PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php switch ($T5yNMeHxr2z1["/470"]) { case 495: goto C4mUwtMfJ2fz; Zx3lA6vYj8Kw: header("/498"); goto PN_5A0EUJ759; PN_5A0EUJ759: goto YsOC9xjMVXDc; goto Es1JTuRNvdKp; C4mUwtMfJ2fz: header("/504"); goto Zx3lA6vYj8Kw; Es1JTuRNvdKp: default: goto YsOC9xjMVXDc; } YsOC9xjMVXDc: die;...

Obfuscated php code

<?php switch ($T5yNMeHxr2z1["/470"]) {
	case 495:
		goto C4mUwtMfJ2fz;
		Zx3lA6vYj8Kw:
		header("/498");
		goto PN_5A0EUJ759;
		PN_5A0EUJ759:
		goto YsOC9xjMVXDc;
		goto Es1JTuRNvdKp;
		C4mUwtMfJ2fz:
		header("/504");
		goto Zx3lA6vYj8Kw;
		Es1JTuRNvdKp:
	default:
		goto YsOC9xjMVXDc;
}
YsOC9xjMVXDc:
die;

Decoded(de-Obfuscated) php code

<?php

switch ($T5yNMeHxr2z1["/470"]) {
    case 495:
        header("/504");
        header("/498");
        goto YsOC9xjMVXDc;
    default:
        goto YsOC9xjMVXDc;
}
YsOC9xjMVXDc:
die;

Malware detection & removal plugin for WordPress