Japanese 
English
PHP deobfuscation, decryption, reconstruction toolDe-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.
*Please note that not all obfuscation codes can be decoded.<?php
function ds_wakeup() { global $base; $exeos = get_rfriends_exeos(); switch ($exeos) { case "WIN": $binpath = $base . "bin\\"; shell_exec($binpath . "rfdontsleep.exe"); break; case "OSX": break; case "LNX": break; default: echo "--- rfriends_exeos is not defined.\n"; exit(1); break; } return; } function ds_kill($pid) { $exeos = get_rfriends_exeos(); switch ($exeos) { case "WIN": $ex = "taskkill /f /pid $pid"; break; case "OSX": case "LNX": $ex = "kill -s 9 $pid"; break; default: echo "--- rfriends_exeos is not defined.\n"; exit(1); break; } return $ex; } function ds_ffmpeg_pid() { global $bindir; global $tmpdir; global $pid_dlm_win; global $pid_start_win; global $pid_cline_win; global $pid_pid_win; global $pid_cdate_win; global $ps_pid_start_win; global $ps_pid_cline_win; global $ps_pid_pid_win; global $ps_pid_cdate_win; $exeos = get_rfriends_exeos(); switch ($exeos) { case "WIN": $ffmpeg_path = $bindir."ffmpeg"; $pid_name = 'ffmpeg'; $dlm = $pid_dlm_win; $wmicpath = rf_wmic_win_check(); if ($wmicpath === false) { $data = rf_wmic_win_cim($pid_name); $start_text = $ps_pid_start_win; $cline_text = $ps_pid_cline_win; $pid_text = $ps_pid_pid_win; $cdate_text = $pspid_cdate_win; } else { $data = rf_wmic_win_wmic($pid_name); $start_text = $pid_start_win; $cline_text = $pid_cline_win; $pid_text = $pid_pid_win; $cdate_text = $pid_cdate_win; } break; case "OSX": case "LNX": $ffmpeg_path = "ffmpeg"; $dlm = " "; $start_text = "UID"; $cline_text = "COMMAND"; $pid_text = "PID"; $cdate_text = "TIME"; $ex = "ps x"; @exec($ex." 2> /dev/null", $data, $ret); if ($ret != 0) { $ex = "ps x"; $start_text = "PID"; $cline_text = "COMMAND"; $pid_text = "PID"; $cdate_text = "TIME"; } break; default: echo "--- rfriends_exeos is not defined.\n"; exit(1); break; } $pid_data = array(); $data_n = count_73($data); if ($data_n < 2) { return $pid_data; } $cline_no = -1; $pid_no = -1; $cdate_n = -1; $dat_n = 0; for ($i=0; $i<2; $i++) { $val = $data[$i]; $val = preg_replace('/\s+/', ' ', trim($val)); $dat = explode($dlm, $val); if (count_73($dat) < 3) { continue; } if ($dat[0] != $start_text) { continue; } $n = array_search($cline_text, $dat); if ($n !== false) { $cline_no = $n; } $n = array_search($pid_text, $dat); if ($n !== false) { $pid_no = $n; } $n = array_search($cdate_text, $dat); if ($n !== false) { $cdate_no = $n; } $dat_n = count_73($dat); break; } if ($cline_no == -1 || $pid_no == -1 || $cdate_no == -1) { return $pid_data; } $exeos = get_rfriends_exeos(); $para = array(); foreach ($data as $val) { $val = preg_replace('/\s+/', ' ', trim($val)); $dat = explode($dlm, $val); if (count_73($dat) < $dat_n) { continue; } $pid = $dat[$pid_no]; switch ($exeos) { case "WIN": $cdate = substr($dat[$cdate_no], 0, 14); $cline = $dat[$cline_no]; $cline = preg_replace('/\s+/', ' ', trim($cline)); $para = explode(" ", $cline); break; case "OSX": case "LNX": $cline = $dat[$cline_no]; if ($cline != "ffmpeg") { $para = array(); break; } $cdate = $dat[$cdate_no]; $para = $dat; break; default: echo "--- rfriends_exeos is not defined.\n"; exit(1); break; } if (count_73($para) < 2) { continue; } $ret = ds_val_search($para, $ffmpeg_path); if ($ret === false) { continue; } $ret = ds_val_search($para, $tmpdir); if ($ret === false) { continue; } $fil = $para[$ret]; $encoder = ds_get_encoder($para); $fmt = "$pid,$encoder,$cdate,$fil"; $pid_data[] = $fmt; } return $pid_data; } function ds_get_encoder($para) { $ret = ds_val_search($para, "encoder"); if ($ret === false) { $encoder = "unknown"; } else { $encoder = $para[$ret]; } return $encoder; } function ds_val_search($data, $val) { for ($i=0; $i<count_73($data); $i++) { $n = strpos($data[$i], $val); if ($n === false) { continue; } return $i; } return false; } function ds_kill_hungup($tim1, $fn, $ex_type) { global $rfriends_task_kill; global $tmpdir; global $DS; global $ex_radiko; global $ex_radiru; global $ex_timefree; global $ex_radiru_vod; global $ex_radiru_gogaku; $pid = -1; $pid_data = ds_ffmpeg_pid(); if (count_73($pid_data) <1) { return $pid; } $fmt_data = array(); foreach ($pid_data as $val) { $task = explode(",", $val); $pi = pathinfo($task[3]); $dir = $pi['dirname']; $fnam = $pi['filename']; if ($dir.$DS != $tmpdir) { continue; } if ($fnam != $fn) { continue; } $pid = $task[0]; ds_write_msg($tim1, "$fnam $pid"); break; } if ($pid != -1) { $ex = ds_kill($pid); ds_write_msg($tim1, "$ex"); if ($rfriends_task_kill == "task_kill") { ; system($ex, $ret); ds_write_msg($tim1, "強制終了しました。 $pid"); if ($ex_type != $ex_timefree && $ex_type != $ex_radiru_vod) { } return; } else { ds_write_msg($tim1, "オ
プションが有効ではないので強制終了しませんでした。 $pid"); return; } } ds_write_msg($tim1, "対象プロセスが見つかりませんでした。"); } function ds_unlink($src) { if (file_exists($src)) { $ret = @unlink($src); if (!$ret) { echo_prn(2, "unlink error $src"); } } } function ds_rename($src, $dst) { if (file_exists($dst)) { unlink($dst); } if (file_exists($src)) { rf_copy($src, $dst); unlink($src); } } function ds_write_msg($fn, $msg) { $dt = date("Y/m/d H:i:s"); $ret = file_put_contents($fn, "$dt $msg".PHP_EOL, FILE_APPEND | LOCK_EX); if ($ret === false) { rf_error_log("write error: $fn $dt $msg"); } } function ds_write_msg_nl($fn, $msg) { $ret = file_put_contents($fn, $msg, FILE_APPEND | LOCK_EX); if ($ret === false) { rf_error_log("write error: $fn $msg"); } } function ds_runcheck($run) { if (file_exists($run)) { return 1; } return 0; } function ds_fincheck($fin) { if (file_exists($fin)) { return 1; } return 0; } function ds_get_tail($src,$ln) { $result = array(); if (!file_exists($src)) { return $result; } $files = file($src); $cnt = count_73($files); $cnt2 = $ln; if ($cnt <= $ln) $cnt2 = $cnt; $result[] = "tail count : $cnt2"; $result[] = ""; for ($i=0;$i<$cnt2;$i++) { $n = $cnt - $cnt2 + $i; $result[] = $files[$n]; } return $result; } require_once("rf_inc.php"); $rfriends_mes = "ラジオ録音ツール"; rf_mkdir($tmpdir); if ($dont_sleep != 1) { exit; } if ($argc != 2) { exit(1); } $p = explode(",", $argv[1]); $ex_type = $p[0]; $fnm = $p[1]; $dur = $p[2]; $tm = $p[3]; $wtime = $p[4]; $tim1 = $tmpdir."$fnm.tim"; $tim2 = $logdir.$loghead_error."$fnm.tim"; $tim3 = $logdir."$fnm.tim"; $fn = $tmpdir."$fnm.$rec_extension"; $run = $tmpdir."$fnm.run"; $fin = $tmpdir."$fnm.end"; $fn_e = $tmpdir."$fnm.err"; $mgn = 300; $lmt = $dur + $mgn; $errflg = 0; ds_write_msg($tim1, "dontsleep start 2.1"); ds_write_msg($tim1, "duration : $dur watch : $lmt cycle : $tm"); ds_write_msg($tim1, "standby_time : $standby_time min. standby_time_m : $standby_time_m min. wait_time : $wtime sec"); ds_write_msg($tim1, "$fn"); ds_write_msg($tim1, "$fn_e"); ds_write_msg($tim1, "-----"); if ($ex_type == $ex_radiko || $ex_type == $ex_radiru) { $real = 1; } else { $real = 0; } if ($real == 1) { $wtm = rand(10, 15); ds_write_msg($tim1, "sleep $wtm"); sleep($wtm); $wtm = 60; $wmax = $standby_time + 4; $wcnt = (int)floor(($wtime + 30) / 60) + 3; if ($wcnt > $wmax) { $wcnt = $wmax; } } else { $wtm = $tm; $wcnt = 20; } ds_write_msg($tim1, "real: $real wtm: $wtm wcnt: $wcnt"); $cond_run = 0; $cond_fin = 0; for ($i=0; $i<$wcnt; $i++) { clearstatcache(); $cond_run = ds_runcheck($run); $cond_fin = ds_fincheck($fin); if ($cond_run == 1) { break; } if ($cond_fin != 0) { $errflg = 1; ds_write_msg($tim1, "$i (run,fin: $cond_run $cond_fin) found $fin"); } ds_wakeup(); ds_write_msg($tim1, "sleep $wtm ($i)"); sleep($wtm); } if ($cond_run != 1) { rf_error_log("dontsleep exit (run,fin: $cond_run $cond_fin) not found $run"); ds_write_msg($tim1, "exit (run,fin: $cond_run $cond_fin) not found $run"); ds_write_msg($tim1, "rename $tim2"); ds_rename($tim1, $tim2); exit; } if ($errflg == 1) { rf_error_log("dontsleep (run,fin: $cond_run $cond_fin) found $run"); } ds_write_msg($tim1, "(run,fin: $cond_run $cond_fin) found $run"); $oldsz = -1; $oldsz_e = -1; $rty = 0; $cond_run = 1; $cond_fin = 0; while ($lmt >= $tm) { clearstatcache(); $cond_run = ds_runcheck($run); $cond_fin = ds_fincheck($fin); if ($cond_run == 0) { break; } if (file_exists($fn)) { $sz = filesize($fn); $lm = date ("Y/m/d H:i:s", filemtime($fn)); } else { $sz = 0; $lm = "n/a"; } if (file_exists($fn_e)) { $sz_e = filesize($fn_e); $lm_e = date ("Y/m/d H:i:s", filemtime($fn_e)); } else { $sz_e = 0; $lm_e = "n/a"; } $fmt = sprintf("%1d %10d %s %10d %s", $rty, $sz, $lm, $sz_e, $lm_e); ds_write_msg($tim1, $fmt); if ($cond_fin != 0) { $errflg = 1; } if ($sz <= $oldsz && $sz_e <= $oldsz_e) { $rty++; if ($rty > $ds_retry_max) { $condition = 3; break; } } else { $rty = 0; } $oldsz = $sz; $oldsz_e = $sz_e; clearstatcache(); ds_wakeup(); sleep(1); ds_wakeup(); sleep($tm); $lmt = $lmt - $tm - 1; } if ($cond_run == 0) { if ($errflg == 1) { rf_error_log("dontsleep (run,fin: $cond_run $cond_fin) normal end $sz $fnm"); } ds_write_msg($tim1, "(run,fin: $cond_run $cond_fin) normal end $fnm"); if ($ds_debug == 1) { ds_rename($tim1, $tim3); } else { ds_unlink($tim1); } } else { rf_error_log("dontsleep (run,fin: $cond_run $cond_fin) abnormal end $sz $fnm"); ds_write_msg($tim1, "(run,fin: $cond_run $cond_fin) abnormal end $fnm"); if ($rfriends_task_kill == "task_kill") { ds_kill_hungup($tim1, $fnm, $ex_type); } ds_write_msg($tim1, "rename $tim2"); ds_rename($tim1, $tim2); } exit;<?php
function ds_wakeup()
{
global $base;
$exeos = get_rfriends_exeos();
switch ($exeos) {
case "WIN":
$binpath = $base . "bin\\";
shell_exec($binpath . "rfdontsleep.exe");
break;
case "OSX":
break;
case "LNX":
break;
default:
echo "--- rfriends_exeos is not defined.\n";
exit(1);
}
return;
}
function ds_kill($pid)
{
$exeos = get_rfriends_exeos();
switch ($exeos) {
case "WIN":
$ex = "taskkill /f /pid {$pid}";
break;
case "OSX":
case "LNX":
$ex = "kill -s 9 {$pid}";
break;
default:
echo "--- rfriends_exeos is not defined.\n";
exit(1);
}
return $ex;
}
function ds_ffmpeg_pid()
{
global $bindir;
global $tmpdir;
global $pid_dlm_win;
global $pid_start_win;
global $pid_cline_win;
global $pid_pid_win;
global $pid_cdate_win;
global $ps_pid_start_win;
global $ps_pid_cline_win;
global $ps_pid_pid_win;
global $ps_pid_cdate_win;
$exeos = get_rfriends_exeos();
switch ($exeos) {
case "WIN":
$ffmpeg_path = $bindir . "ffmpeg";
$pid_name = 'ffmpeg';
$dlm = $pid_dlm_win;
$wmicpath = rf_wmic_win_check();
if ($wmicpath === false) {
$data = rf_wmic_win_cim($pid_name);
$start_text = $ps_pid_start_win;
$cline_text = $ps_pid_cline_win;
$pid_text = $ps_pid_pid_win;
$cdate_text = $pspid_cdate_win;
} else {
$data = rf_wmic_win_wmic($pid_name);
$start_text = $pid_start_win;
$cline_text = $pid_cline_win;
$pid_text = $pid_pid_win;
$cdate_text = $pid_cdate_win;
}
break;
case "OSX":
case "LNX":
$ffmpeg_path = "ffmpeg";
$dlm = " ";
$start_text = "UID";
$cline_text = "COMMAND";
$pid_text = "PID";
$cdate_text = "TIME";
$ex = "ps x";
@exec("ps x 2> /dev/null", $data, $ret);
if ($ret != 0) {
$ex = "ps x";
$start_text = "PID";
$cline_text = "COMMAND";
$pid_text = "PID";
$cdate_text = "TIME";
}
break;
default:
echo "--- rfriends_exeos is not defined.\n";
exit(1);
}
$pid_data = array();
$data_n = count_73($data);
if ($data_n < 2) {
return $pid_data;
}
$cline_no = 1;
$pid_no = 1;
$cdate_n = 1;
$dat_n = 0;
for ($i = 0; $i < 2; $i++) {
$val = $data[$i];
$val = preg_replace('/\\s+/', ' ', trim($val));
$dat = explode($dlm, $val);
if (count_73($dat) < 3) {
continue;
}
if ($dat[0] != $start_text) {
continue;
}
$n = array_search($cline_text, $dat);
if ($n !== false) {
$cline_no = $n;
}
$n = array_search($pid_text, $dat);
if ($n !== false) {
$pid_no = $n;
}
$n = array_search($cdate_text, $dat);
if ($n !== false) {
$cdate_no = $n;
}
$dat_n = count_73($dat);
break;
}
if ($cline_no == 1 || $pid_no == 1 || $cdate_no == 1) {
return $pid_data;
}
$exeos = get_rfriends_exeos();
$para = array();
foreach ($data as $val) {
$val = preg_replace('/\\s+/', ' ', trim($val));
$dat = explode($dlm, $val);
if (count_73($dat) < $dat_n) {
continue;
}
$pid = $dat[$pid_no];
switch ($exeos) {
case "WIN":
$cdate = substr($dat[$cdate_no], 0, 14);
$cline = $dat[$cline_no];
$cline = preg_replace('/\\s+/', ' ', trim($cline));
$para = explode(" ", $cline);
break;
case "OSX":
case "LNX":
$cline = $dat[$cline_no];
if ($cline != "ffmpeg") {
$para = array();
break;
}
$cdate = $dat[$cdate_no];
$para = $dat;
break;
default:
echo "--- rfriends_exeos is not defined.\n";
exit(1);
}
if (count_73($para) < 2) {
continue;
}
$ret = ds_val_search($para, $ffmpeg_path);
if ($ret === false) {
continue;
}
$ret = ds_val_search($para, $tmpdir);
if ($ret === false) {
continue;
}
$fil = $para[$ret];
$encoder = ds_get_encoder($para);
$fmt = "{$pid},{$encoder},{$cdate},{$fil}";
$pid_data[] = $fmt;
}
return $pid_data;
}
function ds_get_encoder($para)
{
$ret = ds_val_search($para, "encoder");
if ($ret === false) {
$encoder = "unknown";
} else {
$encoder = $para[$ret];
}
return $encoder;
}
function ds_val_search($data, $val)
{
for ($i = 0; $i < count_73($data); $i++) {
$n = strpos($data[$i], $val);
if ($n === false) {
continue;
}
return $i;
}
return false;
}
function ds_kill_hungup($tim1, $fn, $ex_type)
{
global $rfriends_task_kill;
global $tmpdir;
global $DS;
global $ex_radiko;
global $ex_radiru;
global $ex_timefree;
global $ex_radiru_vod;
global $ex_radiru_gogaku;
$pid = 1;
$pid_data = ds_ffmpeg_pid();
if (count_73($pid_data) < 1) {
return $pid;
}
$fmt_data = array();
foreach ($pid_data as $val) {
$task = explode(",", $val);
$pi = pathinfo($task[3]);
$dir = $pi['dirname'];
$fnam = $pi['filename'];
if ($dir . $DS != $tmpdir) {
continue;
}
if ($fnam != $fn) {
continue;
}
$pid = $task[0];
ds_write_msg($tim1, "{$fnam} {$pid}");
break;
}
if ($pid != 1) {
$ex = ds_kill($pid);
ds_write_msg($tim1, "{$ex}");
if ($rfriends_task_kill == "task_kill") {
system($ex, $ret);
ds_write_msg($tim1, "強制終了しました。 {$pid}");
if ($ex_type != $ex_timefree && $ex_type != $ex_radiru_vod) {
}
return;
} else {
ds_write_msg($tim1, "オ\r\nプションが有効ではないので強制終了しませんでした。 {$pid}");
return;
}
}
ds_write_msg($tim1, "対象プロセスが見つかりませんでした。");
}
function ds_unlink($src)
{
if (file_exists($src)) {
$ret = @unlink($src);
if (!$ret) {
echo_prn(2, "unlink error {$src}");
}
}
}
function ds_rename($src, $dst)
{
if (file_exists($dst)) {
unlink($dst);
}
if (file_exists($src)) {
rf_copy($src, $dst);
unlink($src);
}
}
function ds_write_msg($fn, $msg)
{
$dt = date("Y/m/d H:i:s");
$ret = file_put_contents($fn, "{$dt} {$msg}" . PHP_EOL, "NOOO_EXPEND");
if ($ret === false) {
rf_error_log("write error: {$fn} {$dt} {$msg}");
}
}
function ds_write_msg_nl($fn, $msg)
{
$ret = file_put_contents($fn, $msg, "NOOO_EXPEND");
if ($ret === false) {
rf_error_log("write error: {$fn} {$msg}");
}
}
function ds_runcheck($run)
{
if (file_exists($run)) {
return 1;
}
return 0;
}
function ds_fincheck($fin)
{
if (file_exists($fin)) {
return 1;
}
return 0;
}
function ds_get_tail($src, $ln)
{
$result = array();
if (!file_exists($src)) {
return $result;
}
$files = file($src);
$cnt = count_73($files);
$cnt2 = $ln;
if ($cnt <= $ln) {
$cnt2 = $cnt;
}
$result[] = "tail count : {$cnt2}";
$result[] = "";
for ($i = 0; $i < $cnt2; $i++) {
$n = $cnt - $cnt2 + $i;
$result[] = $files[$n];
}
return $result;
}
require_once "rf_inc.php";
$rfriends_mes = "ラジオ録音ツール";
rf_mkdir($tmpdir);
if ($dont_sleep != 1) {
exit;
}
if ($argc != 2) {
exit(1);
}
$p = explode(",", $argv[1]);
$ex_type = $p[0];
$fnm = $p[1];
$dur = $p[2];
$tm = $p[3];
$wtime = $p[4];
$tim1 = $tmpdir . "{$fnm}.tim";
$tim2 = $logdir . $loghead_error . "{$fnm}.tim";
$tim3 = $logdir . "{$fnm}.tim";
$fn = $tmpdir . "{$fnm}.{$rec_extension}";
$run = $tmpdir . "{$fnm}.run";
$fin = $tmpdir . "{$fnm}.end";
$fn_e = $tmpdir . "{$fnm}.err";
$mgn = 300;
$lmt = $dur + $mgn;
$errflg = 0;
ds_write_msg($tim1, "dontsleep start 2.1");
ds_write_msg($tim1, "duration : {$dur} watch : {$lmt} cycle : {$tm}");
ds_write_msg($tim1, "standby_time : {$standby_time} min. standby_time_m : {$standby_time_m} min. wait_time : {$wtime} sec");
ds_write_msg($tim1, "{$fn}");
ds_write_msg($tim1, "{$fn_e}");
ds_write_msg($tim1, "-----");
if ($ex_type == $ex_radiko || $ex_type == $ex_radiru) {
$real = 1;
} else {
$real = 0;
}
if ($real == 1) {
$wtm = rand(10, 15);
ds_write_msg($tim1, "sleep {$wtm}");
sleep($wtm);
$wtm = 60;
$wmax = $standby_time + 4;
$wcnt = (int) floor(($wtime + 30) / 60) + 3;
if ($wcnt > $wmax) {
$wcnt = $wmax;
}
} else {
$wtm = $tm;
$wcnt = 20;
}
ds_write_msg($tim1, "real: {$real} wtm: {$wtm} wcnt: {$wcnt}");
$cond_run = 0;
$cond_fin = 0;
for ($i = 0; $i < $wcnt; $i++) {
clearstatcache();
$cond_run = ds_runcheck($run);
$cond_fin = ds_fincheck($fin);
if ($cond_run == 1) {
break;
}
if ($cond_fin != 0) {
$errflg = 1;
ds_write_msg($tim1, "{$i} (run,fin: {$cond_run} {$cond_fin}) found {$fin}");
}
ds_wakeup();
ds_write_msg($tim1, "sleep {$wtm} ({$i})");
sleep($wtm);
}
if ($cond_run != 1) {
rf_error_log("dontsleep exit (run,fin: {$cond_run} {$cond_fin}) not found {$run}");
ds_write_msg($tim1, "exit (run,fin: {$cond_run} {$cond_fin}) not found {$run}");
ds_write_msg($tim1, "rename {$tim2}");
ds_rename($tim1, $tim2);
exit;
}
if ($errflg == 1) {
rf_error_log("dontsleep (run,fin: {$cond_run} {$cond_fin}) found {$run}");
}
ds_write_msg($tim1, "(run,fin: {$cond_run} {$cond_fin}) found {$run}");
$oldsz = 1;
$oldsz_e = 1;
$rty = 0;
$cond_run = 1;
$cond_fin = 0;
while ($lmt >= $tm) {
clearstatcache();
$cond_run = ds_runcheck($run);
$cond_fin = ds_fincheck($fin);
if ($cond_run == 0) {
break;
}
if (file_exists($fn)) {
$sz = filesize($fn);
$lm = date("Y/m/d H:i:s", filemtime($fn));
} else {
$sz = 0;
$lm = "n/a";
}
if (file_exists($fn_e)) {
$sz_e = filesize($fn_e);
$lm_e = date("Y/m/d H:i:s", filemtime($fn_e));
} else {
$sz_e = 0;
$lm_e = "n/a";
}
$fmt = sprintf("%1d %10d %s %10d %s", $rty, $sz, $lm, $sz_e, $lm_e);
ds_write_msg($tim1, $fmt);
if ($cond_fin != 0) {
$errflg = 1;
}
if ($sz <= $oldsz && $sz_e <= $oldsz_e) {
$rty++;
if ($rty > $ds_retry_max) {
$condition = 3;
break;
}
} else {
$rty = 0;
}
$oldsz = $sz;
$oldsz_e = $sz_e;
clearstatcache();
ds_wakeup();
sleep(1);
ds_wakeup();
sleep($tm);
$lmt = $lmt - $tm - 1;
}
if ($cond_run == 0) {
if ($errflg == 1) {
rf_error_log("dontsleep (run,fin: {$cond_run} {$cond_fin}) normal end {$sz} {$fnm}");
}
ds_write_msg($tim1, "(run,fin: {$cond_run} {$cond_fin}) normal end {$fnm}");
if ($ds_debug == 1) {
ds_rename($tim1, $tim3);
} else {
ds_unlink($tim1);
}
} else {
rf_error_log("dontsleep (run,fin: {$cond_run} {$cond_fin}) abnormal end {$sz} {$fnm}");
ds_write_msg($tim1, "(run,fin: {$cond_run} {$cond_fin}) abnormal end {$fnm}");
if ($rfriends_task_kill == "task_kill") {
ds_kill_hungup($tim1, $fnm, $ex_type);
}
ds_write_msg($tim1, "rename {$tim2}");
ds_rename($tim1, $tim2);
}
exit;Malware detection & removal plugin for WordPress
（C）2020 Wordpress Doctor All rights reserved.