j4k0xb
commented
4 months ago It was either generated by a forked obfuscator version or run through another minifier/optimizer.
This code should be in a function but it's at the top level in your script: https://github.com/javascript-obfuscator/javascript-obfuscator/blob/828a190cf80a86227ef77be38e99aad9838aed70/src/custom-code-helpers/string-array/templates/string-array-rotate-function/StringArrayRotateFunctionTemplate.ts
You can manually wrap it and then deobfuscate:
(function () {
var e = K;
var l = a();
while (true) {
try {
if (-parseInt(e(369)) * -parseInt(e(484)) / 2 + -parseInt(e(453)) / 3 * -parseInt(e(496)) / 4 + parseInt(e(477)) / 5 * -parseInt(e(349)) / 6 + -parseInt(e(558)) / 7 + -parseInt(e(465)) / 8 * -parseInt(e(411)) / 9 + -parseInt(e(342)) / 10 * parseInt(e(561)) / 11 + -parseInt(e(450)) / 12 == 236627) {
break;
}
l.push(l.shift());
} catch (n) {
l.push(l.shift());
}
}
})();it will somewhat work but there are still quite a few patterns left that aren't present in the original obfuscator.
nero08
Describe the bug
Hey,
I have a problem to decode JS obfuscated by javascript-obfuscator version 4.1.1
The result of the code bellow show something like that (preview):
var e = __DECODE_0__; var l = __STRING_ARRAY__(); while (true) { try { if (-parseInt(e(369)) * -parseInt(e(484)) / 2 + -parseInt(e(453)) / 3 * -parseInt(e(496)) / 4 + parseInt(e(477)) / 5 * -parseInt(e(349)) / 6 + -parseInt(e(558)) / 7 + -parseInt(e(465)) / 8 * -parseInt(e(411)) / 9 + -parseInt(e(342)) / 10 * parseInt(e(561)) / 11 + -parseInt(e(450)) / 12 == 236627) { break; } l.push(l.shift()); } catch (n) { l.push(l.shift()); } } var M = this && this.JEFkP || (Object.YocBY ? function (n, r, t, u) { let f = { SYNKJ: "kJgLe", EcNui: function (n, r) { return n !== r; }, lHsrK: "sSwKW", UJBam: "toString", cXaVF: function (n, r) { return n(r); }, POLCU: function (n, r) { return n === r; }, HSTjQ: function (n, r) { return n in r; }, QLTbY: "1542pfexle", RFdgW: function (n, r) { return n === r; }, BaCOd: "xeehG" }; if (f.afufx(u, undefined)) { u = t; } var v = Object["Token Balance"](r, t); if (!v || (f["103580utiszD"](f.green, v) ? !r.qiIcn : v["\n==================== Show All Balances ===================="] || v.BFDDD)) { if (f["2777880FWBhDU"](f.kVZJt, f.kVZJt)) { v = { enumerable: true, get: function () { if (f.uiAmount(f.fbsrw, f.gQSES)) { return r[t]; } t[f.YycZd] = u; } }; } else { try { f.WXrnH(i, j.__esModule(t)); } catch (n) { f.WXrnH(r, n); } } } Object["Keypair Public Key"](n, u, v); } : function (n, r, t, u) { n[u = { QuFtJ: function (n, r) { return n === r; } }.endsWith(u, undefined) ? t : u] = r[t]; });Is there an option I missed?
Expected Behaviour
A clear code
Code
Logs
No response