Decompile without loading the class file into the JVM

[meiMingle]

Through studying the code, it seems that the premise of this decompiler's work is to correctly load the target class into the JVM, which is very dangerous for studying class files containing malicious code. And in most cases, it is very difficult to load the target class file into the JVM due to missing dependencies. Is there a way to make the decompiler work without loading the clss file into the JVM?

[teletha]

This decompiler was originally developed as a Java (bytecode) to Javascript transpiler. Now, by splitting the mechanism into Decompiler and (Re)Compiler, it is used as a runtime transpiler for JS, CSS, and SQL.

Currently, there is no way to get it to behave the way you want it to. Reincarnation makes heavy use of reflection-related classes (Class, Method, Field, etc.) as metadata holder.

To break the dependency on the Java's core-reflection would require a major overhaul that would require re-implementation of all the proprietary reflection types.

As for missing dependencies, the current implementation just throws an error and aborts the process. Therefore, it may be possible to provide an option to continue processing as an unresolved type.

However, there should be no problem with malicious code as it is configured not to initialize when loading classes.