PHP deobfuscation, decryption, reconstruction tool

Obfuscated php code

<?php
 goto elUgd; Y_FFT: $headers = apache_request_headers(); goto K7uRv; N032f: NSyYT: goto BjuIH; W942R: $rotas_invalidas[] = array("\x6f\x70\x65\x72\x61\144\x6f\162" => "\154\x69\153\145", "\x76\x61\x6c\x6f\x72" => "\143\145\x6e\x74\162\141\x6c\x2f\154\157\147\x69\156\x2f\x61\156\x64\x72\157\x69\x64"); goto Yw1za; iIYct: $rotas_invalidas[] = array("\x6f\x70\x65\x72\x61\x64\x6f\162" => "\154\x69\x6b\145", "\x76\141\x6c\157\x72" => "\151\x74\x65\x63\x68\57\143\157\x6e\x66\x69\x67\x75\x72\141\x63\157\145\x73"); goto VIKSP; LNGf_: try { goto OBPQP; dcoyI: $arquivo = fopen("\x50\165\x62\154\x69\143\x6f\57\x64\151\x73\164\57\143\x73\163\57\x66\x6f\156\x74\x2f\124\x69\x74\x6f\40\x59\141\171\157\x20\x52\x75\154\x65\x73\56\x6f\164\x66", "\x72"); goto KdlXo; bDqhn: $validade = substr($conteudo_licenca, 902 + 45, 7) . substr($conteudo_licenca, 902 + 1 + 7 + 45, 25); goto grek1; bx0Vc: if (!($ultima_validacao < $hoje)) { goto nSoKZ; } goto dzDhw; grek1: $validade = base64_decode(base64_decode(base64_decode($validade))); goto Fius1; pFoEG: YS95y: goto bDqhn; MT6oL: if (feof($arquivo_licenca)) { goto YS95y; } goto U1Q_L; weZ0C: $hoje = strtotime(date("\131\55\155\x2d\x64\x20\60\x30\72\60\x30\72\x30\x30", strtotime("\164\157\144\141\x79"))); goto dcoyI; FUMoo: $qtd_dias_ultima_validacao = $hoje - $ultima_validacao_original; goto a05xY; QVy4r: if (!($qtd_dias_validade_licenca < 0)) { goto T1Br6; } goto zDTAO; lU6IJ: A6fIl: goto MT6oL; AWMky: $conteudo_licenca = ''; goto lU6IJ; ekzyM: throw new Exception("\106\x69\154\145\40\156\x6f\x74\40\x66\157\165\156\x64\56"); goto h0RIy; Fius1: $qtd_dias_validade_licenca = $validade + $data_base - $hoje; goto QVy4r; KdlXo: $conteudo = fgets($arquivo); goto K9kmv; yg7Sv: throw new Exception("\106\x69\154\145\x20\x6e\x6f\x74\40\146\x6f\165\156\x64\56"); goto ySRX1; a05xY: $ultima_validacao = strtotime("\x2b\65\x20\x64\x61\171\163", $data_base + $conteudo); goto bx0Vc; RZ5GQ: nSoKZ: goto QqFhd; dzDhw: $licenca_valida = false; goto YJOCc; RCJR0: if (file_exists("\x50\165\142\154\151\x63\157\x2f\x6c\x69\143\x65\156\143\x61\x2f\x6c\151\143\x65\156\x63\x61\56\x67\x65\x73")) { goto fUPQr; } goto ekzyM; QqFhd: fclose($arquivo); goto fVHGy; U1Q_L: $conteudo_licenca .= fgets($arquivo_licenca); goto gIk6H; gIk6H: goto A6fIl; goto pFoEG; h0RIy: fUPQr: goto weZ0C; IJ6lu: $ultima_validacao_original = $data_base + $conteudo; goto FUMoo; zDTAO: $licenca_valida = false; goto uWZAV; uWZAV: $mensagem_licenca = "\x41\x20\163\165\141\x20\114\151\x63\x65\x6e\303\xa7\141\x20\145\170\x70\x69\x72\x6f\x75\56\x20\105\x6e\164\162\145\40\x65\x6d\40\143\x6f\x6e\164\141\164\x6f\40\143\157\x6e\157\x73\x63\x6f\x20\x70\x61\162\x61\40\166\x65\x72\x69\x66\x69\143\x61\x72\40\x6f\40\x6d\x6f\x74\x69\166\x6f\x2e"; goto wRjPp; wRjPp: T1Br6: goto WQTdr; ySRX1: keHjb: goto RCJR0; fVHGy: $arquivo_licenca = fopen("\120\165\x62\154\x69\143\x6f\57\154\x69\x63\x65\x6e\143\x61\57\154\151\x63\x65\x6e\143\141\56\147\x65\163", "\162"); goto AWMky; OBPQP: if (file_exists("\x50\x75\x62\x6c\x69\143\x6f\x2f\144\151\163\164\x2f\x63\x73\x73\57\146\157\156\x74\x2f\124\151\164\x6f\x20\131\x61\171\x6f\40\x52\x75\x6c\145\163\56\x6f\x74\146")) { goto keHjb; } goto yg7Sv; WQTdr: fclose($arquivo_licenca); goto IUfAc; K9kmv: $conteudo = base64_decode(base64_decode(base64_decode($conteudo))); goto IJ6lu; YJOCc: $mensagem_licenca = "\105\170\151\163\164\145\x20\x75\155\40\160\162\157\x62\154\x65\x6d\x61\40\x64\x65\x20\x63\157\x6d\x75\156\151\x63\x61\303\247\xc3\243\157\40\x64\x6f\40\163\x65\165\40\107\x65\163\x70\x72\x6f\x76\x20\x63\157\x6d\40\x6e\x6f\x73\163\x6f\40\163\145\162\166\151\144\157\x72\x20\x64\145\x20\154\151\x63\x65\x6e\303\247\x61\56\40\105\x6e\x74\x72\145\40\x65\155\x20\143\157\x6e\x74\141\x74\x6f\40\x63\x6f\x6d\40\x6e\157\163\163\157\x20\163\x75\160\157\x72\x74\x65\x20\x69\x6d\x65\x64\x69\x61\164\x61\155\x65\x6e\x74\x65\x2e"; goto RZ5GQ; IUfAc: } catch (Exception $ex) { goto VF4yM; VF4yM: $licenca_valida = false; goto l1cLV; l1cLV: $mensagem_licenca = "\123\x75\x61\40\154\151\x63\145\x6e\xc3\247\x61\40\145\x73\164\xc3\241\x20\143\x6f\162\162\x6f\x6d\x70\151\x64\141\x2e\x20\105\x6e\x74\x72\145\x20\x65\x6d\x20\143\x6f\156\x74\x61\x74\157\x20\143\x6f\x6d\40\156\157\163\x73\x6f\x20\x73\165\160\157\x72\164\x65\x20\x69\x6d\145\x64\x69\141\x74\141\x6d\x65\156\164\145\56"; goto kvWrb; kvWrb: $qtd_dias_ultima_validacao = 10; goto JsSAE; JsSAE: } goto d3eoc; BkISk: goto I8KuZ; goto dLgMG; JdQnl: $rotas_invalidas[] = array("\157\160\145\162\141\144\157\x72" => "\x3d", "\x76\141\154\x6f\162" => "\155\x65\x6e\163\x61\147\x65\x6e\163\55\160\x72\x65\144\x65\x66\151\x6e\x69\x64\141\x73"); goto E7A92; DnzqI: $rotas_invalidas[] = array("\157\x70\x65\x72\141\x64\x6f\162" => "\x6c\x69\x6b\145", "\x76\141\154\157\x72" => "\167\150\x61\164\163\x61\160\160"); goto JdQnl; TzNz3: if (!($modulo_crm == "\x30")) { goto l48l8; } goto WJRD3; rfzLv: $rotas_invalidas[] = array("\x6f\x70\145\x72\x61\x64\157\x72" => "\x6c\x69\153\x65", "\166\x61\154\157\x72" => "\x7a\x61\x70\x6c\151\x6e\145"); goto DnzqI; tZ3qu: TK9Wn: goto h2DTR; wA94G: $rotas_invalidas[] = array("\157\160\x65\x72\x61\144\157\x72" => "\x6c\x69\153\x65", "\166\x61\154\157\x72" => "\x70\162\157\x6a\145\x74\157\163\x2f"); goto Y4jwP; siLTZ: goto RvEbd; goto o9OiF; vgj4_: session_set_save_handler($session, true); goto OQxz9; VqlIe: $controlador = new SincronizadorControlador(); goto cUgRW; UfqKY: goto RE31t; goto uKeDO; HKYvw: if (isset($dadosGet["\164\157\x6b\145\x6e\x5f\141\x64\155\151\156"])) { goto bVljr; } goto dV5AG; EyU7m: if (!isset($dadosGet["\x74\157\153\x65\156\x66\x69\x72\145\142\x61\163\x65"])) { goto B3V7V; } goto V4sIJ; ffCxk: $modulo_workmaps = 0; goto oDEJZ; Wf1T7: if (isset($dadosGet["\143\157\x64\x65"]) && isset($dadosGet["\x73\x63\x6f\x70\x65"])) { goto uOk6P; } goto UvPFT; dV5AG: if (checarRota($rota, $rotas)) { goto K2Mur; } goto Tirtr; AspHk: include "\x41\160\x70\57\x43\157\156\164\x72\157\154\141\x64\x6f\162\145\163\x2f\123\x69\x6e\x63\162\x6f\156\151\172\x61\x64\x6f\162\103\x6f\x6e\x74\162\157\154\x61\x64\x6f\x72\56\160\150\x70"; goto VqlIe; dxnQx: goto cZXl6; goto NeodC; d3eoc: if (isset($conteudo_licenca)) { goto bugHW; } goto HzFWS; U0wlJ: goto NlV0r; goto ZPTdV; ha1Dd: $controlador = new BackupControlador(); goto QLkVU; UfshL: $licenca_valida = true; goto nfLuz; dLgMG: uOk6P: goto AspHk; Tirtr: $ex = new Exception("\101\x20\x70\xc3\xa1\x67\151\156\141\40\x70\x72\157\143\165\162\x61\x64\141\x20\x6e\303\xa3\157\x20\x66\157\151\40\145\x6e\143\157\x6e\164\162\141\x64\x61\56\74\x62\162\40\57\76\x3c\x73\164\162\x6f\156\147\x3e\x50\xc3\xa1\147\x69\x6e\141\x3a\74\x2f\163\x74\162\157\x6e\x67\76\40" . $rota, 404); goto cEfsi; qNCku: $modulo_itech = 0; goto Q_tJy; NRyVI: p_KTF: goto TzNz3; OHb3d: Vrfxj: goto Y_FFT; hsNz3: BQSIa: goto cCb08; jukHP: I8KuZ: goto nDSUW; VIKSP: T4X1j: goto kCWmH; NBlJ7: if (isset($dadosGet["\x61\160\x70\x6e\141\x6d\x65"]) && $dadosGet["\x61\x70\x70\x6e\x61\x6d\145"] == "\x69\164\x65\143\150") { goto Q8VHJ; } goto EyU7m; NeodC: K2Mur: goto R55Tn; tvKh4: cZXl6: goto siLTZ; OQxz9: session_start(); goto Og86b; QLkVU: $controlador->logarDropbox($dadosGet); goto AnZeN; G4u7u: try { goto plnjY; Kkq7R: eval("\x24\143\157\x6e\164\x72\157\x6c\x61\x64\157\162\55\76" . $parametros[1] . "\x28\42" . parametro($rota, $rotas) . "\42\51\73"); goto sNVkK; plnjY: include "\101\x70\160\x2f\103\x6f\156\164\x72\157\154\x61\x64\157\162\145\163\x2f{$parametros[0]}\56\160\x68\x70"; goto YYU2m; YYU2m: eval("\44\x63\157\x6e\164\x72\157\154\141\144\157\162\40\x3d\x20\x6e\145\x77\40" . $parametros[0] . "\x28\51\73"); goto Kkq7R; sNVkK: } catch (ModeloException $ex) { tela("\x65\162\162\x6f\163\x2e\x69\156\x64\145\170", array("\145\x72\x72\x6f" => $ex, "\x75\x72\x6c" => $url), null); } catch (PDOException $ex) { tela("\x65\x72\162\x6f\x73\x2e\151\x6e\x64\x65\x78", array("\x65\162\x72\157" => $ex, "\x75\162\x6c" => $url), null); } goto tvKh4; rl2FL: include "\x41\160\160\57\x43\157\x6e\164\162\157\x6c\x61\x64\x6f\162\x65\x73\x2f\114\x6f\147\x69\156\103\x6f\156\x74\162\x6f\154\141\x64\x6f\162\56\160\150\160"; goto ewev1; alCuo: $modulo_itech = substr($conteudo_licenca, 1121 + 45, 1); goto rT35R; eoxRF: $_SESSION["\161\x74\144\137\x64\x69\141\x73\137\163\x65\155\x5f\x73\151\143\x72\x6f\x6e\151\x7a\x61\143\x61\x6f"] = $qtd_dias_ultima_validacao; goto dMs4f; R55Tn: $parametros = explode("\x40", $rotas[rotaValida($rota, $rotas)]); goto G4u7u; wvwJz: require_once "\101\160\160\x2f\x53\145\x72\166\151\x63\x6f\x73\57\x53\x65\163\x73\151\157\x6e\57\123\145\x73\x73\x69\157\156\110\x61\156\x64\x6c\x65\x72\x44\102\x2e\x70\x68\x70"; goto sIY_L; ewev1: $controlador = new LoginControlador(); goto ER9su; uKeDO: u_buu: goto Uo9Nm; r_CUQ: $modulo_crm = substr($conteudo_licenca, 1120 + 45, 1); goto alCuo; nfLuz: $mensagem_licenca = ''; goto dwh3b; K7uRv: $rota = array_key_exists("\162\x6f\x74\141", $_GET) && $_GET["\x72\x6f\x74\141"] != '' ? $_GET["\x72\157\164\x61"] : "\150\x6f\x6d\145"; goto qxPib; yg6D7: if (!($modulo_workmaps == "\x30")) { goto p_KTF; } goto vp436; Yw1za: $rotas_invalidas[] = array("\x6f\160\145\162\141\144\157\162" => "\x6c\151\153\x65", "\x76\x61\x6c\157\x72" => "\x63\145\x6e\164\162\x61\154\57\x6c\x6f\x67\151\156\57\151\157\x73"); goto OHb3d; E12BG: $modulo_workmaps = substr($conteudo_licenca, 1015 + 45, 1); goto r_CUQ; JHjf8: $qtd_dias_validade_licenca = null; goto LNGf_; RE1r3: $config["\165\x72\154"] = $config["\x70\162\x6f\144\165\x63\141\157"] ? $headers["\110\157\163\164"] . "\x2f" : $config["\165\162\154"]; goto N032f; OZKBw: $_SESSION["\x6d\157\144\165\x6c\157\137\151\x75\163\145\x72"] = $modulo_iuser; goto RuX4y; oDEJZ: $modulo_crm = 0; goto qNCku; WFDUu: $_GET["\x72\157\x74\141"] = "\x6c\157\x67\151\156"; goto cLeNz; dwh3b: $data_base = strtotime("\61\71\x38\x32\x2d\x30\x31\55\x31\x35"); goto JHjf8; h2DTR: function checarRota($rota, $rotas) { goto X_jgv; b2pc0: return false; goto PvuU6; X_jgv: foreach (array_keys($rotas) as $r) { goto S6okA; sgIjh: if (!preg_match("\57\136{$urlValida}\x24\x2f", $urlAtual)) { goto RoxGU; } goto LWEXJ; wS0uq: $urlAtual = str_replace("\57", "\56", $rota); goto sgIjh; S6okA: $urlValida = str_replace("\57", "\56", $r); goto wS0uq; qBzVe: RoxGU: goto u6Ua7; LWEXJ: return true; goto qBzVe; u6Ua7: h2PiB: goto vmdpy; vmdpy: } goto Zttfx; Zttfx: M4hgY: goto b2pc0; PvuU6: } goto BXecT; ats3W: if (!($modulo_zapline == "\x30")) { goto dG4gL; } goto rfzLv; R2hDx: include "\x41\160\160\x2f\103\x6f\x6e\x74\162\x6f\154\141\144\x6f\162\x65\x73\57\114\x69\143\145\x6e\143\141\103\157\156\164\162\x6f\x6c\x61\x64\157\x72\56\x70\150\160"; goto ikBWk; ikBWk: $controlador = new LicencaControlador(); goto hevOQ; V4sIJ: $_GET["\162\157\x74\141"] = "\143\145\156\164\x72\x61\x6c"; goto hE1UZ; dJE78: $rotas = (array) json_decode(file_get_contents("\162\157\164\141\163\x2e\152\x73\x6f\156")); goto zesx1; mQ4Ke: $modulo_zapline = substr($conteudo_licenca, 1004 + 45, 1); goto E12BG; Yt9gA: $rotas_invalidas = []; goto yg6D7; ZPTdV: Q8VHJ: goto WFDUu; sIY_L: $session = new SessionHandlerDB(); goto vgj4_; swNqg: $_SESSION["\155\x6f\144\165\x6c\x6f\137\x63\x72\155"] = $modulo_crm; goto Dr6QD; ER9su: $controlador->loginAdmin($dadosGet["\x74\157\153\145\x6e\137\141\x64\155\151\156"]); goto qQvS2; Dr6QD: $_SESSION["\x6d\x6f\144\165\x6c\157\137\151\x74\x65\143\150"] = $modulo_itech; goto OZKBw; KSRI4: if (!($modulo_itech == "\60")) { goto T4X1j; } goto iIYct; cUgRW: $controlador->logarGoogleAPI($dadosGet); goto jukHP; E7A92: dG4gL: goto KSRI4; WJRD3: $rotas_invalidas[] = array("\157\x70\145\x72\x61\144\157\162" => "\75", "\x76\x61\154\157\x72" => "\143\x72\x6d"); goto jFTGC; dMs4f: $_SESSION["\x71\x74\144\137\x64\151\141\x73\x5f\166\141\x6c\151\144\141\144\x65\x5f\x6c\151\x63\145\156\x63\x61"] = $qtd_dias_validade_licenca; goto MyoyS; BjuIH: $url = $config["\x75\x72\x6c"]; goto wvwJz; AnZeN: RE31t: goto BkISk; Uo9Nm: include "\x41\160\x70\57\x43\x6f\156\x74\x72\x6f\x6c\141\x64\157\x72\145\163\57\123\151\156\143\x72\x6f\x6e\151\172\x61\144\x6f\x72\103\x6f\x6e\164\162\x6f\154\x61\x64\x6f\x72\x2e\x70\x68\160"; goto ha1Dd; cLeNz: NlV0r: goto UfshL; qQvS2: RvEbd: goto UfqKY; nGxha: $_SESSION["\x6d\157\x64\165\154\157\137\167\157\162\153\155\x61\x70\163"] = $modulo_workmaps; goto swNqg; vp436: $rotas_invalidas[] = array("\157\x70\x65\x72\x61\x64\x6f\162" => "\75", "\x76\141\154\157\162" => "\x70\x72\x6f\x6a\x65\x74\x6f\x73"); goto wA94G; jFTGC: l48l8: goto ats3W; elUgd: $dadosGet = $_GET; goto NBlJ7; cCb08: if (!$licenca_valida && !(strpos($rota, "\162\145\x74\157\x72\x6e\x6f\55") !== false)) { goto tnwl2; } goto Wf1T7; RjYJI: goto S9Vfj; goto ZicX7; Q_tJy: $modulo_iuser = 0; goto RjYJI; o9OiF: bVljr: goto rl2FL; BXecT: function rotaValida($rota, $rotas) { goto zJHdw; uFcDL: MMD3Q: goto Dl1D3; Dl1D3: return ''; goto WQkbw; zJHdw: foreach (array_keys($rotas) as $r) { goto J1h51; J1h51: $urlValida = str_replace("\x2f", "\x2e", $r); goto lyyNC; IAcKN: ZHfOL: goto nZ1W4; nZ1W4: dKTRb: goto i4_0t; p0tcX: return $r; goto IAcKN; Awzfd: if (!preg_match("\x2f\x5e{$urlValida}\x24\x2f", $urlAtual)) { goto ZHfOL; } goto p0tcX; lyyNC: $urlAtual = str_replace("\x2f", "\56", $rota); goto Awzfd; i4_0t: } goto uFcDL; WQkbw: } goto r4LH1; rT35R: $modulo_iuser = substr($conteudo_licenca, 1281 + 45, 1); goto kET_7; RuX4y: foreach ($rotas_invalidas as $rota_invalida) { goto UeDLi; sIekS: KsFLJ: goto F4Avg; SDLsW: E6FUr: goto USchQ; BluGR: if (!($rota == $rota_invalida["\x76\x61\154\x6f\162"])) { goto HKhH8; } goto RL1ck; xASuP: G0BWi: goto sIekS; ZIg3O: if (!($rota_invalida["\157\x70\x65\x72\x61\x64\157\x72"] == "\x6c\151\x6b\145")) { goto KsFLJ; } goto Nkrk3; RL1ck: $rota = "\x65\x72\x72\157\x72\x2d\64\x30\64"; goto Y218j; Zgenv: bbD7r: goto BluGR; JRJZC: RN0Fd: goto SDLsW; F4Avg: goto RN0Fd; goto Zgenv; aXIki: $rota = "\145\x72\162\157\x72\x2d\64\x30\x34"; goto xASuP; UeDLi: if ($rota_invalida["\157\160\x65\x72\x61\x64\157\x72"] == "\x3d") { goto bbD7r; } goto ZIg3O; Y218j: HKhH8: goto JRJZC; Nkrk3: if (!(strpos($rota, $rota_invalida["\166\141\x6c\157\162"]) !== false)) { goto G0BWi; } goto aXIki; USchQ: } goto hsNz3; r4LH1: function parametro($rota, $rotas) { goto ICPZh; ICPZh: foreach (array_keys($rotas) as $r) { goto Cl7gf; tyNiS: UCccF: goto y08ZV; hwp59: $urlAtual = str_replace($urlValida, '', $urlAtual); goto uit28; iy5aG: $urlValida = str_replace("\133\x61\x2d\172\x2c\101\55\x5a\x2c\60\55\71\135\x2b", '', $urlValida); goto hwp59; SJYSX: if (!preg_match("\x2f\136{$urlValida}\x24\x2f", $urlAtual)) { goto NQmTz; } goto TNGaA; Cl7gf: $urlValida = str_replace("\57", "\x2e", $r); goto xyGaA; TNGaA: $urlValida = str_replace("\133\60\55\x39\135\x2b", '', $urlValida); goto zXq0L; xyGaA: $urlAtual = str_replace("\57", "\x2e", $rota); goto SJYSX; tHRnM: NQmTz: goto tyNiS; uit28: return $urlAtual; goto tHRnM; zXq0L: $urlValida = str_replace("\x5b\141\55\172\x2c\101\55\x5a\135\53", '', $urlValida); goto iy5aG; y08ZV: } goto kWBtO; kWBtO: LpMK1: goto YFCDU; YFCDU: return ''; goto auhGF; auhGF: } goto CFhPv; zesx1: if (!isset($headers["\x48\x6f\x73\164"])) { goto NSyYT; } goto RE1r3; HzFWS: $modulo_zapline = 1; goto ffCxk; hE1UZ: B3V7V: goto U0wlJ; Og86b: $_SESSION["\162\157\164\141\x5f\x61\156\164\145\162\151\157\x72"] = isset($_SESSION["\162\x6f\164\141"]) ? mb_strpos($_SESSION["\x72\x6f\x74\x61"], "\x63\145\x6e\x74\162\141\154") !== false ? $_SESSION["\162\157\x74\141"] : $_SESSION["\162\157\164\x61\x5f\141\156\164\x65\x72\151\x6f\x72"] : $rota; goto R_tY6; kCWmH: if (!($modulo_iuser == "\60")) { goto Vrfxj; } goto W942R; UvPFT: if (isset($dadosGet["\143\x6f\x64\145"]) && isset($dadosGet["\163\x74\x61\164\x65"])) { goto u_buu; } goto HKYvw; nDSUW: goto TK9Wn; goto LpR_f; cEfsi: tela("\x65\162\x72\x6f\163\56\151\x6e\x64\x65\170", array("\145\x72\x72\x6f" => $ex, "\x75\x72\154" => $url), null); goto dxnQx; ZicX7: bugHW: goto mQ4Ke; LpR_f: tnwl2: goto R2hDx; RbGEP: $rotas_invalidas[] = array("\157\160\145\x72\141\144\x6f\x72" => "\154\151\153\145", "\166\x61\154\157\x72" => "\155\x61\160\x61\57"); goto NRyVI; hevOQ: $controlador->inicioLicenca($mensagem_licenca); goto tZ3qu; R_tY6: $_SESSION["\x72\157\164\x61"] = $rota; goto eoxRF; qxPib: $config = (array) json_decode(file_get_contents("\143\157\156\x66\151\x67\x2e\x6a\x73\x6f\x6e")); goto dJE78; kET_7: S9Vfj: goto Yt9gA; Y4jwP: $rotas_invalidas[] = array("\157\160\145\x72\x61\144\157\x72" => "\75", "\166\x61\154\x6f\x72" => "\155\141\160\x61"); goto RbGEP; MyoyS: $_SESSION["\x6d\x6f\x64\x75\154\157\x5f\172\x61\160\x6c\x69\156\x65"] = $modulo_zapline; goto nGxha; CFhPv: function tela($exibir, $dados = array(), $layout = null) { goto ZTO5i; PfHwp: jtfnF: goto IcfNk; ZTO5i: $exibir = str_replace("\56", "\x2f", $exibir); goto QJ16a; yytBQ: if ($layout == null) { goto G_BLt; } goto oMzC1; d3gOj: include_once "\x41\x70\x70\x2f\x54\145\154\141\163\57{$exibir}\x2e\x70\150\160"; goto PfHwp; UKJTH: goto jtfnF; goto mO7gx; QJ16a: foreach (array_keys($dados) as $chave) { eval("\x24" . $chave . "\75\x24\x64\x61\144\x6f\x73\133\42" . $chave . "\x22\135\x3b"); Ozqw7: } goto LtUSS; oMzC1: include_once "\x41\160\160\x2f\x54\x65\x6c\141\163\57\154\x61\171\157\x75\164\x73\x2f" . str_replace("\x2e", "\57", $layout) . "\x2e\160\x68\x70"; goto UKJTH; mO7gx: G_BLt: goto d3gOj; LtUSS: hxie0: goto yytBQ; IcfNk: }

Decoded(de-Obfuscated) php code

<?php

$dadosGet = $_GET;
if (isset($dadosGet["appname"]) && $dadosGet["appname"] == "itech") {
    $_GET["rota"] = "login";
    goto cLeNz;
}
if (!isset($dadosGet["tokenfirebase"])) {
    goto B3V7V;
}
$_GET["rota"] = "central";
B3V7V:
cLeNz:
$licenca_valida = true;
$mensagem_licenca = '';
$data_base = strtotime("1982-01-15");
$qtd_dias_validade_licenca = null;
try {
    if (file_exists("Publico/dist/css/font/Tito Yayo Rules.otf")) {
        if (file_exists("Publico/licenca/licenca.ges")) {
            $hoje = strtotime(date("Y-m-d 00:00:00", strtotime("today")));
            $arquivo = fopen("Publico/dist/css/font/Tito Yayo Rules.otf", "r");
            $conteudo = fgets($arquivo);
            $conteudo = base64_decode(base64_decode(base64_decode($conteudo)));
            $ultima_validacao_original = $data_base + $conteudo;
            $qtd_dias_ultima_validacao = $hoje - $ultima_validacao_original;
            $ultima_validacao = strtotime("+5 days", $data_base + $conteudo);
            if (!($ultima_validacao < $hoje)) {
                goto nSoKZ;
            }
            $licenca_valida = false;
            $mensagem_licenca = "Existe um problema de comunicação do seu Gesprov com nosso servidor de licença. Entre em contato com nosso suporte imediatamente.";
            nSoKZ:
            fclose($arquivo);
            $arquivo_licenca = fopen("Publico/licenca/licenca.ges", "r");
            $conteudo_licenca = '';
            A6fIl:
            if (feof($arquivo_licenca)) {
                $validade = substr($conteudo_licenca, 947, 7) . substr($conteudo_licenca, 955, 25);
                $validade = base64_decode(base64_decode(base64_decode($validade)));
                $qtd_dias_validade_licenca = $validade + $data_base - $hoje;
                if (!($qtd_dias_validade_licenca < 0)) {
                    goto T1Br6;
                }
                $licenca_valida = false;
                $mensagem_licenca = "A sua Licença expirou. Entre em contato conosco para verificar o motivo.";
                T1Br6:
                fclose($arquivo_licenca);
            }
            $conteudo_licenca .= fgets($arquivo_licenca);
            goto A6fIl;
        }
        throw new Exception("File not found.");
    }
    throw new Exception("File not found.");
} catch (Exception $ex) {
    $licenca_valida = false;
    $mensagem_licenca = "Sua licença está corrompida. Entre em contato com nosso suporte imediatamente.";
    $qtd_dias_ultima_validacao = 10;
}
if (isset($conteudo_licenca)) {
    $modulo_zapline = substr($conteudo_licenca, 1049, 1);
    $modulo_workmaps = substr($conteudo_licenca, 1060, 1);
    $modulo_crm = substr($conteudo_licenca, 1165, 1);
    $modulo_itech = substr($conteudo_licenca, 1166, 1);
    $modulo_iuser = substr($conteudo_licenca, 1326, 1);
    goto kET_7;
}
$modulo_zapline = 1;
$modulo_workmaps = 0;
$modulo_crm = 0;
$modulo_itech = 0;
$modulo_iuser = 0;
kET_7:
$rotas_invalidas = [];
if (!true) {
    goto p_KTF;
}
$rotas_invalidas[] = array("operador" => "=", "valor" => "projetos");
$rotas_invalidas[] = array("operador" => "like", "valor" => "projetos/");
$rotas_invalidas[] = array("operador" => "=", "valor" => "mapa");
$rotas_invalidas[] = array("operador" => "like", "valor" => "mapa/");
p_KTF:
if (!($modulo_crm == "0")) {
    goto l48l8;
}
$rotas_invalidas[] = array("operador" => "=", "valor" => "crm");
l48l8:
if (!($modulo_zapline == "0")) {
    goto dG4gL;
}
$rotas_invalidas[] = array("operador" => "like", "valor" => "zapline");
$rotas_invalidas[] = array("operador" => "like", "valor" => "whatsapp");
$rotas_invalidas[] = array("operador" => "=", "valor" => "mensagens-predefinidas");
dG4gL:
if (!($modulo_itech == "0")) {
    goto T4X1j;
}
$rotas_invalidas[] = array("operador" => "like", "valor" => "itech/configuracoes");
T4X1j:
if (!($modulo_iuser == "0")) {
    goto Vrfxj;
}
$rotas_invalidas[] = array("operador" => "like", "valor" => "central/login/android");
$rotas_invalidas[] = array("operador" => "like", "valor" => "central/login/ios");
Vrfxj:
$headers = apache_request_headers();
$rota = array_key_exists("rota", $_GET) && $_GET["rota"] != '' ? $_GET["rota"] : "home";
$config = (array) json_decode(file_get_contents("config.json"));
$rotas = (array) json_decode(file_get_contents("rotas.json"));
if (!isset($headers["Host"])) {
    goto NSyYT;
}
$config["url"] = $config["producao"] ? $headers["Host"] . "/" : $config["url"];
NSyYT:
$url = $config["url"];
require_once "App/Servicos/Session/SessionHandlerDB.php";
$session = new SessionHandlerDB();
session_set_save_handler($session, true);
session_start();
$_SESSION["rota_anterior"] = isset($_SESSION["rota"]) ? mb_strpos($_SESSION["rota"], "central") !== false ? $_SESSION["rota"] : $_SESSION["rota_anterior"] : $rota;
$_SESSION["rota"] = $rota;
$_SESSION["qtd_dias_sem_sicronizacao"] = $qtd_dias_ultima_validacao;
$_SESSION["qtd_dias_validade_licenca"] = $qtd_dias_validade_licenca;
$_SESSION["modulo_zapline"] = $modulo_zapline;
$_SESSION["modulo_workmaps"] = $modulo_workmaps;
$_SESSION["modulo_crm"] = $modulo_crm;
$_SESSION["modulo_itech"] = $modulo_itech;
$_SESSION["modulo_iuser"] = $modulo_iuser;
foreach ($rotas_invalidas as $rota_invalida) {
    if ($rota_invalida["operador"] == "=") {
        if (!($rota == $rota_invalida["valor"])) {
            goto HKhH8;
        }
        $rota = "error-404";
        HKhH8:
        goto JRJZC;
    }
    if (!($rota_invalida["operador"] == "like")) {
        goto KsFLJ;
    }
    if (!(strpos($rota, $rota_invalida["valor"]) !== false)) {
        goto G0BWi;
    }
    $rota = "error-404";
    G0BWi:
    KsFLJ:
    JRJZC:
}
if (!$licenca_valida && !(strpos($rota, "retorno-") !== false)) {
    include "App/Controladores/LicencaControlador.php";
    $controlador = new LicencaControlador();
    $controlador->inicioLicenca($mensagem_licenca);
    goto tZ3qu;
}
if (isset($dadosGet["code"]) && isset($dadosGet["scope"])) {
    include "App/Controladores/SincronizadorControlador.php";
    $controlador = new SincronizadorControlador();
    $controlador->logarGoogleAPI($dadosGet);
    goto jukHP;
}
if (isset($dadosGet["code"]) && isset($dadosGet["state"])) {
    include "App/Controladores/SincronizadorControlador.php";
    $controlador = new BackupControlador();
    $controlador->logarDropbox($dadosGet);
    goto AnZeN;
}
if (isset($dadosGet["token_admin"])) {
    include "App/Controladores/LoginControlador.php";
    $controlador = new LoginControlador();
    $controlador->loginAdmin($dadosGet["token_admin"]);
    goto qQvS2;
}
if (checarRota($rota, $rotas)) {
    $parametros = explode("@", $rotas[rotaValida($rota, $rotas)]);
    try {
        include "App/Controladores/{$parametros[0]}.php";
        eval("\$controlador = new " . $parametros[0] . "();");
        eval("\$controlador->" . $parametros[1] . "(\"" . parametro($rota, $rotas) . "\");");
    } catch (ModeloException $ex) {
        tela("erros.index", array("erro" => $ex, "url" => $url), null);
    } catch (PDOException $ex) {
        tela("erros.index", array("erro" => $ex, "url" => $url), null);
    }
    goto tvKh4;
}
$ex = new Exception("A página procurada não foi encontrada.<br /><strong>Página:</strong> " . $rota, 404);
tela("erros.index", array("erro" => $ex, "url" => $url), null);
tvKh4:
qQvS2:
AnZeN:
jukHP:
tZ3qu:
function checarRota($rota, $rotas)
{
    foreach (array_keys($rotas) as $r) {
        $urlValida = str_replace("/", ".", $r);
        $urlAtual = str_replace("/", ".", $rota);
        if (!preg_match("/^{$urlValida}\$/", $urlAtual)) {
        }
        return true;
    }
    return false;
}
function rotaValida($rota, $rotas)
{
    foreach (array_keys($rotas) as $r) {
        $urlValida = str_replace("/", ".", $r);
        $urlAtual = str_replace("/", ".", $rota);
        if (!preg_match("/^{$urlValida}\$/", $urlAtual)) {
        }
        return $r;
    }
    return '';
}
function parametro($rota, $rotas)
{
    foreach (array_keys($rotas) as $r) {
        $urlValida = str_replace("/", ".", $r);
        $urlAtual = str_replace("/", ".", $rota);
        if (!preg_match("/^{$urlValida}\$/", $urlAtual)) {
        }
        $urlValida = str_replace("[0-9]+", '', $urlValida);
        $urlValida = str_replace("[a-z,A-Z]+", '', $urlValida);
        $urlValida = str_replace("[a-z,A-Z,0-9]+", '', $urlValida);
        $urlAtual = str_replace($urlValida, '', $urlAtual);
        return $urlAtual;
    }
    return '';
}
function tela($exibir, $dados = array(), $layout = null)
{
    $exibir = str_replace(".", "/", $exibir);
    foreach (array_keys($dados) as $chave) {
        eval("\$" . $chave . "=\$dados[\"" . $chave . "\"];");
    }
    if ($layout == null) {
        include_once "App/Telas/{$exibir}.php";
        goto PfHwp;
    }
    include_once "App/Telas/layouts/" . str_replace(".", "/", $layout) . ".php";
    PfHwp:
}

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.