MG1937/rust_ASC

rust_ASC is a one-to-one Rust port of MG1937/ASC, the Python implementation of ASC. The Rust implementation preserves the corresponding source layout, data structures, control flow, function roles, and runtime behavior while targeting substantially lower command-line latency and memory overhead.

On the reported CLI workloads below, rust_ASC is approximately 10× faster than the Python ASC implementation. It remains stateless: no preprocessing is required before a query, and it writes no persistent cache to disk.

Repository links:

• Python reference implementation: MG1937/ASC
• Rust implementation: MG1937/rust_ASC
• Full-APK pseudocode exporter: MG1937/radguard

• Search code references for strings, types, methods, and fields across every DEX in an APK.
• Locate and decompile one class directly from an APK.
• List classes and decode AndroidManifest.xml.
• Export pseudocode for every class in an APK with the public API of MG1937/radguard.
• Handle multi-DEX APKs and DEX 041 logical containers.
• Use memory-mapped APK access and no on-disk cache.

cargo build --release

The executable is written to:

target/release/rust_ASC

On Windows, the executable name is rust_ASC.exe.

Thread control is consistent across getclass, listclass, findrefs, and export:

• Use only --thread <N>.
• Put --thread immediately after the subcommand.
• If omitted, the command uses the number returned by Rust's available_parallelism() API.

# Search every code reference to a string.
rust_ASC findrefs --thread 10 --debug app.apk string https://

# Search a type, method, or field.
rust_ASC findrefs --thread 10 app.apk type com.example.Main
rust_ASC findrefs --thread 10 app.apk method onCreate --class com.example.Main
rust_ASC findrefs --thread 10 app.apk field apiKey --class com.example.Main

# Decompile one class from an APK.
rust_ASC getclass --thread 10 --debug app.apk com.example.Main
rust_ASC getclass --thread 10 app.apk com.example.Main -o Main.java

# List all classes, optionally filtered by package/class prefix.
rust_ASC listclass --thread 10 app.apk
rust_ASC listclass --thread 10 --prefix com.example app.apk

# Decode AndroidManifest.xml.
rust_ASC getmanifest app.apk -o AndroidManifest.xml

# Export pseudocode for every class to the required output directory.
rust_ASC export --thread 10 --debug app.apk output

export writes one .java pseudocode file per class under package-relative paths in the output directory. Its multi-threaded APK export pipeline is supplied by MG1937/radguard. With --debug, it reports the APK export lifecycle and worker activity.

The following measurements use CLI commands with no cache, no preprocessing, and direct searches of every code reference to the string https://.

• CLI string-reference search: search all code references to https:// directly from the APK, without cache or preprocessing.
• CLI single-class decompile: locate and decompile the named class directly from the APK.
• Persistent cache: disk cache written by the tool after command completion.

Full-APK pseudocode export is provided through MG1937/radguard's public export_to_directory API and uses its shared parallel APK export pipeline. The following benchmark fully decompiles TencentQQ.apk (383 MB, 41 DEX files).

The worker count is a global export budget. The exporter overlaps APK/DEX processing with class decompilation while bounding per-DEX concurrent class work.

Licensed under the Apache License, Version 2.0.