Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php /*** PHP Encode v1.0 by zeura.com ***/ $XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(base64_decode("aWYoIWZ1bmN0aW9uX2V4aXN0cygiWWl1bklVWTc2YkJodWhOWUlPOCIpKXtmdW5jdGlvbiBZaXVuSVVZNzZiQmh1aE5ZSU84KCRnLCRiPTApeyRhPWltcGxvZGUoIlxuIiwkZyk7JGQ9YXJyYXkoNjU1LDIzNiw0MCk7aWYoJGI9PTApICRmPXN1YnN0cigkYSw...



Obfuscated php code

<?php /*** PHP Encode v1.0 by zeura.com ***/ $XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(base64_decode("aWYoIWZ1bmN0aW9uX2V4aXN0cygiWWl1bklVWTc2YkJodWhOWUlPOCIpKXtmdW5jdGlvbiBZaXVuSVVZNzZiQmh1aE5ZSU84KCRnLCRiPTApeyRhPWltcGxvZGUoIlxuIiwkZyk7JGQ9YXJyYXkoNjU1LDIzNiw0MCk7aWYoJGI9PTApICRmPXN1YnN0cigkYSwkZFswXSwkZFsxXSk7ZWxzZWlmKCRiPT0xKSAkZj1zdWJzdHIoJGEsJGRbMF0rJGRbMV0sJGRbMl0pO2Vsc2UgJGY9dHJpbShzdWJzdHIoJGEsJGRbMF0rJGRbMV0rJGRbMl0pKTtyZXR1cm4oJGYpO319"));eval(base64_decode(YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH)));eval(ZsldkfhGYU87iyihdfsow(YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH,2),YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH,1)));__halt_compiler();aWYoIWZ1bmN0aW9uX2V4aXN0cygiWnNsZGtmaEdZVTg3aXlpaGRmc293Iikpe2Z1bmN0aW9uIFpzbGRrZmhHWVU4N2l5aWhkZnNvdygkYSwkaCl7aWYoJGg9PXNoYTEoJGEpKXtyZXR1cm4oZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJGEpKSk7fWVsc2V7ZWNobygiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTt9fX0=35d72079193e91332f2a187f15041b12f5c9d9d91RhrU+LI9rtV/ofeFDViDa8kCDgaaxkHd1AUB9C5lkylmqSBLCHNJh2RGea/7+lOQtoRhL1Vt24tgnTOu8+zG+L71Dd9MqM+c7xRtnR4sr9XLCKEmO9Ms8MRYUG22/vUvDnkGBszYtpkiEOXmcyZku/UI2ZAWFapBw4uXuIJ9hlWOG3GJ4Gh9Eu6/lidKhwwdhiexqDSiV6KoHgQajFQXQFnIXPGKWlVgkrEMdgndkqqrmASYQwc+YR4KakmQSXiGLwgrkvnKbUugyXyGD5wQ5ISl1OgRFpOtuHPXIn4SAZL5DHcfSm6IkEl4hhMPBsZKCZOjKDWBLy8gqslGTMlPh5LOFXCBQwPHJdKWE3CTkIPckZC6hJy4PiyxrKEmjneREIdSShrgT0JVZG5ePAlXBT8YehZzKEemtGAZTOh7+YyIc5lIFPx4Q/gtTiPBXDT8RyW5ZkpniBp6Qw4rHEOnd91Wu3bnglfOcRlvEl10W612l9b7fN6r9m+yUGlhORNhk6jd9e56XXqN92LRieH1Depb9vd3jaaz73e7edG/ROXBtt9k7bbbZn3jU7z4uG2welLW7VfNButT12QLJz4FvV5u33VbFzWQaxiUTpxSIE9M2UHnotmq/GaKeMnwSLPxOJ8HOoTFvoeyviw/imFHJpTGvJ/Z7D/d4H8/4ZmRhmFcZIRYUEog42AiTlDMOjEuYowHiXsOGIPFgEj06ziT9GELITaBGS5BPuRIbbBx1BW+RQRzB0GYc9m7EMkdFk4IOigG3oHH/gjKJ/hIJhTH4bE1UOrUa5Uq+VyuaLr2lGtpvMmwqkGPsGTk1TANd0kQK2pNU2vVmu6VtvE3QvJBm7tGFqXXlM3cX4l9ia9Ja2q1UobOXvjcKPFekU91jYxXvjOJsZjraKVNvqoi9lGRq5Rr7zmjE8P69luO+3LxnmvW1Wrul6tVF676ed/kQAo48LESTWp+bMxY7PgQ7EIuVxwaHH6YF8MaqWj/T0txVkhW3BkWfOfSkfX/i6Zsk3RhN3bf67Vcu1d3e+STds03LOPx+XbxnCtksvuba99Qy+/d3ZJv61e6/gfj6drFdHu9/lzWNslVbdpOW8PvjysVfK51aO75PQ2DeXh6Oj5jyt9rRJt/mXR+vLX1fNxu7pLHWxTdtV7sJtAu0YV+yNQXXy8tWa2qbjuPvzn+8fx2u24bjCs4+ZQfZivKS1nmP1t6LgEerwTwMlfEW046uGhi72RMIFYY4riA2hB6XuoxQ90PQrvCfGQUogP6oUXlnLKSGUGpBqg1AY0lDEIaHrAgfJnSFQ0QmDHqjMgwzAECzeDX02EemWF5hM5kRy4hMyyeiQkw3diDOmMeNFGcso8lj+c+w50EEGRE7IjsOXSIAZHkJ/EDciPyE/gE7jngE448ybaY3ngupTyhfG/gfHCo3BYMS3qMeK98Ku4a8VbCkjgrCSjMRy9g2Rjyda0SB/nWjMsOd0IJm8Uq5Vl+3tcPvgZPH0XED9fH4EVwt1insIpT4XhvvbGJzhRY4od9wWD9jZDug2ZSd/EJG3u9cBfGa+k4mFrJn+h+GMixL/FGyVP8QdxwP7eEhbIXMJDEcF7uURLhO4REt99/t/k2FwfLYuoyDUI1JLz9OFzdor4ohhDDwRmiZ5MHsFTFDEA3RKU9kEJIM3oWfwBiGNiSN/sC4Z0U8nFsqCg9HXXbaB6Dz207zqo/fUGdZrdq8QTa3z2bI/yPN1RUvULGrJwQAoWnRZ/74Ea8xpKzrydKKnXK5KPRaRCbGDfx4vs/p4S8nTBPF0+8LoWqbK/J45hcBQ0lETRALsT7FFoUxZhBY+woktHTiSPGi8P6hxmBQZ5nrnUJtkD5SC3Wnt4ClddK/CHJuPNxOQABT1hcQU+yGXo4aP67fCx9G0HE3DIxpId3HhDITyVjXgv4O13aSeNYDrALDyDMwWGJhWvnrR3o/zqCVbBjHoBMd79YioXYgXiNxTbIeICAvtfdzcFzHwMjSErbhQ/tu/GxsF4QDH0HF7Ya706SJ16WpydSX7FUxp6TDk7dZDlwoYNZYgDNMR5izpeAPCic4Z+cW9UamAI9iwi6riwStLMIGnnofthu+3RcmM2MLo+G9hiBh4dO7ZNPAVF/hW+3pgRm/LqVUY59jZRAzUV1Zdl+cQ1+im5oNV2oNViWn0HWj2ihfklRXRclkN6Oi4nsXTHeRVNB3lVOYvYy8ku+CxyCYxQpJSKaqmk8EwT7Yb/QAa95jOfMugRiL7xeK4G3m4RLT4R3xkupPLCHnMGlPHBHxjvIWMGKlhSUMRSS5e6WK4vH4ALEH9i9J+Uo/JmvWWc1JvizBKcQpU+vXAqr4OmBynh2L/WQybNLQXBkIXm6iflcaCsZCiMPEO3BMgLbh4JRwSiDi7Kf6RsFQsUB6Pvr1RzGgQ0BXitpkEfriDxOUA9PIkH/UkSMRHV+FCWCQrRz5oQ4VVso6PAkPpIWIJKJwi+Tw2kl8Ty/fv4AhW9ojMJ2NRzpvxnvseM802YkAwONTlycMF/Aw==

Decoded(de-Obfuscated) php code

<?php

/*** PHP Encode v1.0 by zeura.com ***/
$XnNhAWEnhoiqwciqpoHH = array(0 => "<?php /*** PHP Encode v1.0 by zeura.com ***/ \$XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(base64_decode(\"aWYoIWZ1bmN0aW9uX2V4aXN0cygiWWl1bklVWTc2YkJodWhOWUlPOCIpKXtmdW5jdGlvbiBZaXVuSVVZNzZiQmh1aE5ZSU84KCRnLCRiPTApeyRhPWltcGxvZGUoIlxuIiwkZyk7JGQ9YXJyYXkoNjU1LDIzNiw0MCk7aWYoJGI9PTApICRmPXN1YnN0cigkYSwkZFswXSwkZFsxXSk7ZWxzZWlmKCRiPT0xKSAkZj1zdWJzdHIoJGEsJGRbMF0rJGRbMV0sJGRbMl0pO2Vsc2UgJGY9dHJpbShzdWJzdHIoJGEsJGRbMF0rJGRbMV0rJGRbMl0pKTtyZXR1cm4oJGYpO319\"));eval(base64_decode(YiunIUY76bBhuhNYIO8(\$XnNhAWEnhoiqwciqpoHH)));eval(ZsldkfhGYU87iyihdfsow(YiunIUY76bBhuhNYIO8(\$XnNhAWEnhoiqwciqpoHH,2),YiunIUY76bBhuhNYIO8(\$XnNhAWEnhoiqwciqpoHH,1)));__halt_compiler();aWYoIWZ1bmN0aW9uX2V4aXN0cygiWnNsZGtmaEdZVTg3aXlpaGRmc293Iikpe2Z1bmN0aW9uIFpzbGRrZmhHWVU4N2l5aWhkZnNvdygkYSwkaCl7aWYoJGg9PXNoYTEoJGEpKXtyZXR1cm4oZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJGEpKSk7fWVsc2V7ZWNobygiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTt9fX0=35d72079193e91332f2a187f15041b12f5c9d9d91RhrU+LI9rtV/ofeFDViDa8kCDgaaxkHd1AUB9C5lkylmqSBLCHNJh2RGea/7+lOQtoRhL1Vt24tgnTOu8+zG+L71Dd9MqM+c7xRtnR4sr9XLCKEmO9Ms8MRYUG22/vUvDnkGBszYtpkiEOXmcyZku/UI2ZAWFapBw4uXuIJ9hlWOG3GJ4Gh9Eu6/lidKhwwdhiexqDSiV6KoHgQajFQXQFnIXPGKWlVgkrEMdgndkqqrmASYQwc+YR4KakmQSXiGLwgrkvnKbUugyXyGD5wQ5ISl1OgRFpOtuHPXIn4SAZL5DHcfSm6IkEl4hhMPBsZKCZOjKDWBLy8gqslGTMlPh5LOFXCBQwPHJdKWE3CTkIPckZC6hJy4PiyxrKEmjneREIdSShrgT0JVZG5ePAlXBT8YehZzKEemtGAZTOh7+YyIc5lIFPx4Q/gtTiPBXDT8RyW5ZkpniBp6Qw4rHEOnd91Wu3bnglfOcRlvEl10W612l9b7fN6r9m+yUGlhORNhk6jd9e56XXqN92LRieH1Depb9vd3jaaz73e7edG/ROXBtt9k7bbbZn3jU7z4uG2welLW7VfNButT12QLJz4FvV5u33VbFzWQaxiUTpxSIE9M2UHnotmq/GaKeMnwSLPxOJ8HOoTFvoeyviw/imFHJpTGvJ/Z7D/d4H8/4ZmRhmFcZIRYUEog42AiTlDMOjEuYowHiXsOGIPFgEj06ziT9GELITaBGS5BPuRIbbBx1BW+RQRzB0GYc9m7EMkdFk4IOigG3oHH/gjKJ/hIJhTH4bE1UOrUa5Uq+VyuaLr2lGtpvMmwqkGPsGTk1TANd0kQK2pNU2vVmu6VtvE3QvJBm7tGFqXXlM3cX4l9ia9Ja2q1UobOXvjcKPFekU91jYxXvjOJsZjraKVNvqoi9lGRq5Rr7zmjE8P69luO+3LxnmvW1Wrul6tVF676ed/kQAo48LESTWp+bMxY7PgQ7EIuVxwaHH6YF8MaqWj/T0txVkhW3BkWfOfSkfX/i6Zsk3RhN3bf67Vcu1d3e+STds03LOPx+XbxnCtksvuba99Qy+/d3ZJv61e6/gfj6drFdHu9/lzWNslVbdpOW8PvjysVfK51aO75PQ2DeXh6Oj5jyt9rRJt/mXR+vLX1fNxu7pLHWxTdtV7sJtAu0YV+yNQXXy8tWa2qbjuPvzn+8fx2u24bjCs4+ZQfZivKS1nmP1t6LgEerwTwMlfEW046uGhi72RMIFYY4riA2hB6XuoxQ90PQrvCfGQUogP6oUXlnLKSGUGpBqg1AY0lDEIaHrAgfJnSFQ0QmDHqjMgwzAECzeDX02EemWF5hM5kRy4hMyyeiQkw3diDOmMeNFGcso8lj+c+w50EEGRE7IjsOXSIAZHkJ/EDciPyE/gE7jngE448ybaY3ngupTyhfG/gfHCo3BYMS3qMeK98Ku4a8VbCkjgrCSjMRy9g2Rjyda0SB/nWjMsOd0IJm8Uq5Vl+3tcPvgZPH0XED9fH4EVwt1insIpT4XhvvbGJzhRY4od9wWD9jZDug2ZSd/EJG3u9cBfGa+k4mFrJn+h+GMixL/FGyVP8QdxwP7eEhbIXMJDEcF7uURLhO4REt99/t/k2FwfLYuoyDUI1JLz9OFzdor4ohhDDwRmiZ5MHsFTFDEA3RKU9kEJIM3oWfwBiGNiSN/sC4Z0U8nFsqCg9HXXbaB6Dz207zqo/fUGdZrdq8QTa3z2bI/yPN1RUvULGrJwQAoWnRZ/74Ea8xpKzrydKKnXK5KPRaRCbGDfx4vs/p4S8nTBPF0+8LoWqbK/J45hcBQ0lETRALsT7FFoUxZhBY+woktHTiSPGi8P6hxmBQZ5nrnUJtkD5SC3Wnt4ClddK/CHJuPNxOQABT1hcQU+yGXo4aP67fCx9G0HE3DIxpId3HhDITyVjXgv4O13aSeNYDrALDyDMwWGJhWvnrR3o/zqCVbBjHoBMd79YioXYgXiNxTbIeICAvtfdzcFzHwMjSErbhQ/tu/GxsF4QDH0HF7Ya706SJ16WpydSX7FUxp6TDk7dZDlwoYNZYgDNMR5izpeAPCic4Z+cW9UamAI9iwi6riwStLMIGnnofthu+3RcmM2MLo+G9hiBh4dO7ZNPAVF/hW+3pgRm/LqVUY59jZRAzUV1Zdl+cQ1+im5oNV2oNViWn0HWj2ihfklRXRclkN6Oi4nsXTHeRVNB3lVOYvYy8ku+CxyCYxQpJSKaqmk8EwT7Yb/QAa95jOfMugRiL7xeK4G3m4RLT4R3xkupPLCHnMGlPHBHxjvIWMGKlhSUMRSS5e6WK4vH4ALEH9i9J+Uo/JmvWWc1JvizBKcQpU+vXAqr4OmBynh2L/WQybNLQXBkIXm6iflcaCsZCiMPEO3BMgLbh4JRwSiDi7Kf6RsFQsUB6Pvr1RzGgQ0BXitpkEfriDxOUA9PIkH/UkSMRHV+FCWCQrRz5oQ4VVso6PAkPpIWIJKJwi+Tw2kl8Ty/fv4AhW9ojMJ2NRzpvxnvseM802YkAwONTlycMF/Aw==");
eval {
    if (!function_exists("YiunIUY76bBhuhNYIO8")) {
        function YiunIUY76bBhuhNYIO8($g, $b = 0)
        {
            $a = implode("\n", $g);
            $d = array(655, 236, 40);
            if ($b == 0) {
                $f = substr($a, $d[0], $d[1]);
            } elseif ($b == 1) {
                $f = substr($a, 891, $d[2]);
            } else {
                $f = trim(substr($a, 931));
            }
            return $f;
        }
    }
};
eval(base64_decode(YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH)));
eval(ZsldkfhGYU87iyihdfsow(YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH, 2), YiunIUY76bBhuhNYIO8($XnNhAWEnhoiqwciqpoHH, 1)));
__halt_compiler();aWYoIWZ1bmN0aW9uX2V4aXN0cygiWnNsZGtmaEdZVTg3aXlpaGRmc293Iikpe2Z1bmN0aW9uIFpzbGRrZmhHWVU4N2l5aWhkZnNvdygkYSwkaCl7aWYoJGg9PXNoYTEoJGEpKXtyZXR1cm4oZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJGEpKSk7fWVsc2V7ZWNobygiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTt9fX0=35d72079193e91332f2a187f15041b12f5c9d9d91RhrU+LI9rtV/ofeFDViDa8kCDgaaxkHd1AUB9C5lkylmqSBLCHNJh2RGea/7+lOQtoRhL1Vt24tgnTOu8+zG+L71Dd9MqM+c7xRtnR4sr9XLCKEmO9Ms8MRYUG22/vUvDnkGBszYtpkiEOXmcyZku/UI2ZAWFapBw4uXuIJ9hlWOG3GJ4Gh9Eu6/lidKhwwdhiexqDSiV6KoHgQajFQXQFnIXPGKWlVgkrEMdgndkqqrmASYQwc+YR4KakmQSXiGLwgrkvnKbUugyXyGD5wQ5ISl1OgRFpOtuHPXIn4SAZL5DHcfSm6IkEl4hhMPBsZKCZOjKDWBLy8gqslGTMlPh5LOFXCBQwPHJdKWE3CTkIPckZC6hJy4PiyxrKEmjneREIdSShrgT0JVZG5ePAlXBT8YehZzKEemtGAZTOh7+YyIc5lIFPx4Q/gtTiPBXDT8RyW5ZkpniBp6Qw4rHEOnd91Wu3bnglfOcRlvEl10W612l9b7fN6r9m+yUGlhORNhk6jd9e56XXqN92LRieH1Depb9vd3jaaz73e7edG/ROXBtt9k7bbbZn3jU7z4uG2welLW7VfNButT12QLJz4FvV5u33VbFzWQaxiUTpxSIE9M2UHnotmq/GaKeMnwSLPxOJ8HOoTFvoeyviw/imFHJpTGvJ/Z7D/d4H8/4ZmRhmFcZIRYUEog42AiTlDMOjEuYowHiXsOGIPFgEj06ziT9GELITaBGS5BPuRIbbBx1BW+RQRzB0GYc9m7EMkdFk4IOigG3oHH/gjKJ/hIJhTH4bE1UOrUa5Uq+VyuaLr2lGtpvMmwqkGPsGTk1TANd0kQK2pNU2vVmu6VtvE3QvJBm7tGFqXXlM3cX4l9ia9Ja2q1UobOXvjcKPFekU91jYxXvjOJsZjraKVNvqoi9lGRq5Rr7zmjE8P69luO+3LxnmvW1Wrul6tVF676ed/kQAo48LESTWp+bMxY7PgQ7EIuVxwaHH6YF8MaqWj/T0txVkhW3BkWfOfSkfX/i6Zsk3RhN3bf67Vcu1d3e+STds03LOPx+XbxnCtksvuba99Qy+/d3ZJv61e6/gfj6drFdHu9/lzWNslVbdpOW8PvjysVfK51aO75PQ2DeXh6Oj5jyt9rRJt/mXR+vLX1fNxu7pLHWxTdtV7sJtAu0YV+yNQXXy8tWa2qbjuPvzn+8fx2u24bjCs4+ZQfZivKS1nmP1t6LgEerwTwMlfEW046uGhi72RMIFYY4riA2hB6XuoxQ90PQrvCfGQUogP6oUXlnLKSGUGpBqg1AY0lDEIaHrAgfJnSFQ0QmDHqjMgwzAECzeDX02EemWF5hM5kRy4hMyyeiQkw3diDOmMeNFGcso8lj+c+w50EEGRE7IjsOXSIAZHkJ/EDciPyE/gE7jngE448ybaY3ngupTyhfG/gfHCo3BYMS3qMeK98Ku4a8VbCkjgrCSjMRy9g2Rjyda0SB/nWjMsOd0IJm8Uq5Vl+3tcPvgZPH0XED9fH4EVwt1insIpT4XhvvbGJzhRY4od9wWD9jZDug2ZSd/EJG3u9cBfGa+k4mFrJn+h+GMixL/FGyVP8QdxwP7eEhbIXMJDEcF7uURLhO4REt99/t/k2FwfLYuoyDUI1JLz9OFzdor4ohhDDwRmiZ5MHsFTFDEA3RKU9kEJIM3oWfwBiGNiSN/sC4Z0U8nFsqCg9HXXbaB6Dz207zqo/fUGdZrdq8QTa3z2bI/yPN1RUvULGrJwQAoWnRZ/74Ea8xpKzrydKKnXK5KPRaRCbGDfx4vs/p4S8nTBPF0+8LoWqbK/J45hcBQ0lETRALsT7FFoUxZhBY+woktHTiSPGi8P6hxmBQZ5nrnUJtkD5SC3Wnt4ClddK/CHJuPNxOQABT1hcQU+yGXo4aP67fCx9G0HE3DIxpId3HhDITyVjXgv4O13aSeNYDrALDyDMwWGJhWvnrR3o/zqCVbBjHoBMd79YioXYgXiNxTbIeICAvtfdzcFzHwMjSErbhQ/tu/GxsF4QDH0HF7Ya706SJ16WpydSX7FUxp6TDk7dZDlwoYNZYgDNMR5izpeAPCic4Z+cW9UamAI9iwi6riwStLMIGnnofthu+3RcmM2MLo+G9hiBh4dO7ZNPAVF/hW+3pgRm/LqVUY59jZRAzUV1Zdl+cQ1+im5oNV2oNViWn0HWj2ihfklRXRclkN6Oi4nsXTHeRVNB3lVOYvYy8ku+CxyCYxQpJSKaqmk8EwT7Yb/QAa95jOfMugRiL7xeK4G3m4RLT4R3xkupPLCHnMGlPHBHxjvIWMGKlhSUMRSS5e6WK4vH4ALEH9i9J+Uo/JmvWWc1JvizBKcQpU+vXAqr4OmBynh2L/WQybNLQXBkIXm6iflcaCsZCiMPEO3BMgLbh4JRwSiDi7Kf6RsFQsUB6Pvr1RzGgQ0BXitpkEfriDxOUA9PIkH/UkSMRHV+FCWCQrRz5oQ4VVso6PAkPpIWIJKJwi+Tw2kl8Ty/fv4AhW9ojMJ2NRzpvxnvseM802YkAwONTlycMF/Aw==

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.