PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $stt1 = "Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNz\x434pSi4upI5yUWJxqZhKfkpq\x63n5Kq\x41\x62SzKLVMQ6W4pMR\x41EwlY\x41w\x41\x3d"; $stt0 = "\x3d\x41RGf5XiSwnX\x41\x63jLkYrhG5\x4343Pg\x43FX\x2be\x2b\x2b4zPuer3udz7PP\x2b732EYu6/fD\x41I\x42wJe/TN\x41rEw/PD\x41M\x42wJe"; eval(htmlspecialch...

Obfuscated php code

<?php
$stt1 = "Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNz\x434pSi4upI5yUWJxqZhKfkpq\x63n5Kq\x41\x62SzKLVMQ6W4pMR\x41EwlY\x41w\x41\x3d";
$stt0 = "\x3d\x41RGf5XiSwnX\x41\x63jLkYrhG5\x4343Pg\x43FX\x2be\x2b\x2b4zPuer3udz7PP\x2b732EYu6/fD\x41I\x42wJe/TN\x41rEw/PD\x41M\x42wJe";
eval(htmlspecialchars_decode(gzinflate(base64_decode($stt1))));
?>

Decoded(de-Obfuscated) php code

<?php

$stt1 = "Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNzC4pSi4upI5yUWJxqZhKfkpqcn5KqAbSzKLVMQ6W4pMRAEwlYAwA=";
$stt0 = "=ARGf5XiSwnXAcjLkYrhG5C43PgCFX+e++4zPuer3udz7PP+732EYu6/fDAIBwJe/TNArEw/PDAMBwJe";
eval("?>Ashhssg");

Malware detection & removal plugin for WordPress