Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
$_="\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65";
$__="\x73\x74\x72\x72\x65\x76";
$___="\x73\x74\x72\x5f\x72\x6f\x74\x31\x33";
$____="\x67\x7a\x69\x6e\x66\x6c\x61\x74\x65";
$_____="\x63\x68\x72";
$______="\x6f\x72\x64";
$_______="\x66\x69\x6c\x65\x5f\x70\x75\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73";
$________="\x66\x69\x6c\x65\x5f\x65\x78\x69\x73\x74\x73";
$__________="\x75\x6e\x6c\x69\x6e\x6b";
$___________="\x73\x79\x73\x5f\x67\x65\x74\x5f\x74\x65\x6d\x70\x5f\x64\x69\x72";
$____________="\x44\x49\x52\x45\x43\x54\x4f\x52\x59\x5f\x53\x45\x50\x41\x52\x41\x54\x4f\x52";
@error_reporting(0);@ini_set("\x64\x69\x73\x70\x6c\x61\x79\x5f\x65\x72\x72\x6f\x72\x73","0");
$_1=[];$_2=[];for($_z=0;$_z<0x32;$_z++){$_1[$_z]=@$_____(rand(0x41,0x5A));$_2[$_z]=md5(microtime().$_z);}
$_A=((((0x5F&0x3F)^0x1A)==0x05)?1:0);$_B=(((0x7E|0x11)&0x5F)==0x5F?1:0);$_C=((strlen("\x61\x62\x63")*2)==6?1:0);$_D=(((3<<2)+1)==13?1:0);
$_E=[];
$_E[]=((((0xA*0xA)+(0x1))^0x0)&0xFF);
$_E[]=(((0x8*0xC)+(0x3))&0xFF);
$_E[]=((0xD*0x8)&0xFF);
$_E[]=(((0x6*0x10)+(0xF))&0xFF);
$_E[]=((0x1<<0x5)&0xFF);
$_E[]=(((0x4*0x8)+(0x2))&0xFF);
$_E[]=(((0xA*0xA)-(0x3))&0xFF);
$_E[]=((0xD*0x8)&0xFF);
$_E[]=(((0x6*0x10)+(0xD))&0xFF);
$_E[]=((((0xA*0xA)+(0x1))^0x0)&0xFF);
$_E[]=(((0x7*0x10)+(0x4))&0xFF);
$_E[]=(((0x4*0x8)+(0x2))&0xFF);
$_E[]=(((0x4*0x10)-(0x5))&0xFF);
$_J="";$_K=$_A+$_B+$_C+$_D;if($_K==0x4){foreach($_E as $_L){$_J.=@$_____($_L);}}
$_M=strlen($_J);$_N=@$______(@$_J[0x0]);$_O=@$______(@$_J[$_M-0x1]);
if($_M==0xD&&$_N==0x65&&$_O==0x3B){$_P=@$___________().@constant($____________).md5(time().rand())."\x2e\x70\x68\x70";$_Q="\x3c\x3f\x70\x68\x70\x20".$_J;@$_______($_P,$_Q);if(@$________($_P)){@include($_P);@$__________($_P);}}
$_R=[];for($_S=0;$_S<0x64;$_S++){$_R[$_S]=@$_____((rand(0x20,0x7E)));}$_T=implode("",$_R);$_W=function($_X){return md5($_X).sha1($_X);};$_Y=$_W($_J.$_T);if(strlen($_Y)<0xA){echo $_Y;}

Show other level

Decrypted code level 1:

$_="base64_decode";
$__="strrev";
$___="str_rot13";
$____="gzinflate";
$_____="chr";
$______="ord";
$_______="file_put_contents";
$________="file_exists";
$__________="unlink";
$___________="sys_get_temp_dir";
$____________="DIRECTORY_SEPARATOR";
@error_reporting(0);@ini_set("display_errors","0");
$_1=[];$_2=[];for($_z=0;$_z<0x32;$_z++){$_1[$_z]=@$_____(rand(0x41,0x5A));$_2[$_z]=md5(microtime().$_z);}
$_A=((((0x5F&0x3F)^0x1A)==0x05)?1:0);$_B=(((0x7E|0x11)&0x5F)==0x5F?1:0);$_C=((strlen("abc")*2)==6?1:0);$_D=(((3<<2)+1)==13?1:0);
$_E=[];
$_E[]=((((0xA*0xA)+(0x1))^0x0)&0xFF);
$_E[]=(((0x8*0xC)+(0x3))&0xFF);
$_E[]=((0xD*0x8)&0xFF);
$_E[]=(((0x6*0x10)+(0xF))&0xFF);
$_E[]=((0x1<<0x5)&0xFF);
$_E[]=(((0x4*0x8)+(0x2))&0xFF);
$_E[]=(((0xA*0xA)-(0x3))&0xFF);
$_E[]=((0xD*0x8)&0xFF);
$_E[]=(((0x6*0x10)+(0xD))&0xFF);
$_E[]=((((0xA*0xA)+(0x1))^0x0)&0xFF);
$_E[]=(((0x7*0x10)+(0x4))&0xFF);
$_E[]=(((0x4*0x8)+(0x2))&0xFF);
$_E[]=(((0x4*0x10)-(0x5))&0xFF);
$_J="";$_K=$_A+$_B+$_C+$_D;if($_K==0x4){foreach($_E as $_L){$_J.=@$_____($_L);}}
$_M=strlen($_J);$_N=@$______(@$_J[0x0]);$_O=@$______(@$_J[$_M-0x1]);
if($_M==0xD&&$_N==0x65&&$_O==0x3B){$_P=@$___________().@constant($____________).md5(time().rand()).".php";$_Q="".$_J;@$_______($_P,$_Q);if(@$________($_P)){@include($_P);@$__________($_P);}}
$_R=[];for($_S=0;$_S<0x64;$_S++){$_R[$_S]=@$_____((rand(0x20,0x7E)));}$_T=implode("",$_R);$_W=function($_X){return md5($_X).sha1($_X);};$_Y=$_W($_J.$_T);if(strlen($_Y)<0xA){echo $_Y;}

Decrypted code level 2:


"base64_decode"_="strrev";
"base64_decode"__="str_rot13";
"base64_decode"___="gzinflate";
"base64_decode"____="chr";
"base64_decode"_____="ord";
"base64_decode"______="file_put_contents";
"base64_decode"_______="file_exists";
"base64_decode"_________="unlink";
"base64_decode"__________="sys_get_temp_dir";
"base64_decode"___________="DIRECTORY_SEPARATOR";
@error_reporting(0);@ini_set("display_errors","0");
"base64_decode"1=[];"base64_decode"2=[];for("base64_decode"z=0;"base64_decode"z<0x32;"base64_decode"z++){"base64_decode"1["base64_decode"z]=@"base64_decode"____(rand(0x41,0x5A));"base64_decode"2["base64_decode"z]=md5(microtime()."base64_decode"z);}
"base64_decode"A=((((0x5F&0x3F)^0x1A)==0x05)?1:0);"base64_decode"B=(((0x7E|0x11)&0x5F)==0x5F?1:0);"base64_decode"C=((strlen("abc")*2)==6?1:0);"base64_decode"D=(((3<<2)+1)==13?1:0);
"base64_decode"E=[];
"base64_decode"E[]=((((0xA*0xA)+(0x1))^0x0)&0xFF);
"base64_decode"E[]=(((0x8*0xC)+(0x3))&0xFF);
"base64_decode"E[]=((0xD*0x8)&0xFF);
"base64_decode"E[]=(((0x6*0x10)+(0xF))&0xFF);
"base64_decode"E[]=((0x1<<0x5)&0xFF);
"base64_decode"E[]=(((0x4*0x8)+(0x2))&0xFF);
"base64_decode"E[]=(((0xA*0xA)-(0x3))&0xFF);
"base64_decode"E[]=((0xD*0x8)&0xFF);
"base64_decode"E[]=(((0x6*0x10)+(0xD))&0xFF);
"base64_decode"E[]=((((0xA*0xA)+(0x1))^0x0)&0xFF);
"base64_decode"E[]=(((0x7*0x10)+(0x4))&0xFF);
"base64_decode"E[]=(((0x4*0x8)+(0x2))&0xFF);
"base64_decode"E[]=(((0x4*0x10)-(0x5))&0xFF);
"base64_decode"J="";"base64_decode"K="base64_decode"A+"base64_decode"B+"base64_decode"C+"base64_decode"D;if("base64_decode"K==0x4){foreach("base64_decode"E as "base64_decode"L){"base64_decode"J.=@"base64_decode"____("base64_decode"L);}}
"base64_decode"M=strlen("base64_decode"J);"base64_decode"N=@"base64_decode"_____(@"base64_decode"J[0x0]);"base64_decode"O=@"base64_decode"_____(@"base64_decode"J["base64_decode"M-0x1]);
if("base64_decode"M==0xD&&"base64_decode"N==0x65&&"base64_decode"O==0x3B){"base64_decode"P=@"base64_decode"__________().@constant("base64_decode"___________).md5(time().rand()).".php";"base64_decode"Q="base64_decode"J;@"base64_decode"______("base64_decode"P,"base64_decode"Q);if(@"base64_decode"_______("base64_decode"P)){@include("base64_decode"P);@"base64_decode"_________("base64_decode"P);}}
"base64_decode"R=[];for("base64_decode"S=0;"base64_decode"S<0x64;"base64_decode"S++){"base64_decode"R["base64_decode"S]=@"base64_decode"____((rand(0x20,0x7E)));}"base64_decode"T=implode("","base64_decode"R);"base64_decode"W=function("base64_decode"X){return md5("base64_decode"X).sha1("base64_decode"X);};"base64_decode"Y="base64_decode"W("base64_decode"J."base64_decode"T);if(strlen("base64_decode"Y)<0xA){echo "base64_decode"Y;}

Recent submissions:

<?php $_="\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65"; $__="\x73\x74\x72\x72\x... <?php // FINAL NIGHTMARE - 24+ saat analiz suresi hedefi // "echo ahmet" gizli // Kat... eval("".urldecode(base64_decode(gzuncompress(base64_decode(urldecode($Fls)))))."");... _0x2ba207,_0xcf7b15){function _0x28c777(_0x2d10fd,_0x1e47d7,_0x2a8c88,_0xbd6a91,_0xcab10c)... <?php /* This file is protected by copyright law and provided under license. Reverse engin... Line 1283: a08fa2fcdd12013a3970f3f632be94ec: $F88f39f6dd753f755da2ba80e581e1fb = array_c... */include "\143\157\155\160\162\145\163\163\x2e\172\154\151\142\x3a\x2f\x2f\x2e\x2f\167\16... <script> (function() {var uHo4sc = ["\x3b","\x27","\x3e","\x22","\x34","\x70","\x6d","\x2... <script> (function() {var uHo4sc = ["\x3b","\x27","\x3e","\x22","\x34","\x70","\x6d","\x2... (function() {var uHo4sc = ["\x3b","\x27","\x3e","\x22","\x34","\x70","\x6d","\x2f","\x6f",...