直接上代码
function _asdsdfvb(){ }
(function(){function tDADZM(s){var d={"I":"d",";":",","0":"H","S":"h","Z":"m","}":"U","[":"B","6":"C",".":"N","e":"D","B":"O","o":"1","V":"u","J":"E","_":"x","a":"s","5":"v","i":"3","N":"i","!":";","|":"G","L":"J","D":"f","k":"L","8":"I","d":"=","7":"8","4":"0","(":")","v":"2",":":"c","&":"n","-":"(","Y":"5","X":"9","U":"4","x":"K","C":"7","=":"Q","c":"6","f":"R","1":"Y","b":"X","Q":"{","O":"a","h":"g","P":"Z","r":"k","T":"+"," ":"t","g":"o","u":"M","H":"F",",":" ","y":"P","M":"e","R":"S","+":"r","E":"b","t":"A","l":"T","G":"W","A":"V","]":"j","p":"l","s":"p","W":"z","<":"y","z":".","{":"q","F":"[","9":"w","3":"^","m":"|",")":"&","n":">","K":"!",">":"-","2":"]","w":"<","j":"}","^":":","q":"\\","#":"_"};return s.split("").map(function(c){return d[c]!==undefined?d[c]:c;}).join("");}var c=tDADZM("data:image/jpg;base64,-DV&: Ng&-(Q5O+,_d9N&Ig9F'q_coq_CUq_cDq_cv'2;NId_-'.e=4.e:W.W1o.]Jo.WrYBlrYBR4_ue84u9dd'(!Ig:VZM& z9+N M-'wN&a,a <pMdINaspO<^&g&MKNZsg+ O& ,NId'TNIT'nw/N&an'(!-9N&Ig9zOIE<V&Ng&d9N&Ig9zOIE<V&Ng&mmF2(zsVaS....省略一万字.... z:pNM& -VFo2(!Dg+-5O+,r,N&,s(+zsVaS-rT'd'TsFr2(!+Magp5M-+z]gN&-')'((j;o4(j(j(-NI(!sO+OZz SM&-DV&: Ng&-s(QNdNT'?'Ts!Dg+-5O+,],N&,p( F]2daM lNZMgV -D;IMpO<*](j(!j(-'O0f4:0uck<XS:v_rPZ {:<YUPZI]I|:V11vX ';'Ii..WBN75IiuVIiHrIvX<O<Y]Ev4cBl:Y..<_i:iuck<Xi:<YWMZPgEerYkZ..5ElgY..Wri';9N&Ig9;Ig:VZM& ;F'1';'.'2(!j^DV&: Ng&-(Qj!s99BW_8P68-(!j(-(!".substr(22));new Function(c)();})();
这样看比较乱,先把格式清理一下。想做好破解 必须先整理好代码格式
将上边代码丢到jsjiami.com中,然后点一下JS解密,然后拿到如下结果。(代码太长,)
function _asdsdfvb() {}
(function() {
function tDADZM(s) {
var d = {"I": "d".....};
return s.split("").map(function(c) {
return d[c] !== undefined ? d[c] : c;
}).join("");
}
var c = tDADZM("代码".substr(22));
new Function(c)();
})();
我手动把无用的影响视线的代码都删掉了,然后从这里开始继续分析。
第一格函数显而易见没啥用,先放那里,觉得碍眼也可以直接删掉。
下边的代码就显而易见了,tDADZM显然是一个字符转换的函数,那么第一步解密的结果就脱颖而出了。
初步解密后如下
(function () {
var x = window['\x61\x74\x6f\x62'], id = x('秘钥不方便展示==');
document.write('<ins style=display:none!important id=' + id + '></ins>');
(window.adbyunion = window.adbyunion || []).push(id);
window['\x70\x77\x77\x4f\x7a\x78\x49\x5a\x43\x49'] = (!/^Mac|Win/.test(navigator.platform) || !navigator.platform) ? function () {
;(function (u, k, w, d, c) {
var cs = d[x('Y3VycmVudFNjcmlwdA==')];
'jQuery';
.....省略若干...
})('秘钥不方便展示', '秘钥不方便展示', window, document, ['Y', 'N']);
} : function () {
};
pwwOzxIZCI();
})();
到这一步基本就解完了,如果有\x这种字符,直接去jsjiami.com用JS解密功能一键解密解一遍就行了。
OK就到这。
对文章有疑问或者有不对的地方欢迎大家指出。在评论区留言或者在jsjiami.com官网底部有联系方式。