This initial implementation is enabled for dex only. It will be made available for native code in a future release. The initial database is relatively compact. Mostly, it contains signatures for the latest JAR and AAR libraries commonly used in APKs, such as Androidx.<\/p>\n\n\n\n
Keep in mind code matching cannot guarantee accurate results in all cases! To ensure a low false-positive rate, the code matching module reports top-score matches only. Thresholds can be changed in the options.<\/p>\n\n\n\n So, how to best-use this feature in your workflow?<\/p>\n\n\n\n When you start a new project, we recommend running a Global Analysis, with the code matching option enabled.<\/p>\n\n\n\n When this toggle is enabled, after the analysis completes, high-score matches will be applied:<\/p>\n\n\n\n By default, code matching also happens transparently when you decompile code via the GUI.<\/p>\n\n\n\n Detected matches will be placed as method comments in the decompiled Java code.<\/p>\n\n\n\n In scripts and plugins, the code matching facility can be accessed via methods of Match objects may also be set and retrieved through We intend to tweak the code matching system over the next few releases, to ensure a low rate of false positives while maintaining a decent amount of true positive detections.<\/p>\n\n\n\n The code signing process may also evolve and require adjustments. 1<\/a><\/sup> Once it has stabilized, likely in the next couple of releases, we will consider the inclusion of transparent auto-signing for all code being analyzed. It will allow users to better leverage their reverse-engineering efforts across different projects, e.g. receive hints about code they’ve already worked on, at what time, etc.<\/p>\n\n\n\n The code matching system will also be made available to the native code analysis pipeline via gendec shortly. We will keep you posted. Consider following us on X<\/a> or join our Slack<\/a> channel if you haven’t done so.<\/p>\n\n\n\n —<\/p>\n\n\n\n Until next time & thanks again for your support – Nicolas \ud83d\ude42<\/p>\n\n\n Our March 2026 release (JEB 5.38) ships with a transparent, flexible and fast code matching facility: This initial implementation is enabled for dex only. It will be made available for native code in a future release. The initial database is relatively compact. Mostly, it contains signatures for the latest JAR and AAR libraries commonly used … Continue reading Mutation-Resistant Library Code Matching<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[],"class_list":["post-5088","post","type-post","status-publish","format-standard","hentry","category-jeb5"],"_links":{"self":[{"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/5088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/comments?post=5088"}],"version-history":[{"count":27,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/5088\/revisions"}],"predecessor-version":[{"id":5118,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/posts\/5088\/revisions\/5118"}],"wp:attachment":[{"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/media?parent=5088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/categories?post=5088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pnfsoftware.com\/blog\/wp-json\/wp\/v2\/tags?post=5088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/www.pnfsoftware.com\/blog\/wp-content\/uploads\/2026\/02\/image-scaled.png\")
<\/a>Project-wide global analysis<\/h2>\n\n\n\n
\n
Auto-matching when decompiling<\/h2>\n\n\n\n
<\/a>\n
.parsers.dcmp_dex.CodeMatchSetting <\/code>option to Disabled<\/em> (0).<\/li>\n\n\n\nAPI for scripting<\/h2>\n\n\n\n
IDexDecompilerUnit<\/a><\/code>:<\/p>\n\n\n\n\n
etc.<\/li>\n<\/ul>\n\n\n\nIDexUnit<\/a><\/code>:<\/p>\n\n\n\n\n
etc.<\/li>\n<\/ul>\n\n\n\nFuture updates<\/h2>\n\n\n\n