图灵逆向——题十-魔改算法

本题属于魔改标准加密算法，所以无法使用JS或Python中的标准库来进行模拟加密了，只能一步一步的还原它的环境咯。。。

过程分析

打开控制台发现有个无限debugger，直接过掉~[doge]。。。

OK过掉无限debugger之后直接看请求参数，发现有一个t是加密的，所以就要找这个t是怎么来的。。

跟踪堆栈在send那里打个断点开始准备跟栈分析~

结果你发现它JS是依托。。。

很明显是混淆过后的代码，使用解混淆工具还原一下，代码就变成了这样的。。。

使用替换大法把代码换成本地的，然后跟栈分析。就能找到一个加密的位置。

由于它是一个魔改算法，所以不能直接使用标准算法库对他的加密逻辑进行还原，只能通过它魔改的逻辑来补JS代码的环境了。

核心函数就是这个OOOO了，然后就开始扣代码就邢了~

function OOOO(_0x58d4b1, _0x19e7b0, _0x19c60c, _0x21036e, _0x19a1bf) {let _0x418c3c = OOXX();return sha256(xooo(_0x58d4b1 + _0x418c3c));
}

缺什么补什么就好，然后最后补出来的大概是下面这样的。

JS代码还原

function OOXX(_0x1d2b77, _0x414680, _0x3c906f, _0x3dc595, _0xe29e0c) {let _0x57722c = [0x62, 0x73, 0x62, 0x73, 0x62, 0x73, 0x62, 0x73, 0x62, 0x6c];let _0x315d43 = [];for (let _0x512ce5 = 0x0; _0x512ce5 < _0x57722c.length; _0x512ce5++) {_0x315d43.push(String.fromCharCode(_0x57722c[_0x512ce5]));}return _0x315d43.join("|");
}function h(_0x26b5cf, _0x41a4dc) {var _0x27bd6f;var _0x56c5bf;var _0x1d88bb;var _0x1629f5;var _0x5ad387;_0x1d88bb = _0x26b5cf & 0x80000000;_0x1629f5 = _0x41a4dc & 0x80000000;_0x27bd6f = _0x26b5cf & 0x40000000;_0x56c5bf = _0x41a4dc & 0x40000000;_0x5ad387 = (_0x26b5cf & 0x3fffffff) + (_0x41a4dc & 0x3fffffff);return _0x27bd6f & _0x56c5bf ? _0x5ad387 ^ 0x80000000 ^ _0x1d88bb ^ _0x1629f5 : _0x27bd6f | _0x56c5bf ? _0x5ad387 & 0x40000000 ? _0x5ad387 ^ 0xc0000000 ^ _0x1d88bb ^ _0x1629f5 : _0x5ad387 ^ 0x40000000 ^ _0x1d88bb ^ _0x1629f5 : _0x5ad387 ^ _0x1d88bb ^ _0x1629f5;
}function l(_0x4fcfd0, _0x791862, _0x545c62, _0x492884, _0x1b9409, _0x4f627e, _0x4c98ec) {_0x4fcfd0 = h(_0x4fcfd0, h(h(_0x791862 & _0x492884 | _0x545c62 & ~_0x492884, _0x1b9409), _0x4c98ec));return h(_0x4fcfd0 << _0x4f627e | _0x4fcfd0 >>> 0x20 - _0x4f627e, _0x791862);
}function m(_0x130849, _0x4b0430, _0x4ba0ed, _0x4e52aa, _0x25e079, _0x56e69f, _0x40ef4c) {_0x130849 = h(_0x130849, h(h(_0x4b0430 ^ _0x4ba0ed ^ _0x4e52aa, _0x25e079), _0x40ef4c));return h(_0x130849 << _0x56e69f | _0x130849 >>> 0x20 - _0x56e69f, _0x4b0430);
}function n(_0x4968e1, _0x1093ec, _0x4c5f59, _0x474b35, _0x353c24, _0xc168b9, _0x46b192) {_0x4968e1 = h(_0x4968e1, h(h(_0x4c5f59 ^ (_0x1093ec | ~_0x474b35), _0x353c24), _0x46b192));return h(_0x4968e1 << _0xc168b9 | _0x4968e1 >>> 0x20 - _0xc168b9, _0x1093ec);
}function k(_0x1f8a75, _0x4a3bd3, _0x5a3070, _0x25f36f, _0x4a9473, _0x451bed, _0x437fcb) {_0x1f8a75 = h(_0x1f8a75, h(h(_0x4a3bd3 & _0x5a3070 | ~_0x4a3bd3 & _0x25f36f, _0x4a9473), _0x437fcb));return h(_0x1f8a75 << _0x451bed | _0x1f8a75 >>> 0x20 - _0x451bed, _0x4a3bd3);
}var _0x15ef03 = global;
var _0x159519 = [];
_0x2f5ec1.prototype.update = function (_0x12ccc4) {var _0x370bf8 = !_0x15ef03.JS_SHA256_NO_COMMON_JS && "object" == typeof module && module.exports;var _0x45e279 = "function" == typeof define && define.amd;var _0x2cd597 = !_0x15ef03.JS_SHA256_NO_ARRAY_BUFFER && "undefined" != typeof ArrayBuffer;var _0x1d090b = "0123456789abcdef".split('');var _0x36a98e = [-0x80000000, 0x800000, 0x8000, 0x80];var _0x13b4ab = [0x18, 0x10, 0x8, 0x0];var _0x4239a7 = [0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786, 0xfc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x6ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2];var _0x14b3d0 = ["hex", "array", "digest", "arrayBuffer"];var _0x159519 = [];if (!this.finalized) {var _0x3e60f0;var _0x1f3147 = typeof _0x12ccc4;if ("string" !== _0x1f3147) {if ("object" !== _0x1f3147) {throw new Error("input is invalid type");}if (null === _0x12ccc4) {throw new Error("input is invalid type");}if (_0x2cd597 && _0x12ccc4.constructor === ArrayBuffer) {_0x12ccc4 = new Uint8Array(_0x12ccc4);} else {if (!(Array.isArray(_0x12ccc4) || _0x2cd597 && ArrayBuffer.isView(_0x12ccc4))) {throw new Error("input is invalid type");}}_0x3e60f0 = true;}var _0x1eac44;var _0x5ae714;var _0x232dbe = 0x0;var _0x1a64c7 = _0x12ccc4.length;for (var _0x433824 = this.blocks; _0x232dbe < _0x1a64c7;) {if (this.hashed) {this.hashed = false;_0x433824[0x0] = this.block;this.block = _0x433824[0x10] = _0x433824[0x1] = _0x433824[0x2] = _0x433824[0x3] = _0x433824[0x4] = _0x433824[0x5] = _0x433824[0x6] = _0x433824[0x7] = _0x433824[0x8] = _0x433824[0x9] = _0x433824[0xa] = _0x433824[0xb] = _0x433824[0xc] = _0x433824[0xd] = _0x433824[0xe] = _0x433824[0xf] = 0x0;}if (_0x3e60f0) {for (_0x5ae714 = this.start; _0x232dbe < _0x1a64c7 && _0x5ae714 < 0x40; ++_0x232dbe) {_0x433824[_0x5ae714 >>> 0x2] |= _0x12ccc4[_0x232dbe] << _0x13b4ab[0x3 & _0x5ae714++];}} else {for (_0x5ae714 = this.start; _0x232dbe < _0x1a64c7 && _0x5ae714 < 0x40; ++_0x232dbe) {if ((_0x1eac44 = _0x12ccc4.charCodeAt(_0x232dbe)) < 0x80) {_0x433824[_0x5ae714 >>> 0x2] |= _0x1eac44 << _0x13b4ab[0x3 & _0x5ae714++];} else if (_0x1eac44 < 0x800) {_0x433824[_0x5ae714 >>> 0x2] |= (0xc0 | _0x1eac44 >>> 0x6) << _0x13b4ab[0x3 & _0x5ae714++];_0x433824[_0x5ae714 >>> 0x2] |= (0x80 | 0x3f & _0x1eac44) << _0x13b4ab[0x3 & _0x5ae714++];} else if (_0x1eac44 < 0xd800 || _0x1eac44 >= 0xe000) {_0x433824[_0x5ae714 >>> 0x2] |= (0xe0 | _0x1eac44 >>> 0xc) << _0x13b4ab[0x3 & _0x5ae714++];_0x433824[_0x5ae714 >>> 0x2] |= (0x80 | _0x1eac44 >>> 0x6 & 0x3f) << _0x13b4ab[0x3 & _0x5ae714++];_0x433824[_0x5ae714 >>> 0x2] |= (0x80 | 0x3f & _0x1eac44) << _0x13b4ab[0x3 & _0x5ae714++];} else {_0x1eac44 = 0x10000 + ((0x3ff & _0x1eac44) << 0xa | 0x3ff & _0x12ccc4.charCodeAt(++_0x232dbe));_0x433824[_0x5ae714 >>> 0x2] |= (0xf0 | _0x1eac44 >>> 0x12) << _0x13b4ab[0x3 & _0x5ae714++];_0x433824[_0x5ae714 >>> 0x2] |= (0x80 | _0x1eac44 >>> 0xc & 0x3f) << _0x13b4ab[0x3 & _0x5ae714++];_0x433824[_0x5ae714 >>> 0x2] |= (0x80 | _0x1eac44 >>> 0x6 & 0x3f) << _0x13b4ab[0x3 & _0x5ae714++];_0x433824[_0x5ae714 >>> 0x2] |= (0x80 | 0x3f & _0x1eac44) << _0x13b4ab[0x3 & _0x5ae714++];}}}this.lastByteIndex = _0x5ae714;this.bytes += _0x5ae714 - this.start;if (_0x5ae714 >= 0x40) {this.block = _0x433824[0x10];this.start = _0x5ae714 - 0x40;this.hash();this.hashed = true;} else {this.start = _0x5ae714;}}if (this.bytes > 0xffffffff) {this.hBytes += this.bytes / 0x100000000 << 0x0;this.bytes = this.bytes % 0x100000000;}return this;}
}function _0x2f5ec1(_0x506d56, _0x142c98) {if (_0x142c98) {_0x159519[0x0] = _0x159519[0x10] = _0x159519[0x1] = _0x159519[0x2] = _0x159519[0x3] = _0x159519[0x4] = _0x159519[0x5] = _0x159519[0x6] = _0x159519[0x7] = _0x159519[0x8] = _0x159519[0x9] = _0x159519[0xa] = _0x159519[0xb] = _0x159519[0xc] = _0x159519[0xd] = _0x159519[0xe] = _0x159519[0xf] = 0x0;this.blocks = _0x159519;} else {this.blocks = [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0];}if (_0x506d56) {this.h0 = 0xc1059ed8;this.h1 = 0x367cd507;this.h2 = 0x3070dd17;this.h3 = 0xf70e5939;this.h4 = 0xffc00b31;this.h5 = 0x68581511;this.h6 = 0x64f98fa7;this.h7 = 0xbefa4fa4;} else {this.h0 = 0x6a09e667;this.h1 = 0xbb67ae85;this.h2 = 0x3c6ef372;this.h3 = 0xa54ff53a;this.h4 = 0x510e527f;this.h5 = 0x9b05688c;this.h6 = 0x1f83d9ab;this.h7 = 0x5be0cd19;}this.block = this.start = this.bytes = this.hBytes = 0x0;this.finalized = this.hashed = false;this.first = true;this.is224 = _0x506d56;
}function xooo(_0xbece56) {function _0x50a213(_0x47e4e0) {var _0x4a8091 = '';var _0x32f23e = '';var _0x1a2975;for (_0x1a2975 = 0x0; 0x3 >= _0x1a2975; _0x1a2975++) {_0x32f23e = _0x47e4e0 >>> 0x8 * _0x1a2975 & 0xff;_0x32f23e = "0" + _0x32f23e.toString(0x10);_0x4a8091 += _0x32f23e.substr(_0x32f23e.length - 0x2, 0x2);}return _0x4a8091;}var _0x1b8333 = [];var _0x28207d;var _0x383438;var _0x11fccf;var _0x3ce4d1;var _0x452f67;var _0x20d302;var _0x3a8a59;var _0x58cff2;_0xbece56 = function (_0x1a1913) {_0x1a1913 = _0x1a1913.replace(/\\r\\n/g, "\\n");var _0x34d0f0 = '';for (var _0x52db02 = 0x0; _0x52db02 < _0x1a1913.length; _0x52db02++) {var _0x23313b = _0x1a1913.charCodeAt(_0x52db02);if (0x80 > _0x23313b) {_0x34d0f0 += String.fromCharCode(_0x23313b);} else {if (0x7f < _0x23313b && 0x800 > _0x23313b) {_0x34d0f0 += String.fromCharCode(_0x23313b >> 0x6 | 0xc0);} else {_0x34d0f0 += String.fromCharCode(_0x23313b >> 0xc | 0xe0);_0x34d0f0 += String.fromCharCode(_0x23313b >> 0x6 & 0x3f | 0x80);}_0x34d0f0 += String.fromCharCode(_0x23313b & 0x3f | 0x80);}}return _0x34d0f0;}(_0xbece56);_0x1b8333 = function (_0x857796) {var _0x1608a4;var _0x7de62 = _0x857796.length;_0x1608a4 = _0x7de62 + 0x8;var _0x1b0bcd = 0x10 * ((_0x1608a4 - _0x1608a4 % 0x40) / 0x40 + 0x1);var _0x26393 = Array(_0x1b0bcd - 0x1);var _0x5e2c4a = 0x0;for (var _0x5038ff = 0x0; _0x5038ff < _0x7de62;) {_0x1608a4 = (_0x5038ff - _0x5038ff % 0x4) / 0x4;_0x5e2c4a = _0x5038ff % 0x4 * 0x8;_0x26393[_0x1608a4] |= _0x857796.charCodeAt(_0x5038ff) << _0x5e2c4a;_0x5038ff++;}_0x1608a4 = (_0x5038ff - _0x5038ff % 0x4) / 0x4;_0x26393[_0x1608a4] |= 0x80 << _0x5038ff % 0x4 * 0x8;_0x26393[_0x1b0bcd - 0x2] = _0x7de62 << 0x3;_0x26393[_0x1b0bcd - 0x1] = _0x7de62 >>> 0x1d;return _0x26393;}(_0xbece56);_0x452f67 = 0x10325476;_0x20d302 = 0x98badcfe;_0x3a8a59 = 0xefcdab89;_0x58cff2 = 0x67452301;for (_0xbece56 = 0x0; _0xbece56 < _0x1b8333.length; _0xbece56 += 0x10) {_0x28207d = _0x452f67;_0x383438 = _0x20d302;_0x11fccf = _0x3a8a59;_0x3ce4d1 = _0x58cff2;_0x452f67 = k(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x0], 0x7, 0xd76aa478);_0x58cff2 = k(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x1], 0xc, 0xe8c7b756);_0x3a8a59 = k(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0x2], 0x11, 0x242070db);_0x20d302 = k(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x3], 0x16, 0xc1bdceee);_0x452f67 = k(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x4], 0x7, 0xf57c0faf);_0x58cff2 = k(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x5], 0xc, 0x4787c62a);_0x3a8a59 = k(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0x6], 0x11, 0xa8304613);_0x20d302 = k(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x7], 0x16, 0xfd469501);_0x452f67 = k(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x8], 0x7, 0x698098d8);_0x58cff2 = k(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x9], 0xc, 0x8b44f7af);_0x3a8a59 = k(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0xa], 0x11, 0xffff5bb1);_0x20d302 = k(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0xb], 0x16, 0x895cd7be);_0x452f67 = k(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0xc], 0x7, 0x6b901122);_0x58cff2 = k(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0xd], 0xc, 0xfd987193);_0x3a8a59 = k(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0xe], 0x11, 0xa679438e);_0x20d302 = k(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0xf], 0x16, 0x49b40821);_0x452f67 = l(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x1], 0x5, 0xf61e2562);_0x58cff2 = l(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x6], 0x9, 0xc040b340);_0x3a8a59 = l(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0xb], 0xe, 0x265e5a51);_0x20d302 = l(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x0], 0x14, 0xe9b6c7aa);_0x452f67 = l(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x5], 0x5, 0xd62f105d);_0x58cff2 = l(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0xa], 0x9, 0x2441453);_0x3a8a59 = l(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0xf], 0xe, 0xd8a1e681);_0x20d302 = l(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x4], 0x14, 0xe7d3fbc8);_0x452f67 = l(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x9], 0x5, 0x21e1cde6);_0x58cff2 = l(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0xe], 0x9, 0xc33707d6);_0x3a8a59 = l(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0x3], 0xe, 0xf4d50d87);_0x20d302 = l(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x8], 0x14, 0x455a14ed);_0x452f67 = l(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0xd], 0x5, 0xa9e3e905);_0x58cff2 = l(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x2], 0x9, 0xfcefa3f8);_0x3a8a59 = l(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0x7], 0xe, 0x676f02d9);_0x20d302 = l(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0xc], 0x14, 0x8d2a4c8a);_0x452f67 = m(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x5], 0x4, 0xfffa3942);_0x58cff2 = m(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x8], 0xb, 0x8771f681);_0x3a8a59 = m(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0xb], 0x10, 0x6d9d6122);_0x20d302 = m(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0xe], 0x17, 0xfde5380c);_0x452f67 = m(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x1], 0x4, 0xa4beea44);_0x58cff2 = m(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x4], 0xb, 0x4bdecfa9);_0x3a8a59 = m(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0x7], 0x10, 0xf6bb4b60);_0x20d302 = m(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0xa], 0x17, 0xbebfbc70);_0x452f67 = m(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0xd], 0x4, 0x289b7ec6);_0x58cff2 = m(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x0], 0xb, 0xeaa127fa);_0x3a8a59 = m(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0x3], 0x10, 0xd4ef3085);_0x20d302 = m(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x6], 0x17, 0x4881d05);_0x452f67 = m(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x9], 0x4, 0xd9d4d039);_0x58cff2 = m(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0xc], 0xb, 0xe6db99e5);_0x3a8a59 = m(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0xf], 0x10, 0x1fa27cf8);_0x20d302 = m(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x2], 0x17, 0xc4ac5665);_0x452f67 = n(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x0], 0x6, 0xf4292244);_0x58cff2 = n(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x7], 0xa, 0x432aff97);_0x3a8a59 = n(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0xe], 0xf, 0xab9423a7);_0x20d302 = n(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x5], 0x15, 0xfc93a039);_0x452f67 = n(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0xc], 0x6, 0x655b59c3);_0x58cff2 = n(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0x3], 0xa, 0x8f0ccc92);_0x3a8a59 = n(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0xa], 0xf, 0xffeff47d);_0x20d302 = n(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x1], 0x15, 0x85845dd1);_0x452f67 = n(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x8], 0x6, 0x6fa87e4f);_0x58cff2 = n(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0xf], 0xa, 0xfe2ce6e0);_0x3a8a59 = n(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0x6], 0xf, 0xa3014314);_0x20d302 = n(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0xd], 0x15, 0x4e0811a1);_0x452f67 = n(_0x452f67, _0x20d302, _0x3a8a59, _0x58cff2, _0x1b8333[_0xbece56 + 0x4], 0x6, 0xf7537e82);_0x58cff2 = n(_0x58cff2, _0x452f67, _0x20d302, _0x3a8a59, _0x1b8333[_0xbece56 + 0xb], 0xa, 0xbd3af235);_0x3a8a59 = n(_0x3a8a59, _0x58cff2, _0x452f67, _0x20d302, _0x1b8333[_0xbece56 + 0x2], 0xf, 0x2ad7d2bb);_0x20d302 = n(_0x20d302, _0x3a8a59, _0x58cff2, _0x452f67, _0x1b8333[_0xbece56 + 0x9], 0x15, 0xeb86d391);_0x452f67 = h(_0x452f67, _0x28207d);_0x20d302 = h(_0x20d302, _0x383438);_0x3a8a59 = h(_0x3a8a59, _0x11fccf);_0x58cff2 = h(_0x58cff2, _0x3ce4d1);}return (_0x50a213(_0x452f67) + _0x50a213(_0x20d302) + _0x50a213(_0x3a8a59) + _0x50a213(_0x58cff2)).toLowerCase();
}_0x2f5ec1.prototype.hash = function () {var _0x4239a7 = [0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786, 0xfc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x6ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2];var _0x3016bf;var _0x446928;var _0x5e7b33;var _0x3a4c3a;var _0x599202;var _0x910c6f;var _0x1ba87a;var _0x5de766;var _0x451132;var _0x1beb23 = this.h0;var _0x43e799 = this.h1;var _0x538181 = this.h2;var _0x3b26fb = this.h3;var _0x4f122e = this.h4;var _0x3a1bfd = this.h5;var _0x19be1d = this.h6;var _0x3bcd00 = this.h7;var _0x209954 = this.blocks;for (_0x3016bf = 0x10; _0x3016bf < 0x40; ++_0x3016bf) {_0x446928 = ((_0x599202 = _0x209954[_0x3016bf - 0xf]) >>> 0x7 | _0x599202 << 0x19) ^ (_0x599202 >>> 0x12 | _0x599202 << 0xe) ^ _0x599202 >>> 0x3;_0x5e7b33 = ((_0x599202 = _0x209954[_0x3016bf - 0x2]) >>> 0x11 | _0x599202 << 0xf) ^ (_0x599202 >>> 0x13 | _0x599202 << 0xd) ^ _0x599202 >>> 0xa;_0x209954[_0x3016bf] = _0x209954[_0x3016bf - 0x10] + _0x446928 + _0x209954[_0x3016bf - 0x7] + _0x5e7b33 << 0x0;}_0x451132 = _0x43e799 & _0x538181;for (_0x3016bf = 0x0; _0x3016bf < 0x40; _0x3016bf += 0x4) {if (this.first) {if (this.is224) {_0x910c6f = 0x49400;_0x3bcd00 = (_0x599202 = _0x209954[0x0] - 0x543c9a5b) - 0x8f1a6c7 << 0x0;_0x3b26fb = _0x599202 + 0x170e9b5 << 0x0;} else {_0x910c6f = 0x2a01a605;_0x3bcd00 = (_0x599202 = _0x209954[0x0] - 0xc881298) - 0x5ab00ac6 << 0x0;_0x3b26fb = _0x599202 + 0x8909ae5 << 0x0;}this.first = false;} else {_0x446928 = (_0x1beb23 >>> 0x2 | _0x1beb23 << 0x1e) ^ (_0x1beb23 >>> 0xd | _0x1beb23 << 0x13) ^ (_0x1beb23 >>> 0x16 | _0x1beb23 << 0xa);_0x3a4c3a = (_0x910c6f = _0x1beb23 & _0x43e799) ^ _0x1beb23 & _0x538181 ^ _0x451132;_0x3bcd00 = _0x3b26fb + (_0x599202 = _0x3bcd00 + (_0x5e7b33 = (_0x4f122e >>> 0x6 | _0x4f122e << 0x1a) ^ (_0x4f122e >>> 0xb | _0x4f122e << 0x15) ^ (_0x4f122e >>> 0x19 | _0x4f122e << 0x7)) + (_0x4f122e & _0x3a1bfd ^ ~_0x4f122e & _0x19be1d) + _0x4239a7[_0x3016bf] + _0x209954[_0x3016bf]) << 0x0;_0x3b26fb = _0x599202 + (_0x446928 + _0x3a4c3a) << 0x0;}_0x446928 = (_0x3b26fb >>> 0x2 | _0x3b26fb << 0x1e) ^ (_0x3b26fb >>> 0xd | _0x3b26fb << 0x13) ^ (_0x3b26fb >>> 0x16 | _0x3b26fb << 0xa);_0x3a4c3a = (_0x1ba87a = _0x3b26fb & _0x1beb23) ^ _0x3b26fb & _0x43e799 ^ _0x910c6f;_0x19be1d = _0x538181 + (_0x599202 = _0x19be1d + (_0x5e7b33 = (_0x3bcd00 >>> 0x6 | _0x3bcd00 << 0x1a) ^ (_0x3bcd00 >>> 0xb | _0x3bcd00 << 0x15) ^ (_0x3bcd00 >>> 0x19 | _0x3bcd00 << 0x7)) + (_0x3bcd00 & _0x4f122e ^ ~_0x3bcd00 & _0x3a1bfd) + _0x4239a7[_0x3016bf + 0x1] + _0x209954[_0x3016bf + 0x1]) << 0x0;_0x446928 = ((_0x538181 = _0x599202 + (_0x446928 + _0x3a4c3a) << 0x0) >>> 0x2 | _0x538181 << 0x1e) ^ (_0x538181 >>> 0xd | _0x538181 << 0x13) ^ (_0x538181 >>> 0x16 | _0x538181 << 0xa);_0x3a4c3a = (_0x5de766 = _0x538181 & _0x3b26fb) ^ _0x538181 & _0x1beb23 ^ _0x1ba87a;_0x3a1bfd = _0x43e799 + (_0x599202 = _0x3a1bfd + (_0x5e7b33 = (_0x19be1d >>> 0x6 | _0x19be1d << 0x1a) ^ (_0x19be1d >>> 0xb | _0x19be1d << 0x15) ^ (_0x19be1d >>> 0x19 | _0x19be1d << 0x7)) + (_0x19be1d & _0x3bcd00 ^ ~_0x19be1d & _0x4f122e) + _0x4239a7[_0x3016bf + 0x2] + _0x209954[_0x3016bf + 0x2]) << 0x0;_0x446928 = ((_0x43e799 = _0x599202 + (_0x446928 + _0x3a4c3a) << 0x0) >>> 0x2 | _0x43e799 << 0x1e) ^ (_0x43e799 >>> 0xd | _0x43e799 << 0x13) ^ (_0x43e799 >>> 0x16 | _0x43e799 << 0xa);_0x3a4c3a = (_0x451132 = _0x43e799 & _0x538181) ^ _0x43e799 & _0x3b26fb ^ _0x5de766;_0x4f122e = _0x1beb23 + (_0x599202 = _0x4f122e + (_0x5e7b33 = (_0x3a1bfd >>> 0x6 | _0x3a1bfd << 0x1a) ^ (_0x3a1bfd >>> 0xb | _0x3a1bfd << 0x15) ^ (_0x3a1bfd >>> 0x19 | _0x3a1bfd << 0x7)) + (_0x3a1bfd & _0x19be1d ^ ~_0x3a1bfd & _0x3bcd00) + _0x4239a7[_0x3016bf + 0x3] + _0x209954[_0x3016bf + 0x3]) << 0x0;_0x1beb23 = _0x599202 + (_0x446928 + _0x3a4c3a) << 0x0;this.chromeBugWorkAround = true;}this.h0 = this.h0 + _0x1beb23 << 0x0;this.h1 = this.h1 + _0x43e799 << 0x0;this.h2 = this.h2 + _0x538181 << 0x0;this.h3 = this.h3 + _0x3b26fb << 0x0;this.h4 = this.h4 + _0x4f122e << 0x0;this.h5 = this.h5 + _0x3a1bfd << 0x0;this.h6 = this.h6 + _0x19be1d << 0x0;this.h7 = this.h7 + _0x3bcd00 << 0x0;
}
_0x2f5ec1.prototype.finalize = function () {var _0x36a98e = [-0x80000000, 0x800000, 0x8000, 0x80]if (!this.finalized) {this.finalized = true;var _0x596268 = this.blocks;var _0xc4eb28 = this.lastByteIndex;_0x596268[0x10] = this.block;_0x596268[_0xc4eb28 >>> 0x2] |= _0x36a98e[0x3 & _0xc4eb28];this.block = _0x596268[0x10];if (_0xc4eb28 >= 0x38) {if (!this.hashed) {this.hash();}_0x596268[0x0] = this.block;_0x596268[0x10] = _0x596268[0x1] = _0x596268[0x2] = _0x596268[0x3] = _0x596268[0x4] = _0x596268[0x5] = _0x596268[0x6] = _0x596268[0x7] = _0x596268[0x8] = _0x596268[0x9] = _0x596268[0xa] = _0x596268[0xb] = _0x596268[0xc] = _0x596268[0xd] = _0x596268[0xe] = _0x596268[0xf] = 0x0;}_0x596268[0xe] = this.hBytes << 0x3 | this.bytes >>> 0x1d;_0x596268[0xf] = this.bytes << 0x3;this.hash();}
}
_0x2f5ec1.prototype.hex = function () {var _0x1d090b = "0123456789abcdef".split('');this.finalize();var _0x47c3b2 = this.h0;var _0x69a47f = this.h1;var _0x3b8092 = this.h2;var _0x4fcff2 = this.h3;var _0x309f87 = this.h4;var _0xebcba2 = this.h5;var _0x137053 = this.h6;var _0x445e35 = this.h7;var _0x291a21 = _0x1d090b[_0x47c3b2 >>> 0x1c & 0xf] + _0x1d090b[_0x47c3b2 >>> 0x18 & 0xf] + _0x1d090b[_0x47c3b2 >>> 0x14 & 0xf] + _0x1d090b[_0x47c3b2 >>> 0x10 & 0xf] + _0x1d090b[_0x47c3b2 >>> 0xc & 0xf] + _0x1d090b[_0x47c3b2 >>> 0x8 & 0xf] + _0x1d090b[_0x47c3b2 >>> 0x4 & 0xf] + _0x1d090b[0xf & _0x47c3b2] + _0x1d090b[_0x69a47f >>> 0x1c & 0xf] + _0x1d090b[_0x69a47f >>> 0x18 & 0xf] + _0x1d090b[_0x69a47f >>> 0x14 & 0xf] + _0x1d090b[_0x69a47f >>> 0x10 & 0xf] + _0x1d090b[_0x69a47f >>> 0xc & 0xf] + _0x1d090b[_0x69a47f >>> 0x8 & 0xf] + _0x1d090b[_0x69a47f >>> 0x4 & 0xf] + _0x1d090b[0xf & _0x69a47f] + _0x1d090b[_0x3b8092 >>> 0x1c & 0xf] + _0x1d090b[_0x3b8092 >>> 0x18 & 0xf] + _0x1d090b[_0x3b8092 >>> 0x14 & 0xf] + _0x1d090b[_0x3b8092 >>> 0x10 & 0xf] + _0x1d090b[_0x3b8092 >>> 0xc & 0xf] + _0x1d090b[_0x3b8092 >>> 0x8 & 0xf] + _0x1d090b[_0x3b8092 >>> 0x4 & 0xf] + _0x1d090b[0xf & _0x3b8092] + _0x1d090b[_0x4fcff2 >>> 0x1c & 0xf] + _0x1d090b[_0x4fcff2 >>> 0x18 & 0xf] + _0x1d090b[_0x4fcff2 >>> 0x14 & 0xf] + _0x1d090b[_0x4fcff2 >>> 0x10 & 0xf] + _0x1d090b[_0x4fcff2 >>> 0xc & 0xf] + _0x1d090b[_0x4fcff2 >>> 0x8 & 0xf] + _0x1d090b[_0x4fcff2 >>> 0x4 & 0xf] + _0x1d090b[0xf & _0x4fcff2] + _0x1d090b[_0x309f87 >>> 0x1c & 0xf] + _0x1d090b[_0x309f87 >>> 0x18 & 0xf] + _0x1d090b[_0x309f87 >>> 0x14 & 0xf] + _0x1d090b[_0x309f87 >>> 0x10 & 0xf] + _0x1d090b[_0x309f87 >>> 0xc & 0xf] + _0x1d090b[_0x309f87 >>> 0x8 & 0xf] + _0x1d090b[_0x309f87 >>> 0x4 & 0xf] + _0x1d090b[0xf & _0x309f87] + _0x1d090b[_0xebcba2 >>> 0x1c & 0xf] + _0x1d090b[_0xebcba2 >>> 0x18 & 0xf] + _0x1d090b[_0xebcba2 >>> 0x14 & 0xf] + _0x1d090b[_0xebcba2 >>> 0x10 & 0xf] + _0x1d090b[_0xebcba2 >>> 0xc & 0xf] + _0x1d090b[_0xebcba2 >>> 0x8 & 0xf] + _0x1d090b[_0xebcba2 >>> 0x4 & 0xf] + _0x1d090b[0xf & _0xebcba2] + _0x1d090b[_0x137053 >>> 0x1c & 0xf] + _0x1d090b[_0x137053 >>> 0x18 & 0xf] + _0x1d090b[_0x137053 >>> 0x14 & 0xf] + _0x1d090b[_0x137053 >>> 0x10 & 0xf] + _0x1d090b[_0x137053 >>> 0xc & 0xf] + _0x1d090b[_0x137053 >>> 0x8 & 0xf] + _0x1d090b[_0x137053 >>> 0x4 & 0xf] + _0x1d090b[0xf & _0x137053];if (!this.is224) {_0x291a21 += _0x1d090b[_0x445e35 >>> 0x1c & 0xf] + _0x1d090b[_0x445e35 >>> 0x18 & 0xf] + _0x1d090b[_0x445e35 >>> 0x14 & 0xf] + _0x1d090b[_0x445e35 >>> 0x10 & 0xf] + _0x1d090b[_0x445e35 >>> 0xc & 0xf] + _0x1d090b[_0x445e35 >>> 0x8 & 0xf] + _0x1d090b[_0x445e35 >>> 0x4 & 0xf] + _0x1d090b[0xf & _0x445e35];}return _0x291a21;
}function sha256(_0x5a1594) {return new _0x2f5ec1(undefined, true).update(_0x5a1594)["hex"]();
}function OOOO(_0x58d4b1, _0x19e7b0, _0x19c60c, _0x21036e, _0x19a1bf) {let _0x418c3c = OOXX();return sha256(xooo(_0x58d4b1 + _0x418c3c));
}console.log(OOOO("/api/problem-detail/10/data/?page=6"));

本题大概就是解混淆 + 补环境，还原它的魔改算法的逻辑就好了~

代码实现

最后贴出python代码

"""
-*- coding: utf-8 -*-
@File   : .py
@author : @鲨鱼爱兜兜
@Time   : 2025/04/06 0:41
"""import requests
import execjscookies = {'sessionid': '你的值','Hm_lvt_b5d072258d61ab3cd6a9d485aac7f183': '1743870511,1743871379,1743932867,1743933915','HMACCOUNT': '你的值','Hm_lpvt_b5d072258d61ab3cd6a9d485aac7f183': '1743934341',
}
headers = {'accept': 'application/json, text/javascript, */*; q=0.01','accept-language': 'zh-CN,zh;q=0.9,en;q=0.8','cache-control': 'no-cache','pragma': 'no-cache','priority': 'u=1, i','referer': 'https://stu.tulingpyton.cn/problem-detail/10/','sec-ch-ua': '"Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"','sec-ch-ua-mobile': '?0','sec-ch-ua-platform': '"Windows"','sec-fetch-dest': 'empty','sec-fetch-mode': 'cors','sec-fetch-site': 'same-origin','user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36','x-requested-with': 'XMLHttpRequest',
}
with open('./题十-魔改算法.js', encoding='utf-8') as f:js_code = f.read()
s = 0
for page in range(1, 21):params = {'page': f'{page}','t': execjs.compile(js_code).call('OOOO', f"/api/problem-detail/10/data/?page={page}")}response = requests.get('https://stu.tulingpyton.cn/api/problem-detail/10/data/', params=params, cookies=cookies,headers=headers)response.raise_for_status()response.encoding = 'utf-8'print(response.json())s += sum(response.json()['current_array'])
print(s)

运行结果

第十题，勉强秒了[doge]~
@鲨鱼爱兜兜