1. 分析加密參數
- 通過分析請求，發現需要處理的加密參數是
m，另一個參數t爲時間戳。
2. 定位函數入口
此處可以使用兩種方法：
- 直接全局搜索；
- XHR 斷點 + 跟棧；
2.1. 直接全局搜索
由於目標函數是一個英文字母，所以不能直接查找單字母 m，而是需要加一下輔助行的字符。
本題中，可以嘗試的搜索關鍵字包括：
m=m =.m=.m =['m']=['m'] =["m"]=["m"] =m:-
.m:
此處，通過搜索.m =可以直接定位到函數入口。
如下圖：
![]()
2.2. XHR 斷點 + 跟棧
我們也可以打一個 Any XHR or fetch 斷點，然後在翻頁的時候讓網頁斷下來。
之後在 Call Stack 中跟棧分析，通過分析發現在 window.request 位置 m 出現了。
如下圖：
經過分析代碼，可以找到代碼入口：
r.m = n[e(528)](btoa, p_s),。
3. 扣代碼 + 補環境
| js代碼 | 實際意義 |
|---|---|
n[e(528)] |
ƒ (e,t){return e(t)} |
e(496) |
'parse' |
e(517) |
'toString' |
u(208) |
'btoa' |
基於前面的分析，扣出並改寫得到下面的 js 代碼。
p_s = Date['parse'](new Date)['toString']();
m = btoa(p_s);
console.log(m);
之後開始扣代碼以及補環境操作。
注意：在處理
n函數_0x4c28數組的時候需要注意，這個數組在初始化以後有被做混淆操作處理，如果只是扣出數組初始化代碼，後面是會報錯的。
通過扣代碼和補環境操作，我們得到了可執行的 js 文件。
在本地執行後，我們發現 js 代碼成功返回了與目標參數相似的內容。
如下圖：
接下來，使用此參數發送請求，嘗試獲取數據，但是卻一直無法成功返回數據。
使用 fiddler 抓包，發現此時服務器返回了 301錯誤。
如下圖：
4. 投毒處理策略
投毒的定義：投毒，指的是js代碼中會對環境進行很多檢測，如果識別爲非正常瀏覽器，就會對某些參數進行修改，造成最終結果錯誤，這種過程稱爲 投毒。
4.1. 常見的投毒位置
try ... cach ...if ... else ...- 判斷表達式：
||或&&或?
4.2. 插樁定位
在本地 js 文件可能投毒的位置，使用 console.log 打印出值；
在瀏覽器相同位置打上斷點，查看運行的結果值；
進而對比二者是否相同，如果不同就是此處被投毒了。
基於上面的投毒和反投毒思想，我們逐個分析，發現 n.g 在本地執行的結果和在瀏覽器執行的結果不同。本地執行結果爲 undefined，而在瀏覽器中則爲 window 對象。
4.3. 修改代碼
此處，將 n.g 修改爲 window。
重新執行本地文件，併發送請求，發現成功獲取返回值。
如下圖：
5. 完整 js 代碼
sdk = function (timeString) {
var window = global;
var _0x34e7 = ['split', 'ABHICESQWK', 'FKByN', 'U987654321', 'lmHcG', 'dICfr', 'Szksx', 'Bgrij', 'iwnNJ', 'jihgfdecba', 'GfTek', 'gfdecbaZXY', 'constructo', 'QIoXW', 'jLRMs', 'AqLWq', '0zyxwvutsr', 'TKgNw', 'eMnqD', 'thjIz', 'btoa', 'MNPQRSTWXY', 'oPsqh', 'niIlq', 'evetF', 'LVZVH', 'fYWEX', 'kmnprstwxy', 'aYkvo', 'tsrqpomnlk', 'HfLqY', 'aQCDK', 'lGBLj', 'test', '3210zyxwvu', 'QWK2Fi', 'return /" ', 'hsJtK', 'jdwcO', 'SlFsj', 'OWUOc', 'LCaAn', '[^ ]+)+)+[', 'FAVYf', '2Fi+987654', 'floor', 'join', 'EuwBW', 'OXYrZ', 'charCodeAt', 'SkkHG', 'iYuJr', 'GwoYF', 'kPdGe', 'cVCcp', 'INQRH', 'INVALID_CH', 'charAt', 'push', 'apply', 'lalCJ', 'kTcRS', '+ this + "', 'ykpOn', 'gLnjm', 'gmBaq', 'kukBH', 'dvEWE', 'SFKLi', '^([^ ]+( +', 'qpomnlkjih', '^ ]}', 'pHtmC', 'length'];
var l = function (e, t) {
return _0x34e7[e -= 188]
};
var u = l;
var f = u(191) + u(204) + u(258) + u(199) + "WVUTSRQPON" + u(189) + u(232) + u(222) + u(217) + u(197) + "ZXYWVUTSRQPONABHICES" + u(223);
// console.log(u(208));
var d = function (e) {
var t = u
, n = {};
n[t(214)] = function (e, t) {
return e || t
}
,
n.bWcgB = function (e, t) {
return e * t
}
,
n[t(227)] = "ABCDEFGHJK" + t(209) + "Zabcdefhij" + t(215) + "z2345678";
for (var r = n, o = "1|3|0|4|2|5"[t(188)]("|"), a = 0; ;) {
switch (o[a++]) {
case "0":
var s = l[t(261)];
continue;
case "1":
e = r[t(214)](e, 32);
continue;
case "2":
for (i = 0; i < e; i++)
c += l[t(245)](Math[t(233)](r.bWcgB(Math.random(), s)));
continue;
case "3":
var l = r[t(227)];
continue;
case "4":
var c = "";
continue;
case "5":
return c
}
break
}
};
var e, t;
_0x4c28 = ["18|38|15|2", "ucisR", "wWwRM", "LzcOo", "yWGcu", "PlAEw", "ihcci", "hBKtU", "rvloG", "xcQTI", "uhJgH", "vRqUp", "EQEzR", "abc", "QgSUn", "0|45|44|19", "WMqBp", "koePJ", "jGSEC", "IKbhW", "wEOgn", "|49|71|11|", "xgzfr", "ABCDEF", "DdHPB", "aFxRD", "sFtiw", "concat", "YhaCC", "YVBwM", "abYok", "2|28|6|36|", "NLOsy", "bRLIN", "xGAWc", "length", "zYRlD", "14|67|61|3", "bolvy", "pagBT", "mdsJQ", "4|69|41|26", "kaXPV", "IWxBE", "pviAr", "5|0|2", "lvwPz", "YcDFe", "yGmJD", "FcYqi", "AAZoR", "|46|5|3|50", "PnITs", "ABCDEFGHIJ", "charCodeAt", "KLMNOPQRST", "prrXX", "FDiNG", "split", "oBesn", "9|24|10|56", "VaXsK", "fromCharCo", "FDfcp", "rrdPR", "HHkBN", "89+/", "mfuQZ", "PbrnX", "FcXlo", "rNapo", "fEXNi", "qtIDJ", "60|53|21|5", "Rtsed", "SUrST", "nsaps", "vyNVU", "2|29|23|64", "0|43|57|4|", "NNXUu", "nCrbn", "wQPIq", "XBcOb", "39|40|47|6", "ljkOt", "yMPhx", "TXzzv", "0123456789", "fmdcS", "iXQwu", "grCxb", "3|6|1|4|7|", "wKeAM", "Iekey", "opqrstuvwx", "|7|17", "BQgZQ", "BtzmV", "jZUAt", "HYhpy", "Yvoqt", "VyzBI", "NNVLf", "dbmfK", "0|58|16|32", "UAFHv", "WNIsZ", "2|1|4|3|5|", "JFqRJ", "zObVA", "d24fb0d696", "XfWkD", "MFmWH", "lZISZ", "WzbFA", "kaQlD", "3f7d28e17f", "eSwEi", "YpeFX", "kZhzK", "KxKIe", "LAIPf", "LjyKQ", "YLwOK", "iqfMz", "51|8|0|65|", "JRihE", "nqEyg", "|37|22|27|", "ZXsFi", "goEwl", "|31|63|48|", "wvVCN", "wnDlW", "Myvqp", "UlhBp", "fwCDC", "charAt", "Lmhlz", "WQCAS", "UXeVn", "KIXRL", "HiEZt", "WNzfT", "lNWda", "tsNzQ"],
e = _0x4c28,
t = 368,
function (t) {
for (; --t;)
e.push(e.shift())
}(++t);
var n = function (e, t) {
return _0x4c28[e -= 0]
};
var n = function (e, t) {
return _0x4c28[e -= 0]
};
window.md5 = function (e) {
var t = n
, r = {
fEXNi: function (e, t) {
return e(t)
},
LzcOo: function (e, t, n) {
return e(t, n)
}
};
r[t(3)] = function (e, t) {
return e(t)
}
,
r.wEOgn = function (e, t, n) {
return e(t, n)
}
,
r[t(120)] = function (e, t, n) {
return e(t, n)
}
,
r[t(69)] = function (e, t) {
return e == t
}
,
r[t(109)] = function (e, t) {
return e(t)
}
,
r[t(112)] = t(86),
r.oBesn = "900150983c" + t(37) + t(43) + "72",
r[t(70)] = t(18) + t(118),
r[t(16)] = function (e, t) {
return e < t
}
,
r[t(2)] = t(110) + t(5) + t(133) + "|55|13|12|" + t(146) + t(114) + t(94) + "35|68|33|4" + t(104) + t(52) + t(73) + t(88) + t(55) + "25|34|1|2|" + t(10) + t(4) + t(124) + t(58) + "52|59|66|7" + t(31) + t(22),
r[t(53)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(35)] = function (e, t) {
return e + t
}
,
r[t(141)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(91)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(65)] = function (e, t) {
return e + t
}
,
r[t(38)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(19)] = function (e, t) {
return e + t
}
,
r[t(117)] = function (e, t, n) {
return e(t, n)
}
,
r[t(92)] = function (e, t) {
return e + t
}
,
r[t(82)] = function (e, t) {
return e + t
}
,
r[t(111)] = function (e, t, n) {
return e(t, n)
}
,
r[t(78)] = function (e, t) {
return e + t
}
,
r.lZISZ = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r.Iekey = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r.AAZoR = function (e, t) {
return e + t
}
,
r[t(67)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r.UlhBp = function (e, t) {
return e + t
}
,
r.yMPhx = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(138)] = function (e, t) {
return e + t
}
,
r[t(121)] = function (e, t) {
return e + t
}
,
r[t(98)] = function (e, t, n) {
return e(t, n)
}
,
r.kHuTw = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(50)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(142)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(87)] = function (e, t) {
return e + t
}
,
r[t(90)] = function (e, t) {
return e + t
}
,
r[t(59)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(28)] = function (e, t) {
return e + t
}
,
r[t(119)] = function (e, t) {
return e + t
}
,
r.YpeFX = function (e, t) {
return e + t
}
,
r[t(7)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r.prrXX = function (e, t) {
return e + t
}
,
r.kaQlD = function (e, t) {
return e + t
}
,
r.qtIDJ = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r.xGAWc = function (e, t) {
return e + t
}
,
r[t(134)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(89)] = function (e, t) {
return e + t
}
,
r[t(15)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(9)] = function (e, t) {
return e + t
}
,
r[t(56)] = function (e, t) {
return e + t
}
,
r[t(6)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(32)] = function (e, t) {
return e + t
}
,
r[t(99)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(39)] = function (e, t) {
return e + t
}
,
r[t(113)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(106)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(66)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r.TXzzv = function (e, t) {
return e + t
}
,
r.NNVLf = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(79)] = function (e, t) {
return e + t
}
,
r[t(1)] = function (e, t, n, r, i, o, a, s) {
return e(t, n, r, i, o, a, s)
}
,
r[t(81)] = function (e, t) {
return e + t
}
,
r.MXnIN = function (e, t) {
return e >> t
}
,
r[t(23)] = function (e, t) {
return e << t
}
,
r.nqEyg = function (e, t) {
return e % t
}
,
r.kaXPV = function (e, t) {
return e >>> t
}
,
r[t(24)] = function (e, t, n) {
return e(t, n)
}
,
r[t(44)] = function (e, t, n) {
return e(t, n)
}
,
r[t(30)] = function (e, t, n) {
return e(t, n)
}
,
r[t(143)] = function (e, t) {
return e | t
}
,
r[t(101)] = function (e, t) {
return e & t
}
,
r[t(122)] = function (e, t, n, r, i, o, a) {
return e(t, n, r, i, o, a)
}
,
r.ZpUiH = function (e, t) {
return e & t
}
,
r[t(72)] = function (e, t) {
return e ^ t
}
,
r[t(130)] = function (e, t) {
return e ^ t
}
,
r[t(41)] = function (e, t) {
return e | t
}
,
r[t(116)] = function (e, t) {
return e > t
}
,
r[t(80)] = function (e, t) {
return e(t)
}
,
r[t(33)] = function (e, t, n) {
return e(t, n)
}
,
r[t(83)] = function (e, t) {
return e(t)
}
,
r[t(60)] = function (e, t) {
return e + t
}
,
r.FDfcp = function (e, t) {
return e * t
}
,
r[t(95)] = function (e, t) {
return e + t
}
,
r[t(51)] = function (e, t) {
return e & t
}
,
r.DdHPB = function (e, t) {
return e >> t
}
,
r.abYok = function (e, t) {
return e | t
}
,
r[t(84)] = function (e, t) {
return e << t
}
,
r[t(105)] = function (e, t) {
return e & t
}
,
r[t(8)] = function (e, t) {
return e - t
}
,
r[t(137)] = function (e) {
return e()
}
,
r.YVBwM = function (e, t) {
return e << t
}
,
r[t(27)] = function (e, t) {
return e & t
}
,
r[t(26)] = function (e, t) {
return e / t
}
,
r[t(74)] = function (e, t) {
return e * t
}
,
r[t(49)] = t(14) + "abcdef",
r[t(36)] = function (e, t) {
return e >> t
}
,
r[t(46)] = function (e, t) {
return e + t
}
,
r[t(75)] = function (e, t) {
return e >> t
}
,
r[t(47)] = function (e, t) {
return e * t
}
,
r[t(11)] = t(126) + t(128) + "UVWXYZabcdefghijklmn" + t(21) + "yz01234567" + t(139),
r[t(63)] = function (e, t) {
return e * t
}
,
r.KIXRL = function (e, t) {
return e << t
}
,
r[t(57)] = function (e, t) {
return e % t
}
,
r[t(77)] = function (e, t) {
return e << t
}
,
r[t(71)] = function (e, t) {
return e >> t
}
,
r.jZUAt = function (e, t) {
return e >> t
}
,
r[t(48)] = function (e, t) {
return e + t
}
,
r[t(17)] = function (e, t) {
return e % t
}
,
r[t(85)] = function (e, t) {
return e * t
}
,
r[t(61)] = function (e, t) {
return e < t
}
,
r.mfuQZ = function (e, t) {
return e + t
}
,
r[t(125)] = function (e, t) {
return e * t
}
,
r[t(0)] = function (e, t) {
return e(t)
}
;
var i = r;
function o(e, n) {
for (var r = t, o = i.WNzfT[r(131)]("|"), a = 0; ;) {
switch (o[a++]) {
case "0":
for (var d = 0; i.iXQwu(d, e.length); d += 16)
for (var p = i[r(2)][r(131)]("|"), h = 0; ;) {
switch (p[h++]) {
case "0":
w = i[r(53)](l, w, b, x, T, e[d + 2], 9, -51403784);
continue;
case "1":
x = u(x, T, w, b, e[d + 6], 23, 76029189);
continue;
case "2":
b = i[r(53)](u, b, x, T, w, e[i.JFqRJ(d, 9)], 4, -640364487);
continue;
case "3":
T = i[r(141)](c, T, w, b, x, e[d + 10], 15, -1051523);
continue;
case "4":
T = s(T, w, b, x, e[i.JFqRJ(d, 2)], 17, 606105819);
continue;
case "5":
w = i[r(91)](c, w, b, x, T, e[i[r(65)](d, 3)], 10, -1894446606);
continue;
case "6":
w = i.XfWkD(l, w, b, x, T, e[i.wKeAM(d, 14)], 9, -1019803690);
continue;
case "7":
T = i.pviAr(f, T, v);
continue;
case "8":
b = i.XfWkD(l, b, x, T, w, e[i[r(92)](d, 13)], 5, -1444681467);
continue;
case "9":
x = i[r(38)](s, x, T, w, b, e[i[r(82)](d, 3)], 22, -1044525330);
continue;
case "10":
w = s(w, b, x, T, e[i[r(82)](d, 5)], 12, 1200080426);
continue;
case "11":
x = i[r(38)](l, x, T, w, b, e[i[r(82)](d, 0)], 20, -373897302);
continue;
case "12":
w = i[r(38)](s, w, b, x, T, e[i[r(82)](d, 9)], 12, -1958435417);
continue;
case "13":
b = i.XfWkD(s, b, x, T, w, e[i.xcQTI(d, 8)], 7, 1770035416);
continue;
case "14":
var m = b;
continue;
case "15":
w = i[r(38)](u, w, b, x, T, e[i.xcQTI(d, 8)], 11, -2022574463);
continue;
case "16":
b = f(b, m);
continue;
case "17":
w = i[r(111)](f, w, g);
continue;
case "18":
x = l(x, T, w, b, e[i[r(78)](d, 12)], 20, -1921207734);
continue;
case "19":
w = i[r(40)](u, w, b, x, T, e[d + 4], 11, 1272893353);
continue;
case "20":
T = i[r(20)](u, T, w, b, x, e[i.PlAEw(d, 11)], 16, 1839030562);
continue;
case "21":
b = s(b, x, T, w, e[i[r(123)](d, 12)], 7, 1804550682);
continue;
case "22":
x = u(x, T, w, b, e[i[r(123)](d, 10)], 23, -1094730640);
continue;
case "23":
T = i[r(67)](c, T, w, b, x, e[d + 14], 15, -1416354905);
continue;
case "24":
b = s(b, x, T, w, e[i[r(123)](d, 4)], 7, -176418897);
continue;
case "25":
w = i.UXeVn(u, w, b, x, T, e[d + 0], 11, -358537222);
continue;
case "26":
b = i.UXeVn(l, b, x, T, w, e[i[r(62)](d, 1)], 5, -165796510);
continue;
case "27":
b = i.UXeVn(u, b, x, T, w, e[i[r(62)](d, 13)], 4, 681279174);
continue;
case "28":
b = i[r(12)](l, b, x, T, w, e[i[r(138)](d, 9)], 5, 568446438);
continue;
case "29":
w = i.yMPhx(c, w, b, x, T, e[d + 7], 10, 11261161415);
continue;
case "30":
var g = w;
continue;
case "31":
b = c(b, x, T, w, e[i.yGmJD(d, 8)], 6, 1873313359);
continue;
case "32":
x = i.aFxRD(f, x, y);
continue;
case "33":
T = i[r(12)](l, T, w, b, x, e[i[r(121)](d, 15)], 14, -660478335);
continue;
case "34":
T = i.kHuTw(u, T, w, b, x, e[d + 3], 16, -722881979);
continue;
case "35":
b = i[r(50)](l, b, x, T, w, e[i[r(121)](d, 5)], 5, -701520691);
continue;
case "36":
T = l(T, w, b, x, e[i[r(121)](d, 3)], 14, -187363961);
continue;
case "37":
T = i[r(142)](u, T, w, b, x, e[i.QgSUn(d, 7)], 16, -155497632);
continue;
case "38":
b = i.FcXlo(u, b, x, T, w, e[i.koePJ(d, 5)], 4, -378558);
continue;
case "39":
w = i[r(142)](u, w, b, x, T, e[i[r(90)](d, 12)], 11, -421815835);
continue;
case "40":
T = i[r(59)](u, T, w, b, x, e[i[r(28)](d, 15)], 16, 530742520);
continue;
case "41":
x = i.wvVCN(s, x, T, w, b, e[d + 15], 22, 1236531029);
continue;
case "42":
x = i[r(59)](l, x, T, w, b, e[i[r(119)](d, 4)], 20, -405537848);
continue;
case "43":
b = i[r(59)](s, b, x, T, w, e[i.lvwPz(d, 0)], 7, -680976936);
continue;
case "44":
b = i[r(59)](u, b, x, T, w, e[i[r(45)](d, 1)], 4, -1530992060);
continue;
case "45":
x = i.nCrbn(u, x, T, w, b, e[i[r(129)](d, 14)], 23, -35311556);
continue;
case "46":
b = c(b, x, T, w, e[i[r(42)](d, 12)], 6, 1700485571);
continue;
case "47":
x = i[r(7)](u, x, T, w, b, e[i.kaQlD(d, 2)], 23, -995338651);
continue;
case "48":
T = c(T, w, b, x, e[d + 6], 15, -1560198380);
continue;
case "49":
w = i[r(145)](l, w, b, x, T, e[i[r(107)](d, 6)], 9, -1069501632);
continue;
case "50":
x = i[r(134)](c, x, T, w, b, e[i[r(89)](d, 1)], 21, -2054922799);
continue;
case "51":
x = i.fmdcS(l, x, T, w, b, e[d + 8], 20, 1163531501);
continue;
case "52":
x = i[r(15)](c, x, T, w, b, e[i[r(9)](d, 13)], 21, 1309151649);
continue;
case "53":
x = i[r(15)](s, x, T, w, b, e[i[r(56)](d, 11)], 22, -1990404162);
continue;
case "54":
w = i[r(6)](s, w, b, x, T, e[i[r(32)](d, 13)], 12, -40341101);
continue;
case "55":
x = i.sFtiw(s, x, T, w, b, e[i.UAFHv(d, 7)], 22, -45705983);
continue;
case "56":
T = i.sFtiw(s, T, w, b, x, e[i.MFmWH(d, 6)], 17, -1473231341);
continue;
case "57":
w = i[r(99)](s, w, b, x, T, e[i.MFmWH(d, 1)], 12, -389564586);
continue;
case "58":
x = c(x, T, w, b, e[i[r(39)](d, 9)], 21, -343485551);
continue;
case "59":
b = i[r(113)](c, b, x, T, w, e[i[r(39)](d, 4)], 6, -145523070);
continue;
case "60":
T = i.bRLIN(s, T, w, b, x, e[i[r(39)](d, 10)], 17, -42063);
continue;
case "61":
var v = T;
continue;
case "62":
b = i[r(66)](c, b, x, T, w, e[d + 0], 6, -198630844);
continue;
case "63":
w = i[r(66)](c, w, b, x, T, e[i[r(13)](d, 15)], 10, -30611744);
continue;
case "64":
x = c(x, T, w, b, e[d + 5], 21, -57434055);
continue;
case "65":
T = i[r(29)](l, T, w, b, x, e[i[r(13)](d, 7)], 14, 1735328473);
continue;
case "66":
w = i[r(29)](c, w, b, x, T, e[i[r(79)](d, 11)], 10, -1120210379);
continue;
case "67":
var y = x;
continue;
case "68":
w = i[r(1)](l, w, b, x, T, e[d + 10], 9, 38016083);
continue;
case "69":
T = i[r(1)](s, T, w, b, x, e[i[r(79)](d, 14)], 17, -1502002290);
continue;
case "70":
T = i.SUrST(c, T, w, b, x, e[i[r(79)](d, 2)], 15, 718787259);
continue;
case "71":
T = l(T, w, b, x, e[i[r(81)](d, 11)], 14, 643717713);
continue
}
break
}
continue;
case "1":
var b = 1732584193;
continue;
case "2":
return Array(b, x, T, w);
case "3":
e[i.MXnIN(n, 5)] |= i[r(23)](128, i[r(54)](n, 32));
continue;
case "4":
var x = -271733879;
continue;
case "5":
var w = 271733878;
continue;
case "6":
e[i.BQgZQ(i[r(115)](n + 64, 9), 4) + 14] = n;
continue;
case "7":
var T = -1732584194;
continue
}
break
}
}
function a(e, n, r, o, a, s) {
var l = t;
return f(i.BtzmV(d, i[l(44)](f, i.dbmfK(f, n, e), i[l(30)](f, o, s)), a), r)
}
function s(e, n, r, o, s, l, u) {
var c = t;
return a(i[c(143)](i[c(101)](n, r), i[c(101)](~n, o)), e, n, s, l, u)
}
function l(e, n, r, o, s, l, u) {
var c = t;
return i[c(122)](a, i[c(143)](i.ZpUiH(n, o), i.ZpUiH(r, ~o)), e, n, s, l, u)
}
function u(e, n, r, o, s, l, u) {
return i[t(122)](a, i.tsNzQ(n ^ r, o), e, n, s, l, u)
}
function c(e, n, r, o, s, l, u) {
var c = t;
return i[c(122)](a, i[c(130)](r, i[c(41)](n, ~o)), e, n, s, l, u)
}
function f(e, n) {
var r = t
, o = i[r(95)](65535 & e, i.iqfMz(n, 65535))
, a = i[r(95)](e >> 16, i[r(97)](n, 16)) + i[r(97)](o, 16);
return i[r(103)](i[r(84)](a, 16), i[r(105)](o, 65535))
}
function d(e, n) {
var r = t;
return i.abYok(e << n, e >>> i[r(8)](32, n))
}
function p(e) {
for (var n = t, r = i[n(137)](Array), o = i[n(8)](i.vRqUp(1, 16), 1), a = 0; a < i.FDfcp(e[n(108)], 16); a += 16)
r[i[n(97)](a, 5)] |= i[n(102)](i[n(27)](e[n(127)](i[n(26)](a, 16)), o), i[n(54)](a, 32));
return r
}
function h(e) {
for (var n = t, r = i[n(49)], o = "", a = 0; i.iXQwu(a, i[n(74)](e[n(108)], 4)); a++)
o += i.xgzfr(r[n(64)](15 & i[n(36)](e[i[n(36)](a, 2)], i[n(46)](i[n(74)](a % 4, 8), 4))), r[n(64)](15 & i.wWwRM(e[a >> 2], i[n(47)](a % 4, 8))));
return o
}
return i[t(0)]((function (e) {
var n = t;
return i[n(144)](h, i[n(76)](o, i.vyNVU(p, e), 16 * e[n(108)]))
}
), e)
};
window[u(208)] = function (e) {
var t = u
, r = {};
r.TGmSp = t(244) + "ARACTER_ERR",
r[t(238)] = t(224) + t(250) + "/",
r[t(205)] = "^([^ ]+( +" + t(230) + t(259),
r.aYkvo = function (e) {
return e()
}
,
r[t(254)] = function (e, t) {
return e % t
}
,
r.evetF = function (e, t) {
return e >> t
}
,
r.GfTek = t(196),
r[t(260)] = function (e, t) {
return e << t
}
,
r[t(229)] = function (e, t) {
return e | t
}
,
r[t(242)] = function (e, t) {
return e << t
}
,
r[t(228)] = function (e, t) {
return e & t
}
,
r[t(207)] = function (e, t) {
return e << t
}
,
r[t(202)] = function (e, t) {
return e & t
}
,
r.jdwcO = function (e, t) {
return e === t
}
,
r.kPdGe = t(231),
r[t(195)] = t(213),
r[t(201)] = function (e, t) {
return e & t
}
,
r[t(206)] = function (e, t) {
return e == t
}
,
r[t(219)] = function (e, t) {
return e + t
}
,
r[t(220)] = function (e, t) {
return e(t)
}
;
var i = r;
if (/([^\u0000-\u00ff])/.test(e))
throw new Error(i.TGmSp);
for (var o, a, s, l = 0, c = []; l < e[t(261)];) {
switch (a = e[t(237)](l),
s = i.kukBH(l, 6)) {
case 0:
delete window,
delete document,
c[t(246)](f[t(245)](i[t(212)](a, 2)));
break;
case 1:
// console.log('"WhHMm" === i[t(198)] :',"WhHMm" === i[t(198)])
// console.log('n.g :', n.g)
// console.log('c[t(246)](f[t(245)](i.pHtmC(2 & o, 3) | i.evetF(a, 4))) :', c[t(246)](f[t(245)](i.pHtmC(2 & o, 3) | i.evetF(a, 4))))
// console.log('-----------------')
try {
"WhHMm" === i[t(198)] || window && c[t(246)](f[t(245)](i.pHtmC(2 & o, 3) | i.evetF(a, 4)))
} catch (e) {
c[t(246)](f[t(245)](i[t(229)](i.cVCcp(3 & o, 4), a >> 4)))
}
break;
case 2:
c[t(246)](f[t(245)](i[t(229)](i[t(242)](15 & o, 2), i.evetF(a, 6)))),
c[t(246)](f[t(245)](i[t(228)](a, 63)));
break;
case 3:
c[t(246)](f[t(245)](i[t(212)](a, 3)));
break;
case 4:
c.push(f[t(245)](i[t(229)](i[t(207)](i.OWUOc(o, 4), 6), i[t(212)](a, 6))));
break;
case 5:
c[t(246)](f[t(245)](i[t(229)](i[t(207)](i[t(202)](o, 15), 4), a >> 8))),
c.push(f.charAt(i[t(202)](a, 63)))
}
o = a,
l++
}
return 0 == s ? i[t(226)](i[t(241)], i[t(195)]) || (c[t(246)](f[t(245)](i[t(201)](o, 3) << 4)),
c.push("FM")) : i.eMnqD(s, 1) && (c[t(246)](f[t(245)]((15 & o) << 2)),
c[t(246)]("K")),
i[t(219)](i.aQCDK(d(15), window.md5(c[t(234)](""))), i[t(220)](d, 10))
}
// p_s = Date['parse'](new Date)['toString']();
return btoa(timeString);
};
console.log(sdk('165343333'))