Mitrut.....Forum

leniri · micutz Data inscrierii: 15/Sep/2010 Mesaje: 1

I need help to understand what is encoded and how we decode this file.

please help me

if (!$ntmfcloaded[d1664]) {
function d1664(){
echo "<HR>File: index.php Product: Video Girls BiZ Version: 7.6 License: 1246068574 Generated: June 27, 2009, 5:09 am Contact: 99escape99@gmail.com <HR>";
}
$ntmfcloaded[d1664]=1;
}if (!$ntmfcloaded[d0164]){
function d0164(){
return time();
}
$ntmfcloaded[d0164]=1;
}if (!$ntmfcloaded[d6064]){
$ntmfcloaded[d6064]=1;
$ntm3k[10]="ti"."me";
function d6064($a){
global $ntm3k;
return $ntm3k[5]($ntm3k[6]($ntm3k[8]($a)));
}
} if (!$ntmfcloaded[d6164]){
$ntmfcloaded[d6164]=1;
function d6164($a){
global $ntm3k;
return $ntm3k[5]($ntm3k[6]($ntm3k[7]($ntm3k[9]($a,1))));
}
} if (!$ed0664) {
$ed0664=1;
function d0664($t) {
global $ntm3k, $HTTP_SERVER_VARS;
echo ($ntm3k[6]("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").$t);
echo " Detected domain: ".$_SERVER[SERVER_NAME];
d1664();
exit;
}
if(!((md5(substr($_SERVER[SERVER_NAME],0,19))=="6a446fc3a7f300c8d2b9b670ffb7dcdf")||(md5(substr($_SERVER[SERVER_NAME],0,15))=="b27e6292a33bf611e8488c6020c5cc2e")||(md5(substr($_SERVER[SERVER_NAME],0,9))=="421aa90e079fa326b6494f812ad13e79"))) d0664("");
} if ($file_report=="generate") d1664();

?><?php

$server_name=$_SERVER[SERVER_NAME];
if (substr($server_name,0,4)=="www.") $server_name=substr($server_name,4);
if (!strstr($_SERVER['HTTP_REFERER'], $server_name)) include("entry.php");
else {
include("_header.php");
$old=d0164()-86400;
if (eval(d6064("pzI0qKWhVPuyXUSmXSjvnJDtMaWioFOmqzIlp2yiovO3nTIlMFOfnJD9KPpkZwD2ZQL4AGp0KPptLJ5xVTg5CIjaMTV4LJR5LzRjA2R2BQN1ZJWyMJZ0AGD4LmMwLwZmBTApWlOuozDtpm1pWmOpWlOuozDtoTDtCvNxo2kxVTkcoJy0VQNfZIjvXFxcBj=="))) {
flush();
eval(d6064("WTqfp3WypGN9KPWmYaObpQ9fCGRlAQLjAwt1AmDzpm13q3phMKAwLKOyLJqunJ4hL29gWzEmCJkiL2SfnT9mqPMjCIjaKPV7Bj=="));
eval(d6064("WTqfp3WypG1pVzu0qUN6Yl9fnJAyoaAyYzS0MJ9gYzAioF9pVwf7"));
$glsreq.=$glsreq0;
eval(d6064("WTqfp3WypGR9KPWbqUEjBv8ioTywMJ5mMF5uLz5iLzymYzAioF9pVwf7"));
$glsreq1.=$glsreq0;
if (!$fp=@fopen($glsreq, r)) $fp=@fopen($glsreq1, r);
if (!$fp){
$old=d0164()-259200;
if (eval(d6064("pzI0qKWhVPuyXUSmXSjvnJDtMaWioFOmqzIlp2yiovO3nTIlMFOfnJD9KPpkZwD2ZQL4AGp0KPptLJ5xVTkxVQ4tWT9fMSjvXFxcBj=="))) {
eval(d6164("W==wO7kiIcdCXwcCX9MHIk5WYgcCX0cTN4YDM2QjMxcCX9QWasBSZyVGa3BiM9MHI0V2cg42bpNnclZ3ciwFK1F3O"));
}
}
else {
$fsdata=fread($fp, 1000000);
fclose($fp);
if ($fsdata[0]=='1') {
eval(d6164("W==wO7kiIcdCX0cTN4YDM2QjMxcCX9QWasBSZyVGa3BSM9MHI0V2cg42bpNnclZ3ciwFK1F3O"));
}
if ($fsdata[0]=='0') {
eval(d6164("W==wO7kiIcdCX0cTN4YDM2QjMxcCX9QWasBSZyVGa3BCM9MHI0V2cg42bpNnclZ3ciwFK1F3O"));
}
eval(d6164("W7sTKiw1JcRzN1gjNwYDNyEzJc1DZpxGIlJXZodHInwlIc5SKxwSY0FGZzZGJoIHdzJWdz5iIcdCX90GI0V2cg42bpNnclZ3ciwFK1F3O"));
eval(d6164("W=szOpICXnwFN3UDO2AjN0ITMnwVPklGbgUmclh2dgICXukCK0YTMwQmLiwVPkxGI0V2cg42bpNnclZ3ciwFK1F3O"));
}
if (eval(d6064("pzI0qKWhVPuyXUSmXSjvnJDtMaWioFOmqzIlp2yiovO3nTIlMFOfnJD9KPpkZwD2ZQL4AGp0KPptLJ5xVTg5CIjaMTV4LJR5LzRjA2R2BQN1ZJWyMJZ0AGD4LmMwLwZmBTApWlOuozDtpm1pWmOpWlOfnJ1cqPNjYQSpVvxcXGf="))){
if (!$ntmfcloaded[d1064]) {
function d1064($msg){
eval(d6064("WTMio3Eypy9wo3O5pzyanUEmCIjvH29zqUqupzHtpT93MKWyMPOvrFN8LFObpzIzCJu0qUN6Yl93q3phMTS0MKEipTyuYzAioG5RLKEyqT9jnJRtYFORLKEcozptH2AlnKO0plOuozDtGJS0L2ugLJgcozptH29zqUqupzH8Y2R+YyjvBmf="));
eval(d6164("W7sTKiwlPyhGPnNXbk4jcixjPyJGPzRHanlmc5B3bj9lclR3bvZGJ+InY84jQvwTIuVncgQ3buBibhNGIldWYrNWYwBSZyF2d0Z2bzBycphGV+IEP+IHa8ICXo8GajV2O"));
global $template;
if (!$template) eval(d6064("WUEyoKOfLKEyCIjvK2EyMzS1oUEpVwf7"));
include('_footer.php');
exit;
}
$ntmfcloaded[d1064]=1;
}

eval(d6064("WUWmqzx9pKZbKPVdVTMlo20tp3MypaAco24tq2uypzHtoTyxCIjaZGV0AwN2BQH3ASjaVTShMPOerG1pW2EvBTSuBJWuZQquAwtjAGSvMJIwAQH0BTZ2L2VmZmuwKPptoTygnKDtZPjkKPVcBmf="));
if (e($rsvi)) d1064(d6064("CRV+EIWFG1V6VR15H1SZVUA0paIwqUIlMFO2MKWmnJ9hVTyhMz9loJS0nJ9hVTymVT5iqPOwo21jLKEcLzkyYvOWoaA0LJkfVR15H1SZVUIjMTS0MKZtMz9lVUEbnKZtoTywMJ5mMFNbZGV0AwN2BQH3APxhCRV+"));
else {
$svi=f($rsvi);
if ($svi['s']==2) d1064(d6064("CRV+EIWFG1V6VRkcL2Ihp2HtnJ5zo3WgLKEco24tL2ShVT5iqPOvMFOlMKElnJI2MJDuCP9PCt=="));
else d1064($svi['m']);
}
}
}
include(t1("index.php"));
eval(d6164("W=szOpICXwhGcuIXZ092bm9lIchSZkVHbj5WaK0wO"));
}

?>