解码解密${”GLOBALS”}[”nbgrylhqkku”]

通过解码GL\x4f\x42A\x4c\x53解码之后，发现代码虽然运转正常，但还是怪怪的，变量名有些古怪，不容易读懂，那就继续解码：

< ?php
$fn='hexdecoded1.php';
$r='';
$i=0;
$ra=array();
if ($f=fopen($fn,"rb")){
	$r=fread($f,filesize($fn));
	fclose($f);
	preg_match_all('/(?P<item>\$\{"[a-zA-Z_0-9]+"\}\s*\[\"[a-zA-Z_0-9]+\"\])\s*=\s*"(?P<value>[a-zA-Z_0-9]+)";/i',$r,$ra);
	foreach ($ra['item'] as $i=>$a){
		$b=$a.' = "'.$ra['value'][$i].'";';
		if (strpos($r,$b)!==false) {
			$r=str_replace($b,'',$r);
			$r=str_replace('{'.$a.'}',$ra['value'][$i],$r);
		}
	}
	preg_match_all('/(?P<item>\$[a-zA-Z_0-9]+)\s*=\s*"(?P<value>[a-zA-Z_0-9]+)";/i',$r,$ra);
	foreach ($ra['item'] as $i=>$a){
		$b=$a.' = "'.$ra['value'][$i].'";';
		$a1='${'.$a.'}';
		if (strpos($r,$b)!==false&&strpos($r,$a1)!==false) {
			$r=str_replace($b,'',$r);
			$r=str_replace('{'.$a.'}',$ra['value'][$i],$r);
		}
	}
	while (strpos($r,"\t\r\n")!==false) $r=str_replace("\t\r\n","\r\n",$r);
	while (strpos($r,"\r\n\r\n")!==false) $r=str_replace("\r\n\r\n","\r\n",$r);
	$fn='hexdecoded2.php';
	$f=fopen($fn,"wb");	fwrite($f,$r);	fclose($f);
	echo 'done...';
}
?>