Notes

(async () => {
const script = document.createElement("script");
script.src = "https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js";
document.body.appendChild(script);
await new Promise(r => script.onload = r);

function objectToQueryString(obj) {
return Object.keys(obj).sort().map(k => k + "=" + obj[k]).join("&");
}

function makeSignature(params) {
let query = objectToQueryString(params);
let secret = "Ka*xQ@W7%SrPnYR3P%5*udF=yrpewQQN";
let md5hash = CryptoJS.MD5(query + secret).toString();
return md5hash.slice(4, 20);
}

let targetCode = prompt("Nhập mã code 1 cái:");
if (!targetCode) return;

let token = localStorage.getItem("token");
let userId = localStorage.getItem("userId") || localStorage.getItem("uid");
let cuid = localStorage.getItem("__DC_STAT_UUID") || "176633339559965073US";

while (true) {
let payload = {
cuid: cuid,
redeemCodes: targetCode.trim(),
redeemType: "S01",
ts: Date.now(),
userId: userId
};

let sig = makeSignature(payload);

try {
let res = await fetch("https://api.vipplayer.net/cpCgw/mkt/redeem_code/exchange", {
method: "POST",
headers: {
"accept": "*/*",
"content-type": "application/x-www-form-urlencoded",
"authorization": "Bearer " + token,
"x-signature": sig
},
body: objectToQueryString(payload)
});

let data = await res.json();

if (data.data && data.data.successList && data.data.successList.length > 0) {
window.location.reload();
break;
} else {
let msg = data.data?.failList?.[0]?.failReason || data.msg;
if (msg) console.log(`[${msg}]`);
}
} catch (e) {}

await new Promise(r => setTimeout(r, 1000));
}
})();