JavaScript array deobfuscation

Question

Solved: Replace array-mapped variables with the actual variable name/string?

I'm trying to decode some JS and I've got a good portion of it done, however, I'm stumped here. The code does something like this:

var arr = ["value", "value1", "value2"];
console.log(arr[0]);

Except the file is around 12k lines and there are over 1.4k things in the array. Is there a way I can replace arr[0] with the actual value of arr[0] (in the example, it would be "value"), then save the file? I tried using RegExp but got nowhere.

Any help will be appreciated.

Did you write to write the output into a file? node script.js > myfile.txt — Yangshun Tay
– Yangshun Tay, Commented Apr 28, 2017 at 5:43
@Rahul I tried to iterate through it and then replace the array and value with the actual one but I just couldn't work the logic out. — Eli Richardson
– Eli Richardson, Commented Apr 28, 2017 at 5:50
@EliR: Please add that in your post along with code if possible. — Rahul
– Rahul, Commented Apr 28, 2017 at 5:51
Your question is unclear. What is the nature of your file (share a small sample)? What output are you looking for from it? — gurvinder372
– gurvinder372, Commented Apr 28, 2017 at 5:55
@gurvinder372 I can't post a snippet right now, but the file is JS code. I'm trying to replace the array name and index (ex: arr[0]), with the actual value of it (ex: "value"). — Eli Richardson
– Eli Richardson, Commented Apr 28, 2017 at 5:59

revo · Accepted Answer · 2017-04-28 09:21:54Z

1

A simple idea would be having arrays in current scope and use target javascript file content as input string for replace() method:

var arr = ['hello', 'my', 'world']
var str = `
var arr = ['hello', 'my', 'world']
console.log('arr[2]')
console.log('arr[0]')
console.log('arr[1]')
`
console.log(str.replace(/\b(\w+)\[(\d+)]/g, function(match, $p1, $p2) {
   return window[$p1][$p2];
}))

edited Apr 28, 2017 at 9:21

answered Apr 28, 2017 at 6:45

revo

49k15 gold badges84 silver badges123 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

JavaScript array deobfuscation

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related