PHP 難読化コードの復元・デコード

難読化されたPHPコード

<?php ${"\x47L\x4fB\x41\x4c\x53"}["\x7a\x63\x68\x69\x65s\x64\x79l\x76"]="i\x64";${"\x47\x4cOB\x41\x4c\x53"}["\x72\x73\x65e\x61\x78ix\x64\x6d"]="\x54\x79\x70e";${"G\x4c\x4f\x42\x41LS"}["\x76\x69b\x65q\x78\x78\x73\x68"]="\x74\x69\x74\x6c\x65";${"G\x4c\x4f\x42\x41\x4cS"}["us\x64i\x67\x74ol\x65\x62"]="\x64\x61\x74\x61";${"G\x4c\x4f\x42A\x4cS"}["\x75\x65\x64\x61\x68\x76\x6bch\x6af"]="\x63\x6funt";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x64koef\x6bps\x64"]="t\x69\x74\x6ce";${"\x47L\x4f\x42\x41\x4c\x53"}["\x78\x62\x6f\x6e\x61\x64js\x79w"]="\x62\x67\x63\x6f\x6co\x72";${"G\x4c\x4f\x42ALS"}["\x70\x67r\x73psh\x7a\x74"]="c\x6f\x6co\x72";${"\x47\x4cO\x42\x41L\x53"}["\x62\x6bh\x6f\x6d\x73e\x68\x75uj"]="\x6e\x6f";${"\x47L\x4f\x42A\x4cS"}["\x76nt\x61k\x71\x74t\x6f"]="y\x6d";${"\x47\x4cO\x42\x41\x4c\x53"}["\x78\x6fp\x63a\x70"]="c\x6f\x75n\x74";${"\x47LO\x42\x41\x4c\x53"}["o\x66k\x72\x73\x71i\x66\x72\x6b"]="n\x6f";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x68\x6c\x6dl\x6b\x6byq\x69w"]="rt\x6e";${"\x47LOB\x41\x4cS"}["rqc\x64s\x76\x6d\x68u\x6e\x79g"]="\x73ql";${"GLOB\x41L\x53"}["\x78\x6a\x73\x67\x73c\x6al\x76"]="c\x6fn";${"\x47L\x4fB\x41\x4cS"}["w\x72\x6an\x74\x68\x67\x6a"]="\x73q\x6c";$ymowzhycs="\x43\x6fd\x65";${"\x47\x4c\x4f\x42A\x4cS"}["\x78\x68\x6e\x68\x6e\x66x\x6d\x66\x6d"]="\x72\x74\x6e";require_once"\x69\x6e\x63\x6cude\x2e\x70\x68\x70";$mirtugkmie="\x63\x6funt";${${"G\x4cOBAL\x53"}["\x77\x72\x6anth\x67j"]}=sprintf("s\x65\x6c\x65\x63\x74\x20\x69d, \x79m, \x6e\x6f, \x6bo\x75ji, \x6e\x61me,\x20\x62\x67\x63\x6f\x6cor, \x6fct\x65\x74_len\x67\x74\x68(o\x62j) +\x20oc\x74\x65\x74\x5fl\x65n\x67th(mtl) \x61\x73 size f\x72\x6f\x6d \x74ab\x6ce\x5fd\x61t\x61\x20wh\x65r\x65 \x63o\x64\x65 = \x25s",pg_escape_literal(${$ymowzhycs}));@${${"\x47\x4cO\x42A\x4c\x53"}["xh\x6e\x68n\x66\x78\x6d\x66m"]}=pg_query(${${"\x47LOBALS"}["x\x6a\x73\x67scjl\x76"]},${${"\x47L\x4f\x42ALS"}["\x72q\x63\x64\x73\x76\x6d\x68\x75\x6e\x79\x67"]});${$mirtugkmie}=pg_num_rows(${${"G\x4c\x4f\x42AL\x53"}["\x68\x6c\x6d\x6c\x6bkyq\x69\x77"]});if(0<${${"G\x4cO\x42\x41L\x53"}["\x78o\x70ca\x70"]}){${"G\x4c\x4f\x42\x41LS"}["kh\x70\x74\x79\x72\x6e\x62m\x6d\x63"]="\x69\x64";$ikcbxwsw="rtn";${"\x47\x4cO\x42\x41\x4c\x53"}["\x78g\x67g\x6e\x61g\x6br\x73"]="col\x6fr";$yzxnass="\x62g\x63\x6f\x6c\x6fr";${${"GL\x4f\x42\x41L\x53"}["k\x68\x70\x74\x79rnb\x6d\x6d\x63"]}=pg_fetch_result(${${"G\x4c\x4f\x42\x41\x4cS"}["\x68l\x6d\x6c\x6b\x6b\x79\x71iw"]},0,"\x69\x64");${"\x47L\x4fB\x41\x4c\x53"}["\x73\x69b\x62y\x78aqg"]="s\x69\x7a\x65";$xuklizmovpq="r\x74n";${"G\x4c\x4f\x42\x41LS"}["\x63\x76\x69\x7a\x6a\x70\x6b\x79\x6cb\x68"]="\x6bo\x75\x6a\x69";$ikvvwvxnutnr="\x72\x74\x6e";$pxichmrusoan="n\x61\x6d\x65";${${"\x47LO\x42A\x4c\x53"}["v\x6e\x74a\x6bq\x74\x74\x6f"]}=pg_fetch_result(${${"\x47\x4cOB\x41\x4c\x53"}["\x68\x6c\x6d\x6c\x6b\x6b\x79q\x69\x77"]},0,"y\x6d");$bqrljgkqnvw="\x72\x74n";${${"\x47LOBA\x4cS"}["\x62\x6b\x68o\x6ds\x65\x68uu\x6a"]}=pg_fetch_result(${$ikvvwvxnutnr},0,"no");${${"GL\x4f\x42\x41\x4c\x53"}["\x63\x76\x69\x7a\x6a\x70\x6b\x79\x6cb\x68"]}=pg_fetch_result(${$ikcbxwsw},0,"\x6b\x6f\x75\x6ai");$elcdwcdcit="\x6e\x61\x6d\x65";${$pxichmrusoan}=pg_fetch_result(${$xuklizmovpq},0,"\x6e\x61\x6de");${${"\x47\x4c\x4f\x42ALS"}["p\x67\x72\x73\x70\x73\x68\x7at"]}=pg_fetch_result(${$bqrljgkqnvw},0,"\x62\x67col\x6fr");${"\x47\x4c\x4fB\x41\x4cS"}["\x65\x6coq\x6af\x6b\x6b\x6d"]="\x73\x69\x7ae";if(${${"GLOB\x41\x4c\x53"}["xgg\x67\x6e\x61\x67\x6b\x72s"]}!="")${$yzxnass}=sprintf("0x\x25\x73",substr(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x70g\x72\x73p\x73\x68\x7a\x74"]},-6));else${${"G\x4c\x4f\x42A\x4c\x53"}["\x78b\x6f\x6e\x61djs\x79\x77"]}="0\x78000\x30\x30\x30";${${"\x47\x4c\x4fBA\x4c\x53"}["\x65l\x6f\x71\x6afkk\x6d"]}=pg_fetch_result(${${"\x47L\x4fBA\x4c\x53"}["h\x6cm\x6c\x6b\x6b\x79q\x69w"]},0,"\x73iz\x65");${${"G\x4cO\x42ALS"}["\x64ko\x65\x66\x6b\x70\x73\x64"]}=sprintf("%\x73 [%\x73]",${$elcdwcdcit},Byte2Str(${${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x69\x62\x62\x79x\x61q\x67"]}));}else{${${"G\x4c\x4f\x42\x41LS"}["\x64ko\x65\x66\x6b\x70s\x64"]}="エラー";}${${"\x47\x4c\x4fB\x41\x4cS"}["u\x73\x64\x69\x67\x74\x6fl\x65b"]}=sprintf("\x74\x79pe=\x25\x64&i\x64\x3d\x25s&ym=%\x73&n\x6f=%d&bc=%\x73",${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x72\x73\x65\x65a\x78i\x78\x64m"]},urlencode(${${"G\x4c\x4fB\x41\x4c\x53"}["\x7a\x63\x68\x69e\x73\x64\x79\x6cv"]}),urlencode(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x6et\x61\x6b\x71\x74\x74o"]}),${${"GL\x4f\x42\x41L\x53"}["\x6ff\x6br\x73q\x69\x66rk"]},urlencode(${${"\x47\x4c\x4fB\x41\x4c\x53"}["xb\x6f\x6e\x61dj\x73\x79w"]}));echo "<!\x44O\x43\x54Y\x50E \x68t\x6d\x6c>\n\x3cht\x6d\x6c\x20\x6c\x61n\x67=\"ja\"\x3e\n<h\x65\x61d\x3e\n<\x74\x69\x74l\x65\x3e";echo${${"\x47LO\x42\x41\x4c\x53"}["\x76i\x62e\x71\x78\x78s\x68"]};echo "\x3c/t\x69\x74\x6c\x65\x3e\n<m\x65\x74a\x20\x63\x68\x61r\x73et=\"\x75\x74f-8\">\n<\x6d\x65ta \x6ea\x6d\x65\x3d\x22\x76ie\x77\x70\x6f\x72t\x22\x20c\x6f\x6eten\x74=\x22\x77\x69d\x74h=\x64e\x76ic\x65-w\x69\x64t\x68,\x20user-sc\x61lable=\x6e\x6f,\x20\x6dinimu\x6d-s\x63ale=\x31\x2e\x30, \x6da\x78\x69mu\x6d-\x73\x63ale\x3d1\x2e\x30\x22>\n";if(0<${${"G\x4cOB\x41\x4c\x53"}["u\x65\x64ah\x76\x6bch\x6a\x66"]}){echo "\x3c\x6cink\x20hr\x65\x66=\"\x73\x74y\x6c\x65/\x73t\x79\x6c\x65\x2e\x63\x73s\" \x72e\x6c=\"s\x74\x79\x6c\x65sh\x65e\x74\x22\x20/>\n";}else{echo "<\x6cin\x6b\x20\x72e\x6c=\"\x73t\x79l\x65s\x68ee\x74\x22 href=\"\x2e/sty\x6c\x65/\x6d\x61\x69\x6e.cs\x73\">\n";}echo "</h\x65a\x64\x3e\n\x3c\x62o\x64y\x20onc\x6c\x69ck=\x22\x66\x6f\x63\x75\x73();\x22\x3e\n<nosc\x72\x69\x70t\x3e\n\x3cfo\x6e\x74 c\x6flo\x72=\x22\x23\x4402\x30\x300\x22>J\x61\x76\x61Scr\x69\x70\x74を有効にしてください。\x3c/font\x3e\n</n\x6f\x73\x63ri\x70t\x3e\n\n<\x64i\x76\x20\x69d=\"L\x6fa\x64\x69ng\x22></di\x76\x3e\n\n";if(0<${${"\x47LO\x42\x41LS"}["x\x6fp\x63\x61\x70"]}){echo "<\x73c\x72\x69\x70\x74 lan\x67u\x61g\x65=\x22\x6a\x61\x76a\x73c\x72i\x70\x74\"\x3e\n\x3c!--\n\tva\x72 \x72\x65\x71\x20= \x6ee\x77 X\x4dLHt\x74pR\x65qu\x65s\x74()\x3b\n\n\tr\x65\x71\x2e\x6f\x70e\x6e(\x22\x50\x4fS\x54\x22, \"j\x73/\x69n\x69t.js\x2e\x70\x68\x70\", \x66al\x73\x65)\x3b\n\tr\x65q\x2e\x73et\x52eq\x75\x65s\x74\x48e\x61\x64er(\x22\x43ontent-\x54\x79\x70e\",\x20\"\x61\x70p\x6c\x69\x63a\x74io\x6e/\x78-\x77\x77w-\x66or\x6d-u\x72l\x65n\x63\x6f\x64e\x64\");\n\t\x72\x65q\x2e\x73en\x64(\"";echo${${"G\x4c\x4f\x42\x41\x4cS"}["\x75s\x64\x69\x67\x74o\x6c\x65b"]};echo "\x22)\x3b\n\teva\x6c(re\x71.r\x65s\x70onseTe\x78t);\n//-->\n</\x73\x63\x72ipt>\n\n";}else{echo "<\x64i\x76 \x61\x6cign=\x22\x63e\x6e\x74\x65\x72\"\x3e\n\x3c\x62r\x3e\x3c\x62\x72>\n\x3cfon\x74 \x63\x6f\x6c\x6f\x72\x3d\x22#\x44\x30\x32000\"\x3eデータを取得できませんでした。\x3c/\x66\x6f\x6e\x74\x3e\n</div>\n";}echo "\n<\x21--\n\n\x43\x6fp\x79\x72\x69\x67\x68t\x20© 201\x30-\x32019 \x74hre\x65.js\x20a\x75\x74\x68o\x72\x73\n\nP\x65r\x6dis\x73io\x6e is\x20\x68\x65reby \x67\x72ant\x65\x64, fr\x65e\x20\x6f\x66 \x63\x68\x61\x72g\x65, t\x6f a\x6e\x79\x20pers\x6f\x6e \x6fbt\x61i\x6eing\x20\x61 c\x6f\x70\x79\n\x6f\x66\x20\x74\x68is so\x66\x74war\x65 \x61nd \x61s\x73o\x63\x69\x61te\x64 \x64\x6f\x63\x75m\x65n\x74at\x69\x6f\x6e\x20fil\x65s (\x74h\x65 \x22S\x6f\x66tw\x61r\x65\x22),\x20\x74o \x64eal\ni\x6e \x74\x68\x65\x20S\x6f\x66\x74\x77a\x72\x65 \x77\x69tho\x75\x74\x20rest\x72ict\x69\x6f\x6e, \x69n\x63\x6cu\x64i\x6e\x67\x20wit\x68\x6fut l\x69mi\x74a\x74\x69\x6f\x6e \x74h\x65 rights\nto\x20use,\x20\x63\x6f\x70\x79,\x20\x6dod\x69\x66\x79,\x20\x6d\x65\x72ge,\x20\x70\x75\x62\x6ci\x73\x68, \x64\x69s\x74ri\x62ute,\x20s\x75\x62l\x69\x63ens\x65, an\x64/o\x72 \x73el\x6c\n\x63opi\x65s of \x74\x68\x65 So\x66\x74\x77are,\x20and\x20t\x6f\x20perm\x69t\x20\x70ers\x6fns\x20t\x6f\x20who\x6d \x74\x68\x65\x20So\x66\x74war\x65\x20is\n\x66urni\x73h\x65d\x20\x74o \x64\x6f\x20s\x6f,\x20\x73\x75\x62\x6aect\x20t\x6f the fo\x6c\x6c\x6fw\x69\x6e\x67\x20\x63o\x6e\x64\x69ti\x6f\x6es:\n\nThe \x61\x62\x6f\x76e copy\x72i\x67\x68t \x6eotice\x20\x61n\x64\x20th\x69s\x20p\x65\x72mi\x73\x73\x69on\x20\x6e\x6ft\x69\x63e s\x68al\x6c\x20b\x65 inclu\x64\x65\x64 in\nall\x20c\x6fp\x69\x65s\x20\x6fr\x20su\x62\x73\x74a\x6eti\x61l p\x6frtio\x6es\x20o\x66 t\x68e \x53\x6f\x66\x74\x77are\x2e\n\n\x54HE\x20\x53OFT\x57A\x52E \x49S\x20P\x52\x4f\x56\x49D\x45D\x20\"\x41\x53 I\x53\x22,\x20WIT\x48\x4fU\x54 WA\x52RA\x4e\x54Y\x20O\x46\x20\x41N\x59 \x4b\x49\x4e\x44, \x45X\x50\x52\x45SS \x4f\x52\nIM\x50L\x49\x45\x44,\x20\x49NC\x4c\x55\x44I\x4eG\x20B\x55T \x4e\x4fT L\x49\x4dI\x54ED \x54\x4f \x54\x48E WA\x52\x52A\x4e\x54IES\x20OF MERCHANT\x41BILITY,\nF\x49T\x4eESS\x20\x46\x4f\x52 \x41 PA\x52T\x49CULA\x52\x20PU\x52P\x4fSE\x20\x41\x4e\x44 NONINFRI\x4e\x47\x45M\x45N\x54. IN NO\x20\x45V\x45N\x54\x20\x53HAL\x4c\x20T\x48\x45\nA\x55\x54\x48\x4fR\x53 OR C\x4f\x50Y\x52\x49\x47\x48\x54\x20\x48\x4f\x4cDERS\x20\x42\x45 \x4cIABLE \x46\x4fR\x20A\x4e\x59\x20CL\x41\x49\x4d, \x44AM\x41\x47ES \x4fR\x20\x4fTHER\n\x4cIABIL\x49\x54\x59, W\x48\x45THER IN \x41\x4e \x41\x43T\x49\x4f\x4e\x20OF CON\x54R\x41\x43T, T\x4f\x52\x54 \x4f\x52 OTH\x45R\x57\x49S\x45, \x41\x52ISING F\x52\x4fM,\nOUT\x20OF\x20\x4fR\x20\x49\x4e\x20\x43ON\x4eEC\x54\x49ON \x57IT\x48\x20T\x48E\x20S\x4f\x46TWA\x52\x45 \x4f\x52 \x54HE\x20US\x45\x20O\x52 O\x54\x48E\x52 \x44E\x41LIN\x47\x53 \x49\x4e\n\x54HE S\x4f\x46\x54WAR\x45\x2e\n\n//-->\n\n</bo\x64\x79\x3e\n\x3c/h\x74\x6dl\x3e\n";
?>

デコード(難読化解除)されたコード

<?php

$GLOBALS["zchiesdylv"] = "id";
$GLOBALS["rseeaxixdm"] = "Type";
$GLOBALS["vibeqxxsh"] = "title";
$GLOBALS["usdigtoleb"] = "data";
$GLOBALS["uedahvkchjf"] = "count";
$GLOBALS["dkoefkpsd"] = "title";
$GLOBALS["xbonadjsyw"] = "bgcolor";
$GLOBALS["pgrspshzt"] = "color";
$GLOBALS["bkhomsehuuj"] = "no";
$GLOBALS["vntakqtto"] = "ym";
$GLOBALS["xopcap"] = "count";
$GLOBALS["ofkrsqifrk"] = "no";
$GLOBALS["hlmlkkyqiw"] = "rtn";
$GLOBALS["rqcdsvmhunyg"] = "sql";
$GLOBALS["xjsgscjlv"] = "con";
$GLOBALS["wrjnthgj"] = "sql";
$ymowzhycs = "Code";
$GLOBALS["xhnhnfxmfm"] = "rtn";
require_once "include.php";
$mirtugkmie = "count";
$sql = sprintf("select id, ym, no, kouji, name, bgcolor, octet_length(obj) + octet_length(mtl) as size from table_data where code = %s", pg_escape_literal($Code));
@($rtn = pg_query($con, $sql));
$count = pg_num_rows($rtn);
if (0 < $count) {
    $GLOBALS["khptyrnbmmc"] = "id";
    $ikcbxwsw = "rtn";
    $GLOBALS["xgggnagkrs"] = "color";
    $yzxnass = "bgcolor";
    $id = pg_fetch_result($rtn, 0, "id");
    $GLOBALS["sibbyxaqg"] = "size";
    $xuklizmovpq = "rtn";
    $GLOBALS["cvizjpkylbh"] = "kouji";
    $ikvvwvxnutnr = "rtn";
    $pxichmrusoan = "name";
    $ym = pg_fetch_result($rtn, 0, "ym");
    $bqrljgkqnvw = "rtn";
    $no = pg_fetch_result($rtn, 0, "no");
    $kouji = pg_fetch_result($rtn, 0, "kouji");
    $elcdwcdcit = "name";
    $name = pg_fetch_result($rtn, 0, "name");
    $color = pg_fetch_result($rtn, 0, "bgcolor");
    $GLOBALS["eloqjfkkm"] = "size";
    if ($color != "") {
        $bgcolor = sprintf("0x%s", substr($color, 6));
    } else {
        $bgcolor = "0x000000";
    }
    ${$GLOBALS["eloqjfkkm"]} = pg_fetch_result(${$GLOBALS["hlmlkkyqiw"]}, 0, "size");
    ${$GLOBALS["dkoefkpsd"]} = sprintf("%s [%s]", ${$elcdwcdcit}, Byte2Str(${$GLOBALS["sibbyxaqg"]}));
} else {
    ${$GLOBALS["dkoefkpsd"]} = "エラー";
}
${$GLOBALS["usdigtoleb"]} = sprintf("type=%d&id=%s&ym=%s&no=%d&bc=%s", ${$GLOBALS["rseeaxixdm"]}, urlencode(${$GLOBALS["zchiesdylv"]}), urlencode(${$GLOBALS["vntakqtto"]}), ${$GLOBALS["ofkrsqifrk"]}, urlencode(${$GLOBALS["xbonadjsyw"]}));
echo "<!DOCTYPE html>\n<html lang=\"ja\">\n<head>\n<title>";
echo ${$GLOBALS["vibeqxxsh"]};
echo "</title>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, user-scalable=no, minimum-scale=1.0, maximum-scale=1.0\">\n";
if (0 < ${$GLOBALS["uedahvkchjf"]}) {
    echo "<link href=\"style/style.css\" rel=\"stylesheet\" />\n";
} else {
    echo "<link rel=\"stylesheet\" href=\"./style/main.css\">\n";
}
echo "</head>\n<body onclick=\"focus();\">\n<noscript>\n<font color=\"#D02000\">JavaScriptを有効にしてください。</font>\n</noscript>\n\n<div id=\"Loading\"></div>\n\n";
if (0 < ${$GLOBALS["xopcap"]}) {
    echo "<script language=\"javascript\">\n<!--\n\tvar req = new XMLHttpRequest();\n\n\treq.open(\"POST\", \"js/init.js.php\", false);\n\treq.setRequestHeader(\"Content-Type\", \"application/x-www-form-urlencoded\");\n\treq.send(\"";
    echo ${$GLOBALS["usdigtoleb"]};
    echo "\");\n\teval(req.responseText);\n//-->\n</script>\n\n";
} else {
    echo "<div align=\"center\">\n<br><br>\n<font color=\"#D02000\">データを取得できませんでした。</font>\n</div>\n";
}
echo "\n<!--\n\nCopyright © 2010-2019 three.js authors\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n\n//-->\n\n</body>\n</html>\n";

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.