当前位置:网站首页>Js逆向——捅了【马蜂窝】的ob混淆与加速乐
Js逆向——捅了【马蜂窝】的ob混淆与加速乐
2022-07-06 17:32:00 【万物皆可Hook】
首先进行抓包分析
要请求到页面真实信息,需要发送三次请求,前两次是521,第一次请求返回第二次请求所需cookie——__jsluid_h,另外响应内容中隐藏了第二个cookie参数__jsl_clearance。第一次请求代码如下:
headers = {
'Proxy-Connection': 'keep-alive',
'Pragma': 'no-cache',
'Cache-Control': 'no-cache',
'Upgrade-Insecure-Requests': '1',
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36',
'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9',
'Referer': 'http://www.mafengwo.cn/i/20013958.html',
'Accept-Language': 'zh-CN,zh;q=0.9',
}
response = session.get('http://www.mafengwo.cn/i/23704915.html', headers=headers, verify=False)
print(response.text)
__jsluid_h = response.headers['Set-Cookie']
__jsluid_h可以直接拿到,另外响应内容如下:
<script>document.cookie=('_')+('_')+('j')+('s')+('l')+('_')+('c')+('l')+('e')+('a')+('r')+('a')+('n')+('c')+('e')+('=')+(+!+[]+'')+((1+[2])/[2]+'')+(2+3+'')+(3+3+'')+(6+'')+(-~[5]+'')+((1+[2])/[2]+'')+((1<<2)+'')+((2<<1)+'')+(2+4+'')+('.')+(2+7+'')+(4+'')+(3+'')+('|')+('-')+(-~0+'')+('|')+('C')+('D')+('m')+('Z')+('K')+('%')+(-~1+'')+('F')+('s')+('a')+('Y')+(-~[6]+'')+('e')+([2]*(3)+'')+('q')+('B')+('m')+('%')+(-~1+'')+('B')+('n')+('G')+('V')+('z')+(2+2+'')+('Z')+('v')+('l')+(5+'')+('U')+('I')+('%')+(-~[2]+'')+('D')+(';')+('m')+('a')+('x')+('-')+('a')+('g')+('e')+('=')+((1+[2]>>2)+'')+([2]*(3)+'')+((+false)+'')+(~~false+'')+(';')+('p')+('a')+('t')+('h')+('=')+('/');location.href=location.pathname+location.search</script>
再eval执行响应内容拿到cookie参数__jsl_clearance
text = response.text.replace('<script>document.cookie=', '').replace(
'location.href=location.pathname+location.search</script>', '')
jsl = """ function main(text) { return eval(text) } """
__jsl_clearance = execjs.compile(jsl).call('main', text)
print(__jsl_clearance)
然后就可以拿着两个cookie参数发送第二次请求了。
第二次请求与第一次区别就是加了cookie。就不贴代码了
第二次请求的响应内容就是要解析的js代码了,需要逆向拿到第二次请求所需的__jsl_clearance才能做第三次请求。首先在第二次请求的响应内容中拿到下方这个对象,这是逆向出__jsl_clearance所需参数。
go({
"bts": ["1656666892.655|0|u1Z", "CF66L%2FBHLAJE%2BTNOL4qqIY%3D"],
"chars": "CwUuswlWjBMJPUR6Rc6yYC",
"ct": "8bf7c727738d1c275ada2ff2fb4036ddd4c11586aeb86ac2d9427e79765d6621",
"ha": "sha256",
"tn": "__jsl_clearance",
"vt": "3600",
"wt": "1500"
}
bts、chars、ct都是动态的,每次抓取都要在第二次请求中截取出来。后面有用。
接下来就是第三次请求,要解析出__jsl_clearance 的生成过程。
这里我使用fd hook的方式,定位参数生成位置
Hook代码:
(function (){
var aaa = "";
Object.defineProperty(document, 'cookie', {
set: function(val) {
if (val.indexOf('__jsl_clearance') != -1){
debugger
}
console.log(val)
aaa = val;
return val;
},
get: function(){
return aaa;
}
});
})();
成功hook,跟上一级堆栈
document[_0x2ec8(‘0x8f’, ‘4lvl’) + ‘ie’] 就是要逆向的参数值
需要注意的是,这里的混淆是动态的,也就是说每次刷新你看到的参数名都是不同的,所以你打开的页面跟我的看起来肯定是不一样的。
在下一行打上断点,走下来。执行一下document[_0x2ec8(‘0x8f’, ‘4lvl’) + ‘ie’]就可以确定了document[_0x2ec8(‘0x8f’, ‘4lvl’) + ‘ie’] 就是要逆向的参数值
先把这行代码抠出来,顺便改个名
__jsl_clearance = _0x280d98[_0x2ec8('0x11', 'U^zS') + 'M'](_0x280d98[_0x2ec8('0x63', 'F2lQ') + 'M'](_0x280d98[_0x2ec8('0x1e', 'z*df') + 'M'](_0x325366['tn'], '=') + _0x4f17b5[0x0] + _0x280d98[_0x2ec8('0x5', 'xIIr') + 'A'], _0x325366['vt']), _0x2ec8('0x34', 'z%[email protected]') + _0x2ec8('0xbf', 'xIIr') + '\x20/');
可以执行一下,然后缺啥补啥
首先是报这个_0x280d98未定义,可以看出这是一个对象,往上找生成过程
在432行可以看到_0x280d98在此定义并且赋值,而赋值的_0x116f6d又在上面创建并添加对象,我们就把这上面的代码都扣下来。
接下来不再详述,反正就是报什么未定义就去找
过程并不复杂,需要注意的是前面提过的,要把固定的go里的参数修改成你第二次请求抓取到的。
扣下来的完整代码如下:
var _0xbef7 = ['ZDrDhXE=', 'wpBkwpDClg==', 'fMK9WAU=', 'XwPCmcKz', 'wrB8wqDCqQ==', 'YMOoJsOL', 'HsKFLsK1', 'HsOEHmU=', 'URvDsSE=', 'KMKnwrDDmw==', 'YRfCtw0=', 'ZcK6WjU=', 'bS0Iw4M=', 'VsOMD8Od', 'w4Quw4jClg==', 'wqEFwp1Y', 'IMO3BXo=', 'woFywqkk', 'w4gkw4/CmQ==', 'w7YiE20=', 'wrzDrsKuNg==', 'w5/DrHtd', 'wqIHwpNe', 'w7IIMWg=', 'wpjDryLCow==', 'w4/Dhy3CvA==', 'wqorwpJ6', 'wqkcAVs=', 'wrJvw7XDsw==', 'KkvDpMOz', 'NgPDoAM=', 'wrMww5gc', 'RMOfS8Oq', 'wrV6w6kj', 'w7/DjnZj', 'QMKhEnY=', 'woAQwqY=', 'w7oOC8Kn', 'N17DpsOO', 'wrQ6wpZ3', 'w58mJcKw', 'woAVwrQQ', 'OMK8w5dM', 'wrjDgX1K', 'RsO0UcOL', 'woI5Sgc=', 'JRvDqBk=', 'eMKBI1U=', 'wrpgEig=', 'G0DClig=', 'wo8xwqgc', 'YMO5c8OI', 'JcOhwq7Drw==', 'wovCu8KowqU=', 'T8OnZFo=', 'O8OsDFc=', 'wr40C14=', 'PsKEwpnDqA==', 'woZ3eWY=', 'a8OUKMOT', 'w7UPAMKm', 'PMK7wo/Dhg==', 'YsK1egE=', 'w7QNw5zCtA==', 'w4QQOTI=', 'PsO7NHQ=', 'w4sZFQQ=', 'S8KCw596', 'wovDv8KXMw==', 'aSXDjcOn', 'woINbCs=', 'IQAXw6Y=', 'dcOACsOI', 'T8OLYMOc', 'wq/Dj8KxMw==', 'ZsKzKFg=', 'woRiwqLCpQ==', 'wqDDpDbChQ==', 'w7U7DVg=', 'bC5NGg==', 'IMKAA8KY', 'wrFkFTQ=', 'wpvDhMKgJA==', 'TcOXR8O+', 'Rw/DqcOD', 'WxrDui8=', 'wqbDoMKFw5A=', 'EjRvw7o=', 'woV/bXc=', 'M8KcwovDhw==', 'XcOqQ8Ol', 'w6oEMX0=', 'UMOoGA4=', 'wpMEwogS', 'FnHDkMOQ', 'wqd2woge', 'dAjDrMOG', 'NDRUw5g=', 'QcKSSMOp', 'ScKyw49C', 'UsO6U2E=', 'wqAAw58z', 'SyNOEA==', 'UsOeFMOh', 'w44Ef8KU', 'YMOPKsO2', '6Kyq5rGD6auq6K6G', 'BcOpK34=', 'NxrCiA==', 'woxXw5zDkQ==', 'VcOZYw==', 'wrh0wpAr', 'BUPDscOO', 'dMO+VnI=', 'dzPDicOd', 'agvDoXw=', 'wqk9wpEB', 'DMKNYG4=', 'HcOrGAs=', 'aBHDqgU=', 'aQ7DmE0=', 'PsKLLMKc', 'XiHCmsKq', 'w6oaAsKo', 'wrrDhsKuHA==', 'w6ANQsK/', 'N8O5w4kO', 'Pl/DmcO1', 'GG7DlcOp', 'UTpsGA==', 'wpYrwq8o', 'QA3DjjA=', 'GcK1wq7DkQ==', 'wqbDrcKFw5c=', 'wq9vMhY=', 'w4cBKCY=', 'wo8uwrZH', 'wr5pBzU=', 'EMKdw6LDtw==', 'w6EpYMKJ', 'woR2UWQ=', 'KlDDp8Ox', 'QMKBw6ZY', 'w57Chipa', 'w7c2w4pj', 'UgjDgsOW', 'B8KdN8K2', 'BMORJHM=', 'wqk0ShE=', 'wobDozrCoQ==', 'OQoMw78=', 'wq7CtsKU', 'AlTDosOV', 'w6B8w4DCsA==', 'wrtMCgY=', 'wphrwr8B', 'DsOiwpgH', 'w7vDgWxG', 'wq3Dh8KwOA==', 'BU/DmMOZ', 'JsKdw7jDnw==', 'UBjDg2c=', 'woBuwojCjQ==', 'wrpLwpzCqQ==', 'wqFOw63Diw==', 'WDLCicKl', 'I0/DvsOI', 'woRjUUk=', 'CmDDscOY', 'bcOAMsOV', 'CVrDg8Og', 'w6bDk1RA', 'wqd8wqDCrg==', 'w63Ctgpf', 'w7I8GAE=', 'wqbDnCNT', 'wodiemI=', 'w6rCpcOBwp0=', 'w7bDiHtd', 'SjTCmsKR', 'w6w+BE4=', 'Lysnw7M=', 'w400w5/CtQ==', 'dBzDoEs=', 'N8K2H8KY', 'wr8wXxo=', 'ccKzw6do', 'T8OnXsOA', 'TcOCZV8=', 'esK1woVD', 'ZMOKccOn', 'Ozlbw40=', 'wrE+wqkX', 'wrhOBAA=', 'w4ULLCE=', 'wpMJw5Ix', 'w7IDOMKg', 'AMKBFA==', 'woUbw5sv', 'w6MDMFU='];
(function (_0x56dc74, _0xbef7e) {
var _0x2ec8f5 = function (_0xa3d60c) {
while (--_0xa3d60c) {
_0x56dc74['push'](_0x56dc74['shift']());
}
};
_0x2ec8f5(++_0xbef7e);
}(_0xbef7, 0x1d1));
var _0x2ec8 = function (_0x56dc74, _0xbef7e) {
_0x56dc74 = _0x56dc74 - 0x0;
var _0x2ec8f5 = _0xbef7[_0x56dc74];
if (_0x2ec8['GMYMVm'] === undefined) {
(function () {
var _0x56e539 = function () {
var _0xc7756;
try {
_0xc7756 = Function('return\x20(function()\x20' + '{}.constructor(\x22return\x20this\x22)(\x20)' + ');')();
} catch (_0x1b5e8a) {
_0xc7756 = window;
}
return _0xc7756;
};
var _0x59eb23 = _0x56e539();
var _0x9cf7f6 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
_0x59eb23['atob'] || (_0x59eb23['atob'] = function (_0xc831ee) {
var _0x514208 = String(_0xc831ee)['replace'](/=+$/, '');
var _0x47363c = '';
for (var _0x382c23 = 0x0, _0x3651e2, _0x21855c, _0x2979a4 = 0x0; _0x21855c = _0x514208['charAt'](_0x2979a4++); ~_0x21855c && (_0x3651e2 = _0x382c23 % 0x4 ? _0x3651e2 * 0x40 + _0x21855c : _0x21855c,
_0x382c23++ % 0x4) ? _0x47363c += String['fromCharCode'](0xff & _0x3651e2 >> (-0x2 * _0x382c23 & 0x6)) : 0x0) {
_0x21855c = _0x9cf7f6['indexOf'](_0x21855c);
}
return _0x47363c;
}
);
}());
var _0x5059d3 = function (_0x4a3753, _0x5f53c8) {
var _0x490572 = [], _0x56a542 = 0x0, _0x4ef2d8, _0x163b49 = '', _0x4814fd = '';
_0x4a3753 = atob(_0x4a3753);
for (var _0x2c0ef5 = 0x0, _0x5d3a39 = _0x4a3753['length']; _0x2c0ef5 < _0x5d3a39; _0x2c0ef5++) {
_0x4814fd += '%' + ('00' + _0x4a3753['charCodeAt'](_0x2c0ef5)['toString'](0x10))['slice'](-0x2);
}
_0x4a3753 = decodeURIComponent(_0x4814fd);
var _0xef5ae6;
for (_0xef5ae6 = 0x0; _0xef5ae6 < 0x100; _0xef5ae6++) {
_0x490572[_0xef5ae6] = _0xef5ae6;
}
for (_0xef5ae6 = 0x0; _0xef5ae6 < 0x100; _0xef5ae6++) {
_0x56a542 = (_0x56a542 + _0x490572[_0xef5ae6] + _0x5f53c8['charCodeAt'](_0xef5ae6 % _0x5f53c8['length'])) % 0x100;
_0x4ef2d8 = _0x490572[_0xef5ae6];
_0x490572[_0xef5ae6] = _0x490572[_0x56a542];
_0x490572[_0x56a542] = _0x4ef2d8;
}
_0xef5ae6 = 0x0;
_0x56a542 = 0x0;
for (var _0x17cf94 = 0x0; _0x17cf94 < _0x4a3753['length']; _0x17cf94++) {
_0xef5ae6 = (_0xef5ae6 + 0x1) % 0x100;
_0x56a542 = (_0x56a542 + _0x490572[_0xef5ae6]) % 0x100;
_0x4ef2d8 = _0x490572[_0xef5ae6];
_0x490572[_0xef5ae6] = _0x490572[_0x56a542];
_0x490572[_0x56a542] = _0x4ef2d8;
_0x163b49 += String['fromCharCode'](_0x4a3753['charCodeAt'](_0x17cf94) ^ _0x490572[(_0x490572[_0xef5ae6] + _0x490572[_0x56a542]) % 0x100]);
}
return _0x163b49;
};
_0x2ec8['IcdgoY'] = _0x5059d3;
_0x2ec8['nzYWSG'] = {
};
_0x2ec8['GMYMVm'] = !![];
}
var _0xa3d60c = _0x2ec8['nzYWSG'][_0x56dc74];
if (_0xa3d60c === undefined) {
if (_0x2ec8['SaYtRl'] === undefined) {
_0x2ec8['SaYtRl'] = !![];
}
_0x2ec8f5 = _0x2ec8['IcdgoY'](_0x2ec8f5, _0xbef7e);
_0x2ec8['nzYWSG'][_0x56dc74] = _0x2ec8f5;
} else {
_0x2ec8f5 = _0xa3d60c;
}
return _0x2ec8f5;
};
function hash(_0x44087b) {
var _0x47b14f = {
};
_0x47b14f[_0x2ec8('0xba', 'R%7f') + 'v'] = function (_0x5d8fb4, _0x370b10) {
return _0x5d8fb4 + _0x370b10;
}
;
_0x47b14f[_0x2ec8('0x45', 'w&%d') + 'j'] = function (_0x14c78c, _0x359e33) {
return _0x14c78c & _0x359e33;
}
;
_0x47b14f[_0x2ec8('0xb9', 'SI5d') + 'J'] = _0x2ec8('0xa7', 'u[GW') + _0x2ec8('0x5b', 'ICoK') + _0x2ec8('0x3e', '[email protected]') + _0x2ec8('0xac', 'leOj');
_0x47b14f[_0x2ec8('0x67', '^X16') + 'L'] = function (_0x537ac4, _0xcc96ef) {
return _0x537ac4 >> _0xcc96ef;
}
;
_0x47b14f[_0x2ec8('0x2c', 'F2lQ') + 'z'] = function (_0x20e390, _0x1cb463) {
return _0x20e390 + _0x1cb463;
}
;
_0x47b14f[_0x2ec8('0x47', 'v&ej') + 'F'] = function (_0x2196ca, _0x19b48f) {
return _0x2196ca >> _0x19b48f;
}
;
_0x47b14f[_0x2ec8('0xaf', 'leOj') + 'u'] = function (_0x158201, _0x4eef9) {
return _0x158201 + _0x4eef9;
}
;
_0x47b14f[_0x2ec8('0x0', 'n&[(') + 'e'] = function (_0x4f9de5, _0x11fd14) {
return _0x4f9de5 * _0x11fd14;
}
;
_0x47b14f[_0x2ec8('0x46', '[J*f') + 'X'] = function (_0x3944ca, _0x29f3d1) {
return _0x3944ca >> _0x29f3d1;
}
;
_0x47b14f[_0x2ec8('0x62', 'hteo') + 'k'] = function (_0x52c7c2, _0x172d79) {
return _0x52c7c2 << _0x172d79;
}
;
_0x47b14f[_0x2ec8('0x2', 'ICoK') + 'a'] = function (_0x25704a, _0x23b29c) {
return _0x25704a - _0x23b29c;
}
;
_0x47b14f[_0x2ec8('0x9e', 'BR!0') + 'W'] = function (_0x3a2364, _0x1b0667) {
return _0x3a2364 - _0x1b0667;
}
;
_0x47b14f[_0x2ec8('0xbc', 'u^NR') + 'E'] = function (_0x464c74, _0x4fd0fc) {
return _0x464c74 < _0x4fd0fc;
}
;
_0x47b14f[_0x2ec8('0x89', 'c[6S') + 't'] = function (_0x4624b7, _0xa21343) {
return _0x4624b7 ^ _0xa21343;
}
;
_0x47b14f[_0x2ec8('0x59', 'w&%d') + 'a'] = function (_0xb50c4c, _0x393917) {
return _0xb50c4c ^ _0x393917;
}
;
_0x47b14f[_0x2ec8('0xaa', 'X5%L') + 'N'] = function (_0x47f844, _0x342f0f) {
return _0x47f844 < _0x342f0f;
}
;
_0x47b14f[_0x2ec8('0xc4', 'CNW[') + 'q'] = function (_0x4ae4d7, _0x3700d8) {
return _0x4ae4d7 < _0x3700d8;
}
;
_0x47b14f[_0x2ec8('0x9b', 'U^zS') + 'v'] = function (_0x139796, _0x1ffc54, _0x271d37) {
return _0x139796(_0x1ffc54, _0x271d37);
}
;
_0x47b14f[_0x2ec8('0xa8', '@cP%') + 'z'] = function (_0x46815b, _0x4b545f) {
return _0x46815b < _0x4b545f;
}
;
_0x47b14f[_0x2ec8('0x7d', 'PKXN') + 'i'] = _0x2ec8('0x7c', '*#UM') + _0x2ec8('0x52', 'z%[email protected]') + _0x2ec8('0x93', 'MZBG') + '6';
_0x47b14f[_0x2ec8('0x9a', 'BR!0') + 'K'] = function (_0x198234, _0x9488a7, _0x2dd02e) {
return _0x198234(_0x9488a7, _0x2dd02e);
}
;
_0x47b14f[_0x2ec8('0x4', '[email protected]') + 'k'] = function (_0x4c47ba, _0x3fdac9, _0x5d5546) {
return _0x4c47ba(_0x3fdac9, _0x5d5546);
}
;
_0x47b14f[_0x2ec8('0x38', 'u[GW') + 'V'] = function (_0x1f3062, _0x7c0a40, _0x3cc529) {
return _0x1f3062(_0x7c0a40, _0x3cc529);
}
;
_0x47b14f[_0x2ec8('0x26', 'rNZ(') + 'B'] = function (_0x4a6997, _0x32c762) {
return _0x4a6997(_0x32c762);
}
;
_0x47b14f[_0x2ec8('0x12', 'R%7f') + 'h'] = function (_0x3c96ba, _0x35dc04) {
return _0x3c96ba < _0x35dc04;
}
;
_0x47b14f[_0x2ec8('0x6', 'abqS') + 'a'] = function (_0xa286fb, _0x7c593d) {
return _0xa286fb - _0x7c593d;
}
;
_0x47b14f[_0x2ec8('0x6c', '[email protected]') + 'U'] = function (_0x13b749, _0x12deb6, _0x5b8729) {
return _0x13b749(_0x12deb6, _0x5b8729);
}
;
_0x47b14f[_0x2ec8('0x8', 'PKXN') + 'a'] = function (_0x53f5db, _0x4b1e5e) {
return _0x53f5db + _0x4b1e5e;
}
;
_0x47b14f[_0x2ec8('0xb', '5Q%R') + 'M'] = function (_0xc96987, _0x310af1) {
return _0xc96987 + _0x310af1;
}
;
_0x47b14f[_0x2ec8('0x77', 'u[GW') + 'm'] = function (_0x1c5952, _0x35dd44) {
return _0x1c5952(_0x35dd44);
}
;
var _0x17ad0e = _0x47b14f;
function _0xaa9fc(_0x2ff948, _0x45d78f) {
return _0x17ad0e[_0x2ec8('0xa', 'X5%L') + 'v'](_0x17ad0e[_0x2ec8('0x1f', '[email protected]') + 'j'](_0x2ff948, 0x7fffffff), _0x45d78f & 0x7fffffff) ^ _0x2ff948 & 0x80000000 ^ _0x45d78f & 0x80000000;
}
function _0x2ffa34(_0x4e6bdb) {
var _0x59cda0 = _0x17ad0e[_0x2ec8('0xbe', 'n&[(') + 'J'];
var _0x3bce24 = '';
for (var _0x5038ab = 0x7; _0x5038ab >= 0x0; _0x5038ab--) {
_0x3bce24 += _0x59cda0[_0x2ec8('0x7e', 'MZBG') + 'At'](_0x17ad0e[_0x2ec8('0x6d', '[J*f') + 'L'](_0x4e6bdb, _0x5038ab * 0x4) & 0xf);
}
return _0x3bce24;
}
function _0x2e8ba3(_0x1d5b44) {
var _0x3f9144 = (_0x2ec8('0x4f', 'v&ej') + _0x2ec8('0x58', '5Q%R') + _0x2ec8('0x2b', '[email protected]'))[_0x2ec8('0x4b', 'Yi04') + 't']('|');
var _0xbd54b8 = 0x0;
while (!![]) {
switch (_0x3f9144[_0xbd54b8++]) {
case '0':
return _0x5622e0;
case '1':
_0x5622e0[_0x5ad8be * 0x10 - 0x1] = _0x1d5b44[_0x2ec8('0x49', 'fzLR') + 'th'] * 0x8;
continue;
case '2':
_0x5622e0[_0x41df5a >> 0x2] |= 0x80 << 0x18 - _0x17ad0e[_0x2ec8('0x92', 'c[6S') + 'j'](_0x41df5a, 0x3) * 0x8;
continue;
case '3':
var _0x5ad8be = _0x17ad0e[_0x2ec8('0x2c', 'F2lQ') + 'z'](_0x17ad0e[_0x2ec8('0x79', 'ICoK') + 'F'](_0x17ad0e[_0x2ec8('0x18', 'CNW[') + 'u'](_0x1d5b44[_0x2ec8('0xc3', 'leOj') + 'th'], 0x8), 0x6), 0x1)
, _0x5622e0 = new Array(_0x17ad0e[_0x2ec8('0x42', '4lvl') + 'e'](_0x5ad8be, 0x10));
continue;
case '4':
for (_0x41df5a = 0x0; _0x41df5a < _0x1d5b44[_0x2ec8('0xb3', 'R%7f') + 'th']; _0x41df5a++) {
_0x5622e0[_0x17ad0e[_0x2ec8('0x98', 'z*df') + 'X'](_0x41df5a, 0x2)] |= _0x17ad0e[_0x2ec8('0x4d', 'ICoK') + 'k'](_0x1d5b44[_0x2ec8('0x71', 'xr74') + _0x2ec8('0x5d', 'U^zS') + 'At'](_0x41df5a), _0x17ad0e[_0x2ec8('0x31', '[email protected]') + 'a'](0x18, (_0x41df5a & 0x3) * 0x8));
}
continue;
case '5':
for (var _0x41df5a = 0x0; _0x41df5a < _0x17ad0e[_0x2ec8('0x17', 'Yi04') + 'e'](_0x5ad8be, 0x10); _0x41df5a++) {
_0x5622e0[_0x41df5a] = 0x0;
}
continue;
}
break;
}
}
function _0x18daf1(_0x726b77, _0x540d73) {
return _0x726b77 << _0x540d73 | _0x726b77 >>> _0x17ad0e[_0x2ec8('0x13', '[email protected]') + 'W'](0x20, _0x540d73);
}
function _0x1c6259(_0x332883, _0x31589b, _0x59a3f0, _0xb16a17) {
if (_0x17ad0e[_0x2ec8('0x81', '[J*f') + 'E'](_0x332883, 0x14))
return _0x31589b & _0x59a3f0 | ~_0x31589b & _0xb16a17;
if (_0x17ad0e[_0x2ec8('0x33', 'SI5d') + 'E'](_0x332883, 0x28))
return _0x17ad0e[_0x2ec8('0x83', 'leOj') + 't'](_0x17ad0e[_0x2ec8('0xa3', 'F2lQ') + 'a'](_0x31589b, _0x59a3f0), _0xb16a17);
if (_0x332883 < 0x3c)
return _0x17ad0e[_0x2ec8('0x7', 'rNZ(') + 'j'](_0x31589b, _0x59a3f0) | _0x17ad0e[_0x2ec8('0x7', 'rNZ(') + 'j'](_0x31589b, _0xb16a17) | _0x17ad0e[_0x2ec8('0x45', 'w&%d') + 'j'](_0x59a3f0, _0xb16a17);
return _0x17ad0e[_0x2ec8('0x9d', 'v&ej') + 'a'](_0x31589b ^ _0x59a3f0, _0xb16a17);
}
function _0x18272e(_0x1fb47d) {
return _0x17ad0e[_0x2ec8('0x94', 'rNZ(') + 'E'](_0x1fb47d, 0x14) ? 0x5a827999 : _0x1fb47d < 0x28 ? 0x6ed9eba1 : _0x17ad0e[_0x2ec8('0xc2', 'rNZ(') + 'N'](_0x1fb47d, 0x3c) ? -0x70e44324 : -0x359d3e2a;
}
var _0x2dd04 = _0x2e8ba3(_0x44087b);
var _0x53f561 = new Array(0x50);
var _0x108fb5 = 0x67452301;
var _0x25607f = -0x10325477;
var _0x7bcc6b = -0x67452302;
var _0x109dd9 = 0x10325476;
var _0x278152 = -0x3c2d1e10;
for (var _0x306c82 = 0x0; _0x17ad0e[_0x2ec8('0x2a', 'n&[(') + 'q'](_0x306c82, _0x2dd04[_0x2ec8('0x20', 'MZBG') + 'th']); _0x306c82 += 0x10) {
var _0x2659cb = (_0x2ec8('0x70', 'u^NR') + _0x2ec8('0x21', 'u[GW') + _0x2ec8('0x44', 'u^NR') + _0x2ec8('0x1b', 'X5%L') + _0x2ec8('0x15', 'u^NR') + '|7')[_0x2ec8('0x65', 'qQKG') + 't']('|');
var _0xe17f19 = 0x0;
while (!![]) {
switch (_0x2659cb[_0xe17f19++]) {
case '0':
var _0x39fa42 = _0x108fb5;
continue;
case '1':
_0x109dd9 = _0x17ad0e[_0x2ec8('0x55', 'abqS') + 'v'](_0xaa9fc, _0x109dd9, _0x86b61a);
continue;
case '2':
_0x25607f = _0x17ad0e[_0x2ec8('0x8e', 'n&[(') + 'v'](_0xaa9fc, _0x25607f, _0x4f3148);
continue;
case '3':
_0x108fb5 = _0xaa9fc(_0x108fb5, _0x39fa42);
continue;
case '4':
var _0x22d757 = _0x278152;
continue;
case '5':
var _0x15f495 = _0x7bcc6b;
continue;
case '6':
for (var _0x30e0f1 = 0x0; _0x17ad0e[_0x2ec8('0xb6', 'X5%L') + 'z'](_0x30e0f1, 0x50); _0x30e0f1++) {
var _0x2b7b4e = _0x17ad0e[_0x2ec8('0x7f', '2OmT') + 'i'][_0x2ec8('0x3a', 'leOj') + 't']('|');
var _0x105260 = 0x0;
while (!![]) {
switch (_0x2b7b4e[_0x105260++]) {
case '0':
t = _0xaa9fc(_0x17ad0e[_0x2ec8('0x4a', '0M8k') + 'K'](_0xaa9fc, _0x17ad0e[_0x2ec8('0x8a', 'SaK)') + 'k'](_0x18daf1, _0x108fb5, 0x5), _0x1c6259(_0x30e0f1, _0x25607f, _0x7bcc6b, _0x109dd9)), _0xaa9fc(_0x17ad0e[_0x2ec8('0x60', 'Fl3Z') + 'V'](_0xaa9fc, _0x278152, _0x53f561[_0x30e0f1]), _0x17ad0e[_0x2ec8('0x5e', 'qQKG') + 'B'](_0x18272e, _0x30e0f1)));
continue;
case '1':
if (_0x17ad0e[_0x2ec8('0x8c', 'rNZ(') + 'h'](_0x30e0f1, 0x10)) {
_0x53f561[_0x30e0f1] = _0x2dd04[_0x306c82 + _0x30e0f1];
} else {
_0x53f561[_0x30e0f1] = _0x18daf1(_0x53f561[_0x30e0f1 - 0x3] ^ _0x53f561[_0x17ad0e[_0x2ec8('0xc6', 'gg32') + 'a'](_0x30e0f1, 0x8)] ^ _0x53f561[_0x17ad0e[_0x2ec8('0x9c', 'xr74') + 'a'](_0x30e0f1, 0xe)] ^ _0x53f561[_0x30e0f1 - 0x10], 0x1);
}
continue;
case '2':
_0x25607f = _0x108fb5;
continue;
case '3':
_0x278152 = _0x109dd9;
continue;
case '4':
_0x109dd9 = _0x7bcc6b;
continue;
case '5':
_0x7bcc6b = _0x17ad0e[_0x2ec8('0x16', 'MZBG') + 'V'](_0x18daf1, _0x25607f, 0x1e);
continue;
case '6':
_0x108fb5 = t;
continue;
}
break;
}
}
continue;
case '7':
_0x278152 = _0x17ad0e[_0x2ec8('0x32', 'ze[i') + 'U'](_0xaa9fc, _0x278152, _0x22d757);
continue;
case '8':
var _0x4f3148 = _0x25607f;
continue;
case '9':
_0x7bcc6b = _0x17ad0e[_0x2ec8('0xbb', 'uuAz') + 'U'](_0xaa9fc, _0x7bcc6b, _0x15f495);
continue;
case '10':
var _0x86b61a = _0x109dd9;
continue;
}
break;
}
}
return _0x17ad0e[_0x2ec8('0xb0', 'SI5d') + 'a'](_0x17ad0e[_0x2ec8('0xbd', 'z%[email protected]') + 'a'](_0x17ad0e[_0x2ec8('0x86', 'BR!0') + 'M'](_0x2ffa34(_0x108fb5), _0x17ad0e[_0x2ec8('0xa6', '5jon') + 'm'](_0x2ffa34, _0x25607f)), _0x2ffa34(_0x7bcc6b)), _0x2ffa34(_0x109dd9)) + _0x2ffa34(_0x278152);
}
var _0x116f6d = {
};
_0x116f6d[_0x2ec8('0xa9', 'xr74') + 'd'] = function (_0x10be4e, _0x1c7208, _0x16de6a) {
return _0x10be4e(_0x1c7208, _0x16de6a);
}
;
_0x116f6d[_0x2ec8('0x19', 'PKXN') + 'w'] = function (_0x378606, _0x551eb5) {
return _0x378606 < _0x551eb5;
}
;
_0x116f6d[_0x2ec8('0x1a', 'BR!0') + 'Z'] = function (_0x3ff865, _0x1e9500) {
return _0x3ff865 < _0x1e9500;
}
;
_0x116f6d[_0x2ec8('0x5a', 'z*df') + 'u'] = function (_0x16ebd5, _0x50b407) {
return _0x16ebd5 + _0x50b407;
}
;
_0x116f6d[_0x2ec8('0xa2', 'C&Tu') + 'U'] = function (_0x3c1abb, _0x360b12) {
return _0x3c1abb ^ _0x360b12;
}
;
_0x116f6d[_0x2ec8('0xc1', 'Yi04') + 'r'] = function (_0x1762d4, _0x559a18) {
return _0x1762d4 - _0x559a18;
}
;
_0x116f6d[_0x2ec8('0x6a', 'xr74') + 'b'] = function (_0x73b748, _0x1faaf0, _0xbf6322) {
return _0x73b748(_0x1faaf0, _0xbf6322);
}
;
_0x116f6d[_0x2ec8('0xa4', 'qQKG') + 'J'] = function (_0x3a5f4d, _0x17b6bc, _0x5062a9, _0x3ef2b8, _0x830e89) {
return _0x3a5f4d(_0x17b6bc, _0x5062a9, _0x3ef2b8, _0x830e89);
}
;
_0x116f6d[_0x2ec8('0x50', '[email protected]') + 'w'] = function (_0x4986a8, _0x4b24c9, _0x26a3b0) {
return _0x4986a8(_0x4b24c9, _0x26a3b0);
}
;
_0x116f6d[_0x2ec8('0x80', 'w&%d') + 'd'] = function (_0x5ef6a8, _0x5bf6ed) {
return _0x5ef6a8(_0x5bf6ed);
}
;
_0x116f6d[_0x2ec8('0xc7', '[J*f') + 'B'] = function (_0x46a4ee, _0x14baed, _0x3d7924) {
return _0x46a4ee(_0x14baed, _0x3d7924);
}
;
_0x116f6d[_0x2ec8('0x5f', 'fzLR') + 'M'] = function (_0x590fa2, _0x5b76d4) {
return _0x590fa2 != _0x5b76d4;
}
;
_0x116f6d[_0x2ec8('0x7b', 'z%[email protected]') + 'G'] = _0x2ec8('0x6f', 'Yi04') + 'i';
_0x116f6d[_0x2ec8('0xb5', 'I&MM') + 'r'] = function (_0x10a480, _0x143145) {
return _0x10a480 + _0x143145;
}
;
_0x116f6d[_0x2ec8('0x78', 'xIIr') + 'M'] = function (_0x586e6b, _0x1ac2e3) {
return _0x586e6b + _0x1ac2e3;
}
;
_0x116f6d[_0x2ec8('0x3f', 'qQKG') + 'A'] = _0x2ec8('0xa0', 'SqDq') + _0x2ec8('0xb2', 'xr74') + '=';
_0x116f6d[_0x2ec8('0x3c', '0M8k') + 'H'] = function (_0x36f42f, _0xb83a0) {
return _0x36f42f + _0xb83a0;
}
;
_0x116f6d[_0x2ec8('0xd', 'BR!0') + 'Z'] = function (_0x4bd4bf, _0x17c2ce, _0x185cde) {
return _0x4bd4bf(_0x17c2ce, _0x185cde);
}
;
_0x116f6d[_0x2ec8('0x3', 'U^zS') + 'B'] = function (_0x5b67f0, _0x4e972d) {
return _0x5b67f0(_0x4e972d);
}
;
var _0x280d98 = _0x116f6d;
var _0x325366 = {
"bts": ["1656667282.429|0|eXY", "vbtmIFq4J8kHYDrZlu2upY%3D"],
"chars": "tpvPbmWqWJHbuUhsUmFmkC",
"ct": "d0610b67664ac0e0c1d34c03571718de7f1925fe",
"ha": "sha1",
"tn": "__jsl_clearance",
"vt": "3600",
"wt": "1500"
}
var _0xac5479 = new Date();
function _0xe11243(_0x20769d, _0x4b65c9) {
var _0x1f82a9 = _0x325366[_0x2ec8('0x53', 'xIIr') + 's'][_0x2ec8('0x9f', 'SqDq') + 'th'];
for (var _0x2a5338 = 0x0; _0x2a5338 < _0x1f82a9; _0x2a5338++) {
for (var _0x4dda4b = 0x0; _0x4dda4b < _0x1f82a9; _0x4dda4b++) {
var _0x3fc00e = _0x280d98[_0x2ec8('0xae', 'v&ej') + 'r'](_0x280d98[_0x2ec8('0x63', 'F2lQ') + 'M'](_0x4b65c9[0x0], _0x325366[_0x2ec8('0x48', 'w&%d') + 's'][_0x2ec8('0x75', 'gg32') + 'tr'](_0x2a5338, 0x1)) + _0x325366[_0x2ec8('0xa5', 'I&MM') + 's'][_0x2ec8('0xb1', '*#UM') + 'tr'](_0x4dda4b, 0x1), _0x4b65c9[0x1]);
if (hash(_0x3fc00e) == _0x20769d) {
return [_0x3fc00e, new Date() - _0xac5479];
}
}
}
}
var _0x4f17b5 = _0x280d98[_0x2ec8('0x88', 'hteo') + 'B'](_0xe11243, _0x325366['ct'], _0x325366[_0x2ec8('0x2d', 'z%[email protected]')]);
__jsl_clearance = _0x280d98[_0x2ec8('0x11', 'U^zS') + 'M'](_0x280d98[_0x2ec8('0x63', 'F2lQ') + 'M'](_0x280d98[_0x2ec8('0x1e', 'z*df') + 'M'](_0x325366['tn'], '=') + _0x4f17b5[0x0] + _0x280d98[_0x2ec8('0x5', 'xIIr') + 'A'], _0x325366['vt']), _0x2ec8('0x34', 'z%[email protected]') + _0x2ec8('0xbf', 'xIIr') + '\x20/');
console.log(__jsl_clearance)
go我改了名字哈,代码里是 _0x325366 。大家
边栏推荐
- Transformation transformation operator
- 树莓派/arm设备上安装火狐Firefox浏览器
- 【JVM调优实战100例】04——方法区调优实战(上)
- Link sharing of STM32 development materials
- Part VI, STM32 pulse width modulation (PWM) programming
- 身体质量指数程序,入门写死的小程序项目
- 迈动互联中标北京人寿保险,助推客户提升品牌价值
- Oracle: Practice of CDB restricting PDB resources
- golang中的WaitGroup实现原理
- A brief history of deep learning (I)
猜你喜欢
迈动互联中标北京人寿保险,助推客户提升品牌价值
Build your own website (17)
Anfulai embedded weekly report no. 272: 2022.06.27--2022.07.03
批量获取中国所有行政区域经边界纬度坐标(到县区级别)
Dynamic planning idea "from getting started to giving up"
Batch obtain the latitude coordinates of all administrative regions in China (to the county level)
Can the system hibernation file be deleted? How to delete the system hibernation file
Dell笔记本周期性闪屏故障
线段树(SegmentTree)
Transformation transformation operator
随机推荐
Mongodb client operation (mongorepository)
[JS] obtain the N days before and after the current time or the n months before and after the current time (hour, minute, second, year, month, day)
[牛客] B-完全平方数
Fastdfs data migration operation record
Boot - Prometheus push gateway use
MySQL script batch queries all tables containing specified field types in the database
Atomic in golang, and cas Operations
Segmenttree
NEON优化:log10函数的优化案例
【案例分享】网络环路检测基本功能配置
The printf function is realized through the serial port, and the serial port data reception is realized by interrupt
[HFCTF2020]BabyUpload session解析引擎
接收用户输入,身高BMI体重指数检测小业务入门案例
Tencent cloud webshell experience
Meet in the middle
负载均衡性能参数如何测评?
Atomic in golang and CAS operations
第七篇,STM32串口通信编程
Provincial and urban level three coordinate boundary data CSV to JSON
筑梦数字时代,城链科技战略峰会西安站顺利落幕