Menu
I work for a government contractor that is really picky about what software gets installed on their machines (US government laws). As part of a reverse engineering effort, I need to figure out what a certain set of .class files do. A decompiler would be really helpful, but I can't seem to find one that meets the standards set here. Basically, I need to find a decompiler that was developed in the United States. Anyone know of any? Free is preferred, but commercial will do.
FYI, JAD and JD are out as they are not developed in the US.
411
class without source default to Class Decompiler Viewer . Now, click on the class or methods, press F3 , and the plugin will automatically decompile the Java class.
Short answer: 99% of the time, decompiled code will not look like the original code, but it should behave the same way.
I'd inform your employer that putting preconditions on where the software comes from isn't going to protect them, and it's not going to get them what they want. The U.S. competes in a global economy and in the global internet. It sounds a little childish of them to think that they gain any advantage or security from not installing software that works. Part of being a good employee, designer, or programmer is helping your client realize their limitations and overcome them. You should help them to greater success.
157
What about installing "unapproved" software on a VM?
31
It scares me when I hear this type of nonsense eminating from my own government.
Run jad -p, recompile the source and compare the compiled class with the origional class file.
You can run jad on a throwaway computer/VM instance. If there is reasonable agreement on the compiled class you know the software functioned properly.
29
I figured that I should answer this since nothing provided worked. I ended up solving the requirements by using javap, guessing a lot, and banging my head against the desk until it worked. javap didn't give me much of what I needed, since it called a lot of native code. Eventually, I got what I needed using the tried and true guess and check method.
There really needs to be a decompiler. Maybe Sun (Oracle) can make one...
21
I'm assuming that you can't move the .class files off of the machine and on to a lab machine where you can install JAD?
I work with the government as well and if a particular piece of software is critical to the success of your project, you need to communicate that to your PM, who will then communicate that to his or her government counterpart. After that, there should be a checklist for your IA assessors to follow to approve that piece of software.
42
Procyon is all-American, it is developed by Mike Strobel. According to Mike's profile page, he is in Manhattan.
28
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
