...

View Full Version : Javascript decode?



Adee
10-09-2011, 01:41 PM
Can anybody decode this for me? I got this from a forum and it's extraneous in the sense that it isn't on any other forum being hosted by the same company (zetaboards).

sorry for the formatting.



var _0x3e64=["\x4C","\x6D\x65\x6D\x62\x65\x72\x73\x31","\x4D","\x6D\x65\x6D\x62\x65\x72\x73\x32","\x61","\x6D\x65\x6D\x62\x65\x72\x73\x33","\x49\x6E\x74\x72\x6F","\x6D\x65\x6D\x62\x65\x72\x73\x34","\x6D\x65\x6D\x62\x65\x72\x73\x35","\x6D","\x6D\x65\x6D\x62\x65\x72\x73\x36","\x6D\x65\x6D\x62\x65\x72\x73\x37","\x6D\x65\x6D\x62\x65\x72\x73\x38","\x4D\x65\x6D\x62\x65\x72","\x6D\x65\x6D\x62\x65\x72\x73\x39","\x6D\x65\x6D\x62\x65\x72\x73\x31\x30","\x6D\x65\x6D\x62\x65\x72\x73\x31\x31","\x6D\x65\x6D\x62\x65\x72\x73\x31\x32","\x6D\x65\x6D\x62\x65\x72\x73\x31\x33","\x6D\x65\x6D\x62\x65\x72\x73\x31\x34","\x6D\x65\x6D\x62\x65\x72\x73\x31\x35","\x4C\x65\x61\x64\x65\x72","\x6D\x65\x6D\x62\x65\x72\x73\x31\x36","\x6D\x65\x6D\x62\x65\x72\x73\x31\x37","\x6D\x65\x6D\x62\x65\x72\x73\x31\x38","\x6D\x65\x6D\x62\x65\x72\x73\x31\x39","\x6D\x65\x6D\x62\x65\x72\x73\x32\x30","\x6D\x65\x6D\x62\x65\x72\x73\x32\x31","\x6D\x65\x6D\x62\x65\x72\x73\x32\x32","\x6D\x65\x6D\x62\x65\x72\x73\x32\x33","\x6D\x65\x6D\x62\x65\x72\x73\x32\x34","\x6D\x65\x6D\x62\x65\x72\x73\x32\x35","\x6D\x65\x6D\x62\x65\x72\x73\x32\x36","\x6D\x65\x6D\x62\x65\x72\x73\x32\x37","\x61\x64\x64\x43\x6C\x61\x73\x73","\x74\x64\x2E\x63\x5F\x70\x6F\x73\x74","\x66\x69\x6E\x64","\x74\x72","\x63\x6C\x6F\x73\x65\x73\x74","\x68\x74\x6D\x6C","\x23\x74\x6F\x70\x5F\x69\x6E\x66\x6F\x20\x61\x3A\x66\x69\x72\x73\x74","\x42\x41\x42\x41\x5F\x42\x4F\x30\x45\x59","\x42\x61\x67\x75\x73","\x42\x6F\x62\x20\x50\x6B\x65\x72\x32\x30","\x44\x65\x6F\x78\x79\x73\x33\x39","\x44\x6F\x6E\x67","\x65\x76\x69\x6C\x5F\x6C\x75\x72\x6B\x73\x35","\x46\x65\x64","\x69\x63\x68\x69\x67\x6F\x20\x6B\x61\x69","\x4A\x75\x61\x6E\x63\x6F\x38\x39","\x4C\x65\x6D\x61\x61\x61\x61","\x4C\x6F\x72\x64\x69","\x6C\x70\x74\x62\x5F\x6A\x61\x74\x74\x5F\x36\x39","\x4E\x6F\x72\x74\x68\x20\x4C\x69\x67\x68\x74\x7A","\x70\x30\x30\x6E\x65\x64","\x52\x69\x74\x63\x68\x69\x65","\x53\x70\x79\x64\x61","\x63\x61\x6C\x69\x6E\x62\x31\x32","\x44\x61\x6D\x61\x6E\x31\x30","\x67\x65\x74\x74\x6F\x30\x31","\x53\x63\x61\x70\x65\x72\x53\x6C\x61\x79\x65\x72","\x53\x69\x72\x5F\x44\x61\x6E\x61\x7A","\x57\x65\x73\x74\x4C\x69\x67\x68\x74\x7A","\x73\x74\x65\x76\x65\x6E\x6E\x31\x33\x20","\x79\x66\x6D","\x5A\x65\x72\x6F\x30\x68\x65\x72\x6F","\x61\x6B\x6E\x6F","\x61\x6E\x67\x65\x6C\x69\x6E\x62\x68\x31","\x41\x72\x63\x68\x65\x72\x35\x36","\x42\x6C\x6F\x6F\x64\x61\x78\x65\x5F\x38\x38","\x42\x75\x7A\x7A\x6B\x69\x6C\x6C\x61","\x43\x61\x61\x6C\x76\x69\x69\x6E","\x64\x65\x73\x61\x70\x6F\x78","\x45\x73\x70\x69\x67\x4E\x6E","\x47\x20\x77\x20\x6F\x20\x67","\x4C\x65\x78\x20\x54\x68\x65\x20\x42\x65\x73\x74","\x6C\x75\x6B\x65\x35\x36\x31\x38","\x4D\x34\x74\x65\x64\x20\x70\x6B\x65\x72","\x6D\x73\x74\x65\x72","\x6F\x6C\x61\x76\x69\x74\x65","\x50\x6F\x77\x6E\x5F\x79\x6F\x75\x39","\x47\x75\x6E\x66\x6C\x6F\x70","\x72\x75\x6E\x65\x73\x69\x6D\x69\x74\x61\x72\x33","\x53\x61\x6E\x79\x62\x6F\x69","\x53\x65\x63\x74\x6F\x72\x20\x53\x69\x78","\x73\x74\x72\x6F\x6E\x67\x74\x61\x6E\x6B\x31\x31","\x54\x20\x49\x20\x44\x20\x55\x20\x52\x20\x43\x20\x49\x20\x4F","\x76\x69\x6E\x74\x61\x67\x65\x70\x6B\x65\x72\x7A","\x78\x46\x72","\x5B\x2D\x48\x61\x76\x69\x6B\x2D\x5D","\x61\x72\x72\x6F\x77\x73\x2D\x74\x6F\x79","\x64\x65\x61\x64\x6D\x61\x6E\x69\x6E\x63\x36\x36","\x6B\x61\x72\x61\x6D\x62\x61\x36\x39","\x4C\x6F\x72\x64\x62\x6C\x61\x63\x6B\x34\x37","\x73\x63\x6F\x74\x74\x69\x65\x62\x6F\x79\x38\x31","\x70\x6B\x69\x6E\x67\x70\x75\x72\x65\x30\x30\x37","\x53\x6E\x61\x70\x74\x69\x4B","\x74\x75\x72\x74\x6C\x65\x78\x64","\x5A\x69\x6E\x68\x6F","\x4B\x6D\x61\x6E","\x58\x44\x61\x52\x6B\x45\x73\x54\x78","\x69\x6E\x73\x61\x6E\x65\x6C\x75\x76\x65\x72","\x41\x72\x61\x62\x50\x6F\x70\x63\x6F\x72\x6E","\x6B\x66","\x64\x69\x65\x20\x6E\x75\x62\x20\x70\x6C\x7A","\x65\x61\x63\x68","\x64\x6C\x2E\x75\x73\x65\x72\x5F\x69\x6E\x66\x6F\x20\x3E\x20\x64\x74\x3A\x63\x6F\x6E\x74\x61\x69\x6E \x73\x28\x47\x72\x6F\x75\x70\x3A\x29\x20\x2B\x20\x64\x64"];var group=[[_0x3e64[0],_0x3e64[1]],[_0x3e64[2],_0x3e64[3]],[_0x3e64[4],_0x3e64[5]],[_0x3e64[6],_0x3e64[7]],[_0x3e64[4],_0x3e64[8]],[_0x3e64[9],_0x3e64[10]],[_0x3e64[4],_0x3e64[11]],[_0x3e64[9],_0x3e64[12]],[_0x3e64[13],_0x3e64[14]],[_0x3e64[4],_0x3e64[15]],[_0x3e64[6],_0x3e64[16]],[_0x3e64[4],_0x3e64[17]],[_0x3e64[9],_0x3e64[18]],[_0x3e64[4],_0x3e64[19]],[_0x3e64[9],_0x3e64[20]],[_0x3e64[21],_0x3e64[22]],[_0x3e64[13],_0x3e64[23]],[_0x3e64[4],_0x3e64[24]],[_0x3e64[6],_0x3e64[25]],[_0x3e64[4],_0x3e64[26]],[_0x3e64[9],_0x3e64[27]],[_0x3e64[4],_0x3e64[28]],[_0x3e64[9],_0x3e64[29]],[_0x3e64[21],_0x3e64[30]],[_0x3e64[13],_0x3e64[31]],[_0x3e64[4],_0x3e64[32]],[_0x3e64[6],_0x3e64[33]]];function lol(_0x77d3x3,_0x77d3x4){$(_0x77d3x3)[_0x3e64[38]](_0x3e64[37])[_0x3e64[36]](_0x3e64[35])[_0x3e64[34]](group[_0x77d3x4][1])};$(_0x3e64[106])[_0x3e64[105]](function(){username=$(_0x3e64[40])[_0x3e64[39]]();if(username==_0x3e64[41]||username==_0x3e64[42]||username==_0x3e64[43]){x=0};if(username==_0x3e64[44]||username==_0x3e64[45]){x=1};if(username==_0x3e64[46]||username==_0x3e64[47]){x=2};if(username==_0x3e64[48]||username==_0x3e64[49]){x=3};if(username==_0x3e64[50]||username==_0x3e64[51]){x=4};if(username==_0x3e64[52]||username==_0x3e64[53]){x=5};if(username==_0x3e64[54]||username==_0x3e64[55]){x=6};if(username==_0x3e64[56]||username==_0x3e64[57]){x=7};if(username==_0x3e64[58]||username==_0x3e64[59]){x=8};if(username==_0x3e64[60]||username==_0x3e64[61]||username==_0x3e64[62]){x=9};if(username==_0x3e64[63]||username==_0x3e64[64]){x=10};if(username==_0x3e64[65]||username==_0x3e64[66]){x=11};if(username==_0x3e64[67]||username==_0x3e64[68]){x=12};if(username==_0x3e64[69]||username==_0x3e64[70]||username==_0x3e64[71]){x=13};if(username==_0x3e64[72]||username==_0x3e64[73]||username==_0x3e64[74]){x=14};if(username==_0x3e64[75]||username==_0x3e64[76]||username==_0x3e64[77]){x=15};if(username==_0x3e64[78]||username==_0x3e64[79]){x=16};if(username==_0x3e64[80]||username==_0x3e64[81]){x=17};if(username==_0x3e64[82]||username==_0x3e64[83]){x=18};if(username==_0x3e64[84]||username==_0x3e64[85]||username==_0x3e64[86]){x=19};if(username==_0x3e64[87]||username==_0x3e64[88]||username==_0x3e64[89]){x=20};if(username==_0x3e64[90]||username==_0x3e64[91]||username==_0x3e64[92]){x=21};if(username==_0x3e64[93]||username==_0x3e64[94]){x=22};if(username==_0x3e64[95]||username==_0x3e64[96]||username==_0x3e64[97]||username==_0x3e64[98]){x=23};if(username==_0x3e64[99]||username==_0x3e64[100]){x=24};if(username==_0x3e64[101]||username==_0x3e64[102]||username==_0x3e64[103]||username==_0x3e64[104]){x=0};lol(this,x)});

VIPStephan
10-09-2011, 03:20 PM
The strings in the array are encoded in hexadecimal numbers, a table of which you can find on http://web.cs.mun.ca/~michael/c/ascii-table.html (the “Hex” column).

For example, the second string in that array reads “members1”.

niralsoni
10-09-2011, 07:09 PM
just try alert(_0x3e64) or document.write(_0x3e64)

Adee
10-09-2011, 08:57 PM
I've decoded most of it with the firebug console. What I can't figure out is what the function 'lol' does.

It seems to set a bunch of variables and then put them into an array, and then that's where I get lost.

Old Pedant
10-10-2011, 12:17 AM
So the bulk of the code seems to simply be figuring out what "level" or "group" each userid belongs in.

$(dl.user_info > dt:contains(Group:) + dd)[each](function(){username=$(#top_info a:first)[html]();if(username==BABA_BO0EY||username==Bagus||username==Bob Pker20){x=0};if(username==Deoxys39||username==Dong){x=1};if(username==evil_lurks5||username==Fed){x= 2};if(username==ichigo kai||username==Juanco89){x=3};if(username==Lemaaaa||username==Lordi){x=4};if(username==lptb_jatt_69| |username==North Lightz){x=5};if(username==p00ned||username==Ritchie){x=6};if(username==Spyda||username==calinb12){x= 7};if(username==Daman10||username==getto01){x=8};if(username==ScaperSlayer||username==Sir_Danaz||use rname==WestLightz){x=9};if(username==stevenn13 ||username==yfm){x=10};if(username==Zero0hero||username==akno){x=11};if(username==angelinbh1||userna me==Archer56){x=12};if(username==Bloodaxe_88||username==sss[70]||username==Caalviin){x=13};if(username==desapox||username==EspigNn||username==G w o g){x=14};if(username==Lex The Best||username==luke5618||username==M4ted pker){x=15};if(username==mster||username==olavite){x=16};if(username==Pown_you9||username==sss[81]){x=17};if(username==runesimitar3||username==Sanyboi){x=18};if(username==Sector Six||username==strongtank11||username==T I D U R C I O){x=19};if(username==vintagepkerz||username==xFr||username==[-Havik-]){x=20};if(username==arrows-toy||username==deadmaninc66||username==karamba69){x=21};if(username==Lordblack47||username==scottieb oy81){x=22};if(username==pkingpure007||username==SnaptiK||username==turtlexd||username==sss[98]){x=23};if(username==Kman||username==XDaRkEsTx){x=24};if(username==insaneluver||username==ArabPopcor n||username==kf||username==die nub plz){x=0};

(Put "..." around each name, of course.)

And lol function is just this:


function lol(zz,yy)
{
$(zz)[closest](tr)[find)[td.c_post)[addClass](group[yy][1])
}

In other words, this person is trying (badly) to hide what is going on because he/she didn't use server-side scripting to handle membership levels, etc. Poor practice.



EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum