Comments on: Reverse-engineering and deobfuscation of Flash apps http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/ Code and miscellanea Mon, 12 Dec 2011 23:20:16 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Mick the Wig http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-25398 Mick the Wig Sat, 03 Dec 2011 23:02:11 +0000 http://blog.thecybershadow.net/?p=80#comment-25398 You, Sir, are a gentleman. These tools have made my life much easier and have almost resolved My SWF Hell. . Bestios etc. You, Sir, are a gentleman. These tools have made my life much easier and have almost resolved My SWF Hell. .

Bestios etc.

]]> By: Cyber clone http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-13019 Cyber clone Fri, 15 Apr 2011 13:43:02 +0000 http://blog.thecybershadow.net/?p=80#comment-13019 Hello and again many Thanks for you're hard work add into this project, much appreciated. I can't download the swf above. But Good news is, That the new version of RABCDAsm did the job alright version 1.5 Rocks. regards, Cyberclone Hello and again many Thanks for you’re hard work add into this project, much appreciated.

I can’t download the swf above.

But Good news is, That the new version of RABCDAsm did the job alright version 1.5 Rocks.

regards,

Cyberclone

]]> By: CyberShadow http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-12925 CyberShadow Thu, 14 Apr 2011 02:21:37 +0000 http://blog.thecybershadow.net/?p=80#comment-12925 Is <a href="http://www.king.com/practice_games/CandyCrush.swf" rel="nofollow">this</a> the SWF file you meant? It only has one DoABC tag... Is this the SWF file you meant? It only has one DoABC tag…

]]> By: CyberShadow http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-12924 CyberShadow Thu, 14 Apr 2011 01:23:40 +0000 http://blog.thecybershadow.net/?p=80#comment-12924 Wow, I've never encountered a SWF file with more than 2-3 DoABC tags. I'm not sure where the problem could be. Can you send me the SWF file? Wow, I’ve never encountered a SWF file with more than 2-3 DoABC tags. I’m not sure where the problem could be. Can you send me the SWF file?

]]> By: Cyber clone http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-12162 Cyber clone Sun, 03 Apr 2011 11:42:20 +0000 http://blog.thecybershadow.net/?p=80#comment-12162 Hello Cybershadow. Thanks for all your hard work here. I've a swf file after abcexport, you get like 600+.abc file. rabcasm swfname600/swfname600.main.asasm abcreplace CandyCrush.swf 600 swfname600/swfname600.main.abc result into a broking swf. any Idee what can be wrong here ? Hello Cybershadow.
Thanks for all your hard work here.

I’ve a swf file after abcexport, you get like 600+.abc file.

rabcasm swfname600/swfname600.main.asasm
abcreplace CandyCrush.swf 600 swfname600/swfname600.main.abc

result into a broking swf.
any Idee what can be wrong here ?

]]> By: CyberShadow http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-10296 CyberShadow Thu, 03 Mar 2011 17:32:24 +0000 http://blog.thecybershadow.net/?p=80#comment-10296 Hi Jesse, Since the code is partially a derivative work of the Flex SDK, it's subject to the SDK's redistribution terms. You may also want to have a look at RABCDAsm. Hi Jesse,

Since the code is partially a derivative work of the Flex SDK, it’s subject to the SDK’s redistribution terms.

You may also want to have a look at RABCDAsm.

]]> By: Jesse Nicholson http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-10295 Jesse Nicholson Thu, 03 Mar 2011 17:27:56 +0000 http://blog.thecybershadow.net/?p=80#comment-10295 Hi There, Just wanted to say, big, big thanks for this. I want to know if you're making this code just plain public domain or under any type of license, or, if I need permission to use it in an application? I've literally been at my computer for 13 hours straight digging through websites, tutorials etc on different ways to properly extract ABC from current swf versions (There are many solutions that modify the ABC to be human readable, etc). The most promising route was downloading tamarin source, building it out and using it to compile ABCDump, but that for some ridiculous reason just would not work out. I had it working in the past but, they've done a lot of restructuring to the tamarin branches and I think it's ongoing, and has broken some things. Anyway let me know, huge thanks for your work, once I got the source I was up and running with a packed jar working in a couple minutes. Great stuff! Hi There,

Just wanted to say, big, big thanks for this. I want to know if you’re making this code just plain public domain or under any type of license, or, if I need permission to use it in an application? I’ve literally been at my computer for 13 hours straight digging through websites, tutorials etc on different ways to properly extract ABC from current swf versions (There are many solutions that modify the ABC to be human readable, etc). The most promising route was downloading tamarin source, building it out and using it to compile ABCDump, but that for some ridiculous reason just would not work out. I had it working in the past but, they’ve done a lot of restructuring to the tamarin branches and I think it’s ongoing, and has broken some things. Anyway let me know, huge thanks for your work, once I got the source I was up and running with a packed jar working in a couple minutes. Great stuff!

]]> By: CyberShadow http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-10152 CyberShadow Tue, 01 Mar 2011 09:44:50 +0000 http://blog.thecybershadow.net/?p=80#comment-10152 No, this is specifically for the ActionScript 3 Virtual Machine. You can use Flasm to disassemble AS2. No, this is specifically for the ActionScript 3 Virtual Machine. You can use Flasm to disassemble AS2.

]]> By: George Morbedadze http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-10151 George Morbedadze Tue, 01 Mar 2011 09:34:03 +0000 http://blog.thecybershadow.net/?p=80#comment-10151 Hi CyberShadow, I have the question: can I use it for AS2, or adjast for AS2? Hi CyberShadow,
I have the question: can I use it for AS2, or adjast for AS2?

]]> By: CyberShadow http://blog.thecybershadow.net/2010/02/12/reverse-engineering-and-deobfuscation-of-flash-apps/comment-page-1/#comment-10024 CyberShadow Sun, 27 Feb 2011 07:57:24 +0000 http://blog.thecybershadow.net/?p=80#comment-10024 Read the documentation carefully. Read the documentation carefully.

]]>