Or, you can also look at
http://www.ghostwire.com/blog/archives/as3-applying-rot128-encryption-on-embeddedmodule-swfs/

Does anyone know how this could be implemented in Flex? I have a “main” flex project/application that loads a module (from a separate project) into the main flex project at runtime. I am able to encrypt/obfuscate the main application using secureSWF, but the modules…which end up being separate swfs in the air package don’t get encrypted as well. It seems that these obfuscators only encrypt the main swf files. I even extracted all files from the air app via unzipping and obfuscated the module file swf and then recompiled/repackaged the air app via ADT fine with no errors. However, when I after I successfully install and run the air application, the module that gets loaded into the main application does not function. I am assuming at this point that the main flex swf can no longer interpret the module swf that it is trying to load because it has been altered via obfuscation?

Anyone know how to handle this? To obfuscate or encrypt a module that is a separate flex project? I only know of nitro-lm so far, but I want to see if anyone has a workaround to this maybe even using the above code, but just don’t know how to implement this in my flex module?

Thanks!

Encrypting the SWF is also not equivalent to obfuscating the source code. The encrytion does not even have to be complicated – even if you just corrupt a few bytes and not the whole SWF, it will be good enough to prevent automated extraction.

However, I do not agree in a slightest with “taking it further” part, because it is now not so simple and the ratio of effort to effect is much worse, see this thread http://board.flashkit.com/board/showthread.php?t=767745 – it took me probably 10 minutes to restore his SWF.

A reasonable and acceptable compromise between simple embedding and messing up with SWF bytes would be base64 since not only it has ready codes for en/de-cryption, but also does not require you to use Flex SDK and does not compile useless Flex classes into your SWF.

Personally, I still think C-like preprocessor like the one linked to from post in 1st link is the best way to obfuscate your code. And there are, of course, commercial tools that do this job better.

It should stop lots of hackers.