Раскодировать PHP old

Статус
В этой теме нельзя размещать новые ответы.
PHP:
<?php        session_start();      function ConnectLicense($product) {      $hash = "za0SiyfZWd93kdTbTGvN";      $domain = "www.phpshop.ru";      $server=str_replace("www.","",getenv('SERVER_NAME'));      @$fp = @fsockopen($domain, 80, $errno, $errstr);      $Respon=null;      if (!$fp) {          return exit("Ошибка соединения с сервером PHPShop");      } else {          fputs($fp, "GET /getlicense.php?server=$server&product=".urlencode($product)."&hash=$hash  HTTP/1.0\r\n");          fputs($fp, "Host: $domain\r\n");          fputs($fp, "Connection: close\r\n\r\n");          while (!feof($fp)) {              $Respon.=fgets($fp, 1000);          }          $text=explode("<?generator?>",$Respon);          $data=trim($text[1]);          fclose($fp);                      if(strlen($data) < 100) {              header("Location: http://www.phpshop.ru/docs/error.html?SERVER_NAME=".$_SERVER["SERVER_NAME"]."&trial=off");              exit("Ошибка проверки лицензии для SERVER_NAME=".$_SERVER["SERVER_NAME"].", HardwareLocked=".$_SERVER["SERVER_ADDR"]);          }          else {              @chmod("/license/", 0777);              @$fp = fopen("license/trial.lic", "w+");              if ($fp) {                  fputs($fp, $data);                  fclose($fp);                  @chmod("/license/", 0755);              }              else exit("Внимание!<br>Ошибка записи ключа...<br>Задайте права доступа CMOD=777 для папки /license/ и повторите попытку.");          }      }  }      function ParseTemplate($TemplateName) {      global $SysValue;        $file = newGetFile($SysValue['dir']['templates'].chr(47).$_SESSION['skin'].chr(47).$TemplateName);      $string = newParser($file);              $path_parts = pathinfo($_SERVER['PHP_SELF']);      if(getenv("COMSPEC")) $dirSlesh="\\";      else $dirSlesh="/";      $root= $path_parts['dirname']."/";      if($path_parts['dirname']!=$dirSlesh) {           $replaces = array(              "/images\//i" => $SysValue['dir']['templates'].chr(47).$_SESSION['skin']."/images/",              "/\/favicon.ico/i" => $root."favicon.ico",              "/java\//i" => $root."java/",              "/css\//i" => $root."css/",              "/phpshop\//i" => $root."phpshop/",              "/\/order\//i" => $root."order/",              "/\/done\//i" => $root."done/",              "/\/print\//i" => $root."print/",              "/\/links\//i" => $root."links/",              "/\/files\//i" => $root."files/",              "/\/opros\//i" => $root."opros/",              "/\/page\//i" => $root."page/",              "/\/news\//i" => $root."news/",              "/\/gbook\//i" => $root."gbook/",              "/\/users\//i" => $root."users/",              "/\/clients\//i" => $root."clients/",              "/\/price\//i" => $root."price/",              "/\/pricemail\//i" => $root."pricemail/",              "/\/shop\/CID/i" => $root."shop/CID",              "/\/shop\/UID/i" => $root."shop/UID",              "/\/search\//i" => $root."search/",              "/\"\/\"/i" => $root,              "/\/notice\//i" => $root."notice/",              "/\/map\//i" => $root."map/",              "/\/success\//i" => $root."success/",              "/\/fail\//i" => $root."fail/",              "/\/rss\//i" => $root."rss/",              "/\/newtip\//i" => $root."newtip/",              "/\/spec\//i" => $root."spec/",          );      }      else {          $replaces = array(                  "/images\//i" => $SysValue['dir']['templates'].chr(47).$_SESSION['skin']."/images/",                  "/java\//i" => "/java/",                  "/css\//i" => "/css/",                  "/phpshop\//i" => "/phpshop/",          );      }      $string = preg_replace(array_keys($replaces), array_values($replaces), $string);      echo $string;  }      function ParseTemplateReturn($TemplateName,$mod=false) {      global $SysValue,$LoadItems;        if($mod) $file = newGetFile($TemplateName);      else  $file = newGetFile($SysValue['dir']['templates'].chr(47).$_SESSION['skin'].chr(47).$TemplateName);      $dis = newParser($file);        return $dis;  }      function ConstantS($string) {      return @preg_replace_callback("/@([[:alnum:]]+)@/","ConstantR",$string);  }    function evalstr($str) {      ob_start();            if(eval(stripslashes($str[2]))!== NULL) {          echo ('<center style="color:red"><br><br><b>PHPShop Template Code: В шаблоне обнаружена ошибка выполнения php</b><br>');          echo ('Код содержащий ошибки:');          echo ('<pre>');          echo ($str[2]);          echo ('</pre></center>');          return ob_get_clean();      }      return ob_get_clean();  }    function newParser($string) {      global $SysValue;        $newstring = @preg_replace_callback("/(@php)(.*)(php@)/sU", "evalstr", $string);      $newstring = @preg_replace("/@([a-zA-Z0-9_]+)@/e", '$SysValue["other"]["\1"]', $newstring);        return $newstring;  }    function Parser($string) {      return newParser($string);  }    function ConstantR($array) {      global $SysValue;        if(!empty($SysValue['other'][$array[1]]))          $string=$SysValue['other'][$array[1]];      else          $string=null;        return $string;  }    function newGetFile($path) {      $file = @file_get_contents($path);      if (!$file) return false;      return $file;  }    class PhpshopCrypt {      var $LicenseParse;      var $CodeString;      var $DecodeString;      var $LicenseFlag;      var $trial=true;        function PhpshopCrypt($dir) {          define("ProductName","PHPSHOP 3.5 EE");          $this->ParseIni($dir);          $this->PhpshopCode();          $this->PhpshopVersion();          $this->PhpshopChek();          $this->PhpshopServer();          $this->PhpshopDomen();          $this->PhpshopExpires();          $this->ErrorLicense();      }        function MyCode($Code) {          $CodeString=null;          for($i=0;$i<strlen($Code);$i++) {              if(ord($Code[$i])>=100) $CodeString.= chr(ord($Code[$i])-5);              else $CodeString.= chr(ord($Code[$i])+5);          }          return $CodeString;      }          function ParseIni($dir) {          $LicenseValue=@parse_ini_file($dir,1);          while (list($key, $val) = @each($LicenseValue['License']))              $LicenseParse[$key]=$val;          $this->LicenseParse=$LicenseParse;      }        function ProductName($name){          if($this->trial) return $name;          else return str_replace('2.1','3.5',$name);      }        function PhpshopVersion(){          if(ProductName != $this->ProductName($this->LicenseParse['ProductName'])                  and $this->LicenseParse['SupportExpires'] < time())                  exit('Для использования этого файла требуется продлить техническую поддержку и                      получить новую лицензию для версии Enterprise 3.5');      }        function PhpshopCode() {          $LicenseParse=$this->LicenseParse;          unset($LicenseParse['VerificationCode']);          $Code=base64_encode(serialize($LicenseParse));          $this->CodeString=$this->MyCode($Code);      }        function PhpshopChek() {          if(($this->LicenseParse['VerificationCode'] != $this->CodeString)                  or (ProductName != $this->ProductName($this->LicenseParse['ProductName'])))              $this->LicenseFlag = 1;      }        function PhpshopServer() {          if($this->LicenseParse['HardwareLocked'] != "No") {              if(($this->LicenseParse['HardwareLocked'] != $_SERVER["SERVER_ADDR"])) {                  $this->LicenseFlag = 1;              }          }      }        function PhpshopDomen() {          if($this->LicenseParse['DomenLocked'] != "No")              if($this->LicenseParse['DomenLocked'] != getenv('SERVER_NAME'))                  if ("www.".$this->LicenseParse['DomenLocked'] != getenv('SERVER_NAME'))                      $this->LicenseFlag = 1;      }        function ErrorLicense() {          if($this->LicenseFlag == 1) {              header("Location: http://www.phpshop.ru/docs/error.html?SERVER_NAME=".getenv('SERVER_NAME')."");              exit("Ошибка проверки лицензии для SERVER_NAME=".getenv('SERVER_NAME').", HardwareLocked=".$_SERVER["SERVER_ADDR"]);          }      }        function PhpshopExpires() {          if($this->LicenseParse['Expires'] != "Never")              if($this->LicenseParse['Expires'] <= date("U"))                  $this->LicenseFlag = 1;      }        function PhpshopCopyright() {          return $this->LicenseParse['CopyrightEnabled'];      }  }      $time=explode(' ', microtime());  $start_time=$time[1]+$time[0];      $_classPath='../phpshop/';      include("./phpshop/class/base.class.php");  $PHPShopBase = new PHPShopBase("./phpshop/inc/config.ini");      if($SysValue['my']['gzip'] == "true")      include($SysValue['file']['gzip']);      include($SysValue['class']['obj']);  include($SysValue['class']['category']);  include($SysValue['class']['system']);  include($SysValue['class']['nav']);  include($SysValue['class']['security']);  include($SysValue['class']['core']);  include($SysValue['class']['elements']);  include($SysValue['class']['date']);  include($SysValue['class']['debug']);  include($SysValue['class']['valuta']);      $PHPShopSystem = new PHPShopSystem();      $PHPShopNav = new PHPShopNav();      $PHPShopValuta = PHPShopValuta::getAll();      $PHPShopDebug = new PHPShopDebug();        if($PHPShopSystem->getValue('spec_num')) {        if(isset($_REQUEST['skin'])) {          if (file_exists("phpshop/templates/".$_REQUEST['skin']."/index.html")) {              $skin=$_REQUEST['skin'];              if(PHPShopSecurity::true_login($_REQUEST['skin']))                  $_SESSION['skin']=$_REQUEST['skin'];          }      }      elseif(empty($_SESSION['skin'])) {          $skin=$PHPShopSystem->getValue('skin');          $_SESSION['skin']=$skin;      }    }  else {      $skin=$PHPShopSystem->getValue('skin');      $_SESSION['skin']=$skin;  }        if($_SERVER["SERVER_ADDR"] == "127.0.0.1" and getenv("COMSPEC")) {      $RegTo['ProductName'] = "PHPSHOP 3.5 EE";      $RegTo['RegisteredTo'] = "Trial NoName";      $RegTo['CopyrightEnabled'] = "Yes";      $RegTo['DomenLocked'] = "No";      $RegTo['CopyrightColor'] = "#595959";      $RegTo['SupportExpires'] = "0";  }  else {      $GetFile = GetFile();       if($GetFile != null) {          $PhpshopCrypt = new PhpshopCrypt($GetFile);          $RegTo = $PhpshopCrypt->LicenseParse;      }      else {                    $ConnectLicense = ConnectLicense("PHPSHOP 3.5 EE");      }  }      $SysValue['other']['pageReg']= $RegTo['RegisteredTo'];  $SysValue['other']['pageDomen']= $RegTo['DomenLocked'];  $SysValue['other']['pageProduct']= $SysValue['license']['product_name'];        function GetFile() {      global $SysValue;      $dir=$SysValue['dir']['root'].$SysValue['license']['dir'];      if (@$dh = @opendir($dir)) {          while (($file = readdir($dh)) !== false) {              $fstat = explode(".",$file);              if($fstat[1] == "lic")                  return $SysValue['dir']['root'].$SysValue['license']['dir'].chr(47).$file;          }          closedir($dh);      }      return null;  }      function GetFileInstall() {      global $SysValue;      $filename = "./install/";      if (is_dir($filename))          PHPShopBase::errorConnect(105,'Завершение установки','Удалите папку install');  }      if(!getenv("COMSPEC")) GetFileInstall();      include($SysValue['file']['engine']);  include($SysValue['file']['cache']);  include($SysValue['file']['elements']);    include($SysValue['file']['autoload']);      if(!empty($SysValue['nav']['path'])) {      $core_file="./phpshop/core/".$PHPShopNav->getPath().".core.php";      $old_core_file="pages/".$PHPShopNav->getPath().".php";              if(is_file($old_core_file) and strlen(file_get_contents($old_core_file))>10){          include_once("pages/".Open($SysValue['nav']['path']));      }            elseif(is_file($core_file)) {          include_once($core_file);          $classname = 'PHPShop'.ucfirst($SysValue['nav']['path']);          if(class_exists($classname)) {              $PHPShopCore = new $classname ();              $PHPShopCore->loadActions();          }else echo PHPShopCore::setError($classname,"не определен класс phpshop/core/$classname.core.php");      }      elseif(!$PHPShopModules->doLoadPath($SysValue['nav']['path'])) include("pages/error.php");  }      $time=explode(' ', microtime());  $seconds=($time[1]+$time[0]-$start_time);  $seconds=substr($seconds,0,6);      if (function_exists('memory_get_usage')) {      $mem = memory_get_usage();      $_MEM=round($mem/1024,2)." Kb";  }else $_MEM=null;      if($SysValue['my']['debug'] == "true")      $PHPShopDebug->compile();    if($_SERVER["SERVER_ADDR"] == "127.0.0.1" and getenv("COMSPEC"))      $PhpshopCopyright=$RegTo['CopyrightEnabled'];  elseif($PhpshopCrypt)      $PhpshopCopyright=$PhpshopCrypt->PhpshopCopyright();      if($PhpshopCopyright == "Yes") {      echo '  <!-- Copyright PHPShop -->  <div style="clear: both; width:100%">     <div align="center" style="display:block;padding:5px;color:'.$RegTo['CopyrightColor'].';font-size:11px">     <a href="http://www.phpshop.ru" title="Создание интернет-магазина"  style="color:'.$RegTo['CopyrightColor'].';font-size:11px" target="_blank">Создание Интернет-магазина</a> '.$RegTo['RegisteredTo'].' - PHPShop. Все права защищены © 2003-'.date("Y").'.     </div>  </div>  <!-- БД '.$SysValue['sql']['num'].' запроса ~ '.$seconds.'  '.$_MEM.', Сборка '.$SysValue['upload']['version'].' -->';  }      include_once($SysValue['file']['footer']);      if($SysValue['my']['gzip'] == "true")      GzDocOut($SysValue['my']['gzip_level'],$SysValue['my']['gzip_debug']);  ?>
Тысячу бы раз нажал кнопку "Спасибо"! :yahoo:
А как получилось? ...если конечно не секрет фирмы :)
 
ну в принципе тоже echo. Первый евал заменяем на эко получаем код функции
PHP:
<?  
$ihT43c64omUU65o85lJ2DpUs=913747882;    
if (!function_exists("ttJunjHfBnL23DLUD22"))  {   
function ttJunjHfBnL23DLUD22($TF186217753C37B9B9F958D906208506E)   {    
$TF186217753C37B9B9F958D906208506E = base64_decode($TF186217753C37B9B9F958D906208506E); 
$ttJunjHfBnL23DLUD22 = 0;    
$T9D5ED678FE57BCCA610140957AFAB571 = 0;    
$T0D61F8370CAD1D412F80B84D143E1257 = 0;    
$TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]);    $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3;    
$T800618943025315F869E4E1F09471012 = 0;    
$TDFCF28D0734569A6A693BC8194DE62BF = 16;    
$TC1D9F50F86825A1A2302EC2449C17196 = "";    
$TDD7536794B63BF90ECCFD37F9B147D7F = strlen($TF186217753C37B9B9F958D906208506E);    
$TFF44570ACA8241914870AFBC310CDB85 = __FILE__;    
$TFF44570ACA8241914870AFBC310CDB85 = @file_get_contents($TFF44570ACA8241914870AFBC310CDB85);    
$TA5F3C6A11B03839D46AF9FB43C97C188 = 0;    
preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNob3xwcmludF9yfHZhcl9kdW1wfGluY2x1ZGV8cmVxdWlyZXxldmFsKS8="), $TFF44570ACA8241914870AFBC310CDB85, $TA5F3C6A11B03839D46AF9FB43C97C188);    
for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;)    {     
if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit;     
if ($TDFCF28D0734569A6A693BC8194DE62BF == 0)     {      
$TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);      
$TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]);      
$TDFCF28D0734569A6A693BC8194DE62BF = 16;     }     
if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 & 0x8000)     {      
$ttJunjHfBnL23DLUD22 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4);      
$ttJunjHfBnL23DLUD22 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4);      
if ($ttJunjHfBnL23DLUD22)      {       
$T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3;       
for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; 
$T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; 
$T0D61F8370CAD1D412F80B84D143E1257++)        $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$ttJunjHfBnL23DLUD22+$T0D61F8370CAD1D412F80B84D143E1257];       
$T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }     
else      {       
$T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);       
$T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16;       
for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; 
$TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]);       
$T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }
}     
else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++];     
$TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1;     
$TDFCF28D0734569A6A693BC8194DE62BF--;     
if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F)     {      $TFF44570ACA8241914870AFBC310CDB85 = implode("", $TC1D9F50F86825A1A2302EC2449C17196);      
$TFF44570ACA8241914870AFBC310CDB85 = "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?";     
return $TFF44570ACA8241914870AFBC310CDB85;     
}   }  
 }  }
[/spoil] дальше превращаем функцию в обычный код [spoil]
PHP:
<?  
$ihT43c64omUU65o85lJ2DpUs=913747882;     
$TF186217753C37B9B9F958D906208506E = base64_decode("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"); 
$ttJunjHfBnL23DLUD22 = 0;    
$T9D5ED678FE57BCCA610140957AFAB571 = 0;    
$T0D61F8370CAD1D412F80B84D143E1257 = 0;    
$TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]);    $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3;    
$T800618943025315F869E4E1F09471012 = 0;    
$TDFCF28D0734569A6A693BC8194DE62BF = 16;    
$TC1D9F50F86825A1A2302EC2449C17196 = "";    
$TDD7536794B63BF90ECCFD37F9B147D7F = strlen($TF186217753C37B9B9F958D906208506E);    
$TFF44570ACA8241914870AFBC310CDB85 = __FILE__;    
$TFF44570ACA8241914870AFBC310CDB85 = @file_get_contents($TFF44570ACA8241914870AFBC310CDB85);    
$TA5F3C6A11B03839D46AF9FB43C97C188 = 0;    
preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNob3xwcmludF9yfHZhcl9kdW1wfGluY2x1ZGV8cmVxdWlyZXxldmFsKS8="), $TFF44570ACA8241914870AFBC310CDB85, $TA5F3C6A11B03839D46AF9FB43C97C188);    
for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;)    {     
if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit;     
if ($TDFCF28D0734569A6A693BC8194DE62BF == 0)     {      
$TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);      
$TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]);      
$TDFCF28D0734569A6A693BC8194DE62BF = 16;     }     
if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 & 0x8000)     {      
$ttJunjHfBnL23DLUD22 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4);      
$ttJunjHfBnL23DLUD22 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4);      
if ($ttJunjHfBnL23DLUD22)      {       
$T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3;       
for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; 
$T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; 
$T0D61F8370CAD1D412F80B84D143E1257++)        $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$ttJunjHfBnL23DLUD22+$T0D61F8370CAD1D412F80B84D143E1257];       
$T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }     
else      {       
$T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);       
$T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16;       
for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; 
$TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]);       
$T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }
}     
else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++];     
$TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1;     
$TDFCF28D0734569A6A693BC8194DE62BF--;     
if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F)     {      $TFF44570ACA8241914870AFBC310CDB85 = implode("", $TC1D9F50F86825A1A2302EC2449C17196);      
$TFF44570ACA8241914870AFBC310CDB85 = "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?";     
echo $TFF44570ACA8241914870AFBC310CDB85;     
}   }
ну и получаем результат :)
 
ЗаИонкубенный файл, не получилось расшифровать(скачивал deioncuber с deioncube.in ), при обработке выводит примерно такое сообщение:
*** requires a license to function. A license was not found, please contact ***
как победить?
(примеры файлов в аттаче)
 

Вложения

  • deion.zip
    14,8 KB · Просмотры: 19
ЗаИонкубенный файл, не получилось расшифровать(скачивал deioncuber с deioncube.in ), при обработке выводит примерно такое сообщение:
как победить?
(примеры файлов в аттаче)
Вот что у меня получилось
 

Вложения

  • decoded.zip
    3,2 KB · Просмотры: 20
вот до такого состояния раскодировал, дальше надеюсь сам осилишь...
мдаа:D 2000 строк кода и в каждой строке по 2-3раза base64_decode.
Кто знает скрипт или еще что то который прогонит файл, и заменит все base64_decode('blablabla') на их нормальные значения? А то вручную лопатить 2000 строк кода не фонтан.
 
Tamerlan2000, в файл и в аттач, а эту Х сотри.
 
Здравствуйте уважаемые форумчане.
Есть файл php, он чем-то зашифрован. Ничем не могу расшифровать. Даже не знаю чем он зашифрован.
Вот содержимое php файла
PHP:
4+oV52dtCrt6HOYIm4ccVYHjYIgSNrph+9Jw06qWscOcIp0PYpv3G6nbRgf6dGwi/2juRPHf93kj
uCaRFp80eyhFo0W17UO5ou421q+hWJvZfSxGLENAlRJMC0dOSOrYcbXJlGgim9tWLanVZWj3sRLC
XZsOjKDaHtLpbCNvbRsvyB4ENG/R3beiGTP3ZVYci5jxtquU/raWGLaCSwTD1d4stABNb4OdFfLy
WOzs+AOcTEXYsFNxlFqleukVNHWN7uOc6LRHdMmIHX7DYJtKoY5Tsr74cH/a/emFdSgwV5YMdaIr
nDrR5SEB+OW8XK7IPXitoeovGJuapow0gLVrb1sU1BnwdfA5VFqBUCKvoRqKPvcFYKTdIIxoYrKA
j6N0iilmdwlUHoST4Dngfn9UYeOPzWgNJTmEskxp4EwDKhtdOfjNPoQJYG4JMBMliMDQYqYv7KBT
YWlDBlrRoqzy+sUpDH7UrcRtFd/mHf8P3WBd73vhlZshiyxZKf2UP5qPBLpXFow35oFN/y8A+mDS
+AT8qmhtKEbDejiECZwiyHPP0l2Jary1hhULHjjU
Это все содержимое. Кроме этого там ничего нет.

Помогите пожалуйста хотя бы узнать чем он зашифрован
 
Статус
В этой теме нельзя размещать новые ответы.
Назад
Сверху