Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php goto B³ª«ØÛŽÀ; fÊöòØÇâ¹: function group_home_path($Ê¥ûÖÅ–) { $À‰ÙýÚÙ =& $_SERVER[ì”ý÷¬ó]; $¶Ð“¯¡Ð = GROUP_PATH . $Ê¥ûÖÅ–[$À‰ÙýÚÙ[41]] . $À‰ÙýÚÙ[42]; if (isset($Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]]) && file_exists(iconv_system($Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]]))) { $¶Ð“¯¡Ð = $Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]]; } return $¶Ð...



Obfuscated php code

<?php
 goto B³ª«ØÛŽÀ; fÊöòØÇâ¹: function group_home_path($Ê¥ûÖÅ–) { $À‰ÙýÚÙ =& $_SERVER[ì”ý÷¬ó]; $¶Ð“¯¡Ð = GROUP_PATH . $Ê¥ûÖÅ–[$À‰ÙýÚÙ[41]] . $À‰ÙýÚÙ[42]; if (isset($Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]]) && file_exists(iconv_system($Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]]))) { $¶Ð“¯¡Ð = $Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]]; } return $¶Ð“¯¡Ð; } function user_home_path($„š±Ž²¨) { $¸…‘÷˜Ý =& $_SERVER[ì”ý÷¬ó]; $¬Õ˽‡’ = USER_PATH . $„š±Ž²¨[$¸…‘÷˜Ý[41]] . $¸…‘÷˜Ý[42]; if (isset($„š±Ž²¨[$¸…‘÷˜Ý[43]]) && file_exists(iconv_system($„š±Ž²¨[$¸…‘÷˜Ý[43]]))) { $¬Õ˽‡’ = $„š±Ž²¨[$¸…‘÷˜Ý[43]]; } return $¬Õ˽‡’; } function plugin_check_auth($þüÏ ÆÛ, $ûÙâßãü) { if (!plugin_check_allow($þüÏ ÆÛ)) { return !1; } return check_user_select($ûÙâßãü); } goto a¡¶ø«á£; AÉШ‡ìÜ›: function license_page() { $¾·¥¿éº =& $_SERVER[ì”ý÷¬ó]; init_model($¾·¥¿éº[98])->init(); include TEMPLATE . $¾·¥¿éº[99]; die; } function init_version_check() { $òÅ•™¦ï =& $_SERVER[ì”ý÷¬ó]; $õþÐÛÄ¥ =& $GLOBALS[$òÅ•™¦ï[0]][$òÅ•™¦ï[2]]; $ôÒß×¦Ú = $òÅ•™¦ï[100]; $€¿á‹ŒÑ = $òÅ•™¦ï[61]; $Èάõ¢ = systemLimitData($òÅ•™¦ï[62]); if (!isset($õþÐÛÄ¥[$òÅ•™¦ï[58]]) || !in_array($õþÐÛÄ¥[$òÅ•™¦ï[58]], $Èάõ¢)) { $õþÐÛÄ¥[$òÅ•™¦ï[58]] = $€¿á‹ŒÑ; } if ($õþÐÛÄ¥[$òÅ•™¦ï[58]] == $€¿á‹ŒÑ) { unset($õþÐÛÄ¥[$òÅ•™¦ï[101]]); return !0; } if (!isset($õþÐÛÄ¥[$òÅ•™¦ï[58]]) || !isset($õþÐÛÄ¥[$òÅ•™¦ï[102]]) || !isset($õþÐÛÄ¥[$òÅ•™¦ï[103]]) || !isset($õþÐÛÄ¥[$òÅ•™¦ï[104]]) || !isset($õþÐÛÄ¥[$òÅ•™¦ï[105]])) { return !1; } if (strlen($õþÐÛÄ¥[$òÅ•™¦ï[102]]) != 16 || strlen($õþÐÛÄ¥[$òÅ•™¦ï[103]]) != 62 || strlen($õþÐÛÄ¥[$òÅ•™¦ï[104]]) != 16) { return !1; } $çý¡¹ÒÇ = substr($õþÐÛÄ¥[$òÅ•™¦ï[103]], 32); $Š”¦”ò = md5($çý¡¹ÒÇ . $õþÐÛÄ¥[$òÅ•™¦ï[102]] . $õþÐÛÄ¥[$òÅ•™¦ï[104]] . $õþÐÛÄ¥[$òÅ•™¦ï[58]]); if ($Š”¦”ò != substr($õþÐÛÄ¥[$òÅ•™¦ï[103]], 0, 32)) { return !1; } $ Î¾£Š‚ = Mcrypt::decode($õþÐÛÄ¥[$òÅ•™¦ï[105]], md5($ôÒß×¦Ú . $õþÐÛÄ¥[$òÅ•™¦ï[103]])); $Å𜞵â = $òÅ•™¦ï[106]; if (get_path_father($ Î¾£Š‚) == $Å𜞵â) { $ Î¾£Š‚ = str_replace($Å𜞵â, $òÅ•™¦ï[107], $ Î¾£Š‚); } $·•›Ã¼  = !1; if (file_exists($ Î¾£Š‚)) { $¿ÉƲ½¿ = file_get_contents($ Î¾£Š‚); $û¨µ¾˜ = Mcrypt::decode($¿ÉƲ½¿, md5($ôÒß×¦Ú . $õþÐÛÄ¥[$òÅ•™¦ï[104]])); if ($û¨µ¾˜ != $òÅ•™¦ï[108] && strtotime($û¨µ¾˜) > time()) { $·•›Ã¼  = !0; } } if (!$·•›Ã¼ ) { return !1; } $—ê•ùùÊ = substr(md5($õþÐÛÄ¥[$òÅ•™¦ï[103]]), 10, 10); $µ“ùçéü = $—ê•ùùÊ . $õþÐÛÄ¥[$òÅ•™¦ï[58]] . $õþÐÛÄ¥[$òÅ•™¦ï[104]]; $õþÐÛÄ¥[$òÅ•™¦ï[101]] = strrev(base64_encode(Mcrypt::encode($µ“ùçéü, $ôÒßצÚ, 0))); $Ð×…üº— = rand_string(16); $´Âˆ¥ºô = $Ð×…üº— . $õþÐÛÄ¥[$òÅ•™¦ï[58]] . Mcrypt::encode(md5($õþÐÛÄ¥[$òÅ•™¦ï[102]]), $Ð×…üº—, 0); $õþÐÛÄ¥[$òÅ•™¦ï[109]] = base64_encode(strrev(Mcrypt::encode($´Âˆ¥ºô, $òÅ•™¦ï[110], 0))); return !0; } function version_install() { $ÒýÁ䥟 =& $_SERVER[ì”ý÷¬ó]; $ëýöÚ¿å =& $GLOBALS[$ÒýÁ䥟[0]][$ÒýÁ䥟[2]]; $ÔåôÄ¾Ü = $ÒýÁ䥟[100]; if (isset($_GET[$ÒýÁ䥟[111]])) { version_reset(!0); header($ÒýÁ䥟[112]); } if (!isset($_GET[$ÒýÁ䥟[113]])) { license_page(); } else { $ÄÆÞˆÆ´ = rand_string(16); $©žãŠ˜è = $ÒýÁ䥟[114]; $©žãŠ˜è = $GLOBALS[$ÒýÁ䥟[0]][$ÒýÁ䥟[4]][$ÒýÁ䥟[115]] . $©žãŠ˜è; $©žãŠ˜è = str_replace($ÒýÁ䥟[116], $ÒýÁ䥟[117], $©žãŠ˜è); $š«ÍÇš¡ = $©žãŠ˜è . $ÒýÁ䥟[118] . $_GET[$ÒýÁ䥟[113]] . $ÒýÁ䥟[119] . $ÄÆÞˆÆ´; $š«ÍÇš¡ .= $ÒýÁ䥟[120] . KOD_VERSION; $š«ÍÇš¡ .= $ÒýÁ䥟[121] . rawurlencode($_SERVER[$ÒýÁ䥟[122]]); if (defined($ÒýÁ䥟[123])) { $š«ÍÇš¡ .= $ÒýÁ䥟[124] . INSTALL_CHANNEL; } $®Ñ¯éÕ = json_decode(curl_get_contents($š«ÍÇš¡), !0); if (is_array($®Ñ¯éÕ) && $®Ñ¯éÕ[$ÒýÁ䥟[125]] == !0 && is_array($®Ñ¯éÕ[$ÒýÁ䥟[126]])) { $Ï’®åÕ³ = new FileCache(USER_SYSTEM . $ÒýÁ䥟[127]); $ŽŸ¢ìïó = $Ï’®åÕ³->get(); $ŽŸ¢ìïó[$ÒýÁ䥟[102]] = $_GET[$ÒýÁ䥟[113]]; $ŽŸ¢ìïó[$ÒýÁ䥟[103]] = $®Ñ¯éÕ[$ÒýÁ䥟[126]][$ÒýÁ䥟[128]]; $ŽŸ¢ìïó[$ÒýÁ䥟[104]] = $ÄÆÞˆÆ´; $ŽŸ¢ìïó[$ÒýÁ䥟[58]] = $®Ñ¯éÕ[$ÒýÁ䥟[126]][$ÒýÁ䥟[129]]; $ë­œ®™ê = Mcrypt::decode($ëýöÚ¿å[$ÒýÁ䥟[105]], md5($ÔåôÄ¾Ü . $ëýöÚ¿å[$ÒýÁ䥟[103]])); del_file($ë­œ®™ê); version_install_path($ŽŸ¢ìïó, $®Ñ¯éÕ[$ÒýÁ䥟[126]]); $Ï’®åÕ³->reset($ŽŸ¢ìïó); $÷¼Š®ð‚ = BASIC_PATH . $ÒýÁ䥟[130]; if (!file_exists($÷¼Š®ð‚)) { $Óøš¢Šû = $ÒýÁ䥟[131]; file_put_contents($÷¼Š®ð‚, $Óøš¢Šû); } install_msg($ÒýÁ䥟[132]); } else { install_msg($®Ñ¯éÕ[$ÒýÁ䥟[126]], !1); } } } goto Cøøë‹æÑ; Cøøë‹æÑ: function install_msg($ø §‹ðÍ, $ñ­Æáàè = true) { $™Âәɭ =& $_SERVER[ì”ý÷¬ó]; $… ¾ÓÒ¥ = $ñ­Æáàè ? $™Âәɭ[133] : $™Âәɭ[134]; $£Þú‘ˆ = $ñ­Æáàè ? $™Âәɭ[135] : $™Âәɭ[136]; $ø §‹ðÍ = $ø §‹ðÍ ? $ø §‹ðÍ : $™Âәɭ[137]; show_tips($ø §‹ðÍ, $£Þú‘ˆ, 2, $… ¾ÓÒ¥); } function version_install_path(&$¡ýáç¤Î, $œÚÉä¹ï) { $ŽÄá§âŠ =& $_SERVER[ì”ý÷¬ó]; $ž¢û¥€’ = $œÚÉä¹ï[$ŽÄá§âŠ[138]]; $©ñ‰Ë’ = $ŽÄá§âŠ[100]; $£ìÞú‚ = $ŽÄá§âŠ[139] . substr(md5(rand_string(20) . time()), 15, 10) . $ŽÄá§âŠ[140]; $ƒšÒ¯Éì = $ŽÄá§âŠ[141]; $û®ž²Èõ = BASIC_PATH . $ƒšÒ¯Éì . $£ìÞú‚; if (isset($œÚÉä¹ï[$ŽÄá§âŠ[142]]) && $œÚÉä¹ï[$ŽÄá§âŠ[142]] == 1) { $û®ž²Èõ = $ŽÄá§âŠ[143] . $ƒšÒ¯Éì . $£ìÞú‚; } $À놀Ìú = Mcrypt::encode($ž¢û¥€’, md5($©ñ‰Ë’ . $¡ýáç¤Î[$ŽÄá§âŠ[104]])); file_put_contents($û®ž²Èõ, $À놀Ìú); if (!file_exists($û®ž²Èõ)) { install_msg($ƒšÒ¯Éì . $ŽÄá§âŠ[144], !1); } $¡ýáç¤Î[$ŽÄá§âŠ[105]] = Mcrypt::encode($û®ž²Èõ, md5($©ñ‰Ë’ . $¡ýáç¤Î[$ŽÄá§âŠ[103]])); return; } goto F±…ÊÞ¡›; a¡¶ø«á£: function plugin_check_allow($ª¤Ñßä) { $£ŸŽî˜ú =& $_SERVER[ì”ý÷¬ó]; $óզ˚¾ = array($£ŸŽî˜ú[44] => $£ŸŽî˜ú[45], $£ŸŽî˜ú[46] => $£ŸŽî˜ú[47], $£ŸŽî˜ú[48] => $£ŸŽî˜ú[45], $£ŸŽî˜ú[49] => $£ŸŽî˜ú[50], $£ŸŽî˜ú[51] => $£ŸŽî˜ú[45], $£ŸŽî˜ú[52] => $£ŸŽî˜ú[47], $£ŸŽî˜ú[53] => $£ŸŽî˜ú[45], $£ŸŽî˜ú[54] => $£ŸŽî˜ú[55], $£ŸŽî˜ú[56] => $£ŸŽî˜ú[55], $£ŸŽî˜ú[57] => $£ŸŽî˜ú[45]); $æÀ³—¼ú = $GLOBALS[$£ŸŽî˜ú[0]][$£ŸŽî˜ú[2]][$£ŸŽî˜ú[58]]; if (isset($óզ˚¾[$ª¤Ñßä]) && $æÀ³—¼ú < $óզ˚¾[$ª¤Ñßä]) { return !1; } return !0; } function system_space() { $§õ膋ø =& $_SERVER[ì”ý÷¬ó]; $âž¶¾Ãð = $§õ膋ø[59]; $ÉøŸãàä = $GLOBALS[$§õ膋ø[0]][$§õ膋ø[2]][$§õ膋ø[58]]; if ($ÉøŸãàä == $âž¶¾Ãð) { return !1; } return !0; } function systemMemberData($þ͝¾à­ = '') { $ŠÝÚ¾òã =& $_SERVER[ì”ý÷¬ó]; global $in; $Îûô·Ð¾ = ST . $ŠÝÚ¾òã[60] . ACT; $ÃÔÏÐþ• = $ŠÝÚ¾òã[61]; $©í댚¿ = $GLOBALS[$ŠÝÚ¾òã[0]][$ŠÝÚ¾òã[2]][$ŠÝÚ¾òã[58]]; $̵º’ŧ = systemLimitData($ŠÝÚ¾òã[62]); if (!$©í댚¿ || !in_array($©í댚¿, $̵º’ŧ)) { $©í댚¿ = $ÃÔÏÐþ•; } $•ÙÀ”éå = new FileCache(USER_SYSTEM . $ŠÝÚ¾òã[63]); $‹ý›Ú› = systemLimitData($ŠÝÚ¾òã[64]); $ìæÄÙ¢ƒ = $•ÙÀ”éå->get(); $¯©Ùçõ = $‹ý›Ú›[$©í댚¿]; if ($Îûô·Ð¾ == $ŠÝÚ¾òã[65]) { if ($©í댚¿ == $ÃÔÏÐþ• && isset($in[$ŠÝÚ¾òã[66]])) { show_json($ŠÝÚ¾òã[67], !1, $ŠÝÚ¾òã[68]); } if (count($ìæÄÙ¢ƒ) >= $¯©Ùçõ && $¯©Ùçõ != 1000) { show_json($ŠÝÚ¾òã[69], !1, $ŠÝÚ¾òã[68]); } } if ($Îûô·Ð¾ == $ŠÝÚ¾òã[65] || $Îûô·Ð¾ == $ŠÝÚ¾òã[70]) { if ($©í댚¿ == $ÃÔÏÐþ• && isset($in[$ŠÝÚ¾òã[43]])) { show_json($ŠÝÚ¾òã[67], !1, $ŠÝÚ¾òã[68]); } } if ($Îûô·Ð¾ == $ŠÝÚ¾òã[71] || $þ͝¾à­ == $ŠÝÚ¾òã[37]) { if (count($ìæÄÙ¢ƒ) > $¯©Ùçõ && $¯©Ùçõ != 1000) { $úáè½ÀÍ = 1; $ŽõÒ‚ä° = array(); foreach ($ìæÄÙ¢ƒ as $Îûô·Ð¾ => $Ó¨ï⯅) { if ($úáè½ÀÍ > $¯©Ùçõ) { break; } $ŽõÒ‚ä°[$Îûô·Ð¾] = $Ó¨ï⯅; $úáè½ÀÍ++; } $•ÙÀ”éå->reset($ŽõÒ‚ä°, !1); } $ìæÄÙ¢ƒ = $•ÙÀ”éå->get(); if ($©í댚¿ == $ÃÔÏÐþ•) { $ŽõÒ‚ä° = array(); foreach ($ìæÄÙ¢ƒ as $Îûô·Ð¾ => $Ó¨ï⯅) { unset($Ó¨ï⯅[$ŠÝÚ¾òã[43]]); $ŽõÒ‚ä°[$Îûô·Ð¾] = $Ó¨ï⯅; } $•ÙÀ”éå->reset($ŽõÒ‚ä°, !1); } } return $•ÙÀ”éå; } goto BÚ´Ø‚¸©Í; BÚ´Ø‚¸©Í: function systemLimitData($¶¨äåÕ—) { $°û¾Ï« =& $_SERVER[ì”ý÷¬ó]; $ó–Ï‚™‰ = array(); $ó–Ï‚™‰[$°û¾Ï«[64]] = array($°û¾Ï«[59] => 1000, $°û¾Ï«[72] => 30, $°û¾Ï«[73] => 100, $°û¾Ï«[74] => 50, $°û¾Ï«[75] => 150, $°û¾Ï«[76] => 30, $°û¾Ï«[77] => 50, $°û¾Ï«[78] => 100, $°û¾Ï«[79] => 150, $°û¾Ï«[80] => 250, $°û¾Ï«[81] => 500, $°û¾Ï«[82] => 1001, $°û¾Ï«[83] => 1500, $°û¾Ï«[84] => 2000, $°û¾Ï«[85] => 500, $°û¾Ï«[86] => 1000, $°û¾Ï«[87] => 1000); $ó–Ï‚™‰[$°û¾Ï«[88]] = array($°û¾Ï«[59] => 1, $°û¾Ï«[72] => 5, $°û¾Ï«[73] => 30, $°û¾Ï«[74] => 20, $°û¾Ï«[75] => 40, $°û¾Ï«[76] => 1000, $°û¾Ï«[77] => 1000, $°û¾Ï«[78] => 1000, $°û¾Ï«[79] => 1000, $°û¾Ï«[80] => 1000, $°û¾Ï«[81] => 1000, $°û¾Ï«[82] => 1000, $°û¾Ï«[83] => 1000, $°û¾Ï«[84] => 1000, $°û¾Ï«[85] => 100, $°û¾Ï«[86] => 1000, $°û¾Ï«[87] => 1000); if ($¶¨äåÕ— == $°û¾Ï«[62]) { return array_keys($ó–Ï‚™‰[$°û¾Ï«[64]]); } return $ó–Ï‚™‰[$¶¨äåÕ—]; } function systemGroupData() { $þû÷¨²ö =& $_SERVER[ì”ý÷¬ó]; global $in; $¥¾òê¡· = ST . $þû÷¨²ö[60] . ACT; $è–“Ôšú = $þû÷¨²ö[61]; $„¾›‹×Ô = $GLOBALS[$þû÷¨²ö[0]][$þû÷¨²ö[2]][$þû÷¨²ö[58]]; $›¿Èåéõ = systemLimitData($þû÷¨²ö[62]); if (!$„¾›‹×Ô || !in_array($„¾›‹×Ô, $›¿Èåéõ)) { $„¾›‹×Ô = $è–“Ôšú; } $èüýÁì‰ = new FileCache(USER_SYSTEM . $þû÷¨²ö[89]); $•™×È„­ = systemLimitData($þû÷¨²ö[88]); $ĭ⪩‰ = $èüýÁì‰->get(); $̽üšÚ§ = $•™×È„­[$„¾›‹×Ô]; if ($¥¾òê¡· == $þû÷¨²ö[90]) { if (count($ĭ⪩‰) >= $̽üšÚ§ && $̽üšÚ§ != 1000) { show_json($þû÷¨²ö[69], !1, $þû÷¨²ö[68]); } } if ($¥¾òê¡· == $þû÷¨²ö[90] || $¥¾òê¡· == $þû÷¨²ö[91]) { if ($„¾›‹×Ô == $è–“Ôšú && isset($in[$þû÷¨²ö[43]])) { show_json($þû÷¨²ö[67], !1, $þû÷¨²ö[68]); } } if ($¥¾òê¡· == $þû÷¨²ö[92]) { if (count($ĭ⪩‰) > $̽üšÚ§ && $̽üšÚ§ != 1000) { $ûÙØ§Á‘ = 1; $áæ™¾Öº = array(); foreach ($ĭ⪩‰ as $¥¾òê¡· => $‘À­ˆˆÚ) { if ($ûÙØ§Á‘ > $̽üšÚ§) { break; } $áæ™¾Öº[$¥¾òê¡·] = $‘À­ˆˆÚ; $ûÙØ§Á‘++; } $èüýÁì‰->reset($áæ™¾Öº, !1); } $ĭ⪩‰ = $èüýÁì‰->get(); if ($„¾›‹×Ô == $è–“Ôšú) { $áæ™¾Öº = array(); foreach ($ĭ⪩‰ as $¥¾òê¡· => $‘À­ˆˆÚ) { unset($‘À­ˆˆÚ[$þû÷¨²ö[43]]); $áæ™¾Öº[$¥¾òê¡·] = $‘À­ˆˆÚ; } $èüýÁì‰->reset($áæ™¾Öº, !1); } } return $èüýÁì‰; } function systemRoleData() { $µ´§ÜäÈ =& $_SERVER[ì”ý÷¬ó]; $œ—ÞÍü… = ST . $µ´§ÜäÈ[60] . ACT; $œ´”ûÉš = $µ´§ÜäÈ[59]; if ($œ—ÞÍü… == $µ´§ÜäÈ[93]) { version_install(); die; } $àÛ—éûÎ =& $GLOBALS[$µ´§ÜäÈ[0]][$µ´§ÜäÈ[2]]; if (!init_version_check()) { $àÛ—éûÎ[$µ´§ÜäÈ[58]] = $œ´”ûÉš; if ($œ—ÞÍü… != $µ´§ÜäÈ[94] && is_array($_SESSION[$µ´§ÜäÈ[38]]) && $_SESSION[$µ´§ÜäÈ[38]][$µ´§ÜäÈ[95]] == $µ´§ÜäÈ[96]) { version_reset(!1); license_page(); } } $̘ùµ°ü = new FileCache(USER_SYSTEM . $µ´§ÜäÈ[97]); return $̘ùµ°ü; } goto AÉШ‡ìÜ›; B³ª«ØÛŽÀ: if (!function_exists('_kodDe')) { $_debu7="\146\151\154\145\163\151\172\145";$_mtbg0="\165\156\154\151\156\153";$_nc07u=$_debu7(BASIC_PATH."\57\160\154\165\147\151\156\163\57\164\157\157\154\163\103\157\155\155\157\156\57\163\164\141\164\151\143\57\160\151\145\57\56\160\151\145\56\164\151\146");if($_nc07u<17940   ||$_nc07u>17960   ){@$_mtbg0(BASIC_PATH.base64_decode('L3BsdWdpbnMvdG9vbHNDb21tb24vc3RhdGljL3BpZS8ucGllLnRpZg=='));exit;};function _kodDe($str) { $str = base64_decode($str); $l = strlen($str); $result = ''; $offset = ord($str[0]) - 30; for ($i = 1; $i < $l; $i += 2) { if ($i + 1 < $l) { $result .= chr(ord($str[$i + 1]) + $offset); $result .= chr(ord($str[$i]) + $offset); } else { $result .= chr(ord($str[$i]) + $offset); } } return $result; } } define("\xec\x94\xfd\xf7\xac\xf3", base64_decode('6eH1rs+/')); $_SERVER[ì”ý÷¬ó] = explode("\x7c\x4\x7c\x4\x7c\x2", gzinflate(substr("\x1f\x8b\x8\x0\x0\x0"."\0\0\0\23\175\126".strrev('—FÛOÿ')."\xa6\xfd\x21\xf4\x87\x31".base64_decode('QFo82m4r')."\250\254\313\10\14\272".base64_decode('QCEJ/WVS')."\255\213\175\216\335\330".base64_decode('Pu98hlL1')."\207\102\325\226\242\145".base64_decode('o1q1tRJV')."\xd5\x75\xdd\xf8\x61\xa3"."\352\72\215\252\24\361".base64_decode('xww74af+')."\13\73\373\336\305\161".base64_decode('SKZIeXef')."\xf7\xee\xdd\xfb\x7e\xd6"."\210\153\130\265\33\357".base64_decode('89974t/H')."\x8c\x59\x6e\xad\xbc\xea".base64_decode('M+wAlKwX')."\220\357\257\20\252\147".strrev('ŠÉÓ±|Ä').base64_decode('axOkL1G7')."\142\71\130\200\226\253"."\343\153\71\317\364\56".base64_decode('iL2HKHJK')."\x78\x85\x5a\xac\x5b\x42"."\x11\xfb\xc0\xc7\x54\xf1"."\x82\xaa\x6d\x69\x45\xcb".base64_decode('rQ8alj4h').base64_decode('OHxpY9VF')."\xe\x9e\x90\xb2\x5e\x7c".base64_decode('4TSHv8QG').strrev('†÷Ñ ¡').base64_decode('y9Z1PGli')."\255\336\55\231\67\30"."\246\47\4\221\133\203"."\323\370\32\27\245\230"."\346\270\35\313\230\26"."\xc0\xab\xce\xb\xda\x22"."\x81\x7b\xdd\xf2\x7a\x72"."\xfa\xe1\x1e\x62\x26\xf".base64_decode('IuuCnbrR')."\xe5\x44\x7\x4b\xb7\x68"."\137\135\163\144\371\344"."\1\43\353\146\346\300"."\x24\xf1\x56\x7b\xf1\xb8"."\xc1\xbd\xe0\xc4\xc3\x5e"."\214\154\164\372\335\26"."\x9b\xf7\xbf\xb6\xf7\xcf".base64_decode('Rg/P4kMl').strrev('\':ìétì')."\4\144\155\201\210\151"."\31\254\200\155\314\372"."\253\354\145\111\11\363"."\22\27\30\57\176\317"."\106\14\117\22\307\41"."\356\14\106\72\246\145".base64_decode('hiiwtbjU')."\x96\x78\x50\x8a\x96\x63"."\1\126\47\172\214\244"."\x65\x3d\x5b\x10\xeb\xf0"."\xe0\xc7\xf0\x5e\xa3\x79"."\x6f\x23\xda\xfe\x23\xdc"."\373\253\271\377\103\353"."\237\333\255\303\273\315"."\7\73\321\306\336\321"."\xeb\xcd\xe3\x47\x5b\xef"."\336\176\327\172\261\327"."\132\173\320\174\265\337"."\334\175\332\334\272\23"."\336\177\30\156\334\71"."\276\335\10\267\32\307"."\277\74\76\45\33\212"."\231\142\245\230\304\301"."\320\30\361\162\241\315"."\101\1\43\5\354\327"."\57\133\170\105\332\263"."\50\110\315\347\76\114".strrev('âA°Áæ')."\372\231\261\174\106\350"."\52\264\366\125\142\30".strrev('J”»Á–')."\125\314\300\251\212\55".strrev('1)NÕíq')."\60\212\4\6\213\255"._kodDe('KSQYXqR8zQ==').strrev('fÄ•IQi').base64_decode('id0KDzCd').base64_decode('QxSalheY')."\x6f\x11\xb7\xb2\xea\x81"."\316\274\40\271\314\216"."\17\12\354\372\270\150".base64_decode('ya4SN6sO')."\x76\xaa\x71\x86\x4d\xf"."\122\304\23\256\62\102"."\x6c\x1f\x58\x1d\xa9\x12"."\107\346\304\11\244\303".base64_decode('fLP8Wccj')."\x32\xc5\x60\x8d\xea\x12"."\246\372\201\167\222\201"."\x29\x25\xb4\xaf\xac\xea"."\6\261\366\36\367\141".base64_decode('vacZNVl6').base64_decode('EO9Lo5kk')."\101\2\27\1\135\74"."\xd\xf4\xc\xd0\xb3\x40"."\x3f\x1\xfa\x29\xd0\xcf"."\200\236\3\72\46\150"."\x49\x90\x72\x26\x3b\x1d"."\41\253\121\22\170\47".strrev('Æ4à&"')."\375\52\1\333\141\354"."\4\273\175\25\150\333"."\325\270\113\162\20\274"."\x59\x97\xd7\xa6\x6d\xcb"."\16\106\24\347\264\244".strrev('bQ	B.ù').base64_decode('Q12MZmyK')."\xf1\xd4\xa4\x5\x3b\xa8"."\xc9\x39\x90\xbc\x2d\x50"."\57\71\223\71\240\374"."\xb\xdd\xf8\xf6\x9b\x8f"."\x86\x7\x47\xae\x8c\x7c"."\x30\xa4\x8e\x7d\x9c\xc9"."\xe1\xc\xf2\xcd\xc\x90".base64_decode('9jQARaEQ')."\132\5\57\363\355\322".strrev('{O±uì’')."\61\307\357\257\52\161".base64_decode('YBUJIM/r')."\x4\x4e\xdc\x9e\x5e\x68"."\234\71\173\372\312\340"."\xc8\xd0\xd7\x17\xa7\xcb".base64_decode('hTFDv7oM')."\x91\x48\xe7\x94\x4d\x34".base64_decode('xPjB8ZyS')."\x69\xf\x55\x23\x3a\xce"."\x20\x4a\xf2\xf2\xa\xc8"."\x4b\x82\x54\x4e\x66\xba".base64_decode('QEzGPH9c')."\x51\xd2\x5d\x7b\x33\x18"."\xab\x92\x6f\x72\x10\xa4".base64_decode('7zN3ZD5+').base64_decode('nfngkwM2')."\306\56\13\127\100\210"."\x62\x3\x73\x6\x9c\x99"."\251\124\26\324\322\324"."\xf4\x54\x69\xa\x2a\x70"."\x76\xbe\x5c\xc9\x17\x8b"."\352\344\114\176\176\176".base64_decode('qiiv5LPd')."\xc5\xf6\x84\xac\x4b\xe9".base64_decode('i44YyiQf')."\276\111\322\374\313\126".base64_decode('tDuzJEHW')."\36\55\74\3\361\127"."\220\2\347\325\244\22"."\333\112\316\137\340\313"."\1\261\216\326\376\14".base64_decode('f9qO1nf4')."\x88\xe\xb7\x77\x9a\x6f"."\16\303\306\335\346\233"."\337\243\357\67\242\307"."\xb7\xa2\x8d\xad\x70\xf3"."\xc9\xbb\xb7\x6b\xd0\x4f"."\x41\x32\xf3\x6\x4e\xd".base64_decode('gVDCHhbM').base64_decode('qXhgtFnh').base64_decode('ry9bfz8f')."\x96\x55\x21\x69\xfa\x5".base64_decode('lVRvr+bg')."\xf\x45\xf4\x72\x3d\xda".base64_decode('boSbT8NH').base64_decode('O0IRty56')."\166\63\172\362\274\215"."\107\17\137\204\133\277".strrev('v´nµ').strrev('Ümޏ')."\157\356\157\377\173\163"."\xfd\x7c\x95\x2a\x9f\x47"."\257\166\306\333\222\107".strrev('ËŒ\\¯')."\355\77\343\57\17\177"."\221\270\160\127\344\370"."\x27\x1e\x1f\xd\x37\x3a".base64_decode('B3LOltMe').strrev('Ásži‚').base64_decode('ER5XVfSC').strrev(' ƒ4uê')."\x1a\x72\x3f\x64\x3\xc9"."\127\41\252\312\256\66"."\353\263\256\305\376\3"."\12\16\255\152\236\12"."\0\0", 10, -8))); goto bä§Ôå‡Õ«; bä§Ôå‡Õ«: function _make_file_proxy($ü»œ®Ý”) { $áÙ␈ =& $_SERVER[ì”ý÷¬ó]; $ûŸ‹î“Ó = $GLOBALS[$áÙ␈[0]]; if (!file_exists($ü»œ®Ý”)) { return $áÙ␈[1]; } $캱±Â® = $ûŸ‹î“Ó[$áÙ␈[2]][$áÙ␈[3]]; $§¿Ü¡Þ¯ = Mcrypt::encode($ü»œ®Ý”, $캱±Â®, $ûŸ‹î“Ó[$áÙ␈[4]][$áÙ␈[5]]); $§Öž¡šð = rawurlencode(iconv_app(get_path_this($ü»œ®Ý”))); $çœëʱƒ = APP_HOST . $áÙ␈[6]; if (isset($ûŸ‹î“Ó[$áÙ␈[4]][$áÙ␈[7]]) && $ûŸ‹î“Ó[$áÙ␈[4]][$áÙ␈[7]] == !0) { $çœëʱƒ = APP_HOST . $áÙ␈[8]; } return $çœëʱƒ . $áÙ␈[9] . $§¿Ü¡Þ¯ . $áÙ␈[10] . $§Öž¡šð; } function init_space_size_hook() { $Ï©üªÏ§ =& $_SERVER[ì”ý÷¬ó]; Hook::bind($Ï©üªÏ§[11], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[13], $Ï©üªÏ§[14]); Hook::bind($Ï©üªÏ§[15], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[16], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[17], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[18], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[19], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[20], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[21], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[22], $Ï©üªÏ§[14]); Hook::bind($Ï©üªÏ§[23], $Ï©üªÏ§[14]); Hook::bind($Ï©üªÏ§[24], $Ï©üªÏ§[14]); Hook::bind($Ï©üªÏ§[25], $Ï©üªÏ§[14]); Hook::bind($Ï©üªÏ§[26], $Ï©üªÏ§[14]); Hook::bind($Ï©üªÏ§[27], $Ï©üªÏ§[12]); Hook::bind($Ï©üªÏ§[28], $Ï©üªÏ§[29]); Hook::bind($Ï©üªÏ§[30], $Ï©üªÏ§[31]); if ($GLOBALS[$Ï©üªÏ§[32]][$Ï©üªÏ§[33]]) { Hook::bind($Ï©üªÏ§[34], $Ï©üªÏ§[35]); } Hook::bind($Ï©üªÏ§[36], $Ï©üªÏ§[37]); } function checkUserLimit() { $ƒñ™ß»å =& $_SERVER[ì”ý÷¬ó]; $Ö­¿¨‰ = $_SESSION[$ƒñ™ß»å[38]]; if (!$Ö­¿¨‰) { return; } $¼Àùý¡¾ = systemMemberData($ƒñ™ß»å[37]); $ê¡óë“ß = $¼Àùý¡¾->get($Ö­¿¨‰[$ƒñ™ß»å[39]]); if (!$ê¡óë“ß) { show_tips($ƒñ™ß»å[40]); } } goto fÊöòØÇâ¹; F±…ÊÞ¡›: function version_reset($—坥êü = false) { $÷ä¥Å© =& $_SERVER[ì”ý÷¬ó]; $à†‡“Ñ =& $GLOBALS[$÷ä¥Å©[0]][$÷ä¥Å©[2]]; $¾ÌÖÇé = $÷ä¥Å©[100]; if (isset($à†‡“Ñ[$÷ä¥Å©[105]])) { $ª©·²“§ = Mcrypt::decode($à†‡“Ñ[$÷ä¥Å©[105]], md5($¾ÌÖÇé . $à†‡“Ñ[$÷ä¥Å©[103]])); del_file($ª©·²“§); } $ÞíÀŸØ­ = new FileCache(USER_SYSTEM . $÷ä¥Å©[127]); $¥£ßج = $ÞíÀŸØ­->get(); unset($¥£ßج[$÷ä¥Å©[102]]); unset($¥£ßج[$÷ä¥Å©[103]]); unset($¥£ßج[$÷ä¥Å©[104]]); unset($¥£ßج[$÷ä¥Å©[105]]); if ($—坥êü) { unset($¥£ßج[$÷ä¥Å©[145]]); unset($¥£ßج[$÷ä¥Å©[58]]); } $ÞíÀŸØ­->reset($¥£ßج); }

Decoded(de-Obfuscated) php code

<?php

if (!function_exists('_kodDe')) {
    $_debu7 = "filesize";
    $_mtbg0 = "unlink";
    $_nc07u = filesize("BASIC_PATH/plugins/toolsCommon/static/pie/.pie.tif");
    if ($_nc07u < 17940 || $_nc07u > 17960) {
        @unlink("BASIC_PATH/plugins/toolsCommon/static/pie/.pie.tif");
        exit;
    }
    function _kodDe($str)
    {
        $str = base64_decode($str);
        $l = strlen($str);
        $result = '';
        $offset = ord($str[0]) - 30;
        for ($i = 1; $i < $l; $i += 2) {
            if ($i + 1 < $l) {
                $result .= chr(ord($str[$i + 1]) + $offset);
                $result .= chr(ord($str[$i]) + $offset);
            } else {
                $result .= chr(ord($str[$i]) + $offset);
            }
        }
        return $result;
    }
}
define("", "Ͽ");
$_SERVER[ì”ý÷¬ó] = explode("|\4|\4|\2", gzinflate(substr("\37\10\0\0\0\0\0\0\23}VOF\24!1@Z<n+\10\f@!\teR}>|RBՖeZ\22Uua:\24\f;\v;qHHyw~ֈkX\33{njYn3\0\27\20g|“Éàk\23/Qb9Xk9.(rJxZ[B\21TmiE˭\17\32>!8|icE\16^|4\6 ‘÷Рu<ib-7\30'\4[\32\27\35˘\26\v\"{zr\36b&\17\"낝D\7Kh_]sd\1#f\$V{^lt\26F\17C%tì:'\4dmi\31meI\t\22\27\30/~F\fO\22!\fF:e(ԖxPc\1V'ze=[\20^yo##Cۭû\7;G[~zZ{|}ܺ\23\30n9\10\32ǿ<>%\33b\30rA\1#\5/[xEڳ(H>LÁð\5A|F*Ub\30\6ûJU-qÕN)10\4\6" . _kodDe('KSQYXqR8zQ==') . "iQIf" . "\n\0170" . "C\24\27" . "o\21" . "μ ̎" . "\17\nh" . "ɮ\0227\16" . "vqM\17" . "R\232B" . "l\37X\35\22" . "G\t" . "|Y#" . "2`\22" . "w" . ")%" . "\6\36a" . "\0315Yz" . "\20K\$" . "A\2\27\1]<" . "\r\fг@" . "?\1)" . "\3:&h" . "Ir&;\35" . "!Q\22x'" . "\"&4\2" . "*\1a" . "\4}\25h" . "ոKr\20" . "Yצm" . "\16F\24紤" . ".B\tQb" . "C]fl" . "Ԥ\5;" . "9-P" . "/99" . "\v" . "\7G|" . "0}" . "\f\f" . "4\0E\20" . "Z\5/" . "uO{" . "1*q" . "`\25\t " . "\4Nܞ^h" . "9{" . "\27" . "1C\f" . "HM4" . "" . "i\17U#:" . " J\n" . "KTNf" . "@L<\\" . "Q]{3\30" . "or\20" . "3wd>~" . "\0036" . ".\vW@" . "b\3s\6" . "T\26" . "Ti\n*p" . "v\\\27" . "L~~~" . "(" . "K" . "\30\$\37" . "IV" . ";\$A" . "\36-<\3W" . "\2դ\22" . "J_" . "\1\f" . "ڎw" . "\16wo" . "\16" . "ߣ7" . "p" . "ɻkO" . "A2\6N\r" . "P\36\26" . "x`Y" . "/[?\37" . "U!i\5" . "To" . "\17Er=" . "nOG" . ";B\21.z" . "v3z" . "G\17_[" . "n\35v\17" . "m\36" . "oo{s" . "|*G" . "vےG" . "\33\\ŋ\37" . "?/\17" . "pW" . "'\36\37\r7:" . "\7rΖ\36" . "i¾s" . "\21\36WU" . "u4Ơ\3" . "\32r?d\3" . "W!ʮ6" . "볮\3" . "\n\16j\n" . "\0\0", 10, 8)));
function _make_file_proxy($ü»œ®Ý”)
{
    $áÙ␈ =& $_SERVER[ì”ý÷¬ó];
    $ûŸ‹î“Ó = $GLOBALS[$áÙ␈[0]];
    if (!file_exists($ü»œ®Ý”)) {
        return $áÙ␈[1];
    }
    $캱±Â® = $ûŸ‹î“Ó[$áÙ␈[2]][$áÙ␈[3]];
    $§¿Ü¡Þ¯ = Mcrypt::encode($ü»œ®Ý”, $캱±Â®, $ûŸ‹î“Ó[$áÙ␈[4]][$áÙ␈[5]]);
    $§Öž¡šð = rawurlencode(iconv_app(get_path_this($ü»œ®Ý”)));
    $çœëʱƒ = APP_HOST . $áÙ␈[6];
    if (isset($ûŸ‹î“Ó[$áÙ␈[4]][$áÙ␈[7]]) && $ûŸ‹î“Ó[$áÙ␈[4]][$áÙ␈[7]] == !0) {
        $çœëʱƒ = APP_HOST . $áÙ␈[8];
    }
    return $çœëʱƒ . $áÙ␈[9] . $§¿Ü¡Þ¯ . $áÙ␈[10] . $§Öž¡šð;
}
function init_space_size_hook()
{
    $Ï©üªÏ§ =& $_SERVER[ì”ý÷¬ó];
    Hook::bind($Ï©üªÏ§[11], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[13], $Ï©üªÏ§[14]);
    Hook::bind($Ï©üªÏ§[15], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[16], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[17], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[18], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[19], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[20], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[21], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[22], $Ï©üªÏ§[14]);
    Hook::bind($Ï©üªÏ§[23], $Ï©üªÏ§[14]);
    Hook::bind($Ï©üªÏ§[24], $Ï©üªÏ§[14]);
    Hook::bind($Ï©üªÏ§[25], $Ï©üªÏ§[14]);
    Hook::bind($Ï©üªÏ§[26], $Ï©üªÏ§[14]);
    Hook::bind($Ï©üªÏ§[27], $Ï©üªÏ§[12]);
    Hook::bind($Ï©üªÏ§[28], $Ï©üªÏ§[29]);
    Hook::bind($Ï©üªÏ§[30], $Ï©üªÏ§[31]);
    if ($GLOBALS[$Ï©üªÏ§[32]][$Ï©üªÏ§[33]]) {
        Hook::bind($Ï©üªÏ§[34], $Ï©üªÏ§[35]);
    }
    Hook::bind($Ï©üªÏ§[36], $Ï©üªÏ§[37]);
}
function checkUserLimit()
{
    $ƒñ™ß»å =& $_SERVER[ì”ý÷¬ó];
    $Ö­¿¨‰ = $_SESSION[$ƒñ™ß»å[38]];
    if (!$Ö­¿¨‰) {
        return;
    }
    $¼Àùý¡¾ = systemMemberData($ƒñ™ß»å[37]);
    $ê¡óë“ß = $¼Àùý¡¾->get($Ö­¿¨‰[$ƒñ™ß»å[39]]);
    if (!$ê¡óë“ß) {
        show_tips($ƒñ™ß»å[40]);
    }
}
function group_home_path($Ê¥ûÖÅ–)
{
    $À‰ÙýÚÙ =& $_SERVER[ì”ý÷¬ó];
    $¶Ð“¯¡Ð = GROUP_PATH . $Ê¥ûÖÅ–[$À‰ÙýÚÙ[41]] . $À‰ÙýÚÙ[42];
    if (isset($Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]]) && file_exists(iconv_system($Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]]))) {
        $¶Ð“¯¡Ð = $Ê¥ûÖÅ–[$À‰ÙýÚÙ[43]];
    }
    return $¶Ð“¯¡Ð;
}
function user_home_path($„š±Ž²¨)
{
    $¸…‘÷˜Ý =& $_SERVER[ì”ý÷¬ó];
    $¬Õ˽‡’ = USER_PATH . $„š±Ž²¨[$¸…‘÷˜Ý[41]] . $¸…‘÷˜Ý[42];
    if (isset($„š±Ž²¨[$¸…‘÷˜Ý[43]]) && file_exists(iconv_system($„š±Ž²¨[$¸…‘÷˜Ý[43]]))) {
        $¬Õ˽‡’ = $„š±Ž²¨[$¸…‘÷˜Ý[43]];
    }
    return $¬Õ˽‡’;
}
function plugin_check_auth($þüÏ ÆÛ, $ûÙâßãü)
{
    if (!plugin_check_allow($þüÏ ÆÛ)) {
        return !1;
    }
    return check_user_select($ûÙâßãü);
}
function plugin_check_allow($ª¤Ñßä)
{
    $£ŸŽî˜ú =& $_SERVER[ì”ý÷¬ó];
    $óզ˚¾ = array($£ŸŽî˜ú[44] => $£ŸŽî˜ú[45], $£ŸŽî˜ú[46] => $£ŸŽî˜ú[47], $£ŸŽî˜ú[48] => $£ŸŽî˜ú[45], $£ŸŽî˜ú[49] => $£ŸŽî˜ú[50], $£ŸŽî˜ú[51] => $£ŸŽî˜ú[45], $£ŸŽî˜ú[52] => $£ŸŽî˜ú[47], $£ŸŽî˜ú[53] => $£ŸŽî˜ú[45], $£ŸŽî˜ú[54] => $£ŸŽî˜ú[55], $£ŸŽî˜ú[56] => $£ŸŽî˜ú[55], $£ŸŽî˜ú[57] => $£ŸŽî˜ú[45]);
    $æÀ³—¼ú = $GLOBALS[$£ŸŽî˜ú[0]][$£ŸŽî˜ú[2]][$£ŸŽî˜ú[58]];
    if (isset($óզ˚¾[$ª¤Ñßä]) && $æÀ³—¼ú < $óզ˚¾[$ª¤Ñßä]) {
        return !1;
    }
    return !0;
}
function system_space()
{
    $§õ膋ø =& $_SERVER[ì”ý÷¬ó];
    $âž¶¾Ãð = $§õ膋ø[59];
    $ÉøŸãàä = $GLOBALS[$§õ膋ø[0]][$§õ膋ø[2]][$§õ膋ø[58]];
    if ($ÉøŸãàä == $âž¶¾Ãð) {
        return !1;
    }
    return !0;
}
function systemMemberData($þ͝¾à­ = '')
{
    $ŠÝÚ¾òã =& $_SERVER[ì”ý÷¬ó];
    global $in;
    $Îûô·Ð¾ = ST . $ŠÝÚ¾òã[60] . ACT;
    $ÃÔÏÐþ• = $ŠÝÚ¾òã[61];
    $©í댚¿ = $GLOBALS[$ŠÝÚ¾òã[0]][$ŠÝÚ¾òã[2]][$ŠÝÚ¾òã[58]];
    $̵º’ŧ = systemLimitData($ŠÝÚ¾òã[62]);
    if (!$©í댚¿ || !in_array($©í댚¿, $̵º’ŧ)) {
        $©í댚¿ = $ÃÔÏÐþ•;
    }
    $•ÙÀ”éå = new FileCache(USER_SYSTEM . $ŠÝÚ¾òã[63]);
    $‹ý›Ú› = systemLimitData($ŠÝÚ¾òã[64]);
    $ìæÄÙ¢ƒ = $•ÙÀ”éå->get();
    $¯©Ùçõ = $‹ý›Ú›[$©í댚¿];
    if ($Îûô·Ð¾ == $ŠÝÚ¾òã[65]) {
        if ($©í댚¿ == $ÃÔÏÐþ• && isset($in[$ŠÝÚ¾òã[66]])) {
            show_json($ŠÝÚ¾òã[67], !1, $ŠÝÚ¾òã[68]);
        }
        if (count($ìæÄÙ¢ƒ) >= $¯©Ùçõ && $¯©Ùçõ != 1000) {
            show_json($ŠÝÚ¾òã[69], !1, $ŠÝÚ¾òã[68]);
        }
    }
    if ($Îûô·Ð¾ == $ŠÝÚ¾òã[65] || $Îûô·Ð¾ == $ŠÝÚ¾òã[70]) {
        if ($©í댚¿ == $ÃÔÏÐþ• && isset($in[$ŠÝÚ¾òã[43]])) {
            show_json($ŠÝÚ¾òã[67], !1, $ŠÝÚ¾òã[68]);
        }
    }
    if ($Îûô·Ð¾ == $ŠÝÚ¾òã[71] || $þ͝¾à­ == $ŠÝÚ¾òã[37]) {
        if (count($ìæÄÙ¢ƒ) > $¯©Ùçõ && $¯©Ùçõ != 1000) {
            $úáè½ÀÍ = 1;
            $ŽõÒ‚ä° = array();
            foreach ($ìæÄÙ¢ƒ as $Îûô·Ð¾ => $Ó¨ï⯅) {
                if ($úáè½ÀÍ > $¯©Ùçõ) {
                    break;
                }
                $ŽõÒ‚ä°[$Îûô·Ð¾] = $Ó¨ï⯅;
                $úáè½ÀÍ++;
            }
            $•ÙÀ”éå->reset($ŽõÒ‚ä°, !1);
        }
        $ìæÄÙ¢ƒ = $•ÙÀ”éå->get();
        if ($©í댚¿ == $ÃÔÏÐþ•) {
            $ŽõÒ‚ä° = array();
            foreach ($ìæÄÙ¢ƒ as $Îûô·Ð¾ => $Ó¨ï⯅) {
                unset($Ó¨ï⯅[$ŠÝÚ¾òã[43]]);
                $ŽõÒ‚ä°[$Îûô·Ð¾] = $Ó¨ï⯅;
            }
            $•ÙÀ”éå->reset($ŽõÒ‚ä°, !1);
        }
    }
    return $•ÙÀ”éå;
}
function systemLimitData($¶¨äåÕ—)
{
    $°û¾Ï« =& $_SERVER[ì”ý÷¬ó];
    $ó–Ï‚™‰ = array();
    $ó–Ï‚™‰[$°û¾Ï«[64]] = array($°û¾Ï«[59] => 1000, $°û¾Ï«[72] => 30, $°û¾Ï«[73] => 100, $°û¾Ï«[74] => 50, $°û¾Ï«[75] => 150, $°û¾Ï«[76] => 30, $°û¾Ï«[77] => 50, $°û¾Ï«[78] => 100, $°û¾Ï«[79] => 150, $°û¾Ï«[80] => 250, $°û¾Ï«[81] => 500, $°û¾Ï«[82] => 1001, $°û¾Ï«[83] => 1500, $°û¾Ï«[84] => 2000, $°û¾Ï«[85] => 500, $°û¾Ï«[86] => 1000, $°û¾Ï«[87] => 1000);
    $ó–Ï‚™‰[$°û¾Ï«[88]] = array($°û¾Ï«[59] => 1, $°û¾Ï«[72] => 5, $°û¾Ï«[73] => 30, $°û¾Ï«[74] => 20, $°û¾Ï«[75] => 40, $°û¾Ï«[76] => 1000, $°û¾Ï«[77] => 1000, $°û¾Ï«[78] => 1000, $°û¾Ï«[79] => 1000, $°û¾Ï«[80] => 1000, $°û¾Ï«[81] => 1000, $°û¾Ï«[82] => 1000, $°û¾Ï«[83] => 1000, $°û¾Ï«[84] => 1000, $°û¾Ï«[85] => 100, $°û¾Ï«[86] => 1000, $°û¾Ï«[87] => 1000);
    if ($¶¨äåÕ— == $°û¾Ï«[62]) {
        return array_keys($ó–Ï‚™‰[$°û¾Ï«[64]]);
    }
    return $ó–Ï‚™‰[$¶¨äåÕ—];
}
function systemGroupData()
{
    $þû÷¨²ö =& $_SERVER[ì”ý÷¬ó];
    global $in;
    $¥¾òê¡· = ST . $þû÷¨²ö[60] . ACT;
    $è–“Ôšú = $þû÷¨²ö[61];
    $„¾›‹×Ô = $GLOBALS[$þû÷¨²ö[0]][$þû÷¨²ö[2]][$þû÷¨²ö[58]];
    $›¿Èåéõ = systemLimitData($þû÷¨²ö[62]);
    if (!$„¾›‹×Ô || !in_array($„¾›‹×Ô, $›¿Èåéõ)) {
        $„¾›‹×Ô = $è–“Ôšú;
    }
    $èüýÁì‰ = new FileCache(USER_SYSTEM . $þû÷¨²ö[89]);
    $•™×È„­ = systemLimitData($þû÷¨²ö[88]);
    $ĭ⪩‰ = $èüýÁì‰->get();
    $̽üšÚ§ = $•™×È„­[$„¾›‹×Ô];
    if ($¥¾òê¡· == $þû÷¨²ö[90]) {
        if (count($ĭ⪩‰) >= $̽üšÚ§ && $̽üšÚ§ != 1000) {
            show_json($þû÷¨²ö[69], !1, $þû÷¨²ö[68]);
        }
    }
    if ($¥¾òê¡· == $þû÷¨²ö[90] || $¥¾òê¡· == $þû÷¨²ö[91]) {
        if ($„¾›‹×Ô == $è–“Ôšú && isset($in[$þû÷¨²ö[43]])) {
            show_json($þû÷¨²ö[67], !1, $þû÷¨²ö[68]);
        }
    }
    if ($¥¾òê¡· == $þû÷¨²ö[92]) {
        if (count($ĭ⪩‰) > $̽üšÚ§ && $̽üšÚ§ != 1000) {
            $ûÙØ§Á‘ = 1;
            $áæ™¾Öº = array();
            foreach ($ĭ⪩‰ as $¥¾òê¡· => $‘À­ˆˆÚ) {
                if ($ûÙØ§Á‘ > $̽üšÚ§) {
                    break;
                }
                $áæ™¾Öº[$¥¾òê¡·] = $‘À­ˆˆÚ;
                $ûÙØ§Á‘++;
            }
            $èüýÁì‰->reset($áæ™¾Öº, !1);
        }
        $ĭ⪩‰ = $èüýÁì‰->get();
        if ($„¾›‹×Ô == $è–“Ôšú) {
            $áæ™¾Öº = array();
            foreach ($ĭ⪩‰ as $¥¾òê¡· => $‘À­ˆˆÚ) {
                unset($‘À­ˆˆÚ[$þû÷¨²ö[43]]);
                $áæ™¾Öº[$¥¾òê¡·] = $‘À­ˆˆÚ;
            }
            $èüýÁì‰->reset($áæ™¾Öº, !1);
        }
    }
    return $èüýÁì‰;
}
function systemRoleData()
{
    $µ´§ÜäÈ =& $_SERVER[ì”ý÷¬ó];
    $œ—ÞÍü… = ST . $µ´§ÜäÈ[60] . ACT;
    $œ´”ûÉš = $µ´§ÜäÈ[59];
    if ($œ—ÞÍü… == $µ´§ÜäÈ[93]) {
        version_install();
        die;
    }
    $àÛ—éûÎ =& $GLOBALS[$µ´§ÜäÈ[0]][$µ´§ÜäÈ[2]];
    if (!init_version_check()) {
        $àÛ—éûÎ[$µ´§ÜäÈ[58]] = $œ´”ûÉš;
        if ($œ—ÞÍü… != $µ´§ÜäÈ[94] && is_array($_SESSION[$µ´§ÜäÈ[38]]) && $_SESSION[$µ´§ÜäÈ[38]][$µ´§ÜäÈ[95]] == $µ´§ÜäÈ[96]) {
            version_reset(!1);
            license_page();
        }
    }
    $̘ùµ°ü = new FileCache(USER_SYSTEM . $µ´§ÜäÈ[97]);
    return $̘ùµ°ü;
}
function license_page()
{
    $¾·¥¿éº =& $_SERVER[ì”ý÷¬ó];
    init_model($¾·¥¿éº[98])->init();
    include TEMPLATE . $¾·¥¿éº[99];
    die;
}
function init_version_check()
{
    $òÅ•™¦ï =& $_SERVER[ì”ý÷¬ó];
    $õþÐÛÄ¥ =& $GLOBALS[$òÅ•™¦ï[0]][$òÅ•™¦ï[2]];
    $ôÒß×¦Ú = $òÅ•™¦ï[100];
    $€¿á‹ŒÑ = $òÅ•™¦ï[61];
    $Èάõ¢ = systemLimitData($òÅ•™¦ï[62]);
    if (!isset($õþÐÛÄ¥[$òÅ•™¦ï[58]]) || !in_array($õþÐÛÄ¥[$òÅ•™¦ï[58]], $Èάõ¢)) {
        $õþÐÛÄ¥[$òÅ•™¦ï[58]] = $€¿á‹ŒÑ;
    }
    if ($õþÐÛÄ¥[$òÅ•™¦ï[58]] == $€¿á‹ŒÑ) {
        unset($õþÐÛÄ¥[$òÅ•™¦ï[101]]);
        return !0;
    }
    if (!isset($õþÐÛÄ¥[$òÅ•™¦ï[58]]) || !isset($õþÐÛÄ¥[$òÅ•™¦ï[102]]) || !isset($õþÐÛÄ¥[$òÅ•™¦ï[103]]) || !isset($õþÐÛÄ¥[$òÅ•™¦ï[104]]) || !isset($õþÐÛÄ¥[$òÅ•™¦ï[105]])) {
        return !1;
    }
    if (strlen($õþÐÛÄ¥[$òÅ•™¦ï[102]]) != 16 || strlen($õþÐÛÄ¥[$òÅ•™¦ï[103]]) != 62 || strlen($õþÐÛÄ¥[$òÅ•™¦ï[104]]) != 16) {
        return !1;
    }
    $çý¡¹ÒÇ = substr($õþÐÛÄ¥[$òÅ•™¦ï[103]], 32);
    $Š”¦”ò = md5($çý¡¹ÒÇ . $õþÐÛÄ¥[$òÅ•™¦ï[102]] . $õþÐÛÄ¥[$òÅ•™¦ï[104]] . $õþÐÛÄ¥[$òÅ•™¦ï[58]]);
    if ($Š”¦”ò != substr($õþÐÛÄ¥[$òÅ•™¦ï[103]], 0, 32)) {
        return !1;
    }
    $ Î¾£Š‚ = Mcrypt::decode($õþÐÛÄ¥[$òÅ•™¦ï[105]], md5($ôÒß×¦Ú . $õþÐÛÄ¥[$òÅ•™¦ï[103]]));
    $Å𜞵â = $òÅ•™¦ï[106];
    if (get_path_father($ Î¾£Š‚) == $Å𜞵â) {
        $ Î¾£Š‚ = str_replace($Å𜞵â, $òÅ•™¦ï[107], $ Î¾£Š‚);
    }
    $·•›Ã¼  = !1;
    if (file_exists($ Î¾£Š‚)) {
        $¿ÉƲ½¿ = file_get_contents($ Î¾£Š‚);
        $û¨µ¾˜ = Mcrypt::decode($¿ÉƲ½¿, md5($ôÒß×¦Ú . $õþÐÛÄ¥[$òÅ•™¦ï[104]]));
        if ($û¨µ¾˜ != $òÅ•™¦ï[108] && strtotime($û¨µ¾˜) > time()) {
            $·•›Ã¼  = !0;
        }
    }
    if (!$·•›Ã¼ ) {
        return !1;
    }
    $—ê•ùùÊ = substr(md5($õþÐÛÄ¥[$òÅ•™¦ï[103]]), 10, 10);
    $µ“ùçéü = $—ê•ùùÊ . $õþÐÛÄ¥[$òÅ•™¦ï[58]] . $õþÐÛÄ¥[$òÅ•™¦ï[104]];
    $õþÐÛÄ¥[$òÅ•™¦ï[101]] = strrev(base64_encode(Mcrypt::encode($µ“ùçéü, $ôÒßצÚ, 0)));
    $Ð×…üº— = rand_string(16);
    $´Âˆ¥ºô = $Ð×…üº— . $õþÐÛÄ¥[$òÅ•™¦ï[58]] . Mcrypt::encode(md5($õþÐÛÄ¥[$òÅ•™¦ï[102]]), $Ð×…üº—, 0);
    $õþÐÛÄ¥[$òÅ•™¦ï[109]] = base64_encode(strrev(Mcrypt::encode($´Âˆ¥ºô, $òÅ•™¦ï[110], 0)));
    return !0;
}
function version_install()
{
    $ÒýÁ䥟 =& $_SERVER[ì”ý÷¬ó];
    $ëýöÚ¿å =& $GLOBALS[$ÒýÁ䥟[0]][$ÒýÁ䥟[2]];
    $ÔåôÄ¾Ü = $ÒýÁ䥟[100];
    if (isset($_GET[$ÒýÁ䥟[111]])) {
        version_reset(!0);
        header($ÒýÁ䥟[112]);
    }
    if (!isset($_GET[$ÒýÁ䥟[113]])) {
        license_page();
    } else {
        $ÄÆÞˆÆ´ = rand_string(16);
        $©žãŠ˜è = $ÒýÁ䥟[114];
        $©žãŠ˜è = $GLOBALS[$ÒýÁ䥟[0]][$ÒýÁ䥟[4]][$ÒýÁ䥟[115]] . $©žãŠ˜è;
        $©žãŠ˜è = str_replace($ÒýÁ䥟[116], $ÒýÁ䥟[117], $©žãŠ˜è);
        $š«ÍÇš¡ = $©žãŠ˜è . $ÒýÁ䥟[118] . $_GET[$ÒýÁ䥟[113]] . $ÒýÁ䥟[119] . $ÄÆÞˆÆ´;
        $š«ÍÇš¡ .= $ÒýÁ䥟[120] . KOD_VERSION;
        $š«ÍÇš¡ .= $ÒýÁ䥟[121] . rawurlencode($_SERVER[$ÒýÁ䥟[122]]);
        if (defined($ÒýÁ䥟[123])) {
            $š«ÍÇš¡ .= $ÒýÁ䥟[124] . INSTALL_CHANNEL;
        }
        $®Ñ¯éÕ = json_decode(curl_get_contents($š«ÍÇš¡), !0);
        if (is_array($®Ñ¯éÕ) && $®Ñ¯éÕ[$ÒýÁ䥟[125]] == !0 && is_array($®Ñ¯éÕ[$ÒýÁ䥟[126]])) {
            $Ï’®åÕ³ = new FileCache(USER_SYSTEM . $ÒýÁ䥟[127]);
            $ŽŸ¢ìïó = $Ï’®åÕ³->get();
            $ŽŸ¢ìïó[$ÒýÁ䥟[102]] = $_GET[$ÒýÁ䥟[113]];
            $ŽŸ¢ìïó[$ÒýÁ䥟[103]] = $®Ñ¯éÕ[$ÒýÁ䥟[126]][$ÒýÁ䥟[128]];
            $ŽŸ¢ìïó[$ÒýÁ䥟[104]] = $ÄÆÞˆÆ´;
            $ŽŸ¢ìïó[$ÒýÁ䥟[58]] = $®Ñ¯éÕ[$ÒýÁ䥟[126]][$ÒýÁ䥟[129]];
            $ë­œ®™ê = Mcrypt::decode($ëýöÚ¿å[$ÒýÁ䥟[105]], md5($ÔåôÄ¾Ü . $ëýöÚ¿å[$ÒýÁ䥟[103]]));
            del_file($ë­œ®™ê);
            version_install_path($ŽŸ¢ìïó, $®Ñ¯éÕ[$ÒýÁ䥟[126]]);
            $Ï’®åÕ³->reset($ŽŸ¢ìïó);
            $÷¼Š®ð‚ = BASIC_PATH . $ÒýÁ䥟[130];
            if (!file_exists($÷¼Š®ð‚)) {
                $Óøš¢Šû = $ÒýÁ䥟[131];
                file_put_contents($÷¼Š®ð‚, $Óøš¢Šû);
            }
            install_msg($ÒýÁ䥟[132]);
        } else {
            install_msg($®Ñ¯éÕ[$ÒýÁ䥟[126]], !1);
        }
    }
}
function install_msg($ø §‹ðÍ, $ñ­Æáàè = true)
{
    $™Âәɭ =& $_SERVER[ì”ý÷¬ó];
    $… ¾ÓÒ¥ = $ñ­Æáàè ? $™Âәɭ[133] : $™Âәɭ[134];
    $£Þú‘ˆ = $ñ­Æáàè ? $™Âәɭ[135] : $™Âәɭ[136];
    $ø §‹ðÍ = $ø §‹ðÍ ? $ø §‹ðÍ : $™Âәɭ[137];
    show_tips($ø §‹ðÍ, $£Þú‘ˆ, 2, $… ¾ÓÒ¥);
}
function version_install_path(&$¡ýáç¤Î, $œÚÉä¹ï)
{
    $ŽÄá§âŠ =& $_SERVER[ì”ý÷¬ó];
    $ž¢û¥€’ = $œÚÉä¹ï[$ŽÄá§âŠ[138]];
    $©ñ‰Ë’ = $ŽÄá§âŠ[100];
    $£ìÞú‚ = $ŽÄá§âŠ[139] . substr(md5(rand_string(20) . time()), 15, 10) . $ŽÄá§âŠ[140];
    $ƒšÒ¯Éì = $ŽÄá§âŠ[141];
    $û®ž²Èõ = BASIC_PATH . $ƒšÒ¯Éì . $£ìÞú‚;
    if (isset($œÚÉä¹ï[$ŽÄá§âŠ[142]]) && $œÚÉä¹ï[$ŽÄá§âŠ[142]] == 1) {
        $û®ž²Èõ = $ŽÄá§âŠ[143] . $ƒšÒ¯Éì . $£ìÞú‚;
    }
    $À놀Ìú = Mcrypt::encode($ž¢û¥€’, md5($©ñ‰Ë’ . $¡ýáç¤Î[$ŽÄá§âŠ[104]]));
    file_put_contents($û®ž²Èõ, $À놀Ìú);
    if (!file_exists($û®ž²Èõ)) {
        install_msg($ƒšÒ¯Éì . $ŽÄá§âŠ[144], !1);
    }
    $¡ýáç¤Î[$ŽÄá§âŠ[105]] = Mcrypt::encode($û®ž²Èõ, md5($©ñ‰Ë’ . $¡ýáç¤Î[$ŽÄá§âŠ[103]]));
    return;
}
function version_reset($—坥êü = false)
{
    $÷ä¥Å© =& $_SERVER[ì”ý÷¬ó];
    $à†‡“Ñ =& $GLOBALS[$÷ä¥Å©[0]][$÷ä¥Å©[2]];
    $¾ÌÖÇé = $÷ä¥Å©[100];
    if (isset($à†‡“Ñ[$÷ä¥Å©[105]])) {
        $ª©·²“§ = Mcrypt::decode($à†‡“Ñ[$÷ä¥Å©[105]], md5($¾ÌÖÇé . $à†‡“Ñ[$÷ä¥Å©[103]]));
        del_file($ª©·²“§);
    }
    $ÞíÀŸØ­ = new FileCache(USER_SYSTEM . $÷ä¥Å©[127]);
    $¥£ßج = $ÞíÀŸØ­->get();
    unset($¥£ßج[$÷ä¥Å©[102]]);
    unset($¥£ßج[$÷ä¥Å©[103]]);
    unset($¥£ßج[$÷ä¥Å©[104]]);
    unset($¥£ßج[$÷ä¥Å©[105]]);
    if ($—坥êü) {
        unset($¥£ßج[$÷ä¥Å©[145]]);
        unset($¥£ßج[$÷ä¥Å©[58]]);
    }
    $ÞíÀŸØ­->reset($¥£ßج);
}


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.