thegeneralist01/twitter-tid-deobf-fork
1
Fork 0
mirror of https://github.com/thegeneralist01/twitter-tid-deobf-fork synced 2026-03-07 12:39:55 +01:00
Code Issues Activity

add fork

Browse source 
Signed-off-by: ふぁ <yuki@yuki0311.com>
This commit is contained in:
ふぁ 2025-04-27 16:17:22 +09:00
parent 158be14d87
commit 6f2c23b582
No known key found for this signature in database
GPG key ID: 83A8A5E74872A8AA
1 changed files with 34 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

55
deobf-fork.js
View file

@ -234,20 +234,9 @@ const replaceWeirdProxyCall = {
) { ) {
return; return;
} }
let values = [ let values = node.property.arguments.map((e) => generate(e).code);
generate(node.property.arguments[0]).code, let order = node.property.callee.params.map((p) => p.name);
generate(node.property.arguments[1]).code,
generate(node.property.arguments[2]).code,
generate(node.property.arguments[3]).code,
generate(node.property.arguments[4]).code,
];
let order = [
node.property.callee.params[0].name,
node.property.callee.params[1].name,
node.property.callee.params[2].name,
node.property.callee.params[3].name,
node.property.callee.params[4].name,
];
let newArgs = []; let newArgs = [];
for ( for (
var i = 0; var i = 0;
@ -417,9 +406,11 @@ const deobfStrings = {
let binding = path.scope.getBinding(node.callee.name); let binding = path.scope.getBinding(node.callee.name);
if (!binding) { if (!binding) {
// ! hopefully no binding will always mean that the function in question is `r`??? // ! hopefully no binding will always mean that the function in question is `r`???
path.replaceWith( try {
t.valueToNode(vm.runInContext(generate(node).code, decryptFuncCtx)) path.replaceWith(
); t.valueToNode(vm.runInContext(generate(node).code, decryptFuncCtx))
);
} catch {}
return; return;
} }
// ! loop until we get to a place where we can't get a binding (aka hopefully the root function) // ! loop until we get to a place where we can't get a binding (aka hopefully the root function)
@ -434,12 +425,28 @@ const deobfStrings = {
} }
code += generate(binding.path.node).code + "\n"; code += generate(binding.path.node).code + "\n";
path.scope.crawl(); path.scope.crawl();
binding = binding.path.scope.getBinding( for (const body of binding.path.node.body.body) {
binding.path.node.body.body[0].argument.callee.name if (body.type == "ReturnStatement") {
); if (body.argument.type == "CallExpression") {
binding = binding.path.scope.getBinding(body.argument.callee.name);
} else if (body.argument.type == "SequenceExpression") {
binding = undefined;
}
} else if (body.type == "VariableDeclaration") {
path.scope.crawl();
binding.scope.crawl();
binding = binding.path.scope.getBinding(
body.declarations[0].init.callee.name
);
code += generate(binding.path.node).code + "\n";
binding = undefined;
}
}
} }
// ! now we should have all the code we need // ! now we should have all the code we need
path.replaceWith(t.valueToNode(vm.runInContext(code, decryptFuncCtx))); try {
path.replaceWith(t.valueToNode(vm.runInContext(code, decryptFuncCtx)));
} catch (e) {}
}, },
}; };
@ -540,6 +547,9 @@ const objDeobfMemberExpr = {
key = node.property.value; key = node.property.value;
} }
let value = map[key]; let value = map[key];
if (value === undefined) {
return;
}
if (value.type == "StringLiteral") { if (value.type == "StringLiteral") {
path.replaceWith(value); path.replaceWith(value);
return; return;
@ -577,6 +587,9 @@ const objDeobfMemberExpr = {
key = node.callee.property.value; key = node.callee.property.value;
} }
let value = map[key]; let value = map[key];
if (value === undefined) {
return;
}
// ! replace functions // ! replace functions
let retNode = value.body.body[0].argument; let retNode = value.body.body[0].argument;
// ! call expression // ! call expression