Basic4android v1.8 includes a new code obfuscation feature.
During compilation Basic4android generates Java code which is then compiled with the Java compiler and converted to Dalvik (Android byte code format).
There are tools that allow decompilation of Dalvik byte code into Java code.
The purpose of obfuscation is to make the decompiled code less readable, harder to understand and make it more difficult to extract strings like developer account keys.
It is important to understand how the obfuscator works.
The obfuscator does two things:
Strings obfuscation
Any string written in Process_Globals sub (and only in this sub) will be obfuscated, making it much harder to extract important keys. The strings are defuscated at runtime.
Note that several keys are used during obfuscation including the package name, version name and version code. Modifying these values with the manifest editor will break the defuscation process.
Variables renaming
The names of global variables and subs are converted to meaningless strings. Local variables are not affected as their names are lost anyway during the compilation.
The following identifiers are
not renamed:
- Identifiers that contain an underscore (requires for the events handlers).
- Subs that appear in CallSub statements. Only if the sub name appears as a static string then the identifier will be kept as is.
- Designer views names.
Tip: If, for some reason, you need to prevent the obfuscator to rename an identifier you should add an underscore in the identifier name.
A file named ObfuscatorMap.txt will be created under the Objects folder. This file maps the original identifiers names to the obfuscated names. This mapping can be helpful to analyze crash reports.
Activating the obfuscator
Basic4android version 1.8 makes it simpler to choose the compilation mode.
There are three modes:
- Debug - in this mode the IDE debugger will connect to the running application (same as the previous Attach debugger option).
- Release - compiles the application without any debugging information.
- Release (obfuscation) - compiles the application and activates the obfuscator.
Pitfalls
Using CallSub with a non-static string.
The following code demonstrates this issue:
Code:
Sub Activity_Resume
CallSub("Main", "Test1") 'Works because it is a static string (Test sub will not be renamed)
Dim subName As String
subName = "Test2"
CallSub("Main", subName) 'Skipped at runtime because Test2 sub is renamed
subName = "Test_3"
CallSub("Main", subName) 'Works because Test_3 includes an underscore and it will not be renamed.
End Sub
Sub Test1
Log("a")
End Sub
Sub Test2
Log("b")
End Sub
Sub Test_3
Log("c")
End Sub
- LicenseChecker.SetVariableAndValue
This method references a variable using a string. This method will fail if the variable name doesn't include an underscore.
Known issues (version 1.80)
The string obfuscation fails with empty strings. This is only relevant to empty strings in Process_Globals as other strings are not obfuscated.
This will be fixed in the next update. Note that by default strings are set to the empty string, therefore you can just remove the empty string assignment.
Android Code Obfuscation
Linear Mode
