[gorilla.maguila]

The decompiled “_a_-_---.as” from JPEXS doesn't make much sense at least for me. I've been playing with the deobfuscated functions/classes from JPEXS in a flex compiler and the result is that:

(Following the flow of)

if(evt.info.secureToken != undefined)
{
       this._connection.call("secureTokenResponse",null,TEA.decrypt(evt.info.secureToken,_a_-_---._a_--_--(-1820302793)));
}

After function:

public static function _a_--_--(param1:int) : String {
         var _loc2_:* = false;
         var _loc3_:* = true;
         if(!_a_-___-)
         {
            _a_-_--();
         }
         return _a_-____[param1 ^ _a_--];
      }

receives the integer -1820302793 and then calls:

private static function _a_-_--() : void {
         var _loc7_:* = false;
         var _loc8_:* = true;
         var _loc1_:ByteArray = new _a_--_-() as ByteArray;
         var _loc2_:ByteArray = new _a_--_() as ByteArray;
         var _loc3_:ByteArray = new _a_-__() as ByteArray;
         _loc3_.endian = Endian.LITTLE_ENDIAN;
         _a_-- = _loc3_.readInt();
         var _loc4_:int = _loc2_.readByte();
         var _loc5_:* = 0;
         while(_loc5_ < _loc4_)
         {
            _a_-__-_(_loc2_);
            _loc5_++;
         }
         _loc4_ = _loc1_.readInt();
         var _loc6_:* = 0;
         while(_loc6_ < _loc4_)
         {
            _a_--__(_loc1_,_a_----[_loc6_ % _a_----.length]);
            _loc6_++;
         }
         _a_-___- = true;
      }

the execution fails miserably at:

 _a_-- = _loc3_.readInt();

As var _loc3_ is empty. Maybe JPEXS doesn't decompile the file in a proper way or maybe I'm missing something...

Next thing I'll try it's dissamble-->assemble with https://github.com/CyberShadow/RABCDAsm.

Ideas Welcome.