{"action":"created","issue":{"url":"https://api.github.com/repos/bunnyblue/DexExtractor/issues/4","labels_url":"https://api.github.com/repos/bunnyblue/DexExtractor/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/bunnyblue/DexExtractor/issues/4/comments","events_url":"https://api.github.com/repos/bunnyblue/DexExtractor/issues/4/events","html_url":"https://github.com/bunnyblue/DexExtractor/issues/4","id":119648335,"number":4,"title":"脱壳时需要的问题","user":{"login":"heeeeen","id":1645206,"avatar_url":"https://avatars.githubusercontent.com/u/1645206?v=3","gravatar_id":"","url":"https://api.github.com/users/heeeeen","html_url":"https://github.com/heeeeen","followers_url":"https://api.github.com/users/heeeeen/followers","following_url":"https://api.github.com/users/heeeeen/following{/other_user}","gists_url":"https://api.github.com/users/heeeeen/gists{/gist_id}","starred_url":"https://api.github.com/users/heeeeen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/heeeeen/subscriptions","organizations_url":"https://api.github.com/users/heeeeen/orgs","repos_url":"https://api.github.com/users/heeeeen/repos","events_url":"https://api.github.com/users/heeeeen/events{/privacy}","received_events_url":"https://api.github.com/users/heeeeen/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-12-01T05:59:20Z","updated_at":"2015-12-01T06:30:46Z","closed_at":null,"body":"你好！我遇到一个爱加密的壳（病毒样本见http://yunpan.cn/cLFwtMMNrJxes （提取码：db94） ）脱壳时始终提示如下。\r\n\r\nD/dalvikvm( 1140): DexOpt: --- END 'android.support.v8-2.apk' (success) ---\r\nD/dalvikvm( 1140): DEX prep '/data/app/android.support.v8-2.apk': unzip in 2ms,\r\nrewrite 1260ms\r\nE/dalvikvm( 1140): --pacthed--  inject  .dex length 5312\r\nE/dalvikvm( 1140): --pacthed-- , /sdcard/android.support.v8_classes_5312.dex\r\nE/dalvikvm( 1140): --pacthed--  debug dalvikParse   find dex try write file\r\nE/dalvikvm( 1140): Unable to delete the file\r\nE/dalvikvm( 1140): --pacthed-- , can't create file ! maybe  you need mount sdcar\r\nd again!\r\nE/dalvikvm( 1140): Permission denied data dey\r\nE/dalvikvm( 1140): 036\r\nE/dalvikvm( 1140): --pacthed--  inject  .dex length 457984\r\nE/dalvikvm( 1140): --pacthed-- , /sdcard/android.support.v8_classes_457984.dex\r\nE/dalvikvm( 1140): --pacthed--  debug dalvikParse   find dex try write file\r\nE/dalvikvm( 1140): Unable to delete the file\r\nE/dalvikvm( 1140): --pacthed-- , can't create file ! maybe  you need mount sdcar\r\nd again!\r\nE/dalvikvm( 1140): Permission denied data dex\r\nE/dalvikvm( 1140): 035\r\n\r\n而我确实是用-sdcard参数启动的，已确认/sdcard目录可写，/sdcard目录已经生成了一些系统产生的dex，如下。\r\ncom.android.mms_classes_827344.dex\r\ncom.android.music_classes_239800.dex\r\ncom.android.phone_classes_102768.dex\r\ncom.android.phone_classes_737976.dex\r\ncom.android.providers.calendar_classes_189496.dex\r\ncom.android.providers.calendar_classes_390032.dex\r\ncom.android.settings_classes_1555704.dex\r\ncom.android.systemui_classes_513216.dex\r\ncom.svox.pico_classes_18544.dex\r\n。。。。\r\n不知是因为我配置的原因，还是壳的原因。谢谢！\r\n"},"comment":{"url":"https://api.github.com/repos/bunnyblue/DexExtractor/issues/comments/160869366","html_url":"https://github.com/bunnyblue/DexExtractor/issues/4#issuecomment-160869366","issue_url":"https://api.github.com/repos/bunnyblue/DexExtractor/issues/4","id":160869366,"user":{"login":"bunnyblue","id":1221755,"avatar_url":"https://avatars.githubusercontent.com/u/1221755?v=3","gravatar_id":"","url":"https://api.github.com/users/bunnyblue","html_url":"https://github.com/bunnyblue","followers_url":"https://api.github.com/users/bunnyblue/followers","following_url":"https://api.github.com/users/bunnyblue/following{/other_user}","gists_url":"https://api.github.com/users/bunnyblue/gists{/gist_id}","starred_url":"https://api.github.com/users/bunnyblue/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bunnyblue/subscriptions","organizations_url":"https://api.github.com/users/bunnyblue/orgs","repos_url":"https://api.github.com/users/bunnyblue/repos","events_url":"https://api.github.com/users/bunnyblue/events{/privacy}","received_events_url":"https://api.github.com/users/bunnyblue/received_events","type":"User","site_admin":false},"created_at":"2015-12-01T06:30:46Z","updated_at":"2015-12-01T06:30:46Z","body":"应该是壳的原因"}}