某招聘网站逆向分析

前言：

• 破解知识点： 加速乐
  • 加速乐一般有三次请求
  • 第一次请求返回的状态码为521， 响应返回的数据经过了AAEncode混淆
  • 第二次请求返回的状态码也为521， 响应返回的数据经过了OB混淆
  • 第三次请求返回的状态码为200， 成功返回响应页面

分析思路：

• 根据加速乐的特点， 思路一样分为三步
• 第一次请求会在响应头中（set-cookie）返回 __jsluid_s， 响应内容解密获取第一次的 __jsl_clearance_s
• 第二次请求需要携带上第一次请求获取到的cookie值， 解密响应内容得到第二次的 __jsl_clearance_s
• 第三次请求携带上最终的cookie ， 成功请求页面

网站分析：

• 清空浏览器cookie缓存， 对网站进行抓包，可以看到发生了三次请求， 前两次请求状态返回521， 然后返回的200， 符合加速乐的加载特征

  • 图片.png

• 第一次请求分析：

  • 点击第一次请求， 我们可以看到， 在响应cookie 中返回了__jsluid_s, 在浏览器抓包中， 响应内容看不到。我们可以使用抓包工具查看， 或者模拟请求查看页面响应内容。

  • 图片(1).png
  • 图片(2).png
  - 图片(3).png

<script>document.cookie=('_')+('_')+('j')+('s')+('l')+('_')+('c')+('l')+('e')+('a')+('r')+('a')+('n')+('c')+('e')+('_')+('s')+('=')+((+true)+'')+(2+5+'')+(-~[]+'')+(-~[]+'')+(-~(8)+'')+((2)*[2]+'')+(~~[]+'')+(4+4+'')+((+true)+'')+(6+'')+('.')+(8+'')+(~~false+'')+(1+7+'')+('|')+('-')+(-~{}+'')+('|')+((1<<1)+'')+(2+'')+('y')+('I')+('b')+('M')+('L')+('%')+(2+'')+('B')+('W')+('l')+('l')+(1+2+'')+(~~{}+'')+('r')+('Z')+('J')+('D')+(2+2+'')+('z')+(-~(4)+'')+('A')+('H')+('v')+('v')+('Z')+('y')+('Q')+('%')+((1+[2]>>2)+'')+('D')+(';')+(' ')+('M')+('a')+('x')+('-')+('a')+('g')+('e')+('=')+((2^1)+'')+(3+3+'')+(~~''+'')+(~~[]+'')+(';')+(' ')+('P')+('a')+('t')+('h')+('=')+('/')+(';')+(' ')+('S')+('a')+('m')+('e')+('S')+('i')+('t')+('e')+('=')+('N')+('o')+('n')+('e')+(';')+(' ')+('S')+('e')+('c')+('u')+('r')+('e');location.href=location.pathname+location.search</script>

• 我们将这段代码处理一下， 使用正则表达式将混淆的部分提取出来， 利用eval() 函数处理一下， 得到返回结果， 其中我们可以看到， 请求第一次的cookie 我们都已经获取

• 图片(4).png

• 第二次请求分析：

  • 第二次请求同样可以看到是混淆的， 并且与第一次请求的混淆不一样。第二次请求中混淆的代码是执行了一些逻辑的。代码只有几百行， 我们全扣下来分析一下（也可以进行本地替换或者hook）。我这里使用的是全部复制下来在浏览器中调试
  • 图片(5).png

debugger;
var _0xf902 = ['wojDusOfBg==', 'eMKRICE=', 'wrPCuTZk', 'w5Mww6wD', 'w6nDjRLCrA==', 'EsOHwpjCqQ==', 'w7c2SGo=', 'OT5Ocg==', 'w4zCv3Bm', 'XyTDp8Om', 'w6YUEm8=', 'WcKbFE8=', 'w7DCmSJR', 'wrFKw4gc', 'w4gDQUs=', 'dcK/XyE=', 'UTYkw44=', 'wrtiBF0=', 'NSvCjBo=', 'Xk4GVw==', 'w4cTDsOy', 'MCcUw5Q=', 'KMKQYVc=', 'wrxcw4w=', 'wpHCr8Kewok=', 'H8OWwqbCvQ==', 'wqDCrcOHwqo=', 'Oi8Yw4M=', 'wr1hJmE=', 'w7rCpgd8', 'Wx4hw4Q=', 'w6YeQg==', 'w4vCvTR7', 'fVLDvTs=', 'JgnCt8Or', 'w5RIw6HCsg==', 'LSnClcOe', 'wpfCncKbwrw=', 'wr5Qw4YD', 'woPCvsKXwrI=', 'bjDDlT8=', 'wofCssKSwqs=', 'E8OPw7vDrw==', 'wr3DqWNG', 'w7PCvyDDiQ==', 'Mx/DosOz', 'HsKXwrE2', 'OgzCt8Or', 'w5o3wp4R', 'JDF6Ug==', 'wpzCuzZe', 'w7DCkwhz', 'w6lDwpgU', 'PsOzw5rDpQ==', 'w78UfEg=', 'wp5Qw40N', 'UDTDvMOM', 'fDjDtAk=', 'UzsYNg==', 'dwd+Qw==', 'w7wbenM=', 'w7kJdls=', 'w6LCugLDoQ==', 'UMKRdxs=', 'w6PCsMK+fQ==', 'fCfDmcOk', 'ccK7woXCug==', 'w69ow6M=', 'w6bCtGBy', '6K2m5rKI6aui6K2J', 'O8OEw6nDjQ==', 'eMKTBCU=', 'Gz4l', 'wrPCisKOwo8=', 'w47Dnz3Dtw==', 'ZzLDtCU=', 'eMOLwqvDrg==', 'XiPDgB8=', 'w7kAEcKW', 'w6XCryls', 'w7/Cridc', 'VlY8aA==', 'CsOKw5bDsw==', 'ZCgrXA==', 'W8KUXE4=', 'RsK+cS8=', 'IsKia08=', 'w6PCoisN', 'eT3Dl8O7', 'w6chEC8=', 'w6RMw7TCpg==', 'w5zCtAJ0', 'ECQyw6E=', 'wo1aMU0=', 'w7Ucw4Mt', 'NMOKw5DDqg==', 'FMKSRMOy', 'w5LCpQrDrQ==', 'w5nDusKMwps=', 'wo/Cq8OUwq0=', 'asKmczk=', 'CsO2w5jDmA==', 'GzDCkS0=', 'w64TKMOb', 'cV8YXA==', 'TwU4w4w=', 'wo3DhXBb', 'X8O4HW4=', 'TcKdXy8=', 'XWDDssKx', 'eADCiHo=', 'w4rDixDCsA==', 'w7MkUcO5', 'NwTDoMO8', 'w7tCw6vCsA==', 'QMKgcTE=', 'wo7Cv8KSwp0=', 'Y8KTOAc=', 'YgHCsEo=', 'NRPDjsOf', 'fsOTwoDDrg==', 'GS7Ck8O8', 'OsKqbgo=', 'wrt1UW8=', 'ZC7CtGg=', 'LcKcVsOu', 'w6DCsC8I', 'w4grBzk=', 'wofCuMONwqk=', 'w5ESanE=', 'QAs8Ig==', 'IcO9wpLCvA==', 'wrzCqwnDrQ==', 'w5LDq8OOw4k=', 'w4oVF8KQ', 'L8OOw6zDkw==', 'X8KzTUQ=', 'GcKTQcOd', 'NDx6Ug==', 'woLDmcOSPw==', 'w6fCuCrDig==', 'w5JXw4/CpQ==', 'b3nDuAI=', 'wp7CnAFy', 'cmrDjsKY', 'L8KCwqsR', 'Z8KsTg==', 'w4XDvAbCuw==', 'wpfDl21K', 'VxzDnx4=', 'w4bCpgpH', 'I8K1WWI=', 'RcK3IV0=', 'E8KfTx4=', 'bBl6WA==', 'w6ArFDs=', 'BMKjTmI=', 'w4MTFsOx', 'BTHDrcOH', 'FsOHN2k=', 'BsOawq7CuQ==', 'csKpwpTCoA==', 'w54wLsO1', 'wrNVw7w6', 'bDDDhMOW', 'w7EGLzc=', 'wqLCpcOGwqE=', 'BcKZdkw=', 'VFkHXQ==', 'bcK5ago=', 'wqzDhhdb', 'w5fDlz/DkA==', 'Tk3Dk8Kb', 'w53CuWVJ', 'c8OHGG4=', 'BcKHwogz', 'w7DCvXVl', 'wqtNw60q', 'wrvCmC1a', 'wp/CvBpl', 'VQ84IQ==', 'OcOOw57DrA==', 'wojDnD93', 'c8OIE18=', 'VTXDqSY=', 'OiLDh8O5', 'Cg7Cg8O2', 'w5YNHsKD', 'YcOFE3o=', 'w5opX3M=', 'wotMA0c=', 'd0bCs8O7', 'dMOYwpDDug==', 'ajTDgsOh', 'QsKfWjo=', 'Fg3CsQ4=', 'wo3DlD9e', 'GhnCiSY=', 'WCspw6I=', 'wqvDoRFC', 'w7otEcKT', 'w4rCihRh', 'wqLDm8O2Ow==', 'wqBFAw==', 'wp57w6wu', 'VsODwrjDpg==', 'wrNDMlk=', 'wrvDmW5h', 'wrzDhyZN', 'HBvDscOT', 'Qg7Cok0=', 'ZCANw4g=', 'QH0xVw==', 'AgfDqcOx', 'C2LCpls=', 'IcKZSmA=', 'ZSXDvgY=', 'LC3CmsOx', 'IR7Cv8O8', 'FsOPw7PDiQ==', 'w5scbXE=', 'NMKddkQ=', 'wprCgxN/', 'EAE6w48=', 'RsKEWDU=', 'w7/ChmlL', 'w6ANNCo=', 'wrlfMVc=', 'NiBLUw==', 'woRzw6oJ', 'BsKxdUo=', 'w6EmGhY=', 'w5YKG8KU', 'B8OUwo7CuQ==', 'w7MWBxs=', 'wofDg8OcIA==', 'wrZ2w74e', 'RgEh', 'w5ACbMOt', 'w4I9NjI=', 'FsOQwpPCqA==', 'w6QMDT4=', 'X8OqOEs=', 'fsKEQSk=', 'wozCisKzwoI=', 'wpdew6Mt', 'JBDCpcO+', 'w5nDgDTCjg==', 'w7jCvjTDiw==', 'HsKKTB8=', 'w547ecO1', 'wqvCo8KpwpQ=', 'wqnCpcOYwpM='];
(function(_0x3fb4ef, _0xf9026b) {
    var _0x1537fe = function(_0x2b1dd0) {
        while (--_0x2b1dd0) {
            _0x3fb4ef['push'](_0x3fb4ef['shift']());
        }
    };
    _0x1537fe(++_0xf9026b);
}(_0xf902, 0x16f));
var _0x1537 = function(_0x3fb4ef, _0xf9026b) {
    _0x3fb4ef = _0x3fb4ef - 0x0;
    var _0x1537fe = _0xf902[_0x3fb4ef];
    if (_0x1537['kJbrqT'] === undefined) {
        (function() {
            var _0x7f50a2 = function() {
                var _0x5410b8;
                try {
                    _0x5410b8 = Function('return\x20(function()\x20' + '{}.constructor(\x22return\x20this\x22)(\x20)' + ');')();
                } catch (_0x245ad6) {
                    _0x5410b8 = window;
                }
                return _0x5410b8;
            };
            var _0x4610a8 = _0x7f50a2();
            var _0x5ae5d6 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
            _0x4610a8['atob'] || (_0x4610a8['atob'] = function(_0x30696d) {
                var _0x225e91 = String(_0x30696d)['replace'](/=+$/, '');
                var _0x11d48c = '';
                for (var _0x137f4e = 0x0, _0x322883, _0x5da608, _0x5891cf = 0x0; _0x5da608 = _0x225e91['charAt'](_0x5891cf++); ~_0x5da608 && (_0x322883 = _0x137f4e % 0x4 ? _0x322883 * 0x40 + _0x5da608 : _0x5da608,
                _0x137f4e++ % 0x4) ? _0x11d48c += String['fromCharCode'](0xff & _0x322883 >> (-0x2 * _0x137f4e & 0x6)) : 0x0) {
                    _0x5da608 = _0x5ae5d6['indexOf'](_0x5da608);
                }
                return _0x11d48c;
            }
            );
        }());
        var _0x21d4a6 = function(_0x18c93d, _0x59c831) {
            var _0x36bfd4 = [], _0x9864e5 = 0x0, _0x524adb, _0x231af9 = '', _0x42a3cf = '';
            _0x18c93d = atob(_0x18c93d);
            for (var _0x3c83e7 = 0x0, _0x3e3993 = _0x18c93d['length']; _0x3c83e7 < _0x3e3993; _0x3c83e7++) {
                _0x42a3cf += '%' + ('00' + _0x18c93d['charCodeAt'](_0x3c83e7)['toString'](0x10))['slice'](-0x2);
            }
            _0x18c93d = decodeURIComponent(_0x42a3cf);
            var _0x18048;
            for (_0x18048 = 0x0; _0x18048 < 0x100; _0x18048++) {
                _0x36bfd4[_0x18048] = _0x18048;
            }
            for (_0x18048 = 0x0; _0x18048 < 0x100; _0x18048++) {
                _0x9864e5 = (_0x9864e5 + _0x36bfd4[_0x18048] + _0x59c831['charCodeAt'](_0x18048 % _0x59c831['length'])) % 0x100;
                _0x524adb = _0x36bfd4[_0x18048];
                _0x36bfd4[_0x18048] = _0x36bfd4[_0x9864e5];
                _0x36bfd4[_0x9864e5] = _0x524adb;
            }
            _0x18048 = 0x0;
            _0x9864e5 = 0x0;
            for (var _0x566496 = 0x0; _0x566496 < _0x18c93d['length']; _0x566496++) {
                _0x18048 = (_0x18048 + 0x1) % 0x100;
                _0x9864e5 = (_0x9864e5 + _0x36bfd4[_0x18048]) % 0x100;
                _0x524adb = _0x36bfd4[_0x18048];
                _0x36bfd4[_0x18048] = _0x36bfd4[_0x9864e5];
                _0x36bfd4[_0x9864e5] = _0x524adb;
                _0x231af9 += String['fromCharCode'](_0x18c93d['charCodeAt'](_0x566496) ^ _0x36bfd4[(_0x36bfd4[_0x18048] + _0x36bfd4[_0x9864e5]) % 0x100]);
            }
            return _0x231af9;
        };
        _0x1537['DNHefa'] = _0x21d4a6;
        _0x1537['ifsFfp'] = {};
        _0x1537['kJbrqT'] = !![];
    }
    var _0x2b1dd0 = _0x1537['ifsFfp'][_0x3fb4ef];
    if (_0x2b1dd0 === undefined) {
        if (_0x1537['EKuISr'] === undefined) {
            _0x1537['EKuISr'] = !![];
        }
        _0x1537fe = _0x1537['DNHefa'](_0x1537fe, _0xf9026b);
        _0x1537['ifsFfp'][_0x3fb4ef] = _0x1537fe;
    } else {
        _0x1537fe = _0x2b1dd0;
    }
    return _0x1537fe;
};
function hash(_0x574e78) {
    var _0x11c849 = {};
    _0x11c849[_0x1537('0xbd', 'TjXZ') + 'e'] = function(_0x4775ed, _0x4a0150) {
        return _0x4775ed + _0x4a0150;
    }
    ;
    _0x11c849[_0x1537('0x3f', 'hv$f') + 'Y'] = function(_0x108e9b, _0xf85025) {
        return _0x108e9b >> _0xf85025;
    }
    ;
    _0x11c849[_0x1537('0xb4', 'K1H0') + 'N'] = function(_0x2e2ff0, _0x2cc0eb) {
        return _0x2e2ff0 >> _0x2cc0eb;
    }
    ;
    _0x11c849[_0x1537('0xb8', 'ZBbr') + 't'] = function(_0x233e8b, _0x4c60d5) {
        return _0x233e8b >> _0x4c60d5;
    }
    ;
    _0x11c849[_0x1537('0x43', 'hB1m') + 'X'] = function(_0x4b032c, _0x47c1df) {
        return _0x4b032c != _0x47c1df;
    }
    ;
    _0x11c849[_0x1537('0x48', 'nk!r') + 'w'] = function(_0x3bfec6, _0x5c43b1) {
        return _0x3bfec6 !== _0x5c43b1;
    }
    ;
    _0x11c849[_0x1537('0x62', 'KETy') + 'x'] = _0x1537('0x4c', 'GIbx') + 'Z';
    _0x11c849[_0x1537('0xb2', 'K1H0') + 'M'] = function(_0x4b3792, _0x343f47) {
        return _0x4b3792 << _0x343f47;
    }
    ;
    _0x11c849[_0x1537('0x40', 'TjXZ') + 'K'] = function(_0x291516, _0x42be75) {
        return _0x291516 - _0x42be75;
    }
    ;
    _0x11c849[_0x1537('0xfb', 'e#%$') + 'O'] = function(_0x2f8db2, _0x30df1e) {
        return _0x2f8db2 ^ _0x30df1e;
    }
    ;
    _0x11c849[_0x1537('0x5c', 'GIbx') + 'g'] = function(_0x4adac6, _0x27771) {
        return _0x4adac6 & _0x27771;
    }
    ;
    _0x11c849[_0x1537('0xf3', 'KETy') + 'U'] = function(_0x508288, _0x57af0f, _0x3fc507) {
        return _0x508288(_0x57af0f, _0x3fc507);
    }
    ;
    _0x11c849[_0x1537('0x38', 'Tu!4') + 'm'] = function(_0xf6d4cc, _0x577546) {
        return _0xf6d4cc ^ _0x577546;
    }
    ;
    _0x11c849[_0x1537('0x8b', 'zPE#') + 'J'] = function(_0x8bd544, _0x5e8683) {
        return _0x8bd544 ^ _0x5e8683;
    }
    ;
    _0x11c849[_0x1537('0x66', 'x*54') + 'T'] = function(_0x5b9076, _0x2ef3a5, _0x4992ab) {
        return _0x5b9076(_0x2ef3a5, _0x4992ab);
    }
    ;
    _0x11c849[_0x1537('0xd8', 'x*54') + 'C'] = function(_0x373410, _0x17a42d, _0x4e8c2d) {
        return _0x373410(_0x17a42d, _0x4e8c2d);
    }
    ;
    _0x11c849[_0x1537('0xc8', 'sRUB') + 'S'] = function(_0x445ba1, _0x53a489) {
        return _0x445ba1 ^ _0x53a489;
    }
    ;
    _0x11c849[_0x1537('0x88', 'e#%$') + 'k'] = function(_0x35769c, _0x3f4d94) {
        return _0x35769c ^ _0x3f4d94;
    }
    ;
    _0x11c849[_0x1537('0xdb', 'dHwR') + 'd'] = function(_0x374b83, _0x4fe08a, _0x4e283d) {
        return _0x374b83(_0x4fe08a, _0x4e283d);
    }
    ;
    _0x11c849[_0x1537('0x27', 'QJiy') + 'J'] = function(_0x24e669, _0x4c1393) {
        return _0x24e669 >> _0x4c1393;
    }
    ;
    _0x11c849[_0x1537('0x1b', 'CHri') + 'Q'] = function(_0x1a0e5e, _0x3134d1) {
        return _0x1a0e5e << _0x3134d1;
    }
    ;
    _0x11c849[_0x1537('0x77', '*Mbc') + 'g'] = function(_0x55a3b2, _0x36f96f) {
        return _0x55a3b2 % _0x36f96f;
    }
    ;
    _0x11c849[_0x1537('0x15', 'hB1m') + 'B'] = function(_0x5eecef, _0x3f93ab) {
        return _0x5eecef << _0x3f93ab;
    }
    ;
    _0x11c849[_0x1537('0xa8', 'dHwR') + 'T'] = function(_0x25a31b, _0x330d4e) {
        return _0x25a31b < _0x330d4e;
    }
    ;
    _0x11c849[_0x1537('0x75', 'tB!t') + 'f'] = function(_0x4b44c3, _0x4db2b2) {
        return _0x4b44c3 < _0x4db2b2;
    }
    ;
    _0x11c849[_0x1537('0x81', 'zS1D') + 'S'] = function(_0x396203, _0x536ee2, _0x580b45) {
        return _0x396203(_0x536ee2, _0x580b45);
    }
    ;
    _0x11c849[_0x1537('0xd6', 'x*54') + 'P'] = function(_0x40449f, _0x2660e9) {
        return _0x40449f(_0x2660e9);
    }
    ;
    _0x11c849[_0x1537('0xca', 'An]]') + 'j'] = function(_0x16670b, _0x35403b) {
        return _0x16670b(_0x35403b);
    }
    ;
    _0x11c849[_0x1537('0x29', 'tB!t') + 'A'] = function(_0x1bbd3d, _0x903dba) {
        return _0x1bbd3d - _0x903dba;
    }
    ;
    _0x11c849[_0x1537('0x3', '8&w]') + 'Y'] = function(_0x35cdf4, _0x56429e, _0x4e1ab4) {
        return _0x35cdf4(_0x56429e, _0x4e1ab4);
    }
    ;
    _0x11c849[_0x1537('0x56', '3)9R') + 'S'] = function(_0x1b6f3a, _0x308d5e, _0x222335) {
        return _0x1b6f3a(_0x308d5e, _0x222335);
    }
    ;
    _0x11c849[_0x1537('0x2e', '*Mbc') + 'i'] = function(_0x992a1e, _0x2964de) {
        return _0x992a1e(_0x2964de);
    }
    ;
    _0x11c849[_0x1537('0x4b', 'sRUB') + 's'] = function(_0x11a989, _0x2e518a, _0x985c5e, _0x41c449) {
        return _0x11a989(_0x2e518a, _0x985c5e, _0x41c449);
    }
    ;
    _0x11c849[_0x1537('0x5', 'ZBbr') + 'Z'] = function(_0x553b39, _0xa5852b, _0x2e9841) {
        return _0x553b39(_0xa5852b, _0x2e9841);
    }
    ;
    _0x11c849[_0x1537('0x58', 'zPE#') + 'y'] = function(_0x465286, _0x2f90f0, _0x396976) {
        return _0x465286(_0x2f90f0, _0x396976);
    }
    ;
    _0x11c849[_0x1537('0x92', 'gk0P') + 'Q'] = function(_0x1955b9, _0x1a97e9) {
        return _0x1955b9 - _0x1a97e9;
    }
    ;
    _0x11c849[_0x1537('0x25', 'DMmD') + 'Y'] = function(_0x32e9e3, _0xf86a78) {
        return _0x32e9e3 < _0xf86a78;
    }
    ;
    _0x11c849[_0x1537('0x83', 'hv$f') + 'Z'] = function(_0xdad671, _0x33333e) {
        return _0xdad671 >> _0x33333e;
    }
    ;
    _0x11c849[_0x1537('0x60', 'lAc6') + 'A'] = function(_0x3101a6, _0x564698) {
        return _0x3101a6 << _0x564698;
    }
    ;
    _0x11c849[_0x1537('0x71', 'GIbx') + 'I'] = _0x1537('0xde', 'gk0P') + _0x1537('0xbf', 'hv$f') + '2';
    _0x11c849[_0x1537('0x97', 'dHwR') + 'r'] = function(_0x4293d7, _0x52a0fe) {
        return _0x4293d7 | _0x52a0fe;
    }
    ;
    _0x11c849[_0x1537('0x67', 'nk!r') + 'l'] = function(_0x25254e, _0xf74d2b) {
        return _0x25254e & _0xf74d2b;
    }
    ;
    _0x11c849[_0x1537('0x1e', '%FO*') + 's'] = function(_0x3b891c, _0x2c94ea) {
        return _0x3b891c | _0x2c94ea;
    }
    ;
    _0x11c849[_0x1537('0x33', 'tB!t') + 'J'] = _0x1537('0x9', 'tB!t') + _0x1537('0x64', 'x*54') + _0x1537('0x2d', 'a396') + _0x1537('0x5a', 'hv$f');
    _0x11c849[_0x1537('0xf8', '%FO*') + 'F'] = function(_0x517a71, _0x33b6e0) {
        return _0x517a71 * _0x33b6e0;
    }
    ;
    _0x11c849[_0x1537('0x55', 'Tu!4') + 'F'] = function(_0x16ddbc, _0x2b4c9b) {
        return _0x16ddbc & _0x2b4c9b;
    }
    ;
    _0x11c849[_0x1537('0xac', 'TW)m') + 'L'] = function(_0x2145a1, _0x35b9a0) {
        return _0x2145a1 & _0x35b9a0;
    }
    ;
    _0x11c849[_0x1537('0xd5', 'T)st') + 'F'] = function(_0x280bc0, _0x36ad42) {
        return _0x280bc0 * _0x36ad42;
    }
    ;
    _0x11c849[_0x1537('0x61', 'G85V') + 'v'] = function(_0x2ff1c6, _0x2896e6) {
        return _0x2ff1c6 % _0x2896e6;
    }
    ;
    _0x11c849[_0x1537('0xf9', 'lAc6') + 'y'] = function(_0x37c7f7, _0x11bf38, _0x515344) {
        return _0x37c7f7(_0x11bf38, _0x515344);
    }
    ;
    var _0x262703 = _0x11c849;
    var _0x184963 = 0x8;
    var _0x3dc423 = 0x0;
    function _0x54b4eb(_0xdae291, _0x5431de) {
        var _0x23925b = _0x262703[_0x1537('0xbd', 'TjXZ') + 'e'](_0xdae291 & 0xffff, _0x5431de & 0xffff);
        var _0x24d798 = _0x262703[_0x1537('0x69', 'hB1m') + 'e'](_0x262703[_0x1537('0x1a', 'iLwM') + 'Y'](_0xdae291, 0x10) + _0x262703[_0x1537('0x8d', 'TjXZ') + 'N'](_0x5431de, 0x10), _0x262703[_0x1537('0x50', 'An]]') + 't'](_0x23925b, 0x10));
        return _0x24d798 << 0x10 | _0x23925b & 0xffff;
    }
    function _0x2b2971(_0x55340a, _0x463ea5) {
        if (_0x262703[_0x1537('0x94', 'pMeT') + 'w'](_0x1537('0xea', 'hB1m') + 'J', _0x262703[_0x1537('0xab', 'dHwR') + 'x'])) {
            return _0x55340a >>> _0x463ea5 | _0x262703[_0x1537('0xeb', 'TC3n') + 'M'](_0x55340a, _0x262703[_0x1537('0xdf', 'hqFc') + 'K'](0x20, _0x463ea5));
        } else {
            if (_0x262703[_0x1537('0xa7', 'GIbx') + 'X'](ua[_0x1537('0x16', 'hqFc') + _0x1537('0xce', 'CHri')](uas[i]), -0x1)) {
                return !![];
            }
        }
    }
    function _0x295850(_0x30e862, _0x4b057f) {
        return _0x30e862 >>> _0x4b057f;
    }
    function _0x1b6688(_0x21c8ff, _0x2acc3b, _0x55d8ea) {
        return _0x262703[_0x1537('0x51', '*x0Q') + 'O'](_0x21c8ff & _0x2acc3b, _0x262703[_0x1537('0x7a', 'hv$f') + 'g'](~_0x21c8ff, _0x55d8ea));
    }
    function _0x1d8892(_0x3d0f05, _0x3be748, _0x56027e) {
        return _0x262703[_0x1537('0xb7', 'iLwM') + 'O'](_0x262703[_0x1537('0x70', 'tB!t') + 'g'](_0x3d0f05, _0x3be748), _0x3d0f05 & _0x56027e) ^ _0x3be748 & _0x56027e;
    }
    function _0x4f0eb7(_0x3ca0b4) {
        return _0x262703[_0x1537('0x93', '!W!f') + 'U'](_0x2b2971, _0x3ca0b4, 0x2) ^ _0x262703[_0x1537('0x4e', 'V6Vb') + 'U'](_0x2b2971, _0x3ca0b4, 0xd) ^ _0x2b2971(_0x3ca0b4, 0x16);
    }
    function _0x199902(_0x405c9b) {
        return _0x262703[_0x1537('0x3a', '%FO*') + 'm'](_0x262703[_0x1537('0x6d', 'ev)t') + 'J'](_0x2b2971(_0x405c9b, 0x6), _0x262703[_0x1537('0x99', 'sRUB') + 'T'](_0x2b2971, _0x405c9b, 0xb)), _0x262703[_0x1537('0xa4', '*Mbc') + 'C'](_0x2b2971, _0x405c9b, 0x19));
    }
    function _0x59e08a(_0x480808) {
        return _0x262703[_0x1537('0x5b', 'V6Vb') + 'S'](_0x2b2971(_0x480808, 0x7), _0x262703[_0x1537('0x72', 'gk0P') + 'C'](_0x2b2971, _0x480808, 0x12)) ^ _0x295850(_0x480808, 0x3);
    }
    function _0xd74b80(_0x13f234) {
        return _0x262703[_0x1537('0xb5', 'hB1m') + 'k'](_0x262703[_0x1537('0x5d', '#x1v') + 'k'](_0x2b2971(_0x13f234, 0x11), _0x262703[_0x1537('0x6c', 'TjXZ') + 'd'](_0x2b2971, _0x13f234, 0x13)), _0x295850(_0x13f234, 0xa));
    }
    function _0x1a9173(_0xd0bb20, _0x2efd5e) {
        var _0x43b558 = new Array(0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,0xe49b69c1,0xefbe4786,0xfc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x6ca6351,0x14292967,0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2);
        var _0x42ebfb = new Array(0x6a09e667,0xbb67ae85,0x3c6ef372,0xa54ff53a,0x510e527f,0x9b05688c,0x1f83d9ab,0x5be0cd19);
        var _0x2a1aca = new Array(0x40);
        var _0x5a8cbd, _0x188d85, _0x3640a6, _0x68c72d, _0x5998a2, _0x1ce66d, _0x567e4e, _0x2b2d27, _0x5b40e4, _0x487fdf;
        var _0x5f33f3, _0x18b631;
        _0xd0bb20[_0x262703[_0x1537('0x78', 'tB!t') + 'J'](_0x2efd5e, 0x5)] |= _0x262703[_0x1537('0xd7', 'V6Vb') + 'Q'](0x80, _0x262703[_0x1537('0x74', 'DMmD') + 'K'](0x18, _0x262703[_0x1537('0x57', 'dHwR') + 'g'](_0x2efd5e, 0x20)));
        _0xd0bb20[_0x262703[_0x1537('0xe5', 'CHri') + 'B'](_0x2efd5e + 0x40 >> 0x9, 0x4) + 0xf] = _0x2efd5e;
        for (var _0x5b40e4 = 0x0; _0x262703[_0x1537('0xe1', 'DMmD') + 'T'](_0x5b40e4, _0xd0bb20[_0x1537('0x17', 'TC3n') + 'th']); _0x5b40e4 += 0x10) {
            _0x5a8cbd = _0x42ebfb[0x0];
            _0x188d85 = _0x42ebfb[0x1];
            _0x3640a6 = _0x42ebfb[0x2];
            _0x68c72d = _0x42ebfb[0x3];
            _0x5998a2 = _0x42ebfb[0x4];
            _0x1ce66d = _0x42ebfb[0x5];
            _0x567e4e = _0x42ebfb[0x6];
            _0x2b2d27 = _0x42ebfb[0x7];
            for (var _0x487fdf = 0x0; _0x262703[_0x1537('0xb6', '#x1v') + 'T'](_0x487fdf, 0x40); _0x487fdf++) {
                if (_0x262703[_0x1537('0x46', 'x*54') + 'f'](_0x487fdf, 0x10))
                    _0x2a1aca[_0x487fdf] = _0xd0bb20[_0x487fdf + _0x5b40e4];
                else
                    _0x2a1aca[_0x487fdf] = _0x262703[_0x1537('0xc', 'SC5%') + 'S'](_0x54b4eb, _0x262703[_0x1537('0x9b', 'G85V') + 'S'](_0x54b4eb, _0x54b4eb(_0x262703[_0x1537('0x3b', '!W!f') + 'P'](_0xd74b80, _0x2a1aca[_0x487fdf - 0x2]), _0x2a1aca[_0x487fdf - 0x7]), _0x262703[_0x1537('0xb0', 'K1H0') + 'j'](_0x59e08a, _0x2a1aca[_0x487fdf - 0xf])), _0x2a1aca[_0x262703[_0x1537('0x84', 'nk!r') + 'A'](_0x487fdf, 0x10)]);
                _0x5f33f3 = _0x262703[_0x1537('0xb', 'TC3n') + 'Y'](_0x54b4eb, _0x262703[_0x1537('0x7f', 'tB!t') + 'S'](_0x54b4eb, _0x262703[_0x1537('0xe6', 'dHwR') + 'S'](_0x54b4eb, _0x262703[_0x1537('0xf1', '*x0Q') + 'S'](_0x54b4eb, _0x2b2d27, _0x262703[_0x1537('0x87', 'QJiy') + 'j'](_0x199902, _0x5998a2)), _0x1b6688(_0x5998a2, _0x1ce66d, _0x567e4e)), _0x43b558[_0x487fdf]), _0x2a1aca[_0x487fdf]);
                _0x18b631 = _0x262703[_0x1537('0xe2', 'SC5%') + 'S'](_0x54b4eb, _0x262703[_0x1537('0xef', 'zS1D') + 'i'](_0x4f0eb7, _0x5a8cbd), _0x262703[_0x1537('0x39', 'T)st') + 's'](_0x1d8892, _0x5a8cbd, _0x188d85, _0x3640a6));
                _0x2b2d27 = _0x567e4e;
                _0x567e4e = _0x1ce66d;
                _0x1ce66d = _0x5998a2;
                _0x5998a2 = _0x262703[_0x1537('0x80', 'EvGh') + 'S'](_0x54b4eb, _0x68c72d, _0x5f33f3);
                _0x68c72d = _0x3640a6;
                _0x3640a6 = _0x188d85;
                _0x188d85 = _0x5a8cbd;
                _0x5a8cbd = _0x54b4eb(_0x5f33f3, _0x18b631);
            }
            _0x42ebfb[0x0] = _0x262703[_0x1537('0x1c', 'TW)m') + 'Z'](_0x54b4eb, _0x5a8cbd, _0x42ebfb[0x0]);
            _0x42ebfb[0x1] = _0x262703[_0x1537('0xd2', '8&w]') + 'y'](_0x54b4eb, _0x188d85, _0x42ebfb[0x1]);
            _0x42ebfb[0x2] = _0x54b4eb(_0x3640a6, _0x42ebfb[0x2]);
            _0x42ebfb[0x3] = _0x262703[_0x1537('0x45', 'EvGh') + 'y'](_0x54b4eb, _0x68c72d, _0x42ebfb[0x3]);
            _0x42ebfb[0x4] = _0x54b4eb(_0x5998a2, _0x42ebfb[0x4]);
            _0x42ebfb[0x5] = _0x54b4eb(_0x1ce66d, _0x42ebfb[0x5]);
            _0x42ebfb[0x6] = _0x54b4eb(_0x567e4e, _0x42ebfb[0x6]);
            _0x42ebfb[0x7] = _0x54b4eb(_0x2b2d27, _0x42ebfb[0x7]);
        }
        return _0x42ebfb;
    }
    function _0x4cddbb(_0x1fade7) {
        var _0x21230f = Array();
        var _0x34c7f7 = _0x262703[_0x1537('0xdc', 'KETy') + 'Q'](0x1 << _0x184963, 0x1);
        for (var _0x3f1b38 = 0x0; _0x262703[_0x1537('0x5f', 'ZBbr') + 'Y'](_0x3f1b38, _0x1fade7[_0x1537('0xd9', '3)9R') + 'th'] * _0x184963); _0x3f1b38 += _0x184963) {
            _0x21230f[_0x262703[_0x1537('0x65', 'DMmD') + 'Z'](_0x3f1b38, 0x5)] |= _0x262703[_0x1537('0x2f', 'aRWw') + 'A'](_0x262703[_0x1537('0x26', 'a396') + 'g'](_0x1fade7[_0x1537('0x18', 'gk0P') + _0x1537('0xec', 'iLwM') + 'At'](_0x3f1b38 / _0x184963), _0x34c7f7), 0x18 - _0x262703[_0x1537('0x5e', 'Tu!4') + 'g'](_0x3f1b38, 0x20));
        }
        return _0x21230f;
    }
    function _0x19bb53(_0x5c64b3) {
        var _0x46ee97 = _0x262703[_0x1537('0xc5', 'var$') + 'I'][_0x1537('0xc9', 'iLwM') + 't']('|');
        var _0x2b9e2d = 0x0;
        while (!![]) {
            switch (_0x46ee97[_0x2b9e2d++]) {
            case '0':
                _0x5c64b3 = _0x5c64b3[_0x1537('0x10', 'var$') + _0x1537('0xa2', 'hv$f')](_0x3a9456, '\x0a');
                continue;
            case '1':
                for (var _0x3d5208 = 0x0; _0x262703[_0x1537('0x1d', 'TjXZ') + 'Y'](_0x3d5208, _0x5c64b3[_0x1537('0x90', '*Mbc') + 'th']); _0x3d5208++) {
                    var _0x2038e6 = _0x5c64b3[_0x1537('0x9c', 'GIbx') + _0x1537('0x76', '3)9R') + 'At'](_0x3d5208);
                    if (_0x262703[_0x1537('0x8e', 'JIQN') + 'Y'](_0x2038e6, 0x80)) {
                        _0x24ae6b += String[_0x1537('0xa9', 'G85V') + _0x1537('0x8c', '8&w]') + _0x1537('0xae', 'CHri')](_0x2038e6);
                    } else if (_0x2038e6 > 0x7f && _0x2038e6 < 0x800) {
                        _0x24ae6b += String[_0x1537('0xcc', 'pMeT') + _0x1537('0xa1', 'DMmD') + _0x1537('0x34', 'KJ&E')](_0x2038e6 >> 0x6 | 0xc0);
                        _0x24ae6b += String[_0x1537('0xe', 'KJ&E') + _0x1537('0x6', 'V6Vb') + _0x1537('0xc4', 'x*54')](_0x262703[_0x1537('0x3c', 'EvGh') + 'r'](_0x262703[_0x1537('0xfc', 'ZBbr') + 'l'](_0x2038e6, 0x3f), 0x80));
                    } else {
                        _0x24ae6b += String[_0x1537('0xa9', 'G85V') + _0x1537('0x49', '3)9R') + _0x1537('0xd', 'tB!t')](_0x262703[_0x1537('0xc3', 'pMeT') + 'Z'](_0x2038e6, 0xc) | 0xe0);
                        _0x24ae6b += String[_0x1537('0x79', 'zPE#') + _0x1537('0x49', '3)9R') + _0x1537('0xc2', 'hv$f')](_0x262703[_0x1537('0xa6', 'ev)t') + 'r'](_0x2038e6 >> 0x6 & 0x3f, 0x80));
                        _0x24ae6b += String[_0x1537('0x9e', 'KETy') + _0x1537('0xcb', 'r@xB') + _0x1537('0xbe', 'dHwR')](_0x262703[_0x1537('0xe8', 'GIbx') + 's'](_0x262703[_0x1537('0x6e', 'An]]') + 'l'](_0x2038e6, 0x3f), 0x80));
                    }
                }
                continue;
            case '2':
                return _0x24ae6b;
            case '3':
                var _0x3a9456 = new RegExp('\x0a','g');
                continue;
            case '4':
                var _0x24ae6b = '';
                continue;
            }
            break;
        }
    }
    function _0xcdc3bf(_0x688fb8) {
        var _0x382c15 = _0x3dc423 ? _0x262703[_0x1537('0x30', 'y)Z8') + 'J'] : _0x1537('0x13', 'K1H0') + _0x1537('0xf6', 'QJiy') + _0x1537('0x4d', 'nk!r') + _0x1537('0x22', '#x1v');
        var _0x523012 = '';
        for (var _0x3e5185 = 0x0; _0x3e5185 < _0x262703[_0x1537('0x6f', '!W!f') + 'F'](_0x688fb8[_0x1537('0x36', 'KETy') + 'th'], 0x4); _0x3e5185++) {
            _0x523012 += _0x382c15[_0x1537('0x19', 'zPE#') + 'At'](_0x262703[_0x1537('0x82', 'K1H0') + 'F'](_0x688fb8[_0x3e5185 >> 0x2] >> _0x262703[_0x1537('0x31', 'hv$f') + 'Q'](0x3, _0x262703[_0x1537('0xf5', '#x1v') + 'g'](_0x3e5185, 0x4)) * 0x8 + 0x4, 0xf)) + _0x382c15[_0x1537('0xe0', 'An]]') + 'At'](_0x262703[_0x1537('0x8f', '$6sh') + 'L'](_0x688fb8[_0x262703[_0x1537('0xf2', 'y)Z8') + 'Z'](_0x3e5185, 0x2)] >> _0x262703[_0x1537('0xd4', 'K1H0') + 'F'](_0x262703[_0x1537('0xc7', 'sRUB') + 'Q'](0x3, _0x262703[_0x1537('0x73', 'hv$f') + 'v'](_0x3e5185, 0x4)), 0x8), 0xf));
        }
        return _0x523012;
    }
    _0x574e78 = _0x19bb53(_0x574e78);
    return _0xcdc3bf(_0x262703[_0x1537('0x86', 'iLwM') + 'y'](_0x1a9173, _0x262703[_0x1537('0xb9', 'cmF2') + 'i'](_0x4cddbb, _0x574e78), _0x574e78[_0x1537('0x0', 'CHri') + 'th'] * _0x184963));
}
;function go(_0x5dac26) {
    var _0x1023f7 = {};
    _0x1023f7[_0x1537('0x23', 'x*54') + 'g'] = _0x1537('0xcd', 'aRWw') + _0x1537('0xaa', 'sRUB');
    _0x1023f7[_0x1537('0xb3', 'x*54') + 'C'] = function(_0x3cb0be, _0x58eb7a) {
        return _0x3cb0be < _0x58eb7a;
    }
    ;
    _0x1023f7[_0x1537('0x91', 'sRUB') + 'u'] = function(_0x5e981e, _0x4f3797) {
        return _0x5e981e != _0x4f3797;
    }
    ;
    _0x1023f7[_0x1537('0xa0', 'ev)t') + 'Q'] = function(_0x5cfcfd, _0xd234b2) {
        return _0x5cfcfd + _0xd234b2;
    }
    ;
    _0x1023f7[_0x1537('0xaf', 'nk!r') + 'O'] = function(_0x4c79db, _0x13e8eb) {
        return _0x4c79db == _0x13e8eb;
    }
    ;
    _0x1023f7[_0x1537('0x63', 'ZBbr') + 'z'] = function(_0x535fe2, _0x376b65) {
        return _0x535fe2 + _0x376b65;
    }
    ;
    _0x1023f7[_0x1537('0xf', 'sRUB') + 'c'] = _0x1537('0xed', 'K1H0') + _0x1537('0xdd', '*Mbc') + '\x20/';
    _0x1023f7[_0x1537('0xa', 'lAc6') + 'y'] = _0x1537('0x44', 'dHwR') + _0x1537('0xc1', 'sRUB') + _0x1537('0x95', 'sRUB') + _0x1537('0x2a', 'QJiy') + _0x1537('0xc6', 'gk0P') + _0x1537('0x20', 'zS1D');
    _0x1023f7[_0x1537('0x7d', 'tB!t') + 'O'] = function(_0x1a1b96) {
        return _0x1a1b96();
    }
    ;
    _0x1023f7[_0x1537('0xda', 'dHwR') + 'A'] = function(_0x2c50bf, _0x3b0772) {
        return _0x2c50bf - _0x3b0772;
    }
    ;
    _0x1023f7[_0x1537('0x37', 'An]]') + 'O'] = function(_0x1f878e, _0x328ace) {
        return _0x1f878e(_0x328ace);
    }
    ;
    _0x1023f7[_0x1537('0x7c', 'e#%$') + 'z'] = _0x1537('0xd0', 'iLwM') + '失败';
    var _0x1af8f6 = _0x1023f7;
    function _0x487865() {
        var _0x2fdc19 = window[_0x1537('0xee', 'KJ&E') + _0x1537('0x2b', 'y)Z8') + 'r'][_0x1537('0xba', 'nk!r') + _0x1537('0xa5', 'KJ&E') + 't']
          , _0x50139c = [_0x1af8f6[_0x1537('0xf7', 'An]]') + 'g']];
        for (var _0x39852a = 0x0; _0x1af8f6[_0x1537('0x2c', 'ZBbr') + 'C'](_0x39852a, _0x50139c[_0x1537('0x2', 'K1H0') + 'th']); _0x39852a++) {
            if (_0x1af8f6[_0x1537('0x54', 'G85V') + 'u'](_0x2fdc19[_0x1537('0xe7', 'ev)t') + _0x1537('0x59', 'GIbx')](_0x50139c[_0x39852a]), -0x1)) {
                return !![];
            }
        }
        if (window[_0x1537('0x9f', 'y)Z8') + _0x1537('0xfa', '$6sh') + _0x1537('0x7b', 'var$')] || window[_0x1537('0x14', '3)9R') + _0x1537('0x47', 'ZBbr')] || window[_0x1537('0x52', 'Tu!4') + _0x1537('0xe4', 'tB!t')] || window[_0x1537('0x53', '*x0Q') + _0x1537('0x42', 'var$') + 'r'][_0x1537('0x96', 'a396') + _0x1537('0xf4', 'G85V') + 'r'] || window[_0x1537('0xe9', 'JIQN') + _0x1537('0xd1', 'hB1m') + 'r'][_0x1537('0x11', '*Mbc') + _0x1537('0xad', 'nk!r') + _0x1537('0x6b', 'DMmD') + _0x1537('0x98', 'hv$f') + 'e'] || window[_0x1537('0x35', 'DMmD') + _0x1537('0x9a', 'zS1D') + 'r'][_0x1537('0x21', '$6sh') + _0x1537('0xbb', 'RAL3') + _0x1537('0x32', 'pMeT') + _0x1537('0x1', 'An]]') + _0x1537('0x3e', '!W!f')]) {
            return !![];
        }
    }
    ;if (_0x1af8f6[_0x1537('0x89', 'K1H0') + 'O'](_0x487865)) {
        return;
    }
    var _0x136714 = new Date();
    function _0x1c4547(_0x54b2f9, _0x493712) {
        var _0x5e6b82 = _0x5dac26[_0x1537('0xcf', '!W!f') + 's'][_0x1537('0x17', 'TC3n') + 'th'];
        for (var _0x4b11cd = 0x0; _0x1af8f6[_0x1537('0x8', 'QJiy') + 'C'](_0x4b11cd, _0x5e6b82); _0x4b11cd++) {
            for (var _0x1c5043 = 0x0; _0x1af8f6[_0x1537('0x4a', 'EvGh') + 'C'](_0x1c5043, _0x5e6b82); _0x1c5043++) {
                var _0x4ec4bc = _0x1af8f6[_0x1537('0x6a', 'sRUB') + 'Q'](_0x493712[0x0], _0x5dac26[_0x1537('0xe3', 'pMeT') + 's'][_0x1537('0xa3', 'K1H0') + 'tr'](_0x4b11cd, 0x1)) + _0x5dac26[_0x1537('0x3d', 'cmF2') + 's'][_0x1537('0x4', 'lAc6') + 'tr'](_0x1c5043, 0x1) + _0x493712[0x1];
                if (_0x1af8f6[_0x1537('0xc0', 'hB1m') + 'O'](hash(_0x4ec4bc), _0x54b2f9)) {
                    return [_0x4ec4bc, new Date() - _0x136714];
                }
            }
        }
    }
    ;var _0x2e6018 = _0x1c4547(_0x5dac26['ct'], _0x5dac26[_0x1537('0xd3', 'ev)t')]);
    if (_0x2e6018) {
        var _0x195ad3;
        if (_0x5dac26['wt']) {
            _0x195ad3 = parseInt(_0x5dac26['wt']) > _0x2e6018[0x1] ? _0x1af8f6[_0x1537('0xf0', 'hB1m') + 'A'](_0x1af8f6[_0x1537('0x8a', 'KJ&E') + 'O'](parseInt, _0x5dac26['wt']), _0x2e6018[0x1]) : 0x1f4;
        } else {
            _0x195ad3 = 0x5dc;
        }
        setTimeout(function() {
            var _0x2bca1f = _0x1af8f6[_0x1537('0x41', 'TjXZ') + 'Q'](_0x1af8f6[_0x1537('0x1f', 'cmF2') + 'Q'](_0x1af8f6[_0x1537('0x63', 'ZBbr') + 'z'](_0x5dac26['tn'], '=') + _0x2e6018[0x0], _0x1537('0x28', 'gk0P') + _0x1537('0x12', 'iLwM') + '=') + _0x5dac26['vt'], _0x1af8f6[_0x1537('0x85', '$6sh') + 'c']);
            if (_0x5dac26['is']) {
                _0x2bca1f = _0x1af8f6[_0x1537('0x7', 'nk!r') + 'z'](_0x2bca1f, _0x1af8f6[_0x1537('0x24', 'dHwR') + 'y']);
            }
            document[_0x1537('0xb1', 'hv$f') + 'ie'] = _0x2bca1f;
            location[_0x1537('0x7e', '*Mbc')] = location[_0x1537('0x4f', 'pMeT') + _0x1537('0x68', 'nk!r')] + location[_0x1537('0xbc', 'gk0P') + 'ch'];
        }, _0x195ad3);
    } else {
        alert(_0x1af8f6[_0x1537('0x9d', '*x0Q') + 'z']);
    }
}
;go({
    "bts": ["1711700022.621|0|NUr", "E3hJvlRUgqe906aGJbyWqk%3D"],
    "chars": "jBzwQUeebcFCrrWhwPWGHJ",
    "ct": "d205888a99ff10896367a9d581c6b717e30e72e53acd89afc32d2e342ad5672f",
    "ha": "sha256",
    "is": true,
    "tn": "__jsl_clearance_s",
    "vt": "3600",
    "wt": "1500"
})

• 分析可以发现，cookie 参数在下方位置做了赋值， document[_0x1537('0xb1', 'hv$f') + 'ie'] = _0x2bca1f;， go方法中传入的参数是动态传入的。这里我们可以每次使用正则匹配获取需要传入的参数

• 图片(6).png

• 对混淆代码进行补环境和测试， 执行打印document['cookie']
  -

  图片(7).png

• 第三次请求分析：

  • 所需要的cookie 都已经获取完成， 携带cookie进行访问

  • 图片(8).png

  • 请求成功， 参数逆向完成