js-confuser 1.7.3 → 2.0.0-alpha.0

package/dist/transforms/lock/lock.js

@@ -1,422 +1,296 @@
 "use strict";
 
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.default = void 0;
-var _transform = _interopRequireDefault(require("../transform"));
-var _gen = require("../../util/gen");
-var _traverse = _interopRequireWildcard(require("../../traverse"));
-var _random = require("../../util/random");
-var _crash = require("../../templates/crash");
-var _insert = require("../../util/insert");
-var _template = _interopRequireDefault(require("../../templates/template"));
+exports["default"] = void 0;
 var _order = require("../../order");
-var _integrity = _interopRequireDefault(require("./integrity"));
-var _antiDebug = _interopRequireDefault(require("./antiDebug"));
-var _identifiers = require("../../util/identifiers");
-var _compare = require("../../util/compare");
-var _assert = require("assert");
-var _core = require("../../templates/core");
-function _getRequireWildcardCache(e) { if ("function" != typeof WeakMap) return null; var r = new WeakMap(), t = new WeakMap(); return (_getRequireWildcardCache = function (e) { return e ? t : r; })(e); }
-function _interopRequireWildcard(e, r) { if (!r && e && e.__esModule) return e; if (null === e || "object" != typeof e && "function" != typeof e) return { default: e }; var t = _getRequireWildcardCache(r); if (t && t.has(e)) return t.get(e); var n = { __proto__: null }, a = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) { var i = a ? Object.getOwnPropertyDescriptor(e, u) : null; i && (i.get || i.set) ? Object.defineProperty(n, u, i) : n[u] = e[u]; } return n.default = e, t && t.set(e, n), n; }
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
-function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == typeof i ? i : i + ""; }
-function _toPrimitive(t, r) { if ("object" != typeof t || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != typeof i) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-/**
- * Applies browser & date locks.
- */
-class Lock extends _transform.default {
-  shouldTransformNativeFunction(nameAndPropertyPath) {
-    if (!this.options.lock.tamperProtection) {
-      return false;
-    }
-    if (typeof this.options.lock.tamperProtection === "function") {
-      return this.options.lock.tamperProtection(nameAndPropertyPath.join("."));
-    }
-    if (this.options.target === "browser" && nameAndPropertyPath.length === 1 && nameAndPropertyPath[0] === "fetch") {
-      return true;
-    }
-
-    // TODO: Allow user to customize this behavior
-    var globalObject = typeof window !== "undefined" ? window : global;
-    var fn = globalObject;
-    for (var item of nameAndPropertyPath) {
-      fn = fn[item];
-      if (typeof fn === "undefined") return false;
+var _randomUtils = require("../../utils/random-utils");
+var _template = _interopRequireDefault(require("../../templates/template"));
+var t = _interopRequireWildcard(require("@babel/types"));
+var _astUtils = require("../../utils/ast-utils");
+var _integrity = require("./integrity");
+var _integrityTemplate = require("../../templates/integrityTemplate");
+var _constants = require("../../constants");
+var _tamperProtectionTemplates = require("../../templates/tamperProtectionTemplates");
+var _probability = require("../../probability");
+function _getRequireWildcardCache(e) { if ("function" != typeof WeakMap) return null; var r = new WeakMap(), t = new WeakMap(); return (_getRequireWildcardCache = function _getRequireWildcardCache(e) { return e ? t : r; })(e); }
+function _interopRequireWildcard(e, r) { if (!r && e && e.__esModule) return e; if (null === e || "object" != _typeof(e) && "function" != typeof e) return { "default": e }; var t = _getRequireWildcardCache(r); if (t && t.has(e)) return t.get(e); var n = { __proto__: null }, a = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) { var i = a ? Object.getOwnPropertyDescriptor(e, u) : null; i && (i.get || i.set) ? Object.defineProperty(n, u, i) : n[u] = e[u]; } return n["default"] = e, t && t.set(e, n), n; }
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
+function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
+function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
+function _iterableToArrayLimit(r, l) { var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (null != t) { var e, n, i, u, a = [], f = !0, o = !1; try { if (i = (t = t.call(r)).next, 0 === l) { if (Object(t) !== t) return; f = !1; } else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0); } catch (r) { o = !0, n = r; } finally { try { if (!f && null != t["return"] && (u = t["return"](), Object(u) !== u)) return; } finally { if (o) throw n; } } return a; } }
+function _arrayWithHoles(r) { if (Array.isArray(r)) return r; }
+function _createForOfIteratorHelper(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
+function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+var _default = exports["default"] = function _default(_ref) {
+  var Plugin = _ref.Plugin;
+  var me = Plugin(_order.Order.Lock, {
+    changeData: {
+      locksInserted: 0
     }
-    var hasNativeCode = typeof fn === "function" && ("" + fn).includes("[native code]");
-    return hasNativeCode;
+  });
+  if (me.options.lock.startDate instanceof Date) {
+    me.options.lock.customLocks.push({
+      code: ["\n      if(Date.now()<".concat(me.options.lock.startDate.getTime(), ") {\n        {countermeasures}\n      }\n      "), "\n      if((new Date()).getTime()<".concat(me.options.lock.startDate.getTime(), ") {\n        {countermeasures}\n      }\n      ")],
+      percentagePerBlock: 0.5
+    });
   }
-  constructor(o) {
-    super(o, _order.ObfuscateOrder.Lock);
-
-    // Removed feature
-    // if (this.options.lock.startDate && this.options.lock.endDate) {
-    //   this.before.push(new LockStrings(o));
-    // }
-    _defineProperty(this, "globalVar", void 0);
-    _defineProperty(this, "counterMeasuresNode", void 0);
-    _defineProperty(this, "iosDetectFn", void 0);
-    /**
-     * This is a boolean variable injected into the source code determining wether the countermeasures function has been called.
-     * This is used to prevent infinite loops from happening
-     */
-    _defineProperty(this, "counterMeasuresActivated", void 0);
-    /**
-     * The name of the native function that is used to check runtime calls for tampering
-     */
-    _defineProperty(this, "nativeFunctionName", void 0);
-    _defineProperty(this, "made", void 0);
-    if (this.options.lock.integrity) {
-      this.before.push(new _integrity.default(o, this));
-    }
-    if (this.options.lock.antiDebug) {
-      this.before.push(new _antiDebug.default(o, this));
-    }
-    this.made = 0;
+  if (me.options.lock.endDate instanceof Date) {
+    me.options.lock.customLocks.push({
+      code: ["\n      if(Date.now()>".concat(me.options.lock.endDate.getTime(), ") {\n        {countermeasures}\n      }\n      "), "\n      if((new Date()).getTime()>".concat(me.options.lock.endDate.getTime(), ") {\n        {countermeasures}\n      }\n      ")],
+      percentagePerBlock: 0.5
+    });
   }
-  apply(tree) {
-    if (typeof this.options.lock.countermeasures === "string" && (0, _compare.isValidIdentifier)(this.options.lock.countermeasures)) {
-      (0, _traverse.default)(tree, (object, parents) => {
-        if (object.type == "Identifier" && object.name === this.options.lock.countermeasures) {
-          var info = (0, _identifiers.getIdentifierInfo)(object, parents);
-          if (info.spec.isDefined) {
-            if (this.counterMeasuresNode) {
-              throw new Error("Countermeasures function was already defined, it must have a unique name from the rest of your code");
-            } else {
-              var definingContext = (0, _insert.getVarContext)(parents[0], parents.slice(1));
-              if (definingContext != tree) {
-                throw new Error("Countermeasures function must be defined at the global level");
-              }
-              var chain = [object, parents];
-              if (info.isFunctionDeclaration) {
-                chain = [parents[0], parents.slice(1)];
-              } else if (info.isVariableDeclaration) {
-                chain = [parents[1], parents.slice(2)];
-              }
-              this.counterMeasuresNode = chain;
+  if (me.options.lock.domainLock) {
+    var domainArray = Array.isArray(me.options.lock.domainLock) ? me.options.lock.domainLock : [me.options.lock.domainLock];
+    var _iterator = _createForOfIteratorHelper(domainArray),
+      _step;
+    try {
+      var _loop = function _loop() {
+        var _regexString = _step.value;
+        me.options.lock.customLocks.push({
+          code: new _template["default"]("\n          if(!new RegExp({regexString}).test(window.location.href)) {\n            {countermeasures}\n          }\n          ").setDefaultVariables({
+            regexString: function regexString() {
+              return t.stringLiteral(_regexString.toString());
             }
-          }
-        }
-      });
-      if (!this.counterMeasuresNode) {
-        throw new Error("Countermeasures function named '" + this.options.lock.countermeasures + "' was not found.");
+          }),
+          percentagePerBlock: 0.5
+        });
+      };
+      for (_iterator.s(); !(_step = _iterator.n()).done;) {
+        _loop();
       }
-    }
-    super.apply(tree);
-    if (this.options.lock.tamperProtection) {
-      this.nativeFunctionName = this.getPlaceholder() + "_lockNative";
-
-      // Ensure program is not in strict mode
-      // Tamper Protection forces non-strict mode
-
-      var strictModeCheck = new _template.default(`
-        (function(){
-          function isStrictMode(){
-            try {
-              var arr = []
-              delete arr["length"]
-            } catch(e) {
-              return true;
-            }
-            return false;
-          }
-
-          if(isStrictMode()) {
-            {countermeasures}
-            ${this.nativeFunctionName} = undefined;
-          }
-        })()
-        `).single({
-        countermeasures: this.getCounterMeasuresCode(tree, [])
-      });
-
-      // $multiTransformSkip is used to prevent scoping between transformations
-      strictModeCheck.$multiTransformSkip = true;
-      (0, _insert.prepend)(tree, strictModeCheck);
-      var nativeFunctionCheck = new _template.default(`
-        function ${this.nativeFunctionName}() {
-          {IndexOfTemplate}
-        
-          function checkFunction(fn){
-            if (indexOf("" + fn, '{ [native code] }') === -1
-            ||
-            typeof Object.getOwnPropertyDescriptor(fn, "toString") !== "undefined"
-            ) {
-              {countermeasures}
-              return undefined
-            }
-
-            return fn;
-          }
-
-          var args = arguments
-          if(args.length === 1) {
-            return checkFunction(args[0]);
-          } else if (args.length === 2) {
-            var object = args[0];
-            var property = args[1];
-
-            var fn = object[property];
-            fn = checkFunction(fn);
-
-            return fn.bind(object);
-          }
-        }`).single({
-        IndexOfTemplate: _core.IndexOfTemplate,
-        countermeasures: this.getCounterMeasuresCode(tree, [])
-      });
-
-      // $multiTransformSkip is used to prevent scoping between transformations
-      nativeFunctionCheck.$multiTransformSkip = true;
-      (0, _insert.prepend)(tree, nativeFunctionCheck);
+    } catch (err) {
+      _iterator.e(err);
+    } finally {
+      _iterator.f();
     }
   }
-  getCounterMeasuresCode(object, parents) {
-    var opt = this.options.lock.countermeasures;
-    if (opt === false) {
-      return null;
-    }
-
-    // Call function
-    if (typeof opt === "string") {
-      if (!this.counterMeasuresActivated) {
-        this.counterMeasuresActivated = this.getPlaceholder();
-        (0, _insert.prepend)(parents[parents.length - 1] || object, (0, _gen.VariableDeclaration)((0, _gen.VariableDeclarator)(this.counterMeasuresActivated)));
-      }
-
-      // Since Lock occurs before variable renaming, we are using the pre-obfuscated function name
-      return [(0, _gen.ExpressionStatement)((0, _gen.LogicalExpression)("||", (0, _gen.Identifier)(this.counterMeasuresActivated), (0, _gen.SequenceExpression)([(0, _gen.AssignmentExpression)("=", (0, _gen.Identifier)(this.counterMeasuresActivated), (0, _gen.Literal)(true)), (0, _gen.CallExpression)(new _template.default(opt).single().expression, [])])))];
-    }
-
-    // Default fallback to infinite loop
-    var varName = this.getPlaceholder();
-    return (0, _random.choice)([_crash.CrashTemplate1, _crash.CrashTemplate2]).compile({
-      var: varName
+  if (me.options.lock.selfDefending) {
+    me.options.lock.customLocks.push({
+      code: "\n      (\n        function(){\n          // Breaks any code formatter\n          var namedFunction = function(){\n            const test = function(){\n              const regExp=new RegExp('\\n');\n              return regExp['test'](namedFunction)\n            };\n\n            if(test()) {\n              {countermeasures}\n            }\n          }\n\n          return namedFunction();\n        }\n    )();\n      ",
+      percentagePerBlock: 0.5
     });
   }
-
-  /**
-   * Converts Dates to numbers, then applies some randomness
-   * @param object
-   */
-  getTime(object) {
-    if (!object) {
-      return 0;
-    }
-    if (object instanceof Date) {
-      return this.getTime(object.getTime());
-    }
-    return object + (0, _random.getRandomInteger)(-4000, 4000);
+  if (me.options.lock.antiDebug) {
+    me.options.lock.customLocks.push({
+      code: "\n      debugger;\n      ",
+      percentagePerBlock: 0.5
+    });
   }
-  match(object, parents) {
-    return (0, _traverse.isBlock)(object);
+  var timesMap = new WeakMap();
+  var countermeasuresNode;
+  var invokeCountermeasuresFnName;
+  if (me.options.lock.countermeasures) {
+    invokeCountermeasuresFnName = me.getPlaceholder("invokeCountermeasures");
+    me.globalState.internals.invokeCountermeasuresFnName = invokeCountermeasuresFnName;
   }
-  transform(object, parents) {
-    if (parents.find(x => (0, _compare.isLoop)(x) && x.type != "SwitchStatement")) {
-      return;
-    }
-
-    // no check in countermeasures code, otherwise it will infinitely call itself
-    if (this.counterMeasuresNode && (object == this.counterMeasuresNode[0] || parents.indexOf(this.counterMeasuresNode[0]) !== -1)) {
-      return;
-    }
-    var block = (0, _traverse.getBlock)(object, parents);
-    var choices = [];
-    if (this.options.lock.startDate) {
-      choices.push("startDate");
+  var createCountermeasuresCode = function createCountermeasuresCode() {
+    if (invokeCountermeasuresFnName) {
+      return new _template["default"]("".concat(invokeCountermeasuresFnName, "()")).compile();
     }
-    if (this.options.lock.endDate) {
-      choices.push("endDate");
+    if (me.options.lock.countermeasures === false) {
+      return [];
     }
-    if (this.options.lock.domainLock && this.options.lock.domainLock.length) {
-      choices.push("domainLock");
+    return new _template["default"]("while(true){}").compile();
+  };
+  me.globalState.lock.createCountermeasuresCode = createCountermeasuresCode;
+  function applyLockToBlock(path, customLock) {
+    var times = timesMap.get(customLock);
+    if (typeof times === "undefined") {
+      times = 0;
     }
-    if (this.options.lock.context && this.options.lock.context.length) {
-      choices.push("context");
-    }
-    if (this.options.lock.browserLock && this.options.lock.browserLock.length) {
-      choices.push("browserLock");
-    }
-    if (this.options.lock.osLock && this.options.lock.osLock.length) {
-      choices.push("osLock");
-    }
-    if (this.options.lock.selfDefending) {
-      choices.push("selfDefending");
+    var maxCount = customLock.maxCount || 100; // 100 is default max count
+    var minCount = customLock.minCount || 1; // 1 is default min count
+
+    if (maxCount >= 0 && times > maxCount) {
+      // Limit creation, allowing -1 to disable the limit entirely
+      return;
     }
-    if (!choices.length) {
+
+    // The Program always gets a lock
+    // Else based on the percentage
+    // Try to reach the minimum count
+    if (!path.isProgram() && !(0, _randomUtils.chance)(customLock.percentagePerBlock * 100) && times >= minCount) {
       return;
     }
-    return () => {
-      this.made++;
-      if (this.made > 150) {
-        return;
-      }
-      var type = (0, _random.choice)(choices);
-      var nodes = [];
-      var dateNow = (0, _gen.CallExpression)((0, _gen.MemberExpression)((0, _gen.Identifier)("Date"), (0, _gen.Literal)("now"), true), []);
-      if (Math.random() > 0.5) {
-        dateNow = (0, _gen.CallExpression)((0, _gen.MemberExpression)((0, _gen.NewExpression)((0, _gen.Identifier)("Date"), []), (0, _gen.Literal)("getTime")), []);
-      }
-      if (Math.random() > 0.5) {
-        dateNow = (0, _gen.CallExpression)((0, _gen.MemberExpression)((0, _gen.MemberExpression)((0, _gen.MemberExpression)((0, _gen.Identifier)("Date"), (0, _gen.Literal)("prototype"), true), (0, _gen.Literal)("getTime"), true), (0, _gen.Literal)("call"), true), [(0, _gen.NewExpression)((0, _gen.Identifier)("Date"), [])]);
+
+    // Increment the times
+    timesMap.set(customLock, times + 1);
+    var lockCode = Array.isArray(customLock.code) ? (0, _randomUtils.choice)(customLock.code) : customLock.code;
+    var template = typeof lockCode === "string" ? new _template["default"](lockCode) : lockCode;
+    var lockNodes = template.compile({
+      countermeasures: function countermeasures() {
+        return createCountermeasuresCode();
       }
-      var test;
-      var offset = 0;
-      switch (type) {
-        case "selfDefending":
-          // A very simple mechanism inspired from https://github.com/javascript-obfuscator/javascript-obfuscator/blob/master/src/custom-code-helpers/self-defending/templates/SelfDefendingNoEvalTemplate.ts
-          // regExp checks for a newline, formatters add these
-          var callExpression = new _template.default(`
-            (
-              function(){
-                // Breaks JSNice.org, beautifier.io
-                var namedFunction = function(){
-                  const test = function(){
-                    const regExp=new RegExp('\\n');
-                    return regExp['test'](namedFunction)
-                  };
-                  return test()
-                }
+    });
+    var p = path.unshiftContainer("body", lockNodes);
+    p.forEach(function (p) {
+      return p.skip();
+    });
+    me.changeData.locksInserted++;
+  }
+  return {
+    visitor: {
+      BindingIdentifier: function BindingIdentifier(path) {
+        if (path.node.name !== me.options.lock.countermeasures) {
+          return;
+        }
 
-                return namedFunction();
-              }
-            )()
-            `).single().expression;
-          nodes.push((0, _gen.IfStatement)(callExpression, this.getCounterMeasuresCode(object, parents) || [], null));
-          break;
-        case "startDate":
-          test = (0, _gen.BinaryExpression)("<", dateNow, (0, _gen.Literal)(this.getTime(this.options.lock.startDate)));
-          nodes.push((0, _gen.IfStatement)(test, this.getCounterMeasuresCode(object, parents) || [], null));
-          break;
-        case "endDate":
-          test = (0, _gen.BinaryExpression)(">", dateNow, (0, _gen.Literal)(this.getTime(this.options.lock.endDate)));
-          nodes.push((0, _gen.IfStatement)(test, this.getCounterMeasuresCode(object, parents) || [], null));
-          break;
-        case "context":
-          var prop = (0, _random.choice)(this.options.lock.context);
-          var code = this.getCounterMeasuresCode(object, parents) || [];
+        // Exclude labels
+        if (!(0, _astUtils.isVariableIdentifier)(path)) return;
+        if (!(0, _astUtils.isDefiningIdentifier)(path)) {
+          // Reassignments are not allowed
 
-          // Todo: Alternative to `this`
-          if (!this.globalVar) {
-            offset = 1;
-            this.globalVar = this.getPlaceholder();
-            (0, _insert.prepend)(parents[parents.length - 1] || block, (0, _gen.VariableDeclaration)((0, _gen.VariableDeclarator)(this.globalVar, (0, _gen.LogicalExpression)("||", (0, _gen.Identifier)(this.options.globalVariables.keys().next().value), (0, _gen.ThisExpression)()))));
+          me.error("Countermeasures function cannot be reassigned");
+        }
+        if (countermeasuresNode) {
+          // Disallow multiple countermeasures functions
+
+          me.error("Countermeasures function was already defined, it must have a unique name from the rest of your code");
+        }
+        if (path.scope.getBinding(path.node.name).scope !== path.scope.getProgramParent()) {
+          me.error("Countermeasures function must be defined at the global level");
+        }
+        countermeasuresNode = path;
+      },
+      Block: {
+        exit: function exit(path) {
+          var customLock = (0, _randomUtils.choice)(me.options.lock.customLocks);
+          if (customLock) {
+            applyLockToBlock(path, customLock);
           }
-          test = (0, _gen.UnaryExpression)("!", (0, _gen.MemberExpression)((0, _gen.Identifier)(this.globalVar), (0, _gen.Literal)(prop), true));
-          nodes.push((0, _gen.IfStatement)(test, code, null));
-          break;
-        case "osLock":
-          var navigatorUserAgent = new _template.default(`window.navigator.userAgent.toLowerCase()`).single().expression;
-          (0, _assert.ok)(this.options.lock.osLock);
-          var code = this.getCounterMeasuresCode(object, parents) || [];
-          this.options.lock.osLock.forEach(osName => {
-            var agentMatcher = {
-              windows: "Win",
-              linux: "Linux",
-              osx: "Mac",
-              android: "Android",
-              ios: "---"
-            }[osName];
-            var thisTest = (0, _gen.CallExpression)((0, _gen.MemberExpression)(navigatorUserAgent, (0, _gen.Literal)("match"), true), [(0, _gen.Literal)(agentMatcher.toLowerCase())]);
-            if (osName == "ios" && this.options.target === "browser") {
-              if (!this.iosDetectFn) {
-                this.iosDetectFn = this.getPlaceholder();
-                (0, _insert.prepend)(parents[parents.length - 1] || object, new _template.default(`function ${this.iosDetectFn}() {
-                  return [
-                    'iPad Simulator',
-                    'iPhone Simulator',
-                    'iPod Simulator',
-                    'iPad',
-                    'iPhone',
-                    'iPod'
-                  ].includes(navigator.platform)
-                  // iPad on iOS 13 detection
-                  || (navigator.userAgent.includes("Mac") && "ontouchend" in document)
-                }`).single());
+        }
+      },
+      Program: {
+        exit: function exit(path) {
+          // Insert nativeFunctionCheck
+          if (me.options.lock.tamperProtection) {
+            // Disallow strict mode
+            // Tamper Protection uses non-strict mode features:
+            // - eval() with local scope assignments
+            var directives = path.get("directives");
+            var _iterator2 = _createForOfIteratorHelper(directives),
+              _step2;
+            try {
+              for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
+                var directive = _step2.value;
+                if (directive.node.value.value === "use strict") {
+                  me.error("Tamper Protection cannot be applied to code in strict mode. Disable strict mode by removing the 'use strict' directive, or disable Tamper Protection.");
+                }
               }
-              thisTest = (0, _gen.CallExpression)((0, _gen.Identifier)(this.iosDetectFn), []);
-            }
-            if (this.options.target === "node") {
-              var platformName = {
-                windows: "win32",
-                osx: "darwin",
-                ios: "darwin"
-              }[osName] || osName;
-              thisTest = new _template.default(`require('os').platform()==="${platformName}"`).single().expression;
-            }
-            if (!test) {
-              test = thisTest;
-            } else {
-              test = (0, _gen.LogicalExpression)("||", {
-                ...test
-              }, thisTest);
+            } catch (err) {
+              _iterator2.e(err);
+            } finally {
+              _iterator2.f();
             }
-          });
-          test = (0, _gen.UnaryExpression)("!", {
-            ...test
-          });
-          nodes.push((0, _gen.IfStatement)(test, code, null));
-          break;
-        case "browserLock":
-          var navigatorUserAgent = new _template.default(`window.navigator.userAgent.toLowerCase()`).single().expression;
-          (0, _assert.ok)(this.options.lock.browserLock);
-          this.options.lock.browserLock.forEach(browserName => {
-            var thisTest = (0, _gen.CallExpression)((0, _gen.MemberExpression)(navigatorUserAgent, (0, _gen.Literal)("match"), true), [(0, _gen.Literal)(browserName == "iexplorer" ? "msie" : browserName.toLowerCase())]);
-            if (browserName === "safari") {
-              thisTest = new _template.default(`/^((?!chrome|android).)*safari/i.test(navigator.userAgent)`).single().expression;
-            }
-            if (!test) {
-              test = thisTest;
-            } else {
-              test = (0, _gen.LogicalExpression)("||", {
-                ...test
-              }, thisTest);
+            var nativeFunctionName = me.getPlaceholder() + "_nativeFunctionCheck";
+            me.obfuscator.globalState.internals.nativeFunctionName = nativeFunctionName;
+
+            // Ensure program is not in strict mode
+            // Tamper Protection forces non-strict mode
+            (0, _astUtils.prependProgram)(path, _tamperProtectionTemplates.StrictModeTemplate.compile({
+              nativeFunctionName: nativeFunctionName,
+              countermeasures: createCountermeasuresCode()
+            }));
+            var nativeFunctionDeclaration = _tamperProtectionTemplates.NativeFunctionTemplate.single({
+              nativeFunctionName: nativeFunctionName,
+              countermeasures: createCountermeasuresCode(),
+              IndexOfTemplate: _tamperProtectionTemplates.IndexOfTemplate
+            });
+
+            // Checks function's toString() value for [native code] signature
+            (0, _astUtils.prependProgram)(path, nativeFunctionDeclaration);
+          }
+
+          // Insert invokeCountermeasures function
+          if (invokeCountermeasuresFnName) {
+            if (!countermeasuresNode) {
+              me.error("Countermeasures function named '" + me.options.lock.countermeasures + "' was not found.");
             }
-          });
-          test = (0, _gen.UnaryExpression)("!", {
-            ...test
-          });
-          nodes.push((0, _gen.IfStatement)(test, this.getCounterMeasuresCode(object, parents) || [], null));
-          break;
-        case "domainLock":
-          function removeSlashes(path) {
-            var count = path.length - 1;
-            var index = 0;
-            while (path.charCodeAt(index) === 47 && ++index);
-            while (path.charCodeAt(count) === 47 && --count);
-            return path.slice(index, count + 1);
+            var hasInvoked = me.getPlaceholder("hasInvoked");
+            var statements = new _template["default"]("\n                var ".concat(hasInvoked, " = false;\n                function ").concat(invokeCountermeasuresFnName, "(){\n                  if(").concat(hasInvoked, ") return;\n                  ").concat(hasInvoked, " = true;\n                  ").concat(me.options.lock.countermeasures, "();\n                }\n                ")).addSymbols(_constants.MULTI_TRANSFORM).compile();
+            (0, _astUtils.prependProgram)(path, statements).forEach(function (p) {
+              return p.skip();
+            });
           }
-          var locationHref = (0, _gen.MemberExpression)((0, _gen.Identifier)("location"), (0, _gen.Literal)("href"), true);
-          var random = (0, _random.choice)(this.options.lock.domainLock);
-          if (random) {
-            test = (0, _gen.CallExpression)((0, _gen.MemberExpression)(locationHref, (0, _gen.Literal)("match"), true), [{
-              type: "Literal",
-              regex: {
-                pattern: random instanceof RegExp ? random.source : removeSlashes(random + ""),
-                flags: random instanceof RegExp ? "" : ""
+          if (me.options.lock.integrity) {
+            var hashFnName = me.getPlaceholder() + "_hash";
+            var imulFnName = me.getPlaceholder() + "_imul";
+            var _sensitivityRegex = me.globalState.lock.integrity.sensitivityRegex;
+            me.globalState.internals.integrityHashName = hashFnName;
+            var hashCode = _integrityTemplate.HashTemplate.compile({
+              imul: imulFnName,
+              name: hashFnName,
+              hashingUtilFnName: me.getPlaceholder(),
+              sensitivityRegex: function sensitivityRegex() {
+                return t.newExpression(t.identifier("RegExp"), [t.stringLiteral(_sensitivityRegex.source), t.stringLiteral(_sensitivityRegex.flags)]);
               }
-            }]);
-            test = (0, _gen.UnaryExpression)("!", test);
-            if (Math.random() > 0.5) {
-              test = (0, _gen.LogicalExpression)("||", (0, _gen.BinaryExpression)("==", (0, _gen.UnaryExpression)("typeof", (0, _gen.Identifier)("location")), (0, _gen.Literal)("undefined")), test);
-            }
-            nodes.push((0, _gen.IfStatement)(test, this.getCounterMeasuresCode(object, parents) || [], null));
+            });
+            (0, _astUtils.prependProgram)(path, hashCode);
           }
-          break;
-      }
-      if (nodes.length) {
-        var body = (0, _insert.getBlockBody)(block);
-        var randomIndex = (0, _random.getRandomInteger)(0, body.length) + offset;
-        if (randomIndex >= body.length) {
-          body.push(...nodes);
-        } else {
-          body.splice(randomIndex, 0, ...nodes);
+        }
+      },
+      // Integrity first pass
+      // Functions are prepared for Integrity by simply extracting the function body
+      // The extracted function is hashed in the 'integrity' plugin
+      FunctionDeclaration: {
+        exit: function exit(funcDecPath) {
+          if (!me.options.lock.integrity) return;
+
+          // Mark functions for integrity
+          // Don't apply to async or generator functions
+          if (funcDecPath.node.async || funcDecPath.node.generator) return;
+          if (funcDecPath.find(function (p) {
+            return !!p.node[_constants.SKIP];
+          })) return;
+          var program = (0, _astUtils.getParentFunctionOrProgram)(funcDecPath);
+          // Only top-level functions
+          if (!program.isProgram()) return;
+
+          // Check user's custom implementation
+          var functionName = (0, _astUtils.getFunctionName)(funcDecPath);
+          // Don't apply to the countermeasures function (Intended)
+          if (me.options.lock.countermeasures && functionName === me.options.lock.countermeasures) return;
+          // Don't apply to invokeCountermeasures function (Intended)
+          if (me.obfuscator.isInternalVariable(functionName)) return;
+          if (!(0, _probability.computeProbabilityMap)(me.options.lock.integrity, functionName)) return;
+          var newFnName = me.getPlaceholder();
+          var newFunctionDeclaration = t.functionDeclaration(t.identifier(newFnName), funcDecPath.node.params, funcDecPath.node.body);
+
+          // Clone semantic symbols like (UNSAFE, PREDICTABLE, MULTI_TRANSFORM, etc)
+          var source = funcDecPath.node;
+          Object.getOwnPropertySymbols(source).forEach(function (symbol) {
+            newFunctionDeclaration[symbol] = source[symbol];
+          });
+          newFunctionDeclaration[_constants.SKIP] = true;
+          var _program$unshiftConta = program.unshiftContainer("body", newFunctionDeclaration),
+            _program$unshiftConta2 = _slicedToArray(_program$unshiftConta, 1),
+            newFnPath = _program$unshiftConta2[0];
+
+          // Function simply calls the new function
+          // In the case Integrity cannot transform the function, the original behavior is preserved
+          funcDecPath.node.body = t.blockStatement(new _template["default"]("\n              return  ".concat(newFnName, "(...arguments);\n              ")).compile(), funcDecPath.node.body.directives);
+
+          // Parameters no longer needed, using 'arguments' instead
+          funcDecPath.node.params = [];
+
+          // Mark the function as unsafe - use of 'arguments' is unsafe
+          funcDecPath.node[_constants.UNSAFE] = true;
+
+          // Params changed - function is no longer predictable
+          funcDecPath.node[_constants.PREDICTABLE] = false;
+
+          // Mark the function for integrity
+          funcDecPath.node[_integrity.INTEGRITY] = {
+            fnPath: newFnPath,
+            fnName: newFnName
+          };
         }
       }
-    };
-  }
-}
-exports.default = Lock;
+    }
+  };
+};