array
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.BStorageManagerService.getVolumeList(BStorageManagerService.java:34)
W/System.err(15737): at top.niunaijun.blackbox.core.system.os.IBStorageManagerService$Stub.onTransact(IBStorageManagerService.java:70)
W/System.err(15737): at android.os.Binder.execTransact(Binder.java:446)
I/Process (15737): Sending signal. PID: 15852 SIG: 9
D/BPackageInstallerService(15737): uninstallPackageAsUser: RemoveAppExecutor exec: 0
D/BPackageInstallerService(15737): uninstallPackageAsUser: RemoveUserExecutor exec: 0
D/BPackageManagerService(15737): onPackageUninstalled: com.androlua.GGAPI, userId: 0
E/PhoneWindow(15712): generateLayout features 1 = 8259/2= 8259/ layoutResource =17367253
D/BProcessManager(15737): App Died: com.androlua.GGAPI
I/Process (15737): Sending signal. PID: 15852 SIG: 9

其他说明
上次你说让我别用虚拟机,这次我找了个真机还是一样报错,不知道是什么原因

开启fixCodeItem后脱壳时出现SIGSEGV [SEGV_ACCERR]

描述错误
将项目内的dumpDex实现移植到root模块下，对某游戏进行注入后脱壳时发现smali全是nop（但是没有其他异常，顺利执行），于是开启了fixCodeItem，但是开启后一脱壳直接就崩了

设备信息

设备: [小米8]
Android版本: [8.1.0]

运行日志
6:08:58.592 10495-10772/? E/CRASH: signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0000007141ff7e80
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: Build type 'Release', Scripting Backend 'il2cpp', CPU 'arm64-v8a'
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: Build fingerprint: 'Xiaomi/dipper/dipper:8.1.0/OPM1.171019.026/V10.0.6.0.OEACNFH:user/release-keys'
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: Revision: '0'
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: pid: 10495, tid: 10772, name: pool-1-thread-1 >>> com.xxx.xxx <<<
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: x0 000000710f7bc208 x1 0000007141ff7e80 x2 0000000000000018 x3 0000000000000030
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: x4 000000711ffc0910 x5 00000071ddc25465 x6 0000000000000005 x7 000000000000fffd
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: x8 000000710f7bc208 x9 000000000026ae64 x10 0000000000000000 x11 0000007141ff7e80
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: x12 0000000000000018 x13 0000000000000018 x14 0000000000000000 x15 0000000000000000
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: x16 00000071412618c0 x17 00000071de6f6b90 x18 0000000012d2bcf8 x19 0000007115717000
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: x20 0000000000000000 x21 0000007115717000 x22 000000711ffc17fc x23 00000071ddc264c8
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: x24 0000000000000010 x25 000000711ffc2588 x26 00000071157170a0 x27 0000000000000004
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: x28 000000711ffc1530 x29 000000711ffc0eb0 x30 00000071411502c0
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: sp 000000711ffc0cb0 pc 00000071de6f6ba8 pstate 0000000020000000
2021-06-17 06:08:58.592 10495-10772/? E/CRASH: backtrace:
2021-06-17 06:08:58.619 10495-10772/? E/CRASH: #00 pc 000000000000068c [vdso] ()
2021-06-17 06:08:58.619 10495-10772/? E/CRASH: #1 pc 0000000000001ba4 /system/lib64/libc.so ()
2021-06-17 06:08:58.619 10495-10772/? E/CRASH: #2 pc 00000000000722bc () 这个就是dumpDex所在的so

其他说明

ida看了一下，崩在了fixCodeItem里最后那个memcpy上，看了下寄存器，应该是崩在了source地址，也就是new_code_item上

__int64 __fastcall fixCodeItem(main *a1, const art_lkchan::DexFile *a2, __int64 a3)
{
　__int64 result; // x0
　__int64 v4; // x1
　const char *v5; // x4
　void *v6; // x1
　const char *v7; // [xsp+40h] [xbp-1C0h]
　_JNIEnv *v8; // [xsp+50h] [xbp-1B0h]
　unsigned int v9; // [xsp+84h] [xbp-17Ch]
　__int64 v10; // [xsp+98h] [xbp-168h]
　size_t v11; // [xsp+B4h] [xbp-14Ch]
　void *v12; // [xsp+B8h] [xbp-148h]
　ArtM *v13; // [xsp+C0h] [xbp-140h]
　__int64 v14; // [xsp+C8h] [xbp-138h]
　const char *v15; // [xsp+D0h] [xbp-130h]
　__int64 v16; // [xsp+D8h] [xbp-128h]
　__int64 v17; // [xsp+F8h] [xbp-108h]
　const unsigned __int8 *v18; // [xsp+100h] [xbp-100h]
　unsigned __int16 *v19; // [xsp+108h] [xbp-F8h]
　unsigned __int64 i; // [xsp+110h] [xbp-F0h]
　const void *v24; // [xsp+140h] [xbp-C0h]
　__int64 v25[2]; // [xsp+160h] [xbp-A0h] BYREF
　char v26[24]; // [xsp+170h] [xbp-90h] BYREF
　char v27[24]; // [xsp+188h] [xbp-78h] BYREF
　char v28[72]; // [xsp+1A0h] [xbp-60h] BYREF
　__int64 v29; // [xsp+1E8h] [xbp-18h]

　v29 = *(_QWORD *)(_ReadStatusReg(ARM64_SYSREG(3, 3, 13, 0, 2)) + 40);
　for ( i = 0LL; ; ++i )
　{
　　result = art_lkchan::DexFile::NumClassDefs(a2);
　　if ( i >= (unsigned int)result )
　　　break;
　　v19 = (unsigned __int16 *)art_lkchan::DexFile::GetClassDef(a2, (unsigned __int16)i);
　　v18 = (const unsigned __int8 *)art_lkchan::DexFile::GetClassData(a2, v19);
　　v17 = art_lkchan::DexFile::GetTypeId(a2, *v19);
　　v10 = art_lkchan::DexFile::GetTypeDescriptor(a2, v17);
　　std::string::basic_string<decltype(nullptr)>(v27, v10);
　　if ( v18 )
　　{
　　　art_lkchan::ClassDataItemIterator::ClassDataItemIterator((art_lkchan::ClassDataItemIterator *)v28, a2, v18);
　　　art_lkchan::ClassDataItemIterator::SkipAllFields((art_lkchan::ClassDataItemIterator *)v28);
　　　while ( (art_lkchan::ClassDataItemIterator::HasNextMethod(v28) & 1) != 0 )
　　　{
　　　　v9 = art_lkchan::ClassDataItemIterator::GetMemberIndex(v28);
　　　　v16 = art_lkchan::DexFile::GetMethodId(a2, v9);
　　　　v15 = (const char *)art_lkchan::DexFile::GetMethodName(a2, v16);
　　　　v25[0] = art_lkchan::DexFile::GetMethodSignature(a2, v16);
　　　　v25[1] = v4;
　　　　art_lkchan::Signature::ToString(v25);
　　　　v8 = (_JNIEnv *)sub_73268(v27);
　　　　v7 = (const char *)sub_73268(v26);
　　　　v14 = main::findMethod(a1, v8, v15, v7, v5);
　　　　if ( v14 )
　　　　{
　　　　　v13 = (ArtM *)ArtM::GetArtMethod(a1, v14);
　　　　　v12 = (void )art_lkchan::ClassDataItemIterator::GetMethodCodeItem(v28);
　　　　　if ( (unsigned int)art_lkchan::ClassDataItemIterator::GetMethodCodeItemOffset(v28) )
　　　　　{
　　　　　　if ( v12 )
　　　　　　{
　　　　　　　v11 = ((__int64 (__fastcall **)(const art_lkchan::DexFile *, void ))((_QWORD *)a2 + 48LL))(a2, v12);
　　　　　　　v24 = (const void *)(a3 + (unsigned int)ArtM::GetArtMethodDexCodeItemOffset(v13, v6));
　　　　　　　memcpy(v12, v24, v11);　 //崩在了这里
　　　　　　}
　　　　　}
　　　　}
　　　　else
　　　　{
　　　　　_JNIEnv::ExceptionClear((_JNIEnv *)a1);
　　　　}
　　　　art_lkchan::ClassDataItemIterator::Next((art_lkchan::ClassDataItemIterator *)v28);
　　　　std::string::~string(v26);
　　　}
　　}
　　std::string::~string(v27);
　}
　_ReadStatusReg(ARM64_SYSREG(3, 3, 13, 0, 2));
　return result;
}

版本bug

描述错误
不背单词用2.0blackdex能脱全,用3.0blackdex只能把原先apk文件里显示的dex文件给脱出来其他的就没了

重现
重现该行为的步骤:
1.用2.0blackdex脱不背单词
2.用3.0blackdex脱不背单词

设备信息

设备: [红米k30pro变焦版]
Android版本: [10]

其他说明

脱壳失败

在此写下你的问题
样本双进程守护的，在frida也遇到过 log如下
12-05 12:48:50.037 28329 28329 W .blackdexa32:p: DexFile /data/user/0/top.niunaijun.blackdexa32/code_cache/1638679730036.dex is in boot class path but is not in a known location
12-05 12:48:50.107 1619 10094 I ActivityTaskManager: START u0 {flg=0x18080000 cmp=top.niunaijun.blackdexa32/top.niunaijun.blackbox.proxy.ProxyActivity$P0 (has extras)} from uid 10247
12-05 12:48:50.130 1619 6573 I ActivityTaskManager: The Process top.niunaijun.blackdexa32:p0 Already Exists in BG. So sending its PID: 28329
12-05 12:48:50.205 6485 23994 I MediaProvider: Deleted 1 items on external_primary due to top.niunaijun.blackdexa32
12-05 12:48:50.217 28329 28329 W ContextImpl: Failed to ensure /storage/emulated/0/Android/data/com.gtgj.view/cache: java.lang.SecurityException: Invalid mkdirs path: /storage/emulated/0/Android/data/com.gtgj.view/cache does not contain calling package top.niunaijun.blackdexa32
12-05 12:48:50.226 28329 28329 I .blackdexa32:p: The ClassLoaderContext is a special shared library.
12-05 12:48:50.234 28329 28329 W .blackdexa32:p: ClassLoaderContext classpath size mismatch. expected=0, found=3 (PCL[]{PCL[/system/framework/android.test.base.jar2798937298]#PCL[/system/framework/org.simalliance.openmobileapi.jar408507849]#PCL[/system/framework/org.apache.http.legacy.jar3672776127]} | PCL[/data/user/0/top.niunaijun.blackdexa32/virtual/cache/vm.jar3622534595:/data/user/0/top.niunaijun.blackdexa32/virtual/cache/junit.jar3930985515:/system/framework/org.apache.http.legacy.jar3672776127])
12-05 12:48:50.237 28329 28329 W .blackdexa32:p: JIT profile information will not be recorded: profile file does not exist.
12-05 12:48:50.237 28329 28329 W .blackdexa32:p0: type=1400 audit(0.0:2474180): avc: granted { execute } for path="/data/data/top.niunaijun.blackdexa32/virtual/data/app/com.gtgj.view/lib/libblackdex.so" dev="dm-10" ino=357787 scontext=u:r:untrusted_app:s0:c247,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c247,c256,c512,c768 tclass=file app=top.niunaijun.blackdexa32
12-05 12:48:50.401 28329 28329 W top.niunaijun.blackdexa32:p0: Ignoring bad checksum (1121a50b, expected 7fea9ad9)
12-05 12:48:50.549 28329 28329 W .blackdexa32:p0: type=1400 audit(0.0:2474182): avc: granted { execute } for path="/data/data/top.niunaijun.blackdexa32/virtual/data/app/com.gtgj.view/lib/libDexHelper.so" dev="dm-10" ino=612945 scontext=u:r:untrusted_app:s0:c247,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c247,c256,c512,c768 tclass=file app=top.niunaijun.blackdexa32
12-05 12:48:50.634 28329 28329 W .blackdexa32:p: Opening an oat file without a class loader. Are you using the deprecated DexFile APIs?
12-05 12:48:50.776 28329 28329 F libc : Fatal signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0xff3adfa8 in tid 28329 (.blackdexa32:p0), pid 28329 (.blackdexa32:p0)
12-05 12:48:50.804 28386 28386 F crash_dump32: crash_dump.cpp:522] failed to attach to thread 28329, already traced by 28374 (top.niunaijun.blackdexa32:p0)
12-05 12:48:50.806 28329 28329 I libc : debuggerd_signal_handler test : top.niunaijun.blackdexa32:p0
12-05 12:48:50.806 28329 28329 I libc : debuggerd_signal_handler wait 2 second: top.niunaijun.blackdexa32:p0
12-05 12:48:52.850 1619 3476 I ActivityManager: Process top.niunaijun.blackdexa32:p0 (pid 28329) has died: fg TOP
12-05 12:48:52.852 1619 3476 I BroadcastQueue: cleanupBroadcastLocked skipPendingBroadcastLocked app = ProcessRecord{409a4bd 28329:top.niunaijun.blackdexa32:p0/u0a247}
12-05 12:48:52.853 1619 3476 I BroadcastQueue: cleanupBroadcastLocked skipPendingBroadcastLocked app = ProcessRecord{409a4bd 28329:top.niunaijun.blackdexa32:p0/u0a247}
12-05 12:48:52.874 1619 1931 I ActivityManager: Start proc 28389:top.niunaijun.blackdexa32:p0/u0a247 for top-activity {top.niunaijun.blackdexa32/top.niunaijun.blackbox.proxy.ProxyActivity$P0}
12-05 12:48:52.888 28389 28389 E .blackdexa32:p: Not starting debugger since process cannot load the jdwp agent.
12-05 12:48:52.940 28389 28389 W .blackdexa32:p: Accessing hidden method Ldalvik/system/VMRuntime;->setHiddenApiExemptions([Ljava/lang/String;)V (blacklist,core-platform-api, reflection, denied)
12-05 12:48:52.941 28389 28389 W .blackdexa32:p: Opening an oat file without a class loader. Are you using the deprecated DexFile APIs?
12-05 12:48:52.941 28389 28389 W .blackdexa32:p: DexFile /data/user/0/top.niunaijun.blackdexa32/code_cache/1638679732940.dex is in boot class path but is not in a known location
12-05 12:48:56.032 24161 24188 I TriggerManager: App resume for long time: top.niunaijun.blackdexa32, reset 1->1
12-05 12:48:57.927 28389 28412 I .blackdexa32:p: Waiting for a blocking GC ProfileSaver
12-05 12:48:57.961 28389 28412 I .blackdexa32:p: WaitForGcToComplete blocked ProfileSaver on ClassLinker for 34.148ms
12-05 12:48:57.973 28389 28402 I .blackdexa32:p: WaitForGcToComplete blocked RunEmptyCheckpoint on ProfileSaver for 11.558ms
12-05 12:49:39.030 24161 24188 I FaceActiveScreen: onRecognitionResult result=0, cost=419, ScreenDim=false, ScreenOn=true, curPkg=top.niunaijun.blackdexa32, curAct=top.niunaijun.blackdex.view.main.MainActivity, isKeyguard=false, isFunOn=true
12-05 12:50:11.186 24161 24188 I TriggerManager: App resume for long time: top.niunaijun.blackdexa32, reset 1->1

某APP脱壳失败

在此写下你的问题
深度脱壳和非深度脱壳均报同样提示：

脱壳失败

【失败原因】not found dex file

描述错误
无论手动选择apk文件还是已安装列表脱壳，都会失败，提示not found dex file，之前安卓10没问题，刷机回官方安卓9后脱壳就会失败。

重现
重现该行为的步骤:
1.正常操作

设备信息

设备: [小米8]
Android版本: [9]
使用miui 10版本

--------- beginning of main
07-31 11:30:07.731 21520 21520 E jun.blackdexa3: Not starting debugger since process cannot load the jdwp agent.
07-31 11:30:07.739 21520 21520 I EdXposed: Start to install inline hooks
07-31 11:30:07.739 21520 21520 I EdXposed: Using api level 28
07-31 11:30:07.739 21520 21520 I EdXposed: Start to install Riru hook
07-31 11:30:07.769 21520 21520 I EdXposed: Riru hooks installed
07-31 11:30:07.770 21520 21520 I EdXposed: ART hooks installed
07-31 11:30:07.835 21520 21520 W jun.blackdexa3: Unsupported class loader
07-31 11:30:07.840 21520 21520 W jun.blackdexa3: Unsupported class loader
07-31 11:30:07.841 21520 21520 I EdXposed: Loading modules for top.niunaijun.blackdexa32
07-31 11:30:07.842 21520 21520 I EdXposed-Bridge: Loading modules from /data/app/com.xp.emobile-z5D3z6cvtcJWxiUv8zOwyg==/base.apk
07-31 11:30:07.936 21520 21520 I EdXposed-Bridge: Loading class com.xp.emobile.HookAlicrackme
07-31 11:30:07.937 21520 21520 I EdXposed-Bridge: Loading modules from /data/app/cn.mhook.mhook-I5md9EIM2zLyj635yLeG2A==/base.apk
07-31 11:30:08.240 21520 21520 I EdXposed-Bridge: Loading class cn.mhook.mhook.xposed.XposedMain
07-31 11:30:08.242 21520 21520 I EdXposed-Bridge: Loading modules from /data/app/com.akari.ppx-UX7yMwhjLBZkXo_51jpfzQ==/base.apk
07-31 11:30:08.274 21520 21520 I EdXposed-Bridge: Loading class com.akari.ppx.xp.HookEntry
07-31 11:30:08.277 21520 21520 W Riru : f325 is too old to hide so
07-31 11:30:08.346 21520 21520 W jun.blackdexa3: Unsupported class loader
07-31 11:30:08.374 21520 21520 I chatty : uid=10198(top.niunaijun.blackdexa32) identical 2 lines
07-31 11:30:08.376 21520 21520 W jun.blackdexa3: Unsupported class loader
07-31 11:30:08.381 21520 21520 I Perf : Connecting to perf service.
07-31 11:30:08.575 21520 21557 D NetworkSecurityConfig: No Network Security Config specified, using platform default
07-31 11:30:08.611 21520 21568 I jun.blackdexa3: The ClassLoaderContext is a special shared library.
07-31 11:30:08.623 21520 21520 W Binder:intercep: type=1400 audit(0.0:87369): avc: denied { getattr } for path="/data/data/com.miui.contentcatcher" dev="sda21" ino=2883637 scontext=u:r:untrusted_app:s0:c198,c256,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
07-31 11:30:08.638 21520 21568 D ViewContentFactory: initViewContentFetcherClass
07-31 11:30:08.638 21520 21568 D ViewContentFactory: getInterceptorPackageInfo
07-31 11:30:08.638 21520 21568 D ViewContentFactory: getInitialApplication took 1ms
07-31 11:30:08.638 21520 21568 D ViewContentFactory: packageInfo.packageName: com.miui.catcherpatch
07-31 11:30:08.633 21520 21520 W Binder:intercep: type=1400 audit(0.0:87370): avc: denied { getattr } for path="/data/data/com.miui.catcherpatch" dev="sda21" ino=2883920 scontext=u:r:untrusted_app:s0:c198,c256,c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
07-31 11:30:08.657 21520 21568 D ViewContentFactory: initViewContentFetcherClass took
加载更多
其他说明

not found dex file

描述错误
提示: not found dex file

重现
重现该行为的步骤:
1.选择应用

设备信息

设备: vmos pro 极客版5.1
Android版本: [5.1]

MIUI 12.5 安卓11脱某APP不成功,用旧手机MIUI 11 安卓7可以成功

描述错误
MIUI 12.5 安卓11脱某APP不成功,用旧手机MIUI 11 安卓7可以成功

重现
重现该行为的步骤:

设备信息

设备: [小米9 SE]
Android版本: [11]
MIUI版本: 12.5

运行日志
top.niunaijun.blackdexa32_logcat.txt

其他说明

Can only dump 1 out of 18 dexes

Description error
It can only dump 1 dex even it found 18 dexes

Reproduce
Steps to reproduce the behavior:

Install this APK https://drive.google.com/file/d/1NOB26YJbA3NxvNaPqQiGIvPqFyrOyp_g/view
Dump via BlackDex

Device Information
-Equipment: Nox Player 9
-Android version: 9

Run log
top.niunaijun.blackdexa32_logcat.txt

other instructions

网易易盾脱壳失败

描述错误
网易易盾脱壳失败

重现
重现该行为的步骤:
1.xxx
2.xxx

设备信息

设备: [三星s21]
Android版本: [12]

运行日志
--------- beginning of system
01-20 16:52:31.164 17603 17603 D ActivityThread: handleBindApplication() --
--------- beginning of main
01-20 16:52:31.181 17632 17632 I ackdexa32:blac: Late-enabling -Xcheck:jni
01-20 16:52:31.197 17632 17632 E USNET : USNET: appName: top.niunaijun.blackdexa32:black
01-20 16:52:31.199 17632 17632 D ProcessState: Binder ioctl to enable oneway spam detection failed: Invalid argument
01-20 16:52:31.201 17632 17632 D ActivityThread: setConscryptValidator
01-20 16:52:31.201 17632 17632 D ActivityThread: setConscryptValidator - put
01-20 16:52:31.213 17632 17632 D ActivityThread: handleBindApplication()++ app=top.niunaijun.blackdexa32:black
01-20 16:52:31.214 17632 17632 D CompatibilityChangeReporter: Compat change id reported: 171979766; UID 10270; state: DISABLED
01-20 16:52:31.230 17632 17632 V GraphicsEnvironment: ANGLE Developer option for 'top.niunaijun.blackdexa32' set to: 'default'
01-20 16:52:31.230 17632 17632 V GraphicsEnvironment: App is not on the allowlist for updatable production driver.
01-20 16:52:31.231 17632 17632 D LoadedApk: LoadedApk::makeApplication() appContext.mOpPackageName=top.niunaijun.blackdexa32 appContext.mBasePackageName=top.niunaijun.blackdexa32
01-20 16:52:31.231 17632 17632 D NetworkSecurityConfig: No Network Security Config specified, using platform default
01-20 16:52:31.240 17632 17632 D NetworkSecurityConfig: No Network Security Config specified, using platform default
01-20 16:52:31.247 17632 17632 W ackdexa32:blac: Accessing hidden method Ldalvik/system/VMRuntime;->getRuntime()Ldalvik/system/VMRuntime; (unsupported,core-platform-api, reflection, allowed)
01-20 16:52:31.247 17632 17632 W ackdexa32:blac: Accessing hidden method Ldalvik/system/VMRuntime;->setHiddenApiExemptions([Ljava/lang/String;)V (blocked,core-platform-api, reflection, denied)
01-20 16:52:31.247 17632 17632 W BootstrapClass: reflect bootstrap failed:
01-20 16:52:31.247 17632 17632 W BootstrapClass: java.lang.reflect.InvocationTargetException
01-20 16:52:31.247 17632 17632 W BootstrapClass: at java.lang.reflect.Method.invoke(Native Method)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at me.weishu.reflection.BootstrapClass.(BootstrapClass.java:29)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at me.weishu.reflection.BootstrapClass.exemptAll(BootstrapClass.java:72)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at me.weishu.reflection.Reflection.unseal(Reflection.java:34)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at top.niunaijun.blackbox.BlackBoxCore.doAttachBaseContext(BlackBoxCore.java:82)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at top.niunaijun.blackbox.BlackDexCore.doAttachBaseContext(BlackDexCore.java:35)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at top.niunaijun.blackdex.app.BlackDexLoader.attachBaseContext(BlackDexLoader.kt:37)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at top.niunaijun.blackdex.app.AppManager.doAttachBaseContext(AppManager.kt:13)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at top.niunaijun.blackdex.app.App.attachBaseContext(App.kt:31)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.app.Application.attach(Application.java:350)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.app.Instrumentation.newApplication(Instrumentation.java:1178)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.app.LoadedApk.makeApplication(LoadedApk.java:1456)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7381)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.app.ActivityThread.access$1700(ActivityThread.java:309)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2268)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.os.Handler.dispatchMessage(Handler.java:106)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.os.Looper.loopOnce(Looper.java:226)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.os.Looper.loop(Looper.java:313)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at android.app.ActivityThread.main(ActivityThread.java:8582)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at java.lang.reflect.Method.invoke(Native Method)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:563)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1133)
01-20 16:52:31.247 17632 17632 W BootstrapClass: Caused by: java.lang.NoSuchMethodException: dalvik.system.VMRuntime.setHiddenApiExemptions [class [Ljava.lang.String;]
01-20 16:52:31.247 17632 17632 W BootstrapClass: at java.lang.Class.getMethod(Class.java:2103)
01-20 16:52:31.247 17632 17632 W BootstrapClass: at java.lang.Class.getDeclaredMethod(Class.java:2081)
01-20 16:52:31.247 17632 17632 W BootstrapClass: ... 22 more

其他说明

梆梆加固脱壳失败

描述错误
邦邦加固脱壳失败

重现
重现该行为的步骤:
1.xxx
2.xxx

设备信息

设备: [三星s21]
Android版本: [12]

其他说明

脱壳后，怎么进行回编译？

脱壳成功后，得到hook_xxx.dex和cookie_xxx.dex，源apk采用的是乐固加壳的smali都看不到，那么脱壳后怎么才能修改并进行重新打包呢

Doesn't Support Android 12

Unback fail, I hope you add support for Android 12

希望出一篇实现原理博文

红米9a安装失败

描述错误
简要说明遇到了什么问题
红米9a安装失败
重现
重现该行为的步骤:
1.xxx
2.xxx

设备信息

设备: [小米10]
Android版本: [10]

其他说明

通付盾，爱加密脱壳失败

通付盾，爱加密脱壳失败
样本下载地址：

链接：https://pan.baidu.com/s/1ywJNYWptvk1ZDvIcRM25Cg
提取码：wehx
复制这段内容后打开百度网盘手机App，操作更方便哦--来自百度网盘超级会员V4的分享

另外小米6 MIUI11.0.5 android9会提示dex not found

手淘不行

未知错误

修复DEX时部分类修复失败

在尝试修复某个DEX的NOP指令时，有两个类修复失败。调用 getDeclaredMethods 时异常：“Failed resolution of: Ljavax/naming/directory/DirContext;”，改调用getMethods时正常，导致私有方法无法正常修复。

脱爱加密失败

描述错误
简要说明遇到了什么问题

重现
重现该行为的步骤:
1.xxx
2.xxx

设备信息

设备: [小米10]
Android版本: [10]

运行日志

Build fingerprint: 'Xiaomi/dipper/dipper:10/QKQ1.190828.002/20.9.4:user/release-keys'
Revision: '0'
ABI: 'arm'
Timestamp: 2021-10-20 22:30:59+0800
pid: 31077, tid: 31077, name: .blackdexa32:p0 >>> top.niunaijun.blackdexa32:p0 <<<
uid: 11399
signal 4 (SIGILL), code 1 (ILL_ILLOPC), fault addr 0xefc87004 (*pc=0xf010f8df)
r0 e6b94a64 r1 f342e470 r2 ffda2c84 r3 ffda2d38
r4 f342e470 r5 efc87001 r6 00000000 r7 ffda2c10
r8 f344b2c0 r9 00000013 r10 00000000 r11 ffffffff
ip ffda2d38 sp ffda2c00 lr ab5e95bb pc efc87004

backtrace:
NOTE: Function names and BuildId information is missing for some frames due
NOTE: to unreadable libraries. For unwinds of apps, only shared libraries
NOTE: found under the lib/ directory are readable.
#00 pc 00000004 anonymous:efc87000
#1 pc 0005c5b9 /data/data/top.niunaijun.blackdexa32/virtual/data/app/com.wondertek.miguaikan/lib/libblackdex.so
#2 pc 000fae71 /apex/com.android.runtime/lib/libart.so (art::ClassLinker::LoadClass(art::Thread*, art::DexFile const&, art::dex::ClassDef const&, art::Handleart::mirror::Class)+628) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#3 pc 000f7cd9 /apex/com.android.runtime/lib/libart.so (art::ClassLinker::DefineClass(art::Thread*, char const*, unsigned int, art::Handleart::mirror::ClassLoader, art::DexFile const&, art::dex::ClassDef const&)+616) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#4 pc 001165ad /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (_ZN3art27VisitClassLoaderDexElementsIZNS_24VisitClassLoaderDexFilesIZNS_24VisitClassLoaderDexFilesIZNS_11ClassLinker38FindClassInBaseDexClassLoaderClassPathERNS_33ScopedObjectAccessAlreadyRunnableEPKcjNS_6HandleINS_6mirror11ClassLoaderEEEE4$31EEvS5_SB_T_EUlPKNS_7DexFileEPPvE_SH_EET0_S5_SB_SD_SK_EUlNS_6ObjPtrINS9_6ObjectEEESI_E_SH_EESK_S5_SB_SD_SK+440) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#5 pc 000f7351 /apex/com.android.runtime/lib/libart.so (art::ClassLinker::FindClassInBaseDexClassLoader(art::ScopedObjectAccessAlreadyRunnable&, art::Thread*, char const*, unsigned int, art::Handleart::mirror::ClassLoader, art::ObjPtrart::mirror::Class)+464) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#6 pc 0031b361 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::VMClassLoader_findLoadedClass(_JNIEnv, _jclass*, _jobject*, _jstring*)+428) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#7 pc 0005a1f7 /data/app/top.niunaijun.blackdexa32-z8vPlT5hctRkXB-8u4kVsg==/lib/arm/libblackdex.so (new_findLoadedClass(_JNIEnv*, _jobject*, _jobject*, _jstring*)+134) (BuildId: 9d92e13dacd181be0ce8e476c235743e1b57630e)
#8 pc 002d07cb /system/framework/arm/boot-core-libart.oat (art_jni_trampoline+130) (BuildId: e455336f5e26e0eb8d6917c7384d11b967db818f)
#9 pc 00249dc9 /system/framework/arm/boot.oat (java.lang.ClassLoader.loadClass+88) (BuildId: 52d5c17fe90528589dd150bf3e6b5733704debeb)
#10 pc 00249d59 /system/framework/arm/boot.oat (java.lang.ClassLoader.loadClass+40) (BuildId: 52d5c17fe90528589dd150bf3e6b5733704debeb)
#11 pc 0090b117 /system/framework/arm/boot-framework.oat (android.app.AppComponentFactory.instantiateApplication+46) (BuildId: 0709797f86c834951e731e9ebaf31386cf159b08)
#12 pc 000d7bc5 /apex/com.android.runtime/lib/libart.so (art_quick_invoke_stub_internal+68) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#13 pc 00439fe5 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art_quick_invoke_stub+252) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#14 pc 000dffeb /apex/com.android.runtime/lib/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+178) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#15 pc 00213779 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+280) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#16 pc 0020f091 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (bool art::interpreter::DoCall<false, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+716) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#17 pc 0042fd1b /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (MterpInvokeSuper+1278) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#18 pc 000d2894 /apex/com.android.runtime/lib/libart.so (mterp_op_invoke_super+20) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#19 pc 0001baa0 /data/app/com.wondertek.miguaikan-LZVKa6hSU2qdB_3FezBhTQ==/oat/arm/base.vdex (s.h.e.l.l.A.instantiateApplication+28)
#20 pc 001eea11 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEbb.llvm.6078130102404447026+192) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#21 pc 001f3203 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::interpreter::EnterInterpreterFromEntryPoint(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*)+126) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#22 pc 00423ac9 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (artQuickToInterpreterBridge+852) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#23 pc 000dc5a1 /apex/com.android.runtime/lib/libart.so (art_quick_to_interpreter_bridge+32) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#24 pc 0092a301 /system/framework/arm/boot-framework.oat (android.app.Instrumentation.newApplication+88) (BuildId: 0709797f86c834951e731e9ebaf31386cf159b08)
#25 pc 001d57ef /data/app/top.niunaijun.blackdexa32-z8vPlT5hctRkXB-8u4kVsg==/oat/arm/base.odex (top.niunaijun.blackbox.fake.delegate.AppInstrumentation.newApplication+654)
#26 pc 00934b69 /system/framework/arm/boot-framework.oat (android.app.LoadedApk.makeApplication+424) (BuildId: 0709797f86c834951e731e9ebaf31386cf159b08)
#27 pc 000d7bc5 /apex/com.android.runtime/lib/libart.so (art_quick_invoke_stub_internal+68) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#28 pc 00439fe5 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art_quick_invoke_stub+252) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#29 pc 000dffeb /apex/com.android.runtime/lib/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+178) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#30 pc 00377b03 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::(anonymous namespace)::InvokeWithArgArray(art::ScopedObjectAccessAlreadyRunnable const&, art::ArtMethod*, art::(anonymous namespace)::ArgArray*, art::JValue*, char const*)+54) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#31 pc 00378dfd /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::InvokeMethod(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jobject*, _jobject*, unsigned int)+832) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#32 pc 003248af /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::Method_invoke(_JNIEnv*, _jobject*, _jobject*, _jobjectArray*)+30) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#33 pc 005f91e7 /system/framework/arm/boot.oat (art_jni_trampoline+110) (BuildId: 52d5c17fe90528589dd150bf3e6b5733704debeb)
#34 pc 001d0071 /data/app/top.niunaijun.blackdexa32-z8vPlT5hctRkXB-8u4kVsg==/oat/arm/base.odex (reflection.MirrorReflection$MethodWrapper.call+80)
#35 pc 001edc2d /data/app/top.niunaijun.blackdexa32-z8vPlT5hctRkXB-8u4kVsg==/oat/arm/base.odex (top.niunaijun.blackbox.app.BActivityThread.handleBindApplication+1996)
#36 pc 001ee363 /data/app/top.niunaijun.blackdexa32-z8vPlT5hctRkXB-8u4kVsg==/oat/arm/base.odex (top.niunaijun.blackbox.app.BActivityThread.bindApplication+362)
#37 pc 001d60ab /data/app/top.niunaijun.blackdexa32-z8vPlT5hctRkXB-8u4kVsg==/oat/arm/base.odex (top.niunaijun.blackbox.fake.service.HCallbackProxy.handleLaunchActivity+618)
#38 pc 001d6405 /data/app/top.niunaijun.blackdexa32-z8vPlT5hctRkXB-8u4kVsg==/oat/arm/base.odex (top.niunaijun.blackbox.fake.service.HCallbackProxy.handleMessage+756)
#39 pc 01387c17 /system/framework/arm/boot-framework.oat (android.os.Handler.dispatchMessage+110) (BuildId: 0709797f86c834951e731e9ebaf31386cf159b08)
#40 pc 0138ebfd /system/framework/arm/boot-framework.oat (android.os.Looper.loop+1340) (BuildId: 0709797f86c834951e731e9ebaf31386cf159b08)
#41 pc 00bfb4a5 /system/framework/arm/boot-framework.oat (android.app.ActivityThread.main+756) (BuildId: 0709797f86c834951e731e9ebaf31386cf159b08)
#42 pc 000d7bc5 /apex/com.android.runtime/lib/libart.so (art_quick_invoke_stub_internal+68) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#43 pc 0043a0f9 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art_quick_invoke_static_stub+248) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#44 pc 000dffff /apex/com.android.runtime/lib/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+198) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#45 pc 00377b03 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::(anonymous namespace)::InvokeWithArgArray(art::ScopedObjectAccessAlreadyRunnable const&, art::ArtMethod*, art::(anonymous namespace)::ArgArray*, art::JValue*, char const*)+54) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#46 pc 00378dfd /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::InvokeMethod(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jobject*, _jobject*, unsigned int)+832) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#47 pc 003248af /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::Method_invoke(_JNIEnv*, _jobject*, _jobject*, _jobjectArray*)+30) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#48 pc 005f91e7 /system/framework/arm/boot.oat (art_jni_trampoline+110) (BuildId: 52d5c17fe90528589dd150bf3e6b5733704debeb)
#49 pc 01d784c3 /system/framework/arm/boot-framework.oat (com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run+114) (BuildId: 0709797f86c834951e731e9ebaf31386cf159b08)
#50 pc 01d92ff9 /system/framework/arm/boot-framework.oat (com.android.internal.os.ZygoteInit.main+1888) (BuildId: 0709797f86c834951e731e9ebaf31386cf159b08)
#51 pc 000d7bc5 /apex/com.android.runtime/lib/libart.so (art_quick_invoke_stub_internal+68) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#52 pc 0043a0f9 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art_quick_invoke_static_stub+248) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#53 pc 000dffff /apex/com.android.runtime/lib/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+198) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#54 pc 00377b03 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::(anonymous namespace)::InvokeWithArgArray(art::ScopedObjectAccessAlreadyRunnable const&, art::ArtMethod*, art::(anonymous namespace)::ArgArray*, art::JValue*, char const*)+54) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#55 pc 00377943 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::InvokeWithVarArgs(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+290) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#56 pc 002c12c1 /apex/com.android.runtime/lib/libart.so!libart.so (offset 0xfd000) (art::JNI::CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, std::__va_list)+460) (BuildId: 6c13a6ecaf0bacb367a77812643fdc62)
#57 pc 000876b1 /system/lib/libandroid_runtime.so (_JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)+28) (BuildId: 03e20fa815df7c5d01bc52e73f6a8d7b)
#58 pc 00089d03 /system/lib/libandroid_runtime.so (android::AndroidRuntime::start(char const*, android::Vectorandroid::String8 const&, bool)+546) (BuildId: 03e20fa815df7c5d01bc52e73f6a8d7b)
#59 pc 000023b5 /system/bin/app_process32 (main+880) (BuildId: 2f3784c7a0f560b2794b1696db586626)
#60 pc 0005ab61 /apex/com.android.runtime/lib/bionic/libc.so (__libc_init+68) (BuildId: 8a332f5ddfdfaa762c88336c550e7e8b)
#61 pc 0000202f /system/bin/app_process32 (_start_main+38) (BuildId: 2f3784c7a0f560b2794b1696db586626)
#62 pc 00004456 anonymous:f39bb000


**其他说明**

对某新闻脱壳失败

描述错误
对某新闻脱壳失败

重现
重现该行为的步骤:
1.安装某新闻app
2.安装BlackDex32

设备信息

设备: [小米Mix2]
Android版本: [9]

其他说明

libblackdex.so not found

描述错误
使用代码编译生成的app进行脱壳时报错

重现
重现该行为的步骤:
git clone代码编译生成apk后安全对任意apk脱壳处理报错

设备信息

设备: 三星s10e
Android版本: 10

运行日志

System.err: java.io.FileNotFoundException: /data/app/top.niunaijun.blackdexa32-7-FpY8hPUlRfMtarwzO1JA==/lib/arm/libblackdex.so: open failed: ENOENT (No such file or directory)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at libcore.io.IoBridge.open(IoBridge.java:496)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at java.io.FileInputStream.<init>(FileInputStream.java:159)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at top.niunaijun.blackbox.utils.FileUtils.copyFile(FileUtils.java:247)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at top.niunaijun.blackbox.core.system.pm.installer.CopyExecutor.exec(CopyExecutor.java:32)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at top.niunaijun.blackbox.core.system.pm.BPackageInstallerService.installPackageAsUser(BPackageInstallerService.java:46)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at top.niunaijun.blackbox.core.system.pm.BPackageManagerService.installPackageAsUserLocked(BPackageManagerService.java:617)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at top.niunaijun.blackbox.core.system.pm.BPackageManagerService.installPackageAsUser(BPackageManagerService.java:492)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at top.niunaijun.blackbox.core.system.pm.IBPackageManagerService$Stub.onTransact(IBPackageManagerService.java:471)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at android.os.Binder.execTransactInternal(Binder.java:1056)
2021-12-19 15:11:07.996 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at android.os.Binder.execTransact(Binder.java:1029)
2021-12-19 15:11:07.997 17007-17036/top.niunaijun.blackdexa32 W/System.err: Caused by: android.system.ErrnoException: open failed: ENOENT (No such file or directory)
2021-12-19 15:11:07.997 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at libcore.io.Linux.open(Native Method)
2021-12-19 15:11:07.997 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at libcore.io.ForwardingOs.open(ForwardingOs.java:167)
2021-12-19 15:11:07.997 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at libcore.io.BlockGuardOs.open(BlockGuardOs.java:252)
2021-12-19 15:11:07.997 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at libcore.io.ForwardingOs.open(ForwardingOs.java:167)
2021-12-19 15:11:07.997 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at android.app.ActivityThread$AndroidOs.open(ActivityThread.java:8044)
2021-12-19 15:11:07.997 17007-17036/top.niunaijun.blackdexa32 W/System.err:     at libcore.io.IoBridge.open(IoBridge.java:482)

其他说明

AntiSplit-X 爱加密脱壳失败

描述错误
AntiSplit-X 爱加密脱壳失败

重现
重现该行为的步骤:
1.选择从外部导入apk，脱壳
2.提示脱壳失败

设备信息

设备: 小米9
Android版本: 11(Pixel Experience Plus 11）

运行日志

https://wushidi.lanzoui.com/ir0n3q3dxej

其他说明

数字壳，native没修复

描述错误
数字壳，native没修复
比如 acitivity 的 onCreate 函数

设备信息

设备: 一加9T Pro
Android版本: [11]

64位版本和32位版本app list

在64位版本显示的app数量比32位少很多

tantan_4.7.7.1.apk 脱壳报错

描述错误

重现
重现该行为的步骤:
打开磁盘上的apk文件

设备信息

设备: Pixel4
Android版本: 11

脱壳失败

apk link:https://drive.google.com/file/d/1kO75uhZ7hYJ08j-KF_HTYcZMaA40vCkW/view?usp=sharing

描述错误
脱壳失败

重现
重现该行为的步骤:
对apk进行脱壳

设备信息

设备: [红米K40]
Android版本: [11]

其他说明
apk加壳了，几维的壳

应用dump失败

描述错误
解析dumpdex失败，app闪退

重现
重现该行为的步骤:

dump "流星清理卫士"
app闪退

设备信息

设备: [谷歌 coral]
Android版本: [10]

运行日志

2021-05-25 10:00:16.206 1999-1999/com.android.systemui D/ImageWallpaper: wallpaper visibility changes to: true
2021-05-25 10:00:16.208 1464-1677/system_process I/ActivityTaskManager: Displayed top.niunaijun.blackdexa32/top.niunaijun.blackbox.proxy.ProxyActivity$P0: +482ms
2021-05-25 10:00:16.212 781-781/? D/Zygote: Forked child process 13408
2021-05-25 10:00:16.217 1464-1679/system_process I/ActivityManager: Start proc 13408:com.meteorandroid.server.ctsclean/u0a129 for added application com.meteorandroid.server.ctsclean
2021-05-25 10:00:16.217 1464-1680/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 12902 in 42ms
2021-05-25 10:00:16.218 1464-1680/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 12859 in 0ms
2021-05-25 10:00:16.218 1464-1680/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 12921 in 0ms
2021-05-25 10:00:16.218 1464-1680/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 12963 in 0ms
2021-05-25 10:00:16.218 1464-1680/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 12939 in 0ms
2021-05-25 10:00:16.218 811-811/? D/[email protected]: LAUNCH: 0
2021-05-25 10:00:16.219 1464-1594/system_process I/ActivityManager: Force stopping com.meteorandroid.server.ctsclean appid=10129 user=0: start instr
2021-05-25 10:00:16.220 1464-1594/system_process I/ActivityManager: Killing 13408:com.meteorandroid.server.ctsclean/u0a129 (adj -10000): stop com.meteorandroid.server.ctsclean
2021-05-25 10:00:16.220 1464-1594/system_process W/ActivityManager: Crash of app com.meteorandroid.server.ctsclean running instrumentation ComponentInfo{com.meteorandroid.server.ctsclean/com.lazarus.LazarusInstrumentation}
2021-05-25 10:00:16.221 1464-1594/system_process I/ActivityManager: Force stopping com.meteorandroid.server.ctsclean appid=10129 user=0: finished inst
2021-05-25 10:00:16.224 1464-1594/system_process I/ActivityManager: Force stopping com.meteorandroid.server.ctsclean appid=10129 user=0: start instr
2021-05-25 10:00:16.224 1464-1594/system_process I/ActivityManager: Killing 0:com.meteorandroid.server.ctsclean/u0a129 (adj -10000): stop com.meteorandroid.server.ctsclean
2021-05-25 10:00:16.224 1464-1594/system_process W/ActivityManager: Crash of app com.meteorandroid.server.ctsclean running instrumentation ComponentInfo{com.meteorandroid.server.ctsclean/com.lazarus.LazarusInstrumentation}
2021-05-25 10:00:16.224 1464-1594/system_process I/ActivityManager: Force stopping com.meteorandroid.server.ctsclean appid=10129 user=0: finished inst
2021-05-25 10:00:16.230 1464-1594/system_process I/ActivityManager: Force stopping com.meteorandroid.server.ctsclean appid=10129 user=0: start instr
2021-05-25 10:00:16.230 1464-1594/system_process I/ActivityManager: Killing 0:com.meteorandroid.server.ctsclean/u0a129 (adj -10000): stop com.meteorandroid.server.ctsclean
2021-05-25 10:00:16.230 1464-1594/system_process W/ActivityManager: Crash of app com.meteorandroid.server.ctsclean running instrumentation ComponentInfo{com.meteorandroid.server.ctsclean/com.lazarus.LazarusInstrumentation}
2021-05-25 10:00:16.230 1464-1594/system_process I/ActivityManager: Force stopping com.meteorandroid.server.ctsclean appid=10129 user=0: finished inst
2021-05-25 10:00:16.235 1464-1680/system_process I/libprocessgroup: Successfully killed process cgroup uid 99052 pid 13237 in 0ms
2021-05-25 10:00:16.235 2283-2283/? I/Zygote: Process 13237 exited due to signal 9 (Killed)
2021-05-25 10:00:16.236 1464-1680/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 13408 in 0ms
2021-05-25 10:00:16.237 1464-2306/system_process W/Parcel: **** enforceInterface() expected 'android.app.IActivityManager' but read ''
2021-05-25 10:00:16.237 1464-2306/system_process W/Binder: Caught a RuntimeException from the binder stub implementation.
    java.lang.SecurityException: Binder invocation to an incorrect interface
        at android.os.Parcel.nativeEnforceInterface(Native Method)
        at android.os.Parcel.enforceInterface(Parcel.java:623)
        at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:2323)
        at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2738)
        at android.os.Binder.execTransactInternal(Binder.java:1021)
        at android.os.Binder.execTransact(Binder.java:994)
2021-05-25 10:00:16.237 1464-2306/system_process W/Parcel: **** enforceInterface() expected 'android.app.IActivityManager' but read ''
2021-05-25 10:00:16.237 1464-2306/system_process W/Binder: Caught a RuntimeException from the binder stub implementation.
    java.lang.SecurityException: Binder invocation to an incorrect interface
        at android.os.Parcel.nativeEnforceInterface(Native Method)
        at android.os.Parcel.enforceInterface(Parcel.java:623)
        at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:2323)
        at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2738)
        at android.os.Binder.execTransactInternal(Binder.java:1021)
        at android.os.Binder.execTransact(Binder.java:994)
2021-05-25 10:00:16.240 781-781/? I/Zygote: Process 13408 exited due to signal 9 (Killed)
2021-05-25 10:00:16.242 1464-1685/system_process E/KernelCpuUidUserSysTimeReader: Negative user/sys time delta for UID=10143
    Prev times: u=22885681061 s=2241507339 Curr times: u=22887115599 s=2241461524
2021-05-25 10:00:16.242 781-781/? D/Zygote: Forked child process 13414
2021-05-25 10:00:16.243 1464-1679/system_process W/ActivityManager: ProcessRecord{8c3d308 0:com.meteorandroid.server.ctsclean/u0a129} start not valid, killing pid=13414, killedByAm=true;No entry in mProcessNames;pendingStart=false;
2021-05-25 10:00:16.243 1464-1679/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 0 in 0ms
2021-05-25 10:00:16.247 781-781/? D/Zygote: Forked child process 13420
2021-05-25 10:00:16.247 781-781/? I/Zygote: Process 13414 exited due to signal 9 (Killed)
2021-05-25 10:00:16.254 1464-4005/system_process D/ConnectivityService: ConnectivityService NetworkRequestInfo binderDied(NetworkRequest [ TRACK_DEFAULT id=1996, [ Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED Uid: 10129] ], android.os.BinderProxy@5dd7aa1)
2021-05-25 10:00:16.254 1464-4006/system_process D/ConnectivityService: ConnectivityService NetworkRequestInfo binderDied(NetworkRequest [ LISTEN id=1997, [ Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED Uid: 10129] ], android.os.BinderProxy@43074c6)
2021-05-25 10:00:16.254 1464-4005/system_process D/ConnectivityService: ConnectivityService NetworkRequestInfo binderDied(NetworkRequest [ TRACK_DEFAULT id=1998, [ Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED Uid: 10129] ], android.os.BinderProxy@35a3c87)
2021-05-25 10:00:16.254 1464-4380/system_process D/ConnectivityService: ConnectivityService NetworkRequestInfo binderDied(NetworkRequest [ LISTEN id=1999, [ Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED Uid: 10129] ], android.os.BinderProxy@34717b4)
2021-05-25 10:00:16.254 1464-1929/system_process D/ConnectivityService: releasing NetworkRequest [ TRACK_DEFAULT id=1996, [ Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED Uid: 10129] ] (release request)
2021-05-25 10:00:16.255 1464-1929/system_process D/ConnectivityService: releasing NetworkRequest [ TRACK_DEFAULT id=1998, [ Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED Uid: 10129] ] (release request)
2021-05-25 10:00:16.256 781-781/? I/Zygote: Process 12859 exited due to signal 9 (Killed)
2021-05-25 10:00:16.257 1464-1679/system_process W/ActivityManager: ProcessRecord{7b61fdd 0:com.meteorandroid.server.ctsclean/u0a129} start not valid, killing pid=13420, killedByAm=true;No entry in mProcessNames;pendingStart=false;
2021-05-25 10:00:16.258 1464-1679/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 0 in 0ms
2021-05-25 10:00:16.270 781-781/? D/Zygote: Forked child process 13439
2021-05-25 10:00:16.271 1464-1679/system_process I/ActivityManager: Start proc 13439:com.meteorandroid.server.ctsclean/u0a129 for added application com.meteorandroid.server.ctsclean
2021-05-25 10:00:16.274 781-781/? I/Zygote: Process 13420 exited due to signal 9 (Killed)
2021-05-25 10:00:16.461 1464-1626/system_process I/DropBoxManagerService: add tag=system_server_strictmode isTagEnabled=true flags=0x2
2021-05-25 10:00:16.722 13439-13439/com.meteorandroid.server.ctsclean I/SecondaryDex: Installing secondary dex
2021-05-25 10:00:16.723 13439-13439/com.meteorandroid.server.ctsclean I/SecondaryDex: SecondaryDexExtractor(/data/app/com.meteorandroid.server.ctsclean-PshG7MKbIEKDfOSn8s49Pw==/base.apk, /data/user/0/com.meteorandroid.server.ctsclean/code_cache/secondarydexes)
2021-05-25 10:00:16.724 13439-13439/com.meteorandroid.server.ctsclean I/SecondaryDex: Blocking on lock /data/user/0/com.meteorandroid.server.ctsclean/code_cache/secondarydexes/SecondaryDex.lock
2021-05-25 10:00:16.724 13439-13439/com.meteorandroid.server.ctsclean I/SecondaryDex: /data/user/0/com.meteorandroid.server.ctsclean/code_cache/secondarydexes/SecondaryDex.lock locked
2021-05-25 10:00:16.724 13439-13439/com.meteorandroid.server.ctsclean I/SecondaryDex: SecondaryDexExtractor.load(/data/app/com.meteorandroid.server.ctsclean-PshG7MKbIEKDfOSn8s49Pw==/base.apk, false, )
2021-05-25 10:00:16.726 13439-13439/com.meteorandroid.server.ctsclean I/SecondaryDex: loading existing secondary dex files
2021-05-25 10:00:16.727 13439-13439/com.meteorandroid.server.ctsclean I/SecondaryDex: load found 0 secondary dex files
2021-05-25 10:00:16.727 13439-13439/com.meteorandroid.server.ctsclean I/SecondaryDex: install done
2021-05-25 10:00:16.752 13439-13439/? D/ProcessObserver: onCreate
2021-05-25 10:00:16.757 13439-13439/? I/server.ctsclea: System.exit called, status: 0
2021-05-25 10:00:16.757 13439-13439/? I/AndroidRuntime: VM exiting with result code 0, cleanup skipped.
2021-05-25 10:00:16.477 1464-1626/system_process I/DropBoxManagerService: add tag=system_server_strictmode isTagEnabled=true flags=0x2
2021-05-25 10:00:16.767 1464-2316/system_process I/ActivityManager: Process com.meteorandroid.server.ctsclean (pid 13439) has died: fore FGS 
2021-05-25 10:00:16.767 1464-1680/system_process I/libprocessgroup: Successfully killed process cgroup uid 10129 pid 13439 in 0ms
2021-05-25 10:00:16.767 781-781/? I/Zygote: Process 13439 exited cleanly (0)
2021-05-25 10:00:16.768 1464-2316/system_process W/ActivityManager: Crash of app com.meteorandroid.server.ctsclean running instrumentation ComponentInfo{com.meteorandroid.server.ctsclean/com.lazarus.LazarusInstrumentation}
2021-05-25 10:00:16.768 1464-2316/system_process I/ActivityManager: Force stopping com.meteorandroid.server.ctsclean appid=10129 user=0: finished inst
2021-05-25 10:00:23.633 815-930/? D/ASH: @ 487347.463: SensorType 19 resampler quality 0
2021-05-25 10:00:23.633 815-930/? D/ASH: @ 487347.463: SensorType 19 resampler quality 1
2021-05-25 10:00:24.529 815-930/? D/CHRE: @ 487348.351: [ImuCal] Dynamic sensor configuration: high-performance.
2021-05-25 10:00:24.532 815-930/? D/ASH: @ 487348.362: SensorType 1 resampler quality 2
2021-05-25 10:00:31.204 821-861/? D/rlsservice: MonitorDisplayStatus client num 1, display status 1, sensor status 0
2021-05-25 10:00:44.650 602-637/? I/SDM: HWCDisplay::SetActiveConfig: Active configuration changed to: 0

其他说明

附件

https://sanbo.lanzoui.com/iyULupg33fc
密码:24bb

干不动，支付宝

干不动，支付宝干不动，支付宝干不动，支付宝

codinggay / blackdex Goto Github PK

blackdex's Introduction

BlackDex

运行原理

项目声明

本项目并不针对任何加固，在遇到检测环境等均不处理，仅供安全领域分析用途。项目免费开源仅供学习用途、请勿用于非法用途。否则后果自负！

Black系列交流群：390562046（QQ）

编译说明

脱壳说明

脱壳文件说明

脱壳原理

深度脱壳

部分抽取壳脱壳前后对比

环境要求

架构特别说明

演示

感谢

License

blackdex's People

Contributors

Stargazers

Watchers

Forkers

blackdex's Issues

Recommend Projects

Recommend Topics

Recommend Org

Jobs