search

AngeloD2022 / jsxer

Jsxer is a fast and accurate decompiler for Adobe ExtendScript Binary (JSXBIN) files, featuring JSXBlind deobfuscation.
GNU General Public License v3.0
157 stars 25 forks source link

Fail to decompile + examples #128

Open chameleonuser opened 7 months ago

chameleonuser commented 7 months ago

Hello.

While some files decompile with no issue, some fail at all with a variety of errors. See attached examples.

Thanks examples_jsx.zip

AngeloD2022 commented 7 months ago

Can you verify for me that these scripts are valid and work when ran?

chameleonuser commented 7 months ago

Yes, they do, these are not some random files.

AngeloD2022 commented 7 months ago

Can you give me some of the background on these files? Do you know what purpose they serve/if they are deliberately obfuscated/malicious?

chameleonuser commented 7 months ago

They are parts of working plugins (different) and look like obfuscated, but some other JSX from the same plugins do decompile normally, so I can not tell exactly. And they are not a virus or stuff like that.

chameleonuser commented 6 months ago

A bit of update here. I've tried opening that examples I've sent you with Adobe ExtendScript Toolkit to find out whatever is possible. And there is a result. 1) File 20P2 could be opened and "exported as binary" (kinda again?) After that it was decompiled with Jsxer w/o errors. I'm sending you .jsxbin exported with ESTk and decompiled variant of that initial file from my 1st msg. 2) The other 2 files from the example couldn't be "exported as binary" as well as not able to run for debug with no visible errors. 3) Looks like all plugins' files from which 202P was originally taken, could be converted via 1) solution, but when I put them back to plugin folder, some functions of the plugin cause errors in Photoshop. Nevertheless, it's at least something, I hope. 20P2.jsx.txt 20P2.jsxbin.txt P.S. Remove .txt ⬆️

AngeloD2022 commented 6 months ago

Interesting. Did ESTK actually let you open a jsxbin file and export it again as a binary file? That's strange.