@jshookmcp/jshook 0.1.2

package/dist/modules/deobfuscator/AdvancedDeobfuscator.ast.js

@@ -0,0 +1,347 @@
+import * as parser from '@babel/parser';
+import generate from '@babel/generator';
+import traverse from '@babel/traverse';
+import * as t from '@babel/types';
+import { logger } from '../../utils/logger.js';
+export function derotateStringArray(code) {
+    logger.info('Derotating string array...');
+    try {
+        const ast = parser.parse(code, {
+            sourceType: 'module',
+            plugins: ['jsx', 'typescript'],
+        });
+        let derotated = 0;
+        traverse(ast, {
+            CallExpression(path) {
+                if (!t.isFunctionExpression(path.node.callee) && !t.isArrowFunctionExpression(path.node.callee)) {
+                    return;
+                }
+                const func = path.node.callee;
+                if (!t.isFunctionExpression(func) || !t.isBlockStatement(func.body)) {
+                    return;
+                }
+                const hasWhileLoop = func.body.body.some((stmt) => t.isWhileStatement(stmt));
+                const hasArrayRotation = JSON.stringify(func.body).includes('push') && JSON.stringify(func.body).includes('shift');
+                if (hasWhileLoop && hasArrayRotation) {
+                    logger.debug('Found string array rotation IIFE');
+                    path.remove();
+                    derotated++;
+                }
+            },
+        });
+        if (derotated > 0) {
+            logger.info(`Removed ${derotated} string array rotation functions`);
+            return generate(ast, { comments: true, compact: false }).code;
+        }
+        return code;
+    }
+    catch (error) {
+        logger.error('Failed to derotate string array:', error);
+        return code;
+    }
+}
+export function removeDeadCode(code) {
+    logger.info('Removing dead code...');
+    try {
+        const ast = parser.parse(code, {
+            sourceType: 'module',
+            plugins: ['jsx', 'typescript'],
+        });
+        let removed = 0;
+        traverse(ast, {
+            IfStatement(path) {
+                const test = path.node.test;
+                if (t.isBooleanLiteral(test) && test.value === false) {
+                    if (path.node.alternate) {
+                        path.replaceWith(path.node.alternate);
+                    }
+                    else {
+                        path.remove();
+                    }
+                    removed++;
+                    return;
+                }
+                if (t.isBooleanLiteral(test) && test.value === true) {
+                    path.replaceWith(path.node.consequent);
+                    removed++;
+                    return;
+                }
+                if (t.isUnaryExpression(test) &&
+                    test.operator === '!' &&
+                    t.isUnaryExpression(test.argument) &&
+                    test.argument.operator === '!' &&
+                    t.isArrayExpression(test.argument.argument)) {
+                    path.replaceWith(path.node.consequent);
+                    removed++;
+                    return;
+                }
+            },
+            BlockStatement(path) {
+                const body = path.node.body;
+                let foundTerminator = false;
+                const newBody = [];
+                for (const stmt of body) {
+                    if (foundTerminator) {
+                        removed++;
+                        continue;
+                    }
+                    newBody.push(stmt);
+                    if (t.isReturnStatement(stmt) || t.isThrowStatement(stmt)) {
+                        foundTerminator = true;
+                    }
+                }
+                if (newBody.length < body.length) {
+                    path.node.body = newBody;
+                }
+            },
+        });
+        if (removed > 0) {
+            logger.info(`Removed ${removed} dead code blocks`);
+            return generate(ast, { comments: true, compact: false }).code;
+        }
+        return code;
+    }
+    catch (error) {
+        logger.error('Failed to remove dead code:', error);
+        return code;
+    }
+}
+export function removeOpaquePredicates(code) {
+    logger.info('Removing opaque predicates...');
+    try {
+        const ast = parser.parse(code, {
+            sourceType: 'module',
+            plugins: ['jsx', 'typescript'],
+        });
+        let removed = 0;
+        traverse(ast, {
+            IfStatement(path) {
+                const test = path.node.test;
+                if (t.isBinaryExpression(test)) {
+                    const left = test.left;
+                    const right = test.right;
+                    const operator = test.operator;
+                    if (t.isNumericLiteral(left) && t.isNumericLiteral(right)) {
+                        let result;
+                        switch (operator) {
+                            case '>':
+                                result = left.value > right.value;
+                                break;
+                            case '<':
+                                result = left.value < right.value;
+                                break;
+                            case '>=':
+                                result = left.value >= right.value;
+                                break;
+                            case '<=':
+                                result = left.value <= right.value;
+                                break;
+                            case '===':
+                            case '==':
+                                result = left.value === right.value;
+                                break;
+                            case '!==':
+                            case '!=':
+                                result = left.value !== right.value;
+                                break;
+                        }
+                        if (result !== undefined) {
+                            if (result) {
+                                path.replaceWith(path.node.consequent);
+                            }
+                            else if (path.node.alternate) {
+                                path.replaceWith(path.node.alternate);
+                            }
+                            else {
+                                path.remove();
+                            }
+                            removed++;
+                            return;
+                        }
+                    }
+                }
+                if (t.isBinaryExpression(test) && (test.operator === '===' || test.operator === '==')) {
+                    const left = test.left;
+                    const right = test.right;
+                    if (t.isBinaryExpression(left) &&
+                        left.operator === '*' &&
+                        t.isNumericLiteral(right) &&
+                        right.value === 0) {
+                        if ((t.isNumericLiteral(left.left) && left.left.value === 0) ||
+                            (t.isNumericLiteral(left.right) && left.right.value === 0)) {
+                            path.replaceWith(path.node.consequent);
+                            removed++;
+                        }
+                    }
+                }
+            },
+        });
+        if (removed > 0) {
+            logger.info(`Removed ${removed} opaque predicates`);
+            return generate(ast, { comments: true, compact: false }).code;
+        }
+        return code;
+    }
+    catch (error) {
+        logger.error('Failed to remove opaque predicates:', error);
+        return code;
+    }
+}
+export function decodeStrings(code) {
+    logger.info('Decoding strings...');
+    try {
+        const ast = parser.parse(code, {
+            sourceType: 'module',
+            plugins: ['jsx', 'typescript'],
+        });
+        let decoded = 0;
+        traverse(ast, {
+            CallExpression(path) {
+                if (t.isMemberExpression(path.node.callee) &&
+                    t.isIdentifier(path.node.callee.object, { name: 'String' }) &&
+                    t.isIdentifier(path.node.callee.property, { name: 'fromCharCode' })) {
+                    const numericArgs = path.node.arguments.filter((arg) => t.isNumericLiteral(arg));
+                    if (numericArgs.length === path.node.arguments.length) {
+                        const charCodes = numericArgs.map((arg) => arg.value);
+                        const decodedString = String.fromCharCode(...charCodes);
+                        path.replaceWith(t.stringLiteral(decodedString));
+                        decoded++;
+                    }
+                }
+            },
+        });
+        if (decoded > 0) {
+            logger.info(`Decoded ${decoded} string expressions`);
+            return generate(ast, { comments: false, compact: false }).code;
+        }
+        return code;
+    }
+    catch (error) {
+        logger.error('Failed to decode strings:', error);
+        return code;
+    }
+}
+export function applyASTOptimizations(code) {
+    logger.info('Applying AST optimizations...');
+    try {
+        const ast = parser.parse(code, {
+            sourceType: 'module',
+            plugins: ['jsx', 'typescript'],
+        });
+        let optimized = 0;
+        traverse(ast, {
+            BinaryExpression(path) {
+                const { left, right, operator } = path.node;
+                if (t.isNumericLiteral(left) && t.isNumericLiteral(right)) {
+                    let result;
+                    switch (operator) {
+                        case '+':
+                            result = left.value + right.value;
+                            break;
+                        case '-':
+                            result = left.value - right.value;
+                            break;
+                        case '*':
+                            result = left.value * right.value;
+                            break;
+                        case '/':
+                            result = left.value / right.value;
+                            break;
+                        case '%':
+                            result = left.value % right.value;
+                            break;
+                        case '**':
+                            result = Math.pow(left.value, right.value);
+                            break;
+                    }
+                    if (result !== undefined) {
+                        path.replaceWith(t.numericLiteral(result));
+                        optimized++;
+                    }
+                }
+            },
+            LogicalExpression(path) {
+                const { left, right, operator } = path.node;
+                if (operator === '&&' && t.isBooleanLiteral(left) && left.value === true) {
+                    path.replaceWith(right);
+                    optimized++;
+                }
+                if (operator === '||' && t.isBooleanLiteral(left) && left.value === false) {
+                    path.replaceWith(right);
+                    optimized++;
+                }
+            },
+            EmptyStatement(path) {
+                path.remove();
+                optimized++;
+            },
+            ConditionalExpression(path) {
+                const { test, consequent, alternate } = path.node;
+                if (t.isBooleanLiteral(test) && test.value === true) {
+                    path.replaceWith(consequent);
+                    optimized++;
+                }
+                if (t.isBooleanLiteral(test) && test.value === false) {
+                    path.replaceWith(alternate);
+                    optimized++;
+                }
+            },
+        });
+        if (optimized > 0) {
+            logger.info(`Applied ${optimized} AST optimizations`);
+            return generate(ast, { comments: true, compact: false }).code;
+        }
+        return code;
+    }
+    catch (error) {
+        logger.error('Failed to apply AST optimizations:', error);
+        return code;
+    }
+}
+export function estimateCodeComplexity(code) {
+    try {
+        const ast = parser.parse(code, {
+            sourceType: 'module',
+            plugins: ['jsx', 'typescript'],
+        });
+        let complexity = 0;
+        traverse(ast, {
+            FunctionDeclaration() {
+                complexity += 2;
+            },
+            FunctionExpression() {
+                complexity += 2;
+            },
+            ArrowFunctionExpression() {
+                complexity += 2;
+            },
+            IfStatement() {
+                complexity += 1;
+            },
+            SwitchStatement() {
+                complexity += 2;
+            },
+            ConditionalExpression() {
+                complexity += 1;
+            },
+            WhileStatement() {
+                complexity += 2;
+            },
+            ForStatement() {
+                complexity += 2;
+            },
+            DoWhileStatement() {
+                complexity += 2;
+            },
+            TryStatement() {
+                complexity += 3;
+            },
+        });
+        return complexity;
+    }
+    catch (err) {
+        logger.debug(`[AST] Complexity calculation failed, using fallback: ${err instanceof Error ? err.message : String(err)}`);
+        return 100;
+    }
+}
+//# sourceMappingURL=AdvancedDeobfuscator.ast.js.map

package/dist/modules/deobfuscator/AdvancedDeobfuscator.ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AdvancedDeobfuscator.ast.js","sourceRoot":"","sources":["../../../src/modules/deobfuscator/AdvancedDeobfuscator.ast.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,QAAQ,MAAM,kBAAkB,CAAC;AACxC,OAAO,QAA2B,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7B,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,QAAQ,CAAC,GAAG,EAAE;YACZ,cAAc,CAAC,IAAI;gBACjB,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChG,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC9B,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpE,OAAO;gBACT,CAAC;gBAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7E,MAAM,gBAAgB,GACpB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAE5F,IAAI,YAAY,IAAI,gBAAgB,EAAE,CAAC;oBACrC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;oBAEjD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACd,SAAS,EAAE,CAAC;gBACd,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,WAAW,SAAS,kCAAkC,CAAC,CAAC;YACpE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAErC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7B,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,QAAQ,CAAC,GAAG,EAAE;YACZ,WAAW,CAAC,IAA6B;gBACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAE5B,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;oBACrD,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;wBACxB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxC,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,CAAC;oBACD,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBACpD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACvC,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,IACE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBACzB,IAAI,CAAC,QAAQ,KAAK,GAAG;oBACrB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,GAAG;oBAC9B,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC3C,CAAC;oBACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACvC,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;YACH,CAAC;YAED,cAAc,CAAC,IAAgC;gBAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;gBAC5B,MAAM,OAAO,GAAkB,EAAE,CAAC;gBAElC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;oBACxB,IAAI,eAAe,EAAE,CAAC;wBACpB,OAAO,EAAE,CAAC;wBACV,SAAS;oBACX,CAAC;oBAED,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEnB,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1D,eAAe,GAAG,IAAI,CAAC;oBACzB,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;gBAC3B,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,mBAAmB,CAAC,CAAC;YACnD,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7B,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,QAAQ,CAAC,GAAG,EAAE;YACZ,WAAW,CAAC,IAA6B;gBACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAE5B,IAAI,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;oBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;oBAE/B,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC1D,IAAI,MAA2B,CAAC;wBAEhC,QAAQ,QAAQ,EAAE,CAAC;4BACjB,KAAK,GAAG;gCACN,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gCAClC,MAAM;4BACR,KAAK,GAAG;gCACN,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gCAClC,MAAM;4BACR,KAAK,IAAI;gCACP,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;gCACnC,MAAM;4BACR,KAAK,IAAI;gCACP,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;gCACnC,MAAM;4BACR,KAAK,KAAK,CAAC;4BACX,KAAK,IAAI;gCACP,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;gCACpC,MAAM;4BACR,KAAK,KAAK,CAAC;4BACX,KAAK,IAAI;gCACP,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;gCACpC,MAAM;wBACV,CAAC;wBAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;4BACzB,IAAI,MAAM,EAAE,CAAC;gCACX,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;4BACzC,CAAC;iCAAM,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gCAC/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;4BACxC,CAAC;iCAAM,CAAC;gCACN,IAAI,CAAC,MAAM,EAAE,CAAC;4BAChB,CAAC;4BACD,OAAO,EAAE,CAAC;4BACV,OAAO;wBACT,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;oBACtF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;oBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;oBAEzB,IACE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC;wBAC1B,IAAI,CAAC,QAAQ,KAAK,GAAG;wBACrB,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC;wBACzB,KAAK,CAAC,KAAK,KAAK,CAAC,EACjB,CAAC;wBACD,IACE,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;4BACxD,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,EAC1D,CAAC;4BACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;4BACvC,OAAO,EAAE,CAAC;wBACZ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,oBAAoB,CAAC,CAAC;YACpD,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7B,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,QAAQ,CAAC,GAAG,EAAE;YACZ,cAAc,CAAC,IAAgC;gBAC7C,IACE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBACtC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;oBAC3D,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EACnE,CAAC;oBACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAA2B,EAAE,CAC9E,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CACxB,CAAC;oBAEF,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;wBACtD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;wBACtD,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,CAAC;wBACxD,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;wBACjD,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,qBAAqB,CAAC,CAAC;YACrD,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7B,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,QAAQ,CAAC,GAAG,EAAE;YACZ,gBAAgB,CAAC,IAAkC;gBACjD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;gBAE5C,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1D,IAAI,MAA0B,CAAC;oBAE/B,QAAQ,QAAQ,EAAE,CAAC;wBACjB,KAAK,GAAG;4BACN,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;4BAClC,MAAM;wBACR,KAAK,GAAG;4BACN,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;4BAClC,MAAM;wBACR,KAAK,GAAG;4BACN,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;4BAClC,MAAM;wBACR,KAAK,GAAG;4BACN,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;4BAClC,MAAM;wBACR,KAAK,GAAG;4BACN,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;4BAClC,MAAM;wBACR,KAAK,IAAI;4BACP,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;4BAC3C,MAAM;oBACV,CAAC;oBAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;wBAC3C,SAAS,EAAE,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iBAAiB,CAAC,IAAmC;gBACnD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;gBAE5C,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBACzE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;oBACxB,SAAS,EAAE,CAAC;gBACd,CAAC;gBAED,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC1E,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;oBACxB,SAAS,EAAE,CAAC;gBACd,CAAC;YACH,CAAC;YAED,cAAc,CAAC,IAAgC;gBAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;YACd,CAAC;YAED,qBAAqB,CAAC,IAAuC;gBAC3D,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;gBAElD,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBACpD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;oBAC7B,SAAS,EAAE,CAAC;gBACd,CAAC;gBAED,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;oBACrD,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;oBAC5B,SAAS,EAAE,CAAC;gBACd,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,WAAW,SAAS,oBAAoB,CAAC,CAAC;YACtD,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7B,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,QAAQ,CAAC,GAAG,EAAE;YACZ,mBAAmB;gBACjB,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,kBAAkB;gBAChB,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,uBAAuB;gBACrB,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YAED,WAAW;gBACT,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,eAAe;gBACb,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,qBAAqB;gBACnB,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YAED,cAAc;gBACZ,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,YAAY;gBACV,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,gBAAgB;gBACd,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;YAED,YAAY;gBACV,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,wDAAwD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzH,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/modules/deobfuscator/AdvancedDeobfuscator.d.ts

@@ -0,0 +1,44 @@
+import { LLMService } from '../../services/LLMService.js';
+export interface AdvancedDeobfuscateOptions {
+    code: string;
+    detectOnly?: boolean;
+    aggressiveVM?: boolean;
+    useASTOptimization?: boolean;
+    timeout?: number;
+}
+export interface AdvancedDeobfuscateResult {
+    code: string;
+    detectedTechniques: string[];
+    confidence: number;
+    warnings: string[];
+    astOptimized?: boolean;
+    vmDetected?: {
+        type: string;
+        instructions: number;
+        deobfuscated: boolean;
+    };
+}
+export declare class AdvancedDeobfuscator {
+    private llm?;
+    private vmDeobfuscator;
+    constructor(llm?: LLMService);
+    deobfuscate(options: AdvancedDeobfuscateOptions): Promise<AdvancedDeobfuscateResult>;
+    private detectInvisibleUnicode;
+    private decodeInvisibleUnicode;
+    private detectControlFlowFlattening;
+    private unflattenControlFlow;
+    private detectStringArrayRotation;
+    private derotateStringArray;
+    private detectDeadCodeInjection;
+    private removeDeadCode;
+    private detectOpaquePredicates;
+    private removeOpaquePredicates;
+    private llmCleanup;
+    private normalizeCode;
+    private detectStringEncoding;
+    private decodeStrings;
+    private applyASTOptimizations;
+    private calculateConfidence;
+    private estimateCodeComplexity;
+}
+//# sourceMappingURL=AdvancedDeobfuscator.d.ts.map

package/dist/modules/deobfuscator/AdvancedDeobfuscator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AdvancedDeobfuscator.d.ts","sourceRoot":"","sources":["../../../src/modules/deobfuscator/AdvancedDeobfuscator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAelD,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;CACH;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,GAAG,CAAC,CAAa;IACzB,OAAO,CAAC,cAAc,CAAiB;gBAE3B,GAAG,CAAC,EAAE,UAAU;IAKtB,WAAW,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA2G1F,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,sBAAsB;IAqC9B,OAAO,CAAC,2BAA2B;YAKrB,oBAAoB;IAoBlC,OAAO,CAAC,yBAAyB;IAIjC,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,sBAAsB;YAIhB,UAAU;IAwBxB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,oBAAoB;IAK5B,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,mBAAmB;IA0C3B,OAAO,CAAC,sBAAsB;CAG/B"}

package/dist/modules/deobfuscator/AdvancedDeobfuscator.js

@@ -0,0 +1,253 @@
+import { logger } from '../../utils/logger.js';
+import { ADV_DEOBF_LLM_MAX_TOKENS } from '../../constants.js';
+import { generateCodeCleanupMessages, generateControlFlowUnflatteningMessages, } from '../../services/prompts/deobfuscation.js';
+import { VMDeobfuscator } from '../deobfuscator/VMDeobfuscator.js';
+import { applyASTOptimizations as applyASTOptimizationsUtil, decodeStrings as decodeStringsUtil, derotateStringArray as derotateStringArrayUtil, estimateCodeComplexity as estimateCodeComplexityUtil, removeDeadCode as removeDeadCodeUtil, removeOpaquePredicates as removeOpaquePredicatesUtil, } from '../deobfuscator/AdvancedDeobfuscator.ast.js';
+export class AdvancedDeobfuscator {
+    llm;
+    vmDeobfuscator;
+    constructor(llm) {
+        this.llm = llm;
+        this.vmDeobfuscator = new VMDeobfuscator(llm);
+    }
+    async deobfuscate(options) {
+        logger.info('Starting advanced deobfuscation...');
+        const startTime = Date.now();
+        let code = options.code;
+        const detectedTechniques = [];
+        const warnings = [];
+        let vmDetected;
+        let astOptimized = false;
+        try {
+            code = this.normalizeCode(code);
+            if (this.detectInvisibleUnicode(code)) {
+                detectedTechniques.push('invisible-unicode');
+                logger.info('Detected: Invisible Unicode Obfuscation');
+                code = this.decodeInvisibleUnicode(code);
+            }
+            if (this.detectStringEncoding(code)) {
+                detectedTechniques.push('string-encoding');
+                logger.info('Detected: String Encoding');
+                code = this.decodeStrings(code);
+            }
+            const vmInfo = this.vmDeobfuscator.detectVMProtection(code);
+            if (vmInfo.detected) {
+                detectedTechniques.push('vm-protection');
+                logger.info(`Detected: VM Protection (${vmInfo.type})`);
+                vmDetected = {
+                    type: vmInfo.type,
+                    instructions: vmInfo.instructionCount,
+                    deobfuscated: false,
+                };
+                if (options.aggressiveVM) {
+                    const vmResult = await this.vmDeobfuscator.deobfuscateVM(code, vmInfo);
+                    if (vmResult.success) {
+                        code = vmResult.code;
+                        vmDetected.deobfuscated = true;
+                    }
+                    else {
+                        warnings.push('VM deobfuscation failed, code may be incomplete');
+                    }
+                }
+            }
+            if (this.detectControlFlowFlattening(code)) {
+                detectedTechniques.push('control-flow-flattening');
+                logger.info('Detected: Control Flow Flattening');
+                code = await this.unflattenControlFlow(code);
+            }
+            if (this.detectStringArrayRotation(code)) {
+                detectedTechniques.push('string-array-rotation');
+                logger.info('Detected: String Array Rotation');
+                code = this.derotateStringArray(code);
+            }
+            if (this.detectDeadCodeInjection(code)) {
+                detectedTechniques.push('dead-code-injection');
+                logger.info('Detected: Dead Code Injection');
+                code = this.removeDeadCode(code);
+            }
+            if (this.detectOpaquePredicates(code)) {
+                detectedTechniques.push('opaque-predicates');
+                logger.info('Detected: Opaque Predicates');
+                code = this.removeOpaquePredicates(code);
+            }
+            if (options.useASTOptimization !== false) {
+                logger.info('Applying AST optimizations...');
+                const optimized = this.applyASTOptimizations(code);
+                if (optimized !== code) {
+                    code = optimized;
+                    astOptimized = true;
+                    detectedTechniques.push('ast-optimized');
+                }
+            }
+            if (this.llm && detectedTechniques.length > 0) {
+                logger.info('Using LLM for final cleanup...');
+                const llmResult = await this.llmCleanup(code, detectedTechniques);
+                if (llmResult) {
+                    code = llmResult;
+                }
+            }
+            const duration = Date.now() - startTime;
+            const confidence = this.calculateConfidence(detectedTechniques, warnings, code);
+            logger.success(`Advanced deobfuscation completed in ${duration}ms`);
+            return {
+                code,
+                detectedTechniques,
+                confidence,
+                warnings,
+                vmDetected,
+                astOptimized,
+            };
+        }
+        catch (error) {
+            logger.error('Advanced deobfuscation failed', error);
+            throw error;
+        }
+    }
+    detectInvisibleUnicode(code) {
+        const invisibleChars = ['\u200B', '\u200C', '\u200D', '\u2060', '\uFEFF'];
+        return invisibleChars.some((char) => code.includes(char));
+    }
+    decodeInvisibleUnicode(code) {
+        logger.info('Decoding invisible unicode...');
+        const charToBit = {
+            '\u200B': '0',
+            '\u200C': '1',
+            '\u200D': '00',
+            '\u2060': '01',
+            '\uFEFF': '10',
+        };
+        let decoded = code;
+        const invisiblePattern = /[\u200B\u200C\u200D\u2060\uFEFF]+/g;
+        const matches = code.match(invisiblePattern);
+        if (matches) {
+            matches.forEach((match) => {
+                let binary = '';
+                for (const char of match) {
+                    binary += charToBit[char] || '';
+                }
+                if (binary.length % 8 === 0) {
+                    let text = '';
+                    for (let i = 0; i < binary.length; i += 8) {
+                        const byte = binary.substring(i, i + 8);
+                        text += String.fromCharCode(parseInt(byte, 2));
+                    }
+                    decoded = decoded.replace(match, text);
+                }
+            });
+        }
+        return decoded;
+    }
+    detectControlFlowFlattening(code) {
+        const pattern = /while\s*\(\s*!!\s*\[\s*\]\s*\)\s*\{[\s\S]*?switch\s*\(/i;
+        return pattern.test(code);
+    }
+    async unflattenControlFlow(code) {
+        logger.info('Unflattening control flow...');
+        if (this.llm) {
+            try {
+                const codeSnippet = code.length > 2000 ? code.slice(0, 2000) + '\n...(truncated)' : code;
+                const response = await this.llm.chat(generateControlFlowUnflatteningMessages(codeSnippet), {
+                    temperature: 0.1,
+                    maxTokens: ADV_DEOBF_LLM_MAX_TOKENS,
+                });
+                return this.vmDeobfuscator.extractCodeFromLLMResponse(response.content);
+            }
+            catch (error) {
+                logger.warn('LLM control flow unflattening failed', error);
+            }
+        }
+        return code;
+    }
+    detectStringArrayRotation(code) {
+        return /\w+\s*=\s*\w+\s*\+\s*0x[0-9a-f]+/.test(code);
+    }
+    derotateStringArray(code) {
+        return derotateStringArrayUtil(code);
+    }
+    detectDeadCodeInjection(code) {
+        return /if\s*\(\s*false\s*\)|if\s*\(\s*!!\s*\[\s*\]\s*\)/.test(code);
+    }
+    removeDeadCode(code) {
+        return removeDeadCodeUtil(code);
+    }
+    detectOpaquePredicates(code) {
+        return /if\s*\(\s*\d+\s*[<>!=]+\s*\d+\s*\)/.test(code);
+    }
+    removeOpaquePredicates(code) {
+        return removeOpaquePredicatesUtil(code);
+    }
+    async llmCleanup(code, techniques) {
+        if (!this.llm)
+            return null;
+        try {
+            const response = await this.llm.chat(generateCodeCleanupMessages(code, techniques), {
+                temperature: 0.15,
+                maxTokens: 3000,
+            });
+            const cleanedCode = this.vmDeobfuscator.extractCodeFromLLMResponse(response.content);
+            if (this.vmDeobfuscator.isValidJavaScript(cleanedCode)) {
+                logger.success('LLM cleanup succeeded');
+                return cleanedCode;
+            }
+            else {
+                logger.warn('LLM cleanup produced invalid JavaScript');
+                return null;
+            }
+        }
+        catch (error) {
+            logger.warn('LLM cleanup failed', error);
+            return null;
+        }
+    }
+    normalizeCode(code) {
+        code = code.replace(/\s+/g, ' ');
+        code = code.replace(/\/\*[\s\S]*?\*\//g, '');
+        code = code.replace(/\/\/.*/g, '');
+        return code.trim();
+    }
+    detectStringEncoding(code) {
+        const patterns = [/\\x[0-9a-f]{2}/i, /\\u[0-9a-f]{4}/i, /String\.fromCharCode/i, /atob\(/i];
+        return patterns.some((p) => p.test(code));
+    }
+    decodeStrings(code) {
+        return decodeStringsUtil(code);
+    }
+    applyASTOptimizations(code) {
+        return applyASTOptimizationsUtil(code);
+    }
+    calculateConfidence(techniques, warnings, code) {
+        let confidence = 0.3;
+        const techniqueBonus = Math.min(techniques.length * 0.12, 0.5);
+        confidence += techniqueBonus;
+        const warningPenalty = warnings.length * 0.08;
+        confidence -= warningPenalty;
+        const highConfidenceTechniques = [
+            'invisible-unicode',
+            'string-array-rotation',
+            'dead-code-injection',
+            'opaque-predicates',
+            'string-encoding',
+            'ast-optimized',
+        ];
+        const highConfidenceCount = techniques.filter((t) => highConfidenceTechniques.some((ht) => t.includes(ht))).length;
+        confidence += highConfidenceCount * 0.05;
+        if (techniques.some((t) => t.includes('vm-protection'))) {
+            confidence -= 0.15;
+        }
+        if (techniques.some((t) => t.includes('control-flow-flattening'))) {
+            confidence -= 0.05;
+        }
+        const complexity = this.estimateCodeComplexity(code);
+        if (complexity < 10) {
+            confidence += 0.1;
+        }
+        else if (complexity > 100) {
+            confidence -= 0.1;
+        }
+        return Math.max(0.1, Math.min(0.95, confidence));
+    }
+    estimateCodeComplexity(code) {
+        return estimateCodeComplexityUtil(code);
+    }
+}
+//# sourceMappingURL=AdvancedDeobfuscator.js.map