文章总结： 这篇文章详细分析了某贝漫画网站的反调试机制和AES加密解密过程。作者通过分析反调试代码，展示了如何绕过检测，并逐步跟踪请求响应的解密流程，最终识别出使用的是AES-CBC-Pkcs7加密算法。文章提供了完整的逆向分析思路和方法，适合初学者学习JS逆向技术。
综合评分： 82
文章分类： 逆向分析,WEB安全,渗透测试

JS逆向 — 某贝漫画逆向分析

utf8

逆向有你

2025年12月5日 09:42
河南

某贝漫画逆向分析

目标网址：
反调试讲解：’aHR0cHM6Ly93d3cubWFuZ2Fjb3B5LmNvbS8=’
请求章节响应解密讲解：上面那个网址随便点进去一个漫画的详情页（这里你可以尝试我上面讲解的过反调试的手段哦）

本文仅供学习交流，因使用本文内容而产生的任何风险及后果，作者不承担任何责任，一起学习吧

学学就好，别攻击别人！！！！！！！！！

文章摘要 and 作者低语

如何分析反调试手段
常规逆向的基本流程和手段
算法还原

反调试讲解

进入当前页面，我们会发现，我们的调试工具被断住了，如下图1所示：

一旦我们放开断点，当前页面就会变成空白页面：

通过图一我们看到，当前堆栈处于loop,那我们不妨把目光看向这个函数。（在当前空白页回退上一页就可以找到了）如下图3：

这里你可以会疑问，欸？utf8(作者)为什么你图一是堆栈的源代码是空白的，而图三不是呢。

如果你注意到了这点，那么恭喜你你有一个善于观察的眼睛。这里是因为我们打开开发者工具的时机导致的，我们一开始是先打开网址后打开开发者工具，这导致当前网址的部分文件我们没有缓存，也就是没有被开发者工具捕获。我们在空白页回退，让这个页面资源重新加载，开发者工具又重新捕获到了资源文件，所有就有了，这是一个常见的坑

言归正传，让我们来逐行详细分析这个函数：

&nbsp;复制代码&nbsp;隐藏代码
// 立即执行函数，创建一个私有作用域防止变量泄漏到全局
((function&nbsp;() {
&nbsp; &nbsp;&nbsp;// 存放检测到调试行为后要调用的回调函数
&nbsp; &nbsp;&nbsp;var&nbsp;callbacks = [],

&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 设置调试中断允许的最大时间，单位为毫秒
&nbsp; &nbsp; &nbsp; &nbsp; timeLimit =&nbsp;50,

&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 标记是否已经触发过一次调试检测
&nbsp; &nbsp; &nbsp; &nbsp; open =&nbsp;false;

&nbsp; &nbsp;&nbsp;// 每 1 毫秒执行一次 loop 函数，用于反调试检测
&nbsp; &nbsp;&nbsp;setInterval(loop,&nbsp;1);

&nbsp; &nbsp;&nbsp;// 返回一个监听器注册接口
&nbsp; &nbsp;&nbsp;return&nbsp;{
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 提供注册回调的功能，外部可以添加要在调试时执行的函数
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;addListener:&nbsp;function&nbsp;(fn) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; callbacks.push(fn);
&nbsp; &nbsp; &nbsp; &nbsp; },

&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 提供移除回调的功能
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;cancleListenr:&nbsp;function&nbsp;(fn) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; callbacks = callbacks.filter(function&nbsp;(v) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;return&nbsp;v !== fn;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; });
&nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; };

&nbsp; &nbsp;&nbsp;// 反调试核心检测函数
&nbsp; &nbsp;&nbsp;functionloop() {
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 获取当前时间戳
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;startTime =&nbsp;newDate();

&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 如果调试工具开启，debugger 会中断此处执行
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;debugger;

&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 判断执行完 debugger 后消耗的时间是否超过限制
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;if&nbsp;(newDate() - startTime > timeLimit) {

&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 如果是第一次检测到调试器
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;if&nbsp;(!open) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 执行所有注册的反调试回调函数
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; callbacks.forEach(function&nbsp;(fn) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; fn.call(null);
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; });
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }

&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 设置标志为 true，防止回调多次调用
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open =&nbsp;true;

&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 通常是跳转页面到 about:blank，使页面内容彻底消失
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;aboutBlank();

&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp;else&nbsp;{
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 如果没有检测到调试器，重置标志
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open =&nbsp;false;
&nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; }

})())
// 注册一个监听器函数：在检测到调试器时执行 aboutBlank()
.addListener(function&nbsp;() {
&nbsp; &nbsp;&nbsp;aboutBlank();&nbsp;// 页面跳转到 about:blank
});

知己知彼，百战不殆。loop是干扰我们调试的关键函数，setInterval又是反复监控。我们首先想到的方法就是直接替换文件，我们将loop函数和setInterval函数给注释掉不就行了，我们尝试一下，发现该方法完全可行。

到这里我们就通过了反调试（其实这个通过手段有特别多，你还可以直接hook函数，关键点在于你对反调试代码的理解，我上面对这个代码分析的很详细，相信你可以也可以想出其他的方法）。

请求章节响应解密讲解

目标接口： comicdetail

定位接口之后，简单查看，如下图：

直接查看请求调用堆栈，如下图：

看到了我们的老朋友，eval,这个是逆向加密常用的手段。小萌新可以先记一下小本本。

为了从头展示逆向过程，我们直接进入第一个堆栈，打上断点（xhr断点同理），如下图：

欸，这代码不是人看的，那么恭喜你找到加解密的入口了(代码越抽象，越是在掩饰什么)，这一看就是个ob混淆，给大家讲一下这种混淆的特点：

基于数组映射字符串表的字符串混淆（Array mapping obfuscation）

字符串集中存储：所有字符串（变量名、类名、接口路径、HTML代码等）统一存储在一个数组中（如 var _0xabc = […]），避免明文出现。
索引访问替代明文：所有原始字符串通过一个映射函数（如 _0xfunc(index)）来访问，实现对原始代码的“抽象化引用”。
配合数组洗牌：通过 shift()/push() 组合“旋转”数组位置，使索引顺序与原始定义不一致，进一步提升混淆性。

如果你会ast那么你可以先还原这个代码，后续调试就会简单方便很多。我这里不展示ast方法直接分析(~~绝对不是我不会~~)

详细逆向过程

逆向，首先我们要找准我们的切入点是什么？–> 这个是核心思路，这个也是后续你快速分析，快速定位的方法

本次案例我们不讲快速定位，老老实实，采用笨方法，一步步跟，主要是掌握跟栈，技巧是你基本功熟练之后自我总结的，我现在直接告诉你快速定位你是不利于你学习的。关注核心在于入参口

最初断点，断下信息如下：

要记住一点，响应体解密必然是在请求发出之后才开始(很合理)。所以，在这个断点下，我们老老实实一步步跟(F9)。欸，突然我们发现一个关键点！如下：

这个key，有可能是是解密的关键一步，也可能不是，这个时候你可以选择保存一下这个常量，万一后面遇到了呢，复制一下(你可以把调试过程中所有你认为的关键参数记下来)，接着老老实实的跟(F9)

功夫不负有心人啊，终于我们又进入这个混淆文件：

但是还是没有看到入参，不急，接着(F9)，欸，好像看到了希望

在这里打上断点记录一下，我们接着F9,看到入参进入函数：

跟进去，我们的响应参数进入到这个函数，代码如下：

&nbsp;复制代码&nbsp;隐藏代码

function_0x468bc8(_0x5d7669) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;0xc8&nbsp;!== _0x5d7669['code'] ? (_0x48fc84['innerText'] =&nbsp;'加載失敗，點擊重新加載',
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'加載失敗，點擊重新加載'&nbsp;=== _0x48fc84[_0x4e8a('0x54')] ? _0x48fc84['onclick'] =&nbsp;function() {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;_0x45ef84()
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : _0x48fc84[_0x4e8a('0x2')] =&nbsp;function() {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;returnnull
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ) :&nbsp;function(_0x55a4d4) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x2e033c =&nbsp;_0x522e0c(0x6)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x5e1413 = _0x55a4d4
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x5bf283 = _0x5e1413[_0x4e8a('0x21')](0x0,&nbsp;0x10)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x37be9a = _0x5e1413[_0x4e8a('0x21')](0x10, _0x5e1413[_0x4e8a('0x11')])
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x3def88 = _0x2e033c[_0x4e8a('0x59')][_0x4e8a('0x8')][_0x4e8a('0x5c')](dio)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0xee2319 = _0x2e033c[_0x4e8a('0x59')][_0x4e8a('0x8')]['parse'](_0x5bf283)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x2fa5a9 =&nbsp;function(_0x5f5c34) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x2f96b7 = _0x2e033c[_0x4e8a('0x59')][_0x4e8a('0x39')][_0x4e8a('0x5c')](_0x5f5c34)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x57ae89 = _0x2e033c[_0x4e8a('0x59')][_0x4e8a('0x0')]['stringify'](_0x2f96b7);
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;return&nbsp;_0x2e033c[_0x4e8a('0x66')]['decrypt'](_0x57ae89, _0x3def88, {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'iv': _0xee2319,
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'mode': _0x2e033c['mode'][_0x4e8a('0x28')],
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'padding': _0x2e033c[_0x4e8a('0x61')]['Pkcs7']
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; })[_0x4e8a('0x6')](_0x2e033c['enc']['Utf8'])[_0x4e8a('0x6')]()
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }(_0x37be9a)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x14dbee =&nbsp;JSON[_0x4e8a('0x5c')](_0x2fa5a9)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x4a81be =&nbsp;document[_0x4e8a('0x27')](_0x4e8a('0x34'))
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x33c653 = (window['location'][_0x4e8a('0xb')],
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;document[_0x4e8a('0x27')]('.wargin'));
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;void0x0;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x11cda6 = _0x14dbee['build']
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x2e5e7f = _0x14dbee[_0x4e8a('0x3')]
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0xae5052 = {}
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x1ba770 =&nbsp;function_0x4f55e7(_0x207933) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x32bc38 = _0x2e5e7f[_0x207933]
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x5a1440 = _0x32bc38[_0x4e8a('0x68')]
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x42793b = []
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x586df9 = []
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0xf23d1 = [];
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x5a1440['forEach'](function(_0x2854c5) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;switch&nbsp;(_0x2854c5[_0x4e8a('0x26')]) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;case0x1:
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x42793b[_0x4e8a('0x53')](_0x2854c5);
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;break;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;case0x2:
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x586df9[_0x4e8a('0x53')](_0x2854c5);
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;break;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;case0x3:
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0xf23d1[_0x4e8a('0x53')](_0x2854c5)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0xae5052[_0x207933] = {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'groups': {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'全部': _0x5a1440,
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'話': _0x42793b,
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'卷': _0x586df9,
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'番外': _0xf23d1
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; },
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'path_word': _0x32bc38[_0x4e8a('0x3b')],
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'name': _0x32bc38[_0x4e8a('0x40')],
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'last_chapter': _0x32bc38[_0x4e8a('0x63')]
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; };
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;for&nbsp;(var&nbsp;_0x20e11d&nbsp;in&nbsp;_0x2e5e7f) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;_0x1ba770(_0x20e11d)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;for&nbsp;(var&nbsp;_0x5eb3f7&nbsp;in&nbsp;_0xae5052) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x9cee20 = !0x0
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x4ef6c0 =&nbsp;document[_0x4e8a('0x5b')](_0x4e8a('0x1d'));
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x4ef6c0[_0x4e8a('0x5f')] = _0xae5052[_0x5eb3f7]['name'],
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x4a81be[_0x4e8a('0x24')](_0x4ef6c0);
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x19b0b0 = _0xae5052[_0x5eb3f7]
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0xebab21 =&nbsp;document[_0x4e8a('0x5b')](_0x4e8a('0x32'));
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0xebab21[_0x4e8a('0x48')] =&nbsp;'table-default';
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x5da518 =&nbsp;document[_0x4e8a('0x5b')]('div');
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x5da518[_0x4e8a('0x48')] =&nbsp;_0x4e8a('0x49');
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x5957d3 =&nbsp;document['createElement']('ul');
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x5957d3[_0x4e8a('0x48')] =&nbsp;_0x4e8a('0x46'),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x5957d3[_0x4e8a('0x3a')](_0x4e8a('0x4b'),&nbsp;'tablist');
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x4ab2c2 =&nbsp;''
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x3331db =&nbsp;document[_0x4e8a('0x5b')](_0x4e8a('0x32'));
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3331db[_0x4e8a('0x48')] =&nbsp;_0x4e8a('0x14');
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x2042a5 =&nbsp;document[_0x4e8a('0x5b')](_0x4e8a('0x32'));
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x2042a5[_0x4e8a('0x48')] =&nbsp;'tab-content';
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;for&nbsp;(var&nbsp;_0x26df19&nbsp;in&nbsp;_0x19b0b0[_0x4e8a('0x3')]) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x33324b = _0x19b0b0[_0x4e8a('0x3')][_0x26df19]
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x3538e9 =&nbsp;document['createElement'](_0x4e8a('0x32'));
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3538e9[_0x4e8a('0x3a')]('id', _0x19b0b0[_0x4e8a('0x3b')] +&nbsp;''&nbsp;+ _0x26df19),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3538e9[_0x4e8a('0x3a')](_0x4e8a('0x4b'),&nbsp;_0x4e8a('0x3d'));
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x5670ce =&nbsp;document[_0x4e8a('0x5b')]('ul')
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x2bd24c =&nbsp;'';
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;for&nbsp;(var&nbsp;_0x33af50 =&nbsp;0x0; _0x33af50 < _0x33324b[_0x4e8a('0x11')]; _0x33af50++) {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x2bd24c +=&nbsp;_0x4e8a('0x51') + _0x11cda6[_0x4e8a('0x3b')] +&nbsp;_0x4e8a('0x38') + _0x33324b[_0x33af50]['id'] +&nbsp;_0x4e8a('0x1') + _0x33324b[_0x33af50]['name'] +&nbsp;_0x4e8a('0xe') + _0x33324b[_0x33af50][_0x4e8a('0x40')] +&nbsp;'</li></a>'
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x5670ce[_0x4e8a('0x5f')] = _0x2bd24c;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x219a7a =&nbsp;document['createElement']('ul');
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x219a7a[_0x4e8a('0x48')] =&nbsp;_0x4e8a('0x7'),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x219a7a['innerHTML'] =&nbsp;_0x4e8a('0x3e'),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x9cee20 ? (_0x4ab2c2 +=&nbsp;_0x4e8a('0x3c') + _0x19b0b0[_0x4e8a('0x3b')] + _0x26df19 +&nbsp;_0x4e8a('0x36') + _0x26df19 +&nbsp;'</a></li>',
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3538e9[_0x4e8a('0x48')] =&nbsp;_0x4e8a('0x1e'),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3538e9[_0x4e8a('0x24')](_0x5670ce),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x2042a5[_0x4e8a('0x24')](_0x3538e9),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3538e9[_0x4e8a('0x24')](_0x219a7a),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x9cee20 = !0x1) : (_0x3538e9['className'] =&nbsp;_0x4e8a('0x1f'),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;0x0&nbsp;!= _0x19b0b0[_0x4e8a('0x3')][_0x26df19]['length'] ? (_0x4ab2c2 +=&nbsp;_0x4e8a('0x5') + _0x19b0b0[_0x4e8a('0x3b')] + _0x26df19 +&nbsp;_0x4e8a('0x36') + _0x26df19 +&nbsp;'</a></li>',
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3538e9['appendChild'](_0x5670ce),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x2042a5[_0x4e8a('0x24')](_0x3538e9),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3538e9[_0x4e8a('0x24')](_0x219a7a)) : _0x4ab2c2 +=&nbsp;'<li\x20class=\x22nav-item\x22><a\x20class=\x22nav-link\x20disabled\x22\x20\x20data-toggle=\x22tab\x22\x20href=\x22#'&nbsp;+ _0x19b0b0['path_word'] + _0x26df19 +&nbsp;_0x4e8a('0x36') + _0x26df19 +&nbsp;_0x4e8a('0x37'))
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x2eae1c =&nbsp;document['createElement']('div');
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x2eae1c['className'] =&nbsp;_0x4e8a('0x52'),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x19b0b0[_0x4e8a('0x63')] && (_0x2eae1c[_0x4e8a('0x5f')] =&nbsp;_0x4e8a('0x15') + _0x19b0b0[_0x4e8a('0x63')][_0x4e8a('0x4a')] +&nbsp;_0x4e8a('0x38') + _0x19b0b0['last_chapter']['uuid'] +&nbsp;_0x4e8a('0x2e') + _0x19b0b0[_0x4e8a('0x63')][_0x4e8a('0x40')] +&nbsp;'</a><span>更新時間：</span><span>'&nbsp;+ _0x19b0b0[_0x4e8a('0x63')]['datetime_created'] +&nbsp;_0x4e8a('0x22')),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x5957d3[_0x4e8a('0x5f')] = _0x4ab2c2,
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x3331db[_0x4e8a('0x24')](_0x2042a5),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x5da518[_0x4e8a('0x24')](_0x5957d3),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x5da518[_0x4e8a('0x24')](_0x2eae1c),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0xebab21[_0x4e8a('0x24')](_0x5da518),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0xebab21['appendChild'](_0x3331db),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x4a81be[_0x4e8a('0x24')](_0xebab21)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;clickpage(),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;activeLink(),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;void0x0,
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x4a81be[_0x4e8a('0x4f')](_0x33c653);
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x49f9ae =&nbsp;0x0
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x437599 =&nbsp;setInterval(function() {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x49f9ae++;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x4866cb =&nbsp;document[_0x4e8a('0x27')](_0x4e8a('0x1a'));
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; _0x4866cb && _0x4866cb[_0x4e8a('0x4c')](_0x4e8a('0x60'))[_0x4e8a('0x11')] >&nbsp;0x0&nbsp;&& (document[_0x4e8a('0x27')](_0x4e8a('0x13'))[_0x4e8a('0x57')](),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;clearInterval(_0x437599)),
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;0xa&nbsp;=== _0x49f9ae &&&nbsp;clearInterval(_0x437599)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; },&nbsp;0x3e8)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }(_0x5d7669[_0x4e8a('0x5d')])
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; },

前面是一个很长的三元表达式：

&nbsp;复制代码&nbsp;隐藏代码
0xc8&nbsp;!== _0x5d7669['code'] ? (_0x48fc84['innerText'] =&nbsp;'加載失敗，點擊重新加載',
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'加載失敗，點擊重新加載'&nbsp;=== _0x48fc84[_0x4e8a('0x54')] ? _0x48fc84['onclick'] =&nbsp;function() {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;_0x45ef84()
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : _0x48fc84[_0x4e8a('0x2')] =&nbsp;function() {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;returnnull
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ) :&nbsp;function(_0x55a4d4) {在这里哦}

我们调试发现，加密参数进入了这个函数，所以聚焦点在function(_0x55a4d4)里面，其实到了这里基本上逆向就很明确了，这里你可以直接补环境，也可以直接代码。但是我想带你一步步看看，这里到底做了什么。

我配合着代码一起讲解吧：

&nbsp;复制代码&nbsp;隐藏代码
function(_0x55a4d4) {
&nbsp; &nbsp;&nbsp;var&nbsp;_0x2e033c =&nbsp;_0x522e0c(0x6) &nbsp;//初始化加密函数对象
&nbsp; &nbsp; &nbsp; &nbsp; , _0x5e1413 = _0x55a4d4 &nbsp;// 入参
&nbsp; &nbsp; &nbsp; &nbsp; , _0x5bf283 = _0x5e1413['substring'](0,&nbsp;16) &nbsp;// 字符串操作
&nbsp; &nbsp; &nbsp; &nbsp; , _0x37be9a = _0x5e1413['substring'](16, _0x5e1413['length']) &nbsp;// 字符串操作
&nbsp; &nbsp; &nbsp; &nbsp; , _0x3def88 = _0x2e033c['enc']['Utf8']['parse'](dio) &nbsp;// dio 是密钥
&nbsp; &nbsp; &nbsp; &nbsp; , _0xee2319 = _0x2e033c['enc']['Utf8']['parse'](_0x5bf283)
&nbsp; &nbsp; &nbsp; &nbsp; , _0x2fa5a9 =&nbsp;function(_0x5f5c34) {
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;var&nbsp;_0x2f96b7 = _0x2e033c['enc']['Hex']['parse'](_0x5f5c34)
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; , _0x57ae89 = _0x2e033c['enc']['Base64']['stringify'](_0x2f96b7);
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;// 这里我留点空间给你思考。
&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;return&nbsp;_0x2e033c['AES']['decrypt'](_0x57ae89, _0x3def88, {
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'iv': _0xee2319,
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'mode': _0x2e033c['mode']['CBC'],
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;'padding': _0x2e033c['pad']['Pkcs7']
&nbsp; &nbsp; &nbsp; &nbsp; })['toString'](_0x2e033c['enc']['Utf8'])['toString']()
&nbsp; &nbsp; }(_0x37be9a)//后面被我截断了，至于为什么你动动手就知道了
&nbsp; &nbsp; }

很清晰了，我们知道这就是一个AES加密，同时模式是CBC,填充是Pkcs7，那么我们随便选择一个解密网址去验证一下我们的想法是否正确？

逆向成功，接下来你可以直接让ai给你写出还原代码。他详细图片的加密也是这个流程。这里就不讲了。

小结

这个网址的整体难度不高，属于是入门级别，但是又包含了很多知识点，补环境，webpack，标准算法,轻微混淆。希望看完本篇文章之后，你可以自己去尝试一下，！！！严禁网络攻击！！！，只有自己做一遍才知道自己是否掌握。为什么说是入门级别呢，因为这个定位确实难度不大。我跟堆栈是为了让大伙更加清楚的了解到底是怎么来的，然后你自己去总结经验，慢慢的，你也就可以快速定位了。初学者我还是强烈建议好好跟堆栈，弄清楚每一步才是学习。

作者骚话

一个礼拜差不多更新了3篇(其实有不少存货，但是写文章确实不容易，可能你认为很简单，对别人来说很复杂)，我希望文章确实可以帮助到大家打开思路(我不会放成品的)，如果有不足的地方欢迎大佬们指出。看不懂不怕，多练多问，谁都是从小菜鸡过来的。后续更新看看有什么好玩的网址吧(当然你有好玩的也可以分享给我)，(头部的几家加密不太敢写后面最多提供一下思路)。看看能不能坚持学习，至少每个月更新一篇吧(画大饼ing)，后续可能更新一个protobuf的协议逆向

·今日推荐·

本文内容来自网络，如有侵权请联系删除

免责声明：

本文所载程序、技术方法仅面向合法合规的安全研究与教学场景，旨在提升网络安全防护能力，具有明确的技术研究属性。

任何单位或个人未经授权，将本文内容用于攻击、破坏等非法用途的，由此引发的全部法律责任、民事赔偿及连带责任，均由行为人独立承担，本站不承担任何连带责任。

本站内容均为技术交流与知识分享目的发布，若存在版权侵权或其他异议，请通过邮件联系处理，具体联系方式可点击页面上方的联系我。

本文转载自：逆向有你 utf8《JS逆向 — 某贝漫画逆向分析》

Tags: WEB安全渗透测试逆向分析

你可能错过

Silverseal：一个在开机流程中「加载 rootkit」的 Linux UEFI bootkit

WebBridge 官方插件上线两个月，我的 AI 军师还在给我造同款轮子

全球网络安全速递微软974个漏洞补丁反致故障紧急补救

OpenAI智能代理集群牵涉GemStuffer攻击活动中3022个恶意RubyGems软件包