echo094 / decode-js

JS混淆代码的AST分析工具 AST analysis tool for obfuscated JS code
MIT License
570 stars 301 forks source link

关于eval加密 #15

Closed ghost closed 1 year ago

ghost commented 1 year ago

这是原加密代码

https://raw.githubusercontent.com/Josh-Longuet/demo/main/eval.js

使用了 de4js 的解密网站 https://lelinhtinh.github.io/de4js/ 部分解密结果

_0x5e2b('0x0');
((function (_0x12770f, _0x249972, _0x5e41f2, _0x3a7fa3, _0x322a1f, _0x130708, _0x4da323) {
    _0x12770f = _0x12770f >> 2;
    _0x130708 = 'hs';
    _0x4da323 = 'hs';
    return function (_0x15ba5c, _0x50aac9, _0x1c9f47, _0xd487e0, _0x517bfb) {
        _0xd487e0 = 'tfi';
        _0x130708 = _0xd487e0 + _0x130708;
        _0x517bfb = 'up';
        _0x4da323 += _0x517bfb;
        _0x130708 = _0x1c9f47(_0x130708);
        _0x4da323 = _0x1c9f47(_0x4da323);
        _0x1c9f47 = 0;
        const _0x34552b = _0x15ba5c();
        while (true && --_0x3a7fa3 + _0x50aac9) {
            try {
                _0xd487e0 = parseInt(_0x140f(568, "vca6")) / 1 + -parseInt(_0x140f(434, "(GSA")) / 2 + -parseInt(_0x140f(337, "s1yq")) / 3 + parseInt(_0x140f(581, "FI6C")) / 4 * (parseInt(_0x140f(543, "^oz*")) / 5) + parseInt(_0x140f(679, "b*Qj")) / 6 + -parseInt(_0x140f(573, "jTrB")) / 7 + parseInt(_0x140f(625, "RLvR")) / 8
            } catch (_0x125448) {
                _0xd487e0 = _0x1c9f47
            } finally {
                _0x517bfb = _0x34552b[_0x130708]();
                if (_0x12770f <= _0x3a7fa3) {
                    _0x1c9f47 ? _0x322a1f ? _0xd487e0 = _0x517bfb : _0x322a1f = _0x517bfb : _0x1c9f47 = _0x517bfb
                } else {
                    if (_0x1c9f47 == _0x322a1f['replace'](/[kCEwdWOfGPXgnlqSNLuK=]/g, '')) {
                        if (_0xd487e0 === _0x50aac9) {
                            _0x34552b['un' + _0x130708](_0x517bfb);
                            break
                        }
                        _0x34552b[_0x4da323](_0x517bfb)
                    }
                }
            }
        }
    }(_0x5e41f2, _0x249972, function (_0x4d99cb, _0x2addf5, _0x222d6e, _0x3677a8, _0xa46df1, _0x44528e, _0x134482) {
        _0x2addf5 = "split";
        _0x4d99cb = arguments[0];
        _0x4d99cb = _0x4d99cb[_0x2addf5]('');
        _0x222d6e = `reverse`;
        _0x4d99cb = _0x4d99cb[_0x222d6e]("v");
        _0x3677a8 = `join`;
        1236966;
        return _0x4d99cb[_0x3677a8]('')
    })
})(812, 615217, _0x20fc, 205), _0x20fc) && (_0xenty = _0x20fc);

function _0x140f(_0x335a60, _0x539b4a) {
    const _0x20fcd8 = _0x20fc();
    _0x140f = function (_0x140fac, _0x2f0724) {
        _0x140fac = _0x140fac - 289;
        let _0x48ce4c = _0x20fcd8[_0x140fac];
        if (_0x140f["uWwTtu"] === undefined) {
            var _0xfbaba8 = function (_0x1b493f) {
                const _0x2ab9cc = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";
                let _0x42b04d = '',
                    _0x4e0d25 = '';
                for (let _0x1aadac = 0, _0x6914e, _0xf5a81f, _0xf57eb5 = 0; _0xf5a81f = _0x1b493f["charAt"](_0xf57eb5++); ~_0xf5a81f && (_0x6914e = _0x1aadac % 4 ? _0x6914e * 64 + _0xf5a81f : _0xf5a81f, _0x1aadac++ % 4) ? _0x42b04d += String["fromCharCode"](255 & _0x6914e >> (-2 * _0x1aadac & 6)) : 0) {
                    _0xf5a81f = _0x2ab9cc["indexOf"](_0xf5a81f)
                }
                for (let _0x32f09b = 0, _0xa1e16 = _0x42b04d["length"]; _0x32f09b < _0xa1e16; _0x32f09b++) {
                    _0x4e0d25 += "%" + ("00" + _0x42b04d["charCodeAt"](_0x32f09b)["toString"](16))["slice"](-2)
                }
                return decodeURIComponent(_0x4e0d25)
            };
            const _0x3dd781 = function (_0x1e7593, _0x5bc598) {
                let _0x51bee0 = [],
                    _0x18bf2a = 0,
                    _0x3ecfba, _0x523799 = '';
                _0x1e7593 = _0xfbaba8(_0x1e7593);
                let _0x4f381e;
                for (_0x4f381e = 0; _0x4f381e < 256; _0x4f381e++) {
                    _0x51bee0[_0x4f381e] = _0x4f381e
                }
                for (_0x4f381e = 0; _0x4f381e < 256; _0x4f381e++) {
                    _0x18bf2a = (_0x18bf2a + _0x51bee0[_0x4f381e] + _0x5bc598["charCodeAt"](_0x4f381e % _0x5bc598["length"])) % 256;
                    _0x3ecfba = _0x51bee0[_0x4f381e];
                    _0x51bee0[_0x4f381e] = _0x51bee0[_0x18bf2a];
                    _0x51bee0[_0x18bf2a] = _0x3ecfba
                }
                _0x4f381e = 0;
                _0x18bf2a = 0;
                for (let _0x38d524 = 0; _0x38d524 < _0x1e7593["length"]; _0x38d524++) {
                    _0x4f381e = (_0x4f381e + 1) % 256;
                    _0x18bf2a = (_0x18bf2a + _0x51bee0[_0x4f381e]) % 256;
                    _0x3ecfba = _0x51bee0[_0x4f381e];
                    _0x51bee0[_0x4f381e] = _0x51bee0[_0x18bf2a];
                    _0x51bee0[_0x18bf2a] = _0x3ecfba;
                    _0x523799 += String["fromCharCode"](_0x1e7593["charCodeAt"](_0x38d524) ^ _0x51bee0[(_0x51bee0[_0x4f381e] + _0x51bee0[_0x18bf2a]) % 256])
                }
                return _0x523799
            };
            _0x140f["SKQjzp"] = _0x3dd781;
            _0x335a60 = arguments;
            _0x140f["uWwTtu"] = true
        }
        const _0x17e092 = _0x20fcd8[0],
            _0x43c56e = _0x140fac + _0x17e092,
            _0x28d8c1 = _0x335a60[_0x43c56e];
        !_0x28d8c1 ? (_0x140f["XXGUUx"] === undefined && (_0x140f["XXGUUx"] = true), _0x48ce4c = _0x140f["SKQjzp"](_0x48ce4c, _0x2f0724), _0x335a60[_0x43c56e] = _0x48ce4c) : _0x48ce4c = _0x28d8c1;
        return _0x48ce4c
    };
    return _0x140f(_0x335a60, _0x539b4a)
}

function randomString(_0x206064, _0x167518 = _0x140f(431, "FI6C")) {
    const _0x58b0fa = {
        "UanjS": function (_0x4f2499, _0x35426f) {
            return _0x4f2499 < _0x35426f
        },
        "VoMzo": function (_0x1c8dc1, _0x34e63f) {
            return _0x1c8dc1 === _0x34e63f
        },
        "KhtlA": _0x140f(492, "b4S*"),
        "oHKFr": function (_0x4068fd, _0x445de1) {
            return _0x4068fd * _0x445de1
        }
    };
    let _0x4da86d = '';
    for (let _0x46eac5 = 0; _0x58b0fa["UanjS"](_0x46eac5, _0x206064); _0x46eac5++) {
        _0x58b0fa[_0x140f(489, "$!C#")](_0x140f(304, "ScC$"), _0x58b0fa[_0x140f(676, "tLa0")]) ? _0x58cbf6 = "66" : _0x4da86d += _0x167518["charAt"](Math["floor"](_0x58b0fa[_0x140f(710, "3T^v")](Math["random"](), _0x167518[_0x140f(507, "^oz*")])))
    }
    return _0x4da86d
}

function genRemove(_0x2ca1c4, _0x2e04b0) {
    const _0x464744 = {
        "RPqlQ": function (_0x309949, _0x57fd2c, _0x1b525a) {
            return _0x309949(_0x57fd2c, _0x1b525a)
        },
        "KOwpW": "wm0!@w_s#ll1flo(",
        "Gzcoj": "hex",
        "HhkhY": "0102030405060708",
        "QHYFW": function (_0x64706c, _0x2e6db6) {
            return _0x64706c !== _0x2e6db6
        },
        "aKUhU": "aIFBF",
        "DhemW": function (_0x3a3760, _0x3711d7) {
            return _0x3a3760 < _0x3711d7
        },
        "XaQnL": _0x140f(426, "X!Rf"),
        "dDchh": function (_0x2f36d2, _0x48e7f4) {
            return _0x2f36d2 | _0x48e7f4
        },
        "cGlVV": function (_0x4b5bc1, _0x2493f9) {
            return _0x4b5bc1 * _0x2493f9
        },
        "pZekx": function (_0x27e244, _0x951f30) {
            return _0x27e244 - _0x951f30
        },
        "hacqX": function (_0x4e591b, _0x1ed578) {
            return _0x4e591b - _0x1ed578
        }
    };
    let _0x3a0a8e = [],
        _0x269914 = _0x2ca1c4[_0x140f(553, "oE4[")];
    for (let _0x47f6b6 = 0; _0x47f6b6 < 10; _0x47f6b6++) {
        if (_0x464744["QHYFW"](_0x464744[_0x140f(329, "3r#F")], _0x464744[_0x140f(386, "^oz*")])) {
            try {
                const {
                    "message": _0x3f5518,
                    "response": _0x4658af
                } = _0x4cd38a;
                _0x388303["log"]('' + _0x29dfe9[_0x140f(546, "tLa0")](_0x3f5518));
                _0x546bb1[_0x140f(572, "jTrB")](_0x39c5c0 + _0x140f(657, "SiQp"))
            } catch (_0x8647c4) {
                _0x416cc7["log"](_0x8647c4)
            } finally {
                _0x11ae09('')
            }
        } else {
            if (Math[_0x140f(703, "Bmww")]() * _0x269914 < _0x2e04b0) {
                _0x3a0a8e["push"](_0x2ca1c4[_0x47f6b6]);
                if (--_0x2e04b0 === 0) {
                    if (_0x464744["QHYFW"]("wbFdE", "XpKkC")) {
                        break
                    } else {
                        _0x529f77 = _0x464744[_0x140f(314, "X!Rf")](_0x340215, _0x464744["KOwpW"], _0x30ac0e)
                    }
                }
            }
            _0x269914--
        }
    }
    let _0x410853 = '';
    for (let _0x242857 = 0, _0x5e31de; _0x464744["DhemW"](_0x242857, _0x3a0a8e["length"]); _0x242857++) {
        if (_0x140f(652, "gVli") === _0x464744["XaQnL"]) {
            const _0x53804c = _0x41d3b2[_0x140f(523, "GhtE")](_0x2d9c99, _0x464744[_0x140f(569, "@q[T")])["toString"](_0x140f(413, "RLvR"));
            var _0xe7ee21 = _0x4e2819["AES"][_0x140f(681, "nH)2")](_0x53804c, _0x174828["enc"][_0x140f(532, "s1yq")]["parse"](_0x419768), {
                "iv": _0x546f46[_0x140f(716, "(GSA")][_0x140f(709, "Fao$")][_0x140f(527, "gVli")](_0x464744[_0x140f(731, "]E[G")]),
                "mode": _0xc40ee5[_0x140f(587, "3T^v")]["CBC"],
                "padding": _0x70b552[_0x140f(615, "(GSA")][_0x140f(453, "sNIj")]
            });
            return _0x5e7fca[_0x140f(515, "nK&K")](_0xe7ee21[_0x140f(346, "3T^v")](_0x56741d["enc"]["Utf8"]))
        } else {
            _0x5e31de = _0x464744[_0x140f(670, "GhtE")](_0x464744[_0x140f(740, "vca6")](Math[_0x140f(697, "TWk5")](), _0x464744[_0x140f(604, "eZa&")](_0x3a0a8e[_0x140f(303, "b*Qj")], _0x242857)), 0);
            _0x410853 += _0x3a0a8e[_0x5e31de];
            _0x3a0a8e[_0x5e31de] = _0x3a0a8e[_0x464744["hacqX"](_0x3a0a8e[_0x140f(420, "D[9Y")], _0x242857) - 1]
        }
    }
    return _0x410853
}

function RemoveString(_0x412504, _0x203de8) {
    const _0x2d56f0 = {
        "wFvdf": function (_0x8f384d, _0x29b418) {
            return _0x8f384d == _0x29b418
        },
        "lLtYM": function (_0x20120f, _0x85ea6f) {
            return _0x20120f + _0x85ea6f
        },
        "IDYYd": _0x140f(320, "vca6"),
        "CjyOo": function (_0x215505, _0x57c9d1) {
            return _0x215505(_0x57c9d1)
        },
        "fKnYM": function (_0xf87156, _0x19b5e4) {
            return _0xf87156 < _0x19b5e4
        },
        "ZWmIq": function (_0x507668, _0x284556) {
            return _0x507668 !== _0x284556
        },
        "DWMgh": _0x140f(727, "gVli")
    };
    let _0xf5a830 = _0x412504;
    for (let _0xd6bb6f = 0; _0x2d56f0[_0x140f(683, "&nh7")](_0xd6bb6f, _0x203de8[_0x140f(736, "YwXm")]); _0xd6bb6f++) {
        if (_0x2d56f0[_0x140f(673, "tLa0")](_0x2d56f0[_0x140f(704, "FI6C")], _0x2d56f0[_0x140f(707, "tLa0")])) {
            if (_0x2d56f0[_0x140f(484, "Fao$")](_0xc5c234[_0x140f(302, "b*Qj")], 200)) {
                let _0x1d6e75 = _0x5e09fa["data"]["result"];
                this["tk"] = _0x1d6e75["tk"];
                this["fp"] = _0x1d6e75["fp"];
                this[_0x140f(663, "YwXm")] = new _0x2d80fb(_0x2d56f0["lLtYM"](_0x2d56f0["IDYYd"], _0x1d6e75[_0x140f(477, "pqV&")]))();
                _0x2d56f0["CjyOo"](_0xff476f, _0x5ec01e["data"][_0x140f(382, "BBr7")])
            } else {
                _0x82588b[_0x140f(396, "B)On")](_0x140f(308, "]E[G") + _0x13628b[_0x140f(719, "Qhky")](_0x591d8f))
            }
        } else {
            _0x2d56f0["ZWmIq"](_0xf5a830[_0x140f(638, "GhtE")](_0x203de8[_0xd6bb6f]), -1) && (_0xf5a830 = _0xf5a830["replace"](_0x203de8[_0xd6bb6f], ''))
        }
    }
    return _0xf5a830
}

function generateFp400() {
    const _0x1d7e7d = {
        "Jahmm": function (_0x21f1b2, _0x27e568) {
            return _0x21f1b2 | _0x27e568
        },
        "ZFtdE": function (_0x50fdb3, _0x52a1aa) {
            return _0x50fdb3 * _0x52a1aa
        },
        "UXMUb": function (_0x2577f5, _0x8799d0) {
            return _0x2577f5 - _0x8799d0
        },
        "jFGvW": "i1uct6d0jh",
        "uhAVa": function (_0x13682f, _0x517886, _0x51020a) {
            return _0x13682f(_0x517886, _0x51020a)
        },
        "ZyMOc": function (_0x401ec9, _0x121c81) {
            return _0x401ec9 + _0x121c81
        },
        "WFeol": function (_0x18f9be, _0x1f691c) {
            return _0x18f9be + _0x1f691c
        },
        "XsFIS": function (_0x5d65b3, _0x536e0b, _0x57232f) {
            return _0x5d65b3(_0x536e0b, _0x57232f)
        },
        "JpTBT": function (_0x2eb428, _0x2e6c4d) {
            return _0x2eb428 - _0x2e6c4d
        },
        "lXbbB": function (_0x3ef4cf, _0x6c4a0b) {
            return _0x3ef4cf > _0x6c4a0b
        },
        "Ebmdj": function (_0x4b8c01, _0x50fc43) {
            return _0x4b8c01 === _0x50fc43
        },
        "gqAOw": _0x140f(444, "gVli")
    };
    var _0x54063e = _0x1d7e7d["jFGvW"],
        _0x1c8ca9 = _0x1d7e7d["uhAVa"](genRemove, _0x54063e, 6),
        _0x346c8d = _0x1d7e7d[_0x140f(626, "D[9Y")](RemoveString, _0x54063e, _0x1c8ca9),
        _0x1dad3f = _0x1d7e7d["Jahmm"](_0x1d7e7d[_0x140f(575, "GhtE")](Math["random"](), 10), 0),
        _0x524ae1 = _0x1d7e7d["ZyMOc"](_0x1d7e7d["ZyMOc"](_0x1d7e7d[_0x140f(519, "D[9Y")](_0x1d7e7d[_0x140f(730, "Bmww")](randomString, _0x1dad3f, _0x346c8d), _0x1c8ca9), _0x1d7e7d[_0x140f(712, "ScC$")](randomString, _0x1d7e7d[_0x140f(748, "^oz*")](12, _0x1dad3f) - 1, _0x346c8d)), _0x1dad3f),
        _0x2113f3 = _0x524ae1[_0x140f(611, "FsKR")](''),
        _0x5ea03a = _0x2113f3[_0x140f(376, "nK&K")](0, 9),
        _0x4bb6e6 = [];
    for (; _0x1d7e7d["lXbbB"](_0x5ea03a["length"], 0);) {
        _0x1d7e7d[_0x140f(708, "ScC$")](_0x140f(297, "L1Vp"), _0x1d7e7d[_0x140f(537, "@q[T")]) ? _0x4bb6e6[_0x140f(296, "zaJT")]((35 - _0x1d7e7d["uhAVa"](parseInt, _0x5ea03a["pop"](), 36))[_0x140f(360, "BBr7")](36)) : (_0x4be163 = _0x1d7e7d[_0x140f(510, "]E[G")](_0x1d7e7d[_0x140f(384, "RLvR")](_0x5aa367[_0x140f(473, "D[9Y")](), _0x1d7e7d["UXMUb"](_0x2c4319[_0x140f(630, "Bmww")], _0x4ee9ff)), 0), _0x550c58 += _0x2c99e4[_0x51d96f], _0x2f0e82[_0x1e7e08] = _0x2d1870[_0x1d7e7d[_0x140f(343, "]E[G")](_0x1d7e7d["UXMUb"](_0x43139b[_0x140f(629, "(GSA")], _0x4dc8f1), 1)])
    }
    return _0x4bb6e6["concat"](_0x2113f3[_0x140f(737, "$!C#")](9))[_0x140f(582, "BBr7")]('')
}

function _0x20fc() {
    const _0x6cff7f = function () {
        return [...[_0xenty, "OWSjwsuNjqiqqfawNmgPil.KGEcwokdm.v7XnClL==", "qSoCAq", "WPbPELhcKmonW78", "dWhcLCkpWQH5W6u", "qmkQWQldOq", "WQtdVN59rvdcNG", "W6JcLrzIW4ZdNcJcICoBWOiZWOFcJCoRWR1c", "WOSamH4", "W5hcN2m5iq", "gWVcG8kf", "WO1UzehcGCox", "W7m1ftBdSW", "W4VdIwCUBa", "W41jnaaZ", "b2NdIa", "WPBcLaNcJ8oaW6K", "W4lcSqpcUgu", "W4S6va", "hCokWPSGf8oj", "WOD7CCo2W7pdRaJdQ8owW7mnWQic", "WO3cL2LxW5W", "WOK+WOHjldRdJcm", "W6NcVH7cVNhdPq", "WPD8W58qvq", "Ae/cPmkKEa", "ldZcQSkPWQm", "WOtcR8oLzG", "WPJcVtBcH8oW", "ytLKc8owW4DFnq", "bmookwJdSW", "W5KbW7hdH8o1", "W69VbY8v", "WO0uWPzsdW", "Fmk1WR/dR8k2WQ1gAxb0WPlcRxy", "ua7cV8kytq", "qmkoW4xcVsLVAI5OW4ZdV0bVE2ZcVG", "W63cVH/cUhtdVIG", "BCk8WQFdV8k9WQPKu2nRWPZcRtJLPQJOTl3cPa", "W5aRjrtdNG", "umkwAa", "WOtdGKPErW", "BrtcVa", "WRxcVMpdQmkHkCo/uq", "B8kVvG", "W4vJWRL/W5G/", "w8kcurpcPa", "WQFcUfZdQmk2mG", "W6ZdPd0VWOe3WRHfW6LZ", "DczhfSoa", "C8kLnX7dIa", "Bmo/xSoOWOm", "A8kHyCk1W7WTWOuW", "W6iPW4VdQSoh", "yCoHWPZdTvW", "WQ3cVLC", "BNdcPmkusW", "zdddKtRdMSoE", "WQCcWRf3ka", "W6ZcLe8GW6K", "FcCWsCkRka", "EJddJcJdGSoc", "W4VcJ05m", "WQldThW", "W4tcV8kJW5qr", "WRpcTepdQCk/na", "jmoyWOddV1G", "rCkFWQldRSkD", "FCk2WRldSW", "eCo0WQddP0W", "sYCWjIG", "WQRcSh1VW5XTW6a", "C8kHvq", "sSkeo8kH", "W4z7WOv9W5a", "WRJcLW4", "mXBcJ8kvWPe", "WOXNEeBcKq", "Cmk7WRZdR8k7WQ0", "WQhdTmkB", "W6eoldFdKG", "W7NcTCon", "vCouwCkc", "u8oFrCoZWOW", "tConD8kOdG", "sCoiWP7dKq", "sSkfgCkEWPa", "eIpcRmksWPK", "DrlcTSkNsSoKW5SHWQC", "WPpcK1TLW6i", "bmoMc8oXW6G", "WRVdTwHRvhdcLG", "WPzCAhlcSW", "t8kgqblcUg3cQa", "W5q5wNZdNq", "wGaAmr7dNCoevCkB", "FCk4WQxdR8oUW60", "sCoSESkPW4i", "W7RdNe05Fmo0aa", "W6BdLLyK", "W70efXpdQa", "v8otWPVdGgm1", "wmkzmmkSWPXPfJ3dHmkw", "W7FcVGpcRgNdUq", "W43cUbFcS34", "cg/dN8otWOpcKSkouCkzna", "W4FcRmkJW60uW5hcIxlcJfLvdmkhzW", "v23cJmkd", "W63dRd4VWOa7WRWZWPKJW5vDW4O", "WPpdOrWRxq", "W7NcJuGGW7JdGHJcLmkXWOO", "W7JdLMW+z8oYamo0", "tXOepqRdHW", "e0VcR8kGWOVdUqySoCoii8oQWPFdISkkWPe", "muRdQCoXdCkLWOX7W69KW6SlqxFcVmoIWOZdOmoPW5NdMmkUW4/cRINdGColurGNW63cHmkJBX9iytfFWOpcKCosW41cCCkztGRdLmozyrZcJrhcRueSebFdOCo+WP8", "W7tcL8kQW7Cq", "jJiYhq", "WOddR8o9WOHfWPtdNfxcLKfSnmkF", "W6eBna", "lbdcGCoe", "W7uBndZdICkLia", "WQeEgW8m", "WPWqlYmBb8klWRVdO8knW6JcJG", "zSoisG", "W5fZaGiN", "W6VdNfecimoOgG", "B8kkfGpdPG", "WPVcOSo5BIW", "W4JcIrBdS04", "W5X7WO5vW68", "cWhcLmkjWQ1I", "WPr0W4On", "CCo/WPpdOvq", "r2ZcISkFtHC", "ceNdUa", "WOfVW4io", "W5ZdKLW5iG", "pZq8hq", "W5mZWPW", "h8opgwRdUG", "omo0WQ/dN1O", "imoGafG", "W5yFnd8", "W73cT2y1lW", "Bc0Nrq", "oc4khSkx", "W73cL0i6", "W4H/WQ0", "gWBcLCkEWRG", "WPvPBa", "ktm4", "aSohhKNdJW", "hmoqWPi", "WPBdUWavFG", "W5xcU8kHW7vaW5dcNa"], ... function () {
            return [...["EmkQlsJdO8kJWO0", "W6NcUGpcR3ldVa", "ytD9fmog", "W6JcUtJcSNi", "jtm/fSkEWQqF", "l8oGnM8", "WRVcSgfpW5XLW6a", "tSkHWRFdSmkU", "b8obWRaQbW", "W63cNvi2W77dHvC", "W6hcN8kUW6OZ", "W5/cNbtdIupcVaW", "ASkukY3dQW", "bvBdR8odWR7dPZu7nq", "srBcUSkHASoyW7T+W6jR", "ySoYq8oUWOux", "l8ozk8oMW5fUcG", "mKNdKSo7WQq", "W6/cJvuR", "itWR", "ugGgadq", "x8kmCbtcS3tcSSoe", "W5T9dZmEWP0", "W4XohXSJ", "cgNdGCoyWOFcLa", "WQSEiGvE", "xYJcNG", "WQVdNSk4WOxcSW", "6k2/5AEw5lUt55kA5A6e562M5lQJ", "W4j7WPj9W6O", "Br7cTCkLtCo4", "W5ufW6ZdMa", "gwpdM8ooWPtcJSoA", "W6/cSYddJgq", "WRucds8G", "hmoAWPVdQg00", "W4XYaIuiWOddGW", "wchcLCkaBa", "mWxcJ8krWQW", "zIddKsC", "WOPMxKRcSW", "dwRdGmouWPq", "ktFcGSkjWQW", "W6/cMvqWW6K", "WPGaWPjtjG", "WPpcT2viW5PxW7WEWOeRW79gW4PG", "tCk5j8kQWRe", "W4ZcNqJcPhe", "W55XuxyXWOFcMSkWWPZcG8k3AIK0W7VcJG", "bCoCWOhcUx1SmhiPWO4", "WOtcL1BdNCkz", "fmoAWP4O", "s8ourmkqmG", "W7ZdMe05Ca", "W4PWcdiFWOq", "WPNcOCoZCbO", "WQJcVgj5W4z2W68FWQe", "WR7dTgS", "WOSWWRDuoG", "W4hcT8kOW5m", "W6m2jSo9", "W7lcLe8", "smkgxmkcW6m", "W5DLWQS", "WRhcPepdTa", "W5aBW4NdRSoK", "mCkVgSk5W5TqWODoWQLDru8VWOxdMXm", "W5j1WRHLW5y+W4a", "WPtcNWq", "D8o7wmo4WOimW5K", "WPdcGrFcQmomW7pcLX55WPXeoH3dVCoseq", "rCkpW4ddHxm5c3KB", "D8oSWQxdVSo4WR51yKLIWOldON3dQ2RdQ1tdLG", "W5eNlSkoWQpcRa", "WQ/cOx11W5TLW6CuWQG", "WQhdQ2bNwa", "hgJdRSoSWOK", "WRNcVvpcUmoJW4FdLsL4WPaznGBcSCknvG", "EmkFntJdNG", "W54Noa", "W5uUkCkGWQJcOwZdJ8oSW6K8WRCb", "W4v5dZafWPG", "iuJdT8o9WRy", "sCoJBmkmjq", "WOKqmrOicmk+", "steWpGK", "xGaz", "W7NcNY/dO1O", "5B+n5yQ2qee/WQ/NI7tMNBRdNG", "hcfu", "WR7cQZdcSmoM", "WR7dTJWchsu", "bCovnwZdSa", "W4vZbG", "tSoMqa", "w8kHWPhdV8k1", "W5S6oXddKSksWOxdQWJcHw0b", "W7aqW6VdJSo5", "n3ddQSo7WPO", "WPBcLaNcKCoxW7ZcPGTIWPjhzG", "jSoGdG", "FCk8xWdcKGq7mmoaBtDEvW", "cMRdImou", "kmoUWOuHmq", "vCk3jq", "DHBdQ8oJECoNW6u/W7qXW6zyrh/cTSkS", "WRRcKZpcQ8oI", "yL7cHCkaAW", "W40nndu", "m03dOSoZc8o8W7aUWQ4lW74", "WQVcVLNdSG", "WORcIuddMSkw", "WRVcShTiW5XVW6S", "WPPjy0JcIG", "W6vDWO/dU3hcTmol", "EdLtgG", "aCoCWOm", "fb3cHmkoWRe", "v3dcISkzEHa", "WPjLya", "WQpcVLtdPq", "C8kIod7dVG", "WR3cMw5KW5K", "DSkPWP/dHSkQ", "WRNcVMbxW4e", "mmkQhSk9W59tWO8lW7aeaHnL", "tsmswmkT", "W5mpkmk0WPu", "Bmk6qmkOW6aJWOiXDa", "EmoJxmktkW", "WO4KWRO", "W4HthHqf", "w8osrSkkW7S", "W4P6abyF", "a0pdQ8ovWQldOZW", "AmoDFSkcjW", "BSkMlYddO8kGW57cPCkF", "W7JcMsZcM2C", "W7Grkta", "ECoxqCkana", "WOnPW6KRyW", "W4b5WPZdN14", "W5C6qW", "W4lcV8kR", "WRdcUMG", "oSoLpgxdVhpdVea", "WOtdQ8kWWRdcTq", "Amo7AmohWRS", "WRBdUNHV", "C8o/ymkUW6a", "ygxcN8km", "W7VcRSkdW5aX", "EColrmkkjq", "lSoOW67cV8oUW6GJoNvmWPdcLgNdIq", "W67cSYZcNxW"], ... function () {
                return ["vmoSrSoBWOOrW5yxW6O+eaT2W5tcKG", "CZVdLJ3dN8opsa", "W57cU8kHW5ObW4S", "W4H1WQrXW4S5", "W4tdTvuPxG", "fCo8hv0", "W43dLMyyqa", "aSodxuRdO2qQo8o+B2yqraZcG2q", "WQGLWR0f", "WPDOW54l", "W6WWsG", "g8ogWPuGdmoYuG", "W7RcQX3cGNK", "W7JcSWZcUvZdPq", "qCkgW4a", "W4tcU8k9W44CW4ZcHG", "WPrPFfFcI8omWRe", "WPZcPttcGmos", "k8o/gv/dGq", "W6aAi8kVWPC", "WQtdKXKKBG", "WRVdVSkoWQ7cMmovWOy", "WOVdRX0xuW", "t8o3A8oMWOm", "pCokWPSrg8oOrSkzmvNcRmkpWQ7cUG", "WRpcMSouuHO", "WPxdQ1rQvq", "55A75OIp5zoW", "W6RcMMiFlG", "cNBdN8osWOi", "WOCuy1BORy/MSlNLP6ZOTyFVViRORzZMOAVMNkVNV4/OTQpPH5lORzq", "AdCTx8kZnxv9A8oo", "B8k3lJZdOCkZ", "vHi6BmkD", "AColrmkmlSk4", "WPRcTCoG", "q2hcHCkMAHO", "WRNcRx9ZW4D2W70", "lSo8Ba", "kCoJafpdI0DFhCoKFZXCwW", "WONdISkfWOVcTG", "CJnzpSoiW4LE", "W5DGWQz/W4S", "fSoSWPiTha", "W5FcLuCGW5/dOZBdIW", "W4qEW7RdImo9WRCgWOdcKq", "WOBcGMjvW4q", "g2FdIW", "W5XTcqG", "WPFcVxTWW7q", "pmoTp2tdL38", "W6JcNLOhjCk0W5i", "W5yPWPLvbeWWnLrjfSktvq", "W4BcSCkCW4KhW4RcHNG", "WPxcLatcTSoCW6dcGG", "wmoorCkQdG", "lSo3k8o+W7a", "ettdNSkNzqBdUtv+", "W7RcKSo7W4eZW7tdI1ZcL24jymkumLb3", "rSkyW4e", "tc/cLmkuW4NMIjZMJz/NMRdcLdi35y675PElmG", "WPtcT2XpW4i", "WQddJfXABq", "tCo5BSkcW7y", "sfxdN8ojW7CNWRGiW7/cOCkhWR3cVJm", "cmoaW5WgoG", "WQdcGhpdRSkI", "xCoPt8kiW6C", "WQRdSJ0uqN4p", "fConWP8oeCoe", "tmknmmkRWODT", "zSo7rmoyWOieW5K", "WOWLab0/", "pSoMbfpdLKDOfCoM", "AcKBv8ks", "wmkamCkGWPO", "W5zXWQrYW5a8", "rsZcLSkLuq", "WPdcRhP2W7G", "nsqIcSkRWQyDW7CpFgfrWOBcIZxcTSo6", "WPJcGKj7W50", "sYaUwmkT", "smkMo3e", "EH58oCow", "WRlcOvZdTCkN", "vJefDCku", "WQNdUSkiWRW", "FSkPWQBdG8k8", "e8oyWOeSea", "W5FcSmkS", "W67cTqNcRNVdUcH5W70", "r8oTtCkgW7FdQG", "ghldNCosWOJcH8ktuSky", "g2NdNmop", "xGJcR8kP", "rCoxWORdVxi", "W4HNhWiojSkP", "W5LPeJ8", "WPe+WRW", "sCk2WPNdJ8kn", "WOVcQ8o3ub0", "WP/dGaNcJSoKWQhcHtfLWPXtEu7cTSkpgq", "WQCiW40", "W5f4WOTaW54", "mqZcJmkuWPG", "BmkfnSkmWQy", "WOxcPhBdVCks", "WPZdMmk0WRFcSW", "rh4d", "sghcHCkkEWS", "f0RdTSoIWQ4", "W7uBlG3dJ8kMnW", "xCkgurpcQhlcSG", "WOflyNlcTa", "w8k4WQldQW", "qCoQWPldHuu", "W7eFiYRdK8kYDXbPWRBdLCocW7C", "W53cMcZdKuG", "jxVcKW", "ACkRqmkYW6CRWOu", "WOn/Fu3cHCon", "oSopWQhdJu0", "fqhcICkBWRv+", "W5BcJwGRW6C", "W4DX5P+X5A6N5lIx772s", "BCoXtq", "Fmocx8kAkCkJWRC", "WQqgnr0", "WPxcTKxdRmks", "sSo4u8kOW6C", "W5jxWQtdMK0", "w8kwuaG", "W6ZcMvazhW", "ASonCa", "W7PlmYRcHSkMpbrgW73dJ8knW7/dJdhdL0VdTq", "x8o/rmk8aG", "v8k7nqJdHq", "WPrPW4Wxrq8", "WOT4W4merbq", "ys4XDSkT", "WQBdJqaRwq", "W7ldMLXh6k+B5Rg95AEb6lE877276k6E5Qo85P2G57+36ls26yEN6kYD", "vehcPSkcxG", "cWhcLSkjWQrLW79HW6NcHSklWOtdR+wLKUI2Hrm", "ehJdM8krob/cNsOex1uxW4SSWRhcGSoiWRPIkCoSCq", "W5blcZmc", "W4anbXRdVW", "amoEWOFdVhW", "WRtcOxTSW4y4WQfDWRiRW65tW5jGFCoUWQpcQrHOcw3cLSondCo9aJ3dU8k8nWVdVCkyhSkQWPVcUqaMW6bEgee", "WO7dHZ4lEG", "zshdKa", "W5hcKIldUxO", "bZGI", "W5fIWQzgW54JW48MWPBdP0FdNCkPCq"]
            }()]
        }()]
    }();
    _0x20fc = function () {
        return _0x6cff7f
    };
    return _0x20fc()
}

function generateFp410() {
    const _0x2e7bef = {
            "UUmbw": _0x140f(309, "YwXm"),
            "sUyeY": function (_0x233994, _0x2bfa73, _0x1a565c) {
                return _0x233994(_0x2bfa73, _0x1a565c)
            },
            "GxiBP": _0x140f(521, "^oz*"),
            "rDqzk": function (_0x321f7d, _0x45d882) {
                return _0x321f7d | _0x45d882
            },
            "bbrby": function (_0x3ca183, _0x444888) {
                return _0x3ca183 * _0x444888
            },
            "OFTyW": function (_0x2bd27d, _0x56b8ec) {
                return _0x2bd27d > _0x56b8ec
            },
            "xkDCP": function (_0x1bd50a, _0x5aa1f4) {
                return _0x1bd50a + _0x5aa1f4
            },
            "GjZAN": function (_0x1a55d1, _0x563847, _0x27f331) {
                return _0x1a55d1(_0x563847, _0x27f331)
            },
            "acGCC": function (_0x3d2697, _0x361b7b, _0x5018aa) {
                return _0x3d2697(_0x361b7b, _0x5018aa)
            },
            "DQyVG": function (_0x11ad10, _0x568730) {
                return _0x11ad10 - _0x568730
            }
        },
        _0xeb46aa = _0x2e7bef["UUmbw"][_0x140f(547, "gISA")]("|");
    let _0x310a2e = 0;
    while (true) {
        switch (_0xeb46aa[_0x310a2e++]) {
        case "0":
            var _0xfae6c7 = _0x2e7bef[_0x140f(518, "TWk5")](genRemove, _0x7d990e, 6);
            continue;
        case "1":
            var _0xff96f0 = _0x3486d9["slice"](0, 14);
            continue;
        case "2":
            _0xc6aba = _0xc6aba[_0x140f(496, "Qhky")](_0x3486d9[_0x140f(624, "FsKR")](14));
            continue;
        case "3":
            return _0xc6aba["join"]('');
        case "4":
            var _0x7d990e = _0x2e7bef["GxiBP"];
            continue;
        case "5":
            var _0x4e76b4 = _0x2e7bef[_0x140f(601, "FsKR")](_0x2e7bef[_0x140f(465, "]E[G")](Math[_0x140f(494, "oE4[")](), 10), 0);
            continue;
        case "6":
            var _0xc6aba = [];
            continue;
        case "7":
            var _0x51678e = _0x2e7bef["sUyeY"](RemoveString, _0x7d990e, _0xfae6c7);
            continue;
        case "8":
            for (; _0x2e7bef[_0x140f(406, "tLa0")](_0xff96f0[_0x140f(502, "FI6C")], 0);) {
                _0xc6aba["push"]((35 - parseInt(_0xff96f0[_0x140f(614, "SiQp")](), 36))[_0x140f(680, "(GSA")](36))
            }
            continue;
        case "9":
            var _0x569fb8 = _0x2e7bef[_0x140f(316, "oUV@")](_0x2e7bef[_0x140f(446, "Bmww")](_0x2e7bef["xkDCP"](_0x2e7bef[_0x140f(401, "FsKR")](randomString, _0x4e76b4, _0x51678e), _0xfae6c7), _0x2e7bef["acGCC"](randomString, _0x2e7bef[_0x140f(667, "B)On")](16, 6) - _0x4e76b4 - 1, _0x51678e)), _0x4e76b4);
            continue;
        case "10":
            var _0x3486d9 = _0x569fb8[_0x140f(397, "3r#F")]('');
            continue
        }
        break
    }
}

function jsonParse(_0x405207) {
    try {
        return JSON[_0x140f(341, "b*Qj")](_0x405207)
    } catch (_0x2f6d24) {
        return _0x405207
    }
}

function isset(_0x1aa0ff) {
    const _0x174b82 = {
        "kGKnX": function (_0x190bb7, _0x64b799) {
            return _0x190bb7 != _0x64b799
        }
    };
    return _0x174b82[_0x140f(404, "]E[G")](typeof _0x1aa0ff, "undefined")
}

function aes_cipher(_0x3c8df1, _0xd1b7dd) {
    const _0xd93f1c = {
        "hjPnQ": _0x140f(353, "^oz*")
    };
    return CryptoJS[_0x140f(298, "eZa&")][_0x140f(508, "oE4[")](JSON[_0x140f(719, "Qhky")](_0xd1b7dd, null, 2), CryptoJS["enc"]["Utf8"]["parse"](_0x3c8df1), {
        "iv": CryptoJS["enc"]["Utf8"]["parse"](_0xd93f1c[_0x140f(512, "vca6")]),
        "mode": CryptoJS[_0x140f(344, "gVli")]["CBC"],
        "padding": CryptoJS[_0x140f(361, "%VSd")]["Pkcs7"]
    })[_0x140f(422, "Qhky")]["toString"]()
}

function _0x5e2b() {
    return global["_0xenty"] = Buffer["from"]('anNqaWFtaS5jb20udjc=', 'base64')["toString"]('utf-8')
}

function aes_decipher(_0x3b5acc, _0x7435fa) {
    const _0x56069c = {
            "xDVCE": _0x140f(551, "s1yq"),
            "xEmlh": _0x140f(563, "X!Rf")
        },
        _0x2d2843 = Buffer[_0x140f(452, "b*Qj")](_0x7435fa, _0x56069c[_0x140f(647, "X!Rf")])["toString"](_0x56069c[_0x140f(585, "vca6")]);
    var _0x5a9cb0 = CryptoJS["AES"][_0x140f(410, "zaJT")](_0x2d2843, CryptoJS[_0x140f(540, "nH)2")][_0x140f(635, "&)u^")][_0x140f(525, "sNIj")](_0x3b5acc), {
        "iv": CryptoJS[_0x140f(540, "nH)2")][_0x140f(436, "]E[G")][_0x140f(363, "zaJT")](_0x140f(538, "Nt23")),
        "mode": CryptoJS[_0x140f(402, "bcME")][_0x140f(319, "Nt23")],
        "padding": CryptoJS[_0x140f(674, "Qhky")][_0x140f(497, "Adlx")]
    });
    return JSON[_0x140f(312, "^oz*")](_0x5a9cb0[_0x140f(428, "sNIj")](CryptoJS[_0x140f(467, "88iv")][_0x140f(379, "L1Vp")]))
}
class H5ST {
    constructor(_0x367210) {
        const _0x373ba1 = {
            "kkuOO": "pin",
            "dtDHS": _0x140f(552, "s1yq"),
            "eQInx": _0x140f(661, "FsKR"),
            "bdYHA": "appid",
            "OZWtC": function (_0x4569f0, _0x3f1b24) {
                return _0x4569f0(_0x3f1b24)
            },
            "NiAmh": "3.1"
        };
        this[_0x140f(694, "eZa&")] = true;
        for (let _0x2eb9b2 of ["ua", _0x373ba1["kkuOO"], _0x373ba1[_0x140f(612, "b*Qj")], _0x373ba1[_0x140f(516, "&)u^")], _0x140f(294, "eZa&"), _0x373ba1[_0x140f(414, "eZa&")]]) {
            if (!_0x373ba1[_0x140f(562, "nH)2")](isset, _0x2eb9b2)) {
                console["log"](_0x2eb9b2 + _0x140f(289, "&)u^"));
                this[_0x140f(530, "&)u^")] = false;
                return false
            }
        }
        Object[_0x140f(362, "Bmww")](this, _0x367210);
        if (!isset(this[_0x140f(323, "gISA")])) {
            this[_0x140f(746, "%VSd")] = _0x373ba1[_0x140f(650, "Nt23")]
        }
        if (!this["fp"]) {
            this["fp"] = this["generateFp"]()
        }
        this[_0x140f(662, "gVli")] = this["ua"][_0x140f(368, "Nt23")](/\(([^)]+)\)/)[1]
    } [_0x140f(423, "(GSA")](_0x159136) {
        const _0x4df697 = {
            "mTSDw": function (_0x2525cb, _0x1ccce0) {
                return _0x2525cb * _0x1ccce0
            },
            "wnAWo": _0x140f(570, "$!C#")
        };
        var _0x5bde48 = new URLSearchParams(_0x159136),
            _0x475767 = {};
        for (var _0xa79dc7 of _0x5bde48[_0x140f(628, "I673")]()) {
            _0x140f(689, "gISA") !== _0x4df697[_0x140f(548, "Qhky")] ? _0x475767[_0xa79dc7[0]] = _0xa79dc7[1] : _0x1fb587 += _0x202920[_0x140f(640, "D[9Y")](_0x2969a0[_0x140f(513, "Qhky")](_0x4df697[_0x140f(644, "nH)2")](_0x227bb2[_0x140f(677, "pqV&")](), _0x31e4b1[_0x140f(749, "]E[G")])))
        }
        return _0x475767
    } [_0x140f(651, "GhtE")](_0x4f063c) {
        var _0x15bca2 = new URLSearchParams();
        for (var _0x1128ca in _0x4f063c) {
            _0x15bca2[_0x140f(435, "3r#F")](_0x1128ca, _0x4f063c[_0x1128ca])
        }
        return _0x15bca2[_0x140f(339, "&)u^")]()
    } ["generateFp"]() {
        const _0x3d6522 = {
            "Lenym": _0x140f(729, "xeX@"),
            "tiGQx": function (_0x133da7) {
                return _0x133da7()
            },
            "LyujM": function (_0x5b0196, _0x4aff71) {
                return _0x5b0196 == _0x4aff71
            },
            "Fsfxd": _0x140f(455, "b*Qj"),
            "VoMJL": _0x140f(365, "tLa0"),
            "aQCrq": function (_0xfa1890, _0x2daece) {
                return _0xfa1890 * _0x2daece
            },
            "AoYRU": _0x140f(305, "X!Rf"),
            "FIeJe": function (_0xa1b754, _0x216683) {
                return _0xa1b754 == _0x216683
            },
            "XwCOc": function (_0x3e24f7, _0x2e4b78) {
                return _0x3e24f7 < _0x2e4b78
            },
            "txmgx": function (_0xb02dc3, _0x2c3b15) {
                return _0xb02dc3 + _0x2c3b15
            },
            "SSfdW": function (_0x108a23, _0x5ba750, _0xd36e26) {
                return _0x108a23(_0x5ba750, _0xd36e26)
            },
            "ZTQpE": function (_0x11e359, _0x1ea2fe, _0x45aeef) {
                return _0x11e359(_0x1ea2fe, _0x45aeef)
            },
            "VXcjQ": function (_0x4d8729, _0x1c86b3) {
                return _0x4d8729 - _0x1c86b3
            },
            "HbcSw": "3.1",
            "gXGjd": function (_0x175964, _0xf5625) {
                return _0x175964(_0xf5625)
            }
        };
        if (this["version"] == _0x3d6522["Lenym"]) {
            return _0x3d6522[_0x140f(403, "TWk5")](generateFp400)
        } else {
            if (_0x3d6522[_0x140f(705, "tLa0")](this[_0x140f(323, "gISA")], _0x3d6522[_0x140f(349, "oE4[")])) {
                return _0x3d6522["tiGQx"](generateFp410)
            }
        }
        var _0xbe5093 = '',
            _0x1db15e = _0x3d6522["VoMJL"],
            _0x548830 = Math["floor"](_0x3d6522[_0x140f(693, "BBr7")](Math["random"](), 10)),
            _0xbeae55, _0x59c33f = 12;
        do {
            if (_0x3d6522[_0x140f(633, "sNIj")] !== _0x3d6522[_0x140f(295, "xeX@")]) {
                var _0x49f103 = new _0x985d50(_0xb421b),
                    _0x5e0c4b = {};
                for (var _0x306eda of _0x49f103["entries"]()) {
                    _0x5e0c4b[_0x306eda[0]] = _0x306eda[1]
                }
                return _0x5e0c4b
            } else {
                _0xbeae55 = randomString(1, _0x1db15e);
                _0x3d6522[_0x140f(432, "(GSA")](_0xbe5093[_0x140f(408, "gISA")](_0xbeae55), -1) && (_0xbe5093 += _0xbeae55)
            }
        } while (_0x3d6522[_0x140f(621, "eZa&")](_0xbe5093[_0x140f(378, "I673")], 3));
        for (let _0x203aef of _0xbe5093[_0x140f(411, "SiQp")]()) {
            _0x1db15e = _0x1db15e[_0x140f(556, "Adlx")](_0x203aef, '')
        }
        var _0x36b82e = _0x3d6522[_0x140f(605, "KTFC")](_0x3d6522["SSfdW"](randomString, _0x548830, _0x1db15e) + _0xbe5093, _0x3d6522["ZTQpE"](randomString, _0x3d6522[_0x140f(646, "s1yq")](_0x59c33f, _0x548830), _0x1db15e)) + _0x548830;
        if (this[_0x140f(739, "zaJT")] == _0x3d6522[_0x140f(688, "tLa0")]) {
            var _0x5bf8d3 = _0x36b82e[_0x140f(669, "Bmww")](''),
                _0xb57807 = [];
            for (; _0x5bf8d3[_0x140f(718, "eZa&")];) {
                _0xb57807[_0x140f(536, "BBr7")](9 - _0x3d6522[_0x140f(557, "YiX!")](parseInt, _0x5bf8d3[_0x140f(380, "gISA")]()))
            }
            _0x36b82e = _0xb57807[_0x140f(458, "jTrB")]('')
        }
        return _0x36b82e
    }
    async [_0x140f(668, "3T^v")]() {
        const _0x14b4c7 = {
            "Qxazv": function (_0x4d9f40, _0x545539) {
                return _0x4d9f40 < _0x545539
            },
            "cBAPz": function (_0x298ffb, _0x23bb7f) {
                return _0x298ffb !== _0x23bb7f
            },
            "nkvbs": "MaFfO",
            "taJkb": function (_0x235dc0, _0x1a21d2) {
                return _0x235dc0(_0x1a21d2)
            },
            "nwjWE": function (_0x42d671, _0x2bd274) {
                return _0x42d671 == _0x2bd274
            },
            "bkOko": _0x140f(395, "RLvR"),
            "PTaxf": _0x140f(750, "nK&K"),
            "HqBkP": function (_0xaab17d, _0x317b5c) {
                return _0xaab17d == _0x317b5c
            },
            "tsQmq": _0x140f(504, "Qhky"),
            "wrxqg": function (_0x5dbf4c, _0x2d614) {
                return _0x5dbf4c === _0x2d614
            },
            "JNXFP": "XOYRt",
            "HKZPC": function (_0x510a6e, _0xbd4ce9) {
                return _0x510a6e - _0xbd4ce9
            },
            "ekoKt": function (_0x47216e, _0x40003f) {
                return _0x47216e === _0x40003f
            },
            "wPAkV": _0x140f(555, "FsKR"),
            "fEDXB": _0x140f(745, "I673"),
            "QudZt": _0x140f(686, "GhtE"),
            "DuFaA": function (_0x1b9484, _0x3010d4) {
                return _0x1b9484 == _0x3010d4
            },
            "ZkZye": "4.1",
            "mycrp": _0x140f(692, "GhtE"),
            "JYoLf": _0x140f(485, "$!C#"),
            "aboln": function (_0x1601bb, _0x54a014, _0x36caa7) {
                return _0x1601bb(_0x54a014, _0x36caa7)
            },
            "bzSkg": _0x140f(520, "oE4["),
            "mJwLk": _0x140f(313, "tLa0"),
            "tPfVQ": _0x140f(542, "nH)2")
        };
        let _0x434da5 = '',
            _0x47b382 = {};
        if (_0x14b4c7[_0x140f(367, "Fao$")](this[_0x140f(643, "vca6")], _0x14b4c7[_0x140f(499, "B)On")]) || this[_0x140f(321, "]E[G")] == _0x14b4c7[_0x140f(352, "FI6C")] || _0x14b4c7[_0x140f(733, "BBr7")](this[_0x140f(648, "B)On")], _0x14b4c7[_0x140f(438, "Adlx")])) {
            let _0x135a4c = {
                "wc": 1,
                "wd": 0,
                "l": _0x14b4c7[_0x140f(589, "]E[G")],
                "ls": _0x14b4c7[_0x140f(589, "]E[G")],
                "ml": 0,
                "pl": 0,
                "av": this["ua"]["substring"](this["ua"][_0x140f(476, "88iv")](_0x14b4c7["JYoLf"]) + 9),
                "ua": this["ua"],
                "sua": this[_0x140f(602, "&)u^")],
                "pp": {
                    "p1": this[_0x140f(558, "YiX!")]
                },
                "pp1": '',
                "w": 407,
                "h": 904,
                "ow": 407,
                "oh": 904,
                "ow": 393,
                "oh": 779,
                "url": '',
                "og": '',
                "pr": 3,
                "re": '',
                "random": _0x14b4c7[_0x140f(744, "oUV@")](randomString, 10),
                "referer": '',
                "ai": this["appId"],
                "fp": this["fp"]
            };
            this["fv"] && (_0x135a4c["v"] = this["fv"], _0x47b382["fv"] = this["fv"]);
            if (this["expand"]) {
                Object[_0x140f(429, "YiX!")](_0x135a4c, this["expand"])
            }
            _0x434da5 = _0x14b4c7["aboln"](aes_cipher, _0x14b4c7[_0x140f(607, "FsKR")], _0x135a4c)
        }
        let _0x10888d = {
            "url": _0x14b4c7["mJwLk"],
            "body": JSON[_0x140f(600, "%VSd")](Object[_0x140f(747, "vca6")]({
                "version": this["version"],
                "fp": this["fp"],
                "appId": this[_0x140f(639, "D[9Y")],
                "timestamp": new Date()[_0x140f(606, "$!C#")](),
                "platform": _0x140f(466, "vca6"),
                "expandParams": _0x434da5
            }, _0x47b382)),
            "headers": {
                "Host": _0x140f(743, "3r#F"),
                "Content-Type": _0x14b4c7[_0x140f(409, "vca6")],
                "User-agent": this["ua"]
            },
            "timeout": 10000
        };
        return new Promise(_0x329483 => {
            const _0x113be0 = {
                "WxRpx": function (_0x39592f, _0x4c8b11) {
                    return _0x14b4c7[_0x140f(457, "^oz*")](_0x39592f, _0x4c8b11)
                },
                "WHnCm": function (_0x3f424f, _0x181325) {
                    return _0x14b4c7[_0x140f(655, "L1Vp")](_0x3f424f, _0x181325)
                },
                "aLaxl": function (_0x485715, _0x1b4735, _0x4e5b92) {
                    return _0x485715(_0x1b4735, _0x4e5b92)
                }
            };
            if (_0x14b4c7[_0x140f(596, "tLa0")](_0x14b4c7[_0x140f(699, "Adlx")], _0x14b4c7[_0x140f(699, "Adlx")])) {
                got[_0x140f(720, "Qhky")](_0x10888d)[_0x140f(390, "TWk5")](_0x6ac7a6 => {
                    const _0x1c88ff = {
                        "PfIYp": function (_0x183a94, _0x43deb9) {
                            return _0x14b4c7[_0x140f(479, "RLvR")](_0x183a94, _0x43deb9)
                        }
                    };
                    if (_0x14b4c7[_0x140f(609, "D[9Y")]("MaFfO", _0x14b4c7[_0x140f(394, "vca6")])) {
                        var _0x574254 = _0x4ad7e1["split"](''),
                            _0x15a865 = [];
                        for (; _0x574254["length"];) {
                            _0x15a865[_0x140f(724, "oE4[")](_0x113be0[_0x140f(649, "X!Rf")](9, _0x113be0[_0x140f(534, "%VSd")](_0x5cd462, _0x574254["pop"]())))
                        }
                        _0x1606e7 = _0x15a865[_0x140f(433, "88iv")]('')
                    } else {
                        const {
                            "body": _0x4c0860
                        } = _0x6ac7a6;
                        try {
                            let _0x3cb731 = _0x14b4c7["taJkb"](jsonParse, _0x4c0860);
                            if (_0x14b4c7["nwjWE"](typeof _0x3cb731, _0x14b4c7[_0x140f(391, "Bmww")])) {
                                if (_0x14b4c7["PTaxf"] !== _0x140f(356, "3r#F")) {
                                    if (_0x14b4c7["HqBkP"](_0x3cb731[_0x140f(590, "YwXm")], 200)) {
                                        let _0x1883a0 = _0x3cb731["data"]["result"];
                                        this["tk"] = _0x1883a0["tk"];
                                        this["fp"] = _0x1883a0["fp"];
                                        this[_0x140f(333, "nH)2")] = new Function(_0x14b4c7[_0x140f(462, "88iv")] + _0x1883a0["algo"])();
                                        _0x329483(_0x3cb731["data"][_0x140f(377, "ScC$")])
                                    } else {
                                        console["log"]("request_algo 失败 " + JSON[_0x140f(672, "@q[T")](_0x3cb731))
                                    }
                                } else {
                                    let _0x16b4f8 = '';
                                    for (let _0x470a54 = 0; _0x1c88ff[_0x140f(559, "oUV@")](_0x470a54, _0xa1e16); _0x470a54++) {
                                        _0x16b4f8 += _0x3ecfba[_0x140f(450, "YwXm")](_0x523799[_0x140f(702, "TWk5")](_0x4f381e["random"]() * _0x38d524["length"]))
                                    }
                                    return _0x16b4f8
                                }
                            }
                        } catch (_0x3b1969) {
                            _0x14b4c7["wrxqg"](_0x14b4c7[_0x140f(554, "Qhky")], _0x14b4c7["JNXFP"]) ? console["log"](_0x3b1969) : _0x478c1f = _0x113be0[_0x140f(594, "tLa0")](_0x4b0f0a, _0x140f(549, "nH)2"), _0x323a49)
                        } finally {
                            _0x14b4c7[_0x140f(474, "3T^v")](_0x329483, '')
                        }
                    }
                }, _0x30ef47 => {
                    try {
                        const {
                            "message": _0x521aab,
                            "response": _0xcb0358
                        } = _0x30ef47;
                        console[_0x140f(335, "SiQp")]('' + JSON[_0x140f(608, "Fao$")](_0x521aab));
                        console[_0x140f(451, "$!C#")](functionId + _0x140f(306, "gISA"))
                    } catch (_0x408632) {} finally {
                        _0x329483('')
                    }
                })
            } else {
                var _0x42eae2 = new _0x49ecbb();
                for (var _0xe10719 in _0x376a64) {
                    _0x42eae2["set"](_0xe10719, _0x3b62af[_0xe10719])
                }
                return _0x42eae2[_0x140f(369, "%VSd")]()
            }
        })
    }
    async [_0x140f(478, "tLa0")](_0x23aef9 = new Date()["getTime"]()) {
        const _0x4f81e7 = {
            "pEMoQ": function (_0x21c4b5, _0x1180c9) {
                return _0x21c4b5 + _0x1180c9
            },
            "QNdxV": function (_0x59618f, _0x401b93) {
                return _0x59618f + _0x401b93
            },
            "RihCN": _0x140f(481, "nK&K"),
            "ieBLP": function (_0x2b52ee, _0x53c225, _0x52910e) {
                return _0x2b52ee(_0x53c225, _0x52910e)
            },
            "mtwoR": function (_0xab06e4, _0x38cbbc) {
                return _0xab06e4(_0x38cbbc)
            },
            "Asiyr": function (_0x577736, _0x33acde) {
                return _0x577736 == _0x33acde
            },
            "OAiXU": _0x140f(328, "vca6"),
            "KXpFE": function (_0x472757, _0x4748d5) {
                return _0x472757 == _0x4748d5
            },
            "EFfAJ": _0x140f(392, "sNIj"),
            "eMhqS": function (_0x590d05, _0x23b9bf) {
                return _0x590d05 !== _0x23b9bf
            },
            "TgupA": _0x140f(593, "Fao$"),
            "QCHjB": _0x140f(561, "b4S*"),
            "JBxhK": "function",
            "VYFPk": function (_0x36cb5f, _0xecc7ef) {
                return _0x36cb5f === _0xecc7ef
            },
            "FlpWR": _0x140f(475, "D[9Y"),
            "KYdlH": _0x140f(370, "@q[T"),
            "fqMcu": function (_0x30a3cf, _0x4adcca) {
                return _0x30a3cf === _0x4adcca
            },
            "rXKJk": _0x140f(470, "X!Rf"),
            "iLQCU": _0x140f(400, "Nt23"),
            "QBfKi": _0x140f(544, "RLvR"),
            "kJcbJ": function (_0x4f63a8, _0x1ccff9) {
                return _0x4f63a8 == _0x1ccff9
            },
            "JihAH": function (_0x317a62, _0x1189f7) {
                return _0x317a62 + _0x1189f7
            },
            "UQRPl": _0x140f(671, "nK&K"),
            "rLrjD": _0x140f(486, "FI6C")
        };
        this[_0x140f(405, "FI6C")] = _0x23aef9;
        this["timeDate"] = format(_0x23aef9, _0x140f(706, "88iv"));
        this[_0x140f(459, "3r#F")] = {
            "appid": this["appid"],
            "functionId": this[_0x140f(427, "nK&K")],
            "body": this[_0x140f(592, "BBr7")],
            "clientVersion": this[_0x140f(351, "RLvR")],
            "client": this["client"]
        };
        if (this["t"]) {
            this[_0x140f(741, "RLvR")]["t"] = this["t"]
        }
        var _0x5e5821 = this["_stk"] ? this[_0x140f(580, "3r#F")]["split"](",") : [_0x140f(715, "GhtE"), _0x140f(463, "nK&K"), _0x140f(487, "Nt23"), "clientVersion", "functionId", "t"],
            _0x51cda5 = '';
        if (_0x4f81e7[_0x140f(583, "BBr7")](this[_0x140f(291, "FsKR")], _0x4f81e7[_0x140f(371, "bcME")])) {
            if (_0x4f81e7[_0x140f(550, "Fao$")](_0x4f81e7[_0x140f(293, "BBr7")], _0x4f81e7[_0x140f(383, "^oz*")])) {
                _0x300b5b[_0x140f(735, "b4S*")](_0x4f81e7[_0x140f(350, "&)u^")](_0x140f(299, "3r#F"), _0x13b79d));
                return false
            } else {
                _0x51cda5 = "04"
            }
        } else {
            this[_0x140f(746, "%VSd")] == _0x4f81e7[_0x140f(734, "B)On")] && (_0x51cda5 = "66")
        }
        this["str"] = _0x5e5821[_0x140f(364, "BBr7")](_0x464b96 => this["Data"][_0x464b96])[_0x140f(491, "88iv")](_0x4fc2d0 => _0x4fc2d0 + ":" + (_0x4fc2d0 == _0x140f(675, "KTFC") ? CryptoJS["SHA256"](this[_0x140f(622, "YwXm")][_0x4fc2d0])["toString"]() : this["Data"][_0x4fc2d0]))[_0x140f(610, "3r#F")]("&");
        if (_0x4f81e7[_0x140f(599, "s1yq")](typeof this[_0x140f(545, "s1yq")], _0x4f81e7[_0x140f(347, "pqV&")])) {
            if (_0x4f81e7[_0x140f(358, "gISA")](_0x4f81e7["FlpWR"], "sbUyo")) {
                console["log"]("h5st genKey 未定义函数!");
                return false
            } else {
                let _0x478994 = _0x49ddbe["data"][_0x140f(659, "Fao$")];
                this["tk"] = _0x478994["tk"];
                this["fp"] = _0x478994["fp"];
                this["genKey"] = new _0x3cd8f8(_0x4f81e7["QNdxV"](_0x4f81e7[_0x140f(682, "FsKR")], _0x478994["algo"]))();
                _0x3cc41c(_0x68922[_0x140f(713, "B)On")][_0x140f(374, "I673")])
            }
        }
        try {
            _0x4f81e7[_0x140f(742, "bcME")](_0x140f(375, "&)u^"), _0x4f81e7[_0x140f(564, "pqV&")]) ? this["Key"] = await this["genKey"](this["tk"], this["fp"], this[_0x140f(617, "pqV&")] + _0x51cda5, this[_0x140f(714, "RLvR")], CryptoJS)[_0x140f(493, "zaJT")]() : _0x524479[_0x140f(325, "Adlx")](_0x4f81e7[_0x140f(619, "Nt23")](_0x92e684, "wm0!@w_s#ll1flo(", _0x27acef))
        } catch (_0xb5c706) {
            if (_0x4f81e7[_0x140f(690, "eZa&")](_0x4f81e7[_0x140f(443, "Fao$")], _0x4f81e7[_0x140f(345, "nH)2")])) {
                let _0x47a01e = _0x4f81e7["mtwoR"](_0x242913, _0x25990b);
                if (_0x4f81e7[_0x140f(524, "FsKR")](typeof _0x47a01e, _0x4f81e7["OAiXU"])) {
                    if (_0x4f81e7["Asiyr"](_0x47a01e[_0x140f(418, "bcME")], 200)) {
                        let _0x498bc2 = _0x47a01e[_0x140f(620, "gISA")][_0x140f(340, "D[9Y")];
                        this["tk"] = _0x498bc2["tk"];
                        this["fp"] = _0x498bc2["fp"];
                        this["genKey"] = new _0x1f1e0a(_0x4f81e7[_0x140f(307, "YwXm")](_0x4f81e7[_0x140f(732, "TWk5")], _0x498bc2[_0x140f(574, "Qhky")]))();
                        _0x4f81e7["mtwoR"](_0x13b985, _0x47a01e["data"][_0x140f(447, "]E[G")])
                    } else {
                        _0x4e5211[_0x140f(565, "oE4[")](_0x140f(355, "RLvR") + _0x22b2f5["stringify"](_0x47a01e))
                    }
                }
            } else {
                console[_0x140f(290, "Nt23")](_0x4f81e7[_0x140f(338, "tLa0")] + _0xb5c706);
                return false
            }
        }
        if (_0x4f81e7["kJcbJ"](this[_0x140f(415, "sNIj")], _0x4f81e7[_0x140f(522, "BBr7")])) {
            return CryptoJS[_0x140f(357, "Fao$")](_0x4f81e7[_0x140f(301, "Fao$")](this["Key"], this[_0x140f(315, "I673")]) + this[_0x140f(317, "88iv")])["toString"](CryptoJS["enc"]["Hex"])
        }
        return CryptoJS[_0x4f81e7["KXpFE"](this[_0x140f(695, "X!Rf")], _0x4f81e7[_0x140f(456, "pqV&")]) ? _0x4f81e7["UQRPl"] : _0x4f81e7[_0x140f(495, "KTFC")]](this[_0x140f(588, "GhtE")], this[_0x140f(637, "SiQp")])[_0x140f(346, "3T^v")](CryptoJS[_0x140f(566, "eZa&")][_0x140f(576, "Fao$")])
    }
    async [_0x140f(471, "(GSA")](_0x3be732, _0x313268, _0x1cae7e = true) {
        const _0x22e7f4 = {
            "SAaWF": function (_0x4fdde9, _0x5cc4d0) {
                return _0x4fdde9(_0x5cc4d0)
            },
            "LKOIw": _0x140f(728, "nH)2"),
            "HLjcK": function (_0x3f0935, _0x191a9f) {
                return _0x3f0935 !== _0x191a9f
            },
            "VoOEU": "rjOUf",
            "UXiUB": function (_0x5cfe25, _0x2a58a6) {
                return _0x5cfe25 == _0x2a58a6
            },
            "yWjds": _0x140f(665, "Fao$"),
            "qXEYV": function (_0x4a9b29, _0x5c6943, _0x3885fc) {
                return _0x4a9b29(_0x5c6943, _0x3885fc)
            },
            "xWgEv": _0x140f(324, "nK&K"),
            "DxGum": function (_0x25ccb4, _0x12c6fc) {
                return _0x25ccb4 == _0x12c6fc
            },
            "XBqJG": "400",
            "RwKDY": _0x140f(421, "D[9Y"),
            "OdKMm": function (_0xcde38, _0x148792, _0x5df338) {
                return _0xcde38(_0x148792, _0x5df338)
            },
            "KbToG": _0x140f(498, "Qhky"),
            "Yjnsx": function (_0x12edf7, _0x125179) {
                return _0x12edf7 === _0x125179
            },
            "PSeum": _0x140f(509, "FI6C"),
            "cJjRS": function (_0x2c1264, _0x595c46, _0x5c0319) {
                return _0x2c1264(_0x595c46, _0x5c0319)
            }
        };
        if (typeof _0x313268 == _0x140f(336, "GhtE")) {
            _0x313268 = JSON["stringify"](_0x313268)
        }
        this[_0x140f(658, "ScC$")] = _0x3be732;
        this[_0x140f(503, "@q[T")] = _0x313268;
        this["t"] = _0x1cae7e ? new Date()[_0x140f(584, "tLa0")]() : '';
        if (!this["tk"]) {
            if (_0x22e7f4[_0x140f(631, "sNIj")](_0x22e7f4["VoOEU"], _0x22e7f4[_0x140f(726, "RLvR")])) {
                if (!_0x22e7f4[_0x140f(482, "(GSA")](_0xcdfac7, _0x4f86b8)) {
                    _0x9b7b6f[_0x140f(533, "L1Vp")](_0x13cfc2 + ": 未定义!");
                    this[_0x140f(381, "(GSA")] = false;
                    return false
                }
            } else {
                let hq = '';
                hq = await this[_0x140f(488, "&nh7")]();
                if (!hq) {
                    return false
                }
            }
        }
        this[_0x140f(448, "b*Qj")] = await this[_0x140f(738, "3r#F")]();
        if (_0x22e7f4[_0x140f(449, "bcME")](this[_0x140f(424, "YwXm")], false)) {
            return false
        }
        let _0xbfa3c6 = [this["timeDate"], this["fp"], this["appId"], this["tk"], this[_0x140f(531, "(GSA")], this[_0x140f(483, "oUV@")], this[_0x140f(700, "jTrB")]],
            _0x166767 = {
                "sua": this[_0x140f(535, "Bmww")],
                "pp": {
                    "p1": this[_0x140f(591, "vca6")]
                },
                "random": _0x22e7f4[_0x140f(613, "xeX@")](randomString, 10),
                "referer": '',
                "fp": this["fp"]
            };
        if (this["fv"]) {
            _0x166767["v"] = this["fv"]
        }
        if (this[_0x140f(541, "Nt23")] == _0x22e7f4[_0x140f(310, "oE4[")]) {
            _0xbfa3c6[_0x140f(296, "zaJT")](_0x22e7f4["qXEYV"](aes_cipher, _0x22e7f4["xWgEv"], _0x166767))
        } else {
            if (_0x22e7f4[_0x140f(567, "RLvR")](this[_0x140f(291, "FsKR")], _0x22e7f4["XBqJG"])) {
                if (_0x22e7f4["RwKDY"] === "BONrp") {
                    return false
                } else {
                    _0xbfa3c6[_0x140f(511, "I673")](_0x22e7f4[_0x140f(326, "L1Vp")](aes_cipher, _0x22e7f4[_0x140f(342, "YwXm")], _0x166767))
                }
            } else {
                _0x22e7f4[_0x140f(300, "FsKR")](this["version"], _0x22e7f4[_0x140f(578, "nH)2")]) && (_0x22e7f4[_0x140f(334, "D[9Y")]("MqFcc", _0x22e7f4[_0x140f(514, "]E[G")]) ? _0x42fc33[_0x140f(490, "nK&K")](_0x55a477(_0x22e7f4[_0x140f(468, "pqV&")], _0x37b22d)) : _0xbfa3c6[_0x140f(636, "b*Qj")](_0x22e7f4["cJjRS"](aes_cipher, _0x140f(634, "jTrB"), _0x166767)))
            }
        }
        return _0xbfa3c6[_0x140f(416, "sNIj")](";")
    }
    async [_0x140f(571, "nH)2")](_0x452fad, _0x3c06d7 = {}, _0x1b6e50 = true) {
        const _0x3c6e2c = {
            "FZnmd": function (_0x5a7e35, _0x2bd29b) {
                return _0x5a7e35 == _0x2bd29b
            },
            "vQseb": _0x140f(641, "GhtE"),
            "uIklP": function (_0x29e131, _0x599c9d, _0x535313) {
                return _0x29e131(_0x599c9d, _0x535313)
            },
            "JtOyD": "400",
            "cLNAc": "4.1",
            "eNGrE": function (_0x1698a7, _0x4a70ae, _0x365d3b) {
                return _0x1698a7(_0x4a70ae, _0x365d3b)
            },
            "NwLYI": "HL4|FW#Chc3#q?0)",
            "fxeaK": function (_0x483f41, _0x33c237) {
                return _0x483f41 != _0x33c237
            },
            "vHSAz": function (_0x47c05b, _0x18dd2f) {
                return _0x47c05b === _0x18dd2f
            },
            "GpXdy": _0x140f(441, "oE4["),
            "CaQdj": function (_0x22afe4, _0x50b7cc) {
                return _0x22afe4 !== _0x50b7cc
            },
            "XPyPZ": "Bgtkp"
        };
        var _0x2476f6 = await this[_0x140f(442, "sNIj")](_0x452fad, _0x3c06d7, _0x1b6e50);
        if (_0x2476f6) {
            if (_0x3c6e2c["vHSAz"](_0x3c6e2c[_0x140f(653, "gISA")], _0x3c6e2c[_0x140f(330, "sNIj")])) {
                let _0x28d15a = {
                    "functionId": _0x452fad,
                    "body": this["body"],
                    "appid": this["appid"],
                    "client": this["client"],
                    "clientVersion": this[_0x140f(552, "s1yq")],
                    "h5st": _0x2476f6
                };
                if (this["_stk"]) {
                    _0x28d15a[_0x140f(292, "Adlx")] = this["_stk"]
                }
                if (_0x1b6e50) {
                    _0x28d15a["t"] = this["t"]
                }
                return this[_0x140f(517, "tLa0")](_0x28d15a)
            } else {
                if (_0x3c6e2c["FZnmd"](this[_0x140f(678, "L1Vp")], _0x3c6e2c[_0x140f(603, "KTFC")])) {
                    _0x1ed711 = _0x3c6e2c["uIklP"](_0x2b335b, _0x140f(430, "$!C#"), _0x55bc2f)
                } else {
                    if (this[_0x140f(354, "D[9Y")] == _0x3c6e2c[_0x140f(373, "YwXm")]) {
                        _0x4b42a9 = _0x3c6e2c["uIklP"](_0x526b20, "n1nJA1s[uoyl982f", _0x1010b8)
                    } else {
                        _0x3c6e2c[_0x140f(579, "YwXm")](this[_0x140f(723, "KTFC")], _0x3c6e2c[_0x140f(460, "L1Vp")]) && (_0x1cc6c0 = _0x3c6e2c[_0x140f(387, "YiX!")](_0x118005, _0x3c6e2c[_0x140f(506, "Adlx")], _0x1c5b60))
                    }
                }
                _0x33cd29[_0x140f(529, "gISA")]("expand:");
                _0x2746c3[_0x140f(372, "BBr7")](_0x4b7e66);
                _0x37faf0[_0x140f(464, "Bmww")]();
                if (_0x2b63da["v"]) {
                    _0x2a08de["fv"] = _0xb89f2a["v"]
                }
            }
        } else {
            return _0x3c6e2c[_0x140f(598, "ScC$")](_0x3c6e2c["XPyPZ"], _0x3c6e2c[_0x140f(660, "ScC$")]) ? _0x3c6e2c["fxeaK"](typeof _0x32cd77, _0x140f(717, "D[9Y")) : false
        }
    }
    async [_0x140f(437, "3r#F")](_0x56bf10, _0xe5f2d1, _0x33d6c7 = true) {
        return this[_0x140f(439, "Adlx")](_0x56bf10, _0xe5f2d1, _0x33d6c7)
    }
    async [_0x140f(627, "Nt23")](_0x325354, _0x3f2597) {
        const _0x523593 = {
            "nkyff": function (_0x2cbd10, _0x517d3d) {
                return _0x2cbd10(_0x517d3d)
            },
            "bvclr": function (_0x144695, _0xf62097) {
                return _0x144695 === _0xf62097
            },
            "fkXkU": _0x140f(393, "]E[G"),
            "RsGDY": _0x140f(654, "xeX@"),
            "ozWMN": function (_0x26f4b0, _0x39765d) {
                return _0x26f4b0 == _0x39765d
            },
            "LZNVU": "3.1",
            "uiAos": _0x140f(577, "FI6C"),
            "IpLmD": function (_0xbec6a9, _0xfe4293) {
                return _0xbec6a9 == _0xfe4293
            },
            "ADsRa": "400",
            "dUUWB": function (_0x2f04fd, _0x6b7d89, _0x2bc312) {
                return _0x2f04fd(_0x6b7d89, _0x2bc312)
            },
            "ipILr": "n1nJA1s[uoyl982f",
            "FJFvN": _0x140f(398, "B)On")
        };
        let _0x485724 = this[_0x140f(318, "Bmww")](_0x325354);
        this[_0x140f(645, "jTrB")] = _0x485724[_0x140f(656, "Qhky")];
        this["functionId"] = _0x485724[_0x140f(419, "TWk5")];
        this[_0x140f(385, "RLvR")] = _0x485724[_0x140f(327, "]E[G")];
        this["clientVersion"] = _0x485724["clientVersion"];
        this[_0x140f(526, "oE4[")] = _0x485724[_0x140f(661, "FsKR")];
        this["t"] = _0x485724["t"];
        if (_0x485724[_0x140f(721, "FI6C")]) {
            this[_0x140f(632, "jTrB")] = _0x485724[_0x140f(399, "FsKR")]
        }
        let _0x28fff3 = _0x485724["h5st"][_0x140f(711, "BBr7")](";");
        this["fp"] = _0x28fff3[1];
        this[_0x140f(445, "oUV@")] = _0x28fff3[2];
        this["tk"] = _0x28fff3[3];
        this["sign"] = _0x28fff3[4];
        this[_0x140f(642, "(GSA")] = _0x28fff3[5];
        this[_0x140f(412, "YiX!")] = _0x523593[_0x140f(348, "@q[T")](parseInt, _0x28fff3[6]);
        this[_0x140f(696, "GhtE")] = _0x3f2597;
        console[_0x140f(725, "&)u^")](_0x140f(560, "L1Vp") + this["version"]);
        let _0x2dfe7d = await this[_0x140f(698, "Nt23")](this[_0x140f(528, "tLa0")]),
            _0x45ce15 = {};
        _0x2dfe7d != this[_0x140f(454, "88iv")] ? _0x523593["bvclr"](_0x523593[_0x140f(701, "ScC$")], _0x523593[_0x140f(501, "Bmww")]) ? console[_0x140f(616, "tLa0")]("sign矫正不通过!genSign:\n" + _0x2dfe7d + "\n" + this["sign"]) : _0x11d96d[_0x140f(616, "tLa0")]("request_algo 失败 " + _0x63b1f3["stringify"](_0x4a8cea)) : _0x45ce15 = {
            "appId": this[_0x140f(722, "bcME")],
            "appid": this[_0x140f(366, "3T^v")],
            "clientVersion": this[_0x140f(666, "jTrB")],
            "client": this["client"],
            "pin": _0x523593[_0x140f(311, "3r#F")],
            "ua": _0x140f(500, "BBr7"),
            "version": this[_0x140f(388, "tLa0")]
        };
        if (this["_stk"]) {
            _0x45ce15[_0x140f(580, "3r#F")] = this[_0x140f(322, "RLvR")]
        }
        let _0x42d1d6 = _0x28fff3[7];
        if (_0x42d1d6) {
            if (_0x523593[_0x140f(417, "3r#F")](this[_0x140f(539, "Bmww")], _0x523593[_0x140f(407, "&nh7")])) {
                _0x42d1d6 = aes_decipher(_0x523593[_0x140f(480, "GhtE")], _0x42d1d6)
            } else {
                if (_0x523593[_0x140f(623, "(GSA")](this[_0x140f(586, "xeX@")], _0x523593["ADsRa"])) {
                    _0x42d1d6 = _0x523593["dUUWB"](aes_decipher, _0x523593[_0x140f(595, "RLvR")], _0x42d1d6)
                } else {
                    _0x523593[_0x140f(618, "B)On")](this["version"], _0x523593[_0x140f(505, "oUV@")]) && (_0x42d1d6 = _0x523593[_0x140f(331, "oE4[")](aes_decipher, _0x140f(685, "(GSA"), _0x42d1d6))
                }
            }
            console[_0x140f(464, "Bmww")](_0x140f(472, "Fao$"));
            console[_0x140f(389, "%VSd")](_0x42d1d6);
            console[_0x140f(359, "FI6C")]();
            if (_0x42d1d6["v"]) {
                _0x45ce15["fv"] = _0x42d1d6["v"]
            }
        }
        console[_0x140f(440, "FsKR")]("\nconst H5ST=require('./utils/h5st.js');\nconst new_H5ST = new H5ST(");
        console[_0x140f(332, "Qhky")](_0x45ce15);
        console[_0x140f(735, "b4S*")](");\nawait new_H5ST.genAlgo();\nconst UrlParams=await new_H5ST.genUrlParams('" + this[_0x140f(658, "ScC$")] + "','" + this[_0x140f(461, "ScC$")] + _0x140f(687, "Qhky"))
    }
}

function _0x5e2b() {
    global["_0xenty"] = Buffer["from"]('anNqaWFtaS5jb20udjc=', 'base64')["toString"]('utf-8')
}
module[_0x140f(664, "tLa0")] = H5ST;

在部分解密结果的最后一个function中可以看出还使用了v7加密。

function _0x5e2b() {
    global["_0xenty"] = Buffer["from"]('anNqaWFtaS5jb20udjc=', 'base64')["toString"]('utf-8')
}

issues10 中,您已经对eval进行了部分支持。请问您是否可以添加eval-v7的解密呢?

感谢作者的付出。

echo094 commented 1 year ago

这个v7的格式和常规的不一样,以前的混淆脚本第一行直接就定义了版本号变量,但是这个脚本将这个变量的定义放到了函数里,在函数内通过global对象定义,并在脚本开头处调用:

_0x5e2b('0x0');
function _0x5e2b() {
    return global["_0xenty"] = Buffer["from"]('anNqaWFtaS5jb20udjc=', 'base64')["toString"]('utf-8')
}
function _0x5e2b() {
    global["_0xenty"] = Buffer["from"]('anNqaWFtaS5jb20udjc=', 'base64')["toString"]('utf-8')
}

由于global全局对象只存在于Node.js 环境中,在浏览器环境下会报错(这里的全局对象是window),所以之前的脚本没有出现这种形式。

我需要一点时间来添加对这种特征的支持,你如果着急的话,可以按下面的流程操作:

  1. 使用 de4js 解密
  2. 将第一行_0x5e2b('0x0');替换成var _0xenty="jsjiami.com.v7";
  3. 放到本插件解密
ghost commented 1 year ago

谢谢,按照您的方法确实可行。