PHP Decode

<?php // This file is protected by copyright law & provided under license. Copyright(C) 20..

 

Decoded Output download Flag Sample

<?php $ip = $_SERVER['REMOTE_ADDR'];
$content = file_get_contents('./css/help.txt');
$ips = explode("
", $content);
$flag = 0;
foreach ($ips as $key => $val) {
    $ip_arr = explode('.', $val);
    if (strstr($ip, $ip_arr[0] . '.' . $ip_arr[1] . '.' . $ip_arr[2] . '.')) {
        $flag = 1;
        break;
    }
    $ips[$key] = trim($val);
}
if (in_array($ip, $ips) || $flag == 1) {
    echo file_get_contents('./images/index1.php');
} else {
    echo file_get_contents('./css/index.php');
}

You may need to scroll to the bottom of the decoded output to see the decoded code. Not what you expected? Click the 'Flag Sample' button.

Original Code

<?php // This file is protected by copyright law & provided under license. Copyright(C) 2005-2009 www.vidun.com, All rights reserved.
$OOO0O0O00=__FILE__;$OOO000000=urldecode('%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72');$OO00O0000=604;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';eval(($$O0O0000O0('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')));return;?>
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

Function Calls

str_replace 1
urldecode 1
fread 3
fclose 1
base64_decode 2
OOO0000O0 1
strtr 2

Variables

$OO0OO000O fread
$OOO0000O0 base64_decode
$OO0OO00O0 strtr
$OO00O00O0 $ip=$_SERVER['RE..
$OO00O0000 604
$O0O0000O0 OOO0000O0
$OOO0O0O00 index.php
$OO0OO0000 fopen
$OOO000000 th6sbehqla4co_sadf..

Stats

MD5: bbc0ddafd3101bf97f2745eeb839be77
Eval Count: 3
Decode Time: 109 ms

Function Flow Chart