js-confuser 1.5.8 → 1.6.0

package/.github/workflows/node.js.yml

@@ -15,7 +15,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [10.x, 12.x, 14.x, 15.x]
+        node-version: [14.15, 16.10, 18.0]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
@@ -24,5 +24,5 @@ jobs:
         uses: actions/setup-node@v2
         with:
           node-version: ${{ matrix.node-version }}
-      - run: npm ci
+      - run: npm install
       - run: npm test

package/CHANGELOG.md

@@ -1,3 +1,72 @@
+# `1.6.0`
+Website Redesign + Updates
+
+The website is now redesigned and live at [js-confuser.com](https://wwww.js-confuser.com)!
+
+- Check out the source code for the website here: https://github.com/MichaelXF/js-confuser-website
+
+#### New feature
+
+### `selfDefending`
+
+Prevents the use of code beautifiers or formatters against your code.
+
+[Identical to Obfuscator.io's Self Defending](https://github.com/javascript-obfuscator/javascript-obfuscator#selfdefending)
+
+#### Improvements
+
+- Fixed [#56](https://github.com/MichaelXF/js-confuser/issues/56)
+- - Calculator improved to apply to more operators
+
+- ES5 to handle destructuring member expressions
+
+- Improved Control Flow Flattening techniques
+
+- - Outlining expressions
+
+- - Control object to store numbers and strings
+
+- Updated the String concealing encoding algorithm
+
+- Optimizations / Small fixes
+
+# `1.5.9`
+Big update
+
+This updates comes with many bug fixes:
+
+- Fixed [#72](https://github.com/MichaelXF/js-confuser/issues/72)
+- - ES5 to handle Class Fields
+
+Note: The `ES5` option is not meant to replace Babel. It is only intended to undo ES6 features the obfuscator may have added to your code.
+
+- Fixed [#74](https://github.com/MichaelXF/js-confuser/issues/74)
+- - Anti Tooling to not break Symbols
+
+- Fixed [#75](https://github.com/MichaelXF/js-confuser/issues/75)
+- - Minify to properly handle Object constructors
+
+- Fixed [#76](https://github.com/MichaelXF/js-confuser/issues/76)
+- - Minify to not cause syntax errors when objects used `^`, `` ` ``, `[`, `]` as property keys
+
+- Fixed [#77](https://github.com/MichaelXF/js-confuser/issues/77)
+- - Dispatcher to not break code that uses generic names like `toString` and `hasOwnProperty`
+
+- Fixed [#78](https://github.com/MichaelXF/js-confuser/issues/78)
+- - Object Extraction to not error on objects with spread elements
+
+- Fixed [#79](https://github.com/MichaelXF/js-confuser/issues/79)
+- - JsConfuser now supports `BigInt` literals
+
+- Fixed [#80](https://github.com/MichaelXF/js-confuser/issues/80)
+- - Rename Variables to not break code that had `var` and `let` variables in the same scope
+
+- Fixed [#81](https://github.com/MichaelXF/js-confuser/issues/81)
+- - Control Flow Flattening to not break `typeof` expressions
+
+- Fixed [#82](https://github.com/MichaelXF/js-confuser/issues/82)
+- - String Concealing to not break class constructors
+
 # `1.5.8`
 Several fixes
 

package/README.md

@@ -1,8 +1,8 @@
 # JS Confuser
 
-JS-Confuser is a JavaScript obfuscation tool to make your programs _impossible_ to read. [Try the web version](https://master--hungry-shannon-c1ce6b.netlify.app/).
+JS-Confuser is a JavaScript obfuscation tool to make your programs _impossible_ to read. [Try the web version](https://js-confuser.com).
 
-  [![NPM](https://img.shields.io/badge/NPM-%23000000.svg?style=for-the-badge&logo=npm&logoColor=white)](https://npmjs.com/package/js-confuser) [![GitHub](https://img.shields.io/badge/github-%23121011.svg?style=for-the-badge&logo=github&logoColor=white)](https://github.com/MichaelXF/js-confuser) [![Netlify](https://img.shields.io/badge/netlify-%23000000.svg?style=for-the-badge&logo=netlify&logoColor=#00C7B7)](https://master--hungry-shannon-c1ce6b.netlify.app/)
+  [![NPM](https://img.shields.io/badge/NPM-%23000000.svg?style=for-the-badge&logo=npm&logoColor=white)](https://npmjs.com/package/js-confuser) [![GitHub](https://img.shields.io/badge/github-%23121011.svg?style=for-the-badge&logo=github&logoColor=white)](https://github.com/MichaelXF/js-confuser) [![Netlify](https://img.shields.io/badge/netlify-%23000000.svg?style=for-the-badge&logo=netlify&logoColor=#00C7B7)](https://js-confuser.com)
 
 ## Key features
 
@@ -19,9 +19,9 @@ JS-Confuser comes with three presets built into the obfuscator.
 
 | Preset | Transforms | Performance Reduction | Sample |
 | --- | --- | --- | --- |
-| High | 21/22 | 98% | [Sample](https://github.com/MichaelXF/js-confuser/blob/master/samples/high.js) |
-| Medium | 15/22 | 52% | [Sample](https://github.com/MichaelXF/js-confuser/blob/master/samples/medium.js) |
-| Low | 10/22 | 30% | [Sample](https://github.com/MichaelXF/js-confuser/blob/master/samples/low.js) |
+| High | 22/25 | 98% | [Sample](https://github.com/MichaelXF/js-confuser/blob/master/samples/high.js) |
+| Medium | 19/25 | 52% | [Sample](https://github.com/MichaelXF/js-confuser/blob/master/samples/medium.js) |
+| Low | 15/25 | 30% | [Sample](https://github.com/MichaelXF/js-confuser/blob/master/samples/low.js) |
 
 You can extend each preset or all go without them entirely.
 
@@ -109,7 +109,7 @@ JsConfuser.obfuscate(`<source code>`, {
   target: "node",
   preset: "high" // | "medium" | "low"
 }).then(obfuscated=>{
-  console.log(obfuscated) // obfuscated is a string
+  console.log(obfuscated); // obfuscated is a string
 })
 ```
 
@@ -119,7 +119,7 @@ Remove's whitespace from the final output. Enabled by default. (`true/false`)
 
 ### `hexadecimalNumbers`
 
-Uses the hexadecimal representation (`50` -> `0x32`) for numbers. (`true/false`)
+Uses the hexadecimal representation for numbers. (`true/false`)
 
 ### `minify`
 
@@ -219,6 +219,131 @@ Use a number to control the percentage from 0 to 1.
 - Resilience High
 - Cost High
 
+```js
+// Input
+function countTo(num){
+  for ( var i = 1; i <= num; i++ ) {
+    console.log(i);
+  }
+}
+
+var number = 10;
+countTo(number); // 1,2,3,4,5,6,7,8,9,10
+
+// Output
+var n2DUka,
+  O7yZ0oU,
+  mJMdMhJ = -337,
+  A1Nyvv = -94,
+  xDwpOk6 = 495,
+  uKcJl2 = {
+    TGCpW6t: "log",
+    qUrjFe: function () {
+      return xDwpOk6 == (126 > mJMdMhJ ? -16 : 34);
+    },
+    YN20IBx: function () {
+      return (A1Nyvv -= 53);
+    },
+    CTW4vwx: -73,
+    PLzWYDx: function () {
+      return (O7yZ0oU = [[385, -94, -282], [10]]);
+    },
+    bW2FK2: function () {
+      return (mJMdMhJ *= 2), (mJMdMhJ += 366);
+    },
+    AfOoRT: function () {
+      return xDwpOk6 == xDwpOk6 + 867;
+    },
+    KTNMdj: function () {
+      if (uKcJl2.AfOoRT()) {
+        typeof ((mJMdMhJ += 0), uKcJl2.Q0I6e4f(), (xDwpOk6 += 0));
+        return "cobTe8G";
+      }
+      typeof (uKcJl2.htRXYx(),
+      (mJMdMhJ += 59),
+      (A1Nyvv -= 537),
+      (xDwpOk6 += uKcJl2.mLuSzZ < mJMdMhJ ? 449 : -33));
+      return "cobTe8G";
+    },
+  };
+while (mJMdMhJ + A1Nyvv + xDwpOk6 != 83) {
+  var yQNDJh = (mJMdMhJ + A1Nyvv + xDwpOk6) * 58 + 54;
+  switch (yQNDJh) {
+    case 750:
+      if (A1Nyvv == 24) {
+        uKcJl2.FxREGd6();
+        break;
+      }
+    case 1214:
+      if (uKcJl2.qUrjFe()) {
+        typeof ((mJMdMhJ *= -8 > xDwpOk6 ? -109 : 2),
+        (mJMdMhJ += 1168),
+        (xDwpOk6 += xDwpOk6 - 1290));
+        break;
+      }
+      function _VSsIw() {
+        var [yQNDJh, _VSsIw] = O7yZ0oU,
+          [L9B14E] = _VSsIw,
+          uTyFFb = 322;
+        while (uTyFFb != 23) {
+          var cBx3ysg = uTyFFb * 48 - 77;
+          switch (cBx3ysg) {
+            case 15379:
+              var IOoqIZ = 1;
+              uTyFFb -= 306;
+              break;
+            case 691:
+              uTyFFb += IOoqIZ <= L9B14E ? 976 : 7;
+              break;
+            case 47539:
+              typeof (console[uKcJl2.TGCpW6t](IOoqIZ), (uTyFFb -= 795));
+              break;
+            case 9379:
+              !(IOoqIZ++, (uTyFFb -= 181));
+          }
+        }
+        return ([mJMdMhJ, A1Nyvv, xDwpOk6] = yQNDJh), (n2DUka = void 0);
+      }
+      (xDwpOk6 == -73 ? parseInt : _VSsIw)();
+      break;
+    case 576:
+      typeof (mJMdMhJ == -4 ? clearImmediate : void 0,
+      uKcJl2.bky8kL(),
+      (xDwpOk6 -= 463));
+      break;
+    case 4172:
+      var L9B14E = 10;
+      void ((O7yZ0oU = [[385, -94, -282], [10]]),
+      (mJMdMhJ -= 187),
+      uKcJl2.YN20IBx(),
+      (xDwpOk6 += 189));
+      break;
+    case 3766:
+      !((uKcJl2.Fpp8x5 = -167),
+      (uKcJl2.mLuSzZ = 144),
+      (uKcJl2.FxREGd6 = function () {
+        return (mJMdMhJ += uKcJl2.Fpp8x5), (xDwpOk6 += 164);
+      }),
+      (uKcJl2.bky8kL = function () {
+        return (A1Nyvv += 537);
+      }),
+      (uKcJl2.Q0I6e4f = function () {
+        return (A1Nyvv += 0);
+      }),
+      (uKcJl2.htRXYx = function () {
+        return (xDwpOk6 = -82);
+      }));
+      var L9B14E = 10;
+      void (uKcJl2.PLzWYDx(), uKcJl2.bW2FK2(), (xDwpOk6 += uKcJl2.CTW4vwx));
+      break;
+    default:
+      if (uKcJl2.KTNMdj() == "cobTe8G") {
+        break;
+      }
+  }
+}
+```
+
 ### `globalConcealing`
 
 Global Concealing hides global variables being accessed. (`true/false`)
@@ -455,6 +580,16 @@ Set to `true` to use the default set of native functions. (`string[]/true/false`
 - Resilience Medium
 - Cost Medium
 
+### `lock.selfDefending`
+
+Prevents the use of code beautifiers or formatters against your code.
+
+[Identical to Obfuscator.io's Self Defending](https://github.com/javascript-obfuscator/javascript-obfuscator#selfdefending)
+
+- Potency Low
+- Resilience Low
+- Cost Low
+
 ### `lock.integrity`
 
 Integrity ensures the source code is unchanged. (`true/false/0-1`)
@@ -623,6 +758,7 @@ You must enable locks yourself, and configure them to your needs.
   target: "node",
   lock: {
     integrity: true,
+    selfDefending: true,
     domainLock: ["mywebsite.com"],
     osLock: ["windows", "linux"],
     browserLock: ["firefox"],

package/dist/index.js

@@ -103,7 +103,7 @@ var JsConfuser = async function (code, options) {
   return result;
 };
 
-var debugTransformations = async function debugTransformations(code, options) {
+const debugTransformations = async function (code, options) {
   (0, _options.validateOptions)(options);
   options = await (0, _options.correctOptions)(options);
   var frames = [];
@@ -121,21 +121,50 @@ var debugTransformations = async function debugTransformations(code, options) {
   await obfuscator.apply(tree, true);
   return frames;
 };
+/**
+ * This method is used by the obfuscator website to display a progress bar and additional information
+ * about the obfuscation.
+ *
+ * @param code - Source code to obfuscate
+ * @param options - Options
+ * @param callback - Progress callback, called after each transformation
+ * @returns
+ */
+
 
 exports.debugTransformations = debugTransformations;
 
-var debugObfuscation = async function debugTransformations(code, options, callback) {
+const debugObfuscation = async function (code, options, callback, performance) {
+  const startTime = performance.now();
   (0, _options.validateOptions)(options);
   options = await (0, _options.correctOptions)(options);
+  const beforeParseTime = performance.now();
   var tree = (0, _parser.parseSync)(code);
+  const parseTime = performance.now() - beforeParseTime;
   var obfuscator = new _obfuscator.default(options);
   var totalTransforms = obfuscator.array.length;
+  var transformationTimes = Object.create(null);
+  var currentTransformTime = performance.now();
   obfuscator.on("debug", (name, tree, i) => {
+    var nowTime = performance.now();
+    transformationTimes[name] = nowTime - currentTransformTime;
+    currentTransformTime = nowTime;
     callback(name, i, totalTransforms);
   });
   await obfuscator.apply(tree, true);
-  var output = (0, _compiler.default)(tree, options);
-  return output;
+  const beforeCompileTime = performance.now();
+  var output = await (0, _compiler.default)(tree, options);
+  const compileTime = performance.now() - beforeCompileTime;
+  const endTime = performance.now();
+  return {
+    obfuscated: output,
+    transformationTimes: transformationTimes,
+    obfuscationTime: endTime - startTime,
+    parseTime: parseTime,
+    compileTime: compileTime,
+    totalTransforms: totalTransforms,
+    totalPossibleTransforms: obfuscator.totalPossibleTransforms
+  };
 };
 
 exports.debugObfuscation = debugObfuscation;

package/dist/obfuscator.js

@@ -13,7 +13,7 @@ var _traverse = _interopRequireDefault(require("./traverse"));
 
 var _probability = require("./probability");
 
-var _preparation = _interopRequireDefault(require("./transforms/preparation/preparation"));
+var _preparation = _interopRequireDefault(require("./transforms/preparation"));
 
 var _objectExtraction = _interopRequireDefault(require("./transforms/extraction/objectExtraction"));
 
@@ -33,9 +33,11 @@ var _eval = _interopRequireDefault(require("./transforms/eval"));
 
 var _globalConcealing = _interopRequireDefault(require("./transforms/identifier/globalConcealing"));
 
+var _stringSplitting = _interopRequireDefault(require("./transforms/string/stringSplitting"));
+
 var _stringConcealing = _interopRequireDefault(require("./transforms/string/stringConcealing"));
 
-var _stringSplitting = _interopRequireDefault(require("./transforms/string/stringSplitting"));
+var _stringCompression = _interopRequireDefault(require("./transforms/string/stringCompression"));
 
 var _duplicateLiteralsRemoval = _interopRequireDefault(require("./transforms/extraction/duplicateLiteralsRemoval"));
 
@@ -51,23 +53,17 @@ var _minify = _interopRequireDefault(require("./transforms/minify"));
 
 var _es = _interopRequireDefault(require("./transforms/es5/es5"));
 
-var _stringEncoding = _interopRequireDefault(require("./transforms/string/stringEncoding"));
-
 var _rgf = _interopRequireDefault(require("./transforms/rgf"));
 
 var _flatten = _interopRequireDefault(require("./transforms/flatten"));
 
 var _stack = _interopRequireDefault(require("./transforms/stack"));
 
-var _stringCompression = _interopRequireDefault(require("./transforms/string/stringCompression"));
-
 var _nameRecycling = _interopRequireDefault(require("./transforms/identifier/nameRecycling"));
 
 var _antiTooling = _interopRequireDefault(require("./transforms/antiTooling"));
 
-var _hideInitializingCode = _interopRequireDefault(require("./transforms/hideInitializingCode"));
-
-var _hexadecimalNumbers = _interopRequireDefault(require("./transforms/hexadecimalNumbers"));
+var _finalizer = _interopRequireDefault(require("./transforms/finalizer"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
@@ -94,18 +90,21 @@ class Obfuscator extends _events.EventEmitter {
 
     _defineProperty(this, "generated", void 0);
 
+    _defineProperty(this, "totalPossibleTransforms", void 0);
+
     this.varCount = 0;
     this.transforms = Object.create(null);
     this.generated = new Set();
-    this.push(new _preparation.default(this));
-    this.push(new _renameLabels.default(this));
+    this.totalPossibleTransforms = 0;
 
     const test = function (map) {
-      if ((0, _probability.isProbabilityMapProbable)(map)) {
-        for (var _len = arguments.length, transformers = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) {
-          transformers[_key - 1] = arguments[_key];
-        }
+      for (var _len = arguments.length, transformers = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) {
+        transformers[_key - 1] = arguments[_key];
+      }
+
+      _this.totalPossibleTransforms += transformers.length;
 
+      if ((0, _probability.isProbabilityMapProbable)(map)) {
         // options.verbose && console.log("+ Added " + transformer.name);
         transformers.forEach(Transformer => _this.push(new Transformer(_this)));
       } else {// options.verbose && console.log("- Skipped adding " + transformer.name);
@@ -113,31 +112,31 @@ class Obfuscator extends _events.EventEmitter {
     }; // Optimization: Only add needed transformers. If a probability always return false, no need in running that extra code.
 
 
+    test(true, _preparation.default);
+    test(true, _renameLabels.default);
     test(options.objectExtraction, _objectExtraction.default);
-    test(options.deadCode, _deadCode.default);
+    test(options.flatten, _flatten.default);
+    test(options.rgf, _rgf.default);
     test(options.dispatcher, _dispatcher.default);
+    test(options.deadCode, _deadCode.default);
+    test(options.calculator, _calculator.default);
     test(options.controlFlowFlattening, _controlFlowFlattening.default);
-    test(options.globalConcealing, _globalConcealing.default);
-    test(options.stringCompression, _stringCompression.default);
-    test(options.stringConcealing, _stringConcealing.default);
-    test(options.stringEncoding, _stringEncoding.default);
-    test(options.stringSplitting, _stringSplitting.default);
-    test(options.renameVariables, _renameVariables.default);
-    test(options.nameRecycling, _nameRecycling.default);
     test(options.eval, _eval.default);
+    test(options.globalConcealing, _globalConcealing.default);
     test(options.opaquePredicates, _opaquePredicates.default);
+    test(options.stringSplitting, _stringSplitting.default);
+    test(options.stringConcealing, _stringConcealing.default);
+    test(options.stringCompression, _stringCompression.default);
+    test(options.stack, _stack.default);
     test(options.duplicateLiteralsRemoval, _duplicateLiteralsRemoval.default);
-    test(options.minify, _minify.default);
-    test(options.calculator, _calculator.default);
+    test(options.shuffle, _shuffle.default);
+    test(options.nameRecycling, _nameRecycling.default);
     test(options.movedDeclarations, _movedDeclarations.default);
+    test(options.minify, _minify.default);
+    test(options.renameVariables, _renameVariables.default);
     test(options.es5, _es.default);
-    test(options.shuffle, _shuffle.default);
-    test(options.flatten, _flatten.default);
-    test(options.rgf, _rgf.default);
-    test(options.stack, _stack.default);
     test(true, _antiTooling.default);
-    test(options.hideInitializingCode, _hideInitializingCode.default);
-    test(options.hexadecimalNumbers, _hexadecimalNumbers.default);
+    test(true, _finalizer.default); // String Encoding, Hexadecimal Numbers, BigInt support is included
 
     if (options.lock && Object.keys(options.lock).filter(x => x == "domainLock" ? options.lock.domainLock && options.lock.domainLock.length : options.lock[x]).length) {
       test(true, _lock.default);

package/dist/options.js

@@ -12,12 +12,12 @@ var _presets = _interopRequireDefault(require("./presets"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-const validProperties = new Set(["preset", "target", "indent", "compact", "hexadecimalNumbers", "minify", "es5", "renameVariables", "renameGlobals", "identifierGenerator", "nameRecycling", "controlFlowFlattening", "hideInitializingCode", "globalConcealing", "stringCompression", "stringConcealing", "stringEncoding", "stringSplitting", "duplicateLiteralsRemoval", "dispatcher", "eval", "rgf", "objectExtraction", "flatten", "deadCode", "calculator", "lock", "movedDeclarations", "opaquePredicates", "shuffle", "stack", "verbose", "globalVariables", "debugComments"]);
+const validProperties = new Set(["preset", "target", "indent", "compact", "hexadecimalNumbers", "minify", "es5", "renameVariables", "renameGlobals", "identifierGenerator", "nameRecycling", "controlFlowFlattening", "globalConcealing", "stringCompression", "stringConcealing", "stringEncoding", "stringSplitting", "duplicateLiteralsRemoval", "dispatcher", "eval", "rgf", "objectExtraction", "flatten", "deadCode", "calculator", "lock", "movedDeclarations", "opaquePredicates", "shuffle", "stack", "verbose", "globalVariables", "debugComments"]);
 const validOses = new Set(["windows", "linux", "osx", "ios", "android"]);
 const validBrowsers = new Set(["firefox", "chrome", "iexplorer", "edge", "safari", "opera"]);
 
 function validateOptions(options) {
-  if (Object.keys(options).length <= 1) {
+  if (!options || Object.keys(options).length <= 1) {
     /**
      * Give a welcoming introduction to those who skipped the documentation.
      */
@@ -109,8 +109,7 @@ async function correctOptions(options) {
 
   if (options.lock && options.lock.selfDefending) {
     options.compact = true; // self defending forcibly enables this
-  } // options.globalVariables was never used.
-  // GlobalConcealing implicitly determines a global to be a variable referenced but never defined or modified.
+  } // options.globalVariables outlines generic globals that should be present in the execution context
 
 
   if (!options.hasOwnProperty("globalVariables")) {
@@ -124,7 +123,7 @@ async function correctOptions(options) {
       ["global", "Buffer", "require", "process", "__dirname", "__filename"].forEach(x => options.globalVariables.add(x));
     }
 
-    ["globalThis", "console", "parseInt", "parseFloat", "Math", "Promise", "String", "Boolean", "Function", "Object", "Array", "Proxy", "Error", "setTimeout", "clearTimeout", "setInterval", "clearInterval", "setImmediate", "clearImmediate", "queueMicrotask", "exports", "module", "isNaN", "isFinite"].forEach(x => options.globalVariables.add(x));
+    ["globalThis", "console", "parseInt", "parseFloat", "Math", "Promise", "String", "Boolean", "Function", "Object", "Array", "Proxy", "Error", "TypeError", "ReferenceError", "RangeError", "EvalError", "setTimeout", "clearTimeout", "setInterval", "clearInterval", "setImmediate", "clearImmediate", "queueMicrotask", "exports", "module", "isNaN", "isFinite", "Set", "Map", "WeakSet", "WeakMap", "Symbol"].forEach(x => options.globalVariables.add(x));
   }
 
   return options;

package/dist/order.js

@@ -27,17 +27,15 @@ exports.ObfuscateOrder = ObfuscateOrder;
   ObfuscateOrder[ObfuscateOrder["StringSplitting"] = 16] = "StringSplitting";
   ObfuscateOrder[ObfuscateOrder["StringConcealing"] = 17] = "StringConcealing";
   ObfuscateOrder[ObfuscateOrder["StringCompression"] = 18] = "StringCompression";
-  ObfuscateOrder[ObfuscateOrder["HideInitializingCode"] = 19] = "HideInitializingCode";
   ObfuscateOrder[ObfuscateOrder["Stack"] = 20] = "Stack";
   ObfuscateOrder[ObfuscateOrder["DuplicateLiteralsRemoval"] = 22] = "DuplicateLiteralsRemoval";
   ObfuscateOrder[ObfuscateOrder["Shuffle"] = 24] = "Shuffle";
   ObfuscateOrder[ObfuscateOrder["NameRecycling"] = 25] = "NameRecycling";
   ObfuscateOrder[ObfuscateOrder["MovedDeclarations"] = 26] = "MovedDeclarations";
-  ObfuscateOrder[ObfuscateOrder["RenameVariables"] = 27] = "RenameVariables";
-  ObfuscateOrder[ObfuscateOrder["RenameLabels"] = 28] = "RenameLabels";
-  ObfuscateOrder[ObfuscateOrder["Minify"] = 30] = "Minify";
+  ObfuscateOrder[ObfuscateOrder["RenameLabels"] = 27] = "RenameLabels";
+  ObfuscateOrder[ObfuscateOrder["Minify"] = 28] = "Minify";
+  ObfuscateOrder[ObfuscateOrder["RenameVariables"] = 30] = "RenameVariables";
   ObfuscateOrder[ObfuscateOrder["ES5"] = 31] = "ES5";
-  ObfuscateOrder[ObfuscateOrder["StringEncoding"] = 32] = "StringEncoding";
   ObfuscateOrder[ObfuscateOrder["AntiTooling"] = 34] = "AntiTooling";
-  ObfuscateOrder[ObfuscateOrder["HexadecimalNumbers"] = 35] = "HexadecimalNumbers";
+  ObfuscateOrder[ObfuscateOrder["Finalizer"] = 35] = "Finalizer";
 })(ObfuscateOrder || (exports.ObfuscateOrder = ObfuscateOrder = {}));

package/dist/probability.js

@@ -77,6 +77,8 @@ function ComputeProbabilityMap(map) {
 
 
 function isProbabilityMapProbable(map) {
+  (0, _assert.ok)(!Number.isNaN(map), "Numbers cannot be NaN");
+
   if (!map || typeof map === "undefined") {
     return false;
   }
@@ -89,10 +91,6 @@ function isProbabilityMapProbable(map) {
     if (map > 1 || map < 0) {
       throw new Error("Numbers must be between 0 and 1 for 0% - 100%");
     }
-
-    if (isNaN(map)) {
-      throw new Error("Numbers cannot be NaN");
-    }
   }
 
   if (Array.isArray(map)) {

package/dist/templates/bufferToString.js

@@ -0,0 +1,13 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.BufferToStringTemplate = void 0;
+
+var _template = _interopRequireDefault(require("./template"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+const BufferToStringTemplate = (0, _template.default)("\n  function __getGlobal(){\n    try {\n      return global||window|| ( new Function(\"return this\") )();\n    } catch ( e ) {\n      try {\n        return this;\n      } catch ( e ) {\n        return {};\n      }\n    }\n  }\n\n  var __globalObject = __getGlobal() || {};\n  var __TextDecoder = __globalObject[\"TextDecoder\"];\n  var __Uint8Array = __globalObject[\"Uint8Array\"];\n  var __Buffer = __globalObject[\"Buffer\"];\n  var __String = __globalObject[\"String\"] || String;\n  var __Array = __globalObject[\"Array\"] || Array;\n\n  var utf8ArrayToStr = (function () {\n    var charCache = new __Array(128);  // Preallocate the cache for the common single byte chars\n    var charFromCodePt = __String[\"fromCodePoint\"] || __String[\"fromCharCode\"];\n    var result = [];\n\n    return function (array) {\n        var codePt, byte1;\n        var buffLen = array[\"length\"];\n\n        result[\"length\"] = 0;\n\n        for (var i = 0; i < buffLen;) {\n            byte1 = array[i++];\n\n            if (byte1 <= 0x7F) {\n                codePt = byte1;\n            } else if (byte1 <= 0xDF) {\n                codePt = ((byte1 & 0x1F) << 6) | (array[i++] & 0x3F);\n            } else if (byte1 <= 0xEF) {\n                codePt = ((byte1 & 0x0F) << 12) | ((array[i++] & 0x3F) << 6) | (array[i++] & 0x3F);\n            } else if (__String[\"fromCodePoint\"]) {\n                codePt = ((byte1 & 0x07) << 18) | ((array[i++] & 0x3F) << 12) | ((array[i++] & 0x3F) << 6) | (array[i++] & 0x3F);\n            } else {\n                codePt = 63;    // Cannot convert four byte code points, so use \"?\" instead\n                i += 3;\n            }\n\n            result[\"push\"](charCache[codePt] || (charCache[codePt] = charFromCodePt(codePt)));\n        }\n\n        return result[\"join\"]('');\n    };\n  })();\n\n  function {name}(buffer){\n    if(typeof __TextDecoder !== \"undefined\" && __TextDecoder) {\n      return new __TextDecoder()[\"decode\"](new __Uint8Array(buffer));\n    } else if(typeof __Buffer !== \"undefined\" && __Buffer) {\n      return __Buffer[\"from\"](buffer)[\"toString\"](\"utf-8\");\n    } else {          \n      return utf8ArrayToStr(buffer);\n    }\n  }\n\n  \n");
+exports.BufferToStringTemplate = BufferToStringTemplate;

package/dist/templates/crash.js

@@ -9,9 +9,9 @@ var _template = _interopRequireDefault(require("./template"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-const CrashTemplate1 = (0, _template.default)("\ntry {\n    if(typeof process !== \"undefined\") {\n        Math.random() > 0.5 && process && process.exit();\n    }\n} catch ( e ) {\n    \n}\n\nvar {var} = \"a\";\nwhile(1){\n    {var} = {var} += \"a\";    //add as much as the browser can handle\n}\n");
+const CrashTemplate1 = (0, _template.default)("\nvar {var} = \"a\";\nwhile(1){\n    {var} = {var} += \"a\";    //add as much as the browser can handle\n}\n");
 exports.CrashTemplate1 = CrashTemplate1;
-const CrashTemplate2 = (0, _template.default)("\nwhile(true) {\n    for(var {var} = 99; {var} == {var}; {var} *= {var}) {\n        !{var} && console.log({var});\n        if ({var} <= 10){\n            break;\n        }\n    };\n };");
+const CrashTemplate2 = (0, _template.default)("\nwhile(true) {\n    var {var} = 99;\n    for({var} = 99; {var} == {var}; {var} *= {var}) {\n        !{var} && console.log({var});\n        if ({var} <= 10){\n            break;\n        }\n    };\n    if({var} === 100) {\n        {var}--\n    }\n };");
 exports.CrashTemplate2 = CrashTemplate2;
 const CrashTemplate3 = (0, _template.default)("\ntry {\n    function {$2}(y, x){\n        return x;\n      }\n      \n      var {$1} = {$2}(this, function () {\n        var {$3} = function () {\n            var regExp = {$3}\n                .constructor('return /\" + this + \"/')()\n                .constructor('^([^ ]+( +[^ ]+)+)+[^ ]}');\n            \n            return !regExp.call({$1});\n        };\n        \n        return {$3}();\n      });\n      \n      {$1}();\n} catch ( e ) {\n    while(e ? e : !e){\n        var b;\n        var c = 0;\n        (e ? !e : e) ? (function(e){\n            c = e ? 0 : !e ? 1 : 0;\n        })(e) : b = 1;\n\n        if(b&&c){break;}\n        if(b){continue;}\n    }\n}\n");
 exports.CrashTemplate3 = CrashTemplate3;

package/dist/templates/es5.js

@@ -0,0 +1,18 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ES5Template = void 0;
+
+var _template = _interopRequireDefault(require("./template"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+/**
+ * Provides ES5 polyfills for Array methods
+ *
+ * Source: https://vanillajstoolkit.com/polyfills/
+ */
+const ES5Template = (0, _template.default)("\nif (!Array.prototype.forEach) {\n  Array.prototype.forEach = function forEach (callback, thisArg) {\n    if (typeof callback !== 'function') {\n      throw new TypeError(callback + ' is not a function');\n    }\n    var array = this;\n    thisArg = thisArg || this;\n    for (var i = 0, l = array.length; i !== l; ++i) {\n      callback.call(thisArg, array[i], i, array);\n    }\n  };\n}\nif (!Array.prototype.filter)\n  Array.prototype.filter = function(func, thisArg) {\n\t'use strict';\n\tif ( ! ((typeof func === 'Function' || typeof func === 'function') && this) )\n\t\tthrow new TypeError();\n\n\tvar len = this.length >>> 0,\n\t\tres = new Array(len), // preallocate array\n\t\tt = this, c = 0, i = -1;\n\tif (thisArg === undefined)\n\t  while (++i !== len)\n\t\t// checks to see if the key was set\n\t\tif (i in this)\n\t\t  if (func(t[i], i, t))\n\t\t\tres[c++] = t[i];\n\telse\n\t  while (++i !== len)\n\t\t// checks to see if the key was set\n\t\tif (i in this)\n\t\t  if (func.call(thisArg, t[i], i, t))\n\t\t\tres[c++] = t[i];\n\n\tres.length = c; // shrink down array to proper size\n\treturn res;\n};\nif (!Array.prototype.map) {\n  Array.prototype.map = function(callback, thisArg) {\n    var T, A, k;\n\n    if (this == null) {\n      throw new TypeError('this is null or not defined');\n    }\n\n    // 1. Let O be the result of calling ToObject passing the |this|\n    //    value as the argument.\n    var O = Object(this);\n\n    // 2. Let lenValue be the result of calling the Get internal\n    //    method of O with the argument \"length\".\n    // 3. Let len be ToUint32(lenValue).\n    var len = O.length >>> 0;\n\n    // 4. If IsCallable(callback) is false, throw a TypeError exception.\n    // See: http://es5.github.com/#x9.11\n    if (typeof callback !== 'function') {\n      throw new TypeError(callback + ' is not a function');\n    }\n\n    // 5. If thisArg was supplied, let T be thisArg; else let T be undefined.\n    if (arguments.length > 1) {\n      T = arguments[1];\n    }\n\n    // 6. Let A be a new array created as if by the expression new Array(len)\n    //    where Array is the standard built-in constructor with that name and\n    //    len is the value of len.\n    A = new Array(len);\n\n    // 7. Let k be 0\n    k = 0;\n\n    // 8. Repeat, while k < len\n    while (k < len) {\n\n      var kValue, mappedValue;\n\n      // a. Let Pk be ToString(k).\n      //   This is implicit for LHS operands of the in operator\n      // b. Let kPresent be the result of calling the HasProperty internal\n      //    method of O with argument Pk.\n      //   This step can be combined with c\n      // c. If kPresent is true, then\n      if (k in O) {\n\n        // i. Let kValue be the result of calling the Get internal\n        //    method of O with argument Pk.\n        kValue = O[k];\n\n        // ii. Let mappedValue be the result of calling the Call internal\n        //     method of callback with T as the this value and argument\n        //     list containing kValue, k, and O.\n        mappedValue = callback.call(T, kValue, k, O);\n\n        // iii. Call the DefineOwnProperty internal method of A with arguments\n        // Pk, Property Descriptor\n        // { Value: mappedValue,\n        //   Writable: true,\n        //   Enumerable: true,\n        //   Configurable: true },\n        // and false.\n\n        // In browsers that support Object.defineProperty, use the following:\n        // Object.defineProperty(A, k, {\n        //   value: mappedValue,\n        //   writable: true,\n        //   enumerable: true,\n        //   configurable: true\n        // });\n\n        // For best browser support, use the following:\n        A[k] = mappedValue;\n      }\n      // d. Increase k by 1.\n      k++;\n    }\n\n    // 9. return A\n    return A;\n  };\n}\n");
+exports.ES5Template = ES5Template;

package/dist/transforms/antiTooling.js

@@ -50,7 +50,7 @@ class AntiTooling extends _transform.default {
         if (flattened.length > 1) {
           flattened[0] = { ...flattened[0]
           };
-          this.replace(exprs[0], (0, _gen.ExpressionStatement)((0, _gen.UnaryExpression)((0, _random.choice)(["typeof", "void", "~", "!", "+"]), (0, _gen.SequenceExpression)(flattened))));
+          this.replace(exprs[0], (0, _gen.ExpressionStatement)((0, _gen.UnaryExpression)((0, _random.choice)(["typeof", "void", "!"]), (0, _gen.SequenceExpression)(flattened))));
           deleteExprs.push(...exprs.slice(1));
         }