well i was reading some files i got my hands on and this javascript file had this array that jQuery inside this file is using.

what kind of encryption is this code?

var _0xe66d=["\x53\x61\x79\x48\x65\x6C\x6C\x6F","\x47\x65\x74\x43\x6F\x75\x6E\x74","\x4D\x65\x73\x73\x61\x67\x65\x20\x3A\x20","\x59\x6F\x75\x20\x61\x72\x65\x20\x77\x65\x6C\x63\x6F\x6D\x65\x2E"];function NewObject(_0xa79fx2){var _0xa79fx3=0;this[_0xe66d[0]]= function(_0xa79fx4){_0xa79fx3  ;alert(_0xa79fx2  _0xa79fx4)};this[_0xe66d[1]]= function(){return _0xa79fx3}}var obj= new NewObject(_0xe66d[2]);obj.SayHello(_0xe66d[3])

CodePudding user response：

Seems to be it is hex encoded. You can use third party websites to decode it.

 [https://beautifier.io/][1]

CodePudding user response：

The output you show looks like it was a result of using obfuscator.io.

Deobfuscating such a code works only to a certain degree.

You can for sure use a tool like deobfuscate.io. This results in this:

function NewObject(_0xa79fx2) {
  var _0xa79fx3 = 0;
  this.SayHello = function (_0xa79fx4) {
    _0xa79fx3  ;
    alert(_0xa79fx2   _0xa79fx4);
  };
  this.GetCount = function () {
    return _0xa79fx3;
  };
}
var obj = new NewObject("Message : ");
obj.SayHello("You are welcome.");

But such tools can't recover the original variable or parameter names because those have been replaced in the obfuscation process. And there is no way to get those back.

CodePudding user response：

_0x5287x4'preventDefault'; I can't fix them :(

$(function ()
{
    $('.xgtIstatistikVerileri')['slice'](0, 5)['show']();
    $('#UzmanYazar-Net')['on']('click', function (_0x5287x4)
    {
        _0x5287x4['preventDefault']();
        $('#istatistikveri-1 .xgtIstatistikVerileri:hidden')['slice'](0, 5)['slideDown']()['css']('display', 'table');
        if ($('#istatistikveri-1 .xgtIstatistikVerileri:hidden')['length'] == 0)
        {
            $('#StarTR')['fadeOut']('slow')
        }
    })
});
$(function ()
{
    $('.xgtIstatistikVerileri')['slice'](0, 5)['show']();
    $('#UzmanYazar-Net')['on']('click', function (_0x5287x4)
    {
        _0x5287x4['preventDefault']();
        $('#istatistikveri-2 .xgtIstatistikVerileri:hidden')['slice'](0, 5)['slideDown']()['css']('display', 'table');
        if ($('#istatistikveri-2 .xgtIstatistikVerileri:hidden')['length'] == 0)
        {
            $('#StarTR')['fadeOut']('slow')
        }
    })
});
$(function ()
{
    $('.xgtIstatistikVerileri')['slice'](0, 5)['show']();
    $('#UzmanYazar-Net')['on']('click', function (_0x5287x4)
    {
        _0x5287x4['preventDefault']();
        $('#istatistikveri-3 .xgtIstatistikVerileri:hidden')['slice'](0, 5)['slideDown']()['css']('display', 'table');
        if ($('#istatistikveri-3 .xgtIstatistikVerileri:hidden')['length'] == 0)
        {
            $('#StarTR')['fadeOut']('slow')
        }
    })
});
$(function ()
{
    $('.xgtIstatistikVerileri')['slice'](0, 5)['show']();
    $('#UzmanYazar-Net')['on']('click', function (_0x5287x4)
    {
        _0x5287x4['preventDefault']();
        $('#istatistikveri-4 .xgtIstatistikVerileri:hidden')['slice'](0, 5)['slideDown']()['css']('display', 'table');
        if ($('#istatistikveri-4 .xgtIstatistikVerileri:hidden')['length'] == 0)
        {
            $('#StarTR')['fadeOut']('slow')
        }
    })
});
$(function ()
{
    $('.xgtIstatistikVerileri')['slice'](0, 5)['show']();
    $('#UzmanYazar-Net')['on']('click', function (_0x5287x4)
    {
        _0x5287x4['preventDefault']();
        $('#istatistikveri-5 .xgtIstatistikVerileri:hidden')['slice'](0, 5)['slideDown']()['css']('display', 'table');
        if ($('#istatistikveri-5 .xgtIstatistikVerileri:hidden')['length'] == 0)
        {
            $('#StarTR')['fadeOut']('slow')
        }
    })
});
$(function ()
{
    $('.xgtIstatistikVerileri')['slice'](0, 5)['show']();
    $('#UzmanYazar-Net')['on']('click', function (_0x5287x4)
    {
        _0x5287x4['preventDefault']();
        $('#istatistikveri-6 .xgtIstatistikVerileri:hidden')['slice'](0, 5)['slideDown']()['css']('display', 'table');
        if ($('#istatistikveri-6 .xgtIstatistikVerileri:hidden')['length'] == 0)
        {
            $('#StarTR')['fadeOut']('slow')
        }
    })
})