Reverse Engineering Flash [closed]

Question

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.

I have some Flash SWF files that I need some insight into how they are working. Are they any good tools out there to reverse engineer a SWF file?

Thanks.

Answer 1

Disassemble the SWF with Flasm.

Note: Only works for flash 8 or earlier unfortunately.

SWFTools might give you some information as well about the SWF files. They seem to be much more recent.

Answer 2

As someone constantly working with SWF file format and ActionScript 2 and 3 bytecode, I highly recommend ASV. Unlike other decompilers, it has been designed to look into SWF files, not just convert them to FLA.

Also, you will need to read the following documents:

SWF File Format Specs v10

AVM2 Overview

Answer 3

I hate to give the "just google it" answer, but it really is that simple if you know what terms to use.

Answer 4

FWIW: I have created an ActionScript 3 (dis-)assembler (which allows you to assemble back modified code, even for obfuscated files). It is similar in functionality to flasm, however it targets the AVM (used in newer Flash versions), and works directly with the AS bytecode rather than entire SWF files. To edit the rest of the file, you could use a tool such as SWiX.

Answer 5

In addition to grabbing a Flash decompiler, you may want to read the SWF File Format Specification docs.

Answer 6

I personally use Trillix's Flash decompiler. It does the job I want it to do. But it's paid software, I use a demo version over and over (I only use it like 10 times a year).

Answer 7

Sothink Flash Decompiler is also pretty decent, and rants pretty good on CNET's list of downloaded decompilers.

Answer 8

I've had lots of luck working with AVE Imperator at http://www.ave-imperator.com/

It has helped me even get working actionscript to go along with the elements inside. It has more than one method of decompiling too, so often you can tweak the way you're decompiling it to get what you need.