[SOLVED] encoded stuff

[jakebur01]

I bought some script from a lady when I was first starting out learning php. A few of the files have a lot of encoded junk in it. I cannot see any of the functions. Is there any way I could get around this or sort of convert all this encoded stuff to something I can look at and work with?

 

Example:

 

codelock.php

 

<?php eval(base64_decode("b2Jfc3RhcnQoKTsgJGNvZGVsb2NrX2wgPSAiRkxZVS1JM1hULVBBOUFVUzFIWUpIUiI7ICRjb2RlbG9ja190ID0gYmFzZTY0X2RlY29kZSgiSlNBNEpsNXBVRGN3U0R3dVdpcDFLRWNwSzJwc0pTbzFQREZDSWxWaklrd2lZUjBuSlNSV09qQXNJV2t3TFN0MUNUdFFQek5CUFN0UmVpTXlRMmg5SWlzeFBDY3hQVTV5UlRrbURYUXFWaWdpTWtNc0tIRStNelJzZlQ5TE9VSXFKMWsvZWw4ME96QkZJVFlrYURFcEtEdzVRaXBZZUh3SklUTmJPRDArVlN4d2FqTjJNaVF3SmdCM1FUc3pTandzVXlsMWJoRnNLRGdxS3k0aFBURVdiVWN3UFY1OWYwNHRMRFpWSnpJc2FHOW1iakVoV1RrSmQzdGFK....................................

 

 

functions.php

 

<?php if(file_exists('codelock.php')) {require_once('codelock.php'); $codelock_lock = new codelock(__FILE__); eval($codelock_lock->output());} return 1;?>
REtkYno8XkkdSkJCHRtZTkxMW0lXHU0ZF0IdSF5eH0BFXRhJdX1ZVkInCg4JXU4dFjgHHQYBEhMWdD0cQEc1WUwdVBZFURkHA0JYWTs/RFZMPBVAD1dTOyQXFFUGBEgZAhU2JUNYQ04ERVUeQ1QrN1IGFwpfFRlhZR9aFFpDUU1HSVdbCgRSHxtDCVYBQwMDURcVHhlVQlAdFkMFEEBFFjRUWBYFEF9Z...............................................

 

Thank you,

 

Jake

 

[MadTechie]

yep but its a pain

 

use echo for the next code to reverse (replace eval)

ie

<?php echo (base64_decode("b2Jfc3RhcnQoKTsgJGNvZGVsb2NrX2wgPSAiRkxZVS1JM1hULVBBOUFVUzFIWUpIUiI7ICRjb2RlbG9ja190ID0gYmFzZTY0X2RlY29kZSgiSlNBNEpsNXBVRGN3U0R3dVdpcDFLRWNwSzJwc0pTbzFQREZDSWxWaklrd2lZUjBuSlNSV09qQXNJV2t3TFN0MUNUdFFQek5CUFN0UmVpTXlRMmg5SWlzeFBDY3hQVTV5UlRrbURYUXFWaWdpTWtNc0tIRStNelJzZlQ5TE9VSXFKMWsvZWw4ME96QkZJVFlrYURFcEtEdzVRaXBZZUh3SklUTmJPRDArVlN4d2FqTjJNaVF3SmdCM1FUc3pTandzVXlsMWJoRnNLRGdxS3k0aFBURVdiVWN3UFY1OWYwNHRMRFpWSnpJc2FHOW1iakVoV1RrSmQzdGFK....................................

 

 

[jakebur01]

heres what it echoed back.

 

What do I need to do from here to break it down?

 

ob_start(); $codelock_l = "FLYU-I3XT-PA9AUS1HYJHR"; $codelock_t = base64_decode("JSA4Jl5pUDcwSDwuWip1KEcpK2psJSo1PDFCIlVjIkwiYR0nJSRWOjAsIWkwLSt1CTtQPzNBPStReiMyQ2h9IisxPCcxPU5yRTkmDXQqVigiMkMsKHE+MzRsfT9LOUIqJ1k/el80OzBFITYkaDEpKDw5QipYeHwJITNbOD0+VSxwajN2MiQwJgB3QTszSjwsUyl1bhFsKDgqKy4hPTEWbUcwPV59f04tLDZVJzIsaG9mbjEhWTkJd3taJzYXNT06XyttJToxI2I6OkBmRyo1TjskS3N6J0MpOiEtIGg8MSUPchcsPEQjbAcnJSRWOjAsIXJ7bHsTYRBmdR0eCBUUERRqcB0KewALDAQLdxZtRzA9Xn1/USI2KVogMSlo
b2ZoBgZoG2UdBnZ3EnwTAxZjFxcLBRdhEXdxchp2CgJoAhoeExACZA0KHhcHFAV+CBZtRzA9Xn1/Ui48JFA6PTtob2ZoBhZiBngREXZ3IlYlMD9eKzJtFWliODE8XmQNMjJdITNKNTpzDGh9FQ8XEnckM1gnUCw9Qj5hVjQhI0Q8eWJhcj0lP3UFL1o0MXI1OVAyISAZbC0iISFrcis2Si5fNT5FeWgZOnEmUzgyPz41JGxkdUsmQz06BXQ1USgmfg86Oi0vPismMXkNa0F6fRY5JxlpcSZTODI/PjUkZXkuCT5HLyNBKi9PYWhzE2pibi4xKjssM0Y5E2V0SzckTTJ9d0QqKSE9JCEudXUZeQpufRY5JxlpODcEYCo/KiEyPnFxSypfLyFLOzEVYWV/EXlsfmF7ZnFkdQ96BDxnHWEjXHc0MgJ/Onp/M3F4bDEbewdhYx9lcA12
Y3EYaCI9IDsqKXl9DC9WNzIFdDRbMT4mRy87Y2FyPWg/NkE+Rj4/XXB8GScyNkU7cW49MDYnLCNKKx94YB1pdxB6PDURYCo/KiEyPnFxSypfLyFLOzEVYWV/EXpwamlvZm52eg9gEyNwWiQ2Ti0vPUdod3dodiAvNSJYL1gob1AtPBkkOSBUaCJuLjEqOywzRjkTZXRLMS1KJG4uVys1JTs3bmgsN10iRi4zT3l6UCd1exUuOiY/JyAnKXwNMhcwNVcyN18lIXMMaDsrOzdweAYxSCpcPDEFdDZNNiI/SyYvY3N2KSk6MEAnVjF0EHAjWDIwZQUXPS8rPSIpcXFZIVoreRM5N0grOzZAIXFjYWkgIyt1BW1WKyxHNyJONWhjCmh9LzsqLCs6IllpD3gnWSItXC99d14tOi8lPCMlcG4NbVYrLEc3Ik41fngYaCJuLzklPTsw
QjETZXReJSNKNSd7FSc8KS0/KCkweQ1tVissRzciTjV5cwBhYm4hIyAtICNULhNldF4lI0o1J3sVPDEjO394KikiSjtaPj0BcGVcMi05VisuPmh3Zj8tJ0EsXXBwWTgoSmxrNUE/PjghNC9ldXUcYAh8M081MlsyOzQRZmRqKzo0ZDYnSWEXPz9OISNcLi16ERZ5JTo2bmgwJEsoSi4tSnloAjxxPFQrPCcmNy9sZHUJLlE9J08jL156cTRTLSooOzwhbGR1D2sIMTINeGVWJDY2XCY8I2hze2x7dw1vFXhwRTE7WzczN0VoeHdocGRleS5LJkF4fAk1MkErMjBGPGR6c3JiKSotRy5QLyANbGFKNSc/VCZxbiAzPC4vM0k9GmN0CTUyQSsyMEY8cmFhcj1oPj5OOFE9O1VwfBkyIDFCPCtibDonNjsjSy1HdHQJNTJBKzIwRjx1anl
7fWgwJEsoSi4tSnB8GTIgMUI8K2JsPSMvPDhDLFp0dAk1MkErMjBGPHlvaCEyPjUwQ2EXNzFONSxXJDx6HWhoY3N2IS48Jk86XT90A21hWikne146PWJsNS0vKDdIJktxdHNwLkslfXdYOT8rMSQ/K3B8FjROJSlQIiRNNCc9EWpmdGp8Yis7MF4rQDYzA3JjAjwzJl8rLSMnPGYlLyRHJ1YpPQ14aBk6cTxUKzwnJjcvbGR1D2sIMTINeGVNKTwgHHYyJSElJz49JA1oDnh2D3lhQmU6NlItNCQtO2ZxeXFZIVoreRM7LlA2NCFVOWJuJzclKTQ7SCATZXReJDNmMzAjXSk6L2AzND44LAVuHn94Cg9mFWZ7dBhkODg6Mz9kfn4KZRR3cwF3fB5oeXdeLTovJTwjJXBuUCBVeHwJPyRaJDg9VCF5d3VyZG5wdVYgVXh8CS
QpUDJ4bVsuKTs6ITIjAnJOJlc9OEIzKh4cdXIMaHtoYXI9aDYwTixeNjFEcHwZZSE7WDt0dCI0Nj0rJlkmaH83QjQkVS42OBYVYiMucm4vNiBDPRt8IEU5MhR/PzVBOSs5PD1vbGd1HGATI3BYKiJJJzs2XGhkai0gIyswCl8sQzQ1TjVpGx1zMF4sPCYnMS1xe3tYO189Ok4/JVxpcTxUKzwnJjcvZXV1D2sfeHBZOChKbGs7UisjISA6JWViKA0sXysxDStlTDs2I1cmPCdob2YpKzBKIGwqMV08IFokfXFtdzolLDcqIzo+EGsdLSZBNS9aLjE2GWw2Lys3KyI8PARlE3p2AXBlTSk8IBx2MSkrKC0kMTYEck58Okg/KFMzNisRdXloICYyPGN6AmsdfCFXMzFfLzA+Cmw2Lys3KyI8PA10EysgXw8zXDE5MlItcSs6ICc1cXIGbh9/
ewp8ZgRmfH9QOisrMXphYX55ChYUdHMDd2gVZTo2Ui00JC07b3cxMEwtVip8DwMkTWwWPF4jMC9yciUjPTBBJlAzaQ9+ZVYkNjZcJjwjZnB9bnBuRSxSPDFfeGN1LjYyRSE2JHJyZGJ9O0gmWjImTihoAjx1Nl07PGozdjE4LiJBM10udBBwYxt6cSZTODI/PjUkbGR1SyZDPToFciJWJTA/XisyZDg6Nm51dQ87EXFvRDZhEWUgMUEjLDwvMG9sIiJFIF89dAVxJ1wuM3sVPTs6IycwKzt8BGlIfCNZJzZVOzslEWZkai41IzgqfQk8USg/WCYmW211ZwFxb2NzLzsqOjlCOlZwcFgyMVI0IzRTYWJuMDAuLSgmSj8TZXRANHQRZSInRj81MCYkb3d9I0gqWyo8XClhBGFxJ1khKmd2JSo1PDFCIlV2dhI4NU0xb3weanduP
DovP3RrRSpQIj9FOCIXY3M/WCs8JCs3e253cVkhWit5EzYxTiYnOlchd2huMS4pOj5ePF5ldgN0OVspNCJCLy9xIDcnKDwnBWt/NzdMJChWL29zE2Z9PC0xLj4xJFRgCCUpXzU1TDM7cxUnPCktPygpMG5QNA=="); for ($codelock_x=0; $codelock_x < strlen($codelock_t); $codelock_x++) { $codelock_y = substr($codelock_t, $codelock_x, 1); $codelock_z = substr($codelock_l, $codelock_x % strlen($codelock_l), 1); $codelock_c .= chr(ord($codelock_y) ^ ord($codelock_z)); } eval($codelock_c);

[jakebur01]

This is what it returned when I did echo(base64_decode(      around the content in functions.php:

 

DKdbz<^IJBBYNLL[iWMBH^^@E]Iu}YVB'  ]N8t=@G5YLTEQBXY;?DVL<@WS;$UH6%CXCNEUCT+7R _aeZZCQMGIW[ RC VCQUBPC@E4TX_YMfx_XO1^>QM KDBVS\ OWP[A]PMCO{eJJMB\UZL]WCCYNIUWycX[ MVV) FBWBCJVBZYFOLC ]GbfS \RGAK iZXT EF HUZAMGREL(ZETTE _\wixBX;Rl_HPQBB]RKJ*\AZUW @RH {gcJ_ XH#U]DYMV VP@VC AVJVQhoL?:=hB\UZL]WCCYNIUW[FGX^IJBB9|NLC:WX\mU=IWW2 QC]VCHYWWb@XP&DPUGVKBU[ABOBZKX}9CBS+ E 2[ELTRUGTD.................

[MadTechie]

 

 

basically you will need to keep record of evey decode, and on every new one you replace eval with print

 

see here

ob_start();
$codelock_l = "FLYU-I3XT-PA9AUS1HYJHR"; 
$codelock_t = base64_decode("JSA4Jl5pUDcwSDwuWip1KEcpK2psJSo1PDFCIlVjIkwiYR0nJSRWOjAsIWkwLSt1CTtQPzNBPStReiMyQ2h9IisxPCcxPU5yRTkmDXQqVigiMkMsKHE+MzRsfT9LOUIqJ1k/el80OzBFITYkaDEpKDw5QipYeHwJITNbOD0+VSxwajN2MiQwJgB3QTszSjwsUyl1bhFsKDgqKy4hPTEWbUcwPV59f04tLDZVJzIsaG9mbjEhWTkJd3taJzYXNT06XyttJToxI2I6OkBmRyo1TjskS3N6J0MpOiEtIGg8MSUPchcsPEQjbAcnJSRWOjAsIXJ7bHsTYRBmdR0eCBUUERRqcB0KewALDAQLdxZtRzA9Xn1/USI2KVogMSlo
b2ZoBgZoG2UdBnZ3EnwTAxZjFxcLBRdhEXdxchp2CgJoAhoeExACZA0KHhcHFAV+CBZtRzA9Xn1/Ui48JFA6PTtob2ZoBhZiBngREXZ3IlYlMD9eKzJtFWliODE8XmQNMjJdITNKNTpzDGh9FQ8XEnckM1gnUCw9Qj5hVjQhI0Q8eWJhcj0lP3UFL1o0MXI1OVAyISAZbC0iISFrcis2Si5fNT5FeWgZOnEmUzgyPz41JGxkdUsmQz06BXQ1USgmfg86Oi0vPismMXkNa0F6fRY5JxlpcSZTODI/PjUkZXkuCT5HLyNBKi9PYWhzE2pibi4xKjssM0Y5E2V0SzckTTJ9d0QqKSE9JCEudXUZeQpufRY5JxlpODcEYCo/KiEyPnFxSypfLyFLOzEVYWV/EXlsfmF7ZnFkdQ96BDxnHWEjXHc0MgJ/Onp/M3F4bDEbewdhYx9lcA12
Y3EYaCI9IDsqKXl9DC9WNzIFdDRbMT4mRy87Y2FyPWg/NkE+Rj4/XXB8GScyNkU7cW49MDYnLCNKKx94YB1pdxB6PDURYCo/KiEyPnFxSypfLyFLOzEVYWV/EXpwamlvZm52eg9gEyNwWiQ2Ti0vPUdod3dodiAvNSJYL1gob1AtPBkkOSBUaCJuLjEqOywzRjkTZXRLMS1KJG4uVys1JTs3bmgsN10iRi4zT3l6UCd1exUuOiY/JyAnKXwNMhcwNVcyN18lIXMMaDsrOzdweAYxSCpcPDEFdDZNNiI/SyYvY3N2KSk6MEAnVjF0EHAjWDIwZQUXPS8rPSIpcXFZIVoreRM5N0grOzZAIXFjYWkgIyt1BW1WKyxHNyJONWhjCmh9LzsqLCs6IllpD3gnWSItXC99d14tOi8lPCMlcG4NbVYrLEc3Ik41fngYaCJuLzklPTsw
QjETZXReJSNKNSd7FSc8KS0/KCkweQ1tVissRzciTjV5cwBhYm4hIyAtICNULhNldF4lI0o1J3sVPDEjO394KikiSjtaPj0BcGVcMi05VisuPmh3Zj8tJ0EsXXBwWTgoSmxrNUE/PjghNC9ldXUcYAh8M081MlsyOzQRZmRqKzo0ZDYnSWEXPz9OISNcLi16ERZ5JTo2bmgwJEsoSi4tSnloAjxxPFQrPCcmNy9sZHUJLlE9J08jL156cTRTLSooOzwhbGR1D2sIMTINeGVWJDY2XCY8I2hze2x7dw1vFXhwRTE7WzczN0VoeHdocGRleS5LJkF4fAk1MkErMjBGPGR6c3JiKSotRy5QLyANbGFKNSc/VCZxbiAzPC4vM0k9GmN0CTUyQSsyMEY8cmFhcj1oPj5OOFE9O1VwfBkyIDFCPCtibDonNjsjSy1HdHQJNTJBKzIwRjx1anl
7fWgwJEsoSi4tSnB8GTIgMUI8K2JsPSMvPDhDLFp0dAk1MkErMjBGPHlvaCEyPjUwQ2EXNzFONSxXJDx6HWhoY3N2IS48Jk86XT90A21hWikne146PWJsNS0vKDdIJktxdHNwLkslfXdYOT8rMSQ/K3B8FjROJSlQIiRNNCc9EWpmdGp8Yis7MF4rQDYzA3JjAjwzJl8rLSMnPGYlLyRHJ1YpPQ14aBk6cTxUKzwnJjcvbGR1D2sIMTINeGVNKTwgHHYyJSElJz49JA1oDnh2D3lhQmU6NlItNCQtO2ZxeXFZIVoreRM7LlA2NCFVOWJuJzclKTQ7SCATZXReJDNmMzAjXSk6L2AzND44LAVuHn94Cg9mFWZ7dBhkODg6Mz9kfn4KZRR3cwF3fB5oeXdeLTovJTwjJXBuUCBVeHwJPyRaJDg9VCF5d3VyZG5wdVYgVXh8CS
QpUDJ4bVsuKTs6ITIjAnJOJlc9OEIzKh4cdXIMaHtoYXI9aDYwTixeNjFEcHwZZSE7WDt0dCI0Nj0rJlkmaH83QjQkVS42OBYVYiMucm4vNiBDPRt8IEU5MhR/PzVBOSs5PD1vbGd1HGATI3BYKiJJJzs2XGhkai0gIyswCl8sQzQ1TjVpGx1zMF4sPCYnMS1xe3tYO189Ok4/JVxpcTxUKzwnJjcvZXV1D2sfeHBZOChKbGs7UisjISA6JWViKA0sXysxDStlTDs2I1cmPCdob2YpKzBKIGwqMV08IFokfXFtdzolLDcqIzo+EGsdLSZBNS9aLjE2GWw2Lys3KyI8PARlE3p2AXBlTSk8IBx2MSkrKC0kMTYEck58Okg/KFMzNisRdXloICYyPGN6AmsdfCFXMzFfLzA+Cmw2Lys3KyI8PA10EysgXw8zXDE5MlItcSs6ICc1cXIGbh9/
ewp8ZgRmfH9QOisrMXphYX55ChYUdHMDd2gVZTo2Ui00JC07b3cxMEwtVip8DwMkTWwWPF4jMC9yciUjPTBBJlAzaQ9+ZVYkNjZcJjwjZnB9bnBuRSxSPDFfeGN1LjYyRSE2JHJyZGJ9O0gmWjImTihoAjx1Nl07PGozdjE4LiJBM10udBBwYxt6cSZTODI/PjUkbGR1SyZDPToFciJWJTA/XisyZDg6Nm51dQ87EXFvRDZhEWUgMUEjLDwvMG9sIiJFIF89dAVxJ1wuM3sVPTs6IycwKzt8BGlIfCNZJzZVOzslEWZkai41IzgqfQk8USg/WCYmW211ZwFxb2NzLzsqOjlCOlZwcFgyMVI0IzRTYWJuMDAuLSgmSj8TZXRANHQRZSInRj81MCYkb3d9I0gqWyo8XClhBGFxJ1khKmd2JSo1PDFCIlV2dhI4NU0xb3weanduP
DovP3RrRSpQIj9FOCIXY3M/WCs8JCs3e253cVkhWit5EzYxTiYnOlchd2huMS4pOj5ePF5ldgN0OVspNCJCLy9xIDcnKDwnBWt/NzdMJChWL29zE2Z9PC0xLj4xJFRgCCUpXzU1TDM7cxUnPCktPygpMG5QNA==");


for ($codelock_x=0; $codelock_x < strlen($codelock_t); $codelock_x++) { $codelock_y = substr($codelock_t, $codelock_x, 1); $codelock_z = substr($codelock_l, $codelock_x % strlen($codelock_l), 1); $codelock_c .= chr(ord($codelock_y) ^ ord($codelock_z)); } print($codelock_c);

 

[jakebur01]

I see what your saying. Thank you for taking the time to help me.

 

`Jake

[MadTechie]

your welcome..

 

note it will take awhile, but encoding it more about time wasting than protection