Hi các bác, xin phép admin
Em có đoạn javascript như bên dưới tên biến và hàm rất khó đọc ( bị obfuscator). Em muốn hỏi có cách nào deobfuscator code javascript đã bị mã hóa kiểu này ko. Mong các bác chỉ giáo. Thanks
fullcode : [https://pastebin.com/yaNKVNUP](https://pastebin.com/yaNKVNUP)
var _0x52c8 = function(_0x434ce6, _0xbcc853) {
_0x434ce6 = _0x434ce6 - 0x0;
var _0x2893e4 = _0x179d[_0x434ce6];
if (_0x52c8['PGvkdu'] === undefined) {
(function() {
var _0x1dff53;
try {
var _0x112206 = Function('return\x20(function()\x20' + '{}.constructor(\x22return\x20this\x22)(\x20)' + ');');
_0x1dff53 = _0x112206();
} catch (_0x19e7dd) {
_0x1dff53 = window;
}
var _0x1a0ec7 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
_0x1dff53['atob'] || (_0x1dff53['atob'] = function(_0x137f09) {
var _0x426081 = String(_0x137f09)['replace'](/=+$/, '');
for (var _0x483b29 = 0x0, _0x20e21b, _0x541fbb, _0x1b9a2d = 0x0, _0x123f55 = ''; _0x541fbb = _0x426081['charAt'](_0x1b9a2d++); ~_0x541fbb && (_0x20e21b = _0x483b29 % 0x4 ? _0x20e21b * 0x40 + _0x541fbb : _0x541fbb, _0x483b29++ % 0x4) ? _0x123f55 += String['fromCharCode'](0xff & _0x20e21b >> (-0x2 * _0x483b29 & 0x6)) : 0x0) {
_0x541fbb = _0x1a0ec7['indexOf'](_0x541fbb);
}
return _0x123f55;
});
}());
_0x52c8['RXzrxH'] = function(_0x2defb4) {
var _0x52078d = atob(_0x2defb4);
var _0x12f23c = [];
for (var _0x4727f9 = 0x0, _0x531f4e = _0x52078d['length']; _0x4727f9 < _0x531f4e; _0x4727f9++) {
_0x12f23c += '%' + ('00' + _0x52078d['charCodeAt'](_0x4727f9)['toString'](0x10))['slice'](-0x2);
}
return decodeURIComponent(_0x12f23c);
};
_0x52c8['diDhCt'] = {};
_0x52c8['PGvkdu'] = !![];
}
#javascript #deobfuscator #j2team_javascript [#j2team_discussion](https://www.facebook.com/hashtag/j2team_discussion?source=note&epa=HASHTAG)
Hi các bác, xin phép admin
Em có đoạn javascript như bên dưới tên biến và hàm rất khó đọc ( bị obfuscator). Em muốn hỏi có cách nào deobfuscator code javascript đã bị mã hóa kiểu này ko. Mong các bác chỉ giáo. Thanks
fullcode : [https://pastebin.com/yaNKVNUP](https://pastebin.com/yaNKVNUP)
var _0x52c8 = function(_0x434ce6, _0xbcc853) {
_0x434ce6 = _0x434ce6 - 0x0;
var _0x2893e4 = _0x179d[_0x434ce6];
if (_0x52c8['PGvkdu'] === undefined) {
(function() {
var _0x1dff53;
try {
var _0x112206 = Function('return\x20(function()\x20' + '{}.constructor(\x22return\x20this\x22)(\x20)' + ');');
_0x1dff53 = _0x112206();
} catch (_0x19e7dd) {
_0x1dff53 = window;
}
var _0x1a0ec7 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
_0x1dff53['atob'] || (_0x1dff53['atob'] = function(_0x137f09) {
var _0x426081 = String(_0x137f09)['replace'](/=+$/, '');
for (var _0x483b29 = 0x0, _0x20e21b, _0x541fbb, _0x1b9a2d = 0x0, _0x123f55 = ''; _0x541fbb = _0x426081['charAt'](_0x1b9a2d++); ~_0x541fbb && (_0x20e21b = _0x483b29 % 0x4 ? _0x20e21b * 0x40 + _0x541fbb : _0x541fbb, _0x483b29++ % 0x4) ? _0x123f55 += String['fromCharCode'](0xff & _0x20e21b >> (-0x2 * _0x483b29 & 0x6)) : 0x0) {
_0x541fbb = _0x1a0ec7['indexOf'](_0x541fbb);
}
return _0x123f55;
});
}());
_0x52c8['RXzrxH'] = function(_0x2defb4) {
var _0x52078d = atob(_0x2defb4);
var _0x12f23c = [];
for (var _0x4727f9 = 0x0, _0x531f4e = _0x52078d['length']; _0x4727f9 < _0x531f4e; _0x4727f9++) {
_0x12f23c += '%' + ('00' + _0x52078d['charCodeAt'](_0x4727f9)['toString'](0x10))['slice'](-0x2);
}
return decodeURIComponent(_0x12f23c);
};
_0x52c8['diDhCt'] = {};
_0x52c8['PGvkdu'] = !![];
}
#javascript #deobfuscator #j2team_javascript [#j2team_discussion](https://www.facebook.com/hashtag/j2team_discussion?source=note&epa=HASHTAG)