Форум АНТИЧАТ - Нужно декодировать пару .php файлов

Форум АНТИЧАТ (https://forum.antichat.xyz/index.php)

- PHP, PERL, MySQL, JavaScript (https://forum.antichat.xyz/forumdisplay.php?f=37)

- - Нужно декодировать пару .php файлов (https://forum.antichat.xyz/showthread.php?t=61072)

Нужно декодировать пару .php файлов

они все такого вида:

<?php /* WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. */
$o="QAAAOzgnJCcjTmM9J2toYGhycwBAKXdvdytxJzYpACInNT c3MCgAADc+KDUyJzY0PTc2PTI/J2wAAGZ0c2JzJ0J/dycjCg0KDXUAAGJ2cm51YlhoaWRiLyVuaWQACGtyY2IoZGhqam hpKQDwJS48joECXWtuZQIVALACHyUBYCh0YnR0bgQwyAMAwAIi Cg0FQ1hvYmZjYnV0LwWBAlQEBFhuaW5zARIKDW5hJy8jAYQuJw tEfAoNDgDUWA4zAnJ6BOZ1YmML4GRzBAAvICkoIAUxCg04OQ== ";eval(base64_decode("JGxsbD0wO2V2YWwoYmFzZTY0X2Rl Y29kZSgiSkd4c2JHeHNiR3hzYkd4c1BTZGlZWE5sTmpSZlpHVm piMlJsSnpzPSIpKTskbGw9MDtldmFsKCRsbGxsbGxsbGxsbCgi Skd4c2JHeHNiR3hzYkd3OUoyOXlaQ2M3IikpOyRsbGxsPTA7JG xsbGxsPTM7ZXZhbCgkbGxsbGxsbGxsbGwoIkpHdzlKR3hzYkd4 c2JHeHNiR3hzS0NSdktUcz0iKSk7JGxsbGxsbGw9MDskbGxsbG xsPSgkbGxsbGxsbGxsbCgkbFsxXSk8PDgpKyRsbGxsbGxsbGxs KCRsWzJdKTtldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3 hzYkd4c2JHdzlKM04wY214bGJpYzciKSk7JGxsbGxsbGxsbD0x NjskbGxsbGxsbGw9IiI7Zm9yKDskbGxsbGw8JGxsbGxsbGxsbG xsbGwoJGwpOyl7aWYoJGxsbGxsbGxsbD09MCl7JGxsbGxsbD0o JGxsbGxsbGxsbGwoJGxbJGxsbGxsKytdKTw8OCk7JGxsbGxsbC s9JGxsbGxsbGxsbGwoJGxbJGxsbGxsKytdKTskbGxsbGxsbGxs PTE2O31pZigkbGxsbGxsJjB4ODAwMCl7JGxsbD0oJGxsbGxsbG xsbGwoJGxbJGxsbGxsKytdKTw8NCk7JGxsbCs9KCRsbGxsbGxs bGxsKCRsWyRsbGxsbF0pPj40KTtpZigkbGxsKXskbGw9KCRsbG xsbGxsbGxsKCRsWyRsbGxsbCsrXSkmMHgwZikrMztmb3IoJGxs bGw9MDskbGxsbDwkbGw7JGxsbGwrKykkbGxsbGxsbGxbJGxsbG xsbGwrJGxsbGxdPSRsbGxsbGxsbFskbGxsbGxsbC0kbGxsKyRs bGxsXTskbGxsbGxsbCs9JGxsO31lbHNleyRsbD0oJGxsbGxsbG xsbGwoJGxbJGxsbGxsKytdKTw8OCk7JGxsKz0kbGxsbGxsbGxs bCgkbFskbGxsbGwrK10pKzE2O2ZvcigkbGxsbD0wOyRsbGxsPC RsbDskbGxsbGxsbGxbJGxsbGxsbGwrJGxsbGwrK109JGxsbGxs bGxsbGwoJGxbJGxsbGxsXSkpOyRsbGxsbCsrOyRsbGxsbGxsKz 0kbGw7fX1lbHNlJGxsbGxsbGxsWyRsbGxsbGxsKytdPSRsbGxs bGxsbGxsKCRsWyRsbGxsbCsrXSk7JGxsbGxsbDw8PTE7JGxsbG xsbGxsbC0tO31ldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNi R3hzYkd4c2JEMG5ZMmh5SnpzPSIpKTskbGxsbGw9MDtldmFsKC RsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkQwaVB5SXVKR3hz Ykd4c2JHeHNiR3hzYkNnMk1pazciKSk7JGxsbGxsbGxsbGw9Ii I7Zm9yKDskbGxsbGw8JGxsbGxsbGw7KXskbGxsbGxsbGxsbC49 JGxsbGxsbGxsbGxsbCgkbGxsbGxsbGxbJGxsbGxsKytdXjB4MD cpO31ldmFsKCRsbGxsbGxsbGxsbCgiSkd4c2JHeHNiR3hzYkM0 OUpHeHNiR3hzYkd4c2JHd3VKR3hzYkd4c2JHeHNiR3hzYkNnMk 1Da3VJajhpT3c9PSIpKTtldmFsKCRsbGxsbGxsbGwpOw==")); return;?>

Там несколько раз кодировали base 64
юзай это http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/Default.aspx

Основной код выглядит так:

PHP код:


		
			
$lll=0;eval($lllllllllll='base64_decode';);$ll=0;eval($lllllllllll("$llllllllll='ord';"));$llll=0;$lllll=3;eval($lllllllllll("$l=$lllllllllll($o);"));$lllllll=0;$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);eval($lllllllllll("$lllllllllllll='strlen';"));$lllllllll=16;$llllllll="";for(;$lllll<$lllllllllllll($l);){if($lllllllll==0){$llllll=($llllllllll($l[$lllll++])<<8);$llllll+=$llllllllll($l[$lllll++]);$lllllllll=16;}if($llllll&0x8000){$lll=($llllllllll($l[$lllll++])<<4);$lll+=($llllllllll($l[$lllll])>>4);if($lll){$ll=($llllllllll($l[$lllll++])&0x0f)+3;for($llll=0;$llll<$ll;$llll++)$llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];$lllllll+=$ll;}else{$ll=($llllllllll($l[$lllll++])<<8);$ll+=$llllllllll($l[$lllll++])+16;for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));$lllll++;$lllllll+=$ll;}}else$llllllll[$lllllll++]=$llllllllll($l[$lllll++]);$llllll<<=1;$lllllllll--;}eval($lllllllllll("$llllllllllll='chr';"));$lllll=0;eval($lllllllllll("$lllllllll="?".$llllllllllll(62);"));$llllllllll="";for(;$lllll<$lllllll;){$llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);}eval($lllllllllll("$lllllllll.=$llllllllll.$llllllllllll(60)."?";"));eval($lllllllll);

PHP код:


		
			
<?

$lll=0;

$lllllllllll='base64_decode';

$ll=0;

$llllllllll='ord';

$llll=0;$lllll=3;

$l=$lllllllllll($o);

$lllllll=0;

$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);

$lllllllllllll='strlen';

$lllllllll=16;

$llllllll="";

for(;$lllll<$lllllllllllll($l);)

    {

        if($lllllllll==0)

        {

            $llllll=($llllllllll($l[$lllll++])<<8);

            $llllll+=$llllllllll($l[$lllll++]);

            $lllllllll=16;

        }

        

        if($llllll&0x8000)

        {

            $lll=($llllllllll($l[$lllll++])<<4);

            $lll+=($llllllllll($l[$lllll])>>4);

            if($lll)

            {

                $ll=($llllllllll($l[$lllll++])&0x0f)+3;

                for($llll=0;$llll<$ll;$llll++)

                    $llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];

                $lllllll+=$ll;

            }else

            {

                $ll=($llllllllll($l[$lllll++])<<8);

                $ll+=$llllllllll($l[$lllll++])+16;

                for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));

                $lllll++;$lllllll+=$ll;

            }

        }else $llllllll[$lllllll++]=$llllllllll($l[$lllll++]);

        $llllll<<=1;$lllllllll--;

    }

    $llllllllllll='chr';

    $lllll=0;

    $lllllllll="?".$llllllllllll(62);

    $llllllllll="";

    for(;$lllll<$lllllll;)

    {

        $llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);

    }

    $lllllllll.=$llllllllll.$llllllllllll(60)."?";

    

    eval($lllllllll); 

// echo $lllllllll;

маднет красавулька