T34292 /show/ So, I did an experiment.

Thread 34292

Age: 24.64d Health: 45.62% Posters: 4 Posts: 5 Replies: 4 Files: 1+1

Anonymous 2jun2025(mo)20:32 No.104372 OP P1

So, I did an experiment.

I opened Unyl_is_love.swf in SA Flash Player and did "Create Project", thus getting an .exe file (player + flash).

Then, I used the "exe2swf" program to extract the .swf file from this .exe, but I got a different swf than I had originally. The file size was different:
Original flash Unyl_is_love.swf: 364 KB (373,322 bytes)
After conversion swf -> exe -> swf: 367 KB (376,002 bytes)

Then I thought that the "exe2swf" program was not working correctly and used the Flash Convert 1.0 program (unregistered version), and then did the same: did Create Project, got an exe, and now using Flash Convert 1.0 I extracted the swf from the exe again. And again I got a file of 367 KB (376,002 bytes), which is 2680 bytes different from the original file.

Why is that?

What software should I use to correctly extract swf from exe?

And I have extracted so many flashes from exe..! I have had Flash Convert 1.0 since 2004... It turns out that for many years it has been extracting flashes incorrectly.

Why I noticed this: flashes that I took from the DaniMult Web Archive sometimes survived in two versions - swf and exe. I found that the regular swf versions differed in size from swf extracted from exe.

It is interesting that despite the different sizes, sometimes swfchan considered them the same (and VirusTotal - different), sometimes swfchan accepted them as new flashes.

So what software should I use to correctly extract swf from exe?

help .swf (9.5 KiB)
640x480, Compressed (Deflate). 80 frames, 12 fps (00:07).
Ver8, AS1/AS2. Network access: No. Text: Yes.
Bitmaps: No. Audio: No. Video: No.
[find in archive]

Anonymous 2jun2025(mo)21:07 No.104374 A ~~P2R1 >>104375~~

I've only used "Sothink EXE to SWF Extractor", but that was many years ago.
https://www.sothink.com/product/flashdecompiler/h elp/extractor.htm
It's part of "Sothink SWF Decompiler" which wasn't free back in the day, I don't know if it has been made free or not but it doesn't seem like it. They can't have that many customers these days.

I searched and found that you can download it from Internet Archive:
https://archive.org/details/sothink-swf-decompile r-74
Look on the right side for a blue ZIP link.

The main decompiler program seems to be a trial version but included is also EXE2SWFExtractor.exe inside the Tools folder, which maybe isn't a trial version? I've not checked but if you want to you can try extracting the .swf file with that program.

Anonymous 2jun2025(mo)21:21 No.104375 OP ~~P3R2~~

It has been experimentally shown that, it seems, Flashes of version 6 do not change the file size when converting swf -> exe -> swf, while versions 7 and 8 do change the file size. But if take a swollen flashy and convert swf -> exe -> swf again, the file size does not change anymore, it remains swollen, but the same.

>>104374
Thank you!

Anonymous 4jun2025(we)14:49 No.104398 B ~~P4R3~~

Did you check compression? The converter switching to a different algorithm would be my first and only guess.

Anonymous 15jun2025(su)10:36 No.104477 C ~~P5R4~~

I've just found two versions of humor_pong.swf. One is 156678 bytes and was downloaded from /f/, the other is 157598 bytes and was downloaded from this site's /show/. The difference is 920 bytes. The swfchan archive, when I search by filesize, resolves both to flash #7440 and serves the 156678 byte version. ffdec says both are 156678 bytes. It turned out that the larger flash had some trailing data with a JFIF magic number. I copied that to a new file, opened it in an image viewer and it was a 87x60 image with a crusty 13x13 Flash logo in the middle over a black background.
Could the extractor have kept the executable's icon?

Send Bitcoin (BCH):		hide
Send Bitcoin (BTC):		discuss