Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(base64_decode('CiBnb3RvIGNrTzN6OyBIM3dJdjogJGxpbmVzMSA9IGV4cGxvZGUoIlx4YSIsICRv..
Decoded Output download
goto ckO3z; H3wIv: $lines1 = explode("\xa", $output1); goto ilvL8; qYaRD: $text = "\125\x73\145\40\x61\164\40\x79\157\165\162\40\x6f\167\x6e\x20\x72\151\x73\153\x2c\x20\164\x68\151\x73\40\x73\143\x72\x69\160\164\x20\x69\163\40\x66\x6f\x72\x20\160\x61\x69\x64\40\165\x73\x65\x72\40\x6f\x6e\x6c\171\x28\x62\141\x6e\x74\151\163\x29"; goto tRZuv; Tno4m: $randomId = generateRandomId(); goto T0RVG; eNr9Y: foreach ($lines2 as $line) { $padding = str_repeat("\40", (int) (($max_width - strlen($line)) / 2)); $colored_line = $padding; for ($i = 0; $i < strlen($line); $i++) { $colored_line .= $color2 . $highlight . $line[$i]; } $colored_output .= $colored_line . $res . "\xa"; } goto INzyT; GvEmv: $max_width = max(array_map("\163\164\162\x6c\x65\x6e", $lines1)); goto JvJGl; INzyT: function generateRandomId($length = 16) { $randomBytes = random_bytes($length / 2); return bin2hex($randomBytes); } goto Tno4m; ilvL8: $lines2 = explode("\xa", $output2); goto tN0mf; SyWUH: $output2 = shell_exec("\146\151\x67\154\145\x74\x20\x2d\x66\x20\155\151\x6e\151\40" . escapeshellarg($text2)); goto H3wIv; DC6lH: $colors1 = array("\33\133\60\73\x33\61\155", "\x1b\133\x30\x3b\x33\63\x6d", "\33\x5b\60\73\63\x32\155", "\33\133\60\73\63\x36\x6d", "\33\x5b\x30\73\x33\64\155", "\x1b\133\60\73\x33\x35\x6d"); goto ht0YK; MQJd3: $highlight = "\x1b\133\61\155"; goto y_xuY; BitnK: $modelName = getRandomModelName(); goto sT12O; BOt0t: $res = "\33\x5b\60\155"; goto DC6lH; Y0WI1: if (!commandExists("\146\151\147\154\145\x74")) { echo "\111\156\163\164\141\x6c\x6c\x69\x6e\147\40\146\151\x67\154\x65\164\56\56\56\xa"; shell_exec("\x70\153\147\x20\x69\156\163\x74\141\x6c\x6c\x20\55\171\40\x66\x69\147\x6c\145\x74"); } goto PhBz1; PhBz1: $output1 = shell_exec("\146\151\x67\154\145\164\40" . escapeshellarg($text1)); goto SyWUH; YjM_O: $text2 = "\123\115\x53\x20\102\117\115\102\x49\x4e\107"; goto BOt0t; tRZuv: $highlightedTextLightBlueBg = highlightText($text, "\x31\x30\x34"); goto u_vgR; u_vgR: $text1 = "\103\105\x52\x56\x41\x4e\124\105\123"; goto YjM_O; ht0YK: $color2 = "\33\133\60\73\x33\x36\x6d"; goto MQJd3; ckO3z: function highlightText($text, $bgColorCode, $textColorCode = "\x39\x37") { return "\33\133" . $bgColorCode . "\155" . "\x1b\133" . $textColorCode . "\x6d" . $text . "\33\133\60\x6d"; } goto qYaRD; JvJGl: foreach ($lines1 as $line) { $colored_line = ''; $color_index = 0; for ($i = 0; $i < strlen($line); $i++) { $colored_line .= $colors1[$color_index % count($colors1)] . $line[$i]; $color_index++; } $colored_output .= $colored_line . $res . "\12"; } goto eNr9Y; T0RVG: function getRandomModelName() { $modelNames = array("\x47\x61\x6c\x61\x78\x79\40\123\62\64", "\120\x69\x78\145\154\x20\70", "\117\x6e\145\120\x6c\165\x73\x20\61\x31", "\130\x70\x65\x72\151\141\40\65\40\x56", "\x4d\x6f\x74\x6f\x20\x47\x20\120\x6f\167\145\162", "\122\x65\144\155\151\x20\x4e\157\x74\x65\40\x31\62", "\x4e\157\x6b\x69\x61\x20\x47\65\60", "\x4f\160\160\157\x20\106\x69\156\x64\40\130\x35", "\126\x69\x76\x6f\40\x56\62\63", "\x52\x65\141\x6c\155\145\40\x47\124\x20\62", "\x41\163\x75\163\40\132\145\156\106\157\x6e\x65\x20\x39", "\x48\x75\x61\x77\x65\x69\x20\120\x35\x30", "\x48\x6f\156\x6f\162\40\x4d\141\x67\151\143\40\64", "\x4c\x47\x20\126\145\154\x76\145\x74", "\123\x6f\x6e\171\40\130\160\145\x72\x69\141\40\x31\40\111\x49\x49"); return $modelNames[array_rand($modelNames)]; } goto BitnK; tN0mf: $colored_output = ''; goto GvEmv; y_xuY: function commandExists($command) { $result = shell_exec("\143\x6f\155\x6d\141\156\x64\40\55\x76\40" . escapeshellarg($command)); return !empty($result); } goto Y0WI1; sT12O: Did this file decode correctly?
Original Code
<?php eval(base64_decode('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')); ?>Function Calls
| base64_decode | 1 |
Stats
| MD5 | b951339bb34038a80bc65bb709dccf6e |
| Eval Count | 1 |
| Decode Time | 78 ms |