php混淆加密

1.php代码

<?php
 $O00OO0=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6B%64%679%5F%65%68%63%73%77%6F4%2B%6637%6A");$O00O0O=$O00OO0{3}.$O00OO0{6}.$O00OO0{33}.$O00OO0{30};$O0OO00=$O00OO0{33}.$O00OO0{10}.$O00OO0{24}.$O00OO0{10}.$O00OO0{24};$OO0O00=$O0OO00{0}.$O00OO0{18}.$O00OO0{3}.$O0OO00{0}.$O0OO00{1}.$O00OO0{24};$OO0000=$O00OO0{7}.$O00OO0{13};$O00O0O.=$O00OO0{22}.$O00OO0{36}.$O00OO0{29}.$O00OO0{26}.$O00OO0{30}.$O00OO0{32}.$O00OO0{35}.$O00OO0{26}.$O00OO0{30};eval($O00O0O("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"));
  ?>

2.php代码

function unscrambler($code) {
  if(! is_array($code)) {
    $code = str_replace('__FILE__', "'$code'", str_replace('eval', '$code=', file_get_contents($code)));
    eval('?>' . $code);
  }else {
    extract($code);
    $code = str_replace("eval", '$code=', $code);
    eval($code);
  }
  if(strstr($code, 'eval')) return unscrambler(get_defined_vars());
  else return $code;
}
  
echo unscrambler('需要还原的代码或文件名');

3.php代码

<?php
  function RandAbc($length=""){ //返回随机字符串
    $str="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
    return str_shuffle($str);
  }
 $filepath='index.php';
 $path_parts= pathinfo($filepath);
 $filename=$path_parts["basename"];
 
 $T_k1=RandAbc();//随机密匙1
 
 $T_k2=RandAbc();//随机密匙2
  
 $vstr=file_get_contents($filename);//要加密的文件
  
 $v1=base64_encode($vstr);
 $c=strtr($v1,$T_k1,$T_k2);//根据密匙替换对应字符。
 
 $c=$T_k1.$T_k2.$c;
 
 $q1="O00O0O";
 $q2="O0O000";
 $q3="O0OO00";
 $q4="OO0O00";
 $q5="OO0000";
 $q6="O00OO0";
 $s='$'.$q6.'=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6B%64%679%5F%65%68%63%73%77%6F4%2B%6637%6A");$'.$q1.'=$'.$q6.'{3}.$'.$q6.'{6}.$'.$q6.'{33}.$'.$q6.'{30};$'.$q3.'=$'.$q6.'{33}.$'.$q6.'{10}.$'.$q6.'{24}.$'.$q6.'{10}.$'.$q6.'{24};$'.$q4.'=$'.$q3.'{0}.$'.$q6.'{18}.$'.$q6.'{3}.$'.$q3.'{0}.$'.$q3.
'{1}.$'.$q6.'{24};$'.$q5.'=$'.$q6.'{7}.$'.$q6.'{13};$'.$q1.'.=$'.$q6.'{22}.$'.$q6.'{36}.$'.$q6.'{29}.$'.$q6.'{26}.$'.$q6.'{30}.$'.$q6.'{32}.$'.$q6.'{35}.$'.$q6.'{26}.$'.$q6.'{30};eval($'.$q1.'("'.base64_encode('$'.$q2.'="'.$c.'";eval(\'?>\'.$'.$q1.'($'.$q3.'($'.$q4.'($'.$q2.',$'.$q5.'*2),$'.$q4.'($'.$q2.',$'.$q5.',$'.$q5.'),$'.$q4.'($'.$q2.',0,$'.$q5.'))));').'"));';
  
 $s='<?
 '.$s.
'
?>';
  
echo $s;
//生成 加密后的php文件
!is_dir('create/') && mkdir('create/');
$fpp1 = fopen('create/'.$filename,'w');
fwrite($fpp1,$s) or die('写文件错误');
echo '加密成功！';