Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
var _0x1b8d = ["http://93.190.93.37", "http://87.255.226.81:88", "/widget/java_60/", "lite..
Decoded Output download
<? var _0x1b8d = ["http://93.190.93.37", "http://87.255.226.81:88", "/widget/java_60/", "lite", "START", "GET", "open", "send", "onreadystatechange", "readyState", "status", "START_200", "img", "createElement", "id", "logo", "width", "960px", "height", "540px", "src", "http://dev.xsmart.tv/widget/logo/logo.jpg", "appendChild", "body", "getElementsByTagName", "document.getElementById(\"logo\").style.display=\"none\";", "START_404", "addJavaScript(URLserver[1]);", "START JAVA ", "script", "language", "javascript", "type", "text/javascript", "Main.js", "head", "XURL.js", "list.js", "http://87.255.226.81:88/widget/logo/logo.jpg"];
var _0xabc7 = [_0x1b8d[0], _0x1b8d[1], _0x1b8d[2]];
var URLserver = [_0xabc7[0], _0xabc7[1]];
var URLjava = _0xabc7[2];
var _0xc1c4 = [_0x1b8d[3]];
var INDEX = _0xc1c4[0];
var Timeout;
function start_open() {
alert(_0x1b8d[4]);
var _0xab6dx8;
var _0xab6dx9 = URLserver[0];
var _0xab6dxa = new XMLHttpRequest();
_0xab6dxa[_0x1b8d[6]](_0x1b8d[5], _0xab6dx9, true);
_0xab6dxa[_0x1b8d[7]](null);
_0xab6dxa[_0x1b8d[8]] = function () {
if (_0xab6dxa[_0x1b8d[9]] == 4) {
if (_0xab6dxa[_0x1b8d[10]] == 200) {
alert(_0x1b8d[11]);
var _0xab6dxb = document[_0x1b8d[13]](_0x1b8d[12]);
_0xab6dxb[_0x1b8d[14]] = _0x1b8d[15];
_0xab6dxb[_0x1b8d[16]] = _0x1b8d[17];
_0xab6dxb[_0x1b8d[18]] = _0x1b8d[19];
_0xab6dxb[_0x1b8d[20]] = _0x1b8d[21];
document[_0x1b8d[24]](_0x1b8d[23])[0][_0x1b8d[22]](_0xab6dxb);
setTimeout(_0x1b8d[25], 5000);
} else {
alert(_0x1b8d[26]);
addJavaScript(URLserver[1]);
};
};
};
Timeout = setTimeout(_0x1b8d[27], 3000);
};
function addJavaScript(_0xab6dx9) {
alert(_0x1b8d[28] + _0xab6dx9);
clearTimeout(Timeout);
var _0xab6dxd = document[_0x1b8d[13]](_0x1b8d[29]);
_0xab6dxd[_0x1b8d[30]] = _0x1b8d[31];
_0xab6dxd[_0x1b8d[32]] = _0x1b8d[33];
_0xab6dxd[_0x1b8d[20]] = _0xab6dx9 + URLjava + _0x1b8d[34];
document[_0x1b8d[24]](_0x1b8d[35])[0][_0x1b8d[22]](_0xab6dxd);
var _0xab6dxe = document[_0x1b8d[13]](_0x1b8d[29]);
_0xab6dxe[_0x1b8d[30]] = _0x1b8d[31];
_0xab6dxe[_0x1b8d[32]] = _0x1b8d[33];
_0xab6dxd[_0x1b8d[20]] = _0xab6dx9 + URLjava + _0x1b8d[36];
document[_0x1b8d[24]](_0x1b8d[35])[0][_0x1b8d[22]](_0xab6dxe);
var _0xab6dxf = document[_0x1b8d[13]](_0x1b8d[29]);
_0xab6dxf[_0x1b8d[30]] = _0x1b8d[31];
_0xab6dxf[_0x1b8d[32]] = _0x1b8d[33];
_0xab6dxf[_0x1b8d[20]] = _0xab6dx9 + URLjava + _0x1b8d[37];
document[_0x1b8d[24]](_0x1b8d[35])[0][_0x1b8d[22]](_0xab6dxf);
var _0xab6dxb = document[_0x1b8d[13]](_0x1b8d[12]);
_0xab6dxb[_0x1b8d[14]] = _0x1b8d[15];
_0xab6dxb[_0x1b8d[16]] = _0x1b8d[17];
_0xab6dxb[_0x1b8d[18]] = _0x1b8d[19];
_0xab6dxb[_0x1b8d[20]] = _0x1b8d[38];
document[_0x1b8d[24]](_0x1b8d[23])[0][_0x1b8d[22]](_0xab6dxb);
setTimeout(_0x1b8d[25], 5000);
}; ?>
Did this file decode correctly?
Original Code
var _0x1b8d = ["http://93.190.93.37", "http://87.255.226.81:88", "/widget/java_60/", "lite", "START", "GET", "open", "send", "onreadystatechange", "readyState", "status", "START_200", "img", "createElement", "id", "logo", "width", "960px", "height", "540px", "src", "http://dev.xsmart.tv/widget/logo/logo.jpg", "appendChild", "body", "getElementsByTagName", "document.getElementById(\"logo\").style.display=\"none\";", "START_404", "addJavaScript(URLserver[1]);", "START JAVA ", "script", "language", "javascript", "type", "text/javascript", "Main.js", "head", "XURL.js", "list.js", "http://87.255.226.81:88/widget/logo/logo.jpg"];
var _0xabc7 = [_0x1b8d[0], _0x1b8d[1], _0x1b8d[2]];
var URLserver = [_0xabc7[0], _0xabc7[1]];
var URLjava = _0xabc7[2];
var _0xc1c4 = [_0x1b8d[3]];
var INDEX = _0xc1c4[0];
var Timeout;
function start_open() {
alert(_0x1b8d[4]);
var _0xab6dx8;
var _0xab6dx9 = URLserver[0];
var _0xab6dxa = new XMLHttpRequest();
_0xab6dxa[_0x1b8d[6]](_0x1b8d[5], _0xab6dx9, true);
_0xab6dxa[_0x1b8d[7]](null);
_0xab6dxa[_0x1b8d[8]] = function () {
if (_0xab6dxa[_0x1b8d[9]] == 4) {
if (_0xab6dxa[_0x1b8d[10]] == 200) {
alert(_0x1b8d[11]);
var _0xab6dxb = document[_0x1b8d[13]](_0x1b8d[12]);
_0xab6dxb[_0x1b8d[14]] = _0x1b8d[15];
_0xab6dxb[_0x1b8d[16]] = _0x1b8d[17];
_0xab6dxb[_0x1b8d[18]] = _0x1b8d[19];
_0xab6dxb[_0x1b8d[20]] = _0x1b8d[21];
document[_0x1b8d[24]](_0x1b8d[23])[0][_0x1b8d[22]](_0xab6dxb);
setTimeout(_0x1b8d[25], 5000);
} else {
alert(_0x1b8d[26]);
addJavaScript(URLserver[1]);
};
};
};
Timeout = setTimeout(_0x1b8d[27], 3000);
};
function addJavaScript(_0xab6dx9) {
alert(_0x1b8d[28] + _0xab6dx9);
clearTimeout(Timeout);
var _0xab6dxd = document[_0x1b8d[13]](_0x1b8d[29]);
_0xab6dxd[_0x1b8d[30]] = _0x1b8d[31];
_0xab6dxd[_0x1b8d[32]] = _0x1b8d[33];
_0xab6dxd[_0x1b8d[20]] = _0xab6dx9 + URLjava + _0x1b8d[34];
document[_0x1b8d[24]](_0x1b8d[35])[0][_0x1b8d[22]](_0xab6dxd);
var _0xab6dxe = document[_0x1b8d[13]](_0x1b8d[29]);
_0xab6dxe[_0x1b8d[30]] = _0x1b8d[31];
_0xab6dxe[_0x1b8d[32]] = _0x1b8d[33];
_0xab6dxd[_0x1b8d[20]] = _0xab6dx9 + URLjava + _0x1b8d[36];
document[_0x1b8d[24]](_0x1b8d[35])[0][_0x1b8d[22]](_0xab6dxe);
var _0xab6dxf = document[_0x1b8d[13]](_0x1b8d[29]);
_0xab6dxf[_0x1b8d[30]] = _0x1b8d[31];
_0xab6dxf[_0x1b8d[32]] = _0x1b8d[33];
_0xab6dxf[_0x1b8d[20]] = _0xab6dx9 + URLjava + _0x1b8d[37];
document[_0x1b8d[24]](_0x1b8d[35])[0][_0x1b8d[22]](_0xab6dxf);
var _0xab6dxb = document[_0x1b8d[13]](_0x1b8d[12]);
_0xab6dxb[_0x1b8d[14]] = _0x1b8d[15];
_0xab6dxb[_0x1b8d[16]] = _0x1b8d[17];
_0xab6dxb[_0x1b8d[18]] = _0x1b8d[19];
_0xab6dxb[_0x1b8d[20]] = _0x1b8d[38];
document[_0x1b8d[24]](_0x1b8d[23])[0][_0x1b8d[22]](_0xab6dxb);
setTimeout(_0x1b8d[25], 5000);
};
Function Calls
None |
Stats
MD5 | 6f037f3fe79fa446381e982cd0e328fa |
Eval Count | 0 |
Decode Time | 74 ms |