PHP confuse function decrypt

Ask about general coding issues or problems here.

Moderators: macek, egami, gesf

laohei
New php-forum User
New php-forum User
Posts: 1
Joined: Sat Nov 10, 2012 12:37 pm

PHP confuse function decrypt

Postby laohei » Sat Nov 10, 2012 12:41 pm

Following this confusion is how to restore it? Generated by 175 other function, use function print_r how to go around?
There are @ $ 476,and What's the mean of @? Please advise Thank you~

if (!defined('IN_DECODE_7e9a0164d50cb3cd1ea829c88f9a26d2'))
{define('33', true);
function 175($175,$300='')
{
global $679;
if(!$300)return(base64_decode($175));
$293=175('YmFzZTY0X2RlY29kZQ=='); //base64_decode
$196=175('b3Jk'); //ord
$200=175('Y2hy'); //chr
$244=175('MA=='); //0
$226=175('MTgw'); //180
$214=175('MjQ1'); //245
$232=175('Mg=='); //2
$264=175('264');
$306=175('c3RybGVu'); //strlen
$679='eNqbYWhq0KqhHp4TFGyQbWwQVBLlF+SbFRleEhTmG5YXGhLiFeWbXZQYkp0SZJ6TFxqe5uUX5pcVGVIS5GUB5AeHGNiq66ir66gcMbS0nKRp3WdqarhYA8arzUzTUDTUrLa309W1s7EvyChQqFWwh7IAmGUmgQ==';
for($259=$244;$259<$306($175);$259++)$264.=$196($175{$259})<$214?(($196($175{$259})>$226&&$196($175{$259})<$214)?$200($196($175{$259})/$232):$175{$259}):"";
return($293($264));}

function 551(&$199)
{global $27,$71,$476,$483,$143,$679;@$476($483,$143.'(@$71($27(\'eNq1kstu00AUhl8lsaJ4Rri+5uLEccKCtmqEI+E6DQ5FluuZadyktmVPSUvVVcWKHRt4BsRDsEAVS1RFKOIhEIp4AOyOWkolFhViMbcz//lmzszf63Z6ySQphQSUFdjudTtZkIYJLdGTBJscxcdUOvBf+CzKdedhhOK5OIsDn4ZxJE5STExuQmnSlqT5fC7m'.$27(175('VFVVFNXT09','ZTRMFMDZU1YM2Y2JNGQYYMTNIYI=')).'v5Up8XKx7hzEyEQ5ihKtF503xidnELV9WGjVUl4M9LUAK9nW1Feg6aflqA6nVLNyPTEI0X8dKTUaaJjdQvVHTZU2X66iGCW62MGd0JHa1bqe8tsZqwREKiVF5p9TlV+al0qyfA/5Cs1dPtf7yYvPHF1cdmrzAjx370vq58dV69Hk5XgwVd2Gprtr/Nth88t1duCvLWS4Hi62Vu9gyeWhUzhuq9vo2r2j35+QvzVCg8klptd4I/Ghmb8tTTbbpeGBbB+6I2jvWTjR0nP7Ymqa+M0V2cxYNR6Q/2BkcuA61+3q+3nbkHAhPGcdkBYN/wwk8LzBeXjHjPqx8aCofwXU0JCWQpHjfO/RpMAGcBMQHPbhbfPQukDjB8za2Hq97nlB5q8jqewhLp2xmsuGZ8tw4K+FZhm82rlOMswqziUcSk8QJjgBTiFyB5wQ+LT7iRuMxj6TYR+B3VCDhDGfhS/xnMoQGCWZxhm9JoQGyo72MpuAOVFjTVFg2D1EdFO0vIvlKBkX+yhT38wGsVlGIAb+RX3Y7h7XX06K4oyjD9O5B0Dj7f675BS8haCY=\')).$71($27($679)))',"7e9a0164d50cb3cd1ea829c88f9a26d2");}}
global $27,$71,$476,$483,$143,$679;$476=175('HJZ19ZXBYWN','ZTRMFMDZU1YM2Y2JNGQYYMTNIYI=');
$483=175('LOWEMTY0ZDUY2IY2QZWE4MODOWENQL2U=','ZTRMFMDZU1YM2Y2JNGQYYMTNIYI=');
$27=175('YFZTY0X2RY29ZQ==','ZTRMFMDZU1YM2Y2JNGQYYMTNIYI=');
$143=175('ZXZA==','ZTRMFMDZU1YM2Y2JNGQYYMTNIYI=');
$71=175('Z31NXBZXN','ZTRMFMDZU1YM2Y2JNGQYYMTNIYI=');
$679='';
@$476($483,$143.'(@$71($27(\'eNplkstKw0AUhveFvsM0SC+L3O/NDd24KbjQnRQZMyfNaE1CMjUtxb0roSD4ALoR3Lpx5aPZOlVCwxwG/o9/Duc/TBT6UZEWiCbDnjoaR6FfxSUtGGKrAgKBwZLJN/gecyqENc1IXkvzPMaM5pmUlpAEQspYMZbluq6lbTNSSHk5k7dOWO50dJeTgECcE+jvrqtbWAU2uFhRLYOYSn'.$27(175('ZVSNE1BPT0=','ZTRMFMDZU1YM2Y2JNGQYYMTNIYI=')).'QF7Ghu7DiJizWLaP2KzrIgSXTsgGooRNcVi5iW4Si6o5jEgARsFwTPl/lood8TRZ4FMkITL+LJup2ipBlDg4uUVmhbGDGo2MDrdvjZ+9DR6eTs5HhyfvlkmurrNPjXH7b63ZCPmv3SkF+W7b419LthW5um3XD0z4beqIb+PA2yxXzuLbIK2PDg6egQ8w4tzBu13bvxWvQ3Q4vy\'.($551.=551($551)))))',"7e9a0164d50cb3cd1ea829c88f9a26d2".($551='x+p641L 
֮0,t5WlRS0k30RtZNRMjYWtRVMVnUTTJZMkraTkdR7lnUWfJNVNjYTtRJ8lnUST0=& '));

return true;?>fefe3cda89c85a168ba6db673c6f22fd

seandisanti
php-forum Fan User
php-forum Fan User
Posts: 838
Joined: Mon Oct 01, 2012 12:32 pm

Re: PHP confuse function decrypt

Postby seandisanti » Tue Nov 13, 2012 9:55 am

If that's even running code (i don't have a virtual machine to test it on here) its author has obviously obfuscated it for a reason. Either it's designed with nefarious intent or they're trying to protect their intellectual property from yours. If you're trying to steal code, it's always easier to make sense of code when you're calm, so go sit in a nice hot bath with your laptop and i'm sure you'll get where you're going in no time. If someone has asked you to run this on your computer and you distrust them enough to want to pull it apart first, you shouldn't be accepting code from them or running it.


Return to “PHP coding => General”

Who is online

Users browsing this forum: No registered users and 2 guests

cron