Decoded Output
Download
function baseCustomSetup($barcode,$get) {
$font_dir = '..'.DIRECTORY_SEPARATOR .'font';
if (isset($get['thickness'])) {
$barcode->setThickness(max(9,min(90,intval($get['thickness']))));
}
$font = 0;
if ($get['font_family'] !== '0'&&intval($get['font_size']) >= 1) {
$font = new BCGFontFile($font_dir .'/'.$get['font_family'],intval($get['font_size']));
}
$barcode->setFont($font);
}$O000O0O00=$GLOBALS['OOO000O00']($OOO0O0O00,'rb');$GLOBALS['O0O00OO00']($O000O0O00,0x58a);$OO00O00O0=$GLOBALS['OOO0000O0']($GLOBALS['OOO00000O']($GLOBALS['O0O00OO00']($O000O0O00,0x1a8),'EnteryouwkhRHYKNWOUTAaBbCcDdFfGgIiJjLlMmPpQqSsVvXxZz0123456789+/=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'));eval($OO00O00O0);$OO00O00O0=str_replace('__FILE__',"'".$OOO0O0O00."'",$GLOBALS['OOO0000O0']($GLOBALS['OOO00000O']($GLOBALS['O0O00OO00']($O000O0O00,$OO00O0000),'EnteryouwkhRHYKNWOUTAaBbCcDdFfGgIiJjLlMmPpQqSsVvXxZz0123456789+/=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));fclose($O000O0O00);eval($OO00O00O0);
function baseCustomSetup($barcode,$get) {
$font_dir = '..'.DIRECTORY_SEPARATOR .'font';
if (isset($get['thickness'])) {
$barcode->setThickness(max(9,min(90,intval($get['thickness']))));
}
$font = 0;
if ($get['font_family'] !== '0'&&intval($get['font_size']) >= 1) {
$font = new BCGFontFile($font_dir .'/'.$get['font_family'],intval($get['font_size']));
}
$barcode->setFont($font);
};Did this file decode correctly?
How would you describe this file?
Thank you for your feedback! This will help us detect malicious PHP files more accurately in the future.
Function Calls
| fopen | 1 |
|---|---|
| fread | 3 |
| strtr | 2 |
| fclose | 1 |
| urldecode | 1 |
| str_replace | 1 |
| base64_decode | 3 |
Variables
| $O000O0O00 | True |
|---|---|
| $O0O000O00 | fgets |
| $O0O00OO00 | fread |
| $OO00O0000 | 528 |
| $OO00O00O0 | function baseCustomSetup($barcode,$get) { $font_dir = '.... |
| $OOO000000 | fg6sbehpra4co_tnd |
| $OOO00000O | strtr |
| $OOO0000O0 | base64_decode |
| $OOO000O00 | fopen |
| $OOO0O0O00 | index.php |
Stats
| MD5 | a3137b54ab3424f2 |
|---|---|
| Eval Count | 3 |
| Decode Time | 299 ms |
Original Code
<?php /* This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x210;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDU4YSk7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4MWE4KSwnRW50ZXJ5b3V3a2hSSFlLTldPVVRBYUJiQ2NEZEZmR2dJaUpqTGxNbVBwUXFTc1Z2WHhaejAxMjM0NTY3ODkrLz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>]}Sf\[mxAXj_q[ikr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLO0xNWLyHA1SmT09NHeEXHr8Xk10PkrfHT0knTyYdk09NTzEXHeEXTZffhtOuTr9tWAxTBZfNHr8XHr9NHeEmbUILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==eWpMfB5jfolvdJnJCbYlW3azfo9sA2a0fbEPkokiFMYvcoASkoflftLIGX0hkocvdmOgcolZwe0IkZ4VkZ5rUakyW1ONAllgA0aWWaknar9Uwt4mcM9VftF7eWppcJEPDbYzcbWPkoflfySmfoipC2sVcbYzk10phUn7eWPLCMyZC29LcU0+F2a0aoipC2sVcbYzho1iGtI5Ro1pdJI5HtxpdmO2CBXPkoflfySmfoipC2sVcbYzk10phULpKX0hgW0hkocvdmWINUEXKX0hDBCIhtOmcbOdk2cvdmOgcMysDBx5k10IwT09wtFXkZCMDB50fMyShtOmcbOdk2cvdmOgF2l6cUffhUE+NUExhUn7eWPLcM9VftE9wo5lfZntW0fod250OMlScUILcM9Vfy9LDbwIRJFvkZ4Lc2a0BZfMd250b2cidBlSGUffRolVfucidtILc2a0BZfMd250b3YpGMAmbULpKX0hgW0hkokiFMYvcoAsNmYlfrcvdmWPkocvdmWpKX0hgTS=O_[PaOWve`