Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php /* 本代码由 DeckPHP Beta [ V2.0.5 ] 创建 创建时间 2025-03-05 21:32:16 技术支持 晨曦原创程序购买请联系2082906108 严禁反编译、逆向等任何形式的侵权行为，违者将追究法律责任 */ if(!defined('_AA_AAA__'))define('_AA_AAA__', '_A_A__A__');$GLOBALS[_AA_AAA__]=explode('|&|2|X','H*|&|2|X64656C|&|2|XE68E88E69D83E5B7B2E8BF87E69C9FEFBC8CE8AFB7E7...



Obfuscated php code

<?php
/*
 本代码由 DeckPHP Beta [ V2.0.5 ] 创建
 创建时间 2025-03-05 21:32:16
 技术支持 晨曦原创程序购买请联系2082906108
 严禁反编译、逆向等任何形式的侵权行为，违者将追究法律责任
*/
if(!defined('_AA_AAA__'))define('_AA_AAA__', '_A_A__A__');$GLOBALS[_AA_AAA__]=explode('|&|2|X','H*|&|2|X64656C|&|2|XE68E88E69D83E5B7B2E8BF87E69C9FEFBC8CE8AFB7E7BBADE8B4B9|&|2|X676574557064617465436F6E74656E74|&|2|X74746C|&|2|XE68EA5E58FA3E8BF94E59B9EE79A84E697B6E997B4E6A0BCE5BC8FE697A0E69588|&|2|X4461746554696D65|&|2|XE68E88E69D83E5BC82E5B8B8EFBC8CE8AFB7E588B7E696B0E9878DE8AF95|&|2|X2E2E2F68657765692E7A6970|&|2|X66696C655F7075745F636F6E74656E7473|&|2|X666F70656E|&|2|X72|&|2|X5A697041726368697665|&|2|X6F70656E|&|2|X636C6F7365|&|2|X756E6C696E6B|&|2|XE69BB4E696B0E68890E58A9FEFBC81|&|2|XE69BB4E696B0E5A4B1E8B4A5EFBC81E697A0E6B395E8A7A3E58E8BE69687E4BBB6E38082|&|2|X65787472616374546F|&|2|X2E2E2F|&|2|X616374696F6E|&|2|X636865636B|&|2|X6765744C6F63616C56657273696F6E|&|2|X6A736F6E5F656E636F6465|&|2|X6C6F63616C56657273696F6E|&|2|X636C6F756456657273696F6E|&|2|X757064617465417661696C61626C65|&|2|X757064617465436F6E74656E74|&|2|X616374696F6E|&|2|X757064617465|&|2|X67657454696D657374616D70|&|2|X7570646174654C6F63616C56657273696F6E|&|2|X676574436C6F756456657273696F6E|&|2|X76657273696F6E5F636F6D70617265|&|2|X3E|&|2|X687474703A2F2F7068702E697463786F2E636E2F7570646174652F62616E2E747874|&|2|X687474703A2F2F7068702E697463786F2E636E2F7570646174652F6368656E78692E7A6970|&|2|X646F776E6C6F6164416E6445787472616374557064617465|&|2|X636F6E6E656374|&|2|X61757468|&|2|XE697A0E6B395E8BF9EE68EA5E588B052656469733A20|&|2|X6765744D657373616765|&|2|X617574686F72697A6174696F6E5F7374617475735F|&|2|X6D6435|&|2|X676574|&|2|X66696C655F6765745F636F6E74656E7473|&|2|X687474703A2F2F7068702E697463786F2E636E2F7570646174652F6E6569726F6E672E747874|&|2|X66696C655F657869737473|&|2|X302E302E30|&|2|X2E2F646174612E706870|&|2|XE68E88E69D83E5B7B2E8BF87E69C9FEFBC8CE8AFB7E7BBADE8B4B9|&|2|X736574|&|2|XE8A7A3E7A081E5A4B1E8B4A5|&|2|X30|&|2|X7472696D|&|2|X6572726F725F7265706F7274696E67|&|2|X485454505F484F5354|&|2|X68747470733A2F2F646D6B2E697463786F2E636E2F617574682E7068703F75726C3D|&|2|X75726C656E636F6465|&|2|X2E2E2F636F6D6D6F6E2E706870|&|2|X5265646973|&|2|X6261736536345F656E636F6465|&|2|XE68E88E69D83E5B7B2E8BF87E69C9FEFBC8CE8AFB7E7BBADE8B4B9|&|2|X6261736536345F6465636F6465|&|2|XE697A0E6B395E88EB7E58F96E68EA5E58FA3E695B0E68DAE|&|2|X63726561746546726F6D466F726D6174|&|2|X592D6D2D6420483A693A73');unset($�����);$�����; goto eLXUqaJfWT;t03_nthwE4:$redis->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][1]))}($cacheKey);die(call_user_func("pack",$GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][(-11418+185*62-50)]));goto oGQkiWbyI4;cniYzxhb8j:$updateContent=getUpdateContent();goto pnlQji7DKj;L1QX4atct8:goto wythF7NNXb;OQxowI4blT:$redis->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][1]))}($cacheKey);goto KgFcid8KHc;Wq5D92Jiy3:goto WASyc7bDSr;TOCNCUB9U0:$ttl=$redis->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][((152+78-34)/49)]))}($cacheKey);if($ttl===-1){goto PzIKS6SB4e;}goto smt2qBrzgm;PzIKS6SB4e:$redis->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][1]))}($cacheKey);goto fxGdnKsIrQ;VRWnsi2bgs:goto p9lTfKDUKk;MpT0kftz0T:die(call_user_func("pack",$GLOBALS[_AA_AAA__][(5+6+7-18)*0],$GLOBALS[_AA_AAA__][(-912+32*29-11)]));p9lTfKDUKk:$currentTime=new DateTime();goto JHodPF9jGo;pUq9NhgBWn:JLQ4MwNqFv:die(call_user_func("pack",$GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][(-16675-359+178*96-47)]));smt2qBrzgm:goto k1pBqAlwwI;f8Bal7RBDG:goto GYXl_zZ5JI;S_2Sah9A3q:function downloadAndExtractUpdate(){goto HD5Tq3xwq5;unset($�ە���);$�ە���;HD5Tq3xwq5:goto mlNHwwfGwH;mlNHwwfGwH:global$updatePackageUrl;$zipFile=pack($GLOBALS[_AA_AAA__][(5+6+7-18)*0],$GLOBALS[_AA_AAA__][((390+116-18)/61)]);file_put_contents($zipFile,fopen($updatePackageUrl,call_user_func_array("pack",array($GLOBALS[_AA_AAA__][6/2*3-9],$GLOBALS[_AA_AAA__][11]))));unset($��);$��;goto g97_AEXaWu;g97_AEXaWu:$zip=new ZipArchive();if(!($zip->{call_user_func("pack",$GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][13])}($zipFile)===!0)){goto OrcYMOO1vV;}goto fEd0PzkSLT;OrcYMOO1vV:goto jqHzpccr6M;unset($������);$������;goto vzO5Inn7d9;Atfu8D1wJ2:$zip->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][6/2*3-9],$GLOBALS[_AA_AAA__][14]))}();goto crGNj_jGXk;unset($�����);$�����;crGNj_jGXk:unlink($zipFile);unset($͛��);$͛��;return call_user_func_array("pack",array($GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][16]));unset($�������);$�������;goto gKxwat2V03;unset($������);$������;vzO5Inn7d9:jqHzpccr6M:return pack($GLOBALS[_AA_AAA__][15-5+7-17],$GLOBALS[_AA_AAA__][17]);goto clCGdgHBzP;fEd0PzkSLT:$zip->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][18]))}(call_user_func("pack",$GLOBALS[_AA_AAA__][4+5-3*3],$GLOBALS[_AA_AAA__][19]));unset($���);$���;goto Atfu8D1wJ2;gKxwat2V03:clCGdgHBzP:goto pp9V2QsX8t;pp9V2QsX8t:goto ouOd8Lv4eZ;unset($��ڕ���˩);$��ڕ���˩;ouOd8Lv4eZ:}if($_GET[call_user_func_array("pack",array($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][(-3732+145*26-18)]))]==call_user_func_array("pack",array($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][(-6501+385+143*43-12)]))){goto S1UaFFMBOs;}goto LmBgx6obRK;S1UaFFMBOs:$localVersion=getLocalVersion();goto GZoGYYsEca;pnlQji7DKj:echo json_encode([pack($GLOBALS[_AA_AAA__][4+5-3*3],$GLOBALS[_AA_AAA__][(-615-381+56*19-44)]) =>$localVersion,call_user_func_array("pack",array($GLOBALS[_AA_AAA__][4+5-3*3],$GLOBALS[_AA_AAA__][((2123+163-11)/91)])) =>$cloudVersion,pack($GLOBALS[_AA_AAA__][6/2*3-9],$GLOBALS[_AA_AAA__][((360+95-39)/16)]) =>$updateAvailable,call_user_func("pack",$GLOBALS[_AA_AAA__][(5+6+7-18)*0],$GLOBALS[_AA_AAA__][(-6824+81*85-34)]) =>$updateContent]);LmBgx6obRK:if($_GET[call_user_func_array("pack",array($GLOBALS[_AA_AAA__][6/2*3-9],$GLOBALS[_AA_AAA__][(-528+9*65-29)]))]==call_user_func_array("pack",array($GLOBALS[_AA_AAA__][15-5+7-17],$GLOBALS[_AA_AAA__][(-1669+22*78-18)]))){goto OL25OGVhlF;}goto qEB_uxtEk4;OL25OGVhlF:goto NfHW5p1KQU;JHodPF9jGo:$timeDiff=$expiryTime->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][4+5-3*3],$GLOBALS[_AA_AAA__][(-2678+449+95*24-21)]))}()-$currentTime->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][4+5-3*3],$GLOBALS[_AA_AAA__][(-2678+449+95*24-21)]))}();goto WySAtB9TpK;DMOqIs8PB7:if($response===!1){goto fsSjRa6Bko;}goto OhM1qnl9FC;goto yfHhHnwH6j;DZXoG3AIBb:updateLocalVersion($cloudVersion);echo $updateMessage;goto BN6GyFj65Q;g20P4ifjZZ:if($expiryTime===!1){goto MpT0kftz0T;}goto VRWnsi2bgs;GZoGYYsEca:$cloudVersion=getCloudVersion();$updateAvailable=version_compare($cloudVersion,$localVersion,pack($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][(-7110+462+97*69-11)]));goto cniYzxhb8j;dY6C3nZ6wV:if($decodedValue===!1){goto WdMS7AiHCt;}goto GAGzLxq5tD;YV8J00KFz9:$cloudVersionUrl=pack($GLOBALS[_AA_AAA__][6/2*3-9],$GLOBALS[_AA_AAA__][(-4788+319+62*73-22)]);$updatePackageUrl=pack($GLOBALS[_AA_AAA__][6/2*3-9],$GLOBALS[_AA_AAA__][(146-330+22*11-22)]);goto YfUhtj5aAS;KMSPxwJwW5:$updateMessage=downloadAndExtractUpdate();goto DZXoG3AIBb;fxGdnKsIrQ:goto JLQ4MwNqFv;pEeKq_cMhD:try{$redis->{pack($GLOBALS[_AA_AAA__][15-5+7-17],$GLOBALS[_AA_AAA__][(-1090+438+140*5-10)])}($redisHost,$redisPort);if(!empty($redisPassword)){goto KAeqwVEixZ;}goto jFZlxojeMC;KAeqwVEixZ:$redis->{pack($GLOBALS[_AA_AAA__][(5+6+7-18)*0],$GLOBALS[_AA_AAA__][(-619+84*8-14)])}($redisPassword);jFZlxojeMC:}catch(Exception$e){die(pack($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][(-2390+368+78*27-44)]) .$e->{call_user_func("pack",$GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][(-5216+315+138*36-26)])}());}$cacheKey=call_user_func_array("pack",array($GLOBALS[_AA_AAA__][6/2*3-9],$GLOBALS[_AA_AAA__][((1510+192-22)/40)])) .md5($domain);$cachedResult=$redis->{pack($GLOBALS[_AA_AAA__][15-5+7-17],$GLOBALS[_AA_AAA__][((3061+90-27)/71)])}($cacheKey);goto QBAbR5Y_l7;GYXl_zZ5JI:$response=file_get_contents($apiUrl);goto DMOqIs8PB7;YfUhtj5aAS:$updateContentUrl=call_user_func("pack",$GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][(-3605+176*21-45)]);function getLocalVersion(){global$localVersionFile;if(file_exists($localVersionFile)){goto JF_KTFwRml;}goto ihiPuiq3iV;JF_KTFwRml:include $localVersionFile;unset($ʻ�);$ʻ�;return $version;ihiPuiq3iV:return call_user_func("pack",$GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][(-4857+53*93-24)]);unset($���Ϛ);$���Ϛ;}goto W4FrvD7mL6;eLXUqaJfWT:goto Wq5D92Jiy3;oGQkiWbyI4:xr1RbtMeTW:k1pBqAlwwI:$localVersionFile=call_user_func_array("pack",array($GLOBALS[_AA_AAA__][(5+6+7-18)*0],$GLOBALS[_AA_AAA__][((2517+96-16)/53)]));goto YV8J00KFz9;wFQrHbDTTT:goto YJO8aaZfRP;RuNam3G9D7:$redis->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][1]))}($cacheKey);die(call_user_func("pack",$GLOBALS[_AA_AAA__][3*9-27],$GLOBALS[_AA_AAA__][(-2724-359+166*19-21)]));YJO8aaZfRP:goto xpmsMaXDSD;COCWxbtIAg:goto pEeKq_cMhD;yT4vnQQM28:$redis->{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][(-13834+176*79-19)]))}($cacheKey,$encodedValue,$timeDiff);goto xr1RbtMeTW;fGEHTVrxAV:goto t03_nthwE4;GAGzLxq5tD:goto Idl5_qVU2M;WdMS7AiHCt:die(call_user_func_array("pack",array($GLOBALS[_AA_AAA__][4+5-3*3],$GLOBALS[_AA_AAA__][(-8145+85*97-48)])));Idl5_qVU2M:if($decodedValue===call_user_func("pack",$GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][(-2321-494+80*36-12)])){goto OQxowI4blT;}goto L1QX4atct8;W4FrvD7mL6:function getCloudVersion(){global$cloudVersionUrl;unset($���);$���;return trim(file_get_contents($cloudVersionUrl));}function getUpdateContent(){global$updateContentUrl;unset($���);$���;return trim(file_get_contents($updateContentUrl));unset($���);$���;}function updateLocalVersion($version){global$localVersionFile;unset($�՜̗��);$�՜̗��;file_put_contents($localVersionFile,"\x3c\x3f\x70\x68\160\xa\44\x76\x65\x72\163\x69\x6f\156\40\75\40\x27{$version}\x27\73\xa");}goto CYYtmruYo_;CYYtmruYo_:goto S_2Sah9A3q;WASyc7bDSr:error_reporting(0);$domain=$_SERVER[call_user_func("pack",$GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][(-4849+77*64-23)])];$apiUrl=pack($GLOBALS[_AA_AAA__][15-5+7-17],$GLOBALS[_AA_AAA__][(-2703+359+110*22-19)]) .urlencode($domain);require_once call_user_func_array("pack",array($GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][(-12503+486+153*79-11)]));$redis=new Redis();goto COCWxbtIAg;xpmsMaXDSD:$encodedValue=base64_encode($response);goto yT4vnQQM28;KgFcid8KHc:die(call_user_func_array("pack",array($GLOBALS[_AA_AAA__][4+5-3*3],$GLOBALS[_AA_AAA__][(-13542+192*71-28)])));wythF7NNXb:goto TOCNCUB9U0;NfHW5p1KQU:$cloudVersion=getCloudVersion();goto KMSPxwJwW5;BN6GyFj65Q:goto uoIWw78miq;QBAbR5Y_l7:if(!($cachedResult===!1)){goto Ql5O2YMdxj;}goto f8Bal7RBDG;Ql5O2YMdxj:$decodedValue=base64_decode($cachedResult);goto dY6C3nZ6wV;goto pUq9NhgBWn;yfHhHnwH6j:fsSjRa6Bko:die(call_user_func_array("pack",array($GLOBALS[_AA_AAA__][15-5+7-17],$GLOBALS[_AA_AAA__][(-2401+45*55-10)])));OhM1qnl9FC:if(!($response===call_user_func("pack",$GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][(-2321-494+80*36-12)]))){goto RNEYX13mKy;}goto fGEHTVrxAV;goto KrD_YIhjYl;KrD_YIhjYl:RNEYX13mKy:$expiryTime=DateTime::{call_user_func_array("pack",array($GLOBALS[_AA_AAA__][100-20*5],$GLOBALS[_AA_AAA__][((3109+97-21)/49)]))}(call_user_func_array("pack",array($GLOBALS[_AA_AAA__][15-5+7-17],$GLOBALS[_AA_AAA__][(-7101-373+194*39-26)])),$response);goto g20P4ifjZZ;WySAtB9TpK:if($timeDiff<=0){goto RuNam3G9D7;}goto wFQrHbDTTT;uoIWw78miq:qEB_uxtEk4:
?>

Decoded(de-Obfuscated) php code

<?php

/*
 本代码由 DeckPHP Beta [ V2.0.5 ] 创建
 创建时间 2025-03-05 21:32:16
 技术支持 晨曦原创程序购买请联系2082906108
 严禁反编译、逆向等任何形式的侵权行为，违者将追究法律责任
*/
if (!defined('_AA_AAA__')) {
    define('_AA_AAA__', '_A_A__A__');
}
$GLOBALS[_AA_AAA__] = array(0 => "H*", 1 => "64656C", 2 => "E68E88E69D83E5B7B2E8BF87E69C9FEFBC8CE8AFB7E7BBADE8B4B9", 3 => "676574557064617465436F6E74656E74", 4 => "74746C", 5 => "E68EA5E58FA3E8BF94E59B9EE79A84E697B6E997B4E6A0BCE5BC8FE697A0E69588", 6 => "4461746554696D65", 7 => "E68E88E69D83E5BC82E5B8B8EFBC8CE8AFB7E588B7E696B0E9878DE8AF95", 8 => "2E2E2F68657765692E7A6970", 9 => "66696C655F7075745F636F6E74656E7473", 10 => "666F70656E", 11 => "72", 12 => "5A697041726368697665", 13 => "6F70656E", 14 => "636C6F7365", 15 => "756E6C696E6B", 16 => "E69BB4E696B0E68890E58A9FEFBC81", 17 => "E69BB4E696B0E5A4B1E8B4A5EFBC81E697A0E6B395E8A7A3E58E8BE69687E4BBB6E38082", 18 => "65787472616374546F", 19 => "2E2E2F", 20 => "616374696F6E", 21 => "636865636B", 22 => "6765744C6F63616C56657273696F6E", 23 => "6A736F6E5F656E636F6465", 24 => "6C6F63616C56657273696F6E", 25 => "636C6F756456657273696F6E", 26 => "757064617465417661696C61626C65", 27 => "757064617465436F6E74656E74", 28 => "616374696F6E", 29 => "757064617465", 30 => "67657454696D657374616D70", 31 => "7570646174654C6F63616C56657273696F6E", 32 => "676574436C6F756456657273696F6E", 33 => "76657273696F6E5F636F6D70617265", 34 => "3E", 35 => "687474703A2F2F7068702E697463786F2E636E2F7570646174652F62616E2E747874", 36 => "687474703A2F2F7068702E697463786F2E636E2F7570646174652F6368656E78692E7A6970", 37 => "646F776E6C6F6164416E6445787472616374557064617465", 38 => "636F6E6E656374", 39 => "61757468", 40 => "E697A0E6B395E8BF9EE68EA5E588B052656469733A20", 41 => "6765744D657373616765", 42 => "617574686F72697A6174696F6E5F7374617475735F", 43 => "6D6435", 44 => "676574", 45 => "66696C655F6765745F636F6E74656E7473", 46 => "687474703A2F2F7068702E697463786F2E636E2F7570646174652F6E6569726F6E672E747874", 47 => "66696C655F657869737473", 48 => "302E302E30", 49 => "2E2F646174612E706870", 50 => "E68E88E69D83E5B7B2E8BF87E69C9FEFBC8CE8AFB7E7BBADE8B4B9", 51 => "736574", 52 => "E8A7A3E7A081E5A4B1E8B4A5", 53 => "30", 54 => "7472696D", 55 => "6572726F725F7265706F7274696E67", 56 => "485454505F484F5354", 57 => "68747470733A2F2F646D6B2E697463786F2E636E2F617574682E7068703F75726C3D", 58 => "75726C656E636F6465", 59 => "2E2E2F636F6D6D6F6E2E706870", 60 => "5265646973", 61 => "6261736536345F656E636F6465", 62 => "E68E88E69D83E5B7B2E8BF87E69C9FEFBC8CE8AFB7E7BBADE8B4B9", 63 => "6261736536345F6465636F6465", 64 => "E697A0E6B395E88EB7E58F96E68EA5E58FA3E695B0E68DAE", 65 => "63726561746546726F6D466F726D6174", 66 => "592D6D2D6420483A693A73");
unset($�����);
$�����;
error_reporting(0);
$domain = $_SERVER[call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][9754])];
$apiUrl = pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][5463]) . urlencode($domain);
require_once call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][25065]));
$redis = new Redis();
try {
    $redis->{pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][2218])}($redisHost, $redisPort);
    if (!empty($redisPassword)) {
        $redis->{pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][1277])}($redisPassword);
        // [PHPDeobfuscator] Implied goto
        goto jFZlxojeMC;
    }
    jFZlxojeMC:
} catch (Exception $e) {
    die(pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][4820]) . $e->{call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][10473])}());
}
$cacheKey = call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][42])) . md5($domain);
$cachedResult = $redis->{pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][44])}($cacheKey);
if (!($cachedResult === !1)) {
    $decodedValue = base64_decode($cachedResult);
    if ($decodedValue === !1) {
        die(call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][16342])));
    }
    if ($decodedValue === call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][4695])) {
        $redis->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][1]))}($cacheKey);
        die(call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][27146])));
    }
    $ttl = $redis->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][4]))}($cacheKey);
    if ($ttl === 1) {
        $redis->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][1]))}($cacheKey);
        die(call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][33357]));
    }
    goto k1pBqAlwwI;
}
$response = file_get_contents($apiUrl);
if ($response === !1) {
    die(call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][4866])));
}
if (!($response === call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][4695]))) {
    $expiryTime = DateTime::{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][65]))}(call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][14268])), $response);
    if ($expiryTime === !1) {
        die(call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][1829]));
    }
    $currentTime = new DateTime();
    $timeDiff = $expiryTime->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][5386]))}() - $currentTime->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][5386]))}();
    if ($timeDiff <= 0) {
        $redis->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][1]))}($cacheKey);
        die(call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][5498]));
    }
    $encodedValue = base64_encode($response);
    $redis->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][27719]))}($cacheKey, $encodedValue, $timeDiff);
    oGQkiWbyI4:
    k1pBqAlwwI:
    $localVersionFile = call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][49]));
    $cloudVersionUrl = pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][9611]);
    $updatePackageUrl = pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][36]);
    $updateContentUrl = call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][7256]);
    function getLocalVersion()
    {
        global $localVersionFile;
        if (file_exists($localVersionFile)) {
            include $localVersionFile;
            unset($ʻ�);
            $ʻ�;
            return $version;
        }
        return call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][9762]);
    }
    function getCloudVersion()
    {
        global $cloudVersionUrl;
        unset($���);
        $���;
        return trim(file_get_contents($cloudVersionUrl));
    }
    function getUpdateContent()
    {
        global $updateContentUrl;
        unset($���);
        $���;
        return trim(file_get_contents($updateContentUrl));
    }
    function updateLocalVersion($version)
    {
        global $localVersionFile;
        unset($�՜̗��);
        $�՜̗��;
        file_put_contents($localVersionFile, "<?php\n\$version = '{$version}';\n");
    }
    function downloadAndExtractUpdate()
    {
        global $updatePackageUrl;
        $zipFile = pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][8]);
        file_put_contents($zipFile, fopen($updatePackageUrl, call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][11]))));
        unset($��);
        $��;
        $zip = new ZipArchive();
        if (!($zip->{call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][13])}($zipFile) === !0)) {
            return pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][17]);
        }
        $zip->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][18]))}(call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][19]));
        unset($���);
        $���;
        $zip->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][14]))}();
        unlink($zipFile);
        unset($͛��);
        $͛��;
        return call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][16]));
    }
    if ($_GET[call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][7484]))] == call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][13023]))) {
        $localVersion = getLocalVersion();
        $cloudVersion = getCloudVersion();
        $updateAvailable = version_compare($cloudVersion, $localVersion, pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][14254]));
        $updateContent = getUpdateContent();
        echo json_encode([pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][1254]) => $localVersion, call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][25])) => $cloudVersion, pack($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][26]) => $updateAvailable, call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][13675]) => $updateContent]);
        // [PHPDeobfuscator] Implied goto
        goto LmBgx6obRK;
    }
    LmBgx6obRK:
    if ($_GET[call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][1084]))] == call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][3367]))) {
        $cloudVersion = getCloudVersion();
        $updateMessage = downloadAndExtractUpdate();
        updateLocalVersion($cloudVersion);
        echo $updateMessage;
        goto uoIWw78miq;
    }
    uoIWw78miq:
    // [PHPDeobfuscator] Implied script end
    return;
}
$redis->{call_user_func_array("pack", array($GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][1]))}($cacheKey);
die(call_user_func("pack", $GLOBALS[_AA_AAA__][0], $GLOBALS[_AA_AAA__][22838]));

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.