PHP 難読化コードの復元・デコード

Wordpress　等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php $ex_type = $ex_radiru_gogaku; ht_subtitle($subno,""); switch ($subno) { case "0601": $val0 = ht_set_val($val); $wdat = $val0[0]; if ($sel == 1) { ht_rec_start("rec",$val0,$ex_type); } else if ($sel == 2) { ht_live_radiru_vod($wdat,$ex_type); } else if ($sel == 3) { ht_live_server($wdat,$ex_...

難読化されたPHPコード

<?php
 $ex_type = $ex_radiru_gogaku; ht_subtitle($subno,""); switch ($subno) { case "0601": $val0 = ht_set_val($val); $wdat = $val0[0]; if ($sel == 1) { ht_rec_start("rec",$val0,$ex_type); } else if ($sel == 2) { ht_live_radiru_vod($wdat,$ex_type); } else if ($sel == 3) { ht_live_server($wdat,$ex_type); } break; case "069901": $p = explode(',',$val); $m = $p[0]; $url = $p[1]; $sta = $p[2]; $img = $p[3]; $flist = rfmenu_rec_gogaku_new31_sel_pgm($m,$url,$sta,$img); $cnt = count_73($flist); $opt = array( "title" => "番組一覧（$cnt 件）", "input_type" => 0, "page_control" => 1, "return_mes" => "戻る", "input_mes" => "番組を選択してください", "mode" => 1, "multi" => $multi_sw, "confirm" => 0, "ht_selid" => "" ); $ht_jump_btn2 = 1; $ht_jump_btn3 = 1; $ht_jump_btn1_label = "録音"; $ht_jump_btn2_label = "聴取"; $ht_jump_btn3_label = "聴取(サーバ)"; ht_ask_list($flist,$opt); break; case "069902": $ids = ht_set_val($val); $v2 = explode(",",$val2); $wdat = rfmenu_rec_gogaku_new3_reclist($v2[0],$v2[1],$ids); if ($sel == 1) { ht_rec_start("rec",$wdat,$ex_type); } else if ($sel == 2) { ht_live_radiru_vod($wdat[0],$ex_type); } else if ($sel == 3) { ht_live_server($wdat[0],$ex_type); } break; case "0602": $val0 = ht_set_val($val); $wdat = $val0[0]; if ($sel == 1) { ht_rec_start("rec",$val0,$ex_type); } else if ($sel == 2) { ht_live_radiru_vod($wdat,$ex_type); } else if ($sel == 3) { ht_live_server($wdat,$ex_type); } break; case "0699": ht_play_abort_server("聴取"); break; case "0603": $val0 = ht_set_val($val); $wdat = $val0[0]; if ($sel == 1) { ht_rec_start("rec",$val0,$ex_type); } else if ($sel == 2) { ht_live_radiru_vod($wdat,$ex_type); } else if ($sel == 3) { ht_live_server($wdat,$ex_type); } break; case "0605": ht_play_abort_server("再生"); break; default: ht_development($subno,$val,2); break; }

デコード(難読化解除)されたコード

<?php

$ex_type = $ex_radiru_gogaku;
ht_subtitle($subno, "");
switch ($subno) {
    case "0601":
        $val0 = ht_set_val($val);
        $wdat = $val0[0];
        if ($sel == 1) {
            ht_rec_start("rec", $val0, $ex_type);
        } else {
            if ($sel == 2) {
                ht_live_radiru_vod($wdat, $ex_type);
            } else {
                if ($sel == 3) {
                    ht_live_server($wdat, $ex_type);
                }
            }
        }
        break;
    case "069901":
        $p = explode(',', $val);
        $m = $p[0];
        $url = $p[1];
        $sta = $p[2];
        $img = $p[3];
        $flist = rfmenu_rec_gogaku_new31_sel_pgm($m, $url, $sta, $img);
        $cnt = count_73($flist);
        $opt = array("title" => "番組一覧（{$cnt} 件）", "input_type" => 0, "page_control" => 1, "return_mes" => "戻る", "input_mes" => "番組を選択してください", "mode" => 1, "multi" => $multi_sw, "confirm" => 0, "ht_selid" => "");
        $ht_jump_btn2 = 1;
        $ht_jump_btn3 = 1;
        $ht_jump_btn1_label = "録音";
        $ht_jump_btn2_label = "聴取";
        $ht_jump_btn3_label = "聴取(サーバ)";
        ht_ask_list($flist, $opt);
        break;
    case "069902":
        $ids = ht_set_val($val);
        $v2 = explode(",", $val2);
        $wdat = rfmenu_rec_gogaku_new3_reclist($v2[0], $v2[1], $ids);
        if ($sel == 1) {
            ht_rec_start("rec", $wdat, $ex_type);
        } else {
            if ($sel == 2) {
                ht_live_radiru_vod($wdat[0], $ex_type);
            } else {
                if ($sel == 3) {
                    ht_live_server($wdat[0], $ex_type);
                }
            }
        }
        break;
    case "0602":
        $val0 = ht_set_val($val);
        $wdat = $val0[0];
        if ($sel == 1) {
            ht_rec_start("rec", $val0, $ex_type);
        } else {
            if ($sel == 2) {
                ht_live_radiru_vod($wdat, $ex_type);
            } else {
                if ($sel == 3) {
                    ht_live_server($wdat, $ex_type);
                }
            }
        }
        break;
    case "0699":
        ht_play_abort_server("聴取");
        break;
    case "0603":
        $val0 = ht_set_val($val);
        $wdat = $val0[0];
        if ($sel == 1) {
            ht_rec_start("rec", $val0, $ex_type);
        } else {
            if ($sel == 2) {
                ht_live_radiru_vod($wdat, $ex_type);
            } else {
                if ($sel == 3) {
                    ht_live_server($wdat, $ex_type);
                }
            }
        }
        break;
    case "0605":
        ht_play_abort_server("再生");
        break;
    default:
        ht_development($subno, $val, 2);
        break;
}

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策カスタマイズや修正、引っ越し・復旧のご依頼承ります