구글 블로그 테마 스크립트 해석하기 (패킹과 언패킹) - 범상치 않은 블로그

구글 블로그 테마를 수정하다 보면, 알 수 없는 스크립트가 보이기도 합니다. 해당 코드는 언패킹을 통해 해석할 수 있답니다.

패킹

 var _0x35d7=["\x24\x28\x64\x6F\x63\x75\x6D\x65\x6E\x74\x29\x2E\x72\x65\x61\x64\x79\x28\x33\x28\x29\x7B\x34\x20\x31\x3D\x30\x3B\x24\x28\x77\x69\x6E\x64\x6F\x77\x29\x2E\x73\x63\x72\x6F\x6C\x6C\x28\x33\x28\x29\x7B\x34\x20\x32\x3D\x24\x28\x74\x68\x69\x73\x29\x2E\x73\x63\x72\x6F\x6C\x6C\x54\x6F\x70\x28\x29\x3B\x69\x66\x28\x32\x3E\x31\x29\x7B\x24\x28\x27\x2E\x35\x27\x29\x2E\x36\x28\x27\x37\x27\x29\x2E\x38\x28\x27\x39\x27\x29\x7D\x65\x6C\x73\x65\x7B\x24\x28\x27\x2E\x35\x27\x29\x2E\x36\x28\x27\x39\x27\x29\x2E\x38\x28\x27\x37\x27\x29\x7D\x31\x3D\x32\x7D\x29\x7D\x29\x3B","\x7C","\x73\x70\x6C\x69\x74","\x7C\x6F\x73\x74\x7C\x63\x4F\x73\x74\x7C\x66\x75\x6E\x63\x74\x69\x6F\x6E\x7C\x76\x61\x72\x7C\x74\x6F\x70\x62\x61\x72\x7C\x61\x64\x64\x43\x6C\x61\x73\x73\x7C\x66\x69\x78\x65\x64\x32\x33\x7C\x72\x65\x6D\x6F\x76\x65\x43\x6C\x61\x73\x73\x7C\x64\x65\x66\x61\x75\x6C\x74\x32\x33","\x72\x65\x70\x6C\x61\x63\x65","\x30","\x5B\x31\x2D\x39\x5D","\x5C\x62","\x67","\x6F\x6E\x6C\x6F\x61\x64","\x62\x6C\x6F\x67\x67","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64","\x68\x72\x65\x66","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x68\x74\x74\x70\x3A\x2F\x2F\x6F\x64\x64\x74\x68\x65\x6D\x65\x73\x2E\x62\x6C\x6F\x67\x73\x70\x6F\x74\x2E\x63\x6F\x6D","\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x6F\x64\x64\x74\x68\x65\x6D\x65\x73\x2E\x63\x6F\x6D\x2F","\x73\x65\x74\x41\x74\x74\x72\x69\x62\x75\x74\x65","\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C","\x4F\x64\x64\x54\x68\x65\x6D\x65\x73","\x72\x65\x6C","\x64\x6F\x66\x6F\x6C\x6C\x6F\x77"];eval(function(_0xd19ax1,_0xd19ax2,_0xd19ax3,_0xd19ax4,_0xd19ax5,_0xd19ax6){_0xd19ax5= String;if(_0x35d7[5][_0x35d7[4]](0,_0xd19ax5)== 0){while(_0xd19ax3--){_0xd19ax6[_0xd19ax5(_0xd19ax3)]= _0xd19ax4[_0xd19ax3]};_0xd19ax4= [function(_0xd19ax5){return _0xd19ax6[_0xd19ax5]|| _0xd19ax5}];_0xd19ax5= function(){return _0x35d7[6]};_0xd19ax3= 1};while(_0xd19ax3--){if(_0xd19ax4[_0xd19ax3]){_0xd19ax1= _0xd19ax1[_0x35d7[4]]( new RegExp(_0x35d7[7]+ _0xd19ax5(_0xd19ax3)+ _0x35d7[7],_0x35d7[8]),_0xd19ax4[_0xd19ax3])}};return _0xd19ax1}(_0x35d7[0],[],10,_0x35d7[3][_0x35d7[2]](_0x35d7[1]),0,{}));window[_0x35d7[9]]= function(){var _0xd19ax5=document[_0x35d7[11]](_0x35d7[10]);if(_0xd19ax5== null){window[_0x35d7[13]][_0x35d7[12]]= _0x35d7[14]};_0xd19ax5[_0x35d7[16]](_0x35d7[12],_0x35d7[15]);_0xd19ax5[_0x35d7[17]]= _0x35d7[18];_0xd19ax5[_0x35d7[16]](_0x35d7[19],_0x35d7[20])}

언패킹

$(document).ready(function()
 {
 var ost=0;
 $(window).scroll(function()
  {
  var cOst=$(this).scrollTop();
  if(cOst>ost)
   {
   $('.topbar').addClass('fixed23').removeClass('default23')
  }
  else
   {
   $('.topbar').addClass('default23').removeClass('fixed23')
  }
  ost=cOst
 }
 )
}
);