PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php namespace Mgt\Varnish\Model\Cache\Backend; use Symfony\Component\Filesystem\Filesystem; class File extends \Zend_Cache_Backend_File { protected $directoryList; public function construct(\Magento\Framework\App\Filesystem\DirectoryList $directoryList) { goto Db1ce; E8500: return parent::c...

Obfuscated php code

<?php
 namespace Mgt\Varnish\Model\Cache\Backend; use Symfony\Component\Filesystem\Filesystem; class File extends \Zend_Cache_Backend_File { protected $directoryList; public function __construct(\Magento\Framework\App\Filesystem\DirectoryList $directoryList) { goto Db1ce; E8500: return parent::__construct($options); goto b77bb; ba550: $this->createCacheDirIfNotExists($cacheDir); goto dd3b5; dd3b5: $options = ["\x63\141\143\x68\x65\137\x64\151\x72" => $cacheDir, "\143\141\x63\x68\145\x5f\x66\151\x6c\145\x5f\x70\145\162\155" => "\x30\x37\67\x35"]; goto E8500; C3324: $cacheDir = $this->directoryList->getPath("\x63\141\143\x68\145") . "\57\155\147\164\57"; goto ba550; Db1ce: $this->directoryList = $directoryList; goto C3324; b77bb: } protected function createCacheDirIfNotExists($cacheDir) { $filesystem = new Filesystem(); $filesystem->mkdir($cacheDir); } }

Decoded(de-Obfuscated) php code

<?php

namespace Mgt\Varnish\Model\Cache\Backend;

use Symfony\Component\Filesystem\Filesystem;
class File extends \Zend_Cache_Backend_File
{
    protected $directoryList;
    public function __construct(\Magento\Framework\App\Filesystem\DirectoryList $directoryList)
    {
        $this->directoryList = $directoryList;
        $cacheDir = $this->directoryList->getPath("cache") . "/mgt/";
        $this->createCacheDirIfNotExists($cacheDir);
        $options = ["cache_dir" => $cacheDir, "cache_file_perm" => "0775"];
        return parent::__construct($options);
    }
    protected function createCacheDirIfNotExists($cacheDir)
    {
        $filesystem = new Filesystem();
        $filesystem->mkdir($cacheDir);
    }
}

Malware detection & removal plugin for WordPress