Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
regf Z8G ` e m R o o t \ S y s t e m 3 2 \ C o n f i g \ S E C U..
Decoded Output download
<? regf Z8G ` e m R o o t \ S y s t e m 3 2 \ C o n f i g \ S E C U R I T Y dq &Jdq &J eq &Jrmtm
2 ^ hbin Z8G pnk, ?4 x x@ 8 3 9 CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000} 9 1 E hsk | ` p D ? nk
4 RXACT sk b d H X 4 ? 0 vk H vk ` nk g?F @ @ S-1-5-32-544c y vk 1-vk s H @ X nk F x c D Privilgslf ActS0 Priv SecD Sid vk nk jzF x l i ActSysAcvk - vk h nk jzF @ \ P S-1-1-0 vk nk F x d SecDesc vk d H X 4 h nk F x x Sid vk d ( d vk X c ` nk F @ S-1-5-32-551c y ` vk d 1- nk oF ActSysAcvk nk g?F d SecDesc vk d p vk 8 ` d vk lf ( ActS Priv SecD Sid vk @ ' lf vk 0 @ nk X2 xR $ Policy
PoliC vk nk r]F ( SecDesc
vk X5 nk CJF @ X7 x
S-1-5-90-0 P
6 vk d 4 vk 7 d vk
Z nk 3VF X PolRevision vk cDvk nk 2 PolAdtEvvk lA
h ~
nk GF 4 | Accountsvk nk 3VF Domains vk ( fQ
vk H9 cD(
nk <2 < Secrets vk nk 3VF ` 0 DefQuotavk 0 ( nk 3VF
( PolAdtLgnk 2
PolDnDDN1 C5 Vf nk ctF3 @
PolEKList lf ActS0 Priv SecD Sid @ @+ hbin AY
E:\
]x]J"a'E?gkg
lJ+I2%6EYA]-G= / vk d < kvk cD|2uunk jzF d SecDesc H X 4 nk jzF ( Sid nk oF p Privilgs
" # nk
F @ p+ \ P S-1-5-32-559vk vk d c nk
F 8 H Privilgs vk d nk
F ActSysAcnk
F d SecDesc H X 4 nk g?F Sid nk
F @ 8 S-1-5-32-545c y vk 1- ! ! vk vk H X 4 nk
F Sid / vk vk d 0 vk d X nk
F ActSysAcnk
F @ - h S-1-5-32-555 nk
F d SecDescnk
F d Sid A vk nk
F 0 s c Privilgslf ActS Priv( SecD Sid vk x ! @ @ nk
F 0 o u ActSysAcvk d + nk <fF 0 d SecDesc H X 4 nk <fF 0 8 Sid vk d vk p ! nk QF @ S-1-5-6 vk t vk d y p H X 4 - . (+ nk AF d SecDesc H X 4 vk 0! d " ! nk
F 8 ActSysAc H X 4 nk e4F * + Sid vk lf Priv SecD" Sid hbin nk LF @ x# S-1-5-20nk GF d SecDesc-8
nk QF ( c 6 Privilgs nk QF d SecDesc vk d h$ vk P X& d vk - vk % ! nk AF Sid nk yF @ 0& S-1-5-19vk t vk d # P " vk h ( d x' nk =#F " P e c Privilgslf # PrivX! SecD$ Sid nk F p" " d SecDesc H X 4 # H X 4 nk QF Sid nk J2 PolAcDmN S R V A H 6 F 1 K 3 E Q B S \ P vk ' % ( nk oF p" `$ h e c Privilgslf % Priv# SecD ' Sid nk o3 % 1 - PolAcDmS!A22SecD+ nk F p" # Sid vk ]Z
7DB B nk #F H
h* % o u DPAPI_SYSTEM5 - vk nk #F ' ' d SecDesc vk , ( " ! nk iF3 ' * | CurrVal vk | ) s AY
E:\ w;6EAvLE@8x4Mv
#OjyeEJn[@ kU _iUyu \$c9xP>"bp) nk iF3 ' * | OldVal lf 8, Cupd) Curr* OldV, Oupd(( SecD H H vk | x? * nk e4F @ P.
S-1-5-80-0i c y vk d - vk d vk + lf @ ActS SecD Sid P . X+ vk d + H X 4 nk iF3 ' ( CupdTimevk 8- cDIF3 nk iF3 ' H- OupdTimelf ActS SecDP Sid (( SecDJ , pnk e4F @ 1 > S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420t vk nk e4F * 1 - ActSysAclf - ActSX/ SecDX Sid 4 nk e4F P- d SecDesc / / vk d p3 nk e4F P- . Sid 1 nk e4F * d SecDesc vk / d vk 3 02 hbin 0 nk 2 P/ PolPrDmNnk X2 R H2 GlobalSaclNameKey> PolOvk lR SecDH
Secrvk 1 g
N E B O R O U P nk e4F P- . 1 3 Privilgslf @1 Privx. SecD. Sid 8 7 4 7 vk P? 1 nk 2 / PolDnTrNvk B nk 2 2 PolDnDmGvk 2 c 8BgfM&
5 - 2 nk 2 H3 2 5 PolPrDmSvk B d 03 vk PS kNL$1 H X 4 P nEJ;EP[C'Xk plf x S-1-p" S-1- S-1- S-1-0 S-1- S-1- S-1- S-1- S-1-* S-1-P- S-1- S-1-A c D m N W I N D O W S - N 7 H X 4 nk GF P5 Sid h
nk *'aF H
8 0
DefaultPassword vk APvk i vk d : 6 ; x; nk CJF (
D e Privilgslf 7 Privx SecD4 Sid ! nk !A22 @6 8 \ CurrVal vk \ 8 s AY
E:\ Z$!Z8n-a|ANCa(g5'L 8 nk !A22 @6 @9 l OldVal lf ; Cupd7 Curr8 OldV; Oupd`: SecD vk l (9 {*t@& &O4ACR(W(}.0X{pNHM+lP0xh/sfB*wd_<^,Ucrh1e%<PDhH/&sEf%E'()ry:}G/9)R6!4vk l > d (: 6 |2SecDnk *'aF @6 6 d SecDesc H X 4 nk !A22 @6 6 CupdTimevk (< cDvk ' nk *'aF @6 6 OupdTimelf 8< $MAC@6 Defa' DPAPA NL$K*'aF nk |2 H
G H: ( $MACHINE.ACCc y nk |2 8< X= d SecDesc H X 4 nk |2 8< = A CupdTimevk P: p= nk |2 8< 0> H OupdTime nk ctF3 @: l PolOldSyskey {*t@&
% r)JF;a-(*
' vk L @G rr? B vk L XE s 0? n e b o . r u #C AY
E:\ ;gB<'lP$Vu#TJ7od |8V.@-u\}1-9P
(]1'#2D hbin @ nk ?8 4 O Cache o lf @ Cach PoliH RXAC N E vk @ Log @ p 0 0 P P o l i c y \ G l o b a l S a c l N a m e K e y e vk
o NL$ControlP o l I A vk h T NL$2 nk p2 H
@L (? D n NL$KM8vk nk <2 A B d P r SecDesc <2SecDB n e b o . r u D D O\&^vk d B o H X 4 nk p2 A ( + CupdTimevk PD cDvk pB nk <2 A p? _ OupdTimevk rr(D SecDs<32 nk p2 A ? CurrVal vk HK A vk 0 HV u NL$3T i |2 nk |2 8< H? L CurrVal AY
E:\ dm7bD|D6fs6y@O*` D,Olub\?MP
v|NIxy2|;A=fF$KBX/r)= MQp+KpQ rf(-n'O:]3't@~ iUXi/.2iSn
uepp1|WMGu<^D'=LK?"OLjtAK|MWB"P!m)e nk |2 8< ? L OldVal lf `= Cupd E CurrF OldV= Oupd< SecD AY
E:\ ,y
<!J4M|HcFB
arC;;aKc*fJQT+=zT*<f}4@"IV0j
1s'iNG>oZR7SP]|[ZF6'JqZYswIw\'z@2n]d|Y0BUb_~vNqs"8|_X06b O9BLN
jG=XV71z ` M&= vk vk (J $ NL$4\ C P vk L NL$5 vk N NL$8K vk 0M T NL$6e 2L ` AY
E:\ ruM&='}0nhR:be)v]fWhISv@a6(KgBFR8^zF"c8+$) nk p2 A @D OldVal lf HC Cupd`D CurrK OldVC OupdB SecD P P vk N NL$7 P vk P NL$10K J P vk P NL$9 P3 PA A D J J K M J O N ( vk Q Log hbin P P P @ p 0 0 P P o l i c y \ G l o b a l S a c l N a m e K e y e 0 nk X2 xA GlobalSaclNameFile
(lf @ Acco
DefQ DomaR Globx0 Glob(% PolA& PolA( PolAh PolA PolDH2 PolD1 PolDP PolE8> PolO 0 PolP2 PolP
PolRH SecDH
Secr J J l x
4
0 " BS=W:'gZcHFb[
3DF8>m 5iW,erqCerI:ozDL(U|)9Xw>]]~
O[m`wG\a1PQ{iUw# u)37Sj>,\]; m>Oswx
mL|c1!h~gEWSog*%J(BX_0: j4
0 EaZ8kuH1S
d
s Au-i=h4_Susc mG_j/VP@!kmu
z=r:V[1UVKP{k5WLn$.m,,0hA wI{4PL9z?39N?F ?&6
k}x^J'@Yu9@E}}/0cWH%W R4
t|\w$-;,btS `P2}7
uGM1*|?J*IMP
ZX{/T-N
4E$M^}P_@}DfH:Znw.V@~}b]uQ0+Mo}czhJZZsGWUm
r!qu0vF
{ ! ?>
Did this file decode correctly?
Original Code
regf Z8G ` e m R o o t \ S y s t e m 3 2 \ C o n f i g \ S E C U R I T Y dq &Jdq &J eq &Jrmtm
2 ^ hbin Z8G pnk, ?4 x x@ 8 3 9 CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000} 9 1 E hsk | ` p D ? nk
4 RXACT sk b d H X 4 ? 0 vk H vk ` nk g?F @ @ S-1-5-32-544c y vk 1-vk s H @ X nk F x c D Privilgslf ActS0 Priv SecD Sid vk nk jzF x l i ActSysAcvk - vk h nk jzF @ \ P S-1-1-0 vk nk F x d SecDesc vk d H X 4 h nk F x x Sid vk d ( d vk X c ` nk F @ S-1-5-32-551c y ` vk d 1- nk oF ActSysAcvk nk g?F d SecDesc vk d p vk 8 ` d vk lf ( ActS Priv SecD Sid vk @ ' lf vk 0 @ nk X2 xR $ Policy
PoliC vk nk r]F ( SecDesc
vk X5 nk CJF @ X7 x
S-1-5-90-0 P
6 vk d 4 vk 7 d vk
Z nk 3VF X PolRevision vk cDvk nk 2 PolAdtEvvk lA
h ~
nk GF 4 | Accountsvk nk 3VF Domains vk ( fQ
vk H9 cD(
nk <2 < Secrets vk nk 3VF ` 0 DefQuotavk 0 ( nk 3VF
( PolAdtLgnk 2
PolDnDDN1 C5 Vf nk ctF3 @
PolEKList lf ActS0 Priv SecD Sid @ @+ hbin AY
E:\
]x]J"a'E?gkg
lJ+I2%6EYA]-G= / vk d < kvk cD|2uunk jzF d SecDesc H X 4 nk jzF ( Sid nk oF p Privilgs
" # nk
F @ p+ \ P S-1-5-32-559vk vk d c nk
F 8 H Privilgs vk d nk
F ActSysAcnk
F d SecDesc H X 4 nk g?F Sid nk
F @ 8 S-1-5-32-545c y vk 1- ! ! vk vk H X 4 nk
F Sid / vk vk d 0 vk d X nk
F ActSysAcnk
F @ - h S-1-5-32-555 nk
F d SecDescnk
F d Sid A vk nk
F 0 s c Privilgslf ActS Priv( SecD Sid vk x ! @ @ nk
F 0 o u ActSysAcvk d + nk <fF 0 d SecDesc H X 4 nk <fF 0 8 Sid vk d vk p ! nk QF @ S-1-5-6 vk t vk d y p H X 4 - . (+ nk AF d SecDesc H X 4 vk 0! d " ! nk
F 8 ActSysAc H X 4 nk e4F * + Sid vk lf Priv SecD" Sid hbin nk LF @ x# S-1-5-20nk GF d SecDesc-8
nk QF ( c 6 Privilgs nk QF d SecDesc vk d h$ vk P X& d vk - vk % ! nk AF Sid nk yF @ 0& S-1-5-19vk t vk d # P " vk h ( d x' nk =#F " P e c Privilgslf # PrivX! SecD$ Sid nk F p" " d SecDesc H X 4 # H X 4 nk QF Sid nk J2 PolAcDmN S R V A H 6 F 1 K 3 E Q B S \ P vk ' % ( nk oF p" `$ h e c Privilgslf % Priv# SecD ' Sid nk o3 % 1 - PolAcDmS!A22SecD+ nk F p" # Sid vk ]Z
7DB B nk #F H
h* % o u DPAPI_SYSTEM5 - vk nk #F ' ' d SecDesc vk , ( " ! nk iF3 ' * | CurrVal vk | ) s AY
E:\ w;6EAvLE@8x4Mv
#OjyeEJn[@ kU _iUyu \$c9xP>"bp) nk iF3 ' * | OldVal lf 8, Cupd) Curr* OldV, Oupd(( SecD H H vk | x? * nk e4F @ P.
S-1-5-80-0i c y vk d - vk d vk + lf @ ActS SecD Sid P . X+ vk d + H X 4 nk iF3 ' ( CupdTimevk 8- cDIF3 nk iF3 ' H- OupdTimelf ActS SecDP Sid (( SecDJ , pnk e4F @ 1 > S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420t vk nk e4F * 1 - ActSysAclf - ActSX/ SecDX Sid 4 nk e4F P- d SecDesc / / vk d p3 nk e4F P- . Sid 1 nk e4F * d SecDesc vk / d vk 3 02 hbin 0 nk 2 P/ PolPrDmNnk X2 R H2 GlobalSaclNameKey> PolOvk lR SecDH
Secrvk 1 g
N E B O R O U P nk e4F P- . 1 3 Privilgslf @1 Privx. SecD. Sid 8 7 4 7 vk P? 1 nk 2 / PolDnTrNvk B nk 2 2 PolDnDmGvk 2 c 8BgfM&
5 - 2 nk 2 H3 2 5 PolPrDmSvk B d 03 vk PS kNL$1 H X 4 P nEJ;EP[C'Xk plf x S-1-p" S-1- S-1- S-1-0 S-1- S-1- S-1- S-1- S-1-* S-1-P- S-1- S-1-A c D m N W I N D O W S - N 7 H X 4 nk GF P5 Sid h
nk *'aF H
8 0
DefaultPassword vk APvk i vk d : 6 ; x; nk CJF (
D e Privilgslf 7 Privx SecD4 Sid ! nk !A22 @6 8 \ CurrVal vk \ 8 s AY
E:\ Z$!Z8n-a|ANCa(g5'L 8 nk !A22 @6 @9 l OldVal lf ; Cupd7 Curr8 OldV; Oupd`: SecD vk l (9 {*t@& &O4ACR(W(}.0X{pNHM+lP0xh/sfB*wd_<^,Ucrh1e%<PDhH/&sEf%E'()ry:}G/9)R6!4vk l > d (: 6 |2SecDnk *'aF @6 6 d SecDesc H X 4 nk !A22 @6 6 CupdTimevk (< cDvk ' nk *'aF @6 6 OupdTimelf 8< $MAC@6 Defa' DPAPA NL$K*'aF nk |2 H
G H: ( $MACHINE.ACCc y nk |2 8< X= d SecDesc H X 4 nk |2 8< = A CupdTimevk P: p= nk |2 8< 0> H OupdTime nk ctF3 @: l PolOldSyskey {*t@&
% r)JF;a-(*
' vk L @G rr? B vk L XE s 0? n e b o . r u #C AY
E:\ ;gB<'lP$Vu#TJ7od |8V.@-u\}1-9P
(]1'#2D hbin @ nk ?8 4 O Cache o lf @ Cach PoliH RXAC N E vk @ Log @ p 0 0 P P o l i c y \ G l o b a l S a c l N a m e K e y e vk
o NL$ControlP o l I A vk h T NL$2 nk p2 H
@L (? D n NL$KM8vk nk <2 A B d P r SecDesc <2SecDB n e b o . r u D D O\&^vk d B o H X 4 nk p2 A ( + CupdTimevk PD cDvk pB nk <2 A p? _ OupdTimevk rr(D SecDs<32 nk p2 A ? CurrVal vk HK A vk 0 HV u NL$3T i |2 nk |2 8< H? L CurrVal AY
E:\ dm7bD|D6fs6y@O*` D,Olub\?MP
v|NIxy2|;A=fF$KBX/r)= MQp+KpQ rf(-n'O:]3't@~ iUXi/.2iSn
uepp1|WMGu<^D'=LK?"OLjtAK|MWB"P!m)e nk |2 8< ? L OldVal lf `= Cupd E CurrF OldV= Oupd< SecD AY
E:\ ,y
<!J4M|HcFB
arC;;aKc*fJQT+=zT*<f}4@"IV0j
1s'iNG>oZR7SP]|[ZF6'JqZYswIw\'z@2n]d|Y0BUb_~vNqs"8|_X06b O9BLN
jG=XV71z ` M&= vk vk (J $ NL$4\ C P vk L NL$5 vk N NL$8K vk 0M T NL$6e 2L ` AY
E:\ ruM&='}0nhR:be)v]fWhISv@a6(KgBFR8^zF"c8+$) nk p2 A @D OldVal lf HC Cupd`D CurrK OldVC OupdB SecD P P vk N NL$7 P vk P NL$10K J P vk P NL$9 P3 PA A D J J K M J O N ( vk Q Log hbin P P P @ p 0 0 P P o l i c y \ G l o b a l S a c l N a m e K e y e 0 nk X2 xA GlobalSaclNameFile
(lf @ Acco
DefQ DomaR Globx0 Glob(% PolA& PolA( PolAh PolA PolDH2 PolD1 PolDP PolE8> PolO 0 PolP2 PolP
PolRH SecDH
Secr J J l x
4
0 " BS=W:'gZcHFb[
3DF8>m 5iW,erqCerI:ozDL(U|)9Xw>]]~
O[m`wG\a1PQ{iUw# u)37Sj>,\]; m>Oswx
mL|c1!h~gEWSog*%J(BX_0: j4
0 EaZ8kuH1S
d
s Au-i=h4_Susc mG_j/VP@!kmu
z=r:V[1UVKP{k5WLn$.m,,0hA wI{4PL9z?39N?F ?&6
k}x^J'@Yu9@E}}/0cWH%W R4
t|\w$-;,btS `P2}7
uGM1*|?J*IMP
ZX{/T-N
4E$M^}P_@}DfH:Znw.V@~}b]uQ0+Mo}czhJZZsGWUm
r!qu0vF
{ !
Function Calls
None |
Stats
MD5 | 56cf54eb5edd310505c0013691249644 |
Eval Count | 0 |
Decode Time | 198 ms |