From 4ea4b65b8d163f7d41b0fe0790f5e87dead41d8d Mon Sep 17 00:00:00 2001 From: Milk <1871357815@qq.com> Date: Thu, 10 Jun 2021 14:03:58 +0800 Subject: [PATCH] Update README_EN.md --- README_EN.md | 27 +++++++++++++++++++++------ 1 file changed, 21 insertions(+), 6 deletions(-) diff --git a/README_EN.md b/README_EN.md index 7735fe7..c0563e4 100644 --- a/README_EN.md +++ b/README_EN.md @@ -2,7 +2,11 @@ ![](https://img.shields.io/badge/language-java-brightgreen.svg) -BlackDex is an Android unpack tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phones or emulators, you can unpack APK File in several seconds. +BlackDex is an Android unpack tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds. + +## Declaration + +### This project is not directed against any encryption, it does not deal with environment detection. BlackDex is a free and open source project, only for learning, do not use it for illegal purpose. Otherwise, the legal consequences and liabilities will be born by violator. ## Description @@ -12,6 +16,21 @@ This project supports almost all the Android system above 5.0, it has **high suc BlackDex unpacks APK File by DexFile cookie. In theory, it supports all version Android systems that use ART (Android Runtime). But it may vary from a few special devices. We do not have enough resources to execute a lot of testing, if you have problems with this project, please open an issue on the GitHub. +## Deep Unpacking + +BlackDex will fix the DexCode in deep unpacking mode, it can load DexCode which were pointed to other Memory Blocks into DexFile. By this way, we can restore some methods which were erased with NOP. But it can not fix all methods. For example, some applications restore the instructions just before being executed. In this situation, BlackDex can not restore the instructions into DexFile. Deep Unpacking dose not include operation of decryption and executing methods. This feature was still in the test phase, **it is possible that following cases will occur, may the NOP has no longer exists in this world!** + +1.BlackDex will take more time to unpack an app, it expected to take a few minutes or more. + +2.The target application is possible to crash when BlackDex is unpacking it(Environment detection, etc). + +3.The failure rate of unpacking will be increased. + +4.It may not always fix all methods successfully. + +### Comparison +![xx](nop_diff.jpg) + ## Environment - An Android mobile phone or emulator @@ -23,7 +42,7 @@ BlackDex unpacks APK File by DexFile cookie. In theory, it supports all version ## Special Instructions -This project distinguishes between 32-bit and 64-bit, it was compiled 2 different demos. If you can not find your target in installed packages list, please use another version. +This project distinguishes between 32-bit and 64-bit, it was compiled to 2 different demos. If you can not find your target in installed packages list, please use another version. BlackDex download：https://github.com/CodingGay/BlackDex/releases @@ -31,10 +50,6 @@ BlackDex download：https://github.com/CodingGay/BlackDex/releases ![xx](demonstration.gif) -## Looking forward? - -- Confront DexCode->insns extraction - ## References - [VirtualApp](https://github.com/asLody/VirtualApp)