Increased stack size; Fixed string deob

joekav · Feb 21, 2024 · 7fec71d · 7fec71d
1 parent 57e45b0
commit 7fec71d
Show file tree

Hide file tree

Showing 14 changed files with 17,325 additions and 6,508 deletions.
diff --git a/deobfuscate/assets/bracket_to_dot_notation.js b/deobfuscate/assets/bracket_to_dot_notation.js
diff --git a/deobfuscate/assets/in.js b/deobfuscate/assets/in.js
diff --git a/deobfuscate/assets/out_bracket_dot1.js b/deobfuscate/assets/out_bracket_dot1.js
diff --git a/deobfuscate/assets/out_final.js b/deobfuscate/assets/out_final.js
diff --git a/deobfuscate/assets/out_hex.js b/deobfuscate/assets/out_hex.js
diff --git a/deobfuscate/assets/out_string_concatenation.js b/deobfuscate/assets/out_string_concatenation.js
diff --git a/deobfuscate/assets/out_string_decode.js b/deobfuscate/assets/out_string_decode.js
diff --git a/deobfuscate/index.js b/deobfuscate/index.js
@@ -4,32 +4,34 @@ const t = require('@babel/types');
 const fs = require('fs');
 const generate = require('@babel/generator').default;
 const traverseHexStrings = require('./transformers/hex.js');
-const stringDeobfuscation = require('./transformers/stringDeob.js');
-const deobBinaryExpressionStrings = require('./transformers/binaryExpressionStrings.js');
+// const stringDeobfuscation = require('./transformers/stringDeob.js');
+// const deobBinaryExpressionStrings = require('./transformers/binaryExpressionStrings.js');
 const bracketToDot = require('./transformers/bracketToDot.js');
+const stringDeobfuscationV2 = require('./transformers/stringDeob_v2.js');
+const stringConcatenation = require('./transformers/stringConcatenation.js');
 
 const obfuscatedCode = fs.readFileSync('./assets/in.js', 'utf8');
 const ast = babel.parseSync(obfuscatedCode);
 
-
 console.log("Hexadecimal encoding")
 traverseHexStrings(ast);
 fs.writeFileSync('./assets/out_hex.js', generate(ast).code);
 
+console.log("Bracket to dot notation");
+bracketToDot(ast);
+fs.writeFileSync("./assets/bracket_to_dot_notation.js", generate(ast).code);
 
-console.log("Deobfuscating strings")
-stringDeobfuscation(ast)
+console.log("Deobfuscating strings");
+stringDeobfuscationV2(ast);
 fs.writeFileSync('./assets/out_string_decode.js', generate(ast).code);
 
-
-console.log("Deobfuscating binary expressions")
-deobBinaryExpressionStrings(ast);
-fs.writeFileSync('./assets/out_binary_expressions.js', generate(ast).code);
+console.log("Concatenating strings");
+stringConcatenation(ast);
+fs.writeFileSync("./assets/out_string_concatenation.js", generate(ast).code);
 
 console.log("Converting bracket notation to dot notation")
 bracketToDot(ast);
-fs.writeFileSync('./assets/out_bracket_dot.js', generate(ast).code);
-
+fs.writeFileSync('./assets/out_bracket_dot1.js', generate(ast).code);
 
 const { code } = babel.transformFromAstSync(ast);