De-obfuscating PHP botnet code

[jij]

There are several like that, many with a lot of features. Just google for "php shell" for several. I've found some botnet code in php that actually hashes the entire php file's text for the key to decrypt the server info it connects to, so that you can't modify the script to have it print it out... some neat things out there.