List of issuesList of issues

#116 Can't decompile a class / Obfuscated code
Author: user focus
Date created:
Type: bug
Visibility: Everybody
Assigned to:
Labels: AS3Obfuscated
State: closed Help

> What steps will reproduce the problem? - Open attached swf file - navigate here http://i.imgur.com/4LykSAQ.png - see decompilation goes for ever > What is the expected output? What do you see instead? decompiled code > What version of the product are you using? On what operating system? 1.6.2 > Please provide any additional information below. Attach the file you have problem with if neccessary. If you do not want to publish files YOU CAN CHANGE VISIBILITY TO PRIVATE
Downloadpandagunshop-c.swf (4,338 KiB)
user
same for this file: http://i.imgur.com/y4lcNj4.png
Downloadgame.swf (1,284 KiB)
admin
I have bad news and good news. Bad news: The first file is highly obfuscated. Current algorithm of deobfuscation in FFDec cannot handle all classes of this file properly - it just freezes. Maybe I can take a look on it in the future, but this time it has low priority (other issues first, sorry) Good news: The second file decompilation will be possible in the next FFDec release (stay tuned), I made some changes to the code. Next time, please create separate issue for each SWF, thank you.
State: new→opened
user
Sure, thanks!
admin
version 1.6.3 released try it for the second file
State: opened→upgraded
user
Yeah, works with second file now! Thanks!
admin
okay, I am setting status to Paused. Maybe I come back later and open it to fix the first file deobfuscation.
State: upgraded→postponed
user
Yeah, thanks, that would be really awesome.
user
Here is protector used at pandagunshop for your reference and tests: http://zero.flashwing.net/FlashShiled/
admin
Title: Can't decompile a class→Can't decompile a class / Obfuscated code
user
I see current version have no infinite decompilation for 1st file, but decompilation results are not so nice: package { import flash.display.MovieClip; public dynamic class do{ -numChildr�en; }while(mouseEnabled �|� ��framesLoaded) extends MovieClip { public function do{ -numChildr�en; }while(mouseEnabled �|� ��framesLoaded)() { super(); return; } } }
user
Hey, looks like this issue is fixed now, 1.7.0 is able to decompile as in both swfs!
admin
Are you sure? I can see StackOverFlowError in "/pub?lic var? mouseChildre?n;TimelineM?arker.complete" for pandagunshop-c file.
user
Oh, you're right, I didn't noticed it last time =\ And looks like P-Code deobfuscation fails too - I see Please wait... for a long time after executing it. *sigh*
user
Now FFDec just freezing while trying to decompile main class of any SWF protected with this obfuscator.
user
Don't know what newest versions have done but have completely broken functionality. Everything results in a cannot decompile error now, and the one thing I can edit ends up producing NaN errors.
developer
Please could you attach your swf?
developer
layola: What is the problem in this file? I can see only 2 classes, and do decompilation errors, but the swf is obfuscated, so the methodnames looks like this: "§ʠ]§", it is normal. I tried it with the latest nightly, so if you have other problems with this swf, please try the latest nightly.
developer
do decompilation errors = NO decompilation errors
user
layola: Here is your file.
Download333.swf (3,826 KiB)
user
Hello please help me decompile swf file. thanks
Downloadx7_lenluon.swf (385 KiB)
admin
vnchats: Please create new issue here: issues/new/ Each SWF file should have its own issue. Thank you!
developer
And specify which script is not decompiled corretly. Also please try the latest nightly.
admin
In nightly 1269, the situation for pandagunshop is way better I think. It is still uncompilable by standard compiler since it has §§push, §§pop somewhere, but the decompilation if FFDec should be ok. Try it, if you're still interested :-)
State: postponed→upgraded
user
Great results! Glad to see you're improving deobfuscation features of the FFDec. Thank you.
admin
Yes, we did a big improvements since 2013 :-).
State: upgraded→closed
 
Google Translate: Translate to Czech Translate to Slovak Translate to Russian Translate to Hungarian Translate to Swedish Translate to French Translate to German Translate to Spanish Translate to Italian
Change style: oceanic classic