JavaScript 高分 求大神反混淆方法

[「已注销」]

请教各位大神 以下 js 怎么反混淆呢 ? 看着头晕晕
试过当前网上各种反混淆工具都无效,比如 jsbeautifier.org \.jsnice.org/
不多说了,上代码 请各位大神各显神通 不胜感激!

var _0x474a=['row','loginIp','<a\x20href=\x22javascript:;\x22\x20class=\x22ip-msg\x22\x20data-url=\x22/query/ip?','</a>','createTime','comment','<a\x20class=\x22btn\x20btn-pure\x20btn-xs\x20btn-default\x20icon\x20wb-close\x20delete-tr\x22\x20href=\x22#\x22></a>','api','column','nodes','innerHTML','queryIp','one','shown.bs.modal','validate','.ignore','[name=\x22ip\x22]','ajax','ctx','/blacklist/save','POST','serialize','blId','blacklist','draw','modal','hide','error',' err！','hide.bs.modal','find','val','resetForm','.delete-tr','closest','prev','hasClass','child','parent','layer','confirm','del?','/blacklist/delete?blId=','JSON','remove','delsuc！','close','preventDefault','run','#add','extend','webuiPopover','.ip-msg','data','click','detail','async','error！','success','message','.dataTable','DataTable','dataTable'];(function(_0x2442f2,_0x1ec373){var _0x4d2ef3=function(_0x7c9c02){while(--_0x7c9c02){_0x2442f2['push'](_0x2442f2['shift']());}};_0x4d2ef3(++_0x1ec373);}(_0x474a,0xaf));var _0xa474=function(_0x22bd4e,_0x17c050){_0x22bd4e=_0x22bd4e-0x0;var _0x4e67d4=_0x474a[_0x22bd4e];return _0x4e67d4;};(function(_0x59fff4,_0x5bcdd0,_0x258e33){'use strict';var _0x11b427=_0x258e33(_0xa474('0x0'));var _0xb32962={'queryIp':function(){var _0x548c78=_0x258e33[_0xa474('0x1')](!![],{},_0x258e33['po'](_0xa474('0x2')),_0x258e33(_0xa474('0x3'))[_0xa474('0x4')](),{'trigger':_0xa474('0x5'),'title':_0xa474('0x6'),'type':_0xa474('0x7'),'content':function(_0x489836){var _0x503ab4=_0xa474('0x8');if(_0x489836[_0xa474('0x9')]){_0x503ab4=_0x489836[_0xa474('0xa')];}return _0x503ab4;}});_0x258e33(_0xa474('0x3'))[_0xa474('0x2')](_0x548c78);},'run':function(){var _0x238a04,_0x2749a4=this,_0x1c7b66=_0x258e33('#blackList');var _0x5eab80=null;_0x238a04=_0x258e33(_0xa474('0xb'))[_0xa474('0xc')](_0x258e33['po'](_0xa474('0xd'),{'rowId':'blId','autoWidth':![],'columns':[{'render':function(_0x2f0cc8,_0x4c32a3,_0x149767,_0x14cd66){return _0x14cd66[_0xa474('0xe')]+0x1;}},{'render':function(_0x3864dd,_0x2c34b0,_0x1b6806){var _0x371e38,_0x41f28d=_0x1b6806[_0xa474('0xf')];if(_0x41f28d===undefined){_0x371e38=_0x1b6806[0x1];}else{_0x371e38=_0xa474('0x10')+_0x41f28d+'\x22>'+_0x41f28d+_0xa474('0x11');}return _0x371e38;}},{'data':_0xa474('0x12')},{'data':_0xa474('0x13')},{'render':function(){return _0xa474('0x14');}}],'drawCallback':function(){this[_0xa474('0x15')]()[_0xa474('0x16')](0x0)[_0xa474('0x17')]()['each'](function(_0x3536d8,_0x3e950c){_0x3536d8[_0xa474('0x18')]=_0x3e950c+0x1;});_0x2749a4[_0xa474('0x19')]();}}));_0x11b427[_0xa474('0x1a')](_0xa474('0x1b'),function(){_0x5eab80=_0x1c7b66[_0xa474('0x1c')]({'ignore':_0xa474('0x1d'),'rules':{'ip':{'required':!![],'ipv4':!![]}},'submitHandler':function(_0x5c281c){var _0x1b8a53=_0x258e33(_0x5c281c);var _0x10a056={'loginIp':_0x1b8a53['find'](_0xa474('0x1e'))['val'](),'comment':_0x1b8a53['find']('[name=\x22comment\x22]')['val']()};_0x258e33[_0xa474('0x1f')]({'url':_0x258e33[_0xa474('0x20')]+_0xa474('0x21'),'type':_0xa474('0x22'),'data':_0x1b8a53[_0xa474('0x23')](),'dataType':'JSON','success':function(_0x2e1cff){if(_0x2e1cff['success']){_0x10a056[_0xa474('0x24')]=_0x2e1cff['blacklist'][_0xa474('0x24')];_0x10a056[_0xa474('0x12')]=_0x2e1cff[_0xa474('0x25')][_0xa474('0x12')];_0x11b427[_0xa474('0x1a')]('hidden.bs.modal',function(){_0x238a04[_0xa474('0xe')]['add'](_0x10a056)[_0xa474('0x26')](![]);toastr['success']('添加成功！');})[_0xa474('0x27')](_0xa474('0x28'));}else{toastr[_0xa474('0x29')](_0x2e1cff['msg']);}},'error':function(){toastr[_0xa474('0x29')](_0xa474('0x2a'));}});}});})['on'](_0xa474('0x2b'),function(){_0x1c7b66[_0xa474('0x2c')]('textarea,\x20input')[_0xa474('0x2d')]('');_0x5eab80[_0xa474('0x2e')]();});_0x258e33(_0x5bcdd0)['on'](_0xa474('0x5'),_0xa474('0x2f'),function(_0x2babcd){var _0x45908d=_0x258e33(this)[_0xa474('0x30')]('tr'),_0x3c2fda,_0x5bd4ea=_0x45908d[_0xa474('0x31')]();if(_0x45908d[_0xa474('0x32')](_0xa474('0x33'))&&_0x5bd4ea['hasClass'](_0xa474('0x34'))){_0x45908d=_0x5bd4ea;}_0x3c2fda=_0x238a04[_0xa474('0xe')](_0x45908d)['id']();parent[_0xa474('0x35')][_0xa474('0x36')](_0xa474('0x37'),function(_0xcffe56){_0x258e33[_0xa474('0x1f')]({'url':_0x258e33[_0xa474('0x20')]+_0xa474('0x38')+_0x3c2fda,'type':_0xa474('0x22'),'dataType':_0xa474('0x39'),'success':function(_0x14de2c){if(_0x14de2c[_0xa474('0x9')]){_0x238a04['row'](_0x45908d)[_0xa474('0x3a')]()[_0xa474('0x26')](![]);toastr['success'](_0xa474('0x3b'));parent['layer'][_0xa474('0x3c')](_0xcffe56);}else{toastr[_0xa474('0x29')](_0xa474('0x8'));}},'error':function(){toastr['error'](_0xa474('0x2a'));}});});_0x2babcd[_0xa474('0x3d')]();});}};_0xb32962[_0xa474('0x3e')]();}(window,document,jQuery));

[Hello World,]

就是替换字符串，第一个变量是数组，存储了一些后面要用的字符串，紧接着又加入了一些元素；第一个函数就是用于获取指定索引的元素，最后那个才是真正的功能，大概是这样：

var items = ['row', 'loginIp', '<a\x20href=\x22javascript:;\x22\x20class=\x22ip-msg\x22\x20data-url=\x22/query/ip?', '</a>', 'createTime', 'comment', '<a\x20class=\x22btn\x20btn-pure\x20btn-xs\x20btn-default\x20icon\x20wb-close\x20delete-tr\x22\x20href=\x22#\x22></a>', 'api', 'column', 'nodes', 'innerHTML', 'queryIp', 'one', 'shown.bs.modal', 'validate', '.ignore', '[name=\x22ip\x22]', 'ajax', 'ctx', '/blacklist/save', 'POST', 'serialize', 'blId', 'blacklist', 'draw', 'modal', 'hide', 'error', ' err！', 'hide.bs.modal', 'find', 'val', 'resetForm', '.delete-tr', 'closest', 'prev', 'hasClass', 'child', 'parent', 'layer', 'confirm', 'del?', '/blacklist/delete?blId=', 'JSON', 'remove', 'delsuc！', 'close', 'preventDefault', 'run', '#add', 'extend', 'webuiPopover', '.ip-msg', 'data', 'click', 'detail', 'async', 'error！', 'success', 'message', '.dataTable', 'DataTable', 'dataTable'];
(function (_0x2442f2, _0x1ec373) {
    var _0x4d2ef3 = function (_0x7c9c02) {
        while (--_0x7c9c02) {
            _0x2442f2['push'](_0x2442f2['shift']());
        }
    };
    _0x4d2ef3(++_0x1ec373);
}(items, 0xaf));
var getItem = function (index, _0x17c050) {
    index = index - 0x0;
    var item = items[index];
    return item;
};
(function (window, document, jQuery) {
    'use strict';
    var addElement = jQuery('#add');
    var myplug = {
        'queryIp': function () {
            var _0x548c78 = jQuery['extend'](!![], {}, jQuery['po']('webuiPopover'), jQuery('.ip-msg')['data'](), {
                'trigger': 'click',
                'title': 'detail',
                'type': 'async',
                'content': function (_0x489836) {
                    var _0x503ab4 = 'error！';
                    if (_0x489836['success']) {
                        _0x503ab4 = _0x489836['message'];
                    }
                    return _0x503ab4;
                }
            });
            jQuery('.ip-msg')['webuiPopover'](_0x548c78);
        },
        'run': function () {
            var _0x238a04, _0x2749a4 = this,
                blackList = jQuery('#blackList');
            var _0x5eab80 = null;
            _0x238a04 = jQuery('.dataTable')['DataTable'](jQuery['po']('dataTable', {
                'rowId': 'blId',
                'autoWidth': ![],
                'columns': [{
                    'render': function (_0x2f0cc8, _0x4c32a3, _0x149767, _0x14cd66) {
                        return _0x14cd66['row'] + 0x1;
                    }
                }, {
                    'render': function (_0x3864dd, _0x2c34b0, _0x1b6806) {
                        var _0x371e38, _0x41f28d = _0x1b6806['loginIp'];
                        if (_0x41f28d === undefined) {
                            _0x371e38 = _0x1b6806[0x1];
                        } else {
                            _0x371e38 = '<a href="javascript:;" class="ip-msg" data-url="/query/ip?' + _0x41f28d + '\x22>' + _0x41f28d + '</a>';
                        }
                        return _0x371e38;
                    }
                }, {
                    'data': 'createTime'
                }, {
                    'data': 'comment'
                }, {
                    'render': function () {
                        return '<a class="btn btn-pure btn-xs btn-default icon wb-close delete-tr" href="#"></a>';
                    }
                }],
                'drawCallback': function () {
                    this['api']()['column'](0x0)['nodes']()['each'](function (_0x3536d8, _0x3e950c) {
                        _0x3536d8['innerHTML'] = _0x3e950c + 0x1;
                    });
                    _0x2749a4['queryIp']();
                }
            }));
            addElement['one']('shown.bs.modal', function () {
                _0x5eab80 = blackList['validate']({
                    'ignore': '.ignore',
                    'rules': {
                        'ip': {
                            'required': !![],
                            'ipv4': !![]
                        }
                    },
                    'submitHandler': function (_0x5c281c) {
                        var _0x1b8a53 = jQuery(_0x5c281c);
                        var _0x10a056 = {
                            'loginIp': _0x1b8a53['find']('[name="ip"]')['val'](),
                            'comment': _0x1b8a53['find']('[name=\x22comment\x22]')['val']()
                        };
                        jQuery['ajax']({
                            'url': jQuery['ctx'] + '/blacklist/save',
                            'type': 'POST',
                            'data': _0x1b8a53['serialize'](),
                            'dataType': 'JSON',
                            'success': function (_0x2e1cff) {
                                if (_0x2e1cff['success']) {
                                    _0x10a056['blId'] = _0x2e1cff['blacklist']['blId'];
                                    _0x10a056['createTime'] = _0x2e1cff['blacklist']['createTime'];
                                    addElement['one']('hidden.bs.modal', function () {
                                        _0x238a04['row']['add'](_0x10a056)['draw'](![]);
                                        toastr['success']('添加成功！');
                                    })['modal']('hide');
                                } else {
                                    toastr['error'](_0x2e1cff['msg']);
                                }
                            },
                            'error': function () {
                                toastr['error'](' err！');
                            }
                        });
                    }
                });
            })['on']('hide.bs.modal', function () {
                blackList['find']('textarea,\x20input')['val']('');
                _0x5eab80['resetForm']();
            });
            jQuery(document)['on']('click', '.delete-tr', function (_0x2babcd) {
                var _0x45908d = jQuery(this)['closest']('tr'),
                    _0x3c2fda, _0x5bd4ea = _0x45908d['prev']();
                if (_0x45908d['hasClass']('child') && _0x5bd4ea['hasClass']('parent')) {
                    _0x45908d = _0x5bd4ea;
                }
                _0x3c2fda = _0x238a04['row'](_0x45908d)['id']();
                parent['layer']['confirm']('del?', function (_0xcffe56) {
                    jQuery['ajax']({
                        'url': jQuery['ctx'] + '/blacklist/delete?blId=' + _0x3c2fda,
                        'type': 'POST',
                        'dataType': 'JSON',
                        'success': function (_0x14de2c) {
                            if (_0x14de2c['success']) {
                                _0x238a04['row'](_0x45908d)['remove']()['draw'](![]);
                                toastr['success']('delsuc！');
                                parent['layer']['close'](_0xcffe56);
                            } else {
                                toastr['error']('error！');
                            }
                        },
                        'error': function () {
                            toastr['error'](' err！');
                        }
                    });
                });
                _0x2babcd['preventDefault']();
            });
        }
    };
    myplug['run']();
}(window, document, jQuery));

[田小瘦]

混淆是没办法真正的还原的, 只有你一点一点去理解里面的函数是什么意思,一点点的去改,改到差不多你都理解为止.

[「已注销」]

引用 2 楼 t15137830 的回复:

混淆是没办法真正的还原的, 只有你一点一点去理解里面的函数是什么意思,一点点的去改,改到差不多你都理解为止.

引用 1 楼 apollokk 的回复:

就是替换字符串，第一个变量是数组，存储了一些后面要用的字符串，紧接着又加入了一些元素；第一个函数就是用于获取指定索引的元素，最后那个才是真正的功能，大概是这样：

var items = ['row', 'loginIp', '<a\x20href=\x22javascript:;\x22\x20class=\x22ip-msg\x22\x20data-url=\x22/query/ip?', '</a>', 'createTime', 'comment', '<a\x20class=\x22btn\x20btn-pure\x20btn-xs\x20btn-default\x20icon\x20wb-close\x20delete-tr\x22\x20href=\x22#\x22></a>', 'api', 'column', 'nodes', 'innerHTML', 'queryIp', 'one', 'shown.bs.modal', 'validate', '.ignore',  

感谢二位指点!~