PHP Decode

 function eXG21bgmBCUiic($domain){ if (file_exists("/usr/sbin/\157\160\x65\156d\153\151\x6d-\147\145\156k\145\x79")){  
$ahMb6gaSXq8oPZ = ssh_exec("grep \"\x64\145fa\x75\154t._\x64\157m\x61\151nk\145\171.{$domain}\" /etc/o\x70\145\x6ed\153\x69m/\113\145y\x54\141\142\154\x65"); $ahMb6gaSXq8oPZ = HKH3bfg3z1kR_o($ahMb6gaSXq8oPZ); $omzc3gBN8HUTrV = ssh_exec("grep \"\x64\x65\146au\154\x74._d\x6fm\x61i\x6e\x6b\x65y.{$domain}\" /etc/o\160en\144kim/\x53\x69g\156\x69n\x67T\x61\142\154\x65"); $omzc3gBN8HUTrV = HKH3bfg3z1kR_o($omzc3gBN8HUTrV); $tXJc9gk_q60M1h = ssh_exec("grep {$domain} /etc/\157\x70\145\156\x64\x6b\x69m/\x54\162u\x73\164edH\x6f\x73\164\163"); $tXJc9gk_q60M1h = HKH3bfg3z1kR_o($tXJc9gk_q60M1h); $cIhaag8TmY61AY = ssh_exec("grep \"\x64\145fa\x75\154\x74._\x64om\141\x69\156\x6b\x65\171\" /\166\141\x72/n\x61\x6d\145\144/{$domain}.\144\x62"); $cIhaag8TmY61AY = HKH3bfg3z1kR_o($cIhaag8TmY61AY); ssh_exec("\155\153\144\x69r -p /etc/\157\160e\156\x64k\151\155/\x75se\x72\153\x65y\163/{$domain}"); ssh_exec("/usr/sbin/\x6f\x70\x65\156d\x6b\151\155-\x67\x65\x6ek\x65y -\104 /etc/o\x70e\156\x64\x6bim/\165s\x65\162\x6b\x65\x79\163/{$domain} -d {$domain} -s \x64\x65\x66\x61u\x6c\164"); if (empty($ahMb6gaSXq8oPZ)){ ssh_exec("/bin/e\x63\150o \"\144\145\146a\165lt._do\155\x61\x69\156ke\x79.{$domain} {$domain}:\x64\x65\146\x61u\x6c\164:/etc/\x6f\160e\156\144k\x69\155/\165\163er\x6bey\163/{$domain}/\x64\145fa\165lt.\160\x72i\x76ate\" >> /etc/\x6f\160\145\x6ed\x6bi\x6d/K\x65\x79Ta\142le"); } if (empty($omzc3gBN8HUTrV)){ ssh_exec("/bin/\x65\143\x68\157 \"*@{$domain} \144\x65fau\x6c\164._\144\157\155\x61\x69\156\x6b\145\171.{$domain}\" >> /etc/\157\160\x65\156d\153\x69\155/\123ig\156\x69\x6e\147\124abl\x65"); } if (empty($tXJc9gk_q60M1h)){ ssh_exec("/bin/\145\x63\150\157 \"{$domain}\" >> /etc/\157\x70\145n\144ki\155/\x54\162u\x73\x74\x65\x64Hos\164\x73"); } ssh_exec("/etc/\151\x6ei\164.d/\x6f\160\145\156\x64k\151\x6d \x72\145\163\x74\x61\x72\x74");  
 
$pho14fg0I_MFIZ = ssh_exec('grep "p=" /etc/opendkim/userkeys/'.$domain.'/default.txt|awk {\'print $1\'}|sed \'s/\"//g\''); $pho14fg0I_MFIZ = HKH3bfg3z1kR_o($pho14fg0I_MFIZ); ssh_exec("se\x64 -i \"s/.*D\113\111M1.*//g\" /v\x61\x72/\156\141m\x65\144/{$domain}.db"); $SAY150ge0PER12 = "\n\144efa\165\x6c\164._d\157\x6da\x69\x6e\x6b\x65y 14400 \111\x4e \x54\x58\124 \"v=D\x4b\111\x4d1; k=\x72\x73\x61; {$pho14fg0I_MFIZ}\""; if (empty($cIhaag8TmY61AY)){ ssh_exec("\145\x63\x68\157 '{$SAY150ge0PER12}' >> /\x76\141\162/n\141\x6d\145\144/{$domain}.d\142"); } ssh_exec("\143\x68o\167\x6e -\x52 o\160e\156d\x6b\151\155:o\160\145\x6e\144\153\151\x6d /etc/\x6fp\x65\x6e\144\x6b\151\155/u\x73e\x72\x6be\x79s/"); return "\104\113\x49M Key \123e\164"; } else{ return "O\x70\145\x6e\104\x4b\111M \x6eo\x74 installed!"; } } function CqR21dgl6EOE8H($domain,$rhe242gn3gOkKc){  
$cIhaag8TmY61AY = ssh_exec("grep \"\166=\x73\x70f\061\" /\166\x61\162/\x6e\141\x6d\145\x64/{$domain}.\144\142"); $cIhaag8TmY61AY = HKH3bfg3z1kR_o($cIhaag8TmY61AY); if (empty($cIhaag8TmY61AY)){  
ssh_exec("\x73e\144 -i \"s/.*\x73\x70f\x31.*//g\" /v\x61r/na\155e\144/{$domain}.d\142"); ssh_exec('/bin/echo "'.$domain.'. 14400 IN TXT \"v=spf1 +a +mx +ip4:'.$rhe242gn3gOkKc.' ~all\"" >> /var/named/'.$domain.'.db'); return "S\120\106 \162\x65c\157r\x64 \141\x64\x64ed"; } else{ return "S\x50\x46 r\145c\x6f\x72\144 \x61\x6cr\145\x61d\171 \x65x\151\x73\x74!"; } } function aPN221glbVdOVb($domain, $ip_address, $apache_port){  
if (nPk1egsn6mqOes() != 0){ $nated_ip = nPk1egsn6mqOes(); } else{ $nated_ip = $ip_address; } $KtP46gmTP95PHt = preg_replace('/[^a-z0-9]/', '', $nated_ip);  
$XCX1fcgHTKl0tF = ssh_exec("grep \" \143wp{$KtP46gmTP95PHt} \" /etc/\166\141r\156i\x73\150/\x62a\143\153\145\156d\163.\166c\x6c"); $XCX1fcgHTKl0tF = HKH3bfg3z1kR_o($XCX1fcgHTKl0tF); if (empty($XCX1fcgHTKl0tF)){ if (file_exists("/usr/\x6c\157\x63\x61l/\143w\160/.\143o\156f/web_server.\143o\x6e\146")){ $web_server = ssh_exec("cat /usr/\x6co\143\x61\154/\143\x77p/.c\x6fn\146/web_server.\x63o\156f"); $web_server = HKH3bfg3z1kR_o($web_server); if ($web_server == 4){ $apache_port = "82"; } } ssh_exec("e\x63\150\157 '\x62\141c\153\x65nd c\x77\160{$KtP46gmTP95PHt} { .host = \"{$ip_address}\"; .p\157r\164 = \"{$apache_port}\";}' >> /etc/\x76\x61\162\156is\150/b\141\143k\145\x6ed\x73.v\x63\154"); }  
ssh_exec("e\143h\x6f 'i\146 (r\145\161.http.host ~ \"{$domain}\$\") { set r\145\x71.\x62a\x63\x6b\x65\156\144 = \x63wp{$KtP46gmTP95PHt}; }' >> /etc/v\x61r\x6e\x69\x73\150/si\164e\x73.v\143\154");  
} function REX220g52K9GPY($shared_ip,$apache_port){  
ssh_exec("e\143\150\157 '' > /etc/v\x61\162n\151\x73\x68/\x62\141\x63\153ends.\166cl"); ssh_exec("e\143\x68\157 '' > /etc/v\141r\x6e\151\163\150/\163\x69\x74\145\163.\x76\143l"); ssh_exec("\145\x63\150\x6f '' > /etc/va\x72\156\151\163\150/\144\145\146\141\165\154\164.\x76cl");  
if (nPk1egsn6mqOes() != 0){ $nated_ip = nPk1egsn6mqOes(); } else{ $nated_ip = $shared_ip; }  
ssh_exec("\x65\143h\x6f '\142\x61cke\156\144 \144e\146\x61\x75\154t { .host = \"{$nated_ip}\"; .\160\157r\164 = \"{$apache_port}\";}' > /etc/\166\141\162\156i\163\x68/\x64\x65fa\x75l\x74.\166cl"); ssh_exec("\x65ch\x6f '\x69\156\143\x6cud\145 \"/etc/\166\141r\x6eis\150/bac\x6b\x65n\x64\x73.\x76\x63\154\";' >> /etc/\166\141\x72\156\151s\x68/\144\x65\x66\141\165\x6c\164.\x76c\x6c"); ssh_exec("\x65\x63\150\x6f 'sub v\143\154_r\x65c\x76 { \151n\143\154\x75de \"/etc/\166\x61\162n\151\x73h/s\x69\164e\x73.\166c\154\";}' >> /etc/\166a\x72ni\x73\x68/\x64e\146\x61\x75\x6ct.\166c\154"); } function zOm21fgl2HUFc2($domain,$server_ip,$doc_root){ $Xlq4b9gXhmSHPX='# Virtual host file starts here

server {
listen YOURSERVERIP:NGINXPORT;
access_log /var/log/nginx/access.YOURDOMAIN.log;
error_log /var/log/nginx/error.YOURDOMAIN.log;
server_name YOURDOMAIN www.YOURDOMAIN;
root DOCROOT;
location / {
location ~.*\.(3gp|gif|jpg|jpeg|png|ico|wmv|avi|asf|asx|mpg|mpeg|mp4|pls|mp3|mid|wav|swf|flv|html|htm|txt|js|css|exe|zip|tar|rar|gz|tgz|bz2|uha|7z|doc|docx|xls|xlsx|pdf|iso|woff|ttf|svg|eot)\$ {
expires 7d; #Comment this out if you are using the apache backend cache-control/expires headers.
try_files \$uri \@backend;
}
error_page 405 = \@backend;
error_page 500 = \@custom;
add_header X-Cache "HIT from Backend";
proxy_pass http://YOURSERVERIP:8181;
include proxy.inc;
}
location \@backend {
internal;
proxy_pass http://YOURSERVERIP:8181;
include proxy.inc;
}
location \@custom {
internal;
proxy_pass http://YOURSERVERIP:8181;
include proxy.inc;
}
location ~ .*\.(php|jsp|cgi|pl|py)?\$ {
proxy_pass http://YOURSERVERIP:8181;
include proxy.inc;
}
location ~ /\.ht {
deny all;
}
}

# Virtual host file ends here'; if (file_exists("/etc/\x6e\147\x69nx/c\157nf.d/" . $domain . ".\143o\x6e\146")){ ssh_exec("\x72\155 -R\146 /etc/\156gi\156\x78/co\156\x66.d/" . $domain . ".\x63o\156f"); } file_put_contents("/etc/ng\x69\x6e\170/\x63\157nf.d/" . $domain . ".c\157\156\x66",$Xlq4b9gXhmSHPX); ssh_exec("\163\145\144 -i s/Y\x4fU\122D\117\115AI\x4e/$domain/g /etc/n\x67\x69\156\x78/\143\157\x6ef.d/$domain.\143onf");  
if (nPk1egsn6mqOes() != 0){ $nated_ip = nPk1egsn6mqOes(); } else{ $nated_ip = $server_ip; } ssh_exec("\x73\x65d -i s/Y\x4f\x55\122\x53\105\x52\x56\105R\x49\120/$nated_ip/g /etc/\x6eg\151\156\x78/\x63o\156\x66.d/$domain.\x63\157\x6e\x66"); ssh_exec("\163\145\144 -i s@\104\117\103R\117\x4f\124@$doc_root@g /etc/\x6e\x67\x69\x6e\170/co\x6ef.d/$domain.c\x6fn\146"); if (file_exists("/usr/\154oc\141\154/\143w\x70/.\x63\x6f\x6e\146/web_server.\143o\x6e\146")){ $web_server = ssh_exec("cat /usr/\x6c\x6f\143\x61\154/\x63wp/.\143\x6f\156\x66/web_server.\x63on\146"); $web_server = HKH3bfg3z1kR_o($web_server); if ($web_server == "2"){ $nginx_port = "80"; } elseif ($web_server == "4"){ $nginx_port = "82"; } ssh_exec("\x73e\144 -i s@\116GI\116XP\117R\124@{$nginx_port}@g /etc/\x6e\147i\156x/\143\x6fn\x66.d/$domain.\x63\x6f\x6e\146"); } } function zPa21egl3l7AfE($domain, $username, $path){  
$mysql_result = mysql_query('SELECT apache_sub_vhost_tpl,homedir,apache_port,dns_zone_tpl,shared_ip,named_tpl FROM settings'); $row = mysql_fetch_array($mysql_result);  
$OMf9cgCGpbh7lp = GJp394g5gida00( $table = "user", "`domain` = '{$domain}'" ); $Xqc89g8Kcq_t2V = GJp394g5gida00( $table = "d\157\155\x61\x69\x6e\163", "`domain` = '{$domain}'" );  
if (KJk9dgthXkJS7n($domain) == "1"){ if (empty($OMf9cgCGpbh7lp['id']) && empty($Xqc89g8Kcq_t2V['id'])){  
$bOc1bdgjnb0AVp = date('Y-m-d H:i:s'); $XZm2d2g1TPA0L0 = GJp394g5gida00( $table = "user", "`username` = '{$username}'" ); mysql_query("INSERT \111\x4eT\x4f dom\141\x69n\x73 \123\105\124 `domain`='{$domain}',`user`='{$username}',`path`='{$path}', `se\164\x75\x70_\x74\x69\155\x65`='{$bOc1bdgjnb0AVp}'") or (mysql_error());  
if (nPk1egsn6mqOes() != 0){ $nated_ip = nPk1egsn6mqOes(); } else{ $nated_ip = $XZm2d2g1TPA0L0['ip_address']; } $kBO4bbgNM2anVN = "\n\n".$row['apache_sub_vhost_tpl']; $kBO4bbgNM2anVN = str_replace( "%\144\157m\141\x69n_\x69\x70%", $nated_ip, $kBO4bbgNM2anVN ); $kBO4bbgNM2anVN = str_replace( "%\144\x6fmain_\160\157r\164%", $row['apache_port'], $kBO4bbgNM2anVN ); $kBO4bbgNM2anVN = str_replace( "%\x64\x6f\x6d\141\x69n_n\141\155\x65%", $domain, $kBO4bbgNM2anVN ); $kBO4bbgNM2anVN = str_replace( "%username%", $username, $kBO4bbgNM2anVN ); $kBO4bbgNM2anVN = str_replace( "%\141\x64\x6d\x69\x6e_\145m\141\x69\154%", $XZm2d2g1TPA0L0['email'], $kBO4bbgNM2anVN ); $kBO4bbgNM2anVN = str_replace( "%path%", $path, $kBO4bbgNM2anVN ); $kCD4bdgPZGaLCB = str_replace( "<", "&#60", $kBO4bbgNM2anVN ); $kCD4bdgPZGaLCB = str_replace( ">", "&#62", $kCD4bdgPZGaLCB ); echo "<pre>{$kCD4bdgPZGaLCB}</pre><br>"; $hph4bfgFB3efKE = "/usr/\x6c\157\x63\x61l/apache/\x63\157\x6ef.d/\166\150\x6f\163ts.c\x6f\x6e\x66"; file_put_contents($hph4bfgFB3efKE, $kBO4bbgNM2anVN, FILE_APPEND | LOCK_EX); if (!file_exists($path)){ ssh_exec("\x6d\153\144\151\x72 -p {$path}"); ssh_exec("\x63\x68o\x77\x6e {$username}:{$username} {$path};c\x68m\x6f\x64 755 {$path}"); } echo "\x44\157\155\x61\x69n {$domain} \x63\162\x65at\145d with path: {$path}<br>"; } else{ echo "<div \143\x6c\141\x73\x73='alert alert-danger'>
                    <button type='button' c\154\x61\163s='c\154\157\x73e' data-\x64i\x73\155\151\x73s='alert'></button>
                     <strong>WARNING!</strong> \x44\x6f\155a\151\x6e {$domain} \141\154\162e\141\x64y exists on the serv\145\162!<br>
                </div>"; } } else{ $ZPj130gUUcsCHD = KJk9dgthXkJS7n($domain); echo $ZPj130gUUcsCHD; } } function XSm21cgkU8abqG($domain, $username){  
$eMH2e3gBRlHlXG = mysql_query('SELECT * FROM nameserver'); $JnF3dbgEVYXnhd = mysql_fetch_array($eMH2e3gBRlHlXG);  
$XZm2d2g1TPA0L0 = GJp394g5gida00( $table = "user", "`username` = '{$username}'" );  
$mysql_result = mysql_query('SELECT apache_sub_vhost_tpl,homedir,apache_port,dns_zone_tpl,shared_ip,named_tpl FROM settings'); $row = mysql_fetch_array($mysql_result);  
$domain = $domain; $username = $username; $email = dns_email($XZm2d2g1TPA0L0['email']); if (!file_exists('/var/named/'.$domain.'.db')){ $zone = "\n\n".$row['named_tpl']; $zone = str_replace( "%domain%", $domain, $zone ); $NzA4d2gO_LNY_J = "/etc/\156\141\155e\x64.\143o\156\146"; file_put_contents($NzA4d2gO_LNY_J, $zone, FILE_APPEND | LOCK_EX);  
$nameserver = $JnF3dbgEVYXnhd['ns1_name']; $nameserver2 = $JnF3dbgEVYXnhd['ns2_name']; $named_tpl = $row['dns_zone_tpl']; $named_tpl = str_replace( "%domain%", $domain, $named_tpl ); $named_tpl = str_replace( "%\162\160em\141\151\x6c%", $email, $named_tpl ); $named_tpl = str_replace( "%nameserver%", $nameserver, $named_tpl ); $named_tpl = str_replace( "%nameserver2%", $nameserver2, $named_tpl ); $named_tpl = str_replace( "%\x66\164p\x69\x70%", $domain, $named_tpl ); $named_tpl = str_replace( "%ip%", $XZm2d2g1TPA0L0['ip_address'], $named_tpl ); file_put_contents('/var/named/'.$domain.'.db', $named_tpl); if (file_exists('/var/named/'.$domain.'.db')){ echo "\x44NS Zo\x6e\145 \x66o\x72 domain {$domain} \x63\162eat\145d, \146il\x65: /v\141r/n\141m\x65d/{$domain}.d\x62<br>"; } else{ echo "\x41\x64\144\x69\156g \104\x4e\123 Z\x6f\156\x65 for domain {$domain} \106\x41IL\105\104, \146\x69le: /\166ar/\156\141\x6d\145\x64/{$domain}.d\142 \144\157e\163 NOT \x45\130I\x53\124!<br>"; } } else{ echo "\101\x64\x64i\x6eg \104N\x53 Z\157n\x65 \146\157\x72 domain {$domain} F\x41IL\x45\x44, \x66\151\154e: /v\141r/\x6e\141\x6de\144/{$domain}.\144\x62 \x41\114\x52\105D\131 EX\x49\x53\x54!<br>"; } } function zel152g5Ut5FkM($filename, $action){  
if (file_exists("/usr/\154\x6f\143\141\x6c/c\167\x70/.\143\157\156\146/d\156\x73_\143\x6c\165s\164\145\x72.c\x6f\156f")){ shell_exec(""); } } ;