【Android 逆向】整体加固脱壳 ( DEX 优化流程分析 | DexPrepare.cpp 中 dvmOptimizeDexFile() 方法分析 | /bin/dexopt 源码分析 )
文章目錄
- 前言
- 一、DexPrepare.cpp 中 dvmOptimizeDexFile() 方法分析
- 二、/bin/dexopt 源碼分析
前言
上一篇博客 【Android 逆向】整體加固脫殼 ( DexClassLoader 加載 dex 流程分析 | RawDexFile.cpp 分析 | dvmRawDexFileOpen函數讀取 DEX 文件 ) 中 , 在 RawDexFile.cpp 中的 dvmRawDexFileOpen() 方法中 , 調用了 DexPrepare.cpp 的 dvmOptimizeDexFile() 函數 , 對 DEX 文件進行了優化 ;
一、DexPrepare.cpp 中 dvmOptimizeDexFile() 方法分析
dvmOptimizeDexFile 函數的參數說明 : int fd 是打開的 dex 文件標識符 , long dexLength 是打開的 dex 文件大小 ;
在該函數中 , 調用 /bin/dexopt 程序 , 優化 dex 文件 , 最終產生 odex 文件 ;
/** 給定包含DEX數據的文件的描述符,生成* 優化版本。* * “fd”指向的文件應為鎖定的共享資源* (或私人);我們不努力實施多進程正確性* 在這里。* * “文件名”僅用于調試輸出。存儲“modWhen”和“crc”* 在依賴項集中。* * “isBootstrap”標志確定優化器和驗證器如何處理* 包范圍訪問檢查。優化時,我們只加載引導* 類DEX文件和目標DEX,因此該標志確定* 給目標DEX類一個(合成的)非空類加載器指針。* 只有當目標DEX包含聲明* 與引導類位于同一個包中。* * 優化器需要加載目標DEX文件中的每個類。* 這通常是不可取的,因此我們啟動一個子流程來執行* 工作并等待它完成。* * 成功時返回“true”。所有數據均已寫入“fd”。*/ bool dvmOptimizeDexFile(int fd, off_t dexOffset, long dexLength,const char* fileName, u4 modWhen, u4 crc, bool isBootstrap) {const char* lastPart = strrchr(fileName, '/');if (lastPart != NULL)lastPart++;elselastPart = fileName;ALOGD("DexOpt: --- BEGIN '%s' (bootstrap=%d) ---", lastPart, isBootstrap);pid_t pid;/** 如果我們的bootclasspath中出現了我們認為* 都優化了,被拒絕了。*/if (gDvm.optimizing) {ALOGW("Rejecting recursive optimization attempt on '%s'", fileName);return false;}pid = fork();if (pid == 0) {static const int kUseValgrind = 0;// 調用 /bin/dexopt 程序 , 優化 dex 文件 , 最終產生 odex 文件static const char* kDexOptBin = "/bin/dexopt";static const char* kValgrinder = "/usr/bin/valgrind";static const int kFixedArgCount = 10;static const int kValgrindArgCount = 5;static const int kMaxIntLen = 12; // '-'+10dig+'\0' -OR- 0x+8digint bcpSize = dvmGetBootPathSize();int argc = kFixedArgCount + bcpSize+ (kValgrindArgCount * kUseValgrind);const char* argv[argc+1]; // last entry is NULLchar values[argc][kMaxIntLen];char* execFile;const char* androidRoot;int flags;/* change process groups, so we don't clash with ProcessManager */setpgid(0, 0);/* full path to optimizer */androidRoot = getenv("ANDROID_ROOT");if (androidRoot == NULL) {ALOGW("ANDROID_ROOT not set, defaulting to /system");androidRoot = "/system";}execFile = (char*)alloca(strlen(androidRoot) + strlen(kDexOptBin) + 1);strcpy(execFile, androidRoot);strcat(execFile, kDexOptBin);/** Create arg vector.*/int curArg = 0;if (kUseValgrind) {/* probably shouldn't ship the hard-coded path */argv[curArg++] = (char*)kValgrinder;argv[curArg++] = "--tool=memcheck";argv[curArg++] = "--leak-check=yes"; // check for leaks tooargv[curArg++] = "--leak-resolution=med"; // increase from 2 to 4argv[curArg++] = "--num-callers=16"; // default is 12assert(curArg == kValgrindArgCount);}argv[curArg++] = execFile;argv[curArg++] = "--dex";sprintf(values[2], "%d", DALVIK_VM_BUILD);argv[curArg++] = values[2];sprintf(values[3], "%d", fd);argv[curArg++] = values[3];sprintf(values[4], "%d", (int) dexOffset);argv[curArg++] = values[4];sprintf(values[5], "%d", (int) dexLength);argv[curArg++] = values[5];argv[curArg++] = (char*)fileName;sprintf(values[7], "%d", (int) modWhen);argv[curArg++] = values[7];sprintf(values[8], "%d", (int) crc);argv[curArg++] = values[8];flags = 0;if (gDvm.dexOptMode != OPTIMIZE_MODE_NONE) {flags |= DEXOPT_OPT_ENABLED;if (gDvm.dexOptMode == OPTIMIZE_MODE_ALL)flags |= DEXOPT_OPT_ALL;}if (gDvm.classVerifyMode != VERIFY_MODE_NONE) {flags |= DEXOPT_VERIFY_ENABLED;if (gDvm.classVerifyMode == VERIFY_MODE_ALL)flags |= DEXOPT_VERIFY_ALL;}if (isBootstrap)flags |= DEXOPT_IS_BOOTSTRAP;if (gDvm.generateRegisterMaps)flags |= DEXOPT_GEN_REGISTER_MAPS;sprintf(values[9], "%d", flags);argv[curArg++] = values[9];assert(((!kUseValgrind && curArg == kFixedArgCount) ||((kUseValgrind && curArg == kFixedArgCount+kValgrindArgCount))));ClassPathEntry* cpe;for (cpe = gDvm.bootClassPath; cpe->ptr != NULL; cpe++) {argv[curArg++] = cpe->fileName;}assert(curArg == argc);argv[curArg] = NULL;if (kUseValgrind)execv(kValgrinder, const_cast<char**>(argv));elseexecv(execFile, const_cast<char**>(argv));ALOGE("execv '%s'%s failed: %s", execFile,kUseValgrind ? " [valgrind]" : "", strerror(errno));exit(1);} else {ALOGV("DexOpt: waiting for verify+opt, pid=%d", (int) pid);int status;pid_t gotPid;/** 等待優化過程完成。我們進入VMI等待* 模式,這樣GC暫停就不必等待我們了。*/ThreadStatus oldStatus = dvmChangeStatus(NULL, THREAD_VMWAIT);while (true) {gotPid = waitpid(pid, &status, 0);if (gotPid == -1 && errno == EINTR) {ALOGD("waitpid interrupted, retrying");} else {break;}}dvmChangeStatus(NULL, oldStatus);if (gotPid != pid) {ALOGE("waitpid failed: wanted %d, got %d: %s",(int) pid, (int) gotPid, strerror(errno));return false;}if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {ALOGD("DexOpt: --- END '%s' (success) ---", lastPart);return true;} else {ALOGW("DexOpt: --- END '%s' --- status=0x%04x, process failed",lastPart, status);return false;}} }
二、/bin/dexopt 源碼分析
dex 文件優化 , 主要是調用 /bin/dexopt 程序 , 最終產生 odex 文件 ;
其源碼路徑是 /dalvik/dexopt/ 路徑 ,
該 OptMain.cpp 源碼是一個有 main 函數 , 可以獨立執行的 C++ 程序 , 可以在 Android 命令中執行 ;
加載 dex 文件時 , 執行 fromDex 函數 ;
return fromDex(argc, argv);在 fromfromDex 函數中 , 先準備優化環境 ,
if (dvmPrepForDexOpt(bootClassPath, dexOptMode, verifyMode, flags) != 0) {ALOGE("VM init failed");goto bail;}然后進行正式優化 ;
/* do the optimization */if (!dvmContinueOptimization(fd, offset, length, debugFileName,modWhen, crc, (flags & DEXOPT_IS_BOOTSTRAP) != 0)){ALOGE("Optimization failed");goto bail;}真正的優化操作 , 在 dvmContinueOptimization 函數中執行的 ;
核心源碼如下 : 源碼路徑 /dalvik/dexopt/OptMain.cpp
/** Copyright (C) 2008 The Android Open Source Project** Licensed under the Apache License, Version 2.0 (the "License");* you may not use this file except in compliance with the License.* You may obtain a copy of the License at** http://www.apache.org/licenses/LICENSE-2.0** Unless required by applicable law or agreed to in writing, software* distributed under the License is distributed on an "AS IS" BASIS,* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.* See the License for the specific language governing permissions and* limitations under the License.*//** 命令行DEX優化和驗證入口點。* * 有三種方法可以啟動此功能:* (1)來自虛擬機。這需要十幾個參數,其中一個是文件* 同時作為輸入和輸出的描述符。這使我們能夠* 仍然不知道DEX數據最初來自何處。* (2)來自installd或其他本機應用程序。傳入文件* 用于zip文件的描述符、用于輸出的文件描述符,以及* 調試消息的文件名。關于這一點,人們做了許多假設* 發生了什么(驗證+優化已啟用,啟動* 類路徑位于BOOTCLASSPATH中,等等)。* (3)在構建過程中在主機上進行預優化。這種行為* 與(2)幾乎相同,只是它采用文件名而不是* 文件描述符。* * bootclasspath條目存在一些脆弱的方面,原因如下* 很大程度上是由于虛擬機在它認為需要的時候進行工作的歷史* 而不是嚴格按照要求去做。如果優化引導類路徑* 條目,始終按照它們在路徑中出現的順序執行。*/ #include "Dalvik.h" #include "libdex/OptInvocation.h"#include "cutils/log.h" #include "cutils/process_name.h"#include <fcntl.h> #include <stdbool.h> #include <stdlib.h> #include <stdio.h> #include <string.h>static const char* kClassesDex = "classes.dex";/* *將zipFd中的“classes.dex”提取到“cacheFd”中,留下一點空間 *用于DEX優化收割臺的前端。 */ static int extractAndProcessZip(int zipFd, int cacheFd,const char* debugFileName, bool isBootstrap, const char* bootClassPath,const char* dexoptFlagStr) {ZipArchive zippy;ZipEntry zipEntry;size_t uncompLen;long modWhen, crc32;off_t dexOffset;int err;int result = -1;int dexoptFlags = 0; /* bit flags, from enum DexoptFlags */DexClassVerifyMode verifyMode = VERIFY_MODE_ALL;DexOptimizerMode dexOptMode = OPTIMIZE_MODE_VERIFIED;memset(&zippy, 0, sizeof(zippy));/* make sure we're still at the start of an empty file */if (lseek(cacheFd, 0, SEEK_END) != 0) {ALOGE("DexOptZ: new cache file '%s' is not empty", debugFileName);goto bail;}/**編寫骨架索引優化標頭。我們要上課。指數*緊跟其后。*/err = dexOptCreateEmptyHeader(cacheFd);if (err != 0)goto bail;/* record the file position so we can get back here later */dexOffset = lseek(cacheFd, 0, SEEK_CUR);if (dexOffset < 0)goto bail;/**打開zip存檔,找到DEX條目。*/if (dexZipPrepArchive(zipFd, debugFileName, &zippy) != 0) {ALOGW("DexOptZ: unable to open zip archive '%s'", debugFileName);goto bail;}zipEntry = dexZipFindEntry(&zippy, kClassesDex);if (zipEntry == NULL) {ALOGW("DexOptZ: zip archive '%s' does not include %s",debugFileName, kClassesDex);goto bail;}/**提取一些關于zip條目的信息。*/if (dexZipGetEntryInfo(&zippy, zipEntry, NULL, &uncompLen, NULL, NULL,&modWhen, &crc32) != 0){ALOGW("DexOptZ: zip archive GetEntryInfo failed on %s", debugFileName);goto bail;}uncompLen = uncompLen;modWhen = modWhen;crc32 = crc32;/**以當前偏移量將DEX數據提取到緩存文件中。*/if (dexZipExtractEntryToFile(&zippy, zipEntry, cacheFd) != 0) {ALOGW("DexOptZ: extraction of %s from %s failed",kClassesDex, debugFileName);goto bail;}/* Parse the options. */if (dexoptFlagStr[0] != '\0') {const char* opc;const char* val;opc = strstr(dexoptFlagStr, "v="); /* verification */if (opc != NULL) {switch (*(opc+2)) {case 'n': verifyMode = VERIFY_MODE_NONE; break;case 'r': verifyMode = VERIFY_MODE_REMOTE; break;case 'a': verifyMode = VERIFY_MODE_ALL; break;default: break;}}opc = strstr(dexoptFlagStr, "o="); /* optimization */if (opc != NULL) {switch (*(opc+2)) {case 'n': dexOptMode = OPTIMIZE_MODE_NONE; break;case 'v': dexOptMode = OPTIMIZE_MODE_VERIFIED; break;case 'a': dexOptMode = OPTIMIZE_MODE_ALL; break;case 'f': dexOptMode = OPTIMIZE_MODE_FULL; break;default: break;}}opc = strstr(dexoptFlagStr, "m=y"); /* register map */if (opc != NULL) {dexoptFlags |= DEXOPT_GEN_REGISTER_MAPS;}opc = strstr(dexoptFlagStr, "u="); /* uniprocessor target */if (opc != NULL) {switch (*(opc+2)) {case 'y': dexoptFlags |= DEXOPT_UNIPROCESSOR; break;case 'n': dexoptFlags |= DEXOPT_SMP; break;default: break;}}}/**準備VM并執行優化。*/if (dvmPrepForDexOpt(bootClassPath, dexOptMode, verifyMode,dexoptFlags) != 0){ALOGE("DexOptZ: VM init failed");goto bail;}//vmStarted = 1;/* do the optimization */if (!dvmContinueOptimization(cacheFd, dexOffset, uncompLen, debugFileName,modWhen, crc32, isBootstrap)){ALOGE("Optimization failed");goto bail;}/* we don't shut the VM down -- process is about to exit */result = 0;bail:dexZipCloseArchive(&zippy);return result; }/* *普通設備端處理的通用功能以及 *預優化。 */ static int processZipFile(int zipFd, int cacheFd, const char* zipName,const char *dexoptFlags) {char* bcpCopy = NULL;/** Check to see if this is a bootstrap class entry. If so, truncate* the path.*/const char* bcp = getenv("BOOTCLASSPATH");if (bcp == NULL) {ALOGE("DexOptZ: BOOTCLASSPATH not set");return -1;}bool isBootstrap = false;const char* match = strstr(bcp, zipName);if (match != NULL) {/**TODO:我們有一個部分字符串匹配,但這并不意味著*我們已經匹配了整個路徑組件。我們應該確保*我們正在匹配完整的zipName,如果不是*應從(匹配+1)開始重新執行strstr。**該場景將是一個bootclasspath,具有以下內容*“/system/framework/core.jar”,而我們正在嘗試優化*“/framework/core.jar”。不太可能,因為所有路徑都是*絕對,以“.jar”結尾,但并非不可能。*/int matchOffset = match - bcp;if (matchOffset > 0 && bcp[matchOffset-1] == ':')matchOffset--;ALOGV("DexOptZ: found '%s' in bootclasspath, cutting off at %d",zipName, matchOffset);bcpCopy = strdup(bcp);bcpCopy[matchOffset] = '\0';bcp = bcpCopy;ALOGD("DexOptZ: truncated BOOTCLASSPATH to '%s'", bcp);isBootstrap = true;}int result = extractAndProcessZip(zipFd, cacheFd, zipName, isBootstrap,bcp, dexoptFlags);free(bcpCopy);return result; }/* advance to the next arg and extract it */ #define GET_ARG(_var, _func, _msg) \{ \char* endp; \(_var) = _func(*++argv, &endp, 0); \if (*endp != '\0') { \ALOGE("%s '%s'", _msg, *argv); \goto bail; \} \--argc; \}/* *解析參數。我們希望: * 0. (dexopt命令的名稱--已忽略) * 1. “--zip” * 2. zip fd(輸入,只讀) * 3. 緩存fd(輸出、讀寫、用群集鎖定) * 4. 正在優化的zipfile的文件名(用于調試消息和 *用于與BOOTCLASSPATH進行比較;不需要 *可訪問或甚至存在) * 5. dexopt標志 * *假定BOOTCLASSPATH環境變量包含正確的 *引導類路徑。如果提供的文件名出現在引導類中 *路徑,路徑將在該條目之前被截斷(因此,如果 *如果您選擇dexopt“core.jar”,您的引導類路徑將為空)。 * *這不會嘗試規范化引導類路徑名,因此 *如果你有創意,文件名測試不會抓住你。 */ static int fromZip(int argc, char* const argv[]) {int result = -1;int zipFd, cacheFd;const char* zipName;char* bcpCopy = NULL;const char* dexoptFlags;if (argc != 6) {ALOGE("Wrong number of args for --zip (found %d)", argc);goto bail;}/* skip "--zip" */argc--;argv++;GET_ARG(zipFd, strtol, "bad zip fd");GET_ARG(cacheFd, strtol, "bad cache fd");zipName = *++argv;--argc;dexoptFlags = *++argv;--argc;result = processZipFile(zipFd, cacheFd, zipName, dexoptFlags);bail:return result; }/* *分析預優化運行的參數。這是dalvikvm運行的時間 *在主機上優化dex文件,以便最終在主機上運行(不同) *裝置。我們希望: * 0. (dexopt命令的名稱--已忽略) * 1. “--preopt” * 2. zipfile名稱 * 3. 輸出文件名 * 4. dexopt標志 * *假定BOOTCLASSPATH環境變量包含正確的 *引導類路徑。如果提供的文件名出現在引導類中 *路徑,路徑將在該條目之前被截斷(因此,如果 *如果您選擇dexopt“core.jar”,您的引導類路徑將為空)。 * *這不會嘗試規范化引導類路徑名,因此 *如果你有創意,文件名測試不會抓住你。 */ static int preopt(int argc, char* const argv[]) {int zipFd = -1;int outFd = -1;int result = -1;if (argc != 5) {/** Use stderr here, since this variant is meant to be called on* the host side.*/fprintf(stderr, "Wrong number of args for --preopt (found %d)\n",argc);return -1;}const char* zipName = argv[2];const char* outName = argv[3];const char* dexoptFlags = argv[4];if (strstr(dexoptFlags, "u=y") == NULL &&strstr(dexoptFlags, "u=n") == NULL){fprintf(stderr, "Either 'u=y' or 'u=n' must be specified\n");return -1;}zipFd = open(zipName, O_RDONLY);if (zipFd < 0) {perror(argv[0]);return -1;}outFd = open(outName, O_RDWR | O_EXCL | O_CREAT, 0666);if (outFd < 0) {perror(argv[0]);goto bail;}result = processZipFile(zipFd, outFd, zipName, dexoptFlags);bail:if (zipFd >= 0) {close(zipFd);}if (outFd >= 0) {close(outFd);}return result; }/* *直接從VM解析“舊式”調用的參數。 * *以下是我們想要的: * 0. (dexopt命令的名稱--已忽略) * 1. “--dex” * 2. DALVIK_VM_構建值,作為一種健全性檢查 * 3. 文件描述符,用flock鎖定,用于正在優化的DEX文件 * 4. 文件內的索引偏移量 * 5. 指數長度 * 6. 正在優化的文件的文件名(僅適用于調試消息) * 7. 源的修改日期(進入依賴項部分) * 8. 源的CRC(進入依賴項部分) * 9. 標志(優化級別,isBootstrap) * 10. bootclasspath條目#1 * 11. bootclasspath條目#2 * ... * *dalvik/vm/analysis/DexOptimize中的dvmOptimizeDexFile()。c構建 *參數列表并調用此可執行文件。 * *bootclasspath條目將成為此DEX文件的依賴項。 * *打開的文件描述符不能用于任何bootclasspath文件。 *父項已鎖定描述符,我們將嘗試再次將其鎖定 *處理引導類路徑的一部分。(我們可以抓住這個然后回來 *比較文件名或打開bootclasspath文件時出錯 *并統計它們的索引節點編號)。 */ static int fromDex(int argc, char* const argv[]) {int result = -1;bool vmStarted = false;char* bootClassPath = NULL;int fd, flags, vmBuildVersion;long offset, length;const char* debugFileName;u4 crc, modWhen;char* endp;bool onlyOptVerifiedDex = false;DexClassVerifyMode verifyMode;DexOptimizerMode dexOptMode;if (argc < 10) {/* don't have all mandatory args */ALOGE("Not enough arguments for --dex (found %d)", argc);goto bail;}/* skip "--dex" */argc--;argv++;/** Extract the args.*/GET_ARG(vmBuildVersion, strtol, "bad vm build");if (vmBuildVersion != DALVIK_VM_BUILD) {ALOGE("DexOpt: build rev does not match VM: %d vs %d",vmBuildVersion, DALVIK_VM_BUILD);goto bail;}GET_ARG(fd, strtol, "bad fd");GET_ARG(offset, strtol, "bad offset");GET_ARG(length, strtol, "bad length");debugFileName = *++argv;--argc;GET_ARG(modWhen, strtoul, "bad modWhen");GET_ARG(crc, strtoul, "bad crc");GET_ARG(flags, strtol, "bad flags");ALOGV("Args: fd=%d off=%ld len=%ld name='%s' mod=%#x crc=%#x flg=%d (argc=%d)",fd, offset, length, debugFileName, modWhen, crc, flags, argc);assert(argc > 0);if (--argc == 0) {bootClassPath = strdup("");} else {int i, bcpLen;char* const* argp;char* cp;bcpLen = 0;for (i = 0, argp = argv; i < argc; i++) {++argp;ALOGV("DEP: '%s'", *argp);bcpLen += strlen(*argp) + 1;}cp = bootClassPath = (char*) malloc(bcpLen +1);for (i = 0, argp = argv; i < argc; i++) {int strLen;++argp;strLen = strlen(*argp);if (i != 0)*cp++ = ':';memcpy(cp, *argp, strLen);cp += strLen;}*cp = '\0';assert((int) strlen(bootClassPath) == bcpLen-1);}ALOGV(" bootclasspath is '%s'", bootClassPath);/* start the VM partway *//* ugh -- upgrade these to a bit field if they get any more complex */if ((flags & DEXOPT_VERIFY_ENABLED) != 0) {if ((flags & DEXOPT_VERIFY_ALL) != 0)verifyMode = VERIFY_MODE_ALL;elseverifyMode = VERIFY_MODE_REMOTE;} else {verifyMode = VERIFY_MODE_NONE;}if ((flags & DEXOPT_OPT_ENABLED) != 0) {if ((flags & DEXOPT_OPT_ALL) != 0)dexOptMode = OPTIMIZE_MODE_ALL;elsedexOptMode = OPTIMIZE_MODE_VERIFIED;} else {dexOptMode = OPTIMIZE_MODE_NONE;}// 準備優化環境 if (dvmPrepForDexOpt(bootClassPath, dexOptMode, verifyMode, flags) != 0) {ALOGE("VM init failed");goto bail;}vmStarted = true;/* 正式進行優化 */if (!dvmContinueOptimization(fd, offset, length, debugFileName,modWhen, crc, (flags & DEXOPT_IS_BOOTSTRAP) != 0)){ALOGE("Optimization failed");goto bail;}result = 0;bail:/**理論上,此時我們應該優雅地關閉VM。在里面*只有當我們使用檢查內存泄漏時,這才有意義*valgrind——簡單地退出要快得多。**事實證明,DEX優化器有點快,有點松*使用類加載。我們從一個部分-*形成的DEX文件,完成后將取消映射。如果我們想*在這里進行清潔關機,可能是為了使用valgrind進行測試,我們需要*要跳過那里的munmap調用。*/ #if 0if (vmStarted) {ALOGI("DexOpt shutting down, result=%d", result);dvmShutdown();} #endiffree(bootClassPath);ALOGV("DexOpt command complete (result=%d)", result);return result; }/* *主要入口點。決定去哪里。 */ int main(int argc, char* const argv[]) {set_process_name("dexopt");setvbuf(stdout, NULL, _IONBF, 0);if (argc > 1) {if (strcmp(argv[1], "--zip") == 0)return fromZip(argc, argv);else if (strcmp(argv[1], "--dex") == 0)// 加載 dex 文件時 , 執行 fromDex 函數return fromDex(argc, argv);else if (strcmp(argv[1], "--preopt") == 0)return preopt(argc, argv);}fprintf(stderr,"Usage:\n\n""Short version: Don't use this.\n\n""Slightly longer version: This system-internal tool is used to\n""produce optimized dex files. See the source code for details.\n");return 1; }源碼路徑 : /dalvik/dexopt/OptMain.cpp
總結
以上是生活随笔為你收集整理的【Android 逆向】整体加固脱壳 ( DEX 优化流程分析 | DexPrepare.cpp 中 dvmOptimizeDexFile() 方法分析 | /bin/dexopt 源码分析 )的全部內容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: 【Android 逆向】整体加固脱壳 (
- 下一篇: 【Android 逆向】整体加固脱壳 (