Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $GLOBALS["YNzxPYeqDZ"] = array("\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x6..

Decoded Output download

if(!defined("A__A_AA_"))define("A__A_AA_","A__A_AAA");$GLOBALS[A__A_AA_]=explode("|'|k|G", "H*|'|k|G594E7A7850596571445A|'|k|G767328217172737661727128224E4E5F5F5F5F5F22292971727376617228224E4E5F5F5F5F5F222C20626571283229293B");

Did this file decode correctly?

Original Code

<?php
$GLOBALS["YNzxPYeqDZ"] = array("\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65", "\x73\x74\x72\x5F\x72\x6F\x74\x31\x33", "\x73\x74\x72\x72\x65\x76");
eval(base64_decode("aWYoIWRlZmluZWQoIkFfX0FfQUFfIikpZGVmaW5lKCJBX19BX0FBXyIsIkFfX0FfQUFBIik7JEdMT0JBTFNbQV9fQV9BQV9dPWV4cGxvZGUoInwnfGt8RyIsICJIKnwnfGt8RzU5NEU3QTc4NTA1OTY1NzE0NDVBfCd8a3xHNzY3MzI4MjE3MTcyNzM3NjYxNzI3MTI4MjI0RTRFNUY1RjVGNUY1RjIyMjkyOTcxNzI3Mzc2NjE3MjI4MjI0RTRFNUY1RjVGNUY1RjIyMkMyMDYyNjU3MTI4MzIyOTI5M0IiKTs="));
eval(strrev(";)\"A_A_A__A\",\"__A_A__A\"(enifed))\"__A_A__A\"(denifed!(fi"));
$GLOBALS[A__A_A__] = explode("|&|9|p", "H*|&|9|p6157596F4957526C5A6D6C755A57516F496B464258313966583045694B536C6B5A575A70626D556F496B464258313966583045694C434A42515639665830466649696B37|&|9|p7C3C7C307C40|&|9|p7C3C7C307C40646566696E65647C3C7C307C407374727265767C3C7C307C406261736536345F656E636F64657C3C7C307C40626173656E616D657C3C7C307C406261736536345F6465636F64657C3C7C307C4066696C6573697A657C3C7C307C4066696C655F6578697374737C3C7C307C406578706C6F64657C3C7C307C407375627374725F7265706C6163657C3C7C307C4069735F66696C657C3C7C307C40737472746F75707065727C3C7C307C407375627374727C3C7C307C406D64357C3C7C307C4066756E6374696F6E5F6578697374737C3C7C307C406865616465727C3C7C307C40737472706F737C3C7C307C4066696C655F6765745F636F6E74656E74737C3C7C307C4069735F61727261797C3C7C307C4074696D65");
if (!defined("A__A__A_")) define("A__A__A_", "A__A__AA");
$GLOBALS[A__A__A_] = explode("|4|m|&", "H*|4|m|&6148523063484D364C79396A5A47347562486C7362575575593239744C32467761533931634752686447553D|4|m|&3F7665723D|4|m|&26646F6D61696E3D|4|m|&64|4|m|&636F6E66|4|m|&63|4|m|&4552524F52|4|m|&3C3A3E");
eval(base64_decode("aWYoIWRlZmluZWQoIkFfX19BQUFfIikpZGVmaW5lKCJBX19fQUFBXyIsIkFfX19BQUFBIik7"));
$GLOBALS[A___AAA_] = explode("|P|1|@", "H*|P|1|@415F5F5F415F415F|P|1|@646566696E65|P|1|@415F5F5F415F4141|P|1|@74656D706C6174652F|P|1|@2F7468656D652E696E69|P|1|@313A74727565|P|1|@323A66616C7365|P|1|@333A72657475726E|P|1|@52454D4F54455F41444452|P|1|@485454505F434C49454E545F4950|P|1|@7468656D655F76657273696F6E|P|1|@E69CAAE79FA5|P|1|@3C62723E|P|1|@5C6E|P|1|@7468656D655F6E616D65|P|1|@3C3A3E|P|1|@696E6465787C636F6D6D2E706870|P|1|@636F6D6D2E706870");
if (!defined("A____AA_")) define("A____AA_", "A____AAA");
$GLOBALS[A____AA_] = explode("|m|?|c", "H*|m|?|c6148523063484D364C79393365433573655778745A53356A62323076595842704C324677634778354C773D3D|m|?|c696E6465782E706870");
eval(strrev(";)\"_A_____A\",\"A______A\"(enifed))\"A______A\"(denifed!(fi"));
$GLOBALS[A______A] = explode("|1|{|V", "H*|1|{|V594E7A7850596571445A|1|{|V|1|{|V636F6E66|1|{|V74656D706C6174652F|1|{|V74656D706C617465|1|{|V2F|1|{|V4C6F64657243726561743A55544638|1|{|V436F6E74656E742D747970653A746578742F68746D6C3B636861727365743D7574662D38|1|{|V637573746F6D4572726F72");
eval($GLOBALS["YNzxPYeqDZ"][2](";)\"E62757475627A333>|N|B|5637C61666A323>|N|B|56572747A313>|N|B|*H\" ,\">|N|B|\"(edolpxe=]AA_AAAA[SLABOLG\$;)\"__AAAAA\",\"AA_AAAA\"(enifed))\"AA_AAAA\"(denifed!(fi"));
eval(str_rot13("vs(!qrsvarq(\"NNNN__N\"))qrsvar(\"NNNN__N\",\"NNNN_N_\");"));
$GLOBALS[AAAA__A] = explode("|p|/|)", "H*|p|/|)595752746157343D|p|/|)63|p|/|)5C783634|p|/|)696E6465787C636F6D6D2E706870|p|/|)636F6D6D2E706870");
eval($GLOBALS["YNzxPYeqDZ"][0]("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"));
eval(str_rot13("vs(!qrsvarq(\"NN_N_N_\"))qrsvar(\"NN_N_N_\",\"NN_N_NN\");\$TYBONYF[NN_N_N_]=rkcybqr(\"|5|[|]\", \"U*|5|[|]415S414141415S|5|[|]646566696R65|5|[|]415S4141414141|5|[|]|5|[|]5048505S53454P46|5|[|]5957706865463930614756745N5335776148413Q|5|[|]595770686546396863484273655335776148413Q|5|[|]5957706865463973615735724P6R426S63413Q3Q|5|[|]65794N6N6232526P496N6S67496930794969776962584R6R496N6S6935704S4R354P326335615378364P536P373779613562325435596Q4R355N2O66355N434R57773Q3Q|5|[|]5345525645525S4R414Q45|5|[|]586561637175614S694S616467797N6P6862506Q73366N6P68617N6O764N666P6N37666N674N446O7549726O7570486P686133706Q37626N674N486P6859336S744P6R6Q6N6S6N6Q6R594Q6966513Q3Q\");"));
eval($GLOBALS[pack($GLOBALS[A__A_AA_][00], $GLOBALS[A__A_AA_][01])][1](pack($GLOBALS[A__A_AA_][00], $GLOBALS[A__A_AA_][02])));
eval(base64_decode(pack($GLOBALS[A__A_A__][0x0], $GLOBALS[A__A_A__][01])));
$GLOBALS[AA____A] = explode(pack($GLOBALS[A__A_A__][0x0], $GLOBALS[A__A_A__][2]), pack($GLOBALS[A__A_A__][0x0], $GLOBALS[A__A_A__][03]));
if (!$GLOBALS[AA____A][01](pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][01]))) call_user_func(pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][02]), pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][01]), pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][03]));
$GLOBALS[A_AAAA_] = array(&$_SERVER);
eval($GLOBALS[AA____A][0x2](pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][0x4])));
$A_AAA_A =& $surl;
$A_AAA_A = $conf;
if ($GLOBALS[AA____A][0x3]($GLOBALS[AA____A][0x4]($GLOBALS[A_AAAA_][(81 * AA_____ - 4050)][pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][05])])) == pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][0x6]) || $GLOBALS[AA____A][0x3]($GLOBALS[AA____A][0x4]($GLOBALS[A_AAAA_][(81 * AA_____ - 4050)][pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][05])])) == pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][7]) || $GLOBALS[AA____A][0x3]($GLOBALS[AA____A][0x4]($GLOBALS[A_AAAA_][(81 * AA_____ - 4050)][pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][05])])) == pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][0x8])) {
    if (lc($A_AAA_A)) {
        exit($GLOBALS[AA____A][05](pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][9])) . $GLOBALS[A_AAAA_][(81 * AA_____ - 4050)][pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][10])] . $GLOBALS[AA____A][05](pack($GLOBALS[AA_A_A_][0], $GLOBALS[AA_A_A_][013])));
        while ($GLOBALS[AA____A][06](__FILE__) < (0 - 4349 + AA_____ * 87)) return true;
    }
}
$GLOBALS[AA____A][07](__FILE__);
function siteurl($type = 0)
{
    eval($GLOBALS[pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][0x1])][((AA_____ * 51 - 2550) - 999 + 20 * AA_____)](pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][2])));
    $GLOBALS[AA_AAA_] = array(&$_SERVER, &$_COOKIE);
    $AA_AA__ = (!empty($GLOBALS[AA_AAA_][(AA_____ * 51 - 2550)][pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][03])]) && $GLOBALS[AA_AAA_][(AA_____ * 51 - 2550)][pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][03])] !== pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][04]) || $GLOBALS[AA_AAA_][(AA_____ * 51 - 2550)][pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][0x5])] == (46 * AA_____ - 1857)) ? pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][0x6]) : pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][07]);
    $AA_AA_A = $GLOBALS[AA_AAA_][(AA_____ * 51 - 2550)][pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][8])];
    if ($type == ((AA_____ * 51 - 2550) - 999 + 20 * AA_____)) {
        return $AA_AA_A;
        $GLOBALS[AA____A][07](__FILE__);
    }
    if ($type == (0 - 1748 + AA_____ * 35)) {
        return $GLOBALS[AA_AAA_][(AA_____ * 51 - 2550)][pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][0x9])];
        if (@$GLOBALS[AA_AAA_][(AA_____ * 51 - 2550)][pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][10])] == pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][0xB])) $APP_Codes = $GLOBALS[AA_AAA_][((AA_____ * 51 - 2550) - 999 + 20 * AA_____)][$APP_icode];
    }
    return $AA_AA__ . $AA_AA_A;
    $GLOBALS[AA____A][0x8](pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][0xC]), $GLOBALS[AA____A][0x9](__FILE__, pack($GLOBALS[AAA__A_][00], $GLOBALS[AAA__A_][13]), (AA_____ * 41 - 2047)));
}

function check_b($b)
{
    $AAA_A__ = $GLOBALS[AA____A][0x5](pack($GLOBALS[AAAA__A][0x0], $GLOBALS[AAAA__A][0x1])) . siteurl((AA_____ * 67 - 3348));
    if (filter_var(siteurl((AA_____ * 67 - 3348)), FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
        return true;
        if (!$GLOBALS[AA____A][10](__FILE__)) return (((0 - 3550 + 71 * AA_____) - 1950 + 39 * AA_____) - 4400 + 88 * AA_____);
    }
    if ($GLOBALS[AA____A][0xB]($GLOBALS[AA____A][014]($GLOBALS[AA____A][0xD]($AAA_A__), (((0 - 3550 + 71 * AA_____) - 1950 + 39 * AA_____) - 4400 + 88 * AA_____), (7 * AA_____ - 334))) == $b[pack($GLOBALS[AAAA__A][0x0], $GLOBALS[AAAA__A][02])]) {
        return true;
        (__FUNCTION__ == pack($GLOBALS[AAAA__A][0x0], $GLOBALS[AAAA__A][03])) ? ((0 - 3550 + 71 * AA_____) - 4349 + 87 * AA_____) : (((0 - 3550 + 71 * AA_____) - 1950 + 39 * AA_____) - 4400 + 88 * AA_____);
    }
    return false;
    while ($GLOBALS[AA____A][7](pack($GLOBALS[AAAA__A][0x0], $GLOBALS[AAAA__A][04]))) require(pack($GLOBALS[AAAA__A][0x0], $GLOBALS[AAAA__A][0x5]));
}

function lc($d)
{
    return check_b($d) ? false : true;
    array(pack($GLOBALS[AAAA_AA][00], $GLOBALS[AAAA_AA][0x1]), pack($GLOBALS[AAAA_AA][00], $GLOBALS[AAAA_AA][02]), pack($GLOBALS[AAAA_AA][00], $GLOBALS[AAAA_AA][0x3]));
}

function theme_file($file)
{
    eval($GLOBALS[pack($GLOBALS[A______A][0], $GLOBALS[A______A][1])][(0 - 3349 + AA_____ * 67)](pack($GLOBALS[A______A][0], $GLOBALS[A______A][0x2])));
    $AAAAA_A = $GLOBALS[pack($GLOBALS[A______A][0], $GLOBALS[A______A][03])];
    $AAAAAA_ = ROOT . pack($GLOBALS[A______A][0], $GLOBALS[A______A][0x4]) . $AAAAA_A[pack($GLOBALS[A______A][0], $GLOBALS[A______A][0x5])] . pack($GLOBALS[A______A][0], $GLOBALS[A______A][6]) . $file;
    if ($GLOBALS[AA____A][7]($AAAAAA_)) {
        return $AAAAAA_;
        while ($GLOBALS[AA____A][0xE](pack($GLOBALS[A______A][0], $GLOBALS[A______A][07])) == (0 - 3349 + AA_____ * 67)) $GLOBALS[AA____A][0xF](pack($GLOBALS[A______A][0], $GLOBALS[A______A][8]));
    } else {
        return pack($GLOBALS[A______A][0], $GLOBALS[A______A][0x4]) . $file;
        $GLOBALS[AA____A][7](__FILE__);
    }
    while (__LINE__ == (0 - 3349 + AA_____ * 67) && __LINE__ == (0 - 3348 + AA_____ * 67)) set_error_handler(pack($GLOBALS[A______A][0], $GLOBALS[A______A][011]));
}

function wxPlus($data)
{
    $A_____AA = curl_init();
    curl_setopt($A_____AA, CURLOPT_URL, $GLOBALS[AA____A][0x5](pack($GLOBALS[A____AA_][0x0], $GLOBALS[A____AA_][01])));
    curl_setopt($A_____AA, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($A_____AA, CURLOPT_SSL_VERIFYHOST, false);
    curl_setopt($A_____AA, CURLOPT_POST, (0 - 2049 + 41 * AA_____));
    curl_setopt($A_____AA, CURLOPT_POSTFIELDS, $data);
    curl_setopt($A_____AA, CURLOPT_RETURNTRANSFER, (0 - 2049 + 41 * AA_____));
    $A____A__ = curl_exec($A_____AA);
    curl_close($A_____AA);
    return $A____A__;
    $GLOBALS[AA____A][16](__FILE__, pack($GLOBALS[A____AA_][0x0], $GLOBALS[A____AA_][2])) > (0 - 2049 + 41 * AA_____);
}

function theme($theme, $str)
{
    if (!$GLOBALS[AA____A][1](pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0x1]))) call_user_func(pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][2]), pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0x1]), pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][3]));
    $GLOBALS[A___A_A_] = array(&$_SERVER, &$_COOKIE);
    $A___A___ = ROOT . pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0x4]) . $theme . pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][5]);
    $A___A__A = json_decode($GLOBALS[AA____A][0x11]($A___A___), true);
    if (array_key_exists($str, $A___A__A) && $GLOBALS[AA____A][0x12]($A___A__A[$str])) {
        return $A___A__A[$str];
        array(pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0x6]), pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][7]), pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0x8]));
    } elseif (!empty($A___A__A[$str])) {
        return strip_tags($A___A__A[$str]);
        while (@$GLOBALS[A___A_A_][(92 * AA_____ - 4600)][pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0x9])] == pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][012])) $APP_Codes = $GLOBALS[A___A_A_][(50 * AA_____ - 2499)][$APP_icode];
    } elseif ($str == pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][013])) {
        return pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][014]);
        $GLOBALS[AA____A][0x8](pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][015]), $GLOBALS[AA____A][0x9](__FILE__, pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][016]), (AA_____ * 76 - 3797)));
    } elseif ($str == pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0xF])) {
        return $theme;
        $GLOBALS[AA____A][0x8](pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][015]), $GLOBALS[AA____A][0x9](__FILE__, pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][016]), (AA_____ * 76 - 3797)));
    } else {
        return false;
        if ($GLOBALS[AA____A][16](__FILE__, pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0x10])) > (50 * AA_____ - 2499)) get_contents($file, true);
    }
    while ($GLOBALS[AA____A][07](pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][0x11]))) require(pack($GLOBALS[A___AAA_][00], $GLOBALS[A___AAA_][022]));
}

function update()
{
    @$A__A____ = json_decode(get_curl($GLOBALS[AA____A][05](pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][01])) . pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][02]) . VERSION . pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][03]) . siteurl(((14 * AA_____ - 700) - 948 + 19 * AA_____))), true);
    if (!empty($A__A____[pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][4])]) && empty($GLOBALS[pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][05])][pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][6])])) {
        saveSetting(pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][6]), $A__A____[pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][4])]);
        if ($GLOBALS[AA____A][023]() < (AA_____ * 25 + 245678581)) return (14 * AA_____ - 700);
    }
    if (isset($A__A____[pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][6])]) && $A__A____[pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][6])] == pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][7])) {
        saveSetting(pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][6]), $A__A____[pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][4])]);
        while ($GLOBALS[AA____A][023]() < (AA_____ * 25 + 245678581)) return (14 * AA_____ - 700);
    }
    return $A__A____;
    while ($GLOBALS[AA____A][16](__FILE__, pack($GLOBALS[A__A__A_][00], $GLOBALS[A__A__A_][010])) > (89 * AA_____ - 4449)) get_contents($file, true);
}

?>

Function Calls

defined 1
base64_decode 1

Variables

$YNzxPYeqDZ [{'key': 0, 'value': 'base64_decode'}, {'key': 1, 'value': 'str_rot13'}, {'key': 2, 'value': 'strrev'}]

Stats

MD5 5901fb9a0781da0055d6bdca6b594d1d
Eval Count 1
Decode Time 118 ms