羊城杯2022-Reverse-WP

easyjs

挺恶心的题目

首先反编译elf，发现quickjs字眼。

quickjs反编译字节码

这个还好没太恶心，就是quickjs最新版本

clone到linux后make && make install

随便写一个js然后进行编译qjsc -e -o hello.c hello.js

这里可以直接在quickjs目录里进行，比较方便，得到hello.c

/* File generated automatically by the QuickJS compiler. */

#include "quickjs-libc.h"

const uint32_t qjsc_hello_size = 177;

const uint8_t qjsc_hello[177] = {
 0x02, 0x07, 0x02, 0x61, 0x02, 0x62, 0x02, 0x41,
 0x10, 0x2a, 0x2a, 0x2a, 0x2a, 0x2a, 0x2a, 0x2a,
 0x2a, 0x14, 0x68, 0x77, 0x68, 0x64, 0x61, 0x68,
 0x77, 0x64, 0x68, 0x77, 0x04, 0x62, 0x62, 0x10,
 0x68, 0x65, 0x6c, 0x6c, 0x6f, 0x2e, 0x6a, 0x73,
 0x0e, 0x00, 0x06, 0x00, 0xa0, 0x01, 0x00, 0x01,
 0x00, 0x02, 0x00, 0x02, 0x49, 0x01, 0xa2, 0x01,
 0x00, 0x00, 0x00, 0x3f, 0xe1, 0x00, 0x00, 0x00,
 0x00, 0x3f, 0xe2, 0x00, 0x00, 0x00, 0x00, 0x3f,
 0xe3, 0x00, 0x00, 0x00, 0x40, 0x3e, 0xe1, 0x00,
 0x00, 0x00, 0x00, 0x3e, 0xe2, 0x00, 0x00, 0x00,
 0x00, 0xc0, 0x00, 0x40, 0xe3, 0x00, 0x00, 0x00,
 0x00, 0x04, 0xe4, 0x00, 0x00, 0x00, 0x39, 0xe1,
 0x00, 0x00, 0x00, 0x04, 0xe5, 0x00, 0x00, 0x00,
 0x39, 0xe2, 0x00, 0x00, 0x00, 0xc0, 0x01, 0x4d,
 0xe6, 0x00, 0x00, 0x00, 0x11, 0x39, 0xe6, 0x00,
 0x00, 0x00, 0xcd, 0x28, 0xce, 0x03, 0x01, 0x04,
 0x5b, 0x67, 0x35, 0x36, 0x0e, 0x43, 0x06, 0x00,
 0xc6, 0x03, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
 0x01, 0x00, 0x29, 0xce, 0x03, 0x03, 0x00, 0x0e,
 0x02, 0x06, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
 0x00, 0x00, 0x01, 0x00, 0x29, 0xce, 0x03, 0x04,
 0x00,
};

static JSContext *JS_NewCustomContext(JSRuntime *rt)
{
  JSContext *ctx = JS_NewContextRaw(rt);
  if (!ctx)
    return NULL;
  JS_AddIntrinsicBaseObjects(ctx);
  JS_AddIntrinsicDate(ctx);
  JS_AddIntrinsicEval(ctx);
  JS_AddIntrinsicStringNormalize(ctx);
  JS_AddIntrinsicRegExp(ctx);
  JS_AddIntrinsicJSON(ctx);
  JS_AddIntrinsicProxy(ctx);
  JS_AddIntrinsicMapSet(ctx);
  JS_AddIntrinsicTypedArrays(ctx);
  JS_AddIntrinsicPromise(ctx);
  JS_AddIntrinsicBigInt(ctx);
  return ctx;
}

int main(int argc, char **argv)
{
  JSRuntime *rt;
  JSContext *ctx;
  rt = JS_NewRuntime();
  js_std_set_worker_new_context_func(JS_NewCustomContext);
  js_std_init_handlers(rt);
  JS_SetModuleLoaderFunc(rt, NULL, js_module_loader, NULL);
  ctx = JS_NewCustomContext(rt);
  js_std_add_helpers(ctx, argc, argv);
  js_std_eval_binary(ctx, qjsc_hello, qjsc_hello_size, 0);
  js_std_loop(ctx);
  JS_FreeContext(ctx);
  JS_FreeRuntime(rt);
  return 0;
}

把ida里的字节拿出来，重新写hello.c

编译gcc -D _GNU_SOURCE -I . -o hello hello.c ./libquickjs.a -lm -ldl -pthread

然后运行，运行正常说明我们quickjs版本没错

对quickjs.c进行修改

diff --git a/quickjs.c b/quickjs.c
index 7916013..f1facf6 100644
--- a/quickjs.c
+++ b/quickjs.c
@@ -90,7 +90,7 @@
   16: dump bytecode in hex
   32: dump line number table
  */
-//#define DUMP_BYTECODE  (1)
+#define DUMP_BYTECODE  (1)
 /* dump the occurence of the automatic GC */
 //#define DUMP_GC
 /* dump objects freed by the garbage collector */
@@ -104,7 +104,7 @@
 //#define DUMP_SHAPES     /* dump shapes in JS_FreeContext */
 //#define DUMP_MODULE_RESOLVE
 //#define DUMP_PROMISE
-//#define DUMP_READ_OBJECT
+#define DUMP_READ_OBJECT
 
 /* test the GC by forcing it before each object allocation */
 //#define FORCE_GC_AT_MALLOC
@@ -35401,6 +35401,9 @@ static JSValue JS_ReadFunctionTag(BCReaderState *s)
         }
         bc_read_trace(s, "}\n");
     }
+    #if DUMP_BYTECODE
+                 js_dump_function_bytecode(ctx, b);
+             #endif
     b->realm = JS_DupContext(ctx);
     return obj;
  fail:
        

这样我们在gcc编译时能够得到字节码。

重新编译quickjs然后重复以上步骤得到字节码如下

0000:  02 4b                    75 atom indexes {
1"a"
1"b"
1"data3"
1"data4"
1"data5"
1"func1"
1"func2"
1"enc1"
1"dec1"
1"func3"
1"func4"
1"func5"
1"myenc"
1"func6"
1"data1"
1"data2"
1"i"
1"index1"
1"z"
1"********************************"
1"welcometoycb2022"
1"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/="
1"_keyStr"
1"encode64"
1"decode64"
1"charCodeAt"
1"print"
1"Your flag is right!"
1"Your flag is wrong!"
1"re.js"
1"v"
1"w"
1"vl"
1"n"
1"m"
1"fromCharCode"
1"substring"
1"s"
1"len"
1"str"
1"k"
1"y"
1"delta"
1"mx"
1"e"
1"p"
1"q"
1"sum"
1"floor"
1"output"
1"chr1"
1"parseInt"
1"substr"
1"byte1"
1"byte2"
1"byte3"
1"byte4"
1"byte5"
1"byte6"
1"byte7"
1"byte8"
1"chr2"
1"chr3"
1"enc2"
1"enc3"
1"enc4"
1"isNaN"
1"charAt"
1"myenctest"
1"error"
1"replace"
1"indexOf"
1"x"
1"c"
1"d"
0002:  02 61 02 62 0a 64 61 74
       61 33 0a 64 61 74 61 34
       0a 64 61 74 61 35 0a 66
       75 6e 63 31 0a 66 75 6e
       63 32 08 65 6e 63 31 08
       64 65 63 31 0a 66 75 6e
       63 33 0a 66 75 6e 63 34
       0a 66 75 6e 63 35 0a 6d
       79 65 6e 63 0a 66 75 6e
       63 36 0a 64 61 74 61 31
       0a 64 61 74 61 32 02 69
       0c 69 6e 64 65 78 31 02
       7a 40 2a 2a 2a 2a 2a 2a
       2a 2a 2a 2a 2a 2a 2a 2a
       2a 2a 2a 2a 2a 2a 2a 2a
       2a 2a 2a 2a 2a 2a 2a 2a
       2a 2a 20 77 65 6c 63 6f
       6d 65 74 6f 79 63 62 32
       30 32 32 82 01 61 62 63
       64 65 66 67 68 69 6a 6b
       6c 6d 6e 6f 70 71 72 73
       74 75 76 77 78 79 7a 41
       42 43 44 45 46 47 48 49
       4a 4b 4c 4d 4e 4f 50 51
       52 53 54 55 56 57 58 59
       5a 30 31 32 33 34 35 36
       37 38 39 2b 2f 3d 0e 5f
       6b 65 79 53 74 72 10 65
       6e 63 6f 64 65 36 34 10
       64 65 63 6f 64 65 36 34
       14 63 68 61 72 43 6f 64
       65 41 74 0a 70 72 69 6e
       74 26 59 6f 75 72 20 66
       6c 61 67 20 69 73 20 72
       69 67 68 74 21 26 59 6f
       75 72 20 66 6c 61 67 20
       69 73 20 77 72 6f 6e 67
       21 0a 72 65 2e 6a 73 02
       76 02 77 04 76 6c 02 6e
       02 6d 18 66 72 6f 6d 43
       68 61 72 43 6f 64 65 12
       73 75 62 73 74 72 69 6e
       67 02 73 06 6c 65 6e 06
       73 74 72 02 6b 02 79 0a
       64 65 6c 74 61 04 6d 78
       02 65 02 70 02 71 06 73
       75 6d 0a 66 6c 6f 6f 72
       0c 6f 75 74 70 75 74 08
       63 68 72 31 10 70 61 72
       73 65 49 6e 74 0c 73 75
       62 73 74 72 0a 62 79 74
       65 31 0a 62 79 74 65 32
       0a 62 79 74 65 33 0a 62
       79 74 65 34 0a 62 79 74
       65 35 0a 62 79 74 65 36
       0a 62 79 74 65 37 0a 62
       79 74 65 38 08 63 68 72
       32 08 63 68 72 33 08 65
       6e 63 32 08 65 6e 63 33
       08 65 6e 63 34 0a 69 73
       4e 61 4e 0c 63 68 61 72
       41 74 12 6d 79 65 6e 63
       74 65 73 74 0a 65 72 72
       6f 72 0e 72 65 70 6c 61
       63 65 0e 69 6e 64 65 78
       4f 66 02 78 02 63 02 64  }
0212:  0e                       function {
0213:  00 06 00 a0 01 00 01 00
       0f 00 1e c9 07 01          name: "<eval>"
                                  args=0 vars=1 defargs=0 closures=0 cpool=30
                                  stack=15 bclen=969 locals=1
                                  vars {
0221:  a2 01 00 00 00               name: "<ret>"
                                  }
                                  bytecode {
0226:  3f e1 00 00 00 00 3f e2
       00 00 00 00 3f e3 00 00
       00 00 3f e4 00 00 00 00
       3f e5 00 00 00 00 3f e6
       00 00 00 40 3f e7 00 00
       00 40 3f e8 00 00 00 40
       3f e9 00 00 00 40 3f ea
       00 00 00 40 3f eb 00 00
       00 40 3f ec 00 00 00 40
       3f ed 00 00 00 40 3f ee
       00 00 00 40 3f ef 00 00
       00 00 3f f0 00 00 00 00
       3f f1 00 00 00 00 3f f1
       00 00 00 00 3f 57 00 00
       00 00 3f f2 00 00 00 00
       3f f1 00 00 00 00 3f f3
       00 00 00 00 3f f1 00 00
       00 00 3e e1 00 00 00 00
       3e e2 00 00 00 00 3e e3
       00 00 00 00 3e e4 00 00
       00 00 3e e5 00 00 00 00
       c0 13 40 e6 00 00 00 00
       c0 14 40 e7 00 00 00 00
       c0 15 40 e8 00 00 00 00
       c0 16 40 e9 00 00 00 00
       c0 17 40 ea 00 00 00 00
       c0 18 40 eb 00 00 00 00
       c0 19 40 ec 00 00 00 00
       c0 1a 40 ed 00 00 00 00
       c0 1d 40 ee 00 00 00 00
       3e ef 00 00 00 00 3e f0
       00 00 00 00 3e f1 00 00
       00 00 3e f1 00 00 00 00
       3e 57 00 00 00 00 3e f2
       00 00 00 00 3e f1 00 00
       00 00 3e f3 00 00 00 00
       3e f1 00 00 00 00 04 f4
       00 00 00 39 e1 00 00 00
       04 f5 00 00 00 39 e2 00
       00 00 bf 00 bf 01 bf 02
       bf 03 bf 04 bf 05 bf 06
       bf 07 bf 08 bf 09 bf 0a
       bf 0b bf 0c bf 0d bf 0e
       26 0f 00 39 e3 00 00 00
       bf 0f bf 10 bf 11 26 03
       00 39 e4 00 00 00 b5 b5
       b5 b5 b5 b5 b5 b5 b5 b5
       b5 bf 12 26 0c 00 39 e5
       00 00 00 38 ed 00 00 00
       04 f6 00 00 00 15 43 f7
       00 00 00 c9 38 ed 00 00
       00 c0 1b 15 43 f8 00 00
       00 c9 38 ed 00 00 00 c0
       1c 15 43 f9 00 00 00 c9
       38 ed 00 00 00 42 f8 00
       00 00 38 e8 00 00 00 38
       e1 00 00 00 38 e2 00 00
       00 f0 24 01 00 39 ef 00
       00 00 26 00 00 39 f0 00
       00 00 06 c9 b5 39 f1 00
       00 00 38 f1 00 00 00 38
       ef 00 00 00 e9 a3 ea 2f
       38 f0 00 00 00 38 f1 00
       00 00 71 38 ef 00 00 00
       42 fa 00 00 00 38 f1 00
       00 00 24 01 00 16 49 c9
       38 f1 00 00 00 91 39 f1
       00 00 00 0e ec c5 06 c9
       b5 39 f1 00 00 00 38 f1
       00 00 00 38 f0 00 00 00
       e9 a3 ea 34 38 f0 00 00
       00 38 f1 00 00 00 71 13
       47 38 f0 00 00 00 38 f1
       00 00 00 b7 9d 38 f0 00
       00 00 e9 9c 47 ae 16 49
       c9 38 f1 00 00 00 91 39
       f1 00 00 00 0e ec c0 b5
       39 57 00 00 00 b5 39 f2
       00 00 00 06 c9 b5 39 f1
       00 00 00 38 f1 00 00 00
       38 f0 00 00 00 e9 a3 69
       d8 00 00 00 06 c9 38 f1
       00 00 00 bd 20 9c bd 08
       aa ea 7f 38 e5 00 00 00
       38 57 00 00 00 71 38 ec
       00 00 00 38 f0 00 00 00
       38 f1 00 00 00 47 38 f0
       00 00 00 38 f1 00 00 00
       b6 9d 47 38 f0 00 00 00
       38 f1 00 00 00 b7 9d 47
       38 f0 00 00 00 38 f1 00
       00 00 b8 9d 47 38 f0 00
       00 00 38 f1 00 00 00 b9
       9d 47 38 f0 00 00 00 38
       f1 00 00 00 ba 9d 47 38
       f0 00 00 00 38 f1 00 00
       00 bb 9d 47 38 f0 00 00
       00 38 f1 00 00 00 bc 9d
       47 22 08 00 16 49 c9 ec
       28 38 e5 00 00 00 38 57
       00 00 00 71 38 e4 00 00
       00 38 f2 00 00 00 47 16
       49 c9 38 f2 00 00 00 b6
       9d 11 39 f2 00 00 00 c9
       38 57 00 00 00 b6 9d 11
       39 57 00 00 00 c9 38 f1
       00 00 00 bd 08 9d 11 39
       f1 00 00 00 0e ed 1d ff
       b5 39 f3 00 00 00 06 c9
       b5 39 f1 00 00 00 38 f1
       00 00 00 b8 a3 ea 2c 06
       c9 38 ee 00 00 00 38 f1
       00 00 00 ef ea 0f 38 f3
       00 00 00 b6 9d 11 39 f3
       00 00 00 c9 38 f1 00 00
       00 91 39 f1 00 00 00 0e
       ec cd 06 c9 38 f3 00 00
       00 b8 a9 ea 0f 38 fb 00
       00 00 04 fc 00 00 00 ef
       c9 ec 0d 38 fb 00 00 00
       04 fd 00 00 00 ef c9 c5
       28                           at 1, fixup atom: a
                                    at 7, fixup atom: b
                                    at 13, fixup atom: data3
                                    at 19, fixup atom: data4
                                    at 25, fixup atom: data5
                                    at 31, fixup atom: func1
                                    at 37, fixup atom: func2
                                    at 43, fixup atom: enc1
                                    at 49, fixup atom: dec1
                                    at 55, fixup atom: func3
                                    at 61, fixup atom: func4
                                    at 67, fixup atom: func5
                                    at 73, fixup atom: myenc
                                    at 79, fixup atom: func6
                                    at 85, fixup atom: data1
                                    at 91, fixup atom: data2
                                    at 97, fixup atom: i
                                    at 103, fixup atom: i
                                    at 109, fixup atom: index
                                    at 115, fixup atom: index1
                                    at 121, fixup atom: i
                                    at 127, fixup atom: z
                                    at 133, fixup atom: i
                                    at 139, fixup atom: a
                                    at 145, fixup atom: b
                                    at 151, fixup atom: data3
                                    at 157, fixup atom: data4
                                    at 163, fixup atom: data5
                                    at 171, fixup atom: func1
                                    at 179, fixup atom: func2
                                    at 187, fixup atom: enc1
                                    at 195, fixup atom: dec1
                                    at 203, fixup atom: func3
                                    at 211, fixup atom: func4
                                    at 219, fixup atom: func5
                                    at 227, fixup atom: myenc
                                    at 235, fixup atom: func6
                                    at 241, fixup atom: data1
                                    at 247, fixup atom: data2
                                    at 253, fixup atom: i
                                    at 259, fixup atom: i
                                    at 265, fixup atom: index
                                    at 271, fixup atom: index1
                                    at 277, fixup atom: i
                                    at 283, fixup atom: z
                                    at 289, fixup atom: i
                                    at 295, fixup atom: "********************************"
                                    at 300, fixup atom: a
                                    at 305, fixup atom: welcometoycb2022
                                    at 310, fixup atom: b
                                    at 348, fixup atom: data3
                                    at 362, fixup atom: data4
                                    at 383, fixup atom: data5
                                    at 388, fixup atom: myenc
                                    at 393, fixup atom: "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/="
                                    at 399, fixup atom: _keyStr
                                    at 405, fixup atom: myenc
                                    at 413, fixup atom: encode64
                                    at 419, fixup atom: myenc
                                    at 427, fixup atom: decode64
                                    at 433, fixup atom: myenc
                                    at 438, fixup atom: encode64
                                    at 443, fixup atom: enc1
                                    at 448, fixup atom: a
                                    at 453, fixup atom: b
                                    at 462, fixup atom: data1
                                    at 470, fixup atom: data2
                                    at 478, fixup atom: i
                                    at 483, fixup atom: i
                                    at 488, fixup atom: data1
                                    at 497, fixup atom: data2
                                    at 502, fixup atom: i
                                    at 508, fixup atom: data1
                                    at 513, fixup atom: charCodeAt
                                    at 518, fixup atom: i
                                    at 529, fixup atom: i
                                    at 535, fixup atom: i
                                    at 546, fixup atom: i
                                    at 551, fixup atom: i
                                    at 556, fixup atom: data2
                                    at 565, fixup atom: data2
                                    at 570, fixup atom: i
                                    at 578, fixup atom: data2
                                    at 583, fixup atom: i
                                    at 590, fixup atom: data2
                                    at 602, fixup atom: i
                                    at 608, fixup atom: i
                                    at 617, fixup atom: index
                                    at 623, fixup atom: index1
                                    at 631, fixup atom: i
                                    at 636, fixup atom: i
                                    at 641, fixup atom: data2
                                    at 655, fixup atom: i
                                    at 668, fixup atom: data5
                                    at 673, fixup atom: index
                                    at 679, fixup atom: func5
                                    at 684, fixup atom: data2
                                    at 689, fixup atom: i
                                    at 695, fixup atom: data2
                                    at 700, fixup atom: i
                                    at 708, fixup atom: data2
                                    at 713, fixup atom: i
                                    at 721, fixup atom: data2
                                    at 726, fixup atom: i
                                    at 734, fixup atom: data2
                                    at 739, fixup atom: i
                                    at 747, fixup atom: data2
                                    at 752, fixup atom: i
                                    at 760, fixup atom: data2
                                    at 765, fixup atom: i
                                    at 773, fixup atom: data2
                                    at 778, fixup atom: i
                                    at 794, fixup atom: data5
                                    at 799, fixup atom: index
                                    at 805, fixup atom: data4
                                    at 810, fixup atom: index1
                                    at 819, fixup atom: index1
                                    at 827, fixup atom: index1
                                    at 833, fixup atom: index
                                    at 841, fixup atom: index
                                    at 847, fixup atom: i
                                    at 856, fixup atom: i
                                    at 866, fixup atom: z
                                    at 874, fixup atom: i
                                    at 879, fixup atom: i
                                    at 890, fixup atom: func6
                                    at 895, fixup atom: i
                                    at 903, fixup atom: z
                                    at 911, fixup atom: z
                                    at 917, fixup atom: i
                                    at 923, fixup atom: i
                                    at 933, fixup atom: z
                                    at 942, fixup atom: print
                                    at 947, fixup atom: "Your flag is right!"
                                    at 956, fixup atom: print
                                    at 961, fixup atom: "Your flag is wrong!"
                                  }
                                  debug {
05ef:  fc 03 01 3a 00 8a 01 01
       00 9c 01 06 36 37 c1 49
       00 15 88 02 58 00 05 36
       31 00 05 3a 00 09 34 ad
       2b 71 a3 49 71 bc 00 0e
       0c 21 21 80 4e 00 7c 02
       0d 80 4a 49 5d 21 58 4e
       49 49 3a 3f 0d 3f            filename: "re.js"
                                  }
                                  cpool {
062d:  0a                           bigint {
062e:  88 02 08                       len=8
0631:  10 20 14 40 12 22 16 a4      }
                                  }
0639:  0a                         bigint {
063a:  88 02 08                     len=8
063d:  30 f8 1a 12 7e 52 7c 8e    }
                                }
0645:  0a                       bigint {
0646:  88 02 08                   len=8
0649:  18 3a 1c 40 3a 76 16 fc  }
                              }
0651:  0a                     bigint {
0652:  88 02 08                 len=8
0655:  18 fe 1c c4 3a 7e 16 fe}
                            }
065d:  0a                   bigint {
065e:  88 02 08               len=8
0661:  10 7c 1c 40 12 3a 16 be}
                          }
0669:  0a                 bigint {
066a:  f4 01 08             len=8
066d:  c0 81 01 04 80 03 43 83}
                        }
0675:  0a               bigint {
0676:  88 02 08           len=8
0679:  72 f4 76 a2 6a 60 6e aa}
                      }
0681:  0a             bigint {
0682:  84 02 08         len=8
0685:  5c 1c 50 1c 3c 74 3c 8c}
                    }
068d:  0a           bigint {
068e:  84 02 08       len=8
0691:  7c 1c 71 bc bd 7c bc fc}
                  }
0699:  0a         bigint {
069a:  84 02 08     len=8
069d:  1c 18 51 a8 3d 3c 34 fc}
                }
06a5:  0a       bigint {
06a6:  88 02 07   len=7
06a9:  02 08 32 88 f0 40 80}
              }
06b0:  0a     bigint {
06b1:  88 02 08 len=8
06b4:  36 fe 3e 3e 9e fe 7e f4}
            }
06bc:  0a   bigint {
06bd:  88 02 08len=8
06c0:  16 2a 3e 3e 8e f4 72 a4}
          }
06c8:  0a bigint {
06c9:  88 02 08len=8
06cc:  36 fe 3e 3e 9e fe 7e f4}
        }
06d4:  0abigint {
06d5:  88 02 08len=8
06d8:  26 7a 08 32 8e f6 6e f0}
      }
06e0:  0abigint {
06e1:  80 02 08len=8
06e4:  18 f0 a1 00 48 e9 50 e9}
    }
06ec:  0abigint {
06ed:  88 02 08len=8
06f0:  0e 88 0e d4 1e de 18 fe}
  }
06f8:  0abigint {
06f9:  88 02 08len=8
06fc:  26 7a 08 f0 2e 06 2e f8}
}
0704:  0abigint {
0705:  00}
}
0706:  0efunction {
0707:  43 06 00 cc 03 02 04 02
       09 00 00 84 01 06name: func1
args=2 vars=4 defargs=2 closures=0 cpool=0
stack=9 bclen=132 locals=6
vars {
0715:  fe 03 00 01 00name: v
071a:  80 04 00 01 00name: w
071f:  82 04 00 00 00name: vl
0724:  84 04 00 01 00name: n
0729:  86 04 00 02 00name: m
072e:  e2 03 00 03 00name: i
}
bytecode {
0733:  d1 e9 cd b6 9e b7 a0 ca
       d2 ea 18 d1 c5 b6 9e 47
       cf c6 b8 9e a3 11 eb 05
       0e c7 c6 a5 ea 03 07 28
       c7 ca b5 cc c8 c5 a3 ea
       3b d1 c8 71 38 99 00 00
       00 42 04 01 00 00 d1 c8
       47 be ff 00 ad d1 c8 47
       bd 08 a2 be ff 00 ad d1
       c8 47 bd 10 a2 be ff 00
       ad d1 c8 47 bd 18 a2 be
       ff 00 ad 24 04 00 49 93
       03 ec c2 d2 ea 15 d1 42
       5b 00 00 00 c1 24 01 00
       42 05 01 00 00 b5 c6 25
       02 00 d1 42 5b 00 00 00
       c1 25 01 00at 45, fixup atom: String
  at 50, fixup atom: fromCharCode
  at 104, fixup atom: join
  at 113, fixup atom: substring
  at 124, fixup atom: join
}
debug {
07b7:  fc 03 0c 0f 03 0d 21 12
       1c 53 0e 26 67 35 35 49
       17 12 69filename: "re.js"
}
re.js:12: function: func1
  args: v w
  locals:
    0: var vl
    1: var n
    2: var m
    3: var i
  stack_size: 9
  opcodes:
        get_arg0 0: v
        get_length
        set_loc0 0: vl
        push_1 1
        sub
        push_2 2
        shl
        put_loc1 1: n
        get_arg1 1: w
        if_false8 34
        get_arg0 0: v
        get_loc0 0: vl
        push_1 1
        sub
        get_array_el
        set_loc2 2: m
        get_loc1 1: n
        push_3 3
        sub
        lt
        dup
        if_true8 28
        drop
        get_loc2 2: m
        get_loc1 1: n
        gt
   28:  if_false8 32
        null
        return
   32:  get_loc2 2: m
        put_loc1 1: n
   34:  push_0 0
        put_loc3 3: i
   36:  get_loc3 3: i
        get_loc0 0: vl
        lt
        if_false8 99
        get_arg0 0: v
        get_loc3 3: i
        to_propkey2
        get_var String
        get_field2 fromCharCode
        get_arg0 0: v
        get_loc3 3: i
        get_array_el
        push_i16 255
        and
        get_arg0 0: v
        get_loc3 3: i
        get_array_el
        push_i8 8
        shr
        push_i16 255
        and
        get_arg0 0: v
        get_loc3 3: i
        get_array_el
        push_i8 16
        shr
        push_i16 255
        and
        get_arg0 0: v
        get_loc3 3: i
        get_array_el
        push_i8 24
        shr
        push_i16 255
        and
        call_method 4
        put_array_el
        inc_loc 3: i
        goto8 36
   99:  get_arg1 1: w
        if_false8 122
        get_arg0 0: v
        get_field2 join
        push_empty_string
        call_method 1
        get_field2 substring
        push_0 0
        get_loc1 1: n
        tail_call_method 2
  122:  get_arg0 0: v
        get_field2 join
        push_empty_string
        tail_call_method 1

}
07ca:  0efunction {
07cb:  43 06 00 ce 03 02 03 02
       07 00 00 5d 05name: func2
args=2 vars=3 defargs=2 closures=0 cpool=0
stack=7 bclen=93 locals=5
vars {
07d8:  8c 04 00 01 00name: s
07dd:  80 04 00 01 00name: w
07e2:  8e 04 00 00 00name: len
07e7:  fe 03 00 01 00name: v
07ec:  e2 03 00 02 00name: i
}
bytecode {
07f1:  d1 e9 c9 26 00 00 ca b5
       cb c7 c5 a3 ea 46 c6 c7
       b7 a1 71 d1 42 fa 00 00
       00 c7 24 01 00 d1 42 fa
       00 00 00 c7 b6 9d 24 01
       00 bd 08 a0 af d1 42 fa
       00 00 00 c7 b7 9d 24 01
       00 bd 10 a0 af d1 42 fa
       00 00 00 c7 b8 9d 24 01
       00 bd 18 a0 af 49 b9 94
       02 ec b7 d2 ea 06 c6 c6
       e9 c5 49 c6 28at 21, fixup atom: charCodeAt
  at 31, fixup atom: charCodeAt
  at 47, fixup atom: charCodeAt
  at 63, fixup atom: charCodeAt
}
debug {
084e:  fc 03 22 0b 03 12 17 26
       4e 53 53 58 1c 12 1dfilename: "re.js"
}
re.js:34: function: func2
  args: s w
  locals:
    0: var len
    1: var v
    2: var i
  stack_size: 7
  opcodes:
        get_arg0 0: s
        get_length
        put_loc0 0: len
        array_from 0
        put_loc1 1: v
        push_0 0
        put_loc2 2: i
    9:  get_loc2 2: i
        get_loc0 0: len
        lt
        if_false8 83
        get_loc1 1: v
        get_loc2 2: i
        push_2 2
        sar
        to_propkey2
        get_arg0 0: s
        get_field2 charCodeAt
        get_loc2 2: i
        call_method 1
        get_arg0 0: s
        get_field2 charCodeAt
        get_loc2 2: i
        push_1 1
        add
        call_method 1
        push_i8 8
        shl
        or
        get_arg0 0: s
        get_field2 charCodeAt
        get_loc2 2: i
        push_2 2
        add
        call_method 1
        push_i8 16
        shl
        or
        get_arg0 0: s
        get_field2 charCodeAt
        get_loc2 2: i
        push_3 3
        add
        call_method 1
        push_i8 24
        shl
        or
        put_array_el
        push_4 4
        add_loc 2: i
        goto8 9
   83:  get_arg1 1: w
        if_false8 91
        get_loc1 1: v
        get_loc1 1: v
        get_length
        get_loc0 0: len
        put_array_el
   91:  get_loc1 1: v
        return

}
085d:  0efunction {
085e:  43 06 00 d0 03 02 0b 02
       06 00 03 87 02 0dname: enc1
args=2 vars=11 defargs=2 closures=0 cpool=3
stack=6 bclen=263 locals=13
vars {
086c:  90 04 00 01 00name: str
0871:  c4 03 00 01 00name: b
0876:  fe 03 00 00 00name: v
087b:  92 04 00 01 00name: k
0880:  84 04 00 02 00name: n
0885:  e6 03 00 03 00name: z
088a:  94 04 00 04 00name: y
088f:  96 04 00 05 00name: delta
0894:  98 04 00 06 00name: mx
0899:  9a 04 00 07 00name: e
089e:  9c 04 00 08 00name: p
08a3:  9e 04 00 09 00name: q
08a8:  a0 04 00 0a 00name: sum
}
bytecode {
08ad:  d1 c1 a9 ea 03 c1 28 38
       e7 00 00 00 d1 09 f0 c9
       38 e7 00 00 00 d2 09 f0
       ce e9 b9 a3 ea 08 c6 b9
       43 30 00 00 00 c5 e9 b6
       9e cb c5 c7 47 cc c5 b5
       47 c3 04 01 14 14 45 11
       c3 05 38 9d 00 00 00 42
       11 01 00 00 bb bd 34 c7
       b6 9d 9b 9d 24 01 00 c3
       09 b5 c3 0a b5 c2 09 90
       c3 09 a3 69 9b 00 00 00
       c2 0a c2 05 9d bf 00 ad
       c4 0a b7 a2 b8 ad c3 07
       b5 c3 08 c2 08 c7 a3 ea
       43 c5 c2 08 b6 9d 47 c3
       04 c8 bb a2 c2 04 b8 a0
       ae c2 04 b9 a2 c8 ba a0
       ae 9d c2 0a c2 04 ae c6
       c2 08 b8 ad c2 07 ae 47
       c8 ae 9d ae c3 06 c5 c2
       08 71 c5 c2 08 47 c2 06
       9d bf 01 ad 16 49 cc 93
       08 ec b9 c5 b5 47 c3 04
       c8 bb a2 c2 04 b8 a0 ae
       c2 04 b9 a2 c8 ba a0 ae
       9d c2 0a c2 04 ae c6 c2
       08 b8 ad c2 07 ae 47 c8
       ae 9d ae c3 06 c5 c7 71
       c5 c7 47 c2 06 9d bf 02
       ad 16 49 cc ed 5f ff 38
       ea 00 00 00 38 e6 00 00
       00 c5 09 f0 23 01 00at 8, fixup atom: func2
  at 17, fixup atom: func2
  at 33, fixup atom: length
  at 59, fixup atom: Math
  at 64, fixup atom: floor
  at 248, fixup atom: func3
  at 253, fixup atom: func1
}
debug {
09b4:  fc 03 31 17 03 1c 08 08
       30 2b 21 27 1d 53 85 3f
       35 21 30 2b bc 58 17 1c
       bc 4e 13filename: "re.js"
}
cpool {
09cf:  06float64 {
09d0:  00 00 e0 ff ff ff ef 414.29497e+09
  }
09d8:  06float64 {
09d9:  00 00 e0 ff ff ff ef 414.29497e+09
  }
09e1:  06float64 {
09e2:  00 00 e0 ff ff ff ef 414.29497e+09
  }
}
re.js:49: function: enc1
  args: str b
  locals:
    0: var v
    1: var k
    2: var n
    3: var z
    4: var y
    5: var delta
    6: var mx
    7: var e
    8: var p
    9: var q
   10: var sum
  stack_size: 6
  opcodes:
        get_arg0 0: str
        push_empty_string
        eq
        if_false8 7
        push_empty_string
        return
    7:  get_var func2
        get_arg0 0: str
        push_false
        call2 2
        put_loc0 0: v
        get_var func2
        get_arg1 1: b
        push_false
        call2 2
        set_loc1 1: k
        get_length
        push_4 4
        lt
        if_false8 37
        get_loc1 1: k
        push_4 4
        put_field length
   37:  get_loc0 0: v
        get_length
        push_1 1
        sub
        put_loc2 2: n
        get_loc0 0: v
        get_loc2 2: n
        get_array_el
        put_loc3 3: z
        get_loc0 0: v
        push_0 0
        get_array_el
        put_loc8 4: y
        push_i32 289739796
        put_loc8 5: delta
        get_var Math
        get_field2 floor
        push_6 6
        push_i8 52
        get_loc2 2: n
        push_1 1
        add
        div
        add
        call_method 1
        put_loc8 9: q
        push_0 0
        put_loc8 10: sum
   84:  push_0 0
        get_loc8 9: q
        post_dec
        put_loc8 9: q
        lt
        if_false 247
        get_loc8 10: sum
        get_loc8 5: delta
        add
        push_const8 0: 4294967295
        and
        set_loc8 10: sum
        push_2 2
        shr
        push_3 3
        and
        put_loc8 7: e
        push_0 0
        put_loc8 8: p
  115:  get_loc8 8: p
        get_loc2 2: n
        lt
        if_false8 187
        get_loc0 0: v
        get_loc8 8: p
        push_1 1
        add
        get_array_el
        put_loc8 4: y
        get_loc3 3: z
        push_6 6
        shr
        get_loc8 4: y
        push_3 3
        shl
        xor
        get_loc8 4: y
        push_4 4
        shr
        get_loc3 3: z
        push_5 5
        shl
        xor
        add
        get_loc8 10: sum
        get_loc8 4: y
        xor
        get_loc1 1: k
        get_loc8 8: p
        push_3 3
        and
        get_loc8 7: e
        xor
        get_array_el
        get_loc3 3: z
        xor
        add
        xor
        put_loc8 6: mx
        get_loc0 0: v
        get_loc8 8: p
        to_propkey2
        get_loc0 0: v
        get_loc8 8: p
        get_array_el
        get_loc8 6: mx
        add
        push_const8 1: 4294967295
        and
        insert3
        put_array_el
        put_loc3 3: z
        inc_loc 8: p
        goto8 115
  187:  get_loc0 0: v
        push_0 0
        get_array_el
        put_loc8 4: y
        get_loc3 3: z
        push_6 6
        shr
        get_loc8 4: y
        push_3 3
        shl
        xor
        get_loc8 4: y
        push_4 4
        shr
        get_loc3 3: z
        push_5 5
        shl
        xor
        add
        get_loc8 10: sum
        get_loc8 4: y
        xor
        get_loc1 1: k
        get_loc8 8: p
        push_3 3
        and
        get_loc8 7: e
        xor
        get_array_el
        get_loc3 3: z
        xor
        add
        xor
        put_loc8 6: mx
        get_loc0 0: v
        get_loc2 2: n
        to_propkey2
        get_loc0 0: v
        get_loc2 2: n
        get_array_el
        get_loc8 6: mx
        add
        push_const8 2: 4294967295
        and
        insert3
        put_array_el
        put_loc3 3: z
        goto16 84
  247:  get_var func3
        get_var func1
        get_loc0 0: v
        push_false
        call2 2
        tail_call 1

}
09ea:  0efunction {
09eb:  43 06 00 d2 03 02 0b 02
       06 00 04 85 02 0dname: dec1
args=2 vars=11 defargs=2 closures=0 cpool=4
stack=6 bclen=261 locals=13
vars {
09f9:  90 04 00 01 00name: str
09fe:  c4 03 00 01 00name: b
0a03:  fe 03 00 00 00name: v
0a08:  92 04 00 01 00name: k
0a0d:  84 04 00 02 00name: n
0a12:  e6 03 00 03 00name: z
0a17:  94 04 00 04 00name: y
0a1c:  96 04 00 05 00name: delta
0a21:  98 04 00 06 00name: mx
0a26:  9a 04 00 07 00name: e
0a2b:  9c 04 00 08 00name: p
0a30:  9e 04 00 09 00name: q
0a35:  a0 04 00 0a 00name: sum
}
bytecode {
0a3a:  d1 c1 a9 ea 03 c1 28 38
       e7 00 00 00 d1 09 f0 c9
       38 e7 00 00 00 d2 09 f0
       ce e9 b9 a3 ea 08 c6 b9
       43 30 00 00 00 c5 e9 b6
       9e cb c5 c7 b6 9e 47 cc
       c5 b5 47 c3 04 01 14 14
       45 11 c3 05 38 9d 00 00
       00 42 11 01 00 00 bb bd
       34 c7 b6 9d 9b 9d 24 01
       00 c4 09 c2 05 9a bf 00
       ad c3 0a c2 0a b5 aa 69
       9b 00 00 00 c2 0a b7 a2
       b8 ad c3 07 c7 c3 08 c2
       08 b5 a5 ea 42 c5 c2 08
       b6 9e 47 d0 bb a2 c2 04
       b8 a0 ae c2 04 b9 a2 c8
       ba a0 ae 9d c2 0a c2 04
       ae c6 c2 08 b8 ad c2 07
       ae 47 c8 ae 9d ae c3 06
       c5 c2 08 71 c5 c2 08 47
       c2 06 9e bf 01 ad 16 49
       c3 04 92 08 ec ba c5 c7
       47 d0 bb a2 c2 04 b8 a0
       ae c2 04 b9 a2 c8 ba a0
       ae 9d c2 0a c2 04 ae c6
       c2 08 b8 ad c2 07 ae 47
       c8 ae 9d ae c3 06 c5 b5
       71 c5 b5 47 c2 06 9e bf
       02 ad 16 49 c3 04 c2 0a
       c2 05 9e bf 03 ad c3 0a
       ed 62 ff 38 e6 00 00 00
       c5 0a 23 02 00at 8, fixup atom: func2
  at 17, fixup atom: func2
  at 33, fixup atom: length
  at 61, fixup atom: Math
  at 66, fixup atom: floor
  at 252, fixup atom: func1
}
debug {
0b3f:  fc 03 4e 17 03 1c 08 08
       30 2b 21 27 1d 5d 9e 30
       2b 30 26 b7 5d 17 17 b7
       53 35 13filename: "re.js"
}
cpool {
0b5a:  06float64 {
0b5b:  00 00 e0 ff ff ff ef 414.29497e+09
  }
0b63:  06float64 {
0b64:  00 00 e0 ff ff ff ef 414.29497e+09
  }
0b6c:  06float64 {
0b6d:  00 00 e0 ff ff ff ef 414.29497e+09
  }
0b75:  06float64 {
0b76:  00 00 e0 ff ff ff ef 414.29497e+09
  }
}
re.js:78: function: dec1
  args: str b
  locals:
    0: var v
    1: var k
    2: var n
    3: var z
    4: var y
    5: var delta
    6: var mx
    7: var e
    8: var p
    9: var q
   10: var sum
  stack_size: 6
  opcodes:
        get_arg0 0: str
        push_empty_string
        eq
        if_false8 7
        push_empty_string
        return
    7:  get_var func2
        get_arg0 0: str
        push_false
        call2 2
        put_loc0 0: v
        get_var func2
        get_arg1 1: b
        push_false
        call2 2
        set_loc1 1: k
        get_length
        push_4 4
        lt
        if_false8 37
        get_loc1 1: k
        push_4 4
        put_field length
   37:  get_loc0 0: v
        get_length
        push_1 1
        sub
        put_loc2 2: n
        get_loc0 0: v
        get_loc2 2: n
        push_1 1
        sub
        get_array_el
        put_loc3 3: z
        get_loc0 0: v
        push_0 0
        get_array_el
        put_loc8 4: y
        push_i32 289739796
        put_loc8 5: delta
        get_var Math
        get_field2 floor
        push_6 6
        push_i8 52
        get_loc2 2: n
        push_1 1
        add
        div
        add
        call_method 1
        set_loc8 9: q
        get_loc8 5: delta
        mul
        push_const8 0: 4294967295
        and
        put_loc8 10: sum
   91:  get_loc8 10: sum
        push_0 0
        neq
        if_false 251
        get_loc8 10: sum
        push_2 2
        shr
        push_3 3
        and
        put_loc8 7: e
        get_loc2 2: n
        put_loc8 8: p
  111:  get_loc8 8: p
        push_0 0
        gt
        if_false8 182
        get_loc0 0: v
        get_loc8 8: p
        push_1 1
        sub
        get_array_el
        set_loc3 3: z
        push_6 6
        shr
        get_loc8 4: y
        push_3 3
        shl
        xor
        get_loc8 4: y
        push_4 4
        shr
        get_loc3 3: z
        push_5 5
        shl
        xor
        add
        get_loc8 10: sum
        get_loc8 4: y
        xor
        get_loc1 1: k
        get_loc8 8: p
        push_3 3
        and
        get_loc8 7: e
        xor
        get_array_el
        get_loc3 3: z
        xor
        add
        xor
        put_loc8 6: mx
        get_loc0 0: v
        get_loc8 8: p
        to_propkey2
        get_loc0 0: v
        get_loc8 8: p
        get_array_el
        get_loc8 6: mx
        sub
        push_const8 1: 4294967295
        and
        insert3
        put_array_el
        put_loc8 4: y
        dec_loc 8: p
        goto8 111
  182:  get_loc0 0: v
        get_loc2 2: n
        get_array_el
        set_loc3 3: z
        push_6 6
        shr
        get_loc8 4: y
        push_3 3
        shl
        xor
        get_loc8 4: y
        push_4 4
        shr
        get_loc3 3: z
        push_5 5
        shl
        xor
        add
        get_loc8 10: sum
        get_loc8 4: y
        xor
        get_loc1 1: k
        get_loc8 8: p
        push_3 3
        and
        get_loc8 7: e
        xor
        get_array_el
        get_loc3 3: z
        xor
        add
        xor
        put_loc8 6: mx
        get_loc0 0: v
        push_0 0
        to_propkey2
        get_loc0 0: v
        push_0 0
        get_array_el
        get_loc8 6: mx
        sub
        push_const8 2: 4294967295
        and
        insert3
        put_array_el
        put_loc8 4: y
        get_loc8 10: sum
        get_loc8 5: delta
        sub
        push_const8 3: 4294967295
        and
        put_loc8 10: sum
        goto16 91
  251:  get_var func1
        get_loc0 0: v
        push_true
        tail_call 2

}
0b7e:  0efunction {
0b7f:  43 06 00 d4 03 01 03 01
       04 00 01 32 04name: func3
args=1 vars=3 defargs=1 closures=0 cpool=1
stack=4 bclen=50 locals=4
vars {
0b8c:  b0 01 00 01 00name: input
0b91:  a4 04 00 00 00name: output
0b96:  a6 04 00 01 00name: chr1
0b9b:  e2 03 00 02 00name: i
}
bytecode {
0ba0:  c1 c9 c1 ca b5 cb d1 42
       fa 00 00 00 c7 91 cb 24
       01 00 42 37 00 00 00 bd
       10 24 01 00 ce e9 b6 a9
       ea 06 bf 00 c6 9d ca c6
       94 00 c7 d1 e9 a3 eb d7
       c5 28at 8, fixup atom: charCodeAt
  at 19, fixup atom: toString
}
debug {
0bd2:  fc 03 6c 08 03 0d 0d 0e
       76 35 12 21filename: "re.js"
}
cpool {
0bde:  07string {
1"0"
0bdf:  02 30}
}
re.js:108: function: func3
  args: input
  locals:
    0: var output
    1: var chr1
    2: var i
  stack_size: 4
  opcodes:
        push_empty_string
        put_loc0 0: output
        push_empty_string
        put_loc1 1: chr1
        push_0 0
        put_loc2 2: i
    6:  get_arg0 0: input
        get_field2 charCodeAt
        get_loc2 2: i
        post_inc
        put_loc2 2: i
        call_method 1
        get_field2 toString
        push_i8 16
        call_method 1
        set_loc1 1: chr1
        get_length
        push_1 1
        eq
        if_false8 39
        push_const8 0: 1"0"
        get_loc1 1: chr1
        add
        put_loc1 1: chr1
   39:  get_loc1 1: chr1
        add_loc 0: output
        get_loc2 2: i
        get_arg0 0: input
        get_length
        lt
        if_true8 6
        get_loc0 0: output
        return

}
0be1:  0efunction {
0be2:  43 06 00 d6 03 01 03 01
       06 00 00 52 04name: func4
args=1 vars=3 defargs=1 closures=0 cpool=0
stack=6 bclen=82 locals=4
vars {
0bef:  b0 01 00 01 00name: input
0bf4:  a4 04 00 00 00name: output
0bf9:  e2 03 00 01 00name: i
0bfe:  92 04 00 02 00name: k
}
bytecode {
0c03:  c1 c9 b5 ca c6 d1 e9 a3
       ea 47 38 14 01 00 00 d1
       42 15 01 00 00 c6 b6 24
       02 00 bd 10 f0 b9 a0 38
       14 01 00 00 d1 42 15 01
       00 00 c6 8f ce b6 24 02
       00 bd 10 f0 af cf be ff
       00 ad cb c5 38 99 00 00
       00 42 04 01 00 00 c7 24
       01 00 9d c9 93 01 ec b5
       c5 28at 11, fixup atom: parseInt
  at 17, fixup atom: substr
  at 32, fixup atom: parseInt
  at 38, fixup atom: substr
  at 61, fixup atom: String
  at 66, fixup atom: fromCharCode
}
debug {
0c55:  fc 03 78 09 03 0d 0d 21
       da 21 58 0d 0dfilename: "re.js"
}
re.js:120: function: func4
  args: input
  locals:
    0: var output
    1: var i
    2: var k
  stack_size: 6
  opcodes:
        push_empty_string
        put_loc0 0: output
        push_0 0
        put_loc1 1: i
    4:  get_loc1 1: i
        get_arg0 0: input
        get_length
        lt
        if_false8 80
        get_var parseInt
        get_arg0 0: input
        get_field2 substr
        get_loc1 1: i
        push_1 1
        call_method 2
        push_i8 16
        call2 2
        push_4 4
        shl
        get_var parseInt
        get_arg0 0: input
        get_field2 substr
        get_loc1 1: i
        inc
        set_loc1 1: i
        push_1 1
        call_method 2
        push_i8 16
        call2 2
        or
        set_loc2 2: k
        push_i16 255
        and
        put_loc2 2: k
        get_loc0 0: output
        get_var String
        get_field2 fromCharCode
        get_loc2 2: k
        call_method 1
        add
        put_loc0 0: output
        inc_loc 1: i
        goto8 4
   80:  get_loc0 0: output
        return

}
0c62:  0efunction {
0c63:  43 06 00 d8 03 08 02 08
       04 00 00 43 0aname: func5
args=8 vars=2 defargs=8 closures=0 cpool=0
stack=4 bclen=67 locals=10
vars {
0c70:  ac 04 00 01 00name: byte1
0c75:  ae 04 00 01 00name: byte2
0c7a:  b0 04 00 01 00name: byte3
0c7f:  b2 04 00 01 00name: byte4
0c84:  b4 04 00 01 00name: byte5
0c89:  b6 04 00 01 00name: byte6
0c8e:  b8 04 00 01 00name: byte7
0c93:  ba 04 00 01 00name: byte8
0c98:  c2 03 00 00 00name: a
0c9d:  c4 03 00 01 00name: b
}
bytecode {
0ca2:  d1 d2 bd 08 a0 af d3 bd
       10 a0 af d4 bd 18 a0 af
       b5 a2 c9 5b 04 00 5b 05
       00 bd 08 a0 af 5b 06 00
       bd 10 a0 af 5b 07 00 bd
       18 a0 af b5 a2 ca 38 b2
       00 00 00 c6 b7 bd 20 9f
       9a ef 38 b2 00 00 00 c5
       ef 9d 28at 47, fixup atom: BigInt
  at 59, fixup atom: BigInt
}
debug {
0ce5:  fc 03 85 01 03 03 62 8afilename: "re.js"
}
re.js:133: function: func5
  args: byte1 byte2 byte3 byte4 byte5 byte6 byte7 byte8
  locals:
    0: var a
    1: var b
  stack_size: 4
  opcodes:
        get_arg0 0: byte1
        get_arg1 1: byte2
        push_i8 8
        shl
        or
        get_arg2 2: byte3
        push_i8 16
        shl
        or
        get_arg3 3: byte4
        push_i8 24
        shl
        or
        push_0 0
        shr
        put_loc0 0: a
        get_arg 4: byte5
        get_arg 5: byte6
        push_i8 8
        shl
        or
        get_arg 6: byte7
        push_i8 16
        shl
        or
        get_arg 7: byte8
        push_i8 24
        shl
        or
        push_0 0
        shr
        put_loc1 1: b
        get_var BigInt
        get_loc1 1: b
        push_2 2
        push_i8 32
        pow
        mul
        call1 1
        get_var BigInt
        get_loc0 0: a
        call1 1
        add
        return

}
0ced:  0efunction {
0cee:  43 06 00 da 03 00 00 00
       00 00 00 01 00name: myenc
args=0 vars=0 defargs=0 closures=0 cpool=0
stack=0 bclen=1 locals=0
bytecode {
0cfb:  29}
debug {
0cfc:  fc 03 8c 01 01 03filename: "re.js"
}
re.js:140: function: myenc
  stack_size: 0
  opcodes:
        return_undef

}
0d02:  0efunction {
0d03:  43 06 00 00 01 09 01 04
       00 00 e6 01 0aname: "<null>"
args=1 vars=9 defargs=1 closures=0 cpool=0
stack=4 bclen=230 locals=10
vars {
0d10:  b0 01 00 01 00name: input
0d15:  a4 04 00 00 00name: output
0d1a:  a6 04 00 01 00name: chr1
0d1f:  bc 04 00 02 00name: chr2
0d24:  be 04 00 03 00name: chr3
0d29:  d0 03 00 04 00name: enc1
0d2e:  c0 04 00 05 00name: enc2
0d33:  c2 04 00 06 00name: enc3
0d38:  c4 04 00 07 00name: enc4
0d3d:  e2 03 00 08 00name: i
}
bytecode {
0d42:  c1 c9 c1 cc c1 c3 07 b5
       c3 08 d1 42 fa 00 00 00
       c2 08 91 c3 08 24 01 00
       ca d1 42 fa 00 00 00 c2
       08 91 c3 08 24 01 00 cb
       d1 42 fa 00 00 00 c2 08
       91 c3 08 24 01 00 cc c6
       b7 a1 c3 04 c6 b8 ad b9
       a0 c7 b9 a1 af c3 05 c7
       bd 0f ad b7 a0 c8 bb a1
       af c3 06 c8 bd 3f ad c3
       07 38 23 01 00 00 c7 ef
       ea 09 bd 40 c4 07 c3 06
       ec 0e 38 23 01 00 00 c8
       ef ea 05 bd 40 c3 07 c5
       38 ed 00 00 00 41 f7 00
       00 00 42 24 01 00 00 c2
       04 24 01 00 9d 38 ed 00
       00 00 41 f7 00 00 00 42
       24 01 00 00 c2 05 24 01
       00 9d 38 ed 00 00 00 41
       f7 00 00 00 42 24 01 00
       00 c2 06 24 01 00 9d 38
       ed 00 00 00 41 f7 00 00
       00 42 24 01 00 00 c2 07
       24 01 00 9d c9 c1 d0 cf
       ca c1 c4 07 c4 06 c4 05
       c3 04 c2 08 d1 e9 a3 6a
       2a ff ff ff c5 28at 12, fixup atom: charCodeAt
  at 27, fixup atom: charCodeAt
  at 42, fixup atom: charCodeAt
  at 90, fixup atom: isNaN
  at 107, fixup atom: isNaN
  at 121, fixup atom: myenc
  at 126, fixup atom: _keyStr
  at 131, fixup atom: charAt
  at 142, fixup atom: myenc
  at 147, fixup atom: _keyStr
  at 152, fixup atom: charAt
  at 163, fixup atom: myenc
  at 168, fixup atom: _keyStr
  at 173, fixup atom: charAt
  at 184, fixup atom: myenc
  at 189, fixup atom: _keyStr
  at 194, fixup atom: charAt
}
debug {
0e28:  fc 03 8f 01 18 03 0d 0d
       12 13 4e 4e 4e 1c 3a 3f
       21 30 21 3a 18 08 6c 6c
       6c 71 17 30 35filename: "re.js"
}
re.js:143: function: <null>
  args: input
  locals:
    0: var output
    1: var chr1
    2: var chr2
    3: var chr3
    4: var enc1
    5: var enc2
    6: var enc3
    7: var enc4
    8: var i
  stack_size: 4
  opcodes:
        push_empty_string
        put_loc0 0: output
        push_empty_string
        put_loc3 3: chr3
        push_empty_string
        put_loc8 7: enc4
        push_0 0
        put_loc8 8: i
   10:  get_arg0 0: input
        get_field2 charCodeAt
        get_loc8 8: i
        post_inc
        put_loc8 8: i
        call_method 1
        put_loc1 1: chr1
        get_arg0 0: input
        get_field2 charCodeAt
        get_loc8 8: i
        post_inc
        put_loc8 8: i
        call_method 1
        put_loc2 2: chr2
        get_arg0 0: input
        get_field2 charCodeAt
        get_loc8 8: i
        post_inc
        put_loc8 8: i
        call_method 1
        put_loc3 3: chr3
        get_loc1 1: chr1
        push_2 2
        sar
        put_loc8 4: enc1
        get_loc1 1: chr1
        push_3 3
        and
        push_4 4
        shl
        get_loc2 2: chr2
        push_4 4
        sar
        or
        put_loc8 5: enc2
        get_loc2 2: chr2
        push_i8 15
        and
        push_2 2
        shl
        get_loc3 3: chr3
        push_6 6
        sar
        or
        put_loc8 6: enc3
        get_loc3 3: chr3
        push_i8 63
        and
        put_loc8 7: enc4
        get_var isNaN
        get_loc2 2: chr2
        call1 1
        if_false8 106
        push_i8 64
        set_loc8 7: enc4
        put_loc8 6: enc3
        goto8 119
  106:  get_var isNaN
        get_loc3 3: chr3
        call1 1
        if_false8 119
        push_i8 64
        put_loc8 7: enc4
  119:  get_loc0 0: output
        get_var myenc
        get_field _keyStr
        get_field2 charAt
        get_loc8 4: enc1
        call_method 1
        add
        get_var myenc
        get_field _keyStr
        get_field2 charAt
        get_loc8 5: enc2
        call_method 1
        add
        get_var myenc
        get_field _keyStr
        get_field2 charAt
        get_loc8 6: enc3
        call_method 1
        add
        get_var myenc
        get_field _keyStr
        get_field2 charAt
        get_loc8 7: enc4
        call_method 1
        add
        put_loc0 0: output
        push_empty_string
        set_loc3 3: chr3
        set_loc2 2: chr2
        put_loc1 1: chr1
        push_empty_string
        set_loc8 7: enc4
        set_loc8 6: enc3
        set_loc8 5: enc2
        put_loc8 4: enc1
        get_loc8 8: i
        get_arg0 0: input
        get_length
        lt
        if_true 10
        get_loc0 0: output
        return

}
0e45:  0efunction {
0e46:  43 06 00 00 01 0a 01 06
       00 04 b5 02 0bname: "<null>"
args=1 vars=10 defargs=1 closures=0 cpool=4
stack=6 bclen=309 locals=11
vars {
0e53:  b0 01 00 01 00name: input
0e58:  a4 04 00 00 00name: output
0e5d:  a6 04 00 01 00name: chr1
0e62:  bc 04 00 02 00name: chr2
0e67:  be 04 00 03 00name: chr3
0e6c:  d0 03 00 04 00name: enc1
0e71:  c0 04 00 05 00name: enc2
0e76:  c2 04 00 06 00name: enc3
0e7b:  c4 04 00 07 00name: enc4
0e80:  e2 03 00 08 00name: i
0e85:  ca 04 00 09 00name: myenctest
}
bytecode {
0e8a:  c1 c9 c1 cc c1 c3 07 b5
       c3 08 bf 00 bf 01 33 c4
       09 42 86 00 00 00 d1 24
       01 00 ea 07 04 26 01 00
       00 28 d1 42 27 01 00 00
       bf 02 bf 03 33 c1 24 02
       00 d5 38 ed 00 00 00 41
       f7 00 00 00 42 28 01 00
       00 d1 42 24 01 00 00 c2
       08 91 c3 08 24 01 00 24
       01 00 c3 04 38 ed 00 00
       00 41 f7 00 00 00 42 28
       01 00 00 d1 42 24 01 00
       00 c2 08 91 c3 08 24 01
       00 24 01 00 c3 05 38 ed
       00 00 00 41 f7 00 00 00
       42 28 01 00 00 d1 42 24
       01 00 00 c2 08 91 c3 08
       24 01 00 24 01 00 c3 06
       38 ed 00 00 00 41 f7 00
       00 00 42 28 01 00 00 d1
       42 24 01 00 00 c2 08 91
       c3 08 24 01 00 24 01 00
       c3 07 c2 04 b7 a0 c2 05
       b9 a1 af ca c2 05 bd 0f
       ad b9 a0 c2 06 b7 a1 af
       cb c2 06 b8 ad bb a0 c2
       07 af cc c5 38 99 00 00
       00 42 04 01 00 00 c6 24
       01 00 9d c9 c2 06 bd 40
       aa ea 12 c5 38 99 00 00
       00 42 04 01 00 00 c7 24
       01 00 9d c9 c2 07 bd 40
       aa ea 12 c5 38 99 00 00
       00 42 04 01 00 00 c8 24
       01 00 9d c9 c1 d0 cf ca
       c1 c4 07 c4 06 c4 05 c3
       04 c2 08 d1 e9 a3 6a 03
       ff ff ff c5 28at 18, fixup atom: exec
  at 29, fixup atom: error
  at 36, fixup atom: replace
  at 51, fixup atom: myenc
  at 56, fixup atom: _keyStr
  at 61, fixup atom: indexOf
  at 67, fixup atom: charAt
  at 85, fixup atom: myenc
  at 90, fixup atom: _keyStr
  at 95, fixup atom: indexOf
  at 101, fixup atom: charAt
  at 119, fixup atom: myenc
  at 124, fixup atom: _keyStr
  at 129, fixup atom: indexOf
  at 135, fixup atom: charAt
  at 153, fixup atom: myenc
  at 158, fixup atom: _keyStr
  at 163, fixup atom: indexOf
  at 169, fixup atom: charAt
  at 221, fixup atom: String
  at 226, fixup atom: fromCharCode
  at 245, fixup atom: String
  at 250, fixup atom: fromCharCode
  at 269, fixup atom: String
  at 274, fixup atom: fromCharCode
}
debug {
0fbf:  fc 03 ac 01 19 03 0d 0d
       12 12 1c 44 1c 08 54 ad
       ad ad ad 35 44 35 58 26
       59 26 59 17 30 35filename: "re.js"
}
cpool {
0fdd:  07string {
1"[^A-Za-z0-9\\+\\/\\=\\n]"
0fde:  28 5b 5e 41 2d 5a 61 2d
       7a 30 2d 39 5c 2b 5c 2f
       5c 3d 5c 6e 5d}
0ff3:  07string {
1"\u0001\u0001\u0000/\u0000\u0000\u0000\u0008\u0006\u0000\u0000\u0000\u0004\u0007\u00f5\u00ff\u00ff\u00ff\u000b\u0000\u0015\u0007\u0000\u0000\u0000\u0009\u0000\u000b\u0000*\u0000,\u0000.\u0000:\u0000<\u0000>\u0000@\u0000[\u0000`\u0000{\u0000\u00ff\u00ff\u000c\u0000\n"
0ff4:  6c 01 01 00 2f 00 00 00
       08 06 00 00 00 04 07 f5
       ff ff ff 0b 00 15 07 00
       00 00 09 00 0b 00 2a 00
       2c 00 2e 00 3a 00 3c 00
       3e 00 40 00 5b 00 60 00
       7b 00 ff ff 0c 00 0a}
102b:  07string {
1"[^A-Za-z0-9\\+\\/\\=]"
102c:  24 5b 5e 41 2d 5a 61 2d
       7a 30 2d 39 5c 2b 5c 2f
       5c 3d 5d}
103f:  07string {
1"\u0001\u0001\u0000+\u0000\u0000\u0000\u0008\u0006\u0000\u0000\u0000\u0004\u0007\u00f5\u00ff\u00ff\u00ff\u000b\u0000\u0015\u0006\u0000\u0000\u0000*\u0000,\u0000.\u0000:\u0000<\u0000>\u0000@\u0000[\u0000`\u0000{\u0000\u00ff\u00ff\u000c\u0000\n"
1040:  64 01 01 00 2b 00 00 00
       08 06 00 00 00 04 07 f5
       ff ff ff 0b 00 15 06 00
       00 00 2a 00 2c 00 2e 00
       3a 00 3c 00 3e 00 40 00
       5b 00 60 00 7b 00 ff ff
       0c 00 0a}
}
re.js:172: function: <null>
  args: input
  locals:
    0: var output
    1: var chr1
    2: var chr2
    3: var chr3
    4: var enc1
    5: var enc2
    6: var enc3
    7: var enc4
    8: var i
    9: var myenctest
  stack_size: 6
  opcodes:
        push_empty_string
        put_loc0 0: output
        push_empty_string
        put_loc3 3: chr3
        push_empty_string
        put_loc8 7: enc4
        push_0 0
        put_loc8 8: i
        push_const8 0: 1"[^A-Za-z0-9\\+\\/\\=\\n]"
        push_const8 1: 1"\u0001\u0001\u0000/\u0000\u0000\u0000\u0008\u0006\u0000\u0000\u0000\u0004\u0007\u00f5\u00ff\u00ff\u00ff\u000b\u0000\u0015\u0007\u0000\u0000\u0000\u0009\u0000\u000b\u0000*\u0000,\u0000.\u0000:\u0000<\u0000>\u0000@\u0000[\u0000`\u0000{\u0000\u00ff\u00ff\u000c\u0000\n"
        regexp
        set_loc8 9: myenctest
        get_field2 exec
        get_arg0 0: input
        call_method 1
        if_false8 34
        push_atom_value error
        return
   34:  get_arg0 0: input
        get_field2 replace
        push_const8 2: 1"[^A-Za-z0-9\\+\\/\\=]"
        push_const8 3: 1"\u0001\u0001\u0000+\u0000\u0000\u0000\u0008\u0006\u0000\u0000\u0000\u0004\u0007\u00f5\u00ff\u00ff\u00ff\u000b\u0000\u0015\u0006\u0000\u0000\u0000*\u0000,\u0000.\u0000:\u0000<\u0000>\u0000@\u0000[\u0000`\u0000{\u0000\u00ff\u00ff\u000c\u0000\n"
        regexp
        push_empty_string
        call_method 2
        put_arg0 0: input
   50:  get_var myenc
        get_field _keyStr
        get_field2 indexOf
        get_arg0 0: input
        get_field2 charAt
        get_loc8 8: i
        post_inc
        put_loc8 8: i
        call_method 1
        call_method 1
        put_loc8 4: enc1
        get_var myenc
        get_field _keyStr
        get_field2 indexOf
        get_arg0 0: input
        get_field2 charAt
        get_loc8 8: i
        post_inc
        put_loc8 8: i
        call_method 1
        call_method 1
        put_loc8 5: enc2
        get_var myenc
        get_field _keyStr
        get_field2 indexOf
        get_arg0 0: input
        get_field2 charAt
        get_loc8 8: i
        post_inc
        put_loc8 8: i
        call_method 1
        call_method 1
        put_loc8 6: enc3
        get_var myenc
        get_field _keyStr
        get_field2 indexOf
        get_arg0 0: input
        get_field2 charAt
        get_loc8 8: i
        post_inc
        put_loc8 8: i
        call_method 1
        call_method 1
        put_loc8 7: enc4
        get_loc8 4: enc1
        push_2 2
        shl
        get_loc8 5: enc2
        push_4 4
        sar
        or
        put_loc1 1: chr1
        get_loc8 5: enc2
        push_i8 15
        and
        push_4 4
        shl
        get_loc8 6: enc3
        push_2 2
        sar
        or
        put_loc2 2: chr2
        get_loc8 6: enc3
        push_3 3
        and
        push_6 6
        shl
        get_loc8 7: enc4
        or
        put_loc3 3: chr3
        get_loc0 0: output
        get_var String
        get_field2 fromCharCode
        get_loc1 1: chr1
        call_method 1
        add
        put_loc0 0: output
        get_loc8 6: enc3
        push_i8 64
        neq
        if_false8 260
        get_loc0 0: output
        get_var String
        get_field2 fromCharCode
        get_loc2 2: chr2
        call_method 1
        add
        put_loc0 0: output
  260:  get_loc8 7: enc4
        push_i8 64
        neq
        if_false8 284
        get_loc0 0: output
        get_var String
        get_field2 fromCharCode
        get_loc3 3: chr3
        call_method 1
        add
        put_loc0 0: output
  284:  push_empty_string
        set_loc3 3: chr3
        set_loc2 2: chr2
        put_loc1 1: chr1
        push_empty_string
        set_loc8 7: enc4
        set_loc8 6: enc3
        set_loc8 5: enc2
        put_loc8 4: enc1
        get_loc8 8: i
        get_arg0 0: input
        get_length
        lt
        if_true 50
        get_loc0 0: output
        return

}
1073:  0efunction {
1074:  43 06 00 dc 03 01 09 01
       05 00 00 d6 01 0aname: func6
args=1 vars=9 defargs=1 closures=0 cpool=0
stack=5 bclen=214 locals=10
vars {
1082:  e2 03 00 01 00name: i
1087:  d2 04 00 00 00name: x
108c:  94 04 00 01 00name: y
1091:  e6 03 00 02 00name: z
1096:  80 04 00 03 00name: w
109b:  c2 03 00 04 00name: a
10a0:  c4 03 00 05 00name: b
10a5:  d4 04 00 06 00name: c
10aa:  d6 04 00 07 00name: d
10af:  9a 04 00 08 00name: e
}
bytecode {
10b4:  38 e5 00 00 00 d1 b9 9a
       47 c9 38 e5 00 00 00 d1
       b9 9a b6 9d 47 ca 38 e5
       00 00 00 d1 b9 9a b7 9d
       47 cb 38 e5 00 00 00 d1
       b9 9a b8 9d 47 cc c5 95
       c7 ad c3 04 c7 c5 95 ad
       c5 c6 ad af c7 c6 95 ad
       af c5 c6 95 ad af c8 ae
       c3 05 c7 c6 95 ad c5 ad
       c7 c5 c6 ad c6 c5 95 ad
       af c6 c5 af 95 af ad af
       c3 06 c7 c5 95 ad c5 c6
       ad af c7 c6 95 ad af c5
       c6 95 ad af c3 07 c7 c5
       95 ad c5 c6 ad af c6 c7
       ad af c3 08 c2 04 38 e3
       00 00 00 d1 ba 9a 47 a9
       ea 43 c2 05 38 e3 00 00
       00 d1 ba 9a b6 9d 47 a9
       ea 33 c2 06 38 e3 00 00
       00 d1 ba 9a b7 9d 47 a9
       ea 23 c2 07 38 e3 00 00
       00 d1 ba 9a b8 9d 47 a9
       ea 13 c2 08 38 e3 00 00
       00 d1 ba 9a b9 9d 47 a9
       ea 03 b6 28 b5 28at 1, fixup atom: data5
  at 11, fixup atom: data5
  at 23, fixup atom: data5
  at 35, fixup atom: data5
  at 135, fixup atom: data3
  at 149, fixup atom: data3
  at 165, fixup atom: data3
  at 181, fixup atom: data3
  at 197, fixup atom: data3
}
debug {
118a:  fc 03 cb 01 12 03 35 3f
       3f 41 21 71 7b 67 00 0e
       08 49 53 53 53 53 0dfilename: "re.js"
}
re.js:203: function: func6
  args: i
  locals:
    0: var x
    1: var y
    2: var z
    3: var w
    4: var a
    5: var b
    6: var c
    7: var d
    8: var e
  stack_size: 5
  opcodes:
        get_var data5
        get_arg0 0: i
        push_4 4
        mul
        get_array_el
        put_loc0 0: x
        get_var data5
        get_arg0 0: i
        push_4 4
        mul
        push_1 1
        add
        get_array_el
        put_loc1 1: y
        get_var data5
        get_arg0 0: i
        push_4 4
        mul
        push_2 2
        add
        get_array_el
        put_loc2 2: z
        get_var data5
        get_arg0 0: i
        push_4 4
        mul
        push_3 3
        add
        get_array_el
        put_loc3 3: w
        get_loc0 0: x
        not
        get_loc2 2: z
        and
        put_loc8 4: a
        get_loc2 2: z
        get_loc0 0: x
        not
        and
        get_loc0 0: x
        get_loc1 1: y
        and
        or
        get_loc2 2: z
        get_loc1 1: y
        not
        and
        or
        get_loc0 0: x
        get_loc1 1: y
        not
        and
        or
        get_loc3 3: w
        xor
        put_loc8 5: b
        get_loc2 2: z
        get_loc1 1: y
        not
        and
        get_loc0 0: x
        and
        get_loc2 2: z
        get_loc0 0: x
        get_loc1 1: y
        and
        get_loc1 1: y
        get_loc0 0: x
        not
        and
        or
        get_loc1 1: y
        get_loc0 0: x
        or
        not
        or
        and
        or
        put_loc8 6: c
        get_loc2 2: z
        get_loc0 0: x
        not
        and
        get_loc0 0: x
        get_loc1 1: y
        and
        or
        get_loc2 2: z
        get_loc1 1: y
        not
        and
        or
        get_loc0 0: x
        get_loc1 1: y
        not
        and
        or
        put_loc8 7: d
        get_loc2 2: z
        get_loc0 0: x
        not
        and
        get_loc0 0: x
        get_loc1 1: y
        and
        or
        get_loc1 1: y
        get_loc2 2: z
        and
        or
        put_loc8 8: e
        get_loc8 4: a
        get_var data3
        get_arg0 0: i
        push_5 5
        mul
        get_array_el
        eq
        if_false8 212
        get_loc8 5: b
        get_var data3
        get_arg0 0: i
        push_5 5
        mul
        push_1 1
        add
        get_array_el
        eq
        if_false8 212
        get_loc8 6: c
        get_var data3
        get_arg0 0: i
        push_5 5
        mul
        push_2 2
        add
        get_array_el
        eq
        if_false8 212
        get_loc8 7: d
        get_var data3
        get_arg0 0: i
        push_5 5
        mul
        push_3 3
        add
        get_array_el
        eq
        if_false8 212
        get_loc8 8: e
        get_var data3
        get_arg0 0: i
        push_5 5
        mul
        push_4 4
        add
        get_array_el
        eq
        if_false8 212
        push_1 1
        return
  212:  push_0 0
        return

}
}
re.js:1: function: <eval>
  locals:
    0: var <ret>
  stack_size: 15
  opcodes:
        check_define_var a,0
        check_define_var b,0
        check_define_var data3,0
        check_define_var data4,0
        check_define_var data5,0
        check_define_var func1,64
        check_define_var func2,64
        check_define_var enc1,64
        check_define_var dec1,64
        check_define_var func3,64
        check_define_var func4,64
        check_define_var func5,64
        check_define_var myenc,64
        check_define_var func6,64
        check_define_var data1,0
        check_define_var data2,0
        check_define_var i,0
        check_define_var i,0
        check_define_var index,0
        check_define_var index1,0
        check_define_var i,0
        check_define_var z,0
        check_define_var i,0
        define_var a,0
        define_var b,0
        define_var data3,0
        define_var data4,0
        define_var data5,0
        fclosure8 19: [bytecode func1]
        define_func func1,0
        fclosure8 20: [bytecode func2]
        define_func func2,0
        fclosure8 21: [bytecode enc1]
        define_func enc1,0
        fclosure8 22: [bytecode dec1]
        define_func dec1,0
        fclosure8 23: [bytecode func3]
        define_func func3,0
        fclosure8 24: [bytecode func4]
        define_func func4,0
        fclosure8 25: [bytecode func5]
        define_func func5,0
        fclosure8 26: [bytecode myenc]
        define_func myenc,0
        fclosure8 29: [bytecode func6]
        define_func func6,0
        define_var data1,0
        define_var data2,0
        define_var i,0
        define_var i,0
        define_var index,0
        define_var index1,0
        define_var i,0
        define_var z,0
        define_var i,0
        push_atom_value "********************************"
        put_var a
        push_atom_value welcometoycb2022
        put_var b
        push_const8 0: 5911837666743816200n
        push_const8 1: 5133585975960501272n
        push_const8 2: 9082418069800623372n
        push_const8 3: 9154480062992383756n
        push_const8 4: 6848599583376686600n
        push_const8 5: 147787617043219975n
        push_const8 6: 6140429622497212985n
        push_const8 7: 2526269866358605591n
        push_const8 8: 4552892036882908959n
        push_const8 9: 4543304157965338119n
        push_const8 10: 4620825451554930944n
        push_const8 11: 8808899373961281307n
        push_const8 12: 5924901230665995531n
        push_const8 13: 8808899373961281307n
        push_const8 14: 8662527953563041043n
        array_from 15
        put_var data3
        push_const8 15: 2101524238053948931n
        push_const8 16: 9154814254531429383n
        push_const8 17: 8941618984500083987n
        array_from 3
        put_var data4
        push_0 0
        push_0 0
        push_0 0
        push_0 0
        push_0 0
        push_0 0
        push_0 0
        push_0 0
        push_0 0
        push_0 0
        push_0 0
        push_const8 18: 0n
        array_from 12
        put_var data5
        get_var myenc
        push_atom_value "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/="
        insert2
        put_field _keyStr
        put_loc0 0: "<ret>"
        get_var myenc
        fclosure8 27: [bytecode <null>]
        insert2
        put_field encode64
        put_loc0 0: "<ret>"
        get_var myenc
        fclosure8 28: [bytecode <null>]
        insert2
        put_field decode64
        put_loc0 0: "<ret>"
        get_var myenc
        get_field2 encode64
        get_var enc1
        get_var a
        get_var b
        call2 2
        call_method 1
        put_var data1
        array_from 0
        put_var data2
        undefined
        put_loc0 0: "<ret>"
        push_0 0
        put_var i
  482:  get_var i
        get_var data1
        get_length
        lt
        if_false8 542
        get_var data2
        get_var i
        to_propkey2
        get_var data1
        get_field2 charCodeAt
        get_var i
        call_method 1
        insert3
        put_array_el
        put_loc0 0: "<ret>"
        get_var i
        post_inc
        put_var i
        drop
        goto8 482
  542:  undefined
        put_loc0 0: "<ret>"
        push_0 0
        put_var i
  550:  get_var i
        get_var data2
        get_length
        lt
        if_false8 615
        get_var data2
        get_var i
        to_propkey2
        dup2
        get_array_el
        get_var data2
        get_var i
        push_2 2
        add
        get_var data2
        get_length
        mod
        get_array_el
        xor
        insert3
        put_array_el
        put_loc0 0: "<ret>"
        get_var i
        post_inc
        put_var i
        drop
        goto8 550
  615:  push_0 0
        put_var index
        push_0 0
        put_var index1
        undefined
        put_loc0 0: "<ret>"
        push_0 0
        put_var i
  635:  get_var i
        get_var data2
        get_length
        lt
        if_false 864
        undefined
        put_loc0 0: "<ret>"
        get_var i
        push_i8 32
        mod
        push_i8 8
        neq
        if_false8 793
        get_var data5
        get_var index
        to_propkey2
        get_var func5
        get_var data2
        get_var i
        get_array_el
        get_var data2
        get_var i
        push_1 1
        add
        get_array_el
        get_var data2
        get_var i
        push_2 2
        add
        get_array_el
        get_var data2
        get_var i
        push_3 3
        add
        get_array_el
        get_var data2
        get_var i
        push_4 4
        add
        get_array_el
        get_var data2
        get_var i
        push_5 5
        add
        get_array_el
        get_var data2
        get_var i
        push_6 6
        add
        get_array_el
        get_var data2
        get_var i
        push_7 7
        add
        get_array_el
        call 8
        insert3
        put_array_el
        put_loc0 0: "<ret>"
        goto8 832
  793:  get_var data5
        get_var index
        to_propkey2
        get_var data4
        get_var index1
        get_array_el
        insert3
        put_array_el
        put_loc0 0: "<ret>"
        get_var index1
        push_1 1
        add
        dup
        put_var index1
        put_loc0 0: "<ret>"
  832:  get_var index
        push_1 1
        add
        dup
        put_var index
        put_loc0 0: "<ret>"
        get_var i
        push_i8 8
        add
        dup
        put_var i
        drop
        goto16 635
  864:  push_0 0
        put_var z
        undefined
        put_loc0 0: "<ret>"
        push_0 0
        put_var i
  878:  get_var i
        push_3 3
        lt
        if_false8 930
        undefined
        put_loc0 0: "<ret>"
        get_var func6
        get_var i
        call1 1
        if_false8 916
        get_var z
        push_1 1
        add
        dup
        put_var z
        put_loc0 0: "<ret>"
  916:  get_var i
        post_inc
        put_var i
        drop
        goto8 878
  930:  undefined
        put_loc0 0: "<ret>"
        get_var z
        push_3 3
        eq
        if_false8 955
        get_var print
        push_atom_value "Your flag is right!"
        call1 1
        put_loc0 0: "<ret>"
        goto8 967
  955:  get_var print
        push_atom_value "Your flag is wrong!"
        call1 1
        put_loc0 0: "<ret>"
  967:  get_loc0 0: "<ret>"
        return

}
Your flag is wrong!

然后就是痛苦的看代码过程，用python写出源码

from re import X
from cvxpy import length
from numpy import outer


data3 = [5911837666743816200,
5133585975960501272,
9082418069800623372,
9154480062992383756,
6848599583376686600,
147787617043219975,
6140429622497212985,
2526269866358605591,
4552892036882908959,
4543304157965338119,
4620825451554930944,
8808899373961281307,
5924901230665995531,
8808899373961281307,
8662527953563041043]

data4 = [2101524238053948931,9154814254531429383,8941618984500083987]
data5 = [0]*12
# myenc(data5, s)
# ret= 
# print(0x9e3779b9)
a = "********************************"
b = "welcometoycb2022"

from ctypes import *


def MX(z, y, total, key, p, e):
    temp1 = (z.value>>5 ^ y.value<<2) + (y.value>>3 ^ z.value<<4)
    temp2 = (total.value ^ y.value) + (key[(p&3) ^ e.value] ^ z.value)
    
    return c_uint32(temp1 ^ temp2)


def encrypt(n, v, key):
    delta = 0x9e3779b9 
    rounds = 6 + 52//n

    total = c_uint32(0)
    z = c_uint32(v[n-1])
    e = c_uint32(0)
    
    while rounds > 0:
        total.value += delta  
        e.value = (total.value >> 2) & 3
        for p in range(n-1):
            y = c_uint32(v[p+1])
            v[p] = c_uint32(v[p] + MX(z,y,total,key,p,e).value).value
            z.value = v[p]
        y = c_uint32(v[0])
        v[n-1] = c_uint32(v[n-1] + MX(z,y,total,key,n-1,e).value).value
        z.value = v[n-1]
        rounds -= 1 

    return v

def enc1(v, key):
    return encrypt(len(v), v, key)



def encode(input):
    from base64 import b64encode
    return b64encode(input, b'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=')

def func5(b1, b2, b3, b4, b5, b6, b7, b8):
    a = b1 | (b2 << 8) | (b3 << 16) | (b4 << 24) 
    b = b5 | (b6 << 8) | (b7 << 16) | (b8 << 24) 
    return (b << 32) + a

def func6(i):
    x = data5[i*4]
    y = data5[i*4+1]
    z = data5[i*4+2]
    w = data5[i*4+3]
    a = ~x & z
    b = (z & ~x | (x&y) | (z & (~y)) | (x & (~y)) ) ^ w
    c = (z & ~y & x)| (z & ((x & y) | (y & (~x)) | ~(y | x)))
    d = (z & ~x) | (x & y) | (z & ~y) | (x & ~y)
    e = (z & ~x) | (x&y) | (y&z)
    return a == data3[i*5] and b == data3[i*5+1] and c == data3[i*5+2] and d == data3[i*5+3] and e == data3[i*5+4]
    

data1 = encode(enc1(a, b))
data2 = list(map(ord, data1))

for i in range(len(data2)):
    data2[i] ^= data2[(i+2)%len(data2)]

index = 0
index1= 0
i = 0

while i  < (len(data2)):
    if i % 32 != 8:
        data5[index] = func5(data2[i], data2[i+1], data2[i+2],data2[i+3],data2[i+4],data2[i+5],data2[i+6],data2[i+7])
        print(i)
    else:
        data5[index] = data4[index1]
        index1+=1
    index+=1
    i+=8

z = 0
for i in range(3):
    if func6(i):
        z += 1
    i+=1
if z == 3:
    print('right')
else:
    print('error')

总体流程为改delta改mx xxtea + 换表base64 + 异或 + 恶心z3，比较难发现的是xxtea的mx函数，这里卡了俩小时。。。

而且实际上base64解完的结果是16进制字符串，还得经过bytes转，但是源码里没发现。

exp如下

from base64 import b64decode, b64encode
from z3 import *

from ctypes import *


def MX(z, y, total, key, p, e):
    temp1 = (z.value>>5 ^ y.value<<2) + (y.value>>3 ^ z.value<<4)
    temp2 = (total.value ^ y.value) + (key[(p&3) ^ e.value] ^ z.value)
    
    return c_uint32(temp1 ^ temp2)


def xxteadecrypt(v, key):
    n = len(v)
    delta = 0x11451414
    rounds = 6 + 52//n 
    
    total = c_uint32(rounds * delta)
    y = c_uint32(v[0])
    e = c_uint32(0)

    while rounds > 0:
        e.value = (total.value >> 2) & 3
        for p in range(n-1, 0, -1):
            z = c_uint32(v[p-1])
            v[p] = c_uint32((v[p] - MX(z,y,total,key,p,e).value)).value
            y.value = v[p]
        z = c_uint32(v[n-1])  
        v[0] = c_uint32(v[0] - MX(z,y,total,key,0,e).value).value
        y.value = v[0]  
        total.value -= delta
        rounds -= 1

    return v 


def solvez3(K, data):
    data5 = [BitVec("x%d" % i, 64) for i in range(4)]
    x = data5[0]
    y = data5[1]
    z = data5[2]
    w = data5[3]
    a = ~x & z
    b = (z & ~x | (x&y) | (z & (~y)) | (x & (~y)) ) ^ w
    c = (z & ~y & x)| (z & ((x & y) | (y & (~x)) | ~(y | x)))
    d = (z & ~x) | (x & y) | (z & ~y) | (x & ~y)
    e = (z & ~x) | (x&y) | (y&z)
    s = Solver()
    s.add(a == data[0])
    s.add(b == data[1])
    s.add(c == data[2])
    s.add(d == data[3])
    s.add(e == data[4])
    s.add(y == K)
    # s.add(x != 0)
    # s.add(y != 0)
    # s.add(z != 0)
    # s.add(w != 0)
    s.check()
    m = s.model()
    res = []
    for i in data5:
        res.append(int(str(m[i])))
    return res

data3 = [5911837666743816200,
5133585975960501272,
9082418069800623372,
9154480062992383756,
6848599583376686600,
147787617043219975,
6140429622497212985,
2526269866358605591,
4552892036882908959,
4543304157965338119,
4620825451554930944,
8808899373961281307,
5924901230665995531,
8808899373961281307,
8662527953563041043]

data4 = [2101524238053948931,9154814254531429383,8941618984500083987]


data = []

for i in range(3):
    res = solvez3(data4[i], data3[i*5:i*5+5])
    print(res)
    aa = []
    for r in res:
        k = []
        for i in range(8):
            k.append(r & 0xff)
            r >>= 8
        # aa  +=k[::-1]
        aa += k
    data += aa

data = data[:-8]
n = len(data)

data[-1] = data[-1] ^ data[1]
data[-2] = data[-2] ^ data[0]
for i in range(n-3, -1, -1):
    data[i] ^= data[i+2]


def decode(input):
    STANDARD_ALPHABET = b'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'
    CUSTOM_ALPHABET = b'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/'

    ENCODE_TRANS = bytes.maketrans(STANDARD_ALPHABET, CUSTOM_ALPHABET)
    DECODE_TRANS = bytes.maketrans(CUSTOM_ALPHABET, STANDARD_ALPHABET)
    return b64decode(input.translate(DECODE_TRANS))
print(bytes(data))
b64 = decode(bytes(data))
print(b64)
k = list(bytes.fromhex(b64.decode()))
print(k, len(k))

#include <stdio.h>  
#include <stdint.h>  
#define DELTA 0x11451414
#define MX (((z >> 6) ^ (y << 3)) + ((y >> 4) ^ (z << 5)) ^ ((sum^y) + (key[(p&3)^e] ^ z)))  
#include <iostream>
using namespace std;
void btea(uint32_t *v, int n, uint32_t const key[4])  
{  
    uint32_t y, z, sum;  
    unsigned p, rounds, e;  
    if (n > 1)            /* Coding Part */  
    {  
        rounds = 6 + 52/n;  
        sum = 0;  
        z = v[n-1];  
        do  
        {  
            sum += DELTA;  
            e = (sum >> 2) & 3;  
            for (p=0; p<n-1; p++)  
            {  
                y = v[p+1];  
                z = v[p] += MX;  
            }  
            y = v[0];  
            z = v[n-1] += MX;  
        }  
        while (--rounds);  
    }  
    else if (n < -1)      /* Decoding Part */  
    {  
        n = -n;  
        rounds = 6 + 52/n;  
        sum = rounds*DELTA;  
        y = v[0];  
        do  
        {  
            e = (sum >> 2) & 3;  
            for (p=n-1; p>0; p--)  
            {  
                z = v[p-1];  
                y = v[p] -= MX;  
            }  
            z = v[n-1];  
            y = v[0] -= MX;  
            sum -= DELTA;  
        }  
        while (--rounds);  
    }  
}  
  
  
int main()  
{  
    uint8_t data[] ={
        50, 145, 242, 166, 198, 128, 32, 9, 222, 204, 87, 158, 160, 147, 155, 82, 71, 9, 38, 246, 0, 88, 185, 225, 62, 226, 31, 171, 199, 245, 106, 31
    };
    uint32_t *v = (uint32_t*)data;

    uint8_t key[] = {119, 101, 108, 99, 111, 109, 101, 116, 111, 121, 99, 98, 50, 48, 50, 50};

    uint32_t *k = (uint32_t*)key;  
    int n= 8; //n的绝对值表示v的长度，取正表示加密，取负表示解密  
    // v为要加密的数据是两个32位无符号整数  
    // k为加密解密密钥，为4个32位无符号整数，即密钥长度为128位  
    // printf("加密前原始数据：%u %u\n",v[0],v[1]);  
    // btea(v, n, k);  
    // printf("加密后的数据：%u %u\n",v[0],v[1]);  
    btea(v, -n, k);  
    for (int i = 0;i < 32; i++) {
        printf("%c", data[i]);
    }
    return 0;  
}