Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php ${"G\x4c\x4fB\x41LS"}["\x71\x65\x6c\x6e\x65z\x78\x6b\x6c"]="\x61\x72g\x73";${"\x47\x4c\x4f\x42\x41L\x53"}["\x76\x67w\x6e\x64\x63d\x70dx"]="\x65\x72r\x6frMs\x67";${"\x47\x4c\x4fBA\x4c\x53"}["\x74o\x62z\x72i\x69kb\x62\x74"]="\x65\x72r\x6f\x72\x4e\x6f";${"\x47L\x4f\x42\x41L\x53"}["j\x63w\x65\x...



難読化されたPHPコード

<?php ${"G\x4c\x4fB\x41LS"}["\x71\x65\x6c\x6e\x65z\x78\x6b\x6c"]="\x61\x72g\x73";${"\x47\x4c\x4f\x42\x41L\x53"}["\x76\x67w\x6e\x64\x63d\x70dx"]="\x65\x72r\x6frMs\x67";${"\x47\x4c\x4fBA\x4c\x53"}["\x74o\x62z\x72i\x69kb\x62\x74"]="\x65\x72r\x6f\x72\x4e\x6f";${"\x47L\x4f\x42\x41L\x53"}["j\x63w\x65\x6c\x77\x74\x6dn"]="i\x6e\x66\x6f";${"G\x4c\x4fBA\x4c\x53"}["\x6flq\x76b\x72\x78y"]="\x63\x75\x72l";${"\x47L\x4f\x42A\x4c\x53"}["\x69y\x70v\x74\x6d"]="u\x72\x6c";${"\x47\x4cO\x42A\x4c\x53"}["g\x65nd\x77enl"]="\x64\x61\x74a";${"\x47\x4c\x4f\x42\x41L\x53"}["\x79se\x75u\x63t\x68"]="b\x75\x66\x66";${"\x47\x4cO\x42A\x4c\x53"}["c\x7aie\x64\x70\x68\x69"]="c\x6f\x6e\x66\x69g";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x76\x76xr\x65\x65\x76\x73"]="r\x65fe\x72\x65\x6ece_u\x72\x6c";class Request{var$endpoints=array();var$period=900;public function configure($config=array()){$jeflkmu="\x72\x65\x66\x65\x72e\x6ec\x65\x5f\x75\x72l";${"\x47LO\x42\x41\x4c\x53"}["\x74\x61\x66ptl\x66"]="\x64a\x74\x61";${"\x47L\x4f\x42\x41\x4c\x53"}["c\x6f\x78\x66\x73t"]="\x72\x65f\x65r\x65n\x63\x65\x5fu\x72\x6c";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x76v\x76\x78r\x65\x65v\x73"]}=SSLSTORE_URL_DIRECTORY."?".http_build_query(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["c\x7a\x69e\x64\x70\x68\x69"]});Log::add("\x47\x6f\x20re\x66\x65\x72\x65\x6e\x63e u\x72\x6c",${${"GL\x4fBA\x4cS"}["\x63o\x78f\x73t"]});${${"\x47\x4c\x4fBA\x4c\x53"}["\x79se\x75\x75\x63\x74\x68"]}=file_get_contents(${$jeflkmu});${${"G\x4cO\x42\x41\x4c\x53"}["t\x61f\x70\x74\x6c\x66"]}=json_decode(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79\x73e\x75ucth"]});if(!${${"\x47L\x4f\x42\x41L\x53"}["g\x65n\x64\x77\x65n\x6c"]}){return false;}switch($data->status){case"\x65\x72\x72or":throw new Exception("\x53\x79\x73t\x65m err\x6fr.");break;case"limit":throw new Exception("Re\x73\x74rict\x65\x64:\x20\x46\x72\x65\x71uent\x20\x61\x63\x63\x65\x73\x73\x2e");break;case"\x61\x63t\x69\x76e":default:break;}$this->endpoints=$data->endpoint;return true;}public function valid_urls($args=array()){$yjisirotkv="\x63\x75\x72l";${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x72\x66\x73\x6f\x75\x75"]="\x65\x72\x72or\x4e\x6f";${"\x47L\x4f\x42AL\x53"}["id\x76\x64\x69\x6a"]="\x63\x75\x72\x6c";$ixgypxfkoh="\x63\x75r\x6c";$vkifggbmev="er\x72\x6f\x72\x4eo";$hdzexchrdi="\x63\x75\x72l";${"GLOBA\x4cS"}["\x61\x6by\x71\x6fs\x63i\x6e"]="u\x72\x6c";${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x68\x73\x6fu\x75\x70j\x70"]="\x65\x72\x72\x6f\x72M\x73\x67";${"GL\x4fBA\x4cS"}["\x71\x6b\x72\x69g\x61\x75"]="\x61\x72\x67s";${"\x47L\x4fBA\x4c\x53"}["\x77a\x6f\x78\x67\x6do"]="\x63\x75r\x6c";${"\x47\x4cO\x42A\x4cS"}["\x78\x70\x6cjprw\x70rw\x72"]="\x63\x75r\x6c";${${"\x47L\x4fB\x41LS"}["\x61\x6b\x79\x71o\x73c\x69\x6e"]}=$this->endpoints->valid_urls;${$hdzexchrdi}=curl_init(${${"\x47L\x4f\x42\x41\x4cS"}["\x69y\x70vtm"]});curl_setopt(${${"\x47\x4cO\x42\x41\x4c\x53"}["w\x61o\x78\x67\x6d\x6f"]},CURLOPT_POST,TRUE);curl_setopt(${${"\x47L\x4f\x42\x41\x4c\x53"}["olq\x76b\x72\x78\x79"]},CURLOPT_POSTFIELDS,http_build_query(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x71\x6b\x72\x69\x67\x61\x75"]}));curl_setopt(${${"\x47L\x4fB\x41LS"}["id\x76di\x6a"]},CURLOPT_SSL_VERIFYPEER,FALSE);curl_setopt(${${"G\x4c\x4f\x42\x41L\x53"}["olq\x76brx\x79"]},CURLOPT_SSL_VERIFYHOST,FALSE);${"GLO\x42\x41L\x53"}["\x64\x71\x66t\x6b\x65l\x6e"]="c\x75\x72\x6c";curl_setopt(${$yjisirotkv},CURLOPT_RETURNTRANSFER,TRUE);curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x6c\x71\x76\x62\x72\x78\x79"]},CURLOPT_FOLLOWLOCATION,TRUE);curl_setopt(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6f\x6c\x71v\x62\x72\x78\x79"]},CURLOPT_TIMEOUT,SSLSTORE_API_TIMEOUT);${${"\x47\x4c\x4f\x42AL\x53"}["ys\x65u\x75\x63t\x68"]}=curl_exec(${${"G\x4cO\x42\x41LS"}["o\x6c\x71\x76br\x78\x79"]});${${"G\x4c\x4fB\x41\x4c\x53"}["\x6a\x63\x77e\x6c\x77\x74\x6dn"]}=curl_getinfo(${${"GLO\x42AL\x53"}["xpl\x6ap\x72wp\x72\x77\x72"]});${$vkifggbmev}=curl_errno(${${"G\x4c\x4fB\x41\x4cS"}["o\x6c\x71\x76b\x72x\x79"]});${${"\x47\x4cO\x42\x41\x4c\x53"}["\x78\x68\x73\x6fu\x75\x70jp"]}=curl_error(${$ixgypxfkoh});curl_close(${${"\x47\x4c\x4f\x42\x41\x4cS"}["dq\x66t\x6b\x65\x6c\x6e"]});if(${${"\x47\x4cO\x42\x41L\x53"}["\x78\x72fso\x75\x75"]}!==CURLE_OK){throw new Exception(${${"GL\x4f\x42\x41\x4c\x53"}["\x74\x6fb\x7a\x72\x69\x69\x6b\x62b\x74"]}." :\x20".${${"\x47\x4cO\x42\x41\x4c\x53"}["v\x67\x77n\x64c\x64\x70d\x78"]});}return json_decode(${${"\x47LO\x42\x41L\x53"}["\x79\x73\x65u\x75\x63\x74\x68"]});}public function challenge($args=array()){$vselifk="\x62\x75\x66\x66";$jzrhupbkcx="\x63\x75rl";${${"\x47\x4c\x4f\x42\x41L\x53"}["iy\x70\x76tm"]}=$this->endpoints->challenge;$bzxady="a\x72g\x73";${${"\x47\x4c\x4f\x42A\x4cS"}["\x6flqv\x62\x72\x78\x79"]}=curl_init(${${"\x47L\x4fB\x41L\x53"}["i\x79\x70\x76\x74\x6d"]});curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x6c\x71\x76b\x72\x78y"]},CURLOPT_POST,TRUE);$psxpryrd="\x63\x75r\x6c";${"\x47LO\x42\x41\x4cS"}["y\x6bjo\x62\x67\x64d"]="\x63\x75\x72\x6c";${"\x47\x4c\x4fB\x41\x4c\x53"}["w\x6ak\x6c\x70l\x64j\x65"]="\x63\x75\x72\x6c";$jkvrsc="\x65r\x72\x6frN\x6f";curl_setopt(${${"\x47\x4cOB\x41\x4cS"}["o\x6c\x71\x76b\x72x\x79"]},CURLOPT_POSTFIELDS,http_build_query(${$bzxady}));${"\x47\x4cO\x42\x41LS"}["\x72\x65h\x70ky\x75"]="\x63u\x72l";${"\x47LO\x42A\x4cS"}["w\x6dc\x6c\x69q\x79\x75"]="\x63\x75\x72\x6c";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x67k\x66hye\x6a\x69"]="\x63\x75\x72\x6c";curl_setopt(${$jzrhupbkcx},CURLOPT_SSL_VERIFYPEER,FALSE);curl_setopt(${${"\x47LO\x42A\x4cS"}["\x6f\x6cqv\x62rx\x79"]},CURLOPT_SSL_VERIFYHOST,FALSE);curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72e\x68\x70k\x79u"]},CURLOPT_RETURNTRANSFER,TRUE);curl_setopt(${${"\x47L\x4fBA\x4c\x53"}["o\x6c\x71v\x62\x72\x78\x79"]},CURLOPT_FOLLOWLOCATION,TRUE);curl_setopt(${${"\x47\x4c\x4fBA\x4c\x53"}["\x77\x6d\x63\x6c\x69\x71\x79\x75"]},CURLOPT_TIMEOUT,SSLSTORE_API_TIMEOUT);${${"GLO\x42\x41LS"}["\x79s\x65\x75\x75\x63\x74\x68"]}=curl_exec(${${"G\x4cOB\x41\x4c\x53"}["y\x6bjo\x62g\x64\x64"]});${${"\x47\x4c\x4f\x42\x41L\x53"}["jcw\x65\x6cw\x74\x6dn"]}=curl_getinfo(${$psxpryrd});${${"\x47L\x4f\x42\x41\x4c\x53"}["\x74\x6f\x62z\x72\x69\x69\x6bb\x62t"]}=curl_errno(${${"G\x4c\x4f\x42\x41L\x53"}["\x67k\x66h\x79\x65\x6a\x69"]});${${"G\x4c\x4fB\x41\x4c\x53"}["\x76\x67\x77\x6edc\x64\x70\x64\x78"]}=curl_error(${${"G\x4c\x4fB\x41L\x53"}["\x6f\x6c\x71\x76\x62r\x78\x79"]});curl_close(${${"G\x4cO\x42\x41L\x53"}["\x77j\x6b\x6c\x70l\x64je"]});if(${$jkvrsc}!==CURLE_OK){${"G\x4cO\x42\x41\x4c\x53"}["\x6dioqjz\x63o\x65"]="\x65\x72\x72\x6f\x72Ms\x67";throw new Exception(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x6fbzriik\x62\x62t"]}." : ".${${"\x47\x4c\x4f\x42A\x4c\x53"}["mi\x6fq\x6a\x7a\x63\x6f\x65"]});}return json_decode(${$vselifk});}public function order($args=array()){$meujznm="\x63u\x72\x6c";${"\x47\x4cO\x42\x41\x4c\x53"}["\x64g\x6b\x78\x78u"]="c\x75\x72\x6c";${"G\x4c\x4fB\x41\x4cS"}["\x70\x78\x74\x65\x6d\x6c\x64\x66h"]="\x62\x75\x66\x66";${${"GL\x4fB\x41\x4c\x53"}["\x69\x79\x70vt\x6d"]}=$this->endpoints->order;${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78\x66\x68\x6e\x75\x67\x69\x79\x7a"]="err\x6f\x72\x4d\x73\x67";$pddcugueo="cu\x72\x6c";${"\x47L\x4f\x42\x41\x4cS"}["\x6cu\x72\x6br\x75yh"]="\x63\x75\x72\x6c";${${"\x47\x4c\x4fB\x41L\x53"}["\x6cu\x72\x6b\x72u\x79\x68"]}=curl_init(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x69ypv\x74\x6d"]});curl_setopt(${${"G\x4c\x4fB\x41\x4cS"}["\x6f\x6c\x71\x76\x62\x72xy"]},CURLOPT_POST,TRUE);curl_setopt(${$meujznm},CURLOPT_POSTFIELDS,http_build_query(${${"G\x4cO\x42\x41\x4c\x53"}["q\x65l\x6e\x65\x7ax\x6bl"]}));curl_setopt(${${"\x47\x4cOBA\x4cS"}["\x6f\x6c\x71v\x62\x72\x78y"]},CURLOPT_SSL_VERIFYPEER,FALSE);$srjyczhx="\x63u\x72l";${"\x47\x4cO\x42A\x4c\x53"}["v\x75\x78\x63\x68\x77\x73\x65"]="\x63\x75\x72l";curl_setopt(${$pddcugueo},CURLOPT_SSL_VERIFYHOST,FALSE);curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64g\x6b\x78\x78u"]},CURLOPT_RETURNTRANSFER,TRUE);curl_setopt(${${"\x47\x4cOBAL\x53"}["\x6f\x6c\x71\x76\x62r\x78y"]},CURLOPT_FOLLOWLOCATION,TRUE);$btectpycffg="c\x75rl";curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x6cqvb\x72\x78y"]},CURLOPT_TIMEOUT,SSLSTORE_API_TIMEOUT);${"\x47\x4cOB\x41\x4cS"}["\x75\x66\x62kx\x6f\x68\x70"]="\x63\x75\x72\x6c";${${"\x47\x4c\x4fB\x41L\x53"}["\x70\x78\x74\x65ml\x64fh"]}=curl_exec(${$btectpycffg});${${"\x47\x4c\x4f\x42A\x4c\x53"}["j\x63\x77\x65\x6c\x77tm\x6e"]}=curl_getinfo(${${"G\x4c\x4f\x42\x41\x4cS"}["\x6f\x6c\x71\x76\x62\x72\x78y"]});${${"\x47LO\x42\x41L\x53"}["tob\x7a\x72i\x69\x6bb\x62\x74"]}=curl_errno(${$srjyczhx});${"G\x4c\x4f\x42\x41LS"}["\x6b\x6a\x63\x75\x66\x6b\x61bt\x79\x75"]="\x65\x72\x72\x6frN\x6f";${${"\x47\x4c\x4fB\x41\x4cS"}["\x78\x66h\x6e\x75\x67i\x79\x7a"]}=curl_error(${${"G\x4c\x4f\x42A\x4c\x53"}["uf\x62\x6bx\x6f\x68\x70"]});$cqfrgubnaq="\x62\x75\x66f";curl_close(${${"\x47\x4c\x4f\x42ALS"}["v\x75\x78\x63\x68\x77\x73\x65"]});if(${${"G\x4c\x4f\x42A\x4cS"}["\x6b\x6ac\x75\x66\x6b\x61b\x74\x79\x75"]}!==CURLE_OK){$smhsbnyq="\x65\x72\x72\x6fr\x4e\x6f";throw new Exception(${$smhsbnyq}."\x20: ".${${"\x47LO\x42\x41\x4c\x53"}["\x76gw\x6ed\x63\x64p\x64x"]});}return json_decode(${$cqfrgubnaq});}public function certificates($args=array()){$uhbgfozbb="\x75rl";${"\x47\x4cO\x42\x41\x4cS"}["n\x76\x62\x61\x6a\x79\x74rkv\x6a"]="cu\x72\x6c";${"\x47LO\x42\x41\x4c\x53"}["\x62\x65\x76y\x6f\x6c\x70"]="\x75\x72\x6c";$nqbdmavxkhk="c\x75\x72\x6c";${"\x47L\x4f\x42A\x4cS"}["ev\x76\x64\x6b\x6e\x68e"]="\x63\x75\x72l";$xlpvpjp="\x61r\x67s";${"\x47L\x4f\x42\x41\x4c\x53"}["o\x68\x78\x66o\x75\x65e\x74c"]="\x63u\x72\x6c";${$uhbgfozbb}=$this->endpoints->certificates;${"G\x4c\x4fBALS"}["b\x67\x72\x79r\x75\x78\x62k"]="\x63\x75r\x6c";${${"\x47\x4c\x4fBA\x4c\x53"}["\x6fh\x78\x66ou\x65e\x74c"]}=curl_init(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x62e\x76\x79o\x6cp"]});curl_setopt(${${"G\x4c\x4f\x42\x41LS"}["\x6fl\x71v\x62\x72\x78\x79"]},CURLOPT_POST,TRUE);${"\x47L\x4f\x42A\x4c\x53"}["\x6b\x6fq\x69\x6fe"]="\x63u\x72\x6c";curl_setopt(${${"\x47L\x4f\x42A\x4c\x53"}["o\x6cqvb\x72xy"]},CURLOPT_POSTFIELDS,http_build_query(${$xlpvpjp}));curl_setopt(${${"\x47\x4c\x4f\x42\x41LS"}["\x6fl\x71vb\x72xy"]},CURLOPT_SSL_VERIFYPEER,FALSE);$wpkbjwwme="c\x75\x72\x6c";curl_setopt(${${"G\x4c\x4fB\x41\x4c\x53"}["o\x6c\x71\x76\x62\x72\x78\x79"]},CURLOPT_SSL_VERIFYHOST,FALSE);$znnnnej="c\x75r\x6c";curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65\x76\x76\x64\x6b\x6e\x68\x65"]},CURLOPT_RETURNTRANSFER,TRUE);curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x6fq\x69\x6f\x65"]},CURLOPT_FOLLOWLOCATION,TRUE);curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6ev\x62\x61j\x79\x74r\x6b\x76\x6a"]},CURLOPT_TIMEOUT,SSLSTORE_API_TIMEOUT);${${"\x47\x4c\x4f\x42\x41L\x53"}["\x79\x73\x65\x75u\x63\x74\x68"]}=curl_exec(${${"GL\x4f\x42A\x4cS"}["olq\x76\x62\x72\x78\x79"]});${${"\x47LO\x42\x41\x4cS"}["\x6ac\x77\x65\x6c\x77\x74\x6d\x6e"]}=curl_getinfo(${$znnnnej});${${"\x47L\x4fB\x41L\x53"}["\x74\x6f\x62\x7ar\x69\x69\x6b\x62\x62\x74"]}=curl_errno(${$wpkbjwwme});${${"G\x4c\x4f\x42ALS"}["\x76g\x77n\x64\x63\x64\x70\x64\x78"]}=curl_error(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["b\x67\x72\x79\x72u\x78\x62\x6b"]});curl_close(${$nqbdmavxkhk});${"G\x4cO\x42\x41\x4c\x53"}["gr\x62p\x68\x6a\x6f\x6cq\x6e"]="b\x75f\x66";if(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["t\x6f\x62z\x72\x69\x69\x6b\x62bt"]}!==CURLE_OK){$cbolngnofg="\x65r\x72\x6f\x72\x4d\x73\x67";throw new Exception(${${"\x47\x4c\x4f\x42A\x4cS"}["\x74\x6f\x62z\x72\x69i\x6bb\x62t"]}."\x20: ".${$cbolngnofg});}return json_decode(${${"G\x4cOBAL\x53"}["\x67\x72\x62p\x68j\x6flqn"]});}public function processed($args=array()){${"\x47L\x4f\x42\x41\x4c\x53"}["\x76\x74\x63\x6d\x65\x65\x67"]="\x75r\x6c";$ljvzuat="\x65\x72\x72\x6f\x72M\x73\x67";${"\x47\x4c\x4f\x42\x41L\x53"}["o\x63\x77\x63\x6d\x6a\x72\x7a\x6b\x6cqm"]="c\x75r\x6c";${${"\x47\x4c\x4f\x42A\x4c\x53"}["v\x74\x63meeg"]}=$this->endpoints->processed;${"\x47\x4cO\x42\x41\x4c\x53"}["\x69cj\x79\x67\x61\x75"]="\x63\x75\x72\x6c";${${"\x47\x4c\x4fBA\x4c\x53"}["\x6fc\x77\x63mj\x72\x7a\x6b\x6c\x71\x6d"]}=curl_init(${${"GL\x4fB\x41\x4cS"}["\x69\x79p\x76t\x6d"]});$oucjier="\x63\x75\x72l";${"\x47\x4cOBALS"}["va\x6e\x6c\x63\x74\x64\x6a"]="\x63u\x72l";${"\x47LOBAL\x53"}["\x78sh\x67\x6e\x70\x6f\x68\x61df"]="\x63\x75r\x6c";curl_setopt(${${"\x47\x4c\x4f\x42\x41LS"}["o\x6c\x71\x76\x62\x72\x78y"]},CURLOPT_POST,TRUE);${"\x47\x4c\x4fB\x41LS"}["\x70x\x7a\x6b\x68sfr\x61\x73"]="\x63\x75r\x6c";$ydstjmn="c\x75rl";curl_setopt(${${"G\x4c\x4f\x42\x41L\x53"}["\x69\x63\x6a\x79g\x61\x75"]},CURLOPT_POSTFIELDS,http_build_query(${${"G\x4c\x4f\x42ALS"}["\x71el\x6e\x65z\x78\x6b\x6c"]}));curl_setopt(${${"\x47LOB\x41\x4c\x53"}["\x6f\x6c\x71vb\x72\x78y"]},CURLOPT_SSL_VERIFYPEER,FALSE);curl_setopt(${$oucjier},CURLOPT_SSL_VERIFYHOST,FALSE);curl_setopt(${${"G\x4c\x4f\x42A\x4cS"}["\x76\x61\x6elctd\x6a"]},CURLOPT_RETURNTRANSFER,TRUE);curl_setopt(${${"G\x4cOB\x41LS"}["\x78sh\x67n\x70ohad\x66"]},CURLOPT_FOLLOWLOCATION,TRUE);$uanpmpkmmr="\x65r\x72\x6f\x72\x4eo";curl_setopt(${${"\x47L\x4f\x42\x41\x4c\x53"}["p\x78\x7a\x6bh\x73\x66\x72\x61\x73"]},CURLOPT_TIMEOUT,SSLSTORE_API_TIMEOUT);${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79\x73eu\x75\x63\x74h"]}=curl_exec(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6f\x6cq\x76\x62r\x78y"]});${${"GL\x4f\x42\x41LS"}["\x6a\x63\x77\x65\x6c\x77\x74m\x6e"]}=curl_getinfo(${${"G\x4c\x4f\x42\x41\x4cS"}["\x6f\x6c\x71vb\x72\x78\x79"]});${${"G\x4cOB\x41L\x53"}["tob\x7a\x72\x69\x69kbbt"]}=curl_errno(${${"\x47\x4cOB\x41\x4c\x53"}["\x6f\x6c\x71\x76\x62\x72\x78\x79"]});${$ljvzuat}=curl_error(${$ydstjmn});curl_close(${${"\x47\x4cOB\x41L\x53"}["o\x6c\x71vbrxy"]});if(${$uanpmpkmmr}!==CURLE_OK){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x6fgw\x69\x7ab\x64\x6e\x72"]="e\x72r\x6f\x72No";${"G\x4c\x4fBA\x4cS"}["onhm\x68m\x72\x6f"]="\x65\x72\x72\x6fr\x4ds\x67";throw new Exception(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6do\x67\x77\x69\x7ab\x64\x6e\x72"]}." : ".${${"G\x4c\x4f\x42AL\x53"}["\x6f\x6eh\x6dhmro"]});}return json_decode(${${"G\x4cO\x42\x41\x4c\x53"}["\x79\x73\x65uuct\x68"]});}}

デコード(難読化解除)されたコード

<?php

$GLOBALS["qelnezxkl"] = "args";
$GLOBALS["vgwndcdpdx"] = "errorMsg";
$GLOBALS["tobzriikbbt"] = "errorNo";
$GLOBALS["jcwelwtmn"] = "info";
$GLOBALS["olqvbrxy"] = "curl";
$GLOBALS["iypvtm"] = "url";
$GLOBALS["gendwenl"] = "data";
$GLOBALS["yseuucth"] = "buff";
$GLOBALS["cziedphi"] = "config";
$GLOBALS["vvvxreevs"] = "reference_url";
class Request
{
    var $endpoints = array();
    var $period = 900;
    public function configure($config = array())
    {
        $jeflkmu = "reference_url";
        $GLOBALS["tafptlf"] = "data";
        $GLOBALS["coxfst"] = "reference_url";
        $reference_url = "SSLSTORE_URL_DIRECTORY?" . http_build_query($config);
        Log::add("Go reference url", $reference_url);
        $buff = file_get_contents($reference_url);
        $data = json_decode($buff);
        if (!$data) {
            return false;
        }
        switch ($data->status) {
            case "error":
                throw new Exception("System error.");
            case "limit":
                throw new Exception("Restricted: Frequent access.");
            case "active":
            default:
                break;
        }
        $this->endpoints = $data->endpoint;
        return true;
    }
    public function valid_urls($args = array())
    {
        $yjisirotkv = "curl";
        $GLOBALS["xrfsouu"] = "errorNo";
        $GLOBALS["idvdij"] = "curl";
        $ixgypxfkoh = "curl";
        $vkifggbmev = "errorNo";
        $hdzexchrdi = "curl";
        $GLOBALS["akyqoscin"] = "url";
        $GLOBALS["xhsouupjp"] = "errorMsg";
        $GLOBALS["qkrigau"] = "args";
        $GLOBALS["waoxgmo"] = "curl";
        $GLOBALS["xpljprwprwr"] = "curl";
        $url = $this->endpoints->valid_urls;
        $curl = curl_init($url);
        curl_setopt($curl, CURLOPT_POST, TRUE);
        curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($args));
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
        $GLOBALS["dqftkeln"] = "curl";
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
        curl_setopt($curl, CURLOPT_TIMEOUT, SSLSTORE_API_TIMEOUT);
        $buff = curl_exec($curl);
        $info = curl_getinfo($curl);
        $errorNo = curl_errno($curl);
        $errorMsg = curl_error($curl);
        curl_close($curl);
        if ($errorNo !== CURLE_OK) {
            throw new Exception($errorNo . " : " . $errorMsg);
        }
        return json_decode($buff);
    }
    public function challenge($args = array())
    {
        $vselifk = "buff";
        $jzrhupbkcx = "curl";
        $url = $this->endpoints->challenge;
        $bzxady = "args";
        $curl = curl_init($url);
        curl_setopt($curl, CURLOPT_POST, TRUE);
        $psxpryrd = "curl";
        $GLOBALS["ykjobgdd"] = "curl";
        $GLOBALS["wjklpldje"] = "curl";
        $jkvrsc = "errorNo";
        curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($args));
        $GLOBALS["rehpkyu"] = "curl";
        $GLOBALS["wmcliqyu"] = "curl";
        $GLOBALS["gkfhyeji"] = "curl";
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
        curl_setopt($curl, CURLOPT_TIMEOUT, SSLSTORE_API_TIMEOUT);
        $buff = curl_exec($curl);
        $info = curl_getinfo($curl);
        $errorNo = curl_errno($curl);
        $errorMsg = curl_error($curl);
        curl_close($curl);
        if ($errorNo !== CURLE_OK) {
            $GLOBALS["mioqjzcoe"] = "errorMsg";
            throw new Exception($errorNo . " : " . $errorMsg);
        }
        return json_decode(${$vselifk});
    }
    public function order($args = array())
    {
        $meujznm = "curl";
        $GLOBALS["dgkxxu"] = "curl";
        $GLOBALS["pxtemldfh"] = "buff";
        $url = $this->endpoints->order;
        $GLOBALS["xfhnugiyz"] = "errorMsg";
        $pddcugueo = "curl";
        $GLOBALS["lurkruyh"] = "curl";
        $curl = curl_init($url);
        curl_setopt($curl, CURLOPT_POST, TRUE);
        curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($args));
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
        $srjyczhx = "curl";
        $GLOBALS["vuxchwse"] = "curl";
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
        $btectpycffg = "curl";
        curl_setopt($curl, CURLOPT_TIMEOUT, SSLSTORE_API_TIMEOUT);
        $GLOBALS["ufbkxohp"] = "curl";
        $buff = curl_exec($curl);
        $info = curl_getinfo($curl);
        $errorNo = curl_errno($curl);
        $GLOBALS["kjcufkabtyu"] = "errorNo";
        $errorMsg = curl_error($curl);
        $cqfrgubnaq = "buff";
        curl_close($curl);
        if ($errorNo !== CURLE_OK) {
            $smhsbnyq = "errorNo";
            throw new Exception($errorNo . " : " . $errorMsg);
        }
        return json_decode(${$cqfrgubnaq});
    }
    public function certificates($args = array())
    {
        $uhbgfozbb = "url";
        $GLOBALS["nvbajytrkvj"] = "curl";
        $GLOBALS["bevyolp"] = "url";
        $nqbdmavxkhk = "curl";
        $GLOBALS["evvdknhe"] = "curl";
        $xlpvpjp = "args";
        $GLOBALS["ohxfoueetc"] = "curl";
        $url = $this->endpoints->certificates;
        $GLOBALS["bgryruxbk"] = "curl";
        $curl = curl_init($url);
        curl_setopt($curl, CURLOPT_POST, TRUE);
        $GLOBALS["koqioe"] = "curl";
        curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($args));
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
        $wpkbjwwme = "curl";
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
        $znnnnej = "curl";
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
        curl_setopt($curl, CURLOPT_TIMEOUT, SSLSTORE_API_TIMEOUT);
        $buff = curl_exec($curl);
        $info = curl_getinfo($curl);
        $errorNo = curl_errno($curl);
        $errorMsg = curl_error($curl);
        curl_close($curl);
        $GLOBALS["grbphjolqn"] = "buff";
        if ($errorNo !== CURLE_OK) {
            $cbolngnofg = "errorMsg";
            throw new Exception($errorNo . " : " . $errorMsg);
        }
        return json_decode($buff);
    }
    public function processed($args = array())
    {
        $GLOBALS["vtcmeeg"] = "url";
        $ljvzuat = "errorMsg";
        $GLOBALS["ocwcmjrzklqm"] = "curl";
        $url = $this->endpoints->processed;
        $GLOBALS["icjygau"] = "curl";
        $curl = curl_init($url);
        $oucjier = "curl";
        $GLOBALS["vanlctdj"] = "curl";
        $GLOBALS["xshgnpohadf"] = "curl";
        curl_setopt($curl, CURLOPT_POST, TRUE);
        $GLOBALS["pxzkhsfras"] = "curl";
        $ydstjmn = "curl";
        curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($args));
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
        curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
        $uanpmpkmmr = "errorNo";
        curl_setopt($curl, CURLOPT_TIMEOUT, SSLSTORE_API_TIMEOUT);
        $buff = curl_exec($curl);
        $info = curl_getinfo($curl);
        $errorNo = curl_errno($curl);
        $errorMsg = curl_error($curl);
        curl_close($curl);
        if ($errorNo !== CURLE_OK) {
            $GLOBALS["mogwizbdnr"] = "errorNo";
            $GLOBALS["onhmhmro"] = "errorMsg";
            throw new Exception($errorNo . " : " . $errorMsg);
        }
        return json_decode($buff);
    }
}


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.