Webpage Trojans (continued)

In the article "webpage Trojan", I mainly explained the situation of Trojan horse mounting. The Code is as follows:

Document. writeln ("<SCRIPT type =/" text // JavaScript/"src =/" http: // js.tongji.linezing.com//1136402/tongji.js/ "> </SCRIPT> ");

 

It will execute a script file: Tongji. js

 

It was because such a script was executed that our computer was poisoned and become a zombie. Now we will post all the Tongji. js code for everyone to learn, in case of a trick.

 

Function _ st_u_en (STR) {var en = "", I = 0; for (I = 0; I <Str. length; I ++) {If (Str. charcodeat (I)> = 0 & Str. charcodeat (I) <= 255) {en = en + escape (Str. charat (I);} else {en = en + Str. charat (I) ;}} return en ;}
Function _ st_g_sr () {If (self. screen) {sr = screen. width + "X" + screen. height;} else if (self. java) {var J = Java. AWT. toolkit. getdefatooltoolkit (); var S = J. getscreensize (); Sr = S. width + "X" + S. height;} return SR;} function _ st_g_ SC () {var SC = "";
If (self. screen) {SC = screen. colordepth + "-bit";} return SC;} function _ st_g_lg () {var lg = ""; var n = navigator; If (N. language) {LG = n. language. tolowercase ();} else if (N. browserlanguage) {LG = n. browserlanguage. tolowercase ();} return LG ;}
Function _ st_g_ag () {var Ag = ""; var n = navigator; If (N. useragent) {Ag = n. useragent;} return AG;} function _ st_g_je () {var je = ""; var n = navigator; je = n. javaenabled ()? 1:0; return je;} function _ st_g_fl () {var F = "", n = navigator; If (N. plugins & N. plugins. length) {for (var ii = 0; II <n. plugins. length; II ++) {If (N. plugins [II]. name. indexof ('shockwave flash ')! =-1) {f = n. plugins [II]. description. split ('shockwave flash') [1]; break ;}} else if (window. activexobject) {for (var ii = 10; II> = 2; II --) {try {var FL = eval ("New activexobject ('shockwaveflash. shockwaveflash. "+ II +" '); "); If (FL) {f = II + '. 0'; break ;}} catch (e) {}} return F;} function _ st_c_co () {var c_en = (navigator. cookieenabled )? 1: 0; return c_en;} function _ st_g_ss_val (STR) {Len = Str. indexof ("_"); STR = Str. substring (LEN + 1); Len = Str. indexof ("_"); STR = Str. substring (LEN + 1); Return STR ;}

Function _ st_c_mm_stf (REF)
{
If (ref. indexof (".alimama.com/")> 0 ){
If (ref. indexof ("/alimama. php")> 0 ){
Return 1;
}

If (ref. indexof ("/NCPA. php")> 0 ){
Return 2;
}
}

Return 0;
}

Function _ st_g_mm_pid (REF) {var pid = "0"; if (REF) {Len = ref. indexof ("? I = "); If (LEN <0) {Len = ref. indexof ("& I =") ;}if (LEN <0) {return PID ;}ref = ref. substring (LEN + 1); Len = ref. indexof ("&"); If (LEN <0) {pid = ref. substring (2);} else {pid = ref. substr (2, len-2) ;}} if (! PID) {pid = "0";} return PID ;}
Function _ st_g_mm_fbid (REF)
{
VaR fbid = "0 ";

If (REF ){
Len = ref. indexof ("& Fb = ");
If (LEN <0 ){
Len = ref. indexof ("? Fb = ");
}

If (LEN <0 ){
Return fbid;
}

Ref = ref. substring (LEN + 1 );

Len = ref. indexof ("&");

If (LEN <0 ){
Fbid = ref. substring (3 );
}
Else {
Fbid = ref. substr (3, len-3 );
}
}

If (! Fbid ){
Fbid = "0 ";
}

Return fbid;
}

Function _ st_g_mm_sid (REF)
{
VaR SID = "0 ";

If (REF ){
Len = ref. indexof ("& Si = ");
If (LEN <0 ){
Len = ref. indexof ("? SI = ");
}

If (LEN <0 ){
Return Sid;
}

Ref = ref. substring (LEN + 1 );

Len = ref. indexof ("&");

If (LEN <0 ){
SID = ref. substring (3 );
}
Else {
SID = ref. substr (3, len-3 );
}
}

If (! Sid ){
SID = "0 ";
}

Return Sid;
}

Function _ st_g_mm_cg (REF)
{
VaR CG = "0 ";

If (REF ){
// If (ref. indexof (".alimama.com/")> 0 ){
// If (! Ref. indexof ("/alimama. php ")&&! Ref. indexof ("/NCPA. php ")){
// Return PID;
//}

Len = ref. indexof ("& CG = ");
If (LEN <0 ){
Len = ref. indexof ("? CG = ");
}

If (LEN <0 ){
Return CG;
}

Ref = ref. substring (LEN + 1 );

Len = ref. indexof ("&");

If (LEN <0 ){
CG = ref. substring (3 );
}
Else {
CG = ref. substr (3, len-3 );
}
//}
}

If (! CG ){
CG = "0 ";
}

Return CG;
}

Function _ st_g_co (name) {var Mn = Name + "="; var B, E; var CO = document. cookie; If (Mn = "=") {return Co;} B = Co. indexof (Mn); If (B <0) {return "";} e = Co. indexof (";", B + name. length); If (E <0) {return Co. substring (B + name. length + 1);} else {return Co. substring (B + name. length + 1, E );}}
Function _ st_s_co (name, Val, cotp)
{
VaR date = new date;
VaR year = date. getfullyear ();
VaR hour = date. gethours ();

VaR cookie = "";

If (cotp = 0 ){
Cookie = Name + "=" + Val + ";";
}
Else if (cotp = 1 ){
Year = year + 10;
Date. setyear (year );
Cookie = Name + "=" + Val + "; expires =" + date. togmtstring () + ";";
}
Else if (cotp = 2 ){
Hour = hour + 1;
Date. sethours (hour );
Cookie = Name + "=" + Val + "; expires =" + date. togmtstring () + ";";
}

VaR d = _ st_g_dom (document. domain );
If (D! = ""){
Cookie + = "Domain =" + D + ";";
}
Cookie + = "Path =" + "/;";
Document. Cookie = cookie;
}

Function _ st_g_dom (host)
{
VaR d = host. Replace (/^ www /./,"");

VaR Ss = D. Split (".");
VaR L = ss. length;

If (L = 3 ){
If (_ st_c_ctry_top_dom (ss [1]) & _ st_c_ctry_dom (ss [2]) {
}
Else {
D = ss [1] + "." + SS [2];
}
}
Else if (L> = 3 ){
VaR ip_pat = "^ [0-9] */. [0-9] */. [0-9] */. [0-9] * $ ";

If (host. Match (ip_pat) {return D ;}

If (_ st_c_ctry_top_dom (ss [L-2]) & _ st_c_ctry_dom (ss [L-1]) {
D = ss [L-3] + "." + SS [L-2] + "." + SS [L-1];
}
Else {d = ss [L-2] + "." + SS [L-1];}
}

Return D;
}

Function _ st_c_ctry_top_dom (STR)
{Var pattern = "/^ aero $ | ^ cat $ | ^ Coop $ | ^ int $ | ^ Museum $ | ^ pro $ | ^ travel $ | ^ XXX $ | ^ com $ | ^ net $ | ^ Gov $ | ^ org $ | ^ mil $ | ^ Edu $ | ^ biz $ | ^ info $ | ^ name $ | ^ AC $ | ^ Mil $ | ^ Co $ | ^ ed $ | ^ GV $ | ^ NT $ | ^ BJ $ | ^ Hz $ | ^ sh $ | ^ TJ $ | ^ CQ $ | ^ he $ | ^ nm $ | ^ ln $ | ^ JL $ | ^ HL $ | ^ JS $ | ^ ZJ $ | ^ Ah $ | ^ HB $ | ^ HN $ | ^ GD $ | ^ GX $ | ^ Hi $ | ^ SC $ | ^ GZ $ | ^ YN $ | ^ xz $ | ^ Sn $ | ^ GS $ | ^ QH $ | ^ NX $ | ^ XJ $ | ^ Tw $ | ^ HK $ | ^ Mo $ | ^ FJ $ | ^ ha $ | ^ JX $ | ^ SD $ | ^ SX $/I";

If (Str. Match (pattern) {return 1 ;}

Return 0;
}

Function _ st_c_ctry_dom (STR)
{
VaR pattern = "/^ AC $ | ^ ad $ | ^ AE $ | ^ af $ | ^ Ag $ | ^ AI $ | ^ Al $ | ^ am $ | ^ an $ | ^ AO $ | ^ AQ $ | ^ ar $ | ^ as $ | ^ at $ | ^ AU $ | ^ aw $ | ^ AZ $ | ^ Ba $ | ^ BB $ | ^ BD $ | ^ be $ | ^ BF $ | ^ BG $ | ^ BH $ | ^ Bi $ | ^ BJ $ | ^ BM $ | ^ Bo $ | ^ BR $ | ^ BS $ | ^ BT $ | ^ BV $ | ^ BW $ | ^ by $ | ^ BZ $ | ^ ca $ | ^ CC $ | ^ CD $ | ^ CF $ | ^ CG $ | ^ Ch $ | ^ CI $ | ^ CK $ | ^ Cl $ | ^ cm $ | ^ CN $ | ^ Co $ | ^ Cr $ | ^ CS $ | ^ Cu $ | ^ CV $ | ^ CX $ | ^ Cy $ | ^ CZ $ | ^ de $ | ^ DJ $ | ^ DK $ | ^ DM $ | ^ do $ | ^ DZ $ | ^ EC $ | ^ EE $ | ^ eg $ | ^ eh $ | ^ er $ | ^ es $ | ^ et $ | ^ EU $ | ^ fi $ | ^ FJ $ | ^ FK $ | ^ FM $ | ^ fo $ | ^ fr $ | ^ ly $ | ^ HK $ | ^ HM $ | ^ HN $ | ^ HR $ | ^ HT $ | ^ Hu $ | ^ ID $ | ^ ie $ | ^ il $ | ^ im $ | ^ in $ | ^ Io $ | ^ IR $ | ^ is $ | ^ it $ | ^ je $ | ^ JM $ | ^ Jo $ | ^ JP $ | ^ Ke $ | ^ kg $ | ^ KH $ | ^ Ki $ | ^ km $ | ^ kN $ | ^ KP $ | ^ KR $ | ^ kW $ | ^ Ky $ | ^ KZ $ | ^ La $ | ^ LB $ | ^ LC $ | ^ li $ | ^ LK $ | ^ LR $ | ^ ls $ | ^ lt $ | ^ Lu $ | ^ LV $ | ^ ly $ | ^ ga $ | ^ GB $ | ^ GD $ | ^ Ge $ | ^ GF $ | ^ Gg $ | ^ GH $ | ^ GI $ | ^ GL $ | ^ GM $ | ^ GN $ | ^ GP $ | ^ GQ $ | ^ gr $ | ^ GS $ | ^ GT $ | ^ Gu $ | ^ GW $ | ^ Gy $ | ^ Ma $ | ^ Mc $ | ^ MD $ | ^ mg $ | ^ MH $ | ^ MK $ | ^ ml $ | ^ mm $ | ^ Mn $ | ^ Mo $ | ^ MP $ | ^ MQ $ | ^ Mr $ | ^ MS $ | ^ Mt $ | ^ Mu $ | ^ MV $ | ^ MW $ | ^ MX $ | ^ my $ | ^ MZ $ | ^ na $ | ^ NC $ | ^ ne $ | ^ NF $ | ^ ng $ | ^ Ni $ | ^ NL $ | ^ no $ | ^ NP $ | ^ Nr $ | ^ nu $ | ^ NZ $ | ^ om $ | ^ re $ | ^ Ro $ | ^ Ru $ | ^ RW $ | ^ pa $ | ^ PE $ | ^ pf $ | ^ PG $ | ^ pH $ | ^ PK $ | ^ PL $ | ^ PM $ | ^ PR $ | ^ PS $ | ^ PT $ | ^ PW $ | ^ py $ | ^ QA $ | ^ WF $ | ^ ws $ | ^ SA $ | ^ Sb $ | ^ SC $ | ^ SD $ | ^ se $ | ^ SG $ | ^ sh $ | ^ SI $ | ^ SJ $ | ^ SK $ | ^ SL $ | ^ SM $ | ^ Sn $ | ^ so $ | ^ Sr $ | ^ st $ | ^ su $ | ^ SV $ | ^ Sy $ | ^ SZ $ | ^ TC $ | ^ TD $ | ^ TF $ | ^ th $ | ^ TG $ | ^ TJ $ | ^ TK $ | ^ TM $ | ^ tn $ | ^ to $ | ^ TP $ | ^ tr $ | ^ TT $ | ^ TV $ | ^ Tw $ | ^ TZ $ | ^ UA $ | ^ ug $ | ^ UK $ | ^ um $ | ^ US $ | ^ Uy $ | ^ uz $ | ^ va $ | ^ VC $ | ^ ve $ | ^ VG $ | ^ VI $ | ^ VN $ | ^ VU $ | ^ ye $ | ^ yt $ | ^ Yu $ | ^ za $ | ^ ZM $ | ^ Zr $ | ^ ZW $/I ";

If (Str. Match (pattern) {return 1 ;}

Return 0;
}

Function _ st_s_co_time (name, Val, Day)
{
VaR date = new date;
VaR vday = date. getdate ();

VaR cookie = "";

Vday = vday + Day;

Date. setdate (vday );

Cookie = Name + "=" + Val + "; expires =" + date. togmtstring () + ";";

VaR d = _ st_g_dom (document. domain );
If (D! = ""){
Cookie + = "Domain =" + D + ";";
}
Cookie + = "Path =" + "/;";
Document. Cookie = cookie;
}

Function _ st_g_so () {VaR so = ""; var n = navigator; If (N. appname) {so = n. appname;} return so;
}

Function _ st_g_stm ()
{
VaR date = new date ();
VaR YY = date. getfullyear ();
VaR Mm = date. getmonth ();
VaR dd = date. getdate ();
VaR HH = date. gethours ();
VaR II = date. getminutes ();
VaR Ss = date. getseconds ();
VaR I;
VaR TM = 0;
For (I = 1970; I <YY; I ++ ){
If (I % 4 = 0 & I % 100! = 0) | (I % 100 = 0 & I % 400 = 0 )){
TM = TM + 31622400;
}
Else {
TM = TM + 31536000;
}
}
Mm = mm + 1;
 
For (I = 1; I <mm; I ++ ){
If (I = 1 | I = 3 | I = 5 | I = 7 | I = 8 | I = 10 | I = = 12) {
TM = TM + 2678400;
}
Else {
If (I = 2 ){
If (yy % 4 = 0 & YY % 100! = 0) | (yy % 100 = 0 & YY % 400 = 0 )){
TM = TM + 2505600;
}
Else {
TM = TM + 2419200;
}
}
Else {
TM = TM + 2592000;
}
}
}
 
TM = TM + (dd-1) * 86400; TM = TM + HH * 3600;
TM = TM + II * 60;
TM = TM + SS;
Return TM;
}

Function _ st_g_ade_val (STR)
{
Len = Str. indexof ("_");
STR = Str. substring (0, Len );

Return STR;
}

Function _ st_g_ade_sttime (STR)
{
Len = Str. indexof ("_");
STR = Str. substring (LEN + 1 );
Len = Str. indexof ("_");

STR = Str. substring (0, Len );

Return parseint (STR );
}

Function _ st_g_ade_adtime (STR)
{
Len = Str. indexof ("_");
STR = Str. substring (LEN + 1 );
Len = Str. indexof ("_");
STR = Str. substring (LEN + 1 );

Return parseint (STR );
}

Function _ st_g_ctm (STR) {Len = Str. indexof ("_"); STR = Str. substring (LEN + 1); Len = Str. indexof ("_"); STR = Str. substring (0, Len); Return parseint (STR, 10 );
}

Function _ st_g_u_sn (STR) {Len = Str. indexof ("_"); STR = Str. substring (0, Len); Return parseint (STR );}

VaR _ st_unit_id = 1136402;
VaR _ st_expr_tm = 1800;
VaR _ st_url_sn = 0;
VaR _ st_ip = "dt.tongji.linezing.com ";
/**/VaR _ st_dest_path
= "/Yst" + "at. d" + "O? Unit_id = "+ _ st_unit_id;
VaR _ st_nuv = 0;
VaR _ st_uv = "";
VaR _ st_ss = "";
VaR _ st_ref = "";
/**/
VaR _ st_url = "";
VaR _ st_clr = "";
VaR _ st_scr = "";
VaR _ st_lng = "";
VaR _ st_agt = "";
VaR _ st_jvm = "";
VaR _ st_flu = "";
VaR _ st_sof = "";
VaR _ st_cva = "";
VaR _ st_len = 0;
VaR _ st_dom = "";
VaR _ st_host = "";

VaR _ st_loc_ip = "";
_ St_loc_ip = "118.180.225.12 ";

VaR _ st_icon_link_host = "";

VaR rand;
VaR _ en_co = _ st_c_co ();
VaR _ ss_val = 0;

VaR _ st_cg = "0 ";
VaR _ st_mm_land = 0;
VaR _ st_cpa = "0 ";

_ St_host = Document. Location. Host;
_ St_dom = _ st_g_dom (_ st_host.tolocalelowercase ());

VaR _ st_ha = 0;
VaR I = 0;
For (I = 0; I <_ st_dom.length; I ++ ){
_ St_ha + = _ st_dom.charcodeat (I );
}

VaR _ st_ft = 0;

_ St_uv = _ st_g_co ("lstat_bc _" + String (_ st_unit_id ));
If (_ st_uv = ""){
_ St_nuv = 1;

VaR rand1 = parseint (math. Random () * 4000000000 );
VaR rand2 = parseint (math. Random () * 4000000000 );
_ St_uv = string (rand1) + String (rand2 );

_ St_s_co ("lstat_bc _" + String (_ st_unit_id), _ st_uv, 1 );
}

_ St_ss = _ st_g_co ("lstat_ss _" + String (_ st_unit_id ));
If (_ st_ss = ""){
_ St_url_sn = 0;
Rand = parseint (math. Random () * 4000000000 );
_ St_ss = "0 _" + _ st_g_stm () + "_" + String (RAND );
_ St_s_co ("lstat_ss _" + String (_ st_unit_id), _ st_ss, 0 );
}
Else {
If (_ st_g_stm ()-_ st_g_ctm (_ st_ss)> _ st_expr_tm ){
_ St_url_sn = 0;
Rand = parseint (math. Random () * 4000000000 );
_ St_ss = "0 _" + _ st_g_stm () + "_" + String (RAND );
}
Else {_ st_url_sn = _ st_g_u_sn (_ st_ss) + 1; _ ss_val = _ st_g_ss_val (_ st_ss); _ st_ss = string (_ st_url_sn) + "_" + _ st_g_stm () + "_" + _ ss_val;} _ st_s_co ("lstat_ss _" + String (_ st_unit_id), _ st_ss, 0 );
}

VaR _ st_cna = _ st_g_co ("CNA ");

VaR _ st_ade_cookie = _ st_g_co ("lstat_ade _" + String (_ st_unit_id ));

VaR _ st_ade_value = "0 ";
VaR _ st_ade_sttime = 0;
VaR _ st_ade_adtime = 0;

If (_ st_ade_cookie ){
_ St_ade_value = _ st_g_ade_val (_ st_ade_cookie );
_ St_ade_sttime = _ st_g_ade_sttime (_ st_ade_cookie );
// _ St_ade_adtime = _ st_g_ade_adtime (_ st_ade_cookie );
}

_ St_cva = string (math. Random ());
_ St_len = _ st_ss.indexof ("_");
_ St_ss = _ st_g_ss_val (_ st_ss );

_ St_ref = Document. referrer;

// _ St_pid = _ st_g_mm_pid (_ st_ref );
VaR _ st_mid = 0;
VaR _ st_mm_stf = _ st_c_mm_stf (_ st_ref );

_ St_cg = _ st_g_co ("lstat_cg _" + String (_ st_unit_id ));
If (! _ St_cg ){
_ St_cg = "0 ";
}

_ St_cpa = _ st_g_co ("lstat_cpa _" + String (_ st_unit_id ));
If (! _ St_cpa ){
_ St_cpa = "0 ";
}

If (_ st_mm_stf ){
VaR _ st_sid = _ st_g_mm_sid (_ st_ref );
VaR _ st_pid = _ st_g_mm_pid (_ st_ref );
VaR _ st_fbid = _ st_g_mm_fbid (_ st_ref );
 
_ St_mm_land = 1; // mark if land PV

_ St_ade_sttime = 1245769513;

If (_ st_mm_stf = 2 ){
_ St_cpa = string (_ st_sid) + "_" + String (_ st_pid) + "_" + String (_ st_fbid );
_ St_s_co_time ("lstat_cpa _" + String (_ st_unit_id), _ st_cpa, _ st_ade_adtime );
}

_ St_cg = _ st_g_mm_cg (_ st_ref );
 
If (_ st_cg! = "0 "){
// Set CG
_ St_s_co ("lstat_cg _" + String (_ st_unit_id), _ st_cg, 0 );
}

If (_ st_mm_stf = 1 ){
If (_ st_ade_cookie ){
// Reset
_ St_ade_value = _ st_g_ade_val (_ st_ade_cookie );

_ St_ade_cookie = _ st_ade_value + "_" + String (_ st_ade_sttime) + "_" + String (_ st_ade_adtime );
_ St_s_co_time ("lstat_ade _" + String (_ st_unit_id), _ st_ade_cookie, _ st_ade_adtime );
}
Else {
Rand_1 = parseint (math. Random () * 4000000000 );
Rand_2 = parseint (math. Random () * 4000000000 );
_ St_ade_value = string (rand_1) + String (rand_2 );

_ St_ade_cookie = _ st_ade_value + "_" + String (_ st_ade_sttime) + "_" + String (_ st_ade_adtime );
_ St_s_co_time ("lstat_ade _" + String (_ st_unit_id), _ st_ade_cookie, _ st_ade_adtime );
}
}
}

_ St_ref = _ st_u_en (string (_ st_ref ));

_ St_url = Document. url;
_ St_url = _ st_u_en (string (_ st_url ));
_ St_clr = _ st_g_ SC ();
_ St_clr = _ st_u_en (string (_ st_clr ));
_ St_scr = _ st_g_sr ();
_ St_scr = _ st_u_en (string (_ st_scr ));
_ St_lng = _ st_g_lg ();
_ St_lng = _ st_u_en (string (_ st_lng ));
_ St_agt = _ st_g_ag ();
_ St_agt = _ st_u_en (string (_ st_agt ));
_ St_jvm = _ st_g_je ();
_ St_jvm = _ st_u_en (string (_ st_jvm ));
_ St_flu = _ st_g_fl ();
_ St_flu = _ st_u_en (string (_ st_flu ));
_ St_sof = _ st_g_so ();
_ St_sof = _ st_u_en (string (_ st_sof ));

VaR FDS = new array ();

FDS [0] = "gro # tra763 ";
FDS [1] = "MOC # olzd ";
FDS [2] = "MOC # tra763 ";
FDS [3] = "MOC # df571 ";
FDS [4] = "ten # oog1 ";
FDS [5] = "NC # ppk1 ";
FDS [6] = "NC # osnaknak ";
FDS [7] = "NC # emocwww ";
FDS [8] = "NC # psalla ";
FDS [9] = "MOC # oesii ";
FDS [10] = "MOC # kh0083 ";
FDS [11] = "NC # kpwww ";
FDS [12] = "NC # MOC # zw001 ";
FDS [13] = "NC # kpemoc ";
FDS [14] = "MOC # eyiq063 ";
FDS [15] = "MOC # qqa4 ";
FDS [16] = "ten # aboakoak ";
FDS [17] = "MOC # ecilliw ";
FDS [18] = "NC # MOC # ibeea ";
FDS [19] = "MOC # ibeea ";
FDS [20] = "NC # tra763 ";
FDS [21] = "MOC # 025sns ";
FDS [22] = "MOC # og321oah ";
FDS [23] = "MOC #9 zznc ";
FDS [24] = "NC #9 zznc ";
FDS [25] = "MOC # d135 ";
FDS [26] = "MOC # ridzoog ";
FDS [27] = "ten # rqrq ";
FDS [28] = "MOC # 195nak ";
FDS [29] = "MOC # uynijtn ";
FDS [30] = "MOC # falwen ";
FDS [31] = "NC # MOC # njyhxj ";

VaR _ temp_st_dom = str_reverse (_ st_dom );
VaR I = 0;
For (I in FDS ){
If (FDS [I] = _ temp_st_dom)
_ St_ft = 1;
}

VaR FIPS = new array ();

VaR I = 0;
For (I in FIPS ){
If (FIPS [I] ==_st_loc_ip ){
_ St_ft = 1;
Break;
}
}

_ St_dest = "http: // "+ _ st_ip + _ st_dest_path +" & UV = "+ _ st_uv +" & NUV = "+ _ st_nuv +" & CNA = "+ _ st_cna +" & CG = "+ _ st_cg +" & Mid = "+ _ st_mid +" & mmland = "+ _ st_mm_land +" & Ade = "+ _ st_ade_value +" & adtm = "+ _ st_ade_adtime + "& sttm =" + _ st_ade_sttime + "& CPA =" + _ st_cpa + "& SS =" + _ st_ss + "& USN =" + _ st_url_sn + "& EC = "+ _ en_co +" & ref = "+ _ st_ref +" & url = "+ _ st_url +" & dom = "+ _ st_dom +" & HA = "+ _ st_ha + "& Ft =" + _ st_ft + "& NAC =" + _ st_sof + "& AGT =" + _ st_agt + "& CLR =" + _ st_clr +" & scr = "+ _ st_scr +" & lng = "+ _ st_lng +" & JVM = "+ _ st_jvm +" & flu = "+ _ st_flu +" & TM = 1245769513 "+" & Tc = 7dc0f488 "+" & ut = 0 "+" & CNU = "+ _ st_cva;

Document. open ();
Document. write ("<script language =/" javascript/"type =/" text/JavaScript/"src =/" "+ _ st_dest +"/"> </SCRIPT> ");

_ St_icon_link_host = "tongji.linezing.com ";

Document. Close ();

Function mmtrace (button_name)
{
If (button_name = NULL ){
// Set default button name
Button_name = 'button ';
}
 
// Avoid log request to be cached
_ St_cva = string (math. Random ());
 
_ St_button_dest = "http: // "+ _ st_ip + _ st_dest_path +" & UV = "+ _ st_uv +" & NUV = "+ _ st_nuv +" & CNA = "+ _ st_cna +" & CG = "+ _ st_cg +" & Mid = "+ _ st_mid +" & mmland = "+ _ st_mm_land +" & Ade = "+ _ st_ade_value +" & adtm = "+ _ st_ade_adtime + "& sttm =" + _ st_ade_sttime + "& mmtrace =" + button_name + "& SS =" + _ st_ss + "& USN =" + _ st_url_sn + "& EC = "+ _ en_co +" & ref = "+ _ st_ref +" & url = "+ _ st_url +" & dom = "+ _ st_dom +" & host = "+ _ st_host + "& NAC =" + _ st_sof + "& AGT =" + _ st_agt + "& CLR =" + _ st_clr + "& scr =" + _ st_scr + "& lng = "+ _ st_lng +" & JVM = "+ _ st_jvm +" & flu = "+ _ st_flu +" & TM = 1245769513 "+" & Tc = 7dc0f488 "+" & ut = 0 "+" & CNU = "+ _ st_cva;

VaR otempjs = Document. createelement ("script ");
Otempjs. type = 'text/JavaScript ';
Otempjs. src = _ st_button_dest;

Document. Body. appendchild (otempjs );
}

Function mamatrace (button_name)
{
Mmtrace (button_name );
}
Function str_reverse (STR ){
VaR Ln = Str. length;
VaR I = 0;
VaR temp = "";
For (I = ln-1; I>-1; I --){
If (Str. charat (I) = ".")
Temp + = "#";
Else
Temp + = Str. charat (I );
}

Return temp;
}

 

 

Currently, the above Code is being analyzed.

 

Note: The above code is only used for learning and not for learning.