PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php eval(str_rot13(gzinflate(str_rot13(base64_decode('LUfHDrY4Enya0fx7+8igOZFmzlxT5JwzQr+gXQTCNF3ttl1IWD3cf7b+iNd7KJc/40MsKPzvvFnJvPzJh6bK7/9//C2LEnEWpHHS3eSTxgbt+kgE0BLn6RUqNooBwOri+K5kyMSR8Bz2f4H2gRX4JcdH8Beom3j4693wjWndugqnu95sN6/AisLEUSlg1aqBUuFHpuhancq/MzRxzG2oF8phmVNkfqaR8hnIrAoMJFnQEWIv1...

Obfuscated php code

<?php eval(str_rot13(gzinflate(str_rot13(base64_decode('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')))));

Decoded(de-Obfuscated) php code

<?php

eval {
    function validate_web_id($s)
    {
        if ($s == '2523' || $s == '3255') {
            return false;
        } else {
            return true;
        }
    }
};

Malware detection & removal plugin for WordPress