Encriptacion que no comprendo

[tavostro]

Iniciado por PHPeros

Sí, estaba ofuscado y tu lo has desofuscado, pero las variables se quedan como estaban ya que en el proceso de ofuscación se renombran de forma aleatoria para que resulte relativamente más complicado de leer. Obviamente no se puede hacer el proceso inverso, solo se puede ver el código en crudo.

¿Puedes mostrar el código completo en un paste?

aca esta en si son 5 scripts:

este es uno ofuscado :

Código:

var _0x2e17=["\x31\x63\x20\x64\x3D\x5B\x22\x5C\x6A\x5C\x6C\x5C\x4B\x5C\x68\x5C\x69\x5C\x4D\x5C\x6E\x5C\x47\x5C\x51\x5C\x73\x5C\x46\x5C\x6D\x5C\x58\x5C\x44\x5C\x44\x5C\x4F\x5C\x47\x5C\x4E\x5C\x44\x5C\x77\x5C\x46\x5C\x49\x5C\x6A\x5C\x6C\x5C\x70\x5C\x68\x5C\x69\x5C\x4D\x5C\x50\x5C\x68\x5C\x46\x5C\x4B\x5C\x68\x5C\x69\x5C\x46\x5C\x55\x5C\x7A\x5C\x69\x5C\x49\x5C\x6A\x5C\x6C\x5C\x61\x5C\x68\x5C\x69\x5C\x4D\x5C\x65\x5C\x6C\x5C\x4A\x5C\x73\x5C\x6B\x5C\x6C\x5C\x56\x5C\x55\x5C\x48\x5C\x73\x5C\x75\x5C\x31\x62\x5C\x4A\x5C\x47\x5C\x41\x5C\x68\x5C\x69\x5C\x55\x5C\x48\x5C\x31\x61\x5C\x4C\x5C\x31\x38\x5C\x31\x30\x5C\x4C\x5C\x58\x5C\x31\x64\x5C\x6C\x5C\x70\x5C\x68\x5C\x69\x5C\x49\x5C\x31\x32\x5C\x6C\x5C\x71\x5C\x73\x5C\x75\x5C\x44\x5C\x6F\x5C\x57\x5C\x79\x5C\x47\x5C\x67\x5C\x31\x30\x5C\x73\x5C\x71\x5C\x5A\x5C\x5A\x5C\x70\x5C\x68\x5C\x69\x5C\x57\x22\x2C\x22\x5C\x39\x22\x2C\x22\x5C\x43\x5C\x6F\x5C\x79\x5C\x65\x5C\x62\x22\x2C\x22\x5C\x39\x5C\x4E\x5C\x74\x5C\x6B\x5C\x6D\x5C\x62\x5C\x65\x5C\x67\x5C\x6B\x5C\x39\x5C\x6E\x5C\x6F\x5C\x39\x5C\x66\x5C\x51\x5C\x39\x5C\x66\x5C\x61\x5C\x39\x5C\x31\x65\x5C\x39\x5C\x43\x5C\x61\x5C\x62\x5C\x31\x35\x5C\x65\x5C\x41\x5C\x61\x5C\x67\x5C\x74\x5C\x62\x5C\x39\x5C\x6A\x5C\x61\x5C\x71\x5C\x39\x5C\x31\x6B\x5C\x74\x5C\x62\x5C\x67\x5C\x31\x6C\x5C\x65\x5C\x31\x32\x5C\x61\x5C\x39\x5C\x43\x5C\x6D\x5C\x66\x5C\x65\x5C\x6F\x5C\x62\x5C\x66\x5C\x74\x5C\x6B\x5C\x39\x5C\x79\x5C\x67\x5C\x6D\x5C\x6E\x5C\x62\x5C\x65\x5C\x67\x5C\x6B\x5C\x39\x5C\x48\x5C\x66\x5C\x61\x5C\x4E\x5C\x39\x5C\x48\x5C\x62\x5C\x62\x5C\x6F\x5C\x39\x5C\x39\x5C\x67\x5C\x43\x5C\x39\x5C\x6D\x5C\x67\x5C\x41\x5C\x39\x5C\x31\x67\x5C\x6E\x5C\x62\x5C\x61\x5C\x39\x5C\x39\x5C\x66\x5C\x61\x5C\x62\x5C\x74\x5C\x66\x5C\x6B\x5C\x39\x5C\x31\x36\x5C\x67\x5C\x65\x5C\x4A\x5C\x39\x5C\x31\x36\x5C\x6E\x5C\x66\x5C\x39\x5C\x50\x5C\x77\x5C\x4B\x5C\x77\x5C\x39\x5C\x56\x5C\x61\x5C\x62\x5C\x31\x35\x5C\x65\x5C\x41\x5C\x61\x5C\x39\x5C\x6B\x5C\x61\x5C\x31\x37\x5C\x39\x5C\x75\x5C\x4C\x5C\x6A\x5C\x75\x5C\x7A\x5C\x77\x5C\x50\x5C\x70\x5C\x4F\x5C\x4F\x5C\x77\x5C\x75\x5C\x39\x5C\x70\x5C\x6A\x5C\x70\x5C\x6A\x5C\x7A\x5C\x7A\x5C\x71\x5C\x71\x5C\x71\x22\x2C\x22\x5C\x66\x5C\x61\x5C\x6F\x5C\x79\x5C\x6E\x5C\x6D\x5C\x61\x22\x2C\x22\x22\x2C\x22\x5C\x31\x31\x5C\x31\x37\x5C\x31\x6D\x22\x2C\x22\x5C\x31\x31\x5C\x51\x22\x2C\x22\x5C\x56\x22\x5D\x3B\x31\x66\x28\x45\x28\x42\x2C\x53\x2C\x63\x2C\x76\x2C\x72\x2C\x54\x29\x7B\x72\x3D\x45\x28\x63\x29\x7B\x78\x20\x63\x2E\x52\x28\x31\x69\x29\x7D\x3B\x31\x34\x28\x21\x64\x5B\x35\x5D\x5B\x64\x5B\x34\x5D\x5D\x28\x2F\x5E\x2F\x2C\x31\x39\x29\x29\x7B\x31\x33\x28\x63\x2D\x2D\x29\x7B\x54\x5B\x63\x2E\x52\x28\x53\x29\x5D\x3D\x76\x5B\x63\x5D\x7C\x7C\x63\x2E\x52\x28\x53\x29\x7D\x3B\x76\x3D\x5B\x45\x28\x72\x29\x7B\x78\x20\x54\x5B\x72\x5D\x7D\x5D\x3B\x72\x3D\x45\x28\x29\x7B\x78\x20\x64\x5B\x36\x5D\x7D\x3B\x63\x3D\x31\x7D\x3B\x31\x33\x28\x63\x2D\x2D\x29\x7B\x31\x34\x28\x76\x5B\x63\x5D\x29\x7B\x42\x3D\x42\x5B\x64\x5B\x34\x5D\x5D\x28\x31\x6A\x20\x31\x68\x28\x64\x5B\x37\x5D\x2B\x72\x28\x63\x29\x2B\x64\x5B\x37\x5D\x2C\x64\x5B\x38\x5D\x29\x2C\x76\x5B\x63\x5D\x29\x7D\x7D\x3B\x78\x20\x42\x7D\x28\x64\x5B\x30\x5D\x2C\x59\x2C\x59\x2C\x64\x5B\x33\x5D\x5B\x64\x5B\x32\x5D\x5D\x28\x64\x5B\x31\x5D\x29\x2C\x30\x2C\x7B\x7D\x29\x29\x3B","\x7C","\x73\x70\x6C\x69\x74","\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x7C\x78\x37\x43\x7C\x78\x36\x35\x7C\x78\x37\x34\x7C\x5F\x30\x78\x35\x31\x36\x35\x78\x33\x7C\x5F\x30\x78\x31\x39\x37\x65\x7C\x78\x36\x39\x7C\x78\x37\x32\x7C\x78\x36\x46\x7C\x78\x32\x38\x7C\x78\x32\x39\x7C\x78\x33\x31\x7C\x78\x36\x45\x7C\x78\x32\x30\x7C\x78\x36\x33\x7C\x78\x36\x31\x7C\x78\x37\x30\x7C\x78\x33\x32\x7C\x78\x33\x33\x7C\x5F\x30\x78\x35\x31\x36\x35\x78\x35\x7C\x78\x33\x44\x7C\x78\x37\x35\x7C\x78\x33\x35\x7C\x5F\x30\x78\x35\x31\x36\x35\x78\x34\x7C\x78\x33\x38\x7C\x72\x65\x74\x75\x72\x6E\x7C\x78\x36\x43\x7C\x78\x33\x37\x7C\x78\x36\x44\x7C\x5F\x30\x78\x35\x31\x36\x35\x78\x31\x7C\x78\x37\x33\x7C\x78\x32\x46\x7C\x66\x75\x6E\x63\x74\x69\x6F\x6E\x7C\x78\x32\x32\x7C\x78\x32\x45\x7C\x78\x36\x38\x7C\x78\x37\x44\x7C\x78\x36\x34\x7C\x78\x33\x34\x7C\x78\x33\x30\x7C\x78\x37\x42\x7C\x78\x36\x36\x7C\x78\x33\x39\x7C\x78\x33\x36\x7C\x78\x36\x32\x7C\x74\x6F\x53\x74\x72\x69\x6E\x67\x7C\x5F\x30\x78\x35\x31\x36\x35\x78\x32\x7C\x5F\x30\x78\x35\x31\x36\x35\x78\x36\x7C\x78\x32\x43\x7C\x78\x36\x37\x7C\x78\x33\x42\x7C\x78\x33\x41\x7C\x32\x36\x7C\x78\x32\x36\x7C\x78\x32\x31\x7C\x78\x35\x43\x7C\x78\x36\x42\x7C\x77\x68\x69\x6C\x65\x7C\x69\x66\x7C\x78\x35\x34\x7C\x78\x37\x36\x7C\x78\x37\x37\x7C\x78\x33\x46\x7C\x53\x74\x72\x69\x6E\x67\x7C\x78\x33\x45\x7C\x78\x32\x44\x7C\x76\x61\x72\x7C\x78\x36\x41\x7C\x78\x37\x38\x7C\x65\x76\x61\x6C\x7C\x78\x34\x34\x7C\x52\x65\x67\x45\x78\x70\x7C\x33\x36\x7C\x6E\x65\x77\x7C\x78\x34\x31\x7C\x78\x34\x43\x7C\x78\x32\x42","","\x66\x72\x6F\x6D\x43\x68\x61\x72\x43\x6F\x64\x65","\x72\x65\x70\x6C\x61\x63\x65","\x5C\x77\x2B","\x5C\x62","\x67"];eval(function(_0xcdf2x1,_0xcdf2x2,_0xcdf2x3,_0xcdf2x4,_0xcdf2x5,_0xcdf2x6){_0xcdf2x5=function(_0xcdf2x3){return (_0xcdf2x3<_0xcdf2x2?_0x2e17[4]:_0xcdf2x5(parseInt(_0xcdf2x3/_0xcdf2x2)))+((_0xcdf2x3=_0xcdf2x3%_0xcdf2x2)>35?String[_0x2e17[5]](_0xcdf2x3+29):_0xcdf2x3.toString(36))};if(!_0x2e17[4][_0x2e17[6]](/^/,String)){while(_0xcdf2x3--){_0xcdf2x6[_0xcdf2x5(_0xcdf2x3)]=_0xcdf2x4[_0xcdf2x3]||_0xcdf2x5(_0xcdf2x3)};_0xcdf2x4=[function(_0xcdf2x5){return _0xcdf2x6[_0xcdf2x5]}];_0xcdf2x5=function(){return _0x2e17[7]};_0xcdf2x3=1;};while(_0xcdf2x3--){if(_0xcdf2x4[_0xcdf2x3]){_0xcdf2x1=_0xcdf2x1[_0x2e17[6]]( new RegExp(_0x2e17[8]+_0xcdf2x5(_0xcdf2x3)+_0x2e17[8],_0x2e17[9]),_0xcdf2x4[_0xcdf2x3])}};return _0xcdf2x1;}(_0x2e17[0],62,85,_0x2e17[3][_0x2e17[2]](_0x2e17[1]),0,{}));

pasado por el jsbeautifier queda asi:

Código:

var _0x2e17 = ["1c d=[\"\\j\\l\\K\\h\\i\\M\\n\\G\\Q\\s\\F\\m\\X\\D\\D\\O\\G\\N\\D\\w\\F\\I\\j\\l\\p\\h\\i\\M\\P\\h\\F\\K\\h\\i\\F\\U\\z\\i\\I\\j\\l\\a\\h\\i\\M\\e\\l\\J\\s\\k\\l\\V\\U\\H\\s\\u\\1b\\J\\G\\A\\h\\i\\U\\H\\1a\\L\\18\\10\\L\\X\\1d\\l\\p\\h\\i\\I\\12\\l\\q\\s\\u\\D\\o\\W\\y\\G\\g\\10\\s\\q\\Z\\Z\\p\\h\\i\\W\",\"\\9\",\"\\C\\o\\y\\e\\b\",\"\\9\\N\\t\\k\\m\\b\\e\\g\\k\\9\\n\\o\\9\\f\\Q\\9\\f\\a\\9\\1e\\9\\C\\a\\b\\15\\e\\A\\a\\g\\t\\b\\9\\j\\a\\q\\9\\1k\\t\\b\\g\\1l\\e\\12\\a\\9\\C\\m\\f\\e\\o\\b\\f\\t\\k\\9\\y\\g\\m\\n\\b\\e\\g\\k\\9\\H\\f\\a\\N\\9\\H\\b\\b\\o\\9\\9\\g\\C\\9\\m\\g\\A\\9\\1g\\n\\b\\a\\9\\9\\f\\a\\b\\t\\f\\k\\9\\16\\g\\e\\J\\9\\16\\n\\f\\9\\P\\w\\K\\w\\9\\V\\a\\b\\15\\e\\A\\a\\9\\k\\a\\17\\9\\u\\L\\j\\u\\z\\w\\P\\p\\O\\O\\w\\u\\9\\p\\j\\p\\j\\z\\z\\q\\q\\q\",\"\\f\\a\\o\\y\\n\\m\\a\",\"\",\"\\11\\17\\1m\",\"\\11\\Q\",\"\\V\"];1f(E(B,S,c,v,r,T){r=E(c){x c.R(1i)};14(!d[5][d[4]](/^/,19)){13(c--){T[c.R(S)]=v[c]||c.R(S)};v=[E(r){x T[r]}];r=E(){x d[6]};c=1};13(c--){14(v[c]){B=B[d[4]](1j 1h(d[7]+r(c)+d[7],d[8]),v[c])}};x B}(d[0],Y,Y,d[3][d[2]](d[1]),0,{}));", "|", "split", "|||||||||x7C|x65|x74|_0x5165x3|_0x197e|x69|x72|x6F|x28|x29|x31|x6E|x20|x63|x61|x70|x32|x33|_0x5165x5|x3D|x75|x35|_0x5165x4|x38|return|x6C|x37|x6D|_0x5165x1|x73|x2F|function|x22|x2E|x68|x7D|x64|x34|x30|x7B|x66|x39|x36|x62|toString|_0x5165x2|_0x5165x6|x2C|x67|x3B|x3A|26|x26|x21|x5C|x6B|while|if|x54|x76|x77|x3F|String|x3E|x2D|var|x6A|x78|eval|x44|RegExp|36|new|x41|x4C|x2B", "", "fromCharCode", "replace", "\\w+", "\\b", "g"];
eval(function (_0xcdf2x1, _0xcdf2x2, _0xcdf2x3, _0xcdf2x4, _0xcdf2x5, _0xcdf2x6) {
    _0xcdf2x5 = function (_0xcdf2x3) {
        return (_0xcdf2x3 < _0xcdf2x2 ? _0x2e17[4] : _0xcdf2x5(parseInt(_0xcdf2x3 / _0xcdf2x2))) + ((_0xcdf2x3 = _0xcdf2x3 % _0xcdf2x2) > 35 ? String[_0x2e17[5]](_0xcdf2x3 + 29) : _0xcdf2x3.toString(36))
    };
    if (!_0x2e17[4][_0x2e17[6]](/^/, String)) {
        while (_0xcdf2x3--) {
            _0xcdf2x6[_0xcdf2x5(_0xcdf2x3)] = _0xcdf2x4[_0xcdf2x3] || _0xcdf2x5(_0xcdf2x3)
        };
        _0xcdf2x4 = [function (_0xcdf2x5) {
            return _0xcdf2x6[_0xcdf2x5]
        }];
        _0xcdf2x5 = function () {
            return _0x2e17[7]
        };
        _0xcdf2x3 = 1;
    };
    while (_0xcdf2x3--) {
        if (_0xcdf2x4[_0xcdf2x3]) {
            _0xcdf2x1 = _0xcdf2x1[_0x2e17[6]](new RegExp(_0x2e17[8] + _0xcdf2x5(_0xcdf2x3) + _0x2e17[8], _0x2e17[9]), _0xcdf2x4[_0xcdf2x3])
        }
    };
    return _0xcdf2x1;
}(_0x2e17[0], 62, 85, _0x2e17[3][_0x2e17[2]](_0x2e17[1]), 0, {}));