Question

帮我把这里的PHP代码中的eval base64_decode解密，谢谢

//
eval(base64_decode('JElJSUlJSUlsSUlJST0nbXlzcWxfY2xvc2UnOyRJSUlJSUlJSUlJMWw9J215c3FsX3F1ZXJ5JzskSUlJSUlJSUlJSTFJPSdteXNxbF9lcnJvcic7JElJSUlJSUlJSUlJMT0nbXlzcWxfY29ubmVjdCc7'));$OOO0O0O00=__FILE__;$OOO000000=urldecode('%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72');$OO00O0000=2532;$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';eval(($$O0O0000O0('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')));return;

Answer 1

这段代码下面应该还有一段base64编码串 ，这段代码读取自身文件再解密。这段代码原文如下：
<?php
$IIIIIIIlIIII='mysql_close';
$IIIIIIIIII1l='mysql_query';
$IIIIIIIIII1I='mysql_error';
$IIIIIIIIIII1='mysql_connect';
$file=__FILE__;
if(!0)$fp=fopen($file,'rb');
fread($fp,1313);
$b64code=base64_decode(strtr(fread($fp,380),'RAO/f4qIxB3uQtnedyoG816cpTESj9iPM2hvFZV0NX5YLagD7kJmUwWlzrHK+Csb=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'));
eval($b64code);
return;
?>