11

ast/decode.js

@@ -508,7 +508,7 @@ for (let i = 0; i < keys.length; i++) {
 var map2 = {};
 // 开始还原
 let funcTemp = {}
-for (let j = 0; j < 3; j++) {
+for (let j = 0; j < 20; j++) {
     traverse(ast, {
         VariableDeclaration(path) {
             let {declarations} = path.node;
@@ -518,9 +518,9 @@ for (let j = 0; j < 3; j++) {
             let {id, init} = declaration;
             if (!init) return
             if (!types.isIdentifier(init)) return;
-            // if (init.name === '$d') {
-            //     debugger;
-            // }
+            if (init.name === 'Bo') {
+                debugger;
+            }
 
             if (keys2.includes(init.name)) {
                 let t = newMap[init.name];
@@ -540,10 +540,10 @@ for (let j = 0; j < 3; j++) {
                 let binding = scope.getBinding(id.name);
 
                 if (!binding) return;
-                console.log(id.name, init.name, keys2.includes(init.name), binding.references)
+                // console.log(id.name, init.name, keys2.includes(init.name), binding.references)
 
 
-                if (id.name === 'xc') {
+                if (id.name === 'Bo') {
                     // console.log(id.name, init.name, keys2.includes(init.name), binding.references)
                     debugger
                 }
@@ -558,9 +558,9 @@ for (let j = 0; j < 3; j++) {
                         }
                         if (arguments.length === 1 && types.isNumericLiteral(arguments[0])) {
                             let res = funcTemp[t.name](arguments[0].value)
-                            if (id.name === 'zo') {
+                            if (init.name === 'Bo') {
 
-                                // console.log(arguments[0].value, res)
+                                console.log(init.name, id.name, arguments[0].value, res)
                             }
                             referencePath.parentPath.replaceWith(types.StringLiteral(res))
                         }
@@ -617,7 +617,7 @@ var i = function () {
 function o(n) {
     var r = t();
     for (var c = i(n), u = "", l = 0; l < c.length; ++l) {
-        var s = "XsS5yUA".charCodeAt(l % 7);
+        var s = "flEpkiz".charCodeAt(l % 7);
         u += String.fromCharCode(s ^ c.charCodeAt(l));
     }
     return u;
@@ -632,13 +632,13 @@ traverse(ast, {
         let {id, init} = declaration;
         if (!init) return
         if (!types.isIdentifier(init)) return;
-        if (init.name === 'o') {
+        if (init.name === 'i') {
             let binding = scope.getBinding(id.name);
             if (id.name === 'xs') {
                 debugger
             }
             if (!binding) return;
-            // console.log(id.name, init.name, binding.references)
+            console.log(id.name, init.name, binding.references)
 
             for (const referencePath of binding.referencePaths) {
                 // console.log(referencePath);

test.py

@@ -60,7 +60,8 @@ a2 = "KysrKytSHj0SGlAeUVFSHgcbKFMrCA0LLBg3GjgmLxUvJTcWLCY7UiwbUhovNTQOLjUnFSw1Mx
 a2 = "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"
 
 
-a2 = "B1lZB1lZFF1dWV8JWwteRVBaDAlFWVkNDUUJWApZRV4LDgteUQoJWVFbXRYWFhYHWVkHWVkHBxRdXVlfCV5QUUVQWgwJRVlZDQ1FCVgKWUVeCw4LXlEKCVlRW10UHBodDRYWFhZZWVkHB1kUCwsUXlgUPVouHDI+JhgMLz1RPC8uXCcfVVUWFhYWWQcHBwdZFAsEUQMcAQ0bXxwGBVpcGQJfCQsPFhYWFgdZWVkHBwcHFFBeWVAWFhYWWVlZB1kHFFlRUVteWVpQWF5ZXl1fWFFbX1xZFhYWFgdZWVkHBwdZFFleUVFRXVBcX1tfW1sWFhYWWVkHWVlZFFEKX1tQWQtdXF5ZDFhRXg4JDAlcW1FYXF1RWFAMDlhaDVhcCV4OWl0KDgwLUVgJDFxQCVwKXgsJXgpfC18LWF0WFhYWB1kHWVlZFAsdFhYWFgdZBwdZBxRdWl1fDFEKC0VQWgwJRVlZDQ1FUQleX0UJCVBcXl4ODg4OXl4UW1ldW15YWFgUHBodDRYWFhYHWVlZBwdZBxQ3GBAMDRRbW1gUC1wOUAwKXF9QXVkKUFFYW1sMX19fXVhfWgsJDg1aWVFZXQ5dCwpcXA5aWlhfWgsOXVtbUQwMDlwKDgwNUAtbW1INESJYCT9ZBAtbOgAKMCkBJwItWic8A10mPA9YJhIlWyUSJlEUHBodDRRbWFg="
+a2 = "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"
+
 
 # a2 = "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"
 # 0III0I00 判断是否通过