1.Cut first 0xE bytes
<?php //00337{0x0A}
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='/i

2. cmp with "<?php //0"
3. HeaderSize=Get Number 0x0337
3.1 seek to HeaderSize+Digits

4. Get First 4 Byte
  4+oV5E3tizCOGmZa...
  "4+oV"
  while Cmp with
  	0xDEADC0DE, 0x3FBC2883, 0x882BC103, 0x0217582F, 0x149FEC13, 0x67A6BF45, 0x9EB67AC2
  	"0y4h", "BrWN", "4+oV", "HR+c", "mdgs"
  loop next byte and counter< 0x40
  
6.Decode whole block with custim Base64 decoder
Speciality
Uses this Alphabet:
0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/=
          ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
instead of ^this one, which is the standard for Base64
~Details start~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  '=' Terminatorsign
          00 01 02 03 04 05 06 07    This    Normal ACCI
$ ==>    >FF FF FF FF FF FF FF FF  ��������  ........ 
$+8      >FF FE FE FE FE FE FF FF  ��������  ........
$+10     >FF FF FF FF FF FF FF FF  ��������  ........
$+18     >FF FF FF FF FF FF FF FF  ��������  ........
$+20     >FE FF FF FF FF FF FF FF  ��������   !"#$%&'
$+28     >FF FF FF 3E FF FF FF 3F  ���>���?  ()*+,-./
$+30     >00 01 02 03 04 05 06 07  .
  01234567
$+38     >08 09 FF FF FF 40 FF FF  .���@��  89:;<=>?
$+40     >FF 0A 0B 0C 0D 0E 0F 10  �...  @ABCDEFG
$+48     >11 12 13 14 15 16 17 18    HIJKLMNO
$+50     >19 1A 1B 1C 1D 1E 1F 20     PQRSTUVW
$+58     >21 22 23 FF FF FF FF FF  !"#�����  XYZ[\]^_
$+60     >FF 24 25 26 27 28 29 2A  �$%&'()*  `ABCDEFG
$+68     >2B 2C 2D 2E 2F 30 31 32  +,-./012  HIJKLMNO
$+70     >33 34 35 36 37 38 39 3A  3456789:  PQRSTUVW
$+78     >3B 3C 3D FF FF FF FF FF  ;<=�����  XYZ{|}~

$+80     >FF FF FF FF FF FF FF FF  ��������  CUEAAAAC
$+88     >FF FF FF FF FF FF FF FF  ��������  EEEIIIAA
$+90     >FF FF FF FF FF FF FF FF  ��������  EAAOOOUU
$+98     >FF FF FF FF FF FF FF FF  ��������  YOU$$$$$
$+A0     >FF FF FF FF FF FF FF FF  ��������  AIOUNN��
$+A8     >FF FF FF FF FF FF FF FF  ��������  ?����!""
$+B0     >FF FF FF FF FF FF FF FF  ��������  ��������
$+B8     >FF FF FF FF FF FF FF FF  ��������  ��������
$+C0     >FF FF FF FF FF FF FF FF  ��������  ��������
$+C8     >FF FF FF FF FF FF FF FF  ��������  ��������
$+D0     >FF FF FF FF FF FF FF FF  ��������  ��������
$+D8     >FF FF FF FF FF FF FF FF  ��������  ��������
$+E0     >FF FF FF FF FF FF FF FF  ��������  �S������
$+E8     >FF FF FF FF FF FF FF FF  ��������  ��������
$+F0     >FF FF FF FF FF FF FF FF  ��������  ��������
$+F8     >FF FF FF FF FF FF FF FF  ��������  ��������

0123456789 =
ABCDEFGHIJKLMNOPQRSTUVWXYZ		A-10
abcdefghijklmnopqrstuvwxyz		a-36
+/
10+26+26+2 = 64

8 = 2*2*2
6 =   2  *3
------------
    2*2*2*3 =24
    
8 * >3< =24
6 * >4< =24

   l<->r
    
1. (a<<2) 
11. ^^^^ or (b>>4)

2. (b<<4)
22. ^^^^ or (c>>2)

3. (c<<6)
33. ^^^^ or d


(a<<2) | (b>>4);
(((b&15)<<4) | (c>>2));
((c&3)<<6) | (d));

~Details end~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

7. Xor Decode value with Xor 0x2853CEF2
Example
0x149FEC13 'Xor 0x2853CEF2' => 0x3CCC22E1
myvalA								myvalAA

if myvalAA < 0x17EFE671
	Select myvalAA 
		case 2A4496DD: <v11>
		case 3CCC22E1; <v22>
		case 4FF571B7; <v2>
	end select

	
	
elseif myvalAA = 0x17EFE671
elseif myvalAA =A0780FF1 <v1>
elseif myvalAA =B6E5B430  <v2>
elseif myvalAA =F6FE0E2C <v3>








---------------------------
Dec_Level1
10017190 >/$  A1 B0BB0210   MOV     EAX, [<DecInit>]



10027C60  10025E19  ^  ASCII "this"

  10027DEC  1002A2AD  ��  ASCII "error_log"
10027DF0  10025BBD  �[  ASCII "error_reporting"
  10027DF4  1002A299  ��  ASCII "escapeshellarg"





-----------------
FileLen 98762 -> 181CA
Base64  97897 -> 17E69
Enc     73422 -> 11ECE





$ ==>    0>149FEC13  � Ver
$+4      0>B86519DE  �e� ???			crc Size+1a
$+8      0>B05CB7CB  ˷\� Size
$+C      0>9BF1DB96  ��� Key
$+10     0>FEC96A4E  Nj��
$+14     0>AC587F33  3X�
$+18     0>A78E2FAE  �/��
$+1C     0>799A BC 94  ���y  size chunk
	$+20     0>6A079C77  w�j
	$+24     0>9EC709A7  �.Ǟ
	$+28     0>2349601A  `I#
	$+2C     0>F2412103  !A�
$ ==>    0>9C77799A  �yw�
$+4      0>09A76A07  j�.
$+8      0>601A9EC7  Ǟ`
$+C      0>21032349  I#!
$+10     0>2F40F241  A�@/
$+14     0>9725C69E  ��%�
$+18     0>604017C2  �@`
$+1C     0>858C05D8  ���
$+20     0>1DB16FAA  �o�
$+24     0>73CEA700  .��s
$+28     0>9002E7C8  ���
$+2C     0>31C1EEE2  ���1
$+30     0>ACF66D69  im��
$+34     0>26FA032C  ,�&
$+38     0>F1368BBA  ��6�
$+3C     0>AB722B48  H+r�
$+40     0>7CBA5F90  �_�|  SHELL32.7CBA5F90
$+44     0>B9C74383  �Cǹ
$+48     0>178FBA2E  .��
$+4C     0>DBA60B76  v��
$+50     0>D8A5CC4C  L̥�
$+54     0>066E6190  �an
$+58     0>C871DE25  %�q�
$+5C     0>3F13EBE5  ��?
$+60     0>202A2726  &'*
$+64     0>F59A0216  ��
$+68     0>1952B711  �R
$+6C     0>9986822D  -���
$+70     0>CEA88F23  #���
$+74     0>22926C19  l�"
$+78     0>C9448619  �D�
$+7C     0>4EC7F171  q��N
$+80     0>01FE5439  9T�

$+84     0>904AA423  #�J�
$+88     0>CC0A1EB9  �.�
$+8C     0>E87CEE23  #�|�
$+90     0>64BA8FE0  ���d
$+94     0>AC7D93C3  Ó}�
$+98     0>26923606  6�&
$+9C     0>3FAD9F51  Q��?
$+A0     0>473BB68F  ��;G
$+A4     0>F6A68F36  6���
$+A8     0>D26333BE  �3c�
$+AC     0>2D0A6BDD  �k.- B1
$+B0     0>F8986947  Gi�� B1
$+B4     0>C3C9ED2B  +��� B1
$+B8     0>CAC53077  w0�� B1
$+BC     0>E00D67E3  �g.�

$+C0     0>D3743529  )5t�
$+C4     0>0FD971EB  �q�


01234567
     012 34567	>> 5
34567          << 3

rol 3		<<
ror 5		>>