feat: deobfuscate inlined control flow object

packages/webcrack/src/deobfuscate/control-flow-object.ts

@@ -1,6 +1,6 @@
 import type { Binding, NodePath } from '@babel/traverse';
-import * as t from '@babel/types';
 import type { FunctionExpression } from '@babel/types';
+import * as t from '@babel/types';
 import * as m from '@codemod/matchers';
 import type { Transform } from '../ast-utils';
 import {
@@ -101,7 +101,12 @@ export default {
     );
     const varMatcher = m.variableDeclarator(
       varId,
-      m.capture(m.objectExpression(objectProperties)),
+      m.objectExpression(objectProperties),
+    );
+    // Example: { YhxvC: "default" }.YhxvC
+    const inlineMatcher = constMemberExpression(
+      m.objectExpression(objectProperties),
+      propertyName,
     );
 
     function isConstantBinding(binding: Binding) {
@@ -222,6 +227,27 @@ export default {
           this.changes += transform(path);
         },
       },
+      MemberExpression: {
+        exit(path) {
+          if (!inlineMatcher.match(path.node)) return;
+
+          const propName = getPropName(path.node.property)!;
+          const value = objectProperties.current!.find(
+            (prop) => getPropName(prop.key) === propName,
+          )?.value as t.FunctionExpression | t.StringLiteral | undefined;
+          if (!value) return;
+
+          if (t.isStringLiteral(value)) {
+            path.replaceWith(value);
+          } else {
+            inlineFunction(
+              value,
+              path.parentPath as NodePath<t.CallExpression>,
+            );
+          }
+          this.changes++;
+        },
+      },
     };
   },
 } satisfies Transform;

packages/webcrack/src/deobfuscate/test/control-flow-object.test.ts

@@ -0,0 +1,20 @@
+import { test } from 'vitest';
+import { testTransform } from '../../../test';
+import controlFlowObject from '../control-flow-object';
+
+const expectJS = testTransform(controlFlowObject);
+
+// https://github.com/j4k0xb/webcrack/issues/98
+test('inlined object', () => {
+  expectJS(`
+    ({
+      QuFtJ: function (n, r) {
+        return n === r;
+      }
+    }).QuFtJ(u, undefined);
+  `).toMatchInlineSnapshot(`u === undefined;`);
+
+  expectJS(`
+    ({ YhxvC: "default" }).YhxvC;
+  `).toMatchInlineSnapshot(`"default";`);
+});