Bytecode analysis for everyone!
summary
Automated analyzer parses APK/AAB and extracts DEX to list ~10,000+ classes, uses D8/R8 metadata and APK Parser plus retrace to turn 400–500MB proguard maps into readable names, computes set diffs between builds and build types, and enforces CI quality gates that fail on unexpected additions (caught a stray test dependency) or missing classes (R8 inlining removed a tiny helper). The tool is implemented as a pipeline stage, it deobfuscates with retrace deobfuscation and reports human-readable deltas from APK/AAB parsing + Dex extraction, and it works in CI.
AI-written summary · about
chapters (8)
- 0:00Introduction to Android builds
- 1:31How Android code is compiled
- 3:11R8 and code optimization
- 5:51Common build pitfalls
- 9:45Tools for binary inspection
- 12:00Analyzing APK classes
- 15:45Diffing and obfuscation
- 22:02Quality gates and conclusion
related talks
39mDespaghettifying the hairball
41mDigging into D8 and R8
35mUnderstanding the Kotlin to Dalvik bytecode translation
31mDABiD: The Powerful Interactive Android Debugger for Android Malware Analysis
27mDiffusing Changes in your APK
41mTrueseeing: Effective Dataflow Analysis over Dalvik Opcodes
49mAll Your Code Belongs To Us (Dismantling Android Secrets With CodeInspect)
25mConsiderate App Update Delivery