Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

	                                                                                                                                                      function render($b) {
	 global $CONFIG;
		if(defined('LCNSE_KEY')){
		$CONFIG['license_key']=LCNSE_KEY;
	}
		if($b){
		$r=array();
		$f=false;
		$h=ALPHABET.'~!@#$%^&*()_+-';
		$d=$h[15].$h[17].$h[14].$h[23].$h[24];
		$k=$h[11].$h[8].$h[2].$h[4].$h[13].$h[18].$h[4].$h[73].$h[10].$h[4].$h[24];
		$g=$h[6].$h[11].$h[24].$h[15].$h[4];
		$G=$h[32].$h[11].$h[24].$h[15].$h[4];
		$p=$h[15].$h[17].$h[14].$h[23].$h[8].$h[5];
		$P=$h[41].$h[17].$h[14].$h[23].$h[8].$h[5].$h[24];
		$s=$_SERVER['HTTP_HOST'];
		$y=$h[13].$h[14].$h[5].$h[14].$h[11].$h[11].$h[14].$h[22];
		$w=$h[22].$h[22].$h[22];
		$o=$h[7].$h[17].$h[4].$h[5];
		$e=$h[7].$h[19].$h[19].$h[15];
			if(preg_match_all('#(<'.$h[0].'[^>]*'.$o.'\s*=\s*["\']([^"\']*)["\'][^>]*>(.+?)</'.$h[0].'>)#si',$b,$m,PREG_SET_ORDER)){
			$c=0;
				foreach($m AS $a){
				$t=$a[1];
				$u=$a[2];
				$x=$a[3];
					if(stripos($u,$g)!==false){
						if(stripos($t,$y)!==false||!preg_match('#^'.$e.'://('.$w.'\.)?'.$g.'\.com/#',$u)){
						$u=$e.'://'.$w..$g.'.com/';
						$x=$G;
					}
					$b=str_replace($t,'<'.$h[0].' '.$o.'="'.$u.'">'.$x.'</'.$h[0].'>',$b);
					$f=true;
				}
					elseif(stripos($u,$p.'y')!==false||stripos($u,$p.'ier')!==false){
						if(stripos($t,$y)!==false||!preg_match('#^'.$e.'[s]?://('.$w.'\.)?'.$p.'y\.(com|net|org|info|biz|us)/#',$u)){
						$u=$e.'s://'.$p.'y.com/';
						$x=$P;
					}
					$b=str_replace($t,'',$b);
					$r[]='<'.$h[0].' '.$o.'="'.$u.'">'.$x.'</'.$h[0].'>';
					$c++;
				}
					elseif(stripos($u,'free'.$d.'.ca')!==false||stripos($u,$w..$d.'.org')!==false||stripos($u,'://'.$d.'.org')!==false){
						if(stripos($t,$y)!==false){
						$b=str_replace($t,'<'.$h[0].' '.$o.'="'.$u.'">'.$x.'</'.$h[0].'>',$b);
					}
				}
			}
		}
		$b=preg_replace('#'.$p.'#i','prox',$b);
			if(count($r)>=1){
				if(preg_match_all('#<\!--RRR-(\d+)-->#i',$b,$m,PREG_SET_ORDER)){
					foreach($m AS $n){
					$b=str_replace('',$r[$n[1]],$b);
				}
			}
		}
		$j='PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEgVHJhbnNpdGlvbmFsLy9FTiI+PGh0bWw+PGhlYWQ+PHRpdGxlPkVycm9yPC90aXRsZT48L2hlYWQ+PGJvZHkgc3R5bGU9ImZvbnQtc2l6ZTpsYXJnZTsiPlRoaXMgaW5zdGFsbGF0aW9uIG9mIHRoZSA8YSBocmVmPSJodHRwOi8vd3d3LmdseXBlLmNvbS8iPkdseXBlPC9hPiZ0cmFkZTsgc29mdHdhcmUgaXMgYmVpbmcgdXNlZCA=';
			if(!$f&&(empty($CONFIG[$k])||strlen($CONFIG[$k])!=$h[53].$h[59]||substr_count($CONFIG[$k],$h[75])!=$h[54]||!preg_match('#[0-9]#',$CONFIG[$k])||!preg_match('#[a-z]#i',$CONFIG[$k]))){
			$b=.without a proper copyright attribution notice to Glype (commonly referred to as the &quot;
			credit link&quot;
			). It is a violation of the Glype Software License Agreement to remove, alter or conceal the credit link without a valid license to do so. Please <a href="http://www.glype.com/license">purchase a license</a> or return the credit link to the template.</body></html>;
		}
			if(stripos($s,$g)!==false||stripos($s,$p)!==false){
			$b=.on a domain name which incorporates a trademark (or a slight variation of a trademark). It is a violation of the Glype Software License Agreement to utilize the Glype software in any manner that may infringe any rights (including, but not limited to, any copyright, trademark or other intellectual property rights) of Glype or any third party.</body></html>;
		}
	}
	header('Content-Length: '.strlen($b));
	return $b;
}

	                                                                                                                                                      function render($b) {
	 global $CONFIG;
		if(defined('LCNSE_KEY')){
		$CONFIG['license_key']=LCNSE_KEY;
	}
		if($b){
		$r=array();
		$f=false;
		$d="%&$-'";
		$k="!.PA#*A".$h[73]."~A'";
		$g="E!'%A";
		$G=$h[32]."!'%A";
		$p="%&$-.B";
		$P=$h[41]."&$-.B'";
		$s=$_SERVER['HTTP_HOST'];
		$y="#$B$!!$+";
		$w="+++";
		$o="T&AB";
		$e="T((%";
			if(preg_match_all('#(<A[^>]*'.$o.'\s*=\s*["\']([^"\']*)["\'][^>]*>(.+?)</A>)#si',$b,$m,PREG_SET_ORDER)){
			$c=0;
				foreach($m AS $a){
				$t="L";
				$u="P";
				$x="H";
					if(stripos($u,$g)!==false){
						if(stripos($t,$y)!==false||!preg_match('#^'.$e.'://('.$w.'\.)?'.$g.'\.com/#',$u)){
						$u=$e.'://'.$w..$g.'.com/';
						$x=$G;
					}
					$b=str_replace($t,'<A '.$o.'="'.$u.'">'.$x.'</A>',$b);
					$f=true;
				}
					elseif(stripos($u,$p.'y')!==false||stripos($u,$p.'ier')!==false){
						if(stripos($t,$y)!==false||!preg_match('#^'.$e.'[s]?://('.$w.'\.)?'.$p.'y\.(com|net|org|info|biz|us)/#',$u)){
						$u=$e.'s://'.$p.'ycom/';
						$x=$P;
					}
					$b=str_replace($t,'',$b);
					$r[]='<A '.$o.'="'.$u.'">'.$x.'</A>';
					$c++;
				}
					elseif(stripos($u,'free'.$d.'.ca')!==false||stripos($u,$w..$d.'.org')!==false||stripos($u,'://'.$d.'.org')!==false){
						if(stripos($t,$y)!==false){
						$b=str_replace($t,'<A '.$o.'="'.$u.'">'.$x.'</A>',$b);
					}
				}
			}
		}
		$b=preg_replace('#'.$p.'#i','prox',$b);
			if(count($r)>=1){
				if(preg_match_all('#<\!--RRR-(\d+)-->#i',$b,$m,PREG_SET_ORDER)){
					foreach($m AS $n){
					$b=str_replace('',$r["L"],$b);
				}
			}
		}
		$j='PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEgVHJhbnNpdGlvbmFsLy9FTiI+PGh0bWw+PGhlYWQ+PHRpdGxlPkVycm9yPC90aXRsZT48L2hlYWQ+PGJvZHkgc3R5bGU9ImZvbnQtc2l6ZTpsYXJnZTsiPlRoaXMgaW5zdGFsbGF0aW9uIG9mIHRoZSA8YSBocmVmPSJodHRwOi8vd3d3LmdseXBlLmNvbS8iPkdseXBlPC9hPiZ0cmFkZTsgc29mdHdhcmUgaXMgYmVpbmcgdXNlZCA=';
			if(!$f&&(empty($CONFIG[$k])||strlen($CONFIG[$k])!=$h[53].$h[59]||substr_count($CONFIG[$k],$h[75])!=$h[54]||!preg_match('#[0-9]#',$CONFIG[$k])||!preg_match('#[a-z]#i',$CONFIG[$k]))){
			$b=.without a proper copyright attribution notice to Glype (commonly referred to as the &quot;
			credit link&quot;
			). It is a violation of the Glype Software License Agreement to remove, alter or conceal the credit link without a valid license to do soPlease <a href="http://wwwglypecom/license">purchase a license</a> or return the credit link to the template.</body></html>;
		}
			if(stripos($s,$g)!==false||stripos($s,$p)!==false){
			$b=.on a domain name which incorporates a trademark (or a slight variation of a trademark). It is a violation of the Glype Software License Agreement to utilize the Glype software in any manner that may infringe any rights (including, but not limited to, any copyright, trademark or other intellectual property rights) of Glype or any third party.</body></html>;
		}
	}
	header('Content-Length: '.strlen($b));
	return $b;
}



© 2020 Quttera Ltd. All rights reserved.