Yukardaki kodun açılmış haini verim
<? // This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited.
php$OOO0O0O00 = __FILE__;
$OOO000000 = urldecode('%61%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64');
$OO00O0000 = 23396;
$OOO0000O0 = $OOO000000 {
    4;
}
.$OOO000000 {
    9;
}
.$OOO000000 {
    3;
}
.$OOO000000 {
    5;
};
$OOO0000O0. = $OOO000000 {
    2;
}
.$OOO000000 {
    10;
}
.$OOO000000 {
    13;
}
.$OOO000000 {
    16;
};
$OOO0000O0. = $OOO0000O0 {
    3;
}
.$OOO000000 {
    11;
}
.$OOO000000 {
    12;
}
.$OOO0000O0 {
    7;
}
.$OOO000000 {
    5;
};
$O0O0000O0 = 'OOO0000O0';
eval(($$O0O0000O0('aWYoITApJE8wMDBPME8wMD1mb3BlbigkT09PME8wTzAwLCdyYicpO2ZnZXRzKCRPMDAwTzBPMDAsMTAyNCk7ZmdldHMoJE8wMDBPME8wMCw0MDk2KTskT08wME8wME8wPShiYXNlNjRfZGVjb2RlKHN0cnRyKGZyZWFkKCRPMDAwTzBPMDAsMzcyKSwnanJJOFFOcXk5SDJVMWNaYWR2TEdGUkRNS2d3V1M2QVg0dWkreDVPRUN6bFRCc2ZvZWI3WVBwbTNoSnRuMC9Waz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpKTtldmFsKCRPTzAwTzAwTzApOw==')));
return;
 ?>

Alıntı
urldecode('%61%68%36%73%62%65%68%71%6c%61%34%63%6f %5f%73%61%64');

Geri URL endode edersek

ah6sbehqla4co_sad

Alıntı
eval(($$O0O0000O0('aWYoITApJE8wMDBPME8wMD1mb3Blbig kT09PME8wTzAwLCdyYicpO2ZnZXRzKCRPMDAwTzBPMDAsMTAyN Ck7ZmdldHMoJE8wMDBPME8wMCw0MDk2KTskT08wME8wME8wPSh iYXNlNjRfZGVjb2RlKHN0cnRyKGZyZWFkKCRPMDAwTzBPMDAsM zcyKSwnanJJOFFOcXk5SDJVMWNaYWR2TEdGUkRNS2d3V1M2QVg 0dWkreDVPRUN6bFRCc2ZvZWI3WVBwbTNoSnRuMC9Waz0nLCdBQ kNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1 ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpKTtldmFsKCRPT zAwTzAwTzApOw==')));

Satırının encode edersek bi fonksiyon cıkıyor en son hepsi birleşecek

Cıkan fonksiyon

if (!0)$O000O0O00 = fopen($OOO0O0O00, 'rb');
fgets($O000O0O00, 1024);
fgets($O000O0O00, 4096);
$OO00O00O0 = (base64_decode(strtr(fread($O000O0O00, 372), 'jrI8QNqy9H2U1cZadvLGFRDMKgwWS6AX4ui+x5OECzlTBsfoe b7YPpm3hJtn0/Vk=', 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvw xyz0123456789+/')));
eval($OO00O00O0);
birleşmiş fonksiyon
<?php
$OOO0O0O00 = __FILE__;
$OOO000000 = ah6sbehqla4co_sad
$OO00O0000 = 23396;
$OOO0000O0 = $OOO000000 {
    4;
}
.$OOO000000 {
    9;
}
.$OOO000000 {
    3;
}
.$OOO000000 {
    5;
};
$OOO0000O0. = $OOO000000 {
    2;
}
.$OOO000000 {
    10;
}
.$OOO000000 {
    13;
}
.$OOO000000 {
    16;
};
$OOO0000O0. = $OOO0000O0 {
    3;
}
.$OOO000000 {
    11;
}
.$OOO000000 {
    12;
}
.$OOO0000O0 {
    7;
}
.$OOO000000 {
    5;
};
$O0O0000O0 = 'OOO0000O0';
$$O0O0000O0(' if (!0)$O000O0O00 = fopen($OOO0O0O00, 'rb');
fgets($O000O0O00, 1024);
fgets($O000O0O00, 4096);
$OO00O00O0 = (base64_decode(strtr(fread($O000O0O00, 372), 'jrI8QNqy9H2U1cZadvLGFRDMKgwWS6AX4ui+x5OECzlTBsfoeb7YPpm3hJtn0/Vk=', 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));
eval($OO00O00O0);');
return;
 ?>
Burdan sonrasını yaparsın artık