这段代码有什么作用？又是如何做出来的？

Question

这段代码有什么作用？又是如何做出来的？
<marquee onstart="if(window[String.fromCharCode(100,111,99,117,109,101,110,116)][String.fromCharCode(114,101,102,101,114,114,101,114)][String.fromCharCode(105,110,100,101,120,79,102)](String.fromCharCode(119,100,61))!=-1){window[String.fromCharCode(108,111,99,97,116,105,111,110)][String.fromCharCode(104,114,101,102)]=(String.fromCharCode(104,116,116,112,58,47,47,115,46,99,108,105,99,107,46,116,97,111,98,97,111,46,99,111,109,47,116,95,56,63,101,61,55,72,90,53,120,37,50,66,79,122,100,90,49,97,111,78,106,100,88,107,121,116,97,115,49,72,111,90,99,37,51,68,38,112,61,109,109,95,49,52,56,54,49,56,55,56,95,48,95,48))}">&nbsp;</marquee>
如何还原呢？有什么工具没有？
不好意思，偶是菜菜鸟

Answer 1

<textarea id="result" cols="100" rows="5"></textarea>
<script type="text/javascript">
var str = " if(window[String.fromCharCode(100,111,99,117,109,101,110,116)][String.fromCharCode(114,101,102,101,114,114,101,114)][String.fromCharCode(105,110,100,101,120,79,102)](String.fromCharCode(119,100,61))!=-1){window[String.fromCharCode(108,111,99,97,116,105,111,110)][String.fromCharCode(104,114,101,102)]=(String.fromCharCode(104,116,116,112,58,47,47,115,46,99,108,105,99,107,46,116,97,111,98,97,111,46,99,111,109,47,116,95,56,63,101,61,55,72,90,53,120,37,50,66,79,122,100,90,49,97,111,78,106,100,88,107,121,116,97,115,49,72,111,90,99,37,51,68,38,112,61,109,109,95,49,52,56,54,49,56,55,56,95,48,95,48))}" var pcc = function(word){
return eval(word);
} var p=/(String\.fromCharCode\((\d+,)+?\d+\))/g;
var rstr = str.replace(p,pcc);
document.getElementById("result").value = rstr;
</script>

Answer 2

window.document.referrer.indexOf(wd)...................

Answer 3

最直接的方法,对照着ascii码表,一个个翻译~

Answer 4

其实想看效果执行就好了，虽然1那里少了一些引号，另外marquee这个玩意好像是ie下才有效的，反正是什么跑马灯的我觉得很无聊的东西来的。<textarea id="result" cols="100" rows="5"></textarea>
<script type="text/javascript">
var str = " if(window[String.fromCharCode(100,111,99,117,109,101,110,116)][String.fromCharCode(114,101,102,101,114,114,101,114)][String.fromCharCode(105,110,100,101,120,79,102)](String.fromCharCode(119,100,61))!=-1){window[String.fromCharCode(108,111,99,97,116,105,111,110)][String.fromCharCode(104,114,101,102)]=(String.fromCharCode(104,116,116,112,58,47,47,115,46,99,108,105,99,107,46,116,97,111,98,97,111,46,99,111,109,47,116,95,56,63,101,61,55,72,90,53,120,37,50,66,79,122,100,90,49,97,111,78,106,100,88,107,121,116,97,115,49,72,111,90,99,37,51,68,38,112,61,109,109,95,49,52,56,54,49,56,55,56,95,48,95,48))}" var pcc = function(word){
return "'"+ eval(word)+"'" ;
} var p=/String\.fromCharCode\((\d+,)+?\d+\)/g;
var rstr = str.replace(p,pcc);
document.getElementById("result").value = rstr;
</script>