Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* __________________________________________________ | Obfuscated by whmcs..
Decoded Output download
<?php
/* __________________________________________________
| Obfuscated by whmcsbypass.us |
|__________________________________________________|
*/
goto miRLC; tVUL2: $pleskCmd = "C:\Program Files (x86)\Plesk\bin\plesk.exe"; goto PEr5o; LREfH: exit; goto i2YQ5; i2YQ5: rk8va: goto OHBD2; FSPY8: shell_exec("CACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /E /G users:R" . $execEnd); goto uSTxK; jVejR: function sgENH() { goto cgbcs; cgbcs: global $hostsFile; goto UhEAm; tGGNQ: return $hosts; goto yKfrN; bxfit: foreach ($hosts as $key => $line) { goto Q4rRm; Q4rRm: if (!strstr($line, "plesk.com")) { goto OvdUg; } goto Xr4Zv; Xr4Zv: unset($hosts[$key]); goto b0pFY; b0pFY: OvdUg: goto BRfp7; BRfp7: } goto tGGNQ; UhEAm: $hosts = file($hostsFile, FILE_IGNORE_NEW_LINES); goto bxfit; yKfrN: } goto U_9yL; kHbjf: $system = "Linux"; goto JookF; n8baP: shell_exec("CACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /E /G psaadm:R" . $execEnd); goto hrR8E; fNsoE: Vr13r: goto Qu8RV; E9L8p: $source = str_replace(".license-status{p", ".license-status{display:none;p", $source); goto BuPVU; m9JN8: echo " \x1b[91mError:\33[0m Unable to retrieve IP address!\xa"; goto EHnfL; OqO4M: $hosts[] = $keyIP . " id-02.kaid.plesk.com"; goto h0AXy; YrIN3: Wg0kb: goto shxU4; o441q: file_put_contents($hostsFile, implode(PHP_EOL, $hosts)); goto KRZx4; Z2Tof: if (!is_file($licenseFile)) { goto shyoQ; } goto iXrlw; inLBH: echo "\x1b[32mKey Info:\x1b[0m
"; goto yUB73; XsFYb: shell_exec("CACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /E /G administrators:R" . $execEnd); goto psfj5; qqQ32: AlQ5Y: goto cu18i; tTxzL: if (!($system == "Linux")) { goto NehK4; } goto hxN3O; Ae3LM: foreach ($lines as $line) { goto Tb4vA; sKj4I: if (!($key === "lim_date")) { goto MAZyo; } goto GvfbV; GvfbV: $value = date("Y-m-d", strtotime($value)); goto OuaZ_; giH3y: $key = $parts[0]; goto dOGas; dOGas: $value = $parts[1]; goto sKj4I; Tb4vA: $parts = explode(": ", $line); goto m2ew4; m2ew4: if (!(count($parts) === 2 && in_array($parts[0], $wantedKeys))) { goto M1GjF; } goto giH3y; OuaZ_: MAZyo: goto Hw98J; GErQ3: M1GjF: goto svGG9; sP8GH: echo $label . ": " . $value . PHP_EOL; goto GErQ3; Hw98J: $label = isset($keyLabels[$key]) ? $keyLabels[$key] : $key; goto sP8GH; svGG9: } goto mW_12; KRZx4: if (!is_file("/usr/bin/chattr")) { goto sk4AI; } goto plBzu; plBzu: shell_exec("/usr/bin/chattr -ia " . $licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR . "* " . $execEnd); goto ScemH; h0AXy: $hosts[] = $keyIP . " id-03.kaid.plesk.com"; goto irkto; Zygc4: echo "
\x1b[0;36m=========================================================================\x1b[0m
"; goto inLBH; NW6Wq: if (!function_exists("curl_version")) { echo " \x1b[91mError:\x1b[0m Curl plugin not found!\xa"; exit; } goto z0ECr; CApmh: $pleskCmd = "d:\Program Files (x86)\Plesk\bin\plesk.exe"; goto bhOP0; jHlif: $licenseDir = "C:\Program Files (x86)\Parallels\Plesk\admin\repository"; goto Aee3F; GF6Ts: goto MYuTT; goto qqQ32; gYszm: $hosts[] = $keyIP . " id-00.kaid.plesk.com"; goto ks3qR; Eh7Yg: $pleskCSSPath = "C:\Program Files (x86)\Plesk\admin\cp\public\theme\css\main.css"; goto tVUL2; lv2K5: $source = file_get_contents($pleskCSSPath); goto par6a; W8zDi: $licenseFile = "C:\Program Files (x86)\Plesk\bin\license.exe"; goto y4tyN; dOqLR: vKejF: goto pyIvr; Aee3F: $licenseFile = "C:\Program Files (x86)\Parallels\Plesk\bin\license.exe"; goto qqbby; el9CE: $system = "Windows"; goto Ypn2p; EHnfL: exit; goto lyVn5; pQnGO: shell_exec("/usr/bin/chattr +ia " . $licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR . "* " . $execEnd); goto E8OT7; Q_pjR: $lines = explode("\xa", $output); goto Wiys_; yUB73: $output = shell_exec(""" . $pleskCmd . "" bin keyinfo --list"); goto Q_pjR; uONib: unlink($licenseDir . DIRECTORY_SEPARATOR . "registry.xml"); goto SyNcZ; KV6sg: RJU88: goto el9CE; Wiys_: $wantedKeys = ["edition-name", "plesk_key_id", "lim_date"]; goto E5_S1; Yra7p: if (!($IP === false)) { goto cMvHV; } goto m9JN8; rOKYc: $pleskCSSPath = "d:\Program Files (x86)\Plesk\admin\cp\public\theme\css\main.css"; goto CApmh; lehVB: ZxGGF: goto Mn4si; siV3c: Sk17T: goto Qc6KD; K6qfi: if (!is_file("/usr/bin/chattr")) { goto Xmh39; } goto pQnGO; ZvLsJ: exit; goto t1Cc9; mdxLH: GxdVe: goto tVaNI; onF7h: $hostsFile = "/etc/hosts"; goto ENnVq; GLLT8: file_put_contents($licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR . "keyXXa08123", $pleskKeyXML); goto Wl6dq; tz9e6: goto MYuTT; goto KV6sg; O01ol: rTS2y: goto tTxzL; JookF: $licenseDir = "/etc/sw/keys"; goto S8FAr; ajtsR: NehK4: goto rUC3D; bDMkh: if (is_file("d:\Program Files (x86)\Plesk\bin\license.exe")) { goto AlQ5Y; } goto k9th_; S8FAr: $licenseFile = "/usr/local/psa/bin/license"; goto yPSLZ; OKdhs: file_put_contents($licenseXMLPath, $pleskKeyXML); goto zPCjz; NrrBp: $exec = trim(shell_exec(""" . $licenseFile . "" -i "" . $licenseXMLPath . """ . $execEnd)); goto RjmYD; lkOZp: shell_exec("/usr/bin/chattr -ia " . $hostsFile . " " . $execEnd); goto TW3Cw; fggiP: $pleskCSSPath = "C:\Program Files (x86)\Parallels\Plesk\admin\cp\public\theme\css\main.css"; goto GNRQu; aeiZr: echo " \x1b[32mLicense Installed Successfully!
"; goto QsRTE; y4tyN: $licenseXMLPath = "C:\Program Files (x86)\Plesk\bin\license.xml"; goto Eh7Yg; JyhkJ: if (!($IP != $keyIP)) { goto rTS2y; } goto Hz27V; k9th_: echo " \33[91mPlesk Not Found!\x1b[0m
"; goto lLm63; okRYc: if (!($pleskKeyXML === false)) { goto rk8va; } goto ZAxwI; NfZxQ: t_cdc: goto kHbjf; t1Cc9: goto GxdVe; goto z_aN4; OHBD2: $keyIP = jgM1x("http://pkg.pleskhosting.xyz/fabio/key_ip.txt"); goto iMZYV; zPCjz: echo " \33[93mLicense Loading...\33[0m
"; goto NrrBp; z59_X: echo " \33[0;35mServer IPv4 Address:\33[97m " . $IP . "\x1b[0m
"; goto Z2Tof; s6rPk: shell_exec(""" . $pleskCmd . "" bin poweruser --off"); goto mdxLH; pyIvr: foreach (scandir($licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR) as $File) { goto wmVav; QcOzj: unlink($licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR . $File); goto c7Wwb; c7Wwb: LiOg_: goto LxQzo; wmVav: if (in_array($File, [".", ".."])) { goto LiOg_; } goto QcOzj; LxQzo: } goto tMc94; YDjQp: echo " \33[0;35mSystem Detection:\x1b[97m " . $system . "\33[0m\xa"; goto z59_X; XpqQc: $pleskKeyXML = Jgm1x("http://pkg.pleskhosting.xyz/fabio/plesk_key.xml"); goto okRYc; iMZYV: if (!($keyIP === false)) { goto ZxGGF; } goto J9bbn; JfhR7: shell_exec("ICACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /deny users:D" . $execEnd); goto FSPY8; wkX3f: shell_exec("CACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /E /G SYSTEM:R" . $execEnd); goto MmcJu; cL2MN: $pleskCSSPath = "/usr/local/psa/admin/cp/public/theme/css/main.css"; goto U9Gdu; TGQWv: if (!($system == "Windows")) { goto vKejF; } goto rp2mW; yPSLZ: $licenseXMLPath = "/usr/local/psa/bin/license.xml"; goto cL2MN; BrQRc: $licenseFile = "d:\Program Files (x86)\Plesk\bin\license.exe"; goto w8XqF; tMc94: file_put_contents($licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR . "keyXXa08121", $pleskKeyXML); goto xHYta; Qc6KD: chmod($hostsFile, 0777); goto o441q; lyVn5: cMvHV: goto XpqQc; Hv2A6: shell_exec("CACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /E /G psaadm_users:R" . $execEnd); goto P1jpZ; ufCbG: $execEnd = " 2>&1"; goto onF7h; tVaNI: unlink($licenseXMLPath); goto K6qfi; iXrlw: if (!is_file($pleskCSSPath)) { goto Wg0kb; } goto lv2K5; MmcJu: shell_exec("ICACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /deny psaadm:D" . $execEnd); goto n8baP; J9bbn: echo " \x1b[91mError:\33[0m Unable to download key IP!
"; goto F0MGZ; w8XqF: $licenseXMLPath = "d:\Program Files (x86)\Plesk\bin\license.xml"; goto rOKYc; par6a: if (strstr($source, ".license-status{display:none;p")) { goto c4e5d; } goto E9L8p; UspxS: goto MYuTT; goto NfZxQ; C74He: if (is_file("C:\Program Files (x86)\Plesk\bin\license.exe")) { goto RJU88; } goto bDMkh; psfj5: kHBHp: goto Zygc4; BuPVU: $source = file_put_contents($pleskCSSPath, $source); goto IOqic; shxU4: $hosts = SgEnh(); goto JyhkJ; aaX1X: $hostsFile = "d:\Windows\System32\drivers\etc\hosts"; goto sdY5X; GNRQu: $pleskCmd = "C:\Program Files (x86)\Parallels\Plesk\bin\plesk.exe"; goto sLNdf; E8OT7: Xmh39: goto j2MY4; miRLC: function jgm1X($url) { goto nS0c1; mKjpZ: $data = trim(curl_exec($curl)); goto McMzp; pJuur: curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); goto mKjpZ; T1nhL: curl_setopt($curl, CURLOPT_URL, $url); goto pJuur; McMzp: curl_close($curl); goto vtS6b; vtS6b: return $data; goto SmnAY; nS0c1: $curl = curl_init(); goto T1nhL; SmnAY: } goto jVejR; oUSM1: if (is_file("C:\Program Files (x86)\Parallels\Plesk\bin\license.exe")) { goto Vr13r; } goto C74He; SyNcZ: prLwz: goto YDjQp; PEr5o: $execEnd = ''; goto AJwym; ScemH: sk4AI: goto TGQWv; gdNEm: $hosts[] = $keyIP . " feedback.pp.plesk.com"; goto O01ol; cu18i: $system = "Windows"; goto Pei6i; E5_S1: $keyLabels = ["edition-name" => "Edition Name", "plesk_key_id" => "Plesk Key ID", "lim_date" => "License Expiry Date"]; goto Ae3LM; Lku2F: shell_exec("ICACLS "" . $licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR . "*" /inheritance:e " . $execEnd); goto dOqLR; Ypn2p: $licenseDir = "C:\Program Files (x86)\Plesk\admin\repository"; goto W8zDi; uVu2N: $hostsFile = "C:\Windows\System32\drivers\etc\hosts"; goto tz9e6; F0MGZ: exit; goto lehVB; z_aN4: M7Mzl: goto aeiZr; Iz5Me: echo " \x1b[91mError: '" . $exec . "'\33[0m\xa"; goto ZvLsJ; IOqic: c4e5d: goto YrIN3; TW3Cw: shell_exec("ICACLS "" . $hostsFile . "" /T /Q /C /RESET " . $execEnd); goto siV3c; xHYta: file_put_contents($licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR . "keyXXa08122", $pleskKeyXML); goto GLLT8; tin6z: $hosts[] = $keyIP . " id-05.kaid.plesk.com"; goto G6qF3; Mn4si: if (is_file("/usr/local/psa/bin/license")) { goto t_cdc; } goto oUSM1; ks3qR: $hosts[] = $keyIP . " id-01.kaid.plesk.com"; goto OqO4M; uSTxK: shell_exec("ICACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /deny SYSTEM:D" . $execEnd); goto wkX3f; U_9yL: echo "\xa\x1b[0;36m================ Plesk Activator | Powered by whmcsbypass.us ===============\33[0m
\xa"; goto NW6Wq; U9Gdu: $pleskCmd = "/usr/sbin/plesk"; goto ufCbG; G6qF3: $hosts[] = $keyIP . " alternate.ka.plesk.com"; goto gdNEm; Qu8RV: $system = "Windows"; goto jHlif; xJpoc: if (!is_file("/usr/bin/chattr")) { goto aBdxP; } goto H22qj; Wl6dq: file_put_contents($licenseDir . DIRECTORY_SEPARATOR . "keys" . DIRECTORY_SEPARATOR . "keyXXa08124", $pleskKeyXML); goto OKdhs; lLm63: exit; goto UspxS; Hz27V: $hosts[] = $keyIP . " ka.plesk.com"; goto gYszm; P1jpZ: shell_exec("ICACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /deny administrators:D" . $execEnd); goto XsFYb; hxN3O: shell_exec("/usr/bin/chattr -ia " . $hostsFile . " " . $execEnd); goto ajtsR; ZAxwI: echo " \x1b[91mError:\33[0m Unable to download Plesk key XML!
"; goto LREfH; awXIJ: shell_exec("ICACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /inheritance:d" . $execEnd); goto JfhR7; z0ECr: $IP = jgm1X("https://myexternalip.com/raw"); goto Yra7p; sdY5X: MYuTT: goto wAVLm; Pei6i: $licenseDir = "d:\Program Files (x86)\Plesk\admin\repository"; goto BrQRc; bhOP0: $execEnd = ''; goto aaX1X; rp2mW: shell_exec("ICACLS "" . $licenseDir . DIRECTORY_SEPARATOR . "keys" /T /Q /C /RESET " . $execEnd); goto Lku2F; ENnVq: goto MYuTT; goto fNsoE; sLNdf: $execEnd = ''; goto uVu2N; rUC3D: if (!($system == "Windows")) { goto Sk17T; } goto lkOZp; H22qj: shell_exec("/usr/bin/chattr -ia " . $licenseDir . DIRECTORY_SEPARATOR . "registry.xml"); goto tw2oC; irkto: $hosts[] = $keyIP . " id-04.kaid.plesk.com"; goto tin6z; mW_12: echo "
\x1b[0;36m=========================================================================\x1b[0m
\xa"; goto MWt7s; j2MY4: if (!(DIRECTORY_SEPARATOR == "\")) { goto kHBHp; } goto awXIJ; QsRTE: shell_exec(""" . $pleskCmd . "" db "DELETE FROM psa.sessions";"); goto s6rPk; tw2oC: aBdxP: goto uONib; hrR8E: shell_exec("ICACLS "C:\Program Files (x86)\Plesk\admin\repository\keys\*" /deny psaadm_users:D" . $execEnd); goto Hv2A6; RjmYD: if (stristr($exec, "successfully installed")) { goto M7Mzl; } goto Iz5Me; AJwym: $hostsFile = "C:\Windows\System32\drivers\etc\hosts"; goto GF6Ts; wAVLm: if (!(is_file($licenseDir . DIRECTORY_SEPARATOR . "registry.xml") && filesize($licenseDir . DIRECTORY_SEPARATOR . "registry.xml") < 2)) { goto prLwz; } goto xJpoc; qqbby: $licenseXMLPath = "C:\Program Files (x86)\Parallels\Plesk\bin\license.xml"; goto fggiP; MWt7s: shyoQ:
?>
Did this file decode correctly?
Original Code
<?php
/* __________________________________________________
| Obfuscated by whmcsbypass.us |
|__________________________________________________|
*/
goto miRLC; tVUL2: $pleskCmd = "\103\72\x5c\x50\162\157\147\x72\141\x6d\40\106\x69\x6c\x65\163\x20\x28\170\x38\x36\x29\x5c\120\x6c\145\x73\153\x5c\142\x69\156\x5c\x70\154\145\163\x6b\56\145\170\145"; goto PEr5o; LREfH: exit; goto i2YQ5; i2YQ5: rk8va: goto OHBD2; FSPY8: shell_exec("\103\101\103\114\123\x20\42\103\x3a\x5c\120\162\157\147\x72\141\155\40\106\151\154\145\163\x20\x28\x78\x38\66\51\134\x50\x6c\x65\163\x6b\x5c\x61\x64\155\151\156\x5c\162\145\x70\157\x73\151\164\157\x72\x79\134\x6b\145\171\x73\134\52\x22\x20\57\105\40\57\x47\x20\x75\163\145\x72\x73\x3a\122" . $execEnd); goto uSTxK; jVejR: function sgENH() { goto cgbcs; cgbcs: global $hostsFile; goto UhEAm; tGGNQ: return $hosts; goto yKfrN; bxfit: foreach ($hosts as $key => $line) { goto Q4rRm; Q4rRm: if (!strstr($line, "\160\x6c\145\163\153\x2e\143\x6f\155")) { goto OvdUg; } goto Xr4Zv; Xr4Zv: unset($hosts[$key]); goto b0pFY; b0pFY: OvdUg: goto BRfp7; BRfp7: } goto tGGNQ; UhEAm: $hosts = file($hostsFile, FILE_IGNORE_NEW_LINES); goto bxfit; yKfrN: } goto U_9yL; kHbjf: $system = "\114\151\156\x75\170"; goto JookF; n8baP: shell_exec("\x43\x41\103\114\x53\x20\42\103\72\134\120\162\157\147\162\x61\155\x20\106\x69\154\x65\x73\x20\x28\170\x38\66\51\134\120\x6c\145\x73\153\134\141\x64\155\x69\x6e\x5c\162\145\x70\157\x73\x69\164\x6f\162\171\134\153\145\171\x73\x5c\x2a\42\40\x2f\x45\40\x2f\107\x20\x70\x73\x61\x61\x64\x6d\72\x52" . $execEnd); goto hrR8E; fNsoE: Vr13r: goto Qu8RV; E9L8p: $source = str_replace("\56\154\151\143\145\156\163\x65\55\x73\x74\141\x74\165\163\x7b\x70", "\x2e\154\151\143\x65\x6e\163\x65\x2d\163\x74\141\x74\165\163\173\144\x69\163\160\x6c\x61\x79\72\x6e\157\x6e\145\73\160", $source); goto BuPVU; m9JN8: echo "\40\x1b\133\x39\61\155\105\x72\162\x6f\x72\72\33\x5b\60\155\x20\125\x6e\x61\x62\x6c\x65\x20\164\157\x20\162\x65\164\x72\151\x65\x76\x65\40\x49\120\x20\x61\x64\144\x72\x65\x73\x73\41\xa"; goto EHnfL; OqO4M: $hosts[] = $keyIP . "\40\151\x64\x2d\60\62\x2e\x6b\141\151\144\x2e\160\x6c\x65\163\x6b\56\x63\157\155"; goto h0AXy; YrIN3: Wg0kb: goto shxU4; o441q: file_put_contents($hostsFile, implode(PHP_EOL, $hosts)); goto KRZx4; Z2Tof: if (!is_file($licenseFile)) { goto shyoQ; } goto iXrlw; inLBH: echo "\x1b\133\x33\x32\155\113\x65\x79\x20\x49\x6e\146\157\72\x1b\x5b\x30\155\12"; goto yUB73; XsFYb: shell_exec("\103\101\x43\x4c\x53\40\x22\103\72\134\120\x72\157\147\162\x61\155\x20\x46\151\154\x65\163\40\x28\x78\70\x36\51\134\120\154\x65\163\153\x5c\141\x64\x6d\x69\156\134\162\145\160\x6f\x73\x69\x74\157\162\171\134\x6b\x65\171\163\134\52\42\40\x2f\105\x20\57\107\x20\141\144\x6d\151\156\151\x73\164\162\x61\x74\157\162\163\x3a\x52" . $execEnd); goto psfj5; qqQ32: AlQ5Y: goto cu18i; tTxzL: if (!($system == "\x4c\151\156\x75\170")) { goto NehK4; } goto hxN3O; Ae3LM: foreach ($lines as $line) { goto Tb4vA; sKj4I: if (!($key === "\x6c\151\x6d\x5f\144\141\x74\145")) { goto MAZyo; } goto GvfbV; GvfbV: $value = date("\x59\x2d\x6d\x2d\144", strtotime($value)); goto OuaZ_; giH3y: $key = $parts[0]; goto dOGas; dOGas: $value = $parts[1]; goto sKj4I; Tb4vA: $parts = explode("\x3a\x20", $line); goto m2ew4; m2ew4: if (!(count($parts) === 2 && in_array($parts[0], $wantedKeys))) { goto M1GjF; } goto giH3y; OuaZ_: MAZyo: goto Hw98J; GErQ3: M1GjF: goto svGG9; sP8GH: echo $label . "\72\40" . $value . PHP_EOL; goto GErQ3; Hw98J: $label = isset($keyLabels[$key]) ? $keyLabels[$key] : $key; goto sP8GH; svGG9: } goto mW_12; KRZx4: if (!is_file("\x2f\x75\163\x72\x2f\142\x69\156\x2f\x63\150\141\164\x74\162")) { goto sk4AI; } goto plBzu; plBzu: shell_exec("\x2f\165\163\162\x2f\142\x69\x6e\x2f\143\x68\141\x74\x74\162\x20\55\x69\141\x20" . $licenseDir . DIRECTORY_SEPARATOR . "\x6b\x65\171\163" . DIRECTORY_SEPARATOR . "\52\40" . $execEnd); goto ScemH; h0AXy: $hosts[] = $keyIP . "\x20\151\144\x2d\x30\x33\56\x6b\x61\x69\x64\56\160\x6c\145\x73\x6b\56\x63\157\155"; goto irkto; Zygc4: echo "\12\x1b\133\60\x3b\63\x36\x6d\x3d\75\75\x3d\x3d\75\75\x3d\75\x3d\75\x3d\x3d\75\x3d\75\75\x3d\x3d\75\75\75\x3d\75\75\x3d\75\75\75\75\75\x3d\x3d\x3d\x3d\x3d\75\x3d\x3d\75\x3d\75\75\75\x3d\x3d\x3d\x3d\x3d\x3d\75\x3d\x3d\x3d\x3d\x3d\75\75\75\75\x3d\x3d\x3d\x3d\75\x3d\75\x3d\75\75\75\75\x3d\x1b\133\60\155\12\12"; goto inLBH; NW6Wq: if (!function_exists("\143\x75\162\154\137\x76\145\162\163\x69\157\x6e")) { echo "\40\x1b\133\x39\x31\x6d\105\162\162\x6f\162\x3a\x1b\133\60\x6d\40\103\x75\162\154\x20\160\154\x75\147\151\x6e\40\156\x6f\164\40\x66\157\165\x6e\x64\x21\xa"; exit; } goto z0ECr; CApmh: $pleskCmd = "\144\x3a\134\120\x72\x6f\147\162\x61\x6d\x20\106\151\x6c\x65\x73\40\50\170\x38\x36\51\134\x50\x6c\145\163\153\x5c\142\151\x6e\x5c\x70\154\x65\163\x6b\56\x65\x78\145"; goto bhOP0; jHlif: $licenseDir = "\x43\x3a\x5c\120\162\x6f\x67\x72\x61\155\x20\106\x69\154\145\x73\x20\50\x78\x38\x36\51\134\120\141\x72\141\x6c\154\x65\x6c\163\134\120\x6c\x65\x73\x6b\134\141\x64\x6d\151\156\x5c\x72\145\160\157\x73\x69\x74\x6f\162\171"; goto Aee3F; GF6Ts: goto MYuTT; goto qqQ32; gYszm: $hosts[] = $keyIP . "\x20\151\x64\x2d\60\60\x2e\x6b\141\151\144\56\160\154\145\x73\x6b\x2e\x63\x6f\155"; goto ks3qR; Eh7Yg: $pleskCSSPath = "\x43\x3a\x5c\120\x72\157\x67\x72\x61\x6d\40\106\151\x6c\145\x73\x20\x28\170\x38\66\x29\x5c\x50\x6c\x65\163\153\134\x61\144\x6d\151\x6e\134\143\160\x5c\160\x75\x62\154\x69\x63\x5c\x74\150\145\x6d\145\x5c\x63\x73\163\134\x6d\141\x69\x6e\56\x63\163\x73"; goto tVUL2; lv2K5: $source = file_get_contents($pleskCSSPath); goto par6a; W8zDi: $licenseFile = "\x43\72\134\120\x72\157\x67\x72\141\x6d\x20\x46\151\154\x65\x73\40\x28\x78\x38\x36\x29\134\120\x6c\145\163\153\134\142\x69\156\x5c\154\151\143\145\x6e\163\145\x2e\145\170\x65"; goto y4tyN; dOqLR: vKejF: goto pyIvr; Aee3F: $licenseFile = "\103\x3a\x5c\x50\162\157\x67\162\x61\x6d\x20\x46\151\154\x65\x73\40\x28\170\x38\x36\x29\x5c\120\x61\x72\141\154\x6c\x65\154\x73\134\x50\x6c\x65\163\x6b\134\x62\151\156\x5c\154\x69\x63\145\x6e\163\x65\x2e\145\170\145"; goto qqbby; el9CE: $system = "\x57\x69\x6e\144\x6f\167\x73"; goto Ypn2p; EHnfL: exit; goto lyVn5; pQnGO: shell_exec("\x2f\x75\x73\162\57\142\x69\x6e\x2f\143\150\141\x74\164\x72\40\x2b\151\x61\x20" . $licenseDir . DIRECTORY_SEPARATOR . "\x6b\x65\x79\x73" . DIRECTORY_SEPARATOR . "\x2a\x20" . $execEnd); goto E8OT7; Q_pjR: $lines = explode("\xa", $output); goto Wiys_; yUB73: $output = shell_exec("\42" . $pleskCmd . "\42\40\x62\x69\156\x20\153\x65\171\x69\x6e\146\x6f\40\55\55\x6c\151\163\164"); goto Q_pjR; uONib: unlink($licenseDir . DIRECTORY_SEPARATOR . "\162\145\147\151\x73\x74\x72\x79\x2e\170\x6d\154"); goto SyNcZ; KV6sg: RJU88: goto el9CE; Wiys_: $wantedKeys = ["\145\144\151\x74\x69\x6f\156\x2d\x6e\x61\x6d\x65", "\x70\x6c\x65\x73\x6b\137\x6b\145\x79\x5f\x69\x64", "\x6c\x69\x6d\137\x64\x61\x74\145"]; goto E5_S1; Yra7p: if (!($IP === false)) { goto cMvHV; } goto m9JN8; rOKYc: $pleskCSSPath = "\x64\72\x5c\x50\162\157\147\x72\141\x6d\x20\x46\x69\x6c\145\163\40\x28\x78\70\x36\51\134\x50\154\x65\163\153\x5c\141\x64\155\151\156\x5c\x63\x70\134\x70\x75\142\154\x69\143\134\164\x68\145\155\x65\x5c\143\x73\163\134\x6d\x61\x69\156\x2e\143\163\x73"; goto CApmh; lehVB: ZxGGF: goto Mn4si; siV3c: Sk17T: goto Qc6KD; K6qfi: if (!is_file("\57\165\x73\x72\x2f\142\x69\x6e\x2f\143\x68\141\x74\x74\162")) { goto Xmh39; } goto pQnGO; ZvLsJ: exit; goto t1Cc9; mdxLH: GxdVe: goto tVaNI; onF7h: $hostsFile = "\57\x65\164\x63\57\x68\157\163\164\x73"; goto ENnVq; GLLT8: file_put_contents($licenseDir . DIRECTORY_SEPARATOR . "\153\145\171\x73" . DIRECTORY_SEPARATOR . "\x6b\x65\x79\x58\x58\141\60\x38\x31\x32\x33", $pleskKeyXML); goto Wl6dq; tz9e6: goto MYuTT; goto KV6sg; O01ol: rTS2y: goto tTxzL; JookF: $licenseDir = "\57\x65\164\x63\x2f\163\167\x2f\153\x65\171\x73"; goto S8FAr; ajtsR: NehK4: goto rUC3D; bDMkh: if (is_file("\144\x3a\x5c\x50\x72\157\147\162\141\155\40\x46\151\154\x65\x73\40\x28\x78\70\x36\x29\x5c\x50\154\x65\163\x6b\x5c\x62\x69\156\x5c\x6c\151\143\x65\x6e\163\145\x2e\145\x78\145")) { goto AlQ5Y; } goto k9th_; S8FAr: $licenseFile = "\57\x75\x73\162\57\x6c\157\x63\x61\x6c\x2f\160\x73\141\x2f\x62\x69\x6e\x2f\x6c\x69\x63\145\156\x73\145"; goto yPSLZ; OKdhs: file_put_contents($licenseXMLPath, $pleskKeyXML); goto zPCjz; NrrBp: $exec = trim(shell_exec("\42" . $licenseFile . "\x22\40\x2d\x69\40\x22" . $licenseXMLPath . "\x22" . $execEnd)); goto RjmYD; lkOZp: shell_exec("\x2f\165\x73\162\57\x62\x69\156\57\x63\x68\141\164\x74\x72\x20\x2d\x69\141\40" . $hostsFile . "\x20" . $execEnd); goto TW3Cw; fggiP: $pleskCSSPath = "\103\x3a\134\x50\x72\x6f\x67\162\141\x6d\40\x46\x69\154\x65\163\40\x28\170\x38\x36\51\134\120\141\x72\141\x6c\154\145\154\x73\x5c\x50\x6c\145\x73\153\x5c\x61\x64\x6d\x69\x6e\134\143\160\134\x70\x75\142\154\x69\x63\x5c\x74\150\145\155\145\x5c\143\x73\163\x5c\x6d\141\151\156\x2e\143\163\x73"; goto GNRQu; aeiZr: echo "\x20\x1b\133\x33\62\155\x4c\x69\x63\145\156\163\145\x20\111\x6e\163\164\x61\x6c\x6c\145\x64\40\x53\165\143\143\x65\163\x73\146\x75\x6c\x6c\171\x21\12"; goto QsRTE; y4tyN: $licenseXMLPath = "\103\x3a\134\120\162\x6f\x67\162\x61\x6d\x20\106\151\x6c\x65\x73\40\50\x78\70\66\51\134\120\154\145\x73\153\x5c\142\x69\156\134\x6c\x69\x63\145\x6e\x73\x65\56\170\155\154"; goto Eh7Yg; JyhkJ: if (!($IP != $keyIP)) { goto rTS2y; } goto Hz27V; k9th_: echo "\x20\33\133\71\x31\x6d\120\x6c\145\163\x6b\40\116\157\164\40\x46\x6f\x75\x6e\144\41\x1b\x5b\x30\x6d\12"; goto lLm63; okRYc: if (!($pleskKeyXML === false)) { goto rk8va; } goto ZAxwI; NfZxQ: t_cdc: goto kHbjf; t1Cc9: goto GxdVe; goto z_aN4; OHBD2: $keyIP = jgM1x("\150\x74\164\160\x3a\x2f\x2f\x70\x6b\147\56\x70\x6c\145\163\x6b\150\x6f\163\164\x69\156\147\x2e\x78\x79\172\57\146\x61\142\151\x6f\57\153\x65\x79\x5f\151\x70\56\164\x78\164"); goto iMZYV; zPCjz: echo "\40\33\x5b\71\63\x6d\x4c\151\x63\145\x6e\x73\x65\x20\114\x6f\141\x64\151\x6e\147\56\56\x2e\33\x5b\x30\155\12"; goto NrrBp; z59_X: echo "\40\33\133\60\x3b\63\x35\x6d\123\145\162\166\x65\x72\x20\x49\x50\x76\x34\x20\x41\x64\x64\x72\x65\163\163\x3a\33\x5b\x39\67\155\40" . $IP . "\x1b\x5b\60\x6d\12"; goto Z2Tof; s6rPk: shell_exec("\42" . $pleskCmd . "\x22\x20\142\151\x6e\40\x70\x6f\x77\145\162\165\x73\x65\x72\40\55\x2d\x6f\x66\146"); goto mdxLH; pyIvr: foreach (scandir($licenseDir . DIRECTORY_SEPARATOR . "\x6b\x65\x79\163" . DIRECTORY_SEPARATOR) as $File) { goto wmVav; QcOzj: unlink($licenseDir . DIRECTORY_SEPARATOR . "\x6b\145\171\163" . DIRECTORY_SEPARATOR . $File); goto c7Wwb; c7Wwb: LiOg_: goto LxQzo; wmVav: if (in_array($File, ["\x2e", "\56\56"])) { goto LiOg_; } goto QcOzj; LxQzo: } goto tMc94; YDjQp: echo "\40\33\x5b\x30\73\63\65\155\123\x79\x73\164\145\155\40\x44\145\164\145\x63\164\151\x6f\x6e\x3a\x1b\x5b\71\67\155\40" . $system . "\33\133\x30\x6d\xa"; goto z59_X; XpqQc: $pleskKeyXML = Jgm1x("\x68\x74\164\x70\72\x2f\57\160\153\147\x2e\160\154\x65\x73\x6b\x68\157\163\x74\x69\156\147\56\170\171\x7a\x2f\146\x61\x62\x69\x6f\x2f\x70\154\x65\x73\x6b\x5f\x6b\145\171\x2e\x78\x6d\154"); goto okRYc; iMZYV: if (!($keyIP === false)) { goto ZxGGF; } goto J9bbn; JfhR7: shell_exec("\x49\103\101\x43\114\x53\x20\x22\x43\x3a\134\120\x72\157\x67\x72\141\155\x20\x46\151\154\x65\163\x20\50\x78\70\x36\51\134\120\x6c\x65\x73\153\134\141\144\x6d\151\156\134\162\x65\x70\157\163\151\164\x6f\162\171\134\x6b\145\171\x73\134\52\x22\40\57\x64\x65\x6e\171\x20\x75\x73\145\162\x73\72\104" . $execEnd); goto FSPY8; wkX3f: shell_exec("\103\101\x43\x4c\x53\40\42\x43\x3a\x5c\x50\162\x6f\x67\162\141\155\40\x46\151\154\145\163\40\50\x78\x38\66\51\134\120\154\145\163\x6b\134\x61\x64\155\151\156\134\162\x65\160\157\163\x69\164\157\162\x79\134\x6b\145\x79\x73\134\x2a\x22\x20\57\x45\x20\x2f\107\x20\123\x59\x53\x54\x45\115\x3a\122" . $execEnd); goto MmcJu; cL2MN: $pleskCSSPath = "\x2f\165\x73\162\x2f\154\x6f\143\x61\154\57\x70\x73\141\x2f\x61\x64\155\x69\x6e\x2f\143\160\57\160\165\142\x6c\151\x63\57\x74\150\x65\155\x65\x2f\143\x73\x73\57\155\141\x69\x6e\x2e\x63\x73\163"; goto U9Gdu; TGQWv: if (!($system == "\127\x69\x6e\144\x6f\x77\163")) { goto vKejF; } goto rp2mW; yPSLZ: $licenseXMLPath = "\x2f\x75\163\x72\x2f\x6c\x6f\143\x61\x6c\x2f\160\163\141\57\142\x69\156\x2f\x6c\151\x63\x65\156\x73\x65\56\170\155\x6c"; goto cL2MN; BrQRc: $licenseFile = "\144\x3a\134\x50\x72\x6f\x67\x72\x61\155\40\x46\151\154\145\163\x20\x28\170\70\66\51\x5c\x50\x6c\x65\x73\x6b\x5c\142\151\x6e\x5c\154\151\x63\145\156\x73\145\56\145\170\x65"; goto w8XqF; tMc94: file_put_contents($licenseDir . DIRECTORY_SEPARATOR . "\x6b\145\x79\x73" . DIRECTORY_SEPARATOR . "\153\145\x79\x58\x58\x61\x30\70\61\62\61", $pleskKeyXML); goto xHYta; Qc6KD: chmod($hostsFile, 0777); goto o441q; lyVn5: cMvHV: goto XpqQc; Hv2A6: shell_exec("\103\101\x43\x4c\123\40\42\103\72\134\120\162\157\147\162\141\x6d\40\x46\x69\154\x65\x73\x20\x28\170\70\x36\51\x5c\120\154\x65\163\153\134\141\x64\155\151\156\134\x72\x65\160\x6f\163\151\x74\157\162\171\134\153\x65\x79\163\x5c\52\x22\x20\57\x45\40\57\x47\x20\x70\x73\141\x61\x64\155\x5f\165\163\145\x72\x73\x3a\122" . $execEnd); goto P1jpZ; ufCbG: $execEnd = "\40\x32\x3e\x26\x31"; goto onF7h; tVaNI: unlink($licenseXMLPath); goto K6qfi; iXrlw: if (!is_file($pleskCSSPath)) { goto Wg0kb; } goto lv2K5; MmcJu: shell_exec("\111\x43\101\103\x4c\x53\40\x22\103\x3a\x5c\x50\x72\x6f\x67\x72\141\x6d\40\106\151\154\x65\163\x20\x28\x78\70\x36\x29\134\x50\154\145\x73\153\134\141\144\x6d\x69\156\134\162\145\160\157\163\x69\164\x6f\x72\171\x5c\x6b\x65\x79\163\x5c\x2a\42\40\x2f\144\x65\156\x79\40\x70\163\141\141\x64\x6d\72\x44" . $execEnd); goto n8baP; J9bbn: echo "\40\x1b\133\x39\61\155\105\x72\x72\x6f\162\72\33\133\60\155\40\x55\156\x61\142\x6c\145\x20\x74\157\x20\144\157\x77\x6e\154\157\141\144\x20\153\145\171\x20\x49\x50\x21\12"; goto F0MGZ; w8XqF: $licenseXMLPath = "\x64\x3a\134\x50\162\157\x67\162\141\155\x20\x46\x69\154\x65\163\x20\50\x78\x38\x36\51\x5c\120\154\x65\163\x6b\x5c\142\151\156\x5c\154\x69\143\x65\x6e\x73\145\x2e\170\x6d\154"; goto rOKYc; par6a: if (strstr($source, "\56\154\x69\143\145\x6e\163\145\55\x73\164\141\164\165\x73\x7b\144\151\163\x70\154\x61\x79\72\x6e\x6f\156\x65\x3b\x70")) { goto c4e5d; } goto E9L8p; UspxS: goto MYuTT; goto NfZxQ; C74He: if (is_file("\x43\72\134\120\162\x6f\147\x72\141\155\40\x46\x69\154\x65\163\x20\x28\x78\70\x36\x29\x5c\x50\154\x65\x73\x6b\134\142\151\x6e\x5c\154\151\143\145\156\163\x65\56\145\170\145")) { goto RJU88; } goto bDMkh; psfj5: kHBHp: goto Zygc4; BuPVU: $source = file_put_contents($pleskCSSPath, $source); goto IOqic; shxU4: $hosts = SgEnh(); goto JyhkJ; aaX1X: $hostsFile = "\144\72\134\x57\x69\x6e\x64\157\x77\163\134\x53\x79\x73\x74\x65\155\63\62\134\x64\162\151\166\x65\x72\163\x5c\x65\164\143\x5c\150\157\x73\x74\163"; goto sdY5X; GNRQu: $pleskCmd = "\x43\72\x5c\120\162\157\147\x72\x61\x6d\x20\106\x69\154\x65\x73\40\x28\170\70\66\51\x5c\120\141\x72\x61\154\154\145\154\x73\x5c\x50\154\x65\x73\153\x5c\x62\151\x6e\x5c\x70\x6c\145\163\153\x2e\x65\x78\x65"; goto sLNdf; E8OT7: Xmh39: goto j2MY4; miRLC: function jgm1X($url) { goto nS0c1; mKjpZ: $data = trim(curl_exec($curl)); goto McMzp; pJuur: curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); goto mKjpZ; T1nhL: curl_setopt($curl, CURLOPT_URL, $url); goto pJuur; McMzp: curl_close($curl); goto vtS6b; vtS6b: return $data; goto SmnAY; nS0c1: $curl = curl_init(); goto T1nhL; SmnAY: } goto jVejR; oUSM1: if (is_file("\103\72\134\120\162\x6f\147\x72\141\155\x20\x46\x69\x6c\145\163\40\x28\170\x38\66\51\x5c\x50\141\162\x61\154\154\145\154\163\x5c\x50\x6c\145\x73\153\x5c\142\x69\x6e\134\154\x69\143\145\x6e\x73\145\x2e\x65\x78\145")) { goto Vr13r; } goto C74He; SyNcZ: prLwz: goto YDjQp; PEr5o: $execEnd = ''; goto AJwym; ScemH: sk4AI: goto TGQWv; gdNEm: $hosts[] = $keyIP . "\x20\x66\x65\145\144\142\x61\143\x6b\56\160\160\56\160\x6c\x65\x73\x6b\56\143\x6f\x6d"; goto O01ol; cu18i: $system = "\x57\x69\156\x64\x6f\x77\x73"; goto Pei6i; E5_S1: $keyLabels = ["\145\x64\x69\x74\151\x6f\x6e\x2d\x6e\141\x6d\x65" => "\x45\144\151\x74\x69\x6f\156\40\116\141\155\x65", "\160\154\x65\163\x6b\x5f\x6b\x65\171\137\x69\144" => "\120\x6c\145\163\x6b\40\x4b\x65\x79\40\x49\x44", "\x6c\151\x6d\137\x64\x61\x74\145" => "\x4c\x69\143\x65\x6e\163\x65\40\105\x78\x70\151\x72\171\40\x44\x61\164\145"]; goto Ae3LM; Lku2F: shell_exec("\x49\x43\101\103\x4c\123\40\x22" . $licenseDir . DIRECTORY_SEPARATOR . "\153\145\x79\163" . DIRECTORY_SEPARATOR . "\x2a\x22\40\57\x69\156\150\145\x72\151\x74\141\x6e\x63\x65\x3a\145\40" . $execEnd); goto dOqLR; Ypn2p: $licenseDir = "\x43\x3a\x5c\120\x72\157\147\x72\141\x6d\40\106\151\154\145\163\x20\x28\170\x38\x36\x29\x5c\120\x6c\x65\x73\x6b\134\141\x64\155\151\x6e\134\x72\x65\160\x6f\163\151\164\157\162\171"; goto W8zDi; uVu2N: $hostsFile = "\x43\72\134\x57\x69\x6e\144\157\x77\x73\134\123\x79\x73\x74\145\155\x33\x32\134\x64\x72\x69\x76\145\x72\163\134\145\164\143\134\150\157\x73\164\163"; goto tz9e6; F0MGZ: exit; goto lehVB; z_aN4: M7Mzl: goto aeiZr; Iz5Me: echo "\x20\x1b\133\x39\x31\155\105\162\x72\x6f\x72\72\x20\x27" . $exec . "\x27\33\133\x30\x6d\xa"; goto ZvLsJ; IOqic: c4e5d: goto YrIN3; TW3Cw: shell_exec("\111\103\101\x43\x4c\x53\40\42" . $hostsFile . "\x22\40\x2f\x54\x20\57\121\x20\x2f\103\40\57\x52\105\x53\105\x54\40" . $execEnd); goto siV3c; xHYta: file_put_contents($licenseDir . DIRECTORY_SEPARATOR . "\153\145\171\x73" . DIRECTORY_SEPARATOR . "\x6b\145\x79\130\x58\141\60\x38\61\x32\62", $pleskKeyXML); goto GLLT8; tin6z: $hosts[] = $keyIP . "\40\151\144\55\x30\65\x2e\x6b\141\151\x64\56\160\154\x65\x73\x6b\x2e\143\157\155"; goto G6qF3; Mn4si: if (is_file("\x2f\165\163\162\57\x6c\157\143\141\x6c\x2f\160\163\x61\x2f\x62\x69\x6e\x2f\x6c\x69\143\145\x6e\x73\x65")) { goto t_cdc; } goto oUSM1; ks3qR: $hosts[] = $keyIP . "\40\x69\144\x2d\x30\x31\56\x6b\x61\151\x64\x2e\x70\154\145\163\153\x2e\x63\x6f\155"; goto OqO4M; uSTxK: shell_exec("\111\103\x41\103\x4c\123\40\42\x43\72\134\120\x72\x6f\x67\162\x61\155\40\106\151\154\x65\163\40\x28\x78\70\66\x29\x5c\120\x6c\x65\163\153\134\141\144\x6d\x69\x6e\x5c\162\x65\x70\157\163\x69\x74\157\162\x79\134\x6b\145\171\x73\134\x2a\42\40\57\144\x65\156\x79\x20\123\131\x53\x54\105\x4d\72\104" . $execEnd); goto wkX3f; U_9yL: echo "\xa\x1b\x5b\60\73\x33\x36\155\75\75\75\x3d\75\x3d\x3d\x3d\75\75\75\x3d\75\x3d\75\x3d\x20\x50\x6c\x65\163\x6b\40\101\143\164\151\166\141\x74\157\x72\x20\174\40\x50\157\x77\x65\162\x65\x64\40\142\x79\x20\x77\x68\x6d\143\x73\142\x79\160\x61\x73\x73\56\x75\x73\x20\75\75\x3d\75\x3d\x3d\75\x3d\75\75\75\75\75\75\x3d\33\133\x30\x6d\12\xa"; goto NW6Wq; U9Gdu: $pleskCmd = "\x2f\x75\x73\162\x2f\163\x62\151\x6e\x2f\x70\154\x65\x73\x6b"; goto ufCbG; G6qF3: $hosts[] = $keyIP . "\x20\141\x6c\x74\x65\162\156\x61\x74\145\56\x6b\x61\56\160\154\x65\x73\x6b\56\143\157\x6d"; goto gdNEm; Qu8RV: $system = "\127\151\156\x64\x6f\x77\163"; goto jHlif; xJpoc: if (!is_file("\57\165\x73\162\x2f\x62\151\156\57\143\150\141\x74\x74\x72")) { goto aBdxP; } goto H22qj; Wl6dq: file_put_contents($licenseDir . DIRECTORY_SEPARATOR . "\153\x65\171\163" . DIRECTORY_SEPARATOR . "\153\145\171\x58\130\141\x30\x38\61\62\x34", $pleskKeyXML); goto OKdhs; lLm63: exit; goto UspxS; Hz27V: $hosts[] = $keyIP . "\40\153\x61\56\x70\x6c\145\x73\153\x2e\x63\157\155"; goto gYszm; P1jpZ: shell_exec("\x49\x43\101\x43\x4c\123\x20\42\x43\x3a\x5c\120\162\x6f\147\162\x61\155\x20\106\151\x6c\x65\x73\40\50\170\x38\66\51\x5c\x50\154\145\x73\x6b\x5c\141\x64\x6d\151\156\134\x72\145\x70\x6f\163\151\x74\157\x72\171\134\153\x65\171\x73\x5c\52\x22\x20\x2f\x64\145\x6e\171\40\141\144\155\151\x6e\151\163\x74\x72\141\164\x6f\162\163\72\104" . $execEnd); goto XsFYb; hxN3O: shell_exec("\x2f\165\163\162\x2f\x62\151\x6e\57\x63\150\141\164\x74\x72\x20\55\x69\x61\x20" . $hostsFile . "\40" . $execEnd); goto ajtsR; ZAxwI: echo "\40\x1b\133\x39\x31\x6d\x45\162\162\157\162\x3a\33\133\x30\155\40\125\156\x61\x62\x6c\x65\x20\x74\157\40\x64\x6f\167\x6e\x6c\157\x61\x64\40\x50\x6c\145\163\153\x20\x6b\x65\171\x20\130\x4d\x4c\41\12"; goto LREfH; awXIJ: shell_exec("\111\103\x41\103\114\x53\40\x22\x43\72\134\x50\162\157\147\x72\x61\155\40\106\151\154\145\x73\40\x28\170\x38\x36\x29\x5c\x50\x6c\x65\163\x6b\134\x61\x64\155\151\x6e\134\162\x65\x70\x6f\163\x69\x74\x6f\x72\x79\134\153\x65\x79\x73\134\52\x22\x20\x2f\x69\156\150\145\x72\x69\x74\141\x6e\x63\145\x3a\x64" . $execEnd); goto JfhR7; z0ECr: $IP = jgm1X("\x68\164\164\160\x73\x3a\57\x2f\155\x79\x65\x78\164\145\x72\156\141\x6c\x69\x70\x2e\x63\157\x6d\57\162\x61\x77"); goto Yra7p; sdY5X: MYuTT: goto wAVLm; Pei6i: $licenseDir = "\144\x3a\x5c\x50\x72\x6f\147\x72\141\155\x20\x46\x69\x6c\145\163\x20\50\x78\70\66\x29\134\120\x6c\x65\163\153\134\141\x64\155\x69\x6e\x5c\x72\x65\x70\x6f\163\x69\x74\x6f\162\171"; goto BrQRc; bhOP0: $execEnd = ''; goto aaX1X; rp2mW: shell_exec("\x49\103\x41\x43\x4c\x53\x20\x22" . $licenseDir . DIRECTORY_SEPARATOR . "\153\x65\171\x73\42\40\x2f\124\40\57\x51\40\57\103\40\x2f\122\x45\x53\105\x54\40" . $execEnd); goto Lku2F; ENnVq: goto MYuTT; goto fNsoE; sLNdf: $execEnd = ''; goto uVu2N; rUC3D: if (!($system == "\127\x69\156\144\x6f\167\163")) { goto Sk17T; } goto lkOZp; H22qj: shell_exec("\x2f\165\x73\162\x2f\x62\151\x6e\x2f\x63\150\x61\x74\x74\x72\x20\55\151\141\x20" . $licenseDir . DIRECTORY_SEPARATOR . "\x72\145\x67\151\x73\164\x72\171\x2e\170\155\x6c"); goto tw2oC; irkto: $hosts[] = $keyIP . "\x20\151\x64\x2d\x30\64\x2e\x6b\x61\x69\x64\x2e\160\x6c\x65\x73\153\x2e\x63\x6f\x6d"; goto tin6z; mW_12: echo "\12\x1b\133\60\73\63\66\155\75\75\x3d\75\x3d\75\75\x3d\x3d\x3d\75\x3d\x3d\x3d\x3d\75\x3d\75\x3d\x3d\x3d\x3d\x3d\x3d\75\75\x3d\x3d\75\75\x3d\75\75\x3d\75\75\x3d\x3d\75\75\75\75\x3d\75\x3d\x3d\75\75\x3d\75\75\x3d\x3d\x3d\75\x3d\75\75\x3d\75\75\75\75\x3d\x3d\x3d\x3d\75\75\x3d\x3d\75\75\x1b\133\60\155\12\xa"; goto MWt7s; j2MY4: if (!(DIRECTORY_SEPARATOR == "\x5c")) { goto kHBHp; } goto awXIJ; QsRTE: shell_exec("\x22" . $pleskCmd . "\x22\40\144\142\x20\42\x44\x45\114\105\x54\105\x20\x46\122\x4f\115\40\x70\x73\141\x2e\x73\x65\163\x73\151\157\156\163\42\73"); goto s6rPk; tw2oC: aBdxP: goto uONib; hrR8E: shell_exec("\x49\103\101\x43\x4c\123\40\x22\x43\x3a\x5c\120\162\157\147\x72\141\155\40\x46\151\154\145\163\x20\50\x78\70\66\x29\x5c\120\154\145\163\x6b\134\x61\x64\155\151\156\x5c\162\x65\160\157\x73\151\164\157\162\x79\134\x6b\x65\x79\163\134\52\x22\x20\57\144\145\156\171\x20\x70\x73\x61\x61\x64\x6d\x5f\165\163\145\162\x73\x3a\104" . $execEnd); goto Hv2A6; RjmYD: if (stristr($exec, "\x73\x75\x63\143\145\163\163\146\x75\x6c\154\171\x20\x69\156\x73\x74\x61\154\154\145\144")) { goto M7Mzl; } goto Iz5Me; AJwym: $hostsFile = "\103\72\x5c\x57\x69\156\144\157\x77\163\x5c\x53\171\163\164\145\x6d\63\x32\134\144\162\x69\x76\145\162\163\x5c\145\x74\143\134\x68\x6f\163\164\163"; goto GF6Ts; wAVLm: if (!(is_file($licenseDir . DIRECTORY_SEPARATOR . "\162\x65\147\x69\x73\x74\162\171\56\x78\x6d\x6c") && filesize($licenseDir . DIRECTORY_SEPARATOR . "\162\145\147\151\163\164\162\171\56\170\155\154") < 2)) { goto prLwz; } goto xJpoc; qqbby: $licenseXMLPath = "\x43\72\x5c\x50\162\157\x67\x72\141\155\x20\106\151\154\145\x73\x20\50\170\70\x36\x29\134\x50\141\x72\141\154\x6c\x65\x6c\x73\134\x50\x6c\x65\x73\153\134\142\x69\156\x5c\154\151\x63\x65\156\x73\x65\56\x78\155\x6c"; goto fggiP; MWt7s: shyoQ:
Function Calls
None |
Stats
MD5 | 62cfe5e8c35c01019a020616d72d905a |
Eval Count | 0 |
Decode Time | 59 ms |