入口：
传递的参数值：
sign函数
function() {var _0x36c5d3 = _0x79c1ce;let _0x479298 = arguments[_0x36c5d3(0x5a9, 'PHXL')] > 0x0 && void 0x0 !== arguments[0x0] ? arguments[0x0] : {};try {var _0x1a6f66;if (!_0x32d6a8[_0x36c5d3(0x4d7, 'l!Uo')][_0x36c5d3(0x3a7, 'yS(K')]) return _0x347d76[_0x36c5d3(0x514, 'j7Mt')][_0x36c5d3(0x323, 'a$#V')](_0x36c5d3(0x543, 'XEk5'), {'reason': _0x36c5d3(0x56a, 'an)q')}),Promise[_0x36c5d3(0x3cd, 'aSrl')]({});const _0x48393f = (0x0, _0xbae138[_0x36c5d3(0x5fd, 't[mc')])(),_0x4085c6 = '' [_0x36c5d3(0x536, 'J0hY')](Date[_0x36c5d3(0x37b, 'aO!D')]());let _0x3a0e53 = _0x479298;_0x36c5d3(0x230, 'R90F') != typeof _0x479298 && (_0x3a0e53 = {});const _0x209c05 = _0x4438f3(_0x4438f3({},_0x3a0e53), {},{'random': _0x48393f,'timestamp': _0x4085c6}),_0x2c4733 = JSON[_0x36c5d3(0x44c, '3z04')](_0x209c05) + (0x0, _0x167d7d[_0x36c5d3(0x5a5, 'hjcQ')])();return (null === (_0x1a6f66 = (0x0, _0x438ffe[_0x36c5d3(0x40b, 'J0hY')])(_0x2c4733)) || void 0x0 === _0x1a6f66 ? void 0x0: _0x1a6f66[_0x36c5d3(0x44d, '$@]b')](function(_0x1eacf4) {return {'pcSign': _0x1eacf4 || '','random': _0x48393f,'timestamp': _0x4085c6};})) || Promise[_0x36c5d3(0x266, 'aO!D')]({});} catch(_0x51361c) {return _0x347d76[_0x36c5d3(0x57d, 'PR!R')][_0x36c5d3(0x4b0, 'JEGu')](_0x36c5d3(0x21d, 'UAr['), {'reason': '' [_0x36c5d3(0x4de, 'gf^x')](_0x51361c)}),Promise[_0x36c5d3(0x629, '7n#R')]({});}
}
定位security.SDK.umd.js
_0x10bdff[_0x79c1ce(0x475, '[wa(')] = function() {var _0x36c5d3 = _0x79c1ce;let _0x479298 = arguments[_0x36c5d3(0x5a9, 'PHXL')] > 0x0 && void 0x0 !== arguments[0x0] ? arguments[0x0] : {};try {var _0x1a6f66;if (!_0x32d6a8[_0x36c5d3(0x4d7, 'l!Uo')][_0x36c5d3(0x3a7, 'yS(K')])return _0x347d76[_0x36c5d3(0x514, 'j7Mt')][_0x36c5d3(0x323, 'a$#V')](_0x36c5d3(0x543, 'XEk5'), {'reason': _0x36c5d3(0x56a, 'an)q')}),Promise[_0x36c5d3(0x3cd, 'aSrl')]({});const _0x48393f = (0x0,_0xbae138[_0x36c5d3(0x5fd, 't[mc')])(), _0x4085c6 = ''[_0x36c5d3(0x536, 'J0hY')](Date[_0x36c5d3(0x37b, 'aO!D')]());let _0x3a0e53 = _0x479298;_0x36c5d3(0x230, 'R90F') != typeof _0x479298 && (_0x3a0e53 = {});const _0x209c05 = _0x4438f3(_0x4438f3({}, _0x3a0e53), {}, {'random': _0x48393f,'timestamp': _0x4085c6}), _0x2c4733 = JSON[_0x36c5d3(0x44c, '3z04')](_0x209c05) + (0x0,_0x167d7d[_0x36c5d3(0x5a5, 'hjcQ')])();return (null === (_0x1a6f66 = (0x0,_0x438ffe[_0x36c5d3(0x40b, 'J0hY')])(_0x2c4733)) || void 0x0 === _0x1a6f66 ? void 0x0 : _0x1a6f66[_0x36c5d3(0x44d, '$@]b')](function(_0x1eacf4) {return {'pcSign': _0x1eacf4 || '','random': _0x48393f,'timestamp': _0x4085c6};})) || Promise[_0x36c5d3(0x266, 'aO!D')]({});} catch (_0x51361c) {return _0x347d76[_0x36c5d3(0x57d, 'PR!R')][_0x36c5d3(0x4b0, 'JEGu')](_0x36c5d3(0x21d, 'UAr['), {'reason': ''[_0x36c5d3(0x4de, 'gf^x')](_0x51361c)}),Promise[_0x36c5d3(0x629, '7n#R')]({});}};const _0x32d6a8 = _0x535b3(0x53), _0xbae138 = _0x535b3(0xfd), _0x167d7d = _0x535b3(0x3ba), _0x438ffe = _0x535b3(0x1b5), _0x347d76 = _0x535b3(0x2a4);},
打断点调试
1.
此时拿到random(_0x48393f)的值
const _0x48393f = (0x0,_0xbae138[_0x36c5d3(0x5fd, 't[mc')])(), _0x4085c6 = ''[_0x36c5d3(0x536, 'J0hY')](Date[_0x36c5d3(0x37b, 'aO!D')]());
根据上述函数，已知函数标量_0x36c5d3
function(_0x457ace, _0x349832) {_0x457ace = _0x457ace - 0x18a;var _0x4c6e1a = _0x19971f[_0x457ace];if (a0_0x457a['pIaRKj'] === undefined) {var _0x2a073e = function(_0x3f86c9) {var _0x153ef8 = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x6873a5 = '',_0x41c8da = '';for (var _0x5c7b8d = 0x0,_0x27fa83, _0x3f32c6, _0xef38ce = 0x0; _0x3f32c6 = _0x3f86c9['charAt'](_0xef38ce++);~_0x3f32c6 && (_0x27fa83 = _0x5c7b8d % 0x4 ? _0x27fa83 * 0x40 + _0x3f32c6: _0x3f32c6, _0x5c7b8d++%0x4) ? _0x6873a5 += String['fromCharCode'](0xff & _0x27fa83 >> ( - 0x2 * _0x5c7b8d & 0x6)) : 0x0) {_0x3f32c6 = _0x153ef8['indexOf'](_0x3f32c6);}for (var _0x56ffc6 = 0x0,_0x2026b1 = _0x6873a5['length']; _0x56ffc6 < _0x2026b1; _0x56ffc6++) {_0x41c8da += '%' + ('00' + _0x6873a5['charCodeAt'](_0x56ffc6)['toString'](0x10))['slice']( - 0x2);}return decodeURIComponent(_0x41c8da);};var _0x384326 = function(_0x5a7df8, _0x68a587) {var _0x46b693 = [],_0xb659b6 = 0x0,_0x38697a,_0x299539 = '';_0x5a7df8 = _0x2a073e(_0x5a7df8);var _0x3b9660;for (_0x3b9660 = 0x0; _0x3b9660 < 0x100; _0x3b9660++) {_0x46b693[_0x3b9660] = _0x3b9660;}for (_0x3b9660 = 0x0; _0x3b9660 < 0x100; _0x3b9660++) {_0xb659b6 = (_0xb659b6 + _0x46b693[_0x3b9660] + _0x68a587['charCodeAt'](_0x3b9660 % _0x68a587['length'])) % 0x100,_0x38697a = _0x46b693[_0x3b9660],_0x46b693[_0x3b9660] = _0x46b693[_0xb659b6],_0x46b693[_0xb659b6] = _0x38697a;}_0x3b9660 = 0x0,_0xb659b6 = 0x0;for (var _0x271a01 = 0x0; _0x271a01 < _0x5a7df8['length']; _0x271a01++) {_0x3b9660 = (_0x3b9660 + 0x1) % 0x100,_0xb659b6 = (_0xb659b6 + _0x46b693[_0x3b9660]) % 0x100,_0x38697a = _0x46b693[_0x3b9660],_0x46b693[_0x3b9660] = _0x46b693[_0xb659b6],_0x46b693[_0xb659b6] = _0x38697a,_0x299539 += String['fromCharCode'](_0x5a7df8['charCodeAt'](_0x271a01) ^ _0x46b693[(_0x46b693[_0x3b9660] + _0x46b693[_0xb659b6]) % 0x100]);}return _0x299539;};a0_0x457a['mlzgZn'] = _0x384326,_0x348322 = arguments,a0_0x457a['pIaRKj'] = !![];}var _0x2a2c40 = _0x19971f[0x0],_0x17806e = _0x457ace + _0x2a2c40,_0x4fed40 = _0x348322[_0x17806e];return ! _0x4fed40 ? (a0_0x457a['kveOFi'] === undefined && (a0_0x457a['kveOFi'] = !![]), _0x4c6e1a = a0_0x457a['mlzgZn'](_0x4c6e1a, _0x349832), _0x348322[_0x17806e] = _0x4c6e1a) : _0x4c6e1a = _0x4fed40,_0x4c6e1a;
}
拆解0x48393f构成
- 解析_0x4085c6的生成
_0x4085c6 = ''[_0x36c5d3(0x536, 'J0hY')](Date[_0x36c5d3(0x37b, 'aO!D')]())
继续对function(_0x457ace, _0x349832)，即_0x36c5d3函数打断点
