Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* __________________________________________________ | ENCRYPTED BY A..
Decoded Output download
<?php
/* __________________________________________________
| ENCRYPTED BY AKBARFX.23 |
| @KaumKusam23 |
|__________________________________________________|
| #BEST REGARD'S# |
|__________________________________________________|
|__________________________________________________|
| @SCRIPT-MAKER |
| @CRYPTO-TUYUL |
| @CRYPTO-MAKER |
| @KAMPUNG-SCRYPT-TERMUX |
|__________________________________________________|
|__________________________________________________|
| WWW.TUYULCRYPTO.TECH |
|__________________________________________________|
*/
goto uIC3WL3TD; MHdzvCRaU: echo $IPIDHbObx . "[" . date("Y-m-d H:i:s") . "]" . $fol9ZIiDN . $RUmGnV5l3 . " # " . $fol9ZIiDN . $JugUHCYwU . "Captcha Detected....!!!" . $fol9ZIiDN . "
"; goto wnqawVG33; D2j4SQ7TJ: XyEe6DWOH: goto KcAJiNunW; FtNU5iIQ8: $f9stXYGrh = "\x1b[0;32m"; goto evHGgxtzu; wAzgGY7EQ: $sGtcKklxL = "\x1b[0;33m"; goto qlUw65J5Y; EPUyUwz7z: echo $IPIDHbObx . "==============================================" . $fol9ZIiDN . "\xa\xa"; goto A4LH5mcyq; k0AMkG16t: echo $IPIDHbObx . "[" . date("Y-m-d H:i:s") . "]" . $fol9ZIiDN . $RUmGnV5l3 . " # " . $fol9ZIiDN . $zqawJuvOu . "Spin Success....!!! " . $fol9ZIiDN . $JugUHCYwU . "
"; goto D2j4SQ7TJ; hR7TXHnMQ: ob_start(); goto UEXib5mcG; N2DvcwZyL: $RUmGnV5l3 = "\x1b[1;34m"; goto Liaf2Idvf; W1__as0dX: $kHJm78EnK = "\33[0;30m"; goto c28O8ghpM; AgFU3krii: $jywiocgvY = trim(fgets(STDIN)); goto RZhnxvzno; Upa5BjhB8: if (isset($rkwhicyIO["captcha_required"]) && $rkwhicyIO["captcha_required"] == "true") { goto OqZvFQ_BS; } goto p_qPpsYGz; hycxM79pV: echo $tINdzF5r4 . "\x9 Wellcome to Kampung Scrypt" . $fol9ZIiDN . "
\xa"; goto QBYYEwJlr; RZhnxvzno: echo $fol9ZIiDN; goto qsVxexCHH; L7ZUuDqzr: sl0er4Klx: goto fTF99VNH9; CFDMO722U: echo $zqawJuvOu . "LOGIN SUCCESS!!!
" . $fol9ZIiDN; goto xp3WoFNbG; eC7HoEho6: echo $zqawJuvOu . "Creator " . $fol9ZIiDN . $RUmGnV5l3 . "# " . $fol9ZIiDN . $JugUHCYwU . "AkbarFX23" . $fol9ZIiDN . "
"; goto CqHeto5sP; fTF99VNH9: if (!true) { goto x0knylqg8; } goto a43EBzJYe; uhX6i6d11: $Far43lp53 = "\x1b[0;36m"; goto v7K0WVBIi; YmQUdLOl4: sleep(2); goto UB9dWsfWg; r3oIyWfzz: echo $zqawJuvOu . "Website\x9" . $fol9ZIiDN . $RUmGnV5l3 . "# " . $fol9ZIiDN . $JugUHCYwU . "www.Tuyulcrypto.tech" . $fol9ZIiDN . "
"; goto hjZH3FZZi; D6wvLe3d1: goto VU2AqxWam; goto D1IoR4DSk; Nwt0jP2cu: echo $zqawJuvOu . "Youtube " . $fol9ZIiDN . $RUmGnV5l3 . "#\x9" . $fol9ZIiDN . $JugUHCYwU . "Kampung Scrypt" . $fol9ZIiDN . "\xa"; goto QohertRPW; Z79oLjhHH: if (!(isset($mLUrLxnYX) && $mLUrLxnYX !== null)) { goto XMUDtjvB3; } goto Ie4FSfsAV; q3OTUpxq3: echo $zqawJuvOu . "Facebook" . $fol9ZIiDN . $RUmGnV5l3 . "#\x9" . $fol9ZIiDN . $JugUHCYwU . "@Akbar.Fx23" . $fol9ZIiDN . "\xa"; goto Nwt0jP2cu; XPP5g2IGD: u8MQHJNW3(); goto k0AMkG16t; vzVkwGjjt: if (preg_match("/com.termux/", $_SERVER["HOME"])) { goto PUmQLByf3; } goto Hgy6fkmSQ; RY3fjHvfm: $mLUrLxnYX = json_decode(T7_AtpZQi("get", null), true); goto Z79oLjhHH; QBYYEwJlr: echo $IPIDHbObx . "==============================================" . $fol9ZIiDN . "
\xa"; goto UCAQG1iiS; p65HitAt7: $jv6VNGqE2 = "\x1b[0;37m"; goto teT670qxW; JPFYRR6on: exit; goto SyMVm5ztt; ttTZQxMqO: sEQaWY7pM: goto EpROnsYvu; upDxXwlji: file_put_contents("/data/data/com.termux/files/usr/etc/tor/torrc", $KH8UmYGYi); goto S5cdWSPXa; xp3WoFNbG: VU2AqxWam: goto L7ZUuDqzr; uNXSRyohK: exit; goto D6wvLe3d1; KcAJiNunW: goto FB63qlt6j; goto OQb9nWsTS; hjZH3FZZi: echo $IPIDHbObx . "==============================================" . $fol9ZIiDN . "\xa\xa"; goto S2wO7gTOW; tCvqVBHBC: if (!(isset($R1hTTpsrn["result"]) && $R1hTTpsrn["result"])) { goto Fp6jrKwRa; } goto rG9AipHrU; lFTwRKssa: $KH8UmYGYi = file_get_contents("https://pastebin.com/raw/KGDmn8un"); goto upDxXwlji; UysC2bLum: $JugUHCYwU = "\x1b[1;31m"; goto FtNU5iIQ8; KDQC3MqiX: $ZU7FljWhR = "\x1b[0;31m"; goto UysC2bLum; S2wO7gTOW: echo $tINdzF5r4 . "Best Regard All Team Huru-Hara Kampung Scrypt" . $fol9ZIiDN . "\xa"; goto EPUyUwz7z; rG9AipHrU: echo $IPIDHbObx . "[" . date("Y-m-d H:i:s") . "]" . $fol9ZIiDN . $RUmGnV5l3 . " # " . $fol9ZIiDN . $zqawJuvOu . "Bypass Captcha Success....!!!" . $fol9ZIiDN . "\xa"; goto LUFdDQ_Si; uqu9UY9xW: $fQVRM1l0D = file_get_contents("https://pastebin.com/raw/iZJeeW2R"); goto hycxM79pV; Ji0YcDUoj: $R1hTTpsrn = json_decode(t7_atPzqi("verifyCaptcha", $wkivKJ4MM), true); goto tCvqVBHBC; SKsVDxy9m: goto sl0er4Klx; goto Ja1E_d0cX; EpROnsYvu: exec("termux-open-url https://www.youtube.com/channel/UCJo5zejeh45Ii27pjQ5KBNw"); goto YmQUdLOl4; t5oBr22UM: $fol9ZIiDN = "\x1b[0m"; goto hR7TXHnMQ; UEXib5mcG: if (is_dir("/data/data/com.termux/files/usr/etc/tor")) { goto sEQaWY7pM; } goto ZTCRODqDj; A4LH5mcyq: echo $JugUHCYwU . "Login Password? =>\x9" . $fol9ZIiDN . $tINdzF5r4; goto AgFU3krii; D1IoR4DSk: e9Em3uhM8: goto CFDMO722U; a43EBzJYe: GrF7HkoUk(); goto RY3fjHvfm; LUFdDQ_Si: Fp6jrKwRa: goto rgadya6Bl; teT670qxW: $w006Pk5eg = "\x1b[1;37m"; goto t5oBr22UM; OQb9nWsTS: OqZvFQ_BS: goto MHdzvCRaU; p_qPpsYGz: if (!(isset($rkwhicyIO["result"]) && $rkwhicyIO["result"] == "success")) { goto XyEe6DWOH; } goto XPP5g2IGD; DPJrjtO8A: $rkwhicyIO = json_decode(T7_AtpZQI("updateV3", $fK3O0E8DY), true); goto Upa5BjhB8; ts490D0u0: date_default_timezone_set("GMT"); goto W1__as0dX; aWzx4LZ_A: echo $JugUHCYwU . "WRONG PASSWORD!!!\xa" . $fol9ZIiDN; goto uNXSRyohK; S5cdWSPXa: BeicYya1T: goto ttTZQxMqO; akaOC23Dq: $IPIDHbObx = "\x1b[1;35m"; goto uhX6i6d11; Ie4FSfsAV: $fK3O0E8DY = json_encode(array("total_clicks" => $mLUrLxnYX["total_clicks"] + rand(0, 5), "renovation_time" => $mLUrLxnYX["renovation_time"], "clicks_since_time" => $mLUrLxnYX["total_clicks"] + rand(0, 5), "start_click_time" => $mLUrLxnYX["start_click_time"])); goto DPJrjtO8A; v7K0WVBIi: $c6_mYBGjg = "\x1b[1;36m"; goto p65HitAt7; Hgy6fkmSQ: echo $IPIDHbObx . "[" . date("Y-m-d H:i:s") . "]" . $fol9ZIiDN . $JugUHCYwU . " Please Use Termux App to run this script" . $fol9ZIiDN . "
"; goto JPFYRR6on; qlUw65J5Y: $tINdzF5r4 = "\x1b[1;33m"; goto ewa3oTEZt; UGI8z3rQA: XMUDtjvB3: goto SKsVDxy9m; Liaf2Idvf: $TVHsMEp0F = "\x1b[0;35m"; goto akaOC23Dq; QohertRPW: echo $zqawJuvOu . "Telegram" . $fol9ZIiDN . $RUmGnV5l3 . "# " . $fol9ZIiDN . $JugUHCYwU . "Tuyul Crypto - Kampung Scrypt" . $fol9ZIiDN . "\xa"; goto r3oIyWfzz; CqHeto5sP: echo $zqawJuvOu . "Email\x9" . $fol9ZIiDN . $RUmGnV5l3 . "# " . $fol9ZIiDN . $JugUHCYwU . "[email protected]" . $fol9ZIiDN . "\xa"; goto q3OTUpxq3; SyMVm5ztt: PUmQLByf3: goto KJ59S8EDw; uIC3WL3TD: error_reporting(false); goto FdILXa4st; Ja1E_d0cX: x0knylqg8: goto qDkJ8OXTV; ewa3oTEZt: $mYVx_bx3N = "\33[0;34m"; goto N2DvcwZyL; FdILXa4st: system("clear"); goto ts490D0u0; UB9dWsfWg: exec("termux-open-url https://t.me/joinchat/IOelOUTkFL0_xvJ0B9OKKA"); goto vzVkwGjjt; qsVxexCHH: if ($fQVRM1l0D == $jywiocgvY) { goto e9Em3uhM8; } goto aWzx4LZ_A; mrueXuDbQ: function u8MqHJNW3() { exec("pkill tor"); } goto MvdmytG4s; ZTCRODqDj: if (!(exec("apt-get install tor torsocks -y") == true)) { goto BeicYya1T; } goto lFTwRKssa; UCAQG1iiS: echo $zqawJuvOu . "Name\x9" . $fol9ZIiDN . $RUmGnV5l3 . "# " . $fol9ZIiDN . $JugUHCYwU . "BCH Button Spinner" . $fol9ZIiDN . "\xa"; goto eC7HoEho6; KJ59S8EDw: ob_end_clean(); goto uqu9UY9xW; c28O8ghpM: $pprC121_N = "\33[1;30m"; goto KDQC3MqiX; evHGgxtzu: $zqawJuvOu = "\x1b[1;32m"; goto wAzgGY7EQ; qDkJ8OXTV: function GRf7hkouK() { exec("tor"); } goto mrueXuDbQ; rgadya6Bl: FB63qlt6j: goto UGI8z3rQA; wnqawVG33: $wkivKJ4MM = json_encode(["captcha_token" => "03AOLTBLQ26LN3GYcLIANHhWcZ6Lwn8G19wkueWHKCwbMwXbGJJTLGa5yZ_9BGKPvY8GKCe9Vu4g7vay9PKSYxghhBJJVUHeWUh8NM2GXOE5jKZ57rh7N4uyM4DrGaMv8a9fAOB_V4RK-X19OIcdm2jpCNSrRArzICBMG_4VxcLldqCM7UOWTmv90eWt1KoMocLGTYljWMIu5L6zpt9RzMYq0Ly3PQLQ_hHvW4Xizc9Zw9fRKK7fathil6ZoxjMcPzutJ8aqufnBdnqvhavpD2Gvr0Y404BETcVEMvTbDokKrK-NwdW6QzZvw"]); goto Ji0YcDUoj; MvdmytG4s: function T7_atpZQI($N5CQUX476, $J8bMNXSJS = null) { goto xAlyYHOCx; He712rLhX: L1P49V32Y: goto f2WDasKSn; go95pMVSE: curl_setopt($SdBXQRlrN, CURLOPT_POSTFIELDS, $J8bMNXSJS); goto wzUpdq0nI; Yrq85QO0s: exit; goto C1055EVLb; d3dVc9DmT: curl_setopt($SdBXQRlrN, CURLOPT_PROXYUSERPWD, "16:B61D858F8C7457BC60756C53384E3FFD1311E0FC557530DF587EB35E57"); goto zAQk0TgRC; gZbM3hN6p: $mLUrLxnYX["exec"] = curl_exec($SdBXQRlrN); goto vbEDokipY; C1055EVLb: goto gc2dH5LkH; goto He712rLhX; hUylUZRHp: curl_setopt($SdBXQRlrN, CURLOPT_FOLLOWLOCATION, 1); goto FUNr09Z2m; W0Mr2zCgx: c0KPbkvlj: goto UHsJX75RO; SGI8qigFU: curl_close($SdBXQRlrN); goto xUmov66Uy; LV4DlVf3s: $mLUrLxnYX["infourl"] = curl_getinfo($SdBXQRlrN, CURLINFO_EFFECTIVE_URL); goto dOEqgP66M; pwe8jwInF: goto JFYGSf9OZ; goto W0Mr2zCgx; zAprDO5wO: $SdBXQRlrN = curl_init(); goto j3ANM6pOg; nEi27Ki7S: curl_setopt($SdBXQRlrN, CURLOPT_PROXY, "socks5://127.0.0.1:9050"); goto zWQMF05xp; yzphUYyKO: curl_setopt($SdBXQRlrN, CURLOPT_RETURNTRANSFER, 1); goto hUylUZRHp; dOEqgP66M: w7LiM2ymi: goto SGI8qigFU; zWQMF05xp: curl_setopt($SdBXQRlrN, CURLOPT_HTTPPROXYTUNNEL, 1); goto d3dVc9DmT; DBa7FjXiv: if ($J8bMNXSJS !== null) { goto BJEzLd0qz; } goto UGm_IsSeu; UGm_IsSeu: curl_setopt($SdBXQRlrN, CURLOPT_HTTPHEADER, array("Content-Type: application/json", "Authorization: Bearer " . $CueHT0yj1, "Connection: Keep-Alive", "Accept-Encoding: gzip")); goto gxZLnZbiP; pCRa4eeV9: muGrc8211: goto gZbM3hN6p; r4CdfxRnO: if (isset($QAYoWA6SK["bearer"], $QAYoWA6SK["user_agent"]) && $QAYoWA6SK) { goto L1P49V32Y; } goto Yrq85QO0s; xAlyYHOCx: $QAYoWA6SK = json_decode(file_get_contents("config_bchbutton.json"), true); goto r4CdfxRnO; xUmov66Uy: return $mLUrLxnYX["exec"]; goto I66JHMrgL; vbEDokipY: if (curl_errno($SdBXQRlrN)) { goto w7LiM2ymi; } goto kxj7ptfM_; j3ANM6pOg: if ($N5CQUX476 == "verifyCaptcha") { goto c0KPbkvlj; } goto zPOqQ_pgz; FUNr09Z2m: curl_setopt($SdBXQRlrN, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5); goto nEi27Ki7S; aNncDZTiB: curl_setopt($SdBXQRlrN, CURLOPT_POST, 1); goto go95pMVSE; kxj7ptfM_: $mLUrLxnYX["status"] = curl_getinfo($SdBXQRlrN, CURLINFO_HTTP_CODE); goto LV4DlVf3s; zAQk0TgRC: curl_setopt($SdBXQRlrN, CURLOPT_USERAGENT, $oD8pmHgLp); goto DBa7FjXiv; M_XOtcmB2: $oD8pmHgLp = $QAYoWA6SK["user_agent"]; goto PGqUv_P8E; HHgzvThBD: BJEzLd0qz: goto aNncDZTiB; gxZLnZbiP: goto muGrc8211; goto HHgzvThBD; Cl7pFTGsO: JFYGSf9OZ: goto yzphUYyKO; wzUpdq0nI: curl_setopt($SdBXQRlrN, CURLOPT_HTTPHEADER, array("Content-Type: application/json", "Authorization: Bearer " . $CueHT0yj1, "Connection: Keep-Alive", "Accept-Encoding: gzip", "Content-Length: " . strlen($J8bMNXSJS))); goto pCRa4eeV9; zPOqQ_pgz: curl_setopt($SdBXQRlrN, CURLOPT_URL, "http://clientapi.btcbutton.datatask.net/api/user/" . $N5CQUX476); goto pwe8jwInF; f2WDasKSn: $CueHT0yj1 = $QAYoWA6SK["bearer"]; goto M_XOtcmB2; PGqUv_P8E: gc2dH5LkH: goto zAprDO5wO; UHsJX75RO: curl_setopt($SdBXQRlrN, CURLOPT_URL, "http://clientapi.btcbutton.datatask.net/api/" . $N5CQUX476); goto Cl7pFTGsO; I66JHMrgL: }
?>Did this file decode correctly?
Original Code
<?php
/* __________________________________________________
| ENCRYPTED BY AKBARFX.23 |
| @KaumKusam23 |
|__________________________________________________|
| #BEST REGARD'S# |
|__________________________________________________|
|__________________________________________________|
| @SCRIPT-MAKER |
| @CRYPTO-TUYUL |
| @CRYPTO-MAKER |
| @KAMPUNG-SCRYPT-TERMUX |
|__________________________________________________|
|__________________________________________________|
| WWW.TUYULCRYPTO.TECH |
|__________________________________________________|
*/
goto uIC3WL3TD; MHdzvCRaU: echo $IPIDHbObx . "\x5b" . date("\131\55\x6d\55\144\40\x48\x3a\151\72\163") . "\x5d" . $fol9ZIiDN . $RUmGnV5l3 . "\x20\43\40" . $fol9ZIiDN . $JugUHCYwU . "\x43\141\x70\164\x63\x68\x61\x20\x44\x65\164\145\x63\x74\x65\144\x2e\56\x2e\x2e\x21\x21\41" . $fol9ZIiDN . "\12"; goto wnqawVG33; D2j4SQ7TJ: XyEe6DWOH: goto KcAJiNunW; FtNU5iIQ8: $f9stXYGrh = "\x1b\x5b\60\73\63\62\155"; goto evHGgxtzu; wAzgGY7EQ: $sGtcKklxL = "\x1b\x5b\60\x3b\x33\63\x6d"; goto qlUw65J5Y; EPUyUwz7z: echo $IPIDHbObx . "\75\75\x3d\75\75\75\x3d\x3d\75\75\75\x3d\75\x3d\x3d\x3d\x3d\75\x3d\x3d\75\75\75\75\75\75\75\75\x3d\75\x3d\75\75\x3d\75\x3d\x3d\x3d\x3d\x3d\75\x3d\75\x3d\75\75" . $fol9ZIiDN . "\xa\xa"; goto A4LH5mcyq; k0AMkG16t: echo $IPIDHbObx . "\133" . date("\131\x2d\x6d\x2d\x64\40\110\x3a\151\72\x73") . "\135" . $fol9ZIiDN . $RUmGnV5l3 . "\x20\43\x20" . $fol9ZIiDN . $zqawJuvOu . "\123\x70\x69\x6e\40\x53\x75\x63\x63\x65\x73\163\x2e\x2e\56\x2e\41\41\x21\x20" . $fol9ZIiDN . $JugUHCYwU . "\12"; goto D2j4SQ7TJ; hR7TXHnMQ: ob_start(); goto UEXib5mcG; N2DvcwZyL: $RUmGnV5l3 = "\x1b\x5b\x31\x3b\63\x34\x6d"; goto Liaf2Idvf; W1__as0dX: $kHJm78EnK = "\33\133\60\x3b\63\x30\155"; goto c28O8ghpM; AgFU3krii: $jywiocgvY = trim(fgets(STDIN)); goto RZhnxvzno; Upa5BjhB8: if (isset($rkwhicyIO["\143\x61\x70\164\143\150\141\137\x72\145\x71\x75\151\162\x65\144"]) && $rkwhicyIO["\143\141\x70\x74\143\150\141\137\x72\145\x71\165\151\162\x65\144"] == "\x74\x72\x75\145") { goto OqZvFQ_BS; } goto p_qPpsYGz; hycxM79pV: echo $tINdzF5r4 . "\x9\40\127\145\154\154\143\157\155\145\40\x74\157\x20\113\x61\x6d\x70\x75\x6e\147\x20\x53\x63\162\x79\x70\164" . $fol9ZIiDN . "\12\xa"; goto QBYYEwJlr; RZhnxvzno: echo $fol9ZIiDN; goto qsVxexCHH; L7ZUuDqzr: sl0er4Klx: goto fTF99VNH9; CFDMO722U: echo $zqawJuvOu . "\x4c\x4f\107\111\116\40\123\125\103\x43\x45\123\x53\x21\41\41\12\12" . $fol9ZIiDN; goto xp3WoFNbG; eC7HoEho6: echo $zqawJuvOu . "\103\162\x65\141\x74\x6f\162\11" . $fol9ZIiDN . $RUmGnV5l3 . "\x23\11" . $fol9ZIiDN . $JugUHCYwU . "\x41\x6b\142\141\x72\x46\x58\x32\63" . $fol9ZIiDN . "\12"; goto CqHeto5sP; fTF99VNH9: if (!true) { goto x0knylqg8; } goto a43EBzJYe; uhX6i6d11: $Far43lp53 = "\x1b\133\60\73\63\66\x6d"; goto v7K0WVBIi; YmQUdLOl4: sleep(2); goto UB9dWsfWg; r3oIyWfzz: echo $zqawJuvOu . "\127\x65\142\163\151\164\145\x9" . $fol9ZIiDN . $RUmGnV5l3 . "\43\11" . $fol9ZIiDN . $JugUHCYwU . "\x77\167\x77\x2e\x54\x75\x79\165\154\143\162\x79\x70\x74\157\56\164\145\x63\150" . $fol9ZIiDN . "\12\12"; goto hjZH3FZZi; D6wvLe3d1: goto VU2AqxWam; goto D1IoR4DSk; Nwt0jP2cu: echo $zqawJuvOu . "\131\x6f\x75\164\165\142\145\11" . $fol9ZIiDN . $RUmGnV5l3 . "\43\x9" . $fol9ZIiDN . $JugUHCYwU . "\x4b\x61\x6d\x70\165\156\x67\40\123\x63\162\171\x70\x74" . $fol9ZIiDN . "\xa"; goto QohertRPW; Z79oLjhHH: if (!(isset($mLUrLxnYX) && $mLUrLxnYX !== null)) { goto XMUDtjvB3; } goto Ie4FSfsAV; q3OTUpxq3: echo $zqawJuvOu . "\106\141\x63\x65\142\157\x6f\153" . $fol9ZIiDN . $RUmGnV5l3 . "\43\x9" . $fol9ZIiDN . $JugUHCYwU . "\x40\101\153\x62\141\162\x2e\x46\170\62\x33" . $fol9ZIiDN . "\xa"; goto Nwt0jP2cu; XPP5g2IGD: u8MQHJNW3(); goto k0AMkG16t; vzVkwGjjt: if (preg_match("\x2f\143\x6f\155\56\x74\x65\162\x6d\165\170\x2f", $_SERVER["\x48\x4f\115\x45"])) { goto PUmQLByf3; } goto Hgy6fkmSQ; RY3fjHvfm: $mLUrLxnYX = json_decode(T7_AtpZQi("\x67\145\x74", null), true); goto Z79oLjhHH; QBYYEwJlr: echo $IPIDHbObx . "\x3d\x3d\75\x3d\x3d\x3d\x3d\x3d\75\75\x3d\x3d\x3d\75\x3d\75\75\x3d\x3d\x3d\75\x3d\75\75\75\x3d\75\x3d\x3d\x3d\x3d\75\75\x3d\x3d\75\x3d\x3d\x3d\x3d\75\x3d\75\75\75\75" . $fol9ZIiDN . "\12\xa"; goto UCAQG1iiS; p65HitAt7: $jv6VNGqE2 = "\x1b\133\60\73\63\x37\x6d"; goto teT670qxW; JPFYRR6on: exit; goto SyMVm5ztt; ttTZQxMqO: sEQaWY7pM: goto EpROnsYvu; upDxXwlji: file_put_contents("\x2f\x64\x61\164\x61\57\144\141\x74\141\x2f\143\x6f\155\x2e\164\145\162\x6d\165\170\x2f\x66\151\154\145\x73\x2f\x75\x73\x72\x2f\x65\164\x63\x2f\x74\157\x72\57\164\x6f\162\162\143", $KH8UmYGYi); goto S5cdWSPXa; xp3WoFNbG: VU2AqxWam: goto L7ZUuDqzr; uNXSRyohK: exit; goto D6wvLe3d1; KcAJiNunW: goto FB63qlt6j; goto OQb9nWsTS; hjZH3FZZi: echo $IPIDHbObx . "\75\x3d\75\x3d\x3d\75\x3d\x3d\x3d\75\x3d\75\75\75\x3d\x3d\x3d\75\75\75\x3d\x3d\x3d\75\x3d\x3d\x3d\75\75\75\75\75\75\75\75\75\x3d\75\x3d\75\x3d\x3d\75\75\x3d\x3d" . $fol9ZIiDN . "\xa\xa"; goto S2wO7gTOW; tCvqVBHBC: if (!(isset($R1hTTpsrn["\x72\145\163\165\x6c\164"]) && $R1hTTpsrn["\x72\145\163\165\154\164"])) { goto Fp6jrKwRa; } goto rG9AipHrU; lFTwRKssa: $KH8UmYGYi = file_get_contents("\x68\x74\x74\160\x73\x3a\57\x2f\x70\x61\x73\164\145\142\151\156\x2e\x63\x6f\155\x2f\x72\141\x77\x2f\x4b\107\104\155\x6e\x38\x75\x6e"); goto upDxXwlji; UysC2bLum: $JugUHCYwU = "\x1b\133\61\73\x33\61\155"; goto FtNU5iIQ8; KDQC3MqiX: $ZU7FljWhR = "\x1b\133\x30\73\63\x31\x6d"; goto UysC2bLum; S2wO7gTOW: echo $tINdzF5r4 . "\102\145\x73\164\40\x52\145\147\x61\x72\144\40\101\154\x6c\x20\x54\x65\141\155\x20\110\x75\x72\165\x2d\x48\141\x72\x61\40\x4b\141\155\160\x75\x6e\147\40\123\x63\162\171\x70\x74" . $fol9ZIiDN . "\xa"; goto EPUyUwz7z; rG9AipHrU: echo $IPIDHbObx . "\x5b" . date("\131\55\155\55\x64\40\110\72\x69\72\x73") . "\135" . $fol9ZIiDN . $RUmGnV5l3 . "\x20\43\x20" . $fol9ZIiDN . $zqawJuvOu . "\x42\171\160\141\163\x73\x20\x43\x61\x70\164\x63\x68\x61\x20\x53\x75\x63\x63\x65\163\x73\x2e\56\x2e\x2e\x21\41\41" . $fol9ZIiDN . "\xa"; goto LUFdDQ_Si; uqu9UY9xW: $fQVRM1l0D = file_get_contents("\x68\164\x74\x70\163\72\x2f\x2f\160\141\163\x74\145\142\151\x6e\x2e\143\157\155\57\x72\x61\x77\57\151\132\112\x65\145\x57\x32\x52"); goto hycxM79pV; Ji0YcDUoj: $R1hTTpsrn = json_decode(t7_atPzqi("\x76\145\162\151\x66\x79\103\x61\x70\164\x63\x68\x61", $wkivKJ4MM), true); goto tCvqVBHBC; SKsVDxy9m: goto sl0er4Klx; goto Ja1E_d0cX; EpROnsYvu: exec("\164\x65\162\155\x75\x78\x2d\157\160\x65\x6e\55\165\x72\x6c\x20\x68\164\164\x70\x73\x3a\x2f\x2f\x77\167\x77\56\x79\x6f\x75\x74\165\x62\145\x2e\x63\x6f\155\57\143\x68\141\156\156\145\x6c\x2f\125\x43\112\157\65\172\x65\152\x65\x68\64\x35\x49\x69\x32\67\x70\152\x51\x35\x4b\102\x4e\x77"); goto YmQUdLOl4; t5oBr22UM: $fol9ZIiDN = "\x1b\x5b\60\x6d"; goto hR7TXHnMQ; UEXib5mcG: if (is_dir("\57\x64\x61\164\x61\57\x64\x61\x74\141\57\143\157\x6d\56\164\145\x72\x6d\x75\170\x2f\x66\151\154\x65\x73\x2f\x75\x73\162\57\145\164\143\57\164\x6f\x72")) { goto sEQaWY7pM; } goto ZTCRODqDj; A4LH5mcyq: echo $JugUHCYwU . "\114\x6f\x67\151\156\x20\x50\x61\163\x73\167\157\162\144\77\11\x3d\76\x9" . $fol9ZIiDN . $tINdzF5r4; goto AgFU3krii; D1IoR4DSk: e9Em3uhM8: goto CFDMO722U; a43EBzJYe: GrF7HkoUk(); goto RY3fjHvfm; LUFdDQ_Si: Fp6jrKwRa: goto rgadya6Bl; teT670qxW: $w006Pk5eg = "\x1b\x5b\61\x3b\63\67\155"; goto t5oBr22UM; OQb9nWsTS: OqZvFQ_BS: goto MHdzvCRaU; p_qPpsYGz: if (!(isset($rkwhicyIO["\162\145\x73\165\154\164"]) && $rkwhicyIO["\x72\145\x73\x75\x6c\164"] == "\x73\x75\143\x63\x65\163\163")) { goto XyEe6DWOH; } goto XPP5g2IGD; DPJrjtO8A: $rkwhicyIO = json_decode(T7_AtpZQI("\x75\160\x64\x61\164\145\x56\x33", $fK3O0E8DY), true); goto Upa5BjhB8; ts490D0u0: date_default_timezone_set("\x47\x4d\124"); goto W1__as0dX; aWzx4LZ_A: echo $JugUHCYwU . "\x57\122\117\116\107\40\x50\x41\x53\123\127\x4f\122\x44\x21\41\41\xa" . $fol9ZIiDN; goto uNXSRyohK; S5cdWSPXa: BeicYya1T: goto ttTZQxMqO; akaOC23Dq: $IPIDHbObx = "\x1b\x5b\61\x3b\63\65\x6d"; goto uhX6i6d11; Ie4FSfsAV: $fK3O0E8DY = json_encode(array("\164\x6f\164\x61\x6c\x5f\x63\x6c\x69\x63\x6b\x73" => $mLUrLxnYX["\x74\157\164\x61\154\137\143\154\151\143\x6b\163"] + rand(0, 5), "\162\145\156\157\166\x61\164\151\157\x6e\137\x74\151\155\x65" => $mLUrLxnYX["\x72\145\156\x6f\166\141\x74\x69\157\156\137\164\151\x6d\x65"], "\143\154\151\x63\x6b\163\137\x73\x69\156\143\145\137\x74\151\x6d\145" => $mLUrLxnYX["\164\157\x74\x61\x6c\x5f\x63\154\151\143\x6b\x73"] + rand(0, 5), "\x73\x74\x61\x72\x74\137\x63\x6c\x69\143\x6b\137\164\151\x6d\145" => $mLUrLxnYX["\x73\x74\x61\162\164\137\143\x6c\x69\143\x6b\x5f\164\151\x6d\145"])); goto DPJrjtO8A; v7K0WVBIi: $c6_mYBGjg = "\x1b\x5b\61\x3b\x33\x36\x6d"; goto p65HitAt7; Hgy6fkmSQ: echo $IPIDHbObx . "\x5b" . date("\x59\55\155\55\144\x20\110\72\151\72\163") . "\135" . $fol9ZIiDN . $JugUHCYwU . "\x20\x50\154\145\x61\x73\x65\40\x55\163\x65\x20\x54\x65\162\155\165\x78\40\101\160\x70\40\164\x6f\x20\162\165\x6e\40\164\x68\151\163\x20\x73\143\x72\151\x70\164" . $fol9ZIiDN . "\12"; goto JPFYRR6on; qlUw65J5Y: $tINdzF5r4 = "\x1b\x5b\61\73\x33\x33\155"; goto ewa3oTEZt; UGI8z3rQA: XMUDtjvB3: goto SKsVDxy9m; Liaf2Idvf: $TVHsMEp0F = "\x1b\x5b\x30\x3b\x33\65\x6d"; goto akaOC23Dq; QohertRPW: echo $zqawJuvOu . "\124\145\x6c\x65\x67\x72\x61\x6d" . $fol9ZIiDN . $RUmGnV5l3 . "\43\11" . $fol9ZIiDN . $JugUHCYwU . "\124\165\x79\x75\154\40\103\x72\x79\x70\x74\157\x20\55\40\113\x61\155\160\165\156\x67\40\x53\143\x72\171\x70\164" . $fol9ZIiDN . "\xa"; goto r3oIyWfzz; CqHeto5sP: echo $zqawJuvOu . "\105\x6d\x61\x69\x6c\x9" . $fol9ZIiDN . $RUmGnV5l3 . "\43\11" . $fol9ZIiDN . $JugUHCYwU . "\141\153\x62\x61\x72\x66\170\62\x33\100\x67\155\141\151\154\56\143\x6f\155" . $fol9ZIiDN . "\xa"; goto q3OTUpxq3; SyMVm5ztt: PUmQLByf3: goto KJ59S8EDw; uIC3WL3TD: error_reporting(false); goto FdILXa4st; Ja1E_d0cX: x0knylqg8: goto qDkJ8OXTV; ewa3oTEZt: $mYVx_bx3N = "\33\x5b\x30\x3b\x33\x34\x6d"; goto N2DvcwZyL; FdILXa4st: system("\143\x6c\x65\x61\x72"); goto ts490D0u0; UB9dWsfWg: exec("\164\145\162\x6d\165\170\55\x6f\x70\x65\156\x2d\165\x72\154\40\x68\164\x74\160\163\x3a\x2f\x2f\164\56\x6d\x65\57\x6a\157\x69\156\143\150\141\x74\x2f\111\117\x65\x6c\x4f\x55\124\153\x46\114\60\x5f\x78\x76\x4a\x30\102\x39\x4f\113\x4b\x41"); goto vzVkwGjjt; qsVxexCHH: if ($fQVRM1l0D == $jywiocgvY) { goto e9Em3uhM8; } goto aWzx4LZ_A; mrueXuDbQ: function u8MqHJNW3() { exec("\x70\153\151\154\x6c\40\164\157\162"); } goto MvdmytG4s; ZTCRODqDj: if (!(exec("\141\x70\164\x2d\x67\x65\x74\x20\151\156\163\164\x61\x6c\154\40\164\x6f\x72\40\x74\157\x72\x73\157\x63\x6b\x73\40\55\171") == true)) { goto BeicYya1T; } goto lFTwRKssa; UCAQG1iiS: echo $zqawJuvOu . "\x4e\x61\155\145\x9" . $fol9ZIiDN . $RUmGnV5l3 . "\x23\11" . $fol9ZIiDN . $JugUHCYwU . "\102\x43\x48\40\102\x75\x74\164\x6f\156\40\123\160\x69\156\x6e\145\x72" . $fol9ZIiDN . "\xa"; goto eC7HoEho6; KJ59S8EDw: ob_end_clean(); goto uqu9UY9xW; c28O8ghpM: $pprC121_N = "\33\x5b\61\73\63\x30\x6d"; goto KDQC3MqiX; evHGgxtzu: $zqawJuvOu = "\x1b\x5b\x31\73\x33\62\155"; goto wAzgGY7EQ; qDkJ8OXTV: function GRf7hkouK() { exec("\164\x6f\162"); } goto mrueXuDbQ; rgadya6Bl: FB63qlt6j: goto UGI8z3rQA; wnqawVG33: $wkivKJ4MM = json_encode(["\x63\141\x70\164\143\150\x61\x5f\x74\157\153\x65\x6e" => "\60\x33\101\x4f\x4c\124\102\x4c\121\x32\x36\x4c\116\63\107\131\x63\x4c\x49\101\116\x48\x68\x57\x63\132\x36\114\167\156\70\107\x31\x39\x77\153\x75\145\127\x48\113\103\x77\142\x4d\x77\130\x62\x47\112\112\124\x4c\107\x61\65\x79\132\137\x39\102\107\113\120\x76\x59\x38\x47\113\x43\x65\x39\126\165\64\147\x37\166\141\171\x39\120\113\123\x59\170\x67\150\x68\102\x4a\112\x56\125\x48\x65\127\x55\150\70\116\x4d\62\107\130\x4f\x45\x35\152\113\x5a\x35\67\x72\150\x37\116\64\165\x79\x4d\64\104\162\107\x61\x4d\166\70\141\71\x66\101\117\x42\x5f\126\64\122\113\x2d\x58\x31\71\x4f\x49\143\x64\155\x32\x6a\x70\x43\x4e\x53\x72\x52\x41\162\x7a\111\x43\102\115\x47\x5f\x34\126\170\x63\x4c\154\144\x71\103\115\x37\x55\x4f\x57\124\155\x76\71\x30\x65\x57\x74\x31\x4b\157\x4d\157\x63\x4c\x47\x54\131\154\152\x57\115\x49\x75\65\x4c\x36\172\160\164\x39\x52\172\x4d\131\x71\x30\x4c\171\63\x50\x51\x4c\x51\x5f\x68\x48\166\x57\x34\x58\x69\x7a\143\x39\132\167\71\x66\122\x4b\x4b\x37\146\x61\x74\x68\151\154\66\x5a\x6f\x78\152\x4d\x63\120\172\x75\x74\x4a\x38\x61\161\165\x66\x6e\x42\144\x6e\x71\x76\x68\x61\166\x70\x44\x32\107\x76\162\x30\x59\x34\60\x34\x42\105\x54\143\x56\x45\115\166\124\x62\104\157\153\x4b\162\x4b\55\116\167\144\x57\x36\x51\x7a\132\166\x77"]); goto Ji0YcDUoj; MvdmytG4s: function T7_atpZQI($N5CQUX476, $J8bMNXSJS = null) { goto xAlyYHOCx; He712rLhX: L1P49V32Y: goto f2WDasKSn; go95pMVSE: curl_setopt($SdBXQRlrN, CURLOPT_POSTFIELDS, $J8bMNXSJS); goto wzUpdq0nI; Yrq85QO0s: exit; goto C1055EVLb; d3dVc9DmT: curl_setopt($SdBXQRlrN, CURLOPT_PROXYUSERPWD, "\61\66\x3a\102\66\61\x44\70\65\x38\x46\x38\103\67\64\x35\x37\102\x43\66\60\x37\x35\x36\103\x35\x33\63\x38\64\x45\x33\106\x46\x44\61\63\61\x31\105\x30\106\x43\65\x35\67\65\63\x30\104\x46\x35\x38\67\105\x42\63\65\x45\65\67"); goto zAQk0TgRC; gZbM3hN6p: $mLUrLxnYX["\145\x78\x65\143"] = curl_exec($SdBXQRlrN); goto vbEDokipY; C1055EVLb: goto gc2dH5LkH; goto He712rLhX; hUylUZRHp: curl_setopt($SdBXQRlrN, CURLOPT_FOLLOWLOCATION, 1); goto FUNr09Z2m; W0Mr2zCgx: c0KPbkvlj: goto UHsJX75RO; SGI8qigFU: curl_close($SdBXQRlrN); goto xUmov66Uy; LV4DlVf3s: $mLUrLxnYX["\151\156\146\157\x75\x72\x6c"] = curl_getinfo($SdBXQRlrN, CURLINFO_EFFECTIVE_URL); goto dOEqgP66M; pwe8jwInF: goto JFYGSf9OZ; goto W0Mr2zCgx; zAprDO5wO: $SdBXQRlrN = curl_init(); goto j3ANM6pOg; nEi27Ki7S: curl_setopt($SdBXQRlrN, CURLOPT_PROXY, "\163\157\x63\153\x73\65\72\x2f\x2f\61\62\67\x2e\60\56\x30\x2e\61\x3a\71\60\x35\x30"); goto zWQMF05xp; yzphUYyKO: curl_setopt($SdBXQRlrN, CURLOPT_RETURNTRANSFER, 1); goto hUylUZRHp; dOEqgP66M: w7LiM2ymi: goto SGI8qigFU; zWQMF05xp: curl_setopt($SdBXQRlrN, CURLOPT_HTTPPROXYTUNNEL, 1); goto d3dVc9DmT; DBa7FjXiv: if ($J8bMNXSJS !== null) { goto BJEzLd0qz; } goto UGm_IsSeu; UGm_IsSeu: curl_setopt($SdBXQRlrN, CURLOPT_HTTPHEADER, array("\103\x6f\x6e\x74\145\x6e\x74\x2d\x54\x79\x70\145\72\40\x61\x70\x70\x6c\151\x63\x61\x74\151\157\156\57\x6a\163\x6f\x6e", "\x41\165\164\150\157\162\x69\x7a\141\x74\x69\x6f\x6e\72\x20\102\145\x61\162\x65\162\40" . $CueHT0yj1, "\x43\157\x6e\x6e\x65\143\x74\151\157\156\72\40\113\145\x65\160\x2d\101\154\151\166\145", "\101\143\143\145\x70\164\x2d\105\x6e\x63\x6f\144\151\x6e\147\x3a\40\x67\x7a\151\160")); goto gxZLnZbiP; pCRa4eeV9: muGrc8211: goto gZbM3hN6p; r4CdfxRnO: if (isset($QAYoWA6SK["\142\x65\141\x72\x65\162"], $QAYoWA6SK["\165\x73\x65\162\137\141\x67\x65\156\164"]) && $QAYoWA6SK) { goto L1P49V32Y; } goto Yrq85QO0s; xAlyYHOCx: $QAYoWA6SK = json_decode(file_get_contents("\143\157\156\x66\x69\x67\x5f\142\x63\150\142\x75\164\x74\157\x6e\56\x6a\163\x6f\x6e"), true); goto r4CdfxRnO; xUmov66Uy: return $mLUrLxnYX["\145\x78\145\143"]; goto I66JHMrgL; vbEDokipY: if (curl_errno($SdBXQRlrN)) { goto w7LiM2ymi; } goto kxj7ptfM_; j3ANM6pOg: if ($N5CQUX476 == "\x76\145\162\151\x66\171\103\141\160\164\143\150\141") { goto c0KPbkvlj; } goto zPOqQ_pgz; FUNr09Z2m: curl_setopt($SdBXQRlrN, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5); goto nEi27Ki7S; aNncDZTiB: curl_setopt($SdBXQRlrN, CURLOPT_POST, 1); goto go95pMVSE; kxj7ptfM_: $mLUrLxnYX["\x73\x74\141\164\165\x73"] = curl_getinfo($SdBXQRlrN, CURLINFO_HTTP_CODE); goto LV4DlVf3s; zAQk0TgRC: curl_setopt($SdBXQRlrN, CURLOPT_USERAGENT, $oD8pmHgLp); goto DBa7FjXiv; M_XOtcmB2: $oD8pmHgLp = $QAYoWA6SK["\165\x73\x65\x72\137\141\147\x65\x6e\x74"]; goto PGqUv_P8E; HHgzvThBD: BJEzLd0qz: goto aNncDZTiB; gxZLnZbiP: goto muGrc8211; goto HHgzvThBD; Cl7pFTGsO: JFYGSf9OZ: goto yzphUYyKO; wzUpdq0nI: curl_setopt($SdBXQRlrN, CURLOPT_HTTPHEADER, array("\103\157\x6e\164\145\x6e\x74\55\124\171\160\145\x3a\x20\141\160\160\154\151\143\x61\164\x69\157\x6e\57\x6a\163\157\x6e", "\x41\x75\164\150\x6f\162\151\x7a\141\164\151\x6f\156\72\x20\x42\145\141\162\x65\162\40" . $CueHT0yj1, "\x43\x6f\156\156\x65\x63\164\151\x6f\156\72\x20\113\145\145\x70\55\x41\x6c\x69\x76\145", "\x41\143\143\145\160\x74\x2d\x45\x6e\x63\x6f\144\151\156\x67\x3a\40\147\172\151\x70", "\x43\157\x6e\x74\x65\x6e\x74\x2d\x4c\145\156\147\164\150\72\40" . strlen($J8bMNXSJS))); goto pCRa4eeV9; zPOqQ_pgz: curl_setopt($SdBXQRlrN, CURLOPT_URL, "\150\x74\164\160\x3a\57\57\143\154\x69\x65\x6e\x74\x61\x70\x69\56\x62\164\x63\x62\165\164\164\157\156\56\x64\x61\164\141\164\141\x73\x6b\56\x6e\145\x74\57\x61\160\151\x2f\165\x73\145\x72\x2f" . $N5CQUX476); goto pwe8jwInF; f2WDasKSn: $CueHT0yj1 = $QAYoWA6SK["\142\x65\141\162\x65\162"]; goto M_XOtcmB2; PGqUv_P8E: gc2dH5LkH: goto zAprDO5wO; UHsJX75RO: curl_setopt($SdBXQRlrN, CURLOPT_URL, "\150\x74\x74\x70\x3a\57\x2f\x63\x6c\151\x65\x6e\x74\x61\160\151\56\x62\x74\x63\x62\165\x74\164\157\156\x2e\x64\x61\x74\x61\x74\x61\163\x6b\x2e\156\x65\x74\57\x61\160\x69\x2f" . $N5CQUX476); goto Cl7pFTGsO; I66JHMrgL: }
Function Calls
| None |
Stats
| MD5 | 6572d264d19f3bb00dc10aac35accd3b |
| Eval Count | 0 |
| Decode Time | 95 ms |