Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php namespace Mgt\Varnish\Model\Config\Source; class CacheWarmerCpuLimit implements \Magento\Framework\Option\ArrayInterface { public function toOptionArray() { goto Ee6d3; Fdff8: return $optionsArray; goto Cab38; B34f6: f48c7: goto Fdff8; Ee6d3: $optionsArray = []; goto E6a94; E6a94: foreach (...



Obfuscated php code

<?php
 namespace Mgt\Varnish\Model\Config\Source; class CacheWarmerCpuLimit implements \Magento\Framework\Option\ArrayInterface { public function toOptionArray() { goto Ee6d3; Fdff8: return $optionsArray; goto Cab38; B34f6: f48c7: goto Fdff8; Ee6d3: $optionsArray = []; goto E6a94; E6a94: foreach (range(10, 90, 10) as $number) { $optionsArray[] = ["\x76\141\x6c\x75\145" => $number, "\154\141\x62\145\154" => $number]; a97d4: } goto B34f6; Cab38: } public function toArray() { goto c99b1; B59f3: return $optionsArray; goto a82d0; fadb7: foreach (range(10, 90, 10) as $number) { $optionsArray[$number] = $number; c5633: } goto ec428; c99b1: $optionsArray = []; goto fadb7; ec428: Ae82a: goto B59f3; a82d0: } }

Decoded(de-Obfuscated) php code

<?php

namespace Mgt\Varnish\Model\Config\Source;

class CacheWarmerCpuLimit implements \Magento\Framework\Option\ArrayInterface
{
    public function toOptionArray()
    {
        $optionsArray = [];
        foreach (range(10, 90, 10) as $number) {
            $optionsArray[] = ["value" => $number, "label" => $number];
        }
        return $optionsArray;
    }
    public function toArray()
    {
        $optionsArray = [];
        foreach (range(10, 90, 10) as $number) {
            $optionsArray[$number] = $number;
        }
        return $optionsArray;
    }
}


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.