deobfuscator
Deobfuscator v1
Instructions: Load the whole script URL without beautifying it onto the load script input.Use beautifier.org, jscompress.com and then beautifier.org and paste it onto the large input.
Use this deobfuscator in case you have scripts which look like the below code:
    if (('' + _0x1788b0 / _0x1788b0)[_0x9a8a('0x40')] !== 0x1 || _0x1788b0 % 0x14 === 0x0) {
    (function() {}[_0x9a8a('0x41')](_0x9a8a('0x42'))());
} else {
        (function() {}[_0x9a8a('0x41')]('debugger')());
}
       _0x1a411e(++_0x1788b0);
}
try {
     _0x1a411e(0x0);
     } catch (_0x30ae19) {}
};
_0x17874d();
Deobfuscator v2
Instructions: Load the variable array URL beautifying it onto the load script input. Ex: var _0x921k = ["0","1", "2"];Use beautifier.org, jscompress.com and then beautifier.org and paste it onto the large input.
Use this deobfuscator in case you have scripts which look like the below code:
$(document)[_0xe4fa[98]](function() {
   $(_0xe4fa[30])[_0xe4fa[29]](_0xe4fa[28]), $(_0xe4fa[30])[_0xe4fa[29]](_0xe4fa[31]), $(document)[_0xe4fa[98]](function() {
     $(_0xe4fa[43])[_0xe4fa[42]](_0xe4fa[32], function() {
      0 == clicked ? (socket[_0xe4fa[6]](_0xe4fa[33], {
       p: pdz,
       iz: ip,
       c: CONNECTION_URL
      }), socket[_0xe4fa[7]](_0xe4fa[34], function(e) {
      $(_0xe4fa[37])[_0xe4fa[36]](_0xe4fa[35]), $(_0xe4fa[37])[_0xe4fa[40]]()[_0xe4fa[39]](4500)[_0xe4fa[38]]()
          }), clicked = !0) : alert(_0xe4fa[41])
           }), $(_0xe4fa[55])[_0xe4fa[42]](_0xe4fa[32], function() {
        console[_0xe4fa[4]]($(_0xe4fa[45])[_0xe4fa[44]]()), ($(_0xe4fa[45])[_0xe4fa[44]]() == _0xe4fa[46] || null == $(_0xe4fa[45])[_0xe4fa[44]]()) && ($(_0xe4fa[47])[_0xe4fa[40]](), setTimeout(function() {
        $(_0xe4fa[47])[_0xe4fa[38]]()
      }, 2e3))
     var e = $(_0xe4fa[52])[_0xe4fa[51]](_0xe4fa[50])[_0xe4fa[49]](_0xe4fa[48])
     })
    })
   })
Comentários
Postar um comentário