js解混淆日记(1)

目标站：未知

客户诉求：还原混淆后的代码

客户提供的混淆源代码

function_0x5d41(_0x14b74b,_0x559d72){var_0x230ef1=_0xfb20();return_0x5d41=function(_0x2ae8be,_0x350f8f){_0x2ae8be=_0x2ae8be-(-0x676+-0x2588*0x1+0x2d9d);var_0x3a4a09=_0x230ef1[_0x2ae8be];if(_0x5d41['VrXDKq']===undefined){var_0x142291=function(_0xd8a0d){var_0x4af83f='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var_0x5c603a='',_0x5776ae='';for(var_0x7044dd=0x2*-0x617+0x1*-0x20a1+0x2ccf,_0x5c6737,_0x4b5bbe,_0x2245d9=-0x1*0x2dd+-0x2597+-0x143a*-0x2;_0x4b5bbe=_0xd8a0d['charAt'](_0x2245d9++);~_0x4b5bbe(_0x5c6737=_0x7044dd%(0x1*-0x1d23+0x1*0x1535+-0x1*-0x7f2)?_0x5c6737*(0x1a25+-0x2283+-0x89e*-0x1)+_0x4b5bbe:_0x4b5bbe,_0x7044dd++%(0x1*-0x1045+0x3ea+-0x1*-0xc5f))?_0x5c603a+=String['fromCharCode'](-0x1*-0x513+-0x500+0xec_0x5c6737(-(0x21dc+-0x12b7*-0x1+0x1*-0x3491)*_0x7044dd0x16d9+-0x16c+0x1567*-0x1)):-0x10e*-0x2+0x12c+-0xf*0x38){_0x4b5bbe=_0x4af83f['indexOf'](_0x4b5bbe)}for(var_0x4e5c8d=-0x182e+-0x4*-0x137+-0x1*-0x1352,_0x31d61c=_0x5c603a['length'];_0x4e5c8d_0x31d61c;_0x4e5c8d++){_0x5776ae+='%'+('00'+_0x5c603a['charCodeAt'](_0x4e5c8d)['toString'](0x120b+-0x1a2+-0x9*0x1d1))['slice'](-(0x3db+0xd7*-0x26+-0x1df*-0xf))}returndecodeURIComponent(_0x5776ae)};var_0x3550dc=function(_0x161093,_0x337fa1){var_0x1f63bb=[],_0x1d6134=0x16ab*-0x1+0x1*0x34a+-0x1*-0x1361,_0x268e88,_0x22f2e6='';_0x161093=_0x142291(_0x161093);var_0x543bed;for(_0x543bed=0x1c7f+0xb0f*-0x2+-0x661*0x1;_0x543bed-0x864+-0x2665+0x2fc9;_0x543bed++){_0x1f63bb[_0x543bed]=_0x543bed}for(_0x543bed=-0x2d*-0x7d+0x36b+-0x1964;_0x543bed-0xa1*-0x36+0x802+-0x28f8;_0x543bed++){_0x1d6134=(_0x1d6134+_0x1f63bb[_0x543bed]+_0x337fa1['charCodeAt'](_0x543bed%_0x337fa1['length']))%(0x27*-0x55+-0x11*0x1f+0x1002),_0x268e88=_0x1f63bb[_0x543bed],_0x1f63bb[_0x543bed]=_0x1f63bb[_0x1d6134],_0x1f63bb[_0x1d6134]=_0x268e88}_0x543bed=0x1*-0x1a3e+-0x12e+0x1b6c,_0x1d6134=0xcf2+-0x3*0x67+-0x1*0xbbd;for(var_0x4b6f71=-0x263*-0x1+0x1d91+-0x1ff4;_0x4b6f71_0x161093['length'];_0x4b6f71++){_0x543bed=(_0x543bed+(-0x1*-0x24f5+0x23ae+0x409*-0x12))%(-0x24ae+-0x1*0x1d65+0x4313),_0x1d6134=(_0x1d6134+_0x1f63bb[_0x543bed])%(0x5*0x49c+-0x107a+-0x592),_0x268e88=_0x1f63bb[_0x543bed],_0x1f63bb[_0x543bed]=_0x1f63bb[_0x1d6134],_0x1f63bb[_0x1d6134]=_0x268e88,_0x22f2e6+=String['fromCharCode'](_0x161093['charCodeAt'](_0x4b6f71)^_0x1f63bb[(_0x1f63bb[_0x543bed]+_0x1f63bb[_0x1d6134])%(-0x4fb+-0x1020+0x161b*0x1)])}return_0x22f2e6};_0x5d41['CGaeFQ']=_0x3550dc,_0x14b74b=arguments,_0x5d41['VrXDKq']=!![]}var_0x4c2395=_0x230ef1[0x1ac8+-0x30a+0x1*-0x17be],_0x533dbf=_0x2ae8be+_0x4c2395,_0x430c62=_0x14b74b[_0x533dbf];return!_0x430c62?(_0x5d41['aFwFMf']===undefined(_0x5d41['aFwFMf']=!![]),_0x3a4a09=_0x5d41['CGaeFQ'](_0x3a4a09,_0x350f8f),_0x14b74b[_0x533dbf]=_0x3a4a09):_0x3a4a09=_0x430c62,_0x3a4a09},_0x5d41(_0x14b74b,_0x559d72)}var_0x3ef51d=_0x5d41,_0x4b776e=_0x596c,_0x21a8e6=_0x4ea5;function_0x596c(_0x527827,_0x14b178){var_0x116602=_0xfb20();return_0x596c=function(_0x49942f,_0x53b7e4){_0x49942f=_0x49942f-(-0x676+-0x2588*0x1+0x2d9d);var_0x50bbe8=_0x116602[_0x49942f];if(_0x596c['GwyeIJ']===undefined){var_0xa9780b=function(_0x2f623c){var_0x2df98e='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var_0x4a8230='',_0x33dc06='';for(var_0x4edfd3=0x2*-0x617+0x1*-0x20a1+0x2ccf,_0x1b50d6,_0x1d67d4,_0x2a80ae=-0x1*0x2dd+-0x2597+-0x143a*-0x2;_0x1d67d4=_0x2f623c['charAt'](_0x2a80ae++);~_0x1d67d4(_0x1b50d6=_0x4edfd3%(0x1*-0x1d23+0x1*0x1535+-0x1*-0x7f2)?_0x1b50d6*(0x1a25+-0x2283+-0x89e*-0x1)+_0x1d67d4:_0x1d67d4,_0x4edfd3++%(0x1*-0x1045+0x3ea+-0x1*-0xc5f))?_0x4a8230+=String['fromCharCode'](-0x1*-0x513+-0x500+0xec_0x1b50d6(-(0x21dc+-0x12b7*-0x1+0x1*-0x3491)*_0x4edfd30x16d9+-0x16c+0x1567*-0x1)):-0x10e*-0x2+0x12c+-0xf*0x38){_0x1d67d4=_0x2df98e['indexOf'](_0x1d67d4)}for(var_0x592393=-0x182e+-0x4*-0x137+-0x1*-0x1352,_0x397610=_0x4a8230['length'];_0x592393_0x397610;_0x592393++){_0x33dc06+='%'+('00'+_0x4a8230['charCodeAt'](_0x592393)['toString'](0x120b+-0x1a2+-0x9*0x1d1))['slice'](-(0x3db+0xd7*-0x26+-0x1df*-0xf))}returndecodeURIComponent(_0x33dc06)};_0x596c['kZOgHg']=_0xa9780b,_0x527827=arguments,_0x596c['GwyeIJ']=!![]}var_0x2572a3=_0x116602[0x16ab*-0x1+0x1*0x34a+-0x1*-0x1361],_0xd4295=_0x49942f+_0x2572a3,_0x1c5c3b=_0x527827[_0xd4295];return!_0x1c5c3b?(_0x50bbe8=_0x596c['kZOgHg'](_0x50bbe8),_0x527827[_0xd4295]=_0x50bbe8):_0x50bbe8=_0x1c5c3b,_0x50bbe8},_0x596c(_0x527827,_0x14b178)}function_0x4ea5(_0x20d2de,_0x7dcfbc){var_0x42a144=_0xfb20();return_0x4ea5=function(_0x3c0edf,_0x596c0f){_0x3c0edf=_0x3c0edf-(-0x676+-0x2588*0x1+0x2d9d);var_0x331773=_0x42a144[_0x3c0edf];return_0x331773},_0x4ea5(_0x20d2de,_0x7dcfbc)}(function(_0x161093,_0x337fa1){var_0x30e087=_0x4ea5,_0x3e7df4=_0x5d41,_0x628419=_0x596c,_0x1f63bb=_0x161093();while(!![]){try{var_0x1d6134=parseInt(_0x628419(0x1ce))/(0x1848+-0x169d+-0x1aa)+-parseInt(_0x3e7df4(0x1b9,'PO[l'))/(0x20f*-0x1+0x1577+-0x1366)*(-parseInt(_0x3e7df4(0x25d,'CLs'))/(0x1*-0x1a3e+-0x12e+0x1b6f))+-parseInt(_0x30e087(0x22f))/(0xcf2+-0x3*0x67+-0x1*0xbb9)+parseInt(_0x628419(0x1d9))/(-0x263*-0x1+0x1d91+-0x1fef)*(parseInt(_0x628419(0x220))/(-0x1*-0x24f5+0x23ae+0x281*-0x1d))+-parseInt(_0x3e7df4(0x1be,'sFpQ'))/(-0x24ae+-0x1*0x1d65+0x421a)*(parseInt(_0x628419(0x24e))/(0x5*0x49c+-0x107a+-0x68a))+-parseInt(_0x628419(0x20b))/(-0x4fb+-0x1020+0xf6*0x16)*(parseInt(_0x628419(0x1c7))/(0x1ac8+-0x30a+0x1*-0x17b4))+-parseInt(_0x628419(0x23f))/(-0x1619+0x1f13+0x1*-0x8ef)*(-parseInt(_0x3e7df4(0x1f1,'TRjN'))/(-0x260b*0x1+-0x174f*-0x1+0x764*0x2));if(_0x1d6134===_0x337fa1)break;else_0x1f63bb['push'](_0x1f63bb['shift']())}catch(_0x268e88){_0x1f63bb['push'](_0x1f63bb['shift']())}}}(_0xfb20,0x1ffa*0x7c+-0xfd678+0x1*0x9a1e1),window[_0x21a8e6(0x21b)]={'config_id':0x4,'project_id':0x1,'vor_id':0x4,'device':_0x4b776e(0x224),'whiteList_type':_0x21a8e6(0x1de)+'l','promotion':null,'licenses':[],'rer_method':0x1,'exception_handling':null,'LOTTERY_MODE':'wg','AN_ID':_0x4b776e(0x1a7)+_0x4b776e(0x221)+_0x4b776e(0x27f),'VENDERID':'vd004','DEPLOY_ENV':_0x4b776e(0x21d),'SSCORE_SWTICH':'true','DataAnalysisC':'2','AN_IDS':_0x4b776e(0x238)+_0x3ef51d(0x217,'Frln')+'\'+_0x3ef51d(0x280,'8T]z')+_0x4b776e(0x234)+_0x4b776e(0x27c)+''+_0x3ef51d(0x236,'u6nj')+''+_0x4b776e(0x1ae)+_0x3ef51d(0x264,'TRjN')+_0x4b776e(0x1f3)+_0x4b776e(0x200)+_0x21a8e6(0x248),'referral':_0x21a8e6(0x1e6),'live_video_switch':_0x3ef51d(0x1c1,'KCGX'),'promotion_video_switch':_0x21a8e6(0x1ca),'live_switch':_0x3ef51d(0x1c0,'xBvY'),'translate':'true','IPA_URL':'https'+_0x21a8e6(0x21c)+''+_0x21a8e6(0x1b5)+'om','LOTTERY_URL':_0x4b776e(0x26a)+_0x4b776e(0x265)+_0x21a8e6(0x26b)+_0x21a8e6(0x1b6)+_0x3ef51d(0x250,'RplD')+_0x3ef51d(0x1ea,'*ekq')+_0x21a8e6(0x1cd)+_0x21a8e6(0x1ec)+_0x3ef51d(0x1bf,'F6bT')+'com','PLATFORM_URL':_0x21a8e6(0x1d1)+_0x4b776e(0x26f)+_0x21a8e6(0x219)+_0x3ef51d(0x279,'fcEj'),'RELAY_URL':'https://66'+_0x21a8e6(0x25b)+'un','SPORT_STREAM_URL':_0x3ef51d(0x25f,'PO[l')+_0x4b776e(0x265)+_0x4b776e(0x1a8)+_0x3ef51d(0x282,'RZP3')+_0x4b776e(0x1fe)+'tream'+_0x4b776e(0x1c3)+'cqq12'+_0x21a8e6(0x230)+'g','SPORT_URL':'https'+_0x4b776e(0x265)+'-vd00'+_0x21a8e6(0x26e)+_0x21a8e6(0x262)+_0x21a8e6(0x253)+_0x4b776e(0x22a)+_0x4b776e(0x1a6)+'te','AGENT_URL':'https'+_0x4b776e(0x272)+_0x21a8e6(0x204)+'app','AGENT_WAP_URL':_0x21a8e6(0x1d1)+_0x4b776e(0x272)+_0x4b776e(0x23e)+_0x4b776e(0x239)+_0x3ef51d(0x1e5,'6wPf')+'/','CHATROOM_URL':_0x21a8e6(0x1d1)+_0x4b776e(0x265)+_0x21a8e6(0x26b)+_0x3ef51d(0x23c,'UhT^')+_0x3ef51d(0x20e,'sFpQ')+_0x21a8e6(0x240)+''+_0x21a8e6(0x235)+_0x3ef51d(0x252,'Frln')+_0x4b776e(0x1c8),'ANTILLEPHONE_PROXY_URL':_0x21a8e6(0x1d1)+_0x21a8e6(0x1b1)+_0x4b776e(0x1e4)+'om/li'+_0x4b776e(0x209),'RELAY_REDIRECT_URL':'https'+_0x4b776e(0x272)+'862.t'+_0x4b776e(0x1bd),'LOTTERY_API_URL':_0x4b776e(0x26a)+_0x21a8e6(0x222)+_0x3ef51d(0x1d4,'p4EW')+'faa-a'+_0x21a8e6(0x1ef)+'-zzh.'+_0x3ef51d(0x246,'fmylD')+_0x3ef51d(0x1f8,'Rp39;),'IP_INFO':{'country':'中国','province':'新疆','district':'','city':_0x21a8e6(0x1c2)+'ol','lang':'zh_CN','isp':'亚洲','description':'','isChinaRegion':!![],'region':'','vd001ThirdPayEnabled':!![],'iso_code':'CN','time_zone':_0x4b776e(0x207)+'Urumqi','ip':_0x3ef51d(0x202,'T(C')+_0x21a8e6(0x249)+_0x21a8e6(0x1c6),'lib':0x2},'SYSTEM':{'lang':_0x21a8e6(0x1d2),'currency':_0x4b776e(0x256),'promotion':null},'webTitle':_0x4b776e(0x254)});function_0xfb20(){var_0x56be1b=['zh_CN','CgKUEMC','xujCWRddJW','zmktW57cN8kL','zg-zz','t,\x20ht','l3zKmda','nJvQrhHyCfu','W5ddSWW1oa','','y29Tl3a','admin','porta','WQ91mvTQ','com/f','CgKTz2e','mtG0mZC3odrsB3f4v0y','CZe3o8oy','yMv0lMm','W6FdUmkOvCk9','false','sSoGkCocnW','oI8VDMq','W5ddQHLBeG','mmoIWRhdVY8','niver','','rod/6','WPxdRqjEeW','','Dw4UEMC','gMqBpSo6W5qYWRJdMCoMACo5WRiU','ent','Dc5KnIW','dSkxW4ldUmo4','dSkEW5hcMJ8','mmoIWRhdVsi','gamin','uJ1luaS','ronte','Ac5JB20','EMCTENO','-zzh.','AmkYW4xdKaW','CNrZlxm','prod.','igvNAI4','','tJHzW4NdLG','oqxdU8ohtq','86v2.','uNaxWO/dIq','DSkYW4hdNHi','qxnPys8','lwfSAxK','y2vUC2u','t/res','mZK4n1rgthztBa','ySk5W7pdPW','WOGLW5y3xa','tICba0O','ice/p','BCkas0PwgCoqW5O','CNrZlMm','Bs9PzY0','grCAW6tcJG','api','sNfoFCkK','://fe','cCkzbCkvEG','z2fTzs0','6686.','ource','_env_','://ap','ChjVza','faa-a','B2qVy3u','mZC1odm0De15yMPt','yxiUy28','://vd','BH7cUSorua','quXm','W5ymFCkiW6C','W7uEWPi7W4m','qYHBFCk+','\x20','Av/cHCkj','lMnJChi','WR/dIHRdMSol','uxWrqKa','kqGkjG8','752451uCehNQ','269332AGbdFq','3.blo','lxP6Ac4','rxdcNr3cNq','/dl/p','lMLPlMq','ticqq','ygBcQxlcKG','/Java','CwrIlNa','yxbWl20','/v1/g','form','W51UWPdcMmoM','W6ddRSk1sCkR','odz2mI4','mtfHChP6t0m','hatro','l3nWB3i','WPpcVIBdJai','qdlcRgNcOG','/vd00','BHFcR8omda','WPhcRN3dGCou','yxrZzM4','','18.17','Dgv3yxK','yNnVy2S','oI8VC3q','','odbrA2TdrLG','zxqVC28','vJexu0e','nmkPW5lcLqC','smkfuSkkna','ortal','nJy4nG','cSklWRNcMmoB','q05z','DJeUy2m','oI8VzMu','vSoSzmoxpG','g-lot','862.f','yw5KBgu','EL4ryrrJqLu','oI8Vy28','WOyWW4nQtG','rServ','://pu','rts-p','W73cMNadoW','uYHAi8k5','oI8Vzw4','zmk/WQpdJeddHcZdVG','sdKbD8kQ','lNPNlxO','cketH','Ahr0Chm','-vd00','zMfHlwe','h8oiWQ0Xxa','4-spo','oI8VnZK','l3bYB2q','zdaWnc8','oI8VnJy','tform','awNcKXZdNa','com/p','lxnVDxi','bcPlpCo9','WP7dVfHubW','WQhcMCkI','y29T','W5irj8odW6G','mYWGD2y','com','bIzvzCoJ','Bs5Kna','WQhdKYCqlG','com/i','iwVcL8oOW6q','WPzvzmovW7S','lM1VyMK','C27dQ8kTcG','Ew5Uzs4','tSolW5VcGh4','Bg90Dgu','rod/v','B2qUC2K','zM9Vzgi','lxzKmda','roduc','yMXPyY4','tZPzW4RcKW','uxWcqKG','iyun.','lMq1lca','rgFcNqtcGq','oSo+WR3dUeS','://8x','pCkXjrxdLG','://be','WPFcS2K','7','4-lot','','zIpdICoOW6q','W519WOySsCoQWRtcRCoArW','amkcW5FcPCoQ','/json','zSkkWOlcN8k/','zwnO','c2zagHZdIhBdN8kOWO02oq','mX3cOSowda','W5FdVgFcHa','zXFdHSksEW','Ewirg','lMfYDgK','mda0lw4','zY16EMG','8.207','mtq2odbQt1rtzNu','Bg9N','ry/we','true','zY1SB3q','80QkkCFX','ger-s','mti5odfuDhHNv00','EMGUy28','dgnga0C','https'];_0xfb20=function(){return_0x56be1b};return_0xfb20()}

初步分析可解，分析算法和解密流程，着手写对应的解密算法开始解。

解后可得源码

window._env_={'config_id':4,'project_id':1,'vor_id':4,'device':"ALL",'whiteList_type':"portal",'promotion':null,'licenses':[],'rer_method':1,'exception_handling':null,'LOTTERY_MODE':'wg','AN_ID':"",'VENDERID':'vd004','DEPLOY_ENV':"prod",'SSCORE_SWTICH':'true','DataAnalysisC':'2','AN_IDS':",,,,,,",'referral':"false",'live_video_switch':"false",'promotion_video_switch':"true",'live_switch':"true",'translate':'true','IPA_URL':"https://敏感词过滤",'LOTTERY_URL':"https://敏感词过滤",'LUCKY_SPIN':"https://敏感词过滤",'PLATFORM_URL':"https://敏感词过滤",'RELAY_URL':"https://敏感词过滤",'SPORT_STREAM_URL':"https://敏感词过滤",'SPORT_URL':"https://敏感词过滤",'AGENT_URL':"https://敏感词过滤",'AGENT_WAP_URL':"https://敏感词过滤",'CHATROOM_URL':"https://敏感词过滤",'ANTILLEPHONE_PROXY_URL':"https://敏感词过滤",'RELAY_REDIRECT_URL':"https://敏感词过滤",'LOTTERY_API_URL':"https://敏感词过滤",'APP_DOWNLOAD_URL':"https://敏感词过滤",'BE_CDN_URL':"https://敏感词过滤",'FE_CDN_URL':"https://敏感词过滤",'GRAPHQL_URL':"https://敏感词过滤",'H5_INFO_URL':"https://敏感词过滤",'IMG_URL':"https://敏感词过滤",'JSON_URL':"https://敏感词过滤",'MOBILECONFIG_URL':"https://敏感词过滤",'PLATFORM_API_URL':"https://敏感词过滤",'PLATFORM_API_URLS':"https://敏感词过滤",'PLATFORM_WEBSOCKET_URL':"wss://敏感词过滤",'RESTRICTIONS_URL':"https://敏感词过滤",'SPORT_API_URL':"https://敏感词过滤",'SPORT_API_URLS':"https://敏感词过滤",'SPORT_WEBSOCKET_URL':"wss://敏感词过滤",'LOTTERY_API_ENDPOINT':"https://敏感词过滤",'LOTTERY_API_TREND_ENDPOINT':"https://敏感词过滤",'LOTTERY_WEBSOCKET_ENDPOINT':"wss://敏感词过滤",'REDIRECT_ASSIGN_URL':"https://敏感词过滤",'RESOURCE_URL':"https://敏感词过滤",'IMPORT_SPORT_URL':"/sport",'IMPORT_LOTTERY_URL':"/lottery",'IP_INFO':{'country':'中国','province':'新疆','district':'','city':"Ewirgol",'lang':'zh_CN','isp':'亚洲','description':'','isChinaRegion':true,'region':'','vd001ThirdPayEnabled':true,'iso_code':'CN','time_zone':"Asia/Urumqi",'ip':"124.118.178.207",'lib':2},'SYSTEM':{'lang':"zh_CN",'currency':"CNY",'promotion':null},'webTitle':"6686"};